Values for content-security-policy-report-only:
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https: blob:; connect-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self' 2,276
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:; 338
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.awin1.com https://lantern.roeyecdn.com https://tagmanager.google.com https://cdn.trustcommander.net https://www.dwin1.com https://www.googletagmanager.com https://maps.googleapis.com https://www.google-analytics.com https://www.googleadservices.com https://bat.bing.com https://*.doubleclick.net https://www.axa-video.de *.visualwebsiteoptimizer.com app.vwo.com https://www.google.com https://platform.commandersact.com https://connect.facebook.net https://*.aklamio.com data.axa.de snap.licdn.com blob: https://ct.pinterest.com https://s.pinimg.com https://acdn.adnxs.com https://ib.adnxs.com ; ;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com *.visualwebsiteoptimizer.com app.vwo.com s3.amazonaws.com https://googletagmanager.com https://www.googletagmanager.com ;frame-src https://www.awin1.com app.vwo.com *.visualwebsiteoptimizer.com https://entry.axa-de.intraxa/ https://entry.axa.de https://www.axa-video.de https://www.axa.de https://inte.axa.de https://*.doubleclick.net https://cdn.trustcommander.net https://www.dwin1.com https://connect.facebook.net https://www.facebook.com https://td.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com https://ct.pinterest.com https://googletagmanager.com https://insight.adsrvr.org 'self' https://www.googletagmanager.com;base-uri 'self';object-src 'none';img-src 'self' data: https://ad.doubleclick.net https://*.ads.linkedin.com data.axa.de *.visualwebsiteoptimizer.com chart.googleapis.com wingify-assets.s3.amazonaws.com app.vwo.com https://track.adform.net https://ad.doubleclick.net https://www.facebook.com https://bat.bing.com https://www.google.com https://www.google.de https://www.google-analytics.com https://www.google https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://googleads.g.doubleclick.net https://i.ytimg.com https://maps.gstatic.com https://maps.googleapis.com https://www.financeads.net https://www.aklamio.com/ https://ct.pinterest.com https://ib.adnxs.com;form-action 'self';default-src 'self' https://assets.faircado.com https://static.preply.com https://fonts.gstatic.com/ blob: data:;connect-src 'self' data.axa.de https://api.vid-adblocker.com https://ad.doubleclick.net/ https://*.google.de https://www.facebook.com/ https://*.ads.linkedin.com https://p.adsymptotic.com https://*.linkedin.oribi.io https://sjs.bizographics.com ad.doubleclick.net *.visualwebsiteoptimizer.com app.vwo.com https://*.googlesyndication.com https://*.google.com https://*.google-analytics.com https://*.analytics.google.com https://www.google.com https://www.googleanalytics.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://bat.bing.com https://privacy.trustcommander.net https://privacy.commander1.net https://privacy.commander1.com https://www.googletagmanager.com https://maps.googleapis.com https://fonts.googleapis.com https://*.axa.de https://cloud.service.aerzteversicherung.de https://mcdyr4395tgnrcnr8bt5wsrgh-11.pub.sfmc-content.com https://*.aklamio.com https://www.googleadservices.com https://ct.pinterest.com https://ib.adnxs.com https://acdn.adnxs.com https://google.com;;report-uri /site/axa-de/cspReportOnly 277
script-src https: blob: 'unsafe-inline' 'unsafe-eval' 'self';base-uri 'self';report-uri https://reporting-api.gannettinnovation.com;report-to default 261
connect-src 'self' *.google-analytics.com *.analytics.google.com https://stats.g.doubleclick.net *.facebook.com; font-src 'self' data: https://use.typekit.net https://fonts.gstatic.com; frame-src 'self' servedbyadbutler.com *.authorize.net *.paypal.com *.google.com www.book2look.com *.book2look.com *.booksense.com https://www.youtube.com https://www.youtube-nocookie.com https://www.facebook.com; img-src 'self' images.booksense.com *.booksense.com *.book2look.com data: https://www.googletagmanager.com *.google-analytics.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net *.google.com *.googleusercontent.com *.gstatic.com https://encrypted-tbn0.gstatic.com *.facebook.com https://www.paypalobjects.com https://withfriends.co https://images-na.ssl-images-amazon.com https://m.media-amazon.com https://covers.openlibrary.org https://p.typekit.net https://i.ytimg.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://tagmanager.google.com *.doubleclick.net https://connect.facebook.net https://danjg53usxhfc.cloudfront.net code.jquery.com cdn.mxpnl.com https://www.paypal.com *.gstatic.com https://cdnjs.cloudflare.com https://use.typekit.net https://unpkg.com https://www.youtube.com https://s.ytimg.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://www.book2look.com; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://tagmanager.google.com *.doubleclick.net https://connect.facebook.net https://danjg53usxhfc.cloudfront.net code.jquery.com cdn.mxpnl.com https://www.paypal.com *.gstatic.com https://cdnjs.cloudflare.com https://use.typekit.net https://unpkg.com https://www.youtube.com https://s.ytimg.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://www.book2look.com; style-src * 'report-sample' 'unsafe-inline'; base-uri 'self'; report-uri https://o4507465725640704.ingest.us.sentry.io/api/4510783202066432/security/?sentry_key=ea4d6ac5ddc8cc5a46f75f8ac24a565d 139
109
frame-ancestors 'self'; report-uri /csp_logger?path=/ 78
default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; report-uri /csp-report 72
frame-ancestors 'self' 65
script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: *.mpsimg.com *.bdimg.xyz; font-src 'self' data: *.svcasino.art; 54
default-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; report-to blogspot; report-uri https://www.blogger.com/cspreport 37
script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-recaptcha/_/js/k=boq-recaptcha.RecaptchaChallengePageUi.en_US.yqZp3OyR8Yo.2018.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /recaptcha/challengepage/_/RecaptchaChallengePageUi/cspreport/fine-allowlist 32
script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.kXXuMp9e520.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist 29
script-src 'unsafe-inline' 'unsafe-eval' *.alicdn.com *.aliyun.com *.alyasset.com *.alcasset.com *.alipay.com log.mmstat.com ynuf.aliapp.org *.alipayobjects.com local.alipcsec.com:6691 appx appx-t2 oem-img.wanwang.xin; style-src 'unsafe-inline' *.alicdn.com *.aliyun.com *.alipay.com *.alipayobjects.com oem-img.wanwang.xin; font-src data: *.alicdn.com *.aliyun.com *.alipayobjects.com; frame-src *.aliyun.com *.alicdn.com *.aliyuncs.com *.alipay.com *.taobao.com *.alibabacloud.com *.1688.com xstore.insights.1688.com; report-uri //www.aliyun.com/api/log/csp-report 28
block-all-mixed-content; report-uri https://blog.hatena.ne.jp/api/csp_report 25
default-src https: wss: 'unsafe-inline' 'unsafe-eval'; font-src https: data: ; img-src  https: data: blob: ; media-src https: blob: ; worker-src https: blob: ; report-uri https://www.netflix.com/log/www/csp/1; 24
report-uri /report-csp-violation 24
default-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'unsafe-inline'; connect-src 'self'; base-uri 'none'; form-action 'none' 24
script-src  'unsafe-eval' 'unsafe-inline' 'self' 'report-sample' https://wb.ru https://*.wb.ru https://rwb.ru https://*.rwb.ru https://wildberries.ru https://*.wildberries.ru https://wb-basket.ru https://*.wb-basket.ru https://wbbasket.ru https://*.wbbasket.ru https://wbcontent.net https://*.wbcontent.net https://api-maps.yandex.ru https://yastatic.net https://wibes.ru https://*.wibes.ru https://7c6f0c1e-2b5d-4b11-9b4f-4d7d8f1e9a3a.wb.ru; worker-src 'self' blob: https://*.wbbasket.ru https://*.wbcontent.net; report-uri https://nel.wb.ru/csp; report-to csp; 23
object-src *.agriaffaires.pro *.machineryzone.pro *.agriaffaires.com *.machineryzone.fr *.machineryzone.com *.truckscorner.fr *.mbcore.io; frame-ancestors 'self' *.agriaffaires.pro *.machineryzone.pro *.agriaffaires.com *.machineryzone.fr *.machineryzone.com *.truckscorner.fr *.mbcore.io; report-uri https://api.leboncoin.fr/api/csp-report/v1/report/; 22
frame-ancestors 'self' https://skybox.eskypartners.com; report-uri https://esky.report-uri.com/r/t/csp/enforce 21
default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; report-uri  /csp-report 20
script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://clients2.google.com/gr/gr_full_2.0.6.js https://clients2.google.com/gr/gr_sync.js https://payments.google.com/payments/v4/js/integrator.js https://payments.sandbox.google.com/payments/v4/js/integrator.js https://ssl.gstatic.com/external_hosted/lottie/lottie.js https://translate.google.com/translate_a/element.js https://www.google-analytics.com/analytics.js https://www.google.com/recaptcha/api.js https://www.googletagmanager.com/gtag/js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.google.com/js/bg/ https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.pgDCI8yBAyk.2021.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/ https://payments.youtube.com/payments/v4/js/integrator.js https://payments.cloud.google/payments/v4/js/integrator.js;report-uri /_/PlayStoreUi/cspreport/fine-allowlist 19
default-src 'self' 18
default-src 'self'; 17
default-src 'self' blob: https: data: mediastream: 'unsafe-eval' 'unsafe-inline';report-uri https://metrics.media-amazon.com/ 16
default-src * 'unsafe-inline' 'unsafe-eval'; style-src 'unsafe-inline'; script-src 'none' 'report-sample'; connect-src 'none'; form-action 'none'; frame-src 'none'; worker-src 'none'; frame-ancestors 'none'; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp.threatview.app/report; report-to threatview 16
default-src * 'self'; style-src * 'self' 'unsafe-inline'; img-src * 'self' data: blob:; script-src * 'self' about: 'unsafe-inline' 'unsafe-eval' data:; worker-src * 'self' data: blob: 'unsafe-eval' 'unsafe-inline'; frame-src * 'self'; media-src 'self' blob: *; font-src * 'self' data:; upgrade-insecure-requests; form-action 'self'; frame-ancestors 'self';report-uri /contentsecuritypolicy/report 14
default-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' data: blob: ; form-action 'none' ; frame-ancestors 'self' ; script-src 'unsafe-eval' 'unsafe-hashes' 'report-sample'; report-uri /csp_report 14
script-src 'self'; object-src 'self'; report-to csp-endpoint; 13
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.googleapis.com *.cloudflare.com https://*.usercentrics.eu *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://ss.kaffek.dk/ https://ss.kaffek.at/ https://ss.kaffek.be/ https://ss.kaffek.bg/ https://ss.kaffek.ch/ https://ss.kaffek.co.uk/ https://ss.kaffek.cz/ https://ss.kaffek.de/ https://ss.kaffek.es/ https://ss.kaffek.fi/ https://ss.kaffek.fr/ https://ss.kaffek.gr/ https://ss.kaffek.hu/ https://ss.kaffek.ie/ https://ss.kaffek.it/ https://ss.kaffek.nl/ https://ss.kaffek.no/ https://ss.kaffek.pl/ https://ss.kaffek.pt/ https://ss.kaffek.ro/ https://ss.kaffek.se/ https://ss.kaffek.sk/ https://stats.g.doubleclick.net https://scripts.clarity.ms https://e.clarity.ms https://a.clarity.ms/collect https://www.google.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://connect.facebook.net https://www.facebook.com https://capig.kaffekapslen.dk https://o.clarity.ms https://demo-3.conversionsapigateway.com https://www.googletagmanager.com https://www.google-analytics.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * https://www.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src https://www.youtube.com/ *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com bid.g.doubleclick.net https://www.google.com/ *.braintreegateway.com *.paypal.com google.com *.google.com * www.google.com https://www.facebook.com https://googleads.g.doubleclick.net https://bid.g.doubleclick.net https://td.doubleclick.net/ https://www.google.com.ua/ https://www.google.bg/ https://ct.pinterest.com/ https://www.googletagmanager.com/ https://*.usercentrics.eu https://ss.kaffek.dk/ https://ss.kaffek.at/ https://ss.kaffek.be/ https://ss.kaffek.bg/ https://ss.kaffek.ch/ https://ss.kaffek.co.uk/ https://ss.kaffek.cz/ https://ss.kaffek.de/ https://ss.kaffek.es/ https://ss.kaffek.fi/ https://ss.kaffek.fr/ https://ss.kaffek.gr/ https://ss.kaffek.hu/ https://ss.kaffek.ie/ https://ss.kaffek.it/ https://ss.kaffek.nl/ https://ss.kaffek.no/ https://ss.kaffek.pl/ https://ss.kaffek.pt/ https://ss.kaffek.ro/ https://ss.kaffek.se/ https://ss.kaffek.sk/ https://stats.g.doubleclick.net https://scripts.clarity.ms https://e.clarity.ms https://a.clarity.ms/collect https://www.google.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://connect.facebook.net https://capig.kaffekapslen.dk https://o.clarity.ms https://demo-3.conversionsapigateway.com https://www.googletagmanager.com https://www.google-analytics.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https://images.unsplash.com *.googleapis.com https://www.google.com https://bat.bing.com/ https://www.facebook.com https://cdn.kaffekapslen.be https://www.google.com.ua/ https://www.google.bg/ https://www.google.dk/ https://googleads.g.doubleclick.net https://bid.g.doubleclick.net https://kaffekapslen.dk/ https://kaffekapslen.media https://www.googletagmanager.com/ https://app.usercentrics.eu/ https://*.usercentrics.eu https://connect.facebook.net/ https://firebasestorage.googleapis.com https://ss.kaffek.dk/ https://ss.kaffek.at/ https://ss.kaffek.be/ https://ss.kaffek.bg/ https://ss.kaffek.ch/ https://ss.kaffek.co.uk/ https://ss.kaffek.cz/ https://ss.kaffek.de/ https://ss.kaffek.es/ https://ss.kaffek.fi/ https://ss.kaffek.fr/ https://ss.kaffek.gr/ https://ss.kaffek.hu/ https://ss.kaffek.ie/ https://ss.kaffek.it/ https://ss.kaffek.nl/ https://ss.kaffek.no/ https://ss.kaffek.pl/ https://ss.kaffek.pt/ https://ss.kaffek.ro/ https://ss.kaffek.se/ https://ss.kaffek.sk/ https://stats.g.doubleclick.net https://scripts.clarity.ms https://e.clarity.ms https://a.clarity.ms/collect https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://connect.facebook.net https://capig.kaffekapslen.dk https://o.clarity.ms https://demo-3.conversionsapigateway.com https://www.googletagmanager.com https://www.google-analytics.com data: 'self' 'unsafe-inline'; script-src *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://maps.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ cdn.jsdelivr.net https://kaffekapslen.media/ https://app.usercentrics.eu/ https://connect.facebook.net/ https://*.usercentrics.eu https://bat.bing.com/ https://www.clarity.ms/ *.avada.io *.shopify.com https://ss.kaffek.dk/ https://ss.kaffek.at/ https://ss.kaffek.be/ https://ss.kaffek.bg/ https://ss.kaffek.ch/ https://ss.kaffek.co.uk/ https://ss.kaffek.cz/ https://ss.kaffek.de/ https://ss.kaffek.es/ https://ss.kaffek.fi/ https://ss.kaffek.fr/ https://ss.kaffek.gr/ https://ss.kaffek.hu/ https://ss.kaffek.ie/ https://ss.kaffek.it/ https://ss.kaffek.nl/ https://ss.kaffek.no/ https://ss.kaffek.pl/ https://ss.kaffek.pt/ https://ss.kaffek.ro/ https://ss.kaffek.se/ https://ss.kaffek.sk/ https://stats.g.doubleclick.net https://scripts.clarity.ms https://e.clarity.ms https://a.clarity.ms/collect https://www.google.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://connect.facebook.net https://www.facebook.com https://capig.kaffekapslen.dk https://o.clarity.ms https://demo-3.conversionsapigateway.com https://www.googletagmanager.com https://www.google-analytics.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.cash.app cdn.jsdelivr.net *.cloudflare.com https://*.usercentrics.eu *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://ss.kaffek.dk/ https://ss.kaffek.at/ https://ss.kaffek.be/ https://ss.kaffek.bg/ https://ss.kaffek.ch/ https://ss.kaffek.co.uk/ https://ss.kaffek.cz/ https://ss.kaffek.de/ https://ss.kaffek.es/ https://ss.kaffek.fi/ https://ss.kaffek.fr/ https://ss.kaffek.gr/ https://ss.kaffek.hu/ https://ss.kaffek.ie/ https://ss.kaffek.it/ https://ss.kaffek.nl/ https://ss.kaffek.no/ https://ss.kaffek.pl/ https://ss.kaffek.pt/ https://ss.kaffek.ro/ https://ss.kaffek.se/ https://ss.kaffek.sk/ https://stats.g.doubleclick.net https://scripts.clarity.ms https://e.clarity.ms https://a.clarity.ms/collect https://www.google.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://connect.facebook.net https://www.facebook.com https://capig.kaffekapslen.dk https://o.clarity.ms https://demo-3.conversionsapigateway.com https://www.googletagmanager.com https://www.google-analytics.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * https://maps.googleapis.com https://player.vimeo.com *.googleapis.com https://www.facebook.com eu.playground.klarnaevt.com https://www.kaffekapslen.dk/ https://az-apim-st-kaffekapslen.azure-api.net/ api.kaffekapslen.com https://www.google.com https://googleads.g.doubleclick.net https://bat.bing.com/ https://kaffekapslen.matomo.cloud/ https://api.usercentrics.eu/ https://*.usercentrics.eu https://pagead2.googlesyndication.com/ https://graphql.usercentrics.eu/graphql https://monitor.kaffekapslen.com/ https://google.com/pay https://region1.google-analytics.com https://www.google.bg/ https://capig.kaffekapslen.dk/ https://kaffekapslen.media https://get.geojs.io *.avada.io https://ss.kaffek.dk/ https://ss.kaffek.at/ https://ss.kaffek.be/ https://ss.kaffek.bg/ https://ss.kaffek.ch/ https://ss.kaffek.co.uk/ https://ss.kaffek.cz/ https://ss.kaffek.de/ https://ss.kaffek.es/ https://ss.kaffek.fi/ https://ss.kaffek.fr/ https://ss.kaffek.gr/ https://ss.kaffek.hu/ https://ss.kaffek.ie/ https://ss.kaffek.it/ https://ss.kaffek.nl/ https://ss.kaffek.no/ https://ss.kaffek.pl/ https://ss.kaffek.pt/ https://ss.kaffek.ro/ https://ss.kaffek.se/ https://ss.kaffek.sk/ https://stats.g.doubleclick.net https://scripts.clarity.ms https://e.clarity.ms https://a.clarity.ms/collect https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://connect.facebook.net https://capig.kaffekapslen.dk https://o.clarity.ms https://demo-3.conversionsapigateway.com https://www.googletagmanager.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 12
default-src data: blob: about: 'self' 'unsafe-inline' 'unsafe-eval' https: wss:; report-uri /csp/report?always; 11
connect-src 'self' *.google-analytics.com *.analytics.google.com https://stats.g.doubleclick.net *.facebook.com; font-src 'self' data: https://use.typekit.net https://fonts.gstatic.com; frame-src 'self' servedbyadbutler.com *.authorize.net *.paypal.com *.google.com www.book2look.com *.book2look.com *.booksense.com https://www.youtube.com https://www.youtube-nocookie.com https://www.facebook.com; img-src 'self' images.booksense.com *.booksense.com *.book2look.com data: https://www.googletagmanager.com *.google-analytics.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net *.google.com *.googleusercontent.com *.gstatic.com https://encrypted-tbn0.gstatic.com *.facebook.com https://www.paypalobjects.com https://withfriends.co https://images-na.ssl-images-amazon.com https://m.media-amazon.com https://covers.openlibrary.org https://p.typekit.net https://i.ytimg.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://tagmanager.google.com *.doubleclick.net https://connect.facebook.net https://danjg53usxhfc.cloudfront.net code.jquery.com cdn.mxpnl.com https://www.paypal.com *.gstatic.com https://cdnjs.cloudflare.com https://use.typekit.net https://unpkg.com https://www.youtube.com https://s.ytimg.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://www.book2look.com https://www.google.com; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://tagmanager.google.com *.doubleclick.net https://connect.facebook.net https://danjg53usxhfc.cloudfront.net code.jquery.com cdn.mxpnl.com https://www.paypal.com *.gstatic.com https://cdnjs.cloudflare.com https://use.typekit.net https://unpkg.com https://www.youtube.com https://s.ytimg.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://www.book2look.com https://www.google.com; style-src * 'report-sample' 'unsafe-inline'; base-uri 'self'; report-uri https://o4507465725640704.ingest.us.sentry.io/api/4510783202066432/security/?sentry_key=ea4d6ac5ddc8cc5a46f75f8ac24a565d 11
script-src 'self' 10
default-src https: data: 'unsafe-inline' 'unsafe-eval' 10
default-src 'self'; connect-src 'self' https://www.google-analytics.com https://*.newrelic.com https://*.nr-data.net https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://www.googletagmanager.com; font-src 'self' https://themes.googleusercontent.com fonts.gstatic.com https://cdn.jsdelivr.net data:; frame-src 'self' https://www.youtube.com https://www.vimeo.com; img-src 'self' https://translate.google.com https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://i.ytimg.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://*.google-analytics.com https://*.googletagmanager.com data:; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://*.newrelic.com https://*.nr-data.net https://*.googletagmanager.com cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.ckeditor.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com maps.googleapis.com unpkg.com; script-src-attr 'self'; script-src-elem 'self' https://www.googletagmanager.com https://www.google-analytics.com https://*.newrelic.com https://*.nr-data.net cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.ckeditor.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com maps.googleapis.com unpkg.com; style-src 'self' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com unpkg.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com unpkg.com; block-all-mixed-content 10
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://www.awin1.com https://lantern.roeyecdn.com https://tagmanager.google.com https://cdn.trustcommander.net https://www.dwin1.com https://www.googletagmanager.com https://maps.googleapis.com https://www.google-analytics.com https://www.googleadservices.com https://bat.bing.com https://*.doubleclick.net https://www.axa-video.de https://*.visualwebsiteoptimizer.com https://app.vwo.com https://www.google.com https://platform.commandersact.com https://connect.facebook.net https://*.aklamio.com blob: https://ct.pinterest.com https://s.pinimg.com https://acdn.adnxs.com https://ib.adnxs.com https://snap.licdn.com https://data.dbv.de ;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://s3.amazonaws.com https://googletagmanager.com https://www.googletagmanager.com ;base-uri 'self'; object-src 'none'; default-src 'self' blob: data: https://fonts.gstatic.com/; form-action 'self'; frame-src https://www.awin1.com https://app.vwo.com https://*.visualwebsiteoptimizer.com https://entry.axa-de.intraxa/ https://entry.axa.de https://www.axa-video.de https://www.axa.de https://inte.axa.de https://*.doubleclick.net https://cdn.trustcommander.net https://www.dwin1.com https://connect.facebook.net https://www.facebook.com https://td.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com https://ct.pinterest.com https://googletagmanager.com https://insight.adsrvr.org 'self' https://www.googletagmanager.com https://data.dbv.de https://www.youtube.com; img-src 'self' data: https://*.visualwebsiteoptimizer.com https://chart.googleapis.com https://wingify-assets.s3.amazonaws.com https://app.vwo.com https://track.adform.net https://ad.doubleclick.net https://www.facebook.com https://bat.bing.com https://*.google.com https://www.google.de https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://googleads.g.doubleclick.net *.doubleclick.net https://i.ytimg.com https://maps.gstatic.com https://maps.googleapis.com https://www.financeads.net https://www.aklamio.com/ https://ct.pinterest.com https://ib.adnxs.com https://*.ads.linkedin.com https://data.dbv.de; connect-src 'self' https://*.visualwebsiteoptimizer.com https://app.vwo.com https://*.googlesyndication.com https://*.google.com https://*.google.de https://*.google-analytics.com https://*.analytics.google.com https://www.google-analytics.com https://*.doubleclick.net https://bat.bing.com https://privacy.trustcommander.net https://privacy.commander1.net https://privacy.commander1.com https://www.googletagmanager.com https://maps.googleapis.com https://fonts.googleapis.com https://*.dbv.de https://cloud.service.aerzteversicherung.de https://mcdyr4395tgnrcnr8bt5wsrgh-11.pub.sfmc-content.com https://*.aklamio.com https://www.googleadservices.com https://ct.pinterest.com https://ib.adnxs.com https://acdn.adnxs.com https://www.facebook.com https://*.ads.linkedin.com https://p.adsymptotic.com https://*.linkedin.oribi.io https://sjs.bizographics.com;;report-uri /site/dbv-de/cspReportOnly 10
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.dealerspace.ai https://*.appdealersites.com.br https://*.dealersites.com.br https://dealersites-content.com https://dealersites-content.s3.amazonaws.com https://dealersites-content.s3.us-east-1.amazonaws.com https://phonetrack-static.s3.sa-east-1.amazonaws.com https://s3.agsistema.net https://*.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://*.doubleclick.net https://connect.facebook.net https://*.facebook.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.rdstation.com.br https://*.clarity.ms https://cdn.cookielaw.org https://*.onetrust.com https://*.youtube.com https://*.youtube-nocookie.com https://*.ytimg.com https://*.privacytools.com.br https://*.goadopt.io https://*.securiti.ai https://*.qualicookies.com.br https://*.dponet.com.br https://*.edna.center https://*.hotjar.com https://*.hotjar.io https://*.mouseflow.com https://*.visualwebsiteoptimizer.com https://d335luupugsy2.cloudfront.net https://snap.licdn.com https://px.ads.linkedin.com https://*.leadster.com.br https://*.leadforce.com.br https://embed.tawk.to https://*.permeets.com https://*.mobiauto.com.br https://*.swipetospin.com https://cdn.scaleflex.it https://cdnjs.cloudflare.com https://code.jquery.com https://cdn.jsdelivr.net;style-src 'self' 'unsafe-inline' https://*.dealerspace.ai https://*.appdealersites.com.br https://*.dealersites.com.br https://dealersites-content.com https://dealersites-content.s3.amazonaws.com https://dealersites-content.s3.us-east-1.amazonaws.com https://phonetrack-static.s3.sa-east-1.amazonaws.com https://s3.agsistema.net https://cdn.jsdelivr.net https://fonts.googleapis.com;img-src 'self' data: blob: https:;font-src 'self' data: https:;object-src 'none';media-src 'self' blob: https:;frame-src 'self' https://*.dealerspace.ai https://*.appdealersites.com.br https://*.dealersites.com.br https://dealersites-content.com https://dealersites-content.s3.amazonaws.com https://dealersites-content.s3.us-east-1.amazonaws.com https://phonetrack-static.s3.sa-east-1.amazonaws.com https://s3.agsistema.net https://*.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://*.doubleclick.net https://connect.facebook.net https://*.facebook.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.rdstation.com.br https://*.clarity.ms https://cdn.cookielaw.org https://*.onetrust.com https://*.youtube.com https://*.youtube-nocookie.com https://*.ytimg.com https://*.privacytools.com.br https://*.goadopt.io https://*.securiti.ai https://*.qualicookies.com.br https://*.dponet.com.br https://*.edna.center https://*.hotjar.com https://*.hotjar.io https://*.mouseflow.com https://*.visualwebsiteoptimizer.com https://d335luupugsy2.cloudfront.net https://snap.licdn.com https://px.ads.linkedin.com https://*.leadster.com.br https://*.leadforce.com.br https://embed.tawk.to https://*.permeets.com https://*.mobiauto.com.br https://*.swipetospin.com https://cdn.scaleflex.it https://cdnjs.cloudflare.com https://code.jquery.com https://cdn.jsdelivr.net;frame-ancestors 'self';connect-src 'self' https://*.dealerspace.ai https://*.appdealersites.com.br https://*.dealersites.com.br https://dealersites-content.com https://dealersites-content.s3.amazonaws.com https://dealersites-content.s3.us-east-1.amazonaws.com https://phonetrack-static.s3.sa-east-1.amazonaws.com https://s3.agsistema.net https://*.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://*.doubleclick.net https://connect.facebook.net https://*.facebook.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.rdstation.com.br https://*.clarity.ms https://cdn.cookielaw.org https://*.onetrust.com https://*.youtube.com https://*.youtube-nocookie.com https://*.ytimg.com https://*.privacytools.com.br https://*.goadopt.io https://*.securiti.ai https://*.qualicookies.com.br https://*.dponet.com.br https://*.edna.center https://*.hotjar.com https://*.hotjar.io https://*.mouseflow.com https://*.visualwebsiteoptimizer.com https://d335luupugsy2.cloudfront.net https://snap.licdn.com https://px.ads.linkedin.com https://*.leadster.com.br https://*.leadforce.com.br https://embed.tawk.to https://*.permeets.com https://*.mobiauto.com.br https://*.swipetospin.com https://cdn.scaleflex.it https://cdnjs.cloudflare.com https://code.jquery.com https://cdn.jsdelivr.net;worker-src 'self' blob:;form-action 'self';base-uri 'self' 10
font-src *.googleapis.com *.gstatic.com *.fontawesome.com https://geowidget.easypack24.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com widgets.swaven.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com www.google.com *.weltpixel.com https://geowidget-app.inpost.pl/ https://sandbox-easy-geowidget.easypack24.net/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com ct.pinterest.com c.az.contentsquare.net halc.iadvize.com widgets.swaven.com opiniones2.opiniones-verificadas.com td.doubleclick.net youtube.com adw.esthederm.fr *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com *.googleapis.com *.gstatic.com a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org https://meetanshi.com/media/logo.png naos.dam-broadcast.com magefan.com cm.magefan.com https://redchamps.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com ct.pinterest.com c.az.contentsquare.net scontent.cdninstagram.com content.static-swaven.com eu-west-1-wtb-tag-api.swaven.com www.google.fr www.facebook.com cdn.quable.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com *.gstatic.com chimpstatic.com downloads.mailchimp.com *.list-manage.com https://www.googletagmanager.com tagmanager.google.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com ct.pinterest.com c.az.contentsquare.net sdk.privacy-center.org halc.iadvize.com static.iadvize.com www.gstatic.com www.google.com wtb-tag.mikmak.ai wtb-tag.swaven.com widgets.swaven.com cdnjs.cloudflare.com connect.facebook.net try.abtasty.com s.pinimg.com static.affilae.com s7.addthis.com t.contentsquare.net data.perfmaker.net adw.esthederm.fr *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.fontawesome.com tagmanager.google.com https://geowidget.easypack24.net https://geowidget.inpost.pl unsafe-inline assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com ct.pinterest.com c.az.contentsquare.net *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://maps.googleapis.com https://player.vimeo.com *.googleapis.com https://www.google-analytics.com *.easypack24.net *.inpost.pl *.openstreetmap.org api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com ct.pinterest.com c.az.contentsquare.net www.google.com halc.iadvize.com static.iadvize.com api.iadvize.com wtb-api-hub.swaven.com region1.google-analytics.com maps.googleapis.com adw.esthederm.fr *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 10
default-src https: 'unsafe-inline' 'unsafe-eval' wss: ;img-src https: data: blob: ; font-src https: data:; form-action https: http://www.last.fm 9
script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ https://payments.google.com/payments/v4/js/integrator.js https://payments.sandbox.google.com/payments/v4/js/integrator.js https://translate.google.com/translate_a/element.js https://www.google-analytics.com/analytics.js https://www.google-analytics.com/gtm/js https://www.googleadservices.com/pagead/conversion/ https://www.youtube.com/iframe_api https://youtube.googleapis.com/s/player/ https://youtube.googleapis.com/iframe_api https://ssl.gstatic.com/support/realtime/operator/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://maps.googleapis.com/maps/api/js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.google.com/js/bg/ https://www.googletagmanager.com/gtag/js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-gstore/_/js/k=boq-gstore.Gstore.en_US.js1oA6yFtv8.2021.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://maps.googleapis.com/maps-api-v3/api/js/ https://maps.googleapis.com/maps/vt https://maps.googleapis.com/maps/api/js/ https://maps.googleapis.com/maps/api/place/js/ https://www.youtube.com/s/player/ https://translate.googleapis.com/_/translate_http/_/js/ https://payments.youtube.com/payments/v4/js/integrator.js https://payments.cloud.google/payments/v4/js/integrator.js;report-uri /_/Gstore/cspreport/fine-allowlist 9
report-uri /report-csp-violation; upgrade-insecure-requests 9
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self' data:; connect-src 'self' wss:; media-src 'self' blob:; object-src 'none'; frame-ancestors 'self'; base-uri 'self'; upgrade-insecure-requests; report-uri /csp-report; 9
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://bat.bing.com https://connect.facebook.net https://consent.cookiebot.com https://consentcdn.cookiebot.com https://ct.pinterest.com https://googleads.g.doubleclick.net https://s.pinimg.com https://script.hotjar.com https://snap.licdn.com https://static.ads-twitter.com https://static.hotjar.com https://unpkg.com https://www.googletagmanager.com https://js.hsforms.net https://js-eu1.hs-scripts.com https://js-na1.hs-scripts.com https://js.hs-analytics.net https://js-eu1.hs-analytics.net https://js.hubspot.com https://js-eu1.hubspot.com https://js.hs-banner.com https://js-eu1.hs-banner.com https://js.hsadspixel.net https://cdn.engage.teamviewer.com https://apps.mypurecloud.de https://directsearch.velux.tech https://exp-api.velux.at https://exp-api.velux.de https://exp-api.velux.pl https://exp-api.velux.hu https://exp-api.velux.nl https://exp-api.velux.ro https://sgtm.velux.at https://w.usabilla.com https://apis.google.com https://static.hsappstatic.net https://*.velux.com https://*.velux.co.uk https://*.velux.de https://*.velux.fr https://*.velux.dk https://*.velux.nl https://*.velux.be https://*.velux.no https://*.velux.se https://*.velux.pl https://*.velux.ch https://*.velux.hu https://*.velux.cz https://*.velux.hr https://*.velux.ro https://*.velux.it https://*.velux.es https://*.velux.pt https://*.velux.ie https://*.velux.ca https://*.velux.com.au https://*.velux.co.nz https://*.velux.co.jp https://*.velux.ba https://*.velux.bg https://*.velux.ee https://*.velux.lt https://*.velux.lv https://*.velux.rs https://*.velux.si https://*.velux.sk https://*.velux.com.tr https://*.velux.ua https://*.velux.lat https://*.veluxusa.com https://scripts.clarity.ms https://www.clarity.ms https://embed.typeform.com https://anfragen.velux.at https://d1hgczpbubj217.cloudfront.net https://exp-api.velux.fr https://sgtm.velux.de https://sgtm.velux.fr https://pixels.omnitagjs.com https://www.youtube.com https://145747460.fs1.hubspotusercontent-eu1.net https://lottingem.com https://www.google.com https://ads-engagement.presage.io https://www.gstatic.com https://secured-pixel.com https://sgtm.velux.co.uk https://3001.scriptcdn.net https://js-eu1.hsforms.net https://p.teads.tv https://recaptcha.net https://sgtm.velux.nl https://tafopo.navahididi.com https://www.gstatic.cn; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://directsearch.velux.tech https://cdn.chatvisor.com https://cdn.honey.io https://www.gstatic.com; img-src 'self' data: blob: https://*.google.sk https://learnupon.s3.eu-west-1.amazonaws.com https://ad.doubleclick.net https://adservice.google.com https://analytics.twitter.com https://bat.bing.com https://bat.bing.net https://contenthub.velux.com https://imgsct.cookiebot.com https://px.ads.linkedin.com https://px4.ads.linkedin.com Cetco https://track.hubspot.com https://forms-na1.hsforms.com https://perf-na1.hsforms.com https://perf-eu1.hsforms.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googletagmanager.com https://www.googleadservices.com https://thumbnails.shelf-eu.com https://brxcdn.com https://i.ytimg.com https://joko-mobile-app-media.s3.eu-west-1.amazonaws.com https://track-eu1.hubspot.com https://www.facebook.com https://analytics.google.com https://www.bing.com https://l.facebook.com https://www.google.com https://www.google.hu https://www.google.fr https://www.google.de https://www.google.co.uk https://www.google.nl https://www.google.dk https://www.google.no https://www.google.se https://www.google.pl https://www.google.ch https://www.google.it https://www.google.es https://www.google.pt https://www.google.ie https://www.google.ca https://www.google.com.au https://www.google.co.nz https://www.google.co.jp https://www.google.ba https://www.google.bg https://www.google.ee https://www.google.lt https://www.google.lv https://www.google.rs https://www.google.si https://www.google.sk https://www.google.com.tr https://www.google.com.ua https://www.google.at https://www.google.be https://www.google.cz https://www.google.ro https://www.google.hr https://*.velux.com https://*.velux.co.uk https://*.velux.de https://*.velux.fr https://*.velux.dk https://*.velux.nl https://*.velux.be https://*.velux.no https://*.velux.se https://*.velux.pl https://*.velux.ch https://*.velux.hu https://*.velux.cz https://*.velux.hr https://*.velux.ro https://*.velux.it https://*.velux.es https://*.velux.pt https://*.velux.ie https://*.velux.ca https://*.velux.com.au https://*.velux.co.nz https://*.velux.co.jp https://*.velux.ba https://*.velux.bg https://*.velux.ee https://*.velux.lt https://*.velux.lv https://*.velux.rs https://*.velux.si https://*.velux.sk https://*.velux.com.tr https://*.velux.ua https://*.velux.lat https://*.veluxusa.com https://secure.adnxs.com https://bat.bing.net https://forms-eu1.hsforms.com https://consent.cookiebot.com https://www.google.com.ph https://www.google.co.za https://25713015.fs1.hubspotusercontent-eu1.net https://www.google.fi https://www.google.com.eg https://www.google.com.my https://c.clarity.ms https://ade.googlesyndication.com https://www.google.lu https://www.google.co.in https://www.google.co.th https://fonts.gstatic.com https://www.google.cl https://www.google.com.vn https://www.google.com.lb https://www.google.co.tz https://www.google.mk https://weshare.23video.com https://translate.google.com https://www.google.ru https://www.google.com.bd https://www.google.com.sa https://www.google.com.mt https://www.google.gg https://ads-engagement.presage.io https://www.google.co.kr https://www.google.lk https://www.google.me https://www.google.is https://track.adform.net https://www.google.co.ao https://www.google.ae https://www.google.com.kw https://www.google.com.hk https://sgtm.velux.at https://www.google.md https://connect.facebook.net https://www.google.co.ma https://www.google.je https://cdn.honey.io https://hawk-tracker.360yield.com https://p1.outbrain.com https://www.google.al https://www.google.by https://www.google.co.id https://www.google.co.il https://www.google.co.uz https://www.google.com.cy https://www.google.com.gh https://www.google.dz https://www.google.ge https://www.google.gr https://www.google.im https://www.google.tn https://cdn.engage.teamviewer.com https://ersatzteile.veluxshop.de https://leepraktic.net https://log.pinterest.com https://www.google.co.cr https://www.google.com.gi https://www.google.com.mx https://www.google.com.np https://www.google.com.sg https://www.google.li https://www.google.sm https://www.google.sr https://yastatic.net https://t.co https://analytics.twitter.com; connect-src 'self' data: https://js.monitor.azure.com https://northeurope-2.in.applicationinsights.azure.com https://bat.bing.com https://bat.bing.net https://consentcdn.cookiebot.com https://ct.pinterest.com https://px.ads.linkedin.com https://www.google.com https://www.googleadservices.com https://www.facebook.com https://pagead2.googlesyndication.com https://api-cdn.mypurecloud.de https://api.mypurecloud.de https://webmessaging.mypurecloud.de https://engage.teamviewer.com wss://engage.teamviewer.com https://cdn.engage.teamviewer.com https://cta-service-cms2.hubspot.com https://cta-eu1.hubspot.com https://forms.hsforms.com https://api.hubapi.com https://hubspot-forms-static-embed.s3.amazonaws.com https://analytics.twitter.com https://t.co https://vc.hotjar.io https://content.hotjar.io https://metrics.hotjar.io wss://ws.hotjar.com https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://analytics.videomyjob.com https://browser.pipe.aria.microsoft.com https://d1hgczpbubj217.cloudfront.net https://translate.googleapis.com https://translate.google.com https://apis.google.com https://sgtm.velux.at https://sgtm.velux.de https://sgtm.velux.pl https://sgtm.velux.co.uk https://sgtm.velux.fr https://sgtm.velux.nl https://sgtm.velux.cz https://sgtm.velux.it https://sgtm.velux.es https://sgtm.velux.dk https://sgtm.velux.hr https://sgtm.velux.hu https://sgtm.velux.ee https://exp-api.velux.at https://exp-api.velux.de https://exp-api.velux.pl https://exp-api.velux.hu https://exp-api.velux.nl https://exp-api.velux.ro https://directsearch.velux.tech https://anfragen.velux.at https://log.pinterest.com https://*.fls.doubleclick.net https://*.algolia.net https://*.algolianet.com https://*.velux.com https://*.velux.co.uk https://*.velux.de https://*.velux.fr https://*.velux.dk https://*.velux.nl https://*.velux.be https://*.velux.no https://*.velux.se https://*.velux.pl https://*.velux.ch https://*.velux.hu https://*.velux.cz https://*.velux.hr https://*.velux.ro https://*.velux.it https://*.velux.es https://*.velux.pt https://*.velux.ie https://*.velux.ca https://*.velux.com.au https://*.velux.co.nz https://*.velux.co.jp https://*.velux.ba https://*.velux.bg https://*.velux.ee https://*.velux.lt https://*.velux.lv https://*.velux.rs https://*.velux.si https://*.velux.sk https://*.velux.com.tr https://*.velux.ua https://*.velux.lat https://*.veluxusa.com https://*.clarity.ms wss://engage.teamviewer.com https://form.typeform.com https://local.adblock360.com https://fileupload.mypurecloud.de https://forms-eu1.hsforms.com https://exp-api.velux.cz https://perf-na1.hsforms.com https://ad.doubleclick.net https://consent.cookiebot.com https://wdd-velux-designs.azurewebsites.net https://bded8a3c6ae-1-1053047382554.us-central1.run.app https://fast.wistia.net https://md-eecad2978f7a43f5b7838c919258e6de.ecs.us-east-2.on.aws https://s.pinimg.com https://api.mf.webcontentassessor.com https://dd.binsiad.com https://gadstat.com https://perf-eu1.hsforms.com https://singleview.site; frame-src 'self' blob: https://consentcdn.cookiebot.com https://fast.wistia.net https://leadmanagement.velux.co.uk https://td.doubleclick.net https://weshare.23video.com https://www.googletagmanager.com https://ct.pinterest.com https://engage.teamviewer.com https://apps.mypurecloud.de https://www.facebook.com https://meetings.hubspot.com https://meetings-eu1.hubspot.com https://forms-eu1.hsforms.com https://www.youtube.com https://www.youtube-nocookie.com https://d1hgczpbubj217.cloudfront.net https://embed.typeform.com https://sgtm.velux.at https://sgtm.velux.de https://sgtm.velux.pl https://sgtm.velux.co.uk https://sgtm.velux.fr https://sgtm.velux.nl https://sgtm.velux.cz https://sgtm.velux.it https://sgtm.velux.es https://sgtm.velux.dk https://sgtm.velux.hr https://sgtm.velux.hu https://sgtm.velux.ee https://*.velux.com https://*.velux.co.uk https://*.velux.de https://*.velux.fr https://*.velux.dk https://*.velux.nl https://*.velux.be https://*.velux.no https://*.velux.se https://*.velux.pl https://*.velux.ch https://*.velux.hu https://*.velux.cz https://*.velux.hr https://*.velux.ro https://*.velux.it https://*.velux.es https://*.velux.pt https://*.velux.ie https://*.velux.ca https://*.velux.com.au https://*.velux.co.nz https://*.velux.co.jp https://*.velux.ba https://*.velux.bg https://*.velux.ee https://*.velux.lt https://*.velux.lv https://*.velux.rs https://*.velux.si https://*.velux.sk https://*.velux.com.tr https://*.velux.ua https://*.velux.lat https://*.veluxusa.com https://embed.wistia.com https://gateway.zscloud.net https://outlook.office.com https://9724945.fls.doubleclick.net https://caclk.com https://anfragen.velux.at https://gateway.zscalertwo.net https://google.com https://9981267.fls.doubleclick.net https://bcsgsrv.com https://form.typeform.com https://forms.hsforms.com https://velux.typeform.com http://weshare.23video.com https://9981258.fls.doubleclick.net https://my.velux.at https://veluxb2c.b2clogin.com https://www.recaptcha.net; font-src 'self' data: https://fonts.gstatic.com https://directsearch.velux.tech https://cdn.chatvisor.com https://velux-transform.pages.dev https://velcdn.azureedge.net https://assets.website-files.com https://oc-cdn-public-eur.azureedge.net https://*.velux.com https://frontend-cdn.perplexity.ai https://cdn.scite.ai https://brxcdn.com https://static.shopback.com https://res-1.cdn.office.net https://assets.merci-app.com https://cdn.yiban.io; media-src 'self' blob: data: https://contenthub.velux.com https://*.velux.com https://downloads.delivery.twentythree.com https://weshare.23video.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; manifest-src 'self'; upgrade-insecure-requests; block-all-mixed-content https://bat.bing.com https://bat.bing.net https://connect.facebook.net https://pagead2.googlesyndication.com https://s.pinimg.com https://static.hotjar.com https://px.ads.linkedin.com; report-uri https://www.velux.de/api/velux/cspreport/submit; 9
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: *.oney.io *.staging.oney.io https://fonts.gstatic.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com *.hipay-tpp.com *.hipay.com *.googleapis.com *.weltpixel.com https://thinglink.com/ https://app.usercentrics.eu/ www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.hipay.com *.oney.io *.staging.oney.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://maps.googleapis.com https://maps.gstatic.com https://www.google.fr https://api.mapbox.com *.tile.openstreetmap.org https://widgets.trustedshops.com/ https://integrations.etrusted.com/ https://app.usercentrics.eu/ *.facebook.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page https://maps.googleapis.com https://player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.hipay-tpp.com *.hipay.com mpsnare.iesnare.com *.oney.io *.staging.oney.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://cdnjs.cloudflare.com https://cdn-4.convertexperiments.com/ https://widgets.trustedshops.com/ https://integrations.etrusted.com/ https://cdn.thinglink.me/ https://app.usercentrics.eu/ https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com assets.braintreegateway.com *.hipay.com *.googleapis.com https://static.klaviyo.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://integrations.etrusted.com/ tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com data: mpsnare.iesnare.com *.googleapis.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.hipay-tpp.com *.hipay.com wss://mpsnare.iesnare.com *.oney.io *.staging.oney.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://nominatim.openstreetmap.org https://cdn-4.convertexperiments.com/ https://integrations.etrusted.com/ https://app.usercentrics.eu/ https://api.usercentrics.eu/ analytics.google.com *.facebook.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 9
frame-ancestors https://*.sfr.fr https://*.red-by-sfr.fr; report-uri https://www.sfr.fr/eTagP/CSP.jsp 8
default-src https: 'self' *.facebook.net *.googletagmanager.com *.bizibly.com *.doubleclick.net https://*.intercomcdn.com https://*.datadoghq-browser-agent.com; font-src 'self' https://*.intercomcdn.com *.fontawesome.com data:; base-uri 'none'; object-src data: 'unsafe-eval'; img-src 'self' data: * ; script-src https: 'self' 'unsafe-eval' 'unsafe-inline' http://*.google-analytics.com http://*.gstatic.com http://*.bing.com http://*.googleadservices.com http://*.hs-scripts.com http://*.bizible.com *.facebook.net *.googletagmanager.com http://*.fontawesome.com http://*.outbrain.com blob:; style-src https: 'self' *.fontawesome.com 'unsafe-inline'; report-uri /rest/trackers/csp; 8
default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; 8
default-src 'self'; script-src 'self' https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; img-src 'self' https://i.yippy.com https://s.yippy.com https://z.yippy.com data:; font-src 'self' https://z.yippy.com; connect-src 'self' https://cloudflareinsights.com; media-src 'self' https://s.yippy.com; frame-ancestors 'none'; base-uri 'self'; object-src 'none'; form-action 'self'; upgrade-insecure-requests 8
default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; connect-src * data: blob: 'unsafe-inline'; frame-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; object-src * data: blob: 'unsafe-inline'; 8
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; style-src 'self' 'unsafe-inline' https: data:; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; 8
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://*.ticketplus.global https://code.jquery.com https://unpkg.com https://polyfill.io https://js.stripe.com https://sdk.mercadopago.com https://www.mercadopago.com https://live.decidir.com https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://connect.facebook.net https://snap.licdn.com https://cdn.smooch.io https://js-agent.newrelic.com https://static.cloudflareinsights.com https://challenges.cloudflare.com https://stackpath.bootstrapcdn.com https://maxcdn.bootstrapcdn.com https://use.fontawesome.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://code.jquery.com https://unpkg.com https://*.ticketplus.global https://stackpath.bootstrapcdn.com https://maxcdn.bootstrapcdn.com https://use.fontawesome.com; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://*.ticketplus.global https://ticketplus-assets.s3.sa-east-1.amazonaws.com https://cdn2.ticketplus.cl https://eb-core-development-uploads.s3.sa-east-1.amazonaws.com https://eb-core-livepass-com-ar-uploads.s3-sa-east-1.amazonaws.com https://documents-assets.s3.sa-east-1.amazonaws.com https://stackpath.bootstrapcdn.com https://maxcdn.bootstrapcdn.com https://use.fontawesome.com; img-src 'self' data: blob: https:; media-src 'self' data: blob: https://*.ticketplus.global https://ticketplus-assets.s3.sa-east-1.amazonaws.com https://cdn2.ticketplus.cl https://eb-core-development-uploads.s3.sa-east-1.amazonaws.com https://eb-core-livepass-com-ar-uploads.s3-sa-east-1.amazonaws.com https://documents-assets.s3.sa-east-1.amazonaws.com; connect-src 'self' https://www.google-analytics.com https://js.stripe.com https://api.mercadopago.com https://sdk.mercadopago.com https://*.ticketplus.global https://*.sentry.io https://cdn.smooch.io https://*.nr-data.net https://challenges.cloudflare.com https://live.decidir.com https://maps.googleapis.com https://cdnjs.cloudflare.com https://fonts.googleapis.com; frame-src 'self' https://js.stripe.com https://www.mercadopago.com https://secure-fields.mercadopago.com https://live.decidir.com https://open.spotify.com https://www.youtube.com https://player.vimeo.com https://www.google.com https://*.ticketplus.global https://challenges.cloudflare.com; frame-ancestors *; object-src 'none'; base-uri 'self' 8
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.fixando.com/ https://cdn.fixando.com/ https://pics.fixando.com/ https://www.google-analytics.com/ https://www.googletagmanager.com/ https://www.googletagservices.com/ https://www.googleadservices.com/ https://fcm.googleapis.com/ https://tpc.googlesyndication.com/ https://pagead2.googlesyndication.com/ https://adservice.google.com.pk/ https://adservice.google.com.br/ https://adservice.google.com.py/ https://adservice.google.com.do/ https://adservice.google.com/ https://adservice.google.pt/ https://adservice.google.nl/ https://adservice.google.cl/ https://adservice.google.it/ https://adservice.google.pl/ https://adservice.google.no/ https://adservice.google.fr/ https://adservice.google.bg/ https://adservice.google.es/ https://adservice.google.se/ https://adservice.google.be/ https://adservice.google.de/ https://adservice.google.ch/ https://adservice.google.hu/ https://adservice.google.ie/ https://adservice.google.lu/ https://adservice.google.ru/ https://adservice.google.be/ https://adservice.google.co.uk/ https://adservice.google.co.ao/ https://adservice.google.co.in/ https://partner.googleadservices.com/ https://maps.googleapis.com/ https://optimize.google.com/ https://www.googleoptimize.com/ https://www.gstatic.com/ https://googleads.g.doubleclick.net/ https://pubads.g.doubleclick.net/ https://static.zdassets.com/ https://widget-mediator.zopim.com/ https://www.facebook.com/ https://connect.facebook.net/ https://static.hotjar.com/ https://script.hotjar.com/ https://cdn.jsdelivr.net/ https://static.zdassets.com/ https://d2wy8f7a9ursnm.cloudfront.net/ https://apis.google.com/ https://tagmanager.google.com/ https://accounts.google.com/ https://www.paypal.com/ https://cdn.socket.io/ https://widget.trustpilot.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://bucket.cdnwebcloud.com https://bat.bing.com https://www.clarity.ms https://www.google.com https://*.outbrain.com https://www.sandbox.paypal.com 8
default-src * 'unsafe-inline' 'unsafe-eval' data: blob: 8
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.klarnacdn.net *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com https://plumrocket.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors https://www.youtube.com/ 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com/ *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * https://widget.trustpilot.com/ *.weltpixel.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com https://plumrocket.com https://www.usaskateshop.com/ *.googletagmanager.com *.doubleclick.net *.typeform.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://banners.helloretailcdn.com * *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com maps.gstatic.com maps.googleapis.com https://usaskateshop-com.b-cdn.net/ *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://core.helloretail.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://static.hotjar.com https://static.zdassets.com https://payments.worldpay.com https://cdn.clerk.io https://api.clerk.io https://ss.euroskateshop.de https://ss.euroskateshop.nl https://ss.euroskateshop.ch *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.disqus.com maps.googleapis.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com *.cash.app *.klarnacdn.net https://static.klaviyo.com assets.braintreegateway.com *.fontawesome.com applepay.cdn-apple.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://cdn.usaskateshop.dk https://static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://core.helloretail.com https://helloretailcdn.com * *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com maps.googleapis.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 8
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/marketing_platform 7
default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; report-uri https://www.klaviyo.com/csp/ 7
block-all-mixed-content; report-uri https://dmgm.report-uri.com/r/t/csp/reportOnly 7
child-src blob: data: https:; connect-src https: wss:; default-src blob: data: https: 'report-sample' 'unsafe-eval' 'unsafe-inline'; font-src data: https:; form-action https:; frame-src data: https:; img-src blob: data: https:; media-src blob: data: https:; object-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; report-uri https://csp.ffx.io/; report-to csp-endpoint 7
default-src 'self' https://*.clarity.ms https://c.bing.com https://*.tradetracker.net; font-src 'self' data: https://fonts.gstatic.com https://*.maze.co; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.obelink.at/metrics https://cdn.jsdelivr.net https://static.obelink.eu https://*.doubleclick.net https://*.adnxs.com https://analytics.google.com https://*.google-analytics.com https://*.googletagmanager.com https://connect.facebook.net https://www.google.com https://*.youtube.com https://*.googleapis.com https://*.gstatic.com https://bat.bing.com https://bat.bing.net https://*.hotjar.com https://*.maze.co https://l.getsitecontrol.com https://*.paypal.com https://*.stripe.com https://*.stripecdn.com https://squeezely.tech https://*.squeezely.tech https://*.hcaptcha.tech https://*.trustedshops.com https://*.aiden.cx https://*.clarity.ms https://d5yoctgpv4cpx.cloudfront.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://tagmanager.google.com https://*.maze.co; img-src 'self' data: https://media.obelink.eu https://media.obelink.nl https://obelink.nl https://www.obelink.nl https://media.obelink.de https://obelink.de https://www.obelink.de https://media.obelink.at https://obelink.at https://www.obelink.at https://media.obelink.be https://obelink.be https://www.obelink.be https://media.obelink.pl https://obelink.pl https://www.obelink.pl https://media.obelink.fr https://obelink.fr https://www.obelink.fr https://media.obelink.it https://obelink.it https://www.obelink.it https://media.obelink.es https://obelink.es https://www.obelink.es https://commerce.obelink.eu https://images.ctfassets.net https://www.google.com https://www.google.nl https://*.googleadservices.com https://*.gstatic.com https://*.doubleclick.net https://*.adnxs.com https://*.squeezely.tech https://*.googletagmanager.com https://www.facebook.com https://*.maze.co https://*.paypal.com https://widgets.trustedshops.com https://img.youtube.com https://i.ytimg.com https://bat.bing.com https://bat.bing.net https://ts.tradetracker.net; connect-src 'self' https://app.aiden.cx https://www.google.com https://*.google.com https://*.google.nl https://*.google-analytics.com https://*.googletagmanager.com https://*.doubleclick.net https://*.adnxs.com https://*.squeezely.tech https://*.trustedshops.com https://*.etrusted.com https://bat.bing.com https://bat.bing.net https://l.getsitecontrol.com https://*.maze.co https://*.paypal.com https://cdn.growthbook.io https://p2iqhncxyh.execute-api.eu-central-1.amazonaws.com https://*.clarity.ms https://c.bing.com; frame-src 'self' blob: https://app.aiden.cx https://*.doubleclick.net https://www.facebook.com https://*.maze.co https://*.stripe.com https://www.google.com https://www.youtube.com https://*.paypal.com; media-src 'self'; object-src 'self'; base-uri 'self'; form-action 'self'; 7
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.googleapis.com data: *.vimeo.com *.afip.gob.ar *.google.com *.doubleclick.net *.cloudfront.net *.getblue.io *.mercadopago.com.ar *.mercadopago.com.uy *.mercadopago.com.co *.mercadopago.com.pe *.mercadopago.cl *.zdassets.com https://www.google.com.ar https://analytics.tiktok.com https://www.google.com https://track-icommkt.com https://scripts.icommkt.online https://bam.nr-data.net https://event.getblue.io/ https://static-content-qas.vnforapps.com/ https://static-content.vnforapps.com/ *.google-analytics.com analytics.google.com https://www.googletagmanager.com https://externalassets.icommarketing.com https://www.prunenews.com https://www.clarity.ms https://cdn.omniconvert.com https://app.omniconvert.com *.omniconvert.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://checkout.wompi.co *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * webpay3g.transbank.cl webpay3gint.transbank.cl *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com https://checkout.wompi.co *.vimeo.com *.afip.gob.ar *.doubleclick.net *.cloudfront.net *.getblue.io *.mercadopago.com.ar *.mercadopago.com.uy *.mercadopago.com.co *.mercadopago.com.pe *.mercadopago.cl *.zdassets.com https://www.google.com.ar https://analytics.tiktok.com https://www.google.com https://track-icommkt.com https://scripts.icommkt.online https://bam.nr-data.net https://event.getblue.io/ https://apitestenv.vnforapps.com/ https://apiprod.vnforapps.com/ https://static-content-qas.vnforapps.com/ https://static-content.vnforapps.com/ *.google-analytics.com analytics.google.com https://www.googletagmanager.com https://externalassets.icommarketing.com https://www.prunenews.com https://www.clarity.ms *.readysize.ai modal.readysize.ai *.weltpixel.com https://cdn.omniconvert.com https://app.omniconvert.com *.omniconvert.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://static-content-qas.vnforapps.com https://static-content.vnforapps.com https://live.decidir.com https://*.online-metrix.net https://h.online-metrix.net *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://comercios.wompi.co https://checkout.wompi.co *.vimeo.com *.afip.gob.ar *.google.com *.doubleclick.net *.cloudfront.net *.getblue.io *.mercadopago.com.ar *.mercadopago.com.uy *.mercadopago.com.co *.mercadopago.com.pe *.mercadopago.cl *.zdassets.com https://www.google.com.ar https://analytics.tiktok.com https://www.google.com https://track-icommkt.com https://scripts.icommkt.online https://bam.nr-data.net https://event.getblue.io/ https://static-content-qas.vnforapps.com/ https://static-content.vnforapps.com/ analytics.google.com https://www.googletagmanager.com https://externalassets.icommarketing.com https://www.prunenews.com https://www.prune.com.ar *.prune.com.ar https://www.clarity.ms *.readysize.ai modal.readysize.ai https://cdn.omniconvert.com https://app.omniconvert.com *.omniconvert.com https://firebasestorage.googleapis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://static-content-qas.vnforapps.com https://static-content.vnforapps.com https://*.online-metrix.net https://h.online-metrix.net *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.googletagmanager.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.vimeo.com *.afip.gob.ar *.doubleclick.net *.cloudfront.net *.getblue.io *.mercadopago.com.ar *.mercadopago.com.uy *.mercadopago.com.co *.mercadopago.com.pe *.mercadopago.cl *.zdassets.com https://www.google.com.ar https://analytics.tiktok.com https://www.google.com https://track-icommkt.com https://scripts.icommkt.online https://bam.nr-data.net https://event.getblue.io/ https://apitestenv.vnforapps.com/ https://apiprod.vnforapps.com/ https://static-content-qas.vnforapps.com/ https://static-content.vnforapps.com/ *.google-analytics.com https://www.googletagmanager.com https://externalassets.icommarketing.com https://www.prunenews.com https://www.clarity.ms *.readysize.ai modal.readysize.ai https://cdn.omniconvert.com https://app.omniconvert.com *.omniconvert.com *.avada.io *.shopify.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://static-content-qas.vnforapps.com https://static-content.vnforapps.com https://live.decidir.com https://developers.decidir.com/ https://*.online-metrix.net https://h.online-metrix.net *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https://comercios.wompi.co *.readysize.ai modal.readysize.ai https://cdn.omniconvert.com https://app.omniconvert.com *.omniconvert.com *.fontawesome.com https://fonts.bunny.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com assets.braintreegateway.com https://static-content-qas.vnforapps.com https://static-content.vnforapps.com *.tagmanager.google.com *.googletagmanager.com https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com https://sandbox.wompi.co https://production.wompi.co https://checkout.wompi.co *.vimeo.com *.afip.gob.ar *.doubleclick.net *.cloudfront.net *.getblue.io *.mercadopago.com.ar *.mercadopago.com.uy *.mercadopago.com.co *.mercadopago.com.pe *.mercadopago.cl *.zdassets.com https://www.google.com.ar https://analytics.tiktok.com https://www.google.com https://track-icommkt.com https://scripts.icommkt.online https://bam.nr-data.net https://event.getblue.io/ https://apitestenv.vnforapps.com/ https://apiprod.vnforapps.com/ https://static-content-qas.vnforapps.com/ https://static-content.vnforapps.com/ analytics.google.com https://www.googletagmanager.com https://externalassets.icommarketing.com https://www.prunenews.com https://www.clarity.ms *.readysize.ai modal.readysize.ai https://cdn.omniconvert.com https://app.omniconvert.com *.omniconvert.com https://get.geojs.io *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://static-content-qas.vnforapps.com https://static-content.vnforapps.com https://apitestenv.vnforapps.com https://apiprod.vnforapps.com https://live.decidir.com https://developers.decidir.com/ https://*.online-metrix.net https://h.online-metrix.net *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.run.app https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 7
default-src 'self'; script-src 'self' 'report-sample' https://*.nr-data.net https://*.intellimizeditor.com https://intellimizeditor.com https://cdn.intellimize.co https://ajax.googleapis.com https://ajax.cloudflare.com https://analytics.twitter.com https://api.intellimize.co https://app-abk.marketo.com https://audience.nrich.ai https://bat.bing.com https://boards.greenhouse.io https://cdn.ampproject.org https://cdn.cookielaw.org https://cdn.onesignal.com https://cdnjs.cloudflare.com https://connect.facebook.net https://googleads.g.doubleclick.net https://js-agent.newrelic.com https://js.chilipiper.com https://maps.googleapis.com https://munchkin.marketo.net https://onesignal.com https://player.vimeo.com https://s.yimg.com https://sc.lfeeder.com https://script.crazyegg.com https://script.hotjar.com https://secure.esignlive.com https://secure.onespan.com https://serve.nrich.ai https://ssl.google-analytics.com https://snap.licdn.com https://static.ads-twitter.com https://static.cloudflareinsights.com https://static.hotjar.com https://tag.demandbase.com https://tag.nrich.ai https://tpc.googlesyndication.com https://translate.google.com https://tribl.io https://www.clarity.ms https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://www.youtube.com https://d41.co https://*.d41.co https://embed.ustudio.com https://asana-user-private-us-east-1.s3.us-east-1.amazonaws.com https://id.rlcdn.com https://scout-cdn.salesloft.com https://tracking.g2crowd.com https://j.6sc.co https://view.ceros.com https://app.leandata.com https://js.zi-scripts.com https://ws-assets.zoominfo.com https://optimize.google.com https://www.googleoptimize.com/ https://extend.vimeocdn.com https://code.highcharts.com https://cdn.bizible.com https://www.vimeo.com https://vimeo.com https://cdn.jsdelivr.net blob: https://www.g2.com https://challenges.cloudflare.com/ https://unpkg.com/ https://cdn.ckeditor.com/ https://js.qualified.com https://*.qualified.com https://code.jquery.com; style-src 'self' 'report-sample' https://app-abk.marketo.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://js.chilipiper.com/ https://onesignal.com https://secure.onespan.com https://tag.demandbase.com https://translate.googleapis.com https://tribl.io https://use.fontawesome.com https://cdn.jsdelivr.net https://optimize.google.com https://www.googletagmanager.com https://www.gstatic.com https://unpkg.com/ https://*.qualified.com; form-action 'self' https://community.onespan.com https://community-stg.onespan.com https://community-dev.onespan.com https://dev.onespan.com https://stg.onespan.com https://www.onespan.com https://secure.onespan.com https://*.build38.io https://auth.build38.io; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; connect-src 'self' https://*.clarity.ms https://*.company-target.com https://*.nr-data.net https://308-zmt-742.mktoresp.com https://308-zmt-742.mktoutil.com https://adservice.google.com https://analytics.google.com https://api.chilipiper.com https://api.intellimize.co https://audience.nrich.ai https://bat.bing.com https://cdn.cookielaw.org https://in.hotjar.com https://log.intellimize.co https://maps.googleapis.com https://region1.google-analytics.com https://region1.analytics.google.com https://s.yimg.com https://secure.onespan.com https://serve.nrich.ai https://stats.g.doubleclick.net https://tag.nrich.ai https://tracking.chilipiper.com https://translate.googleapis.com https://vc.hotjar.io https://*.hotjar.com wss://*.hotjar.com https://cdn.linkedin.oribi.io https://www.facebook.com https://www.google-analytics.com https://app.leandata.com https://js.zi-scripts.com https://ws.zoominfo.com https://www.google.com https://www.googletagmanager.com https://cs.lf-discover.com https://*.d41.co https://d41.co https://se-services.intellimize.co https://*.salesloft.com https://*.6sc.co https://secure.adnxs.com/ https://content.hotjar.io https://metrics.hotjar.io https://epsilon.6sense.com https://px.ads.linkedin.com https://*.6sense.com https://tracking.g2crowd.com https://tracking-api.production.g2.com https://tracking-api.g2.com/ https://cdnjs.cloudflare.com/ https://geolocation.onetrust.com https://app.qualified.com/ wss://ws8.qualified.com/ https://*.qualified.com wss://*.qualified.com https://cdn.jsdelivr.net https://privacyportal.onetrust.com/ https://www.googleadservices.com/ https://googleads.g.doubleclick.net; font-src 'self' https://cdnjs.cloudflare.com https://fonts.gstatic.com https://use.fontawesome.com https://js.qualified.com https://*.qualified.com; child-src https://*.qualified.com; frame-src https://*.esignlive.com/ https://*.onespan.com https://api.intellimize.co https://app.intellimize.co https://*.intellimizeio.com https://onespan.chilipiper.com https://apps.chilipiper.com https://app-abk.marketo.com https://bid.g.doubleclick.net https://boards.greenhouse.io https://player.vimeo.com https://sandbox.esignlive.com https://secure.onespan.com https://test.api.intellimize.co https://tpc.googlesyndication.com https://tribl.io https://vars.hotjar.com https://vimeo.com https://www.facebook.com https://www.google.com https://www.googletagmanager.com https://www.youtube-nocookie.com https://*.youtube.com https://youtube.com https://*.prod.acquia-sites.com https://embed.ustudio.com/ https://view.ceros.com/ https://app.leandata.com https://optimize.google.com https://webikeo.fr/ https://td.doubleclick.net/ https://job-boards.greenhouse.io/ https://www.g2.com/ https://challenges.cloudflare.com/ https://app.qualified.com/ https://*.qualified.com; img-src 'self' data: blob: https://*.qualified.com; manifest-src 'self'; media-src https://assets.qualified.com https://*.qualified.com mediastream: https://*.onespan.com; worker-src 'self' blob:; 7
upgrade-insecure-requests; default-src 'self' https://*.motorcar.com https://*.ebizautos.media; img-src *; script-src 'self' 'unsafe-inline' *; font-src *; media-src *; frame-src *; manifest-src 'self'; style-src 'self' 'unsafe-inline' *; connect-src https://*; object-src 'none'; worker-src 'none'; base-uri 'self'; report-uri https://ebizautos.report-uri.com/r/t/csp/reportOnly; 7
default-src 'self' https://supersklep.pl https://*.supersklep.pl https://supersklep.cz https://*.supersklep.cz https://supersklep.sk https://*.supersklep.sk https://supersklep.ro https://*.supersklep.ro https://supersklep.hu https://*.supersklep.hu https://supersklep.bg https://*.supersklep.bg https://super-shop.com https://*.super-shop.com https://super-shop.ua https://*.super-shop.ua; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://supersklep.pl https://*.supersklep.pl https://supersklep.cz https://*.supersklep.cz https://supersklep.sk https://*.supersklep.sk https://supersklep.ro https://*.supersklep.ro https://supersklep.hu https://*.supersklep.hu https://supersklep.bg https://*.supersklep.bg https://super-shop.com https://*.super-shop.com https://super-shop.ua https://*.super-shop.ua https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://cdn.jsdelivr.net https://cdn-cookieyes.com https://widget.packeta.com https://mapa.gls-poland.com https://geowidget.inpost-group.com https://geowidget.easypack24.net https://api.exponea.com https://cdn.lightwidget.com https://static.payu.com https://capi-automation.s3.us-east-2.amazonaws.com https://analytics.tiktok.com https://www.glami.sk https://www.glami.cz https://www.glami.pl https://*.seznam.cz https://im9.cz https://pagead2.googlesyndication.com https://www.zbozi.cz https://cdn.allekurier.pl https://cdn.snadnevraceni.cz https://cdn.retururisimple.ro https://cs-ssgtm-631718707859.europe-central2.run.app https://translate.googleapis.com https://translate.google.com; style-src 'self' 'unsafe-inline' https://supersklep.pl https://*.supersklep.pl https://supersklep.cz https://*.supersklep.cz https://supersklep.sk https://*.supersklep.sk https://supersklep.ro https://*.supersklep.ro https://supersklep.hu https://*.supersklep.hu https://supersklep.bg https://*.supersklep.bg https://super-shop.com https://*.super-shop.com https://super-shop.ua https://*.super-shop.ua https://cdn.jsdelivr.net https://cdn-cookieyes.com https://widget.packeta.com https://geowidget.inpost-group.com https://geowidget.easypack24.net https://fonts.googleapis.com https://mapa.gls-poland.com https://static.payu.com https://www.gstatic.com; img-src 'self' data: blob: https:; font-src 'self' data: https://supersklep.pl https://*.supersklep.pl https://supersklep.cz https://*.supersklep.cz https://supersklep.sk https://*.supersklep.sk https://supersklep.ro https://*.supersklep.ro https://supersklep.hu https://*.supersklep.hu https://supersklep.bg https://*.supersklep.bg https://super-shop.com https://*.super-shop.com https://super-shop.ua https://*.super-shop.ua https://fonts.gstatic.com https://cdn-cookieyes.com https://mapa.gls-poland.com https://static.payu.com https://geowidget.easypack24.net; connect-src 'self' https://supersklep.pl https://*.supersklep.pl https://supersklep.cz https://*.supersklep.cz https://supersklep.sk https://*.supersklep.sk https://supersklep.ro https://*.supersklep.ro https://supersklep.hu https://*.supersklep.hu https://supersklep.bg https://*.supersklep.bg https://super-shop.com https://*.super-shop.com https://super-shop.ua https://*.super-shop.ua https://*.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://api.exponea.com https://ppapi.olzalogistic.net https://serv.meest.com https://widget.packeta.com https://mapa.gls-poland.com https://adeplus.gls-poland.com https://geowidget.inpost-group.com https://geowidget.easypack24.net https://www.facebook.com https://cdn-cookieyes.com https://cdn.jsdelivr.net https://static.payu.com https://secure.payu.com https://www.google.com https://google.com https://pagead2.googlesyndication.com https://ad.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://analytics.tiktok.com https://*.tiktokw.us https://*.seznam.cz https://credit-widget-config.payu.com https://*.easypack24.net https://osm.inpost.pl https://connect.facebook.net https://brxcdn.com https://*.brxcdn.com https://translate.googleapis.com https://translate-pa.googleapis.com https://www.google.pl https://www.google.cz https://www.google.sk https://www.google.ro https://www.google.hu https://www.google.bg https://www.google.com.ua https://www.google.de https://www.google.at https://www.google.fr https://www.google.co.uk https://www.google.it https://www.google.es https://www.google.nl https://cs-ssgtm-631718707859.europe-central2.run.app; frame-src 'self' https://supersklep.pl https://*.supersklep.pl https://supersklep.cz https://*.supersklep.cz https://supersklep.sk https://*.supersklep.sk https://supersklep.ro https://*.supersklep.ro https://supersklep.hu https://*.supersklep.hu https://supersklep.bg https://*.supersklep.bg https://super-shop.com https://*.super-shop.com https://super-shop.ua https://*.super-shop.ua https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://td.doubleclick.net https://bid.g.doubleclick.net https://www.facebook.com https://widget.packeta.com https://*.inpost-group.com https://geowidget.easypack24.net https://mapa.gls-poland.com https://serv.meest.com https://cdn.lightwidget.com https://lightwidget.com https://secure.payu.com https://parcelshop.dhl.pl https://*.fls.doubleclick.net https://*.seznam.cz https://c.imedia.cz https://cs-ssgtm-631718707859.europe-central2.run.app https://challenges.cloudflare.com; media-src 'self' blob: https://supersklep.pl https://*.supersklep.pl https://supersklep.cz https://*.supersklep.cz https://supersklep.sk https://*.supersklep.sk https://supersklep.ro https://*.supersklep.ro https://supersklep.hu https://*.supersklep.hu https://supersklep.bg https://*.supersklep.bg https://super-shop.com https://*.super-shop.com https://super-shop.ua https://*.super-shop.ua; worker-src 'self' blob:; report-uri /csp-report.php 7
default-src https: data:; script-src https: data: 'unsafe-inline' 'unsafe-eval'; style-src https: data: 'unsafe-inline'; frame-ancestors 'self'; report-uri https://stoklasa.report-uri.io/r/default/csp/reportOnly 7
default-src 'self'; 			object-src 'none'; 			frame-ancestors 'self'; 7
default-src 'self' data: wss://enu3cdg6tvghrjuahpbe6c6w5i.appsync-api.eu-west-1.amazonaws.com/graphql wss://enu3cdg6tvghrjuahpbe6c6w5i.appsync-realtime-api.eu-west-1.amazonaws.com/graphql s3.eu-west-1.amazonaws.com/uploads.knowbe4.eu/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com btb-glossary.btb.private.knowbe4.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io deepfake-content-write-production-eu-west-1.s3.eu-west-1.amazonaws.com deepfake-content-read-production-eu-west-1.s3.eu-west-1.amazonaws.com eai-agent-security-private-ai-production-eu-west-1.s3.amazonaws.com ccm-scorm-production-eu-west-1.s3.amazonaws.com ccm-courses-production-eu-west-1.s3.amazonaws.com fonts.googleapis.com js.hsforms.net forms.hsforms.com forms.hubspot.com api.hsforms.com https://*.hsforms.com https://*.hubspot.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://*.knowbe4.com https://*.kb4od.run https://*.ckeditor.com/ https://*.launchdarkly.com/ https://*.zopim.com/ https://api-js.mixpanel.com https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk.com/ https://knowbe4.zendesk.com/embeddable/config https://knowbe4.zendesk.com/embeddable_blip https://knowbe4.zendesk.com/frontendevents/dl https://knowbe4.zendesk.com/frontendevents/pv https://s3.amazonaws.com/development.uploads.knowbe4.com/ https://s3.amazonaws.com/kmsat-development.uploads.knowbe4.com/ https://s3.amazonaws.com/helpimg/ https://s3.amazonaws.com/helpimg-kmsat-development-us-east-1/ https://helpimg.s3.amazonaws.com/ https://static.zdassets.com/ https://zendesk-eu.my.sentry.io/ pendo-static-6167502888239104.storage.googleapis.com wss://*.zopim.com/ wss://knowbe4.zendesk.com/ ; frame-ancestors 'self' https://*.knowbe4.com https://*.kb4od.run ; child-src 'self' blob: ; connect-src 'self' data: blob: wss://enu3cdg6tvghrjuahpbe6c6w5i.appsync-api.eu-west-1.amazonaws.com/graphql wss://enu3cdg6tvghrjuahpbe6c6w5i.appsync-realtime-api.eu-west-1.amazonaws.com/graphql s3.eu-west-1.amazonaws.com/uploads.knowbe4.eu/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com btb-glossary.btb.private.knowbe4.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io deepfake-content-write-production-eu-west-1.s3.eu-west-1.amazonaws.com deepfake-content-read-production-eu-west-1.s3.eu-west-1.amazonaws.com eai-agent-security-private-ai-production-eu-west-1.s3.amazonaws.com ccm-scorm-production-eu-west-1.s3.amazonaws.com ccm-courses-production-eu-west-1.s3.amazonaws.com fonts.googleapis.com js.hsforms.net forms.hsforms.com forms.hubspot.com api.hsforms.com https://*.hsforms.com https://*.hubspot.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://*.knowbe4.com https://*.kb4od.run https://*.ckeditor.com/ https://*.launchdarkly.com/ https://*.zopim.com/ https://api-js.mixpanel.com https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk.com/ https://knowbe4.zendesk.com/embeddable/config https://knowbe4.zendesk.com/embeddable_blip https://knowbe4.zendesk.com/frontendevents/dl https://knowbe4.zendesk.com/frontendevents/pv https://s3.amazonaws.com/development.uploads.knowbe4.com/ https://s3.amazonaws.com/kmsat-development.uploads.knowbe4.com/ https://s3.amazonaws.com/helpimg/ https://s3.amazonaws.com/helpimg-kmsat-development-us-east-1/ https://helpimg.s3.amazonaws.com/ https://static.zdassets.com/ https://zendesk-eu.my.sentry.io/ pendo-static-6167502888239104.storage.googleapis.com wss://*.zopim.com/ wss://knowbe4.zendesk.com/ ; frame-src 'self' blob: wss://enu3cdg6tvghrjuahpbe6c6w5i.appsync-api.eu-west-1.amazonaws.com/graphql wss://enu3cdg6tvghrjuahpbe6c6w5i.appsync-realtime-api.eu-west-1.amazonaws.com/graphql s3.eu-west-1.amazonaws.com/uploads.knowbe4.eu/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com btb-glossary.btb.private.knowbe4.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io deepfake-content-write-production-eu-west-1.s3.eu-west-1.amazonaws.com deepfake-content-read-production-eu-west-1.s3.eu-west-1.amazonaws.com eai-agent-security-private-ai-production-eu-west-1.s3.amazonaws.com ccm-scorm-production-eu-west-1.s3.amazonaws.com ccm-courses-production-eu-west-1.s3.amazonaws.com fonts.googleapis.com js.hsforms.net forms.hsforms.com forms.hubspot.com api.hsforms.com https://*.hsforms.com https://*.hubspot.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://*.knowbe4.com https://*.kb4od.run https://*.ckeditor.com/ https://*.launchdarkly.com/ https://*.zopim.com/ https://api-js.mixpanel.com https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk.com/ https://knowbe4.zendesk.com/embeddable/config https://knowbe4.zendesk.com/embeddable_blip https://knowbe4.zendesk.com/frontendevents/dl https://knowbe4.zendesk.com/frontendevents/pv https://s3.amazonaws.com/development.uploads.knowbe4.com/ https://s3.amazonaws.com/kmsat-development.uploads.knowbe4.com/ https://s3.amazonaws.com/helpimg/ https://s3.amazonaws.com/helpimg-kmsat-development-us-east-1/ https://helpimg.s3.amazonaws.com/ https://static.zdassets.com/ https://zendesk-eu.my.sentry.io/ pendo-static-6167502888239104.storage.googleapis.com wss://*.zopim.com/ wss://knowbe4.zendesk.com/ android-webview-video-poster: https://player.vimeo.com https://*.ccm.knowbe4.com https://*.internal.knowbe4.com https://*.ccm.internal.knowbe4.com ; font-src 'self' data: fonts.gstatic.com helpimg.s3.amazonaws.com use.fontawesome.com use.typekit.net https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/ ; img-src * 'self' blob: cid: data: file: android-webview-video-poster: https://cdn.mxpnl.com/ https://v2assets.zopim.io/ https://static.zdassets.com/ app.pendo.io cdn.pendo.io data.pendo.io pendo-static-6167502888239104.storage.googleapis.com ; media-src 'self' about: blob: data: wss://enu3cdg6tvghrjuahpbe6c6w5i.appsync-api.eu-west-1.amazonaws.com/graphql wss://enu3cdg6tvghrjuahpbe6c6w5i.appsync-realtime-api.eu-west-1.amazonaws.com/graphql s3.eu-west-1.amazonaws.com/uploads.knowbe4.eu/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com btb-glossary.btb.private.knowbe4.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io deepfake-content-write-production-eu-west-1.s3.eu-west-1.amazonaws.com deepfake-content-read-production-eu-west-1.s3.eu-west-1.amazonaws.com eai-agent-security-private-ai-production-eu-west-1.s3.amazonaws.com ccm-scorm-production-eu-west-1.s3.amazonaws.com ccm-courses-production-eu-west-1.s3.amazonaws.com fonts.googleapis.com js.hsforms.net forms.hsforms.com forms.hubspot.com api.hsforms.com https://*.hsforms.com https://*.hubspot.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://*.knowbe4.com https://*.kb4od.run https://*.ckeditor.com/ https://*.launchdarkly.com/ https://*.zopim.com/ https://api-js.mixpanel.com https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk.com/ https://knowbe4.zendesk.com/embeddable/config https://knowbe4.zendesk.com/embeddable_blip https://knowbe4.zendesk.com/frontendevents/dl https://knowbe4.zendesk.com/frontendevents/pv https://s3.amazonaws.com/development.uploads.knowbe4.com/ https://s3.amazonaws.com/kmsat-development.uploads.knowbe4.com/ https://s3.amazonaws.com/helpimg/ https://s3.amazonaws.com/helpimg-kmsat-development-us-east-1/ https://helpimg.s3.amazonaws.com/ https://static.zdassets.com/ https://zendesk-eu.my.sentry.io/ pendo-static-6167502888239104.storage.googleapis.com wss://*.zopim.com/ wss://knowbe4.zendesk.com/ ; object-src 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: wss://enu3cdg6tvghrjuahpbe6c6w5i.appsync-api.eu-west-1.amazonaws.com/graphql wss://enu3cdg6tvghrjuahpbe6c6w5i.appsync-realtime-api.eu-west-1.amazonaws.com/graphql s3.eu-west-1.amazonaws.com/uploads.knowbe4.eu/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com btb-glossary.btb.private.knowbe4.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io deepfake-content-write-production-eu-west-1.s3.eu-west-1.amazonaws.com deepfake-content-read-production-eu-west-1.s3.eu-west-1.amazonaws.com eai-agent-security-private-ai-production-eu-west-1.s3.amazonaws.com ccm-scorm-production-eu-west-1.s3.amazonaws.com ccm-courses-production-eu-west-1.s3.amazonaws.com fonts.googleapis.com js.hsforms.net forms.hsforms.com forms.hubspot.com api.hsforms.com https://*.hsforms.com https://*.hubspot.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://*.knowbe4.com https://*.kb4od.run https://*.ckeditor.com/ https://*.launchdarkly.com/ https://*.zopim.com/ https://api-js.mixpanel.com https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk.com/ https://knowbe4.zendesk.com/embeddable/config https://knowbe4.zendesk.com/embeddable_blip https://knowbe4.zendesk.com/frontendevents/dl https://knowbe4.zendesk.com/frontendevents/pv https://s3.amazonaws.com/development.uploads.knowbe4.com/ https://s3.amazonaws.com/kmsat-development.uploads.knowbe4.com/ https://s3.amazonaws.com/helpimg/ https://s3.amazonaws.com/helpimg-kmsat-development-us-east-1/ https://helpimg.s3.amazonaws.com/ https://static.zdassets.com/ https://zendesk-eu.my.sentry.io/ pendo-static-6167502888239104.storage.googleapis.com wss://*.zopim.com/ wss://knowbe4.zendesk.com/ pendo-io-static.storage.googleapis.com pendo-static-6167502888239104.storage.googleapis.com use.typekit.net ; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' blob: data: wss://enu3cdg6tvghrjuahpbe6c6w5i.appsync-api.eu-west-1.amazonaws.com/graphql wss://enu3cdg6tvghrjuahpbe6c6w5i.appsync-realtime-api.eu-west-1.amazonaws.com/graphql s3.eu-west-1.amazonaws.com/uploads.knowbe4.eu/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com btb-glossary.btb.private.knowbe4.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io deepfake-content-write-production-eu-west-1.s3.eu-west-1.amazonaws.com deepfake-content-read-production-eu-west-1.s3.eu-west-1.amazonaws.com eai-agent-security-private-ai-production-eu-west-1.s3.amazonaws.com ccm-scorm-production-eu-west-1.s3.amazonaws.com ccm-courses-production-eu-west-1.s3.amazonaws.com fonts.googleapis.com js.hsforms.net forms.hsforms.com forms.hubspot.com api.hsforms.com https://*.hsforms.com https://*.hubspot.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://*.knowbe4.com https://*.kb4od.run https://*.ckeditor.com/ https://*.launchdarkly.com/ https://*.zopim.com/ https://api-js.mixpanel.com https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk.com/ https://knowbe4.zendesk.com/embeddable/config https://knowbe4.zendesk.com/embeddable_blip https://knowbe4.zendesk.com/frontendevents/dl https://knowbe4.zendesk.com/frontendevents/pv https://s3.amazonaws.com/development.uploads.knowbe4.com/ https://s3.amazonaws.com/kmsat-development.uploads.knowbe4.com/ https://s3.amazonaws.com/helpimg/ https://s3.amazonaws.com/helpimg-kmsat-development-us-east-1/ https://helpimg.s3.amazonaws.com/ https://static.zdassets.com/ https://zendesk-eu.my.sentry.io/ pendo-static-6167502888239104.storage.googleapis.com wss://*.zopim.com/ wss://knowbe4.zendesk.com/ https://unpkg.com/vue@2.6.14 pendo-io-static.storage.googleapis.com pendo-static-6167502888239104.storage.googleapis.com use.typekit.net https://cdn.pendo.io/agent/static/365392a9-6608-44ef-443b-572eef771b95/pendo.js ; style-src 'self' 'unsafe-inline' data: app.pendo.io cdn.pendo.io fonts.gstatic.com https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/ pendo-static-6167502888239104.storage.googleapis.com use.typekit.net ; style-src-elem 'self' 'unsafe-inline' data: app.pendo.io cdn.pendo.io fonts.googleapis.com fonts.gstatic.com helpimg.s3.amazonaws.com cdnjs.cloudflare.com/ajax/libs/font-awesome/ cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/ p.typekit.net pendo-static-6167502888239104.storage.googleapis.com s3.amazonaws.com/helpimg/ use.fontawesome.com use.typekit.net www.java.com/ga/css/print.css www.java.com/ga/css/screen.css ; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubf27996eb9977f34aa9f3376bd3939adc&dd-evp-origin=content-security-policy&ddsource=csp-report&app=kmsat&env=production-eu-west-1 ; worker-src 'self' blob: data: ; 7
block-all-mixed-content;default-src https:;script-src * 'self' https: 'unsafe-eval' 'unsafe-inline';style-src * 'self' https: 'unsafe-inline';connect-src * https: https://*.paynearme.com;manifest-src 'self';font-src * 'self' https:;form-action 'self' https://www.facebook.com https://accounts.google.com https://twitter.com https://login.microsoftonline.com;img-src * 'self' https: data:;media-src *;object-src 'none';frame-ancestors *;frame-src * https://*.paynearme.com;worker-src 'self';base-uri 'self';report-uri /csp-report 7
default-src 'self'; script-src 'self' 'unsafe-inline' https://*.dynatrace.com https://*.cookielaw.org https://*.usersnap.com https://*.calibermind.com https://*.hotjar.com https://*.googletagmanager.com https://*.b0e8.com https://*.doubleclick.net https://*.bing.com https://*.licdn.com https://*.redditstatic.com https://*.6sc.co https://*.influ2.com https://*.zoominfo.com https://*.d41.co https://*.stackadapt.com https://*.marketo.net; style-src 'self' 'unsafe-inline' https://*.cookielaw.org https://cdnjs.cloudflare.com; img-src 'self' data: https://*.dynatrace.com https://dt-cdn.net https://*.cookielaw.org https://*.reddit.com https://*.google.com https://*.google.at https://*.linkedin.com https://*.bing.com https://*.6sc.co; font-src 'self' data:; connect-src 'self' https://*.dynatrace.com https://*.bc0a.com https://*.cookielaw.org https://*.calibermind.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://unpkg.com https://*.google-analytics.com https://*.google.com https://*.doubleclick.net https://*.bing.com https://*.linkedin.com https://*.reddit.com https://*.stackadapt.com https://*.6sc.co https://*.adnxs.com https://*.influ2.com https://*.d41.co https://*.mktoresp.com https://*.zoominfo.com; frame-src 'self' https://*.googletagmanager.com https://*.youtube.com https://*.youtube-nocookie.com https://*.doubleclick.net; frame-ancestors 'self' *.dynatrace.org *.dynatrace.com *.dynatrace.cn; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' 6
base-uri 'self'; font-src 'self' data: https://assets.vw-mms.de; img-src 'self' https: blob: data: https://assets.vw-mms.de https://uploads.vw-mms.de; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://assets.vw-mms.de tools.euroland.com volkswagen.gomexlive.com volkswagen-newsroom.gomexlive.com stats.vw-mms.de www.youtube.com www.youtube-nocookie.com; style-src 'self' 'unsafe-inline' https://assets.vw-mms.de; default-src 'self'; media-src 'self' https: blob: data: https://uploads.vw-mms.de; connect-src 'self' blob: data: https://assets.vw-mms.de tools.eurolandir.com stats.vw-mms.de o4509546924408832.ingest.de.sentry.io; frame-src 'self' tools.eurolandir.com tools.euroland.com volkswagen.gomexlive.com volkswagen-newsroom.gomexlive.com embed.gomexlive.com player.gl-systemhaus.de de.vistream.online en.vistream.online www.vistream.online www.vw01-assets.com www.youtube.com www.youtube-nocookie.com; report-uri https://o4509546924408832.ingest.de.sentry.io/api/4509548617269328/security/?sentry_key=f70e804d43977980e79911505a9beabf 6
script-src 'self' 'unsafe-inline' 'unsafe-eval'   *.interactivebrokers.com   *.interactivebrokers.ca   *.interactivebrokers.com.hk   *.interactivebrokers.hk   *.interactivebrokers.ch   *.interactivebrokers.eu   *.interactivebrokers.ie   *.interactivebrokers.lu   *.interactivebrokers.hu   *.interactivebrokers.com.sg   *.interactivebrokers.co.uk   *.interactivebrokers.com.au   *.interactivebrokers.co.jp   *.interactivebrokers.co.in   *.ibkr.com   *.ibkr.com.cn   *.ibkrcampus.com   *.ibkrguides.com   *.clientam.com   *.interactiveadvisors.com   *.portfolioanalyst.com   *.go-mpulse.net   *.akstat.io   *.tradingview.com   bat.bing.com   *.taboola.com   googleads.g.doubleclick.net   www.googletagmanager.com   *.tiktok.com   *.quora.com   *.facebook.net   *.amazon-adsystem.com   *.ads-twitter.com   *.redditstatic.com   *.getlimy.ai   *.googleapis.com   *.google-analytics.com   *.gstatic.com   *.googleadservices.com   *.plaid.com   ; report-to csp-endpoint; report-uri /response_handlers/csplogger/index.php 6
require-trusted-types-for 'script' 6
default-src 'self' wss: https://*.everviz.com https://app.everviz.com https://*.highcharts.com https://analytics.google.com https://*.analytics.google.com *.xmcwtwco.com *.sitecorecloud.io *.willistowerswatson.com *.wtwco *.wtwco.com *.wtwco.cn https://*.brightcovecdn.com https://*.brightcove.com https://*.boltdns.net https://*.marketo.net https://*.facebook.com https://*.doubleclick.net https://*.infoblox.com https://*.cisco-secure.com https://*.mktoutil.com https://*.clarity.ms https://www.google.com https://www.google.co https://www.google.hn https://www.google.ps https://www.google.rs https://www.google.ad https://www.google.ca https://www.google.ch https://www.google.cl https://*.reddit.com https://*.outbrain.com https://*.twitter.com https://*.appier.net https://*.hubspot.com https://*.livechatinc.com https://*.branch.io https://*.privacymanager.io https://*.trendmicro.com https://*.bing.com https://*.cloudflare.com https://*.amazonaws.com https://*.brevo.com https://*.callrail.com https://*.cookie-script.com https://*.iubenda.com https://*.onetrust.com https://*.yahoo.com https://*.hotjar.io https://*.fullstory.com https://*.klaviyo.com https://*.googleapis.com https://*.gstatic.cn https://*.gstatic.com https://*.zscalertwo.net https://*.zscloud.net https://*.hs-scripts.com https://*.youtube.com https://*.mimecast.com https://*.google-analytics.com https://*.qualtrics.com https://siteimproveanalytics.com https://bat.bing.net https://cdn.cookielaw.org https://connect.facebook.net https://login.microsoftonline.com https://microsoftedge.microsoft.com https://players.brightcove.net https://edge.api.brightcove.com https://cdn.bc0a.com https://secure.brightcove.com https://snap.licdn.com https://static2.sharepointonline.com https://use.fontawesome.com https://use.typekit.net https://vjss.zencdn.net https://widgets.trustedshops.com https://www.googleadservices.com https://www.googletagmanager.com https://www.googletagservices.com https://www.recaptcha.net https://munchkin.marketo.net https://px.ads.linkedin.com https://*.coveo.com https://*.siteimproveanalytics.io https://*.mktoresp.com https://zuxydfcl.cdn.imgeng.in https://www.google.nl https://mediacdn.wtwco.com https://assets.adoberesources.net https://documentcloud.adobe.com *.adobe.io wss://*.adobe.io https://lh3.googleusercontent.com https://*.typekit.net data: blob: 'unsafe-inline' 'unsafe-eval'; report-uri 6
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://pagead2.googlesyndication.com https://tagmanager.google.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://*.google.com https://www.google.com https://www.gstatic.com https://*.marketo.com https://*.mktoresp.com https://app-sjqe.marketo.com https://*.linkedin.com https://px.ads.linkedin.com https://snap.licdn.com https://connect.facebook.net https://*.facebook.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.zoominfo.com https://cdn.calibermind.com https://*.calibermind.com https://*.6sc.co https://*.6sense.com https://*.wistia.com https://*.wistia.net https://fast.wistia.com https://*.qualified.com https://*.qualified.io https://*.quillfeed.com https://*.onetrust.com https://cdn.cookielaw.org https://*.sentry.io https://*.ingest.sentry.io https://js.sentry-cdn.com https://*.cloudflare.com https://*.cloudflareinsights.com https://info.uplandsoftware.com https://cdn.jsdelivr.net https://*.clickcease.com https://bat.bing.com https://bat.bing.net https://px4.ads.linkedin.com https://dc.ads.linkedin.com https://p.adsymptotic.com https://cdn.linkedin.oribi.io https://gw.linkedin.oribi.io https://sjs.bizographics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://tagmanager.google.com https://*.onetrust.com https://cdn.cookielaw.org https://*.marketo.com https://*.mktoresp.com https://app-sjqe.marketo.com https://cdn.jsdelivr.net; img-src 'self' data: blob: https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://*.google-analytics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://*.google.com https://pagead2.googlesyndication.com https://google.com https://*.g.doubleclick.net https://www.google.ad https://*.google.ad https://www.google.ae https://*.google.ae https://www.google.com.af https://*.google.com.af https://www.google.com.ag https://*.google.com.ag https://www.google.al https://*.google.al https://www.google.am https://*.google.am https://www.google.co.ao https://*.google.co.ao https://www.google.com.ar https://*.google.com.ar https://www.google.as https://*.google.as https://www.google.at https://*.google.at https://www.google.com.au https://*.google.com.au https://www.google.az https://*.google.az https://www.google.ba https://*.google.ba https://www.google.com.bd https://*.google.com.bd https://www.google.be https://*.google.be https://www.google.bf https://*.google.bf https://www.google.bg https://*.google.bg https://www.google.com.bh https://*.google.com.bh https://www.google.bi https://*.google.bi https://www.google.bj https://*.google.bj https://www.google.com.bn https://*.google.com.bn https://www.google.com.bo https://*.google.com.bo https://www.google.com.br https://*.google.com.br https://www.google.bs https://*.google.bs https://www.google.bt https://*.google.bt https://www.google.co.bw https://*.google.co.bw https://www.google.by https://*.google.by https://www.google.com.bz https://*.google.com.bz https://www.google.ca https://*.google.ca https://www.google.cd https://*.google.cd https://www.google.cf https://*.google.cf https://www.google.cg https://*.google.cg https://www.google.ch https://*.google.ch https://www.google.ci https://*.google.ci https://www.google.co.ck https://*.google.co.ck https://www.google.cl https://*.google.cl https://www.google.cm https://*.google.cm https://www.google.cn https://*.google.cn https://www.google.com.co https://*.google.com.co https://www.google.co.cr https://*.google.co.cr https://www.google.com.cu https://*.google.com.cu https://www.google.cv https://*.google.cv https://www.google.com.cy https://*.google.com.cy https://www.google.cz https://*.google.cz https://www.google.de https://*.google.de https://www.google.dj https://*.google.dj https://www.google.dk https://*.google.dk https://www.google.dm https://*.google.dm https://www.google.com.do https://*.google.com.do https://www.google.dz https://*.google.dz https://www.google.com.ec https://*.google.com.ec https://www.google.ee https://*.google.ee https://www.google.com.eg https://*.google.com.eg https://www.google.es https://*.google.es https://www.google.com.et https://*.google.com.et https://www.google.fi https://*.google.fi https://www.google.com.fj https://*.google.com.fj https://www.google.fm https://*.google.fm https://www.google.fr https://*.google.fr https://www.google.ga https://*.google.ga https://www.google.ge https://*.google.ge https://www.google.gg https://*.google.gg https://www.google.com.gh https://*.google.com.gh https://www.google.com.gi https://*.google.com.gi https://www.google.gl https://*.google.gl https://www.google.gm https://*.google.gm https://www.google.gr https://*.google.gr https://www.google.com.gt https://*.google.com.gt https://www.google.gy https://*.google.gy https://www.google.com.hk https://*.google.com.hk https://www.google.hn https://*.google.hn https://www.google.hr https://*.google.hr https://www.google.ht https://*.google.ht https://www.google.hu https://*.google.hu https://www.google.co.id https://*.google.co.id https://www.google.ie https://*.google.ie https://www.google.co.il https://*.google.co.il https://www.google.im https://*.google.im https://www.google.co.in https://*.google.co.in https://www.google.iq https://*.google.iq https://www.google.is https://*.google.is https://www.google.it https://*.google.it https://www.google.je https://*.google.je https://www.google.com.jm https://*.google.com.jm https://www.google.jo https://*.google.jo https://www.google.co.jp https://*.google.co.jp https://www.google.co.ke https://*.google.co.ke https://www.google.com.kh https://*.google.com.kh https://www.google.ki https://*.google.ki https://www.google.kg https://*.google.kg https://www.google.co.kr https://*.google.co.kr https://www.google.com.kw https://*.google.com.kw https://www.google.kz https://*.google.kz https://www.google.la https://*.google.la https://www.google.com.lb https://*.google.com.lb https://www.google.li https://*.google.li https://www.google.lk https://*.google.lk https://www.google.co.ls https://*.google.co.ls https://www.google.lt https://*.google.lt https://www.google.lu https://*.google.lu https://www.google.lv https://*.google.lv https://www.google.com.ly https://*.google.com.ly https://www.google.co.ma https://*.google.co.ma https://www.google.md https://*.google.md https://www.google.me https://*.google.me https://www.google.mg https://*.google.mg https://www.google.mk https://*.google.mk https://www.google.ml https://*.google.ml https://www.google.com.mm https://*.google.com.mm https://www.google.mn https://*.google.mn https://www.google.com.mt https://*.google.com.mt https://www.google.mu https://*.google.mu https://www.google.mv https://*.google.mv https://www.google.mw https://*.google.mw https://www.google.com.mx https://*.google.com.mx https://www.google.com.my https://*.google.com.my https://www.google.co.mz https://*.google.co.mz https://www.google.com.na https://*.google.com.na https://www.google.com.ng https://*.google.com.ng https://www.google.com.ni https://*.google.com.ni https://www.google.ne https://*.google.ne https://www.google.nl https://*.google.nl https://www.google.no https://*.google.no https://www.google.com.np https://*.google.com.np https://www.google.nr https://*.google.nr https://www.google.nu https://*.google.nu https://www.google.co.nz https://*.google.co.nz https://www.google.com.om https://*.google.com.om https://www.google.com.pa https://*.google.com.pa https://www.google.com.pe https://*.google.com.pe https://www.google.com.pg https://*.google.com.pg https://www.google.com.ph https://*.google.com.ph https://www.google.com.pk https://*.google.com.pk https://www.google.pl https://*.google.pl https://www.google.pn https://*.google.pn https://www.google.com.pr https://*.google.com.pr https://www.google.ps https://*.google.ps https://www.google.pt https://*.google.pt https://www.google.com.py https://*.google.com.py https://www.google.com.qa https://*.google.com.qa https://www.google.ro https://*.google.ro https://www.google.ru https://*.google.ru https://www.google.rw https://*.google.rw https://www.google.com.sa https://*.google.com.sa https://www.google.com.sb https://*.google.com.sb https://www.google.sc https://*.google.sc https://www.google.se https://*.google.se https://www.google.com.sg https://*.google.com.sg https://www.google.sh https://*.google.sh https://www.google.si https://*.google.si https://www.google.sk https://*.google.sk https://www.google.com.sl https://*.google.com.sl https://www.google.sn https://*.google.sn https://www.google.so https://*.google.so https://www.google.sm https://*.google.sm https://www.google.sr https://*.google.sr https://www.google.st https://*.google.st https://www.google.com.sv https://*.google.com.sv https://www.google.td https://*.google.td https://www.google.tg https://*.google.tg https://www.google.co.th https://*.google.co.th https://www.google.com.tj https://*.google.com.tj https://www.google.tl https://*.google.tl https://www.google.tm https://*.google.tm https://www.google.tn https://*.google.tn https://www.google.to https://*.google.to https://www.google.com.tr https://*.google.com.tr https://www.google.tt https://*.google.tt https://www.google.com.tw https://*.google.com.tw https://www.google.co.tz https://*.google.co.tz https://www.google.com.ua https://*.google.com.ua https://www.google.co.ug https://*.google.co.ug https://www.google.co.uk https://*.google.co.uk https://www.google.com.uy https://*.google.com.uy https://www.google.co.uz https://*.google.co.uz https://www.google.com.vc https://*.google.com.vc https://www.google.co.ve https://*.google.co.ve https://www.google.co.vi https://*.google.co.vi https://www.google.com.vn https://*.google.com.vn https://www.google.vu https://*.google.vu https://www.google.ws https://*.google.ws https://www.google.rs https://*.google.rs https://www.google.co.za https://*.google.co.za https://www.google.co.zm https://*.google.co.zm https://www.google.co.zw https://*.google.co.zw https://www.google.cat https://*.google.cat https://*.linkedin.com https://px.ads.linkedin.com https://snap.licdn.com https://connect.facebook.net https://*.facebook.com https://*.wistia.com https://*.wistia.net https://fast.wistia.com https://*.gravatar.com https://*.wp.com https://*.wordpress.com https://*.6sc.co https://*.6sense.com https://*.clickcease.com https://bat.bing.com https://bat.bing.net https://px4.ads.linkedin.com https://dc.ads.linkedin.com https://p.adsymptotic.com https://cdn.linkedin.oribi.io https://gw.linkedin.oribi.io https://sjs.bizographics.com; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://*.google-analytics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://*.google.com https://pagead2.googlesyndication.com https://ad.doubleclick.net https://google.com https://*.g.doubleclick.net https://*.analytics.google.com https://www.google.ad https://*.google.ad https://www.google.ae https://*.google.ae https://www.google.com.af https://*.google.com.af https://www.google.com.ag https://*.google.com.ag https://www.google.al https://*.google.al https://www.google.am https://*.google.am https://www.google.co.ao https://*.google.co.ao https://www.google.com.ar https://*.google.com.ar https://www.google.as https://*.google.as https://www.google.at https://*.google.at https://www.google.com.au https://*.google.com.au https://www.google.az https://*.google.az https://www.google.ba https://*.google.ba https://www.google.com.bd https://*.google.com.bd https://www.google.be https://*.google.be https://www.google.bf https://*.google.bf https://www.google.bg https://*.google.bg https://www.google.com.bh https://*.google.com.bh https://www.google.bi https://*.google.bi https://www.google.bj https://*.google.bj https://www.google.com.bn https://*.google.com.bn https://www.google.com.bo https://*.google.com.bo https://www.google.com.br https://*.google.com.br https://www.google.bs https://*.google.bs https://www.google.bt https://*.google.bt https://www.google.co.bw https://*.google.co.bw https://www.google.by https://*.google.by https://www.google.com.bz https://*.google.com.bz https://www.google.ca https://*.google.ca https://www.google.cd https://*.google.cd https://www.google.cf https://*.google.cf https://www.google.cg https://*.google.cg https://www.google.ch https://*.google.ch https://www.google.ci https://*.google.ci https://www.google.co.ck https://*.google.co.ck https://www.google.cl https://*.google.cl https://www.google.cm https://*.google.cm https://www.google.cn https://*.google.cn https://www.google.com.co https://*.google.com.co https://www.google.co.cr https://*.google.co.cr https://www.google.com.cu https://*.google.com.cu https://www.google.cv https://*.google.cv https://www.google.com.cy https://*.google.com.cy https://www.google.cz https://*.google.cz https://www.google.de https://*.google.de https://www.google.dj https://*.google.dj https://www.google.dk https://*.google.dk https://www.google.dm https://*.google.dm https://www.google.com.do https://*.google.com.do https://www.google.dz https://*.google.dz https://www.google.com.ec https://*.google.com.ec https://www.google.ee https://*.google.ee https://www.google.com.eg https://*.google.com.eg https://www.google.es https://*.google.es https://www.google.com.et https://*.google.com.et https://www.google.fi https://*.google.fi https://www.google.com.fj https://*.google.com.fj https://www.google.fm https://*.google.fm https://www.google.fr https://*.google.fr https://www.google.ga https://*.google.ga https://www.google.ge https://*.google.ge https://www.google.gg https://*.google.gg https://www.google.com.gh https://*.google.com.gh https://www.google.com.gi https://*.google.com.gi https://www.google.gl https://*.google.gl https://www.google.gm https://*.google.gm https://www.google.gr https://*.google.gr https://www.google.com.gt https://*.google.com.gt https://www.google.gy https://*.google.gy https://www.google.com.hk https://*.google.com.hk https://www.google.hn https://*.google.hn https://www.google.hr https://*.google.hr https://www.google.ht https://*.google.ht https://www.google.hu https://*.google.hu https://www.google.co.id https://*.google.co.id https://www.google.ie https://*.google.ie https://www.google.co.il https://*.google.co.il https://www.google.im https://*.google.im https://www.google.co.in https://*.google.co.in https://www.google.iq https://*.google.iq https://www.google.is https://*.google.is https://www.google.it https://*.google.it https://www.google.je https://*.google.je https://www.google.com.jm https://*.google.com.jm https://www.google.jo https://*.google.jo https://www.google.co.jp https://*.google.co.jp https://www.google.co.ke https://*.google.co.ke https://www.google.com.kh https://*.google.com.kh https://www.google.ki https://*.google.ki https://www.google.kg https://*.google.kg https://www.google.co.kr https://*.google.co.kr https://www.google.com.kw https://*.google.com.kw https://www.google.kz https://*.google.kz https://www.google.la https://*.google.la https://www.google.com.lb https://*.google.com.lb https://www.google.li https://*.google.li https://www.google.lk https://*.google.lk https://www.google.co.ls https://*.google.co.ls https://www.google.lt https://*.google.lt https://www.google.lu https://*.google.lu https://www.google.lv https://*.google.lv https://www.google.com.ly https://*.google.com.ly https://www.google.co.ma https://*.google.co.ma https://www.google.md https://*.google.md https://www.google.me https://*.google.me https://www.google.mg https://*.google.mg https://www.google.mk https://*.google.mk https://www.google.ml https://*.google.ml https://www.google.com.mm https://*.google.com.mm https://www.google.mn https://*.google.mn https://www.google.com.mt https://*.google.com.mt https://www.google.mu https://*.google.mu https://www.google.mv https://*.google.mv https://www.google.mw https://*.google.mw https://www.google.com.mx https://*.google.com.mx https://www.google.com.my https://*.google.com.my https://www.google.co.mz https://*.google.co.mz https://www.google.com.na https://*.google.com.na https://www.google.com.ng https://*.google.com.ng https://www.google.com.ni https://*.google.com.ni https://www.google.ne https://*.google.ne https://www.google.nl https://*.google.nl https://www.google.no https://*.google.no https://www.google.com.np https://*.google.com.np https://www.google.nr https://*.google.nr https://www.google.nu https://*.google.nu https://www.google.co.nz https://*.google.co.nz https://www.google.com.om https://*.google.com.om https://www.google.com.pa https://*.google.com.pa https://www.google.com.pe https://*.google.com.pe https://www.google.com.pg https://*.google.com.pg https://www.google.com.ph https://*.google.com.ph https://www.google.com.pk https://*.google.com.pk https://www.google.pl https://*.google.pl https://www.google.pn https://*.google.pn https://www.google.com.pr https://*.google.com.pr https://www.google.ps https://*.google.ps https://www.google.pt https://*.google.pt https://www.google.com.py https://*.google.com.py https://www.google.com.qa https://*.google.com.qa https://www.google.ro https://*.google.ro https://www.google.ru https://*.google.ru https://www.google.rw https://*.google.rw https://www.google.com.sa https://*.google.com.sa https://www.google.com.sb https://*.google.com.sb https://www.google.sc https://*.google.sc https://www.google.se https://*.google.se https://www.google.com.sg https://*.google.com.sg https://www.google.sh https://*.google.sh https://www.google.si https://*.google.si https://www.google.sk https://*.google.sk https://www.google.com.sl https://*.google.com.sl https://www.google.sn https://*.google.sn https://www.google.so https://*.google.so https://www.google.sm https://*.google.sm https://www.google.sr https://*.google.sr https://www.google.st https://*.google.st https://www.google.com.sv https://*.google.com.sv https://www.google.td https://*.google.td https://www.google.tg https://*.google.tg https://www.google.co.th https://*.google.co.th https://www.google.com.tj https://*.google.com.tj https://www.google.tl https://*.google.tl https://www.google.tm https://*.google.tm https://www.google.tn https://*.google.tn https://www.google.to https://*.google.to https://www.google.com.tr https://*.google.com.tr https://www.google.tt https://*.google.tt https://www.google.com.tw https://*.google.com.tw https://www.google.co.tz https://*.google.co.tz https://www.google.com.ua https://*.google.com.ua https://www.google.co.ug https://*.google.co.ug https://www.google.co.uk https://*.google.co.uk https://www.google.com.uy https://*.google.com.uy https://www.google.co.uz https://*.google.co.uz https://www.google.com.vc https://*.google.com.vc https://www.google.co.ve https://*.google.co.ve https://www.google.co.vi https://*.google.co.vi https://www.google.com.vn https://*.google.com.vn https://www.google.vu https://*.google.vu https://www.google.ws https://*.google.ws https://www.google.rs https://*.google.rs https://www.google.co.za https://*.google.co.za https://www.google.co.zm https://*.google.co.zm https://www.google.co.zw https://*.google.co.zw https://www.google.cat https://*.google.cat https://*.marketo.com https://*.mktoresp.com https://app-sjqe.marketo.com https://*.linkedin.com https://px.ads.linkedin.com https://snap.licdn.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.zoominfo.com https://cdn.calibermind.com https://*.calibermind.com https://*.6sc.co https://*.6sense.com https://*.wistia.com https://*.wistia.net https://fast.wistia.com https://*.qualified.com https://*.qualified.io https://*.quillfeed.com https://*.onetrust.com https://cdn.cookielaw.org https://*.sentry.io https://*.ingest.sentry.io https://js.sentry-cdn.com https://*.cloudflare.com https://*.cloudflareinsights.com https://*.kinsta.cloud https://*.kinsta.com https://info.uplandsoftware.com https://*.clickcease.com https://bat.bing.com https://bat.bing.net https://px4.ads.linkedin.com https://dc.ads.linkedin.com https://p.adsymptotic.com https://cdn.linkedin.oribi.io https://gw.linkedin.oribi.io https://sjs.bizographics.com https://*.ingest.us.sentry.io; frame-src 'self' https://www.google.com https://www.gstatic.com https://*.marketo.com https://*.mktoresp.com https://app-sjqe.marketo.com https://*.wistia.com https://*.wistia.net https://fast.wistia.com https://*.qualified.com https://*.qualified.io https://*.quillfeed.com https://www.googletagmanager.com https://connect.facebook.net https://*.facebook.com https://info.uplandsoftware.com https://lottie.host https://*.secondstreetapp.com https://www.youtube.com https://www.youtube-nocookie.com https://upland.kapost.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https://*.marketo.com https://*.mktoresp.com https://app-sjqe.marketo.com https://*.marketo.com https://*.mktoresp.com; worker-src 'self' blob:; manifest-src 'self'; media-src 'self' blob: https://*.wistia.com; report-uri https://o4507374201733120.ingest.us.sentry.io/api/4507431745945600/security/?sentry_key=b633ac4793a1242f8c1bffa453adde4c; report-to csp-endpoint 6
img-src https: blob: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.fcl.cloud https://*.flightcentre.com https://*.flightcentre.com.au https://*.flightcentre.co.nz https://*.flightcentre.co.za https://*.flightcentre.ca https://*.flightcentre.co.uk https://www.googletagmanager.com https://*.google-analytics.com https://www.youtube.com https://*.fullstory.com https://vxml4.plavxml.com https://*.nr-data.net https://*.usabilla.com http://*.usabilla.com https://*.newrelic.com https://d6tizftlrpuof.cloudfront.net https://cdnjs.cloudflare.com https://cdn.optimizely.com https://*.outbrain.com https://analytics.tiktok.com https://bat.bing.com https://cdn.abrankings.com https://connect.facebook.net https://edge.fullstory.com https://loader.wisepops.com https://wisepops.net https://s.pinimg.com https://snap.licdn.com https://googleads.g.doubleclick.net https://accounts.google.com https://*.pinterest.com https://*.evergage.com https://js.adsrvr.org https://static.criteo.net https://flightcentre-webchat.gotbot.co.za https://7226714.collect.igodigital.com https://cdn.pdst.fm https://*.hotjar.com https://tr.snapchat.com https://*.feefo.com https://koi-3qn5erhpry.marketingautomation.services https://cdn.jsdelivr.net https://*.stackla.com https://cdn.cookielaw.org https://sc-static.net https://developer.livehelpnow.net https://cdn.evgnet.com https://maps.googleapis.com https://sdk.joinsherpa.io https://cdn.wisepops.com https://*.quantserve.com https://*.livechatinc.com https://flightcentre.r-cubed.co.uk https://rules.quantcount.com https://*.criteo.com https://code.jquery.com https://*.creativecdn.com https://*.rokt.com https://*.mypurecloud.com.au https://s.yimg.com https://sp.analytics.yahoo.com *.feroot.com https://*.taboola.com https://*.redditstatic.com https://*.reddit.com https://utt.impactcdn.com https://fctgleisure.my.site.com https://fctgleisure--baudev.sandbox.my.site.com; style-src 'unsafe-inline' 'self' https://fonts.googleapis.com https://register.feefo.com https://cdn.cookielaw.org https://d6tizftlrpuof.cloudfront.net; connect-src https://*.fcl.cloud wss://*.fcl.cloud https://*.flightcentre.com https://*.flightcentre.com.au https://*.flightcentre.co.nz https://*.flightcentre.co.za https://*.flightcentre.ca https://*.flightcentre.co.uk https://*.fclmedia.com https://fcl-sydney-geo-7.ent.ap-southeast-2.aws.found.io https://flowise-dev.dse.fctg.global https://*.launchdarkly.com https://*.optimizely.com *.nr-data.net https://*.fullstory.com https://*.google-analytics.com https://*.google.com https://*.google.com.au https://*.google.ca https://*.google.co.nz https://*.google.co.za https://*.google.co.uk https://*.evergage.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://analytics.pangle-ads.com https://*.pinterest.com https://*.linkedin.com https://*.outbrain.com https://*.g.doubleclick.net https://wisepops.net https://*.wisepops.com https://*.feefo.com https://cdn.cookielaw.org https://developer.livehelpnow.net https://*.snapchat.com https://www.facebook.com https://bat.bing.com https://bat.bing.net https://*.onetrust.com https://flightcentre.r-cubed.co.uk https://adservice.google.com https://www.google.com https://analytics.google.com https://www.googleadservices.com https://*.browser-intake-datadoghq.com https://*.criteo.com https://*.usabilla.com https://*.creativecdn.com https://*.mypurecloud.com.au wss://*.mypurecloud.com.au https://*.salesforce.com https://d1nojfewl3tku3.cloudfront.net/assets https://maps.googleapis.com https://s.yimg.com *.feroot.com https://insight.adsrvr.org https://*.taboola.com https://*.reddit.com https://*.pinimg.com https://*.impact.com https://fctgleisure.my.site.com https://fctgleisure--baudev.sandbox.my.site.com https://fctgleisure.my.salesforce-scrt.com https://fctgleisure--baudev.sandbox.my.salesforce-scrt.com https://flightcentre.pxf.io https://*.impct.site; default-src https: blob: 'unsafe-inline' 'unsafe-eval' wss://*.flightcentre.com.au:*; font-src https: blob: data:; frame-ancestors 'self'; report-uri /api/csp_report 6
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; media-src 'self' data: https:; worker-src 'self' blob:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self' 6
font-src www.paypalobjects.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: https://widgets.trustedshops.com https://integrations.etrusted.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ js.mollie.com *.sendcloud.sc *.jsdelivr.net *.belco.io https://www.googletagmanager.com https://td.doubleclick.net 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com magefan.com cm.magefan.com https://www.mollie.com *.amazonaws.com *.hsforms.net *.hsforms.com 'self' data: ts.tradetracker.net www.magmodules.eu https://widgets.trustedshops.com https://integrations.etrusted.com https://imgproxy.vendic.dev data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com js.mollie.com *.sendcloud.sc *.jsdelivr.net https://servicepoints.sendcloud.sc https://embed.sendcloud.sc *.hsforms.net *.hsforms.com *.google.com *.gstatic.com tm.tradetracker.net https://widgets.trustedshops.com https://integrations.etrusted.com cdn.belco.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.fontawesome.com maxcdn.bootstrapcdn.com *.sendcloud.sc *.jsdelivr.net *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://integrations.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.trustedshops.com *.etrusted.com *.belco.io https://www.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 6
default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' 6
script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ntdsgswbsc:55:0 6
default-src * data: mediastream: blob: filesystem: about: ws: wss: 'unsafe-eval' 'wasm-unsafe-eval' 'unsafe-inline' 6
default-src 'self' *.unrealengine.com *.epicgames.com *.epicgames.net cdn.cookielaw.org *.hcaptcha.com sentry.io *.youtube-nocookie.com epicgames-privacy.my.onetrust.com cloudflare.epicgamescdn.com *.launchdarkly.com player.vimeo.com edc-cdn.net cdn2.unrealengine.com maps.googleapis.com us-west-2-epicgames.graphassets.com d1ap1mz92jnks1.cloudfront.net cdnjs.cloudflare.com d3kjluh73b9h9o.cloudfront.net img.edc-cdn.net cdn1.epicgames.com connect.facebook.net *.realityscan.com kidsafe.com; style-src 'self' 'unsafe-inline' wasm-eval: fonts.googleapis.com *.unrealengine.com *.epicgames.com *.epicgames.net cdn.cookielaw.org *.hcaptcha.com sentry.io *.youtube-nocookie.com epicgames-privacy.my.onetrust.com cloudflare.epicgamescdn.com *.launchdarkly.com player.vimeo.com edc-cdn.net cdn2.unrealengine.com maps.googleapis.com us-west-2-epicgames.graphassets.com d1ap1mz92jnks1.cloudfront.net cdnjs.cloudflare.com d3kjluh73b9h9o.cloudfront.net img.edc-cdn.net cdn1.epicgames.com connect.facebook.net *.realityscan.com kidsafe.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.unrealengine.com *.epicgames.com *.epicgames.net cdn.cookielaw.org *.hcaptcha.com sentry.io *.youtube-nocookie.com epicgames-privacy.my.onetrust.com cloudflare.epicgamescdn.com *.launchdarkly.com player.vimeo.com edc-cdn.net cdn2.unrealengine.com maps.googleapis.com us-west-2-epicgames.graphassets.com d1ap1mz92jnks1.cloudfront.net cdnjs.cloudflare.com d3kjluh73b9h9o.cloudfront.net img.edc-cdn.net cdn1.epicgames.com connect.facebook.net *.realityscan.com kidsafe.com; script-src-elem 'self' 'unsafe-inline' blob: *.unrealengine.com *.epicgames.com *.epicgames.net cdn.cookielaw.org *.hcaptcha.com sentry.io *.youtube-nocookie.com epicgames-privacy.my.onetrust.com cloudflare.epicgamescdn.com *.launchdarkly.com player.vimeo.com edc-cdn.net cdn2.unrealengine.com maps.googleapis.com us-west-2-epicgames.graphassets.com d1ap1mz92jnks1.cloudfront.net cdnjs.cloudflare.com d3kjluh73b9h9o.cloudfront.net img.edc-cdn.net cdn1.epicgames.com connect.facebook.net *.realityscan.com kidsafe.com; font-src 'self' data: fonts.gstatic.com *.unrealengine.com *.epicgames.com *.epicgames.net cdn.cookielaw.org *.hcaptcha.com sentry.io *.youtube-nocookie.com epicgames-privacy.my.onetrust.com cloudflare.epicgamescdn.com *.launchdarkly.com player.vimeo.com edc-cdn.net cdn2.unrealengine.com maps.googleapis.com us-west-2-epicgames.graphassets.com d1ap1mz92jnks1.cloudfront.net cdnjs.cloudflare.com d3kjluh73b9h9o.cloudfront.net img.edc-cdn.net cdn1.epicgames.com connect.facebook.net *.realityscan.com kidsafe.com; connect-src 'self' data: maps.googleapis.com cdnml.global-cache.online *.unrealengine.com *.epicgames.com *.epicgames.net cdn.cookielaw.org *.hcaptcha.com sentry.io *.youtube-nocookie.com epicgames-privacy.my.onetrust.com cloudflare.epicgamescdn.com *.launchdarkly.com player.vimeo.com edc-cdn.net cdn2.unrealengine.com maps.googleapis.com us-west-2-epicgames.graphassets.com d1ap1mz92jnks1.cloudfront.net cdnjs.cloudflare.com d3kjluh73b9h9o.cloudfront.net img.edc-cdn.net cdn1.epicgames.com connect.facebook.net *.realityscan.com kidsafe.com; frame-src 'self' data: *.unrealengine.com *.epicgames.com *.epicgames.net cdn.cookielaw.org *.hcaptcha.com sentry.io *.youtube-nocookie.com epicgames-privacy.my.onetrust.com cloudflare.epicgamescdn.com *.launchdarkly.com player.vimeo.com edc-cdn.net cdn2.unrealengine.com maps.googleapis.com us-west-2-epicgames.graphassets.com d1ap1mz92jnks1.cloudfront.net cdnjs.cloudflare.com d3kjluh73b9h9o.cloudfront.net img.edc-cdn.net cdn1.epicgames.com connect.facebook.net *.realityscan.com kidsafe.com; frame-ancestors 'none'; img-src 'self' data: *.ytimg.com img.youtube.com maps.gstatic.com *.unrealengine.com *.epicgames.com *.epicgames.net cdn.cookielaw.org *.hcaptcha.com sentry.io *.youtube-nocookie.com epicgames-privacy.my.onetrust.com cloudflare.epicgamescdn.com *.launchdarkly.com player.vimeo.com edc-cdn.net cdn2.unrealengine.com maps.googleapis.com us-west-2-epicgames.graphassets.com d1ap1mz92jnks1.cloudfront.net cdnjs.cloudflare.com d3kjluh73b9h9o.cloudfront.net img.edc-cdn.net cdn1.epicgames.com connect.facebook.net *.realityscan.com kidsafe.com; 6
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *.akstat.io p11.techlab-cdn.com trial-eum-clientnsv4-s.akamaihd.net trial-eum-clienttons-s.akamaihd.net c.go-mpulse.net s.go-mpulse.net *.algolianet.com us5azow6i2-dsn.algolia.net xfoi9ebbhr-dsn.algolia.net secure.adnxs.com bat.bing.com bat.bing.net d.btttag.com pearson3283191z.btttag.com pearson.blueconic.net pearson.sb.blueconic.net api.company-target.com s.company-target.com tag-logger.demandbase.com tag.demandbase.com googleads.g.doubleclick.net ad.doubleclick.net td.doubleclick.net *.fls.doubleclick.net connect.facebook.net analytics.formassembly.com pearson.tfaforms.net ade.googlesyndication.com fonts.gstatic.com pagead2.googlesyndication.com fonts.googleapis.com region1.google-analytics.com static.hotjar.com utt.impactcdn.com cdn.jsdelivr.net app.launchdarkly.com px.ads.linkedin.com snap.licdn.com i.liadm.com cdn.cookielaw.org bam.nr-data.net js-agent.newrelic.com geolocation.onetrust.com privacyportal-de.onetrust.com *.pearson.com pearson.com cdn.pdst.fm a.quora.com q.quora.com tag.rmp.rakuten.com alb.reddit.com pixel-config.reddit.com www.redditstatic.com pi.pardot.com sc-static.sc-static.net tr.snapchat.com tr6.snapchat.com pixels.spotify.com analytics-ipv6.tiktokw.us analytics.tiktok.com insight.adsrvr.org js.adsrvr.org static.ads-twitter.com analytics.twitter.com t.t.co pearson.esaas.inmoment.eu pearson.mcxplatform.de *.visualwebsiteoptimizer.com img.youtube.com pearson--projects.sandbox.my.site.com; frame-ancestors 'none'; 6
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com cash-f.squarecdn.com https://*.gstatic.com *.googleapis.com data: *.fontawesome.com maxcdn.bootstrapcdn.com *.cloudfront.net *.reviews.io *.reviews.co.uk data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.adyen.com *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.adyen.com *.instagram.com www.google.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com account.fetchify.com https://www.googletagmanager.com/ *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https://*.gstatic.com *.adyen.com *.googleapis.com *.cdninstagram.com www.apptrian.com www.facebook.com *.trackedlink.net http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ flagpedia.net *.cloudfront.net *.reviews.io *.reviews.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page *.googleapis.com *.gstatic.com *.instagram.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com www.facebook.com connect.facebook.net graph.facebook.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ maps.googleapis.com *.reviews.io *.reviews.co.uk cdn.jsdelivr.net js-agent.newrelic.com bam.nr-data.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.cash.app https://fonts.googleapis.com/ webchat.dotdigital.com webchat.staging.dotdigital.com cc-cdn.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com *.cloudfront.net *.reviews.io *.reviews.co.uk cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com www.apptrian.com www.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com * *.adyen.com *.googleapis.com www.apptrian.com connect.facebook.net graph.facebook.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ www.gstatic.com maps.googleapis.com *.cloudfront.net *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 6
worker-src https://helmonline-hyva.dev.localhost helmonline.nl; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://www.googletagmanager.com *.googleapis.com https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com consentcdn.cookiebot.com td.doubleclick.net www.googletagmanager.com *.criteo.com/ www.xtento.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.pon.bike images.pondigital.solutions *.google.nl *.google.com *.google.fr *.mailplus.nl imgsct.cookiebot.com *.bing.net *.bing.com pagead2.googlesyndication.com www.xtento.com cdn.xtento.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://www.mollie.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com connect.facebook.net graph.facebook.com business.facebook.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.facebook.com chimpstatic.com rum-static.pingdom.net rum-collector-2.pingdom.net consentcdn.cookiebot.com consent.cookiebot.com widget.thuiswinkel.org widget.thuiswinkel-cdn.org *.clarity.ms restapi.mailplus.nl www.googleoptimize.com googletagmanager.com *.googletagmanager.com *.bing.com *.criteo.com static.criteo.net *.mouseflow.com *.tiktok.com *.hotjar.com *.beslist.nl static.cloudflareinsights.com cdn.debugbear.com pagead2.googlesyndication.com static.widget.trengo.eu www.xtento.com cdn.xtento.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.disqus.com js.mollie.com pay.google.com applepay.cdn-apple.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.typekit.net downloads.mailchimp.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.widget.trengo.eu 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com devdocs.magento.com rum-collector-2.pingdom.net widgetcontent.thuiswinkel-cdn.org www.google.com *.clarity.ms consent.cookiebot.com consentcdn.cookiebot.com doubleclick.net *.bing.com *.criteo.com *.tiktok.com *.hotjar.com *.hotjar.io *.beslist.nl data.debugbear.com pagead2.googlesyndication.com api.widget.trengo.eu form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 6
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'self'; report-uri /form/analytics-csp-report.php 6
default-src *; script-src * 'unsafe-inline' 'unsafe-eval'; script-src-elem * 'unsafe-inline' https://www.googletagmanager.com blob: data:; style-src * 'unsafe-inline'; style-src-elem * 'unsafe-inline'; font-src * data: moz-extension:; img-src * data: blob:; media-src * data: blob:; connect-src * properties: data:; frame-src *; worker-src * blob:; report-uri https://sentry-new.public.mybestpro.com/api/8/security/?sentry_key=54be949d75fc07530648e0a189a26f35&sentry_environment=prod 6
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://*.hotjar.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://*.hotjar.com magefan.com cm.magefan.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://static.hotjar.com https://script.hotjar.com https://chat.africasatellite.com https://chat.americansatellite.com https://chat.americansatellite.us https://chat.asiasatellite.co https://chat.australiasatellite.co https://chat.australiasatellite.com https://chat.canadasatellite.ca https://chat.canadasatellite.com https://chat.europasatellite.com https://chat.latinsatelital.com https://chat.playamaya.mx https://chat.robotsafrica.com https://chat.robotsasia.com https://chat.robotsaustralia.co https://chat.robotscanada.com https://chat.robotseuropa.com https://chat.robotsinternational.com https://chat.robotslatam.com https://chat.robotsusa.com https://chat.satcorp.pa https://chat.satelliterentals.ca https://chat.ultra99.com https://chat.universalrv.ca js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://*.hotjar.com 'unsafe-inline' https://chat.africasatellite.com https://chat.americansatellite.com https://chat.americansatellite.us https://chat.asiasatellite.co https://chat.australiasatellite.co https://chat.australiasatellite.com https://chat.canadasatellite.ca https://chat.canadasatellite.com https://chat.europasatellite.com https://chat.latinsatelital.com https://chat.playamaya.mx https://chat.robotsafrica.com https://chat.robotsasia.com https://chat.robotsaustralia.co https://chat.robotscanada.com https://chat.robotseuropa.com https://chat.robotsinternational.com https://chat.robotslatam.com https://chat.robotsusa.com https://chat.satcorp.pa https://chat.satelliterentals.ca https://chat.ultra99.com https://chat.universalrv.ca *.fontawesome.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://chat.africasatellite.com https://chat.americansatellite.com https://chat.americansatellite.us https://chat.asiasatellite.co https://chat.australiasatellite.co https://chat.australiasatellite.com https://chat.canadasatellite.ca https://chat.canadasatellite.com https://chat.europasatellite.com https://chat.latinsatelital.com https://chat.playamaya.mx https://chat.robotsafrica.com https://chat.robotsasia.com https://chat.robotsaustralia.co https://chat.robotscanada.com https://chat.robotseuropa.com https://chat.robotsinternational.com https://chat.robotslatam.com https://chat.robotsusa.com https://chat.satcorp.pa https://chat.satelliterentals.ca https://chat.ultra99.com https://chat.universalrv.ca wss://chat.africasatellite.com wss://chat.americansatellite.com wss://chat.americansatellite.us wss://chat.asiasatellite.co wss://chat.australiasatellite.co wss://chat.australiasatellite.com wss://chat.canadasatellite.ca wss://chat.canadasatellite.com wss://chat.europasatellite.com wss://chat.latinsatelital.com wss://chat.playamaya.mx wss://chat.robotsafrica.com wss://chat.robotsasia.com wss://chat.robotsaustralia.co wss://chat.robotscanada.com wss://chat.robotseuropa.com wss://chat.robotsinternational.com wss://chat.robotslatam.com wss://chat.robotsusa.com wss://chat.satcorp.pa wss://chat.satelliterentals.ca wss://chat.ultra99.com wss://chat.universalrv.ca api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 6
object-src 'none'; frame-ancestors 'self'; form-action 'self' https://www.facebook.com https://translate.googleapis.com; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub0f04d11e18a35974032f2067338a5e7d&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Acspreport-webauto%2Cenv%3Aprod; 6
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' https: blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 6
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: https://cms.staticlucky88.com http://gw-0076 http://api-gw-prod.com https://hotmatch.storeallinone.com https://api.bakogai.com/gt-stats-be https://webchat.s1-tool.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' ws: wss: https://cms.staticlucky88.com http://gw-0076 http://api-gw-prod.com https://hotmatch.storeallinone.com https://api.bakogai.com/gt-stats-be https://webchat.s1-tool.com; frame-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; form-action 'self' 6
frame-ancestors 'self'; object-src 'none'; report-uri /api/csp-reporting 5
report-uri https://reporting.go-mpulse.net/report/FDSGP-LEB9B-T8Y2A-5V5ED-9WX2T 5
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/domain-registry 5
frame-ancestors 'self' https://*.yahooinc.com; object-src 'none'; script-src 'none'; report-uri https://csp.yahoo.com/beacon/csp?src=yahooinc; 5
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com cash-f.squarecdn.com https://apretailer.com.br 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.facebook.com *.facebook.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.us1.gigya.com *.openpay.mx *.openpay.co *.facebook.com *.facebook.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.opencontrol.mx *.kaptcha.com *.openpay.pe *.paynet.com.mx *.pagaleve.io *.pagaleve.com.br www.google-analytics.com unpkg.com googleads.g.doubleclick.net commerce.adobedtm.com magento-recs-sdk.adobe.net www.googleadservices.com www.gstatic.com *.google.com.br *.criteo.com *.doubleclick.net *.cloudfront.net *.nr-data.net *.enviou.com.br *.newrelic.com https://receiver.posclick.dinamize.com *.gigya-api.com *.panini.com.br https://apretailer.com.br c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.us1.gigya.com 'self' data: 'unsafe-inline' data: *.postimg.cc magefan.com cm.magefan.com *.facebook.com *.facebook.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.openpay.mx *.pagaleve.com.br unpkg.com commerce.adobedtm.com magento-recs-sdk.adobe.net www.gstatic.com *.google.com *.google.com.br *.panini.canto.global *.cloudfront.net *.doubleclick.net *.g.doubleclick.net *.ivitrack.com *.bidswitch.net *.criteo.com *.nr-data.net *.enviou.com.br *.newrelic.com https://receiver.posclick.dinamize.com *.gigya-api.com *.panini.com.br https://www.gravatar.com *.googleusercontent.com https://apretailer.com.br https://cdn.aplazo.mx *.adobedtm.com *.clarity.ms https://smartbmc.com.br https://ib.adnxs.com https://r.casalemedia.com https://ads.stickyadstv.com https://ad.360yield.com https://i.liadm.com https://contextual.media.net https://exchange.mediavine.com *.bing.com https://jadserve.postrelease.com https://sync.outbrain.com https://simage2.pubmatic.com https://trends.revcontent.com https://pixel.rubiconproject.com https://rtb-csync.smartadserver.com https://sync-t1.taboola.com https://criteo-sync.teads.tv https://criteo-partners.tremorhub.com https://ade.clmbtech.com https://eb2.3lift.com https://sync.1rx.io https://gum.criteo.com https://public-prod-dspcookiematching.dmxleo.com https://www.mercadopago.cl *.agkn.com *.targeting.unrulymedia.com *.dnzdns.com *.adgrx.com *.bidr.io *.yahoo.com *.emkt.dinamize.com *.dinamize.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.us1.gigya.com *.facebook.com *.facebook.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.s3.amazonaws.com *.openpay.co *.openpay.pe *.google-analytics.com *.google.com/recaptcha/ *.gstatic.com/recaptcha/ *.pagaleve.com.br analytics.tiktok.com *.clarity.ms unpkg.com www.gstatic.com *.google.com.br *.vendavalida.com.br *.zdassets.com *.criteo.com *.cloudfront.net *.enviou.com.br aprtn.com https://receiver.posclick.dinamize.com *.gigya-api.com *.panini.com.br https://apretailer.com.br *.metricool.com *.hotjar.com *.bing.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.cash.app downloads.mailchimp.com 'unsafe-inline' data: *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://apretailer.com.br assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com * form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.openpay.mx *.openpay.co *.facebook.com *.facebook.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.openpay.pe unpkg.com googleads.g.doubleclick.net commerce.adobedtm.com magento-recs-sdk.adobe.net www.gstatic.com *.google.com.br *.criteo.com *.vendavalida.com.br *.zendesk.com *.doubleclick.net *.us1.gigya.com *.cloudfront.net *.enviou.com.br https://receiver.posclick.dinamize.com *.gigya-api.com *.panini.com.br https://apretailer.com.br *.paniniadrenalyn.com pagead2.googlesyndication.com analytics.tiktok.com *.clarity.ms *.bing.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src bam.nr-data.net googleads.g.doubleclick.net csm.us5.us.criteo.net commerce.adobedc.net https://apretailer.com.br *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 5
frame-ancestors 'self'; report-uri https://www.couriermail.com.au/csp-reports 5
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: logger.scot.nhs.uk *.fontawesome.com use.typekit.net *.google.com *.google.co.uk *.googleapis.com themes.googleusercontent.com *.gstatic.com code.jquery.com yui.yahooapis.com *.bootstrapcdn.com cdnjs.cloudflare.com cdn.jsdelivr.net unpkg.com *.twitter.com *.twimg.com *.youtube.com youtu.be *.ytimg.com www.youtube-nocookie.com player.vimeo.com i.vimeocdn.com cdn.jwplayer.com content.jwplatform.com prd.jwpltx.com *.jwpcdn.com *.jwpsrv.com *.civiccomputing.com cc.cdn.civiccomputing.com secure.gravatar.com public.tableau.com www.openstreetmap.org browser-update.org s.w.org www.geoplugin.net *.wp.com hcaptcha.com *.hcaptcha.com www.careopinion.org.uk www.patientopinion.org.uk assets.nhs.uk www.travelinescotland.com; worker-src 'self' www.google.com; frame-ancestors 'self'; base-uri 'self'; report-to csp-endpoint; report-uri https://web-reports.scot.nhs.uk/api/v1/csp-report 5
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.cookiefirst.com *.marketo.com *.marketo.net *.mktoresp.com *.bizible.com *.salesforce.com *.my.site.com *.salesforce-scrt.com tcpsoftware.my.site.com *.clarity.ms *.linkedin.com *.facebook.net *.youtube.com *.company-target.com snap.licdn.com bat.bing.com googleads.g.doubleclick.net www.googleadservices.com www.redditstatic.com tr.capterra.com tag.demandbase.com *.claydar.com d34r8q7sht0t9k.cloudfront.net *.leandata.com *.tcpsoftware.com go.tcpsoftware.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.marketo.com https:; font-src 'self' fonts.gstatic.com data:; img-src 'self' data: blob: https:; connect-src 'self' *.google-analytics.com *.analytics.google.com *.cookiefirst.com consent.cookiefirst.com *.marketo.com *.mktoresp.com *.bizible.com *.salesforce.com *.salesforce-scrt.com tcpsoftware.my.salesforce-scrt.com *.clarity.ms *.company-target.com px.ads.linkedin.com bat.bing.com www.google.com *.doubleclick.net *.reddit.com tr.capterra.com tag-logger.demandbase.com api.claydar.com *.podscribe.com *.leandata.com wss://*.salesforce.com wss://*.salesforce-scrt.com chloe.tcpsoftware.net chloe-test.tcpsoftware.net *.tcpsoftware.com go.tcpsoftware.com; frame-src *.youtube.com *.marketo.com *.my.site.com *.company-target.com *.hubspot.com *.hsforms.com chloe.tcpsoftware.net chloe-test.tcpsoftware.net *.tcpsoftware.com; base-uri 'self'; form-action 'self' *.marketo.com *.salesforce.com *.hubspot.com *.hsforms.com; worker-src blob: 'self'; 5
default-src https: blob: data: 'unsafe-inline' 'unsafe-eval'; report-to blogspot; report-uri https://draft.blogger.com/cspreport 5
default-src https: data:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline'; form-action 'self'; object-src 'none'; frame-ancestors 'none'; base-uri 'self' 5
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://connect.facebook.net https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://connect.facebook.net; frame-src 'self' https://www.googletagmanager.com https://www.facebook.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none' 5
default-src 'self' https: data: blob:; img-src 'self' https: data: blob: http:; script-src 'self' https: blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; connect-src 'self' https: wss:; 5
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; img-src 'self' https://www.google-analytics.com https://engage.supporthost.com data: blob:; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://engage.supporthost.com; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://engage.supporthost.com; frame-src 'self' https://www.google.com https://www.youtube-nocookie.com https://engage.supporthost.com; worker-src 'self' blob:; media-src 'self'; upgrade-insecure-requests 5
default-src 'self';     script-src 'self' https: 'unsafe-inline' 'unsafe-eval';     style-src 'self' https: 'unsafe-inline';     img-src 'self' data: https:;     font-src 'self' data: https:;     connect-src 'self' https:;     frame-ancestors 'self';     object-src 'none';     base-uri 'self';     upgrade-insecure-requests; 5
default-src * 'unsafe-inline' data: blob: 5
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com cash-f.squarecdn.com *.googleapis.net 'self' data: *.fontawesome.com data: *.acsbapp.com *.bootstrapcdn.com *.cloudfare.com mediacdn.espssl.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * api.bazaarvoice.com stg.api.bazaarvoice.com *.facebook.com *.facebook.net 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com www.xtento.com *.facebook.com *.facebook.net *.pinterest.com *.hotjar.com www.google.com *.adyen.com *.addthisedge.com *.addthis.com *.doubleclick.net *.my.salesforce-sites.com *.secure.force.com *.force.com *.cdn-btsg.com www.commercepartnerhub.com *.adsrvr.org https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * *.googleapis.com *.tiktok.com www.apptrian.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com 'self' data: www.xtento.com cdn.xtento.com magefan.com cm.magefan.com *.disqus.com *.facebook.com *.facebook.net https://img.youtube.com facebook.com *.b0e8.com *.dynamicyield.com *.pinterest.com *.e.aa.online-metrix.net *.acsbapp.com *.cookielaw.org *.bing.com *.yahoo.com *.google.co.in google.co.in *.listrakbi.com all-clad.com *.all-clad.com emjcd.com *.emjcd.com *.dotomi.com *.espssl.com *.clarity.ms *.tagcommander.com *.adsrvr.org *.rubiconproject.com *.g.doubleclick.net *.elfsightcdn.com *.bazaarvoice.com mediacdn.espssl.com *.hotjar.com *.doubleclick.net butterly.com *.butterly-images.com http://butterly.com *.google.com *.cdn-btsg.com *.lagostina.ca lagostina.ca https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page *.googleapis.com *.gstatic.com *.tiktok.com www.apptrian.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com *.iadvize.com www.xtento.com cdn.xtento.com *.disqus.com *.facebook.com *.facebook.net *.ugc.bazaarvoice.com www.upsellit.com *.listrakbi.com *.b0e8.com *.bc0a.com *.cookielaw.org *.dynamicyield.com *.tagcommander.com *.cloudflare.com *.yimg.com *.pinimg.com *.hotjar.com www.google.com *.mczbf.com analytics.tiktok.com *.acsbapp.com acsbapp.com *.salesforceliveagent.com *.force.com *.curalate.com *.noibu.com *.pinterest.com *.online-metrix.net *.bing.com *.bing.net *.vimeo.com *.amazonaws.com *.clarity.ms click2cart.com *.adsrvr.org *.aggregated-data.com *.cloudfront.net *.amazon-adsystem.com *.tkrconnector.com acds-events.adobe.io static.kyc.red shop.pe *.shop.pe addstrap-ui.addshoppers.com returns.parcellab.com cdn.parcellab.com gstatic.com cdn.cookielaw.org cdn.bc0a.com cdn1.b0e8.com service.force.com butterly.com *.moatads.com *.elfsight.com *.addthisedge.com *.addthis.com bam.nr-data.net acsbap.com *.acsbap.com *.salesforce.com *.bazaarvoice.com *.cdn-btsg.com acdn.adnxs.com *.northbeam.io https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com *.magento-datasolutions.com *.magento-ds.com *.cash.app display.ugc.bazaarvoice.com *.googleapis.com *.fontawesome.com *.listrakbi.com *.ugc.bazaarvoice.com *.typekit.net service.force.com *.bootstrapcdn.com *.espssl.com *.cloudfront.net *.cloudfare.com *.addshoppers.com returns.parcellab.com cdn.parcellab.com *.bazaarvoice.com mediacdn.espssl.com *.hotjar.com *.doubleclick.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com www.apptrian.com edge.curalate.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.magento.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com * *.googleapis.com *.tiktok.com www.apptrian.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.facebook.com *.facebook.net *.dynamicyield.com *.cookielaw.org *.g.doubleclick.net *.listrak.com *.listrakbi.com analytics.tiktok.com *.pinterest.com *.hotjar.com *.yimg.com google.co.in *.mczbf.com *.bc0a.com facebook.com *.acsbapp.com *.click2cart.com *.clarity.ms *.aggregated-data.com *.curalate.com *.noibu.com wss://input.noibu.com *.onetrust.com *.bing.com insight.adsrvr.org *.amazon-adsystem.com *.paa-reporting-advertising.amazon *.adsrvr.org shop.pe *.shop.pe cdn.cookielaw.org *.elfsight.com *.addthis.com mediacdn.espssl.com bam.nr-data.net fonts.googleapis.com *.doubleclick.net wss://*.hotjar.com acsbap.com *.acsbap.com *.elfsightcdn.com *.hotjar.io www.xtento.com butterly.com *.cdn-btsg.com www.google.com *.bazaarvoice.com *.fbcdn.net static.xx.fbcdn.net *.xx.fbcdn.net https://static.xx.fbcdn.net *.commercepartnerhub.com  wss://*.facebook.com *.all-clad.com https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com account.groupeseb.com *.salesforceliveagent.com *.salesforce.com *.force.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 5
default-src 'self' https:; script-src 'self' https: blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data:; frame-src https:; frame-ancestors 'self'; font-src 'self' https: data:; report-uri /report-csp-violation 5
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://static.klaviyo.com *.fontawesome.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com static.payu.com maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.facebook.com *.facebook.net https://www.google.com https://creativecdn.com *.weltpixel.com secure.payu.com merch-prod.snd.payu.com static.payu.com credit-widget-config.payu.com/ landofcoder.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.wattswater.com *.backflowdirect.com *.wattswaterquality.com *.shopperapproved.com *.watts.com *.googletagmanager.com *.facebook.com *.facebook.net *.bing.com *.google.com *.clarity.ms http://www.w3.org https://www.facebook.com https://www.google.com https://www.google.pl static.payu.com credit-widget-config.payu.com/ magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.wattswater.com *.backflowdirect.com *.wattswaterquality.com *.sirv.com *.facebook.com *.facebook.net *.klaviyo.com *.mouseflow.com *.bing.com *.adform.net *.doubleclick.net *.clarity.ms *.hotjar.com https://www.googletagmanager.com https://connect.facebook.net https://www.dwin1.com https://googleads.g.doubleclick.net secure.payu.com secure.snd.payu.com static.payu.com credit-widget-config.payu.com/ landofcoder.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://maxcdn.bootstrapcdn.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.wattswater.com *.backflowdirect.com *.wattswaterquality.com *.googleapis.com *.facebook.com *.facebook.net *.klaviyo.com *.bing.com *.doubleclick.net *.clarity.ms *.hotjar.com https://www.facebook.com secure.payu.com merch-prod.snd.payu.com static.payu.com credit-widget-config.payu.com/ landofcoder.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://411fcbf3-a854-402b-b3a6-331941eb1f2b.sansec.watch/; report-to report-endpoint; 5
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.careem-pay.com data: checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.tabby.ai cdn.tabby.sa fonts.googleapis.com storage.googleapis.com applepay.cdn-apple.com cdn-sandbox.tamara.co cdn.tamara.co data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.b-cdn.net *.tap.company *.careem-pay.com www.facebook.com tr.snapchat.com checkout.tabby.ai checkout.tabby.sa applepay.cdn-apple.com pay.google.com https://www.google.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.ftcdn.net *.behance.net https://images.unsplash.com *.b-cdn.net https://cdn.tap.company www.googletagmanager.com *.google-analytics.com www.googleadservices.com www.google.com www.google.ae www.google.com.kw www.google.com.sa www.google.com.qa www.google.com.bh ad.doubleclick.net googleads.g.doubleclick.net stats.g.doubleclick.net *.facebook.com analytics.tiktok.com *.snapchat.com checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.tabby.ai cdn.tabby.sa fonts.googleapis.com storage.googleapis.com *.tamara.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://rum.hlx.page https://maps.googleapis.com https://player.vimeo.com *.b-cdn.net *.tap.company *.careem-pay.com *.cloudflare.com www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net connect.facebook.net analytics.tiktok.com sc-static.net tr.snapchat.com checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.segment.com www.google.com cdn.sift.com score.jcsc.online seondf.com deviceinf.com getdeviceinf.com *.tamara.co applepay.cdn-apple.com pay.google.com https://www.google.com https://www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.b-cdn.net *.tamara.co 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tamara.co 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io https://maps.googleapis.com https://player.vimeo.com *.dev.tap.company *.tap.company geolocation-db.com https://www.google.com www.googletagmanager.com *.google-analytics.com analytics.google.com www.googleadservices.com connect.facebook.net *.facebook.com analytics.tiktok.com *.tiktok.com *.tiktokw.us *.snapchat.com sc-static.net ad.doubleclick.net googleads.g.doubleclick.net stats.g.doubleclick.net checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.segment.com api.segment.com api.segment.io api.amplitude.com *.seondfresolver.com *.deviceinfresolver.com *.getdeviceinfresolver.com *.tamara.co applepay.cdn-apple.com apple-pay-gateway.apple.com google.com pay.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.seondnsresolve.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 5
font-src maxcdn.bootstrapcdn.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.authorize.net *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com www.google.com *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com *.authorize.net *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.certcapture.com connect.bolt.com connect-sandbox.bolt.com s3-us-west-1.amazonaws.com www.gstatic.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com mageside.com *.gstatic.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.kaptcha.com *.disqus.com *.authorize.net *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net https://scripts.ltv.ai 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.certcapture.com maxcdn.bootstrapcdn.com *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com sessions.bugsnag.com *.kaptcha.com *.authorize.net www.googleapis.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 5
default-src 'self'; img-src * 5
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com cash-f.squarecdn.com https://*.gstatic.com *.googleapis.com data: *.sodatech.com *.sodatech.net cdn.livechatinc.com mediacdn.espssl.com viewer.byondxr.com use.fontawesome.com 'self' data: https://fonts.yieldify-production.com/fonts/100822/e6e8821f-e1ad-4601-aaed-5b3386a4580b.otf https://*.hotjar.io https://*.yieldify-production.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.adyen.com api.bazaarvoice.com stg.api.bazaarvoice.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com pal-test.adyen.com www.facebook.com http://www.facebook.com/tr 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.adyen.com *.sharethis.com *.certcapture.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com *.ehappify.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.vimeo.com *.jsctool.com *.pinterest.com *.mmcagentur.at *.doubleclick.net *.facebook.com *.facebook.net *.demdex.net *.authorize.net *.googletagmanager.com *.xtento.com *.app-wallee.com *.waltpixel.com *.equitystory.com offer.slgnt.us vars.hotjar.com *.pepperjamnetwork.com services.listrak.com *.serverdata.net *.livechatinc.com *.lindtusa.com *.russellstover.com *.ghirardelli.com www.xtento.com https://app-wallee.com *.weltpixel.com https://*.ordergroove.com www.jsctool.com static.ogmystyle.com static2.ogmystyle.com www.mystyleplatform.com *.trustpilot.com geowidget.inpost.pl sandbox-easy-geowidget-sdk.easypack24.net widget.packeta.com https://odr.promo.dev/ https://*.yieldify.com https://ohws.prospective.ch/ https://tpc.googlesyndication.com/ https://*.hotjar.io https://www.mainadv.com https://ad.ad-srv.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https://*.gstatic.com *.adyen.com *.sharethis.com *.googleapis.com *.certcapture.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com *.cloudfront.net *.amazonaws.com *.regalify.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com blob: lindt.test *.lindt.test maps.googleapis.com *.pinterest.com *.postcodeanywhere.co.uk *.klarna.com *.invibes.com *.b26net.com https://www.google-analytics.com *.googletagmanager.com *.teads.tv *.videostep.com *.facebook.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.taboola.com *.doubleclick.net *.outbrain.com *.adobedtm.com *.omtrdc.net *.demdex.net *.everesttech.net *.magentocommerce.com *.sodatech.com *.sodatech.net api.official-deals.co.uk api.official-coupons.com *.adsymptotic.com cdn.livechat-files.com cp.official-coupons.com cookie-cdn.cookiepro.com cp.official-deals.co.uk site-azp.slgnt.us ct.pinterest.com *.ads.linkedin.com cdn.polyfill.io offer.slgnt.us *.blob.core.windows.net s.pinimg.com snap.licdn.com mediacdn.espssl.com *.clarity.ms *.bing.com *.serverdata.net lindtna.test *.lindtna.test *.livechatinc.com mageside.com www.xtento.com cdn.xtento.com *.hsforms.net *.hsforms.com https://app-wallee.com d.ratepay.com viewer.byondxr.com s3.us-west-2.amazonaws.com showroom-media.byondxr.com media-optimization-service.byondxr.com *.byondxr.com *.listrakbi.com www.mystyleplatform.com static.mystyleplatform.com static2.mystyleplatform.com static2.ogmystyle.com mystyleplatform.s3.us-west-2.amazonaws.com https://www.unifaunonline.se https://*.tile.openstreetmap.org/ https://redchamps.com 'self' data: geowidget.inpost.pl sandbox-easy-geowidget-sdk.easypack24.net widget.packeta.com http://lindt-hg65tr.your-printq.com https://*.cookiepro.com https://assets-v2.yieldify.com/images/189494/2022/4/8/55c67825-1f9d-438d-815a-43a437f03af2.png https://assets-v2.yieldify.com/images/189494/2022/4/21/54125dc1-8b51-4175-bd53-7d33e427cc41.gif https://www.lindt-eshopglobal.com/ https://px.ads.linkedin.com/ https://*.seznam.cz https://*.hotjar.io https://*.yieldify.com https://i.cdn.nrholding.net https://*.sendtric.com network-eu-a.bazaarvoice.com assets-v2.yieldify.com *.cookiepro.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page *.sharethis.com *.googleapis.com *.attn.tv events.attentivemobile.com *.certcapture.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.pcapredict.com lindt.slgnt.eu maps.googleapis.com *.pinterest.com *.postcodeanywhere.co.uk *.cloudflare.com *.teads.tv *.r66net.com *.facebook.net *.googleadservices.com *.doubleclick.net *.cookiepro.com *.cloudfront.net *.videostep.com *.mfgroup.ch *.taboola.com *.outbrain.com *.adobedtm.com *.authorize.net *.unpkg.com *.fontawesome.com *.sodatech.net *.sodatech.com www.clarity.ms bat.bing.com *.b2c.com bt.fraud0.com container.pepperjam.com www.googleoptimize.com *.hotjar.com *.pepperjamnetwork.com *.revlifter.io site-azp.slgnt.us ct.pinterest.com *.ads.linkedin.com cdn.polyfill.io offer.slgnt.us *.blob.core.windows.net s.pinimg.com snap.licdn.com acsbapp.com cdn.noibu.com www.youtube.com *.upsellit.com *.livechatinc.com *.serverdata.net *.tiktok.com www.xtento.com cdn.xtento.com *.hsforms.net *.hsforms.com https://app-wallee.com https://gmtech.mfgroup.ch https://assets.secure.checkout.visa.com *.ordergroove.com https://www.googletagmanager.com tagmanager.google.com d.ratepay.com www.jsctool.com byondxr-viewer.byondxr.com web-apps.byondxr.com *.listrakbi.com *.listrak.com mystyleplatform.com www.mystyleplatform.com static.ogmystyle.com static2.ogmystyle.com d203yb14zlmxwn.cloudfront.net cdnjs.cloudflare.com cdn.jsdelivr.net use.fontawesome.com *.mczbf.com https://api.unifaun.com *.gstatic.com *.trustpilot.com geowidget.inpost.pl sandbox-easy-geowidget-sdk.easypack24.net widget.packeta.com https://static-eu.payments-amazon.com/checkout.js https://*.yieldify.com https://www.googleoptimize.com/optimize.js https://custom.yieldify.com/v1/100510/100822/3d9a49d0c2/bundle.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://tpc.googlesyndication.com/sodar/1s9mPOHO.js https://*.adform.net https://*.seznam.cz https://analytics.tiktok.com/ https://*.hotjar.io https://*.pinimg.com https://*.daktela.com https://www.dwin1.com maps.google.com https://www.gstatic.com/recaptcha static.r66net.net https://unbxd.s3.amazonaws.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.cash.app https://fonts.googleapis.com/ *.sharethis.com *.googleapis.com *.certcapture.com display.ugc.bazaarvoice.com *.amazonaws.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com assets.braintreegateway.com *.fonts.net *.postcodeanywhere.co.uk *.cloudfront.net *.cloudflare.com *.sodatech.com *.sodatech.net *.getfirebug.com cloud.typography.com *.serverdata.net *.myfonts.net *.russellstover.com https://app-wallee.com tagmanager.google.com d.ratepay.com *.listrakbi.com *.listrak.com use.fontawesome.com www.mystyleplatform.com static.ogmystyle.com static2.ogmystyle.com *.gstatic.com *.trustpilot.com geowidget.inpost.pl widget.packeta.com https://*.hotjar.io 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cloudfront.net *.serverdata.net *.livechatinc.com *.listrakbi.com www.lindt-eshopglobal.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net vimeo.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net api.magento.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com * *.adyen.com *.sharethis.com *.googleapis.com *.attn.tv events.attentivemobile.com *.certcapture.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.postcodeanywhere.co.uk *.ratepay.com *.luckyorange.net *.cookiepro.com *.mfgroup.ch *.doubleclick.net *.visitors.live wss://in.visitors.live wss://visitors.live wss://in.visitors.live/ wss://visitors.live/ visitors.live *.taboola.com *.demdex.net *.omtrdc.net *.magento.com *.adobe.net *.adobedtm.com *.adobedc.net *.typekit.net *.magedevteam.com *.sodatech.com *.sodatech.net *.teads.tv www.sjwoe.com input.noibu.com wss://input.noibu.com/pv_part in.hotjar.com www.facebook.com *.b2c.com bt.fraud0.com *.revlifter.com *.pepperjamnetwork.com *.revlifter.io site-azp.slgnt.us ct.pinterest.com *.ads.linkedin.com cdn.polyfill.io offer.slgnt.us s.pinimg.com snap.licdn.com *.acsbapp.com cdn.noibu.com https://maps.googleapis.com *.clarity.ms *.facebook.com *.serverdata.net *.livechatinc.com api.addressy.com *.listrakbi.com *.mczbf.com *.tiktok.com t.elasticsuite.io *.hsforms.net *.hsforms.com https://app-wallee.com https://assets.secure.checkout.visa.com *.ordergroove.com https://www.google-analytics.com d.ratepay.com www.jsctool.com *.byondxr.com api.byondxr.com s3.us-west-2.amazonaws.com https://*.criteo.com https://*.hotjar.io https://cdn.stickyadstv.com https://*.ads.linkedin.com https://snap.licdn.com https://*.r66net.com https://*.yieldify.com wss://*.hotjar.io https://geolocation.onetrust.com https://*.googleapis.com https://*.daktela.com https://cdn.tailwindcss.com analytics.google.com https://sgtm.lindt.se sgtm.lindt.se sgtm.lindt.dk www.google-analytics.com sgtm.lindt.cz sgtm.lindt.de sgtm.lindt.es sgtm.lindt.fr sgtm.lindt.it sgtm.lindt.hu sgtm.lindt.co.uk sgtm.lindt.com.nl sgtm.lindt.pl sgtm.lindt.at geolocation.onetrust.com sgtm.lindt.sk sgtm.lindt.fi 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.byondxr.com *.googleapis.com https://cdn.tailwindcss.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 5
default-src 'self' data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com btb-glossary.btb.private.knowbe4.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io deepfake-content-write-production-us-east-1.s3.amazonaws.com deepfake-content-read-production-us-east-1.s3.amazonaws.com eai-agent-security-private-ai-production-us-east-1.s3.amazonaws.com ccm-scorm-production-us-east-1.s3.amazonaws.com ccm-courses-production-us-east-1.s3.amazonaws.com fonts.googleapis.com js.hsforms.net forms.hsforms.com forms.hubspot.com api.hsforms.com https://*.hsforms.com https://*.hubspot.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://*.knowbe4.com https://*.kb4od.run https://*.ckeditor.com/ https://*.launchdarkly.com/ https://*.zopim.com/ https://api-js.mixpanel.com https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk.com/ https://knowbe4.zendesk.com/embeddable/config https://knowbe4.zendesk.com/embeddable_blip https://knowbe4.zendesk.com/frontendevents/dl https://knowbe4.zendesk.com/frontendevents/pv https://s3.amazonaws.com/development.uploads.knowbe4.com/ https://s3.amazonaws.com/kmsat-development.uploads.knowbe4.com/ https://s3.amazonaws.com/helpimg/ https://s3.amazonaws.com/helpimg-kmsat-development-us-east-1/ https://helpimg.s3.amazonaws.com/ https://static.zdassets.com/ https://zendesk-eu.my.sentry.io/ pendo-static-6167502888239104.storage.googleapis.com wss://*.zopim.com/ wss://knowbe4.zendesk.com/ ; frame-ancestors 'self' https://*.knowbe4.com https://*.kb4od.run ; child-src 'self' blob: ; connect-src 'self' data: blob: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com btb-glossary.btb.private.knowbe4.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io deepfake-content-write-production-us-east-1.s3.amazonaws.com deepfake-content-read-production-us-east-1.s3.amazonaws.com eai-agent-security-private-ai-production-us-east-1.s3.amazonaws.com ccm-scorm-production-us-east-1.s3.amazonaws.com ccm-courses-production-us-east-1.s3.amazonaws.com fonts.googleapis.com js.hsforms.net forms.hsforms.com forms.hubspot.com api.hsforms.com https://*.hsforms.com https://*.hubspot.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://*.knowbe4.com https://*.kb4od.run https://*.ckeditor.com/ https://*.launchdarkly.com/ https://*.zopim.com/ https://api-js.mixpanel.com https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk.com/ https://knowbe4.zendesk.com/embeddable/config https://knowbe4.zendesk.com/embeddable_blip https://knowbe4.zendesk.com/frontendevents/dl https://knowbe4.zendesk.com/frontendevents/pv https://s3.amazonaws.com/development.uploads.knowbe4.com/ https://s3.amazonaws.com/kmsat-development.uploads.knowbe4.com/ https://s3.amazonaws.com/helpimg/ https://s3.amazonaws.com/helpimg-kmsat-development-us-east-1/ https://helpimg.s3.amazonaws.com/ https://static.zdassets.com/ https://zendesk-eu.my.sentry.io/ pendo-static-6167502888239104.storage.googleapis.com wss://*.zopim.com/ wss://knowbe4.zendesk.com/ ; frame-src 'self' blob: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com btb-glossary.btb.private.knowbe4.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io deepfake-content-write-production-us-east-1.s3.amazonaws.com deepfake-content-read-production-us-east-1.s3.amazonaws.com eai-agent-security-private-ai-production-us-east-1.s3.amazonaws.com ccm-scorm-production-us-east-1.s3.amazonaws.com ccm-courses-production-us-east-1.s3.amazonaws.com fonts.googleapis.com js.hsforms.net forms.hsforms.com forms.hubspot.com api.hsforms.com https://*.hsforms.com https://*.hubspot.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://*.knowbe4.com https://*.kb4od.run https://*.ckeditor.com/ https://*.launchdarkly.com/ https://*.zopim.com/ https://api-js.mixpanel.com https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk.com/ https://knowbe4.zendesk.com/embeddable/config https://knowbe4.zendesk.com/embeddable_blip https://knowbe4.zendesk.com/frontendevents/dl https://knowbe4.zendesk.com/frontendevents/pv https://s3.amazonaws.com/development.uploads.knowbe4.com/ https://s3.amazonaws.com/kmsat-development.uploads.knowbe4.com/ https://s3.amazonaws.com/helpimg/ https://s3.amazonaws.com/helpimg-kmsat-development-us-east-1/ https://helpimg.s3.amazonaws.com/ https://static.zdassets.com/ https://zendesk-eu.my.sentry.io/ pendo-static-6167502888239104.storage.googleapis.com wss://*.zopim.com/ wss://knowbe4.zendesk.com/ android-webview-video-poster: https://player.vimeo.com https://*.ccm.knowbe4.com https://*.internal.knowbe4.com https://*.ccm.internal.knowbe4.com ; font-src 'self' data: fonts.gstatic.com helpimg.s3.amazonaws.com use.fontawesome.com use.typekit.net https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/ ; img-src * 'self' blob: cid: data: file: android-webview-video-poster: https://cdn.mxpnl.com/ https://v2assets.zopim.io/ https://static.zdassets.com/ app.pendo.io cdn.pendo.io data.pendo.io pendo-static-6167502888239104.storage.googleapis.com ; media-src 'self' about: blob: data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com btb-glossary.btb.private.knowbe4.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io deepfake-content-write-production-us-east-1.s3.amazonaws.com deepfake-content-read-production-us-east-1.s3.amazonaws.com eai-agent-security-private-ai-production-us-east-1.s3.amazonaws.com ccm-scorm-production-us-east-1.s3.amazonaws.com ccm-courses-production-us-east-1.s3.amazonaws.com fonts.googleapis.com js.hsforms.net forms.hsforms.com forms.hubspot.com api.hsforms.com https://*.hsforms.com https://*.hubspot.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://*.knowbe4.com https://*.kb4od.run https://*.ckeditor.com/ https://*.launchdarkly.com/ https://*.zopim.com/ https://api-js.mixpanel.com https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk.com/ https://knowbe4.zendesk.com/embeddable/config https://knowbe4.zendesk.com/embeddable_blip https://knowbe4.zendesk.com/frontendevents/dl https://knowbe4.zendesk.com/frontendevents/pv https://s3.amazonaws.com/development.uploads.knowbe4.com/ https://s3.amazonaws.com/kmsat-development.uploads.knowbe4.com/ https://s3.amazonaws.com/helpimg/ https://s3.amazonaws.com/helpimg-kmsat-development-us-east-1/ https://helpimg.s3.amazonaws.com/ https://static.zdassets.com/ https://zendesk-eu.my.sentry.io/ pendo-static-6167502888239104.storage.googleapis.com wss://*.zopim.com/ wss://knowbe4.zendesk.com/ ; object-src 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com btb-glossary.btb.private.knowbe4.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io deepfake-content-write-production-us-east-1.s3.amazonaws.com deepfake-content-read-production-us-east-1.s3.amazonaws.com eai-agent-security-private-ai-production-us-east-1.s3.amazonaws.com ccm-scorm-production-us-east-1.s3.amazonaws.com ccm-courses-production-us-east-1.s3.amazonaws.com fonts.googleapis.com js.hsforms.net forms.hsforms.com forms.hubspot.com api.hsforms.com https://*.hsforms.com https://*.hubspot.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://*.knowbe4.com https://*.kb4od.run https://*.ckeditor.com/ https://*.launchdarkly.com/ https://*.zopim.com/ https://api-js.mixpanel.com https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk.com/ https://knowbe4.zendesk.com/embeddable/config https://knowbe4.zendesk.com/embeddable_blip https://knowbe4.zendesk.com/frontendevents/dl https://knowbe4.zendesk.com/frontendevents/pv https://s3.amazonaws.com/development.uploads.knowbe4.com/ https://s3.amazonaws.com/kmsat-development.uploads.knowbe4.com/ https://s3.amazonaws.com/helpimg/ https://s3.amazonaws.com/helpimg-kmsat-development-us-east-1/ https://helpimg.s3.amazonaws.com/ https://static.zdassets.com/ https://zendesk-eu.my.sentry.io/ pendo-static-6167502888239104.storage.googleapis.com wss://*.zopim.com/ wss://knowbe4.zendesk.com/ pendo-io-static.storage.googleapis.com pendo-static-6167502888239104.storage.googleapis.com use.typekit.net ; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' blob: data: wss://gruefbpuubghniw5iflbf2a6im.appsync-api.us-east-1.amazonaws.com/graphql wss://gruefbpuubghniw5iflbf2a6im.appsync-realtime-api.us-east-1.amazonaws.com/graphql s3.amazonaws.com/uploads.knowbe4.com/ api-js.mixpanel.com app.pendo.io btb-glossary-bucket-production-us-east-1.s3.amazonaws.com btb-glossary.btb.private.knowbe4.com https://browser-intake-datadoghq.com/ cdn.pendo.io data.pendo.io deepfake-content-write-production-us-east-1.s3.amazonaws.com deepfake-content-read-production-us-east-1.s3.amazonaws.com eai-agent-security-private-ai-production-us-east-1.s3.amazonaws.com ccm-scorm-production-us-east-1.s3.amazonaws.com ccm-courses-production-us-east-1.s3.amazonaws.com fonts.googleapis.com js.hsforms.net forms.hsforms.com forms.hubspot.com api.hsforms.com https://*.hsforms.com https://*.hubspot.com metrics.articulate.com modstore.knowbe4.com modstore-production-us-east-1.s3.amazonaws.com https://*.knowbe4.com https://*.kb4od.run https://*.ckeditor.com/ https://*.launchdarkly.com/ https://*.zopim.com/ https://api-js.mixpanel.com https://api.mixpanel.com/ https://cdnjs.cloudflare.com/ https://code.highcharts.com/ https://data.pendo.io/ https://ekr.zdassets.com/ https://ekr.zendesk.com/ https://knowbe4.zendesk.com/ https://knowbe4.zendesk.com/embeddable/config https://knowbe4.zendesk.com/embeddable_blip https://knowbe4.zendesk.com/frontendevents/dl https://knowbe4.zendesk.com/frontendevents/pv https://s3.amazonaws.com/development.uploads.knowbe4.com/ https://s3.amazonaws.com/kmsat-development.uploads.knowbe4.com/ https://s3.amazonaws.com/helpimg/ https://s3.amazonaws.com/helpimg-kmsat-development-us-east-1/ https://helpimg.s3.amazonaws.com/ https://static.zdassets.com/ https://zendesk-eu.my.sentry.io/ pendo-static-6167502888239104.storage.googleapis.com wss://*.zopim.com/ wss://knowbe4.zendesk.com/ https://unpkg.com/vue@2.6.14 pendo-io-static.storage.googleapis.com pendo-static-6167502888239104.storage.googleapis.com use.typekit.net https://cdn.pendo.io/agent/static/365392a9-6608-44ef-443b-572eef771b95/pendo.js ; style-src 'self' 'unsafe-inline' data: app.pendo.io cdn.pendo.io fonts.gstatic.com https://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/ pendo-static-6167502888239104.storage.googleapis.com use.typekit.net ; style-src-elem 'self' 'unsafe-inline' data: app.pendo.io cdn.pendo.io fonts.googleapis.com fonts.gstatic.com helpimg.s3.amazonaws.com cdnjs.cloudflare.com/ajax/libs/font-awesome/ cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/ p.typekit.net pendo-static-6167502888239104.storage.googleapis.com s3.amazonaws.com/helpimg/ use.fontawesome.com use.typekit.net www.java.com/ga/css/print.css www.java.com/ga/css/screen.css ; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubf27996eb9977f34aa9f3376bd3939adc&dd-evp-origin=content-security-policy&ddsource=csp-report&app=kmsat&env=production-us-east-1 ; worker-src 'self' blob: data: ; 5
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.hotjar.com https://static.dhlecommerce.nl https://fonts.gstatic.com https://widgets.trustedshops.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.googletagmanager.com contact.robinhq.com *.multisafepay.com https://pay.google.com *.trustpilot.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com blackhole.lan:9000 bat.bing.com bat.bing.net https://maps.googleapis.com https://maps.gstatic.com *.doofinder.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com magefan.com cm.magefan.com *.disqus.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com *.sooqr.com *.spotlersearch.com *.multisafepay.com www.xtento.com cdn.xtento.com maps.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com/ *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com https://cdn.jsdelivr.net *.tiktok.com selfservice.robinhq.com robincontentdesktop.blob.core.windows.net az416426.vo.msecnd.net *.googleads.g.doubleclick.net *.googleadservices.com *.cloudfront.net assets.spotlersearchanalytics.com spotlersearchanalytics.com *.hotjar.com bat.bing.com www.clarity.ms scripts.clarity.ms https://static.dhlecommerce.nl *.doofinder.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.disqus.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com *.sooqr.com *.spotlersearch.com *.multisafepay.com https://pay.google.com *.trustpilot.com www.xtento.com cdn.xtento.com maps.googleapis.com maps.google.apis.com cdn-4.convertexperiments.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com https://static.dhlecommerce.nl https://maps.googleapis.com https://fonts.googleapis.com *.doofinder.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://static.klaviyo.com https://cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net *.sooqr.com *.spotlersearch.com *.multisafepay.com *.trustpilot.com maps.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com dc.services.visualstudio.com *.visualwebsiteoptimizer.com p2iqhncxyh.execute-api.eu-central-1.amazonaws.com bat.bing.com bat.bing.net *.hotjar.com *.hotjar.io *.clarity.ms https://api-gw.dhlparcel.nl https://static.dhlecommerce.nl *.doofinder.com wss://*.doofinder.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io *.sooqr.com *.spotlersearch.com *.multisafepay.com maps.googleapis.com maps.google.apis.com cdn-4.convertexperiments.com *.pay.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 5
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com maxcdn.bootstrapcdn.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com/recaptcha/ www.facebook.com platform.twitter.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.curopayments.net *.google-analytics.com *.googleapis.com 'self' data: www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google-analytics.com *.googleapis.com *.gstatic.com *.google.com/recaptcha/ connect.facebook.net twitter.com platform.twitter.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.googleapis.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.homoactive.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.google-analytics.com 'self' ws: 'self' wss: *.pay.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.homoactive.com/paynl/csp/report; report-to report-endpoint; 5
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com 'unsafe-inline' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.cloudflare.com *.twitter.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://www.youtube.com http://www.sandbox.paypal.com *.twitter.com *.tawk.to 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.ytimg.com *.bing.com *.doubleclick.net *.google.com *.mastercard.com *.tawk.to data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.cloudflare.com *.twitter.com *.google-analytics.com *.gstatic.com *.fontawesome.com *.bing.com *.zopim.com *.tawk.to *.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com *.cloudflare.com *.googleapis.com *.twitter.com *.gstatic.com *.typekit.net *.bing.com *.tawk.to 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com *.zopim.com *.zopim.io *.tawk.to 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com www.google-analytics.com *.cloudflare.com *.twitter.com https://stats.g.doubleclick.net analytics.google.com *.avada.io *.tawk.to wss://*.tawk.to self unsafe-inline 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 5
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com cash-f.squarecdn.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.pinterest.com *.sendcloud.sc *.jsdelivr.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * *.trustedshops.com cdn.cookielaw.org res.cloudinary.com www.b2c-nfinity.com t.squeezely.tech cdn-icons-png.flaticon.com docker.creative-serving.com trkr.shoppingminds.net bam.nr-data.net *.googleapis.com *.etrusted.com *.pinterest.com bat.bing.com *.adyen.com *.facebook.com img.youtube.com a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org cdn.doofinder.com *.google.com *.google.co.uk *.google.ca b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com ts.tradetracker.net *.amazonaws.com blob: www.google.ge magefan.com cm.magefan.com *.disqus.com https://img.youtube.com www.sandbox.paypal.com www.magmodules.eu cdn.magmodules.eu data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page *.trustedshops.com squeezely.tech bat.bing.com *.etrusted.com *.kk-resources.com *.googleoptimize.com cdn.cookielaw.org l.getsitecontrol.com script.shoppingminds.com script.shoppingminds.net js-agent.newrelic.com bam.nr-data.net static.hotjar.com script.hotjar.com s2.getsitecontrol.com *.pinterest.com s.pinimg.com analytics.topdrinks.nl analytics.topdrinks.fr analytics.topdrinks.dk analytics.topdrinks.de analytics.topdrinks.at analytics.topdrinks.be unpkg.com cdn.jsdelivr.net commerce.adobe.net *.googletagmanager.com cdn.doofinder.com analytics.tiktok.com *.google.co.uk *.google.ca s7.addthis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com songbirdstag.cardinalcommerce.com tm.tradetracker.net *.trustpilot.com *.sendcloud.sc *.jsdelivr.net https://connect.facebook.net *.google.fr *.disqus.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.cash.app *.etrusted.com *.pinterest.com *.sendcloud.sc *.jsdelivr.net *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.youtube.com youtu.be www.youtube-nocookie.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com * *.google.lk analytics.topdrinks.nl ws.hotjar.com wss://ws.hotjar.com content.hotjar.io analytics.topdrinks.fr analytics.topdrinks.dk analytics.topdrinks.de analytics.topdrinks.at analytics.topdrinks.be cdn.cookielaw.org geolocation.onetrust.com *.g.doubleclick.net l.getsitecontrol.com *.shoppingminds.net *.googleapis.com bam.nr-data.net cdn1.api.trustedshops.com pay.google.com privacyportal-de.onetrust.com vc.hotjar.io events.getsitectrl.com *.etrusted.com *.pinterest.com *.adyen.com maps.googleapis.com nominatim.openstreetmap.org *.onyourmap.com *.mapbox.com *.doofinder.com wss://*.doofinder.com analytics.tiktok.com ekr.zdassets.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.sendcloud.sc *.cdn.jsdelivr.net https://analytics.tiktok.com *.google.fr *.google.co.uk *.google.ca 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 5
default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 5
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.oney.io *.staging.oney.io https://fonts.gstatic.com *.fontawesome.com https://geowidget.easypack24.net *.klarnacdn.net https://fonts.bunny.net maxcdn.bootstrapcdn.com *.hotjar.com pay.google.com *.google.com google.com www.gstatic.com *.googleapis.com *.google-analytics.com fonts.googleapis.com *.payu.com *.payu.com.pl static.payu.com secure.payu.com secure.snd.payu.com *.snd.payu.com merch-prod.snd.payu.com browser.sentry-cdn.com *.sentry-cdn.com sentry.advox.pl data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com sandbox.przelewy24.pl secure.przelewy24.pl facebook.com *.przelewy24.pl 'self' 'unsafe-inline'; frame-ancestors pay.google.com www.facebook.com *.kinderkraft.fr kinderkraft.co.uk *.kinderkraft.pl kinderkraft.fr kinderkraft.pl *.trustpilot.com *.criteo.gum *.cookiebot.com ecommscript-integrationapp.trustpilot.com secure.payu.com methodurl.psp-solutions.com *.przelewy24.pl 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.hipay-tpp.com *.hipay.com *.googleapis.com consent.cookiebot.com consentcdn.cookiebot.com test.saferpay.com pay.google.com apm.przelewy24.pl *.przelewy24.pl *.espago.com secure.payu.com merch-prod.snd.payu.com https://geowidget-app.inpost.pl/ https://sandbox-easy-geowidget.easypack24.net/ *.klarna.com js.mollie.com payment-widget.przelewy24.pl secure.przelewy24.pl go.przelewy24.pl secure.espago.com *.facebook.com *.instagram.com *.hotjar.com *.criteo.com *.criteo.net *.kinderkraft.fr kinderkraft.fr kinderkraft.pl *.pinterest.com td.doubleclick.net hal9000.redintelligence.net kinderkraft.co.uk ecommscript-integrationapp.trustpilot.com widget.trustpilot.com *.trustpilot.com ecommplugins-trustboxpreview.trustpilot.com *.klarnaservices.com *.saferpay.com methodurl.psp-solutions.com https://methodurl.psp-solutions.com https://3dsecure.bnpparibas.pl/ *.gstatic.com www.gstatic.com *.google-analytics.com fonts.gstatic.com fonts.googleapis.com *.payu.com *.payu.com.pl static.payu.com secure.snd.payu.com *.snd.payu.com browser.sentry-cdn.com *.sentry-cdn.com sentry.advox.pl 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.hipay.com *.googleapis.com *.oney.io *.staging.oney.io imgsct.cookiebot.com static.przelewy24.pl www.gstatic.com gstatic.com static.payu.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.klarna.com *.klarnaevt.com *.klarnacdn.net https://firebasestorage.googleapis.com https://www.mollie.com *.casalemedia.com *.taboola.com *.adform.net *.adscale.de *.addthis.com *.1rx.io *.toast.com *.krxd.net developers.google.com ade.googlesyndication.com *.ytimg.com www.google.pl kinderkraft.com pixel.wp.pl *.instagram.com *.payu.com *.hotjar.com *.criteo.com *.adobedtm.com *.doubleclick.net *.outbrain.com *.rubiconproject.com *.yahoo.com *.3lift.com *.smartadserver.com *.adnxs.com *.tapad.com *.360yield.com *.pubmatic.com *.media.net *.teads.tv *.bidswitch.net *.sharethrough.com *.smaato.net *.socdm.com *.advertising.com *.dable.io *.co.kr *.stickyadstv.com *.twiago.com *.omnitagjs.com *.liadm.com *.yieldmo.com *.postrelease.com *.revcontent.com *.mail.ru *.yieldlab.net *.rambler.ru *.bing.com *.openx.net *.nate.com *.mediawallahscript.com id5-sync.com *.rlcdn.com *.adingo.jp *.tremorhub.com *.yandex.ru *.aralego.com/ *.ad-stir.com *.adtdp.com *.meba.kr *.turn.com *.dmxleo.com *.mediavine.com *.ivitrack.com *.smartclip.net *.emxdgt.com *.pinterest.com *.bluekai.com *.thebrighttag.com kinderkraft.pl *.user.com *.trustpilot.com *.trustpilot.net *.metaffiliation.com region1.analytics.google.com trk.datnova.com *.facebook.net server-side-tagging-vqegoo7bda-uc.a.run.app bcw.kinderkraft.fr widget.trustpilot.com images-static.trustpilot.com adservice.google.com pay.google.com *.google.com google.com *.google-analytics.com fonts.gstatic.com fonts.googleapis.com *.payu.com.pl secure.payu.com secure.snd.payu.com *.snd.payu.com merch-prod.snd.payu.com browser.sentry-cdn.com *.sentry-cdn.com sentry.advox.pl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.hipay-tpp.com *.hipay.com mpsnare.iesnare.com *.paypal.com *.googleapis.com *.oney.io *.staging.oney.io *.snrbox.com https://browser.sentry-cdn.com *.googletagmanager.com *.cookiebot.com cookiebot.com consent.cookiebot.com consentcdn.cookiebot.com cdn.chatsimple.ai *.chatsimple.ai cdn.expertise.ai *.expertise.ai *.i.posthog.com sandbox.przelewy24.pl secure.przelewy24.pl pay.google.com apm.przelewy24.pl secure.payu.com secure.snd.payu.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.avada.io js.mollie.com *.cux.io tag.facemyads.co bcw.kinderkraft.fr cdn.cookiehub.eu invitejs.trustpilot.com kinderkraft-staging.user.com *.user.com *.g.doubleclick.net *.adyen.com *.facebook.net pixel.wp.pl *.hotjar.com *.criteo.com *.criteo.net *.cloudflare.com *.clickcease.com *.pinimg.com *.googleoptimize.com *.kinderkraft.pl *.kinderkraft.fr *.kinderkraft.de *.kinderkraft.it *.kinderkraft.co.uk *.kinderkraft.es *.metaffiliation.com *.trustpilot.com *.bing.com *.clarity.ms *.taboola.com *.luigisbox.tech ct.pinterest.com kng.kinderkraft.at sha.kinderkraft.be bbd-tag.de s.retargeted.co apptracker.stream *.sddan.com trk.datnova.com js.cookieless-data.com ecommscript-integrationapp.trustpilot.com widget.trustpilot.com ecommplugins-trustboxpreview.trustpilot.com us-assets.i.posthog.com *.gstatic.com www.gstatic.com *.google-analytics.com fonts.gstatic.com fonts.googleapis.com *.payu.com *.payu.com.pl static.payu.com *.snd.payu.com merch-prod.snd.payu.com browser.sentry-cdn.com *.sentry-cdn.com sentry.advox.pl 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.hipay.com *.googleapis.com *.snrcdn.net https://fonts.googleapis.com *.fontawesome.com *.easypack24.net easypack24.net https://geowidget.easypack24.net https://geowidget.inpost.pl *.klarnacdn.net https://fonts.bunny.net maxcdn.bootstrapcdn.com *.typekit.net cdn.cookiehub.eu *.instagram.com *.cloudflare.com cdn.luigisbox.tech widget.trustpilot.com *.trustpilot.com ecommplugins-trustboxpreview.trustpilot.com pay.google.com *.google.com google.com *.gstatic.com www.gstatic.com *.google-analytics.com fonts.gstatic.com *.payu.com *.payu.com.pl static.payu.com secure.payu.com secure.snd.payu.com *.snd.payu.com merch-prod.snd.payu.com browser.sentry-cdn.com *.sentry-cdn.com sentry.advox.pl 'self' 'unsafe-inline'; object-src ecommscript-integrationapp.trustpilot.com 'self' 'unsafe-inline'; media-src *.adobe.com data: mpsnare.iesnare.com *.googleapis.com cdn.expertise.ai *.expertise.ai https://geowidget.easypack24.net *.googlevideo.com cdn.chatsimple.ai 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.hipay-tpp.com *.hipay.com wss://mpsnare.iesnare.com *.oney.io *.staging.oney.io *.snrbox.com https://*.ingest.sentry.io *.cookiebot.com cookiebot.com consentcdn.cookiebot.com cdn.chatsimple.ai *.chatsimple.ai cdn.expertise.ai *.expertise.ai *.i.posthog.com sandbox.przelewy24.pl secure.przelewy24.pl wss://ws.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com secure.payu.com merch-prod.snd.payu.com *.easypack24.net *.inpost.pl *.openstreetmap.org *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://get.geojs.io *.avada.io ws: *.instagram.com googleads.g.doubleclick.net wss://ws3.hotjar.com *.kinderkraft.fr *.metaffiliation.com facebook.com server-side-tagging-vqegoo7bda-uc.a.run.app ecommscript-integrationapp.trustpilot.com region1.analytics.google.com kinderkraft-staging.user.com wss://kinderkraft-staging.user.com *.adyen.com yt2html5.com *.user.com stats.g.doubleclick.net wss://kinderkraft.user.com *.hotjar.com https://paypal.com paypal.com *.hotjar.io *.criteo.com wss://ws29.hotjar.com *.pinterest.com wss://ws11.hotjar.com google.pl sentry.io *.clarity.ms *.cux.io *.facebook.com *.google.pl wss://* *.openfpcdn.io *.google-analytics.com *.taboola.com *.luigisbox.tech *.bing.com wdg.kinderkraft.pl *.googleapis.com tvw.kinderkraft.co.uk analytics.tiktok.com *.kinderkraft.at *.kinderkraft.be bcw.kinderkraft.fr widget.trustpilot.com api.trustpilot.com ambcglobal.sc.omtrdc.net cdn.cookiehub.eu api.expertise.ai pagead2.googlesyndication.com us.i.posthog.com api.ipify.org *.przelewy24.pl *.gstatic.com www.gstatic.com fonts.gstatic.com fonts.googleapis.com *.payu.com *.payu.com.pl static.payu.com secure.snd.payu.com *.snd.payu.com browser.sentry-cdn.com *.sentry-cdn.com sentry.advox.pl 'self' 'unsafe-inline'; child-src *.instagram.com http: https: blob: 'self' 'unsafe-inline'; default-src kinderkraft.co.uk *.adyen.com *.instagram.com *.googleoptimize.com *.bing.com kinderkraft.pl ecommscript-integrationapp.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 5
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.youtube.com https://ic-seo.com https://www.google-analytics.com https://www.google.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.google.com https://www.google.co.jp https://s.w.org; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://ic-seo.com https://region1.google-analytics.com; worker-src blob:; object-src 'none'; base-uri 'self'; form-action 'self'; 5
base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; report-uri /csp-report; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: *.ivi.ru *.ivi.tv *.turkdizi.com ivi.ru ivi.tv turkdizi.com google.com *.google.com gstatic.com *.gstatic.com googletagmanager.com *.googletagmanager.com *.googleapis.com googlesyndication.com *.googlesyndication.com google-analytics.com *.google-analytics.com doubleclick.net *.doubleclick.net *.googleadservices.com www.googlecommerce.com yandex.ru *.yandex.ru yandex.net *.yandex.net yandex.st *.yandex.st yastat.net *.yastat.net yastatic.net *.yastatic.net yandex.com *.yandex.com yandexcloud.net *.yandexcloud.net yandex.by *.yandex.by yandex.kz *.yandex.kz mail.ru *.mail.ru tns-counter.ru *.tns-counter.ru doubleverify.com *.doubleverify.com s0.2mdn.net adriver.ru *.adriver.ru statad.ru *.statad.ru targetads.io *.targetads.io flocktory.com *.flocktory.com getshop.tv *.getshop.tv *.clarity.ms *.hotjar.com adfox.ru *.adfox.ru adsafeprotected.com *.adsafeprotected.com 5visions.com *.5visions.com adjust.com *.adjust.com ozon.ru *.ozon.ru bridgertb.tech *.bridgertb.tech serving-sys.ru *.serving-sys.ru cmediahub.ru *.cmediahub.ru weborama-tech.ru *.weborama-tech.ru digitaltarget.ru *.digitaltarget.ru mhverifier.ru *.mhverifier.ru adlooxtracking.ru *.adlooxtracking.ru adlooxtracking.com *.adlooxtracking.com telecid.ru *.telecid.ru tele2.ru *.tele2.ru telecomid.ru *.telecomid.ru teletarget.ru *.teletarget.ru cdnvideo.ru *.cdnvideo.ru beeline.ru *.beeline.ru moe.video *.moe.video otm-r.com *.otm-r.com punchmedia.ru *.punchmedia.ru skwstat.ru *.skwstat.ru stbid.ru *.stbid.ru videonow.ru *.videonow.ru utraff.com *.utraff.com acint.net *.acint.net betweendigital.com *.betweendigital.com betweendigital.ads.com lentainform.com *.lentainform.com code.moviead55.ru moviead55.ru cs-0.moevideo.biz moevideo.biz buzzoola.com *.buzzoola.com uma.media *.uma.media appsflyer.com *.appsflyer.com instreamvideo.ru *.instreamvideo.ru mobilebanner.ru *.mobilebanner.ru admetrica.ru *.admetrica.ru prodmp.ru *.prodmp.ru sync.adspend.space reichelcormier.bid *.reichelcormier.bid secure.adnxs.com adnxs.com ohmy.bid *.ohmy.bid ssl.hurra.com hurra.com bidvol.com *.bidvol.com adstreamer.ru *.adstreamer.ru adkernel.com *.adkernel.com republer.com sync.republer.com sync.viadata.store viadata.store sync.viavideo.digital viavideo.digital wi-fi.ru *.wi-fi.ru track.rutarget.ru rutarget.ru impressions.onelink.me onelink.me px170.mediahills.ru mediahills.ru mts.ru *.mts.ru digital-alliance.tech *.digital-alliance.tech admon.pro *.admon.pro adhight.net *.adhight.net getads.ru *.getads.ru vk.com *.vk.com connect.facebook.net facebook.com *.facebook.com *.skcrtxr.com api.mindbox.ru simbad.pro taglitics.com creatives.afp.ai cdn.al-adtech.com cdn.jsdelivr.net *.criteo.com image.sendsay.ru snap.licdn.com dap.digitalgov.gov bat.bing.com www.artfut.com cdn.cookielaw.org static.ads-twitter.com s.pinimg.com cdn-cookieyes.com cdn.taboola.com www.redditstatic.com *.ahrefs.com *.alicdn.com *.tiktok.com *.amazonaws.com *.cloudflare.com cdn.amplitude.com cdn.segment.com cdn.branch.io app.usercentrics.eu app.termly.io cdn.walkme.com s.go-mpulse.net cdn.moengage.com cdn.omniconvert.com siteimproveanalytics.com edge.fullstory.com cdn.rutarget.ru sb.scorecardresearch.com secure.quantserve.com c.amazon-adsystem.com cdn.mxpnl.com cdn.userway.org kp.apiget.ru static.pro-bm7.ru rus.glbbars.com api.cpatext.ru widgets.101apis.com images.uc.cn cdn.browsiprod.com unpkg.zhimg.com s.yimg.jp gtmpx.com r.gtmpx.com cdn.dv.tech zmstat.com coilita.com app-vault-static.intl.miui.com plaff-go.ru img.otv.cc mstat.acestream.net cdn.alsgp0.fds.api.mi-img.com ymqhq7yfu5.ru ymkm9druw0.ru 4
block-all-mixed-content; report-uri https://events.ocdn.eu/v2/csp-report?_ac=events&_fv=www.onet.pl::APROD_BOT 4
default-src 'self' https://*.akstat.io https://*.algolianet.com https://*.fls.doubleclick.net https://*.pearson.com https://*.visualwebsiteoptimizer.com https://a.quora.com https://ad.doubleclick.net https://ade.googlesyndication.com https://alb.reddit.com https://analytics-ipv6.tiktokw.us https://analytics.formassembly.com https://analytics.tiktok.com https://analytics.twitter.com https://api.company-target.com https://app.launchdarkly.com https://bam.nr-data.net https://bat.bing.com https://bat.bing.net https://c.go-mpulse.net https://cdn.cookielaw.org https://cdn.jsdelivr.net https://cdn.pdst.fm https://cdn.sift.com https://connect.facebook.net https://d.btttag.com https://fonts.googleapis.com https://fonts.gstatic.com https://geolocation.onetrust.com https://googleads.g.doubleclick.net https://hexagon-analytics.com https://i.liadm.com https://img.youtube.com https://insight.adsrvr.org https://js-agent.newrelic.com https://js.adsrvr.org https://p11.techlab-cdn.com https://pagead2.googlesyndication.com https://pearson--projects.sandbox.my.site.com https://pearson.blueconic.net https://pearson.com https://pearson.esaas.inmoment.eu https://pearson.mcxplatform.de https://pearson.sb.blueconic.net https://pearson.tfaforms.net https://pearson3283191z.btttag.com https://pi.pardot.com https://pixel-config.reddit.com https://pixels.spotify.com https://privacyportal-de.onetrust.com https://px.ads.linkedin.com https://q.quora.com https://region1.google-analytics.com https://s.company-target.com https://s.go-mpulse.net https://sc-static.sc-static.net https://secure.adnxs.com https://snap.licdn.com https://static.ads-twitter.com https://static.hotjar.com https://t.t.co https://tag-logger.demandbase.com https://tag.demandbase.com https://tag.rmp.rakuten.com https://td.doubleclick.net https://tr.snapchat.com https://tr6.snapchat.com https://trial-eum-clientnsv4-s.akamaihd.net https://trial-eum-clienttons-s.akamaihd.net https://us5azow6i2-dsn.algolia.net https://utt.impactcdn.com https://www.redditstatic.com https://xfoi9ebbhr-dsn.algolia.net; script-src 'nonce-byI7dmwz0ApVUQ9Zxw/wOK83' 'strict-dynamic' 'unsafe-inline' https: https://*.go-mpulse.net; script-src-elem 'nonce-byI7dmwz0ApVUQ9Zxw/wOK83' 'unsafe-inline' blob: https: https://*.go-mpulse.net; style-src 'self' 'unsafe-inline' data: https://*.pearson.com https://*.visualwebsiteoptimizer.com https://cdn.cookielaw.org https://fonts.googleapis.com https://fonts.gstatic.com https://pearson.com https://pearson--testbau.sandbox.my.site.com; style-src-attr 'unsafe-inline'; img-src 'self' data: blob: https://*.fls.doubleclick.net https://*.pearson.com https://*.visualwebsiteoptimizer.com https://ad.doubleclick.net https://alb.reddit.com https://analytics-ipv6.tiktokw.us https://analytics.tiktok.com https://analytics.twitter.com https://bat.bing.com https://bat.bing.net https://cdn.cookielaw.org https://d.btttag.com https://fonts.gstatic.com https://googleads.g.doubleclick.net https://hexagon-analytics.com https://i.liadm.com https://i6.liadm.com https://id.rlcdn.com https://img.youtube.com https://insight.adsrvr.org https://pearson--projects.sandbox.my.site.com https://pearson.blueconic.net https://pearson.com https://pearson3283191z.btttag.com https://pi.pardot.com https://pixel-config.reddit.com https://pixels.spotify.com https://px.ads.linkedin.com https://region1.google-analytics.com https://sc-static.sc-static.net https://secure.adnxs.com https://segments.company-target.com https://static.ads-twitter.com https://t.t.co https://td.doubleclick.net https://tr.snapchat.com https://tr6.snapchat.com https://utt.impactcdn.com https://www.facebook.com https://www.google.com https://www.googletagmanager.com https://www.linkedin.com https://www.redditstatic.com; font-src 'self' data: https://*.pearson.com https://cdn.cookielaw.org https://fonts.googleapis.com https://fonts.gstatic.com https://pearson.com; connect-src 'self' https://*.adobeaemcloud.com https://*.akamaihd.net https://*.akstat.io https://*.algolianet.com https://*.go-mpulse.net https://*.pearson.com https://*.visualwebsiteoptimizer.com https://a.quora.com https://ad.doubleclick.net https://alb.reddit.com https://analytics-ipv6.tiktokw.us https://analytics.formassembly.com https://analytics.google.com https://analytics.tiktok.com https://analytics.twitter.com https://api-c-pgi.pearson.com https://api.company-target.com https://app.launchdarkly.com https://bam.nr-data.net https://bat.bing.com https://bat.bing.net https://c.go-mpulse.net https://cdn.cookielaw.org https://cdn.pdst.fm https://cdn.sift.com https://connect.facebook.net https://dev.visualwebsiteoptimizer.com https://fonts.googleapis.com https://fonts.gstatic.com https://geolocation.onetrust.com https://googleads.g.doubleclick.net https://hexagon-analytics.com https://i.liadm.com https://insight.adsrvr.org https://js-agent.newrelic.com https://js.adsrvr.org https://p11.techlab-cdn.com https://pagead2.googlesyndication.com https://pearson--projects.sandbox.my.site.com https://pearson--testbau.sandbox.my.salesforce-scrt.com https://pearson.blueconic.net https://pearson.com https://pearson.esaas.inmoment.eu https://pearson.mcxplatform.de https://pearson.sb.blueconic.net https://pearson.tfaforms.net https://pi.pardot.com https://pixels.spotify.com https://privacyportal-de.onetrust.com https://px.ads.linkedin.com https://q.quora.com https://region1.google-analytics.com https://s.company-target.com https://s.go-mpulse.net https://service-stg.pearson.com https://service.pearson.com https://snap.licdn.com https://static.hotjar.com https://stats.g.doubleclick.net https://t.t.co https://tag-logger.demandbase.com https://tag.demandbase.com https://tag.rmp.rakuten.com https://tr.snapchat.com https://tr6.snapchat.com https://us5azow6i2-dsn.algolia.net https://utt.impactcdn.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://xfoi9ebbhr-dsn.algolia.net https://pearson--testbau.sandbox.my.site.com https://*.c360a.salesforce.com; media-src 'self' blob: https://*.pearson.com https://pearson.com; frame-src 'self' https://*.pearson.com https://15344178.fls.doubleclick.net https://pearson--testbau.sandbox.my.site.com https://pearson.com https://s.company-target.com https://www.facebook.com https://www.googletagmanager.com; frame-ancestors 'none'; base-uri 'self'; object-src 'none'; 4
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com https://acsbapp.com https://snap.licdn.com https://sc-static.net https://tr.snapchat.com https://maps.googleapis.com https://static.ads-twitter.com https://analytics.twitter.com https://connect.facebook.net https://cdn.cookielaw.org https://www.youtube.com https://static.addtoany.com https://cdnjs.cloudflare.com https://www.googletagmanager.com https://js-agent.newrelic.com https://geolocation.onetrust.com https://bam-cell.nr-data.net https://cdnsecakmi.kaltura.com https://cdnapisec.kaltura.com http://cdnapi.kaltura.com https://cfvod.kaltura.com https://www.google-analytics.com https://cdn.jsdelivr.net https://script.crazyegg.com https://static.cloudflareinsights.com https://www.google.com https://www.gstatic.com https://bam.nr-data.net https://hm.baidu.com/hm.js https://www.clarity.ms https://www.googleadservices.com blob: https://vjs.zencdn.net/5.0/video.min.js https://analytics.tiktok.com; object-src 'self' 'unsafe-inline' 'unsafe-eval' https: data; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.cookielaw.org https://acsbapp.com https://sc-static.net https://tr.snapchat.com https://maps.googleapis.com  https://fonts.googleapis.com https://www.youtube.com https://static.addtoany.com https://cdnjs.cloudflare.com https://www.googletagmanager.com https://js-agent.newrelic.com https://geolocation.onetrust.com https://bam-cell.nr-data.net https://script.crazyegg.com https://static.cloudflareinsights.com https://cdnapisec.kaltura.com https://cfvod.kaltura.com https://vjs.zencdn.net/5.0/video-js.min.css https://analytics.tiktok.com; frame-ancestors 'self' 4
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn-ukwest.onetrust.com/scripttemplates/ https://websdk.appsflyer.com/ https://www.google.com/recaptcha/enterprise.js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://js.hcaptcha.com/ https://cdn.segment.com https://static.moonpay.com https://www.googletagmanager.com https://widget.trustpilot.com https://widget.intercom.io https://js.intercomcdn.com https://vercel.live; style-src 'self' 'unsafe-inline' https://newassets.hcaptcha.com https://vercel.live; object-src 'none'; base-uri 'self'; connect-src 'self' https://www.moonpay.com https://api.moonpay.com https://api.coingecko.com https://cdn-ukwest.onetrust.com https://geolocation.onetrust.com https://vitals.vercel-insights.com https://*.google-analytics.com https://*.analytics.google.com https://logs.browser-intake-datadoghq.com https://cdn.segment.com https://otel-collector.moonpay.com https://otel-collector.moonpaycloud.com https://otel-collector.moonpay-staging.com https://cdn.sanity.io https://www.google.com/recaptcha/ https://hcaptcha.com https://*.hcaptcha.com https://api-iam.eu.intercom.io https://widget.intercom.io https://nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io https://nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://vercel.live wss://ws-us3.pusher.com; font-src 'self' https://static.moonpay.com https://vercel.live https://assets.vercel.com; frame-src 'self' https://buy.moonpay.com https://sell.moonpay.com https://www.google.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://newassets.hcaptcha.com/ https://*.hcaptcha.com https://widget.trustpilot.com https://widget.intercom.io https://intercom-sheets.com https://vercel.live; img-src 'self' data: blob: https://cdn-ukwest.onetrust.com https://images.ctfassets.net https://payload-marketing.moonpay.com https://staging.moonpay-marketing-c337344.payloadcms.app https://static.moonpay.com https://cdn.sanity.io https://storage.googleapis.com https://js.intercomcdn.com https://static.intercomassets.com https://vercel.live https://vercel.com; manifest-src 'self'; media-src 'self' https://payload-marketing.moonpay.com https://staging.moonpay-marketing-c337344.payloadcms.app https://static.moonpay.com https://cdn.sanity.io https://storage.googleapis.com; worker-src 'self'; frame-ancestors 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub4f9819648cf6c369f00daa5b3a3a0ea7&dd-evp-origin=content-security-policy&ddsource=csp-report 4
default-src 'self' https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss:; media-src 'self' https: blob: data:; object-src https: blob:; worker-src 'self' https: blob:; frame-src 'self' https: blob:; form-action 'self' https:; block-all-mixed-content; report-uri /csp-violation-report 4
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https://*.google.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googlesyndication.com https://*.googleadservices.com https://*.doubleclick.net https://*.adtrafficquality.google https://*.gstatic.com https://cdn.jsdelivr.net https://d3js.org https://emailfake.com https://pagead2.googlesyndication.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://emailfake.com https://imasdk.googleapis.com https://tempm.com https://www.gstatic.com; img-src 'self' data: blob: https: https://www.google-analytics.com https://www.tempm.com; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net https://fonts.gstatic.com; connect-src 'self' https://*.google.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googlesyndication.com https://*.googleadservices.com https://*.doubleclick.net https://*.adtrafficquality.google https://*.gstatic.com https://email-fake.com https://emailfake.com https://es.emailfake.com https://generator.email https://ip.myip-address.com https://ip4.myip-address.com https://ip6.myip-address.com https://it.emailfake.com https://mail-temp.com https://new.emailfake.com https://tempm.com https://tr.emailfake.com https://translate-pa.googleapis.com https://translate.googleapis.com https://vi.emailfake.com https://www.google.ae https://www.google.al https://www.google.at https://www.google.az https://www.google.ba https://www.google.be https://www.google.bf https://www.google.bi https://www.google.bj https://www.google.by https://www.google.ca https://www.google.ch https://www.google.ci https://www.google.co.id https://www.google.co.il https://www.google.co.in https://www.google.co.jp https://www.google.co.ke https://www.google.co.kr https://www.google.co.ma https://www.google.co.th https://www.google.co.tz https://www.google.co.uk https://www.google.co.uz https://www.google.co.ve https://www.google.co.za https://www.google.com.ar https://www.google.com.au https://www.google.com.bd https://www.google.com.bh https://www.google.com.bn https://www.google.com.br https://www.google.com.co https://www.google.com.eg https://www.google.com.et https://www.google.com.gh https://www.google.com.hk https://www.google.com.kh https://www.google.com.kw https://www.google.com.lb https://www.google.com.mm https://www.google.com.mx https://www.google.com.my https://www.google.com.ng https://www.google.com.np; media-src 'self' blob: https:; frame-src 'self' https://*.google.com https://*.googlesyndication.com https://*.googleadservices.com https://*.doubleclick.net https://*.adtrafficquality.google; worker-src 'self' blob: 4
default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data: 4
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://s4.ispring.ru https://st.yagla.ru https://*.mail.ru https://app.uiscom.ru https://mc.yandex.ru https://vk.ru https://*.jivosite.com https://www.google.com https://www.gstatic.com https://*.tildacdn.com https://unpkg.com https://bitrix.info; style-src 'self' 'unsafe-inline' https://*.jivosite.com https://*.tildacdn.com https://unpkg.com https://fonts.googleapis.com; img-src 'self' data: blob: https://*.mail.ru https://vk.ru https://*.jivosite.com https://*.tildacdn.com https://www.ispring.ru; font-src 'self' https://*.tildacdn.com https://fonts.gstatic.com; media-src 'self' https://*.mail.ru https://*.jivosite.com https://*.tildacdn.com; worker-src 'self' blob:; connect-src 'self' https://app.uiscom.ru https://mc.yandex.ru wss://mc.yandex.ru https://*.jivosite.com wss://*.jivosite.com https://*.mail.ru https://stat.tildaapi.com https://*.tildacdn.com; frame-src 'self' https://cdn4.ispringsolutions.com https://mc.yandex.ru; frame-ancestors 'self'; report-uri /csp-report/report-only 4
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://cdn.jsdelivr.net https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://googleads.g.doubleclick.net https://accounts.google.com https://maps.googleapis.com https://connect.facebook.net https://analytics.tiktok.com https://s.pinimg.com https://ct.pinterest.com https://pixel.byspotify.com https://bat.bing.com https://*.criteo.com https://*.criteo.net https://js.stripe.com https://www.paypal.com https://js.braintreegateway.com https://static-na.payments-amazon.com https://cdn1.affirm.com https://sdk.helloextend.com https://appleid.cdn-apple.com https://widget.intercom.io https://js.intercomcdn.com https://www.roomvo.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://p.typekit.net https://accounts.google.com; img-src 'self' data: https:; font-src 'self' data: https://assets.rugimg.com https://fonts.gstatic.com https://p.typekit.net; frame-src https://player.vimeo.com https://www.youtube.com https://showroom.aftermkt.com https://account.rugs.com https://www.emjcd.com https://www.google.com https://accounts.google.com https://www.facebook.com https://ct.pinterest.com https://*.criteo.com https://*.criteo.net https://js.stripe.com https://www.paypal.com https://static-na.payments-amazon.com https://www.roomvo.com; connect-src 'self' https: https://chat.rugimg.com wss://chat.rugimg.com; media-src 'self' https://assets.rugimg.com; worker-src 'self' blob: 4
img-src https: data: blob:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline'; 4
default-src 'self'; script-src 'self' https://help.libyanspider.com; script-src-attr 'none'; style-src 'self'; img-src 'self' data: https://secure.gravatar.com; font-src 'self' data:; connect-src 'self'; frame-src 'self'; worker-src 'self' blob:; media-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://my.libyanspider.com; frame-ancestors 'self'; upgrade-insecure-requests 4
font-src fonts.gstatic.com use.typekit.net https://static.iadvize.com/ https://media.flixfacts.com *.fontawesome.com applepay.cdn-apple.com https://fonts.gstatic.com *.alothemes.com *.magepow.com googlepay.cdn-google.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com https://www.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com https://static.addtoany.com https://www.google.com/ https://service.loadbee.com/ https://vars.hotjar.com/ https://static.rolex.com/ https://retailers.rolex.com/ https://media.flixfacts.com *.webengage.co https://corners.rolex.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.ftcdn.net *.behance.net https://static.iadvize.com/ https://fstatic.iadvize.com/ https://www.facebook.com https://www.google.com https://www.google.co.in https://googleads.g.doubleclick.net https://www.googletagmanager.com https://media.flixfacts.com https://m.media-amazon.com https://www.darwishholding.com/ https://theqa.qa metrics.rolex.com maps.googleapis.com smetrics.rolex.com *.disqus.com *.alothemes.com *.magepow.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://rum.hlx.page eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com https://cobrowsing-ha.iadvize.com/ https://fstatic.iadvize.com/ https://static.iadvize.com/ https://halc.iadvize.com https://api.iadvize.com/ https://static.addtoany.com https://www.google.com https://js-agent.newrelic.com https://bam.nr-data.net https://graph.facebook.com https://widgets.pinterest.com https://cdn.loadbee.com/js/loadbee_integration.js https://static.hotjar.com https://script.hotjar.com https://static.rolex.com https://retailers.rolex.com http://media.flixfacts.com https://test-gateway.mastercard.com https://ap-gateway.mastercard.com/ https://starpay-easy.starboss.biz/ https://www.qpay.gov.qa/ https://m.media-amazon.com https://connect.facebook.net https://analytics.tiktok.com/ *.webengage.com applepay.cdn-apple.com https://corners.rolex.com maps.googleapis.com *.disqus.com *.alothemes.com *.magepow.com googlepay.cdn-google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com cdn.ampproject.org www.gstatic.com *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://halc.iadvize.com/ https://static.iadvize.com/ https://media.flixfacts.com https://test-gateway.mastercard.com https://ap-gateway.mastercard.com/ https://starpay-easy.starboss.biz/ https://www.qpay.gov.qa/ *.fontawesome.com *.googleapis.com *.addtoany.com *.alothemes.com *.magepow.com assets.braintreegateway.com www.gstatic.com maxcdn.bootstrapcdn.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://m.media-amazon.com https://media.flixfacts.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io https://cobrowsing-ha.iadvize.com/ https://halc.iadvize.com https://api.iadvize.com/ https://static.iadvize.com/ https://stats.g.doubleclick.net https://bam.nr-data.net https://availability.loadbee.com https://analytics.google.com https://in.hotjar.com https://vc.hotjar.io https://static.rolex.com https://retailers.rolex.com https://static.addtoany.com https://media.flixfacts.com https://stats.addtoany.com https://m.media-amazon.com c.webengage.com assets.adobedtm.com maps.googleapis.com http://dpm.demdex.net *.alothemes.com *.magepow.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com cdn.ampproject.org *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 4
script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ https://translate.google.com/translate_a/element.js https://www.youtube.com/iframe_api https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-chrome-webstore/_/js/k=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.en_US.WHVKndDnwUk.2018.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://www.youtube.com/s/player/ https://translate.googleapis.com/_/translate_http/_/js/;report-uri /_/ChromeWebStoreConsumerFeUi/cspreport/fine-allowlist 4
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.segment.com *.googletagmanager.com *.google-analytics.com js.appboycdn.com cdn.mouseflow.com; connect-src 'self' *.segment.com *.segment.io graphql.contentful.com *.ninetailed.co *.launchdarkly.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.vimeo.com *.vimeocdn.com *.braze.com *.one.app cdn.mouseflow.com *.app.link; img-src 'self' data: blob: *.ctfassets.net *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.vimeocdn.com; style-src 'self' 'unsafe-inline' use.fontawesome.com; font-src 'self' data: use.fontawesome.com; frame-src 'self' *.youtube.com *.youtube-nocookie.com *.vimeo.com *.ninetailed.io; media-src 'self' blob: data: *.ctfassets.net *.vimeo.com *.vimeocdn.com; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub4ebf0f2c2b22f7e232e33c048c5f3d2b&dd-evp-origin=content-security-policy&env=prod&ddsource=csp-report&ddtags=service:marketing-web 4
default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; 4
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com cdn.jsdelivr.net cdn.almapay.com *.bglobale.com *.global-e.com *.fontawesome.com fonts.googleapis.com https://cdnjs.cloudflare.com https://applepay.cdn-apple.com 'self' data: *.abtasty.com *.bocage.fr *.cdnfonts.com globale-prod.s3-eu-west-1.amazonaws.com *.googleusercontent.com *.iadvize.com *.isge49.com *.kameleoon.com ncspublicasset.s3.eu-west-3.amazonaws.com *.onestock-retail.io *.perplexity.ai s3-eu-west-1.amazonaws.com *.sensefuel.live data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.facebook.com *.google.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.getalma.eu *.almapay.com/ *.stripe.com/ *.checkout.com/ *.adyen.com/ *.bglobale.com *.global-e.com *.google.com/ *.payplug.com *.dalenys.com https://applepay.cdn-apple.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com *.onestock-retail.com/ *.abtasty.com *.bing.com *.bocage.eu *.cloudflare.com *.cookiebot.com *.criteo.com *.criteo.net *.doubleclick.net *.effiliation.com *.facebook.com *.goodays.co *.googlesyndication.com *.googletagmanager.com *.iadvize.com *.pinterest.com *.snapchat.com *.vimeo.com vimeo.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.bglobale.com *.global-e.com *.googleapis.com https://www.magezon.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com https://www.google.fr https://api.mapbox.com *.tile.openstreetmap.org https://maps.googleapis.com https://maps.gstatic.com https://secure-magenta.dalenys.com *.hsforms.net *.hsforms.com 'self' data: *.abtasty.com *.adform.net *.adnxs.com *.advalo.com *.affilae.com *.batch.com *.bing.com *.bing.net *.bocage.eu *.bocage.fr bucket-ip-website.s3.eu-central-1.amazonaws.com *.contentsquare.net *.cookiebot.com *.criteo.com *.criteo.net d1oco4z2z1fhwp.cloudfront.net d3e54v103j8qbb.cloudfront.net *.doubleclick.net *.ebuyclub.com *.ekoo.co *.eram.eu *.eram.fr *.facebook.com *.facebook.net *.ggpht.com *.googleadservices.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.by www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.cn www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.st www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.tt www.google.vu www.google.ws *.google.com google.com *.googlesyndication.com *.googletagmanager.com *.googleusercontent.com *.iadvize.com *.isge49.com joko-mobile-app-media.s3.eu-west-1.amazonaws.com *.kameleoon.com *.kameleoon.eu *.lgw.io *.lifmo.ai *.media-amazon.com mellowyellow.com *.mellowyellow.com *.mellowyellow.eu *.mmtro.com mmtro.com *.onestock-retail.io *.openx.net *.outbrain.com *.pinterest.com s3-eu-west-1.amazonaws.com *.sensefuel.live *.sharepoint.com *.smartadserver.com *.snapchat.com *.taboola.com *.teads.tv *.tiktok.com *.twiago.com us-central1-shopmyinfluens.cloudfunctions.net *.vimeo.com *.webyn.ai *.xiti.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page cdn.jsdelivr.net *.bglobale.com *.global-e.com *.googleapis.com *.gstatic.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https://cdnjs.cloudflare.com https://maps.googleapis.com https://secure-magenta.dalenys.com https://applepay.cdn-apple.com api.payplug.com cdn.payplug.com *.hsforms.net *.hsforms.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com *.addthis.com *.abtasty.com *.adform.net *.affilae.com *.aticdn.net *.batch.com *.bing.com *.bocage.fr capi-automation.s3.us-east-2.amazonaws.com *.cloudflare.com *.contentsquare.com *.contentsquare.net *.cookiebot.com *.criteo.com *.criteo.net critizr.com d3e54v103j8qbb.cloudfront.net *.doubleclick.net dqfw2hlp4tfww.cloudfront.net *.ekoo.co *.eram.fr *.facebook.net *.goodays.co *.googleadservices.com translate.google.com.hk *.googlesyndication.com *.googletagmanager.com *.hotjar.com *.iadvize.com *.jquery.com *.kameleoon.com *.kameleoon.eu *.kameleoon.io *.lgw.io *.lifmo.ai *.mmtro.com mmtro.com *.onestock-retail.io *.openai.com *.pinimg.com *.pinterest.com sc-static.net *.sensefuel.com *.sensefuel.live *.snapchat.com *.taboola.com *.tiktok.com *.vimeo.com *.webyn.ai *.worldline-solutions.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com cdn.jsdelivr.net *.bglobale.com *.global-e.com *.gstatic.com *.googleapis.com *.fontawesome.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://secure-magenta.dalenys.com *.abtasty.com *.bocage.fr *.critizr.com *.goodays.co *.googletagmanager.com *.iadvize.com *.kameleoon.com *.onestock-retail.io semji.github.io *.sensefuel.com *.sensefuel.live *.typekit.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.bing.com *.fbcdn.net *.googleapis.com *.gstatic.com *.lifmo.ai *.mellowyellow.com *.vimeocdn.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.getalma.eu *.almapay.com maps.googleapis.com https://nominatim.openstreetmap.org https://maps.googleapis.com t.elasticsuite.io *.hsforms.net *.hsforms.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com *.abtasty.com *.adnxs.com *.advalo.com *.affilae.com *.aticdn.net *.batch.com *.bing.com *.bing.net *.bocage.fr *.cloudflare.com *.contentsquare.com *.contentsquare.net *.cookiebot.com *.criteo.com *.criteo.net critizr.com *.deebr.co *.doubleclick.net *.ekoo.co *.eram.fr *.facebook.com *.facebook.net *.goodays.co *.googleadservices.com *.googleapis.com www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bj www.google.by www.google.ca www.google.cd www.google.ch www.google.cl www.google.cn www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.br www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.hk www.google.com.lb www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ng www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.uk www.google.co.za www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gg www.google.gr www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.kg www.google.lt www.google.lu www.google.lv www.google.md www.google.mg www.google.mu www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.si www.google.sk www.google.td www.google.tn www.google.vu *.googlesyndication.com *.gstatic.com *.hotjar.com *.hotjar.io *.iadvize.com *.instagram.com *.jquery.com *.kameleoon.com *.kameleoon.eu *.kameleoon.io *.merchant-center-analytics.goog *.mmtro.com *.onestock-retail.io *.openai.com *.openx.net *.pinimg.com *.pinterest.com *.sensefuel.biz *.sensefuel.live *.snapchat.com *.taboola.com *.teads.tv *.tiktok.com *.typekit.net *.webyn.ai *.xiti.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com *.iadvize.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; base-uri 'self' 'unsafe-inline'; report-uri https://ab48b69d-84be-485e-b94f-4ed50b3a5780.sansec.watch/; report-to report-endpoint; 4
default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; script-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: data: blob: wss:; media-src 'self' https: data: blob:; frame-src 'self' https: data: blob:; child-src 'self' https: data: blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self' https:; report-uri https://o1089883.ingest.us.sentry.io/api/4511026110398464/security/?sentry_key=aae109d819521ff1a232f8558352fe71 4
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com fonts.googleapis.com *.fontawesome.com data: https://fonts.gstatic.com https://fonts.googleapis.com https://*.sovendus.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.adyen.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.adyen.com js.mollie.com https://vars.hotjar.com https://www.pinterest.fr https://www.pinterest.com https://www.google.com https://*.sovendus.com https://www.sovendus-benefits.com https://www.sovendus-campaign.com https://www.sovendus-connect.com https://www.sovendus-network.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.adyen.com *.bird.eu a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org *.openstreetmap.org maps.googleapis.com maps.gstatic.com https://cdn.flbx.io magefan.com cm.magefan.com https://www.mollie.com https://www.google-analytics.com https://www.google.com https://www.google.fr *.ggpht.com *.googleapis.com https://maps.gstatic.com https://log.pinterest.com *.mondialtissus.fr *.mondialtissus.de *.mondialtissus.es *.mondialtissus.it *.mondialtissus.nl *.mondialtissus.se data: https://*.sovendus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https://www.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https://cdn.flbx.io *.getflowbox.com http://connect.getflowbox.com js.mollie.com https://sdk.privacy-center.org https://www.google-analytics.com https://www.analytics.google.com https://www.googleadservices.com https://www.googletagmanager.com https://wwww.paypalobjects.com https://s.ytimg.com https://maps.googleapis.com https://www.gstatic.com/recaptcha https://js.mollie.com https://france.mondialtissus.fr https://cdnjs.cloudflare.com https://assets.pinterest.com https://static.zdassets.com https://ekr.zdassets.com https://apis.google.com https://mondialtissus.zendesk.com https://admin.mondialtissus.fr 'unsafe-inline' https://*.sovendus.com https://cdn.jsdelivr.net https://static-sb.com https://social-sb.com 	https://cdn.jsdelivr.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.googleapis.com 'unsafe-inline' https://*.sovendus.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.adyen.com *.algolia.net https://*.algolia.net *.algolianet.com *.insights.algolia.io insights.algolia.io maps.googleapis.com https://*.amazonaws.com https://cdn.flbx.io https://connect.getflowbox.com http://connect.getflowbox.com https://www.google-analytics.com *.hotjar.com https://ekr.zdassets.com https://maps.googleapis.com https://mondialtissus.zendesk.com https://a.getflowbox.com https://*.sovendus.com https://www.sovendus-benefits.com https://www.sovendus-campaign.com https://www.sovendus-connect.com https://www.sovendus-network.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri https://d6tizftlrpuof.cloudfront.net 'self' 'unsafe-inline'; 4
connect-src 'self' https://clerk-telemetry.com https://*.clerk-telemetry.com https://api.stripe.com https://maps.googleapis.com https://img.clerk.com https://images.clerkstage.dev https://*.protect.clerk.com:* clerk.clerk.com https://*.ingest.us.sentry.io https://*.ingest.sentry.io https://px.ads.linkedin.com https://snap.licdn.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://www.google.com https://static.ads-twitter.com https://analytics.twitter.com https://t.co https://alb.reddit.com https://pixel-config.reddit.com https://us.posthog.com https://api.dub.co https://d.to https://va.vercel-scripts.com https://*.algolia.net https://*.algolianet.com https://insights.algolia.io https://proxy.scalar.com https://registry.scalar.com https://api.scalar.com https://dapi.clerk.com; default-src 'self'; font-src 'self' https://fonts.scalar.com https://fonts.gstatic.com data:; form-action 'self'; frame-src 'self' https://challenges.cloudflare.com https://*.js.stripe.com https://js.stripe.com https://hooks.stripe.com https://*.protect.clerk.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://vimeo.com https://previews.clerkstage.dev https://*.clerkshowcase.com https://profound-falcon-32.clerk.accounts.dev; img-src 'self' https://img.clerk.com https://px.ads.linkedin.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google.com https://www.google.ca https://www.google.co.uk https://www.google.co.in https://www.google.co.id https://www.google.co.ma https://www.google.com.ng https://www.google.com.bd https://www.google.com.ua https://www.google.com.my https://www.google.com.tw https://analytics.twitter.com https://t.co https://alb.reddit.com https://i.ytimg.com https://yt3.ggpht.com https://vercel.com data:; media-src 'self' https://*.vimeocdn.com; report-uri https://o449981.ingest.us.sentry.io/api/4509032994701312/security/?sentry_key=e1b27a6d9d80cfcd90930df90189f8a9; script-src 'self' 'unsafe-inline' https: http: https://*.js.stripe.com https://js.stripe.com https://maps.googleapis.com https://*.protect.clerk.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; worker-src 'self' blob:; report-to csp-endpoint 4
default-src 'self' https://fonts.gstatic.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://ctrack.trafficjunky.net https://geo-tracker.smadex.com https://newassets.hcaptcha.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' https://*.trustpilot.com https://*.googletagmanager.com https://mc.yandex.ru https://*.google-analytics.com https://*.youtube.com https://yandex.com https://yandex.ru https://*.google.com https://*.gstatic.com https://*.mightytips.com https://my.rtmark.net https://*.hybrid.ai https://*.g.doubleclick.net https://ctrack.trafficjunky.net https://geo-tracker.smadex.com https://challenges.cloudflare.com; img-src * data:; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://*.customer.io https://*.gist.build https://*.youtube.com https://mc.yandex.ru https://*.clariti.ws https://*.analytics.google.com https://*.google-analytics.com https://doubleclick.net https://*.googletagmanager.com https://mc.yandex.com https://mc.yandex.md https://yandexmetrica.com https://*.mightytips.com https://*.g.doubleclick.net https://ctrack.trafficjunky.net https://geo-tracker.smadex.com https://analytics.google.com https://challenges.cloudflare.com; frame-src 'self' https://*.trustpilot.com https://*.youtube.com https://*.instagram.com https://*.twitter.com https://*.yandex.com https://*.google.com https://my.rtmark.net https://*.hybrid.ai https://*.g.doubleclick.net https://ctrack.trafficjunky.net https://geo-tracker.smadex.com https://newassets.hcaptcha.com https://challenges.cloudflare.com; script-src-elem 'self' 'unsafe-inline' https://*.trustpilot.com https://*.customer.io https://*.gist.build https://*.instagram.com https://*.googletagmanager.com https://*.yandex.ru https://*.google-analytics.com https://*.twitter.com https://*.youtube.com https://mc.yandex.com https://*.google.com https://*.gstatic.com https://mc.yandex.ru https://*.mightytips.com https://my.rtmark.net https://*.hybrid.ai https://*.g.doubleclick.net https://ctrack.trafficjunky.net https://geo-tracker.smadex.com https://track.trackingtraffo.com https://www.hcaptcha.com https://challenges.cloudflare.com; frame-ancestors 'self'; report-uri /cspreport.php; 4
object-src 'none'; script-src 'self' cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cse.google.com https://js.hsforms.net https://platform-api.sharethis.com https://rebilly.github.io https://unpkg.com https://use.fontawesome.com https://ws.sharethis.com https://www.google.com platform.instagram.com platform.twitter.com; script-src-attr 'self'; style-src 'self' https://cdn.jsdelivr.net https://use.fontawesome.com; style-src-attr 'self'; frame-ancestors 'self' 4
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://tss.mencorner.com https://tss.bijourama.com https://tss.declikdeco.com https://tss.lookeor.com https://tss.comptoirdelhomme.com https://tss.lemoncurve.com https://tss.fitancy.fr https://tss.3suisses.fr https://www.google-analytics.com https://embed.tawk.to https://*.tawk.to https://js.be2bill.com https://js.sandbox.be2bill.com https://js1.dalenys.com https://payment.cdn.payline.com https://homologation-payment.cdn.payline.com https://bat.bing.com https://*.doubleclick.net https://www.googleadservices.com https://connect.facebook.net https://sdk.reductionsprivees.com https://openlayers.org https://widget.mondialrelay.com https://maps.googleapis.com https://www.gstatic.com https://bzrcdn.openai.com https://api.e-i.com; style-src 'self' 'unsafe-inline' https://payment.cdn.payline.com https://homologation-payment.cdn.payline.com https://js.be2bill.com https://js.sandbox.be2bill.com https://*.dalenys.com https://embed.tawk.to https://fonts.googleapis.com https://fonts.smct.io https://fonts.smct.co https://openlayers.org; img-src 'self' data: https: https://*.tile.openstreetmap.org; font-src 'self' data: https://*.tawk.to https://fonts.gstatic.com https://fonts.smct.io https://fonts.smct.co; frame-src 'self' https:; media-src 'self' https://*.tawk.to https://www.mencorner.com https://www.bijourama.com https://www.womancorner.com https://www.declikdeco.com https://www.lookeor.com https://www.comptoirdelhomme.com https://www.sofactory.fr https://www.mode-in-motion.com https://www.mode-in-motion.de https://lemoncurve.com https://www.fitancy.fr; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.doubleclick.net https://googleads.g.doubleclick.net https://www.googletagmanager.com https://api-adresse.data.gouv.fr https://*.tawk.to wss://*.tawk.to https://api.retail.monext.com https://api-sandbox.retail.monext.com https://*.payline.com https://tss.mencorner.com https://tss.bijourama.com https://tss.declikdeco.com https://tss.lookeor.com https://tss.comptoirdelhomme.com https://tss.lemoncurve.com https://tss.fitancy.fr https://tss.3suisses.fr https://www.google.com https://www.google.fr https://www.google.be https://www.google.ch https://www.google.lu https://www.google.it https://www.google.es https://www.google.de https://www.google.co.uk https://www.google.cg https://adservice.google.com https://adservice.google.fr https://stats.g.doubleclick.net https://www.googleadservices.com https://bat.bing.com https://bat.bing.net https://pagead2.googlesyndication.com https://www.facebook.com https://pro.ip-api.com https://widget.mondialrelay.com https://bzr.openai.com https://bzrcdn.openai.com https://api.e-i.com https://reductionsprivees.com https://maps.googleapis.com https://translate.googleapis.com; object-src 'none'; base-uri 'self'; upgrade-insecure-requests; report-uri /csp-report 4
default-src 'self'; report-uri https://security-headers.gtfsd.com/api/csp-report; report-to csp-endpoint 4
font-src *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.xtento.com *.awin1.com *.zenaps.com *.fls.doubleclick.net js.mollie.com *.weltpixel.com *.addthis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.googletagmanager.com js.stripe.com m.stripe.network www.facebook.com www.google.com tally.so 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.xtento.com cdn.xtento.com https://images.unsplash.com *.awin1.com *.zenaps.com *.wepowerconnections.com *.bird.eu https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.mollie.com *.disqus.com https://img.youtube.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com maps.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.gstatic.com *.facebook.com www.burdastyle.fr www.facebook.com bat.bing.com *.burdastyle.fr *.burdastyle.com *.abo-online.fr *.burdastyle.es *.burdastyle.pt *.burdastyle.uk *.burdastyle.nl *.burdastyle.dk *.burdastyle.se *.burdastyle.pl *.faitmain-magazine.fr maps.googleapis.com www.google.fr data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.xtento.com cdn.xtento.com https://maps.googleapis.com https://player.vimeo.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.mollie.com *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.avada.io https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com static.klaviyo.com connect.facebook.net *.googletagmanager.com bat.bing.com js.stripe.com m.stripe.network analytics.tiktok.com static.cloudflareinsights.com static-tracking.klaviyo.com www.google.com www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://static.klaviyo.com https://cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com unsafe-inline assets.braintreegateway.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com *.wepowerconnections.com https://the.sciencebehindecommerce.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com maps.googleapis.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.google-analytics.com *.facebook.net *.a.klaviyo.com static-forms.klaviyo.com bat.bing.com m.stripe.com www.google.com www.google.fr region1.analytics.google.co 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 4
default-src 'none'; script-src 'self' 'unsafe-inline' https://fpt.mandm.com https://cdn-ukwest.onetrust.com https://widget.trustpilot.com https://js.klarna.com https://api.crm.mandmdirect.com https://www.googletagmanager.com https://connect.facebook.net https://cdn.jsdelivr.net https://static.ads-twitter.com https://bat.bing.com; style-src 'self' 'unsafe-inline' https://widget.trustpilot.com; img-src * data: blob:; connect-src * ws: wss:; font-src 'self' data: blob:; frame-src 'self' https://widget.trustpilot.com https://cdn-ukwest.onetrust.com; frame-ancestors 'none'; form-action 'self'; worker-src 'self' blob:; 4
script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://meet.google.com/_/scs/mss-static/_/js/ https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/hangouts_echo_detector/release/ https://www.gstatic.com/recaptcha/ https://www.gstatic.com/video_effects/effects/ https://www.gstatic.com/meetings_p2p/ https://www-onepick-opensocial.googleusercontent.com/gadgets/js/rpc.js https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://meet.google.com/meetsw.js https://meet.google.com/devicesw.js https://meet.google.com/notrodsw.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://meet.google.com/_/scs/mss-static/_/js/k=boq-rtc.MeetingsUi.en_US.N2_Kapj-4w8.2020.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /_/MeetingsUi/cspreport/fine-allowlist 4
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com *.fontawesome.com data: 'self' data: https://widgets.trustedshops.com https://integrations.etrusted.com *.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.cleverreach.com 'self' connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com *.hotjar.com secure.pay1.de/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.cloudfront.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://api.mapbox.com cdn.pay1.de x.klarnacdn.net m.media-amazon.com static-eu.payments-amazon.com *.hsforms.net *.hsforms.com 'self' data: https://widgets.trustedshops.com https://integrations.etrusted.com widgets.trustedshops.com mcstagingmedia.carou.com mcprodmedia.carou.com *.google.com www.google.com.ua ct.pinterest.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.googleapis.com *.gstatic.com chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com widget.freshworks.com m2epro.freshdesk.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com *.hotjar.com unsafe-inline *.hsforms.net *.hsforms.com https://widgets.trustedshops.com https://integrations.etrusted.com widgets.trustedshops.com bam.nr-data.net js-agent.newrelic *.ratepay.com js-agent.newrelic.com s.pinimg.com analytics.tiktok.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com downloads.mailchimp.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com maxcdn.bootstrapcdn.com *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://integrations.etrusted.com *.bootstrapcdn.com maxcdn.bootstrapcdn.com/ *.ratepay.com/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com widget.freshworks.com m2epro.freshdesk.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com autocomplete2.postdirekt.de t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.trustedshops.com *.etrusted.com *.hotjar.com wss://*.hotjar.com/ bam.nr-data.net www.carou.com stats.g.doubleclick.net vc.hotjar.io ct.pinterest.com analytics.tiktok.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 4
font-src * data:;img-src * data:;frame-src	'self'    *.sevenrooms.com    *.doubleclick.net     *.smartrecruiters.com     *.adyen.com     *.pinterest.com    *.googleadservices.com    *.google.com	*.googletagmanager.com	*.cardinalcommerce.com	sevenrooms.com	*.americanexpress.com	*.securesuite.co.uk	secure7.arcot.com	*.rsa3dsauth.co.uk	mycardsecure.com	www.mycardsecure.com	dupe.com	*.opentable.com.au;script-src    'self'	*.curator.io 	*.google-analytics.com 	*.googletagmanager.com	*.google.com	*.licdn.com 	*.clarity.ms	*.gstatic.com	*.facebook.net	*.pinimg.com	*.smartrecruiters.com	*.hotjar.com	cdn-cookieyes.com    'unsafe-eval'    'unsafe-inline'	data:;script-src-elem	'self'	'unsafe-inline' 	*.facebook.net	*.licdn.com	*.google.com	*.googletagmanager.com	https://www.googletagmanager.com	*.googleadservices.com	*.google-analytics.com	*.gstatic.com	*.smartrecruiters.com	*.curator.io	*.clarity.ms	*.pinimg.com	*.hotjar.com	cdn-cookieyes.com;style-src-elem    'self'	*.honey.io	*.google.com    *.curator.io	*.smartrecruiters.com	*.facebook.net	*.clarity.ms    'unsafe-inline';connect-src	'self'    *.facebook.com	*.google.com	*.google-analytics.com	*.googleapis.com	melprdwebsite.azurewebsites.net	crownkentico-prd-as-csearch.search.windows.net	*.pinterest.com	*.doubleclick.net    *.curator.io	*.clarity.ms	*.linkedin.com	*.datatoolscloud.net.au	*.hotjar.io	*.googleadservices.com	*.googletagmanager.com 	*.adyen.com	*.cookieyes.com	cdn-cookieyes.com	ws://localhost:12387	wss://ws.hotjar.com	https://www.google.com/	data:;report-uri /api/logs/csp-report;report-to csp-endpoint; 4
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.cloudflare.com *.googleapis.com *.zopim.com *.tawk.to *.jsdelivr.net media.flixfacts.com 'unsafe-inline' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com *.facebook.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; frame-ancestors *.hana.ondemand.com 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com *.nosto.com *.issuu.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.criteo.net *.criteo.com *.addthis.com *.facebook.com webchat.jdg.co.za *.jdg.co.za map.pargo.co.za 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com 'unsafe-inline' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://widgets.payflex.co.za oppwa.com *.oppwa.com *.peachpayments.com *.eu-west-1.amazonaws.com *.cloudflare.com *.google.com *.google.lv *.google.co.za *.google.com.na *.google.na *.zopim.com *.nosto.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.zopim.io *.sfdr.co sfdr.co *.tawk.to tawk.link *.tawk.link *.addthis.com *.jsdelivr.net *.facebook.com *.azurewebsites.net maps.googleapis.com app.mobicredwidget.co.za amcglobal.sc.omtrdc.net media.flixcar.com rt.flix360.com assets.secure.checkout.visa.com data: 'self' 'unsafe-inline'; style-src fonts.googleapis.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://widgets.payflex.co.za oppwa.com *.oppwa.com *.peachpayments.com *.cloudflare.com *.googleapis.com *.jsdelivr.net www.gstatic.com media.flixcar.com 'unsafe-inline' data: https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; connect-src http://www.rookieusa.co.za/ www.worldtimeapi.org geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://*.ingest.sentry.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com oppwa.com *.oppwa.com *.peachpayments.com *.testfreaks.com *.nosto.com *.hotjar.io *.hotjar.com *.doubleclick.net *.zendesk.com *.tawk.to wss://*.tawk.to *.tawk.link *.addthis.com *.addthisedge.com *.nr-data.net *.what3words.com *.googleapis.com vsb111.tawk.to ekr.zdassets.com api.magento.com commerce.adobedc.net app.mobicredwidget.co.za wss://widget-mediator.zopim.com bam.nr-data.net *.googletagmanager.com security-hub.vaimo.network 'unsafe-eval' data: 'self' 'unsafe-inline'; script-src www.worldtimeapi.org geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://browser.sentry-cdn.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://widgets.payflex.co.za https://partpayassets.blob.core.windows.net *.oppwa.com oppwa.com *.peachpayments.com worldtimeapi.org *.zopim.com *.videoly.co sfdr.co *.cnetcontent.com *.cloudfront.net *.newrelic.com *.google.lv *.google.co.za *.google.com.na *.google.na *.cloudflare.com *.cloudflareinsights.com *.nosto.com *.hotjar.com *.googletagmanager.com *.criteo.net *.criteo.com *.sfdr.co *.tawk.to *.tawk.link *.jsdelivr.net *.addthis.com *.addthisedge.com *.moatads.com *.mouseflow.com *.nr-data.net *.facebook.com *.what3words.com maps.googleapis.com commerce.adobedtm.com magento-recs-sdk.adobe.net static.zdassets.com app.mobicredwidget.co.za www.gstatic.com bam.nr-data.net js.testfreaks.com media.flixfacts.com media.flixcar.com security-hub.vaimo.network https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; 4
script-src-elem *.bestheating.com *.bestheating.ie *.bigbathroomshop.co.uk *.bigbathroomshop.ie *.hudsonreed.com *.magedev.co.uk *.magedev2.co.uk *.magedev3.co.uk *.magedev4.co.uk *.magedev5.co.uk *.magedev6.co.uk *.magedev7.co.uk *.magestage.co.uk *.mageweb.co.uk *.localdev.com *.ldgdev.co.uk *.adalyser.com *.payments-amazon.com capi-automation.s3.us-east-2.amazonaws.com *.cdn-apple.com *.appzi.io capi-automation.s3.us-east-2.amazonaws.com *.billiger.de billiger.de *.bing.com *.bing.net js.braintreegateway.com *.braintreegateway.com *.cardinalcommerce.com *.cloudfront.net *.digitalbridgehq.com *.doubleclick.net *.equalweb.com www.facebook.com connect.facebook.net *.avocet.io avocet.io *.gstatic.com *.google.com *.google.co.uk www.googleadservices.com www.google-analytics.com *.googleapis.com *.googlecommerce.com *.googlesyndication.com www.googletagmanager.com *.jsdelivr.net *.fabric-analytics.com *.growthbook.io *.gb-ingest.com s.kk-resources.com *.klarna.com *.klarnacdn.net *.klaviyo.com *.klevu.com secure.cimg.leguide.com intentclientscriptslon.s3.eu-west-2.amazonaws.com *.clarity.ms js-agent.newrelic.com bam.nr-data.net *.onetrust.com www.paypalobjects.com *.paypal.com services.postcodeanywhere.co.uk trues11114.pcapredict.com s.pinimg.com ct.pinterest.com *.salesforce.com *.force.com *.salesforceliveagent.com ldg.my.site.com ldg.my.salesforce-scrt.com host sgtm-production-bestheating-staging-bfs7ffnbjq-nw.a.run.app *.solutenetwork.com *.trafficguard.ai *.trustpilot.com unpkg.com 'unsafe-inline' app.vwo.com *.visualwebsiteoptimizer.com *.webgains.io *.webgains.com; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.klarnacdn.net *.klevu.com *.ksearchnet.com *.bestheating.com *.bestheating.ie *.bigbathroomshop.co.uk *.bigbathroomshop.ie *.hudsonreed.com *.magedev.co.uk *.magedev2.co.uk *.magedev3.co.uk *.magedev4.co.uk *.magedev5.co.uk *.magedev6.co.uk *.magedev7.co.uk *.magestage.co.uk *.mageweb.co.uk *.localdev.com *.ldgdev.co.uk w.appzi.io *.equalweb.com *.googleusercontent.com *.sirv.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://hpp.worldpay.com/app/hpp-iframe/integration/wpg/corporate https://secure-test.worldpay.com/shopper/3ds/ddc.html https://secure.worldpay.com/shopper/3ds/ddc.html https://payments-test.worldpay.com/app/hpp-iframe/integration/wpg/corporate https://payments-live.hpp.apps.eu-west-1-7z55k.dev.msp.worldpay.io/app/hpp-iframe/integration/wpg/corporate https://payments.worldpay.com/app/hpp-iframe/integration/wpg/corporate 'self' 'unsafe-inline'; frame-ancestors https://pay.google.com/ 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://payments-test.worldpay.com/app/hpp-iframe/integration/wpg/corporate https://payments.worldpay.com/app/hpp-iframe/integration/wpg/corporate https://payments-live.hpp.apps.eu-west-1-7z55k.dev.msp.worldpay.io/app/hpp-iframe/integration/wpg/corporate https://pay.google.com https://secure-test.worldpay.com https://hpp.worldpay.com/ *.bestheating.com *.bestheating.ie *.bigbathroomshop.co.uk *.bigbathroomshop.ie *.hudsonreed.com *.magedev.co.uk *.magedev2.co.uk *.magedev3.co.uk *.magedev4.co.uk *.magedev5.co.uk *.magedev6.co.uk *.magedev7.co.uk *.magestage.co.uk *.mageweb.co.uk *.localdev.com *.ldgdev.co.uk *.equalweb.com *.google.com *.google.co.uk *.googlecommerce.com *.salesforce.com *.force.com *.salesforceliveagent.com ldg.my.site.com ldg.my.salesforce-scrt.com *.visualwebsiteoptimizer.com app.vwo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com osm.klarnaservices.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudflare.com *.bestheating.com *.bestheating.ie *.bigbathroomshop.co.uk *.bigbathroomshop.ie *.hudsonreed.com *.magedev.co.uk *.magedev2.co.uk *.magedev3.co.uk *.magedev4.co.uk *.magedev5.co.uk *.magedev6.co.uk *.magedev7.co.uk *.magestage.co.uk *.mageweb.co.uk *.localdev.com *.ldgdev.co.uk *.adalyser.com *.s3.eu-west-1.amazonaws.com *.bing.com *.bing.net *.cloudfront.net *.doubleclick.net *.equalweb.com www.facebook.com connect.facebook.net *.google.com *.google.co.uk www.google.es www.google.it www.google.fr www.google.de www.google.nl www.google.be www.google.at www.google.ie *.googlesyndication.com *.googleusercontent.com mwiassets.com https://intentclientscriptslon.s3.eu-west-2.amazonaws.com *.clarity.ms *.onetrust.com www.paypalobjects.com *.paypal.com services.postcodeanywhere.co.uk s.pinimg.com ct.pinterest.com *.salesforce.com *.force.com *.salesforceliveagent.com ldg.my.site.com ldg.my.salesforce-scrt.com *.sirv.com *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io *.jsdelivr.net *.fabric-analytics.com *.growthbook.io *.gb-ingest.com *.trafficguard.ai *.appzi.io data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.klarna.com *.klarnacdn.net *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.klevu.com *.ksearchnet.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com https://www.google.com/recaptcha/api.js *.gstatic.com *.cloudflare.com https://pay.google.com/gp/p/js/pay.js https://applepay.cdn-apple.com/jsapi/v1/apple-pay-sdk.js https://payments.worldpay.com/resources/cse/js/worldpay-cse-1.0.2.min.js https://payments.worldpay.com/resources/hpp/integrations/embedded/js/hpp-embedded-integration-library.js https://d35p4vvdul393k.cloudfront.net/sdk_library/us/stg/ops/pc_gsmpi_web_sdk.js https://d16i99j5zwwv51.cloudfront.net/sdk_library/us/prd/ops/pc_gsmpi_web_sdk.js player.vimeo.com *.bestheating.com *.bestheating.ie *.bigbathroomshop.co.uk *.bigbathroomshop.ie *.hudsonreed.com *.magedev.co.uk *.magedev2.co.uk *.magedev3.co.uk *.magedev4.co.uk *.magedev5.co.uk *.magedev6.co.uk *.magedev7.co.uk *.magestage.co.uk *.mageweb.co.uk *.localdev.com *.ldgdev.co.uk *.adalyser.com *.payments-amazon.com capi-automation.s3.us-east-2.amazonaws.com *.appzi.io *.billiger.de billiger.de *.bing.com *.bing.net *.cardinalcommerce.com *.cloudfront.net *.digitalbridgehq.com *.doubleclick.net *.equalweb.com www.facebook.com connect.facebook.net *.avocet.io avocet.io *.google.com *.google.co.uk *.googleapis.com *.googlecommerce.com *.googlesyndication.com *.jsdelivr.net *.fabric-analytics.com *.growthbook.io *.gb-ingest.com s.kk-resources.com *.klaviyo.com *.klevu.com secure.cimg.leguide.com intentclientscriptslon.s3.eu-west-2.amazonaws.com *.clarity.ms js-agent.newrelic.com bam.nr-data.net *.onetrust.com www.paypalobjects.com *.paypal.com services.postcodeanywhere.co.uk trues11114.pcapredict.com s.pinimg.com ct.pinterest.com *.salesforce.com *.force.com *.salesforceliveagent.com ldg.my.site.com ldg.my.salesforce-scrt.com sgtm-production-bestheating-staging-bfs7ffnbjq-nw.a.run.app *.solutenetwork.com *.trafficguard.ai *.trustpilot.com unpkg.com app.vwo.com *.visualwebsiteoptimizer.com *.webgains.io *.webgains.com *.sirv.com https://js.klevu.com https://ldg.my.salesforce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.klarnacdn.net https://static.klaviyo.com *.klevu.com *.ksearchnet.com assets.braintreegateway.com *.cloudflare.com https://fonts.googleapis.com/css *.bestheating.com *.bestheating.ie *.bigbathroomshop.co.uk *.bigbathroomshop.ie *.hudsonreed.com *.magedev.co.uk *.magedev2.co.uk *.magedev3.co.uk *.magedev4.co.uk *.magedev5.co.uk *.magedev6.co.uk *.magedev7.co.uk *.magestage.co.uk *.mageweb.co.uk *.localdev.com *.ldgdev.co.uk *.equalweb.com www.googletagmanager.com *.gstatic.com *.klaviyo.com services.postcodeanywhere.co.uk *.salesforce.com *.force.com *.salesforceliveagent.com ldg.my.site.com ldg.my.salesforce-scrt.com *.typekit.net *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io *.jsdelivr.net *.fabric-analytics.com *.growthbook.io *.gb-ingest.com *.trafficguard.ai *.appzi.io *.sirv.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.bestheating.com *.bestheating.ie *.bigbathroomshop.co.uk *.bigbathroomshop.ie *.hudsonreed.com *.magedev.co.uk *.magedev2.co.uk *.magedev3.co.uk *.magedev4.co.uk *.magedev5.co.uk *.magedev6.co.uk *.magedev7.co.uk *.magestage.co.uk *.mageweb.co.uk *.localdev.com *.ldgdev.co.uk *.bing.com *.bing.net *.equalweb.com *.gstatic.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://www.google.com/pay https://pay.google.com/gp/p/web_manifest.json https://pay.google.com/gp/p/payment_method_manifest.json https://pay.google.com/ https://google.com/pay *.worldpay.com https://hpp.worldpay.com/app/hpp/135-0/telemetry https://hpp.worldpay.com/app/hpp/135-0/payment/paypalsmartbutton/continue https://payments.worldpay.com/app/hpp/135-0/telemetry/iframe *.bestheating.com *.bestheating.ie *.bigbathroomshop.co.uk *.bigbathroomshop.ie *.hudsonreed.com *.magedev.co.uk *.magedev2.co.uk *.magedev3.co.uk *.magedev4.co.uk *.magedev5.co.uk *.magedev6.co.uk *.magedev7.co.uk *.magestage.co.uk *.mageweb.co.uk *.localdev.com *.ldgdev.co.uk payments-eu.amazon.com *.appzi.io *.s3.eu-west-1.amazonaws.com *.execute-api.us-east-1.amazonaws.com *.bing.com *.bing.net payments.braintree-api.com cas.client.cardinaltrusted.com *.datadome.co *.digitalbridgehq.com eu.prd.impact.fixtuur.com *.fixtuur.io *.doubleclick.net *.equalweb.com *.facebook.com *.google.com *.google.co.uk www.google.es www.google.it www.google.fr www.google.de www.google.nl www.google.be www.google.at www.google.ie *.googleapis.com *.googlesyndication.com *.jsdelivr.net *.fabric-analytics.com *.growthbook.io *.gb-ingest.com *.inference.madewithintent.ai *.clarity.ms js-agent.newrelic.com bam.nr-data.net *.onetrust.com www.paypalobjects.com *.paypal.com s.pinimg.com ct.pinterest.com www.pinterest.com services.postcodeanywhere.co.uk region1.google-analytics.com *.salesforce.com *.force.com *.salesforceliveagent.com ldg.my.site.com ldg.my.salesforce-scrt.com *.samsung.com sgtm-production-bestheating-staging-bfs7ffnbjq-nw.a.run.app *.trafficguard.ai *.typekit.net *.webgains.io *.visualwebsiteoptimizer.com app.vwo.com *.sirv.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.onetrust.com 'self' 'unsafe-inline'; report-uri https://f4ea971e-20d9-420f-b92f-973abc905556.sansec.watch/; report-to report-endpoint; 4
font-src *.fontawesome.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io https://images.unsplash.com *.facebook.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com *.googletagmanager.com *.facebook.net *.avada.io js.mollie.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 4
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cdn.jsdelivr.net cdn.almapay.com *.klarnacdn.net *.fontawesome.com https://fonts.gstatic.com *.almapay.com *.cloudflare.com *.trustpilot.com *.avis-verifies.com *.bing.com *.sc.omtrdc.net 'self' data: https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.nootidev.com admin.nootica.fr *.nootica.fr *.nootica.com *.nootica.es *.nootica.de *.nootica.it *.bandeja-shop.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.getalma.eu *.almapay.com/ *.stripe.com/ *.checkout.com/ *.adyen.com/ www.google.com *.hipay-tpp.com *.hipay.com *.googleapis.com *.klarna.com *.demdex.net *.hub-side.com *.nootidev.com admin.nootica.fr *.nootica.fr *.nootica.com *.nootica.es *.nootica.de *.nootica.it *.bandeja-shop.com *.sc.omtrdc.net 'self' data: *.addthis.com *.trustpilot.com sibautomation.com *.doubleclick.net *.weltpixel.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.hipay.com *.googleapis.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.google.com maps.googleapis.com *.google.fr *.doubleclick.net *.googletagmanager.com *.cloudflare.com https://cdn.klarna.com https://s.ytimg.com *.usercentrics.eu *.avis-verifies.com *.bing.com *.omtrdc.net *.demdex.net *.everesttech.net flagcdn.com *.nootidev.com *.nootica.fr *.nootica.com *.nootica.es *.nootica.de *.nootica.it *.bandeja-shop.com *.facebook.com *.reddit.com *.google-analytics.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com *.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com cdn.jsdelivr.net www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.hipay-tpp.com mpsnare.iesnare.com *.paypal.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com http://127.0.0.1:35729 *.cloudflare.com *.google-analytics.com *.doubleclick.net *.google.fr *.googleapis.com *.googletagmanager.com *.googleoptimize.com *.trustpilot.com *.avis-verifies.com *.usercentrics.eu *.bing.com *.iesnare.com *.hipay.com 'self' data: *.addthis.com *.addthisedge.com *.moatads.com *.freshworks.com sibautomation.com *.skeepers.io umami.nootica.fr https://cdnjs.cloudflare.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com cdn.jsdelivr.net *.hipay.com *.googleapis.com *.klarnacdn.net https://use.fontawesome.com https://fonts.googleapis.com *.cloudflare.com *.typekit.net *.trustpilot.com *.avis-verifies.com *.usercentrics.eu *.bing.com *.sc.omtrdc.net 'self' data: https://cdnjs.cloudflare.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src data: mpsnare.iesnare.com *.googleapis.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.getalma.eu *.almapay.com *.hipay-tpp.com wss://mpsnare.iesnare.com *.googleapis.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://olegnax.com *.google-analytics.com *.googlesyndication.com *.analytics.google.com *.doubleclick.net *.cloudflare.com *.bing.com *.demdex.net *.sc.omtrdc.net *.hipay.com 'self' data: ws: *.addthis.com *.brevo.com *.skeepers.io *.nootidev.com search.nootica.com search.bandeja-shop.com umami.nootica.fr *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 4
default-src 'self' data: 'unsafe-eval' 'unsafe-inline' *.shopmetrics.com *.gigspot.com *.research-cloud.com https://*.jsdelivr.net https://unpkg.com https://*.unpkg.com https://*.googleapis.com https://*.google-analytics.com https://*.gstatic.com https://*.search.windows.net https://cdnjs.cloudflare.com https://code.jquery.com *.facebook.net *.facebook.com *.doubleclick.net *.googletagmanager.com *.bootstrapcdn.com *.typekit.net https://rmvelocityfrontend.blob.core.windows.net https://rec.i-say.com https://vcdn.blob.core.windows.net/* https://cdn.vcdn.vc/*; script-src 'self' data: 'unsafe-eval' 'unsafe-inline' *.shopmetrics.com *.gigspot.com *.research-cloud.com https://*.jsdelivr.net https://unpkg.com https://*.unpkg.com https://*.googleapis.com https://*.google-analytics.com https://*.gstatic.com https://*.search.windows.net https://cdnjs.cloudflare.com https://code.jquery.com *.facebook.net *.facebook.com *.doubleclick.net *.googletagmanager.com *.bootstrapcdn.com *.typekit.net https://rmvelocityfrontend.blob.core.windows.net; frame-src 'self' blob: *.shopmetrics.com *.gigspot.com *.research-cloud.com *.velocity.online https://www.googletagmanager.com *.youtube.com *.youtu.be; base-uri 'self'; form-action 'self' *.shopmetrics.com *.gigspot.com *.velocity.online; img-src * data: about: blob: filesystem: ma-file:; object-src 'none'; font-src 'self' data: *.shopmetrics.com *.bootstrapcdn.com *.typekit.net *.gstatic.com *.jsdelivr.net *.pstatic.net *.github.com; 4
default-src https://d3tw2v68rmxuj7.cloudfront.net; connect-src 'self' https: wss://*.zopim.com; font-src data: https:; frame-src https://js.stripe.com https://m.stripe.network https://www.google.com https://www.youtube.com https://googleads.g.doubleclick.net https://bid.g.doubleclick.net https://platform.twitter.com https://x.adroll.com https://15347100.fls.doubleclick.net https://td.doubleclick.net https://www.googletagmanager.com; img-src https:; media-src https://static.zdassets.com/web_widget/classic/latest/fda6cd35495c75f83508d9d2e77ee33d.mp3 https://d3tw2v68rmxuj7.cloudfront.net; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://d3tw2v68rmxuj7.cloudfront.net https://fonts.googleapis.com https://cdnjs.cloudflare.com/ajax/libs/ionicons/4.5.6/css/ionicons.min.css https://use.typekit.net https://p.typekit.net; report-uri /csp 4
frame-ancestors 'self'; 4
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.klarnacdn.net *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.fontawesome.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.certcapture.com *.cloudflare.com *.klarna.com *.youtube.com/ accounts.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com landofcoder.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.certcapture.com *.cloudflare.com *.google.com *.google.co.in assets.braintreegateway.com *.googleusercontent.com *.lightemporium.com static.zipmoney.com.au static.zip.co *.awsstatic.com *.cdn.com *.s3.amazonaws.com *.maps.googleapis.com *.twitter.com *.usercentrics.eu ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.googleadservices.com *.google-analytics.com *.twimg.com *.ytimg.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com *.facebook.com https://www.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com c.paypal.com checkout.paypal.com t.zip.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.certcapture.com *.cloudflare.com js.braintreegateway.com  *.paypalobjects.com *.paypal.com https://portal.sandbox.afterpay.com https://portal.afterpay.com https://static.afterpay.com bpi.zip.co *.google-analytics.com chimpstatic.com downloads.mailchimp.com *.klarna.com *.klarnacdn.net *.klarnaservices.com *.stripe.com *.trustedshops.com *.fontawesome.com *.maps.googleapis.com *.maps.gstatic.com *.trackedlink.net 'unsafe-eval' *.list-manage.com *.twitter.com *.twimg.com *.gstatic.com *.usercentrics.eu maps.googleapis.com accounts.google.com *.googleapis.com *.sharethis.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com landofcoder.com static.zip.co zip.co https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.certcapture.com *.cloudflare.com *.fontawesome.com downloads.mailchimp.com *.klarnacdn.net *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com *.google-analytics.com accounts.google.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app cdn.jsdelivr.net api.lab.amplitude.com *.certcapture.com *.cloudflare.com api.braintreegateway.com *.dpm.demdex.net *.amcglobal.sc.omtrdc.net *.geostag.cardinalcommerce.com *.geo.cardinalcommerce.com https://1eafstag.cardinalcommerce.com https://1eaf.cardinalcommerce.com https://centinelapistag.cardinalcommerce.com https://centinelapi.cardinalcommerce.com *.google-analytics.com *.googleadservices.com https://analytics.google.com https://www.googletagmanager.com https://*.newrelic.com https://*.nr-data.net https://vimeo.com https://www.sandbox.paypal.com https://www.paypalobjects.com https://www.paypal.com https://pilot-payflowlink.paypal.com https://*.adobe.io https://performance.typekit.net https://*.sentry.io https://*.afterpay.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com https://*.cash.app https://*.klarnaevt.com https://*.klarnacdn.net https://*.klarna.com https://*.klarnaservices.com *.twitter.com https://*.twimg.com https://*.trackedlink.net https://*.ampproject.org https://*.google.co.in *.maps.gstatic.com *.maps.googleapis.com https://api.sandbox.braintreegateway.com https://client-analytics.braintreegateway.com https://client-analytics.sandbox.braintreegateway.com https://*.braintree-api.com https://*.cardinalcommerce.com https://*.stripe.com https://landofcoder.com https://dpe0djwch8671.cloudfront.net *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com *.twimg.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org *.google.co.in maps.googleapis.com accounts.google.com *.sharethis.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.link.com *.amazon.com landofcoder.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 4
font-src *.fontawesome.com *.gstatic.com/ *.bootstrapcdn.com/ https://analytics.google.com/ https://www.googletagmanager.com/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.googleapis.com/ *.gstatic.com/ https://analytics.google.com/ https://www.googletagmanager.com/ 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://maps.gstatic.com/ *.googleapis.com/ *.w3.org/ https://analytics.google.com/ *.cdn.place1seo.com/ https://cdn.beedash.com/ https://www.google.com/ https://www.googletagmanager.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.avada.io *.googleapis.com/ https://analytics.google.com/ https://googleads.g.doubleclick.net/ https://www.googletagmanager.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com *.googleapis.com/ https://analytics.google.com/ *.bootstrapcdn.com/ https://www.googletagmanager.com/ unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://get.geojs.io *.avada.io https://analytics.google.com/ https://googleads.g.doubleclick.net/ https://stats.g.doubleclick.net/ https://www.googletagmanager.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 4
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://applepay.cdn-apple.com *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com v2.zopim.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googlesyndication.com *.twitter.com https://www.facebook.com www.googletagmanager.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com *.google.com *.doubleclick.net *.googlesyndication.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://applepay.cdn-apple.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://up.cybersource.com https://assets.secure.checkout.visa.com https://src.mastercard.com *.twitter.com axi.maxiaxi.com *.pinterest.com *.addthis.com https://consentcdn.cookiebot.com *.fast.amc.demdex.net https://tr.snapchat.com https://www.facebook.com *.cookiebot.eu *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google.com *.google.bg *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com validate.fishpig.co.uk magefan.com cm.magefan.com https://firebasestorage.googleapis.com https://static.buckaroo.nl https://www.buckaroo.nl https://www.paypalobjects.com https://pay.google.com https://developers.google.com https://applepay.cdn-apple.com https://up.cybersource.com https://assets.secure.checkout.visa.com https://src.mastercard.com https://redchamps.com ts.tradetracker.net www.magmodules.eu *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cloudfront.net *.maxiaxi.com bat.bing.com www.google.nl www.google.de www.google.fr www.google.es *.squeezely.tech squeezely.tech tm-tradetracker.net *.pinterest.com *.googleapis.com *.googleoptimize.com *.linkedin.com *.cookiebot.com *.etrusted.com *.adobedtm.com *.zendesk.com *.zdassets.com *.trustedshops.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.avada.io https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com https://www.sandbox.paypal.com https://applepay.cdn-apple.com https://pay.google.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://up.cybersource.com https://flex.cybersource.com https://assets.secure.checkout.visa.com https://src.mastercard.com tm.tradetracker.net *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.googleapis.com app.aiden.cx js-agent.newrelic.com bam.nr-data.net rum-static.pingdom.net *.trustpilot.com *.zopim.com static.sooqr.com *.zdassets.com bat.bing.com static.buckaroo.nl *.squeezely.tech squeezely.tech tm-tradetracker.net *.maxiaxi.com *.clarity.ms *.googleoptimize.com *.zendesk.com bam.eu01.nr-data.net *.pinimg.com *.addthis.com *.addthisedge.com *.moatads.com *.hotjar.com *.hotjar.io *.licdn.com *.beslist.nl *.tiktok.com *.stripe.com *.cookiebot.com *.etrusted.com *.smooch.io *.pinterest.com *.convertexperiments.com d5yoctgpv4cpx.cloudfront.net *.cookiebot.eu tr.kickbite.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu static.sooqr.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zendesk.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google-analytics.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com https://get.geojs.io *.avada.io https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://applepay.buckaroo.io https://smp-paymentservices.apple.com *.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://auth.buckaroo.io https://clicktopay-externalapi.prod-pci.buckaroo.io https://up.cybersource.com https://flex.cybersource.com https://assets.secure.checkout.visa.com https://src.mastercard.com *.cloudflare.com *.twitter.com *.twimg.com bam.nr-data.net *.zdassets.com widget-mediator.zopim.com stats.g.doubleclick.net squeezely.tech cognito-identity.eu-central-1.amazonaws.com rum-collector-2.pingdom.net wss://widget-mediator.zopim.com *.maxiaxi.com *.clarity.ms *.googleapis.com *.googleoptimize.com *.googletagmanager.com *.pinterest.com measurement-api.criteo.com *.zendesk.com bam.eu01.nr-data.net *.addthis.com *.hotjar.com *.beslist.nl *.tiktok.com *.tiktokw.us app.aiden.cx *.hotjar.io wss://ws.hotjar.com analytics.pangle-ads.com googleads.g.doubleclick.net *.ads.linkedin.com *.cookiebot.com *.etrusted.com *.smooch.io *.convertexperiments.com p2iqhncxyh.execute-api.eu-central-1.amazonaws.com *.bing.com tr.kickbite.io wss://*.zendesk.com *.trustedshops.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.hotjar.com *.hotjar.io wss://*.hotjar.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 4
script-src-elem https://app-script.monsido.com https://heatmaps.monsido.com; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com data: https://maxcdn.bootstrapcdn.com https://use.typekit.net *.livechatinc.com *.brickworks.com.au *.googleapis.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.rendivo.com *.anzus.solutions 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com https://*.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://*.facebook.com paypal.com https://*.paypal.com https://secure.livechatinc.com/ https://*.livechatinc.com/ https://*.marketo.com *.brickworks.com.au https://*.fls.doubleclick.net https://ct.pinterest.com https://insight.adsrvr.org *.rendivo.com *.anzus.solutions c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src https://*.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com https://img.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://*.paypal.com https://*.zipmoney.com.au https://*.facebook.com *.data-dynamic.net https://amcglobal.sc.omtrdc.net https://via.placeholder.com/ https://buildersacademy.com.au https://ik.imagekit.io/ https://buildersacademy.edu.au https://australbricks.rendivo.com *.unsplash.com *.marketo.com *.marketo.net *.brickworks.com.au https://ib.adnxs.com https://t.co/ https://analytics.twitter.com/ https://*.google.com.au https://ct.pinterest.com https://sp.analytics.yahoo.com/ https://pixel.quantserve.com/ https://cdn.livechat-files.com/ https://tracking.monsido.com https://www.urbanstone.com.au *.googleapis.com https://www.magezon.com *.widen.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.ecomm-nav.com https://*.zipmoney.com.au https://*.facebook.com *.zdassets.com *.barilliance.com *.barilliance.net chimpstatic.com snapui.searchspring.io https://*.livechatinc.com *.marketo.com *.marketo.net https://*.mktoresp.com *.brickworks.com.au https://bbp.style https://*.hotjar.com https://*.twitter.com https://*.ads-twitter.com *.gstatic.com https://*.pinimg.com https://connect.facebook.net https://vxml4.plavxml.com https://js.adsrvr.org https://acdn.adnxs.com https://secure.quantserve.com https://s.yimg.com https://rules.quantcount.com https://ucarecdn.com https://app-script.monsido.com https://heatmaps.monsido.com *.googleapis.com https://rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com data: https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://use.typekit.net https://p.typekit.net *.marketo.com *.marketo.net *.brickworks.com.au https://bbp.style maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com data: *.widen.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://*.cloudfront.net https://*.zip.co https://maps.googleapis.com https://stats.g.doubleclick.net https://s.yimg.com https://ct.pinterest.com https://*.google.com.au https://*.mktoresp.com https://heatmaps.monsido.com *.googleapis.com *.widen.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 4
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://fonts.gstatic.com https://static-v.tawk.to https://embed.tawk.to *.fontawesome.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.facebook.com *.googlesyndication.com *.tiktok.com https://va.tawk.to/log https://facebook.com test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.com/ *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://va.tawk.to https://js.mollie.com https://plugins.flockler.com https://web.swissnewsletter.ch/ test.saferpay.com www.saferpay.com saferpay.com https://web.cmp.usercentrics.eu js.mollie.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com https://images.unsplash.com https://www.facebook.com https://bat.bing.com https://consentmanager.mgr.consensu.org cdn.consentmanager.mgr.consensu.org https://widgets.trustedshops.com https://cdn.jsdelivr.net https://*.cloudfront.net https://static-v.tawk.to https://x.klarnacdn.net https://www.google.com https://www.google.pl https://www.google.de https://www.google.at https://www.google.dk https://www.google.hu https://www.google.cz https://www.google.ee https://www.google.fi https://www.google.hr https://www.google.it https://www.google.lt https://www.google.pt https://www.google.sk https://www.google.si https://www.google.es https://www.google.se https://embed.tawk.to https://fonts.gstatic.com https://static-eu.payments-amazon.com https://www.magezon.com test.saferpay.com www.saferpay.com saferpay.com https://app.usercentrics.eu https://*.cmp.usercentrics.eu https://*.usercentrics.eu https://www.mollie.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.com/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com https://maps.googleapis.com https://player.vimeo.com https://embed.tawk.to https://static-v.tawk.to http://widgets.trustedshops.com https://cdn.jsdelivr.net https://bat.bing.com https://connect.facebook.net https://googleads.g.doubleclick.net https://cdn.mouseflow.com https://js.mollie.com https://x.klarnacdn.net https://scripts.luigisbox.tech https://cdn.luigisbox.tech/knirps.js test.saferpay.com www.saferpay.com saferpay.com https://privacy-proxy.usercentrics.eu https://web.cmp.usercentrics.eu https://*.cmp.usercentrics.eu https://*.usercentrics.eu js.mollie.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com https://cdn.consentmanager.mgr.consensu.org https://cdn.jsdelivr.net https://fonts.googleapis.com https://embed.tawk.to https://typekit.net https://*.typekit.net *.fontawesome.com https://static.klaviyo.com https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' data: 'self' 'unsafe-inline'; media-src *.adobe.com https://embed.tawk.to 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com https://maps.googleapis.com https://player.vimeo.com https://stats.g.doubleclick.net *.tawk.to wss://*.tawk.to https://www.sandbox.paypal.com https://eu.playground.klarnaevt.com https://www.facebook.com https://bat.bing.com https://o2.mouseflow.com https://live.luigisbox.tech https://api.luigisbox.com test.saferpay.com www.saferpay.com saferpay.com https://privacy-proxy.usercentrics.eu https://*.service.cmp.usercentrics.eu https://consent-api.service.consent.usercentrics.eu https://*.cmp.usercentrics.eu https://*.usercentrics.eu https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://api.luigisbox.tech *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 4
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://fonts.gstatic.com *.fontawesome.com https://www.google.com https://www.gstatic.com *.alothemes.com *.magepow.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com https://webpay3gint.transbank.cl webpay3g.transbank.cl webpay3gint.transbank.cl *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com bytedance: sslocal: https://www.google.com http://www.google.com https://www.facebook.com https://web.facebook.com https://bid.g.doubleclick.net *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com https://www.facebook.com https://www.google.com https://www.google.cl https://maps.gstatic.com https://maps.googleapis.com https://cdn.pushcrew.com https://dev.visualwebsiteoptimizer.com https://googleads.g.doubleclick.net https://pushcrew.com *.alothemes.com *.magepow.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com commerce.adobe.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-ds.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com https://www.google.cl https://cdn.pushcrew.com https://dev.visualwebsiteoptimizer.com https://fonts.googleapis.com https://maps.googleapis.com https://www.googletagmanager.com https://www.gstatic.com https://connect.facebook.net https://googleads.g.doubleclick.net http://www.google.com https://tracking.krip.cl https://js-agent.newrelic.com https://bam.nr-data.net https://cdn.fitit.ai *.googleapis.com *.gstatic.com *.alothemes.com *.magepow.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https://fonts.googleapis.com https://cdn.pushcrew.com https://dev.visualwebsiteoptimizer.com https://cdn.fitit.ai *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com *.alothemes.com *.magepow.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.net *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com qa-api.magedevteam.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com https://stats.g.doubleclick.net https://www.google-analytics.com https://bam.nr-data.net https://www.facebook.com https://api.bciplus.cl https://maps.googleapis.com https://pushcrew.com https://firebase.googleapis.com https://firebaseremoteconfig.googleapis.com https://us-central1-fitit-a5bde.cloudfunctions.net https://firebaselogging-pa.googleapis.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com *.alothemes.com *.magepow.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 4
font-src fonts.gstatic.com *.googleapis.com *.gstatic.com data: https://www.googletagmanager.com *.fontawesome.com https://fonts.bunny.net applepay.cdn-apple.com use.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com api.payplug.com secure.payplug.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.ampproject.org raw.githubusercontent.com *.googleapis.com *.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.avada.io *.shopify.com api.payplug.com applepay.cdn-apple.com https://cdn.payplug.com/js/integrated-payment/ cdn.scalapay.com b2c-cdn.scalapay.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net use.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com cdn.ampproject.org *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 4
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://static.hivebrite.com https://*.hivebrite.com https://*.cloudfront.net https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://www.gstatic.com https://api.mapbox.com https://*.launchdarkly.com https://assets.zendesk.com https://static.zdassets.com https://*.zendesk.com https://widget.intercom.io https://*.intercomcdn.com https://app.planhat.com https://*.usejimo.com https://cdn.walkme.com https://consent.cookiebot.com https://*.cookiebot.com https://connect.facebook.net https://assets2.omniapp.co https://hivebrite-external.embed-omniapp.co; style-src 'self' 'unsafe-inline' https: data:; font-src 'self' data: https://static.hivebrite.com https://fonts.gstatic.com https://fonts.bunny.net; connect-src 'self' https://*.hivebrite.com https://*.cloudfront.net https://*.launchdarkly.com wss://*.launchdarkly.com https://*.ably.net wss://*.ably.net https://*.ably.io wss://*.ably.io https://*.datadoghq.com https://*.datadoghq.eu https://*.sentry.io https://*.sendbird.com wss://*.sendbird.com https://maps.googleapis.com https://api.mapbox.com https://*.tiles.mapbox.com https://www.google-analytics.com https://*.intercom.io wss://*.intercom.io https://app.planhat.com https://*.usejimo.com https://*.omniapp.co https://*.zendesk.com https://*.zopim.com https://*.zdassets.com https://api.klipy.com https://graph.facebook.com https://*.facebook.com; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; frame-src 'self' https:; worker-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' us.hivebrite.com; form-action 'self' https:; report-uri /csp-reports 4
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cash-f.squarecdn.com static.payu.com https://widgets.trustedshops.com https://geowidget.easypack24.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' data: *.livechatinc.com https://td.doubleclick.net *.easypack24.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com *.braintreegateway.com *.paypal.com google.com *.google.com * *.packeta.com secure.payu.com merch-prod.snd.payu.com static.payu.com credit-widget-config.payu.com/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://geowidget-app.inpost.pl/ https://sandbox-easy-geowidget.easypack24.net/ *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.livechatinc.com https://consentcdn.cookiebot.com/ api.ratingcaptain.com *.cookiebot.eu 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com * static.payu.com credit-widget-config.payu.com/ https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com magefan.com cm.magefan.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.files-text.com *.livechatinc.com *.livechat-files.com *.livechat-static.com *.disqus.com https://firebasestorage.googleapis.com https://www.magezon.com *.hsforms.net *.hsforms.com 'self' data: https://maps.googleapis.com/ https://maps.gstatic.com/ https://developers.google.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com https://www.google.pl *.seznam.cz *.pricemania.sk https://imgsct.cookiebot.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com *.packeta.com secure.payu.com secure.snd.payu.com static.payu.com credit-widget-config.payu.com/ https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.livechatinc.com *.livechat-static.com https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech *.disqus.com *.avada.io *.shopify.com *.hsforms.net *.hsforms.com *.gstatic.com https://maps.googleapis.com/ *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net https://www.googletagmanager.com *.seznam.cz https://pixel.biano.cz https://consent.cookiebot.com *.biano.sk *.biano.cz *.biano.ro https://consentcdn.cookiebot.com https://api.ratingcaptain.com *.absulo.ro *.sgtm.absulo.ro *.cookiebot.eu cdn.ablyft.com https://secure.payu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.cash.app *.googleapis.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://geowidget.easypack24.net https://geowidget.inpost.pl *.livechatinc.com https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com *.tagmanager.google.com *.googletagmanager.com *.pricemania.sk *.easypack24.net 'self' 'unsafe-inline'; object-src *.livechatinc.com 'self' 'unsafe-inline'; media-src www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://geowidget.easypack24.net *.livechatinc.com *.livechat-static.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com * *.packeta.com secure.payu.com merch-prod.snd.payu.com static.payu.com credit-widget-config.payu.com/ *.trustedshops.com *.etrusted.com https://integrations.etrusted.site www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.easypack24.net *.inpost.pl *.openstreetmap.org *.livechatinc.com *.text.com https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech https://get.geojs.io *.avada.io t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com https://maps.googleapis.com/ *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app http://www.google-analytics.com *.googlesyndication.com *.biano.cz *.biano.sk *.biano.ro https://consentcdn.cookiebot.com googleads.g.doubleclick.net api.ratingcaptain.com *.cookiebot.eu 'self' 'unsafe-inline'; child-src *.livechatinc.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 4
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.jquery.com https://maxcdn.bootstrapcdn.com https://unpkg.com https://vjs.zencdn.net https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://www.youtube.com https://s.ytimg.com https://player.pandavideo.com.br https://beyond.spalla.io https://embed.spalla.io https://*.converteai.net https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://maxcdn.bootstrapcdn.com; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; img-src 'self' data: blob: https:; media-src 'self' blob: https:; worker-src 'self' blob:; connect-src 'self' wss: ws: https://api.pagar.me https://api.asaas.com https://api.getnet.com.br https://api.rede.com.br https://api.mercadopago.com https://app.hubspot.com https://www.google-analytics.com https://stats.g.doubleclick.net https://api.whatsapp.com https://*.converteai.net https://license.vturb.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://player.pandavideo.com.br https://*.tv.pandavideo.com.br https://beyond.spalla.io https://embed.spalla.io https://drive.google.com https://*.converteai.net https://www.facebook.com https://www.googletagmanager.com https://www.google.com; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; form-action 'self' https: 4
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: https://cms.staticone88.com http://gw-9079 http://api-event-prod.com https://hotmatch.storeallinone.com https://api.bakogai.com/gt-stats-be https://webchat.s1-tool.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' ws: wss: https://cms.staticone88.com http://gw-9079 http://api-event-prod.com https://hotmatch.storeallinone.com https://api.bakogai.com/gt-stats-be https://webchat.s1-tool.com; frame-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; form-action 'self' 4
default-src 'self'; script-src 'self' 'unsafe-inline' https://ir-api.eqs.com https://assets.adobedtm.com https://tags-eu.tiqcdn.com https://www.youtube.com; style-src 'self' 'unsafe-inline' https://ir-api.eqs.com; img-src 'self' data: https://img.youtube.com https://*.adobeaemcloud.com; font-src 'self' https://ir-api.eqs.com; connect-src 'self' https://ir-api.eqs.com https://collect-eu-central-1.tealiumiq.com https://edge.adobedc.net https://*.data.adobedc.net https://tools.cms-eqs.com https://cdn.plyr.io https://*.adobeaemcloud.com https://www.telekom.com https://preview.telekom.com https://prod.telekom.com; frame-src 'self' https://www.youtube-nocookie.com; media-src 'self' https://*.adobeaemcloud.com; object-src 'none'; base-uri 'self'; form-action 'self'; 3
frame-ancestors gofundme.com *.gofundme.com *.hopin.com pillar.io *.pillar.io takethemameal.com *.takethemameal.com kudoboard.com *.kudoboard.com werememberdev.com *.werememberdev.com weremember.com *.weremember.com forevermissed.com *.forevermissed.com fm-stage.com *.fm-stage.com fm-qa.com *.fm-qa.com giftwhale.com *.giftwhale.com giftwhale.test *.chirp.me chirp.me *.giveinkind.com giveinkind.com *.inkind.dev *.mrdev.com *.mrqa1.com *.mrtesting.com *.myregistrystaging.com *.myregistry.com test.caringbridge.cc feedback.caringbridge.org caringbridge.org *.caringbridge.org *.linktr.ee; 3
default-src 'self'; report-uri https://csp.loopia.se; connect-src 'self' https://*.analytics.google.com https://*.loopia.com https://*.loopia.no https://*.loopia.rs https://*.loopia.se https://accesswidget-log-receiver.acsbapp.com https://adservice.google.com https://analytics.google.com https://api-eu1.hubapi.com https://api.exponea.com https://api.infinario.com https://bat.bing.com https://cdn.iubenda.com https://consentcdn.cookiebot.com https://content.hotjar.io https://cta-eu1.hubspot.com https://eu-cdn.acsbapp.com https://eu.acsbapp.com https://idb.iubenda.com https://in.hotjar.com https://pagead2.googlesyndication.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://srv.motu-teamblue.services https://stats.g.doubleclick.net https://vc.hotjar.io https://www.facebook.com https://www.google.com https://www.googleadservices.com https://www.google.se; font-src 'self' https://*.loopia.com https://*.loopia.no https://*.loopia.rs https://*.loopia.se https://fonts.gstatic.com; form-action 'self' https://*.loopia.com https://*.loopia.no https://*.loopia.rs https://*.loopia.se https://bib.eway2pay.com https://payment.architrade.com https://ticket.siriusit.net https://www.facebook.com; frame-src 'self' https://*.facebook.com https://*.loopia.com https://*.loopia.no https://*.loopia.rs https://*.loopia.se https://5.ec1.vbus.apps.ladesk.com https://active24.ladesk.com https://cdn.hub-prod.team.blue https://consentcdn.cookiebot.com https://vars.hotjar.com https://www.google.com https://www.googletagmanager.com https://*.freshchat.com https://*.freshdesk.com; img-src 'self' data: https://*.loopia.com https://*.loopia.no https://*.loopia.rs https://*.loopia.se https://bat.bing.com https://googleads.g.doubleclick.net https://imgsct.cookiebot.com https://perf-eu1.hsforms.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://region1.analytics.google.com https://region1.google-analytics.com https://srv.motu-teamblue.services https://stats.g.doubleclick.net https://tbs.tradedoubler.com https://track-eu1.hubspot.com https://www.facebook.com https://www.google.com https://www.google.se https://www.googletagmanager.com https://www.gstatic.com; media-src 'self' https://*.loopia.com https://*.loopia.no https://*.loopia.rs https://*.loopia.se; object-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.loopia.com https://*.loopia.no https://*.loopia.rs https://*.loopia.se https://api.exponea.com https://api.infinario.com https://g.microsoft.com https://script.hotjar.com https://snap.licdn.com https://static.hotjar.com https://www.google.com https://www.google.se https://www.googletagmanager.com; script-src-elem 'self' 'unsafe-inline' https://*.freshchat.com https://*.freshdesk.com https://*.loopia.com https://*.loopia.no https://*.loopia.rs https://*.loopia.se https://active24.ladesk.com https://api.exponea.com https://bat.bing.com https://cdn.hub-prod.team.blue https://cdn.iubenda.com https://connect.facebook.net https://consent.cookiebot.com https://consentcdn.cookiebot.com https://cs.iubenda.com https://eu.acsbapp.com https://eu.fw-cdn.com https://googleads.g.doubleclick.net https://js-eu1.hs-analytics.net https://js-eu1.hs-banner.com https://js-eu1.hs-scripts.com https://js-eu1.hsadspixel.net https://js-eu1.hubspot.com https://pagead2.googlesyndication.com https://script.hotjar.com https://snap.licdn.com https://srv.isy-teamblue.services https://srv.motu-teamblue.services https://static.hotjar.com https://widget.trustpilot.com https://www.google.com https://www.google.se https://www.googletagmanager.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://*.loopia.com https://*.loopia.no https://*.loopia.rs https://*.loopia.se https://cdn.iubenda.com https://fonts.googleapis.com https://*.freshchat.com https://*.freshdesk.com 3
default-src 'self'; script-src 'self' 'unsafe-inline' blob: https: https://fast.wistia.com https://fast.wistia.net; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https: http: blob:; connect-src 'self' https://*.sanity.io wss://*.api.sanity.io https://cdn.growthbook.io https://api.growthbook.io https://*.wistia.com https://*.wistia.net wss://*.wistia.com wss://*.wistia.net https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://www.googletagmanager.com https://api.segment.io https://cdn.segment.com https://cdp.customer.io https://www.google.com https://*.doubleclick.net https://consentcdn.cookiebot.com https://px.ads.linkedin.com https://bat.bing.com https://pixel-config.reddit.com https://*.zi-scripts.com https://*.zoominfo.com https://a.usbrowserspeed.com https://api.usergems.com https://*.clarity.ms https://*.cloud.gist.build; frame-src 'self' https://fast.wistia.net https://*.wistia.com https://www.youtube.com https://www.youtube-nocookie.com https://www.loom.com https://player.vimeo.com https://*.growthbook.io https://*.doubleclick.net https://consentcdn.cookiebot.com; font-src 'self' data: https:; media-src 'self' https: http: blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://track.customer.io; frame-ancestors 'self'; upgrade-insecure-requests; report-uri /api/csp-report; report-to csp-endpoint; 3
default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http://*.files.wordpress.com wss://www.hollywoodreporter.com; report-uri https://pmcuri.report-uri.com/r/d/csp/reportOnly 3
default-src 'self'; connect-src 'self' https://gateway.api.axis.com https://ep1.adtrafficquality.google https://googleads.g.doubleclick.net https://ad.doubleclick.net https://axis.my.site.com https://axis.my.salesforce-scrt.com wss://ws.hotjar.com https://content.hotjar.io https://vc.hotjar.io https://metrics.hotjar.io https://bat.bing.com https://px.ads.linkedin.com https://www.google.com https://www.google.se https://www.googleadservices.com https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://eventrouter.axis.com https://*.visualwebsiteoptimizer.com https://help.axis.com https://whitepapers.axis.com https://widget-api.lifeinside.io; font-src 'self' data: https://www.axis.com https://widget.lifeinside.io; frame-src 'self' https://ep2.adtrafficquality.google https://www.google.com https://www.recaptcha.net https://www.global-comms.axis.com https://www.youtube.com https://sitedesigner.axis.com https://eventrouter.axis.com https://*.visualwebsiteoptimizer.com; img-src 'self' data: https://www.axis.com https://www.google.com https://www.googletagmanager.com https://*.google-analytics.com https://clients1.google.com https://ep1.adtrafficquality.google https://googleads.g.doubleclick.net https://px.ads.linkedin.com https://www.linkedin.com https://www.facebook.com https://bat.bing.com https://*.visualwebsiteoptimizer.com; media-src 'self' https://www.axis.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://cse.google.com/cse.js https://www.google.com https://googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://cse.google.com https://ep2.adtrafficquality.google https://www.recaptcha.net https://www.googletagmanager.com https://www.gstatic.com https://www.axis.com https://www.apac-comms.axis.com https://www.emea-comms.axis.com https://www.americas-comms.axis.com https://pi.pardot.com https://www.youtube.com https://widget.lifeinside.io https://sitedesigner.axis.com https://static.hotjar.com https://script.hotjar.com https://snap.licdn.com https://bat.bing.com https://connect.facebook.net https://googleads.g.doubleclick.net https://*.visualwebsiteoptimizer.com https://axis.my.site.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src 'self' 'unsafe-inline' https://www.google.com https://axis.my.site.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; worker-src 'self' blob:; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://sitedesigner.axis.com/; 3
default-src https: data: 'unsafe-eval' 'unsafe-inline'; object-src 'none'; report-uri /csp-violation-report-endpoint.php; report-to csp-endpoint 3
default-src 'self' *.pinduoduo.com *.pddpic.com *.yangkeduo.com *.pddugc.com *.pinduoduo.net *.v.smtcdns.net *.ourdvsss.com wss://*.pinduoduo.com wss://*.yangkeduo.com mapstyle.qpic.cn blob: data: 'unsafe-eval' 'unsafe-inline'; report-uri https://tc.pinduoduo.com/x.gif 3
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.gdebenz.org https://mc.yandex.ru https://yandex.ru https://yastatic.net; style-src 'self' 'unsafe-inline' https://cdn.gdebenz.org; img-src 'self' data: blob: https:; connect-src 'self' https://cdn.gdebenz.org https://api.gdebenz.ru https://mc.yandex.ru https://an.yandex.ru https://yabs.yandex.ru https://yandex.ru; font-src 'self' data: https://cdn.gdebenz.org; frame-src https://yandex.ru https://an.yandex.ru https://yastatic.net; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none' 3
default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http://*.files.wordpress.com wss://wwd.com; report-uri https://pmcuri.report-uri.com/r/d/csp/reportOnly 3
default-src 'self' https://*.ebizautos.com; img-src *; script-src 'self' 'unsafe-inline' *; font-src *; media-src *; frame-src *; manifest-src 'self'; style-src 'self' 'unsafe-inline' *; connect-src https://*; object-src 'none'; worker-src 'none'; base-uri 'self'; 3
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/about_google 3
default-src 'self'; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com; img-src 'self' https://www.google-analytics.com https://www.googletagmanager.com; object-src 'none'; script-src 'self' 'report-sample' cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://eum.instana.io https://ninchat.com https://unpkg.com; style-src 'self' 'report-sample' cdn.jsdelivr.net https://cdn.curator.io https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://steerpath-web-sdk.s3-eu-west-1.amazonaws.com https://unpkg.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 3
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://sst.bosch.com https://btm.bosch.com https://dock.ui.bosch.tech https://maps.google.com https://www.google-analytics.com https://www.googletagmanager.com https://www.youtube.com https://www.google.com https://www.gstatic.com https://cloud1-devel.gccx.boschservicesolutions.ai https://apps.mypurecloud.de https://service.bosch-so.tech; style-src 'self' 'unsafe-inline' https://btm.bosch.com https://service.bosch-so.tech https://fonts.googleapis.com https://webchatplugins.blob.core.windows.net; object-src 'none'; base-uri 'self'; connect-src 'self' https://btm.bosch.com https://cx.bosch-so.com https://dock.ui.bosch.tech https://search.internet.bosch.com https://sst.bosch.com https://endpoint.chatbot-suite.bosch.tech https://bosch-i3-caas-api.e-spirit.cloud https://caas-p-i3.wcms.digital.bosch.com https://service.bosch-so.tech https://*.google-analytics.com https://www.googletagmanager.com https://maps.googleapis.com https://api-cdn.mypurecloud.de; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://www.youtube-nocookie.com https://www.youtube.com https://www.google.com https://crdostaticwebsite337215.z6.web.core.windows.net https://www.googletagmanager.com https://apps.mypurecloud.de; img-src 'self' data: https://bosch.com https://assets.bosch.com https://www.googletagmanager.com https://www.google-analytics.com https://i.ytimg.com https://maps.google.com https://maps.gstatic.com; manifest-src 'self'; media-src 'self' data: https://assets.bosch.com; worker-src 'none'; report-uri https://o4508243129991168.ingest.de.sentry.io/api/4508243155288144/security/?sentry_key=2f9480313f00b63a26560fd685315765; report-to csp-endpoint; 3
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://widget.trustpilot.com https://prod.spline.design https://js.hs-scripts.com https://js.hs-analytics.net https://js.hsforms.net https://js.hscollectedforms.net https://js.hs-banner.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https://www.google-analytics.com https://*.supabase.co https://*.upstash.io https://prod.spline.design https://api.hubapi.com https://forms.hubspot.com https://js.hs-analytics.net; frame-src 'self' https://widget.trustpilot.com https://www.youtube.com https://www.youtube-nocookie.com; media-src 'self'; object-src 'none'; base-uri 'self' 3
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.byted-static.com *.bytedance.net *.bytegecko.com *.bytegoofy.com *.bytescm.com *.feishu-boe.cn *.feishu.cn *.feishucdn.com *.ibytedapm.com *.larksuite-boe.com *.larksuite.com *.larksuitecdn.com *.ocic-static.com *.snssdk.com https://bat.bing.com https://cdnjs.cloudflare.com https://hm.baidu.com https://res.wx.qq.com https://www.google-analytics.com https://www.googletagmanager.com https://zz.bdstatic.com; worker-src 'self' blob:; report-to csp-endpoint 3
default-src 'self'; script-src-elem 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://tag.flvcdn.net https://saf-sc-protect.com https://hubspotonwebflow.com https://www.rentracks.jp https://b98.yahoo.co.jp https://ichisan.jp https://sc.lfeeder.com https://trc.taboola.com https://b99.yahoo.co.jp https://static.ads-twitter.com https://bat.bing.com https://s.yimg.jp https://platform.twitter.com https://d.line-scdn.net https://cdn.taboola.com https://m.vpadn.com https://funnel-assets.startappservice.com https://tools.refokus.com https://*.intercomcdn.com https://*.intercom.io https://*.jsdelivr.net https://js.hsforms.net https://*.visualwebsiteoptimizer.com https://snap.licdn.com https://connect.facebook.net https://tracking.g2crowd.com https://*.spideraf.com https://*.hscollectedforms.net https://*.hs-analytics.net https://*.hsadspixel.net https://*.hs-banner.com https://*.hubspot.com https://*.clarity.ms https://googleads.g.doubleclick.net https://*.hs-scripts.com https://*.webflow.com https://*.jetboost.io https://*.website-files.com https://www.googletagmanager.com https://*.googleapis.com https://*.jquery.com https://*.cloudfront.net https://cdn-cookieyes.com https://sp-trk.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.webflow.com https://www.googletagmanager.com https://*.googleapis.com https://*.jquery.com https://*.cloudfront.net https://cdn-cookieyes.com https://*.intercom.io https://sp-trk.com https://*.jetboost.io https://*.visualwebsiteoptimizer.com https://*.cloudflare.com; style-src 'self' 'unsafe-inline' https://*; font-src 'self' data: https://*; img-src 'self' data: blob: https://*; connect-src 'self' https://*; frame-src 'self' https://*; worker-src 'self' blob:; object-src 'none'; report-uri https://saf-sitescan.com/api/csp-report/4rjsitdq; 3
default-src 'self' disney.okta.com sso.myid.disney.com *.oktacdn.com; connect-src 'self' disney.okta.com disney-admin.okta.com sso.myid.disney.com *.oktacdn.com *.mixpanel.com *.mapbox.com disney.kerberos.okta.com disney.mtls.okta.com *.authenticatorlocalprod.com:8769 http://localhost:8769 http://127.0.0.1:8769 *.authenticatorlocalprod.com:65111 http://localhost:65111 http://127.0.0.1:65111 *.authenticatorlocalprod.com:65121 http://localhost:65121 http://127.0.0.1:65121 *.authenticatorlocalprod.com:65131 http://localhost:65131 http://127.0.0.1:65131 *.authenticatorlocalprod.com:65141 http://localhost:65141 http://127.0.0.1:65141 *.authenticatorlocalprod.com:65151 http://localhost:65151 http://127.0.0.1:65151 https://oinmanager.okta.com data: *.ingest.sentry.io https://cdn.jsdelivr.net/sm/; script-src 'unsafe-inline' 'unsafe-eval' 'self' 'report-sample' disney.okta.com sso.myid.disney.com *.oktacdn.com https://cdn.jsdelivr.net/gh/altcha-org/altcha/dist/altcha.min.js https://cdn.jsdelivr.net/gh/altcha-org/altcha@2.3.0/dist/altcha.min.js; style-src 'unsafe-inline' 'self' 'report-sample' disney.okta.com sso.myid.disney.com *.oktacdn.com; frame-src 'self' disney.okta.com disney-admin.okta.com sso.myid.disney.com login.okta.com *.vidyard.com com-okta-authenticator: api-5a45a87b.duosecurity.com; img-src 'self' disney.okta.com sso.myid.disney.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: blob:; font-src 'self' disney.okta.com sso.myid.disney.com data: *.oktacdn.com fonts.gstatic.com; worker-src 'self' blob:; frame-ancestors 'self' https://data.disneystreaming.com https://data-staging.disneystreaming.com https://data-dev.disneystreaming.com https://outlooksts.disney.com 3
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://phrase.com https://*.googletagmanager.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://www.google.com https://www.gstatic.com https://www.gstatic.cn https://www.recaptcha.net https://www.youtube.com https://oxaewmwfp6.kameleoon.io https://cookie-cdn.cookiepro.com https://*.clarity.ms https://bat.bing.com https://js.hubspot.com https://js.hs-banner.com https://js.hs-analytics.net https://js.hs-scripts.com https://js.hsforms.net https://connect.facebook.net https://snap.licdn.com https://pixel.byspotify.com https://tracking.g2crowd.com https://assets.apollo.io https://js.chilipiper.com https://boards.eu.greenhouse.io https://jobs.ashbyhq.com https://e.infogram.com https://platform.twitter.com; style-src 'self' 'unsafe-inline' https://phrase.com https://fonts.googleapis.com https://www.googletagmanager.com; img-src 'self' data: https://phrase.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://*.google.com https://cookie-cdn.cookiepro.com https://www.facebook.com https://forms-na1.hsforms.com https://perf-na1.hsforms.com https://track.hubspot.com https://px.ads.linkedin.com https://bat.bing.com https://bat.bing.net https://c.bing.com https://ct.capterra.com https://*.clarity.ms https://i.ytimg.com https://js.chilipiper.com https://cdn-images-1.medium.com https://s.w.org https://phraseapp.com https://staging-phrasestagingpx-phrasedev.kinsta.cloud; font-src 'self' data: https://phrase.com https://fonts.gstatic.com; frame-src 'self' https://phrase.com https://www.googletagmanager.com https://www.google.com https://www.recaptcha.net https://www.youtube.com https://www.youtube-nocookie.com https://job-boards.eu.greenhouse.io https://jobs.ashbyhq.com https://forms.hsforms.com https://www.facebook.com https://player.bilibili.com https://phrase.chilipiper.com https://www.g2.com https://e.infogram.com https://www.linkedin.com https://platform.twitter.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://ad.doubleclick.net https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat https://cookie-cdn.cookiepro.com https://geolocation.onetrust.com https://privacyportal.cookiepro.com https://eu-data.kameleoon.io https://*.clarity.ms https://bat.bing.com https://bat.bing.net https://cta-service-cms2.hubspot.com https://forms.hsforms.com https://perf-na1.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com https://px.ads.linkedin.com https://www.facebook.com https://pixels.spotify.com https://tracking-api.g2.com https://aplo-evnt.com https://phrase.chilipiper.com https://api.chilipiper.com https://tracking.chilipiper.com https://js.chilipiper.com https://noembed.com; media-src 'self' https://phrase.com https://*.hubspotusercontent-na1.net; object-src 'none'; base-uri 'self'; report-uri https://o319746.ingest.us.sentry.io/api/4511309638795264/security/?sentry_key=e21151de46e1f976858c58e3ca5cbef6; report-to csp-endpoint 3
default-src 'self'; connect-src 'none'; script-src-elem https://sdk.privacy-center.org https://www.googletagmanager.com; style-src-elem https://cdn.jsdelivr.net; img-src 'self' https://assets-eu-01.kc-usercontent.com https://cdn-prod.ppg.com; report-to csp-endpoint 3
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.livechatinc.com https://cmp.dgtl5.app https://www.googletagmanager.com https://www.gstatic.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://*.livechatinc.com https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self' data:; connect-src 'self' https://*.livechatinc.com wss://*.livechatinc.com https://cmp.dgtl5.app https://api.cmp.dgtl5.app https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com; frame-src https://secure.livechatinc.com https://*.livechatinc.com https://www.googletagmanager.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self' https://myservers.rapidswitch.com 3
default-src 'self'; script-src 'self' https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.google-analytics.com https://www.googletagmanager.com https://cdnjs.cloudflare.com; connect-src 'self' https://consent.cookiebot.com https://consentcdn.cookiebot.com; frame-src 'self' https://consent.cookiebot.com https://consentcdn.cookiebot.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://www.google-analytics.com https://brandcenter.flex.com; upgrade-insecure-requests; 3
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https: data:; connect-src 'self' https:; frame-ancestors 'self'; 3
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.modo.com.ar fonts.googleapis.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.magerocket.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.gocuotas.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.mercadopago.com.ar mercadopago.com.ar *.getblue.io *.magerocket.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://mobbex.com *.gocuotas.com www.facebook.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.google.com.ar *.google.es *.google.com.uy *.mercadopago.com.ar *.modo.com.ar *.magerocket.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mobbex.com *.gocuotas.com *.gstatic.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.woowup.com *.hotjar.com *.pageimprove.io pageimprove.io *.getblue.io *.adidas.com *.modo.com.ar *.magerocket.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mobbex.com *.gocuotas.com cdn.ampproject.org www.gstatic.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms unpkg.com *.doubleclick.net https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com www.gstatic.com *.tagmanager.google.com *.googletagmanager.com https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.pangle-ads.com *.modo.com.ar *.google.com.ar *.google.com *.magerocket.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mobbex.com *.gocuotas.com cdn.ampproject.org www.googleapis.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.clarity.ms *.doubleclick.net *.run.app https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://connect.facebook.net https://js.zi-scripts.com https://unpkg.com/web-vitals/ https://static.hotjar.com https://script.hotjar.com https://snap.licdn.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com https://geolocation.onetrust.com https://www.google.com https://www.gstatic.com https://js.hsforms.net; style-src 'self' 'unsafe-inline' https://cdn.cookielaw.org https://*.hotjar.com; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://edge.api.flagsmith.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://ad.doubleclick.net https://pagead2.googlesyndication.com https://www.google.com https://px.ads.linkedin.com https://js.zi-scripts.com https://ws.zoominfo.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://cdn.cookielaw.org https://*.onetrust.com https://cookie-cdn.cookiepro.com https://privacyportal.cookiepro.com https://cdn.bfldr.com https://www.facebook.com https://api.hsforms.com https://forms.hsforms.com https://forms.hubspot.com https://*.hubspot.com https://*.typesense.net; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://player.acast.com https://td.doubleclick.net https://www.facebook.com; object-src 'none'; base-uri 'self'; form-action 'self' https://forms.hsforms.com https://forms.hubspot.com https://api.hsforms.com https://www.facebook.com; report-to csp-endpoint; report-uri /api/csp-report 3
default-src 'self';base-uri 'self';object-src 'none';form-action 'self';script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' 'report-sample' https://widget.intercom.io https://js.intercomcdn.com https://static.moonpay.com https://www.gstatic.com www.googletagmanager.com https://cdn.rudderlabs.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com;font-src 'self' data: https://fonts.reown.com https://fonts.gstatic.com https://fonts.intercomcdn.com;img-src 'self' data: blob: https:;media-src 'self' data: blob: https://cdn.1inch.com;worker-src 'self' blob:;frame-src data: blob: 'self' https://challenges.cloudflare.com https://app.safe.global https://*.coinshift.xyz https://connect.trezor.io https://verify.walletconnect.com https://wallet-v2.blocto.app https://dapp-browser.apps.ledger.com https://1inch.cloudflareaccess.com https://buy.moonpay.com https://sdk.prod.innerworks.me https://verify.walletconnect.org https://connect.solflare.com https://subscribe-forms.beehiiv.com https://www.youtube.com https://chamberfi.com https://youtube.com;connect-src *, connect-src 'self' api.safe.global https://*.1inch.io wss://*.1inch.io https://*.1inch.com wss://*.1inch.com https://1inch-network.ghost.io api.lever.co https://*.ingest.us.sentry.io https://api-eu.mixpanel.com https://api.rudderstack.com https://cdn.rudderlabs.com https://*.walletconnect.org wss://*.walletconnect.org api.web3modal.org https://*.coinbase.com wss://www.walletlink.org https://www.walletlink.org https://*.ledger.com wss://*.ledger.com https://cloud-sync-backend.api.aws.prd.ldg-tech.com www.googletagmanager.com www.google-analytics.com analytics.google.com region1.analytics.google.com stats.g.doubleclick.net https://*.googleapis.com https://*.firebaseio.com wss://*.firebaseio.com https://sdk.prod.innerworks.me https://*.intercom.io wss://*.intercom.io https://*.intercomcdn.com ethereum.publicnode.com bsc-dataseed1.ninicoin.io polygon.drpc.org mainnet.optimism.io arb1.arbitrum.io rpc.gnosischain.com api.avax.network mainnet.era.zksync.io mainnet.base.org rpc.linea.build mainnet.unichain.org rpc.soniclabs.com rpc.mainnet.chain.robinhood.com rpc.monad.xyz evm.cronos.org rpc.hyperliquid.xyz api.merkl.xyz robinhoodchain.blockscout.com 3
default-src 'self' 'unsafe-inline' data: *.hockeystack.com *.marianatek.com *.cookielaw.org *.chilipiper.com *.googletagmanager.com *.google.com *.gstatic.com *.cloudflare.com *.youtube.com *.youtube-nocookie.com *.vimeo.com *.licdn.com *.facebook.net *.clarity.ms *.google-analytics.com *.hs-scripts.com *.doubleclick.net unpkg.com *.wistia.net;upgrade-insecure-requests; 3
default-src 'self' http: https: data: blob: 'unsafe-eval' 'unsafe-inline'; frame-ancestors 'self'; 3
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://*.clerk.accounts.dev https://clerk.multimango.com https://codimango.com https://*.codimango.com https://challenges.cloudflare.com https://vercel.live https://cdn.tailwindcss.com https://www.datadoghq-browser-agent.com; style-src 'self' 'unsafe-inline'; img-src 'self' https: manifold: oil: everstore: data: blob:; font-src 'self'; connect-src 'self' https://www.multimango.com https://*.clerk.accounts.dev https://*.clerk.com https://clerk.multimango.com https://codimango.com https://*.codimango.com https://www.codimango.com https://*.multimodal-agentic-generation-preview.mangovibe.net https://vitals.vercel-insights.com https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-us3-datadoghq.com https://*.browser-intake-us3-datadoghq.com https://browser-intake-us5-datadoghq.com https://*.browser-intake-us5-datadoghq.com https://browser-intake-datadoghq.eu https://*.browser-intake-datadoghq.eu https://browser-intake-ap1-datadoghq.com https://*.browser-intake-ap1-datadoghq.com https://browser-intake-ap2-datadoghq.com https://*.browser-intake-ap2-datadoghq.com https://browser-intake-ddog-gov.com https://*.browser-intake-ddog-gov.com https://browser-intake-us2-ddog-gov.com https://*.browser-intake-us2-ddog-gov.com wss://*.clerk.accounts.dev https://multidatastore.s3.us-west-2.amazonaws.com https://multidatastore-public.s3.us-west-2.amazonaws.com https://multidatastore-private.s3.us-west-2.amazonaws.com wss://generativelanguage.googleapis.com wss://shortwave.facebook.com wss://*.vercel.run wss://*.metaaivm.com wss://*.nest-dev-proxy.internalmeta.com https://*.fbcdn.net https://*.cdninstagram.com https://*.fbsbx.com https://interngraph.intern.facebook.com https://api.llama.com https://nominatim.openstreetmap.org https://*.facebook.com:* https://www.instagram.com manifold: oil: everstore: blob:; media-src 'self' https://www.multimango.com https://cdn.multimango.com https://multidatastore.s3.us-west-2.amazonaws.com https://multidatastore-public.s3.us-west-2.amazonaws.com https://multidatastore-private.s3.us-west-2.amazonaws.com https://multidatastore.s3.amazonaws.com https://*.fbcdn.net https://*.xx.fbcdn.net https://interngraph.intern.facebook.com manifold: oil: everstore: data: blob:; frame-src 'self' https://vercel.live https://*.vercel.live https://challenges.cloudflare.com https://player.vimeo.com https://multidatastore.s3.us-west-2.amazonaws.com https://multidatastore-public.s3.us-west-2.amazonaws.com https://*.mangobox.net https://*.eks-prod.cf.aws.metafb.cloud https://*.nodebox.codesandbox.io https://*.desktop-sandoq.cf.aws.metafb.cloud https://*.sessions.sandoq.desktop-sandoq.cf.aws.metafb.cloud https://*.vercel.run https://ai-web-agents.edge.x2p.facebook.net https://*.arcada.app https://*.arena.site https://*.multimodal-agentic-generation-preview.mangovibe.net https://*.mangovibe.net https://hatch.ecto1.ai https://agent.meta.ai; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://multimango.com https://*.multimango.com https://navibot.dev https://*.navibot.dev https://codimango.com https://*.codimango.com https://*.multimodal-agentic-generation-preview.mangovibe.net 3
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://accounts.google.com https://apis.google.com https://www.gstatic.com https://widget.intercom.io https://js.intercomcdn.com https://*.clarity.ms https://connect.facebook.net https://googleads.g.doubleclick.net https://vercel.live; style-src 'self' 'unsafe-inline' https://accounts.google.com; img-src 'self' data: blob: https://cdn.sanity.io https://static.the-qrcode-generator.com https://*.wp.com https://*.googleusercontent.com https://placehold.co https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://www.facebook.com https://www.google.com https://www.google.co.in https://googleads.g.doubleclick.net https://js.intercomcdn.com https://static.intercomassets.com https://*.clarity.ms https://c.bing.com; font-src 'self' data: https://fonts.intercomcdn.com; media-src 'self' https://js.intercomcdn.com; connect-src 'self' https://cdn.sanity.io https://api-iam.intercom.io https://nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://*.clarity.ms https://accounts.google.com https://ad.doubleclick.net https://stats.g.doubleclick.net https://www.google.com https://www.google.co.in https://mpc2-prod-26-is5qnl632q-uc.a.run.app https://vercel.live; frame-src 'self' https://www.googletagmanager.com https://accounts.google.com https://widget.intercom.io https://vercel.live; frame-ancestors 'self'; form-action 'self' https://app.the-qrcode-generator.com https://the-qrcode-generator.com; base-uri 'self'; object-src 'none'; upgrade-insecure-requests 3
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: cdn.privacy-mgmt.com maps.googleapis.com www.news.co.uk uk-script.dotmetrics.net *.google-analytics.com *.doubleclick.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com cdn.privacy-mgmt.com *.tiqcdn.com unpkg.com uk-script.dotmetrics.net *.scorecardresearch.com *.google-analytics.com *.googletagmanager.com *.brightcove.com; style-src 'self' 'unsafe-inline' data: use.fontawesome.com fonts.googleapis.com use.typekit.net maps.google.com unpkg.com; img-src 'self' data: *.googleapis.com *.gstatic.com *.google-analytics.com *.scorecardresearch.com *.news.co.uk www.news.co.uk *.dotmetrics.net newsuk.s3.amazonaws.com *.google.com s.w.org ps.w.org ts.w.org secure.gravatar.com www.gravatar.com; font-src 'self' data: fonts.gstatic.com; frame-src 'self' *.youtube.com *.vimeo.com *.brightcove.com cdn.privacy-mgmt.com; 3
default-src 'self';img-src * blob: data: px.ads.linkedin.com www.facebook.com *.doubleclick.net *.clarity.ms;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.amplitude.com *.bootstrapcdn.com *.typekit.net cdn.jsdelivr.net cdn.rlets.com cdnjs.cloudflare.com code.jquery.com js.hsforms.net www.googletagmanager.com *.mysanfordchart.org *.addthis.com *.adroll.com *.adsrvr.org *.ads-twitter.com *.clarity.ms *.cloudfront.net *.doubleclick.net *.fls.doubleclick.net formstack.com *.formstack.com *.formstack.io *.g.doubleclick.net *.google.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.gstatic.com *.invocacdn.com *.liveperson.net *.lpsnmedia.net *.mpio.io onesignal.com *.onesignal.com *.qualtrics.com *.quantcount.com *.quantserve.com *.serving-sys.com *.simpli.fi *.siteintercept.qualtrics.com *.talentegy.com *.tvsquared.com *.twitter.com *.v.liveperson.net *.vimeo.com *.vimeocdn.com aa.agkn.com ajax.aspnetcdn.com assets.sitescdn.net az416426.vo.msecnd.net bat.bing.com cdn.mouseflow.com cdn.popt.in chimpstatic.com data.adxcel-ec2.com embed.typeform.com js.hsadspixel.net js.hs-analytics.net js.hs-banner.com js.hscollectedforms.net js.hsleadflows.net js.hs-scripts.com pixel.mathtag.com pixel.videohub.tv pnapi.invoca.net px.ads.linkedin.com s.amazon-adsystem.com s.pinimg.com s3.amazonaws.com/checkout.squadup.com/default/css/bootstrap-namespace.min.css script.crazyegg.com sc-static.net siteimproveanalytics.com snap.licdn.com static.addtoany.com static.cloud.coveo.com tags.srv.stackadapt.com tracking.logpostback.com transparency.nrchealth.com trkn.us v1.addthisedge.com www.buzzsprout.com www.groupexpro.com www.youtube.com www.ypo.education/js/jsembedcode.js z.moatads.com cdn.mxpnl.com js.hubspot.com *.snapchat.com *.instabot.io *.roobrik.com connect.facebook.net services.cattailsservices.com *.binaryfountain.com *.consumerism.pressganey.com;style-src 'self' 'unsafe-inline' *.bootstrapcdn.com *.fontawesome.com *.googleapis.com *.typekit.net cdn.jsdelivr.net cdnjs.cloudflare.com cloud.typography.com code.jquery.com www.googletagmanager.com *.mysanfordchart.org *.formstack.com *.formstack.io *.gstatic.com *.vimeocdn.com cdn.thinglink.me checkout.stripe.com formsprod.azureedge.net onesignal.com static.cloud.coveo.com tags.srv.stackadapt.com www.groupexpro.com www.youtube.com *.instabot.io services.cattailsservices.com *.consumerism.pressganey.com;font-src 'self' data: *.fontawesome.com *.typekit.com *.typekit.net cdn.jsdelivr.net cdnjs.cloudflare.com *.formstack.com *.gstatic.com *.googleusercontent.com static.cloud.coveo.com staticdev.cloud.coveo.com *.roobrik.com *.consumerism.pressganey.com;frame-src 'self' cdn.jsdelivr.net cdn.rlets.com cdnjs.cloudflare.com www.googletagmanager.com tools.sanfordhealthplan.com *.mysanfordchart.org *.addthis.com *.adsrvr.org *.c.liveperson.net *.doubleclick.net *.fls.doubleclick.net *.formstack.com *.g.doubleclick.net *.google.com *.ipcamlive.com *.lpsnmedia.net *.snapchat.com *.soundcloud.com *.stripe.com *.twitter.com *.v.liveperson.net vimeo.com *.vimeo.com *.youtube.com cdn.onesignal.com e.issuu.com fast.wistia.net forms.hsforms.com host.visualcalc.com js.hsadspixel.net js.hsforms.net pixel.mathtag.com players.brightcove.net static.addtoany.com www.buzzsprout.com www.pinterest.ca www.pinterest.co.uk www.pinterest.com www.pinterest.fr www.pinterest.it www.pinterest.ph ct.pinterest.com www.thinglink.com forms.hubspot.com *.roobrik.com *.cloudfront.net sanford.az1.qualtrics.com www.groupexpro.com;frame-ancestors 'self' *.mysanfordchart.org *.snapchat.com;connect-src 'self' *.amplitude.com cdn.jsdelivr.net cdn.rlets.com cdnjs.cloudflare.com cloud.typography.com code.jquery.com www.googletagmanager.com *.addthis.com *.adroll.com *.clarity.ms *.doubleclick.net *.g.doubleclick.net *.gannettdigital.com *.google.com *.analytics.google.com *.google-analytics.com *.googleadservices.com *.googleapis.com *.gstatic.com *.linkedin.oribi.io onesignal.com *.onesignal.com *.pinterest.com *.quantcount.com *.reachlocalservices.com *.serving-sys.com *.snapchat.com *.squadup.com *.twitter.com *.vimeocdn.com *.z1.dca0.com api.hubapi.com az416426.vo.msecnd.net bat.bing.com dc.services.visualstudio.com *.hsforms.com *.hubspot.com js.hs-scripts.com hubspot-forms-static-embed.s3.amazonaws.com js.hsadspixel.net forms.hscollectedforms.net js.hscollectedforms.net n2.mouseflow.com pnapi.invoca.net sanfordhealth.formstack.com *.formstack.io usageanalytics.coveo.com *.cloud.coveo.com px.ads.linkedin.com snap.licdn.com sc-static.net api.sanfordhealth.org api-js.mixpanel.com *.instabot.io api.fbanalytics.org connect.facebook.net assets.sitescdn.net *.cloudfront.net siteimproveanalytics.com *.roobrik.com services.cattailsservices.com *.consumerism.pressganey.com;form-action 'self' *.fontawesome.com cdnjs.cloudflare.com *.sanfordhealthfoundation.org *.adroll.com *.doubleclick.net *.google.com *.google-analytics.com *.googleapis.com *.gstatic.com *.pinterest.com *.serving-sys.com *.snapchat.com *.vimeocdn.com api.hubapi.com forms.hsforms.com forms.hubspot.com hubspot-forms-static-embed.s3.amazonaws.com;media-src * data:;object-src 'none';worker-src 'self' blob: *.amplitude.com;report-uri https://csp-reporting.sanfordhealth.org/; 3
default-src 'self'; script-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss:; frame-src 'self' https:; worker-src 'self' blob:; media-src 'self' https: data: blob:; object-src 'none'; frame-ancestors 'self'; base-uri 'self' https:; form-action 'self' https:; report-uri https://o4506236539830272.ingest.us.sentry.io/api/4511266129117184/security/?sentry_key=f64ced49b50af8fd26d68bc004aeca86; report-to csp-endpoint 3
default-src 'self'; img-src 'self' https://listafirme.ro https://secure.payu.ro/images/ https://*.ytimg.com https://flagcdn.com https://mdbootstrap.com https://img.youtube.com https://*.googleusercontent.com https://*.googleapis.com https://*.gstatic.com https://*.google.com https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.google.ro/ https://googleads.g.doubleclick.net https://www.googleadservices.com data:; frame-src https://listafirme.ro https://platform.listafirme.ro/ https://www.youtube-nocookie.com https://www.youtube.com https://static.addtoany.com https://www.google.com https://accounts.google.com https://*.firebaseapp.com; script-src 'self' https://listafirme.ro https://secure.payu.ro/ https://www.googletagmanager.com https://*.google-analytics.com https://listafirme.eu https://static.addtoany.com https://platform.listafirme.ro https://cdn.jsdelivr.net https://*.cloudflare.com 'unsafe-inline' 'wasm-unsafe-eval' https://*.google.com https://*.googleapis.com https://*.gstatic.com https://static.cloudflareinsights.com https://*.cookie-script.com https://googleads.g.doubleclick.net https://www.googleadservices.com; style-src 'self' 'unsafe-inline' https://listafirme.ro https://*.cloudflare.com https://*.google.com https://*.googleapis.com https://www.googletagmanager.com; font-src 'self' https://listafirme.ro https://*.cloudflare.com https://*.googleapis.com https://*.gstatic.com; connect-src 'self' https://listafirme.ro  https://platform.listafirme.ro https://*.googlevideo.com https://*.google.com https://*.google-analytics.com https://*.googlesyndication.com https://static.addtoany.com https://*.googleapis.com https://cloudflareinsights.com https://www.googletagmanager.com https://*.cookie-script.com https://www.googleadservices.com https://*.cloudflareinsights.com; object-src 'none'; base-uri 'self'; form-action 'self'; 3
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: 3
default-src 'self'; script-src 'self' 'unsafe-inline'   https://view.ceros.com   https://assets.investisdigital.com   https://*.hsforms.net   https://*.screen9.com   https://maps.googleapis.com   https://www.google.com   https://www.gstatic.com   https://www.googletagmanager.com   https://www.google-analytics.com   https://cdn.cookielaw.org; style-src 'self' 'unsafe-inline'   https://assets.investisdigital.com   https://*.screen9.com   https://fonts.googleapis.com   https://maps.googleapis.com   https://cdn.cookielaw.org; img-src 'self' data: blob:   https://edit.skanska.com   https://maps.gstatic.com   https://maps.googleapis.com   https://*.google-analytics.com   https://*.hsforms.net   https://*.hsforms.com   https://*.screen9.com   https://googleads.g.doubleclick.net   https://www.googleadservices.com   https://www.facebook.com   https://cdn.cookielaw.org; font-src 'self'   https://fonts.gstatic.com   https://assets.investisdigital.com   https://cdn.cookielaw.org; connect-src 'self'   https://*.hsforms.com   https://forms.hscollectedforms.net   https://hubspot-forms-static-embed.s3.amazonaws.com   https://assets.investisdigital.com   https://*.screen9.com   https://view.ceros.com   https://*.google-analytics.com   https://analytics.google.com   https://maps.googleapis.com   https://cdn.cookielaw.org   https://geolocation.onetrust.com; frame-src   https://view.ceros.com   https://*.hsforms.net   https://*.hsforms.com   https://www.google.com   https://td.doubleclick.net   https://googleads.g.doubleclick.net   https://www.googletagmanager.com   https://jobylon.com   https://*.jobylon.com   https://airtools-skanska.prod-mid-euw3.investis.com   https://*.screen9.com; media-src 'self'   https://*.screen9.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://*.hsforms.com; frame-ancestors 'self' https://edit.skanska.com; 3
default-src 'self';form-action 'self'; object-src 'self'; frame-ancestors 'self'; connect-src 'self' ely-keskus.fi *.youtube.com *.tyomarkkinatori.fi *.ahtp.fi keha-matomo-sdg-qa-qa.azurewebsites.net *.cookiebot.com wss://*.tyomarkkinatori.fi *.elisa.fi wss://*.elisa.fi tetyomarkkinatori.boost.ai lukija.aimater.com fonts.gstatic.com data:; style-src 'self' 'unsafe-inline' *.elisa.fi fonts.googleapis.com *.youtube.com gstatic.com blob:; img-src * data: blob:; worker-src 'self' blob:; script-src 'self' 'unsafe-inline' *.tyomarkkinatori.fi *.ahtp.fi *.elisa.fi lukija.aimater.com tetyomarkkinatori.boost.ai *.cookiebot.com keha-matomo-sdg-qa-qa.azurewebsites.net youtube.com blob:; frame-src 'self' data: feed.mikle.com *.elisadesk.com *.cookiebot.com *.youtube.com; media-src 'self' data: blob:; font-src 'self' data: fonts.gstatic.com; report-uri https://csp-report-fa-prod.azurewebsites.net/api/csp-report; 3
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com *.yotpo.com 'self' data: fonts.fanplayr.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com webpay3g.transbank.cl webpay3gint.transbank.cl *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.google.com.ar *.google.com.uy *.hotjar.com *.doubleclick.net www.mercadolibre.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://sparta.cl/ https://newbalance.cl/ https://head.cl/ https://spyder.cl/ https://trekbikeschile.com/ https://www.dynamicyield.org/ku/ *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com blob: gen.sendtric.com *.yotpo.com *.google.com *.google.com.ar *.google.com.uy *.facebook.com *.doubleclick.net sparta.cl newbalance.cl head.cl speedo.cl spyder.cl trekbikes.cl *.sparta.cl *.newbalance.cl *.head.cl *.speedo.cl *.spyder.cl *.trekbikes.cl www.mercadolibre.com www.mercadopago.cl 'self' data: *.googleapis.com *.yandex.ru *.retailrocket.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.xtento.com cdn.xtento.com cdn.fanplayr.com collect.fanplayr.com d38nbbai6u794i.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com widget.freshworks.com mcdn.retailrocket.net *.google.com.ar *.google.com.uy *.googleoptimize.com *.gstatic.com *.googletagmanager.com *.googleapis.com *.fanplayr.com *.facebook.net *.yotpo.com *.doubleclick.net *.magentosite.cloud *.freshworks.com *.hotjar.com *.retailrocket.net *.yandex.ru *.api.useinsider.com www.mercadopago.com www.mercadopago.cl sdk.mercadopago.com www.dynamicyield.org js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.xtento.com cdn.xtento.com analytics.tiktok.com www.tiktok.com business.tiktok.com https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js 'unsafe-inline' cdn.fanplayr.com static.fanplayr.com d38nbbai6u794i.cloudfront.net my.fanplayr.com e1.fanplayr.com w1.fanplayr.com ajax.googleapis.com www.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com widget.freshworks.com *.googleapis.com sparta.cl newbalance.cl head.cl speedo.cl spyder.cl trekbikes.cl *.sparta.cl *.newbalance.cl *.head.cl *.speedo.cl *.spyder.cl *.trekbikes.cl *.yotpo.com *.fonts.net *.magentosite.cloud *.freshworks.com *.retailrocket.net assets.braintreegateway.com 'unsafe-inline' fonts.fanplayr.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com widget.freshworks.com mcdn.retailrocket.net *.google-analytics.com *.yotpo.com *.freshworks.com *.googleapis.com stats.g.doubleclick.net *.yandex.ru api.mercadopago.com events.mercadopago.com www.mercadolibre.com *.retailrocket.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com analytics.tiktok.com www.tiktok.com business.tiktok.com https://tagging.sparta.cl d38nbbai6u794i.cloudfront.net recommendations.fanplayr.com site-speed.fanplayr.com cdn.fanplayr.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://spartacl.report-uri.com/r/d/csp/reportOnly; report-to report-endpoint; 3
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com fonts.googleapis.com *.googleapis.com data: https://fonts.gstatic.com *.stape.io *.fontawesome.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com d114hh0cykhyb0.cloudfront.net *.mida.so data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com google.com *.braintreegateway.com *.paypal.com *.google.com www.google.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.stape.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com superbrightleds.atlassian.net *.criteo.com *.criteo.net *.nr-data.net *.trustpilot.com *.pinimg.com *.pinterest.com *.licdn.com *.linkedin.com *.vwo.com *.facebook.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.trackedlink.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.doubleclick.net *.stape.io https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://redchamps.com livehelpnow.net *.livehelpnow.net *.placeholder.com *.cloudfront.net *.trustkeeper.net *.trustwave.com *.digicert.com dis.criteo.com tags.bluekai.com secure.adnxs.com sync.ad-stir.com *.yahoo.com *.360yield.com *.3lift.com *.addthis.com *.adnxs.com *.adscale.de *.advertising.com *.agkn.com *.amazon-adsystem.com *.bbb.org *.bidswitch.net *.bing.com *.casalemedia.com *.clmbtech.com *.contextweb.com *.criteo.com *.demdex.net *.dmxleo.com matching.ivitrack.com *.krxd.net *.liadm.com mcprod.superbrightleds.com *.media.net exchange.mediavine.com partner.mediawallahscript.com *.omnitagjs.com *.outbrain.com *.postrelease.com *.pubmatic.com *.revcontent.com *.rlcdn.com *.rubiconproject.com *.sharethrough.com *.smaato.net *.socdm.com *.smartadserver.com *.stickyadstv.com *.taboola.com *.tapad.com *.teads.tv ad.tpmn.co.kr *.tremorhub.com *.turn.com *.yieldlab.net *.yieldmo.com *.zonos.com *.pinimg.com *.pinterest.com *.linkedin.com *.visualwebsiteoptimizer.com id5-sync.com a.twiago.com sync.1rx.io *.facebook.com bzr.openai.com *.mida.so data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.googletagmanager.com *.doubleclick.net *.stape.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com superbrightleds.atlassian.net *.digicert.com *.criteo.net *.criteo.com *.zonos.com *.trustpilot.com *.iglobalstores.com *.mixpanel.com *.mxpnl.com *.pinimg.com *.pinterest.com *.googleoptimize.com pageimprove.io *.licdn.com *.linkedin.com *.visualwebsiteoptimizer.com *.vwo.com *.facebook.net *.livehelpnow.net *.bing.com bzrcdn.openai.com *.mida.so *.maxmind.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com webchat.dotdigital.com webchat.staging.dotdigital.com downloads.mailchimp.com https://fonts.googleapis.com *.googleapis.com *.googletagmanager.com *.stape.io *.fontawesome.com https://fonts.bunny.net *.stripe.network *.stripecdn.com *.amazon.com d114hh0cykhyb0.cloudfront.net http://localhost:* *.mida.so *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com places.googleapis.com *.doubleclick.net *.googlesyndication.com *.stape.io https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.criteo.com *.zonos.com *.mixpanel.com *.pinimg.com *.pinterest.com pageimprove.io *.visualwebsiteoptimizer.com *.facebook.com bzr.openai.com *.mida.so *.mmapiws.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; report-uri https://csp-report.envytools.com 3
font-src data: *.gstatic.com *.tryggehandel.net tryggehandel.net *.googleapis.com googleapis.com *.adsrvr.org data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.collector.se *.cardinalcommerce.com *.jobylon.com *.doubleclick.net *.proffs.se *.walleydev.com *.walleypay.com doubleclick.net *.adsrvr.org *.dotdigital-pages.com *.dotdigital.com *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com googleadservices.com google-analytics.com *.magentocommerce.com *.s.ytimg.com *.googleadservices.com *.google-analytics.com *.googleapis.com googleapis.com *.gstatic.com *.collector.se *.adnxs.com *.byggmax.se *.byggmax.no *.byggmax.fi *.byggmax.dk *.byggmax.com byggmax.se byggmax.no byggmax.fi byggmax.com byggmax.dk www.byggmax.se www.byggmax.no www.byggmax.fi www.byggmax.dk *.bing.com bing.com *.teads.tv teads.tv *.smartadserver.com smartadserver.com *.rubiconproject.com rubiconproject.com *.3lift.com 3lift.com *.smaato.net *.taboola.com taboola.com *.doubleclick.com *.360yield.com 360yield.com *.yahoo.com *.casalemedia.com casalemedia.com *.openx.net *.sharethrough.com sharethrough.com *.bidswitch.net *.pubmatic.com pubmatic.com *.omnitagjs.com omnitagjs.com *.yieldmo.com yieldmo.com *.ivitrack.com ivitrack.com *.advertising.com *.stickyadstv.com *.media.net media.net *.doubleclick.net *.e-planning.net *.clmbtech.com *.adform.net adform.net *.liadm.com *.postrelease.com postrelease.com *.smartclip.net *.krxd.net *.ad-stir.com *.outbrain.com outbrain.com *.tremorhub.com tremorhub.com *.demdex.net *.pingdom.net *.adscale.de *.twiago.com *.google.com *.google.se *.bluekai.com *.wisepops.com *.tapad.com *.mgid.com *.rambler.ru *.thebrighttag.com *.walleypay.com *.1rx.io 1rx.io id5-sync.com *.id5-sync.com *.mediavine.com mediavine.com *.yieldlab.net yieldlab.net *.emxdgt.com emxdgt.com *.unrulymedia.com unrulymedia.com *.tryggehandel.net tryggehandel.net adnxs.com cm.g.doubleclick.net bidswitch.net www.facebook.com *.quantserve.com quantserve.com *.adsrvr.org *.trackedlink.net https://cdn.flbx.io data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google-analytics.com *.collector.se *.assets.adobedtm.com *.authorize.net *.geostag.cardinalcommerce.com *.paypal.com *.vimeo.com *.ccdc02.com google.com *.braintreegateway.com *.ytimg.com *.signifyd.com *.adnxs.com adnxs.com adtr.io *.googletagmanager.com *.trackedlink.net *.jobylon.com *.doubleclick.net doubleclick.net *.googleapis.com googleapis.com *.byggmax.se *.byggmax.no *.byggmax.fi *.byggmax.com *.byggmax.dk byggmax.se byggmax.no byggmax.fi byggmax.com byggmax.dk www.byggmax.se www.byggmax.no www.byggmax.fi www.byggmax.dk *.bing.com *.hotjar.com hotjar.com bing.com *.cloudflare.com *.wisepops.com *.facebook.net facebook.net *.quantserve.com quantserve.com *.quantcount.com *.cloudflareinsights.com *.pingdom.net pingdom.net *.getflowbox.net *.kuvio.io kuvio.io *.walleydev.com *.tryggehandel.net tryggehandel.net *.dynamicyield.com dynamicyield.com *.testfreaks.com testfreaks.com *.walleypay.com *.videoly.co dialogtrail.com *.dialogtrail.com wisepops.net *.wisepops.net *.adsrvr.org *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.trustpilot.com https://cdn.flbx.io https://connect.getflowbox.com http://connect.getflowbox.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com googleapis.com *.byggmax.se *.byggmax.no *.byggmax.fi *.byggmax.dk www.byggmax.se www.byggmax.no www.byggmax.fi www.byggmax.dk *.adsrvr.org *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.flbx.io flbx.io *.adsrvr.org 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.wisepops.com *.google-analytics.com google-analytics.com *.collector.se *.pingdom.net pingdom.net *.adnxs.com adnxs.com *.walleydev.com *.walleypay.com *.dynamicyield.com dynamicyield.com www.google.com google.com *.google.com *.doubleclick.net doubleclick.net *.dialogtrail.com dialogtrail.com *.ebbot.app ebbot.app *.adsrvr.org *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https://*.amazonaws.com https://cdn.flbx.io https://connect.getflowbox.com http://connect.getflowbox.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com; frame-src 'self' https://www.googletagmanager.com; 3
default-src 'none'; script-src 'none'; script-src-elem 'none'; style-src 'none'; style-src-elem 'none'; img-src 'none'; font-src 'none'; media-src 'none'; connect-src 'none'; frame-src 'none'; worker-src 'none'; object-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; manifest-src 'none'; report-uri https://csp-report.onmobilepay.com/csp-report 3
font-src *.gstatic.com mcstaging.iochile.cl mcstaging.magriffe.cl mcstaging.ashchile.cl www.iochile.cl www.magriffe.cl www.ashchile.cl *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.transbank.cl *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.newrelic.com *.herokuapp.com *.doubleclick.net/ *.googleapis.com mcstaging.iochile.cl mcstaging.magriffe.cl mcstaging.ashchile.cl www.iochile.cl www.magriffe.cl www.ashchile.cl *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.google.com.ar *.instagram.com *.cdninstagram.com *.gstatic.com *.facebook.com *.newrelic.com *.clarity.ms *.bing.com *.googleapis.com mcstaging.iochile.cl mcstaging.magriffe.cl mcstaging.ashchile.cl www.iochile.cl www.magriffe.cl www.ashchile.cl www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page *.googleapis.com *.woowup.com *.herokuapp.com *.instagram.com *.facebook.net *.newrelic.com *.nr-data.net *.clarity.ms mcstaging.iochile.cl mcstaging.magriffe.cl mcstaging.ashchile.cl www.iochile.cl www.magriffe.cl www.ashchile.cl onesignal.com *.onesignal.com *.avada.io player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.herokuapp.com *.newrelic.com mcstaging.iochile.cl mcstaging.magriffe.cl mcstaging.ashchile.cl www.iochile.cl www.magriffe.cl www.ashchile.cl *.fontawesome.com unsafe-inline assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com *.google.com.ar *.doubleclick.com *.doubleclick.net *.newrelic.com *.nr-data.net *.clarity.ms mcstaging.iochile.cl mcstaging.magriffe.cl mcstaging.ashchile.cl www.iochile.cl www.magriffe.cl www.ashchile.cl https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.google-analytics.com *.facebook.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src mcstaging.iochile.cl mcstaging.magriffe.cl mcstaging.ashchile.cl www.iochile.cl www.magriffe.cl www.ashchile.cl 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
font-src www.paypalobjects.com cash-f.squarecdn.com fonts.gstatic.com all4running.nl *.all4running.nl all4running.be *.all4running.be 21run.com *.21run.com *.dhlparcel.nl https://widgets.trustedshops.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * all4running.nl *.all4running.nl all4running.be *.all4running.be 21run.com *.21run.com *.facebook.com *.facebook.net 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ * all4running.nl *.all4running.nl all4running.be *.all4running.be 21run.com *.21run.com *.doubleclick.net *.facebook.com *.facebook.net 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com * https://images.unsplash.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com *.imgix.net all4running.nl *.all4running.nl all4running.be *.all4running.be 21run.com *.21run.com maps.gstatic.com *.googleapis.com *.bing.com *.google.nl *.facebook.com *.facebook.net *.hsforms.net *.hsforms.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.bazaarvoice.com widgets.trustedshops.com 'self' data: data: 'self' 'unsafe-inline'; script-src www.google-analytics.com googleads.g.doubleclick.net www.googleadservices.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.hotjar.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://maps.googleapis.com https://player.vimeo.com *.googletagmanager.com tagmanager.google.com all4running.nl *.all4running.nl all4running.be *.all4running.be 21run.com *.21run.com *.dhlparcel.nl *.googleapis.com *.bing.com *.facebook.com *.facebook.net https://player.vimeo.com/api/player.js cdn.belco.io *.hsforms.net *.hsforms.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.bazaarvoice.com widgets.trustedshops.com *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.cash.app tagmanager.google.com fonts.google.com all4running.nl *.all4running.nl all4running.be *.all4running.be 21run.com *.21run.com *.dhlparcel.nl https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com * https://maps.googleapis.com https://player.vimeo.com *.googletagmanager.com all4running.nl *.all4running.nl all4running.be *.all4running.be 21run.com *.21run.com *.dhlparcel.nl *.googleapis.com *.google.com *.doubleclick.net *.googlesyndication.com cdn.belco.io wss://chat.belco.io t.elasticsuite.io *.hsforms.net *.hsforms.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.bazaarvoice.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; frame-ancestors 'self'; object-src 'none'; base-uri 'self' 3
default-src 'self'; script-src 'self' 'report-sample' https://netdesk.netsite.dk https://checkout.reepay.com; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self' https://netdesk.netsite.dk wss://netdesk.netsite.dk https://checkout.reepay.com; frame-src https://checkout.reepay.com; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; report-uri /api/csp-report; 3
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.certcapture.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com js.mollie.com www.xtento.com *.zuora.com *.worldpay.com theteachingcompanysalesllc.demdex.net *.pinterest.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com theteachingcompany.d1.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.certcapture.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com https://images.unsplash.com https://www.mollie.com www.xtento.com cdn.xtento.com *.teach12.com *.thegreatcoursesplus.com prd.jwpltx.com *.pinterest.com bat.bing.com *.amazon-adsystem.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.certcapture.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com https://maps.googleapis.com *.avada.io js.mollie.com www.xtento.com cdn.xtento.com cdnjs.cloudflare.com *.fontawesome.com acsbap.com acsbapp.com *.acsbap.com *.acsbapp.com *.teach12.com *.tiqcdn.com cltgtstor001.blob.core.windows.net *.gstatic.com *.zuora.com *.worldpay.com *.jwpcdn.com analytics.tiktok.com *.bitmovin.com *.visioncritical.com bat.bing.com www.dwin1.com *.amazon-adsystem.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com display.ugc.bazaarvoice.com *.fontawesome.com cdnjs.cloudflare.com *.typekit.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.teach12.com *.bitmovin.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.certcapture.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com https://maps.googleapis.com https://player.vimeo.com https://get.geojs.io *.avada.io theteachingcompany.d1.sc.omtrdc.net *.fontawesome.com *.acsbap.com *.acsbapp.com *.bitmovin.com *.slgnt.us *.tgcmag.com *.thegreatcourses.com *.theplatform.com teachco-mp4.akamaized.net *.cloudfunctions.net *.pinterest.com analytics.tiktok.com *.tealiumiq.com *.amazon-adsystem.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.solidgate.com *.cdn-apple.com *.stackadapt.com *.cookielaw.org *.tiktok.com *.snapchat.com *.googletagmanager.com *.connect.facebook.net *.sc-static.net *.bing.com *.taboola.com https://s.axon.ai https://c.albss.com *.impactcdn.com *.rtbrain.app https://fast.ssqt.io *.applovin.com *.google.com *.paypal.com *.doubleclick.net *.googleadservices.com *.forter.com *.cloudfront.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' *.gstatic.com *.cdn-apple.com; img-src 'self' data: blob: https:; frame-src 'self' *.solidgate.com *.cdn-apple.com *.google.com *.paypal.com *.snapchat.com *.rtbrain.app; connect-src 'self' *.solidgate.com *.solidgate-dev.com *.stackadapt.com *.tiktok.com *.tiktokw.us *.snapchat.com *.amazonaws.com *.applovin.com *.eppo.cloud *.sentry.io *.onetrust.com *.cookielaw.org *.googleapis.com *.rtbrain.app *.googletagmanager.com https://connect.facebook.net https://www.facebook.com *.bing.com *.taboola.com *.paypal.com *.google.com *.asqq.io *.sjv.io *.pxf.io *.impactcdn.com *.impct.site *.browser-intake-datadoghq.com *.forter.com wss://*.forter.com *.cloudfront.net https://1.1.1.1 *.siteperformancetest.net https://siteperformancetest.net; worker-src 'self' blob:; object-src 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub693ad1773743e9192bc387fd4c7cb969&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Awellfunnel%2Cenv%3Aprod 3
font-src fonts.gstatic.com use.typekit.net *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://www.facebook.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com www.google.com *.facebook.com *.dotdigital-pages.com *.dotdigital.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://plumrocket.com *.weltpixel.com 'self' 'unsafe-inline'; img-src https://assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net https://www.facebook.com https://www.google.co.in https://cdn.hoolah.co https://scontent.cdninstagram.com/ https://d27eqfoeueoniv.cloudfront.net https://amcglobal.sc.omtrdc.net https://dpm.demdex.net https://scontent-sin6-1.cdninstagram.com https://scontent-sin6-2.cdninstagram.com/ https://scontent-sin6-3.cdninstagram.com https://scontent-sin6-4.cdninstagram.com *.clarity.ms *.bing.com *.trackedlink.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.dycdn.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-ds.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://connect.facebook.net *.tiktok.com *.cloudfront.net *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.paypal.com *.paypalobjects.com *.googleapis.com *.gstatic.com *.google.com www.facebook.com https://merchant.cdn.hoolah.co https://merchant.cdn.hoolah.co.net *.trackedweb.net *.hit-pay.com *.clarity.ms https://hit-pay.com/hitpay.js https://am.freshrelevance.com/ *.assets.adobedtm.com *.trackedlink.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.dycdn.net dn1i8v75r669j.cloudfront.net dkpklk99llpj0.cloudfront.net ds9p2a60lh6fp.cloudfront.net am.freshrelevance.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://merchant.cdn.hoolah.co https://cdn.hoolah.co https://cdnjs.cloudflare.com downloads.mailchimp.com *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io commerce.adobe.net qa-api.magedevteam.com *.sentry.io *.doubleclick.net *.facebook.net *.facebook.com https://web.facebook.com *.demdex.net *.omtrdc.net *.tiktok.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.paypal.com *.paypalobjects.com *.trackedweb.net https://melissa.com.sg/fbe/Pixel/ProductInfoForAddToCart *.clarity.ms wss://am.freshrelevance.com/ https://am.freshrelevance.com *.dycdn.net *.trackedlink.net *.dotdigital-pages.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com am.freshrelevance.com wss://am.freshrelevance.com wss://am.dycdn.net dn1i8v75r669j.cloudfront.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.analytics.google.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.authorize.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.google.co.uk maps.googleapis.com ossineshoes.com *.ossineshoes.com ossinework.com *.ossinework.com shoeco.shoes *.shoeco.shoes modernshoe.com *.modernshoe.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google-analytics.com *.googletagmanager.com *.gstatic.com maps.googleapis.com cdn.datatables.net https://cdnjs.cloudflare.com *.authorize.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.fontawesome.com cdn.datatables.net stackpath.bootstrapcdn.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googletagmanager.com *.doubleclick.net maps.googleapis.com ossineshoes.com *.ossineshoes.com ossinework.com *.ossinework.com shoeco.shoes *.shoeco.shoes modernshoe.com *.modernshoe.com *.authorize.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://ossineshoes.com/csp-report; report-to report-endpoint; 3
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://challenges.cloudflare.com https://wsrv.nl https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://wsrv.nl https://image.tmdb.org https://s4.anilist.co https://yt3.googleusercontent.com https://*.googleusercontent.com https://i.ytimg.com https://i.imgur.com https://imgur.com https://i.ibb.co https://upload.wikimedia.org https://graph.facebook.com https://images.weserv.nl https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://provider-static.plex.tv https://images.pluto.tv https://tvpnlogopus.samsungcloud.tv https://images.sr.roku.com https://xstreamcp-assets-msp.streamready.in https://canvas-lb.tubitv.com https://jiotvimages.cdn.jio.com https://dtil.tmsimg.com https://iptvx.one https://a.espncdn.com https://pbs.twimg.com https://www.lyngsat.com https://static.wikia.nocookie.net https://www.vivalivetv.com https://i.gyazo.com https://raw.githubusercontent.com https://github.com https://*.fbcdn.net https://english.cdn.zeenews.com https://india.mom-gmr.org; font-src 'self' data:; media-src 'self' blob: https:; frame-src 'self' https://embed.st https://*.embed.st https://2embed.cc https://*.2embed.cc https://2embed.skin https://*.2embed.skin https://2embed.org https://*.2embed.org https://vidsrc.in https://*.vidsrc.in https://vidsrc.cc https://*.vidsrc.cc https://vidsrc.icu https://*.vidsrc.icu https://vidsrc.net https://*.vidsrc.net https://vidlink.pro https://*.vidlink.pro https://autoembed.cc https://*.autoembed.cc https://autoembed.net https://*.autoembed.net https://superembed.stream https://*.superembed.stream https://multiembed.mov https://*.multiembed.mov https://vidbinge.to https://*.vidbinge.to https://embed.su https://*.embed.su https://smashystream.com https://*.smashystream.com https://vidfast.pro https://*.vidfast.pro https://mappletv.uk https://*.mappletv.uk https://www.fmovies.direct https://daddylive.eu https://*.daddylive.eu https://thetvapp.to https://*.thetvapp.to https://kaido.to https://*.kaido.to https://miruro.tv https://*.miruro.tv https://miruro.com https://*.miruro.com https://anicrush.to https://*.anicrush.to https://megaplay.buzz https://*.megaplay.buzz https://animeplay.cfd https://*.animeplay.cfd https://vidnest.fun https://*.vidnest.fun https://anilink.cc https://*.anilink.cc https://megavid.buzz https://*.megavid.buzz https://challenges.cloudflare.com https://www.youtube.com https://*.youtube.com https://www.youtube-nocookie.com https://*.youtube-nocookie.com https://dlhd.pk https://*.dlhd.pk https://dlhd.sx https://*.dlhd.sx https://dlhd.so https://*.dlhd.so https://daddylive.sx https://*.daddylive.sx https://1ststreams.cfd https://*.1ststreams.cfd https://jimpenopisonline.online https://*.jimpenopisonline.online https://newkso.ru https://*.newkso.ru https://phantemlis.top https://*.phantemlis.top https://tv.garden https://*.tv.garden https://famelack.com https://*.famelack.com https://ustvgo.tv https://*.ustvgo.tv https://timetv.live https://*.timetv.live https://watchtvonline.cc https://*.watchtvonline.cc https://wwitv.com https://*.wwitv.com; connect-src 'self' wss: https: https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.com https://mc.webvisor.org; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; report-uri /v1/csp/report 3
default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; frame-ancestors 'self'; form-action 'self'; 3
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://challenges.cloudflare.com https://cdnjs.cloudflare.com https://*.optimizely.com https://static.addtoany.com https://cdn.jsdelivr.net https://*.trustpilot.com https://unpkg.com https://*.googletagmanager.com https://*.google-analytics.com https://*.clarity.ms https://*.doubleclick.net https://*.googleadservices.com https://*.googleapis.com https://*.google.com https://elfsightcdn.com https://*.elfsightcdn.com https://*.elfsight.com https://*.tawk.to https://*.bing.com https://*.facebook.net https://c.webtrends-optimize.com https://pixel.byspotify.com https://*.tiktok.com https://sc-static.net https://*.wistia.net https://*.wistia.com https://*.snapchat.com https://*.sentry-cdn.com https://*.flywire.com; frame-src 'self' https://challenges.cloudflare.com https://*.cdn.optimizely.com https://static.addtoany.com https://widget.trustpilot.com https://*.youtube.com https://*.youtube-nocookie.com https://tr.snapchat.com https://*.wistia.net https://*.wistia.com https://*.facebook.com https://*.flywire.com https://*.kaplantestofenglish.com; frame-ancestors 'self'; base-uri 'self'; report-uri /report-csp-violation; upgrade-insecure-requests 3
default-src 'self'; frame-ancestors 'self'; 3
default-src 'none'; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://region1.google-analytics.com https://dgap.org https://createsend.com https://api.friendlycaptcha.com https://internationalepolitik.de https://static.elfsight.com https://core.service.elfsight.com https://universe-static.elfsightcdn.com https://matomo.dgap.org/; font-src 'self' data: dgap.org https://player.podigee-cdn.net https://fonts.gstatic.com; frame-src 'self' https://dgap.org https://www.internationalepolitik.de https://www.ip-quarterly.com https://www.youtube-nocookie.com/embed/ https://e.issuu.com https://www.google.com https://player.podigee-cdn.net https://av.dgap.org https://av.internationalepolitik.de https://av.ip-quarterly.com https://matomo.dgap.org https://www.openstreetmap.org https://cloud.dgap.org https://audio.podigee-cdn.net https://sign.dgap.dev https://www.helpmundo.de https://www.helpdirect.org https://tube.dgap.org; img-src 'self' https://www.gstatic.com https://*.met.vgwort.de https://www.googletagmanager.com https://www.google-analytics.com data: dgap.org https://matomo.dgap.org https://images.podigee-cdn.net https://region1.google-analytics.com; manifest-src 'self'; media-src 'self' https://audio.podigee-cdn.net; prefetch-src 'self'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://dgap.org https://matomo.dgap.org https://www.google-analytics.com https://www.googletagmanager.com https://internationalepolitik.de https://ip-quarterly.com https://js.createsend1.com https://player.podigee-cdn.net https://audio.podigee-cdn.net https://www.helpmundo.de https://www.helpdirect.org cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.google.com unpkg.com https://matomo.dgap.org/; script-src-attr 'self' 'report-sample'; script-src-elem 'self' 'report-sample' 'unsafe-inline' https://dgap.org https://www.googletagmanager.com https://www.google-analytics.com https://matomo.dgap.org https://js.createsend1.com https://player.podigee-cdn.net https://audio.podigee-cdn.net https://www.helpmundo.de https://www.helpdirect.org https://static.elfsight.com https://core.service.elfsight.com https://universe-static.elfsightcdn.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.google.com unpkg.com; style-src 'self' 'report-sample' 'unsafe-inline' https://js.createsend1.com https://www.gstatic.com https://dgap.org https://player.podigee-cdn.net https://audio.podigee-cdn.net cdnjs.cloudflare.com https://cdnjs.cloudflare.com unpkg.com; style-src-attr 'self' 'report-sample' 'unsafe-inline'; style-src-elem 'self' 'report-sample' 'unsafe-inline' https://www.google.com https://dgap.org https://player.podigee-cdn.net https://audio.podigee-cdn.net cdnjs.cloudflare.com https://cdnjs.cloudflare.com unpkg.com; worker-src 'self' blob:; form-action 'self' https://www.createsend.com https://dgap.org; frame-ancestors 'self' https://dgap.org https://www.internationalepolitik.de https://www.ip-quarterly.com https://av.dgap.org https://av.internationalepolitik.de https://av.ip-quarterly.com https://sign.dgap.dev; report-uri /en/system/reporting/default; report-to default 3
font-src fonts.gstatic.com use.typekit.net maxcdn.bootstrapcdn.com *.fontawesome.com https://widgets.trustedshops.com https://www.gstatic.com https://fonts.gstatic.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.baktotaal.nl *.baktotaal.de *.baktotaal.com baktotaal.nl baktotaal.de baktotaal.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.multisafepay.com https://pay.google.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com challenges.cloudflare.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com *.criteo.com consentcdn.cookiebot.eu consentcdn.cookiebot.com *.facebook.com www.googletagmanager.com td.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io magefan.com cm.magefan.com *.multisafepay.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com *.disqus.com https://firebasestorage.googleapis.com maps.gstatic.com ts.tradetracker.net www.magmodules.eu *.gstatic.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com *.baktotaal.nl *.baktotaal.de *.baktotaal.com *.cloudfront.net www.google.nl permalink.psinfoodservice.com www.facebook.com *.linkedin.com *.squeezely.tech *.bing.net *.criteo.com *.usercentrics.eu *.cookiebot.com *.bing.com *.clarity.ms pagead2.googlesyndication.com google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.multisafepay.com https://pay.google.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://cdnjs.cloudflare.com cdnjs.cloudflare.com *.disqus.com *.avada.io *.shopify.com challenges.cloudflare.com maps.googleapis.com www.gstatic.com tm.tradetracker.net *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com *.criteo.com *.criteo.net squeezely.tech instant.page *.licdn.com *.bing.com *.bing-int.com consent.cookiebot.com consent.cookiebot.eu consentcdn.cookiebot.com consentcdn.cookiebot.eu cdn.jsdelivr.net *.hotjar.com connect.facebook.net *.clarity.ms *.varify.io d5yoctgpv4cpx.cloudfront.net www.google.com pagead2.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.fontawesome.com *.multisafepay.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://cdnjs.cloudflare.com cdnjs.cloudflare.com https://fonts.bunny.net www.gstatic.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.baktotaal.nl *.baktotaal.de *.baktotaal.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.multisafepay.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://get.geojs.io *.avada.io *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com *.baktotaal.nl *.baktotaal.de *.baktotaal.com *.criteo.com consentcdn.cookiebot.com consentcdn.cookiebot.eu *.bing.net *.bing.com *.varify.io *.clarity.ms www.facebook.com p2iqhncxyh.execute-api.eu-central-1.amazonaws.com pagead2.googlesyndication.com www.google.com google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
frame-ancestors 'self' ; object-src 'none' ; report-uri https://cspreports.realpage.com/api/reports/save/report-only; 3
default-src 'self' https: data: blob:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' https: blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https:; 3
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://cdn.checkout.com data: checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.tabby.ai cdn.tabby.sa fonts.googleapis.com storage.googleapis.com *.fontawesome.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.alothemes.com *.magepow.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.ccavenue.ae 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://js.checkout.com *.klarna.com *.ccavenue.ae checkout.tabby.ai checkout.tabby.sa https://c.sharethis.mgr.consensu.org https://secure.ccavenue.ae 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.ccavenue.ae cdn.jsdelivr.net data: checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.tabby.ai cdn.tabby.sa fonts.googleapis.com storage.googleapis.com *.magentocommerce.com *.cloudfront.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu https://events.getxeno.com https://l.sharethis.com https://sharethis.com https://platform-cdn.sharethis.com *.facebook.com *.alothemes.com *.magepow.com *.tamara.co data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.magento-datasolutions.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://cdn.checkout.com *.klarnacdn.net *.ccavenue.ae *.snapchat.com *.spotii.me apigoswirl.com cdn.jsdelivr.net checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.segment.com cdn.sift.com score.jcsc.online seondf.com deviceinf.com getdeviceinf.com *.cloudflare.com *.authorize.net *.braintreegateway.com *.ytimg.com *.paypal.com *.payments-amazon.com *.croapp.net https://sdk.getxeno.com https://unpkg.com https://cdn.jsdelivr.net https://buttons-config.sharethis.com https://platform-api.sharethis.com s7.addthis.com *.googletagmanager.com *.facebook.net *.alothemes.com *.magepow.com cdn.tamara.co maps.googleapis.com *.tamara.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https://cdn.checkout.com apigoswirl.com cdn.jsdelivr.net *.fontawesome.com *.yotpo.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.alothemes.com *.magepow.com *.tamara.co 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tamara.co 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.magento-datasolutions.com *.magento-ds.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://js.checkout.com *.klarnaevt.com *.ccavenue.ae *.snapchat.com *.spotii.me apigoswirl.com api.goswirl.live checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.segment.com api.segment.com api.segment.io api.amplitude.com *.seondfresolver.com *.deviceinfresolver.com *.getdeviceinfresolver.com api.homesrusae.evinent.site homesrusaenew-api.evinent.site api.homesrusqa.evinent.site homesrusqanew-api.evinent.site api.momstore.evinent.site momstorenew-api.evinent.site api.carters.evinent.site *.cloudflare.com *.twitter.com *.twimg.com https://api.getxeno.com https://events.getxeno.com https://l.sharethis.com https://sharethis.com ekr.zdassets.com/ *.google-analytics.com *.alothemes.com *.magepow.com maps.googleapis.com *.tamara.co 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.seondnsresolve.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://stats.afternorth.com https://maps.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com; object-src 'none'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; connect-src 'self' https://stats.afternorth.com https://maps.googleapis.com https://www.google-analytics.com; img-src 'self' data: https://i.realestatecreate.com https://maps1.dnr.state.mn.us https://maps.googleapis.com https://maps.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com; font-src 'self' https://fonts.gstatic.com; 3
font-src fonts.googleapis.com fonts.gstatic.com *.googleapis.com *.gstatic.com data: *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action *.googlesyndication.com *.clarity.ms *.google.com *.facebook.com  'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net *.youtube-nocookie.com www.google.com *.tbibank.ro consentcdn.cookiebot.com *.google.ro *.facebook.com *.mny.ro mny.ro *.weltpixel.com *.googletagmanager.com *.doubleclick.net  *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com https://images.unsplash.com *.tbicp.com *.tbibank.ro imgsct.cookiebot.com *.mny.ro *.google.ro *.clarity.ms *.bing.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com https://firebasestorage.googleapis.com flagpedia.net data: 'self' 'unsafe-inline'; script-src s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com https://maps.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.tbicp.com *.tbibank.ro consentcdn.cookiebot.com *.cookiebot.com *.google.ro *.clarity.ms *.aqurate.ai *.themarketer.com *.mny.ro *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.avada.io *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.google.ro *.fontawesome.com *.tagmanager.google.com *.googletagmanager.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.google.ro *.google.com *.mny.ro 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com consentcdn.cookiebot.com *.googlesyndication.com *.clarity.ms *.google.com google.com *.facebook.com *.aqurate.ai *.themarketer.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app https://get.geojs.io *.avada.io www.gstatic.com  *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://251703a9-46ab-4e4f-ab25-1de6ee452399.sansec.watch/; report-to report-endpoint; 3
default-src https: 3
font-src *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.gstatic.com data: https://fonts.gstatic.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net *.cloudflare.com *.bootstrapcdn.com *.commerce-connector.com *.typekit.net */csp/report/uri/ *.hotjar.com *.hotjar.io *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com *.wahl.com *.userway.org *.yotpo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de api.bazaarvoice.com stg.api.bazaarvoice.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com *.wahl.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.stripe.com stripe.com *.link.com *.amazon.com *.wahl.com; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.zenaps.com *.fls.doubleclick.net display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com *.bluesnap.com *.cardinalcommerce.com *.kaptcha.com *.sentry.io *.google.com *.gstatic.com google.com sandbox.bluesnap.com sandbox1.bluesnap.com sandbox2.bluesnap.com sandpay.bluesnap.com ws.bluesnap.com ws1.bluesnap.com ws2.bluesnap.com pay.bluesnap.com *.klarna.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com js.mollie.com *.adsrvr.org *.hotjar.com *.hotjar.io */csp/report/uri/ *.hubspot.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.paypal.com * https://plumrocket.com *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.wahl.com www.xtento.com *.yotpo.com 'self' 'unsafe-inline'; style-src *.adobe.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app fonts.googleapis.com https://fonts.googleapis.com display.ugc.bazaarvoice.com sandbox.bluesnap.com sandbox1.bluesnap.com sandbox2.bluesnap.com sandpay.bluesnap.com ws.bluesnap.com ws1.bluesnap.com ws2.bluesnap.com pay.bluesnap.com *.cardinalcommerce.com *.kaptcha.com *.sentry.io *.google.com *.gstatic.com google.com api.addressy.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.googleapis.com *.powerreviews.com getfirebug.com cdn.dnky.co webchat.dotdigital.com *.yotpo.com *.cloudflare.com *.bootstrapcdn.com *.wahlclipper.com *.jsdelivr.net *.postcodeanywhere.co.uk *.commerce-connector.com *.typekit.net */csp/report/uri/ unsafe-inline assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com www.gstatic.com cdn.weglot.com *.wahl.com *.userway.org 'self' 'unsafe-inline'; object-src *.wahl.com 'self' 'unsafe-inline'; media-src *.adobe.com *.wahl.com 'self' 'unsafe-inline'; manifest-src *.wahl.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.wepowerconnections.com https://the.sciencebehindecommerce.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com sandbox.bluesnap.com sandbox1.bluesnap.com sandbox2.bluesnap.com sandpay.bluesnap.com ws.bluesnap.com ws1.bluesnap.com ws2.bluesnap.com pay.bluesnap.com *.cardinalcommerce.com *.kaptcha.com *.sentry.io *.google.com *.gstatic.com *.amazonaws.com google.com api.addressy.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com https://get.geojs.io *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com stats.g.doubleclick.net ct.pinterest.com *.google-analytics.com *.whatcounts.com siteanalytics.whatcounts.com https://siteanalytics.whatcounts.com *.amazonaws.com/ *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com *.yotpo.com *.cloudflare.com *.powerreviews.com *.wahlclipper.com *.syndigo.com *.postcodeanywhere.co.uk wss://ws41.hotjar.com *.commerce-connector.com */csp/report/uri/ wss://*.hotjar.com *.hotjar.com *.hotjar.io *.hubspot.com *.hubapi.com *.hs-banner.com edge.curalate.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.stripe.com klarna.com *.link.com x.clarity.ms cdn.cookielaw.org forms.hscollectedforms.net geolocation.onetrust.com api.userway.org cdn77.api.userway.org cdn.userway.org api.weglot.com cdn.weglot.com https://cdn-api-weglot.com *.wahl.com *.hsforms.net *.hsforms.com *.clarity.ms *.pcapredict.com static.hsappstatic.net ad.doubleclick.net pixel-config.reddit.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; base-uri *.wahl.com 'self' 'unsafe-inline'; script-src https://pxl.jivox.com https://secure.adnxs.com https://apps.bazaarvoice.com/ cdn.weglot.com 0409890c10.translations.weglot.io assets.adobedtm.com *.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app https://maps.googleapis.com https://player.vimeo.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com 'self' 'unsafe-inline' sandbox.bluesnap.com sandbox1.bluesnap.com sandbox2.bluesnap.com sandpay.bluesnap.com ws.bluesnap.com ws1.bluesnap.com ws2.bluesnap.com pay.bluesnap.com *.cardinalcommerce.com *.kaptcha.com *.sentry.io *.google.com static.cloudflareinsights.com cdnjs.cloudflare.com google.com api.addressy.com *.klarna.com *.klarnacdn.net *.klarnaservices.com *.avada.io *.shopify.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com connect.facebook.net graph.facebook.com business.facebook.com js.mollie.com pay.google.com applepay.cdn-apple.com *.powerreviews.com js-agent.newrelic.com *.googletagmanager.com https://www.googletagmanager.com/gtm.js bat.bing.com *.google-analytics.com *.googleoptimize.com https://www.googleoptimize.com/optimize.js *.trustedsite.com *.cloudflare.com *.twitter.com *.fontawesome.com *.wahlclipper.com *.googleapis.com *.jsdelivr.net *.bluesnap.com *.webcollage.net *.syndigo.com *.adsrvr.org *.hotjar.com *.hotjar.io *.pcapredict.com *.postcodeanywhere.co.uk *.commerce-connector.com *.amazonaws.com/ */csp/report/uri/ *.redditstatic.com *.hs-scripts.com *.hscollectedforms.net *.hs-banner.com *.usemessages.com *.hs-analytics.net *.hsadspixel.net *.hsleadflows.net edge.curalate.com d5yoctgpv4cpx.cloudfront.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com www.clarity.ms cdn.cookielaw.org js.hubspot.com cdn.userway.org svht.tradedoubler.com swrap.tradedoubler.com *.wahl.com *.hsforms.net *.hsforms.com static.hsappstatic.net scripts.clarity.ms www.xtento.com cdn.xtento.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; img-src static.hsappstatic.net https://ad.doubleclick.net https://*.wahl.com https://wahl.com https://wahlusa.com https://wahlpro.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobedtm.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app https://images.unsplash.com *.gstatic.com *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.awin1.com *.zenaps.com *.wepowerconnections.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com  *.google.com google.com sandbox.bluesnap.com sandbox1.bluesnap.com sandbox2.bluesnap.com sandpay.bluesnap.com ws.bluesnap.com ws1.bluesnap.com ws2.bluesnap.com pay.bluesnap.com services.postcodeanywhere.co.uk *.klarna.com *.klarnaevt.com *.klarnacdn.net https://firebasestorage.googleapis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.mollie.com *.essentialaccessibility.com *.wahlanimal.com  s.ytimg.com  *.google.com.mx  *.google-analytics.com ct.pinterest.com bat.bing.com *.google.co.in *.cloudflare.com *.wahlclipper.com *.powerreviews.com *.googletagmanager.com *.cloudfront.net *.webcollage.net *.syndigo.cloud p.yotpoapi.com edge.curalate.com *.postcodeanywhere.co.uk */csp/report/uri/ *.reddit.com *.hsforms.com *.hubspot.com  *.google.com.in  *.payments-amazon.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com maps.gstatic.com c.clarity.ms cdn.cookielaw.org cdn.userway.org *.wahl.com *.magecomp.com *.google.com.ua *.google.com.br ad.doubleclick.net www.xtento.com cdn.xtento.com *.yotpo.com data: 'self' 'unsafe-inline'; default-src https://*.wahl.com https://wahl.com https://wahlusa.com https://wahlpro.com *.wahl.com 'self' 'unsafe-inline' 'unsafe-eval'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 3
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.fontawesome.com data: static.nacongaming.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * api.bazaarvoice.com stg.api.bazaarvoice.com www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com www.google.com www.youtube.com amc.demdex.net vars.hotjar.com www.facebook.com static.nacongaming.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com network-eu-stg.bazaarvoice.com network-eu.bazaarvoice.com network-eu-a.bazaarvoice.com media.nacongaming.com scaleflex.ultrafast.io axeptio.imgix.net www.google.fr www.facebook.com static.nacongaming.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com network-eu.bazaarvoice.com network-eu-stg.bazaarvoice.com www.google.com www.gstatic.com script.hotjar.com static.hotjar.com connect.facebook.net anltc-v3.bigben.fr analytics.tiktok.com www.googleoptimize.com static.nacongaming.com static.axept.io anltc.bigben.fr 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app display.ugc.bazaarvoice.com *.fontawesome.com use.typekit.net p.typekit.net static.nacongaming.com 'self' 'unsafe-inline'; object-src static.nacongaming.com 'self' 'unsafe-inline'; media-src *.adobe.com static.nacongaming.com media.nacongaming.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com www.facebook.com in.hotjar.com www.google-analytics.com stats.g.doubleclick.net anltc-v3.bigben.fr axeptio.imgix.net static.nacongaming.com client.axept.io api.axept.io anltc.bigben.fr 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' https://assets.arautos.org https://challenges.cloudflare.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://assets.arautos.org https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://assets.arautos.org https://fonts.gstatic.com; connect-src 'self' https://api.arautos.org https://challenges.cloudflare.com https://cloudflareinsights.com; frame-src 'self' https://challenges.cloudflare.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com; media-src 'self' https: blob:; worker-src 'self' blob: 3
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://js.stripe.com https://*.js.stripe.com https://checkout.stripe.com https://connect-js.stripe.com https://*.googleapis.com https://www.googletagmanager.com https://*.google-analytics.com https://*.website-files.com https://d3e54v103j8qbb.cloudfront.net https://*.onetrust.com https://*.cookielaw.org https://*.visualwebsiteoptimizer.com https://*.iwoca.com https://widget.trustpilot.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://snap.licdn.com https://bat.bing.com https://cdn.amplitude.com https://www.redditstatic.com https://*.fullstory.com https://connect.facebook.net https://*.hs-scripts.com https://*.tiktok.com https://*.intercom.io https://*.hsadspixel.net https://*.hs-analytics.net https://*.hs-banner.com https://*.hubspot.com https://*.doubleclick.net https://*.intercomcdn.com https://*.online-metrix.net https://cdn.datatables.net https://www.datadoghq-browser-agent.com https://*.dwin1.com https://cdn.checkout.com https://tools.refokus.com https://sdk.onfido.com https://*.awin1.com https://snippet.maze.co; style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.website-files.com https://*.iwoca.com https://cdn.jsdelivr.net https://*.gstatic.com https://verify.iwoca.co.uk https://verify.iwoca.de https://sdk.onfido.com https://cdnjs.cloudflare.com; img-src 'self' data: blob: https://*.stripe.com https://*.googleapis.com https://*.gstatic.com https://*.google-analytics.com https://www.googletagmanager.com https://*.website-files.com https://uploads-ssl.webflow.com https://d3e54v103j8qbb.cloudfront.net https://*.onetrust.com https://*.cookielaw.org https://*.visualwebsiteoptimizer.com https://*.reddit.com https://bat.bing.com https://www.facebook.com https://*.hubspot.com https://www.google.com https://www.google.fr https://*.hsforms.com https://*.ads.linkedin.com https://*.iwoca.com https://www.google.co.uk https://www.google.de https://*.online-metrix.net https://emailsignature.trustpilot.com https://providers-assets.truelayer.com; font-src 'self' data: https://*.gstatic.com https://*.website-files.com https://*.iwoca.com https://fonts.intercomcdn.com https://verify.iwoca.co.uk https://verify.iwoca.de https://cdnjs.cloudflare.com; connect-src 'self' https://api.stripe.com https://hooks.stripe.com https://checkout.stripe.com https://*.googleapis.com https://*.google-analytics.com https://*.analytics.google.com https://*.doubleclick.net https://www.google.com wss://*.iwoca.co.uk wss://*.iwoca.de https://*.onetrust.com https://*.cookielaw.org https://*.visualwebsiteoptimizer.com https://*.amplitude.com https://*.fullstory.com https://*.reddit.com https://www.facebook.com https://bat.bing.com https://*.hubspot.com https://*.hubapi.com https://*.intercom.io wss://*.intercom.io https://*.ads.linkedin.com https://*.tiktok.com https://*.tiktokw.us https://*.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://*.iwoca.com  https://api.onfido.com https://*.online-metrix.net https://www.googleadservices.com https://pagead2.googlesyndication.com https://www.google.co.uk; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://checkout.stripe.com https://connect-js.stripe.com https://www.youtube.com https://player.vimeo.com https://widget.trustpilot.com https://www.googletagmanager.com https://*.online-metrix.net https://sdk.onfido.com https://*.awin1.com https://*.iwoca.com https://cdn.embedly.com https://jobs.ashbyhq.com https://e.infogram.com https://meetings.hubspot.com https://intercom-sheets.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://checkout.stripe.com; worker-src 'self' blob:; manifest-src 'self' https://*.iwoca.com; media-src 'self' https://*.intercomcdn.com https://*.website-files.com; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub5026669e7744a3ed13bf57586a630b91&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service:gateway; 3
frame-ancestors 'self' elama.global *.elama.global elama.ru *.elama.ru mc.yandex.ru mc.webvisor.com mc.webvisor.org yastatic.net webvisor.com yandex.com yandex.ru *.yandex.com *.yandex.net *.yandex.ru; 3
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.hubspot.com *.hs-scripts.com *.hs-analytics.net *.hsadspixel.net *.hs-banner.com *.hscollectedforms.net *.hsleadflows.net *.hsforms.net *.hsforms.com *.usemessages.com *.hubspotfeedback.com feedback.hubapi.com js.hscta.net static.hsappstatic.net *.hubspot.net *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspotusercontent-na1.net www.googletagmanager.com www.google-analytics.com *.chilipiper.com *.6sense.com *.6sc.co cdnjs.cloudflare.com play.goconsensus.com snap.licdn.com connect.facebook.net bat.bing.com *.clickcease.com *.capterra.com; style-src 'self' 'unsafe-inline' *.hubspot.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspotusercontent-na1.net cdn2.hubspot.net fonts.googleapis.com cdnjs.cloudflare.com; img-src 'self' data: *.hubspot.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspotusercontent-na1.net cdn2.hubspot.net no-cache.hubspot.com js.hscta.net *.hsforms.net *.hsforms.com *.hubspot.net www.google-analytics.com www.googletagmanager.com analytics.google.com www.google.com *.doubleclick.net www.googleadservices.com *.chilipiper.com *.6sc.co px.ads.linkedin.com www.facebook.com bat.bing.com; font-src 'self' data: fonts.gstatic.com cdnjs.cloudflare.com *.hubspotusercontent-na1.net; connect-src 'self' *.hubapi.com *.hubspot.com *.hubspotusercontent-na1.net *.hs-banner.com *.hscollectedforms.net *.hsforms.com *.hsforms.net js.hscta.net www.googletagmanager.com www.google-analytics.com analytics.google.com *.google-analytics.com www.google.com *.doubleclick.net www.googleadservices.com *.chilipiper.com *.6sense.com *.6sc.co play.goconsensus.com px.ads.linkedin.com www.facebook.com bat.bing.com snap.licdn.com *.clickcease.com *.capterra.com; frame-src 'self' *.hubspot.com *.hs-sites.com *.hubspot.net *.hsforms.net *.hsforms.com play.hubspotvideo.com www.youtube.com www.youtube-nocookie.com *.chilipiper.com *.saashr.com www.google.com google.com play.goconsensus.com; media-src 'self' data: *.hubspot.com *.hubspot.net *.hubspotusercontent-na1.net *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net; child-src *.hsforms.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; 3
base-uri 'none' ; connect-src 'self' https://mc.yandex.ru https://mc.yandex.md https://mc.yandex.uz https://mc.yandex.com https://privacy-cs.mail.ru https://top-fwz1.mail.ru ; default-src 'self' ; font-src 'self' data: ; frame-ancestors 'none' ; img-src 'self' data: https://top-fwz1.mail.ru https://mc.yandex.ru https://mc.yandex.com ; object-src 'none' ; report-to vkpay-csp-endpoint ; report-uri https://cspreport.mail.ru/vkpay?disposition=report ; script-src 'self' 'unsafe-inline' https://top-fwz1.mail.ru https://mc.yandex.ru https://privacy-cs.mail.ru ; style-src 'self' 'unsafe-inline' 3
object-src 'none'; 3
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com *.bootstrapcdn.com *.cloudflare.com 'self' data: *.hotjar.com *.hotjar.io data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.facebook.com *.oppwa.com oppwa.com *.mastercard.com *.iesnare.com *.requirejs.org *.visa.com 'self' connect.facebook.net graph.facebook.com business.facebook.com test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.doubleclick.net *.googlesyndication.com *.oppwa.com oppwa.com *.mastercard.com *.iesnare.com *.requirejs.org *.visa.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: *.googleapis.com *.openstreetmap.org *.googlesyndication.com *.google.com *.google.rs *.google.hr *.google.ba *.google.si *.google.bg *.google.me *.google.mk *.google.nl *.google.de *.google.be *.google.fr *.googleadservices.com www.facebook.com trengo.s3.eu-central-1.amazonaws.com ecom-stage.iutecredit.mk ecom.iutecredit.mk ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.oppwa.com oppwa.com *.mastercard.com *.iesnare.com *.requirejs.org *.visa.com magefan.com cm.magefan.com *.disqus.com connect.facebook.net graph.facebook.com business.facebook.com *.cmi.co.ma *.iprom.net iprom.net yandex.com yandex.md *.yandex.md *.yandex.com yandex.ru *.yandex.ru *.yads.tech yads.tech *.yango.com *.doubleclick.net t.adx.opera.com *.pandorashop.si *.pandorashop.hr *.pandorashop.ba *.pandorashop.rs *.pandorashop.mk *.pandorashop.me *.pandorashop-sa.com *.pandorashop.ma *.pandorashop.mt *.pandorashop-ks.com *.pandorashop.md test.saferpay.com www.saferpay.com saferpay.com *.tamara.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com tagmanager.google.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com https://widget-cdn.boxnow.hr *.googlesyndication.com *.googleadservices.com *.google.com *.google.rs *.google.hr *.google.ba *.google.si *.google.bg *.google.me *.google.mk www.facebook.com *.widget.trengo.eu map.gls-croatia.com map.gls-czech.com map.gls-hungary.com map.gls-romania.com map.gls-slovenia.com map.gls-slovakia.com map.gls-serbia.com *.openstreetmap.org ecom-stage.iutecredit.mk ecom.iutecredit.mk chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.jquery.com *.oppwa.com oppwa.com *.mastercard.com *.visa.com *.iesnare.com *.requirejs.org *.disqus.com connect.facebook.net graph.facebook.com business.facebook.com *.hotjar.com *.hotjar.io onesignal.com *.onesignal.com *.criteo.com *.adsmurai.com gateway.bankart.si yandex.com yandex.md *.yandex.md *.yandex.com yandex.ru *.yandex.ru *.yads.tech yads.tech *.yango.com *.doubleclick.net t.adx.opera.com *.iprom.net iprom.net static.cloudflareinsights.com test.saferpay.com www.saferpay.com saferpay.com *.tamara.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.bootstrapcdn.com ecom-stage.iutecredit.mk ecom.iutecredit.mk downloads.mailchimp.com *.oppwa.com oppwa.com *.mastercard.com *.iesnare.com *.requirejs.org *.visa.com onesignal.com *.onesignal.com *.iprom.net iprom.net *.tamara.co 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.widget.trengo.eu *.pandorashop.si *.pandorashop.hr *.pandorashop.ba *.pandorashop.rs *.pandorashop.mk *.pandorashop.me *.pandorashop-sa.com *.pandorashop.ma *.pandorashop.mt *.pandorashop-ks.com *.pandorashop.md *.tamara.co 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.googleapis.com https://widget-cdn.boxnow.hr *.openstreetmap.org *.google.com *.google.rs *.google.hr *.google.ba *.google.si *.google.bg *.google.me *.google.mk *.google.nl *.google.de *.google.be *.google.fr *.googlesyndication.com *.doubleclick.net www.facebook.com *.trengo.eu map.gls-croatia.com map.gls-czech.com map.gls-hungary.com map.gls-romania.com map.gls-slovenia.com map.gls-slovakia.com map.gls-serbia.com ecom-stage.iutecredit.mk ecom.iutecredit.mk form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.oppwa.com oppwa.com *.mastercard.com *.iesnare.com *.requirejs.org *.visa.com connect.facebook.net graph.facebook.com business.facebook.com wss://ws.hotjar.com *.hotjar.io yandex.com *.yandex.md *.yandex.com yandex.ru *.yandex.ru *.yads.tech *.yango.com cm.g.doubleclick.net t.adx.opera.com *.pandorashop.si *.pandorashop.hr *.pandorashop.ba *.pandorashop.rs *.pandorashop.mk *.pandorashop.me *.pandorashop-sa.com *.pandorashop.ma *.pandorashop.mt *.pandorashop-ks.com *.pandorashop.md test.saferpay.com www.saferpay.com saferpay.com *.tamara.co 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src yandex.com yandex.md *.yandex.md *.yandex.com yandex.ru *.yandex.ru *.yads.tech yads.tech *.yango.com *.doubleclick.net t.adx.opera.com test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.olark.com mediacdn.espssl.com *.imi.chat *.frontiercoop.com *.facebook.com *.yotpo.com *.klevu.com *.ksearchnet.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.zopim.com *.zopim.io *.widen.net *.widencdn.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * destinilocators.com *.duosecurity.com *.olark.com *.frontiercoop.com *.yotpo.com www.google.com *.facebook.com *.googletagmanager.com *.weltpixel.com https://www.youtube.com http://www.sandbox.paypal.com *.twitter.com *.zendesk.com *.widen.net *.widencdn.net *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com *.certcapture.com store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com frontiercoop.widen.net *.olark.com lux.speedcurve.com mediacdn.espssl.com brxcdn.com *.frontiercoop.com cdn-cookieyes.com *.yotpo.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com www.facebook.com *.facebook.com *.yotpoapi.com *.snapchat.com *.klevu.com *.ksearchnet.com *.cloudflare.com *.klarna.com *.twitter.com *.twimg.com *.ytimg.com *.bing.com *.zopim.com *.zopim.io *.doubleclick.net *.google.co.in *.mastercard.com *.widen.net *.widencdn.net *.reddit.com *.ads-twitter.com t.co *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-ds.com *.magento-datasolutions.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.certcapture.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com js-agent.newrelic.com bam.nr-data.net destinilocators.com *.olark.com cdn.speedcurve.com acsbapp.com s.pinimg.com bat.bing.com ct.pinterest.com *.exponea.com *.imi.chat *.frontiercoop.com cdn-cookieyes.com *.yotpo.com connect.facebook.net www.google.com *.byspotify.com js.klevu.com *.ksearchnet.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bing.com *.zopim.com *.zdassets.com *.zendesk.com *.widen.net *.widencdn.net *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com assets.braintreegateway.com *.olark.com mediacdn.espssl.com *.imi.chat *.frontiercoop.com *.yotpo.com *.klevu.com *.ksearchnet.com 'unsafe-inline' *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.fontawesome.com *.bing.com *.widen.net *.widencdn.net *.tagmanager.google.com *.googletagmanager.com *.typeform.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.olark.com *.frontiercoop.com *.zopim.com *.zopim.io *.widen.net *.widencdn.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.magento-datasolutions.com *.magento-ds.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.certcapture.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com bam.nr-data.net lux.speedcurve.com cdn.speedcurve.com *.speedcurve.com *.acsbapp.com acsbapp.com ct.pinterest.com bat.bing.com *.exponea.com facebook.com *.facebook.com *.imi.chat *.frontiercoop.com log.cookieyes.com *.yotpo.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.facebook.net *.cookieyes.com *.cdn-cookieyes.com *.spotify.com cdn-cookieyes.com px.ads.linkedin.com *.olark.com *.klevu.com *.ksearchnet.com *.cloudflare.com *.twitter.com *.twimg.com *.zdassets.com *.zopim.com *.zopim.io wss://widget-mediator.zopim.com *.google-analytics.com https://stats.g.doubleclick.net *.zendesk.com *.widen.net *.widencdn.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.olark.com *.frontiercoop.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; media-src 'self' https:; 3
style-src-elem w.vi.skadtec.com euc-widget.freshworks.com tags.srv.stackadapt.com static-tracking.klaviyo.com maxcdn.bootstrapcdn.com *.klarnaservices.com x.klarnacdn.net fonts.googleapis.com 'self' 'unsafe-inline' ff.kis.v2.scr.kaspersky-labs.com gc.kis.v2.scr.kaspersky-labs.com me.kis.v2.scr.kaspersky-labs.com static.trbo.com static.klaviyo.com cdn.jsdelivr.net; script-src-elem www.ladenzeile.de 3001.scriptcdn.net pix.hyj.mobi www.hammer.de euc-widget.freshworks.com t.adcell.com pagead2.googlesyndication.com connect.facebook.net analytics.tiktok.com collect.bannercrowd.net containertags.belboon.com bat.bing.com cdn.alevco.de neso.r.niwepa.com pluto.r.powuta.com s.kk-resources.com unpkg.com cdn-quick-ar.threedy.ai hammersport.trafft.com www.googletagmanager.com *.klarnaservices.com commerce.adobedtm.com maps.googleapis.com magento-recs-sdk.adobe.net *.cptrack.de secure.pay1.de www.google.com *.gstatic.com d.ratepay.com *.payments-amazon.com static-tracking.klaviyo.com static.klaviyo.com l.ecn-ldr.de *.trbo.com *.usercentrics.eu *.hammer.de www.googleadservices.com widgets.trustedshops.com *.ad-srv.net x.klarnacdn.net containertags.belboon.de *.hotjar.com *.adform.net ai.trk42.net *.retargeted.co pikkasrv.com analytics.bestofluck.io *.gsitrix.com tags.srv.stackadapt.com 'self' 'unsafe-inline' [Filtered]: app.usercentrics.eu blob: cdn.adt357.net cdn.jsdelivr.net content.cptrack.de eu-library.klarnaservices.com ff.kis.v2.scr.kaspersky-labs.com gc.kis.v2.scr.kaspersky-labs.com googleads.g.doubleclick.net infird.com me.kis.v2.scr.kaspersky-labs.com portal.threedy.ai secured-pixel.com static-na.payments-amazon.com static.getback.ch tm.ad-srv.net tm704.ad-srv.net tm710.ad-srv.net tm716.ad-srv.net tm717.ad-srv.net track.adform.net ubaslome.maynhtml.com valuesportal.com www.getback.ch www.google-analytics.com xeldurap.peazheut.com *.newrelic.com trk.cytelligence.io www.youtube.com rast.hammer-fitness.at bat.bing-int.com; font-src fonts.gstatic.com use.typekit.net https://fonts.gstatic.com *.gstatic.com data: ray.st w.vi.skadtec.com account.affilitizer.com cdn.scite.ai moz-extension: *.klarnacdn.net http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io d3dc1lgancj6l0.cloudfront.net *.fontawesome.com https://www.google.com https://www.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.facebook.com http://*.facebook.com https://*.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com www.hammer-fitness.at www.hammer-fitness.ch www.hammer-fitness.be www.hammer-fitness.nl www.hammer.de 'self' 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de browserstart.org link.shoplooks.com osak.com r.secprf2.com qimp.net hammer-fitness.at bat.bing.com vently.com tatrck.com monetoad.com de.kweriee.com as.ad4m.at yaketar.com findarios.com *.ddev.site jsctool.com *.sendinblue.com sibautomation.com *.trbo.com containertags.belboon.com roxxtraxx.de *.ad-srv.net td.doubleclick.net pluto.r.powuta.com hammersport.trafft.com r.adserver01.de player.flipsnack.com nakoona.com ptclk.com www.linkbux.com neso.r.niwepa.com r.linksprf.com hammer.de oponas.com t.adcell.com bcsgsrv.com hammer-fitness.ch adnx.de quick-ar.threedy.ai www.facebook.com hammer-fitness.nl c1.adform.net such.de caclk.com osm.klarnaservices.com t.hammer.de 127.0.0.1:20489 admin.rewardoo.com affiliate.grabasaving.com atlas.r.akipam.com browsak.com clcktrck.com discountheld.de duertry.com everydaysi.com gateway.zscloud.net go.adt246.net hipodi.com janus.r.jakuli.com r.perfsimpl.com rast.hammer.de shopbuttler.com support.google.com vently.org www.hammer.de www.pickalink.com www.searchfor.org xgs.bdo.gi:8090 yazary.com *.klarna.com secure.pay1.de payments.amazon.de www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://www.google.com/ http://*.facebook.com https://*.facebook.com www.xtento.com https://recaptcha.google.com/recaptcha/ https://pay.google.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.gstatic.com *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de static-eu.payments-amazon.com files.shoop.de www.google.pl www.google.nl www.google.dk www.google.lu www.google.com.hk www.google.mk www.google.ch www.google.no www.google.pt www.google.it www.google.es www.google.ae www.google.co.in www.google.com.bo *.ddev.site *.hammer.de *.hammer-fitness.at *.hammer-fitness.ch *.hammer-traning.se *.trbo.com widgets.trustedshops.com ai.trk42.net *.usercentrics.eu www.zenaps.com www.facebook.com bat.bing.net x.bidswitch.net bat.bing.com *.casalemedia.com www.google.de region1.analytics.google.com neso.r.niwepa.com s.ad.smaato.net pixel.rubiconproject.com sync.outbrain.com e1.emxdgt.com lh3.ggpht.com pluto.r.powuta.com translate.google.com www.hammerworkouts.de stats.g.doubleclick.net www.google.se w.vi.skadtec.com www.google.at server.seadform.net www.google.co.uk ad.yieldlab.net ih.adscale.de *.pubmatic.com *.openx.net *.adform.net *.smartadserver.com *.connectad.io *.loopme.me *.360yield.com *.1rx.io router.infolinks.com *.rmp.rakuten.com *.doubleclick.net unsafe-inline s.c.appier.net capi.connatix.com api.qrserver.com cdn.retailads.net cdn.valuesportal.com cnv.adt644.net connect.facebook.net d3k81ch9hvuctc.cloudfront.net dsum-sec.casalemedia.com lh3.google.com lh3.googleusercontent.com mitarchive.info my.productfruits.com ncr.preqservices.com s.kelkoogroup.net s3-eu-central-1.amazonaws.com st-filebanking.igstatic.com static.wixstatic.com t.adcell.com www.econda-monitor.de www.google.ba www.google.be www.google.bg www.google.ca www.google.co.kr www.google.co.ma www.google.co.nz www.google.co.th www.google.co.za www.google.com.au www.google.com.br www.google.com.do www.google.com.eg www.google.com.gi www.google.com.lb www.google.com.na www.google.com.om www.google.com.ph www.google.com.pk www.google.com.py www.google.com.tw www.google.com.ua www.google.com.vn www.google.cz www.google.ee www.google.fi www.google.fr www.google.gr www.google.hr www.google.hu www.google.ie www.google.jo www.google.li www.google.lt www.google.md www.google.ro www.google.rs www.google.ru www.google.si www.google.sk www.google.sn www.google.tn magefan.com cm.magefan.com *.disqus.com *.klarna.com *.klarnaevt.com *.klarnacdn.net maps.gstatic.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io http://*.linkedin.com https://*.linkedin.com http://*.facebook.com https://*.facebook.com http://www.google.com/ https://www.google.com/ http://www.google.de/ https://www.google.de/ https://www.googletagmanager.com http://www.googletagmanager.com userlike-cdn-operators.s3-eu-west-1.amazonaws.com https://widgets.trustedshops.com/ https://img.youtube.com www.xtento.com cdn.xtento.com sync.inmobi.com blob: www.hammer-fitness.nl www.google.com.tr *.google-analytics.com static.trbo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-ds.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de hammersport.trafft.com *.ddev.site *.hammer.de *.hammer-fitness.at *.hammer-fitness.ch *.hammer-traning.se *.sendinblue.com sibautomation.com *.emailsys1a.net *.trbo.com *.usercentrics.eu widgets.trustedshops.com content.cptrack.de t.adcell.com l.ecn-ldr.de containertags.belboon.de *.adform.net ai.trk42.net s.retargeted.co pix.hyj.mobi pikkasrv.com analytics.bestofluck.io *.gsitrix.com *.ad-srv.net trk.cytelligence.io tags.srv.stackadapt.com qvdt3feo.com cdn.alevco.de neso.r.niwepa.com pluto.r.powuta.com analytics.tiktok.com bat.bing.com collect.bannercrowd.net containertags.belboon.com connect.facebook.net cdn-quick-ar.threedy.ai s.kk-resources.com unsafe-inline bat.bing-int.com blob: cdn.adt357.net cdn.jsdelivr.net portal.threedy.ai static.getback.ch unpkg.com valuesportal.com www.getback.ch *.disqus.com *.klarna.com *.klarnacdn.net x.klarnacdn.net maps.googleapis.com *.klarnaservices.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://connect.facebook.net/ https://snap.licdn.com/li.lms-analytics/insight.min.js http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io userlike-cdn-widgets.s3-eu-west-1.amazonaws.com d3dc1lgancj6l0.cloudfront.net api.userlike.com http://www.google.com/recaptcha/ https://widgets.trustedshops.com/ *.google.com *.tracify.ai www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com tags.srv.stackadapt.com euc-widget.freshworks.com static-tracking.klaviyo.com *.klarnacdn.net d.ratepay.com d.payla.io dr.payla.io src.mastercard.com https://static.klaviyo.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com static.trbo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com w.vi.skadtec.com www.hammerworkouts.de data: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io commerce.adobe.net qa-api.magedevteam.com *.sentry.io *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.ddev.site *.hammer.de *.hammer-fitness.at *.hammer-fitness.ch *.hammer-traning.se *.sendinblue.com sibautomation.com maps.googleapis.com *.usercentrics.eu *.econda-monitor.de t.adcell.com *.gsitrix.com analytics.bestofluck.io tags.srv.stackadapt.com bat.bing.net bat.bing.com region1.analytics.google.com www.google.se stats.g.doubleclick.net region1.google-analytics.com analytics.tiktok.com api.retargeted.co www.facebook.com quick-ar.threedy.ai static.trbo.com api.bannercrowd.net s.kelkoogroup.net www.google.com euc-widget.freshworks.com api-js.datadome.co api.killadsapi.com salesviewer.org api.global-data-lab.com api.solarspireconsulting.com hammer.freshdesk.com api.datacloudstat.com api.socialsolutionapp.com adtonus.com api.adtraction.net api.ipify.org api.smartblocker.org api.trustedshops.com api.video-adblock.com blob: cnv.adt644.net code.jquery.com data: go.adt246.net my.productfruits.com ncrfiles.s3.us-central-1.wasabisys.com overbridgenet.com rktds.net update.adblock360.org www.google.dk www.google.no api.qrserver.com cdn.retailads.net cdn.valuesportal.com connect.facebook.net d3k81ch9hvuctc.cloudfront.net dsum-sec.casalemedia.com googleads.g.doubleclick.net lh3.google.com lh3.googleusercontent.com mitarchive.info ncr.preqservices.com s3-eu-central-1.amazonaws.com st-filebanking.igstatic.com static.wixstatic.com www.econda-monitor.de www.google.ba www.google.be www.google.bg www.google.ca www.google.co.kr www.google.co.ma www.google.co.nz www.google.co.th www.google.co.za www.google.com.au www.google.com.br www.google.com.do www.google.com.eg www.google.com.gi www.google.com.lb www.google.com.na www.google.com.om www.google.com.ph www.google.com.pk www.google.com.py www.google.com.tw www.google.com.ua www.google.com.vn www.google.cz www.google.ee www.google.fi www.google.fr www.google.gr www.google.hr www.google.hu www.google.ie www.google.jo www.google.li www.google.lt www.google.md www.google.ro www.google.rs www.google.ru www.google.si www.google.sk www.google.sn www.google.tn x.bidswitch.net *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com http://salesviewer.org/ userlike-cdn-widgets.s3-eu-west-1.amazonaws.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com *.tracify.ai bat.bing-int.com analytics-ipv6.tiktokw.us google.com https://www.google.com/recaptcha/ *.trbo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.websitebuilder.service.justice.gov.uk; style-src 'self' 'unsafe-inline' https://cdn.websitebuilder.service.justice.gov.uk; img-src 'self' data: https: https://cdn.websitebuilder.service.justice.gov.uk; font-src 'self' data: https://cdn.websitebuilder.service.justice.gov.uk; frame-ancestors 'self'; object-src 'none' 3
default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; 3
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com static.payu.com https://cdnjs.cloudflare.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com https://widgets.trustedshops.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com ewniosek.credit-agricole.pl sandbox.przelewy24.pl secure.przelewy24.pl wniosek.eraty.pl api.santanderconsumer.pl *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.instagram.com https://www.facebook.com https://accounts.google.com ewniosek.credit-agricole.pl *.googletagmanager.com pay.google.com apm.przelewy24.pl *.przelewy24.pl *.espago.com secure.payu.com merch-prod.snd.payu.com static.payu.com credit-widget-config.payu.com/ wniosek.eraty.pl https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com *.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cdninstagram.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://ssl.ceneo.pl https://www.facebook.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com *.focusgarden.pl *.focus-garden.cz static.przelewy24.pl gstatic.com static.payu.com credit-widget-config.payu.com/ https://*.google.pl https://*.bing.com *.wp.pl https://*.fbcdn.net https://*.facebook.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com *.hsforms.net *.hsforms.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.bing.com *.google.pl *.analytics.google.com *.bidswitch.net *.doubleclick.net *.pubmatic.com *.casalemedia.com *.criteo.com id5-sync.com *.360yield.com *.postrelease.com *.outbrain.com *.rubiconproject.com *.smartadserver.com *.taboola.com *.teads.tv *.tremorhub.com *.3lift.com *.yieldlab.net *.1rx.io *.agkn.com *.facebook.com *.facebook.net *.media.net *.cloudflare.com *.klarna.com *.googleadservices.com *.google.de *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cloudfront.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.instagram.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://*.ceneo.pl https://unpkg.com *.googletagmanager.com tagmanager.google.com sandbox.przelewy24.pl secure.przelewy24.pl pay.google.com apm.przelewy24.pl secure.payu.com secure.snd.payu.com static.payu.com credit-widget-config.payu.com/ https://cdnjs.cloudflare.com https://*.criteo.com https://*.facebook.net https://*.hotjar.com *.pinimg.com *.bing.com https://*.pinimg.com *.favicdn.net *.onet.pl *.wp.pl *.tiktok.com *.startquestion.com *.clarity.ms https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com *.hsforms.net *.hsforms.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com sgtm.focusgarden.pl focusgarden.pl *.facebook.net *.googlesyndication.com *.criteo.com *.pinterest.com *.hotjar.com *.cloudflare.com *.cloudflareinsights.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.googleapis.com https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://accounts.google.com tagmanager.google.com fonts.google.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.facebook.net https://accounts.google.com ewniosek.credit-agricole.pl *.google-analytics.com *.analytics.google.com *.googletagmanager.com sandbox.przelewy24.pl secure.przelewy24.pl wss://ws.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com secure.payu.com merch-prod.snd.payu.com static.payu.com credit-widget-config.payu.com/ https://*.hotjar.com wss://*.hotjar.com https://*.hotjar.io *.tiktok.com *.pinterest.com *.startquestion.com *.wp.pl *.ocdn.eu *.onet.pl https://*.doubleclick.net api.santanderconsumer.pl wniosek.eraty.pl https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site sgtm.focusgarden.pl focusgarden.pl *.googlesyndication.com *.favicdn.net *.hotjar.com *.hotjar.io *.pinimg.com wss://ws.hotjar.com *.bing.com *.cloudflare.com *.twitter.com *.twimg.com https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://cdn.jsdelivr.net https://unpkg.com https://datafa.st https://assets.madgicx.com; style-src 'self' 'unsafe-inline' https://unpkg.com https://assets.madgicx.com; img-src 'self' data: https://res.cloudinary.com https://cdn.prod.website-files.com https://uploads-ssl.webflow.com https://global-uploads.webflow.com https://www.googletagmanager.com https://i.ytimg.com https://assets.madgicx.com; font-src 'self' data: https://assets.madgicx.com; connect-src 'self' https://www.googletagmanager.com https://datafa.st https://www.google-analytics.com https://analytics.google.com https://assets.madgicx.com; frame-src https://www.googletagmanager.com https://cdn.embedly.com https://www.youtube.com https://www.youtube-nocookie.com; object-src 'none'; base-uri 'self'; form-action 'self' 3
font-src fonts.gstatic.com use.typekit.net *.googleapis.com *.gstatic.com *.fontawesome.com https://fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com 'self' https://webpay3gint.transbank.cl https://webpay3g.transbank.cl https://www.facebook.com/* pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com webpay3g.transbank.cl webpay3gint.transbank.cl 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com bytedance: sslocal: www.google.com https://player.vimeo.com https://www.youtube.com https://www.googletagmanager.com https://tagmanager.google.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://www.youtube-nocookie.com *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com ads.tiktok.com analytics.tiktok.com analytics-ipv6.tiktokw.us bat.bing.com *.fitit.ai api.iconify.design *.bat.bing.com *.msn.com *.bing.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com ads.tiktok.com analytics.tiktok.com analytics-ipv6.tiktokw.us www.google.com www.gstatic.com *.avada.io https://www.googletagmanager.com https://tagmanager.google.com https://546002994.collect.igodigital.com https://cdn.fitit.ai https://assets.adobedtm.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://player.vimeo.com https://www.youtube.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.fontawesome.com https://cdn.fitit.ai *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://fonts.googleapis.com http://fonts.googleapis.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com static.zdassets.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.sentry.io commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com ads.tiktok.com analytics.tiktok.com analytics-ipv6.tiktokw.us https://dpm.demdex.net https://amcglobal.sc.omtrdc.net https://geostag.cardinalcommerce.com https://geo.cardinalcommerce.com https://1eafstag.cardinalcommerce.com https://1eaf.cardinalcommerce.com https://centinelapistag.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://commerce.adobedc.net https://analytics.google.com *.fitit.ai *.a.run.app fitit-cache.nyc3.cdn.digitaloceanspaces.com https://vimeo.com https://api.magento.com https://performance.typekit.net https://pilot-payflowlink.paypal.com https://commerce.adobe.io https://commerce.adobe.net *.paypal.com https://google.com *.google.com https://qa-api.magedevteam.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline' https://mercadopago.com.br https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.sagepay.com *.opayo.eu.elavon.com *.fontawesome.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.usablenet.com *.udev1a.net *.narvar.com *.narvar.qa *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.sagepay.com *.opayo.eu.elavon.com *.arcot.com *.rsa3dsauth.co.uk *.rsa3dsauth.com *.boc.cn *.afs.com.bh *.enfuce.com *.cardcenter.ch *.nexigroup.com *.pluscard.de *.qiib.com.qa *.paylife.at *.redsys.es *.3dsecure.no *.modirum.com *.edb.com *.viseca.ch *.apata.io *.capitalone.com *.dnp-cdms.jp *.revolut.com *.bankserv.co.za *.swisscard.ch *.six-group.com *.marqeta.com *.cardinalcommerce.com *.wlp-acs.com *.imbank.com *.tsys.co.uk *.sia.eu *.garanti.com.tr *.commerzbank.de *.cmbchina.com *.alahli.com *.mycardsecure.com *.gps.com.bh *.citibank.com *.wibmo.com *.dkb.de *.monzo.com *.alinma.com *.nccc.com.tw *.starlingbank.com *.danskebank.com *.pekao24.pl *.lloydsbank.co.uk/ *.lloydsbank.com/ *.lloydsbankinggroup.com/ *.channel-cards-auth-api.lloydsbankinggroup.com/ *.sparebank1.no *.rabobank.nl *.s-id-check-sparkassen.de *.sparkassen-kreditkarten.de *.mbank.pl *.secure2gw.ro *.btrl.ro *.cafis-paynet.jp *.borica.bg *.fibank.bg *.cic.fr *.zaba.hr *.citibank.co.in *.centrum24.pl *.bankmillennium.pl *.icps.mu *.egolomt.mn *.lcl.fr *.ctbcbank.com *.qiwi.com *.postfinance.ch *.citadele.lv *.kib.com.kw *.cathaybk.com.tw *.pkobp.pl *.acdcproc.com *.abanca.com *.n26.com *.klikbca.com *.psa.at *.sumup.com *.eglobal.com.mx *.pl.ing.com *.qnb.com *.rpc-raiffeisen.com *.sebkort.com *.ocbc.com *.tapngo.com.hk *.stcpay.com.sa *.creditmutuel.fr *.luottokunta.fi *.swedbank.se *.unibank.am *.estcard.ee *.hyundaicard.com *.privatbank.ua *.fssnet.co.in *.kbcard.com *.luminorgroup.com *.mashreq.com *.mercurypaymentservices.it *.moneta.cz *.sensebank.com.ua *.sibs.pt *.stripeauthentications.com *.dskbank.bg *.otpbank.hu *.techcombank.com.vn *.touch.tech *.asseco-see.hr *.3dsecure-csas.cz *.cyris.com *.secureacs.com *.acb.com.vn https://logistics-stage.ecpay.com.tw/Express/map https://logistics.ecpay.com.tw/Express/map https://logistics-stage.ecpay.com.tw/helper/printTradeDocument https://logistics.ecpay.com.tw/helper/printTradeDocument *.twitter.com *.usablenet.com *.udev1a.net https://plumrocket.com *.authorize.net *.tawk.to 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com *.sagepay.com *.opayo.eu.elavon.com *.arcot.com *.rsa3dsauth.co.uk *.rsa3dsauth.com *.boc.cn *.afs.com.bh *.enfuce.com *.cardcenter.ch *.pluscard.de *.qiib.com.qa *.nexigroup.com *.paylife.at *.redsys.es *.3dsecure.no *.modirum.com *.edb.com *.viseca.ch *.apata.io *.capitalone.com *.dnp-cdms.jp *.revolut.com *.bankserv.co.za *.swisscard.ch *.six-group.com *.marqeta.com *.cardinalcommerce.com *.wlp-acs.com *.imbank.com *.tsys.co.uk *.sia.eu *.garanti.com.tr *.commerzbank.de *.cmbchina.com *.alahli.com *.mycardsecure.com *.gps.com.bh *.citibank.com *.wibmo.com *.dkb.de *.monzo.com *.alinma.com *.nccc.com.tw *.starlingbank.com *.danskebank.com *.pekao24.pl *.lloydsbank.co.uk/ *.lloydsbank.com/ *.lloydsbankinggroup.com/ *.channel-cards-auth-api.lloydsbankinggroup.com/ *.sparebank1.no *.rabobank.nl *.s-id-check-sparkassen.de *.sparkassen-kreditkarten.de *.mbank.pl *.secure2gw.ro *.btrl.ro *.cafis-paynet.jp *.borica.bg *.fibank.bg *.cic.fr *.zaba.hr *.citibank.co.in *.centrum24.pl *.bankmillennium.pl *.icps.mu *.egolomt.mn *.lcl.fr *.ctbcbank.com *.qiwi.com *.postfinance.ch *.citadele.lv *.kib.com.kw *.cathaybk.com.tw *.pkobp.pl *.acdcproc.com *.abanca.com *.n26.com *.klikbca.com *.psa.at *.sumup.com *.eglobal.com.mx *.pl.ing.com *.qnb.com *.rpc-raiffeisen.com *.sebkort.com *.ocbc.com *.tapngo.com.hk *.stcpay.com.sa *.creditmutuel.fr *.luottokunta.fi *.swedbank.se *.unibank.am *.estcard.ee *.hyundaicard.com *.privatbank.ua *.fssnet.co.in *.kbcard.com *.luminorgroup.com *.mashreq.com *.mercurypaymentservices.it *.moneta.cz *.sensebank.com.ua *.sibs.pt *.stripeauthentications.com *.dskbank.bg *.otpbank.hu *.techcombank.com.vn *.touch.tech *.asseco-see.hr *.3dsecure-csas.cz *.cyris.com *.secureacs.com *.acb.com.vn landofcoder.com maps.googleapis.com chart.googleapis.com *.twitter.com *.usablenet.com *.udev1a.net https://plumrocket.com *.authorize.net https://accounts.google.com *.tawk.to 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com *.sagepay.com *.opayo.eu.elavon.com ebizmarts-website.s3.amazonaws.com magefan.com cm.magefan.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.usablenet.com *.udev1a.net *.clarity.ms *.bing.com *.nofraud.com *.googletagmanager.com *.doubleclick.net *.facebook.net *.facebook.com *.facebook.com/tr/ *.tiktok.com *.googlesyndication.com *.google.com *.criteo.com *.google.co.za *.google.co.uk *.google.co.jp *.narvar.com *.narvar.qa hexagon-analytics.com *.tawk.to cdn.jsdelivr.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com *.sagepay.com *.opayo.eu.elavon.com landofcoder.com maps.googleapis.com chart.googleapis.com *.mookie1.com 'self' *.paypal.com *.sandbox.paypal.com *.googletagmanager.com *.plumrocket.com *.tawk.to *.bam-cell.nr-data.net *.gstatic.com *.usablenet.com *.udev1a.net *.nofraud.com *.clarity.ms *.mmapiws.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.facebook.net *.facebook.com *.facebook.com/tr/ *.tiktok.com *.criteo.com *.bing.com cdn.sift.com api3.veritrans.co.jp *.authorize.net https://accounts.google.com https://www.gstatic.com cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com *.sagepay.com *.opayo.eu.elavon.com *.fontawesome.com self *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.usablenet.com *.udev1a.net *.bing.com *.criteo.com https://accounts.google.com https://www.gstatic.com *.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src landofcoder.com maps.googleapis.com chart.googleapis.com 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.narvar.com *.narvar.qa 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com *.sagepay.com *.opayo.eu.elavon.com landofcoder.com maps.googleapis.com chart.googleapis.com self *.cloudflare.com *.twitter.com *.twimg.com *.usablenet.com *.udev1a.net *.nofraud.com *.clarity.ms *.mmapiws.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.google-analytics.com *.facebook.net *.facebook.com *.facebook.com/tr/ *.tiktok.com *.criteo.com api3.veritrans.co.jp *.authorize.net https://accounts.google.com *.tawk.to wss://*.tawk.to 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://mcstaging.mikimoto.com/; report-to report-endpoint; 3
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com 'unsafe-inline' data: *.paypal.com *.yotpo.com eventstable.com *.eventstable.com *.atlaschairs.com *.globaleventsupply.com *.braintreegateway.com *.signifyd.com *.trustspot.io trustspot.io s3.amazonaws.com trustspot-app-assets.s3.amazonaws.com *.klaviyo.com stackpath.bootstrapcdn.com *.accessibly.app *.accessiblyapp.com *.octocom.ai data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'unsafe-inline' data: *.eventstable.com eventstable.com *.atlaschairs.com *.globaleventsupply.com *.braintreegateway.com *.signifyd.com *.trustspot.io *.klaviyo.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'unsafe-inline' data: *.online-metrix.net *.signifyd.com www.google.com *.doubleclick.net *.eventstable.com eventstable.com *.atlaschairs.com *.globaleventsupply.com www.youtube.com www.youtube-nocookie.com *.vimeo.com *.demdex.net *.trustspot.io *.klaviyo.com www.socialintents.com *.octocom.ai *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com https://plumrocket.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'unsafe-inline' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.omtrdc.net *.yotpo.com *.bing.com *.signifyd.com *.online-metrix.net *.google.com p.adsymptotic.com *.linkedin.com *.atdmt.com *.eventstable.com eventstable.com *.atlaschairs.com *.globaleventsupply.com *.bbb.org *.scanalert.com *.cloudfront.net *.demdex.net *.klaviyo.com *.creditkey.com creditkey-assets.s3-us-west-2.amazonaws.com *.shopperapproved.com *.braintreegateway.com *.ravecapture.com ravecapture-app-assets.s3.amazonaws.com trustspot-logos.imgix.net trustspot-product-photos.imgix.net productphotos.trustspot.io *.roundprincemusic.com *.searchspring.io *.accessibly.app *.accessiblyapp.com *.octocom.ai *.facebook.com *.reddit.com *.hubspot.com *.hsforms.com *.clarity.ms www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.xtento.com cdn.xtento.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'unsafe-eval' data: www.google.com static.doubleclick.net maps.googleapis.com www.gstatic.com *.klaviyo.com *.signifyd.com static-na.payments-amazon.com a.optmnstr.com snap.licdn.com *.yotpo.com *.pushalert.co bat.bing.com www.socialintents.com www.clickcease.com *.paypal.com eventstable.com *.eventstable.com *.atlaschairs.com *.globaleventsupply.com bam.nr-data.net *.shopperapproved.com *.ravecapture.com trustspot.io cdn.jsdelivr.net *.adobetm.com *.roundprincemusic.com *.hotjar.com *.mouseflow.com *.online-metrix.net analytics.tiktok.com *.accessibly.app *.accessiblyapp.com rum.hlx.page *.octocom.ai https://www.googletagmanager.com tagmanager.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.hs-scripts.com *.hscollectedforms.net *.hs-analytics.net *.hsadspixel.net *.usemessages.com *.hs-banner.com *.hsforms.net *.hsforms.com *.clarity.ms https://cdn.mida.so ddwl4m2hdecbv.cloudfront.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.xtento.com cdn.xtento.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com *.googletagmanager.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com 'unsafe-inline' data: *.yotpo.com www.socialintents.com *.paypal.com eventstable.com *.eventstable.com *.atlaschairs.com *.globaleventsupply.com *.klaviyo.com *.braintreegateway.com *.signifyd.com *.ravecapture.com trustspot.io s3.amazonaws.com www.shopperapproved.com stackpath.bootstrapcdn.com unpkg.com *.vimeocdn.com www.youtube.com www.youtube-nocookie.com www.gstatic.com *.octocom.ai tagmanager.google.com *.hs-scripts.com *.hscollectedforms.net *.hs-analytics.net *.hsadspixel.net *.usemessages.com *.hs-banner.com assets.braintreegateway.com https://static.klaviyo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'unsafe-inline' data: *.demdex.net *.yotpo.com api.omappapi.com *.klaviyo.com payments.amazon.com *.signifyd.com *.cardinalcommerce.com *.doubleclick.net eventstable.com *.eventstable.com *.atlaschairs.com *.globaleventsupply.com *.pushalert.co bam.nr-data.net www.creditkey.com *.ravecapture.com static-forms.klaviyo.com telemetrics.klaviyo.com https://px.ads.linkedin.com *.hotjar.io *.vimeocdn.com analytics.tiktok.com *.tiktokw.us jnn-pa.googleapis.com www.youtube.com www.youtube-nocookie.com www.gstatic.com *.accessibly.app *.accessiblyapp.com *.octocom.ai *.google-analytics.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app *.hubspot.com *.hscollectedforms.net *.hubapi.com *.hsappstatic.net *.hsforms.net *.hsforms.com https://bat.bing.com *.clarity.ms https://cdn.mida.so https://api.mida.so https://api-us.mida.so ddwl4m2hdecbv.cloudfront.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.pinterest.com *.pinterdev.com commerce-app.pintergration.com https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.klaviyo.com fonts.googleapis.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com script.hotjar.com hyfin.app *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.bootstrapcdn.com data: maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.weltpixel.com *.wesupply.xyz https://wesupplylabs.com vars.hotjar.com maps.googleapis.com stats.g.doubleclick.net *.fls.doubleclick.net cdn.evgnet.com hyfin.app *.globalpay.com *.verygoodvault.com 17squares.com *.twitter.com *.addthis.com www.facebook.com *.addtoany.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io static.hotjar.com script.hotjar.com maps.googleapis.com stats.g.doubleclick.net cdn.evgnet.com hyfin.app *.globalpay.com *.verygoodvault.com * *.googleapis.com *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.com *.cdninstagram.com *.fbcdn.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.cloudflare.com script.hotjar.com static.hotjar.com maps.googleapis.com stats.g.doubleclick.net cdn.evgnet.com *.us-6.evergage.com hyfin.app *.globalpay.com *.verygoodvault.com *.smartystreets.com 17squares.com * *.googleapis.com *.gstatic.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com www.facebook.com *.jsdelivr.net *.addtoany.com https://includes.ccdc02.com/cardinalcruise/v1/songbird.js https://includestest.ccdc02.com/cardinalcruise/v1/songbird.js https://includestest.ccdc02.com/cardinalcruise/v1/0a125400b09de2105a63/5.0a125400b09de2105a63.songbird.js https://includes.ccdc02.com/cardinalcruise/v1/b109e0c6fd2a5b6b93b2/1.b109e0c6fd2a5b6b93b2.songbird.js https://jstest.authorize.net/v1/Accept.js https://jstest.authorize.net/v1/AcceptCore.js https://js.authorize.net/v1/Accept.js https://js.authorize.net/v1/AcceptCore.js connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com ajax.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com static.hotjar.com script.hotjar.com cdn.evgnet.com hyfin.app *.globalpay.com *.verygoodvault.com *.gstatic.com *.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.bootstrapcdn.com maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.hotjar.com *.hotjar.io wss://*.hotjar.com bam.nr-data.net stats.g.doubleclick.net cookie-cdn.cookiepro.com maps.googleapis.com cdn.evgnet.com *.us-6.evergage.com wss://*.hyfin.app hyfin.app *.globalpay.com *.verygoodvault.com *.smartystreets.com 17squares.com *.cloudflare.com *.twitter.com *.twimg.com *.g.doubleclick.net *.addthis.com *.pinterest.com *.addtoany.com https://apitest.authorize.net/xml/v1/request.api https://api.authorize.net/xml/v1/request.api https://includes.ccdc02.com/cardinalcruise/v1/songbird.js https://includestest.ccdc02.com/cardinalcruise/v1/songbird.js https://includestest.ccdc02.com/cardinalcruise/v1/0a125400b09de2105a63/5.0a125400b09de2105a63.songbird.js https://includes.ccdc02.com/cardinalcruise/v1/b109e0c6fd2a5b6b93b2/1.b109e0c6fd2a5b6b93b2.songbird.js https://jstest.authorize.net/v1/Accept.js https://jstest.authorize.net/v1/AcceptCore.js https://js.authorize.net/v1/Accept.js https://js.authorize.net/v1/AcceptCore.js www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
font-src fonts.gstatic.com use.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.boxnow.gr *.boxnow.cy *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net *.kalogirou.com *.adman.gr *.grxchange.gr http://trustmark.gr *.klarnaservices.com *.clarity.ms *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.octocom.ai data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com www.facebook.com www.youtube.com *.adman.gr *.grxchange.gr http://trustmark.gr *.klarnaservices.com *.clarity.ms *.twitter.com *.octocom.ai 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net www.facebook.com *.googlesyndication.com *.boxnow.gr *.boxnow.cy connect.facebook.net graph.facebook.com business.facebook.com *.klarna.com *.cookiebot.com www.youtube.com *.contactpigeon.com *.skroutz.gr *.netsteps.net *.trust-servers.net https://www.googletagmanager.com *.adman.gr *.grxchange.gr http://trustmark.gr *.klarnaservices.com *.clarity.ms *.twitter.com *.octocom.ai 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com 'self' data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com www.youtube.com p.typekit.net validator.swagger.io *.gstatic.com *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.boxnow.gr *.boxnow.cy connect.facebook.net graph.facebook.com business.facebook.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://firebasestorage.googleapis.com www.google.gr *.cookiebot.com *.google-analytics.com maps.gstatic.com *.kalogirou.com *.contactpigeon.com *.sharethis.com *.klarnaservices.com *.netsteps.net *.trust-servers.net https://kalogirou.com https://kalogirou.com/pub/media/ *.adman.gr *.grxchange.gr http://trustmark.gr *.clarity.ms *.cloudflare.com *.googleadservices.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.octocom.ai *.skroutz.gr data: 'self' 'unsafe-inline'; script-src www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https://www.gstatic.com/recaptcha/ *.google.com assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.googleapis.com *.google.bg *.googletagmanager.com www.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.boxnow.gr *.boxnow.cy connect.facebook.net graph.facebook.com business.facebook.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.avada.io 'self' data: *.cookiebot.com *.googleadservices.com stats.g.doubleclick.net googleads.g.doubleclick.net *.kalogirou.com *.go-mpulse.net *.sharethis.com *.contactpigeon.com *.google.gr *.taboola.com *.skroutz.gr *.netsteps.net *.trust-servers.net *.adman.gr *.grxchange.gr http://trustmark.gr *.clarity.ms *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.octocom.ai 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net *.kalogirou.com www.youtube.com *.contactpigeon.com *.netsteps.net *.trust-servers.net *.adman.gr *.grxchange.gr http://trustmark.gr *.klarnaservices.com *.clarity.ms *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.octocom.ai 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.google-analytics.com www.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.boxnow.gr *.boxnow.cy connect.facebook.net graph.facebook.com business.facebook.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://get.geojs.io *.avada.io maps.googleapis.com stats.g.doubleclick.net googleads.g.doubleclick.net *.cookiebot.com *.kalogirou.com www.youtube.com *.go-mpulse.net *.sharethis.com *.contactpigeon.com eu.klarnaevt.com *.taboola.com *.akstat.io *.skroutz.gr *.netsteps.net *.trust-servers.net *.adman.gr *.grxchange.gr http://trustmark.gr *.clarity.ms *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.octocom.ai 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.contactpigeon.com *.googlesyndication.com *.netsteps.net *.trust-servers.net *.adman.gr *.grxchange.gr http://trustmark.gr *.klarnaservices.com *.clarity.ms 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 3
default-src 'self'; connect-src 'self' *.google-analytics.com *.googleapis.com *.googletagmanager.com *.facebook.com *.acsbapp.com *.google.com *.s3-eu-west-1.amazonaws.com *.amazone.de ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube-nocookie.com *.amazone.de; script-src-elem 'self' 'unsafe-inline' amazone.concludis.de player.podigee-cdn.net *.googleapis.com *.youtube.com *.amazone.de *.consentmanager.net *.googletagmanager.com *.google-analytics.com connect.facebook.net *.acsbapp.com *.s3-eu-west-1.amazonaws.com *.doubleclick.net; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' *.googleapis.com amazone.concludis.de cdn.consentmanager.net *.amazone.de; img-src 'self' googleads.g.doubleclick.net *.googleapis.com  *.gstatic.com *.amazonaws.com *.cleverreach.com *.consentmanager.net *.facebook.com *.amazone.de amazone.de *.googletagmanager.com data:; font-src 'self' *.amazone.de data:; frame-src facebook.com player.podigee-cdn.net *.consentmanager.net *.google.com amazone.de amazone.net *.amazone.de *.amazone.net *.googletagmanager.com *.youtube-nocookie.com; 3
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://brek.com https://*.brek.com https://cdn.staysignals.com https://stay-signals-cdn-git-dev-page-one-lab.vercel.app https://connect.facebook.net https://js.stripe.com https://*.stripe.com https://app.posthog.com https://*.posthog.com https://*.sentry.io https://vercel.live; script-src-elem 'self' 'unsafe-inline' https://brek.com https://*.brek.com https://cdn.staysignals.com https://stay-signals-cdn-git-dev-page-one-lab.vercel.app https://connect.facebook.net https://js.stripe.com https://*.stripe.com https://app.posthog.com https://*.posthog.com https://*.sentry.io https://vercel.live; connect-src 'self' https://brek.com https://*.brek.com https://api.vhrgateway.com https://api-dev.vhrgateway.com https://backend-dev-15973-9af2912b-33o5b7ll.onporter.run https://openfreemap.org https://*.openfreemap.org https://cdn.staysignals.com https://*.staysignals.com https://api.stripe.com https://r.stripe.com https://q.stripe.com https://m.stripe.network https://js.stripe.com https://*.stripe.com https://app.posthog.com https://us.i.posthog.com https://eu.i.posthog.com https://us-assets.i.posthog.com https://eu-assets.i.posthog.com https://*.posthog.com https://*.ingest.us.sentry.io https://*.sentry.io https://clh2em6mh0003mg0fodzo5fyy.d.jitsu.com https://connect.facebook.net https://www.facebook.com https://graph.facebook.com https://vercel.live https://vitals.vercel-analytics.com wss://ws-us3.pusher.com wss: http://localhost:* http://127.0.0.1:* ws://localhost:* ws://127.0.0.1:*; img-src 'self' data: blob: http: https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; frame-src 'self' https://brek.com https://*.brek.com https://js.stripe.com https://hooks.stripe.com https://*.stripe.com https://www.youtube.com https://www.facebook.com https://vercel.live; worker-src 'self' blob:; report-uri /api/csp-report 3
default-src 'self' https://fonts.gstatic.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://ctrack.trafficjunky.net https://geo-tracker.smadex.com https://newassets.hcaptcha.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' https://*.googletagmanager.com https://mc.yandex.ru https://*.google-analytics.com https://*.youtube.com https://mc.yandex.com https://mc.yandex.ru https://*.google.com https://*.gstatic.com https://*.mightytips.com https://my.rtmark.net https://*.hybrid.ai https://*.g.doubleclick.net https://ctrack.trafficjunky.net https://geo-tracker.smadex.com https://challenges.cloudflare.com; img-src * data:; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://*.customer.io https://*.youtube.com https://mc.yandex.ru https://*.clariti.ws https://*.analytics.google.com https://*.google-analytics.com https://doubleclick.net https://*.googletagmanager.com https://mc.yandex.com https://mc.yandex.ru https://mc.yandex.md https://yandexmetrica.com https://*.mightytips.com https://*.g.doubleclick.net https://ctrack.trafficjunky.net https://geo-tracker.smadex.com https://analytics.google.com https://challenges.cloudflare.com; frame-src 'self' https://*.youtube.com https://*.instagram.com https://*.twitter.com https://*.yandex.com https://*.google.com https://my.rtmark.net https://*.hybrid.ai https://*.g.doubleclick.net https://ctrack.trafficjunky.net https://geo-tracker.smadex.com https://newassets.hcaptcha.com https://hcaptcha.com https://challenges.cloudflare.com; script-src-elem 'self' 'unsafe-inline' https://*.instagram.com https://*.googletagmanager.com https://*.yandex.ru https://*.google-analytics.com https://*.twitter.com https://*.youtube.com https://mc.yandex.com https://*.google.com https://*.gstatic.com https://mc.yandex.ru https://*.mightytips.com https://my.rtmark.net https://*.hybrid.ai https://*.g.doubleclick.net https://ctrack.trafficjunky.net https://geo-tracker.smadex.com https://track.trackingtraffo.com https://www.hcaptcha.com https://newassets.hcaptcha.com https://challenges.cloudflare.com; frame-ancestors 'self'; report-uri /cspreport.php; 3
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.jivosite.com https://dev.visualwebsiteoptimizer.com https://diffuser-cdn.app-us1.com https://prism.app-us1.com https://s4.ispringsolutions.com https://s4.ispring.eu https://www.googletagmanager.com https://www.google-analytics.com https://bitrix.info https://cdn5.ispringsolutions.com https://s4.ispringsolutions.com https://scripts.clarity.ms https://www.clarity.ms https://bat.bing.com https://connect.facebook.net https://trackcmp.net https://ispring.postaffiliatepro.com https://googleads.g.doubleclick.net https://apis.google.com https://cdnjs.cloudflare.com https://static.tildacdn.com https://bzrcdn.openai.com https://eu-assets.i.posthog.com https://tr.capterra.com https://www.ispring.com; style-src 'self' 'unsafe-inline' https://*.jivosite.com https://fonts.googleapis.com https://static.tildacdn.com https://cdnjs.cloudflare.com https://www.gstatic.com; img-src 'self' https://*.jivosite.com https://dev.visualwebsiteoptimizer.com https://www.google-analytics.com https://www.googletagmanager.com data: blob: https://cdn5.ispringsolutions.com https://cdn4.ispringsolutions.com https://ispring.com https://www.ispring.com https://www.ispringsolutions.com https://static.tildacdn.com https://thb.tildacdn.com https://bat.bing.com https://bat.bing.net https://c.bing.com https://c.clarity.ms https://connect.facebook.net https://www.facebook.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://translate.google.com https://fonts.gstatic.com https://i.ytimg.com https://secure.gravatar.com https://s.w.org https://yastatic.net https://files.jivosite.com; font-src 'self' https://fonts.gstatic.com https://cdn5.ispringsolutions.com https://static.tildacdn.com https://www.ispring.com; media-src 'self' https://*.jivosite.com https://www.youtube.com https://cdn4.ispringsolutions.com https://code.jivosite.com; object-src 'self' https://cdn5.ispringsolutions.com https://www.ispring.com; worker-src 'self' blob:; connect-src 'self' https://*.jivosite.com wss://*.jivosite.com https://dev.visualwebsiteoptimizer.com https://tracker.clickfortify.com https://www.google-analytics.com https://www.googletagmanager.com https://analytics.google.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://www.google.com https://www.googleadservices.com https://apis.google.com https://cdn5.ispringsolutions.com https://static.tildacdn.com https://sysstat.tildacdn.com https://stat.tildaapi.com https://a.clarity.ms https://b.clarity.ms https://e.clarity.ms https://f.clarity.ms https://g.clarity.ms https://h.clarity.ms https://i.clarity.ms https://j.clarity.ms https://k.clarity.ms https://l.clarity.ms https://m.clarity.ms https://n.clarity.ms https://o.clarity.ms https://p.clarity.ms https://r.clarity.ms https://report.clarity.ms https://s.clarity.ms https://t.clarity.ms https://u.clarity.ms https://y.clarity.ms https://z.clarity.ms https://bat.bing.com https://bat.bing.net https://www.facebook.com https://eu.i.posthog.com https://translate.googleapis.com https://ispring.postaffiliatepro.com https://bzrcdn.openai.com https://bzr.openai.com https://tr.capterra.com; frame-src 'self' https://www.youtube.com https://cdn4.ispringsolutions.com https://cdn5.ispringsolutions.com https://ispringteam.ispring.com https://www.facebook.com https://www.google.com https://www.googletagmanager.com; frame-ancestors 'self'; report-uri /csp-report/report-only 3
font-src www.paypalobjects.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net player.vimeo.com *.youtube.com https://www.google.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.google.com js.mollie.com *.sendcloud.sc *.jsdelivr.net https://www.googletagmanager.com https://td.doubleclick.net embed.pakketdienstqls.nl https://imgproxy.vendic.dev www.ghmparts.com https://images.ghmparts.com https://pagead2.googlesyndication.com https://www.google.nl https://www.google.de https://www.google.fr https://www.google.es https://www.google.it https://www.google.pt https://www.google.pl https://www.google.be https://www.google.co.uk https://www.facebook.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com https://images.unsplash.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com *.sooqr.com *.spotlersearch.com https://www.mollie.com *.amazonaws.com epc.het-magazijn.com https://imgproxy.vendic.dev data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https://maps.googleapis.com https://player.vimeo.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.disqus.com *.google.com *.sooqr.com *.spotlersearch.com spotlersearchanalytics.com js.mollie.com pay.google.com applepay.cdn-apple.com *.sendcloud.sc *.jsdelivr.net embed.pakketdienstqls.nl https://cdn.cookie-script.com https://static.cloudflareinsights.com https://d5yoctgpv4cpx.cloudfront.net https://pagead2.googlesyndication.com https://connect.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com *.sooqr.com *.spotlersearch.com *.sendcloud.sc *.jsdelivr.net https://www.vizeo.nl 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com https://ipinfo.io https://www.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.sooqr.com *.spotlersearch.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com https://pagead2.googlesyndication.com https://p2iqhncxyh.execute-api.eu-central-1.amazonaws.com https://www.google.nl https://www.google.de https://www.google.fr https://www.google.es https://www.google.it https://www.google.pt https://www.google.pl https://www.google.be https://www.google.co.uk googleads.g.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
default-src 'self';   script-src 'self' 'unsafe-inline' 'unsafe-eval'     https://*.adobe.com     https://*.adobedtm.com     https://*.omtrdc.net     https://www.googletagmanager.com     https://www.google-analytics.com;   style-src 'self' 'unsafe-inline'     https://fonts.googleapis.com     https://use.typekit.net;   font-src 'self' data:     https://fonts.gstatic.com     https://use.typekit.net     https://p.typekit.net;   img-src 'self' data: blob:     https://*.adobe.com     https://*.omtrdc.net     https://www.google-analytics.com     https://www.googletagmanager.com;   connect-src 'self'     https://*.adobe.com     https://*.adobedtm.com     https://*.omtrdc.net     https://*.google-analytics.com     https://*.analytics.google.com;   frame-src 'self'     https://www.youtube.com     https://player.vimeo.com;   object-src 'none';   base-uri 'self';   frame-ancestors 'self';   form-action 'self';   upgrade-insecure-requests;   report-uri /csp-violation-report;   report-to csp-endpoint 3
script-src-elem 'self' 'unsafe-inline' assets.adobedtm.com *.cardinalcommerce.com local.behangwebshopm2.nl; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.bootstrapcdn.com data: *.fontawesome.com *.cloudflare.com fonts.googleapis.com *.googleapis.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.hotjar.com *.criteo.com https://consentcsn.cookiebot.com *.multisafepay.com https://pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.behangwebshop.nl *.cloudfront.net magefan.com cm.magefan.com https://firebasestorage.googleapis.com *.multisafepay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com *.bing.com *.clarity.ms *.cookiebot.com www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bs www.google.by www.google.ca www.google.ch www.google.cl www.google.co.ao www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bo www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zw www.google.cz www.google.de www.google.dk www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gr www.google.hn www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.sc www.google.se www.google.si www.google.sk www.google.sn www.google.sr www.google.tn google.com *.googlesyndication.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com widget.thuiswinkel.org *.hotjar.com *.criteo.net *.criteo.com api.widget.trengo.eu static.widget.trengo.eu *.trustpilot.com bam-cell.nr-data.net vanerkel.zendesk.com static.zdassets.com chimpstatic.com *.cardinalcommerce.com *.authorize.net *.bing.com *.doubleclick.net https://*.cookiebot.eu *.fontawesome.com *.googleapis.com *.gstatic.com *.avada.io *.shopify.com *.multisafepay.com https://pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.clarity.ms *.cloudflareinsights.com *.cookiebot.com *.googlesyndication.com *.zopim.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com *.bootstrapcdn.com *.fontawesome.com *.thuiswinkel-cdn.org *.googleapis.com https://fonts.bunny.net *.multisafepay.com assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.widget.trengo.eu static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.widget.trengo.eu *.thuiswinkel-cdn.org *.hotjar.com bam-cell.nr-data.net wss://ws17.hotjar.com *.google-analytics.com vanerkel.zendesk.com *.zdassets.com *.doubleclick.net *.zopim.com wss://widget-mediator.zopim.com https://*.cookiebot.eu https://get.geojs.io *.avada.io *.multisafepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app *.bing.com *.clarity.ms *.cookiebot.com www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bs www.google.by www.google.ca www.google.ch www.google.cl www.google.co.ao www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.kr www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bo www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.om www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.nz www.google.co.th www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zw www.google.cz www.google.de www.google.dk www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gr www.google.hn www.google.hr www.google.hu www.google.ie www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kz www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk www.google.sr www.google.tn *.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://70340d24-235b-4990-9e78-f23006e4ffdf.sansec.watch/; report-to report-endpoint; 3
font-src *.fontawesome.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com assets.braintreegateway.com pay.google.com play.google.com *.autopay.eu cdn.dnky.co webchat.dotdigital.com secure.payu.com merch-prod.snd.payu.com *.weltpixel.com *.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com validator.swagger.io www.apptrian.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com platnosci.bm.pl platnosci-accept.bm.pl www.gstatic.com *.autopay.eu static.payu.com *.gstatic.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com js.authorize.net jstest.authorize.net js.braintreegateway.com cdn-scripts.signifyd.com www.youtube.com www.apptrian.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.autopay.eu pay.google.com *.google-analytics.com *.googletagmanager.com r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net cdn.dnky.co api.comapi.com webchat.dotdigital.com *.avada.io secure.payu.com secure.snd.payu.com https://www.googletagmanager.com tagmanager.google.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.autopay.eu *.googleapis.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com tagmanager.google.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com payments.sandbox.braintree-api.com origin-analytics-sand.sandbox.braintree-api.com assets.braintreegateway.com www.apptrian.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.google-analytics.com r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net api.comapi.com webchat.dotdigital.com https://get.geojs.io *.avada.io secure.payu.com merch-prod.snd.payu.com https://www.google-analytics.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' https:; form-action 'self'; report-uri /api/csp-report 3
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.cookielaw.org https://*.doubleclick.net https://*.onetrust.com https://www.google-analytics.com;    img-src * data: ;   script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://*.googleapis.com https://www.gstatic.com https://www.google.com https://www.googletagmanager.com https://cdn.cookielaw.org https://aq.flippenterprise.net https://www.google-analytics.com https://*.doubleclick.net;    style-src 'self' 'unsafe-inline' ;   font-src 'self' 'unsafe-inline' data:;    connect-src 'self' https://*.google.com https://www.google-analytics.com https://*.doubleclick.net https://cdn.cookielaw.org https://*.onetrust.com https://*.googleapis.com;   upgrade-insecure-requests; 3
worker-src blob:; font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com fonts.gstatic.com *.kxcdn.com *.klarnacdn.net *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.instagram.com *.doubleclick.net *.facebook.com *.googlesyndication.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com bytedance: sslocal: facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com google.com *.klarna.com landofcoder.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.cdninstagram.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com scontent.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com google.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.klarna.com *.klarnaevt.com *.klarnacdn.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ apis.google.com *.instagram.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com *.googleapis.com google.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com s7.addthis.com landofcoder.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com google.com *.kxcdn.com downloads.mailchimp.com *.klarnacdn.net *.fontawesome.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com ekr.zdassets.com/ landofcoder.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 3
default-src 'self'; base-uri 'self'; frame-ancestors 'self' https://facebook.com https://www.facebook.com https://business.facebook.com https://*.facebook.com; object-src 'none'; form-action 'self'; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https: 3
font-src *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paymentexpress.com *.windcave.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com www.xtento.com *.paymentexpress.com *.windcave.com *.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.xtento.com cdn.xtento.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.files-text.com *.livechatinc.com *.livechat-files.com *.livechat-static.com https://firebasestorage.googleapis.com flagpedia.net *.yotpo.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.xtento.com cdn.xtento.com https://rum.hlx.page chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://browser.sentry-cdn.com *.livechatinc.com *.livechat-static.com *.avada.io *.shopify.com *.gstatic.com maps.googleapis.com *.yotpo.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src downloads.mailchimp.com *.livechatinc.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src *.livechatinc.com 'self' 'unsafe-inline'; media-src *.livechatinc.com *.livechat-static.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com https://*.ingest.sentry.io *.livechatinc.com *.text.com https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com *.yotpo.com 'self' 'unsafe-inline'; child-src *.livechatinc.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de js.mollie.com https://www.googletagmanager.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://checkout.staging.devpayever.com https://checkout.payever.org *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.doofinder.com https://www.mollie.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ ratenkauf.easycredit.de www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com x.klarnacdn.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.doofinder.com js.mollie.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ ratenkauf.easycredit.de js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://checkout.staging.devpayever.com https://checkout.payever.org *.trustpilot.com maps.googleapis.com x.klarnacdn.net/ www.gstatic.com www.google.com *.googleapis.com *.gstatic.com cdn.doofinder.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com x.klarnacdn.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.doofinder.com *.fontawesome.com assets.braintreegateway.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.doofinder.com wss://*.doofinder.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ ratenkauf.easycredit.de api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://checkout.staging.devpayever.com https://checkout.payever.org https://payments-third-party.staging.devpayever.com https://payments-third-party.payever.org maps.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://cdn.riverty.design/ https://static.dhlecommerce.nl https://fonts.gstatic.com https://www.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com uc8.tv www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net *.braintreegateway.com *.paypal.com google.com *.google.com uc8.tv https://documents.riverty.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://www.googletagmanager.com/ js.mollie.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.paypal.com *.typekit.net *.gstatic.com https://cdn.myafterpay.com/ uc8.tv https://cdn.riverty.design/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://images.unsplash.com https://maps.googleapis.com https://maps.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://firebasestorage.googleapis.com https://www.magezon.com https://www.mollie.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com uc8.tv https://cdn.myafterpay.com/ https://cdn.bnpl.riverty.io/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com https://player.vimeo.com https://static.dhlecommerce.nl https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://cdn.jsdelivr.net *.avada.io *.shopify.com js.mollie.com pay.google.com applepay.cdn-apple.com *.googletagmanager.com *.snrcdn.net *.snrbox.com *.ekomiapps.de www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.dhlecommerce.nl https://maps.googleapis.com https://fonts.googleapis.com https://static.klaviyo.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com uc8.tv https://cdn.myafterpay.com/ https://documents.myafterpay.com/ https://documents.riverty.com/ https://www.afterpay.nl/ https://cdn.bnpl.riverty.io/ https://trace-api.newrelic.com/ https://distributions.crowdin.net/ https://api.crowdin.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com https://player.vimeo.com https://api-gw.dhlparcel.nl https://static.dhlecommerce.nl https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.authorize.net *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com *.authorize.net *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io connect.bolt.com connect-sandbox.bolt.com s3-us-west-1.amazonaws.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com https://rum.hlx.page connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com *.plugins.emarsys.net *.scarabresearch.com *.authorize.net *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.magento-datasolutions.com *.magento-ds.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com sessions.bugsnag.com *.scarabresearch.com *.eservice.emarsys.net *.authorize.net *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
font-src www.paypalobjects.com https://js.klevu.com *.googleapis.com *.hotjar.com dhv2ziothpgrr.cloudfront.net *.klevu.com *.ksearchnet.com use.fontawesome.com maxcdn.bootstrapcdn.com fonts.gstatic.com *.yotpo.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com *.ometria.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com account.fetchify.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://plumrocket.com *.hotjar.com https://9957200.fls.doubleclick.net https://danv01ao0kdr2.cloudfront.net https://dj3zaulksz6yg.cloudfront.net *.brandlock.io *.braintreegateway.com *.klarna.com https://accounts.google.com *.mention-me.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://www.incontinencechoice.co.uk https://prod.choiceadmin.co.uk https://staging.choiceadmin.co.uk https://admin.vivactive.com https://trk.ometria.com *.brandlock.io https://www.google.com https://bat.bing.com https://pixel.quantserve.com https://www.facebook.com *.googleapis.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://s3-eu-west-1.amazonaws.com dhv2ziothpgrr.cloudfront.net *.klevu.com *.ksearchnet.com *.yotpo.com swellrewards.com *.swellrewards.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page cc-cdn.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://cdn.ometria.com cdnjs.cloudflare.com https://js.klevu.com/ https://bat.bing.com https://secure.quantserve.com https://www.gstatic.com https://connect.facebook.net https://dj3zaulksz6yg.cloudfront.net *.brandlock.io https://cdn-ukwest.onetrust.com https://geolocation.onetrust.com https://songbirdstag.cardinalcommerce.com https://www.googleoptimize.com https://cdn.oribi.io https://app.factors.ai https://rules.quantcount.com https://googleads.g.doubleclick.net https://www.clarity.ms https://www.clarity.ms/tag/ *.googleapis.com https://www.googletagmanager.com/gtag/js *.klarna.com *.klarnacdn.net x.klarnacdn.net https://accounts.google.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net https://tag.rmp.rakuten.com *.klevu.com *.ksearchnet.com *.mention-me.com *.yotpo.com swellrewards.com *.swellrewards.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cc-cdn.com assets.braintreegateway.com *.googleapis.com *.hotjar.com https://accounts.google.com https://www.gstatic.com dhv2ziothpgrr.cloudfront.net *.klevu.com *.ksearchnet.com *.yotpo.com swellrewards.com *.swellrewards.com fonts.googleapis.com maxcdn.bootstrapcdn.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://payments.sandbox.braintree-api.com https://api.sandbox.braintreegateway.com https://origin-analytics-sand.sandbox.braintree-api.com/ https://danv01ao0kdr2.cloudfront.net *.brandlock.io https://cdn-ukwest.onetrust.com https://privacyportal-uk.onetrust.com https://stats.g.doubleclick.net https://www.paypal.com https://geolocation.onetrust.com *.hotjar.com *.hotjar.io wss://*.hotjar.com https://api.factors.ai https://b.clarity.ms https://y.clarity.ms/collect *.googleapis.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net https://accounts.google.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com *.klevu.com *.ksearchnet.com *.mention-me.com *.ometria.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://f720cf68-df7d-4a7b-a5e9-4e537ae99361.sansec.watch/; report-to report-endpoint; 3
font-src https://www.gstatic.com *.dhlparcel.nl https://widgetcontent.thuiswinkel-cdn.org https://widget.thuiswinkel-cdn.org https://fonts.gstatic.com *.fontawesome.com *.gstatic.com 'self' data: https://widgets.trustedshops.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net *.googletagmanager.com *.doubleclick.net *.voegenshop.nl https://widgets.trustedshops.com www.xtento.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://belco-prod.s3-eu-central-1.amazonaws.com https://images.unsplash.com *.google.com *.google.nl *.mailcampaigns.nl *.cloudflare.com *.voegenshop.nl *.etrusted.com https://widgetcontent.thuiswinkel-cdn.org https://widget.thuiswinkel-cdn.org *.doubleclick.net www.xtento.com cdn.xtento.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://img.youtube.com https://www.mollie.com *.amazonaws.com *.hsforms.net *.hsforms.com 'self' data: www.google.com.ua https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://cdn.belco.io https://maps.googleapis.com *.dhlparcel.nl *.google-analytics.com *.mailcampaigns.nl *.cookiecode.nl *.clarity.ms *.cloudflare.com https://consent.studio https://widget.thuiswinkel.org https://widget.thuiswinkel-cdn.org https://cloud.umami.is www.xtento.com cdn.xtento.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com https://cdn.jsdelivr.net *.belco.io https://browser.sentry-cdn.com *.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com *.sendcloud.sc *.jsdelivr.net *.hsforms.net *.hsforms.com *.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://*.googleapis.com *.dhlparcel.nl *.cloudflare.com *.etrusted.com https://widgetcontent.thuiswinkel-cdn.org https://widget.thuiswinkel-cdn.org https://static.klaviyo.com https://cdn.jsdelivr.net https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com *.sendcloud.sc *.jsdelivr.net *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com wss://chat.belco.io https://cdn.belco.io https://maps.googleapis.com https://player.vimeo.com *.doubleclick.net *.cookiecode.nl *.google.com *.voegenshop.nl https://consent.studio https://widgetcontent.thuiswinkel-cdn.org https://gateway.umami.is https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.belco.io https://*.ingest.sentry.io https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
font-src fonts.gstatic.com use.typekit.net *.googleapis.com cdnjs.cloudflare.com cloud.typography.com https://fonts.gstatic.com *.fontawesome.com https://use.typekit.net https://p.typekit.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com www.facebook.com https://seo.mageplaza.com https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com www.googletagmanager.com www.google.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com assets.bounceexchange.com vars.hotjar.com www.facebook.com imgs.signifyd.com h.online-metrix.net vendor1.leasestation.com amc.demdex.net nsg.symantec.com https://www.google.com newassets.hcaptcha.com js.mollie.com https://plumrocket.com *.weltpixel.com www.xtento.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://images.unsplash.com *.googleapis.com *.gstatic.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com www.google.co.in brsrvr.com www.facebook.com *.cdnwidget.com u.cdnwidget.com bat.bing.com nsg.symantec.com events.bouncex.net pippio.com p.brsrvr.com connect.facebook.net imgs.signifyd.com events.cdnwidget.com api.bounceexchange.com https://cm.g.doubleclick.net amc.demdex.net *.e.aa.online-metrix.net staging.powr-flite.com https://px.ads.linkedin.com https://www.linkedin.com *.google.com https://fei.pro-market.net https://c.clarity.ms https://um.simpli.fi https://c.bing.com https://eb2.3lift.com https://simplifi.partners.tremorhub.com https://pixel.tapad.com https://aa.agkn.com https://sync.intentiq.com https://loadm.exelator.com https://sync.bfmio.com https://stags.bluekai.com https://bcp.crwdcntrl.net https://ce.lijit.com https://idsync.rlcdn.com https://sync.search.spotxchange.com https://ib.adnxs.com https://googleads.g.doubleclick.net https://pixel.rubiconproject.com https://us-u.openx.net https://d.agkn.com https://bam.nr-data.net maps.googleapis.com maps.gstatic.com https://www.mollie.com www.xtento.com cdn.xtento.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com assets.adobedtm.com *.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-datasolutions.com *.magento-ds.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://rum.hlx.page https://maps.googleapis.com https://player.vimeo.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com www.gstatic.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com events.bouncex.net api.bounceexchange.com events.bouncex.com rec.smartlook.com script.hotjar.com static.hotjar.com script.crazyegg.com connect.facebook.net vendor1.quickspark.com nsg.symantec.com bat.bing.com tag.bounceexchange.com assets.bounceexchange.com cdn.brcdn.com imgs.signifyd.com www.google.com cdns.brsrvr.com bam.nr-data.net js-agent.newrelic.com mc.s10.exacttarget.com www.dwin1.com www.clarity.ms https://browser.sentry-cdn.com hcaptcha.com https://cdn.cookielaw.org https://tag.simpli.fi https://i.simpli.fi https://snap.licdn.com https://ws.zoominfo.com polyfill-fastly.io maps.googleapis.com js.mollie.com pay.google.com applepay.cdn-apple.com www.xtento.com cdn.xtento.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com https://static.klaviyo.com display.ugc.bazaarvoice.com vendor1.quickspark.com events.bouncex.net stats.g.doubleclick.net www.google-analytics.com cdnjs.cloudflare.com cloud.typography.com https://fonts.googleapis.com *.fontawesome.com https://use.typekit.net https://p.typekit.net https://cloud.typography.com https://static-tracking.klaviyo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.magento-datasolutions.com *.magento-ds.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://maps.googleapis.com https://player.vimeo.com *.googleapis.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com bat.bing.com script.crazyegg.com events.bouncex.net stats.g.doubleclick.net manager.eu.smartlook.cloud in.hotjar.com *.dxpapi.com core.dxpapi.com imgs.signifyd.com bt.signifyd.com:11103 data.cdnbasket.net ids.cdnwidget.com pd.cdnwidget.com page.cdnbasket.net/ view.cdnbasket.net bam.nr-data.net vc.hotjar.io *.clarity.ms https://*.ingest.sentry.io https://cdn.cookielaw.org *.hotjar.com https://content.hotjar.io https://csmetrics.hotjar.com https://ws.zoominfo.com https://analytics.google.com https://cdn.linkedin.oribi.io maps.googleapis.com https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com hcaptcha.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
default-src https: wss://ws.varq.net wss://wst.varq.net wss://wst2.varq.net; script-src https: http: 'unsafe-eval' 'unsafe-inline'; style-src https: http: 'unsafe-inline'; img-src https: http: data:; font-src https: http: data:; 3
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net cash-f.squarecdn.com https://client.crisp.chat https://plugin-magento-ui.glopalservice.com *.fontawesome.com https://fonts.bunny.net *.cloudflare.com fonts.gstatic.com/ maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://applepay.cdn-apple.com applepay.cdn-apple.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com p.monetico-services.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ * ct.pinterest.com *.payplug.com *.dalenys.com https://applepay.cdn-apple.com api-qa.payplug.com secure-qa.payplug.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io * https://images.unsplash.com https://image.crisp.chat *.google.com *.google.fr *.google.ie *.jardindupicvert.com *.jardindupicvert.com.localhost *.promessedefleurs.com *.promessedefleurs.com.localhost cl.avis-verifies.com ct.pinterest.com bat.bing.com www.google.com.vn https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com https://firebasestorage.googleapis.com https://secure-magenta.dalenys.com bzr.openai.com https://redchamps.com *.openstreetmap.fr *.openstreetmap.org unpkg.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://maps.googleapis.com https://player.vimeo.com https://client.crisp.chat *.google.com *.google.fr *.google.ie *.googletagmanager.com *.googleadservices.com cl.avis-verifies.com bat.bing.com s.pinimg.com https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com cdn-renderer.glopalstore.com *.avada.io *.shopify.com https://cdnjs.cloudflare.com https://secure-magenta.dalenys.com https://applepay.cdn-apple.com api-qa.payplug.com cdn.payplug.com https://cdn.payplug.com cdn-qa.payplug.com https://cdn-qa.payplug.com *.clarity.ms bzrcdn.openai.com https://unpkg.com/pwacompat 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app https://client.crisp.chat https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://secure-magenta.dalenys.com unpkg.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io * https://maps.googleapis.com https://player.vimeo.com https://client.crisp.chat wss://client.relay.crisp.chat https://plugins.crisp.chat *.doubleclick.net *.jardindupicvert.com *.jardindupicvert.com.localhost *.promessedefleurs.com *.promessedefleurs.com.localhost ct.pinterest.com https://api-plugin-facade.glopalservice.com https://cognito-idp.eu-west-1.amazonaws.com api.glopaltranslator.com https://get.geojs.io *.avada.io *.clarity.ms c.bing.com bzr.openai.com bzrcdn.openai.com *.openstreetmap.org *.arcgis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src cl.avis-verifies.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
font-src *.fontawesome.com https://fonts.bunny.net https://widgets.trustedshops.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.multisafepay.com https://pay.google.com https://widget.trustpilot.com https://vars.hotjar.com facebook.com *.doubleclick.net https://www.google.com https://www.googletagmanager.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https://images.unsplash.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com *.multisafepay.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://www.facebook.com https://www.google.com https://www.google.nl *.bing.com *.gstatic.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ widget.freshworks.com m2epro.freshdesk.com https://browser.sentry-cdn.com https://maps.googleapis.com *.avada.io *.cloudflare.com/ajax/libs/prototype/1.7.3/prototype.js *.multisafepay.com https://pay.google.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com https://cdnjs.cloudflare.com https://www.googletagmanager.com https://connect.facebook.net https://*.hotjar.com https://widget.trustpilot.com *.bing.com https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://img.youtube.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com https://fonts.bunny.net *.multisafepay.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.google-analytics.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.youtube.com *.youtube-nocookie.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com widget.freshworks.com m2epro.freshdesk.com https://*.ingest.sentry.io https://maps.googleapis.com https://player.vimeo.com https://get.geojs.io *.avada.io *.multisafepay.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://region1.google-analytics.com *.doubleclick.net *.hotjar.com wss://*.hotjar.com *.google.com *.bing.com bam.nr-data.net google.com www.google.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
font-src data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src 'self' 'unsafe-inline'; img-src data: 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
font-src www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.multisafepay.com https://pay.google.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com www.google.com https://*.dpdconnect.nl youtube.com *.doubleclick.net *.multisafepay.com https://pay.google.com *.weltpixel.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com https://firebasestorage.googleapis.com flagpedia.net www.jmpbonderdelen.nl www.jmpbonderdelen.be www.jmpbparts.com www.jmpbteile.de www.jmpbteile.at www.jmpbdele.dk 'self' data: *.google.nl *.multisafepay.com *.gstatic.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://*.dpdconnect.nl *.avada.io *.shopify.com player.vimeo.com *.gstatic.com maps.googleapis.com *.multisafepay.com https://pay.google.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com *.googleapis.com *.multisafepay.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com *.google-analytics.com *.doubleclick.net *.google.com google.com *.googlesyndication.com *.googleadservices.com *.google.nl *.multisafepay.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.cookielaw.org https://*.onetrust.com https://*.logrocket.io https://*.lr-ingest.io https://*.logr-in.com https://*.formstack.com https://shrss-ranxu.formstack.com https://www.google.com https://www.gstatic.com blob:; style-src 'self' 'unsafe-inline' https://*.cookielaw.org https://*.formstack.com https://fonts.googleapis.com; img-src 'self' data: blob: https://picsum.photos https://*.formstack.com https://*.cookielaw.org https://*.logrocket.io https://www.gstatic.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.logrocket.io https://*.lr-ingest.io https://*.lr-in.com https://*.logr-in.com https://*.formstack.com https://shrss-ranxu.formstack.com https://geolocation.onetrust.com https://*.cookielaw.org; frame-src 'self' https://*.formstack.com https://www.google.com https://www.gstatic.com; frame-ancestors 'self'; worker-src 'self' blob:; base-uri 'self'; form-action 'self' https://*.formstack.com; object-src 'none' 3
default-src 'self'; connect-src 'self' www.facebook.com stats.g.doubleclick.net *.oribi.io www.google-analytics.com csp.withgoogle.com cdn.jsdelivr.net data:; frame-src 'self' 52.186.34.239 www.facebook.com *.aquawater.com *.youtube.com *.google.com www.googletagmanager.com; img-src 'self' www.linkedin.com t.co analytics.twitter.com www.google-analytics.com px.ads.linkedin.com www.facebook.com i.ytimg.com *.google.com www.googleapis.com *.gstatic.com *.aquaamerica.com data:; script-src 'self' 'unsafe-hashes' 'unsafe-inline' 'unsafe-eval' snap.licdn.com connect.facebook.net *.googletagmanager.com code.jquery.com *.google.com cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com; script-src-attr 'self' 'unsafe-hashes' 'unsafe-inline'; script-src-elem 'self' 'unsafe-hashes' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google.com *.gstatic.com snap.licdn.com connect.facebook.net code.jquery.com cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com; style-src 'self' 'unsafe-hashes' 'unsafe-inline' hello.myfonts.net www.google.com cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src-attr 'self' 'unsafe-hashes' 'unsafe-inline'; frame-ancestors 'self'; report-uri /csp-report 3
default-src *;script-src 'unsafe-inline' 'unsafe-eval' *;style-src 'unsafe-inline' *;connect-src * blob:;report-uri https://cdn.website-start.de/app/reporting/policyviolation/submit 3
font-src fonts.gstatic.com use.typekit.net *.cloudflare.com *.twitter.com https://www.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com https://fonts.gstatic.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.twitter.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com *.multisafepay.com https://pay.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io imgsct.cookiebot.com *.trackedlink.net *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cloudfront.net https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://www.mollie.com *.multisafepay.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net consent.cookiebot.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com https://*.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.googleapis.com https://*.google.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com *.multisafepay.com https://pay.google.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com https://app.aiden.cx 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.multisafepay.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.multisafepay.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
script-src 'unsafe-inline' 'self' https://payments.salesforce.com/ https://stats.g.doubleclick.net https://d.la13-core1.sfdc-yfeipo.salesforceliveagent.com https://checkoutshopper-test.adyen.com/ https://pal-test.adyen.com https://fanduelgroup.my.site.com/ https://api2.amplitude.com https://tattle.api.osano.com https://fanduelgroup.my.site.com https://fanduelgroup.my.site.com/ESWFDEnhancedChatDeplo1759234180461/assets/js/bootstrap.min.js https://checkoutshopper-live.adyen.com/ https://cmp.osano.com https://cmp.osano.com/ https://cdn.content.aws-prod1-useast1.aws.sfdc.cl/ https://cdn.amplitude.com https://d.la1-c1cs-ia6.salesforceliveagent.com/ https://support.fanduel.com https://www.google.com https://pay.google.com https://www.gstatic.com/recaptcha/ https://uip.canary.lwc.dev https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/ https://d.la3-c2-ia5.salesforceliveagent.com/ blob: https://support.fanduel.com/survey/ https://www.googletagmanager.com/gtag/js https://www.google.com/recaptcha/ https://js.stripe.com/ https://d.la3-c1cs-ia4.salesforceliveagent.com https://fanduelgroup.my.salesforce-scrt.com import: https://www.google-analytics.com *.salesforce.com https://www.paypal.com/sdk/js https://cmp.osano.com/6obJqSxoJRfE6CIZ/b18002a1-b1e7-4dfa-9c4e-a987d56780a0/osano.js https://cmp.osano.com/6obJqSxoJRfE6CIZ/b18002a1-b1e7-4dfa-9c4e-a987d56780a0/osano.js.map https://c.la13-core1.sfdc-yfeipo.salesforceliveagent.com 'report-sample' https://service.force.com/embeddedservice/ 'unsafe-eval'; report-to sfdc-csp-ep; report-uri https://fanduelgroup.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D5Y000002UY4T&networkId=0DM5Y000000OMEh&type=communities 3
font-src www.paypalobjects.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors https://api.clerk.io https://cdn.clerk.io *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com *.youtube-nocookie.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://cdn.clerk.io magefan.com cm.magefan.com *.disqus.com https://img.youtube.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://api.clerk.io https://cdn.clerk.io *.disqus.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://api.clerk.io https://cdn.clerk.io *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com vimeo.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com places.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
font-src *.klarnacdn.net *.fontawesome.com https://widgets.trustedshops.com https://integrations.etrusted.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com https://www.paypal.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io *.klarna.com js.mollie.com *.sendcloud.sc *.jsdelivr.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com https://portal.payconiq.com https://static.buckaroo.nl https://www.paypalobjects.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://www.mollie.com *.amazonaws.com https://widgets.trustedshops.com https://integrations.etrusted.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com maps.gstatic.com www.magmodules.eu *.squeezely.tech https://maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com js.mollie.com *.sendcloud.sc *.jsdelivr.net https://www.googletagmanager.com https://widgets.trustedshops.com https://integrations.etrusted.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com squeezely.tech www.squeezely.tech *.squeezely.tech polyfill.io cdn.cookie-script.com gallery.cevoid.com inc.fotobehang.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl *.klarnacdn.net *.fontawesome.com *.sendcloud.sc *.jsdelivr.net https://widgets.trustedshops.com https://integrations.etrusted.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com wss://websocketservice-externalapi.prod.buckaroo.io https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://applepay.buckaroo.io https://www.paypal.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.trustedshops.com *.etrusted.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com squeezely.tech *.squeezely.tech 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: fonts.googleapis.com *.stape.io *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.magerocket.com *.gocuotas.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.magerocket.com *.gocuotas.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.stape.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.magerocket.com *.gocuotas.com magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com *.stape.io https://firebasestorage.googleapis.com https://www.magezon.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com flagpedia.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.magerocket.com *.gocuotas.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.doubleclick.net *.stape.io *.avada.io *.shopify.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maps.googleapis.com www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.googletagmanager.com *.stape.io *.fontawesome.com https://fonts.bunny.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com *.gstatic.com www.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.magerocket.com *.gocuotas.com *.google-analytics.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog *.stape.io https://get.geojs.io *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.gstatic.com maps.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://def9d71d-669f-4322-8f25-4ef099a2d33a.sansec.watch/; report-to report-endpoint; 3
font-src https://cdn.checkout.com *.fontawesome.com maxcdn.bootstrapcdn.com fonts.gstatic.com https://fonts.gstatic.com *.typekit.net *.dixa.io data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * sandbox.przelewy24.pl secure.przelewy24.pl 'self' 'unsafe-inline'; frame-ancestors 'self' *.maksekeskus.ee *.test.maksekeskus.ee localhost *.local *.scandipwa.cloud *.readymage.com sportland.com *.sportland.com sportland.lv *.sportland.lv sportland.ee *.sportland.ee sportland.lt *.sportland.lt sportland.fi *.sportland.fi sportland.pl *.sportland.pl sportland.de *.sportland.de 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com https://js.checkout.com *.klarna.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' *.maksekeskus.ee *.test.maksekeskus.ee c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.google.com https://optimize.google.com https://play.google.com localhost *.local *.scandipwa.cloud *.readymage.com sportland.com *.sportland.com sportland.lv *.sportland.lv sportland.ee *.sportland.ee sportland.lt *.sportland.lt sportland.fi *.sportland.fi sportland.pl *.sportland.pl sportland.de *.sportland.de js.driftt.com *.freshchat.com *.snapchat.com *.askly.me www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.openstreetmap.org https://map.plugins.itella.com magefan.com cm.magefan.com *.maksekeskus.ee *.test.maksekeskus.ee https://maps.omnivasiunta.lt www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com static.przelewy24.pl www.gstatic.com gstatic.com https://www.google-analytics.com https://optimize.google.com *.googleapis.com *.gstatic.com www.google.lv localhost *.local *.scandipwa.cloud *.readymage.com sportland.com *.sportland.com sportland.lv *.sportland.lv sportland.ee *.sportland.ee sportland.lt *.sportland.lt sportland.fi *.sportland.fi sportland.pl *.sportland.pl sportland.de *.sportland.de *.cloudfront.net *.snapchat.com *.bing.com cdn.sanity.io dev.visualwebsiteoptimizer.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://cdn.checkout.com *.klarnacdn.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://unpkg.com s7.addthis.com 'self' *.maksekeskus.ee *.test.maksekeskus.ee data: js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com sandbox.przelewy24.pl secure.przelewy24.pl *.google.com www.googleoptimize.com *.google-analytics.com *.googleapis.com js.driftt.com *.freshchat.com inte.searchnode.io *.sitescdn.net *.fibbl.com *.hotjar.com sc-static.net *.snapchat.com *.googlesyndication.com *.gstatic.com *.translatewise.com *.bloomreach.com *.exponea.com *.sizebay.technology *.newrelic.com *.tradedoubler.com *.dixa.io *.conversing.io *.cartbooster.io *.retargeted.co *.clarity.ms *.bing.com *.tiktok.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://cdn.checkout.com https://unpkg.com *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.google.com https://www.google-analytics.com https://fonts.googleapis.com *.typekit.net *.freshchat.com *.sizebay.technology 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.dixa.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://js.checkout.com *.klarnaevt.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://geocode.arcgis.com ekr.zdassets.com/ 'self' *.maksekeskus.ee *.test.maksekeskus.ee api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com sandbox.przelewy24.pl secure.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com *.fibblar.com *.fibbl.com www.gstatic.com *.google.lv *.google-analytics.com *.googleapis.com *.g.doubleclick.net *.scandipwa.cloud *.readymage.com *.sportland.com *.sportland.lv *.sportland.ee *.sportland.lt *.sportland.fi *.sportland.pl *.sportland.de blob: *.hotjar.com *.hotjar.io *.googlesyndication.com *.translatewise.com https://play.google.com *.bloomreach.com *.exponea.com *.sizebay.technology *.nr-data.net *.chat.askly.me ad.doubleclick.net dev.visualwebsiteoptimizer.com *.exchangerate-api.com *.dixa.io wss://*.dixa.io *.trackingplan.com sentry.io *.tiktok.com *.bing.com *.snapchat.com 'self' 'unsafe-inline'; child-src 'self' *.maksekeskus.ee *.test.maksekeskus.ee assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cash-f.squarecdn.com *.googleapis.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.cardinalcommerce.com *.adyen.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * www.google.com *.cardinalcommerce.com *.doubleclick.net *.googletagmanager.com *.vimeo.com *.adyen.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * *.googleapis.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com beacon-qa.magento-datasolutions.com beacon-stage.magento-ds.com beacon.magento-ds.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com unpkg.com *.magento-datasolutions.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com *.gstatic.com rum.hlx.page 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com *.magento-datasolutions.com *.magento-ds.com *.cash.app *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net p13n.adobe.io *.adobedc.net *.demdex.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com commerce.adobedtm.com *.magento-datasolutions.com *.magento-ds.com * *.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self' https://www.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://cdn.amplitude.com https://cdn-4.convertexperiments.com https://js-agent.newrelic.com https://connect.facebook.net https://js.stripe.com https://accounts.google.com https://apis.google.com https://googleads.g.doubleclick.net https://appleid.cdn-apple.com https://www.redditstatic.com https://bzrcdn.openai.com https://js.appboycdn.com https://js.hsforms.net https://js.hs-scripts.com https://js.hs-analytics.net https://js.hubspot.com https://js.hs-banner.com https://js.hsadspixel.net https://us-assets.i.posthog.com https://*.firebaseio.com https://static.hotjar.com https://script.hotjar.com https://sc-static.net https://tr.snapchat.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://cdn.amplitude.com https://cdn-4.convertexperiments.com https://js-agent.newrelic.com https://connect.facebook.net https://js.stripe.com https://accounts.google.com https://apis.google.com https://googleads.g.doubleclick.net https://appleid.cdn-apple.com https://www.redditstatic.com https://bzrcdn.openai.com https://js.appboycdn.com https://js.hsforms.net https://js.hs-scripts.com https://js.hs-analytics.net https://js.hubspot.com https://js.hs-banner.com https://js.hsadspixel.net https://us-assets.i.posthog.com https://*.firebaseio.com https://static.hotjar.com https://script.hotjar.com https://sc-static.net https://tr.snapchat.com; style-src 'self' 'unsafe-inline' https://use.fontawesome.com https://fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' https://use.fontawesome.com https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https:; manifest-src 'self'; connect-src 'self' https://first-table.firebaseio.com wss://first-table.firebaseio.com https://bam.nr-data.net https://api.stripe.com https://stellate.firsttable.net wss://stellate.firsttable.net https://api.firsttable.net wss://api.firsttable.net https://argus.firsttable.net https://api2.amplitude.com https://api.lab.amplitude.com https://sr-client-cfg.amplitude.com https://api-sr.amplitude.com https://cdn.amplitude.com https://cdn.growthbook.io https://us1.gb-ingest.com https://*.gb-ingest.com https://sdk.iad-07.braze.com https://*.firebaseio.com wss://*.firebaseio.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://ad.doubleclick.net https://www.googleadservices.com https://www.google.co.nz https://www.google.com.au https://www.google.co.uk https://www.google.ie https://www.facebook.com https://connect.facebook.net https://accounts.google.com https://appleid.apple.com https://*.algolia.net https://*.algolianet.com https://*.algolia.io https://*.metrics.convertexperiments.com https://logs.convertexperiments.com https://*.signals.convertexperiments.com https://cdn-4.convertexperiments.com https://api.mapbox.com https://events.mapbox.com https://vitals.vercel-insights.com https://firsttable.bamboohr.com https://api.hubapi.com https://*.hubspot.com https://us.i.posthog.com https://us-assets.i.posthog.com https://pixel-config.reddit.com https://bzrcdn.openai.com https://bzr.openai.com wss://ws.hotjar.com https://ws.hotjar.com https://*.hotjar.com https://*.hotjar.io https://tr.snapchat.com https://tr6.snapchat.com; frame-src 'self' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://js.stripe.com https://hooks.stripe.com https://accounts.google.com https://appleid.apple.com https://tr.snapchat.com https://www.youtube.com https://www.youtube-nocookie.com https://www.facebook.com https://m.facebook.com https://www.tiktok.com https://embed.tiktok.com https://player.vimeo.com https://js.hsforms.net https://*.firebaseio.com; worker-src 'self' blob: https://www.googletagmanager.com; report-to csp-endpoint; report-uri /api/csp-report 3
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com *.chase.hostedpaymentservice.net *.chase-var.hostedpaymentservice.net *.google.com *.mkt.dynamics.com *.azureedge.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.certcapture.com https://www.google.com *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com *.chase.hostedpaymentservice.net *.chase-var.hostedpaymentservice.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://images.unsplash.com *.googleapis.com *.certcapture.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com *.whoson.com *.nexcesscdn.net placehold.co *.amazonaws.com *.6sc.co *.facebook.com *.bing.com *.clarity.ms *.google.co.in *.idexcorp.com cdn-cookieyes.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js *.googleapis.com *.gstatic.com *.certcapture.com https://js.stripe.com https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/releases/Trd6gj1dhC_fx0ma_AWHc1me/recaptcha__en.js *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com *.chase.hostedpaymentservice.net *.chase-var.hostedpaymentservice.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com tagmanager.google.com *.whoson.com *.kbmax.com *.jotfor.ms *.acsbapp.com acsbapp.com *.adobedtm.com *.cardinalcommerce.com *.ccdc02.com *.googleadservices.com *.google-analytics.com *.doubleclick.net *.paypalobjects.com *.ytimg.com *.googleapis.com  *.vimeo.com *.omtrdc.net *.jsdelivr.net *.stripe.com *.6sc.co *.facebook.net *.inventive52intuitive.com *.clarity.ms *.pardot.com *.idexcorp.com cdn-cookieyes.com *.cloudfront.net *.mkt.dynamics.com *.azureedge.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com https://fonts.googleapis.com maxcdn.bootstrapcdn.com assets.braintreegateway.com tagmanager.google.com fonts.google.com *.typekit.net *.whoson.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.idexcorp.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.certcapture.com *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com *.chase.hostedpaymentservice.net *.chase-var.hostedpaymentservice.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.acsbapp.com *.doubleclick.net *.6sc.co *.googlesyndication.com *.clarity.ms *.google.co.in *.facebook.com *.cookieyes.com cdn-cookieyes.com *.idexcorp.com *.mkt.dynamics.com *.azureedge.net *.events.data.microsoft.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com maxcdn.bootstrapcdn.com data: 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.usercentrics.eu *.sibforms.com https://www.googletagmanager.com/ *.facebook.com secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com www.xtento.com *.criteo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.trustedshops.com *.usercentrics.eu *.clarity.ms *.bing.com bat.bing.net *.facebook.com *.doubleclick.net www.google.de www.google.at www.google.ch www.google.pl http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.cdninstagram.com maps.googleapis.com flagpedia.net cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com *.hsforms.net *.hsforms.com 'self' data: www.xtento.com cdn.xtento.com *.google.de *.google.pl *.google.com *.adscale.de fh-118116076e9a4c2a96a99fbb70bea2a0.ecs.us-west-2.on.aws *.smartadserver.com *.outbrain.com *.3lift.com *.fwmrm.net *.yieldmo.com *.openx.net *.360yield.com *.creativecdn.com *.33across.com *.seedtag.com sync.go.sonobi.com fast.nexx360.io simage2.pubmatic.com *.adform.net *.inmobi.com *.dmxleo.com sync.adtech.ink *.bidswitch.net *.casalemedia.com *.criteo.com *.id5-sync.com id5-sync.com *.postrelease.com *.teads.tv *.tremorhub.com *.1rx.io *.media.net *.pubmatic.com *.mediavine.com *.taboola.com *.yieldlab.net *.agkn.com *.unrulymedia.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://shopify.admetrics.events https://v6.shopify.admetrics.events *.googleapis.com *.trustedshops.com *.usercentrics.eu *.clarity.ms *.bing.com *.taboola.com *.brevo.com sibautomation.com *.dynamicyield.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ player.vimeo.com connect.facebook.net cdnjs.cloudflare.com maps.googleapis.com *.gstatic.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com *.hsforms.net *.hsforms.com www.xtento.com cdn.xtento.com *.criteo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.gstatic.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://shopify.admetrics.events https://v6.shopify.admetrics.events *.googleapis.com *.cloudfront.net *.usercentrics.eu *.trustedshops.com *.clarity.ms *.bing.com bat.bing.net *.taboola.com *.brevo.com *.doubleclick.net www.google.de www.google.at www.google.ch www.google.pl *.dynamicyield.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ maps.googleapis.com www.gstatic.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com t.elasticsuite.io *.hsforms.net *.hsforms.com region1.analytics.google.com *.creativecdn.com bded8a3c6ae-1-1053047382554.us-central1.run.app fh-118116076e9a4c2a96a99fbb70bea2a0.ecs.us-west-2.on.aws 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://cdn.aniculis.nl https://dev.hoezo-kado.nl https://www.aniforte.nl https://www.aniculis.nl https://www.vogelhuisje.com https://www.allesfuervoegel.de https://www.reavet.nl https://www.hoezo-kado.nl *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://widgets.trustedshops.com https://integrations.etrusted.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://*.dpdconnect.nl https://cdn.aniculis.nl https://dev.hoezo-kado.nl https://www.aniforte.nl https://www.aniculis.nl https://www.vogelhuisje.com https://www.allesfuervoegel.de https://www.reavet.nl https://www.hoezo-kado.nl https://www.googletagmanager.com js.mollie.com www.facebook.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://cdn.aniculis.nl https://dev.hoezo-kado.nl https://www.aniforte.nl https://www.aniculis.nl https://www.vogelhuisje.com https://www.allesfuervoegel.de https://www.reavet.nl https://www.hoezo-kado.nl https://www.google.nl https://firebasestorage.googleapis.com https://www.mollie.com maps.gstatic.com blob: https://widgets.trustedshops.com https://integrations.etrusted.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://*.dpdconnect.nl https://cdn.aniculis.nl https://dev.hoezo-kado.nl https://www.aniforte.nl https://www.aniculis.nl https://www.vogelhuisje.com https://www.allesfuervoegel.de https://www.reavet.nl https://www.hoezo-kado.nl https://static.getclicky.com https://in.getclicky.com https://static.cloudflareinsights.com *.avada.io *.shopify.com js.mollie.com maps.googleapis.com cdn.ampproject.org www.gstatic.com connect.facebook.net https://widgets.trustedshops.com https://integrations.etrusted.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://cdn.aniculis.nl https://dev.hoezo-kado.nl https://www.aniforte.nl https://www.aniculis.nl https://www.vogelhuisje.com https://www.allesfuervoegel.de https://www.reavet.nl https://www.hoezo-kado.nl *.fontawesome.com https://fonts.bunny.net www.gstatic.com maxcdn.bootstrapcdn.com https://widgets.trustedshops.com https://integrations.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.googleapis.com https://cdn.aniculis.nl https://dev.hoezo-kado.nl https://www.aniforte.nl https://www.aniculis.nl https://www.vogelhuisje.com https://www.allesfuervoegel.de https://www.reavet.nl https://www.hoezo-kado.nl https://stats.g.doubleclick.net https://in.getclicky.com https://get.geojs.io *.avada.io cdn.ampproject.org *.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self'; 3
font-src *.gstatic.com data: https://cdnjs.cloudflare.com https://use.typekit.net data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com www.google.com secure-gateway.hipay-tpp.com *.hipay.com https://www.googletagmanager.com/ js.mollie.com *.pilotpen.fr 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com *.gstatic.com *.googleapis.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com https://www.mollie.com https://www.google.fr https://api.mapbox.com *.tile.openstreetmap.org https://maps.googleapis.com https://maps.gstatic.com https://mcstaging.pilotpen-pro.eu/pim-pilot-dev/ https://pilotpen-pro.eu/pim-pilot-prod/ https://i3.ytimg.com/vi/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page *.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ secure-gateway.hipay-tpp.com *.hipay.com mpsnare.iesnare.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ js.mollie.com https://widgets.rr.skeepers.io/ https://api-product-reviews.rr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cdnjs.cloudflare.com https://maps.googleapis.com https://widgets.rr.skeepers.io/generated/ *.pilotpen.fr 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.hipay.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://use.typekit.net https://p.typekit.net *.pilotpen.fr 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com data: mpsnare.iesnare.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.hipay.com wss://mpsnare.iesnare.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://widgets.rr.skeepers.io/ https://api-product-reviews.rr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://nominatim.openstreetmap.org *.pilotpen.fr 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.fontawesome.com https://fonts.gstatic.com *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com *.petm2.com *.staging.petm2.com *.petiteamelie.nl *.petiteamelie.fr *.petiteamelie.de *.petiteamelie.co.uk *.petiteamelie.com *.petiteamelie.be 'self' data: https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.monetico-services.com *.petm2.com *.staging.petm2.com *.petiteamelie.nl *.petiteamelie.fr *.petiteamelie.de *.petiteamelie.co.uk *.petiteamelie.com *.petiteamelie.be www.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.monetico-services.com https://www.googletagmanager.com/ js.mollie.com *.addthis.com *.multisafepay.com https://pay.google.com static.addtoany.com *.cookiebot.com consentcdn.cookiebot.com *.pinterest.com ssgtm.petiteamelie.nl ssgtm.petiteamelie.co.uk ssgtm.petiteamelie.fr ssgtm.petiteamelie.de ssgtm.petiteamelie.be www.googletagmanager.com pay.google.com www.google.com www.facebook.com ct.pinterest.com tr.snapchat.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.mollie.com magefan.com cm.magefan.com *.alothemes.com *.magepow.com *.multisafepay.com *.petm2.com *.staging.petm2.com *.petiteamelie.nl *.petiteamelie.fr *.petiteamelie.de *.petiteamelie.co.uk *.petiteamelie.com *.petiteamelie.be *.facebook.com integrations.etrusted.com *.google.pl *.google.com *.bing.com *.cookiebot.com *.clarity.ms *.doubleclick.net region1.analytics.google.com widgets.trustedshops.com media.multisafepay.com testmedia.multisafepay.com www.gstatic.com cdn.flbx.io bat.bing.com cdn.luigisbox.com tr.snapchat.com lantern.roeye.com ssgtm.petiteamelie.nl ssgtm.petiteamelie.co.uk ssgtm.petiteamelie.fr ssgtm.petiteamelie.de ssgtm.petiteamelie.be adservice.google.com *.cloudinary.com bat.bing.net *.hsforms.net *.hsforms.com 'self' data: https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech js.mollie.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.avada.io *.alothemes.com *.magepow.com *.multisafepay.com https://pay.google.com *.petm2.com *.staging.petm2.com *.petiteamelie.nl *.petiteamelie.fr *.petiteamelie.de *.petiteamelie.co.uk *.petiteamelie.com *.petiteamelie.be www.clarity.ms scripts.clarity.ms connect.getflowbox.com static.addtoany.com cdn-4.convertexperiments.com assets.voyado.com *.cookiebot.com *.beslist.nl *.pinimg.com *.bing.com integrations.etrusted.com widgets.trustedshops.com scripts.luigisbox.tech cdn.luigisbox.tech connect.facebook.net script.crazyegg.com analytics.tiktok.com ct.pinterest.com www.google.com www.gstatic.com pay.google.com pay.multisafepay.com ingest.promptwatch.com js-agent.newrelic.com consent.cookiebot.com consentcdn.cookiebot.com bat.bing.com www.dwin1.com sc-static.net lantern.roeyecdn.com tr.snapchat.com *.hsforms.net *.hsforms.com *.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com fonts.gstatic.com https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech *.fontawesome.com *.googleapis.com *.addtoany.com *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com *.multisafepay.com *.petm2.com *.staging.petm2.com *.petiteamelie.nl *.petiteamelie.fr *.petiteamelie.de *.petiteamelie.co.uk *.petiteamelie.com *.petiteamelie.be cdn.luigisbox.tech pay.multisafepay.com integrations.etrusted.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.petm2.com *.staging.petm2.com *.petiteamelie.nl *.petiteamelie.fr *.petiteamelie.de *.petiteamelie.co.uk *.petiteamelie.com *.petiteamelie.be cdn.flbx.io res.cloudinary.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.monetico-services.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech *.addthis.com https://get.geojs.io *.avada.io http://dpm.demdex.net *.alothemes.com *.magepow.com *.multisafepay.com *.petm2.com *.staging.petm2.com *.petiteamelie.nl *.petiteamelie.fr *.petiteamelie.de *.petiteamelie.co.uk *.petiteamelie.com *.petiteamelie.be testapi.multisafepay.com connect.facebook.net *.google-analytics.com *.googlesyndication.com *.staging.voyado.com *.clarity.ms *.doubleclick.net *.pinterest.com *.pinimg.com *.cookiebot.com t1.voyado.com script.crazyegg.com region1.analytics.google.com gateway.getflowbox.com a.getflowbox.com connect.getflowbox.com integrations.etrusted.com live.luigisbox.tech ingest.promptwatch.com *.bing.com analytics.tiktok.com ct.beslist.nl analytics-ipv6.tiktokw.us bam.eu01.nr-data.net consentcdn.cookiebot.com play.google.com api.luigisbox.com ssgtm.petiteamelie.nl ssgtm.petiteamelie.co.uk ssgtm.petiteamelie.fr ssgtm.petiteamelie.de ssgtm.petiteamelie.be tr.snapchat.com tr6.snapchat.com bat.bing.net getflowbox.com api.kolsquare.com kolsquare.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src www.google.com www.youtube.com js-agent.newrelic.com *.petm2.com *.staging.petm2.com *.petiteamelie.nl *.petiteamelie.fr *.petiteamelie.de *.petiteamelie.co.uk *.petiteamelie.com *.petiteamelie.be static.addtoany.com pay.multisafepay.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
default-src https: 'unsafe-inline' 'unsafe-eval' 3
frame-ancestors 'self' *.volusion.com;default-src 'none' 3
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https: http:; media-src 'self' blob: https: http:; font-src 'self' data: https:; connect-src 'self' https: wss: ws:; frame-src 'self' https:; frame-ancestors 'self' https://mapple.rip https://*.mapple.rip https://mapple.bid https://*.mapple.bid https://mapple.uk https://*.mapple.uk https://mapplee.com https://*.mapplee.com https://mapple.club https://*.mapple.club https://mappletv.uk https://*.mappletv.uk; object-src 'none'; base-uri 'self'; form-action 'self' 3
font-src *.googleapis.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com *.google.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com cdn.klarna.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com https://www.magezon.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com www.google.com www.gstatic.com *.avada.io *.google.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com cash-f.squarecdn.com https://*.gstatic.com *.moca-bike.com *.urage.com *.eoto-objects.com *.stepbystep-schulranzen.com *.coocazoo.com *.hama.com https://www.gstatic.com https://fonts.gstatic.com https://widgets.trustedshops.com *.stape.io 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.adyen.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.adyen.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.moca-bike.com *.urage.com *.eoto-objects.com *.stepbystep-schulranzen.com *.coocazoo.com *.hama.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com app.usercentrics.eu *.stape.io 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * https://*.gstatic.com *.adyen.com magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com cdn.scarabresearch.com *.moca-bike.com *.urage.com *.eoto-objects.com *.stepbystep-schulranzen.com *.coocazoo.com *.hama.com *.disqus.com https://*.google.com https://*.googleapis.com https://*.googleusercontent.com orbitvu.co *.orbitvu.co https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com media.brand-distribution.com widgets.trustedshops.com app.usercentrics.eu privacy-proxy-server.usercentrics.eu uct.service.usercentrics.eu *.stape.io www.facebook.com connect.facebook.com www.google.de piwik.hama.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://userlike-cdn-umm.b-cdn.net/ cdn.scarabresearch.com *.moca-bike.com *.urage.com *.eoto-objects.com *.stepbystep-schulranzen.com *.coocazoo.com *.hama.com *.kameleoon.com *.kameleoon.io *.kameleoon.eu *.kameleoon.net *.disqus.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com orbitvu.co *.orbitvu.co https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com widgets.trustedshops.com aggregator.service.usercentrics.eu app.usercentrics.eu api.usercentrics.eu graphql.usercentrics.eu privacy-proxy.usercentrics.eu consent-api.service.consent.usercentrics.eu *.stape.io connect.facebook.com connect.facebook.net www.google.com www.google.de piwik.hama.com *.hsforms.net *.hsforms.com https://app.usercentrics.eu https://privacy-proxy.usercentrics.eu 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app https://fonts.googleapis.com/ *.googleapis.com *.googletagmanager.com *.moca-bike.com *.urage.com *.eoto-objects.com *.stepbystep-schulranzen.com *.coocazoo.com *.hama.com fast.fonts.net *.kameleoon.com *.kameleoon.io *.kameleoon.eu *.kameleoon.net https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.orbitvu.co https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com hello.myfonts.net *.stape.io *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.stepbystep-schulranzen.com *.coocazoo.com *.hama.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.adyen.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://api.userlike.com *.moca-bike.com *.urage.com *.eoto-objects.com *.stepbystep-schulranzen.com *.coocazoo.com *.hama.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.orbitvu.cloud *.trustedshops.com *.etrusted.com https://integrations.etrusted.site aggregator.service.usercentrics.eu app.usercentrics.eu api.usercentrics.eu graphql.usercentrics.eu privacy-proxy.usercentrics.eu consent-api.service.consent.usercentrics.eu *.stape.io connect.facebook.com connect.facebook.net www.google.com www.google.de piwik.hama.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.moca-bike.com *.urage.com *.eoto-objects.com *.stepbystep-schulranzen.com *.coocazoo.com *.hama.com *.kameleoon.com *.kameleoon.io *.kameleoon.eu *.kameleoon.net *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://connect.facebook.net https://*.hotjar.com https://*.clarity.ms https://snap.licdn.com https://widget.tabnav.com https://www.google-analytics.com https://www.googletagmanager.com https://analytics.synaxon.com https://stackpath.bootstrapcdn.com https://*.gstatic.com https://*.adform.net https://*.google.com https://www.youtube.com https://*.googlesyndication.com https://*.twitter.com https://widget.tabnav.com; style-src 'self' 'unsafe-inline' https://*.gstatic.com https://stackpath.bootstrapcdn.com; img-src 'self' data: 'self' data: https: https://*.gstatic.com https://px.ads.linkedin.com https://widgets.kununu.com https://www.facebook.com https://*.google.com https://www.googletagmanager.com; font-src 'self' data: https://*.gstatic.com https://static2.sharepointonline.com https://*.wp.com; connect-src 'self' https://px.ads.linkedin.com https://region1.google-analytics.com https://*.google.com https://www.googletagmanager.com https://www.youtube-nocookie.com https://*.clarity.ms https://analytics.synaxon.com https://web-api.synaxon.de https://www.facebook.com https://www.google-analytics.com https://region1.analytics.google.com https://*.adform.net https://*.doubleclick.net https://www.googleadservices.com https://*.hotjar.io wss://*.hotjar.com https://analytics.google.com https://*.googlesyndication.com https://widget-config.tabnav.com; media-src 'self'; frame-src https://www.youtube-nocookie.com https://player.vimeo.com https://*.google.com https://www.googletagmanager.com https://www.youtube.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; report-uri /csp-report-endpoint; 3
font-src fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src https://www.google.com/recaptcha/ *.multisafepay.com https://pay.google.com js.mollie.com 'self' data: consentcdn.cookiebot.com consentcdn.cookiebot.eu *.facebook.com www.googletagmanager.com 'self' 'unsafe-inline'; img-src data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypalobjects.com *.multisafepay.com https://www.mollie.com 'self' data: popup.projects.webpages.one *.eu1.usercentrics.eu app.youshouldask.nl app.youshouldask.ai *.cloudfront.net *.google.nl *.google.com *.bing.com interface.mailcampaigns.nl hagryghsjho.cloudimg.io data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypalobjects.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.multisafepay.com https://pay.google.com js.mollie.com 'self' data: *.cookiebot.com *.cookiebot.eu *.windows.net *.msecnd.net *.youshouldask.nl *.youshouldask.ai *.cloudfront.net static.cloudflareinsights.com *.bing.com *.projects.webpages.one sst.jekashop.nl interface.mailcampaigns.nl static.hotjar.com script.hotjar.com platform.getqonfi.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.multisafepay.com 'self' data: app.youshouldask.ai imgsct.cookiebot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com www.paypalobjects.com *.multisafepay.com 'self' data: sst.jekashop.nl *.doubleclick.net *.visualstudio.com *.amazonaws.com *.google.nl *.google.com *.bing.com ws.hotjar.com content.hotjar.io consentcdn.cookiebot.com consentcdn.cookiebot.eu *.googlesyndication.com platform.getqonfi.com app.youshouldask.ai 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://monitor.bigbridgedev.nl/csp; report-to report-endpoint; 3
font-src *.googleapis.com *.gstatic.com data: *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.reachout.global pos-kowzef.reachout.global 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://static.addtoany.com/ *.doubleclick.net/ *.addthis.com *.doubleclick.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.adobedtm.com *.afip.gob.ar *.cloudfront.net https://player.vimeo.com *.clarity.ms *.google.com.co *.bing.com *.kosiuko.com *.facebook.com *.metricool.com *.google.com.ar *.google.com maps.googleapis.com maps.gstatic.com *.googleusercontent.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page https://maps.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.addtoany.com *.cloudfront.net *.doubleclick.net *.vimeo.com https://f.vimeocdn.com https://player.vimeo.com *.clarity.ms *.tiktok.com *.aptrinsic.com *.facebook.net *.facebook.com *.googleapis.com *.googletagmanager.com track-icommkt.com *.icommarketing.com maps.googleapis.com maps.gstatic.com *.reachout.global *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.doubleclick.net *.vimeo.com https://vimeo.com *.vimeocdn.com https://f.vimeocdn.com *.clarity.ms *.google.com *.tiktok.com *.facebook.net *.facebook.com *.googletagmanager.com track-icommkt.com *.notifications-icommkt.com https://notifications-icommkt.com maps.googleapis.com pos-kowzef.reachout.global *.reachout.global *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.aptrinsic.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 3
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: https://cms.staticnet88.com https://v2.flashcore.net http://gw-3423 http://api-event-prod.com https://hotmatch.storeallinone.com https://api.bakogai.com/gt-stats-be https://webchat.s1-tool.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' ws: wss: https://cms.staticnet88.com https://v2.flashcore.net http://gw-3423 http://api-event-prod.com https://hotmatch.storeallinone.com https://api.bakogai.com/gt-stats-be https://webchat.s1-tool.com; frame-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; form-action 'self' 3
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/android 2
default-src 'self' wwwv2.tailscale.com;	script-src 'self' wwwv2.tailscale.com bat.bing.com cdn.rudderlabs.com www.google-analytics.com www.googletagmanager.com www.google.com js.hs-scripts.com js.hs-banner.com js.hubspot.com js.hs-analytics.com *.hsforms.net unpkg.com snap.licdn.com www.redditstatic.com https://bwa.marketplace.awsstatic.com widget.kapa.ai https://*.optimizely.com;	connect-src 'self' wwwv2.tailscale.com login.tailscale.com bat.bing.com analytics.google.com www.google-analytics.com cdn.sanity.io unpkg.com *.rudderstack.com *.hubspot.com www.redditstatic.com pixel-config.reddit.com px.ads.linkedin.com https://medley.prod.irtysh.dubai.aws.dev proxy.kapa.ai kapa-widget-proxy-la7dkmplpq-uc.a.run.app metrics.kapa.ai https://*.optimizely.com wss://*.optimizely.com;	img-src 'self' wwwv2.tailscale.com cdn.sanity.io lh3.googleusercontent.com www.google-analytics.com *.hsforms.com alb.reddit.com px.ads.linkedin.com bat.bing.com track.hubspot.com https://cdn.optimizely.com;	style-src https://*.optimizely.com 'unsafe-inline';	font-src 'self' https://*.optimizely.com;	frame-ancestors 'none';	form-action 'self' wwwv2.tailscale.com;	base-uri 'self' wwwv2.tailscale.com;	block-all-mixed-content;	object-src 'self' wwwv2.tailscale.com;	report-to csp-endpoint;	report-uri https://login.tailscale.com/csp-report; 2
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.mythad.com https://*.kwai-pro.com http://*.kwai-pro.com http://*.kwai.net https://*.kwai.net *.kwai.com *.snackvideo.in *.kwai.me *.kwai.app *.kwimgs.com *.yximgs.com *.cloudfront.net *.kuaishou.com https://*.gifshow.com http://*.gifshow.com https://log-sdk.ksapisrv.com https://www.googletagmanager.com https://gifshow-static.download.ks-cdn.com https://static3.avast.com https://translate.google.com https://www.gstatic.com https://fonts.gstatic.com https://connect.facebook.net www.google-analytics.com hm.baidu.com m.snackvideo.com http://*.ap4r.com https://*.ap4r.com https://*.typekit.net http://*.typekit.net ak-sgp-pic.snackvideo.in tx-sgp-pic.snackvideo.in ws-sgp-pic.snackvideo.in g-us-kampic.golden49.net g-us-kamcdn.golden49.net m.kwai.com sentry.kuaishou.com https://cdn.jsdelivr.net https://at.alicdn.com https://www.facebook.com https://snap.licdn.com https://px.ads.linkedin.com https://cdn.linkedin.oribi.io https://www.linkedin.com https://*.google.com https://*.google-analytics.com https://*.doubleclick.net asset: data: blob: android-webview-video-poster: ikwai: chrome-extension:;img-src http: https: asset: data: blob: android-webview-video-poster: ikwai: chrome-extension:;connect-src http: https: asset: data: blob: android-webview-video-poster: ikwai: chrome-extension:;report-uri https://csplog.kwai-pro.com/log/kwai/wwwkwai 2
default-src 'self';base-uri 'self';connect-src 'self' data: https: wss://keepalive.gotinder.com wss://keepalive.ue1.d1.tstaging.com;script-src 'nonce-AU69skC1z2Uq18o26/KTbg==' 'strict-dynamic' 'unsafe-hashes' 'unsafe-eval' 'wasm-unsafe-eval' 'sha256-PLCxbpHSwAa8+W198R1KQQ9UDCexTvYy4z4YmCg21NM=' 'unsafe-inline';style-src 'self' 'unsafe-inline' blob: https://*.googleapis.com https://accounts.google.com;frame-src 'self' https:;frame-ancestors 'self';form-action 'self' https:;object-src 'none';img-src 'self' data: blob: https:;media-src 'self' data: https:;font-src 'self' data: https:;manifest-src 'self' https: 2
default-src data: 'self' blob: 'unsafe-inline' 'unsafe-eval' *.nesine.com wss://*.nesine.com *.google.com *.google.com.tr *.googletagmanager.com *.google-analytics.com *.support.google.com *.doubleclick.net *.googleadservices.com *.microsoft.com *.apple.com *.facebook.com *.facebook.net connect.facebook.net *.betsolutions.com *.ertgaming.com *.yahoo.com *.newrelic.com *.twitter.com *.instagram.com *.youtube.com *.ytimg.com *.aboutcookies.org *.mobilproses.com *.omnitagjs.com *.outbrain.com *.nr-data.net *.bidswitch.net wss://*.sportradar.com *.sportradar.com *.akamaized.net *.performfeeds.com *.betradar.com *.dge.imggaming.com tjktv.ercdn.net *.tjk.org *.broadage.com *.pubmatic.com *.mediavine.com *.demdex.net *.krxd.net *.thebrighttag.com *.tremorhub.com *.adnxs.com *.casalemedia.com *.360yield.com *.media.net *.rubiconproject.com *.sharethrough.com *.smartadserver.com *.teads.tv *.3lift.com *.emxdgt.com *.sync.com *.ivitrack.com *.yieldmo.com *.yieldlab.net *.imgarena.com *.liderform.com.tr *.googleapis.com *.googlevideo.com *.gstatic.com *.azureedge.net *.semasio.net *.7platform.net *.7platform.com *.7platform.live *.nsoft-cdn.com *.launchdigi.net *.106digital.com *.gameturboz.cloud *.turboexplorer.online *.1rx.io *.adsrvr.org aa.agkn.com *.postrelease.com *.revcontent.com *.rqtrk.eu *.bing.com *.smaato.net *.narrative.io *.socdm.com *.mediawallahscript.com *.liadm.com *.stickyadstv.com *.linkedin.com *.rlcdn.com *.dable.io *.adingo.jp *.twiago.com *.bluekai.com *.crwdcntrl.net *.hs.llnwd.net *.ucweb.com *.dengage.com *.playbetman.com *.turbolabs.online *.aleaplay.com *.ondigitalocean.app *.turbogg4u.online *.turbodiscovery.xyz *.ofmicropod.com *.dengagecdn.com launchdigi.net *.eskimi.com *.tiktok.com *.rsc.cdn77.org *.igamemedia.com *.castr.net data.widgets.sir.sportradar.com *.inseincvirtuals.com wss://data.widgets.sir.sportradar.com wss://*.sportradar.com wss://*.akamaized.net cdn.alsgp0.fds.api.mi-img.com apm-rum-sgp.inf.miui.com infragrid.v.network metrics-dre.dt.dbankcloud.cn cdn-uicons.flaticon.com *.cloudfront.net *.mobilproses.com *.codezania.com https://shunnedstudios.com/ https://106gamesgalaxsys.online https://www.millipiyangoonline.com/ *.gtechgames.com *.7777gaming.tech *.7777gaming.xyz *.7777gaming.com.tr www.google.de www.google.com.cy www.google.nl www.google.fr www.google.co.uk www.google.iq www.google.ca www.google.pt www.google.ch www.google.bg www.google.az www.google.it www.google.no www.google.se www.google.com.sa www.google.com.qa www.google.ru www.google.be www.google.com.kw www.google.co.tz www.google.ro www.google.hu www.google.ba www.google.at www.google.rs *.millipiyangoonline.com www.google.dk www.google.co.uz www.google.dz www.google.es www.google.pl www.google.com.ly www.googletagmanager.com digital.millipiyangoonline.com www.google.at www.google.hu www.google.ro www.google.ru www.google.be *.gametech.tr dbox1.sisalsanstech.com www.millipiyangoonline.com pagead2.googlesyndication.com https://bulten.sm.mncdn.com sisal.queue-it.net football.playbook-fusion.com api.bettorvideo.infront.sport *.clarity.ms yaristayiz1.lg.mncdn.com yaristayiz2.lg.mncdn.com; img-src * data:; report-uri /csp/cspreport/ 2
default-src https: 'unsafe-inline' 'unsafe-eval' 'self' data:; img-src 'self' *.eff.org data:; report-uri https://sentry.eff.org/api/2/security/?sentry_key=f1118ad37b5e4afbabe3487ca42fe73e 2
default-src 'self'; script-src 'self' 'unsafe-inline' https://whoas.xyz; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https: wss:; media-src 'self' https: blob:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 2
default-src 'self'; style-src 'self' 'unsafe-inline' https://use.typekit.net; object-src 'none'; base-uri 'self'; worker-src 'none'; connect-src 'self' https://collect.datas3ntinel.com; 2
block-all-mixed-content ; report-uri /csp-report 2
frame-ancestors 'self' https://ss.datasconsole.com; worker-src 'self' blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.coinmarketcap.com https://cdn.adx.ws https://www.gstatic.com https://scripts.cleverwebserver.com https://ui.cleverwebserver.com https://cdn.cookielaw.org https://cdn4.buysellads.net https://btloader.com https://script.4dex.io https://www.google.com https://*.googlesyndication.com https://securepubads.g.doubleclick.net https://googleads.g.doubleclick.net https://ep2.adtrafficquality.google https://www.youtube.com https://s3.tradingview.com https://organizer.bizzabo.com https://telegram.org https://staticrecap.cgicgi.io https://3f0fb9bcf568.edge.sdk.awswaf.com https://unpkg.com/vconsole/dist/vconsole.min.js https://browser.sentry-cdn.com https://ajax.googleapis.com/ajax/libs/jquery/ https://www.recaptcha.net/recaptcha/ https://checkout.stripe.com https://static.doubleclick.net; report-uri https://o230231.ingest.us.sentry.io/api/1773863/security/?sentry_key=f6a79779d88945e5bf5c2b7e74ee1ed8 2
frame-ancestors 'self'; report-uri https://rt.phantom.app/csp 2
frame-ancestors 'self' https://webflow.com https://*.webflow.com https://app.intellimize.com; connect-src 'self' https://webflow.com https://*.webflow.com https://d1otoma47x30pg.cloudfront.net https://d3e54v103j8qbb.cloudfront.net https://daks2k3a4ib2z.cloudfront.net https://dhygzobemt712.cloudfront.net https://cdn.prod.website-files.com https://code-components.website-files.com https://webflow-assets.s3.us-east-1.amazonaws.com https://browser-intake-datadoghq.com https://statsigapi.net https://beyondwickedmapping.org https://cloudflare-dns.com https://featureassets.org https://prodregistryv2.org https://api.segment.io https://www.google-analytics.com https://*.clarity.ms https://050-lkc-745.mktoresp.com https://050-lkc-745.mktoutil.com https://bat.bing.com https://bat.bing.net https://cdn.dreamdata.cloud https://grsm.io https://partnerlinks.io https://pixel-config.reddit.com https://*.ads.linkedin.com https://q.quora.com https://tracking.goentri.com https://api.claydar.com https://api.goentri.com https://assetsconfigcdn.org https://api.intellimize.co https://api.knock.app https://api.sprig.com https://app.clearbit.com https://app.pendo.io https://content-6312168775680000.static.pendo.io https://data.pendo.io https://log.intellimize.co wss://api.knock.app https://*.doubleclick.net https://www.facebook.com https://*.google.com https://www.googleadservices.com https://www.googleservices.com https://cdn.birdie.so https://cf.birdie.so https://sock.birdie.so https://sockr.birdie.so wss://sock.birdie.so wss://sockr.birdie.so https://*.px-cdn.net https://*.px-client.net https://*.px-cloud.net https://*.pxchk.net https://c.6sc.co https://ipv6.6sc.co https://telemetry.us.transcend.io https://transcend-cdn.com https://tzm.px-cloud.net https://distillery.wistia.com https://embed-cloudfront.wistia.com https://fast.wistia.com https://pipedream.wistia.com https://app.qualified.com wss://ws7.qualified.com https://webflow-prod-assets.s3.amazonaws.com https://webflow-tmp-csv-import-production.s3.amazonaws.com https://*.google-analytics.com https://*.googlesyndication.com https://www.googletagmanager.com https://www.google.ad https://www.google.ae https://www.google.al https://www.google.at https://www.google.az https://www.google.ba https://www.google.be https://www.google.bg https://www.google.bj https://www.google.by https://www.google.ca https://www.google.ch https://www.google.cl https://www.google.co.cr https://www.google.co.id https://www.google.co.il https://www.google.co.in https://www.google.co.jp https://www.google.co.ke https://www.google.co.kr https://www.google.co.ma https://www.google.co.nz https://www.google.co.th https://www.google.co.ug https://www.google.co.uk https://www.google.co.uz https://www.google.co.za https://www.google.co.zm https://www.google.com.ar https://www.google.com.au https://www.google.com.bd https://www.google.com.br https://www.google.com.co https://www.google.com.cy https://www.google.com.ec https://www.google.com.eg https://www.google.com.gh https://www.google.com.hk https://www.google.com.kw https://www.google.com.mx https://www.google.com.ng https://www.google.com.np https://www.google.com.ph https://www.google.com.pk https://www.google.com.pr https://www.google.com.qa https://www.google.com.sa https://www.google.com.sg https://www.google.com.sv https://www.google.com.tj https://www.google.com.tr https://www.google.com.tw https://www.google.com.ua https://www.google.com.uy https://www.google.com.vn https://www.google.cz https://www.google.de https://www.google.dk https://www.google.ee https://www.google.es https://www.google.fi https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gl https://www.google.gr https://www.google.hr https://www.google.hu https://www.google.ie https://www.google.it https://www.google.kg https://www.google.kz https://www.google.lk https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.md https://www.google.mg https://www.google.mk https://www.google.mu https://www.google.mw https://www.google.my https://www.google.nl https://www.google.no https://www.google.pe https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.rs https://www.google.ru https://www.google.se https://www.google.si https://www.google.sk https://www.google.tn; style-src 'self' 'unsafe-inline' https://webflow.com https://*.webflow.com https://d1otoma47x30pg.cloudfront.net https://d3e54v103j8qbb.cloudfront.net https://daks2k3a4ib2z.cloudfront.net https://dhygzobemt712.cloudfront.net https://accounts.google.com https://fonts.googleapis.com https://go.webflow.com https://app.pendo.io https://cdn.birdie.so https://cdn.jsdelivr.net https://cdn.pendo.io https://content-6312168775680000.static.pendo.io https://cdn.prod.website-files.com https://code-components.website-files.com https://transcend-cdn.com https://www.gstatic.com; img-src 'self' data: https://webflow.com https://*.webflow.com https://d1otoma47x30pg.cloudfront.net https://d3e54v103j8qbb.cloudfront.net https://daks2k3a4ib2z.cloudfront.net https://dhygzobemt712.cloudfront.net https://cdn.prod.website-files.com https://code-components.website-files.com https://connect.facebook.com https://*.ads.linkedin.com https://*.doubleclick.net https://www.facebook.com https://*.google.com https://webflow-assets.s3.us-east-1.amazonaws.com https://www.googleadservices.com https://www.google.ad https://www.google.ae https://www.google.al https://www.google.at https://www.google.az https://www.google.ba https://www.google.be https://www.google.bg https://www.google.bj https://www.google.by https://www.google.ca https://www.google.ch https://www.google.cl https://www.google.co.cr https://www.google.co.id https://www.google.co.il https://www.google.co.in https://www.google.co.jp https://www.google.co.ke https://www.google.co.kr https://www.google.co.ma https://www.google.co.nz https://www.google.co.th https://www.google.co.ug https://www.google.co.uk https://www.google.co.uz https://www.google.co.za https://www.google.co.zm https://www.google.com.ar https://www.google.com.au https://www.google.com.bd https://www.google.com.br https://www.google.com.co https://www.google.com.cy https://www.google.com.ec https://www.google.com.eg https://www.google.com.gh https://www.google.com.hk https://www.google.com.kw https://www.google.com.mx https://www.google.com.ng https://www.google.com.np https://www.google.com.ph https://www.google.com.pk https://www.google.com.pr https://www.google.com.qa https://www.google.com.sa https://www.google.com.sg https://www.google.com.sv https://www.google.com.tj https://www.google.com.tr https://www.google.com.tw https://www.google.com.ua https://www.google.com.uy https://www.google.com.vn https://www.google.cz https://www.google.de https://www.google.dk https://www.google.ee https://www.google.es https://www.google.fi https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gl https://www.google.gr https://www.google.hr https://www.google.hu https://www.google.ie https://www.google.it https://www.google.kg https://www.google.kz https://www.google.lk https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.md https://www.google.mg https://www.google.mk https://www.google.mu https://www.google.mw https://www.google.my https://www.google.nl https://www.google.no https://www.google.pe https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.rs https://www.google.ru https://www.google.se https://www.google.si https://www.google.sk https://www.google.tn https://webflow-assets-studio-temp-prod.s3.amazonaws.com https://*.webflow.com https://account-assets.knock.app https://alb.reddit.com https://analytics.twitter.com https://app.pendo.io https://b.6sc.co https://bat.bing.com https://bat.bing.net https://cdn.pendo.io https://content-6312168775680000.static.pendo.io https://data.pendo.io https://embed-ssl.wistia.com https://fast.wistia.com https://fonts.gstatic.com https://i.ytimg.com https://messenger-assets.qualified.com https://q.quora.com https://quickchart.io https://webflow.itsoffbrand.io https://www.googletagmanager.com; report-uri https://webflow.report-uri.com/r/t/csp/reportOnly 2
script-src 'self' dl.frontapp.com static.cloudflareinsights.com padlet.net maps.googleapis.com apis.google.com ta-echo.padlet.com api.commandbar.com cdn.commandbar.com app.getbeamer.com challenges.cloudflare.com embed.cloudflarestream.com cdn.usefathom.com blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' padlet.net fonts.googleapis.com cdn.commandbar.com app.getbeamer.com 'unsafe-inline'; font-src 'self' padlet.net fonts.gstatic.com data:; report-uri https://padlet.com/csp-report; 2
default-src 'unsafe-inline' 'unsafe-eval' * data: blob: 2
default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http://*.files.wordpress.com wss://www.billboard.com; report-uri https://pmcuri.report-uri.com/r/d/csp/reportOnly 2
default-src 'self' data: blob: https://067-umd-991.mktoresp.com https://accounts.google.com https://analytics.google.com https://api.amplitude.com https://bi-beta.pst.tech https://bi.pst.tech https://e.postman.com https://bifrost-https-v4.gw.postman.com https://blog.postman.com https://dl.pstmn.io https://eo2kpuahxhuvgexlueall7gqzq0fihon.lambda-url.us-east-1.on.aws https://events.gw.postman.com https://events.rm-api.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://identity.getpostman-beta.com https://identity.getpostman.com https://lp.postman.com https://munchkin.marketo.net https://pages.getpostman.com https://public.slidesharecdn.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://manifest.webmanifest https://ms1frkqnsp7r.statuspage.io https://run.pstmn.io https://skills-assets.pstmn.io https://st-ar.cdn.postman.com https://static.cloudflareinsights.com https://stats.g.doubleclick.net https://td.doubleclick.net https://voyager.postman.com https://www.googletagmanager.com https://www.slideshare.net https://snap.licdn.com https://www.google.com https://youtube.com https://*.youtube.com https://*.ytimg.com https://www.linkedin.com/px/ https://www.postman.com https://snap.licdn.com/ https://worldtimeapi.org https://maps.google.com https://*.mountain.com https://dx.mountain.com https://px.mountain.com https://gs.mountain.com https://44.238.122.172 https://100.20.58.101 https://35.85.84.151 https://44.228.85.26 https://34.215.155.61 https://35.160.46.251 https://52.71.121.170 https://18.210.229.244 https://44.212.189.233 https://3.212.39.155 https://52.22.50.55 https://54.156.2.105 https://bam.nr-data.net https://js-agent.newrelic.com https://res.cloudinary.com https://mkt.cdn.postman.com https://api.mapbox.com https://events.mapbox.com https://api.fpjs.io https://cdn.amplitude.com https://api2.amplitude.com https://www.facebook.com https://connect.facebook.net https://bat.bing.com https://js.qualified.com wss://ws.qualified.com wss://ws2.qualified.com https://app.qualified.com https://api.company-target.com https://segments.company-target.com https://tag.demandbase.com https://tag-logger.demandbase.com https://s.company-target.com https://alb.reddit.com https://www.redditstatic.com https://pixel-config.reddit.com https://*.hotjar.io https://*.hotjar.com wss://ws.hotjar.com https://cdn.segment.com https://api.cdp.postman.com https://api.segment.io https://evs.cdp.postman.com https://www.influ2.com https://t.influ2.com https://*.usbrowserspeed.com https://pxl.growth-channel.net https://tags.srv.stackadapt.com https://job-boards.greenhouse.io https://transcend-cdn.com https://telemetry.us.transcend.io https://unpkg.com/launchdarkly-js-client-sdk@3.8.1 https://app.launchdarkly.com/ https://events.launchdarkly.com https://tally.so/ https://postman.outgrow.us/ https://api-n.outgrow.co https://t.co/ https://analytics.twitter.com https://static.ads-twitter.com/uwt.js https://id.rlcdn.com https://cdn.cr-relay.com https://api.cr-relay.com https://cdn.vector.co https://api.vector.co https://*.liadm.com/ https://*.ip-api.com https://accretivemedia.go2cloud.org https://fast.wistia.net https://fast.wistia.com https://embed-ssl.wistia.com https://distillery.wistia.com https://pipedream.wistia.com https://embed-cloudfront.wistia.com https://postman.cdn.prismic.io https://static.cdn.prismic.io https://postman.prismic.io https://browser.sentry-cdn.com https://o1224273.ingest.us.sentry.io 'unsafe-inline' 'unsafe-eval'; form-action 'self'; base-uri 'self'; 2
default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http://*.files.wordpress.com wss://deadline.com; report-uri https://pmcuri.report-uri.com/r/d/csp/reportOnly 2
default-src * 'self' 'unsafe-eval' 'unsafe-inline' data: blob: ws: wss:; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://accounts.google.com https://apis.google.com https://cdn.goentri.com https://cdn.razorpay.com https://cdn.replit.com https://cdn.segment.com https://checkout.razorpay.com https://connect.facebook.net https://cross-border-cdn.razorpay.com https://elements.stytch.com https://fast.wistia.net https://googleads.g.doubleclick.net https://hcaptcha.com https://*.hcaptcha.com https://js.stripe.com https://sp.replit.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com; worker-src 'self' blob:; report-uri https://o1151714.ingest.us.sentry.io/api/4509669501698048/security/?sentry_key=7eb3d90eb4660416caf507087367e67e&sentry_environment=production&sentry_release=4c4230a2; report-to csp-endpoint; 2
default-src 'self' *.wp.com;	img-src data: https:;	script-src 'unsafe-inline' 'unsafe-eval' blob: https:;	style-src 'unsafe-inline' https:;	font-src data: https:;	media-src blob: https:;	frame-src https:;	object-src 'none';	connect-src https:; 2
default-src 'none'; base-uri 'self' https:; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: http: https:; connect-src 'self' https: data: blob:; frame-src 'self' https:; font-src 'self' data: https:; media-src 'self' data: blob: https:; worker-src 'self' blob: data:; object-src 'none'; form-action 'self'; frame-ancestors 'self'; report-to csp-endpoint; report-uri https://report.centralcsp.com/6a82d540a43e5200d889ecb9 2
default-src 'self'; base-uri 'self'; connect-src 'self' https://gw.api.helsinki.fi https://consentcdn.cookiebot.com https://consent.cookiebot.com https://*.usercentrics.eu https://*.g.doubleclick.net https://*.g.doubleclick.net:443 https://www.google.com:443 https://*.google.com https://*.google.com:443 https://*.google.fi https://fonts.googleapis.com https://pagead2.googlesyndication.com https://www.googleadservices.com *.googlesyndication.com *.google-analytics.com www.googletagmanager.com www.google.com https://analytics.twitter.com https://t.co https://www.facebook.com https://px.ads.linkedin.com *.siteimprove.com *.cludo.com *.frosmo.com https://matomo.it.helsinki.fi https://sentry-external.it.helsinki.fi *.mouseflow.com https://*.giosg.com https://*.giosgusercontent.com wss://service.giosg.com https://hcaptcha.com https://*.hcaptcha.com https://*.mux.com; img-src 'self' data: https://gw.api.helsinki.fi http://imgsct.cookiebot.com/ https://*.usercentrics.eu https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.fi www.googletagmanager.com https://www.facebook.com https://connect.facebook.net https://t.co https://analytics.twitter.com https://px.ads.linkedin.com:443 https://px.ads.linkedin.com px.ads.linkedin.com https://*.siteimproveanalytics.io *.frosmo.com https://studies.helsinki.fi unitube.it.helsinki.fi https://matomo.it.helsinki.fi https://*.giosgusercontent.com https://dvcf59enpgt5y.cloudfront.net https://i.ytimg.com s3.eu-central-1.amazonaws.com; object-src 'none'; frame-ancestors 'self'; media-src blob:; font-src 'self' data: cdn.mouseflow.com cdn.jsdelivr.net fonts.gstatic.com; style-src 'self' 'unsafe-inline' *.cludo.com https://*.giosg.com https://*.giosgusercontent.com https://hcaptcha.com https://*.hcaptcha.com cdn.jsdelivr.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://consentcdn.cookiebot.com https://consent.cookiebot.com https://*.usercentrics.eu https://www.googletagmanager.com https://snap.licdn.com https://static.ads-twitter.com https://connect.facebook.net https://siteimproveanalytics.com *.siteimprove.net *.cludo.com fi1.frosmo.com *.fi1.frosmo.com d2oarllo6tn86.cloudfront.net https://matomo.it.helsinki.fi https://cdn.mouseflow.com https://*.giosg.com https://*.giosgusercontent.com https://*.interactionbuilder.giosg.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.unibuddy.co cdn.jsdelivr.net https://www.youtube.com:443 https://www.youtube.com; frame-src https://*.giosg.com https://hcaptcha.com https://*.hcaptcha.com https://etapahtuma.fi https://www.youtube.com https://youtube.com https://app.powerbi.com https://unitube.it.helsinki.fi https://www.openstreetmap.org https://openstreetmap.org https://www.seismo.helsinki.fi https://seismo.helsinki.fi https://unibuddy.co https://tiedekulmamedia.helsinki.fi https://kartta.paikkatietoikkuna.fi https://satelliitti.laji.fi https://open.spotify.com https://monicoast.masinotek.eu https://w.soundcloud.com https://playlist.megaphone.fm https://vys-infografiikka-23.it.helsinki.fi https://player.vimeo.com; child-src https://etapahtuma.fi https://www.youtube.com https://youtube.com https://app.powerbi.com https://unitube.it.helsinki.fi https://www.openstreetmap.org https://openstreetmap.org https://www.seismo.helsinki.fi https://seismo.helsinki.fi https://unibuddy.co https://tiedekulmamedia.helsinki.fi https://kartta.paikkatietoikkuna.fi https://satelliitti.laji.fi https://open.spotify.com https://monicoast.masinotek.eu https://w.soundcloud.com https://playlist.megaphone.fm https://vys-infografiikka-23.it.helsinki.fi https://player.vimeo.com; report-uri https://sentry-external.it.helsinki.fi/api/59/security/?sentry_key=14961b491c841553fbbeca8fc3dad37a&sentry_environment=main; report-to default 2
default-src https://www.oreilly.com/7EjQWM/weIx-q/j7Ge6t/AoPGthOs/I/fSp7hpu3iw/JjQXMCkYAQ/S2QeN2/cTd14d https://www.oreilly.com/7EjQWM/weIx-q/j7Ge6t/AoPGthOs/I/fSp7hpu3iw/JjQXMCkYAQ/S2QeN2/cTd14d  https://www.oreilly.com/7EjQWM/weIx-q/j7Ge6t/AoPGthOs/I/fup7hp6kDwG2GLuS/HwsSMCkYAQ/aT9Ram/cvTSM  https://www.oreilly.com  * 'unsafe-inline' 'unsafe-eval' data: blob: android-webview-video-poster: moz-extension: ms-browser-extension: chrome-extension: ios-log:; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubb898c25826db9d251f99fdcece943792&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service:wordpress-prod-cluster; 2
default-src 'none'; script-src icq.com c.icq.com cicq.org 1l-hit.mail.ru www.google-analytics.com buddyicon.foto.mail.ru www.googletagmanager.com top-fwz1.mail.ru 'sha256-DKOsdd00IXAHc7qK64HiC18YrB2K4SfiH8Sl6A9aFyg=' 'sha256-u4WiMVZhYDdCrFwB8Zn3gLba1EI3pqIlFYWFZfXJl2I=' 'sha256-ynzJCJTMBeZF6kbmzoI2rC+vDRozRAHxsPfAruxve88=' 'sha256-j51JRkq0bwz97Hd/1wJQsIy6/aX9cz16Xyp+M8FshTA=' 'self'; style-src c.icq.com icq.com cicq.org 'self' 'unsafe-inline'; img-src data: icq.com c.icq.com cicq.org api.icq.net www.google-analytics.com buddyicon.foto.mail.ru files.icq.com files.imgsmail.ru u.icq.net u.myteam.vmailru.net ub.icq.net ub.myteam.vmailru.net swa.icq.com stats.g.doubleclick.net 'self'; media-src data: icq.com c.icq.com cicq.org api.icq.net www.google-analytics.com files.icq.com api.icq.net files.imgsmail.ru u.icq.net u.myteam.vmailru.net ub.icq.net ub.myteam.vmailru.net 'self'; font-src icq.com c.icq.com cicq.org 'self'; connect-src privacy.icq.com icq.com top-fwz1.mail.ru 'self'; report-uri /system/error 2
frame-ancestors 'self'; report-to csp-endpoint 2
frame-ancestors 'self'; report-uri /csp_report 2
frame-src 'self' syndicatedsearch.goog *.google.com *.youtube.com vimeo.com *.vimeo.com *.podbean.com static.addtoany.com *.blackbaudhosting.com js.createsend1.com *.createsend.com *.payments.blackbaud.com payments.blackbaud.com/Checkout/bbCheckout.2.0.js; object-src 'none'; script-src 'self' 'report-sample' 'unsafe-eval' *.googleadservices.com app.purechat.com app-script.monsido.com connect.facebook.net cdnjs.cloudflare.com static.addtoany.com polyfill.io *.googletagmanager.com *.google-analytics.com *.google.com www.gstatic.com cdn.jsdelivr.net *.hotjar.com *.gtranslate.net *.blackbaudhosting.com js.createsend1.com www.createsend.com *.googleapis.com *.payments.blackbaud.com payments.blackbaud.com/Checkout/bbCheckout.2.0.js https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com; script-src-elem 'self' 'unsafe-inline' *.googleadservices.com app.purechat.com app-script.monsido.com connect.facebook.net cdnjs.cloudflare.com static.addtoany.com polyfill.io *.googletagmanager.com *.google-analytics.com *.google.com www.gstatic.com cdn.jsdelivr.net *.hotjar.com *.gtranslate.net *.blackbaudhosting.com js.createsend1.com *.createsend.com www.createsend.com *.googleapis.com *.payments.blackbaud.com payments.blackbaud.com/Checkout/bbCheckout.2.0.js *.simpli.fi https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com; style-src 'self' 'report-sample' 'unsafe-inline' *.googleapis.com *.gstatic.com *.createsend1.com *.createsend.com *.blackbaudhosting.com *.payments.blackbaud.com payments.blackbaud.com/Checkout/bbCheckout.2.0.js cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; worker-src 'self'; base-uri 'self'; form-action 'self' www.createsend.com js.createsend1.com *.blackbaudhosting.com *.nla.gov.au *.payments.blackbaud.com payments.blackbaud.com/Checkout/bbCheckout.2.0.js; frame-ancestors 'self' 2
connect-src 'self' https://*.maryland.gov https://*.maryland.dev wss://*.maryland.gov https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.clarity.ms; report-uri /report-csp-violation 2
default-src 'self' https://n8n.io data: 'unsafe-inline'; script-src 'self' 'sha256-4pl9dZH8ght2nZ3AX1mV23mwuukxsklzULVnAeIEKbg=' https://cdn.jsdelivr.net/npm/@webcomponents/webcomponentsjs@2.0.0/webcomponents-loader.js https://www.unpkg.com/lit@2.0.0-rc.2/polyfill-support.js https://cdn.jsdelivr.net/npm/@n8n_io/n8n-demo-component@latest/n8n-demo.bundled.js https://*.googletagmanager.com https://www.gstatic.cn https://www.gstatic.com https://www.recaptcha.net https://static.cloudflareinsights.com/beacon.min.js/ static.cloudflareinsights.com https://checkout.paddle.com/api/2.0/prices/; img-src 'self' data: https://*.google-analytics.com https://*.googletagmanager.com https://n8niostorageaccount.blob.core.windows.net https://www.gstatic.cn https://www.gstatic.com https://www.recaptcha.net https://gravatar.com/avatar/; media-src https://n8niostorageaccount.blob.core.windows.net; connect-src 'self' https://api.n8n.io/ https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://www.gstatic.cn https://www.gstatic.com https://www.recaptcha.net; frame-src https://jobs.ashbyhq.com https://n8n-preview-service.internal.n8n.cloud https://www.recaptcha.net https://challenges.cloudflare.com https://www.linkedin.com https://buy.paddle.com https://security-hub.pages.dev; frame-ancestors 'none'; object-src 'none' 2
default-src 'self'; font-src data: https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud; script-src 'self' https://*.bazaarvoice.com https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://exc.mm.dm.de https://mpsnare.iesnare.com https://omt.dm.de https://tags.tiqcdn.com https://web.cmp.usercentrics.eu https://www.dm.de https://www.google.com https://www.google.com/recaptcha/ https://www.gstatic.com https://www.gstatic.com/recaptcha/; worker-src 'self' blob:; connect-src 'self' https://*.bazaarvoice.com https://aggregator.service.usercentrics.eu https://api.mapbox.com https://api.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://browser-intake-datadoghq.eu https://cart-recos.services.dmtech.com https://cdcs.usercentrics.eu https://collect.tealiumiq.com https://consent-api.service.consent.usercentrics.eu https://consent-rt-ret.service.consent.usercentrics.eu https://consents.usercentrics.eu https://content-preview.apps.prod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://direct-collect.dy-api.eu https://direct.dy-api.eu https://dmpay-gateway.services.dmtech.com https://dy-api.eu https://editorial-content.dm-static.com https://events.mapbox.com https://exc.mm.dm.de https://frontend-tracking-infra-service.services.dmtech.com https://graphql.usercentrics.eu https://insights.algolia.io https://logs.browser-intake-datadoghq.eu https://maut-prod.services.dmtech.com https://maut-rls.nonprod.services.dmtech.com https://mpsnare.iesnare.com https://my-products-api.services.dmtech.com https://omacs.services.dmtech.com https://omc.dm.de https://predictive-shopping-service.services.dmtech.com https://product-based-recos.services.dmtech.com https://product-search.services.dmtech.com https://product-semantic-search.services.dmtech.com https://rcom-eu.dynamicyield.com https://recos-as-a-service.services.dmtech.com https://region1.google-analytics.com https://retail-media.services.dmtech.com https://rum.browser-intake-datadoghq.eu https://s2s.adjust.com https://signin.dm.de https://sos-prod.availability.services.dmtech.com https://staedtetour.dm-fb2.de https://stars.services.dmtech.com https://storage.googleapis.com/gift-card-builder-emergency-disabled-bucket/ https://store-data-service.services.dmtech.com https://store-order-service.services.dmtech.com https://v1.api.service.cmp.usercentrics.eu https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://zoe-shop-proxy-prod.services.dmtech.com https://kuba-prod.services.dmtech.com https://zoe-shop-proxy-prod.services.dmtech.com https://cartnext.services.dmtech.com https://dmcsm-proxy.prod.services.dmtech.com https://zoe-shop-proxy-prod.services.dmtech.com https://customer-helpcenter-prod.services.dmtech.com https://paint-prod.services.dmtech.com https://content.services.dmtech.com https://content-search-service-preview.apps.prod.gcp.dmtech.cloud https://content-search-service.services.dmtech.com https://products.dm.de https://pds-import-prod.apps.prod.gcp.dmtech.cloud https://shopping-list-prod.services.dmtech.com; media-src 'self'; style-src 'self' 'unsafe-inline' https://*.bazaarvoice.com https://api.tiles.mapbox.com https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud; form-action 'self' https://*.bazaarvoice.com https://apps.bazaarvoice.com https://checkout.dm.de https://giftcard-checkout.dm.de/api/checkout https://signin.dm.de; img-src 'self' blob: data: https://*.bazaarvoice.com https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://cdn-eu.dynamicyield.com https://composer.apps.nonprod.cf.dmtech.cloud https://content-preview.apps.prod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://editorial-content.dm-static.com https://exc.mm.dm.de https://i.ytimg.com https://images.podigee-cdn.net https://img.usercentrics.eu https://img.youtube.com/ https://media.dm-static.com https://photos-eu.bazaarvoice.com https://products.dm-static.com https://uct.service.usercentrics.eu https://content.services.dmtech.com; frame-ancestors 'self' https://account.dm.de https://app.datadoghq.eu https://checkout.dm.de https://content-preview.apps.prod.gcp.dmtech.cloud https://mobileapp.dm.de https://studio.dm-drogeriemarkt.com; frame-src 'self' https://*.bazaarvoice.com https://account.dm.de https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://cdn.podigee.com https://checkout.dm.de https://configurator.nuk.de https://gastfamilie.podigee.io https://geburtskanal-dm.podigee.io https://hey-familie.podigee.io https://kinderwunschsprechstunde.podigee.io https://mobileapp.dm.de https://player.podigee-cdn.net https://recaptcha.google.com/recaptcha/ https://sandbox.om.dm.de https://signin.dm.de https://web.cmp.usercentrics.eu https://www.google.com https://www.google.com/recaptcha/ https://www.youtube-nocookie.com; base-uri 'self' https://exc.mm.dm.de; child-src 'self' blob:; manifest-src 'self'; report-to csp-endpoint; report-uri /__csp-reports__ 2
default-src data: 'unsafe-inline' 'unsafe-eval' https: http:; script-src data: 'unsafe-inline' 'unsafe-eval' https: http: blob:; style-src data: 'self' 'unsafe-inline' https:; img-src data: 'self' https: blob: android-webview-video-poster:; font-src 'self' https: data:; connect-src 'self' data: https: wss: blob:; media-src data: https: blob:; object-src https:; child-src https: data: blob:; form-action https:; report-uri https://prod.bhaskarapi.com/api/1.0/web-backend/csp-report; 2
frame-ancestors 'self'; report-uri https://www.theaustralian.com.au/csp-reports 2
default-src 'self'; script-src 'self' 'unsafe-inline' blob: https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://cdn.cookielaw.org https://js.qualified.com https://scripts.clarity.ms https://www.clarity.ms https://j.6sc.co https://snap.licdn.com https://bat.bing.com https://munchkin.marketo.net https://js.zi-scripts.com https://tracking-api.g2.com https://cdn.propensity.com https://www.redditstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://ws.zoominfo.com https://pages.sift.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.cookielaw.org https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://pages.sift.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://js.qualified.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://www.google.com https://geolocation.onetrust.com https://*.clarity.ms https://j.6sc.co https://c.6sc.co https://ipv6.6sc.co https://b.6sc.co https://px.ads.linkedin.com https://www.linkedin.com https://alb.reddit.com https://analytics.propensity-abm.com https://epsilon.6sense.com https://ws.zoominfo.com https://cdn.cookielaw.org https://pagead2.googlesyndication.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://app.qualified.com wss://ws6.qualified.com https://js.zi-scripts.com https://a.usbrowserspeed.com https://tracking-api.g2.com https://bat.bing.com https://526-pcc-974.mktoresp.com; frame-src 'self' https://cdn.cookielaw.org https://pages.sift.com https://app.qualified.com; object-src 'none'; base-uri 'self'; form-action 'self' https://pages.sift.com 2
connect-src https:; child-src https:; default-src https:; font-src data: https:; form-action https:; frame-ancestors 'self' *.ffxblue.com.au *.ffx.io *.afr.com *.cdn.ampproject.org *.platform.ink; frame-src https:; img-src https: data:; media-src blob: https:; object-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; script-src-attr https: 'unsafe-eval' 'unsafe-inline'; script-src-elem https: 'unsafe-eval' 'unsafe-inline'; style-src https:; style-src-attr 'unsafe-inline'; style-src-elem https: 'unsafe-inline'; worker-src blob:; report-uri https://csp.ffx.io/; report-to csp-endpoint 2
default-src 'none'; script-src 'self' 'unsafe-inline' https://fpt.mandm.com https://cdn-ukwest.onetrust.com https://widget.trustpilot.com https://js.klarna.com https://api.crm.mandmdirect.com https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://cdn.jsdelivr.net https://static.ads-twitter.com https://bat.bing.com; style-src 'self' 'unsafe-inline' https://widget.trustpilot.com https://cdn-ukwest.onetrust.com https://fonts.googleapis.com; img-src * data: blob:; connect-src * ws: wss:; font-src 'self' data: blob: https://fonts.gstatic.com; frame-src 'self' https://widget.trustpilot.com https://cdn-ukwest.onetrust.com; frame-ancestors 'none'; form-action 'self'; worker-src 'self' blob:; base-uri 'self'; 2
style-src 'self' 'unsafe-inline'; 2
connect-src 'self' cdn.cookielaw.org geolocation.onetrust.com ipmeta.io *.abtasty.com www.google-analytics.com www.googletagmanager.com stats.g.doubleclick.net *.widencdn.net *.yimg.com *.stackadapt.com *.bing.com *.snapchat.com *.facebook.com *.tiktok.com *.tiktokw.us *.nrdcapi.org https://www.google-analytics.com https://www.googletagmanager.com; frame-src 'self' www.googletagmanager.com ad.ipredictive.com *.snapchat.com *.doubleclick.net trk.clinch.co *.youtube.com *.youtube-nocookie.com; img-src 'self' cdn.cookielaw.org *.abtasty.com data: www.nrdc.org *.doubleclick.net *.widencdn.net *.google.com *.facebook.com *.linkedin.com *.bing.com *.snapchat.com *.yahoo.com trkn.us *.tiktok.com *.tiktokw.us *.widen.net https://www.google-analytics.com https://www.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' bat.bing.com cdn.cookielaw.org code.jquery.com connect.facebook.net data: googleads.g.doubleclick.net js.ipredictive.com platform.instagram.com platform.twitter.com qvdt3feo.com s.yimg.com snap.licdn.com tags.srv.stackadapt.com blob: *.abtasty.com www.googletagmanager.com www.instagram.com cdn.jsdelivr.net cdnjs.cloudflare.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' agadata.online apis.google.com bat.bing.com cdn.cookielaw.org code.jquery.com colegiodiocesanosantaclara.imtlazarus.com:6443 connect.facebook.net data1.blamap.com get663.com googleads.g.doubleclick.net js.ipredictive.com lf16-tiktok-web.tiktokcdn-us.com nrdcapps.org pixel.byspotify.com platform.instagram.com platform.twitter.com public.tableau.com qvdt3feo.com s.yimg.com sc-static.net snap.licdn.com tags.srv.stackadapt.com translate-pa.googleapis.com translate.google.com translate.googleapis.com try.abtasty.com www.google-analytics.com www.googletagmanager.com www.instagram.com www.nrdcapps.org www.pagespeed-mod.com www.scrible.com www.tiktok.com unpkg.com www.vimeo.com www.youtube.com www.tp88trk.com apps.rokt.com *.mountain.com analytics.tiktok.com tr.snapchat.com cdn.clinch.co cdn.jsdelivr.net cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' cdn.honey.io tags.srv.stackadapt.com www.gstatic.com *.abtasty.com cdn.jsdelivr.net fonts.googleapis.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' blob: cdn.honey.io lf16-tiktok-web.tiktokcdn-us.com nrdcapps.org sf16-website-login.neutral.ttwstatic.com tags.srv.stackadapt.com www.googletagmanager.com www.gstatic.com www.nrdcapps.org www.scrible.com cdn.jsdelivr.net fonts.googleapis.com; worker-src 'self' blob:; frame-ancestors 'self'; report-uri https://nrdc.report-uri.com/r/d/csp/wizard 2
default-src 'self' *.adnxs.com *.adtrafficquality.google *.ads-twitter.com *.airbrake.io *.braintree-api.com *.braintreegateway.com *.cdn-apple.com *.clarity.ms *.criteo.com *.criteo.net *.doubleclick.net *.facebook.com *.facebook.net *.fullcontact.com *.g.doubleclick.net *.getnitropack.com *.google.com *.google-analytics.com *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.liadm.com *.licdn.com *.linkedin.com *.mopinion.com *.nitrocdn.com *.nr-data.net *.online-metrix.net *.osano.com *.paypal.com *.pinimg.com *.pinterest.com *.pushnami.com *.quora.com *.spokeo.com *.taboola.com *.trustindex.io *.twitter.com *.wp.com *.youtube-nocookie.com *.youtube.com *.zdassets.com *.zendesk.com analytics.twitter.com bat.bing.com bat.bing.net c.6sc.co cdnjs.cloudflare.com cmp.osano.com connect.facebook.net epsilon.6sense.com google.com ipv6.6sc.co j.6sc.co js-agent.newrelic.com nitroscripts.com static.zdassets.com t.co 'unsafe-inline' 'unsafe-eval' blob:; img-src * data: blob:; font-src * data:; frame-ancestors 'self'; report-to csp-endpoint; report-uri https://cspcollector.production.spokeo.com/csp-reports 2
script-src 'self' 'unsafe-inline' cdn.cookielaw.org *.googletagmanager.com www.google-analytics.com *.google-analytics.com assets.adobedtm.com static.hotjar.com cdn.bizible.com www.knotch-cdn.com js.qualified.com app-sj11.marketo.com fonts.googleapis.com cdnjs.cloudflare.com dka575ofm4ao0.cloudfront.net s21.q4cdn.com widgets.q4app.com cdn.localizejs.com unpkg.com events.rainfocus.com cdn-leads.rainfocus.com static.rainfocus.com assets-global.website-files.com cdn.jsdelivr.net cdn.frontify.com technical-services-public.s3.us-east-1.amazonaws.com a.mtstatic.com c.la4-c2-chi.salesforceliveagent.com consent.truste.com static.getclicky.com www.gstatic.com ga.jspm.io 583ec472ee7d.edge.sdk.awswaf.com static.pathmotion.io www.bugherd.com 2
default-src https://*.aok.de data: blob: 'self' 'unsafe-inline' https://*.reddit.com https://cdn.melibo.de https://www.redditstatic.com https://*.kameleoon.io https://maps.googleapis.com https://fonts.gstatic.com https://www.google.com https://www.google.de https://googleads.g.doubleclick.net https://ad.doubleclick.net https://www.youtube-nocookie.com https 2
default-src 'self';         script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.amazon-adsystem.com https://*.contentsquare.net https://*.demdex.net https://*.doubleclick.net https://*.googleadservices.com https://*.smassets.net https://*.surveymonkey.com https://ajax.googleapis.com https://amazon-adsystem.com https://analytics.tiktok.com https://app.contentsquare.com https://bat.bing.com https://c5.adalyser.com https://cdn.evergage.com https://cdn.evgnet.com https://connect.facebook.net https://cse.google.com https://ct.pinterest.com https://data.privacy.ensighten.com https://manage.ensighten.com https://maps.googleapis.com https://nationaltrustorguk.germany-2.evergage.com https://nexus-test.ensighten.com https://nexus.ensighten.com https://player.vimeo.com https://s.pinimg.com https://s.yimg.com https://static.nationaltrust.org.uk https://static.yieldmo.com https://tkr.yieldmo.com https://tms.nationaltrust.org.uk https://www.awin1.com https://www.dwin1.com https://www.google.com https://www.googletagmanager.com https://www.redditstatic.com https://www.youtube.com https://www.zenaps.com;         style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://static.nationaltrust.org.uk https://www.google.com;         img-src 'self' data: https://*.amazon-adsystem.com https://*.contentsquare.net https://*.demdex.net https://*.doubleclick.net https://*.googleadservices.com https://*.googlesyndication.com https://*.gstatic.com https://*.paa-reporting-advertising.amazon https://*.smassets.net https://alb.reddit.com https://amazon-adsystem.com https://bat.bing.com https://c5.adalyser.com https://clients1.google.com https://ct.pinterest.com https://data.privacy.ensighten.com https://maps.googleapis.com https://maps.gstatic.com https://nt.global.ssl.fastly.net https://paa-reporting-advertising.amazon https://services.postcodeanywhere.co.uk https://smetrics.nationaltrust.org.uk https://sp.analytics.yahoo.com https://static.nationaltrust.org.uk https://tkr.yieldmo.com https://tms.nationaltrust.org.uk https://www.awin1.com https://www.facebook.com https://www.google.co.uk https://www.google.com https://www.googletagmanager.com https://www.zenaps.com;         font-src 'self' data: https://*.smassets.net https://fonts.gstatic.com https://static.nationaltrust.org.uk;         frame-src 'self' https://*.amazon-adsystem.com https://*.demdex.net https://*.surveymonkey.com https://amazon-adsystem.com https://ct.pinterest.com https://maps.googleapis.com https://national-trust.maps.arcgis.com https://player.vimeo.com https://syndicatedsearch.goog https://www.awin1.com https://www.youtube.com;         connect-src 'self' https://*.adtrafficquality.google https://*.amazon-adsystem.com https://*.contentsquare.com https://*.contentsquare.net https://*.demdex.net https://*.doubleclick.net https://*.googleadservices.com https://*.googlesyndication.com https://*.paa-reporting-advertising.amazon https://*.tt.omtrdc.net https://amazon-adsystem.com https://analytics.tiktok.com https://api.iconify.design https://bat.bing.com https://ct.pinterest.com https://data.privacy.ensighten.com https://kinesis.us-east-1.amazonaws.com/ https://manage.ensighten.com https://maps.googleapis.com https://nationaltrustorguk.germany-2.evergage.com https://nexus-test.ensighten.com https://nexus.ensighten.com https://paa-reporting-advertising.amazon https://pixel-config.reddit.com https://pixel.reddit.com https://s.yimg.com https://services.postcodeanywhere.co.uk https://smetrics.nationaltrust.org.uk https://syndicatedsearch.goog https://tms.nationaltrust.org.uk https://www.google.co.uk https://www.google.com https://www.googleapis.com https://www.googletagmanager.com;         media-src 'self' https://audioboom.com https://d11untcg2uthr3.cloudfront.net https://dts.podtrac.com;         object-src 'none';         child-src blob:;         worker-src blob:;         frame-ancestors https://webcms.nationaltrust.org.uk;         base-uri 'self'; 2
default-src 'self'; connect-src 'self' https://studio.aeocontent.ai https://*.grass.io https://*.getgrass.io https://*.ghost.io https://*.clarity.ms https://*.google-analytics.com https://*.grassfoundation.io https://*.convertexperiments.com https://*.google.com https://analytics.google.com https://*.googletagmanager.com https://*.doubleclick.net https://*.googleadservices.com https://*.facebook.com https://*.analytics.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.aeocontent.ai https://*.clarity.ms https://*.googletagmanager.com https://*.youtube.com https://*.convertexperiments.com https://*.google-analytics.com https://*.doubleclick.net https://*.facebook.net https://*.googleadservices.com https://www.google.com https://www.gstatic.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.aeocontent.ai https://*.clarity.ms https://*.googletagmanager.com https://*.youtube.com https://*.convertexperiments.com https://*.google-analytics.com https://*.doubleclick.net https://*.facebook.net https://*.googleadservices.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://*.googletagmanager.com https://*.googleapis.com https://*.gstatic.com; img-src 'self' https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https: blob: data:; font-src 'self' https://*.gstatic.com https://*.googleapis.com; media-src 'self' https://*.grass.io https://*.getgrass.io https://*.ghost.io; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://studio.aeocontent.ai; upgrade-insecure-requests; frame-src 'self' https://*.youtube.com https://*.convertexperiments.com https://*.googletagmanager.com https://*.doubleclick.net; worker-src 'self' blob:; child-src 'self' blob:; manifest-src 'self' 2
default-src 'self'; object-src 'none'; script-src 'self' *.hubspot.com *.hubspotusercontent-na1.net cdn.jsdelivr.net adsplay.com.br www.chatbase.co platform.twitter.com static.addtoany.com cdn.socket.io cdn.datatables.net *.cloudfront.net *.airtable.com www.googleadservices.com bat.bing.com *.albacross.com www.youtube.com snap.licdn.com static.hotjar.com cdn.privacytools.com.br plugin.handtalk.me unpkg.com *.hubspot.net cdnjs.cloudflare.com www.gstatic.com script.hotjar.com www.google.com *.storylane.io try.abtasty.com code.jquery.com googleads.g.doubleclick.net www.google-analytics.com www.clarity.ms ajax.googleapis.com cdn.cookielaw.org *.facebook.net js.hs-analytics.net js.hs-banner.com js.hsadspixel.net js.hscollectedforms.net js.hsforms.net js.hsleadflows.net js.hubspot.com app.hubspot.com js.usemessages.com *.linkedin.com static.hsappstatic.net www.googletagmanager.com www.gupy.io sibforms.com; style-src 'self' 'unsafe-inline' *.gupy.io *.hubspot.com *.hsappstatic.net *.hubspot.net cdn-uicons.flaticon.com kit.fontawesome.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.datatable.net cdn.datatables.net stackpath.bootstrapcdn.com cdn.cookielaw.org *.hubspotusercontent-na1.net *.hubspotusercontent40.net fonts.googleapis.com cdn.privacytools.com.br www.gupy.io sibforms.com; img-src 'self' blob: 3299491.fs1.hubspotusercontent-na1.net perf-na1.hsforms.com track.hubspot.com www.gupy.io data: *; font-src 'self' fonts.gstatic.com fonts.googleapis.com *.hubspotusercontent-na1.net *.hubspotusercontent40.net www.gupy.io assets.sendinblue.com static.hsappstatic.net; connect-src 'self' blob: fs1.hubspotusercontent-na1.net cdn.cookielaw.org *.gupy.io data: gap: *; media-src 'self' *.hubspot.com *.hubspotusercontent-na1.net www.gupy.io; frame-src gupy.com.br *.gupy.com.br gupy.com.br/ gupy.io *.hs-sites.com *.hubspot.com js.hsforms.net www.googletagmanager.com www.chatbase.co lottie.host platform.twitter.com www.figma.com marine-bebop-445118-a6.uc.r.appspot.com w.soundcloud.com *.sibforms.com static.addtoany.com www.youtube.com app.hubspot.com *.hubspotvideo.com td.doubleclick.net *.facebook.com forms.hsforms.com *.storylane.io airtable.com *.spotify.com gupy.chat.blip.ai gupy673.outgrow.us *.google.com anchor.fm; frame-ancestors 'self' gupy.com.br gupy.io; 2
default-src 'self'; script-src 'report-sample' 'self'   https://7052064.fs1.hubspotusercontent-na1.net   https://a.omappapi.com   https://app.hubspot.com   https://assets.apollo.io   https://cdn.demio.com   https://cdn.propensity.com   https://cdnjs.cloudflare.com   https://code.jquery.com   https://googleads.g.doubleclick.net   https://import-cdn.default.com   https://js.hscollectedforms.net   https://js.navattic.com   https://platform.linkedin.com   https://s3-us-west-2.amazonaws.com   https://snap.licdn.com   https://static.hsappstatic.net   https://www.googleadservices.com   https://www.googletagmanager.com   https://www.redditstatic.com   https://js.hs-analytics.net   https://js.hs-scripts.com; style-src 'report-sample' 'self'   https://7052064.fs1.hubspotusercontent-na1.net   https://ajax.googleapis.com   https://cdn.demio.com   https://cdnjs.cloudflare.com   https://fonts.googleapis.com   https://kit-free.fontawesome.com   https://static.hsappstatic.net; object-src 'none'; base-uri 'self'; connect-src 'self'   https://a.omappapi.com   https://analytics.google.com   https://aplo-evnt.com   https://app.hubspot.com   https://cp.hubspot.com   https://forms.default.com   https://forms.hsforms.com   https://geo.demio.com   https://js.hs-banner.com   https://nucleus.default.com   https://pixel-config.reddit.com   https://px.ads.linkedin.com   https://www.cloudflare.com   https://www.google.com   https://www.redditstatic.com   https://z.omappapi.com   https://api.hsforms.com   https://api.hubapi.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self'   https://forms.hsforms.com   https://play.hubspotvideo.com   https://scheduler.default.com   https://td.doubleclick.net   https://www.googletagmanager.com; img-src 'self'   https://a.omappapi.com   https://alb.reddit.com   https://forms-na1.hsforms.com   https://forms.hsforms.com   https://forms.hubspot.com   https://googleads.g.doubleclick.net   https://px.ads.linkedin.com   https://static.hsappstatic.net   https://track.hubspot.com   https://www.google.com; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-uri https://6823595ee2a3634bf77e7bfe.endpoint.csper.io?builder=true&v=2; 2
default-src https: 'unsafe-inline' 'unsafe-eval'; report-uri https://b3ceba9babf02086c0dca962bbbd1cda.report-uri.io/r/default/csp/reportOnly 2
frame-ancestors 'self' *.pdffiller.com *.signnow.com *.airslate.com; report-uri https://www.pdffiller.com/api_v3/security_report/cspViolationsReport?appKey=rs3dwgboso31.apps.marketing_pages 2
object-src https://players.brightcove.net https://www.realpage.com https://s.realpage.com https://vjs.zencdn.net;img-src * blob: data:; font-src https://acsbapp.com https://www.realpage.com https://s.realpage.com https://js.qualified.com https://use.typekit.net https://fonts.gstatic.com https://vjs.zencdn.net https://www.slant.co data:; style-src *.typekit.net https://www.realpage.com https://s.realpage.com https://fonts.googleapis.com https://www.gstatic.com https://cdn.jsdelivr.net 'unsafe-inline'; frame-ancestors 'self' *.realpage.com *.seismic.com www.realpagelearning.com *.yieldstar.com *.mpfyieldstar.com; report-to csp-report-only; report-uri https://cspreports.realpage.com/api/reports/save/report-only; 2
default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http://*.files.wordpress.com wss://robbreport.com; report-uri https://pmcuri.report-uri.com/r/d/csp/reportOnly 2
form-action *.facebook.com; default-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' data: blob: *.fls.doubleclick.net *.doubleclick.net *.hotjar.com *.hotjar.io wss://*.hotjar.com *.omtrdc.net *.twitter.com covers.odilo.io *.ads-twitter.com *.facebook.com *.facebook.net cdn.cookielaw.org *.googletagmanager.com *.googleadservices.com online.bancosantander.es a.omappapi.com *.googleapis.com extend.vimeocdn.com t.co adservice.google.com *.linkedin.com *.google-analytics.com *.santanderopenacademy.com *.universia.net fonts.gstatic.com in-automate.sendinblue.com z.omappapi.com api.omappapi.com snap.licdn.com images.findawayworld.com *.tiktok.com privacyportal-de.onetrust.com sibautomation.com use.typekit.net pro-becas-images-s3.s3.eu-west-1.amazonaws.com santander-privacy.my.onetrust.com; frame-ancestors 'self' *.santanderopenacademy.com *.googletagmanager.com; connect-src 'self' cdn.equalweb.com *.universia.net pro-becas-images-s3.s3.eu-west-1.amazonaws.com www.linkedin.com script.hotjar.com img.youtube.com px4.ads.linkedin.com t.co surveystats.hotjar.io analytics.twitter.com www.google.es mboxedge37.tt.omtrdc.net santanderuniversidad.tt.omtrdc.net www.googletagservices.com www.google.ie www.facebook.com cdn.cookielaw.org googleads.g.doubleclick.net stats.g.doubleclick.net www.google.com pagead2.googlesyndication.com *.analytics.google.com vc.hotjar.io metrics.hotjar.io wss://ws.hotjar.com ws.hotjar.com content.hotjar.io *.google-analytics.com px.ads.linkedin.com analytics.tiktok.com *.pangle-ads.com *.omappapi.com *.vimeo.com *.santanderopenacademy.com *.googlesyndication.com *.onetrust.com *.tiktokw.us sc-static.net *.sc-static.net snapchat.com *.snapchat.com onetrust.com *.onetrust.com omtrdc.net *.omtrdc.net analytics.google.com *.google.com *.adoberesources.net adoberesources.net *.adobedc.net adobedc.net *.demdex.net demdex.net; font-src 'self' script.hotjar.com fonts.gstatic.com data:; frame-src 'self' www.youtube.com www.google.com *.doubleclick.net track.adform.net www.facebook.com *.universia.net universia.net *.santanderopenacademy.com *.vimeo.com doubleclick.net *.doubleclick.net; img-src 'self' data: *.santanderopenacademy.com *.santanderx.com dss.hybrid.ai su-commons-documents.s3.eu-west-1.amazonaws.com pro-becas-images-s3.s3.eu-west-1.amazonaws.com i.ytimg.com non-productive-alfred-s3.s3.eu-west-1.amazonaws.com *.universia.net img.youtube.com cdn.cookielaw.org www.facebook.com fonts.gstatic.com www.google.ie www.google.com www.google.es *.googletagmanager.com *.google-analytics.com px.ads.linkedin.com px4.ads.linkedin.com t.co analytics.twitter.com covers.odilo.io images.findawayworld.com *.doubleclick.net *.odilotk.es *.googlesyndication.com snapchat.com *.snapchat.com; manifest-src 'self'; media-src 'self' data: *.santanderopenacademy.com *.santanderx.com; object-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' emd.hybrid.ai *.hybrid.ai pixel.wp.pl www.google.com 'sha256-YSegCmpoY/9vy6z9Jp/wY5F+2CZOSO85IpkqRDamw6o=' 'sha256-8UQUF8T5SdG0xN7U0SziZK/tE7Mx20WlIEvrhPZS+5c=' 'sha256-ZC4Ihfl+1sv3E25DQh090ITQKwffxiocyA9C1vaePKU=' 'sha256-y+EdpRp7NGzuxDREjdSGXuM2ZRxY/zPRIps6hzHQOcU=' 'sha256-ZC4Ihfl+1sv3E25DQh090ITQKwffxiocyA9C1vaePKU=' 'sha256-HbtNuErO4Ji0X7sd59L8NfJYuQk3WllCWK3gVuRMpfM=' 'sha256-BBirXJiJdwXRuf4PKdCNfYQLT8mhwGu68gkk2lfCqN8=' 'sha256-9gh4m8bsTLdMvKZ358mYZY2d+f5k+bk+APY/b3jwy1o=' 'sha256-xeKH9HwGHVm84iWqrxisQix9T08PGSCZTxFIO4+ewWk=' 'sha256-DwzQ63XCPWPBU9VhenPaZeU1L0tiiqJkkaWArzaMA14=' 'sha256-5t573MY7H7LQK71Vf2b+RoOG9NlBxHctIHdMjVPJIE0=' 'sha256-ZxrnaNw21FtNs0hG3ejrGPJWMFqp2c2scn3dGBS7Xtk=' 'sha256-DaJ5+aVVCCwmIoJpsto8Q2FfkqVlML3utJdn4mDMGD0=' 'sha256-Fj/OzUbSCuycXsQO3rkxgJpOQcr0O4grKcZDUi0FIiU=' 'sha256-L89rOqVn3e1Yeav7YFzFH7bxGr1IyHtjhNxYvrcVL4E=' 'sha256-g2T0Peh4PkAjcTj+CFHeM0y83Uuh+6W/+Ay4nUyncSo=' 'sha256-BpTz1JC47PMe4NhdM7n0gmuvr+83Jo3c+LLXav8o+Wc=' 'sha256-+i46atGTJGrevoy/LaA/uxqfIvacu6J/34f4LYs4FLU=' 'sha256-NW1gvrymt4M+SBgRpB7GKpbvkiAcBF120jBugIgwTkY=' 'sha256-TCOS0LXlyOYGx+xlpfAYkRxyaOiYLTlRzHwI0YQSm3Q=' 'sha256-XdoX181xfRJT12LmChyU6l4zxvoIsaAHf4FxTHoJM+I=' 'sha256-NKT4ofJEPzU1gDi1WITFInJvz8potrsIe5i+LSnCKqo=' 'sha256-w6kdg/3YV4tBVkaDe4i2aktYPtaPLEHNIGHKOXJ7aZI=' 'sha256-7OI/iFnRHuxJU3EbXDhDFX6g3cZ0C1I8U6VTbbk7bPw=' 'sha256-VY8NVZZ8EZKkngWGPFlpnC0jlPPS4naDQeeIKqLpgUU=' 'sha256-3ThNsno0lln5H88qDcBDPljNxQaOgkPiulXpM/OsV1s=' 'sha256-8N1I80yqbb8/sRov2zmhZf1nwe9Hd8PifhnSJaDP664=' 'sha256-LG4xcV34tsaAdFNYuH8Lr84Ovn0ZnSV2GoIA+TiLP5s=' 'sha256-y36RoFUJWgc8gbl/5Pk2/0bsYv2bJ+bMa8Y4LV/Wz/k=' 'sha256-IgMQOOOedQeMPBl7lSreMVPmJvU62bc6l8HcsGXnbWc=' 'sha256-3FPxyKucOIUnwkis1jUlVWeg63ttBCdsnPZ7d1/U9vQ=' 'sha256-lBxE5qVCAIfADFr1+pdyVxAP7I/YVviosUAsCf3pZtU=' 'sha256-3iXpidN34sHSaOL+oY8lqqkqIs8qgMSZmmFOyyyJq5o=' 'sha256-TZjz12EnkJLarfuyWy8NqZ9HG8RpIuFAlQySbT4/4h8=' 'sha256-Y4y/Z3pJNei7wFfh20klvIrbZiajvE/JWO1KhI668Xo=' 'sha256-LigV2Z6/JVA57qW0q8wSx849ylkhI35JZTPqGObl9ks=' 'sha256-83sIN1kEH+EziQHRTaQiSWImOUtv0wFFfa74npfXyoE=' 'sha256-BMIPp0uCJPYMdHFyQdug09fBOv1yC4c3ATQ5HIB8lnU=' 'sha256-mkZ77JgvPSMOW/FuYQr4tf+Z2qIq0e/ozaNEcVp9eyc=' cdn.jsdelivr.net cdn.equalweb.com code.jquery.com track.adform.net s2.adform.net www.googletagservices.com cdn.cookielaw.org googleads.g.doubleclick.net connect.facebook.net static.hotjar.com metrics.hotjar.io script.hotjar.com *.googletagmanager.com *.google-analytics.com snap.licdn.com static.ads-twitter.com analytics.tiktok.com *.googleapis.com pro-becas-images-s3.s3.eu-west-1.amazonaws.com *.gstatic.com *.omappapi.com *.googleadservices.com *.santanderopenacademy.com *.googlesyndication.com sc-static.net *.sc-static.net snapchat.com *.snapchat.com onetrust.com *.onetrust.com omtrdc.net *.omtrdc.net analytics.google.com *.google.com *.adoberesources.net adoberesources.net *.adobedc.net adobedc.net *.demdex.net demdex.net st.hybrid.ai; style-src 'self' 'unsafe-inline' stackpath.bootstrapcdn.com *.googletagmanager.com fonts.googleapis.com *.omappapi.com; worker-src *.universia.net 2
default-src 'self' https://themes.googleusercontent.com/ https://apps.geodan.nl https://acc.apps.geodan.nl https://platform.twitter.com/ https://syndication.twitter.com/ http://www.rovid.nl https://geodata.rivm.nl https://statistiek.rijksoverheid.nl https://mebi.rivm.nl https://cstm.rivm.nl/ https://cgl-web-api.rivm.nl/ https://acceptatie-cgl-web-api.rivm.nl/ https://data.rivm.nl/ https://chemkap.rivm.nl https://app.powerbi.com/ https://api.pdok.nl/; script-src 'self' 'unsafe-inline' 'unsafe-eval'  *.mopinion.com https://statistiek.rijksoverheid.nl http://platform.twitter.com/ https://cdn.syndication.twimg.com https://mebi.rivm.nl https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cstm.rivm.nl/ https://cgl-web-api.rivm.nl/ https://acceptatie-cgl-web-api.rivm.nl/ https://data.rivm.nl/  https://apps.rivm.nl https://chemkap.rivm.nl https://*.mopinion.com https://api.pdok.nl/ https://collect.mopinion.com https://cacheorcheck.mopinion.com https://w.usabilla.com/; object-src https://cstm.rivm.nl/ https://cgl-web-api.rivm.nl/ https://acceptatie-cgl-web-api.rivm.nl/ https://app.powerbi.com/ https://api.pdok.nl/; style-src 'self' 'unsafe-inline'  *.mopinion.com https://platform.twitter.com/ https://ton.twimg.com/ https://mebi.rivm.nl https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cstm.rivm.nl/ https://cgl-web-api.rivm.nl/ https://acceptatie-cgl-web-api.rivm.nl/ https://*.mopinion.com https://data.rivm.nl/ https://api.pdok.nl/ https://collect.mopinion.com https://cacheorcheck.mopinion.com; img-src 'self' https://rivm.nl/ https://*.rivm.nl/ *.mopinion.com https://statistiek.rijksoverheid.nl/ https://geodata.nationaalgeoregister.nl/ https://syndication.twitter.com/ https://pbs.twimg.com/ https://ton.twimg.com/ https://abs.twimg.com/ https://platform.twitter.com/ http://abs.twimg.com/ http://www.rovid.nl https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cstm.rivm.nl/ https://cgl-web-api.rivm.nl/ https://acceptatie-cgl-web-api.rivm.nl/  https://service.pdok.nl/ https://data.rivm.nl/  https://*.openstreetmap.org/ https://chemkap.rivm.nl https://api.pdok.nl/; frame-src 'self' https://cibrapportage.rivm.nl https://esp-ext.rivm.nl https://login-ext.rivm.nl https://chemkap.rivm.nl https://www.infectieradar.nl https://app.powerbi.com https://api.pdok.nl/ https://apps.rivm.nl/ https://sterftecijfers.rivm.nl; frame-ancestors 'self' https://www.atlasleefomgeving.nl https://*.gezondeleefomgeving.nl https://*.woondossier.nl https://roosendaal.incijfers.nl https://*.nhnieuws.nl https://chemkap.rivm.nl https://www.infectieradar.nl https://api.pdok.nl; child-src https://cstm.rivm.nl/ https://cgl-web-api.rivm.nl/ https://acceptatie-cgl-web-api.rivm.nl/ https://data.rivm.nl/  https://app.powerbi.com https://api.pdok.nl/; font-src 'self' https://rivm.nl/ *.mopinion.com https://*.rivm.nl/ https://themes.googleusercontent.com/ https://cstm.rivm.nl/ https://*.mopinion.com https://cgl-web-api.rivm.nl/ https://acceptatie-cgl-web-api.rivm.nl/ https://data.rivm.nl/ https://api.pdok.nl/; connect-src 'self' *.mopinion.com https://data.rivm.nl https://mebi.rivm.nl/ https://statistiek.rijksoverheid.nl/ https://statistiek.rijksoverheid.nl/* https://cstm.rivm.nl/ https://cstm.rivm.nl/* https://cgl-web-api.rivm.nl/ https://acceptatie-cgl-web-api.rivm.nl/ https://acc-api.rivm.nl https://api.rivm.nl/ https://api.pdok.nl/* https://*.mopinion.com https://api.pdok.nl; report-uri /report-csp-violation 2
default-src 'self';connect-src 'self' https://analytics.majestic.com https://analytics.majesticseo.com https://*.google-analytics.com https://*.g.doubleclick.net https://*.analytics.google.com https://*.googletagmanager.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://analytics.majesticseo.com https://analytics.majestic.com https://info.majestic.com https://*.googletagmanager.com www.google-analytics.com https://www.googleadservices.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://platform.twitter.com/ https://challenges.cloudflare.com;style-src 'self' 'unsafe-inline';img-src 'self' data: https:;font-src 'none';object-src 'none';media-src 'none';frame-src www.openstreetmap.org www.youtube.com https://www.youtube-nocookie.com/ https://player.vimeo.com/ https://www.google.com/recaptcha/ https://platform.twitter.com/ https://player.captivate.fm/ https://syndication.twitter.com/ https://challenges.cloudflare.com;child-src www.openstreetmap.org www.youtube.com https://www.google.com/recaptcha/ https://platform.twitter.com/ https://syndication.twitter.com/;frame-ancestors https://docs.google.com https://*.googleusercontent.com;report-uri /csp/report;report-to report-endpoint 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests; 2
default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http://*.files.wordpress.com wss://www.artnews.com; report-uri https://pmcuri.report-uri.com/r/d/csp/reportOnly 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.wellhub.com *.amplitude.com https://js.appboycdn.com/web-sdk/4.0/braze.no-amd.min.js https://widget-mediator.zopim.com https://js-na1.hs-scripts.com https://static.zdassets.com https://sdk.inbenta.io https://chatbot.backoffice.gympass-staging.com/chatbot-site-gympass-com.js https://cdn.optimizely.com https://maps.googleapis.com https://x.clearbitjs.com https://js.hscollectedforms.net https://connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.google.com cdn.cookielaw.org/ cdn.segment.com bat.bing.com/bat.js cdn.jsdelivr.net/npm/jquery-validation@1.19.5/dist/jquery.validate.min.js cdn.optimizely.com/js/ cdn.segment.com/analytics.js/ cdnjs.cloudflare.com/ajax/libs/jquery.mask/1.14.16/jquery.mask.min.js code.jquery.com/jquery-3.6.0.min.js connect.facebook.net/en_US/fbevents.js googleads.g.doubleclick.net/pagead/viewthroughconversion/ j.6sc.co/6si.min.js js.driftt.com/include/ js.hs-analytics.net/analytics/ js.hs-banner.com/ js.hs-scripts.com/ js.hsadspixel.net/fb.js js.hsforms.net/forms/v2.js js.hsleadflows.net/leadflows.js js.usemessages.com/conversations-embed.js rum-static.pingdom.net/ s.yimg.com/wi/ytc.js script.hotjar.com/ snap.licdn.com/li.lms-analytics/ static.hotjar.com/c/ static.hsappstatic.net/MeetingsEmbed/ex/MeetingsEmbedCode.js tag.clearbitscripts.com/v1/ tpc.googlesyndication.com/ unpkg.com/blip-chat-widget https://js.qualified.com/ https://*.salesloft.com/ clarity.ms/tag/uet/ *.clarity.ms/tag/uet/ x.clearbitjs.com/v2/ https://s3.amazonaws.com/raichu-beta/ https://static.play.ht/playht-pageplayer-plugin.js https://bat.bing.com/p/action/ https://connect.facebook.net/signals/config/ https://js.hubspot.com/web-interactives-embed.js https://analytics.tiktok.com/ https://www.clarity.ms/s/ https://static.xingcdn.com/xingtrk/index.js; style-src 'self' 'unsafe-inline' https://sdk.inbenta.io fonts.googleapis.com https://www.googletagmanager.com/ https://s3.amazonaws.com/raichu-beta/ https://static.play.ht/playht-pageplayer-plugin.css; object-src 'none'; base-uri 'self'; connect-src 'self' *.wellhub.com https://app.qualified.com/ wss://*.qualified.com https://unleash-edge-mep.gympass.com https://unleash-edge-mep.gympass.com/api/frontend/ https://traces.observability.prd.us.gympass.cloud/collect https://ext-otel.mep.prd.us.gympass.cloud/collect https://sdk.iad-03.braze.com/api/v3/data cdn.cookielaw.org/ *.onetrust.com inbenta.io *.inbenta.io https://api.inbenta.io wss://widget-mediator.zopim.com https://zendesk-eu.my.sentry.io *.zendesk.com zendesk.com https://static.zdassets.com https://ekr.zdassets.com https://maps.googleapis.com https://unlogged.users.gympass-staging.com https://mpc2-prod-23-is5qnl632q-ue.a.run.app https://mpc2-prod-1-is5qnl632q-uc.a.run.app https://analytics-ipv6.tiktokw.us https://demo-1.conversionsapigateway.com https://translate.googleapis.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.google.com google.com googleadservices.com https://www.google.com.br/ google.com.br googleads.g.doubleclick.net https://googleads.g.doubleclick.net/ api.hubapi.com hubspot.com *.hubspot.com api.segment.io app.clearbit.com bat.bing.com cdn.segment.com epsilon.6sense.com *.optimizely.com optimizely.com forms.hsforms.com in.hotjar.com ipv6.6sc.co js.hs-banner.com *.clarity.ms rum-collector-2.pingdom.net s.yimg.com stats.g.doubleclick.net unlogged.users.gympass.com https://play.ht/api/v2/ https://places.geo.us-east-1.amazonaws.com https://*.cloudfront.net https://px.ads.linkedin.com https://analytics.tiktok.com/ api.reclameaqui.com.br https://browser-intake-datadoghq.com/api/v2/ https://rum.browser-intake-datadoghq.com/api/v2/ https://www.facebook.com/ https://region1.analytics.google.com/ wss://*.hotjar.com/ https://*.hotjar.io/ https://o4504963224764416.ingest.us.sentry.io/api/ https://www.xing.com/xas/api/tracking_pixel_verification; font-src 'self' data: https://cdn.inbenta.io fonts.gstatic.com https://assets-cdn.gympass.com https://assets-cdn.wellhub.com https://script.hotjar.com/ https://s3.amazonaws.com/play-plugin/build/font https://js.qualified.com; frame-src 'self' https://gympass.chat.blip.ai https://app.qualified.com/ optimizely.com *.cdn.optimizely.com googleadservices.com bid.g.doubleclick.net forms.hsforms.com js.driftt.com meetings.hubspot.com tpc.googlesyndication.com vars.hotjar.com facebook.com https://www.facebook.com/ www.googletagmanager.com/ https://www.youtube.com/ https://td.doubleclick.net; img-src 'self' data: https://s3.amazonaws.com/raichu-beta/ https://assets-cdn.gympass-staging.com https://assets-cdn.gympass.com https://assets-cdn.wellhub.com https://images.partners.gympass.com/ https://tmp-images.partners.gympass.com/ https://p.adsymptotic.com https://www.googletagmanager.com https://translate.google.com cdn.cookielaw.org/ *.inbenta.com inbenta.com https://gympass-staging-images-us.s3.amazonaws.com https://maps.googleapis.com https://maps.gstatic.com https://analytics.tiktok.com/ https://connect.facebook.net *.clarity.ms/ cloudfront.net *.cloudfront.net https://www.google.com/ads/ga-audiences https://www.google.com.br/ads/ga-audiences https://www.google.com/pagead/1p-user-list/ b.6sc.co bat.bing.com https://c.bing.com/ forms-na1.hsforms.com forms.hsforms.com googleads.g.doubleclick.net https://googleads.g.doubleclick.net/ px.ads.linkedin.com sp.analytics.yahoo.com track.hubspot.com facebook.com https://www.google-analytics.com google.com google.com.br www.google.com.br https://www.google.co.uk/ https://www.google.com.ar/ https://www.google.com.mx/ https://www.google.de/ https://www.google.es/ https://www.google.cl/ https://www.google.it/ https://www.facebook.com/ https://fonts.gstatic.com/ https://px4.ads.linkedin.com/collect https://www.linkedin.com/px/ https://ads01.groovinads.com/ https://perf-na1.hsforms.com/embed/v3/counters.gif; manifest-src 'self'; media-src 'self' https://static.zdassets.com https://*.qualified.com; worker-src 'self' *.gympass-staging.com blob:; 2
default-src 'self'; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https:; object-src 'self' https:; style-src 'self' data: 'unsafe-inline' https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; frame-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' data: https:; 2
script-src 'self' 'unsafe-inline' 'report-sample' *.adresowa.pl https://accounts.google.com https://connect.facebook.net https://cdn-cookieyes.com https://*.googlesyndication.com https://www.googletagmanager.com https://*.doubleclick.net https://*.adtrafficquality.google https://*.clarity.ms https://ajax.googleapis.com https://cdn.jsdelivr.net https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://appleid.cdn-apple.com https://maps.googleapis.com https://maps.gstatic.com https://developers.google.com; frame-src 'self' https://accounts.google.com https://*.googlesyndication.com https://*.doubleclick.net https://*.adtrafficquality.google https://www.google.com https://www.facebook.com https://staticxx.facebook.com https://www.youtube.com https://trends.google.com; connect-src 'self' *.adresowa.pl https://accounts.google.com https://connect.facebook.net https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://www.googletagmanager.com https://*.clarity.ms https://*.cookieyes.com https://cdn-cookieyes.com https://pagead2.googlesyndication.com https://csi.gstatic.com https://*.doubleclick.net https://*.adtrafficquality.google https://www.googleadservices.com https://www.google.com https://google.com https://www.google.pl https://www.facebook.com https://appleid.cdn-apple.com https://maps.googleapis.com; report-uri /csplogger/; report-to csp-endpoint 2
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: wss://*.dathost.net https://*.dathost.net wss://*.dathost.com https://*.dathost.com https://www.googletagmanager.com https://*.cookieyes.com https://cdn-cookieyes.com https://analytics.ahrefs.com https://widget.trustpilot.com https://*.clarity.ms https://c.bing.com/ https://beacon-v2.helpscout.net https://beaconapi.helpscout.net https://d3hb14vkzrxvla.cloudfront.net https://d33v4339jhl8k0.cloudfront.net https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://*.js.stripe.com https://js.stripe.com https://api.stripe.com https://hooks.stripe.com https://maps.googleapis.com https://*.gravatar.com https://s3.dathost.net https://www.paypalobjects.com https://fonts.gstatic.com https://media.forgecdn.net https://avatars.steamstatic.com https://accounts.google.com https://challenges.cloudflare.com https://i.gyazo.com https://i.imgur.com https://i.ytimg.com https://*.youtube.com https://fonts.googleapis.com https://use.typekit.net https://i0.wp.com https://i1.wp.com https://i2.wp.com https://ad.doubleclick.net https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com; report-uri /internal-api/csp-report 2
default-src 'self' blob: data:; script-src 'self' blob: data: 'unsafe-eval' 'unsafe-inline' 'wasm-eval' https://cdn.jsdelivr.net https://*.alicdn.com https://*.livechatinc.com https://*.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://js.admediasales.com https://accounts.google.com https://appleid.cdn-apple.com https://*.gstatic.com https://*.googleapis.com https://*.geetest.com https://*.google.com https://sepolia.drpc.org https://*.cloudflareinsights.com https://*.geevisit.com https://*.adjust.com https://*.gsensebot.com https://*.facebook.net https://*.forter.com https://*.simplex.com https://developers.kakao.com https://*.checkout.com https://*.twitter.com https://*.youtube.com https://*.telegram.org https://static.zdassets.com https://*.veriff.com https://*.veriff.me https://*.sardine.ai https://*.worldpay.com https://*.googleusercontent.com https://*.g.doubleclick.net https://ekr.zdassets.com https://*.zopim.com https://*.probity.io https://*.cardinalcommerce.com https://*.legendtrading.com https://static.trustdecision.com https://sdk.moss-risk.com https://fpnpmcdn.net https://static.sensorsdata.cn https://*.rerrkvifj.com https://telegram.org; style-src 'self' blob: data: 'unsafe-inline' https://cdn.jsdelivr.net https://*.alicdn.com https://fonts.googleapis.com https://accounts.google.com https://*.gstatic.com https://*.geetest.com https://*.rerrkvifj.com; font-src 'self' blob: data: https://*.alicdn.com https://fonts.gstatic.com https://accounts.google.com https://cdnjs.cloudflare.com https://migaku-public-data.migaku.com https://gw.alipayobjects.com https://use.typekit.net https://cdn.jsdelivr.net https://www.slant.co https://cdn.scite.ai https://*.aliyuncs.com https://cdn.megabonus.com https://cdn.fastdic.com https://*.rerrkvifj.com; img-src 'self' blob: data: https: android-webview-video-poster: https://*.google-analytics.com https://accounts.google.com https://*.googleapis.com https://cdn.jsdelivr.net https://*.geetest.com https://testqrc.bitgetapp.com; connect-src 'self' blob: data: https://aladdin.lbkpro.net https://*.livechatinc.com wss://*.livechatinc.com https://*.google-analytics.com https://analytics.google.com https://sensors-data-access.lbkwork.com https://*.forter.com https://accounts.google.com https://appleid.cdn-apple.com https://stats.g.doubleclick.net https://*.googleapis.com https://eth.merkle.io https://region1.google-analytics.com https://region1.analytics.google.com https://*.geetest.com https://cdnjs.cloudflare.com https://*.alicdn.com https://binance.llamarpc.com https://js.admediasales.com https://track.uc.cn https://*.google.com https://gc.kis.v2.scr.kaspersky-labs.com https://*.oss-cn-hongkong.aliyuncs.com https://adscool.net https://api.trongrid.io https://arb1.arbitrum.io https://infragrid.v.network https://eth.llamarpc.com https://*.hongnuoyy.com https://*.bitunix.com https://*.okx.com https://mainnet.base.org https://rpc.genesys.network https://*.adjust.com https://*.adjust.world https://eth-mainnet.nodereal.io https://ethereum-rpc.publicnode.com https://go.getblock.io https://www.tradingview.com https://*.googletagmanager.com https://siteperformancetest.net https://wtp.siteperformancetest.net https://flagcdn.com https://*.telegram.org https://mainnet.helius-rpc.com https://sentry-uit.line-apps.com https://1rpc.io https://*.lbktech.com https://*.lbkwork.com https://*.lbank.com wss://*.lbank.com https://*.rerrkvifj.com wss://*.rerrkvifj.com https://*.rrrhhr.com https://*.ccchch.com wss://*.zopim.com wss://*.hotjar.com https://*.zendesk.com https://*.veriff.me https://*.veriff.com https://*.checkout.com https://*.sardine.ai https://*.worldpay.com https://*.cardinalcommerce.com https://*.hotjar.com https://*.googleusercontent.com https://*.g.doubleclick.net https://ekr.zdassets.com https://legendtrading.zendesk.com https://zendesk-eu.my.sentry.io https://v2assets.zopim.io https://*.probity.io https://*.legendtrading.com https://static.trustdecision.com https://sg-fp.apitd.net https://sdk.moss-risk.com https://www.turingfraud.net https://api.moss-lid.com https://api.fpjs.io https://*.turingfraud.net wss://mainnet.helius-rpc.com; worker-src 'self' blob:; frame-src 'self' blob: https://secure.livechatinc.com https://tracking.nexxustrk.pro https://auctera.gotrackier.com https://www.youtube.com https://accounts.google.com https://appleid.cdn-apple.com https://cdn.jsdelivr.net https://*.google.com https://media.openxglobal.com https://api.sumsub.com https://social.rockettrack.pro https://playsala.com https://data.trckr.pro https://*.simplex.com https://*.simplexcc.com https://risk.checkout.com https://*.telegram.org https://*.twitter.com https://*.youtube.com https://*.lbank.com https://*.lbank.zone https://*.lbktech.com https://www.lbankwidgets.com https://*.veriff.me https://*.veriff.com https://*.checkout.com https://*.worldpay.com https://*.cardinalcommerce.com https://*.legendtrading.com https://*.qq.com; object-src 'none'; media-src 'self' blob: data:; base-uri 'self'; form-action 'self' https://checkout.simplexcc.com https://centinelapi.cardinalcommerce.com; report-uri /lbk-api/apm/h5/submit/csp-report; frame-ancestors 'self' https://*.telegram.com https://*.telegram.org; 2
default-src 'self'; script-src 'self' 'unsafe-inline' https://*.googletagmanager.com https://*.facebook.net https://*.twitter.com https://*.cookielaw.org https://*.cloudflare.com https://*.doubleclick.net https://*.googlesyndication.com https://*.google.com https://*.amazon-adsystem.com https://*.cloudfront.net https://secureaddisplay.com https://cleanmediaadserver.com https://*.iubenda.com https://*.hsforms.net https://*.hs-scripts.com https://*.tumblr.com https://vercel.live; style-src 'self' 'unsafe-inline' https://*.cookielaw.org https://*.iubenda.com; img-src 'self' data: https://*.ewtn.com https://*.cloudinary.com https://*.gravatar.com https://*.googletagmanager.com https://*.cookielaw.org https://*.iubenda.com; font-src 'self' data:; connect-src 'self' https://*.posthog.com https://*.hsforms.com https://*.hubspot.com https://*.google-analytics.com https://*.google.com https://*.googlesyndication.com https://*.doubleclick.net https://*.cloudfront.net https://*.auth0.com https://*.iubenda.com https://*.cookielaw.org https://*.onetrust.com https://secureaddisplay.com https://cleanmediaadserver.com https://*.amazon-adsystem.com https://*.ewtn.com https://*.cloudinary.com https://*.googletagmanager.com https://*.cloudflare.com https://vercel.live; media-src 'self' blob: https://*.ewtn.com https://*.googleapis.com; frame-src 'self' https://disqus.com https://*.disquscdn.com https://*.iubenda.com https://*.youtube.com https://*.facebook.com https://*.instagram.com https://*.tiktok.com https://*.hubspot.com https://*.auth0.com https://*.cloudflare.com https://vercel.live; worker-src blob:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://api.hsforms.com; report-uri /api/csp-report; report-to csp-endpoint 2
default-src 'self' *.roche.com *.roche.net *.gene.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.roche.com *.roche.net *.gene.com snap.licdn.com cdn.walkme.com apis.google.com tpc.googlesyndication.com api.html5media.info workdevapp.com cdn-js.net gdata.youtube.com twitter.com geolocation.onetrust.com api.flickr.com graph.facebook.com sharecdn.social9.com maps.googleapis.com use.typekit.com use.typekit.net munchkin.marketo.net img.en25.com w.likebtn.com cdn.mathjax.org sadmin.brightcove.com cdnjs.cloudflare.com releases.flowplayer.org script.crazyegg.com wi.likebtn.com pepperglobal.com analytics.twitter.com cdn.blueconic.net connect.facebook.net fullstory.com script.hotjar.com gnntch.blueconic.net rules.quantcount.com secure.quantserve.com static.hotjar.com www.youtube.com www.googletagmanager.com www.google-analytics.com google-analytics.com *.gstatic.com static.ads-twitter.com sjs.bizographics.com *.linkedin.com www.google.com w.soundcloud.com s.ytimg.com *.cloudflareaccess.com *.salesforceliveagent.com https://*.roche.com:8080 https://cdnjs.org https://service.force.com/* cdn.cookielaw.org static.cloudflareinsights.com googleads.g.doubleclick.net 7232514.collect.igodigital.com; style-src * 'self' 'unsafe-inline'; img-src * 'self' data:; font-src * 'self' data:; connect-src * 'self'; media-src * 'self' data:; object-src 'self'; child-src 'self' *.roche.com *.roche.net *.gene.com *.facebook.net qpcr.probefinder.com *.force.com *.hotjar.com www.facebook.com www.google.com www.googletagmanager.com www.youtube.com; frame-src 'self' *.roche.com *.roche.net *.gene.com www.youtube.com sites.google.com *.googleapis.com *.cloudfront.net *.facebook.net *.arcot.com live.sagepay.com player.vimeo.com tpc.googlesyndication.com players.brightcove.net qpcr.probefinder.com *.eloqua.com *.hotjar.com *.soundcloud.com *.facebook.com *.google.com *.googletagmanager.com *.youtube-nocookie.com *.youtube.com *.mendeley.com *.force.com https://cdn.walkme.com/*; worker-src 'self' *.roche.com *.roche.net *.gene.com; frame-ancestors 'self' *.roche.com *.roche.net *.gene.com datastudio.google.com sites.google.com content.bioclinicien.fr connect.facebook.net www.facebook.com s1691.t.eloqua.com *.cloudflareworkers.com; form-action 'self' *.roche.com *.roche.net *.gene.com content.bioclinicien.fr connect.facebook.net www.facebook.com s1691.t.eloqua.com; base-uri 'self' *.roche.com *.roche.net *.gene.com *.secure.roche.com 2
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://cse.google.com https://*.iubenda.com https://cdn.flexformz.com https://vercel.live https://static.cloudflareinsights.com https://*.cookielaw.org; style-src 'self' 'unsafe-inline' https://cdn.flexformz.com https://*.cookielaw.org; img-src 'self' data: https://cdn.ewtn.com https://images.ewtn.com https://origin.ewtn.com https://i.watch.ewtn.com https://res.cloudinary.com https://www.ewtn.com https://www.googletagmanager.com https://encrypted-tbn0.gstatic.com https://*.cookielaw.org; font-src 'self' data:; connect-src 'self' https://i.watch.ewtn.com https://u.watch.ewtn.com https://i.listen.ewtn.com https://*.wowza.com https://*.streamguys1.com https://www.googletagmanager.com https://cse.google.com https://www.google.com https://*.youborafds01.com https://*.youboranqs01.com https://*.iubenda.com https://cloudflareinsights.com https://vercel.live https://*.cookielaw.org https://*.onetrust.com; media-src 'self' blob: https://i.watch.ewtn.com https://u.watch.ewtn.com https://i.listen.ewtn.com https://*.wowza.com https://*.streamguys1.com; worker-src blob:; frame-src 'self' https://*.iubenda.com https://cse.google.com https://vercel.live; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; report-uri /api/csp-report 2
frame-ancestors 'self'; report-uri https://www.news24.com.au/csp-reports 2
default-src 'none'; connect-src 'self' *.siteminder.com 123compareme.com *.123compareme.com *.ada-tray.com *.bookmebob.com *.flip.to *.gtsgapps.com *.hijiffy.com messenger-services.com *.sojern.com *.thehotelsnetwork.com *.triptease.io *.triptease.net *.userguest.com *.theguestbook.com connect.facebook.net *.facebook.com *.edge.sdk.awswaf.com *.paypal.com recaptcha.net *.launchdarkly.com *.newrelic.com bam.nr-data.net *.hotjar.com *.hotjar.io *.googletagmanager.com *.gstatic.com *.google-analytics.com *.google.com *.googlesyndication.com *.googleadservices.com *.g.doubleclick.net *.doubleclick.net *.imgix.net; script-src 'self' 123compareme.com *.123compareme.com *.ada-tray.com *.adatray.com *.bookmebob.com *.flip.to *.gtsgapps.com *.hijiffy.com *.sojern.com *.thehotelsnetwork.com *.triptease.io *.triptease.net *.userguest.com theguestbook.com *.theguestbook.com connect.facebook.net *.edge.sdk.awswaf.com *.paypal.com recaptcha.net *.launchdarkly.com *.newrelic.com bam.nr-data.net *.hotjar.com *.googletagmanager.com *.gstatic.com *.gstatic.cn *.google-analytics.com *.google.com *.googlesyndication.com *.googleadservices.com *.g.doubleclick.net *.doubleclick.net; frame-src 'self' recaptcha.net www.googletagmanager.com *.paypal.com *.triptease.io; img-src 'self' *.imgix.net *.siteminder.com *.paypalobjects.com *.googletagmanager.com *.openstreetmap.org *.adatray.com *.thehotelsnetwork.com data:; style-src 'self' 'unsafe-inline' *.adatray.com *.thehotelsnetwork.com *.userguest.com fonts.googleapis.com; font-src 'self' data: *.adatray.com *.thehotelsnetwork.com *.userguest.com fonts.gstatic.com; report-to cspendpoint; report-uri https://csp-report.siteminder.com/api/quokka/booking-engine/report; frame-ancestors 'self' 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https://fonts.gstatic.com https://headless-storefront-assets.wildtangent.com; media-src 'self' data: https:; connect-src 'self' https:; frame-src https:; frame-ancestors 'self'; worker-src 'self' blob:; form-action 'self'; base-uri 'self'; report-uri https://reporting-api.gamigo.com/report/wildtangent.com; report-to csp-endpoint 2
img-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline'; 2
default-src 'self' bard.edu www.bard.edu inside.bard.edu tools.bard.edu maps.bard.edu opensocietyuniversitynetwork.org ghea21.org; 	form-action 'self' bard.edu www.bard.edu tools.bard.edu connect.bard.edu opensocietyuniversitynetwork.org ghea21.org; 	base-uri 'self' bard.edu www.bard.edu tools.bard.edu opensocietyuniversitynetwork.org ghea21.org; 	font-src 'self' data: www.bard.edu opensocietyuniversitynetwork.org ghea21.org fonts.gstatic.com *.fontawesome.com cdnjs.cloudflare.com; 	style-src 'self' 'unsafe-inline' www.bard.edu tools.bard.edu opensocietyuniversitynetwork.org ghea21.org fonts.googleapis.com *.fontawesome.com tagmanager.google.com www.google.com *.technolutions.net static.ctctcdn.com cdnjs.cloudflare.com *.curator.io; 	script-src 'self' 'unsafe-inline' 'report-sample' www.bard.edu tools.bard.edu connect.bard.edu explore.bard.edu opensocietyuniversitynetwork.org ghea21.org code.jquery.com player.vimeo.com *.fontawesome.com www.google-analytics.com ssl.google-analytics.com *.googletagmanager.com tagmanager.google.com www.google.com cse.google.com googleads.g.doubleclick.net connect.facebook.net consent.cookiebot.com cdn.unibuddy.co www.youvisit.com *.technolutions.net analytics.tiktok.com *.curator.io; 	img-src 'self' data: bard.edu www.bard.edu inside.bard.edu tools.bard.edu opensocietyuniversitynetwork.org ghea21.org www.facebook.com trck.youvisit.com ssl.gstatic.com www.gstatic.com www.google.com *.google-analytics.com *.googletagmanager.com curator-assets.b-cdn.net; 	connect-src 'self' www.bard.edu tools.bard.edu opensocietyuniversitynetwork.org ghea21.org *.google-analytics.com *.analytics.google.com analytics.google.com www.google.com *.googletagmanager.com *.doubleclick.net *.technolutions.net analytics.tiktok.com *.curator.io; 	media-src 'self' www.bard.edu tools.bard.edu opensocietyuniversitynetwork.org ghea21.org player.vimeo.com *.vimeocdn.com www.buzzsprout.com curator-assets.b-cdn.net; 	object-src 'self' www.bard.edu tools.bard.edu maps.bard.edu opensocietyuniversitynetwork.org ghea21.org; 	child-src 'self' www.bard.edu tools.bard.edu maps.bard.edu opensocietyuniversitynetwork.org ghea21.org www.youtube.com www.youtube-nocookie.com player.vimeo.com unibuddy.co popcard.unibuddy.co cdn.youvisit.com e.issuu.com; 	frame-src 'self' www.bard.edu tools.bard.edu maps.bard.edu opensocietyuniversitynetwork.org ghea21.org www.youtube.com www.youtube-nocookie.com player.vimeo.com *.googletagmanager.com *.doubleclick.net unibuddy.co popcard.unibuddy.co cdn.youvisit.com e.issuu.com; 	frame-ancestors 'self' www.bard.edu tools.bard.edu opensocietyuniversitynetwork.org ghea21.org; 2
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: js.datadome.co ct.captcha-delivery.com *.onetrust.com *.googletagmanager.com *.cookielaw.org *.qualtrics.com *.salesforce.com *.en25.com *.segment.com *.amplitude.com *.salesforceliveagent.com *.sandbox.my.site.com reuters.my.site.com dd.reutersconnect.com; script-src-elem 'self' 'unsafe-inline' blob: www.datadoghq-browser-agent.com *.thomsonreuters.com reuters.my.site.com *.sandbox.my.site.com *.cookielaw.org *.amplitude.com *.segment.com *.googletagmanager.com js.datadome.co js.zuora.com ssl.p.jwpcdn.com ct.captcha-delivery.com dd.reutersconnect.com *.captcha.awswaf.com *.token.awswaf.com; connect-src 'self' api-js.datadome.co *.onetrust.com *.cookielaw.org wss://*.rcp-api.reutersconnect.com *.reuters.com *.reutersconnect.com *.qualtrics.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com www.google.com *.segment.io *.amplitude.com *.thomsonreuters.com *.segment.com browser-intake-datadoghq.com *.sandbox.my.salesforce-scrt.com reuters.my.salesforce-scrt.com cdn.jwplayer.com ssl.p.jwpcdn.com drmtd540xpi1f.cloudfront.net d3cgfqae8o6oiw.cloudfront.net d1qvkrpvk32u24.cloudfront.net d2tpo79pi2fb76.cloudfront.net d1uprxlryo4sfl.cloudfront.net d1s0weg9xjt2n5.cloudfront.net *.token.awswaf.com *.captcha.awswaf.com *.flagship.io; frame-src 'self' geo.captcha-delivery.com *.onetrust.com *.salesforce.com *.sandbox.my.site.com reuters.my.site.com *.thomsonreuters.com d1hbvbum0y1xmw.cloudfront.net *.reuters.com player.vimeo.com; worker-src 'self' blob: https://*.reutersconnect.com; report-uri https://reuters.report-uri.com/r/t/csp/reportOnly; report-to report-uri 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.hsforms.net https://js.hs-scripts.com https://js.hs-analytics.net https://js-na2.hs-scripts.com https://js-na2.hubspot.com https://js-na2.hscollectedforms.net https://js-na2.hs-banner.com https://js-na2.hs-analytics.net https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://www.google.com https://www.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cdn-cookieyes.com https://*.cookieyes.com https://j.6sc.co https://snap.licdn.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net https://fonts.googleapis.com https://cdn-cookieyes.com; img-src 'self' data: https: http:; font-src 'self' data: https://use.typekit.net https://p.typekit.net https://fonts.gstatic.com https://cdn.jsdelivr.net; connect-src 'self' https://forms.hsforms.com https://forms-na2.hsforms.com https://api.hsforms.com https://cta-na2.hubspot.com https://forms-na2.hscollectedforms.net https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://cdn-cookieyes.com https://*.cookieyes.com https://directory.cookieyes.com https://c.6sc.co https://ipv6.6sc.co https://epsilon.6sense.com https://secure.adnxs.com; frame-src 'self' https://www.youtube.com https://www.google.com https://www.googletagmanager.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests 2
default-src 'self' https://framerusercontent.com https://*.framer.com https://*.framer.app; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://framerusercontent.com https://*.framer.com https://*.framer.app https://events.framer.com https://app.framerstatic.com https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://framerusercontent.com https://*.framer.com https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://framerusercontent.com https://fonts.gstatic.com; connect-src 'self' https://*.framer.com https://events.framer.com https://framerusercontent.com https://www.google-analytics.com https://*.analytics.google.com; frame-src 'self' https://*.framer.com https://*.framer.website; media-src 'self' https://framerusercontent.com data: blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://*.framer.com; frame-ancestors 'self'; upgrade-insecure-requests 2
default-src 'self'; script-src 'self' https://www.googletagmanager.com https://geo.cookie-script.com https://cdn.cookie-script.com https://js.hsforms.net https://js.hs-banner.com https://js.hs-analytics.net https://www.google.com https://www.gstatic.com https://connect.facebook.net https://snap.licdn.com https://www.clarity.ms 'sha256-/+T9emIx7VOVdJQ+yECZuK/uv7LkRlYg/aKCPFHZCHE=' 'sha256-7VR6EL+WRF17B0V6+7JfbLS4qK7qyPuZ6F8AUBUEbds=' 'sha256-7um8+d3wQHLF8d7N5U3vBfMtkUsQSqQUq/k+dGwopyU=' 'sha256-C1pdywXIoKnRHe5hgE3qcozgV4Arxf/L/xUNEuC/7eM=' 'sha256-CpwgwXrhag26UMaqMia+NENIIT6PLLCeJ7ejLMTj6ls=' 'sha256-Gde9LjhjJCwsGHFj11ZM8UraH3/61WF2meSfx7CuRnw=' 'sha256-GlSDYU7aE42mXAh3Zua84pbC+imj0WnPOEK8rq51p0A=' 'sha256-P8ahPqt4FCUsj091o2fz2HlMMy8sQLnZNu3rBoHFo+c=' 'sha256-QVZHxbQWaOzbqrchFiZ75Gn4pwo2Wccbe+pxJin5cLo=' 'sha256-Qsr+wez0KPwgPLsl1Vh9bPvbeEyvSvqIQtbeLzlpq9s=' 'sha256-Ru2Q/XnyVrSCLyvGAMC+8cL147Rd22I5mN/wjaWaEQI=' 'sha256-UkNHCjLC8Cle59qVRle5RLK6+ofYqxMlXLY1OiIG7xw=' 'sha256-W3pGAdJ1BSt171tQ3o7R04STi6OGuxkMPp14IkP6u8A=' 'sha256-X420H/cjxAmDfz4n8t74VUMnejRPIDMDJa6fts3AdJE=' 'sha256-Y2BFIZDuTTmzcZ8tW/vHxUpvSB84BVBr26RU9IOmZ2M=' 'sha256-aZH14SElLgnxubcenEpmLwCX8Wz1KrhE/AdJQGQhyKc=' 'sha256-dD3se0UWYNR4Hoz5q+Y0fLksKDWRlFDwv1L9EmkiHCw=' 'sha256-fy5spwzUW20XPm2VwRvCSy8e+2Opb1xlxg6ckhe+SzA=' 'sha256-jdK/ydNYgtcO/YsiSclQ06Js5yQl4g6IxVqpMZSgvUM=' 'sha256-lbzUbgTiP4ipk134/KGX6+Vlr6A4b5mLQp35A+Ae33s=' 'sha256-mzIcaAb/pEFf6sNdKAIWkCBWaJl1P2w4V/KpSJvJEfU=' 'sha256-n524UYvbZnJrLG68j7pFcnL9msOTT4RRVGVAMlQAmUc=' 'sha256-s1v51vC7Og4rozfMrY8Gyj4j4pYUYrUu+J9c+1ThQLM='; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; img-src 'self' https://www.incode.com https://www.googletagmanager.com https://www.google.com https://px.ads.linkedin.com https://www.facebook.com data:; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https://api.hsforms.com https://forms.hsforms.com https://geo.cookie-script.com https://cdn.cookie-script.com https://consent.cookie-script.com https://report.cookie-script.com https://5el0ox2vzh.execute-api.us-east-1.amazonaws.com https://www.google-analytics.com https://stats.g.doubleclick.net; frame-src 'self' https://www.googletagmanager.com https://www.google.com https://player.vimeo.com https://cdn.embedly.com https://www.youtube-nocookie.com https://forms.hsforms.com; media-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri https://ahxf6rkzv1.execute-api.us-east-1.amazonaws.com; report-to csp 2
default-src 'self' 'unsafe-inline' data: *.marianatek.com *.cookielaw.org *.chilipiper.com *.googletagmanager.com *.google.com *.gstatic.com *.cloudflare.com *.youtube.com *.youtube-nocookie.com *.vimeo.com *.licdn.com *.facebook.net *.clarity.ms *.google-analytics.com *.hs-scripts.com *.doubleclick.net unpkg.com *.wistia.net;upgrade-insecure-requests; 2
default-src https: 'unsafe-inline' 'unsafe-eval' ; img-src https://* data: ; frame-src https://* about: javascript: 2
script-src https: blob: 'unsafe-inline' 'unsafe-eval' 'self';base-uri 'self';report-uri https://reporting-api.gannettinnovation.com 2
object-src 'none'; connect-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.cpggpc.ca https://www.google-analytics.com https://siteintercept.qualtrics.com https://www.facebook.com https://sslstats.canadapost.ca https://*.wistia.com https://dpm.demdex.net https://csi.gstatic.com https://adservice.google.com https://*.googlesyndication.com https://*.g.doubleclick.net https://maps.googleapis.com https://vmss.boldchat.com https://www.linkedin.com https://canadapost.tt.omtrdc.net https://services.postcodeanywhere.co.uk https://embedwistia-a.akamaihd.net https://cdn.cookielaw.org https://geolocation.onetrust.com https://px.ads.linkedin.com https://google.com https://www.google.com; font-src 'self' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://fonts.gstatic.com https://*.arcgis.com; form-action 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca  https://*.epost.ca https://www.facebook.com https://google.com; frame-ancestors 'self' https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.canadapost.ca; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.cpggpc.ca https://www.adobetag.com https://assets.adobedtm.com https://siteintercept.qualtrics.com  https://zn0xleir6swszany9-canadapostdigital.siteintercept.qualtrics.com https://connect.facebook.net https://snap.licdn.com https://z.moatads.com https://static.ads-twitter.com https://www.googletagmanager.com https://www.google.com https://www.googletagservices.com https://*.google-analytics.com https://*.googleadservices.com https://www.gstatic.com https://*.googlesyndication.com https://adservice.google.com https://adservice.google.ca https://maps.googleapis.com https://cdn.ampproject.org https://*.doubleclick.net https://*.twitter.com https://cdn.syndication.twimg.com https://dpm.demdex.net https://*.wistia.com https://*.frontlinesvc.com https://*.arcgis.com https://www.linkedin.com https://vmss.boldchat.com https://sb.scorecardresearch.com https://www.rnengage.com https://sjs.bizographics.com https://www.instagram.com https://secure.adnxs.com https://app.five9.com https://cdn.cookielaw.org; style-src 'self' 'unsafe-inline' https://*.frontlinesvc.com https://fonts.googleapis.com https://translate.googleapis.com https://*.twitter.com https://*.canadapost.ca https://*.canadapost-postescanada.ca https://*.postescanada-canadapost.ca https://*.epost.ca https://*.arcgis.com https://*.arcgisonline.com https://app.five9.com; 2
base-uri 'self'; default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://maps.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://vault.pactsafe.io https://pactsafe.io https://*.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://dx.steelhousemedia.com https://px.steelhousemedia.com https://bat.bing.com https://*.btttag.com https://*.optimizely.com https://cdn.quantummetric.com https://assets.sitescdn.net https://connect.facebook.net https://cdn.unitmap.com https://cdn.jsdelivr.net https://js.paygateway.com https://twilio.dev.myaccount.extraspace.com https://twilio.myaccount.extraspace.com https://client.px-cloud.net ; connect-src 'self' https://browser-intake-datadoghq.com https://logs.browser-intake-datadoghq.com https://www.google.com https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://maps.googleapis.com https://pagead2.googlesyndication.com https://siteintercept.qualtrics.com https://api.usercentrics.eu https://aggregator.service.usercentrics.eu https://consent-api.service.consent.usercentrics.eu https://graphql.usercentrics.eu https://app.usercentrics.eu https://fbtracking.extraspace.com https://d.btttag.com https://bat.bing.com https://pactsafe.io https://o494745.ingest.sentry.io https://cdn.growthbook.io https://*.optimizely.com wss://*.optimizely.com https://webchat-3914-prod.twil.io https://ingest.quantummetric.com https://rl.quantummetric.com https://collector-pxnyx0n2sc.px-cloud.net https://collector-pxnyx0n2sc.px-client.net https://tzm.px-cloud.net https://google.com/pay https://pay.google.com https://api.paygateway.com ; img-src 'self' data: https://maps.googleapis.com https://maps.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://images.ctfassets.net https://downloads.ctfassets.net https://www.facebook.com https://iad1.qualtrics.com https://siteintercept.qualtrics.com https://app.usercentrics.eu https://bat.bing.com https://i.ytimg.com https://collector-pxnyx0n2sc.px-client.net https://*.optimizely.com ; font-src 'self' data: https://fonts.gstatic.com https://use.fontawesome.com https://maxcdn.bootstrapcdn.com https://*.optimizely.com ; form-action 'self' https://www.facebook.com https://extraspacecx.co1.qualtrics.com https://siteintercept.qualtrics.com ; frame-ancestors 'none'; frame-src 'self' https://app.pandadoc.com https://www.facebook.com https://www.google.com https://pay.google.com https://www.youtube-nocookie.com https://*.cdn.optimizely.com https://extraspacecx.co1.qualtrics.com https://videos.virtualapt.com https://tzm.px-cloud.net https://js.paygateway.com ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://maxcdn.bootstrapcdn.com https://use.fontawesome.com https://*.optimizely.com ; object-src 'none'; 2
frame-ancestors 'self' https://*.jobcloud.ch https://*.jobs.ch https://*.jobup.ch; base-uri 'self'; connect-src * data: 'self'; default-src 'self' https:; font-src 'self' https: data:; form-action 'self'; frame-src 'self' https:; img-src * data: blob: 'self'; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' https: * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; require-trusted-types-for 'script'; worker-src 'self' 2
worker-src https: 'unsafe-inline'; report-uri https://api.mp.pl/csp-violation/ 2
default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com https://use.fontawesome.com https://cdn.nlpg.com https://cdn.masterbooks.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com *.masterbooks.com *.nlpg.com self https: 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com *.youtu.be *.certcapture.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.doubleclick.net *.masterbooks.com *.nlpg.com www.facebook.com platform.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.youtu.be *.img.youtube.com *.certcapture.com *.trackedlink.net *.ddlnk.net www.facebook.com https://online.flippingbook.com https://*.cloudfront.net https://*.masterbooks.com https://*.nlpg.com *.google.com.ar *.google.com *.googletagmanager.com https://cdn-cookieyes.com pinterest.com assets.pinterest.com syndication.twitter.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.xtento.com cdn.xtento.com flagpedia.net ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.certcapture.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com https://cdn.noibu.com https://cdn.jsdelivr.net https://connect.facebook.net https://static.zdassets.com https://online.flippingbook.com https://*.cloudfront.net https://cdn.nlpg.com https://cdn.masterbooks.com *.googletagmanager.com app.viralsweep.com https://cdn-cookieyes.com connect.facebook.net twitter.com platform.twitter.com static.addtoany.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.xtento.com cdn.xtento.com *.gstatic.com maps.googleapis.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com webchat.dotdigital.com webchat.staging.dotdigital.com https://fonts.googleapis.com https://use.fontawesome.com https://cdn.nlpg.com https://cdn.masterbooks.com *.googletagmanager.com *.googleapis.com assets.braintreegateway.com maxcdn.bootstrapcdn.com *.gstatic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.youtube.com *.youtu.be *.img.youtube.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.certcapture.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com https://ekr.zdassets.com https://fbo-b.flippingbook.com https://nlpg.zendesk.com wss://input.noibu.com *.noibu.com *.doubleclick.net https://cdn.nlpg.com https://cdn.masterbooks.com https://www.google.com.ar https://www.facebook.com *.cookieyes.com https://cdn-cookieyes.com stats.addtoany.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com www.gstatic.com maps.googleapis.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://53272415-ac62-4480-bded-0011a34ac7cd.sansec.watch/; report-to report-endpoint; 2
default-src 'self'; script-src 'self' https://bot.hostaan.fi https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.fi https://connect.facebook.net https://support.hostaan.com https://widget.trustmary.com https://embed.trustmary.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://fonts.googleapis.com https://www.gstatic.com https://cdnjs.cloudflare.com https://support.hostaan.com 'unsafe-inline' 'unsafe-eval'; font-src 'self' https://fonts.gstatic.com https://support.hostaan.com data:; connect-src 'self' https://bot.hostaan.fi https://region1.google-analytics.com https://embed.trustmary.io https://stats.g.doubleclick.net https://www.google-analytics.com https://*.facebook.com https://www.google.com https://www.googletagmanager.com https://region1.analytics.google.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.fi https://support.hostaan.com; media-src 'self' https://support.hostaan.com; img-src 'self' https://bot.hostaan.fi blob: data: https://www.googletagmanager.com https://fonts.gstatic.com https://translate.google.com https://widget.trustmary.com/ https://d2nce6johdc51d.cloudfront.net https://lh3.googleusercontent.com https://www.google.se https://www.google.fi https://www.google.com https://stats.g.doubleclick.net https://www.google.fi https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.facebook.com https://support.hostaan.com; frame-src 'self' https://www.youtube.com https://www.facebook.com https://www.googletagmanager.com https://www.google.com https://support.hostaan.com https://td.doubleclick.net; worker-src 'self' blob:; object-src 'none'; frame-ancestors 'self' https://www.hostaan.fi; report-uri https://n8n.ppweb.fi/webhook/da8630cf-3a65-402b-b95f-6fa58e667ed6; 2
default-src 'self' https://assets.emergent.sh; script-src 'self' https://app.emergent.sh https://dev.emergentagent.com 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://us.i.posthog.com https://us-assets.i.posthog.com https://ap.emergent.sh https://api.emergent.sh https://cds.taboola.com https://cdn.taboola.com https://trc.taboola.com https://r.wdfl.co https://js.partnerstack.com https://dev.visualwebsiteoptimizer.com https://*.emergentagent.com https://accounts.google.com https://cdn.paddle.com https://sandbox-cdn.paddle.com https://static-cdn.trackier.com https://webtrafficsource.com https://track.omguk.com https://addrevenue.io https://ad-srvl.com https://cdn.similartargets.com https://assets.tvscipixel.com https://trafficcdn.com https://js.stripe.com https://analytics.tiktok.com https://googleads.g.doubleclick.net https://public.profitwell.com https://snap.licdn.com https://challenges.cloudflare.com https://cdn.jsdelivr.net https://checkout.razorpay.com https://cdn.razorpay.com blob: https://fpnpmcdn.net https://cdn.goentri.com https://framerusercontent.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://accounts.google.com https://cdn.paddle.com https://sandbox-cdn.paddle.com https://cdn.jsdelivr.net https://dev.visualwebsiteoptimizer.com https://cdn.visualwebsiteoptimizer.com; font-src 'self' https://fonts.gstatic.com https://assets.emergent.sh https://cdn.jsdelivr.net data: https://framerusercontent.com https://use.typekit.net; img-src 'self' data: blob: https:; worker-src 'self' blob:; connect-src 'self' https://*.supabase.co wss://*.supabase.co https://us.i.posthog.com https://us-assets.i.posthog.com https://ap.emergent.sh https://api.emergent.sh https://*.emergent.sh https://*.emergentagent.com https://*.emergent.cloud https://*.emergent.host https://*.run.app https://bam.nr-data.net https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net https://www.facebook.com https://cds.taboola.com https://trc.taboola.com https://trc-events.taboola.com https://pips.taboola.com https://psb.taboola.com https://dev.visualwebsiteoptimizer.com https://r.wdfl.co https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://mon.tiktokv.com https://px.ads.linkedin.com https://www.google.com https://www.google.co.in https://googleads.g.doubleclick.net https://snap.licdn.com https://public.profitwell.com https://www.react-grab.com wss://*.pusher.com https://*.pusher.com https://www.googleadservices.com https://lumberjack.razorpay.com https://*.conversionsapigateway.com https://api.getrewardful.com https://grsm.io https://partnerlinks.io https://api.fpjs.io https://api.goentri.com https://emergent-customers-assets.s3.amazonaws.com https://emergent-website-migrate.s3.us-west-2.amazonaws.com https://avatars.githubusercontent.com https://*.cloudfront.net https://framerusercontent.com blob:; frame-src https://www.youtube.com https://accounts.google.com https://cdn.paddle.com https://buy.paddle.com https://js.stripe.com https://checkout.stripe.com https://www.facebook.com https://www.googletagmanager.com https://td.doubleclick.net https://challenges.cloudflare.com https://*.emergentagent.com https://*.emergent.sh https://*.emergent.cloud https://*.emergent.host https://dev.visualwebsiteoptimizer.com https://api.razorpay.com https://app.goentri.com https://domains.entri.com blob: data:; media-src 'self' https://assets.emergent.sh https://*.youtube.com data:; object-src 'none'; base-uri 'self'; form-action 'self' https://*.supabase.co https://accounts.google.com https://github.com https://www.facebook.com; frame-ancestors 'self' *.emergent.sh getwingman.sh www.getwingman.sh dev.getwingman.sh getwingman.com www.getwingman.com dev.getwingman.com getwingman.test *.emergentagent.com *.emergentlabs.com *.emergentcf.cloud *.emergentcf.dev *.emergent.host *.preview.emergentagent.com *.internal.preview.emergentagent.com *.stage-preview.emergentagent.com *.internal.stage-preview.emergentagent.com *.stage-preview3.emergentagent.com *.stage-envcore-preview.emergentagent.com *.dev.apps.emergentagent.com *.staging.apps.emergentagent.com *.preview.static.emergentagent.com *.emergent-client-1.uc.r.appspot.com *.emergent-default.uc.r.appspot.com supersecret-akd.pages.dev emergent-product-dev.pages.dev *.emergent-product-dev.pages.dev emergent-product-prod.pages.dev *.emergent-product-prod.pages.dev landing-page-gatsby.pages.dev *.landing-page-gatsby.pages.dev landing-page-gatsby-prod.pages.dev *.landing-page-gatsby-prod.pages.dev emergent-router-pages.pages.dev *.emergent-router-pages.pages.dev emergent-router-pages-prod.pages.dev *.emergent-router-pages-prod.pages.dev 2
default-src 'none'; base-uri 'self'; frame-ancestors 'self'; object-src 'none'; form-action 'self' https://accounts-*.cyberriskalliance.com https://188-UNZ-660.mktorest.com; script-src 'self' https://lytics.cyberriskalliance.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://www.clarity.ms https://s.dpmsrv.com https://cdn.feathr.co https://*.g.doubleclick.net https://www.googletagservices.com https://www.googleadservices.com https://munchkin.marketo.net https://pages.cyberriskalliance.com https://connect.facebook.net https://snap.licdn.com https://player.vimeo.com https://platform.twitter.com https://cra.hum.works https://*.ml314.com https://ml314.com https://ib.adnxs.com https://js.zi-scripts.com https://a.usbrowserspeed.com https://renderer.visuel.ly; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://files.cyberriskalliance.com https://image-optimizer*.cyberriskalliance.com https://www.cyberriskalliance.com https://securepubads.g.doubleclick.net; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://api*.cyberriskalliance.com https://cms*.cyberriskalliance.com https://image-optimizer*.cyberriskalliance.com https://userapi*.cyberriskalliance.com https://*.hum.works https://7acfab725e3b6315db795ca16eb9966e.clients.hosted-elasticpress.io https://accounts-*.cyberriskalliance.com https://lytics.cyberriskalliance.com https://connect.facebook.net https://www.facebook.com https://snap.licdn.com https://www.google-analytics.com https://cdn.feathr.co https://s.dpmsrv.com https://munchkin.marketo.net https://pages.cyberriskalliance.com https://securepubads.g.doubleclick.net; frame-src 'self' https://www.youtube.com https://player.vimeo.com https://www.google.com https://html5-player.libsyn.com https://securepubads.g.doubleclick.net https://*.googlesyndication.com; media-src 'self' https://html5-player.libsyn.com; manifest-src 'self'; worker-src 'self'; report-uri /_csp; report-to default; 2
worker-src 'self' blob:;     object-src 'self';     script-src 'self' 'unsafe-inline' 'unsafe-eval'         *.alida.com         *.bing.com         *.cloudfirst.digital         *.cnd-motionmedia.de         *.dkv.com         *.doubleclick.net         *.ergo-reiseversicherung.de         *.ergo.com         *.ergo.de         *.ergocarbon.com         *.ergodirekt.de         *.facebook.net         *.fww.de         *.google.com         *.googlesyndication.com         *.googletagmanager.com         *.gstatic.com         *.intelliad.de         *.licdn.com         *.onetrust.com         *.outbrain.com         *.podigee-cdn.net         *.realperson.de         *.spoteffects.net         *.taboola.com         *.youtube.com         assets.adobedtm.com         cdn.cookielaw.org         cdn.mouseflow.com         cdn.scarabresearch.com         cdn.trackjs.com         cdnjs.cloudflare.com         edge.eu1.fullstory.com         ergo-live.s3.eu-central-1.amazonaws.com         index.ergomultitool.de         js-cdn.dynatrace.com         maps.googleapis.com         platform.twitter.com         rum.hlx.page         static.xingcdn.com         wave.outbrain.com         www.facebook.com         www.googleadservices.com;     report-uri https://csp-reporting.ergo.com/csp-reports?tenant=erde;     report-to csp-endpoint; 2
default-src * 'unsafe-inline' 'unsafe-eval' blob:; frame-src *; img-src * data:; script-src * 'report-sample' 'unsafe-inline' 'unsafe-eval' blob:; style-src * 'report-sample' 'unsafe-inline'; base-uri *; form-action *; frame-ancestors 'self' 2
script-src 'self' https://challenges.cloudflare.com https://hcaptcha.com https://static.cloudflareinsights.com https://*.hcaptcha.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://www.google-analytics.com/ https://www.googletagmanager.com/; base-uri 'self'; object-src 'self'; report-uri /cdn-cgi/script_monitor/report 2
default-src *.quikr.com *.kuikr.com ;script-src *.quikr.com *.kuikr.com *.google-analytics.com *.facebook.net *.facebook.com 'unsafe-inline' cdnjs.cloudflare.com *.google.com securepubads.g.doubleclick.net csi.gstatic.com *.googletagservices.com adservice.google.co.in cdn.ampproject.org adservice.google.com *.googletagmanager.com www.gstatic.com www.googleadservices.com bam.nr-data.net googleads.g.doubleclick.net ;style-src *.quikr.com *.kuikr.com 'unsafe-inline' ;img-src * ;frame-src https://*.doubleclick.net https://www.google.com https://www.googletagmanager.com https://*.adtrafficquality.google https://*.safeframe.googlesyndication.com https://*.facebook.com https://www.googleadservices.com ;connect-src *.quikr.com *.kuikr.com www.google-analytics.com securepubads.g.doubleclick.net csi.gstatic.com wss://chat.kuikr.com:5291 ;script-src-elem *.quikr.com *.kuikr.com *.google-analytics.com *.facebook.net *.facebook.com 'unsafe-inline' cdnjs.cloudflare.com *.google.com securepubads.g.doubleclick.net csi.gstatic.com *.googletagservices.com adservice.google.co.in cdn.ampproject.org *.google.com *.googletagmanager.com http://*.kuikr.com www.gstatic.com www.googleadservices.com bam.nr-data.net googleads.g.doubleclick.net ; 2
default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; object-src 'none'; frame-ancestors 'self' 2
default-src 'self';script-src 'self';connect-src 'self' 'https://api.partnerstack.com';object-src 'none';report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub55c44fb9851c51c381980b74811b856d&dd-evp-origin=content-security-policy&ddsource=csp-report;report-to partnerstack-csp-endpoint 2
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com https://accounts.google.com https://apis.google.com https://sdk.mercadopago.com https://*.mlstatic.com https://connect.facebook.net https://sdkweb-lib.idwall.co https://*.idwall.co https://chat.movidesk.com https://www.paypalobjects.com https://*.paypal.com https://www.clarity.ms https://*.clarity.ms https://pay.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://accounts.google.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; media-src 'self' blob: data: https:; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://accounts.google.com https://www.googleapis.com https://play.google.com https://pay.google.com https://google.com/pay https://api.mercadopago.com https://*.mlstatic.com https://connect.facebook.net https://www.facebook.com https://graph.facebook.com https://*.clarity.ms https://c.bing.com https://api.rollbar.com https://*.idwall.co https://*.idwall.io https://chat.movidesk.com wss://*.movidesk.com https://vakinha-api2.vakinha.com.br https://static.vakinha.com.br https://vakinha-site.s3-sa-east-1.amazonaws.com https://us.i.posthog.com; frame-src https://pay.google.com https://accounts.google.com https://www.google.com https://recaptcha.google.com https://*.mercadopago.com https://*.mlstatic.com https://www.facebook.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://*.idwall.co https://*.paypal.com https://caixinhadedoacao.vakinha.com.br; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://*.mercadopago.com https://*.paypal.com; frame-ancestors 'none'; upgrade-insecure-requests 2
script-src 'self' https://ajax.googleapis.com https://f1000research.s3-eu-west-1.amazonaws.com https://cdnjs.cloudflare.com https://cdnjs.cloudflare.com https://js.hs-scripts.com 2
default-src https:;frame-ancestors about: 'self';frame-src https://optimize.google.com *;style-src https://optimize.google.com https://fonts.googleapis.com https: data: 'unsafe-inline' *;script-src https://www.googleanalytics.com https://www.google-analytics.com https://optimize.google.com * 'unsafe-inline' 'unsafe-eval';img-src https://www.google-analytics.com https://www.googletagmanager.com https://optimize.google.com https: data: *;font-src https://fonts.gstatic.com data: *;object-src 'none';connect-src * ws: wss:; report-uri https://res.destinia.com/web/csp-violation-report-endpoint; report-to default; 2
default-src 'self'; script-src 'self' *.argenta.be argenta-aam.be *.argenta-aam.be *.googleapis.com *.adobedtm.com *.googletagmanager.com *.doubleclick.net *.adsrvr.org *.teads.tv *.facebook.net *.hotjar.com *.tiqcdn.com *.pingdom.net *.google.ie 'unsafe-inline' 'unsafe-eval' wasm-eval; style-src 'self' 'unsafe-inline'; object-src 'none'; base-uri 'self'; connect-src 'self' https://agentaspaarbank.tt.omtrdc.net *.googleapis.com *.simargenta.be *.argenta.be argenta-aam.be *.argenta-aam.be *.teads.tv *.googlesyndication.com *.pingdom.net *.google.com; font-src 'self'; frame-src 'self'  *.tst-argenta.be *.argenta-aam.be *.adsrvr.org *.teads.tv *.doubleclick.net *.googletagmanager.com; img-src 'self' *.argenta.be *.simargenta.be argenta-aam.be *.argenta-aam.be *.facebook.com *.google.be *.google.com *.google.ie *.teads.tv *.gstatic.com; manifest-src 'self'; media-src 'self'; worker-src 'none'; 2
default-src 'self'; script-src 'self' https://pub-chat-dev.ai.tarr.hu; style-src 'self' 'unsafe-inline' https://use.typekit.net; font-src 'self' data: https://use.typekit.net https://p.typekit.net; img-src 'self' data: https://*.basemaps.cartocdn.com http://tarr-cms.test; connect-src 'self' https://pub-chat-dev.ai.tarr.hu; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none' 2
font-src *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ https://www.googletagmanager.com/ *.google.com/ https://www.youtube.com js.mollie.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://firebasestorage.googleapis.com https://www.magezon.com https://www.mollie.com *.cloudimg.io data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://browser.sentry-cdn.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io *.google.com/ js.mollie.com *.cloudimg.io *.scaleflex.it *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.friendlycaptcha.com eu-api.friendlycaptcha.eu https://*.ingest.sentry.io api.authentic.network http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
frame-src https://*.stripe.com https://hooks.stripe.com https://assets.braintreegateway.com https://*.youtube.com https://*.google.com https://*.facebook.com https://*.tiktok.com https://*.datagrail.io https://api.consentjs.datagrail.io https://*.mathtag.com https://*.paypal.com https://*.braintreegateway.com; style-src 'self' 'unsafe-inline' https://*.weeecdn.com https://*.weeecdn.net https://*.sayweee.com; connect-src 'self' https://*.googleapis.com https://*.sayweee.com https://*.sayweee.net; img-src 'self' data: https: https://*.masgusto.com https://*.googletagmanager.com https://*.sayweee.com https://*.sayweee.net https://*.weeecdn.com https://*.weeecdn.net; report-uri https://api.sayweee.net/ec/bff/report/csp-violation; report-to csp-endpoint 2
default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; img-src https: data:; report-uri https://www.milestonesys.com/csp/report 2
default-src 'self' https://www.google.com; connect-src 'self' https://api.stripe.com https://*.google-analytics.com https://live.pdf-xchange.com https://translate.googleapis.com https://translate-pa.googleapis.com https://*.pdf-xchange.com https://www.paypal.com https://www.google.com https://www.googletagmanager.com https://admin.pdf-xchange.com; font-src 'self' https://fonts.gstatic.com https://*.pdf-xchange.com data:; frame-src 'self' https://*.pdf-xchange.com https://js.stripe.com https://*.paypal.com https://assets.braintreegateway.com https://www.google.com https://www.youtube.com; img-src 'self' https://*.pdf-xchange.com https://www.googletagmanager.com https://translate.googleapis.com https://translate.google.com https://fonts.gstatic.com https://www.gstatic.com https://www.google.com https://*.paypal.com https://www.paypalobjects.com https://img.youtube.com data:; media-src data:; script-src 'self' 'unsafe-inline' https://*.pdf-xchange.com https://js.stripe.com https://m.stripe.network https://www.googletagmanager.com https://translate.google.com https://live.pdf-xchange.com https://www.paypal.com https://www.paypalobjects.com https://translate.googleapis.com https://translate-pa.googleapis.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://*.pdf-xchange.com https://fonts.googleapis.com https://www.gstatic.com https://www.paypalobjects.com; report-uri /csp-report; report-to /csp-report 2
default-src 'self'; script-src 'self' object-src 'none'; base-uri 'self'; frame-ancestors 'none'; upgrade-insecure-requests; report-to csp 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.jivosite.com https://dev.visualwebsiteoptimizer.com https://diffuser-cdn.app-us1.com https://prism.app-us1.com https://s4.ispringsolutions.com https://s4.ispring.eu https://www.googletagmanager.com https://www.google-analytics.com https://bitrix.info https://cdn2.ispringsolutions.com https://s4.ispringsolutions.com https://static.cloudflareinsights.com https://static.tildacdn.com https://scripts.clarity.ms https://www.clarity.ms https://snap.licdn.com https://connect.facebook.net https://bat.bing.com https://www.redditstatic.com https://sc.lfeeder.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cdn.mathjax.org https://unpkg.com https://trackcmp.net https://st.yagla.ru https://ispringsolutionsblog.disqus.com https://assets.calendly.com https://embed.typeform.com https://yastatic.net https://www.google.com https://www.youtube.com https://apis.google.com https://ispring.postaffiliatepro.com https://a.quora.com https://d-code.liadm.com https://cdn.lr-intake.com https://eu-assets.i.posthog.com https://cdn.scite.ai https://googleads.g.doubleclick.net https://api-maps.yandex.ru https://core-renderer-tiles.maps.yandex.net; style-src 'self' 'unsafe-inline' https://*.jivosite.com https://fonts.googleapis.com https://cdn2.ispringsolutions.com https://static.tildacdn.com https://c.disquscdn.com https://cdn.jsdelivr.net https://embed.typeform.com https://unpkg.com https://www.gstatic.com; img-src 'self' https://*.jivosite.com https://dev.visualwebsiteoptimizer.com https://www.googletagmanager.com data: blob: https://cdn2.ispringsolutions.com https://cdn4.ispringsolutions.com https://tilda.ws https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://www.facebook.com https://connect.facebook.net https://bat.bing.com https://bat.bing.net https://c.bing.com https://c.clarity.ms https://alb.reddit.com https://rp.liadm.com https://img.youtube.com https://i.ytimg.com https://secure.gravatar.com https://c.disquscdn.com https://referrer.disqus.com https://s.w.org https://translate.google.com https://yandex.com https://yastatic.net https://core-renderer-tiles.maps.yandex.net https://log.api-maps.yandex.ru https://q.quora.com https://tr-rc.lfeeder.com https://www.ispringsolutions.com https://www.learningsystem.eu https://my.productfruits.com https://*.googleusercontent.com https://*.tildacdn.com https://*.gstatic.com https://*.google-analytics.com https://*.linkedin.com; font-src 'self' https://fonts.gstatic.com https://cdn2.ispringsolutions.com https://static.tildacdn.com https://cdn.scite.ai https://use.typekit.net; media-src 'self' https://*.jivosite.com https://www.youtube.com https://cdn4.ispringsolutions.com https://static.tildacdn.com https://cdn.coccoc.com; object-src 'self' https://cdn2.ispringsolutions.com https://www.ispringsolutions.com https://www.youtube.com; worker-src 'self' blob:; connect-src 'self' https://*.jivosite.com wss://*.jivosite.com https://telemetry.jivosite.com https://dev.visualwebsiteoptimizer.com https://tracker.clickfortify.com https://www.googletagmanager.com https://analytics.google.com https://stats.g.doubleclick.net https://www.google.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://ad.doubleclick.net https://cdn2.ispringsolutions.com https://stat.tildaapi.com https://forms.tildaapi.com https://bat.bing.com https://bat.bing.net https://connect.facebook.net https://www.facebook.com https://alb.reddit.com https://pixel-config.reddit.com https://px.ads.linkedin.com https://rp.liadm.com https://snap.licdn.com https://q.quora.com https://sc.lfeeder.com https://api.typeform.com https://eu.i.posthog.com https://translate.googleapis.com https://translate-pa.googleapis.com https://ispring.postaffiliatepro.com https://log.api-maps.yandex.ru https://bzrcdn.openai.com https://bzr.openai.com https://my.productfruits.com https://*.clarity.ms https://*.tildacdn.com https://*.google-analytics.com; frame-src 'self' https://www.youtube.com https://cdn4.ispringsolutions.com https://cdn2.ispringsolutions.com https://ispringteam.ispring.com https://ispringteam.ispringcloud.com https://global-team.ispring.com https://eu-team.ispring.eu https://acc-26831.ispring.com https://ispringcoursecontest2025.ispring.com https://course-contest2026.ispring.com https://calendly.com https://form.typeform.com https://forms.tildaapi.com https://disqus.com https://demo.arcade.software https://player.vimeo.com https://www.facebook.com https://www.google.com https://www.googletagmanager.com https://www.ispringsolutions.com https://i.liadm.com; frame-ancestors 'self'; report-uri /csp-report/report-only 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.tiktok.com *.ttcdn-row.com traxxas.com fonts.googleapis.com cdn.jsdelivr.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * traxxas.com fonts.gstatic.com zonos.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com www.gstatic.com https://img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.tiktok.com *.ttcdn-row.com traxxas.com assurance.sysnetgs.com *.createsend1.com fonts.gstatic.com hn.inspectlet.com hello.zonos.com connect.facebook.net www.facebook.com facebook.com zonos-store-assets.s3.amazonaws.com https://maps.googleapis.com https://maps.gstatic.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.tiktok.com *.ttcdn-row.com *.bytedance.com analytics.tiktok.com traxxas.com support.traxxas.com assurance.sysnetgs.com cdn.inspectlet.com fonts.gstatic.com s7.addthis.com zonos.com cdn.jsdelivr.net route.elements.zonos.com js-agent.newrelic.com connect.facebook.net adobe.com newrelic.com nr-data.net commerce-payment-services.com vimeocdn.com youtube.com magento-ds.com typekit.net cdn-apple.com braintreegateway.com online-metrix.net paypal.com rum.hlx.page js.createsend1.com https://js.stripe.com/v3 https://maps.googleapis.com https://maps.gstatic.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.tiktok.com *.ttcdn-row.com traxxas.com fonts.gstatic.com zonos.com cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src *.tiktok.com 'self' 'unsafe-inline'; media-src *.adobe.com download-video-ak.vimeocdn.com player.vimeo.com vod-progressive-ak.vimeocdn.com vimeocdn.com 'self' 'unsafe-inline'; manifest-src *.traxxas.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com analytics.tiktok.com business-api.tiktok.com *.ttcdn-row.com *.bytedance.com traxxas.com fonts.gstatic.com hn.inspectlet.com wss://ws.inspectlet.com zonos.com hello.zonos.com cdn.jsdelivr.net route.elements.zonos.com js-agent.newrelic.com connect.facebook.net cdn.inspectlet.com assurance.sysnetgs.com stats.g.doubleclick.net www.facebook.com https://maps.googleapis.com https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' unpkg.com fonts.googleapis.com cludo.com customer.cludo.com api.cludo.com *.cookiebot.com siteimprove.com *.siteimprove.com *.siteimproveanalytics.io *.google.com *.newrelic.com newrelic.com *.23video.com *.gstatic.com *.rm.dk *.analysefortegnelsen.dk connect.facebook.net/en_US/sdk.js *.rm.dk *.regionshospitalet-horsens.dk *.cpropslagqa.rm.dk *.cpropslagtest.rm.dk auh.intranet.rm.dk alvorligpatologi.dk auh.dk danishairambulance.dk danishneurosciencecenter.dk desikredeinstitutioner.dk diabetes.rm.dk godstrup.dk groennekompetencer.dk horsens.rm.dk human-first.org ikh.rm.dk innoccus-simply.dk klinik-almenmedicin-lemvig.dk landsbyviden.dk life-act.eu madsonline.dk mit.ikh.rm.dk move-interreg.eu psykiatrien.rm.dk randers.rm.dk regionaludvikling.intranet.rm.dk regionsklinikkenskive.dk regionsklinikkenskjern.dk regionsklinikkenthyholm.dk *.akutlaegehelikopter.dk *.antk.dk *.auh.dk *.c2ccc.eu *.cdss.dk *.cfbh.rm.dk *.coolgeoheat.eu *.danishairambulance.dk *.danishneurosciencecenter.dk *.dccc.dk *.defactum.dk *.desikredeinstitutioner.dk *.digi-lingo.eu *.dmcg.dk *.dok.rm.dk en.auh.dk *.faellesservicecenter.dk *.fagperson.auh.dk *.fagperson.hospitalsenhedmidt.dk *.fagperson.psykiatrien.rm.dk *.fagperson.regionshospitalet-goedstrup.dk *.fagperson.regionshospitalet-horsens.dk *.fagperson.regionshospitalet-randers.dk *.fagperson.sundhed.rm.dk *.godstrup.dk *.grenaasundhedshus.dk *.groennekompetencer.dk *.harts.dk *.hemidt.dk *.hemidt.intranet.rm.dk *.holmstrupgaard.rm.dk *.horsens.rm.dk *.hospitalsenhedmidt.dk *.human-first.org *.ikh.rm.dk *.klinik-almenmedicin-lemvig.dk *.kulturregion.dk *.laege-kvalitet.dk *.landsbyviden.rm.dk *.lemvigsundhedshus.dk *.life-bioscape.eu *.marselisborgcentret.dk *.medarbejder.rm.dk *.organdonation.dk *.pa.intra.rm.dk *.patientkommunikation.dk *.ph.rm.dk *.ps-horsens.intra.rm.dk *.ps-midt.intra.rm.dk *.ps-randers.intra.rm.dk *.ps-vest.intra.rm.dk *.psykiatriakademiet.rm.dk *.psykiatrien.rm.dk *.randers.intranet.rm.dk *.randers.rm.dk *.refer-cdr.eu *.regionshospitalet-goedstrup.dk *.regionshospitalet-horsens.dk *.regionshospitalet-randers.dk *.regionsklinikkenskive.dk *.regionsklinikkenskjern.dk *.regionsklinikkenthyholm.dk *.rehabiliteringsforum.dk *.rkkp.dk *.ru.rm.dk *.sau.rm.dk *.sbu.rm.dk *.sekretariatet.intra.rm.dk *.sektorovergang.rm.dk *.skivesundhedshus.dk *.sku.rm.dk *.social.rm.dk *.socialkvalitetsmodel.dk *.socialmedicin.rm.dk *.soh.rm.dk *.specialpsykologuddannelsen.dk *.specpsyksygeplejerske.dk *.stenoaarhus.dk *.sua.rm.dk *.sundhed.rm.dk *.sundhedsaftalen.rm.dk *.sundhedshusringkoebing.dk *.svo.rm.dk *.tvaerspor.dk *.videreuddannelsen-nord.dk *.voldtaegt.dk *.voresbaredygtighed.rm.dk *.windowstudiet.dk *.zgodkender.rm.dk *.ramazzini.dk; style-src 'self'  'unsafe-inline' unpkg.com fonts.googleapis.com cludo.com customer.cludo.com api.cludo.com *.cookiebot.com siteimprove.com *.siteimprove.com *.siteimproveanalytics.io *.google.com *.newrelic.com newrelic.com *.23video.com *.gstatic.com *.rm.dk *.analysefortegnelsen.dk connect.facebook.net/en_US/sdk.js *.rm.dk *.regionshospitalet-horsens.dk *.cpropslagqa.rm.dk *.cpropslagtest.rm.dk auh.intranet.rm.dk alvorligpatologi.dk auh.dk danishairambulance.dk danishneurosciencecenter.dk desikredeinstitutioner.dk diabetes.rm.dk godstrup.dk groennekompetencer.dk horsens.rm.dk human-first.org ikh.rm.dk innoccus-simply.dk klinik-almenmedicin-lemvig.dk landsbyviden.dk life-act.eu madsonline.dk mit.ikh.rm.dk move-interreg.eu psykiatrien.rm.dk randers.rm.dk regionaludvikling.intranet.rm.dk regionsklinikkenskive.dk regionsklinikkenskjern.dk regionsklinikkenthyholm.dk *.akutlaegehelikopter.dk *.antk.dk *.auh.dk *.c2ccc.eu *.cdss.dk *.cfbh.rm.dk *.coolgeoheat.eu *.danishairambulance.dk *.danishneurosciencecenter.dk *.dccc.dk *.defactum.dk *.desikredeinstitutioner.dk *.digi-lingo.eu *.dmcg.dk *.dok.rm.dk en.auh.dk *.faellesservicecenter.dk *.fagperson.auh.dk *.fagperson.hospitalsenhedmidt.dk *.fagperson.psykiatrien.rm.dk *.fagperson.regionshospitalet-goedstrup.dk *.fagperson.regionshospitalet-horsens.dk *.fagperson.regionshospitalet-randers.dk *.fagperson.sundhed.rm.dk *.godstrup.dk *.grenaasundhedshus.dk *.groennekompetencer.dk *.harts.dk *.hemidt.dk *.hemidt.intranet.rm.dk *.holmstrupgaard.rm.dk *.horsens.rm.dk *.hospitalsenhedmidt.dk *.human-first.org *.ikh.rm.dk *.klinik-almenmedicin-lemvig.dk *.kulturregion.dk *.laege-kvalitet.dk *.landsbyviden.rm.dk *.lemvigsundhedshus.dk *.life-bioscape.eu *.marselisborgcentret.dk *.medarbejder.rm.dk *.organdonation.dk *.pa.intra.rm.dk *.patientkommunikation.dk *.ph.rm.dk *.ps-horsens.intra.rm.dk *.ps-midt.intra.rm.dk *.ps-randers.intra.rm.dk *.ps-vest.intra.rm.dk *.psykiatriakademiet.rm.dk *.psykiatrien.rm.dk *.randers.intranet.rm.dk *.randers.rm.dk *.refer-cdr.eu *.regionshospitalet-goedstrup.dk *.regionshospitalet-horsens.dk *.regionshospitalet-randers.dk *.regionsklinikkenskive.dk *.regionsklinikkenskjern.dk *.regionsklinikkenthyholm.dk *.rehabiliteringsforum.dk *.rkkp.dk *.ru.rm.dk *.sau.rm.dk *.sbu.rm.dk *.sekretariatet.intra.rm.dk *.sektorovergang.rm.dk *.skivesundhedshus.dk *.sku.rm.dk *.social.rm.dk *.socialkvalitetsmodel.dk *.socialmedicin.rm.dk *.soh.rm.dk *.specialpsykologuddannelsen.dk *.specpsyksygeplejerske.dk *.stenoaarhus.dk *.sua.rm.dk *.sundhed.rm.dk *.sundhedsaftalen.rm.dk *.sundhedshusringkoebing.dk *.svo.rm.dk *.tvaerspor.dk *.videreuddannelsen-nord.dk *.voldtaegt.dk *.voresbaredygtighed.rm.dk *.windowstudiet.dk *.zgodkender.rm.dk *.ramazzini.dk; img-src 'self' data: 'unsafe-inline' unpkg.com fonts.googleapis.com cludo.com customer.cludo.com api.cludo.com *.cookiebot.com siteimprove.com *.siteimprove.com *.siteimproveanalytics.io *.google.com *.newrelic.com newrelic.com *.23video.com *.gstatic.com *.rm.dk *.analysefortegnelsen.dk connect.facebook.net/en_US/sdk.js *.rm.dk *.regionshospitalet-horsens.dk *.cpropslagqa.rm.dk *.cpropslagtest.rm.dk auh.intranet.rm.dk alvorligpatologi.dk auh.dk danishairambulance.dk danishneurosciencecenter.dk desikredeinstitutioner.dk diabetes.rm.dk godstrup.dk groennekompetencer.dk horsens.rm.dk human-first.org ikh.rm.dk innoccus-simply.dk klinik-almenmedicin-lemvig.dk landsbyviden.dk life-act.eu madsonline.dk mit.ikh.rm.dk move-interreg.eu psykiatrien.rm.dk randers.rm.dk regionaludvikling.intranet.rm.dk regionsklinikkenskive.dk regionsklinikkenskjern.dk regionsklinikkenthyholm.dk *.akutlaegehelikopter.dk *.antk.dk *.auh.dk *.c2ccc.eu *.cdss.dk *.cfbh.rm.dk *.coolgeoheat.eu *.danishairambulance.dk *.danishneurosciencecenter.dk *.dccc.dk *.defactum.dk *.desikredeinstitutioner.dk *.digi-lingo.eu *.dmcg.dk *.dok.rm.dk en.auh.dk *.faellesservicecenter.dk *.fagperson.auh.dk *.fagperson.hospitalsenhedmidt.dk *.fagperson.psykiatrien.rm.dk *.fagperson.regionshospitalet-goedstrup.dk *.fagperson.regionshospitalet-horsens.dk *.fagperson.regionshospitalet-randers.dk *.fagperson.sundhed.rm.dk *.godstrup.dk *.grenaasundhedshus.dk *.groennekompetencer.dk *.harts.dk *.hemidt.dk *.hemidt.intranet.rm.dk *.holmstrupgaard.rm.dk *.horsens.rm.dk *.hospitalsenhedmidt.dk *.human-first.org *.ikh.rm.dk *.klinik-almenmedicin-lemvig.dk *.kulturregion.dk *.laege-kvalitet.dk *.landsbyviden.rm.dk *.lemvigsundhedshus.dk *.life-bioscape.eu *.marselisborgcentret.dk *.medarbejder.rm.dk *.organdonation.dk *.pa.intra.rm.dk *.patientkommunikation.dk *.ph.rm.dk *.ps-horsens.intra.rm.dk *.ps-midt.intra.rm.dk *.ps-randers.intra.rm.dk *.ps-vest.intra.rm.dk *.psykiatriakademiet.rm.dk *.psykiatrien.rm.dk *.randers.intranet.rm.dk *.randers.rm.dk *.refer-cdr.eu *.regionshospitalet-goedstrup.dk *.regionshospitalet-horsens.dk *.regionshospitalet-randers.dk *.regionsklinikkenskive.dk *.regionsklinikkenskjern.dk *.regionsklinikkenthyholm.dk *.rehabiliteringsforum.dk *.rkkp.dk *.ru.rm.dk *.sau.rm.dk *.sbu.rm.dk *.sekretariatet.intra.rm.dk *.sektorovergang.rm.dk *.skivesundhedshus.dk *.sku.rm.dk *.social.rm.dk *.socialkvalitetsmodel.dk *.socialmedicin.rm.dk *.soh.rm.dk *.specialpsykologuddannelsen.dk *.specpsyksygeplejerske.dk *.stenoaarhus.dk *.sua.rm.dk *.sundhed.rm.dk *.sundhedsaftalen.rm.dk *.sundhedshusringkoebing.dk *.svo.rm.dk *.tvaerspor.dk *.videreuddannelsen-nord.dk *.voldtaegt.dk *.voresbaredygtighed.rm.dk *.windowstudiet.dk *.zgodkender.rm.dk *.ramazzini.dk; connect-src 'self' bam.eu01.nr-data.net sentry.io unpkg.com fonts.googleapis.com cludo.com customer.cludo.com api.cludo.com *.cookiebot.com siteimprove.com *.siteimprove.com *.siteimproveanalytics.io *.google.com *.newrelic.com newrelic.com *.23video.com *.gstatic.com *.rm.dk *.analysefortegnelsen.dk connect.facebook.net/en_US/sdk.js *.rm.dk *.regionshospitalet-horsens.dk *.cpropslagqa.rm.dk *.cpropslagtest.rm.dk auh.intranet.rm.dk alvorligpatologi.dk auh.dk danishairambulance.dk danishneurosciencecenter.dk desikredeinstitutioner.dk diabetes.rm.dk godstrup.dk groennekompetencer.dk horsens.rm.dk human-first.org ikh.rm.dk innoccus-simply.dk klinik-almenmedicin-lemvig.dk landsbyviden.dk life-act.eu madsonline.dk mit.ikh.rm.dk move-interreg.eu psykiatrien.rm.dk randers.rm.dk regionaludvikling.intranet.rm.dk regionsklinikkenskive.dk regionsklinikkenskjern.dk regionsklinikkenthyholm.dk *.akutlaegehelikopter.dk *.antk.dk *.auh.dk *.c2ccc.eu *.cdss.dk *.cfbh.rm.dk *.coolgeoheat.eu *.danishairambulance.dk *.danishneurosciencecenter.dk *.dccc.dk *.defactum.dk *.desikredeinstitutioner.dk *.digi-lingo.eu *.dmcg.dk *.dok.rm.dk en.auh.dk *.faellesservicecenter.dk *.fagperson.auh.dk *.fagperson.hospitalsenhedmidt.dk *.fagperson.psykiatrien.rm.dk *.fagperson.regionshospitalet-goedstrup.dk *.fagperson.regionshospitalet-horsens.dk *.fagperson.regionshospitalet-randers.dk *.fagperson.sundhed.rm.dk *.godstrup.dk *.grenaasundhedshus.dk *.groennekompetencer.dk *.harts.dk *.hemidt.dk *.hemidt.intranet.rm.dk *.holmstrupgaard.rm.dk *.horsens.rm.dk *.hospitalsenhedmidt.dk *.human-first.org *.ikh.rm.dk *.klinik-almenmedicin-lemvig.dk *.kulturregion.dk *.laege-kvalitet.dk *.landsbyviden.rm.dk *.lemvigsundhedshus.dk *.life-bioscape.eu *.marselisborgcentret.dk *.medarbejder.rm.dk *.organdonation.dk *.pa.intra.rm.dk *.patientkommunikation.dk *.ph.rm.dk *.ps-horsens.intra.rm.dk *.ps-midt.intra.rm.dk *.ps-randers.intra.rm.dk *.ps-vest.intra.rm.dk *.psykiatriakademiet.rm.dk *.psykiatrien.rm.dk *.randers.intranet.rm.dk *.randers.rm.dk *.refer-cdr.eu *.regionshospitalet-goedstrup.dk *.regionshospitalet-horsens.dk *.regionshospitalet-randers.dk *.regionsklinikkenskive.dk *.regionsklinikkenskjern.dk *.regionsklinikkenthyholm.dk *.rehabiliteringsforum.dk *.rkkp.dk *.ru.rm.dk *.sau.rm.dk *.sbu.rm.dk *.sekretariatet.intra.rm.dk *.sektorovergang.rm.dk *.skivesundhedshus.dk *.sku.rm.dk *.social.rm.dk *.socialkvalitetsmodel.dk *.socialmedicin.rm.dk *.soh.rm.dk *.specialpsykologuddannelsen.dk *.specpsyksygeplejerske.dk *.stenoaarhus.dk *.sua.rm.dk *.sundhed.rm.dk *.sundhedsaftalen.rm.dk *.sundhedshusringkoebing.dk *.svo.rm.dk *.tvaerspor.dk *.videreuddannelsen-nord.dk *.voldtaegt.dk *.voresbaredygtighed.rm.dk *.windowstudiet.dk *.zgodkender.rm.dk *.ramazzini.dk; font-src 'self' fonts.gstatic.com fonts.googleapis.com; frame-src 'self' unpkg.com fonts.googleapis.com cludo.com customer.cludo.com api.cludo.com *.cookiebot.com siteimprove.com *.siteimprove.com *.siteimproveanalytics.io *.google.com *.newrelic.com newrelic.com *.23video.com *.gstatic.com *.rm.dk *.analysefortegnelsen.dk connect.facebook.net/en_US/sdk.js *.rm.dk *.regionshospitalet-horsens.dk *.cpropslagqa.rm.dk *.cpropslagtest.rm.dk auh.intranet.rm.dk alvorligpatologi.dk auh.dk danishairambulance.dk danishneurosciencecenter.dk desikredeinstitutioner.dk diabetes.rm.dk godstrup.dk groennekompetencer.dk horsens.rm.dk human-first.org ikh.rm.dk innoccus-simply.dk klinik-almenmedicin-lemvig.dk landsbyviden.dk life-act.eu madsonline.dk mit.ikh.rm.dk move-interreg.eu psykiatrien.rm.dk randers.rm.dk regionaludvikling.intranet.rm.dk regionsklinikkenskive.dk regionsklinikkenskjern.dk regionsklinikkenthyholm.dk *.akutlaegehelikopter.dk *.antk.dk *.auh.dk *.c2ccc.eu *.cdss.dk *.cfbh.rm.dk *.coolgeoheat.eu *.danishairambulance.dk *.danishneurosciencecenter.dk *.dccc.dk *.defactum.dk *.desikredeinstitutioner.dk *.digi-lingo.eu *.dmcg.dk *.dok.rm.dk en.auh.dk *.faellesservicecenter.dk *.fagperson.auh.dk *.fagperson.hospitalsenhedmidt.dk *.fagperson.psykiatrien.rm.dk *.fagperson.regionshospitalet-goedstrup.dk *.fagperson.regionshospitalet-horsens.dk *.fagperson.regionshospitalet-randers.dk *.fagperson.sundhed.rm.dk *.godstrup.dk *.grenaasundhedshus.dk *.groennekompetencer.dk *.harts.dk *.hemidt.dk *.hemidt.intranet.rm.dk *.holmstrupgaard.rm.dk *.horsens.rm.dk *.hospitalsenhedmidt.dk *.human-first.org *.ikh.rm.dk *.klinik-almenmedicin-lemvig.dk *.kulturregion.dk *.laege-kvalitet.dk *.landsbyviden.rm.dk *.lemvigsundhedshus.dk *.life-bioscape.eu *.marselisborgcentret.dk *.medarbejder.rm.dk *.organdonation.dk *.pa.intra.rm.dk *.patientkommunikation.dk *.ph.rm.dk *.ps-horsens.intra.rm.dk *.ps-midt.intra.rm.dk *.ps-randers.intra.rm.dk *.ps-vest.intra.rm.dk *.psykiatriakademiet.rm.dk *.psykiatrien.rm.dk *.randers.intranet.rm.dk *.randers.rm.dk *.refer-cdr.eu *.regionshospitalet-goedstrup.dk *.regionshospitalet-horsens.dk *.regionshospitalet-randers.dk *.regionsklinikkenskive.dk *.regionsklinikkenskjern.dk *.regionsklinikkenthyholm.dk *.rehabiliteringsforum.dk *.rkkp.dk *.ru.rm.dk *.sau.rm.dk *.sbu.rm.dk *.sekretariatet.intra.rm.dk *.sektorovergang.rm.dk *.skivesundhedshus.dk *.sku.rm.dk *.social.rm.dk *.socialkvalitetsmodel.dk *.socialmedicin.rm.dk *.soh.rm.dk *.specialpsykologuddannelsen.dk *.specpsyksygeplejerske.dk *.stenoaarhus.dk *.sua.rm.dk *.sundhed.rm.dk *.sundhedsaftalen.rm.dk *.sundhedshusringkoebing.dk *.svo.rm.dk *.tvaerspor.dk *.videreuddannelsen-nord.dk *.voldtaegt.dk *.voresbaredygtighed.rm.dk *.windowstudiet.dk *.zgodkender.rm.dk *.ramazzini.dk; base-uri 'self'; frame-ancestors 'self'; report-uri https://o4504207644033024.ingest.us.sentry.io/api/4510300403204096/security/?sentry_key=0f83650c1c0c90a8ea22a527173f4833&sentry_environment=prod; report-to csp-endpoint 2
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.angusrobertson.com.au; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.secure-afterpay.com.au bam.nr-data.net *.hotjar.com googleads.g.doubleclick.net *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.bing.com *.google.com *.gstatic.com *.forter.com *.visualwebsiteoptimizer.com *.cloudfront.net static.scarabresearch.com cdn.scarabresearch.com apis.google.com *.criteo.com static.criteo.net *.newrelic.com connect.facebook.net platform.twitter.com d.impactradius-event.com *.afterpay.com; connect-src 'self' blob: *.cloudfront.net *.google-analytics.com *.hotjar.io *.nr-data.net stats.g.doubleclick.net *.emarsys.net *.scarabresearch.com *.hotjar.com *.salecycle.com  *.forter.com opentag-stats.qubit.com *.visualwebsiteoptimizer.com recommender.scarabresearch.com angusrobertson.4tqiav.net; img-src 'self' data: *.criteo.net *.google-analytics.com *.google.com *.bing.com *.google.com.au *.pinterest.com *.cloudfront.net *.visualwebsiteoptimizer.com *.facebook.com syndication.twitter.com *.secure-afterpay.com.au *.angusrobertson.com.au *.loggly.com; frame-src 'self' *.cloudfront.net *.angusrobertson.com.au *.google.com platform.twitter.com www.facebook.com staticxx.facebook.com www.youtube.com *.criteo.com *.criteo.net *.hotjar.com *.salecycle.com bid.g.doubleclick.net 2
connect-src 'self' public-eur.mkt.dynamics.com formui-usa1.mkt.dynamics.com assets-eur.mkt.dynamics.com https://search.luiss.it; font-src 'self' data: assets-eur.mkt.dynamics.com; frame-src 'self' www.youtube-nocookie.com player.vimeo.com; img-src 'self' data: assets-eur.mkt.dynamics.com; media-src 'self'; object-src 'none'; script-src 'self' 'report-sample' formui-usa1.mkt.dynamics.com; style-src 'self' 'report-sample'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 2
default-src 'self' 'unsafe-inline' blob:; object-src 'none'; base-uri 'none'; form-action 'self' *.pennymac.com *.wufoo.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.googletagmanager.com *.vwo.com *.visualwebsiteoptimizer.com *.google.com; font-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.visualwebsiteoptimizer.com *.vwo.com; style-src-elem 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.googletagmanager.com *.vwo.com *.visualwebsiteoptimizer.com *.google.com; frame-ancestors 'self'; frame-src 'self' *.pennymac.com *.youtube.com *.instagram.com *.vimeo.com *.youtube-nocookie.com *.googletagmanager.com *.doubleclick.net *.adsrvr.org *.google.com *.leadid.com *.cloudfront.net *.vwo.com *.visualwebsiteoptimizer.com app.vwo.com *.picflow.com; connect-src 'self' *.reddit.com *.onetrust.com *.google.com *.play.google.com *.googleapis.com *.bing.com *.nr-data.net *.on.aws *.cookielaw.org *.reson8.com *.visualwebsiteoptimizer.com *.pennymac.com *.tealiumapis.com *.doubleclick.net *.tealiumiq.com *.yimg.com *.linkedin.com *.adsrvr.org *.leadid.com *.googleadservices.com *.googletagmanager.com *.facebook.com *.facebook.net *.exacttarget.com *.yahoo.com *.trcknow.com *.vwo.com app.vwo.com; script-src 'self' 'unsafe-inline' *.newrelic.com capi-automation.s3.us-east-2.amazonaws.com *.redditstatic.com *.googletagmanager.com *.pennymac.com *.vwo.com *.visualwebsiteoptimizer.com *.google.com *.googleapis.com; script-src-elem 'self' 'unsafe-inline' capi-automation.s3.us-east-2.amazonaws.com *.instagram.com *.redditstatic.com *.tailwindcss.com *.gstatic.com *.googletagmanager.com *.visualwebsiteoptimizer.com *.newrelic.com *.lidstatic.com *.vimeo.com *.google.com *.googleapis.com *.cookielaw.org *.youtube.com *.tiqcdn.com *.facebook.com *.facebook.net *.bing.com *.licdn.com *.yimg.com *.adsrvr.org *.tealiumiq.com *.resonate.com *.doubleclick.net *.nr-data.net *.vwo.com *.exacttarget.com *.trcknow.com *.pennymac.com; img-src 'self' data: *.townsgateservicing.com *.reddit.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.visualwebsiteoptimizer.com *.vimeocdn.com *.adsvr.org *.google.com *.yahoo.com *.linkedin.com *.bing.com *.facebook.com *.facebook.net *.cloudinary.com *.cookielaw.org *.pennymac.com *.googleadservices.com *.resonate.com *.doubleclick.net *.reson8.com *.yimg.com *.leadid.com *.exacttarget.com *.trcknow.com *.vwo.com *.vwo.io app.vwo.com; worker-src 'self' blob:; require-trusted-types-for 'script'; 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: https://*.monkeytilt.com https://*.monkeytilt.pro https://*.monkeytilt.io https://*.tiltrips.com https://img.monkeytilt.co https://d34lk2pr0k31uk.cloudfront.net https://d32bk3dvaelqfx.cloudfront.net https://d3hb5vvfdo7tpj.cloudfront.net https://d2lz2zlzfqehxx.cloudfront.net https://og-static.monkeytilt.com https://connect.facebook.net https://www.googletagmanager.com https://analytics.tiktok.com https://sc-static.net https://*.snapchat.com https://static.ads-twitter.com https://www.redditstatic.com https://cdn.blockchainads.io https://track.liftdsp.com https://static.cloudflareinsights.com https://*.i.posthog.com https://*.coinflow.cash https://coinflow.cash https://mpc2-prod-29-is5qnl632q-uc.a.run.app https://www.paypal.com https://pay.google.com https://*.paymentiq.io https://*.onramper.com https://*.onramper.dev https://*.nsureapi.com https://*.hub88.io https://*.fh8labs.com https://*.hacksawgaming.com https://*.gamingcorpscasino.com https://*.footballbookstage.com https://*.footballbookprod.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://unpkg.com https://cdn.tailwindcss.com https://us.i.posthog.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.monkeytilt.com https://*.monkeytilt.pro https://*.monkeytilt.io https://*.tiltrips.com https://img.monkeytilt.co https://d34lk2pr0k31uk.cloudfront.net https://d32bk3dvaelqfx.cloudfront.net https://d3hb5vvfdo7tpj.cloudfront.net https://d2lz2zlzfqehxx.cloudfront.net https://og-static.monkeytilt.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://unpkg.com https://cdn.tailwindcss.com; connect-src 'self' blob: data: ipc: wss://*.monkeytilt.pro wss://*.tiltrips.com https://*.monkeytilt.com https://*.monkeytilt.pro https://*.monkeytilt.io https://*.tiltrips.com https://img.monkeytilt.co https://d34lk2pr0k31uk.cloudfront.net https://d32bk3dvaelqfx.cloudfront.net https://d3hb5vvfdo7tpj.cloudfront.net https://d2lz2zlzfqehxx.cloudfront.net https://og-static.monkeytilt.com https://analytics.tiktok.com https://*.snapchat.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://stats.g.doubleclick.net https://www.google.com https://google.com https://www.googletagmanager.com https://cloudflareinsights.com https://*.i.posthog.com https://*.coinflow.cash https://coinflow.cash https://mpc2-prod-29-is5qnl632q-uc.a.run.app https://www.paypal.com https://pay.google.com https://*.paymentiq.io https://*.onramper.com https://*.onramper.dev https://*.nsureapi.com https://*.quiknode.pro https://blockstream.info https://places.geo.eu-central-1.amazonaws.com https://*.hub88.io https://*.fh8labs.com https://*.hacksawgaming.com https://*.gamingcorpscasino.com https://*.footballbookstage.com https://*.footballbookprod.com https://us.i.posthog.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://*.monkeytilt.com https://*.monkeytilt.pro https://*.monkeytilt.io https://*.tiltrips.com https://img.monkeytilt.co https://d34lk2pr0k31uk.cloudfront.net https://d32bk3dvaelqfx.cloudfront.net https://d3hb5vvfdo7tpj.cloudfront.net https://d2lz2zlzfqehxx.cloudfront.net https://og-static.monkeytilt.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://unpkg.com https://cdn.tailwindcss.com; media-src 'self' data: blob: https://*.monkeytilt.com https://*.monkeytilt.pro https://*.monkeytilt.io https://*.tiltrips.com https://img.monkeytilt.co https://d34lk2pr0k31uk.cloudfront.net https://d32bk3dvaelqfx.cloudfront.net https://d3hb5vvfdo7tpj.cloudfront.net https://d2lz2zlzfqehxx.cloudfront.net https://og-static.monkeytilt.com; worker-src 'self' blob:; frame-src 'self' https://*.snapchat.com https://*.monkeytilt.com https://*.monkeytilt.pro https://*.monkeytilt.io https://*.tiltrips.com https://img.monkeytilt.co https://d34lk2pr0k31uk.cloudfront.net https://d32bk3dvaelqfx.cloudfront.net https://d3hb5vvfdo7tpj.cloudfront.net https://d2lz2zlzfqehxx.cloudfront.net https://og-static.monkeytilt.com https://*.coinflow.cash https://coinflow.cash https://mpc2-prod-29-is5qnl632q-uc.a.run.app https://www.paypal.com https://pay.google.com https://*.paymentiq.io https://*.onramper.com https://*.onramper.dev https://*.nsureapi.com https://*.hub88.io https://*.fh8labs.com https://*.hacksawgaming.com https://*.gamingcorpscasino.com https://*.footballbookstage.com https://*.footballbookprod.com; object-src 'none'; base-uri 'self' https://d34lk2pr0k31uk.cloudfront.net https://d32bk3dvaelqfx.cloudfront.net https://d3hb5vvfdo7tpj.cloudfront.net https://d2lz2zlzfqehxx.cloudfront.net https://og-static.monkeytilt.com; frame-ancestors 'self'; form-action 'self' https://*.monkeytilt.com https://*.monkeytilt.pro https://*.monkeytilt.io https://*.tiltrips.com https://img.monkeytilt.co https://d34lk2pr0k31uk.cloudfront.net https://d32bk3dvaelqfx.cloudfront.net https://d3hb5vvfdo7tpj.cloudfront.net https://d2lz2zlzfqehxx.cloudfront.net https://og-static.monkeytilt.com https://*.coinflow.cash https://coinflow.cash https://mpc2-prod-29-is5qnl632q-uc.a.run.app https://www.paypal.com https://pay.google.com https://*.paymentiq.io https://*.onramper.com https://*.onramper.dev https://*.nsureapi.com; report-uri /csp-report/; report-to csp-endpoint 2
default-src 'self' https://nexo.com *.nexo.com *.nexo.io cdn.segment.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://nexoio.my.salesforce-scrt.com https://widget.trustpilot.com https://appleid.cdn-apple.com https://www.apple.com https://browser-intake-datadoghq.eu https://region1.analytics.google.com https://region1.google-analytics.com https://events.eu1.segmentapis.com https://www.googletagmanager.com https://accounts.google.com https://www.gstatic.com https://fonts.gstatic.com *.geetest.com wss://platform.nexo.com https://nexoio.my.site.com; frame-ancestors https://platform.nexo.io https://platform.nexo.com https://support.nexo.io https://support.nexo.com https://nexosurvey.force.com https://nexoio.lightning.force.com https://nexoio--c.visualforce.com; report-uri https://security-logging.nexo.com; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com cdn.hedonskate.com cdn.bladeville.pl cdn.bladeville.com *.facebook.com *.facebook.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * sandbox.przelewy24.pl secure.przelewy24.pl 'self' 'unsafe-inline'; frame-ancestors pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com https://www.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * apm.przelewy24.pl secure.payu.com merch-prod.snd.payu.com https://player.vimeo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com static.przelewy24.pl www.gstatic.com gstatic.com static.payu.com cdn.hedonskate.com cdn.bladeville.pl cdn.bladeville.com bladeville.dev.aur.ac bladevilleen.dev.aur.ac *.facebook.com *.facebook.net blob: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com sandbox.przelewy24.pl secure.przelewy24.pl apm.przelewy24.pl secure.payu.com secure.snd.payu.com cdn.hedonskate.com cdn.bladeville.pl cdn.bladeville.com bladeville.dev.aur.ac bladevilleen.dev.aur.ac *.facebook.com *.facebook.net https://furgonetka.pl *.jsdelivr.net api.mapbox.com https://unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com cdn.hedonskate.com cdn.bladeville.pl cdn.bladeville.com bladeville.dev.aur.ac bladevilleen.dev.aur.ac *.facebook.com *.facebook.net api.mapbox.com *.jsdelivr.net https://unpkg.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com sandbox.przelewy24.pl secure.przelewy24.pl wss://ws.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com secure.payu.com merch-prod.snd.payu.com cdn.hedonskate.com cdn.bladeville.pl cdn.bladeville.com bladeville.dev.aur.ac bladevilleen.dev.aur.ac *.facebook.com *.facebook.net *.furgonetka.pl https://unpkg.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://static.unzer.com https://applepay.cdn-apple.com maxcdn.bootstrapcdn.com data: 'self' data: https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://plumrocket.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.facebook.com *.facebook.com *.nkd.com *.nkd.it 'self' 'unsafe-inline'; frame-ancestors *.nkd.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://www.googletagmanager.com/ *.facebook.com https://plumrocket.com https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://static-cc.test.unzer.com https://h.online-metrix.net https://google.com/pay https://pay.google.com/ https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ https://sandbox.clicktopay.auth.visa.com https://clicktopay.visa.com https://sandbox.secure.checkout.visa.com https://secure.checkout.visa.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com https://accounts.google.com ad4m.at *.criteo.com *.doubleclick.net www.facebook.com hal9000.redintelligence.net *.usercentrics.eu www.usemaxserver.de *.fls.doubleclick.net *.creativecdn.com tsdtocl.com *.sovendus-benefits.com *.sovendus-connect.com *.usemaxserver.de 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.cdninstagram.com maps.googleapis.com https://static.unzer.com *.online-metrix.net https://www.gstatic.com flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com *.hsforms.net *.hsforms.com 'self' data: ad11.adfarm1.adition.com bat.bing.com *.doubleclick.net *.google.com *.google.pl imagesrv.adition.com lantern.roeye.com *.nkd.com track.adform.net usage.trackjs.com *.usercentrics.eu widgets.trustedshops.com www.facebook.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com *.360yield.com *.3lift.com *.addlv.smt.docomo.ne.jp *.adform.net *.admixer.net *.adnxs.com *.adscale.de *.adx.opera.com *.bing.com *.casalemedia.com *.ck-ie.com *.connectad.io *.console.adtarget.com.tr *.creativecdn.com *.dmxleo.com *.e-planning.net *.facebook.com *.facebook.net *.g.doubleclick.net *.go.sonobi.com *.gumgum.com *.inmobi.com *.leap.de *.loopme.me *.marphezis.com *.media.net *.mgid.com *.nexx360.io *.openx.net *.outbrain.com *.roeye.com *.rubiconproject.com *.sharethrough.com *.taboola.com *.teads.tv *.trackjs.com *.udmserve.net *.visx.net *.adition.com *.trustedshops.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.plugins.emarsys.net *.scarabresearch.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.googleapis.com player.vimeo.com connect.facebook.net cdnjs.cloudflare.com *.googleoptimize.com maps.googleapis.com https://static.unzer.com https://applepay.cdn-apple.com https://pay.google.com https://code.jquery.com https://h.online-metrix.net https://h64.online-metrix.net https://static-v2.unzer.com/v2/ui-components/ *.gstatic.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com https://accounts.google.com https://www.gstatic.com *.hsforms.net *.hsforms.com ad4m.at api.sovendus.com bat.bing.com *.taboola.com cdn.mouseflow.com core.loopingo.com *.criteo.com *.epoq.de epoq-systems.de *.facebook.net *.kameleoon.eu *.kameleoon.com lantern.roeyecdn.com *.nkd.com tags.creativecdn.com *.usercentrics.eu webanalytics.mso.digital widgets.trustedshops.com www.dwin1.com www.usemaxserver.de https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.bing.com *.dwin1.com *.epoq-systems.de *.loopingo.com *.usemaxserver.de *.trustedshops.com *.googletagmanager.com *.mouseflow.com *.outbrain.com *.creativecdn.com d22q3dafggn5rg.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://sandbox.src.mastercard.com https://static-v2.unzer.com/v2/ui-components/ maxcdn.bootstrapcdn.com *.gstatic.com assets.braintreegateway.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com https://accounts.google.com https://www.gstatic.com *.googleapis.com *.epoq.de epoq-systems.de https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.scarabresearch.com *.eservice.emarsys.net http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ maps.googleapis.com places.googleapis.com https://api.unzer.com https://api.heidelpay.com https://sbx-api.heidelpay.com https://sbx-api.unzer.com https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://h.online-metrix.net https://h64.online-metrix.net https://google.com/pay https://www.google.com/pay https://pay.google.com https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ https://static-cc.test.unzer.com https://static-v2.unzer.com/v2/ui-components/ www.gstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com https://accounts.google.com t.elasticsuite.io *.hsforms.net *.hsforms.com ams.creativecdn.com api.usercentrics.eu bat.bing.com *.criteo.com *.googleapis.com *.taboola.com webanalytics.mso.digital *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.bing.com *.usercentrics.eu *.creativecdn.com *.bing.net *.loopingo.com *.kameleoon.eu *.sovendus.com *.arc.epoq.de *.facebook.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cash-f.squarecdn.com fonts.googleapis.com maxcdn.bootstrapcdn.com common-fonts.abtasty.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com https://plumrocket.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com https://plumrocket.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org *.openstreetmap.org maps.googleapis.com maps.gstatic.com cdn.cookielaw.org dp8v87cz8a7qa.cloudfront.net flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com player.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com t4.my-probance.one try.abtasty.com cdn.facil-iti.app api.beeroot.io cdn.epoq.de rs1.epoq.de cdn.cookielaw.org client-scripts.fitle.com sdk.fitle.com pagead2.googlesyndication.com cdn.fibbl.com qa-assistant.abtasty.com teddytor.abtasty.com bexley-fr.arc.epoq.de epoq-systems.de client.get-potions.com appstatic.quanta.io bat.bing.com *.gstatic.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.cash.app maxcdn.bootstrapcdn.com cdn.epoq.de player.vimeo.com common-fonts.abtasty.com teddytor.abtasty.com epoq-systems.de *.gstatic.com assets.braintreegateway.com tagmanager.google.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * maps.googleapis.com bexley-privacy.my.onetrust.com cdn.cookielaw.org dcinfos-cache.abtasty.com pagead2.googlesyndication.com api.fitle.com blob: www.gstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://www.google-analytics.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
upgrade-insecure-requests;default-src 'self' blob: *.senado.gov.br *.senado.leg.br;script-src 'self' 'unsafe-eval' 'unsafe-inline' *.senado.gov.br *.senado.leg.br *.youtube.com *.google-analytics.com www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ vlibras.gov.br ajax.googleapis.com www.gstatic.com;img-src 'self' data: blob: *.senado.gov.br *.senado.leg.br *.ytimg.com *.google-analytics.com www.googletagmanager.com *.youtube.com *.gstatic.com vlibras.gov.br;connect-src 'self' *.senado.gov.br *.senado.leg.br vlibras.gov.br *.vlibras.gov.br *.google-analytics.com *.analytics.google.com www.googletagmanager.com www.google.com www.google.com/recaptcha/;font-src 'self' data: vlibras.gov.br cdnjs.cloudflare.com fonts.gstatic.com;style-src 'self' 'unsafe-inline' *.senado.gov.br *.senado.leg.br cdnjs.cloudflare.com fonts.googleapis.com;worker-src blob: *.senado.leg.br *.senado.gov.br;object-src 'none';frame-src 'self' *.senado.gov.br *.senado.leg.br *.youtube.com www.youtube-nocookie.com www.google.com/recaptcha/ recaptcha.google.com/recaptcha/;base-uri 'self';frame-ancestors 'self' *.senado.gov.br *.senado.leg.br;report-uri https://www12.senado.leg.br/crisp/report 2
default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.cloudfront.net https://www.google-analytics.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.cloudfront.net; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://*.cloudfront.net; connect-src 'self' https:; media-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 2
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://locize.app https://*.locize.app; worker-src 'self' blob:; frame-ancestors 'self'; form-action 'self'; base-uri 'self'; object-src 'none' 2
default-src 'self' captcha-api.yandex.ru smartcaptcha.yandexcloud.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' mc.yandex.ru www.googletagmanager.com www.google.com vk.com top-fwz1.mail.ru *.jivosite.com mod.calltouch.ru static.popmechanic.ru st.hybrid.ai get.shoppilot.ru cdn.diginetica.net smartcaptcha.yandexcloud.net *.jivo.ru captcha-api.yandex.ru api-maps.yandex.ru yastatic.net api.mindbox.ru web-static.mindbox.ru personalization-web-stable.mindbox.ru personalization-speedtest.g.mindbox.ru www.gstatic.com pay.yandex.ru *.koleso.ru; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' mc.yandex.ru www.googletagmanager.com www.google.com vk.com top-fwz1.mail.ru *.jivosite.com mod.calltouch.ru static.popmechanic.ru st.hybrid.ai get.shoppilot.ru cdn.diginetica.net smartcaptcha.yandexcloud.net *.jivo.ru captcha-api.yandex.ru api-maps.yandex.ru yastatic.net api.mindbox.ru web-static.mindbox.ru personalization-web-stable.mindbox.ru personalization-speedtest.g.mindbox.ru www.gstatic.com goodmod.ru pxaction.com icyh3e.ru trackerme.org pixel.betweenx.com pixel.adspector.pro ab-ct.ru bonuscake.ru rmetrics.ru stalkoda.com 1jvb.com eventtrace.ru m.stalkoda.com pay.yandex.ru dss.hybrid.ai fp.hybrid.ai emd.hybrid.ai c.stalkoda.com code.cake023.ru code.6i7y3i.ru px.adhigh.net core-renderer-tiles.maps.yandex.net *.koleso.ru dcapi.direct-credit.ru privacy-cs.mail.ru player.kinescope.io vk.ru; connect-src 'self' wss://socket.koleso.ru wss://stream-widget.koleso.ru mc.yandex.ru wss://mc.yandex.ru wss://mc.yandex.com mc.yandex.com www.google.com pay.yandex.ru captcha-api.yandex.ru wss://*.jivo.ru wss://vi-sber1-24.jivo.ru *.jivo.ru *.jivosite.com w-api2.aplaut.io api.mindbox.ru web-static.mindbox.ru personalization-web-stable.mindbox.ru personalization-speedtest.g.mindbox.ru sentry.dev.koleso.ru api.diginetica.net tracking.diginetica.net autocomplete.diginetica.net sort.diginetica.net mod.calltouch.ru px.segmel.com hitcrypt.icyh3e.ru trackerme.org vk.com pixel.adspector.pro bobid-ip.hybrid.ai fpf.hybrid.ai ab-ct.ru *.koleso.ru www.googletagmanager.com top-fwz1.mail.ru translate.googleapis.com log.api-maps.yandex.ru web-static-no-content.g.mindbox.ru; img-src 'self' data: blob: mc.yandex.ru mc.yandex.com yastatic.net vk.com fonts.googleapis.com ads.betweendigital.com *.jivo.ru core-renderer-tiles.maps.yandex.net log.api-maps.yandex.ru api.diginetica.net tracking.diginetica.net autocomplete.diginetica.net top-fwz1.mail.ru personalization-web-stable.mindbox.ru personalization-speedtest.g.mindbox.ru hit.icyh3e.ru bonuscake.ru eventtrace.ru 1jvb.com dss.hybrid.ai www.katalog-diskov.ru *.koleso.ru mc.yandex.by mc.yandex.kz vk.ru; font-src 'self' data: koleso.ru fonts.gstatic.com yastatic.net cdn.diginetica.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com code.jivo.ru get.aplaut.io *.koleso.ru dcapi.direct-credit.ru; media-src 'self' data:; frame-src 'self' blob: m.my.mail.ru smartcaptcha.yandexcloud.net www.google.com omnibox.aplaut.io captcha-api.yandex.ru kinescope.io pay.yandex.ru *.koleso.ru code.jivo.ru; worker-src 'self' blob:; child-src 'self' blob:; report-uri /csp-report; 2
frame-src 'self' https://lvpr.tv https://player.kick.com https://hosted.paysafe.com https://*.pay.com https://buy.moonpay.com https://*.meshconnect.com https://cdn.plaid.com https://*.amazoncognito.com https://*.myprize.us https://*.myprize.com https://*.tequity.ventures https://*.relaxg.com https://*.hacksawgaming.com https://*.bgaming-network.com https://*.evo-games.com https://*.petros04.com https://*.bangspin.com https://*.slotmill.com https://*.vegassoftware.com https://*.mascot.games https://*.netgaming.com https://*.pubinterlayer.online https://*.bgaming-system.com https://*.marbles.xyz https://open.mascot.host https://assets.cdn.systems https://*.konquer.tech https://*.gmslnk001.cfd https://*.gmslnk002.cfd https://static.8127-dg.com https://lajyanayd8.yrolduiyie.net https://mck6861dje.xtsbzfybyl.net https://*.repackz.fun https://*.thndr-cdn.com https://*.aleaplay.com https://*.snapchat.com https://*.facebook.com https://*.adform.net https://*.vibe.co https://www.aerosync.com https://sandbox.aerosync.com https://*.amazonaws.com; report-uri https://devops-web-reporting-api.use1.prod.myprize.io/v1/reports 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://voys.containers.piwik.pro https://voys.piwik.pro https://*.hubspot.com https://*.hubapi.com https://*.hs-scripts.com https://*.hs-banner.com https://*.hs-analytics.net https://*.hsforms.com https://*.hsforms.net https://*.hsappstatic.net https://*.hscollectedforms.net https://*.hubspotfeedback.com https://*.usemessages.com https://policy.app.cookieinformation.com https://static.homerun.co https://www.kiyoh.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.hubspot.com https://*.hubapi.com https://*.hs-scripts.com https://*.hs-banner.com https://*.hs-analytics.net https://*.hsforms.com https://*.hsforms.net https://*.hsappstatic.net https://*.hscollectedforms.net https://*.hubspotfeedback.com https://*.usemessages.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://*.hubspot.com https://*.hubapi.com https://*.hs-scripts.com https://*.hs-banner.com https://*.hs-analytics.net https://*.hsforms.com https://*.hsforms.net https://*.hsappstatic.net https://*.hscollectedforms.net https://*.hubspotfeedback.com https://*.usemessages.com; connect-src 'self' https://voys.containers.piwik.pro https://voys.piwik.pro https://*.hubspot.com https://*.hubapi.com https://*.hs-scripts.com https://*.hs-banner.com https://*.hs-analytics.net https://*.hsforms.com https://*.hsforms.net https://*.hsappstatic.net https://*.hscollectedforms.net https://*.hubspotfeedback.com https://*.usemessages.com https://policy.app.cookieinformation.com https://sentry.voipgrid.nl; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://voys.containers.piwik.pro https://voys.piwik.pro https://*.hubspot.com https://*.hubapi.com https://*.hs-scripts.com https://*.hs-banner.com https://*.hs-analytics.net https://*.hsforms.com https://*.hsforms.net https://*.hsappstatic.net https://*.hscollectedforms.net https://*.hubspotfeedback.com https://*.usemessages.com https://policy.app.cookieinformation.com; media-src 'self' data: blob: https:; worker-src 'self' blob:; manifest-src 'self'; form-action 'self' https://*.hubspot.com https://*.hubapi.com https://*.hs-scripts.com https://*.hs-banner.com https://*.hs-analytics.net https://*.hsforms.com https://*.hsforms.net https://*.hsappstatic.net https://*.hscollectedforms.net https://*.hubspotfeedback.com https://*.usemessages.com; frame-ancestors 'self' https://www.notion.so; base-uri 'self'; object-src 'none' 2
default-src 'self' https://*.wistia.com https://*.wistia.net https://cdn.growthbook.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://gtm.moneybird.nl https://gtm.moneybird.de https://gtm.moneybird.com https://gtm.moneybird.be https://www.google-analytics.com https://www.youtube.com https://maps.googleapis.com https://bat.bing.com https://*.demio.com https://d3s4clg74dg0wr.cloudfront.net https://zapier.com https://www.clarity.ms https://static.homerun.co https://unpkg.com/@googlemaps/ https://euc-widget.freshworks.com https://moneybird.freshdesk.com https://*.wistia.com https://*.wistia.net https://*.intercom.io wss://*.intercom.io https://intercom-sheets.com/ https://*.intercomcdn.eu https://*.intercomcdn.com https://*.intercomassets.eu; style-src 'self' 'unsafe-inline' https://moneybird.nl https://www.moneybird.nl https://www.googletagmanager.com https://gtm.moneybird.nl https://gtm.moneybird.de https://gtm.moneybird.com https://gtm.moneybird.be https://www.gstatic.com https://d3s4clg74dg0wr.cloudfront.net https://fonts.googleapis.com https://*.demio.com https://static.homerun.co https://fonts.bunny.net https://euc-widget.freshworks.com https://moneybird.freshdesk.com https://*.adyen.com/ https://intercom-sheets.com/ https://*.intercomcdn.eu https://*.intercomcdn.com https://*.intercomassets.eu; img-src 'self' https://moneybird.nl https://www.moneybird.nl https://prismic-io.s3.amazonaws.com https://images.prismic.io https://moneybird.cdn.prismic.io https://dl6oytjgv033w.cloudfront.net https://www.gstatic.com https://www.google-analytics.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.googletagmanager.com https://gtm.moneybird.nl https://gtm.moneybird.de https://gtm.moneybird.com https://gtm.moneybird.be https://www.google.nl https://www.google.com https://i.ytimg.com https://maps.gstatic.com https://csi.gstatic.com https://maps.googleapis.com https://bat.bing.com https://zapier.com https://cdn.zapier.com https://euc-widget.freshworks.com https://moneybird.freshdesk.com https://*.wistia.com https://*.wistia.net data: https://*.adyen.com/ https://intercom-sheets.com/ https://*.intercomcdn.eu https://*.intercomcdn.com https://*.intercomassets.eu; object-src 'self' https://www.youtube-nocookie.com https://www.youtube.com; connect-src 'self' https://moneybird.nl https://www.moneybird.nl https://help.moneybird.nl https://bat.bing.com https://gtm.moneybird.nl https://gtm.moneybird.com https://gtm.moneybird.be https://gtm.moneybird.de https://pagead2.googlesyndication.com https://*.google-analytics.com https://www.gstatic.com https://moneybird.com https://www.moneybird.com https://homerun.co https://stats.g.doubleclick.net https://*.demio.com https://*.clarity.ms https://embed.homerun.co https://maps.googleapis.com https://euc-widget.freshworks.com https://moneybird.freshdesk.com https://*.wistia.com https://*.wistia.net https://cdn.growthbook.io https://*.intercom.io wss://*.intercom.io https://*.intercom-messenger.com wss://*.intercom-messenger.com https://intercom-sheets.com/ https://*.intercomcdn.eu https://*.intercomcdn.com https://*.intercomassets.eu; frame-src 'self' https://www.googletagmanager.com https://gtm.moneybird.nl https://gtm.moneybird.de https://gtm.moneybird.com https://gtm.moneybird.be https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://moneybird.clickwebinar.com https://w.soundcloud.com https://euc-widget.freshworks.com https://moneybird.freshdesk.com https://fast.wistia.com https://fast.wistia.net https://intercom-sheets.com/ https://*.intercomcdn.eu https://*.intercomcdn.com https://*.intercomassets.eu; font-src 'self' https://moneybird.nl https://www.moneybird.nl https://fonts.googleapis.com https://fonts.gstatic.com https://fonts.bunny.net https://*.wistia.com data: https://intercom-sheets.com/ https://*.intercomcdn.eu https://*.intercomcdn.com https://*.intercomassets.eu; report-uri https://moneybird.com/csp_report; 2
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.mxpnl.com www.googletagmanager.com cdn.cookiehub.eu www.google-analytics.com cdnjs.cloudflare.com cdn-4.convertexperiments.com www.convert.com leadbooster-chat.pipedrive.com cdn.pdx-1.pipedriveassets.com public.our-trace.com googleads.g.doubleclick.net snap.licdn.com bat.bing.com tracking-api.g2.com; style-src 'self' 'unsafe-inline' www.convert.com cookiehub.net cdn.cookiehub.eu; img-src 'self' data: blob: www.w3.org public.our-trace.com leadbooster-chat.pipedrive.com px.ads.linkedin.com bat.bing.com www.googletagmanager.com www.google.com www.google.com.au; frame-src 'self' www.googletagmanager.com; child-src 'none'; font-src 'self' data: cdn.pdx-1.pipedriveassets.com; connect-src 'self' cdn-4.convertexperiments.com api.our-trace.com pagead2.googlesyndication.com leadbooster-chat.pipedrive.com www.google.com px.ads.linkedin.com api-js.mixpanel.com www.google-analytics.com consent.cookiehub.net snap.licdn.com bat.bing.com tracking-api.g2.com googleads.g.doubleclick.net; manifest-src 'self'; media-src 'self'; object-src 'none'; 2
default-src 'self' https://bounce.com https://*.bounce.com https://usebounce.com https://*.usebounce.com https://*.usebounce.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://bounce.com https://*.bounce.com https://usebounce.com https://*.usebounce.com https://*.usebounce.io https://accounts.google.com https://apis.google.com https://appleid.cdn-apple.com https://bat.bing.com https://cdn.amplitude.com https://cdnjs.cloudflare.com https://connect.facebook.net https://googleads.g.doubleclick.net https://js.intercomcdn.com https://maps.googleapis.com https://static.intercomcdn.com https://vercel.live https://tagmanager.google.com https://widget.intercom.io https://www.google-analytics.com https://www.googleadservices.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com; script-src-elem 'self' 'unsafe-inline' blob: https://bounce.com https://*.bounce.com https://usebounce.com https://*.usebounce.com https://*.usebounce.io https://accounts.google.com https://apis.google.com https://appleid.cdn-apple.com https://bat.bing.com https://cdn.amplitude.com https://cdnjs.cloudflare.com https://connect.facebook.net https://googleads.g.doubleclick.net https://js.intercomcdn.com https://maps.googleapis.com https://static.intercomcdn.com https://vercel.live https://tagmanager.google.com https://widget.intercom.io https://www.google-analytics.com https://www.googleadservices.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://bounce.com https://*.bounce.com https://usebounce.com https://*.usebounce.com https://*.usebounce.io https://fonts.googleapis.com https://www.google.com; style-src-elem 'self' 'unsafe-inline' https://bounce.com https://*.bounce.com https://usebounce.com https://*.usebounce.com https://*.usebounce.io https://fonts.googleapis.com https://www.google.com; img-src 'self' data: blob: https: http: https://bounce.com https://*.bounce.com https://usebounce.com https://*.usebounce.com https://*.usebounce.io; font-src 'self' data: blob: https://bounce.com https://*.bounce.com https://usebounce.com https://*.usebounce.com https://*.usebounce.io https://appdown.pstatic.net https://assets.cdn.bounc3.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com https://fonts.intercomcdn.com https://js.intercomcdn.com; connect-src 'self' data: blob: https: wss:; worker-src 'self' blob: https://bounce.com https://*.bounce.com https://usebounce.com https://*.usebounce.com https://*.usebounce.io; frame-src 'self' https://bounce.com https://*.bounce.com https://usebounce.com https://*.usebounce.com https://*.usebounce.io https://accounts.google.com https://appleid.apple.com https://intercom-sheets.com https://td.doubleclick.net https://vercel.live https://www.google.com https://www.googletagmanager.com https://www.youtube.com https://www.facebook.com; media-src 'self' blob: https://bounce.com https://*.bounce.com https://usebounce.com https://*.usebounce.com https://*.usebounce.io https://js.intercomcdn.com; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com; frame-ancestors 'none'; upgrade-insecure-requests; report-to https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub8e50b3cc2c1956779a374061145a7883&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Amarketing-web; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub8e50b3cc2c1956779a374061145a7883&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Amarketing-web 2
report-uri https://superkassa.ru/next/api/csp-report; 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: blob:; font-src 'self'; connect-src 'self' https://www.google-analytics.com https://clients.bertina.us https://api.indexnow.org; worker-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self' https://clients.bertina.us 2
default-src 'self';style-src 'self' 'unsafe-inline' *.googleapis.com;font-src 'self' data: *.googleapis.com *.gstatic.com *.youtube.com *.vimeo.com;script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' *.doubleclick.net *.googleapis.com *.adtrafficquality.google *.googletagmanager.com *.google-analytics.com *.pendo.io *.google.com *.gstatic.com *.kaltura.com *.kaltura.net *.zoom.us zoom.us *.js.ubembed.com assets.ubembed.com zendesk.com *.zendesk.com *.stripe.com static.zdassets.com *.sentry.io *.linkedin.com *.scriptintel.io;connect-src 'self' *.google-analytics.com *.google.com *.analytics.google.com *.doubleclick.net *.pendo.io *.kaltura.com *.sentry.io *.kaltura.net *.googlesyndication.com *.adtrafficquality.google wss://tsock.us1.twilio.com/v3/wsconnect wss://*.zoom.us *.cloudfront.net *.zoom.us;frame-src 'self' *.twilio.com *.doubleclick.net *.vimeo.com *.youtube.com *.kaltura.com *.kaltura.net *.pendo.io *.googletagmanager.com *.googlesyndication.com *.google *.google.com kitaboo.firsthand.co *.stripe.com static.zdassets.com;frame-ancestors 'none';img-src 'self' data: blob: https:;media-src 'self' data: blob: *.youtube.com *.vimeo.com *.kaltura.com *.kaltura.net;worker-src 'self' blob:;report-uri /api/csp-report 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.cookielaw.org https://privacyportal-free-cdn.onetrust.com https://www.google.com https://www.gstatic.com https://apis.google.com https://maps.googleapis.com https://www.googletagmanager.com https://js.mollie.com https://6ab37bwg4l.kameleoon.io https://js-agent.newrelic.com https://connexys-9566.my.salesforce-sites.com https://chatbot.torfs.be https://cdn.evgnet.com https://cdn.bc0a.com https://*.useinsider.com https://*.noibu.com https://connect.facebook.net https://www.facebook.com https://ct.pinterest.com https://s.pinimg.com https://bat.bing.com https://bat.bing.net https://*.doubleclick.net https://*.g.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://500009753.collect.igodigital.com https://500009757.collect.igodigital.com https://*.criteo.com https://*.cquotient.com https://*.getflowbox.com https://*.contentsquare.net https://app.contentsquare.com https://static.cloudflareinsights.com https://player.vimeo.com blob: https://sstg.torfs.be; connect-src 'self' https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal-fr.onetrust.com https://www.google.com https://maps.googleapis.com https://maps.gstatic.com https://places.googleapis.com https://www.gstatic.com https://apis.google.com https://fonts.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://region1.analytics.google.com https://pagead2.googlesyndication.com https://www.mollie.com https://eu-data.kameleoon.io https://data.kameleoon.net https://api.kameleoon.com https://sdk-config.experimentation.dev https://static.experimentation.dev https://bcqr.api.commercecloud.salesforce.com https://93zqn2xe.api.commercecloud.salesforce.com https://bam.nr-data.net https://cdn.evgnet.com https://torfslnv.germany-2.evergage.com https://ixfd2-api.bc0a.com https://*.useinsider.com https://500009753.collect.igodigital.com https://500009757.collect.igodigital.com https://www.facebook.com https://bat.bing.com https://bat.bing.net https://ct.pinterest.com https://*.doubleclick.net https://*.g.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://*.criteo.com https://*.noibu.com wss://*.noibu.com https://*.cquotient.com https://*.contentsquare.net https://*.contentsquare.com https://*.getflowbox.com https://getflowbox.com https://vimeo.com https://www.schoenentorfs.be https://www.schoenentorfs.nl https://www.torfs.nl https://www.torf.be https://sstg.torfs.be https://chatbot.torfs.be; style-src 'self' 'unsafe-inline' https://fonts.gstatic.com https://fonts.googleapis.com https://privacyportal-free-cdn.onetrust.com https://*.useinsider.com; font-src 'self' data: https://fonts.gstatic.com https://*.useinsider.com https://*.contentsquare.net; img-src 'self' data: blob: https:; media-src 'self' blob: https://cdn.flbx.io; frame-src 'self' https://sstg.torfs.be https://player.vimeo.com https://www.youtube.com https://cloud.emailtorfs.be https://js.mollie.com https://www.google.com https://*.doubleclick.net https://*.g.doubleclick.net https://www.facebook.com https://*.criteo.com https://ct.pinterest.com https://*.useinsider.com; worker-src 'self' blob: https://*.useinsider.com; child-src 'self' blob: https://*.useinsider.com https://*.contentsquare.net; frame-ancestors 'self'; form-action 'self' https://www.facebook.com; report-uri https://www.torfs.be/on/demandware.store/Sites-Torfs-Webshop-BE-Site/nl_BE/CSPReport-Collect 2
font-src bonialconnect.com *.oney.io assets.app.smart-tribune.com cdnjs.cloudflare.com api-gateway.app.smart-tribune.com polyfill-fastly.io data: 'self' 'unsafe-inline'; form-action secure.ogone.com v1-sim.preprod.psp-solutions.com v2-sim.preprod.psp-solutions.com www.facebook.com/tr/ bpcepaymentservices-3ds-vdm.wlp-acs.com bnpp-3ds-vdm.wlp-acs.com assets.app.smart-tribune.com cdnjs.cloudflare.com api-gateway.app.smart-tribune.com polyfill-fastly.io pay.google.com 'self' 'unsafe-inline'; frame-src secure.ogone.com ogone.test.v-psp.com widget.trustpilot.com gum.criteo.com s.salecycle.com https://10766555.fls.doubleclick.net/ static.criteo.net/ www.facebook.com/ magasins.bureau-vallee.fr magasins.bureau-vallee.be magasins.bureau-vallee.nc magasins.bureau-vallee.re magasins.bureau-vallee.gf magasins.bureau-vallee.yt magasins.bureau-vallee.gp magasins.bureau-vallee.sx t.clic2buy.com bpcepaymentservices-3ds-vdm.wlp-acs.com assets.app.smart-tribune.com cdnjs.cloudflare.com api-gateway.app.smart-tribune.com polyfill-fastly.io pay.google.com td.doubleclick.net accounts.google.com 'self' 'unsafe-inline'; img-src bva-preprod-fbi-fr-media-s3.s3.amazonaws.com bva-recette-fbi-fr-media-s3.s3.amazonaws.com bv-prd-fbi-fr-media.s3.eu-west-3.amazonaws.com bv-prd-fbi-fr-media.s3.amazonaws.com d2hlj6xfalexml.cloudfront.net d3n1o8ch79p937.cloudfront.net dxbyzx5id4chj.cloudfront.net bonialconnect.com content-media.bonial.biz rum-metrics.quanta.io bat.bing.com ib.adnxs.com www.facebook.com cm.g.doubleclick.net gum.criteo.com dis.criteo.com sync-t1.taboola.com x.bidswitch.net r.casalemedia.com ad.360yield.com contextual.media.net sync.outbrain.com pixel.rubiconproject.com match.sharethrough.com rtb-csync.smartadserver.com criteo-sync.teads.tv eb2.3lift.com ups.analytics.yahoo.com e1.emxdgt.com cm.adform.net visitor.omnitagjs.com id5-sync.com matching.ivitrack.com exchange.mediavine.com simage2.pubmatic.com criteo-partners.tremorhub.com ad.yieldlab.net sync-criteo.ads.yieldmo.com beacon.krxd.net s.thebrighttag.com www.bureau-vallee.fr www.google.fr bureauvallee-c6i.colop.com *.oney.io assets.app.smart-tribune.com cdnjs.cloudflare.com api-gateway.app.smart-tribune.com polyfill-fastly.io www.gstatic.com jadserve.postrelease.com ad.doubleclick.net jadserve.postrelease.com public-prod-dspcookiematching.dmxleo.com data: 'self' 'unsafe-inline'; script-src www.googletagmanager.com magasins.bureau-vallee.fr widget.trustpilot.com bonialconnect.com s3.amazonaws.com maps.googleapis.com/ d16fk4ms6rqz1v.cloudfront.net bat.bing.com appstatic.quanta.io try.abtasty.com acdn.adnxs.com static.criteo.net sslwidget.criteo.com connect.facebook.net cdn.jsdelivr.net static.target2sell.com js-agent.newrelic.com/ bam.eu01.nr-data.net *.oney.io magasins.bureau-vallee.be magasins.bureau-vallee.nc magasins.bureau-vallee.re magasins.bureau-vallee.gf magasins.bureau-vallee.yt magasins.bureau-vallee.gp magasins.bureau-vallee.sx rs.clic2buy.com assets.app.smart-tribune.com cdnjs.cloudflare.com api-gateway.app.smart-tribune.com polyfill-fastly.io pagead2.googlesyndication.com tpc.googlesyndication.com *.algolia.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src assets.app.smart-tribune.com cdnjs.cloudflare.com api-gateway.app.smart-tribune.com polyfill-fastly.io 'self' 'unsafe-inline'; manifest-src pay.google.com 'self' 'unsafe-inline'; connect-src s3.eu-west-1.amazonaws.com www.bonialserviceswidget.de maps.googleapis.com trackingapi.bonial.fr bonialconnect.com dcinfos-cache.abtasty.com ariane.abtasty.com c.salecycle.com api.ipify.org google.com i.salecycle.com wss://ws.salecycle.com/ region1.analytics.google.com www.facebook.com serv-api.target2sell.com bat.bing.com/actionp/ rum-metrics.quanta.io reco.target2sell.com bam.eu01.nr-data.net www.google.fr *.oney.io autocomplete.geocoder.api.here.com assets.app.smart-tribune.com cdnjs.cloudflare.com api-gateway.app.smart-tribune.com polyfill-fastly.io try.abtasty.com pagead2.googlesyndication.com measurement-api.criteo.com 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; default-src https://epaync.nc/vads-payment/ https://epaync.nc/api-payment/ https://epaync.nc/static/ *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.netonnet.com https://*.netonnet.se https://*.netonnet.no https://*.googletagmanager.com https://*.google-analytics.com https://*.g.doubleclick.net https://*.google.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://chat.kindlycdn.com https://cdn.loadbee.com https://scripts.clarity.ms https://www.clarity.ms https://mycliplister.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; media-src 'self' blob: https://assets.netonnet.com https://mycliplister.com https://*.mycliplister.com; font-src 'self' data: https://fonts.gstatic.com https://chat.kindlycdn.com; connect-src 'self' blob: https: wss:; frame-src 'self' https:; worker-src 'self' blob:; manifest-src 'self'; report-uri /api/csp-report 2
default-src 'self' *.adsrvr.org *.google.com *.doubleclick.net *.optimizely.com *.facebook.com *.cookielaw.org *.clarity.ms apps.usw2.pure.cloud www.googletagmanager.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com cdn.jsdelivr.net code.jquery.com embed.signalintent.com *.optimizely.com cdn.segment.com *.googleapis.com www.googletagmanager.com www.google.com www.gstatic.com *.btttag.com *.bing.com *.app-us1.com *.adsrvr.org *.doubleclick.net *.cookielaw.org www.google-analytics.com *.mypurecloud.com *.googleadservices.com *.pure.cloud *.aptrinsic.com *.bootstrapcdn.com js.monitor.azure.com *.facebook.net *.facebook.com trackcmp.net extractable-finalytics-storage.s3.us-west-2.amazonaws.com extractable-finalytics-stable.s3.us-west-2.amazonaws.com *.cloudfront.net snap.licdn.com www.redditstatic.com;style-src 'self' 'unsafe-inline' use.fontawesome.com use.typekit.net embed.signalintent.com p.typekit.net *.mypurecloud.com *.googleapis.com *.aptrinsic.com *.jsdelivr.net *.bootstrapcdn.com extractable-finalytics-storage.s3.us-west-2.amazonaws.com extractable-finalytics-stable.s3.us-west-2.amazonaws.com *.cloudfront.net;img-src 'self' data: bat.bing.com *.google.com www.google-analytics.com content-cdn.com *.gstatic.com *.googleapis.com www.googletagmanager.com *.facebook.net *.facebook.com *.adsrrvr.org *.doubleclick.net *.yahoo.com *.cookielaw.org *.googlesyndication.com *.ads.linkedin.com embed.signalintent.com insight.adsrvr.org ib.adnxs.com *.reddit.com;font-src 'self' use.fontawesome.com embed.signalintent.com use.typekit.net *.mypurecloud.com *.gstatic.com *.googleapis.com *.cloudfront.net data:;connect-src 'self' ws: wss: *.googlesyndication.com signal-intent-production-back.herokuapp.com cdn.segment.com *.optimizely.com *.cookielaw.org calc-backend-prod.herokuapp.com d.btttag.com *.googleapis.com www.google-analytics.com api.segment.io *.doubleclick.net *.alaskausa.org *.bing.com *.aptrinsic.com *.episerver.net *.visualstudio.com *.google.com *.facebook.com finalyticsdata.com devfinalyticsdata.com stgfinalyticsdata.com px.ads.linkedin.com api-cdn.usw2.pure.cloud pixel-config.reddit.com www.redditstatic.com;worker-src 'self' blob:;block-all-mixed-content 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https: data:; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self' 2
default-src 'self' 'unsafe-inline' blob: data: https:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' http://*.quantserve.com https: https://*.doubleclick.net https://*.teads.tv; worker-src 'self' blob:; connect-src 'self' https: wss:; img-src 'self' https:; frame-src 'self' http://*.trendmicro.com https:; report-to csp-endpoint 2
default-src 'self';  script-src 'self' https://js.stripe.com https://www.googletagmanager.com https://widget.usepylon.com https://plausible.io https://www.google-analytics.com https://js.appetize.io;  style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://widget.usepylon.com;  img-src 'self' data: https://codemagic.io https://widget.usepylon.com https://px.ads.linkedin.com https://storage.googleapis.com https://avatars.githubusercontent.com https://avatars.usepylon.com https://www.googletagmanager.com;  font-src 'self' data: https://fonts.gstatic.com https://widget.usepylon.com https://codemagic.io;  connect-src 'self' wss://ws2.codemagic.io https://ws2.codemagic.io https://api.codemagic.io https://status.codemagic.io https://api.stripe.com https://www.google-analytics.com https://api.rollbar.com https://widget.usepylon.com https://apichatwidget.usepylon.com https://plausible.io https://api.hsforms.com https://*.appetize.io wss://*.appetize.io;  frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://www.youtube-nocookie.com https://*.appetize.io;  base-uri 'self';  object-src 'none';  frame-ancestors 'self'; 2
default-src 'self';  script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval'   *.hubspot.com *.cookielaw.org *.cdntwrk.com *.wistia.com *.wistia.net *.q2.com   *.sentry-cdn.com *.clarity.ms *.google.com *.googletagmanager.com *.googleapis.com   *.googleadservices.com *.gstatic.com *.hsappstatic.com *.hsappstatic.net *.hubspot.net   *.hs-banner.com *.hsadspixel.net *.hs-analytics.com *.hs-analytics.net *.licdn.com   *.marketo.net *.marketo.com *.zoominfo.com *.bizible.com *.6sc.co *.qualified.com   *.segment.com *.bugcrowd.com *.bugcrowdusercontent.com bugcrowd.com   *.jsdeliver.net *.jsdelivr.net *.cloudflare.com *.doubleclick.net *.youtube.com   *.hubspotusercontent-na1.net *.pathfactory.com *.zuddl.com   8ab0a26cb0027939bcf5-49c99c3c0c9c98b3365b710757036e1b.ssl.cf5.rackcdn.com   *.crazyegg.com *.callrail.com *.linkedin.com *.facebook.net *.twitter.com;  style-src 'self' *.q2.com 'report-sample' 'unsafe-inline'   *.cdntwrk.com *.googleapis.com *.hsappstatic.net *.hubspot.net   *.jsdeliver.net *.jsdelivr.net *.marketo.com   7044196.fs1.hubspotusercontent-na1.net 7044196.fs2.hubspotusercontent-na1.net   *.hubspotusercontent-na1.net *.pathfactory.com *.googletagmanager.com   *.zuddl.com *.qualified.com;  object-src 'none';  base-uri 'self';  connect-src 'self'   *.mktoresp.com *.hubspotusercontent-na1.net *.google.com *.hubspot.com   *.hs-banner.com *.onetrust.com *.cookielaw.org *.wistia.com   *.embed-cloudfront.wistia.com *.wistia.net *.6sc.co *.6sense.com   *.qualified.com wss://*.qualified.com *.segment.com *.segment.io *.linkedin.com   *.google-analytics.com *.clarity.ms *.hubapi.com *.doubleclick.com   https://stats.g.doubleclick.net *.zoominfo.com *.adnxs.com *.litix.io   *.marketo.com *.doubleclick.net *.youtube.com *.pathfactory.com   *.zuddl.com api.prod.zuddl.com *.crazyegg.com *.gonorth.io *.callrail.com   *.googleadservices.com *.sentry-cdn.com *.hsappstatic.net;  font-src 'self' data:   *.gstatic.com *.cdntwrk.com *.wistia.com *.wistia.net   7044196.fs1.hubspotusercontent-na1.net *.pathfactory.com *.zuddl.com *.hsappstatic.net;  frame-src 'self' *.q2.com *.qualified.com *.doubleclick.net *.wistia.net *.gstatic.com   *.google.com *.googletagmanager.com *.bugcrowd.com bugcrowd.com *.hubspotvideo.com   *.marketo.com *.youtube.com *.pathfactory.com *.uberflip.com *.zuddl.com *.on24.com   *.libsyn.com *.megaphone.fm *.twitter.com;  img-src 'self' *.q2.com data:   *.hubspotusercontent-na1.net *.hsappstatic.net *.6sc.co *.cdntwrk.com   *.cookielaw.org *.wistia.com *.hsforms.com *.linkedin.com *.hubspot.com *.hubspot.net   *.bizible.com *.cloudinary.com *.clarity.ms *.bing.com *.googletagmanager.com   *.placeholder.com *.marketo.com googleads.g.doubleclick.net *.doubleclick.net   *.google.com *.youtube.com *.hubspotusercontent40.net *.pathfactory.com   *.bizibly.com *.gstatic.com *.zuddl.com *.imgix.net *.wistia.net *.qualified.com;  manifest-src 'self';  media-src 'self' *.q2.com   7044196.fs1.hubspotusercontent-na1.net 7044196.fs2.hubspotusercontent-na1.net   7044196.fs1.hubspotusercontent-eu1.net 7044196.fs2.hubspotusercontent-eu1.net   *.marketo.com blob: *.doubleclick.net *.youtube.com *.pathfactory.com;  form-action 'self'   *.marketo.com *.mktoweb.com *.zuddl.com *.callrail.com *.googleadservices.com   *.qualified.com;  frame-ancestors 'self' *.q2.com *.pathfactory.com *.lookbookhq.com https://zuddl.com https://*.zuddl.com;  report-to https://343747560e392f7a31ae9a0247c09302.report-uri.com/r/d/csp/reportOnly 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://lh3.googleusercontent.com https://www.googletagmanager.com https://www.google-analytics.com; font-src 'self'; connect-src 'self' https://*.google-analytics.com https://www.googletagmanager.com; frame-src https://www.googletagmanager.com; object-src 'none'; base-uri 'self' 2
default-src 'self' http: filesystem: https://*-c2es.pantheonsite.io/ https://c2es.ddev.site https://*.addthis.com https://*.youtube.com; script-src 'unsafe-inline' 'unsafe-eval' http: filesystem: https://*.google.com https://fonts.googleapis.com https://ajax.googleapis.com https://jnn-pa.googleapis.com https://*.googletagmanager.com https://*.youtube.com https://*.addthis.com https://*.google-analytics.com https://*.ytimg.com https://*.moatads.com https://*.doubleclick.net https://*.addthisedge.com https://cdnjs.cloudflare.com; style-src 'unsafe-inline' http: filesystem: https://*.google.com https://fonts.googleapis.com https://ajax.googleapis.com https://jnn-pa.googleapis.com https://*.youtube.com; img-src 'self' http: data: filesystem: https://*.ytimg.com https://*.ggpht.com https://*.gstatic.com https://*.google-analytics.com; connect-src 'self' filesystem: https://*.google-analytics.com https://*.bookingbug.com https://geolocation.onetrust.com https://*.cookielaw.org https://fonts.googleapis.com https://ajax.googleapis.com https://jnn-pa.googleapis.com *.addtoany.com; font-src 'self' data: filesystem: fonts.gstatic.com use.typekit.net use.fontawesome.com bespoke.bookingbug.com; media-src 'self' filesystem: *.youtube.com *.vimeo.com *.akamaized.net; report-uri 'self'; child-src 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'self'; frame-src 'self'; worker-src 'self'; manifest-src 'self'; navigate-to 'self'; prefetch-src 'self'; upgrade-insecure-requests 2
connect-src 'self' data: *.pattersoncompanies.dev https://ad.doubleclick.net https://analytics.google.com https://bf23181kbe.bf.dynatrace.com https://consent.trustarc.com https://cta-service-cms2.hubspot.com https://d.monetate.net https://edge.api.brightcove.com https://forms.hscollectedforms.net https://forms.hsforms.com https://house-fastly-signed-us-east-1-prod.brightcovecdn.com https://ixfd2-api.bc0a.com https://logx.optimizely.com https://manifest.prod.boltdns.net https://px.ads.linkedin.com https://rs.fullstory.com https://rules.atgsvcs.com https://siteintercept.qualtrics.com https://tags.srv.stackadapt.com https://www.google.com; default-src 'self' blob: data: ; font-src 'self' data: https://ajax.aspnetcdn.com https://fonts.gstatic.com https://consent.trustarc.com https://use.typekit.net; frame-src https://a9189275809.cdn.optimizely.com https://pixel.mathtag.com https://www.google.com; img-src 'self' data: *.pattersoncompanies.dev https://analytics.twitter.com https://cf-images.us-east-1.prod.boltdns.net https://cdn.cloud.pattersoncompanies.com https://cdn.cloud.ecom-dev.pattersoncompanies.dev https://consent.trustarc.com https://dev-microservices-gw.corp-internal.ecom-dev.pattersoncompanies.dev https://forms-na1.hsforms.com https://forms.hsforms.com https://gw.pattersoncompanies.com https://metrics.brightcove.com https://perf-na1.hsforms.com https://px.ads.linkedin.com https://r.turn.com https://t.co https://track.hubspot.com https://www.facebook.com https://www.google.com https://www.googletagmanager.com; media-src 'self' blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' *.pattersoncompanies.dev https://*.siteintercept.qualtrics.com https://app.convertful.com https://bat.bing.com https://billpay.pattersonvet.com https://capi-automation.s3.us-east-2.amazonaws.com https://cdn.bc0a.com https://cdn.callrail.com https://cdn.cloud.ecom-dev.pattersoncompanies.dev https://cdn.cloud.pattersoncompanies.com https://cdn.optimizely.com https://connect.facebook.net https://consent.trustarc.com https://content.pattersonvet.com https://d.monetate.net https://edge.fullstory.com https://f.monetate.net https://fonts.googleapis.com https://googleads.g.doubleclick.net https://gw.pattersoncompanies.com https://js-cdn.dynatrace.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hscollectedforms.net https://js.hsforms.net https://js.hs-scripts.com https://js.hubspot.com https://p.typekit.net https://pattersonsupport--tst1.custhelp.com https://pattersonsupport--tst1.widget.custhelp.com https://pixel.mathtag.com https://players.brightcove.net https://r.turn.com https://rs.fullstory.com https://se.monetate.net https://siteintercept.qualtrics.com https://snap.licdn.com https://static.ads-twitter.com https://static.atgsvcs.com https://tags.srv.stackadapt.com https://use.typekit.net https://vjs.zencdn.net https://vsvipac01.rightnowtech.com https://www.clickcease.com https://www.google.ca https://www.google.com https://www.googleadservices.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' ; style-src-elem 'self' 'unsafe-inline' https://cdn.cloud.pattersoncompanies.com https://cdn.cloud.ecom-dev.pattersoncompanies.dev https://fonts.googleapis.com https://p.typekit.net https://tags.srv.stackadapt.com https://use.typekit.net; worker-src 'self' blob:; 2
default-src 'self' data:; img-src 'self' data: *.hva.nl *.amsterdamuas.com imgsct.cookiebot.com; script-src 'unsafe-eval' 'unsafe-inline' 'self' consent.cookiebot.com consentcdn.cookiebot.com consent.cookiebot.eu consentcdn.cookiebot.eu www.googletagmanager.com www.google.com www.google-analytics.com; script-src-elem 'unsafe-inline' 'self' consent.cookiebot.com consentcdn.cookiebot.com consent.cookiebot.eu consentcdn.cookiebot.eu www.googletagmanager.com www.google.com www.google-analytics.com; object-src 'self'; base-uri 'none'; frame-ancestors 'self'; frame-src 'self' consent.cookiebot.com consentcdn.cookiebot.com consent.cookiebot.eu consentcdn.cookiebot.eu www.google.com; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.gstatic.com; connect-src 'self' *.hva.nl *.amsterdamuas.com www.google-analytics.com www.googletagmanager.com consent.cookiebot.com consentcdn.cookiebot.com consent.cookiebot.eu consentcdn.cookiebot.eu 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https: data:; connect-src 'self' https:; 2
frame-ancestors www.gstatic.com https://devmi1.alb.com.co https://dev.alb.com.co *.paypal.com *.movilpt.co; font-src fonts.googleapis.com fonts.gstatic.com *.fontawesome.com https://app.alb.com.co *.amazonaws.com *.addi.com *.yieldmo.com *.casalemedia.com *.newrelic.com *.newrelic.co *.nr-data.net *.aralego.net *.aralego.com *.mediavine.com *.stickyadstv.com *.adgrx.com *.bluekai.com *.revcontent.com *.pubmatic.com *.outbrain.com *.postrelease.com *.liadm.com *.bidswitch.net *.emxdgt.com *.crcom.gov.co *.omappapi.com *.googlesyndication.com *.getblue.io *.pangle-ads.com *.yahoo.net *.movilpt.co https://devmi1.alb.com.co *.criteo.com *.clmbtech.com *.decidata.tv *.gfl85trk.com *.pingdom.net *.tremorhub.com *.smaato.net *.sharethrough.com *.360yield.com *.omnitagjs.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.rubiconproject.com *.media.net *.adnxs.com *.paypal.com *.doubleclick.net *.192.168.232.4:7105 *.avantel.co *.openstreetmap.org data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com https://www.facebook.com *.amazonaws.com *.addi.com *.yieldmo.com *.casalemedia.com *.newrelic.com *.newrelic.co *.nr-data.net *.aralego.net *.aralego.com *.mediavine.com *.stickyadstv.com *.adgrx.com *.bluekai.com *.revcontent.com *.pubmatic.com *.outbrain.com *.postrelease.com *.liadm.com *.bidswitch.net *.emxdgt.com *.crcom.gov.co *.omappapi.com *.googlesyndication.com *.getblue.io *.pangle-ads.com *.yahoo.net *.movilpt.co https://devmi1.alb.com.co *.criteo.com *.clmbtech.com *.decidata.tv *.gfl85trk.com *.pingdom.net *.tremorhub.com *.smaato.net *.sharethrough.com *.360yield.com *.omnitagjs.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.rubiconproject.com *.media.net *.adnxs.com *.doubleclick.net *.192.168.232.4:7105 *.avantel.co *.openstreetmap.org 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com www.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mercadolibre.com https://www.googletagmanager.com https://api.retargetly.com https://*.hotjar.com https://*.doubleclick.net https://www.facebook.com https://resources-rt.idx.lat/ *.amazonaws.com *.addi.com *.yieldmo.com *.casalemedia.com *.newrelic.com *.newrelic.co *.nr-data.net *.aralego.net *.aralego.com *.mediavine.com *.stickyadstv.com *.adgrx.com *.bluekai.com *.revcontent.com *.pubmatic.com *.outbrain.com *.postrelease.com *.liadm.com *.bidswitch.net *.emxdgt.com *.crcom.gov.co *.omappapi.com *.googlesyndication.com *.getblue.io *.pangle-ads.com *.yahoo.net *.movilpt.co https://devmi1.alb.com.co *.criteo.com *.clmbtech.com *.decidata.tv *.gfl85trk.com *.pingdom.net *.tremorhub.com *.smaato.net *.sharethrough.com *.360yield.com *.omnitagjs.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.rubiconproject.com *.media.net *.adnxs.com *.doubleclick.net *.192.168.232.4:7105 *.avantel.co *.openstreetmap.org 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com maps.googleapis.com maps.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar *.mercadolivre.com https://*.bing.com https://www.facebook.com https://www.google.com https://www.google.com.mx https://*.clarity.ms https://www.google.com.co https://analytics.twitter.com https://app.alb.com.co https://dev.placetopay.com https://t.co https://checkout-co.placetopay.dev *.amazonaws.com *.addi.com *.yieldmo.com *.casalemedia.com *.newrelic.com *.newrelic.co *.nr-data.net *.aralego.net *.aralego.com *.mediavine.com *.stickyadstv.com *.adgrx.com *.bluekai.com *.revcontent.com *.pubmatic.com *.outbrain.com *.postrelease.com *.liadm.com *.bidswitch.net *.emxdgt.com *.crcom.gov.co *.omappapi.com *.googlesyndication.com *.getblue.io *.pangle-ads.com *.yahoo.net *.movilpt.co https://devmi1.alb.com.co *.criteo.com *.clmbtech.com *.decidata.tv *.gfl85trk.com *.pingdom.net *.tremorhub.com *.smaato.net *.sharethrough.com *.360yield.com *.omnitagjs.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.rubiconproject.com *.media.net *.adnxs.com *.doubleclick.net *.192.168.232.4:7105 *.avantel.co *.openstreetmap.org data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com maps.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ maps.gstatic.com fonts.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mlstatic.com *.mercadopago.com https://widget.manychat.com https://www.google.com https://api.retargetly.com https://*.clarity.ms https://connect.facebook.net https://bat.bing.com https://analytics.tiktok.com https://d12zyq17vm1xwx.cloudfront.net https://*.hotjar.com https://static.ads-twitter.com https://script.crazyegg.com https://resources-rt.idx.lat *.amazonaws.com *.addi.com *.yieldmo.com *.casalemedia.com *.newrelic.com *.newrelic.co *.nr-data.net *.aralego.net *.aralego.com *.mediavine.com *.stickyadstv.com *.adgrx.com *.bluekai.com *.revcontent.com *.pubmatic.com *.outbrain.com *.postrelease.com *.liadm.com *.bidswitch.net *.emxdgt.com *.crcom.gov.co *.omappapi.com *.googlesyndication.com *.getblue.io *.pangle-ads.com *.yahoo.net *.movilpt.co https://devmi1.alb.com.co *.criteo.com *.clmbtech.com *.decidata.tv *.gfl85trk.com *.pingdom.net *.tremorhub.com *.smaato.net *.sharethrough.com *.360yield.com *.omnitagjs.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.rubiconproject.com *.media.net *.adnxs.com *.doubleclick.net *.192.168.232.4:7105 *.avantel.co *.openstreetmap.org 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline fonts.googleapis.com *.fontawesome.com https://app.alb.com.co *.amazonaws.com *.addi.com *.yieldmo.com *.casalemedia.com *.newrelic.com *.newrelic.co *.nr-data.net *.aralego.net *.aralego.com *.mediavine.com *.stickyadstv.com *.adgrx.com *.bluekai.com *.revcontent.com *.pubmatic.com *.outbrain.com *.postrelease.com *.liadm.com *.bidswitch.net *.emxdgt.com *.crcom.gov.co *.omappapi.com *.googlesyndication.com *.getblue.io *.pangle-ads.com *.yahoo.net *.movilpt.co https://devmi1.alb.com.co *.criteo.com *.clmbtech.com *.decidata.tv *.gfl85trk.com *.pingdom.net *.tremorhub.com *.smaato.net *.sharethrough.com *.360yield.com *.omnitagjs.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.rubiconproject.com *.media.net *.adnxs.com *.paypal.com *.doubleclick.net *.192.168.232.4:7105 *.avantel.co *.openstreetmap.org 'self' 'unsafe-inline'; object-src *.amazonaws.com *.addi.com *.yieldmo.com *.casalemedia.com *.newrelic.com *.newrelic.co *.nr-data.net *.aralego.net *.aralego.com *.mediavine.com *.stickyadstv.com *.adgrx.com *.bluekai.com *.revcontent.com *.pubmatic.com *.outbrain.com *.postrelease.com *.liadm.com *.bidswitch.net *.emxdgt.com *.crcom.gov.co *.omappapi.com *.googlesyndication.com *.getblue.io *.pangle-ads.com *.yahoo.net *.movilpt.co https://devmi1.alb.com.co *.criteo.com *.clmbtech.com *.decidata.tv *.gfl85trk.com *.pingdom.net *.tremorhub.com *.smaato.net *.sharethrough.com *.360yield.com *.omnitagjs.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.rubiconproject.com *.media.net *.adnxs.com *.paypal.com *.doubleclick.net *.192.168.232.4:7105 *.avantel.co *.openstreetmap.org 'self' 'unsafe-inline'; media-src *.adobe.com *.amazonaws.com *.addi.com *.yieldmo.com *.casalemedia.com *.newrelic.com *.newrelic.co *.nr-data.net *.aralego.net *.aralego.com *.mediavine.com *.stickyadstv.com *.adgrx.com *.bluekai.com *.revcontent.com *.pubmatic.com *.outbrain.com *.postrelease.com *.liadm.com *.bidswitch.net *.emxdgt.com *.crcom.gov.co *.omappapi.com *.googlesyndication.com *.getblue.io *.pangle-ads.com *.yahoo.net *.movilpt.co https://devmi1.alb.com.co *.criteo.com *.clmbtech.com *.decidata.tv *.gfl85trk.com *.pingdom.net *.tremorhub.com *.smaato.net *.sharethrough.com *.360yield.com *.omnitagjs.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.rubiconproject.com *.media.net *.adnxs.com *.paypal.com *.doubleclick.net *.192.168.232.4:7105 *.avantel.co *.openstreetmap.org 'self' 'unsafe-inline'; manifest-src *.amazonaws.com *.addi.com *.yieldmo.com *.casalemedia.com *.newrelic.com *.newrelic.co *.nr-data.net *.aralego.net *.aralego.com *.mediavine.com *.stickyadstv.com *.adgrx.com *.bluekai.com *.revcontent.com *.pubmatic.com *.outbrain.com *.postrelease.com *.liadm.com *.bidswitch.net *.emxdgt.com *.crcom.gov.co *.omappapi.com *.googlesyndication.com *.getblue.io *.pangle-ads.com *.yahoo.net *.movilpt.co https://devmi1.alb.com.co *.criteo.com *.clmbtech.com *.decidata.tv *.gfl85trk.com *.pingdom.net *.tremorhub.com *.smaato.net *.sharethrough.com *.360yield.com *.omnitagjs.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.rubiconproject.com *.media.net *.adnxs.com *.paypal.com *.doubleclick.net *.192.168.232.4:7105 *.avantel.co *.openstreetmap.org 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mercadopago.com *.mercadolibre.com https://www.google-analytics.com https://stats.g.doubleclick.net https://notifications-icommkt.com https://track-icommkt.com https://analytics.tiktok.com https://*.clarity.ms https://analytics.google.com https://script.crazyegg.com https://rt.idx.lat *.amazonaws.com *.addi.com *.yieldmo.com *.casalemedia.com *.newrelic.com *.newrelic.co *.nr-data.net *.aralego.net *.aralego.com *.mediavine.com *.stickyadstv.com *.adgrx.com *.bluekai.com *.revcontent.com *.pubmatic.com *.outbrain.com *.postrelease.com *.liadm.com *.bidswitch.net *.emxdgt.com *.crcom.gov.co *.omappapi.com *.googlesyndication.com *.getblue.io *.pangle-ads.com *.yahoo.net *.movilpt.co https://devmi1.alb.com.co *.criteo.com *.clmbtech.com *.decidata.tv *.gfl85trk.com *.pingdom.net *.tremorhub.com *.smaato.net *.sharethrough.com *.360yield.com *.omnitagjs.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.rubiconproject.com *.media.net *.adnxs.com *.doubleclick.net *.192.168.232.4:7105 *.avantel.co *.openstreetmap.org 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com *.amazonaws.com *.addi.com *.yieldmo.com *.casalemedia.com *.newrelic.com *.newrelic.co *.nr-data.net *.aralego.net *.aralego.com *.mediavine.com *.stickyadstv.com *.adgrx.com *.bluekai.com *.revcontent.com *.pubmatic.com *.outbrain.com *.postrelease.com *.liadm.com *.bidswitch.net *.emxdgt.com *.crcom.gov.co *.omappapi.com *.googlesyndication.com *.getblue.io *.pangle-ads.com *.yahoo.net *.movilpt.co https://devmi1.alb.com.co *.criteo.com *.clmbtech.com *.decidata.tv *.gfl85trk.com *.pingdom.net *.tremorhub.com *.smaato.net *.sharethrough.com *.360yield.com *.omnitagjs.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.rubiconproject.com *.media.net *.adnxs.com *.doubleclick.net *.192.168.232.4:7105 *.avantel.co *.openstreetmap.org http: https: blob: 'self' 'unsafe-inline'; default-src https://*.api.comapi.com https://wom-co.convertia.com *.amazonaws.com *.addi.com *.yieldmo.com *.casalemedia.com *.newrelic.com *.newrelic.co *.nr-data.net *.aralego.net *.aralego.com *.mediavine.com *.stickyadstv.com *.adgrx.com *.bluekai.com *.revcontent.com *.pubmatic.com *.outbrain.com *.postrelease.com *.liadm.com *.bidswitch.net *.emxdgt.com *.crcom.gov.co *.omappapi.com *.googlesyndication.com *.getblue.io *.pangle-ads.com *.yahoo.net *.movilpt.co https://devmi1.alb.com.co *.criteo.com *.clmbtech.com *.decidata.tv *.gfl85trk.com *.pingdom.net *.tremorhub.com *.smaato.net *.sharethrough.com *.360yield.com *.omnitagjs.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.rubiconproject.com *.media.net *.adnxs.com *.paypal.com *.doubleclick.net *.192.168.232.4:7105 *.avantel.co *.openstreetmap.org 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.amazonaws.com *.addi.com *.yieldmo.com *.casalemedia.com *.newrelic.com *.newrelic.co *.nr-data.net *.aralego.net *.aralego.com *.mediavine.com *.stickyadstv.com *.adgrx.com *.bluekai.com *.revcontent.com *.pubmatic.com *.outbrain.com *.postrelease.com *.liadm.com *.bidswitch.net *.emxdgt.com *.crcom.gov.co *.omappapi.com *.googlesyndication.com *.getblue.io *.pangle-ads.com *.yahoo.net *.movilpt.co https://devmi1.alb.com.co *.criteo.com *.clmbtech.com *.decidata.tv *.gfl85trk.com *.pingdom.net *.tremorhub.com *.smaato.net *.sharethrough.com *.360yield.com *.omnitagjs.com *.yahoo.com *.3lift.com *.teads.tv *.taboola.com *.smartadserver.com *.rubiconproject.com *.media.net *.adnxs.com *.paypal.com *.doubleclick.net *.192.168.232.4:7105 *.avantel.co *.openstreetmap.org 'self' 'unsafe-inline'; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.klevu.com *.ksearchnet.com *.cloudflare.com *.googleapis.com *.zopim.com *.tawk.to *.jsdelivr.net media.flixfacts.com 'unsafe-inline' data: *.yotpo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com *.facebook.com webchat.jdg.co.za *.jdg.co.za *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.hana.ondemand.com 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com maps.googleapis.com chart.googleapis.com oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com *.nosto.com *.issuu.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.criteo.net *.criteo.com *.addthis.com *.facebook.com webchat.jdg.co.za *.jdg.co.za *.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com 'unsafe-inline' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.trackedlink.net *.klevu.com *.ksearchnet.com oppwa.com *.oppwa.com *.peachpayments.com *.eu-west-1.amazonaws.com mrpg.scene7.com cdn.media.amplience.net *.cloudflare.com *.google.com *.google.lv *.google.co.za *.google.com.na *.google.na *.zopim.com *.nosto.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.zopim.io *.sfdr.co sfdr.co *.tawk.to tawk.link *.tawk.link *.addthis.com *.jsdelivr.net *.facebook.com *.azurewebsites.net maps.googleapis.com app.mobicredwidget.co.za amcglobal.sc.omtrdc.net media.flixcar.com rt.flix360.com assets.secure.checkout.visa.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com js.klevu.com *.ksearchnet.com maps.googleapis.com chart.googleapis.com *.oppwa.com oppwa.com *.peachpayments.com *.zopim.com *.videoly.co sfdr.co *.cnetcontent.com *.cloudfront.net *.klevu.com *.google.lv *.google.co.za *.google.com.na *.google.na *.cloudflare.com *.cloudflareinsights.com *.nosto.com *.hotjar.com *.googletagmanager.com *.criteo.net *.criteo.com *.sfdr.co *.tawk.to *.tawk.link *.jsdelivr.net *.addthis.com *.addthisedge.com *.moatads.com *.mouseflow.com *.facebook.com *.what3words.com commerce.adobedtm.com magento-recs-sdk.adobe.net static.zdassets.com app.mobicredwidget.co.za www.gstatic.com connect.facebook.net bam.nr-data.net js.testfreaks.com media.flixfacts.com media.flixcar.com security-hub.vaimo.network *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klevu.com *.ksearchnet.com oppwa.com *.oppwa.com *.peachpayments.com *.cloudflare.com *.googleapis.com *.jsdelivr.net www.gstatic.com media.flixcar.com 'unsafe-inline' data: *.yotpo.com https://js.klevu.com 'self' 'unsafe-inline'; object-src maps.googleapis.com chart.googleapis.com 'self' 'unsafe-inline'; media-src *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klevu.com *.ksearchnet.com maps.googleapis.com chart.googleapis.com oppwa.com *.oppwa.com *.peachpayments.com *.testfreaks.com *.nosto.com *.hotjar.io *.hotjar.com *.doubleclick.net *.zendesk.com *.tawk.to wss://*.tawk.to *.tawk.link *.addthis.com *.addthisedge.com *.what3words.com *.googleapis.com vsb111.tawk.to ekr.zdassets.com api.magento.com commerce.adobedc.net app.mobicredwidget.co.za wss://widget-mediator.zopim.com bam.nr-data.net *.googletagmanager.com security-hub.vaimo.network 'unsafe-eval' data: *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://security-hub.vaimo.network/public/api/content-security-policy.php; report-to report-endpoint; 2
frame-ancestors 'self' https://bioland.we.network/ https://my.dlv.de/ 2
font-src 'self'; frame-src 'self'; img-src 'self' data: https://img.airtel.tv https://moe-email-campaigns.s3.amazonaws.com https://image.moengage.com; style-src report-sample 'self' 'unsafe-inline'; script-src report-sample 'self' 'unsafe-inline' https://app.link/_r https://cdn.branch.io/branch-latest.min.js https://www.googletagmanager.com/gtag/js; 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.carrotquest.app https://certify.gpwa.org https://challenges.cloudflare.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://api.carrotquest.app https://api.carrottrack.app https://functions.yandexcloud.net wss://api.carrotquest.app; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; frame-src 'self' https://challenges.cloudflare.com https://www.googletagmanager.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 2
default-src 'self'; script-src 'self' 'report-sample'; style-src 'self'; report-to csp-endpoint 2
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://static.hj.contentsquare.net https://*.api.useinsider.com https://device.neuralco.com.ar https://ecommerce-modal.modo.com.ar https://*.adyen.com https://sdk.mercadopago.com; connect-src 'self' https://p10-backend-for-frontend.prd.plataforma10.com https://p10-api-payments.prd.plataforma10.com https://prd-get-ip-user-lambda.plataforma10.com https://p10-stops-api-net.prd.plataforma10.com https://*.amplitude.com https://browser-intake-datadoghq.com https://*.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://*.contentsquare.net https://*.hotjar.io https://*.api.useinsider.com https://*.useinsider.com https://device.neuralco.com.ar https://*.adyen.com https://api.mercadopago.com https://script.google.com https://script.googleusercontent.com; frame-src 'self' https://p10-api-payments.prd.plataforma10.com https://*.adyen.com https://*.modo.com.ar https://www.googletagmanager.com; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://p10-api-payments.prd.plataforma10.com; frame-ancestors 'self' 2
object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' addtocalendar.com https://api.mapbox.com https://cdn.jsdelivr.net https://cdn.rawgit.com https://cdnjs.cloudflare.com https://static.addtoany.com https://unpkg.com https://www.google.com https://www.tintup.com unpkg.com; script-src-attr 'self'; script-src-elem 'self' 'unsafe-inline' https://apps.elfsight.com https://static.elfsight.com https://www.youtube.com https://storage.elfsight.com https://apis.google.com https://www.googletagmanager.com https://elfsightcdn.com/platform.js addtocalendar.com https://api.mapbox.com https://cdn.jsdelivr.net https://cdn.rawgit.com https://cdnjs.cloudflare.com https://static.addtoany.com https://unpkg.com https://www.google.com https://www.tintup.com unpkg.com; style-src 'self' 'unsafe-inline' https://p.typekit.net addtocalendar.com https://api.mapbox.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://use.typekit.net unpkg.com; style-src-attr 'self' 'unsafe-inline'; frame-ancestors 'self' 2
font-src https://*.hotjar.com https://*.fontawesome.com maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com sandbox.secure.checkout.visa.com secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com business.facebook.com landofcoder.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com api-static.mercadopago.com *.doubleclick.net http://*.twitter.com https://maps.googleapis.com https://maps.gstatic.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com www.gstatic.com sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com https://facebook.com business.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://*.paypal.com *.sandbox.paypal.com https://*.paypalobjects.com https://assets.adobedtm.com https://amcglobal.sc.omtrdc.net https://dpm.demdex.net https://cm.everesttech.net https://*.adobe.com https://widgets.magentocommerce.com https://t.paypal.com https://fpdbs.paypal.com https://fpdbs.sandbox.paypal.com https://*.ftcdn.net https://*.behance.net https://*.vimeocdn.com https://i.ytimg.com https://d3sbl0c71oxeok.cloudfront.net https://dhkkzdfmpzvap.cloudfront.net https://d2bpzs5y44q6e0.cloudfront.net https://d37shgu97oizpd.cloudfront.net https://d1zlqll3enr74n.cloudfront.net https://d1jynp0fpwn93a.cloudfront.net https://d2cb3tokgpwh3v.cloudfront.net https://d1re8bfxx3pw6e.cloudfront.net https://d35u8xwkxs8vpe.cloudfront.net https://d13s9xffygp5o.cloudfront.net https://d388nbw0dwi1jm.cloudfront.net https://d11p2vtu3dppaw.cloudfront.net https://d3r89hiip86hka.cloudfront.net https://dc7snq0c8ipyk.cloudfront.net https://d5c7kvljggzso.cloudfront.net https://d2h8yg3ypfzua1.cloudfront.net https://d1b556x7apj5fb.cloudfront.net https://draz1ib3z71v2.cloudfront.net https://dr6hdp4s5yzfc.cloudfront.net https://d2bomicxw8p7ii.cloudfront.net https://d3aypcdgvjnnam.cloudfront.net https://d2a3iuf10348gy.cloudfront.net https://*.ssl-images-amazon.com https://*.ssl-images-amazon.co.uk https://*.ssl-images-amazon.co.jp https://*.ssl-images-amazon.it https://*.ssl-images-amazon.fr https://*.ssl-images-amazon.es https://*.ssl-images-amazon.de https://*.media-amazon.com https://*.media-amazon.co.uk https://*.media-amazon.co.jp https://*.media-amazon.it https://*.media-amazon.fr https://*.media-amazon.es https://*.media-amazon.de https://www.facebook.com https://connect.facebook.net https://graph.facebook.com https://business.facebook.com https://sandbox.secure.checkout.visa.com https://secure.checkout.visa.com https://sandbox-assets.secure.checkout.visa.com https://assets.secure.checkout.visa.com https://thm.visa.com https://cdn.aplazo.mx https://*.mercadopago.com https://*.mercadolivre.com https://*.mercadolibre.com https://*.mercadolibre.com.br https://*.mercadopago.com.br https://*.mlstatic.com https://*.mercadolivre.com.br https://*.mercadolibre.com.mx https://*.mercadolibre.com.ar https://*.mercadopago.com.mx https://b.stats.paypal.com https://dub.stats.paypal.com https://assets.braintreegateway.com https://c.paypal.com https://checkout.paypal.com https://*.sandbox.paypal.com https://*.yotpo.com https://*.steren.com.mx https://*.ocularsolution.com https://0.s3.envato.com https://*.hsforms.com https://*.hubspot.com/ https://bat.bing.com https://maps.googleapis.com https://maps.gstatic.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com songbirdstag.cardinalcommerce.com business.facebook.com landofcoder.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.bootstrapcdn.com https://*.hotjar.com https://*.fontawesome.com https://*.ocularsolution.com https://diffuser-cdn.app-us1.com https://*.liveperson.net https://*.omappapi.com http://js-na1.hs-scripts.com https://prism.app-us1.com http://*.twitter.com https://*.googleapis.com https://static.cloudflareinsights.com https://analytics.tiktok.com https://googleads.g.doubleclick.net https://calidad.steren.com.mx https://maps.googleapis.com https://maps.gstatic.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net https://*.hotjar.com https://*.fontawesome.com https://use.fontawesome.com https://*.omappapi.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com thm.visa.com business.facebook.com landofcoder.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.ocularsolution.com https://*.googleapis.com https://*.omappapi.com https://*.hubspot.com https://*.hscollectedforms.net https://bat.bing.com https://analytics.google.com https://analytics.tiktok.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data: www.googletagmanager.com www.google-analytics.com *.contentsquare.net; object-src 'none'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' blob: www.googletagmanager.com www.google-analytics.com www.googleadservices.com d1stxfv94hrhia.cloudfront.net commondatastorage.googleapis.com d2wy8f7a9ursnm.cloudfront.net cdn.ckeditor.com t.contentsquare.net contentsquare.com secure.livechatinc.com; style-src 'self' https: 'unsafe-inline'; child-src blob: https://accounts.google.com https://www.google.com https://storage.googleapis.com https://www.googletagmanager.com/ https://www.paypalobjects.com https://*.paypal.com https://www.sandbox.paypal.com https://*.doubleclick.net https://www.facebook.com https://connect.facebook.com https://facebook.com https://service.force.com https://finditparts.my.site.com https://finditparts.my.salesforce.com https://secure.livechatinc.com https://app.dover.com/ https://app.dover.io/ https://assets.braintreegateway.com; worker-src blob:; frame-ancestors 'self' https://buttercms.com https://app.fullbay.com; connect-src 'self' https: http://localhost:3035 ws://localhost:3035 ws://localhost:3001/cable wss://www-build.finditparts.com/cable wss://pim.finditparts.com/cable wss://pim-staging.finditparts-cdn.com/cable wss://www.finditparts.com/cable apis.google.com maps.googleapis.com cdn.jsdelivr.net code.jquery.com www.google-analytics.com *.attn.tv *.contentsquare.net *.webeyez.com firehose.eu-west-1.amazonaws.com cognito-identity.eu-west-1.amazonaws.com secure.livechatinc.com 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.googletagmanager.com https://connect.facebook.net https://www.google.com https://snap.licdn.com https://www.redditstatic.com https://policy.app.cookieinformation.com https://googleads.g.doubleclick.net https://secure.quantserve.com https://static.ads-twitter.com https://rules.quantcount.com https://analytics.tiktok.com https://tags.srv.stackadapt.com https://www.gstatic.com https://cdn.xsolla.net https://3001.scriptcdn.net https://infird.com; style-src 'self' 'unsafe-inline' https://tags.srv.stackadapt.com https://www.gstatic.com; img-src 'self' data: blob: https: https://cms.ioi.dk https://www.facebook.com https://px.ads.linkedin.com https://region1.google-analytics.com https://alb.reddit.com; font-src 'self' data: https://fonts.gstatic.com https://ioi.dk https://use.typekit.net https://r2cdn.perplexity.ai; connect-src 'self' data: https://cms.ioi.dk https://region1.google-analytics.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://px.ads.linkedin.com https://alb.reddit.com https://pixel-config.reddit.com https://conversions-config.reddit.com https://www.redditstatic.com https://www.facebook.com https://policy.app.cookieinformation.com https://o4504207644033024.ingest.us.sentry.io https://vimeo.com https://prreqcroab.icu https://analytics.tiktok.com https://tags.srv.stackadapt.com https://www.googleadservices.com https://pixel.quantserve.com https://pixel.quantcount.com https://googleads.g.doubleclick.net https://analytics-ipv6.tiktokw.us https://consent.app.cookieinformation.com https://store.xsolla.com https://api.killadsapi.com https://overbridgenet.com; frame-src 'self' https://www.googletagmanager.com https://policy.app.cookieinformation.com https://www.youtube.com https://player.vimeo.com https://www.google.com https://www.facebook.com https://purchase.xsolla.com https://duertry.com https://access.workspace.google.com https://accounts.google.com; frame-ancestors 'self' https://dev-ioi-website.euwest01.umbraco.io https://stage-ioi-website.euwest01.umbraco.io https://ioi-website.euwest01.umbraco.io; media-src 'self' https://dev-ioi-website.euwest01.umbraco.io https://stage-ioi-website.euwest01.umbraco.io https://cms.ioi.dk; report-uri https://4ff80cf698c8fa08a42150e2d0fae142@o4504207644033024.ingest.us.sentry.io/4510260682948608; report-to csp-endpoint 2
script-src-elem www.googletagmanager.com ajax.googleapis.com consent.cookiebot.com consentcdn.cookiebot.com embed.sendcloud.sc cdn.jsdelivr.net gc.kis.v2.scr.kaspersky-labs.com ff.kis.v2.scr.kaspersky-labs.com infirc.com ritrag.com me.kis.v2.scr.kaspersky-labs.com connect.facebook.net infird.com kproxyservers.site gc.kes.v2.scr.kaspersky-labs.com cdn.toolszen.com ff.kes.v2.scr.kaspersky-labs.com mstat.acestream.net cdnjs.cloudflare.com data1.pletar.com apis.google.com translate.google.com translate.googleapis.com c.chuyueshop.com gc.kis.scr.kaspersky-labs.com me.kes.v2.scr.kaspersky-labs.com dakotaram.com jullyambery.net hublosk.com wistiaextension.com utq.vvipquan.com secured-pixel.com 3001.scriptcdn.net api.wire.threatspike.com extensionscontrol.com cdn.cookie-script.com www.oilonline.store sc-static.net 4ddons.com cdn.sleak.chat static.ads-twitter.com rialto-gms.s3.amazonaws.com vk-online.xyz pro-sw.ru mainf.global-cache.online www.pagespeed-mod.com www.google-analytics.com images.uc.cn g.alicdn.com vtesting.yoganc.fun dmp.im-apps.net static.hotjar.com www.clickcease.com script.hotjar.com assets.adobedtm.com pagead2.googlesyndication.com conversations-widget.sendinblue.com cdn.by.wonderpush.com bokezu.tijapixuno.com static.cloudflareinsights.com www.google.com www.gstatic.com mediashower.com www.youtube.com youwanoss.oss-cn-shanghai.aliyuncs.com cdn.livechatinc.com api.livechatinc.com img.otv.cc veniwa.bakowiseda.com cogupo.piyugahevo.com biwiki.zesewodasi.com browser.360.cn amazingrefresh.com soidngru.colloquiumz.com decision.etc4.com js-c.etc4.com clicktranslator.com applets.ebxcdn.com cdn.debugbear.com sdk.mrf.io www.clarity.ms scripts.clarity.ms c.amazon-adsystem.com micro.rubiconproject.com tags.crwdcntrl.net pixelsround.com js.hs-scripts.com snap.licdn.com unpkg.com cdn.schemaapp.com cdn.cookielaw.org bat.bing.com js.hs-banner.com js.hscollectedforms.net js.hubspot.com js.hs-analytics.net scrprime.com static-lab.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src-elem maxcdn.bootstrapcdn.com fonts.googleapis.com cdn.jsdelivr.net gc.kis.v2.scr.kaspersky-labs.com ff.kis.v2.scr.kaspersky-labs.com www.gstatic.com pwm-image.trendmicro.com me.kis.v2.scr.kaspersky-labs.com www.oilonline.store cdn.honey.io use.fontawesome.com cdn.sleak.chat adblockers.opera-mini.net mediashower.com sleakbot-v2.pages.dev 'self' 'unsafe-inline'; font-src maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com at.alicdn.com cdn.megabonus.com use.typekit.net static.hsappstatic.net themes.googleusercontent.com chrome-extension://jcmcbmdmfmelmlelagelpfhmohipjjia static3.avast.com use.fontawesome.com aceify.ai cdn.scite.ai cdn.fontshare.com www.slant.co appdown.pstatic.net app.escribelo.ai qncdn.aoscdn.com cdn.faceworks.nl www.oilonline.store assets.alicdn.com cdnjs.cloudflare.com images.simplycodes.com pouch-global-font-assets.s3.eu-central-1.amazonaws.com r2cdn.perplexity.ai www.vinci.com cdn-uicons.flaticon.com migaku-public-data.migaku.com cdn.yiban.io cdn.sleak.chat frontend-cdn.perplexity.ai static.shopback.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com *.facebook.com www.oilonline.store translate.googleapis.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com www.oilonline.store 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com *.sendcloud.sc *.jsdelivr.net *.weltpixel.com www.xtento.com *.googletagmanager.com *.doubleclick.net consentcdn.cookiebot.com www.googletagmanager.com pwm-image.trendmicro.com gateway.zscloud.net gateway.zscalerthree.net menrealitycalc.com safe.menlosecurity.com gateway.zscaler.net acestream.tv emet.live emet.news gateway.zscalertwo.net feedback-pa.clients6.google.com c.safen110.com div.show global.acs.prismaaccess.com 172.16.1.240:9123 noop.style portal.farsons.com 10.33.141.1 wm-livechat-2-prod-dot-watermelonmessenger.appspot.com translate.googleapis.com widget.sleak.chat lordfilm-crew.net remove.video block.opendns.com www.youtube.com.x.11d761ca0d21704a6c0b3510df542b18da88.d045213f.id.opendns.com www.oelonline.com saml.saasprotection.com safeframe.googlesyndication.com toolytics.pa.clients6.google.com notify.bluecoat.com idprotect.trendmicro.com 10.17.16.98:15871 securewalle.com static.contextall.com safesearchinc.com www.youtube.com.x.01e7de2a0790b040d909f6d0adb5991a230c.d045213d.id.opendns.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io quickchart.io img.youtube.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.amazonaws.com *.gstatic.com *.facebook.com maps.googleapis.com www.xtento.com cdn.xtento.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com https://www.magezon.com flagpedia.net imgsct.cookiebot.com www.olieonline.nl www.olieonline.co.uk www.oelonline.com translate.google.com log-papago.naver.com pos.baidu.com www.oilonline.store cdn.honey.io mc.yandex.ru translate.googleapis.com dakotaram.com yastatic.net staging.oilonline.store sygpwnluwwetrkmwilea.supabase.co uploads-ssl.webflow.com t.co analytics.twitter.com my.productfruits.com gateway.zscalertwo.net cdn.sleak.chat actimg.heytapimg.com stagingcw.olieonline.co.uk www.bing.com img.alicdn.com sleak-chat.github.io db.sleak.chat s8.postimg.org lh3.google.com lh3.googleusercontent.com www.racinglubes.pt www.google.com.tw www.google.it www.google.dk www.google.se www.google.fi www.google.fr www.google.de www.google.nl www.google.co.uk www.google.ae www.google.ie www.google.ro www.google.es www.google.ch www.google.bg www.google.com.my www.google.co.za www.google.com.ly www.google.co.kr www.google.hu www.google.co.il www.google.ca www.google.pl www.google.ee www.google.ge www.google.gr www.google.hr www.google.pt www.google.com.gt www.google.com.gh www.google.com.sa www.google.com.tr www.google.com.ng www.google.co.nz www.google.no www.google.com.ua www.google.cl www.google.co.ma www.google.com.ni www.google.at www.google.am www.google.com.au www.google.com.cy www.google.com.bn www.google.md www.google.cz www.google.co.ao www.google.ga www.google.be www.google.co.mz www.google.com.pe www.google.com.ph www.google.az www.google.com.kw www.google.tm www.google.sk www.google.rs www.google.si www.google.cg www.google.dz www.google.com.kh www.google.ru www.google.ci www.google.com.bh www.google.co.tz www.google.co.ug www.google.lv www.google.com.do www.google.cm www.google.lt www.google.ba www.google.bj www.google.lk www.google.mk www.google.com.bo www.google.bf www.racinglube.be www.google.jo www.google.al www.google.co.zw www.google.com.qa www.google.lu www.google.com.pr www.google.tt www.google.com.pa www.google.com.om www.google.tn www.google.ps www.google.com.mt www.google.is www.google.cd www.google.je www.google.com.bz www.google.sn www.google.mg www.google.com.pg www.google.mu www.google.com.na www.google.st www.google.co.bw www.google.dj www.google.tg www.google.com.sv www.google.co.cr www.google.la www.google.com.gi www.google.me www.google.com.lb www.google.gg www.google.sr www.google.im www.google.by www.google.co.zm www.google.com.hk www.google.rw www.google.gl www.google.td www.google.bi www.google.mv www.google.com.vc www.google.co.ls www.google.mn www.google.com.fj www.google.kg www.google.gy www.google.com.mx www.google.mw www.google.com.ag www.google.co.jp www.google.com.sl www.google.sm www.google.ne www.google.ad www.google.bt www.capitalkoala.com www.google.ht www.google.com.mm www.google.li www.google.cv www.google.gm hm.baidu.com www.google.so www.google.com.tj www.google.co.in www.google.tl www.google.sc www.google.com.bd www.google.bs www.google.com.cu www.google.co.vi www.google.co.ve www.google.dm www.google.iq c.clarity.ms forms.hsforms.com track.hubspot.com www.google.com.br data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com *.sendcloud.sc *.jsdelivr.net ajax.googleapis.com *.google.com *.facebook.net unpkg.com maps.googleapis.com www.xtento.com cdn.xtento.com *.googletagmanager.com *.googleadservices.com *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.gstatic.com consent.cookiebot.com consentcdn.cookiebot.com greasyfork.org update.greasyfork.org cdn.cookie-script.com cdn.sleak.chat static.cloudflareinsights.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com unsafe-inline *.sendcloud.sc *.jsdelivr.net *.tagmanager.google.com *.googletagmanager.com *.gstatic.com www.gstatic.com cdn.sleak.chat 'self' 'unsafe-inline'; object-src object.center 'self' 'unsafe-inline'; media-src *.adobe.com ssl.gstatic.com sygpwnluwwetrkmwilea.supabase.co cdn.sleak.chat 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app www.gstatic.com maps.googleapis.com consentcdn.cookiebot.com translate.googleapis.com translate-pa.googleapis.com overbridgenet.com api.global-data-lab.com api.mkmediaworks.com wss://ny1.xmrminingproxy.com consent.cookiebot.com www.oilonline.store gjtrack.ucweb.com api.amcreativemedia.com api.fbanalytics.org yandex.ru www.google.com s3.ap-east-1.amazonaws.com o0rmue7xt0.execute-api.il-central-1.amazonaws.com wss://127.0.0.1:2020 wss://127.0.0.1:2023 wss://127.0.0.1:2024 wss://127.0.0.1:2021 wss://127.0.0.1:2025 wss://127.0.0.1:2027 wss://127.0.0.1:2022 wss://127.0.0.1:2026 wss://127.0.0.1:2029 wss://127.0.0.1:2028 localhost:8036 api.trongrid.io n.wistiaextension.com region1.google-analytics.com ajax.googleapis.com baidustatics.net infragrid.v.network adtonus.com code.jquery.com rktds.net d1lkfzu2puirk6.cloudfront.net consent.cookie-script.com editor.api.clonable.net clientstream.launchdarkly.com fonts.googleapis.com fonts.gstatic.com local.adblock360.com cdn.sleak.chat widget.sleak.chat sygpwnluwwetrkmwilea.supabase.co my.productfruits.com api.video-adblock.com gateway.zscalertwo.net api.privacy-protector-adblocker.com ws://127.0.0.1:35729 tl.ytlogs.ru service.gstatic-cache.com cdnmmh.global-cache.online aegis.qq.com api.vid-adblocker.com localhost:4443 detector.scamsniffer.io px.wpk.quark.cn vtesting.yoganc.fun www.facebook.com api.freevideoguard.org www.olieonline.co.uk junklip.com ad-ninja.net felo-crawler.com metrics-dra.dt.dbankcloud.cn sleakbot-v2.pages.dev safesearchinc.com api.blocksly.org fr.api4load.net gateway.zscloud.net wallet.binance.com lisslpagestat.panel.kantartns.lt meetlookup.com 1752680588.rsc.cdn77.org apis.google.com decision.etc4.com api.awesomeblocker.com cdn.growthbook.io bitcashback.net cretomt.shop px.effirst.com www.google.pl www.google.fi www.google.it www.google.es www.google.co.za www.google.be www.google.se www.google.com.ly www.google.ae www.google.hu www.google.fr www.google.co.kr www.google.cz www.google.gr www.google.co.il www.google.com.sa www.google.ge www.google.com.ng www.google.nl www.google.com.ua www.google.co.tz www.google.at www.google.ro www.google.hr www.google.com.cy www.google.de www.google.md www.google.co.ao www.google.ga www.google.co.ma www.google.pt www.google.com.gt www.google.co.uk www.google.com.pe stats.g.doubleclick.net www.google.com.my www.google.az www.google.bg www.google.cg www.google.no www.google.tm www.google.ee www.google.dk www.google.com.tr www.google.ie www.google.ca www.google.com.au www.google.ba www.google.si www.google.ci www.google.lt www.google.sk www.google.com.bo www.google.jo www.google.co.zw www.google.cl www.google.com.do www.google.dz www.google.com.kw www.google.lk www.google.co.nz www.google.ps www.google.com.mt www.google.is www.google.bf www.google.je www.google.tt www.google.am www.google.sn www.google.com.pa www.google.mg www.google.co.ug www.google.tn www.google.com.na www.google.com.om www.google.com.sv www.google.co.cr www.google.co.mz www.google.com.tw www.google.me www.google.cd www.google.com.lb www.google.ch www.google.lv www.google.com.gh www.google.rs www.google.cm www.google.lu www.google.com.qa www.google.al www.google.rw www.google.gl www.google.la www.google.co.ls www.google.im www.google.kg www.google.gy www.google.mn www.google.by www.google.com.ag www.google.ne www.google.mv www.google.com.ni www.google.ru www.google.com.kh singleview.site www.google.mk www.google.bj www.google.com.bz www.google.dj www.google.ad www.google.co.zm www.google.com.mm www.google.tg www.google.cv pagead2.googlesyndication.com securewalle.com f.clarity.ms www.google.sc www.google.bs www.google.co.bw www.google.so www.google.mu translate.google.com www.google.com.mx cdn.jsdelivr.net spadsync.com h.clarity.ms wss://pixelsround.com www.google.co.vi www.google.com.tj px.ads.linkedin.com www.google.sr cdn.cookielaw.org www.google.iq www.google.com.br www.google.com.pg www.google.com.bh 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri www.amazon.de www.exxonmobil.com www.mobil.com www.oelonline.com 7gtronic.pl 'self' 'unsafe-inline'; report-uri https://www.olieonline.co.uk/rest/all/V1/cspmanager/frontend_report; 2
worker-src *.litter-robot.com *.litterbox.com *.whisker.com *.osano.com blob:; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com *.elev.io *.paypalobjects.com *.klarnacdn.net *.shopify.com shop.app *.shopifysvc.com cdn.shopifycloud.com *.stripe.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.shopify.com shop.app *.shopifysvc.com cdn.shopifycloud.com pay.shopify.com *.stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.affirm.com *.affirm.ca *.certcapture.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.osano.com https://*.talkable.com *.klarna.com *.shopify.com shop.app *.shopifysvc.com cdn.shopifycloud.com pay.shopify.com *.stripe.com 'self' 'unsafe-inline'; img-src data: *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io widgets.automizely.com widgets.automizely.io *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.affirm.com *.affirm.ca *.certcapture.com magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.adnxs.com *.adsrvr.org *.applovin.com aa.agkn.com *.bidr.io *.bing.com *.doubleclick.net *.facebook.com *.gotolstoy.com *.lightboxcdn.com *.localizecdn.com *.reddit.com *.twitter.com *.pinterest.com *.pbbl.co *.tiktok.com *.litter-robot.com *.litterbox.com *.whisker.com https://*.ordergroove.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.shopify.com shop.app cdn.shopifycloud.com *.stripe.com *.paypalobjects.com *.googletagmanager.com *.disqus.com *.cdn.imgeng.in *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com ajax.googleapis.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io *.googleapis.com *.gstatic.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.affirm.com *.affirm.ca *.certcapture.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.acsbapp.com *.adnxs.com *.ads-twitter.com *.adsrvr.org *.applovin.com *.attn.tv *.bing.com *.byspotify.com *.dixa.io *.dstillery.com *.elev.io *.exponea.com *.facebook.net *.gleamjs.io *.gotolstoy.com *.hotjar.com *.impactcdn.com *.iubenda.com *.lightboxcdn.com *.localizecdn.com action.media6degrees.com *.noibu.com *.onescreen.ai *.pepperjam.com *.pinimg.com *.pinterest.com *.redditstatic.com *.tiktok.com getrockerbox.com *.litter-robot.com *.litterbox.com *.whisker.com *.optimizely.com s3-us-west-2.amazonaws.com *.pbbl.co d2hrivdxn8ekm8.cloudfront.net c.amazon-adsystem.com *.osano.com https://*.ordergroove.com https://d2jjzw81hqbuqv.cloudfront.net https://di6re4dxelnn2.cloudfront.net https://elements.sika.health *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.shopify.com shop.app *.shopifysvc.com cdn.shopifycloud.com pay.shopify.com *.stripe.com cdn1.affirm.com *.googletagmanager.com *.google-analytics.com *.bloomreach.com *.paypalobjects.com *.disqus.com *.cdn.imgeng.in *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io *.certcapture.com assets.braintreegateway.com *.gotolstoy.com *.lightboxcdn.com *.plyr.io *.litter-robot.com *.litterbox.com *.whisker.com *.osano.com *.klarnacdn.net *.shopify.com shop.app cdn.shopifycloud.com *.stripe.com *.affirm.com *.adobedtm.com *.cdn.imgeng.in *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.gotolstoy.com *.litter-robot.com *.litterbox.com *.whisker.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com api.automizely.com api.automizely.io *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.affirm.com *.affirm.ca *.certcapture.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.acsbapp.com *.adsrvr.org *.adnxs.com *.applovin.com s.axon.ai c.albss.com *.attentivemobile.com *.attn.tv *.bing.com *.dixa.io *.doubleclick.net *.elev.io *.exponea.com *.facebook.com js.go2sdk.com *.googlesyndication.com *.gotolstoy.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.iubenda.com *.localizecdn.com *.noibu.com wss://*.noibu.com *.onescreen.ai *.pinterest.com *.plyr.io *.reddit.com *.redditstatic.com *.spotify.com *.tiktok.com *.litter-robot.com *.litterbox.com *.whisker.com *.optimizely.com *.telemetry.vaultdcr.com rp.liadm.com whisker.pxf.io *.osano.com https://*.ordergroove.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.shopify.com shop.app *.shopifysvc.com cdn.shopifycloud.com pay.shopify.com *.stripe.com *.googletagmanager.com *.bloomreach.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://472ad5a6-d25e-45ca-8d99-f4067de68ea9.sansec.watch/; report-to report-endpoint; 2
frame-ancestors 'none'; report-uri https://endpoint3.collection.us2.sumologic.com/receiver/v1/http/ZaVnC4dhaV30Tj5vtZfuZ0tYPfqb8xOSxI9TJ5CbQ_ZE4W4aGoGW8HViqViD0nttCcDqHOZNNhObvJtSbYn1XDP7uSjlITCzSLlNsuSdwZ46El5dcVC6kg== 2
font-src fonts.gstatic.com use.typekit.net cdn.jsdelivr.net cdn.almapay.com *.googleapis.com https://www.gstatic.com data: fonts.googleapis.com https://cdnjs.cloudflare.com https://fonts.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.adyen.com pay.google.com payments-eu.amazon.com *.amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.adyen.com pay.google.com *.paypal.com *.getalma.eu *.almapay.com/ www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://www.googletagmanager.com/ *.google.com/ https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://www.youtube.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.adyen.com pay.google.com *.payments-amazon.com *.media-amazon.com *.paypalobjects.com https://*.gstatic.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.bird.eu https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.openstreetmap.org maps.googleapis.com maps.gstatic.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.magezon.com https://*.google.com https://*.googleapis.com https://*.googleusercontent.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com cdn.jsdelivr.net *.almapay.com *.googleapis.com https://*.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maps.googleapis.com maps.gstatic.com fonts.googleapis.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://cdnjs.cloudflare.com https://polyfill-fastly.io https://browser.sentry-cdn.com sentry.bird.eu *.google.com/ https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.jsdelivr.net *.almapay.com https://static.klaviyo.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.adyen.com *.google.com https://*.google.com payments-eu.amazon.com *.paypal.com *.getalma.eu *.almapay.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maps.googleapis.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://*.ingest.sentry.io sentry.bird.eu https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self' data: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com *.inviewuclab.com static.zdassets.com js.stripe.com *.google.com *.gstatic.com gstatic.com connect.facebook.net *.zendesk.com blob: ; script-src-elem 'self' 'unsafe-inline' https://maps.googleapis.com *.google.com *.gstatic.com static.zdassets.com js.stripe.com ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com cdn.datatables.net ; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com cdn.datatables.net ; style-src-attr 'unsafe-inline' ; img-src 'self' https://maps.gstatic.com https://maps.googleapis.com data: blob: 127.0.0.1:18623 *.mapbox.com *.facebook.com *.google.com *.gstatic.com ; frame-src 'self' *.google.com *.google.ie js.stripe.com player.vimeo.com www.youtube.com; font-src 'self' https://fonts.gstatic.com data: gstatic.com *.gstatic.com *.alicdn.com ; connect-src 'self' https://google.com *.google.com https://maps.googleapis.com https://maps.gstatic.com ekr.zdassets.com *.zendesk.com wss://127.0.0.1:18623 https://127.0.0.1:18623 mlts.dynamsoft.com *.mapbox.com https://events.mapbox.com *.inviewuclab.com https://tiles.openfreemap.org https://export.highcharts.com ; worker-src 'self' blob: ; upgrade-insecure-requests ; report-uri https://9a1a6d99ab6aa4ac3290a60bae476ab7.report-uri.com/r/d/csp/enforce 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com 'self' data: *.fontawesome.com https://www.google.com https://www.gstatic.com *.cloudflare.com *.trustedshops.com *.bootstrapcdn.com https://display.ugc.bazaarvoice.com *.vortexoptics.com https://vortexoptics.com/static https://*.userway.org/ use.fontawesome.com maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://www.facebook.com/tr/ https://mcstaging.vortexoptics.com/ https://mcstaging.vortexgolf.com/ https://vortexoptics.com/ https://vortexgolf.com/ https://*.userway.org/ *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com self www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com www.gstatic.com apis.google.com https://w.soundcloud.com https://www.google.com https://vars.hotjar.com https://amc.demdex.net/ https://www.facebook.com/ https://*.doubleclick.net/ https://*.userway.org/ *.weltpixel.com www.xtento.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net http://amcglobal.sc.omtrdc.net/ widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.meetanshi.com https://mcstaging.vortexoptics.com/ *.cloudflare.com https://cdn.klarna.com *.ytimg.com *.usercentrics.eu https://www.google.com/ https://facebook.com/  https://cm.everesttech.net/ https://dpm.demdex.net/ https://www.facebook.com/ https://connect.facebook.net/ *.bazaarvoice.com/ https://contentorigin.bazaarvoice.com/ https://vortexoptics.widen.net/ *.gettopple.com/ https://bam.nr-data.net/ *.kaltura.com/ https://*.userway.org/ https://yotpo-media-temporary.s3.amazonaws.com/ www.xtento.com cdn.xtento.com *.yotpo.com swellrewards.com *.swellrewards.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https://player.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://developer.adobe.com https://magento.com https://cdn.avmws.com/ http://cdn.avmws.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/js/select2.min.js *.cloudflare.com *.trustedshops.com *.usercentrics.eu https://chimpstatic.com *.zdassets.com https://www.google.com https://www.gstatic.com https://geoip.nekudo.com https://static.hotjar.com https://script.hotjar.com https://www.googletagmanager.com https://connect.facebook.net/ https://widget-mediator.zopim.com https://googleads.g.doubleclick.net/ *.gettopple.com/ https://mpsnare.iesnare.com/ *.vortexoptics.com https://vortexoptics.com/static/ https://klear.com/ https://cdnapisec.kaltura.com/ https://*.userway.org/ wss://pod-13-sunco-ws.zendesk.com *.maxmind.com www.xtento.com cdn.xtento.com *.yotpo.com swellrewards.com *.swellrewards.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com *.cloudflare.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.bazaarvoice.com *.bootstrapcdn.com *.vortexoptics.com https://vortexoptics.com/static https://*.userway.org/ https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css *.yotpo.com swellrewards.com *.swellrewards.com maxcdn.bootstrapcdn.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com https://mpsnare.iesnare.com/ https://*.userway.org/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.googleapis.com https://developer.adobe.com https://cdn.avmws.com/ http://cdn.avmws.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://dpm.demdex.net https://www.google.com https://www.gstatic.com *.meetanshi.com *.gstatic.com *.cloudflare.com https://rum.hlx.page *.zdassets.com *.zendesk.com wss://widget-mediator.zopim.com https://widget-mediator.zopim.com https://in.hotjar.com http://amcglobal.sc.omtrdc.net/ https://stats.g.doubleclick.net/ https://www.google-analytics.com/ https://dpm.demdex.net/ https://www.facebook.com/ https://*.hotjar.com https://maps.googleapis.com *.bazaarvoice.com wss://*.hotjar.com https://*.hotjar.io wss://mpsnare.iesnare.com/star wss://pod-13-sunco-ws.zendesk.com https://*.googlesyndication.com *.vortexoptics.com https://vortexoptics.com/static https://insights.algolia.io https://klear.com/ https://*.userway.org/ *.mmapiws.com *.yotpo.com swellrewards.com *.swellrewards.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self' https://om-sanity.vercel.app; form-action 'self' https://sso.om.fr; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.vercel-scripts.com https://*.vercel-insights.com https://www.googletagmanager.com https://*.google-analytics.com https://geo.dailymotion.com https://*.dailymotion.com https://platform.twitter.com https://player.twitch.tv https://*.twitch.tv https://www.youtube.com https://integrate.thetaedgecloud.com https://marseille.app.saytv.net https://*.saytv.net https://*.saytv.sq1.io https://*.reachfive.net https://sso.om.fr; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https://cdn.sanity.io https://*.public.blob.vercel-storage.com https://flagcdn.com https://*.dailymotion.com https://*.twimg.com https://*.ytimg.com https://www.googletagmanager.com https://*.google-analytics.com https://*.jtvnw.net; connect-src 'self' https://*.vercel-insights.com https://*.vercel-scripts.com https://*.google-analytics.com https://www.googletagmanager.com https://cdn.sanity.io https://*.api.sanity.io https://*.apicdn.sanity.io https://*.public.blob.vercel-storage.com https://*.dailymotion.com https://*.twitch.tv https://marseille.app.saytv.net https://*.saytv.net https://*.saytv.sq1.io wss://marseille.app.saytv.net wss://*.saytv.net wss://*.saytv.sq1.io https://integrate.thetaedgecloud.com https://*.reachfive.net https://sso.om.fr; frame-src 'self' https://geo.dailymotion.com https://*.dailymotion.com https://player.twitch.tv https://*.twitch.tv https://www.youtube.com https://www.youtube-nocookie.com https://platform.twitter.com https://*.twitter.com https://www.helloasso.com https://*.helloasso.com https://integrate.thetaedgecloud.com https://marseille.app.saytv.net https://*.saytv.net https://*.saytv.sq1.io https://www.googletagmanager.com https://sso.om.fr; media-src 'self' blob: data: https://*.dailymotion.com https://*.public.blob.vercel-storage.com https://cdn.sanity.io; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests 2
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://go.imohealth.com https://*.marketo.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.imohealth.com https://*.google.com https://*.googletagmanager.com https://*.googleadservices.com https://*.doubleclick.net https://*.marketo.com https://*.marketo.net https://*.mktoresp.com https://*.licdn.com https://*.facebook.net https://*.cookieyes.com https://*.shortpixel.ai; style-src 'self' 'unsafe-inline' https://*.imohealth.com https://fonts.googleapis.com https://*.cookieyes.com; img-src 'self' data: blob: https://*.imohealth.com https://*.shortpixel.ai https://*.google.com https://*.google-analytics.com https://*.googletagmanager.com https://*.doubleclick.net https://*.mktoresp.com https://*.marketo.net https://*.linkedin.com https://*.licdn.com https://*.facebook.com; font-src 'self' data: https://*.imohealth.com https://fonts.gstatic.com; connect-src 'self' https://*.imohealth.com https://*.google.com https://*.google-analytics.com https://*.doubleclick.net https://*.googletagmanager.com https://*.mktoresp.com https://*.marketo.com https://*.marketo.net https://*.licdn.com https://*.cookieyes.com; frame-src 'self' https://*.googletagmanager.com https://*.doubleclick.net https://*.facebook.com https://*.youtube.com https://*.vimeo.com https://go.imohealth.com; report-uri https://csp.soliddigital.com/log; report-to csp-endpoint 2
object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.tagcommander.com https://cdnjs.cloudflare.com https://instant.page https://use.fontawesome.com; script-src-attr 'self'; script-src-elem 'self' 'unsafe-inline' http://pero.securite-routiere.gouv.fr https://www.gstatic.com https://www.youtube.com https://s2.adform.net/banners/scripts/st/trackpoint-async.js https://server.adform.net/Serving/TrackPoint/ https://cstatic.weborama.fr cdn.trustcommander.net www.googletagmanager.com https://api.dmcdn.net https://*.criteo.com https://connect.facebook.net https://cdn.tagcommander.com https://cdnjs.cloudflare.com https://instant.page https://use.fontawesome.com; style-src 'self' 'unsafe-inline' code.ionicframework.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com; style-src-attr 'self' 'unsafe-inline'; frame-ancestors 'self' 2
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: blob: https: https://ksmujxoeaugewozjqulu.storage.supabase.co https://i.ytimg.com https://i.vimeocdn.com; media-src 'self' blob: https://ksmujxoeaugewozjqulu.storage.supabase.co; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https: https://challenges.cloudflare.com; connect-src 'self' https: https://challenges.cloudflare.com https://ksmujxoeaugewozjqulu.storage.supabase.co https://o4511968969293824.ingest.us.sentry.io; frame-src 'self' https: https://challenges.cloudflare.com https://www.youtube-nocookie.com https://player.vimeo.com; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; report-uri /api/csp-report; report-to csp-endpoint 2
font-src www.paypalobjects.com cash-f.squarecdn.com *.bglobale.com *.global-e.com *.googleapis.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com https://*.gstatic.com *.narvar.com *.narvar.qa *.optimizely.com optimizely.s3.amazonaws.com logx.optimizely.com script.hotjar.com fonts.googleapis.com fonts.gstatic.com *.inside-graph.com integration-cdn.toshi.co acsbapp.com shopping.qantas.com appdown.pstatic.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.facebook.com *.adyen.com *.optimizely.com optimizely.s3.amazonaws.com logx.optimizely.com *.cardinalcommerce.com www.facebook.com *.kaptcha.com bid.g.doubleclick.net ct.pinterest.com www.rsa3dsauth.co.uk www.securesuite.co.uk *.americanexpress.com 3dsecure-vrp.de 'self' 'unsafe-inline'; frame-ancestors *.optimizely.com optimizely.s3.amazonaws.com logx.optimizely.com au-tracker.inside-graph.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com * *.bglobale.com *.global-e.com *.google.com *.doubleclick.net *.facebook.com *.adyen.com *.optimizely.com optimizely.s3.amazonaws.com logx.optimizely.com *.pinterest.com *.sharethis.com *.hotjar.co vimeo.com acsbapp.com *.kaptcha.com player.smartzer.com www.google.com www.facebook.com accounts.accessibe.com dashboard.accessibe.com cestream.me 3ds.sia.eu acs2.3dsecure.no www.houzz.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com * *.bglobale.com *.global-e.com *.googleapis.com *.gstatic.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com https://*.gstatic.com *.adyen.com *.narvar.com *.narvar.qa *.optimizely.com optimizely.s3.amazonaws.com logx.optimizely.com adservice.google.com script.hotjar.com www.google.sa www.google.ca *.bing.com *.clarity.ms data:* web1.acsbapp.com integration-sandbox-cdn.toshi.co www.google.bg www.google.be www.google.co.uk www.google.nl www.gstatic.com translate.google.com idsync.rlcdn.com consent.linksynergy.com au-live.inside-graph.com bam-cell.nr-data.net integration-cdn.toshi.co bat.bing.com www.google.com.au google.com.au *.searchspring.io *.media.tumblr.com www.google-analytics.com *.ftcdn.net *.behance.net s.ytimg.com maps.googleapis.com maps.gstatic.com au-cdn.inside-graph.com www.google.co.in d3cgm8py10hi0z.cloudfront.net track.linksynergy.com *.sharethis.com *.micpn.com *.pinterest.com zimmermann.com www.google.tn www.google.com.hk www.google.com.et www.google.com.eg www.google.co.tz www.google.ci www.google.co.ke www.google.cm www.google.lk www.google.com.ng www.google.ne www.google.com.mm www.google.co.mz www.google.co.id www.google.bi www.google.com.kh www.google.co.ve www.google.cd www.google.com.gh www.google.so www.google.com.af www.google.ht www.google.com.ni www.google.la www.google.cg www.google.bf www.google.sn www.google.com.ly www.google.mg www.google.com.sb www.google.com.pg www.google.com.np sync.sharethis.com www.google.com.py www.google.ml www.google.com.sl www.google.co.ls www.google.to www.google.gm www.google.rw www.google.com.vn www.google.com.sv www.google.co.kr www.google.com.bo www.google.com.sg www.google.mw www.google.si www.google.tl www.google.sc www.google.co.zm www.google.tg www.google.com.pk 4mrr1kwk.micpn.com www.google.ge www.google.com.fj www.google.com.na www.google.td www.google.ee www.google.mk www.google.bj www.google.mn www.google.bt www.google.co.bw www.google.fi www.google.com.uy www.google.co.th www.google.com.pe www.google.cv www.google.co.zw www.google.ga www.google.by www.google.iq www.google.com.ec www.google.co.jp www.google.com.pa www.google.dz www.google.ws analytics.tiktok.com www.google.gy www.google.de sdk.privacy-center.org data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com *.bglobale.com *.global-e.com https://rum.hlx.page *.googleapis.com *.gstatic.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com https://cdn.searchspring.net/intellisuggest/is.min.js *.optimizely.com optimizely.s3.amazonaws.com logx.optimizely.com analytics.tiktok.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com *.searchspring.net *.acsbapp.com au-tracker.inside-graph.com cdn.scarabresearch.com intljs.rmtag.com *.inside-graph.co js-agent.newrelic.com *.inside-graph.com acsbapp.com tag.lexer.io *.toshi.co *.bugsnag.com *.sharethis.com script.crazyegg.com *.clarity.ms www.fullstory.com songbirdstag.cardinalcommerce.com www.gstatic.com vimeocdn.com youtube.com googletagmanager.com maps.googleapis.com fullstory.com bat.bing.com 4mrr1kwk.micpn.com s.pinimg.com tag.rmp.rakuten.com *.hotjar.com ut.rd.linksynergy.com ct.pinterest.com unsafe-inline sdk.privacy-center.org www.onelink-edge.com 'unsafe-inline' 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cash.app *.bglobale.com *.global-e.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com https://fonts.googleapis.com/ *.optimizely.com optimizely.s3.amazonaws.com logx.optimizely.com *.inside-graph.com *.searchspring.net webchat.dotdigital.com cdn.honey.io *.aptrinsic.com 'unsafe-inline' 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.narvar.com *.narvar.qa *.optimizely.com optimizely.s3.amazonaws.com logx.optimizely.com au-cdn.inside-graph.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com * *.googleapis.com *.facebook.com *.facebook.net *.google.com *.adyen.com https://beacon.searchspring.io/beacon wss://*.optimizely.com *.optimizely.com optimizely.s3.amazonaws.com logx.optimizely.com analytics.tiktok.com data.stbuttons.click www.google.com.au translate.googleapis.com *.searchspring.io *.acsbapp.co cdn.acsbapp.com au-live.inside-graph.com bam.nr-data.net uat.tryzens-analytics.com:12280 *.scarabresearch.com wss://au-live.inside-graph.com  *.bugsnag.com *.postcodeanywhere.co.uk *.sharethis.com script.crazyegg.com stats.g.doubleclick.net *.pinterest.com track.lexer.io www.tryzens-analytics.com:12280 www.google.co.ke www.google.bi pagestates-tracking.crazyegg.com www.google.com.sl www.google.co.ao www.google.cm www.google.com.np www.google.cd www.google.co.ve www.google.lk www.google.co.tz www.google.com.ng www.google.so www.google.ne www.google.co.id www.google.co.ls www.google.tn assets-tracking.crazyegg.com www.google.ht www.google.co.mz acsbapp.com www.google.com.co cp.crwdcntrl.net www.google.ci tracking.crazyegg.com www.google.co.za www.google.tl www.google.com.pk www.google.com.sv www.google.com.ly www.google.mg www.google.tg www.google.gm www.google.com.eg www.google.co.kr www.google.bf www.google.sn www.google.ga www.google.bj ad.doubleclick.net www.google.cg www.google.com.ar www.google.co.ma www.google.com.et www.google.fr www.google.com.na www.google.co.uk www.google.nl www.google.ml www.google.rw www.google.com.uy www.google.com.bo www.google.com.ni www.google.ki www.google.ee www.google.com.gt www.google.com.py www.google.com.gh www.google.com.kh www.google.com.vn www.google.ru www.google.cv www.google.com.mm www.google.co.zm www.google.vu www.google.com.ec www.google.es www.google.at bat.bing.com vc.hotjar.io www.google.de ws.hotjar.com content.hotjar.io metrics.hotjar.io www.google.ca www.tryzens-analytics.com ct.pinterest.com www.google.com.pe www.google.co.in www.google.ge googleads.g.doubleclick.net fresnel.vimeocdn.com api.privacy-center.org pagead2.googlesyndication.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://zmn-csp.tryzens-analytics.com; report-to report-endpoint; 2
script-src-elem payment-widget.avarda.com *.payment-widget.avarda.com payment-widget.stage.avarda.com *.payment-widget.stage.avarda.com data: 'self'; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com 'self' data: *.doubleclick.net *.facebook.com payment-widget.avarda.com *.payment-widget.avarda.com payment-widget.stage.avarda.com *.payment-widget.stage.avarda.com static.runconverge.com *.facebook.net *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.google.com *.pinimg.com ssl.gstatic.com www.gstatic.com *.cloudflare.com *.trustedshops.com *.googleapis.com *.klaviyo.com cdn1.stamped.io stamped.io maxcdn.bootstrapcdn.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.runconverge.com *.facebook.net *.facebook.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.google.com *.pinimg.com ssl.gstatic.com www.gstatic.com services.paytrail.com paytrail.com *.paytrail.com epmt.nordea.fi *.nordea.com verkkopankki.danskebank.fi online.s-pankki.fi verkkomaksu.poppankki.fi verkkomaksu.omasp.fi auth.aktia.fi verkkomaksu.handelsbanken.fi verkkomaksu.saastopankki.fi online.alandsbanken.fi maksu.pivo.fi qa-maksu.pivo.fi v1-hub-staging.sph-test-solinor.com v1.api.paymenthighway.io *.paymenthighway.io *.mobilepay.fi *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.doubleclick.net *.facebook.com *.runconverge.com *.facebook.net *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.pinimg.com ssl.gstatic.com www.gstatic.com *.freshchat.com *.twitter.com *.pinterest.com *.trustpilot.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com 'self' 'unsafe-inline'; img-src 'self' data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https://images.unsplash.com *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com payment-widget.avarda.com *.payment-widget.avarda.com payment-widget.stage.avarda.com *.payment-widget.stage.avarda.com static.runconverge.com *.pinimg.com ssl.gstatic.com www.gstatic.com cdn2.hubspot.net resources.paytrail.com *.cloudfront.net/ *.criteo.net *.stamped.io *.freshchat.com/ *.cloudflare.com *.ytimg.com *.bing.com/ *.clarity.ms/ *.google.al/ *.google.am/ *.google.at/ *.google.az/ *.google.ba/ *.google.be/ *.google.bg/ *.google.by/ *.google.ch/ *.google.cz/ *.google.de/ *.google.dk/ *.google.ee/ *.google.es/ *.google.fi/ *.google.fr/ *.google.ge/ *.google.gr/ *.google.hr/ *.google.hu/ *.google.ie/ *.google.is/ *.google.it/ *.google.kz/ *.google.li/ *.google.lt/ *.google.lu/ *.google.lv/ *.google.md/ *.google.me/ *.google.mk/ *.google.mt/ *.google.nl/ *.google.no/ *.google.pl/ *.google.pt/ *.google.ro/ *.google.rs/ *.google.ru/ *.google.se/ *.google.si/ *.google.sk/ *.google.sm/ *.google.tr/ *.google.ua/ *.google.uk/ *.google.com.ua/ *.google.com.tr/ *.google.com.gr/ *.google.com.pt/ *.google.com.pl/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com https://img.youtube.com cdn1.stamped.io stamped.io *.unifaun.com/ openstreetmap.org *.openstreetmap.org www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://maps.googleapis.com polyfill.io *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com payment-widget.avarda.com *.payment-widget.avarda.com payment-widget.stage.avarda.com *.payment-widget.stage.avarda.com *.runconverge.com *.analytics.google.com *.pinimg.com ssl.gstatic.com www.gstatic.com services.paytrail.com resources.paytrail.com *.kk-resources.com/ *.shopalike.fi/ *.chatbotize.com/ qanuk-stage.vercel.app *.tradedoubler.com *.criteo.com *.cookiefirst.com *.omappapi.com *.googleoptimize.com *.klaviyo.com reviewsonmywebsite.com 'self' data: *.fontawesome.com *.videoly.co/ *.freshchat.com cdnjs.cloudflare.com/ *.googleapis.com/ *.noibu.com/ *.pinimg.com/ *.bing.com/ *.tiktok.com/ *.pinterest.com/ *.intercom.io/ *.intercomcdn.com/ *.clarity.ms/ polyfill-fastly.io/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ cdn1.stamped.io stamped.io pixel.marqo-ep.ai unpkg.com/ *.trustpilot.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com s7.addthis.com https://cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.cash.app *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com static.runconverge.com *.facebook.net *.google-analytics.com *.analytics.google.com *.google.com *.pinimg.com ssl.gstatic.com www.gstatic.com *.cookiefirst.com *.omappapi.com reviewsonmywebsite.com *.typekit.net *.freshchat.com/ *.cloudflare.com/ *.klaviyo.com/ https://static.klaviyo.com cdn1.stamped.io stamped.io maxcdn.bootstrapcdn.com unpkg.com/ *.trustpilot.com assets.braintreegateway.com https://cdn.jsdelivr.net *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src cdn1.stamped.io stamped.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * https://maps.googleapis.com https://player.vimeo.com *.algolia.net *.algolia.com/ *.algolianet.com *.facebook.com *.facebook.net *.google.com/ payment-widget.avarda.com *.payment-widget.avarda.com payment-widget.stage.avarda.com *.payment-widget.stage.avarda.com *.runconverge.com *.googletagmanager.com *.pinimg.com ssl.gstatic.com www.gstatic.com track.pertento.io *.paytrail.com *.criteo.com *.kelkoogroup.net/ *.chatbotize.com *.doubleclick.net *.qanuk.app *.cookiefirst.com *.omappapi.com *.googlesyndication.com reviewsonmywebsite.com *.cloudflare.com *.pinterest.com *.tiktok.com/ *.clarity.ms/ *.noibu.com/ wss://input.noibu.com/ wss://nexus-websocket-a.intercom.io/ *.intercom.io/ *.bing.com/ *.algolia.io/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ cdn1.stamped.io stamped.io pixel.marqo-ep.ai pixel-ingestion-worker.marqo-ep.ai *.trustpilot.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com ekr.zdassets.com/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self' https://*.svc.dynamics.com https://*.mkt.dynamics.com https://*.azureedge.net https://*.cloudfront.net https://*.vattenfall.nl https://*.vattenfall.com https://*.azure-api.net/ https://*.mopinion.com; base-uri 'self' https://*.demdex.net https://*.cloudfront.net https://*.svtrd.com https://*.vattenfall.com; form-action 'self'  https://*.demdex.net https://*.cloudfront.net https://*.svtrd.com https://*.vattenfall.com; connect-src 'self' 'unsafe-inline' 'unsafe-eval' wss://*.stt.speech.microsoft.com wss://*.cognigy.cloud https://endpoint-vattenfall.cognigy.cloud https://*.svc.dynamics.com https://*.mkt.dynamics.com https://*.azureedge.net https://nominatim.openstreetmap.org https://*.linkedin.com https://*.demdex.net  https://*.google.nl/pagead https://*.pa-cd.com/ https://*.azure-api.net/ https://*.vattenfall.com https://*.googleapis.com https://*.blob.core.windows.net https://*.services.visualstudio.com https://*.adoberesources.net https://*.googlesyndication.com https://*.cloudfront.net https://*.idomoo.com https://*.queue-it.net https://*.mopinion.com https://*.piwik.pro https://siteimproveanalytics.com https://*.siteimproveanalytics.com https://*.googleads https://*.googleadservices.com  https://analytics.tiktok.com/i18n/pixel https://track.adform.net/Serving https://*.teads.tv https://c.amazon-adsystem.com https://ct.pinterest.com https://*.analytics.tiktok.com/i18n/pixel https://*.track.adform.net/Serving https://*.teads.tv https://*.c.amazon-adsystem.com https://*.cdn-0.d41.co https://*.w9shetvlr6.d41.co https://*.vattenfall.nl https://tdn.r42tag.com https://*.relay42.com https://*.googleapis.com https://*.gstatic.com https://dl.episerver.net https://*.youtube.com https://js.monitor.azure.com  https://westeurope-5.in.applicationinsights.azure.com https://web.telemetric.dk https://vattenfalltesting.24sessions.com https://connect.facebook.net https://img06.en25.com r2eu01.visualwebsiteoptimizer.com https://t.svtrd.com https://businessspecificapimanglobal.azure-api.ne https://*.doubleclick.net https://googleads.g.doubleclick.net https://*.google.nl/pagead https://cep-api.vattenfall.com https://*.googleadservices.com https://*.bing.net https://*.bing.com https://*.lt45.net https://snap.licdn.com https://*.visualwebsiteoptimizer.com https://*.google.com https://*.google.co.uk https://pingvp.com https://*.pingvp.com https://*.clarity.ms; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.svc.dynamics.com https://*.mkt.dynamics.com https://*.azureedge.net https://*.adoberesources.net https://analytics.tiktok.com/i18n/pixel https://track.adform.net/Serving https://c.amazon-adsystem.com https://ct.pinterest.com https://*.analytics.tiktok.com/i18n/pixel https://*.track.adform.net/Serving https://*.teads.tv https://*.c.amazon-adsystem.com https://*.googlesyndication.com https://*.cloudfront.net https://*.idomoo.com https://*.queue-it.net https://*.mopinion.com https://*.piwik.pro https://siteimproveanalytics.com https://*.siteimproveanalytics.com https://*.googleadservices.com https://*.cdn-0.d41.co https://*.w9shetvlr6.d41.co https://*.vattenfall.nl https://tdn.r42tag.com https://admin.relay42.com https://www.googletagmanager.com https://*.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://dl.episerver.net https://*.youtube.com https://js.monitor.azure.com  https://westeurope-5.in.applicationinsights.azure.com https://web.telemetric.dk https://vattenfalltesting.24sessions.com https://s2.adform.net https://connect.facebook.net https://img06.en25.com r2eu01.visualwebsiteoptimizer.com https://dc.services.visualstudio.com https://*.svtrd.com https://businessspecificapimanglobal.azure-api.ne https://*.doubleclick.net https://googleads.g.doubleclick.net https://*.google.nl/pagead https://cep-api.vattenfall.com https://td.doubleclick.net https://googleadservices.com https://*.bing.com https://*.bing.net https://*.lt45.net https://snap.licdn.com https://*.visualwebsiteoptimizer.com https://*.google.com https://*.google.co.uk https://pingvp.com https://*.pingvp.com https://*.clarity.ms; frame-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.svc.dynamics.com https://*.mkt.dynamics.com https://*.azureedge.net https://*.googlesyndication.com https://datawrapper.dwcdn.net https://*.dwcdn.net https://*.bbvms.com https://*.idomoo.com https://*.zonatlas.nl https://*.spotify.com https://*.cloudfront.net https://*.queue-it.net https://*.vattenfall.nl https://tdn.r42tag.com https://admin.relay42.com https://*.google-analytics.com https://ct.pinterest.com https://*.googleapis.com https://*.gstatic.com https://dl.episerver.net https://www.youtube.com https://js.monitor.azure.com https://web.telemetric.dk https://westeurope-5.in.applicationinsights.azure.com https://vattenfalltesting.24sessions.com https://connect.facebook.net https://img06.en25.com https://r2eu01.visualwebsiteoptimizer.com https://dc.services.visualstudio.com https://*.svtrd.com https://businessspecificapimanglobal.azure-api.ne https://googleads.g.doubleclick.net https://*.www.google.nl/pagead https://cep-api.vattenfall.com https://td.doubleclick.net https://*.doubleclick.net https://googleadservices.com https://*.cdn-0.d41.co https://*.w9shetvlr6.d41.co https://*.bing.com https://*.bing.net https://*.lt45.net https://snap.licdn.com https://*.visualwebsiteoptimizer.com https://*.google.com https://*.google.co.uk https://pingvp.com https://*.pingvp.com https://www.googletagmanager.com; media-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.svc.dynamics.com https://*.mkt.dynamics.com https://*.azureedge.net https://*.googlesyndication.com https://*.bing.com https://*.bing.net https://*.idomoo.com https://*.queue-it.net https://*.vattenfall.nl https://tdn.r42tag.com https://admin.relay42.com https://www.googletagmanager.com https://www.googletagmanager.com/* https://*.googletagmanager.com https://*.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://dl.episerver.net https://*.youtube.com https://js.monitor.azure.com https://westeurope-5.in.applicationinsights.azure.com  https://web.telemetric.dk https://vattenfalltesting.24sessions.com https://connect.facebook.net https://img06.en25.com https://r2eu01.visualwebsiteoptimizer.com https://dc.services.visualstudio.com https://t.svtrd.com https://businessspecificapimanglobal.azure-api.ne https://googleads.g.doubleclick.net https://*.www.google.nl/pagead https://cep-api.vattenfall.com https://td.doubleclick.net https://googleadservices.com https://*.cdn-0.d41.co https://*.w9shetvlr6.d41.co https://*.bing.com https://*.bing.net https://*.lt45.net https://snap.licdn.com https://*.visualwebsiteoptimizer.com https://*.google.nl https://*.google.com https://*.google.co.uk https://pingvp.com https://*.pingvp.com; style-src 'self' 'unsafe-inline' https://*.svc.dynamics.com https://*.mkt.dynamics.com https://*.azureedge.net https://ct.pinterest.com https://*.googlesyndication.com https://*.vattenfall.nl https://*.idomoo.com https://*.cloudfront.net https://web.telemetric.dk https://vattenfalltesting.24sessions.com https://connect.facebook.net https://img06.en25.com https://r2eu01.visualwebsiteoptimizer.com https://dc.services.visualstudio.com https://t.svtrd.com https://businessspecificapimanglobal.azure-api.ne https://googleads.g.doubleclick.net https://*.www.google.nl/pagead https://cep-api.vattenfall.com https://td.doubleclick.net https://googleadservices.com https://*.cdn-0.d41.co https://*.w9shetvlr6.d41.co https://*.bing.com https://*.bing.net https://*.lt45.net https://snap.licdn.com https://*.googleapis.com https://*.gstatic.com https://dl.episerver.net https://pingvp.com https://*.pingvp.com https://*.mopinion.com; img-src 'self' https://*.svc.dynamics.com https://*.mkt.dynamics.com https://*.azureedge.net https://*.googlesyndication.com https://*.vattenfall.nl https://*.google.nl https://*.siteimproveanalytics.com https://*.siteimproveanalytics.io  https://*.linkedin.com https://tdn.r42tag.com https://admin.relay42.com https://cm.g.doubleclick.net https://ad.doubleclick.net https://*.piwik.pro https://*.facebook.com https://*.clarity.ms https://*.bing.com https://*.bing.net https://*.svtrd.com https://*.cloudfront.net https://web.telemetric.dk https://vattenfalltesting.24sessions.com https://connect.facebook.net https://img06.en25.com r2eu01.visualwebsiteoptimizer.com https://dc.services.visualstudio.com https://t.svtrd.com https://businessspecificapimanglobal.azure-api.ne https://googleads.g.doubleclick.net https://*.www.google.nl/pagead https://*.www.google.de/pagead https://cep-api.vattenfall.com https://td.doubleclick.net https://googleadservices.com https://*.cdn-0.d41.co https://*.w9shetvlr6.d41.co https://*.bing.com https://*.bing.net https://*.lt45.net https://snap.licdn.com https://*.visualwebsiteoptimizer.com https://*.google.com https://*.google.co.uk https://*.googleapis.com https://www.googletagmanager.com https://www.googletagmanager.com/* https://*.googletagmanager.com https://*.google-analytics.com https://*.gstatic.com https://dl.episerver.net https://pingvp.com https://*.pingvp.com https://*.openstreetmap.org https://*.mopinion.com data:; font-src 'self' https://*.svc.dynamics.com https://*.mkt.dynamics.com https://*.azureedge.net https://*.googlesyndication.com https://*.vattenfall.nl https://*.googleapis.com https://*.gstatic.com https://dl.episerver.net https://pingvp.com https://*.pingvp.com https://*.mopinion.com data:; frame-ancestors 'self' https://*.svc.dynamics.com https://*.mkt.dynamics.com https://*.azureedge.net https://*.vattenfall.nl https://pingvp.com https://*.pingvp.com; worker-src 'self' data: https://*.svc.dynamics.com https://*.mkt.dynamics.com https://*.azureedge.net https://*.googlesyndication.com https://*.vattenfall.nl https://*.visualwebsiteoptimizer.com https://*.change.inc/ https://nrcwebwinkel.nl https://dl.episerver.net https://*.spotify.com https://*.apple.com https://www.google-analytics.com/* blob:; block-all-mixed-content 2
default-src 'self'; img-src 'self' data: https: blob:; media-src 'self' https://media.videoask.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com https://unpkg.com https://code.jquery.com https://use.fontawesome.com https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net https://cdn.materialdesignicons.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: 'wasm-unsafe-eval' https://www.googletagmanager.com https://cdn.tailwindcss.com https://static.videoask.com https://www.videoask.com https://api.videoask.com https://media.videoask.com https://ajax.googleapis.com https://code.jquery.com https://cdn.jsdelivr.net https://cdn.ampproject.org https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://stats.g.doubleclick.net https://www.googleadservices.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://player.vimeo.com https://unpkg.com https://cdn.amplitude.com https://cdnjs.cloudflare.com https://cdn.materialdesignicons.com https://maxcdn.bootstrapcdn.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://bat.bing.com https://bat.bing.net https://tr.capterra.com https://connect.facebook.net https://www.facebook.com https://px.ads.linkedin.com https://snap.licdn.com https://platform.linkedin.com https://platform.twitter.com https://static.ads-twitter.com https://capig.stape.cloud https://capi-automation.s3.us-east-2.amazonaws.com https://cdn-cookieyes.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://log.cookieyes.com https://directory.cookieyes.com https://cdn.firstpromoter.com https://cdn.neverbounce.com https://api.neverbounce.com https://tracker.metricool.com https://www.clarity.ms https://scripts.clarity.ms https://*.clarity.ms https://cmp.inmobi.com https://api.cmp.inmobi.com https://apis.google.com https://maps.googleapis.com https://www.google.com https://www.google.es https://www.google.pt https://www.gstatic.com https://region1.analytics.google.com https://www.google-analytics.com https://js.storylane.io https://app.storylane.io https://js.hs-banner.com https://js.hs-scripts.com https://js.hs-analytics.net https://js.hsadspixel.net https://js.hubspotfeedback.com https://js.hubspot.com https://js.usemessages.com https://js.hscta.net https://js.hsforms.net https://js-eu1.hsforms.net https://api.hubapi.com https://api.hubspot.com https://app.hubspot.com https://cta-service-cms2.hubspot.com https://forms.hsforms.com https://forms-eu1.hsforms.com https://perf-na1.hsforms.com https://use.fontawesome.com https://static.hsappstatic.net https://secured-pixel.com https://c.adsco.re https://sc.lfeeder.com https://embed.typeform.com https://3001.scriptcdn.net https://us.i.posthog.com https://us-assets.i.posthog.com https://news.sesamehr.com https://staging-news.sesamehr.com; frame-src https://player.vimeo.com https://sesametime-8564339.hs-sites.com https://www.youtube.com https://www.google.com https://app.hubspot.com https://www.facebook.com https://ep2.adtrafficquality.google https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://www.googletagmanager.com https://platform.twitter.com https://consentcdn.cookiebot.com https://s7.addthis.com https://meetings.hubspot.com https://form.typeform.com; font-src 'self' https: data: https://fonts.gstatic.com https://use.fontawesome.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://region1.analytics.google.com https://cdn.amplitude.com https://api.amplitude.com https://cdn-cookieyes.com https://consentcdn.cookiebot.com https://log.cookieyes.com https://directory.cookieyes.com https://www.google.com https://www.google.es https://www.google.pt https://csi.gstatic.com https://ampcid.google.com https://translate.googleapis.com https://maps.googleapis.com https://bat.bing.com https://bat.bing.net https://capig.stape.cloud https://pagead2.googlesyndication.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://px.ads.linkedin.com https://tr.capterra.com https://cta-service-cms2.hubspot.com https://js.hs-banner.com https://api.hubspot.com https://api.hubapi.com https://api.hsforms.com https://forms.hsforms.com https://forms-eu1.hsforms.com https://perf-na1.hsforms.com https://no-cache.hubspot.com https://hubspot-forms-static-embed.s3.amazonaws.com https://hubspot-forms-static-embed-eu1.s3.amazonaws.com https://www.googletagmanager.com https://www.facebook.com https://connect.facebook.net https://analytics.twitter.com https://t.co https://cmp.inmobi.com https://api.cmp.inmobi.com https://api.videoask.com https://www.clarity.ms https://scripts.clarity.ms https://*.clarity.ms https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://unpkg.com https://ajax.googleapis.com https://fonts.googleapis.com https://fonts.gstatic.com https://apis.google.com https://secure.gravatar.com https://api.giphy.com https://lottie.host https://api.typeform.com https://hook.eu1.make.com https://us.i.posthog.com https://us-assets.i.posthog.com https://sentry.neverbounce.com wss://hypersaas.sesamehr.com:6003; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; report-uri /caspa.php 2
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.gstatic.com data: fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' data: *.typekit.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://plumrocket.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; frame-ancestors *.magerocket.com *.gocuotas.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com cdn.dnky.co amc.demdex.net www.google.com www.facebook.com youtube.com https://plumrocket.com *.oca.com.ar *.magerocket.com https://mobbex.com *.gocuotas.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://accounts.google.com assets.braintreegateway.com *.mobbex.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.connectif.cloud maps.gstatic.com maps.googleapis.com accounts.google.com *.google.com www.facebook.com *.oca.com.ar *.magerocket.com *.mobbex.com *.gocuotas.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com analytics.google.com googleads.g.doubleclick.net www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ *.google.com *.typekit.net google.com *.cdn-apple.com *.magento-datasolutions.com www.google-analytics.com *.connectif.cloud https://live.decidir.com/ cdn.dnky.co r1-t.trackedlink.net www.gstatic.com js-agent.newrelic.com bam.nr-data.net maps.googleapis.com connect.facebook.net player.vimeo.com *.oca.com.ar *.magerocket.com *.mobbex.com *.gocuotas.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://accounts.google.com https://www.google.com *.gstatic.com https://maps.googleapis.com songbirdstag.cardinalcommerce.com pay.google.com *.paypal.com c.paypal.com js.braintreegateway.com assets.braintreegateway.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com http2.mlstatic.com secure.mlstatic.com https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com cdn.dnky.co *.googletagmanager.com *.cookielaw.org *.fontawesome.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com https://accounts.google.com *.googleapis.com *.gstatic.com use.typekit.net *.typekit.net fonts.gstatic.com *.magerocket.com *.mobbex.com https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.magento-datasolutions.com *.magento-ds.com *.connectif.cloud https://developers.decidir.com maps.googleapis.com api.comapi.com bam.nr-data.net *.oca.com.ar *.magerocket.com *.cookielaw.org *.mobbex.com *.gocuotas.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://accounts.google.com assets.adobedtm.com js.magento-datasolutions.com *.adobe.com api.braintreegateway.com api.sandbox.braintreegateway.com *.commerce-payment-services.com analytics.google.com https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src https://*.mailcampaigns.nl https://fonts.gstatic.com *.fontawesome.com *.gstatic.com 'self' data: fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ bid.g.doubleclick.net www.facebook.com www.google.com https://*.hotjar.com https://*.doubleclick.net www.googletagmanager.com sst.chromeburner.com sst.uat.chromeburner.com sst.chromeburner.nl sst.uat.chromeburner.nl *.multisafepay.com https://pay.google.com www.xtento.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://*.bing.com bat.bing.net https://*.google-analytics.com https://pagead2.googlesyndication.com https://*.google.nl https://*.google.com https://*.clarity.ms https://*.facebook.com https://*.facebook.net https://*.googletagmanager.com https://*.chromeburner.test blob: https://*.chromeburner.com https://*.chromeburner.nl https://*.hotjar.com https://*.mailcampaigns.nl https://googleads.g.doubleclick.net https://*.usercentrics.eu https://images.unsplash.com *.multisafepay.com *.hsforms.net *.hsforms.com 'self' data: www.xtento.com cdn.xtento.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://*.bing.com https://*.google-analytics.com https://pagead2.googlesyndication.com https://*.webgains.io https://*.clarity.ms https://*.facebook.net https://*.googleadservices.com https://*.doubleclick.net https://*.chromeburner.test https://*.chromeburner.com https://*.chromeburner.nl https://*.hotjar.com https://*.mailcampaigns.nl analytics.tiktok.com https://partner-cdn.shoparize.com https://*.usercentrics.eu https://maps.googleapis.com *.multisafepay.com https://pay.google.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com www.xtento.com cdn.xtento.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://*.mailcampaigns.nl *.fontawesome.com *.multisafepay.com *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://*.bing.com bat.bing.net https://*.doubleclick.net https://*.google.com https://*.google.nl https://pagead2.googlesyndication.com https://*.clarity.ms https://*.chromeburner.test https://*.chromeburner.com https://*.chromeburner.nl https://*.googletagmanager.com https://*.hotjar.com https://*.google-analytics.com https://*.mailcampaigns.nl analytics.tiktok.com https://*.usercentrics.eu https://maps.googleapis.com https://player.vimeo.com *.multisafepay.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://chromeburner.report-uri.com/r/d/csp/reportOnly; report-to report-endpoint; 2
img-src https://higherlogicdownload.s3.amazonaws.com/NACE/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/NACE/ https://img.youtube.com/vi/ https://static.filestackapi.com/picker/ https://d2x5ku95bkycr3.cloudfront.net https://higherlogiclongterm.s3.amazonaws.com/NACE/ blob: https://d132x6oi8ychic.cloudfront.net 'self'; style-src https://d132x6oi8ychic.cloudfront.net 'unsafe-inline' https://higherlogiccloudfront.s3.amazonaws.com https://cdn.jsdelivr.net/jquery.slick/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://d2x5ku95bkycr3.cloudfront.net/ https://ajax.googleapis.com/ajax/libs/jqueryui/ https://use.fortawesome.com/ https://cdn.higherlogic.com/ai-assistant https://static.filestackapi.com/picker/ https://fonts.googleapis.com/ https://d3uf7shreuzboy.cloudfront.net/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/NACE/ https://higherlogicdownload.s3.amazonaws.com/NACE/ https://higherlogiclongterm.s3.amazonaws.com/NACE/ 'self'; font-src https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogiccloudfront.s3.amazonaws.com https://higherlogicdownload.s3.amazonaws.com/NACE/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/NACE/ 'self' https://higherlogiclongterm.s3.amazonaws.com/NACE/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://d2x5ku95bkycr3.cloudfront.net https://d132x6oi8ychic.cloudfront.net data:; script-src-elem https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d3uf7shreuzboy.cloudfront.net/ https://static.filestackapi.com/picker/ https://cdn.higherlogic.com/ai-assistant https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d2x5ku95bkycr3.cloudfront.net/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://www.gstatic.com/recaptcha/ https://static.filestackapi.com/filestack-js/ 'self' https://ajax.aspnetcdn.com/ajax/ 'unsafe-eval' 'unsafe-inline'; media-src https://higherlogiclongterm.s3.amazonaws.com/NACE/ https://higherlogicdownload.s3.amazonaws.com/NACE/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/NACE/ https://higherlogicstream.s3.amazonaws.com/NACE/ 'self' https://d132x6oi8ychic.cloudfront.net; script-src https://higherlogiclongterm.s3.amazonaws.com/NACE/ https://higherlogicdownload.s3.amazonaws.com/NACE/ https://ajax.aspnetcdn.com/ajax/ https://cdn.jsdelivr.net/jquery.slick/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d132x6oi8ychic.cloudfront.net https://cdn.informz.net 'unsafe-eval' https://use.fortawesome.com/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/NACE/ https://cdnjs.cloudflare.com/ajax/libs/prism/ 'unsafe-inline' https://d2x5ku95bkycr3.cloudfront.net/ https://higherlogiccloudfront.s3.amazonaws.com https://static.filestackapi.com https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d3uf7shreuzboy.cloudfront.net/ 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://api.connectedcommunity.org/ 'self' https://www.youtube.com/embed/ https://*.kb.us.higherlogic.com; connect-src https://upload.filestackapi.com https://static.filestackapi.com https://cloud.filestackapi.com/folder/list/ 'self' https://hl-managedservices.informz.net https://d3uf7shreuzboy.cloudfront.net/ blob:; worker-src 'self'; default-src 'self'; base-uri 'self'; frame-ancestors https://*.connectedcommunity.org/ 'self'; object-src 'none'; manifest-src 'self'; 2
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors https://*.doubleclick.net https://*.sharethis.com 'self' https://zb.tdicompliancecloud.com https://drive.zimmerbiomet.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.adsrvr.org https://*.clarity.ms https://*.doubleclick.net https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.marketo.com https://*.mouseflow.com https://*.scene7.com https://*.youtube.com https://*.zimmerbiomet.com https://acsbapp.com https://assets.adobedtm.com https://assets.map.brightcove.com https://bat.bing.com https://cdn.cookielaw.org https://connect.facebook.net https://js.driftt.com https://munchkin.marketo.net https://pagead2.googlesyndication.com https://players.brightcove.net https://snap.licdn.com https://tags.srv.stackadapt.com https://vjs.zencdn.net https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://*.sharethis.com https://buttons-config.sharethis.com https://cdn.jsdelivr.net https://platform-api.sharethis.com https://qvdt3feo.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.marketo.com https://*.scene7.com https://cdn.cookielaw.org https://tags.srv.stackadapt.com https://cdn.jsdelivr.net; img-src 'self' data: https://*.bing.com https://*.clarity.ms https://*.doubleclick.net https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.picsum.photos https://*.salesforce.com https://*.scene7.com https://*.turn.com https://*.zimmerbiomet.com https://assets.adobedtm.com https://assets.map.brightcove.com https://bat.bing.com https://cdn.cookielaw.org https://cf-images.us-east-1.prod.boltdns.net https://cm.everesttech.net https://facebook.com https://connect.facebook.net https://dev.day.com https://dpm.demdex.net https://hostedseal.trustarc.com https://metrics.brightcove.com https://pagead2.googlesyndication.com https://picsum.photos https://privacy-policy.truste.com https://snap.licdn.com https://tags.srv.stackadapt.com https://www.facebook.com https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://zimzbdotcomprod.112.2o7.net https://*.sharethis.com https://www.google.com.mx https://www.thepersonalizedknee.com; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net; connect-src 'self' data: https://*.adsrvr.org https://*.bing.com https://*.clarity.ms https://*.doubleclick.net https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.mktoresp.com https://*.mktoutil.com https://*.salesforce.com https://*.scene7.com https://*.zimmerbiomet.com https://api.ipdata.co https://assets.adobedtm.com https://assets.map.brightcove.com https://bat.bing.com https://bcp.crwdcntrl.net https://cdn.acsbapp.com https://cdn.cookielaw.org https://facebook.com https://connect.facebook.net https://dpm.demdex.net https://edge.api.brightcove.com https://geolocation.onetrust.com https://js.driftt.com https://manifest.prod.boltdns.net https://metrics.brightcove.com https://n2.mouseflow.com https://pagead2.googlesyndication.com https://privacyportal.onetrust.com https://snap.licdn.com https://tags.srv.stackadapt.com https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://zimmerbiomet.tt.omtrdc.net https://zimzbdotcomprod.112.2o7.net https://*.brightcovecdn.com https://*.sharethis.com https://data.stbuttons.click https://house-fastly-signed-us-east-1-prod.brightcovecdn.com https://platform-api.sharethis.com; frame-src 'self' https://*.adsrvr.org https://*.doubleclick.net https://*.google.com https://*.marketo.com https://*.scene7.com https://*.youtube.com https://assets.map.brightcove.com https://connect.facebook.net https://js.driftt.com https://www.googletagmanager.com https://zimmer.demdex.net https://*.sharethis.com https://zb-id-test.vercel.app https://forms.zohopublic.com https://forms.office.com https://zbns.zimmerbiomet.com; media-src 'self' data: blob: https://*.scene7.com https://*.zimmerbiomet.com https://assets.map.brightcove.com https://*.driftt.com https://*.boltdns.net https://*.brightcove.com https://*.brightcovecdn.com; form-action 'self' 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://checkout.stripe.com https://*.paypal.com https://*.paypalobjects.com https://www.gstatic.com https://www.googletagmanager.com https://*.google-analytics.com https://cdn.mxpnl.com https://cdn.retently.com/public/ https://www.google.com/recaptcha/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://pro.fontawesome.com https://www.paypalobjects.com https://*.stripe.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://pro.fontawesome.com; img-src 'self' data: https://*.stripe.com https://www.paypalobjects.com https://www.paypal.com https://www.gravatar.com https://www.googletagmanager.com; frame-src 'self' https://www.google.com https://js.stripe.com https://checkout.stripe.com https://hooks.stripe.com https://*.paypal.com https://*.paypalobjects.com; frame-ancestors 'self'; form-action 'self' https://www.paypal.com; connect-src 'self' https://api.stripe.com https://checkout.stripe.com https://*.google-analytics.com https://www.googletagmanager.com https://app.retently.com/api/ https://*.paypal.com https://*.paypalobjects.com https://*.venmo.com; base-uri 'self'; object-src 'none'; upgrade-insecure-requests; report-uri https://csp-reports.quick.net.au/csp-reports.php; report-to csp-endpoint; 2
default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://cdn.qgr.ph https://www.youtube.com https://www.instagram.com https://platform.twitter.com https://syndication.twitter.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; frame-src 'self' https://www.youtube.com https://www.instagram.com https://platform.twitter.com https://syndication.twitter.com; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://cdn.qgr.ph https://platform.twitter.com https://syndication.twitter.com 2
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.chartbeat.com optanon.blob.core.windows.net *.brightcove.net *.brightcove.com *.googleadservices.com *.adservice.google.com https://adservice.google.com/* adservice.google.com.br *.googletagmanager.com *.tagmanager.google.com *.chimpstatic.com chimpstatic.com *.jquery.com *.zencdn.net *.ytimg.com *.surveymonkey.com *.googleapis.com *.facebook.net *.googletagservices.com *.addthis.com *.google-analytics.com *.onetrust.com *.ampproject.org *.doubleclick.net *.google.com *.mailchimp.com *.addthisedge.com *.youtube.com *.google.co.uk *.list-manage.com *.outbrain.com *.twitter.com *.twimg.com *.googlesyndication.com *.moatads.com *.radioplayer.co.uk *.cheqzone.com *.rubiconproject.com *.cookielaw.org *.cloudflareinsights.com *.instagram.com *.apester.com *.snap.licdn.com *.doubleverify.com *.aniview.com *.vidazoo.com *.ajax.cloudflare.com *.licdn.com *.pinterest.com *.embedresponsively.com *.amazonaws.com *.apester.com/* *.forces.liveblog.pro *.forces.liveblog.pro/* *.strawpoll.com *.freewheel.tv *.lkqd.net *.beachfront.com *.smartadserver.com *.aniview.com *.admanmedia.com *.improvedigital.com *.onetag.com *.indexexchange.com *.pubmatic.com *.rhythmone.com *.video.unrulymedia.com *.gstatic.com *.newrelic.com cdn.jsdelivr.net cdn.bidder.dev c.amazon-adsystem.com quantcast.mgr.consensu.org secure.quantserve.com rules.quantcount.com static.criteo.net *.dotomi.com *.tiktok.com *.google.ie *.ibytedtos.com *.tiktokcdn.com chartbeat.com *.media.net *.sharethrough.com *.openx.com *.sonobi.com *.districtm.io *.emxdgt.com *.appnexus.com *.google.com *.rhythmone.com *.33across.com *.lemmatechnologies.com *.e-planning.net *.themediagrid.com *.sovrn.com *.lijit.com *.gumgum.com *.nr-data.net *.ttwstatic.com *.thinglink.com *.thinglink.me *.defybrick.com e.infogram.com *.clarity.ms; frame-src 'self'  'unsafe-eval' *.addthis.com *.googlesyndication.com *.facebook.com/ *.outbrain.com *.twitter.com *.surveymonkey.com embeds.audioboom.com *.rubiconproject.com *.apester.com *.openx.net *.pinterest.com *.instagram.com *.embedresponsively.com *.youtube.com *.pubmatic.com *.forces.net *.forcesnews.com *.google.com *.bfbs.com apester.com/* forces.liveblog.pro forces.liveblog.pro/* *.strawpoll.com/ timbre-player.sharp-stream.com *.tiktok.com googleads.g.doubleclick.net gum.criteo.com pre.ads.justpremium.com console.googletagservices.com giphy.com *.giphy.com e.infogram.com *.thinglink.com *.thinglink.me; child-src 'self' 'unsafe-inline' 'unsafe-eval' blob: apester.com/* forces.liveblog.pro/* *.strawpoll.com/; upgrade-insecure-requests 2
default-src 'self' https://s0.wp.com https://fonts.googleapis.com https://fonts.gstatic.com data:; frame-src 'self' data: blob: https://www.youtube.com https://player.vimeo.com https://wp-themes.com; img-src * data:; media-src * data:; style-src 'self' https://fonts.googleapis.com data: 'unsafe-inline'; script-src https://wp-themes.com 'self' data: 'unsafe-inline' 'unsafe-eval'; worker-src 'self'; frame-ancestors 'self' https://hub.libraesva.com; report-uri https://sentry.libraesva.com/api/16/security/?sentry_key=ec35ea3e850202bb70633fcd5d55c698 2
policy 2
object-src 'none'; script-src 'self' 'unsafe-eval' fonts.googleapis translate.google.com translate.googleapis.com translate-pa.googleapis.com *.gstatic.com siteimproveanalytics.com *.siteimprove.com svc.webspellchecker.net js-agent.newrelic.com bam.nr-data.net cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdn.siteimprove.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://rebilly.github.io https://static.addtoany.com https://unpkg.com https://webapp.recyclecoach.com maps.googleapis.com platform.instagram.com platform.twitter.com; script-src-attr 'self'; script-src-elem 'self' fonts.googleapis translate.google.com translate.googleapis.com translate-pa.googleapis.com *.gstatic.com siteimproveanalytics.com *.siteimprove.com svc.webspellchecker.net js-agent.newrelic.com bam.nr-data.net cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdn.siteimprove.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://rebilly.github.io https://static.addtoany.com https://unpkg.com https://webapp.recyclecoach.com maps.googleapis.com platform.instagram.com platform.twitter.com; style-src 'self' fonts.googleapis translate.google.com translate.googleapis.com translate-pa.googleapis.com *.gstatic.com siteimproveanalytics.com *.siteimprove.com svc.webspellchecker.net js-agent.newrelic.com bam.nr-data.net cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://use.fontawesome.com; style-src-attr 'self'; frame-ancestors 'self' 2
default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; 2
default-src https: 'self' *.facebook.net *.googletagmanager.com *.bizibly.com *.doubleclick.net https://*.intercomcdn.com https://*.datadoghq-browser-agent.com; font-src 'self' https://*.intercomcdn.com *.fontawesome.com data:; base-uri 'none'; object-src data: 'unsafe-eval'; img-src 'self' data: * ; script-src https: 'self' 'unsafe-eval' 'unsafe-inline' http://*.google-analytics.com http://*.gstatic.com http://*.bing.com http://*.googleadservices.com http://*.hs-scripts.com http://*.bizible.com *.facebook.net *.googletagmanager.com http://*.fontawesome.com http://*.outbrain.com blob:; style-src https: 'self' *.fontawesome.com 'unsafe-inline'; report-to /rest/trackers/csp; 2
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.youtube.com https://cdnjs.cloudflare.com https://cdn.ckeditor.com https://www.googletagmanager.com https://*.clarity.ms https://*.qualtrics.com https://translate.google.com https://translate-pa.googleapis.com https://translate.googleapis.com https://schema.org https://www.google-analytics.com https://maps.googleapis.com/ https://*.gstatic.com https://cdn.jsdelivr.net https://files.ascent360.com https://s.pinimg.com/ https://bat.bing.com/ https://connect.facebook.net/ https://googleads.g.doubleclick.net/ https://js.stripe.com/ https://forms.ascent360.com/ https://static.addtoany.com/ https://*.pinterest.com/ https://*.charmdiamondcentres.com https://*.benmoss.com https://*.crescentjewellers.ca https://*.affirm.ca https://*.charm-diamond-centre.ddev.site https://*.ben-moss.ddev.site https://*.crescent.ddev.site/ https://cdn-charm-diamond-centre-dev.azureedge.net https://cdn-charm-diamond-centre-uat.azureedge.net https://cdn-charm-diamond-centre-alt1.azureedge.net https://cdn-charm-diamond-centre-alt2.azureedge.net https://cdn-ben-moss-dev.azureedge.net https://cdn-ben-moss-uat.azureedge.net https://cdn-crescent-dev.azureedge.net https://cdn-crescent-uat.azureedge.net; object-src 'none'; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://fonts.googleapis.com https://*.typekit.net/ https://*.charmdiamondcentres.com https://*.benmoss.com https://*.crescentjewellers.ca https://*.charm-diamond-centre.ddev.site https://*.ben-moss.ddev.site https://*.crescent.ddev.site/ https://cdn-charm-diamond-centre-dev.azureedge.net https://cdn-charm-diamond-centre-uat.azureedge.net https://cdn-charm-diamond-centre-alt1.azureedge.net https://cdn-charm-diamond-centre-alt2.azureedge.net https://cdn-ben-moss-dev.azureedge.net https://cdn-ben-moss-uat.azureedge.net https://cdn-crescent-dev.azureedge.net https://cdn-crescent-uat.azureedge.net; img-src 'self' data: https://dayofmourning.ns.ca https://*.gstatic.com https://*.qualtrics.com https://*.clarity.ms https://www.googletagmanager.com https://www.google.co.in/pagead/ https://ade.googlesyndication.com/ https://c.bing.com https://ad.doubleclick.net/ https://ad.doubleclick.net/ https://www.google.com/ https://bat.bing.com/ https://www.facebook.com/ https://www.google.ca/ https://*.personalizedgems.com/ https://*.charmdiamondcentres.com https://*.benmoss.com https://*.crescentjewellers.ca https://*.charm-diamond-centre.ddev.site https://*.ben-moss.ddev.site https://*.crescent.ddev.site/ https://charm-stage-dyo.s3.ca-central-1.amazonaws.com https://cdn-charm-diamond-centre-dev.azureedge.net https://cdn-charm-diamond-centre-uat.azureedge.net https://cdn-charm-diamond-centre-alt1.azureedge.net https://cdn-charm-diamond-centre-alt2.azureedge.net https://cdn-ben-moss-dev.azureedge.net https://cdn-ben-moss-uat.azureedge.net https://cdn-crescent-dev.azureedge.net https://cdn-crescent-uat.azureedge.net; media-src 'self'; frame-src 'self' 'unsafe-eval' https://www.googletagmanager.com https://*.clarity.ms https://*.qualtrics.com https://translate.google.com https://translate-pa.googleapis.com https://translate.googleapis.com https://schema.org https://www.google-analytics.com/ https://*.gstatic.com https://*.fls.doubleclick.net/ https://js.stripe.com/ https://*.ascent360.com/ https://static.addtoany.com/ https://*.pinterest.com/ https://*.facebook.com https://*.personalizedgems.com/ https://*.palomarjewelry.com/ https://*.charmdiamondcentres.com https://*.benmoss.com https://*.crescentjewellers.ca https://*.charm-diamond-centre.ddev.site https://*.ben-moss.ddev.site https://*.crescent.ddev.site/ https://online.flexiti.fi https://*.affirm.ca/ https://*.affirm.com/; frame-ancestors 'self' https://translate.google.com https://www.gstatic.com; font-src 'self' https://www.gstatic.com https://fonts.googleapis.com https://fonts.gstatic.com https://*.typekit.net/ https://*.charmdiamondcentres.com https://*.benmoss.com https://*.crescentjewellers.ca https://*.charm-diamond-centre.ddev.site https://*.ben-moss.ddev.site https://*.crescent.ddev.site/ https://cdn-charm-diamond-centre-dev.azureedge.net https://cdn-charm-diamond-centre-uat.azureedge.net https://cdn-charm-diamond-centre-alt1.azureedge.net https://cdn-charm-diamond-centre-alt2.azureedge.net https://cdn-ben-moss-dev.azureedge.net https://cdn-ben-moss-uat.azureedge.net https://cdn-crescent-dev.azureedge.net https://cdn-crescent-uat.azureedge.net data:; connect-src 'self' https://cdn.ckeditor.com https://www.googletagmanager.com https://www.google.ca/ https://pagead2.googlesyndication.com/ https://*.clarity.ms https://www.google-analytics.com https://translate.googleapis.com https://*.qualtrics.com https://translate-pa.googleapis.com https://translate.googleapis.com https://schema.org https://*.gstatic.com https://bat.bing.com/ https://cdn.jsdelivr.net https://ad.doubleclick.net/ https://*.ascent360.com/ https://*.google.com/ https://*.pinterest.com/ https://*.charmdiamondcentres.com/ https://*.crescentjewellers.ca/ https://*.benmoss.com/ https://*.stape.biz https://*.charmdiamondcentres.com https://*.benmoss.com https://*.crescentjewellers.ca https://*.affirm.com https://*.affirm.ca https://*.charm-diamond-centre.ddev.site https://*.ben-moss.ddev.site https://*.crescent.ddev.site/ https://cdn-charm-diamond-centre-dev.azureedge.net https://cdn-charm-diamond-centre-uat.azureedge.net https://cdn-charm-diamond-centre-alt1.azureedge.net https://cdn-charm-diamond-centre-alt2.azureedge.net https://cdn-ben-moss-dev.azureedge.net https://cdn-ben-moss-uat.azureedge.net https://cdn-crescent-dev.azureedge.net https://cdn-crescent-uat.azureedge.net https://stats.g.doubleclick.net/ https://www.googleadservices.com/ https://s.pinimg.com/ https://googleads.g.doubleclick.net/ https://www.facebook.com/tr/; report-uri /report-csp-violation; upgrade-insecure-requests 2
default-src 'self' blob: *; img-src 'self' data: *; script-src 'self' blob: * 'unsafe-inline' 'unsafe-eval'; style-src 'self' * 'unsafe-inline'; font-src 'self' data: *; connect-src *; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; connect-src *; font-src * data:; frame-src *; img-src * data: blob:; media-src *; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.ownerrez.com https://*.orez.io https://ajax.googleapis.com https://assets.calendly.com https://code.jquery.com https://maps.googleapis.com https://www.google.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.gstatic.com https://www.redditstatic.com https://connect.facebook.net; worker-src * blob:; style-src * 'unsafe-inline'; report-uri https://o4511310048526336.ingest.us.sentry.io/api/4511337721888768/security/?sentry_key=4c6441f207b3ceaba29ab9c5d08f76dc 2
script-src 'self' 'unsafe-inline' 'unsafe-eval'; 2
frame-ancestors 'self'; report-uri https://www.goldcoastbulletin.com.au/csp-reports 2
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://snap.licdn.com https://cdn.teamtailor.com https://websdk.appsflyer.com https://onelink.me https://cdnjs.cloudflare.com https://zzcdn.me https://*.zzcdn.me https://elsaspeak.com https://www.clarity.ms 'unsafe-eval' https://googleads.g.doubleclick.net https://s.yimg.jp https://bat.bing.com https://static.ads-twitter.com https://analytics.tiktok.com https://analytics.ahrefs.com https://js.hs-scripts.com https://crm.zoho.com https://websdk.appsflyersdk.com https://onelinksmartscript.appsflyer.com https://scripts.clarity.ms https://js.hsadspixel.net https://js.hs-banner.com https://js.hubspot.com https://js.hs-analytics.net https://b99.yahoo.co.jp; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://vn.elsaspeak.com https://cdn.jsdelivr.net; font-src 'self' data: https://cdnjs.cloudflare.com; img-src 'self' data: blob: https://www.google-analytics.com https://www.googletagmanager.com https://*.fbcdn.net https://www.facebook.com https://px.ads.linkedin.com https://i.ytimg.com https://api.producthunt.com https://online.gov.vn https://zzcdn.me https://*.zzcdn.me https://vn.elsaspeak.com https://*.clarity.ms https://log.adtimaserver.vn https://www.google.com.vn https://d1t11jpd823i7r.cloudfront.net https://www.googleadservices.com https://www.google.com https://t.co https://analytics.twitter.com https://bat.bing.com https://perf-na1.hsforms.com https://b99.yahoo.co.jp https://track.hubspot.com https://c.clarity.ms; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net https://px.ads.linkedin.com https://*.appsflyer.com https://*.clarity.ms https://ad.doubleclick.net https://www.google.com https://www.googleadservices.com https://log.adtimaserver.vn https://analytics.google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://wa.onelink.me https://js.hs-banner.com https://analytics-ipv6.tiktokw.us https://analytics.tiktok.com https://cta-service-cms2.hubspot.com https://api.hubapi.com https://wa.appsflyersdk.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.facebook.com https://*.teamtailor.com https://www.googletagmanager.com; worker-src 'self' blob:; frame-ancestors 'self'; base-uri 'self'; object-src 'none' 2
object-src 'self' *.cined.com; report-uri /_/csp-report/ 2
default-src 'self' data:; script-src 'self' https://webtools.europa.eu *.webanalytics.europa.eu 'unsafe-eval' https://cdn.jsdelivr.net https://europa.eu/ https://cdn.ckeditor.com/ckeditor5/ https://webanalytics.europa.eu https://op.europa.eu https://*.webtools.europa.eu; object-src 'none'; style-src 'self' https://webtools.europa.eu 'unsafe-inline' https://op.europa.eu/; img-src 'self' https://webtools.europa.eu *.webanalytics.europa.eu data: https://webanalytics.europa.eu https://op.europa.eu; frame-src https://w.soundcloud.com https://www.youtube.com/ https://*.ec.europa.eu/ https://www.dailymotion.com/ https://vimeo.com/ 'self' https://webtools.europa.eu https://europa.eu/ https://op.europa.eu; child-src https://w.soundcloud.com https://www.youtube.com/ https://*.ec.europa.eu/ https://www.dailymotion.com/ https://vimeo.com/ 'self' https://webtools.europa.eu https://europa.eu/ https://op.europa.eu; font-src 'self' https://webtools.europa.eu; connect-src 'self' https://webtools.europa.eu *.webanalytics.europa.eu https://webanalytics.europa.eu https://europa.eu/webtools/rest/etrans/translate https://op.europa.eu https://*.webtools.europa.eu; report-uri /report-csp-violation 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://js.stripe.com https://checkout.razorpay.com https://www.paypal.com https://www.paypalobjects.com https://connect.facebook.net https://www.clarity.ms https://client.crisp.chat https://settings.crisp.chat https://*.hotjar.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://client.crisp.chat; font-src 'self' data: https://fonts.gstatic.com https://client.crisp.chat; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' https: wss:; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://checkout.razorpay.com https://api.razorpay.com https://www.paypal.com https://www.googletagmanager.com https://td.doubleclick.net https://game.crisp.chat https://www.youtube.com https://www.youtube-nocookie.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none' 2
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.googleapis.com data: *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://plumrocket.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com https://plumrocket.com *.affirm.com *.affirm.ca www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://www.google.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.certcapture.com *.hubspot.com *.hsforms.com static.hsappstatic.net bat.bing.com *.googleusercontent.com obs.withflowersea.com aorta.clickagy.com *.affirm.com *.affirm.ca *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.certcapture.com js.usemessages.com js.hs-banner.com *.hubspot.com js.hs-analytics.net js.hs-scripts.com js.hsadspixel.net js-agent.newrelic.com ob.withflowersea.com obs.withflowersea.com script.crazyegg.com bat.bing.com www.clarity.ms amplify.outbrain.com wave.outbrain.com bigsur.ai ws-assets.zoominfo.com js.zi-scripts.com tags.clickagy.com js.adsrvr.org js.callrail.com cdn.callrail.com https://rum.hlx.page *.affirm.com *.affirm.ca *.googleapis.com *.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://www.googletagmanager.com tagmanager.google.com https://www.googleadservices.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://apis.google.com maps.googleapis.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com *.hubspot.com api.hubapi.com bam.nr-data.net tr.outbrain.com amplify.outbrain.com paid.outbrain.com obs.withflowersea.com js.callrail.com script.crazyegg.com api.prod.bigsur.ai v.clarity.ms js.zi-scripts.com ws.zoominfo.com aorta.clickagy.com hemsync.clickagy.com *.affirm.com *.affirm.ca *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self' data: blob: https://*.trustage.com https://*.trustagedem.com https://*.trustagedemo.com; connect-src 'self' data: properties: https://cmfglifeinsurance.us-6.evergage.com https://api.coralanalytic.com https://rp4.liadm.com https://trustageimages.azureedge.net https://bat.bing.com wss://127.0.0.1:2029/ wss://chat-gw-de-na1.niceincontact.com https://pagead2.googlesyndication.com https://get663.com https://cm.trustage.com https://dd.binsiad.com https://www.google.de https://us.i.posthog.com wss://127.0.0.1:2028/ https://www.google.fr https://events.binsiad.com https://www.google.pl wss://127.0.0.1:2026/ wss://127.0.0.1:2021/ wss://127.0.0.1:2020/ wss://127.0.0.1:2024/ wss://127.0.0.1:2023/ wss://127.0.0.1:2025/ wss://127.0.0.1:2022/ https://connect.facebook.net https://safesearchinc.com https://px.ads.linkedin.com https://www.google.ca https://singleview.site https://statsdata.online https://gadstat.com https://www.gstatic.com https://analytics.google.com https://www.googleadservices.com https://logx.optimizely.com https://stats.g.doubleclick.net https://www.google.com https://www.google.co.uk https://ad.doubleclick.net https://bat.bing.net https://cunamutualdtc.my.salesforce-scrt.com https://bded8a3c6ae-1-1053047382554.us-central1.run.app https://aax-eu.amazon-adsystem.com https://googleads.g.doubleclick.net https://rp.liadm.com https://people.api.zetaglobal.net https://ara.paa-reporting-advertising.amazon https://k6-e4e4123be8e54363900a90353991ca93.ecs.us-west-1.on.aws https://c.amazon-adsystem.com https://eastus2-3.in.applicationinsights.azure.com https://s.amazon-adsystem.com https://*.google-analytics.com https://*.google.com https://*.linkedin.com https://*.niceincontact.com https://clientstream.launchdarkly.com/ https://fonts.gstatic.com https://*.optimizely.com https://*.cunamutual.com https://www.nextinsure.com https://geolocation.onetrust.com https://privacyportal.onetrust.com https://*.googlesyndication.com https://*.trustage.com https://us-central1-adaptive-growth.cloudfunctions.net https://cdn.linkedin.oribi.io https://s.yimg.com https://*.doubleclick.net https://*.trustagedem.com https://*.trustagedemo.com https://*.oktacdn.com https://*.bing.com https://*.googleapis.com https://cunamutual.okta.com https://cdn.cookielaw.org https://cunamutual.oktapreview.com/ https://*.googleadservices.com/ https://*.qualtrics.com/ https://dc.services.visualstudio.com/ https://*.levelaccess.net https://www.googletagmanager.com https://facebook.com/ https://*.segment.io https://*.segment.com https://*.permutive.com https://calc-backend-prod.herokuapp.com https://www.facebook.com https://eastus2-0.in.applicationinsights.azure.com https://*.api.boomtrain.com https://cunamutualdtc--democc.sandbox.my.salesforce-scrt.com https://cunamutualdtc.my.site.com https://*.c360a.salesforce.com; frame-ancestors 'self' https://trustage.com https://www.trustage.com https://*.optimizely.com https://*.trustagedem.com https://*.trustagedemo.com; frame-src 'self' nsb: https://trustage.com https://*.cdn.optimizely.com https://assets.l3harris.com http://8689224.fls.doubleclick.net https://redirect.isolation.zscaler.com http://10.180.0.184:15871 https://gateway.id.swg.umbrella.com https://static.deledao.com https://proxyerror.quad.com http://192.168.6.26:15871 https://172.20.16.1:8090 https://135.153.121.197:15871 http://10.10.20.81:15871 https://login.zscalerthree.net https://localhost:6543 http://10.1.2.228:15871 https://172.16.30.2:8090 https://pwm-image.trendmicro.com https://aax-eu.amazon-adsystem.com https://a25241461358.cdn.optimizely.com https://idprotect.trendmicro.com https://authenticate.ibotta.com http://10.22.21.92:15871 https://block.opendns.com https://pelican-secure-cloud.portal.banyanops.com https://192.168.20.250:8090 https://eun.dadco.com https://lsrelay-config-production.s3.amazonaws.com https://192.168.58.254:8090 http://acceptable-use-policy.s3-website-us-east-1.amazonaws.com http://172.25.120.157:15871 http://10.22.21.91:15871 https://gateway.zscloud.net https://sso.georgiasown.org http://10.21.21.91:15871 http://10.253.20.212:15871 http://10.10.22.46:15871 http://localhost.localdomain http://127.0.0.1:0 http://192.168.100.46:15871 https://zscaler.nml.com https://10.10.35.1:8090 http://10.0.16.73:15871 https://gateway.zscalerthree.net http://10.1.70.107:15871 https://i.liadm.com http://10.56.10.30:15871 https://block.sse.cisco.com http://wsa.ironport.gecu-ep.org http://10.1.5.129:15871 https://portal.bitglass.com https://safe.menlosecurity.com https://s.amazon-adsystem.com https://*.googlesyndication.com https://cunamutual.widen.net https://login.microsoftonline.com https://*.widencdn.net https://*.opendns.com https://*.optimizely.com https://www.youtube.com https://chase.hostedpaymentservice.net https://chase-var.hostedpaymentservice.net https://*.doubleclick.net https://*.trustage.com https://*.trustagedem.com https://*.trustagedemo.com https://*.oktacdn.com https://www.googletagmanager.com https://*.trustpilot.com/ https://*.flashtalking.com https://*.google.com https://*.qualtrics.com https://*.affec.tv https://*.opendns.com https://www.facebook.com https://*.ceros.com https://home-c27.incontact.com https://*.polly.co https://web-modules-de-na1.niceincontact.com https://cunamutualdtc--democc.sandbox.my.site.com https://cunamutualdtc.my.site.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://cmfglifeinsurance.us-6.evergage.com https://cdn.segment.com https://z7yj.82omyo.com https://googleads.g.doubleclick.net https://early.webawesome.com https://b-code.liadm.com https://live.rezync.com https://c.amazon-adsystem.com https://*.googlesyndication.com https://*.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com https://static-demo.trustage.cloud https://*.trustage.com https://*.googleadservices.com https://*.trustagedem.com https://*.trustagedemo.com https://cdn.cookielaw.org https://*.signalintent.com https://*.google.com https://chase-var.hostedpaymentservice.net https://chase.hostedpaymentservice.net https://cdn.pdst.fm https://snap.licdn.com https://insurance.mediaalpha.com https://us-central1-adaptive-growth.cloudfunctions.net https://s.yimg.com https://*.facebook.net https://geolocation.onetrust.com https://cdn.linkedin.oribi.io https://privacyportal.onetrust.com https://*.google.com https://sp.analytics.yahoo.com https://*.linkedin.com https://www.pagespeed-mod.com https://*.google-analytics.com https://*.salesforceliveagent.com/ https://*.oktacdn.com/ https://*.trustpilot.com/ https://*.gstatic.com/ https://*.googletagmanager.com/ https://az416426.vo.msecnd.net/ https://*.levelaccess.net/ https://*.qualtrics.com/ https://www.googleoptimize.com https://bat.bing.com https://solutions.invocacdn.com https://pnapi.invoca.net https://*.affec.tv/ https://*.evgnet.com/ https://*.ceros.com https://home-c27.incontact.com https://secure.adnxs.com https://cdn.permutive.com https://trkn.us https://www.facebook.com https://cdn.c360a.salesforce.com/ https://seal.digicert.com/ https://*.boomtrain.com; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' blob: https://*.trustage.com https://c.amazon-adsystem.com https://3001.scriptcdn.net https://secured-pixel.com https://get663.com https://a.usbrowserspeed.com https://gc.kis.v2.scr.kaspersky-labs.com https://b-code.liadm.com https://cdn.binsiad.com https://cdn.browsiprod.com https://us-assets.i.posthog.com https://live.rezync.com https://siteintercept.qualtrics.com https://go.affec.tv https://app.shop.pe https://cdn.optimizely.com https://lottingem.com https://www.google-analytics.com https://s7.addthis.com https://zn6qfqur9sb2nvydt-cunamutualgroup.siteintercept.qualtrics.com https://embed.signalintent.com https://widget.trustpilot.com https://googleads.g.doubleclick.net https://cdn.boomtrain.com https://cmfglifeinsurance.us-6.evergage.com https://www.gstatic.com https://early.webawesome.com https://*.optimizely.com https://*.affec.tv/ https://chase.hostedpaymentservice.net https://*.bing.com https://*.google.com https://*.doubleclick.net https://*.googleadservices.com https://*.google-analytics.com https://www.googletagmanager.com https://*.googleadservices.com https://*.googlesyndication.com https://cdn.pdst.fm https://cdn.cookielaw.org https://snap.licdn.com https://*.qualtrics.com https://s.yimg.com https://*.salesforceliveagent.com https://*.facebook.com https://connect.facebook.net https://www.youtube.com https://bat.bing.com https://*.evgnet.com/ https://*.levelaccess.net https://chase-var.hostedpaymentservice.net https://*.oktacdn.com https://www.googleoptimize.com https://*.trustpilot.com/ https://az416426.vo.msecnd.net/ https://solutions.invocacdn.com https://secure.adnxs.com https://cdn.permutive.com https://*.signalintent.coms https://*.segment.com https://*.ceros.coms https://cdn.c360a.salesforce.com/ https://seal.digicert.com/ https://tracking.intentsify.io/ https://web-modules-de-na1.niceincontact.com/ https://cunamutualdtc--democc.sandbox.my.site.com https://cunamutualdtc.my.site.com; style-src 'self' 'unsafe-inline' https://cmfglifeinsurance.us-6.evergage.com https://early.webawesome.com https://*.trustage.com https://*.trustagedem.com https://*.trustagedemo.com https://*.signalintent.com https://rsms.me https://*.googleapis.com https://*.google.com https://*.googlesyndication.com https://google.ca https://www.googleoptimize.com https://*.google-analytics.com https://*.trustpilot.com/ https://www.youtube.com https://web-modules-de-na1.niceincontact.com  https://pwm-image.trendmicro.com https://cdn.honey.io https://www.gstatic.com/ https://cunamutualdtc--democc.sandbox.my.site.com https://cunamutualdtc.my.site.com; style-src-elem 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://early.webawesome.com https://static.trustage.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: file: https: https://googleads.g.doubleclick.net https://seal.digicert.com https://www.facebook.com https://map.go.affec.tv https://px.ads.linkedin.com https://www.googleadservices.com https://cnv.event.prod.bidr.io https://cdn.cookielaw.org; font-src 'self' chrome-extension: ms-browser-extension: data: https://cmfglifeinsurance.us-6.evergage.com https://images.simplycodes.com https://cdnjs.cloudflare.com https://at.alicdn.com https://web-modules-de-na1.niceincontact.com https://use.typekit.net https://frontend-cdn.perplexity.ai https://www.slant.co https://static.shopback.com https://static.trustage.com https://static-demo.trustage.com https://fonts.gstatic.com https://rsms.me https://maxcdn.bootstrapcdn.com https://fonts.cdnfonts.com https://use.fontawesome.com https://static2.sharepointonline.com https://static.zip.co https://embed.signalintent.com https://appservice.azureedge.net/; object-src 'self' https://go.polly.co https://insurance.polly.co https://a25241461358.cdn.optimizely.com; media-src 'self' https://d4qgj78fzsl5j.cloudfront.net; report-uri /api/csp/report; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.checkout.com *.cdn-apple.com *.careem-pay.com *.fontawesome.com https://fonts.bunny.net *.cloudflare.com *.bootstrapcdn.com 'unsafe-inline' data: static.sizebay.technology *.moengage.com fonts.googleapis.com data: checkout.tabby.ai widgets.tabby.ai cdn.tabby.ai storage.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com connect.facebook.net www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.checkout.com *.klarna.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.b-cdn.net *.tap.company *.careem-pay.com https://c.sharethis.mgr.consensu.org gumi.criteo.com rivafashion.api.useinsider.com www.googletagmanager.com td.doubleclick.net fledge.eu.criteo.com static.criteo.net static.sizebay.technology ams.creativecdn.com js.checkout.com tr.snapchat.com *.moengage.com https://www.googletagmanager.com/ checkout.tabby.ai 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.tamara.co *.checkout.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.b-cdn.net https://firebasestorage.googleapis.com *.meetanshi.com *.cloudflare.com www.rivafashion.com sentinel.api.useinsider.com t.co www.google.co.in analytics.twitter.com ad.360yield.com pixel.rubiconproject.com s.ad.smaato.net ade.clmbtech.com contextual.media.net sync-t1.taboola.com simage2.pubmatic.com eb2.3lift.com sync-criteo.ads.yieldmo.com x.bidswitch.net dis.criteo.com r.casalemedia.com c.bing.com criteo-sync.teads.tv rtb-csync.smartadserver.com idsync.rlcdn.com sync.outbrain.com cs.adingo.jp cdn.aralego.net tg.socdm.com adx.dable.io sync.targeting.unrulymedia.com cm.adgrx.com sync.aralego.com public-prod-dspcookiematching.dmxleo.com tr.snapchat.com cm.g.doubleclick.net sync.1rx.io/ image-eu.moengage.com ib.adnxs.com ads.stickyadstv.com *.moengage.com moe-email-campaigns.s3.amazonaws.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ checkout.tabby.ai widgets.tabby.ai cdn.tabby.ai fonts.googleapis.com storage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.tamara.co *.checkout.com *.klarnacdn.net *.cdn-apple.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.b-cdn.net *.careem-pay.com *.cloudflare.com *.avada.io *.cloudflareinsights.com static.cloudflareinsights.com web-sdk.ackoo.app *.api.useinsider.com tags.creativecdn.com *.twitter.com *.fontawesome.com static.ads-twitter.com widget.eu.criteo.com ams.creativecdn.com sc-static.net static.sizebay.technology dynamic.criteo.com rivafashion.api.useinsider.com app.link cdn.branch.io analytics.tiktok.com www.gstatic.com cdn.moengage.com sslwidget.criteo.com cdn.checkout.com js-agent.newrelic.com tr.snapchat.com vfr-v3-production.sizebay.technology http://www.googletagmanager.com/ https://www.googletagmanager.com/ libraries.unbxdapi.com checkout.tabby.ai widgets.tabby.ai cdn.segment.com www.google.com cdn.sift.com score.jcsc.online seondf.com deviceinf.com getdeviceinf.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.tamara.co *.checkout.com *.b-cdn.net *.fontawesome.com https://fonts.bunny.net *.cloudflare.com *.bootstrapcdn.com www.rivafashion.com goselljslib.b-cdn.net static.sizebay.technology *.moengage.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tamara.co *.moengage.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.tamara.co *.checkout.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.browser-intake-datadoghq.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.dev.tap.company *.tap.company https://get.geojs.io *.avada.io *.api.useinsider.com api2.branch.io mug.criteo.com ams.creativecdn.com www.rivafashion.com segment.api.useinsider.com hit.api.useinsider.com measurement-api.criteo.com tr6.snapchat.com static.sizebay.technology tr.snapchat.com js.checkout.com stats.g.doubleclick.net get.geojs.io sdk-02.moengage.com api.ipify.org api.allorigins.win bam.eu01.nr-data.net *.twitter.com carrier.useinsider.com unification.useinsider.com analytics.tiktok.com vfr-v3-production.sizebay.technology *.moengage.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ checkout.tabby.ai widgets.tabby.ai cdn.segment.com api.segment.com api.segment.io api.amplitude.com *.seondfresolver.com *.deviceinfresolver.com *.getdeviceinfresolver.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src www.rivafashion.com www.google.com tr6.snapchat.com *.seondnsresolve.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.rivafashion.com/; report-to report-endpoint; 2
font-src *.typekit.net fonts.gstatic.com use.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com *.klarnacdn.net *.klevu.com *.ksearchnet.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.instagram.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klarna.com *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.trustpilot.com *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com *.cdninstagram.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.trackedlink.net *.klarna.com *.klarnaevt.com *.klarnacdn.net *.klevu.com *.ksearchnet.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com beacon-qa.magento-datasolutions.com beacon-stage.magento-ds.com beacon.magento-ds.com beacon-audiences.magento-ds.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com *.gstatic.com *.instagram.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com js.klevu.com *.ksearchnet.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com *.trustpilot.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com beacon-audiences.magento-ds.com fonts.googleapis.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klarnacdn.net *.klevu.com *.ksearchnet.com *.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net p13n-mr.adobe.io beacon-audiences.magento-ds.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.adobedc.net *.demdex.net *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.klevu.com *.ksearchnet.com *.stripe.com klarna.com *.link.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://7dc0cf2f-7ee0-4e32-abdf-e62b11896390.sansec.watch/; report-to report-endpoint; 2
font-src sw-assets.ekomiapps.de *.contentbird-convert.com static-v2.unzer.com www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://static.unzer.com https://applepay.cdn-apple.com https://www.gstatic.com https://fonts.gstatic.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com *.fontawesome.com https://fonts.bunny.net https://geowidget.easypack24.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src *.usercentrics.eu td.doubleclick.net *.pinterest.com *.criteo.com www.sovendus-connect.com static.experimentation.dev static-cc.unzer.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.awin1.com *.zenaps.com *.fls.doubleclick.net https://www.googletagmanager.com/ https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://static-cc.test.unzer.com https://h.online-metrix.net https://google.com/pay https://pay.google.com/ https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ https://sandbox.clicktopay.auth.visa.com https://clicktopay.visa.com https://sandbox.secure.checkout.visa.com https://secure.checkout.visa.com https://www.google.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com https://geowidget-app.inpost.pl/ 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.josera.de *.foodforplanet.de *.trbo.com sw-assets.ekomiapps.de *.usercentrics.eu www.google.de *.analytics.google.com bat.bing.com *.g.doubleclick.net ib.adnxs.com region1.google-analytics.com rtb-csync.smartadserver.com a.twiago.com sync-t1.taboola.com pixel.quantserve.com ad.360yield.com sync.1rx.io *.criteo.com sync.targeting.unrulymedia.com *.wepowerconnections.com lantern.roeye.com static.experimentation.dev *.contilla.de *.contentbird-convert.com static-v2.unzer.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.awin1.com *.zenaps.com https://ssl.ceneo.pl http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://static.unzer.com *.online-metrix.net https://www.gstatic.com magefan.com cm.magefan.com *.disqus.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com https://firebasestorage.googleapis.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org data: 'self' 'unsafe-inline'; script-src 'unsafe-inline' foodf11123.pcapredict.com *.trbo.com *.usercentrics.eu cdn.jsdelivr.net tierspuren.online *.upsellit.com *.cptrack.de lantern.roeyecdn.com *.brandswap.com brandswaptag.azureedge.net api.contester.net sw-assets.ekomiapps.de s.pinimg.com bat.bing.com *.facebook.net *.criteo.com *.criteo.net googleads.g.doubleclick.net www.clarity.ms secure.quantserve.com ad4m.at *.pinterest.com rules.quantcount.com *.sovendus.com static.experimentation.dev *.kameleoon.io *.contilla.de *.contentbird-convert.com static-v2.unzer.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com https://ssl.ceneo.pl widget.freshworks.com m2epro.freshdesk.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.amplifyapp.com https://static.unzer.com https://applepay.cdn-apple.com https://pay.google.com https://code.jquery.com https://h.online-metrix.net https://h64.online-metrix.net https://static-v2.unzer.com/v2/ui-components/ https://www.google.com https://www.gstatic.com *.disqus.com *.snrbox.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com *.avada.io *.shopify.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org 'self' 'unsafe-inline' 'unsafe-eval'; style-src sw-assets.ekomiapps.de static.experimentation.dev *.contentbird-convert.com static-v2.unzer.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com https://sandbox.src.mastercard.com https://static-v2.unzer.com/v2/ui-components/ *.snrcdn.net https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com *.fontawesome.com https://fonts.bunny.net https://geowidget.easypack24.net https://geowidget.inpost.pl 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.josera.de tierspuren.online region1.google-analytics.com tagapi.brandswap.com sw-assets.ekomiapps.de *.usercentrics.eu www.google.com *.analytics.google.com *.googlesyndication.com googleads.g.doubleclick.net *.pinterest.com *.criteo.com *.clarity.ms *.sovendus.com *.googletagmanager.com bat.bing.com www.google.de static.experimentation.dev sdk-config.experimentation.dev eu-data.experimentation.dev *.contentbird-convert.com api.unzer.com static-cc.unzer.com *.google-analytics.com www.googleadservices.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.wepowerconnections.com https://the.sciencebehindecommerce.com widget.freshworks.com m2epro.freshdesk.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://api.unzer.com https://api.heidelpay.com https://sbx-api.heidelpay.com https://sbx-api.unzer.com https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://h.online-metrix.net https://h64.online-metrix.net https://google.com/pay https://www.google.com/pay https://pay.google.com https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ https://static-cc.test.unzer.com https://static-v2.unzer.com/v2/ui-components/ *.snrbox.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com api.addressy.com https://get.geojs.io *.avada.io *.easypack24.net *.inpost.pl *.openstreetmap.org 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'   *.cloudflare.com   *.bing.com   *.rfihub.net   *.boomtrain.com   *.cookielaw.org   *.facebook.net   *.doubleclick.net   *.derbysoftsec.com   *.rezync.com   *.cdn.digitaloceanspaces.com   *.azds.com   *.sojern.com   *.quantcount.com   *.crazyegg.com   *.quantserve.com   *.cloudflareinsights.com   *.stackadapt.com   *.google-analytics.com   *.googletagmanager.com   *.tiqcdn.com   *.stripe.com   *.googleapis.com   *.gstatic.com   *.google.com   *.callrail.com   *.googleadservices.com   *.yimg.com   *.simpli.fi   *.matomo.cloud   plausible.io   *.umami.is   *.posthog.com   *.threatspike.com   *.qvdt3feo.com   *.montage.com;  script-src-elem 'self' 'unsafe-inline'   *.cloudflare.com   *.bing.com   *.rfihub.net   *.boomtrain.com   *.cookielaw.org   *.facebook.net   *.doubleclick.net   *.derbysoftsec.com   *.rezync.com   *.cdn.digitaloceanspaces.com   *.azds.com   *.sojern.com   *.quantcount.com   *.crazyegg.com   *.quantserve.com   *.cloudflareinsights.com   *.stackadapt.com   *.google-analytics.com   *.googletagmanager.com   *.tiqcdn.com   *.stripe.com   *.googleapis.com   *.gstatic.com   *.google.com   *.callrail.com   *.googleadservices.com   *.yimg.com   *.simpli.fi   *.montage.com   *.storage.googleapis.com   plausible.io   *.matomo.cloud   *.sc-static.net   *.posthog.com   *.threatspike.com   *.umami.is   *.infird.com   *.hotjar.com   *.upsellit.com   *.redditstatic.com   blob:;  connect-src 'self'   *.azds.com   *.boomtrain.com   *.callrail.com   *.cookielaw.org   *.crazyegg.com   *.doubleclick.net   *.facebook.com   *.g.doubleclick.net   *.google-analytics.com   google.com   *.google.com.mx   *.google.com   *.google.de   *.googleadservices.com   *.googletagmanager.com   *.googleapis.com   *.google.co.uk   *.onetrust.com   *.sojern.com   *.stackadapt.com   *.tiqcdn.com   *.myhotelshop.de   *.awsapprunner.com   *.run.app   *.letsway.com   *.bing.com   *.bing.net   *.googlesyndication.com   *.matomo.cloud   *.umami.dev   *.yimg.com   plausible.io   *.pendry.com   *.posthog.com   *.yoast.com   *.launchdarkly.com   *.geoedge.com   *.adsrvr.org   *.yoast.com   *.cloudfront.net   *.adform.net   *.adnxs.com   *.tiktokw.us   *.tiktok.com   *.browsekeeper.com   *.redditstatic.com   *.reddit.com   *.overbridgenet.com   *.montage.com   data:;  frame-src 'self'   *.doubleclick.net   *.facebook.com   *.googletagmanager.com   *.google.com   *.pcibooking.net   *.rfihub.net   *.rfihub.com   *.sojern.com   *.stripe.com   *.azds.com   *.zscalerthree.net   *.truetour.app   truetour.app   visitingmedia.com   *.vimeo.com   *.formcrafts.com   *.ibotta.com   *.contextall.com   *.canyonsdistrict.org   *.ggusd.us   *.menlosecurity.com   *.zscaler.net   *.snapchat.com   *.montage.com   blob:;  style-src * 'unsafe-inline'; img-src * data: blob:; font-src * data:; media-src * 'self' data:; manifest-src * 'self'; worker-src 'self' blob:; child-src 'self' blob:;  report-uri https://cfe87652b26de6b69f71ed43bef9cf37.report-uri.com/r/d/csp/reportOnly; 2
default-src 'self' https://*.cit.com;           script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.cit.com https://snap.licdn.com https://munchkin.marketo.net https://www.googletagmanager.com https://googleads.g.doubleclick.net https://static.ads-twitter.com https://s.yimg.com https://bat.bing.com https://connect.facebook.net https://static.hotjar.com https://script.hotjar.com https://utt.impactcdn.com https://cdn.cookielaw.org https://www.fdic.gov https://assets.adobedtm.com https://siteintercept.qualtrics.com https://siteimproveanalytics.com https://www.everestjs.net https://zn780vxspp4zyl7dr-citcx.siteintercept.qualtrics.com https://citgroup.demdex.net https://pixel.everesttech.net https://sp.analytics.yahoo.com https://g.3gl.net https://cg-7ce3a684-2bed-464c-8d1c-1a0e4cba69c6.s3.us-gov-west-1.amazonaws.com https://s.go-mpulse.net https://launchpad.privacymanager.io https://ats-wrapper.privacymanager.io;           connect-src 'self' https://*.cit.com https://graphql.contentful.com https://cms-images.cit.com https://cdn.cookielaw.org https://privacyportal.onetrust.com https://geolocation.onetrust.com https://dpm.demdex.net https://edge.adobedc.net https://bat.bing.com https://lib-us-2.brilliantcollector.com https://stats.g.doubleclick.net https://analytics.google.com https://www.google.com https://lasteventf-tm.everesttech.net https://s.yimg.com https://px.ads.linkedin.com https://siteintercept.qualtrics.com https://151-fhs-046.mktoresp.com https://894-itd-344.mktoresp.com https://284-lbb-572.mktoresp.com https://022-ygl-099151-fhs-046284-lbb-572.mktoresp.com https://c.go-mpulse.net https://citbank.sjv.io;           worker-src 'self';           style-src 'self' 'unsafe-inline' https://*.cit.com https://cdn.cookielaw.org;           style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.cookielaw.org;           img-src 'self' data: https://*.cit.com https://cms-images.cit.com https://2884.global.siteimproveanalytics.io https://dpm.demdex.net https://cdn.cookielaw.org https://px.ads.linkedin.com https://www.google.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://bat.bing.com https://sp.analytics.yahoo.com https://cm.everesttech.net https://www.linkedin.com;           frame-src 'self' https://*.cit.com https://citbankapp.cit.com https://uat-oao.cit.com https://stage-oao.cit.com https://sape-oao.cit.com https://pl-oao.cit.com https://qa-oao.cit.com https://www.googletagmanager.com https://fast.wistia.net https://citgroup.demdex.net;           frame-ancestors 'self' https://citbankapp.cit.com https://uat-oao.cit.com https://stage-oao.cit.com https://sape-oao.cit.com https://pl-oao.cit.com https://qa-oao.cit.com https://customerfinancing.directcapital2.com https://www.customerfinancing.com https://customerfinancing.directcapital-test1.com https://customerfinancing.directcapital-test2.com https://customerfinancing.directcapital-test3.com https://customerfinancing.directcapital-test4.com onlineapps-conv.readiness.ibanking-services.com onlineapps.ibanking-services.com ibanking-services.com https://*.fisglobal.com https://*.citbank.com https://citcom-dev.ase1-dev.citnet.cit.com https://*.firstcitizens.com;           media-src 'self' blob: *.wistia.com *.wistia.net;           font-src 'self' data: *.wistia.com *.onetrust.com *.wistia.net *.gstatic.com;            2
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' https:; connect-src 'self' https:; 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.cloudfront.net *.podigee-cdn.net 'self' data: d3c2yqbxx52o4l.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * d3c2yqbxx52o4l.cloudfront.net 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com https://www.googletagmanager.com/ *.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.office365.com schoeffel-lowa.de *.podigee-cdn.net komoot.com d3c2yqbxx52o4l.cloudfront.net www.komoot.com d3ms8mre5rhtvu.cloudfront.net dwin1.com awin1.com zenaps.com the.sciencebehindecommerce.com wepowerconnections.com lantern.roeyecdn.com lantern.roeye.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://www.mollie.com maps.googleapis.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.cdninstagram.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.usercentrics.eu *.hubspot.com *.podigee-cdn.net *.hsforms.net *.hsforms.com 'self' data: d3c2yqbxx52o4l.cloudfront.net maps.gstatic.com dwin1.com awin1.com zenaps.com the.sciencebehindecommerce.com wepowerconnections.com lantern.roeyecdn.com lantern.roeye.com *.facebook.com *.google.pl *.google.de data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.mollie.com maps.googleapis.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ player.vimeo.com connect.facebook.net cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleadservices.com *.usercentrics.eu *.googleapis.com *.hs-scripts.com *.hs-banner.com *.hs-analytics.net *.podigee-cdn.net *.hsforms.net *.hsforms.com *.gstatic.com d3c2yqbxx52o4l.cloudfront.net pagead2.googlesyndication.com *.dwin1.com dwin1.com *.awin1.com awin1.com *.zenaps.com zenaps.com the.sciencebehindecommerce.com wepowerconnections.com lantern.roeyecdn.com lantern.roeye.com *.hsadspixel.net *.digiaccess.org 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.podigee-cdn.net *.googleapis.com *.gstatic.com d3c2yqbxx52o4l.cloudfront.net *.googletagmanager.com www.google.pl 'self' 'unsafe-inline'; object-src d3c2yqbxx52o4l.cloudfront.net 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.cloudfront.net d3c2yqbxx52o4l.cloudfront.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com maps.googleapis.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.usercentrics.eu *.googleapis.com *.googlesyndication.com t.elasticsuite.io *.hsforms.net *.hsforms.com places.googleapis.com d3c2yqbxx52o4l.cloudfront.net www.google-analytics.com analytics.google.com paypal.com *.paypalobjects.com dwin1.com awin1.com zenaps.com the.sciencebehindecommerce.com wepowerconnections.com lantern.roeyecdn.com lantern.roeye.com *.digiaccess.org *.hubapi.com *.lowa.com *.hsappstatic.net googleads.g.doubleclick.net www.google.pl 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com d3c2yqbxx52o4l.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cdn.jsdelivr.net geowidget.easypack24.net *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.wesupply.xyz https://wesupplylabs.com secure.payu.com merch-prod.snd.payu.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.google.pl www.facebook.com px.ads.linkedin.com elmark.com.pl www.elmark.com.pl *.clarity.ms *.bing.com geowidget.easypack24.net osm.inpost.pl www.rugged.com.pl elmatic.net magefan.com cm.magefan.com https://firebasestorage.googleapis.com static.payu.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com maps.googleapis.com snap.licdn.com connect.facebook.net *.clarity.ms pi.pardot.com unpkg.com api.mapbox.com cdn.jsdelivr.net geowidget.easypack24.net info.elmark.com.pl consent.cookiefirst.com *.googlesyndication.com *.cloudflare.com *.avada.io secure.payu.com secure.snd.payu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.jsdelivr.net geowidget.easypack24.net *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com maps.googleapis.com region1.analytics.google.com px.ads.linkedin.com *.clarity.ms stats.g.doubleclick.net *.googlesyndication.com api-pl-points.easypack24.net *.google-analytics.com https://get.geojs.io *.avada.io secure.payu.com merch-prod.snd.payu.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src www.google.com *.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https://www.magezon.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.avada.io *.shopify.com *.google.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; manifest-src 'self'; media-src 'self'; worker-src 'self' blob:;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.privacy-center.org https://widget.trustpilot.com https://*.hotjar.com https://*.hubspot.com https://*.hsforms.net https://www.youtube.com https://*.doubleclick.net https://*.realytics.io https://*.realytics.net https://*.bing.com https://*.tiktok.com https://*.criteo.com https://*.taboola.com https://*.outbrain.com https://*.quora.com https://*.licdn.com https://*.roeyecdn.com https://*.hs-scripts.com https://*.hscollectedforms.net https://*.hs-analytics.net https://www.dwin1.com https://*.younited.com https://*.younited-credit.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.googletagmanager.com https://*.typekit.net;img-src 'self' data: https://www.googletagmanager.com https://www.google.com https://www.google.fr https://www.google.it https://www.google.es https://www.google.pt https://www.google.de https://www.facebook.com https://fonts.gstatic.com https://aca-pr-cms-weu.ace1.younited-private.com https://designassets.younited.com https://*.doubleclick.net https://*.bing.com https://*.quora.com https://*.licdn.com https://*.linkedin.com https://*.hubspot.com https://*.hsforms.com https://*.adnxs.com https://*.privacy-center.org https://*.analytics.google.com https://lantern.roeye.com https://*.younited.com https://*.younited-credit.com;font-src 'self' data: https://fonts.gstatic.com https://*.typekit.net;connect-src 'self' https://www.googletagmanager.com https://*.privacy-center.org https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://widget.trustpilot.com https://www.google.com https://*.tiktok.com https://*.tiktokw.us https://*.bing.com https://*.bing.net https://*.doubleclick.net https://www.googleadservices.com https://*.outbrain.com https://*.taboola.com https://*.creativecdn.com https://*.hubspot.com https://*.hubapi.com https://*.hsforms.com https://*.hscollectedforms.net https://*.licdn.com https://*.linkedin.com https://*.criteo.com https://*.younited.com https://*.younited-credit.com;frame-src 'self' https://widget.trustpilot.com https://www.googletagmanager.com https://*.criteo.com https://*.doubleclick.net https://*.youtube.com https://*.hsforms.net https://tr.cloud-media.fr;report-uri https://cspreport.services.younited-credit.com/csp-report; 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.google.com https://*.google-analytics.com https://*.googleadservices.com https://*.g.doubleclick.net https://*.gstatic.com https://*.hs-scripts.com https://js-na2.hs-analytics.net https://js-na2.hs-banner.com https://*.hscollectedforms.net https://snap.licdn.com https://bat.bing.com https://sc.lfeeder.com https://plugins.flockler.com https://apibeta.iamgaia.com https://cdn.cookielaw.org https://cdn.onthe.io https://cdn.zingchart.com https://darkvisitors.com https://c.sproutvideo.com https://knownagents.com; connect-src 'self' data: https://www.googletagmanager.com https://*.google.com https://*.google-analytics.com https://*.googleadservices.com https://*.g.doubleclick.net https://*.hscollectedforms.net https://px.ads.linkedin.com https://tt.onthe.io https://listgrowth.ctctcdn.com https://apibeta.iamgaia.com https://privacyportal.onetrust.com https://geolocation.onetrust.com https://cdn.cookielaw.org https://api.flockler.app https://media-api.flockler.com https://stats-api.flockler.app https://darkvisitors.com https://bat.bing.com https://bat.bing.net https://*.algolia.net https://*.algolianet.com https://*.algolia.io https://www.googleadservices.com https://knownagents.com https://translate.googleapis.com; img-src 'self' https: data: blob: https://forms-na2.hsforms.com; media-src 'self' blob: data: https://videos.sproutvideo.com https://dms.licdn.com; style-src 'self' 'unsafe-inline' https://cdn.cookielaw.org https://static.ctctcdn.com https://www.gstatic.com https://fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' https://www.gstatic.com https://static.ctctcdn.com https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://s0.wp.com https://assets.merci-app.com https://appdown.pstatic.net https://at.alicdn.com https://cdn.yiban.io; frame-src 'self' https://www.googletagmanager.com https://www.google.com https://open.spotify.com https://player.vimeo.com https://videos.sproutvideo.com https://www.youtube.com https://www.youtube-nocookie.com https://challenges.cloudflare.com; worker-src 'self' blob:; report-uri https://cspreport.kla.com/api/reports/csp; 2
default-src 'self';             script-src 'self' 'unsafe-inline' 'unsafe-eval'                 https://*.acer.org                 https://kit.fontawesome.com https://cdnjs.cloudflare.com                 https://code.jquery.com                 https://cdn.jsdelivr.net https://www.youtube.com                 https://player.vimeo.com https://www.googletagmanager.com https://www.gstatic.com                 https://www.google-analytics.com https://cdn.monsido.com https://www.gstatic.com/call-tracking/ https://www.google.com/recaptcha/                 https://static.ads-twitter.com https://snap.licdn.com                 https://connect.facebook.net https://googleads.g.doubleclick.net                 https://maxcdn.bootstrapcdn.com/bootstrap/ https://stackpath.bootstrapcdn.com/bootstrap/                 https://*.adroll.com                 https://fast.wistia.com/embed/medias/ https://fast.wistia.com/assets/external/                 https://acer.tfaforms.net/ https://www.tfaforms.com/wForms/                 https://platform.twitter.com/                 https://widgets.sociablekit.com/                 https://cdn.mouseflow.com/                 https://js.createsend1.com/javascript/                 https://bat.bing.com;             style-src 'self' 'unsafe-inline'                 https://*.acer.org                 https://fonts.googleapis.com https://cdnjs.cloudflare.com https://www.gstatic.com                https://cdn.jsdelivr.net                 https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/                 https://acer.tfaforms.net/dist/ https://acer.tfaforms.net/uploads/themes/ https://www.tfaforms.com/dist/                 https://widgets.sociablekit.com/                 https://kit.fontawesome.com https://maxcdn.bootstrapcdn.com/font-awesome/;             img-src 'self' data: blob:                 https://*.acer.org https://www.acer-ibt.org https://www.researchconference.com.au https://www.immchallenge.org.au https://www.stemgames.org.au                 https://tracking.monsido.com                 https://www.google.com.au/ads/ https://www.google.com.au/pagead/ https://www.google.com https://www.google-analytics.com/ https://www.googletagmanager.com                 https://px.ads.linkedin.com https://media.licdn.com/dms/image/ https://media.licdn.com/dms/image/                 https://sociablekit.com/app/ https://images.sociablekit.com/                 https://t.co/i/ https://analytics.twitter.com/i/                 https://www.facebook.com/tr/                 https://ping.eeharbor.com                 https://*.adroll.com                 https://bat.bing.com;             font-src 'self' data:                 https://*.acer.org                 https://fonts.googleapis.com https://fonts.gstatic.com                 https://cdnjs.cloudflare.com https://cdn.jsdelivr.net                 https://ka-p.fontawesome.com https://maxcdn.bootstrapcdn.com/font-awesome/ https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/;             media-src 'self' https://www.acer.org https://www.youtube.com https://player.vimeo.com;             frame-src                 https://www.google.com/recaptcha/ https://www.googletagmanager.com                 https://platform.twitter.com/widgets/                 https://www.acer.org https://www.youtube.com https://player.vimeo.com https://shorthand.com;             connect-src 'self'                 https://*.acer.org                 https://ka-p.fontawesome.com https://kit.fontawesome.com                 https://www.google.com https://googleads.g.doubleclick.net https://www.google-analytics.com https://www.googleadservices.com https://www.google.com.au/pagead/                 https://acer.tfaforms.net/api_v2/                 https://stats.g.doubleclick.net/                 https://www.facebook.com/tr/                 https://updates.expressionengine.com                 https://px.ads.linkedin.com/wa/;             object-src 'none';             base-uri 'self';             form-action 'self';             upgrade-insecure-requests;             report-uri https://csp-testing.acer.org/reportOnly/index; 2
upgrade-insecure-requests; default-src 'self' https: data: wss: 'unsafe-inline' 'unsafe-eval'; 2
script-src-attr 'unsafe-inline'; font-src cash-f.squarecdn.com https://*.gstatic.com *.bglobale.com *.global-e.com https://use.typekit.net https://x.klarnacdn.net https://static.klaviyo.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.adyen.com https://www.shopmyexchange.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com https://www.google.com/recaptcha/ www.googletagmanager.com * *.adyen.com *.bglobale.com *.global-e.com https://ct.pinterest.com https://*.fls.doubleclick.net https://postrelease.com https://*.rfihub.com *.yotpo.com https://frame.hub-box.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com validator.swagger.io * https://*.gstatic.com *.adyen.com *.bglobale.com *.global-e.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://alb.reddit.com https://analytics.twitter.com https://bat.bing.com https://*.doubleclick.net https://*.facebook.com https://sync.intentiq.com https://jadserve.postrelease.com https://t.co https://*.teads.tv https://r.turn.com https://*.yahoo.com *.yotpo.com https://i.lfi.media https://cdn.hub-box.com https://www.danner.com https://www.lacrossefootwear.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com *.bglobale.com *.global-e.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://cnstrc.com *.convertexperiments.com https://ads.pubmatic.com https://static.ads-twitter.com https://bat.bing.com https://cdn.attn.tv https://cdn.ravm.tv https://cdnjs.cloudflare.com https://ct.pinterest.com https://connect.facebook.net https://cdn.id5-sync.com https://agent.intentiq.com https://s.ntv.io https://s.pinimg.com https://platform.twitter.com https://jadserve.postrelease.com https://c1.rfihub.net https://*.taboola.com https://*.teads.tv https://s.yimg.com https://static.zdassets.com https://assets.calendly.com https://js.klarna.com https://*.klaviyo.com https://*.locally.com *.yotpo.com https://cdn.hub-box.com https://cdn.segment.com https://*.cdp.danner.com https://*.cdp.lacrossefootwear.com https://*.addressy.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cash.app https://fonts.googleapis.com/ *.bglobale.com *.global-e.com https://static.klaviyo.com https://cdnjs.cloudflare.com https://*.typekit.net https://x.klarnacdn.net https://*.klaviyo.com *.yotpo.com *.googleapis.com https://api.addressy.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://i.lfi.media 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com * *.adyen.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://ac.cnstrc.com https://*.attn.tv https://bat.bing.com https://cdn.ravm.tv https://gum.criteo.com https://id.crwdcntrl.net https://ct.pinterest.com https://*.doubleclick.net https://id5-sync.com https://eu-1-id5-sync.com/ https://*.reddit.com https://*.redditstatic.com https://*.taboola.com https://*.teads.tv https://s.yimg.com https://*.zdassets.com https://*.zendesk.com https://tags.w55c.net https://js.klarna.com https://evt-na.klarnaservices.com https://*.klaviyo.com https://www.locally.com *.yotpo.com https://api.segment.io https://cdn.segment.com https://*.cdp.danner.com https://*.cdp.lacrossefootwear.com https://api.addressy.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src 'self' data:; 2
default-src 'self'; script-src 'self' https://plausible-analytics.k8s.blackgate.nl https://deskpro-prod.blackgate.nl; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; connect-src 'self' https://plausible-analytics.k8s.blackgate.nl https://deskpro-prod.blackgate.nl; frame-src https://deskpro-prod.blackgate.nl https://admin.blackgate.nl; form-action 'self'; frame-ancestors 'self'; base-uri 'self'; object-src 'none' 2
font-src www.paypalobjects.com *.relaxdays.com *.gstatic.com *.trustami.com cdn.userway.org *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' data: data: 'self' 'unsafe-inline'; form-action *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.facebook.com *.pinterest.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src *.paypal.com www.paypalobjects.com *.relaxdays.com *.youtube.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.consentmanager.net *.googlesyndication.com *.youtube-nocookie.com *.facebook.com *.pinterest.com *.pinterest.de *.sibforms.com sibautomation.com *.paypalobjects.com *.googletagmanager.com cdn.userway.org *.doubleclick.net conversations-widget.brevo.com *.criteo.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.paypal.com *.paypalobjects.com *.relaxdays.com i.ytimg.com *.youtube.com *.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.consentmanager.net www.it-recht-kanzlei.de *.clarity.ms *.google.com *.pinimg.com *.pinterest.com *.doubleclick.net *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.gstatic.com *.googleusercontent.com *.facebook.com *.tiktok.com alb.reddit.com www.datenschutz.net *.trustami.com bat.bing.com bat.bing.net cdn.userway.org www.google.de www.google.ch www.google.at www.google.es www.google.it www.google.nl www.google.pl www.google.be www.google.sk www.google.pt www.google.fr www.google.dk www.google.se www.google.co.uk www.google.bg www.google.cz www.google.ee www.google.gr www.google.hu www.google.lv www.google.lt www.google.lu www.google.ro www.google.si www.google.ie www.google.hr www.google.fi www.google.com.mt www.google.com.cy *.criteo.com 'self' data: data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net *.paypal.com *.paypalobjects.com s.ytimg.com *.googleapis.com *.relaxdays.com *.youtube.com *.gstatic.com *.google.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.consentmanager.net *.clarity.ms *.pinterest.com *.pinimg.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.facebook.net *.doubleclick.net *.googlesyndication.com bat.bing.com bat.bing.net bat.bing-int.com *.tiktok.com sibautomation.com *.sendinblue.com www.redditstatic.com *.trustami.com conversations-widget.brevo.com cdn.userway.org www.google.de www.google.ch www.google.at www.google.es www.google.it www.google.nl www.google.pl www.google.be www.google.sk www.google.pt www.google.fr www.google.dk www.google.se www.google.co.uk www.google.bg www.google.cz www.google.ee www.google.gr www.google.hu www.google.lv www.google.lt www.google.lu www.google.ro www.google.si www.google.ie www.google.hr www.google.fi *.criteo.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.relaxdays.com *.googletagmanager.com *.googleapis.com *.gstatic.com cdn.userway.org *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src *.relaxdays.com 'self' 'unsafe-inline'; media-src *.relaxdays.com 'self' 'unsafe-inline'; manifest-src *.relaxdays.com 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net *.paypal.com *.paypalobjects.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.relaxdays.com blob: *.consentmanager.net *.google.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.googlesyndication.com google.com www.google.de www.google.ch www.google.at www.google.es www.google.it www.google.nl www.google.pl www.google.be www.google.sk www.google.pt www.google.fr www.google.dk www.google.se www.google.co.uk www.google.bg www.google.cz www.google.ee www.google.gr www.google.hu www.google.lv www.google.lt www.google.lu www.google.ro www.google.si www.google.ie www.google.hr www.google.fi *.facebook.com *.pinterest.com bat.bing.com bat.bing.net bat.bing-int.com *.tiktok.com *.sendinblue.com in-automate.brevo.com analytics.pangle-ads.com analytics-ipv6.tiktokw.us api.userway.org cdn.userway.org cmodul.solutenetwork.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://relaxdays.com/_csp_report_; report-to report-endpoint; 2
default-src 'self' data: blob: *.armstrong.com *.armstrongceilings.com armstrongceilings.my.salesforce-sites.com d2qrdklrsxowl2.cloudfront.net player.interactivity.brightcove.com fonts.gstatic.com www.google-analytics.com;style-src 'self' 'unsafe-inline' fast.fonts.net d2qrdklrsxowl2.cloudfront.net *.s3.amazonaws.com fonts.googleapis.com player.interactivity.brightcove.com;form-action 'self' *.armstrong.com  *.armstrongceilings.com  *.salesforceliveagent.com armstrongceilings.my.site.com;frame-ancestors 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.armstrong.com *.armstrongceilings.com *.analytics.google.com *.clearbitscripts.com *.google-analytics.com *.google.com *.mountain.com *.outbrain.com *.salesforceliveagent.com assets.adobedtm.com cdn-cookieyes.com connect.facebook.net d2qrdklrsxowl2.cloudfront.net googleads.g.doubleclick.net js-na1.hs-scripts.com js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsadspixel.net js.hscollectedforms.net js.hsforms.net lib-us-3.brilliantcollector.com players.brightcove.net scripts.clarity.ms snap.licdn.com vjs.zencdn.net www.googleadservices.com www.googletagmanager.com www.gstatic.com 100.20.58.101 18.210.229.244 3.212.39.155 34.215.155.61 35.160.46.251 35.85.84.151 44.212.189.233 44.228.85.26 44.238.122.172 52.22.50.55 52.71.121.170 54.156.2.105 54.156.2.105100.20.58.101;frame-src 'self' bid.g.doubleclick.net d2qrdklrsxowl2.cloudfront.net armstrong.demdex.net www.google.com;img-src 'self' data: *.armstrong.com *.armstrongceilings.com  *.brightcove.com *.outbrain.com armstrongceilings.my.salesforce-sites.com cdn-cookieyes.com cf-images.us-east-1.prod.boltdns.net cm.everesttech.net data.coremetrics.com dpm.demdex.net p.adsymptotic.com px.ads.linkedin.com s7d2.scene7.com www.google-analytics.com www.google.com www.googletagmanager.com track.hubspot.com www.facebook.com;connect-src 'self' *.armstrong.com *.armstrongceilings.com *.akamaihd.net *.brightcove.com *.clearbitscripts.com *.cookieyes.com *.google-analytics.com *.hapyak.com api.hubapi.com armstrong.tt.omtrdc.net brightcove.hs.llnwd.net cdn-cookieyes.com cdn.linkedin.oribi.io dpm.demdex.net edge.adobedc.net edge.api.brightcove.com forms.hsforms.com house-fastly-signed-us-east-1-prod.brightcovecdn.com i.clarity.ms lib-us-3.brilliantcollector.com manifest.prod.boltdns.net px.ads.linkedin.com stats.g.doubleclick.net 100.20.58.101 18.210.229.244 3.212.39.155 34.215.155.61 35.160.46.251 35.85.84.151 44.212.189.233 44.228.85.26 44.238.122.172 52.22.50.55 52.71.121.170 54.156.2.105 2
default-src 'self'; connect-src *; img-src * data:; script-src 'self' cdn.bizible.com; style-src 'self' 'unsafe-inline' https://404-tpa-276.mktoweb.com/ https://*.qualified.com; font-src 'self' https://fast.wistia.com/ https://fast.wistia.net/ data:; form-action 'self'; object-src 'none'; media-src 'self' blob: mediastream: https://*.qualified.com; frame-src https://www.googletagmanager.com https://td.doubleclick.net/ https://gtm.8am.com/ https://insight.adsrvr.org/ https://app.netlify.com/ https://404-tpa-276.mktoweb.com/ https://*.qualified.com; child-src https://*.qualified.com; frame-ancestors demo.affinipay.com https://app.contentful.com; upgrade-insecure-requests; block-all-mixed-content 2
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com/ https://*.doubleclick.net/ https://static.hotjar.com/ https://cdn.cookielaw.org/ https://imasdk.googleapis.com/ https://*.hotjar.io/ https://connect.facebook.net/ https://*.facebook.com/ https://*.facebook.net/ https://analytics.tiktok.com/ https://galt.hit.gemius.pl/ https://cdn.ampproject.org/ https://*.googlesyndication.com/ https://*.adtrafficquality.google/ https://*.2mdn.net/ https://*.hotjar.com/ https://connect.facebook.net/ https://analytics.tiktok.com/ https://cdn.cookielaw.org/ https://www.googletagmanager.com/ https://*.hotjar.io/; style-src 'self' 'unsafe-inline' https://cdn.cookielaw.org/ https://fonts.googleapis.com/ https://www.biathlonworld.com/embedded-player.css https://www.atletiek.nl/build/css/css-ebu.build.css; img-src 'self' data: https://imageservice.evsports.opentv.com/images/v1/image/Sport/ https://cabi.evsports.sports.opentv.com/ https://*.sports.opentv.com/ https://www.googletagmanager.com/ https://static.hotjar.com/ https://cdn.cookielaw.org/logos/ https://www.google.com/ https://www.google.co.uk/ https://www.facebook.com/ https://*.g.doubleclick.net/ https://*.adtrafficquality.google/pagead/ https://*.googlesyndication.com/ https://www.ebu.ch/files/live/sites/ebu/files/images/ https://*.cloudfront.net/EBU/; font-src 'self' data: https://fonts.gstatic.com/; connect-src 'self' https://cdn.cookielaw.org/ https://api.evsports.opentv.com/metadata/delivery/ https://www.google.com/pagead/form-data/ https://www.google.com/ccm/ https://www.google.com/rmkt/collect/ https://*.sports.opentv.com/ https://www.googletagmanager.com/ https://*.googlesyndication.com/ https://*.gstatic.com/ https://*.adtrafficquality.google/getconfig/sodar https://securepubads.g.doubleclick.net/ https://analytics.tiktok.com/ https://www.facebook.com/ https://*.tiktokw.us/ https://*.hotjar.com/ https://galt.hit.gemius.pl/ https://firebase.googleapis.com/ https://firebaseremoteconfig.googleapis.com/v1/projects/eurovision-sport-prod-772510/ https://firebaseinstallations.googleapis.com/v1/projects/eurovision-sport-prod-772510/ https://firebaseremoteconfig.googleapis.com/v1/projects/eurovision-sport-dev-511366/ https://firebaseinstallations.googleapis.com/v1/projects/eurovision-sport-dev-511366/ https://*.facebook.com/ https://*.fbcdn.net/ https://*.facebook.net/ https://*.google-analytics.com/ https://*.onetrust.com/ https://*.hotjar.io/ wss://ws.hotjar.com/ https://*.akamaized.net/ https://*.anycast.nagra.com/ https://evs-dtvsports-vod-secure2.akamaized.net/ https://*.ampproject.org/ https://api.evsports.opentv.com/ https://api.evsports.opentv.com/useractivityvault/v1/useractivity/; frame-src https://ads.eurovisionsport.com https://files.eurovisionsport.com/ https://www.google.com/ https://*.adtrafficquality.google/ https://www.googletagmanager.com/ https://*.g.doubleclick.net/ https://*.safeframe.googlesyndication.com/ https://imasdk.googleapis.com/ https://www.googleadservices.com/ https://www.ebu.ch/ https://eurovisionsport.com/ https://ls.hit.gemius.pl/ https://pagead2.googlesyndication.com/ https://www.facebook.com/; media-src blob: https:; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com/; report-uri /api/csp-report; report-to csp-endpoint; 2
default-src 'self'; script-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; 2
object-src 'none'; script-src 'self' 'report-sample' cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://unpkg.com maps.google.com; style-src 'self' 'report-sample' https://cdn.jsdelivr.net https://unpkg.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri https://www.electronics.org/log-report-uri/reportOnly 2
report-uri             https://gfcorporate.report-uri.com/r/d/csp/reportOnly ;         default-src             'self'             www.gfms.com             gfms.com             www.gfps.com             gfcorporate.report-uri.com             *.google.at *.google.be *.google.cz *.google.dk *.google.fi *.google.fr *.google.de *.google.it *.google.nl *.google.no *.google.pl *.google.ro *.google.ru *.google.es *.google.se *.google.ch *.google.com.tr *.google.co.uk *.google.com.ar *.google.ca *.google.com *.google.com.br *.google.com.mx *.google.com.au *.google.cn *.google.co.in *.google.co.id *.google.co.jp *.google.com.my *.google.co.nz *.google.com.sg *.google.co.kr *.google.com.tw *.google.com.vn *.google.bg *.google.hr *.google.ee *.google.gr *.google.hu *.google.lv *.google.lu *.google.mk *.google.pt *.google.rs *.google.si *.google.com.ph *.google.co.th *.google.com.eg *.google.co.il *.google.co.za *.google.ae ;         connect-src             'self'             *.google-analytics.com             apikeys.civiccomputing.com             *.googleapis.com             center.lon5.atomz.com             clapi.civiccomputing.com             sp1004e61f.guided.lon5.atomz.com             sp1004e61a.guided.lon5.atomz.com             sp1004e5dd.guided.lon5.atomz.com             stats.g.doubleclick.net             www.facebook.com             uberall.com             locator.uberall.com             api.moin.ai             www.gfps.com             www.gfpstools.com             neoflow.gfpstools.com             cdn.linkedin.oribi.io             assets.georgfischer.com             google.com             analytics.google.com             *.analytics.google.com             *.googletagmanager.com             *.g.doubleclick.net             *.google.com             *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat             cdn.cookielaw.org             *.onetrust.com             *.svc.dynamics.com             *.clarity.ms             ad.doubleclick.net             adservice.google.com             assets-eur.mkt.dynamics.com             public-eur.mkt.dynamics.com             assets.adobedtm.com             c-cdn.contentfry.com             catalog.contentfry.com             platform.contentfry.com             code.jquery.com             fbo-b.flippingbook.com             online.flippingbook.com             live.solique.ch             polyfilljs.org             s7e5a.scene7.com             s7mbrstream-g1.scene7.com             www.googleadservices.com ;         font-src             'self'             fonts.gstatic.com             www.gfms.com             widget.moin.ai             static-prod.uberall.com             static.prod.uberall.com ;         script-src             'self'             'unsafe-inline'             'unsafe-eval'             www.google.com             *.google-analytics.com             *.googletagmanager.com             assets.adobedtm.com             ajax.googleapis.com             assets.georgfischer.com             cc.cdn.civiccomputing.com             connect.facebook.net             cdnjs.cloudflare.com             gstatic.com             maps.googleapis.com             siteimproveanalytics.com             snap.licdn.com             static-prod.uberall.com             uberall.com             locator.uberall.com             www.youtube.com             www.pagespeed-mod.com             www.googleoptimize.com             mktdplp102cdn.azureedge.net             www.pagespeed-mod.com             widget.moin.ai             platform.contentfry.com             cdn.cookielaw.org             cookie-cdn.cookiepro.com             privacyportal.onetrust.com             geolocation.onetrust.com             r1.dotdigital-pages.com             r1-t.trackedlink.net             r1.ddlnk.net             www.googleadservices.com ;         script-src-elem             uberall.com             www.googletagmanager.com             'self'             assets.georgfischer.com             blob:             code.jquery.com             locator.uberall.com             maps.googleapis.com             s7e5a.scene7.com             www.clarity.ms             www.google.com             www.googleadservices.com             www.youtube.com ;         style-src             'self'             'unsafe-inline'             'unsafe-eval'             fonts.googleapis.com             assets.georgfischer.com             errors.adobeaemcloud.com             widget.moin.ai ;         style-src-elem             www.googletagmanager.com         	'self'         	assets.georgfischer.com         	blob: s7e5a.scene7.com             www.gstatic.com ;         img-src             'self'             'unsafe-inline'             'unsafe-eval'             data:             *.georgfischer.com             www.linkedin.com             *.global.siteimproveanalytics.io             nswow-imageresizer.azurewebsites.net             px.ads.linkedin.com             www.facebook.com             connect.facebook.net             *.google.com             gfms.com             www.gfms.com             static-prod.uberall.com             static.prod.uberall.com             www.linkedin.com             s7e5a.scene7.com             *.g.doubleclick.net             *.svc.dynamics.com             i.ytimg.com             maps.gstatic.com             fonts.gstatic.com             www.gfps.com             www.gfpstools.com             locator.uberall.com             *.amazonaws.com             *.googletagmanager.com             *.googleapis.com             *.google-analytics.com             *.analytics.google.com             *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat             cdn.cookielaw.org             c.clarity.ms             m.youtube.com             *.onetrust.com ;         child-src             'self'             blob:             analytics-eu.clickdimensions.com             live.solique.ch             www.youtube.com ;         form-action             www.facebook.com             www.georgfischer.com             'self' ;         frame-ancestors             'self'             https://*.georgfischer.com;         frame-src             'self'             'unsafe-inline'             'unsafe-eval'             data:             analytics-eu.clickdimensions.com             google.com             ir.tools.investis.com             irs.tools.investis.com             live.solique.ch             recruitingapp-5505.de.umantis.com             registration.gesevent.com             six-swiss-exchange.com             tools.google.com             uberall.com             widget.moin.ai             *.svc.dynamics.com             *.ep-mimecast.dynamics.com             www.gfps.com             bim.gfps.com             ir2.flife.de             www.youtube.com             m.youtube.com             *.ep-mimecast.youtube-nocookie.com             www.youtube-nocookie.com.x.af435fba09eaa04ff30886e05784e20ddae5.d045227c.id.opendns.com             r1.dotdigital-pages.com             display.contentfry.com             googletagmanager.com             cad.georgfischer.com             forms.office.com             foundation-gf-dev.georgfischer.com             online.flippingbook.com             players.brightcove.net             youtube.com ;         manifest-src             'self' ;         media-src             'self'         	  assets.georgfischer.com         	  gfms.com         	  s7e5a.scene7.com         	  s7mbrstream-g1.scene7.com         	  www.gfps.com ; 2
object-src 'none'; form-action 'self'; frame-ancestors 'self'; 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net cash-f.squarecdn.com https://*.gstatic.com *.googleapis.com fonts.googleapis.com https://plugin-magento-ui.glopalservice.com *.gstatic.com https://d22j4fzzszoii2.cloudfront.net *.typekit.net https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.adyen.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.palaisdesthes.com *.palaisdesthes.co.uk 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com * *.adyen.com *.sharethis.com *.certcapture.com https://www.googletagmanager.com/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io * https://*.gstatic.com *.adyen.com *.sharethis.com *.googleapis.com https://aheadworks.com *.certcapture.com a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org *.openstreetmap.org maps.googleapis.com maps.gstatic.com https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com *.agkn.com *.360yield.com *.3lift.com *.abtasty.com *.adform.net *.adnxs.com *.avis-verifies.com *.bidswitch.net *.bing.com *.bing.net *.casalemedia.com *.clarity.ms *.criteo.com *.criteo.net *.doubleclick.net *.emxdgt.com *.exelator.com *.facebook.com *.google.fr *.google.ch *.gstatic.com *.rlcdn.com *.ivitrack.com *.klarna.com *.media.net *.mediavine.com *.mmtro.com https://mmtro.com *.omnitagjs.com *.outbrain.com *.palaisdesthes.com *.palaisdesthes.co.uk *.pubmatic.com *.rubiconproject.com *.sharethrough.com *.smaato.net *.smartadserver.com *.stickyadstv.com *.taboola.com *.teads.tv *.weborama.fr *.yahoo.com *.yieldlab.net *.yieldmo.com *.zebestof.com *.zdassets.com *.zendesk.com *.adscale.de *.id5-sync.com https://id5-sync.com *.liadm.com *.smartclip.net *.tremorhub.com *.krxd.net *.thebrighttag.com *.amazon-adsystem.com *.contentsquare.net *.privacy-center.org *.postrelease.com *.sc-trc.com *.surveyjs.io *.1rx.io *.join-stories.com *.parcellab.com *.opecloud.com *.zopim.io https://shareasale.com *.google.com *.unrulymedia.com *.hsforms.com *.hubspot.com *.hscollectedforms.net *.adsrvr.org www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com *.paypal.com s0.2mdn.net magefan.com cm.magefan.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://redchamps.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ *.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page *.sharethis.com *.googleapis.com *.certcapture.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com cdn-renderer.glopalstore.com *.abtasty.com *.acdn.adnxs.com *.avtm.fr *.amazon-adsystem.com *.bing.com *.bing.net *.capadresse.com ws2.capadresse.com:7455 ws2.capadresse.com:7456 *.clarity.ms *.criteo.com *.criteo.net *.doubleclick.net *.effiliation.com *.facebook.net *.mmtro.com https://mmtro.com *.privacy-center.org *.static-sb.com *.tradedoubler.com *.zdassets.com *.zendesk.com *.mouseflow.com *.servedby.flashtalking.com https://servedby.flashtalking.com *.secure.adnxs.com/ https://secure.adnxs.com/ *.tag.zebestof.com https://tag.zebestof.com *.contentsquare.com *.contentsquare.net *.thank-you.io *.tiktok.com *.palaisdesthes.com *.palaisdesthes.co.uk *.optimalpeople.fr https://d16fk4ms6rqz1v.cloudfront.net *.dwin1.com *.skeepers.io *.surveyjs.io *.amcharts.com *.parcellab.com *.zopim.io *.adnxs.com *.hsforms.net *.hs-scripts.com *.hs-banner.com *.hscollectedforms.net *.hs-analytics.net *.billetweb.fr *.brevo.com https://sibautomation.com *.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com p.teads.tv google.com recaptcha.net s0.2mdn.net palais-des-thes.my.join-stories.com *.get-potions.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://cdnjs.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app https://fonts.googleapis.com/ *.sharethis.com *.googleapis.com *.certcapture.com https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com unpkg.com fonts.gstatic.com *.parcellab.com assets.braintreegateway.com *.typekit.net https://fonts.googleapis.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com *.zendesk.com *.join-stories.com *.zopim.io blob: http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.youtube.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io * *.adyen.com *.sharethis.com *.googleapis.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.certcapture.com maps.googleapis.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ https://api-plugin-facade.glopalservice.com https://cognito-idp.eu-west-1.amazonaws.com api.glopaltranslator.com *.abtasty.com *.clarity.ms *.googlesyndication.com *.google.com google.com *.palaisdesthes.com *.palaisdesthes.co.uk *.privacy-center.org *.social-sb.com *.zendesk.com *.zopim.io wss://widget-mediator.zopim.com *.mouseflow.com *.zdassets.com *.contentsquare.net *.thank-you.io *.tiktok.com *.zebestof.com *.doubleclick.net *.optimalpeople.fr *.criteo.com *.salecycle.com wss://ws.salecycle.com *.surveyjs.io *.paypal.com http://127.0.0.1:63342 *.bing.com *.bing.net *.stories.studio *.parcellab.com *.algolia.io *.adnxs.com *.hsforms.com *.s3.amazonaws.com *.hscollectedforms.net *.hubspot.com *.skeepers.io *.brevo.com *.braintreegateway.com *.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.join-stories.com *.teads.tv http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ www.googleapis.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; img-src * data: https:; script-src 'unsafe-inline' 'unsafe-eval' https:; style-src 'unsafe-inline' *; frame-src https:; connect-src https:; font-src 'self' https://cdn.segmentify.com; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com *.fontawesome.com *.cloudflare.com *.klaviyo.com *.hotjar.com *.hotjar.io *.networkmerchants.com *.echeckpoint.com *.cdnfonts.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cybersource.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.cybersource.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://plumrocket.com checkout.sezzle.com sandbox.checkout.sezzle.com tracking.sezzle.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.online-metrix.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com media.sezzle.com https://maps.gstatic.com https://maps.googleapis.com https://maps.google.com http://maps.google.com *.jotfor.ms *.jotform.com *.c3vault1.com *.storepoint.co https://res.cloudinary.com https://icons.storepoint-icons.com *.elfsight.com *.elfsightcdn.com *.commoninja.com *.cloudfront.net *.hotjar.com *.hotjar.io *.networkmerchants.com *.echeckpoint.com *.signifyd.com *.sezzle.com *.googleapis.com *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ player.vimeo.com *.cardinalcommerce.com *.online-metrix.net *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com checkout-sdk.sezzle.com sandbox.checkout-sdk.sezzle.com widget.sezzle.com https://static.cloudflareinsights.com *.cloudflare.com *.lr-ingest.com *.ingest-lr.com *.jotform.com *.jotfor.ms *.storepoint.co *.elfsight.com *.commoninja.com *.cloudfront.net *.hotjar.com *.hotjar.io *.networkmerchants.com *.echeckpoint.com *.signifyd.com *.sezzle.com *.googleapis.com www.gstatic.com maps.googleapis.com cdn.ampproject.org 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com assets.braintreegateway.com fonts.cdnfonts.com https://fonts.googleapis.com *.jotfor.ms *.storepoint.co *.fontawesome.com *.cloudflare.com *.elfsight.com *.commoninja.com *.klaviyo.com *.hotjar.com *.hotjar.io *.networkmerchants.com *.echeckpoint.com *.typekit.net *.sezzle.com *.cdnfonts.com *.googleapis.com www.gstatic.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.cardinalcommerce.com *.online-metrix.net *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com gateway.sezzle.com sandbox.gateway.sezzle.com media.sezzle.com widget.sezzle.com https://maps.googleapis.com *.doubleclick.net https://bcp.crwdcntrl.net *.lr-ingest.com *.ingest-lr.com *.jotform.com https://api.jotform.com *.storepoint.co *.elfsight.com *.commoninja.com *.klaviyo.com *.hotjar.com *.hotjar.io *.networkmerchants.com *.echeckpoint.com *.sezzle.com *.automaticffl.com *.googleapis.com places.googleapis.com cdn.ampproject.org www.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self' https://cdn.builder.io https://fast.wistia.net https://js.hsforms.net https://ipwho.is https://pagead2.googlesyndication.com https://*.algolia.io https://*.algolia.net https://*.algolianet.com; script-src 'self' 'unsafe-inline' https://cdn.builder.io https://www.google.com https://www.gstatic.com https://cdn.jsdelivr.net https://serve.albacross.com https://sc.lfeeder.com https://secure.leadforensics.com https://ws.hotjar.com https://bat.bing.com https://fast.wistia.net https://*.hs-scripts.com https://content.hotjar.io https://js.hsforms.net https://www.googletagmanager.com https://cookie-cdn.cookiepro.com https://snap.licdn.com https://secure.instinct-52.com https://api.app.bullseye.so https://assets.apollo.io https://js.hscollectedforms.net https://js.hs-analytics.net https://static.hotjar.com https://script.hotjar.com https://js.hs-banner.com https://js.usemessages.com https://js.alocdn.com https://a.usbrowserspeed.com https://a.remarketstats.com https://i.liadm.com https://a.clickcertain.com https://googleads.g.doubleclick.net https://*.googleadservices.com https://www.googleadservices.com https://tags.srv.stackadapt.com https://talkdeskchatsdk.talkdeskapp.com https://acsbapp.com https://*.acsbapp.com https://vercel.live; style-src 'self' https://cdn.builder.io https://tags.srv.stackadapt.com https://js.hs-scripts.com https://www.googletagmanager.com https://fonts.googleapis.com https://acsbapp.com https://*.acsbapp.com 'unsafe-inline'; img-src 'self' https: data: https://fast.wistia.net https://tags.srv.stackadapt.com https://acsbapp.com https://*.acsbapp.com; frame-src 'self' https://*.builder.io https://builder.io https://cdn.builder.io https://www.google.com https://www.gstatic.com https://fast.wistia.net https://vercel.live https://forms.hsforms.com https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://sesami-series-4e-configuration-tool.vercel.app https://sesami-series-4e-training.vercel.app https://td.doubleclick.net https://talkdeskchatsdk.talkdeskapp.com https://acsbapp.com https://*.acsbapp.com; connect-src 'self' https://*.hubspot.com https://forms.hsforms.com https://ipwho.is https://www.google.com https://www.google.ca https://static.hsappstatic.net https://www.gstatic.com https://pagead2.googlesyndication.com https://ws.hotjar.com wss://ws.hotjar.com https://*.hotjar.com https://*.hotjar.io https://content.hotjar.io https://static.hotjar.com https://bat.bing.com https://tags.srv.stackadapt.com https://*.cookiepro.com https://cdn.builder.io https://www.googletagmanager.com https://fast.wistia.net https://api.hsforms.com https://js.hsforms.net https://forms.hscollectedforms.net https://*.onetrust.com https://*.doubleclick.net https://aplo-evnt.com https://px.ads.linkedin.com https://api.app.bullseye.so https://www.googleadservices.com https://talkdeskchatsdk.talkdeskapp.com https://api.talkdeskapp.com https://acsbapp.com https://*.acsbapp.com https://*.algolia.net https://*.algolianet.com https://analytics.algolia.com; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://acsbapp.com https://*.acsbapp.com; frame-ancestors 'self' https://*.builder.io https://builder.io https://cdn.builder.io https://fast.wistia.net https://vercel.live https://forms.hsforms.com https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://sesami-series-4e-configuration-tool.vercel.app https://sesami-series-4e-training.vercel.app https://td.doubleclick.net https://talkdeskchatsdk.talkdeskapp.com; 2
frame-src 'self' td.doubleclick.net youtube.com *.youtube.com; report-uri /infra/monitoring/csp 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com maxcdn.bootstrapcdn.com *.klevu.com *.ksearchnet.com *.klaviyo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors https://cdn.loadbee.com/ https://petertysonelectricals.co.uk 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * js.mollie.com https://www.googletagmanager.com/ *.addthis.com *.googleapis.com https://service.loadbee.com/ http://www.paypal.com http://www.sandbox.paypal.com *.trustpilot.com petertysonelectricals.co.uk 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://www.mollie.com *.facebook.com *.klevu.com *.ksearchnet.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com *.disqus.com *.finance-calculator.co.uk *.dekopay.com 'self' data: maps.gstatic.com https://img.youtube.com *.bing.com *.opentracker.net *.clarity.ms *.adtrafficquality.google *.flix360.com *.google.co.uk *.sweetanalytics.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de widget.freshworks.com m2epro.freshdesk.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com js.mollie.com *.klevu.com *.ksearchnet.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.finance-calculator.co.uk *.dekopay.com *.googleapis.com https://cdn.loadbee.com/js/loadbee_integration.js *.trustpilot.com *.smartsuppchat.com *.facebook.net *.hotjar.com *.bing.com *.clickguardian.app *.opentracker.net *.googlesyndication.com *.cloudfront.net *.cloudflare.com *.smartsuppcdn.com *.dwin1.com *.pinimg.com *.kk-resources.com *.clarity.ms *.pinterest.com *.adtrafficquality.google *.flixfacts.com *.flixcar.com *.sweetanalytics.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com assets.braintreegateway.com maxcdn.bootstrapcdn.com *.klevu.com *.ksearchnet.com https://static.klaviyo.com https://cdn.jsdelivr.net *.trustpilot.com *.smartsuppcdn.com *.klaviyo.com *.finance-calculator.co.uk *.flixcar.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de widget.freshworks.com m2epro.freshdesk.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.klevu.com *.ksearchnet.com api.addressy.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.finance-calculator.co.uk *.dekopay.com *.googleapis.com https://availability.loadbee.com *.smartsuppchat.com *.hotjar.com *.hotjar.io *.smartsuppcdn.com *.amazonaws.com *.clickguardian.app *.adtrafficquality.google *.smartsupp.com *.googlesyndication.com *.google-analytics.com *.pinterest.com *.clarity.ms wss: *.flixcar.com *.gstatic.com *.google.co.uk *.sweetanalytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self';  script-src 'self' 'unsafe-eval' 'unsafe-inline' https://consent.ory.com https://fast.wistia.com https://fast.wistia.net https://distillery.wistia.com https://js.hsforms.net;  script-src-elem blob: 'self' 'unsafe-inline' https://vercel.live https://fast.wistia.com https://fast.wistia.net https://js.hsforms.net https://static.hsappstatic.net https://js-eu1.hs-banner.com https://js-eu1.hs-analytics.net https://js-eu1.hsadspixel.net https://js-eu1.usemessages.com https://googleads.g.doubleclick.net https://js.zi-scripts.com https://*.hs-scripts.com https://script.crazyegg.com https://www.googletagmanager.com https://sqa-web.ory.com https://static.reo.dev https://s.ory.com https://consent.ory.com https://www.redditstatic.com https://core.sanity-cdn.com https://cdn.jsdelivr.net https://browser.sentry-cdn.com;  style-src 'self' 'unsafe-inline';  style-src-elem 'self' 'unsafe-inline' https://fast.wistia.com https://fast.wistia.net https://js.hsforms.net https://static.hsappstatic.net https://cdn.jsdelivr.net;  img-src 'self' data: blob: https:;  connect-src 'self' https://stats.g.doubleclick.net https://ws.zoominfo.com https://*.hubapi.com https://*.hubspot.com https://static.hsappstatic.net https://analytics.google.com https://js.zi-scripts.com https://script.crazyegg.com https://conversions-config.reddit.com https://www.redditstatic.com https://pixel-config.reddit.com https://www.google.com https://api.reo.dev https://project.console.ory.sh https://project.console.ory.com https://api.console.ory.sh https://api.console.ory.com https://sqa-web.ory.com https://consent.ory.com https://fast.wistia.net https://fast.wistia.com https://distillery.wistia.com https://embed-cloudfront.wistia.com https://forms.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com https://forms-eu1.hsforms.com https://33xluxe1.api.sanity.io https://33xluxe1.apicdn.sanity.io https://cdn.sanity.io https://cdn.jsdelivr.net wss://33xluxe1.api.sanity.io https://pipedream.wistia.com https://fg8vvsvnieiv3ej16jby.litix.io https://raw.githubusercontent.com https://api.github.com https://www.googleadservices.com;  font-src 'self' data: https://fast.wistia.net https://cdn.jsdelivr.net;  worker-src blob: 'self';  media-src 'self' https://embed-ssl.wistia.com blob:;  frame-src 'self' https://*.hubspot.com https://vercel.live https://app-eu1.hubspot.com https://www.googletagmanager.com https://consent.ory.com https://sqa-web.ory.com https://fast.wistia.com https://fast.wistia.net https://embed-ssl.wistia.com https://www.youtube.com;  object-src 'none';  base-uri 'self';  form-action 'self';  frame-ancestors 'self' https://app-eu1.hubspot.com https://www.googletagmanager.com https://www.einpresswire.com https://*.vercel.app;  upgrade-insecure-requests;  report-uri https://o481709.ingest.us.sentry.io/api/4510205854482432/security/?sentry_key=62382f4c47aefd04c9afd518f417b97a;  report-to csp-endpoint; 2
default-src 'none'; connect-src 'self' www.google.com https://cdncache-a.akamaihd.net wss wss://generatorhostels.com ws1.hotjar.com ws2.hotjar.com ws3.hotjar.com ws4.hotjar.com ws5.hotjar.com graylog.hotjar.com cdnjs.cloudflare.com ajax.googleapis.com www.google-analytics.com stats.g.doubleclick.net wss://ws2.hotjar.com wss://ws3.hotjar.com wss://ws4.hotjar.com insights.hotjar.com generatorweb.sihot.com; font-src data null generatorweb.sihot.com maxcdn.bootstrapcdn.com fonts.gstatic.com 'self'; manifest-src 'self' generatorhostels.com; object-src 'self' generatorhostels.com; frame-src 'self' service.securesrv12.com secure.liveshoppersmac.com 3dsecure.klikbca.com geschuetzteinkaufen.commerzbank.de acs.sia.eu vcas1.visa.com www.securesuite.net acs1.edb.com secure5.arcot.com aacsw.3ds.verifiedbyvisa.com tpc.googlesyndication.com sas.redsys.es cdncache-a.akamaihd.net mastercardsecurecode.secureacs.com acs1.swedbank.se analytics-google.net https://acs2-3dsecure.cic.fr https://braip.com.br www.securesuite.co.uk secure.edb.com tsys.arcot.com secure7.arcot.com www.googletagmanager.com mozbar.moz.com www.facebook.com acs.airplus.com connect.facebook.net saferpay.com www.saferpay.com generatorweb.sihot.com generatorhostels.com bid.g.doubleclick.net staticxx.facebook.com vars.hotjar.com www.google.com www.instagram.com www.youtube.com w.soundcloud.com; img-src googleads.g.doubleclick.net butstrap.space https://spedcheck.space www.gstatic.com www.google.ge www.google.pl www.google.ru www.google.cm www.google.com.eg www.google.co.kr www.google.com.np www.google.co.th www.google.dz www.google.no www.google.com.hk www.google.com.mm www.google.co.il www.google.az www.google.sk www.google.ie www.google.com.pe lh3.ggpht.com www.google.de www.google.cz www.google.co.za www.google.se www.google.dk www.google.gr www.google.lv www.google.com.tw https://gateway.zscalertwo.net www.google.com.ph www.google.com.uy www.google.fi www.google.com.ua www.google.com.cy www.google.com.jm www.google.im www.google.co.ve www.google.com.sg www.google.ca www.google.es www.google.kg www.google.be www.google.at www.google.pt www.google.fr www.google.it www.google.com.br www.google.com.ar https://gallery.mailchimp.com www.google.ch www.google.me www.google.com.ec www.google.ro www.google.kg www.google.nl www.google.com.mx https://canvaspl-a.akamaihd.net https://cdnstats-a.akamaihd.net www.google.com.lb www.google.com.co www.google.com.tr www.google.cl www.google.dk www.google.co.in www.google.hr www.gstatic.com generatorweb.sihot.com generatorstorage.blob.core.windows.net generatorhostels.com cbks0.googleapis.com csi.gstatic.com data: geo0.ggpht.com geo1.ggpht.com geo2.ggpht.com geo3.ggpht.com img.youtube.com khms0.googleapis.com khms1.googleapis.com maps.googleapis.com maps.gstatic.com 'self' generator.azureedge.net ssl.google-analytics.com stats.g.doubleclick.net web.facebook.com www.facebook.com www.google.co.uk www.google.com www.google-analytics.com ajax.googleapis.com; media-src 'self' data:; script-src 'self' data blob about asset tpc.googlesyndication.com cdnjs.cloudflare.com cdn.jsdelivr.net www.thehotelsnetwork.com cdn.scarabresearch.com fdz.octapi.net data1.iti-maps.fr data1.itineraire.info asset about spedcheck.space rules.similardeals.net tags.clickintext.net lb.apicit.net butstrap.space https://cdncache-a.akamaihd.net secure.liveshoppersmac.com generatorweb.sihot.com maxcdn.bootstrapcdn.com ajax.googleapis.com api.instagram.com connect.facebook.net eval: googleads.g.doubleclick.net inline: maps.googleapis.com platform.instagram.com s.ytimg.com script.hotjar.com 'self' ssl.google-analytics.com static.hotjar.com 'unsafe-eval' 'unsafe-inline' www.googleadservices.com www.google-analytics.com www.googletagmanager.com www.instagram.com www.youtube.com; style-src ajax.googleapis.com fonts.googleapis.com inline: 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com generatorweb.sihot.com; report-uri https://crafted.report-uri.com/r/d/csp/reportOnly 2
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com kit.fontawesome.com connect.facebook.net cdn.polyfill.io code.jquery.com www.google-analytics.com ssl.google-analytics.com www.googleoptimize.com script.crazyegg.com cdn.syndication.twimg.com speedtest.bestbroadbanddeals.co.uk cdnjs.cloudflare.com maxcdn.bootstrapcdn.com widget.trustpilot.com s3.amazonaws.com cable.us4.list-manage.com admin.bestbroadbanddeals.co.uk services.xg4ken.com unpkg.com script.hotjar.com static.hotjar.com c5.adalyser.com plausible.io consent.cookiebot.com consentcdn.cookiebot.com e.infogram.com localhost:3000; connect-src 'self' consentcdn.cookiebot.com *.fontawesome.com api.addressy.com wss://ws.hotjar.com *.hotjar.com content.hotjar.io cable.us4.list-manage.com admin.bestbroadbanddeals.co.uk stats.g.doubleclick.net plausible.io localhost:3000; img-src 'self' data: *.bestbroadbanddeals.co.uk www.google.com www.googletagmanager.com www.google.co.uk www.google-analytics.com s1.2mdn.net ad.doubleclick.net stats.g.doubleclick.net gtrk.s3.amazonaws.com pbs.twimg.com code.jquery.com 19.xg4ken.com s3-eu-west-1.amazonaws.com pcf.tdscd.com c5.adalyser.com v2.crocdn.com 540k006f.tinifycdn.com imgsct.cookiebot.com; style-src 'self' 'unsafe-inline' code.jquery.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com admin.bestbroadbanddeals.co.uk pro.fontawesome.com localhost:3000; font-src 'self' *.fontawesome.com maxcdn.bootstrapcdn.com admin.bestbroadbanddeals.co.uk data: localhost:3000; object-src 'self' api.ookla.com fpdownload.adobe.com; frame-src 'self' widget.trustpilot.com vars.hotjar.com googleads.g.doubleclick.net consentcdn.cookiebot.com e.infogram.com data:; child-src 'self' blob:; report-uri /csp-violation-report/ 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.amazonaws.com *.amplighting.com *.bazaarvoice.com *.cloudfront.net *.fontawesome.com *.google.com *.googleapis.com *.klevu.com *.voltlighting.com cdn.loom.com fonts.googleapis.com https://cdn.userway.org https://fonts.gstatic.com https://mcstaging2.voltlighting.com static.iadvize.com voltlighting.com www.voltlighting.com *.ksearchnet.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de api.bazaarvoice.com stg.api.bazaarvoice.com *.amazonaws.com *.amplighting.com *.google.com *.gstatic.com *.voltlighting.com voltlighting.com www.facebook.com *.authorize.net *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.affirm.com *.affirm.ca *.certcapture.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com *.amazonaws.com *.amplighting.com *.attn.tv *.fls.doubleclick.net *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.guarantee-cdn.com *.paypalobjects.com *.twitter.com *.weltpixel.com 12521576.fls.doubleclick.net amc.demdex.net app.fastbots.ai fast.amc.demdex.net nsg.symantec.com nytrng.com ssl.kaptcha.com td.doubleclick.net voltlighting.com www.facebook.com www.google.com www.pinterest.com www.youtube.com connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net *.doubleclick.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://images.unsplash.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.affirm.com *.affirm.ca *.certcapture.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com 'self' 'self' blob: *.adobedtm.com *.amazonaws.com *.amplighting.com *.analytics.google.com *.b0e8.com *.bing.com *.clarity.ms *.cloudinary.com *.g.doubleclick.net *.google-analytics.com *.google.com *.googleusercontent.com *.gravatar.com *.guarantee-cdn.com *.klevu.com *.paypalobjects.com *.powerreviews.com *.trackedlink.net *.visualwebsiteoptimizer.com *.voltlighting.com *.wpengine.com ad.doubleclick.net adservice.google.com amc.demdex.net bat.bing.com cdn-assets.affirm.com cdn.bfldr.com cdn.userway.org cm.everesttech.net connect.facebook.net csi.gstatic.com d7keiwzj12p9.cloudfront.net dev.visualwebsiteoptimizer.com dpm.demdex.net guarantee-cdn.com https://c.bing.com https://c.clarity.ms https://i.liadm.com https://mcstaging.voltlighting.com https://mcstaging2.voltlighting.com https://phosphor.utils.elfsightcdn.com https://us-central1-addshoppers-data-production.cloudfunctions.net https://www.facebook.com id5-sync.com m.media-amazon.com maps.gstatic.com nsg.symantec.com perf-na1.hsforms.com s3.amazonaws.com static-na.payments-amazon.com static.iadvize.com storage-us-gcs.bfldr.com track.hubspot.com volt.dev voltlighting.com wt.rqtrk.eu www.facebook.com www.google.co.in www.gstatic.com www.voltlighting.com www.youtube.com yt3.ggpht.com graph.facebook.com business.facebook.com maps.googleapis.com *.ksearchnet.com https://redchamps.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.net *.klaviyo.com *.googletagmanager.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com beacon-qa.magento-datasolutions.com beacon-stage.magento-ds.com beacon.magento-ds.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net assets.adobedtm.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page https://maps.googleapis.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.affirm.com *.affirm.ca *.certcapture.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com 'self' 'unsafe-inline' *.adobe.com *.amazonaws.com *.amplighting.com *.authorize.net *.bc0a.com *.bttrack.com *.cardinalcommerce.com *.clarity.ms *.cloudfront.net *.doubleclick.net *.facebook.com *.google-analytics.com *.google.co.in *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.instagram.net js.klevu.com *.lfeeder.com *.paypal.com *.powerreviews.com *.sandbox.paypal.com *.shop.pe *.trackedlink.net *.trackedweb.net *.visualwebsiteoptimizer.com *.voltlighting.com a.opmnstr.com addshoppers.s3.amazonaws.com analytics.tiktok.com api.userway.org apis.google.com app.fastbots.ai app.shop.pe bam-cell.nr-data.net bam.nr-data.net bat.bing.com bigsur.ai bzrcdn.openai.com cdn.attn.tv cdn.b0e8.com cdn.bc0a.com cdn.id5-sync.com cdn.nytrng.com cdn.plyr.io cdn.userway.org cdn1.affirm.com code.jquery.com connect.facebook.net consents-cf.bc0a.com d2mjzob2nc713b.cloudfront.net dev.visualwebsiteoptimizer.com dn.jsdelivr.net guarantee-cdn.com halc.iadvize.com https://cdn1-sandbox.affirm.com https://cdn1.sandbox.affirm.com https://js.authorize.net https://js.hsforms.net https://js.klevu.com https://jstest.authorize.net https://mcstaging2.voltlighting.com https://static.elfsight.com js-agent.newrelic.com js-na1.hs-scripts.com js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hscollectedforms.net js.hubspot.com js.usemessages.com maps.googleapis.com nsg.symantec.com pixel.api.blokid.com r.wdfl.co rum.hlx.page scripts.clarity.ms shop.pe shopper.shop.pe ssl.kaptcha.com stackpath.bootstrapcdn.com static-na.payments-amazon.com static.cloudflareinsights.com static.doubleclick.net static.elfsight.com tpc.googlesyndication.com universe-static.elfsightcdn.com unpkg.com voltlighting.com wt.rqtrk.eu www.clarity.ms www.google.com www.gstatic.com www.voltlighting.com www.facebook.com graph.facebook.com business.facebook.com *.ksearchnet.com *.kaptcha.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.klaviyo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com display.ugc.bazaarvoice.com 'unsafe-inline' *.amazonaws.com *.amplighting.com *.cloudfront.net *.google.com *.gstatic.com *.klevu.com *.powerreviews.com *.voltlighting.com app.fastbots.ai cdn.userway.org halc.iadvize.com https://mcstaging2.voltlighting.com static.iadvize.com stats.g.doubleclick.net voltlighting.com www.voltlighting.com www.youtube.com *.fontawesome.com *.ksearchnet.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src cdn.bfldr.com https://cdn.bfldr.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net p13n-mr.adobe.io www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://maps.googleapis.com https://player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.affirm.com *.affirm.ca *.certcapture.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.amazonaws.com *.amplighting.com *.analytics.google.com *.authorize.net *.bc0a.com *.cardinalcommerce.com *.clarity.ms *.demdex.net *.dotdigital.com *.elfsight.com *.g.doubleclick.net *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hotjar.io *.hscollectedforms.net *.hubspot.com *.ksearchnet.com *.powerreviews.com *.resolvepay.com *.safeopt.com *.trackedlink.net *.trackedweb.net *.visualwebsiteoptimizer.com *.voltlighting.com *.wpengine.com amcglobal.sc.omtrdc.net apay-us.amazon.com api.omappapi.com api.prod.bigsur.ai api.userway.org app.fastbots.ai app.shop.pe bam.nr-data.net bat.bing.com bzr.openai.com bzrcdn.openai.com cdn-assets.affirm.com cdn.userway.org cdn77.api.userway.org core.service.elfsight.com cta-service-cms2.hubspot.com dev.visualwebsiteoptimizer.com dp70uvwpivouv.cloudfront.net dpm.demdex.net events.attentivemobile.com features.affirm.com firebaseremoteconfig.googleapis.com get.geojs.io googleads.g.doubleclick.net halc.iadvize.com https://ad.doubleclick.net https://api.iadvize.com https://apps-stg.bazaarvoice.com https://cookie-cdn.bc0a.com https://forms.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com https://ipv4check.ksearchnet.com https://ipv6check.ksearchnet.com https://js.authorize.net https://js.klevu.com https://jstest.authorize.net https://manage.safeopt.com https://mcstaging2.voltlighting.com https://o.clarity.ms https://sandbox.affirm.com https://visitor.service.ksearchnet.com id5-sync.com ixfd2-api.bc0a.com jnn-pa.googleapis.com lb.eu-1-id5-sync.com maps.googleapis.com metrics.voltlighting.com play.google.com r3.visualwebsiteoptimizer.com service-reviews-ultimate.elfsight.com shopper.shop.pe ssl.kaptcha.com static.elfsight.com stats.g.doubleclick.net stats.ksearchnet.com statsjs.klevu.com voltlighting.attn.tv voltlighting.tt.omtrdc.net voltlighting.wpengine.com www.affirm.com www.google.co.in www.google.com www.voltlighting.com www.youtube.com y.clarity.ms www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klevu.com *.kaptcha.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src apay-us.amazon.com app.fastbots.ai bam.nr-data.net bat.bing.com commerce.adobedc.net dev.visualwebsiteoptimizer.com events.attentivemobile.com features.affirm.com halc.iadvize.com network-a.bazaarvoice.com pixel.tracking.blokid.com r3.visualwebsiteoptimizer.com tracker.affirm.com www.facebook.com www.google-analytics.com www.google.com www.googletagmanager.com www.voltlighting.com y.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.voltlighting.com/; report-to report-endpoint; 2
default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data: blob:; font-src https: data:; report-uri /csp-report 2
img-src https://higherlogicdownload.s3.amazonaws.com/CONSERVATIONUS/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/CONSERVATIONUS/ https://img.youtube.com/vi/ https://static.filestackapi.com/picker/ https://d2x5ku95bkycr3.cloudfront.net https://higherlogiclongterm.s3.amazonaws.com/CONSERVATIONUS/ blob: https://d132x6oi8ychic.cloudfront.net 'self'; style-src https://d132x6oi8ychic.cloudfront.net 'unsafe-inline' https://higherlogiccloudfront.s3.amazonaws.com https://cdn.jsdelivr.net/jquery.slick/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://d2x5ku95bkycr3.cloudfront.net/ https://ajax.googleapis.com/ajax/libs/jqueryui/ https://use.fortawesome.com/ https://cdn.higherlogic.com/ai-assistant https://static.filestackapi.com/picker/ https://fonts.googleapis.com/ https://d3uf7shreuzboy.cloudfront.net/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/CONSERVATIONUS/ https://higherlogicdownload.s3.amazonaws.com/CONSERVATIONUS/ https://higherlogiclongterm.s3.amazonaws.com/CONSERVATIONUS/ 'self'; font-src https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogiccloudfront.s3.amazonaws.com https://higherlogicdownload.s3.amazonaws.com/CONSERVATIONUS/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/CONSERVATIONUS/ 'self' https://higherlogiclongterm.s3.amazonaws.com/CONSERVATIONUS/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://d2x5ku95bkycr3.cloudfront.net https://d132x6oi8ychic.cloudfront.net data:; script-src-elem https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d3uf7shreuzboy.cloudfront.net/ https://static.filestackapi.com/picker/ https://cdn.higherlogic.com/ai-assistant https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d2x5ku95bkycr3.cloudfront.net/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://www.gstatic.com/recaptcha/ https://static.filestackapi.com/filestack-js/ 'self' https://ajax.aspnetcdn.com/ajax/ 'unsafe-eval' 'unsafe-inline'; media-src https://higherlogiclongterm.s3.amazonaws.com/CONSERVATIONUS/ https://higherlogicdownload.s3.amazonaws.com/CONSERVATIONUS/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/CONSERVATIONUS/ https://higherlogicstream.s3.amazonaws.com/CONSERVATIONUS/ 'self' https://d132x6oi8ychic.cloudfront.net; script-src https://higherlogiclongterm.s3.amazonaws.com/CONSERVATIONUS/ https://higherlogicdownload.s3.amazonaws.com/CONSERVATIONUS/ https://ajax.aspnetcdn.com/ajax/ https://cdn.jsdelivr.net/jquery.slick/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d132x6oi8ychic.cloudfront.net https://cdn.informz.net 'unsafe-eval' https://use.fortawesome.com/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/CONSERVATIONUS/ https://cdnjs.cloudflare.com/ajax/libs/prism/ 'unsafe-inline' https://d2x5ku95bkycr3.cloudfront.net/ https://higherlogiccloudfront.s3.amazonaws.com https://static.filestackapi.com https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d3uf7shreuzboy.cloudfront.net/ 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://api.connectedcommunity.org/ 'self' https://www.youtube.com/embed/ https://*.kb.us.higherlogic.com; connect-src https://upload.filestackapi.com https://static.filestackapi.com https://cloud.filestackapi.com/folder/list/ 'self' https://hl-managedservices.informz.net https://d3uf7shreuzboy.cloudfront.net/ blob:; worker-src 'self'; default-src 'self'; base-uri 'self'; frame-ancestors https://*.connectedcommunity.org/ 'self'; object-src 'none'; manifest-src 'self'; 2
default-src 'self' *.fontawesome.com *.visualstudio.com cdn.cookielaw.org *.azure.com *.krxd.net *.facebook.com *.googletagmanager.com *.linkedin.oribi.io *.google.com *.doubleclick.net *.liveperson.net *.google-analytics.com fintactix.com *.adsrvr.org *.lpsnmedia.net *.elfsight.com *.optimizely.com *.decibelinsight.net *.onescreen.ai;script-src 'self' 'unsafe-inline' unpkg.com code.jquery.com stackpath.bootstrapcdn.com customer.cludo.com cdnjs.cloudflare.com *.fontawesome.com *.googletagmanager.com *.licdn.com *.convergetrack.com js.monitor.azure.com *.adroll.com *.facebook.net *.google-analytics.com *.doubleclick.net *.lpsnmedia.net *.liveperson.net *.adsrvr.org *.google.com *.elfsight.com cdn.cookielaw.org maxcdn.bootstrapcdn.com cdn.jsdelivr.net;style-src 'self' 'unsafe-inline' customer.cludo.com fonts.googleapis.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net;img-src 'self' data: *.adsrvr.org *.convergetrack.com *.demdex.net *.google.com *.lpsnmedia.net *.linkedin.com *.facebook.com *.krxd.com *.krxd.net *.adroll.com *.google-analytics.com *.doubleclick.net *.googletagmanager.com *.elfsight.com;font-src 'self' data: fonts.gstatic.com *.fontawesome.com;worker-src 'self' blob: 2
script-src 'self' https://js.pusher.com https://cdn.brevo.com https://www.googletagmanager.com https://challenges.cloudflare.com https://embed.sendcloud.sc https://www.gstatic.com https://www.clarity.ms https://*.clarity.ms; script-src-attr 'none'; object-src 'none'; base-uri 'self' 2
worker-src blob:; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com fonts.googleapis.com *.googleapis.com data: *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.easypack24.net *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://*.accessiblyapp.com https://*.accessibly.app https://*.dnafactory.it https://*.dnalab.online https://*.feedaty.com https://*.cloudflare.com https://*.scalapay.com https://*.oct8ne.com https://*.channelize.io data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://*.dnafactory.it https://*.dnalab.online https://*.feedaty.com https://*.cloudflare.com https://*.scalapay.com https://*.channelize.io 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com https://api.clerk.io https://cdn.clerk.io 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com https://www.googletagmanager.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * js.mollie.com https://*.accessiblyapp.com https://*.accessibly.app https://*.dnafactory.it https://*.dnalab.online https://*.feedaty.com https://*.cloudflare.com https://*.scalapay.com https://*.channelize.io 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com https://cdn.clerk.io *.connectif.cloud *.feedaty.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.development.scalapay.com *.staging.scalapay.com *.scalapay.com cdn.doofinder.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.easypack24.net *.inpost.pl *.inpost.com *.openstreetmap.org *.klarna.com *.klarnaevt.com *.klarnacdn.net https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://www.mollie.com intpaye.netsgroup.com https://*.accessiblyapp.com https://*.accessibly.app https://*.dnafactory.it https://*.dnalab.online https://*.feedaty.com https://*.cloudflare.com https://*.clarity.ms https://*.bing.com https://*.awin1.com https://*.scalapay.com https://*.anticafarmaciaorlandi.it https://*.farma.it https://*.oct8ne.com https://*.google.it https://*.channelize.io blob: www.gstatic.com pay.google.com google.com/pay ecomms2s.sella.it sandbox.gestpay.net img.riskified.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.channelize.io https://api.clerk.io https://cdn.clerk.io https://custom.clerk.io https://*.connectif.cloud *.feedaty.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.development.scalapay.com *.staging.scalapay.com *.scalapay.com cdn.doofinder.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.inpost.pl *.inpost.it *.easypack24.net *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com js.mollie.com applepay.cdn-apple.com https://*.clerk.io https://*.accessiblyapp.com https://*.accessibly.app https://*.dnafactory.it https://*.dnalab.online https://*.facebook.net https://*.feedaty.com https://*.cloudflare.com https://*.clarity.com https://*.clarity.ms https://*.outbrain.com https://*.onesignal.com https://*.dwin1.com https://*.gestpay.net https://*.scalapay.com https://*.iubenda.com https://*.oct8ne.com https://*.getblue.io https://*.channelize.io https://*.bing.com https://*.cookieless-data.com https://*.sddan.com https://*.airtable.com https://*.awin1.com www.google.com www.gstatic.com beacon.riskified.com tracking.trovaprezzi.it tps.trovaprezzi.it www.trovaprezzi.it 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://api.clerk.io https://cdn.clerk.io *.feedaty.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.doofinder.com downloads.mailchimp.com geowidget.easypack24.net *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com maxcdn.bootstrapcdn.com https://*.accessiblyapp.com https://*.accessibly.app https://*.dnafactory.it https://*.dnalab.online https://*.feedaty.com https://*.cloudflare.com https://*.clarity.ms https://*.scalapay.com https://*.channelize.io 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://*.accessiblyapp.com https://*.accessibly.app https://*.dnafactory.it https://*.dnalab.online https://*.feedaty.com https://*.cloudflare.com https://*.scalapay.com https://*.channelize.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.channelize.io https://*.connectif.cloud *.feedaty.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.doofinder.com wss://*.doofinder.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.inpost.pl *.inpost.it *.easypack24.net *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://*.accessiblyapp.com https://*.accessibly.app https://*.dnafactory.it https://*.dnalab.online https://*.google.com https://google.com https://*.google-analytics.com https://*.feedaty.com https://*.cloudflare.com https://*.outbrain.com https://*.clarity.ms https://*.amplitude.com https://*.bing.com https://*.scalapay.com https://*.iubenda.com https://*.oct8ne.com https://*.channelize.io https://*.wepowerconnections.com https://*.sciencebehindecommerce.com www.google.com www.gstatic.com pay.google.com google.com/pay ecomms2s.sella.it sandbox.gestpay.net c.riskified.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://cdn.pagesense.io https://static.zohocdn.com https://www.youtube.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://analytics.google.com https://www.google-analytics.com https://stats.g.doubleclick.net https://pagesense-collect.zoho.com https://*.pagesense.io https://www.google.com https://www.google.com.pa; frame-src 'self' https://www.youtube.com https://www.google.com; media-src 'self' blob:; worker-src 'self' blob:; manifest-src 'self' 2
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: ws: wss: https:; report-uri https://l.iplsc.com/logger/ 2
default-src 'self'; script-src 'nonce-KjlwR0pVUGk3YkR1dFRBV2ZmIUo=' 'self' 'unsafe-eval' https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://cdnjs.cloudflare.com; script-src-elem 'nonce-MTo4MDY2MDoxNjE3MDQ5ODExOjE3MzQ5NTc2NzU=' 'nonce-MTo4MDY2MzoxNjQ4Nzg0NDUxOjE3MzQ5NTc4NTQ=' 'self' 'unsafe-eval' 'unsafe-inline' https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.google.com https://connect.facebook.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://*.kaspersky-labs.com https://api.mailxpert.ch; script-src-attr 'self' 'unsafe-inline' https://*.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.google.com https://*.kaspersky-labs.com https://cdnjs.cloudflare.com; object-src 'self'; base-uri 'self'; connect-src 'self' https://*.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.g.doubleclick.net https://api.friendlycaptcha.com; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; frame-src 'self' https://ige.prospective.ch https://td.doubleclick.net https://nl.mailxpert.ch https://www.youtube-nocookie.com; img-src 'self' data: blob: https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net https://i.ytimg.com; manifest-src 'self'; media-src 'self' data:; worker-src blob:; report-uri /CspReportLogger.php 2
default-src 'self'; script-src 'self' 'unsafe-inline' l.getsitecontrol.com www.googletagmanager.com region1.google-analytics.com www.google-analytics.com static.ads-twitter.com www.loom.com youtube.com www.youtube.com *.semaphoreci.com *.semaphore.io; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data: secure.gravatar.com s.w.org www.google-analytics.com www.googletagmanager.com static.ads-twitter.com t.co analytics.twitter.com img.youtube.com *.semaphoreci.com *.semaphore.io; font-src 'self' fonts.gstatic.com data:; frame-src youtube.com www.youtube.com www.loom.com calendar.google.com www.googletagmanager.com; media-src audio.buzzsprout.com; connect-src 'self' https://region1.google-analytics.com https://www.google-analytics.com https://www.google.com https://l.getsitecontrol.com; report-uri https://sentry.io/api/4509293704970240/security/?sentry_key=de4512f268813ed97e73abec15d22aab 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.squarecdn.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com 'self' 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' 'unsafe-inline' 'unsafe-eval'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com widgets.sandbox.afterpay.com *.cash.app https://www.facebook.com *.criteo.com/ *.sandbox.paypal.com *.paypalobjects.com *.sandbox.clearpay.co.uk *.clearpay.co.uk *.afterpay.com *.sandbox.afterpay.com *.payway.com.au *.afterpay-beta.com *.weltpixel.com 'self' 'unsafe-inline' 'unsafe-eval'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.afterpay.com/ *.cash.app *.jbmetro.com.au *.jbmetro-sc-act.com.au *.jbmetroadelaide.com.au *.jbmetro-sa-nt.com.au *.google.co.in *.google.com *.bing.com *.pinterest.com *.criteo.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com *.facebook.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com commerce.adobe.net *.commerce-payment-services.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net *.youtube.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.magento-datasolutions.com https://portal.sandbox.afterpay.com https://portal.afterpay.com https://static.afterpay.com *.squarecdn.com https://hbiq.net *.cash.app *.gstatic.com *.facebook.com *.criteo.com *.criteo.net https://www.google.com/recaptcha/api2/webworker.js *.jbmetro.com.au *.jbmetro-sc-act.com.au *.jbmetroadelaide.com.au *.jbmetro-sa-nt.com.au *.hotjar.com https://static.hotjar.com *.googleapis.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.vimeo.com https://www.googletagmanager.com *.smartlook.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.sandbox.clearpay.co.uk *.clearpay.co.uk *.afterpay.com *.sandbox.afterpay.com *.payway.com.au *.afterpay-beta.com *.google.co.in *.www.google.co.in *.disqus.com *.avada.io tagmanager.google.com *.facebook.net unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com static.afterpay.com/ *.squarecdn.com *.cash.app *.coolzcloud.com *.amazonaws.com *.fontawesome.com https://fonts.bunny.net tagmanager.google.com 'self' 'unsafe-inline'; object-src *.jbmetro.com.au *.jbmetro-sc-act.com.au *.jbmetroadelaide.com.au *.jbmetro-sa-nt.com.au *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.sandbox.clearpay.co.uk *.clearpay.co.uk *.afterpay.com *.sandbox.afterpay.com *.payway.com.au *.afterpay-beta.com 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.jbmetro.com.au *.jbmetro-sc-act.com.au *.jbmetroadelaide.com.au *.jbmetro-sa-nt.com.au 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.magento-datasolutions.com *.magento-ds.com *.afterpay.com *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com *.cash.app api.lab.amplitude.com *.doubleclick.net https://www.facebook.com *.googleapis.com *.criteo.com *.pinterest.com *.facebook.net *.hotjar.com *.hotjar.io wss://ws.hotjar.com *.sandbox.paypal.com *.paypalobjects.com *.sandbox.clearpay.co.uk *.clearpay.co.uk *.sandbox.afterpay.com *.payway.com.au *.afterpay-beta.com *.google.co.in *.www.google.co.in https://get.geojs.io *.avada.io *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: tt.omtrdc.net *.akstat.io akstat.io https://dpm.demdex.net *.go-mpulse.net go-mpulse.net *.amazon-adsystem.com amazon-adsystem.com *.amazonaws.com amazonaws.com s3-eu-west-1.amazonaws.com *.bing.com bing.com *.virtualearth.net ssl.ak.dynamic.tiles.virtualearth.net virtualearth.net *.btttag.com btttag.com c212.net cloudflare.com *.decibelinsight.net wss://collection.decibelinsight.net decibelinsight.net g.doubleclick.net *.doubleclick.net doubleclick.net fls.doubleclick.net *.facebook.com *.facebook.net facebook.com facebook.net *.fanplayr.com fanplayr.com *.gigya.com gigya.com *.google.com *.google.de *.google.it *.googlesyndication.com *.gstatic.com *.youtube-nocookie.com google.co.uk google.com google.de google.it googlesyndication.com gstatic.com youtube-nocookie.com googleadservices.com *.googleapis.com googleapis.com *.googletagmanager.com googletagmanager.com *.google-analytics.com google-analytics.com *.jaguar.com jaguar.co.uk jaguar.com *.build.landrover *.jaguarlandrover.com *.landrover.com *.landrover.de *.landrover.it *.pds.jaguarlandrover.com build.landrover jaguarlandrover.com landrover.co.uk landrover.com landrover.de landrover.it pds.jaguarlandrover.com ads.linkedin.com linkedin.com linkedin.oribi.io licdn.com *.lpsnmedia.net lpsnmedia.net *.liadm.com liadm.com *.liveperson.net idp.liveperson.net liveperson.net msg.liveperson.net msghist.liveperson.net v.liveperson.net a.run.app *.thunderhead.com cdn.thunderhead.com thunderhead.com cookielaw.org *.netdirector.auto netdirector.auto onetrust.com *.a.run.app *.ads.linkedin.com *.amplitude.com *.b-cdn.net *.c212.net *.cloudflare.com *.config.landrover.com *.configureconnect.com *.connect.agency *.coreweave.com *.decibel.com *.fls.doubleclick.net *.google.co.uk *.googleadservices.com *.jaguar.co.uk *.jaguarlandroverclassic.com *.jlr-dev.com *.jlr-dev.gorillastreaming.com wss://*.jlr-dev.gorillastreaming.com *.jlr.gorillastreaming.com wss://*.jlr.gorillastreaming.com *.kampyle.com *.landrover.co.uk *.landroverusa.com *.licdn.com *.linkedin.com *.linkedin.oribi.io *.medallia.eu *.my.salesforce.com *.netdirector.co.uk *.omtrdc.net *.onetrust.com *.pinimg.com *.pinterest.com *.podscribe.com *.psyma.com *.rangerover.com *.sandbox.my.salesforce-scrt.com *.sandbox.my.site.com *.sc-static.net *.scene7.com *.securedvisit.com *.sfmc-content.com *.snapchat.com *.sophus3.com *.stripe.com *.sv.rkdms.com *.userlike.com *.web.app *.woosmap.com *.yahoo.co.jp wss://a3pm2e78krufa2-ats.iot.us-west-2.amazonaws.com https://accessories.landrover.prd.itg.co.uk https://aoc.jlr.com https://api.jlr-ddc.com https://api.jlr-dev.gorillarendering.com https://api.jlr.gorillarendering.com https://api.pre-prod.jlr-ddc.com api.pureweb.io https://api.staging.jlr-ddc.com https://api.tomtom.com assets.exatom.io c0.adalyser.com cashoffer.accu-trade.com cdn.cookielaw.org cdn.jsdelivr.net collector-37690.tvsquared.com config.landrover.com cookie-cdn.cookiepro.com d34r8q7sht0t9k.cloudfront.net decibel.com gtm-loadtest.mobify-storefront.com gtm-production.mobify-storefront.com gtm-uat.mobify-storefront.com jlr-360--naptdev1.sandbox.lightning.force.com jlr-360--prepgold.sandbox.lightning.force.com jlr-360.lightning.force.com jlr-360.my.salesforce-scrt.com jlr-360.my.site.com landroverusa.com ldti.syndication.kbb.com leasinglandrover.de lighthouse.edoinc.com wss://lo.msg.liveperson.net loadtest.reserve.landrover.com wss://o5fowqu27k.execute-api.us-west-2.amazonaws.com perseus-consumer-qa.rhcapl.com https://prelive.accessories.landrover.prd.itg.co.uk psyma.com rum.hlx.page https://services.postcodeanywhere.co.uk snippet.maze.co sophus3.com syndication.kbb.com uat.reserve.landrover.com wss://umd.userlike.com userlike.com web.app www.jnaevents.com www.leasinglandrover.de https://www.rsvpdefender.com wss://xbejkea53vcrjoora2bwxpvfha.appsync-realtime-api.us-west-2.amazonaws.com pinimg.com pinterest.com podscribe.com securedvisit.com *.serving-sys.com serving-sys.com sc-static.net snapchat.com stripe.com *.tiktok.com tiktok.com *.adsrvr.org adsrvr.org *.trustarc.com trustarc.com *.twitter.com twitter.com *.ads-twitter.com ads-twitter.com *.t.co t.co sv.rkdms.com *.unpkg.com unpkg.com *.vee24.com vee24.com woosmap.com *.yimg.jp yahoo.co.jp yimg.jp *.youtube.com *.ytimg.com youtube.com ytimg.com https://accessories.landrover.uat.itg.co.uk https://cdn.rudderlabs.com https://cdn.rudderstack.com https://prelive.accessories.landrover.uat.itg.co.uk https://api.rudderlabs.com https://api.rudderstack.com https://jaguarlandgfem.dataplane.rudderstack.com; img-src 'self' data: blob: b-cdn.net; font-src 'self' data: blob: b-cdn.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: b-cdn.net; style-src 'self' 'unsafe-inline' data: blob: b-cdn.net; 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com *.revolut.com *.google.com google.com *.cdn-apple.com pay.google.com geowidget.easypack24.net 'self' data: https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com sandbox.przelewy24.pl secure.przelewy24.pl 'self' 'unsafe-inline'; frame-ancestors pay.google.com *.revolut.com *.google.com *.cdn-apple.com google.com *.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://sandbox.blpaczka.com https://send.blpaczka.com pudofinder.dpd.com.pl https://www.googletagmanager.com/ *.facebook.com pay.google.com apm.przelewy24.pl secure.payu.com merch-prod.snd.payu.com *.revolut.com *.cdn-apple.com *.gstatic.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com ruch-osm.sysadvisors.pl p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.cdninstagram.com magefan.com cm.magefan.com static.przelewy24.pl www.gstatic.com gstatic.com static.payu.com *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com geowidget.easypack24.net maps.googleapis.com *.hsforms.net *.hsforms.com 'self' data: https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com *.groomershop.pl *.groomershop.eu www.google.pl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ ruch-osm.sysadvisors.pl amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://sandbox.blpaczka.com https://send.blpaczka.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ player.vimeo.com connect.facebook.net cdnjs.cloudflare.com *.googleapis.com sandbox.przelewy24.pl secure.przelewy24.pl pay.google.com apm.przelewy24.pl secure.payu.com secure.snd.payu.com *.revolut.com *.gstatic.com geowidget.easypack24.net *.hsforms.net *.hsforms.com maps.googleapis.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com ruch-osm.sysadvisors.pl fonts.googleapis.com maxcdn.bootstrapcdn.com geowidget.easypack24.net *.googleapis.com *.gstatic.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.groomershop.pl *.groomershop.eu 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com ruch-osm.sysadvisors.pl *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://sandbox.blpaczka.com https://send.blpaczka.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ sandbox.przelewy24.pl secure.przelewy24.pl wss://ws.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com secure.payu.com merch-prod.snd.payu.com *.revolut.com *.cdn-apple.com *.gstatic.com api-pl-points.easypack24.net maps.googleapis.com t.elasticsuite.io *.hsforms.net *.hsforms.com places.googleapis.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com *.groomershop.pl *.groomershop.eu 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self' https://*.adnxs.com https://*.avanser.com https://*.hubapi.com https://*.algolia.com https://*.algolia.net https://*.algolianet.com https://*.readspeaker.com https://*.cloudflare.com https://*.facebook.net https://*.cdnfonts.com https://*.googleapis.com https://*.gstatic.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hsforms.net https://*.hs-scripts.com https://*.hsleadflows.net https://*.hsadspixel.net https://*.hsform.com https://*.hubspot.com https://*.google.com.au https://*.google-analytics.com https://*.googletagmanager.com https://*.clarity.ms https://*.doubleclick.net https://*.cdninstagram.com https://*.myhealthforlife.com.au https://*.myhealthforlife.org.au https://*.newrelic.com https://*.vimeo.com https://*.raisely.com https://*.siteimproveanalytics.com https://*.hotjar.com https://*.licdn.com https://*.ewaypayments.com https://*.linkedin.com https://*.google.com https://*.doubleclick.net https://*.yimg.com https://*.youtube.com; object-src 'none'; img-src * data:; script-src 'self' https://*.adnxs.com https://*.avanser.com https://*.hubapi.com https://*.algolia.com https://*.algolia.net https://*.algolianet.com https://*.readspeaker.com https://*.cloudflare.com https://*.facebook.net https://*.cdnfonts.com https://*.googleapis.com https://*.gstatic.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hsforms.net https://*.hs-scripts.com https://*.hsleadflows.net https://*.hsadspixel.net https://*.hsform.com https://*.hubspot.com https://*.google.com.au https://*.google-analytics.com https://*.googletagmanager.com https://*.clarity.ms https://*.doubleclick.net https://*.cdninstagram.com https://*.myhealthforlife.com.au https://*.myhealthforlife.org.au https://*.newrelic.com https://*.vimeo.com https://*.raisely.com https://*.siteimproveanalytics.com https://*.hotjar.com https://*.licdn.com https://*.ewaypayments.com https://*.linkedin.com https://*.google.com https://*.doubleclick.net https://*.yimg.com https://*.youtube.com; style-src 'self' * 'unsafe-inline'; font-src * data:; media-src *; frame-src *.vimeo.com *.googletagmanager.com *.doubleclick.net *.youtube.com; 2
frame-src 'self'; frame-ancestors 'self'; object-src 'none' 2
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://dev.visualwebsiteoptimizer.com https://tag.goadopt.io https://*.goadopt.io https://js.hs-scripts.com https://js.hsforms.net https://js.hs-analytics.net https://js.hsadspixel.net https://js.hs-banner.com https://js.usemessages.com https://static.clevertap.com https://*.clevertap.com https://*.wzrkt.com; connect-src 'self' https://api.gt7.com.br https://api.homolog.gt7.com.br https://api.checkout.global.cartaodetodos.com.br https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://dev.visualwebsiteoptimizer.com https://*.clevertap.com https://*.wzrkt.com https://*.hubspot.com https://forms.hsforms.com https://*.goadopt.io https://cdn.growthbook.io; frame-src 'self' https://www.googletagmanager.com https://www.google.com https://www.recaptcha.net https://td.doubleclick.net; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://www.googletagmanager.com *.googleapis.com https://fonts.gstatic.com https://ws.colissimo.fr https://api-sogecommerce.societegenerale.eu/static/ *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com fonts.googleapis.com https://cdnjs.cloudflare.com 'self' data: https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://sogecommerce.societegenerale.eu/vads-payment/ https://api-sogecommerce.societegenerale.eu/api-payment/ https://api-sogecommerce.societegenerale.eu/static/ 'self' connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://www.youtube.com https://form.typeform.com https://www.google.com https://www.gstatic.com https://sogecommerce.societegenerale.eu/vads-payment/ https://api-sogecommerce.societegenerale.eu/static/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.disqus.com https://maps.googleapis.com https://maps.gstatic.com https://ws.colissimo.fr https://*.tile.openstreetmap.fr https://*.onyourmap.com https://google.fr integrations.etrusted.com res-1.cloudinary.com *.hsforms.net *.hsforms.com t4.my-probance.one https://sogecommerce.societegenerale.eu/static/latest/images/type-carte/ https://api-sogecommerce.societegenerale.eu/static/ https://sogecommerce.societegenerale.eu/vads-payment/ https://img.youtube.com https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com 'self' data: https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com apis.google.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.disqus.com https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com app.zipchat.ai app.trygr.io cdn.trygr.io s.pinimg.com cdn.caast.tv ct.pinterest.com static.hotjar.com script.hotjar.com fast-static.smarketer.de *.hsforms.net *.hsforms.com widgets.trustedshops.com t4.my-probance.one https://api-sogecommerce.societegenerale.eu/api-payment/ https://api-sogecommerce.societegenerale.eu/static/ *.avada.io *.shopify.com player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https://cdnjs.cloudflare.com *.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com assets.braintreegateway.com https://fonts.googleapis.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com integrations.etrusted.com https://api-sogecommerce.societegenerale.eu/static/ *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline';, connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://ws.colissimo.fr https://maps.googleapis.com https://nominatim.openstreetmap.org https://*.onyourmap.com https://*.mapbox.com app.zipchat.ai app.trygr.io cache.caast.tv ct.pinterest.com content.hotjar.io wss://ws.hotjar.com fast.smarketer.de api-sogecommerce.societegenerale.eu widgets.trustedshops.com widget.trustpilot.com t.elasticsuite.io *.hsforms.net *.hsforms.com https://sogecommerce.societegenerale.eu/vads-payment/ https://api-sogecommerce.societegenerale.eu/api-payment/ https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com *.google-analytics.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src www.googletagmanager.com www.paypal.com fonts.gstatic.com t4.my-probance.one integrations.etrusted.com widget.trustpilot.com invitejs.trustpilot.com widgets.trustedshops.com applepay.cdn-apple.com www.paypalobjects.com https://sogecommerce.societegenerale.eu/vads-payment/ https://api-sogecommerce.societegenerale.eu/api-payment/ https://api-sogecommerce.societegenerale.eu/static/ *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.g.doubleclick.net https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html *.google.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://vpos.infonet.com.py:8888 https://vpos.infonet.com.py 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.google.com *.google.com.ar *.googlesyndication.com  *.googleapis.com  *.googletagmanager.com  *.facebook.com blob: https://www.magezon.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://desa.infonet.com.py:8035 https://*.bancard.com.py 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.g.doubleclick.net *.googlesyndication.com *.google.com.ar  *.googleadservices.com  *.googleapis.com  *.nr-data.net  *.facebook.net  *.newrelic.com tracker.metricool.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.gstatic.com https://vpos.infonet.com.py:8888 https://vpos.infonet.com.py 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googlesyndication.com *.g.doubleclick.net  *.googleapis.com  *.nr-data.net  *.facebook.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
script-src 'self' 'report-sample' blob: data: https://static-web.jjdsn.vip https://bitkeep.page https://*.bitkeep.fun https://*.bitget.cloud https://bitkeep.com https://*.google.com https://*.bitkeep.com https://bitkeep.io https://*.bitkeep.io https://www.google-analytics.com https://fp-constantid.bitkeep.vip https://*.bitkeep.page https://bitkeep.org https://*.bitgetstatic.com https://*.bitkeep.vip https://*.bitget.site https://*.bitgetpro.site https://s3.infcrypto.com https://*.bitkeep.me https://*.jjdsn.vip https://*.bitget.com https://www.googletagmanager.com https://*.googleapis.com https://api-web.wwmxd.info https://api-web.wwmxd.site https://log.noxiaohao.com https://*.geetest.com https://*.geevisit.com https://*.gsensebot.com https://*.walletconnect.org wss://*.walletconnect.org https://*.walletconnect.com;connect-src 'self' 'report-sample' blob: data: https://*.bitkeep.fun https://bitkeep.page https://*.bitget.cloud https://bitkeep.com https://*.google.com https://*.bitkeep.com https://bitkeep.io https://*.bitkeep.io https://www.google-analytics.com https://fp-constantid.bitkeep.vip https://*.bitkeep.page https://bitkeep.org https://*.bitgetstatic.com https://*.bitkeep.vip https://*.bitget.site https://*.bitgetpro.site https://s3.infcrypto.com https://*.bitkeep.me https://*.jjdsn.vip https://*.bitget.com https://www.googletagmanager.com https://*.googleapis.com https://api-web.wwmxd.info https://api-web.wwmxd.site https://log.noxiaohao.com https://*.geetest.com https://*.geevisit.com https://*.gsensebot.com https://region1.google-analytics.com https://*.walletconnect.org wss://*.walletconnect.org https://*.walletconnect.com https://eth.llamarpc.com https://api-web.bitkeep.asia https://api-web.bitkeep.biz https://api-web.bitkeep.life https://api-web.chainnear.com https://api-web.bitkeep.fun;frame-src 'self' 'report-sample' https://www.google.com https://*.bitget.com https://static-web.jjdsn.vip https://*.geetest.com https://*.geevisit.com https://*.gsensebot.com https://*.walletconnect.org;frame-ancestors 'self' https://*.bitget.com https://static-web.jjdsn.vip https://www.google.com https://www.recaptcha.net https://*.geetest.com https://*.geevisit.com https://*.gsensebot.com;report-uri https://api-data.bitkeep.com/log/pivot/cspSecurity; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net *.spotify.com *.recepta.pl https://geowidget.easypack24.net 'self' data: https://dimedic.eu https://*.dimedic.eu data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com sandbox.przelewy24.pl secure.przelewy24.pl 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com pay.google.com apm.przelewy24.pl *.spotify.com https://aptekaradicula.pl *.googletagmanager.com gum.criteo.com https://geowidget-app.inpost.pl/ https://sandbox-easy-geowidget.easypack24.net/ https://dimedic.eu https://*.dimedic.eu 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://images.unsplash.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com *.cloudfront.net *.martailer.com magefan.com cm.magefan.com *.disqus.com tile.openstreetmap.org mapa.orlenpaczka.pl ruch-osm.sysadvisors.pl https://img.youtube.com https://firebasestorage.googleapis.com static.przelewy24.pl gstatic.com *.spotify.com *.recepta.pl www.google.pl https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.hsforms.net *.hsforms.com 'self' data: https://dimedic.eu https://*.dimedic.eu data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js https://maps.googleapis.com https://player.vimeo.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googletagmanager.com tagmanager.google.com *.disqus.com https://cdn.jsdelivr.net mapa.orlenpaczka.pl *.avada.io *.shopify.com sandbox.przelewy24.pl secure.przelewy24.pl pay.google.com apm.przelewy24.pl *.spotify.com *.cookiefirst.com *.recepta.pl mailing.pgf.com.pl an.gr-wcon.com us-an.gr-cdn.com svht.tradedoubler.com swrap.tradedoubler.com bat.bing.com connect.facebook.net https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.hsforms.net *.hsforms.com *.gstatic.com https://dimedic.eu https://*.dimedic.eu 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com tagmanager.google.com fonts.google.com https://cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net *.spotify.com *.googleapis.com *.google.com *.recepta.pl https://geowidget.easypack24.net https://geowidget.inpost.pl *.gstatic.com https://dimedic.eu https://*.dimedic.eu 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cloudfront.net *.martailer.com https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://maps.googleapis.com https://player.vimeo.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com nominatim.openstreetmap.org https://get.geojs.io *.avada.io sandbox.przelewy24.pl secure.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl *.spotify.com ga2.getresponse.com stats.g.doubleclick.net *.cookiefirst.com *.recepta.pl bat.bing.com *.easypack24.net *.inpost.pl *.openstreetmap.org t.elasticsuite.io *.hsforms.net *.hsforms.com https://dimedic.eu https://*.dimedic.eu 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src cdn.jsdelivr.net fonts.gstatic.com cdn.almapay.com *.dinhvan.com https://fonts.gstatic.com https://ws.colissimo.fr data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.authorize.net *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.getalma.eu *.almapay.com/ *.stripe.com/ *.checkout.com/ *.adyen.com/ https://www.youtube.com https://form.typeform.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io magefan.com cm.magefan.com *.dinhvan.com *.doubleclick.net *.google.fr *.googlesyndication.com *.facebook.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://maps.googleapis.com https://maps.gstatic.com https://ws.colissimo.fr https://*.tile.openstreetmap.fr https://*.onyourmap.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeocdn.com www.vimeo.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.jsdelivr.net *.dinhvan.com *.tiktok.com *.axept.io chimpstatic.com s.pinimg.com ct.pinterest.com *.facebook.net downloads.mailchimp.com *.list-manage.com https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com *.disqus.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.jsdelivr.net fonts.googleapis.com *.dinhvan.com downloads.mailchimp.com https://fonts.googleapis.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.dinhvan.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.getalma.eu *.almapay.com *.axept.io *.google.fr *.dinhvan.com analytics.tiktok.com *.google-analytics.com *.doubleclick.net *.googlesyndication.com ct.pinterest.com s.pinimg.com *.vimeocdn.com vimeo.com https://ws.colissimo.fr https://maps.googleapis.com https://nominatim.openstreetmap.org https://*.onyourmap.com https://*.mapbox.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob:; connect-src 'self' https: wss:; img-src 'self' data: https:; frame-ancestors 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com https://*.facebook.com 2
default-src 'self' https:; connect-src 'self' https: wss: javascript:; font-src 'self' data: use.typekit.net fonts.gstatic.com *.cloudfront.net fonts.googleapis.com assets.parentsquare.com assets.sandbox.parentsquare.com assets.staging.parentsquare.com themes.googleusercontent.com; form-action 'self' https:; frame-ancestors 'self'; img-src 'self' blob: data: https: pbs.twimg.com; media-src 'self' data: blob: https:; object-src 'self' parentsquare-restricted-data-production.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; upgrade-insecure-requests; worker-src 'self' blob:; report-uri /csp_report 2
default-src * data: ; script-src * 'unsafe-inline' 'unsafe-eval'  ; style-src * 'unsafe-inline' data: ; frame-ancestors 'none'; report-uri /csp-violation-report-endpoint/ 2
script-src-elem 'self' 'unsafe-inline' 'unsafe-eval'; style-src-elem 'self' 'unsafe-inline'; font-src *.gstatic.com www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net https://use.fontawesome.com https://fonts.gstatic.com *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.tawk.to 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com player.vimeo.com pilot-payflowlink.paypal.com fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypalobjects.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sendy.nl *.tawk.to 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com data: validator.swagger.io *.adobe.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com magefan.com cm.magefan.com *.disqus.com *.tawk.to tawk.link cdn.jsdelivr.net s3.amazonaws.com/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com vimeo.com www.vimeo.com *.vimeocdn.com maps.googleapis.com www.googletagmanager.com *.adobe.com googleads.g.doubleclick.net analytics.google.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.googleapis.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sendy.nl *.disqus.com *.tawk.to cdn.jsdelivr.net commerce-payments-sdk.adobe.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://use.fontawesome.com https://fonts.googleapis.com *.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tawk.to tawk.link 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://olegnax.com https://api.instagram.com https://graph.instagram.com/ *.tawk.to wss://*.tawk.to places.googleapis.com *.pay.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src www.paypalobjects.com fonts.gstatic.com use.fontawesome.com *.fontawesome.com audioeye.com *.audioeye.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com fortnine.ca *.fortnine.ca defender.com *.defender.com defender.ca *.defender.ca 6routes.ca *.6routes.ca 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com *.certcapture.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com www.youtube.com youtu.be www.youtube-nocookie.com audioeye.com *.audioeye.com checkout.sezzle.com sandbox.checkout.sezzle.com https://www.googletagmanager.com/ ad.doubleclick.net pagead2.googlesyndication.com ade.googlesyndication.com bat.bing.com apps.rokt.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.certcapture.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com shipping-offers-static-images-bucket-platformsandbox.s3.amazonaws.com shipping-offers-static-images-bucket-stage.s3.amazonaws.com shipping-offers-static-images-bucket-prod.s3.amazonaws.com shipping-offers-static-images-bucket-dev.s3.amazonaws.com shipping-offers-static-images-bucket-demo.s3.amazonaws.com helloextend-static-assets.s3.amazonaws.com https://s3.amazonaws.com/ccspersistenceprod-contentstaticassets04b201d4-1apqb8dyegznm/offers/learnMoreModal-default-1654273334107-learnMoreModal.backgroundImageUrl_Generic_WomanwithBox2.jpg https://s3.amazonaws.com/ccspersistenceprod-contentstaticassets04b201d4-1apqb8dyegznm/offers/shippingProtectionCartOffer-default-1720746621507-extend_svg_cart.svg https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ fortnine.ca *.fortnine.ca defender.com *.defender.com https://c683207.ssl.cf2.rackcdn.com www.youtube.com youtu.be www.google.ca www.googletagmanager.com www.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ cdn.datamanager.arinet.com ad.doubleclick.net adservice.google.com pagead2.googlesyndication.com ade.googlesyndication.com cct.google bat.bing.com bat.bing.net tag.rmp.rakuten.com services.xg4ken.com static.hotjar.com *.hotjar.com shipping-offers-static-images-bucket-solutionssandbox.s3.amazonaws.com https://s3.amazonaws.com/ccspersistenceprod-contentstaticassets04b201d4-1apqb8dyegznm/ https://s3.amazonaws.com/ccspersistenceofferssand-contentstaticassets04b20-1hoyak4welg5e/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.certcapture.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com https://sdk.helloextend.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ fortnine.ca *.fortnine.ca defender.com *.defender.com *.newrelic.com bam.nr-data.net *.nr-data.net cdnjs.cloudflare.com fullstory.com www.youtube.com *.youtube.com youtu.be connect.facebook.net static.cloudflareinsights.com *.cloudflareinsights.com js.authorize.net *.fontawesome.com audioeye.com *.audioeye.com bloomreach.com *.bloomreach.com checkout-sdk.sezzle.com sandbox.checkout-sdk.sezzle.com abtasty.com *.abtasty.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ ad.doubleclick.net adservice.google.com pagead2.googlesyndication.com ade.googlesyndication.com cct.google bat.bing.com bat.bing.net clarity.microsoft.com static.hotjar.com script.hotjar.com *.hotjar.com tag.rmp.rakuten.com apps.rokt.com intentclientscriptslon.s3.eu-west-2.amazonaws.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.certcapture.com display.ugc.bazaarvoice.com https://static.klaviyo.com fortnine.ca *.fortnine.ca defender.com *.defender.com fonts.googleapis.com use.fontawesome.com *.fontawesome.com audioeye.com *.audioeye.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.certcapture.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com https://*.helloextend.com/ https://*.extend.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ fortnine.ca *.fortnine.ca defender.com *.defender.com algolianet.com *.algolianet.com bam.nr-data.net *.nr-data.net analytics.google.com www.facebook.com js.authorize.net jstest.authorize.net ws1.postescanada-canadapost.ca *.postescanada-canadapost.ca audioeye.com *.audioeye.com bloomreach.com *.bloomreach.com abtasty.com *.abtasty.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ ad.doubleclick.net adservice.google.com pagead2.googlesyndication.com ade.googlesyndication.com cct.google www.google.com retail.googleapis.com bat.bing.com bat.bing.net clarity.microsoft.com ui.ads.microsoft.com static.hotjar.com script.hotjar.com *.hotjar.com *.hotjar.io tag.rmp.rakuten.com services.xg4ken.com apps.rokt.com apps.rokt-api.com intentclientscriptslon.s3.eu-west-2.amazonaws.com www.youtube.com *.youtube.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src fortnine.ca *.fortnine.ca defender.com *.defender.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; script-src 'self' 'unsafe-inline' https://code.jquery.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; media-src 'self' blob: https:; font-src 'self' data:; connect-src 'self'; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /api/csp-report 2
script-src 'self' 'unsafe-inline' js.stripe.com *.googletagmanager.com *.google-analytics.com *.crisp.chat challenges.cloudflare.com; frame-src js.stripe.com hooks.stripe.com challenges.cloudflare.com *.crisp.chat; worker-src 'self' blob:; object-src 'none'; base-uri 'self' 2
frame-src 'self'; report-uri https://browser-intake-datadoghq.eu/api/v2/logs?dd-api-key=pub562a4db9f5cdd594e2b1fb6204de1caf&dd-evp-origin=content-security-policy&ddsource=csp-report 2
connect-src 'self' https: wss:; default-src 'self'; font-src 'self'; frame-src 'self'; img-src 'self' data:; manifest-src 'self'; media-src 'self'; object-src 'none'; script-src 'self'; script-src-elem 'self'; style-src 'self'; style-src-elem 'self'; worker-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri https://csp.volet.com/csp-reports; report-to csp-endpoint 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.agrialpro.fr *.lamaison.fr *.cloudflare.com *.fontawesome.com *.bootstrapcdn.com *.googleapis.com *.twitter.com nitropack.io *.nitrocdn.com https://cdnjs.cloudflare.com 'self' data: https://assets-staging.oney.io https://assets.oney.io data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors api.oney.io 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com youtu.be facebook.com *.addthis.com *.trustpilot.com *.twitter.com *.vimeo.com *.doubleclick.net nitropack.io c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com *.agrialpro.fr *.lamaison.fr maps.gstatic.com maps.google.com maps.googleapis.com *.googleusercontent.com cl.avis-verifies.com www.google.fr www.facebook.com *.dmxleo.com *.bidswitch.net *.adform.net *.casalemedia.com *.id5-sync.com id5-sync.com *.ivitrack.com *.mediavine.com *.postrelease.com *.outbrain.com *.pubmatic.com *.yieldmo.com *.yieldlab.net *.emxdgt.com *.doubleclick.net *.adnxs.com *.media.net *.rubiconproject.com *.smartadserver.com *.taboola.com *.teads.tv *.yahoo.net *.3lift.com *.omnitagjs.com *.360yield.com *.sharethrough.com *.tremorhub.com *.krxd.net ade.googlesyndication.com *.openstreetmap.org https://maps.googleapis.com *.hsforms.net *.hsforms.com *.disqus.com *.cloudflare.com *.twitter.com *.contentsquare.net nitropack.io *.nitrocdn.com https://img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: https://widget-stg.oney.io https://assets-staging.oney.io https://assets.oney.io data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page maps.google.com maps.googleapis.com *.googleusercontent.com *.agrialpro.fr *.lamaison.fr cdn.jsdelivr.net cl.avis-verifies.com connect.facebook.net js-agent.newrelic.com bam.nr-data.net cdn.webotit.ai secure.adnxs.com *.hsforms.net *.hsforms.com *.disqus.com https://cdn.jsdelivr.net/npm/pwacompat@2.0.8/pwacompat.min.js *.addthis.com *.googleapis.com *.cloudflare.com *.fontawesome.com *.google-analytics.com googletagmanager.com graph.facebook.com *.gstatic.com *.moatads.com *.trustpilot.com widgets.pinterest.com *.contentsquare.com *.contentsquare.net cdn.tailwindcss.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com https://assets-staging.oney.io https://assets.oney.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.agrialpro.fr *.lamaison.fr *.cloudflare.com *.fontawesome.com *.googleapis.com *.gstatic.com *.twitter.com cdn.tailwindcss.com nitropack.io cdnjs.cloudflare.com *.nitrocdn.com cdn.jsdelivr.net https://fonts.googleapis.com https://cdnjs.cloudflare.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.agrialpro.fr *.lamaison.fr blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.agrialpro.fr *.lamaison.fr www.google-analytics.com stats.g.doubleclick.net bam.nr-data.net maps.googleapis.com www.facebook.com oney.io widget-stg.oney.io *.cardinalcommerce.com *.cardinaltrusted.com widgets.rr.skeepers.io api-product-reviews.cxr.skeepers.io cl-ppr.rr.skeepers.io cl-pbr.cxr.skeepers.io *.demdex.net *.omtrdc.net *.contentsquare.net nitropack.io *.nitrocdn.com t.elasticsuite.io *.openstreetmap.org https://maps.googleapis.com *.hsforms.net *.hsforms.com *.cloudflare.com *.twitter.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com https://widget-stg.oney.io https://oney.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
script-src 'self' 'unsafe-eval' blob: https://prod-bk-web.es.rbi.tools/en/static/js/vendor.5dc447bb.js https://prod-bk-web.es.rbi.tools/en/static/js/main.776c4cc1.js https://prod-bk-web.es.rbi.tools/en/static/js/runtime.c6486c6c.js https://*.mparticle.com https://cdn.cookielaw.org https://www.googletagmanager.com https://*.onetrust.com https://static.ads-twitter.com https://platform.twitter.com https://www.google-analytics.com https://connect.facebook.net https://secure.quantserve.com https://dynamic.criteo.com https://rules.quantcount.com https://cdn.branch.io https://app.link https://*.cdn4.forter.com https://dlthst9q2beh8.cloudfront.net https://sslwidget.criteo.com https://widget.eu.criteo.com https://pagead2.googlesyndication.com https://cdn.amplitude.com https://accounts.google.com https://appleid.cdn-apple.com https://analytics.tiktok.com https://c.amazon-adsystem.com https://js.adsrvr.org https://maps.googleapis.com https://googleads.g.doubleclick.net https://static.zdassets.com https://bat.bing.com https://cdn-st.adsmurai.com https://www.youtube.com https://player.vimeo.com https://prod-bk-web.es.rbi.tools/en/static/js/main.790f3a96.js https://prod-bk-web.es.rbi.tools/en/static/js/runtime.211370b5.js; object-src 'none'; base-uri 'none'; worker-src 'self' blob:; report-uri https://intl-csp-service.rbictg.com/report 2
font-src fonts.googleapis.com fonts.gstatic.com *.fontawesome.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.adyen.com pay.google.com payments-eu.amazon.com *.amazon.de *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.adyen.com pay.google.com *.paypal.com www.ups.com rms.ups.com maps.googleapis.com www.bing.com *.virtualearth.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.adyen.com pay.google.com *.payments-amazon.com *.media-amazon.com *.paypalobjects.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com www.ups.com rms.ups.com maps.googleapis.com www.bing.com *.virtualearth.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://*.gstatic.com/ https://*.lisecharmel.com/media/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com chimpstatic.com downloads.mailchimp.com *.list-manage.com www.ups.com rms.ups.com maps.googleapis.com polyfill.io www.bing.com *.virtualearth.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com https://*.doofinder.com/ https://*.newrelic.com/ https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com www.ups.com rms.ups.com maps.googleapis.com fonts.googleapis.com *.fontawesome.com https://fonts.googleapis.com https://cdnjs.cloudflare.com unsafe-inline assets.braintreegateway.com https://*.allfont.net/ https://*.doofinder.com/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adyen.com *.google.com google.com payments-eu.amazon.com *.paypal.com ws://localhost:9109/ws wss://localhost:9109/ws wss://localhost:9109/ www.ups.com rms.ups.com maps.googleapis.com www.bing.com *.virtualearth.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com https://*.doofinder.com/ https://*.googleapis.com/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self' https: data: blob:; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; media-src 'self' blob: https:; frame-src https:; connect-src 'self' https:; upgrade-insecure-requests 2
font-src *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; frame-src secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googletagmanager.com *.retailrocket.net landofcoder.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com www.apptrian.com www.facebook.com assets.fintoc.com https://assets.fintoc.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.facebook.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.youtube.com www.googletagmanager.com www.apptrian.com www.facebook.com connect.facebook.net graph.facebook.com *.retailrocket.net landofcoder.com *.googleapis.com *.google.com *.gstatic.com *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.retailrocket.net *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src *.retailrocket.net landofcoder.com 'self' 'unsafe-inline'; media-src www.apptrian.com www.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.apptrian.com connect.facebook.net graph.facebook.com *.retailrocket.net landofcoder.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src storage.googleapis.com/rtux-rtux-data-integration-rti/ *.cloudflare.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action test.saferpay.com www.saferpay.com saferpay.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src bid.g.doubleclick.net player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com *.prismic.io *.google.com *.criteo.com *.criteo.net *.doubleclick.net *.pinterest.com *.facebook.com *.sovendus-connect.com *.googletagmanager.com *.lehner-versand.ch *.bettwaesche.ch *.workgear.ch *.linge-de-lit.ch *.vedia.ch *.weltpixel.com test.saferpay.com www.saferpay.com saferpay.com www.xtento.com *.typeform.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com https://images.unsplash.com *.prism.app-us1.com *.prismic.io *.bing.com *.google.ch *.trackjs.com *.google.com *.twiago.com *.doubleclick.net *.bidswitch.net *.adnxs.com *.smartadserver.com *.taboola.com *.adform.net *.omnitagjs.com *.lehner-versand.ch *.casalemedia.com *.criteo.com id5-sync.com *.360yield.com *.ivitrack.com *.media.net *.mediavine.com *.postrelease.com *.outbrain.com *.pubmatic.com *.rubiconproject.com *.sharethrough.com *.teads.tv *.tremorhub.com *.3lift.com *.yieldlab.net *.yieldmo.com *.emxdgt.com *.demdex.net *.dmxleo.com *.profity.ch *.googleapis.com *.1rx.io *.typewise.app *.bettwaesche.ch *.workgear.ch *.linge-de-lit.ch *.vedia.ch test.saferpay.com www.saferpay.com saferpay.com www.xtento.com cdn.xtento.com *.gstatic.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ bx-cdn.com/static/bav2.min.js track.bx-cloud.com/static/bav2.min.js r-st.bx-cloud.com/static/bav2.min.js r-st.bx-cloud.com/static/rti.min.js track.bx-cloud.com/static/rti.min.js bx-cdn.com/static/rti.min.js storage.googleapis.com/rtux-rtux-data-integration-rti/ *.prism.app-us1.com *.prismic.io *.trackjs.com *.gstatic.com *.cdn.prismic.io *.google.com *.criteo.com *.pinimg.com *.bing.com *.adt313.net htm1.ch *.pinterest.com profity.ch *.profity.ch/clients/main.js *.getback.ch *.sovendus.com *.sovendus-connect.com *.googleapis.com storage.googleapis.com/*_rtux-data* *.wi-platform-cloud.com *.bx-cdn.com *.googletagmanager.com *.bx-cloud.com *.doubleclick.net *.typewise.app *.ct0.ch test.saferpay.com www.saferpay.com saferpay.com www.xtento.com cdn.xtento.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com unpkg.com *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.getback.ch *.cloudflare.com *.googleapis.com storage.googleapis.com/*_rtux-data* *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src storage.googleapis.com/rtux-rtux-data-integration-rti/ *.googleapis.com storage.googleapis.com/*_rtux-data* 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net https://maps.googleapis.com https://player.vimeo.com track.bx-cloud.com main.bx-cloud.com track-gw1.bx-cloud.com bx-cloud.com main.wi-platform-cloud.com r-st.bx-cloud.com track.bx-cloud.com/track/v2 storage.googleapis.com/rtux-rtux-data-integration-rti/ *.prism.app-us1.com *.prismic.io htm1.ch *.pinterest.com *.lehner-versand.ch *.criteo.com *.google.com *.getback.ch *.doubleclick.net *.wi-platform-cloud.com *.trackjs.com *.sovendus.com *.googleapis.com storage.googleapis.com/*_rtux-data* *.bing.com *.typewise.app *.bettwaesche.ch *.workgear.ch *.linge-de-lit.ch *.vedia.ch test.saferpay.com www.saferpay.com saferpay.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.net *.klaviyo.com *.clarity.ms *.pinimg.com sc-static.net *.snapchat.com *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.klevu.com *.ksearchnet.com *.fontawesome.com maxcdn.bootstrapcdn.com *.google.com *.google.ca *.omappapi.com *.hotjar.com *.freshbots.ai *.pusher.com *.freshworksapi.com *.attn.tv *.route.io *.routeapp.io *.klaviyo.com d1cwup7r903a1d.cloudfront.net *.trycaddie.com caddie-ai-public.s3.us-east-2.amazonaws.com prod-caddie-public-custom-stylesheets.s3.us-east-2.amazonaws.com *.posthog.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.net *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.affirm.com *.affirm.ca c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.hotjar.com *.kaptcha.com *.tdotperformance.ca *.automotivestuff.com *.addthis.com *.nort.ca *.google.ca *.bing.com *.facebook.com *.freshbots.ai *.pusher.com *.freshworksapi.com *.attn.tv *.trycaddie.com caddie-ai-public.s3.us-east-2.amazonaws.com prod-caddie-public-custom-stylesheets.s3.us-east-2.amazonaws.com *.posthog.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.affirm.com *.affirm.ca https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.bing.com *.freshbots.ai *.googletagmanager.com *.shopperapproved.com *.tdotperformance.ca *.automotivestuff.com *.nort.ca *.google.com *.google.ca *.doubleclick.net *.facebook.net *.facebook.com *.hotjar.com *.riskified.com *.clarity.ms *.cloudfront.net *.omappapi.com *.crazyegg.com *.pusher.com *.freshworksapi.com *.attn.tv *.route.io *.routeapp.io *.convertexperiments.com *.trycaddie.com caddie-ai-public.s3.us-east-2.amazonaws.com prod-caddie-public-custom-stylesheets.s3.us-east-2.amazonaws.com *.posthog.com api.getblueshift.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.affirm.com *.affirm.ca https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.klevu.com *.ksearchnet.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.forter.com *.cloudfront.net *.optnmstr.com *.hotjar.com *.shopperapproved.com *.bing.com *.freshbots.ai *.clarity.ms *.googleapis.com *.tdotperformance.ca *.automotivestuff.com *.addthis.com *.addthisedge.com *.moatads.com *.nort.ca *.google.ca *.omappapi.com *.facebook.net *.facebook.com *.riskified.com *.doubleclick.net *.klaviyo.com *.crazyegg.com *.pusher.com *.freshworksapi.com *.noibu.com *.attn.tv *.omniconvert.com *.route.io *.routeapp.io *.route.com unpkg.com *.convertexperiments.com *.trycaddie.com caddie-ai-public.s3.us-east-2.amazonaws.com prod-caddie-public-custom-stylesheets.s3.us-east-2.amazonaws.com *.posthog.com *.amplitude.com cdn.getblueshift.com cdn.routeapp.io fonts.googleapis.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.omappapi.com *.freshbots.ai *.tdotperformance.ca *.automotivestuff.com *.nort.ca *.google.com *.google.ca *.shopperapproved.com *.klaviyo.com *.crazyegg.com *.pusher.com *.freshworksapi.com *.attn.tv *.route.io *.routeapp.io *.convertexperiments.com *.trycaddie.com caddie-ai-public.s3.us-east-2.amazonaws.com prod-caddie-public-custom-stylesheets.s3.us-east-2.amazonaws.com *.posthog.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.affirm.com *.affirm.ca https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cloudfront.net *.forter.com *.omappapi.com *.hotjar.com *.doubleclick.net *.shopperapproved.com *.freshbots.ai *.googleapis.com *.tdotperformance.ca *.automotivestuff.com *.addthis.com *.nort.ca *.clarity.ms *.youtube.com *.google.ca *.facebook.net *.facebook.com *.bing.com *.riskified.com *.klaviyo.com *.crazyegg.com *.hotjar.io *.pusher.com *.freshworksapi.com wss://rts-us.freshworksapi.com wss://ws.hotjar.com *.noibu.com wss://*.noibu.com *.attn.tv events.attentivemobile.com google.com/pay *.omniconvert.com *.route.io *.routeapp.io *.route.com *.convertexperiments.com *.trycaddie.com caddie-ai-public.s3.us-east-2.amazonaws.com prod-caddie-public-custom-stylesheets.s3.us-east-2.amazonaws.com *.posthog.com *.amplitude.com api.getblueshift.com api.route.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.inpost.pl maxcdn.bootstrapcdn.com *.googleapis.com lancerto-proxy.eu-de.mybluemix.net actionbot-proxy-lancerto.12lsncf5rsle.eu-de.codeengine.appdomain.cloud https://geowidget.easypack24.net data: https://cdn.thulium.com/ script.hotjar.com widget.fitanalytics.com/ fontawesome.com *.fontawesome.com widget.fitanalytics.com static.lancerto.com data: 'self' 'unsafe-inline'; form-action *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com bid.g.doubleclick.net consentcdn.cookiebot.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.instagram.com pay.google.com play.google.com *.autopay.eu *.inpost.pl secure.payu.com merch-prod.snd.payu.com smartforms.ekomi.com *.ekomiapps.de https://geowidget-app.inpost.pl/ https://pudofinder.dpd.com.pl/ *.fls.doubleclick.net creativecdn.com gum.criteo.com *.hotjar.com facebook.com start.paypo.pl https://tbs.tradedoubler.com https://imgstatic.eu *.tradedoubler.com *.imgstatic.eu static.criteo.net 'self' fledge.eu.criteo.com td.doubleclick.net *.creativecdn.com ct.pinterest.com ms.lancerto.com js-agent.newrelic.com *.googletagmanager.com csr.onet.pl ms.prochnik.pl 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com 'unsafe-inline' data: widgets.magentocommerce.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com imgsct.cookiebot.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cdninstagram.com platnosci.bm.pl platnosci-accept.bm.pl www.gstatic.com *.autopay.eu *.inpost.pl magefan.com cm.magefan.com static.payu.com *.googleapis.com *.ggpht lancerto-proxy.eu-de.mybluemix.net actionbot-proxy-lancerto.12lsncf5rsle.eu-de.codeengine.appdomain.cloud https://lancerto.com https://geowidget.easypack24.net https://osm.inpost.pl *.revhunter.tech assets.swarmcdn.com analytics.tiktok.com https://maps.googleapis.com/ https://maps.gstatic.com/ https://developers.google.com *.g.doubleclick.net pixel.wp.pl *.google.com facebook.com www.google.pl google.pl script.hotjar.com  data: smart-widget-assets.ekomiapps.de tbl.tradedoubler.com *.stickyadstv.com *.bing.com *.adform.net *.advertising.com ade.clmbtech.com *.criteo.com *.adnxs.com sync.outbrain.com *.analytics.yahoo.com *.yahoo.com *.tribalfusion.com sw-assets.ekomiapps.de *.taboola.com *.3lift.com *.rtb-csync.smartadserver.com *.casalemedia.com *.pixel.rubiconproject.com *.simage2.pubmatic.com *.criteo-sync.teads.tv *.360yield.com *.pubmatic.com *.bidswitch.net criteo-sync.teads.tv *.adscale.de *.omnitagjs.com *.smartadserver.com *.ivitrack.com *.ad.smaato.net *.sharethrough.com *.ssp.rambler.ru *.fls.doubleclick.net *.atdmt.com *.rubiconproject.com *.yieldlab.net *.e-planning.net *.ads.linkedin.com sync-tm.everesttech.net s-cs.send.microad.jp contextual.media.net us-u.openx.net cm.mgid.com pixel.tapad.com ad.as.amanad.adtdp.com an.yandex.ru trends.revcontent.com cw.addthis.com crb.kargo.com i.liadm.com jadserve.postrelease.com sync.aralego.com ad.mail.ru sync-criteo.ads.yieldmo.com a.twiago.com idsync.rlcdn.com criteo-partners.tremorhub.com d.turn.com https://tbs.tradedoubler.com https://imgstatic.eu *.tradedoubler.com *.imgstatic.eu googleads4.g.doubleclick.net *.emxdgt.com *.googletagmanager.com static.lancerto.com htlfkw.lancerto.com s.thebrighttag.com beacon.krxd.net id5-sync.com exchange.mediavine.com https://csr.onet.pl https://upload.snrcdn.net *.clarity.ms dmp.adform.net ad.doubleclick.net images.autopay.eu ekomi-srr.s3.eu-central-1.amazonaws.com *.googlesyndication.com hb.yahoo.net *.salestube.pl dot.wp.pl mapa.orlenpaczka.pl tile.openstreetmap.org lantern.roeye.com *.google.pl region1.analytics.google.com media.prochnik.pl media.lancerto.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com consent.cookiebot.com consentcdn.cookiebot.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.instagram.com *.autopay.eu pay.google.com *.google-analytics.com *.googletagmanager.com *.inpost.pl *.snrbox.com secure.payu.com secure.snd.payu.com *.googleapis.com *.gstatic.com lancerto-proxy.eu-de.mybluemix.net actionbot-proxy-lancerto.12lsncf5rsle.eu-de.codeengine.appdomain.cloud smartforms.ekomi.com *.ekomiapps.de https://geowidget.easypack24.net https://geowidget.inpost.pl https://bat.bing.com/ https://www.clarity.ms/ assets.swarmcdn.com web.snrbox.com https://cdn.thulium.com/ analytics.tiktok.com https://maps.googleapis.com/ sw-assets.ekomiapps.de smart-widget-assets.ekomiapps.de *.googleadservices.com px.leadexpert.pl static.lamoda.pl *.hotjar.com pixel.wp.pl wrap.tradedoubler.com static.criteo.net sslwidget.criteo.com widget.fitanalytics.com metrics.fitanalytics.com metrics-nl.fitanalytics.com cdn.wootric.com swrap.tradedoubler.com ocdn.eu js-agent.newrelic.com bam-cell.nr-data.net *.platform.hicloud.com snap.licdn.com www.snrcdn.net unpkg.com *.doubleclick.net googletagservices.com *.googlesyndication.com www.googletagservices.com https://tbs.tradedoubler.com *.tradedoubler.com https://imgstatic.eu *.imgstatic.eu maps.googleapis.com 'unsafe-inline' https://tagmanager.google.com/ https://www.googletagmanager.com/ https://cdnjs.cloudflare.com https://cdn.juo.io https://sgqcvfjvr.onet.pl https://artemis-cdn.ocdn.eu https://player.vimeo.com https://lib.onet.pl dc.cux.io js.go2sdk.com *.creativecdn.com s.pinimg.com ct.pinterest.com cdn.jsdelivr.net ms.lancerto.com mapa.orlenpaczka.pl stapecdn.com ms.prochnik.pl www.dwin1.com *.bam.eu01.nr-data.net bam.eu01.nr-data.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.autopay.eu *.googleapis.com *.inpost.pl *.snrcdn.net maxcdn.bootstrapcdn.com *.gstatic.com lancerto-proxy.eu-de.mybluemix.net actionbot-proxy-lancerto.12lsncf5rsle.eu-de.codeengine.appdomain.cloud https://geowidget.easypack24.net https://geowidget.inpost.pl assets.swarmcdn.com sw-assets.ekomiapps.de widget.fitanalytics.com customizations.fitanalytics.com www.snrcdn.net 'self' 'unsafe-inline'; object-src 'self' 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com *.inpost.pl assets.swarmcdn.com swarmify: blob: video-node.swarmcdn.com https://cdn.thulium.com/ chat-widget.thulium.com static.lancerto.com https://static.lancerto.com media.lancerto.com media.prochnik.pl 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com consentcdn.cookiebot.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.inpost.pl *.snrbox.com secure.payu.com merch-prod.snd.payu.com lancerto-proxy.eu-de.mybluemix.net actionbot-proxy-lancerto.12lsncf5rsle.eu-de.codeengine.appdomain.cloud smartforms.ekomi.com *.ekomiapps.de https://geowidget.easypack24.net https://api-pl-points.easypack24.net https://osm.inpost.pl https://bat.bing.com/ *.clarity.ms video-node.swarmcdn.com wss://hornets.swarmcdn.com *.swarmcdn.com https://cdn.thulium.com/ analytics.tiktok.com https://maps.googleapis.com/ https://places.googleapis.com/ *.g.doubleclick.net wss://v18dxapjmd.execute-api.eu-west-1.amazonaws.com smart-widget-assets.ekomiapps.de *.hotjar.com *.facebook.com clk.leadexpert.pl wss://ws17.hotjar.com  data: eligibility.wootric.com bam-cell.nr-data.net web.snrbox.com widget.fitanalytics.com https://in.juo.io https://csr.onet.pl wss://n-541921153-0-27272500-1569843303-5d91e8674295d.track.cux.io events.ocdn.eu bat.bing.com google.com/pay pixel.wp.pl measurement-api.criteo.com pagead2.googlesyndication.com *.creativecdn.com ct.pinterest.com ms.lancerto.com js-agent.newrelic.com ms.prochnik.pl *.google.pl *.bam.eu01.nr-data.net bam.eu01.nr-data.net consent.cookiebot.com 'self' 'unsafe-inline'; child-src https://tbs.tradedoubler.com https://imgstatic.eu *.tradedoubler.com *.imgstatic.eu bam.eu01.nr-data.net http: https: blob: 'self' 'unsafe-inline'; default-src 'self' *.bam.eu01.nr-data.net bam.eu01.nr-data.net media.lancerto.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri bam.eu01.nr-data.net 'self' 'unsafe-inline'; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com *.googleapis.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://use.typekit.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.stripe.com stripe.com *.link.com *.amazon.com https://mcstaging.booktrump.com https://mcstaging.trumphotels.com https://integration-5ojmyuq-r7ma66w2vxzgu.us-5.magentosite.cloud https://integration2-hohc4oi-r7ma66w2vxzgu.us-5.magentosite.cloud 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.certcapture.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://mcstagingdoral.booktrump.com https://mcstagingireland.booktrump.com https://mcstaging.booktrump.com https://mcstaging.trumphotels.com https://integration-5ojmyuq-r7ma66w2vxzgu.us-5.magentosite.cloud https://integration2-hohc4oi-r7ma66w2vxzgu.us-5.magentosite.cloud 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.facebook.com https://firebasestorage.googleapis.com https://www.magezon.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://bat.bing.com https://*.bing.com https://*.synxis.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.googletagmanager.com *.facebook.net www.termsfeed.com *.fontawesome.com *.googleapis.com *.gstatic.com *.avada.io *.shopify.com *.sharethis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://backend.alia-cloudflare.com https://capture.celopay.com https://api.cartstack.com https://*.cartstack.com https://script.hotjar.com https://www.thehotelsnetwork.com https://*.thehotelsnetwork.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com https://use.typekit.net https://p.typekit.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https://player.vimeo.com https://download-video.akamaized.net 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google-analytics.com https://get.geojs.io *.avada.io *.sharethis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://capture.celopay.com https://api.cartstack.com https://*.cartstack.com https://bat.bing.com https://*.bing.com https://www.thehotelsnetwork.com https://*.thehotelsnetwork.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com https://fonts.bunny.net *.lndo.site *.weprovide.shop script.hotjar.com *.triggerbee.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://www.paypal.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io landofcoder.com maps.googleapis.com chart.googleapis.com https://www.googletagmanager.com/ *.trustpilot.com *.lndo.site *.weprovide.shop dtm.cando.eu vars.hotjar.com ct.pinterest.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://banners.helloretailcdn.com 'self' data: www.google.nl *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com https://portal.payconiq.com https://static.buckaroo.nl https://www.paypalobjects.com cdn.flbx.io *.cloudfront.net 'self' blob: data http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com https://firebasestorage.googleapis.com *.lndo.site *.weprovide.shop maps.google.com maps.googleapis.com mailing.deli-home.nl *.clarity.ms *.omappapi.com ct.pinterest.com cdn.cookielaw.org *.cando.eu skantrae.com *.weekampdeuren.nl dev.visualwebsiteoptimizer.com *.triggerbee.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://core.helloretail.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com cdn.jsdelivr.net *.tiktok.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io *.getflowbox.com landofcoder.com maps.googleapis.com chart.googleapis.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io *.shopify.com *.trustpilot.com *.lndo.site *.weprovide.shop cdnjs.cloudflare.com code.jquery.com optanon.blob.core.windows.net geolocation.onetrust.com *.omappapi.com bam.nr-data.net cdn.cookielaw.org js-agent.newrelic.com s.pinimg.com *.hotjar.com *.clarity.ms cdn.leadinfo.net ct.pinterest.com dev.visualwebsiteoptimizer.com *.triggerbee.com *.myvisitors.se *.jotform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl *.fontawesome.com https://fonts.bunny.net *.trustpilot.com *.lndo.site *.weprovide.shop optanon.blob.core.windows.net a.omappapi.com cdn.cookielaw.org p.typekit.net skantrae.com 'self' 'unsafe-inline'; object-src landofcoder.com maps.googleapis.com chart.googleapis.com 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://core.helloretail.com https://helloretailcdn.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com wss://websocketservice-externalapi.prod.buckaroo.io https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://applepay.buckaroo.io https://www.paypal.com *.getflowbox.com *.googleapis.com landofcoder.com maps.googleapis.com chart.googleapis.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io *.lndo.site *.weprovide.shop *.cando.eu bam.nr-data.net *.clarity.ms *.omappapi.com ct.pinterest.com sp.spheremall.com *.hotjar.com *.hotjar.io wss://*.hotjar.com cdn.cookielaw.org geolocation.onetrust.com dev.visualwebsiteoptimizer.com *.triggerbee.com gethatch.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self' 'unsafe-eval' 'unsafe-inline' essentialed.com *.essentialed.com passged.com *.passged.com d2lpurk2qe2oc.cloudfront.net d3ebkza70oew6x.cloudfront.net dpg0n9q1lsnov.cloudfront.net d37nqy2yusfq54.cloudfront.net d2pfk5on3dtp5q.cloudfront.net js-agent.newrelic.com bam.nr-data.net *.typekit.net *.google.com *.google.ca *.google.com.mx *.google.co.uk *.google.de *.googletagmanager.com *.google-analytics.com *.googleapis.com *.doubleclick.net *.googlesyndication.com *.gstatic.com *.wistia.com *.wistia.net *.litix.io *.credly.com *.hubspot.com *.hs-banner.com *.hs-analytics.net *.hs-analytics.com *.hs-scripts.com *.hsforms.com *.hsforms.net *.hscollectedforms.net *.plyr.io *.crazyegg.com *.hotjar.com *.hotjar.io analytics.tiktok.com *.bing.com hiset.org *.clarity.ms *.jquery.com *.fontawesome.com *.cloudflare.com *.bootstrapcdn.com *.paypal.com *.paypalobjects.com js.stripe.com *.facebook.com *.facebook.net widget.trustpilot.com unpkg.com data: ws: wss: about: blob:; frame-ancestors 'self' essentialed.com *.essentialed.com passged.com *.passged.com 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com data: *.fontawesome.com *.cloudflare.com *.twitter.com *.bootstrapcdn.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com https://*.paypal.com * *.twitter.com https://*.cardinalcommerce.com https://plumrocket.com https://t.pepperjamnetwork.com https://*.dwin1.com https://*.awin1.com https://*.zenaps.com *.googleapis.com *.trustpilot.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: *.googleapis.com magefan.com cm.magefan.com http://hemin11112.pcapredict.com http://services.postcodeanywhere.co.uk *.cloudflare.com *.googleadservices.com *.twitter.com *.adobedtm.com https://firebasestorage.googleapis.com *.disqus.com https://img.youtube.com https://shareasale.com/sale.cfm https://track.linksynergy.com https://www.bizrate.com https://*.dwin1.com https://*.awin1.com https://*.zenaps.com https://track.webgains.com https://prf.hn https://track.flexlinks.com https://scripts.affiliatefuture.com https://t.powerreviews.com https://match.sharethrough.com https://cm.g.doubleclick.net https://x.bidswitch.net https://ib.adnxs.com https://rtb-csync.smartadserver.com https://sync-t1.taboola.com https://visitor.omnitagjs.com https://r.casalemedia.com https://gum.criteo.com https://jadserve.postrelease.com https://id5-sync.com https://ad.360yield.com https://matching.ivitrack.com https://contextual.media.net https://exchange.mediavine.com https://sync.outbrain.com https://simage2.pubmatic.com https://pixel.rubiconproject.com https://criteo-sync.teads.tv https://criteo-partners.tremorhub.com https://eb2.3lift.com https://ad.yieldlab.net https://sync-criteo.ads.yieldmo.com https://e1.emxdgt.com https://sync.1rx.io https://dis.criteo.com https://dpm.demdex.net https://ps.eyeota.net https://public-prod-dspcookiematching.dmxleo.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com apis.google.com *.gstatic.com http://hemin11112.pcapredict.com http://services.postcodeanywhere.co.uk *.cloudflare.com *.twitter.com *.google-analytics.com googletagmanager.com *.trustedshops.com *.fontawesome.com graph.facebook.com *.adobedtm.com https://analytics.webgains.io https://www.paypal.com https://www.paypalobjects.com *.avada.io *.shopify.com *.disqus.com https://*.dwin1.com https://intljs.rmtag.com https://cdn.avmws.com https://images.bizrate.com https://*.awin1.com https://*.zenaps.com https://the.sciencebehindecommerce.com https://swrap.tradedoubler.com https://analytics.optimalpeople.fr https://www.linkconnector.com https://d3v27wwd40f0xu.cloudfront.net https://static.criteo.net https://sslwidget.criteo.com https://*.affiliatefuture.com https://static.powerreviews.com *.googleapis.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.fontawesome.com http://services.postcodeanywhere.co.uk *.cloudflare.com *.googleapis.com *.twitter.com *.gstatic.com *.typekit.net *.bootstrapcdn.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com https://*.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com *.googleapis.com http://hemin11112.pcapredict.com http://services.postcodeanywhere.co.uk *.cloudflare.com *.twitter.com https://pay.google.com https://*.sandbox.paypal.com https://*.paypal.com https://*.cardinalcommerce.com https://*.braintreegateway.com https://*.braintree-api.com https://get.geojs.io *.avada.io api.addressy.com https://shareasale.com/sale.cfm https://analytics.optimalpeople.fr https://measurement-api.criteo.com https://api.webgains.io https://the.sciencebehindecommerce.com https://*.wepowerconnections.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src https: 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: https:; report-uri /_csp 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com maxcdn.bootstrapcdn.com 'self' data: https://widgets.trustedshops.com *.hsappstatic.net *.jsdelivr.net data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.youtube-nocookie.com *.awin1.com *.zenaps.com *.fls.doubleclick.net js.mollie.com www.xtento.com *.googletagmanager.com caclk.com *.doubleclick.net *.googlesyndication.com *.maconline.de maconline.de oponas.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.awin1.com *.zenaps.com *.wepowerconnections.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://images.unsplash.com https://www.mollie.com *.hsforms.net *.hsforms.com 'self' data: https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com www.xtento.com cdn.xtento.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com *.awinblackfriday.com *.doubleclick.net *.googleapis.com www.google.ae www.google.al www.google.at www.google.ba www.google.be www.google.bf www.google.bg www.google.bj www.google.by www.google.ca www.google.ch www.google.ci www.google.cl www.google.co.ao www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.np www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zw www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gm www.google.gr www.google.hr www.google.hu www.google.ie www.google.iq www.google.it www.google.kz www.google.li www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.si www.google.sk www.google.sn www.google.so www.google.tn *.google.com *.googlesyndication.com *.maconline.de *.roeye.com *.trustedshops.com yastatic.net data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com widget.freshworks.com m2epro.freshdesk.com cdn.kiprotect.com js.mollie.com *.hsforms.net *.hsforms.com *.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com www.xtento.com cdn.xtento.com *.googletagmanager.com tagmanager.google.com https://www.dwin1.com *.doubleclick.net *.googleapis.com *.googlesyndication.com *.jsdelivr.net *.kiprotect.com *.maconline.de *.trustedshops.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src fonts.googleapis.com downloads.mailchimp.com widget.freshworks.com m2epro.freshdesk.com maxcdn.bootstrapcdn.com *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com tagmanager.google.com fonts.google.com *.googletagmanager.com *.hsappstatic.net *.jsdelivr.net *.kiprotect.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com vimeo.com *.wepowerconnections.com https://the.sciencebehindecommerce.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com widget.freshworks.com m2epro.freshdesk.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.analytics.google.com *.googletagmanager.com *.awinblackfriday.com *.doubleclick.net *.googleapis.com www.google.ae www.google.al www.google.at www.google.ba www.google.be www.google.bg www.google.ca www.google.ch www.google.cl www.google.co.ao www.google.co.cr www.google.co.id www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.br www.google.com.co www.google.com.cy www.google.com.ec www.google.com.eg www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.mt www.google.com.mx www.google.com.na www.google.com.ng www.google.com.pe www.google.com.pk www.google.com.py www.google.com.sa www.google.com.tr www.google.com.ua www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.uk www.google.co.uz www.google.co.za www.google.co.zw www.google.cz www.google.de www.google.dk www.google.ee www.google.es www.google.fi www.google.fr www.google.gr www.google.hr www.google.hu www.google.ie www.google.it www.google.kz www.google.lt www.google.lu www.google.lv www.google.md www.google.mu www.google.ne www.google.nl www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.se www.google.si www.google.sk www.google.tn *.googlesyndication.com *.maconline.de 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';, report-uri https://6789b68f-1d66-4713-b07a-512bc59f2728.sansec.watch/; report-to report-endpoint; 2
default-src 'self' data: gap: *.klarna.com *.freshchat.com *.vimeo.com *.youtube.com *.whittard.co.uk *.whittard.com mention-me.com *.zenaps.com *.sub2tech.com *.gstatic.com *.facebook.com *.bglobale.com *.global-e.com *.onetrust.com *.windows.net *.whittardofchelsea.freshdesk.com *.tvsquared.com; img-src data: blob: *.demandware.net *.commercecloud.salesforce.com *.ads.linkedin.com *.demdex.net *.amazonaws.com *.ometria.com *.googletagmanager.com *.facebook.net *.facebook.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.gstatic.com *.doubleclick.net *.googleapis.com *.google-analytics.com *.googleadservices.com *.google.com *.whittard.co.uk *.whittard.com *.postcodeanywhere.co.uk *.pcapredict.com *.yotpo.com *.tokywoky.com img.tokywoky.com *.klarnaservices.com *.klarnacdn.net *.mention-me.com *.awin1.com *.dwin1.com bda.bookatable.com i.ytimg.com *.contentsquare.net *.contentsquare.com *.sub2tech.com *.cloudfront.net *.youtube.com *.vimeo.com bat.bing.com *.zenaps.com *.msgfocus.com *.fbsbx.com *.fbcdn.net graph.facebook.com *.zscloud.net *.googleusercontent.com *.klarnaevt.com i.vimeocdn.com *.surveymonkey.com *.kaltura.com *.gocertify.me *.bglobale.com *.global-e.com *.bc0a.com *.b0e8.com *.onetrust.com *.windows.net *.particularaudience.com *.p-a.io *.googleanalytics.com *.google-analytics.com *.googleoptimize.com *.tvsquared.com analytics.whittard.com analytics.whittard.co.uk ade.googlesyndication.com *.abtasty.com *.roeyecdn.com *.roeye.com *.linkedin.com *.hotjar.com *.hotjar.io wss://*.hotjar.com; child-src 'self' blob: *.abtasty.com *.studentbeans.com *.google.com *.doubleclick.net *.facebook.com *.tokywoky.com *.freshchat.com mention-me.com *.mention-me.com *.klarna.com *.klarnaservices.com bda.bookatable.com *.sub2tech.com *.youtube.com *.vimeo.com *.zenaps.com *.googlesyndication.com *.online-metrix.net *.pagetiger.com *.googletagmanager.com connect.studentbeans.com *.googleapis.com *.surveymonkey.com *.paperform.co paperform.co *.ordergroove.com *.worldpay.com *.cardinalcommerce.com *.gocertify.me *.bglobale.com *.global-e.com whittardofchelsea.freshdesk.com *.pinterest.com *.whittard.co.uk *.whittard.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.postcodeanywhere.co.uk *.pcapredict.com *.bootstrapcdn.com *.myfonts.net cdnjs.cloudflare.com *.yotpo.com *.freshchat.com *.mention-me.com *.sub2tech.com bda.bookatable.com *.klarnacdn.net *.whittard.co.uk *.whittard.com *.ordergroove.com *.particularaudience.com *.p-a.io *.google.com *.amazonaws.com *.abtasty.com *.gstatic.com *.hotjar.com *.hotjar.io wss://*.hotjar.com; font-src 'self' data: *.gstatic.com *.g.doubleclick.net *.bootstrapcdn.com *.yotpo.com *.bookatable.com *.alicdn.com *.klarnacdn.net *.whittard.co.uk *.whittard.com *.ordergroove.com *.fontawesome.com *.bglobale.com *.global-e.com *.abtasty.com *.googleapis.com use.typekit.net *.hotjar.com *.hotjar.io wss://*.hotjar.com; media-src 'self' data: *.facebook.com *.youtube.com *.vimeo.com *.paypal.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' snap.licdn.com code.jquery.com *.pinimg.com *.cquotient.com *.ometria.com *.tryzens-analytics.com:12443 *.tvsquared.com *.facebook.net cdnjs.cloudflare.com cdn.cquotient.com *.googletagmanager.com www.googletagmanager.com *.g.doubleclick.net *.googleapis.com *.google-analytics.com *.googleadservices.com *.google.com *.gstatic.com *.dwin1.com *.postcodeanywhere.co.uk *.pcapredict.com *.z-analytics.net *.yotpo.com *.tokywoky.com *.msecnd.net *.freshchat.com *.klarnaservices.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.mention-me.com *.worldpay.com *.cardinalcommerce.com bda.bookatable.com bat.bing.com *.contentsquare.net *.contentsquare.com *.sub2tech.com *.yottaa.com *.cloudfront.net *.freshworksapi.com *.zenaps.com *.paypal.com *.paypalobjects.com *.awin1.com *.dwin1.com *.sessioncam.com *.whittard.co.uk *.whittard.com *.bootstrapcdn.com *.googlesyndication.com www.google.com *.studentbeans.com onlineerp.solution.quebec widget.surveymonkey.com *.paperform.co paperform.co *.ordergroove.com cdnapisec.kaltura.com *.gocertify.me *.bglobale.com *.global-e.com *.b0e8.com *.vimeo.com *.onetrust.com *.windows.net *.particularaudience.com *.p-a.io *.googleanalytics.com *.googleoptimize.com analytics.whittard.com analytics.whittard.co.uk *.amazonaws.com *.abtasty.com *.roeyecdn.com *.roeye.com *.pinterest.com *.zi-scripts.com *.roeye.com *.payments-amazon.com *.tryzens-analytics.com unpkg.com cdn.cookielaw.org *.hotjar.com *.hotjar.io wss://*.hotjar.com; connect-src 'self' *.ads.linkedin.com snap.licdn.com *.rapid.yottaa-network.net pagead2.googlesyndication.com *.google-analytics.com *.googleadservices.com *.g.doubleclick.net *.tryzens-analytics.com:12280 *.ometria.com *.postcodeanywhere.co.uk *.pcapredict.com *.yotpo.com *.tokywoky.com *.klarnauserservices.com *.klarnaservices.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.mention-me.com mention-me.com bda.bookatable.com *.z-analytics.net *.contentsquare.net *.contentsquare.com *.sub2tech.com *.cloudfront.net *.awin1.com *.dwin1.com *.yottaa.net *.sessioncam.com bat.bing.com *.facebook.com *.google.com *.facebook.net *.googleapis.com widget.surveymonkey.com *.s3.amazonaws.com *.ordergroove.com *.worldpay.com *.cardinalcommerce.com *.gocertify.me *.bglobale.com *.global-e.com *.vimeo.com *.onetrust.com *.windows.net *.particularaudience.com *.p-a.io *.gstatic.com *.abtasty.com analytics.whittard.com analytics.whittard.co.uk ade.googlesyndication.com *.whittard.com *.whittard.co.uk *.amazonaws.com *.pinterest.com *.zi-scripts.com *.zoominfo.com *.tryzens-analytics.com unpkg.com cdn.cookielaw.org *.google.co.uk *.bing.net payments-eu.amazon.com *.hotjar.com *.hotjar.io wss://*.hotjar.com; manifest-src 'self'; ; report-uri https://whtd-csp.tryzens-analytics.com; 2
default-src https:; connect-src https: wss:; font-src https: data:; frame-src https:; img-src https: data:; media-src https:; object-src https:; script-src 'unsafe-inline' 'unsafe-eval' https: data: blob:; style-src 'unsafe-inline' https:; report-uri https://www.tarifcheck-partnerprogramm.de/csp-violation-ezmd9dpdxv7nb0ecejb9/ 2
script-src-elem *.crazyegg.com; style-src-elem *.stackadapt.com; font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.googleapis.com *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com d1cwup7r903a1d.cloudfront.net *.mypurecloud.com *.cloudflare.com *.adnxs.com *.thecpapshop.com *.paypalobjects.com *.doubleclick.net *.adacado.com *.authorize.net *.oxygenconcentratorsupplies.com *.adapthealthmarketplace.com *.espssl.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.authorize.net *.facebook.com *.mypurecloud.com *.cloudflare.com *.adnxs.com *.thecpapshop.com *.paypalobjects.com *.doubleclick.net *.adacado.com *.oxygenconcentratorsupplies.com *.adapthealthmarketplace.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.getbread.com *.breadpayments.com *.rbcpayplan.com *.authorize.net *.visualwebsiteoptimizer.com https://cryptnsend.com *.cryptnsend.net *.bbb.org *.lpsnmedia.net *.salecycle.com *.facebook.com *.adsrvr.org *.mypurecloud.com *.cloudflare.com *.adnxs.com *.thecpapshop.com *.paypalobjects.com *.doubleclick.net *.adacado.com *.oxygenconcentratorsupplies.com *.adapthealthmarketplace.com *.webeyez.com storage.googleapis.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com widgets.automizely.com widgets.automizely.io *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.getbread.com *.breadpayments.com *.rbcpayplan.com *.alothemes.com *.magepow.com *.google.com *.googleadservices.com *.googletagmanager.com *.reddit.com *.visualwebsiteoptimizer.com *.listrakbi.com *.bing.com *.facebook.com *.lpsnmedia.net *.amazonaws.com *.routeapp.io *.mypurecloud.com *.adnxs.com *.cloudflare.com *.thecpapshop.com *.paypalobjects.com *.doubleclick.net *.adacado.com *.authorize.net *.oxygenconcentratorsupplies.com *.adapthealthmarketplace.com *.adsrvr.org data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page ajax.googleapis.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io *.googleapis.com *.gstatic.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.getbread.com *.breadpayments.com *.rbcpayplan.com *.alothemes.com *.magepow.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.authorize.net cdn.routeapp.io *.amplitude.com cdn.jsdelivr.net protect-quote-q.route.com protection-widget.route.com stage-protection-widget.route.com protect-lightning-bolt-widget.route.com d3od5si8vgcekb.cloudfront.net ddbmicszvqxcg.cloudfront.net unpkg.com wobs.route.com *.stackadapt.com/events.js *.crazyegg.com *.redditstatic.com *.listrak.com *.listrakbi.com *.liveperson.net *.lpsnmedia.net *.tiqcdn.com *.bing.com *.cybba.solutions *.cloudfront.net *.adsrvr.org *.facebook.net *.pepperjam.com *.rtb123.com *.routeapp.io *.route.com *.mypurecloud.com https://sentry.io *.cloudflare.com *.adnxs.com *.paypalobjects.com *.doubleclick.net *.adacado.com *.thecpapshop.com *.oxygenconcentratorsupplies.com *.adapthealthmarketplace.com *.webeyez.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com widgets.automizely.com widgets.automizely.io *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com d1cwup7r903a1d.cloudfront.net *.listrak.com *.listrakbi.com *.googleapis.com *.mypurecloud.com *.cloudflare.com *.adnxs.com *.thecpapshop.com *.paypalobjects.com *.doubleclick.net *.adacado.com *.authorize.net *.oxygenconcentratorsupplies.com *.adapthealthmarketplace.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com api.automizely.com api.automizely.io *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.getbread.com *.breadpayments.com *.rbcpayplan.com *.breadgateway.net *.alothemes.com *.magepow.com *.googletagmanager.com stats.g.doubleclick.net *.authorize.net api.route.com *.amplitude.com cdn.jsdelivr.net protect-quote-q.route.com protection-widget.route.com stage-protection-widget.route.com d3od5si8vgcekb.cloudfront.net protect-lightning-bolt-widget.route.com ddbmicszvqxcg.cloudfront.net unpkg.com wobs.route.com *.stackadapt.com *.redditstatic.com *.reddit.com *.crazyegg.com *.visualwebsiteoptimizer.com *.listrak.com *.listrakbi.com *.sandbox.paypal.com *.googleadservices.com *.doubleclick.net *.salescycle.com wss://ws.salescycle.com *.salecycle.com wss://ws.salecycle.com *.facebook.com https://www.facebook.com *.route.com *.adnxs.com *.mypurecloud.com wss://webmessaging.mypurecloud.com *.cloudflare.com *.thecpapshop.com *.paypalobjects.com *.adacado.com *.oxygenconcentratorsupplies.com *.adapthealthmarketplace.com *.pro.ip-api.com *.ip-api.com *.amazonaws.com *.bing.com *.webeyez.com storage.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://smartsolutions.report-uri.com/r/d/csp/reportOnly; report-to report-endpoint; 2
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://*.paddle.com https://cdn.firstpromoter.com https://*.firstpromoter.com https://*.clarity.ms https://analytics.ahrefs.com https://static.cloudflareinsights.com https://ajax.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' https: data:; font-src 'self' data:; connect-src 'self' https:; media-src 'self' https: blob:; frame-src https://*.paddle.com https://www.youtube.com https://www.youtube-nocookie.com; object-src 'none'; base-uri 'self' 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://mobbex.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://accounts.google.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://mobbex.com *.weltpixel.com *.getblue.io *.doubleclick.net *.criteo.com *.groovinads.com www.tfaforms.com https://mercadopago.com.ar https://www.mercadopago.com.ar https://*.tiktok.com https://pixel.servicesadmedia.com/ https://s.pinimg.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mobbex.com https://res.sugaway.io *.visualwebsiteoptimizer.com https://*.g.doubleclick.net *.clarity.ms *.bing.com mcstaging.sommiercenter.com *.groovinads.com *.criteo.com https://facebook.com https://*.google-analytics.com https://*.googletagmanager.com https://*.google.com https://www.gstatic.com https://ssl.gstatic.com https://ad.doubleclick.net https://ade.googlesyndication.com https://www.mercadopago.com.ar https://m.facebook.com https://maps.googleapis.com https://www.afip.gob.ar https://www.google.com.ar data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page https://live.decidir.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mobbex.com https://www.google.com https://maps.googleapis.com api.wcx.cloud f.wcentrix.com https://www.googletagmanager.com tagmanager.google.com https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ *.hotjar.com *.cardinalcommerce.com *.embluemail.com *.navdmp.com *.zdassets.com *.visualwebsiteoptimizer.com *.getblue.io *.zopim.com *.clarity.ms *.groovinads.com *.criteo.net *.criteo.com *.decidir.com https://*.googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https//static.zdassets.com https://v2.zopim.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https://accounts.google.com https://static.klaviyo.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com tagmanager.google.com https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ *.embluemail.com https://fonts.googleapis.com https://*.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com bedtime.com.ar *.bedtime.com.ar 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://developers.decidir.com/ https://accounts.google.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mobbex.com https://www.google-analytics.com https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ wss://widget-mediator.zopim.com *.braindw.com *.clarity.ms *.zdassets.com *.zendesk.com *.embluemail.com *.visualwebsiteoptimizer.com *.criteo.com *.decidir.com https://*.google-analytics.com https://*.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://maps.googleapis.com https://www.google.com.ar https://analytics.google.com/g/collect https://www.google.com.ar/ads https://ad.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src *.bglobale.com *.global-e.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://cdnjs.cloudflare.com *.maisonkitsune.com *.maisonkitsune.test maisonkitsune.com preprod-m2.maisonkitsune.com maisonkitsune.test vestiaire.maisonkitsune.com preprod-vest.maisonkitsune.com vestiaire.test data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com www.apptrian.com facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.bglobale.com *.global-e.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://www.googletagmanager.com/ ssmkt.maisonkitsune.com *.kleep.ai embed.pimster.app *.cookieinformation.com https://open.spotify.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.bglobale.com *.global-e.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.maisonkitsune.com *.maisonkitsune.test maisonkitsune.com preprod-m2.maisonkitsune.com maisonkitsune.test vestiaire.maisonkitsune.com preprod-vest.maisonkitsune.com vestiaire.test *.line.me *.bing.com https://bat.bing.net https://cdn.cookielaw.org data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com cdn.jsdelivr.net/npm/@floating-ui/core@1.6.0 cdn.jsdelivr.net/npm/@floating-ui/dom@1.6.3 *.bglobale.com *.global-e.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io https://cdnjs.cloudflare.com *.maisonkitsune.com *.maisonkitsune.test maisonkitsune.com preprod-m2.maisonkitsune.com maisonkitsune.test vestiaire.maisonkitsune.com preprod-vest.maisonkitsune.com vestiaire.test *.kleep.ai cdn.pimster.app *.cookieinformation.com *.bing.com *.line-scdn.net *.jsdelivr.net *.zdassets.com https://cdn.cookielaw.org wss://widget-mediator.zopim.com https://ssmkt.maisonkitsune.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.bglobale.com *.global-e.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com https://cdnjs.cloudflare.com *.maisonkitsune.com *.maisonkitsune.test maisonkitsune.com preprod-m2.maisonkitsune.com maisonkitsune.test vestiaire.maisonkitsune.com preprod-vest.maisonkitsune.com vestiaire.test *.kleep.ai 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.zdassets.com https://cdn.cookielaw.org 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io *.maisonkitsune.com *.maisonkitsune.test maisonkitsune.com preprod-m2.maisonkitsune.com maisonkitsune.test vestiaire.maisonkitsune.com preprod-vest.maisonkitsune.com vestiaire.test *.kleep.ai https://bat.bing.net *.googlesyndication.com *.cookieinformation.com *.zendesk.com *.zdassets.com wss://widget-mediator.zopim.com https://cdn.cookielaw.org *.onetrust.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
frame-ancestors *.vee24.com 2
default-src 'self' https: wss:;script-src 'self' 'unsafe-inline' 'unsafe-eval' https:;style-src 'self' 'unsafe-inline' https:;object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'none'; 2
default-src 'none'; connect-src 'self' https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'; manifest-src https: data:; media-src https: data:; frame-src 'self' https://youtube.com https://www.youtube.com https://mc.yandex.ru https://mc.yandex.md https://www.google.com https://smartcaptcha.yandexcloud.net; upgrade-insecure-requests 2
object-src 'none'; script-src 'self' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://checkoutshopper-live.adyen.com https://checkoutshopper-test.cdn.adyen.com https://homologation-payment.cdn.payline.com https://payment.cdn.payline.com https://static.addtoany.com https://uberall.com https://unpkg.com https://www.google.com https://www.youtube.com; script-src-attr 'self'; style-src 'self' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://checkoutshopper-live.adyen.com https://checkoutshopper-test.cdn.adyen.com https://homologation-payment.cdn.payline.com https://payment.cdn.payline.com https://unpkg.com; style-src-attr 'self'; frame-ancestors 'self' 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.yotpo.com *.googleapis.com *.livechatinc.com *.acsbap.com *.acsbapp.com https://acsbapp.com/apps/app/dist/fonts/ *.fontawesome.com *.stripecdn.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com www.facebook.com www.googletagmanager.com www.google-analytics.com *.icims.eu www.youtube.com cookiepedia.co.uk www.linkedin.com www.google.co.uk www.instagram.com onlinelibrary.wiley.com www.alzheimer-europe.org *.livechatinc.com *.trustpilot.com *.trustpilot.net *.apetito.integration-5ojmyuq-lhjhdamkykkd6.eu-3.magentosite.cloud *.wiltshirefarmfoods.com https://seo.mageplaza.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net www.youtube.com *.youtube-nocookie.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com vars.hotjar.com www.facebook.com www.linkedin.com www.google.co.uk www.instagram.com onlinelibrary.wiley.com www.alzheimer-europe.org *.livechatinc.com *.trustpilot.com *.trustpilot.net *.apetito.integration-5ojmyuq-lhjhdamkykkd6.eu-3.magentosite.cloud *.wiltshirefarmfoods.com td.doubleclick.net pagead2.googlesyndication.com analytics.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com www.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.amplience.net fpdbs.paypal.com fpdbs.sandbox.paypal.com *.yotpo.com p.adsymptotic.com bat.bing.com www.facebook.com cdn-ukwest.onetrust.com *.livechatinc.com cookiesuksouth.blob.core.windows.net www.google.co.in www.google-analytics.com px.ads.linkedin.com cookiepedia.co.uk www.linkedin.com www.google.co.uk www.instagram.com onlinelibrary.wiley.com www.alzheimer-europe.org *.wiltshirefarmfoods.com *.trustpilot.com *.trustpilot.net *.apetito.integration-5ojmyuq-lhjhdamkykkd6.eu-3.magentosite.cloud *.postcodeanywhere.co.uk acsbap.com acsbapp.com *.acsbap.com *.acsbapp.com https://cdn.acsbapp.com/apps/app/dist/media/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.youtube.com *.vimeo.com secure.authorize.net test.authorize.net www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com *.cardinalcommerce.com geo.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.onetrust.com *.livechatinc.com static.hotjar.com www.gstatic.com *.trackedlink.net *.stripe.com *.trustpilot.com maps.googleapis.com *.pcapredict.com snap.licdn.com connect.facebook.net bat.bing.com secure.leadforensics.com js-agent.newrelic.com script.hotjar.com ict.infinity-tracking.net cookiepedia.co.uk www.linkedin.com www.google.co.uk www.instagram.com onlinelibrary.wiley.com www.alzheimer-europe.org *.trustpilot.net *.bam.nr-data.net *.apetito.integration-5ojmyuq-lhjhdamkykkd6.eu-3.magentosite.cloud *.wiltshirefarmfoods.com *.dwin1.com acsbap.com acsbapp.com *.acsbap.com *.acsbapp.com https://acsbapp.com/apps/app/dist/ https://acsbapp.com/apps/app/assets/js/ td.doubleclick.net pagead2.googlesyndication.com *.conoret.com https://services.postcodeanywhere.co.uk https://cdn.mouseflow.com https://cdn.cookielaw.org *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.postcodeanywhere.co.uk *.fontawesome.com *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com *.ideal-postcodes.co.uk *.stripe.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.yotpo.com maps.googleapis.com *.onetrust.com *.livechatinc.com bam.nr-data.net in.hotjar.com ict.infinity-tracking.net stats.g.doubleclick.net bat.bing.com www.youtube.com cookiepedia.co.uk www.linkedin.com www.google.co.uk www.instagram.com onlinelibrary.wiley.com www.alzheimer-europe.org *.trustpilot.com *.trustpilot.net *.apetito.integration-5ojmyuq-lhjhdamkykkd6.eu-3.magentosite.cloud *.wiltshirefarmfoods.com acsbap.com acsbapp.com *.acsbap.com *.acsbapp.com *.wikipedia.org/w/api.php https://process.acsbapp.com/apps/app/ https://cdn.acsbapp.com/resources/ https://cdn.acsbapp.com/cache/app/ https://cdn.acsbapp.com/config/ https://acsbapp.com/apps/app/assets/js/ td.doubleclick.net pagead2.googlesyndication.com analytics.google.com https://services.postcodeanywhere.co.uk https://o2.mouseflow.com https://www.google.com https://cdn.cookielaw.org klarna.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
connect-src 'self' 'unsafe-inline' 'unsafe-eval' *.authorized.by *.bewakingscamera.nl *.bing.com *.bing.net *.doubleclick.net *.googleadservices.com *.google-analytics.com *.googleapis.com www.google.at www.google.be www.google.ch www.google.com.au www.google.com.bd www.google.com.br www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.gh www.google.com.hk www.google.com.kh www.google.com.mm www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.np www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.co.uk www.google.cz www.google.de www.google.dk www.google.es www.google.fr www.google.it www.google.nl www.google.pl www.google.pt www.google.ru *.google.com google.com *.googletagmanager.com *.gstatic.com *.mouseflow.com *.multisafepay.com *.newrelic.com *.nr-data.net *.returnless.com *.smartlook.com *.storyblok.com vercel.live api.marker.io ssr.marker.io s3.eu-west-1.amazonaws.com/marker.sessions.prod; default-src 'self' 'unsafe-inline' 'unsafe-eval' *.authorized.by *.bing.com *.bing.net *.doubleclick.net *.googleadservices.com *.googleapis.com www.google.at www.google.be www.google.ch www.google.co.uk www.google.de www.google.fr www.google.nl *.google.com *.googletagmanager.com *.gstatic.com *.mouseflow.com *.smartlook.com *.storyblok.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' *.authorized.by *.bing.com *.bing.net *.doubleclick.net *.googleadservices.com *.google-analytics.com *.googleapis.com www.google.at www.google.be www.google.ch www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.gh www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.co.uk www.google.cz www.google.de www.google.dk www.google.es www.google.fr www.google.it www.google.nl www.google.pl www.google.pt www.google.ru *.google.com *.googletagmanager.com *.gstatic.com *.multisafepay.com *.storyblok.com blob: data: media.marker.io app.marker.io edge.marker.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bewakingscamera.nl *.bing.com *.doubleclick.net *.googleapis.com *.google.com *.googletagmanager.com *.mouseflow.com *.multisafepay.com *.newrelic.com *.returnless.com *.smartlook.com *.storyblok.com vercel.live edge.marker.io app.marker.io; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.googletagmanager.com *.gstatic.com *.multisafepay.com; frame-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.multisafepay.com *.returnless.com vercel.live app.marker.io; font-src 'self' 'unsafe-inline' 'unsafe-eval' *.gstatic.com app.marker.io edge.marker.io; media-src 'self' 'unsafe-inline' 'unsafe-eval' *.storyblok.com media.marker.io app.marker.io edge.marker.io; child-src 'self' 'unsafe-inline' 'unsafe-eval'  app.marker.io; form-action 'self' 'unsafe-inline' 'unsafe-eval' app.marker.io api.marker.io; report-uri https://14edc0c0-b3cc-497c-8aa2-2e84efa49370.sansec.watch/; report-to report-endpoint; 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com * data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://images.unsplash.com https://www.mollie.com * www.google.com.ua www.xtento.com cdn.xtento.com https://goggles4u.com/metrics data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com js.mollie.com * www.xtento.com cdn.xtento.com https://goggles4u.com/metrics 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com * 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://checkout.iwdagency.com * https://goggles4u.com/metrics 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com tk.santevet.com svts.santevet.com cdn.cookielaw.org widget.trustpilot.com assets.app.smart-tribune.com privacy.santevet.com privacy.santevet.be privacy.santevet.es privacy.santevet.de privacy.santevet.it privacy.bullebleue.fr privacy.jim-joe.fr ams.wpml.org www.google.com www.gstatic.com; worker-src 'self' blob:; connect-src 'self' www.googletagmanager.com tk.santevet.com svts.santevet.com *.google-analytics.com *.analytics.google.com cdn.cookielaw.org geolocation.onetrust.com *.smart-tribune.com privacy.santevet.com privacy.santevet.be privacy.santevet.es privacy.santevet.de privacy.santevet.it privacy.bullebleue.fr privacy.jim-joe.fr ams.wpml.org www.google.com santevet.com; frame-src 'self' www.youtube.com www.youtube-nocookie.com www.googletagmanager.com widget.trustpilot.com www.google.com; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' assets.app.smart-tribune.com cdnjs.cloudflare.com fonts.googleapis.com ams.wpml.org; font-src 'self' data: cdnjs.cloudflare.com fonts.gstatic.com; media-src 'self' videos.ctfassets.net; frame-ancestors 'self'; report-to csp-endpoint; 2
font-src fonts.gstatic.com use.typekit.net *.cloudfront.net https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.facebook.net 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.paypal.com *.vimeo.com *.google.com *.googletagmanager.com https://tag.heylink.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.everesttech.net *.demdex.net searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com imgsct.cookiebot.com https://info.dibs.se magefan.com cm.magefan.com *.facebook.com *.facebook.net *.cloudfront.net *.adobe.com *.adobe.net *.google.com *.googleapis.com *.gstatic.com https://bat.bing.com https://instore.prisjakt.no https://pricerunner.dk https://pricerunner.se *.googleadservices.com *.google-analytics.com *.googletagmanager.com https://www.postnord.com https://www.mybring.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.adobedtm.com *.sentry.io *.sentry-cdn.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com *.magento-datasolutions.com *.magento-ds.com consent.cookiebot.com https://*.dibspayment.eu *.facebook.com *.facebook.net *.cloudfront.net *.adobe.com *.adobe.net *.google.com *.googleapis.com *.gstatic.com https://cdn.cookie-script.com https://bat.bing.com *.clarity.ms *.doubleclick.net https://r1-t.trackedlink.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.paypal.com https://tag.heylink.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com https://*.dibspayment.eu *.cloudfront.net *.adobe.com *.adobe.net *.google.com *.facebook.com *.facebook.net *.googleapis.com *.gstatic.com https://bat.bing.com https://maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io amcglobal.sc.omtrdc.net p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com performance.typekit.net *.magento-datasolutions.com *.magento-ds.com *.adobe.io https://*.dibspayment.eu *.facebook.com *.facebook.net *.cloudfront.net *.adobe.com *.adobe.net *.google.com *.googleapis.com *.gstatic.com https://bat.bing.com *.clarity.ms *.doubleclick.net https://fraktguide.bring.no *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de widget.freshworks.com m2epro.freshdesk.com js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de widget.freshworks.com m2epro.freshdesk.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com analytics.google.com *.facebook.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://maps.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://connect.facebook.net https://script.crazyegg.com https://static.addtoany.com https://www.google.com https://www.gstatic.com https://snap.licdn.com https://static.ads-twitter.com https://cdn.resonate.com https://doublethedonation.com https://cdn.evgnet.com https://analytics.tiktok.com https://tags.srv.stackadapt.com https://www.helpmakemiracles.org https://donordrivecontent.com https://*.donordrivecontent.com https://cdnjs.cloudflare.com https://*.braintreegateway.com https://cdn.givechariot.com https://*.givechariot.com https://paypal.com https://*.paypal.com; style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net https://cdn.jsdelivr.net https://fonts.googleapis.com https://doublethedonation.com https://tags.srv.stackadapt.com https://www.helpmakemiracles.org https://donordrivecontent.com https://*.donordrivecontent.com https://paypal.com https://*.paypal.com https://*.paypalobjects.com; font-src 'self' data: blob: https://use.typekit.net https://p.typekit.net https://fonts.gstatic.com https://fonts.googleapis.com https://maps.gstatic.com https://doublethedonation.com https://www.helpmakemiracles.org https://donordrivecontent.com https://*.donordrivecontent.com https://cdnjs.cloudflare.com https://*.braintreegateway.com https://cdn.givechariot.com https://*.givechariot.com https://paypal.com https://*.paypal.com https://*.paypalobjects.com; img-src 'self' data: https://img.youtube.com https://i.ytimg.com https://www.facebook.com https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://www.google.com https://www.google.ca https://maps.googleapis.com https://maps.gstatic.com https://*.basemaps.cartocdn.com https://*.tile.openstreetmap.org https://static.addtoany.com https://script.crazyegg.com https://*.ads.linkedin.com https://www.linkedin.com https://snap.licdn.com https://t.co https://analytics.twitter.com https://static.ads-twitter.com https://cdn.resonate.com https://doublethedonation.com https://analytics.tiktok.com https://tags.srv.stackadapt.com https://*.srv.stackadapt.com https://www.helpmakemiracles.org https://donordrivecontent.com https://*.donordrivecontent.com https://images.childrensmiraclenetwork.org https://donate.childrensmiraclenetworkhospitals.org https://paypal.com https://*.paypal.com https://*.paypalobjects.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googletagmanager.com https://www.google.com https://cdn.jsdelivr.net https://region1.google-analytics.com https://connect.facebook.net https://www.facebook.com https://maps.googleapis.com https://script.crazyegg.com https://static.addtoany.com https://snap.licdn.com https://*.ads.linkedin.com https://www.linkedin.com https://static.ads-twitter.com https://analytics.twitter.com https://t.co https://cdn.resonate.com https://ds.reson8.com https://doublethedonation.com https://cdn.evgnet.com https://*.us-7.evergage.com https://analytics.tiktok.com https://tags.srv.stackadapt.com https://*.srv.stackadapt.com https://www.helpmakemiracles.org https://donordrivecontent.com https://*.donordrivecontent.com https://*.braintreegateway.com https://*.braintree-api.com https://paypal.com https://*.paypal.com https://*.kaptcha.com https://cdn.givechariot.com https://*.givechariot.com; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.google.com https://static.addtoany.com https://www.helpmakemiracles.org https://donate.childrensmiraclenetworkhospitals.org https://*.braintreegateway.com https://paypal.com https://*.paypal.com https://cdn.givechariot.com https://*.givechariot.com https://*.kaptcha.com https://*.cardinalcommerce.com; media-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://www.google.com https://www.salesforce.com https://*.salesforce.com https://www.helpmakemiracles.org https://donate.childrensmiraclenetworkhospitals.org; frame-ancestors 'self'; worker-src 'self' blob: 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.audioeye.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.brightcove.net *.brightcove.com *.weltpixel.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.wesupply.xyz https://wesupplylabs.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net annies-livesearch.s3.amazonaws.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.brightcove.net *.brightcove.com *.boltdns.net *.googlesyndication.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://prf.hn maps.gstatic.com *.facebook.com *.reddit.com *.adtrafficquality.google *.cookielaw.org *.lightboxcdn.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com annies-livesearch.s3.amazonaws.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.brightcove.net *.brightcove.com *.ordergroove.com *.attn.tv events.attentivemobile.com *.googlesyndication.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://prf.hn https://pzapi-nb.com https://pzapi-kg.com https://pzapi-ij.com/ maps.googleapis.com *.cloudflare.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.adtrafficquality.google *.audioeye.com *.clarity.ms *.cookielaw.org *.gstatic.com *.lightboxcdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net annies-livesearch.s3.amazonaws.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app assets.braintreegateway.com *.typekit.net *.googlesyndication.com tagmanager.google.com *.audioeye.com *.lightboxcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net annies-livesearch.s3.amazonaws.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.typekit.net *.googlesyndication.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com annies-livesearch.s3.amazonaws.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.typekit.net *.googlesyndication.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com annies-livesearch.s3.amazonaws.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.brightcove.net *.brightcove.com *.boltdns.net *.brightcovecdn.com maps.googleapis.com *.ordergroove.com *.attn.tv events.attentivemobile.com *.googlesyndication.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google-analytics.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.adtrafficquality.google *.audioeye.com *.clarity.ms *.cookielaw.org *.onetrust.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net annies-livesearch.s3.amazonaws.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.brightcovecdn.com *.typekit.net *.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: ace.de *.ace.de ace-clubinitiative.de *.ace-clubinitiative.de 360yield.com 3lift.com adform.net adnxs.com adsrvr.org agkn.com bidr.io bidswitch.net bing.com bugsnag.com bussgeldrechner.org casalemedia.com clarity.ms clmbtech.com co.kr cookielaw.org criteo.com *.criteo.com demdex.net dmxleo.com doubleclick.net *.doubleclick.net dwin1.com facebook.net *.facebook.net finanzcheck.de *.finanzcheck.de fwmrm.net ggpht.com google.com *.google.com googleadservices.com googlesyndication.com googletagmanager.com *.googletagmanager.com gsitrix.com gstatic.com *.gstatic.com ioadentifi.com *.ioadentifi.com liadm.com media.net mediavine.com mediawallahscript.com outbrain.com pippio.com postrelease.com pubmatic.com revcontent.com rezync.com rfihub.com roeye.com roeyecdn.com rubiconproject.com smartadserver.com springserve.com stape.net stapecdn.com stickyadstv.com taboola.com tapad.com teads.tv thrtle.com tpmn.io tremorhub.com turn.com ubembed.com unrulymedia.com usemaxserver.de *.usemaxserver.de w55c.net yahoo.com *.yahoo.com youtube.com *.youtube.com ytimg.com; frame-ancestors 'self' ace.de *.ace.de ace-clubinitiative.de *.ace-clubinitiative.de; 2
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; media-src 'self' https: blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https:; 2
default-src https: wss: 'self'; script-src https: wss: 'self' 'unsafe-eval' 'unsafe-inline'; style-src https: 'self' 'unsafe-inline'; img-src https: data: 'self'; font-src https: data: 'self'; report-uri /csp-report 2
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-marketing/artists_youtube 2
default-src 'self'; script-src 'self' *.googletagmanager.com *.cookiebot.eu *.cookiebot.com *.google.com *.gstatic.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' fonts.googleapis.com fonts.gstatic.com 'unsafe-inline'; object-src 'none'; base-uri 'self'; connect-src 'self' *.b2clogin.com *.vandijk.nl *.studieshop.be *.google-analytics.com *.google.com *.cookiebot.com *.monitor.azure.com *.applicationinsights.azure.com *.services.visualstudio.com *.azure-api.net *.cookiebot.eu; font-src 'self' *.gstatic.com fonts.googleapis.com data:; frame-src 'self' *.googletagmanager.com *.cookiebot.eu *.cookiebot.com *.google-analytics.com *.powerbi.com vandijk.eziner.nl *.b2clogin.com *.google.com login.microsoftonline.com; img-src 'self' *.vandijk.nl *.studieshop.be *.cookiebot.com *.cookiebot.eu *.google-analytics.com 6y0n6ghym354.b-cdn.net 4wyh1ikoms18.b-cdn.net *.usercentrics.eu data:; manifest-src 'self'; media-src 'self'; worker-src 'self' blob:; upgrade-insecure-requests; report-to /_/csp-reports 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: *.ups.com 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.ups.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net *.demdex.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com *.ups.com *.fls.doubleclick.net *.facebook.com *.awin1.com *.zenaps.com newassets.hcaptcha.com *.iubenda.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com customer-jo4fg3675hw5zuyf.cloudflarestream.com gum.criteo.com fledge.eu.criteo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com 'self' data: *.ups.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.awin1.com *.zenaps.com *.wepowerconnections.com *.bird.eu cdn.flbx.io *.cloudfront.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.feedaty.com *.iubenda.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com *.hsforms.net *.hsforms.com customer-jo4fg3675hw5zuyf.cloudflarestream.com www.gstatic.com a.omappapi.com matching.ivitrack.com x.bidswitch.net sync-t1.taboola.com sync.outbrain.com zendesk.com sgtm.jeannebaret.com campagnolo1715786198.zendesk.com www.google.it sync.1rx.io ib.adnxs.com rtb.csync.smartserver.com r.casalemedia.com gum.criteo.com id5-sync.com ad.360yield.com contextual.media.net exchange.mediavine.com jadserve.postrelease.com simage2.pubmatic.com pixel.rubiconproject.com match.sharethrough.com criteo-sync.teads.tv criteo-partners.tremorhub.com eb2.3lift.com ad.yieldlab.net sync-criteo.ads.yieldmo.com e1.emxdgt.com *.dmxleo.com *.smartadserver.com *.omnitagjs.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.magento-datasolutions.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.ups.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com *.getflowbox.com hcaptcha.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.feedaty.com *.iubenda.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com maps.googleapis.com *.hsforms.net *.hsforms.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com static.zdassets.com cdn.clerk.io customer-jo4fg3675hw5zuyf.cloudflarestream.com cdn.iubenda.com api.clerk.io cs.iubenda.com js-agent.newrelic.com embed.cloudflarestream.com www.google.com www.gstatic.com dynamic.criteo.com a.omappapi.com static.hotjar.com sslwidget.criteo.com script.hotjar.com ecomm.sella.it sandbox.gestpay.net pod-29.zendesk.com sgtm.jeannebaret.com sgtm.cmpsport.com mn.cmpsport.com mn.melby.it connect.facebook.net https://static.zdassets.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.ups.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com downloads.mailchimp.com *.feedaty.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com www.gstatic.com a.omappapi.com cdnjs.cloudflare.com *.typekit.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net vimeo.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.paypal.com google.com *.google.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.ups.com *.wepowerconnections.com https://the.sciencebehindecommerce.com *.getflowbox.com *.feedaty.com *.iubenda.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com maps.googleapis.com places.googleapis.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com region1.google-analytics.com ekr.zdassets.com customer-jo4fg3675hw5zuyf.cloudflarestream.com api.openweathermap.org cmp.zendesk.com bam.nr-data.net idb.iubenda.com region1.analytics.google.com api.omappapi.com gum.criteo.com measurement-api.criteo.com wss://pod-29.zendesk.com sgtm.jeannebaret.com campagnolo1715786198.zendesk.com www.google.it connect.facebook.net *.doubleclick.net mn.cmpsport.com mn.melby.it 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com hcaptcha.com *.googleapis.com *.nr-data.net *.criteo.net *.cloudflarestream.com *.cloudflare.com *.clerk.io *.cmpsport.com *.melby.it *.zdassets.com *.chimpstatic.com *.iubenda.com *.zendesk.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
script-src 'self' ; img-src 'self' ; object-src 'none'; base-uri 'none'; frame-ancestors 'self'; report-uri https://api.themobileshop.ca/api/csp-report/TMS 2
frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; style-src-elem app.leadfox.co blog.clubtissus.com www.clubtissus.com fonts.googleapis.com; form-action www.facebook.com payflowlink.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com connect.facebook.net graph.facebook.com https://seo.mageplaza.com *.facebook.com 'self' 'unsafe-inline'; img-src www.facebook.com ct.pinterest.com google.com www.google.com www.google.ca admin.thefabricclub.ca data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.apptrian.com facebook.com connect.facebook.net graph.facebook.com https://firebasestorage.googleapis.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src-elem script.hotjar.com www.googletagmanager.com www.clubtissus.com clubtissus.com www.thefabricclub.ca www.google-analytics.com static.hotjar.com www.youtube.com s.pinimg.com google.com connect.facebook.net app.leadfox.co blog.clubtissus.com www.google.com www.gstatic.com 'sha256-B4yPHKaXnvFWtRChIbabYmUBFZdVfKKXHbWtWidDVF8=-0'; frame-src www.google.com vars.hotjar.com www.facebook.com payflowlink.paypal.com ct.pinterest.com fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com connect.facebook.net graph.facebook.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; style-src fonts.googleapis.com *.adobe.com https://fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; font-src fonts.gstatic.com www.paypalobjects.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; script-src www.google-analytics.com www.googletagmanager.com www.google.com www.gstatic.com static.hotjar.com s.pinimg.com connect.facebook.net clubtissus.com www.clubtissus.com www.thefabricclub.ca assets.adobedtm.com *.adobe.com www.googleadservices.com googleads.g.doubleclick.net analytics.google.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com www.apptrian.com facebook.com www.facebook.com graph.facebook.com *.avada.io *.shopify.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; connect-src www.google-analytics.com ct.pinterest.com in.hotjar.com stats.g.doubleclick.net ws17.hotjar.com wss://ws17.hotjar.com blog.clubtissus.com rest.leadfox.co app.leadfox.co dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://get.geojs.io *.avada.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net eu.mindtheg.com us.mindtheg.com upgrade.mindtheg.com dev.mindtheg.com b2b.dev.mindtheg.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com static.addtoany.com www.googletagmanager.com consentcdn.cookiebot.com app-eu1.hubspot.com ct.pinterest.com m.stripe.network b.stripecdn.com newassets.hcaptcha.com https://js.stripe.com https://pay.google.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.trustpilot.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com eu.mindtheg.com us.mindtheg.com upgrade.mindtheg.com dev.mindtheg.com b2b.dev.mindtheg.com mindtheg.com forms-eu1.hsforms.com www.google.ro bat.bing.com px.ads.linkedin.com imgsct.cookiebot.com track-eu1.hubspot.com track.hubspot.com 143839764.fs1.hubspotusercontent-eu1.net www.gstatic.com js.stripe.com blob: https://pay.google.com https://*.googleusercontent.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com *.gstatic.com *.avada.io *.shopify.com static.addtoany.com eu.mindtheg.com us.mindtheg.com upgrade.mindtheg.com dev.mindtheg.com b2b.dev.mindtheg.com cdn.jsdelivr.net mindtheg.com js-eu1.hs-scripts.com widget.trustpilot.com invitejs.trustpilot.com js-eu1.hsadspixel.net js-eu1.hs-banner.com js-eu1.hs-analytics.net js-eu1.usemessages.com consent.cookiebot.com bat.bing.com s.pinimg.com js-eu1.hscollectedforms.net snap.licdn.com consentcdn.cookiebot.com www.clarity.ms static.hsappstatic.net scripts.clarity.ms www.gstatic.com ct.pinterest.com static.cloudflareinsights.com js.braintreegateway.com m.stripe.network pay.google.com hcaptcha.com newassets.hcaptcha.com https://js.stripe.com *.stripecdn.com *.cloudflare.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.stripe.com *.stripe.network klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com maps.googleapis.com *.trustpilot.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net *.googleapis.com *.addtoany.com eu.mindtheg.com us.mindtheg.com upgrade.mindtheg.com dev.mindtheg.com b2b.dev.mindtheg.com cdn.jsdelivr.net static.hsappstatic.net www.gstatic.com js.stripe.com b.stripecdn.com assets.braintreegateway.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.hsappstatic.net eu.mindtheg.com us.mindtheg.com upgrade.mindtheg.com dev.mindtheg.com b2b.dev.mindtheg.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com https://get.geojs.io *.avada.io http://dpm.demdex.net eu.mindtheg.com us.mindtheg.com upgrade.mindtheg.com dev.mindtheg.com b2b.dev.mindtheg.com api-eu1.hubspot.com api-eu1.hubapi.com consentcdn.cookiebot.com forms-eu1.hscollectedforms.net mindtheg.com ct.pinterest.com region1.analytics.google.com px.ads.linkedin.com exceptions-eu1.hubspot.com z.clarity.ms app-eu1.hubspot.com region1.google-analytics.com ad.doubleclick.net m.stripe.com js.stripe.com r.stripe.com ppm.stripe.com merchant-ui-api.stripe.com play.google.com pay.google.com 91b83f9b1acc.w.hcaptcha.com api.hcaptcha.com dc6fbc6f88a3.w.hcaptcha.com cloudflareinsights.com *.googlesyndication.com https://api.stripe.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com places.googleapis.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src mindtheg.com eu.mindtheg.com us.mindtheg.com upgrade.mindtheg.com dev.mindtheg.com b2b.dev.mindtheg.com bat.bing.com metrics-fe-eu1.hubspot.com app-eu1.hubspot.com z.clarity.ms r.stripe.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.klevu.com *.ksearchnet.com checkout.getbread.com *.paypal.com *.google-analytics.com *.mmapiws.com *.doubleclick.net *.searchspring.io *.turnto.com bat.bing.com datalayer.jumpfly.com *.mouseflow.com *.nr-data.net *.newrelic.com *.google.com *.clarity.ms analytics.google.com tgscript.s3.amazonaws.com *.cloudflare.com *.twitter.com *.google.co.in *.facebook.com *.twimg.com *.trustedshops.com *.googleapis.com *.bootstrapcdn.com js.klevu.com data: *.shopperapproved.com use.fontawesome.com maxcdn.bootstrapcdn.com *.iadvize.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://www.shopperapproved.com hpp-sandbox.worldpay.com payments-test.worldpay.com payments.worldpay.com *.authorize.net *.twitter.com *.facebook.com connect.facebook.net yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com hpp.worldpay.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com hpp-sandbox.worldpay.com payments-test.worldpay.com payments.worldpay.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.authorize.net *.liveperson.net checkout.getbread.com *.doubleclick.net *.lpsnmedia.net *.googletagmanager.com *.facebook.com platform.twitter.com td.doubleclick.net *.twitter.com *.google.co.in www.xtento.com photos.pixlee.co *.weltpixel.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com *.paypalobjects.com airtable.com *.lightingwarehouse.com e.sprinklerwarehouse.com hpp.worldpay.com youtu.be 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://www.shopperapproved.com *.trackedlink.net *.klevu.com *.ksearchnet.com https://maps.gstatic.com https://maps.googleapis.com *.ftcdn.net *.behance.net https://images.unsplash.com *.googleadservices.com blob: https://meetanshi.com/media/logo.png *.cloudflare.com *.google.com *.google.co.in *.facebook.com *.klarna.com *.google-analytics.com * *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.connect.facebook.net stats.g.doubleclick.net d.adroll.com pixel.advertising.com pixel.rubiconproject.com simage2.pubmatic.com dsum-sec.casalemedia.com ads.yahoo.com eb2.3lift.com sync.outbrain.com trc.taboola.com x.bidswitch.net/sync ib.adnxs.com idsync.rlcdn.com us-u.openx.net ups.analytics.yahoo.com segments.company-target.com sync.tidaltv.com *.trustgaurd.com content.sprinklerwarehouse.com bat.bing.com www.xtento.com cdn.xtento.com wac.edgecastcdn.net yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://www.shopperapproved.com https://direct.shopperapproved.com hpp-sandbox.worldpay.com payments-test.worldpay.com payments.worldpay.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.klevu.com *.ksearchnet.com https://maps.googleapis.com/maps/api/ https://maps.googleapis.com/ *.authorize.net *.liveperson.net *.lpsnmedia.net cdn.searchspring.net checkout.getbread.com *.googleadservices.com *.googletagmanager.com *.google-analytics.com www.gstatic.com bat.bing.com *.mouseflow.com services.nofraud.com *.doubleclick.net widgets.turnto.com js.klevu.com stats.g.doubleclick.net static.trackedweb.net tgscript.s3.amazonaws.com *.clarity.ms platform.twitter.com connect.facebook.net cdn-ws.turnto.com *.cloudflare.com *.twitter.com *.google.co.in *.facebook.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.paypalobjects.com *.paypal.com chimpstatic.com s.adroll.com d.adroll.com d.adroll.mgr.consensu.org *.bootstrapcdn.com player.vimeo.com content.sprinklerwarehouse.com www.xtento.com cdn.xtento.com *.turnto.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com googletagmanager.com *.lightingwarehouse.com code.jquery.com *.sprinklerwarehouse.com *.vimeo.com *.shopperapproved.com *.breadpayments.com *.gstatic.com accdn.lpsnmedia.net lpcdn.lpsnmedia.net static.elfsight.com halc.iadvize.com cdn.brcdn.com *.iadvize.com elfsightcdn.com bat.bing.net cdn-4.convertexperiments.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.klevu.com *.ksearchnet.com *.cloudflare.com *.googleapis.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.youtube.com cdn.searchspring.net widgets.turnto.com js.klevu.com tgscript.s3.amazonaws.com *.bootstrapcdn.com *.turnto.com tagmanager.google.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com maxcdn.bootstrapcdn.com  *.bootstrapcdn.com cdn.dnky.co *.yotpo.complete content.sprinklerwarehouse.com *.lightingwarehouse.com *.nr-data.net *.iadvize.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.lpsnmedia.net data: *.trustguard.com content.sprinklerwarehouse.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com *.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com hpp-sandbox.worldpay.com payments-test.worldpay.com payments.worldpay.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.klevu.com *.ksearchnet.com https://maps.googleapis.com *.authorize.net *.lpsnmedia.net data: *.cloudflare.com *.twitter.com *.twimg.com *.google.co.in *.facebook.com checkout.getbread.com *.mmapiws.com *.doubleclick.net *.searchspring.io *.turnto.com bat.bing.com datalayer.jumpfly.com *.mouseflow.com *.clarity.ms tgscript.s3.amazonaws.com content.sprinklerwarehouse.com *.facebook.net yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com *.lightingwarehouse.com adservice.google.com fonts.googleapis.com core.service.elfsight.com maps.googleapis.com *.fontawesome.com halc.iadvize.com api.iadvize.com cdn.brcdn.com services.nofraud.com learn.sprinklerwarehouse.com p.brsrvr.com *.iadvize.com learn.lightingwarehouse.com cdn-4.convertexperiments.com curbside.ua872158.serversignin.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src checkout.getbread.com *.klevu.com static.iadvize.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com https://geowidget.easypack24.net *.googleapis.com data: *.fontawesome.com https://widgets.trustedshops.com 'self' data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com sandbox.przelewy24.pl secure.przelewy24.pl accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com 'self' 'self' 'unsafe-inline'; frame-ancestors pay.google.com www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com pay.google.com apm.przelewy24.pl https://geowidget-app.inpost.pl/ https://sandbox-easy-geowidget.easypack24.net/ *.instagram.com js.mollie.com 'self' integrations.etrusted.com consentcdn.cookiebot.eu pudofinder.dpd.com.pl  *.facebook.com *.pinterest.com payment-widget.przelewy24.pl 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io tile.openstreetmap.org mapa.orlenpaczka.pl ruch-osm.sysadvisors.pl static.przelewy24.pl www.gstatic.com gstatic.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.cdninstagram.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com magefan.com cm.magefan.com *.facebook.com https://www.mollie.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com 'self' integrations.etrusted.com consentcdn.cookiebot.eu c pagead2.googlesyndication.com bat.bing.com *.google.pl *.etrusted.com *.klarna.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com polyfill.io apis.google.com mapa.orlenpaczka.pl sandbox.przelewy24.pl secure.przelewy24.pl pay.google.com apm.przelewy24.pl https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com *.instagram.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googletagmanager.com *.facebook.net js.mollie.com applepay.cdn-apple.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' integrations.etrusted.com consent.cookiebot.eu *.pinimg.com *.tiktok.com bat.bing.com *.clarity.ms *.pinterest.com consentcdn.cookiebot.eu *.fontawesome.com 'sha256-Go1QIADXFiD0buF9JrRxW0PJxLZe+fGmnWVsCyISbfA=' 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://geowidget.easypack24.net https://geowidget.inpost.pl *.googleapis.com *.fontawesome.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline' integrations.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://geowidget.easypack24.net *.cdninstagram.com 'self' 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io nominatim.openstreetmap.org sandbox.przelewy24.pl secure.przelewy24.pl wss://ws.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com *.easypack24.net *.inpost.pl *.openstreetmap.org https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' integrations.etrusted.com consentcdn.cookiebot.eu c pagead2.googlesyndication.com *.stape.de *.pinterest.com bat.bing.com *.tiktok.com *.clarity.ms *.pinimg.com *.fontawesome.com *.tiktokw.us *.doubleclick.net payment-widget.przelewy24.pl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com 'self' 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://static.klaviyo.com https://www.paypal.com https://*.paypal.com https://web.squarecdn.com https://sandbox.web.squarecdn.com https://*.squarecdn.com https://*.squareup.com https://pay.google.com https://www.google.com https://www.gstatic.com https://maps.googleapis.com https://maps.gstatic.com https://js.sentry-cdn.com https://*.algolianet.com https://*.algolia.net https://us.i.posthog.com https://connect.facebook.net https://*.yotpo.com https://cdn-widgetsrepository.yotpo.com https://staticw2.yotpo.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://web.squarecdn.com https://*.squarecdn.com https://*.yotpo.com https://staticw2.yotpo.com; font-src 'self' https://fonts.gstatic.com data: https://*.squarecdn.com https://square-fonts-production-f.squarecdn.com https://d1g145x70srn7h.cloudfront.net https://cash-f.squarecdn.com; img-src 'self' https: data: blob:; connect-src 'self' https: https://maps.googleapis.com https://maps.gstatic.com https://connect.squareup.com https://pci-connect.squareup.com https://*.squareup.com https://pay.google.com https://api.stripe.com https://r.stripe.com https://m.stripe.com https://merchant-ui-api.stripe.com https://*.stripe.com https://*.hcaptcha.com https://*.yotpo.com https://api.yotpo.com https://cdn-widgetsrepository.yotpo.com https://staticw2.yotpo.com; frame-src https://www.paypal.com https://*.paypal.com https://www.google.com https://*.squareup.com https://*.squarecdn.com https://pay.google.com https://*.arcot.com https://*.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://js.stripe.com https://hooks.stripe.com https://*.stripe.com https://b.stripecdn.com https://*.hcaptcha.com https://*.yotpo.com; form-action 'self' https://*.arcot.com https://*.cardinalcommerce.com; object-src 'none'; base-uri 'self'; frame-ancestors 'none' 2
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' data: https://www.googletagmanager.com https://*.usercentrics.eu https://www.google.com https://www.gstatic.com https://*.doubleclick.net https://join.com https://*.join.com https://sc.lfeeder.com https://snap.licdn.com https://connect.facebook.net https://s3.eu-central-1.amazonaws.com https://destination-data-map.guest.net https://unpkg.com; style-src 'self' 'unsafe-inline' https://*.join.com https://s3.eu-central-1.amazonaws.com https://unpkg.com https://www.gstatic.com https://fonts.googleapis.com; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' data: https://*.join.com https://fonts.gstatic.com https://static.hsappstatic.net; connect-src 'self' https://*.usercentrics.eu https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.basemaps.cartocdn.com https://destination-data-map.guest.net https://pro.guest.net https://pro.guestnet.info https://tiles.openfreemap.org https://join.com https://*.join.com https://www.google.com https://www.google.at https://www.google.it https://www.google.de https://google.com https://analytics.google.com https://www.facebook.com https://www.googleadservices.com https://*.doubleclick.net https://px.ads.linkedin.com https://sc.lfeeder.com; worker-src 'self' blob:; frame-src 'self' https://www.googletagmanager.com https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://www.facebook.com; form-action 'self' https://www.facebook.com; report-uri /csp-report 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com maxcdn.bootstrapcdn.com fonts.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.twitter.com 'self' 'unsafe-inline'; img-src 'self' data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com quickchart.io img.youtube.com *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cloudfront.net data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com cdn.jsdelivr.net *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com downloads.mailchimp.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net fonts.gstatic.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.cloudflare.com *.twitter.com *.twimg.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 2
require-trusted-types-for 'script'; trusted-types default 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://accounts.google.com https://connect.facebook.net https://*.googletagmanager.com https://*.google-analytics.com https://*.ometria.com https://*.yotpo.com https://*.yotpocdn.com https://*.braintreegateway.com https://*.braintree-api.com https://*.paypal.com https://*.head.com https://*.head-test.com https://api.addressy.com https://*.awin1.com https://www.youtube.com https://s.ytimg.com https://va.vercel-scripts.com https://*.adobe.io https://*.cookiebot.com https://*.ddlnk.net https://*.trackedweb.net; style-src 'self' 'unsafe-inline' https://*.yotpo.com https://*.yotpocdn.com https://*.typekit.net; img-src 'self' data: blob: https:; font-src 'self' data: https://*.typekit.net https://*.yotpo.com https://*.yotpocdn.com; connect-src 'self' https://accounts.google.com https://www.facebook.com https://graph.facebook.com https://*.magentosite.cloud https://*.head.com https://*.head-test.com https://*.adobe.io https://*.yotpo.com https://*.yotpocdn.com https://*.yotpoapi.com https://api.addressy.com https://*.braintree-api.com https://*.braintreegateway.com https://*.paypal.com https://*.ometria.com https://*.googletagmanager.com https://*.google-analytics.com https://*.awin1.com https://vitals.vercel-insights.com https://va.vercel-scripts.com https://*.cookiebot.com https://*.ddlnk.net https://*.trackedweb.net; frame-src 'self' https://accounts.google.com https://www.facebook.com https://staticxx.facebook.com https://www.youtube.com https://www.youtube-nocookie.com https://*.braintreegateway.com https://*.braintree-api.com https://*.paypal.com https://*.head.com https://*.head-test.com https://*.cookiebot.com https://*.eshopworld.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' 2
default-src 'self'; script-src 'self' https://api-maps.yandex.ru https://www.google.com https://www.gstatic.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://api-maps.yandex.ru https://www.gstatic.com; font-src 'self'; connect-src 'self' https://www.google.com https://www.gstatic.com; frame-src https://www.google.com; child-src https://www.google.com; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' data: data: *.tiktok.com *.ttcdn-row.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com cdn.dnky.co amc.demdex.net www.google.com youtube.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' data: maps.gstatic.com maps.googleapis.com accounts.google.com *.tiktok.com *.ttcdn-row.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://www.google.com *.gstatic.com cdn.dnky.co r1-t.trackedlink.net www.gstatic.com js-agent.newrelic.com bam.nr-data.net maps.googleapis.com player.vimeo.com https://maps.googleapis.com *.tiktok.com *.ttcdn-row.com *.bytedance.com analytics.tiktok.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com *.googleapis.com *.gstatic.com cdn.dnky.co *.googletagmanager.com *.cookielaw.org *.tiktok.com *.ttcdn-row.com 'self' 'unsafe-inline'; object-src *.tiktok.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.magento.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maps.googleapis.com api.comapi.com bam.nr-data.net *.cookielaw.org analytics.tiktok.com business-api.tiktok.com *.ttcdn-row.com *.bytedance.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'none' 'self'; script-src 'self' https://butterfly-cdn.masterworks.com https://sonic.masterworks.com https://cdn.mxpnl.com https://connect.facebook.net https://js.hs-analytics.net https://js-na1.hs-scripts.com https://js.hs-banner.com https://js.hsadspixel.net https://cdn.plaid.com https://sdk.onfido.com https://cdn.moderntreasury.com https://maps.googleapis.com https://applepay.cdn-apple.com https://static.cloudflareinsights.com https://api.cloudsponge.com https://cdn.addevent.com; connect-src 'self' https://account.masterworks.com https://api.masterworks.com/graphql wss://api.masterworks.com/graphqlws https://butterfly-cdn.masterworks.com https://butterfly-api.masterworks.com https://api.segment.io https://sonic.masterworks.com https://api-js.mixpanel.com https://api.hubapi.com https://*.ingest.sentry.io https://*.onfido.com https://maps.googleapis.com https://cloudflareinsights.com https://api.cloudsponge.com https://collect.cloudsponge.com https://cdn.addevent.com; img-src 'self' data: blob: https://cdn.masterworks.com https://static.masterworks.io https://s3.amazonaws.com/works.masterworks.io/* https://www.facebook.com https://track.hubspot.com https://images.ctfassets.net https://contentful.masterworks.com https://maps.googleapis.com https://maps.gstatic.com https://api.cloudsponge.com; style-src 'self' 'unsafe-inline' https://api.cloudsponge.com https://cdn.addevent.com; frame-ancestors 'none'; form-action 'self'; manifest-src 'self'; font-src 'self' https://fonts.gstatic.com; media-src 'self' blob: https://cdn.masterworks.com https://static.masterworks.io https://videos.ctfassets.net; worker-src 'self' blob:; base-uri 'none'; frame-src https://cdn.plaid.com https://sdk.onfido.com https://app.moderntreasury.com https://sso.tabapay.com https://iframes.tabapay.net https://cdn.addevent.com https://calendly.com https://player.vimeo.com https://www.youtube.com https://www.youtube-nocookie.com; upgrade-insecure-requests 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://fonts.gstatic.com https://pro.fontawesome.com https://www.tolvnow.com data: *.fontawesome.com *.alothemes.com *.magepow.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors https://h.online-metrix.net 'self' *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com www.googletagmanager.com https://h.online-metrix.net *.cardinalcommerce.com https://d2d7do8qaecbru.cloudfront.net https://google.com https://ls.smct.io https://www.mercadolibre.com https://www.tolvnow.com https://tracker.tolvnow.com *.widde.io *.rdstation.com.br *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com connect.facebook.net *.pagaleve.io *.pagaleve.com.br c.paypal.com checkout.paypal.com assets.braintreegateway.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://h.online-metrix.net *.d.aa.online-metrix.net https://p.afilio.com.br https://newimgebit-a.akamaihd.net https://amcglobal.sc.omtrdc.net https://assets.adobedtm.com https://assets.braintreegateway.com https://*.behance.net https://c.bing.com https://b.stats.paypal.com https://c.paypal.com https://checkout.paypal.com https://c.clarity.ms https://o.clarity.ms https://cm.everesttech.net https://connect.facebook.net https://conectiva.io https://*.d.aa.online-metrix.net https://device.clearsale.com.br https://receiver.posclick.dinamize.com https://dpm.demdex.net https://dub.stats.paypal.com https://events.smct.co https://www.facebook.com/privacy_sandbox/ https://www.facebook.com/tr/ https://fpdbs.paypal.com https://fpdbs.sandbox.paypal.com https://*.ftcdn.net *.analytics.google.com https://www.google.com.br https://www.google.com/pagead/ https://ssl.gstatic.com https://googletagmanager.com https://*.mlstatic.com https://*.mercadopago.com https://mercadopago.com.br https://*.mercadopago.com.br https://*.mercadolibre.com https://*.mercadolibre.com.br https://*.mercadolivre.com https://www.paypal.com https://*.paypal.com https://www.paypalobjects.com https://www.sandbox.paypal.com https://t.paypal.com https://tracker.tolvnow.com https://p.typekit.net https://validator.swagger.io https://*.vimeocdn.com https://widgets.magentocommerce.com https://i.ytimg.com *.widde.io *.rdstation.com.br https://d335luupugsy2.cloudfront.net https://rate.trustvox.com.br https://certificate.trustvox.com.br https://colt.trustvox.com.br *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br *.mercadopago.com.br *.mlstatic.com connect.facebook.net *.pagaleve.com.br *.alothemes.com *.magepow.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com *.vimeocdn.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://h.online-metrix.net https://h.online-metrix.net/fp/tags.js *.cardinalcommerce.com https://assets.adobedtm.com https://api.braintreegateway.com https://api.sandbox.braintreegateway.com https://api.edrone.me https://api-s.edrone.me https://app.cartstack.com.br https://assets.braintreegateway.com https://bam.nr-data.net https://c.paypal.com https://*.cardinalcommerce.com https://clarity.ms https://www.clarity.ms https://d3bo67muzbfgtl.cloudfront.net https://d2vfa2a1j2oldr.cloudfront.net https://d3vhsxl1pwzf0p.cloudfront.net https://dgk28ckagqims.cloudfront.net https://commerce.adobedtm.com https://commerce.adobe.net https://*.commerce-quick-checkout.com https://connect.facebook.net https://device.clearsale.com.br https://receiver.posclick.dinamize.com https://www.feedrapp.info https://geostag.cardinalcommerce.com https://google.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://tagmanager.google.com https://includestest.ccdc02.com https://js-agent.newrelic.com https://js.braintreegateway.com https://js.smct.io https://magento-recs-sdk.adobe.net https://*.mercadopago.com https://mercadopago.com.br https://*.mercadopago.com.br https://*.mercadolibre.com https://*.mercadolibre.com.br https://*.mercadolivre.com https://*.mlstatic.com https://*.nr-data.net https://www.paypal.com https://www.paypalobjects.com https://www.sandbox.paypal.com https://t.paypal.com https://*.paypal.com https://imgs.ebit.com.br https://*.ebit.com.br https://sdk.mercadopago.com https://secure.afilio.com.br https://smct.co https://*.smct.co https://songbird.cardinalcommerce.com https://songbirdstag.cardinalcommerce.com https://s.ytimg.com https://tracker.tolvnow.com https://tracker5.tolvnow.com https://unpkg.com https://use.typekit.net https://*.vimeocdn.com https://v18dxapjmd.execute-api.eu-west-1.amazonaws.com https://www.googletagmanager.com/gtag/js https://www.googletagmanager.com/gtm.js https://z.clarity.ms *.conectiva.io conectiva.io *.hotjar.com script.hotjar.com *.tolvnow.com tracker4.tolvnow.com static.trustvox.com.br https://*.widde.io *.widde.io popups.rdstation.com.br *.rdstation.com.br *.sentry.io *.ingest.sentry.io https://popups.rdstation.com.br https://widde.io https://analytics.tiktok.com https://rate.trustvox.com.br https://certificate.trustvox.com.br https://colt.trustvox.com.br https://d335luupugsy2.cloudfront.net https://d1sag09wwfbul8.cloudfront.net https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ https://static.trustvox.com.br *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br *.mercadopago.com.br *.mlstatic.com connect.facebook.net *.pagaleve.com.br *.avada.io *.alothemes.com *.magepow.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https://assets.adobedtm.com https://clarity.ms https://d3bo67muzbfgtl.cloudfront.net https://cdn.dnky.co https://pro.fontawesome.com https://getfirebug.com https://fonts.googleapis.com https://webchat.dotdigital.com https://www.tolvnow.com https://tracker.tolvnow.com https://rate.trustvox.com.br https://certificate.trustvox.com.br https://colt.trustvox.com.br *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.fontawesome.com *.alothemes.com *.magepow.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'none'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.nr-data.net api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://h.online-metrix.net https://mpisandbox.braspag.com.br/v2/3ds/validate https://writer.cardinalcommerce.com/stag/log https://mpisandbox.braspag.com.br/v2/3ds/enroll https://centinelapistag.cardinalcommerce.com/V1/Order/JWT/Continue *.amazonaws.com *.braspag.com.br https://assets.adobedtm.com https://amcglobal.sc.omtrdc.net https://api.braintreegateway.com https://api.sandbox.braintreegateway.com https://api.edrone.me https://api-s.edrone.me https://api.mercadopago.com https://api.mercadolibre.com https://api.performa.ai https://assets.braintreegateway.com https://bam.nr-data.net https://c.bing.com https://*.cardinalcommerce.com https://*.clarity.ms https://n.clarity.ms https://o.clarity.ms https://l.clarity.ms https://z.clarity.ms https://d3vhsxl1pwzf0p.cloudfront.net https://d3bo67muzbfgtl.cloudfront.net https://dgk28ckagqims.cloudfront.net https://d2vfa2a1j2oldr.cloudfront.net https://commerce.adobedtm.com https://commerce.adobe.net https://newimgebit-a.akamaihd.net https://*.akamaihd.net https://connect.facebook.net https://www.google.com https://www.google.com/ccm/collect https://*.google-analytics.com https://googleads.g.doubleclick.net https://www.feedrapp.info https://firehose.eu-west-1.amazonaws.com https://geostag.cardinalcommerce.com https://analytics.google.com https://stats.g.doubleclick.net https://includestest.ccdc02.com https://js-agent.newrelic.com https://js.braintreegateway.com https://*.mercadopago.com https://mercadopago.com.br https://*.mercadolibre.com https://*.mercadolivre.com https://*.mlstatic.com https://*.nr-data.net https://www.paypal.com https://www.paypalobjects.com https://receiver.posclick.dinamize.com https://songbird.cardinalcommerce.com https://js.smct.io https://*.smct.co https://tracker.tolvnow.com https://tracker5.tolvnow.com https://unpkg.com https://use.typekit.net https://*.vimeocdn.com wss://v18dxapjmd.execute-api.eu-west-1.amazonaws.com https://www.facebook.com https://api.ipify.org *.widde.io *.rdstation.com.br *.ingest.sentry.io https://d335luupugsy2.cloudfront.net https://popups.rdstation.com.br https://pageview-notify.rdstation.com.br https://trackings.nemu.com.br https://api-admin.widde.io https://analytics.tiktok.com https://trustvox.com.br https://rate.trustvox.com.br https://certificate.trustvox.com.br https://colt.trustvox.com.br https://d1sag09wwfbul8.cloudfront.net https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ https://static.trustvox.com.br *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br *.mercadopago.com.br *.mlstatic.com connect.facebook.net https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src https://commerce.adobedc.net https://n.clarity.ms 'self' 'unsafe-inline'; base-uri 'self' 'unsafe-inline'; 2
font-src *.googleapis.com *.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com *.restorio.cz *.restorio.sk *.restorio.eu *.vegadesign.cz *.vegadesign.local 'self' data: *.twitter.com *.twimg.com *.zopim.com https://www.ppl.cz https://api.mapy.cz https://api.dhl.com data: 'self' 'unsafe-inline'; form-action self *.restorio.cz *.restorio.sk *.restorio.eu *.vegadesign.cz *.vegadesign.local *.facebook.com *.twitter.com yaby.eu 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.restorio.cz 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com www.facebook.com platform.twitter.com *.restorio.cz *.restorio.sk *.restorio.eu *.vegadesign.cz *.vegadesign.local *.criteo.com *.criteo.net *.doubleclick.net *.facebook.com *.google.com *.googletagmanager.com *.ladesk.com elibro.ladesk.com *.ec1.vbus.apps.ladesk.com *.gopay.cz *.gopay.com *.hotjar.com *.outfindo.com *.packeta.com *.pinterest.com *.twitter.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.googleapis.com *.gstatic.com data: *.facebook.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com *.restorio.cz *.restorio.sk *.restorio.eu media.restorio.cz media.restorio.sk media.restorio.eu yaby.eu *.yaby.eu *.vegadesign.cz *.vegadesign.local blob: *.ceneo.pl *.bing.com *.bing.net *.clarity.ms *.doofinder.com eu1-doofinderuser.s3.amazonaws.com *.doubleclick.net *.g.doubleclick.net *.facebook.net *.google.at *.google.be *.google.bg *.google.com google.com *.google.com.au *.google.com.cr *.google.com.cy *.google.com.do *.google.com.eg *.google.com.mt *.google.com.mx *.google.com.ph *.google.com.tr *.google.com.ua *.google.co.il *.google.co.in *.google.co.jp *.google.co.ma *.google.co.nz *.google.co.th *.google.co.tw *.google.co.uk *.google.ae *.google.by *.google.ca *.google.ch *.google.cz *.google.de *.google.dk *.google.es *.google.fi *.google.fr *.google.gr *.google.hr *.google.hu *.google.ie *.google.is *.google.it *.google.lu *.google.lv *.google.md *.google.me *.google.nl *.google.no *.google.pl *.google.pt *.google.ro *.google.ru *.google.rs *.google.se *.google.sk *.google.tn *.google.tr *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.googleusercontent.com *.googlesyndication.com *.heureka.cz *.heureka.sk im9.cz *.imedia.cz *.packeta.com *.seznam.cz t.co *.tiktok.com img.tiplicdn.com *.twiago.com *.twitter.com *.twimg.com *.ytimg.com *.zopim.com *.ziskejte.cz *.zbozi.cz *.criteo.com *.criteo.net ad.360yield.com eb2.3lift.com *.adform.net *.adnxs.com *.adnxs.net *.bidswitch.net r.casalemedia.com *.emxdgt.com id5-sync.com matching.ivitrack.com beacon.krxd.net *.1rx.io exchange.mediavine.com contextual.media.net visitor.omnitagjs.com sync.outbrain.com jadserve.postrelease.com simage2.pubmatic.com pixel.rubiconproject.com match.sharethrough.com rtb-csync.smartadserver.com sync-t1.taboola.com/ criteo-sync.teads.tv criteo-partners.tremorhub.com sync.targeting.unrulymedia.com *.yahoo.net ad.yieldlab.net sync-criteo.ads.yieldmo.com https://www.ppl.cz https://api.mapy.cz https://api.dhl.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://browser.sentry-cdn.com *.googletagmanager.com *.facebook.net cdn.jsdelivr.net connect.facebook.net twitter.com platform.twitter.com *.restorio.cz *.restorio.sk *.restorio.eu static.restorio.cz static.restorio.sk static.restorio.eu *.vegadesign.cz *.vegadesign.local *.addthis.com *.adform.net *.bing.com *.cloudflare.com *.ceneo.pl *.clarity.ms *.cloudflareinsights.com *.cookiehub.com cookiehub.net *.cookiehub.eu restorio.bot.coworkers.ai *.criteo.com *.criteo.net *.daktela.com *.dognet.sk login.dognet.sk *.doofinder.com *.doubleclick.net *.facebook.com *.fontawesome.com *.googleadservices.com *.google-analytics.com *.googlesyndication.com *.google.com *.google.cz *.gopay.cz *.gopay.com *.hotjar.com im9.cz *.im9.cz *.imedia.cz *.ladesk.com *.outfindo.com *.packeta.com *.pinterest.com *.pinimg.com *.selltoro.com *.seznam.cz sc-static.net *.srovname.cz stapecdn.com *.tiktok.com *.ads-twitter.com *.twitter.com *.twimg.com *.zbozi.cz *.zdassets.com *.zopim.com https://www.ppl.cz https://api.mapy.cz https://api.dhl.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com *.restorio.cz *.restorio.sk *.restorio.eu static.restorio.cz static.restorio.sk static.restorio.eu *.vegadesign.cz *.vegadesign.local *.cloudflare.com *.cookiehub.com *.cookiehub.eu cookiehub.net *.doofinder.com *.googleapis.com *.gstatic.com *.twitter.com *.twimg.com *.zopim.com https://www.ppl.cz https://api.mapy.cz https://api.dhl.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com data: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com *.googleapis.com https://*.ingest.sentry.io *.google-analytics.com *.restorio.cz *.restorio.sk *.restorio.eu yaby.eu *.vegadesign.cz *.vegadesign.local *.bing.com *.bing.net *.clarity.ms *.cookiehub.com *.cookiehub.net cookiehub.net *.cookiehub.eu restorio.bot.coworkers.ai wss://restorio.bot.coworkers.ai *.criteo.com *.criteo.net *.doofinder.com wss://eu1-layer.doofinder.com wss://eu1-recommendations.doofinder.com *.doubleclick.net *.facebook.com *.facebook.net google.com *.google.com *.google.cz *.google.sk adservice.google.com *.googleadservices.com *.googlesyndication.com *.gopay.cz *.gopay.com *.outfindo.com *.packeta.com *.pinterest.com *.selltoro.com *.seznam.cz *.srovname.cz *.tiktok.com *.tiktokw.us *.twitter.com *.twimg.com *.yaby.eu *.zdassets.com wss://widget-mediator.zopim.com https://www.ppl.cz https://api.mapy.cz https://api.dhl.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.restorio.cz *.restorio.sk *.restorio.eu *.vegadesign.cz *.vegadesign.local *.gopay.cz *.gopay.com *.yaby.eu yaby.eu 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://sentry.vegadesign.cz/api/4/security/?sentry_key=aabf49608cca46b2bf8fb3c0ad2a8eba; report-to report-endpoint; 2
default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self' https://forms.hsforms.com https://webto.salesforce.com; frame-ancestors 'self'; font-src 'self' data: https://fonts.gstatic.com https://*.hubspotusercontent-na1.net; img-src 'self' data: blob: https:; media-src 'self' blob: https:; frame-src 'self' https://www.googletagmanager.com https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://play.hubspotvideo.com https://app.hubspot.com https://app.trinethire.com https://forms.hsforms.com https://intercom-sheets.com; connect-src 'self' https://*.soundthinking.com https://*.tmxio.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.google.com https://*.gstatic.com https://*.posthog.com https://*.hubspot.com https://*.hubapi.com https://*.hsforms.com https://static.hsappstatic.net https://*.intercom.io wss://*.intercom.io https://*.cookielaw.org https://*.onetrust.com https://*.leadfeeder.com https://*.lfeeder.com https://*.linkedin.com https://*.doubleclick.net https://cs.lf-discover.com https://*.hubspotusercontent-na1.net; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests; script-src 'self' https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://snap.licdn.com https://sc.lfeeder.com https://lens.tmxio.com https://widget.intercom.io https://cdn.cookielaw.org https://js.hsforms.net https://js.hs-analytics.net https://js.usemessages.com https://js.hsadspixel.net https://js.hubspot.com https://js.hs-banner.com https://static.hsappstatic.net https://www.google.com https://www.gstatic.com https://us-assets.i.posthog.com https://cdn.jsdelivr.net https://cs.lf-discover.com https://*.hubspotusercontent-na1.net 'unsafe-inline'; style-src 'self' https://cdn.cookielaw.org https://fonts.googleapis.com https://*.hubspot.com https://*.hsforms.com https://*.intercom.io 'sha384-DLJp3qhLmkudlqf4mXciKN/mkU96wiy+AprHKMDIYzEom1dhk6UUHp+OsvLYD3Vc' 'sha384-ef9rscQ8JsdJm9AkU7ZttTXi1MoMfgkrwFmhqpy19HSpNY6AbLfd1muVmM4fMr8F' 'sha384-oGur53gASKSDoRt59K+vzhyCaWd5pLZG3EWGjRLI2ba2H0jk/iV9sWvHW+SrfyB1' 'sha384-2nQlirwD+wX9SIKXYEUDjiKParhMFLFi/8xNTQP6fvRau78F0XX93pR8/9HsY+C5' 'sha384-OLBgp1GsljhM2TJ+sbHjaiH9txEUvgdDTAzHv2P24donTt6/529l+9Ua0vFImLlb'; style-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://cdn.cookielaw.org https://fonts.googleapis.com https://*.hubspot.com https://*.hsforms.com https://*.intercom.io; 2
style-src-elem 'unsafe-inline' 'self' cdn.jsdelivr.net fonts.googleapis.com *.bootstrapcdn.com *.ddev.site *.cbd-vital.at *.cbd-vital.de *.cbd-vital.cc *.cbd-vital.it *.cbd-vital.fr *.vitrasan.com *.aquatadeus.at *.aquatadeus.de *.spermidin-plus.at *.spermidin-plus.de *.spermidin-plus.ch *.bing.com *.ratepay.com; script-src-elem 'unsafe-inline' 'self' cdn.jsdelivr.net www.google.com *.googletagmanager.com *.gstatic.com *.google-analytics.com cdn.usersnap.com api.usersnap.com *.facebook.net *.hs-analytics.net *.hs-banner.com *.hs-scripts.com *.hscollectedforms.net *.hubspot.com *.usemessages.com *.usercentrics.eu *.ddev.site *.cbd-vital.at *.cbd-vital.de *.cbd-vital.cc *.cbd-vital.it *.cbd-vital.fr *.vitrasan.com *.aquatadeus.at *.aquatadeus.de *.spermidin-plus.at *.spermidin-plus.de *.spermidin-plus.ch *.adcell.com *.etrusted.com *.belboon.de *.trk42.net *.mediards.de sibautomation.com unpkg.com *.bing.com *.ratepay.com *.trustedshops.com *.sovendus.com tr.mediards.com; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: online.swagger.io *.cbd-vital.at *.cbd-vital.de *.cbd-vital.cc *.cbd-vital.it *.cbd-vital.fr *.vitrasan.com *.aquatadeus.at *.aquatadeus.de *.spermidin-plus.at *.spermidin-plus.de *.spermidin-plus.ch https://widgets.trustedshops.com https://static.unzer.com https://applepay.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.cbd-vital.at *.cbd-vital.de *.cbd-vital.cc *.cbd-vital.it *.cbd-vital.fr *.vitrasan.com *.aquatadeus.at *.aquatadeus.de *.spermidin-plus.at *.spermidin-plus.de *.spermidin-plus.ch 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.klarna.com www.google.com www.facebook.com platform.twitter.com *.facebook.com *.hubspot.com *.usercentrics.eu *.ddev.site *.cbd-vital.at *.cbd-vital.de *.cbd-vital.cc *.cbd-vital.it *.cbd-vital.fr *.vitrasan.com *.aquatadeus.at *.aquatadeus.de *.spermidin-plus.at *.spermidin-plus.de *.spermidin-plus.ch *.belboon.com sibautomation.com *.mpay24.com *.sovendus-connect.com *.redintelligence.net *.ad-srv.net *.bsmartdata.com ad4m.at *.fls.doubleclick.net static-cc.unzer.com *.hs-sites.com www.jsctool.com www.xtento.com https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://static-cc.test.unzer.com https://h.online-metrix.net https://google.com/pay https://pay.google.com/ https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ https://sandbox.clicktopay.auth.visa.com https://clicktopay.visa.com https://sandbox.secure.checkout.visa.com https://secure.checkout.visa.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com img.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.klarna.com *.klarnaevt.com *.klarnacdn.net https://at19.net https://bdt9.net https://ds1.nl https://dt51.net https://dt61.net https://fr135.net https://glp8.net https://jdt8.net https://jf79.net https://hs82.net https://lt45.net https://mt74.net https://ndt5.net https://rkn3.net magefan.com cm.magefan.com https://firebasestorage.googleapis.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com online.swagger.io cdn.usersnap.com cdn.jsdelivr.net www.google.at *.ecxdev.io *.hsforms.com *.hubspot.com *.usercentrics.eu *.ddev.site *.cbd-vital.at *.cbd-vital.de *.cbd-vital.cc *.cbd-vital.it *.cbd-vital.fr *.vitrasan.com *.aquatadeus.at *.aquatadeus.de *.spermidin-plus.at *.spermidin-plus.de *.spermidin-plus.ch d.ratepay.com www.xtento.com cdn.xtento.com https://redchamps.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com https://static.unzer.com *.online-metrix.net https://www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.klarna.com *.klarnacdn.net x.klarnacdn.net www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.klarnaservices.com *.avada.io *.shopify.com connect.facebook.net twitter.com platform.twitter.com *.fontawesome.com polyfill.io *.usersnap.com *.gstatic.com *.payments-amazon.com *.facebook.net *.hs-analytics.net *.hs-banner.com *.hs-scripts.com *.hscollectedforms.net *.hsforms.net *.hubspot.com *.usemessages.com *.usercentrics.eu *.ddev.site *.cbd-vital.at *.cbd-vital.de *.cbd-vital.cc *.cbd-vital.it *.cbd-vital.fr *.vitrasan.com *.aquatadeus.at *.aquatadeus.de *.spermidin-plus.at *.spermidin-plus.de *.spermidin-plus.ch d.ratepay.com www.jsctool.com www.xtento.com cdn.xtento.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://static.unzer.com https://applepay.cdn-apple.com https://pay.google.com https://code.jquery.com https://h.online-metrix.net https://h64.online-metrix.net https://static-v2.unzer.com/v2/ui-components/ https://js.hs-scripts.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.ddev.site *.cbd-vital.at *.cbd-vital.de *.cbd-vital.cc *.cbd-vital.it *.cbd-vital.fr *.vitrasan.com *.aquatadeus.at *.aquatadeus.de *.spermidin-plus.at *.spermidin-plus.de *.spermidin-plus.ch d.ratepay.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://sandbox.src.mastercard.com https://static-v2.unzer.com/v2/ui-components/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.vimeo.com *.akamaized.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline';, connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://get.geojs.io *.avada.io api.usersnap.com *.algolianet.com *.algolia.net *.amazon.com *.hscollectedforms.net *.hsforms.com *.hubspot.com *.usercentrics.eu *.cbd-vital.at *.cbd-vital.de *.cbd-vital.cc *.cbd-vital.it *.cbd-vital.fr *.vitrasan.com *.aquatadeus.at *.aquatadeus.de *.spermidin-plus.at *.spermidin-plus.de *.spermidin-plus.ch *.brevo.com *.sovendus.com d.ratepay.com www.jsctool.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://api.unzer.com https://api.heidelpay.com https://sbx-api.heidelpay.com https://sbx-api.unzer.com https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://h.online-metrix.net https://h64.online-metrix.net https://google.com/pay https://www.google.com/pay https://pay.google.com https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ https://static-cc.test.unzer.com https://static-v2.unzer.com/v2/ui-components/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'unsafe-inline' 'self' data: 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.ddev.site *.cbd-vital.at *.cbd-vital.de *.cbd-vital.cc *.cbd-vital.it *.cbd-vital.fr *.vitrasan.com *.aquatadeus.at *.aquatadeus.de *.spermidin-plus.at *.spermidin-plus.de *.spermidin-plus.ch 'self' 'unsafe-inline'; 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.hotjar.com *.hotjar.io *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.hotjar.com *.hotjar.io js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com *.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.hotjar.com *.hotjar.io px.ads.linkedin.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com *.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.hotjar.com *.hotjar.io snap.licdn.com sc.lfeeder.com px.ads.linkedin.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.hotjar.com *.hotjar.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.hotjar.com *.hotjar.io wss://*.hotjar.com px.ads.linkedin.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://use.typekit.net https://static.formstack.com https://css.zohocdn.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://www.google.com https://www.youtube.com https://www.bullseyelocations.com landofcoder.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://www.truck-lite.com https://www.rigidindustries.com https://www.clariencetechnologies.com https://www.lumiteclighting.com https://www.truck-lite.eu.com https://mcstaging.truck-lite.com https://trucklite.localhost https://mcstaging.clariencetechnologies.com https://pm.geniusmonkey.com https://css.zohocdn.com https://static.ctctcdn.com https://www.facebook.com https://www.google.com https://www.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com https://www.gstatic.com https://www.google.com *.google.bg *.googletagmanager.com https://connect.facebook.net *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://browser-update.org https://wwwtrucklitecom.formstack.com https://static.formstack.com https://www.google.com/recaptcha/api.js https://code.jquery.com https://cdnjs.cloudflare.com https://static.ctctcdn.com https://salesiq.zoho.com https://js.zohocdn.com https://static.zohocdn.com https://js-agent.newrelic.com https://www.googletagmanager.com https://maps.googleapis.com https://googleads.g.doubleclick.net https://www.truck-lite.com https://mcstaging.truck-lite.com https://cdn.jsdelivr.net landofcoder.com *.avada.io *.shopify.com https://js.stripe.com https://www.gstatic.com/recaptcha/releases/Trd6gj1dhC_fx0ma_AWHc1me/recaptcha__en.js 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com assets.braintreegateway.com https://use.typekit.net https://p.typekit.net https://static.ctctcdn.com https://css.zohocdn.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://www.truck-lite.com https://mcstaging.truck-lite.com https://cdn.jsdelivr.net maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://wwwtrucklitecom.formstack.com https://listgrowth.ctctcdn.com https://bam.nr-data.net https://salesiq.zohopublic.com https://www.google-analytics.com https://analytics.google.com https://www.facebook.com https://maps.googleapis.com https://www.truck-lite.com https://mcstaging.truck-lite.com landofcoder.com https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self' ; style-src 'self' 'unsafe-inline' optimize.google.com www.googletagmanager.com fonts.googleapis.com *.typekit.net *.yotpo.com *.myfonts.net *.cloudfront.net; font-src 'self' data: optimize.google.com fonts.gstatic.com *.abtasty.com *.dwin1.com *.typekit.net *.livechatinc.com snap.licdn.com *.tiktok.com static.ads-twitter.com ct.pinterest.com *.yotpo.com *.addthis.com *.moatads.com *.curalate.com *.cloudflare.com *.cloudfront.net; img-src 'self' data: *; base-uri 'self' ;  form-action *; frame-ancestors 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.sandersondesigngroup.com *.googleapis.com translate.google.com; connect-src 'self' www.mage.sandersondesigngroup.com *.sandersondesigngroup.com; frame-src 'self' player.vimeo.com *.fls.doubleclick.net ct.pinterest.com vimeo.com secure.livechatinc.com *.addthis.com *.curalate.com *.54proxy.com *.hotjar.com *.stripe.com *.trustpilot.com *.paypal.com *.zendesk.com *.zdassets.com; worker-src 'self' ; media-src 'self' data: ; 2
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/mapsplatform_google_com 2
default-src 'self' api.becomeanex.org www.becomeanex.org https://snakex-prod.s3.amazonaws.com/prod/media/ www.exprogram.com api.exprogram.com; media-src 'self' api.becomeanex.org www.becomeanex.org https://www.snapengage.com/ www.exprogram.com api.exprogram.com; font-src 'self' api.becomeanex.org www.becomeanex.org https://fonts.gstatic.com/ https://storage.googleapis.com/code.snapengage.com/ www.exprogram.com api.exprogram.com; form-action 'self' api.becomeanex.org www.becomeanex.org www.exprogram.com api.exprogram.com; object-src 'none'; connect-src 'self' api.becomeanex.org www.becomeanex.org https://bam.nr-data.net/ https://www.snapengage.com/ https://releases.wagtail.io/latest.txt https://stats.g.doubleclick.net/ https://analytics.google.com/ https://www.google-analytics.com/ https://smetrics.becomeanex.org/ https://www.googletagmanager.com/ https://browser-intake-us5-datadoghq.com/api/ https://cdn.whatfix.com/ https://whatfix.com/service/ https://thetruthinitiativefo.tt.omtrdc.net/ https://www.loop11.com/api/ www.exprogram.com api.exprogram.com; img-src 'self' api.becomeanex.org www.becomeanex.org https://snakex-prod.s3.amazonaws.com/prod/media/ data: https://clients1.google.com/ https://encrypted-tbn0.gstatic.com/ https://encrypted-tbn1.gstatic.com/ https://encrypted-tbn2.gstatic.com/ https://encrypted-tbn3.gstatic.com/ https://smetrics.becomeanex.org/ https://snakex-prod.s3.amazonaws.com/ https://storage.googleapis.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.googleapis.com/ https://www.googletagmanager.com/ https://www.snapengage.com/ https://stats.g.doubleclick.net/r/collect https://stats.g.doubleclick.net/g/ https://googleads.g.doubleclick.net/pagead/ https://www.gravatar.com/avatar/ https://i.ytimg.com/ https://excommunity.becomeanex.org/ https://pagead2.googlesyndication.com/ https://translate.google.com/ https://www.gstatic.com/ https://www.yellowschedule.com/ https://americanlegacyprod.112.2o7.net/ www.exprogram.com api.exprogram.com; style-src 'self' api.becomeanex.org www.becomeanex.org 'unsafe-inline' https://fonts.googleapis.com/ https://www.google.com/cse/ https://cdnjs.cloudflare.com/ www.exprogram.com api.exprogram.com; script-src 'self' api.becomeanex.org www.becomeanex.org 'unsafe-eval' 'unsafe-inline' https://bam.nr-data.net/ https://cse.google.com/ https://s.ytimg.com/yts/jsbin/ https://stats.g.doubleclick.net/dc.js https://storage.googleapis.com/code.snapengage.com/ https://www.google-analytics.com/analytics.js https://www.google.com/cse/ https://www.google.com/pagead/conversion_async.js https://www.googleadservices.com/ https://www.googletagmanager.com/gtm.js https://www.snapengage.com/ https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://assets.adobedtm.com/ https://cdnjs.cloudflare.com/ https://partner.googleadservices.com/ https://tpc.googlesyndication.com/ https://www.gstatic.com/ https://www.googletagmanager.com/gtag.js https://www.googletagmanager.com/gtag/ https://cdn.whatfix.com/ https://www.datadoghq-browser-agent.com/ https://cdn.loop11.com/static/ www.exprogram.com api.exprogram.com; frame-src api.becomeanex.org www.becomeanex.org https://cse.google.com/ https://secure.becomeanex.org/ https://www.youtube.com/ https://afs.googlesyndication.com/ https://td.doubleclick.net/ https://tpc.googlesyndication.com/ www.exprogram.com api.exprogram.com 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klevu.com *.ksearchnet.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.certcapture.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * *.googleapis.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.certcapture.com www.gstatic.com *.trackedlink.net *.klevu.com *.ksearchnet.com magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com cdn-cookieyes.com dev.visualwebsiteoptimizer.com px.ads.linkedin.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.magento-datasolutions.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.certcapture.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com js.klevu.com *.ksearchnet.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com *.googleapis.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net dev.visualwebsiteoptimizer.com rum.hlx.page cdn.shipup.co tracker.marinsm.com marinsoftware.com *.amleo.com snap.licdn.com script.hotjar.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klevu.com *.ksearchnet.com assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com cdn.shipup.co https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com cdn.shipup.co 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klevu.com *.ksearchnet.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com maps.googleapis.com *.googleapis.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app *.amleo.com ws.hotjar.com content.hotjar.io px.ads.linkedin.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://*.gstatic.com https://static.dhlecommerce.nl https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.multisafepay.com https://pay.google.com *.cookiebot.com *.bing.com *.googletagmanager.com *.textielstad.nl https://qdzh.textielstad.nl 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com https://belco-prod.s3-eu-central-1.amazonaws.com https://maps.googleapis.com https://maps.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.multisafepay.com *.cookiebot.com *.bing.com *.google.nl *.google.be *.google.de *.google.es *.google.fr *.textielstad.nl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com https://cdn.belco.io *.belco.io https://static.dhlecommerce.nl https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.multisafepay.com https://pay.google.com *.cookiebot.com *.bing.com *.ahrefs.com *.textielstad.nl https://consent.studio 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com https://*.googleapis.com https://static.dhlecommerce.nl https://maps.googleapis.com https://fonts.googleapis.com https://static.klaviyo.com *.multisafepay.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com wss://chat.belco.io https://cdn.belco.io *.belco.io https://api-gw.dhlparcel.nl https://static.dhlecommerce.nl https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.multisafepay.com *.cookiebot.com *.bing.com google.com *.ahrefs.com *.google.nl *.google.be *.google.de *.google.es *.google.fr *.textielstad.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://googleads.g.doubleclick.net https://d3js.org https://www.gstatic.com https://cse.google.com https://www.googleadservices.com cdn.jsdelivr.net https://cdn.ckeditor.com https://cdn.datatables.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com https://www.lbtu.lv; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://connect.facebook.net https://googleads.g.doubleclick.net https://d3js.org https://www.gstatic.com https://cse.google.com https://www.googleadservices.com cdn.jsdelivr.net https://cdn.ckeditor.com https://cdn.datatables.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com https://www.lbtu.lv; style-src 'self' 'report-sample' 'unsafe-inline' https://fonts.googleapis.com https://cdn.datatables.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://unpkg.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.datatables.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://unpkg.com; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://static.hivebrite.com https://*.hivebrite.com https://*.cloudfront.net https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://www.gstatic.com https://api.mapbox.com https://*.launchdarkly.com https://assets.zendesk.com https://static.zdassets.com https://*.zendesk.com https://widget.intercom.io https://*.intercomcdn.com https://app.planhat.com https://*.usejimo.com https://cdn.walkme.com https://consent.cookiebot.com https://*.cookiebot.com https://connect.facebook.net https://assets2.omniapp.co https://hivebrite-external.embed-omniapp.co; style-src 'self' 'unsafe-inline' https: data:; font-src 'self' data: https://static.hivebrite.com https://fonts.gstatic.com https://fonts.bunny.net; connect-src 'self' https://*.hivebrite.com https://*.cloudfront.net https://*.launchdarkly.com wss://*.launchdarkly.com https://*.ably.net wss://*.ably.net https://*.ably.io wss://*.ably.io https://*.datadoghq.com https://*.datadoghq.eu https://*.sentry.io https://*.sendbird.com wss://*.sendbird.com https://maps.googleapis.com https://api.mapbox.com https://*.tiles.mapbox.com https://www.google-analytics.com https://*.intercom.io wss://*.intercom.io https://app.planhat.com https://*.usejimo.com https://*.omniapp.co https://*.zendesk.com https://*.zopim.com https://*.zdassets.com https://api.klipy.com https://graph.facebook.com https://*.facebook.com; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; frame-src 'self' https:; worker-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' hivebrite.com; form-action 'self' https:; report-uri /csp-reports 2
script-src-attr https://cdn.evgnet.com https://*.googleapis.com https://tag.rmp.rakuten.com/ https://js.squarecdn.com/ https://unpkg.com/ https://livesearch-metrics.magento-ds.com/ https://*.addressfinder.io https://cdn.jsdelivr.net/ https://*.newrelic.com https://*.freshchat.com https://commerce.adobedtm.com/ https://*.braintreegateway.com https://*.stripe.com https://www.google.com/ https://www.googletagmanager.com/ https://*.trackedlink.net https://*.trackedweb.net https://t.cfjump.com/ https://s.pinimg.com/ https://tags.creativecdn.com/ https://analytics.tiktok.com/ https://www.clarity.ms/ https://connect.facebook.net/ https://www.gstatic.com/ https://pt.wisernotify.com/ https://ct.pinterest.com/ https://*.paypal.com https://*.google.com  'self' 'unsafe-inline'; script-src-elem https://cdn.evgnet.com https://*.googleapis.com https://tag.rmp.rakuten.com/ https://js.squarecdn.com/ https://unpkg.com/ https://livesearch-metrics.magento-ds.com/ https://*.addressfinder.io https://cdn.jsdelivr.net/ https://*.newrelic.com https://*.freshchat.com https://commerce.adobedtm.com/ https://*.braintreegateway.com https://*.stripe.com https://www.google.com/ https://www.googletagmanager.com/ https://*.trackedlink.net https://*.trackedweb.net https://t.cfjump.com/ https://s.pinimg.com/ https://tags.creativecdn.com/ https://analytics.tiktok.com/ https://www.clarity.ms/ https://connect.facebook.net/ https://www.gstatic.com/ https://pt.wisernotify.com/ https://ct.pinterest.com/ https://*.paypal.com https://*.google.com  'self' 'unsafe-inline'; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.squarecdn.com *.googleapis.com https://stackpath.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com widgets.sandbox.afterpay.com *.cash.app www.google.com *.dotdigital-pages.com *.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.afterpay.com/ *.cash.app *.googleapis.com *.trackedlink.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://www.tagalys.com *.disqus.com https://img.youtube.com https://firebasestorage.googleapis.com https://sdk.giftflick.com.au/ https://cdn.giftflick.com.au/ https://gf-cdn.s3-ap-southeast-2.amazonaws.com/ *.clarity.ms *.google.com https://c.bing.com/ *.facebook.com https://www.google.com.au/ https://ad.doubleclick.net/ https://*.rubiconproject.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://api.addressfinder.io https://rum.hlx.page https://portal.sandbox.afterpay.com https://portal.afterpay.com https://static.afterpay.com *.squarecdn.com https://hbiq.net *.cash.app apis.google.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com *.gstatic.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.convertexperiments.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://cdnjs.cloudflare.com https://d3htxdwqp62ai4.cloudfront.net http://d2r9py2hfy5mgp.cloudfront.net http://d3fzz8zsf83ont.cloudfront.net https://storage.googleapis.com *.disqus.com *.avada.io *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://player.vimeo.com/ https://www.giftflick.com.au/ https://sdk.giftflick.com.au/ *.creativecdn.com https://s.pinimg.com/ *.pinterest.com *.clarity.ms https://dusk-455267821617990643-help.freshchat.com/ https://analytics.tiktok.com/ https://connect.facebook.net/ *.wisernotify.com t.cfjump.com *.dusk.com.au *.attn.tv https://cdn.jsdelivr.net/npm/@growthbook/ https://tag.rmp.rakuten.com/ https://cdn.evgnet.com https://*.googleapis.com https://js.squarecdn.com/ https://unpkg.com/ https://livesearch-metrics.magento-ds.com/ https://*.addressfinder.io https://cdn.jsdelivr.net/ https://*.newrelic.com https://*.freshchat.com https://commerce.adobedtm.com/ https://*.braintreegateway.com https://*.stripe.com https://www.google.com/ https://www.googletagmanager.com/ https://*.trackedlink.net https://*.trackedweb.net https://t.cfjump.com/ https://tags.creativecdn.com/ https://www.clarity.ms/ https://www.gstatic.com/ https://pt.wisernotify.com/ https://ct.pinterest.com/ https://*.paypal.com https://*.google.com  'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com https://api.addressfinder.io static.afterpay.com/ *.squarecdn.com *.cash.app assets.braintreegateway.com https://cdnjs.cloudflare.com https://tagalys-assets.s3-ap-southeast-1.amazonaws.com https://d3htxdwqp62ai4.cloudfront.net https://stackpath.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.stripe.network *.stripecdn.com *.amazon.com https://sdk.giftflick.com.au/ https://dusk-455267821617990643-help.freshchat.com/ *.wisernotify.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https://player.vimeo.com/ https://cdn.giftflick.com.au/ https://videos-demo.giftflick.com.au/ https://download-video.akamaized.net/ https://*.vimeocdn.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://api.addressfinder.io *.afterpay.com *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com *.cash.app api.lab.amplitude.com *.googleapis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.convertexperiments.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://api-r1.tagalys.com https://api-r2.tagalys.com https://api-r3.tagalys.com https://api-r4.tagalys.com https://staging-api-r2.tagalys.com http://tagalys-api.docker:3000 https://get.geojs.io *.avada.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://www.giftflick.com.au/ https://api-demo.giftflick.com.au/ https://api.giftflick.com.au/ *.creativecdn.com *.pinterest.com *.clarity.ms https://analytics.tiktok.com/ *.wisermapp.com *.azurewebsites.net *.doubleclick.net *.attn.tv https://cdn.growthbook.io/ https://*.evergage.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
base-uri 'self'; default-src 'self' https:; connect-src 'self' data: blob: h https://ga.jspm.io *.sentry.io https://consentcdn.cookiebot.com https://consent.cookiebot.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googleapis.com *.google.com https://*.gstatic.com https://static.raspberrypi.org; font-src 'self' https: data: https://fonts.gstatic.com https://*.hotjar.com; frame-src 'self' https://challenges.cloudflare.com https://consentcdn.cookiebot.com *.google.com e.issuu.com prezi.com storify.com youtube.com www.youtube.com youtube-nocookie.com www.youtube-nocookie.com; img-src 'self' https: data: https://*.raspberrypi.org https://*.hotjar.com https://*.google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com; media-src 'self' https: data:; object-src 'none'; script-src 'self' https: 'unsafe-inline' blob: https://static.raspberrypi.org/js/global-nav-web-component/ https://challenges.cloudflare.com https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com https://*.googletagmanager.com https://*.hotjar.com https://browser.sentry-cdn.com https://js.sentry-cdn.com; style-src 'self' https: 'unsafe-inline' https://fonts.googleapis.com https://*.hotjar.com https://static.raspberrypi.org/styles/design-system/ https://*.cookiebot.com; worker-src blob:; report-uri https://o17504.ingest.us.sentry.io/api/4507769026707457/security/?sentry_key=53fc037dc5040a1a9fe07334577adc13&sentry_environment=production 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://fonts.gstatic.com data: *.fontawesome.com *.azureedge.net *.oct8ne.com *.klevu.com *.ksearchnet.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com ecommerce.raiffeisen.al *.upc.ua 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com www.google.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.addtoany.com *.gstatic.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.facebook.com *.googleapis.com *.trackedlink.net magefan.com cm.magefan.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.disqus.com *.cloudflare.com *.amazonaws.com *.facebook.com *.doubleclick.net *.pinterest.com *.taboola.com r1-t.trackedlink.net *.azureedge.net oct8necdneu.azureedge.net *.cdninstagram.com *.klevu.com *.ksearchnet.com https://firebasestorage.googleapis.com https://bank.paysera.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com connect.facebook.net *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ collector-1.audits.report *.auditiq.cloud *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.disqus.com *.cloudflare.com *.doubleclick.net *.facebook.net *.addtoany.com *.oct8ne.com *.taboola.com js.klevu.com *.ksearchnet.com *.avada.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.fontawesome.com *.cloudflare.com *.googleapis.com *.gstatic.com *.klevu.com *.ksearchnet.com https://fonts.bunny.net *.addtoany.com maxcdn.bootstrapcdn.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com collector-1.audits.report *.auditiq.cloud *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net *.doubleclick.net *.facebook.com *.oct8ne.com *.gstatic.com *.cloudflare.com *.klevu.com *.ksearchnet.com https://get.geojs.io *.avada.io http://dpm.demdex.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.flixcar.com *.flixfacts.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com *.monetico-services.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com *.monetico-services.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com cdn.doofinder.com *.flix360.com *.flix360.io https://images.unsplash.com *.openstreetmap.org *.flixcar.com *.bazaarvoice.com *.jwpsrv.com *.flixfacts.com *.imgix.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com cdn.doofinder.com *.channelsight.com media.flixfacts.com *.flix360.io *.flixcar.com *.cloudflareinsights.com *.gitem.fr fghcx.gitem.fr xvvcw.procie.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com display.ugc.bazaarvoice.com *.doofinder.com *.flixcar.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.monetico-services.com *.doofinder.com wss://*.doofinder.com *.flixcar.com *.openstreetmap.org *.axept.io https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://*.svea.com https://*.vipps.no https://*.trustly.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://*.svea.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io textilgallerian.b-cdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.klevu.com *.ksearchnet.com s7.addthis.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://*.svea.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com tagmanager.google.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com ekr.zdassets.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
connect-src hn.inspectlet.com www.paypal.com bam.nr-data.net *.doubleclick.net *.google-analytics.com bat.bing.com *.clarity.ms imgs.signifyd.com *.analytics.google.com gigaparts.needle.com *.gigaparts.com pagead2.googlesyndication.com *.braintree-api.com *.braintreegateway.com sockjs-us2.pusher.com gigaparts.com *.klaviyo.com push.needle.com maps.googleapis.com get.geojs.io wss://ws-us2.pusher.com api.paypal.com dzcse0jfd3c6i.cloudfront.net p2iqhncxyh.execute-api.eu-central-1.amazonaws.com rkkck31tec.execute-api.eu-central-1.amazonaws.com connect.breadpayments.com *.breadgateway.net *.google.com www.googleadservices.com google.com bat.bing.net o1431786.ingest.sentry.io *.sentry.io www.facebook.com www.gigaparts.net; font-src *.cloudmaestro.com fonts.gstatic.com 'self' fonts.googleapis.com dzcse0jfd3c6i.cloudfront.net resources.webscale.com data: static.klaviyo.com maxcdn.bootstrapcdn.com connect.gigaparts.com; frame-ancestors 'self' *.paypal.com; img-src 'self' *.rackcdn.com *.cloudfront.net *.adobedtm.com *.authorize.net *.googleadservices.com *.gigaparts.com *.nextopia.net guarantee-cdn.com *.google.com *.espssl.com *.facebook.com *.cloudmaestro.com *.gstatic.com *.google-analytics.com imgs.signifyd.com *.online-metrix.net bat.bing.com *.paypal.com 'unsafe-inline' data: nxtuploads.s3.amazonaws.com www.googletagmanager.com needler-images.s3.amazonaws.com *.clarity.ms *.icomamerica.com *.bing.com www.icomamerica.com *.inspectlet.com www.paypalobjects.com *.doubleclick.net gen.sendtric.com maps.googleapis.com gigaparts.com *.breadpayments.com bat.bing.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.cloudmaestro.com gigaparts.needle.com bat.bing.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com cdn-scripts.signifyd.com imgs.signifyd.com www.paypal.com connect.facebook.net googleads.g.doubleclick.net *.adobedtm.com *.authorize.net *.facebook.net www.paypalobjects.com ac.nextopiasoftware.com data: maps.googleapis.com www.youtube.com *.clarity.ms *.twitter.com *.google.com *.instagram.com *.nextopia.net *.klaviyo.com js.braintreegateway.com www.gstatic.com *.googlesyndication.com *.paypal.com *.gigaparts.com gigaparts.com static.klaviyo.com connect.breadpayments.com browser.sentry-cdn.com d5yoctgpv4cpx.cloudfront.net gigaparts-v2.ecomm-nav.com *.sentry-cdn.com dzcse0jfd3c6i.cloudfront.net ingest.blackfire.io admin.pipeline.blackfire.io www.gigaparts.net; style-src *.cloudmaestro.com 'unsafe-inline' cdn.nextopia.net 'self' fonts.googleapis.com *.klaviyo.com cdn.tickettailor.com maxcdn.bootstrapcdn.com dzcse0jfd3c6i.cloudfront.net www.gigaparts.net; worker-src blob: *.gigaparts.com gigaparts.com; report-uri /.webscale/csp-report 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de js.mollie.com https://www.googletagmanager.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://checkout.staging.devpayever.com https://checkout.payever.org *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com cdn.doofinder.com https://www.mollie.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ ratenkauf.easycredit.de www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com x.klarnacdn.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de cdn.doofinder.com js.mollie.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ ratenkauf.easycredit.de js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.trustpilot.com maps.googleapis.com x.klarnacdn.net/ www.gstatic.com www.google.com *.googleapis.com *.gstatic.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com x.klarnacdn.net www.gstatic.com/recaptcha 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.doofinder.com *.fontawesome.com assets.braintreegateway.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.doofinder.com wss://*.doofinder.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ ratenkauf.easycredit.de api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com maps.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' www.clarity.ms js.braintreegateway.com assets.braintreegateway.com www.paypalobjects.com *.paypal.com songbird.cardinalcommerce.com static.client.cardinaltrusted.com https://client.rum.us-east-1.amazonaws.com https://integrations.etrusted.com https://apps.mypurecloud.ie https://cookie-cdn.cookiepro.com https://pay.google.com/gp/p/js/pay.js https://services.postcodeanywhere.co.uk/js/address-3.91.min.js static.cloudflareinsights.com https://ajax.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://bat.bing.com https://*.tradedoubler.com https://cdn.studentbeans.com https://googleads.g.doubleclick.net https://bat.bing.com/p/action/5035386.js https://www.paypal.com https://loader.wisepops.com https://wisepops.net https://widget.trustpilot.com https://widgets.trustedshops.com https://tag.mention-me.com https://static.mention-me.com https://*.klarnacdn.net https://*.criteo.com maps.googleapis.com https://www.googleadservices.com https://www.google.com https://ob.segreencolumn.com https://obs.segreencolumn.com https://tags.tiqcdn.com https://scripts.clarity.ms https://connect.facebook.net https://*.dycdn.net https://api.addressy.com https://*.tealiumiq.com; style-src 'report-sample' 'self' 'unsafe-inline' https://fonts.googleapis.com https://services.postcodeanywhere.co.uk https://integrations.etrusted.com https://api.addressy.com; object-src 'none'; base-uri 'self'; connect-src 'self' api.lenstore.co.uk api.lenstore.de api.lenstore.it api.lenstore.fr api.lenstore.es api.lenstore.ie api.lenstore.nl api.lenstore.pt https://*.clarity.ms/collect https://*.mypurecloud.ie dataplane.rum.eu-west-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com/ api.braintreegateway.com client-analytics.braintreegateway.com https://*.etrusted.com https://auth.split.io https://cookie-cdn.cookiepro.com https://klarna.com https://*.klarnaevt.com https://x.klarnacdn.net https://*.klarna.com https://events.split.io https://google.com https://pay.google.com https://google.com/pay https://*.braintree-api.com https://sdk.split.io https://streaming.split.io https://www.paypal.com https://www.sandbox.paypal.com https://www.google.com/ccm/collect https://*.google-analytics.com *.analytics.google.com https://*.wisepops.com https://wisepops.net https://obs.segreencolumn.com cardinalcommerce.com *.cardinalcommerce.com *.cardinaltrusted.com https://privacyportal.cookiepro.com *.trustedshops.com trustedshops.com services.postcodeanywhere.co.uk sts.eu-west-1.amazonaws.com bat.bing.net https://bat.bing.com *.doubleclick.net wss://am.freshrelevance.com https://www.google.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://tag.mention-me.com https://*.dycdn.net wss://*.dycdn.net https://www.google.co.uk https://www.google.it https://www.google.ie https://*.tealiumiq.com https://*.criteo.com wss://webmessaging.mypurecloud.ie https://analytics.google.com; font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' *; img-src 'self' assets.lenstore.co.uk assets.lenstore.de assets.lenstore.it assets.lenstore.fr assets.lenstore.es assets.lenstore.ie assets.lenstore.nl assets.lenstore.pt data: assets.braintreegateway.com checkout.paypal.com https://c.clarity.ms https://www.gstatic.com https://integrations.etrusted.com https://www.paypalobjects.com https://cookie-cdn.cookiepro.com https://bat.bing.com https://www.google.com https://www.google.co.uk https://criteo-partners.tremorhub.com/ https://x.bidswitch.net https://cm.g.doubleclick.net/pixel https://ib.adnxs.com/getuid https://r.casalemedia.com/rum https://gum.criteo.com https://id5-sync.com/ https://ad.360yield.com https://contextual.media.net https://exchange.mediavine.com/usersync/push https://jadserve.postrelease.com https://sync.outbrain.com/cookie-sync https://simage2.pubmatic.com/AdServer/Pug https://pixel.rubiconproject.com https://rtb-csync.smartadserver.com https://sync-t1.taboola.com https://criteo-sync.teads.tv https://eb2.3lift.com https://ad.yieldlab.net https://sync.1rx.io https://dis.criteo.com https://sync.targeting.unrulymedia.com https://www.google-analytics.com/collect https://x.klarnacdn.net https://services.postcodeanywhere.co.uk trustedshops.com https://www.googletagmanager.com https://cs.media.net https://*.pubmatic.com https://www.facebook.com https://*.paypal.com https://*.googlesyndication.com https://www.google.ie https://www.google.it https://www.google.de https://www.googleadservices.com https://*.omtrdc.net https://obs.segreencolumn.com https://*.adnxs.com https://*.dmxleo.com; manifest-src 'self'; media-src 'self'; worker-src 'none' blob:; report-uri https://api.lenstore.co.uk/event/csp-report 2
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: tt.omtrdc.net *.akstat.io https://dpm.demdex.net akstat.io *.go-mpulse.net go-mpulse.net *.amazon-adsystem.com amazon-adsystem.com *.amazonaws.com amazonaws.com s3-eu-west-1.amazonaws.com *.bing.com bing.com *.virtualearth.net ssl.ak.dynamic.tiles.virtualearth.net virtualearth.net *.btttag.com btttag.com c212.net cloudflare.com *.decibelinsight.net wss://collection.decibelinsight.net decibelinsight.net g.doubleclick.net *.doubleclick.net doubleclick.net fls.doubleclick.net *.facebook.com *.facebook.net facebook.com facebook.net *.fanplayr.com fanplayr.com *.gigya.com gigya.com *.google.com *.google.de *.google.it *.googlesyndication.com *.gstatic.com *.youtube-nocookie.com google.co.uk google.com google.de google.it googlesyndication.com gstatic.com youtube-nocookie.com googleadservices.com *.googleapis.com googleapis.com *.googletagmanager.com googletagmanager.com *.google-analytics.com google-analytics.com *.jaguar.com jaguar.co.uk jaguar.com *.build.landrover *.jaguarlandrover.com *.landrover.com *.landrover.de *.landrover.it *.pds.jaguarlandrover.com build.landrover jaguarlandrover.com landrover.co.uk landrover.com landrover.de landrover.it pds.jaguarlandrover.com ads.linkedin.com linkedin.com linkedin.oribi.io licdn.com *.lpsnmedia.net lpsnmedia.net *.liadm.com liadm.com *.liveperson.net idp.liveperson.net liveperson.net msg.liveperson.net msghist.liveperson.net v.liveperson.net a.run.app *.thunderhead.com cdn.thunderhead.com thunderhead.com cookielaw.org *.netdirector.auto netdirector.auto onetrust.com *.a.run.app *.ads.linkedin.com *.amplitude.com *.b-cdn.net *.c212.net *.cloudflare.com *.config.landrover.com *.configureconnect.com *.connect.agency *.coreweave.com *.decibel.com *.fls.doubleclick.net *.google.co.uk *.googleadservices.com *.jaguar.co.uk *.jaguarlandroverclassic.com *.jlr-dev.com *.jlr-dev.gorillastreaming.com wss://*.jlr-dev.gorillastreaming.com *.jlr.gorillastreaming.com wss://*.jlr.gorillastreaming.com *.kampyle.com *.landrover.co.uk *.landroverusa.com *.licdn.com *.linkedin.com *.linkedin.oribi.io *.medallia.eu *.my.salesforce.com *.netdirector.co.uk *.omtrdc.net *.onetrust.com *.pinimg.com *.pinterest.com *.podscribe.com *.psyma.com *.rangerover.com *.sandbox.my.salesforce-scrt.com *.sandbox.my.site.com *.sc-static.net *.scene7.com *.securedvisit.com *.sfmc-content.com *.snapchat.com *.sophus3.com *.stripe.com *.sv.rkdms.com *.userlike.com *.web.app *.woosmap.com *.yahoo.co.jp wss://a3pm2e78krufa2-ats.iot.us-west-2.amazonaws.com https://accessories.landrover.prd.itg.co.uk https://aoc.jlr.com https://api.jlr-ddc.com https://api.jlr-dev.gorillarendering.com https://api.jlr.gorillarendering.com https://api.pre-prod.jlr-ddc.com api.pureweb.io https://api.staging.jlr-ddc.com https://api.tomtom.com assets.exatom.io c0.adalyser.com cashoffer.accu-trade.com cdn.cookielaw.org cdn.jsdelivr.net collector-37690.tvsquared.com config.landrover.com cookie-cdn.cookiepro.com d34r8q7sht0t9k.cloudfront.net decibel.com gtm-loadtest.mobify-storefront.com gtm-production.mobify-storefront.com gtm-uat.mobify-storefront.com jlr-360--naptdev1.sandbox.lightning.force.com jlr-360--prepgold.sandbox.lightning.force.com jlr-360.lightning.force.com jlr-360.my.salesforce-scrt.com jlr-360.my.site.com landroverusa.com ldti.syndication.kbb.com leasinglandrover.de lighthouse.edoinc.com wss://lo.msg.liveperson.net loadtest.reserve.landrover.com wss://o5fowqu27k.execute-api.us-west-2.amazonaws.com perseus-consumer-qa.rhcapl.com https://prelive.accessories.landrover.prd.itg.co.uk psyma.com rum.hlx.page https://services.postcodeanywhere.co.uk snippet.maze.co sophus3.com syndication.kbb.com uat.reserve.landrover.com wss://umd.userlike.com userlike.com web.app www.jnaevents.com www.leasinglandrover.de https://www.rsvpdefender.com wss://xbejkea53vcrjoora2bwxpvfha.appsync-realtime-api.us-west-2.amazonaws.com pinimg.com pinterest.com podscribe.com securedvisit.com *.serving-sys.com serving-sys.com sc-static.net snapchat.com stripe.com *.tiktok.com tiktok.com *.adsrvr.org adsrvr.org *.trustarc.com trustarc.com *.twitter.com twitter.com *.ads-twitter.com ads-twitter.com *.t.co t.co sv.rkdms.com *.unpkg.com unpkg.com *.vee24.com vee24.com woosmap.com *.yimg.jp yahoo.co.jp yimg.jp *.youtube.com *.ytimg.com youtube.com ytimg.com https://accessories.landrover.uat.itg.co.uk https://cdn.rudderlabs.com https://cdn.rudderstack.com https://prelive.accessories.landrover.uat.itg.co.uk https://api.rudderlabs.com https://api.rudderstack.com https://jaguarlandgfem.dataplane.rudderstack.com; img-src 'self' data: blob: b-cdn.net; font-src 'self' data: blob: b-cdn.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: b-cdn.net; style-src 'self' 'unsafe-inline' data: blob: b-cdn.net; 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://googleads.g.doubleclick.net https://js.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hsadspixel.net https://js.hscollectedforms.net https://js.hsforms.net https://js.hubspot.com https://js.usemessages.com https://bat.bing.com https://scripts.clarity.ms https://www.clarity.ms https://connect.facebook.net https://snap.licdn.com https://cdn.resonate.com https://maps.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://forms.hsforms.com https://forms-na1.hsforms.com https://perf-na1.hsforms.com https://*.clarity.ms https://*.hubspot.com; frame-src 'self' https://www.youtube.com https://www.facebook.com https://forms.hsforms.com https://maps.google.com; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; report-uri https://csp-report-collector-340111234959.europe-central2.run.app/csp 2
font-src *.fontawesome.com https://fonts.bunny.net www.searchanise.com *.searchserverapi.com *.gstatic.com 'self' data: fonts.gstatic.com *.yotpo.com *.googleapis.com *.cloudflare.com fonts.googleapis.com 'unsafe-inline' data: *.abakhan.co.uk *.woolbox.co.uk *.fabriczone.co.uk data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.searchanise.com *.searchserverapi.com *.twitter.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com www.google.com *.awin1.com *.zenaps.com *.fls.doubleclick.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.meetanshi.com js.mollie.com www.searchanise.com *.searchserverapi.com *.twitter.com www.xtento.com *.googletagmanager.com *.yotpo.com widget.trustpilot.com lpcdn.lpsnmedia.net www.paypalobjects.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com *.awin1.com *.zenaps.com *.wepowerconnections.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com https://firebasestorage.googleapis.com https://meetanshi.com/media/logo.png *.meetanshi.com https://www.mollie.com *.twitter.com *.twimg.com www.google.ru www.searchanise.com *.searchserverapi.com s3.amazonaws.com *.hsforms.net *.hsforms.com 'self' data: www.xtento.com cdn.xtento.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com *.yotpo.com *.cloudflare.com *.mdoq.io *.ibottles.co.uk *.google.com *.google.co.uk *.abakhan.co.uk *.woolbox.co.uk *.fabriczone.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com widget.freshworks.com m2epro.freshdesk.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com *.meetanshi.com js.mollie.com searchanise-ef84.kxcdn.com s3.amazonaws.com ajax.aspnetcdn.com www.searchanise.com *.searchserverapi.com *.searchanise.com api.amplitude.com *.twitter.com *.twimg.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com www.xtento.com cdn.xtento.com *.googletagmanager.com tagmanager.google.com *.yotpo.com *.cloudflare.com *.fontawesome.com *.liveperson.net *.trustpilot.com static.zdassets.com *.abakhan.co.uk *.woolbox.co.uk *.fabriczone.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com widget.freshworks.com m2epro.freshdesk.com unsafe-inline assets.braintreegateway.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net www.searchanise.com *.searchserverapi.com searchanise-ef84.kxcdn.com s3.amazonaws.com *.twitter.com ton.twimg.com *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com *.yotpo.com *.cloudflare.com *.bootstrapcdn.com fonts.googleapis.com *.abakhan.co.uk *.woolbox.co.uk *.fabriczone.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com *.wepowerconnections.com https://the.sciencebehindecommerce.com widget.freshworks.com m2epro.freshdesk.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.ideal-postcodes.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io *.meetanshi.com api.amplitude.com stats.g.doubleclick.net t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.yotpo.com *.cloudflare.com *.abakhan.co.uk *.woolbox.co.uk *.fabriczone.co.uk *.zendesk.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net *.tawk.to www.bedrukken.nl www.logomokken.nl www.stravers.nl www.logomutsen.nl www.logonotitieboekjes.nl www.shirtsbedrukken.nl usb.bedrukken.nl usb.stravers.nl data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.googletagmanager.com/ https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://images.unsplash.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com *.disqus.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://www.mollie.com flagpedia.net https://img.youtube.com https://firebasestorage.googleapis.com maps.gstatic.com www.google.nl tawk.link *.tawk.to s3.amazonaws.com dev.visualwebsiteoptimizer.com www.google.com.bd www.google.be www.google.fr www.google.ch www.google.pl www.google.com.pk pagead2.googlesyndication.com stats.g.doubleclick.net www.google.es www.google.pt mageside.com www.bedrukken.nl www.logomokken.nl www.stravers.nl www.logomutsen.nl www.logonotitieboekjes.nl www.shirtsbedrukken.nl usb.bedrukken.nl usb.stravers.nl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://maps.googleapis.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.disqus.com https://cdn.jsdelivr.net https://*.google.com *.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com maps.googleapis.com *.avada.io *.shopify.com *.tawk.to static.cloudflareinsights.com static.hotjar.com script.hotjar.com d3niuqph2rteir.cloudfront.net dev.visualwebsiteoptimizer.com sc-static.net www.bedrukken.nl www.logomokken.nl www.stravers.nl www.logomutsen.nl www.logonotitieboekjes.nl www.shirtsbedrukken.nl usb.bedrukken.nl usb.stravers.nl 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com https://cdn.jsdelivr.net maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net *.tawk.to embed.tawk.to www.bedrukken.nl www.logomokken.nl www.stravers.nl www.logomutsen.nl www.logonotitieboekjes.nl www.shirtsbedrukken.nl usb.bedrukken.nl usb.stravers.nl 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.tawk.to www.bedrukken.nl www.logomokken.nl www.stravers.nl www.logomutsen.nl www.logonotitieboekjes.nl www.shirtsbedrukken.nl usb.bedrukken.nl usb.stravers.nl 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://maps.googleapis.com https://player.vimeo.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com www.gstatic.com maps.googleapis.com https://get.geojs.io *.avada.io dev.visualwebsiteoptimizer.com www.google.nl pagead2.googlesyndication.com *.tawk.to vc.hotjar.io freeipapi.com api.gostellar.app wss://*.tawk.to www.google.com.bd www.google.be www.google.es www.google.com.pk www.google.hr www.google.pl metrics.hotjar.io stats.g.doubleclick.net www.google.ch www.google.pt www.google.fr www.bedrukken.nl www.logomokken.nl www.stravers.nl www.logomutsen.nl www.logonotitieboekjes.nl www.shirtsbedrukken.nl usb.bedrukken.nl usb.stravers.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src www.bedrukken.nl www.logomokken.nl www.stravers.nl www.logomutsen.nl www.logonotitieboekjes.nl www.shirtsbedrukken.nl usb.bedrukken.nl usb.stravers.nl 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src * 'unsafe-inline' 'unsafe-eval'; style-src 'unsafe-inline'; script-src 'none' 'report-sample'; connect-src 'none'; form-action 'none'; frame-src 'none'; worker-src 'none'; frame-ancestors 'none'; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp.threatview.app/report; 2
object-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src *.certcapture.com https://aws-staging-aeroprecisionusa.smarterspecies.com https://aws-staging-2-aeroprecisionusa.smarterspecies.com/ https://www.aeroprecisionusa.com blob: assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; upgrade-insecure-requests ; frame-ancestors 'self' *.avantlink.com *.certcapture.com *.credova.com www.gstatic.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com *.publicsquare.com 'self'; form-action 'self' https://enews.aeroprecisionusa.com/ geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://plumrocket.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.sitevibes.com sitevibes.com 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/ https://cdn.listrakbi.com https://mediacdn.espssl.com *.adobe.com *.certcapture.com https://maxcdn.bootstrapcdn.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net unsafe-inline assets.braintreegateway.com *.sitevibes.com sitevibes.com 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdn.avmws.com https://cdn.listrakbi.com https://s1.listrakbi.com https://m1.listrakbi.com https://at1.listrakbi.com https://www.google-analytics.com https://www.google.com https://maps.google.com https://maps.googleapis.com https://www.googletagmanager.com https://www.gstatic.com https://jstest.authorize.net https://*.addthis.com https://v1.addthisedge.com https://z.moatads.com https://ssl.avmws.com https://bat.bing.com/bat.js https://js.hs-scripts.com https://js-agent.newrelic.com https://bam.nr-data.net https://player.vimeo.com https://f.vimeocdn.com https://widget-prime.rafflecopter.com https://js.hs-banner.com/ https://v2.zopim.com https://js.hs-analytics.net https://static.zdassets.com https://widget-mediator.zopim.com/ https://bam-cell.nr-data.net/ https://cdn.quantummetric.com https://plugin.credova.com https://tags.clickagy.com https://tags.clickagy.com/  https://widget.gleamjs.io *.upsellit.com https://upsellit.com https://prod.upsellit.com/ https://bl.listrakbi.com https://cdnjs.cloudflare.com/ajax/libs/OwlCarousel2/2.3.4/owl.carousel.min.js https://cdnjs.cloudflare.com/ajax/libs/jquery.inputmask/3.3.1/jquery.inputmask.bundle.js assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page *.certcapture.com https://static.elfsight.com *.credova.com https://js.hs-banner.com https://bat.bing.com https://ekr.zdassets.com https://plugin.credova.com/plugin.min.js https://www.youtube.com *.gettopple.com *.aggle.net cdn.mouseflow.com *.googleapis.com *.gstatic.com *.kaptcha.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://developer.adobe.com https://assets.armanet.us https://magento.com https://cdn.avmws.com/ http://cdn.avmws.com/ *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com *.disqus.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.publicsquare.com *.basistheory.com *.sitevibes.com sitevibes.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; media-src https://static.zdassets.com/ *.adobe.com 'self' 'unsafe-inline'; img-src 'self' https://stats.g.doubleclick.net https://mediacdn.espssl.com https://www.xtento.com/media/images/ https://*.listrakbi.com https://www.google.com https://www.google.com.ua https://store.paradoxlabs.com https://cdn.klarna.com https://tracking.avantlink.com https://bat.bing.com https://bam.nr-data.net https://www.googletagmanager.com https://track.hubspot.com https://v2.zopim.com data: https://maps.gstatic.com https://maps.googleapis.com https://www.google-analytics.com https://pippio.com https://d2df4e9l5rljaz.cloudfront.net https://api.delivrabl.net https://aorta.clickagy.com https://idsync.rlcdn.com https://us-u.openx.net https://cm.g.doubleclick.net https://yotpo-editor-production.s3.amazonaws.com https://aa.agkn.com https://sync.crwdcntrl.net https://pixel-sync.sitescout.com https://d.agkn.com https://region1.google-analytics.com https://v2assets.zopim.io  https://js.gleam.io https://upsellit.com https://prod.upsellit.com/ *.upsellit.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.certcapture.com https://files.elfsightcdn.com https://sca1.listrakbi.com https://img.youtube.com https://via.placeholder.com *.gettopple.com *.googleapis.com *.gstatic.com *.authorize.net assets.secure.checkout.visa.com sandbox.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.publicsquare.com *.sitevibes.com sitevibes.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; frame-src 'self' https://www.full30.com https://s7.addthis.com https://player.vimeo.com https://www.google.com https://widget-prime.rafflecopter.com https://ssl.kaptcha.com https://hemsync.clickagy.com  https://gleam.io https://upsellit.com https://prod.upsellit.com/ *.upsellit.com fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.certcapture.com *.credova.com * https://tst.kaptcha.com www.google.com https://plumrocket.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com *.publicsquare.com *.basistheory.com *.sitevibes.com sitevibes.com www.xtento.com 'self' 'unsafe-inline'; font-src 'self' data: https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com/font-awesome/ https://assets.iglobalstores.com/ https://v2.zopim.com/ https://yotpo-stool.s3.amazonaws.com https://maxcdn.bootstrapcdn.com https://993ecd1fa9.nxcli.io *.googleapis.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net *.sitevibes.com sitevibes.com data: 'self' 'unsafe-inline'; connect-src 'self' https://api2.authorize.net/ https://js.authorize.net https://jstest.authorize.net https://apitest.authorize.net https://m.addthis.com https://bat.bing.com https://bam.nr-data.net/ https://bat.bing.com/ https://ekr.zdassets.com/ https://www.google-analytics.com https://stats.g.double.analytics.js https://assets.iglobalstores.com/ wss://widget-mediator.zopim.com/ https://*.listrak.com/ https://*.listrakbi.com/ https://stats.g.doubleclick.net/ https://bam-cell.nr-data.net/ https://oc.listrakbi.com/coupon https://enews.aeroprecisionusa.com/ https://aeroprecisionsupport.zendesk.com/ https://aeroprecision-app.quantummetric.com/ https://rl.quantummetric.com/ https://region1.google-analytics.com https://aorta.clickagy.com https://hemsync.clickagy.com https://maps.googleapis.com https://vimeo.com https://upsellit.com https://prod.upsellit.com/ *.upsellit.com https://cdn.listrakbi.com https://bl.listrakbi.com dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.certcapture.com https://core.service.elfsight.com *.credova.com https://api2.authorize.net wss://widget-mediator.zopim.com https://onsite-api.listrak.com https://product.listrakbi.com https://stats.g.doubleclick.net https://aeroprecision-app.quantummetric.com https://rl.quantummetric.com https://sandbox-lending-api.credova.com https://lending-api.credova.com *.gettopple.com oirt.aggle.net https://www.stagarms.com *.googleapis.com *.kaptcha.com https://srv.armanet.us https://assets.armanet.us https://developer.adobe.com https://cdn.avmws.com/ http://cdn.avmws.com/ *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.publicsquare.com *.basistheory.com *.launchdarkly.com *.browser-intake-datadoghq.com *.sitevibes.com sitevibes.com 'self' 'unsafe-inline'; default-src 'self' 'self' 'unsafe-inline' 'unsafe-eval'; worker-src 'self'; 2
default-src 'self' *.microvision.com; script-src 'self' 'unsafe-inline' *.jobvite.com *.onlyfy.jobs *.googletagmanager.com 'unsafe-eval' https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com *.vimeo.com www.youtube.com; object-src 'none'; font-src 'self' data:; style-src 'self' 'unsafe-inline'; img-src 'self' *.microvision.com data: *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.com.br *.google.com.my *.google.com.hk *.google.com.ng *.google.com.pk *.google.com.uk *.google.de *.google.it *.google.fr *.google.at *.google.ch *.google.ca *.google.co.ao *.google.co.nz *.google.co.jp *.google.co.in https://www.google.com https://google.com i.ytimg.com; connect-src 'self' *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.com.br *.google.com.my *.google.com.hk *.google.com.ng *.google.com.pk *.google.com.uk *.google.de *.google.it *.google.fr *.google.at *.google.ch *.google.ca *.google.co.ao *.google.co.nz *.google.co.jp *.google.co.in noembed.com; frame-src 'self' *.jobvite.com *.onlyfy.jobs https://bid.g.doubleclick.net https://td.doubleclick.net *.vimeo.com www.youtube.com www.youtube-nocookie.com; report-uri https://sentry.networkteam.com/api/321/security/?sentry_key=86c8eb4a595a42448a455afac3f49ef6 2
frame-src 'self' *.app.baqend.com www.youtube.com www.google.com js.playground.klarna.com js.klarna.com https://checkoutshopper-test.adyen.com https://pay.google.com https://wchat.freshchat.com return.4sellers.de *.webpush.freshchat.com ct.pinterest.com vercel.live *.sovendus.com *.adyen.com gum.criteo.com fledge.eu.criteo.com *.cnstrc.com cnstrc.com graphical-editor.kameleoon.com *.vimeo.com vimeo.com www.googletagmanager.com 2
default-src 'self' blob: data:; connect-src 'self' https://*.analytics.google.com https://graphql.landsbankinn.is https://www.google-analytics.com cdn.landsbankinn.is https://log.landsbankinn.is https://www.google.com https://landsbankinn.boost.ai/ https://googleads.g.doubleclick.net https://region1.google-analytics.com/ https://stats.g.doubleclick.net/ events.mapbox.com https://landsbankinn.cdn.prismic.io/ api.mapbox.com https://a.landsbankinn.is/ https://public-eur.mkt.dynamics.com/ https://assets1-eur.mkt.dynamics.com/; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://connect.facebook.net/ https://www.googletagmanager.com/ https://www.google-analytics.com/ https://landsbankinn.boost.ai https://www.google.com https://www.gstatic.com cdn.landsbankinn.is https://static.cdn.prismic.io blob: data: https://td.doubleclick.net https://graphql.landsbankinn.is https://e.infogram.com/ https://prismic.io/ https://*.jotform.com https://a.landsbankinn.is/ https://formui-usa1.mkt.dynamics.com/; style-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.gstatic.com https://formui-usa1.mkt.dynamics.com/; img-src 'self' blob: data: images.prismic.io https://prismic-io.s3.amazonaws.com/ www.gstatic.com www.google-analytics.com/ api.mapbox.com cdn.landsbankinn.is https://landsbankinn.is/ https://www.googletagmanager.com https://www.facebook.com/tr/ https://www.facebook.com/ https://boost-files-general-eu-west-1-prod.s3-eu-west-1.amazonaws.com/files/LANDSBANKINN/ https://www.google.is/ https://www.google.com/ https://landsbankinn.cdn.prismic.io/ https://assets1-eur.mkt.dynamics.com/; font-src 'self' cdn.landsbankinn.is fonts.gstatic.com https://unpkg.com blob: data:; object-src 'self' https://graphql.landsbankinn.is; base-uri 'self'; form-action 'self' https://graphql.landsbankinn.is https://public-eur.mkt.dynamics.com/; frame-ancestors 'self' cdn.landsbankinn.is; frame-src 'self' https://www.googletagmanager.com/ https://landsbankinn.prismic.io/ cdn.landsbankinn.is https://td.doubleclick.net/ https://landsbankinn.boost.ai https://www.google.com/ https://www.google.is/ https://e.infogram.com/ https://*.jotform.com; style-src-elem https://fonts.googleapis.com 'self' https://unpkg.com 'unsafe-eval' 'unsafe-inline' https://a.landsbankinn.is/ https://formui-usa1.mkt.dynamics.com/; media-src 'self' blob: https://prismic-io.s3.amazonaws.com/landsbankinn/ cdn.landsbankinn.is https://landsbankinn.cdn.prismic.io/; worker-src 'self' blob:; child-src 'self' blob:; script-src-elem 'self' 'unsafe-inline' https://connect.facebook.net/ https://www.googletagmanager.com/ https://www.google-analytics.com/ https://landsbankinn.boost.ai https://www.google.com https://www.gstatic.com cdn.landsbankinn.is https://static.cdn.prismic.io https://td.doubleclick.net https://graphql.landsbankinn.is https://e.infogram.com/ https://prismic.io/ https://*.jotform.com https://a.landsbankinn.is/ https://cdnjs.cloudflare.com/polyfill/v3/polyfill.js https://*.ci.landsbankinn.is https://formui-usa1.mkt.dynamics.com/; manifest-src 'self'; report-to name-of-endpoint; report-uri https://log.landsbankinn.is/api/20/security/?sentry_key=5619b3ff53a764b525920b31d3e32e4a; 2
default-src https: data: 'unsafe-inline' 'unsafe-eval' wss://*.hotjar.com blob: wss://*.hotjar.io blob:; report-uri https://fantastic.report-uri.com/r/d/csp/reportOnly 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.velux.de *.paypalobjects.com *.oney.io *.staging.oney.io *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.jsctool.com *.googleapis.com *.pay1.de *.hotjar.com *.solutect.de *.awin1.com *.sovendus.com *.paypalobjects.com *.taboola.com *.googlesyndication.com zaunplaner.traumgarten.de *.criteo.com *.criteo.net *.doubleclick.net *.googletagmanager.com *.demdex.net *.sovendus-benefits.com *.sovendus-connect.com *.hipay-tpp.com *.hipay.com *.mondu.ai/ *.mondu.local localhost:*/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com https://maps.gstatic.com benz24.de benz24.at benz24.ch benz24.fr *.consentmanager.net *.pay1.de *.consensu.org *.bing.com *.bing.net *.googleapis.com *.google.de *.google.ch *.google.at *.google.fr *.google.nl *.google.be *.google.li *.google.lu *.awin1.com *.bizrate.com *.ladenzeile.de *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.trustedshops.com *.velux.de *.twiago.com *.1rx.io *.adnxs.com *.smartadserver.com *.taboola.com *.360yield.com *.criteo.com *.criteo.net *.unrulymedia.com *.zdassets.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.hipay.com *.oney.io *.staging.oney.io https://firebasestorage.googleapis.com mageside.com *.mondu.ai/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com https://maps.googleapis.com cdnjs.cloudflare.com *.consentmanager.net *.pay1.de *.paypal.com *.ratepay.com *.googleapis.com *.sovendus.com *.googletagmanager.com *.consensu.org *.dwin1.com *.bing.com *.hotjar.com *.cnnx.link *.ladenzeile.de *.solutect.de *.awin1.com *.sciencebehindecommerce.com *.trustedshops.com benz24.de benz24.at benz24.ch benz24.fr *.velux.de chimpstatic.com *.paqato.com *.benz24.app mtm.benz24.de *.taboola.com *.googlesyndication.com *.s24.com *.nextleveldefend.com nextleveldefend.com zaunplaner.traumgarten.de *.criteo.com *.doubleclick.net *.detailsdata7.com *.upsellit.com *.zdassets.com *.zendesk.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.hipay-tpp.com *.hipay.com mpsnare.iesnare.com *.oney.io *.staging.oney.io *.avada.io *.shopify.com *.mondu.ai/widget.js *.mondu.local/widget.js localhost:*/dist/widget.js 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.consensu.org *.velux.de downloads.mailchimp.com *.hipay.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com data: mpsnare.iesnare.com *.googleapis.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com *.ratepay.com *.doubleclick.net *.googleapis.com *.google.de *.bing.com *.bing.net *.hotjar.com *.hotjar.io *.sovendus.com *.sciencebehindecommerce.com *.trustedshops.com *.etrusted.com *.velux.de *.benz24.app mtm.benz24.de *.taboola.com *.googlesyndication.com zaunplaner.traumgarten.de *.nextleveldefend.com nextleveldefend.com *.criteo.com googleapis.com *.googletagmanager.com *.zdassets.com *.zendesk.com pod-18-sunco-ws.zendesk.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.hipay-tpp.com *.hipay.com wss://mpsnare.iesnare.com *.oney.io *.staging.oney.io https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.audioeye.com akstat.io *.akstat.io cookielaw.org cdn.cookielaw.org *.google-analytics.com *.quantummetric.com quantummetric.com *.typekit.net www.googletagmanager.com tapestry.com *.tapestry.com tapestry.support *.licdn.com *.jwplatform.com *.jwpcdn.com cdn.jwplayer.com prd.jwpltx.com *.jwpsrv.com jsdelivr.net *.jsdelivr.net *.newrelic.com *-tapestry-news.pantheonsite.io cdnjs.cloudflare.com fonts.googleapis.com secure.gravatar.com px.ads.linkedin.com cdn.linkedin.oribi.io p.adsymptotic.com tapestry.gcs-web.com opensupplyhub.org *.akamaihd.net go-mpulse.net *.go-mpulse.net geolocation.onetrust.com stats.g.doubleclick.net fonts.gstatic.com data: blob:; 2
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://plausible.io https://www.googleadservices.com https://googleads.g.doubleclick.net https://c.seznam.cz https://ssp.seznam.cz https://h.seznam.cz; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://plausible.io https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com https://consentcdn.cookiebot.com https://api.coingecko.com https://c.seznam.cz https://ssp.seznam.cz; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://td.doubleclick.net https://consentcdn.cookiebot.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com *.googleapis.com cdn.jsdelivr.net *.cloudflare.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.amazon.de *.bing.com *.clarity.ms *.protectgroup.com *.theticketmerchant.com.au *.cfjump.com *.gstatic.com *.stripe.com *.cloudflare.com *.signifyd.com *.affyi.com *.fishrobotflower.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.gstatic.com *.trustedshops.com *.etrusted.com *.amazon.de *.payments-amazon.de *.bing.com *.clarity.ms *.protectgroup.com *.theticketmerchant.com.au *.cfjump.com *.trustpilot.com *.aptrinsic.com *.stripe.com *.cloudflare.com *.signifyd.com *.affyi.com *.fishrobotflower.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com *.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.google.com *.google.lv *.googletagmanager.com stats.g.doubleclick.net *.trustedshops.com *.etrusted.com *.amazon.de d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.de *.media-amazon.de *.bing.com *.clarity.ms *.protectgroup.com *.theticketmerchant.com.au *.cfjump.com *.roeye.com *.stripe.com *.cloudflare.com *.signifyd.com *.brilliantlocco.com *.esnlocco.com *.affyi.com *.fishrobotflower.com https://firebasestorage.googleapis.com https://meetanshi.com/media/logo.png flagpedia.net t.zip.co static.zip.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net *.fontawesome.com *.googleapis.com *.gstatic.com s7.addthis.com chimpstatic.com *.googletagmanager.com *.zip.co *.sandbox.zip.co *.trustedshops.com *.etrusted.com *.amazon.de *.payments-amazon.de *.bing.com *.doubleclick.net *.clarity.ms *.protectgroup.com *.theticketmerchant.com.au *.cfjump.com *.trustpilot.com *.chimpstatic.com *.aptrinsic.com *.roeyecdn.com *.cloudflareinsights.com *.stripe.com *.cloudflare.com *.signifyd.com *.brilliantlocco.com *.esnlocco.com *.theticketmerchant.co.nz *.affyi.com *.fishrobotflower.com thanks.is *.avada.io *.shopify.com maps.googleapis.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com static.zip.co zip.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com assets.braintreegateway.com *.fontawesome.com tagmanager.google.com cdn.jsdelivr.net *.aptrinsic.com *.stripe.com *.cloudflare.com *.signifyd.com *.affyi.com *.fishrobotflower.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com analytics.google.com *.facebook.net ekr.zdassets.com/ dpe0djwch8671.cloudfront.net *.sandbox.zip.co *.zip.co *.gstatic.com stats.g.doubleclick.net *.trustedshops.com *.etrusted.com *.amazon.de mws.amazonservices.de *.bing.com *.clarity.ms *.protectgroup.com *.theticketmerchant.com.au *.cfjump.com *.zipmoney.com.au *.amazon.fr *.amazon.es *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es cdn.ampproject.org *.edge.zip.co *.aptrinsic.com *.stripe.com *.cloudflare.com *.signifyd.com *.brilliantlocco.com *.esnlocco.com *.affyi.com *.fishrobotflower.com https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.youtube.com www.youtube-nocookie.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' api-adresse.data.gouv.fr nominatim.openstreetmap.org; frame-src 'self' www.youtube.com www.youtube-nocookie.com player.vimeo.com *.google.com *.google.fr; form-action 'self'; frame-ancestors 'self' 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.fontawesome.com 'self' data: *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.addthis.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.facebook.com *.decta.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com maps.google.com maps.googleapis.com maps.gstatic.com https://images.unsplash.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.doubleclick.net https://maps.omnivasiunta.lt *.hsforms.net *.hsforms.com 'self' data: *.facebook.com *.facebook.net *.googletagmanager.com *.google.lv *.salidzini.lv *.ceno.lv *.kurpirkt.lv *.googleusercontent.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.commerce-payment-services.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com maps.google.com maps.googleapis.com s7.addthis.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.gstatic.com *.googletagmanager.com *.doubleclick.net https://unpkg.com *.hsforms.net *.hsforms.com *.facebook.com *.facebook.net infimv.com *.stripe.com *.decta.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://cdn.jsdelivr.net *.googleapis.com *.googletagmanager.com *.fontawesome.com *.gstatic.com *.tawk.to 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com maps.googleapis.com ekr.zdassets.com/ *.google-analytics.com *.doubleclick.net *.googlesyndication.com https://geocode.arcgis.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.facebook.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.zopim.com *.zopim.io *.jivosite.com *.netcore.co.in/ *.hansel.io/ *.netcoresmartech.com https://local.netcoresmartech.com:3000 *.boxx.ai *.netcorein.com *.netcore.co.in https://fonts.bunny.net data: checkout.tabby.ai widgets.tabby.ai cdn.tabby.ai fonts.googleapis.com storage.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.postpay.io https://www.youtube.com http://www.sandbox.paypal.com www.paypal.com *.twitter.com checkout.tabby.ai 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.postpay.io *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.bing.com *.zopim.com *.zopim.io *.doubleclick.net *.google.com *.google.co.in *.ftcdn.net *.behance.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.jivosite.com *.cdninstagram.com https://firebasestorage.googleapis.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com checkout.tabby.ai widgets.tabby.ai cdn.tabby.ai fonts.googleapis.com storage.googleapis.com *.tamara.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page maps.googleapis.com chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.postpay.io *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bing.com *.zopim.com *.zdassets.com www.google.com *.payments-amazon.com *.jivosite.com *.netcore.co.in/ *.hansel.io/ *.netcoresmartech.com *.boxx.ai *.netcorein.com *.netcore.co.in *.avada.io *.shopify.com *.disqus.com player.vimeo.com checkout.tabby.ai widgets.tabby.ai cdn.segment.com connect.facebook.net cdn.sift.com score.jcsc.online seondf.com deviceinf.com getdeviceinf.com *.tamara.co https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.fontawesome.com *.postpay.io *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.vimeocdn.com *.jivosite.com *.netcore.co.in/ *.hansel.io/ *.netcoresmartech.com *.boxx.ai *.netcorein.com *.netcore.co.in https://fonts.bunny.net *.tamara.co 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zopim.com *.zopim.io *.jivosite.com *.tamara.co 'self' 'unsafe-inline'; manifest-src *.netcore.co.in/ *.hansel.io/ *.netcoresmartech.com *.boxx.ai *.netcorein.com *.netcore.co.in 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com *.postpay.io www.google-analytics.com *.cloudflare.com *.twitter.com *.twimg.com *.zdassets.com *.zopim.com *.zopim.io wss://widget-mediator.zopim.com https://stats.g.doubleclick.net *.amazon.com *.amazon.co.jp *.amazon.co.uk *.amazon.jp *.jivosite.com *.netcore.co.in/ *.hansel.io/ *.netcoresmartech.com *.boxx.ai *.netcorein.com *.netcore.co.in https://get.geojs.io *.avada.io checkout.tabby.ai widgets.tabby.ai cdn.segment.com api.segment.com api.segment.io api.amplitude.com *.seondfresolver.com *.deviceinfresolver.com *.getdeviceinfresolver.com *.tamara.co 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.seondnsresolve.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src https: data: wss: blob: 'unsafe-inline' 'unsafe-eval'; report-uri /csp-violation-report.php 2
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com maxcdn.bootstrapcdn.com *.cloudflare.com *.google.com *.google.nl *.google.at *.google.de *.google.be *.google.it *.google.fr *.dhlparcel.nl *.klaviyo.com *.typekit.net *.bing.com *.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.langshop.io www.google.com *.google.com *.doubleclick.net *.facebook.com data.henkterhorst.nl js.mollie.com *.google.nl *.google.at *.google.de *.google.be *.google.fr *.google.it www.googletagmanager.com *.trustpilot.com *.pinterest.com *.criteo.com *.criteo.net *.cookiebot.com https://squeezely.tech *.sendcloud.sc *.jsdelivr.net *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com retail.googleapis.com henkterhorst.nl *.henkterhorst.nl henkterhorst.de *.henkterhorst.de *.henkterhorst.dk brinks-media.com *.bidswitch.net *.adnxs.com *.smartadserver.com *.taboola.com *.1rx.io *.yieldmo.com *.omnitagjs.com *.casalemedia.com id5-sync.com *.360yield.com *.ivitrack.com *.media.net *.mediavine.com *.postrelease.com *.outbrain.com *.pubmatic.com *.rubiconproject.com *.sharethrough.com *.teads.tv *.tremorhub.com *.3lift.com *.yieldlab.net *.emxdgt.com *.adform.net *.twiago.com *.dmxleo.com *.unrulymedia.com *.eyeota.net *.agkn.com *.clarity.ms *.squeezely.tech *.spotlersearch.com *.sooqr.com https://www.magezon.com https://www.mollie.com *.mailcampaigns.nl/ *.linkedin.com *.pinterest.com *.google.com.ua *.google.de *.google.nl *.google.at *.google.be *.google.fr *.google.it *.twitter.com *.yahoo.com *.webwinkelkeur.nl *.cookiebot.com *.criteo.com *.criteo.net *.bing.com *.cloudflare.com *.jmango360.com *.amazonaws.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.gstatic.com robincontentdesktop.blob.core.windows.net *.pagesense.io *.adnxs.com *.faslet.net blob: data.henkterhorst.nl spotlersearchanalytics.com *.spotlersearch.com *.spotlersearchanalytics.com *.avada.io js.mollie.com *.google.nl *.google.at *.google.de *.google.be *.google.it *.google.fr *.paypal.com chimpstatic.com *.newrelic.com *.cloudflare.com *.criteo.net *.robinhq.com *.mailcampaigns.nl *.cloudflareinsights.com *.hotjar.com *.trustpilot.com *.dhlparcel.nl *.nr-data.net *.criteo.com *.cookiebot.com *.bing.com *.msecnd.net *.pinterest.com *.clarity.ms *.pinimg.com *.licdn.com *.sooqr.com https://squeezely.tech *.billygrace.com *.sendcloud.sc *.jsdelivr.net www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.spotlersearch.com *.fontawesome.com maxcdn.bootstrapcdn.com *.cloudflare.com *.mailcampaigns.nl *.google.com *.google.nl *.google.at *.google.de *.google.be *.google.it *.google.fr *.dhlparcel.nl *.typekit.net *.klaviyo.com *.bing.com *.sooqr.com https://unpkg.com *.bootstrapcdn.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com henkterhorst.nl *.henkterhorst.nl *.google.com *.google.nl *.google.at *.google.de *.google.be *.google.it *.google.fr 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.faslet.net *.henkterhorst.nl *.zoho.eu *.googlesyndication.com *.spotlersearch.com https://get.geojs.io *.avada.io *.nr-data.net *.newrelic.com *.mailcampaigns.nl *.visualstudio.com *.pinterest.com google.com *.google.nl *.google.at *.google.de *.google.be *.google.it *.google.fr *.bing.com *.linkedin.com *.hotjar.com *.hotjar.io *.trustpilot.com *.doubleclick.net *.googletagmanager.com wss://ws.hotjar.com/ *.criteo.com *.criteo.net *.cookiebot.com *.clarity.ms *.amazonaws.com https://squeezely.tech *.jsdelivr.net *.billypx.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://*.googletagmanager.com https://*.google-analytics.com https://cdn.segment.com https://*.segment.io https://copilotplatforms.chilipiper.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://images.ctfassets.net https://storage.ghost.io https://images.unsplash.com https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.google-analytics.com https://*.googletagmanager.com https://cdn.segment.com https://api.segment.io https://*.customer.io https://copilotplatforms.chilipiper.com https://graphql.contentful.com https://storage.ghost.io; frame-src 'self' https://www.youtube.com https://copilotplatforms.chilipiper.com; media-src 'self' data:; object-src 'none'; base-uri 'self'; form-action 'self' https://copilotplatforms.chilipiper.com; frame-ancestors 'none' 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.facebook.com https://firebasestorage.googleapis.com *.sooqr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com ts.tradetracker.net www.magmodules.eu assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googletagmanager.com *.facebook.net www.termsfeed.com *.avada.io *.sooqr.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com tm.tradetracker.net *.trustpilot.com https://static.spotlersearch.com/sooqr.js 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net *.sooqr.com assets.braintreegateway.com *.trustpilot.com https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.google-analytics.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.pay.nl 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://voormijndier.nl/paynl/csp/report; report-to report-endpoint; 2
font-src https://www.gstatic.com https://fonts.gstatic.com *.alothemes.com *.magepow.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com thpg.euvideocdn.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com challenges.cloudflare.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.thpg.de https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com *.alothemes.com *.magepow.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com stats.thpg.de *.sibforms.com sibforms.com *.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.alothemes.com *.magepow.com challenges.cloudflare.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.alothemes.com *.magepow.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com thpg.euvideocdn.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com stats.thpg.de eu-api.friendlycaptcha.eu *.sibforms.com sibforms.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.alothemes.com *.magepow.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com https://*.customily.com https://*.amazonaws.com https://*.mapbox.com 'self' data: *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.hostedpayments.com *.demdex.net *.hubspot.com *.hsforms.com *.hsforms.net wave-utility-stage.azurewebsites.net wave-utility.azurewebsites.net https://wavedealerapp.azurewebsites.net https://wavedealerapp-stage.azurewebsites.net https://wavedealerapp-live.azurewebsites.net https://voodoo-tacos-utility-b7e6d5cfeeedajg7.southcentralus-01.azurewebsites.net https://voodoo-tacos-utility-staging-hwascfctf8edg2g4.southcentralus-01.azurewebsites.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://*.customily.com https://*.amazonaws.com https://*.mapbox.com 'self' data: *.uber.com *.ubereats.com maps.gstatic.com *.newrelic.com *.nr-data.net *.google.com *.linkedin.com *.salsify.com *.hubspot.com *.hsforms.com i.vimeocdn.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page https://*.customily.com https://*.amazonaws.com https://*.mapbox.com maps.googleapis.com unpkg.com *.unpkg.com *.googletagmanager.com *.google-analytics.com *.doubleclick.net *.salsify.com *.hubspot.com *.hsforms.com *.hsforms.net *.hs-scripts.com *.hscollectedforms.net *.hs-analytics.net *.hs-banner.com *.hsadspixel.net *.hubspotfeedback.com *.licdn.com *.usemessages.com api.ipify.org *.elfsight.com f.vimeocdn.com www.gstatic.com magento-recs-sdk.adobe.net *.hotjar.com *.jsdelivr.net *.cloudflare.com *.cloudflareinsights.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https://*.mapbox.com *.fontawesome.com maxcdn.bootstrapcdn.com f.vimeocdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.newrelic.com *.nr-data.net *.google.com *.salsify.com *.hubspot.com *.hsforms.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://*.customily.com https://*.amazonaws.com https://*.mapbox.com 'self' data: maps.googleapis.com unpkg.com *.unpkg.com *.googletagmanager.com *.doubleclick.net *.googleapis.com *.salsify.com *.linkedin.com *.hubspot.com *.hsforms.com *.hubapi.com *.hscollectedforms.net *.elfsight.com *.cloudflare.com *.cloudflareinsights.com *.hsappstatic.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src fresnel-events.vimeocdn.com player-telemetry.vimeo.com commerce.adobedc.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com *.chase.hostedpaymentservice.net *.chase-var.hostedpaymentservice.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com google.com *.braintreegateway.com *.paypal.com *.google.com *.certcapture.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com *.chase.hostedpaymentservice.net *.chase-var.hostedpaymentservice.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net youtu.be *.nr-data.net 'self' 'unsafe-inline'; img-src *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.certcapture.com *.trackedlink.net https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com *.yahoo.com *.bing.com *.facebook.com mossmotors.com *.mossmotors.com services.postcodeanywhere.co.uk www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.certcapture.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.hotjar.com *.facebook.net *.bing.com *.murdoog.com *.pcapredict.com *.jsdelivr.net *.yimg.com *.maxmind.com services.postcodeanywhere.co.uk *.cloudfront.net *info.mossmotors.com form.jotform.com *.freshrelevance.com *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com *.chase.hostedpaymentservice.net *.chase-var.hostedpaymentservice.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.gstatic.com dmp.info.mossmotors.com dmp.info.mossmiata.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.pcapredict.com services.postcodeanywhere.co.uk assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.certcapture.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.yimg.com *.doubleclick.net *.adobedtm.com *.mmapiws.com *.cloudfront.net connect.facebook.net *.facebook.com *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com *.chase.hostedpaymentservice.net *.chase-var.hostedpaymentservice.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app dmp.info.mossmotors.com dmp.info.mossmiata.com *.dycdn.net *.freshrelevance.com wss://am.freshrelevance.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'unsafe-inline' 'unsafe-eval' 'self' data: wss: https: blob: 2
font-src x.klarnacdn.net static.lipscore.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: https://widgets.trustedshops.com *.cloudflare.com *.googleapis.com *.jsdelivr.net *.klarnacdn.net *.office.net *.typekit.net data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action *.facebook.com *.perfectview.nl *.sovendus.com *.visualwebsiteoptimizer.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors *.mediacliphub.com *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ advisor.bluebarry.ai osm.klarnaservices.com e.topdoek.nl sst.topdoek.nl sst.goedkooptuindoek.nl *.prismic.io sst.kitchenyeah.de sst.kitchenyeah.nl sst.kitchenyeah.fr sst.fotocadeau.nl ct.pinterest.com googletagmanager.com td.doubleclick.net *.multisafepay.com https://pay.google.com *.ad4m.at *.awin1.com deliverimages.com *.facebook.com *.formcrafts.com *.fotocadeau.nl *.google.com *.googlesyndication.com *.googletagmanager.com *.klarna.com *.mediacliphub.com *.noboringsuitcases.com *.opendns.com *.pinterest.com *.sleak.chat *.sovendus-connect.com *.trustedshops.com *.visualwebsiteoptimizer.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com bat.bing.com *.cdn.prismic.io www.facebook.com www.google.nl *.appspot.com images.prismic.io storage.googleapis.com raw.githubusercontent.com *.taggrs.io *.prism.app-us1.com *.prismic.io static.lipscore.com blob: img.youtube.com *.multisafepay.com *.hsforms.net *.hsforms.com 'self' data: https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com *.awin1.com *.bing.com *.bing.net bucket-ip-website.s3.eu-central-1.amazonaws.com *.clarity.ms deliverimages.com *.deliverimages.com *.doubleclick.net *.facebook.com *.facebook.net *.fotocadeau.nl *.googleadservices.com *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bi www.google.bj www.google.bs www.google.by www.google.ca www.google.cd www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.af www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bo www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gg www.google.gm www.google.gr www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.mv www.google.mw www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.sr www.google.tg www.google.tn www.google.tt *.google.com google.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hscollectedforms.net *.hubspot.com *.klarnacdn.net *.klarnaevt.com *.linkedin.com *.lipscore.com *.mediacliphub.com noboringsuitcases.com *.noboringsuitcases.com *.perfectview.nl *.pinterest.com prismic-io.s3.amazonaws.com *.roeye.com *.sleak.chat *.tiktok.com *.tiktokw.us *.trustedshops.com *.visualwebsiteoptimizer.com *.webflow.com *.wepowerconnections.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ advisor.bluebarry.ai cdn.bluebarry.ai js.klarna.com js.klarnaservices.com bat.bing.com ct.pinterest.com d5yoctgpv4cpx.cloudfront.net connect.facebook.net magento.fcdev metrics.fotoopaluminium.nl metrics.self s.pinimg.com *.appspot.com stapecdn.com static.cdn.prismic.io static.hotjar.com static.mediacliphub.com widgets.trustedshops.com www.clarity.ms *.taggrs.io *.prism.app-us1.com *.prismic.io https://widget-acc.paazl.com https://api-acc.paazl.com/ static.lipscore.com *.multisafepay.com https://pay.google.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://browser.sentry-cdn.com *.awin1.com *.bing.com bluebarrycdn.blob.core.windows.net *.clarity.ms *.deployteq-cdp.net *.doubleclick.net *.dwin1.com *.facebook.com *.facebook.net *.formcrafts.com *.googleapis.com translate.google.com.hk *.googlesyndication.com *.googletagmanager.com *.hotjar.com *.hsadspixel.net *.hs-analytics.net *.hs-banner.com *.hscollectedforms.net *.hs-scripts.com *.hubspot.com *.jsdelivr.net *.klarna.com *.leadinfo.net *.licdn.com *.lipscore.com *.mediacliphub.com *.noboringsuitcases.com *.pinimg.com *.pinterest.com prismic.io *.roeyecdn.com *.sleak.chat *.sovendus.com *.tiktok.com *.trustedshops.com *.visualwebsiteoptimizer.com *.zdassets.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com x.klarnacdn.net integrations.etrusted.com https://widget-acc.paazl.com https://api-acc.paazl.com/ static.lipscore.com maxcdn.bootstrapcdn.com *.multisafepay.com *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.cloudflare.com *.googletagmanager.com *.klarnacdn.net *.lipscore.com *.sleak.chat *.typekit.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src deliverimages.com *.fotocadeau.nl *.googleapis.com *.mediacliphub.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; media-src *.adobe.com deliverimages.com *.fotocadeau.nl *.googleapis.com *.gstatic.com noboringsuitcases.com *.noboringsuitcases.com *.prismic.io 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net data.bluebarry.ai advisor.bluebarry.ai js.klarnaservices.com js.klarna.com na.klarnaevt.com sst.goedkooptuindoek.nl *.clarity.ms *.appspot.com ct.pinterest.com dc.services.visualstudio.com js.monitor.azure.com region1.analytics.google.com *.sentry.io *.prism.app-us1.com *.prismic.io https://widget-acc.paazl.com https://api-acc.paazl.com/ wapi.lipscore.com users.lipscore.com *.multisafepay.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site o307176.ingest.us.sentry.io *.algolia.io *.algolia.net *.algolianet.com *.azure.com *.bing.com *.bing.net deliverimages.com *.deployteq-cdp.net *.doubleclick.net *.facebook.com *.facebook.net *.fotoophout.nl *.googleadservices.com *.googleapis.com www.google.be www.google.de www.google.fr www.google.nl google.com *.google.com *.googlesyndication.com *.gstatic.com *.hotjar.com *.hotjar.io *.hscollectedforms.net *.hubapi.com *.klarnacdn.net *.klarna.com *.klarnaevt.com *.leadinfo.com *.leadinfo.net *.linkedin.com *.lipscore.com *.make.com *.mediacliphub.com *.noboringsuitcases.com p2iqhncxyh.execute-api.eu-central-1.amazonaws.com *.pinterest.com polyfilljs.org *.sleak.chat *.sovendus.com *.taggrs.io *.tiktok.com *.tiktokw.us *.visualwebsiteoptimizer.com *.wepowerconnections.com *.zdassets.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.mediacliphub.com *.appspot.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.leadinfo.com *.lipscore.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; report-uri https://0857a1ae-eb26-4f26-b573-76e7e6a78da5.sansec.watch/; report-to report-endpoint; 2
font-src fonts.gstatic.com use.typekit.net *.cloudfront.net *.klaviyo.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net https://*.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.googletagmanager.com widgets.sandbox.afterpay.com widgets.sandbox.clearpay.co.uk www.google.com https://*.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.braintreegateway.com *.google.com *.doubleclick.net *.shophumm.com.au *.criteo.com *.hotjar.com *.adsrvr.org *.freshchat.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.wesupply.xyz https://wesupplylabs.com guarantee-cdn.com *.weltpixel.com *.googletagmanager.com *.typeform.com www.xtento.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com https://img.youtube.com validator.swagger.io https://static.afterpay.com https://site-assets.afterpay.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klevu.com *.cloudflare.com https://cdn.klarna.com *.paypal.com *.afterpay.com *.cloudfront.net https://*.paypal.com *.nextopia.net https://*.zipmoney.com.au *.data-dynamic.net images.latitudepayapps.com *.godfreys.com.au *.feefo.com *.google.com *.google.com.au *.googletagmanager.com.au *.googletagmanager.com *.gstatic.com *.googleapis.com *.bing.com *.criteo.com *.bluekai.com *.socdm.com *.krxd.net *.pubmatic.com *.outbrain.com *.mediavine.com *.aralego.com *.aralego.net *.smaato.net *.clmbtech.com *.yieldmo.com *.emxdgt.com *.doubleclick.net *.bidswitch.net *.adnxs.com *.media.net *.rubiconproject.com *.sharethrough.com *.smartadserver.com *.taboola.com *.teads.tv *.yahoo.com *.casalemedia.com *.dable.io *.adingo.jp *.stickyadstv.com *.rlcdn.com *.3lift.com *.360yield.com *.mytopia.com.au *.clarity.ms *.edisons.com.au *.google.co.in *.1rx.io sync.targeting.unrulymedia.com aa.agkn.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com guarantee-cdn.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.google-analytics.com www.xtento.com cdn.xtento.com t.zip.co static.zipmoney.com.au static.zip.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-ds.com https://rum.hlx.page https://portal.sandbox.clearpay.co.uk https://portal.clearpay.co.uk https://portal.sandbox.afterpay.com https://portal.afterpay.com https://static.afterpay.com https://js.sandbox.afterpay.com https://js.afterpay.com polyfill.io www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.facebook.net connect.facebook.net graph.facebook.com business.facebook.com app.alhena.ai *.forter.com *.cloudfront.net *.openpay.com.au https://js-agent.newrelic.com https://oc-library.playground.klarnaservices.com/lib.js *.bing.com *.criteo.com *.mytopia.com.au *.google.com *.googleoptimize.com *.cfjump.com *.freshchat.com *.zip.co *.clarity.ms *.hotjar.com *.edisons.com.au commerce.adobe.io cdn.jsdelivr.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com *.cloudflare.com guarantee-cdn.com *.googletagmanager.com *.googleadservices.com *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com www.xtento.com cdn.xtento.com static.zipmoney.com.au static.zip.co zip.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com static.afterpay.com/ js.sandbox.afterpay.com js.afterpay.com https://static.klaviyo.com cdn.jsdelivr.net https://js.klevu.com/klevu-css/* *.klevu.com *.cloudflare.com *.bootstrapcdn.com *.fontawesome.com *.googleapis.com *.ecomm-nav.com https://*.zipmoney.com.au *.nextopiasoftware.com https://*.facebook.com https://*.safelinks.protection.outlook.com/ *.zdassets.com *.barilliance.com *.barilliance.net *.newrelic.com *.nr-data.net data: https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://use.typekit.net https://p.typekit.net *.nextopia.net *.cloudfront.net *.freshchat.com unsafe-inline assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io commerce.adobe.net qa-api.magedevteam.com *.sentry.io static.afterpay.com static.sandbox.afterpay.com js.sandbox.afterpay.com js.afterpay.com *.algolia.net *.algolia.io *.algolianet.com *.insights.algolia.io insights.algolia.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com app.alhena.ai *.cloudfront.net *.forter.com *.zipmoney.com.au *.zip.co *.criteo.com *.googlesyndication.com *.googleapis.com *.afterpay.com https://ipapi.co/json/ *.clarity.ms *.hotjar.com *.bugsnag.com millsbrands.app.n8n.cloud siteperformancetest.net *.siteperformancetest.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com maps.googleapis.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self' https://*.securetrustbank.com https://*.v12retailfinance.com https://*.googletagmanager.com;; connect-src 'self' https://*.securetrustbank.com https://*.v12retailfinance.com https://stats.g.doubleclick.net https://*.google-analytics.com https://cdn.cookielaw.org https://*.feefo.com https://*.trustpilot.com https://*.civiccomputing.com;; img-src 'self' https://*.securetrustbank.com https://*.v12retailfinance.com data: https://*.google-analytics.com https://*.google.com https://*.google.co.uk https://siteimproveanalytics.com https://*.siteimproveanalytics.com https://*.siteimproveanalytics.io https://*.feefo.com https://*.trustpilot.com;; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.securetrustbank.com https://*.v12retailfinance.com https://*.googletagmanager.com https://static.srcspot.com https://cdn.cookielaw.org https://*.google-analytics.com https://siteimproveanalytics.com https://*.siteimproveanalytics.com https://code.jquery.com https://*.feefo.com; https://*.trustpilot.com;; style-src 'self' 'unsafe-inline' https://*.securetrustbank.com https://*.v12retailfinance.com https://siteimproveanalytics.com https://*.siteimproveanalytics.com https://*.feefo.com https://*.trustpilot.com;; font-src 'self' https://*.securetrustbank.com https://*.v12retailfinance.com https://*.trustpilot.com;; frame-src 'self' https://*.securetrustbank.com https://*.v12retailfinance.com https://*.youtube-nocookie.com https://*.trustpilot.com;; frame-ancestors 'self' 2
font-src fonts.gstatic.com use.typekit.net data: *.fontawesome.com *.gstatic.com 'self' data: *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://www.facebook.com/tr/ *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.bebemundo.com.do *.jugueton.com.do *.zdassets.com *.hotjar.com 'self'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de cdn.dnky.co amc.demdex.net www.google.com www.facebook.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com https://www.hotjar.com https://static.hotjar.com https://script.hotjar.com https://www.facebook.com/tr/ *.youtube.com *.yotpo.com *.doubleclick.net *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: p.typekit.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de maps.gstatic.com maps.googleapis.com accounts.google.com www.google.com www.facebook.com https://googleads.g.doubleclick.net www.google.com.ar www.google.com.do https://www.googletagmanager.com https://www.m.casacuesta.com *.youtube.com https://connect.facebook.net https://notifications-icommkt.website *.yotpo.com *.notifications-icommkt.com *.simpleanalyticscdn.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net amazonclode.com commerce.adobedtm.com www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net www.sandbox.paypal.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com video.google.com vimeo.com www.vimeo.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de cdn.dnky.co r1-t.trackedlink.net www.gstatic.com js-agent.newrelic.com bam.nr-data.net maps.googleapis.com connect.facebook.net *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com *.avada.io *.google.com *.gstatic.com https://www.hotjar.com https://static.hotjar.com https://script.hotjar.com https://www.google-analytics.com https://stats.g.doubleclick.net http://www.google.com/recaptcha/api.js https://d12zyq17vm1xwx.cloudfront.net/v2/wpn.min.js https://static.cloudflareinsights.com/ https://www.gstatic.com/recaptcha/releases/tFhBvPrftr7Y91fo1S1ASkA6/recaptcha__es.js https://externalassets.icommarketing.com/icomMkt_tracking_jquery.min.js *.youtube.com https://static.zdassets.com ekr.zdassets.com *.yotpo.com *.icommkt.online *.googlesyndication.com *.clarity.ms *.google.com/g/collect? 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com getfirebug.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com *.googleapis.com *.gstatic.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src https://static.zdassets.com *.youtube.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net amazonclode.com api.magento.com commerce.adobe.io commerce.adobedtm.com commerce.adobedc.net *.adobe.io performance.typekit.net commerce.adobe.net qa-api.magedevteam.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de api.comapi.com bam.nr-data.net *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com *.google-analytics.com https://www.hotjar.com https://script.hotjar.com https://analytics.google.com https://stats.g.doubleclick.net https://www.facebook.com/tr/ http://ccnecommerce.com/ https://notifications-icommkt.com/ https://track-icommkt.com/ wss://widget-mediator.zopim.com/ *.youtube.com https://static.zdassets.com ekr.zdassets.com jugueton.zendesk.com bebemundord.zendesk.com casacuesta.zendesk.com *.googletagmanager.com *.yotpo.com *.googleapis.com *.zdassets.com/web_widget/classic/latest/web-widget-main-cedca96.js *.hotjar.com *.adobe.com *.doubleclick.net *.google.com/g/collect? 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https:; connect-src 'self' https:; frame-ancestors 'none'; object-src 'none'; report-to csp-endpoint; report-uri https://www.marken.com/api/csp-report 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com *.klarnacdn.net https://fonts.bunny.net maxcdn.bootstrapcdn.com https://fonts.gstatic.com *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com *.tawk.to 'self' 'unsafe-inline'; frame-ancestors *.reviews.co.uk *.reviews.io pingdom.com widget.reviews.co.uk http://*.pingdom.com https://*.pingdom.com https://widget.reviews.co.uk/ https://gbwatchshop.com https://*.gbwatchshop.com http://gbwatchshop.com http://*.gbwatchshop.com localhost:* 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.facebook.com https://vars.hotjar.com/ https://widget.reviews.co.uk/ *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://plumrocket.com *.tawk.to 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com www.apptrian.com http://gbwatch.weboven.online/* https://gbwatchshop.com https://gbwatchshop.com/* *.klarna.com *.klarnaevt.com *.klarnacdn.net https://firebasestorage.googleapis.com flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://plumrocket.com https://cache.addthiscdn.com/ *.tawk.to cdn.jsdelivr.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com www.apptrian.com widget.freshworks.com m2epro.freshdesk.com https://widget.reviews.co.uk/rich-snippet-reviews-widgets/dist.js https://static.hotjar.com/c/hotjar-1268630.js https://script.hotjar.com/modules.ea0a6d6a741d5de8308e.js https://script.hotjar.com/* js.braintreegateway.com assets.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com *.paypal.com *.tawk.to cdn.jsdelivr.net client-analytics.sandbox.braintreegateway.com api.braintreegateway.com c.paypal.com pay.google.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.avada.io songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com *.klarnacdn.net https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com https://fonts.googleapis.com *.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.google-analytics.com *.facebook.com *.facebook.net www.apptrian.com widget.freshworks.com m2epro.freshdesk.com https://api.reviews.co.uk/ https://stats.g.doubleclick.net/ https://www.google-analytics.com/analytics.js https://api.reviews.co.uk/* *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://get.geojs.io *.avada.io www.gstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.tawk.to wss://*.tawk.to 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.cookielaw.org https://www.googletagmanager.com https://www.google-analytics.com https://js.hsforms.net https://js.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.usemessages.com https://js.hscollectedforms.net https://static.hsappstatic.net https://48752163.fs1.hubspotusercontent-na1.net https://*.appcues.com https://*.appcues.net https://edge.fullstory.com https://snap.licdn.com; style-src 'self' 'unsafe-inline' https://cdn.cookielaw.org https://*.appcues.com https://*.appcues.net https://fonts.googleapis.com; img-src 'self' data: blob: https://brand.cf.com https://assets.cf.com https://assets.chathamfinancial.com https://a.storyblok.com https://cdn.storyblok.com https://cdn.cookielaw.org https://www.googletagmanager.com https://www.google-analytics.com https://track.hubspot.com https://forms.hsforms.com https://forms-na1.hsforms.com https://*.appcues.com https://*.appcues.net https://rs.fullstory.com https://www.linkedin.com https://px.ads.linkedin.com https://cdn.jsdelivr.net https://static.hsappstatic.net https://pagead2.googlesyndication.com; font-src 'self' data: https://*.appcues.com https://*.appcues.net https://fonts.gstatic.com; connect-src 'self' https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://www.google.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://www.googleadservices.com https://pagead2.googlesyndication.com https://api.hsforms.com https://forms.hsforms.com https://api.hubapi.com https://track.hubspot.com https://forms.hscollectedforms.net https://*.appcues.com https://*.appcues.net wss://*.appcues.com wss://*.appcues.net https://edge.fullstory.com https://rs.fullstory.com https://px.ads.linkedin.com https://app.launchdarkly.com https://clientstream.launchdarkly.com https://events.launchdarkly.com https://*.ingest.us.sentry.io https://directline.botframework.com wss://*.botframework.com https://auth.cf.com; frame-src 'self' https://fast.wistia.net https://www.youtube-nocookie.com https://*.appcues.com https://forms.hsforms.com https://auth.cf.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://forms.hsforms.com https://api.hsforms.com; frame-ancestors 'self'; report-uri https://o4506622090018816.ingest.us.sentry.io/api/4510943602933760/security/?sentry_key=610e426c36ea6bf2bac5d8a48de83e09&sentry_environment=prod 2
default-src 'self' https://*.hubspot.com https://*.hsforms.com https://*.hscollectedforms.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.hubspot.com https://*.hsforms.com https://*.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://*.hsadspixel.net https://*.hubapi.com https://js.hscta.net https://js-eu1.hscta.net https://static.hsappstatic.net https://*.usemessages.com https://*.hsleadflows.net https://*.hsforms.net https://*.hubspotfeedback.com https://feedback.hubapi.com https://feedback-eu1.hubapi.com; style-src 'self' 'unsafe-inline' https://*.hubspot.com https://*.hsforms.com https://fonts.googleapis.com https://*.hubspotusercontent00.net https://*.hubspotusercontent-na1.net https://*.hubspotusercontent-eu1.net https://cdn2.hubspot.net; img-src 'self' data: https://*.hubspot.com https://*.hsforms.com https://*.hscollectedforms.net https://*.hubspotusercontent00.net https://*.hubspotusercontent-na1.net https://*.hubspotusercontent-eu1.net https://no-cache.hubspot.com https://js.hscta.net https://js-eu1.hscta.net https://cdn2.hubspot.net https://*.hubspot.net; font-src 'self' https://fonts.gstatic.com https://*.hubspot.com; connect-src 'self' https://*.hubspot.com https://*.hsforms.com https://api.hubapi.com https://*.hubapi.com https://*.hs-banner.com https://js.hscta.net https://js-eu1.hscta.net https://*.hscollectedforms.net; frame-src 'self' https://*.hubspot.com https://*.hsforms.com https://*.hs-sites.com https://*.hs-sites-eu1.com https://*.hubspot.net https://play.hubspotvideo.com https://play-eu1.hubspotvideo.com https://*.hsforms.net; object-src 'none'; base-uri 'self'; form-action 'self' https://*.hubspot.com https://*.hsforms.com; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://cdn.riverty.design/ *.googleapis.com https://www.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com https://fonts.gstatic.com data: *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.oct8ne.com https://*.ekomiapps.de data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com uc8.tv *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googlesyndication.com https://www.facebook.com https://payflowlink.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com uc8.tv https://documents.riverty.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.instagram.com www.google.com https://*.google.com *.doubleclick.net *.googlesyndication.com https://*.dpdconnect.nl account.fetchify.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.oct8ne.com *.weltpixel.com https://web.facebook.com https://bid.g.doubleclick.net https://payflowlink.paypal.com https://www.googletagmanager.com https://td.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://cdn.myafterpay.com/ uc8.tv https://cdn.riverty.design/ https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com https://*.gstatic.com *.cdninstagram.com https://*.google.com *.google.bg *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com cdn.doofinder.com https://*.googleapis.com https://*.googleusercontent.com *.fbcdn.net https://firebasestorage.googleapis.com www.facebook.com flagpedia.net *.oct8ne.com ts.tradetracker.net www.magmodules.eu https://static-na.payments-amazon.com https://www.paypalobjects.com https://m.media-amazon.com https://bat.bing.com https://www.facebook.com https://www.google.com https://google.com https://www.google.co.in https://googleads.g.doubleclick.net *.ekomiapps.de *.visualwebsiteoptimizer.com api.taggrs.io *.floraconcepts.nl https://sst.maxifleur-kunstplanten.nl https://oct8neuploadcdneu.azureedge.net https://*.oct8ne.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com https://*.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com uc8.tv https://cdn.myafterpay.com/ https://cdn.bnpl.riverty.io/ https://maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js *.googleapis.com *.gstatic.com *.instagram.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://www.google.com *.google.bg https://www.googletagmanager.com/ *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com cdn.doofinder.com https://*.dpdconnect.nl https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.avada.io *.shopify.com maps.googleapis.com *.oct8ne.com tm.tradetracker.net https://www.googletagmanager.com tagmanager.google.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://*.hotjar.com https://www.paypal.com cdn.cookie-script.com *.visualwebsiteoptimizer.com sst.maxifleur-kunstplanten.nl *.ekomiapps.de maxifleur.floraconcepts.io *.crazyegg.com *.pinimg.com static-eu.oct8ne.com *.jquery.com *.pinterest.com *.bing.com https://cdn.leadinfo.net/ping.js https://*.ldnfrpl.com https://d5yoctgpv4cpx.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.doofinder.com cc-cdn.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com tagmanager.google.com https://*.ekomiapps.de 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com uc8.tv https://cdn.myafterpay.com/ https://documents.myafterpay.com/ https://documents.riverty.com/ https://www.afterpay.nl/ https://cdn.bnpl.riverty.io/ https://trace-api.newrelic.com/ https://distributions.crowdin.net/ https://api.crowdin.com/ https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com *.google-analytics.com *.facebook.net https://*.google.com *.doubleclick.net *.googlesyndication.com *.doofinder.com wss://*.doofinder.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com *.oct8ne.com https://www.google-analytics.com https://stats.g.doubleclick.net https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com *.ekomiapps.de ct.pinterest.com *.crazyegg.com *.floraconcepts.io *.floraconcepts.nl https://*.leadinfo.net https://*.leadinfo.com https://sst.maxifleur-kunstplanten.nl https://*.ldnfrpl.com https://li-replay.s3-accelerate.amazonaws.com https://bat.bing.com https://bat.bing.net https://p2iqhncxyh.execute-api.eu-central-1.amazonaws.com *.pay.nl 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.maxifleur.com/paynl/csp/report; report-to report-endpoint; 2
font-src fonts.gstatic.com use.typekit.net cash-f.squarecdn.com *.googleapis.com *.gstatic.com data: maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com player.vimeo.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com https://www.google.com/recaptcha/ * www.google.com mcstaging2.koffievoordeel.xyz *.koffievoordeel.xyz www.koffievoordeel.nl c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com 'self'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net validator.swagger.io *.ftcdn.net *.behance.net * *.gstatic.com *.googleapis.com mcstaging2.koffievoordeel.xyz *.koffievoordeel.xyz www.koffievoordeel.nl https://api.mapbox.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.cash.app maxcdn.bootstrapcdn.com mcstaging2.koffievoordeel.xyz *.koffievoordeel.xyz www.koffievoordeel.nl assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io * *.googleapis.com mcstaging2.koffievoordeel.xyz *.koffievoordeel.xyz www.koffievoordeel.nl api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com autocomplete2.postdirekt.de 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; script-src 'self' http://*.hs-scripts.com https://*.googletagmanager.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hs-scripts.com https://*.hubspot.com https://*.springernature.com https://*.user.com; script-src-attr 'unsafe-hashes' 'sha256-bwK6T5wZVTANitXbrTsel7kl/PyCjCd/Dq5Qoz3imjM='; style-src 'self' 'unsafe-inline' https://*.typekit.net; img-src 'self' data: https:; connect-src 'self' https://*.hubspot.com https://*.user.com https://*.googletagmanager.com https://*.google-analytics.com wss://macmillan-english.user.com; font-src 'self' data: https://*.typekit.net; frame-src https://*.buzzsprout.com https://*.youtube-nocookie.com; frame-ancestors 'none'; report-to csp-report; report-uri /csp-report 2
default-src 'self'; script-src 'self' https://trusted-scripts.example.com;style-src 'self'; 2
worker-src blob:; font-src fonts.gstatic.com use.typekit.net *.kxcdn.com *.fontawesome.com maxcdn.bootstrapcdn.com d1cwup7r903a1d.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.authorize.net 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com *.meetanshi.com connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net checkout.sezzle.com sandbox.checkout.sezzle.com tracking.sezzle.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io scontent.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.gstatic.com *.cdninstagram.com *.fbcdn.net magefan.com cm.magefan.com *.disqus.com *.meetanshi.com https://meetanshi.com flagpedia.net media.sezzle.com maps.gstatic.com *.google.co.in data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.googleapis.com *.google.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com 'unsafe-inline' *.addthis.com *.addthisedge.com *.moatads.com static.cloudflareinsights.com *.disqus.com *.meetanshi.com *.googletagmanager.com https://www.googletagmanager.com tagmanager.google.com www.facebook.com graph.facebook.com business.facebook.com maps.googleapis.com *.authorize.net cdn.routeapp.io fonts.googleapis.com *.amplitude.com cdn.jsdelivr.net protect-quote-q.route.com protection-widget.route.com stage-protection-widget.route.com protect-lightning-bolt-widget.route.com d3od5si8vgcekb.cloudfront.net ddbmicszvqxcg.cloudfront.net unpkg.com wobs.route.com checkout-sdk.sezzle.com sandbox.checkout-sdk.sezzle.com widget.sezzle.com http://cdnjs.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com d1cwup7r903a1d.cloudfront.net fonts.cdnfonts.com http://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com *.meetanshi.com https://www.google-analytics.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.gstatic.com maps.googleapis.com *.authorize.net api.route.com *.amplitude.com cdn.jsdelivr.net protect-quote-q.route.com protection-widget.route.com stage-protection-widget.route.com d3od5si8vgcekb.cloudfront.net protect-lightning-bolt-widget.route.com ddbmicszvqxcg.cloudfront.net unpkg.com wobs.route.com gateway.sezzle.com sandbox.gateway.sezzle.com media.sezzle.com widget.sezzle.com places.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; base-uri 'self'; frame-ancestors 'self'; object-src 'none'; worker-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://api.w3-edge.com https://www.googletagmanager.com https://www.googletagservices.com https://cdn.privacy-mgmt.com https://cdnjs.cloudflare.com https://secure.hook6vein.com https://a.usbrowserspeed.com https://www.details-enterprise-7.com https://pi.pardot.com https://www.google.com https://www.google-analytics.com https://go.skymedia.co.uk https://js-agent.newrelic.com https://bam.nr-data.net https://yoast.com https://ajax.googleapis.com https://assets.adobedtm.com https://www.gstatic.com https://skymediaglobal.b-cdn.net https://cdn.skymedia.de https://cdn.skymedia.ie https://cdn.skymedia.co.uk https://cdn.adsmartfromsky.co.uk https://cdn.adsmartfromsky.ie https://cdn.cflight.co.uk https://gdpr-tcfv2.sp-prod.net https://fluid.4strokemedia.com https://cdnb.4strokemedia.com https://z.moatads.com https://imasdk.googleapis.com https://pagead2.googlesyndication.com https://s0.2mdn.net;connect-src 'self' https://bam.nr-data.net https://cdn.privacy-mgmt.com https://my.yoast.com https://www.skymedia.co.uk https://cdn.skymedia.co.uk https://cdn.skymedia.ie https://cmp.skymedia.de https://edge.adobedc.net https://region1.google-analytics.com https://www.google-analytics.com https://www.google.com https://fluid.4strokemedia.com https://feed.4strokemedia.com https://cdnb.4strokemedia.com https://api.condatis.sky https://playback.brightcovecdn.com https://videos.skysports.com https://manifest.prod.boltdns.net https://securepubads.g.doubleclick.net https://videos.skynews.com https://csi.gstatic.com https://idx.liadm.com; img-src 'self' data: https: https://skymediaglobal.b-cdn.net https://cdn.skymedia.de https://cdn.skymedia.ie https://cdn.skymedia.co.uk https://cdn.adsmartfromsky.co.uk https://cdn.adsmartfromsky.ie; font-src 'self' data: https://fonts.gstatic.com https://skymediaglobal.b-cdn.net https://cdn.skymedia.de https://cdn.skymedia.ie https://cdn.skymedia.co.uk https://cdn.adsmartfromsky.co.uk https://cdn.adsmartfromsky.ie https://fonts.bunny.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://skymediaglobal.b-cdn.net https://cdn.skymedia.de https://cdn.skymedia.ie https://cdn.skymedia.co.uk https://cdn.adsmartfromsky.co.uk https://cdn.adsmartfromsky.ie https://fonts.bunny.net;media-src 'self' https: blob: data: https://skymediaglobal.b-cdn.net https://cdn.skymedia.de https://cdn.skymedia.ie https://cdn.skymedia.co.uk https://cdn.adsmartfromsky.co.uk https://cdn.adsmartfromsky.ie https://playback.brightcovecdn.com https://videos.skysports.com https://videos.skynews.com;frame-src 'self' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://players.brightcove.net https://www.youtube.com https://securepubads.g.doubleclick.net https://tpc.googlesyndication.com  https://skymediaglobal.b-cdn.net https://cdn.skymedia.de https://cdn.skymedia.ie https://cdn.skymedia.co.uk https://cdn.adsmartfromsky.co.uk https://cdn.adsmartfromsky.ie https://cdnb.4strokemedia.com https://imasdk.googleapis.com https://skymedia-sportkalender.nureg.de; 2
default-src 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; worker-src 'self' blob:; form-action 'self'; 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://call.chatra.io https://static.zdassets.com https://widget.intercom.io https://js.intercomcdn.com https://*.zoho.com https://*.zoho.eu https://cdn.livechatinc.com https://*.freshchat.com https://*.freshworks.com https://widgets.sir.sportradar.com https://www.datadoghq-browser-agent.com https://cdn.onesignal.com https://*.seals.dlagglobal.com https://*.snippet.anjouangaming.org https://*.snippet.antillephone.com https://cdn.jsdelivr.net https://casino.betbook.host; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: https://assets.betbook.host https://*.googletagmanager.com; connect-src 'self' https://betbook.host wss://betbook.host https://sentry-sportsbook.s7s.ai https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://rum.browser-intake-datadoghq.eu https://call.chatra.io https://*.freshchat.com https://*.freshworks.com https://*.zopim.com https://*.zendesk.com https://ekr.zdassets.com https://api-iam.intercom.io wss://*.intercom.io https://*.intercom.io https://*.zoho.com https://*.zoho.eu https://api.livechatinc.com https://*.livechat.com https://cdp-eu.customer.io; frame-src 'self' https://widget-iframe.awidua.io https://widget-iframe.wadua.io https://casino.betbook.host https://arm-ui-v2-int.pythiarisk.com; frame-ancestors 'self' https://casino.betbook.host https://local.betbook.dev:3002; object-src 'none'; worker-src 'self' blob:; form-action 'self'; base-uri 'none'; report-uri https://csp-ingest.sec.s7s.ai/csp-report; report-to csp-endpoint 2
object-src 'none' ;  base-uri 'self' ;  font-src 'self' https://fonts.gstatic.com https://www.booxi.eu;  manifest-src 'self' ;  media-src 'self' ;  frame-ancestors 'self' ;  worker-src 'none' ;  connect-src 'self' https://cognito-idp.eu-west-3.amazonaws.com https://maps.googleapis.com https://api.opngo.com https://static.indigoneo.eu https://auth.opngo.com; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://widgets.binotel.com https://cdn.jsdelivr.net js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://maps.googleapis.com https://player.vimeo.com https://widgets.binotel.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://platform.twitter.com https://unpkg.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://s3.tradingview.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://unpkg.com https://cdnjs.cloudflare.com https://cdn.vswizard.com; font-src 'self' data: https://fonts.gstatic.com https://cdn.vswizard.com; img-src 'self' data: blob: https:; connect-src 'self' https:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://platform.twitter.com https://s.tradingview.com https://www.tradingview-widget.com https://pagead2.googlesyndication.com https://ep2.adtrafficquality.google; worker-src 'self' blob: 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.affirm.com *.affirm.ca www.facebook.com platform.twitter.com https://plumrocket.com https://accounts.google.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.affirm.com *.affirm.ca https://images.unsplash.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.affirm.com *.affirm.ca https://maps.googleapis.com https://player.vimeo.com connect.facebook.net twitter.com platform.twitter.com https://accounts.google.com https://www.gstatic.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com https://accounts.google.com https://www.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.affirm.com *.affirm.ca https://maps.googleapis.com https://player.vimeo.com https://accounts.google.com places.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com challenges.cloudflare.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com *.sendcloud.sc *.jsdelivr.net *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com https://connect.ekomi.de/ *.amazonaws.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com challenges.cloudflare.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com https://connect.ekomi.de/ *.sendcloud.sc *.jsdelivr.net *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com *.sendcloud.sc *.jsdelivr.net tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com maxcdn.bootstrapcdn.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.klaviyo.com *.cdnfonts.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com js.mollie.com checkout.sezzle.com sandbox.checkout.sezzle.com tracking.sezzle.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.facebook.com *.amazon-adsystem.com *.doubleclick.net *.sitescout.com *.adsrvr.org *.locally.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com *.googleapis.com https://www.mollie.com media.sezzle.com *.hsforms.net *.hsforms.com 'self' data: *.gstatic.com/mapfiles/api-3/images/* *.s3.amazonaws.com *.net/company/SPJKye/images/* *.google.co.in *.cloudfront.net *.facebook.com *.amazonaws.com https://maps.googleapis.com *.sitescout.com trkn.us *.zdassets.com *.zendesk.com *.zdusercontent.com *.nextdoor.com *.redditstatic.com *.reddit.com *.amazon-adsystem.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com https://cdn.jsdelivr.net *.googleapis.com js.mollie.com checkout-sdk.sezzle.com sandbox.checkout-sdk.sezzle.com widget.sezzle.com *.hsforms.net *.hsforms.com *.gstatic.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.cloudfront.net/js/grin-sdk.js *.googleapis.com/maps/* *.googleapis.com/maps-api-v3/api/js *.zdassets.com *.mouseflow.com *.jquery.com *.direct/feathersnap.js *.facebook.net/en_US/fbevents.js *.facebook.net *.facebook.com *.googletagmanager.com *.amazon-adsystem.com *.googleadservices.com *.google-analytics.com *.klaviyo.com q.stripe.com *.basis.net *.smooch.io *.adsrvr.org *.redditstatic.com *.nextdoor.com safevisit.online *.locally.com tagmanager.google.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com https://cdn.jsdelivr.net *.gstatic.com *.googleapis.com maxcdn.bootstrapcdn.com fonts.cdnfonts.com *.stripe.network *.stripecdn.com *.amazon.com *.cdnfonts.com *.typekit.net *.sezzle.com *.net/ffj4apz.css *.klaviyo.com tagmanager.google.com fonts.google.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net vimeo.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maps.googleapis.com gateway.sezzle.com sandbox.gateway.sezzle.com media.sezzle.com widget.sezzle.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.cloudflare.com/cdn-cgi/trace *.googleapis.com/maps/api/* *.grin.co/fingerprint/* *.sezzle.com *.grin.co *.g.doubleclick.net https://ipapi.co *.zendesk.com *.googleapis.com *.ipdata.co *.googletagmanager.com *.mouseflow.com *.amazon-adsystem.com *.paa-reporting-advertising.amazon *.webpagefx.org *.facebook.com *.zdassets.com *.smooch.io wss://api.smooch.io *.redditstatic.com *.reddit.com *.adsrvr.org *.locally.com *.analytics.google.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self' ; script-src 'report-sample' 'self' ; connect-src 'self' ; img-src 'self' data: ; style-src 'self' ; font-src 'self' ; object-src 'none'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-src 'self' blob: ; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html html lit-html 'allow-duplicates'; upgrade-insecure-requests; report-uri https://api-data.bitkeep.com/log/pivot/cspSecurity; 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.addtoany.com *.hotjar.com *.hotjar.io *.gettopple.com https://analytics.tiktok.com https://static.klaviyo.com https://wsv3cdn.audioeye.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com *.addtoany.com *.hotjar.com *.hotjar.io *.hsforms.com *.kaptcha.com https://bid.g.doubleclick.net *.gettopple.com https://analytics.tiktok.com *.weltpixel.com *.facebook.com business.facebook.com www.commercepartnerhub.com platform.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com *.hubspot.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.google.com blob: https://a5.behance.net https://www.googletagmanager.com *.hsforms.com *.gettopple.com https://analytics.tiktok.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.cdninstagram.com https://firebasestorage.googleapis.com business.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://redchamps.com *.hsforms.net *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com https://developer.adobe.com https://magento.com https://cdn.avmws.com/ http://cdn.avmws.com/ https://wsmcdn.audioeye.com/aem.js *.gstatic.com https://ssl.avmws.com *.addtoany.com *.hotjar.com *.hotjar.io *.hsforms.com *.hsforms.net *.hs-scripts.com *.hsleadflows.net *.hs-analytics.net *.hs-banner.com *.paypal.com https://js.hsadspixel.net https://connect.facebook.net https://googleads.g.doubleclick.net https://cdnjs.cloudflare.com *.gettopple.com https://analytics.tiktok.com player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ widget.freshworks.com m2epro.freshdesk.com cdnjs.cloudflare.com *.avada.io *.shopify.com business.facebook.com twitter.com platform.twitter.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.googleapis.com amcglobal.sc.omtrdc.net *.gettopple.com https://analytics.tiktok.com https://static.klaviyo.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com https://developer.adobe.com https://cdn.avmws.com/ http://cdn.avmws.com/ *.hubspot.com hubspot-forms-static-embed.s3.amazonaws.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.hs-banner.com *.facebook.net https://api.hubapi.com *.doubleclick.net https://dpm.demdex.net *.hsforms.com *.gettopple.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us/ipv6/enrich_ipv6  https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ widget.freshworks.com m2epro.freshdesk.com https://get.geojs.io *.avada.io business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src wsv3cdn.audioeye.com fonts.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de wsv3cdn.audioeye.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * bid.g.doubleclick.net/ ssl.kaptcha.com tst.kaptcha.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https: https://meetanshi.com/media/logo.png data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de chimpstatic.com downloads.mailchimp.com *.list-manage.com wsmcdn.audioeye.com wsv3cdn.audioeye.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com buttons-config.sharethis.com platform-api.sharethis.com t.sharethis.com www.redditstatic.com www.mczbf.com connect.facebook.net cmp.osano.com appleid.cdn-apple.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com wsv3cdn.audioeye.com unsafe-inline assets.braintreegateway.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com s3.amazonaws.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de analytics.audioeye.com wsv3cdn.audioeye.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com googleads.g.doubleclick.net stats.g.doubleclick.net ad.doubleclick.net l.sharethis.com platform-api.sharethis.com *.braintreegateway.com *.sandbox.paypal.com www.mczbf.com cmp.osano.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; 2
style-src-elem 'unsafe-inline' 'self' hanfgarten-at.ddev.site *.typekit.net *.googleapis.com *.etrusted.com *.mastercard.com *.unzer.com; script-src-elem 'unsafe-inline' 'self' hanfgarten-at.ddev.site *.typekit.net *.usercentrics.eu *.trustedshops.com *.googletagmanager.com *.etrusted.com *.klaviyo.com applepay.cdn-apple.com *.unzer.com *.adcell.com *.mastercard.com *.ratepay.com cdn.ablyft.com; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: *.fontawesome.com maxcdn.bootstrapcdn.com hanfgarten-at.ddev.site https://widgets.trustedshops.com https://static.unzer.com https://applepay.cdn-apple.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com hanfgarten-at.ddev.site *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com hanfgarten-at.ddev.site app.usercentrics.eu *.redintelligence.net pixel.bsmartdata.com ad.ad-srv.net ad4m.at *.ad-srv.net *.unzer.com *.adcell.com *.sovendus-connect.com landofcoder.com www.jsctool.com https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://static-cc.test.unzer.com https://h.online-metrix.net https://google.com/pay https://pay.google.com/ https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ https://sandbox.clicktopay.auth.visa.com https://clicktopay.visa.com https://sandbox.secure.checkout.visa.com https://secure.checkout.visa.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com www.xtento.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ hanfgarten-at.ddev.site *.usercentrics.eu *.mastercard.com d.ratepay.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com https://static.unzer.com *.online-metrix.net https://www.gstatic.com *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ hanfgarten-at.ddev.site landofcoder.com d.ratepay.com www.jsctool.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://static.unzer.com https://applepay.cdn-apple.com https://pay.google.com https://code.jquery.com https://h.online-metrix.net https://h64.online-metrix.net https://static-v2.unzer.com/v2/ui-components/ *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com maxcdn.bootstrapcdn.com hanfgarten-at.ddev.site d.ratepay.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://sandbox.src.mastercard.com https://static-v2.unzer.com/v2/ui-components/ *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src hanfgarten-at.ddev.site 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ hanfgarten-at.ddev.site *.usercentrics.eu landofcoder.com d.ratepay.com www.jsctool.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://api.unzer.com https://api.heidelpay.com https://sbx-api.heidelpay.com https://sbx-api.unzer.com https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://h.online-metrix.net https://h64.online-metrix.net https://google.com/pay https://www.google.com/pay https://pay.google.com https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ https://static-cc.test.unzer.com https://static-v2.unzer.com/v2/ui-components/ *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'unsafe-inline' 'self' data: 'self' 'unsafe-inline' 'unsafe-eval'; base-uri hanfgarten-at.ddev.site 'self' 'unsafe-inline'; report-uri https://e2e65e6e-22d1-4212-95e7-813af8751f8a.sansec.watch/; report-to report-endpoint; 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://cdn.loadbee.com *.stripe.com *.stripe.network *.google.com ebizmarts-website.s3.amazonaws.com brippo.s3.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud www.google.com.ua ts.tradetracker.net www.magmodules.eu www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://static.cloudflareinsights.com https://cdn.loadbee.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud tm.tradetracker.net www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://availability.loadbee.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com fonts.googleapis.com fonts.gstatic.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src https://www.gstatic.com https://fonts.gstatic.com https://widgets.trustedshops.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ bid.g.doubleclick.net https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.google.com js.mollie.com www.xtento.com consentcdn.cookiebot.com consentcdn.cookiebot.eu 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://www.mollie.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com www.xtento.com cdn.xtento.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com imgsct.cookiebot.com imgsct.cookiebot.eu data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.google.com js.mollie.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com www.xtento.com cdn.xtento.com *.googletagmanager.com tagmanager.google.com consent.cookiebot.com consent.cookiebot.eu 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://static.klaviyo.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com api.friendlycaptcha.com eu-api.friendlycaptcha.eu *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.google-analytics.com *.analytics.google.com *.googletagmanager.com consentcdn.cookiebot.com consentcdn.cookiebot.eu 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self' *.zdassets.com *.zopim.com *.zendesk.com wss://*.zendesk.com wss://*.zopim.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' d1qmrxg9gbf226.cloudfront.net api-accent.bloomreach.co *.qantasloyalty.com api.smooch.io applepay.cdn-apple.com *.googleadservices.com assets.braintreegateway.com/web *.bazaarvoice.com *.doubleclick.net storage.googleapis.com/workbox-cdn www.google.com/pagead *.google.com/recaptcha/ www.gstatic.com/recaptcha/ cfjump.platypusshoes.com.au cfjump.platypusshoes.co.nz *.fullstory.com www.googletagmanager.com analytics.tiktok.com cdn.unidays.world *.truefitcorp.com www.paypalobjects.com/api/checkout.min.js *.klaviyo.com t.cfjump.com *.zdassets.com connect.facebook.net maps.googleapis.com js-agent.newrelic.com js.datadome.co ct.captcha-delivery.com *.adobedtm.com *.afterpay.com *.demdex.net *.forter.com dlthst9q2beh8.cloudfront.net d2nww8zpyj5pk0.cloudfront.net *.google-analytics.com *.paypal.com afterpay.com foursixty.com *.useinsider.com *.roymorgan.com s.pinimg.com lantern.roeyecdn.com ct.pinterest.com js-sandbox.squarecdn.com js.squarecdn.com ; style-src 'self' 'unsafe-inline' display.ugc.bazaarvoice.com maxcdn.bootstrapcdn.com/font-awesome *.typekit.net fonts.googleapis.com assets.braintreegateway.com *.adobetm.com foursixty.com assets.api.useinsider.com *.adobemc.com ; img-src data: 'self' api-accent.bloomreach.co *.zendesk.com dpm.demdex.net www.googleadservices.com/ccm www.magentocommerce.com/products/media *.platypusshoes.co.nz *.platypusshoes.com.au googleads.g.doubleclick.net ad.doubleclick.net www.google.com/ccm www.paypalobjects.com www.google.com www.google.com.au www.google.co.nz www.google.com.vn maps.gstatic.com/mapfiles scontent.cdninstagram.com *.afterpay.com *.accentgra.com www.googletagmanager.com www.facebook.com *.bazaarvoice.com t.paypal.com duuytoqss3gu4.cloudfront.net df45ay5pw60dy.cloudfront.net d3nocrch4qti4v.cloudfront.net *.google-analytics.com *.pinterest.com *.twilio.com *.tiktok.com *.useinsider.com maps.googleapis.com/maps developers.google.com *.zopim.io *.zdassets.com amcglobal.sc.omtrdc.net adservice.google.com lantern.roeye.com accentgroupxpdev.112.2o7.net/b/ss/accentgroup-xpdev i.vimeocdn.com/video ; object-src 'none' ; base-uri 'self' ; child-src 'self' blob: ; connect-src 'self' api-accent.bloomreach.co *.qantasloyalty.com analytics.google.com/g/collect iq.afterpay.com/us/v1 iq.afterpay-beta.com/us/v1 *.my.sentry.io wss://api.smooch.io *.accentgra.com www.facebook.com/tr google.com www.google.com collect-ap2.attraqt.io smetrics.platypusshoes.co.nz *.fullstory.com *.klaviyo.com smetrics.platypusshoes.com.au api-js.datadome.co *.adobedc.net *.afterpay.com *.bazaarvoice.com *.braintree-api.com *.braintreegateway.com *.demdex.net *.forter.com *.foursixty.com google.com/ccm www.google.com/ccm *.google-analytics.com *.googleapis.com www.google.com.au/ads/ga-audiences *.nr-data.net *.paypal.com *.truefitcorp.com *.zdassets.com *.zendesk.com *.zopim.com accentgroupxpdev.112.2o7.net afterpay.com analytics.tiktok.com facebook.com *.roymorgan.com foursixty.com kleber.datatoolscloud.net.au sentry.io vimeo.com wss://*.twilio.com wss://widget-mediator.zopim.com d2o5idwacg3gyw.cloudfront.net dz8rit8v72mig.cloudfront.net d2lxqodqbpy7c2.cloudfront.net d6rak4b14t5gp.cloudfront.net d3k4bt74u9esq1.cloudfront.net wss://cdn0.forter.com api.myunidays.com ct.pinterest.com stats.g.doubleclick.net *.useinsider.com ; font-src data: 'self' maxcdn.bootstrapcdn.com/font-awesome fonts.gstatic.com *.truefitcorp.com *.useinsider.com static.klaviyo.com use.typekit.net shopping.qantas.com ; frame-src 'self' api-accent.bloomreach.co *.qlstg.qantas.com www.googletagmanager.com geo.captcha-delivery.com *.formstack.com *.afterpay.com *.bazaarvoice.com *.demdex.net *.doubleclick.net *.facebook.com *.myunidays.com *.omniparcelreturns.com *.paypal.com *.paypalobjects.com *.truefitcorp.com *.useinsider.com *.vimeo.com *.youtu.be *.youtube.com afterpay.com assets.braintreegateway.com facebook.com foursixty.com google.com www.google.com vimeo.com ct.pinterest.com ; worker-src 'self' blob: *.accentgra.com *.platypusshoes.co.nz *.platypusshoes.com.au; 2
font-src *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com https://static.addtoany.com/ *.dotdigital-pages.com *.dotdigital.com *.affirm.com *.affirm.ca cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.googletagmanager.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.trackedlink.net *.affirm.com *.affirm.ca https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com https://www.magezon.com store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com https://imgs.signifyd.com https://*.online-metrix.net scontent-sea1-1.cdninstagram.com scontent.cdninstagram.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page https://static.addtoany.com/ *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.affirm.com *.affirm.ca cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.avada.io *.shopify.com *.alothemes.com *.magepow.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com tagmanager.google.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://stats.addtoany.com/menu *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.affirm.com *.affirm.ca webchat.dotdigital.com webchat.staging.dotdigital.com https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com https://imgs.signifyd.com api.livechatinc.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src https: wss:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; report-uri /csp-report 2
script-src-elem *.cfjump.com *.popupsmart.com embedsocial.com *.preezie.com *.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network-stg.bazaarvoice.com network.bazaarvoice.com; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.squarecdn.com *.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network-stg.bazaarvoice.com network.bazaarvoice.com data: 'self' 'unsafe-inline' 'unsafe-eval'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com widgets.sandbox.afterpay.com *.cash.app display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.afterpay.com/ *.cash.app display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com t.zip.co static.zipmoney.com.au static.zip.co *.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com *.riskified.com *.bing.com *.legitscript.com data: 'self' 'unsafe-inline' 'unsafe-eval'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com assets.adobedtm.com *.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page https://portal.sandbox.afterpay.com https://portal.afterpay.com https://static.afterpay.com *.squarecdn.com https://hbiq.net *.cash.app apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com *.googletagmanager.com https://www.googletagmanager.com tagmanager.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com static.zipmoney.com.au static.zip.co zip.co *.cfjump.com *.popupsmart.com embedsocial.com *.preezie.com *.bazaarvoice.com https://apps.bazaarvoice.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.magento-datasolutions.com *.magento-ds.com static.afterpay.com/ *.squarecdn.com *.cash.app display.ugc.bazaarvoice.com unsafe-inline assets.braintreegateway.com embedsocial.com *.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network-stg.bazaarvoice.com network.bazaarvoice.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.afterpay.com *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com *.cash.app api.lab.amplitude.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.google-analytics.com https://www.google-analytics.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.popupsmart.com *.bazaarvoice.com *.demdex.net *.riskified.com *.bing.com 'self' 'unsafe-inline' 'unsafe-eval'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://adservice.google.com https://js.hsforms.net https://tpc.googlesyndication.com https://*.doubleclick.net https://cdn.cookielaw.org https://cdn.cookieyes.com https://cdn-cookieyes.com https://*.adtrafficquality.google; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https: blob:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://forms.hubspot.com https://*.googlesyndication.com https://*.google.com https://log.cookieyes.com https://cdn-cookieyes.com https://*.adtrafficquality.google; frame-src https://www.youtube.com https://www.googletagmanager.com https://td.doubleclick.net https://forms.hubspot.com https://tpc.googlesyndication.com https://googleads.g.doubleclick.net https://*.adtrafficquality.google https://www.google.com; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; form-action 'self' https://forms.hubspot.com 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com data: *.cookiebot.com static.klaviyo.com *.newrelic.com *.queue-it.net *.yotpo.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.certcapture.com *.cookiebot.com *.adsrvr.org *.smct.io *.newrelic.com *.doubleclick.net *.cloudfront.net *.queue-it.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.trustpilot.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com *.certcapture.com magefan.com cm.magefan.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.cookiebot.com *.bing.com *.newrelic.com *.clarity.ms cdn.noibu.com *.cloudfront.net x.klarnacdn.net *.queue-it.net www.google.co.uk alb.reddit.com www.facebook.com *.yotpo.com ads-twitter.com *.ads-twitter.com *.twitter.com t.co https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.certcapture.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.cookiebot.com *.hotjar.com *.bing.com *.webgains.io *.clarity.ms *.tiktok.com *.adsrvr.org *.stackadapt.com *.smct.co smct.co *.smct.io *.noibu.com *.upsellit.com *.scriptcdn.net *.redditstatic.com *.queue-it.net rum.hlx.page *.abtasty.com *.yotpo.com ads-twitter.com *.ads-twitter.com *.twitter.com *.googleusercontent.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com maps.googleapis.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.trustpilot.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com *.cookiebot.com *.newrelic.com static.klaviyo.com static-tracking.klaviyo.com *.noibu.com *.queue-it.net *.yotpo.com *.fontawesome.com https://static.klaviyo.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https://instagram.fdel27-5.fna.fbcdn.net https://instagram.fdel27-4.fna.fbcdn.net https://instagram.fdel27-3.fna.fbcdn.net https://instagram.fdel27-2.fna.fbcdn.net https://instagram.fdel27-1.fna.fbcdn.net https://scontent-lcy1-1.cdninstagram.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.certcapture.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net *.cookiebot.com *.clarity.ms *.tiktok.com *.googlesyndication.com *.amazonaws.com cdn.noibu.com wss://*.noibu.com input.noibu.com *.tiktokw.us *.reddit.com *.redditstatic.com *.bing.com *.queue-it.net widget.trustpilot.com *.smct.io rum.hlx.page *.datadome.co adsmeasurement.com www.facebook.com *.abtasty.com *.yotpo.com ads-twitter.com *.ads-twitter.com *.twitter.com *.googleusercontent.com *.ideal-postcodes.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com places.googleapis.com www.googleapis.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://tagmanager.google.com https://munchkin.marketo.net https://*.marketo.com https://*.marketo.net https://info.printerlogic.com https://cdn-cookieyes.com https://*.cookieyes.com https://dev.visualwebsiteoptimizer.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://static.hotjar.com https://script.hotjar.com https://*.hotjar.com https://*.hotjar.io https://chat.conversica.com https://*.conversica.com https://cdn.leandata.com https://*.leandata.com https://unpkg.com https://va.vercel-scripts.com https://*.vercel-scripts.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.googletagmanager.com https://tagmanager.google.com https://*.cookieyes.com https://*.visualwebsiteoptimizer.com https://info.printerlogic.com https://chat.conversica.com https://*.conversica.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://script.hotjar.com https://*.hotjar.com https://*.hotjar.io https://chat.conversica.com https://*.conversica.com; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.google.com https://region1.google-analytics.com https://munchkin.marketo.net https://*.marketo.com https://*.marketo.net https://info.printerlogic.com https://*.cookieyes.com https://log.cookieyes.com https://dev.visualwebsiteoptimizer.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://chat.conversica.com https://*.conversica.com https://cdn.leandata.com https://*.leandata.com https://a-us.storyblok.com https://a.storyblok.com https://api-us.storyblok.com https://api.storyblok.com https://img.storyblok.com https://img2.storyblok.com https://sheets.googleapis.com https://www.workable.com https://api.rippling.com https://va.vercel-scripts.com https://*.vercel-insights.com https://vitals.vercel-insights.com; frame-src 'self' https://www.googletagmanager.com https://www.google.com https://td.doubleclick.net https://*.cookieyes.com https://*.hotjar.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://chat.conversica.com https://*.conversica.com https://*.leandata.com https://info.printerlogic.com https://app.storyblok.com https://editor.storyblok.com https://m.storyblok.com https://app.zoominfo.com https://vercel.live; worker-src 'self' blob:; media-src 'self' blob: https://a-us.storyblok.com https://a.storyblok.com https://img.storyblok.com https://img2.storyblok.com; object-src 'none'; base-uri 'self'; form-action 'self' https://info.printerlogic.com https://*.marketo.com https://*.marketo.net; report-uri /api/csp-report/; report-to csp-endpoint 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com maxcdn.bootstrapcdn.com cdn.userway.org *.userway.org *.fontawesome.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.facebook.com platform.twitter.com https://plumrocket.com https://accounts.google.com www.clarity.ms *.clarity.ms cdn.userway.org *.userway.org *.omniconvert.com js.mollie.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com https://applepay.cdn-apple.com checkout.sezzle.com sandbox.checkout.sezzle.com tracking.sezzle.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com www.clarity.ms *.clarity.ms cdn.userway.org *.userway.org *.omniconvert.com https://www.mollie.com *.authorize.net assets.secure.checkout.visa.com sandbox.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com https://applepay.cdn-apple.com media.sezzle.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page https://maps.googleapis.com https://player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.googleapis.com *.gstatic.com *.plugins.emarsys.net *.scarabresearch.com https://cdn.jsdelivr.net connect.facebook.net twitter.com platform.twitter.com https://accounts.google.com https://www.gstatic.com www.clarity.ms *.clarity.ms cdn.userway.org *.userway.org *.omniconvert.com https://www.googletagmanager.com tagmanager.google.com https://www.googleadservices.com widget.freshworks.com m2epro.freshdesk.com js.mollie.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com https://applepay.cdn-apple.com checkout-sdk.sezzle.com sandbox.checkout-sdk.sezzle.com widget.sezzle.com https://cdn-scripts.signifyd.com https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com unsafe-inline assets.braintreegateway.com https://accounts.google.com https://www.gstatic.com www.clarity.ms *.clarity.ms cdn.userway.org *.userway.org *.omniconvert.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com maxcdn.bootstrapcdn.com fonts.cdnfonts.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.magento.com *.magento-datasolutions.com *.magento-ds.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.scarabresearch.com *.eservice.emarsys.net https://commerce.adobe.io https://commerce.adobedc.net https://accounts.google.com www.clarity.ms *.clarity.ms cdn.userway.org *.userway.org api.userway.org *.omniconvert.com widget.freshworks.com m2epro.freshdesk.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com gateway.sezzle.com sandbox.gateway.sezzle.com media.sezzle.com widget.sezzle.com https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self' *.zdassets.com *.zopim.com *.zendesk.com wss://*.zendesk.com wss://*.zopim.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' d1qmrxg9gbf226.cloudfront.net api-accent.bloomreach.co api.smooch.io applepay.cdn-apple.com *.googleadservices.com *.braintreegateway.com assets.braintreegateway.com/web *.bazaarvoice.com *.doubleclick.net storage.googleapis.com/workbox-cdn www.google.com/recaptcha/ www.gstatic.com/recaptcha/ cfjump.skechers.com.au cfjump.skechers.co.nz *.fullstory.com www.googletagmanager.com analytics.tiktok.com cdn.unidays.world *.truefitcorp.com www.paypalobjects.com/api/checkout.min.js *.klaviyo.com t.cfjump.com *.zdassets.com connect.facebook.net maps.googleapis.com dma-cdn.staging.truefitcorp.com/fitrec/dma/js/tracker.js js-agent.newrelic.com js.datadome.co ct.captcha-delivery.com *.adobedtm.com *.afterpay.com *.demdex.net *.forter.com dlthst9q2beh8.cloudfront.net d2nww8zpyj5pk0.cloudfront.net *.google-analytics.com *.paypal.com afterpay.com foursixty.com *.useinsider.com *.roymorgan.com s.pinimg.com/ct lantern.roeyecdn.com/lantern_global_cf42725.min.js *.adobemc.com js-sandbox.squarecdn.com api.myunidays.com player.vimeo.com ct.pinterest.com js.squarecdn.com *.stg.qantasloyalty.com/appcache/wid-redemptions-button/master/ *.stg.qantasloyalty.com/ ; style-src 'self' 'unsafe-inline' display.ugc.bazaarvoice.com maxcdn.bootstrapcdn.com/font-awesome *.typekit.net fonts.googleapis.com assets.braintreegateway.com *.adobetm.com foursixty.com *.adobemc.com static.klaviyo.com/onsite/js ; img-src data: 'self' api-accent.bloomreach.co *.zendesk.com dpm.demdex.net www.googleadservices.com/ccm www.magentocommerce.com/products/media *.skechers.co.nz *.skechers.com.au cm.everesttech.net/cm/dd googleads.g.doubleclick.net ad.doubleclick.net www.google.com/ccm www.paypalobjects.com www.google.com www.google.com.au www.google.co.nz www.google.com.vn maps.gstatic.com/mapfiles scontent.cdninstagram.com *.afterpay.com *.accentgra.com www.googletagmanager.com www.facebook.com *.bazaarvoice.com t.paypal.com duuytoqss3gu4.cloudfront.net df45ay5pw60dy.cloudfront.net d3nocrch4qti4v.cloudfront.net *.google-analytics.com *.pinterest.com *.tiktok.com *.useinsider.com maps.googleapis.com/maps developers.google.com *.zopim.io *.zdassets.com blob amcglobal.sc.omtrdc.net adservice.google.com lantern.roeye.com i.vimeocdn.com/video ; object-src 'none' ; base-uri 'self' ; child-src 'self' blob: ; connect-src 'self' api-accent.bloomreach.co analytics.google.com/g/collect iq.afterpay.com/us/v1 iq.afterpay-beta.com/us/v1 *.my.sentry.io wss://api.smooch.io *.accentgra.com www.facebook.com/tr google.com www.google.com collect-ap2.attraqt.io smetrics.skechers.co.nz *.fullstory.com *.klaviyo.com smetrics.skechers.com.au api-js.datadome.co *.adobedc.net *.afterpay.com *.bazaarvoice.com *.braintree-api.com *.braintreegateway.com *.demdex.net *.forter.com *.foursixty.com google.com/ccm www.google.com/ccm *.google-analytics.com *.googleapis.com *.nr-data.net *.paypal.com *.truefitcorp.com *.zdassets.com *.zendesk.com *.zopim.com accentgroupxpdev.112.2o7.net afterpay.com analytics.tiktok.com facebook.com *.roymorgan.com foursixty.com kleber.datatoolscloud.net.au sentry.io vimeo.com wss://widget-mediator.zopim.com d2o5idwacg3gyw.cloudfront.net dz8rit8v72mig.cloudfront.net d2lxqodqbpy7c2.cloudfront.net d6rak4b14t5gp.cloudfront.net d3k4bt74u9esq1.cloudfront.net wss://cdn0.forter.com api.myunidays.com ct.pinterest.com/stats ct.pinterest.com/static ct.pinterest.com/v3 ct.pinterest.com/user lantern.roeye.com *.useinsider.com www.googletagmanager.com/td ad.doubleclick.net *.stg.qantasloyalty.com/ ; font-src data: 'self' maxcdn.bootstrapcdn.com/font-awesome fonts.gstatic.com *.truefitcorp.com *.useinsider.com static.klaviyo.com use.typekit.net ; frame-src 'self' api-accent.bloomreach.co www.googletagmanager.com geo.captcha-delivery.com *.formstack.com *.afterpay.com *.bazaarvoice.com *.demdex.net *.doubleclick.net *.facebook.com *.myunidays.com *.omniparcelreturns.com *.paypal.com *.paypalobjects.com *.truefitcorp.com *.useinsider.com *.vimeo.com *.youtu.be *.youtube.com afterpay.com assets.braintreegateway.com facebook.com foursixty.com google.com www.google.com vimeo.com *.pinterest.com *.qlstg.qantas.com/ ; worker-src 'self' blob: *.accentgra.com *.skechers.co.nz *.skechers.com.au; 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.cookiebot.com maps.googleapis.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.google.co.uk *.cloudflare.com *.google.co.in maps.googleapis.com https://images.unsplash.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.cookiebot.com *.bing.com *.facebook.net *.googleapis.com static.cloudflareinsights.com www.gstatic.com https://maps.googleapis.com https://player.vimeo.com js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maps.googleapis.com assets.braintreegateway.com *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com maps.googleapis.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.cookiebot.com googleads.g.doubleclick.net maps.googleapis.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.espssl.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.gstatic.com *.twimg.com *.googleapis.com *.bootstrapcdn.com *.cloudflare.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.twitter.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.ladesk.com *.twitter.com *.google.com *.google.co.in *.kaptcha.com *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://www.magezon.com *.espssl.com *.payments-amazon.com *.listrakbi.com *.pinterest.com *.facebook.com *.gstatic.com *.google.com *.google.co.in *.klarna.com *.twitter.com *.ytimg.com stats.g.doubleclick.net *.connect.facebook.net pixel.advertising.com *.googletagmanager.com *.twimg.com *.placehold.it blob: www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.commerce-payment-services.com *.google.com cdnjs.cloudflare.com *.pinterest.com *.listrakbi.com *.listrak.com *.ladesk.com s.pinimg.com *.facebook.net *.twitter.com *.google.co.in *.facebook.com *.twimg.com *.gstatic.com connect.facebook.net *.googletagmanager.com static-na.payments-amazon.com js-agent.newrelic.com *.jquery.com 'self' *.google.com/ https://rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com cdnjs.cloudflare.com *.jquery.com *.espssl.com *.fontawesome.com *.typekit.net https://use.typekit.net *.listrakbi.com *.googleapis.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.gstatic.com *.youtube.com *.bootstrapcdn.com 'unsafe-inline' assets.braintreegateway.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.magento-datasolutions.com *.magento-ds.com *.listrakbi.com *.doubleclick.net *.algolia.io *.pinterest.com *.twitter.com *.twimg.com *.google.com *.google.co.in *.facebook.com *.braintree-api.com *.amazon.com bam.nr-data.net *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com *.cardinalcommerce.com google.com *.googleapis.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de 'self' 'unsafe-inline'; child-src 'self' blob: assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://actionis.report-uri.com/a/d/g; report-to report-endpoint; 2
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.googleadservices.com https://*.doubleclick.net https://pagead2.googlesyndication.com https://connect.facebook.net; connect-src 'self' https://api.fabapp.ai https://*.r2.cloudflarestorage.com https://*.fabapp.app https://*.fabapp.ai https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://www.googleadservices.com https://*.doubleclick.net https://pagead2.googlesyndication.com https://www.google.com https://www.facebook.com; frame-src 'self' https://*.fabapp.app https://*.fabapp.ai https://td.doubleclick.net https://*.doubleclick.net https://www.googletagmanager.com; form-action 'self' 2
default-src 'self'; connect-src 'self' dc.services.visualstudio.com ssl.google-analytics.com stats.g.doubleclick.net https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com partner.testseek.com https://api.stripe.com; font-src 'self' data: fonts.gstatic.com static.stockinthechannel.com; frame-src 'self' accounts.stockinthechannel.co.uk app.powerbi.com ad.doubleclick.net bid.g.doubleclick.net www.youtube.com www.google.com www.vimeo.com https://js.stripe.com https://hooks.stripe.com; frame-ancestors accounts.stockinthechannel.co.uk; img-src * data:; media-src 'self' images.stockinthechannel.co.uk media.stockinthechannel.com static.stockinthechannel.com; manifest-src images.stockinthechannel.co.uk; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' accounts.stockinthechannel.co.uk images.stockinthechannel.co.uk static.stockinthechannel.com www.googleadservices.com ssl.google-analytics.com googleads.g.doubleclick.net https://*.googletagmanager.com www.google.com www.gstatic.com www.youtube.com https://js.stripe.com; style-src 'self' 'unsafe-inline' static.stockinthechannel.com fonts.googleapis.com ajax.googleapis.com; report-uri https://stockchannel.report-uri.com/r/d/csp/reportOnly 2
font-src www.paypalobjects.com *.fontawesome.com *.gstatic.com 'self' data: *.doubleclick.net https://fonts.bunny.net *.paypal.com *.paypalobjects.com *.typekit.net *.cdn-apple.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.punchout2go.com *.tradecentric.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com https://www.google.com/recaptcha/ *.youtube.com *.youtube-nocookie.com *.certcapture.com *.google.com *.doubleclick.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * js.mollie.com *.sandbox.paypal.com *.punchout2go.com *.tradecentric.com www.xtento.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.certcapture.com https://images.unsplash.com *.amazonaws.com *.logiscenter.com *.files-text.com *.livechatinc.com *.livechat-files.com *.livechat-static.com cdn.doofinder.com 'self' data: *.google.com *.google.bg *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://www.mollie.com *.sandbox.paypal.com *.barcodespim.com *.cloudfront.net *.barcodesinc.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src analytics.ahrefs.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.certcapture.com https://maps.googleapis.com https://player.vimeo.com ajax.googleapis.com static.userguiding.com *.livechatinc.com *.livechat-static.com us1-config.doofinder.com eu1-config.doofinder.com cdn.doofinder.com cmp.inmobi.com *.google.com *.google.bg *.googletagmanager.com *.doubleclick.net *.google-analytics.com *.gstatic.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com js.mollie.com *.sandbox.paypal.com *.paypalobjects.com *.cdn-apple.com *.punchout2go.com *.tradecentric.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.certcapture.com *.fontawesome.com *.livechatinc.com cdn.doofinder.com *.googleapis.com *.doubleclick.net *.gstatic.com *.googletagmanager.com https://fonts.bunny.net assets.braintreegateway.com *.punchout2go.com *.tradecentric.com 'self' 'unsafe-inline'; object-src *.livechatinc.com 'self' 'unsafe-inline'; media-src *.livechatinc.com *.livechat-static.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src analytics.ahrefs.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com vimeo.com *.certcapture.com https://maps.googleapis.com https://player.vimeo.com *.userguiding.com *.livechatinc.com *.text.com cdn.doofinder.com wss://eu1-layer.doofinder.com eu1-api.doofinder.com eu1-config.doofinder.com wss://us1-layer.doofinder.com us1-api.doofinder.com us1-config.doofinder.com cmp.inmobi.com api.cmp.inmobi.com visit-server.inmobi-choice.io *.googlesyndication.com *.google-analytics.com *.google.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.sandbox.paypal.com 'self' 'unsafe-inline'; child-src *.certcapture.com *.livechatinc.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://analytics.wpmucdn.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://www.youtube.com; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://analytics.wpmucdn.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://www.youtube.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://www.google.com https://www.google.nl https://www.google.de https://www.google.com.co https://www.google.sk https://www.google.cz https://www.google.co.in https://www.google.co.uk https://www.google.at https://www.google.ro https://www.google.be https://www.googletagmanager.com https://stats.g.doubleclick.net https://lh3.googleusercontent.com https://i0.wp.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://www.google.nl https://www.google.co.uk https://api.ipify.org https://api64.ipify.org https://account.interwijs.nl https://www.google.com https://www.ictwaarborg.nl https://www.facebook.com https://twitter.com https://www.instagram.com https://www.linkedin.com https://cookiedatabase.org https://www.googletagmanager.com https://analytics3.wpmudev.com; media-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://interwijs.us7.list-manage.com; upgrade-insecure-requests; report-uri https://csp.interwijs.nl/ 2
font-src fonts.gstatic.com use.typekit.net *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors https://api.clerk.io https://cdn.clerk.io *.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.klarna.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com *.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io https://cdn.clerk.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com *.zonos.com *.postcodeanywhere.co.uk *.bing.net *.google.rs *.google.com *.bing.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://api.clerk.io https://cdn.clerk.io chimpstatic.com downloads.mailchimp.com *.list-manage.com widget.freshworks.com m2epro.freshdesk.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://cdn.logrocket.io https://cdn.logr-ingest.com https://cdn.lr-ingest.io https://cdn.lr-in.com https://cdn.lr-in-prod.com https://cdn.lr-ingest.com https://cdn.ingest-lr.com https://cdn.lr-intake.com https://cdn.intake-lr.com *.avada.io js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.zonos.com *.cloudflareinsights.com *.clerk.io *.pcapredict.com *.postcodeanywhere.co.uk *.bing.com *.clarity.ms *.hotjar.com *.lrkt-in.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://api.clerk.io https://cdn.clerk.io downloads.mailchimp.com widget.freshworks.com m2epro.freshdesk.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com tagmanager.google.com *.postcodeanywhere.co.uk *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io widget.freshworks.com m2epro.freshdesk.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://*.logrocket.io https://*.lr-ingest.io https://*.logrocket.com https://*.lr-in.com https://*.lr-in-prod.com https://*.lr-ingest.com https://*.ingest-lr.com https://*.lr-intake.com https://*.intake-lr.com https://*.logr-ingest.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com places.googleapis.com https://www.google-analytics.com *.zonos.com *.cloudflareinsights.com *.pcapredict.com *.postcodeanywhere.co.uk *.bing.com *.clarity.ms *.bing.net *.hotjar.com *.lrkt-in.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; connect-src 'self' services.postcodeanywhere.co.uk api.addressy.com settings.luckyorange.net live.opayo.eu.elavon.com/api/v1/ wss://in.visitors.live wss://visitors.live *.bing.com *.bing.net *.facebook.com pagead2.googlesyndication.com www.googleadservices.com ad.doubleclick.net *.google-analytics.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.co.uk px.ads.linkedin.com api.vimeo.com fresnel.vimeocdn.com ct.pinterest.com *.analytics.google.com; font-src 'self' www.westdean.ac.uk assets.westdean.ac.uk/ data:; frame-ancestors 'self' www.westdean.ac.uk; frame-src 'self' discoveruni.gov.uk *.luckyorange.com widget.discoveruni.gov.uk live.opayo.eu.elavon.com/api/v1/ my.matterport.com *.facebook.com *.googletagmanager.com download-video-ak.vimeocdn.com player.vimeo.com vimeo.com www.youtube.com ct.pinterest.com; img-src 'self' * data:; media-src d10lpsik1i8c69.cloudfront.net player.vimeo.com download-video-ak.vimeocdn.com/v3-1/playback/ vod-adaptive-ak.vimeocdn.com skyfire.vimeocdn.com; script-src 'self' services.postcodeanywhere.co.uk static.cloudflareinsights.com www.westdean.ac.uk assets.westdean.ac.uk/ d10lpsik1i8c69.cloudfront.net assets.opayo.cloud/assets/js/opayo-1.2.40.js cdn.tickettailor.com *.bing.com *.facebook.net www.googleadservices.com www.google.com pagead2.googlesyndication.com googleads.g.doubleclick.net *.googletagmanager.com apis.google.com snap.licdn.com chimpstatic.com player.vimeo.com *.vimeocdn.com www.youtube.com ct.pinterest.com s.pinimg.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' services.postcodeanywhere.co.uk www.westdean.ac.uk assets.westdean.ac.uk/ d10lpsik1i8c69.cloudfront.net 'unsafe-inline'; worker-src blob:; report-uri https://o74830.ingest.us.sentry.io/api/215515/security/?sentry_key=610a8846728c479cb10b52482e41c8cc; report-to csp-endpoint 2
font-src *.gstatic.com data: stats.g.doubleclick.net *.facebook.com *.fontawesome.com 'self' *.sovendus.com *.cloudflare.com *.twitter.com *.typekit.net *.googleapis.com *.bootstrapcdn.com https://int-ecommerce.nexi.it/ecomm/XPayBuild/ https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.twitter.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.bolt.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.bolt.com https://www.google.com/recaptcha/ www.googletagmanager.com *.google.com *.fls.doubleclick.net www.facebook.com *.awin1.com *.zenaps.com 'self' *.sovendus.com www.sovendus-benefits.com www.sovendus-campaign.com www.sovendus-connect.com www.sovendus-network.com *.twitter.com *.addthis.com https://int-ecommerce.nexi.it/ https://hal9000.redintelligence.net/ https://ad4m.at/frame.html *.hotjar.com *.criteo.com int-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://plumrocket.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.awin1.com *.zenaps.com *.wepowerconnections.com 'self' *.sovendus.com *.bird.eu *.cloudflare.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com https://ecommerce.nexi.it/ecomm/payment/img/visa.svg https://ecommerce.nexi.it/ecomm/payment/img/mastercard.svg https://ecommerce.nexi.it/ecomm/payment/img/logoNexiLarge.png https://ecommerce.nexi.it/ecomm/payment/img/maestro.svg https://form.jotform.com/ https://www.google.it/ https://as.ad4m.at/ad/ https://r.adserver01.de/rt/ *.taboola.com/ https://track.adform.net/ https://ads.creative-serving.com/ https://adservice.google.it/ https://secure.adnxs.com/ https://events.jotform.com/jsform/ *.favicon.ico https://cdn.jotfor.ms/assets/img/logo/logo-new@1x.png https://cdn.jotfor.ms/favicon.ico https://tr.outbrain.com/unifiedPixel https://criteo-partners.tremorhub.com/ https://contextual.media.net/ https://ad.360yield.com/ https://jadserve.postrelease.com https://simage2.pubmatic.com/ https://ib.adnxs.com/ https://pixel.rubiconproject.com/ https://rtb-csync.smartadserver.com/ https://criteo-sync.teads.tv/ https://eb2.3lift.com/ https://visitor.omnitagjs.com/ https://s.thebrighttag.com *.criteo.com/ *.analytics.yahoo.com/ https://beacon.krxd.net/ https://x.bidswitch.net/ https://e1.emxdgt.com/ *.ads.yieldmo.com https://ad.yieldlab.net/ https://match.sharethrough.com/ https://sync.outbrain.com/ https://exchange.mediavine.com/ https://matching.ivitrack.com/ https://id5-sync.com cdn.doofinder.com int-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com cdn.klarna.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.bolt.com *.commerce-quick-checkout.com http://localhost:8082 https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.awin1.com www.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com 'self' 'unsafe-inline' 'unsafe-eval' *.sovendus.com *.cloudflare.com *.twitter.com googletagmanager.com *.trustedshops.com *.fontawesome.com *.addthis.com s7.addthis.com m.addthis.com z.moatads.com *.addthisedge.com apis.google.com graph.facebook.com widgets.pinterest.com *.nr-data.net js-agent.newrelic.com cdn.scalapay.com int-ecommerce.nexi.it form.jotform.com ad4m.at *.taboola.com *.hotjar.com *.outbrain.com static.criteo.net static.hotjar.com cdn.jotfor.ms dynamic.criteo.com *.smct.io *.smct.co https://smct.co/ *.iubenda.com hits-i.iubenda.com *.mainadv.com *.openapi.it *.cardinalcommerce.com cdn.doofinder.com ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com www.google.com www.gstatic.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com https://www.dwin1.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.fontawesome.com 'self' 'unsafe-inline' 'unsafe-hashes' *.sovendus.com *.cloudflare.com *.twitter.com *.typekit.net *.bootstrapcdn.com https://form.jotform.com/ *.jotfor.ms *.doofinder.com unsafe-inline assets.braintreegateway.com https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.bolt.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com https://www.wepowerconnections.com/ https://the.sciencebehindecommerce.com 'self' *.sovendus.com www.sovendus-benefits.com www.sovendus-campaign.com www.sovendus-connect.com www.sovendus-network.com *.cloudflare.com *.twitter.com *.paypal.com *.nr-data.net https://int-ecommerce.nexi.it/ *.hotjar.com https://stats.g.doubleclick.net/j/collect *.criteo.com https://trc-events.taboola.com/1052370/log/3/unip https://firehose.eu-west-1.amazonaws.com https://hits-i.iubenda.com/write https://cognito-identity.eu-west-1.amazonaws.com/ https://tr.outbrain.com/ *.openapi.it *.cardinalcommerce.com *.doofinder.com wss://*.doofinder.com int-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com google.com maps.googleapis.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://integration-5ojmyuq-zgzvw2kr4mr5m.eu-5.magentosite.cloud/italiano; report-to report-endpoint; 2
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://*.google-analytics.com https://*.cookiebot.com https://app03.wilken-crm.com https://www.google.com https://www.gstatic.com https://translate-cdn.eye-able.com https://log.staatsoper-hamburg.de; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://www.googletagmanager.com https://*.google-analytics.com https://*.cookiebot.com https://i.vimeocdn.com; font-src 'self'; connect-src 'self' https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.cookiebot.com https://translate-cdn.eye-able.com https://translate.eye-able.com https://service.die-hamburgische-staatsoper.de https://log.staatsoper-hamburg.de; frame-src https://www.youtube-nocookie.com https://www.youtube.com https://player.vimeo.com https://*.cookiebot.com https://www.google.com; media-src 'self'; report-uri /csp-report.php 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://cdn.mediaroket.xyz; media-src 'self' https://cdn.mediaroket.xyz; font-src 'self' data:; connect-src 'self' https://cdn.mediaroket.xyz; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' 2
font-src fonts.gstatic.com use.typekit.net *.fontawesome.com https://fonts.bunny.net *.gstatic.com 'self' data: https://fonts.gstatic.com *.googleapis.com *.hsappstatic.net data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action *.facebook.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.cookiebot.com *.doubleclick.net js.mollie.com *.weltpixel.com www.xtento.com *.googletagmanager.com *.bing.com *.facebook.com *.google.com google.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.bing.com *.hsforms.net *.hsforms.com *.prism.app-us1.com *.prismic.io https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com https://www.mollie.com 'self' data: www.google.com.ua www.xtento.com cdn.xtento.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com *.cookiebot.com *.doubleclick.net *.facebook.com *.facebook.net *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cd www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.tr www.google.com.tw www.google.com.uy www.google.com.vn www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.hn www.google.hr www.google.hu www.google.ie www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.mv www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.si www.google.sk www.google.sm www.google.sn www.google.sr www.google.td www.google.tm www.google.tn www.google.vu *.google.com google.com *.googlesyndication.com *.googleusercontent.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.cookiebot.com *.cloudfront.net *.bing.com *.facebook.net *.hsforms.net *.hsforms.com *.prism.app-us1.com *.prismic.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com js.mollie.com *.google.com *.gstatic.com www.xtento.com cdn.xtento.com *.googletagmanager.com tagmanager.google.com *.doubleclick.net *.googleapis.com *.googlesyndication.com *.klaviyo.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com https://fonts.googleapis.com *.klaviyo.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.adobe.io performance.typekit.net *.sentry.io t.elasticsuite.io *.hsforms.net *.hsforms.com *.prism.app-us1.com *.prismic.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io *.googletagmanager.com *.pay.nl *.bing.com *.cookiebot.com *.doubleclick.net *.facebook.com *.facebook.net *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bi www.google.bj www.google.bs www.google.ca www.google.cd www.google.ch www.google.cl www.google.cm www.google.co.ao www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.gh www.google.com.hk www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gm www.google.gr www.google.hr www.google.hu www.google.ie www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kz www.google.lk www.google.lt www.google.lu www.google.lv www.google.me www.google.mg www.google.mk www.google.mu www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.se www.google.si www.google.sk www.google.sn www.google.sr www.google.td www.google.tn *.google.com google.com *.googlesyndication.com *.klaviyo.com p2iqhncxyh.execute-api.eu-central-1.amazonaws.com rkkck31tec.execute-api.eu-central-1.amazonaws.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://cc69216c-160f-49b7-b5a2-f80ae473753e.sansec.watch/; report-to report-endpoint; 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.oliocarli.it https://*.oliocarli.de https://*.oliocarli.at https://*.oliocarli.fr https://*.oliocarli.ch https://*.oliocarli.us https://*.fratellicarli.com https://carli.my.site.com https://*.carli.my.site.com https://*.salesforce.com https://google.com https://*.google.com https://google.it https://*.google.it https://google.de https://*.google.de https://google.ch https://*.google.ch https://google.co.uk https://*.google.co.uk https://google.com.ua https://*.google.com.ua https://*.gstatic.com https://*.googleapis.com https://*.googletagmanager.com https://*.doubleclick.net https://*.googlesyndication.com https://*.google-analytics.com https://pay.google.com https://accounts.google.com https://paypal.com https://*.paypal.com https://*.paypalobjects.com https://shopforward.eu https://*.gestpay.net https://*.sella.it https://*.klarna.com https://*.adyen.com https://*.authorize.net https://*.visa.com https://*.ccdc02.com https://*.addthis.com https://*.addthisedge.com https://static.addtoany.com https://*.newrelic.com https://*.nr-data.net https://*.cookiebot.com https://*.clarity.ms https://*.luckyorange.com https://*.hotjar.com https://*.fullstory.com https://*.smartlook.com https://*.taboola.com https://*.zemanta.com https://*.rfihub.net https://twitter.com https://*.twitter.com https://*.ads-twitter.com https://*.facebook.net https://*.bing.com https://*.webgains.io https://*.typekit.net https://*.jsdelivr.net https://cdnjs.cloudflare.com https://*.cloudfront.net https://*.salecycle.com https://*.omniconvert.com https://*.fanplayr.com https://*.visualwebsiteoptimizer.com https://*.sc-static.net https://*.moatads.com https://*.lockerdomecdn.com https://*.dwin1.com https://*.roeye.com https://*.roeyecdn.com https://*.plyr.io https://*.trustpilot.com https://*.sandbox.my.site.com https://*.creativecdn.com https://*.r66net.com https://*.r66net.net https://malsup.github.io https://the.sciencebehindecommerce.com https://*.awin1.com https://*.adform.net https://player.wowza.com https://rum.hlx.page https://*.zenaps.com https://overbridgenet.com https://*.videostep.com https://*.acsbapp.com https://www.youtube.com; connect-src 'self' https://*.oliocarli.it https://*.oliocarli.de https://*.oliocarli.at https://*.oliocarli.fr https://*.oliocarli.ch https://*.oliocarli.us https://acsbapp.com https://*.acsbapp.com https://*.addthis.com https://*.googleapis.com https://*.nr-data.net https://*.demdex.net https://*.omtrdc.net https://*.cardinalcommerce.com https://paypal.com https://*.paypal.com https://*.paypalobjects.com https://amazon.com https://*.amazon.com https://amazon.it https://*.amazon.it https://amazon.fr https://*.amazon.fr https://amazon.es https://*.amazon.es https://amazon.de https://*.amazon.de https://*.amazonpay.com https://*.amazonservices.com https://*.amazonservices.it https://*.amazonservices.fr https://*.amazonservices.es https://*.amazonservices.de https://*.dotdigital-pages.com https://webchat.dotdigital.com https://*.braintreegateway.com https://*.braintree-api.com https://*.yotpo.com https://*.trackedlink.net https://*.trackedweb.net https://*.sella.it https://*.cookiebot.com https://*.clarity.ms https://*.luckyorange.com https://*.cloudfront.net https://*.sc-static.net https://*.salecycle.com wss://ws.salecycle.com https://*.fratellicarli.com https://*.omniconvert.com https://*.fanplayr.com https://*.doubleclick.net https://*.taboola.com https://*.visualwebsiteoptimizer.com https://shopforward.eu https://*.a.run.app https://*.googlesyndication.com https://*.hotjar.com https://*.fullstory.com https://*.pinimg.com https://*.pinterest.com https://*.salesforce-scrt.com https://*.bing.com https://*.zemanta.com https://*.outbrain.com https://*.typekit.net https://*.authorize.net https://*.googletagmanager.com https://*.trustpilot.com https://*.sandbox.my.site.com https://*.googleadservices.com https://google.com https://*.google.com https://google.it https://*.google.it https://google.de https://*.google.de https://google.at https://*.google.at https://google.fr https://*.google.fr https://google.ch https://*.google.ch https://google.co.uk https://*.google.co.uk https://google.com.ua https://*.google-analytics.com https://*.salesforce.com https://*.jsdelivr.net https://*.roeye.com https://klarna.com https://*.klarna.com https://*.klarnaevt.com https://*.sentry.io https://*.adyen.com https://*.creativecdn.com https://*.conversionsapigateway.com https://facebook.com https://*.facebook.com https://*.r66net.com https://*.r66net.net https://*.videostep.com https://user-sync.fwmrm.net https://*.awinblackfriday.com https://*.wepowerconnections.com https://*.adform.net https://rum.hlx.page https://*.zenaps.com https://overbridgenet.com https://the.sciencebehindecommerce.com; frame-src 'self' https://*.oliocarli.it https://*.oliocarli.de https://*.oliocarli.at https://*.oliocarli.fr https://*.oliocarli.ch https://*.oliocarli.us https://static.addtoany.com https://*.addthis.com https://*.gestpay.net https://*.sella.it https://*.salecycle.com https://*.cookiebot.com https://*.doubleclick.net https://*.rfihub.com https://*.googleapis.com https://*.typekit.net https://*.trustpilot.com https://*.googletagmanager.com https://*.mainadv.com https://*.sandbox.my.site.com https://google.com https://*.google.com https://google.it https://*.google.it https://google.de https://*.google.de https://google.ch https://*.google.ch https://google.co.uk https://*.google.co.uk https://google.com.ua https://*.paypal.com https://carli.my.site.com https://*.carli.my.site.com https://klarna.com https://*.klarna.com https://platform.twitter.com https://facebook.com https://*.facebook.com https://*.youtube.com https://tsdtocl.com https://*.awin1.com https://*.rsa3dsauth.co.uk https://*.securesuite.co.uk https://e.issuu.com https://*.wlp-acs.com https://*.fatcoupon.com https://tatrck.com https://hipodi.com https://*.lcl.fr https://*.arcot.com https://*.nexigroup.com https://oponas.com https://mitlogen.com https://bcsgsrv.com https://go.storecategory.com https://*.adyen.com https://*.zenaps.com https://overbridgenet.com https://*.videostep.com; font-src 'self' data: https://*.oliocarli.it https://*.oliocarli.de https://*.oliocarli.at https://*.oliocarli.fr https://*.oliocarli.ch https://*.oliocarli.us https://*.acsbapp.com https://*.cloudflare.com https://*.gstatic.com https://*.typekit.net https://res-1.cdn.office.net https://*.klarnacdn.net; img-src 'self' data: blob: https://*.oliocarli.it https://*.oliocarli.de https://*.oliocarli.at https://*.oliocarli.fr https://*.oliocarli.ch https://*.oliocarli.us https://*.cookiebot.com https://*.clarity.ms https://*.luckyorange.com https://*.cloudfront.net https://*.sc-static.net https://*.salecycle.com https://*.fratellicarli.com https://*.omniconvert.com https://*.fanplayr.com https://*.visualwebsiteoptimizer.com https://*.zemanta.com https://t.co https://twitter.com https://*.twitter.com https://google.it https://*.google.it https://google.com https://*.google.com https://google.rw https://*.google.rw https://google.de https://*.google.de https://google.at https://*.google.at https://google.fr https://*.google.fr https://google.ch https://*.google.ch https://google.co.il https://*.google.co.il https://*.bing.com https://*.adnxs.com https://*.doubleclick.net https://*.visa.com https://*.gstatic.com https://*.roeye.com https://*.googletagmanager.com https://*.googleapis.com https://*.adyen.com https://facebook.com https://*.facebook.com https://facebook.net https://*.facebook.net https://paypal.com https://*.paypal.com https://*.paypalobjects.com https://*.videostep.com https://*.pubmatic.com https://*.googlesyndication.com https://*.udmserve.net https://*.rubiconproject.com https://*.adform.net https://*.teads.tv https://*.3lift.com https://*.adscale.de https://*.taboola.com https://*.smartadserver.com https://*.casalemedia.com https://ks1.invibes.com https://ks1.b26net.com https://*.fwmrm.net https://*.outbrain.com https://*.33across.com https://*.yieldmo.com https://*.dmxleo.com https://*.nexx360.io https://*.awin1.com https://*.googleadservices.com https://*.1rx.io https://i.ytimg.com https://*.onetag-sys.com https://*.admixer.net https://*.omnitagjs.com https://*.lijit.com https://*.docomo.ne.jp https://*.openx.net https://*.e-planning.net https://*.seedtag.com https://*.media.net https://*.adtarget.com.tr https://*.mgid.com https://*.opera.com https://*.gumgum.com https://*.smaato.net https://*.rakuten.com https://*.connectad.io https://*.sonobi.com https://*.contextweb.com https://*.adtech.ink https://*.sharethrough.com https://*.ck-ie.com https://*.360yield.com https://*.inmobi.com https://ib.adnxs.com https://*.awinblackfriday.com https://*.loopme.me https://static-eu.payments-amazon.com https://user-sync.fwmrm.net https://cm.g.doubleclick.net https://bh.contextweb.com https://onetag-sys.com https://s.ad.smaato.net https://carli.my.site.com https://*.carli.my.site.com; style-src 'self' 'unsafe-inline' https://*.oliocarli.it https://*.oliocarli.de https://*.oliocarli.at https://*.oliocarli.fr https://*.oliocarli.ch https://*.oliocarli.us https://*.cloudflare.com https://carli.my.site.com https://*.carli.my.site.com https://*.googleapis.com https://*.typekit.net https://*.plyr.io https://*.sandbox.my.site.com https://*.klarnacdn.net; worker-src 'self' blob:; media-src 'self' data: https://*.oliocarli.it https://*.oliocarli.de https://*.oliocarli.at https://*.oliocarli.fr https://*.oliocarli.ch https://*.oliocarli.us https://*.adobe.com; frame-ancestors 'self' https://*.adyen.com https://*.google.com; report-uri magento-endpoint; report-to magento-endpoint 2
worker-src blob:; style-src-elem https://www.ppl.cz 'unsafe-inline' cdn.luigisbox.tech *.bootstrapcdn.com 'self'; script-src-elem https://www.ppl.cz 'self' 'unsafe-inline' *.packeta.com *.googletagmanager.com *.etrusted.com *.sps-sro.sk *.mczbf.com https://sandbox-merchant.revolut.com https://merchant.revolut.com *.google-analytics.com *.facebook.com *.amazonaws.com https://connect.facebook.net static.cloudflareinsights.com www.lhinsights.com www.clarity.ms scripts.luigisbox.tech glamipixel.com tags.creativecdn.com js-agent.newrelic.com cdn.luigisbox.tech scripts.clarity.ms *.doubleclick.net pay.google.com applepay.cdn-apple.com; font-src cash-f.squarecdn.com portal.bulkgate.com *.gstatic.com maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com data: *.revolut.com *.google.com google.com *.cdn-apple.com pay.google.com https://fonts.googleapis.com https://fonts.gstatic.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * portal.bulkgate.com https://www.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com *.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ * www.google.com portal.bulkgate.com js.mollie.com *.packeta.com *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com *.gstatic.com *.googlesyndication.com *.mczbf.com *.google.sk *.facebook.com https://www.facebook.com *.googletagmanager.com *.google-analytics.com *.mouseflow.com https://td.doubleclick.net *.thestreets.sk *.thestreets.cz *.thestreets.hu *.thestreets.pl *.thestreets.ro *.thestreets.at *.thestreets.de *.thestreets.fr *.thestreets.es *.thestreets.it *.thestreets.se *.thestreets.ee *.thestreets.lt *.thestreets.lv *.thestreets.fi *.thestreets.dk *.thestreets.nl *.thestreets.be *.thestreets.pt *.thestreets.gr *.thestreets.hr *.thestreets.si *.thestreets.bg *.thestreets.eu 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io * portal.bulkgate.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com quickchart.io img.youtube.com https://www.mollie.com https://api.dhl.com *.revolut.com *.google.com *.cdn-apple.com google.com *.googleapis.com pay.google.com *.gstatic.com https://tile.openstreetmap.org https://balikomat.sps-sro.sk https://i.alza.cz https://cdn.alza.cz *.googlesyndication.com *.google.sk *.mczbf.com https://connect.facebook.net *.facebook.com https://www.facebook.com https://www.heureka.sk *.mouseflow.com meetanshi.com *.meetanshi.com *.magecomp.com *.glami.sk *.glami.cz www.lhinsights.com *.3lift.com sync.addlv.smt.docomo.ne.jp hbx.media.net https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com maps.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ portal.bulkgate.com *.gstatic.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com js.mollie.com *.packeta.com https://www.ppl.cz *.revolut.com *.google.com *.cdn-apple.com google.com https://unpkg.com https://balikomat.sps-sro.sk/ 'self' 'unsafe-inline' *.googlesyndication.com *.google.sk *.facebook.com *.mczbf.com https://connect.facebook.net https://www.googletagmanager.com https://im9.cz *.mouseflow.com *.cloudfront.net *.amazonaws.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cash.app portal.bulkgate.com *.gstatic.com downloads.mailchimp.com maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com *.googleapis.com https://www.ppl.cz 'unsafe-inline' https://unpkg.com https://fonts.googleapis.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com * portal.bulkgate.com *.gstatic.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.packeta.com https://www.ppl.cz https://api.dhl.com https://maps.geoapify.com *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com https://unpkg.com https://balikomat.sps-sro.sk https://nominatim.openstreetmap.org *.googlesyndication.com *.mczbf.com *.facebook.com https://www.googletagmanager.com *.google.sk https://google.com *.google-analytics.com *.mouseflow.com *.thestreets.sk *.thestreets.cz *.thestreets.hu *.thestreets.pl *.thestreets.ro *.thestreets.at *.thestreets.de *.thestreets.fr *.thestreets.es *.thestreets.it *.thestreets.se *.thestreets.ee *.thestreets.lt *.thestreets.lv *.thestreets.fi *.thestreets.dk *.thestreets.nl *.thestreets.be *.thestreets.pt *.thestreets.gr *.thestreets.hr *.thestreets.si *.thestreets.bg *.thestreets.eu www.lhinsights.com ams.creativecdn.com *.luigisbox.tech *.clarity.ms *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
img-src 'self' data: *.commercecloud.salesforce.com *.googleapis.com *.gstatic.com *.ctfassets.net *.autoshack.com *.autoshack.ca *.demandware.net nova.collect.igodigital.com prd-cdn-talkdesk.talkdesk.com www.facebook.com *.google-analytics.com *.googletagmanager.com *.analytics.google.com *.g.doubleclick.net *.google.com *.google.ca googleads.g.doubleclick.net www.google.com pagead2.googlesyndication.com www.googleadservices.com google.com google.ca *.equalweb.com *.usercentrics.eu www.paypal.com www.paypalobjects.com www.sandbox.paypal.com assets.narvar.com *.pcipalstaging.cloud *.pcipal.cloud *.signifyd.com rapidscansecure.com www.rapidscansecure.com;script-src 'self' 'unsafe-eval' localhost:* *.site.com *.cybersource.com www.cybersource.com storage.googleapis.com *.autoshack.ca https://api.rates.autoshack.com *.autoshack.com autoshack.ca autoshack.com *.collect.igodigital.com *.googleapis.com talkdeskchatsdk.talkdeskapp.com *.googletagmanager.com *.google-analytics.com clarity.ms www.clarity.ms www.googleadservices.com www.google.com www.googletagmanager.com pagead2.googlesyndication.com googleads.g.doubleclick.net connect.facebook.net 546006088.collect.igodigital.com *.equalweb.com *.usercentrics.eu script.crazyegg.com *.crazyegg.com crazyegg.com wwww.crazyegg.com runtime.commercecloud.com api.quotiient.com *.doubleclick.net spglobal.com www.paypal.com www.sandbox.paypal.com pay.google.com *.cdn-apple.com www.gstatic.com gstatic.com www.google.com google.com *.pcipalstaging.cloud *.pcipal.cloud cdn-scripts.signifyd.com *.signifyd.com rapidscansecure.com www.rapidscansecure.com 'unsafe-inline';connect-src 'self' localhost:* *.salesforce-scrt.com *.cybersource.com www.cybersource.com *.googleapis.com api.cquotient.com api.talkdeskappca.com *.autoshack.com *.autoshack.ca *.spglobal.com *.google-analytics.com *.googletagmanager.com *.analytics.google.com *.g.doubleclick.net *.google.com *.google.ca *.clarity.ms pagead2.googlesyndication.com www.googleadservices.com www.google.com google.com *.mobify-storefront.com *.collect.igodigital.com *.equalweb.com *.usercentrics.eu script.crazyegg.com *.crazyegg.com crazyegg.com wwww.crazyegg.com www.facebook.com api.paypal.com api.sandbox.paypal.com www.paypal.com www.sandbox.paypal.com *.pcipalstaging.cloud *.pcipal.cloud *.signifyd.com rapidscansecure.com www.rapidscansecure.com;media-src *.ctfassets.net *.autoshack.com *.autoshack.ca;frame-src *.site.com *.cybersource.com www.cybersource.com *.ctfassets.net youtube.com www.youtube.com vimeo.com www.vimeo.com talkdeskchatsdk.talkdeskapp.com td.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pay.google.com *.cdn-apple.com www.google.com google.com www.gstatic.com gstatic.com *.demandware.net demandware.net development-na01-autoshack.demandware.net staging-na01-autoshack.demandware.net production-na01-autoshack.demandware.net *.pcipalstaging.cloud *.pcipal.cloud rapidscansecure.com www.rapidscansecure.com;frame-ancestors localhost:* 'self' *.salesforce.com *.autoshack.com *.autoshack.ca autoshack.ca autoshack.com *.commercecloud.salesforce.com runtime.commercecloud.salesforce.com autoshack.com *.demandware.net demandware.net development-na01-autoshack.demandware.net staging-na01-autoshack.demandware.net production-na01-autoshack.demandware.net https://cacentral1.pcipalstaging.cloud/ *.pcipalstaging.cloud *.pcipal.cloud;child-src www.facebook.com staticxx.facebook.com *.autoshack.ca *.autoshack.com autoshack.ca autoshack.com www.autoshack.ca www.autoshack.com *.demandware.net demandware.net development-na01-autoshack.demandware.net staging-na01-autoshack.demandware.net production-na01-autoshack.demandware.net www.paypal.com www.sandbox.paypal.com;style-src 'self' fonts.googleapis.com *.equalweb.com 'unsafe-inline';worker-src 'self' blob:;default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;object-src 'none';script-src-attr 'none';upgrade-insecure-requests 2
font-src *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://seo.mageplaza.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://plumrocket.com test.saferpay.com www.saferpay.com saferpay.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com test.saferpay.com www.saferpay.com saferpay.com https://cdn.eye-able.com https://trc.josefsteiner.at https://trc.josefsteiner.de https://elfsight.com https://phosphor.utils.elfsightcdn.com https://www.google.at https://www.google.de https://region1.analytics.google.com https://*.doubleclick.net https://public-prod-dspcookiematching.dmxleo.com https://www.facebook.com https://dis.criteo.com https://gum.criteo.com https://aa.agkn.com https://sync.1rx.io https://ad.yieldlab.net https://a.twiago.com https://criteo-partners.tremorhub.com https://eb2.3lift.com https://sync-t1.taboola.com https://simage2.pubmatic.com https://simage4.pubmatic.com https://criteo-sync.teads.tv https://rtb-csync.smartadserver.com https://sync.outbrain.com https://jadserve.postrelease.com https://ad.360yield.com https://x.bidswitch.net https://cs.media.net https://r.casalemedia.com https://id5-sync.com bat.bing.com https://eu.i.posthog.com *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://cdn.jsdelivr.net *.avada.io *.shopify.com player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com test.saferpay.com www.saferpay.com saferpay.com https://cdn.eye-able.com https://cdn.findologic.com https://static.criteo.net https://sslwidget.criteo.com https://universe-static.elfsightcdn.com https://elfsightcdn.com https://static.elfsight.com https://capi-automation.s3.us-east-2.amazonaws.com https://trc.josefsteiner.at https://trc.josefsteiner.de https://connect.facebook.net bat.bing.com https://eu.i.posthog.com https://eu-assets.i.posthog.com maps.googleapis.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com https://fonts.bunny.net 'unsafe-inline' assets.braintreegateway.com https://cdn.eye-able.com https://cdn.findologic.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com test.saferpay.com www.saferpay.com saferpay.com https://service.findologic.com https://pagead2.googlesyndication.com https://static.elfsight.com https://service-reviews-ultimate.elfsight.com https://core.service.elfsight.com https://universe-static.elfsightcdn.com https://maplibre.utils.elfsightcdn.com https://tiles.stadiamaps.com https://trc.josefsteiner.at https://trc.josefsteiner.de https://www.facebook.com https://*.ecs.us-east-2.on.aws https://capi-automation.s3.us-east-2.amazonaws.com https://ad.doubleclick.net https://googleads.g.doubleclick.net https://www.google.at bat.bing.com https://eu.i.posthog.com https://eu-assets.i.posthog.com places.googleapis.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://*.gopersonal.ai 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com webpay3g.transbank.cl webpay3gint.transbank.cl 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https://*.gopersonal.ai *.mercadolibre.com api.cappasity.com event.getblue.io googleads.g.doubleclick.net api-static.mercadopago.com secure-fields.mercadopago.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://*.gopersonal.ai *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar *.mercadolivre.com 'self' data: www.google.com.mx www.google.com.ar operaciones.jazminchebar.com.ar www.mailing.todoparachebar.com mg.mlstatic.com h.online-metrix.net ventasonline.payway.com.ar developers-ventasonline.payway.com.ar www.mailing.jazminchebar.com public-assets.goshops.ai jazminchebar.com.ar jazminchebar.com jazminchebar.cl jazminchebar.mx todoparachebar.com.ar todoparachebar.cl jazmincircular.com.ar data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page https://*.gopersonal.ai https://*.gstatic.com *.mlstatic.com *.mercadopago.com *.gstatic.com cdn.retailrocket.net d12zyq17vm1xwx.cloudfront.net event.getblue.io widget.getblue.io externalassets.icommarketing.com static.oct8ne.com connect.facebook.net services.fitprenda.com live.decidir.com maps.googleapis.com developers.decidir.com h.online-metrix.net h64.online-metrix.net ventasonline.payway.com.ar developers-ventasonline.payway.com.ar api.wcx.cloud www.clarity.ms f.wcentrix.com js-agent.newrelic.com scripts.clarity.ms scripts.icommkt.online 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://*.gopersonal.ai *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://*.gopersonal.ai https://*.goshops.ai https://*.googleapis.com https://*.gstatic.com *.mercadopago.com *.mercadolibre.com notifications-icommkt.com track-icommkt.com tracking.retailrocket.net cdn.retailrocket.net frontal-usa.oct8ne.com maps.googleapis.com googleads.g.doubleclick.net developers.decidir.com h.online-metrix.net ventasonline.payway.com.ar developers-ventasonline.payway.com.ar bam.nr-data.net d.clarity.ms jch-api.goshops.com ad.doubleclick.net api.icommkt.online/subscribe 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' https:; connect-src 'self' https:; form-action 'self'; upgrade-insecure-requests 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com data: cdn.jsdelivr.net *.googleapis.com *.tawk.to https://webchat.saysimple.io/ fonts.googleapis.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.multisafepay.com https://pay.google.com https://player.vimeo.com/ https://googleads.g.doubleclick.net/ https://www.google.nl/ https://ct.pinterest.com/ consentcdn.cookiebot.com consentcdn.cookiebot.eu www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com *.multisafepay.com *.doubleclick.net 'self' data: *.googleapis.com cdn.jsdelivr.net *.tawk.to tawk.link *.facebook.com *.gravatar.com https://www.google.nl/ https://imgsct.cookiebot.com/1.gif https://ct.pinterest.com/v3/* https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.google.com *.google.bg *.facebook.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com imgsct.cookiebot.com imgsct.cookiebot.eu ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https://vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.multisafepay.com https://pay.google.com *.googleapis.com *.gstatic.com *.jsdelivr.net *.tawk.to player.vimeo.com http://player.vimeo.com/api/player.js chimpstatic.com https://connect.facebook.net/ https://webchat.saysimple.io/ *.smooch.io https://s.pinimg.com/ https://ct.pinterest.com/ consent.cookiebot.com consent.cookiebot.eu https://s.pinimg.com/ct/lib/main.742e9fad.js https://s.pinimg.com/ct/core.js https://ct.pinterest.com/static/ct/token_create.js https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.tiktok.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.multisafepay.com *.googleapis.com cdn.jsdelivr.net *.tawk.to https://webchat.saysimple.io/ *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com downloads.mailchimp.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net https://vimeo.com/api/ geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.multisafepay.com 'self' data: *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com/ *.tawk.to 'self' ws: *.doubleclick.net https://webchat.saysimple.io/ *.smooch.io *.gravatar.com https://ct.pinterest.com/ consent.cookiebot.com consent.cookiebot.eu https://ct.pinterest.com/* https://ct.pinterest.com/v3/* https://ct.pinterest.com/user/* https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.facebook.com *.facebook.net *.googlesyndication.com *.tiktok.com consentcdn.cookiebot.com consentcdn.cookiebot.eu form-assets.mailchimp.com *.intuit.com *.amazonaws.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self';                    script-src 'report-sample' 'self' 'unsafe-inline' https://acsbapp.com/ https://browser.sentry-cdn.com/ https://cdn.cookielaw.org/ https://cdn.jsdelivr.net/ https://cdn.tailwindcss.com/ https://code.jquery.com/ https://fast.wistia.com/ https://js.monitor.azure.com/ https://kit.fontawesome.com/ https://www.google.com/ https://www.googletagmanager.com/ https://www.gstatic.com/;                   style-src 'report-sample' 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.jquery.com https://fonts.googleapis.com;                    img-src *;                    font-src * data:;                    frame-src 'self' https://privacyportal.onetrust.com https://www.google.com;                    frame-ancestors 'self' *.globalmedicalresponse.corpweb *.globalmedicalresponse.com;                    connect-src 'self' https://*.litix.io https://cdn.acsbapp.com https://cdn.cookielaw.org https://centralus-2.in.applicationinsights.azure.com https://dc.services.visualstudio.com https://distillery.wistia.com https://embed-cloudfront.wistia.com https://fast.wistia.com https://fast.wistia.net https://geolocation.onetrust.com https://ka-p.fontawesome.com https://kit.fontawesome.com https://pipedream.wistia.com https://privacyportal.onetrust.com https://www.google-analytics.com;                   object-src 'none';                    base-uri 'self';                    manifest-src 'self';                    media-src 'self' blob:;                   worker-src 'none';                    report-uri https://68654b2b841f0014a4c0d0f7.endpoint.csper.io?v=1; 2
script-src 'self' https://www.googleapis.com https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://cdn.userway.org 'sha256-uQ14xz9MfP77CFLAHa/RqdOFRRUf44Ceu3ENXhf6V0w=' 2
default-src               'self'               https://*.bg-verkehr.de               https://*.bg-kooperation.de;             base-uri               'self'               https://*.bg-verkehr.de               https://*.bg-kooperation.de;             object-src               https://*.bg-verkehr.de               https://*.bg-kooperation.de;             frame-ancestors               'self'               https://*.bg-verkehr.de               https://*.bg-kooperation.de;             form-action               'self'               https://*.bg-verkehr.de               https://*.bg-kooperation.de;             script-src               'self'               'unsafe-inline'               'unsafe-eval'               https://consent.cookiefirst.com               https://cs-assets.b-ite.com               https://f.vimeocdn.com               https://static.b-ite.com               https://www.google.com               https://www.gstatic.com               https://*.bg-verkehr.de               https://*.bg-kooperation.de;             script-src-elem               'self'               'unsafe-inline'               http://webstatistik.bg-kooperation.de               https://webstatistik.bg-kooperation.de               https://consent.cookiefirst.com               https://cs-assets.b-ite.com               https://f.vimeocdn.com               https://static.b-ite.com               https://www.google.com               https://www.gstatic.com               https://*.bg-verkehr.de               https://*.bg-kooperation.de;             style-src               'self'               'unsafe-inline'               https://consent.cookiefirst.com               https://cs-assets.b-ite.com               https://f.vimeocdn.com               https://www.gstatic.com               https://*.bg-verkehr.de               https://*.bg-kooperation.de;             img-src               'self'               data:               blob:               https://cs-assets.b-ite.com               https://i.vimeocdn.com               https://www.gstatic.com               https://*.bg-verkehr.de               https://*.bg-kooperation.de;             font-src               'self'               data:               https://*.bg-verkehr.de               https://*.bg-kooperation.de;             connect-src               'self'               https://arclight.vimeo.com               https://consent.cookiefirst.com               https://edge.cookiefirst.com               https://api.cookiefirst.com               https://jobs.b-ite.com               https://orion.bendingspoons.com               https://vimeo.com               https://www.google.com/recaptcha/               https://*.bg-verkehr.de               https://*.bg-kooperation.de;             frame-src               'self'               https://player.vimeo.com               https://www.google.com               https://*.bg-verkehr.de               https://*.bg-kooperation.de;             media-src               'self'               data:               https://*.bg-verkehr.de               https://*.bg-kooperation.de;             worker-src               'self'               blob:;             manifest-src               'self'               https://*.bg-verkehr.de               https://*.bg-kooperation.de;             report-uri               https://www.bg-verkehr.de/csp-report             2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.bootstrapcdn.com *.yotpo.com *.zopim.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com maxcdn.bootstrapcdn.com *.fontawesome.com fonts.googleapis.com https://fonts.gstatic.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.googlesyndication.com *.tiktok.com https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors localhost:* *.motive.co *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://plumrocket.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cloudflare.com *.cloudfront.net *.klarna.com *.googleadservices.com *.google.com *.google.it *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.bootstrapcdn.com *.yotpo.com *.zopim.com *.doubleclick.net *.bing.com *.clarity.ms https://images.unsplash.com *.feedaty.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.google.bg *.facebook.com *.facebook.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com quickchart.io img.youtube.com *.motive.co *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.cloudflare.com *.cloudflareinsights.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bootstrapcdn.com *.yotpo.com *.zopim.com *.zdassets.com *.bing.com *.clarity.ms *.searchserverapi.com searchserverapi.com https://maps.googleapis.com https://player.vimeo.com *.feedaty.com widget.freshworks.com m2epro.freshdesk.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.googleapis.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.motive.co https://www.gstatic.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bootstrapcdn.com *.yotpo.com *.feedaty.com widget.freshworks.com m2epro.freshdesk.com assets.braintreegateway.com *.doubleclick.net *.facebook.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com maxcdn.bootstrapcdn.com fonts.gstatic.com https://fonts.googleapis.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.cloudflare.com *.twitter.com *.twimg.com *.yotpo.com *.zopim.com wss://*.zopim.com *.zdassets.com *.doubleclick.net *.zendesk.com *.clarity.ms *.scalapay.com https://maps.googleapis.com https://player.vimeo.com *.feedaty.com widget.freshworks.com m2epro.freshdesk.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com *.googleapis.com *.facebook.com *.facebook.net *.googlesyndication.com *.tiktok.com *.motive.co *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.gstatic.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.example.com/; report-to report-endpoint; 2
Content-Security-Policy-Report-Only: default-src * 'unsafe-inline' 'unsafe-eval'; style-src 'unsafe-inline'; script-src 'none' 'report-sample'; connect-src 'none'; form-action 'none'; frame-src 'none'; worker-src 'none'; frame-ancestors 'none'; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp.threatview.app/report; report-to threatview 2
child-src blob:;default-src 'none';img-src 'self'   https://images.ctfassets.net/t0p2cqcl8cn8/   *.googleapis.com   *.gstatic.com   www.facebook.com   ad.doubleclick.net   www.googletagmanager.com   *.contentsquare.net   data:   blob:   ade.googlesyndication.com   adservice.google.com   www.googleadservices.com   https://bat.bing.com   https://googleads.g.doubleclick.net   https://www.google.com   https://www.google.fr   https://sdk.privacy-center.org  https://assets.funecap.org  *.kameleoon.io;font-src 'self' https://fonts.gstatic.com;connect-src 'self'   roc-eclerc.com   *.roc-eclerc.com     https://*.google-analytics.com   *.googleapis.com   *.gstatic.com   *.google.com   google.com   metrics.roc-eclerc.com   *.realytics.io   *.pa-cd.com   *.doubleclick.net   *.contentsquare.net   https://login.microsoftonline.com   https://graph.microsoft.com   https://www.facebook.com   https://pagead2.googlesyndication.com   https://affdjz.go2cloud.org/   https://www.googleadservices.com/   https://tpmtrk.com   https://graph.facebook.com/   https://bat.bing.com   https://sdk.privacy-center.org  https://api.privacy-center.org  https://edi5on.com  *.kameleoon.io;script-src 'self'  'unsafe-inline'   *.googleapis.com   www.googletagmanager.com   *.contentsquare.net   app.contentsquare.com   https://tag.aticdn.net   https://connect.facebook.net   *.realytics.io   *.realytics.net   https://www.googleadservices.com   https://bat.bing.com   *.doubleclick.net   https://www.google.com   https://www.google.fr   https://sdk.privacy-center.org  https://api.privacy-center.org  https://tag.imagino.com  https://edi5on.com  'unsafe-eval'  *.kameleoon.io  ;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/css;media-src 'self' https://videos.ctfassets.net/t0p2cqcl8cn8/ https://videos.ctfassets.net/cx1gjqdeja5a/;frame-src 'self'   https://www.youtube.com   https://youtube.com   *.doubleclick.net   https://www.facebook.com   https://tbl.tradedoubler.com/;frame-ancestors roc-eclerc.com *.roc-eclerc.com https://app.contentful.com;report-uri https://9jnmnwzx.uriports.com/reports;report-to csp-endpoint; 2
font-src *.pennie.gr *.googletagmanager.com *.adobe.com www.googleadservices.com www.google-analytics.com *.googleapis.com vimeo.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.contactpigeon.com *.newrelic.com *.nr-data.net fonts.googleapis.com fonts.gstatic.com *.hotjar.com *.zopim.com *.fontawesome.com 'self' data: *.skroutz.gr *.cloudflare.com *.twitter.com *.twimg.com *.usercentrics.eu *.bing.com *.zdassets.com *.google.com *.google.gr https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.facebook.com *.contactpigeon.com *.pennie.gr *.google.gr *.skroutz.gr *.zopim.com *.moosend.com *.cloudflare.com *.piraeusbank.gr 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ *.skroutz.gr *.contactpigeon.com *.hotjar.com *.facebook.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://trustmark.gr *.tiktok.com *.contactpigeon.com *.pennie.gr *.googleapis.com *.gstatic.com *.trustedshops.com *.zopim.com cdn.jsdelivr.net *.skroutz.gr *.moosend.com *.cloudflare.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.bing.com *.zopim.io *.doubleclick.net *.facebook.com *.mastercard.com *.google.com *.google.gr *.googletagmanager.com https://images.unsplash.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ 'self' data: *.tiktok.com *.googletagmanager.com *.googleapis.com *.pennie.gr *.facebook.net *.facebook.com *.doubleclick.net *.google-analytics.com *.gstatic.com *.contactpigeon.com *.paypal.com *.google.com *.hotjar.com *.fontawesome.com *.feedbackcompany.com *.trustpilot.com cdn.jsdelivr.net *.googleoptimize.com *.skroutz.gr *.cloudflare.com *.google.gr https://trustmark.gr/badge/dist/index.js https://static.adman.gr/adman.js https://greca.adman.gr https://maps.googleapis.com https://player.vimeo.com *.avada.io *.shopify.com *.piraeusbank.gr 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googletagmanager.com www.googleadservices.com www.google-analytics.com *.googleapis.com vimeo.com *.pennie.gr *.facebook.net *.facebook.com *.doubleclick.net *.google-analytics.com *.gstatic.com *.contactpigeon.com *.newrelic.com *.nr-data.net *.fontawesome.com *.trustpilot.com cdn.jsdelivr.net *.skroutz.gr *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.bing.com *.hotjar.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' data: *.contactpigeon.com *.pennie.gr *.google.gr *.zopim.com *.skroutz.gr *.moosend.com *.cloudflare.com 'self' 'unsafe-inline'; manifest-src *.pennie.gr 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.gstatic.com *.mastercard.com *.google.com *.google.gr *.googletagmanager.com *.tiktok.com *.contactpigeon.com *.pennie.gr *.paypal.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net/ *.zdassets.com *.hotjar.com *.hotjar.io *.zopim.com wss://*.zopim.com *.feedbackcompany.com *.skroutz.gr *.cloudflare.com api.zevioo.com https://pagead2.googlesyndication.com https://maps.googleapis.com https://player.vimeo.com https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com fonts.googleapis.com *.googleapis.com data: https://www.googletagmanager.com https://fonts.gstatic.com *.illow.io *.stackla.com *.klarnacdn.net searchserverapi.com static.klaviyo.com searchserverapi1.com *.fontawesome.com *.cloudfront.net *.reviews.io *.reviews.co.uk www.searchanise.com *.searchserverapi.com *.searchserverapi1.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.reviews.io *.reviews.co.uk www.searchanise.com *.searchserverapi.com *.searchserverapi1.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com widget.reviews.io widget.reviews.co.uk www.google.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.googletagmanager.com *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com account.fetchify.com *.google.com/ widget.reviews.io widget.reviews.co.uk js.mollie.com *.reviews.io *.reviews.co.uk www.searchanise.com *.searchserverapi.com *.searchserverapi1.com *.twitter.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.googleapis.com maps.gstatic.com *.googleapis.com imgsct.cookiebot.com https://www.magezon.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.simpli.fi *.google.com *.reviews.com *.adscience.com *.rackcdn.com *.magentocommerce.com *.pinimg.com *.snapchat.com *.bing.com *.trustpilot.com *.roeye.com *.linkedin.com searchserverapi.com www.google.co.in www.facebook.com stats.g.doubleclick.net c.clarity.ms searchserverapi1.com *.cookiebot.com *.usercentrics.eu https://www.mollie.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.twitter.com *.twimg.com www.google.ru www.searchanise.com *.searchserverapi.com *.searchserverapi1.com s3.amazonaws.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page https://maps.googleapis.com https://player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ consent.cookiebot.com cc-cdn.com *.google.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ ga.lampshoponline.com searchanise-ef84.kxcdn.com *.kxcdn.com *.lampshoponline.co.uk *.lampshoponline.com *.harperandharlow.co.uk harperandharlow.co.uk m.lampshoponline.co.uk m.lampshoponline.com accounts.google.com *.replyco.com www.googlecommerce.com connect.facebook.net www.clarity.ms searchserverapi.com *.searchserverapi.com *.addtoany.com *.linkedin.com *.poper.ai *.illow.io *.howuku.com *.mediahawk.co.uk *.revealid.xyz *.mida.so bat.bing.com cdn.amplitude.com *.happierleads.com *.amplitude.com *.reviews.co.uk *.truconversion.com *.termly.io snap.licdn.com data.processwebsitedata.com fe.sitedataprocessing.com a.usbrowserspeed.com d-code.liadm.com searchserverapi1.com cdnjs.cloudflare.com static.klaviyo.com *.cloudflareinsights.com *.cookiebot.com *.cookiebot.eu *.clarity.ms *.dwin1.com js.mollie.com applepay.cdn-apple.com *.reviews.io s3.amazonaws.com ajax.aspnetcdn.com www.searchanise.com *.searchserverapi1.com *.searchanise.com api.amplitude.com *.twitter.com *.twimg.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com cc-cdn.com https://fonts.googleapis.com https://static.klaviyo.com *.reviews.co.uk *.searchanise.com *.illow.io *.poper.ai *.klaviyocom www.gstatic.com searchserverapi.com static-tracking.klaviyo.com searchserverapi1.com *.fontawesome.com *.cloudfront.net *.reviews.io www.searchanise.com *.searchserverapi.com *.searchserverapi1.com searchanise-ef84.kxcdn.com s3.amazonaws.com *.twitter.com ton.twimg.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.revealid.xyz *.illow.io *.poper.ai *.mediahawk.co.uk *.mida.so *.reviews.co.uk *.linkedin.com *.lampshoponline.co.uk *.lampshoponline.com *.replyco.com *.onetrust.com *.pinterest.com *.snapchat.com *.tiktok.com *.doubleclick.net *.googlesyndication.com *.clarity.ms bat.bing.com *.harperandharlow.co.uk harperandharlow.co.uk *.happierleads.com openfpcdn.io *.termly.io wss://io.truconversion.com idx.liadm.com rp.liadm.com *.amplitude.com rum.hlx.page *.klaviyo.com *.cloudfront.net *.reviews.io api.amplitude.com stats.g.doubleclick.net www.google-analytics.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src *.typekit.net data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://www.facebook.com https://www.googletagmanager.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com www.novaturas.lt dev-lt-novaturas.readymage.com * 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com www.novaturas.lt  https://track.adform.net https://www.googletagmanager.com https://www.google.com *.doubleclick.net https://www.facebook.com *.pinterest.com https://master.d28zlv4dg2b2g7.amplifyapp.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://img.youtube.com 'self' https://localhost https://novaturas-gwe-1661146907.readymage.com https://novaturas-gwe-1661146907.readymage-media.com https://prod-lt-novaturas.readymage.com https://www.google.com https://hatscripts.github.io https://www.google-analytics.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ s7.addthis.com 'unsafe-inline' 'unsafe-eval' https://static.hotjar.com https://googleads.g.doubleclick.net https://connect.facebook.net https://www.google.com https://s2.adform.net  https://track.adform.net https://cdn.mxapis.com/service-worker.js https://www.googletagmanager.com https://www.google-analytics.com https://svht.tradedoubler.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://static.klaviyo.com 'unsafe-inline' 'unsafe-eval' *.typekit.net unsafe-inline 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ ekr.zdassets.com/ 'self' https://bam.eu01.nr-data.net https://staging.nov.indvp.com https://pim.novatours.eu https://development.nov.indvp.com https://analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://www.google-analytics.com ws: api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' https://dev-lt-novaturas.readymage.com https://stage-lt-novaturas.readymage.com https://staging.nov.indvp.com https://pim.novatours.eu https://development.nov.indvp.com https://novaturas-gwe-1661146907.readymage-media.com https://use.typekit.net https://www.googletagmanager.com https://localhost 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://www.googletagmanager.com *.googleapis.com *.babysmile24.com cdn.babysmile24.de cdn.babysmile24.at cdn.babysmile24.ch https://client.crisp.chat *.kameleoon.io data: *.fontawesome.com https://fonts.bunny.net https://static.unzer.com https://applepay.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://static-cc.test.unzer.com https://h.online-metrix.net https://google.com/pay https://pay.google.com/ https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ https://sandbox.clicktopay.auth.visa.com https://clicktopay.visa.com https://sandbox.secure.checkout.visa.com https://secure.checkout.visa.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.babygalerie24.de *.facebook.com *.googleapis.com *.google.de *.ovh.net www.google.at www.google.ch www.google.com.bd *.babysmile24.com cdn.babysmile24.de cdn.babysmile24.at cdn.babysmile24.ch cf-api.babysmile24.de *.google.com *.hub.baby *.googlesyndication.com www.google.si *.googleusercontent.com www.google.co.in www.google.kz www.google.ro *.ccm19.de https://client.crisp.chat *.clarity.ms https://image.crisp.chat *.kameleoon.io cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com https://static.unzer.com *.online-metrix.net https://www.gstatic.com bspic.hub.baby data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com *.etermin.net *.ccm19.de *.facebook.net *.googleapis.com *.babysmile24.com cdn.babysmile24.de cdn.babysmile24.at cdn.babysmile24.ch *.googletagmanager.com *.clarity.ms https://client.crisp.chat *.kameleoon.io secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com *.avada.io https://static.unzer.com https://applepay.cdn-apple.com https://pay.google.com https://code.jquery.com https://h.online-metrix.net https://h64.online-metrix.net https://static-v2.unzer.com/v2/ui-components/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com cdn.babysmile24.de cdn.babysmile24.at cdn.babysmile24.ch *.ccm19.de *.gstatic.com *.etermin.net https://client.crisp.chat *.kameleoon.io d.ratepay.com d.payla.io dr.payla.io src.mastercard.com *.fontawesome.com https://fonts.bunny.net https://sandbox.src.mastercard.com https://static-v2.unzer.com/v2/ui-components/ 'self' 'unsafe-inline'; object-src cdn.babysmile24.de cdn.babysmile24.at cdn.babysmile24.ch 'self' 'unsafe-inline'; media-src *.adobe.com *.hub.baby *.babysmile24.com cdn.babysmile24.de cdn.babysmile24.at cdn.babysmile24.ch *.ovh.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.ccm19.de *.google-analytics.com *.googleapis.com *.babysmile24.com cdn.babysmile24.de cdn.babysmile24.at cdn.babysmile24.ch cf-api.babysmile24.de *.doubleclick.net *.googlesyndication.com *.facebook.com wss://stream.relay.crisp.chat *.clarity.ms https://client.crisp.chat wss://client.relay.crisp.chat https://plugins.crisp.chat *.kameleoon.io payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com https://get.geojs.io *.avada.io https://api.unzer.com https://api.heidelpay.com https://sbx-api.heidelpay.com https://sbx-api.unzer.com https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://h.online-metrix.net https://h64.online-metrix.net https://google.com/pay https://www.google.com/pay https://pay.google.com https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ https://static-cc.test.unzer.com https://static-v2.unzer.com/v2/ui-components/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.ccm19.de 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://bec24c5a-6980-491a-b199-6ac1940dc2e1.sansec.watch/; report-to report-endpoint; 2
font-src www.paypalobjects.com https://fonts.gstatic.com *.gstatic.com data: https://www.googletagmanager.com *.googleapis.com *.fontawesome.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com www.apptrian.com facebook.com connect.facebook.net graph.facebook.com services.paytrail.com paytrail.com *.paytrail.com epmt.nordea.fi *.nordea.com verkkopankki.danskebank.fi online.s-pankki.fi verkkomaksu.poppankki.fi verkkomaksu.omasp.fi auth.aktia.fi verkkomaksu.handelsbanken.fi verkkomaksu.saastopankki.fi online.alandsbanken.fi maksu.pivo.fi qa-maksu.pivo.fi v1-hub-staging.sph-test-solinor.com v1.api.paymenthighway.io *.paymenthighway.io *.mobilepay.fi 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://www.googletagmanager.com https://js.stripe.com https://www.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://api.esto.ee https://api.esto.lv https://api.estopay.lt https://p.trackmytarget.com https://www.hotlips.ee https://www.google.fi https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://bid.g.doubleclick.net https://krediidiraportid.ee https://cdn.kevin.eu https://api.retargeted.co https://firebasestorage.googleapis.com public.montonio.com https://public.montonio.com cdn2.hubspot.net resources.paytrail.com cdn.modena.ee cms.modena.ee self: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://cdn.tmtarget.com https://cdn.trackmytarget.com https://analytics.tiktok.com https://tiktok.com https://js.stripe.com https://s.retargeted.co *.fontawesome.com *.google.com *.avada.io *.shopify.com public.montonio.com services.paytrail.com resources.paytrail.com https://www.google.com https://www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com *.google.com *.gstatic.com https://fonts.bunny.net self: 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://doubleclick.net https://www.doubleclick.net https://google.com https://www.google.com https://api.retargeted.co http://dpm.demdex.net https://www.gstatic.com https://get.geojs.io *.avada.io *.paytrail.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https:; frame-src 'self' https:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https: 2
default-src https: data: 'unsafe-inline' 'unsafe-eval'; frame-src https: data: blob:; report-uri https://temporarycsp.azurewebsites.net/api/CreateReport 2
font-src www.paypalobjects.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com maxcdn.bootstrapcdn.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com  'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.innoship.ro https://*.sameday.ro *.addthis.com  www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com *.tile.openstreetmap.org *.openstreetmap.org magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com https://cdn.tbibank.support www.xtento.com cdn.xtento.com https://oqtagonmedia-1224e.kxcdn.com https://www.google.ro/ads/ga-audiences https://region1.analytics.google.com/ https://airsoftcluj-1224e.kxcdn.com/ https://airsoftbucuresti-1224e.kxcdn.com https://oqtagon-1224e.kxcdn.com https://www.oqtagon.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com https://cdn.jsdelivr.net *.tiktok.com https://*.sameday.ro *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com *.avada.io *.shopify.com www.xtento.com cdn.xtento.com https://airsoftbucuresti-1224e.kxcdn.com https://oqtagon-1224e.kxcdn.com https://airsoftcluj-1224e.kxcdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.fontawesome.com https://*.sameday.ro maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net https://fonts.bunny.net https://oqtagonmedia-1224e.kxcdn.com https://airsoftcluj-1224e.kxcdn.com/ https://airsoftbucuresti-1224e.kxcdn.com https://oqtagon-1224e.kxcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com https://get.geojs.io *.avada.io  https://ro.tbibank.support https://region1.analytics.google.com/g/collect 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://*.clarity.ms; style-src 'self' 'unsafe-inline' https://fonts.bunny.net; font-src 'self' https://fonts.bunny.net data:; img-src 'self' data: blob: https:; connect-src 'self' https://www.google-analytics.com https://*.clarity.ms https://www.googletagmanager.com; frame-src 'self' https://www.googletagmanager.com; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gls.com *.szybkapaczka.pl *.gls-poland.com/ *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com 'self' data: *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.facebook.net *.tawk.to 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.facebook.com *.facebook.net js.mollie.com *.szybkapaczka.pl *.gls-poland.com/ secure.payu.com merch-prod.snd.payu.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.tawk.to *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.doofinder.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.facebook.com *.facebook.net https://firebasestorage.googleapis.com https://www.mollie.com https://api.mapbox.com *.szybkapaczka.pl *.openstreetmap.org *.gls-poland.com/ *.gls-poland.com.pl/ static.payu.com 'self' data: *.tawk.to tawk.link cdn.jsdelivr.net s3.amazonaws.com/ *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src https://assets.adobedtm.com https://*.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https://*.vimeo.com www.vimeo.com *.vimeocdn.com https://*.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com tagmanager.google.com https://www.googletagmanager.com *.doofinder.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.facebook.com *.facebook.net *.fontawesome.com *.googleapis.com https://*.gstatic.com *.avada.io *.shopify.com js.mollie.com pay.google.com applepay.cdn-apple.com *.szybkapaczka.pl *.openstreetmap.org *.gls-poland.com/ secure.payu.com secure.snd.payu.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.gstatic.com *.tawk.to cdn.jsdelivr.net *.googletagmanager.com https://static.cloudflareinsights.com https://script.hotjar.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://*.newrelic.com https://*.nr-data.net https://www.paypal.com https://www.sandbox.paypal.com https://www.paypalobjects.com https://*.vimeocdn.com https://cdn.jsdelivr.net https://*.tawk.to https://*.stripe.com https://*.stripe.network https://*.stripecdn.com https://*.klarna.com https://*.klarnacdn.net https://*.klarnaevt.com https://www.facebook.com https://connect.facebook.net https://*.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.doofinder.com *.fontawesome.com https://static.klaviyo.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.szybkapaczka.pl *.gls-poland.com/ *.stripe.network *.stripecdn.com *.gstatic.com *.tawk.to cdn.jsdelivr.net fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.szybkapaczka.pl *.gls-poland.com/ *.tawk.to tawk.link 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.doofinder.com wss://*.doofinder.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.facebook.com *.facebook.net https://get.geojs.io *.avada.io *.szybkapaczka.pl *.openstreetmap.org *.gls-poland.com/ secure.payu.com merch-prod.snd.payu.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.tawk.to wss://*.tawk.to *.googletagmanager.com https://static.cloudflareinsights.com https://script.hotjar.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.paypal.com https://www.sandbox.paypal.com https://*.newrelic.com https://*.nr-data.net https://*.stripe.com https://connect.facebook.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://maps.googleapis.com https://maps.google.com https://googleads.g.doubleclick.net https://www.gstatic.com https://consent.cookiebot.com https://consentcdn.cookiebot.eu https://consent.cookiebot.eu https://bat.bing.com https://js-eu1.hs-scripts.com https://js-eu1.hscollectedforms.net https://js-eu1.hs-banner.com https://js-eu1.hubspot.com https://js-eu1.hsadspixel.net https://js-eu1.hs-analytics.net https://js-eu1.usemessages.com https://extend.vimeocdn.com https://connect.facebook.net https://snap.licdn.com https://bsqd.me; connect-src 'self' https://region1.google-analytics.com https://www.google-analytics.com https://www.google.com https://www.google.com/ccm https://maps.googleapis.com https://googleads.g.doubleclick.net https://bat.bing.com https://api-eu1.hubspot.com https://api-eu1.hubapi.com https://cta-eu1.hubspot.com https://track-eu1.hubspot.com https://consent.cookiebot.com https://consentcdn.cookiebot.eu https://js-eu1.hs-analytics.net https://px.ads.linkedin.com https://bsqd.me wss://bsqd.me; img-src 'self' data: https://www.google.com https://www.google.nl https://maps.gstatic.com https://maps.google.com https://www.gstatic.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://bat.bing.com https://track-eu1.hubspot.com https://perf-eu1.hsforms.com https://img.sct.eu1.usercentrics.eu https://px.ads.linkedin.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' https://www.google.com https://www.googletagmanager.com https://consentcdn.cookiebot.eu https://player.vimeo.com https://www.youtube.com https://connect.facebook.net; 2
font-src *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com *.avada.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com; img-src 'self' https://www.google-analytics.com https://www.googletagmanager.com; object-src 'none'; script-src 'self' 'report-sample' cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://eum.instana.io https://unpkg.com; style-src 'self' 'report-sample' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://steerpath-web-sdk.s3-eu-west-1.amazonaws.com https://unpkg.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 2
font-src *.googleapis.com https://www.gstatic.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src bid.g.doubleclick.net player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ https://www.google.com *.multisafepay.com https://pay.google.com *.smartsupp.com *.smartsuppcdn.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com *.googleapis.com *.gstatic.com https://images.unsplash.com https://firebasestorage.googleapis.com *.multisafepay.com *.smartsuppcdn.com www.google.nl bat.bing.com www.golfplaatje.nl www.lichtkoepeltje.nl www.dakraampje.nl www.platdakraamshop.nl data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com https://www.gstatic.com https://maps.googleapis.com https://player.vimeo.com https://www.google.com https://cdn.polyfill.io https://browser.sentry-cdn.com *.avada.io *.shopify.com *.multisafepay.com https://pay.google.com *.smartsuppchat.com *.smartsuppcdn.com consent.cookiefirst.com bat.bing.com platform.getqonfi.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.multisafepay.com *.smartsuppcdn.com consent.cookiefirst.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com https://*.ingest.sentry.io https://get.geojs.io *.avada.io *.multisafepay.com *.smartsupp.com wss://*.smartsupp.com *.smartsuppcdn.com *.smartsuppchat.com pagead2.googlesyndication.com www.google.com www.google.nl *.analytics.google.com bat.bing.com consent.cookiefirst.com edge.cookiefirst.com platform.getqonfi.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self' 'unsafe-inline' 'unsafe-eval'; 2
default-src 'self'; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'self' 2
default-src https: data: blob: 'self' 'unsafe-inline' 'unsafe-eval'; img-src data: https:; font-src data: https:; report-uri https://kilian.report-uri.io/r/default/csp/reportOnlyi; connect-src https: data: blob: 'self' 'unsafe-inline' 'unsafe-eval' https://client.crisp.chat https://storage.crisp.chat wss://client.relay.crisp.chat wss://stream.relay.crisp.chat 2
media-src https://*.ingest.sentry.io https://account.tn.sportsbook.fanduel.com 'self' https://stats.g.doubleclick.net https://account.co.sportsbook.fanduel.com https://*.livekit.cloud https://www.stardustcasino.com https://opengraph.io https://account.pa.sportsbook.fanduel.com https://account.pa.casino.fanduel.com https://sdk.incode.com https://fanduelgroup.my.salesforce-sites.com https://api.asapp.com https://account.wv.casino.fanduel.com https://assets.clever.com https://account.in.sportsbook.fanduel.com https://cdn.quantummetric.com https://account.va.sportsbook.fanduel.com blob: https://account.wv.sportsbook.fanduel.com https://salesforce-backend.integrations.asana.plus https://echoback.ads.sportradar.com https://*.vf.force.com https://www.casino.fanduel.com https://cdn.scs.static.lightning.force.com https://fanduel.ca https://account.mo.sportsbook.fanduel.com https://account.on.casino.fanduel.ca https://support.tvg.com https://account.mi.casino.fanduel.com wss://*.livekit.cloud https://account.ia.sportsbook.fanduel.com https://www.sportsbook.fanduel.com https://api.sandbox.asapp.com https://account.nj.stardustcasino.com https://api2.amplitude.com https://fanduelgroup.my.site.com https://www.fanduel.com https://account.il.sportsbook.fanduel.com poker.fanduel.com https://tr.snapchat.com https://account.nj.casino.fanduel.com https://account.nj.sportsbook.fanduel.com https://bat.bing.com https://*.sprinklr.com https://fanduelgroup.my.salesforce-scrt.com https://fanduelgroup.my.salesforce.com https://www.googletagmanager.com https://www.google-analytics.com *.salesforce.com https://account.pa.stardustcasino.com https://account.mi.sportsbook.fanduel.com https://*.my.site.com; report-to sfdc-csp-ep; report-uri https://fanduelgroup.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D5Y000002UY4T&networkId=0DM5Y000000OMEh&type=communities 2
style-src-elem *.typekit.net fonts.google.com *.gstatic.com *.klaviyo.com fonts.googleapis.com; script-src-elem assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.googletagmanager.com tagmanager.google.com www.googleapis.com google.com *.google.com script.hotjar.com *.hotjar.com connect.facebook.net *.facebook.net static.cloudflareinsights.com static.klaviyo.com static-forms.klaviyo.com fast.a.klaviyo.com static-tracking.klaviyo.com *.avada.io *.shopify.com js.mollie.com; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.google.com *.hotjar.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com *.weltpixel.com *.googletagmanager.com www.google.com *.vimeo.com *.hotjar.com *.morhane.be *.morhane.eu *.morhane.nl *.morhane.de *.morhane.at *.morhane.fr *.morhane.es *.morhane.it *.morhane.pt *.morhane.sk *.morhane.pl *.morhane.cz *.morhane.se *.morhane.ie *.morhane.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://www.mollie.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com maps.googleapis.com maps.gstatic.com flagpedia.net *.googletagmanager.com ssl.gstatic.com www.gstatic.com *.google.com *.hotjar.com *.klaviyo.com media.morhane.nl *.morhane.nl *.morhane.be data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com maps.googleapis.com https://player.vimeo.com js.mollie.com pay.google.com applepay.cdn-apple.com cdn.jsdelivr.net *.avada.io *.shopify.com *.gstatic.com *.googletagmanager.com tagmanager.google.com *.morhane.be *.morhane.eu *.morhane.nl *.morhane.de *.morhane.at *.morhane.fr *.morhane.es *.morhane.it *.morhane.pt *.morhane.sk *.morhane.pl *.morhane.cz *.morhane.se *.morhane.ie *.morhane.com www.gstatic.com www.google.com static.klaviyo.com static-forms.klaviyo.com fast.a.klaviyo.com static-tracking.klaviyo.com a.klaviyo.com telemetrics.klaviyo.com script.hotjar.com *.hotjar.com connect.facebook.net *.facebook.net static.cloudflareinsights.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net *.gstatic.com tagmanager.google.com fonts.google.com *.typekit.net *.google.com *.hotjar.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://get.geojs.io *.avada.io maps.googleapis.com places.googleapis.com www.gstatic.com *.googletagmanager.com www.google-analytics.com analytics.google.com *.hotjar.com *.klaviyo.com *.adobe.com connect.facebook.net *.facebook.net static.cloudflareinsights.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self';  frame-src 'self' wine-cult.firebaseapp.com *.youtube.com *.spotify.com *.vimeo.com *.doubleclick.net *.facebook.com *.trkn.us *.googletagmanager.com *.googlesyndication.com vercel.live vercel.com *.instagram.com form.jotform.com *.ctfassets.net *.audioeye.com *.pinterest.com *.stripe.com *.hsforms.com *.hsforms.net;  script-src 'self' 'unsafe-eval' 'unsafe-inline' *.google.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.adsrvr.org *.googlesyndication.com *.youtube.com *.spotify.com *.vimeo.com maps.googleapis.com form.jotform.com *.vercel.live *.audioeye.com *.tiktok.com *.adroll.com *.nextdoor.com *.stackadapt.com *.pinterest.com *.pinimg.com *.hs-scripts.com *.hscollectedforms.net *.hs-analytics.net *.hs-banner.com snap.licdn.com *.facebook.net *.pixeltracker.co *.stripe.com *.hsforms.net *.hubspotusercontent-na1.net *.hsappstatic.net *.hubspot.com;  child-src 'self' *.youtube.com *.google.com *.spotify.com vercel.live vercel.com;  style-src 'self' 'unsafe-inline' *.typekit.net *.googleapis.com *.googletagmanager.com *.stackadapt.com *.audioeye.com *.hsforms.net *.hubspotusercontent-na1.net;  img-src * blob: data:;  media-src 'self' *.cdninstagram.com;  object-src data: *.ctfassets.net;  connect-src *;  font-src 'self' data: *.typekit.net fonts.gstatic.com *.audioeye.com *.hsforms.net *.hubspotusercontent-na1.net;  frame-ancestors 'self' https://app.contentful.com; 2
default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; frame-ancestors 'self'; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.pstatic.net https://wcs.pstatic.net https://wcs.naver.net; style-src 'self' https:; font-src 'self' data: https:; img-src 'self' data: https:; media-src 'self' data: blob: https://*.kollus.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://wcs.naver.com https://nam.veta.naver.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.googletagmanager.com; upgrade-insecure-requests 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.google-analytics.com https://connect.facebook.net https://js.stripe.com https://www.google.com https://www.gstatic.com https://*.googleapis.com https://*.getbeamer.com https://*.zdassets.com https://*.adyen.com https://canny.io https://cdnjs.cloudflare.com https://staxjs.staxpayments.com https://script.tapfiliate.com https://cdn.tailwindcss.com https://embedsocial.com https://unpkg.com https://cdn.jsdelivr.net https://tag.getdrip.com https://use.fontawesome.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.fontawesome.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://*.getbeamer.com https://*.adyen.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://use.fontawesome.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com; connect-src 'self' https://*.google-analytics.com https://connect.facebook.net https://*.ingest.sentry.io https://*.ingest.us.sentry.io https://*.googleapis.com https://*.getbeamer.com https://*.launchdarkly.com https://*.zdassets.com https://*.adyen.com https://api.canny.io https://grazecart.zendesk.com https://embedsocial.com; frame-src 'self' https://js.stripe.com https://www.google.com https://www.youtube.com https://player.vimeo.com https://www.loom.com https://www.facebook.com https://*.getbeamer.com https://*.adyen.com https://groups.google.com; media-src 'self' https: data:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 2
default-src 'self' 'unsafe-inline' data: https://*.daily.taobao.net https://*.mmstat.com https://*.aliyun-inc.com https://*.alibaba-inc.com https://*.alicdn.com https://*.alibaba.com https://*.aliyuncs.com; report-uri /report-csp 2
font-src *.kueskipay.com *.fontawesome.com maxcdn.bootstrapcdn.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.kueskipay.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com multicobros.banorte.com eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.kueskipay.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com multicobros.banorte.com supercolchones.gestionplay.com.ar *.opencontrol.mx *.kaptcha.com *.openpay.pe eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com landofcoder.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.kueskipay.com *.google.com mageside.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar supercolchones.gestionplay.com.ar *.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.kueskipay.com *.googletagmanager.com *.mxpnl.com *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com multicobros.banorte.com supercolchones.gestionplay.com.ar *.facebook.net cdn.connectif.cloud newrelic.com *.s3.amazonaws.com *.openpay.co *.openpay.pe *.google-analytics.com *.google.com/recaptcha/ *.gstatic.com/recaptcha/ eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com landofcoder.com *.cloudflare.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com https://static.klaviyo.com *.kueskipay.com *.googletagmanager.com *.mxpnl.com *.fontawesome.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com supercolchones.gestionplay.com.ar fonts.googleapis.com unsafe-inline *.paypal.com *.sandbox.paypal.com *.paypalobjects.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com supercolchones.gestionplay.com.ar 'self' 'unsafe-inline'; manifest-src *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.kueskipay.com *.doubleclick.net https://get.geojs.io *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com multicobros.banorte.com supercolchones.gestionplay.com.ar *.openpay.mx *.openpay.co *.openpay.pe api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com landofcoder.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com fonts.googleapis.com *.googleapis.com data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.ftcdn.net *.behance.net *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://redchamps.com *.clarity.ms data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.google.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.clarity.ms rum.hlx.page https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.clarity.ms 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/verily 2
worker-src * blob:; font-src *.typekit.net *.gstatic.com fonts.gstatic.com use.typekit.net *.fontawesome.com *.zdassets.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.mb-app.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.hcaptcha.com hcaptcha.com cdn.jsdelivr.net *.cloudflare.com *.twitter.com *.google.co.in *.facebook.com *.googleadservices.com *.google-analytics.com *.gstatic.com *.usercentrics.eu *.fontawesome.com connect.facebook.net *.paypalobjects.com *.googletagmanager.com *.cookiebot.com *.doubleclick.net *.stripe.com *.zendesk.com *.zdassets.com *.googleapis.com *.atlantic.fr *.azurewebsites.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com p.typekit.net validator.swagger.io groupe-mb.scene7.com *.cloudflare.com *.google.com *.google.co.in www.facebook.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.connect.facebook.net *.doubleclick.net *.google.fr * *.stripe.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.commerce-payment-services.com *.typekit.net google.com *.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.hcaptcha.com hcaptcha.com maps.googleapis.com cdn.jsdelivr.net *.cloudflare.com *.twitter.com *.google.co.in *.facebook.com *.googleadservices.com *.google-analytics.com *.gstatic.com *.usercentrics.eu *.fontawesome.com connect.facebook.net *.paypalobjects.com *.paypal.com *.googletagmanager.com *.cookiebot.com *.doubleclick.net *.stripe.com *.licdn.com *.bing.com *.zendesk.com *.zdassets.com *.clarity.ms *.sparkow.net t4.my-probance.one *.contentsquare.net *.googleapis.com bam.nr-data.net bam.eu01.nr-data.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.gstatic.com *.zoovu.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.adobe.io performance.typekit.net *.sentry.io *.hcaptcha.com hcaptcha.com cdn.jsdelivr.net *.cloudflare.com *.twitter.com *.google.co.in *.facebook.com *.googleadservices.com *.google-analytics.com *.gstatic.com *.usercentrics.eu *.fontawesome.com connect.facebook.net *.paypalobjects.com *.googletagmanager.com *.youtube.com *.cookiebot.com *.doubleclick.net *.stripe.com *.clarity.ms *.scandit.com *.zendesk.com tereva.zendesk.com mabeo.zendesk.com tereva.zendesk.com/frontendevents mabeo.zendesk.com/frontendevents *.zdassets.com *.bing.com *.sparkow.net *.contentsquare.net bam.nr-data.net bam.eu01.nr-data.net *.googleapis.com *.linkedin.com px.ads.linkedin.com/wa/ *.zoovu.com *.cloudfront.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com; connect-src 'self' https: wss: ws: blob: http://localhost; img-src 'self' data: blob: https:; media-src 'self' data: blob:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; worker-src 'self' blob:; base-uri 'self'; frame-ancestors 'self'; object-src 'none'; frame-src 'self' https:; report-uri /api/csp-report; report-to csp-endpoint 2
default-src 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; report-uri /csp-report; 2
default-src 'self' https: http: data: blob: 'unsafe-inline' 'unsafe-eval'; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com fonts.googleapis.com https://fonts.gstatic.com https://ws.colissimo.fr *.cloudflare.com maxcdn.bootstrapcdn.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.e-transactions.fr https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com business.facebook.com *.hotjar.com *.eventbrite.com sibautomation.com https://www.youtube.com https://form.typeform.com *.youtube.com/ *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.googletagmanager.com https://plumrocket.com *.weltpixel.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com *.trackedlink.net business.facebook.com *.trustedshops.com *.etrusted.com *.google.fr *.bing.com *.clarity.ms *.bing.net https://maps.googleapis.com https://maps.gstatic.com https://ws.colissimo.fr https://*.tile.openstreetmap.fr https://*.onyourmap.com https://google.fr *.cloudflare.com *.ytimg.com magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.doubleclick.net *.googletagmanager.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.googleapis.com *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com business.facebook.com *.trustedshops.com *.etrusted.com *.hotjar.com *.eventbrite.com sibautomation.com *.bing.com *.clarity.ms *.jquery.com *.brevo.com *.cloudflare.com *.cloudflareinsights.com *.terreexotique.fr https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com *.fontawesome.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.googletagmanager.com *.doubleclick.net https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com webchat.dotdigital.com webchat.staging.dotdigital.com *.trustedshops.com *.etrusted.com https://fonts.googleapis.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com *.cloudflare.com *.fontawesome.com *.googleapis.com *.googletagmanager.com maxcdn.bootstrapcdn.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com maps.googleapis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com business.facebook.com *.trustedshops.com *.etrusted.com in.hotjar.com *.hotjar.io *.brevo.com *.clarity.ms *.bing.net *.bing.com https://ws.colissimo.fr https://maps.googleapis.com https://nominatim.openstreetmap.org https://*.onyourmap.com https://*.mapbox.com *.cloudflare.com *.google-analytics.com *.doubleclick.net *.googlesyndication.com https://integrations.etrusted.site payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 2
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://media.flixcar.com/ *.fontawesome.com use.typekit.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.facebook.com *.googlesyndication.com *.tiktok.com https://form.payway.com.hr https://formtest.payway.com.hr https://ipgtest.monri.com/ https://ipg.monri.com/ https://formtest.wspay.biz/ https://form.wspay.biz/ 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.googletagmanager.com https://ipgtest.monri.com/ https://ipg.monri.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com rt.flix360.com https://media.flixfacts.com/ https://media.flixcar.com/ *.hsforms.net *.hsforms.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com https://cdn.jsdelivr.net *.tiktok.com https://media.flixfacts.com/ https://media.flixcar.com/ https://ipgtest.monri.com/ https://ipg.monri.com/ *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com https://media.flixfacts.com/ https://media.flixcar.com/ *.fontawesome.com use.typekit.net p.typekit.net https://ipgtest.monri.com/ https://ipg.monri.com/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://bdd58c77-9f9d-4fa2-9dac-b18e4360bf84.sansec.watch/; report-to report-endpoint; 2
script-src-elem 'unsafe-inline' data: 'self' data: *.googletagmanager.com *.gstatic.com *.google.com/recaptcha/api.js *.googleapis.com *.cookiebot.com *.doubleclick.net *.google-analytics.com *.clarity.ms *.apsis.one *.licdn.com *.facebook.net trackcmp.net prism.app-us1.com diffuser-cdn.app-us1.com *.ipify.org *.cookiebot.com/uc.js *.loyaltylion.net *.cloudfront.net *.zdassets.com *.sendcloud.sc *.jsdelivr.net pay.google.com/gp/p/js/pay.js *.multisafepay.com *.cookiecode.nl *.hotjar.com *.bing.com *.tweakwisenavigator.net navigator-analytics.tweakwise.com integrations.etrusted.com *.klaviyo.com widgets.trustedshops.com *.zendesk.com; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com https://fonts.gstatic.com *.fontawesome.com fonts.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com data: https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.paypal.com www.sandbox.paypal.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.multisafepay.com https://pay.google.com *.twitter.com *.cookiebot.com *.apsis.one *.sendcloud.sc *.jsdelivr.net *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com *.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.paypal.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.multisafepay.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cookiebot.com *.google.mk *.linkedin.com *.facebook.com *.clarity.ms *.bing.com *.mennens.nl gymna.com *.google.nl *.google.sr *.google.de *.google.be *.googlesyndication.com google.com *.cloudfront.net *.zendesk.com *.amazonaws.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.googleapis.com *.gstatic.com https://www.postcode-checkout.nl/api/international/v1/autocomplete/* https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.multisafepay.com https://pay.google.com *.cloudflare.com *.twitter.com *.google-analytics.com *.google.com/recaptcha/api.js *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.feedbackcompany.com *.cookiebot.com *.ipify.org *.googlesyndication.com *.clarity.ms *.licdn.com *.facebook.net diffuser-cdn.app-us1.com prism.app-us1.com trackcmp.net *.apsis.one *.salesfeed.com *.sendcloud.sc *.jsdelivr.net https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://www.googletagmanager.com tagmanager.google.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com https://fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com *.multisafepay.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.loyaltylion.net *.sendcloud.sc *.jsdelivr.net https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.postcode-checkout.nl https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.multisafepay.com *.cloudflare.com *.twitter.com *.twimg.com *.demdex.net *.feedbackcompany.com *.doubleclick.net *.clarity.ms *.linkedin.com *.cookiebot.com *.google.nl *.googlesyndication.com *.apsis.one ekr.zdassets.com *.loyaltylion.net *.loyaltylion.com *.zendesk.com *.facebook.com *.cookiecode.nl *.hotjar.com *.hotjar.io *.bing.com *.tweakwisenavigator.net navigator-analytics.tweakwise.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://835fa4ec-8cdd-47b1-aafd-effde4760acb.sansec.watch/; report-to report-endpoint; 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://connect.facebook.net https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://www.grutto.com https://www.kaufnekuh.de https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://www.facebook.com https://www.google.com https://*.g.doubleclick.net; font-src 'self' data:; connect-src 'self' https://www.grutto.com https://www.kaufnekuh.de https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net https://www.facebook.com https://stats.g.doubleclick.net https://gfecpao8yc.execute-api.eu-central-1.amazonaws.com; frame-src 'self' https://www.googletagmanager.com https://td.doubleclick.net https://www.facebook.com https://www.youtube.com https://player.vimeo.com https://www.videoask.com; media-src 'self' https://www.grutto.com https://www.kaufnekuh.de; object-src 'none'; base-uri 'self'; form-action 'self' https://www.grutto.com https://www.kaufnekuh.de; frame-ancestors 'self'; upgrade-insecure-requests 2
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' https: blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://console.headless.moodco.io https://console-staging.headless.moodco.io 2
default-src 'self' smdesj:;   script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.certif.desjardins.com https://static.desjardins.com https://acrobatservices.adobe.com https://*.pinterest.com https://cdn.cookielaw.org https://cdn.auth0.com https://*.googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://www.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://*.licdn.com https://bat.bing.com https://*.pinimg.com https://api.glia.com https://*.salemove.com https://connect.facebook.net;   style-src 'self' 'unsafe-inline' https://static.desjardins.com https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com https://*.salemove.com;   img-src 'self' data: https://static.desjardins.com https://cdn.cookielaw.org https://*.pinimg.com https://*.pinterest.com https://www.googletagmanager.com https://*.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net https://*.google.com https://*.google.ca https://*.fls.doubleclick.net https://pagead2.googlesyndication.com https://ade.googlesyndication.com https://www.googleadservices.com https://ad.doubleclick.net https://bat.bing.com https://*.linkedin.com https://*.salemove.com https://www.facebook.com;   font-src https://static.desjardins.com https://fonts.gstatic.com data:;   connect-src 'self' https://*.desjardins.com https://cdn.cookielaw.org https://desjardins-cookies-privacy.my.onetrust.com https://geolocation.onetrust.com https://viewlicense.adobe.io https://acrobatservices.adobe.com https://cdn.auth0.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://td.doubleclick.net https://*.g.doubleclick.net https://google.com https://*.google.com https://*.google.ca https://pagead2.googlesyndication.com https://www.googleadservices.com https://ad.doubleclick.net https://*.linkedin.com https://api.glia.com https://*.pinterest.com https://*.salemove.com wss://*.salemove.com;   frame-src 'self' https://*.desjardins.com https://acrobatservices.adobe.com https://www.youtube.com https://www.googletagmanager.com https://td.doubleclick.net https://*.fls.doubleclick.net https://*.pinterest.com; 2
default-src 'self'; script-src 'self' https://*.google.com https://*.google.be https://www.googletagmanager.com https://*.gstatic.com https://*.google-analytics.com https://*.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://polyfill.io https://unpkg.com; object-src 'self'; style-src 'unsafe-inline' 'self'; font-src 'self' https://use.typekit.net https://fonts.gstatic.com https://fonts.googleapis.com https://*.fontawesome.com data:; connect-src 'self' *https://.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com; upgrade-insecure-requests 2
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https://cordobesitas.tv https://www.cordobesitas.tv https://www.google-analytics.com https://www.googletagmanager.com; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://www.googletagmanager.com; form-action 'self' 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https: 2
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://googleads.g.doubleclick.net https://fundingchoicesmessages.google.com https://*.adtrafficquality.google 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://webr.r-wasm.org https://repo.r-wasm.org https://cdn.plot.ly https://analytics.datanovia.com; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: https:; connect-src 'self' https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://*.g.doubleclick.net https://www.google.com https://fundingchoicesmessages.google.com https://*.adtrafficquality.google https://csi.gstatic.com https://cdn.jsdelivr.net https://webr.r-wasm.org https://repo.r-wasm.org https://docs.r-wasm.org https://analytics.datanovia.com; worker-src 'self' blob:; frame-src 'self' https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://www.google.com https://pagead2.googlesyndication.com https://fundingchoicesmessages.google.com https://*.adtrafficquality.google 2
font-src *.googleapis.com *.gstatic.com data: maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cenpos.net *.cenpos.com *.google.com *.gstatic.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.cenpos.net *.cenpos.com *.google.com *.gstatic.com *.cardinalcommerce.com *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com www.facebook.com *.cenpos.net *.cenpos.com https://www.magezon.com *.hubspot.com *.hsforms.com *.linkedin.com *.adsymptotic.com *.otcindustrial.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.hsforms.net 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ ws.zoominfo.com secure.venture-365-inspired.com js.hubspot.com cdn.callrail.com js.usemessages.com *.cenpos.com *.cenpos.net *.google.com *.cardinalcommerce.com *.termly.io *.fullstory.com *.licdn.com *.doubleclick.net *.listenlayer.com *.hs-scripts.com *.hscollectedforms.net *.hs-analytics.net *.hsadspixel.net *.hs-banner.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com ws.zoominfo.com idx.liadm.com px.ads.linkedin.com forms.hscollectedforms.net static.listenlayer.com pagead2.googlesyndication.com googleads.g.doubleclick.net js.hs-banner.com *.fullstory.com *.termly.io *.linkedin.oribi.io *.analytics.google.com *.hubspot.com *.hubapi.com *.google-analytics.com *.googletagmanager.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
base-uri 'none'; frame-ancestors 'self'; img-src data: 'self' https://www.google-analytics.com https://cdn.rgfstaffing.be https://i.ytimg.com https://maps.googleapis.com https://vumbnail.com https://maps.gstatic.com https://img.youtube.com https://www.google.be https://cdn.startpeople.be; object-src 'none'; script-src 'unsafe-eval' 'unsafe-inline' 'self' 'unsafe-inline' 'unsafe-eval' https://use.fontawesome.coms https://code.jquery.com https://cdn.jsdelivr.net https://consentcdn.cookiebot.com https://*.google-analytics.com https://cdn.startpeople.be https://kit.fontawesome.com https://maps.googleapis.com https://js.monitor.azure.com https://www.googletagmanager.com https://consent.cookiebot.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; report-to csp-endpoint; report-uri https://csp-dxp.rgfstaffing.be/csp 2
https://www.calyxsoftware.com;static.hsappstatic.net, *.hubspotusercontent-*.net, *.hubspot.net, *.hs-scripts.com 2
default-src 'self'; script-src 'self' 'unsafe-inline' https://belet.tm https://*.belet.tm https://belet.me https://*.belet.me https://beletapis.com https://*.beletapis.com; style-src 'self' 'unsafe-inline'; img-src 'self' blob: data: https://belet.tm https://*.belet.tm https://belet.me https://*.belet.me https://beletapis.com https://*.beletapis.com; font-src 'self' data:; media-src 'self' blob: https://belet.tm https://*.belet.tm https://belet.me https://*.belet.me https://beletapis.com https://*.beletapis.com; worker-src 'self' blob:; connect-src 'self' blob: data: https://belet.tm https://*.belet.tm https://belet.me https://*.belet.me https://beletapis.com https://*.beletapis.com; frame-src 'self'; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri https://sentry.belet.me/api/1/security/?sentry_key=04a75ef519dc7de85866c73e9e89ab3c 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.tailwindcss.com https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://js.stripe.com https://accounts.google.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://cdn.tailwindcss.com https://fonts.googleapis.com https://cdn.jsdelivr.net; img-src 'self' data: https: blob:; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://api.stripe.com https://accounts.google.com https://api.deepseek.com; frame-src https://js.stripe.com https://accounts.google.com https://www.youtube.com https://iframe.mediadelivery.net https://www.googletagmanager.com; object-src 'none'; base-uri 'self'; form-action 'self' https://accounts.google.com; 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.fontawesome.com *.cloudinary.com blob: static.klaviyo.com applepay.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com blob: www.google.com.ua maps.gstatic.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://maps.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ conzent.net *.stapecdn.com stapecdn.com maps.googleapis.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app https://static.klaviyo.com *.fontawesome.com static-tracking.klaviyo.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri /csp-report/report/index; report-to report-endpoint; 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.googleadservices.com www.googleadservices.com googleads.g.doubleclick.net www.google.com www.gstatic.com *.googlesyndication.com script.crazyegg.com *.ortto.app *.ap3api.com cdn3l.ink *.ksrndkehqnwntyxlhgto.com t.sprintlaw.com.au t.sprintlaw.co.uk connect.facebook.net *.clarity.ms *.bing.com bat.bing.com challenges.cloudflare.com *.sentry-cdn.com browser.sentry-cdn.com *.clickcease.com www.clickcease.com monitor.clickcease.com sprintlaw-visitor-intel.vercel.app; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.googleadservices.com www.googleadservices.com googleads.g.doubleclick.net *.doubleclick.net www.google.com www.gstatic.com *.ortto.app *.ap3api.com *.clarity.ms *.bing.com bat.bing.com connect.facebook.net *.facebook.com *.ksrndkehqnwntyxlhgto.com *.crazyegg.com *.sprintlaw.com.au *.sprintlaw.co.uk *.sprintlaw.co.nz t.sprintlaw.co.uk t.sprintlaw.com.au challenges.cloudflare.com *.sentry.io *.ingest.us.sentry.io *.clickcease.com www.clickcease.com monitor.clickcease.com sprintlaw-visitor-intel.vercel.app; frame-src 'self' *.googletagmanager.com *.youtube.com *.youtu.be calendly.com *.calendly.com challenges.cloudflare.com t.sprintlaw.co.uk t.sprintlaw.com.au www.google.com; media-src 'self' https: 2
default-src 'self'; base-uri 'self'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tag.wimpole.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://connect.facebook.net https://www.facebook.com https://www.google.com https://www.gstatic.com https://widget.trustpilot.com https://www.bing.com https://clarity.ms https://consent.cookiebot.com https://consentcdn.cookiebot.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; media-src 'self' https:; connect-src 'self' https://tag.wimpole.com https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://googleads.g.doubleclick.net https://www.facebook.com https://connect.facebook.net https://clarity.ms https://consent.cookiebot.com https://consentcdn.cookiebot.com; frame-src 'self' https://www.google.com https://maps.google.com https://trustpilot.com https://widget.trustpilot.com https://tag.wimpole.com https://www.youtube.com https://www.youtube-nocookie.com https://www.facebook.com https://consentcdn.cookiebot.com; object-src 'none' 2
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://pagead2.googlesyndication.com https://www.google.com https://www.gstatic.com https://accounts.google.com https://appleid.cdn-apple.com https://www.paypal.com https://www.paypalobjects.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://*.googleapis.com https://accounts.google.com https://*.paypal.com; frame-src 'self' https://googleads.g.doubleclick.net https://*.google.com https://accounts.google.com https://appleid.apple.com https://*.paypal.com https://www.openstreetmap.org; media-src 'self' blob:; worker-src 'self' blob:; manifest-src 'self'; report-uri /csp-report.php 2
font-src *.klarnacdn.net *.fontawesome.com *.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com fonts.gstatic.com static.klaviyo.com tvape.com torontovaporizer.ca stonersguardian.com api.payengine.de payengine.de *.olark.com cdn.tvape.fr *.cloudflare.com cdnjs.cloudflare.com cloudflare.com js.klevu.com *.yotpo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.google.com accounts.google.com *.canadapost.ca https://sso.epost.ca *.purolator.com *.bank.in * hubspot.com forms.hubspot.com hsforms.net forms.hsforms.com hsforms.com js.hsforms.net stonersguardian.com api.payengine.de payengine.de signin.ebay.com auth.ebay.com ebay.com www.ebay.com *.cardinalcommerce.com *.cardinaltrusted.com tvape.de *.rfihub.com *.wibmo.com *.hsforms.com *.epost.ca *.paypal.com *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.meetanshi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.certcapture.com consentcdn.cookiebot.com consentcdn.cookiebot.eu *.klarna.com www.google.com accounts.google.com *.meetanshi.com *.purolator.com secure.novalnet.de customers.barzahlen.de customers-sandbox.barzahlen.de https://hosted.paysafe.com *.sendcloud.sc *.jsdelivr.net checkout.sezzle.com sandbox.checkout.sezzle.com tracking.sezzle.com *.trustpilot.com https://*.paysafe.com https://*.netbanx.com *.bank.in * customer-upskkbfxkf3xe5cz.cloudflarestream.com iframe.videodelivery.net static.olark.com online.fliphtml5.com r1.dotmailer-surveys.com pp.payengine.de hsforms.net forms.hsforms.com js.hsforms.net dpm.demdex.net demdex.net youtu.be youtube.com stonersguardian.com api.payengine.de payengine.de vimeo.com 20813811p.rfihub.com *.cardinalcommerce.com *.cardinaltrusted.com *.rfihub.com *.wibmo.com *.hsforms.com *.epost.ca *.paypal.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://iframe.videodelivery.net https://*.cloudflarestream.com *.weltpixel.com *.wesupply.xyz https://wesupplylabs.com guarantee-cdn.com *.googletagmanager.com *.doubleclick.net *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.certcapture.com imgsct.cookiebot.com imgsct.cookiebot.eu *.doofinder.com validate.fishpig.co.uk *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ accounts.google.com magefan.com cm.magefan.com mageside.com *.canadapost.ca *.googleapis.com *.gstatic.com *.meetanshi.com https://redchamps.com *.amazonaws.com media.sezzle.com osm.klarnaservices.com c.clarity.ms c.bing.com videodelivery.net 6064173.fs1.hubspotusercontent-na1.net customer-upskkbfxkf3xe5cz.cloudflarestream.com tvape.co.uk verify.bluecheck.me torontovaporizer.ca cdn.torontovaporizer.ca tvape.com stats.g.doubleclick.net maps.gstatic.com d3svog4tlx445w.cloudfront.net static.olark.com log.olark.com maps.googleapis.com js.hsforms.net hsforms.net forms.hsforms.com perf.hsforms.com forms.hubspot.com *.tvape.com i.liadm.com demdex.net chart.googleapis.com stonersguardian.com api.payengine.de payengine.de r1-t.trackedlink.net img.onesignal.com *.cardinalcommerce.com *.cardinaltrusted.com js.klevu.com x.klarnacdn.net *.cloudfront.net *.google.co.in *.trustpilot.com guarantee-cdn.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.certcapture.com consent.cookiebot.com consentcdn.cookiebot.com consent.cookiebot.eu consentcdn.cookiebot.eu *.doofinder.com widget.freshworks.com m2epro.freshdesk.com *.klarna.com *.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.google.com accounts.google.com *.googleapis.com *.google.com *.gstatic.com *.meetanshi.com *.purolator.com cdn.novalnet.de cdn.barzahlen.de applepay.cdn-apple.com https://*.paysafe.com https://api.test.paysafe.com https://api.paysafe.com  https://songbirdstag.cardinalcommerce.com embed.sendcloud.sc *.jsdelivr.net checkout-sdk.sezzle.com sandbox.checkout-sdk.sezzle.com widget.sezzle.com *.trustpilot.com https://*.netbanx.com widget.trustpilot.com static-tracking.klaviyo.com js.klarna.com www.youtube.com cdn.jsdelivr.net embed.cloudflarestream.com embed.videodelivery.net knrpc.olark.com static.cloudflareinsights.com maps.googleapis.com stats.g.doubleclick.net www.gstatic.com r1-t.trackedlink.net c1.rfihub.net a.rfihub.net pp.payengine.de static.olark.com assets.olark.com api.olark.com a.optnmstr.com r1.dotmailer-surveys.com g1782759016.co js.hsforms.net hsforms.net forms.hsforms.com cdn.aggle.net dpm.demdex.net demdex.net stonersguardian.com ajax.cloudflare.com api.payengine.de payengine.de g594253005.co verify.bluecheck.me g1782759015.co.de g10894638425.co g1782759015.co cdn.onesignal.com onesignal.com bam.nr-data.net *.cardinalcommerce.com *.cardinaltrusted.com script.crazyegg.com cdn.noibu.com cdn4.mxpnl.com *.mxpnl.com js.klevu.com *.mantisadnetwork.com g594253006.co *.crazyegg.com *.newrelic.com x.klarnacdn.net *.adobedtm.com *.clarity.ms data: *.aggle.net *.g10696554090.co *.cloudflare.com guarantee-cdn.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.klaviyo.com unpkg.com *.doubleclick.net *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.certcapture.com *.doofinder.com widget.freshworks.com m2epro.freshdesk.com *.klarnacdn.net https://static.klaviyo.com *.fontawesome.com *.googleapis.com maxcdn.bootstrapcdn.com *.sendcloud.sc *.jsdelivr.net *.trustpilot.com static.olark.com media.sezzle.com fonts.googleapis.com hsforms.net forms.hsforms.com dpm.demdex.net demdex.net stonersguardian.com api.payengine.de payengine.de accounts.google.com onesignal.com cdn.tvape.fr verify.bluecheck.me *.cloudflare.com cdnjs.cloudflare.com cloudflare.com js.klevu.com *.klaviyo.com *.tagmanager.google.com *.googletagmanager.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com tvape.co.uk torontovaporizer.ca static.olark.com cdn.torontovaporizer.ca stonersguardian.com api.payengine.de payengine.de cdn.tvape.fr *.cardinalcommerce.com *.cardinaltrusted.com *.adobedtm.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.certcapture.com consentcdn.cookiebot.com consentcdn.cookiebot.eu consent.cookiebot.com consent.cookiebot.eu *.doofinder.com wss://*.doofinder.com widget.freshworks.com m2epro.freshdesk.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.google.com accounts.google.com *.meetanshi.com payport.novalnet.de secure.novalnet.de https://api.test.paysafe.com https://api.paysafe.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com gateway.sezzle.com sandbox.gateway.sezzle.com https://*.paysafe.com https://*.netbanx.com cdn.onesignal.com region1.google-analytics.com *.crazyegg.com knrpc.olark.com api.omappapi.com geoip.sezzle.com media.sezzle.com *.googleapis.com stats.g.doubleclick.net developer.google.com hsforms.net forms.hsforms.com demdex.net stonersguardian.com api.payengine.de payengine.de bam.nr-data.net onesignal.com *.cardinalcommerce.com *.cardinaltrusted.com cdn.noibu.com script.crazyegg.com input.noibu.com *.noibu.com wss://input.noibu.com/pv_part verify.bluecheck.me *.bluecheck.me cdn4.mxpnl.com *.mxpnl.com api-js.mixpanel.com *.mixpanel.com *.ksearchnet.com *.paypal.com *.amazonaws.com *.trustpilot.com *.clarity.ms *.adobedtm.com *.adobe.com *.aggle.net *.google.co.in *.demdex.net static.olark.com t.co *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.doubleclick.net *.run.app *.yotpo.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cdn.jsdelivr.net *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com *.sagepay.com 'self' 'unsafe-inline'; frame-ancestors https://api.clerk.io https://cdn.clerk.io 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.facebook.com *.sagepay.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net https://cdn.clerk.io hmg-attachments.s3-eu-west-1.amazonaws.com maps.gstatic.com maps.googleapis.com ssl.google-analytics.com www.facebook.com cookie-cdn.cookiepro.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page https://api.clerk.io https://cdn.clerk.io api-js.mixpanel.com bam.nr-data.net maps.googleapis.com ssl.google-analytics.com cdn.pubble.io cookie-cdn.cookiepro.com connect.facebook.net *.elavon.com *.sagepay.com *.eu.elavon.com *.opayo.cloud 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com https://api.clerk.io https://cdn.clerk.io cdn.pubble.io cdn.jsdelivr.net *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com maps.googleapis.com stats.g.doubleclick.net www.pubble.io cookie-cdn.cookiepro.com cookiepro.blob.core.windows.net *.elavon.com *.sagepay.com *.eu.elavon.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
frame-ancestors 'self'; report-to csp-report-only; report-uri https://cspreports.realpage.com/api/reports/save/report-only; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com *.cloudflare.com *.bootstrapcdn.com *.twitter.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://lapp.leanpay.hr https://app.leanpay.hr https://stage-app.leanpay.si https://app.leanpay.si https://stage-app.leanpay.ro https://vendor.leanpay.ro https://stage-checkout.leanpay.si https://stage-checkout.leanpay.ro https://checkout.leanpay.ro https://app.leanpay.ro *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.addthis.com *.trustpilot.com *.twitter.com *.vimeo.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cloudflare.com *.google-analytics.com *.twitter.com *.contentsquare.net *.clarity.ms *.bing.com *.google.si https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com *.addthis.com *.googleapis.com *.cloudflare.com *.fontawesome.com *.google-analytics.com googletagmanager.com *.googletagmanager.com graph.facebook.com connect.facebook.net *.facebook.com *.gstatic.com *.moatads.com *.trustpilot.com widgets.pinterest.com *.contentsquare.com *.contentsquare.net *.clarity.ms *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com *.cloudflare.com *.gstatic.com *.twitter.com https://fonts.bunny.net assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.cloudflare.com *.twitter.com *.contentsquare.net *.clarity.ms *.viralsweep.com *.smartsuppchat.com *.smartsuppcdn.com *.smartsupp.com wss://websocket-visitors.smartsupp.com/ *.doubleclick.net https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src fonts.gstatic.com use.typekit.net cash-f.squarecdn.com *.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com *.cloudflare.com *.klarnacdn.net s3.amazonaws.com *.slant.co data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net * *.googleapis.com *.gstatic.com magefan.com cm.magefan.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page *.googleapis.com *.gstatic.com player.vimeo.com *.cloudflare.com d1ekgxxzy7ounl.cloudfront.net d26u8mjnuxived.cloudfront.net *.facebook.net *.googletagmanager.com *.improove.io *.klarna.com rum.hlx.page 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.cash.app maxcdn.bootstrapcdn.com *.googletagmanager.com *.klarnacdn.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.magento-datasolutions.com *.magento-ds.com * *.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://e77ecc29-42f6-4ccb-b6de-661ba8ba453e.sansec.watch/; report-to report-endpoint; 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googletagmanager.com *.adobe.com www.googleadservices.com www.google-analytics.com fonts.googleapis.com vimeo.com *.facebook.net *.doubleclick.net *.google-analytics.com *.newrelic.com *.nr-data.net *.zopim.com *.fontawesome.com data: *.skroutz.gr *.cloudflare.com *.twitter.com *.twimg.com *.usercentrics.eu *.bing.com *.zdassets.com *.google.com *.google.gr *.clarity.ms/ static.klaviyo.com *.klaviyo.com *.revolut.com pay.google.com maxcdn.bootstrapcdn.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net *.herbalista.com.cy herbalista.com.cy b2b.herbalista.com.cy herbalista.biz *.herbalista.biz *.hotjar.com *.moosend.com *.trustedshops.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.vivapayments.com *.facebook.com *.google.gr *.skroutz.gr *.zopim.com *.moosend.com *.cloudflare.com td.doubleclick.net *.herbalista.com.cy herbalista.com.cy b2b.herbalista.com.cy herbalista.biz *.herbalista.biz *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com *.gstatic.com self www.google.com *.herbalista.com.cy herbalista.com.cy b2b.herbalista.com.cy herbalista.biz *.herbalista.biz *.meetanshi.com meetanshi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com widget-v3.boxnow.gr/ widget-v5.boxnow.cy *.googletagmanager.com *.skroutz.gr www.facebook.com td.doubleclick.net widget-v3.boxnow.gr *.clarity.ms/ *.bing.com *.revolut.com *.cdn-apple.com pay.google.com *.gstatic.com platform.twitter.com static.addtoany.com maps.googleapis.com maps.gstatic.com console.cloud.google.com www.google.com www.gstatic.com apis.google.com *.herbalista.com.cy herbalista.com.cy b2b.herbalista.com.cy herbalista.biz *.herbalista.biz cdn.dnky.co *.hotjar.com *.facebook.com *.trustpilot.com *.criteo.com *.zopim.com *.moosend.com *.cloudflare.com *.google.gr *.sandbox.paypal.com *.twitter.com *.meetanshi.com meetanshi.com *.intuit.com *.yotpo.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://trustmark.gr *.tiktok.com *.googleapis.com *.trustedshops.com *.zopim.com cdn.jsdelivr.net *.skroutz.gr *.moosend.com *.cloudflare.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.bing.com *.zopim.io *.doubleclick.net www.facebook.com *.mastercard.com google.com *.google.gr *.googletagmanager.com *.clarity.ms/ *.klaviyo.com static.klaviyo.com *.revolut.com *.google.com *.cdn-apple.com pay.google.com pinterest.com assets.pinterest.com syndication.twitter.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maps.googleapis.com maps.gstatic.com console.cloud.google.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com https://maps.gstatic.com *.herbalista.com.cy herbalista.com.cy b2b.herbalista.com.cy herbalista.biz *.herbalista.biz *.google.nl *.google.co.in connect.onlinesucces.nl px.ads.linkedin.com stats.g.doubleclick.net *.linkedin.com gallery.mailchimp.com *.facebook.com *.jmango360.com *.datatrics.com *.smaato.net *.klarna.com *.meetanshi.com meetanshi.com *.intuit.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com *.google-analytic.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.vivapayments.com *.fixit.gr 'self' data: *.tiktok.com *.googletagmanager.com *.googleadservices.com www.google-analytics.com *.googleapis.com *.facebook.net connect.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.paypal.com *.fontawesome.com *.trustpilot.com cdn.jsdelivr.net *.googleoptimize.com *.skroutz.gr skroutza.skroutz.gr *.adobedtm.com *.cloudflare.com *.google.gr https://trustmark.gr/badge/dist/index.js https://static.adman.gr/adman.js https://greca.adman.gr cdn.omnicliq.com/ss.js *.clarity.ms *.bing.com *.debugbear.com static.cloudflareinsights.com static.klaviyo.com static-tracking.klaviyo.com https://static-forms.klaviyo.com fast.a.klaviyo.com a.klaviyo.com telemetrics.klaviyo.com *.revolut.com pay.google.com twitter.com platform.twitter.com static.addtoany.com https://static.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maps.googleapis.com maps.gstatic.com console.cloud.google.com *.avada.io *.shopify.com *.herbalista.com.cy herbalista.com.cy b2b.herbalista.com.cy herbalista.biz *.herbalista.biz cdn.dnky.co api.comapi.com *.trackedlink.net snap.licdn.com chimpstatic.com checkout.buckaroo.nl *.adyen.com *.zopim.com *.hotjar.com *.zdassets.com *.sendcloud.sc *.mailchimp.com *.trustedshops.com *.feedbackcompany.com *.datatrics.com *.criteo.net *.criteo.com cdn.mouseflow.com *.moosend.com *.meetanshi.com meetanshi.com *.intuit.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googletagmanager.com www.googleadservices.com www.google-analytics.com *.googleapis.com vimeo.com *.facebook.net *.facebook.com *.doubleclick.net *.google-analytics.com *.gstatic.com *.newrelic.com *.nr-data.net *.fontawesome.com *.trustpilot.com cdn.jsdelivr.net *.skroutz.gr *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.bing.com *.clarity.ms/ *.herbalista.com.cy https://static.klaviyo.com maps.googleapis.com maps.gstatic.com console.cloud.google.com *.google.com https://fonts.bunny.net *.termsfeed.com herbalista.com.cy b2b.herbalista.com.cy herbalista.biz *.herbalista.biz cdn.dnky.co checkout.buckaroo.nl *.mailchimp.com *.zopim.com *.moosend.com *.trustedshops.com *.intuit.com maxcdn.bootstrapcdn.com *.yotpo.com 'self' 'unsafe-inline'; object-src maps.googleapis.com maps.gstatic.com console.cloud.google.com *.google.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' data: *.google.gr *.zopim.com *.skroutz.gr *.moosend.com *.cloudflare.com *.youtube.com *.herbalista.com.cy herbalista.com.cy b2b.herbalista.com.cy herbalista.biz *.herbalista.biz 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.fixit.gr *.googleadservices.com *.googleapis.com *.gstatic.com *.mastercard.com *.google.gr *.googletagmanager.com *.tiktok.com stats.g.doubleclick.net https://googleads.g.doubleclick.net/ *.zdassets.com *.zopim.com wss://*.zopim.com *.skroutz.gr *.cloudflare.com https://pagead2.googlesyndication.com *.bing.com *.clarity.ms *.debugbear.com https://stats.g.doubleclick.net *.klaviyo.com *.revolut.com *.cdn-apple.com pay.google.com stats.addtoany.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maps.googleapis.com maps.gstatic.com console.cloud.google.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io *.herbalista.com.cy herbalista.com.cy b2b.herbalista.com.cy herbalista.biz *.herbalista.biz commerce.adobedc.net api.comapi.com *.hotjar.com *.hotjar.io *.feedbackcompany.com *.zendesk.com *.facebook.com *.datatrics.com *.moosend.com *.meetanshi.com meetanshi.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.50-ml.media https://fonts.gstatic.com https://static.klaviyo.com *.fontawesome.com maxcdn.bootstrapcdn.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.awin1.com *.zenaps.com *.fls.doubleclick.net www.mainadv.com *.doubleclick.net *.2trk.info www.instagram.com calendly.com *.50-ml.it *.50-ml.eu *.50-ml.fr *.50-ml.de *.50-ml.es *.50-ml.com *.50-ml.co.uk *.lcmark.net *.maisonmataha.it *.weltpixel.com https://www.tiktok.com https://www.instagram.com *.trustpilot.com *.iubenda.com *.sendcloud.sc *.jsdelivr.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.awin1.com *.zenaps.com *.wepowerconnections.com *.roeye.com *.50-ml.com *.50-ml.media *.google.com *.google.fr *.google.it *.google.es *.google.de *.google.eu *.google.co.uk *.google.al *.google.ad *.google.at *.google.ba *.google.be *.google.bg *.google.by *.google.ch *.google.com.cy *.google.cz *.google.dk *.google.ee *.google.fi *.google.gr *.google.hr *.google.hu *.google.ie *.google.is *.google.li *.google.lt *.google.lu *.google.lv *.google.md *.google.me *.google.mk *.google.com.mt *.google.nl *.google.no *.google.pl *.google.pt *.google.ro *.google.rs *.google.se *.google.si *.google.sk *.google.sm *.google.com.tr *.google.com.ua *.googletagmanager.com bat.bing.com maps.gstatic.com maps.googleapis.com *.cloudinary.com *.googlesyndication.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.iubenda.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.amazonaws.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.google-analytics.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com www.googletagmanager.com https://rum.hlx.page https://maps.googleapis.com https://player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com *.preciso.net *.50-ml.eu *.50-ml.it *.50-ml.fr *.50-ml.de *.50-ml.es *.50-ml.com *.50-ml.co.uk www.clarity.ms bat.bing.com www.instagram.com *.googleapis.com maps.gstatic.com assets.calendly.com *.zipchat.ai *.maisonmataha.it static.cloudflareinsights.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.trustpilot.com *.iubenda.com *.50-ml.media *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.gstatic.com *.sendcloud.sc *.jsdelivr.net https://servicepoints.sendcloud.sc https://embed.sendcloud.sc *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com static.zdassets.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com assets.calendly.com *.50-ml.media *.iubenda.com https://static.klaviyo.com *.trustpilot.com https://fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.sendcloud.sc *.jsdelivr.net *.stripe.network *.stripecdn.com *.amazon.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.50-ml.media 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://maps.googleapis.com https://player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.wepowerconnections.com https://the.sciencebehindecommerce.com capig.stape.tech *.50-ml.com *.clarity.ms maps.googleapis.com maps.gstatic.com pay.google.com *.zipchat.ai *.googlesyndication.com www.googleadservices.com *.50-ml.it *.50-ml.eu *.50-ml.fr *.50-ml.de *.50-ml.es *.50-ml.co.uk *.maisonmataha.it cloudflareinsights.com rum.hlx.page *.trustpilot.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.iubenda.com *.50-ml.media *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com 50-ml.zendesk.com ekr.zdassets.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com https://www.tiktok.com https://www.instagram.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.iwv-plugins.de js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com player.vimeo.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com *.hach.de *.oppermann.de *.kombinat-berlin.de *.fonts.net *.ekomi.com *.ekomi.de *.ekomiapps.de *.fontawesome.com *.googleapis.com https://widgets.trustedshops.com https://static.unzer.com https://applepay.cdn-apple.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cleverreach.com *.hach.de *.oppermann.de *.kombinat-berlin.de *.facebook.com *.facebook.net *.nosto.com *.nos.to 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.hach.de *.oppermann.de *.kombinat-berlin.de *.facebook.com *.facebook.net *.uptain.de *.nosto.com *.nos.to https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://static-cc.test.unzer.com https://h.online-metrix.net https://google.com/pay https://pay.google.com/ https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ https://sandbox.clicktopay.auth.visa.com https://clicktopay.visa.com https://sandbox.secure.checkout.visa.com https://secure.checkout.visa.com *.wonderchat.io 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.paypal.com *.typekit.net *.gstatic.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de static-eu.payments-amazon.com *.cloudfront.net magefan.com cm.magefan.com *.disqus.com *.hach.de *.oppermann.de *.kombinat-berlin.de 'self' data: *.cookielaw.org *.taboola.com *.bing.com *.adform.net *.facebook.com *.facebook.net *.licdn.com *.creative-serving.com *.uptain.de *.doubleclick.net *.doubleclick.com *.linkedin.com *.google.com *.google.de cx.atdmt.com *.ekomi.com *.ekomi.de *.ekomiapps.de *.nosto.com *.nos.to https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://static.unzer.com *.online-metrix.net https://www.gstatic.com https://connect.nosto.com *.hsforms.net *.hsforms.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.googleapis.com *.gstatic.com jsd-widget.atlassian.com widget.freshworks.com m2epro.freshdesk.com *.disqus.com *.hach.de *.oppermann.de *.kombinat-berlin.de *.cookielaw.org *.taboola.com *.bing.com *.adform.net *.facebook.com *.facebook.net *.licdn.com *.creative-serving.com *.uptain.de *.doubleclick.net *.doubleclick.com *.polyfill.io *.sentry-cdn.com *.google-analytics.com *.googleadservices.com *.ekomi.com *.ekomi.de *.ekomiapps.de stage.exdatis.com *.nosto.com *.nos.to *.fontawesome.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com https://static.unzer.com https://applepay.cdn-apple.com https://pay.google.com https://code.jquery.com https://h.online-metrix.net https://h64.online-metrix.net https://static-v2.unzer.com/v2/ui-components/ *.wonderchat.io *.googletagmanager.com www.termsfeed.com https://www.googletagmanager.com https://connect.nosto.com *.hsforms.net *.hsforms.com https://browser.sentry-cdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.hach.de *.oppermann.de *.kombinat-berlin.de *.fonts.net *.ekomi.com *.ekomi.de *.ekomiapps.de stage.exdatis.com *.fontawesome.com *.nosto.com *.nos.to https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com https://sandbox.src.mastercard.com https://static-v2.unzer.com/v2/ui-components/ *.wonderchat.io *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src stage.exdatis.com *.wonderchat.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de jsd-widget.atlassian.com api-private.atlassian.com widget.freshworks.com m2epro.freshdesk.com *.hach.de *.oppermann.de *.kombinat-berlin.de *.cookielaw.org *.taboola.com *.bing.com *.adform.net *.facebook.com *.facebook.net *.licdn.com *.creative-serving.com *.uptain.de *.doubleclick.net *.doubleclick.com id5-sync.com *.onetrust.com *.ekomi.com *.ekomi.de *.ekomiapps.de stage.exdatis.com wss://stage.exdatis.com *.nosto.com *.nos.to *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://api.unzer.com https://api.heidelpay.com https://sbx-api.heidelpay.com https://sbx-api.unzer.com https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://h.online-metrix.net https://h64.online-metrix.net https://google.com/pay https://www.google.com/pay https://pay.google.com https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ https://static-cc.test.unzer.com https://static-v2.unzer.com/v2/ui-components/ *.wonderchat.io wss://*.wonderchat.io autocomplete2.postdirekt.de t.elasticsuite.io *.hsforms.net *.hsforms.com https://*.ingest.sentry.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://o4511908666015744.ingest.de.sentry.io/api/4511966379835472/security/?sentry_key=30f995f0359efac55db669bd7ce13901; report-to report-endpoint; 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com widget.thuiswinkel-cdn.org data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com consent.cookiebot.com *.freshchat.com consentcdn.cookiebot.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.trustpilot.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com imgsct.cookiebot.com *.google.com.ua *.google.com.nl api.taggrs.io widget.thuiswinkel-cdn.org px.ads.linkedin.com bat.bing.com sst.officecentre.nl https://www.mollie.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com consent.cookiebot.com static.zdassets.com wss://widget-mediator.zopim.com consentcdn.cookiebot.com widget.thuiswinkel.org widget.thuiswinkel-cdn.org eu.fw-cdn.com *.freshchat.com bat.bing.com sst.officecentre.nl js.mollie.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.typekit.net *.freshchat.com static-tracking.klaviyo.com widget.thuiswinkel-cdn.org https://static.klaviyo.com assets.braintreegateway.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com ekr.zdassets.com wss://widget-mediator.zopim.com consentcdn.cookiebot.com widget.trustpilot.com widget.thuiswinkel.org widget.thuiswinkel-cdn.org app-euc.freshmarketer.com widgetcontent.thuiswinkel-cdn.org sst.officecentre.nl px.ads.linkedin.com bat.bing.com ws://127.0.0.1:35729/livereload https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https:; font-src 'self' https: data:; connect-src 'self' https:; frame-src https:; report-uri https://o4510997758017536.ingest.de.sentry.io/api/4511144086995024/security/?sentry_key=84db9cae1961af6c1be4e6a1bc966032&sentry_environment=production 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com 'self' data: *.doubleclick.net *.facebook.com *.klarnacdn.net *.cloudflare.com *.trustedshops.com *.googleapis.com *.klaviyo.com cdn1.stamped.io stamped.io *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.adyen.com *.facebook.com *.nosto.com *.nos.to *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.adyen.com *.doubleclick.net *.facebook.com *.klarna.com *.nosto.com *.nos.to *.freshchat.com *.twitter.com *.pinterest.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com 'self' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com *.adyen.com *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.klarna.com *.klarnaevt.com *.nosto.com *.nos.to *.rubiconproject.com/ *.sharethrough.com/ *.teads.tv/ *.tremorhub.com/ *.3lift.com/ *.yieldlab.net/ *.ads.yieldmo.com/ *.emxdgt.com/ *.adform.net/ *.demdex.net/ *.criteo.net *.adnxs.com/ *.cloudfront.net/ *.stamped.io *.freshchat.com/ *.cloudflare.com *.ytimg.com *.bing.com/ *.clarity.ms/ *.google.al/ *.google.am/ *.google.at/ *.google.az/ *.google.ba/ *.google.be/ *.google.bg/ *.google.by/ *.google.ch/ *.google.cz/ *.google.de/ *.google.dk/ *.google.ee/ *.google.es/ *.google.fi/ *.google.fr/ *.google.ge/ *.google.gr/ *.google.hr/ *.google.hu/ *.google.ie/ *.google.is/ *.google.it/ *.google.kz/ *.google.li/ *.google.lt/ *.google.lu/ *.google.lv/ *.google.md/ *.google.me/ *.google.mk/ *.google.mt/ *.google.nl/ *.google.no/ *.google.pl/ *.google.pt/ *.google.ro/ *.google.rs/ *.google.ru/ *.google.se/ *.google.si/ *.google.sk/ *.google.sm/ *.google.tr/ *.google.ua/ *.google.uk/ *.google.com.ua/ *.google.com.tr/ *.google.com.gr/ *.google.com.pt/ *.google.com.pl/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ cdn1.stamped.io stamped.io https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.klarna.com/ *.nosto.com *.nos.to *.cloudfront.net/ *.cookiebot.com/ *.kuvio.io/ *.reamaze.com/ *.shopalike.fi/ *.chatbotize.com/ qanuk-stage.vercel.app *.tradedoubler.com *.criteo.com *.cookiefirst.com *.omappapi.com *.googleoptimize.com *.klaviyo.com reviewsonmywebsite.com 'self' data: *.fontawesome.com *.videoly.co/ *.freshchat.com cdnjs.cloudflare.com/ *.googleapis.com/ *.noibu.com/ *.pinimg.com/ *.bing.com/ *.tiktok.com/ *.pinterest.com/ *.intercom.io/ *.intercomcdn.com/ *.clarity.ms/ *.klarnaservices.com/ *.livechatinc.com/ *.hotjar.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ player.vimeo.com cdn1.stamped.io stamped.io js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.nosto.com *.nos.to *.cookiefirst.com *.klarnacdn.net *.omappapi.com reviewsonmywebsite.com *.typekit.net *.freshchat.com/ *.cloudflare.com/ *.klaviyo.com/ https://static.klaviyo.com cdn1.stamped.io stamped.io *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src cdn1.stamped.io stamped.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.adyen.com *.algolia.net *.algolia.com/ *.algolianet.com *.insights.algolia.io insights.algolia.io *.google-analytics.com *.facebook.com *.facebook.net *.google.com/ *.klarnaevt.com *.nosto.com *.nos.to *.criteo.com *.hobbybox.fi/ *.g.doubleclick.net/ *.reamaze.com/ *.cookiebot.com/ *.kelkoogroup.net/ *.chatbotize.com *.klarnaservices.com *.doubleclick.net *.qanuk.app *.cookiefirst.com *.omappapi.com *.googlesyndication.com reviewsonmywebsite.com *.cloudflare.com *.pinterest.com *.tiktok.com/ *.clarity.ms/ *.noibu.com/ wss://input.noibu.com/ wss://nexus-websocket-a.intercom.io/ *.intercom.io/ *.bing.com/ *.algolia.io/ *.klarna.com/ wss://ws.reamaze.com/ *.reamaze.io/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ cdn1.stamped.io stamped.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src self data: *.nosto.com/ *.klaviyo.com/ *.stamped.io/ https://stamped.io/ *.gstatic.com/ *.cloudfront.net/ *.cloudflare.com/ *.klarnaservices.com/ *.klarna.com/ *.klarnaevt.com/ *.klarnacdn.net/ *.reamaze.io/ *.reamaze.com/ wss://ws.reamaze.com/ 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cdn.jsdelivr.net cdn.almapay.com cash-f.squarecdn.com github.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.avis-verifies.com *.skeepers.io https://cdnjs.cloudflare.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors *.skeepers.io 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.getalma.eu *.almapay.com/ *.stripe.com/ *.checkout.com/ *.adyen.com/ * critizr.com asset.easydmp.net creativecdn.com *.doubleclick.net *.wlp-acs.com *.hotjar.com/ *.adyen.com js.mollie.com *.avis-verifies.com *.skeepers.io *.adyenpayments.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https://images.unsplash.com cdn.matomo.cloud *.matomo.cloud *.openstreetmap.org axeptio.imgix.net www.facebook.com google.fr *.google.fr *.bing.com *.adnxs.com *.adyen.com cl.avis-verifies.com *.metaffiliation.com *.leroidumatelas.fr *.googletagmanager.com https://firebasestorage.googleapis.com https://www.mollie.com *.hsforms.net *.hsforms.com 'self' data: *.adyenpayments.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com cdn.jsdelivr.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://maps.googleapis.com https://player.vimeo.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ *.avis-verifies.com static.critizr.com *.googletagmanager.com cdn.matomo.cloud *.matomo.cloud *.axept.io *.bing.com asset.easydmp.net analytics.tiktok.com trk.lgw.io connect.facebook.net *.hotjar.com *.lm-tracking.com *.metaffiliation.com *.leroidumatelas.fr *.avada.io *.shopify.com js.mollie.com *.skeepers.io https://cdnjs.cloudflare.com *.hsforms.net *.hsforms.com *.gstatic.com *.de-matrassenkoning.be *.leroidumatelas.be *.msecnd.net *.adyenpayments.com unpkg.com *.perfmaker.net *.zdassets.com 'unsafe-eval' 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.jsdelivr.net *.cash.app static.critizr.com *.adyen.com *.metaffiliation.com *.leroidumatelas.fr *.googletagmanager.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.avis-verifies.com *.skeepers.io https://fonts.googleapis.com https://cdnjs.cloudflare.com *.googleapis.com *.gstatic.com *.adyenpayments.com *.perfmaker.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.getalma.eu *.almapay.com *.openstreetmap.org * https://maps.googleapis.com https://player.vimeo.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ cdn.matomo.cloud *.matomo.cloud *.axept.io analytics.tiktok.com *.google.fr *.doubleclick.net *.metaffiliation.com *.leroidumatelas.fr *.googletagmanager.com https://get.geojs.io *.avada.io *.avis-verifies.com awsapis3.netreviews.eu *.skeepers.io t.elasticsuite.io *.hsforms.net *.hsforms.com *.de-matrassenkoning.be *.leroidumatelas.be *.msecnd.net *.adyenpayments.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src blob: https:;	img-src data: https:;	script-src 'unsafe-inline' 'unsafe-eval' blob: https:;	style-src 'unsafe-inline' https:;	font-src data: https:;	frame-src https:;	media-src data: https:;	object-src 'none';	connect-src https:;	frame-ancestors 'self'; 2
font-src *.googleapis.com *.gstatic.com data: https://www.googletagmanager.com *.fontawesome.com applepay.cdn-apple.com use.fontawesome.com aqadecor.it aqadecor.com aqadecor.de aqadecor.fr fonts.gstatic.com embed.tawk.to *.klaviyo.com *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.tawk.to 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.google.com api.payplug.com secure.payplug.com www.googletagmanager.com badge.eshoppingadvisor.com www.facebook.com static.klaviyo.com *.tawk.to *.clarity.ms 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com *.googleapis.com magefan.com cm.magefan.com aqadecor.it aqadecor.com aqadecor.de aqadecor.fr www.facebook.com tawk.link cdn.eshoppingadvisor.com *.tawk.to cdn.jsdelivr.net s3.amazonaws.com/ *.clarity.ms data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.avada.io api.payplug.com applepay.cdn-apple.com https://cdn.payplug.com/js/integrated-payment/ aqadecor.it aqadecor.com aqadecor.de aqadecor.fr use.fontawesome.com static.klaviyo.com embed.tawk.to badge.eshoppingadvisor.com static-tracking.klaviyo.com connect.facebook.net cdn.eshoppingadvisor.com business.eshoppingadvisor.com *.tawk.to cdn.jsdelivr.net clarity.ms *.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com use.fontawesome.com aqadecor.it aqadecor.com aqadecor.de aqadecor.fr embed.tawk.to cdn.eshoppingadvisor.com cdnjs.cloudflare.com *.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tawk.to tawk.link 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://get.geojs.io *.avada.io fast.a.klaviyo.com static-forms.klaviyo.com aqadecor.it aqadecor.com aqadecor.de aqadecor.fr embed.tawk.to pagead2.googlesyndication.com region1.google-analytics.com *.tawk.to wss://*.tawk.to *.clarity.ms x.clarity.ms 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src aqadecor.it aqadecor.com aqadecor.de aqadecor.fr pagead2.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self' https://cdn.wolterskluwer.io/ https://www.googletagmanager.com/ https://analytics.sleeknote.com/ https://dc.services.visualstudio.com/v2/track https://www.google-analytics.com/ https://region1.google-analytics.com/ https://vimeo.com/ https://pagead2.googlesyndication.com/ https://cmtt.nl/ https://ep1.adtrafficquality.google/ https://securepubads.g.doubleclick.net/; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdn.userdatatrust.com/ https://securepubads.g.doubleclick.net/ https://pagead2.googlesyndication.com/ https://ep2.adtrafficquality.google/ https://www.googletagmanager.com/ https://eu2.cdn.thunderhead.com/one/rt/js/one-tag.js?siteKey=ONE-JHGTRIWT14-2067 http://sleeknotecustomerscripts.sleeknote.com/23807.js http://img.en25.com/i/elqCfg.min.js https://az416426.vo.msecnd.net/scripts/a/ai.0.js http://sleeknotestaticcontent.sleeknote.com/ https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1069938057/ https://www.google-analytics.com/analytics.js https://www.googletagservices.com/ https://connect.facebook.net/ http://cdn.feedbackify.com/ http://dev.visualwebsiteoptimizer.com/ https://certify-js.alexametrics.com/ http://ajax.googleapis.com/; style-src 'self' 'unsafe-inline' https://cdn.wolterskluwer.io/; img-src 'self' https://cdn.wolterskluwer.io/wk-logos/1.0.x/ https://s1364398973.t.eloqua.com/visitor/v200/svrGP data: https://www.google.com/ https://www.google.it/ https://www.google-analytics.com/ https://i.vimeocdn.com/ https://www.taxvisions.nl/ https://acc.taxvisions.nl/ https://ep1.adtrafficquality.google/ https://ep2.adtrafficquality.google/ https://tpc.googlesyndication.com/ https://pagead2.googlesyndication.com/ https://www.googletagmanager.com/ http://cdn.feedbackify.com/ https://dev.visualwebsiteoptimizer.com/; font-src 'self' https://cdn.wolterskluwer.io/; frame-src 'self' https://player.vimeo.com/ *.safeframe.googlesyndication.com/ https://ep2.adtrafficquality.google/; frame-ancestors 'self'; 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.lynka24.local  www.googletagmanager.com *.demdex.net *.google-analytics.com 'self' 'unsafe-inline'; img-src data: *.adobedtm.com *.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleusercontent.com www.apptrian.com magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' blob: self *.abbc.pl *.lynka.eu https://ssl.dotpay.pl *.braintreegateway.com *.demdex.net *.behance.pl *.ftcdn.eu *.vimeocdn.net *.aptrinsic.com storage.googleapis.com https://secure.adnxs.com https://pixel-geo.prfct.co https://www.google.pl lynka.eu img.youtube.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com apis.google.com www.apptrian.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com https://pixel-geo.prfct.co https://tag.perfectaudience.com https://koi-3scsh62opg.marketingautomation.services https://js-agent.newrelic.com https://www.youtube.com *.usercentrics.eu 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.googletagmanager.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net *.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.lynka24.local *.abbc.pl *.lynka.eu *.demdex.net https://ssl.dotpay.pl https://stats.g.doubleclick.net https://www.google.pl *.usercentrics.eu 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
script-src https://cdn.insight.sitefinity.com https://dec.azureedge.net https://dpt.asatalent.nl https://dpt.easyway.nl https://dpt.medi-interim.nl https://dpt.rgfstaffing.nl https://dpt.secretaryplus.nl https://dpt.startpeople.nl https://dpt.technicum-engineering.nl https://dpt.technicum.nl https://dpt.unique.nl https://dpt.usgfinance.nl https://dpt.usglegal.nl https://dpt.usgmarcom.nl https://dpt.usgrestart.nl https://player.vimeo.com/api/player.js https://www.youtube.com https://www.youtube.com/iframe_api https://maps.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://s.ytimg.com https://consent.cookiefirst.com https://snap.licdn.com https://cdn.jsdelivr.net https://www.clarity.ms https://*.clarity.ms https://connect.facebook.net https://analytics.tiktok.com https://static.ads-twitter.com https://*.onrecruit.net 'unsafe-eval' 'wasm-unsafe-eval' 'unsafe-inline' 'self'; style-src https://cdn.insight.sitefinity.com https://dec.azureedge.net https://consent.cookiefirst.com https://fonts.googleapis.com *.googleapis.com 'self' 'unsafe-inline'; img-src https://cdn.insight.sitefinity.com https://dec.azureedge.net https://*.linkedin.com https://*.frontify.com https://*.cloudinary.com https://*.gstatic.com https://*.googleapis.com https://*.asatalent.nl https://*.easyway.nl https://*.medi-interim.nl https://*.rgfstaffing.nl https://*.secretaryplus.nl https://*.startpeople.nl https://*.technicum-engineering.nl https://*.technicum.nl https://*.unique.nl https://*.usgfinance.nl https://*.usglegal.nl https://*.usgmarcom.nl https://*.usgrestart.nl https://unpkg.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.google.nl https://googleads.g.doubleclick.net https://www.facebook.com https://px.ads.linkedin.com https://analytics.tiktok.com https://*.onrecruit.net https://c.bing.com https://b.bing.com https://rgfstaffing.nl 'self' data: blob:; connect-src https://*.localhost https://*.insight.sitefinity.com https://*.dec.sitefinity.com https://*.algolia.net https://*.algolianet.com https://*.applicationinsights.azure.com https://*.clarity.ms https://consent.cookiefirst.com https://api.cookiefirst.com https://edge.cookiefirst.com https://px.ads.linkedin.com https://www.googletagmanager.com https://www.google.com https://*.googleapis.com https://*.google-analytics.com https://www.google-analytics.com https://analytics.google.com https://*.doubleclick.net https://www.googleadservices.com https://*.bing.com https://connect.facebook.net https://analytics.tiktok.com https://*.onrecruit.net https://ws-geocoding-app-tst.azurewebsites.net https://ws-geocoding-app-acc.azurewebsites.net https://ws-geocoding-app-prd.azurewebsites.net https://rgf-ws-app-cms-tst.azurewebsites.net https://*.asatalent.nl https://*.easyway.nl https://*.medi-interim.nl https://*.rgfstaffing.nl https://*.secretaryplus.nl https://*.startpeople.nl https://*.technicum-engineering.nl https://*.technicum.nl https://*.unique.nl https://*.usgfinance.nl https://*.usglegal.nl https://*.usgmarcom.nl https://*.usgrestart.nl 'self' data: blob:; font-src https://rgf-assetmanager.azurewebsites.net https://netdna.bootstrapcdn.com https://fonts.gstatic.com https://consent.cookiefirst.com 'self' data:; default-src 'self'; worker-src blob:; child-src blob:; frame-src https://dpt.asatalent.nl https://dpt.easyway.nl https://dpt.medi-interim.nl https://dpt.rgfstaffing.nl https://dpt.secretaryplus.nl https://dpt.startpeople.nl https://dpt.technicum-engineering.nl https://dpt.technicum.nl https://dpt.unique.nl https://dpt.usgfinance.nl https://dpt.usglegal.nl https://dpt.usgmarcom.nl https://dpt.usgrestart.nl 'self' https://youtube.com https://*.youtube.com https://*.youtube-nocookie.com https://player.vimeo.com https://www.tiktok.com https://*.frcapi.com https://www.googletagmanager.com https://www.facebook.com https://td.doubleclick.net; 2
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.webwinkelkeur.nl https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com consentcdn.cookiebot.eu td.doubleclick.net www.youtube-nocookie.com https://*.dpdconnect.nl *.twitter.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io widgets.automizely.com widgets.automizely.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.pay.nl *.calendly.com *.hsforms.net *.hsforms.com www.google.com www.google.nl www.facebook.com bat.bing.com px.ads.linkedin.com img.sct.eu1.usercentrics.eu *.cloudflare.com *.klarna.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.webwinkelkeur.nl ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://maps.gstatic.com https://maps.googleapis.com www.googletagmanager.com blob: https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com ajax.googleapis.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io https://maps.googleapis.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.gstatic.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.calendly.com *.hsforms.net *.hsforms.com chimpstatic.com api.dpdconnect.nl www.googletagmanager.com consent.cookiebot.eu snap.licdn.com connect.facebook.net bat.bing.com googleads.g.doubleclick.net consentcdn.cookiebot.eu www.google.com www.gstatic.com https://*.dpdconnect.nl *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.webwinkelkeur.nl downloads.mailchimp.com *.list-manage.com https://maps.googleapis.com/maps/api/ https://places.googleapis.com/ https://examplecdn.com https://maps.googleapis.com/maps-api-v3/ https://places.googleapis.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.calendly.com *.hsforms.net *.hsforms.com www.youtube-nocookie.com www.gstatic.com *.fontawesome.com *.cloudflare.com *.google.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.webwinkelkeur.nl downloads.mailchimp.com https://fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.automizely.com api.automizely.io https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.calendly.com *.hsforms.net *.hsforms.com region1.analytics.google.com px.ads.linkedin.com consentcdn.cookiebot.eu www.youtube-nocookie.com play.google.com jnn-pa.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.webwinkelkeur.nl https://places.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.pay.nl 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src bat.bing.com googleads.g.doubleclick.net pagead2.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://localhost/paynl/csp/report; report-to report-endpoint; 2
font-src *.fontawesome.com *.gstatic.com 'self' data: fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * magento-cloudflare.jetrails.com *.trustpilot.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de static-eu.payments-amazon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.ytimg.com 'self' data: *.gstatic.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com maps.googleapis.com *.amazonaws.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.avada.io *.google.com *.gstatic.com *.trustpilot.com *.cloudflare.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com maps.googleapis.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com unsafe-inline assets.braintreegateway.com *.googleapis.com *.gstatic.com *.trustpilot.com *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://get.geojs.io *.avada.io t.elasticsuite.io *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; script-src 'self'; 2
font-src *.fontawesome.com *.fonts.googleapis.com *.gstatic.com data: *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.google.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.twitter.com https://seo.mageplaza.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.pagar.me *.netsgroup.com *.sibs.pt *.seglan.com *.secureacs.com *.rsa3dsauth.com *.apata.io *.cardinalcommerce.com *.santander.com.br *.bradesco.com.br *.bradesco *.stone.com.br *.nubank.com.br *.itau.com.br *.bb.com.br *.caixa.gov.br *.inter.co *.bancointer.com.br *.c6bank.com.br *.bancobmg.com.br *.safra.com.br *.sicoob.com.br *.banrisul.com.br *.banrisul.b.br *.banorte.com *.xpi.com.br *.btgpactual.com *.btgpactualdigital.com *.picpay.com *.amedigital.com *.neon.tech *.neon.com.br *.wise.com *.revolut.com *.sandbox.3dsecure.io *.google.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.google.com *.addthis.com *.sharethis.com *.pinterest.com *.twitter.com *.lightwidget.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.pagar.me *.netsgroup.com *.sibs.pt *.seglan.com *.secureacs.com *.rsa3dsauth.com *.apata.io *.cardinalcommerce.com *.santander.com.br *.bradesco.com.br *.bradesco *.stone.com.br *.nubank.com.br *.itau.com.br *.bb.com.br *.caixa.gov.br *.inter.co *.bancointer.com.br *.c6bank.com.br *.bancobmg.com.br *.safra.com.br *.sicoob.com.br *.banrisul.com.br *.banrisul.b.br *.banorte.com *.xpi.com.br *.btgpactual.com *.btgpactualdigital.com *.picpay.com *.amedigital.com *.neon.tech *.neon.com.br *.wise.com *.revolut.com *.sandbox.3dsecure.io *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cloudflare.com *.klarna.com *.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.sharethis.com *.pinterest.com *.cdninstagram.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.lightemporium.com *.usercentrics.eu *.sunspecial.com.br https://sunspecial.com.br *.facebook.com *.google.com.br *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com cdn.mundipagg.com api.pagar.me data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.googleapis.com *.addthis.com *.sharethis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.instagram.com *.cloudflare.com *.twitter.com *.google-analytics.com *.googleadservices.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.vimeo.com *.paypal.com *.paypalobjects.com *.lightwidget.com https://cdn.lightwidget.com *.clarity.ms *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 3ds2.pagar.me 3ds2-sdx.pagar.me *.google.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.google.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cloudflare.com *.paypal.com *.googleapis.com *.addthis.com *.sharethis.com *.cardinalcommerce.com *.graph.instagram.com *.google-analytics.com *.twitter.com *.twimg.com *.facebook.com *.clarity.ms *.doubleclick.net *.g.doubleclick.net *.google.com.br https://get.geojs.io *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com api.mundipagg.com api.pagar.me brasilapi.com.br viacep.com.br servicodados.ibge.gov.br *.google.com google.com pay.sandbox.google.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://*.sunspecial.com.br; report-to report-endpoint; 2
object-src 'none'; script-src 'self' cdnjs.cloudflare.com https://cdn.jsdelivr.net https://maps.google.com https://maps.googleapis.com https://static.addtoany.com https://use.fontawesome.com https://www.google.com; script-src-attr 'self'; style-src 'self' cdnjs.cloudflare.com https://fonts.googleapis.com; style-src-attr 'self'; frame-ancestors 'self' 2
default-src  'self' data: *.pinimg.com *.postaffiliatepro.com partneri.affilmax.cz *.doubleclick.net *.facebook.net *.google-analytics.com *.biano.cz *.dognet.sk *.googlesyndication.com *.imedia.cz *.googletagmanager.com *.googleadservices.com ;font-src  'self' data: fonts.gstatic.com *.zbozi.cz *.biano.cz *.biano.sk *.biano.hu ;connect-src  'self' google.com *.google.com *.google.hu *.google.ae *.google.co.uk *.google.cz *.google.sk *.google.de *.google.at *.google.fr *.google.it *.google.sk *.google.pl *.google.nl *.google.ie *.google.com.ua *.googleapis.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.zbozi.cz *.exchangeratesapi.io *.pingdom.net *.biano.cz *.biano.sk *.biano.hu *.bianopixel.com *.dognet.sk *.foxentry.cz *.seznam.cz *.facebook.com *.pinterest.com *.doubleclick.net https://*.clarity.ms partner-events.favi.cz partner-events.favi.sk partner-events.favi.hu t.targito.signal-nabytek.cz t.targito.sg-nabytek.cz t.targito.signal-nabytok.sk t.targito.sg-nabytok.sk t.targito.butor-signal.hu t.targito.sg-butor.hu *.clickcease.com *.targito.com *.googlesyndication.com https://saas.bianoapi.com bat.bing.com bat.bing.net live.luigisbox.com api.luigisbox.com  https://*.api.rvndev.com https://*.raventic.ai *.pinimg.com https://*.api.raventic.ai https://*.api.raventic.dev https://api.raventic.dev https://eshops-uet-tags.ams3.cdn.digitaloceanspaces.com apps.sg-nabytek.cz apps.sg-nabytok.sk apps.sg-butor.hu *.srovname.cz *.heureka.cz *.heureka.sk *.heureka.group ;script-src  'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.google.cz *.seznam.cz *.googleapis.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.imedia.cz *.facebook.net *.doubleclick.net *.rival.cz *.fg.cz *.3dliving.cz *.imedia.cz *.zbozi.cz *.exchangeratesapi.io *.facebook.com *.pingdom.net *.biano.cz *.biano.sk *.biano.hu *.bianopixel.com *.dognet.sk *.foxentry.cz *.googlesyndication.com *.pinimg.com *.pinterest.com partneri.affilmax.cz *.postaffiliatepro.com *.heureka.cz *.heureka.sk *.heureka.group im9.cz cz.img9.cz *.glami.cz *.licdn.com *.linkedin.com tracking.srovname.cz https://*.clarity.ms partner-events.favicdn.net cdn.targito.signal-nabytek.cz cdn.targito.sg-nabytek.cz cdn.targito.signal-nabytok.sk cdn.targito.sg-nabytok.sk cdn.targito.butor-signal.hu cdn.targito.sg-butor.hu *.clickcease.com cdn.targito.com https://saas.bianoapi.com bat.bing.com bat.bing.net scripts.luigisbox.com cdn.luigisbox.com https://sdk.cdn.rvndev.com https://sdk.rvndn.com apps.sg-nabytek.cz apps.sg-nabytok.sk apps.sg-butor.hu *.srovname.cz ;form-action  'self' *.facebook.com *.facebook.net *.pinterest.com ;frame-src  'self' *.youtube.com *.iplatba.cz *.facebook.com *.imedia.cz *.zbozi.cz *.essox.cz *.foxentry.cz *.doubleclick.net *.googletagmanager.com *.google.com *.heureka.cz *.heureka.sk *.heureka.group *.pinterest.com *.googlesyndication.com login.szn.cz ;worker-src  'self' *.youtube.com *.iplatba.cz *.facebook.com *.imedia.cz *.zbozi.cz *.essox.cz *.foxentry.cz *.doubleclick.net *.googletagmanager.com *.google.com *.heureka.cz *.heureka.sk *.heureka.group *.pinterest.com *.googlesyndication.com login.szn.cz ;frame-ancestors  'self' ;img-src  'self' data: blob: *.gstatic.com *.googleapis.com *.googlecode.com *.googletagmanager.com *.google-analytics.com *.seznam.cz *.doubleclick.net *.google.com *.google.hu *.google.ae *.google.co.uk *.google.cz *.google.sk *.google.de *.google.at *.google.fr *.google.it *.google.sk *.google.pl *.google.nl *.google.ie *.google.com.ua *.imedia.cz *.facebook.com *.facebook.net *.fg.cz *.3dliving.cz *.signal-nabytek.cz *.sg-nabytek.cz *.signal-nabytok.sk *.sg-nabytok.sk *.rival.cz *.vykupto.cz *.signal.pl *.zbozi.cz *.exchangeratesapi.io *.dognet.sk *.foxentry.cz *.pinimg.com *.pinterest.com *.biano.cz *.biano.sk *.biano.hu *.heureka.cz *.heureka.sk *.heureka.group im9.cz *.glami.cz *.googleadservices.com https://*.clarity.ms bat.bing.com bat.bing.net *.favionline.com *.bing.com cdn.targito.com https://i.cdn.rvndev.com https://i.rvndn.com *.srovname.cz ;style-src  'self' 'unsafe-inline' fonts.googleapis.com *.seznam.cz *.google.com *.gstatic.com *.googletagmanager.com *.fg.cz *.3dliving.cz *.signal-nabytek.cz *.sg-nabytek.cz *.signal-nabytok.sk *.sg-nabytok.sk *.sg-butor.hu *.zbozi.cz *.exchangeratesapi.io *.foxentry.cz cdn.targito.com https://saas.bianoapi.com cdn.luigisbox.com https://sdk.cdn.rvndev.com https://sdk.rvndn.com ;object-src  'self' ; report-uri /frontendreport/report/ 2
default-src 'self'; connect-src 'self' *.kerebro.com *.google-analytics.com *.google.com *.facebook.com *.livechatinc.com store.gsscloud.com opencompany.azurewebsites.net in.hotjar.com kerebro.com stats.g.doubleclick.net vc.hotjar.io www.gsscloud.com ka-p.fontawesome.com b.clarity.ms https://r.adgeek.net; font-src 'self' data: fonts.gstatic.com www.gsscloud.com uwillx.com cdn.livechatinc.com; frame-src 'self' *.doubleclick.net secure.livechatinc.com www.facebook.com vars.hotjar.com www.youtube.com tpc.googlesyndication.com www.googletagmanager.com cdn.videgree.com bizform.vitalyun.com; img-src 'self' data:  *.gsscloud.com *.google-analytics.com *.n0.cdn.getcloudapp.com *.g.doubleclick.net *.gstatic.com cdn.files-text.com www.facebook.com i.ytimg.com www.google.com www.google.com.tw gssweb.gss.com.tw www.gss.com.tw cl.ly connect.facebook.net uwillx.com www.googletagmanager.com widgets.magentocommerce.com s3.amazonaws.com lh3.googleusercontent.com lh4.ggpht.com member.kerebro.com www.googleadservices.com jolly-beach-08300eb00.6.azurestaticapps.net r.adgeek.net; media-src cdn.livechatinc.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.livechatinc.com *.hotjar.com *.google-analytics.com *.google.com connect.facebook.net googleads.g.doubleclick.net kerebro.com store.gsscloud.com www.googleadservices.com www.googletagmanager.com www.youtube.com www.linkedin.com  uwillx.com tpc.googlesyndication.com unpkg.com kit.fontawesome.com cdnjs.cloudflare.com www.clarity.ms; script-src-elem 'self' 'unsafe-inline' data: store.gsscloud.com cdnjs.cloudflare.com cdn.jsdelivr.net cdn.livechatinc.com api.livechatinc.com unpkg.com www.clarity.ms kit.fontawesome.com www.googletagmanager.com kerebro.com www.youtube.com www.google-analytics.com ssl.google-analytics.com connect.facebook.net googleads.g.doubleclick.net https://r.adgeek.net; style-src 'self' 'unsafe-eval' 'unsafe-inline' fonts.googleapis.com store.gsscloud.com uwillx.com kerebro.com kerebro.com unpkg.com cdnjs.cloudflare.com; style-src-elem 'self' 'unsafe-inline' cdn.jsdelivr.net cdnjs.cloudflare.com unpkg.com; report-uri https://gsscloud.report-uri.com/r/d/csp/wizard 2
font-src *.stripe.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.fontawesome.com *.gstatic.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.stripe.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.arcot.com *.rsa3dsauth.co.uk *.rsa3dsauth.com *.boc.cn *.afs.com.bh *.enfuce.com *.cardcenter.ch *.nexigroup.com *.pluscard.de *.qiib.com.qa *.paylife.at *.redsys.es *.3dsecure.no *.modirum.com *.edb.com *.viseca.ch *.apata.io *.capitalone.com *.dnp-cdms.jp *.revolut.com *.bankserv.co.za *.swisscard.ch *.six-group.com *.marqeta.com *.cardinalcommerce.com *.wlp-acs.com *.imbank.com *.tsys.co.uk *.sia.eu *.garanti.com.tr *.commerzbank.de *.cmbchina.com *.alahli.com *.mycardsecure.com *.gps.com.bh *.citibank.com *.wibmo.com *.dkb.de *.monzo.com *.alinma.com *.nccc.com.tw *.starlingbank.com *.danskebank.com *.pekao24.pl *.lloydsbank.co.uk/ *.lloydsbank.com/ *.lloydsbankinggroup.com/ *.channel-cards-auth-api.lloydsbankinggroup.com/ *.sparebank1.no *.rabobank.nl *.s-id-check-sparkassen.de *.sparkassen-kreditkarten.de *.mbank.pl *.secure2gw.ro *.btrl.ro *.cafis-paynet.jp *.borica.bg *.fibank.bg *.cic.fr *.zaba.hr *.citibank.co.in *.centrum24.pl *.bankmillennium.pl *.icps.mu *.egolomt.mn *.lcl.fr *.ctbcbank.com *.qiwi.com *.postfinance.ch *.citadele.lv *.kib.com.kw *.cathaybk.com.tw *.pkobp.pl *.acdcproc.com *.abanca.com *.n26.com *.klikbca.com *.psa.at *.sumup.com *.eglobal.com.mx *.pl.ing.com *.qnb.com *.rpc-raiffeisen.com *.sebkort.com *.ocbc.com *.tapngo.com.hk *.stcpay.com.sa *.creditmutuel.fr *.luottokunta.fi *.swedbank.se *.unibank.am *.estcard.ee *.hyundaicard.com *.privatbank.ua *.fssnet.co.in *.kbcard.com *.luminorgroup.com *.mashreq.com *.mercurypaymentservices.it *.moneta.cz *.sensebank.com.ua *.sibs.pt *.stripeauthentications.com *.dskbank.bg *.otpbank.hu *.techcombank.com.vn *.touch.tech *.asseco-see.hr *.3dsecure-csas.cz *.cyris.com *.secureacs.com *.acb.com.vn *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.stripe.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.arcot.com *.rsa3dsauth.co.uk *.rsa3dsauth.com *.boc.cn *.afs.com.bh *.enfuce.com *.cardcenter.ch *.pluscard.de *.qiib.com.qa *.nexigroup.com *.paylife.at *.redsys.es *.3dsecure.no *.modirum.com *.edb.com *.viseca.ch *.apata.io *.capitalone.com *.dnp-cdms.jp *.revolut.com *.bankserv.co.za *.swisscard.ch *.six-group.com *.marqeta.com *.cardinalcommerce.com *.wlp-acs.com *.imbank.com *.tsys.co.uk *.sia.eu *.garanti.com.tr *.commerzbank.de *.cmbchina.com *.alahli.com *.mycardsecure.com *.gps.com.bh *.citibank.com *.wibmo.com *.dkb.de *.monzo.com *.alinma.com *.nccc.com.tw *.starlingbank.com *.danskebank.com *.pekao24.pl *.lloydsbank.co.uk/ *.lloydsbank.com/ *.lloydsbankinggroup.com/ *.channel-cards-auth-api.lloydsbankinggroup.com/ *.sparebank1.no *.rabobank.nl *.s-id-check-sparkassen.de *.sparkassen-kreditkarten.de *.mbank.pl *.secure2gw.ro *.btrl.ro *.cafis-paynet.jp *.borica.bg *.fibank.bg *.cic.fr *.zaba.hr *.citibank.co.in *.centrum24.pl *.bankmillennium.pl *.icps.mu *.egolomt.mn *.lcl.fr *.ctbcbank.com *.qiwi.com *.postfinance.ch *.citadele.lv *.kib.com.kw *.cathaybk.com.tw *.pkobp.pl *.acdcproc.com *.abanca.com *.n26.com *.klikbca.com *.psa.at *.sumup.com *.eglobal.com.mx *.pl.ing.com *.qnb.com *.rpc-raiffeisen.com *.sebkort.com *.ocbc.com *.tapngo.com.hk *.stcpay.com.sa *.creditmutuel.fr *.luottokunta.fi *.swedbank.se *.unibank.am *.estcard.ee *.hyundaicard.com *.privatbank.ua *.fssnet.co.in *.kbcard.com *.luminorgroup.com *.mashreq.com *.mercurypaymentservices.it *.moneta.cz *.sensebank.com.ua *.sibs.pt *.stripeauthentications.com *.dskbank.bg *.otpbank.hu *.techcombank.com.vn *.touch.tech *.asseco-see.hr *.3dsecure-csas.cz *.cyris.com *.secureacs.com *.acb.com.vn c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.paypal.com * www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.stripe.com *.google.com ebizmarts-website.s3.amazonaws.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.xtento.com cdn.xtento.com *.gstatic.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.stripe.com *.google.com *.sagepay.com *.opayo.eu.elavon.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.xtento.com cdn.xtento.com *.visionary-company-ingenuity.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com *.stripe.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.fontawesome.com unsafe-inline assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.stripe.com *.google.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com google.com *.google-analytics.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://1e314ef4-b8aa-4c65-b07f-f4e72d703314.sansec.watch/; report-to report-endpoint; 2
report-uri /algemeen/report_CSP_error.php; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; 2
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com www.fontawesome.com www.googleapis.com www.gstatic.com *.zdassets.com https://static.micuentaweb.pe/static/ *.fontawesome.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://secure.micuentaweb.pe/vads-payment/ https://api.micuentaweb.pe/api-payment/ https://static.micuentaweb.pe/static/ https://seo.mageplaza.com *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com www.addthis.com www.doubleclick.com www.doubleclick.net www.google.com *.weltpixel.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe https://secure.micuentaweb.pe/vads-payment/ https://static.micuentaweb.pe/static/ *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net *.trackedlink.net *.uber.com *.ubereats.com www.facebook.com www.facebook.net *.metricool.com www.google.com.ar *.zdassets.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe https://secure.micuentaweb.pe/static/latest/images/type-carte/ https://static.micuentaweb.pe/static/ https://secure.micuentaweb.pe/vads-payment/ *.gstatic.com *.facebook.com *.reddit.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com www.aptrinsic.com *.metricool.com *.clarity.ms www.facebook.com api.yotpo.com www.facebook.net js-agent.newrelic.com recostream.com *.zdassets.com www.varsovienne.cl unpkg.com *.zendesk.com www.google.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe https://api.micuentaweb.pe/api-payment/ https://static.micuentaweb.pe/static/ https://www.googletagmanager.com tagmanager.google.com *.facebook.net *.redditstatic.com *.reddit.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.magento-datasolutions.com *.magento-ds.com webchat.dotdigital.com webchat.staging.dotdigital.com www.googleapis.com www.mailchimp.com *.zdassets.com https://static.micuentaweb.pe/static/ *.fontawesome.com tagmanager.google.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net www.zdassets.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.zendesk.com *.zdassets.com www.clarity.ms k.clarity.ms api.yotpo.com analytics.google.com www.google-analytics.com www.google.com www.facebook.com www.facebook.net connect.facebook.net www.googleapis.com unpkg.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe https://secure.micuentaweb.pe/vads-payment/ https://api.micuentaweb.pe/api-payment/ *.facebook.net *.redditstatic.com *.reddit.com *.doubleclick.net *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net www.aptrinsic.com www.newrelic.com www.demdex.net commerce.adobedc.net www.varsovienne.cl bam.nr-data.net www.google.com https://secure.micuentaweb.pe/vads-payment/ https://api.micuentaweb.pe/api-payment/ https://static.micuentaweb.pe/static/ 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://snap.licdn.com https://connect.facebook.net https://cmp.osano.com https://challenges.cloudflare.com https://play.vidyard.com https://public.flourish.studio https://js.qualified.com https://vercel.live; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; media-src 'self' blob: https://*.public.blob.vercel-storage.com; connect-src 'self' https://cmp.osano.com https://*.api.osano.com https://challenges.cloudflare.com https://*.challenges.cloudflare.com https://*.public.blob.vercel-storage.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://px.ads.linkedin.com https://*.qualified.com wss://*.qualified.com https://vercel.live; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://play.vidyard.com https://flo.uri.sh https://challenges.cloudflare.com https://open.spotify.com https://podcasts.apple.com https://*.qualified.com https://vercel.live; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; worker-src 'self' blob:; report-uri /api/csp-report; report-to csp-endpoint 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com 'self' data: maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.authorize.net *.twitter.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com connect.facebook.net *.facebook.com *.disqus.com disqus.com *.addthis.com *.twitter.com *.authorize.net www.youtube.com accounts.google.com *.iubenda.com cdn-quick-ar.threedy.ai quick-ar.threedy.ai td.doubleclick.net www.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io connect.facebook.net *.facebook.com *.fbcdn.net *.disqus.com *.disquscdn.com *.addthisedge.com *.twitter.com *.hsforms.net *.hsforms.com 'self' data: cdn.ywxi.net seal.networksolutions.com ssl.gstatic.com syndication.twitter.com *.stats.paypal.com *.cloudmaestro.com *.twimg.com maps.gstatic.com maps.googleapis.com seal-santabarbara.bbb.org *.google.com csi.gstatic.com fonts.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ connect.facebook.net *.disqus.com *.disquscdn.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.net *.twitter.com *.authorize.net *.hsforms.net *.hsforms.com *.gstatic.com diffuser-cdn.app-us1.com/ prism.app-us1.com trackcmp.net seal-santabarbara.bbb.org platform.twitter.com apis.google.com seal.networksolutions.com www.google.com www.gstatic.com *.iubenda.com *.paypal.com *.twimg.com maps.googleapis.com https://js-agent.newrelic.com https://bam.nr-data.net https://bam-cell.nr-data.net cdn-quick-ar.threedy.ai acsbapp.com cdn.iubenda.com *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.disquscdn.com *.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com *.twitter.com *.twimg.com www.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.googleadservices.com www.google-analytics.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com connect.facebook.net *.facebook.com *.disqus.com disqus.com *.disquscdn.com *.authorize.net t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.iubenda.com maps.googleapis.com https://js-agent.newrelic.com https://bam.nr-data.net https://bam-cell.nr-data.net quick-ar.threedy.ai *.acsbapp.com *.doubleclick.net stats.g.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://ab6dd833-5ccc-470b-a6cb-3bca3080bb2f.sansec.watch/; report-to report-endpoint; 2
object-src 'none'; script-src 'self' 'unsafe-eval' fonts.googleapis translate.google.com translate.googleapis.com translate-pa.googleapis.com *.gstatic.com siteimproveanalytics.com *.siteimprove.com svc.webspellchecker.net js-agent.newrelic.com bam.nr-data.net assets.pinterest.com cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://rebilly.github.io https://unpkg.com https://www.google.com maps.googleapis.com platform.instagram.com platform.twitter.com; script-src-attr 'self'; script-src-elem 'self' fonts.googleapis translate.google.com translate.googleapis.com translate-pa.googleapis.com *.gstatic.com siteimproveanalytics.com *.siteimprove.com svc.webspellchecker.net js-agent.newrelic.com bam.nr-data.net assets.pinterest.com cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://rebilly.github.io https://unpkg.com https://www.google.com maps.googleapis.com platform.instagram.com platform.twitter.com; style-src 'self' fonts.googleapis translate.google.com translate.googleapis.com translate-pa.googleapis.com *.gstatic.com siteimproveanalytics.com *.siteimprove.com svc.webspellchecker.net js-agent.newrelic.com bam.nr-data.net cdn.jsdelivr.net fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src-attr 'self'; frame-ancestors 'self' 2
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.msecnd.net connect.facebook.net tags.tiqcdn.com cdn.cookielaw.org eploytealium.com munchkin.marketo.net cdn.livechatinc.com api.livechatinc.com cdn.optimizely.com googletagmanager.com *.arrivia-cdn.com googleads.g.doubleclick.net deploytealium.com maps.googleapis.com *.clarity.ms scripts.clarity.ms *.personyze.com counter.personyze.com counter2.personyze.com count.personyze.com *.tealiumiq.com *.blob.core.windows.net cdn.quantummetric.com www.googletagmanager.com www.googletagmanager.com:443 cdn.jsdelivr.net cdn.jsdelivr.net:443 ajax.googleapis.com cdnjs.cloudflare.com unpkg.com kit.fontawesome.com pagead2.googlesyndication.com static.elfsight.com static.elfsight.com:443 universe-static.elfsightcdn.com universe-static.elfsightcdn.com:443 snippet.maze.co lpcdn.lpsnmedia.net apis.google.com cdn.segment.com bat.bing.com bat.bing.com:443 https://d2361c0djb4k63.cloudfront.net; frame-src 'self' https: blob: *.clarity.ms *.personyze.com *.tealiumiq.com *.blob.core.windows.net pagead2.googlesyndication.com static.elfsight.com static.elfsight.com:443 universe-static.elfsightcdn.com universe-static.elfsightcdn.com:443; connect-src 'self' 'unsafe-inline' 'unsafe-eval' wss: https: data: blob: *.clarity.ms *.personyze.com counter.personyze.com counter2.personyze.com count.personyze.com *.tealiumiq.com *.blob.core.windows.net https://visitor-service-us-east-1.tealiumiq.com visitor-service.tealiumiq.com googleads.g.doubleclick.net www.clarity.ms bat.bing.com bat.bing.com:443 nebula-cdn.kampyle.com api.livechatinc.com connect.facebook.net ajax.googleapis.com cdnjs.cloudflare.com cdn.quantummetric.com www.googletagmanager.com www.googletagmanager.com:443 cdn.jsdelivr.net cdn.jsdelivr.net:443 static.elfsight.com static.elfsight.com:443 universe-static.elfsightcdn.com universe-static.elfsightcdn.com:443 lpcdn.lpsnmedia.net apis.google.com cdn.segment.com https://events.prod.steller.co; img-src 'self' https: data: blob: https://d14jf0tks233zb.cloudfront.net; media-src 'self' https: data: blob: https://d14jf0tks233zb.cloudfront.net; frame-ancestors 'self' *.7across.travel *.7acrosstravel *.accorplusdiscovery.com *.addthis.com *.airportparking.net.au *.avctravel.com.au *.azurewebsites.net *.bzzworld.com *.bzzworldtravel.com *.clubmedaustralia.com.au *.crownclubmarketplace.com *.cruise.ovscruise.com *.cruise.wotif.com *.cruisemegastore.com.au *.cruisepilot.com.au *.dae-travel.com *.discover365.co.nz *.discover365.co.uk *.discover365.com.au *.doubleclick.net *.driveaway.com.au *.facebook.com *.favc.com *.hightide.com.au *.IAMLVC.com *.ice-cdn.com *.icecruises.com.au *.iceenterprise.com *.icevacations.com.au *.kampyle.com *.kivac.com.mx *.latitude21resorts.com *.latitudeguestservices.com *.latitudevacationclub.com *.lifestylebywyndhamlite.com *.liveaquaresidenceclub.com *.livechatinc.com *.looking4.com *.mustdotravels.com *.my241cruise.com.au *.my241rewards.com.au *.myfuturecruisecredit.com *.optimizely.com *.ourvacationcentre.com *.ourvacationcentre.com.au *.ourvacationcentre.net *.ovctour.com *.ovscruise.com *.ovsresort.com *.qvitravelsavings.com *.rci.my241cruise.com.au *.rci.travel *.re-set.mx *.re-set.travel *.saveonresorts.com *.tawk.to *.theclub365.com.au *.tourmegastore.com.au *.travelii.mx *.travelmegastore.com.au *.travelperksplus.com *.travelsavingspassport.com *.tripauthority.com *.tripsavr.com *.tripsavr2.com *.ultiqa.com.au *.ultiqaexplore.com.au *.ultiquaexplore.com.au *.windows.net *.world2go.mx *.wotif.com *.synchronycredit.com *.synchrony.com *.youtube.com 7across.travel accorplusdiscovery.com agentportalui-wa-dev-usw.azurewebsites.net agentportalui-wa-qa-usw.azurewebsites.net assets.cruisemail.com.au avctravel.com.au bid.g.doubleclick.net cruise.flybuystravel.com.au cruise.ovscruise.com cruise.wotif.com cruisemegastore.com.au cruisepilot.com.au dae-travel.com discover365.co.nz discover365.co.uk discover365.com.au elcidsales.latitudeguestservices.com hightide.com.au icecruises.com.au iceenterprise.com icevacations.com.au latitudevacationclub.com lifestylebywyndhamlite.com mustdotravels.com my241cruise.com.au my241rewards.com.au myfuturecruisecredit.com ourvacationcentre.com ourvacationcentre.com.au ourvacationcentre.net ovctour.com ovscruise.com rci.my241cruise.com.au rci.travel tawk.to theclub365.com.au tour.icruiserewards.com tour.thevidalifestyle.com tourmegastore.com.au tours.icruise.com tours.tourmegastore.com.au travelmegastore.com.au travelperksplus.com ukproducthub.azureedge.net ukproducthub.blob.core.windows.net ultiqa.com.au ultiqaexplore.com.au ultiquaexplore.com.au windows.net wotif.com localhost:8080 qa-id.synchronycredit.com uat-id.synchronycredit.com id.synchrony.com *.clarity.ms *.personyze.com pagead2.googlesyndication.com; block-all-mixed-content; report-uri https://temporarycsp.azurewebsites.net/api/CreateReport; report-to csp-endpoint; 2
font-src cdn.jsdelivr.net fonts.gstatic.com cdn.almapay.com *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.googleapis.com *.fontawesome.com *.bootstrapcdn.com *.webwinkelkeur.nl *.jsdelivr.net maxcdn.bootstrapcdn.com *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.twitter.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.tawk.to *.vivapayments.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.getalma.eu *.almapay.com/ *.stripe.com/ *.checkout.com/ *.adyen.com/ *.twitter.com *.google.com *.addthis.com *.kiyoh.com *.webwinkelkeur.nl *.360virtueelrondkijken.nl *.google.com/ www.facebook.com platform.twitter.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.tawk.to 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://www.magezon.com *.cloudflare.com *.cdninstagram.com *.google.com *.google.nl *.gstatic.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.paypal.com *.twitter.com www.facebook.com https://via.placeholder.com *.linkedin.com *.openstreetmap.fr *.designer-images.net *.imgix.net magefan.com cm.magefan.com *.disqus.com pinterest.com assets.pinterest.com syndication.twitter.com https://www.mollie.com maps.gstatic.com maps.google.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com blob: *.tawk.to tawk.link cdn.jsdelivr.net s3.amazonaws.com/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.jsdelivr.net *.cloudflare.com *.twitter.com *.google-analytics.com *.googletagmanager.com *.google.com/ https://googLeads.g.doubleclick.net *.gstatic.com *.trustedshops.com *.fontawesome.com *.addthis.com s7.addthis.com m.addthis.com z.moatads.com *.addthisedge.com apis.google.com *.googleapis.com graph.facebook.com widgets.pinterest.com connect.facebook.net *.zopim.com *.zdassets.com *.Licdn.com *.hotjar.com *.webwinkelkeur.nl cdn.stat-track.com *.stat-track.com *.disqus.com twitter.com platform.twitter.com static.addtoany.com js.mollie.com maps.google.com polyfill.io *.moosend.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com www.gstatic.com *.tawk.to *.vivapayments.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.jsdelivr.net fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.gstatic.com *.typekit.net *.fontawesome.com *.bootstrapcdn.com unpkg.com *.moosend.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com www.gstatic.com *.tawk.to 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com *.tawk.to tawk.link 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.getalma.eu *.almapay.com *.cloudflare.com *.twitter.com *.paypal.com *.pay.nl *.kiyoh.com https://www.facebook.com/tr/ *.google.com *.googletagmanager.com *.googleapis.com *.google-analytics.com https://stats.g.doubleclick.net *.zendesk.com https://zendesk-eu.my.sentry.io *.zdassets.com wss://widget-mediator.zopim.com *.linkedin.com https://t.stat-track.com https://forms.m-pages.com *.hotjar.com wss://ws.hotjar.com *.hotjar.io stats.addtoany.com maps.googleapis.com *.stat-track.com *.m-pages.com *.m-operations.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com google.com places.googleapis.com www.googleapis.com *.tawk.to wss://*.tawk.to 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googletagmanager.com *.google.com *.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://cdn.cookie-script.com https://www.eek.ee https://vjs.zencdn.net https://cdnjs.cloudflare.com https://www.googletagmanager.com https://cdn.datatables.net https://t.contentsquare.net https://connect.facebook.net https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' https://www.eek.ee https://vjs.zencdn.net https://cdn.datatables.net; img-src 'self' data: https://www.google-analytics.com https://www.facebook.com https://google.com https://www.google.ee; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://www.facebook.com https://t.contentsquare.net; frame-src 'self' https://www.googletagmanager.com https://td.doubleclick.net; 2
default-src 'self'; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' https://bat.bing.com https://cdn.cookielaw.org https://collector-45478.tvsquared.com https://js.zuora.com https://www.googletagmanager.com https://www.datadoghq-browser-agent.com https://js.stripe.com https://www.google.com https://www.gstatic.com https://cdn.eu.heap-api.com https://*.heapanalytics.com https://t.contentsquare.net https://app.contentsquare.net https://app.contentsquare.com https://analytics.tiktok.com https://*.tiktok.com https://connect.facebook.net https://www.googleadservices.com https://widget.trustpilot.com; style-src 'report-sample' 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://images.ctfassets.net https://bat.bing.net https://js.zuora.com https://collector-45478.tvsquared.com https://cdn.cookielaw.org https://www.googletagmanager.com https://c.eu.heap-api.com https://*.contentsquare.net https://www.facebook.com https://googleads.g.doubleclick.net https://*.trustpilot.com https://*.adnxs.com; font-src 'self' data: https://fonts.gstatic.com https://*.auryc.com; connect-src 'self' https://cloudflare-dns.com https://api.statsig.com https://statsig.com https://featuregates.org https://statsigapi.net https://statsigcdn.com https://featureassets.org https://assetsconfigcdn.org https://prodregistryv2.org https://beyondwickedmapping.org https://checkout.uat.pethealthclub.com https://checkout.pethealthclub.com https://cognito-identity.eu-west-1.amazonaws.com https://cognito-idp.eu-west-1.amazonaws.com https://o491651.ingest.us.sentry.io https://preview.contentful.com https://contentful.com https://cdn.contentful.com https://browser-intake-datadoghq.eu https://browser-intake-datadoghq.com https://browser-intake-ap1-datadoghq.com https://browser-intake-ap2-datadoghq.com https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://bat.bing.net https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal-de.onetrust.com https://*.zuora.com https://www.google.com https://www.gstatic.com https://recaptcha.google.com https://analytics.tiktok.com https://www.facebook.com https://googleads.g.doubleclick.net https://td.doubleclick.net https://*.trustpilot.com https://*.adnxs.com https://c.eu.heap-api.com https://heapanalytics.com https://eu.heapanalytics.com https://*.auryc.com https://*.contentsquare.net; frame-src 'self' https://*.zuora.com https://js.stripe.com https://www.google.com https://recaptcha.google.com https://widget.trustpilot.com; object-src 'none'; base-uri 'self'; manifest-src 'self'; media-src 'self'; worker-src blob:; frame-ancestors 'none' 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://fonts.gstatic.com *.fontawesome.com data: https://widgets.trustedshops.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.google.com https://orbitvu.co https://www.youtube.com https://www.youtube-nocookie.com https://www.googletagmanager.com secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.sofort.com/de/su/320x120.png maps.gstatic.com https://gstatic.com *.ggpht *.googleapis.com https://www.google.com https://www.google.de https://www.sanivita.de https://sanivita.de http://russka.de https://black.bird.eu https://notification.amasty.com https://app.usercentrics.eu https://widgets.trustedshops.com https://www.googletagmanager.com https://ts-logo-hubspot.s3.eu-central-1.amazonaws.com/logo/TrustedShops.png https://legal-images.trustedshops.com/TrustedShops.png https://i.ytimg.com https://uct.service.usercentrics.eu https://pci.usd.de cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com https://widgets-qa.trustedshops.com *.etrusted.com magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://widget.usersnap.com https://cdn.usersnap.com https://resources.usersnap.com https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://stats.g.doubleclick.net https://app.usercentrics.eu https://privacy-proxy.usercentrics.eu secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com *.fontawesome.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.friendlycaptcha.com eu-api.friendlycaptcha.eu https://maps.googleapis.com https://www.google-analytics.com https://region1.google-analytics.com *.googlesyndication.com https://stats.g.doubleclick.net *.usercentrics.eu *.trustedshops.com *.etrusted.com https://widget.usersnap.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com https://integrations.etrusted.site api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
object-src 'none'; script-src 'self' http://hello.myfonts.net/ https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://polyfill-fastly.io https://unpkg.com https://www.google.com maps.google.com https://o4509677997326336.ingest.us.sentry.io/api/embed/error-page/; script-src-attr 'self'; script-src-elem 'self' https://themes.googleusercontent.com/ https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://polyfill-fastly.io https://unpkg.com https://www.google.com maps.google.com https://o4509677997326336.ingest.us.sentry.io/api/embed/error-page/; style-src 'self' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com 'unsafe-inline'; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' http://hello.myfonts.net/ http://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com 'unsafe-inline'; frame-ancestors 'self' 2
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://connect.facebook.net https://maps.googleapis.com https://www.portmone.com.ua https://nethunt.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://strapi.miit.ua https://maps.googleapis.com https://maps.gstatic.com https://www.google-analytics.com https://www.googletagmanager.com https://www.facebook.com; font-src 'self' data: https://fonts.gstatic.com; media-src 'self' data: blob: https://strapi.miit.ua; connect-src 'self' https://strapi.miit.ua https://www.google-analytics.com https://region1.google-analytics.com https://maps.googleapis.com https://www.googletagmanager.com https://connect.facebook.net https://nethunt.com https://cloudflareinsights.com; frame-src 'self' https://www.portmone.com.ua https://docs.google.com https://drive.google.com https://www.google.com https://nethunt.com https://td.doubleclick.net https://www.googletagmanager.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://www.portmone.com.ua; report-uri /api/csp-report 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com test.saferpay.com www.saferpay.com saferpay.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com test.saferpay.com www.saferpay.com saferpay.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net test.saferpay.com www.saferpay.com saferpay.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com *.cdninstagram.com *.fbcdn.net maps.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page test.saferpay.com www.saferpay.com saferpay.com ajax.googleapis.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com *.instagram.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com test.saferpay.com www.saferpay.com saferpay.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com *.instagram.com *.googleusercontent.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src https: data: wss: 'unsafe-inline' 'unsafe-eval'; form-action https:; report-uri https://ggj3qf05xeualpl0weo7xdrg.httpschecker.net/report 2
default-src * blob: data: 'unsafe-inline' 'unsafe-eval'; script-src * blob: data: 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; img-src * data: blob:; media-src * data: blob:; font-src * data: blob:; connect-src *; frame-src *; object-src * 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://firebasestorage.googleapis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com https://accounts.google.com/ *.googletagmanager.com *.google-analytics.com https://www.google.com/ https://www.google.com.br/ https://www.mercadopago.com.br/ *.clarity.ms https://analytics.google.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.youtube.com/ https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ ecommerce.live.gobots.com.br qa-plugin-stg.gobots.com.br qa.gobots.com.br https://analytics.tiktok.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com https://www.youtube.com/iframe_api https://accounts.google.com/ https://www.google.com/ https://www.google.com.br/ https://www.mercadopago.com.br/ https://mcprod.bfcasa.com.br/ https://*.newrelic.com/ https://stape.bfcasa.com.br/ *.clarity.ms *.google-analytics.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com assets.braintreegateway.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com qa.gobots.com.br https://viacep.com.br https://www.viacep.com.br https://analytics.tiktok.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://get.geojs.io *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://stape.bfcasa.com.br/ *.clarity.ms https://bam.nr-data.net *.googletagmanager.com *.google-analytics.com https://analytics.google.com *.analytics.google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:; connect-src 'self' wss: https:; style-src 'self' 'unsafe-inline' data: https:; frame-src 'self' https://batmaid.prismic.io https://*.trustpilot.com https://vars.hotjar.com https://*.google.com https://www.facebook.com https://*.doubleclick.net https://tpc.googlesyndication.com https://www.youtube.com https://pay.datatrans.com https://3dsec.cardcenter.ch https://acs1.viseca.ch https://acs.touch.tech https://www.instagram.com https://www.googletagmanager.com https://consentcdn.cookiebot.com data:; frame-ancestors 'self'; form-action 'self' https://pay.datatrans.com https://www.facebook.com; object-src 'none'; upgrade-insecure-requests; report-uri /en/api/v1/csp-violation-report 2
font-src www.paypalobjects.com *.fontawesome.com *.gstatic.com widget.trustpilot.com t4.my-probance.one *.aplazame.com *.zendesk.com *.adobedtm.com *.adobe.com *.authorize.net *.braintreegateway.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cetelem.es *.livechatinc.com gum.criteo.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com player.vimeo.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com https://www.google.com/recaptcha/ *.avis-verifies.com/ widget.trustpilot.com t4.my-probance.one *.aplazame.com *.zendesk.com *.adobedtm.com *.adobe.com *.authorize.net *.braintreegateway.com *.googletagmanager.com *.google.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.livechatinc.com gum.criteo.com *.weltpixel.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.vimeocdn.com i.ytimg.com *.youtube.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com validator.swagger.io *.cetelem.es cdn.doofinder.com *.google.com *.youtube.com/ widget.trustpilot.com t4.my-probance.one *.aplazame.com *.zendesk.com *.adobedtm.com *.adobe.com *.authorize.net *.braintreegateway.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.livechatinc.com gum.criteo.com imgsct.cookiebot.com *.gstatic.com *.facebook.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com/ www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.cetelem.es cdn.doofinder.com *.googletagmanager.com *.cdn.cookielaw.org/ widget.trustpilot.com t4.my-probance.one *.aplazame.com *.zendesk.com *.adobedtm.com *.adobe.com *.authorize.net *.braintreegateway.com apis.google.com *.google.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.livechatinc.com gum.criteo.com *.tradedoubler.com consent.cookiebot.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ https://www.googletagmanager.com tagmanager.google.com analytics.google.com *.facebook.net unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.cetelem.es *.doofinder.com *.fontawesome.com *.googleapis.com widget.trustpilot.com t4.my-probance.one *.aplazame.com *.zendesk.com *.adobedtm.com *.adobe.com *.authorize.net *.braintreegateway.com *.livechatinc.com gum.criteo.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.cetelem.es *.doofinder.com wss://*.doofinder.com *.googletagmanager.com *.cdn.cookielaw.org/ *.youtube.com/ widget.trustpilot.com t4.my-probance.one *.aplazame.com *.zendesk.com *.adobedtm.com *.adobe.com *.authorize.net *.braintreegateway.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.livechatinc.com gum.criteo.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ *.google-analytics.com analytics.google.com *.facebook.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com https://secure.plexo.com.uy/ https://napz.com.uy/ https://www.leblanc.com.uy/ https://leblanc.com.uy/ https://www.elemporiodelhogar.com.uy/ https://elemporiodelhogar.com.uy/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net * *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.gstatic.com https://maps.googleapis.com https://lh3.googleusercontent.com https://*.gstatic.com https://googleads.g.doubleclick.net data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page * *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com https://www.gstatic.com openfpcdn.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.fontawesome.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com ipinfo.io api.ipify.org api.bigdatacloud.net trackings.nemu.com.br ad.doubleclick.net openfpcdn.ioopenfpcdn.io *.nemu.com.br 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https://www.googletagmanager.com https://*.clarity.ms https://clarity.ms https://c.clarity.ms https://*.bing.com https://bing.com https://widget.trustpilot.com https://script.crazyegg.com https://code.jquery.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://ws.walmeric.com https://t.womtp.com https://www.iberiacards.com https://www.iberia.com https://*.doubleclick.net https://*.google.com https://*.google.es https://*.analytics.google.com https://*.google-analytics.com https://www.google-analytics.com https://ssl.google-analytics.com https://*.amazon-adsystem.com https://ara.paa-reporting-advertising.amazon https://*.ads.linkedin.com https://px.ads.linkedin.com https://*.licdn.com https://pagead2.googlesyndication.com https://analytics.tiktok.com https://*.adform.net https://*.bidswitch.net https://*.casalemedia.com https://*.pro-market.net https://*.adsrvr.org https://*.openx.net https://*.eyeota.net https://*.acuityplatform.com https://tag.oniad.com https://*.cootlogix.com https://*.constellation-technology.com https://*.tapad.com https://*.tiktokw.us; frame-src 'self' https://widget.trustpilot.com https://www.iberiacards.com https://consentcdn.cookiebot.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self' 2
default-src 'self' https: d2g3ke5a7j3wqi.cloudfront.net; font-src 'self' https: data:; img-src 'self' https: data: d2g3ke5a7j3wqi.cloudfront.net; object-src 'none'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' d2g3ke5a7j3wqi.cloudfront.net; style-src 'self' https: 'unsafe-inline' d2g3ke5a7j3wqi.cloudfront.net; frame-src 'self' https: http: data:; connect-src 'self' https: wss: www.lottopanalo.com; report-uri /csp_reports 2
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com data: *.fontawesome.com *.gstatic.com 'self' data: surveys-static.survicate.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ cdn.dnky.co amc.demdex.net www.google.com www.facebook.com youtube.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io maps.gstatic.com maps.googleapis.com accounts.google.com www.facebook.com 'self' data: www.google.com.co js.intercomcdn.com intercomassets.com *.googletagmanager.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com https://rum.hlx.page cdn.dnky.co r1-t.trackedlink.net www.gstatic.com js-agent.newrelic.com bam.nr-data.net maps.googleapis.com connect.facebook.net player.vimeo.com https://www.google.com *.gstatic.com https://maps.googleapis.com *.snrbox.com static.hotjar.com *.clarity.ms surveys-static.survicate.com script.hotjar.com widget.intercom.io js.intercomcdn.com api-iam.intercom.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com cdn.dnky.co *.fontawesome.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.cookielaw.org *.snrcdn.net https://surveys-static.survicate.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.magento-datasolutions.com *.magento-ds.com maps.googleapis.com api.comapi.com bam.nr-data.net *.synerise.com *.cookielaw.org *.snrbox.com t.clarity.ms stats.g.doubleclick.net api-iam.intercom.io wss://nexus-websocket-a.intercom.io wss://ws.hotjar.com https://content.hotjar.io *.googletagmanager.com *.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; script-src 'self' 2
worker-src https://cdn.connectif.cloud; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://cdn.cs.1worldsync.com https://script.hotjar.com https://fonts.cdnfonts.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com www.xtento.com *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * td.doubleclick.net www.google.com https://www.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com www.xtento.com cdn.xtento.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com mcstaging.digitalixcomercio.com mcprod.digitalixcomercio.com rt.flix360.com media.flixcar.com www.google.com.co https://mcprod.digitalixcomercio.com https://cdn.cs.1worldsync.com https://photos-us.bazaarvoice.com https://www.facebook.com https://px.ads.linkedin.com https://www.linkedin.com/px/ https://ad.doubleclick.net https://px4.ads.linkedin.com https://bat.bing.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com www.xtento.com cdn.xtento.com https://cdn.connectif.cloud js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com unpkg.com *.cardinalcommerce.com www.google.com www.gstatic.com cdn.cs.1worldsync.com media.flixfacts.com ws.cs.1worldsync.com media.flixcar.com static.queue-it.net assets.queue-it.net static.hotjar.com script.hotjar.com static.zdassets.com js-agent.newrelic.com https://static.zdassets.com https://static.hotjar.com https://static.queue-it.net https://prod.flixgvid.flix360.io  https://connect.facebook.net https://snap.licdn.com https://analytics.tiktok.com https://pixels.lemonpi.io https://pagead2.googlesyndication.com https://stapecdn.com https://ix.aqmaster.com https://scripts.clarity.ms/0.8.59/clarity.js https://scripts.clarity.ms/0.8.60-beta/clarity.js https://rum.hlx.page/.rum/@adobe/helix-rum-js@%5E2/dist/rum-standalone.js https://www.googletagmanager.com/gtm.js https://bat.bing.com/p/action/343245328.js https://bat.bing.com/p/action/343245325.js https://bat.bing.com/p/action/343245326.js https://bat.bing.com/p/action/343245327.js https://bat.bing.com https://static.tiktok.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com display.ugc.bazaarvoice.com assets.braintreegateway.com tagmanager.google.com https://cdn.cs.1worldsync.com https://fonts.cdnfonts.com/css/satoshi https://www.googletagmanager.com/debug/badge.css 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.zdassets.com https://cdn.cs.1worldsync.com https://mcprod.shop.epson.com.co/media 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.doubleclick.net media.flixcar.com ekr.zdassets.com *.zendesk.com bam.nr-data.net googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://ekr.zdassets.com wss://widget-mediator.zopim.com https://am1-api.connectif.cloud https://surveystats.hotjar.io https://content.hotjar.io wss://ws.hotjar.com https://vc.hotjar.io https://analytics.tiktok.com https://px.ads.linkedin.com https://www.facebook.com https://ix.aqmaster.com https://cdn.connectif.cloud https://f.clarity.ms/collect https://n.clarity.ms/collect https://bat.bing.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com https: blob: 'self' 'unsafe-inline'; default-src googleads.g.doubleclick.net stats.g.doubleclick.net commerce.adobedc.net widget-mediator.zopim.com https://pagead2.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
script-src 'self'; report-uri /csp-report-endpoint 2
font-src *.googleapis.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.webwinkelkeur.nl data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.cookiebot.com *.cookiebot.eu *.consentcdn.cookiebot.com *.consentcdn.cookiebot.eu *.google.nl *.webwinkelkeur.nl *.usercentrics.eu js.mollie.com *.multisafepay.com https://pay.google.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com https://images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.google.nl *.webwinkelkeur.nl *.usercentrics.eu img.sct.eu1.usercentrics.eu bat.bing.net bat.bing.com *.bidswitch.net *.adnxs.com *.smartadserver.com *.taboola.com *.omnitagjs.com *.casalemedia.com *.criteo.com *.demdex.net id5-sync.com *.360yield.com *.ivitrack.com *.media.net *.mediavine.com *.postrelease.com *.outbrain.com *.pubmatic.com *.rubiconproject.com *.sharethrough.com *.teads.tv *.tremorhub.com *.3lift.com *.yieldlab.net *.yieldmo.com *.emxdgt.com *.1rx.io sync.targeting.unrulymedia.com cdn.magmodules.eu https://www.mollie.com *.multisafepay.com *.amazonaws.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com https://maps.googleapis.com https://player.vimeo.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.dhlecommerce.nl *.cookiebot.eu *.cookiebot.com *.consentcdn.cookiebot.com *.consentcdn.cookiebot.eu *.google.nl *.webwinkelkeur.nl *.usercentrics.eu bat.bing.net bat.bing.com *.clarity.ms *.calendly.com *.beslist.nl *.pinimg.com *.criteo.com *.criteo.net *.cloudflareinsights.com *.pinterest.com js.mollie.com applepay.cdn-apple.com *.multisafepay.com https://pay.google.com *.sendcloud.sc 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com downloads.mailchimp.com widget.tagembed.com api.taggbox.com cdn.tagbox.com static.dhlecommerce.nl *.multisafepay.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com *.cookiebot.com *.cookiebot.eu *.consentcdn.cookiebot.com *.consentcdn.cookiebot.eu *.google.nl *.usercentrics.eu bat.bing.net bat.bing.com *.clarity.ms *.pinterest.com *.criteo.com *.beslist.nl widget.tagembed.com api.taggbox.com cdn.tagbox.com *.multisafepay.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
script-src-elem https://*.freeprivacypolicy.com https://*.youtube.com https://*.youtube-nocookie.com https://cdn.jsdelivr.net https://code.jquery.com; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com cash-f.squarecdn.com *.googleapis.com data: https://*.gstatic.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com *.twitter.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * www.google.com *.certcapture.com https://*.doubleclick.net https://*.google.com https://*.hotjar.com https://*.braintreegateway.com https://*.paypal.com https://*.trustpilot.com https://*.youtube.com https://*.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.twitter.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * *.googleapis.com *.certcapture.com https://*.doubleclick.net https://*.google.com https://*.google.co.uk *.cloudfront.net https://*.paypal.com https://i.ytimg.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.certcapture.com https://*.pcapredict.com/js/sensor.js https://www.googletagmanager.com https://www.google.com https://*.hotjar.com https://*.doubleclick.net https://secure.leadforensics.com https://*.googleapis.com player.vimeo.com https://*.cloudfront.net https://*.google-analytics.com https://*.paypal.com https://*.trustpilot.com https://*.youtube.com https://*.youtube-nocookie.com https://cdn.jsdelivr.net https://code.jquery.com https://cdn.c1.amplience.net https://*.freeprivacypolicy.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.certcapture.com https://*.googleapis.com *.typekit.net https://*.cloudfront.net assets.braintreegateway.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://*.cloudfront.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.googleapis.com *.certcapture.com https://*.hotjar.com https://*.adobedc.net https://*.nr-data.net https://*.freshdesk.com wss://*.hotjar.com https://*.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cloudflare.com *.twitter.com *.twimg.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 2
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://unpkg.com https://cdn.userway.org https://consent.cookiebot.com https://consentcdn.cookiebot.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://use.typekit.net https://p.typekit.net https://cdn.userway.org; img-src 'self' data: https://imgsct.cookiebot.com/ https://cdn.userway.org/; font-src 'self' data: https://use.typekit.net https://p.typekit.net; frame-src 'self' blob: https://www.youtube.com https://consentcdn.cookiebot.com https://cdn.userway.org; connect-src 'self' https://api.userway.org https://consentcdn.cookiebot.com; worker-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'; require-trusted-types-for 'script'; 2
font-src cash-f.squarecdn.com https://*.gstatic.com *.googleapis.com *.gstatic.com data: *.bootstrapcdn.com *.cloudflare.com *.klarnacdn.net *.trustedshops.com *.twimg.com *.twitter.com *.typekit.net 'self' *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.adyen.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com *.facebook.com *.twitter.com 'self' 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ * *.adyen.com www.google.com *.awin1.com *.zenaps.com *.fls.doubleclick.net *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com account.fetchify.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com *.facebook.com *.pinterest.com *.trustpilot.com *.twitter.com *.snapwidget.com 'self' www.googletagmanager.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src *.adobedtm.com *.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io * https://*.gstatic.com *.adyen.com *.gstatic.com *.googleapis.com *.awin1.com *.zenaps.com *.wepowerconnections.com maps.gstatic.com *.calcurates.com *.trackedlink.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.bing.com *.clarity.ms *.cloudflare.com craftyclicks.co.uk *.demdex.net *.facebook.com fetchify.com *.goldboutique.com *.google-analytics.com *.google.co.uk *.google.com *.googleadservices.com *.googletagmanager.com *.klarna.com *.lightemporium.com *.magentocommerce.com *.pinterest.com *.elfsightcdn.com *.qpj.de *.qpj.fr *.qpjewellers.com *.rubyandoscar.com *.scarletocean.com *.twimg.com *.twitter.com *.usercentrics.eu *.wisepops.com *.ytimg.com *.roeye.com *.roeyecdn.com *.bailandstone.com *.roxoa.com 'self' https://*.google-analytics.com https://*.googletagmanager.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeocdn.com www.vimeo.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.bing.com *.clickcease.com *.cloudflare.com cc-cdn.com *.facebook.net *.fontawesome.com *.getdrip.com *.google-analytics.com *.pcapredict.com *.pinimg.com *.pinterest.com *.plerdy.com *.taboola.com *.termly.io *.tiktok.com *.trustedshops.com *.trustpilot.com *.twimg.com *.twitter.com *.usercentrics.eu *.wisepops.net *.wisepops.com https://wisepops.net https://wisepops.com *.zdassets.com *.klarnaservices.com *.klarna.com *.clarity.ms https://snapwidget.com *.elfsight.com *.elfsightcdn.com *.roeyecdn.com *.qpjewellers.com/connector/ajax/emailcapture *.rubyandoscar.com/connector/ajax/emailcapture *.goldboutique.com/connector/ajax/emailcapture *.bailandstone.com/connector/ajax/emailcapture https://*.googletagmanager.com *.dotdigital.com 'self' *.googletagmanager.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cash.app https://fonts.googleapis.com/ fonts.googleapis.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com cc-cdn.com assets.braintreegateway.com *.bootstrapcdn.com *.cloudflare.com *.fontawesome.com *.googleapis.com *.gstatic.com *.klarnacdn.net *.trustedshops.com *.twimg.com *.twitter.com *.typekit.net *.usercentrics.eu  *.zdassets.com 'self' *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com * *.adyen.com *.googleapis.com *.wepowerconnections.com https://the.sciencebehindecommerce.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk *.slack.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.analytics.google.com *.bootstrapcdn.com *.bing.com *.clarity.ms *.cloudflare.com *.doubleclick.net *.facebook.com *.google-analytics.com https://google.com/pay *.googleadservices.com *.klarna.com *.klarnaservices.com *.klarnaevt.com *.paypalobjects.com *.pcapredict.com *.pinterest.com *.plerdy.com *.sandbox.paypal.com *.termly.io *.tiktok.com *.trustpilot.com https://invitejs.trustpilot.com *.twimg.com *.twitter.com *.vimeocdn.com *.wisepops.net *.wisepops.com https://wisepops.net https://wisepops.com  *.zdassets.com *.zendesk.com *.zopim.com wss://widget-mediator.zopim.com *.sentry.io *.elfsight.com 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com *.googletagmanager.com *.stripe.com klarna.com *.klarnacdn.net *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp.threatview.app/report; report-to report-endpoint; 2
font-src *.fontawesome.com *.gstatic.com 'self' data: fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ js.mollie.com *.sendcloud.sc *.jsdelivr.net *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io imgsct.cookiebot.com cdn.doofinder.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.mollie.com *.amazonaws.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ consent.cookiebot.com cdn.doofinder.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.mollie.com *.sendcloud.sc *.jsdelivr.net *.google.com *.gstatic.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.doofinder.com https://static.klaviyo.com *.fontawesome.com *.sendcloud.sc *.jsdelivr.net *.googleapis.com *.gstatic.com *.trustpilot.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.doofinder.com wss://*.doofinder.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com t.elasticsuite.io *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://b25b1a97-b6d7-4c87-8caa-dc0dffc12d8e.sansec.watch/; report-to report-endpoint; 2
font-src www.googletagmanager.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action www.googletagmanager.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.googletagmanager.com *.multisafepay.com https://pay.google.com 'self'; frame-src www.googletagmanager.com bid.g.doubleclick.net player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.sharethis.com *.google.com *.doubleclick.net *.facebook.com *.multisafepay.com https://pay.google.com *.apps.ladesk.com *.hubspot.com *.pinterest.com speelplezier.ladesk.com *.bing.net *.bing.com js.mollie.com 'self' 'unsafe-inline'; img-src www.googletagmanager.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com *.vimeocdn.com i.ytimg.com *.youtube.com *.sharethis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.multisafepay.com https://at19.net https://bdt9.net https://ds1.nl https://dt51.net https://dt61.net https://fr135.net https://glp8.net https://jdt8.net https://jf79.net https://hs82.net https://lt45.net https://mt74.net https://ndt5.net https://rkn3.net *.bing.com *.bing.net *.cloudimg.io *.contentsquare.net *.etrusted.com *.google-analytics.com *.googlesyndication.com *.googleusercontent.com *.hsforms.com *.hubspot.com *.imgix.net *.linkedin.com *.premiere.page *.trustedshops.com www.google.be www.google.de www.google.nl flagpedia.net https://www.mollie.com *.tile.openstreetmap.org data: 'self' 'unsafe-inline'; script-src www.googletagmanager.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.sharethis.com *.google.com *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.multisafepay.com https://pay.google.com *.hs-analytics.net *.usemessages.com *.hs-scripts.com *.bing.net *.beslist.nl *.bing.com *.cloudflare.com *.contentsquare.net *.etrusted.com *.getqonfi.com *.google-analytics.com *.googlesyndication.com *.hotjar.com *.hs-banner.com *.hscollectedforms.net *.licdn.com *.pinimg.com *.pinterest.com *.premiere.page *.tiktok.com *.trustedshops.com *.webwinkelkeur.nl *.ladesk.com https://cdn.polyfill.io https://browser.sentry-cdn.com *.gstatic.com maps.googleapis.com js.mollie.com pay.google.com applepay.cdn-apple.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src www.googletagmanager.com *.sharethis.com *.googleapis.com *.doubleclick.net *.facebook.com *.multisafepay.com *.etrusted.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' 'unsafe-inline'; object-src www.googletagmanager.com 'self' 'unsafe-inline'; media-src www.googletagmanager.com 'self' 'unsafe-inline'; manifest-src www.googletagmanager.com 'self' 'unsafe-inline'; connect-src www.googletagmanager.com www.googleadservices.com www.google-analytics.com analytics.google.com *.sharethis.com *.google-analytics.com *.facebook.com *.facebook.net *.multisafepay.com *.beslist.nl *.bing.com *.bing.net *.contentsquare.net *.doubleclick.net *.etrusted.com *.getqonfi.com *.google.com *.googlesyndication.com *.hotjar.com *.hotjar.io *.hs-banner.com *.hscollectedforms.net *.hsforms.com *.hubspot.com *.linkedin.com *.pinterest.com *.premiere.page *.tiktok.com *.trustedshops.com www.google.be www.google.nl https://*.ingest.sentry.io www.gstatic.com maps.googleapis.com *.tile.openstreetmap.org 'self' 'unsafe-inline'; child-src www.googletagmanager.com http: https: blob: 'self' 'unsafe-inline'; default-src www.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri www.googletagmanager.com 'self' 'unsafe-inline'; report-uri https://394bd828-e8ee-4169-91b3-7b587c6eb99c.sansec.watch/; report-to report-endpoint; 2
object-src 'none';base-uri 'self';script-src 'nonce-ZPZcvrXOW_waQDeP5vby9Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-_KyyFmqU2XK8xmSGFiVnHQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
media-src 'self' assets.mozilla.net videos.cdn.mozilla.net www.mozilla.org; frame-src 'self' accounts.firefox.com gtm.mozilla.org js.stripe.com www.google-analytics.com www.googletagmanager.com www.youtube.com; default-src 'self' *.mozilla.org; form-action 'self' https://abdri3ttkb.execute-api.us-east-2.amazonaws.com https://accounts.firefox.com/ https://basket.mozilla.org; upgrade-insecure-requests; base-uri 'none'; object-src 'none'; connect-src 'self' *.analytics.google.com *.google-analytics.com *.googletagmanager.com analytics.google.com cdn.transcend.io google-analytics.com googletagmanager.com gtm.mozilla.org https://abdri3ttkb.execute-api.us-east-2.amazonaws.com https://accounts.firefox.com/ https://basket.mozilla.org o1069899.ingest.sentry.io o1069899.sentry.io region1.google-analytics.com telemetry.transcend.io telemetry.us.transcend.io transcend-cdn.com www.mozilla.org/submit/bedrock/; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.google-analytics.com *.googletagmanager.com cdn.transcend.io google-analytics.com googletagmanager.com js.stripe.com s.ytimg.com tagmanager.google.com transcend-cdn.com www.mozilla.org www.youtube.com; style-src 'self' 'unsafe-inline' cdn.transcend.io transcend-cdn.com www.mozilla.org; font-src 'self' www.mozilla.org; frame-ancestors 'none'; img-src 'self' blog.mozilla.org data: images.ctfassets.net www.google-analytics.com www.googletagmanager.com www.mozilla.org 1
style-src https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com 'unsafe-inline';script-src https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com 'unsafe-inline' 'unsafe-eval';report-uri /1/batch/2/OE/mid=ATVPDKIKX0DER:sid=145-5644679-6337664:rid=E2CM1XV6JWFTJK6HFW3C:sn=www.primevideo.com;default-src https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com 1
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/www_google 1
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' 1003891.track.convertexperiments.com app.hubspot.com cdn-3.convertexperiments.com cdn-4.convertexperiments.com *.metrics.convertexperiments.com *.signals.convertexperiments.com logs.convertexperiments.com *.convertexperiments.com cdn.pdst.fm connect.facebook.net js.hs-analytics.net js.hs-banner.com js.hsforms.net js.hsleadflows.net js.hubspotfeedback.com js.usemessages.com organizer.bizzabo.com play.vidyard.com script.hotjar.com snap.licdn.com static.hotjar.com static.hsappstatic.net www.google-analytics.com www.googletagmanager.com www.recaptcha.net code.highcharts.com www.youtube.com js.hubspot.com www.dropbox.com widget.altrulabs.com www.google.com maps.googleapis.com wt-assets.hubteam.com cdn2.hubspot.net www.redditstatic.com cdn.veritonic.com gosniply.com d.impactradius-event.com js.hubspot.com 50339659.hs-sites.com analytics.tiktok.com api.s10h.io sgtm-amer.hubspot.com js.hsadspixel.net cdn.intellimize.co static.cloudflareinsights.com ob.greencolumnart.com tags.pw.adn.cloud cdn.jsdelivr.net js.storylane.io 'strict-dynamic' 'nonce-D7ILmZSGivIrEkxSJ6JnNw=='; report-uri https://send.hsbrowserreports.com/csp/report 1
object-src 'none'; style-src 'self' 'unsafe-inline' cdn.transcend.io transcend-cdn.com www.firefox.com; default-src 'self' www.firefox.com; img-src 'self' *.google-analytics.com *.googletagmanager.com data: google-analytics.com googletagmanager.com https://gtm.firefox.com www.firefox.com www.mozilla.org; base-uri 'none'; form-action 'self' https://accounts.firefox.com/ https://basket.mozilla.org; connect-src 'self' *.analytics.google.com *.google-analytics.com *.googletagmanager.com analytics.google.com basket.mozilla.org cdn.transcend.io google-analytics.com googletagmanager.com gtm.firefox.com https://accounts.firefox.com/ https://basket.mozilla.org https://gtm.firefox.com o1069899.ingest.sentry.io o1069899.ingest.us.sentry.io o1069899.sentry.io pa.firefox.com telemetry.transcend.io telemetry.us.transcend.io transcend-cdn.com www.firefox.com; frame-ancestors 'none'; frame-src 'self' accounts.firefox.com https://gtm.firefox.com www.google-analytics.com www.googletagmanager.com www.youtube-nocookie.com www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.google-analytics.com *.googletagmanager.com cdn.transcend.io google-analytics.com googletagmanager.com https://gtm.firefox.com pa.firefox.com s.ytimg.com tagmanager.google.com transcend-cdn.com www.firefox.com www.youtube.com; media-src 'self' assets.mozilla.net videos.cdn.mozilla.net www.firefox.com www.mozilla.org; font-src 'self' www.firefox.com; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' hubapi.com *.hubapi.com hubspot.com *.hubspot.com app.hubspot.com hubspotusercontent-na1.net *.hubspotusercontent-na1.net hsappstatic.net *.hsappstatic.net hs-banner.com *.hs-banner.com hsforms.com *.hsforms.com forms.hsforms.com *googletagmanager.com  https://munchkin.marketo.net https://snap.licdn.com *linkedin.com; 'unsafe-inline' https://trusted-cdn.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' https:; connect-src 'self' forms.hscollectedforms.net *.hscollectedforms.net hubspot.com *.hubspot.com hubapi.com *.hubapi.com hsforms.com *.hsforms.com hsforms.net *.hsforms.net hsappstatic.net *.hsappstatic.net googletagmanager.com *.googletagmanager.com google-analytics.com *.google-analytics.com cdn.cookielaw.org *.cookielaw.org www.google.com analytics.google.com  px.ads.linkedin.com *.linkedin.com; frame-ancestors 'none'; base-uri 'self'; object-src 'none'; upgrade-insecure-requests 1
default-src 'self' https:; base-uri 'self'; object-src 'none'; script-src 'self' https: 'report-sample'; style-src 'self' https: 'report-sample'; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; report-uri /csp-reporting; report-to csp-reporting 1
script-src 'nonce-Pb_Lq3ws8m68WTQN9EnWXg' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/static-on-bigtable; base-uri 'none' 1
script-src 'report-sample' 'nonce-VOpERdbsiH0abYwriNs9xA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';worker-src 'self';report-uri /us/_/BgcMiscSites/cspreport 1
object-src 'none';base-uri 'self';script-src 'nonce-Bre1dgbnv2NBopKgb_aQfA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-2SbzQHhVxoVIXAhRNiZkOQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none'; media-src 'self' assets.mozilla.net videos.cdn.mozilla.net www.firefox.com www.mozilla.org; form-action 'self' https://accounts.firefox.com/ https://basket.mozilla.org; img-src 'self' *.google-analytics.com *.googletagmanager.com data: google-analytics.com googletagmanager.com https://gtm.firefox.com www.firefox.com www.mozilla.org; base-uri 'none'; connect-src 'self' *.analytics.google.com *.google-analytics.com *.googletagmanager.com analytics.google.com basket.mozilla.org cdn.transcend.io google-analytics.com googletagmanager.com gtm.firefox.com https://accounts.firefox.com/ https://basket.mozilla.org https://gtm.firefox.com o1069899.ingest.sentry.io o1069899.ingest.us.sentry.io o1069899.sentry.io pa.firefox.com telemetry.transcend.io telemetry.us.transcend.io transcend-cdn.com www.firefox.com; frame-ancestors 'none'; upgrade-insecure-requests; font-src 'self' www.firefox.com; frame-src 'self' accounts.firefox.com https://gtm.firefox.com www.google-analytics.com www.googletagmanager.com www.youtube-nocookie.com www.youtube.com; default-src 'self' www.firefox.com; style-src 'self' 'unsafe-inline' cdn.transcend.io transcend-cdn.com www.firefox.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.google-analytics.com *.googletagmanager.com cdn.transcend.io google-analytics.com googletagmanager.com https://gtm.firefox.com pa.firefox.com s.ytimg.com tagmanager.google.com transcend-cdn.com www.firefox.com www.youtube.com 1
script-src 'nonce-hoDwoXYbBxpBuuTD442Ygw==' 'strict-dynamic' 'unsafe-eval' 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; report-uri /_/csp-report 1
object-src 'none';base-uri 'self';script-src 'nonce-DfoxVk_ZHEmoi8T9HB0Lrg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
style-src https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com 'unsafe-inline';script-src https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com 'unsafe-inline' 'unsafe-eval';report-uri /1/batch/2/OE/mid=ATVPDKIKX0DER:sid=134-3692735-7478211:rid=NRDME31W1E0CB3RC6WWC:sn=www.primevideo.com;default-src https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com 1
script-src 'nonce-Uo8ufcRCSAwE5yT-59KTHQ' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/static-on-bigtable; base-uri 'none' 1
frame-ancestors 'self'; script-src 'self' 'nonce-UVl5BrKAws0EjjUycu3iNA==' https://analytics.python.org https://media.ethicalads.io https://ajax.googleapis.com; default-src 'self'; connect-src 'self' https://console.python.org https://analytics.python.org https://server.ethicalads.io https://2p66nmmycsj3.statuspage.io; object-src 'none'; img-src 'self' data: https://media.ethicalads.io; form-action 'self'; base-uri 'self'; style-src 'self' 'unsafe-inline' https://ajax.googleapis.com; font-src 'self' data:; report-uri https://o20004.ingest.us.sentry.io/api/39935/security/?sentry_key=95f826ce8a6d47e9ab5dbb055c24eb74 1
object-src 'none';base-uri 'self';script-src 'nonce-jJZu38yBKuVkilCyq2Lubw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-ihIEIKuUPftMJsDS_HrVKQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'nonce-FS/w6xcAeFs/K4gCf6XaPg==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https://events.mercadolibre.com/csp/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=312c42ed-7555-40cd-8033-ec6a3414736d; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https://http2.mlstatic.com/ https://mlstaticquic-a.akamaihd.net/; frame-ancestors 'self' https://*.mercadolibre.cl:* https://*.mercadolibre.com:* https://*.mercadolibre.com.ve:* https://*.mercadolibre.com.ar:* https://*.mercadolivre.com.br:* https://*.mercadolibre.com.co:* https://*.mercadolibre.com.ec:* https://*.mercadolibre.com.mx:* https://*.mercadolibre.com.pe:* https://*.mercadolibre.com.uy:* https://*.mercadopago.cl:* https://*.mercadopago.com.ar:* https://*.mercadopago.com.br:* https://*.mercadopago.com.co:* https://*.mercadopago.com.mx:* https://*.mercadopago.com.pe:* https://*.mercadopago.com.uy:* https://*.mercadopago.com.ve:* https://*.mercadopago.com:* https://*.adminml.com:* https://*.mercadolibre.co.cr:* https://*.mercadolibre.com.pa:* https://*.mercadolibre.com.do:* https://*.mercadolibre.com.bo:* https://*.mercadolibre.com.py:* https://*.mercadolibre.com.gt:* https://*.mercadolibre.com.hn:* https://*.mercadolibre.com.ni:* https://*.mercadolibre.com.sv:* https://*.mercadopago.com.ec:* https://*.portalinmobiliario.com:* https://*.mercadolivre.com:* 1
base-uri 'none'; connect-src 'self' https://accounts.google.com https://analytics.google.com https://*.analytics.google.com https://api.canva.com https://api.pexels.com https://*.braze.com https://browser-intake-datadoghq.com https://cat.pexels.com https://content.pexels.com https://*.google-analytics.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://images.pexels.com https://*.ingest.sentry.io https://maps.googleapis.com https://*.onetrust.com https://pexels.s3.amazonaws.com https://static.pexels.com https://stats.g.doubleclick.net https://videos.pexels.com https://www.facebook.com https://www.google.com https://www.googletagmanager.com; font-src 'self' data: https://fonts.gstatic.com https://static.pexels.com https://use.fontawesome.com; form-action 'self' https://www.facebook.com; frame-ancestors 'self'; frame-src 'self' https://accounts.google.com https://challenges.cloudflare.com https://www.facebook.com https://www.youtube.com; img-src 'self' data: blob: https://connect.facebook.net https://content.pexels.com https://i.ytimg.com https://images.pexels.com https://maps.gstatic.com https://media.istockphoto.com https://*.onetrust.com https://static.pexels.com https://www.facebook.com https://www.googletagmanager.com https://www.gravatar.com; media-src 'self' blob: https://content.pexels.com https://static.pexels.com https://videos.pexels.com; object-src 'none'; style-src 'self' 'unsafe-inline' https://accounts.google.com https://fonts.googleapis.com https://static.pexels.com https://use.fontawesome.com https://www.gstatic.com; report-uri https://csp.canva.com/_cspreport?app=pexels&ro=true&policyHash=b35d0fd0 1
script-src 'nonce-oyJO/vs5ZE6+GJOPTDERUw==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https://events.mercadolibre.com/csp/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=81253709-ff4f-492a-ab97-8af06ff6063a; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https://http2.mlstatic.com/ https://mlstaticquic-a.akamaihd.net/; frame-ancestors 'self' https://*.mercadolibre.cl:* https://*.mercadolibre.com:* https://*.mercadolibre.com.ve:* https://*.mercadolibre.com.ar:* https://*.mercadolivre.com.br:* https://*.mercadolibre.com.co:* https://*.mercadolibre.com.ec:* https://*.mercadolibre.com.mx:* https://*.mercadolibre.com.pe:* https://*.mercadolibre.com.uy:* https://*.mercadopago.cl:* https://*.mercadopago.com.ar:* https://*.mercadopago.com.br:* https://*.mercadopago.com.co:* https://*.mercadopago.com.mx:* https://*.mercadopago.com.pe:* https://*.mercadopago.com.uy:* https://*.mercadopago.com.ve:* https://*.mercadopago.com:* https://*.adminml.com:* https://*.mercadolibre.co.cr:* https://*.mercadolibre.com.pa:* https://*.mercadolibre.com.do:* https://*.mercadolibre.com.bo:* https://*.mercadolibre.com.py:* https://*.mercadolibre.com.gt:* https://*.mercadolibre.com.hn:* https://*.mercadolibre.com.ni:* https://*.mercadolibre.com.sv:* https://*.mercadopago.com.ec:* https://*.portalinmobiliario.com:* https://*.mercadolivre.com:* 1
object-src 'none';base-uri 'self';script-src 'nonce--bAZtGHy10N-csjTd9MSpA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-eUYJPNeAiEbAooryEoUKoQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/safety_google 1
script-src 'nonce-9TuvsZ/6Jv6nlCHn4CNYPg==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https://events.mercadolibre.com/csp/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=867d21b9-64b0-44d5-81c6-01c52de89ce5; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https://http2.mlstatic.com/ https://mlstaticquic-a.akamaihd.net/; frame-ancestors 'self' https://*.mercadolibre.cl:* https://*.mercadolibre.com:* https://*.mercadolibre.com.ve:* https://*.mercadolibre.com.ar:* https://*.mercadolivre.com.br:* https://*.mercadolibre.com.co:* https://*.mercadolibre.com.ec:* https://*.mercadolibre.com.mx:* https://*.mercadolibre.com.pe:* https://*.mercadolibre.com.uy:* https://*.mercadopago.cl:* https://*.mercadopago.com.ar:* https://*.mercadopago.com.br:* https://*.mercadopago.com.co:* https://*.mercadopago.com.mx:* https://*.mercadopago.com.pe:* https://*.mercadopago.com.uy:* https://*.mercadopago.com.ve:* https://*.mercadopago.com:* https://*.adminml.com:* https://*.mercadolibre.co.cr:* https://*.mercadolibre.com.pa:* https://*.mercadolibre.com.do:* https://*.mercadolibre.com.bo:* https://*.mercadolibre.com.py:* https://*.mercadolibre.com.gt:* https://*.mercadolibre.com.hn:* https://*.mercadolibre.com.ni:* https://*.mercadolibre.com.sv:* https://*.mercadopago.com.ec:* https://*.portalinmobiliario.com:* https://*.mercadolivre.com:* 1
object-src 'none';base-uri 'self';script-src 'nonce-WvcJ0ttJtjmACQSBokngZQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src *.leboncoin.fr *.leboncoin.io *.leboncoin.ci; frame-ancestors *.leboncoin.fr *.leboncoin.io *.leboncoin.ci; report-uri https://api.leboncoin.fr/api/csp-report/v1/report/; 1
script-src   'self'   'unsafe-inline'   'unsafe-eval'   'report-sample'   https://*.savagebeast.com   https://pandora.com   https://*.pandora.com   https://staging.cdn-net.com   https://cdn.cookielaw.org   https://assets.adobedtm.com   https://*.adsafeprotected.com   https://ep2.adtrafficquality.google   https://fundingchoicesmessages.google.com   https://*.googlesyndication.com   https://*.google-analytics.com   https://www.googletagmanager.com   https://www.googletagservices.com   https://imasdk.googleapis.com   https://storage.googleapis.com   https://*.doubleclick.net   https://*.doubleverify.com   https://pagead2.googlesyndication.com   https://s0.2mdn.net   https://cdn.branch.io   https://app.link   https://client.px-cloud.net   https://connect.facebook.net   https://sb.scorecardresearch.com   https://secure-us.imrworldwide.com   https://z.moatads.com   https://lex.33across.com   https://s.adroll.com   https://d.adroll.com   https://*.adswizz.com   https://ads.revjet.com   https://pix.revjet.com   https://seal.verisign.com   https://code.jquery.com   https://snap.licdn.com; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub16b313e1658347a16504b662a893cd7e&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env%3Aproduction; report-to csp-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce--YEQkdBf3Gq4igBaWgq8NQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-daLQ_dK40WtRsTak8cqAPA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; base-uri 'self'; font-src localhost:3000 localhost:8080 *.www.ucla.edu www.ucla.edu cdn.jsdelivr.net; frame-src 'self' cse.google.com www.youtube.com www.google.com *.adtrafficquality.google; img-src 'self' *.amazonaws.com  www.google.com cdn.jsdelivr.net clients1.google.com www.googleapis.com *.gstatic.com pbs.twimg.com *.hypemarks.com *.tintup.com www.google-analytics.com stats.g.doubleclick.net cdn.webcomponents.ucla.edu images.sidearmdev.com *.tiktokcdn-us.com *.fbcdn.net t.co analytics.twitter.com *.linkedin.com *.cdninstagram.com www.facebook.com www.googletagmanager.com *.uclabruins.com syndicatedsearch.goog *.adtrafficquality.google data: *.cassiecloud.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com *.googletagmanager.com www.youtube.com cse.google.com cdn.jsdelivr.net *.ytimg.com cdnjs.cloudflare.com www.google-analytics.com *.amazonaws.com cdn.webcomponents.ucla.edu snap.licdn.com connect.facebook.net analytics.tiktok.com static.ads-twitter.com *.adtrafficquality.google *.gstatic.com *.ucla.edu *.syrenis.io *.cassiecloud.com cscript-cdn-use.localhost cscript-cdn-use-uat.localhost data:; style-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net cdn.webcomponents.ucla.edu cdnjs.cloudflare.com www.google.com *.cassiecloud.com; connect-src 'self' weather.atmos.ucla.edu www.google-analytics.com px.ads.linkedin.com analytics.tiktok.com stats.g.doubleclick.net *.adtrafficquality.google *.cassiecloud.com *.syrenis.io *.google.com; report-uri /csp-hotline.php 1
object-src 'none'; script-src 'self' facebook.net *.facebook.net fullstory.com *.fullstory.com gmlinteractive.com *.gmlinteractive.com googletagmanager.com *.googletagmanager.com kameleoon.eu *.kameleoon.eu optimove.net *.optimove.net sportradar.com *.sportradar.com sportradarserving.com *.sportradarserving.com app.delivery cloudflare.com *.cloudflare.com lgrckt-in.com *.lgrckt-in.com tostarsbuilding.com *.tostarsbuilding.com *.bing.com *.taboola.com *.geocomply.com *.kameleoon.io *.creativecdn.com *.ads-twitter.com *.google-analytics.com *.kaizengaming.com *.jsdelivr.net *.kwai.net *.clarity.ms *.greencolumnart.com *.adalyser.com *.performgroup.com *.scoutgg.net *.pa4r.com res-odx.op-mobile.opera.com *.bannerflow.net *.facebook.com *.cloudfront.net *.maze.co adform.net *.adform.net *.app.delivery *.betano.com *.betano.pe *.betgenius.com *.cloudflareinsights.com *.cookielaw.org d32tdr35c4icxo.cloudfront.net *.betano.co *.logr-in.com; worker-src 'self' blob:; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=__NgRDE9xYGPN0.L4COqLHVc.GW9z2xbC.mV3Qi4SqA-1789271461.751887-1.0.1.1-tA3qURvTdELW20732WOoCV814p2Ujgd408fH3H9dg4nrfLrMB5FJWn.F4TmwEcyysz1Fddggsyc1jIbcp5LzrewsMQAyQ0p1QumsQ8peJOpWQe0euhGyiuNCP98ebxN_1vvrROsBc2kcXKNGbUBw8LIOEB8c5nUAp5apeOLydn6WiCfp3kXe7Pmp8tOqewjt; report-to cf-dmeilqjghulgfjsh 1
object-src 'none'; script-src 'self' adform.net *.adform.net *.bing.com *.taboola.com *.fullstory.com *.geocomply.com *.kameleoon.eu *.ads-twitter.com *.google-analytics.com *.kaizengaming.com *.jsdelivr.net *.kwai.net *.clarity.ms *.greencolumnart.com *.adalyser.com *.performgroup.com *.scoutgg.net *.sportradarserving.com *.pa4r.com res-odx.op-mobile.opera.com *.bannerflow.net *.facebook.com *.cloudfront.net *.maze.co *.app.delivery *.betano.co *.betgenius.com *.cloudflare.com *.cloudflareinsights.com *.cookielaw.org *.creativecdn.com *.facebook.net *.gmlinteractive.com *.googletagmanager.com *.kameleoon.io *.lgrckt-in.com *.optimove.net *.sportradar.com *.tostarsbuilding.com *.betano.de *.datadome.co d32tdr35c4icxo.cloudfront.net logr-in.com *.logr-in.com; worker-src 'self' blob:; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=zAG0tL3Vs2N8se93iInIxceFKCrPMn70kbc0KPhhob8-1789271645.6346815-1.0.1.1-NIpsSD2BcvnY80KV_QixTYhboMxcdgIEPvLGNa57mSFWgZBunPd11sftE7aNz1NZQlJVg3SA2XgQ9aMZsr2vX6kSWqW6RMHvDqirNC6261BY0bvzrHvkkR5Wf8zXJYqz2DMZd.oSamhXNzG.KpoGjt8JCaqNSxTIlOfENWz7ajwSiSA3g7h6o71.cRsuIUJezMp0AtLpGiV9t.Y8SJE2MQ; report-to cf-sxixzvkcsyidecbw 1
object-src 'none';base-uri 'self';script-src 'nonce-8M5yd0BkPcLp-cvOVtiSHg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-ZvSG0mAN74sTSW_m_dlgDQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-9DzG8N7_mcHLAyPMwRx-yA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
base-uri 'self'; default-src 'self' *.atlassian.com *.intercomcdn.com *.orangelogic.com *.6sc.co *.6sense.com; script-src 'self' *.gstatic.com *.cookielaw.org *.public.atl-paas.net *.prod.atl-paas.net *.googletagmanager.com *.marketo.net *.atlassian.com utt.impactcdn.com *.google.com *.doubleclick.com *.googleadservices.com *.livechatinc.com *.bing.com *.quora.com *.yimg.jp *.clicktale.net *.linkedin.com *.twitter.com *.licdn.com *.demandbase.com *.doubleclick.net *.facebook.net *.redditstatic.com *.clearbitscripts.com *.clarity.ms *.vimeo.com *.google-analytics.com facebook.com *.facebook.com impactcdn.com *.impactcdn.com clearbitjs.com *.clearbitjs.com yahoo.co.jp *.yahoo.co.jp *.recaptcha.net www.recaptcha.net *.googlerecaptcha.cn *.ads-twitter.com *.intercom.io *.intercomcdn.com *.jsdelivr.net *.6sc.co *.6sense.com *.techtarget.com *.capterra.com otBannerSdk.js 'unsafe-eval' 'unsafe-inline'; style-src 'self' *.public.atl-paas.net *.prod.atl-paas.net fonts.googleapis.com *.googletagmanager.com *.cookielaw.org 'unsafe-inline'; img-src 'self' blob: data: atlassian.com *.atlassian.com *.cookielaw.org *.gravatar.com *.wp.com fd-assets.prod.atl-paas.net pixel.pointmediatracker.com *.frontend.public.atl-paas.net *.prod.public.atl-paas.net cnv.event.prod.bidr.io *.doubleclick.net *.clicktale.net *.bing.com rlcdn.com reddit.com quora.com *.rlcdn.com *.reddit.com *.quora.com *.ctfassets.net  *.linkedin.com *.google.com *.google.com.au *.company-target.com *.facebook.com *.google-analytics.com *.twitter.com t.co *.intercomcdn.com *.intercomassets.com *.orangelogic.com *.googletagmanager.com img.logo.dev *.atlassian.net; font-src 'self' *.ctfassets.net *.intercomcdn.com *.gstatic.com *.atl-paas.net; frame-ancestors 'none'; form-action 'self'; report-uri https://web-security-reports.services.atlassian.com/csp-report/trello-bifrost; report-to csp-default-endpoint; connect-src 'self' ws: wss: atlassian.com *.atlassian.com www.atlassian.com *.cookielaw.org *.onetrust.com *.public.atl-paas.net *.prod.atl-paas.net *.mktoresp.com *.ingest.sentry.io *.workato.com atlassian.sjv.io statsigapi.net *.statsigapi.net *.contentful.com atlassian.net *.clicktale.net *.contentsquare.net *.bing.com google-analytics.com company-target.com linkedin.com *.google-analytics.com *.company-target.com *.linkedin.com *.doubleclick.net *.reddit.com *.redditstatic.com *.google.com *.demandbase.com *.clarity.ms *.clearbit.com *.intercom.io *.algolianet.com *.algolia.net *.algolia.io *.recaptcha.net www.recaptcha.net *.googlerecaptcha.cn https://unpkg.com/@rive-app/ *.facebook.com *.orangelogic.com *.adnxs.com *.6sc.co *.6sense.com apis.auxia.io *.atlassian.net /gateway/api/ais/available-products /gateway/api/cookie-integrator/api/onetrust/jwt; media-src 'self' *.ctfassets.net *.atlassian.com *.orangelogic.com; worker-src 'self' blob:; frame-src 'self' *.youtube.com *.google.com *.doubleclick.net *.recaptcha.net www.recaptcha.net *.googlerecaptcha.cn *.atl-paas.net *.company-target.com *.googletagmanager.com *.atlassian.net; sandbox allow-same-origin allow-scripts allow-forms allow-popups allow-modals 1
object-src 'none';base-uri 'self';script-src 'nonce-_YxZqqa5cEqRPIR1dY-dxg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-vda8GtSo71QY_GY9I24oMQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'report-sample' 'nonce-goPCVJj9OPSRRlU0xh6FlA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';worker-src 'self';report-uri /us/_/BgcMiscSites/cspreport 1
child-src 'self' https://*.qualified.com; default-src 'self'; frame-src 'self' https://9628652.fls.doubleclick.net https://td.doubleclick.net https://js.driftt.com https://*.qualified.com https://a8447815042.cdn-pci.optimizely.com https://ct.pinterest.com https://tealium-f.squarecdn.com; worker-src 'self' blob:; connect-src 'self' https://assets.ctfassets.net https://api.broadway.squareup.com https://campaign-hub-production-f.squarecdn.com https://api.squareup.com/v1/cdp/batch https://api.squarestagingexternal.com/v1/cdp/batch https://api.squarestagingexternal.com https://api.squareup.com https://api.squareupstaging.com *.contentsquare.net https://capi.squareup.com https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com https://stats.g.doubleclick.net https://facebook.com https://www.facebook.com https://googleads.g.doubleclick.net http://www.google-analytics.com https://www.google-analytics.com https://google.com https://www.google.com https://us-central1-sq-sgtm-prod.cloudfunctions.net https://www.googletagmanager.com http://images.ctfassets.net https://images.ctfassets.net http://424-iab-218.mktoresp.com https://424-iab-218.mktoresp.com https://xms2-marketo.beta.stage.sqprod.co https://424-iab-218.mktoutil.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://logx.optimizely.com https://ct.pinterest.com https://conversions-config.reddit.com https://pixel-config.reddit.com https://www.redditstatic.com *.ingest.us.sentry.io *.6sc.co https://api.sprig.com https://squareupstaging.com https://visitor-scoring-new.marketlinc.com https://api.chilipiper.com https://squareinc-sandbox.chilipiper.com https://squareinc.chilipiper.com https://www.workwithsquare.com wss://*.qualified.com https://*.qualified.com https://pw-renderer-production-c.squarecdn.com localhost:*; font-src 'self' https://cash-f.squarecdn.com https://square-fonts-production-f.squarecdn.com; img-src 'self' data: blob: https://ib.adnxs.com https://assets.ctfassets.net https://cdn.blisspointmedia.com https://campaign-hub-production-f.squarecdn.com *.contentsquare.net https://ad.doubleclick.net https://facebook.com https://www.facebook.com https://google.com https://www.google.com https://adservice.google.com https://googleads.g.doubleclick.net http://www.google-analytics.com https://www.google-analytics.com https://*.g.doubleclick.net https://www.googletagmanager.com http://images.ctfassets.net https://images.ctfassets.net https://px.ads.linkedin.com https://cdn.cookielaw.org https://pixel.pointmediatracker.com https://alb.reddit.com *.6sc.co https://api.squareup.com https://api.squareupstaging.com https://insight.adsrvr.org https://match.adsrvr.org https://*.qualified.com https://pw-renderer-production-c.squarecdn.com; manifest-src 'self' https://pw-renderer-production-c.squarecdn.com; media-src 'self' mediastream: https://assets.ctfassets.net https://js.driftt.com http://videos.ctfassets.net https://videos.ctfassets.net https://*.qualified.com; script-src 'self' *.contentsquare.net https://www.datadoghq-browser-agent.com https://js.driftt.com https://*.qualified.com https://connect.facebook.net https://www.googleadservices.com https://googleads.g.doubleclick.net http://www.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com https://campaign-hub-production-f.squarecdn.com https://lift-ai-js.marketlinc.com https://martech-development-c.squarecdn.com https://martech-production-c.squarecdn.com https://martech-staging-c.squarecdn.com http://munchkin.marketo.net https://munchkin.marketo.net https://cdn.cookielaw.org https://a8447815042.cdn-pci.optimizely.com https://s.pinimg.com https://ct.pinterest.com https://pw-renderer-production-c.squarecdn.com https://pw-renderer-staging-c.squarecdn.com https://pwt-production-c.squarecdn.com https://pwt-staging-c.squarecdn.com https://sales-bridge-production-c.squarecdn.com https://sales-bridge-staging-c.squarecdn.com https://squareinc-sandbox.chilipiper.com https://squareinc.chilipiper.com https://www.workwithsquare.com https://www.redditstatic.com *.6sc.co https://cdn.sprig.com https://xms-production-f.squarecdn.com https://www.youtube.com https://pw-renderer-production-c.squarecdn.com 'nonce-WTOCWW/wSOpGPP5NJjpXJg=='; style-src 'self' https://square-fonts-production-f.squarecdn.com https://sales-bridge-production-c.squarecdn.com https://sales-bridge-staging-c.squarecdn.com 'unsafe-inline' https://*.qualified.com https://pw-renderer-production-c.squarecdn.com; frame-ancestors 'self' https://app.contentful.com; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubd9af00759e65a48ba7ee3ff1dfa4260b&dd-evp-origin=content-security-policy&ddsource=csp-report; report-to browser-intake-datadoghq 1
default-src 'self' blob: data: 'unsafe-inline' 'unsafe-eval' *.zijieimg.com *.helo-app.com *.toutiaopage.com *.zjurl.cn *.pstatp.com *.bytecdn.cn *.isnssdk.com *.byteoversea.com *.365yg.com *.ks-cdn.com *.ipstatp.com *.amemv.com *.ibytedtos.com *.ixigua.com *.ixiguavideo.com *.hypstarcdn.com *.tiktokcdn.com *.topbuzzcdn.com *.lemocamcdn.com *.musical.ly *.muscdn.com *.ulikecam.mobi *.faceu.mobi *.wukongwenda.com *.wukongwenda.cn *.toutiao13.com *.toutiaoribao.cn *.ribaoapi.com *.dongchediapp.com *.huoshanzhibo.com *.huoshanxiaoshipin.cn *.huoshanxiaoshipin.net *.huoshanvideo.cn *.huoshanvideo.net *.ieshuodong.cn *.ieshuodong.net *.byteoversea.com *.topbuzz.com *.hypstar.com *.tiktokv.com *.byted.org *.bytedance.net *.bytedance.com *.bytedance.cn *.toutiaocloud.com *.snssdk.com *.toutiao.com *.neihanshequ.com *.wukong.com *.huoshan.com *.douyin.com *.everphoto.cn *.jinritemai.com *.tuchong.com *.stock.tuchong.com *.luckycalendar.cn *.bcy.net *.feishu.cn *.dcdapp.com *.oceanengine.com *.chengzijianzhan.com *.byteimg.com *.google-analytics.com 1
default-src 'self'; script-src 'self' https://*.posthog.com https://www.youtube.com https://fast.wistia.com https://import-cdn.default.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://*.posthog.com https://res.cloudinary.com https://www.gravatar.com https://raw.githubusercontent.com https://obuldanrptloktxcffvn.supabase.co https://cdn.shopify.com https://i.ytimg.com https://embed-ssl.wistia.com https://fast.wistia.com https://cdn.jsdelivr.net https://user-images.githubusercontent.com https://brandbadge.clearbit.com; font-src 'self' data: https://d27nj4tzr3d5tm.cloudfront.net https://res.cloudinary.com https://fonts.gstatic.com https://r2cdn.perplexity.ai https://fast.wistia.com https://use.typekit.net; connect-src 'self' https://*.posthog.com https://api.github.com https://lottie.host https://better-animal-d658c56969.strapiapp.com https://forms.default.com https://nucleus.default.com https://import-cdn.default.com https://posthog.myshopify.com https://*.algolia.net https://*.algolianet.com https://api.io.inkeep.com https://fast.wistia.net https://fast.wistia.com https://embed-cloudfront.wistia.com https://api.inkeep.com; media-src 'self' https://d1hovhsvet4m1p.cloudfront.net https://res.cloudinary.com blob:; frame-src 'self' https://www.youtube-nocookie.com https://hogwars.vercel.app https://hedgehog-mode-playground.vercel.app; worker-src 'self' blob:; child-src 'self' blob:; object-src 'none'; frame-ancestors 'none'; report-uri https://us.i.posthog.com/report/?token=sTMFPsFhdP1Ssg&sample_rate=0.1&v=1; report-to posthog 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' 1003891.track.convertexperiments.com app.hubspot.com cdn-3.convertexperiments.com cdn-4.convertexperiments.com *.metrics.convertexperiments.com *.signals.convertexperiments.com logs.convertexperiments.com *.convertexperiments.com cdn.pdst.fm connect.facebook.net js.hs-analytics.net js.hs-banner.com js.hsforms.net js.hsleadflows.net js.hubspotfeedback.com js.usemessages.com organizer.bizzabo.com play.vidyard.com script.hotjar.com snap.licdn.com static.hotjar.com static.hsappstatic.net www.google-analytics.com www.googletagmanager.com www.recaptcha.net code.highcharts.com www.youtube.com js.hubspot.com www.dropbox.com widget.altrulabs.com www.google.com maps.googleapis.com wt-assets.hubteam.com cdn2.hubspot.net www.redditstatic.com cdn.veritonic.com gosniply.com d.impactradius-event.com js.hubspot.com 50339659.hs-sites.com analytics.tiktok.com api.s10h.io sgtm-amer.hubspot.com js.hsadspixel.net cdn.intellimize.co static.cloudflareinsights.com ob.greencolumnart.com tags.pw.adn.cloud cdn.jsdelivr.net js.storylane.io 'strict-dynamic' 'nonce-fvY1naw+Cx9X9mdhDQSRaQ=='; report-uri https://send.hsbrowserreports.com/csp/report 1
default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http://*.files.wordpress.com wss://variety.com; report-uri https://pmcuri.report-uri.com/r/d/csp/reportOnly 1
script-src 'self' https: https://www.google-analytics.com https://cdn.amplitude.com 'unsafe-eval' 'unsafe-inline' data: 'nonce-WjDMhTvQR1McqOkq8+x/+g=='; worker-src blob: data:; report-uri https://us.sentry.io/api/4506690010480640/security/?sentry_key=aab2498373841041d6b48d721aefbdc1&sentry_environment=production&sentry_release=bd63806a45ca3a0c87c4fa15843c42787ff347ab 1
object-src 'none';base-uri 'self';script-src 'nonce-EUI6fczSRo-DFGJhZkbocg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; img-src data: blob: *; script-src-elem 'self' 'strict-dynamic' assets.ubuntu.com www.google-analytics.com www.googletagmanager.com www.youtube.com asciinema.org player.vimeo.com script.crazyegg.com www.googleadservices.com js.zi-scripts.com *.g.doubleclick.net www.google.com www.gstatic.com www.brighttalk.com snap.licdn.com connect.facebook.net maps.googleapis.com www.redditstatic.com munchkin.marketo.net *.googlesyndication.com cdn.jsdelivr.net https://esm.sh https://cdn.jsdelivr.net buttons.github.io cdn.livechatinc.com api.livechatinc.com secure.livechatinc.com www.tfaforms.com 'nonce-0YD9A613N0MEDhQkAIPFyg'; font-src 'self' assets.ubuntu.com fonts.google.com cdn.livechatinc.com secure.livechatinc.com; script-src 'self' blob: 'wasm-unsafe-eval' 'nonce-0YD9A613N0MEDhQkAIPFyg'; connect-src 'self' ubuntu.com analytics.google.com www.googletagmanager.com o4510662863749120.ingest.de.sentry.io www.google-analytics.com *.crazyegg.com *.g.doubleclick.net ad.doubleclick.net *.clarity.ms bat.bing.com bat.bing.net www.googleadservices.com js.zi-scripts.com *.google-analytics.com px.ads.linkedin.com ws.zoominfo.com youtube.com google.com www.google.ad www.google.ae www.google.al www.google.am www.google.as www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cat www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.cn www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.com www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.nr www.google.nu www.google.pl www.google.pn www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.st www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu www.google.ws fonts.google.com maps.googleapis.com pixel-config.reddit.com www.redditstatic.com conversions-config.reddit.com https://esm.sh https://lottie.host https://cdn.jsdelivr.net *.analytics.google.com www.facebook.com *.googlesyndication.com *.mktoresp.com assets.ubuntu.com api.github.com raw.githubusercontent.com api.livechatinc.com cdn.livechatinc.com secure.livechatinc.com web.facebook.com www.tfaforms.com unpkg.com; frame-src 'self' assets.ubuntu.com *.doubleclick.net *.crazyegg.com www.youtube.com/ asciinema.org player.vimeo.com www.googletagmanager.com www.google.com www.brighttalk.com cdn.livechatinc.com secure.livechatinc.com cdn.livechat-static.com; style-src 'self' cdn.jsdelivr.net www.tfaforms.com 'unsafe-inline'; media-src 'self' res.cloudinary.com assets.ubuntu.com; child-src 'self' blob: youtube.com google.com fonts.google.com api.livechatinc.com cdn.livechatinc.com secure.livechatinc.com; form-action 'self' https://pages.ubuntu.com https://ubuntu.com https://www.tfaforms.com; object-src 'none'; base-uri 'self'; worker-src 'self' blob:; report-uri /csp-report; 1
default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http://*.files.wordpress.com wss://www.rollingstone.com; report-uri https://pmcuri.report-uri.com/r/d/csp/reportOnly 1
script-src 'nonce-SliotGacVk9aFU30/ATBjw==' 'strict-dynamic' 'unsafe-eval' 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; report-uri /_/csp-report 1
img-src https:; manifest-src 'self' https://*.cdn.office.net/yammer/ https://res-dod.onecdn.usgovcloud-static.microsoft/ https://res-gcch.onecdn.usgovcloud-static.microsoft/; media-src 'self' https://*.cdn.office.net/yammer-teams-app/ https://*.engage.cloud.microsoft/ https://*.sharepoint.com https://dod.engage.usgovcloud.microsoft/ https://engage.usgovcloud.microsoft/; report-to csp-ro-endpoint; report-uri https://cspv2.core.microsoft/report/0df87ed1-bd2c-431b-83e4-90e35955625d/VivaEngage-Web-PROD; script-src 'nonce-M47AVVi+7BAv9NydVUgoOPmTtX6qgv8Y6hX9d1BfSrI=' 'report-sample' 'self' 'strict-dynamic' blob: https://*.cdn.office.net.rproxy.goskope.com/ https://*.cdn.office.net/ https://*.engage.cloud.microsoft/ https://*.res.office365.com/ https://amcdn.msauth.net/ https://amcdn.msftauth.net/ https://dod.engage.usgovcloud.microsoft/ https://engage.cloud.microsoft/ https://engage.usgovcloud.microsoft/ https://js.monitor.azure.com/ https://res-1.public.onecdn.static.microsoft/ https://res-2.public.onecdn.static.microsoft/ https://res-4.public.onecdn.static.microsoft/ https://res-dod.onecdn.usgovcloud-static.microsoft/ https://res-gcch.onecdn.usgovcloud-static.microsoft/ https://res.public.onecdn.static.microsoft/ https://web.yammer.com/ https://www.yammer.com/; style-src 'report-sample' 'self' 'unsafe-inline' https://*.cdn.office.net/ https://*.engage.cloud.microsoft/ https://*.res.office365.com/ https://dod.engage.usgovcloud.microsoft/ https://engage.usgovcloud.microsoft/ https://res-1.public.onecdn.static.microsoft/ https://res-2.public.onecdn.static.microsoft/ https://res-4.public.onecdn.static.microsoft/ https://res-dod.onecdn.usgovcloud-static.microsoft/ https://res-gcch.onecdn.usgovcloud-static.microsoft/ https://res.public.onecdn.static.microsoft/ https://shell.azurefd.eaglex.ic.gov https://shell.azurefd.microsoft.scloud; worker-src 'self' 1
frame-ancestors 'self'; report-uri https://www.news.com.au/csp-reports 1
report-to slardar-endpoint; upgrade-insecure-requests ; frame-ancestors 'self' *.toutiao.com *.douyin.com *.bytedance.com *.bytedance.net tcs.jiyunhudong.com aup.jijixiangshangabc.com chrome-extension://dbjibobgilijgolhjdcbdebjhejelffo chrome-extension://molcibnmfbjmmfbefjfcafdeabfniobi chrome-extension://capohkkfagimodmlpnahjoijgooocdjhd chrome-extension://mijalhmcgaaaggjfhkliffkanfhimhch chrome-extension://obkcimipmjdkghadnfcjojepocldeggd chrome-extension://epjhdbhhoeemcbbbgkimcfndcbjapdaa safari-web-extension: *.doubao.com *.larkoffice.com *.feishu.cn *.larksuite.com *.feishu-pre.net *.feishu-pre.cn *.larksuite-pre.com *.larksuite.us *.larksuite-pre.us *.larkenterprise.com *.larkenterprise-pre.com; script-src 'nonce-35ecba2867c09771e4fad11b12d07426-argus' blob: data: 'self' 'unsafe-eval' 'report-sample' 'strict-dynamic'  'unsafe-inline' https:; base-uri 'self'; object-src 'self'; frame-src 'self' *.toutiao.com *.douyin.com *.bytedance.com *.bytedance.net tcs.jiyunhudong.com aup.jijixiangshangabc.com *.doubao.com;report-uri https://mon.zijieapi.com/monitor_browser/collect/batch/security/?bid=flow_web; 1
default-src 'self'; script-src 'self' 'nonce-+j9i3d6aKrJceBVyjNWLMQ=='; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; report-uri /csp_reports 1
default-src 'self'; script-src 'nonce-bF1ySSBnL+x4SZAn1vmweg==' 'strict-dynamic' 'self' 'wasm-unsafe-eval' https://a-cdn.anthropic.com https://assets.claude.ai https://www.googletagmanager.com https://js.hsforms.net https://embed.typeform.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://cdn.sanity.io https://assets.claude.com https://assets-staging.claude.com https://i.ytimg.com https://forms.hsforms.com https://forms-na1.hsforms.com; font-src 'self' https://fonts.gstatic.com; media-src 'self' https://cdn.sanity.io https://assets.claude.com https://assets-staging.claude.com https://assets.claude.ai; frame-src https://www.youtube-nocookie.com https://form.typeform.com https://*.hsforms.com https://*.hubspot.com https://a.claude.com https://assets.claude.ai; connect-src 'self' https://a-api.anthropic.com https://a-cdn.anthropic.com https://api.anthropic.com https://cdn.sanity.io https://assets.claude.com https://assets-staging.claude.com https://*.api.sanity.io https://*.apicdn.sanity.io wss://*.api.sanity.io https://content-pantry.ant.dev https://links.iterable.com https://claude.ai/api/billing/subscription_pricing https://forms.hsforms.com https://forms-na1.hsforms.com https://www.googletagmanager.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https://*.hsforms.com https://links.iterable.com; report-uri /api/csp-report; report-to csp 1
object-src 'none';base-uri 'self';script-src 'nonce-o7gUKu-BzScuvTNc4fmIrA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'unsafe-eval' 'wasm-unsafe-eval' 'report-sample' 'strict-dynamic' 'nonce-2SoxuFBDzfIAZfO5xu4w0' *.bytescm.com *.bytednsdoc.com *.ibytedapm.com *.snssdk.com *.yhgfb-cn-static.com *.bytetos.com *.byte-gslb.com *.bytegoofy.com *.bytecdn.cn *.toutiaostatic.com;style-src 'self' 'unsafe-inline' *.toutiaoimg.com *.bdxiguaimg.com *.bytescm.com *.bytegoofy.com *.douyinstatic.com *.toutiao.com *.toutiaostatic.com *.bytedance.net cdn.bootcss.com;connect-src 'self' wss: ws: data: blob: http://localhost:* toutiao.govwza.cn *.bytedance.net *.bytedance.com *.snssdk.com *.toutiaostatic.com *.bytescm.com *.toutiao.com *.bytetcc.com *.zijieapi.com *.yhgfb-cn-static.com *.toutiaovod.com *.bytednsdoc.com *.ibytedapm.com *.bytedanceapi.com *.google-analytics.com *.douyinstatic.com *.douyinvod.com *.bytegoofy.com *.bytetos.com *.toutiaoimg.com *.huoshanstatic.com *.idouyinvod.com:* *.volcsiriusbd.com:* *.volcsirius.com:*  *.tt.x.bsgslb.cn:* *.dy.zzcdnx.com:*  *.qc.bsccdn.net:* *.smtcdns.com:* *.ugslb.com:* *.livehwc3.cn:* *.smtcdns.net:* *.bytefcdnrd.com:* *.ksyungslb.com:* *.ksyungslb2.com:* *.ourdvsss.com:* *.tbcache.com:* *.jomodns.com:* *.douyincdn.com:* *.ixigua.com:* *.bdxigualive.com:* *.pstatp.com:* *.douyinliving.com:* *.picovr.com:* *.huoshanlive.com:* *.ihuoshanlive.com:* *.volccdn.com:* *.bestv.com.cn:* *.bytefcdn.com:* *.qnqcdn.net:*  *.jomoxc.com *.jomoxd.com *.a.bdycdn.cn *.hiecheimaetu.com:* *.ppio.cloud:* *.weilayun.com:* *.saxysec.com:* *.saxyit.com:* *.saxydc.com:* *.sjxysec.com:* *.sjxydc.com:* *.vegslb.com:* *.bytegecko.com;upgrade-insecure-requests;frame-ancestors 'self' *.bytedance.net *.snssdk.com shiqu.cn *.shiqu.cn zhan.vivo.com wukong.vivo.com.cn *.feishuapp.cn *.toutiao.com *.bytescm.com *.jiyunhudong.com *.bytedance.com *.feishu.cn;report-uri https://mon.zijieapi.com/log/sentry/v2/api/slardar/main/?ev_type=csp&bid=toutiao_web_pc;report-to main-endpoint 1
object-src 'none';base-uri 'self';script-src 'nonce-qInmhSAmUrbNKMmiQmW10g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://challenges.cloudflare.com/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; 1
child-src 'self' https://*.qualified.com; default-src 'self'; frame-src 'self' https://9628652.fls.doubleclick.net https://td.doubleclick.net https://js.driftt.com https://*.qualified.com https://a8447815042.cdn-pci.optimizely.com https://ct.pinterest.com https://tealium-f.squarecdn.com; worker-src 'self' blob:; connect-src 'self' https://assets.ctfassets.net https://api.broadway.squareup.com https://campaign-hub-production-f.squarecdn.com https://api.squareup.com/v1/cdp/batch https://api.squarestagingexternal.com/v1/cdp/batch https://api.squarestagingexternal.com https://api.squareup.com https://api.squareupstaging.com *.contentsquare.net https://capi.squareup.com https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com https://stats.g.doubleclick.net https://facebook.com https://www.facebook.com https://googleads.g.doubleclick.net http://www.google-analytics.com https://www.google-analytics.com https://google.com https://www.google.com https://us-central1-sq-sgtm-prod.cloudfunctions.net https://www.googletagmanager.com http://images.ctfassets.net https://images.ctfassets.net http://424-iab-218.mktoresp.com https://424-iab-218.mktoresp.com https://xms2-marketo.beta.stage.sqprod.co https://424-iab-218.mktoutil.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://logx.optimizely.com https://ct.pinterest.com https://conversions-config.reddit.com https://pixel-config.reddit.com https://www.redditstatic.com *.ingest.us.sentry.io *.6sc.co https://api.sprig.com https://squareupstaging.com https://visitor-scoring-new.marketlinc.com https://api.chilipiper.com https://squareinc-sandbox.chilipiper.com https://squareinc.chilipiper.com https://www.workwithsquare.com wss://*.qualified.com https://*.qualified.com https://pw-renderer-production-c.squarecdn.com localhost:*; font-src 'self' https://cash-f.squarecdn.com https://square-fonts-production-f.squarecdn.com; img-src 'self' data: blob: https://ib.adnxs.com https://assets.ctfassets.net https://cdn.blisspointmedia.com https://campaign-hub-production-f.squarecdn.com *.contentsquare.net https://ad.doubleclick.net https://facebook.com https://www.facebook.com https://google.com https://www.google.com https://adservice.google.com https://googleads.g.doubleclick.net http://www.google-analytics.com https://www.google-analytics.com https://*.g.doubleclick.net https://www.googletagmanager.com http://images.ctfassets.net https://images.ctfassets.net https://px.ads.linkedin.com https://cdn.cookielaw.org https://pixel.pointmediatracker.com https://alb.reddit.com *.6sc.co https://api.squareup.com https://api.squareupstaging.com https://insight.adsrvr.org https://match.adsrvr.org https://*.qualified.com https://pw-renderer-production-c.squarecdn.com; manifest-src 'self' https://pw-renderer-production-c.squarecdn.com; media-src 'self' mediastream: https://assets.ctfassets.net https://js.driftt.com http://videos.ctfassets.net https://videos.ctfassets.net https://*.qualified.com; script-src 'self' *.contentsquare.net https://www.datadoghq-browser-agent.com https://js.driftt.com https://*.qualified.com https://connect.facebook.net https://www.googleadservices.com https://googleads.g.doubleclick.net http://www.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com https://campaign-hub-production-f.squarecdn.com https://lift-ai-js.marketlinc.com https://martech-development-c.squarecdn.com https://martech-production-c.squarecdn.com https://martech-staging-c.squarecdn.com http://munchkin.marketo.net https://munchkin.marketo.net https://cdn.cookielaw.org https://a8447815042.cdn-pci.optimizely.com https://s.pinimg.com https://ct.pinterest.com https://pw-renderer-production-c.squarecdn.com https://pw-renderer-staging-c.squarecdn.com https://pwt-production-c.squarecdn.com https://pwt-staging-c.squarecdn.com https://sales-bridge-production-c.squarecdn.com https://sales-bridge-staging-c.squarecdn.com https://squareinc-sandbox.chilipiper.com https://squareinc.chilipiper.com https://www.workwithsquare.com https://www.redditstatic.com *.6sc.co https://cdn.sprig.com https://xms-production-f.squarecdn.com https://www.youtube.com https://pw-renderer-production-c.squarecdn.com 'nonce-2AT8hVibrdwtESR8EwA/VQ=='; style-src 'self' https://square-fonts-production-f.squarecdn.com https://sales-bridge-production-c.squarecdn.com https://sales-bridge-staging-c.squarecdn.com 'unsafe-inline' https://*.qualified.com https://pw-renderer-production-c.squarecdn.com; frame-ancestors 'self' https://app.contentful.com; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubd9af00759e65a48ba7ee3ff1dfa4260b&dd-evp-origin=content-security-policy&ddsource=csp-report; report-to browser-intake-datadoghq 1
default-src 'self'; script-src 'nonce-BrodwPVptCiltPvHLaXmqQ==' 'strict-dynamic' 'self' 'wasm-unsafe-eval' https://a-cdn.anthropic.com https://assets.claude.ai https://www.googletagmanager.com https://js.hsforms.net https://embed.typeform.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://cdn.sanity.io https://assets.claude.com https://assets-staging.claude.com https://i.ytimg.com https://forms.hsforms.com https://forms-na1.hsforms.com; font-src 'self' https://fonts.gstatic.com; media-src 'self' https://cdn.sanity.io https://assets.claude.com https://assets-staging.claude.com https://assets.claude.ai; frame-src https://www.youtube-nocookie.com https://form.typeform.com https://*.hsforms.com https://*.hubspot.com https://a.claude.com https://assets.claude.ai; connect-src 'self' https://a-api.anthropic.com https://a-cdn.anthropic.com https://api.anthropic.com https://cdn.sanity.io https://assets.claude.com https://assets-staging.claude.com https://*.api.sanity.io https://*.apicdn.sanity.io wss://*.api.sanity.io https://content-pantry.ant.dev https://links.iterable.com https://claude.ai/api/billing/subscription_pricing https://forms.hsforms.com https://forms-na1.hsforms.com https://www.googletagmanager.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https://*.hsforms.com https://links.iterable.com; report-uri /api/csp-report; report-to csp 1
object-src 'none';base-uri 'self';script-src 'nonce-9H2NzzSqQsEGGCaSZLN6SA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https://cdn.ampproject.org https://snap.licdn.com https://www.youtube.com *.youtube.com *.google-analytics.com https://www.googletagmanager.com https://consent.bumble.com *.typeform.com *.doubleclick.net *.taboola.com; script-src 'self' 'unsafe-inline' 'report-sample' 'nonce-8T49NmAo48ENAKV841B5kA==' https://cdn.ampproject.org https://snap.licdn.com https://www.youtube.com *.youtube.com *.google-analytics.com https://www.googletagmanager.com https://consent.bumble.com *.typeform.com *.doubleclick.net *.taboola.com; style-src 'self' 'unsafe-inline' *.typeform.com; connect-src 'self' https://cdn.ampproject.org https://consent.bumble.com https://www.googletagmanager.com *.google-analytics.com *.analytics.google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com/pagead *.googlesyndication.com *.typeform.com *.typeformcdn.com; child-src 'self'; font-src 'self' data:; manifest-src 'self'; base-uri 'self'; frame-src 'self' https://cdn.ampproject.org https://snap.licdn.com https://www.youtube.com *.youtube.com *.google-analytics.com https://www.googletagmanager.com https://consent.bumble.com *.typeform.com *.doubleclick.net *.taboola.com; img-src * data: blob: www.googletagmanager.com; media-src * data: blob:; report-uri /jss/csp_report.phtml?token=bumble_team_site&env=production; 1
object-src 'none';base-uri 'self';script-src 'nonce-tbdoJeZTnfL65yzf0MYrWA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-GDTIOYI8QkS2dlFERbLivg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-91zxpNAoJZAy97fZiRrqRQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-hx30L-580YVKv5jlgOZLzw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-V6ImUyrl3bgEWhlMLaQWlg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-bn0WRYeEneNOFoUAExCssw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https://pref.docusign.com https://apps.docusign.com https://events.docusign.com https://momentum.docusign.com https://dsucustomers.docusign.com https://account.docusign.com https://account-d.docusign.com https://ecom.docusign.com https://support.docusign.com https://developers.docusign.com https://community.docusign.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://p.mdb.tools https://identity.mdb.tools https://sierra.chat:443 https://sierra.chat https://*.cloudfront.net https://cdn.jsdelivr.net https://cdn.prod.website-files.com https://cdnjs.cloudflare.com https://unpkg.com https://cdn4.mxpnl.com https://s.yimg.com https://tags.srv.stackadapt.com:443 https://cdn.yellowmessenger.com https://docusign-api.arkoselabs.com https://trk.techtarget.com https://cdn.optimizely.com https://www.googletagmanager.com https://players.brightcove.net https://cdn3.optimizely.com https://cdn.cookielaw.org https://vjs.zencdn.net https://cdn.sift.com https://tags.srv.stackadapt.com https://js.driftt.com https://connect.facebook.net https://snap.licdn.com https://bat.bing.com https://tag.demandbase.com https://www.knotch-cdn.com https://js.adsrvr.org https://rs.fullstory.com https://edge.fullstory.com https://googleads.g.doubleclick.net https://protect.docusign.net https://protect-d.docusign.net https://app.gatedcontent.com https://img.en25.com https://track.docusign.com https://www.google.com https://www.gstatic.com https://browser.sentry-cdn.com https://app.guideflow.com https://zn0oqzbba3l7g5ph4-docusign.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://80e3c780877f.cdn4.forter.com https://sadmin.brightcove.com https://platform.twitter.com https://bam.nr-data.net https://static.ads-twitter.com https://www.redditstatic.com https://chat.docusign.net https://sdk.inbenta.io https://apps.usw2.pure.cloud https://api-cdn.usw2.pure.cloud https://cdn.taboola.com https://trc.taboola.com https://www.influ2.com https://t.influ2.com/ https://hermes.docusign.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' blob: https://sierra.chat:443 https://sierra.chat https://*.cloudfront.net https://cdn.jsdelivr.net https://cdn.prod.website-files.com https://cdnjs.cloudflare.com https://cdn4.mxpnl.com https://s.yimg.com https://tags.srv.stackadapt.com:443 https://cdn.yellowmessenger.com https://docusign-api.arkoselabs.com https://trk.techtarget.com https://cdn.optimizely.com https://www.googletagmanager.com https://players.brightcove.net https://cdn3.optimizely.com https://cdn.cookielaw.org https://vjs.zencdn.net https://cdn.sift.com https://tags.srv.stackadapt.com https://tags.srv.stackadapt.com:443/events.js https://tags.srv.stackadapt.com/events.js https://js.driftt.com https://connect.facebook.net https://snap.licdn.com https://bat.bing.com https://tag.demandbase.com https://www.knotch-cdn.com https://js.adsrvr.org https://rs.fullstory.com https://edge.fullstory.com https://googleads.g.doubleclick.net https://protect.docusign.net https://protect-d.docusign.net https://app.gatedcontent.com https://img.en25.com https://track.docusign.com https://www.google.com https://www.gstatic.com https://browser.sentry-cdn.com https://app.guideflow.com https://zn0oqzbba3l7g5ph4-docusign.siteintercept.qualtrics.com https://siteintercept.qualtrics.com https://80e3c780877f.cdn4.forter.com https://sadmin.brightcove.com https://platform.twitter.com https://bam.nr-data.net https://static.ads-twitter.com https://www.redditstatic.com https://chat.docusign.net https://sdk.inbenta.io https://apps.usw2.pure.cloud https://api-cdn.usw2.pure.cloud https://cdn.taboola.com https://trc.taboola.com https://www.influ2.com https://t.influ2.com/ https://hermes.docusign.com https://identity.mdb.tools https://p.mdb.tools https://connect.facebook.net/en_US/fbevents.js https://cdn.yellowmessenger.com/plugin/widget-v2/latest/dist/main.min.js https://cdn.taboola.com/libtrc/unip/1790969/tfa.js https://cdn.sift.com/s.js https://bat.bing.com/bat.js https://www.influ2.com/tracker; style-src 'self' 'unsafe-inline' https://sierra.chat:443 https://sierra.chat https://cdn.prod.website-files.com https://cdn.yellowmessenger.com https://tags.srv.stackadapt.com https://app.gatedcontent.com https://www.gstatic.com https://app.guideflow.com https://sdk.inbenta.io; img-src 'self' data: blob: https://assets-global.website-files.com https://*.cloudfront.net https://sp.analytics.yahoo.com https://ecom.docusign.com https://cdn.prod.website-files.com https://connect.facebook.net https://r4-ym-uploads.s3-us-west-2.amazonaws.com https://r4.app.yellow.ai https://cdn.yellowmessenger.com https://www.google.com.ar https://www.google.co.kr https://www.google.co.nz https://www.google.com.hk https://www.google.com.pe https://translate.google.com https://www.google.co.id https://www.google.co.cr https://www.google.com.my https://www.google.cl https://www.googleadservices.com https://www.google.de https://www.google.it https://www.google.co.jp https://www.google.co.za https://www.google.es https://www.google.com.sg https://www.google.com.co https://www.google.co.uk https://www.google.co.in https://www.google.nl https://www.google.com.ph https://www.google.com.au https://www.google.ca https://www.google.com.br https://www.google.com https://www.google.com.mx https://www.google.fr https://secure.adnxs.com https://attr.ml-api.io https://attr-td.ml-api.io https://images.ctfassets.net https://cdn.bfldr.com https://metrics.brightcove.com https://cf-images.us-east-1.prod.boltdns.net https://hexagon-analytics.com https://s.ml-attr.com https://cdn.cookielaw.org https://id.rlcdn.com https://px.ads.linkedin.com https://frontdoor.knotch.it https://dsum-sec.casalemedia.com https://partners.tremorhub.com https://pixel.rubiconproject.com https://www.facebook.com https://segments.company-target.com https://www.linkedin.com https://px4.ads.linkedin.com https://bat.bing.com https://track.docusign.com https://www.gstatic.com https://storage.googleapis.com https://imagedelivery.net https://app.gatedcontent.com https://images.esign.docusign.com https://www.googletagmanager.com https://t.co https://analytics.twitter.com https://analytics.google.com https://alb.reddit.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://img-taboola.com https://trc.taboola.com https://t.influ2.com https://i.liadm.com https://match.adsrvr.org https://r4.app.yellow.ai; font-src 'self' data: https://sierra.chat:443 https://sierra.chat https://cdn.prod.website-files.com https://images.simplycodes.com https://stylesheets.pixiebrix.com https://cdn.jsdelivr.net https://cdn.yellowmessenger.com https://fonts.gstatic.com https://docucdn-a.akamaihd.net https://cdn.inbenta.io https://use.typekit.net https://api-cdn.usw2.pure.cloud https://api-cdn.usw2.pure.cloud; connect-src 'self' https://api.iterable.com https://api.sitelytics.tech https://p.mdb.tools https://sierra.chat:443 https://sierra.chat https://api-js.mixpanel.com https://api.mixpanel.com https://cdn.prod.website-files.com https://s.yimg.com https://cdn4.forter.com https://a9b3895076a445bdaf9a9aada0ab7287-80e3c780877f.cdn.forter.com https://31ff10b411e04c66a144663da6b34da5-80e3c780877f.cdn.forter.com https://3dcb810e88774d429c6dba71bbee8c34-80e3c780877f.cdn.forter.com https://tag.demandbase.com https://cdn.yellowmessenger.com https://autocomplete.demandbase.com https://segments.company-target.com https://ibc-flow.techtarget.com https://ingesteer.services-prod.nsvcs.net https://www.googletagmanager.com https://www.google.com.co https://www.google.com.mx https://www.google.co.uk https://www.google.es https://www.google.com.br https://www.google.com.sg https://www.google.com.in https://www.google.com.ph https://www.google.ca https://www.google.com.au https://rum.optimizely.com wss://r4.cloud.yellow.ai https://cdn8.forter.com https://12e748c623734740a09ab181abb7a3a1-80e3c780877f.cdn.forter.com https://cdn3.forter.com https://r4.cloud.yellow.ai https://siteperformancetest.net https://wtp.siteperformancetest.net https://privacyportal.onetrust.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://telemetry-s.docusign.net https://telemetry.dev.docusign.net https://www.facebook.com https://www.google-analytics.com https://manifest.prod.boltdns.net https://frontdoor.knotch.it https://bat.bing.com https://bat.bing.net https://ingest.insights.ninetailed.co https://cdn.jsdelivr.net https://unpkg.com https://assets.ctfassets.net https://edge.api.brightcove.com https://house-fastly-signed-us-east-1-prod.brightcovecdn.com https://cdn.cookielaw.org https://telemetry.docusign.net https://geolocation.onetrust.com https://www.google.com https://experience.ninetailed.co https://edge.fullstory.com https://tags.srv.stackadapt.com https://api.company-target.com https://configs.knotch.com https://px.ads.linkedin.com https://rs.fullstory.com https://tag-logger.demandbase.com https://carddealer.knotch.com https://analytics.google.com https://insight.adsrvr.org https://logx.optimizely.com https://app.gatedcontent.com https://guideflow-api-eu-5cv4uu2lra-ew.a.run.app https://protect.docusign.net https://protect-d.docusign.net https://s566810826.t.eloqua.com https://insights.gatedcontent.com https://siteintercept.qualtrics.com https://cdn0.forter.com https://a.docusign.com https://datacollector.docusign.com https://datacollector-demo.docusign.com https://docusign-api.arkoselabs.com https://account.docusign.com https://account-d.docusign.com https://geo.docusign.com https://syndication.twitter.com https://pixel-config.reddit.com https://www.redditstatic.com https://www.googleadservices.com https://api.inbenta.io https://api-gcu1.inbenta.io https://apps.usw2.pure.cloud https://api-cdn.usw2.pure.cloud https://psb.taboola.com https://pips.taboola.com https://cds.taboola.com https://trc-events.taboola.com https://t.influ2.com https://www.influ2.com; frame-src 'self' https://www.youtube.com https://players.brightcove.net https://js.driftt.com https://www.googletagmanager.com https://s.company-target.com https://insight.adsrvr.org https://match.adsrvr.org https://pixel.rubiconproject.com https://cm.g.doubleclick.net https://ib.adnxs.com https://td.doubleclick.net https://www.google.com https://app.guideflow.com https://platform.twitter.com https://chat.docusign.net https://a275532918.cdn.optimizely.com https://app.netlify.com https://apps.usw2.pure.cloud https://api-cdn.usw2.pure.cloud https://hermes.docusign.com https://tsdtocl.com https://docusign-api.arkoselabs.com; media-src 'self' blob: https://manifest.prod.boltdns.net https://house-fastly-signed-us-east-1-prod.brightcovecdn.com https://videos.ctfassets.net https://house-fastly-signed-us-east-1-prod.brightcovecdn.com https://house-fastly-signed-us-east-1-prod.brightcovecdn.com:443 https://manifest.prod.boltdns.net; worker-src 'self' blob:; base-uri 'self'; form-action 'self' https://trial.docusign.com https://ecomservices.docusign.com https://na.account.docusign.com https://app.gatedcontent.com https://datacollector.docusign.com https://datacollector-demo.docusign.com https://docusign-api.arkoselabs.com https://account.docusign.com https://account-d.docusign.com https://protect.docusign.net https://protect-d.docusign.net https://track.docusign.com; object-src 'self' https://players.brightcove.net; report-to csp-endpoint 1
script-src 'nonce-5349915b10dd4ff998849d7773b385ea' 'strict-dynamic' 'wasm-unsafe-eval' 'unsafe-eval' *.bdxiguastatic.com *.bytescm.com *.bytetos.com *.toutiao.com *.ibytedapm.com bdxiguastatic.com *.bytegoofy.com;img-src blob: data: *.douyinstatic.com *.toutiaoimg.com *.bdxiguastatic.com *.bdxiguaimg.com *.bytexservice.com *.bytednsdoc.com *.douyinpic.com *.byteeffecttos.com *.byteacctimg.com *.byteimg.com *.bytecdn.cn http: *.ixigua.com *.itoutiaoimg.com *.toutiaostatic.com s.360.cn *.bytescm.com *.byted.org pos.baidu.com www.gstatic.com jonypractic.net wx.qlogo.cn;report-to slardar-endpoint;style-src blob: 'self' pwm-image.trendmicro.com www.gstatic.com cdn.jsdelivr.net plugin.newmorehot.com *.bytedance.net lib.baomitu.com *.bdxiguastatic.com 'unsafe-inline';manifest-src *.bytednsdoc.com;frame-src wo.laiwoshop.com pwm-image.trendmicro.com a.safen100.com c.safen110.com m.youtube.com code.woqrcode.com api.xiaoduis.com *.ixigua.com cdn.hunong.xyz cha.chaweather.com cx.chacizus.com v2.maoyinews.xyz *.summer5188.com tj.shshinfo.com www.mgtv.com vip.zhanyangsh.cn; 1
object-src 'none';base-uri 'self';script-src 'nonce-kdHFVf3OBtaQDybcKjULeg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-rb6ltlayRW98HzmzYdxA9w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-m5VMo-caJi_DkoIZ4jsyrg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-X5fxdvF_8wZmOq_0posqKg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-H4Q4wa-b_1XoEtCRD4ChTA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'none'; connect-src 'none'; report-uri https://api.cian.ru/sopr-experiments/v1/csp-reports/; report-to csp-reports 1
default-src * 'unsafe-eval' 'unsafe-inline' blob: data:;frame-src 'self' sinaweibo: weibo.com *.weibo.com weibo.cn *.weibo.cn sina.com.cn *.sina.com.cn sina.cn *.sina.cn *.sinaimg.cn sinanews: sinanewslite: intent: se5bed38c567feb2a: sb5750862870e1cc2: sdc77698a60e45368: sb2623a3919ed77d3: s3d4cfbed31875e1c: sc876cbd9ae34e814: sdf08f19582289581: sc640c3792845ba3e: se8525a4dbfaa192b: sb5261983836bde16: sinablog: sinanewapmwebview: sinanewsdirect: sinafinance:; script-src 'self' 'unsafe-inline' 'unsafe-eval' weibo.com *.weibo.com weibo.cn *.weibo.cn sina.com.cn *.sina.com.cn sina.cn *.sina.cn *.sinaimg.cn *.qchannel03.cn *.qihucdn.com *.qhres.com *.sinajs.cn *.leju.com *.qq.com qzonestyle.gtimg.cn; report-uri https://logger.sina.cn/report; 1
default-src 'self'; script-src 'self' 'strict-dynamic' 'nonce-wFTbfyn7m9esdFuFAeib8w=='; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://remssssfmrgmyzqnpeas.supabase.co https://*.supabase.co https://owasp.org https://dependencytrack.org https://assets.ot.digital https://images.unsplash.com https://i.ytimg.com https://img.youtube.com data:; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://remssssfmrgmyzqnpeas.supabase.co wss://remssssfmrgmyzqnpeas.supabase.co; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://calendar.google.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; report-uri /api/csp-report; report-to csp-endpoint 1
object-src 'none';base-uri 'self';script-src 'nonce-0ibleZ5SZoeU3GZYtkFf2g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-wdYpf9E2aNMVAVaG3_VMxg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-z9Fpyu0Zn6f0E1HSe1Rs5w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' hubspot.mintlify.dev app.hubspot.com cdn-3.convertexperiments.com cdnjs.cloudflare.com connect.facebook.net cta-service-cms2.hubspot.com js.hsforms.net js.hs-analytics.net js.hs-banner.com js.hsleadflows.net js.hubspotfeedback.com js.usemessages.com platform.twitter.com play.vidyard.com run.pstmn.io script.crazyegg.com script.hotjar.com static.hotjar.com static.hsappstatic.net use.typekit.net www.googletagmanager.com www.google-analytics.com www.hubspot.com api.s10h.io 'strict-dynamic' 'nonce-qFafjexhbkCFfnL2dmfbRQ=='; report-uri https://send.hsbrowserreports.com/csp/report 1
script-src 'self'; object-src 'none'; base-uri 'self'; script-src-attr 'none' 1
object-src 'none';base-uri 'self';script-src 'nonce-LhnrdCeWHkodBRcoAP4mcQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; base-uri 'self'; font-src 'self' fonts.gstatic.com *.atlassian.com data:; worker-src blob:; media-src 'self' api.media.atlassian.com *.atlassian.com; img-src data: blob: 'self' *.badgen.net *.youtube.com atlassian.wpengine.netdna-cdn.com global.discourse-cdn.com img.shields.io *.atlassian.net *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat www.gstatic.com *.wp.com cdn.cookielaw.org *.clicktale.net *.doubleclick.net https://googleads.g.doubleclick.net https://px.ads.linkedin.com images.ctfassets.net *.public.atl-paas.net trello.com trello-backgrounds.s3.amazonaws.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.google.co.in *.google.com *.atlassian.com *.gravatar.com; frame-src 'self' *.atlassian.com *.atlassian.net *.atl-paas.net *.googletagmanager.com player.vimeo.com trello.com www.youtube.com www.figma.com; connect-src 'self' *.googletagmanager.com *.algolianet.com *.algolia.net *.clicktale.net *.launchdarkly.com *.trello.com *.doubleclick.net *.qualtrics.com *.onetrust.com *.sentry.io cdn.segment.com api.segment.io www.google-analytics.com https://px.ads.linkedin.com cdn.cookielaw.org *.atlassian.com *.atlassian.net *.algolia.io *.google.com *.staging.atl-paas.net *.jira-dev.com; report-uri https://web-security-reports.services.atlassian.com/csp-report/dac; object-src 'none'; style-src 'self' *.trellocdn.com *.atlassian.com 'unsafe-inline'; script-src 'nonce-KriCZ70+e0YggQCPV4h16wqvOylwYmNn8RdZ5mURVQo=' 'self' 'sha256-Nt9ereHaxV04RZ20OLtdR3uuFr1X0/Pbt5KbGls/wXg=' 'sha256-tOj+/hncGB+HoNjG4vZ22kFWnTZFaTLrsJFU8r20y1w=' https://www.googleadservices.com https://player.vimeo.com/api/player.js *.segment.com *.clicktale.net mscgen.js.org *.qualtrics.com *.trellocdn.com *.atlassian.com *.atlassian.net www.googletagmanager.com www.google-analytics.com https://snap.licdn.com https://cdn.cookielaw.org https://cdn.jsdelivr.net/npm/search-insights@2.2.1 https://run.pstmn.io/button.js *.atl-paas.net https://srm.bf.contentsquare.net/exist *.jira-dev.com 1
object-src 'none';base-uri 'self';script-src 'nonce-buJGlDdQtxUB5q-ht0TCDQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-9X9FnU6EZW3wscWjX-tKAQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-PTDSPLjs7UI54uTfLSMsgA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-DxczEe48yImOy6KIlxgJEw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-BRfTPC_-kXMfOeA3iQsFug' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-f6hjroZa9vNc55OBBWM5NA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-80V1aT4thDRQSX74nlgB0w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-0dgK912YzSykWHRBjlFMuQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-sP8sxM8w9Mt9-zey9ryKFA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-AcxEfr1QjiqY2342TjLQLA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-DjiTQs_Fm3LdqoMANVKrDQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-WZSwf52WiKvyHhDbWvdB9w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-XKEBoyTK8Vh5k1TC4UwWBQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-bjENdxi7YH84xwkr5qLTTA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-r096Q8Ni9zCAMQUmeU6wRQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/chrome 1
object-src 'none';base-uri 'self';script-src 'nonce-A3vTjXTpuRs687ugEIrDWQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-1pGwVRhWB4CmnbkGGt75uA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' https://*.thenextweb.com https://*.thenextweb.dev https://*.tnwcdn.com https://js-de.sentry-cdn.com https://browser.sentry-cdn.com https://js.hsforms.net https://static.hsappstatic.net https://eu-assets.i.posthog.com https://www.googletagmanager.com https://www.google.com https://google.com https://www.gstatic.com https://static.doubleclick.net https://www.youtube.com https://www.youtube-nocookie.com https://calendly.com https://assets.calendly.com https://www.dianomi.com 'sha256-pAztqgP7wkPyjH9LI/HDmEr2uwXRkPRbORS3mr62IBs=' 'sha256-BOc+EUWvKE244xsk5ZSrxeAQwoWjbRZ2gzui5O6ZmnU=' 'sha256-5Iz2KpURra7fWow7yj8E1J5kMQ7y7oa0MhVWx16Y5jA=' 'sha256-9n1bBriMs/34JGF2W25pbRLZmK0h/2oQGRiLeLdkpt0=' 'sha256-/ZAw7ndnVecWlRWVEBH09KthRlA1pgi8F8WyHuRjpN0=' 'sha256-OAmAV7HOqOsK8l6iOhVihw7kRMSY5ohR064wkzimUhE=' 'sha384-t3FuYrqkqyWXQZCfcIcRrEuo0t5Ut8YNEPyPBRJenEb5x+Veazc6GQkk7ciTiBsa' 'sha384-oc4DBnHftb+RCtSyf7JfmhaXy5MeQfjrpGaeDjkxPljqE7FJJLY2AlVF+zGfIkzi' 'sha384-+KhPyMVvWTVUxIljq9ZTs4pcdCLwNg8LDLJrCta6UYvsSE7yGLLo6pXbs0k3j0RF'; style-src 'self' https://*.thenextweb.com https://*.thenextweb.dev https://*.tnwcdn.com https://use.fontawesome.com 'sha256-ad3YClbj9yq0hsUnER85BQMGC0XZJ3ITeHa1Gcm+jxE=' 'sha384-t3FuYrqkqyWXQZCfcIcRrEuo0t5Ut8YNEPyPBRJenEb5x+Veazc6GQkk7ciTiBsa' 'sha384-oc4DBnHftb+RCtSyf7JfmhaXy5MeQfjrpGaeDjkxPljqE7FJJLY2AlVF+zGfIkzi' 'sha384-+KhPyMVvWTVUxIljq9ZTs4pcdCLwNg8LDLJrCta6UYvsSE7yGLLo6pXbs0k3j0RF'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob: https://*.thenextweb.com https://*.thenextweb.dev https://*.tnwcdn.com https://i.ytimg.com https://www.googletagmanager.com https://www.google-analytics.com https://*.hubspot.com https://*.hubspot-logos.com https://*.hsforms.com https://*.calendly.com; font-src 'self' data: https://*.thenextweb.com https://*.thenextweb.dev https://*.tnwcdn.com https://use.fontawesome.com; manifest-src 'self' https://*.thenextweb.com https://*.thenextweb.dev https://*.tnwcdn.com; connect-src 'self' https://*.thenextweb.com https://*.thenextweb.dev https://*.tnwcdn.com https://*.sentry.io https://*.ingest.sentry.io https://eu.i.posthog.com https://eu-assets.i.posthog.com https://www.googletagmanager.com https://*.google-analytics.com https://region1.google-analytics.com https://*.hubspot.com https://*.hsforms.com https://*.hsforms.net https://googleads.g.doubleclick.net https://jnn-pa.googleapis.com https://www.google.com https://google.com https://www.youtube.com https://calendly.com https://*.calendly.com; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://www.googletagmanager.com https://meetings.hubspot.com https://*.hsforms.net https://*.hubspot.com https://www.google.com https://google.com https://calendly.com https://*.calendly.com; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'self'; report-uri https://o4511545378996224.ingest.de.sentry.io/api/4511545468321872/security/?sentry_key=d52df69e456a8115c7e7cc72cb816a63 1
object-src 'none';base-uri 'self';script-src 'nonce-FPslEs4WyDeHrBuB6YgKng' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.stripe.com *.braintreegateway.com *.googleadservices.com *.googletagservices.com *.googleapis.com cdnjs.cloudflare.com unpkg.com cdn.datatables.net connect.facebook.net *.google.com *.recaptcha.net recaptcha.net *.marinetraffic.com *.googletagmanager.com *.wootric.com *.segment.com *.hotjar.com *.licdn.com *.inmobi.com *.profitwell.com *.kpler.com *.intercom.io *.intercomcdn.com *.doubleclick.net *.hs-scripts.com *.hsadspixel.net *.hubspot.com *.hs-banner.com *.hs-analytics.net static.cloudflareinsights.com cdn.dreamdata.cloud *.gstatic.com; style-src 'self' 'unsafe-inline' *.googleapis.com unpkg.com netdna.bootstrapcdn.com cdn.datatables.net *.kpler.com *.gstatic.com; img-src 'self' data: blob: https:; media-src 'self' data: *.intercomcdn.com; worker-src 'self' blob:; connect-src 'self' https: wss://*.marinetraffic.com wss://*.intercom.io wss://*.hotjar.com; font-src 'self' data: *.marinetraffic.com *.gstatic.com netdna.bootstrapcdn.com *.intercomcdn.com; frame-src 'self' *.google.com *.googletagmanager.com *.stripe.com *.hotjar.com *.intercom.io *.facebook.com recaptcha.net; object-src 'none'; base-uri 'self'; form-action 'self' *.facebook.com; report-uri /csp-report; 1
object-src 'none';base-uri 'self';script-src 'nonce-vkWQA4EdVULS0CP7boe4Ww' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-jsTe85nsDf1dqW69f41tJQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' blob:  https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com; frame-src 'self' https://*.noxiaohao.com https://telegram.org https://*.bitget.com https://accounts.google.com https://oauth.telegram.org https://sgtm.btsgtm.com ; script-src 'self' 'nonce-MvCDXy4q8hIbFdnzY4j6NA==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh/v3RIRuG3kMikr5iha+7P/0TN/GNA=' https://*.noxiaohao.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com https://accounts.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://play.google.com https://analytics.google.com https://fonts.gstatic.com https://telegram.org https://oauth.telegram.org https://*.geetest.com https://*.geevisit.com https://sgtm.btsgtm.com; connect-src 'self' wss: https://stats.g.doubleclick.net https://analytics.google.com https://www.google.com wss://stream.bitget.cloud https://*.noxiaohao.com wss://*.noxiaohao.com wss://*.bitget.com https://www.turingfraud.net https://play.google.com https://accounts.google.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com https://telegram.org https://oauth.telegram.org https://static.geetest.com https://static.geevisit.com https://sgtm.btsgtm.com ; worker-src 'self' blob:; img-src 'self' data: blob: https://www.googletagmanager.com https://img.bgbstatic.com https://*.bgstatic.com https://img.bitgetimg.com https://img.gurenla.com https://*.bgbstatic.com https://lh3.googleusercontent.com https://static.geetest.com https://static.geevisit.com https://static-web.jjdsn.vip https://cdn.bitkeep.vip https://www.google.co.jp https://bin.wangsustatic.com https://sgtm.btsgtm.com https://analytics.google.com https://stats.g.doubleclick.net ; style-src 'self' 'unsafe-inline' https://static.geetest.com https://static.geevisit.com https://accounts.google.com https://fonts.googleapis.com https://static.bgbstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com; font-src 'self' data: https://static.geetest.com https://static.geevisit.com https://fonts.gstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri /v1/buried/log/cspSecurity /v1/monitor/csp?appId=d4b6df7d; 1
object-src 'none';base-uri 'self';script-src 'nonce-O7GZd9zf3kDN2z6inZ1YZw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-4H6QhnSsp8y5FZyXsO1Lzg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-ZrJuTiZpAPp0G23fmwiZ9g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-76BLY33Zt1O0FA_47lAfyQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-svo_xQMDJm_edrLLSir2vg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-kWEacJbxSFYKyXx85j8zdw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-FybMUALjeNmv93a6jC5cig' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-6g3iKiwe5WK_cY7DcqPKIA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-lt5Axh3mRXGTkAhpjBEeow' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-KjC3FIVgTmLHMxJ8bjANjg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-WFWZASEPg--c-rgTbUevBQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-_hne34RLhpUs8oC-Ww9jAQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-X6u6acHD6DZhk94jgBIJIw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-Z2g-jptwsN3xo7XHNQnQ1A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-jnf6spY4a0twIRbQBqV9lw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' data: 'unsafe-inline' 'unsafe-eval' blob: https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.doubleclick.net https://*.googleadservices.com https://www.youtube.com https://www.googletagmanager.com https://*.hubspot.com https://*.hubapi.com https://*.hs-analytics.net https://*.hscollectedforms.net https://*.hsadspixel.net https://*.hs-banner.com https://*.hs-scripts.com https://*.hsforms.com https://*.hsappstatic.net https://js.hscta.net https://*.usemessages.com https://*.hubspot.net https://*.zdassets.com https://*.zendesk.com wss://*.zendesk.com https://*.cloudinary.com https://*.amazonaws.com https://*.appdome.com; worker-src 'self' blob:; frame-src https://*.youtube.com https://www.googletagmanager.com https://*.google.com https://*.doubleclick.net; img-src 'self' data: https: 1
object-src 'none';base-uri 'self';script-src 'nonce-YPysNI5HePKQq_G7OqZcVA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-xmnf7GyqTkKqIVHa1hRStQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-1rJPWVoEwn0hPiatgMc3XA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.byted-static.com *.bytedapm.com *.bytegoofy.com *.bytescm.com *.feishu-boe.cn *.feishu.cn *.feishucdn.com *.framer.com *.hubspot.com *.ibytedapm.com *.ibytedtos.com *.larksuite-boe.com *.larksuite.com *.larksuitecdn.com *.ocic-static.com *.snssdk.com *.yahoo.co.jp https://framer.com https://accounts.google.com https://app.factors.ai https://bat.bing.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://framerusercontent.com https://googleads.g.doubleclick.net https://googletagmanager.com https://hm.baidu.com https://js-na1.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.intercomcdn.com https://s.yimg.jp https://scout-cdn.salesloft.com https://sf16-website-login.neutral.ttwstatic.com https://snap.licdn.com https://static.ads-twitter.com https://widget.intercom.io https://www.google-analytics.com https://www.googleoptimize.com https://www.googletagmanager.com https://zz.bdstatic.com; worker-src 'self' blob:; report-to csp-endpoint 1
script-src 'nonce-UtJI988u4CVqdjkoQVhL1w==' 'strict-dynamic' 'unsafe-eval' 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; report-uri /_/csp-report 1
default-src 'self' 'unsafe-inline' *.epfl.ch; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.epfl.ch https://*.cast.switch.ch https://ajax.googleapis.com https://cdnjs.cloudflare.com https://connect.facebook.net https://platform.twitter.com https://player.vimeo.com https://www.google-analytics.com https://www.googletagmanager.com https://www.instagram.com https://www.youtube.com; object-src 'none'; connect-src 'self' *.epfl.ch https://*.cast.switch.ch https://*.cloudfront.net https://*.google-analytics.com https://api.cdnjs.com https://stats.g.doubleclick.net https://www.google-analytics.com; frame-src 'self' *.epfl.ch https://api.cast.switch.ch https://datawrapper.dwcdn.net https://platform.twitter.com https://player.vimeo.com https://www.instagram.com https://www.youtube.com; style-src-elem 'self' 'unsafe-inline' *.epfl.ch https://fonts.googleapis.com; font-src 'self' data: *.epfl.ch https://fonts.gstatic.com; media-src 'self' data: *.epfl.ch https://*.cloudfront.net; img-src * data: https://s.w.org https://syndication.twitter.com https://www.google-analytics.com; worker-src 'none' blob:; report-uri https://report-uri.epfl.ch/csp-report; 1
default-src 'self'; script-src 'self' 'nonce-zjgVa7qsWH95XVBcdRWfQk_0yBKeSsT6bVXtxrRBH54'; style-src 'self' 'nonce-zjgVa7qsWH95XVBcdRWfQk_0yBKeSsT6bVXtxrRBH54'; img-src 'self' data:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; report-uri /+cspreport/log 1
img-src 'self' data: blob: https://assets.cfr.org https://static.cfr.org https://*.go-vip.net https://*.lndo.site http://*.lndo.site https://*.dwcdn.net https://i.ytimg.com https://www.googletagmanager.com https://*.google-analytics.com https://*.doubleclick.net https://p1.parsely.com https://secure.gravatar.com https://vallenato-media.cfr.org https://cfr-vallenato-media.s3.amazonaws.com https://cfr-vallenato-media.s3.us-east-1.amazonaws.com; report-uri /api/csp-report 1
object-src 'none';base-uri 'self';script-src 'nonce-7u6PIpy9yfBK__ubRsov4Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-YDjKj2aWVwWzWLHSe5mYlg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'nonce-/yVMlSLUFwkpiQww59lhKA==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https://events.mercadolibre.com/csp/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=cfe28a12-a45e-4023-a2d7-2f071955e92c; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https://http2.mlstatic.com/ https://mlstaticquic-a.akamaihd.net/; frame-ancestors 'self' https://*.mercadolibre.cl:* https://*.mercadolibre.com:* https://*.mercadolibre.com.ve:* https://*.mercadolibre.com.ar:* https://*.mercadolivre.com.br:* https://*.mercadolibre.com.co:* https://*.mercadolibre.com.ec:* https://*.mercadolibre.com.mx:* https://*.mercadolibre.com.pe:* https://*.mercadolibre.com.uy:* https://*.mercadopago.cl:* https://*.mercadopago.com.ar:* https://*.mercadopago.com.br:* https://*.mercadopago.com.co:* https://*.mercadopago.com.mx:* https://*.mercadopago.com.pe:* https://*.mercadopago.com.uy:* https://*.mercadopago.com.ve:* https://*.mercadopago.com:* https://*.adminml.com:* https://*.mercadolibre.co.cr:* https://*.mercadolibre.com.pa:* https://*.mercadolibre.com.do:* https://*.mercadolibre.com.bo:* https://*.mercadolibre.com.py:* https://*.mercadolibre.com.gt:* https://*.mercadolibre.com.hn:* https://*.mercadolibre.com.ni:* https://*.mercadolibre.com.sv:* https://*.mercadopago.com.ec:* https://*.portalinmobiliario.com:* https://*.mercadolivre.com:* 1
script-src 'report-sample' 'nonce-25QT4slbk9GYwn9P0avXTA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';worker-src 'self';report-uri /us/_/ThinkWithGoogle/cspreport 1
object-src 'none';base-uri 'self';script-src 'nonce-hStEVN-siZjX6aUjrkx8yQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-6AhZ4dKbbwesVQobwszcTw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-MMr-gJ2aOCO3gjAsOxVJ-Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-_Z3QgL9Yxj35M2FWhcspNw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-OtLfgexYD5y_Hpq75ZmvJQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-GTaR34Qm1b3o1mVoIGyH-w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-AcOPllmqHRlPrgVeIZSzVw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-QKcqjCWbkPX_7RCZ8JL-8A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
frame-ancestors 'self'; script-src 'self' 'nonce-MgBn5rGcSJIK2tbkIGUG6Q==' https://analytics.python.org https://media.ethicalads.io https://ajax.googleapis.com; object-src 'none'; font-src 'self' data:; form-action 'self'; style-src 'self' 'unsafe-inline' https://ajax.googleapis.com; connect-src 'self' https://console.python.org https://analytics.python.org https://server.ethicalads.io https://2p66nmmycsj3.statuspage.io; base-uri 'self'; default-src 'self'; img-src 'self' data: https://media.ethicalads.io; report-uri https://o20004.ingest.us.sentry.io/api/39935/security/?sentry_key=95f826ce8a6d47e9ab5dbb055c24eb74 1
object-src 'none';base-uri 'self';script-src 'nonce-aODRnf6ng7efItBB5wNkSA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-Z9XgMmx4_1Rmo6nsoii4Kw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-sRC4ovzxKFzqUWBpXPLSnA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-NL394zzuQDz9kndID4_gFA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
base-uri 'self';script-src-elem 'self' https://snap.licdn.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://js.hs-analytics.net/analytics/ https://www.googletagmanager.com/gtag/ https://js.hs-banner.com/ https://js.hsadspixel.net/ https://x.clearbitjs.com/ https://reveal.clearbit.com/ https://tag.clearbitscripts.com/ https://cdn.koala.live/ https://app.leandata.com/ https://www.datadoghq-browser-agent.com/ https://cdn.jsdelivr.net/ https://browser.sentry-cdn.com/ https://info.amplitude.com/ https://cdn.amplitude.com/ 'nonce-cfd8604d21a201e7';report-uri /api/report_csp_violation;object-src 'self';form-action 'self'; 1
object-src 'none'; script-src 'self' blob: *.taboola.com *.geocomply.com *.ads-twitter.com *.jsdelivr.net *.kwai.net *.clarity.ms *.greencolumnart.com *.adalyser.com *.performgroup.com *.scoutgg.net *.pa4r.com res-odx.op-mobile.opera.com *.bannerflow.net *.facebook.com *.cloudfront.net *.maze.co d32tdr35c4icxo.cloudfront.net *.adform.net *.app.delivery *.bet.br *.betano.com *.betgenius.com *.bing.com *.cloudflare.com *.cloudflareinsights.com *.cookielaw.org *.creativecdn.com *.facebook.net *.fullstory.com *.gmlinteractive.com *.google-analytics.com *.googletagmanager.com *.kaizengaming.com *.kameleoon.eu *.kameleoon.io *.lgrckt-in.com *.optimove.net *.sportradar.com *.sportradarserving.com *.tostarsbuilding.com *.googleapis.com *.opera.com *.gambling-malta.com *.logr-in.com; worker-src 'self' blob:; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=Z2yx0e8TN30gVyw0rWZP6.OmWsEl_M6Gl1UicCuCm.s-1789272085.667393-1.0.1.1-MCPpCo7W5Pj7ivMUCdayei_K6OPzju6ZDe9OgWCia7UuYFvoC.JHrVz1gPgFjo7bea2gplAW.tzZvcCo8MVFcD6zg3rg07aeEym8SBbcmgCXI0Y9z4e9zXvrPeya1ijLhWeoB6YLUdXNCAjGA4pnpIxdvO_ayY6mk8H88V61yCnUsYWtD7u9I4UjwXS8jqzn; report-to cf-aijszsticqsaftqd 1
object-src 'none';base-uri 'self';script-src 'nonce-NnGS4ezKiRAXUXoVto5ocQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-nD43lg1zJWIzrwSqMLOsLA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'nonce-7nSsIB7OJdg8h+rsjEq3fA==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https://events.mercadolibre.com/csp/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=380a465a-190c-4a37-8364-814f9a1c2a25; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https://http2.mlstatic.com/ https://mlstaticquic-a.akamaihd.net/; frame-ancestors 'self' https://*.mercadolibre.cl:* https://*.mercadolibre.com:* https://*.mercadolibre.com.ve:* https://*.mercadolibre.com.ar:* https://*.mercadolivre.com.br:* https://*.mercadolibre.com.co:* https://*.mercadolibre.com.ec:* https://*.mercadolibre.com.mx:* https://*.mercadolibre.com.pe:* https://*.mercadolibre.com.uy:* https://*.mercadopago.cl:* https://*.mercadopago.com.ar:* https://*.mercadopago.com.br:* https://*.mercadopago.com.co:* https://*.mercadopago.com.mx:* https://*.mercadopago.com.pe:* https://*.mercadopago.com.uy:* https://*.mercadopago.com.ve:* https://*.mercadopago.com:* https://*.adminml.com:* https://*.mercadolibre.co.cr:* https://*.mercadolibre.com.pa:* https://*.mercadolibre.com.do:* https://*.mercadolibre.com.bo:* https://*.mercadolibre.com.py:* https://*.mercadolibre.com.gt:* https://*.mercadolibre.com.hn:* https://*.mercadolibre.com.ni:* https://*.mercadolibre.com.sv:* https://*.mercadopago.com.ec:* https://*.portalinmobiliario.com:* https://*.mercadolivre.com:* 1
object-src 'none';base-uri 'self';script-src 'nonce-IcYytAXP23qa9gRwmIFcXA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-6iVPjDrnUrYCYMiUHbgdZQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-Rd1VG7woRSfyBVuPwkGL6A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.googleadservices.com/pagead/conversion/ https://www.googletagmanager.com/gtag/js https://www.googletagmanager.com/gtag/destination https://www.googletagmanager.com/gtm.js https://www.google.com/js/bg/ https://www.gstatic.com/external_hosted/highlightjs/highlight.pack.js https://www.gstatic.com/monaco_editor/ https://fonts.gstatic.com/s/e/notoemoji/search/wrapper.js https://www.youtube.com/iframe_api https://translate.google.com/translate_a/element.js https://www-onepick-opensocial.googleusercontent.com/gadgets/js/rpc.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://maps.googleapis.com/maps/api/js https://gemini.gstatic.com/_/mss/boq-bard-web/_/js/k=boq-bard-web.BardChatUi.en_US.4vp4M48YY7Y.2018.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://maps.googleapis.com/maps-api-v3/api/js/ https://maps.googleapis.com/maps/vt https://maps.googleapis.com/maps/api/js/ https://maps.googleapis.com/maps/api/place/js/ https://www.youtube.com/s/player/ https://translate.googleapis.com/_/translate_http/_/js/;report-uri /_/BardChatUi/cspreport/fine-allowlist 1
object-src 'none';base-uri 'self';script-src 'nonce-cP30j-OCXIFMFWy3k7DSPg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce--M53tEJYxFQzrxRxxHeRFg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-K4SWImkTtnm4EpDrn8SkQQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
base-uri 'self'; connect-src 'self' whoop.com *.whoop.com browser-intake-datadoghq.com *.browser-intake-datadoghq.com challenges.cloudflare.com datadoghq.com *.datadoghq.com sentry.io *.sentry.io segment.com *.segment.com cdn.cookielaw.org geolocation.onetrust.com *.segment.io amplitude.com *.amplitude.com api2.amplitude.com whoop-inc.myshopify.com api.okendo.io analytics.tiktok.com whoop-us.attn.tv events.attentivemobile.com tr6.snapchat.com tr.snapchat.com ws.zoominfo.com *.google-analytics.com analytics.google.com *.analytics.google.com smarty.com *.smarty.com google.com server-side-tagging-3jzkn4xgxa-uc.a.run.app ct.pinterest.com s.pinimg.com ad.doubleclick.net googleads.g.doubleclick.net pixels.spotify.com *.veritonicmetrics.com pixel-config.reddit.com whoop.attn.tv rum-collector-2.pingdom.net www.googleadservices.com *.amazon-adsystem.com *.tiktokw.us whoop.sjv.io ara.paa-reporting-advertising.amazon t.co analytics.twitter.com privacyportal.onetrust.com stats.g.doubleclick.net primary-realtime.intercom-messenger.com https://*.googletagmanager.com *.facebook.com *.facebook.net *.fbcdn.net *.google.com pagead2.googlesyndication.com *.g.doubleclick.net utt.impactcdn.com d.impactradius-event.com alb.reddit.com *.adroll.com gw.conversionsapigateway.com *.seondnsresolve.com images.ctfassets.net maps.googleapis.com mapsresources-pa.googleapis.com px.ads.linkedin.com embed.myadvocado.com mpc-prod-21-1053047382554.us-central1.run.app d.impct.site *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat; default-src 'self' whoop.com *.whoop.com; font-src 'self' typekit.net *.typekit.net fonts.gstatic.com data: fonts.intercomcdn.com cdn-static.okendo.io; form-action 'self' *.facebook.com *.facebook.net; frame-src 'self' challenges.cloudflare.com *.googletagmanager.com ct.pinterest.com tr.snapchat.com *.fls.doubleclick.net server-side-tagging-3jzkn4xgxa-uc.a.run.app *.facebook.com *.facebook.net embed.myadvocado.com; frame-ancestors 'none'; img-src 'self' data: blob: images.ctfassets.net images.us-east-2.aws.commercetools.com cdn.shopify.com cdn.cookielaw.org s.pinimg.com googleads.g.doubleclick.net ad.ipredictive.com ad.doubleclick.net www.google.com t.co analytics.twitter.com p.typekit.net downloads.ctfassets.net *.facebook.com *.facebook.net *.fbcdn.net *.adroll.com d.adroll.com tagmanager.google.com *.googletagmanager.com *.google-analytics.com server-side-tagging-3jzkn4xgxa-uc.a.run.app alb.reddit.com tr.snapchat.com analytics.google.com *.analytics.google.com downloads.intercomcdn.com analytics.tiktok.com *.tiktokw.us www.googleadservices.com s3-us-west-2.amazonaws.com s3.amazonaws.com js.intercomcdn.com d21y75miwcfqoq.cloudfront.net pixel.pointmediatracker.com *.google.com *.bidswitch.net *.tapad.com *.casalemedia.com *.rlcdn.com *.rubiconproject.com us-u.openx.net sync.outbrain.com *.pubmatic.com *.3lift.com ib.adxns.com ib.adnxs.com *.sundaysky.com wam.solution.weborama.fr tag.crsspxl.com snap.licdn.com *.taboola.com *.yahoo.com static.intercomassets.com cdn.blisspointmedia.com ml314.com ps.eyeota.net *.reson8.com segments.company-target.com dpm.demdex.net i.liadm.com pagead2.googlesyndication.com ade.googlesyndication.com *.amazon-adsystem.com maps.gstatic.com www.ojrq.net *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat; media-src 'self' videos.ctfassets.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' whoop.com *.whoop.com analytics.tiktok.com *.tiktokw.us c.amazon-adsystem.com cdn-static.okendo.io cdn.amplitude.com cdn.attn.tv cdn.cookielaw.org cdn.dfsdk.com cdn.pdst.fm cdn.segment.com cdn.veritonic.com challenges.cloudflare.com *.facebook.com *.facebook.net *.fbcdn.net capi-automation.s3.us-east-2.amazonaws.com ct.pinterest.com *.adroll.com d.impactradius-event.com d3hw6dc1ow8pp2.cloudfront.net datadoghq-browser-agent.com *.datadoghq-browser-agent.com dx.mountain.com googleads.g.doubleclick.net gs.mountain.com px.mountain.com rum-static.pingdom.net s.pinimg.com sc-static.net static.ads-twitter.com tr.snapchat.com utt.impactcdn.com widget.intercom.io ws.zoominfo.com www.redditstatic.com tagmanager.google.com *.googletagmanager.com googleoptimize.com www.googleoptimize.com *.google-analytics.com www.googleadservices.com www.google.com pagead2.googlesyndication.com snap.licdn.com maps.googleapis.com embed.myadvocado.com collector-31136.tvsquared.com; style-src 'self' 'unsafe-inline' d3hw6dc1ow8pp2.cloudfront.net cdn-static.okendo.io tagmanager.google.com *.googletagmanager.com typekit.net *.typekit.net fonts.googleapis.com; worker-src 'self' blob:; upgrade-insecure-requests; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=.z04E1jT3DJ64Zibg2ry83r6J.o2XSMBPVlleV8P7y0-1789276592.7651358-1.0.1.1-zpKi1nylD3UcgajkK5r5NN_oCrTlqRCv8f.QzOjOO7mqnu_25ASuiIVZ4QBws5lWEXOpFnGL_pukuDCqfiFkyyY4YsYZDa7ju._9aF.k55k5QvHrrM_85kBl.7E0OrbtTT0Hg4QR0Sspsk35aKB.WtFqFgbl5PM63qbD2HX1.zBxAQiOw9.gIOzGzTgn6IVv; report-to cf-lmqclwpxdpbbdwlv 1
object-src 'none';base-uri 'self';script-src 'nonce-6jVD3_CmOh2mFDizSdpprA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-Nu7GRgt9tMDMcTRiBf2kPg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-ZnC4Pl64xo0SoJQVJ-tRjA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' data: https: blob:; img-src 'self' data: https: http: blob:; script-src 'self' 'nonce-0B1AD4983141DD3C97D4FC9F2F1021EC9325005A80C7DB939EF47CFFCD4BD05F' *.enable-now.cloud.sap *.salesforceliveagent.com *.siteintercept.qualtrics.com *.walkme.com *.liveperson.net *.ssl.ak.dynamic.tiles.virtualearth.net *.concursolutions.com *.sapdas-staging.cloud.sap *.sapdas.cloud.sap code.jquery.com consent.trustarc.com dev.virtualearth.net storage.glancecdn.net www.glancecdn.net www.google-analytics.com assets.adobedtm.com bam.nr-data.net maps.googleapis.com www.google-analytics.com www.googletagmanager.com siteintercept.qualtrics.com ajax.googleapis.com static.contextall.com *.bing.com www.vfmii.com blob:; style-src 'self' 'unsafe-inline' https: blob:; connect-src wss://*.glance.net 'self' https:; report-uri https://concursolutions.report-uri.com/r/t/csp/reportOnly; report-to report-only 1
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/about_appsheet_com 1
object-src 'none';base-uri 'self';script-src 'nonce-ddKxBo9_wDBaMdzcGjNEpA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-H-DOEFkB7StYmH2nrPYAAA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-A8-NR1cOxXNLVNtnQ2qLnw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'unsafe-eval' 'unsafe-inline' 'self' http: https: data: wss: blob: chrome-extension ; report-uri /cgi-bin/csp-reports.cgi 1
object-src 'none'; script-src 'self' 'report-sample' addtocalendar.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.knightlab.com https://code.jquery.com https://science-catalog.fws.gov https://touchpoints.app.cloud.gov https://unpkg.com https://www.google.com maps.google.com unpkg.com; style-src 'self' 'report-sample' addtocalendar.com cdnjs.cloudflare.com fonts.googleapis.com https://cdn.jsdelivr.net https://cdn.knightlab.com https://fonts.googleapis.com https://science-catalog.fws.gov https://unpkg.com unpkg.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src https: wss: data: blob: 'unsafe-eval' 'unsafe-inline'; frame-ancestors 'self'; report-uri /_/csp-reports 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' 1003891.track.convertexperiments.com app.hubspot.com cdn-3.convertexperiments.com cdn-4.convertexperiments.com *.metrics.convertexperiments.com *.signals.convertexperiments.com logs.convertexperiments.com *.convertexperiments.com cdn.pdst.fm connect.facebook.net js.hs-analytics.net js.hs-banner.com js.hsforms.net js.hsleadflows.net js.hubspotfeedback.com js.usemessages.com organizer.bizzabo.com play.vidyard.com script.hotjar.com snap.licdn.com static.hotjar.com static.hsappstatic.net www.google-analytics.com www.googletagmanager.com www.recaptcha.net code.highcharts.com www.youtube.com js.hubspot.com www.dropbox.com widget.altrulabs.com www.google.com maps.googleapis.com wt-assets.hubteam.com cdn2.hubspot.net www.redditstatic.com cdn.veritonic.com gosniply.com d.impactradius-event.com js.hubspot.com 50339659.hs-sites.com analytics.tiktok.com api.s10h.io sgtm-amer.hubspot.com js.hsadspixel.net cdn.intellimize.co static.cloudflareinsights.com ob.greencolumnart.com tags.pw.adn.cloud cdn.jsdelivr.net js.storylane.io 'strict-dynamic' 'nonce-uXS6mET9/NRauQgYqj3JSA=='; report-uri https://send.hsbrowserreports.com/csp/report 1
object-src 'none';base-uri 'self';script-src 'nonce-Od4APOpYKNiGuDfiMI_sew' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' 'nonce-dlNQiYjN3IPnWSA5GKN5G+HLp6KpOj89SRPp3kG1iPM=' 'strict-dynamic' https:; script-src 'nonce-dlNQiYjN3IPnWSA5GKN5G+HLp6KpOj89SRPp3kG1iPM='  'sha512-gU7kztaQEl7SHJyraPfZLQCNnrKdaQi5ndOyt4L4UPL/FHDd/uB9Je6KDARIqwnNNE27hnqoWLBq+Kpe4iHfeQ==' 'sha512-DXYctkkhmMYJ4vYp4Dm6jprD4ZareZ7ud/d9mGCKif/Dt3FnN95SjogHvwKvxXHoMAAkZX6EO6ePwpDIR1Y8jw==' 'sha512-mz4SrGyk+dtPY9MNYOMkD81gp8ajViZ4S0VDuM/Zqg40cg9xgIBYSiL5fN79Htbz4f2+uR9lrDO6mgcjM+NAXA==' 'sha512-pnt8OPBTOklRd4/iSW7msOiCVO4uvffF17Egr3c7AaN0h3qFnSu7L6UmdZJUCednMhhruTLRq7X9WbyAWNBegw=='  'strict-dynamic' https:; font-src 'self' https://res-1.cdn.office.net/files/fabric-cdn-prod_20221201.001/assets/fonts/ https://res-1.cdn.office.net/files/fabric-cdn-prod_20221201.001/assets/icons/ 'nonce-dlNQiYjN3IPnWSA5GKN5G+HLp6KpOj89SRPp3kG1iPM='; base-uri 'none'; form-action 'self' 'nonce-dlNQiYjN3IPnWSA5GKN5G+HLp6KpOj89SRPp3kG1iPM='; style-src 'self' 'nonce-dlNQiYjN3IPnWSA5GKN5G+HLp6KpOj89SRPp3kG1iPM='; report-uri ; object-src 'none'; frame-ancestors 'none'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.hsforms.net https://*.hsforms.com https://*.hs-scripts.com https://*.hscollectedforms.net https://*.hsleadflows.net https://www.google.com https://www.gstatic.com https://policy.app.cookieinformation.com https://api.fraud0.com https://connect.facebook.net https://snap.licdn.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://*.hsforms.net https://*.hsforms.com https://www.gstatic.com; font-src 'self' data:; connect-src 'self' wss: https://*.hsforms.com https://*.hscollectedforms.net https://*.hubapi.com https://www.google.com https://ad.doubleclick.net; frame-src 'self' blob: https://*.hsforms.net https://*.hsforms.com https://www.google.com https://recaptcha.google.com; worker-src 'self' blob:; media-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https://*.hsforms.net https://*.hsforms.com; child-src 'self' blob: https://*.hsforms.com; report-uri https://piwik.pro/wp-json/pp-security/v1/csp-report; report-to csp-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-2arUkKhN9_dUDMwN2niyZg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-bhgHcXy3IsVdxh2PQsKYpQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline' 'nonce-+6OtSOEvjErErvcbs1diHg=='; style-src 'self' 'unsafe-inline' assets.moneyforward.com fonts.googleapis.com cdn.jsdelivr.net use.fontawesome.com morisawafonts.net; img-src 'self' https: data:; font-src 'self' data: assets.moneyforward.com fonts.gstatic.com use.fontawesome.com morisawafonts.net; connect-src 'self' https:; frame-src https:; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'self'; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub976cc71e81a38b66439dcf1385f0f4ab&dd-evp-origin=content-security-policy&ddsource=csp-report 1
frame-ancestors 'self' https://www.rferl.org/embed https://www.rferl.org/embed/player https://www.rferl.org/embed/player/0 https://www.rferl.org/embed/player/1 https://www.rferl.org/ext https://www.rferl.org/widget; report-uri https://csp.pangeadigital.io/cspreport 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://app.tryst.link; frame-src 'self' https://a4-test.b-cdn.net; worker-src 'self' blob:; font-src 'self' data: https://discovery.tryst.a4cdn.org; img-src 'self' data: blob: https://imgproxy.tryst.link https://media-v2.tryst.a4cdn.org https://discovery.tryst.a4cdn.org https://tryst-blog-assets.a4cdn.org; style-src 'self' 'unsafe-inline' https://discovery.tryst.a4cdn.org; script-src 'self' https://p.i.tryst.link https://discovery.tryst.a4cdn.org; script-src-elem 'self' https://p.i.tryst.link https://discovery.tryst.a4cdn.org 'unsafe-inline'; script-src-attr 'unsafe-inline'; connect-src 'self' https://p.i.tryst.link https://j.i.tryst.link https://s.i.tryst.link https://imgproxy.tryst.link https://media-v2.tryst.a4cdn.org https://discovery.tryst.a4cdn.org https://a.tryst.link https://c.i.tryst.link https://tryst.link; report-uri https://s.i.tryst.link/api/3/security/?sentry_key=13d63df8626242e9a967c9da72eacbc3&sentry_environment=production&sentry_release=2026-09-07_22997_5ace52c5b3 1
connect-src *.bundesregierung.de analytics.bundesregierung.de https://hls-hd.myrasec.de *.stage.bio ; style-src *.bundesregierung.de 'unsafe-inline' ; script-src *.bundesregierung.de ; script-src-elem *.bundesregierung.de 'nonce-X2Iih7ckl5xfCIdae14R/MoPf2etFWWz0n6kfbkIAH0Nb7Xvs1XGXhVBnZzvSSTD0wRULp0n+VoIW+XRmqFLW8F9EAGN8efEB/9akD1GFlgcxpD8tVwjxpeeHnmSxCEb38FczBytFgqorj9FQId8o3wBuuZBU1h4WoL4rzYdP7E=' *.stage.bio ; frame-src *.bundesregierung.de streaming.sendewerk.berlin ; media-src *.bundesregierung.de http://video.bundesregierung.de https://zdf-hls-18.akamaized.net *.stage.bio ; frame-ancestors *.bundesregierung.de ; img-src *.bundesregierung.de *.bundeskanzler.de https://*.tile.openstreetmap.de data: *.stage.bio ; default-src *.bundesregierung.de ; font-src *.bundesregierung.de ; report-uri https://www.bundesregierung.de/service/csp-report ; 1
object-src 'none';base-uri 'self';script-src 'nonce-bytwhKwg7n8GOtYyDxk4dA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-aRDqm75PxPkU6qMNzPTdkA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-3TKmXv4GtkrsPb5w-UTs8Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https://*.fantia.jp; script-src 'unsafe-inline' 'self' https://*.fantia.jp *.genieesspv.jp *.gsspat.jp *.gsspcln.jp *.gssprt.jp *.im-apps.net *.ad-stir.com *.i-mobile.co.jp *.amoad.com *.criteo.net *.criteo.com *.fout.jp *.goldspotmedia.com *.zucks.net j.zucks.net.zimg.jp *.zucks.co.jp ta-adquick.info nend.net *.rtbhouse.com *.ad-gate.net securepubads.g.doubleclick.net *.geniee.jp https://ec-widget.toranoana.jp nav.yumenosora.co.jp *.google-analytics.com www.googletagmanager.com cdnjs.cloudflare.com stackpath.bootstrapcdn.com cdn.jsdelivr.net vjs.zencdn.net *.twitter.com static.ads-twitter.com *.clarity.ms *.recaptcha.net *.gstatic.com *.fontawesome.com *.chatplus.jp *.amplitude.com https://csp-report-ij4goxpsha-an.a.run.app/api/v1/csp_report; font-src 'self' https://*.fantia.jp * data:; style-src 'self' https://*.fantia.jp 'unsafe-inline' * data:; img-src 'self' https://*.fantia.jp * blob: data: www.googletagmanager.com; child-src 'self' https://*.fantia.jp blob: *.genieesspv.jp *.gsspat.jp *.gsspcln.jp *.gssprt.jp *.im-apps.net *.ad-stir.com *.i-mobile.co.jp *.amoad.com *.criteo.net *.criteo.com *.fout.jp *.goldspotmedia.com *.zucks.net j.zucks.net.zimg.jp *.zucks.co.jp ta-adquick.info nend.net *.rtbhouse.com *.ad-gate.net securepubads.g.doubleclick.net *.geniee.jp platform.twitter.com www.googletagmanager.com www.youtube.com player.vimeo.com *.recaptcha.net *.chatplus.jp; connect-src 'self' https://*.fantia.jp *.genieesspv.jp *.gsspat.jp *.gsspcln.jp *.gssprt.jp *.im-apps.net *.ad-stir.com *.i-mobile.co.jp *.amoad.com *.criteo.net *.criteo.com *.fout.jp *.goldspotmedia.com *.zucks.net j.zucks.net.zimg.jp *.zucks.co.jp ta-adquick.info nend.net *.rtbhouse.com *.ad-gate.net securepubads.g.doubleclick.net *.geniee.jp https://cc.fantia.jp https://c.fantia.jp https://dd.fantia.jp https://d.fantia.jp https://ec-widget.toranoana.jp www.google-analytics.com stats.g.doubleclick.net *.clarity.ms *.fontawesome.com *.agora.io:* *.agoraio.cn *.ap.sd-rtn.com *.statscollector.sd-rtn.com:* *.veritrans.co.jp *.chatplus.jp wss://*.edge.agora.io:* wss://*.edge.agoraio.cn:* wss://*.edge.sd-rtn.com *.amplitude.com https://ogp-cache-system-prod-ij4goxpsha-an.a.run.app/api/v1/ogp/info https://csp-report-ij4goxpsha-an.a.run.app/api/v1/csp_report https://fantia.s3.ap-northeast-1.amazonaws.com; media-src 'self' https://*.fantia.jp *.genieesspv.jp *.gsspat.jp *.gsspcln.jp *.gssprt.jp *.im-apps.net *.ad-stir.com *.i-mobile.co.jp *.amoad.com *.criteo.net *.criteo.com *.fout.jp *.goldspotmedia.com *.zucks.net j.zucks.net.zimg.jp *.zucks.co.jp ta-adquick.info nend.net *.rtbhouse.com *.ad-gate.net securepubads.g.doubleclick.net *.geniee.jp blob: https://*.chatplus.jp; frame-ancestors 'self' https://*.fantia.jp *.toranoana.jp toranoana.jp *.yumenosora.co.jp yumenosora.co.jp *.toranoana.co.jp toranoana.co.jp; form-action 'self' https://*.fantia.jp; report-to report-server; report-uri https://csp-report-ij4goxpsha-an.a.run.app/api/v1/csp_report; 1
object-src 'none';base-uri 'self';script-src 'nonce-3uUn0B2bqLb0HSUjxmZ09w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' data: blob: https://*openai.com https://*.bamboohr.com https://*.bamboohr.co.uk https://*.trustarc.com https://secure.feed5mown.com https://cdn.bizible.com https://bat.bing.com https://connect.facebook.com https://connect.facebook.net https://dbm.demdex.net https://bamboohr.demdex.net https://*.licdn.com https://*.hotjar.com https://tracking.g2crowd.com https://static.ads-twitter.com https://script.googleusercontent.com https://munchkin.marketo.com https://munchkin.marketo.net https://cdn.abrankings.com https://a.quora.com https://q.quora.com https://*.clarity.ms https://*.thebrightforks.com https://dx.mountain.com https://tag.clearbitscripts.com https://cdn.pdst.fm https://x.clearbitjs.com https://app.clearbitjs.com https://www.googletagmanager.com https://www.redditstatic.com https://snap.licdn.com https://www.google-analytics.com https://assets.adobedtm.com https://activitymap.adobe.com https://www.googleoptimize.com https://googleads.g.doubleclick.net https://abm-tracking.demandscience.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://match.prod.bidr.io https://bamboohr.zendesk.com https://*.zdassets.com https://assets.screensteps.com https://fast.wistia.com https://fast.wistia.net https://unpkg.com https://*.convertexperiments.com https://js.intercomcdn.com https://cdn.readme.io https://*.tiktok.com https://fonts.gstatic.com https://fonts.googleapis.com https://edge.adobedc.net https://adobedc.demdex.net https://stats.g.doubleclick.net https://www.google.com https://analytics.google.com https://*.mktoresp.com https://*.clearbit.com https://*.linkedin.com https://t.co https://*.twitter.com https://*.facebook.com https://tracking.contanuity.com https://c.bing.com https://*.hlx.page https://*.hlx.live https://bamboohr--webchat.sandbox.my.site.com https://bamboohr--webchat.sandbox.my.salesforce-scrt.com https://bamboohr.my.site.com https://bamboohr.my.salesforce-scrt.com https://js.driftt.com https://static.cloudflareinsights.com https://script.crazyegg.com https://rc-widget-frame.js.driftt.com https://arttrk.com https://intentstream.contanuity.com https://td.doubleclick.net https://bamboohr.com wss://ws.hotjar.com https://*.hotjar.io https://*.gstatic.com https://*.leandata.com https://195-loz-515.mktoutil.com https://*.bizibly.com https://*.google.com.ua https://www.google.ca https://www.getapp.com https://*.wistia.com https://*.honey.io https://boards.greenhouse.io https://*.ucweb.com https://qvdt3feo.com https://*.srv.stackadapt.com https://ct.capterra.com https://*.youtube.com https://*.googleadservices.com https://hook.us1.make.celonis.com https://bamboohr.formstack.com https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat https://*.qualified.com https://js.qualified.com https://app.qualified.com https://*.6sc.co https://*.zi-scripts.com https://mapixl.com https://*.metadata.io https://tvspix.com https://*.ipify.org https://*.6sense.com https://*.zoominfo.com https://*.cloudinary.com https://*.googlesyndication.com https://*.adsrvr.org https://*.clickagy.com 'unsafe-inline' 'unsafe-eval'; report-uri https://app.bamboohr.com/ajax/parse_csp_report.php; report-to https://app.bamboohr.com/ajax/parse_csp_report.php; 1
object-src 'none';base-uri 'self';script-src 'nonce-ZPVMFNZUnfbPos-dDMoFfQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: *.icrc.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.icrc.org www.gstatic.com www.googletagmanager.com www.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net *.youtube.com *.vimeo.com *.vimeocdn.com js.hs-analytics.net *.hs-scripts.com *.hs-banner.com  js.hsleadflows.net *.facebook.net *.bing.com *.getblue.io *.adnxs.com js.usemessages.com js.hsadspixel.net *.googlesyndication.com *.ads-twitter.com *.cloudflare.com *.licdn.com hcaptcha.com https://hcaptcha.com api.mapbox.com unpkg.com *.hubspot.com *.usercentrics.eu *.cmp.usercentrics.eu https://*.usercentrics.eu  *.hotjar.com *.facebook.com; object-src 'self' 'unsafe-inline' 'unsafe-eval'  *.icrc.org *.usercentrics.eu https://*.usercentrics.eu https://hcaptcha.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com api.mapbox.com web.cmp.usercentrics.eu app.usercentrics.eu *.usercentrics.eu https://hcaptcha.com; img-src 'self' data: icrc.org *.icrc.org *.usercentrics.eu hcaptcha.com *.bing.com *.facebook.com *.google.com *.google.ch analytics.twitter.com *.linkedin.com *.doubleclick.net *.hubspot.com ; media-src  icrc.org *.icrc.org *.usercentrics.eu hcaptcha.com; frame-src 'self' icrc.org *.icrc.org *.youtube.com *.vimeo.com *.youku.com *.getblue.io www.googletagmanager.com *.googletagmanager.com *.hcaptcha.com  td.doubleclick.net *.usercentrics.eu hcaptcha.com; frame-ancestors 'self' icrc.org *.icrc.org *.usercentrics.eu hcaptcha.com *.googletagmanager.com; child-src 'self' blob: icrc.org *.icrc.org *.usercentrics.eu hcaptcha.com; font-src 'self' fonts.gstatic.com fonts.gstatic.com *.usercentrics.euhcaptcha.com; connect-src 'self' icrc.org *.icrc.org *.linkedin.com *.hubspot.com *.bing.com api.hubapi.com *.google-analytics.com *.googlesyndication.com *.google.com *.google.ch google-analytics.com bat.bing.net *.adnxs.com *.hcaptcha.com hcaptcha.com *.mapbox.com *.arcgis.com *.visualstudio.com *.usercentrics.eu; upgrade-insecure-requests 1
object-src 'none';base-uri 'self';script-src 'nonce-MLNXSNFSFLWPLXHMDo7xhQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-qNRB8m7d01OFhYQw5nAj0Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://users.uptimerobot.com https://widget.intercom.io https://o4505555361792000.ingest.us.sentry.io https://consent.cookiebot.com https://consentcdn.cookiebot.com; style-src 'self' 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' data:; connect-src 'self' https://*.uptimerobot.com https://o4505555361792000.ingest.us.sentry.io https://consent.cookiebot.com https://consentcdn.cookiebot.com; media-src 'self' https://cdn.itrinity.com; frame-src https://youtube.com https://www.youtube.com https://youtube-nocookie.com https://www.youtube-nocookie.com https://youtu.be https://twitter.com https://platform.twitter.com https://x.com https://vimeo.com https://player.vimeo.com https://codepen.io https://gist.github.com https://consent.cookiebot.com https://consentcdn.cookiebot.com; object-src 'none'; base-uri 'self'; form-action 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-mmLOjTYhxF4OiowaUeCghQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-aNGdB7oM_R162hukqNG2Bg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http://*.files.wordpress.com wss://www.indiewire.com; report-uri https://pmcuri.report-uri.com/r/d/csp/reportOnly 1
script-src 'self' 'nonce-ZmFiN2ZlYjctOTc4Zi00ZWE0LWI2ZmQtMTE2NTg5ZTk5NzEx' 'strict-dynamic' 'report-sample' https://js.stripe.com https://*.js.stripe.com https://www.paypal.com https://www.sandbox.paypal.com https://js.braintreegateway.com https://pay.google.com https://www.googletagmanager.com https://api.calm.com https://*.px-cloud.net https://*.px-cdn.net https://*.doubleclick.net https://www.google-analytics.com https://apis.google.com https://www.gstatic.com https://connect.facebook.net https://bat.bing.com https://www.tiktok.com https://*.tiktokcdn-us.com https://*.ttwstatic.com https://static.ads-twitter.com https://wa.appsflyersdk.com https://websdk.appsflyer.com https://utt.impactcdn.com https://cdn-cookieyes.com https://*.squarespace.com https://*.sqspcdn.com https://*.squarespace-cdn.com https://www.instagram.com https://www.youtube.com https://truemed-public.s3.us-west-1.amazonaws.com https://cdn.amplitude.com https://addevent.com https://cdnjs.cloudflare.com https://unpkg.com; frame-src https://js.stripe.com https://*.js.stripe.com https://hooks.stripe.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://www.googletagmanager.com https://checkout.paypal.com https://accounts.google.com https://www.facebook.com https://www.youtube.com https://www.instagram.com https://www.tiktok.com https://*.px-cloud.net https://crcldu.com; connect-src 'self' https://api.stripe.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://api2.amplitude.com https://api.lab.amplitude.com https://flag.lab.amplitude.com https://browser-intake-datadoghq.com https://api.calm.com https://*.calm.com https://payments.braintree-api.com https://payments.sandbox.braintree-api.com https://api.braintreegateway.com https://*.px-cloud.net https://*.px-cdn.net https://*.pxchk.net https://*.px-client.net https://*.perimeterx.net https://www.google.com https://*.doubleclick.net https://www.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://region1.google-analytics.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://translate.googleapis.com https://www.googletagmanager.com https://connect.facebook.net https://www.facebook.com https://bat.bing.com https://wa.appsflyersdk.com https://wa.onelink.me https://wa.appsflyer.com https://websdk.appsflyer.com https://utt.impactcdn.com https://calmcom.sjv.io https://d.impct.site https://t.co https://analytics.twitter.com https://www.tiktok.com https://cdn-cookieyes.com https://log.cookieyes.com https://directory.cookieyes.com https://*.squarespace.com https://*.squarespace-cdn.com; worker-src 'self' blob:; report-uri /webapi/csp-report 1
object-src 'none';base-uri 'self';script-src 'nonce-NZKbUR4Rd5pbaJzinxavnw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-Ud_MfuOiHtW1R2kDOKuPrg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/  https://widget.trustpilot.com;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://appleid.cdn-apple.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com 'unsafe-eval' 'nonce-bceddbfbab15bd457870dcafd8eec844' 'strict-dynamic' https://widget.trustpilot.com https://invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style  https://widget.trustpilot.com;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io https://www.google.com/recaptcha/enterprise/* https://www.google.com/recaptcha/enterprise/ https://www.google.com/recaptcha/enterprise/clr https://www.google.com/recaptcha/ https://maps.googleapis.com https://people.googleapis.com https://translate-pa.googleapis.com  https://widget.trustpilot.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:  https://widget.trustpilot.com https://*.trustpilot.com;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=report&canonical_page_id=/company/home/ 1
object-src 'none';base-uri 'self';script-src 'nonce-OrgxhjNeOZfOW2Lgbx-7nA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
frame-ancestors 'self' prd.hdmx.now.hclsoftware.cloud:* *.prd.hdmx.now.hclsoftware.cloud:* *.homedepot.com.mx;         frame-src 'self' prd.hdmx.now.hclsoftware.cloud:* *.prd.hdmx.now.hclsoftware.cloud:* *.creativecdn.com *.youtube.com *.doubleclick.net *.googletagmanager.com *.bazaarvoice.com *.roomvo.com *.criteo.com ct.pinterest.com *.creativecdn.com *.criteo.net *.demdex.net;         default-src 'self' prd.hdmx.now.hclsoftware.cloud:* *.prd.hdmx.now.hclsoftware.cloud:* blob:;         child-src 'self' prd.hdmx.now.hclsoftware.cloud:* *.prd.hdmx.now.hclsoftware.cloud:* blob: *.homedepot.com.mx *.youtube.com;         script-src 'self' prd.hdmx.now.hclsoftware.cloud:* *.prd.hdmx.now.hclsoftware.cloud:* 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com assets.adobedtm.com *.adobedc.net cm.everesttech.net *.demdex.net *.hotjar.com *.hotjar.io *.criteo.com *.criteo.net *.bing.com *.revjet.com *.accenture.com *.accenture.vntana.com *.bazaarvoice.com unpkg.com *.roomvo.com *.adobe.com *.cybersource.com *.paypal.com *.openpay.mx *.liveperson.net btttag.com *.btttag.com *.scarabresearch.com *.googleapis.com *.google.com *.creativecdn.com *.facebook.net analytics.tiktok.com s.pinimg.com tag.rmp.rakuten.com static.ads-twitter.com *.sprinklr.com svht.afftrk1.com *.doubleclick.net ct.pinterest.com *.homedepot.com.mx *.go-mpulse.net;         connect-src 'self' prd.hdmx.now.hclsoftware.cloud:* *.prd.hdmx.now.hclsoftware.cloud:* wss://prod2-live-chat-tier2-mqtt.sprinklr.com *.hotjar.io *.doubleclick.net *.googleapis.com *.google.com *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.scarabresearch.com cm.everesttech.net *.demdex.net api.digitalfemsa.io h.online-metrix.net *.liveperson.net *.openpay.mx *.creativecdn.com ct.pinterest.com *.sprinklr.com webchannel-content.eservice.emarsys.net *.btttag.com ct.pinterest.com *.bing.com *.homedepot.com.mx *.akamaihd.net *.akstat.io *.go-mpulse.net *.tiktok.com *.tiktokw.us *.bazaarvoice.com;         style-src 'self' prd.hdmx.now.hclsoftware.cloud:* *.prd.hdmx.now.hclsoftware.cloud:* 'unsafe-inline' data: *.googleapis.com *.homedepot.com.mx;         font-src 'self' prd.hdmx.now.hclsoftware.cloud:* *.prd.hdmx.now.hclsoftware.cloud:* data: *.gstatic.com *.google.com *.google.ca *.sprinklr.com *.homedepot.com.mx *.bazaarvoice.com;         img-src 'self' prd.hdmx.now.hclsoftware.cloud:* *.prd.hdmx.now.hclsoftware.cloud:* data: blob: ct.pinterest.com *.bing.com analytics.tiktok.com s.pinimg.com static.ads-twitter.com *.doubleclick.net *.googleadservices.com *.facebook.com *.facebook.net *.twitter.com x.bidswitch.net *.adnxs.com r.casalemedia.com ad.360yield.com i.liadm.com contextual.media.net exchange.mediavine.com jadserve.postrelease.com sync.outbrain.com *.pubmatic.com trends.revcontent.com pixel.rubiconproject.com rtb-csync.smartadserver.com sync-t1.taboola.com criteo-sync.teads.tv criteo-partners.tremorhub.com ade.clmbtech.com eb2.3lift.com *.1rx.io ads.stickyadstv.com partner.mediawallahscript.com user-sync.fwmrm.net *.creativecdn.com *.agkn.com *.unrulymedia.com *.adsrvr.org *.rezync.com *.dmxleo.com quickchart.io *.sprinklr.com placehold.co *.scarabresearch.com www.google.com.mx *.google.com *.google.ca assets.adobedtm.com tag.rmp.rakuten.com svht.afftrk1.com webchannel-content.eservice.emarsys.net www.gstatic.com *.accenture.com *.bazaarvoice.com unpkg.com s3.amazonaws.com *.tiktokw.us akamaihd.net akstat.io go-mpulse.net online-metrix.net rtbhouse.com *.publitas.com *.surveymonkey.com *.adobe.com *.cybersource.com *.paypal.com api.digitalfemsa.io *.openpay.mx h.online-metrix.net cs.media.net p.rfihub.com pubmatic.com *.zemanta.com *.stackadapt.com sync.crwdcntrl.net *.liveperson.net *.lpsnmedia.net t.co *.criteo.com *.rlcdn.com *.demdex.net *.youtube.com *.homedepot.com.mx *.hclsoftware.cloud *.liftdsp.com *.criteo.net *.rkdms.com *.outbrain.com *.everesttech.net; 1
object-src 'none';base-uri 'self';script-src 'nonce-98pmONiWe9VQGKKil3Pl-g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-N9fgR-yqSOHO9tSIg1jWQg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-uv__OymRPKRmlnxxz9Cc3Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-IGM1QNglwhlL4WGcncao4A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-3YE0XkRZE-J1O4N3QYC0dg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-wpFyWRaNiX0QP6EkwI_7_g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-FZIYz0O85IfDwwJmZ-kduA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-fhsJKcCN25EvORXbef29VA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-RZKtK8rmoPinike1TNQSMw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-5B-H4Nem71_3rHgccFe9pw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-DfEcLpgb62A9tBcRww6D4g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-rNeHSTbIUCjftKCqPGfprg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-76Ph0q00fMzN0GET4VFGzw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.dedeman.ro data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com epos.unicredit.ro 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com maps.google.com *.recaptcha.net *.dedeman.ro applepay.cdn-apple.com epos.unicredit.ro *.gigya.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.dedeman.ro maps.gstatic.com *.googletagmanager.com server.arcgisonline.com a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org applepay.cdn-apple.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.gigya.com 'self' data: 'unsafe-inline' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.nr-ext.net *.nr-assets.net *.dedeman.ro *.googleapis.com *.google-analytics.com *.recaptcha.net *.facebook.com applepay.cdn-apple.com pay.google.com *.clarity.ms chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.gigya.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.dedeman.ro downloads.mailchimp.com 'unsafe-inline' data: 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src *.dedeman.ro 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.dedeman.ro maps.googleapis.com cdns.eu1.gigya.com apple-pay-gateway.apple.com apple-pay-gateway-cert.apple.com apple.com *.clarity.ms form-assets.mailchimp.com *.intuit.com *.amazonaws.com epos.unicredit.ro *.gigya.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.dedeman.ro maps.googleapis.com *.google-analytics.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-kUbewsCeu7bI0Qyw22GCMA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'self' addtocalendar.com cdn.amcharts.com cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://stage-unifiedsearch.geapps.io https://unifiedsearch.geapps.io https://www.google.com; script-src-attr 'self'; style-src 'self' addtocalendar.com cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://stage-unifiedsearch.geapps.io https://unifiedsearch.geapps.io maxcdn.bootstrapcdn.com; style-src-attr 'self'; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-Z6sZiilDg4TJlvH6T0QJLw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-3AUdrKV_xO7zH6euXKYY0A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-lK9l3Jp4mwTzPOJ3679msg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-HRJ7COTBIEu2gBAajImaYg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-jfWsBrx96rl1Pe_BHcfEhw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-kFaFZJEhqA4a5j0lDoHYSw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-oD93v8DcsfYpcyy1kURY0g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-P6aOolwv0g2GLpVhHaUifw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-Rqt-7Xqvo2Li-D3WhZMZ_A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-cptY_cXs6PX_XgdkiYUE1w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-yvplR0atwqFkinY3-ATPEg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-EV5bjLZQ8SuTKagAgEU3lQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net cash-f.squarecdn.com self data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * https://store.plumrocket.com pal-test.adyen.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ * self *.doubleclick.net *.criteo.com *.easydmp.net *.snapchat.com https://store.plumrocket.com https://accounts.google.com checkoutshopper-test.adyen.com pal-test.adyen.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io * self *.bing.com *.paypal.com *.google.fr *.electrodepot.fr *.electrodepot.be *.electrodepot.es *.cookielaw.org *.snapchat.com checkoutshopper-test.adyen.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com self sc-static.net *.abtasty.com *.jsdelivr.net *.gstatic.com *.facebook.net *.tiktok.com *.googleapis.com *.easydmp.net *.vzbl.eu *.aticdn.net *.m1by1.com *.woosmap.com *.doubleclick.net *.cookielaw.org *.snapchat.com *.valiuz.com *.mediarithmics.com *.prediggo.services https://accounts.google.com checkoutshopper-test.adyen.com 'self' 'unsafe-eval' 'nonce-ZmMxZWhhdmRtYXZ1ejlpYnU0bXd0M3Y1dDZodmJoa3g=' 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY/CkTMBhjNhwPvglpYumjx31B4fjkY8='; style-src *.adobe.com fonts.googleapis.com *.cash.app self *.gstatic.com *.electrodepot.fr *.electrodepot.be *.electrodepot.es *.snapchat.com https://accounts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io * self *.snapchat.com *.cookielaw.org *.abtasty.com *.googleapis.com *.vzbl.eu *.criteo.com *.easydmp.net *.paypal.com *.xiti.com *.valiuz.com *.doubleclick.net *.mediarithmics.com https://accounts.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.electrodepot.fr *.electrodepot.be *.electrodepot.es *.bing.com *.criteo.net *.snapchat.com *.netvigie.com *.xiti.com *.valiuz.com *.googletagmanager.com *.google.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-T-aXyPuPd6N6Jlyw2VMRfg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
frame-ancestors 'self' http://localhost:4002; 1
object-src 'none';base-uri 'self';script-src 'nonce-bHtmpOxOqrmILmtI2XteeA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'nonce-Q9AvOOxu+6TMS7nJv+h/3/ENTdMKoPfuFd+f7KTI4Ic=' https:; script-src-attr 'self'; style-src 'self' 'nonce-Q9AvOOxu+6TMS7nJv+h/3/ENTdMKoPfuFd+f7KTI4Ic='; style-src-attr 'self'; font-src 'self' https: data:; media-src 'self' https:; img-src 'self' https: data:; connect-src 'self' https: http:; object-src 'none'; base-uri 'self'; form-action 'self' https://wallet.csccloud.in https://payuat.csccloud.in https://pay.csccloud.in; frame-ancestors 'none'; frame-src 'self' https://www.youtube-nocookie.com 1
object-src 'none';base-uri 'self';script-src 'nonce-_xI38d_w1rbY99wXfTyA5g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-7ripFxscOHC-I1OzUyUj9w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-jFgOy6li8eDaAG1SSDrlxQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-AniJ9nN2fiXncyqM456QQA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-r5juJt4Faqnpqai1tv7utg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-nmEWsu0BY9DUt9IL2z_MXw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
block-all-mixed-content; report-uri https://www.warau.jp/mixedcontentreport.php 1
object-src 'none';base-uri 'self';script-src 'nonce-rFH36kNWYjpU8085wZcoag' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-NktxrTnT00y_o_Wx1HTafg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-EyjrxaISSRBiDOkyRExa2A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src https: ; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; report-uri /csp/ 1
object-src 'none';base-uri 'self';script-src 'nonce-_je7hj7qk5DKdV1uzlUyHg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-Oa6wR7N_1PsiQ6RC1iR3zw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-PH6LBJvoba1T4dTDfTHrKg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-dwbJkXfc6OpQP0alqB8dKw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-Fvcsc7fEu6ORt9A3iI-ejQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src https: data: https://www.uptodate.com https://www.uptodate.cn; child-src https: data: blob: edge: brave: puffin:; img-src data: https: blob: https://www.uptodate.com https://www.uptodate.cn https://*.d.aa.online-metrix.net https://cdn.cookielaw.org https://app.pendo.uptodate.com https://cdn.wolterskluwer.io; font-src https: data: https://www.uptodate.com https://www.uptodate.cn; worker-src blob: brave: edge: puffin: https://www.uptodate.com https://www.uptodate.cn; media-src data: https: https://www.uptodate.com https://www.uptodate.cn; connect-src data: https: wss: https://www.uptodate.com https://www.uptodate.cn https://geolocation.onetrust.com https://cdn.cookielaw.org https://app.pendo.uptodate.com https://privacyportal-de.onetrust.com; script-src 'unsafe-inline' 'unsafe-eval' https: https://www.uptodate.com https://www.uptodate.cn https://cdn.cookielaw.org https://cdn.pendo.uptodate.com https://www.googletagmanager.com https://tmx.uptodate.com https://rollouts.cdn.uptodate.com https://www.google-analytics.com https://code.jquery.com; style-src 'unsafe-inline' https: https://www.uptodate.com https://www.uptodate.cn https://cdn.pendo.uptodate.com; frame-src https: https://www.uptodate.com https://www.uptodate.cn baiduboxapp: ms-appx-web:; report-uri /services/app/content-security-policy-report/report/json;frame-ancestors *; 1
object-src 'none';base-uri 'self';script-src 'nonce-G2EeXvlAnMO4oTjhsmiKyQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-2iCPUbS_C-g0NYMN1COF5Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-dXJmsJxfxW5R1953PRe5cA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-dDwGJufm1OODSEZPrqDxtQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-3uQkdIyrZV1vvFm5bZ_tng' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-mIVjvCtvdOB6OJIQdVIYkA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-fQJUnsLjbltGV5MbxQXfBw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-dNxwiIXrrsX4y6tN-dNHuQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-ZJLp36Q6i3m2lwd3xvTETQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-pNa3sIs7JpAR0cjgOPRSZg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-AGc1S0Lz5zS4_JubF-f_-g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/googleorg 1
object-src 'none';base-uri 'self';script-src 'nonce-rIymhY6SlsnYW9nX18K9dw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-V2nLDN163m7NhstJL696cw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-sk0vsVq6D20ocsAKOLBZBA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-Up5gkMKwpQElcTB6vsALpQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-XY1K2YSVfREshkWmX4BBrQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-4XPRkdcbDmzDBioaHem5cg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-aWnBgT1DoKxgm9Q2Cyz7FA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-qPiwoYUwktz8fNHiEsDfdw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-2wprbwYjpNdH_XK3xWm3vQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-jaRT6IqcXzePLDtxM9yqUQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-ut761sblj9e8mVUN5TlDCQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-0onrrGvNlKTlQR71tzWEZg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-k5A6woZJz1omLFL0G6mNUA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-9oV1YVhLW7R1D0nBTjZgAQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
frame-ancestors https://*.workable.com/; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubcbe8d2ef0966e8645a91099cfac490bb&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=%40http.headers.cfray%3Aa3a4d29c89cc33dc 1
object-src 'none';base-uri 'self';script-src 'nonce-udAu90MSL1p45pD37Ikj_g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
child-src 'self' https://*.qualified.com; default-src 'self'; frame-src 'self' https://9628652.fls.doubleclick.net https://td.doubleclick.net https://js.driftt.com https://*.qualified.com https://a8447815042.cdn-pci.optimizely.com https://ct.pinterest.com https://tealium-f.squarecdn.com; worker-src 'self' blob:; connect-src 'self' https://assets.ctfassets.net https://api.broadway.squareup.com https://campaign-hub-production-f.squarecdn.com https://api.squareup.com/v1/cdp/batch https://api.squarestagingexternal.com/v1/cdp/batch https://api.squarestagingexternal.com https://api.squareup.com https://api.squareupstaging.com *.contentsquare.net https://capi.squareup.com https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com https://stats.g.doubleclick.net https://facebook.com https://www.facebook.com https://googleads.g.doubleclick.net http://www.google-analytics.com https://www.google-analytics.com https://google.com https://www.google.com https://us-central1-sq-sgtm-prod.cloudfunctions.net https://www.googletagmanager.com http://images.ctfassets.net https://images.ctfassets.net http://424-iab-218.mktoresp.com https://424-iab-218.mktoresp.com https://xms2-marketo.beta.stage.sqprod.co https://424-iab-218.mktoutil.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://logx.optimizely.com https://ct.pinterest.com https://conversions-config.reddit.com https://pixel-config.reddit.com https://www.redditstatic.com *.ingest.us.sentry.io *.6sc.co https://api.sprig.com https://squareupstaging.com https://visitor-scoring-new.marketlinc.com https://api.chilipiper.com https://squareinc-sandbox.chilipiper.com https://squareinc.chilipiper.com https://www.workwithsquare.com wss://*.qualified.com https://*.qualified.com https://pw-renderer-production-c.squarecdn.com localhost:*; font-src 'self' https://cash-f.squarecdn.com https://square-fonts-production-f.squarecdn.com; img-src 'self' data: blob: https://ib.adnxs.com https://assets.ctfassets.net https://cdn.blisspointmedia.com https://campaign-hub-production-f.squarecdn.com *.contentsquare.net https://ad.doubleclick.net https://facebook.com https://www.facebook.com https://google.com https://www.google.com https://adservice.google.com https://googleads.g.doubleclick.net http://www.google-analytics.com https://www.google-analytics.com https://*.g.doubleclick.net https://www.googletagmanager.com http://images.ctfassets.net https://images.ctfassets.net https://px.ads.linkedin.com https://cdn.cookielaw.org https://pixel.pointmediatracker.com https://alb.reddit.com *.6sc.co https://api.squareup.com https://api.squareupstaging.com https://insight.adsrvr.org https://match.adsrvr.org https://*.qualified.com https://pw-renderer-production-c.squarecdn.com; manifest-src 'self' https://pw-renderer-production-c.squarecdn.com; media-src 'self' mediastream: https://assets.ctfassets.net https://js.driftt.com http://videos.ctfassets.net https://videos.ctfassets.net https://*.qualified.com; script-src 'self' *.contentsquare.net https://www.datadoghq-browser-agent.com https://js.driftt.com https://*.qualified.com https://connect.facebook.net https://www.googleadservices.com https://googleads.g.doubleclick.net http://www.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com https://campaign-hub-production-f.squarecdn.com https://lift-ai-js.marketlinc.com https://martech-development-c.squarecdn.com https://martech-production-c.squarecdn.com https://martech-staging-c.squarecdn.com http://munchkin.marketo.net https://munchkin.marketo.net https://cdn.cookielaw.org https://a8447815042.cdn-pci.optimizely.com https://s.pinimg.com https://ct.pinterest.com https://pw-renderer-production-c.squarecdn.com https://pw-renderer-staging-c.squarecdn.com https://pwt-production-c.squarecdn.com https://pwt-staging-c.squarecdn.com https://sales-bridge-production-c.squarecdn.com https://sales-bridge-staging-c.squarecdn.com https://squareinc-sandbox.chilipiper.com https://squareinc.chilipiper.com https://www.workwithsquare.com https://www.redditstatic.com *.6sc.co https://cdn.sprig.com https://xms-production-f.squarecdn.com https://www.youtube.com https://pw-renderer-production-c.squarecdn.com 'nonce-FTZHWyl3W23C7Y2mVm3NNw=='; style-src 'self' https://square-fonts-production-f.squarecdn.com https://sales-bridge-production-c.squarecdn.com https://sales-bridge-staging-c.squarecdn.com 'unsafe-inline' https://*.qualified.com https://pw-renderer-production-c.squarecdn.com; frame-ancestors 'self' https://app.contentful.com; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubd9af00759e65a48ba7ee3ff1dfa4260b&dd-evp-origin=content-security-policy&ddsource=csp-report; report-to browser-intake-datadoghq 1
object-src 'none';base-uri 'self';script-src 'nonce-wdWhI0p9k8cjojo4CkTSwA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-9PXAS-ShWWUbInkIqz0oFw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-5PFGL6k4qLNqKiATKn58sw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-NqzQjOsPg_vAFUdprmXRJw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-fZvSyllnGswveJSyorzy2g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-mel0iZ_hancQajQEPIwD9Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-4I528xprOMNYvPrTtECMDw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-7otY3zXS0sMDpa67Aij-xw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-7RzoMbH2ApqvMw0wmiD8jQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-vQpsVUL-g62uSrX3HJXvkA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src bam.nr-data.net cdn.growthbook.io cdn-ukwest.onetrust.com geolocation.onetrust.com pagead2.googlesyndication.com privacyportal-uk.onetrust.com prod.global-fragments-server.green.which.co.uk tpc.googlesyndication.com *.safeframe.googlesyndication.com www.googletagmanager.com ep2.adtrafficquality.google which-group.my.site.com 'unsafe-inline' 'self' https://*.which.co.uk;base-uri 'self';font-src fonts-which-co-uk.s3.amazonaws.com player.captivate.fm public.flourish.studio 'unsafe-inline' 'self' https://*.which.co.uk;form-action 'self';frame-ancestors 'self';img-src abs-0.twimg.com ad.doubleclick.net ade.googlesyndication.com adservice.google.com alb.reddit.com analytics.twitter.com artwork.captivate.fm bat.bing.com c.contentsquare.net cdn-ukwest.onetrust.com cf-images.eu-west-1.prod.boltdns.net ct.pinterest.com googleads.g.doubleclick.net house-fastly-signed-eu-west-1-prod.brightcovecdn.com maps.gstatic.com media.which.gpp.io metrics.brightcove.com pagead2.googlesyndication.com pbs.twimg.com q.quora.com s3-eu-west-1.amazonaws.com securepubads.g.doubleclick.net siteintercept.qualtrics.com storage.googleapis.com syndication.twitter.com t.co tpc.googlesyndication.com tracking.audio.thisisdax.com trx-hub.com www.facebook.com www.google-analytics.com www.google.co.uk www.google.com yksbw1yr.micpn.com ep1.adtrafficquality.google 'unsafe-inline' 'self' https://*.which.co.uk;object-src 'none';script-src a.quora.com ajax.googleapis.com bat.bing.com c.amazon-adsystem.com cdn-magiclinks.trackonomics.net cdn-ukwest.onetrust.com cdn.amplitude.com cdn.jsdelivr.net connect.facebook.net ct.pinterest.com cdn.growthbook.io googleads.g.doubleclick.net manifest.prod.boltdns.net maps.googleapis.com pagead2.googlesyndication.com platform.twitter.com player.captivate.fm players.brightcove.net prod.global-fragments-server.green.which.co.uk public.flourish.studio pym.nprapps.org region1.google-analytics.com s.pinimg.com siteintercept.qualtrics.com static-ssl.responsetap.com static.ads-twitter.com static.digidip.net t.contentsquare.net tpc.googlesyndication.com track.omguk.com which.resultspage.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.redditstatic.com yksbw1yr.micpn.com zeta-live.getsquirrel.co znbiyguoobqgm5gwu-which.siteintercept.qualtrics.com which-group.my.site.com 'unsafe-inline' 'self' https://*.which.co.uk 'nonce-61e0f17c98dee06ad7fccd4614c0b241faf582d26a62d5a006087ae83ba12aad';script-src-attr 'none';style-src aaf1a18515da0e792f78-c27fdabe952dfc357fe25ebf5c8897ee.ssl.cf5.rackcdn.com cdn.jsdelivr.net flo.uri.sh fonts.googleapis.com pagead2.googlesyndication.com player.captivate.fm public.flourish.studio service.force.com zeta-live.getsquirrel.co which.resultspage.com which-group.my.site.com 'unsafe-inline' 'self' https://*.which.co.uk;connect-src region1.google-analytics.com which-group.my.salesforce-scrt.com cdn.growthbook.io cdn-ukwest.onetrust.com geolocation.onetrust.com pagead2.googlesyndication.com ep1.adtrafficquality.google ep2.adtrafficquality.google trackerapi.ebxcdn.com 'unsafe-inline' 'self' https://*.which.co.uk 1
object-src 'none';base-uri 'self';script-src 'nonce-VPED_w82THYnWhfq5VPuxQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce--ZHwt4KdZ7npO90PURV4rw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-4nIl694ORTNXf6Q35Z6oqA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-2cSZVbhI3uYSQ6BoNj5img' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-QDZh-9wPPqBYx3IWYpZfwg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; base-uri 'self' *.hackerrank.com; connect-src * data: blob: 'unsafe-inline' 'unsafe-eval'; frame-src 'unsafe-inline' *; img-src * data: blob: 'unsafe-inline'; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.chatlio.com *.ads.linkedin.com *.demandbase.com *.firebaseio.com *.hackerrank.com *.hackerrank.io *.linkedin.com *.twitter.com *.wsp.hackerrank.com *.wss.hackerrank.com *.zopim.com api.filepicker.io api.olark.com app-sji.marketo.com bam.nr-data.net cdn.amplitude.com cdn.auryc.com cdn.bizible.com cdn.heapanalytics.com cdn.mxpnl.com cdn.optimizely.com cdn.raygun.io cdn.userty.com cdn.walkme.com cdnjs.cloudflare.com connect.facebook.net d1ka33fs6lvw5x.cloudfront.net d1ncy0v3du7k5q.cloudfront.net ds-aksb-a.akamaihd.net googleads.g.doubleclick.net www.gstatic.com hrcdn.net js-agent.newrelic.com js.stripe.com munchkin.marketo.net script.hotjar.com snap.licdn.com ssl.google-analytics.com static.ads-twitter.com static.hotjar.com static.olark.com static.zdassets.com stats.pusher.com use.typekit.net www.google-analytics.com www.google.com www.googleadservices.com www.googletagmanager.com s3.amazonaws.com cdn.pendo.io edge.fullstory.com media.twiliocdn.com *.pendo.hackerrank.com *.private.hackerrank.link download-cdn.perfext.hackerrank.link d2a3h6e71jcifd.cloudfront.net marketo.clearbit.com assets.churnkey.co rs.fullstory.com app.runrehearsals.com data.pendo.io www.vscode-web.hrcdn.net cdn.cookielaw.org hackerrank.chilipiper.com unpkg.com accounts.google.com d2i34c80a0ftze.cloudfront.net; style-src * data: blob: 'unsafe-inline'; worker-src 'self' data: blob:; report-uri https://hackerrank.report-uri.com/r/d/csp/reportOnly 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' 1003891.track.convertexperiments.com app.hubspot.com cdn-3.convertexperiments.com cdn-4.convertexperiments.com *.metrics.convertexperiments.com *.signals.convertexperiments.com logs.convertexperiments.com *.convertexperiments.com cdn.pdst.fm connect.facebook.net js.hs-analytics.net js.hs-banner.com js.hsforms.net js.hsleadflows.net js.hubspotfeedback.com js.usemessages.com organizer.bizzabo.com play.vidyard.com script.hotjar.com snap.licdn.com static.hotjar.com static.hsappstatic.net www.google-analytics.com www.googletagmanager.com www.recaptcha.net code.highcharts.com www.youtube.com js.hubspot.com www.dropbox.com widget.altrulabs.com www.google.com maps.googleapis.com wt-assets.hubteam.com cdn2.hubspot.net www.redditstatic.com cdn.veritonic.com gosniply.com d.impactradius-event.com js.hubspot.com 50339659.hs-sites.com analytics.tiktok.com api.s10h.io sgtm-amer.hubspot.com js.hsadspixel.net cdn.intellimize.co static.cloudflareinsights.com ob.greencolumnart.com tags.pw.adn.cloud cdn.jsdelivr.net js.storylane.io 'strict-dynamic' 'nonce-2qqphc4Ttk23un62h7Xglg=='; report-uri https://send.hsbrowserreports.com/csp/report 1
object-src 'none';base-uri 'self';script-src 'nonce-vj-FQEGn2vFYrEm_o62_BA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-6NCun7BIGx_02m5YhqcKWA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-VftiDa8_zVkvXO-SJsbxRQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-K70KO1gdDCDo4Y3Z3IQRjQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' https: blob:;style-src 'self' 'unsafe-inline' https: data:;connect-src https: wss:;frame-src https:;script-src 'unsafe-eval' 'unsafe-inline' https: blob: data:;font-src https: data:;img-src https: data: blob:;media-src https: blob:; report-uri /csp_rep 1
object-src 'none';base-uri 'self';script-src 'nonce-4Yp-M_tKfeyg1_6lrfQcCw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-O29PYcn-AbYcnhE62zeXiA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-dyG2svqKe9PG8xJ-7i1nKA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
report-uri https://mon-ttp.lemon8-app.us/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=a2ER8eALdqWH8mbn5n3bkT&v=4&s=587&b=oab; report-to csp-endpoint; script-src 'report-sample' 'unsafe-eval' *.tiktokcdn-us.com connect.facebook.net ct.pinterest.com; worker-src 'self' 1
object-src 'none'; script-src 'self' 'report-sample' 'unsafe-eval' https://unpkg.com 'unsafe-inline' https://webomat.unistra.fr/; script-src-elem 'self' 'report-sample' 'unsafe-eval' https://unpkg.com; style-src 'self' 'report-sample'; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-G7qB3SbDJHVCSy-28wJwVQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/chromebook 1
connect-src 'self' https://*.usercentrics.eu https://www.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://maps.googleapis.com https://*.fundraiseup.com https://services1.arcgis.com https://ip-api.com https://dev.visualwebsiteoptimizer.com https://fndrsp.net; font-src 'self' https://fonts.gstatic.com https://use.typekit.net https://p.typekit.net data:; frame-src 'self' https://web.cmp.usercentrics.eu https://www.googletagmanager.com https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://*.fundraiseup.com; img-src 'self' 'report-sample' data: blob: https://*.usercentrics.eu https://web.cmp.usercentrics.eu https://www.googletagmanager.com https://www.google-analytics.com https://stats.g.doubleclick.net https://i.ytimg.com https://fonts.gstatic.com https://*.fundraiseup.com https://dev.visualwebsiteoptimizer.com; media-src 'self' https://*.fundraiseup.com; object-src 'none'; script-src 'self' 'report-sample' https://web.cmp.usercentrics.eu https://privacy-proxy.usercentrics.eu https://www.googletagmanager.com https://ssl.google-analytics.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://ajax.googleapis.com https://maps.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cdn.datatables.net https://cdn.tailwindcss.com https://code.jquery.com https://code.highcharts.com https://code.responsivevoice.org https://js.stripe.com https://s3-us-west-2.amazonaws.com https://unpkg.com https://cdn.fundraiseup.com https://static.fundraiseup.com https://www.youtube.com https://s.ytimg.com https://connect.facebook.net https://cloud.google.com https://dev.visualwebsiteoptimizer.com 'nonce-NYC9IHYRGFxRxf-LNyD64Q'; style-src 'self' 'report-sample' 'unsafe-inline' https://web.cmp.usercentrics.eu https://privacy-proxy.usercentrics.eu https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://stackpath.bootstrapcdn.com https://unpkg.com https://use.typekit.net https://p.typekit.net cdn.jsdelivr.net fonts.googleapis.com; worker-src 'self' blob:; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-xKnvV8G4BLi5uffPprj76g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-19ofqsxJRO9MiXTd8J1paw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' blob: https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://js-na1.hs-scripts.com https://js-na2.hs-scripts.com https://js-na2.hs-analytics.net https://js-na2.hs-banner.com https://js-na2.hscollectedforms.net https://js-na2.hsadspixel.net https://js-na2.hubspot.com https://static.ads-twitter.com https://snap.licdn.com https://www.redditstatic.com https://googleads.g.doubleclick.net https://data.cline.bot https://static.hsappstatic.net https://js-na2.hsforms.net https://js.hcaptcha.com https://tenor.com https://import-cdn.default.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https://www.facebook.com https://www.google-analytics.com https://*.ghost.io https://storage.googleapis.com https://*.githubusercontent.com https://cline.bot https://assets.int.cline.bot https://px.ads.linkedin.com https://alb.reddit.com https://www.redditstatic.com https://analytics.twitter.com https://t.co https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.google.com https://track-na2.hubspot.com https://forms-na2.hsforms.com https://perf-na2.hsforms.com https://img.spacergif.org https://www.googletagmanager.com https://i.ytimg.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.facebook.com https://*.hubspot.com https://api-na2.hubapi.com https://forms-na2.hscollectedforms.net https://*.unify.io https://api.unifyintent.com https://mpc-prod-21-1053047382554.us-central1.run.app https://app.posthog.com https://data.cline.bot https://px.ads.linkedin.com https://pixel-config.reddit.com https://analytics.twitter.com https://t.co https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://newassets.hcaptcha.com; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://www.facebook.com https://tenor.com https://newassets.hcaptcha.com; media-src 'self' https://assets.int.cline.bot https://storage.googleapis.com https://storage.ghost.io; worker-src 'self' blob:; base-uri 'self'; form-action 'self' https://www.facebook.com; object-src 'none'; report-uri /api/csp-report 1
default-src 'self'; img-src 'self' data: https:; font-src 'self' https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdn.datatables.net; connect-src 'self' https://www.google-analytics.com; frame-src https://www.google.com; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self' *.sleeknote.com https://*.kindlycdn.com *.boozt.com *.klarna.com *.booztx.com wss://ws-eu.pusher.com:443 https://*.pusher.com checkout-cdn.avarda.com wss://sage.kindly.ai static.criteo.net wss://ws-eu.pusher.com https://*.kindly.ai *.booztcdn.com; script-src 'self' data: blob: *.rewardspay.com static.cloudflareinsights.com dp64mxip2za0c.cloudfront.net www.barilliance.net cdn.avo.app *.booztcdn.com www.googleoptimize.com www.googletagmanager.com analytics.tiktok.com *.clarity.ms utt.impactcdn.com cookie-cdn.cookiepro.com atemda.com  script.koral.nu hst.tradedoubler.com cdn.loadbee.com cnstrc.com cdn.avo.app the.sciencebehindecommerce.com bat.bing.com *.zenaps.com s2.adform.net tagmanager.google.com vc.hotjar.io cdn.noibu.com *.sleeknote.com widget.eu.criteo.com tr.snapchat.com yastatic.net *.adyen.com googleads.g.doubleclick.net tracking.s24.com *.contentsquare.net cm.g.doubleclick.net *.issuu.com euob.isstarsbuilding.com cdn.cookielaw.org *.flixcar.com web-assets.stylitics.com s.pinimg.com scripts.dialogintelligens.dk pagead2.googlesyndication.com cdn.siftscience.com www.gstatic.com bam-cell.nr-data.net *.kronor.io www.googleadservices.com www.snapengage.com avdonl0p0checkout0fe.blob.core.windows.net 7276578.collect.igodigital.com www.awin1.com *.booztx.com connect.facebook.net bugcrowd.com track.adform.net www.datadoghq-browser-agent.com cdn.depict.ai ct.pinterest.com *.freshchat.com  obseu.isstarsbuilding.com utt.impactcdn.com *.criteo.com www.dwin1.com d38knilzwtuys1.cloudfront.net *.klarnacdn.net *.klarna.com sc-static.net sslwidget.criteo.com assets.bugcrowdusercontent.com *.google.com dev.visualwebsiteoptimizer.com cdn.evgnet.com *.google-analytics.com *.booztcdn.com *.boozt.com privacyportal.onetrust.com s3.amazonaws.com  maps.googleapis.com static.criteo.net *.tradedoubler.com swrap.tradedoubler.com chat.kindlycdn.com *.trustpilot.com www.google.com *.boozt.com tag.smartly.io bam.nr-data.net *.hotjar.com sdk.privacy-center.org geolocation.onetrust.com optimize.google.com lcx-embed.bambuser.com *.liveshopper.net widget.criteo.com 'unsafe-eval' 'unsafe-inline'; font-src 'self' cdn.honey.io *.booztx.com *.boozt.com fonts.gstatic.com cdnjs.cloudflare.com fonts.googleapis.com chat.kindlycdn.com avdonl0p0checkout0fe.blob.core.windows.net *.avarda.com data: *.booztcdn.com  data: ; img-src optimize.google.com data: https: data: blob: 'unsafe-inline'; connect-src 'self' data: chat.kindlycdn.com *.google.com.pr www.bing.com www.googletagmanager.com *.google.com.kh bam.nr-data.net *.google.fr *.google.co.jp checkout-cdn.avarda.com wss://input.noibu.com *.google.com.eg *.google.by boozt.com *.google.com.ni *.criteo.net *.googleapis.com *.googleapis.com dev.visualwebsiteoptimizer.com *.loadbee.com *.google.mn *.google.com.lb *.google.be *.google.co.nz *.google.ps scripts.dialogintelligens.dk *.googleoptimize.com *.google-analytics.com *.google.com.tw *.google.com.cu analytics.tiktok.com *.google.com.np *.stylitics.com *.google.mk *.google.co.ke d.impct.site *.adzerk.net *.google.sk *.google.com.mt obseu.isstarsbuilding.com *.google.com.uy *.kronor.io *.google.ro api.dialogintelligens.dk *.analytics.google.com tr.snapchat.com *.google.lv *.google.com.au *.adform.net *.google.com.et wss://proxy.depict.ai:7315 *.google.com.ec *.google.md *.google.com.co *.google.ae analytics.sleeknote.com bot.kindly.ai *.google.co.zw translate.googleapis.com *.google.com.sa *.clarity.ms *.hotjar.com partner.revieve.com  spk.boozt.com cdn.cookielaw.org *.snapchat.com *.onetrust.com *.google.ie vc.hotjar.io *.google.ch *.google.tn *.google.co.id *.google.cl *.google.mw *.datadoghq-browser-agent.com *.google.ba www.snapengage.com *.google.gl *.google.com.bo *.google.es *.google.co.th input.noibu.com *.avarda.com *.google.ci *.google.gr *.google.com.hk unpkg.com *.privacy-center.org *.criteo.net *.google.co.il *.google.am *.browser-intake-datadoghq.eu *.google.com.bh *.google.com *.evergage.com *.google.com.ar *.criteo.com *.google.com.ly adservice.google.com *.google.so *.booztx.com *.boozt.com *.google.co.tz *.google.com *.google.me *.google.mv *.clarity.ms google.com *.google.co.za api.depict.ai *.klarnacdn.net *.google.com.vn kronor.io bam-cell.nr-data.net www.getpica.com *.google.com.qa *.booztcdn.com *.logs.datadoghq.eu  *.hotjar.io browser-intake-datadoghq.eu *.google.ru *.google.pt *.google.co.cr app.vwo.com *.google.com.tr *.google.lu *.contentsquare.net *.hotjar.com dawa.aws.dk *.google.lt sp.boozt.com *.doubleclick.net *.google.co.bw *.google.com.gh *.google.no *.sleeknote.com *.google.com.bd *.google.com.kw *.visualwebsiteoptimizer.com booztfashionab.pxf.io *.google.ge *.google.com.pe *.google.com.sg *.google.it pagead2.googlesyndication.com www.facebook.com wss://kronor.io *.google.al *.google.com.br *.google.com.ua *.google.co.vi *.google.co.ck www.googleadservices.com *.google.mu *.google.az stats.g.doubleclick.net *.google.bi *.google.lt *.google.com.na *.klarna.com *.google.ee *.google.cz *.google.com.pk *.google.gm *.google.fi *.hotjar.io media.flixfacts.com api.avo.app *.google.com.do *.google.sc *.google.rs *.google.hu *.google.si *.google.co.uz ct.pinterest.com *.google.sr *.google.iq *.google.co.zm *.google.hr *.google.tg *.google.co.uk *.google.lk *.google.com.jm *.google.kg *.google.com.af bat.bing.net *.google.pl *.google.com.ph *.google.nl *.google.cn *.google.cv wss://ws-eu.pusher.com *.contentsquare.com *.google.com.my *.google.bg fpt.boozt.com bat.bing.com *.google.is *.google.at *.google.com.mx *.google-analytics.com *.google.bt dev.visualwebsiteoptimizer.com *.klarnaevt.com code.jquery.com *.google.ca *.google.com.cy *.google.jo *.hotjar.com *.google.co.ma *.google.de *.adyen.com *.google.ga *.google.kz *.avarda.org; child-src 'self' td.doubleclick.net js.klarna.com tr.snapchat.com track.adform.net ct.pinterest.com www.googletagmanager.com *.freshchat.com *.trustpilot.com static.criteo.net fpt.boozt.com *.google-analytics.com *.criteo.com *.hotjar.com blob: ; frame-src 'self' www.instagram.com *.secure2gw.ro *.otpbanka.hr *.sbanken.no *.fuib.com *.klarnacdn.net *.ing.ro td.doubleclick.net www.securesuite.co.uk static.criteo.net *.criteo.com static.criteo.net *.adyen.com widget.eu.criteo.com *.op.fi dialogintelligens.dk *.issuu.com www.facebook.com booztfashionab.pxf.io chatbot.dialogintelligens.dk payment-gateway.kronor.io *.trustpilot.com *.edb.com *.rewardspay.com *.sibs.pt sc-static.net bid.g.doubleclick.net *.cardinalcommerce.com *.komplettbank.se www.rsa3dsauth.co.uk vc.hotjar.io *.snapchat.com *.skandia.se web.facebook.com *.nordea.com *.rpc-raiffeisen.com *.redsys.es trustly.com *.trustly.com *.freshchat.com *.booztcdn.com bugcrowd.com td.doubleclick.net *.saastopankki.fi *.lcl.fr the.sciencebehindecommerce.com *.komplettbank.com *.hcaptcha.co *.arcot.com gum.criteo.com xn--nskeskyen-k8a.dk *.klarna.com *.estcard.ee *.netcetera-payment.ch *.vinea.es optimize.google.com *.bpcbt.com lcx-player.bambuser.com *.hotjar.com *.alandsbanken.fi *.kronor.io *.wirecard.com *.signicat.com *.targobank.de *.swedbank.lt *.rabobank.nl player.vimeo.com *.sparebank1.no cdn.depict.ai *.boozt.com *.sia.eu *.sparkassen-kreditkarten.de *.modirum.com www.awin1.com *.danskebank.com *.btrl.ro gum.criteo.com *.zenaps.com widget.koral.nu assets.pinterest.com www.facebook.com *.fio.cz *.nexi.it td.doubleclick.net *.3dsecure.no *.wlp-acs.com staticxx.facebook.com *.loadbee.com dev.visualwebsiteoptimizer.com *.nbg.gr ct.pinterest.com *.swedbank.se *.flixcar.com *.eewosecure.com acs-safekey.americanexpress.com track.adform.net dis.eu.criteo.com www.googletagmanager.com *.citadele.lv *.booztx.com  www.getpica.com *.touch.tech *.luottokunta.fi *.creditmutuel.fr *.cmbchina.com; style-src 'self' *.freshchat.com *.adyen.com cdn.cookielaw.org privacyportal.onetrust.com *.booztx.com *.booztcdn.com optimize.google.com *.boozt.com fonts.googleapis.com d38knilzwtuys1.cloudfront.net tagmanager.google.co geolocation.onetrust.com *.stylitics.com *.kronor.io chat.kindlycdn.com *.flixcar.com cdn.honey.io cookie-cdn.cookiepro.com translate.googleapis.com blob: data: blob: 'unsafe-inline'; manifest-src 'self' *.booztx.com *.boozt.com *.booztcdn.com; media-src 'self' data: *.booztcdn.com storage.googleapis.com *.booztx.com www.snapengage.com; frame-ancestors 'self' ; report-uri /csp-report/; report-to csp-reports 1
base-uri 'self';script-src 'self' *.aliyun.com *.alicdn.com dxwebview: *.qwen.ai qwen.ai *.alibaba.com googleads.g.doubleclick.net 'unsafe-inline' 'unsafe-eval' 'report-sample' https: http: 'nonce-CT009ldqUrWGhtbbfdxBGQ' 'Strict-Dynamic' 'unsafe-hashes';frame-src 'self'  *.aliyun.com *.alicdn.com td.doubleclick.net *.alibaba-inc.com qwenlm.io *.alibabacloud.com dxwebview: *.qwen.ai qwen.ai www.youtube.com;worker-src blob: 'self';object-src 'none';frame-ancestors 'self' *.aliyun.com *.alibabacloud.com;report-uri /report-csp 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.pie.org/ https://www.google.com/recaptcha/ https://accounts.google.com/ https://www.gstatic.com/ https://adblockforyoutube.com/ https://www.adblockforyoutube.com/; style-src 'self' 'unsafe-inline'; img-src 'self' blob: data: *; object-src 'none'; font-src 'self' https://fonts.gstatic.com; media-src 'self' https://cdn.pie.org; connect-src 'self' https://*.pie.org https://cdn.segment.com https://cdn.lottielab.com https://browser-intake-us5-datadoghq.com https://www.google.com/recaptcha/ https://adblockforyoutube.com https://www.adblockforyoutube.com; frame-src 'self' https://accounts.google.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/ https://recaptcha.google.com/ https://adblockforyoutube.com/ https://www.adblockforyoutube.com/ https://demo.zeroclick.ai/; base-uri 'self'; frame-ancestors 'none'; upgrade-insecure-requests 1
default-src 'self'; base-uri 'self'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://crm-form.avada.io https://avada-tools-api.vercel.app https://themechecker.avada.io https://backend.avada.io https://avadaio_assets.storage.googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com; frame-src https://challenges.cloudflare.com https://www.googletagmanager.com; form-action 'self' https://crm-form.avada.io 1
frame-ancestors https: canvas.uts.edu.au;  report-uri https://www.uts.edu.au/api/reporting/;  report-to csp-endpoint; 1
default-src 'self' lesta.ru *.lesta.ru tanki.su *.tanki.su *.edgevideo.ru https://www.youtube.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' tanki.su *.tanki.su lesta.ru *.lesta.ru *.tvsquared.com *.soloway.ru *.cookielaw.org *.onetrust.com *.outbrain.com *.snapchat.com *.edgevideo.ru https://image.sendsay.ru https://top-fwz1.mail.ru https://privacy-cs.mail.ru https://vk.com https://sc-static.net https://ob.cheqzone.com https://analytics.google.com https://www.google.com https://*.adform.net https://www.googleoptimize.com https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://www.googleadservices.com https://*.yandex.ru https://*.yandex.net https://*.yandex.ua https://*.yandex.by https://*.yandex.kz https://*.yandex.com.tr http://*.yandex.ru http://*.yandex.net http://*.yandex.ua http://*.yandex.by http://*.yandex.kz http://*.yandex.com.tr https://*.yandex.st https://*.yandex.com https://*.yandex.fr https://yandex.st https://u360.d-bi.fr https://bat.bing.com https://connect.ok.ru https://*.vk.com https://googleads.g.doubleclick.net https://*.adroll.com https://*.addthis.com https://*.addthisedge.com https://tag.marinsm.com https://pixel-geo.prfct.co https://static.criteo.net https://stackadapt.com https://*.creative-serving.com https://*.criteo.com https://*.vihub.ru https://*.cloudfront.net https://js.gleam.io https://a1.adform.net https://ajax.googleapis.com https://www.youtube.com https://animate.adobe.com https://inv-dmp.admixer.net ; style-src 'self' 'unsafe-inline' lesta.ru *.lesta.ru tanki.su *.tanki.su https://fonts.googleapis.com ; img-src 'self' data: android-webview-video-poster: * ; connect-src 'self' lesta.ru *.lesta.ru tanki.su *.tanki.su *.edgevideo.ru *.cookielaw.org *.onetrust.com *.outbrain.com *.snapchat.com https://privacy-cs.mail.ru https://sendsay.ru https://sc-static.net https://ob.cheqzone.com https://analytics.google.com https://www.google.com wss://lesta.ru wss://tanki.su wss://*.lstprod.net https://stats.g.doubleclick.net https://*.yandex.ru https://*.yandex.net https://*.yandex.ua https://*.yandex.by https://*.yandex.kz https://*.yandex.com.tr http://*.yandex.ru http://*.yandex.net http://*.yandex.ua http://*.yandex.by http://*.yandex.kz http://*.yandex.com.tr https://*.yandex.st https://*.yandex.com https://*.yandex.fr https://*.addthis.com https://*.google-analytics.com https://*.analytics.google.com https://ymetrica1.com https://*.cloudfront.net https://google.com https://google.ru https://google.com.ua https://google.by https://www.googleoptimize.com https://google.pl https://*.doubleclick.net https://*.googleapis.com ; font-src 'self' lesta.ru *.lesta.ru *.tanki.su https://fonts.gstatic.com ; media-src 'self' lesta.ru *.lesta.ru tanki.su *.tanki.su *.edgevideo.ru ; frame-src 'self' lesta.ru *.lesta.ru tanki.su *.tanki.su *.edgevideo.ru https://*.yandex.ru https://webwisor.com https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr https://tr.snapchat.com https://creativecdn.com https://*.adform.net https://ad3.adfarm1.adition.com https://www.youtube.com https://bid.g.doubleclick.net https://*.criteo.com https://yastatic.net https://*.addthis.com https://gleam.io https://aax-eu.amazon-adsystem.com ; frame-ancestors 'self' https://webwisor.com https://metrika.yandex.ru https://metrika.yandex.by https://metrica.yandex.com https://metrica.yandex.com.tr ; object-src 'self' lesta.ru *.lesta.ru tanki.su *.tanki.su *.edgevideo.ru https://www.youtube.com ; report-uri https://cspreport.lesta.ru/cspreport 1
default-src 'unsafe-inline' 'self' *.zoon.by zoon.by *.zoon.kz zoon.kz *.zoon.ru zoon.ru fonts.googleapis.com fonts.gstatic.com www.gstatic.com data: blob: yandex.com yandex.net *.yandex.net yandex.ru *.yandex.ru yastatic.net *.adfox.ru adfox.ru *.adriver.ru adriver.ru *.yandexadexchange.net yandexadexchange.net *.googleusercontent.com i.ytimg.com *.googlevideo.com *.gstatic.com challenges.cloudflare.com static.cloudflareinsights.com rutube.ru *.rutube.ru vk.com *.vk.com vkvideo.ru *.vkvideo.ru userapi.com *.userapi.com *.vkuser.net *.vkuserlive.net mc.webvisor.com mc.webvisor.org mc.yandex.by mc.yandex.com mc.yandex.com.tr mc.yandex.kz mc.yandex.md mc.yandex.ru mc.yandex.uz mc.yandex.az mc.yandex.tm mc.yandex.com.ge ymkvww9tj4.ru; script-src 'self' *.zoon.by zoon.by *.zoon.kz zoon.kz *.zoon.ru zoon.ru yandex.com yandex.net *.yandex.net yandex.ru *.yandex.ru yastatic.net *.adfox.ru adfox.ru *.adriver.ru adriver.ru *.yandexadexchange.net yandexadexchange.net challenges.cloudflare.com static.cloudflareinsights.com s.ytimg.com mc.webvisor.com mc.webvisor.org mc.yandex.by mc.yandex.com mc.yandex.com.tr mc.yandex.kz mc.yandex.md mc.yandex.ru mc.yandex.uz mc.yandex.az mc.yandex.tm mc.yandex.com.ge ymkvww9tj4.ru wss://mc.webvisor.com wss://mc.webvisor.org wss://mc.yandex.by wss://mc.yandex.com wss://mc.yandex.com.tr wss://mc.yandex.kz wss://mc.yandex.md wss://mc.yandex.ru wss://mc.yandex.uz wss://mc.yandex.com.ge 'nonce-BH8SIaGAKHpUDufSU3edKHhd'; script-src-elem 'report-sample' 'nonce-BH8SIaGAKHpUDufSU3edKHhd' 'strict-dynamic'; style-src 'unsafe-inline' 'report-sample' 'self' *.zoon.by zoon.by *.zoon.kz zoon.kz *.zoon.ru zoon.ru *.gstatic.com fonts.googleapis.com fonts.gstatic.com blob:; frame-src 'self' *.zoon.by zoon.by *.zoon.kz zoon.kz *.zoon.ru zoon.ru blob: yandex.com yandex.net *.yandex.net yandex.ru *.yandex.ru yastatic.net *.adfox.ru adfox.ru *.adriver.ru adriver.ru *.yandexadexchange.net yandexadexchange.net *.gdelu-pro.ru gdelu-pro.ru challenges.cloudflare.com static.cloudflareinsights.com rutube.ru *.rutube.ru googlevideo.com *.googlevideo.com youtube.com *.youtube.com youtube-nocookie.com *.youtube-nocookie.com *.ytimg.com ytimg.com vk.com *.vk.com vkvideo.ru *.vkvideo.ru userapi.com *.userapi.com *.vkuser.net *.vkuserlive.net mc.webvisor.com mc.webvisor.org mc.yandex.by mc.yandex.com mc.yandex.com.tr mc.yandex.kz mc.yandex.md mc.yandex.ru mc.yandex.uz mc.yandex.az mc.yandex.tm mc.yandex.com.ge ymkvww9tj4.ru wss://mc.webvisor.com wss://mc.webvisor.org wss://mc.yandex.by wss://mc.yandex.com wss://mc.yandex.com.tr wss://mc.yandex.kz wss://mc.yandex.md wss://mc.yandex.ru wss://mc.yandex.uz wss://mc.yandex.com.ge master-hauz.ru etro-mejk-ap-salon.ru inpromed-med.ru; connect-src 'self' *.zoon.by zoon.by *.zoon.kz zoon.kz *.zoon.ru zoon.ru yandex.com yandex.net *.yandex.net yandex.ru *.yandex.ru yastatic.net *.adfox.ru adfox.ru *.adriver.ru adriver.ru *.yandexadexchange.net yandexadexchange.net googlevideo.com *.googlevideo.com youtube.com *.youtube.com youtube-nocookie.com *.youtube-nocookie.com *.ytimg.com ytimg.com mc.webvisor.com mc.webvisor.org mc.yandex.by mc.yandex.com mc.yandex.com.tr mc.yandex.kz mc.yandex.md mc.yandex.ru mc.yandex.uz mc.yandex.az mc.yandex.tm mc.yandex.com.ge ymkvww9tj4.ru wss://mc.webvisor.com wss://mc.webvisor.org wss://mc.yandex.by wss://mc.yandex.com wss://mc.yandex.com.tr wss://mc.yandex.kz wss://mc.yandex.md wss://mc.yandex.ru wss://mc.yandex.uz wss://mc.yandex.com.ge wss://ws.zoon.ru:2481 wss://ws.zoon.ru:17375 https://ws.zoon.ru:17375; object-src 'none'; base-uri 'self'; form-action 'self'; report-to csp-public; report-uri /csp.php?csp_area=public&user_id=35745870&secret=J36UIWmi 1
default-src 'self' mitel.io *.mitel.io mitel.com *.mitel.com; require-trusted-types-for 'script'; object-src 'self' mitel.io *.mitel.io mitel.com *.mitel.com; 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; media-src 'self' blob: https:; frame-src 'self' https:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https:; upgrade-insecure-requests; report-uri https://hcn.health/wp-json/hcn/v1/csp-report 1
default-src 'self'; base-uri 'self'; connect-src 'self' bam.nr-data.net sentry.io *.freshworksapi.com wss://*.freshworksapi.com www.google-analytics.com heapanalytics.com www.in-freshbots.ai *.pusher.com; font-src 'self' d2r0bfj5oxwi8g.cloudfront.net d3t6wcud4kij68.cloudfront.net d28y7gk8dndm8e.cloudfront.net data: fonts.gstatic.com use.typekit.net maxcdn.bootstrapcdn.com heapanalytics.com; frame-src 'self' *.webpush.freshchat.com *.freshreports.com wchat.freshchat.com *.freshid.io *.freshworks360.io *.chargebee.com *.myfreshworks.dev *.freshworksweb.com freshdesk.com *.freshworks.com *.int.myfreshworks.dev; img-src https: data: blob: heapanalytics.com; manifest-src 'self'; media-src 'self' https:; object-src 'none'; script-src 'report-sample' 'self' 'unsafe-eval' accounts.freshworks.com bam.nr-data.net d2r0bfj5oxwi8g.cloudfront.net d3t6wcud4kij68.cloudfront.net d28y7gk8dndm8e.cloudfront.net js-agent.newrelic.com polyfill.io wchat.freshchat.com sentry.io js.chargebee.com www.google-analytics.com *.freshworksapi.com heapanalytics.com *.heapanalytics.com fonts.googleapis.com cdn.in-freshbots.ai stats.pusher.com cdn.inlinemanual.com fe-perf-assets.freshworks.com 'unsafe-inline'; style-src 'report-sample' 'self' 'unsafe-inline' accounts.freshworks.com d2r0bfj5oxwi8g.cloudfront.net d3t6wcud4kij68.cloudfront.net d28y7gk8dndm8e.cloudfront.net wchat.freshchat.com fonts.googleapis.com cdn.in-freshbots.ai heapanalytics.com; worker-src 'self'; report-uri https://vfm4r1o44m.execute-api.us-east-1.amazonaws.com/default/FreshreleaseCSPReport 1
report-to slardar-endpoint; script-src 'unsafe-eval' 'report-sample' 'nonce-f3264d97621f15c078eef4063f186807-argus' 'strict-dynamic'; 1
default-src 'self'; script-src 'self' 'wasm-unsafe-eval' https://vercel.com https://vercel.live/; style-src 'self' 'unsafe-inline'; img-src * data: blob:; connect-src * data: blob:; worker-src 'self' blob:; frame-src 'self' *; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub62c07dc0877b0dd6e0c9d41dcb3bfee0&dd-evp-origin=content-security-policy&ddsource=csp-report; form-action none; 1
base-uri 'self'; default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: chrome: https:; worker-src 'self' data: blob:; child-src 'self' blob:; frame-src 'self' *.consumeraffairs.com *.google.com *.googletagmanager.com *.googleapis.com *.facebook.com *.youtube.com *.px-cloud.net i.liadm.com; connect-src 'self' *.consumeraffairs.com wss://ws.hotjar.com https://ws.hotjar.com *.px-cloud.net api.segment.io https:; report-uri https://stderr.consumeraffairs.com/api/40/security/?sentry_key=7cf6b3564e4343f68a310b937a3d823e&sentry_environment=production&sentry_release=ms-2025.12.23.00; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.hsforms.net https://*.hsforms.com https://*.hs-scripts.com https://*.hscollectedforms.net https://*.hsleadflows.net https://www.google.com https://www.gstatic.com https://policy.app.cookieinformation.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://*.hsforms.net https://*.hsforms.com https://www.gstatic.com; font-src 'self' data:; connect-src 'self' wss: https://*.hsforms.com https://*.hscollectedforms.net https://*.hubapi.com https://www.google.com; frame-src 'self' blob: https://*.hsforms.net https://*.hsforms.com https://www.google.com https://recaptcha.google.com; worker-src 'self' blob:; media-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https://*.hsforms.net https://*.hsforms.com; child-src 'self' blob: https://*.hsforms.com; report-uri https://cookieinformation.com/wp-json/pp-security/v1/csp-report; report-to csp-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-vsOIkLshPJgNZ_BtO3l-NA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
connect-src https://faq.wadax.ne.jp https://o11y.sfproxy-core1.sfdc-p1i6qd.svc.sfdcfc.net/ui-telemetry https://news.gmocloud.com 'self' https://payments.salesforce.com/ https://stats.g.doubleclick.net https://www.paypal.com https://gmocloudcommunity.force.com https://b99.yahoo.co.jp https://checkoutshopper-test.adyen.com/ https://translation.googleapis.com api.salesforce.com https://www.google.co.jp https://www.domainking.jp https://icl.dns.ishioka.xyz wss://*.slack.com https://*.api.salesforce.com https://demo.arcade.software https://checkoutshopper-live.adyen.com/ https://www.wadax.ne.jp https://www.youtube.com https://www.google.com https://analytics.google.com https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/ https://gmogshd-ch.my.salesforce-scrt.com https://fonts.googleapis.com/css2 *.amazonaws.com https://app.arcade.software wss://*.slack-gov-dev.com wss://*.api.salesforce.com https://www.google.com/recaptcha/ https://news-tool.gmocloud.com https://www.sandbox.paypal.com https://js.stripe.com/ https://support.gmocloud.com wss://api.salesforce.com https://altus.gmocloud.com https://dnsck.gmocloud.com https://www.googletagmanager.com https://www.google-analytics.com *.salesforce.com https://cdn.cbweb.code-builder.platform.salesforce.com https://www.rapidsite.jp *.api.salesforce.com wss://*.slack-gov.com; report-to sfdc-csp-ep; report-uri https://gmogshd-ch.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D10000000Hq6P&networkId=0DM5F00000001rL&type=communities 1
report-to slardar-endpoint; report-uri https://mon.zijieapi.com/monitor_browser/collect/batch/security/?bid=oceanengine_pc; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' 'report-sample' data: blob: https: 'strict-dynamic' 'nonce-ee80816cc8aaecaec34b6ee2ad8b8376-argus'; 1
default-src 'self'; script-src 'self' 'report-sample' https://va.vercel-scripts.com https://*.zoom.us https://zoom.us https://gtm.menti.com https://gtm.mentimeter.com https://www.googletagmanager.com https://tagmanager.google.com 'nonce-YTAwZDYxNTUtYjdhMy00MTU3LWJhZjQtYjc0MDIyOTVmZjk1' 'strict-dynamic'; style-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://tagmanager.google.com https://static.mentimeter.com https://fonts.googleapis.com; img-src 'self' blob: data: https:; connect-src 'self' https://www.menti.com https://o866780.ingest.sentry.io https://static.mentimeter.com https://vitals.vercel-insights.com https://*.zoom.us https://zoom.us wss://zoom.us https://resolver.confidence.dev https://gtm.menti.com https://gtm.mentimeter.com https://www.googletagmanager.com https://*.google-analytics.com https://internet-up.ably-realtime.com wss://ws-up.ably-realtime.com https://browser-intake-datadoghq.com https://*.menti.com wss://*.menti.com https://*.mentimeter.com wss://*.mentimeter.com; font-src 'self' data: https://static.mentimeter.com https://fonts.gstatic.com https://fonts.googleapis.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors *; frame-src https://www.mentimeter.com https://www.menti.com https://www.youtube-nocookie.com https://player.vimeo.com https://miro.com https://gtm.menti.com; report-uri https://o866780.ingest.sentry.io/api/4507373948043265/security/?sentry_key=46be98bc087df5ba9f3586896554ffcb&sentry_environment=prod; 1
default-src 'self';base-uri 'self';font-src 'self' https://*.audiencemedia.com https://use.fontawesome.com;form-action 'self';frame-ancestors 'none';img-src 'self' data: blob: https://*.ziniopro.com https://*.audiencemedia.com https://googleads.g.doubleclick.net https://www.google.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://google.com https://*.paypal.com https://*.braintreegateway.com https://static.zdassets.com https://*.zendesk.com https://media.smooch.io https://*.zdusercontent.com https://v2assets.zopim.io https://discover.zinio.com https://*.google-analytics.com https://*.googletagmanager.com https://www.facebook.com https://www.googletagmanager.com https://dev.visualwebsiteoptimizer.com https://*.kaptcha.com;object-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn-web.zinio.com https://js-agent.newrelic.com https://*.nr-data.net https://www.googleadservices.com https://www.google.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://*.paypal.com https://www.paypalobjects.com https://*.braintreegateway.com https://*.cardinalcommerce.com https://www.googletagmanager.com https://www.google-analytics.com https://*.googletagmanager.com https://*.zdassets.com https://*.zendesk.com https://*.smooch.io https://*.twilio.com wss://*.zendesk.com wss://api.smooch.io wss://voice-js.roaming.twilio.com https://zinio-sjc.gravityrd-services.com https://*.zopim.com https://recaptcha.net https://www.gstatic.com https://connect.facebook.net https://www.facebook.com https://app.vwo.com https://apis.google.com https://accounts.google.com/gsi/client https://*.kaptcha.com;script-src-attr 'none';style-src 'self' 'unsafe-inline' https://*.audiencemedia.com https://app.vwo.com https://use.fontawesome.com https://accounts.google.com/gsi/style https://embed.typeform.com;media-src 'self' https://static.zdassets.com;connect-src 'self' webpack: https://*.audiencemedia.com https://*.ziniopro.com https://*.nr-data.net https://googleads.g.doubleclick.net https://adservice.google.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://google.com https://cdn.jsdelivr.net https://*.braintree-api.com https://*.braintreegateway.com https://*.cardinalcommerce.com https://www.paypal.com wss://widget-mediator.zopim.com https://*.zdassets.com https://*.zendesk.com https://*.smooch.io https://*.twilio.com wss://*.zendesk.com wss://api.smooch.io wss://voice-js.roaming.twilio.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://www.google.com https://*.googletagmanager.com https://collector.datacloud.zinio.com https://www.facebook.com https://dev.visualwebsiteoptimizer.com https://sdk.iad-07.braze.com https://use.fontawesome.com https://accounts.google.com/gsi/ https://*.typeform.com https://*.kaptcha.com collector.datacloud.zinio.com;frame-src 'self' https://td.doubleclick.net https://www.googletagmanager.com https://*.paypal.com https://*.braintreegateway.com https://recaptcha.net https://www.facebook.com https://web.facebook.com https://app.vwo.com https://accounts.google.com/gsi/ https://*.typeform.com;child-src 'self' https://*.kaptcha.com 1
default-src https: data: blob: wss: 'unsafe-inline' 'unsafe-eval'; frame-src 'self' https://pp.ephapay.net/ https://pp.eshapay.net/ https://scripts.agilone.com/ https://widget.trustpilot.com/ https://edigitalsurvey.com/ https://static.addtoany.com/ https://c.paypal.com/ https://www.paypal.com https://www.paypalobjects.com/ https://www.sandbox.paypal.com/ https://www.zenaps.com/ https://www.youtube.com/ https://*.doubleclick.net/ https://gum.criteo.com/ https://www.facebook.com/ https://*.hotjar.com/ https://s.salecycle.com https://www.googletagmanager.com/ https://www.google.com https://*.customizer.cadesignform.dk/ https://static.criteo.net/ https://www.youtube-nocookie.com/ https://d16fk4ms6rqz1v.cloudfront.net/ https://*.arcot.com/ https://www.securesuite.co.uk/ https://www.clicksafe.lloydstsb.com/ https://secure.barclaycard.co.uk https://*.photorank.me/ https://pay.google.com/ https://js.playground.klarna.com/ https://js.klarna.com/ https://placement-api-sandbox.clearpay.co.uk/ https://placement-api.clearpay.co.uk/ https://portal.sandbox.clearpay.co.uk/ https://portal.clearpay.co.uk/; report-uri https://csp-violations.external.wickes.co.uk 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' https: blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://b.speedkit.com https://baqend-website-sk.app.baqend.com https://challenges.cloudflare.com; script-src-elem 'self' 'unsafe-inline' https://b.speedkit.com https://baqend-website-sk.app.baqend.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; worker-src 'self' blob: data:; img-src 'self' data: https://images.unsplash.com https://baqend-website-sk.app.baqend.com; media-src 'self'; font-src 'self' data:; connect-src 'self' https://b.speedkit.com https://baqend-website-sk.app.baqend.com https://challenges.cloudflare.com; frame-src https://www.youtube-nocookie.com https://challenges.cloudflare.com; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none' 1
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/admob_google_com 1
default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors *.unionesarda.it s.clickiocdn.com *.ampproject.org *.google.com; report-uri /csp-report 1
default-src 'self'; connect-src 'self' https://*.analytics.google.com https://*.google-analytics.com https://*.googletagmanager.com https://www.cloudflare.com/; font-src 'self' data: https://cdnjs.cloudflare.com/ https://fonts.gstatic.com; frame-src 'self' https://*.icc-cpi.int/ https://www.youtube.com/ https://www.youtube-nocookie.com https://widgets.ebscohost.com/ https://www.google.com/recaptcha/ https://signup.es-mail.co.uk/ https://player.gvideo.co/; img-src 'self' https://*.google-analytics.com https://*.googletagmanager.com https://*.ytimg.com; media-src 'self' blob: data:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.google-analytics.com https://*.googletagmanager.com https://cdn.jsdelivr.net/ https://cdnjs.cloudflare.com/ https://static.cloudflareinsights.com/ https://unpkg.com/ https://www.gstatic.com/ https://cdn.jsdelivr.net https://code.jquery.com https://unpkg.com https://www.google.com platform.twitter.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/ https://unpkg.com/ https://cdnjs.cloudflare.com; frame-ancestors 'self' 1
default-src * 'unsafe-inline' data: blob:; report-uri "https://montrealgazette.com/wp-json/pmd/v1/csp-report"; report-to csp-endpoint 1
default-src 'self' *.iheartmedia.com data: blob: https:; img-src 'self' data: https:; font-src https: data:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; frame-src 'self' data: https:; child-src https:; media-src https:; object-src 'none'; connect-src 'self' wss: https:; report-uri https://csp.qw.iheartmedia.com/api/report 1
default-src data: blob: 'unsafe-eval' 'unsafe-inline' px-client.net px-cdn.net pxchk.net perimeterx.net px-cloud.net https: 'self'; script-src 7299633.collect.igodigital.com ajax.cloudflare.com *.bazaarvoice.com bs.serving-sys.com cdn.evgnet.com/beacon/liderdomicilio/pruebas/scripts/evergage.min.js connect.facebook.net deploy.mopinion.com googleads.g.doubleclick.net *.lider.cl media.richrelevance.com recs.richrelevance.com s3.amazonaws.com/mapcity-assets/leaflet-0.7.3/leaflet.js secure-ds.serving-sys.com services.mapcity.com static.cloudflareinsights.com www.google-analytics.com www.google.com www.googletagmanager.com *.googleapis.com static.hotjar.com script.hotjar.com https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.min.js *.googleadservices.com *.gstatic.com cdn-widgets.chattigo.com media.flixfacts.com media.flixcar.com 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'none'; report-uri https://csp.walmart.com/c/r/liders 1
script-src *.tiktok.com *.cloudflareinsights.com *.googleapis.com *.ensighten.com *.stylitics.com *.maurices.com *.rewardstyle.com *.gstatic.com *.facebook.net *.paypal.com *.pinimg.com *.curalate.com *.iesnare.com *.bazaarvoice.com *.taboola.com *.attn.tv *.googleadservices.com *.pure.cloud *.googletagmanager.com *.sc-static.net *.mountain.com *.bing.com *.oracleinfinity.io *.snapchat.com *.yimg.com *.hxplatform.com *.cnnx.link *.doubleclick.net *.pinterest.com *.rmtag.com *.lgrckt-in.com *.dynamicyield.com *.afterpay.com *.perimeterx.net *.cloudflare.com *.granify.com *.google.com *.cookielaw.org *.breadpayments.com; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=1UzbDsqIBLa7qS.KJlLSfzzt_t0UZlSeCDmJC1Azfgs-1789271816.72562-1.0.1.1-y8KY56w17TuoKpDzaR0NulIlLbTuCRVDdih9jdM9qDVjItvUusY_NjenGpkvZcdYyJLqbMj3RAQ_6NVZ.beqgLkZnvvd3jNLOmWdTM7xVx9wQfNxT.Kil2XKCs3Ocn1cg48iEk.lrCTZYW.QNKXSgxig.PTJOrvNu.NmmWULx.JcvMjEZ7AlN8jHKkdC3F92SJdmXb0KwsHtXbbWDdUQwxqq6AmrP2TpK8fDBlwFh1xoi0Ucf26z4M1nOPFaQIC3; report-to cf-xguykkgydqnirlmg 1
default-src 'self' https:; object-src 'none'; img-src 'self' https: blob: data:; font-src 'self' https: data:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https: wss:; report-uri https://buildkite.uriports.com/reports/report 1
default-src 'nonce-1d4fb0ad0113fb505733bcbe0b9851dd' 'self' *.hugoboss.eu *.lpsnmedia.net blob:; object-src 'none'; base-uri 'self' *.hugoboss.com *.hugoboss.us pay.google.com; frame-ancestors 'self'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' *.hugoboss.com *.hugoboss.eu *.fitanalytics.com *.googletagmanager.com *.google.com *.gstatic.com *.googleapis.com *.googleadservices.com *.google-analytics.com *.youtube.com *.cloud.google *.doubleclick.net *.facebook.net *.bing.com *.tiktok.com *.snapchat.com *.clarity.ms *.criteo.com *.cloudfront.net *.dynamicyield.com *.qualtrics.com *.taggstar.com *.contentsquare.net *.lpsnmedia.net *.bounceexchange.com *.flashtalking.com *.cquotient.com *.attraqt.io *.usercentrics.eu *.liveperson.net *.paypal.com *.cdn.optimizely.com *.optimizely.com *.tealiumiq.com *.tiqcdn.com *.cookielaw.org *.forter.com *.cdn4.forter.com *.appsflyer.com *.usablenet.com *.rakuten.com *.liadm.com *.godatafeed.com *.adyen.com *.mpulse.net *.global-e.com *.adsrvr.org *.mastercard.com *.visa.com *.cloudflareinsights.com *.confirmit.eu *.dwin1.com *.roeyecdn.com *.roeye.com *.jsdelivr.net *.fluidconfigure.com *.bambuser.com *.upsellit.com *.wknd.ai *.klarna.app *.payments-amazon.com *.smarterhq.io *.bglobale.com *.pstatic.net *.tradedoubler.com *.naver.net *.yahoo.co.jp sc-static.net esm.sh pay.google.com maps.googleapis.com tags.tiqcdn.com bat.bing.com googleads.g.doubleclick.net lo.v.liveperson.net app.usercentrics.eu cdn.horizons.confirmit.eu horizons.confirmit.eu js.adsrvr.org s.yimg.jp tag.rmp.rakuten.com tr2.smarterhq.io; connect-src 'self' *.hugoboss.com *.hugoboss.eu *.google.com *.google.de *.google.pt *.google.bg *.google.es *.google.ch *.google.rs *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.googletagmanager.com *.googleapis.com *.doubleclick.net *.paypal.com *.adyen.com *.liveperson.net *.msg.liveperson.net *.tealiumiq.com *.usercentrics.eu *.dynamicyield.com *.attraqt.io *.clarity.ms *.forter.com *.cloudfront.net *.contentsquare.net *.facebook.com *.fitanalytics.com *.optimizely.com *.qualtrics.com *.snapchat.com *.lpsnmedia.net *.adsrvr.org *.scene7.com *.addressy.com *.dy-api.eu *.dy-api.com *.tiktok.com *.tiktokw.us *.bing.com *.bing.net *.criteo.com *.criteo.net *.cookielaw.org *.onetrust.com *.mpulse.net *.siteperformancetest.net *.akamaihd.net *.cdnwidget.com *.cdnbasket.net *.global-e.com *.bglobale.com *.fluidconfigure.com *.verbolia.com *.backend.verbolia.com *.liadm.com *.techlab-cdn.com *.akstat.io *.payments-amazon.com *.naver.com *.samsung.com *.paytm.in *.horizons.confirmit.eu google.com play.google.com maps.googleapis.com www.paypal.com api.usercentrics.eu graphql.usercentrics.eu z.clarity.ms widget.fitanalytics.com geolocation.onetrust.com pd.cdnwidget.com p11.techlab-cdn.com metric.hugoboss.com ssta.hugoboss.com www.cloudflare.com payments-eu.amazon.com apay-us.amazon.com banner.appsflyersdk.com cdn.cookielaw.org view.cdnbasket.net svc-prod-us.liveshopping.bambuser.com connect.facebook.net tags.tiqcdn.com bat.bing.com analytics.tiktok.com hugoboss-privacy.my.onetrust.com wss://euwe1.msg.liveperson.net wss://lo.msg.liveperson.net wss://va.msg.liveperson.net wss://cdn0.forter.com; frame-src 'self' *.hugoboss.com *.paypal.com *.google.com *.adyen.com *.mastercard.com *.visa.com *.google-analytics.com *.optimizely.com *.adsrvr.org *.snapchat.com *.criteo.com *.criteo.net *.googletagmanager.com *.lpsnmedia.net *.liveperson.net *.flashtalking.com *.global-e.com *.confirmit.eu *.bounceexchange.com *.bouncex.net *.doubleclick.net *.facebook.com *.qualtrics.com *.awin1.com *.bglobale.com *.securesuite.co.uk *.imgstatics.com *.revolut.com *.americanexpress.com *.arcot.com *.bambuser.com *.parcellab.com *.tradedoubler.com pay.google.com uhugs.omni.manh.com wbiprod.storedvalue.com; form-action 'self' *.hugoboss.com *.global-e.com *.qualtrics.com *.facebook.com *.visa.com *.amazon.com *.amazon.fr *.amazon.co.uk *.amazon.it; upgrade-insecure-requests; 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://*.alastyr.com; style-src 'self' 'unsafe-inline' https: https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://*.alastyr.com; img-src 'self' data: blob: https: https://*.alastyr.com; connect-src 'self' https: wss: https://www.google-analytics.com; frame-src 'self' https: https://www.google.com https://www.youtube.com https://www.facebook.com; object-src 'none'; base-uri 'self'; form-action 'self' https: 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.yektanet.com https://*.yektanet.com https://*.mediaad.org; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; media-src 'self' https:; connect-src 'self' https:; frame-src https:; base-uri 'self'; form-action 'self'; object-src 'none' 1
object-src 'none';base-uri 'self';script-src 'nonce-KL6HduSxOhDOR0CLXzXaGQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https://d3q9kdqrtloda.cloudfront.net/ https://i.ytimg.com/ https://www.youtube-nocookie.com/ https://noembed.com/ https://cdn.plyr.io/ https://cdn-ukwest.onetrust.com/ https://geolocation.onetrust.com/ https://www.google.com/ https://googleads.g.doubleclick.net/ https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://px.ads.linkedin.com/ https://api.hubapi.com/ https://cta-service-cms2.hubspot.com/ https://c1001.report.gbss.io/ https://analytics.tiktok.com/ https://forms.hubspot.com/ https://region1.analytics.google.com/ https://*.analytics.google.com/ https://region1.google-analytics.com/ https://*.google-analytics.com/ https://pagead2.googlesyndication.com https://privacyportal-uk.onetrust.com/ https://*.onetrust.com/ https://cambridgeenglish.formstack.com/forms/ieltstrf https://cambridgeenglish.formstack.com/forms/ielts_recognising_organisation https://cambridgeenglish.formstack.com/; style-src 'self' 'unsafe-inline' https://static.formstack.com/forms/css/ https://static.formstack.com/common/css/ https://cdn.craft.cloud; script-src 'self' https://www.youtube.com/ https://cambridgeenglish.formstack.com/forms/ 'sha256-5woGd/mZkUg7jRI9rPBZPHKC+LdyheFkTyKDMVNRNAs=' https://static.hotjar.com/c/ https://static.formstack.com/forms/js/ 'sha256-BEia3zQX2ZCFqcEfWBg9chT7nMc26YOr506FmhGqIfE=' 'sha256-z+rMOYNYmUbRI0OKIZH9HZneWmS3dJkEIDLisI+5LwI=' 'sha256-4QifgdTNZlur9Y/OOGOV3SggRLnQQR4peyehG9Y5buo=' https://www.google.com/ https://www.gstatic.com/ https://cdn-ukwest.onetrust.com/ https://www.googletagmanager.com/ 'sha256-rbMVlXlWb1FxlmTxqO6hQI+5VPCMoqHMqeyWMrzk9E4=' 'sha256-IgMQOOOedQeMPBl7lSreMVPmJvU62bc6l8HcsGXnbWc=' 'sha256-/6m2tVE+3ZAyrBnUps+rDpHpCwMi0VgW9mdVym2y2cE=' 'sha256-nanbr0ZSJrOvEvr6c5gV8UarYfjNXF+TAtmA9GjvyJ0=' 'sha256-ATpn7Ex50rRSNqmoA432bWfqvlsGB6CD/7fE2WtoU5A=' 'sha256-iXVjrS+TzaVqRdjZV8gecO6OkuAcobYu2OjiJVT8LYU=' 'sha256-+WTu64J4HVaiLZC0nSjR9XxbZZg1xX7cdNM/WA/pDcQ=' 'sha256-tOY0R/wVWZCxGQPtXP0ptphYuCKkCpgNHQy/ZkwhCCY=' 'sha256-xc61KVzUrz5aO4ACQyRqjH2fPpfIb/xoMmSSEiU+PWU=' 'sha256-wyNlDF2abbsDx6TZogcKckBQwZ4N8qFR3SAepboU7Sk=' 'sha256-tOY0R/wVWZCxGQPtXP0ptphYuCKkCpgNHQy/ZkwhCCY=' blob: 'unsafe-eval' https://www.google-analytics.com/ https://snap.licdn.com/ https://googleads.g.doubleclick.net/ https://static.ads-twitter.com https://www.googleadservices.com/ https://connect.facebook.net/ https://a.quora.com/ https://js.hs-scripts.com/ https://analytics.tiktok.com/ https://cdn.gbqofs.com/ https://cl.qualaroo.com/ https://assets.ubembed.com/ https://js.hs-analytics.net/ https://js.hsadspixel.net/ https://js.hsleadflows.net/ https://js.hs-banner.com/ https://js.hubspot.com/ https://cdn.gbqofs.com/ https://analytics.tiktok.com/ https://cdn.gbqofs.com/ https://snap.licdn.com/ https://14d7fb0767d540569b202283222297c0.js.ubembed.com/ 'sha256-1e5RR2OpHhuX2h0Bat19DsNTmqbo4M3T1pqfeTXCHaA='; object-src 'none'; font-src 'self' https://static.formstack.com/forms/fonts/; img-src 'self' data: https://d3q9kdqrtloda.cloudfront.net/ https://s3.eu-west-2.amazonaws.com/ielts-web-static/ www.googletagmanager.com https://i.ytimg.com/ https://cdn-ukwest.onetrust.com/ https://ad.doubleclick.net/ https://px.ads.linkedin.com/ https://googleads.g.doubleclick.net/ https://www.google.com/ https://t.co https://analytics.twitter.com/ https://www.facebook.com/ https://q.quora.com/ https://adservice.google.com/ https://perf-na1.hsforms.com/ https://*.google.ad/ https://*.google.ae/ https://*.google.com.af/ https://*.google.com.ag/ https://*.google.al/ https://*.google.am/ https://*.google.co.ao/ https://*.google.com.ar/ https://*.google.as/ https://*.google.at/ https://*.google.com.au/ https://*.google.az/ https://*.google.ba/ https://*.google.com.bd/ https://*.google.be/ https://*.google.bf/ https://*.google.bg/ https://*.google.com.bh/ https://*.google.bi/ https://*.google.bj/ https://*.google.com.bn/ https://*.google.com.bo/ https://*.google.com.br/ https://*.google.bs/ https://*.google.bt/ https://*.google.co.bw/ https://*.google.by/ https://*.google.com.bz/ https://*.google.ca/ https://*.google.cd/ https://*.google.cf/ https://*.google.cg/ https://*.google.ch/ https://*.google.ci/ https://*.google.co.ck/ https://*.google.cl/ https://*.google.cm/ https://*.google.cn/ https://*.google.com.co/ https://*.google.co.cr/ https://*.google.com.cu/ https://*.google.cv/ https://*.google.com.cy/ https://*.google.cz/ https://*.google.de/ https://*.google.dj/ https://*.google.dk/ https://*.google.dm/ https://*.google.com.do/ https://*.google.dz/ https://*.google.com.ec/ https://*.google.ee/ https://*.google.com.eg/ https://*.google.es/ https://*.google.com.et/ https://*.google.fi/ https://*.google.com.fj/ https://*.google.fm/ https://*.google.fr/ https://*.google.ga/ https://*.google.ge/ https://*.google.gg/ https://*.google.com.gh/ https://*.google.com.gi/ https://*.google.gl/ https://*.google.gm/ https://*.google.gr/ https://*.google.com.gt/ https://*.google.gy/ https://*.google.com.hk/ https://*.google.hn/ https://*.google.hr/ https://*.google.ht/ https://*.google.hu/ https://*.google.co.id/ https://*.google.ie/ https://*.google.co.il/ https://*.google.im/ https://*.google.co.in/ https://*.google.iq/ https://*.google.is/ https://*.google.it/ https://*.google.je/ https://*.google.com.jm/ https://*.google.jo/ https://*.google.co.jp/ https://*.google.co.ke/ https://*.google.com.kh/ https://*.google.ki/ https://*.google.kg/ https://*.google.co.kr/ https://*.google.com.kw/ https://*.google.kz/ https://*.google.la/ https://*.google.com.lb/ https://*.google.li/ https://*.google.lk/ https://*.google.co.ls/ https://*.google.lt/ https://*.google.lu/ https://*.google.lv/ https://*.google.com.ly/ https://*.google.co.ma/ https://*.google.md/ https://*.google.me/ https://*.google.mg/ https://*.google.mk/ https://*.google.ml/ https://*.google.com.mm/ https://*.google.mn/ https://*.google.com.mt/ https://*.google.mu/ https://*.google.mv/ https://*.google.mw/ https://*.google.com.mx/ https://*.google.com.my/ https://*.google.co.mz/ https://*.google.com.na/ https://*.google.com.ng/ https://*.google.com.ni/ https://*.google.ne/ https://*.google.nl/ https://*.google.no/ https://*.google.com.np/ https://*.google.nr/ https://*.google.nu/ https://*.google.co.nz/ https://*.google.com.om/ https://*.google.com.pa/ https://*.google.com.pe/ https://*.google.com.pg/ https://*.google.com.ph/ https://*.google.com.pk/ https://*.google.pl/ https://*.google.pn/ https://*.google.com.pr/ https://*.google.ps/ https://*.google.pt/ https://*.google.com.py/ https://*.google.com.qa/ https://*.google.ro/ https://*.google.ru/ https://*.google.rw/ https://*.google.com.sa/ https://*.google.com.sb/ https://*.google.sc/ https://*.google.se/ https://*.google.com.sg/ https://*.google.sh/ https://*.google.si/ https://*.google.sk/ https://*.google.com.sl/ https://*.google.sn/ https://*.google.so/ https://*.google.sm/ https://*.google.sr/ https://*.google.st/ https://*.google.com.sv/ https://*.google.td/ https://*.google.tg/ https://*.google.co.th/ https://*.google.com.tj/ https://*.google.tl/ https://*.google.tm/ https://*.google.tn/ https://*.google.to/ https://*.google.com.tr/ https://*.google.tt/ https://*.google.com.tw/ https://*.google.co.tz/ https://*.google.com.ua/ https://*.google.co.ug/ https://*.google.co.uk/ https://*.google.com.uy/ https://*.google.co.uz/ https://*.google.com.vc/ https://*.google.co.ve/ https://*.google.co.vi/ https://*.google.com.vn/ https://*.google.vu/ https://*.google.ws/ https://*.google.rs/ https://*.google.co.za/ https://*.google.co.zm/ https://*.google.co.zw/ https://*.google.cat/ https://www.google-analytics.com/ https://*.linkedin.com/ https://*.amazonaws.com/ielts-web-static/ https://adservice.google.co.uk/ https://cdn.craft.cloud; frame-src 'self' https://www.google.com/ https://www.youtube-nocookie.com/ https://www.youtube.com/ https://dntcl.qualaroo.com/ https://td.doubleclick.net/ https://cambridgeenglish.formstack.com/ https://*.formstack.com https://www.googletagmanager.com/; 1
default-src 'self' https://static4.smokva.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static4.smokva.com https://js.pusher.com https://challenges.cloudflare.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.bunny.net https://static4.smokva.com; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' blob: https: wss:; media-src 'self' blob: https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; frame-src https://challenges.cloudflare.com 1
default-src 'self' https:; base-uri https://www.elysee.fr; block-all-mixed-content; child-src *; font-src 'self' data: https://fonts.gstatic.com https://www.elysee.fr https://admin.elysee.fr https://www.elysee.fr; form-action 'self'; frame-ancestors 'none'; img-src https://stats.g.doubleclick.net data: https://www.elysee.fr https://admin.elysee.fr https://www.elysee.fr https://captcha.liveidentity.com https://*.tile.openstreetmap.org; object-src 'none'; script-src 'unsafe-inline' https://www.elysee.fr https://isho.elysee.fr https://admin.elysee.fr https://www.elysee.fr https://captcha.liveidentity.com https://platform.twitter.com https://www.instagram.com; style-src https://fonts.googleapis.com 'unsafe-inline' https://www.elysee.fr https://admin.elysee.fr https://www.elysee.fr 1
connect-src 'self' https: 'unsafe-eval' https://*.zoom.us wss://zpns.zoom.us wss://widget-mediator.zopim.com; default-src 'self' https:; font-src 'self' https: data: data: source.zoom.us; img-src 'self' https: data: blob: *.zoom.us https://v2assets.zopim.io https://static.zdassets.com; media-src 'self' https: *.zoom.us; object-src 'none'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' blob: http://zoom.us *.zoom.us; style-src 'self' https: 'unsafe-inline'; worker-src 'self' https: blob:; report-uri /csp-report 1
object-src 'none';base-uri 'self';script-src 'nonce-qKHsQtfrhvZpBv7-gzGL2Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com https://cdn.checkout.com instantcredit.net test.instantcredit.net *.klarnacdn.net *.oct8ne.com *.fontawesome.com https://fonts.bunny.net *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.doofinder.com *.afterpay.com oct8necdneu.azureedge.net *.cloudfront.net css.zohostatic.com static.zohocdn.com *.primor.eu *.frizbit.com *.bing.com *.awin.com *.tiktok.com *.outbrain.com *.reskyt.com cdn.reskyt.com *.zenaps.com *.the.sciencebehindecommerce.com the.sciencebehindecommerce.com ams.creativecdn.com tags.creativecdn.com fledge-eu.creativecdn.com *.dwin1.com *.awin1.com *.mrf.io auxwebpr1.primor.eu *.reetmo.com *.clic2buy.com *.clic2drive.com *.click2buy.com *.reetmo.media *.adnxs.com *.pinterest.com *.taboola.com s.pinimg.com *.jeanpaulgaultier.com *.facebook.com *.facebook.net criteo-sync.teads.tv sync-criteo.ads.yieldmo.com criteo-partners.tremorhub.com cdn.preciso.net ban.preciso.net cdn.2trk.info ban.2trk.info fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com www.paycomet.com api.paycomet.com *.twitter.com *.paycomet.com *.afterpay.com *.redsys.es *.redsys.es:25443 *.primor.eu *.bing.com *.awin.com *.tiktok.com *.outbrain.com *.reskyt.com cdn.reskyt.com *.zenaps.com *.the.sciencebehindecommerce.com the.sciencebehindecommerce.com static.zohocdn.com ams.creativecdn.com tags.creativecdn.com fledge-eu.creativecdn.com *.dwin1.com *.awin1.com *.mrf.io auxwebpr1.primor.eu *.reetmo.com *.clic2buy.com *.clic2drive.com *.click2buy.com *.reetmo.media *.adnxs.com *.pinterest.com *.taboola.com s.pinimg.com *.jeanpaulgaultier.com *.facebook.com *.facebook.net criteo-sync.teads.tv sync-criteo.ads.yieldmo.com criteo-partners.tremorhub.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com campaign.odicci.com 'self' 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://js.checkout.com *.klarna.com www.paycomet.com api.paycomet.com instantcredit.net test.instantcredit.net *.redsys.es *.klarnaservices.com *.oct8ne.com *.syndigo.com *.weltpixel.com *.twitter.com *.google.com *.fontawesome.com *.doofinder.com *.paycomet.com *.afterpay.com *.primor.eu *.crazyegg.com *.frizbit.com *.bing.com *.awin.com *.tiktok.com *.outbrain.com *.reskyt.com cdn.reskyt.com *.zenaps.com *.the.sciencebehindecommerce.com the.sciencebehindecommerce.com *.descuentoestudiante.com *.op.humi-agency.fr nars.jebbit.com static.zohocdn.com ams.creativecdn.com tags.creativecdn.com fledge-eu.creativecdn.com *.dwin1.com *.awin1.com campaign.odicci.com le-male-elixir-primor.jeanpaulgaultier.com *.mrf.io www.descontoestudante.com auxwebpr1.primor.eu *.criteo.com *.criteo.net *.reetmo.com *.clic2buy.com *.clic2drive.com *.click2buy.com d27sapsk5j0xr8.cloudfront.net *.reetmo.media *.adnxs.com *.pinterest.com *.taboola.com s.pinimg.com *.jeanpaulgaultier.com *.facebook.com *.facebook.net criteo-sync.teads.tv sync-criteo.ads.yieldmo.com criteo-partners.tremorhub.com kerastase-quiz.vercel.app narcisorodriguez.jebbit.com *.caast.tv fragrance.hermes.com leseldissey.isseymiyakeparfums.com *.odicci.com *.googletagmanager.com *.doubleclick.net *.mainad.com *.tangoo.it *.tangooserver.com *.2trk.info experiencezadig.zadig-et-voltaire.com la-bomba-eretail.carolinaherrera.com xponemillion.rabanne.com rb-xmas-xp-2025.rabanne-experience.com jpg-gaultier-divine-chatbot-fragrances.com www.carolinaherrera.com gift-finder-noel.jeanpaulgaultier.com lantern.roeye.com *.connectif.cloud *.mainadv.com cdn.preciso.net ban.preciso.net cdn.2trk.info ban.2trk.info gentlemansociety.efghosting.com www.canva.com mockup-berrycrushprimor.my.canva.site 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.connectif.cloud instantcredit.net test.instantcredit.net https://maps.googleapis.com *.oct8ne.com *.syndigo.com *.syndigo.cloud https://firebasestorage.googleapis.com *.cloudflare.com *.klarna.com *.googleadservices.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com 'self' *.lightemporium.com *.usercentrics.eu *.dendago.com *.fontawesome.com *.doofinder.com black.bird.eu *.primor.eu *.afterpay.com *.redsys.es oct8necdneu.azureedge.net *.ggpht.com *.openstreetmap.org *.2mdn.net cdn.doofinder.com *.googletagmanager.com *.zoho.eu css.zohostatic.eu *.clarity.ms *.crazyegg.com *.frizbit.com *.bing.com *.awin.com *.tiktok.com *.outbrain.com *.reskyt.com cdn.reskyt.com *.zenaps.com *.the.sciencebehindecommerce.com the.sciencebehindecommerce.com ad.360yield.com ad.yieldlab.net cm.adform.net contextual.media.net criteo-partners.tremorhub.com criteo-sync.teads.tv eb2.3lift.com exchange.mediavine.com id5-sync.com match.sharethrough.com matching.ivitrack.com pixel.rubiconproject.com r.casalemedia.com rtb-csync.smartadserver.com simage2.pubmatic.com sync-criteo.ads.yieldmo.com ups.analytics.yahoo.com visitor.omnitagjs.com x.bidswitch.net beacon.krxd.net s.thebrighttag.com *.etrusted.com static.zohocdn.com ams.creativecdn.com tags.creativecdn.com fledge-eu.creativecdn.com *.dwin1.com *.awin1.com www.google.es *.mrf.io *.criteo.com *.criteo.net retailmedia-static.azureedge.net auxwebpr1.primor.eu *.reetmo.com *.clic2buy.com *.clic2drive.com *.click2buy.com *.reetmo.media *.adnxs.com *.pinterest.com *.taboola.com s.pinimg.com *.jeanpaulgaultier.com *.facebook.com *.facebook.net *.caast.tv *.doubleclick.net *.mainad.com *.tangoo.it *.tangooserver.com *.bing.net *.ban.2trk.info cdn.preciso.net ban.preciso.net cdn.2trk.info ban.2trk.info *.gstatic.com *.googlesyndication.com *.reddit.com *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://*.checkout.com *.klarnacdn.net *.connectif.cloud *.frizbit.com www.paycomet.com api.paycomet.com instantcredit.net test.instantcredit.net code.jquery.com pay.google.com applepay.cdn-apple.com *.klarna.com *.oct8ne.com https://cdn.jsdelivr.net/npm/@fancyapps/ui@5.0/dist/fancybox/fancybox.umd.js *.syndigo.com *.avada.io *.shopify.com *.geoapify.com *.cloudflare.com *.twitter.com *.google-analytics.com *.google.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.doofinder.com *.afterpay.com *.etrusted.com *.cloudfront.net cdn.doofinder.com *.zoho.eu *.zohostatic.eu *.zoho.com *.zohostatic.com *.primor.eu *.googletagmanager.com *.clarity.ms *.crazyegg.com sdk.mrf.io flowcards.mrf.io *.bing.com *.awin.com *.tiktok.com *.outbrain.com *.reskyt.com cdn.reskyt.com *.criteo.net *.criteo.com static.zohocdn.com ams.creativecdn.com tags.creativecdn.com fledge-eu.creativecdn.com *.dwin1.com *.awin1.com *.zenaps.com *.the.sciencebehindecommerce.com the.sciencebehindecommerce.com 'self' api.odicci.com www.hlserve.com cdn.ampproject.org *.mrf.io *.chetools.com auxwebpr1.primor.eu *.reetmo.com *.clic2buy.com *.clic2drive.com *.click2buy.com *.reetmo.media *.adnxs.com *.pinterest.com *.taboola.com s.pinimg.com *.jeanpaulgaultier.com *.facebook.com *.facebook.net criteo-sync.teads.tv sync-criteo.ads.yieldmo.com criteo-partners.tremorhub.com *.caast.tv *.youtube-nocookie.com *.empathy.co *.doubleclick.net *.mainad.com *.tangoo.it *.tangooserver.com *.preciso.net *.2trk.info *.googlesyndication.com tagmanager.google.com cdn.equalweb.com *.appsflyer.com lantern.roeyecdn.com cdn.preciso.net ban.preciso.net cdn.2trk.info ban.2trk.info *.googleadservices.com *.redditstatic.com *.reddit.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://cdn.checkout.com *.frizbit.com instantcredit.net test.instantcredit.net *.klarnacdn.net https://cdn.jsdelivr.net/npm/@fancyapps/ui@5.0/dist/fancybox/fancybox.css https://cdnjs.cloudflare.com *.fontawesome.com https://fonts.bunny.net *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.doofinder.com *.afterpay.com *.primor.eu *.cloudfront.net *.zoho.com *.zohostatic.com *.crazyegg.com *.bing.com *.awin.com *.tiktok.com *.outbrain.com *.reskyt.com cdn.reskyt.com *.zenaps.com *.the.sciencebehindecommerce.com the.sciencebehindecommerce.com *.etrusted.com static.zohocdn.com ams.creativecdn.com tags.creativecdn.com fledge-eu.creativecdn.com *.dwin1.com *.awin1.com *.mrf.io auxwebpr1.primor.eu *.reetmo.com *.clic2buy.com *.clic2drive.com *.click2buy.com *.reetmo.media *.adnxs.com *.pinterest.com *.taboola.com s.pinimg.com *.jeanpaulgaultier.com *.facebook.com *.facebook.net criteo-sync.teads.tv sync-criteo.ads.yieldmo.com criteo-partners.tremorhub.com *.googletagmanager.com *.tagmanager.google.com cdn.preciso.net ban.preciso.net cdn.2trk.info ban.2trk.info fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com blob: *.caast.tv *.mux.com *.youtube.com *.youtube-nocookie.com *.primor.eu 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://js.checkout.com *.klarnaevt.com *.connectif.cloud *.frizbit.com instantcredit.net *.instantcredit.net pay.google.com apple-pay-gateway.apple.com *.klarna.com *.klarnacdn.net *.oct8ne.com *.syndigo.com https://get.geojs.io *.avada.io *.geoapify.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.fontawesome.com *.doofinder.com *.doubleclick.net *.afterpay.com *.googleapis.com wss://*.doofinder.com *.zoho.eu *.zoho.com *.primor.eu https://www.google.com/pay https://google.com/pay https://pay.google.com/about/redirect https://pay.google.com/gp/p/payment_method_manifest.json https://pay.google.com/gp/p/web_manifest.json *.googletagmanager.com *.clarity.ms *.crazyegg.com events.newsroom.bi flowcards.mrf.io *.bing.com *.awin.com *.tiktok.com *.outbrain.com *.reskyt.com cdn.reskyt.com *.zenaps.com *.the.sciencebehindecommerce.com the.sciencebehindecommerce.com *.wepowerconnections.com static.zohocdn.com ams.creativecdn.com tags.creativecdn.com fledge-eu.creativecdn.com *.dwin1.com *.awin1.com *.mrf.io auxwebpr1.primor.eu *.criteo.net *.criteo.com *.reetmo.com *.clic2buy.com *.clic2drive.com *.click2buy.com *.reetmo.media *.adnxs.com *.pinterest.com *.taboola.com s.pinimg.com *.jeanpaulgaultier.com *.facebook.com *.facebook.net criteo-sync.teads.tv sync-criteo.ads.yieldmo.com criteo-partners.tremorhub.com *.onlive.site *.googlesyndication.com cdn.caast.tv *.caast.tv *.mux.com *.empathy.co *.google.com *.google.es *.bing.net *.analytics-ipv6.tiktokw.us cdn.preciso.net ban.preciso.net cdn.2trk.info ban.2trk.info *.redditstatic.com *.reddit.com *.run.app 'self' 'unsafe-inline'; child-src *.caast.tv *.primor.eu http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.cloudfront.net bc.marfeel.com *.bing.com *.awin.com *.tiktok.com *.outbrain.com *.reskyt.com cdn.reskyt.com *.zenaps.com *.the.sciencebehindecommerce.com the.sciencebehindecommerce.com static.zohocdn.com *.primor.eu *.dwin1.com *.awin1.com auxwebpr1.primor.eu *.reetmo.com *.clic2buy.com *.clic2drive.com *.click2buy.com *.reetmo.media *.adnxs.com *.pinterest.com *.taboola.com s.pinimg.com *.jeanpaulgaultier.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cmp.inmobi.com https://cdn.intergient.com https://*.helpscout.net https://*.doubleclick.net https://cdn.intergi.com http://cdn.intergient.com https://btloader.com https://c.amazon-adsystem.com https://*.googlesyndication.com https://mowgoats.com; connect-src 'self' https://*.analytics.google.com https://*.google-analytics.com https://jamie-oliver-2.commercelayer.io https://*.googlesyndication.com https://*.doubleclick.net https://*.sentry.io https://*.playwire.com https://*.amazon-adsystem.com https://api.btloader.com https://*.algolia.net https://*.algolianet.com https://auth.commercelayer.io https://*.auth0.com https://csi.gstatic.com https://*.helpscout.net https://simple-save.jamieoliver.workers.dev https://s5g.jamieoliver.workers.dev; img-src 'self' https://asset.jamieoliver.com https://www.google.co.uk https://www.google-analytics.com https://px.moatads.com https://ad-delivery.net https://ad.doubleclick.net https://www.googletagmanager.com https://img.youtube.com https://i.ytimg.com https://s.gravatar.com https://*.auth0.com https://*.googlesyndication.com https://csi.gstatic.com https://cdn.sanity.io https://*.helpscout.net https://*.wp.com data:; media-src 'self' data:; frame-src 'self' https://td.doubleclick.net https://www.googletagmanager.com https://cdn.intergient.com https://*.helpscout.net https://www.youtube.com https://www.youtube-nocookie.com; worker-src 'self' blob:; object-src 'none'; style-src 'self' 'unsafe-inline' https://config.playwire.com; frame-ancestors 'none'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://maps.googleapis.com https://js.fout.jp https://connect.facebook.net https://tm.r-ad.ne.jp https://lib-3pas.admatrix.jp https://s.yimg.jp https://googleads.g.doubleclick.net https://ajax.googleapis.com https://*.syncsearch.jp https://*.go-mpulse.net https://*.nakanohito.jp https://*.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://parts.stockweather.co.jp https://dimg.stockweather.co.jp https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://irpocket.com https://code.highcharts.com https://www.youtube.com; media-src 'self' https://*.stream.co.jp https://*.stream.ne.jp;img-src 'self' https://*.akstat.io;font-src 'self' https://fast.fonts.net https://fonts.googleapis.com;connect-src 'self' https://*.akstat.io https://*.go-mpulse.net;frame-ancestors 'self';object-src 'self';report-uri https://www.monex.co.jp/csp 1
default-src * data: blob: filesystem: about: ws: wss: 'unsafe-inline' 'unsafe-eval';frame-ancestors 'self';report-uri /csp.php 1
object-src 'none'; style-src 'self' 'unsafe-inline' cdn.transcend.io transcend-cdn.com www.mozilla.org; form-action 'self' https://abdri3ttkb.execute-api.us-east-2.amazonaws.com https://accounts.firefox.com/ https://basket.mozilla.org; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.google-analytics.com *.googletagmanager.com cdn.transcend.io google-analytics.com googletagmanager.com js.stripe.com s.ytimg.com tagmanager.google.com transcend-cdn.com www.mozilla.org www.youtube.com; frame-ancestors 'none'; default-src 'self' *.mozilla.org; font-src 'self' www.mozilla.org; frame-src 'self' accounts.firefox.com gtm.mozilla.org js.stripe.com www.google-analytics.com www.googletagmanager.com www.youtube.com; base-uri 'none'; upgrade-insecure-requests; media-src 'self' assets.mozilla.net videos.cdn.mozilla.net www.mozilla.org; img-src 'self' blog.mozilla.org data: images.ctfassets.net www.google-analytics.com www.googletagmanager.com www.mozilla.org; connect-src 'self' *.analytics.google.com *.google-analytics.com *.googletagmanager.com analytics.google.com cdn.transcend.io google-analytics.com googletagmanager.com gtm.mozilla.org https://abdri3ttkb.execute-api.us-east-2.amazonaws.com https://accounts.firefox.com/ https://basket.mozilla.org o1069899.ingest.sentry.io o1069899.sentry.io region1.google-analytics.com telemetry.transcend.io telemetry.us.transcend.io transcend-cdn.com www.mozilla.org/submit/bedrock/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://*.google-analytics.com https://*.intercom.io https://*.intercomcdn.com https://js.intercomcdn.com https://script.getreditus.com https://plausible.io; style-src 'self' 'unsafe-inline' https://assets.calendly.com; img-src 'self' data: blob: https://landing-cdn.liqvid.io https://*.googletagmanager.com https://*.google-analytics.com https://*.intercomcdn.com https://*.intercomassets.com https://i.ytimg.com https://*.doubleclick.net https://www.google.com; font-src 'self' data: https://fonts.gstatic.com https://*.intercomcdn.com; connect-src 'self' https://*.google-analytics.com https://*.googletagmanager.com https://api.intercom.io https://*.intercomcdn.com wss://*.intercom.io https://www.google.com https://*.doubleclick.net https://analytics.google.com https://*.getreditus.com https://plausible.io; frame-src 'self' https://calendly.com https://*.calendly.com https://*.intercom.io https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com; media-src 'self' https://landing-cdn.liqvid.io; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com chat.bncenlinea.com:8000 ajax.googleapis.com 341d26ed8226.bncenlinea.com ajax.aspnetcdn.com cdn.jsdelivr.net cdnjs.cloudflare.com d3i9pllfrk5tet.cloudfront.net d3q4nr72nuserl.cloudfront.net maxcdn.bootstrapcdn.com s3.amazonaws.com www.googletagmanager.com s3.amazonaws.com;style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com fonts.googleapis.com d3i9pllfrk5tet.cloudfront.net d3q4nr72nuserl.cloudfront.net;font-src 'self' d3i9pllfrk5tet.cloudfront.net fonts.gstatic.com fonts.googleapis.com; img-src 'self' data: s3.amazonaws.com d3i9pllfrk5tet.cloudfront.net d3q4nr72nuserl.cloudfront.net;connect-src 'self' ajax.aspnetcdn.com cdn.jsdelivr.net cdnjs.cloudflare.com cloudfront.net 341d26ed8226.bncenlinea.com www.google-analytics.com; 1
object-src 'none';base-uri 'self';script-src 'nonce-v3AdJVqujlmkHDu42VPe2w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://*.doubleclick.net https://*.googlesyndication.com https://ep2.adtrafficquality.google https://challenges.cloudflare.com https://static.vic-m.co https://www.youtube.com https://public.bnbstatic.com https://platform.twitter.com https://static.ads-twitter.com https://proxy.beyondwords.io https://tally.so https://cdnjs.cloudflare.com https://analytics-cms.whitebeard.me https://stats.dailymaverick.co.za https://applets.ebxcdn.com https://powerad.ai; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://public.bnbstatic.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://public.bnbstatic.com; connect-src 'self' https://track-mavio.revengine.dailymaverick.co.za https://revengine-tracker.remp.dailymaverick.co.za https://revengine-tracker.revengine.dailymaverick.co.za https://revengine-tracker-test.revengine.dailymaverick.co.za https://stats.dailymaverick.co.za https://www.googletagmanager.com https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://*.ingest.de.sentry.io https://*.ingest.sentry.io https://www.google.com https://analytics.google.com https://analytics-cms.whitebeard.me https://ep1.adtrafficquality.google https://powerad.ai https://reporting.powerad.ai https://ad.doubleclick.net https://www.binance.com; frame-src 'self' https://charts.dailymaverick.co.za https://www.googletagmanager.com https://securepubads.g.doubleclick.net https://cm.g.doubleclick.net https://tpc.googlesyndication.com https://pagead2.googlesyndication.com https://*.googlesyndication.com https://*.safeframe.googlesyndication.com https://www.googleadservices.com https://ep2.adtrafficquality.google https://www.google.com https://challenges.cloudflare.com https://platform.twitter.com https://www.youtube.com https://www.youtube-nocookie.com https://tally.so https://player.simplecast.com https://podcasts.apple.com https://podcasts.google.com https://open.spotify.com https://iframe.iono.fm https://playlist.megaphone.fm; media-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' https://*.dailymaverick.co.za; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://apis.google.com https://va.vercel-scripts.com https://www.googletagmanager.com https://cdn.intergient.com https://config.playwire.com https://*.playwire.com https://*.intergient.com https://*.google.com https://*.googleapis.com https://*.googlesyndication.com https://*.doubleclick.net https://*.googletagservices.com https://*.adtrafficquality.google https://btloader.com https://*.btloader.com https://*.amazon-adsystem.com https://*.adsymptotic.com https://*.rubiconproject.com https://*.pubmatic.com https://*.openx.net https://*.adnxs.com https://*.moatads.com https://*.sharethrough.com https://*.criteo.com https://*.crwdcntrl.net https://cdn.hadronid.net https://*.id5-sync.com https://secure.cdn.fastclick.net https://*.ad.gt https://*.3lift.com https://*.2mdn.net; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://fonts.googleapis.com https://config.playwire.com https://*.intergient.com https://*.playwire.com; img-src 'self' data: blob: https://efimg.com https://cdn.efhub.com https://img.efhub.com https://lh3.googleusercontent.com https://www.gstatic.com https://firebasestorage.googleapis.com https://*.firebasestorage.app https://cdn.discordapp.com https://media.discordapp.net https://*.playwire.com https://*.intergient.com https://*.googlesyndication.com https://*.doubleclick.net https://*.amazon-adsystem.com https://*.moatads.com https://*.adsymptotic.com https://raw.githubusercontent.com https://www.googletagmanager.com https://*.google.com https://ad-delivery.net https://*.ad-delivery.net https://*.crwdcntrl.net https://*.id5-sync.com https://*.nextmillmedia.com https://*.3lift.com https://*.criteo.com https://*.2mdn.net; font-src 'self' https://www.gstatic.com https://fonts.gstatic.com; connect-src 'self' https://identitytoolkit.googleapis.com https://securetoken.googleapis.com https://www.googleapis.com https://apis.google.com https://firestore.googleapis.com https://firebasestorage.googleapis.com https://img.efhub.com https://efootballhub-501e4.firebaseapp.com https://aqiefltgaydhzehddawg.supabase.co wss://aqiefltgaydhzehddawg.supabase.co https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com https://*.r2.cloudflarestorage.com https://*.amazonaws.com https://cdn.intergient.com https://config.playwire.com https://*.playwire.com https://*.intergient.com https://*.googlesyndication.com https://*.doubleclick.net https://*.googletagservices.com https://*.amazon-adsystem.com https://*.rubiconproject.com https://*.pubmatic.com https://*.openx.net https://*.adnxs.com https://*.moatads.com https://*.adsymptotic.com https://*.sharethrough.com https://*.criteo.com https://fundingchoicesmessages.google.com https://btloader.com https://*.btloader.com https://*.ad-delivery.net https://ab.dns-finder.com https://*.crwdcntrl.net https://*.id5-sync.com https://cdn.hadronid.net https://*.google.com https://*.googleapis.com https://*.adtrafficquality.google https://ad-delivery.net https://id5-sync.com https://*.eu-1-id5-sync.com https://direct.adsrvr.org https://hb.yellowblue.io https://*.3lift.com https://*.cootlogix.com https://*.nextmillmedia.com https://secure.cdn.fastclick.net https://*.ad.gt https://*.gstatic.com https://*.gumgum.com https://*.a9.amazon.dev https://*.tq-tungsten.com; frame-src https://efootballhub-501e4.firebaseapp.com https://accounts.google.com https://*.google.com https://*.googleapis.com https://*.adtrafficquality.google https://*.playwire.com https://*.intergient.com https://*.googlesyndication.com https://*.doubleclick.net https://*.amazon-adsystem.com https://*.rubiconproject.com https://*.pubmatic.com https://*.openx.net https://*.adnxs.com https://*.sharethrough.com https://*.criteo.com https://*.3lift.com https://*.cootlogix.com https://*.streamrail.com https://fundingchoicesmessages.google.com https://btloader.com https://*.btloader.com; worker-src 'self' blob:; media-src 'self' blob: data: https://img.efhub.com https://*.intergient.com https://*.playwire.com https://*.azurefd.net; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none' 1
report-to cf-csp-endpoint 1
default-src 'self'; connect-src 'self' https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://translate.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com; font-src 'self' data:; frame-src 'self' https://static.addtoany.com https://www.google.com https://www.googletagmanager.com https://www.youtube.com; img-src 'self' data: blob: https://*.google-analytics.com https://*.analytics.google.com https://*.fbcdn.net https://translate.google.com https://translate.googleapis.com https://www.gcis.gov.za https://www.google.com https://www.google.co.za https://www.googletagmanager.com https://www.gov.za https://www.gstatic.com https://www.publicsectormanager.gov.za https://www.sanews.gov.za https://www.vukuzenzele.gov.za https://*.openstreetmap.org https://*.ytimg.com https://www.google-analytics.com; object-src 'none'; script-src 'self' 'report-sample' blob: https://*.google-analytics.com https://static.addtoany.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com; style-src 'self' 'report-sample' 'unsafe-inline' https://www.gstatic.com; worker-src 'self' blob:; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /system/reporting/default; report-to default 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' *.algolia.com *.algolia.io *.algolia.net *.algolianet.com algolia.com algolia.io algolia.net algolianet.com blob: data: cdn.weglot.com *.3lift.com *.adroll.com *.affilae.com *.arcade.software *.bidr.io *.casalemedia.com *.clarity.ms *.clearbit.com *.company-target.com *.datadoghq.com *.doubleclick.net *.js.driftt.com *.facebook.com *.getbeamer.com *.googleoptimize.com *.googletagmanager.com *.hotjar.com *.licdn.com *.linkedin.com *.marketo.com *.mktoresp.com *.mutinycdn.com *.onetrust.com *.outbrain.com *.pendo.io *.pingdom.net *.pubmatic.com *.reddit.com *.rlcdn.com *.rubiconproject.com *.sitespect.com *.taboola.com *.twitter.com ajax.googleapis.com amplify.outbrain.com api.amplitude.com api.madkudu.com api.segment.io attr.ml-api.io bat.bing.com browser.sentry-cdn.com cdn.amplitude.com cdn.bizible.com cdn.cookielaw.org cdn.jsdelivr.net cdn.madkudu.com cdn.segment.com cdn.segment.io cdnjs.cloudflare.com client-registry.mutinycdn.com client.mutinycdn.com connect.facebook.net fonts.googleapis.com fonts.gstatic.com getbeamer.com js.driftt.com js.sentry-cdn.com js.stripe.com maxcdn.bootstrapcdn.com munchkin.marketo.net res.cloudinary.com s.ml-attr.com secure.adnxs.com secure.gravatar.com snap.licdn.com static.ads-twitter.com stats.g.doubleclick.net t.co tag.clearbitscripts.com tag.demandbase.com tr.outbrain.com tracking.g2crowd.com user-data.mutinycdn.com www.datadoghq-browser-agent.com www.google-analytics.com www.google.com www.googletagmanager.com www.gstatic.com www.redditstatic.com www.welcometothejungle.com x.clearbitjs.com m.servedby-buysellads.com paapi9371.d41.co api.c99.ai analytics.funnelfuel.io v2.d41.co ; img-src * data: *.mutinycdn.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com ; font-src 'self' data: fonts.gstatic.com github.com images.mutinycdn.com maxcdn.bootstrapcdn.com use.typekit.net use.fontawesome.com ; connect-src 'self' *.algolia.com *.algolia.io *.algolia.net *.algolianet.com algolia.com algolia.io algolia.net algolianet.com data: api.weglot.com cdn.weglot.com *.clarity.ms *.datadoghq.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.hotjar.com *.hotjar.io *.linkedin.com *.mktoresp.com *.mktoutil.com *.mutinyhq.io *.onetrust.com *.pingdom.net *.segment.com *.segment.io *.sentry.io *.mutinyhq.com *.mutinyhq.io *.mutinycdn.com adservice.google.com api.amplitude.com api.company-target.com api.madkudu.com api.segment.io app.clearbit.com app.getsentry.com backend.getbeamer.com cdn.cookielaw.org d.adroll.com in.hotjar.com maps.googleapis.com prod-algolia-blog-subscription.herokuapp.com raw.githubusercontent.com stats.g.doubleclick.net us-central1-documentation-feedback.cloudfunctions.net user-data.mutinycdn.com vitals.vercel-insights.com wss://*.hotjar.com www.google-analytics.com www.google.com analytics.funnelfuel.io tag-logger.demandbase.com api.c99.ai ; worker-src 'self' blob: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.algolia.com *.algolia.io *.algolia.net *.algolianet.com algolia.com algolia.io algolia.net algolianet.com blob: data: cdn.weglot.com *.3lift.com *.adroll.com *.affilae.com *.arcade.software *.bidr.io *.casalemedia.com *.clarity.ms *.clearbit.com *.company-target.com *.datadoghq.com *.doubleclick.net *.js.driftt.com *.facebook.com *.getbeamer.com *.googleoptimize.com *.googletagmanager.com *.hotjar.com *.licdn.com *.linkedin.com *.marketo.com *.mktoresp.com *.mutinycdn.com *.onetrust.com *.outbrain.com *.pendo.io *.pingdom.net *.pubmatic.com *.reddit.com *.rlcdn.com *.rubiconproject.com *.sitespect.com *.taboola.com *.twitter.com ajax.googleapis.com amplify.outbrain.com api.amplitude.com api.madkudu.com api.segment.io attr.ml-api.io bat.bing.com browser.sentry-cdn.com cdn.amplitude.com cdn.bizible.com cdn.cookielaw.org cdn.jsdelivr.net cdn.madkudu.com cdn.segment.com cdn.segment.io cdnjs.cloudflare.com client-registry.mutinycdn.com client.mutinycdn.com connect.facebook.net fonts.googleapis.com fonts.gstatic.com getbeamer.com js.driftt.com js.sentry-cdn.com js.stripe.com maxcdn.bootstrapcdn.com munchkin.marketo.net res.cloudinary.com s.ml-attr.com secure.adnxs.com secure.gravatar.com snap.licdn.com static.ads-twitter.com stats.g.doubleclick.net t.co tag.clearbitscripts.com tag.demandbase.com tr.outbrain.com tracking.g2crowd.com user-data.mutinycdn.com www.datadoghq-browser-agent.com www.google-analytics.com www.google.com www.googletagmanager.com www.gstatic.com www.redditstatic.com www.welcometothejungle.com x.clearbitjs.com m.servedby-buysellads.com paapi9371.d41.co api.c99.ai analytics.funnelfuel.io v2.d41.co ; report-uri https://algolia.report-uri.com/r/t/csp/wizard 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.google-analytics.com https://pagead2.googlesyndication.com https://*.googlesyndication.com https://securepubads.g.doubleclick.net https://*.doubleclick.net https://*.google.com https://*.gstatic.com https://cdn.taboola.com https://cdn.izooto.com https://*.izooto.com https://platform.twitter.com https://*.twitter.com https://connect.facebook.net https://www.instagram.com https://cdnjs.cloudflare.com https://cdn.gujaratsamachar.com https://*.amazon-adsystem.com https://*.aniview.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; connect-src 'self' https://*.google-analytics.com https://analytics.google.com https://*.googletagmanager.com https://www.google.com https://*.doubleclick.net https://*.googlesyndication.com https://*.izooto.com https://cdn.taboola.com https://*.sentry.io https://*.ingest.sentry.io https://*.cloudfront.net https://cdn.gujaratsamachar.com https://epaper.gujaratsamachar.com https://apis.gujaratsamachar.com https://*.amazon-adsystem.com https://*.aniview.com; frame-src 'self' https://*.doubleclick.net https://*.google.com https://googleads.g.doubleclick.net https://www.youtube.com https://www.youtube-nocookie.com https://www.instagram.com https://platform.twitter.com https://*.facebook.com https://cdn.taboola.com https://*.amazon-adsystem.com https://imasdk.googleapis.com; media-src 'self' data: blob: https://*.avplayer.com https://*.aniview.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self' https://bor.aniview.com; form-action 'self' 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' *.thomann.fr *.thomann.de app.storyblok.com connect.facebook.net analytics.tiktok.com *.adform.net www.google-analytics.com sc-static.net s.pinimg.com www.youtube.com challenges.cloudflare.com *.payments-amazon.com www.googleadservices.com userlike-cdn-umm.b-cdn.net bat.bing.com www.googletagmanager.com www.googletagservices.com tr.snapchat.com ct.pinterest.com js.appboycdn.com *.g.doubleclick.net widgets.trustedshops.com tpc.googlesyndication.com *.clarity.ms cdn.avo.app maps.googleapis.com pagead2.googlesyndication.com ep2.adtrafficquality.google www.paypal.com bzrcdn.openai.com; frame-src 'self' *.thomann.fr *.thomann.de *.g.doubleclick.net *.safeframe.googlesyndication.com challenges.cloudflare.com ct.pinterest.com td.doubleclick.net tpc.googlesyndication.com tr.snapchat.com www.facebook.com www.google.com www.youtube-nocookie.com www.googletagmanager.com ep2.adtrafficquality.google www.paypal.com; frame-ancestors 'self' app.storyblok.com; object-src 'none'; report-uri /cspReport.php 1
frame-ancestors *.storyblok.com 'self'; object-src 'self' 'unsafe-inline'; media-src *.salesforce-sites.com *.lightning.force.com *.storyblok.com *.zdassets.com *.doofinder.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; form-action https://www.facebook.com https://druni.my.salesforce-sites.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://store.plumrocket.com www.paycomet.com api.paycomet.com 'self' 'unsafe-inline'; frame-src http://fast.amc.demdex.net https://www.youtube.com https://www.facebook.com https://app3.salesmanago.pl https://10138016.fls.doubleclick.net https://insight.adsrvr.org https://td.doubleclick.net https://druni.my.salesforce-sites.com https://www.googletagmanager.com https://pay.google.com https://app3.salesmanago.es https://webchatbot.aunoa.ai https://app3.manago.ai https://3ds.redsys.es  https://la-favorite-etail.jeanpaulgaultier.com/ geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.checkout.com *.klarna.com https://store.plumrocket.com www.paycomet.com api.paycomet.com instantcredit.net test.instantcredit.net https://sandbox.sequracdn.com https://live.sequracdn.com www.googletagmanager.com *.salesforce-sites.com *.lightning.force.com *.hotjar.com *.oct8ne.com *.pinterest.com *.doofinder.com *.empathybroker.com *.empathy.co *.criteo.com 'self' 'unsafe-inline'; connect-src https://dpm.demdex.net http://dpm.demdex.net https://www.paypal.com https://eu1-search.doofinder.com https://shops-si.trustedshops.com https://api.trustedshops.com https://trustbadge.api.etrusted.com https://storytech.io https://analytics.tiktok.com https://region1.analytics.google.com https://vc-service.salesmanago.com https://api.swogo.net https://content.syndigo.com https://tracking.swogo.net https://www.google.com https://bat.bing.com https://druni.my.salesforce-sites.com https://pay.google.com https://cdn.equalweb.com https://analytics-ipv6.tiktokw.us https://www.googletagmanager.com https://vc-service.salesmanago.pl https://app3.salesmanago.es https://www.facebook.com https://war.salesmanago.com https://capig.stape.org https://webchatbot.aunoa.ai https://cdn.aunoa.ai https://google.com https://dataplane.rum.us-east-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://sts.us-east-1.amazonaws.com https://pagead2.googlesyndication.com https://ade.googlesyndication.com https://cct.google https://cognito-identity.eu-west-1.amazonaws.com https://dataplane.rum.eu-west-1.amazonaws.com https://analytics.google.com https://www.googleadservices.com  https://access.equalweb.com https://the.sciencebehindecommerce.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.checkout.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.browser-intake-datadoghq.com *.doofinder.com wss://*.doofinder.com instantcredit.net *.instantcredit.net https://sandbox.sequracdn.com https://live.sequracdn.com https://maps.googleapis.com https://player.vimeo.com www.googletagmanager.com *.salesforce-sites.com *.lightning.force.com *.oct8ne.com *.zendesk.com *.zopim.com *.doubleclick.net *.hotjar.com *.hotjar.io *.clarity.ms *.smartsuppcdn.com *.googleapis.com *.gstatic.com *.google-analytics.com *.google.es *.connectif.cloud *.klaviyo.com *.photoslurp.com *.zdassets.com *.pinterest.com *.nosto.com *.empathybroker.com *.empathy.co 'self' 'unsafe-inline'; img-src data: http://cm.everesttech.net http://amcglobal.sc.omtrdc.net https://asistentecosmeticatest1.herokuapp.com https://ad.doubleclick.net https://p1.zemanta.com https://www.storytech.io https://cdnstory.com https://insight.adsrvr.org https://www.druni.es https://event.syndigo.cloud https://ui.swogo.net https://googleads.g.doubleclick.net https://tau.collect.igodigital.com https://www.googletagmanager.com https://analytics.tiktok.com https://app3.salesmanago.es https://c.clarity.ms https://connect.facebook.net https://www.gstatic.com https://pagead2.googlesyndication.com https://ade.googlesyndication.com https://www.zenaps.com https://access.equalweb.com https://click.s51.exacttarget.com https://the.sciencebehindecommerce.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.checkout.com *.doofinder.com instantcredit.net test.instantcredit.net https://sandbox.sequracdn.com https://live.sequracdn.com https://images.unsplash.com *.criteo.com static.criteo.net www.googletagmanager.com *.salesforce-sites.com *.lightning.force.com *.facebook.com *.google.com *.google.es widgets.trustedshops.com *.twitter.com t.co *.azureedge.net *.pinterest.com *.bing.com *.storyblok.com 'self' data: data: 'self' 'unsafe-inline'; font-src http://widgets.trustedshops.com http://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://asistentecosmeticatest1.herokuapp.com *.checkout.com *.cdn-apple.com instantcredit.net test.instantcredit.net *.salesforce-sites.com *.lightning.force.com fonts.gstatic.com *.azureedge.net *.doofinder.com *.typekit.net *.googleapis.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; style-src http://fonts.googleapis.com http://maxcdn.bootstrapcdn.com https://asistentecosmeticatest1.herokuapp.com https://storytech.io https://druni.my.salesforce-sites.com https://access.equalweb.com *.checkout.com *.doofinder.com instantcredit.net test.instantcredit.net *.salesforce-sites.com *.lightning.force.com *.photoslurp.com *.nosto.com *.klaviyo.com *.typekit.net *.storyblok.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; script-src http://widgets.trustedshops.com http://www.gstatic.com http://www.google.com https://www.googletagmanager.com https://www.dwin1.com https://eu1-search.doofinder.com https://cdn.doofinder.com https://asistentecosmeticatest1.herokuapp.com https://cdnjs.cloudflare.com/ https://ui.swogo.net https://analytics.tiktok.com https://storytech.io https://bucket.cdnwebcloud.com https://js.adsrvr.org https://js-tag.zemanta.com https://content.syndigo.com https://ct.pinterest.com https://fonts.googleapis.com https://druni.my.salesforce-sites.com https://536005834.collect.igodigital.com https://cdn.equalweb.com https://access.equalweb.com https://app3.salesmanago.es https://webchatbot.aunoa.ai https://client.rum.us-east-1.amazonaws.com https://pagead2.googlesyndication.com https://www.zenaps.com live.sequrapi.com www.zenaps.com https://the.sciencebehindecommerce.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.checkout.com *.klarnacdn.net *.cdn-apple.com *.doofinder.com www.paycomet.com api.paycomet.com instantcredit.net test.instantcredit.net code.jquery.com https://sandbox.sequracdn.com https://live.sequracdn.com https://maps.googleapis.com static.criteo.net www.googletagmanager.com *.salesforce-sites.com *.lightning.force.com *.googleoptimize.com widgets.trustedshops.com static-eu.oct8ne.com static.zdassets.com *.facebook.net *.tradedoubler.com *.doubleclick.net *.hotjar.com *.ads-twitter.com smct.co *.bsmartdata.com *.retargeted.co *.bing.com *.clarity.ms *.smartsuppcdn.com *.smartsuppchat.com *.smartsupp.com *.connectif.cloud *.klaviyo.com *.photoslurp.com *.pinimg.com *.nosto.com *.empathybroker.com *.unpkg.com *.storyblok.com *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.hotjar.com *.amplitude.com *.ads-twitter.com use.typekit.net *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.segment.com *.doubleclick.net sc-static.net *.google.com *.gstatic.com *.googlesyndication.com connect.facebook.net js.stripe.com cdn.seon.io www.redditstatic.com analytics.tiktok.com bat.bing.com *.checkout.com; font-src 'self' data: fonts.gstatic.com use.typekit.net frontend-assets.sorare.tech frontend-assets.sorare.com frontend-assets.sorare.dev; media-src 'self' *.ctfassets.net frontend-assets.sorare.com frontend-assets.sorare.tech frontend-assets.sorare.dev assets.sorare.com assets.sorare.tech assets.sorare.dev; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.jsdelivr.net use.typekit.net use.fontawesome.com blob:; connect-src *; img-src * data:; frame-src *; manifest-src 'self' https://sorare.cloudflareaccess.com; object-src 'none'; worker-src blob:; 1
base-uri 'none'; font-src 'self' https: data:; form-action https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://www.facebook.com; frame-ancestors 'self'; img-src https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://ads-twitter.com https://ads-api.twitter.com https://analytics.twitter.com https://mautic.netcup.news https://px.ads.linkedin.com 'self' blob: data: https: https://www.captcha.eu; object-src 'none'; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://www.captcha.eu; script-src https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://chat.netcup.com https://chat-dev-ui.netcup.net https://chat-ui.netcup.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com https://*.onetrust.com https://measure.netcup.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://widget.trustpilot.com https://cdn.brevo.com/js/sdk-loader.js https://www.captcha.eu 'self' 'wasm-unsafe-eval' 'nonce-deJjc70DDqnFef+DHPwXy20w'; child-src blob: https://td.doubleclick.net; connect-src https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://chat.netcup.com https://chat-dev-ui.netcup.net https://chat-ui.netcup.com https://ads-twitter.com https://ads-api.twitter.com https://analytics.twitter.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com https://*.onetrust.com https://www.google.com https://in-automate.brevo.com https://measure.netcup.com https://google.com https://px.ads.linkedin.com https://*.clarity.ms/ 'self' https://*.analytics.google.com https://*.google-analytics.com https://stats.g.doubleclick.net https://www.captcha.eu https://googleads.g.doubleclick.net https://www.googleadservices.com https://cdn.cookielaw.org https://adservice.google.com https://pagead2.googlesyndication.com https://www.redditstatic.com https://pixel-config.reddit.com https://analytics.tiktok.com https://ads.tiktok.com https://bat.bing.com https://widget.trustpilot.com; frame-src https://td.doubleclick.net https://www.facebook.com https://www.googletagmanager.com https://measure.netcup.com https://www.youtube.com https://www.youtube-nocookie.com/ https://widget.trustpilot.com https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://chat.netcup.com https://chat-dev-ui.netcup.net https://chat-ui.netcup.com; script-src-elem https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://chat.netcup.com https://chat-dev-ui.netcup.net https://chat-ui.netcup.com https://cdn.brevo.com/js/sdk-loader.js https://sibautomation.com/sa.js https://sibforms.com/ https://www.googleadservices.com https://www.redditstatic.com 'self' 'unsafe-inline' https://*.googletagmanager.com https://static.ads-twitter.com https://snap.licdn.com https://bat.bing.com https://connect.facebook.net https://*.clarity.ms https://googleads.g.doubleclick.net https://cdn.cookielaw.org https://analytics.tiktok.com https://ads.tiktok.com https://measure.netcup.com https://www.youtube.com https://pagead2.googlesyndication.com https://widget.trustpilot.com; worker-src blob:; report-to csp-endpoint; 1
default-src * 'self' 'unsafe-eval' 'unsafe-inline' data: blob: ws: wss:; report-uri https://o1151714.ingest.us.sentry.io/api/4509640700461056/security/?sentry_key=74a33d973a69190986eba8f4bca540d2; report-to csp-endpoint; 1
default-src 'self'; script-src  'self' 'unsafe-inline' 'unsafe-eval' https://cdn.galvia.ai https://helper.portsmouth.galvia.ai www-embed-player.js *.cookiebot.com *.cookiefirst.com *.google-analytics.com www.instagram.com *.facebook.net *.tiktok.com *.ads-twitter.com *.twitter.com lf16-tiktok-web.ttwstatic.com cdn.unibuddy.co *.googletagmanager.com bat.bing.com w.soundcloud.com s.yimg.com sc-static.net snap.licdn.com www.googleadservices.com *.doubleclick.net siteimproveanalytics.com www.youtube.com *.hotjar.com *.linkedin.com service.force.com *.salesforceliveagent.com universityofportsmouth.my.salesforce.com *.formstack.com *.googleapis.com cdn.jsdelivr.net www.google.ie sfapi.formstack.io az416426.vo.msecnd.net discoveruni.gov.uk *.discoveruni.gov.uk *.matterport.com webteamuop.github.io *.port.ac.uk *.secure.force.com portsmouthuni.h5p.com *.go-mpulse.net js-agent.newrelic.com *.algolia.net *.jquery.com bot.ivy.ai bam.nr-data.net *.force.com *.clarity.ms dev.visualwebsiteoptimizer.com artsthread.com tr.snapchat.com tags.srv.stackadapt.com https://rv-vepple-embed.web.app https://builder.lift.acquia.com universityofportsmouth.my.salesforce-sites.com vimeo.com https://player.vimeo.com universityofportsmouth--chatbotdv2.sandbox.my.salesforce.com universityofportsmouth--chatbotdv2.sandbox.my.salesforce-sites.com universityofportsmouth--chatbotdv2.sandbox.lightning.force.com universityofportsmouth.tfaforms.net universityofportsmouth--qa.sandbox.my.site.com https://*.sandbox.lightning.force.com https://*.sandbox.my.salesforce.com universityofportsmouth.my.site.com universityofportsmouth.my.salesforce-scrt.com  https://d8ejoa1fys2rk.cloudfront.net https://js-agent.newrelic.com; object-src 'self' https://discoveruni.gov.uk; style-src 'self' 'unsafe-inline'  https://helper.portsmouth.galvia.ai modernizr.min.js *.googleapis.com platform.twitter.com lf16-tiktok-web.ttwstatic.com  *.force.com static.formstack.com formsprod.azureedge.net sfapi.formstack.io port.formstack.com *.cookiefirst.com webteamuop.github.io *.port.ac.uk *.googletagmanager.com artsthread.com tags.srv.stackadapt.com *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com s3.amazonaws.com universityofportsmouth.my.salesforce-sites.com embed.tawk.to *.tawk.to cdn.jsdelivr.net builder.lift.acquia.com *.formstack.io universityofportsmouth--chatbotdv2.sandbox.my.salesforce-sites.com universityofportsmouth.my.salesforce.com https://universityofportsmouth--qa.sandbox.my.site.com universityofportsmouth.tfaforms.net universityofportsmouth.my.site.com https://cdnjs.cloudflare.com; img-src  'self' data: *.google-analytics.com i.vimeocdn.com i.ytimg.com *.googletagmanager.com jadserve.postrelease.com bat.bing.com sp.analytics.yahoo.com *.siteimproveanalytics.io *.facebook.com *.facebook.net *.twitter.com t.co *.doubleclick.net googleads.g.doubleclick.net *.linkedin.com uks-prd-xp2-cd.azurewebsites.net ormsprod.azureedge.net port.formstack.com maps.gstatic.com *.googleapis.com lh3.ggpht.com www.google.ie *.cookiefirst.com formsprod.azureedge.net discoveruni.gov.uk *.force.com *.universityofportsmouth.my.salesforce.com *.salesforce.com *.port.ac.uk bot.ivy.ai *.clarity.ms *.bing.com dev.visualwebsiteoptimizer.com *.visualwebsiteoptimizer.com cdn.pushcrew.com chart.googleapis.com wingify-assets.s3.amazonaws.com app.vwo.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google eat2mpk5ajg.exactdn.com *.eat2mpk5ajg.exactdn.com blob: https://egopbtuk8gz.exactdn.com *.egopbtuk8gz.exactdn.com *.frontdoorcdn.formstack.io https://frontdoorcdn.formstack.io images.artsthread.com *.google.co.uk https://cdn.galvia.ai/portsmouth/nellie-helper.js https://helper.portsmouth.galvia.ai https://*.ivy-cdn.com; media-src 'self'; frame-src 'self'  https://www.googletagmanager.com https://helper.portsmouth.galvia.ai player.vimeo.com www.youtube.com *.linkedin.com portsmouthuni.h5p.com w.soundcloud.com viewer.joomag.com *.cookiebot.com www.instagram.com *.facebook.com *.tiktok.com *.twitter.com embed.acast.com unibuddy.co popcard.unibuddy.co tr.snapchat.com *.doubleclick.net view.genial.ly service.force.com *.hotjar.com *.matterport.com webteamuop.github.io universityofportsmouth.force.com *.port.ac.uk *.secure.force.com open.spotify.com *.google.com port.cloud.panopto.eu bot.ivy.ai app.nearpod.com *.visualwebsiteoptimizer.com universityofportsmouth.my.salesforce-sites.com *.tawk.to https://cdn.galvia.ai/portsmouth/nellie-helper.js universityofportsmouth.my.salesforce.com https://*.sandbox.lightning.force.com https://*.sandbox.my.salesforce.com https://universityofportsmouth--qa.sandbox.my.site.com https://universityofportsmouth--qa.sandbox.my.site.com https://universityofportsmouth.my.site.com https://outlook.office365.com https://discoveruni.gov.uk https://*.arcgis.com university-of-portsmouth-web-team.github.io *.university-of-portsmouth-acquia.workers.dev; frame-ancestors 'self' portsmouthuni.h5p.com https://universityofportsmouth.my.site.com  *.university-of-portsmouth-acquia.workers.dev; child-src 'self' blob:; font-src 'self' data: fonts.gstatic.com use.typekit.net *.modernizr.min.js  static.formstack.com fonts.googleapis.com bot.ivy.ai cdn.scite.ai embed.tawk.to *.tawk.to res-1.cdn.office.net https://cdnjs.cloudflare.com; connect-src  'self' *.google-analytics.com www.googletagmanager.com marketing.port.ac.uk sentry10.bynder.cloud www.ucas.com *.tiktok.com tr.snapchat.com *.doubleclick.net s.yimg.com *.linkedin.com *.secure.force.com sfapi.formstack.io *.googleapis.com *.algolia.net *.cookiefirst.com ohpuem12fk-3.algolianet.com *.facebook.com vc.hotjar.io dc.services.visualstudio.com prod-discoveruni.azure-api.net cdn.linkedin.oribi.io webteamuop.github.io *.algolianet.com *.go-mpulse.net bam.nr-data.net *.akstat.io *.akamaihd.net *.hotjar.com plugin.ucads.ucweb.com *.clarity.ms tags.srv.stackadapt.com *.visualwebsiteoptimizer.com app.vwo.com *.port.ac.uk vimeo.com universityofportsmouth.my.salesforce-sites.com artsthread.com eu.perz-api.cloudservices.acquia.io *.google.com va.tawk.to embed.tawk.to *.tawk.to wss://*.tawk.to insights.algolia.io virtual.port.ac.uk *.virtual.port.ac.uk *.analytics.pangle-ads.com https://api.portsmouth.rvhosted.com eat2mpk5ajg.exactdn.com *.eat2mpk5ajg.exactdn.com https://google.com blob: https://analytics.pangle-ads.com https://egopbtuk8gz.exactdn.com *.egopbtuk8gz.exactdn.com universityofportsmouth--chatbotdv2.sandbox.my.salesforce-sites.com https://*.sandbox.lightning.force.com https://*.sandbox.my.salesforce.com https://universityofportsmouth--qa.sandbox.my.salesforce-scrt.com https://universityofportsmouth.my.site.com https://*.my.site.com https://cdn.jsdelivr.net https://universityofportsmouth.my.salesforce-scrt.com https://fonts.gstatic.com https://universityofportsmouth.my.salesforce.com https://d.la11-core1.sfdc-cehfhs.salesforceliveagent.com https://universityofportsmouth.tfaforms.net *.jquery.com code.jquery.com https://bot.ivy.ai https://cdn.galvia.ai/portsmouth/portia-helper.js 1
default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; 1
default-src 'self' blob: data: 'unsafe-inline' 'unsafe-eval' *.adobedtm.com *.scene7.com *.amazon-adsystem.com *.appdemostore.com *.atdmt.com *.avocet.io *.blubrry.com *.clicktale.net *.craftyclicks.co.uk  *.chatcora.natwest.com *.doubleclick.net *.everesttech.net *.facebook.com *.facebook.net *.fca.org.uk *.google.co.uk *.google.com *.googleadservices.com *.jwpcdn.com *.liveperson.net *.linkedin.com *.lpsnmedia.net *.natwest.com *.neolane.net *.nwolb.com *.omguk.com *.omtrdc.net *.pinimg.com *.pinterest.com *.raptmedia.com *.snapchat.com *.userzoom.com *.youtube.com *.ytimg.com analytics.twitter.com api.swiftype.com dcs.demdex.net dpm.demdex.net fast.demdex.net fast.rbs.demdex.net jwpltx.com rbs.demdex.net sc-static.net static.ads-twitter.com t.co www.brightedge.com *.google.ae *.google.al *.google.am *.google.at *.google.az *.google.ba *.google.be *.google.bg *.google.bs *.google.by *.google.ca *.google.cd *.google.ch *.google.cl *.google.cm *.google.co.ao *.google.co.bw *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ma *.google.co.nz *.google.co.th *.google.co.tz *.google.co.ug *.google.co.uz *.google.co.ve *.google.co.za *.google.co.zm *.google.co.zw *.google.com.af *.google.com.ag *.google.com.ar *.google.com.au *.google.com.bd *.google.com.bh *.google.com.bn *.google.com.bo *.google.com.br *.google.com.bz *.google.com.co *.google.com.cu *.google.com.cy *.google.com.do *.google.com.ec *.google.com.eg *.google.com.et *.google.com.fj *.google.com.gh *.google.com.gi *.google.com.gt *.google.com.hk *.google.com.jm *.google.com.kh *.google.com.kw *.google.com.lb *.google.com.ly *.google.com.mm *.google.com.mt *.google.com.mx *.google.com.my *.google.com.na *.google.com.ng *.google.com.ni *.google.com.np *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.com.pr *.google.com.py *.google.com.qa *.google.com.sa *.google.com.sb *.google.com.sg *.google.com.sl *.google.com.tj *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.uy *.google.com.vc *.google.com.vn *.google.cv *.google.cz *.google.de *.google.dk *.google.dm *.google.dz *.google.es *.google.fi *.google.fr *.google.ge *.google.gg *.google.gm *.google.gp *.google.gr *.google.gy *.google.hr *.google.hu *.google.ie *.google.im *.google.iq *.google.is *.google.it *.google.je *.google.jo *.google.kz *.google.la *.google.lk *.google.lt *.google.lu *.google.lv *.google.md *.google.mg *.google.mk *.google.ml *.google.mn *.google.mu *.google.mv *.google.mw *.google.nl *.google.no *.google.pl *.google.ps *.google.pt *.google.ro *.google.rs *.google.ru *.google.sc*.google.se *.google.sh *.google.si *.google.sk *.google.sn *.google.so *.google.tg *.google.tm *.google.tn *.google.tt adservice.google.ro *.googleapis.com *.live.hdexternal.co.uk *.hdddirectsolutions.co.uk fonts.gstatic.com *.everesttech.net *.everestjs.net cdn.cookielaw.org cdn-apple.com; upgrade-insecure-requests; report-uri https://natwestpersonal.report-uri.com/r/t/csp/reportOnly; 1
object-src 'none';base-uri 'self';script-src 'nonce-45mTakeNRqikJauX5GOCUg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https: data: blob:; base-uri 'self'; object-src 'none'; img-src 'self' https: data: blob:; font-src 'self' https: data:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' https: data: blob:; worker-src 'self' blob:; manifest-src 'self'; form-action 'self' https:; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-zkqUfNnDw5h5JhbHWBR3rQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
connect-src 'self' data: *.amazonaws.com *.analytics.google.com *.google-analytics.com *.doubleclick.net *.facebook.com *.googleapis.com *.gstatic.com *.masonline.id *.stockbit.com *.stockbit.io *.tiktok.com *.youtube.com wss://*.crisp.chat wss://*.stockbit.com analytics.google.com analytics-ipv6.tiktokw.us api.trongrid.io cdnjs.cloudflare.com cdnma.cdnservice.space client.crisp.chat connect.facebook.net www.google.co.id www.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.stockbit.com analytics.tiktok.com apis.google.com app.midtrans.com client.crisp.chat connect.facebook.net d2r1yp2w7bby2u.cloudfront.net midtrans.com s3.tradingview.com sg1.wzrkt.com sg1.clevertap-prod.com www.google-analytics.com www.google.com/recaptcha/api.js www.googletagmanager.com www.gstatic.com/firebasejs/ www.gstatic.com/recaptcha/ www.youtube.com/iframe_api www.youtube.com/s/player/ ssl.google-analytics.com; worker-src blob:; style-src 'self' 'unsafe-inline' *.stockbit.com *.cloudfront.net assets-nextjs.stockbit.com client.crisp.chat translate.googleapis.com fonts.googleapis.com; font-src 'self' *.stockbit.com client.crisp.chat fonts.gstatic.com; object-src 'none'; media-src 'self' assets-nextjs.stockbit.com; report-uri https://browser-intake-us5-datadoghq.com/api/v2/logs?dd-api-key=pub521231ea4d284aa9bbf819c83a438ad4&dd-evp-origin=content-security-policy&ddsource=csp-report; 1
default-src https:; script-src https: 'unsafe-inline' https://challenges.cloudflare.com https://cdnjs.cloudflare.com; style-src https: 'unsafe-inline'; frame-src https: https://challenges.cloudflare.com; connect-src https: https://challenges.cloudflare.com https://*.hubspot.com https://*.hsforms.com https://*.hs-scripts.com https://*.hubapi.com; 1
object-src 'none';base-uri 'self';script-src 'nonce-sh0XbNBsFxrkbf4ilO89' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'report-sample';report-uri https://csp.withgoogle.com/csp/scfe 1
base-uri 'self'; media-src 'none'; object-src 'self'; manifest-src 'self'; style-src 'self' 'unsafe-inline' https://*.content.powerapps.com https://*.static.powerapps.com https://*.cdn.office.net https://vsa.services.microsoft.com https://mfpembedcdnmsit.azureedge.net; script-src 'self' blob: https://wcpstatic.microsoft.com https://shell.cdn.office.net https://res.cdn.office.net https://r4.res.office365.com https://amcdn.msftauth.net https://js.monitor.azure.com https://vsa.services.microsoft.com https://api.flow.microsoft.com https://content.powerapps.com 'sha256-CnzmUY9XDWPjkAgzDPEHLlm4gygKztleRupzQDsr608=' 'sha256-JEwSVBrCE741EV9rbuu3EqBV+pc2dpFhRHIV6+9J0mY=' 'sha256-+2jm5SNRB4WubmMQDChnXjseeCIhj34lMFWKhVn1qBE=' 'sha256-y7y27Uq4p88K6EhwSUfbhCk9VakghnU/hORgjhopExY=' 'sha256-yt+SNVxRkIi6H6yb7ndFuZM1esMX9esg3UpRHaTsyVk=' 'sha256-WiUQLzFFYWYZQghH4mbul86MJDaozCPPvgyvWOZLaAE=' 'sha256-TRsq5vkmHlqVgkpiE7RBLWrt6Punq9JsRG+VubnDdAI=' 'sha256-U+BlA4TqP+kZQUZPpdqld4S7DDT1/2tdy98N/vZxcaw=' 'sha256-wODu+VfY8ND+vPVOUkzkfC/1jpkO6aSN5rGEBoSdnys='; font-src 'self' data: https://*.content.powerapps.com https://*.static.powerapps.com https://static2.sharepointonline.com https://*.cdn.office.net https://appsforoffice.microsoft.com https://spoprod-a.akamaihd.net; form-action 'self'; report-uri https://csp.microsoft.com/report/PowerAutomate-MakerPortal; 1
default-src 'self'; connect-src 'self' https://www.google.com https://analytics.google.com https://pixel-config.reddit.com https://analytics.ahrefs.com https://ipv4.podscribe.com https://tags.srv.stackadapt.com https://a.klaviyo.com https://r.clarity.ms https://answersstatus.pagescdn.com https://analytics.heyhalda.com https://app.heyhalda.com https://insight.adsrvr.org https://3.212.39.155 https://44.228.85.26 https://34.215.155.61 https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' https://use.typekit.net https://p.typekit.net https://fonts.gstatic.com; frame-src 'self' https://insight.adsrvr.org https://match.adsrvr.org https://www.youtube.com https://answers-embed.bucknell.pagescdn.com; img-src 'self' data: https://fei.pro-market.net https://alb.reddit.com https://verifi.podscribe.com https://c.clarity.ms https://um.simpli.fi https://www.googleadservices.com https://cm.g.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com https://www.google.co.cr https://x.bidswitch.net https://bcp.crwdcntrl.net https://idsync.rlcdn.com https://simplifi.partners.tremorhub.com https://pixel.tapad.com https://aa.agkn.com https://ps.eyeota.net https://s.ad.smaato.net https://eb2.3lift.com https://sync.1rx.io https://image2.pubmatic.com https://synchroscript.deliveryengine.adswizz.com https://us-u.openx.net https://pixel.rubiconproject.com https://ib.adnxs.com https://sync.intentiq.com https://loadm.exelator.com https://user-sync.fwmrm.net https://ups.analytics.yahoo.com https://sync.bfmio.com https://ce.lijit.com https://ml314.com https://onetag-sys.com https://pippio.com https://c.bing.com https://www.google-analytics.com https://www.googletagmanager.com; object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' https://assets.sitescdn.net https://www.googletagmanager.com https://www.redditstatic.com https://js.adsrvr.org https://tags.srv.stackadapt.com https://dx.mountain.com https://px.mountain.com https://gs.mountain.com https://static.klaviyo.com https://static-tracking.klaviyo.com https://www.clarity.ms https://scripts.clarity.ms https://tag.simpli.fi https://i.simpli.fi https://d34r8q7sht0t9k.cloudfront.net https://analytics.ahrefs.com https://www.youtube.com https://app.heyhalda.com calendar.bucknell.edu https://bucknell.photoshelter.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fd.cleantalk.org https://maxcdn.bootstrapcdn.com https://unpkg.com https://www.google.com; style-src 'self' 'unsafe-inline' https://assets.sitescdn.net https://use.typekit.net https://p.typekit.net https://tags.srv.stackadapt.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://unpkg.com https://use.fontawesome.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'none'; font-src 'self' fonts.gstatic.com data:; img-src * 'self' data: https: https://*.usepylon.com https://pylon-avatars.s3.us-west-1.amazonaws.com https://d3vl36l12sfx26.cloudfront.net; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' *.clickhouse-dev.com:* *.clickhouse-staging.com:* *.clickhouse.cloud:* clickhouse.com discover.clickhouse.com statuspage.incident.io www.recaptcha.net recaptcha.net munchkin.marketo.net www.google.com google.com *.googletagmanager.com *.licdn.com www.gstatic.com js.stripe.com *.fullstory.com vercel.live https://widget.usepylon.com; style-src 'self' 'unsafe-inline' clickhouse.com discover.clickhouse.com fonts.googleapis.com vercel.live https://*.usepylon.com; object-src 'none'; worker-src 'self' blob:; connect-src 'self' 'unsafe-inline' clickhouse.com discover.clickhouse.com wss: *.clickhouse-dev.com:* *.clickhouse-staging.com:* *.clickhouse.cloud:* statuspage.incident.io www.recaptcha.net recaptcha.net *.us-east-2.amazonaws.com *.google-analytics.com *.linkedin.oribi.io *.mktoresp.com s3.eu-west-1.amazonaws.com *.fullstory.com *.auth0.com https://cdn.growthbook.io vercel.live https://*.usepylon.com wss://*.pusher.com; frame-src *.clickhouse-dev.com:* *.clickhouse-staging.com:* *.clickhouse.cloud:* clickhouse.com discover.clickhouse.com www.recaptcha.net recaptcha.net https://www.google.com https://www.googletagmanager.com https://js.stripe.com https://player.vimeo.com *.auth0.com vercel.live; frame-ancestors 'none'; 1
default-src 'self'; script-src 'self' https://www.ipn.mx https://cdnjs.cloudflare.com https://www.googletagmanager.com; style-src 'self' https://www.ipn.mx https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' https://ipn.mx https://*.ipn.mx framework-gb.cdn.gob.mx https://cdnjs.cloudflare.com; data: https://www.google-analytics.com; font-src 'self' https://cdnjs.cloudflare.com https://fonts.gstatic.com https://framework-gb.cdn.gob.mx; connect-src 'self'; frame-src 'self'; object-src 'none'; base-uri 'self' https://www.ipn.mx https://ipn.mx https://test.desarrolloweb.ipn.mx; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; media-src 'self' https: blob:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /csp-report 1
default-src 'self'; frame-ancestors 'none'; object-src 'none'; base-uri 'self' 1
default-src 'self'; script-src 'self' 'nonce-ID4zuQMQliIVz9yHF4FHqQ==' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:; connect-src 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; frame-src https:; connect-src 'self' https: wss:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com securepubads.g.doubleclick.net https://_.cinemark.com.ar static.cloudflareinsights.com connect.facebook.net static.ads-twitter.com www.clarity.ms bat.bing.com ads01.groovinads.com www.youtube.com analytics.tiktok.com tpc.googlesyndication.com pagead2.googlesyndication.com ep2.adtrafficquality.google scripts.clarity.ms ecommerce-modal.modo.com.ar googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com ecommerce-modal.modo.com.ar; img-src 'self' data: https:; connect-src 'self' https://bff-beta.cinemark.com.ar https://eastus2-3.in.applicationinsights.azure.com https://securepubads.g.doubleclick.net https://_.google-analytics.com https://pagead2.googlesyndication.com https://analytics.tiktok.com https://s.clarity.ms/collect https://p.clarity.ms/collect ad.doubleclick.net ep1.adtrafficquality.google ep2.adtrafficquality.google js.monitor.azure.com www.google.com analytics.google.com l.clarity.ms www.googleadservices.com analytics-ipv6.tiktokw.us ssl.kaptcha.com merchants.playdigital.com.ar api.amplitude.com ecommerce-modal.modo.com.ar stats.g.doubleclick.net a.clarity.ms www.facebook.com www.google-analytics.com; frame-src 'self' https: 1
default-src 'self'; script-src 'self' 'nonce-xVgl6jQ4A7aO5VIzNHjgTQ==' https://chat.totohost.hr https://www.paypal.com https://*.paypal.com https://www.paypalobjects.com https://static.zdassets.com https://ekr.zdassets.com https://*.zopim.com https://*.zendesk.com; script-src-attr 'none'; style-src 'self' 'nonce-xVgl6jQ4A7aO5VIzNHjgTQ==' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://chat.totohost.hr https://*.zopim.com wss://*.zopim.com https://*.zendesk.com wss://*.zendesk.com https://*.zdassets.com https://eracun.eposlovanje.hr https://*.paypal.com https://www.paypalobjects.com https://api-m.paypal.com; frame-src 'self' https://*.zopim.com https://*.zendesk.com https://test-wallet.corvuspay.com https://*.paypal.com https://www.paypal.com; object-src 'none'; base-uri 'self'; report-uri /api/csp-report; report-to csp-endpoint; 1
child-src 'self' blob:; connect-src 'self' *.adentifi.com *.adnxs.com *.adobeaemcloud.com *.agkn.com *.amazon-adsystem.com *.analytics.google.com *.awsapprunner.com *.awswaf.com *.azurefd.net *.bing.com *.contentsquare.net *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.lexus.com *.linkedin.com *.omtrdc.net *.on.aws *.rlcdn.com *.scene7.com *.teads.tv *.toyota.com *.turn.com *.undertone.com *.yimg.com adserv.mobi alb.reddit.com ara.paa-reporting-advertising.amazon at.alicdn.com bat.bing-int.com bat.bing.net browser-intake-datadoghq.com cm.everesttech.net connect.carfax.com conv-pix.adstk.io conversions-config.reddit.com ct.pinterest.com data: doh.cq0.co dpm.demdex.net dsp.tk0x1.com evnt.byspotify.com fonts.gstatic.com gdpr.loopme.com i18n.contentsquare.com insight.adsrvr.org kcc0.com lciapi.ninthdecimal.com login.microsoftonline.com maps.googleapis.com maps.gstatic.com match.adsrvr.org pagead2.googlesyndication.com peornia-comargers.icu pixel-config.reddit.com pixel.logtrackback.com pixel.quantserve.com pixels.spotify.com pt.ispot.tv px.gumgum.com rum.hlx.page s-a.innovid.com s.pinimg.com snap.licdn.com snapshot.carfax.com sp.analytics.yahoo.com tagging-staging.shiftdigitalapps.io tagging.shiftdigitalapps.io tags.srv.stackadapt.com tags.w55c.net tk0x1.com toyota.demdex.net tr.snapchat.com tr6.snapchat.com wss://*.toyota.com www.googleadservices.com www.googletagmanager.com www.pinterest.com www.redditstatic.com www.youtube.com x.bidswitch.net zen-dco.innovid.com; default-src 'self' *.lexus.com login.microsoftonline.com; font-src 'self' *.lexus.com *.linkedin.com *.toyota.com assets.alicdn.com at.alicdn.com data: fonts.googleapis.com fonts.gstatic.com login.microsoftonline.com snap.licdn.com www.gazooracing.com; frame-src 'self' *.adnxs.com *.amazon-adsystem.com *.bing.com *.contentsquare.net *.doubleclick.net *.ep-mimecast.snapchat.com *.facebook.com *.flashtalking.com *.google.com *.lexus.com *.teads.tv ct.pinterest.com insight.adsrvr.org lciapi.ninthdecimal.com login.microsoftonline.com m.youtube.com match.adsrvr.org pixel.rubiconproject.com rtr.innovid.com toyota.demdex.net tr.snapchat.com www.googletagmanager.com www.youtube-nocookie.com www.youtube.com; img-src 'self' *.adentifi.com *.adnxs.com *.adobeaemcloud.com *.adstk.io *.agkn.com *.amazon-adsystem.com *.azurefd.net *.bing.com *.cognitivlabs.com *.contentsquare.net *.doubleclick.net *.facebook.com *.facebook.net *.flashtalking.com *.google.com *.inventoryrsc.com *.lexus.com *.linkedin.com *.rlcdn.com *.scene7.com *.teads.tv *.toyota.com *.tribalfusion.com *.turn.com *.tvsquared.com *.undertone.com *.yimg.com abs.twimg.com accretivemedia.go2cloud.org ade.googlesyndication.com adserv.mobi ag.innovid.com alb.reddit.com analytics.twitter.com bat.bing.net cm.everesttech.net ct.pinterest.com data: dpm.demdex.net dsp.tk0x1.com fonts.gstatic.com hb.yahoo.net i.ytimg.com images.inventoryservices.lexusdealerdigital.com img.alicdn.com insight.adsrvr.org jadserve.postrelease.com kcc0.com lciapi.ninthdecimal.com lexus.assets.shiftdigitalinventory.com lexus.com log.pinterest.com login.microsoftonline.com maps.googleapis.com maps.gstatic.com match.adsrvr.org pagead2.googlesyndication.com pbs.twimg.com peornia-comargers.icu pippio.com pixel-ssn.quantserve.com pixel.logtrackback.com pixel.quantserve.com pixel.rubiconproject.com pr-bh.ybp.yahoo.com pt.ispot.tv px.gumgum.com rtr.innovid.com s-a.innovid.com snap.licdn.com snapshot.carfax.com sp.analytics.yahoo.com static.carfax.com static.reportdelivery.production.aws.carfax.io tagging-staging.shiftdigitalapps.io tagging.shiftdigitalapps.io tags.srv.stackadapt.com tags.w55c.net tk0x1.com trkn.us twittercounter.com ups.analytics.yahoo.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.gstatic.com www.pinterest.com www.youtube.com x.bidswitch.net yt3.ggpht.com zen-dco.innovid.com; media-src 'self' *.doubleclick.net *.lexus.com dts.innovid.com m.youtube.com pdst.fm s-static.innovid.com www.googleadservices.com www.youtube-nocookie.com www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.adnxs.com *.agkn.com *.amazon-adsystem.com *.awswaf.com *.azureedge.net *.azurefd.net *.bing.com *.contentsquare.com *.contentsquare.net *.doubleclick.net *.facebook.net *.google.com *.linkedin.com *.rlcdn.com *.teads.tv *.toyota.com *.tribalfusion.com *.turn.com *.tvsquared.com *.yimg.com accretivemedia.go2cloud.org adserv.mobi assets.adobedtm.com bat.bing-int.com c.gumgum.com cdn.pdst.fm ct.pinterest.com dts.innovid.com g.alicdn.com i.loopme.me js.adsrvr.org js.adstk.io login.microsoftonline.com maps.googleapis.com pagead2.googlesyndication.com peornia-comargers.icu pixel.byspotify.com pixel.mathtag.com rules.quantcount.com rum.hlx.page s-static.innovid.com s.pinimg.com sc-static.net scripts.inmarkethub.com secure.quantserve.com snap.licdn.com snapshot.carfax.com static.ads-twitter.com tagging-staging.shiftdigitalapps.io tagging.shiftdigitalapps.io tags.srv.stackadapt.com tr.snapchat.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.gstatic.com www.redditstatic.com www.youtube-nocookie.com www.youtube.com; style-src 'self' 'unsafe-inline' *.lexus.com *.toyota.com fonts.googleapis.com snapshot.carfax.com tags.srv.stackadapt.com www.youtube.com; worker-src 'self' 'unsafe-inline' *.lexus.com blob: data:;upgrade-insecure-requests; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubd963f598149f172b4b36c022bf30d5d5&dd-evp-origin=content-security-policy&ddsource=csp-report 1
default-src 'self' *.insight.com *.drift.com *.driftcdn.com *.launchdarkly.com www.googletagmanager.com play.vidyard.com *.aimtell.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.insight.com *.adroll.com *.atgsvcs.com *.custhelp.com *.webcollage.net *.driftt.com *.google.com *.marketo.com *.doubleclick.com *.doubleclick.net *.qualtrics.com assets.adobedtm.com cdn.lr-in-prod.com cdn.pricespider.com munchkin.marketo.net play.vidyard.com s.go-mpulse.net up.pixel.ad use.typekit.net ws.cs.1worldsync.com www.clarity.ms www.google-analytics.com www.googletagmanager.com www.youtube.com apps.bazaarvoice.com static.ads-twitter.com cdn-ukwest.onetrust.com cdn01.basis.net cdns.eu1.gigya.com code.jquery.com content.syndigo.com js.adsrvr.org *.cnetcontentsolutions.com mpsnare.iesnare.com unpkg.com www.googleadservices.com bat.bing.com cdn.cs.1worldsync.com cdn.tt.omtrdc.net connect.facebook.net i.simpli.fi lex.33across.com px.ads.linkedin.com s3.amazonaws.com snap.licdn.com *.hotjar.com t.sellpoints.com tracking.intentsify.io view.ceros.com w.usabilla.com ws.zoominfo.com xiecomm.paymetric.com blob:; style-src 'self' 'unsafe-inline' *.insight.com *.drift.com *.marketo.com code.jquery.com cdn.cs.1worldsync.com fonts.googleapis.com cdn.tt.omtrdc.net; img-src * data:; font-src 'self' data: *.insight.com fonts.gstatic.com use.typekit.net cdn.cs.1worldsync.com insightenterprises.qualtrics.com s.nsit.com svcs.tql.com at.alicdn.com; connect-src 'self' *.akamaihd.net *.clarity.ms *.gigya.com *.google.com *.google-analytics.com *.googlesyndication.com *.insight.com *.launchdarkly.com *.mktoresp.com *.akstat.io *.go-mpulse.net *.onetrust.com insightenterprises.tt.omtrdc.net stats.g.doubleclick.net www.google-analytics.com 366-uky-221.mktoutil.com adservice.google.com bat.bing.com cdn.aimtell.io cdn.linkedin.oribi.io cert-xiecomm.paymetric.com content.syndigo.com dpm.demdex.net et-qalogin.insight.com integration.richrelevance.com r.lr-in-prod.com rules.atgsvcs.com signals.aimtell.com sjrtp2.marketo.com smetrics.insight.com *.bazaarvoice.com ws.zoominfo.com *.adroll.com play.vidyard.com *.richrelevance.com www.facebook.com siteintercept.qualtrics.com *.googletagmanager.com; media-src player.vimeo.com www.youtube.com; object-src *.insight.com; frame-src 'self' *.adsrvr.org pixel.sitescout.com insight.demdex.net js.driftt.com app-abm.marketo.com centinelapistag.cardinalcommerce.com cert-xiecomm.paymetric.com html5-player.libsyn.com insightent.wufoo.com *.insight.com play.vidyard.com view.ceros.com www.youtube.com *.marketo.com *.doubleclick.net *.everestjs.net cbsi.demdex.net www.facebook.com beacon.aimtell.com; report-uri https://insight.report-uri.com/r/t/csp/wizard 1
script-src 'unsafe-eval' 'unsafe-inline' https: 'nonce-0c395048c60b625ea5ec7c8d84670b8e' 'strict-dynamic'; report-uri /api/fb/cspLogs; script-src-attr 'sha256-bwK6T5wZVTANitXbrTsel7kl/PyCjCd/Dq5Qoz3imjM=' 'unsafe-hashes'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.google-analytics.com https://*.clarity.ms https://*.mediaad.org https://*.mediaffic.ir https://*.tapsell.ir; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://*.clarity.ms https://*.google-analytics.com https://*.mediaad.org https://*.tapcell.ir https://*.mediaffic.ir; frame-src 'self' https://*.mediaad.org https://*.mediaffic.ir; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 1
default-src 'self' adobedtm.com *.adobedtm.com adroll.com *.adroll.com ads-twitter.com *.ads-twitter.com afterpay.com *.afterpay.com apxprogrammatic.com *.apxprogrammatic.com bazaarvoice.com *.bazaarvoice.com bing.com *.bing.com boldchat.com *.boldchat.com braintree-api.com *.braintree-api.com braintreegateway.com *.braintreegateway.com brcdn.com *.brcdn.com cloudflare.com *.cloudflare.com cookielaw.org *.cookielaw.org demdex.net *.demdex.net dotomi.com *.dotomi.com doubleclick.net *.doubleclick.net facebook.net *.facebook.net fullstory.com *.fullstory.com genpt.com *.genpt.com google-analytics.com *.google-analytics.com google.ca *.google.ca google.com *.google.com googleadservices.com *.googleadservices.com googletagmanager.com *.googletagmanager.com fonts.gstatic.com iesnare.com *.iesnare.com jst.ai *.jst.ai klaviyo.com *.klaviyo.com livechatinc.com *.livechatinc.com maps.googleapis.com *.maps.googleapis.com maxmind.com *.maxmind.com micpn.com *.micpn.com mmapiws.com *.mmapiws.com napaonline.com *.napaonline.com netmng.com *.netmng.com newrelic.com *.newrelic.com nr-data.net *.nr-data.net omtrdc.net *.omtrdc.net onetrust.com *.onetrust.com paypal.com *.paypal.com paypalobjects.com *.paypalobjects.com pinterest.com *.pinterest.com rakuten.com *.rakuten.com repairpal.com *.repairpal.com rfihub.net *.rfihub.net scene7.com *.scene7.com sentry-cdn.com *.sentry-cdn.com signifyd.com *.signifyd.com skyword.com *.skyword.com smartystreets.com *.smartystreets.com twitter.com *.twitter.com vibescm.com *.vibescm.com vimeo.com *.vimeo.com wp.com *.wp.com youtube.com *.youtube.com localhost *.localhost; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=y1qY1Pdf6QVtRYsf0woZ7cPI2gNRr1RdLqtVv.aQn8A-1789282594.237477-1.0.1.1-X4z3r2I.kTNASFnfG5wZC1zSWBuQiZeAVrib5HljVOECb5Jq4JSon0uLtEO1Y0GNZ7CAo71D6RAjxAnHZLUFHs_ywZqUfcj6h9ZdcGKwHvXPxvjyr9jccCTgdBDh5T7Bv3Z7Ar.0GK2SlTN0FbZU49HveH6HGBXTdVnZZUH2JID6HqyOIB9jBhmTtWqq8nIY; report-to cf-slrxaptvnttdqvzq 1
default-src 'none'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; img-src 'self' data: blob: https://api-visitor-us-east.velaro.com https://maps.googleapis.com https://maps.gstatic.com https://shg.factory73.com https://appnhs24wp222b8656a3.blob.core.windows.net https://appnhs24wpcb76d5f712.blob.core.windows.net https://appnhs24wp41a8c38064.blob.core.windows.net; font-src 'self' data: https://cdnjs.cloudflare.com https://appnhs24wp222b8656a3.blob.core.windows.net https://appnhs24wpcb76d5f712.blob.core.windows.net https://appnhs24wp41a8c38064.blob.core.windows.net; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://appnhs24wp222b8656a3.blob.core.windows.net https://appnhs24wpcb76d5f712.blob.core.windows.net https://appnhs24wp41a8c38064.blob.core.windows.net; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cc.cdn.civiccomputing.com https://maps.googleapis.com https://maps.gstatic.com https://nhs24-shgapi-live.azurewebsites.net https://appnhs24wp222b8656a3.blob.core.windows.net https://appnhs24wpcb76d5f712.blob.core.windows.net https://appnhs24wp41a8c38064.blob.core.windows.net; connect-src 'self' https://api.reciteme.com https://api.postcodes.io https://maps.googleapis.com https://maps.gstatic.com https://apikeys.civiccomputing.com https://appnhs24wp222b8656a3.blob.core.windows.net https://appnhs24wpcb76d5f712.blob.core.windows.net; frame-src 'self' https://www.youtube.com; media-src 'self' blob:; worker-src 'self' blob:; manifest-src 'self'; script-src-elem 'self' 'unsafe-inline' https://api.reciteme.com; style-src-elem 'self' 'unsafe-inline' https://api.reciteme.com; font-src 'self' 'unsafe-inline' https://api.reciteme.com; upgrade-insecure-requests; block-all-mixed-content 1
default-src adtrafficquality.google *.adtrafficquality.google ajax.googleapis.com *.ajax.googleapis.com jsdelivr.net *.jsdelivr.net 'self' altmetric.com *.altmetric.com bootstrapcdn.com *.bootstrapcdn.com cloudflare.com *.cloudflare.com cloudflareinsights.com *.cloudflareinsights.com d1bxh8uas1mnw7.cloudfront.net *.d1bxh8uas1mnw7.cloudfront.net d3js.org *.d3js.org dimensions.ai *.dimensions.ai doubleclick.net *.doubleclick.net facebook.net *.facebook.net google-analytics.com *.google-analytics.com google.com *.google.com google.com.co *.google.com.co googleadservices.com *.googleadservices.com googletagmanager.com *.googletagmanager.com gstatic.com *.gstatic.com instagram.com *.instagram.com plu.mx *.plu.mx translate.googleapis.com *.translate.googleapis.com twitter.com *.twitter.com udea.edu.co *.udea.edu.co unpkg.com *.unpkg.com; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=XsTpHv16EjuTUZodh5ipT.Fzyu3nW45TTevoQk2DZJg-1789285768.2641177-1.0.1.1-lUZ9wC7LSmXAzh1PwWPkBpHZBIdZnz_b95YTBbtPZ8X5OCIIOgPVuc51dQpC7ee2cSbOOEbbU83vIGLrBkfvs4jRvUefRCGgVImrYU7w.FXRYx2Kcps38HU.jvxbnTO3R4N2PnVZA1O2M6VWYQoYSWE_vvKz9HwwNr2BQWqb6fUfbswUTrpPFQHm2sCvT8kUUMun7p_XGFeiCYm1juXXCw; report-to cf-exnzjnxhzqfpdeza 1
default-src 'self' https://*.sugarondemand.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.avery.com https://*.osano.com https://analytics.tiktok.com https://www.google-analytics.com https://s.pinimg.com https://*.bazaarvoice.com https://*.dynamicyield.com https://js.squarecdn.com https://www.googletagmanager.com https://*.livechatinc.com https://*.livechat-static.com https://*.youtube.com https://unpkg.com/web-vitals/dist/web-vitals.iife.js https://unpkg.com/web-vitals@5.0.1/dist/web-vitals.iife.js https://*.google.com https://*.debugbear.com https://cdnjs.cloudflare.com/ajax/libs/picturefill/3.0.3/picturefill.min.js https://cdn.jsdelivr.net/npm/jquery@3.5.1/dist/jquery.slim.min.js https://cdn.jsdelivr.net/npm/bootstrap@4.1.3/dist/js/bootstrap.min.js https://cdnjs.cloudflare.com/ajax/libs/tether/1.4.0/js/tether.min.js https://*.salesloft.com https://*.bc0a.com https://*.attn.tv https://*.lrkt-in.com https://connect.facebook.net https://www.gstatic.com https://ct.pinterest.com https://*.curalate.com https://www.redditstatic.com https://*.doubleclick.net https://*.bing.com https://cdn.dashhudson.com/web/js/board-carousel-embed.js https://cdn.jsdelivr.net/npm/swiper@11/ https://*.cloudinary.com https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js https://cdn.jsdelivr.net/npm/popper.js@1.16.1/dist/umd/popper.min.js https://cdnjs.cloudflare.com/ajax/libs/lightbox2/2.11.5/js/lightbox-plus-jquery.min.js 'wasm-unsafe-eval' https://*.glance.net https://*.glancecdn.net https://*.amazon-adsystem.com https://container.pepperjam.com https://cdn.lgrckt-in.com https://cdn.logr-in.com *.udev1a.net *.usablenet.com https://cdn.jsdelivr.net/npm/beerslider@1.0.3/dist/BeerSlider.js; style-src 'self' 'unsafe-inline' https://*.avery.com https://fonts.googleapis.com https://*.dynamicyield.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css https://*.typekit.net https://cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.css https://cdnjs.cloudflare.com/ajax/libs/lightbox2/2.11.5/css/lightbox.min.css https://*.glance.net https://*.glancecdn.net https://avery-static-tailwind.s3.us-east-1.amazonaws.com/ *.udev1a.net *.usablenet.com https://cdn.jsdelivr.net/npm/beerslider@1.0.3/dist/BeerSlider.css https://googletagmanager.com https://*.livechatinc.com https://*.youtube.com https://*.google.com; img-src 'self' data: blob: https://*.avery.com https://www.google-analytics.com https://www.googletagmanager.com https://*.afterpay.com https://*.bazaarvoice.com https://*.doubleclick.net https://*.usablenet.com https://www.facebook.com https://*.dynamicyield.com https://*.livechatinc.com https://*.livechat-static.com https://*.livechat-files.com https://*.files-text.com https://*.youtube.com https://*.googlesyndication.com https://s3.amazonaws.com https://*.gstatic.com https://*.sugarondemand.com https://i.ytimg.com https://*.reddit.com https://*.bing.com https://*.cloudfront.net https://likeshop.me https://images.dashsocial.com https://images.dashhudson.com https://*.google.com https://*.glance.net https://*.glancecdn.net https://tvspix.com https://arttrk.com https://*.attentivemobile.com; font-src 'self' data: https://*.avery.com https://fonts.gstatic.com https://*.dynamicyield.com https://cdnjs.cloudflare.com https://*.squarecdn.com https://*.bazaarvoice.com https://*.typekit.net https://likeshop.me https://*.glance.net https://*.glancecdn.net https://cdn.livechatinc.com https://secure.livechatinc.com https://fonts.google.com; connect-src 'self' https://*.avery.com https://www.googletagmanager.com https://*.dynamicyield.com https://*.doubleclick.net https://dy-api.com https://www.google-analytics.com https://*.osano.com https://ct.pinterest.com https://analytics.tiktok.com https://*.bazaarvoice.com https://*.salesloft.com https://*.lrkt-in.com https://*.bc0a.com https://events.attentivemobile.com https://*.attn.tv https://*.afterpay.com https://server-side-tagging-ykzfrilmoq-uc.a.run.app https://*.amplitude.com https://*.google.com https://*.salsify.com https://salsify-ecdn.com https://*.curalate.com https://ls.chatid.com/events https://*.reddit.com https://www.redditstatic.com https://*.debugbear.com https://*.bing.com https://www.googleadservices.com https://api.likeshop.me/gallery-more https://www.facebook.com *.livechatinc.com wss://*.livechatinc.com https://*.text.com https://*.youtube.com https://*.googlesyndication.com wss://*.glance.net https://*.glance.net https://*.glancecdn.net https://direct-collect.dy-api.com https://*.amazon-adsystem.com https://ara.paa-reporting-advertising.amazon https://analytics-ipv6.tiktokw.us https://google.com https://*.lgrckt-in.com https://*.logr-in.com https://*.braintreegateway.com https://*.braintree-api.com https://static.dy-api.com; frame-src 'self' https://*.avery.com https://ct.pinterest.com https://*.google.com https://*.dynamicyield.com https://*.doubleclick.net https://*.livechatinc.com https://*.afterpay.com https://*.attn.tv https://www.facebook.com https://salsify-ecdn.com https://*.youtube.com https://server-side-tagging-ykzfrilmoq-uc.a.run.app https://www.googletagmanager.com https://*.amazon-adsystem.com https://*.cloudinary.com https://*.sugarondemand.com https://*.glance.net https://*.braintreegateway.com; frame-ancestors 'self' https://*.avery.com https://*.google.com; worker-src 'self' blob:; object-src 'self' https://avery.sugarondemand.com; report-uri /_api/csp-report; report-to csp-endpoint; 1
default-src 'self' *.commerzbank.de; script-src 'self' *.commerzbank.de 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://www.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net extend.vimeocdn.com www.facebook.com connect.facebook.net; style-src 'self' *.commerzbank.de 'unsafe-inline' 'unsafe-eval' https://googletagmanager.com https://tagmanager.google.com; frame-src 'self' *.commerzbank.de blob: https://www.googletagmanager.com https://*.fls.doubleclick.net player.vimeo.com; worker-src 'self' *.commerzbank.de blob:; connect-src 'self' *.commerzbank.de https://*.googletagmanager.com https://*.google.com https://google.com https://*.google-analytics.com https://*.analytics.google.com https://ad.doubleclick.net https://*.g.doubleclick.net https://*.google.de https://*.google.bg https://pagead2.googlesyndication.com https://www.googleadservices.com vimeo.com www.facebook.com connect.facebook.net https://bf71104dpj.bf.dynatrace.com/bf; font-src 'self' *.commerzbank.de data:; img-src 'self' *.commerzbank.de https: data: https://*.googletagmanager.com https://googletagmanager.com https://*.google-analytics.com https://ad.doubleclick.net https://*.g.doubleclick.net https://google.com https://*.google.com https://*.google.de https://*.google.bg https://pagead2.googlesyndication.com https://www.googleadservices.com https://ade.googlesyndication.com https://adservice.google.com i.vimeocdn.com www.facebook.com connect.facebook.net; media-src 'self' *.commerzbank.de data:; base-uri 'self'; report-uri https://tp.commerzbank.de/csp; 1
object-src 'none'; script-src 'self' 'unsafe-inline' connect.facebook.net platform.linkedin.com platform.twitter.com cdn.matomo.cloud cdn.gtranslate.net translate.google.com translate.googleapis.com https://static.hotjar.com https://script.hotjar.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://abt.s3.yandex.net https://api.mindbox.ru https://emd.hybrid.ai https://dss.hybrid.ai https://pxl.webarchivator.com https://gc.kis.v2.scr.kaspersky-labs.com https://aebdgd.com https://polyfill.io https://api.mindbox.ru https://sso-forms-prod.t-static.ru https://browser.sentry-cdn.com https://captcha-api.yandex.ru https://sdk.kokocads.com https://yandex.ru https://get4click.ru https://top-fwz1.mail.ru https://cdn.retailrocket.ru https://www.googletagmanager.com https://yastatic.net https://cdn.diginetica.net https://lcab.talk-me.ru https://x.cnt.my https://gdeslon.ru https://mc.yandex.ru https://vk.com https://cdn.rutarget.ru https://retagro.com https://widget.me-talk.ru https://mod.calltouch.ru https://www.google-analytics.com https://clicks.gdeslon.ru https://privacy-cs.mail.ru https://api-maps.yandex.ru https://personalization-web-stable.mindbox.ru https://web-static.mindbox.ru https://s4fmvl.com https://sso-forms-prod.s3-msk.tinkoff.ru https://aebdgd.ru https://connect.facebook.net https://static.me-talk.ru https://mc.yandex.by https://mc.yandex.kz https://mc.yandex.com https://oleg-dirtrider.github.io; script-src-elem 'self' 'unsafe-inline' https://vk.com https://sso-forms-prod.t-static.ru https://privacy-cs.mail.ru https://aebdgd.com https://vk.com https://yandex.ru https://gdeslon.ru https://api-maps.yandex.ru https://abt.s3.yandex.net https://yandex.ru https://abt.s3.yandex.net https://api.mindbox.ru https://sso-forms-prod.t-static.ru https://browser.sentry-cdn.com https://captcha-api.yandex.ru https://lcab.talk-me.ru https://cdn.retailrocket.ru https://yastatic.net https://cdn.diginetica.net https://clicks.gdeslon.ru https://mc.yandex.ru https://mc.yandex.com https://web-static.mindbox.ru https://x.cnt.my https://top-fwz1.mail.ru https://tm.oriol.pro https://cdn.targetads.io https://st.hybrid.ai https://fp.hybrid.ai https://dss.hybrid.ai https://emd.hybrid.ai https://pxl.webarchivator.com https://citydsp.com https://retagro.com https://get4click.ru https://www.google-analytics.com https://gdeslon.ru https://cdn.rutarget.ru https://vk.com https://www.googletagmanager.com https://widget.me-talk.ru https://banners.adfox.ru https://code.createjs.com; worker-src 'self' blob:; report-uri https://sentry.adv.ru/api/27/security/?sentry_key=b61ff971011b47378e5c5097a24bf21a; 1
default-src 'self' cdn.segment.com myob.com *.myob.com *.myobdev.com *.ninetailed.co *.clarity.ms *.bing.com *.linkedin.com *.reddit.com connect.facebook.net *.facebook.com *.fullstory.com *.segmentapis.com *.google.com.au *.redditstatic.com d.impactradius-event.com analytics.tiktok.com analytics-ipv6.tiktokw.us www.googletagmanager.com *.hsforms.net *.hsforms.com *.hs-scripts.com *.hs-banner.com *.hubspot.com *.hubspotfeedback.com *.hs-analytics.net *.hsadspixel.net *.segment.io *.hsappstatic.net *.clickagy.com *.adsrvr.org *.zoominfo.com feedback.hubapi.com *.survicate.com snap.licdn.com *.pinimg.com *.google.com *.google-analytics.com fast.wistia.net *.mypurecloud.com.au *.newrelic.com *.pinterest.com *.zi-scripts.com *.doubleclick.net *.wistia.com *.youtube.com *.youtu.be *.jsdelivr.net *.algolia.io *.algolia.net *.algolia.com alg.li *.algolianet.com *.ctfassets.net *.sentry-cdn.com *.sentry.io *.contentful.com *.survicate-cdn.com *.googleapis.com *.zdassets.com *.zendesk.com *.googleadservices.com myob.74xz8u.net d.impct.site google.com recaptcha.net *.gstatic.com d34r8q7sht0t9k.cloudfront.net ipv4.pdscrb.com tracking-api.g2.com cdn.veritonic.com *.veritonicmetrics.com tr.capterra.com bzrcdn.openai.com bzr.openai.com *.litix.io bam.nr-data.net *.hubapi.com csp.withgoogle.com ws: blob:; style-src 'self' *.myob.com *.myobdev.com *.wistia.com *.survicate.com *.survicate-cdn.com www.googletagmanager.com *.googleapis.com *.hsappstatic.net *.gstatic.com *.youtube.com 'unsafe-inline' ws: blob:; img-src 'self' *.myob.com *.myobdev.com *.wistia.com *.ctfassets.net *.survicate-cdn.com *.survicate.com *.google-analytics.com *.googleadservices.com www.googletagmanager.com *.doubleclick.net *.facebook.com connect.facebook.net *.linkedin.com snap.licdn.com *.hubspot.com *.hsforms.com *.hsforms.net *.bing.com *.clarity.ms *.google.com *.google.com.au *.gstatic.com *.reddit.com *.clickagy.com *.adsrvr.org *.youtube.com i.ytimg.com yt3.ggpht.com *.pdscrb.com *.adnxs.com *.rubiconproject.com *.tapad.com *.casalemedia.com *.pubmatic.com *.bidswitch.net *.adswizz.com *.covatic.io data: blob:; font-src 'self' *.myob.com *.myobdev.com *.wistia.com fast.wistia.net *.survicate-cdn.com fonts.gstatic.com data:; object-src 'none'; frame-src 'self' *.youtube.com *.youtu.be *.wistia.com *.hubspot.com *.hsforms.com *.hsforms.net *.survicate.com *.mypurecloud.com.au app.contentful.com www.googletagmanager.com www.google.com www.recaptcha.net google.com *.doubleclick.net *.pinterest.com *.adsrvr.org *.adnxs.com *.casalemedia.com *.rubiconproject.com *.pubmatic.com *.bidswitch.net *.ninetailed.io *.widgets.ninetailed.io; frame-ancestors 'self' https://app.contentful.com; script-src 'nonce-NDNiMTQ3ZTUtNDUyYi00MWUzLWJmYWUtMjliOGYxZDk3ZGI2' 'strict-dynamic' 'unsafe-eval' ws: blob:; report-uri /api/csp-report; 1
default-src 'none'; child-src 'self' https://info.arup.com; connect-src 'self' data: 173-yrh-728.mktoresp.com/ 173-yrh-728.mktoweb.com/ https://*.marketo.com https://*.marketo.net https://*.mktoutil.com https://*.mktoweb.com https://173-yrh-728.mktoresp.com https://a.clarity.ms https://analytics-ipv6.tiktokw.us https://analytics.google.com https://analytics.google.com/ https://analytics.tiktok.com https://api.killadsapi.com https://api.mf.webcontentassessor.com https://api.software-downloading.com https://apm-volcano.zuoyebang.com https://app.reprintsdesk.com https://baidustatics.net https://c.ba.contentsquare.net https://cdn-ukwest.onetrust.com https://cdn-ukwest.onetrust.com/ https://cdn.shopimgs.com https://cdn.snitcher.com/ https://cdnml.global-cache.online https://cdnmmh.global-cache.online https://code.jquery.com https://connect.facebook.net/ https://dc.services.visualstudio.com/v2/track https://esp-eu.aptrinsic.com https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location https://info.arup.com https://l.clarity.ms https://pagead2.googlesyndication.com/ccm/ https://player.podigee-cdn.net https://privacyportal-uk.onetrust.com https://px.ads.linkedin.com/ https://radar.snitcher.com https://region1.analytics.google.com https://region1.google-analytics.com/g/ https://res-1.cdn.office.net https://stats.g.doubleclick.net https://vc.hotjar.io/ https://www.facebook.com/ https://www.google.co.uk https://www.google.com https://www.google.ie/ https://www.googletagmanager.com https://y.clarity.ms www.google-analytics.com/g/ www.google.com/ccm/; font-src 'self' data: https://*.cloudfront.net/graphik/ https://*.cloudfront.net/lato/ https://fonts.gstatic.com/ https://info.arup.com https://player.podigee-cdn.net; form-action 'self' https://info.arup.com https://www.facebook.com/; frame-src 'self' 173-yrh-728.mktoresp.com/ 173-yrh-728.mktoweb.com/ https://flo.uri.sh/ https://info.arup.com https://player.podigee-cdn.net https://td.doubleclick.net https://www.googletagmanager.com/ https://www.youtube-nocookie.com; img-src 'self' data: https://*.google.co.in https://*.linkedin.com https://a.emea01.idio.episerver.net/ https://c.clarity.ms https://cdn-ukwest.onetrust.com/ https://info.arup.com https://player.podigee-cdn.net https://public.flourish.studio/resources/bosh.svg https://px.ads.linkedin.com https://px.ads.linkedin.com/ https://px4.ads.linkedin.com/ https://www.facebook.com/ https://www.google.ca https://www.google.co.uk https://www.google.ie/ https://www.googletagmanager.com https://www.googletagmanager.com/td www.facebook.com/privacy_sandbox/ www.google.com/pagead/; media-src 'self' https://info.arup.com; script-src-elem 'self' 'unsafe-inline' 173-yrh-728.mktoresp.com/ 173-yrh-728.mktoweb.com/ https://*.marketo.com https://acsbapp.com/apps/app/dist/js/app.js https://analytics.tiktok.com https://cdn-ukwest.onetrust.com/scripttemplates/ https://connect.facebook.net/ https://googleads.g.doubleclick.net https://info.arup.com https://js.monitor.azure.com/scripts/b/ai.2.gbl.min.js https://lonrtp1.marketo.com https://munchkin.marketo.net/ https://player.podigee-cdn.net https://public.flourish.studio/resources/embed.js https://radar.snitcher.com https://s.emea01.idio.episerver.net/ia.js https://script.hotjar.com/ https://scripts.clarity.ms https://snap.licdn.com/li.lms-analytics/ https://static.hotjar.com/c/ https://www.clarity.ms https://www.googletagmanager.com/ https://www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://connect.facebook.net/ https://info.arup.com https://player.podigee-cdn.net https://public.flourish.studio/resources/embed.js https://radar.snitcher.com; style-src-elem 'self' 'unsafe-inline' 173-yrh-728.mktoresp.com/ 173-yrh-728.mktoweb.com/ https://cdn.jsdelivr.net/npm/gsap@3.12.5/dist/gsap.min.js https://info.arup.com https://rtp-static.marketo.com; style-src 'self' 'unsafe-inline' https://info.arup.com; script-src-attr https://info.arup.com https://public.flourish.studio/resources/embed.js https://radar.snitcher.com; base-uri https://info.arup.com; frame-ancestors https://info.arup.com; manifest-src https://info.arup.com; navigate-to https://info.arup.com; object-src https://info.arup.com; prefetch-src https://info.arup.com; style-src-attr https://info.arup.com; worker-src https://info.arup.com; report-to stott-security-endpoint;report-uri https://www.arup.com/stott.security.optimizely/api/cspreporting/reporturiviolation/; 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'nonce-6yg8PVhv+PdrJLFoM4mLjA==' https://cortex.gigahost.dk https://whoislookup.gigahost.dk https://signals.gigahost.dk; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self' https://whoislookup.gigahost.dk wss://whoislookup.gigahost.dk https://signals.gigahost.dk; frame-src 'self' https://www.youtube.com; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; form-action 'self' https://payment.gigahost.dk https://ssl.epay.dk https://pay.gigahost.dk https://payments.epay.eu https://ssl.ditonlinebetalingssystem.dk; report-to front-csp; report-uri https://signals.gigahost.dk/csp-report/front 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' https://c.teramind.co https://*.hsforms.net https://*.hsappstatic.net https://*.hs-scripts.com https://*.hs-analytics.net https://*.hscollectedforms.net https://*.hsadspixel.net https://*.usemessages.com https://www.youtube.com https://*.hotjar.com https://www.googletagmanager.com https://*.google-analytics.com https://www.googleadservices.com https://*.doubleclick.net https://www.gstatic.com https://*.mxpnl.com https://snap.licdn.com https://bat.bing.com https://connect.facebook.net https://*.cookieyes.com https://*.omappapi.com https://*.opmnstr.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.hsforms.net; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; media-src 'self' https://go.teramind.co; connect-src 'self' https://c.teramind.co https://*.hsforms.com https://*.hubapi.com https://*.hubspot.com https://*.hs-analytics.net https://*.hscollectedforms.net https://*.hotjar.com https://*.hotjar.io https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.doubleclick.net https://*.mxpnl.com https://*.mixpanel.com https://px.ads.linkedin.com https://bat.bing.com https://*.facebook.com https://*.cookieyes.com https://*.omappapi.com https://*.opmnstr.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://api.riverside.fm https://*.hsforms.com https://*.hsforms.net https://*.hubspot.com https://go.teramind.co https://www.googletagmanager.com https://*.doubleclick.net https://www.facebook.com; report-uri /_tera/csp; form-action 'self' https://*.hsforms.com https://forms.hubspot.com; worker-src 'self' blob:; manifest-src 'self' 1
default-src 'self' http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com ; script-src  'report-sample' 'self' 'unsafe-eval' 'sha256-DXn3s/4YxFMzeJ/A5gjzuC0rWhzyk0SyyxuYNZJmzIk=' 'sha256-vcyDAqC3FhDj7EQXaK8q+v99Tl6OFxdXaH78ZGY4E4o=' 'sha256-IVTixZn+6cCCDCbV81FbiLr+tQcQNWJBVNQCLBY9R1o='  'sha256-rhHBN5crgRlkZOsUoaeA5v8QVm1B7TZMAPay6pGn1+Y=' 'sha256-WcBCCmbLPJQqjR5mwdyqnULxC7+IG8Znd3x/IxpXL+U=' 'sha256-rBrTgk4F/JRLLThC7ln+W8x1zgAeI6tIFAhW5EPFd1I=' 'sha256-w75SxlN6rw0wbHhTV1xNPj0em4LHTFSa17eYR+gFbXg=' 'sha256-gxjQMNTWQtcITxtZmXUTZRbXD8gi7RUvK4YWKdz8+yY=' 'sha256-Sl7rujPz9OXGo/Fv/ji8Vnyj1QmnPi+CTybCaJh45SM='  'sha256-lE+O+OX5mKlsz2kg5bPpTFHYF32Tgvxhy6xg39etttQ=' 'sha256-vr8e+f1qKu5l9nVuC4OROA7+Bp7ci3dZkncoRyI3+bw=' 'sha256-lphW/tVuE38c8R/Uk1LxVbzeIW4F2lUFy0QnjSF2l5Q=' 'sha256-7FXKzRkUi1okBTyDwjzIX5JMHceHEGCMQfH7s/6v1Ec=' 'sha256-e0xROvJsKSf9i8XP3F1FAQK16l80qEavKITwDPROgo4=' 'sha256-hvhzA9QeWUJKMFmW3lECppfWid7Uzg2ZRmu9wYSxNl8='https://www.seznam.cz/rs/static/rc.js https://connect.facebook.net https://www.googleadservices.com https://www.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.googletagmanager.com https://c.imedia.cz/js/retargeting.js https://connect.facebook.net/en_US/fbevents.js https://googleads.g.doubleclick.net/pagead/viewthroughconversion/776530235/ https://piwik.antee.cz/piwik/piwik.js https://sc.lfeeder.com/lftracker_v1_JMvZ8g1x9qm42pOd.js https://script.hotjar.com/modules.84fa04a166a73fe7fc83.js https://static.hotjar.com/c/hotjar-868578.js https://t.leady.com/TWSABXgb3KTu24y2/L.js https://www.google-analytics.com/analytics.js https://www.google-analytics.com/* https://www.google.com/recaptcha/api.js https://www.googletagmanager.com/gtm.js https://www.gstatic.com/recaptcha/releases/RDRwZ7RcROX_wCxEJ01WeqEX/recaptcha__cs.js http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io ; style-src 'unsafe-inline' 'report-sample' 'self' https://cdn.antee.cz https://fonts.googleapis.com; object-src 'none'; base-uri 'self'; connect-src 'self' http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com https://in.hotjar.com https://t.leady.com https://ws24.hotjar.com https://www.facebook.com https://www.google-analytics.com wss://ws24.hotjar.com; font-src 'self' data: https://cdn.antee.cz https://fonts.gstatic.com; frame-src 'self' https://www.facebook.com/ https://docs.google.com/ https://bid.g.doubleclick.net/ https://docs.google.com/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://vars.hotjar.com https://www.google.com; img-src 'self' * 'self'; media-src 'self'; worker-src 'none'; report-to default; report-uri https://antee.report-uri.com/r/d/csp/enforce 1
script-src 'self' 'unsafe-eval' 'sha256-Tzu6+wuu1SjTdVaXJEV6PivtY9mRqZb0xhhm2BLRAOA=' 'sha256-7IyttL+tUqfo+WQfAWL3v6YMknUKo9ajmbpNtuTjMN0=' 'sha256-3hfUlZv/u0yM7A3uB3JvxOvBYAe8qn24uA4O2An1VRY=' 'sha256-MV1RuepqvbyT5NhbRPeSj1juoiQBimzZ/wO2CMs3kus=' 'sha256-ABZr65Zok8xacqLFUeZR+42Msgxys7C+6WB+vtacJb8=' 'sha256-bHVKPlpu6EceFvLitpQwu5mjjCOghOO0EQqqS41Qn6Q=' 'sha256-wxehmTJycT+YLBVHLN3bWj/zTcxemiqmfRQzTQW8ir4=' 'sha256-xCJKn7hMM9SELWl17uBsfarS81wpzMEJEmq9eKBxtzs=' 'sha256-+2rXXU3laxTDtQNsImGyQ1X64rn4ISQLNShnWzx821g=' 'sha256-/J1Ywi0oxHQHCpzRvtKWWe4P+hIt7HcIaSwR9c4c5Rs=' 'sha256-39X4GDwTjoEuiHC/2kJYF7mNFjiDloAgzPDJAZFmXUA=' 'sha256-4H8OjgRPgGcbXIWnunILQFptlaDulDAprEkdWAmd5rs=' 'sha256-6ncdpKw08Cc1EFsSeeLsVjAIaYvgm1rBcI4cNp12+Qw=' 'sha256-7PIxQkJpqFtF3ibD6pIWa3xB9NioZz/ynQRYzL0/GQk=' 'sha256-7gtkfRfWNDeobU0B/hfsPp2BIWvoaQl9Qnyy5LiRnxs=' 'sha256-FCJSELYJJqB55vIG3t/ph5fM8YdnNvdK1wyBgKoLBv8=' 'sha256-FTGWq2sxofS5L8Yq87ilEpDqn9l5NkLK0cc3sd7OvnM=' 'sha256-IHOzCHp//Jl1lFsowvMxAPGD+T7zlnWM2mFk53CcUCQ=' 'sha256-Lbd7CfEvDCWYMyHY0+sXbfaSIJoSyADQN1msRc5GDNI=' 'sha256-UIJOLWy/Osv+QGQ4imdRlRujM6eUI1MSyU7o0yUPUZY=' 'sha256-ZdDTEfl8xrGn7iZ/2mMDizDIe6JRmep2vz9STHJi4Zs=' 'sha256-av+IGVQJsQwpqceEC0sQFA8e9C8QabH8uLcfyhwM7SQ=' 'sha256-eVK40NIq3UGWc8qEju5kUvLu1HgsUzj88BW49m/q4j0=' 'sha256-ggRYfkK/3LVUNlNZMQmNN9BFxap4CrJfPbtZ6v2xbjo=' 'sha256-grcTsfRWbkeUhSuDjdKCkH5D8wGl/7m/mQ40fxHu0mw=' 'sha256-jFtAwO73SFINACr8TD6icHqaE8VW008cFmXWwD0f9fM=' 'sha256-r217nY7GmxmFONoUAdkKv3HkplOIco6U4dEWu4mrSIs=' 'sha256-u24cgm8XlTjNvJyJKe51ekUDI8IYMtxoJZ/6Obf/+y0=' 'sha256-xGfPUma/ZEUO/hLpxJqIvAXja0IQ6z6bdVSim0NgRs0=' 'report-sample' https://*.doubleclick.net https://*.cdn4.forter.com https://*.google.com https://*.googleadservices.com https://*.googlesyndication.com https://*.googletagservices.com https://*.nr-data.net https://*.yahoo.com https://api.bounceexchange.com https://assets.bounceexchange.com https://at1.listrakbi.com https://bat.bing.com https://bam.nr-data.net https://cdn.attn.tv https://cdn.browsiprod.com https://connect.facebook.net https://code.jquery.com https://cdn.jsdelivr.net https://content.linkedin.com https://cdn.listrakbi.com https://connect.nosto.com https://cdn.roirevolution.com https://f.clarity.ms https://googleads.g.doubleclick.net https://graph.facebook.com https://geoipwebservice.com https://google-analytics.com https://googletagmanager.com https://guarantee-cdn.com https://js.facebook.com https://js-agent.newrelic.com https://platform.linkedin.com https://query.yahooapis.com https://r.bing.com https://r.webeyez.com https://static.cloudflareinsights.com https://ssl.google-analytics.com https://snap.licdn.com https://static-exp1.licdn.com https://services.listrak.com https://s1.listrakbi.com https://s.pinimg.com https://sec.webeyez.com https://s.yimg.com https://tag.bounceexchange.com https://tagmanager.google.com https://www.clarity.ms https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://sdk.helloextend.com/extend-sdk-client/v1/extend-sdk-client.min.js https://cdn1.affirm.com/js/v2/affirm.js https://*.clarity.ms/s/0.6.34/clarity.js;frame-ancestors 'self' *.yahoo.com s.yimg.com;frame-src https://www.affirm.com/ https://creatives.attn.tv/ https://r.webeyez.com/ https://assets.bounceexchange.com/;block-all-mixed-content;style-src 'self' 'report-sample' 'unsafe-inline' *.licdn.com *.google.com *.bing.com code.jquery.com cdn.jsdelivr.net cdn.listrakbi.com www.googletagmanager.com;object-src *.googlesyndication.com;child-src 'self' blob: *.googlesyndication.com *.google.com *.facebook.com *.doubleclick.net connect.facebook.net www.googletagmanager.com;base-uri 'self' *.yahoo.com;form-action 'self' *.google.com *.facebook.com connect.facebook.net;worker-src 'self' blob: www.google.com; report-to default 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self' https://jadlog.com.br https://www.jadlog.com.b; script-src 'self' https://static.zdassets.com https://www.googletagmanager.com https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com https://static.cloudflareinsights.com https://code.jquery.com https://cdnjs.cloudflare.com https://ajax.cloudflare.com https://pod-27-sunco-ws.zendesk.com; style-src 'self' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://code.jquery.com https://cdnjs.cloudflare.com https://static.zdassets.com https://cdn.cookielaw.org; img-src 'self' data: https://*.tile.openstreetmap.org https://ssl.google-analytics.com https://www.google-analytics.com https://www.google.com; font-src 'self' data: https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; connect-src 'self' https://cdn.cookielaw.org https://ekr.zdassets.com https://jadloglogsticahelp.zendesk.com https://pod-27-sunco-ws.zendesk.com https://www.googletagmanager.com https://www.google.com https://cloudflareinsights.com; frame-src 'self' https://www.google.com https://jadlog.force.com https://jadloglogsticahelp.zendesk.com; report-uri https://service.jadlog.com.br/csp-report-endpoint; report-to csp-endpoint 1
default-src 'self';  script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: *.hs-analytics.net *.hs-banner.com *.hs-scripts.com *.hsadspixel.net *.hscollectedforms.net *.hsforms.com *.hsforms.net *.hsleadflows.net *.hubspot.com *.hubspot.net *.hubspotfeedback.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.usemessages.com *.hotjar.com https://js.hubspot.com *.hs-sites.com https://*.clearbit.com https://*.clearbitjs.com https://*.clearbitscripts.com https://*.g.doubleclick.net https://app.revenuehero.io https://community.traefik.io https://feedback-eu1.hubapi.com https://feedback.hubapi.com https://js-eu1.hscta.net https://js.hscta.net https://px.ads.linkedin.com https://r2.leadsy.ai https://s3-us-west-2.amazonaws.com https://9xgnrndqve.execute-api.us-west-2.amazonaws.com https://snap.licdn.com https://static.ads-twitter.com https://static.hsappstatic.net https://traefik.github.io https://traefik.io https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://x.clearbitjs.com https://b-code.liadm.com https://cdn.jsdelivr.net https://connect.facebook.net https://platform.twitter.com;  style-src 'self' 'unsafe-inline' *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net https://7052064.fs1.hubspotusercontent-na1.net https://cdn2.hubspot.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://traefik.io https://www.gstatic.com https://cdn.jsdelivr.net;  object-src 'none';  base-uri 'self';  child-src 'self' https://*.hsforms.com;  connect-src 'self' *.liadm.com *.hs-sites.com *.hs-banner.com *.hscollectedforms.net *.hsforms.com *.hubapi.com *.hubspot.com https://*.google.com https://www.google.co.in https://www.google.ca https://www.google.co.jp https://www.google.co.kr https://www.google.co.uk https://www.google.co.id https://www.google.co.za https://www.google.co.tz https://www.google.co.ma https://www.google.nl https://www.google.de https://www.google.at https://www.google.es https://www.google.se https://www.google.az https://www.google.so https://www.google.lk https://www.google.com.br https://www.google.com.au https://www.google.com.sg https://www.google.com.hk https://www.google.com.co https://www.google.com.pe https://www.google.com.uy https://www.google.com.eg https://www.google.ae https://www.google.al https://www.google.ba https://www.google.be https://www.google.by https://www.google.ch https://www.google.cl https://www.google.co.cr https://www.google.co.il https://www.google.co.nz https://www.google.co.th https://www.google.co.uz https://www.google.co.ve https://www.google.com.ar https://www.google.com.bd https://www.google.com.do https://www.google.com.gh https://www.google.com.mx https://www.google.com.ng https://www.google.com.np https://www.google.com.ph https://www.google.com.pk https://www.google.com.tr https://www.google.com.tw https://www.google.com.ua https://www.google.com.vn https://www.google.cz https://www.google.dk https://www.google.fr https://www.google.gr https://www.google.hr https://www.google.hu https://www.google.ie https://www.google.iq https://www.google.it https://www.google.kz https://www.google.lt https://www.google.lv https://www.google.no https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.rs https://www.google.ru https://www.google.si https://www.google.sk https://www.google.tn https://hubspot-forms-static-embed.s3.amazonaws.com https://s3-us-west-2.amazonaws.com https://9xgnrndqve.execute-api.us-west-2.amazonaws.com https://www.googleadservices.com https://*.hotjar.com wss://*.hotjar.com https://*.analytics.google.com https://*.hotjar.io https://*.clearbit.com https://*.clearbitjs.com https://*.clearbitscripts.com https://*.g.doubleclick.net https://stats.g.doubleclick.net https://*.google-analytics.com https://*.traefik.io https://api.github.com https://app.clearbit.com https://app.revenuehero.io https://containous.ghost.io https://storage.ghost.io https://google.com https://pagead2.googlesyndication.com https://ingesteer.services-prod.nsvcs.net https://js-eu1.hscta.net https://js.hscta.net https://js.hsforms.net https://pro.ip-api.com https://px.ads.linkedin.com https://www.google.com https://www.googletagmanager.com https://static.scarf.sh https://static.hsappstatic.net https://*.ingest.de.sentry.io https://alocdn.com;  font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com https://use.typekit.net https://cdn.jsdelivr.net;  frame-src 'self' *.hs-sites-eu1.com *.hs-sites.com *.hsforms.com *.hsforms.net *.hubspot.com *.hubspot.net https://*.g.doubleclick.net https://app.netlify.com https://community.traefik.io https://play-eu1.hubspotvideo.com https://play.hubspotvideo.com https://px.ads.linkedin.com https://traefik.io https://www.google.com https://www.googletagmanager.com https://www.youtube.com;  img-src 'self' blob: data: https:;  form-action 'self' https://*.hsforms.com;  manifest-src 'self' https://traefik.io;  media-src 'self' data: https://ssl.gstatic.com;  worker-src 'self'; report-uri https://o4511099878637568.ingest.de.sentry.io/api/4511134031937616/security/?sentry_key=64999a84abc3469206792e982d195c43; report-to csp-endpoint 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.quechoisir.org *.qccdn.fr *.cloudflare.com *.cloudflareinsights.com  *.tagcommander.com *.commander1.com *.trustcommander.net *.aticdn.net *.xiti.com *.bing.com *.google.com *.youtube.com *.youtu.be www.youtube-nocookie.com *.facebook.com *.kameleoon.io *.kameleoon.eu *.xiti.com *.aticdn.net *.facebook.net flo.uri.sh public.flourish.studio wss://dl1.quechoisir.org  wss://dl2.quechoisir.org wss://dl.quechoisir.org upgrade-insecure-requests; report-uri https://www.quechoisir.org/csp-violation-report-endpoint/; report-to csp-endpoint> 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.wb.ru *.rwb.ru *.wildberries.ru *.wb-basket.ru *.wbbasket.ru *.wbcontent.net 1337.wb.ru  *.geobasket.net *.geobasket.ru; report-uri https://nel.wb.ru/cspl; 1
script-src 'self'; report-uri /record-browser-reports; report-to default 1
report-uri /api/report-violation/; form-action 'self' https://*.formlabs.com https://*.marketo.com https://www.facebook.com/tr/; base-uri 'self'; object-src https://formlabs.com https://*.formlabs.com http://localhost:3001; frame-ancestors https://partneruniversity-formlabs.talentlms.com https://university-formlabs.talentlms.com https://internal-formlabs.talentlms.com https://formlabs.com https://*.formlabs.com https://dental.formlabs.com https://careers.formlabs.com http://localhost:3000; upgrade-insecure-requests; 1
base-uri 'none'; object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-PITX7htSADC00IuV2VtG+w==' 1
worker-src blob:; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com cdnjs.cloudflare.com *.cloudflare.com *.yotpo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://plumrocket.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://www.googletagmanager.com *.googletagmanager.com *.hcaptcha.com www.xtento.com *.yotpo.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net *.sharethis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com https://*.gstatic.com https://*.google.com https://*.googleapis.com https://*.googleusercontent.com https://firebasestorage.googleapis.com maps.gstatic.com https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com *.pixriot.com *.storeimaging.com cdnjs.cloudflare.com *.cloudflare.com viewsonic.com www.viewsonic.com *.viewsonic.com t.co analytics.twitter.com di.rlcdn.com www.facebook.com *.6sc.co px.ads.linkedin.com px.owneriq.net px.spiceworks.com *.google.com *.googletagmanager.com pay.google.com *.criteo.com *.signifyd.com *.doubleclick.net *.adnxs.com *.pubmatic.com *.casalemedia.com *.360yield.com *.outbrain.com *.rubiconproject.com *.taboola.com *.bing.com *.mediavine.com *.teads.tv *.3lift.com *.1rx.io *.media.net *.crwdcntrl.net *.agkn.com *.tapad.com *.smartadserver.com *.bidswitch.net *.mediawallahscript.com *.liadm.com *.postrelease.com *.revcontent.com *.tremorhub.com *.clmbtech.com *.tpmn.co.kr he.lijit.com *.clarity.ms ad.tpmn.io *.dmxleo.com thrtle.com yotpoapi.com *.yotpoapi.com viewsonicvsa.freshchat.com www.xtento.com cdn.xtento.com *.yotpo.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sharethis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com https://*.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://*.google.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.avada.io *.shopify.com maps.googleapis.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://www.googletagmanager.com https://*.googletagmanager.com googleads.g.doubleclick.net analytics.google.co *.yotpo.com yotpoapi.com *.yotpoapi.com *.smsbump.com *.execute-api.us-east-1.amazonaws.com *.cloudfront.net cdn.jsdelivr.net www.mczbf.com *.ads-twitter.com c.amazon-adsystem.com *.6sc.co *.licdn.com connect.facebook.net resources.xg4ken.com pi.pardot.com px.owneriq.net px.spiceworks.com *.viewsonic.com *.hcaptcha.com *.signifyd.com *.criteo.com cdn.id5-sync.com bat.bing.com darkvisitors.com js.zi-scripts.com knownagents.com *.clarity.ms public-prod-dspcookiematching.dmxleo.com datadoghq-browser-agent.com *.datadoghq-browser-agent.com viewsonicvsa.freshchat.com ws-assets.zoominfo.com blob: www.xtento.com cdn.xtento.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com assets.braintreegateway.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com cdnjs.cloudflare.com hcaptcha.com *.hcaptcha.com *.yotpo.com *.googleapis.com *.cloudfront.net cdn.jsdelivr.net *.viewsonic.com viewsonicvsa.freshchat.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://get.geojs.io *.avada.io maps.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://region1.google-analytics.com *.pixriot.com *.storeimaging.com www.mczbf.com *.amazon-adsystem.com px.ads.linkedin.com ipv6.6sc.co ara.paa-reporting-advertising.amazon epsilon.6sense.com *.hcaptcha.com cdn.jsdelivr.net *.signifyd.com pay.google.com *.criteo.com resources.xg4ken.com js.zi-scripts.com id5-sync.com lbs.eu-1-id5-sync.com lb.eu-1-id5-sync.com *.clarity.ms *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.g.googleadservices.com *.g.doubleclick.net browser-intake-us3-datadoghq.com *.browser-intake-us3-datadoghq.com viewsonicvsa.freshchat.com ws.zoominfo.com ws-assets.zoominfo.com www.facebook.com analytics.twitter.com t.co *.viewsonic.com *.yotpo.com https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://va.vercel-scripts.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://*.googlesyndication.com https://*.google.com https://*.googleadservices.com https://*.doubleclick.net https://scripts.cleverwebserver.com https://*.cleverwebserver.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net; connect-src 'self' https://cdn.jsdelivr.net https://va.vercel-scripts.com https://*.vercel-insights.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://*.google.com https://*.doubleclick.net https://*.cleverwebserver.com; frame-src 'self' https://widget.livepix.gg https://*.livepix.gg https://*.googlesyndication.com https://*.google.com https://*.doubleclick.net https://*.cleverwebserver.com https://clvrads.com https://*.clvrads.com https://ep2.adtrafficquality.google; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://*.livepix.gg 1
frame-src 'self' accounts.firefox.com https://gtm.firefox.com www.google-analytics.com www.googletagmanager.com www.youtube-nocookie.com www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.google-analytics.com *.googletagmanager.com cdn.transcend.io google-analytics.com googletagmanager.com https://gtm.firefox.com pa.firefox.com s.ytimg.com tagmanager.google.com transcend-cdn.com www.firefox.com www.youtube.com; media-src 'self' assets.mozilla.net videos.cdn.mozilla.net www.firefox.com www.mozilla.org; font-src 'self' www.firefox.com; frame-ancestors 'none'; upgrade-insecure-requests; object-src 'none'; style-src 'self' 'unsafe-inline' cdn.transcend.io transcend-cdn.com www.firefox.com; connect-src 'self' *.analytics.google.com *.google-analytics.com *.googletagmanager.com analytics.google.com basket.mozilla.org cdn.transcend.io google-analytics.com googletagmanager.com gtm.firefox.com https://accounts.firefox.com/ https://basket.mozilla.org https://gtm.firefox.com o1069899.ingest.sentry.io o1069899.ingest.us.sentry.io o1069899.sentry.io pa.firefox.com telemetry.transcend.io telemetry.us.transcend.io transcend-cdn.com www.firefox.com; base-uri 'none'; default-src 'self' www.firefox.com; form-action 'self' https://accounts.firefox.com/ https://basket.mozilla.org; img-src 'self' *.google-analytics.com *.googletagmanager.com data: google-analytics.com googletagmanager.com https://gtm.firefox.com www.firefox.com www.mozilla.org 1
default-src 'self' https://tforms.fcc-online.pl https://*.google.com https://*.google.pl https://*.google-analytics.com https://*.googletagmanager.com https://*.doubleclick.net https://*.googleadservices.com https://*.hotjar.com https://*.hotjar.io https://*.salesmanago.pl https://*.salesmanago.com https://*.albacross.com https://*.facebook.com https://analytics.greensender.pl https://*.cookiebot.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://stackpath.bootstrapcdn.com https://maps.googleapis.com https://www.googletagmanager.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://serve.albacross.com https://*.salesmanago.pl https://*.salesmanago.com https://www.clarity.ms https://*.google.com https://*.google-analytics.com https://tforms.fcc-online.pl https://static.hotjar.com https://script.hotjar.com https://connect.facebook.net https://analytics.greensender.pl https://*.doubleclick.net blob:; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://stackpath.bootstrapcdn.com https://fonts.googleapis.com https://tforms.fcc-online.pl; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com https://stackpath.bootstrapcdn.com https://tforms.fcc-online.pl; img-src 'self' data: https://*.googleapis.com https://maps.gstatic.com https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.google.pl https://*.doubleclick.net https://imgsct.cookiebot.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://*.salesmanago.pl https://*.salesmanago.com https://secure.gravatar.com https://s.w.org https://*.albacross.com https://*.facebook.com https://analytics.greensender.pl https://*.googleadservices.com; connect-src 'self' https://*.google-analytics.com https://*.google.com https://*.google.pl https://*.doubleclick.net https://consent.cookiebot.com https://consentcdn.cookiebot.com https://*.salesmanago.pl https://*.salesmanago.com https://*.clarity.ms https://*.albacross.com https://maps.googleapis.com https://cdnjs.cloudflare.com https://stackpath.bootstrapcdn.com https://www.googletagmanager.com https://tforms.fcc-online.pl https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.googleadservices.com https://analytics.greensender.pl; frame-src 'self' https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.googletagmanager.com https://www.youtube.com https://*.google.com https://www.facebook.com https://*.facebook.com https://tforms.fcc-online.pl; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://platform.twitter.com https://cdn.cookielaw.org https://www.googletagmanager.com https://s3.amazonaws.com/assets.freshdesk.com/ https://cdn.jsdelivr.net https://munchkin.marketo.net https://*.mktoweb.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://*.mktoweb.com https://fonts.googleapis.com https://www.googletagmanager.com/; img-src 'self' data: blob: https://images.contentstack.io https://syndication.twitter.com https://cdn.cookielaw.org https://*.g.doubleclick.net https://www.googletagmanager.com https://fonts.gstatic.com https://*.google-analytics.com https://www.googleadservices.com https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://insights.algolia.io https://*.algolia.net https://*.algolianet.com https://cdn.cookielaw.org https://*.onetrust.com/ https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net https://www.googletagmanager.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://ad.doubleclick.net https://*.mktoresp.com https://*.mktoweb.com https://*.mktoutil.com https://pages.iapp.org https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat; frame-src 'self' https://platform.twitter.com https://www.linkedin.com https://privacypros.freshdesk.com https://*.mktoweb.com https://www.google.com https://html5-player.libsyn.com https://www.youtube.com https://e.infogram.com; media-src 'self' https://assets.contentstack.io; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /api/csp-report; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://connect.facebook.net https://www.googletagmanager.com https://snap.licdn.com https://challenges.cloudflare.com https://www.gstatic.com https://import-cdn.default.com https://www.dubcdn.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://m.stripe.network https://challenges.cloudflare.com https://www.youtube.com https://app.dub.co https://connect.facebook.net https://*.default.com; worker-src 'self' blob: https://cdn.jsdelivr.net; media-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests 1
default-src 'self'; connect-src *; img-src * data:; script-src 'self' cdn.bizible.com kit.fontawesome.com; style-src 'self' 'unsafe-inline' https://404-tpa-276.mktoweb.com/ https://*.qualified.com; font-src 'self' kit.fontawesome.com ka-p.fontawesome.com https://fast.wistia.net/ data:; form-action 'self'; object-src 'none'; media-src 'self' blob: mediastream: https://*.qualified.com; frame-src https://www.googletagmanager.com https://td.doubleclick.net/ https://gtm.mycase.com/ https://insight.adsrvr.org/ https://match.adsrvr.org/ https://404-tpa-276.mktoweb.com/ https://*.qualified.com; child-src https://*.qualified.com; frame-ancestors demo.affinipay.com; upgrade-insecure-requests; block-all-mixed-content 1
font-src *.force.com https://content.instrumentation.getconga.com https://optimize.google.com 'self' https://stats.g.doubleclick.net https://opengraph.io https://*.googleapis.com https://xcelnew--xeteam3.sandbox.my.site.com https://www.gstatic.com http://api.ipstack.com https://www.google.ca https://xcelnew.my.site.com https://composer.congamerge.com https://idsync.rlcdn.com https://assets.adobedtm.com https://www.google.com *.medallia.com https://www.googleoptimize.com https://analytics.google.com https://fonts.gstatic.com/ https://events.api.boomtrain.com http://adobedtm.com blob: https://accounts.google.com https://20844768p.rfihub.com https://insight.adsrvr.org https://region1.analytics.google.com https://20844767p.rfihub.com https://20844766p.rfihub.com *.kargo.com https://20844765p.rfihub.com https://data.instrumentation.getconga.com https://ssl.gstatic.com http://doubleclick.net https://xcelnew--c.vf.force.com https://xcelnew.my.salesforce-scrt.com https://pdx-col.eum-appdynamics.com https://people.api.boomtrain.com https://*.gstatic.com https://fonts.gstatic.com https://cdn.appdynamics.com *.kampyle.com https://twin-iq.kickfire.com http://kickfire.com https://fonts.googleapis.com https://ad.doubleclick.net https://beacon.lynx.cognitivlabs.com https://tagmanager.google.com https://tags.tiqcdn.com https://a.rfihub.com https://td.doubleclick.net https://www.google.co.in https://xcelnew--xeteam7.sandbox.my.salesforce.com https://www.google.com.ph https://www.googletagmanager.com storage.cloud.kargo.com https://www.google-analytics.com *.salesforce.com data: https://*.my.site.com; report-to sfdc-csp-ep; report-uri https://xcelnew.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D1U0000011ttV&networkId=0DM2R000000CbkT&type=communities 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.googletagmanager.com https://js-eu1.hsforms.net https://js-eu1.hs-scripts.com https://sc.lfeeder.com https://video.helloretail.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; frame-src https://capture.navattic.com https://www.youtube-nocookie.com https://video.helloretail.com https://consent.cookiebot.com https://consentcdn.cookiebot.com; connect-src 'self' https://api.hsforms.com https://forms-eu1.hsforms.com https://www.google-analytics.com https://region1.google-analytics.com https://pagead2.googlesyndication.com https://www.googletagmanager.com https://consent.cookiebot.com https://consentcdn.cookiebot.com; object-src 'none'; base-uri 'self' 1
upgrade-insecure-requests; default-src 'self'; connect-src 'self' https://webanalytics.tubitak.gov.tr; style-src-attr 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://unpkg.com/ https://webanalytics.tubitak.gov.tr; object-src 'none'; img-src 'self' data:; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.cdnfonts.com/; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com https://fonts.cdnfonts.com; frame-ancestors 'self'; report-uri https://csp.tubitak.gov.tr/; 1
object-src 'none';base-uri 'self';script-src 'nonce-Kdg9jgWk8gx4wjfB18ocTQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://jobs.ashbyhq.com https://va.vercel-scripts.com https://www.googletagmanager.com https://*.hs-scripts.com https://*.hsforms.net https://*.hsforms.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hscollectedforms.net https://*.usemessages.com https://us-assets.i.posthog.com https://calendar.chilipiper.com https://calendar.cpcdp.com https://static.claydar.com https://*.amplitude.com https://fast.wistia.com https://fast.wistia.net https://prod-assets.sequelvideo.com https://www.youtube.com https://www.google-analytics.com https://community-layer-slack.netlify.app; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fast.wistia.com https://fast.wistia.net; font-src 'self' data: https://fonts.gstatic.com https://fast.wistia.com https://fast.wistia.net; img-src 'self' data: blob: https:; media-src 'self' blob: https:; connect-src 'self' https:; frame-src 'self' https://jobs.ashbyhq.com https://calendar.chilipiper.com https://*.chilipiper.com https://*.hsforms.com https://www.youtube.com https://www.youtube-nocookie.com https://fast.wistia.net https://fast.wistia.com https://embed.sequel.io https://*.navattic.com https://*.storylane.io https://www.googletagmanager.com https://fast.chameleon.io https://*.public.blob.vercel-storage.com https://drive.google.com https://*.flowdrivecdn.com; object-src 'none'; base-uri 'self'; form-action 'self' https://*.hsforms.com https://forms.hsforms.com; frame-ancestors 'self'; report-uri /api/csp-report 1
default-src https: 'unsafe-inline' 'unsafe-eval'; img-src https: 'unsafe-inline' 'unsafe-eval' data: ; report-uri https://booklog.report-uri.io/r/default/csp/reportOnly 1
frame-ancestors 'self'; report-uri https://www.adelaidenow.com.au/csp-reports 1
default-src 'self' https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src * data: blob:; font-src 'self' https: data:; frame-src 'self' https:; object-src 'none'; base-uri 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-thmGtBPtaF7zTwhwHPjaXw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-gil6EkxIKyUOTlS-W1BXFg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'nonce-oKXbORRrvvO1YOqQn0Gg+A==' 'strict-dynamic' https: 'unsafe-inline'; style-src 'self' 'unsafe-inline' blob: https://app.getbeamer.com https://assets.openlearning.com https://*.ssl.cf4.rackcdn.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com; object-src 'none'; base-uri 'self'; connect-src 'self' https://*.openlearning.com https://oluploadslive.blob.core.windows.net https://front-us-rest.ably.io https://api.amplitude.com https://api.hubapi.com https://api.hubspot.com https://api.ipify.org https://backend.getbeamer.com https://chat.frontapp.com https://www.facebook.com https://find.userpilot.io https://forms.hubspot.com https://iframe.ly https://in.hotjar.com https://learningtime.servicebus.windows.net https://pythonutilityfunctions.azurewebsites.net https://python-util-funcs-c2dzg6bdbrdbd0g6.australiaeast-01.azurewebsites.net https://sentry.io https://stats.g.doubleclick.net https://us-west-1-chat-server.frontapp.com https://vc.hotjar.io https://www.google-analytics.com https://pagead2.googlesyndication.com https://static.userguiding.com https://metrics.userguiding.com wss://analytex.userpilot.io wss://front-us-realtime.ably.io wss://*.openlearning.com; font-src 'self' data: https://*.ssl.cf4.rackcdn.com https://assets.openlearning.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; frame-src 'self' https:; img-src 'self' data: blob: https:; manifest-src 'self' https://*.ssl.cf4.rackcdn.com; media-src 'self' https://dev-uploads.openlearning.com https://uploads.openlearning.com https://qencode.blob.core.windows.net; worker-src 'none'; child-src blob:; 1
default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http://*.files.wordpress.com wss://stylecaster.com; report-uri https://pmcuri.report-uri.com/r/d/csp/reportOnly 1
default-src 'self'; script-src 'self' 'unsafe-eval' https: http: 'nonce-MWMxZmI1NmUtMzVlOS00MmQzLWI5MGEtZWI0ZWQ5Njg1ODdj' 'strict-dynamic'; script-src-elem 'self' 'unsafe-inline' https://yamap.com https://www.googletagmanager.com https://js.stripe.com https://apis.google.com connect.facebook.net d.line-cdn.net d.line-scdn.net https://www.clarity.ms https://scripts.clarity.ms; style-src 'self' 'unsafe-inline' https://use.fontawesome.com https://accounts.google.com/gsi/style https://www.gstatic.com; font-src 'self' data: https://use.fontawesome.com https://fonts.gstatic.com; img-src 'self' https: blob: data:; object-src 'none'; form-action 'self'; connect-src 'self' https://*; worker-src 'self' blob:; child-src 'self' blob:; report-uri https://twsl4dsz5v3oknxl3hwsjkphty0gioei.lambda-url.ap-northeast-1.on.aws/; frame-src 'self' https://docs.google.com https://accounts.google.com https://labo.yamap.com https://js.stripe.com https://www.youtube-nocookie.com https://www.youtube.com blob:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.paypalobjects.com https://cdnjs.cloudflare.com https://code.jquery.com https://cdn.jsdelivr.net https://cdn.sheetjs.com https://cse.google.com https://www.google.com https://pagead2.googlesyndication.com https://*.adtrafficquality.google; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.materialdesignicons.com; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn.materialdesignicons.com; img-src 'self' data: https:; frame-src 'self' https://www.youtube.com https://www.googletagmanager.com https://*.paypal.com https://nccnet-ec.nccc.com.tw https://nccnet-ectest.nccc.com.tw https://cse.google.com https://*.adtrafficquality.google https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://www.google.com; connect-src 'self' https://www.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://*.adtrafficquality.google https://pagead2.googlesyndication.com; form-action 'self' https://nccnet-ec.nccc.com.tw https://nccnet-ectest.nccc.com.tw https://*.paypal.com; object-src 'none'; base-uri 'self' 1
report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub515a0c272a23bbad11e786f6502cfe21&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env%3Aproduction 1
default-src 'self' media1.jpc.de www.jpc.de; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; script-src 'self' media1.jpc.de www.jpc.de 'nonce-1A6BNlQCHJqPohgQ1NwzAIRX7NOrW09FfKoSzDPCZc3DaNHzs6Ou3irryzHdfD7Q1n0DIl5AbeRn5M1nZJc67A==' 'report-sample'; style-src 'self' media1.jpc.de www.jpc.de 'report-sample' 'unsafe-inline'; font-src 'self' media1.jpc.de www.jpc.de; img-src 'self' media1.jpc.de www.jpc.de data:; connect-src 'self' media1.jpc.de www.jpc.de https://use.jpc.de; report-uri /csp/; report-to csp-endpoint 1
script-src 'report-sample' 'nonce-RFWPQQG6XkWZpKRRE4EBbQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';worker-src 'self';report-uri /us/_/BgcMiscSites/cspreport 1
object-src 'none';base-uri 'self';script-src 'nonce-DH-w-ZgpnT0HIUT96cUYbg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
frame-src 'self' https://widget.mercuryo.io https://*.alchemypay.org https://*.asterium.uz https://cash.app https://*.cash.app https://*.sumsub.com https://gwa.pgalta.com https://*.meshconnect.com; report-uri https://sentry.walletbot.me/api/38/security/?sentry_key=544a92e441a24f17aa6b08e34e728ed2&sentry_environment=production; report-to csp-endpoint; 1
default-src 'self' *.booztlet.com; script-src 'self' data: blob: bat.bing.com t.contentsquare.net geolocation.onetrust.com *.datadoghq.eu *.g.doubleclick.net cdn.taggstar.com cdn.cookielaw.org www.googletagmanager.com chat.kindlycdn.com *.sleeknote.com www.google.com *.hotjar.com www.snapengage.com 7276579.collect.igodigital.com *.trustpilot.com static.cloudflareinsights.com *.liveshopper.net sleeknotestaticcontent.sleeknote.com cdn.avo.app *.criteo.com track.adform.net *.klarnacdn.net *.criteo.net connect.facebook.net maps.googleapis.com *.hotjar.io cdn.noibu.com www.googleoptimize.com *.datadog.eu *.booztcdn.com *.kronor.io www.datadoghq-browser-agent.com *.google-analytics.com www.googleadservices.com s2.adform.net dev.visualwebsiteoptimizer.com svht.tradedoubler.com sdk.privacy-center.org analytics.tiktok.com sleeknotecustomerscripts.sleeknote.com 'unsafe-eval' 'unsafe-inline'; font-src 'self' *.booztcdn.com fonts.gstatic.com *.booztlet.com *.booztx.com chat.kindlycdn.com fonts.googleapis.com data: ; img-src optimize.google.com https: data: blob: 'unsafe-inline'; connect-src 'self' data: *.visualwebsiteoptimizer.com *.datadoghq.eu *.kronor.io wss://*.kronor.io *.google-analytics.com www.googleadservices.com www.googleoptimize.com api.mkmediaworks.com www.googletagmanager.com api.taggstar.com bat.bing.com *.contentsquare.net kronor.io api.liveshopper.net analytics.tiktok.com cdn.avo.app wss://kronor.io input.noibu.com *.hotjar.com www.google.com www.googleadservices.com stats.g.doubleclick.net www.facebook.com geolocation.onetrust.com *.datadog.eu cdn.cookielaw.org *.hotjar.io *.hotjar.com browser-intake-datadoghq.eu wss://input.noibu.com pagead2.googlesyndication.com *.booztlet.com *.sleeknote.com *.klarnacdn.net *.trustpilot.com *.g.doubleclick.net www.snapengage.com ws.hotjar.com chat.kindlycdn.com *.booztcdn.com www.datadoghq-browser-agent.com *.booztlet.com *.browser-intake-datadoghq.eu dev.visualwebsiteoptimizer.com; child-src 'self' www.googletagmanager.com *.freshchat.com fpt.booztlet.com *.google-analytics.com *.criteo.net www.booztlet.com www.facebook.com *.trustpilot.com blob: ; frame-src 'self' *.kronor.io *.criteo.com *.criteo.com *.sleeknote.com www.googletagmanager.com www.facebook.com *.trustpilot.com *.klarnacdn.net *.hotjar.com connect.facebook.net; style-src 'self' *.sleeknote.com *.booztlet.com cdn.taggstar.com *.booztcdn.com *.kronor.io chat.kindlycdn.com data: blob: 'unsafe-inline'; manifest-src 'self' *.booztlet.com; media-src 'self' data: *.booztcdn.com *.booztlet.com storage.googleapis.com; frame-ancestors 'self' ; report-uri /csp-report/; report-to csp-reports 1
base-uri 'self'; default-src 'self'; img-src 'self' data: img.part-kom.ru yastatic.net *.yandex.ru *.yandex.com *.yandex.net storage.chat2desk.com ; font-src 'self' data: static.part-kom.ru yastatic.net livechatv2.chat2desk.com ; style-src 'self' 'unsafe-inline' static.part-kom.ru yastatic.net *.yandex.ru *.yandex.com *.yandex.net ; script-src 'self' 'unsafe-inline' 'unsafe-eval' static.part-kom.ru yastatic.net yandex.ru yandex.com *.yandex.ru *.yandex.com livechatv2.chat2desk.com *.roistat.com ; connect-src 'self' mc.part-kom.ru *.yandex.ru *.yandex.com *.yandex.net wss://*.yandex.ru wss://*.yandex.com wss://*.yandex.net livechatv2.chat2desk.com wss://livechatv2.chat2desk.com ; media-src 'self' livechatv2.chat2desk.com ; frame-src 'self' b2b.part-kom.ru *.yandex.ru ; worker-src data: yastatic.net api-maps.yandex.ru *.api-maps.yandex.ru ; report-uri https://part-kom.ru/-/reporting-api/; report-to default; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.drmartens.com *.adyen.com *.google.com *.onetrust.com *.monetate.net js-agent.newrelic.com *.cloudflare.com static.cloudflareinsights.com *.paypal.com *.klaviyo.com js.afterpay.com cdn.attraqt.io *.forter.com dlthst9q2beh8.cloudfront.net d2nww8zpyj5pk0.cloudfront.net d2w2nqfk3z9hdt.cloudfront.net *.global-e.com www.googletagmanager.com www.google-analytics.com x.klarnacdn.net js.klarna.com assets.ntcacdn.net cdn-widgetsrepository.yotpo.com staticw2.yotpo.com www.recaptcha.net maps.googleapis.com www.googleadservices.com googleads.g.doubleclick.net pagead2.googlesyndication.com ad.doubleclick.net www.gstatic.com connect.facebook.net connect.facebook.net static.srcspot.com analytics.tiktok.com cdn.userway.org bat.bing.com *.attn.tv c.amazon-adsystem.com photorankstatics-a.akamaihd.net widgets.olapic-cdn.com s.pinimg.com ct.pinterest.com *.contentsquare.net tr.snapchat.com sc-static.net *.upsellit.com tag.rmp.rakuten.com www.redditstatic.com api.myunidays.com cdn.unidays.world rum-static.pingdom.net *.storystream.ai ucarecdn.com; worker-src 'self'; report-uri /cdn-cgi/script_monitor/report?m=JsHwDyCS_g_Htwq13adlr6T1HPUZJ.WCUiuScusneJQ-1789267943.3434372-1.0.1.1-X3zNBCzFS4YVl5gCLcRSE9IkG07.Esgq8IKzBM9pOaRwbUmTffJL0Sdvcxrzgo2N9QCgjH6Fhjx.JgL9ZfX9JUh_5acNsod7BPmY1Zp35QlI3hIG1u01oo4RT5EZfgYRaHPf2M_C0Rj2tLwQ2B2znT9XZMFxf6uCCY2zDjtNJoDpr80wIsYKtzUMQfBhURi8kmxiXkHkduPUGhbQHSNNjQ; report-to cf-jaqevqeiajbyrkct 1
script-src 'nonce-MrTJ+xfuxr6HqdTdSX17VA==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https://events.mercadolibre.com/csp/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=0d9335e2-1679-4882-8cbd-40b46c855a73; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https://http2.mlstatic.com/ https://mlstaticquic-a.akamaihd.net/; frame-ancestors 'self' https://*.mercadolibre.cl:* https://*.mercadolibre.com:* https://*.mercadolibre.com.ve:* https://*.mercadolibre.com.ar:* https://*.mercadolivre.com.br:* https://*.mercadolibre.com.co:* https://*.mercadolibre.com.ec:* https://*.mercadolibre.com.mx:* https://*.mercadolibre.com.pe:* https://*.mercadolibre.com.uy:* https://*.mercadopago.cl:* https://*.mercadopago.com.ar:* https://*.mercadopago.com.br:* https://*.mercadopago.com.co:* https://*.mercadopago.com.mx:* https://*.mercadopago.com.pe:* https://*.mercadopago.com.uy:* https://*.mercadopago.com.ve:* https://*.mercadopago.com:* https://*.adminml.com:* https://*.mercadolibre.co.cr:* https://*.mercadolibre.com.pa:* https://*.mercadolibre.com.do:* https://*.mercadolibre.com.bo:* https://*.mercadolibre.com.py:* https://*.mercadolibre.com.gt:* https://*.mercadolibre.com.hn:* https://*.mercadolibre.com.ni:* https://*.mercadolibre.com.sv:* https://*.mercadopago.com.ec:* https://*.portalinmobiliario.com:* https://*.mercadolivre.com:* 1
default-src 'self'; frame-src 'self' https://replicate-search.replicate-search.workers.dev https://www.googletagmanager.com; worker-src https://static.replicateassets.com; connect-src 'self' https://api.replicate.com https://stream.replicate.com https://replicate.delivery https://*.replicate.delivery https://api.us.svix.com https://*.sentry.io https://*.usepylon.com https://*.posthog.com https://pylon-avatars.s3.us-west-1.amazonaws.com https://cloud.workers-logging.cfdata.org https://d3vl36l12sfx26.cloudfront.net https://og.replicateassets.com https://static.replicateassets.com https://*.pusher.com https://www.googletagmanager.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://www.replicatestatus.com https://replicate-search.replicate-search.workers.dev; font-src 'self' data: https://*.usepylon.com https://*.posthog.com https://pylon-avatars.s3.us-west-1.amazonaws.com https://d31rfu1d3w8e4q.cloudfront.net https://d3vl36l12sfx26.cloudfront.net https://fonts.replicateassets.com https://*.pusher.com https://fonts.gstatic.com https://replicate-search.replicate-search.workers.dev; img-src 'self' blob: data: https://replicate.delivery https://*.replicate.delivery https://og.replicateassets.com https://static.replicateassets.com https://d31rfu1d3w8e4q.cloudfront.net https://d3vl36l12sfx26.cloudfront.net https://*.githubusercontent.com https://github.com https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://*.google-analytics.com https://*.googletagmanager.com https://replicate-search.replicate-search.workers.dev https://replicateassets.com/cdn-cgi/image/; media-src 'self' https://replicate.delivery https://*.replicate.delivery https://static.replicateassets.com https://d31rfu1d3w8e4q.cloudfront.net https://d3vl36l12sfx26.cloudfront.net https://*.sentry.io https://replicate-search.replicate-search.workers.dev https://replicateassets.com/cdn-cgi/media/ https://cloud.workers-logging.cfdata.org; script-src 'report-sample' 'self' 'nonce-NWU2YjViNjUtZTFkYi00OTA2LWIzZTYtOTk4NDdiMGI3NTkw' https://*.usepylon.com https://*.posthog.com https://pylon-avatars.s3.us-west-1.amazonaws.com https://d31rfu1d3w8e4q.cloudfront.net https://d3vl36l12sfx26.cloudfront.net https://static.replicateassets.com https://*.pusher.com https://www.googletagmanager.com https://tagmanager.google.com https://*.googletagmanager.com https://replicate-search.replicate-search.workers.dev https://challenges.cloudflare.com; style-src 'self' https://*.usepylon.com https://*.posthog.com https://pylon-avatars.s3.us-west-1.amazonaws.com https://d31rfu1d3w8e4q.cloudfront.net https://d3vl36l12sfx26.cloudfront.net https://static.replicateassets.com https://*.pusher.com https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com https://replicate-search.replicate-search.workers.dev; frame-ancestors 'self'; report-to csp-endpoint; 1
img-src 'self' data: blob: *.commercecloud.salesforce.com *.dev.art.com *.dev.allposters.com *.stage.art.com *.stage.allposters.com imgc.artprintimages.com imgc.allpostersimages.com *.artprintimages.com *.allpostersimages.com *.allposters.com *.art.com cache1.artprintimages.com nova.collect.igodigital.com cdn-assets.affirm.com www.google.com www.google-analytics.com *.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net www.facebook.com ct.pinterest.com bat.bing.com track.linksynergy.com tags.rd.linksynergy.com click.s13.exacttarget.com events.attentivemobile.com;script-src 'self' 'nonce-iKVkLVZrOP8Nx0bIIYx0Ag==' storage.googleapis.com *.collect.igodigital.com widget.trustpilot.com cdn-4.convertexperiments.com cdn-3.convertexperiments.com www.googletagmanager.com *.googletagmanager.com www.google-analytics.com *.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net connect.facebook.net s.pinimg.com bat.bing.com tag.rmp.rakuten.com tags.rd.linksynergy.com services.xg4ken.com www.datadoghq-browser-agent.com www.clarity.ms rum-static.pingdom.net *.chat.digital.ringcentral.com consent.trustarc.com cdnjs.cloudflare.com www.paypal.com *.paypal.com *.paypalobjects.com static.cloudflareinsights.com cdn1.affirm.com cdn.id5-sync.com dynamic.criteo.com sslwidget.criteo.com cdn.attn.tv cdn.userway.org;script-src-elem 'self' 'nonce-iKVkLVZrOP8Nx0bIIYx0Ag==' storage.googleapis.com *.collect.igodigital.com widget.trustpilot.com cdn-4.convertexperiments.com cdn-3.convertexperiments.com www.googletagmanager.com *.googletagmanager.com www.google-analytics.com *.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net connect.facebook.net s.pinimg.com bat.bing.com tag.rmp.rakuten.com tags.rd.linksynergy.com services.xg4ken.com www.datadoghq-browser-agent.com www.clarity.ms rum-static.pingdom.net *.chat.digital.ringcentral.com consent.trustarc.com cdnjs.cloudflare.com www.paypal.com *.paypal.com *.paypalobjects.com static.cloudflareinsights.com cdn1.affirm.com cdn.id5-sync.com dynamic.criteo.com sslwidget.criteo.com cdn.attn.tv cdn.userway.org;connect-src 'self' api.cquotient.com *.salesforce.com *.dev.art.com *.dev.allposters.com dev-bizapi.art.com dev-bizapi.allposters.com bizapi.art.com bizapi.allposters.com stg-bizapi.art.com stg-bizapi.allposters.com rel1-bizapi.art.com rel1-bizapi.allposters.com localhost:* *.affirm.com *.doubleclick.net *.googletagmanager.com *.google-analytics.com *.analytics-google.com analytics.google.com www.googleadservices.com www.facebook.com bat.bing.com track.linksynergy.com tags.rd.linksynergy.com services.xg4ken.com datadoghq.com www.clarity.ms id5-sync.com *.id5-sync.com eu-1-id5-sync.com *.eu-1-id5-sync.com events.attentivemobile.com *.attn.tv *.chat.digital.ringcentral.com consent.trustarc.com cdn-4.convertexperiments.com cdn-3.convertexperiments.com 10017911.metrics.convertexperiments.com logs.convertexperiments.com www.paypal.com *.paypal.com *.paypalobjects.com widget.trustpilot.com www.google.com rum-collector-2.pingdom.net ct.pinterest.com s.pinimg.com;frame-src 'self' *.affirm.com *.googletagmanager.com www.google.com googleads.g.doubleclick.net survey.alchemer.com www.surveygizmo.com *.chat.digital.ringcentral.com consent.trustarc.com *.attn.tv www.paypal.com *.paypal.com *.paypalobjects.com widget.trustpilot.com gum.criteo.com;default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data: gravatar.com; object-src 'none'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' http://s3.amazonaws.com; style-src 'self' https: 'unsafe-inline' cdnjs.cloudflare.com; report-uri /csp_violation_report 1
img-src 'self' data: blob: *.commercecloud.salesforce.com *.dev.art.com *.dev.allposters.com *.stage.art.com *.stage.allposters.com imgc.artprintimages.com imgc.allpostersimages.com *.artprintimages.com *.allpostersimages.com *.allposters.com *.art.com cache1.artprintimages.com nova.collect.igodigital.com cdn-assets.affirm.com www.google.com www.google-analytics.com *.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net www.facebook.com ct.pinterest.com bat.bing.com track.linksynergy.com tags.rd.linksynergy.com click.s13.exacttarget.com events.attentivemobile.com;script-src 'self' 'nonce-NSezhF2QzSuYCmA62nmkUQ==' storage.googleapis.com *.collect.igodigital.com widget.trustpilot.com cdn-4.convertexperiments.com cdn-3.convertexperiments.com www.googletagmanager.com *.googletagmanager.com www.google-analytics.com *.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net connect.facebook.net s.pinimg.com bat.bing.com tag.rmp.rakuten.com tags.rd.linksynergy.com services.xg4ken.com www.datadoghq-browser-agent.com www.clarity.ms rum-static.pingdom.net *.chat.digital.ringcentral.com consent.trustarc.com cdnjs.cloudflare.com www.paypal.com *.paypal.com *.paypalobjects.com static.cloudflareinsights.com cdn1.affirm.com cdn.id5-sync.com dynamic.criteo.com sslwidget.criteo.com cdn.attn.tv cdn.userway.org;script-src-elem 'self' 'nonce-NSezhF2QzSuYCmA62nmkUQ==' storage.googleapis.com *.collect.igodigital.com widget.trustpilot.com cdn-4.convertexperiments.com cdn-3.convertexperiments.com www.googletagmanager.com *.googletagmanager.com www.google-analytics.com *.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net connect.facebook.net s.pinimg.com bat.bing.com tag.rmp.rakuten.com tags.rd.linksynergy.com services.xg4ken.com www.datadoghq-browser-agent.com www.clarity.ms rum-static.pingdom.net *.chat.digital.ringcentral.com consent.trustarc.com cdnjs.cloudflare.com www.paypal.com *.paypal.com *.paypalobjects.com static.cloudflareinsights.com cdn1.affirm.com cdn.id5-sync.com dynamic.criteo.com sslwidget.criteo.com cdn.attn.tv cdn.userway.org;connect-src 'self' api.cquotient.com *.salesforce.com *.dev.art.com *.dev.allposters.com dev-bizapi.art.com dev-bizapi.allposters.com bizapi.art.com bizapi.allposters.com stg-bizapi.art.com stg-bizapi.allposters.com rel1-bizapi.art.com rel1-bizapi.allposters.com localhost:* *.affirm.com *.doubleclick.net *.googletagmanager.com *.google-analytics.com *.analytics-google.com analytics.google.com www.googleadservices.com www.facebook.com bat.bing.com track.linksynergy.com tags.rd.linksynergy.com services.xg4ken.com datadoghq.com www.clarity.ms id5-sync.com *.id5-sync.com eu-1-id5-sync.com *.eu-1-id5-sync.com events.attentivemobile.com *.attn.tv *.chat.digital.ringcentral.com consent.trustarc.com cdn-4.convertexperiments.com cdn-3.convertexperiments.com 10017911.metrics.convertexperiments.com logs.convertexperiments.com www.paypal.com *.paypal.com *.paypalobjects.com widget.trustpilot.com www.google.com rum-collector-2.pingdom.net ct.pinterest.com s.pinimg.com;frame-src 'self' *.affirm.com *.googletagmanager.com www.google.com googleads.g.doubleclick.net survey.alchemer.com www.surveygizmo.com *.chat.digital.ringcentral.com consent.trustarc.com *.attn.tv www.paypal.com *.paypal.com *.paypalobjects.com widget.trustpilot.com gum.criteo.com;default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests 1
object-src 'none';base-uri 'self';script-src 'nonce-xVGCQhhXumWDMUgf7K18yg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
connect-src *.affirm.com https://tracker.affirm.com https://assets.braintreegateway.com *.braintreegateway.com *.braintree-api.com *.braze.com https://sdk.iad-05.braze.com/api/v3/data/ *.datadoghq.com *.browser-intake-us5-datadoghq.com https://browser-intake-us5-datadoghq.com https://session-replay.browser-intake-us5-datadoghq.com/api/v2/replay https://experiments.gametime.co https://gametimesf.github.io https://www.facebook.com https://connect.facebook.net https://www.facebook.com/tr/ *.forter.com wss://cdn0.forter.com https://d2o5idwacg3gyw.cloudfront.net https://dz8rit8v72mig.cloudfront.net https://db7q4jg5rkhk8.cloudfront.net https://1.1.1.1 https://d94qwxh6czci4.cloudfront.net https://dr6vcclmzwk74.cloudfront.net https://d6rak4b14t5gp.cloudfront.net https://d3k4bt74u9esq1.cloudfront.net https://d1ezzflfzltk6e.cloudfront.net https://d3nocrch4qti4v.cloudfront.net https://duuytoqss3gu4.cloudfront.net https://df45ay5pw60dy.cloudfront.net *.google.com https://www.google.com https://www.google-analytics.com https://www.google-analytics.com/j/collect https://www.gstatic.com https://www.google.com.mx https://www.google.ca https://www.google.co.uk https://www.googletagmanager.com https://google.com/pay https://adservice.google.com https://pay.google.com https://pay.google.com/about/redirect/ https://analytics.google.com https://fonts.gstatic.com https://fonts.googleapis.com https://www.googleadservices.com https://www.googletagmanager.com https://maps.googleapis.com https://googleads.g.doubleclick.net/ *.gr4vy.app https://paypal.com https://www.paypal.com/sdk/js https://checkout.paypal.com https://www.paypalobjects.com *.paypal.com https://ipv4.podscribe.com https://verifi.podscribe.com https://d34r8q7sht0t9k.cloudfront.net *.pusher.com https://sockjs-mt1.pusher.com wss://ws-mt1.pusher.com https://us-east-1.hightouch-events.com https://*.hightouch-events.com https://apps.rokt-api.com https://*.rokt-api.com https://*.rokt.com https://sandbox.affirm.com https://sandbox.affirm.com/fonts https://www.sandbox.paypal.com/ *.sentry.io *.ingest.sentry.io *.ingest.us.sentry.io https://pixel.byspotify.com https://pixels.spotify.com api.statsig.com api.statsigcdn.com assetsconfigcdn.org beyondwickedmapping.org cdn.console.statsig.com cloudflare-dns.com console.statsig.com console.statsigcdn.com events.statsigapi.net featureassets.org featuregates.org idliststorage.blob.core.windows.net prodregistryv2.org statsigapi.net https://api.stripe.com https://*.tiktok.com https://*.tiktokw.us *.amazonaws.com https://api.buttercms.com https://d.impct.site https://pixels.spotify.com bat.bing.com *.cloudfront.net *.doubleclick.net https://gametime.hnyj8s.net *.gametime.co/ https://boards-api.greenhouse.io/v1/boards/gametimeunited/departments https://global.ketchcdn.com *.riskified.com 'self';default-src 'self';font-src 'self' data: https://sandbox.affirm.com https://sandbox.affirm.com/fonts https://www.sandbox.paypal.com/ *.google.com https://www.google.com https://www.google-analytics.com https://www.google-analytics.com/j/collect https://www.gstatic.com https://www.google.com.mx https://www.google.ca https://www.google.co.uk https://www.googletagmanager.com https://google.com/pay https://adservice.google.com https://pay.google.com https://pay.google.com/about/redirect/ https://analytics.google.com https://fonts.gstatic.com https://fonts.googleapis.com https://www.googleadservices.com https://www.googletagmanager.com https://maps.googleapis.com https://googleads.g.doubleclick.net/ https://fp.affirm-stage.com https://use.fontawesome.com;form-action 'self' https://www.facebook.com https://connect.facebook.net https://www.facebook.com/tr/;frame-src https://assets.braintreegateway.com *.braintreegateway.com *.braintree-api.com https://www.facebook.com https://connect.facebook.net https://www.facebook.com/tr/ *.google.com https://www.google.com https://www.google-analytics.com https://www.google-analytics.com/j/collect https://www.gstatic.com https://www.google.com.mx https://www.google.ca https://www.google.co.uk https://www.googletagmanager.com https://google.com/pay https://adservice.google.com https://pay.google.com https://pay.google.com/about/redirect/ https://analytics.google.com https://fonts.gstatic.com https://fonts.googleapis.com https://www.googleadservices.com https://www.googletagmanager.com https://maps.googleapis.com https://googleads.g.doubleclick.net/ *.gr4vy.app https://paypal.com https://www.paypal.com/sdk/js https://checkout.paypal.com https://www.paypalobjects.com *.paypal.com https://sandbox.affirm.com https://sandbox.affirm.com/fonts https://www.sandbox.paypal.com/ https://js.stripe.com https://*.js.stripe.com https://hooks.stripe.com bytedance: https://player.vimeo.com/ https://www.affirm.com sslocal: *.doubleclick.net 'self';img-src 'self' data: blob: *.gametime.co/ https://*.tiktok.com https://*.tiktokw.us *;manifest-src 'self' *.google.com https://www.google.com https://www.google-analytics.com https://www.google-analytics.com/j/collect https://www.gstatic.com https://www.google.com.mx https://www.google.ca https://www.google.co.uk https://www.googletagmanager.com https://google.com/pay https://adservice.google.com https://pay.google.com https://pay.google.com/about/redirect/ https://analytics.google.com https://fonts.gstatic.com https://fonts.googleapis.com https://www.googleadservices.com https://www.googletagmanager.com https://maps.googleapis.com https://googleads.g.doubleclick.net/;script-src *.affirm.com https://tracker.affirm.com https://assets.braintreegateway.com *.braintreegateway.com *.braintree-api.com *.braze.com https://sdk.iad-05.braze.com/api/v3/data/ https://experiments.gametime.co https://gametimesf.github.io https://www.facebook.com https://connect.facebook.net https://www.facebook.com/tr/ *.forter.com https://dlthst9q2beh8.cloudfront.net https://d2nww8zpyj5pk0.cloudfront.net https://d2w2nqfk3z9hdt.cloudfront.net https://d27623md02evp.cloudfront.net https://d1qmrxg9gbf226.cloudfront.net *.google.com https://www.google.com https://www.google-analytics.com https://www.google-analytics.com/j/collect https://www.gstatic.com https://www.google.com.mx https://www.google.ca https://www.google.co.uk https://www.googletagmanager.com https://google.com/pay https://adservice.google.com https://pay.google.com https://pay.google.com/about/redirect/ https://analytics.google.com https://fonts.gstatic.com https://fonts.googleapis.com https://www.googleadservices.com https://www.googletagmanager.com https://maps.googleapis.com https://googleads.g.doubleclick.net/ *.gr4vy.app https://paypal.com https://www.paypal.com/sdk/js https://checkout.paypal.com https://www.paypalobjects.com *.paypal.com https://ipv4.podscribe.com https://verifi.podscribe.com https://d34r8q7sht0t9k.cloudfront.net https://apps.rokt-api.com https://*.rokt-api.com https://*.rokt.com https://cdn.hightouch-events.com https://pixel.byspotify.com https://pixels.spotify.com *.sentry.io *.ingest.sentry.io *.ingest.us.sentry.io https://www.datadoghq-browser-agent.com https://datadoghq-browser-agent.com https://js.stripe.com https://*.js.stripe.com https://*.tiktok.com https://*.tiktokw.us https://www.upsellit.com https://app.upsellit.com https://extmanagers.com https://app.link https://cdn.ketchjs.com https://cdn.sift.com/s.js https://utt.impactcdn.com https://applepay.cdn-apple.com bat.bing.com blob: https://global.ketchcdn.com 'report-sample' *.riskified.com 'self' 'unsafe-eval' 'unsafe-inline';style-src 'self' 'report-sample' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com https://use.fontawesome.com https://www.googletagmanager.com;worker-src 'self' blob:;media-src 'self' *.forter.com;report-to csp-endpoint;report-uri https://o193734.ingest.us.sentry.io/api/1823111/security/?sentry_key=d34125aec97d44b6959ff62f3a287a66 1
default-src 'self' https://www.madavi.de; font-src 'self' data: https://www.madavi.de; img-src 'self' insecure.madavi.de https://www.madavi.de; script-src 'self' 'unsafe-eval' 'unsafe-inline' cdn.ampproject.org https://www.madavi.de; style-src 'self' 'unsafe-inline' https://www.madavi.de; report-uri https://www.madavi.de/wp-json/wpcsp/v1/route/LogPolicyViolation?_wpnonce=5e8bcce718 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.googletagmanager.com https://*.hotjar.com https://cdn-cookieyes.com https://cdn.roomvo.com https://snap.licdn.com https://*.hs-scripts.com https://*.hsadspixel.net https://*.hscollectedforms.net https://*.hs-banner.com https://*.hubspot.com https://static.hsappstatic.net https://*.hs-analytics.net https://*.hsforms.net https://js.zi-scripts.com https://js.usemessages.com https://r2.leadsy.ai https://connect.facebook.net https://code.jquery.com https://www.redditstatic.com https://unpkg.com https://cdnjs.cloudflare.com https://capi-automation.s3.us-east-2.amazonaws.com https://*.doubleclick.net https://www.roomvo.com https://www.clickcease.com https://www.youtube.com; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; connect-src 'self' https://www.googletagmanager.com https://*.cookieyes.com https://cdn-cookieyes.com https://px.ads.linkedin.com https://*.doubleclick.net https://*.googlesyndication.com https://www.google.com https://www.googleadservices.com https://analytics.google.com https://*.google-analytics.com https://*.analytics.google.com https://alb.reddit.com https://*.hubspot.com https://*.hubapi.com https://*.hsforms.com https://*.hsforms.net https://*.hscollectedforms.net https://js.zi-scripts.com https://ws.zoominfo.com https://cdn.jsdelivr.net https://*.ecs.us-east-1.on.aws https://www.roomvo.com https://roomvo-atlas.vercel.app https://www.facebook.com https://monitor.clickcease.com wss://*.hotjar.com https://*.hotjar.io https://www.google.ca https://www.google.co.il https://www.google.es https://www.google.gr https://www.google.com.sg https://www.google.co.za https://www.google.com.pk; frame-src blob: https://*.hubspot.com https://roomvo-atlas.vercel.app https://www.roomvo.com https://www.youtube-nocookie.com https://www.youtube.com https://forms.zohopublic.com https://www.facebook.com https://www.googletagmanager.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri https://get.roomvo.com/csp-report-endpoint.php 1
default-src 'self' https://*.firstcitizens.com;                 script-src 'self' https://*.firstcitizens.com https://cdn.cookielaw.org https://assets.adobedtm.com https://acrobatservices.adobe.com https://cds-sdkcfg.onlineaccess1.com https://www.googletagmanager.com https://s.go-mpulse.net https://connect.facebook.net https://bat.bing.com https://snap.licdn.com https://js-cdn.dynatrace.com https://googleads.g.doubleclick.net https://td.doubleclick.net https://www.googleadservices.com https://px.ads.linkedin.com https://edge.adobedc.net https://www.facebook.com https://px4.ads.linkedin.com https://siteimproveanalytics.com https://www.clarity.ms https://www.google.com https://google.com https://2884.global.siteimproveanalytics.io https://c.go-mpulse.net https://zndhwk2nlgcbvdel3-firstcitizensbank.siteintercept.qualtrics.com https://t.contentsquare.net https://munchkin.marketo.net https://siteintercept.qualtrics.com https://296-cpx-295.mktoresp.com https://894-itd-344.mktoresp.com https://284-lbb-572.mktoresp.com https://151-fhs-046.mktoresp.com https://412-tmw-562.mktoresp.com https://u.clarity.ms https://c.contentsquare.net https://173bf10e.akstat.io https://k-aus1.contentsquare.net https://trial-eum-clientnsv4-s.akamaihd.net https://eyaqbbekafz5ajqacqnryaaabbtmzouy-p2jke9-59ac193c4-clienttons-s.akamaihd.net https://daaisiixzsmj6zwmxkma-p2jke9-1aa48d9c7-clientnsv4-s.akamaihd.net https://assets.sitescdn.net https://answers.yext-pixel.com https://analytics.google.com https://embed-ssl.wistia.com https://pipedream.wistia.com https://js.sentry-cdn.com https://distillery.wistia.com https://embed-cloudfront.wistia.com https://srm.bf.contentsquare.net https://www.gstatic.com https://app.fintelconnect.com https://browser.sentry-cdn.com https://*.cit.com https://answers-embed.firstcitizens.com.pagescdn.com https://info.onewestbank.com https://rum.hlx.page https://script.crazyegg.com https://js.adsrvr.org https://bat.bing.com https://scripts.clarity.ms https://dvract3a1itr1.cloudfront.net https://c.amazon-adsystem.com https://s.amazon-adsystem.com https://ad.doubleclick.net;                 connect-src 'self' https://*.firstcitizens.com https://cdn.cookielaw.org https://analytics.google.com https://answers.yext-pixel.com https://ad.doubleclick.net https://stats.g.doubleclick.net https://adobedc.demdex.net https://viewlicense.adobe.io https://www.google.com https://www.google-analytics.com https://dpm.demdex.net https://edge.adobedc.net https://px.ads.linkedin.com https://siteintercept.qualtrics.com https://cds-sdkcfg.onlineaccess1.com https://prod-cdn.us.yextapis.com https://ipapi.co https://api.openweathermap.org https://296-cpx-295.mktoutil.com https://script.crazyegg.com https://tracking.crazyegg.com https://pagestates-tracking.crazyegg.com https://assets-tracking.crazyegg.com https://insight.adsrvr.org https://dayintegrationintern.tt.omtrdc.net https://www.googleadservices.com https://business.linkedin.com https://openknowledge.worldbank.org https://acrobatservices.adobe.com https://assets.sitescdn.net https://bat.bing.com https://scripts.clarity.ms https://smetrics.firstcitizens.com https://browser.sentry-cdn.com https://mpc-prod-2-1053047382554.us-central1.run.app https://demo-1.conversionsapigateway.com https://graph.facebook.com https://c.amazon-adsystem.com https://s.amazon-adsystem.com https://fls.doubleclick.net https://api.ipdata.co https://6jk6d9jp92.execute-api.us-east-2.amazonaws.com https://ara.paa-reporting-advertising.amazon https://ipdata.co;                 worker-src 'self';                 style-src 'self' https://*.firstcitizens.com https://fonts.googleapis.com https://assets.sitescdn.net;                 style-src-elem 'self' https://*.firstcitizens.com https://assets.sitescdn.net https://*.cit.com https://info.onewestbank.com https://fonts.googleapis.com https://www.googletagmanager.com;                 img-src 'self' https://*.firstcitizens.com https://cdn.cookielaw.org https://2884.global.siteimproveanalytics.io px.ads.linkedin.com https://px4.ads.linkedin.com https://cm.everesttech.net https://dpm.demdex.net https://www.linkedin.com https://www.googletagmanager.com https://www.facebook.com https://googleads.g.doubleclick.net https://*.cit.com https://www.google.com https://google.com https://info.onewestbank.com https://siteintercept.qualtrics.com https://fonts.gstatic.com https://ad.doubleclick.net https://insight.adsrvr.org https://ib.adnxs.com https://cm.g.doubleclick.net https://match.adsrvr.org https://pixel.rubiconproject.com https://www.googleadservices.com https://c.amazon-adsystem.com https://s.amazon-adsystem.com https://fls.doubleclick.net https://dl5oelilihj3e.cloudfront.net;                 frame-src 'self' https://*.firstcitizens.com https://acrobatservices.adobe.com https://td.doubleclick.net https://firstcitizens.demdex.net https://www.google.com https://www.citrail.com https://answers-embed.firstcitizens.com.pagescdn.com https://*.cit.com https://info.onewestbank.com https://www.googletagmanager.com https://insight.adsrvr.org https://privacyportaluat.onetrust.com https://privacyportal.onetrust.com https://match.adsrvr.org https://fintactix.com https://14741597.fls.doubleclick.net https://fast.wistia.net https://15758689.fls.doubleclick.net https://ad.doubleclick.net;                 frame-ancestors 'self' https://www.google.com https://9808-sbx.btbanking.com https://*.firstcitizens.com https://*.fcbint.net https://bostonprivate--full.sandbox.my.salesforce.com https://bostonprivate.my.salesforce.com;                 media-src 'self';                 font-src 'self'; 1
default-src 'self' https://*.navigraph.com; connect-src 'self' https://*.google-analytics.com https://*.navigraph.com https://*.braintree-api.com https://google.com https://*.google.com https://bat.bing.net https://bat.bing.com https://*.paypal.com https://*.cardinalcommerce.com https://*.cardinaltrusted.com https://api.ipstack.com https://*.braintreegateway.com https://www.googletagmanager.com https://*.amazonaws.com https://analytics.tiktok.com https://www.facebook.com https://pixel-config.reddit.com https://*.doubleclick.net https://*.tiktokw.us https://www.googleadservices.com; script-src 'self' https://*.navigraph.com https://*.braintreegateway.com https://*.cardinaltrusted.com https://pay.google.com https://*.cdn-apple.com https://www.googletagmanager.com https://*.google-analytics.com https://www.paypal.com https://code.jquery.com https://connect.facebook.net https://www.redditstatic.com https://bat.bing.com https://analytics.tiktok.com https://*.doubleclick.net 'unsafe-inline'; style-src 'self' https://*.typekit.net https://www.gstatic.com 'unsafe-inline'; img-src 'self' https: blob: data:; media-src 'self'; font-src 'self' https://fonts.gstatic.com https://use.typekit.net https://*.cdn-apple.com; child-src 'self' https://*.paypal.com https://pay.google.com https://*.braintreegateway.com/ https://*.cardinalcommerce.com/ https://www.youtube.com https://www.facebook.com; manifest-src 'self'; worker-src 'self'; report-uri https://collect.navigraph.com/csp-report; report-to ng-csp 1
default-src 'self' blob:  https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com; frame-src 'self' https://*.noxiaohao.com https://telegram.org https://*.bitget.com https://accounts.google.com https://oauth.telegram.org https://sgtm.btsgtm.com ; script-src 'self' 'nonce-kCYu9WGdEZHRUe+QgiFMbA==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh/v3RIRuG3kMikr5iha+7P/0TN/GNA=' https://*.noxiaohao.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com https://accounts.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://play.google.com https://analytics.google.com https://fonts.gstatic.com https://telegram.org https://oauth.telegram.org https://*.geetest.com https://*.geevisit.com https://sgtm.btsgtm.com; connect-src 'self' wss: https://stats.g.doubleclick.net https://analytics.google.com https://www.google.com wss://stream.bitget.cloud https://*.noxiaohao.com wss://*.noxiaohao.com wss://*.bitget.com https://www.turingfraud.net https://play.google.com https://accounts.google.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com https://telegram.org https://oauth.telegram.org https://static.geetest.com https://static.geevisit.com https://sgtm.btsgtm.com ; worker-src 'self' blob:; img-src 'self' data: blob: https://www.googletagmanager.com https://img.bgbstatic.com https://*.bgstatic.com https://img.bitgetimg.com https://img.gurenla.com https://*.bgbstatic.com https://lh3.googleusercontent.com https://static.geetest.com https://static.geevisit.com https://static-web.jjdsn.vip https://cdn.bitkeep.vip https://www.google.co.jp https://bin.wangsustatic.com https://sgtm.btsgtm.com https://analytics.google.com https://stats.g.doubleclick.net ; style-src 'self' 'unsafe-inline' https://static.geetest.com https://static.geevisit.com https://accounts.google.com https://fonts.googleapis.com https://static.bgbstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com; font-src 'self' data: https://static.geetest.com https://static.geevisit.com https://fonts.gstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri /v1/buried/log/cspSecurity /v1/monitor/csp?appId=d4b6df7d; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://challenges.cloudflare.com https://cdn.segment.com https://www.googletagmanager.com https://cdn-cookieyes.com https://cdn.broadstreetads.com https://secure.leadforensics.com https://secure.intelligence-enterprise.com https://player.vimeo.com https://s.swiftypecdn.com; style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net https://s.swiftypecdn.com; font-src 'self' data: https://use.typekit.net; img-src 'self' data: https:; connect-src 'self' https://api.segment.io https://cdn.segment.com https://*.datadoghq.eu https://*.datadoghq.com https://challenges.cloudflare.com https://s.swiftypecdn.com https://cdn-cookieyes.com https://log.cookieyes.com https://*.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://www.google.co.uk https://ad.broadstreetads.com; frame-src https://challenges.cloudflare.com https://player.vimeo.com https://www.googletagmanager.com; object-src 'none'; base-uri 'self'; report-uri /api/csp-report; report-to csp 1
object-src 'none';base-uri 'self';script-src 'nonce-QS_4EqrGJ-b9FI-RPjnoIQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com; img-src 'self' https://www.google-analytics.com https://www.googletagmanager.com; script-src 'self' addevent.com cdn.jsdelivr.net cdnjs.cloudflare.com https://challenges.cloudflare.com static.addtoany.com; style-src 'self' addtocalendar.com cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com 1
block-all-mixed-content; report-uri https://csp-reports.pravmir.ru/https-mixed-content-logger/csp_report_log.php; 1
object-src 'none';base-uri 'self';script-src 'nonce-GyhQPUZwNAkeLo4amSWjkg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
style-src 'self' 'unsafe-inline' cdn.sidefx.com static.sidefx.com d2wvmrjymyrujw.cloudfront.net media.sidefx.com fonts.googleapis.com www.google.com tagmanager.google.com *.vimeocdn.com www.gstatic.com https://hcaptcha.com https://*.hcaptcha.com; font-src 'self' data: cdn.sidefx.com static.sidefx.com media.sidefx.com fonts.gstatic.com; media-src www.sidefx.com cdn.sidefx.com static.sidefx.com media.sidefx.com d2wvmrjymyrujw.cloudfront.net; frame-src 'self' data: static.sidefx.com media.sidefx.com www.google.com connect.facebook.net www.facebook.net www.facebook.com docs.google.com maps.google.com www.youtube.com lists.sidefx.com *.vimeo.com *.vimeocdn.com www.sandbox.paypal.com www.paypal.com https://hcaptcha.com https://*.hcaptcha.com; default-src 'self'; connect-src 'self' *.google-analytics.com *.google.com *.googletagmanager.com stats.g.doubleclick.net www.facebook.com ig.instant-tokens.com graph.instagram.com vimeo.com www.sandbox.paypal.com www.paypal.com sidefx.bamboohr.com https://hcaptcha.com https://*.hcaptcha.com forms.copper.com; script-src 'self' 'nonce-cX6U7c7HqoMbSoI42xbshQ==' 'unsafe-eval' cdn.sidefx.com static.sidefx.com media.sidefx.com d2wvmrjymyrujw.cloudfront.net *.googleapis.com www.gstatic.com www.google.com cse.google.com *.facebook.net api.instagram.com cdnjs.cloudflare.com unpkg.com cdn.jsdelivr.net *.googletagmanager.com tagmanager.google.com www.google-analytics.com stats.g.doubleclick.net analytics.google.com vimeo.com *.vimeo.com *.vimeocdn.com *.newrelic.com *.nr-data.net www.youtube.com www.paypal.com www.sandbox.paypal.com sidefx.bamboohr.com https://hcaptcha.com https://*.hcaptcha.com forms.copper.com; img-src 'self' data: cdn.sidefx.com static.sidefx.com media.sidefx.com d2wvmrjymyrujw.cloudfront.net *.cdninstagram.com *.gravatar.com www.facebook.com static.lulu.com www.gstatic.com ssl.gstatic.com www.googleapis.com i.ytimg.com *.vimeocdn.com www.paypal.com t.paypal.com www.paypalobjects.com placekitten.com http://dummyimage.com resources.bamboohr.com connect.facebook.com connect.facebook.net placehold.co *.google.com www.googletagmanager.com www.google-analytics.com stats.g.doubleclick.net; report-uri /csp-report/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://*.cloudflare.com https://*.googletagmanager.com https://*.google.com https://*.google-analytics.com https://stats.g.doubleclick.net https://connect.facebook.net https://*.mczbf.com https://*.kdukvh.com https://*.emjcd.com https://*.jdoqocy.com https://*.dotomi.com https://*.cj.com https://*.sjwoe.com https://*.clarity.ms https://onelinksmartscript.appsflyer.com https://*.apple-mapkit.com https://embed.reddit.com https://static.zdassets.com https://platform.twitter.com https://www.instagram.com https://widget.trustpilot.com https://unpkg.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://*.cloudflare.com https://*.googleoptimize.com https://*.googletagmanager.com https://www.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://cdn.jsdelivr.net https://*.cloudflare.com https://*.googletagmanager.com https://*.google.com https://*.google-analytics.com https://storage.googleapis.com https://fonts.gstatic.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://purecatamphetamine.github.io http://purecatamphetamine.github.io https://www.facebook.com https://connect.facebook.net https://*.clarity.ms https://googleads.g.doubleclick.net https://*.googleusercontent.com https://storage.googleapis.com https://secure.gravatar.com https://*.apple-mapkit.com https://syndication.twitter.com https://s0.wp.com https://*.bing.com; font-src 'self' data: https://cdn.jsdelivr.net https://fonts.gstatic.com https://s0.wp.com https://applepay.cdn-apple.com; worker-src 'self'; frame-src 'self' https://www.youtube.com https://*.googletagmanager.com https://embed.reddit.com https://platform.twitter.com https://www.instagram.com https://widget.trustpilot.com; connect-src 'self' https://cdn.jsdelivr.net https://*.cloudflare.com https://lown4qvbisme2qafgzvjetqzzy0tbyyr.lambda-url.us-west-2.on.aws https://analytics.google.com https://*.analytics.google.com https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://*.mczbf.com https://*.kdukvh.com https://*.emjcd.com https://*.jdoqocy.com https://*.dotomi.com https://*.cj.com https://*.sjwoe.com https://www.facebook.com https://*.clarity.ms https://*.apple-mapkit.com https://*.mydnsip.com https://www.googleadservices.com https://engagements.appsflyer.com https://meta.veepn.com https://ekr.zdassets.com; media-src 'self'; frame-ancestors 'self'; object-src 'none'; report-to csp-endpoint; 1
default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http://*.files.wordpress.com wss://www.artforum.com; report-uri https://pmcuri.report-uri.com/r/d/csp/reportOnly 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://cdn.datatables.net https://unpkg.com https://cdn.fuseplatform.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.datatables.net https://cdnjs.cloudflare.com https://netdna.bootstrapcdn.com; img-src 'self' data: https: http:; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; connect-src 'self' ws: wss:; frame-src 'self' https://zkillboard.com; form-action 'self' 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.googleapis.com https://*.google.com https://google.com/pay https://cdn.cookielaw.org https://*.cquotient.com https://*.zendesk.com https://appleid.cdn-apple.com https://*.adyen.com https://*.cdn.adyen.com https://d.ratepay.com https://cdn.jsdelivr.net https://*.paypal.com https://*.gstatic.com https://*.google-analytics.com https://*.acsbapp.com https://acsbapp.com https://*.cloudflare.com https://tag.shopping-feed.com https://*.zdassets.com https://*.smooch.io wss://*.smooch.io;connect-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.googleapis.com https://*.google.com https://google.com/pay https://cdn.cookielaw.org https://*.cquotient.com https://*.zendesk.com https://appleid.cdn-apple.com https://*.adyen.com https://*.cdn.adyen.com https://d.ratepay.com https://cdn.jsdelivr.net https://*.paypal.com https://*.gstatic.com https://*.google-analytics.com https://*.acsbapp.com https://acsbapp.com https://*.cloudflare.com https://tag.shopping-feed.com https://*.zdassets.com https://*.smooch.io wss://*.smooch.io;report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report;report-to https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report 1
default-src 'self' *.signnow.com; script-src 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline' *.bing.com *.cloudflare.com googleads.g.doubleclick.net *.stripe.com run.pstmn.io *.signnow.com *.google.com www.google.com *.googletagmanager.com *.gstatic.com *.upsellit.com *.intercom.io *.paypal.com *.recaptcha.net *.checkout.com infird.com *.gstatic.cn *.braintreegateway.com *.intercomcdn.com *.smartlook.com widget.intercom.io *.clarity.ms static.ads-twitter.com a.quora.com secure.rocketgate.com *.pdffiller.com widget.trustpilot.com applepay.cdn-apple.com ajax.googleapis.com ct.capterra.com js.zi-scripts.com www.dropbox.com stats.wp.com cdn.mrkhub.com code.jquery.com https://www.googletagmanager.com/gtm.js secure.gravatar.com blog-signnow-com.disqus.com cdn.mr-prod.xyz; style-src 'report-sample' 'unsafe-inline' 'self' *.googleapis.com *.signnow.com *.pdffiller.com *.google.com cdnjs.cloudflare.com cdn.airslate-pmnt-hub.com cdn.quilljs.com cdn.mrkhub.com fonts.bunny.net 0.gravatar.com www.gstatic.com www.paypalobjects.com; object-src 'none'; base-uri 'self'; connect-src 'self' *.ingest.sentry.io *.ingest.us.sentry.io *.signnow.com *.google-analytics.com *.google.com *.googleadservices.com *.smartlook.cloud *.braintreegateway.com *.bing.com bat.bing.com *.intercom.io wss://*.intercom.io *.intercom-messenger.com wss://*.intercom-messenger.com *.googleapis.com *.checkout.com *.usrsprt.com *.braintree-api.com *.infrateam.net *.recaptcha.net *.googletagmanager.com google.com *.paypal.com *.clarity.ms *.pdffiller.com js.zi-scripts.com *.cdn77.org *.zoominfo.com *.mrkhub.com mm-websocket.pdffiller.com *.doubleclick.net *.rocketgate.com *.browser-intake-datadoghq.com *.pmnt-prod.xyz bat.bing.net; font-src 'self' fonts.gstatic.com fonts.intercomcdn.com *.signnow.com r2cdn.perplexity.ai cdn.scite.ai static.rakuten.com *.intercomcdn.com applepay.cdn-apple.com *.pdffiller.com cdn.airslate-pmnt-hub.com fonts.bunny.net cdn.mrkhub.com use.typekit.net data: www.paypalobjects.com; frame-src 'self' *.signnow.com signnow.com *.statuspage.io *.airslate.com *.stripe.com *.google.com *.googletagmanager.com *.pdffiller.com www.youtube.com *.braintreegateway.com *.paypal.com *.altaflow.com *.recaptcha.net *.checkout.com challenges.cloudflare.com widget.trustpilot.com signnow.sjv.io ssl.kaptcha.com applepay.cdn-apple.com; img-src 'self' blob: data: engagement-static.amplitude.com *.google.com *.bing.com *.analytics.google.com www.google.com.co *.intercomcdn.com *.google.de *.google.ca googleads.g.doubleclick.net img.youtube.com *.signnow.com stats.g.doubleclick.net *.google-analytics.com i.ytimg.com *.paypal.com *.googletagmanager.com *.rakuten.com *.doubleclick.net *.gstatic.com *.pdffiller.com *.airslate-pmnt-hub.com analytics.twitter.com t.co bat.bing.net q.quora.com s.w.org cdn.airslate.com applepay.cdn-apple.com cdn.mrkhub.com crawlers-tracking.mrkhub.com storage.googleapis.com static.intercomassets.com pixel.wp.com secure.gravatar.com uslegalforms.com; manifest-src 'self' *.signnow.com; media-src 'self' *.signnow.com static.rakuten.com js.intercomcdn.com; report-uri https://csp-collector.signnow.com/csp-report; worker-src 'self' *.signnow.com *.pdffiller.com blob:; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' https://api-maps.yandex.ru https://*.api-maps.yandex.ru https://yastatic.net https://suggest-maps.yandex.ru https://*.mindbox.ru https://mc.yandex.ru https://smartcaptcha.yandexcloud.net https://api.mindbox.ru https://web-static.mindbox.ru https://personalization-web.g.mindbox.ru https://websdk.appsflyer.com https://banner.appsflyersdk.com; style-src 'self' 'unsafe-inline' https://api-maps.yandex.ru https://*.api-maps.yandex.ru https://yastatic.net; img-src 'self' data: blob: https: https://image.mm.ru https://api-maps.yandex.ru https://*.api-maps.yandex.ru https://*.maps.yandex.net https://yastatic.net https://*.cluster.kznexpess.com https://ke-images.servicecdn.ru https://kazanexpress.hb.bizmrg.com https://image.kazanexpress.ru https://support.apple.com https://core-renderer-tiles.maps.yandex.net; connect-src 'self' https://api-maps.yandex.ru https://*.api-maps.yandex.ru https://*.maps.yandex.net https://graphql.kazanexpress.ru https://web-api.mm.ru https://api.kazanexpress.ru https://id.magnit.ru https://event-stream-api.magnit.ru https://*.kaspersky-labs.com https://firebaseremoteconfig.googleapis.com https://firebaseinstallations.googleapis.com https://*.cluster.kznexpess.com https://nmchdd.ru:25343 https://mc.yandex.ru wss://mc.yandex.ru https://api.mindbox.ru https://web-static.mindbox.ru https://personalization-web.g.mindbox.ru https://*.mindbox.ru https://smartcaptcha.yandexcloud.net https://sentry.mm.ru https://banner.appsflyersdk.com; frame-src 'self' https://smartcaptcha.yandexcloud.net https://www.youtube.com; worker-src 'self' blob: https://api-maps.yandex.ru https://*.api-maps.yandex.ru https://yastatic.net; report-to csp 1
style-src 'self' 'unsafe-inline' https://*.google.com; require-trusted-types-for 'script'; trusted-types sanitizer unsafe dompurify scriptHelper 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://js.hs-scripts.com https://js.hscollectedforms.net https://js.hs-analytics.net https://js.hs-banner.com https://js.hsforms.net https://widget.intercom.io https://js.intercomcdn.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://cdn.sanity.io https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://googleads.g.doubleclick.net https://i.ytimg.com https://files.stripe.com https://*.amazonaws.com https://*.intercomcdn.com https://*.intercom.io; font-src 'self' data:; connect-src 'self' https://*.sanity.io https://www.google-analytics.com https://www.googletagmanager.com https://*.google.com https://*.doubleclick.net https://*.facebook.com https://api.hubspot.com https://*.hubspot.com https://*.intercom.io wss://*.intercom.io https://vitals.vercel-insights.com https://mkt-site-phoenix-rising.vercel.app https://staging-phoenix-rising.vercel.app; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://player.mux.com https://js.stripe.com https://hooks.stripe.com https://intercom-sheets.com https://open.spotify.com https://embed.podcasts.apple.com https://share.descript.com https://forms.hsforms.com https://meetings.hubspot.com https://scribe.heidihealth.com https://scribe.dev.heidihealth.com; object-src 'none'; base-uri 'self'; form-action 'self' https://hooks.stripe.com; frame-ancestors 'self' https://studio.heidihealth.com https://*.sanity.studio; report-uri /api/csp-report; report-to csp-endpoint 1
default-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' static.addtoany.com cdnjs.cloudflare.com dev.visualwebsiteoptimizer.com cdn.visualwebsiteoptimizer.com app.vwo.com cdn.cookielaw.org analytics.tiktok.com www.youtube.com bat.bing.com s.pinimg.com connect.facebook.net script.hotjar.com collector-939.tvsquared.com static.hotjar.com www.clarity.ms scripts.clarity.ms static.ads-twitter.com c5.adalyser.com snap.licdn.com static.cognitoforms.com www.cognitoforms.com assets.pinterest.com secure.callhandling.co.uk *.google.com *.googleapis.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.adtrafficquality.google; script-src-elem 'self' 'unsafe-inline' static.addtoany.com cdnjs.cloudflare.com dev.visualwebsiteoptimizer.com cdn.visualwebsiteoptimizer.com app.vwo.com cdn.jsdelivr.net ct.pinterest.com www.clarity.ms script.hotjar.com scripts.clarity.ms analytics.tiktok.com connect.facebook.net s.pinimg.com static.hotjar.com static.ads-twitter.com collector-939.tvsquared.com c5.adalyser.com cdn.cookielaw.org snap.licdn.com bat.bing.com www.youtube.com secure.callhandling.co.uk diabetes-uk.org static.cognitoforms.com www.cognitoforms.com r1.dotdigital-pages.com assets.pinterest.com *.google.com *.googleapis.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.adtrafficquality.google; style-src 'self' 'unsafe-inline' app.vwo.com *.google.com *.googleapis.com *.gstatic.com; style-src-elem 'self' 'unsafe-inline' app.vwo.com *.diabetes.org.uk *.google.com *.googleapis.com *.gstatic.com; style-src-attr 'self' 'unsafe-inline'; object-src 'none'; base-uri 'self'; img-src 'self' data: blob: i.ytimg.com dev.visualwebsiteoptimizer.com cdn.visualwebsiteoptimizer.com useruploads.vwo.io c5.adalyser.com collector-939.tvsquared.com px.ads.linkedin.com analytics.twitter.com bat.bing.com t.co c.bing.com cdn.cookielaw.org c.clarity.ms www.facebook.com analytics.tiktok.com diabetes-resources-production.s3-eu-west-1.amazonaws.com log.pinterest.com thumborcdn.acast.com diabetes-resources-production.s3.eu-west-1.amazonaws.com bat.bing.net www.cognitoforms.com analytics-ipv6.tiktokw.us *.onetrust.com *.diabetes.org.uk *.google.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.adtrafficquality.google *.google.ad *.google.ae *.google.al *.google.am *.google.as *.google.at *.google.az *.google.ba *.google.be *.google.bf *.google.bg *.google.bi *.google.bj *.google.bs *.google.bt *.google.by *.google.ca *.google.cd *.google.cg *.google.ch *.google.ci *.google.cl *.google.cm *.google.co.ao *.google.co.bw *.google.co.ck *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ls *.google.co.ma *.google.co.mz *.google.co.nz *.google.co.th *.google.co.tz *.google.co.ug *.google.co.uk *.google.co.uz *.google.co.ve *.google.co.vi *.google.co.za *.google.co.zm *.google.co.zw *.google.com.af *.google.com.ag *.google.com.ar *.google.com.au *.google.com.bd *.google.com.bh *.google.com.bn *.google.com.bo *.google.com.br *.google.com.bz *.google.com.co *.google.com.cu *.google.com.cy *.google.com.do *.google.com.ec *.google.com.eg *.google.com.et *.google.com.fj *.google.com.gh *.google.com.gi *.google.com.gt *.google.com.hk *.google.com.jm *.google.com.kh *.google.com.kw *.google.com.lb *.google.com.ly *.google.com.mm *.google.com.mt *.google.com.mx *.google.com.my *.google.com.na *.google.com.ng *.google.com.ni *.google.com.np *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.com.pr *.google.com.py *.google.com.qa *.google.com.sa *.google.com.sb *.google.com.sg *.google.com.sl *.google.com.sv *.google.com.tj *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.uy *.google.com.vc *.google.com.vn *.google.cv *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.dz *.google.ee *.google.es *.google.fi *.google.fr *.google.ge *.google.gg *.google.gl *.google.gm *.google.gr *.google.gy *.google.hn *.google.hr *.google.ht *.google.hu *.google.ie *.google.im *.google.iq *.google.is *.google.it *.google.je *.google.jo *.google.kg *.google.kz *.google.la *.google.li *.google.lk *.google.lt *.google.lu *.google.lv *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.mn *.google.mu *.google.mv *.google.mw *.google.ne *.google.nl *.google.no *.google.nr *.google.pl *.google.ps *.google.pt *.google.ro *.google.rs *.google.ru *.google.rw *.google.sc *.google.se *.google.sh *.google.si *.google.sk *.google.sn *.google.so *.google.sr *.google.tg *.google.tl *.google.tn *.google.to *.google.tt *.google.vu *.google.ws; font-src 'self' data: static.cognitoforms.com script.hotjar.com *.googleapis.com *.gstatic.com; connect-src 'self' dev.visualwebsiteoptimizer.com o341786.ingest.sentry.io vc.hotjar.io surveystats.hotjar.io *.clarity.ms analytics-ipv6.tiktokw.us px.ads.linkedin.com bat.bing.com bat.bing.net ct.pinterest.com cdn.cookielaw.org analytics.tiktok.com t.co analytics.twitter.com secure.callhandling.co.uk content.hotjar.io metrics.hotjar.io syndicatedsearch.goog www.cognitoforms.com stats.addtoany.com ask.hotjar.io in.hotjar.io *.onetrust.com *.google.com *.googleapis.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.adtrafficquality.google *.google.ad *.google.ae *.google.al *.google.at *.google.az *.google.ba *.google.be *.google.bg *.google.bi *.google.bs *.google.bt *.google.by *.google.ca *.google.ch *.google.cl *.google.cm *.google.co.bw *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ls *.google.co.ma *.google.co.mz *.google.co.nz *.google.co.th *.google.co.tz *.google.co.ug *.google.co.uk *.google.co.uz *.google.co.ve *.google.co.za *.google.co.zm *.google.co.zw *.google.com.ag *.google.com.ar *.google.com.au *.google.com.bd *.google.com.bh *.google.com.bn *.google.com.bo *.google.com.br *.google.com.bz *.google.com.co *.google.com.cu *.google.com.cy *.google.com.do *.google.com.ec *.google.com.eg *.google.com.et *.google.com.fj *.google.com.gh *.google.com.gi *.google.com.gt *.google.com.hk *.google.com.jm *.google.com.kh *.google.com.kw *.google.com.lb *.google.com.ly *.google.com.mm *.google.com.mt *.google.com.mx *.google.com.my *.google.com.na *.google.com.ng *.google.com.ni *.google.com.np *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.com.pr *.google.com.qa *.google.com.sa *.google.com.sg *.google.com.sl *.google.com.sv *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.uy *.google.com.vc *.google.com.vn *.google.cz *.google.de *.google.dj *.google.dk *.google.dz *.google.ee *.google.es *.google.fi *.google.fr *.google.ge *.google.gg *.google.gm *.google.gr *.google.gy *.google.hn *.google.hr *.google.ht *.google.hu *.google.ie *.google.im *.google.iq *.google.is *.google.it *.google.je *.google.jo *.google.kz *.google.lk *.google.lt *.google.lu *.google.lv *.google.me *.google.mg *.google.mk *.google.mn *.google.mu *.google.mv *.google.mw *.google.ne *.google.nl *.google.no *.google.pl *.google.ps *.google.pt *.google.ro *.google.rs *.google.ru *.google.rw *.google.sc *.google.se *.google.sh *.google.si *.google.sk *.google.so *.google.sr *.google.tn *.google.tt *.google.vu *.google.ws wss://ws.hotjar.com wss://ws.hotjar.io; frame-src 'self' static.addtoany.com ct.pinterest.com www.youtube-nocookie.com www.youtube.com syndicatedsearch.goog diabetes-uk.org app.powerbi.com www.cognitoforms.com r1.dotdigital-pages.com embed.acast.com app.vwo.com givp.nl assets.pinterest.com share.transistor.fm www.facebook.com js.stripe.com *.google.com *.googletagmanager.com *.googlesyndication.com *.doubleclick.net *.adtrafficquality.google; media-src 'self' data: *.gstatic.com; worker-src 'self' blob:; report-uri https://www.diabetes.org.uk/sites/default/files/csp-report.php 1
default-src 'self'; img-src *; style-src 'unsafe-inline'; script-src 'unsafe-inline' 'unsafe-eval' 1
script-src 'report-sample' data: 'nonce-ff73648cab7be068beac19170441696f-argus' 'strict-dynamic' 'self' 'unsafe-eval' blob: *.bytescm.com *.bytetos.com *.ibytedapm.com *.zijieapi.com *.snssdk.com *.bytedance.com *.bytedance.net *.pstatp.com *.bytednsdoc.com *.bytegoofy.com *.byted-static.com *.yhgfb-cn-static.com *.baidu.com *.byteimg.com; connect-src 'self' *.bytedance.net *.snssdk.com *.zijieapi.com *.byted.org *.ugsdk.cn *.bytedance.com hm.baidu.com *.usergrowth.com.cn *.bytescm.com *.toutiao.com *.yhgfb-cn-static.com *.idouyinvod.com:* *.volcsiriusbd.com:* *.volcsirius.com:* *.tt.x.bsgslb.cn:* *.dy.zzcdnx.com:* *.qc.bsccdn.net:* *.smtcdns.com:* *.ugslb.com:* *.livehwc3.cn:* *.smtcdns.net:* *.bytefcdnrd.com:* *.ksyungslb.com:* *.ksyungslb2.com:* *.ourdvsss.com:* *.tbcache.com:* *.jomodns.com:* *.douyincdn.com:* *.ixigua.com:* *.bdxigualive.com:* *.pstatp.com:* *.douyinliving.com:* *.picovr.com:* *.huoshanlive.com:* *.ihuoshanlive.com:* *.volccdn.com:* *.bestv.com.cn:* *.bytefcdn.com:* *.douyinvod.com:* *.bytetos.com *.ibytedapm.com *.pstatp.com *.bytednsdoc.com *.bytegoofy.com *.byted-static.com *.byteimg.com *.qnqcdn.net:* *.weilayun.com:* *.saxysec.com:* *.saxyit.com:* *.saxydc.com:* *.sjxysec.com:* *.sjxydc.com:* *.hiecheimaetu.com:* *.ppio.cloud:* *.vegslb.com:* *.xsj.wasu.tv:* *.zebracdn.com:* *.volctranscdn.com:* *.fqnovelstatic.com *.bytedanceapi.com; frame-ancestors 'self' *.feishu.cn; report-to slardar-endpoint; upgrade-insecure-requests; report-uri https://mon.zijieapi.com/monitor_browser/collect/batch/security/?bid=novel_pc; base-uri 'self'; object-src 'self'; frame-src 'self' *.bytedance.com:* *.douyin.com:*; 1
frame-ancestors 'self'; base-uri 'none'; report-uri https://o38422.ingest.sentry.io/api/1381643/security/?sentry_key=035194ae1605493c99dd66c2a7b2ca98; 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' beacon-v2.helpscout.net rtrdm.blob.core.windows.net https://*.paypal.com https://*.paypalobjects.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com beacon-v2.helpscout.net rtrdm.blob.core.windows.net https://*.paypal.com; font-src 'self' data: fonts.gstatic.com beacon-v2.helpscout.net rtrdm.blob.core.windows.net https://*.paypal.com; img-src 'self' data: blob: https:; connect-src 'self' rtrdm.blob.core.windows.net realtimeregister.com checkoutshopper-live.adyen.com checkoutanalytics-live.adyen.com wss://adac.api.yoursrs.com beaconapi.helpscout.net chatapi.helpscout.net d3hb14vkzrxvla.cloudfront.net sockjs-helpscout.pusher.com wss://*.pusher.com https://*.paypal.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://o1026979.ingest.sentry.io/; frame-src 'self' https: blob:; frame-ancestors 'self'; object-src blob: beacon-v2.helpscout.net; media-src beacon-v2.helpscout.net; base-uri 'self'; form-action 'self' https:; report-uri https://o1026979.ingest.sentry.io/api/5993620/security/?sentry_key=286c50461cc3461aa7a22a28e11c5853&sentry_environment=production 1
connect-src 'self'; font-src 'self' https://s3.amazonaws.com/media.nngroup.com/ https://media.nngroup.com; script-src 'self' https://s3.amazonaws.com/media.nngroup.com/ https://media.nngroup.com; img-src 'self' https://s3.amazonaws.com/media.nngroup.com/ https://media.nngroup.com; style-src 'self' https://s3.amazonaws.com/media.nngroup.com/ https://media.nngroup.com; default-src 'self' 1
default-src https: data: 'unsafe-inline' 'unsafe-eval' blob: wss:; report-uri https://464b711251f54c909b7a68dbb569ad3b.myssl-uri.com/api/csp-report 1
default-src 'self' *.mradx.net *.okcdn.ru *.userapi.com; script-src-elem 'self' vk.com www.googletagmanager.com *.mail.ru www.googletagmanager.com:443 *.mail.ru:443 mc.yandex.ru mc.yandex.com st.max.ru yastatic.net 'unsafe-inline'; frame-src 'self' td.doubleclick.net *.vk.com *.vk.ru vk.com *.vkpay.io *.vkpay.fun *.mradx.net mc.yandex.ru sub.nspk.ru payments.niveldevelopment.com *.money.mail.ru *.mirconnect.ru platiecom.ru id.sber.ru secure.tbank.ru id.tbank.ru *.sbrf.ru; connect-src 'self' www.google-analytics.com *.google-analytics.com analytics.google.com *.analytics.google.com www.googletagmanager.com stats.g.doubleclick.net *.google.ru *.vk.com *.mail.ru vk.ru vk.com blob: *.mail.ru *.mradx.net:443 *.mradx.net *.okcdn.ru *.userapi.com sdk-api.apptracer.ru mc.yandex.ru mc.yandex.com yastatic.net wss://mc.yandex.com/solid.ws; script-src 'self' 'nonce-MTc4ODg2NzYyOA==' *.googletagmanager.com googletagmanager.com *.mail.ru st.max.ru 'unsafe-eval'; worker-src blob:; media-src 'self' data: blob: *.vk.com vk.com *.vk.ru vk.ru *.mradx.net *.okcdn.ru *.userapi.com; font-src 'self' data: fonts.gstatic.com fonts.googleapis.com; img-src 'self' https: data: blob:; style-src 'self' 'unsafe-inline' 'unsafe-hashes' fonts.gstatic.com fonts.googleapis.com www.googletagmanager.com; frame-ancestors 'self' https://yclients.com https://web.max.ru https://senler.ru https://tilda.cc https://megagroup.ru https://www.retailcrm.ru https://marquiz.ru https://envybox.io https://www.unisender.com https://robokassa.com https://salid.ru https://www.reg.ru https://admin.getuds.app; report-uri /csp/csp-violation-report?project=vkads-portal 1
font-src *.gstatic.com *.fontawesome.com * *.googleapis.com https://www.google.com https://www.gstatic.com maxcdn.bootstrapcdn.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de 'self' 'unsafe-inline'; frame-ancestors https://api.clerk.io https://cdn.clerk.io self www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.sharethis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://www.paypal.com https://www.googletagmanager.com https://www.google.com https://www.vimeo.com https://f.vimeocdn.com https://adyen.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://pal-test.adyen.com https://pal-live.adyen.com https://amazon.com https://www.yotpo.com https://int-ecommerce.nexi.it *.kasanova.com * https://www.googletagmanager.com/ www.google.com www.gstatic.com apis.google.com accounts.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.sharethis.com https://cdn.clerk.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de static-eu.payments-amazon.com *.google.com *.gstatic.com https://www.vimeo.com https://f.vimeocdn.com *.googleapis.com *.ggpht https://ecommerce.nexi.it *.cloudfront.net *.kasanova.com * https://static.zdassets.com/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https://www.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page *.sharethis.com https://api.clerk.io https://cdn.clerk.io *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.com *.googleapis.com https://f.vimeocdn.com *.gstatic.com https://googleads.g.doubleclick.net *.clerk.io https://int-ecommerce.nexi.it *.kasanova.com https://assets.livestory.io https://js-agent.newrelic.com *.consentcdn.cookiebot.com/ * http://www.googletagmanager.com/ https://www.googletagmanager.com/ accounts.google.com cdn.jsdelivr.net *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com https://accounts.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.sharethis.com https://api.clerk.io https://cdn.clerk.io *.googleapis.com * *.fontawesome.com *.google.com *.gstatic.com accounts.google.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://static.zdassets.com/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.sharethis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https://assets.livestory.io https://api.livestory.io https://www.google-analytics.com https://int-ecommerce.nexi.it *.kasanova.com *.googleapis.com * http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ http://dpm.demdex.net https://www.google.com https://www.gstatic.com accounts.google.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.gstatic.com t.elasticsuite.io *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce--BFiL4ieU0bLb2HIzvdhMg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' app.contentsquare.com t.contentsquare.net *.heapanalytics.com *.2mdn.net *.33across.com *.acexchange.co.kr *.ad-generation.jp *.adagio.io *.addthis.com *.addthisedge.com *.adform.com *.adiiix.com *.adingo.jp *.admanmedia.com *.admixer.com *.admixer.net *.adtech.com *.adtiming.com *.advangelists.com *.advertising.com *.adyoulike.com *.amazon-adsystem.com *.amazon.com *.ampproject.org *.amxrtb.com *.aniview.com *.aol.com *.appnexus.com *.aps.amazon.com *.aralego.com *.avantisvideo.com *.axonix.com *.beachfront.com *.behave.com *.betweendigital.com *.bidmachine.io *.bidstreammedia.com *.bidtellect.com *.bing.com *.blis.com *.braintreegateway.com *.brid.tv *.brightcove.com *.brightcove.net *.chocolateplatform.com *.clarity.ms *.cloudflare.com *.cloudfront.net *.consumable.com *.contextweb.com *.conversantmedia.com *.crazyegg.com *.criteo.com *.criteo.net *.districtm.io *.doubleclick.net *.doubleverify.com *.e-planning.net *.e-volution.ai *.emxdgt.com *.engagebdr.com *.eskimi.com *.exponential.com *.facebook.com *.facebook.net *.fastclick.net *.freewheel.tv *.google-analytics.com *.google.ad *.google.ae *.google.al *.google.am *.google.as *.google.at *.google.az *.google.ba *.google.be *.google.bf *.google.bg *.google.bi *.google.bj *.google.bs *.google.bt *.google.by *.google.ca *.google.cat *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.cl *.google.cm *.google.cn *.google.co.ao *.google.co.bw *.google.co.ck *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ls *.google.co.ma *.google.co.mz *.google.co.nz *.google.co.th *.google.co.tz *.google.co.ug *.google.co.uk *.google.co.uz *.google.co.ve *.google.co.vi *.google.co.za *.google.co.zm *.google.co.zw *.google.com *.google.com.af *.google.com.ag *.google.com.ai *.google.com.ar *.google.com.au *.google.com.bd *.google.com.bh *.google.com.bn *.google.com.bo *.google.com.br *.google.com.bz *.google.com.co *.google.com.cu *.google.com.cy *.google.com.do *.google.com.ec *.google.com.eg *.google.com.et *.google.com.fj *.google.com.gh *.google.com.gi *.google.com.gt *.google.com.hk *.google.com.jm *.google.com.kh *.google.com.kw *.google.com.lb *.google.com.ly *.google.com.mm *.google.com.mt *.google.com.mx *.google.com.my *.google.com.na *.google.com.ng *.google.com.ni *.google.com.np *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.com.pr *.google.com.py *.google.com.qa *.google.com.sa *.google.com.sb *.google.com.sg *.google.com.sl *.google.com.sv *.google.com.tj *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.uy *.google.com.vc *.google.com.vn *.google.cv *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.dz *.google.ee *.google.es *.google.fi *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.gl *.google.gm *.google.gr *.google.gy *.google.hn *.google.hr *.google.ht *.google.hu *.google.ie *.google.im *.google.iq *.google.is *.google.it *.google.je *.google.jo *.google.kg *.google.ki *.google.kz *.google.la *.google.li *.google.lk *.google.lt *.google.lu *.google.lv *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.mn *.google.ms *.google.mu *.google.mv *.google.mw *.google.ne *.google.nl *.google.no *.google.nr *.google.nu *.google.pl *.google.pn *.google.ps *.google.pt *.google.ro *.google.rs *.google.ru *.google.rw *.google.sc *.google.se *.google.sh *.google.si *.google.sk *.google.sm *.google.sn *.google.so *.google.sr *.google.st *.google.td *.google.tg *.google.tl *.google.tm *.google.tn *.google.to *.google.tt *.google.vg *.google.vu *.google.ws *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com *.gstatic.com *.gumgum.com *.id5-sync.com *.improvedigital.com *.indexexchange.com *.infolinks.com *.inmobi.com *.inskinmedia.com *.instagram.com *.insticator.com *.jquery.com *.kargo.com *.launchdarkly.com *.lemmatechnologies.com *.lijit.com *.lkqd.com *.lkqd.net *.logan.ai *.loopme.com *.marketo.net *.media.net *.mediago.io *.mediatradecraft.com *.moatads.com *.mobfox.com *.mobileadtrading.com *.my.com *.my6sense.com *.narrativ.com *.nativo.com *.newrelic.com *.nr-data.net *.ogury.com *.onetag.com *.openexchangerates.org *.openx.com *.outbrain.com *.playbuzz.com *.pokkt.com *.prodooh.com *.proper.io *.pubmatic.com *.pubnative.net *.px-cdn.net *.quantcount.com *.quantserve.com *.realself.com *.revcontent.com *.rhythmone.com *.richaudience.com *.risecodes.com *.rlcdn.com *.rsdev.co *.rubiconproject.com *.s-onetag.com *.sharethrough.com *.smaato.com *.smartadserver.com *.smartclip.net *.smartyads.com *.snapengage.com *.somoaudience.com *.sonobi.com *.sovrn.com *.speedcurve.com *.spotx.tv *.spotxchange.com *.springserve.com *.ssp.e-volution.ai *.ssp.logan.ai *.stackadapt.com *.synacor.com *.target.my.com *.teads.tv *.telaria.com *.themediagrid.com *.tremorhub.com *.tribalfusion.com *.triplelift.com *.typekit.net *.ucfunnel.com *.undertone.com *.unrulymedia.com *.vdopia.com *.velismedia.com *.verve.com *.video.unrulymedia.com *.vidoomy.com *.yahoo.com *.yieldmo.com *.zencdn.net btloader.com openexchangerates.org ep2.adtrafficquality.google blob:; worker-src 'self' blob:; frame-ancestors *; form-action *; report-uri https://api.realself.com/v1/rs-csp-sc/csp-info; report-to security-report 1
default-src 'self'; frame-src 'self' https://datawrapper.dwcdn.net https://js.stripe.com https://www.youtube.com https://platform.twitter.com; worker-src blob:; connect-src 'self' data: wss://ws.datawrapper.de https://pwk.datawrapper.de https://*.cloudfront.net https://*.sentry.io https://*.gstatic.com https://static.dwcdn.net https://datawrapper.dwcdn.net https://tiles.dwcdn.net https://comments.datawrapper.de https://staging-chart-tests.s3.eu-central-1.amazonaws.com https://fonts.googleapis.com/ https://app.datawrapper.de https://i.datawrapper.de  app.datawrapper.de ; font-src 'self' data: https://static.dwcdn.net https://fonts.gstatic.com https://fonts.dwcdn.net ; img-src * data: blob:; media-src * data:; script-src 'self' 'unsafe-eval' https://appsforoffice.microsoft.com https://datawrapper.dwcdn.net https://pwk.datawrapper.de 'nonce-v/GxorxoUavb4xgIqFAdTA=='; script-src-elem 'self' https://pwk.datawrapper.de https://js.stripe.com https://appsforoffice.microsoft.com https://platform.twitter.com https://pt.dwcdn.net https://datawrapper.dwcdn.net/ https://app.datawrapper.de  'nonce-v/GxorxoUavb4xgIqFAdTA=='; script-src-attr 'unsafe-inline'; style-src 'unsafe-inline' https://fonts.googleapis.com https://datawrapper.dwcdn.net https://static.dwcdn.net https://pt.dwcdn.net; style-src-elem 'self' 'unsafe-inline' https://static.dwcdn.net https://fonts.googleapis.com https://pt.dwcdn.net https://datawrapper.dwcdn.net 1
style-src-elem 'unsafe-inline' cdn.listrakbi.com *.googleapis.com *.livehelpnow.net *.shipperhq.com tcc.test cary.test *.userway.org thecarycompany.com *.thecarycompany.com; font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com data: *.hawksearch.com *.hawksearch.net *.userway.org *.livehelpnow.net *.shipperhq.com *.gstatic.com *.googleapis.com tcc.test cary.test *.thecarycompany.com thecarycompany.com fonts.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net player.vimeo.com https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com www.googletagmanager.com *.certcapture.com data: *.avis-verifies.com *.livechatinc.com *.shipperhq.com *.userway.org *.trustpilot.com guarantee-cdn.com *.pinterest.com *.google.com services.listrak.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com https://www.googletagmanager.com/ pay.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com validator.swagger.io *.certcapture.com tcc.test cary.test *.thecarycompany.com www.thecarycompany.com *.adobedtm.com *.wistia.com *.wistia.net *.akamaihd.net seal-chicago.bbb.org *.listrakbi.com maps.gstatic.com *.bing.com *.linkedin.com *.google.com *.googleapis.com nsg.symantec.com tcs-analytics-tracker.now.sh tcs-analytics-tracker.vercel.app guarantee-cdn.com www.facebook.com hn.inspectlet.com thecarycompany.com *.livehelpnow.net googleadservices.com *.cookielaw.org *.userway.org http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.gstatic.com connect.facebook.net graph.facebook.com business.facebook.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.magento-datasolutions.com https://rum.hlx.page *.certcapture.com 'unsafe-inline' data: *.wistia.com *.wistia.net seal-chicago.bbb.org *.listrakbi.com nsg.symantec.com *.online-metrix.net *.shipperhq.com *.authorize.net secure.authorize.net test.authorize.net *.licdn.com *.chatservice.co *.inspectlet.com www.facebook.com *.msecnd.net *.bing.com *.doubleclick.net *.google.com *.googleadservices.com *.google-analytics.com *.googlecommerce.com *.googletagmanager.com *.googleapis.com *.gstatic.com guarantee-cdn.com *.cardinalcommerce.com.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trustpilot.com *.cookielaw.org *.userway.org *.livehelpnow.net *.sentry-cdn.com *.thomasnet.com ip.convirza.com tcc.test cary.test thecarycompany.com *.thecarycompany.com cdn.jsdelivr.net *.pinimg.com *.fontawesome.com *.pinterest.com services.listrak.com testflex.cybersource.com flex.cybersource.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ pay.google.com x.klarnacdn.net connect.facebook.net graph.facebook.com business.facebook.com assets.shipperhq.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com data: *.listrakbi.com *.shipperhq.com *.userway.org *.livehelpnow.net tcc.test cary.test *.googleapis.com *.thecarycompany.com thecarycompany.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com data: *.wistia.com *.wistia.net *.akamaihd.net *.userway.org tcc.test cary.test *.thecarycompany.com thecarycompany.com *.livehelpnow.net http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.magento-datasolutions.com *.magento-ds.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.certcapture.com data: *.wistia.com *.litix.io *.shipperhq.com wss://rms.shipperhq.com *.doubleclick.net *.chatservice.co *.inspectlet.com ws.inspectlet.com tcs-analytics-tracker.now.sh tcs-analytics-tracker.vercel.app *.google.com *.googleapis.com *.bing.com *.trustpilot.com *.cookielaw.org developer.livehelpnow.net *.userway.org *.livehelpnow.net wss://app.livehelpnow.net ip.convirza.com dni.logmycalls.com tcc.test cary.test *.thecarycompany.com thecarycompany.com geolocation.onetrust.com *.linkedin.com *.pinterest.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com ovs.shipperhq.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://5502b8453f99696234832a80aaf978ec.report-uri.com/r/d/csp/reportOnly; report-to report-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-1E24L6kkj6vtaFaZzOkoJg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com; script-src https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com 'unsafe-inline' 'unsafe-eval'; style-src https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com 'unsafe-inline'; report-uri /1/batch/2/OE/mid=ATVPDKIKX0DER:sid=137-6143812-8013437:rid=612FX54X0H6H3JHM36ST:sn=kdp.amazon.com 1
frame-ancestors 'self' https://stage.lovdata.no https://smia.lovdata.no/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://*.flybreeze.com https://googleads.g.doubleclick.net https://connect.facebook.net https://growthbook-production.flybreeze.com https://dx.mountain.com https://gs.mountain.com https://px.mountain.com https://www.googletagmanager.com https://cdn.gladly.com https://pixel.mathtag.com https://js.adsrvr.org https://cdn.uplift-platform.com https://tag.uplift.com https://cdn.uplift.com https://analytics.tiktok.com https://script.hotjar.com https://static.hotjar.com https://bat.bing.com https://pixel.byspotify.com https://s.pinimg.com https://ct.pinterest.com https://cdnjs.cloudflare.com https://www.gstatic.com https://ads.nextdoor.com https://www.redditstatic.com https://app.termly.io https://script.gethovr.com https://www.securitytrfx.com https://socialladder.rkiapps.com https://sentry.flybreeze.team https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://www.gstatic.com; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; connect-src 'self' https://*.flybreeze.com https://sentry.flybreeze.team https://graphql.contentful.com https://*.nr-data.net https://www.googletagmanager.com https://www.redditstatic.com https://cdn.gladly.com https://flybreeze.gladly.com https://socialladder.rkiapps.com https://challenges.cloudflare.com; img-src 'self' https://*.flybreeze.com https://images.ctfassets.net https://googleads.g.doubleclick.net https://connect.facebook.net https://www.gstatic.com https://cdn.gladly.com https://flybreeze.gladly.com https://www.redditstatic.com https://s.pinimg.com https://pixel.mathtag.com https://analytics.tiktok.com https://bat.bing.com https://pixel.byspotify.com https://ct.pinterest.com https://script.hotjar.com https://static.hotjar.com https://www.securitytrfx.com https://challenges.cloudflare.com; object-src 'none'; media-src 'self' https://videos.ctfassets.net; frame-src 'self' https://*.flybreeze.com https://www.googletagmanager.com https://www.redditstatic.com https://www.securitytrfx.com https://challenges.cloudflare.com; child-src 'self' https://challenges.cloudflare.com; frame-ancestors 'self' https://go.flybreeze.dev https://crewapp-staging.flybreeze.team https://clerk.docs.flybreeze.dev https://docs.flybreeze.dev https://flight-info.flybreeze.team; manifest-src 'self'; report-uri https://csp-flybreeze.domdog.io/report-uri/flybreeze.com/1/1-4; report-to csp-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://static.hotjar.com https://snap.licdn.com https://js.monitor.azure.com https://js.qualified.com https://cdn.hockeystack.com https://*.marketo.com https://*.bizible.com https://*.vwo.com https://*.drift.com https://*.demandbase.com https://*.conductor.com https://*.seismic.com; connect-src 'self' https://*.marketo.com https://*.bizible.com https://*.google-analytics.com https://*.hotjar.com https://*.qualified.com https://*.demandbase.com https://*.vwo.com https://*.hockeystack.com https://*.drift.com https://*.conductor.com https://*.seismic.com; img-src 'self' data: https://*.googleusercontent.com https://*.gravatar.com https://*.marketo.com https://*.bizible.com https://*.qualified.com https://*.hockeystack.com https://*.conductor.com https://*.seismic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; frame-ancestors 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://cdn.tagdeliver.com https://cdn.privacy-mgmt.com https://static.chartbeat.com https://www.npttech.com https://cdn.piano.io https://api-eu.piano.io https://cdn.cxense.com https://comcluster.cxense.com https://id.cxense.com https://connect.facebook.net https://www.facebook.com https://www.facebook.net https://staticxx.facebook.com https://www.google-analytics.com https://ssl.google-analytics.com https://va.vercel-scripts.com https://securepubads.g.doubleclick.net https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://ep2.adtrafficquality.google https://apis.google.com https://snap.licdn.com https://sitepixel.blis.com https://berrythompson.innocraft.cloud https://www.youtube.com https://tpc.googlesyndication.com https://static2.chartbeat.com https://js.stripe.com https://tortoise.supportingcast.fm https://cdn2.amuselabs.com https://*.skimresources.com; connect-src 'self' https://*.googleapis.com https://*.firebaseio.com wss://*.firebaseio.com https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://www.google.com https://www.facebook.com https://www.facebook.net https://graph.facebook.com https://connect.facebook.net https://mpc2-prod-26-is5qnl632q-uc.a.run.app https://px.ads.linkedin.com https://content-api.slowdownwiseup.co.uk https://cdn.slowdownwiseup.co.uk https://cdn.privacy-mgmt.com https://cdn.tagdeliver.com https://log.tagdeliver.com https://uc.tagdeliver.com https://mab.chartbeat.com https://comcluster.cxense.com https://tr.blismedia.com https://berrythompson.innocraft.cloud https://api-eu.piano.io https://api-eu.piano.io https://c2-eu.piano.io https://ping.chartbeat.net https://ingress.pressreader.com https://vitals.vercel-insights.com https://ad.doubleclick.net https://*.gstatic.com https://api.rollbar.com https://www.googletagmanager.com https://apis.google.com https://s.prcdn.co https://media.supportingcast.fm https://*.skimresources.com https://sl-sentry.skimlinks.com; frame-src 'self' https://cdn.privacy-mgmt.com https://api-eu.piano.io https://api-eu.piano.io https://www.facebook.com https://the-observer-live.firebaseapp.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://cm.g.doubleclick.net https://www.google.com https://cdn.cxense.com https://*.safeframe.googlesyndication.com https://flo.uri.sh https://content-api.slowdownwiseup.co.uk https://www.youtube.com https://www.youtube-nocookie.com https://www.googleadservices.com https://chartbeat.com https://static2.chartbeat.com https://cdn.slowdownwiseup.co.uk https://js.stripe.com https://cdn2.amuselabs.com https://pagead2.googlesyndication.com; img-src 'self' data: https://*.googleapis.com https://*.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.google.co.uk https://www.google.fr https://www.google.ie https://www.google.com.au https://www.facebook.com https://www.facebook.net https://staticxx.facebook.com https://ping.chartbeat.net https://cdn.slowdownwiseup.co.uk https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://ep1.adtrafficquality.google https://cdn.privacy-mgmt.com https://px.ads.linkedin.com https://comcluster.cxense.com https://tr.blismedia.com https://i.prcdn.co https://t.prcdn.co https://ingress-cdn.pressreader.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://connect.facebook.net https://mabping.chartbeat.net https://www.googleadservices.com https://i.ytimg.com blob: https://*.skimresources.com; media-src 'self' https://cdn.slowdownwiseup.co.uk https://the-observer-bucket.eu-central-1.linodeobjects.com https://open.acast.com https://stitcher2.acast.com https://shows.acast.com https://assets.pippa.io https://media.supportingcast.fm; style-src 'self' 'unsafe-inline' https://media.supportingcast.fm https://www.gstatic.com; font-src 'self' data: https://fonts.gstatic.com; worker-src 'self' blob:; report-uri /api/csp-report 1
default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http://*.files.wordpress.com wss://www.vibe.com; report-uri https://pmcuri.report-uri.com/r/d/csp/reportOnly 1
default-src 'self' dev-5847984.okta.com sso.app.elationemr.com *.oktacdn.com; connect-src 'self' dev-5847984.okta.com dev-5847984-admin.okta.com sso.app.elationemr.com *.oktacdn.com *.mixpanel.com *.mapbox.com dev-5847984.kerberos.okta.com https://oinmanager.okta.com data: *.ingest.sentry.io; script-src 'unsafe-inline' 'unsafe-eval' 'self' 'report-sample' dev-5847984.okta.com sso.app.elationemr.com *.oktacdn.com; style-src 'unsafe-inline' 'self' 'report-sample' dev-5847984.okta.com sso.app.elationemr.com *.oktacdn.com; frame-src 'self' dev-5847984.okta.com dev-5847984-admin.okta.com sso.app.elationemr.com login.okta.com *.vidyard.com; img-src 'self' dev-5847984.okta.com sso.app.elationemr.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: blob:; font-src 'self' dev-5847984.okta.com sso.app.elationemr.com data: *.oktacdn.com fonts.gstatic.com; frame-ancestors 'self' https://elationemr.com 1
: default-src 'none'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'unsafe-inline'; frame-ancestors 'self'; form-action 'self' 1
script-src 'self' 'unsafe-inline' 'nonce-2feaf4bc66af2795786a5ee44b22a4c0' *.fontawesome.com *.klaviyo.com connect.facebook.com analytics.tiktok.com www.youtube.com; 1
script-src 'nonce-10wcEziy3V25SIK22YokIXjK' 'strict-dynamic' 'unsafe-eval'; base-uri 'self'; object-src 'none'; 1
object-src 'none';base-uri 'self';script-src 'nonce-L6THLGP-8opoO1_bKClKbw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self';  base-uri 'self';  object-src 'none';  form-action 'self';  frame-ancestors 'self' https://app.contentstack.com https://*.contentstack.com;  script-src 'report-sample' 'self'    https://api.datasteam.io    https://bas.my.site.com    https://bat.bing.com    https://bigassfans.jotform.com    https://cdn-scripts.signifyd.com    https://cdn-widgetsrepository.yotpo.com    https://cdn.optimizely.com    https://cdn1.affirm.com    https://cdn11.bigcommerce.com    https://c.lytics.io    https://fast.wistia.com    https://googleads.g.doubleclick.net    https://h64.online-metrix.net    https://imgs.signifyd.com    https://js.adsrvr.org    https://maps.googleapis.com    https://schedule.zoominfo.com    https://static-tracking.klaviyo.com    https://static.klaviyo.com    https://static.zip.co    https://tags.clickagy.com    https://ws-assets.zoominfo.com    https://www.google.com    https://www.googletagmanager.com    https://www.gstatic.com;  style-src 'report-sample' 'self' 'unsafe-inline'    https://bas.my.site.com    https://fonts.googleapis.com    https://p.typekit.net    https://static.klaviyo.com    https://use.typekit.net;	style-src-attr 'unsafe-inline';  img-src 'self' data:    https://d3k81ch9hvuctc.cloudfront.net    https://aorta.clickagy.com    https://arttrk.com    https://baf-components.vercel.app    https://bat.bing.com    https://bigassfans.widen.net    https://c.az.contentsquare.net    https://cdn-assets.affirm.com    https://cdn11.bigcommerce.com    https://cdnjs.cloudflare.com    https://fast.wistia.com    https://googleads.g.doubleclick.net    https://imgs.signifyd.com    https://insight.adsrvr.org    https://maps.gstatic.com    https://p.yotpoapi.com    https://w2txo5aay72edbfvk5vttw2iroublbcesxwkwjodcca70f743d31d725sac.d.aa.online-metrix.net    https://www.facebook.com    https://www.google.com    https://www.googletagmanager.com    https://www.gstatic.com;  connect-src 'self'    https://a.klaviyo.com    https://ad.doubleclick.net    https://analytics.google.com    https://aorta.clickagy.com    https://api-cdn.yotpo.com    https://bam.nr-data.net    https://bas.my.salesforce-scrt.com    https://bat.bing.com    https://c.az.contentsquare.net    https://cdn-assets.affirm.com    https://distillery.wistia.com    https://dp.signifyd.com    https://embed-cloudfront.wistia.com    https://fast.a.klaviyo.com    https://fast.wistia.com    https://featureassets.org    https://imgs.signifyd.com    https://insight.adsrvr.org    https://logx.optimizely.com    https://pay.google.com    https://pipedream.wistia.com    https://pixels.spotify.com    https://prodregistryv2.org    https://static-forms.klaviyo.com    https://statsigapi.net    https://ws.zoominfo.com    https://www.affirm.com    https://www.google.com    https://www.googleadservices.com    https://www.googletagmanager.com    https://www.google-analytics.com    https://www.paypal.com;  frame-src 'self'    https://a27947990225.cdn.optimizely.com    https://bas.my.site.com    https://h.online-metrix.net    https://imgs.signifyd.com    https://insight.adsrvr.org    https://match.adsrvr.org    https://www.affirm.com    https://www.facebook.com    https://www.google.com    https://www.googletagmanager.com    https://www.paypal.com    https://*.fls.doubleclick.net    https://*.doubleclick.net    https://bigassfans.widen.net;  font-src 'self' https://fonts.gstatic.com data: https://use.typekit.net;  media-src 'self'    https://bigassfans.widen.net;  manifest-src 'self';  worker-src 'self';  report-to csp-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://consent.cookiebot.com https://privacy-analytics-proxy.cookiebot.com https://www.googletagmanager.com https://www.google-analytics.com https://js.hsforms.net https://js.hs-scripts.com https://js.hs-analytics.net https://js.hscollectedforms.net https://js.hs-banner.com https://cdn.dreamdata.cloud; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.hsforms.net https://*.hubspot.com; img-src 'self' data: https: blob:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://consentcdn.cookiebot.com https://www.google-analytics.com https://api.hsforms.com https://forms.hsforms.com https://forms.hubspot.com https://*.hubspot.com https://*.hsforms.net https://boards-api.greenhouse.io https://cdn.dreamdata.cloud https://t.dreamdata.cloud; frame-src https://www.youtube.com https://player.vimeo.com https://*.hsforms.net https://*.hubspot.com https://*.hs-scripts.com https://consent.cookiebot.com https://consentcdn.cookiebot.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://api.hsforms.com https://forms.hsforms.com 1
object-src 'none'; script-src 'self' 'report-sample' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://d36hc0p18k1aoc.cloudfront.net https://unpkg.com; style-src 'self' 'report-sample' cdnjs.cloudflare.com https://cdnjs.cloudflare.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.sandbox.my.site.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com www.google.com *.doubleclick.net *.facebook.com https://www.avanci.fr 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com https://*.pricespider.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.force.com *.my.salesforce.com *.salesforceliveagent.com *.my.salesforce-sites.com https://sbmlifescience.my.site.com https://www.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com display.ugc.bazaarvoice.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.salesforce.com *.force.com *.sandbox.my.site.com *.pricespider.com *.my.salesforce-sites.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.facebook.com *.facebook.net *.salesforce-scrt.com *.bazaarvoice.com *.pricespider.com *.my.salesforce-sites.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce--h2kUOA5-NwHOGWw0ow5yg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https://*.googleapis.com https://*.google.com https://google.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://stats.g.doubleclick.net https://region1.google-analytics.com https://region1.analytics.google.com https://*.hubspot.com https://app.hubspot.com https://api.hubspot.com https://*.hs-scripts.com https://js-na1.hs-scripts.com https://*.hs-banner.com https://js.hs-banner.com https://*.hscollectedforms.net https://forms.hscollectedforms.net https://*.hs-analytics.net https://*.hsadspixel.net https://*.website-files.com https://cdn.prod.website-files.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://assets.calendly.com https://*.linkedin.com https://get.geojs.io https://api.hubapi.com https://api.murf.ai https://login.murf.ai https://murf.ai https://d3e54v103j8qbb.cloudfront.net https://www.googletagmanager.com https://js.hscollectedforms.net https://js.hsadspixel.net https://js.hs-analytics.net https://js.usemessages.com https://snap.licdn.com https://tracking.g2crowd.com https://tracking-api.g2.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://api.factors.ai https://app.factors.ai https://*.clarity.ms https://bat.bing.com https://bat.bing.net https://www.google-analytics.com https://connect.facebook.net https://www.gstatic.com https://cdn.embedly.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.googleapis.com https://*.google.com https://google.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://stats.g.doubleclick.net https://region1.google-analytics.com https://region1.analytics.google.com https://*.hubspot.com https://app.hubspot.com https://*.hs-scripts.com https://js-na1.hs-scripts.com https://*.website-files.com https://cdn.prod.website-files.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://assets.calendly.com https://*.linkedin.com https://login.murf.ai https://d3e54v103j8qbb.cloudfront.net https://www.googletagmanager.com https://js.hscollectedforms.net https://js.hsadspixel.net https://js.hs-analytics.net https://js.hs-banner.com https://js.usemessages.com https://snap.licdn.com https://tracking.g2crowd.com https://www.googleadservices.com https://app.factors.ai https://*.clarity.ms https://bat.bing.com https://bat.bing.net https://connect.facebook.net https://www.gstatic.com https://cdn.embedly.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.google.com https://accounts.google.com https://*.website-files.com https://cdn.prod.website-files.com https://assets.calendly.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.gstatic.com https://cdn.embedly.com; font-src 'self' data: https:; img-src 'self' data: https: blob:; media-src 'self' data: blob: https://murf.ai; connect-src 'self' blob: data: https://*.googleapis.com https://*.google.com https://google.com https://stats.g.doubleclick.net https://region1.google-analytics.com https://region1.analytics.google.com https://*.hubspot.com https://app.hubspot.com https://api.hubspot.com https://*.hs-scripts.com https://*.hs-banner.com https://js.hs-banner.com https://*.hscollectedforms.net https://forms.hscollectedforms.net https://*.linkedin.com https://get.geojs.io https://api.hubapi.com https://api.murf.ai https://login.murf.ai https://murf.ai https://cdn.prod.website-files.com https://tracking-api.g2.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://api.factors.ai https://*.clarity.ms https://bat.bing.com https://bat.bing.net https://www.google-analytics.com https://connect.facebook.net https://cdn.embedly.com https://webflow.com; frame-src 'self' https://*.google.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://*.hubspot.com https://app.hubspot.com https://assets.calendly.com https://calendly.com https://login.murf.ai https://cdn.embedly.com; report-uri https://o4504603155759104.ingest.us.sentry.io/api/4509798552305664/security/?sentry_key=05d6eb750229178df61a908e1a0ed8fd; report-to csp-endpoint 1
object-src 'none';base-uri 'self';script-src 'nonce-VVWPNJmfV2oAgnB3e-ga1Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com *.narvar.com *.narvar.qa *.sitevibes.com sitevibes.com *.acquiadam.net *.acquiadamcdn.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.adyen.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.nosto.com *.nos.to *.sitevibes.com sitevibes.com 'self' 'unsafe-inline'; frame-ancestors www.google.com flexreceipts.go2cloud.org app.webeyez.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.adyen.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.nosto.com *.nos.to *.trustpilot.com *.sitevibes.com sitevibes.com *.acquiadam.net *.acquiadamcdn.net https://oc-cdn-ocprod.azureedge.net/livechatwidget/ https://community.511tactical.com/ https://locator.511tactical.com/ *.doubleclick.net *.liadm.com assets.bounceexchange.com flexreceipts.go2cloud.org https://tally.so/ *.pinterest.com *.webeyez.com webeyez.blob.core.windows.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.adyen.com *.tiktok.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca https://s3.amazonaws.com/idme/ *.narvar.com *.narvar.qa *.nosto.com *.nos.to *.sitevibes.com sitevibes.com *.acquiadam.net *.acquiadamcdn.net *.dynamicyield.com *.riskified.com https://oc-cdn-ocprod.azureedge.net/livechatwidget/ *.511tactical.com *.usablenet.com *.cookielaw.org *.bing.com *.googlesyndication.com *.contextweb.com *.creativecdn.com *.bouncex.net *.pippio.com *.nextdoor.com *.linkedin.com *.twitter.com *.x.com t.co *.lightboxcdn.com *.cdnwidget.com *.attentivemobile.com tactical511.widen.net *.cartfulsolutions.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.adyen.com https://rum.hlx.page *.tiktok.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.attn.tv events.attentivemobile.com *.nosto.com *.nos.to *.trustpilot.com *.sitevibes.com sitevibes.com *.acquiadam.net *.acquiadamcdn.net *.dynamicyield.com *.riskified.com https://oc-cdn-ocprod.azureedge.net/livechatwidget/ *.googleapis.com https://unpkg.com *.cookielaw.org *.clarity.ms js-agent.newrelic.com bam.nr-data.net *.bing.com *.boomtrain.com *.bounceexchange.com *.rezync.com *.nextdoor.com *.pinterest.com s.pinimg.com *.liadm.com *.lightboxcdn.com *.usablenet.com *.wknd.ai *.webeyez.com webeyez.blob.core.windows.net *.cartfulsolutions.com https://www.511tactical.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.nosto.com *.nos.to *.trustpilot.com *.sitevibes.com sitevibes.com *.acquiadam.net *.acquiadamcdn.net https://oc-cdn-ocprod.azureedge.net/livechatwidget/ *.typekit.net *.googletagmanager.com https://tagmanager.google.com *.bounceexchange.com *.lightboxcdn.com *.cartfulsolutions.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.narvar.com *.narvar.qa *.acquiadam.net *.acquiadamcdn.net d3q7qtc29ejstr.cloudfront.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.adyen.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.tiktok.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.attn.tv events.attentivemobile.com *.nosto.com *.nos.to *.sitevibes.com sitevibes.com *.acquiadam.net *.acquiadamcdn.net *.dynamicyield.com *.riskified.com *.trustpilot.com *.googleapis.com *.cookielaw.org *.clarity.ms bam.nr-data.net *.bing.org *.bing.com *.boomtrain.com *.creativecdn.com *.attentivemobile.com *.tiktokw.us *.linkedin.com *.pinterest.com *.spotify.com *.webeyez.com webeyez.blob.core.windows.net *.cartfulsolutions.com 'self' 'unsafe-inline'; child-src flexreceipts.go2cloud.org http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://a4f7e632-ca01-49b1-9c8a-cdf130c36284.sansec.watch/; report-to report-endpoint; 1
script-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' https://www.google.com/recaptcha/api.js https://www.googletagmanager.com https://polyfill.io https://www.youtube.com https://iframe.dacast.com https://vimeo.com https://player.vimeo.com https://cdn.usefathom.com/script.js https://cc.cdn.civiccomputing.com/9/cookieControl-9.x.min.js https://analytics.ahrefs.com/analytics.js https://wttc.activehosted.com 'nonce-YIEzmaxDVh231zxUljsSsgXuCesbTzPCUjOdmAQSDGM='; img-src 'self' https:; connect-src 'self' https:; frame-src 'self' https://www.google.com https://www.youtube.com https://iframe.dacast.com https://vimeo.com https://player.vimeo.com https://gtm-knbshpt-zmy5y.uc.r.appspot.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/css2 https://use.typekit.net https://p.typekit.net https://fonts.bunny.net; font-src 'self' https: data: 1
object-src 'none';base-uri 'self';script-src 'nonce-HTvhZL_MjDkwfZCmSZrhuw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'nonce-cJJ7hLtu/6SqbcTQYonpbg==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https://events.mercadolibre.com/csp/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=3812d4ff-0a0b-4f87-808e-0fa21d0396ac; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https://http2.mlstatic.com/ https://mlstaticquic-a.akamaihd.net/; frame-ancestors 'self' https://*.mercadolibre.cl:* https://*.mercadolibre.com:* https://*.mercadolibre.com.ve:* https://*.mercadolibre.com.ar:* https://*.mercadolivre.com.br:* https://*.mercadolibre.com.co:* https://*.mercadolibre.com.ec:* https://*.mercadolibre.com.mx:* https://*.mercadolibre.com.pe:* https://*.mercadolibre.com.uy:* https://*.mercadopago.cl:* https://*.mercadopago.com.ar:* https://*.mercadopago.com.br:* https://*.mercadopago.com.co:* https://*.mercadopago.com.mx:* https://*.mercadopago.com.pe:* https://*.mercadopago.com.uy:* https://*.mercadopago.com.ve:* https://*.mercadopago.com:* https://*.adminml.com:* https://*.mercadolibre.co.cr:* https://*.mercadolibre.com.pa:* https://*.mercadolibre.com.do:* https://*.mercadolibre.com.bo:* https://*.mercadolibre.com.py:* https://*.mercadolibre.com.gt:* https://*.mercadolibre.com.hn:* https://*.mercadolibre.com.ni:* https://*.mercadolibre.com.sv:* https://*.mercadopago.com.ec:* https://*.portalinmobiliario.com:* https://*.mercadolivre.com:* 1
object-src 'none';base-uri 'self';script-src 'nonce-ehjSNVt_IKUWo0lQvHadoQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
base-uri 'none'; connect-src 'self' https://region1.google-analytics.com https://pagead2.googlesyndication.com https://www.googletagmanager.com https://cdn-ukwest.onetrust.com https://privacyportal-uk.onetrust.com https://geolocation.onetrust.com; default-src 'none'; font-src 'self'; form-action 'none'; frame-ancestors 'none'; frame-src 'none'; img-src 'self' data: https://cdn-ukwest.onetrust.com https://www.googletagmanager.com https://pagead2.googlesyndication.com; media-src data: 'self'; object-src 'none'; report-to csp-report-endpoint; report-uri https://www.msc.org/csp/report; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://cdnjs.cloudflare.com https://cdn-ukwest.onetrust.com https://ajax.aspnetcdn.com https://www.google-analytics.com; style-src 'unsafe-inline' 'self' https://cdn-images.mailchimp.com; worker-src 'none' 1
default-src https: 'unsafe-inline' 'unsafe-eval'; img-src https: 'self' data:; font-src https: 'self' data:; 1
object-src 'none';base-uri 'self';script-src 'nonce-0n89DjOH-sbnVL9x011v4A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-marketing/about_youtube 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://*.hs-scripts.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hsforms.net https://*.hsforms.com https://*.hubspot.com https://*.hsadspixel.net https://*.usemessages.com https://*.hscollectedforms.net https://*.posthog.com https://va.vercel-scripts.com https://vercel.live https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://*.hubspot.com https://*.hsforms.com; img-src 'self' https: data: blob:; font-src 'self' data: https://*.hubspot.com https://*.hsforms.com; connect-src 'self' https://5dcouzig.api.sanity.io https://5dcouzig.apicdn.sanity.io wss://5dcouzig.api.sanity.io https://cdn.sanity.io https://*.hubspot.com https://*.hsforms.com https://*.hs-analytics.net https://*.hscollectedforms.net https://*.posthog.com https://vitals.vercel-insights.com https://va.vercel-scripts.com https://vercel.live https://challenges.cloudflare.com; media-src 'self' https://*.public.blob.vercel-storage.com; worker-src 'self' blob:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://*.hubspot.com https://*.hsforms.com https://vercel.live https://challenges.cloudflare.com https://maps.google.com https://www.google.com; frame-ancestors 'self' https://*.sanity.studio https://lowyinstitute.sanity.studio; base-uri 'self'; form-action 'self' https://forms.hsforms.com https://*.hubspot.com; object-src 'none'; upgrade-insecure-requests 1
frame-ancestors 'self' https://app.datadoghq.com/ https://app.contentful.com; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubce3f3f19a3c7fcb81c0e6b27dbde95e1&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env%3Agrow-monolith-prod; report-to csp-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.userway.org https://www.googletagmanager.com https://siteimproveanalytics.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.sitecorecloud.io https://cdn.userway.org; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https: http://bcorgwtrss01.broward.org; connect-src 'self' https://*.userway.org https://edge.sitecorecloud.io https://*.sitecorecloud.io https://*.sitecorecontenthub.cloud https://www.googletagmanager.com https://analytics.google.com https://stats.g.doubleclick.net https://api.communico.co https://api.open-meteo.com https://nominatim.openstreetmap.org https://api.vimeo.com https://open.spotify.com https://api.spotify.com https://api-partner.spotify.com https://spclient.wg.spotify.com https://gew-spclient.spotify.com https://apresolve.spotify.com https://broward.ent.sirsi.net http://tracker.flightview.com https://siteimproveanalytics.com https://cloudflareinsights.com; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://open.spotify.com https://www.google.com https://maps.google.com https://cdn.userway.org; frame-ancestors 'self' https://*.sitecorecloud.io; object-src 'none'; base-uri 'self' 1
script-src 'strict-dynamic' 'self' https: 'nonce-dffd5237567fcddf8de6195731dcbcbcdf5c1ce29c1909e7'; script-src-elem 'self' 'nonce-dffd5237567fcddf8de6195731dcbcbcdf5c1ce29c1909e7'; object-src 'none'; base-uri 'none'; report-to csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://www.googletagmanager.com https://canny.io https://*.datagrail.io https://solve-widget.forethought.ai; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://www.googletagmanager.com https://fonts.gstatic.com https://*.recraft.ai https://static.recraft.ai https://analytics.twitter.com https://ads-twitter.com https://ads-api.twitter.com; font-src 'self' https://fonts.gstatic.com data: https://static.recraft.ai; media-src 'self' blob: data: https://*.recraft.ai https://static.recraft.ai https://reexternal.blob.core.windows.net; connect-src 'self' https://*.recraft.ai wss://*.recraft.ai https://*.ingest.sentry.io https://www.googletagmanager.com https://www.google-analytics.com https://*.amplitude.com https://api.canny.io https://fonts.gstatic.com https://static.recraft.ai https://solve-widget.forethought.ai https://reexternal.blob.core.windows.net https://analytics.twitter.com https://ads-twitter.com https://ads-api.twitter.com; frame-src 'self' https://id.recraft.ai https://www.googletagmanager.com https://www.youtube.com https://changelog-widget.canny.io https://solve-widget.forethought.ai; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; report-uri https://api.recraft.ai/csp-report 1
default-src 'self' https: data: blob:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' blob:; script-src-elem 'self' https: 'unsafe-inline' blob:; style-src 'self' https: 'unsafe-inline' data: blob:; style-src-elem 'self' https: 'unsafe-inline' data: blob:; img-src 'self' https: data: blob:; font-src 'self' https: data: blob: chrome-extension: moz-extension: ms-browser-extension: safari-extension:; connect-src 'self' https: data: wss: blob: https://analytics.formassembly.com; frame-ancestors 'self' https://*.lightning.force.com https://*.sandbox.lightning.force.com https://*.develop.lightning.force.com https://*.scratch.lightning.force.com https://*.vf.force.com https://*.sandbox.vf.force.com https://*.develop.vf.force.com https://*.scratch.vf.force.com https://*.lightning.crmforce.mil https://*.sandbox.lightning.crmforce.mil https://*.develop.lightning.crmforce.mil https://*.scratch.lightning.crmforce.mil https://*.vf.crmforce.mil https://*.sandbox.vf.crmforce.mil https://*.develop.vf.crmforce.mil https://*.scratch.vf.crmforce.mil https://*.my.salesforce-sites.com https://*.sandbox.my.salesforce-sites.com https://*.my.site.com https://*.sandbox.my.site.com; form-action 'self' https:; worker-src 'self' blob:; report-uri /api_v2/csp/report 1
base-uri 'none'; default-src 'self'; script-src 'report-sample' 'self' 'unsafe-inline' https://cdn.heapanalytics.com https://distillery.wistia.com/x https://matillion.ddev.site:3000/ wss://matillion.ddev.site:3000 https://fast.wistia.com https://www.googletagmanager.com https://cdn.heapanalytics.com/js/heap-1873293713.js https://cdn.iubenda.com/cs/iubenda_cs.js https://connect.facebook.net/en_US/fbevents.js https://content.cdntwrk.com/components/website-widget/v1/118604/widget.js https://fast.wistia.com/assets/external/E-v1.js https://googleads.g.doubleclick.net/pagead/viewthroughconversion/848565924/ https://in.ml314.com/ud.ashx https://js.driftt.com/include/1688577300000/vh948h8ntehg.js https://js.intercomcdn.com/vendor-modern.255c4d36.js https://lift-ai-js.marketlinc.com/www.matillion.com/deployment.js https://ml314.com/tag.aspx https://munchkin.marketo.net/munchkin.js https://okt.to/ping https://pages.matillion.com/js/forms2/js/forms2.min.js https://script.hotjar.com/modules.832d10fb416834285523.js https://snap.licdn.com/li.lms-analytics/insight.beta.min.js https://static.ads-twitter.com/uwt.js https://static.hotjar.com/c/hotjar-2386626.js https://static.oktopost.com/oktrk.js https://tag.demandbase.com/00a4b81bfa345e5b.min.js https://tracking.g2crowd.com/attribution_tracking/conversions/5351.js https://widget.intercom.io/widget/rjk6vrpn https://www.google-analytics.com/analytics.js https://www.googleadservices.com/pagead/conversion/848565924/ https://www.googletagmanager.com/gtag/js https://www.iubenda.com/cookie-solution/confs/js/48216078.js https://www.redditstatic.com/ads/pixel.js; style-src 'self' 'unsafe-inline' https://p.typekit.net https://pages.matillion.com https://use.typekit.net; img-src 'self' data: 'self' data: https://alb.reddit.com https://analytics.twitter.com https://embed-ssl.wistia.com https://fast.wistia.com https://googleads.g.doubleclick.net https://heapanalytics.com https://id.rlcdn.com https://insight.adsrvr.org https://pubads.g.doubleclick.net https://px.ads.linkedin.com https://t.co https://www.facebook.com https://www.google-analytics.com https://www.google.com; connect-src 'self' https://992-uiw-731.mktoresp.com https://analytics.google.com https://api-iam.intercom.io https://api.company-target.com https://content.hotjar.io https://distillery.wistia.com https://fast.wistia.com https://fg8vvsvnieiv3ej16jby.litix.io https://google.com https://hits-i.iubenda.com https://in.hotjar.com https://metrics.hotjar.io https://stats.g.doubleclick.net https://tag-logger.demandbase.com https://v2.api.uberflip.com https://visitor-scoring-c.marketlinc.com https://www.google-analytics.com https://www.google.com wss://nexus-websocket-a.intercom.io wss://ws.hotjar.com; font-src 'self' 'self' data: https://fast.wistia.com https://use.typekit.net; media-src 'self' blob:; frame-src 'self' 'self' https://12420912.fls.doubleclick.net https://js.driftt.com https://pages.matillion.com https://s.company-target.com https://www.facebook.com; 1
default-src * blob: data: https:; script-src blob: https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; report-uri /veriff-csp-report 1
object-src 'none';base-uri 'self';script-src 'nonce-25b4JfeMq-m0Fcinj9d_VQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' blob:  https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com; frame-src 'self' https://*.noxiaohao.com https://telegram.org https://*.bitget.com https://accounts.google.com https://oauth.telegram.org https://sgtm.btsgtm.com ; script-src 'self' 'nonce-AbT18W2rIVMl26u4CaB8Tw==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh/v3RIRuG3kMikr5iha+7P/0TN/GNA=' https://*.noxiaohao.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com https://accounts.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://play.google.com https://analytics.google.com https://fonts.gstatic.com https://telegram.org https://oauth.telegram.org https://*.geetest.com https://*.geevisit.com https://sgtm.btsgtm.com; connect-src 'self' wss: https://stats.g.doubleclick.net https://analytics.google.com https://www.google.com wss://stream.bitget.cloud https://*.noxiaohao.com wss://*.noxiaohao.com wss://*.bitget.com https://www.turingfraud.net https://play.google.com https://accounts.google.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com https://telegram.org https://oauth.telegram.org https://static.geetest.com https://static.geevisit.com https://sgtm.btsgtm.com ; worker-src 'self' blob:; img-src 'self' data: blob: https://www.googletagmanager.com https://img.bgbstatic.com https://*.bgstatic.com https://img.bitgetimg.com https://img.gurenla.com https://*.bgbstatic.com https://lh3.googleusercontent.com https://static.geetest.com https://static.geevisit.com https://static-web.jjdsn.vip https://cdn.bitkeep.vip https://www.google.co.jp https://bin.wangsustatic.com https://sgtm.btsgtm.com https://analytics.google.com https://stats.g.doubleclick.net ; style-src 'self' 'unsafe-inline' https://static.geetest.com https://static.geevisit.com https://accounts.google.com https://fonts.googleapis.com https://static.bgbstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com; font-src 'self' data: https://static.geetest.com https://static.geevisit.com https://fonts.gstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri /v1/buried/log/cspSecurity /v1/monitor/csp?appId=d4b6df7d; 1
object-src 'none';base-uri 'self';script-src 'nonce-_2rvVTJUljrUy3Tsn0UX_A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http://*.files.wordpress.com wss://www.goldderby.com; report-uri https://pmcuri.report-uri.com/r/d/csp/reportOnly 1
script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=jAPNXRgFE899c1BmhfBiC0tuOjQOOVT.vNj5dJICiMs-1789265873.9566166-1.0.1.1-_cQnhwrR8tB9UPsoFAt_nBF3hrC_k8pc_NUctsXZ8f24TnjBgBlgWMz.jVH8n6kXB0TldrI6pGo9jba8JmJpWWmyIJUVOpmaAuAq4HAKEGGKnzthnkQE7yVT1KOboG9bWuxV4xabVS0_73vcGjS17O1IBfebTiMDnH.WDW.N.vaHm.RMdzG2WFeXtW36OKDq; report-to cf-csp-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://cdn.segment.com https://snap.licdn.com https://plausible.io https://chat.cdn-plain.com; style-src 'self' 'unsafe-inline' https://use.typekit.net; font-src 'self' https://use.typekit.net https://p.typekit.net; img-src 'self' data: blob: https://cdn.sanity.io https://img.youtube.com https://manage.novu.co https://www.googletagmanager.com; frame-src https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://app.cal.com; connect-src 'self' https://api.github.com https://uptime.betterstack.com https://api.hsforms.com https://*.sanity.io https://cdn.sanity.io https://api.segment.io https://cdn.segment.com https://api.mixpanel.com https://snap.licdn.com https://plausible.io https://www.googletagmanager.com https://chat.cdn-plain.com; media-src 'self' https://cdn.sanity.io; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://api.hsforms.com; frame-ancestors 'none' 1
default-src 'self' *.ctfassets.net *.trackjs.com *.demdex.net; font-src 'self' *.gstatic.com; img-src 'self' *.ctfassets.net *.trackjs.com costalimited.d3.sc.omtrdc.net *.gstatic.com data: *.onetrust.com cm.everesttech.net *.googleapis.com; connect-src 'self' *.go-mpulse.net cdn-ukwest.onetrust.com trial-eum-clientnsv4-s.akamaihd.net trial-eum-clienttons-s.akamaihd.net *.akstat.io *.demdex.net costalimited.d3.sc.omtrdc.net *.onetrust.io *.trackjs.com maps.googleapis.com; script-src 'self'; script-src-elem 'self' 'unsafe-inline' assets.adobedtm.com *.go-mpulse.net cdn-ukwest.onetrust.com maps.googleapis.com fonts.googleapis.com; style-src-attr 'self' 'unsafe-inline'; style-src 'self'; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com; script-src-attr 'self' 'unsafe-inline'; frame-ancestors 'self'; report-to https://costa.report-uri.com/r/t/csp/reportOnly 1
base-uri 'self'; block-all-mixed-content ; child-src 'self'; connect-src 'self' insights.algolia.io mss3l6x3wr-dsn.algolia.net maps.googleapis.com uwhealth.piwik.pro fast.wistia.net fast.wistia.com microservices.uwhealth.dev microservices.uwhealth.org images.ctfassets.net *.algolianet.com rfwqvtokul-dsn.algolia.net embed-cloudfront.wistia.com pnapi.invoca.net distillery.wistia.com 38294.global.siteimproveanalytics.io fg8vvsvnieiv3ej16jby.litix.io; default-src 'self'; font-src data: 'self' use.typekit.net fonts.gstatic.com fast.wistia.net fast.wistia.com; form-action 'self'; frame-ancestors 'self'; frame-src 'self' data: blob: uwhealth.formstack.com; img-src 'self' data: res.cloudinary.com images.ctfassets.net 38294.global.siteimproveanalytics.io embed-ssl.wistia.com maps.gstatic.com maps.googleapis.com fast.wistia.net fast.wistia.com; manifest-src 'self'; media-src 'self' blob: embed-ssl.wistia.com; object-src 'self'; script-src 'self' 'unsafe-inline' uwhealth.containers.piwik.pro siteimproveanalytics.com maps.googleapis.com uwhealth.piwik.pro browser.sentry-cdn.com www.formstack.com solutions.invocacdn.com fast.wistia.net fast.wistia.com connect.facebook.net; style-src 'self' 'unsafe-inline' p.typekit.net fonts.googleapis.com; worker-src 'self'; report-to csp-endpoint 1
object-src 'none';base-uri 'self';script-src 'nonce-PjTqDjhU6fo47tbnq-_GMQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://secure.perk0mean.com https://js.hs-scripts.com https://js.hubspot.com https://player.vimeo.com https://cdn.jsdelivr.net https://static.cloudflareinsights.com https://a.usbrowserspeed.com https://tag.demandbase.com https://cl.qualaroo.com; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self' data: https://secure.perk0mean.com; connect-src 'self' https://www.googletagmanager.com https://datapharmci.b2clogin.com https://idx.liadm.com https://region1.google-analytics.com https://api.company-target.com https://tag.demandbase.com; frame-src https://www.googletagmanager.com https://player.vimeo.com https://datapharmci.b2clogin.com https://dntcl.qualaroo.com; object-src 'none'; base-uri 'self'; 1
frame-src https://www.google.com/ https://*.paddle.com https://www.recaptcha.net/; report-uri /api/v1/reports; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://docs.staticstream.org https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://www.recaptcha.net https://www.gstatic.com/recaptcha/ https://*.paddle.com https://*.zopim.com https://*.zdassets.com https://browser.sentry-cdn.com https://*.ingest.sentry.io https://cdn.jsdelivr.net https://code.jquery.com,; connect-src 'self' https://docs.staticstream.org https://*.google-analytics.com https://*.paddle.com https://browsec.zendesk.com wss://*.zopim.com https://*.zopim.com https://*.zdassets.com https://*.ingest.sentry.io https://bash.ws/ https://*.bash.ws/; 1
default-src 'self' data: 'unsafe-inline' 'unsafe-eval' https:; report-uri https://usercontent.mobileread.org/csp-report 1
script-src 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' data: blob: gaoding.com *.gaoding.com *.dancf.com https://www.googletagmanager.com https://web.cdn.openinstall.io; frame-ancestors 'self' gaoding.com *.gaoding.com:* huaban.com *.huaban.com god-mgr.dancf.com; report-uri https://www.gaoding.com/_csp-report?app=www&source=web&policy_id=www-csp-shrink-prod-20260425-r2 1
object-src 'none';base-uri 'self';script-src 'nonce-0JWua2UV_Zo0x3ph6rKp6A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net cash-f.squarecdn.com https://*.gstatic.com *.googleapis.com https://www.gstatic.com https://fonts.gstatic.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.adyen.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com api.bazaarvoice.com stg.api.bazaarvoice.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ * *.adyen.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com https://*.bambuser.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://www.googletagmanager.com/ photos.pixlee.co 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io * https://*.gstatic.com *.adyen.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com https://*.google.com https://*.googleapis.com https://*.googleusercontent.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.webtrekk.net *.wt-eu02.net https://fbc.wcfbc.net https://*.flx1.com/ https://dmp.adform.net/ *.pixlee.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.googleapis.com https://*.gstatic.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com https://*.bambuser.com https://*.google.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://responder.wt-safetag.com https://*.flx1.com/ https://www.googletagmanager.com *.pxlecdn.com *.pixlee.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.cash.app https://fonts.googleapis.com/ unsafe-inline assets.braintreegateway.com display.ugc.bazaarvoice.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.magento-datasolutions.com *.magento-ds.com * *.adyen.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com https://*.bambuser.com api.addressy.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://*.flx1.com/ https://jamie.g.shortest-route.com https://inbound-analytics.pixlee.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://87a2b74d-7ec7-4aa0-9269-eab6629cdda1.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'nonce-4BUYe8mJF4VpW6g67p4DZ21ATbev3jsk' 'strict-dynamic' 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://*.hubspot.com https://*.hubspot.net https://*.hs-scripts.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hsforms.net https://*.usemessages.com https://*.hubspotfeedback.com https://*.hsadspixel.net https://*.hscollectedforms.net https://*.hsappstatic.net https://snap.licdn.com; style-src 'self' 'unsafe-inline' https://unpkg.com https://fonts.googleapis.com https://*.hubspot.com https://*.hsappstatic.net; img-src 'self' data: blob: https://cdn.sanity.io https://*.id.com.au https://*.hubspot.com https://*.hubspotusercontent.com https://*.hubspotusercontent-na1.net https://*.hubspotusercontent-ap1.net https://*.hubspotusercontent-eu1.net https://*.hsforms.com https://*.google-analytics.com https://*.googletagmanager.com https://www.google.com https://www.google.com.au https://*.doubleclick.net https://px.ads.linkedin.com https://*.tile.openstreetmap.org https://i.ytimg.com; connect-src 'self' https://*.api.sanity.io https://*.apicdn.sanity.io wss://*.api.sanity.io https://api.hsforms.com https://*.hubapi.com https://*.hubspot.com https://*.hsforms.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.googletagmanager.com https://*.doubleclick.net https://px.ads.linkedin.com; frame-src 'self' https://www.googletagmanager.com https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://www.canva.com https://*.id.com.au https://*.hsforms.com https://*.hsforms.net https://*.hubspot.com https://*.hubspotusercontent-na1.net https://*.hubspotusercontent-ap1.net https://*.hubspotusercontent-eu1.net; font-src 'self' data: https://fonts.gstatic.com https://*.hsappstatic.net; media-src 'self' data: blob: https://cdn.sanity.io https://*.id.com.au https://*.hubspotusercontent.com https://*.hubspotusercontent-na1.net https://*.hubspotusercontent-ap1.net https://*.hubspotusercontent-eu1.net; worker-src 'self' blob:; manifest-src 'self'; form-action 'self' https://*.hsforms.com; frame-ancestors 'self'; report-uri /.netlify/functions/__csp-violations 1
font-src *.klevu.com *.ksearchnet.com *.fontawesome.com *.typekit.net https://widgets.trustedshops.com integrations.etrusted.com *.cloudflare.com *.twitter.com *.gstatic.com *.twimg.com *.trustedshops.com *.googleapis.com maxcdn.bootstrapcdn.com 'self' data: *.yotpo.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://seo.mageplaza.com www.facebook.com *.copernica.com *.twitter.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com player.vimeo.com https://www.paypal.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com https://*.dpdconnect.nl *.dpdconnect.nl service2.loyaltyinabox.com *.pinterest.com www.facebook.com www.youtube.com view.publitas.com www.google.com www.google.nl www.google.de *.google.com maps.google.com chat.babypark.nl *.doubleclick.net td.doubleclick.net googleads.g.doubleclick.net widget.trustpilot.com *.cookiebot.com *.cookiebot.eu chatwidget-prod.web.app www.googletagmanager.com sst.babypark.nl sst.babypark.de sst.babydeals.be sst.baby-dump.nl folders.baby-dump.nl *.twitter.com platform.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com https://portal.payconiq.com https://static.buckaroo.nl https://www.paypalobjects.com *.klevu.com *.ksearchnet.com www.babypark.nl www.babypark.de www.babydeals.be dehoevebuitenleven.nl m2.babypark.mavendev.com m2.babypark-de.mavendev.com www.ikenik.nl m2.ikenik.mavendev.com m2.babydump.mavendev.com m2.babydump-de.mavendev.com www.google.com www.google.nl www.google.de www.google.com.ua www.facebook.com ct.pinterest.com www.googletagmanager.com www.zenaps.com www.awin1.com static.zdassets.com *.bing.com *.bing.net www.thuiswinkel.org i.ytimg.com img.youtube.com blob: lantern.roeye.com *.clarity.ms *.cookiebot.com *.cookiebot.eu integrations.etrusted.com stats.g.doubleclick.net sst.babypark.nl sst.babypark.de sst.babydeals.be sst.baby-dump.nl *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.google.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu pinterest.com assets.pinterest.com syndication.twitter.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com https://widgets.trustedshops.com *.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com https://*.dpdconnect.nl js.klevu.com *.ksearchnet.com *.avada.io www.googletagmanager.com checkout.buckaroo.nl *.clarity.ms lantern.roeyecdn.com widgets.trustedshops.com web-sdk.smartlook.com www.dwin1.com s.pinimg.com connect.facebook.net static.buckaroo.nl view.publitas.com api.360productviewer.com googleads.g.doubleclick.net bat.bing.com bat.bing.net static.zdassets.com js-agent.newrelic.com *.livechatinc.com bam.eu01.nr-data.net chat.babypark.nl widget.trustpilot.com *.pinterest.com *.hotjar.com *.hotjar.io *.cookiebot.com *.cookiebot.eu integrations.etrusted.com chatwidget-prod.web.app *.cloudflare.com *.google.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com twitter.com platform.twitter.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com maps.googleapis.com https://widgets.trustedshops.com *.yotpo.com sst.babypark.nl https: 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl cdn.dnky.co webchat.dotdigital.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.typekit.net checkout.buckaroo.nl integrations.etrusted.com chatwidget-css.web.app *.cloudflare.com *.googleapis.com *.google.com *.twitter.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu maxcdn.bootstrapcdn.com unsafe-inline https://widgets.trustedshops.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src static.zdassets.com integrations.etrusted.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com wss://websocketservice-externalapi.prod.buckaroo.io https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://applepay.buckaroo.io *.paypal.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com *.klevu.com *.ksearchnet.com *.clarity.ms *.pinterest.com *.doubleclick.net stats.g.doubleclick.net googleads.g.doubleclick.net manager.eu.smartlook.cloud ekr.zdassets.com wss://widget-mediator.zopim.com api.360productviewer.com www.facebook.com livechat.fabulor.eu bam.eu01.nr-data.net region1.analytics.google.com *.google.com *.hotjar.com *.hotjar.io analytics.google.com bat.bing.com bat.bing.net *.cookiebot.com *.cookiebot.eu *.copernica.com integrations.etrusted.com api.ipify.org *.cloudflare.com *.twitter.com *.twimg.com www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.google-analytics.com *.trustedshops.com *.etrusted.com *.yotpo.com sst.babypark.nl https: 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.google.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://report-uri.com/r/d/csp/reportOnly; report-to report-endpoint; 1
default-src 'self' motul.com *.cdninstagram.com *.elfsightcdn.com; script-src 'self' 'unsafe-eval' *.axept.io *.elfsight.com https://*.googletagmanager.com *.hotjar.com *.facebook.net 'unsafe-inline' *.googleapis.com *.channelsight.com js.monitor.azure.com *.explorify.com *.elfsightcdn.com *.youtube.com; img-src 'self' staging-cms.motul.com axeptio.imgix.net www.google.com *.gstatic.com data: *.elfsight.com *.facebook.com *.elfsightcdn.com *.googleapis.com *.hotjar.com *.cdninstagram.com *.motul.com *.amazonaws.com *.channelsight.com cscoreproweustor.blob.core.windows.net motul.incony.de *.explorify.com https://i.ytimg.com/ https://*.googleusercontent.com/places https://*.google-analytics.com https://*.googletagmanager.com; child-src 'self' motul.com *.hotjar.com *.youtube.com https://*.googletagmanager.com *.youtube-nocookie.com;; style-src 'self' 'unsafe-inline' *.elfsight.com *.googleapis.com *.channelsight.com *.explorify.com; font-src 'self' *.gstatic.com *.hotjar.com *.channelsight.com *.explorify.com data:; report-uri /api/v2/security-headers; connect-src 'self' *.axept.io axeptio.imgix.net *.spinque.com *.elfsight.com *.facebook.net https://*.google-analytics.com https://*.analytics.google.com  https://*.googletagmanager.com https://*.google.com *.hotjar.com *.googleapis.com *.azurewebsites.net *.motul.com *.hotjar.io wss://ws4.hotjar.com *.channelsight.com https://cms.motul.com/search/api; frame-ancestors 'self' *.motul.com https://cms.motul.com 1
default-src https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com; script-src https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com 'unsafe-inline' 'unsafe-eval'; style-src https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com 'unsafe-inline'; report-uri /1/batch/2/OE/mid=AF2M0KC94RCEA:sid=134-6330203-0666334:rid=D76Z1EMTKW14PMBP9RD8:sn=www.acx.com 1
default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http://*.files.wordpress.com wss://www.sportico.com; report-uri https://pmcuri.report-uri.com/r/d/csp/reportOnly 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://widgets.wp.com https://c0.wp.com https://ajax.cloudflare.com https://stackpath.bootstrapcdn.com https://webdata.up.edu.ph https://s0.wp.com https://stats.wp.com https://pixel.wp.com https://cdn.jsdelivr.net https://apis.google.com; style-src 'self' 'unsafe-inline' https://widgets.wp.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://stackpath.bootstrapcdn.com https://use.typekit.net https://fonts-api.wp.com https://p.typekit.net https://s0.wp.com https://pixel.wp.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://up.edu.ph https://c0.wp.com; font-src 'self' data: https://fonts.wp.com https://fonts.gstatic.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://use.typekit.net https://p.typekit.net https://s0.wp.com https://c0.wp.com https://cdnjs.cloudflare.com https://*.wp.com; img-src 'self' data: blob: https://secure.gravatar.com https://scontent-xsp1-3.xx.fbcdn.net https://i0.wp.com https://i1.wp.com https://i2.wp.com https://pixel.wp.com https://public-api.wordpress.com https://*.wp.com https://up.edu.ph https://*.up.edu.ph; connect-src 'self' https://*.up.edu.ph https://cdn.jsdelivr.net https://elementor.com https://*.googleapis.com https://fontawesome.com https://stats.wp.com https://s0.wp.com https://c0.wp.com https://webdata.up.edu.ph https://pixel.wp.com https://stackpath.bootstrapcdn.com https://performance.typekit.net https://use.typekit.net; frame-src 'self' data: blob: https://www.youtube.com https://youtube.com https://www.youtube-nocookie.com https://googleusercontent.com https://www.google.com https://wordpress.com https://pixel.wp.com https://up.edu.ph https://*.up.edu.ph https://elementor.com https://*.elementor.com; object-src 'none'; worker-src 'self' blob:; upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; report-to https://up.edu.ph/wp-json/csp-logger/v1/report; report-uri https://up.edu.ph/wp-json/csp-logger/v1/report; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-Gp7rKMCAcaEtt-sHomtCMQ' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
default-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=aNxogpaLHuQBikjjwM6ypf5re9gj9v7BSfXXdIhzmEA-1789277049.947902-1.0.1.1-rh..4cKZTBBTqpGt0iBVNhkjXhCPDkWncVzHPXlTRC_TQZtK6gtvxWIAx3iI4djqWL_gGOTFlzDhf4cQsZObByzZ4lCKd.DIxGs.4Fi914TgfPyg3.NQB_KvpExsZwPvOLh4shLgHIdAg79ZvqSUEVUFmE9cDijd_8gdz7YRzvA0zaH3jKhIyBIWQzomfN_rHUzIRkNeJSoCm0nR6q6iaQ; report-to cf-whgqbkhfutsfhpgt 1
default-src 'self' 'report-sample'; connect-src 'self' https://matomo.psi.ch/; font-src 'self' data: player.podigee-cdn.net assets.brevo.com; frame-src 'self' *.ddev.site *.psi.ch player.vimeo.com www.youtube-nocookie.com feeds.sirop.org maps.google.com www.jove.com player.podigee-cdn.net cdnapisec.kaltura.com www.google.com www.srf.ch www.youtube.com psi.mediaspace.cast.switch.ch; img-src 'self' data: gfa-status.web.psi.ch share.web.psi.ch webcam.switch.ch; media-src 'self' *.ethz.ch data:; object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://api.mapbox.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://unpkg.com unpkg.com https://matomo.psi.ch/; script-src-elem 'self' 'unsafe-inline' test-t6dnbai-3bjapdgtwdrsg.eu-2.platformsh.site www.gstatic.com *.psi.ch www.google.com player.podigee-cdn.net sibforms.com https://api.mapbox.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://unpkg.com unpkg.com; style-src 'self' 'report-sample' 'unsafe-inline' www.gstatic.com player.podigee-cdn.net sibforms.com https://api.mapbox.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com unpkg.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self' www.google.com; frame-ancestors 'self'; report-uri https://www.psi.ch/de/log-report-uri/reportOnly 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-pTPEJJ07eZGQHAMHBKpuIg' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
default-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.lge.co.kr https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com *.datadoghq-browser-agent.com *.googletagmanager.com *.doubleclick.net *.facebook.net *.criteo.com *.creativecdn.com *.naver.net *.pstatic.net *.daangn.com *.stclab.com *.google.com *.creativecdn.com *.google-analytics.com *.simpli.fi *.sauceflex.com *.facebook.com *.google.co.kr  *.widerplanet.com *.daumcdn.net *.useinsider.com *.attractt.com *.criteo.net; connect-src 'self' *.lge.co.kr https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com *.datadoghq-browser-agent.com *.googletagmanager.com *.doubleclick.net *.facebook.net *.criteo.com *.creativecdn.com *.naver.net *.pstatic.net *.daangn.com *.stclab.com *.google.com *.creativecdn.com *.google-analytics.com *.simpli.fi *.sauceflex.com *.facebook.com *.google.co.kr *.widerplanet.com *.daumcdn.net *.useinsider.com *.attractt.com *.criteo.net; 1
base-uri 'none'; font-src 'self' https: data:; form-action https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://www.facebook.com; frame-ancestors 'self'; img-src https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://ads-twitter.com https://ads-api.twitter.com https://analytics.twitter.com https://mautic.netcup.news https://px.ads.linkedin.com 'self' blob: data: https: https://www.captcha.eu; object-src 'none'; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://www.captcha.eu; script-src https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://chat.netcup.com https://chat-dev-ui.netcup.net https://chat-ui.netcup.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com https://*.onetrust.com https://measure.netcup.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://widget.trustpilot.com https://cdn.brevo.com/js/sdk-loader.js https://www.captcha.eu 'self' 'wasm-unsafe-eval' 'nonce-scpNqkRp2Yebnz58EqeaCDa3'; child-src blob: https://td.doubleclick.net; connect-src https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://chat.netcup.com https://chat-dev-ui.netcup.net https://chat-ui.netcup.com https://ads-twitter.com https://ads-api.twitter.com https://analytics.twitter.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com https://*.onetrust.com https://www.google.com https://in-automate.brevo.com https://measure.netcup.com https://google.com https://px.ads.linkedin.com https://*.clarity.ms/ 'self' https://*.analytics.google.com https://*.google-analytics.com https://stats.g.doubleclick.net https://www.captcha.eu https://googleads.g.doubleclick.net https://www.googleadservices.com https://cdn.cookielaw.org https://adservice.google.com https://pagead2.googlesyndication.com https://www.redditstatic.com https://pixel-config.reddit.com https://analytics.tiktok.com https://ads.tiktok.com https://bat.bing.com https://widget.trustpilot.com; frame-src https://td.doubleclick.net https://www.facebook.com https://www.googletagmanager.com https://measure.netcup.com https://www.youtube.com https://www.youtube-nocookie.com/ https://widget.trustpilot.com https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://chat.netcup.com https://chat-dev-ui.netcup.net https://chat-ui.netcup.com; script-src-elem https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://chat.netcup.com https://chat-dev-ui.netcup.net https://chat-ui.netcup.com https://cdn.brevo.com/js/sdk-loader.js https://sibautomation.com/sa.js https://sibforms.com/ https://www.googleadservices.com https://www.redditstatic.com 'self' 'unsafe-inline' https://*.googletagmanager.com https://static.ads-twitter.com https://snap.licdn.com https://bat.bing.com https://connect.facebook.net https://*.clarity.ms https://googleads.g.doubleclick.net https://cdn.cookielaw.org https://analytics.tiktok.com https://ads.tiktok.com https://measure.netcup.com https://www.youtube.com https://pagead2.googlesyndication.com https://widget.trustpilot.com; worker-src blob:; report-to csp-endpoint; 1
style-src 'self' 'unsafe-inline' https://*.assets.post.at https://*.azureedge.net https://bpanel.streamdiver.com https://webcast.a1.net https://*.gstatic.com; report-to default; 1
default-src 'self'; child-src 'self' blob:; connect-src 'self' *.thuisarts.nl *.readspeaker.com bynder.nhg.org *.cloudfront.net https://*.ingest.de.sentry.io *.contentsquare.net *.contentsquare.com https://consent.cookiebot.com https://consentcdn.cookiebot.com; font-src 'self' data: https://themes.googleusercontent.com; frame-src 'self' *.readspeaker.com https://consentcdn.cookiebot.com; img-src 'self' data: *.thuisarts.nl *.readspeaker.com https://bynder.nhg.org *.contentsquare.net; media-src 'self' *.thuisarts.nl *.readspeaker.com; script-src 'self' 'report-sample' *.readspeaker.com *.thuisarts.nl *.cloudfront.net *.contentsquare.net app.contentsquare.com https://consent.cookiebot.com https://consentcdn.cookiebot.com cdn-eu.readspeaker.com https://d8ejoa1fys2rk.cloudfront.net 'nonce-CRtiEl2eXgXWl3U168vddw'; script-src-elem 'self' 'report-sample' *.readspeaker.com *.thuisarts.nl *.cloudfront.net *.contentsquare.net app.contentsquare.com https://consent.cookiebot.com https://consentcdn.cookiebot.com cdn-eu.readspeaker.com https://d8ejoa1fys2rk.cloudfront.net 'nonce-CRtiEl2eXgXWl3U168vddw'; style-src * 'report-sample' 'nonce-CRtiEl2eXgXWl3U168vddw'; base-uri 'self'; form-action 'self' *.thuisarts.nl https://staging--nhg-leefstijlkaart-ui.netlify.app; frame-ancestors 'self' *.asterisque.nl *.cnsconnect.nl *.crsinternet.nl *.curasoft.nl *.dataleaf.eu *.eposzilos.nl *.extenzo.nu *.healthconnected.nl *.omnihis.nl *.oscarecd.nl *.portavita.eu *.portavita.nl *.promedico-asp.aw *.promedico-asp.nl *.topicus-hap.nl *.prescriptor.nl *.digitalis.nl *.clinicalrules.nl *.caresharing.eu *.vandenhoogenhoff.com *.brickshuisarts.nl *.promedico-huisarts.nl brickshuisarts.nl 1
default-src 'self'; script-src 'self' https://www.googletagmanager.com https://plausible.io; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https://dealroom.imgix.net https://sg-imgs.dealroom.co https://content.dealroom.co https://storage.googleapis.com https://image.thum.io; connect-src 'self' https://plausible.io https://www.google-analytics.com https://region1.google-analytics.com; frame-src 'self' https://app.dealroom.co https://jobs.dealroom.co; base-uri 'self'; form-action 'self' https://*.hsforms.com; object-src 'none'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.prizepicks.com https://*.cloudflare.com https://*.cloudflareinsights.com https://*.google-analytics.com https://*.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://*.prizepicks.com https://*.google-analytics.com https://*.cloudflareinsights.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://*.hsforms.com https://*.hubspot.com; script-src 'self' 'unsafe-inline' https://*.hs-scripts.com https://*.hs-analytics.net https://*.hsforms.net https://*.hsforms.com https://*.hscollectedforms.net https://*.hsadspixel.net https://*.hsleadflows.net https://*.usemessages.com https://*.hs-banner.com https://*.hsappstatic.net https://*.hubspot.com https://*.hubspot.net https://*.hubspotusercontent-na1.net https://*.hubspotusercontent-na2.net https://*.hubspotusercontent-eu1.net https://assets.apollo.io https://www.buzzsprout.com https://*.buzzsprout.com https://www.googletagmanager.com https://tagmanager.google.com https://*.google-analytics.com https://www.gstatic.com https://api.mapbox.com https://go.wi-fi.org; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://api.mapbox.com https://*.hsforms.net https://*.hsforms.com https://*.hsappstatic.net https://*.hubspot.com https://*.hubspotusercontent-na1.net https://*.hubspotusercontent-na2.net https://*.hubspotusercontent-eu1.net; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://*.hsappstatic.net https://*.hubspotusercontent-na1.net https://*.hubspotusercontent-na2.net https://*.hubspotusercontent-eu1.net; connect-src 'self' https://www.buzzsprout.com https://*.buzzsprout.com https://*.hubspot.com https://*.hubapi.com https://*.hubspotusercontent-na1.net https://*.hubspotusercontent-na2.net https://*.hubspotusercontent-eu1.net https://*.hsforms.com https://*.hsforms.net https://*.hs-analytics.net https://*.hscollectedforms.net https://*.apollo.io https://aplo-evnt.com https://*.aplo-evnt.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://www.google.com https://stats.g.doubleclick.net https://api.mapbox.com https://events.mapbox.com https://go.wi-fi.org https://pi.pardot.com https://prf.cert.wi-fi.org https://staging-prf.indigo.wi-fi.org; frame-src 'self' https://www.buzzsprout.com https://*.buzzsprout.com https://www.googletagmanager.com https://*.hubspot.com https://*.hsforms.com https://*.hsforms.net https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://iframe.dacast.com https://*.dacast.com https://www.surveymonkey.com; media-src 'self' blob: https://www.buzzsprout.com https://*.buzzsprout.com https://*.dacast.com https://*.vimeo.com; worker-src 'self' blob:; manifest-src 'self'; report-uri /csp-report; report-to csp-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://*.googlesyndication.com https://googleads.g.doubleclick.net https://www.googletagservices.com https://platform.twitter.com https://www.instagram.com https://www.tiktok.com https://connect.facebook.net https://adtrafficquality.google; connect-src * ws: wss: https:; style-src 'self' 'unsafe-inline' https:; img-src * data: blob: https:; media-src * blob: https:; frame-src * https:; frame-ancestors 'self' 1
frame-ancestors 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' 1
object-src 'none';base-uri 'self';script-src 'nonce-YB9jTVLbKqXoS-Ml1kAwvA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline' blob:; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; connect-src 'self' ws: https://suggestions.dadata.ru https://www.google.com; worker-src blob:; report-uri /csp-report 1
default-src 'self' 'report-sample' 'unsafe-inline' data: cdn.jsdelivr.net https://static.addtoany.com unpkg.com youtube.com www.youtube.com www.youtube-nocookie.com actionnetwork.org fonts.googleapis.com fonts.gstatic.com substack.com datawrapper.dwcdn.net google-analytics.com googletagmanager.com; connect-src 'self' 'report-sample' 'unsafe-inline' data: cdn.jsdelivr.net https://static.addtoany.com unpkg.com youtube.com www.youtube.com www.youtube-nocookie.com actionnetwork.org fonts.googleapis.com fonts.gstatic.com substack.com datawrapper.dwcdn.net google-analytics.com googletagmanager.com https://www.google-analytics.com https://www.googletagmanager.com; img-src 'self' 'report-sample' 'unsafe-inline' data: cdn.jsdelivr.net https://static.addtoany.com unpkg.com youtube.com www.youtube.com www.youtube-nocookie.com actionnetwork.org fonts.googleapis.com fonts.gstatic.com substack.com datawrapper.dwcdn.net google-analytics.com googletagmanager.com https://www.google-analytics.com https://www.googletagmanager.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri https://www.aft.org/log-report-uri/reportOnly 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://*.google-analytics.com https://*.usercentrics.eu https://www.google.com https://www.gstatic.com https://static.payu.com https://connect.facebook.net https://maps.googleapis.com https://*.chat.getzowie.com https://*.salesmanago.pl https://pixel.wp.pl https://*.doubleclick.net https://*.googleadservices.com https://*.bing.com https://*.hotjar.com https://*.inpost.pl https://*.easypack24.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.usercentrics.eu https://*.inpost.pl https://*.easypack24.net; img-src * data: blob:; font-src 'self' data: https://fonts.gstatic.com https://*.payu.com; connect-src 'self' https://*.diag.pl https://*.ingest.sentry.io https://*.payu.com https://*.ingest.us.sentry.io https://*.usercentrics.eu https://*.google-analytics.com https://*.analytics.google.com https://google.com https://*.google.com https://www.google.pl https://www.google.de https://www.google.fr https://www.google.it https://www.google.es https://www.google.nl https://www.google.be https://www.google.at https://www.google.pt https://www.google.ie https://www.google.se https://www.google.dk https://www.google.fi https://www.google.gr https://www.google.cz https://www.google.sk https://www.google.hu https://www.google.ro https://www.google.bg https://www.google.hr https://www.google.si https://www.google.lt https://www.google.lv https://www.google.ee https://www.google.lu https://www.google.com.mt https://www.google.com.cy https://www.google.co.uk https://www.google.ch https://www.google.no https://www.google.com.ua https://www.google.com.tr https://www.google.ca https://*.doubleclick.net https://*.googlesyndication.com https://*.googleadservices.com https://*.bing.com https://*.bing.net https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.chat.getzowie.com wss://*.chat.getzowie.com https://maps.googleapis.com https://*.salesmanago.pl https://*.inpost.pl https://*.easypack24.net https://www.facebook.com https://pixel.wp.pl; media-src 'self' https://*.chat.getzowie.com; worker-src 'self' blob:; frame-src 'self' https://www.google.com https://*.usercentrics.eu https://*.youtube.com https://www.youtube-nocookie.com https://*.payu.com https://*.wp.pl https://*.chat.getzowie.com; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests; report-uri https://o107039.ingest.us.sentry.io/api/4505510726008832/security/?sentry_key=050c1d0552a44968957df5d9c5d1e01b&sentry_environment=production; report-to csp-endpoint 1
default-src 'self' www.youtube.com *.stripe.com *.addthis.com; script-src 'self' assets.sutori.com *.twitter.com *.twimg.com 'unsafe-inline' *.stripe.com apis.google.com 'unsafe-eval' maps.googleapis.com *.crisp.chat *.crisp.im www.youtube.com *.ytimg.com *.addthis.com *.addthisedge.com data: z.moatads.com *.pinterest.com *.iubenda.com cdn.thinglink.me http://ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js https://www.thinglink.com *.instagram.com connect.facebook.net *.imgur.com *.flickr.com blob: cdn.headwayapp.co risk.clearbit.com teams.microsoft.com https://cdnjs.cloudflare.com/ajax/libs/lamejs/1.2.0/lame.min.js; script-src-elem assets.sutori.com *.twitter.com *.twimg.com 'unsafe-inline' *.googletagmanager.com *.stripe.com https://apis.google.com/ accounts.google.com 'unsafe-eval' maps.googleapis.com *.crisp.chat *.crisp.im www.youtube.com *.ytimg.com *.addthis.com *.addthisedge.com data: z.moatads.com *.pinterest.com *.iubenda.com cdn.thinglink.me http://ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js https://www.thinglink.com *.instagram.com connect.facebook.net *.imgur.com *.flickr.com blob: cdn.headwayapp.co risk.clearbit.com teams.microsoft.com play.vidyard.com challenges.cloudflare.com; worker-src blob: data:; font-src 'self' data: assets.sutori.com fonts.gstatic.com https://client.crisp.chat; connect-src 'self' https://www.googleapis.com wss://www.sutori.com assets.sutori.com s3.amazonaws.com/assets.sutori.com *.google-analytics.com *.stripe.com accounts.google.com maps.googleapis.com api.amplitude.com wss://*.crisp.chat https://*.crisp.chat *.addthis.com https://syndication.twitter.com/settings https://*.wikipedia.org geo.query.yahoo.com *.flickr.com risk.clearbit.com login.microsoftonline.com blob:; img-src 'self' data: * maps.googleapis.com https://maps.gstatic.com/mapfiles/api-3/images/ https://csi.gstatic.com/ https://i.ytimg.com *.addthis.com *.pinterest.com *.iubenda.com; style-src 'self' assets.sutori.com platform.twitter.com 'unsafe-inline' accounts.google.com *.googleapis.com https://client.crisp.chat *.iubenda.com cdn.thinglink.me https://ton.twimg.com cdn.headwayapp.co; media-src 'self' assets.sutori.com https://client.crisp.chat blob:; child-src 'self' * https://www.sutori.com *.stripe.com https://www.google.com/ https://www.youtube-nocookie.com/embed/ https://www.youtube.com/embed/ *.addthis.com *.pinterest.com blob:; manifest-src assets.sutori.com; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com *.cloudflare.com cdn.us-east-1.prod.moon.dubai.aws.dev script.hotjar.com www.radioshack.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com www.apptrian.com facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.amazon.com https://www.google.com https://www.youtube.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com s3-sa-east-1.amazonaws.com *.google.com.mx *.bing.com *.collect.igodigital.com https://static.elfsight.com https://tvspix.com https://t.co https://analytics.twitter.com https://www.google.com https://www.gstatic.com mcprod.radioshack.com amazon-omni-cdn.com www.ojrq.net c.clarity.ms cdn.smct.io www.radioshack.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com utt.impactcdn.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.equalweb.com *.sandbox.my.site.com/ *.sandbox.my.salesforce-scrt.com/ *.facebook.net *.tiktok.com/ *.cardinalcommerce.com *.ccdc02.com unpkg.com cdn.jsdelivr.net *.g.doubleclick.net commerce.adobe.net magento-recs-sdk.adobe.net *.bolt.com *.commerce-quick-checkout.com localhost:8082 www.gstatic.com www.google.com *.sandbox.my.site.com *.sandbox.my.salesforce-scrt.com *.tiktok.com *.clarity.ms *.bing.com *.collect.igodigital.com *.amazon.com https://cdn.equalweb.com https://static.elfsight.com https://unicomer.my.site.com elfsightcdn.com https://cdn.popt.in https://core.service.elfsight.com https://static.ads-twitter.com https://static.hotjar.com https://cdnjs.cloudflare.com https://smct.co https://script.hotjar.com https://www.google.com https://www.gstatic.com https://assets.adobedtm.com https://www.google-analytics.com https://www.googletagmanager.com cdn.us-east-1.prod.moon.dubai.aws.dev js.smct.io unsafe-inline www.radioshack.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com assets.braintreegateway.com *.cloudflare.com *.sandbox.my.site.com/ *.adobedtm.com *.cardinalcommerce.com *.ccdc02.com unpkg.com cdn.jsdelivr.net commerce.adobedtm.com www.googleadservices.com www.google-analytics.com *.g.doubleclick.net analytics.google.com www.googletagmanager.com use.typekit.net *.adobe.io *.sentry.io *.sentry-cdn.com *.newrelic.com *.nr-data.net *.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com assets.adobedtm.com commerce.adobe.net magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.bolt.com *.commerce-quick-checkout.com localhost:8082 www.gstatic.com www.google.com js.braintreegateway.com c.paypal.com pay.google.com *.braintreegateway.com *.equalweb.com *.sandbox.my.site.com *.sandbox.my.salesforce-scrt.com *.facebook.net *.tiktok.com *.clarity.ms https://unicomer.my.site.com cdn.us-east-1.prod.moon.dubai.aws.dev www.radioshack.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com www.radioshack.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.adobedc.net *.equalweb.com *.sandbox.my.salesforce-scrt.com/ *.sandbox.my.site.com/ *.tiktok.com/ *.adobedtm.com *.adobe.com *.ccdc02.com unpkg.com cdn.jsdelivr.net commerce.adobedtm.com www.google-analytics.com *.g.doubleclick.net analytics.google.com use.typekit.net t.paypal.com assets.adobedtm.com commerce.adobe.net magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com *.bolt.com *.commerce-quick-checkout.com localhost:8082 www.gstatic.com www.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com *.sandbox.my.site.com *.sandbox.my.salesforce-scrt.com *.facebook.net *.tiktok.com *.clarity.ms *.bing.com https://cdn.equalweb.com https://static.elfsight.com https://access.equalweb.com https://core.service.elfsight.com https://www.google.com.mx https://radioshackusallc.pxf.io https://cdn.popt.in https://script.hotjar.com https://vars.hotjar.com https://vc.hotjar.io https://display.popt.in https://www.google-analytics.com https://region1.google-analytics.com https://stats.g.doubleclick.net unicomer.my.salesforce-scrt.com cdn.elements.amazon order.buywithprime.amazon.com wss://ws.hotjar.com firehose.eu-west-1.amazonaws.com medley.prod.irtysh.dubai.aws.dev content.hotjar.io adobedc.demdex.net analytics-ipv6.tiktokw.us js.smct.io surveystats.hotjar.io pro.ip-api.com cognito-identity.eu-west-1.amazonaws.com www.radioshack.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com content.hotjar.io www.radioshack.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' *.adyen.com *.allsaints.com *.bing.com *.cquotient.com *.forter.com *.g.doubleclick.net *.global-e.com *.google-analytics.com *.google.com *.googleapis.com *.googlesyndication.com *.gstatic.com *.klarnaservices.com *.parcellab.com *.pcapredict.com *.scarabresearch.com *.squarecdn.com *.tribalfusion.com *.yotpo.com access.myunidays.com ajax.cloudflare.com allsaints.api.highstreetapp.com analytics.tiktok.com api.soreto.com appleid.cdn-apple.com assets.ntcacdn.net cdn-ukwest.onetrust.com cdn.jsdelivr.net cdn.optimizely.com cdnapisec.kaltura.com challenges.cloudflare.com chat.digitalgenius.com code.jquery.com connect.facebook.net ct.pinterest.com d.ratepay.com dnn0yrbagrg.cloudfront.net duvgq8bw.cloudfront.net edge.eu.fullstory.com js-agent.newrelic.com js.klarna.com lottingem.com platform.communicatorcorp.com player.vimeo.com rgneujpc.micpn-eu.com s.pinimg.com sc-static.net secured-pixel.com services.postcodeanywhere.co.uk static.cloudflareinsights.com statse.webtrendslive.com t.contentsquare.net tag.rmp.rakuten.com tags.creativecdn.com tr.snapchat.com tracker.marinsm.com unpkg.com widgets.trustedshops.com www.googletagmanager.com www.paypal.com www.recaptcha.net www.redditstatic.com x.klarnacdn.net; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=78YcPzPCXYhBfJee03psvEd34q2r.IdBgslhOui_PAo-1789285608.503355-1.0.1.1-.1xyVs4Qv3o1nogClmk0I87.en8vAgtN6eIOPxEkyYernPA7WDRRpXWKLlUb.ghtcJyC.GLfiMR6t19bQn4I2sSDsJT8BRnT5Am.dJcs10sB9_CMPanovsWERSehns8CcQzbl.ZpgwkN4d4vrgAAlq37zwvdrQL2PFtCNrWkiNZoEbi2pSNkflZRY.wfflmwoci9wR9oUaYDvoNgctPG5Q; report-to cf-pwwhtlcpktuqpvkc 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://analytics.tiktok.com https://bat.bing.com https://bzrcdn.openai.com https://cdn.segment.com https://connect.facebook.net https://*.doubleclick.net https://s.yimg.com https://script.hotjar.com https://scripts.clarity.ms https://static.ads-twitter.com https://static.hotjar.com https://websdk.appsflyer.com https://www.clarity.ms https://www.google-analytics.com https://www.googletagmanager.com https://www.redditstatic.com; img-src 'self' data: https:; connect-src 'self' https://analytics-ipv6.tiktokw.us https://analytics.tiktok.com https://api.segment.io https://bzr.openai.com https://cdn.segment.com https://*.doubleclick.net https://j.clarity.ms https://pixel-config.reddit.com https://region1.google-analytics.com https://s.yimg.com https://www.google-analytics.com https://www.google.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://*.doubleclick.net; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub0fc53fca1ec699a0774b43bbb4d8ea6c&dd-evp-origin=content-security-policy&ddsource=csp-report 1
script-src 'self' 'unsafe-eval' 'wasm-unsafe-eval' *.bytescm.com *.bytetos.com *.ibytedapm.com *.zijieapi.com *.snssdk.com *.bytedance.com *.bytedance.net *.pstatp.com *.bytednsdoc.com *.bytegoofy.com *.byted-static.com *.yhgfb-cn-static.com data: blob: 'report-sample' 'nonce-880ca29a8669e8fa6b8f5360d31f509f-argus' 'strict-dynamic'; connect-src 'self' *.idouyinvod.com:* *.volcsiriusbd.com:* *.volcsirius.com:* *.tt.x.bsgslb.cn:* *.dy.zzcdnx.com:* *.qc.bsccdn.net:* *.smtcdns.com:* *.ugslb.com:* *.livehwc3.cn:* *.smtcdns.net:* *.bytefcdnrd.com:* *.ksyungslb.com:* *.ksyungslb2.com:* *.ourdvsss.com:* *.tbcache.com:* *.jomodns.com:* *.douyincdn.com:* *.ixigua.com:* *.bdxigualive.com:* *.pstatp.com:* *.douyinliving.com:* *.picovr.com:* *.huoshanlive.com:* *.ihuoshanlive.com:* *.volccdn.com:* *.bestv.com.cn:* *.bytefcdn.com:* *.douyinvod.com:* *.qnqcdn.net:* *.weilayun.com:* *.saxysec.com:* *.saxyit.com:* *.saxydc.com:* *.sjxysec.com:* *.sjxydc.com:* *.hiecheimaetu.com:* *.ppio.cloud:* *.vegslb.com:* *.xsj.wasu.tv:* *.zebracdn.com:* *.volctranscdn.com:* *.hizhecheng.com:* *.sealaly.net:* *.souajki.net:* *.souajki.com:* *.souajki.cn:* *.siomxity.cn:* *.siomxity.com:* *.siomxity.net:* *.uochly.cn:* *.smogfly.cloud:* *.smogfly.club:* *.iquaveizeeru.com:* *.ietheivaicai.com:* *.bytescm.com *.bytetos.com *.ibytedapm.com *.zijieapi.com *.snssdk.com *.bytedance.com *.bytedance.net *.pstatp.com *.bytednsdoc.com *.bytegoofy.com *.byted-static.com *.yhgfb-cn-static.com; frame-ancestors 'self'; upgrade-insecure-requests ; 1
default-src https: wss: 'unsafe-inline' 'unsafe-eval'; img-src https: data: blob:; worker-src blob: 'self'; font-src https: data: 'unsafe-inline' 'unsafe-eval'; media-src https: wss: blob: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors https://*.sephora.demandware.net; 1
default-src 'self' localhost:* data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' localhost:* https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' localhost:* https: wss:; frame-src 'self' https:; media-src 'self' https:; require-trusted-types-for 'script'; trusted-types default dompurify wp-i18n elementor 1
default-src 'self' *.klarna.com *.klarnaservices.com *.paypal.com *.paypalobjects.com *.afterpay.com *.cash.app *.google.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.facebook.com *.facebook.net *.doubleclick.net *.amazon-adsystem.com *.bazaarvoice.com *.amplience.net cdn.cookielaw.org *.fullstory.com *.abtasty.com *.evergage.com *.sentry.io *.tiktok.com *.bing.com *.creativecdn.com *.mountain.com *.wisepops.com *.forter.com *.sitevibes.com *.thrive.today *.pbbl.co *.attn.tv *.ipredictive.com *.algolia.net *.algolianet.com *.onetrust.com *.pinterest.com *.adroll.com *.jsdelivr.net *.cloudfront.net *.typekit.net; script-src 'self' js.klarna.com x.klarnacdn.net *.paypal.com *.afterpay.com *.cash.app *.squarecdn.com *.google.com *.googletagmanager.com *.facebook.net 'unsafe-inline' cdn.cookielaw.org *.fullstory.com *.abtasty.com *.evergage.com *.googleapis.com storage.googleapis.com *.mountain.com loader.wisepops.com *.thrive.today *.pbbl.co *.attn.tv *.ipredictive.com *.jsdelivr.net *.cloudfront.net *.my.site.com www.gstatic.com apps.bazaarvoice.com *.forter.com *.clarity.ms *.adroll.com s.pinimg.com cdn.evgnet.com wisepops.net app.sitevibes.com analytics.tiktok.com bat.bing.com tags.creativecdn.com www.upsellit.com *.usablenet.com; connect-src 'self' *.afterpay.com *.cash.app api.lab.amplitude.com *.klarna.com *.paypal.com api.radar.io *.google-analytics.com *.googletagmanager.com *.fullstory.com cdn.cookielaw.org *.evergage.com *.sentry.io *.tiktok.com *.bing.com *.creativecdn.com *.mountain.com *.forter.com *.sitevibes.com *.google.com analytics.google.com *.abtasty.com api.cquotient.com *.thrive.today *.attn.tv *.ipredictive.com *.algolia.net *.algolianet.com *.onetrust.com *.my.salesforce-scrt.com *.my.site.com 1.1.1.1 shoecarnivalproduction.cdn.content.amplience.net cdn.media.amplience.net maps.googleapis.com apps.bazaarvoice.com ixfd-api.bc0a.com *.bc0a.com *.clarity.ms *.adroll.com stats.g.doubleclick.net pagead2.googlesyndication.com events.attentivemobile.com api.addressy.com www.facebook.com ad.doubleclick.net googleads.g.doubleclick.net ct.pinterest.com www.googleadservices.com analytics-ipv6.tiktokw.us cdn0.forter.com cdn3.forter.com d1rk8r7fwbocot.cloudfront.net d3banl4fzuxsjl.cloudfront.net d2o5idwacg3gyw.cloudfront.net edge.fullstory.com rs.fullstory.com; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' *.my.site.com d13vs86ckfnvoz.cloudfront.net cdn.jsdelivr.net app.sitevibes.com fonts.googleapis.com *.typekit.net use.typekit.net *.cash.app; frame-src 'self' *.afterpay.com *.cash.app *.pbbl.co tcapi.io *.pinterest.com creatives.attn.tv services.sheerid.com *.my.site.com www.google.com www.paypal.com www.googletagmanager.com www.facebook.com ad.ipredictive.com; frame-ancestors 'self'; img-src * data: blob:; font-src * data:; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=D4UIVRTbbyZTk5XdZzNbiLL_8glwg7BPYlK7S2DPVoI-1789263618.9047906-1.0.1.1-skg6yrPveNu0e29qYoqCNZ0xqDC.rFO78Lk9F1g_3aJmigJ0AS9fMmxeCHbufl7CBx6HfET9vidH8cRiu3dOT0T.Pu6T6Llkiwvu4wrT9b6NJiYmnbJhreDtMegaZlgVJu77rdYUrpii0W.gpLftIDTe5odrTMq9.CQFwADXTpCeO_AJXyigQVmgQeIC3W4j2Foqqx17pdoRgC1.IYLRFJsKbw2xPiCplFFYVZ2gWzRYfRzhMim58W3O7yoBYgej; report-to cf-swfclbkwvqtqwzfy 1
default-src 'self' 'unsafe-inline' 'unsafe-eval'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=pooKFA3GOPNI8uYrYYC4e5Ta1jc8PAyRQJLf_9xjkcI-1789264909.894782-1.0.1.1-j301mha0W5xiemrU6d_hTaeIVpfbQjKhVzBKInIPj_6_AkpIgnHkpY0EGJdSBgfpsEj7_2d8Nb._4d5L6o9qe3Xy1VXaFFzKQRky_Yzx4iqkf9Qg3kyz8AGlSw6SGyWjX5PyT4mq5tbnI781KPBQBRudVGevMPu1xmAuvHXoDHlXSdMz4uLRttwzBH2FIbjK; report-to cf-iyyhkoaltkvteywj 1
font-src *.googleapis.com *.gstatic.com 'unsafe-inline' data: https://www.googletagmanager.com maxcdn.bootstrapcdn.com apps.mypurecloud.com use.typekit.net *.silencershop.com *.klaviyo.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.authorize.net *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.credova.com *.authorize.net *.webeyez.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com *.credova.com * *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com https://www.youtube.com https://c.paypal.com/ https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.silencershop.com *.signifyd.com *.online-metrix.net/ data.adxcel-ec2.com engine.gettopple.com trkn.us *.cloudfront.net *.klaviyo.com https://b.stats.paypal.com/ https://slc.stats.paypal.com/ https://c.paypal.com/ https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.credova.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ cdn.jsdelivr.net *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.silencershop.com apps.usw2.pure.cloud *.signifyd.com delivery.gettopple.com *.online-metrix.net d14jnfavjicsbe.cloudfront.net sleeknotecustomerscripts.sleeknote.com sleeknotestaticcontent.sleeknote.com sec.webeyez.com widget.trustpilot.com *.klaviyo.com *.fontawesome.com *.google-analytics.com https://bam.nr-data.net https://bam-cell.nr-data.net https://c.paypal.com https://cdn-scripts.signifyd.com https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://static.klaviyo.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com apps.mypurecloud.com use.typekit.net p.typekit.net *.silencershop.com *.klaviyo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.credova.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.addressy.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.silencershop.com *.signifyd.com invitejs.trustpilot.com send.webeyez.com sec.webeyez.com *.klaviyo.com *.google-analytics.com https://bam.nr-data.net https://bam-cell.nr-data.net https://payments.sandbox.braintree-api.com/ https://origin-analytics-sand.sandbox.braintree-api.com/ https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://smartsolutions.report-uri.com/r/d/csp/reportOnly; report-to report-endpoint; 1
report-uri https://endpoint2.collection.us2.sumologic.com/receiver/v1/http/ZaVnC4dhaV3VOE24ov0vchYgO3uoxKHdePxnKoFiICkeq1Vt2reRBEg4zYmpS2XL1UJS-0Ova9gUiV2PUH3EvuXcIOdrBPvAUgkIP-ZRbRMryNUY6YGqAQ== ; block-all-mixed-content ; default-src 'report-sample' 'self' https://*.videoask.com https://*.videoask.live ; script-src 'report-sample' 'self' 'unsafe-eval' https://*.videoask.com https://*.videoask.live 'unsafe-inline' https://js.stripe.com https://www.dropbox.com https://*.calendly.com https://*.oncehub.com https://cdn.amplitude.com https://cdn.cookielaw.org https://cdn.rollbar.com https://cdn.segment.com https://connect.facebook.net https://fast.wistia.com https://script.crazyegg.com https://snap.licdn.com https://snippet.growsumo.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://cdn.optimizely.com https://js.partnerstack.com https://edge.fullstory.com https://a.quora.com https://static.ads-twitter.com https://analytics.tiktok.com https://tags.srv.stackadapt.com ; base-uri 'report-sample' 'self' ; img-src 'report-sample' 'self' data: blob: android-webview-video-poster: https: ; media-src 'report-sample' 'self' blob: data: https: ; connect-src 'report-sample' 'self' blob: https://*.videoask.com https://*.videoask.live wss://*.videoask.live wss://*.videoask.com https://videoask-media-dev.s3-accelerate.amazonaws.com https://videoask-media-prod.s3-accelerate.amazonaws.com https://videoask-uploads-dev.s3-accelerate.amazonaws.com https://videoask-uploads-prod.s3-accelerate.amazonaws.com https://videoask-uploads-dev.s3.amazonaws.com https://videoask-uploads-prod.s3.amazonaws.com https://videoask.eu.auth0.com https://dev-videoask.eu.auth0.com https://*.launchdarkly.com https://*.pexels.com https://*.wistia.com https://embedwistia-a.akamaihd.net https://api.rollbar.com https://api.segment.io https://api.amplitude.com https://*.g.doubleclick.net https://www.google-analytics.com https://*.crazyegg.com https://p.adsymptotic.com https://www.facebook.com https://track.segmetrics.io https://*.google.com https://rs.fullstory.com https://cdn.segment.com https://edge.fullstory.com https://js.partnerstack.com https://grsm.io https://cdn.cookielaw.org https://*.onetrust.com https://*.contentful.com https://videoask.zendesk.com https://*.optimizely.com https://region1.google-analytics.com https://analytics.tiktok.com https://partnerlinks.io ; style-src 'report-sample' 'self' https://font.typeform.com 'unsafe-inline' https://fonts.googleapis.com https://tagmanager.google.com https://cdn.cookielaw.org https://cdn.quilljs.com ; font-src 'report-sample' 'self' data: https://font.typeform.com https://fonts.gstatic.com ; frame-src 'report-sample' 'self' https://*.videoask.com https://*.videoask.live https://calendly.com https://app.acuityscheduling.com https://*.oncehub.com https://js.stripe.com https://videoask.eu.auth0.com https://dev-videoask.eu.auth0.com https://*.wistia.com https://www.facebook.com https://*.doubleclick.net https://6g4qf7txd07m.statuspage.io https://*.optimizely.com ; frame-ancestors * ; object-src 'none' ; 1
img-src https: data:; connect-src https:; report-uri https://csp-reports.yesware.com/new 1
default-src 'self'; script-src 'self' https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://mc.yandex.ru https://api-maps.yandex.ru; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data: https:; frame-src 'self' https://www.google.com https://www.youtube.com https://rutube.ru https://mc.yandex.ru https://open.ivideon.com https://peertube.wirenboard.com https://www.1tv.ru; connect-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
report-uri /csp-log.php; report-to csp-log-endpoint; default-src 'none'; img-src 'self' data: https://werbung.leipzig.de/ https://data.leipzig.de/ https://static.leipzig.de/ https://www.gstatic.com/images/; script-src 'self' 'unsafe-inline' https://cdn.captchafox.com/ https://www.leipzig.de/ https://static.leipzig.de/ https://werbung.leipzig.de/delivery/ https://vrweb15.linguatec.org/VoiceReaderWeb15User/player20/scripts/ https://dev.lehst.de/ https://static.conword.io/; style-src 'self' 'unsafe-inline' https://cdn.captchafox.com/ https://static.leipzig.de/ https://vrweb15.linguatec.org/VoiceReaderWeb15User/player/styles/ https://dev.lehst.de/; font-src 'self' https://static.leipzig.de/ https://fonts.gstatic.com/; media-src 'self' https://static.leipzig.de/ https://vrweb15.linguatec.org/VoiceReaderWeb15User/player20/scripts/; connect-src 'self' https://api.captchafox.com/ https://cdn.captchafox.com/ https://vrweb15.linguatec.org/VoiceReaderWeb15WebService/ https://dev.lehst.de/ https://www.leipzig.de/; frame-src https://www.youtube-nocookie.com/embed/ https://tnv.leipzig.de https://s-leipzig.maps.arcgis.com https://geo.leipzig.de https://geoportal.leipzig.de https://www.blitzvideoserver.de https://tportal.toubiz.de https://kwis-web.leipzig.de; frame-ancestors 'self' https://*.leipzig.de/; 1
script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=GFym4xmH3RM81GQE91J2J8KaZpL4prvSzwk6CoVIVrU-1789266801.5417647-1.0.1.1-7Xt3RvEZ9nHwVo2qRqwhczUc4RzJSAkVPRy9uI904ZRFWic2OVBIwY9n04QAniqpzFSt9Zkun5IYnil2l.KaF_oiJ1wRYJb50t7K3JhgS2Dmksc2TfIxE1Kigg_17Gxq9Tn0V_iZVE27mkg8TYy3p2Qu7L_545YgoFnHmoBW.cM; report-to cf-csp-endpoint 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.firstdata.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.firstdata.com *.ipg-online.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; frame-ancestors https://api.clerk.io https://cdn.clerk.io 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.firstdata.com https://pay.google.com https://pay.sandbox.google.com https://pay.google.co.uk https://pay.google.ie https://applepay.cdn-apple.com https://apple-pay-gateway.apple.com https://apple-pay-gateway-cert.apple.com https://apple-pay-gateway-nc-pod1.apple.com https://apple-pay-gateway-pr-pod1.apple.com *.ipg-online.com https://ci.checkout-lane.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * js.stripe.com *.hotjar.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.firstdata.com *.ipg-online.com https://www.gstatic.com https://cdn.clerk.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.facebook.com bat.bing.com *.google.com *.google.co.uk *.googleadservices.com *.google-analytics.com *.magentocommerce.com *.widgets.magentocommerce.com *.paypalobjects.com *.postcodeanywhere.co.uk *.hsforms.net *.hsforms.com *.civiccomputing.com *.hs-scripts.com *.hsadspixel.net *.hs-banner.com *.hs-analytics.net *.clerk.io data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.firstdata.com self unsafe-inline https://pay.google.com https://pay.sandbox.google.com https://pay.google.co.uk https://pay.google.ie https://applepay.cdn-apple.com https://apple-pay-gateway.apple.com https://apple-pay-gateway-cert.apple.com https://apple-pay-gateway-nc-pod1.apple.com https://apple-pay-gateway-pr-pod1.apple.com *.ipg-online.com https://ci.checkout-lane.com https://api.clerk.io https://cdn.clerk.io chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com connect.facebook.net js-agent.newrelic.com bam.nr-data.net *.hsforms.net *.hsforms.com *.civiccomputing.com *.hs-scripts.com *.hsadspixel.net *.hs-banner.com *.hs-analytics.net *.clerk.io https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.firstdata.com *.ipg-online.com https://api.clerk.io https://cdn.clerk.io downloads.mailchimp.com *.fontawesome.com assets.braintreegateway.com services.postcodeanywhere.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.firstdata.com *.ipg-online.com https://pay.google.com https://pay.sandbox.google.com https://pay.google.co.uk https://pay.google.ie https://payments.google.com https://applepay.cdn-apple.com https://apple-pay-gateway.apple.com https://apple-pay-gateway-cert.apple.com https://apple-pay-gateway-nc-pod1.apple.com https://apple-pay-gateway-pr-pod1.apple.com https://ci.checkout-lane.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.hsforms.net *.hsforms.com *.civiccomputing.com *.hs-scripts.com *.hsadspixel.net *.hs-banner.com *.hs-analytics.net *.clerk.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-Dpimj12MaxbrZ-wqxjl_cA' 'strict-dynamic' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://recaptcha.google.com https://*.vwo.com https://*.visualwebsiteoptimizer.com https://*.trustarc.com https://bat.bing.com https://googleads.g.doubleclick.net https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://js.hscollectedforms.net https://js.usemessages.com https://*.g2crowd.com; style-src 'self' 'unsafe-inline' https://*.vwo.com https://*.visualwebsiteoptimizer.com; font-src 'self' data: https://*.trustarc.com; img-src 'self' data: blob: https://*.mettl.pro https://*.mettl.xyz https://*.mettl.com https://*.mercermettl.com https://*.mercermettl.eu https://img.youtube.com https://i.ytimg.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://www.google.co.in https://www.gstatic.com https://f.hubspotusercontent10.net https://track.hubspot.com https://*.vwo.com https://*.visualwebsiteoptimizer.com https://*.vwo.io https://ade.googlesyndication.com https://forms.hsforms.com https://*.trustarc.com https://*.clarity.ms https://*.bing.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://www.googletagmanager.com https://www.google.com https://www.google.co.in https://pagead2.googlesyndication.com https://*.vwo.com https://*.visualwebsiteoptimizer.com https://api.hsforms.com https://api.hubspot.com https://forms.hubspot.com https://forms.hscollectedforms.net https://*.clarity.ms https://*.trustarc.com https://bat.bing.com https://ad.doubleclick.net https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.googleadservices.com https://*.g2.com https://*.g2crowd.com https://recaptcha.net https://static.hsappstatic.net; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://*.trustarc.com https://*.doubleclick.net https://recaptcha.net https://app.hubspot.com https://app.wingify.com https://*.vwo.com https://*.visualwebsiteoptimizer.com; worker-src 'self' blob:; media-src 'self' blob: https://*.mettl.com https://*.mettl.pro https://*.mettl.xyz https://*.mercermettl.com https://*.mercermettl.eu; object-src 'none'; base-uri 'self'; form-action 'self' https://www.google.com; frame-ancestors 'self' https://app.vwo.com https://app.wingify.com; report-uri https://logs.mettl.com/csp 1
default-src https:;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cc.cdn.civiccomputing.com https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://reports.hrmdirect.com https://*.etcconnect.com;style-src 'self' 'unsafe-inline' https://hello.myfonts.net https://reports.hrmdirect.com https://www.highend.com https://fonts.googleapis.com https://*.etcconnect.com;object-src 'none';img-src 'self' data: https://www.google-analytics.com https://www.facebook.com https://*.etcconnect.com;report-uri /Handlers/CspReports.ashx?type=REPORTONLY; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-sW6ZCZmGWTWFZqln_KbvlA' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
default-src 'self' blob:; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https://*.furnishedfinder.com https://*.facebook.com https://www.facebook.com https://*.steadilypartner.com https://*.steadily.com https://steadily.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:; script-src-attr 'unsafe-inline'; connect-src 'self' blob: data: https: wss:; img-src * data: blob:; font-src 'self' data: https:; frame-src 'self' blob: https:; style-src 'self' 'unsafe-inline' blob: https:; style-src-attr 'self' 'unsafe-inline'; worker-src 'self' blob:; child-src 'self' blob:; media-src 'self' data: blob: https:; object-src 'none'; manifest-src 'self' https:; report-uri https://o4507018827071488.ingest.us.sentry.io/api/4510343205421056/security/?sentry_key=1faef7d9a5760350ce11e10419c510e3&sentry_release=v0.1.12; report-to csp-endpoint-v2 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.googleadservices.com *.googleapis.com static.quiq-cdn.com *.fontawesome.com *.rezync.com *.nothingbundtcakes.com tags-prod.nothingbundtcakes.com *.toasttab.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.google.com *.braintreegateway.com *.paypal.com google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.rezync.com static.quiq-cdn.com *.quiq-api.com *.googleadservices.com *.doubleclick.net *.vimeo.com *.facebook.com *.nothingbundtcakes.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleadservices.com *.google.com *.google.com.ca *.google.com.co *.googleapis.com *.vimeo.com *.cdn-apple.com *.cookielaw.org *.usablenet.com *.usablenet.dev *.doubleclick.net *.contentsquare.net *.nothingbundtcakes.com *.pmg.com *.pinimg.com *.adroll.com *.facebook.net *.bing.com *.redditstatic.com *.amazonaws.com *.cognitivlabs.com *.reddit.com *.facebook.com *.adnxs.com *.magentosite.cloud *.monetate.net *.rfihub.com *.eyeota.net *.rezync.com *.yimg.com *.boomtrain.com *.linkedin.com *.yahoo.com *.pubmatic.com *.openx.net *.media.net *.rtactivate.com *.casalemedia.com *.rlcdn.com *.addthis.com *.tremorhub.com *.bidswitch.net *.adsrvr.org *.prf.hn prf.hn *.taggrs.io taggrs.io *.ml314.com static.quiq-cdn.com *.quiq-api.com ml314.com *.tapad.com tapad.com tags-prod.nothingbundtcakes.com *.toasttab.com images.unsplash.com plus.unsplash.com *.cloudinary.com *.cloudfront.net *.imgix.net cdn.bfldr.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.gstatic.com https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleadservices.com *.googleapis.com *.cookielaw.org *.usablenet.com static.quiq-cdn.com *.quiq-api.com *.usablenet.dev *.contentsquare.net *.nothingbundtcakes.com *.pmg.com *.pinimg.com *.adroll.com *.facebook.net *.bing.com *.redditstatic.com *.tiktok.com *.bttrack.com *.adsrvr.org *.pinterest.com *.facebook.com *.magentosite.cloud *.monetate.net *.appboycdn.com *.rfihub.com *.everesttech.net *.eyeota.net *.rezync.com *.yimg.com *.boomtrain.com *.yahoo.com *.kargo.com *.licdn.com *.inpwrd.net bttrack.com *.adnxs.com *.rfihub.net cdn.bttrack.com tags-prod.nothingbundtcakes.com *.toasttab.com https://gateway.moneris.com https://gatewayt.moneris.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com assets.braintreegateway.com *.googleadservices.com *.googleapis.com *.fontawesome.com static.quiq-cdn.com *.usablenet.com *.usablenet.dev *.rezync.com *.nothingbundtcakes.com tags-prod.nothingbundtcakes.com *.toasttab.com https://gateway.moneris.com https://gatewayt.moneris.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleadservices.com *.googleapis.com *.vimeo.com static.quiq-cdn.com *.cdn-apple.com *.cookielaw.org *.onetrust.com *.usablenet.com *.usablenet.dev *.contentsquare.net *.doubleclick.net *.nothingbundtcakes.com *.pmg.com *.pinimg.com *.adroll.com *.facebook.net *.bing.com *.redditstatic.com *.tiktok.com *.bttrack.com *.adsrvr.org *.amazonaws.com *.cognitivlabs.com *.reddit.com *.pinterest.com *.facebook.com *.adnxs.com *.gstatic.com *.rlcdn.com *.magentosite.cloud *.monetate.net *.everesttech.net *.eyeota.net *.rezync.com *.yimg.com *.boomtrain.com *.yahoo.com *.kargo.com *.linkedin.com *.quiq-api.com tags-prod.nothingbundtcakes.com *.toasttab.com images.unsplash.com plus.unsplash.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; font-src 'self' https://d1mnljovdqnw4e.cloudfront.net data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline'; worker-src 'self' blob:; connect-src 'self' https:; img-src 'self' https:; frame-src 'self' https://www.googletagmanager.com https://services.sdiapi.com; 1
font-src fonts.gstatic.com use.typekit.net https://*.gstatic.com *.fontawesome.com fonts.googleapis.com *.oct8ne.com https://cdnjs.cloudflare.com *.gstatic.com https://sandbox.sequracdn.com/ *.reskyt.com/ https://cdn.doofinder.com/* data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.adyen.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://plumrocket.com https://www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.googletagmanager.com *.adyen.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.oct8ne.com https://plumrocket.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.trustpilot.com *.paypalobjects.com/ *.flyde.io/ *.redintelligence.net/ *.reskyt.com/ *.sequrapi.com/ *.klarnacdn.net/ *.doubleclick.net/ *.google.com/ https://www.facebook.com *.amazonaws.com/* https://myadsplatform-prod.s3.eu-central-1.amazonaws.com/ https://static.criteo.net https://gum.criteo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net p.typekit.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io *.adyen.com https://*.gstatic.com cdn.doofinder.com magefan.com cm.magefan.com *.disqus.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com *.oct8ne.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.padelnuestro.com https://www.google.ie *.googleapis.com *.gstatic.com https://www.google.es/ads/ *.googletagmanager.com/ https://www.emjcd.com/ https://cj.dotomi.com/ *.cloudfront.net *.bing.com/ *.adform.net/ *.facebook.com/ *.reskyt.com/ *.connectif.cloud/ *.doubleclick.net/ *.google.com/ *.placeholder.com https://grwapi.net *.google-analytics.com *.tile.openstreetmap.org data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net www.sandbox.paypal.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-ds.com www.googletagmanager.com *.adyen.com cdn.doofinder.com *.disqus.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.oct8ne.com https://cdnjs.cloudflare.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.trustpilot.com https://sdk.privacy-center.org https://js-agent.newrelic.com https://bam.nr-data.net *.googleapis.com *.gstatic.com https://www.mczbf.com/ https://cdn.connectif.cloud/ *.cloudfront.net https://commerce.adobedtm.com/ *.bing.com/ *.adform.net/ *.jsdelivr.net/ *.flyde.io/ *.facebook.net/ *.tiktok.com/ *.klarnacdn.net/ *.reskyt.com/ *.quantummetric.com/ blob *.klarna.com/ *.sequrapi.com/ *.clarity.ms/ *.google.com/ https://grwapi.net https://unpkg.com https://eu1-config.doofinder.com/* *.doofinder.com/* https://eu1-config.doofinder.com/2.x/d0f0ef47-8a08-4c9c-9f1f-3c43a3aa757c.js *.usermaven.com/* *.creativecdn.com/* *.woopra.com/* https://static.woopra.com/ https://www.woopra.com/ https://tags.creativecdn.com/ https://ams.creativecdn.com/ https://f.creativecdn.com/ https://sync.outbrain.com/ *.googletagmanager.com *.google-analytics.com cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com/ *.doofinder.com *.fontawesome.com https://fonts.googleapis.com https://cdnjs.cloudflare.com *.trustpilot.com *.googletagmanager.com/ *.reskyt.com/ *.googleapis.com https://grwapi.net *.doofinder.com/* https://cdn.doofinder.com/* https://cdn.doofinder.com/livelayer/1/css/2/common.css cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io qa-api.magedevteam.com *.sentry.io *.adyen.com *.doofinder.com wss://*.doofinder.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com *.oct8ne.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com https://pre.wayletlabs.com/* https://pro.waylet.es/* https://region1.google-analytics.com https://api.privacy-center.org *.doubleclick.net https://bam.nr-data.net *.googleapis.com *.gstatic.com *.google.com https://www.mczbf.com/ *.connectif.cloud/ *.flyde.io/ *.tiktok.com/ *.facebook.com/ *.reskyt.com/ *.quantummetric.com/ *.googlesyndication.com/ *.klarna.com/ *.klarnacdn.net/ *.clarity.ms https://grwapi.net https://track.adform.net https://google.com *.woopra.com/ *.googletagmanager.com *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://js.hsforms.net https://forms-na1.hsforms.com https://js.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hscollectedforms.net https://js.storylane.io https://www.youtube.com https://s.ytimg.com https://connect.facebook.net https://snap.licdn.com https://www.redditstatic.com https://static.ads-twitter.com https://analytics.twitter.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://cdn.omniconvert.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' data:; connect-src 'self' https://www.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://*.hsforms.com https://*.hsforms.net https://*.hubapi.com https://track.hubspot.com https://forms.hscollectedforms.net https://*.storylane.io https://ipinfo.io https://www.facebook.com https://px.ads.linkedin.com https://*.reddit.com https://analytics.twitter.com https://*.doubleclick.net https://www.googleadservices.com https://*.omniconvert.com; frame-src https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://app.storylane.io https://*.hsforms.com https://www.facebook.com https://px.ads.linkedin.com https://*.doubleclick.net; object-src 'none'; base-uri 'self'; form-action 'self' https://*.hsforms.com https://www.facebook.com; frame-ancestors 'self' 1
base-uri 'self';connect-src 'self' https://www.google-analytics.com https://*.googleapis.com https://api.rudderlabs.com https://hosted.rudderlabs.com https://rudderstack.taskade.cloud https://api.stripe.com https://checkout.stripe.com https://sentry.io wss: https://cn2bi8ujy8.execute-api.us-east-1.amazonaws.com https://taskade-files.s3.us-east-1.amazonaws.com https://files.taskade.com https://vimeo.com https://fast.wistia.com https://*.loom.com https://www2.profitwell.com https://api.canny.io https://pa.taskade.com https://companion.taskade.com;default-src 'self';form-action 'self';media-src 'self' https://files.taskade.com;script-src 'self' 'unsafe-eval' 'unsafe-inline' https://ajax.cloudflare.com https://challenges.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://checkout.stripe.com https://js.stripe.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.com https://r.wdfl.co https://public.profitwell.com https://cdn.firstpromoter.com https://canny.io https://pa.taskade.com https://unicorn.taskade.workers.dev https://static.cloudflareinsights.com;object-src 'none';img-src 'self' data: https://www.googletagmanager.com https://www.google-analytics.com https://*.stripe.com https://files.taskade.com https://unpkg.com https://i.ytimg.com https://*.sndcdn.com https://i.vimeocdn.com https://*.wistia.com https://cdn.loom.com https://*.figma.com https://images.typeform.com https://*.whimsical.com https://companion.taskade.com;style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com;font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com;frame-src 'self' https://*.taskade.app https://checkout.stripe.com https://hooks.stripe.com https://js.stripe.com https://call.taskade.com https://docs.taskade.com https://www.taskade.com https://*.youtube.com https://*.soundcloud.com https://player.vimeo.com https://*.loom.com https://*.figma.com https://*.invisionapp.com https://*.typeform.com https://*.whimsical.com;report-uri /webhooks/csp-report;report-to /webhooks/csp-report;frame-ancestors 'self' https://www.taskade.com 1
default-src 'self' blob:  https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com; frame-src 'self' https://*.noxiaohao.com https://telegram.org https://*.bitget.com https://accounts.google.com https://oauth.telegram.org https://sgtm.btsgtm.com ; script-src 'self' 'nonce-nxivfIN202m5uCIT2I1s+g==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh/v3RIRuG3kMikr5iha+7P/0TN/GNA=' https://*.noxiaohao.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com https://accounts.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://play.google.com https://analytics.google.com https://fonts.gstatic.com https://telegram.org https://oauth.telegram.org https://*.geetest.com https://*.geevisit.com https://sgtm.btsgtm.com; connect-src 'self' wss: https://stats.g.doubleclick.net https://analytics.google.com https://www.google.com wss://stream.bitget.cloud https://*.noxiaohao.com wss://*.noxiaohao.com wss://*.bitget.com https://www.turingfraud.net https://play.google.com https://accounts.google.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com https://telegram.org https://oauth.telegram.org https://static.geetest.com https://static.geevisit.com https://sgtm.btsgtm.com ; worker-src 'self' blob:; img-src 'self' data: blob: https://www.googletagmanager.com https://img.bgbstatic.com https://*.bgstatic.com https://img.bitgetimg.com https://img.gurenla.com https://*.bgbstatic.com https://lh3.googleusercontent.com https://static.geetest.com https://static.geevisit.com https://static-web.jjdsn.vip https://cdn.bitkeep.vip https://www.google.co.jp https://bin.wangsustatic.com https://sgtm.btsgtm.com https://analytics.google.com https://stats.g.doubleclick.net ; style-src 'self' 'unsafe-inline' https://static.geetest.com https://static.geevisit.com https://accounts.google.com https://fonts.googleapis.com https://static.bgbstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com; font-src 'self' data: https://static.geetest.com https://static.geevisit.com https://fonts.gstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri /v1/buried/log/cspSecurity /v1/monitor/csp?appId=d4b6df7d; 1
script-src 'unsafe-inline' 'unsafe-eval'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=_iomhz0gcAIuWxuvwiyJoUER1AogSn5BTE7HtXCNOIM-1789274405.047549-1.0.1.1-f2H_YxJTR3VT3ZTW.CpRp_xvJqSNSzd3yChe5IHIzzdgr7QgZpHK2Ncvng86JYXF8e0XxwbFOkxzjuzEZC8005VlOYjJ5gDAQsDr6l7sO333Ofr0mhrp6vWgLepG6AQajT5hCuGBGDtxUT8pncHYcWtNKJAjgROGVJv3V_3n0nM; report-to cf-csp-endpoint 1
default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://apis.google.com https://va.vercel-scripts.com https://vercel.live https://betterstack.net https://*.betterstack.net https://*.betterstack.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://use.typekit.net; connect-src 'self' https: wss: data:; frame-src 'self' https://*.firebaseapp.com https://accounts.google.com https://myaccount.google.com https://www.google.com https://apis.google.com https://vercel.live https://status.paxhistoria.co; worker-src 'self' blob:; manifest-src 'self'; media-src 'self' blob: https: data:; frame-ancestors 'self'; form-action 'self' https://*.firebaseapp.com https://accounts.google.com; base-uri 'none'; object-src 'none'; report-uri /api/csp-report 1
object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/ https://cse.google.com/ https://www.eventbrite.com/ https://player.vimeo.com/ https://www.googletagmanager.com/ https://www.gstatic.com https://fonts.googleapis.com/ https://cdn.curator.io/ https://www.juicer.io/ https://www.google-analytics.com/ https://js.hsforms.net/ https://cdn.cookielaw.org/ https://js.adsrvr.org/ https://connect.facebook.net/ https://analytics.tiktok.com/ https://snap.licdn.com/ cdnjs.cloudflare.com https://static.addtoany.com https://unpkg.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://www.google.com/ https://cse.google.com/ https://www.eventbrite.com/ https://player.vimeo.com/ https://www.googletagmanager.com/ https://www.gstatic.com https://fonts.googleapis.com/ https://cdn.curator.io/ https://www.juicer.io/ https://www.google-analytics.com/ https://js.hsforms.net/ https://cdn.cookielaw.org/ https://js.adsrvr.org/ https://connect.facebook.net/ https://analytics.tiktok.com/ https://snap.licdn.com/ cdnjs.cloudflare.com https://static.addtoany.com https://unpkg.com; style-src 'self' 'unsafe-inline' https://www.google.com/ https://cse.google.com/ https://www.eventbrite.com/ https://player.vimeo.com/ https://www.googletagmanager.com/ https://www.gstatic.com https://fonts.googleapis.com/ https://cdn.curator.io/ https://www.juicer.io/ https://www.google-analytics.com/ https://js.hsforms.net/ https://cdn.cookielaw.org/ https://js.adsrvr.org/ https://connect.facebook.net/ https://analytics.tiktok.com/ https://snap.licdn.com/ cdnjs.cloudflare.com; style-src-attr 'self' 'unsafe-inline'; frame-ancestors 'self' https://www.google.com/ https://cse.google.com/ https://www.eventbrite.com/ https://player.vimeo.com/ https://www.googletagmanager.com/ https://www.gstatic.com https://fonts.googleapis.com/ https://cdn.curator.io/ https://www.juicer.io/ https://www.google-analytics.com/ https://js.hsforms.net/ https://cdn.cookielaw.org/ https://js.adsrvr.org/ https://connect.facebook.net/ https://analytics.tiktok.com/ https://snap.licdn.com/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://securepubads.g.doubleclick.net https://*.opti-digital.com https://static.chartbeat.com https://connect.facebook.net https://www.qiota.com https://beta.qiota.com https://interactive.valeursactuelles.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://*.immanens.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: https: https://*.immanens.com; connect-src 'self' https: https://*.immanens.com; frame-src 'self' https://securepubads.g.doubleclick.net https://www.facebook.com https://interactive.valeursactuelles.com https://*.opti-digital.com https://www.youtube-nocookie.com https://www.youtube.com https://*.immanens.com; frame-ancestors 'self' 1
default-src 'self' blob: data: 'unsafe-inline' 'unsafe-eval' *.adobedtm.com *.amazon-adsystem.com *.appdemostore.com *.atdmt.com *.avocet.io *.blubrry.com *.clicktale.net *.craftyclicks.co.uk *.chatcora.natwest.com  *.doubleclick.net *.everesttech.net *.facebook.com *.facebook.net *.fca.org.uk *.google.co.uk *.google.com *.googleadservices.com *.jwpcdn.com *.liveperson.net *.linkedin.com *.lpsnmedia.net *.neolane.net *.omguk.com *.omtrdc.net *.pinimg.com *.pinterest.com *.raptmedia.com *.rbos.com *.rbs.co.uk *.rbs.com *.rbsdigital.com *.supportcentre-rbs.co.uk *.snapchat.com *.userzoom.com *.youtube.com *.ytimg.com analytics.twitter.com api.swiftype.com dcs.demdex.net dpm.demdex.net fast.demdex.net fast.rbs.demdex.net jwpltx.com rbs.demdex.net sc-static.net search-rbs.co.uk static.ads-twitter.com t.co www.brightedge.com *.everesttech.net *.everestjs.net cdn.cookielaw.org; upgrade-insecure-requests; report-uri https://rbspersonal.report-uri.com/r/t/csp/reportOnly 1
default-src 'self' blob:  https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; frame-src 'self' https://*.noxiaohao.com https://telegram.org https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://accounts.google.com https://oauth.telegram.org https://sgtm.btsgtm.com  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; script-src 'self' 'nonce-hkRhXpCNWrz+uNRRvI6K9A==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh/v3RIRuG3kMikr5iha+7P/0TN/GNA=' https://*.noxiaohao.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://accounts.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://play.google.com https://analytics.google.com https://fonts.gstatic.com https://telegram.org https://oauth.telegram.org https://*.geetest.com https://*.geevisit.com https://sgtm.btsgtm.com https://static.wangsustatic.xyz https://static.wangsustatic.vip ; connect-src 'self' https://stats.g.doubleclick.net https://analytics.google.com https://*.noxiaohao.com wss://*.noxiaohao.com wss: https://www.turingfraud.net https://play.google.com https://accounts.google.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://telegram.org https://oauth.telegram.org https://static.geetest.com https://static.geevisit.com wss://stream.bitget.cloud https://www.google.com https://sgtm.btsgtm.com  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; worker-src 'self' blob:; img-src 'self' data: blob: https://img.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://img.bitgetimg.com https://img.gurenla.com https://*.bgbstatic.com https://lh3.googleusercontent.com https://static.geetest.com https://static.geevisit.com https://static-web.jjdsn.vip https://cdn.bitkeep.vip https://www.google.co.jp https://bin.wangsustatic.com https://sgtm.btsgtm.com https://analytics.google.com https://stats.g.doubleclick.net  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; style-src 'self' 'unsafe-inline' https://static.geetest.com https://static.geevisit.com https://accounts.google.com https://fonts.googleapis.com https://static.bgbstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; font-src 'self' data: https://static.geetest.com https://static.geevisit.com https://fonts.gstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri /v1/buried/log/cspSecurity /v1/monitor/csp?appId=d4b6df7d; 1
connect-src 'self' https://checkoutshopper-live.adyen.com https://www.facebook.com https://www.google.com https://googleads.g.doubleclick.net https://www.googleoptimize.com https://*.hotjar.com https://*.mparticle.com https://beacon.krxd.net https://*.tre.se https://vercel.live https://api.usabilla.com https://dc.services.visualstudio.com https://stats.g.doubleclick.net https://www.google-analytics.com https://api.customersaas.com https://vc.hotjar.io wss://ws.hotjar.com https://cdn.linkedin.oribi.io https://adservice.google.com https://fonts.gstatic.com https://content.hotjar.io https://*.optimizely.com https://region1.google-analytics.com wss://ws-us3.pusher.com; default-src 'self' https://*.tre.se; font-src 'self' data: https://static.customersaas.com https://vercel.live https://assets.vercel.com; frame-src 'self' https://checkoutshopper-live.adyen.com https://6142836.fls.doubleclick.net https://www.facebook.com https://www.google.com https://www.googletagmanager.com https://widget.trustpilot.com https://d6tizftlrpuof.cloudfront.net https://vercel.live https://www.youtube.com https://cdn.krxd.net https://cloud.epost.tre.se https://coverage.tre.se https://cdn.jobylon.com/ https://tre.workbuster.com https://vars.hotjar.com https://td.doubleclick.net; img-src 'self' data: https://checkoutshopper-live.adyen.com https://6142836.fls.doubleclick.net https://www.facebook.com https://clients1.google.com https://www.google.com https://googleads.g.doubleclick.net https://www.gstatic.com https://www.googletagmanager.com https://beacon.krxd.net https://*.tre.se https://d6tizftlrpuof.cloudfront.net https://vercel.live http://images.ctfassets.net https://images.ctfassets.net https://jslog.krxd.net/ https://t.co https://w.usabilla.com https://www.google-analytics.com/collect https://www.google.se https://www.google.dk https://i.ytimg.com https://img.youtube.com https://new-collect.albacross.com https://d35v9wsdymy32b.cloudfront.net https://px.ads.linkedin.com https://ad.doubleclick.net https://vercel.com blob:; manifest-src 'self'; media-src 'self' https://videos.ctfassets.net; object-src 'none'; report-uri https://www.tre.se/logger/csp-report; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' https://static.customersaas.com https://clients1.google.com https://www.googleoptimize.com https://www.google.com https://googleads.g.doubleclick.net https://www.gstatic.com https://www.googletagmanager.com https://*.hotjar.com https://*.mparticle.com https://widget.trustpilot.com https://d6tizftlrpuof.cloudfront.net https://vercel.live https://www.youtube.com https://*.adtr.io https://*.krxd.net https://adtr.io https://analytics.twitter.com https://api.usabilla.com https://az416426.vo.msecnd.net/scripts/a/ai.0.js https://bat.bing.com https://cdn.bannerflow.com https://cdn.tre.se https://cdnn.tre.se https://connect.facebook.net https://cse.google.com https://gtm.adt313.net/jsTag  https://hi3gscriptbucket.blob.core.windows.net https://rules.quantcount.com https://s.ytimg.com https://secure.quantserve.com https://ssl.google-analytics.com https://static.ads-twitter.com https://tagmanager.google.com https://w.usabilla.com/ https://www.google-analytics.com https://www.googleadservices.com https://serve.albacross.com https://tre.workbuster.com https://region1.analytics.google.com https://cdn.amplitude.com https://treva.boost.ai; style-src 'report-sample' 'self' 'unsafe-inline' https://static.customersaas.com https://www.google.com https://d6tizftlrpuof.cloudfront.net https://vercel.live https://d1r5etm691cejh.cloudfront.net; 1
default-src 'self' *.acadiau.ca; img-src 'self' *.acadiau.ca *.index.digital *.sitescout.com *.gstatic.com *.bc0a.com *.fontawesome.com *.picsum.photos picsum.photos *.twimg.com *.facebook.com *.twitter.com *.google.ca *.google.com www.google-analytics.com wl-pixel.index.digital pixel.sitescout.com s3.amazonaws.com *.b0e8.com *.siteimproveanalytics.io; font-src 'self' *.fontawesome.com *.bootstrapcdn.com *.cloudflare.com *.googleapis.com *.gstatic.com cdn.jsdelivr.net; style-src 'self' *.bootstrapcdn.com *.cloudflare.com *.jsdelivr.net *.fontawesome.com *.twimg.com *.twitter.com *.googleapis.com widget.alongside.com 'unsafe-inline'; script-src 'self' *.acadiau.ca *.google.com *.googleapis.com *.fontawesome.com acuityplatform.com *.jquery.com *.bootstrapcdn.com *.cloudflare.com *.jsdelivr.net *.facebook.net *.google-analytics.com *.technolutions.net *.twitter.com *.twimg.com widget.alongside.com *.instagram.com *.cloudflare.com e.issuu.com *.pixel.ad *.hotjar.com *.bc0a.com *.b0e8.com theta360.com *.tiktok.com *.googletagmanager.com siteimproveanalytics.com 'unsafe-inline'; connect-src 'self' *.hotjar.com *.doubleclick.net www.google-analytics.com *.doubleclick.com *.sitescout.com *.doubleclick.n ka-p.fontawesome.com; frame-src 'self' *.livestream.com *.hotjar.com *.youtube.com *.vimeo.com *.twitter.com *.issuu.com *.facebook.com *.instagram.com *.sitescout.com theta360.com; frame-ancestors 'self'; 1
default-src 'self' blob: https://data.stbuttons.click/data https://challenges.cloudflare.com https://vod-progressive-ak.vimeocdn.com https://cdn.simplecast.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://apps.sitecore.net https://stackpath.bootstrapcdn.com https://cdnjs.cloudflare.com https://code.jquery.com http://ajax.googleapis.com https://maps.googleapis.com https://geoip-js.com https://www.google-analytics.com https://cdn.siteimprove.net https://player.simplecast.com https://cdnjs.cloudflare.com https://my2.siteimprove.com https://id.siteimprove.com https://unpkg.com https://platform-api.sharethis.com https://l.sharethis.com/ https://player.vimeo.com https://extend.vimeocdn.com https://vod-progressive.akamaized.net https://download-video.akamaized.net https://cdn.yoshki.com https://download-video-ak.vimeocdn.com 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: https://cdn.cookielaw.org https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://61281927.global.siteimproveanalytics.io/ https://cdn.yoshki.com https://61281927.global.siteimproveanalytics.io/ https://l.sharethis.com; style-src 'self' https://fonts.googleapis.com https://stackpath.bootstrapcdn.com https://cdn.jsdelivr.net https://unpkg.com 'unsafe-inline'; font-src 'self' data: https://fonts.gstatic.com 'unsafe-inline'; block-all-mixed-content; script-src 'self' https://buttons-config.sharethis.com https://challenges.cloudflare.com https://cdn.cookielaw.org https://www.googletagmanager.com https://maps.googleapis.com https://js.maxmind.com https://cdnjs.cloudflare.com/polyfill/ https://siteimproveanalytics.com https://www.google-analytics.com https://platform-api.sharethis.com https://extend.vimeocdn.com https://cdn.siteimprove.net http://ajax.googleapis.com https://code.jquery.com https://cdn.jsdelivr.net https://unpkg.com https://stackpath.bootstrapcdn.com https://cdnjs.cloudflare.com 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https://cdn.cookielaw.org https://l.sharethis.com https://www.googletagmanager.com https://www.google-analytics.com https://data.stbuttons.click/data https://region1.google-analytics.com/g/collect https://www.googletagmanager.com/td; frame-ancestors 'self' https://www.independentsector.org; report-uri https://233122823c47f119af0143cbea7853d6.report-uri.com/r/d/csp/reportOnly; 1
object-src * ; report-uri https://www.sunlife.ca/slfreporting/reportUri 1
frame-src https://accounts.google.com https://appleid.apple.com https://applepay.cdn-apple.com https://pay.apple.com https://auth0.polymarket.us https://auth0-dev.polymarket.us https://*.checkout.com https://*.js.stripe.com https://js.stripe.com https://hooks.stripe.com https://pay.google.com https://docs.google.com https://vercel.live https://www.youtube.com https://www.youtube-nocookie.com https://player.twitch.tv https://player.kick.com https://intercom-sheets.com https://www.intercom-reporting.com https://player.vimeo.com https://fast.wistia.net; img-src 'self' data: blob: https://polymarket-upload.s3.us-east-2.amazonaws.com https://azuswufclivepubstorstd.blob.core.windows.net https://static.polymarket.us https://static-staging.polymarket.us https://static-preprod.polymarket.us https://pmugc.us https://pmugc-preprod.us; media-src 'self' blob: https://*.beterstream.xyz https://*.b-cdn.net https://lc-live-ll-hls.akamaized.net https://*.geniuslive.geniussports.com https://js.intercomcdn.com https://downloads.intercomcdn.com; require-trusted-types-for 'script'; report-uri /api/csp-report 1
default-src https://www.honeybadger.io; connect-src 'self' data: https://*.savvycal.com/ https://*.frontapp.com/ https://*.fontawesome.com/ https://*.typekit.net/ https://*.honeybadger.io https://*.convertkit.com/ https://*.convertexperiments.com/ https://*.profitwell.com https://*.usefathom.com/ https://*.wistia.com/ https://fg8vvsvnieiv3ej16jby.litix.io https://pipedream.wistia.com/mput https://embedwistia-a.akamaihd.net/ https://cdnjs.cloudflare.com; font-src 'self' data: https://use.typekit.net https://cdnjs.cloudflare.com https://*.fontawesome.com; frame-src https://savvycal.com/ https://player.vimeo.com https://platform.twitter.com https://syndication.twitter.com https://fast.wistia.com; img-src 'self' data: https:; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.gstatic.com/ https://*.savvycal.com/ https://*.frontapp.com/ https://*.fontawesome.com/ https://*.typekit.net/ https://*.profitwell.com https://*.usefathom.com/ https://*.honeybadger.io/ https://*.convertkit.com/ https://*.convertexperiments.com/ https://gist.github.com https://*.wistia.com https://cdn.syndication.twimg.com https://platform.twitter.com https://fast.wistia.com/ https://identity.netlify.com/v1/netlify-identity-widget.js https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' blob: https://*.gstatic.com/ https://*.fontawesome.com https://*.typekit.net https://github.githubassets.com/ https://platform.twitter.com https://ton.twimg.com https://cdnjs.cloudflare.com; media-src 'self' data: https://embedwistia-a.akamaihd.net https://*.wistia.com; manifest-src https://www.honeybadger.io ; report-uri https://api.honeybadger.io/v1/browser/csp?api_key=c2f13350&report_only=true&env=production 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.posthog.com https://*.i.posthog.com https://posthog.spartan.com; connect-src 'self' https://*.posthog.com https://*.i.posthog.com https://*.spartan.com; worker-src 'self' blob: data:; 1
object-src 'none'; script-src 'self' 'report-sample' 'unsafe-eval' www.youtube.com vimeo.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://player.vimeo.com https://unpkg.com; style-src 'self' 'report-sample' 'unsafe-inline' https://cdnjs.cloudflare.com https://unpkg.com; worker-src 'self'; base-uri 'self'; form-action 'self' https://login.microsoftonline.com; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-xJBmoJzhbtxoO9gBj999CQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
base-uri 'self'; child-src https://share.intercom.io https://intercom-sheets.com https://www.intercom-reporting.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net; connect-src 'self' https://*.cliniko.com https://stats.g.doubleclick.net https://www.google-analytics.com https://api.honeybadger.io https://*.intercom.io wss://*.intercom.io https://uploads.intercomcdn.com https://uploads.intercomusercontent.com; default-src 'self'; font-src 'self' data: https://*.cloudfront.net https://js.intercomcdn.com; form-action 'self' https://intercom.help https://api-iam.intercom.io; frame-ancestors 'none'; img-src 'self' data: https:; manifest-src 'self'; media-src https://js.intercomcdn.com; script-src 'self' 'report-sample' 'unsafe-eval' 'unsafe-inline' https://www.google-analytics.com https://ssl.google-analytics.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://www.google.com/recaptcha/api.js https://www.gstatic.com; style-src 'self' 'report-sample' 'unsafe-inline'; report-uri https://fa4a51a09d12751e5d532cfce80751aa.report-uri.com/r/d/csp/reportOnly; 1
connect-src analytics.tiktok.com *.google-analytics.com 'self' 'unsafe-inline' wss:;default-src 'self' 'unsafe-inline' wss:;form-action 'self' 'unsafe-inline' wss:;frame-src *.soundcloud.com 'self' 'unsafe-inline' 'unsafe-eval' *.cookiebot.com *.wearekura.com *.google-analytics.com;img-src *.siteimproveanalytics.io analytics.tiktok.com *.google-analytics.com 'self' 'unsafe-inline' 'unsafe-eval' *.cookiebot.com *.wearekura.com *.google-analytics.com;object-src 'none';script-src *.googletagmanager.com siteimproveanalytics.com analytics.tiktok.com 'self' 'unsafe-inline' 'unsafe-eval' *.cookiebot.com *.wearekura.com *.google-analytics.com;style-src 'self' 'unsafe-inline' 'unsafe-eval' *.cookiebot.com *.wearekura.com *.google-analytics.com 'self' 'unsafe-inline' wss: 1
frame-src demo.arcade.software; base-uri 'none'; style-src 'unsafe-inline' *; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io browser.sentry-cdn.com; default-src 'none'; img-src blob: data: *; media-src *; worker-src 'none'; frame-ancestors 'none'; script-src 'self' 'unsafe-inline' 'report-sample' 'nonce-dyhFTH5Vw/tYLdUBJHD6ow=='; object-src 'none'; font-src 'self' data: 1
default-src 'self'; script-src 'self' 'nonce-WqWSnf3px3uUb9l1PP1XWA' cdn.jsdelivr.net; style-src-elem 'self' 'nonce-WqWSnf3px3uUb9l1PP1XWA' cdn.jsdelivr.net; style-src-attr 'unsafe-inline'; font-src 'self' cdn.jsdelivr.net; img-src 'self' data:; frame-ancestors 'self'; form-action 'self' 1
connect-src 'self' https://google.com https://*.vtex.com.br https://*.vtex.com https://*.myvtex.com https://*.vtexassets.com https://*.publitas.com https://s.pinimg.com https://adservice.google.com https://targetone-callback.chedraui.com.mx https://*.googleapis.com https://*.zdassets.com https://*.vtex.com https://splunk-heavyforwarder-public.vtex.com:8088 https://stable.vtexobservability.com https://*.doubleclick.net https://*.criteo.com https://analytics.tiktok.com https://*.tiktokw.us https://www.google.com https://www.google.com.mx https://www.google.com.co https://www.googleadservices.com https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://app.varify.io https://*.ingest-lr.com https://*.logr-in.com https://*.bing.com https://*.smct.io https://*.nizza.com https://*.creativecdn.com https://*.jewelml.io https://*.flixcar.com https://www.chedraui.com.mx https://chedraui-gtm-ss-878782491714.us-central1.run.app https://cognito-identity.eu-west-1.amazonaws.com https://api.kueskipay.com https://core.aplazo.mx https://chedraui.zendesk.com https://*.empathy.co wss://widget-mediator.zopim.com wss://*.vtex.com wss://*.myvtex.com; report-to csp-endpoint-group 1
default-src 'self' https:; connect-src 'self' https: wss://push.soccer.ru wss://mc.yandex.ru; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://www.google-analytics.com https://vk.com https://yastatic.net https://push.soccer.ru https://top-fwz1.mail.ru https://websdk.appsflyersdk.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; report-uri /.well-known/csp-report 1
default-src 'self'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=pWkjBMcjzENsU_W7886ZlwL4pNltNkvaV5zj7f1VpW8-1789264018.6662288-1.0.1.1-6j41yXS2fd6b8DyPj7mhpJaZ9kerbhJHLTbtxa6nDUPfkE.D3w_BRNxLrpRVY27YDOcMcPyvC8HG.a3VqX47dtv90RXd2w.kAb3OW_Pm7E_IJlv6Jc62wtdntLxFB_KsvvPLHU7544jPvDT.Xvywc1N7ks25cuD1uLaZiLRZ1p7hE3cSCgdN4t2Ky.VaEn8925SdKwbxEydpsCKEEfhM9Q; report-to cf-cjdivxwjtljhbytg 1
script-src 'self' https://tl.karlsruhe.de; object-src 'none'; base-uri 'self' 1
default-src 'self';  script-src 'self' 'unsafe-inline' 'unsafe-eval'    cdn.jsdelivr.net    js.stripe.com    *.criteo.com    *.simonsignal.com    www.facebook.com    connect.facebook.net    bat.bing.com    *.clarity.ms    *.vibe.co    www.google-analytics.com    cdn.cookielaw.org    *.optimizely.com    cdnjs.cloudflare.com    cdn.debugbear.com    googleads.g.doubleclick.net    d229tanlyij0i7.cloudfront.net    d3cv1fywnihry0.cloudfront.net      a61aa9fd029d.cdn4.forter.com    js-agent.newrelic.com    ui.powerreviews.com    payment.searshomeservices.com    tags.fullcontact.com    www.googletagmanager.com    www.paypal.com    cdn.id5-sync.com    mpsnare.iesnare.com    d-code.liadm.com    8quntm5h1h.execute-api.us-east-1.amazonaws.com;  frame-src 'self'    js.stripe.com    payment.searshomeservices.com    offers.searshomeservices.com    www.googletagmanager.com    i.liadm.com    gum.criteo.com    gumi.criteo.com    www.paypal.com    c.searspartsdirect.com    www.facebook.com    connect.facebook.net    a25563730275.cdn.optimizely.com;  connect-src * data: blob: 'unsafe-inline';  img-src * data: blob: 'unsafe-inline';  media-src * data: blob: 'unsafe-inline';  style-src * data: blob: 'unsafe-inline';  font-src * data: blob: 'unsafe-inline';  worker-src * data: blob: 'unsafe-inline';  base-uri 'self';  form-action 'self'    www.facebook.com;  frame-ancestors 'self';  report-to report-endpoint; 1
script-src 'nonce-Rhc9T4s+BM2lcbO4TmaBBQ==' 'strict-dynamic' 'unsafe-eval' 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; report-uri /_/csp-report 1
default-src 'self'; style-src 'self'; script-src 'self' https://maps.googleapis.com https://googletagmanager.com https://munchkin.marketo.net https://script.crazyegg.com https://www.influ2.com https://bat.bing.com https://ws.zoominfo.com https://www.clickcease.com https://tracking.g2crowd.com https://go.qgenda.com https://cdn.bizible.com https://j.6sc.co https://googleads.g.doubleclick.net; connect-src 'self' https://maps.googleapis.com https://script.crazyegg.com https://761-yjz-981.mktoresp.com https://www.google-analytics.com https://t.influ2.com https://c.6sc.co https://ipv6.6sc.co https://stats.g.doubleclick.net  https://tracking.g2crowd.com https://ws.zoominfo.com https://realtime.ramblechat.com;  img-src 'self'  https://www.google.com https://bat.bing.com;  font-src 'self'  https://fonts.gstatic.com;  frame-src 'self' https://td.doubleclick.net;  object-src 'self'; upgrade-insecure-requests; 1
child-src 'none';connect-src 'self' *.e78.co.uk *.civiccomputing.com *.azure.com *.msecnd.net *.vo.msecnd.net *.gstatic.com *.googletagmanager.com *.googleadservices.com *.google.com *.googlesyndication.com *.search.windows.net *.googleapis.com cdnjs.cloudflare.com stackpath.bootstrapcdn.com *.google-analytics.com *.services.visualstudio.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.kustomerapp.com;default-src 'self' stackpath.bootstrapcdn.com *.hotjar.com *.hotjar.io *.googleapis.com *.gstatic.com *.vo.msecnd.net *.services.visualstudio.com *.kustomerapp.com;font-src 'self' use.typekit.net www.google.com google.com ajax.googleapis.com fonts.googleapis.com fonts.gstatic.com stackpath.bootstrapcdn.com;form-action 'self';frame-ancestors 'self';frame-src 'self' *.youtube-nocookie.com *.amazon-adsystem.com *.google.com *.youtube.com *.hotjar.com *.hotjar.io vimeo.com *.vimeo.com *.trustpilot.com www.facebook.com *.publitas.com givp.nl *.kustomerapp.com;img-src 'self' e78-bp-dev-cdn-e4bdb8gjgsgdfqbq.z01.azurefd.net i.ytimg.com online.swagger.io *.google-analytics.com *.google.com *.gstatic.com *.kustomerapp.com;manifest-src 'self';media-src 'self' e78-bp-dev-cdn-e4bdb8gjgsgdfqbq.z01.azurefd.net;object-src 'unsafe-eval';script-src 'self' *.e78.co.uk e78-bp-dev-cdn-e4bdb8gjgsgdfqbq.z01.azurefd.net *.doubleclick.net *.googleadservices.com *.googletagmanager.com *.google.com *.hotjar.com *.hotjar.io *.google-analytics.com *.vo.msecnd.net *.msecnd.net *.services.visualstudio.com cdn.jsdelivr.net *.googleapis.com *.trustpilot.com connect.facebook.net *.azure.com *.gstatic.com cdnjs.cloudflare.com stackpath.bootstrapcdn.com 'unsafe-inline' 'unsafe-eval' *.kustomerapp.com;style-src 'self' e78-bp-dev-cdn-e4bdb8gjgsgdfqbq.z01.azurefd.net p.typekit.net use.typekit.net www.google.com google.com ajax.googleapis.com cdnjs.cloudflare.com fonts.googleapis.com stackpath.bootstrapcdn.com 'unsafe-inline' *.kustomerapp.com;block-all-mixed-content;upgrade-insecure-requests; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: https:; font-src 'self' https: data:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https:; report-to csp-endpoint; report-uri https://csp-report.goglobal.travel/v1/csp-report; 1
default-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com https://c.lytics.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://se.monetate.net https://c.lytics.io https://img03.en25.com https://tracking.pella.com https://cdn.speedcurve.com https://ob.sd6544.pella.com https://obs.sd6544.pella.com https://api.s10h.io https://*.bc0a.com https://www.google.com https://www.gstatic.com https://cdn.livechatinc.com https://cdn.jsdelivr.net https://www.paypal.com https://www.paypalobjects.com https://fonts.googleapis.com https://maps.googleapis.com https://maps.gstatic.com https://cdn.cookielaw.org https://analytics.pella.com https://www.pella.com https://googleads.g.doubleclick.net https://edge.fullstory.com https://rs.fullstory.com https://scripts.clarity.ms https://www.clarity.ms https://snap.licdn.com https://connect.facebook.net https://www.redditstatic.com https://bat.bing.com https://s.pinimg.com https://ct.pinterest.com https://ads.nextdoor.com https://cdn.attn.tv https://cdn.callrail.com https://*.tvsquared.com https://s.adroll.com https://cdn01.basis.net https://js.adsrvr.org https://cdn.resonate.com https://c.amazon-adsystem.com https://tags-cdn.clarivoy.com https://tags.srv.stackadapt.com https://px.mountain.com https://gs.mountain.com https://js.ipredictive.com https://px.premion.com https://pm.geniusmonkey.com https://r.turn.com https://d.turn.com https://trkn.us https://arttrk.com https://ads.undertone.com https://secure.insightexpressai.com https://p.veritone-ce.com https://static.elfsight.com https://universe-static.elfsightcdn.com https://static.quiq-cdn.com https://hover.to https://web-react.hover.to https://www.instagram.com https://www.usehatchapp.com https://unpkg.com https://sa.getroster.com https://*.pixeltracker.co https://safevisit.online https://*.safevisit.online https://track.securedvisit.com https://d-code.liadm.com https://*.rkdms.com https://aa.agkn.com https://dx.mountain.com https://d.adroll.com https://cdn.mgln.ai https://px.octillion.tv https://img.en25.com https://pella.quiq-api.com https://live.rezync.com https://tag.simpli.fi https://tag.brandcdn.com https://insiderdata360online.com https://ftlaunchpad.ai https://dot.dm-io.com https://capi-automation.s3.us-east-2.amazonaws.com https://d.monetate.net https://sb.monetate.net https://www.youtube.com https://api.livechatinc.com https://beta.usehatchapp.com https://build.1pdata.app https://cdn.boomtrain.com https://c1.rfihub.net https://adservices.brandcdn.com https://admin.mobilewallet.cards https://s.swiftypecdn.com https://cdn.rlets.com https://dash-widgets.localiq.com; connect-src 'self' https: wss: data:; worker-src 'self' blob:; media-src 'self' https://assets.contentstack.io; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com https://static.quiq-cdn.com https://*.bamboohr.com https://tags.srv.stackadapt.com https://c.lytics.io; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://www.googletagmanager.com https://c.lytics.io https://www.facebook.com https://obs.sd6544.pella.com https://www.google.com https://www.livechatinc.com https://secure.livechatinc.com https://www.paypal.com https://www.sandbox.paypal.com https://*.doubleclick.net https://*.fls.doubleclick.net https://analytics.pella.com https://ad.ipredictive.com https://ct.pinterest.com https://s.amazon-adsystem.com https://www.youtube.com https://apply.getroster.com https://hover.to https://e.issuu.com https://insight.adsrvr.org https://match.adsrvr.org https://*.rfihub.com https://*.rlets.com https://pixel-sync.sitescout.com https://adservices.brandcdn.com https://d1eoo1tco6rr5e.cloudfront.net https://pella.quiq-api.com https://recruitingbypaycor.com; frame-ancestors 'self' *.pellawi.com pellawi.com *.pellaomaha.com rest-preview.contentstack.com app.contentstack.com app.unbounce.com unbouncepages.com preview-share-ui.contentstack.com; report-uri /api/csp-report/ 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://*.marketo.com https://*.marketo.net https://*.mktoresp.com; upgrade-insecure-requests; img-src 'self' data: blob: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://*.google-analytics.com https://*.marketo.net https://*.marketo.com https://*.mktoresp.com; connect-src 'self' https: https://www.google-analytics.com https://*.google-analytics.com https://stats.g.doubleclick.net https://*.marketo.net https://*.marketo.com https://*.mktoresp.com 1
frame-ancestors 'self' aws.ruralking.cloud:* *.aws.ruralking.cloud:* *.google.com *.cybersource.com up.cybersource.com;         frame-src 'self' aws.ruralking.cloud:* *.aws.ruralking.cloud:* *.googletagmanager.com *.google.com *.signifyd.com *.cookiebot.com *.online-metrix.net *.paypal.com *.facebook.com *.fls.doubleclick.net *.clinch.co *.cloudflare.com *.xanderdev.com showmetheparts.com *.showmetheparts.com www.youtube.com *.jasonindustrial.com *.listrak.com *.quantummetric.com *.tractorsupply.com *.countingdownto.com *.cybersource.com *.optimizely.com https://a5294740418068480.cdn.optimizely.com https://a5294740418068480.cdn-pci.optimizely.com;         default-src 'self' aws.ruralking.cloud:* *.aws.ruralking.cloud:* blob: *.google.com um.simpli.fi d.adroll.com www.ruralking.com *.ruralking.com *.quantummetric.com *.cybersource.com;         child-src 'self' aws.ruralking.cloud:* *.aws.ruralking.cloud:* *.google.com *.quantummetric.com blob:;         script-src 'self' aws.ruralking.cloud:* *.aws.ruralking.cloud:* 'unsafe-inline' 'unsafe-eval' 'self' *.cnstrc.com cnstrc.com *.sezzle.com *.bazaarvoice.com *.signifyd.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.quantummetric.com *.cookiebot.com *.listrakbi.com *.flippenterprise. *.smg.com *.gleamjs.io *.curalate.com polyfill-fastly.net *.polyfill-fastly.net *.lt02.net *.listrak.com *.online-metrix.netnet analytics.freespee.com beacon.krxd.net cm.g.doubleclick.net dpm.demdex.net in.treasuredata.com io.narrative.io lex.33across.com ml314.com pixel.tapad.com s-cs.send.microad.jp stags.bluekai.com us-u.openx.net barracuda.com *.adroll.com d.adroll.mgr.consensu.org dsum-sec.casalemedia.com eb2.3lift.com googleads.g.doubleclick.net p.adsymptotic.com *.ads.linkedin.com pixel.advertising.com pixel.rubiconproject.com *.pubmatic.com snap.licdn.com sync.outbrain.com *.taboola.com ads.yahoo.com ups.analytics.yahoo.com www.facebook.com connect.facebook.net idsync.rlcdn.com ib.adnxs.com x.bidswitch.net *.cloudflareinsights.com *.online-metrix.net *.paypal.com *.bing.com *.hotjar.com *.google.com *.simpli.fi *.amplitude.com *.zdassets.com *.clinch.co *.googlesyndication.com *.clarity.ms *.gleam.io *.cloudflare.com blob: *.flippenterprise.net *.adnxs.com *.certcapture.com *.ruralking.com gleam.io www.ruralking.com *.zendesk.com *.kyc.red *.jquery.com *.cloudfront.net *.bootstrapcdn.com *.tiles.mapbox.com *.cybersource.com testup.cybersource.com cdn.optimizely.com *.optimizely.com optimizely.s3.amazonaws.com cdn-assets-prod.s3.amazonaws.com *.seel.com cdn.seel.com;         connect-src 'self' aws.ruralking.cloud:* *.aws.ruralking.cloud:* 'unsafe-inline' 'unsafe-eval' *.cnstrc.com cnstrc.com *.sezzle.com *.bazaarvoice.com *.signifyd.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.quantummetric.com *.cookiebot.com *.listrakbi.com *.smg.com *.gleamjs.io *.curalate.com polyfill-fastly.net *.polyfill-fastly.net *.lt02.net *.listrak.com *.online-metrix.netnet analytics.freespee.com beacon.krxd.net cm.g.doubleclick.net dpm.demdex.net in.treasuredata.com io.narrative.io lex.33across.com ml314.com pixel.tapad.com s-cs.send.microad.jp stags.bluekai.com us-u.openx.net barracuda.com *.adroll.com d.adroll.mgr.consensu.org dsum-sec.casalemedia.com eb2.3lift.com googleads.g.doubleclick.net p.adsymptotic.com *.ads.linkedin.com pixel.advertising.com pixel.rubiconproject.com *.pubmatic.com snap.licdn.com sync.outbrain.com *.taboola.com ads.yahoo.com ups.analytics.yahoo.com www.facebook.com connect.facebook.net idsync.rlcdn.com ib.adnxs.com x.bidswitch.net *.cloudflareinsights.com *.online-metrix.net *.paypal.com *.bing.com *.hotjar.com *.google.com *.simpli.fi *.amplitude.com *.zdassets.com *.clinch.co *.googlesyndication.com *.clarity.ms *.gleam.io *.cloudflare.com blob: *.flippenterprise.net *.adnxs.com *.certcapture.com *.ruralking.com *.googleadservices.com *.zendesk.com *.bf.dynatrace.com *.doubleclick.net *.bing.net *.hotjar.io *.flippback.com *.flipp.com www.ruralking.com um.simpli.fi wss://*.hotjar.com wss://pod-13-sunco-ws.zendesk.com wss://*.zendesk.com *.cloudfront.net *.mapbox.com *.optimizely.com logx.optimizely.com wss://*.optimizely.com;         style-src 'self' aws.ruralking.cloud:* *.aws.ruralking.cloud:* *.googleapis.com *.googletagmanager.com 'unsafe-inline' *.cdnfonts.com *.listrakbi.com *.gleam.io *.flippenterprise.net *.quantummetric.com app.certcapture.com *.cloudfront.net *.jsdelivr.net *.tiles.mapbox.com *.optimizely.com 'unsafe-inline';         font-src 'self' aws.ruralking.cloud:* *.aws.ruralking.cloud:* *.gstatic.com *.cdnfonts.com *.smg.com *.bazaarvoice.com *.cloudflare.com *.walmartimages.com *.amazonaws.com *.espssl.com data: *.cloudfront.net *.jsdelivr.net *.optimizely.com;         img-src 'self' aws.ruralking.cloud:* *.aws.ruralking.cloud:* https: data:; 1
base-uri 'self'; connect-src 'self' https://*.clarity.ms/collect https://*.google-analytics.com/g/collect https://*.launchdarkly.com https://ad.doubleclick.net https://amplify.outbrain.com https://analytics.google.com https://analytics.tiktok.com https://api.segment.io https://aplo-evnt.com https://bat.bing.com https://bat.bing.net https://browser-intake-datadoghq.eu https://cdn.segment.com https://content.hotjar.io https://conversions-config.reddit.com https://cookie-cdn.cookiepro.com https://geolocation.onetrust.com https://graphql.contentful.com https://id.sage.com https://ingress.eu2.rum-ingress-coralogix.com/browser/v1beta/logs https://maps.googleapis.com https://pagead2.googlesyndication.com https://pagesense-collect.zoho.in https://pixel-config.reddit.com https://pixel.quantserve.com https://pixels.spotify.com https://postcodes.io https://privacyportal.cookiepro.com https://px.ads.linkedin.com https://rum-http-intake.logs.datadoghq.eu https://stats.g.doubleclick.net https://tide.api.kustomerapp.com https://tr.outbrain.com https://widget.trustpilot.com https://www.cloudflare.com https://www.facebook.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.redditstatic.com https://z.clarity.ms; default-src 'none'; font-src 'self' https://cdn.kustomerapp.com https://fonts.gstatic.com https://web-assets.tide.co; frame-ancestors 'self' https://uniclient-demo.web.app; frame-src 'self' https://14663405.fls.doubleclick.net https://forms.zohopublic.in https://widget.trustpilot.com https://www.googletagmanager.com https://www.youtube.com; img-src 'self' https://ade.googlesyndication.com https://bat.bing.net https://c.clarity.ms https://cdn.prod2.kustomerhostedcontent.com https://downloads.ctfassets.net https://heapanalytics.com https://images.ctfassets.net https://impressions.onelink.me https://px.ads.linkedin.com/collect https://q.quora.com https://web-assets.tide.co https://www.facebook.com https://www.google.co.in https://www.google.com; manifest-src 'self'; media-src 'self' https://videos.ctfassets.net; object-src 'none'; report-to csp-reporting-endpoint; report-uri https://csp-report.tpsec.co/; script-src 'self' 'unsafe-inline' https://a.quora.com https://amplify.outbrain.com https://analytics.tiktok.com/ https://assets.apollo.io/ https://bat.bing.com https://cdn-in.pagesense.io https://cdn.datatables.net https://cdn.heapanalytics.com https://cdn.jsdelivr.net https://cdn.kustomerapp.com https://cdn.rum-ingress-coralogix.com https://cdn.segment.com/ https://cdnjs.cloudflare.com/ajax/libs/ https://code.jquery.com https://connect.facebook.net/ https://cookie-cdn.cookiepro.com/ https://d34r8q7sht0t9k.cloudfront.net https://d38xvr37kwwhcm.cloudfront.net https://geotargetly-api-2.com https://googleads.g.doubleclick.net https://googleusercontent.com https://js.stripe.com https://kit.fontawesome.com https://payments.tide.co https://pixel.byspotify.com/ https://rules.quantcount.com https://script.hotjar.com https://scripts.clarity.ms https://scripts.clarity.ms/ https://secure.quantserve.com https://snap.licdn.com https://stackpath.bootstrapcdn.com https://static.ads-twitter.com https://static.hotjar.com https://tr.outbrain.com https://wave.outbrain.com https://web-assets.tide.co/ https://widget.trustpilot.com/ https://www.clarity.ms https://www.datadoghq-browser-agent.com https://www.google-analytics.com https://www.googletagmanager.com/ https://www.gstatic.com https://www.redditstatic.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com/ajax/libs https://fonts.googleapis.com/css https://stackpath.bootstrapcdn.com https://use.typekit.net; worker-src 'self' 1
script-src 'unsafe-eval' 'unsafe-inline' https: 'nonce-b127044ec9ffec7d2904a451' 'strict-dynamic' 'report-sample'  https://*.criteo.com https://static.criteo.net  https://*.facebook.com https://connect.facebook.net  https://*.hotjar.com js.braintreegateway.com assets.braintreegateway.com www.paypalobjects.com *.paypal.com songbird.cardinalcommerce.com *.googletagmanager.com ; worker-src 'self'; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; report-uri https://csp.tourradar.com 1
object-src 'none'; script-src 'self' *.bing.com *.taboola.com *.fullstory.com *.geocomply.com *.kameleoon.eu *.ads-twitter.com *.google-analytics.com *.kaizengaming.com *.jsdelivr.net *.kwai.net *.clarity.ms *.greencolumnart.com *.adalyser.com *.performgroup.com *.scoutgg.net *.sportradarserving.com *.pa4r.com res-odx.op-mobile.opera.com *.bannerflow.net *.facebook.com *.cloudfront.net *.maze.co *.app.delivery *.betano.co *.betgenius.com *.cloudflare.com *.cloudflareinsights.com *.cookielaw.org *.creativecdn.com *.facebook.net *.gmlinteractive.com *.googletagmanager.com *.kameleoon.io *.lgrckt-in.com *.optimove.net *.sportradar.com *.tostarsbuilding.com *.betano.pt *.datadome.co d32tdr35c4icxo.cloudfront.net *.adform.net; worker-src 'self' blob:; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=Zuy770XLXdMghfXuqFl9ANU5zdcxoWgVkG5mrevHAlU-1789273448.219438-1.0.1.1-qLsptcXZ_l4O1zliplVuUH6RxJtElSK0OAw0dExfxKV9QLMY3PGwsEhFax6lyfimPfBBkAfZTiBKlS2KiM9IX.ksNxFYv.S3rSL_oRczCjkb.n_F785pVz8NcZSsUT6Co3zYiELfUUjfH.dn2zAulORVD0Mxdzm.5noSSjdhCfeWWzhoRxsd2ZS9uWDot0pH; report-to cf-mdfseutycpfcudaz 1
frame-ancestors 'self'; upgrade-insecure-requests; report-uri https://5b99b19026a35ad04db5bcf778a03938.report-uri.com/r/d/csp/reportOnly 1
default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; upgrade-insecure-requests 1
object-src 'none';base-uri 'self';script-src 'nonce-dIersjb4IJPyQ_iEixoCiw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
report-uri /upload/csp/csp.php; report-to csp-endpoints 1
default-src 'none'; connect-src 'self' https://*.mediaflow.com https://mfstatic.com https://matomo.malmo.se https://edge.api.brightcove.com https://manifest.prod.boltdns.net https://house-fastly-signed-eu-west-1-prod.brightcovecdn.com; font-src 'self' data: https://mfstatic.com; frame-src 'self' https://stadsatlas.malmo.se https://*.mediaflow.com https://www.youtube.com; img-src 'self' data: https://devenemang.malmo.se https://test-devenemang.malmo.se https://assets.malmo.se https://malmo.se https://metrics.brightcove.com https://*.prod.boltdns.net https://assets.mediaflowpro.com https://*.brightcovecdn.com https://*.inviewer.se https://i.ytimg.com; media-src 'self' https://*.brightcovecdn.com https://*.mediaflow.com blob:; script-src 'self' 'nonce-b72d7790-af2f-11f1-9058-ab8fe06cdfa3' https://matomo.malmo.se https://players.brightcove.net 'strict-dynamic' 'unsafe-eval'; script-src-elem 'self' 'nonce-b72d7790-af2f-11f1-9058-ab8fe06cdfa3' https://matomo.malmo.se https://www.google.com/recaptcha https://players.brightcove.net https://mfstatic.com https://www.youtube.com; style-src 'self' https://malmo.se https://mfstatic.com 'unsafe-inline' data:; 1
default-src 'self' *.rgi.net *.rgfi.net; script-src 'self' *.rgi.net *.rgfi.net 'unsafe-inline'; img-src 'self' *.rgi.net *.rgfi.net; frame-src 'self' *.rgi.net www.youtube.com www.youtube-nocookie.com; frame-ancestors 'self' *.data-line.de *.rgi.net; object-src 'none'; report-uri https://gindat.report-uri.com/r/d/csp/reportOnly 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.vimeo.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.wp.com *.adtrafficquality.google payments.blackbaud.com cdn-cookieyes.com sky.blackbaudcdn.net *.blackbaud.com  *.blackbaudcdn.net  www.clarity.ms *.cloudflare.com control.resi.io *.ctctcdn.com *.doubleclick.net adp.eab.com *.emerson.edu start.emersoncollege.org connect.facebook.net *.facebook.net connect.facebook.net *.google.ar *.google.at *.google.au *.google.ca *.google.ch *.google.cl *.google.cn *.google.cz *.google.de *.google.fr *.google.ie *.google.in *.google.it *.google.gh *.google.gr *.google.jp *.google.nl *.google.nz *.google.se *.google.sp *.google.tw *.google.uk *.google.com cse.google.com https://www.google.com/pagead googleads.g.doubleclick.net https://partner.googleadservices.com partner.googleadservices.com www.googleadservices.com www.googletagmanager.com *.google-analytics.com *.gstatic.com *.intercom.io *.intercomcdn.com cdn.jsdelivr.net *.licdn.com localhost:53388 *.meritpages.com js-agent.newrelic.com qvdt3feo.com secured-pixel.com signup.e2ma.net *.silktide.com sky.blackbaudcdn.net *.stackadapt.com tags.srv.stackadapt.com https://tags.srv.stackadapt.com *.technolutions.net unpkg.com www.paypal.com www.paypalobjects.com platform.instagram.com www.instagram.com *.vimeo.com *.vimeocdn.com *.newrelic.com *.nr-data.net www.googletagservices.com *.googlesyndication.com *.googleadservices.com googleads.g.doubleclick.net adservice.google.com adservice.google.ae adservice.google.al adservice.google.at adservice.google.be adservice.google.bg adservice.google.bs adservice.google.ca adservice.google.ch adservice.google.ci adservice.google.cl adservice.google.co.bw adservice.google.co.cr adservice.google.co.id adservice.google.co.il adservice.google.co.in adservice.google.co.jp adservice.google.co.ke adservice.google.co.kr adservice.google.co.mz adservice.google.co.nz adservice.google.co.th adservice.google.co.tz adservice.google.co.uk adservice.google.co.uz adservice.google.co.ve adservice.google.co.za adservice.google.co.zm adservice.google.co.zw adservice.google.com.ai adservice.google.com.ar adservice.google.com.au adservice.google.com.bd adservice.google.com.bh adservice.google.com.bn adservice.google.com.bo adservice.google.com.br adservice.google.com.co adservice.google.com.cy adservice.google.com.ec adservice.google.com.eg adservice.google.com.et adservice.google.com.fj adservice.google.com.gh adservice.google.com.gi adservice.google.com.gt adservice.google.com.hk adservice.google.com.jm adservice.google.com.kh adservice.google.com.kw adservice.google.com.lb adservice.google.com.mm adservice.google.com.mt adservice.google.com.mx adservice.google.com.my adservice.google.com.ng adservice.google.com.ni adservice.google.com.np adservice.google.com.om adservice.google.com.pa adservice.google.com.pe adservice.google.com.ph adservice.google.com.pk adservice.google.com.pr adservice.google.com.py adservice.google.com.qa adservice.google.com.sa adservice.google.com.sg adservice.google.com.sv adservice.google.com.tr adservice.google.com.tw adservice.google.com.ua adservice.google.com.uy adservice.google.com.vn adservice.google.cz adservice.google.de adservice.google.dk adservice.google.dz adservice.google.ee adservice.google.es adservice.google.fi adservice.google.fr adservice.google.ge adservice.google.gr adservice.google.gy adservice.google.hn adservice.google.hr adservice.google.hu adservice.google.ie adservice.google.im adservice.google.iq adservice.google.is adservice.google.it adservice.google.jo adservice.google.kz adservice.google.li adservice.google.lk adservice.google.lt adservice.google.lu adservice.google.lv adservice.google.md adservice.google.mk adservice.google.mu adservice.google.nl adservice.google.no adservice.google.pl adservice.google.pt adservice.google.ro adservice.google.rs adservice.google.ru adservice.google.se adservice.google.si adservice.google.sk adservice.google.so adservice.google.sr adservice.google.tl adservice.google.tn adservice.google.tt google-analytics.com www.google-analytics.com ssl.google-analytics.com stats.g.doubleclick.net ajax.googleapis.com maps.googleapis.com maps.google.com translate.googleapis.com translate.google.com www.googletagmanager.com googletagmanager.com tagmanager.google.com; style-src 'self' 'unsafe-inline' data: https://*.wp.com *.amazonaws.com payments.blackbaud.com *.jquery.com *.cloudflare.com *.ctctcdn.com *.emerson.edu *.e2ma.net cdn.fonts.net *.google.com www.gstatic.com fonts.googleapis.com https://cdn.jsdelivr.net *.stackadapt.com *.technolutions.net unpkg.com *.vimeocdn.com fonts.googleapis.com 'unsafe-inline' maps.googleapis.com maps.google.com translate.googleapis.com www.googletagmanager.com tagmanager.google.com; img-src 'self' data: https://*.wp.com https://*.wordpress.com cdn-cookieyes.com https://insight.adsrvr.org https://insight.adsrvr.org/track/pxl insight.adsrvr.org *.baidu.com cdn-icons-png.flaticon.com blob: data: https://c.clarity.ms *.ctctcdn.com *.demdex.net *.doubleclick.net https://googleads.g.doubleclick.net *.doubleclick.net *.emerson.edu start.emersoncollege.org *.gstatic.com www.facebook.com connect.facebook.net *.google-analytics.com *.google.ar *.google.at *.google.au *.google.ca *.google.ch *.google.cl *.google.cn *.google.cz *.google.de *.google.fr *.google.ie *.google.in *.google.it *.google.gh *.google.gr *.google.jp *.google.co.jp *.google.nl *.google.nz www.google.ru *.google.se *.google.sp *.google.tw *.google.uk www.google www.google.com www.google.com/ccm/collect *.google.com www.googleadservices.com googleads.g.doubleclick.net www.google.bs/pagead/1p-user-list *.googletagmanager.com ci3.googleusercontent.com insight.adsrvr.org https://px.ads.linkedin.com https://px.ads.linkedin.com/attribution_trigger *.linkedin.com queue.simpleanalyticscdn.com images-na.ssl-images-amazon.com target.scene7.com trkn.us i.vimeocdn.com *.ytimg.com s.w.org ps.w.org ts.w.org secure.gravatar.com www.gravatar.com data: www.paypalobjects.com *.paypal.com *.googlesyndication.com stats.g.doubleclick.net blob: google-analytics.com www.google-analytics.com ssl.google-analytics.com www.google.com *.googleapis.com maps.google.com maps.gstatic.com www.gstatic.com *.ggpht.com translate.googleapis.com translate.google.com i.ytimg.com www.googletagmanager.com; connect-src 'self' https://*.wordpress.com https://*.wp.com ad.doubleclick.net *.adsfight.com *.cookieyes.com https://cdn-cookieyes.com *.ctctcdn.com *.doubleclick.net payments.blackbaud.com data: https://b.clarity.ms cdnjs.cloudflare.com *.constantcontact.com stats.g.doubleclick.net *.adtrafficquality.google *.emerson.edu start.emersoncollege.org *.facebook.com connect.facebook.net *.getrave.com *.goole.com *.google.com.sv *.google.ar *.google.at *.google.au *.google.ca *.google.ch *.google.cl *.google.cn *.google.cz *.google.de *.google.es *.google.fr *.google.ie *.google.in *.google.it *.google.gh *.google.gr *.google.jp *.google.nl *.google.nz *.google.se *.google.sp *.google.tw *.google.uk *.analytics.google.com analytics.google.com www.google www.google.com https://www.google.com googleads.g.doubleclick.net googleads.g.doubleclick.net/pagead/viewthroughconversion https://www.google.com/pagead www.google.com/pagead/1p-conversion googleads.g.doubleclick.net *.google-analytics.com *.googleadservices.com translate.googleapis.com www.googletagmanager.com *.googletagmanager.com api-iam.intercom.io wss://nexus-websocket-a.intercom.io *.intercom.io px.ads.linkedin.com localhost:53388 *.silktide.com *.stackadapt.com *.technolutions.net download-video-ak.vimeocdn.com www.paypalobjects.com *.paypal.com *.vimeo.com *.googlesyndication.com googleads.g.doubleclick.net stats.g.doubleclick.net www.google-analytics.com ampcid.google.com analytics.google.com about: maps.googleapis.com maps.google.com translate.googleapis.com www.googletagmanager.com; font-src 'self' data: data: data https://*.wp.com at.alicdn.com *.amazonaws.com *.gstatic.com pro.fontawesome.com *.intercomcdn.com *.emerson.edu https://emerson.edu cdn.scite.ai use.typekit.net data: fonts.gstatic.com fonts.googleapis.com; frame-src 'self' https://127.0.0.1:0 https://*.wp.com https://wordpress.com *.blackbaud.com *.doubleclick.net *.emerson.edu static.deledao.com *.facebook.com connect.facebook.net *.google.com *.googletagmanager.com safe.menlosecurity.com *.meritpages.com *.id.opendns.com *.panopto.com recapd.com  signup.e2ma.net *.soundcloud.com *.spreaker.com syndicatedsearch.goog *.vimeo.com *.youtube.com www.paypalobjects.com *.paypal.com www.instagram.com *.vimeo.com *.vimeocdn.com *.googlesyndication.com googleads.g.doubleclick.net maps.googleapis.com maps.google.com www.youtube.com www.googletagmanager.com; manifest-src 'self' ; child-src 'self' www.paypalobjects.com *.paypal.com *.vimeo.com *.vimeocdn.com www.youtube.com www.googletagmanager.com; base-uri 'self' ; report-uri https://emerson.edu?gdsih-csp-report; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://securepubads.g.doubleclick.net https://js.stripe.com https://*.doubleclick.net https://pagead2.googlesyndication.com https://cdn.jsdelivr.net https://cdn.ampproject.org https://platform.twitter.com https://www.instagram.com https://telegram.org https://d3js.org https://code.jquery.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://img.novayagazeta.eu https://imagedelivery.net https://placehold.co https://www.google-analytics.com https://*.doubleclick.net https://*.googlesyndication.com; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.doubleclick.net https://*.googlesyndication.com https://api.stripe.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://js.stripe.com https://www.google.com https://*.doubleclick.net https://*.googlesyndication.com https://t.me https://*.vk.com https://vk.com https://platform.twitter.com https://www.instagram.com https://player.vimeo.com https://w.soundcloud.com https://rutube.ru https://datawrapper.dwcdn.net https://*.dwcdn.net https://*.flourish.studio https://flo.uri.sh https://www.facebook.com; font-src 'self' data:; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://*.topendsports.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://app.termly.io https://www.googletagmanager.com https://www.google-analytics.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.sportradar.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https: https://www.google-analytics.com https://www.googletagmanager.com https://static.cloudflareinsights.com; media-src 'self' blob:; frame-src * blob:; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; 1
script-src 'unsafe-inline' 'unsafe-eval'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=iDkHdLS2YpycE9wzD40XC8hU105AwU7.vskncqRN1Hk-1789279620.1463428-1.0.1.1-uRlpC.8iSyKqUGNnOVvZhJgOm_mEju.d.C0tu9noTS2uViE4fT7GUcplnoYA3K4RXjRTyIxlRrEnObmjNdYmIiBPfl4304RZDYfL64kOFznolnvaPb8kkIeXVUuADQORGt3WnKJvcx_BAeUjpqg9370TgKJ_j8yXtTKs27LoBSrsI4wlxQ8wrUfYpAYEliEb; report-to cf-csp-endpoint 1
object-src 'none'; script-src 'self' adform.net *.adform.net *.bing.com *.taboola.com *.fullstory.com *.geocomply.com *.kameleoon.eu *.ads-twitter.com *.google-analytics.com *.kaizengaming.com *.jsdelivr.net *.kwai.net *.clarity.ms *.greencolumnart.com *.adalyser.com *.performgroup.com *.scoutgg.net *.sportradarserving.com *.pa4r.com res-odx.op-mobile.opera.com *.bannerflow.net *.facebook.com *.cloudfront.net *.maze.co *.app.delivery *.betano.co *.betgenius.com *.cloudflare.com *.cloudflareinsights.com *.cookielaw.org *.creativecdn.com *.facebook.net *.gmlinteractive.com *.googletagmanager.com *.kameleoon.io *.lgrckt-in.com *.optimove.net *.sportradar.com *.tostarsbuilding.com *.betano.de *.datadome.co d32tdr35c4icxo.cloudfront.net logr-in.com *.logr-in.com; worker-src 'self' blob:; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=T_U9Ally_xyLlRFTCKppzfXlrBAodHim_FRagtyIJPE-1789281203.4750628-1.0.1.1-xMUVIfMEJtqchPLuzGYC_Z0DnHhu95z5tkPEKB9OdHhLU1T_EA0NkOancMjIzk9aQf.2l4R1YxU.XMmvyBDTc5I_KLrKj0pt1sL1lEVPrK7UHykYmo5lA0gLEEZdczkCqRzAQbgSJh9ioSLguYOiO_0y7CECO5zsoFH3EBnJxQvVdnEGtlGrugLuL_2MIvnl; report-to cf-pnbczpcdpqdemuuq 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com https://www.googletagmanager.com https://platform.twitter.com https://*.twitter.com https://apis.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://platform.twitter.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https://*.cloudfunctions.net https://*.googleapis.com https://www.google-analytics.com https://*.twitter.com; frame-src 'self' https://platform.twitter.com https://syndication.twitter.com https://*.twitter.com https://x.com https://www.youtube.com https://youtube.com https://hgt-2026-da0f6.firebaseapp.com; frame-ancestors 'none'; object-src 'none'; base-uri 'self' 1
frame-ancestors 'self' https://www.bing.com https://www.google.at https://www.google.de https://*.search.yahoo.com; report-uri https://tudorwatch.com/csp-reports/?req_id=7137d5f5 1
base-uri 'none'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self'; img-src 'self' data: blob: https://img.stakely.io https://dev-img.stakely.io; object-src 'none'; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline' 'strict-dynamic' 'nonce-hS+g0YbDixhKaAIke5crIIFZ'; upgrade-insecure-requests; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://*.fontawesome.com https://*.google.com https://*.gstatic.com https://*.googletagmanager.com https://*.googleapis.com; style-src 'self' 'unsafe-inline'; font-src 'self' https://*.fontawesome.com/; img-src 'self' https://*.googletagmanager.com data:; frame-src 'self' https://*.youtube.com; connect-src 'self' https://*.fontawesome.com/ https://*.googleapis.com https://*.google-analytics.com https://*.googletagmanager.com; 1
default-src 'self' https: data: streamable.com; www.youtube.com; script-src 'none' 'unsafe-inline' 'unsafe-eval'; script-src-elem 'self' 'unsafe-inline' https: www.googletagmanager.com; www.youtube.com;; style-src-elem 'self' 'unsafe-inline' https: cdn.lineicons.com; fonts.googleapis.com; style-src-attr 'self' 'unsafe-inline' https:; img-src 'self' https: data: cmefnbespa.cloudimg.io; forms-eu1.hsforms.com;; connect-src 'self' 'none' https: data: www.google.com; forms-eu1.hsforms.com; forms-eu1.hscollectedforms.net; text/plain; media-src 'self' https: www.youtube.com; frame-src 'self' https: www.youtube.com; streamable.com; www.google.com; sandbox allow-same-origin 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com google.com *.intercomcdn.com *.intercom.io *.zdassets.com *.tiktok.com *.bing.com *.jsdelivr.net *.scarabresearch.com *.facebook.net *.storyblok.com *.vercel-scripts.com *.vercel.app *.ggmgastro.com *.ggmgastro.cz *.ggmgastro.xyz *.ggmgastro.fyi *.ggmgastro.dev *.vercel.com *.vercel.live vercel.live vercel.app *.cookiefirst.com *.beslist.nl *.pinterest.com *.smarketer.de *.doubleclick.net *.googleapis.com *.kk-resources.com *.pinimg.com *.clarity.ms googletagmanager.com *.googletagmanager.com *.google-analytics.com *.paypal.com *.adyen.com unpkg.com *.unpkg.com *.hotjar.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.cookiefirst.com *.adyen.com *.google-analytics.com googletagmanager.com *.googletagmanager.com *.google.com google.com *.googleadservices.com; object-src 'none'; base-uri 'self'; connect-src 'self' *.google.com google.com *.googleadservices.com *.doubleclick.net wss://*.intercom.io *.intercom.io *.zdassets.com *.tiktok.com *.tiktokw.us *.ggmgastro.com *.ggmgastro.cz *.ggmgastro.xyz *.ggmgastro.fyi *.ggmgastro.dev *.adyen.com *.cookiefirst.com *.beslist.nl *.pinterest.com *.algolia.net *.algolia.io *.bing.net *.smarketer.de *.googleapis.com *.clarity.ms *.scarabresearch.com *.googlesyndication.com *.google.com *.google.de *.google-analytics.com *.analytics.google.com googletagmanager.com *.googletagmanager.com *.paypal.com *.bing.com *.kelkoogroup.net *.facebook.com *.emarsys.net; font-src 'self' 'unsafe-inline' data:; frame-src 'self' *; img-src 'self' data: *.ggmgastro.com *.ggmgastro.cz *.ggmgastro.xyz *.ggmgastro.fyi *.ggmgastro.dev *.intercomcdn.com *.intercomassets.com *.zendesk.com *.cookiefirst.com *.adyen.com *.bynder.com ggm.bynder.com *.orbitvu.co *.youtube.com *.ytimg.com *.twgdns.com *.gstatic.com *.bing.net *.facebook.com *.facebook.net *.google.com google.com *.google.de *.paypalobjects.com *.storyblok.com *.doubleclick.net googletagmanager.com *.googletagmanager.com *.bing.com; manifest-src 'self'; media-src 'self'; worker-src 'self'; frame-ancestors 'self' https://app.storyblok.com 1
object-src 'none';base-uri 'self';script-src 'nonce-QROic3lrnw37Wp2uAtUVxQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://*.serpstat.com https://www.facebook.com https://www.paypal.com https://www.sandbox.paypal.com; report-uri /csp-report 1
base-uri 'none'; object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-Gn+JfRzy0KqayQwVHE2Dkg==' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.pubnub.com www.googletagmanager.com cdn.sift.com scripts.clarity.ms www.clarity.ms unpkg.com *.clarity.ms googleads.g.doubleclick.net www.gstatic.com ssljscdn.airbrake.io www.google.com cdn.debugbear.com cdn.jsdelivr.net/npm/tinymce@5.4.1/ static.ads-twitter.com bat.bing.com maps.googleapis.com code.jquery.com/jquery-1.9.1.min.js landing-assets.niteflirt.com netdna.bootstrapcdn.com us1.clevertap-prod.com d2r1yp2w7bby2u.cloudfront.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com womp.me www.gstatic.com cdn.jsdelivr.net netdna.bootstrapcdn.com landing-assets.niteflirt.com; img-src * 'self' data: blob:; font-src 'self' data: fonts.gstatic.com wompme.blob.core.windows.net netdna.bootstrapcdn.com use.typekit.net img1.wsimg.com; connect-src 'self' analytics.google.com clarity.ms *.clarity.ms www.google.com pndsn.com *.pndsn.com www.googletagmanager.com region1.analytics.google.com stats.g.doubleclick.net fu-tango.niteflirt.com www.google-analytics.com forum.niteflirt.com files.niteflirt.com api.airbrake.io www.google.ca www.google.co.uk data.debugbear.com fu-sierra.niteflirt.com maps.googleapis.com ps1.pndsn.com y.clarity.ms analytics.twitter.com t.co nf-prod-3yf9blsl.livekit.cloud bat.bing.com bat.bing.net notifier-configs.airbrake.io *.doubleclick.net www.googleadservices.com; media-src * 'self'; frame-src 'self' www.googletagmanager.com platphorm.zendesk.com support.niteflirt.com t.niteflirt.com www.google.com j3lme1u30b.execute-api.us-west-2.amazonaws.com www.youtube.com; worker-src 'self' blob:; report-uri https://siteuri.report-uri.com/r/t/csp/reportOnly 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com https://maps.gstatic.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https:; connect-src 'self' https://maps.googleapis.com https://maps.gstatic.com; frame-src 'self' https://www.google.com https://maps.google.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; 1
default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.raydium.io https://static.moonpay.com https://www.googletagmanager.com https://static.cloudflareinsights.com; img-src 'self' data: https://*.raydium.io https://wsrv.nl; connect-src 'self' https://*.raydium.io wss://raydium-frontend.rpcpool.com https://*.jup.ag https://api.moonpay.com https://tiplink.io wss://*.walletconnect.com https://www.google-analytics.com http://*.solana.com https://*.rpcpool.com; frame-ancestors 'none'; frame-src 'self' https://*.walletconnect.org https://*.walletconnect.com https://v2.moongate.one https://buy.moonpay.com; report-uri /api/csp-report/ 1
default-src *; script-src 'self' 'nonce-Mjg2N0MxdXNjT3U2U1RzbW1GQTV2d2cwQ21nZmc2UzF3amhCenBOODl1'; object-src *; style-src 'self' 'nonce-Mjg2N0MxdXNjT3U2U1RzbW1GQTV2d2cwQ21nZmc2UzF3amhCenBOODl1' 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline' 1
object-src 'none';base-uri 'self';script-src 'nonce-yy26boDR1_PrTbV4HnCUuQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src *.kuajingmaihuo.com *.cdnfe.com wss://seller.kuajingmaihuo.com *.jumio.ai blob: data: 'unsafe-eval' 'unsafe-inline'; report-uri /api/sec-csp/110000010/report 1
connect-src 'self' https://catalog.union.edu https://ep1.adtrafficquality.google https://25livepub.collegenet.com/; font-src 'self' data: https://fonts.gstatic.com https://use.fontawesome.com https://use.typekit.net; frame-src 'self' https://player.vimeo.com https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com; img-src 'self' data: https://cedimages.blob.core.windows.net https://www.google.com https://25livepub.collegenet.com/; object-src 'none'; script-src 'self' 'report-sample' addtocalendar.com https://catalog.union.edu https://cdnjs.cloudflare.com https://code.jquery.com https://cse.google.com https://www.google.com https://maxcdn.bootstrapcdn.com https://platform-api.sharethis.com https://player.vimeo.com https://use.fontawesome.com https://www.googletagmanager.com https://ep2.adtrafficquality.google/ https://cdn.jsdelivr.net https://polyfill-fastly.io https://unpkg.com https://ws.sharethis.com; script-src-elem 'self' 'report-sample' addtocalendar.com https://catalog.union.edu https://cdnjs.cloudflare.com https://code.jquery.com https://cse.google.com https://www.google.com https://maxcdn.bootstrapcdn.com https://platform-api.sharethis.com https://player.vimeo.com https://use.fontawesome.com https://www.googletagmanager.com https://ep2.adtrafficquality.google/ https://cdn.jsdelivr.net https://polyfill-fastly.io https://unpkg.com https://ws.sharethis.com; style-src 'self' 'report-sample' 'unsafe-inline' addtocalendar.com https://catalog.union.edu https://fonts.googleapis.com https://use.fontawesome.com https://use.typekit.net https://www.google.com https://www.google.com/cse/static/ https://cdn.jsdelivr.net; style-src-elem 'self' 'report-sample' https://www.google.com/cse/static/ addtocalendar.com https://catalog.union.edu https://cdn.jsdelivr.net https://fonts.googleapis.com https://use.fontawesome.com https://use.typekit.net; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' https: data: blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.danskespil.dk https://www.googletagmanager.com https://app.varify.io https://sc-static.net https://1984danskespil.boost.ai; frame-ancestors 'self'; report-uri /dli/scapi/danskespil/security/csp/testreport; report-to csp-ro-endpoint 1
font-src *.typekit.net *.gstatic.com fonts.gstatic.com use.typekit.net *.cloudflare.com *.fontawesome.com *.bootstrapcdn.com *.trustedshops.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com api.razorpay.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com p.typekit.net validator.swagger.io www.apptrian.com *.facebook.com *.cloudflare.com *.cdninstagram.com *.avada.io cdn.razorpay.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.commerce-payment-services.com *.typekit.net google.com *.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.apptrian.com *.avada.io *.elfsight.com *.cloudflare.com *.googleapis.com *.twitter.com *.gstatic.com *.fontawesome.com *.facebook.net *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.paypal.com *.paypalobjects.com *.vimeo.com checkout.razorpay.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.elfsight.com *.cloudflare.com *.googleapis.com *.twitter.com *.gstatic.com *.fontawesome.com *.bootstrapcdn.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com google.com *.google.com *.adobe.io performance.typekit.net *.sentry.io www.apptrian.com https://get.geojs.io *.avada.io lumberjack.razorpay.com lumberjack-metrics.razorpay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleads.g.doubleclick.net *.connect.facebook.net *.www.googletagmanager.com *.s.pinimg.com *.bat.bing.com *.p.cquotient.com *.cdn.cquotient.com *.cottontraders.com *.klarna.com *.bazaarvoice.com *.stylitics.com *.googleapis.com *.gstatic.com *.pinimg.com *.dynamicyield.com *.poq.io *.facebook.net *.sovendus.com *.hotjar.com *.co.uk *.iesnare.com *.wistia.com *.creativecdn.com *.onetrust.com *.digicert.com *.attn.tv *.trustpilot.com *.doubleclick.net *.googletagmanager.com *.cloudflare.com *.jsdelivr.net *.jquery.com *.klarnacdn.net *.globalpay.com *.google.com *.sentry-cdn.com *.github.io *.pcapredict.com *.cquotient.com *.evri.com *.norton.com *.bing.com *.scarabresearch.com *.adalyser.com *.pinterest.com *.dotomi.com *.yieldify.com *.teads.tv *.ahrefs.com; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=kHByIpfmgBA42CDfXBpY2.5ljqWblbkz15YagG2KR80-1789267130.6465778-1.0.1.1-_5YRfiRMy34nfxfI9acbuebdDOVF9ab1dquu3.GxNqhcwYUuzbupJqcbNWJ4viXQJY11OpzNnjeFKJaqQM8fA1zART02VeceAkAYuIM0J.L_DzEP7voKfxzAxOTtxpuNt6l5KvSg1W3B6V9F0OcnIuFGKqqW_z7kd1lpNHmldDN5D7IufsreIvuakRoBi04Vmfzo390QdY0cN6cviJ2odQ; report-to cf-scsqeinhgibgcjfh 1
default-src 'self'; img-src data: blob: *; script-src-elem 'self' 'strict-dynamic' assets.ubuntu.com www.google-analytics.com www.googletagmanager.com www.youtube.com asciinema.org player.vimeo.com script.crazyegg.com www.googleadservices.com js.zi-scripts.com *.g.doubleclick.net www.google.com www.gstatic.com www.brighttalk.com snap.licdn.com connect.facebook.net maps.googleapis.com www.redditstatic.com munchkin.marketo.net *.googlesyndication.com cdn.jsdelivr.net https://esm.sh https://cdn.jsdelivr.net buttons.github.io cdn.livechatinc.com api.livechatinc.com secure.livechatinc.com www.tfaforms.com 'nonce-wC_eu3j_PpEP15Nac8AGQA'; font-src 'self' assets.ubuntu.com fonts.google.com cdn.livechatinc.com secure.livechatinc.com; script-src 'self' blob: 'wasm-unsafe-eval' 'nonce-wC_eu3j_PpEP15Nac8AGQA'; connect-src 'self' ubuntu.com analytics.google.com www.googletagmanager.com o4510662863749120.ingest.de.sentry.io www.google-analytics.com *.crazyegg.com *.g.doubleclick.net ad.doubleclick.net *.clarity.ms bat.bing.com bat.bing.net www.googleadservices.com js.zi-scripts.com *.google-analytics.com px.ads.linkedin.com ws.zoominfo.com youtube.com google.com www.google.ad www.google.ae www.google.al www.google.am www.google.as www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cat www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.cn www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.com www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.nr www.google.nu www.google.pl www.google.pn www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.st www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu www.google.ws fonts.google.com maps.googleapis.com pixel-config.reddit.com www.redditstatic.com conversions-config.reddit.com https://esm.sh https://lottie.host https://cdn.jsdelivr.net *.analytics.google.com www.facebook.com *.googlesyndication.com *.mktoresp.com assets.ubuntu.com api.github.com raw.githubusercontent.com api.livechatinc.com cdn.livechatinc.com secure.livechatinc.com web.facebook.com www.tfaforms.com unpkg.com; frame-src 'self' assets.ubuntu.com *.doubleclick.net *.crazyegg.com www.youtube.com/ asciinema.org player.vimeo.com www.googletagmanager.com www.google.com www.brighttalk.com cdn.livechatinc.com secure.livechatinc.com cdn.livechat-static.com; style-src 'self' cdn.jsdelivr.net www.tfaforms.com 'unsafe-inline'; media-src 'self' res.cloudinary.com assets.ubuntu.com; child-src 'self' blob: youtube.com google.com fonts.google.com api.livechatinc.com cdn.livechatinc.com secure.livechatinc.com; form-action 'self' https://pages.ubuntu.com https://ubuntu.com https://www.tfaforms.com; object-src 'none'; base-uri 'self'; worker-src 'self' blob:; report-uri /csp-report; 1
default-src 'self'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://webcachex-eu.datareporter.eu https://liwestat.containers.piwik.pro https://bzrcdn.openai.com; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://*.openstreetmap.org blob: https://youtube.com https://*.youtube.com https://liwest.at/ https://*.liwest.at/ https://*.hubspot.com https://www.facebook.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://px.ads.linkedin.com *.px.ads.linkedin.com https://*.hsforms.com https://alb.reddit.com bat.bing.com https://www.google.at https://www.google.de https://www.googletagmanager.com https://maps.wien.gv.at https://fonts.gstatic.com https://webcache-eu.datareporter.eu https://webcachex-eu.datareporter.eu https://maps.googleapis.com https://*.econda-monitor.de https://bzr.openai.com; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://*.frcapi.com/ https://*.liwest.at/ https://liwest-penalty-shootout.supernice.games https://liwest-gscheit-digital.supernice.games https://liwest-gscheit-digital-2.supernice.games https://liwest-gscheit-digital-3.supernice.games https://liwest-qots.web.app https://liwest-tron.web.app https://*.google.com https://liwest-spendenaktion.web.app https://www.googletagmanager.com https://liwest.speedtestcustom.com https://forms-eu1.hsforms.com https://aax-eu.amazon-adsystem.com https://js.stripe.com; connect-src 'self' data: https://*.openstreetmap.org https://st.liwest.at/ https://*.friendlycaptcha.eu https://*.datareporter.eu https://swarmcrawler.datareporter.eu https://*.hsforms.com https://hubspot-forms-static-embed-eu1.s3.amazonaws.com https://*.econda-monitor.de https://px.ads.linkedin.com https://analytics.tiktok.com https://*.hubapi.com https://bat.bing.com https://bat.bing.net https://*.hubspot.com https://pixel-config.reddit.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://pixels.spotify.com https://*.etracker.com https://*.etracker.de https://analytics-ipv6.tiktokw.us https://www.google.com https://www.google.at https://l.ecn-ldr.de https://www.facebook.com https://connect.facebook.net https://maps.wien.gv.at https://api.opendkm.at https://static.hsappstatic.net https://www.googletagmanager.com https://api.ipgeolocation.io https://srv.doris.at https://maps.googleapis.com https://c.amazon-adsystem.com https://aax-eu.amazon-adsystem.com https://ara.paa-reporting-advertising.amazon https://ad.doubleclick.net https://signalcheck-api.staging.liwest.at https://signalcheck-api.liwest.at https://liwestat.containers.piwik.pro https://liwestat.piwik.pro https://bzr.openai.com https://bzrcdn.openai.com; script-src-elem 'self' 'report-sample' 'unsafe-inline' inline https://youtube.com https://*.youtube.com https://*.datareporter.eu https://*.webcachex-eu.datareporter.eu https://cdnjs.cloudflare.com https://*.googletagmanager.com https://*.hsforms.net https://*.vimeo.com https://liwestat.containers.piwik.pro https://tracknet.twyn.com https://l.ecn-ldr.de https://api.ipify.org https://connect.facebook.net https://bat.bing.com https://analytics.tiktok.com https://js-eu1.hsadspixel.net https://googleads.g.doubleclick.net https://*.etracker.com https://*.etracker.de https://pixel.byspotify.com https://js-eu1.hs-scripts.com https://js-eu1.hs-banner.com https://static.hsappstatic.net https://js-eu1.hs-analytics.net https://js-eu1.hs-banner.net https://js-eu1.hubspot.com https://snap.licdn.com https://www.redditstatic.com https://maps.googleapis.com https://*.econda-monitor.de https://c.amazon-adsystem.com https://capi-automation.s3.us-east-2.amazonaws.com https://stapecdn.com https://bzrcdn.openai.com; style-src 'self' 'report-sample' https://*.datareporter.eu; worker-src blob: 'report-sample'; font-src 'self' data: https://fonts.gstatic.com; style-src-elem 'self' 'report-sample' 'unsafe-inline' inline https://webcache.datareporter.eu https://webcache-eu.datareporter.eu https://fonts.googleapis.com https://fonts.gstatic.com https://www.googletagmanager.com; report-uri https://www.liwest.at/@http-reporting?csp=report&requestTime=1789268283559702&requestHash=34401241d4920f1f72ea9a7e9fcfd7564987d067 1
default-src 'self'; connect-src 'self' https://*.adriver.ru https://app.uiscom.ru https://banner.appsflyersdk.com https://kinescope.io https://kinescopecdn.net https://*.kinescopecdn.net https://leadgen-prod-api.uiscom.ru https://privacy-cs.mail.ru https://ruprod.strmerce.live https://telegram.org https://top-fwz1.mail.ru https://tracker.comagic.ru https://uis-prod-msk-omni-widget-server.uiscom.ru https://www.googletagmanager.com wss://mc.yandex.com wss://mc.yandex.ru https://mc.yandex.by https://mc.yandex.com https://yandex.ru https://*.yandex.ru https://yandex.net https://*.yandex.net https://yandexcloud.net https://*.yandexcloud.net https://yastatic.net https://*.yastatic.net; font-src 'self' data: https://app.uiscom.ru https://ru.streamerce.live https://streamerce.ru; frame-src 'self' https://*.adriver.ru https://mc.yandex.ru https://rutube.ru https://smartcaptcha.yandexcloud.net https://www.googletagmanager.com; img-src 'self' data: https://*.adriver.ru https://leadgen-minio.uiscom.ru https://mc.yandex.com https://medsi.ru https://medsi2.ru https://prod-msk-leadgen-minio.uiscom.ru https://ru.streamerce.live https://ruprod.strmerce.live https://streamerce.ru https://top-fwz1.mail.ru https://uis-prod-msk-leadgen-minio.uiscom.ru https://vk.com https://www.googletagmanager.com https://yandex.ru https://*.yandex.ru https://yandex.net https://*.yandex.net https://yandexcloud.net https://*.yandexcloud.net https://yastatic.net https://*.yastatic.net; media-src 'self' blob:; script-src 'self' 'unsafe-eval'; script-src-attr 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://*.adriver.ru https://app.uiscom.ru https://mc.yandex.com https://medsi.ru https://privacy-cs.mail.ru https://ru.streamerce.live https://smartcallback.ru https://streamerce.ru https://telegram.org https://top-fwz1.mail.ru https://vk.com https://websdk.appsflyer.com https://www.googletagmanager.com https://yandex.ru https://*.yandex.ru https://yandex.net https://*.yandex.net https://yandexcloud.net https://*.yandexcloud.net https://yastatic.net https://*.yastatic.net; style-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://app.uiscom.ru https://ru.streamerce.live https://streamerce.ru https://yandex.ru https://*.yandex.ru https://yandex.net https://*.yandex.net https://yandexcloud.net https://*.yandexcloud.net https://yastatic.net https://*.yastatic.net; worker-src 'self' blob: https://smartcaptcha.yandexcloud.net; report-uri /csp-report; 1
default-src 'self' *.usgs.gov 'unsafe-inline' *.amazonaws.com *.arcgis.com 'unsafe-eval'  *.arcgisonline.com *.hotjar.io *.google-analytics.com; script-src 'self' *.usgs.gov 'unsafe-inline' *.googletagmanager.com *.addtoany.com *.jsdelivr.net *.hotjar.com *.cfigroup.com *.cloud.gov *.gov *.youtube.com *.ytimg.com www.youtube.com s.ytimg.com  *.google-analytics.com *.google-analytics.com connect.facebook.net *.youtube.com/iframe_api 'unsafe-eval' *.jquery.com *.cloudflare.com *.arcgis.com *.datatables.net *.dashjs.org *.googleapis.com; object-src noop.style; style-src 'self' *.usgs.gov 'unsafe-inline'  *.fontawesome.com *.cloudflare.com *.arcgis.com *.datatables.net *.gstatic.com; img-src 'self' 'unsafe-inline' *.alaska.edu *.amazonaws.com *.arcgis.com *.arcgisonline.com *.cfigroup.com *.cloud.gov *.cloudflare.com *.fontawesome.com *.google-analytics.com *.google.com *.googleapis.com *.googletagmanager.com *.gov *.gstatic.com *.nationalmap.gov *.nationsonline.org *.opengeo.org *.openstreetmap.org *.pixelcaster.com *.staticflickr.com *.ucweb.com *.usgs.gov *.ytimg.com avo.alaska.edu cdnjs.cloudflare.com data: *.openstreetmap.org ; media-src 'self' *.usgs.gov 'unsafe-inline' *.gstatic.com *.google.pn *.amazonaws.com; frame-src 'self' 'unsafe-inline' *.addtoany.com *.googletagmanager.com *.prismaaccess.com *.saasprotection.com *.trendmicro.com *.trendmicro.jp *.usgs.gov safe.menlosecurity.com *.youtube.com www.youtube.com; font-src 'self' 'unsafe-inline' *.alicdn.com *.amazonaws.com *.arcgis.com *.fontawesome.com *.gstatic.com *.jsdelivr.net *.mustcheck.com *.simplycodes.com *.slant.co *.typekit.net *.usgs.gov cdn.goin.cloud cdn.scite.ai data:; connect-src 'self' 'unsafe-inline' *.amazonaws.com *.arcgis.com *.arcgisonline.com *.cloud.gov *.cloudfront.net *.fontawesome.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gov *.gstatic.com *.hotjar.com *.hotjar.io *.jsdelivr.net *.usgs.gov cdn.jsdelivr.net wss://ws.hotjar.com 1
default-src 'self' http: https: wss: data: blob: 'unsafe-inline'; connect-src 'self' *.mypurecloud.com.au lifeline.payments2us.com *.typeform.com stockist.co *.youtube.com *.spotify.com *.vimeo.com vimeo.com cdn.usefathom.com *.hotjar.com *.clarity.ms *.google.com *.googletagmanager.com *.googleapis.com *.google-analytics.com *.gstatic.com connect.facebook.net lifeline.serviceseeker.com.au us-central1-stockist-prod.cloudfunctions.net *.bugherd.com; report-uri /report-csp-violation 1
object-src 'none';base-uri 'self';script-src 'nonce-CTl16kFCX-QSZLefrFmuOA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
frame-ancestors 'self'; report-uri https://www.vogue.com.au/csp-reports 1
frame-src 'self' https://www.googletagmanager.com https://insight.adsrvr.org https://match.adsrvr.org https://www.youtube.com https://deloitte.zoom.us https://player.youku.com https://www2.mindray.com https://mindrayna.my.salesforce.com; report-uri https://www.mindray.com/bin/csp-report 1
object-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'self'; report-to csp-violation-endpoint; report-uri /cgi-bin/report_csp_violation.py 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.gstatic.com https://pi.pardot.com https://cdn.pardot.com https://snap.licdn.com https://connect.facebook.net https://widget.instabot.io https://widgetapi.instabot.io https://addevent.com https://cdn.addevent.com https://cookie-cdn.cookiepro.com https://kit.fontawesome.com https://cdn.jsdelivr.net https://cdn.evgnet.com https://d2i34c80a0ftze.cloudfront.net https://d2iiunr5ws5ch1.cloudfront.net https://d2wy8f7a9ursnm.cloudfront.net https://www.youtube.com https://player.vimeo.com https://tag.demandbase.com https://amd.sellingsimplified.net https://explore.parexel.com https://lottie.host https://assets2.lottiefiles.com https://static.hotjar.com https://script.hotjar.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.clarity.ms https://clarity.ms https://bat.bing.com https://sidebar.bugherd.com https://www.bugherd.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' 'report-sample' https://fonts.googleapis.com https://translate.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.jquery.com https://d2iiunr5ws5ch1.cloudfront.net https://form.asana.com https://lottie.host https://assets2.lottiefiles.com; img-src 'self' data: blob: https://*.google.com https://*.googletagmanager.com https://*.google-analytics.com https://*.gstatic.com https://*.doubleclick.net https://*.googlesyndication.com https://*.linkedin.com https://*.licdn.com https://*.facebook.com https://*.fbcdn.net https://*.ytimg.com https://*.youtube.com https://*.twitter.com https://*.twimg.com https://cookie-cdn.cookiepro.com https://static.instabot.io https://tag.demandbase.com https://*.demandbase.com https://lottie.host https://*.lottiefiles.com https://d2iiunr5ws5ch1.cloudfront.net https://*.bugherd.com https://*.amazonaws.com; font-src 'self' data: https://fonts.gstatic.com https://ka-p.fontawesome.com https://cdnjs.cloudflare.com https://d2iiunr5ws5ch1.cloudfront.net https://at.alicdn.com; connect-src 'self' https://analytics.google.com https://www.google-analytics.com https://region1.analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://googleads.g.doubleclick.net https://adservice.google.com https://pagead2.googlesyndication.com https://www.google.com https://*.google.com https://*.google.co.uk https://*.google.de https://*.google.fr https://*.google.es https://*.google.it https://*.google.nl https://*.google.co.jp https://*.google.com.au https://px.ads.linkedin.com https://cdn.linkedin.oribi.io https://*.hotjar.com https://*.hotjar.io wss://ws.hotjar.com https://widget.instabot.io https://widgetapi.instabot.io https://static.instabot.io https://chat.instabot.io https://livechat.instabot.io wss://chat.instabot.io https://cookie-cdn.cookiepro.com https://geolocation.onetrust.com https://privacyportal.cookiepro.com https://tag.demandbase.com https://tag-logger.demandbase.com https://segments.company-target.com https://api.company-target.com https://amd.sellingsimplified.net https://st.fullcircleinsights.com https://*.clarity.ms https://ipinfo.io https://geodata.solutions https://maps.googleapis.com https://sessions.bugsnag.com https://notify.bugsnag.com https://www.bugherd.com wss://ws-mt1.pusher.com wss://ws.pusherapp.com https://lottie.host https://assets2.lottiefiles.com https://cdn.jsdelivr.net https://ka-p.fontawesome.com https://cloudflareinsights.com https://static.cloudflareinsights.com; frame-src 'self' https://www.youtube.com https://player.vimeo.com https://www.facebook.com https://www.google.com https://www.googletagmanager.com https://insight.adsrvr.org https://td.doubleclick.net https://s.company-target.com https://vars.hotjar.com https://www.podbean.com https://player.simplecast.com https://form.asana.com https://content.cdntwrk.com https://explore.parexel.com https://lottie.host https://sidebar.bugherd.com https://d1eoo1tc6rr5e.cloudfront.net https://hackerone.com; media-src 'self' https://download-video.akamaized.net https://player.vimeo.com https://mcdn.podbean.com https://www.youtube.com https://lottie.host https://assets2.lottiefiles.com; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://pi.pardot.com https://explore.parexel.com; base-uri 'self'; upgrade-insecure-requests 1
default-src * 'self' data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' cactusvpn.com www.cactusvpn.com billing.cactusvpn.com; report-uri https://75943a29954faa0d1b365a52c248c905.report-uri.com/r/d/csp/reportOnly; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.googletagmanager.com *.googleapis.com static.cloudflareinsights.com unpkg.com translate.googleapis.com; object-src 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com unpkg.com; img-src 'self' data: www.google-analytics.com www.googletagmanager.com v1.sahistory.org.za http://v1.sahistory.org.za http://www.v1.sahistory.org.za https://v1.sahistory.org.za *.tile.openstreetmap.org unpkg.com http://www.sahistory.org.za http://sahistory.org.za https://www.sahistory.org.za translate.google.com translate.googleapis.com fonts.gstatic.com https://shop.sahistory.org.za https:; media-src 'self'; frame-src 'self' www.youtube.com youtube.com https://www.google.com https://maps.google.com https://maps.google.co.za https://translate.google.com; frame-ancestors 'self'; child-src 'self'; font-src 'self' fonts.gstatic.com data: https:; connect-src 'self' *.google-analytics.com www.google-analytics.com www.googletagmanager.com translate.googleapis.com; report-uri /report-csp-violation; upgrade-insecure-requests 1
style-src * 'unsafe-inline' 'self' data:; font-src * data: 'self'; connect-src * 'self' blob: data: properties:; worker-src * blob: 'self'; object-src 'none'; img-src * blob: data: 'self'; child-src * blob:; default-src *; frame-src * 'self'; form-action * 'self'; script-src * data: blob: wasm-eval: 'self' 'unsafe-eval' 'unsafe-inline' 'report-sample'; upgrade-insecure-requests; report-uri https://o166208.ingest.sentry.io/api/1238795/security/?sentry_key=eebe259ebaa846d39aaae0e3404505ab&sentry_environment=production 1
connect-src 'self' https://analytics.tiktok.com https://api.hubspot.com https://cdn.cookielaw.org https://cdn.dreamdata.cloud https://content.hotjar.io https://cta-service-cms2.hubspot.com https://forms.hsforms.com https://px.ads.linkedin.com https://script.crazyegg.com https://www.google-analytics.com https://www.google.com https://edge.api.brightcove.com https://bat.bing.com/ https://manifest.prod.boltdns.net https://sdl.brightcovecdn.com https://logx.optimizely.com https://*.optimizely.com; default-src 'self'; font-src 'self' data: https://use.typekit.net https://*.optimizely.com; frame-ancestors 'none'; frame-src https://www.googletagmanager.com https://googleads.g.doubleclick.net https://cm.g.doubleclick.net https://www.facebook.com https://calendly.com https://forms.hsforms.com https://a5098497884553216.cdn.optimizely.com https://a5098497884553216.cdn-pci.optimizely.com; img-src 'self' data: https://bat.bing.com https://forms-na1.hsforms.com https://ib.adnxs.com https://perf-na1.hsforms.com https://px.ads.linkedin.com https://secure.adnxs.com https://track.accountinsight.cloud https://track.hubspot.com https://www.facebook.com https://www.google.com https://www.google.com.ua https://metrics.brightcove.com https://www.googletagmanager.com https://cf-images.us-east-1.prod.boltdns.net https://cdn.optimizely.com https://app.optimizely.com; media-src 'self' blob:; script-src 'self' 'nonce-AQ/Y89UIuS1Bs+uIkV8PyQ==' https://a.dpmsrv.com https://analytics.tiktok.com https://bat.bing.com https://cdn.cookielaw.org https://cdn.dreamdata.cloud https://cm.g.doubleclick.net https://connect.facebook.net https://googleads.g.doubleclick.net https://ib.adnxs.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://js.hsforms.net https://js.hubspot.com https://js.usemessages.com https://s.dpmsrv.com https://script.crazyegg.com https://script.hotjar.com https://serve.nrich.ai https://snap.licdn.com https://st.getsitecontrol.com https://static.hotjar.com https://widgets.getsitecontrol.com https://www.googletagmanager.com https://assets.calendly.com https://static.hsappstatic.net https://48752163.fs1.hubspotusercontent-na1.net https://cdnjs.cloudflare.com https://players.brightcove.net wss://ws.hotjar.com/ https://*.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://*.typekit.net https://assets.calendly.com https://*.optimizely.com https://app.optimizely.com; worker-src 'self' blob:; 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'report-sample' https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://static.claydar.com https://assets.calendly.com https://*.clarity.ms https://connect.facebook.net https://snap.licdn.com https://js.zi-scripts.com https://cdn.livechatinc.com https://api.livechatinc.com https://cdn.claydar.com https://*.hs-scripts.com https://*.hs-analytics.net https://*.hsadspixel.net https://*.hscollectedforms.net https://*.hs-banner.com https://static.ads-twitter.com https://analytics.tiktok.com https://www.redditstatic.com https://s.pinimg.com https://ct.pinterest.com https://bat.bing.com https://sslwidget.criteo.com https://dynamic.criteo.com 'sha256-0chmwFk0zaA528yFfGV7J9ppIpdfTPPULncDF3WG7Zs=' 'sha256-0kcUUdwBUXGRalfzKhiOWFpcywPUYqxKhgAqmAAsR2I=' 'sha256-2Y0871auOwzodqWsksyi+E73X041g5BMKV472XtEQEQ=' 'sha256-99Bo+njfzUGSaYgK28XTOB8fpcW3gi4N2foXNqKsHI8=' 'sha256-BF0290pkb3jxQsE7z00xR8Imp8X34FLC88L0lkMnrGw=' 'sha256-D05nszH6qU1m17MPatblfE18sEw2jlLwPNww8VCTFvg=' 'sha256-E7eW+lx4eE0Qnt0n8j2IgNBl0oPAY4G4TZ2M8JMPAxM=' 'sha256-FIMwulL6Uru+2ovrULyto417Ke7HByWNrdI0aOkiCOU=' 'sha256-FZNAaz7XqqRaalCeZhh+IT7lG+ec/M6Nc3uGdVNatQY=' 'sha256-FedFtFhzaL3d88QW74h8I8FTqXA7TUeDKdq9x3n2MoE=' 'sha256-GJvAV9TSPVOvgUi/HSPIuI7JG3HnB3ADFF+AKhMEK68=' 'sha256-JTOtibrtli572u0zd4ObGPdbBiTKIV5Hwh81MMxKfCI=' 'sha256-LVECawnM4sgmFIhi+XZhwVvWkDknBrsJXa10abW2KQ8=' 'sha256-NFtl0GgK40snZ0eJy52afHo9A/h76SfVFP9rM1mpP1A=' 'sha256-Q2BPg90ZMplYY+FSdApNErhpWafg2hcRRbndmvxuL/Q=' 'sha256-QuRd1mHvALmeXEIIh0jbFKVumeoHZlkUTeDYOaI0Q+o=' 'sha256-QxkqaGLGOPe0cwlo8vxHE/r/AMl0/JBQk3JRxAkc2Ss=' 'sha256-QzWFZi+FLIx23tnm9SBU4aEgx4x8DsuASP07mfqol/c=' 'sha256-R8z+6AS8rjLxTyNLaJnZAKNHxoOP/KRXQc+0ZYuhWXo=' 'sha256-RMxgFAIXZnsb6tfQ0py7Ar7j8Hs8gMJfCbmEZ9ykNRU=' 'sha256-UWyKU4HKg6hQ0SHaMnCe3cyamXhQAAp+BJXCIOn6Ua0=' 'sha256-VOEd8AZ89/O/VoRtZYLCM0+558I3OO5tXt/6FRwjNPI=' 'sha256-Ya0pUYrC7nM5Cn/056TyVuEiz6dFGrzmkWzgON0pF0U=' 'sha256-ZkO/fPKEfThsaMyZme9hXxBGae889IevzbHd8crvoSM=' 'sha256-eIXWvAmxkr251LJZkjniEK5LcPF3NkapbJepohwYRIc=' 'sha256-epk+3/vOEXeMNdT8o2rDvQVUxfdsG7hrZ6WCzhs7wLI=' 'sha256-gpzPlppGSdBRLHtgwHt13O6yfLbHM1Un9grOT3K7YkQ=' 'sha256-h0t8/ReVm191540dtQOdjBMMhJasSTJeeHzU2GrsMXM=' 'sha256-hokQeCh0qrVE3rmBF66ajwHcmB1N2uTm2IqkaixNw98=' 'sha256-i7vu8/tSHHUB+0u+P1xDY+RTQwUq4pV5nV49yh9Hrcs=' 'sha256-kY3n27VOjXu4PKdB0SuwGF3spqKJpDBgQU95UPz03Sg=' 'sha256-lgLgRE1vUz0I2f1H7nbFV7YVpnVd5bXxp2YaLj3u2wY=' 'sha256-mCAqmHmXYaLPLvDoHjf1cJvQERgS+3QojAiHjRQquS8=' 'sha256-o/ESuWREqp6JWqCQ30AL3sOz9U/tbkweeomv9aX6viI=' 'sha256-qLi7rvIgHLq6rmRGPwP667p4h0KPzdAk14n7+uCIuzk=' 'sha256-rCsG2Kc0cu0W0qGiiucg1wdtU+CX9AYaHX5g8mHgYRQ=' 'sha256-ubMfTTSOJXuHgVhSGmLKVv2pi8RDn8hY2ETRbf+LXrs=' 'sha256-yIJFD61EySVvhRy0yHBN/uyryipna78WMSu3rb3lLaE='; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https:; style-src-attr 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https: data:; frame-src 'self' https:; worker-src 'self' blob:; form-action 'self' https:; frame-ancestors 'self'; object-src 'none'; base-uri 'none'; report-uri https://o35289.ingest.us.sentry.io/api/4510697743777792/security/?sentry_key=7f3e790b6aa23ae85f085f3af68d1684&sentry_environment=production 1
worker-src 'self' blob: https://play.vidyard.com https://*.vidyard.com; report-uri /api/csp-report; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: blob: *.allopneus.com *.gstatic.com *.youtube.com *.ytimg.com *.google.com google.com www.google.com *.google.fr google.fr www.google.fr *.google.be google.be www.google.be *.googleapis.com *.facebook.com *.doubleclick.net *.g.doubleclick.net googleads.g.doubleclick.net *.googlesyndication.com pagead2.googlesyndication.com www.googleadservices.com images.driverreviews.com bat.bing.com bat.bing.net analytics.optimalpeople.fr tr.cloud-media.fr marker.np6.com *.zoho.eu *.zohopublic.eu *.googletagmanager.com cdn.cookielaw.org *.apple.com *.checkout.com *.dalenys.com *.pushaddict.com *.avis-verifies.com *.oney.io *.payline.com *.paypal.com gethatch.com gjigle.com; font-src 'self' data: *.allopneus.com *.gstatic.com fonts.googleapis.com use.typekit.net p.typekit.net *.zohocdn.com applepay.cdn-apple.com *.payline.com maxcdn.bootstrapcdn.com *.oney.io; connect-src 'self' *.allopneus.com *.apple.com browser-intake-datadoghq.eu *.datadome.co *.captcha-delivery.com *.kameleoon.eu cdn.cookielaw.org *.onetrust.com *.zohopublic.eu *.zoho.eu notifpush.com *.notifadz.com data.thank-you.io ping.thank-you.io *.google.com www.google.com google.com analytics.optimalpeople.fr pagead2.googlesyndication.com www.googleadservices.com *.doubleclick.net *.g.doubleclick.net googleads.g.doubleclick.net bat.bing.com bat.bing.net connect.facebook.net www.googletagmanager.com *.facebook.com marker.np6.com widget.driverreviews.com js.checkout.com gethatch.com *.cloudflare.com *.cloudflareinsights.com tagmanager.pirelli.com a.imgstatics.com gjigle.com *.googleapis.com *.oney.io *.payline.com *.paypal.com www.datadoghq-browser-agent.com *.avis-verifies.com; frame-src 'self' *.allopneus.com accounts.google.com *.facebook.com *.zohopublic.eu cdn-eu.pagesense.io *.captcha-delivery.com www.youtube.com *.apple.com *.checkout.com *.tradedoubler.com tradedoubler.com *.dalenys.com *.clic2buy.com gjigle.com *.paypal.com *.payline.com *.oney.io *.avis-verifies.com applepay.cdn-apple.com; script-src-attr 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' *.allopneus.com fonts.googleapis.com *.gstatic.com use.typekit.net p.typekit.net *.zohocdn.com cdn-eu.pagesense.io accounts.google.com *.dalenys.com *.payline.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' blob: *.allopneus.com www.googletagmanager.com cdn.cookielaw.org *.onetrust.com cookie-cdn.cookiepro.com js.datadome.co *.captcha-delivery.com *.kameleoon.eu notifpush.com *.notifadz.com cdn.np6.com cdnjs.cloudflare.com connect.facebook.net pagead2.googlesyndication.com www.googleadservices.com *.zohocdn.com *.zohostatic.eu *.zohopublic.eu *.zoho.eu maillist-manage.eu cdn-eu.pagesense.io analytics.optimalpeople.fr widget.driverreviews.com data.thank-you.io bat.bing.com *.google.com accounts.google.com appleid.cdn-apple.com applepay.cdn-apple.com *.dalenys.com cdn.checkout.com js.checkout.com *.tradedoubler.com *.clic2buy.com gethatch.com *.cloudflare.com *.cloudflareinsights.com tagmanager.pirelli.com www.youtube.com *.googleapis.com *.avis-verifies.com *.oney.io *.payline.com *.paypal.com www.datadoghq-browser-agent.com maxcdn.bootstrapcdn.com; media-src 'self' data: blob:; worker-src 'self' blob:; child-src 'self' blob:; report-to csp-reports; report-uri https://browser-intake-datadoghq.eu/api/v2/logs?dd-api-key=pub252bc361e6eaa27a32ccc4135ddcc93f&dd-evp-origin=content-security-policy&ddsource=csp-report 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' https://basiliskcaptcha.com https://challenges.cloudflare.com https://cdn.cpx-research.com https://support.faucetpay.io; style-src 'self' 'unsafe-inline' https://support.faucetpay.io https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://support.faucetpay.io https://fonts.gstatic.com; connect-src 'self' https://basiliskcaptcha.com https://challenges.cloudflare.com wss://socket.faucetpay.io https://offers.cpx-research.com https://support.faucetpay.io wss://support.faucetpay.io https://api.fpshield.com; frame-src 'self' https://basiliskcaptcha.com https://challenges.cloudflare.com https:; worker-src 'self' blob: 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.cookielaw.org https://cdn.branch.io https://app.link https://static.hotjar.com https://cdn.parsely.com https://cdn.segment.com https://static.chasecdn.com https://accounts.google.com https://cdn.apple-mapkit.com https://res.cloudinary.com https://www.googletagmanager.com https://tag.wknd.ai https://assets.bounceexchange.com https://api.bounceexchange.com; connect-src 'self' https://*.jpmchase.net https://static.chasecdn.com https://*.branch.io https://*.hotjar.com https://*.hotjar.io https://*.parsely.com https://cdn.segment.com https://api.segment.io https://*.cookielaw.org https://accounts.google.com https://*.bugsnag.com https://*.braze.com https://*.split.io https://*.contentful.com https://*.ctfassets.net https://res.cloudinary.com https://*.bounceexchange.com https://events.bouncex.net https://*.cdnwidget.com https://*.cdnbasket.net https://pippio.com https://*.wknd.ai https://*.google-analytics.com https://*.googletagmanager.com https://*.apple-mapkit.com https://*.theinfatuation.com; img-src 'self' data: blob: https://res.cloudinary.com https://cdn.apple-mapkit.com https://*.hotjar.com https://*.google-analytics.com https://*.googletagmanager.com https://*.bounceexchange.com https://*.jpmchase.net https://*.parsely.com https://*.segment.com https://*.segment.io https://*.braze.com https://*.wknd.ai https://*.cookielaw.org https://*.cdnwidget.com https://pippio.com https://events.bouncex.net https://*.ctfassets.net; frame-src 'self' https://accounts.google.com https://*.hotjar.com https://*.cookielaw.org https://*.bounceexchange.com; style-src 'self' 'unsafe-inline' https://accounts.google.com https://assets.bounceexchange.com; font-src 'self' data:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests 1
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/families_google 1
default-src 'self'; script-src 'self' 'unsafe-eval'; connect-src 'self'; img-src 'self' data: www.pkobp.pl; style-src 'self' 'unsafe-inline'; font-src 'self'; report-uri /ikd_img/skins/ipko/grcv; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klarnacdn.net *.fontawesome.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.stripe.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://js.mollie.com https://checkoutshopper-test.adyen.com https://checkoutshopper.adyen.com *.adyen.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.doofinder.com https://s3.amazonaws.com https://aggregate-imgs.s3.eu-north-1.amazonaws.com https://fsc-images.s3.eu-north-1.amazonaws.com https://checkoutshopper-test.adyen.com https://checkoutshopper.adyen.com checkoutshopper-test.cdn.adyen.com checkoutshopper.cdn.adyen.com *.cdn.adyen.com *.adyen.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://www.google.com.ua https://www.googleadservices.com https://bat.bing.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.stripe.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.doofinder.com widget.freshworks.com m2epro.freshdesk.com https://js.mollie.com https://*.ngrok.app https://checkoutshopper-test.adyen.com https://checkoutshopper.adyen.com *.adyen.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://widget.reviews.co.uk https://porjs.com https://cdn-cookieyes.com https://log.cookieyes.com https://www.google.com.ua newrelic.com nr-data.net https://bat.bing.com https://www.clarity.ms https://static.addtoany.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.doofinder.com widget.freshworks.com m2epro.freshdesk.com *.klarnacdn.net www.googletagmanager.com *.fontawesome.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.doofinder.com wss://*.doofinder.com widget.freshworks.com m2epro.freshdesk.com https://*.fero.com https://*.ngrok.app wss://*.ngrok.app wss://fero.ngrok.app:3000/ws https://checkoutshopper-test.adyen.com https://checkoutshopper.adyen.com checkoutshopper-test.cdn.adyen.com checkoutshopper-live.cdn.adyen.com *.adyen.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://k.clarity.ms api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.link.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://fonts.googleapis.com;        script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https:// connect.facebook.net/ https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/js https://api.sardine.ai https://static.zdassets.com/ https://ekr.zdassets https://ekr.zendesk.com https://*.zopim.com wss://demonifty.zendesk.com wss://*.zopim.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://edge.fullstory.com/s/ https://static.ads-twitter.com/uwt.js https://sc-static.net/ https://googleads.g.doubleclick.net/ https://tr.snapchat.com;        style-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://fonts.googleapis.com *.live-video.net;        script-src-elem 'self' 'unsafe-inline' https://js.stripe.com https://api.dev.sardine.ai https://edge.fullstory.com https://www.googletagmanager.com/gtag/js https://connect.facebook.net https://static.ads-twitter.com/uwt.js https://sc-static.net/scevent.min.js https://www.google.com/recaptcha/ https://static.zdassets.com/ https://www.gstatic.com/recaptcha/ https://tr.snapchat.com/ https://www.google-analytics.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://api.sardine.ai https://unpkg.com/@google/model-viewer/dist/model-viewer.min.js https://www.youtube.com https://www.googleoptimize.com https://www.clarity.ms *.live-video.net;        img-src https: blob: data:;        connect-src https://browser-intake-datadoghq.com https://www.niftygateway.com https://niftygateway.com https://analytics.google.com https://*.clarity.ms https://niftygateway.zendesk.com https://api.niftygateway.com https://odysseymarket.niftygateway.com https://api.sandbox.niftygateway.com https://stats.g.doubleclick.net https://www.facebook.com/tr/ https://www.google-analytics.com https://www.clarity.ms wss://widget-mediator.zopim.com https://nifty-qa100.service.aws-qa.sd.gem.link https://demonifty.zendesk.com https://ekr.zdassets.com https://encrypted-tbn0.gstatic.com/images https://lh3.googleusercontent.com https://tr.snapchat.com https://eth-goerli.alchemyapi.io https://search-api-staging.s-niftygateway-001-use1.svc.gem.link https://search-api.niftygateway.com https://search-api-dev.d-niftygateway-001-use1.svc.gem.link https://ipfs.io https://rs.fullstory.com https://session-replay.browser-intake-datadoghq.com https://eth-mainnet.alchemyapi.io https://api.cloudinary.com/v1_1/nifty_gateway/auto/upload https://openseauserdata.com https://rum.browser-intake-datadoghq.com https://api.x.immutable.com https://i.seadn.io https://cdn.optimizely.com https://img.seadn.io https://storage.opensea.io https://api.opensea.io https://sdk.iad-03.braze.com *.live-video.net ;        font-src https://fonts.gstatic.com https://use.typekit.net/ 'self';        object-src 'self';        media-src https://media.niftygateway.com https://static.zdassets.com https://openseauserdata.com https://storage.opensea.io https://res.cloudinary.com blob:;        frame-src https://js.stripe.com https://www.google.com https://api.sardine.ai https://api.dev.sardine.ai https://tr.snapchat.com/ https://www.youtube.com https://webusprd01.ihsmtaxsolutions.com/Nifty/ https://td.doubleclick.net/;        frame-ancestors 'self';        worker-src blob:; 1
object-src 'none';base-uri 'self';script-src 'nonce-bfW2UthAMT5uw1un2NqbOQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cash-f.squarecdn.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net *.stripe.com *.klarna.com *.klarnaevt.com *.klarnacdn.net klarna.com https://fonts.gstatic.com https://static.klaviyo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * 'self' *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors *.facebook.com * 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com *.braintreegateway.com *.paypal.com google.com *.google.com * *.awin1.com *.zenaps.com *.fls.doubleclick.net account.fetchify.com *.google.com/ *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.weltpixel.com *.stripe.com consentcdn.cookiebot.com consentcdn.cookiebot.eu c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com challenges.cloudflare.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * *.awin1.com *.zenaps.com *.wepowerconnections.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com https://www.magezon.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com imgsct.cookiebot.com imgsct.cookiebot.eu www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.pushalert.co www.xtento.com cdn.xtento.com lookaside.fbsbx.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com cc-cdn.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com *.disqus.com *.avada.io *.shopify.com *.google.com/ *.facebook.com https://connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com https://maps.googleapis.com https://static.hotjar.com * https://www.googletagmanager.com tagmanager.google.com consent.cookiebot.com consent.cookiebot.eu js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com challenges.cloudflare.com *.pushalert.co bzrcdn.openai.com www.xtento.com cdn.xtento.com *.loudcrowd.com https://consent.cookiebot.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app downloads.mailchimp.com cc-cdn.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net *.stripe.com *.klarna.com *.klarnaevt.com *.klarnacdn.net assets.braintreegateway.com tagmanager.google.com https://fonts.googleapis.com *.loudcrowd.com https://consent.cookiebot.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com lookaside.fbsbx.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.wepowerconnections.com https://the.sciencebehindecommerce.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://get.geojs.io *.avada.io *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com https://developer.adobe.com https://maps.googleapis.com https://www.google-analytics.com consentcdn.cookiebot.com consentcdn.cookiebot.eu api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.pushalert.co bzr.openai.com *.loudcrowd.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://8fd11ad9-7da9-4946-bc96-2e043f30b371.sansec.watch/; report-to report-endpoint; 1
connect-src 'self' https://www.google-analytics.com https://muneer.cx https://www.googletagmanager.com; base-uri 'self' *.mindrocketsapis.com cdn.mindrocketsapis.com 1
report-uri https://events.mercadolibre.com/csp/reports?identifier=QCJ07MfFXg8C1J32OIbV9gz70bPaZnpVa05d6AdS4GP13amqLPOV-xLqLH2nOto6MA8=&policy_id=71&user_id=&request_id=09981fa3-b0a2-4980-91ad-6910ab05e4a7; report-to csp-endpoint-qcjmffxgcjoibvgzbpaznpvadadsgpamqlpovxlqlhnotoma; frame-ancestors 'none' 1
default-src 'self'; child-src 'self'; connect-src 'self' cdnjs.cloudflare.com *.algolia.net *.algolianet.com *.flickr.com *.googleapis.com *.google-analytics.com *.gstatic-cache.com *.typekit.com *.typekit.net https://www.google-analytics.com https://www.googletagmanager.com https://o15468.ingest.sentry.io/api/6068037/envelope/; font-src 'self' cdnjs.cloudflare.com *.typekit.net fonts.gstatic.com app.everviz.com/static/fonts/; frame-src 'self' maps.google.com *.typekit.net player.vimeo.com translate.googleapis.com *.twitter.com www.google.com www.googletagmanager.com *.youtube.com; img-src 'self' data: cdnjs.cloudflare.com *.staticflickr.com *.twitter.com *.typekit.net *.googletagmanager.com fonts.gstatic.com translate.google.com comsec-web-static.s3.eu-west-1.amazonaws.com staging-new-commonwealth-files.s3.eu-west-2.amazonaws.com testing-new-commonwealth-files.s3.eu-west-2.amazonaws.com https://www.google-analytics.com https://www.googletagmanager.com; media-src 'self' comsec-web-static.s3.eu-west-1.amazonaws.com staging-new-commonwealth-files.s3.eu-west-2.amazonaws.com testing-new-commonwealth-files.s3.eu-west-2.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' apis.google.com code.highcharts.com connect.facebook.net embedr.flickr.com player.vimeo.com unpkg.com www.googletagmanager.com www.gstatic.com app.everviz.com/resources/js/ app.everviz.com/inject cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://nomoredirectory.org https://unpkg.com; script-src-attr 'self'; script-src-elem 'self' 'unsafe-inline' *.googletagmanager.com player.vimeo.com cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://nomoredirectory.org https://unpkg.com; style-src 'self' 'unsafe-inline' code.highcharts.com *.typekit.net *.googleapis.com unpkg.com www.gstatic.com app.everviz.com/static/fonts/ app.everviz.com/resources/css/ cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://nomoredirectory.org https://unpkg.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' *.typekit.net cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://nomoredirectory.org https://unpkg.com; frame-ancestors 'self'; report-uri https://thecommonwealth.org/log-report-uri/reportOnly 1
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com *.googleapis.com *.shopogen.ro *.gigya.com *.carrefour.ro carrefour.ro *.google.com www.googletagmanager.com *.googletagmanager.com facebook.com *.prefixbox.com *.tiktok.com *.jsdelivr.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.facebook.com *.instagram.com *.gigya.com *.carrefour.ro carrefour.ro facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.googletagmanager.com *.doubleclick.net *.facebook.com *.dotdigital-pages.com *.dotdigital.com *.cookiebot.com *.google.com *.gigya.com *.carrefour.ro carrefour.ro *.krxd.net *.hotjar.com *.jsdelivr.net *.btdirect.ro *.tiktok.com *.prefixbox.com facebook.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com 'self' data: *.googletagmanager.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.gstatic.com blob: *.3lift.com *.adnxs.com *.adsrvr.org *.bluekai.com *.casalemedia.com *.ck-ie.com *.contextweb.com *.cookielaw.org *.dotomi.com *.eyeota.net *.flavedo.io *.flix360.com *.flix360.io *.flixcar.com *.google.ro *.google-analytics.com *.googleadservices.com *.kargo.com *.lijit.com *.media.net *.mediaplex.com *.openx.net *.paypal.com *.pubmatic.com *.rlcdn.com *.rubiconproject.com servedbyadbutler.com *.sharethrough.com *.shopogen.ro *.stickyadstv.com *.streamtheworld.com *.tremorhub.com *.yahoo.com *.gigya.com 'unsafe-inline' data: *.carrefour.ro carrefour.ro facebook.com *.krxd.net *.google.com www.googletagmanager.com *.tiktok.com *.prefixbox.com *.jsdelivr.net *.newrelic.com bam.eu01.nr-data.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.cloudflare.com *.cookiebot.com *.dotomi.com *.flix360.com *.flix360.io *.flixcar.com *.flixfacts.com *.googleapis.com *.instagram.com *.jsdelivr.net *.newrelic.com *.paypal.com *.pingdom.net servedbyadbutler.com *.shopogen.ro *.gigya.com *.carrefour.ro carrefour.ro chimpstatic.com www.googletagmanager.com *.krxd.net *.prefixbox.com *.tiktok.com *.cookielaw.org *.hotjar.com facebook.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.fontawesome.com *.shopogen.ro *.twitter.com *.typekit.net *.gigya.com 'unsafe-inline' data: *.carrefour.ro carrefour.ro *.jsdelivr.net *.prefixbox.com *.tiktok.com maxcdn.bootstrapcdn.com unsafe-inline 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.citrusad.com *.doubleclick.net *.flix360.io *.flixcar.com *.googleapis.com *.googlesyndication.com *.instagram.com *.onetrust.com *.paypal.com *.pingdom.net *.shopogen.ro *.gigya.com *.carrefour.ro carrefour.ro *.cookielaw.org *.krxd.net *.hotjar.com *.jsdelivr.net *.prefixbox.com *.newrelic.com bam.eu01.nr-data.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data: https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.googleadservices.com/ https://verifi.podscribe.com https://t.co https://analytics.twitter.com; object-src 'none'; script-src 'strict-dynamic' 'self' https: 'unsafe-hashes' 'sha256-MhtPZXr7+LpJUY5qtMutB+qWfQtMaPccfe7QXtCcEYc=' 'nonce-PEhO24aQWXgtJT484V4PUQ=='; style-src 'self' https: 'unsafe-inline'; connect-src 'self' https: https://ad.doubleclick.net https://googleads.g.doubleclick.net https://www.googletagmanager.com https://*.google.com https://*.prommt.com wss://*.liveperson.net https://*.nr-data.net https://ipv4.podscribe.com/ https://analytics-ipv6.tiktokw.us/ 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-4j_-aS84ZZcR-09x8w4PXQ' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.google.com *.googletagmanager.com *.googleapis.com *.shareasale.com *.shareasale-analytics.com shareasale.com shareasale-analytics.com *.amazonaws.com *.shop.pe shop.pe *.juicer.io *.cloudfront.net v2.zopim.com data: *.bootstrapcdn.com *.yotpo.com *.kaltura.com *.nytrng.com nytrng.com *.dynamicyield.com https://*.gladly.com https://*.smooch.io https://d1fc8wv8zag5ca.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.google.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.shareasale.com *.shareasale-analytics.com shareasale.com shareasale-analytics.com www.facebook.com *.amazonaws.com *.juicer.io shop.pe *.yotpo.com *.kaltura.com *.nytrng.com nytrng.com https://*.gladly.com https://*.smooch.io https://d1fc8wv8zag5ca.cloudfront.net *.authorize.net 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.dotdigital-pages.com *.dotdigital.com *.certcapture.com www.google.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.shareasale.com *.shareasale-analytics.com shareasale.com shareasale-analytics.com *.amazonaws.com *.juicer.io *.shop.pe shop.pe *.criteo.com assets.bounceexchange.com vars.hotjar.com www.facebook.com imgs.signifyd.com h.online-metrix.net vendor1.leasestation.com amc.demdex.net nsg.symantec.com *.paypalobjects.com *.yotpo.com *.kaltura.com *.nytrng.com nytrng.com *.pinterest.com https://nl.fatquartershop.com *.dynamicyield.com https://*.gladly.com https://*.smooch.io https://d1fc8wv8zag5ca.cloudfront.net webchat.dotdigital.com webchat.staging.dotdigital.com *.authorize.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.trackedlink.net *.ddlnk.net *.certcapture.com *.google.com *.googletagmanager.com *.googleapis.com *.shareasale.com *.shareasale-analytics.com shareasale.com shareasale-analytics.com *.amazonaws.com *.juicer.io *.shop.pe shop.pe *.fatquartershop.com pixel.voltn.com v2.zopim.com www.google.co.in *.pinterest.com www.facebook.com *.cdnwidget.com u.cdnwidget.com bat.bing.com nsg.symantec.com events.bouncex.net pippio.com p.brsrvr.com connect.facebook.net imgs.signifyd.com events.cdnwidget.com api.bounceexchange.com amc.demdex.net *.e.aa.online-metrix.net match.adsrvr.org yotpo-editor-production.s3.amazonaws.com *.cdninstagram.com *.yotpo.com *.kaltura.com *.nytrng.com nytrng.com *.clarity.ms *.rqtrk.eu *.dynamicyield.com https://chat-assets.cdn.gladly.com https://chat-assets.cdn.gladly.qa maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.certcapture.com https://cnstrc.com/js/cust/fat-quarter-shop_Orxy5R.js www.google.com *.googletagmanager.com *.googleapis.com www.gstatic.com *.shareasale.com *.shareasale-analytics.com shareasale.com shareasale-analytics.com addshoppers.s3.amazonaws.com *.juicer.io *.traversedlp.com *.pinimg.com v2.zopim.com *.shop.pe shop.pe *.criteo.net *.criteo.com *.zdassets.com/ loader.wisepops.com *.cloudfront.net fatquartershop-com-dev.ecomm-nav.com connect.facebook.net vendor1.quickspark.com nsg.symantec.com script.crazyegg.com bat.bing.com tag.bounceexchange.com assets.bounceexchange.com cdn.brcdn.com imgs.signifyd.com cdns.brsrvr.com bam.nr-data.net js-agent.newrelic.com mc.s10.exacttarget.com *.hotjar.com bam-cell.nr-data.net *.yotpo.com *.kaltura.com *.nytrng.com nytrng.com *.staticw2.yotpo.com https://nl.fatquartershop.com *.rqtrk.eu *.clarity.ms *.dynamicyield.com *.zendesk.com https://cnstrc.com https://cdnjs.cloudflare.com/ajax/libs/Swiper/4.4.6/js/swiper.js https://*.gladly.com https://*.smooch.io https://d1fc8wv8zag5ca.cloudfront.net https://cdnjs.cloudflare.com https://chat-sdk.cdn.gladly.com https://chat-sdk.cdn.gladly.qa d2mjzob2nc713b.cloudfront.net fatquartershop.cdn1.safeopt.com webchat.dotdigital.com webchat.staging.dotdigital.com *.authorize.net maps.googleapis.com https://www.fatquartershop.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.google.com *.googletagmanager.com *.gstatic.com *.shareasale.com *.shareasale-analytics.com shareasale.com shareasale-analytics.com *.amazonaws.com *.juicer.io *.shop.pe shop.pe events.bouncex.net stats.g.doubleclick.net www.google-analytics.com *.cloudfront.net *.addshoppers.com *.bootstrapcdn.com *.yotpo.com *.kaltura.com *.nytrng.com nytrng.com *.staticw2.yotpo.com *.dynamicyield.com https://*.gladly.com https://*.smooch.io https://d1fc8wv8zag5ca.cloudfront.net https://chat-sdk.cdn.gladly.com https://chat-sdk.cdn.gladly.qa webchat.dotdigital.com webchat.staging.dotdigital.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'unsafe-inline' data: 'unsafe-inline' blob: *.yotpo.com *.kaltura.com *.nytrng.com nytrng.com *.dynamicyield.com *.zdassets.com/ https://chat-sdk.cdn.gladly.com https://chat-sdk.cdn.gladly.qa 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.certcapture.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.shareasale.com *.shareasale-analytics.com shareasale.com shareasale-analytics.com bat.bing.com *.amazonaws.com *.juicer.io *.shop.pe shop.pe ekr.zdassets.com script.crazyegg.com *.pinterest.com stats.g.doubleclick.net wss: www.google-analytics.com manager.eu.smartlook.cloud in.hotjar.com staging-core.dxpapi.com core.dxpapi.com imgs.signifyd.com bt.signifyd.com:11103 data.cdnbasket.net ids.cdnwidget.com pd.cdnwidget.com page.cdnbasket.net/ view.cdnbasket.net bam.nr-data.net vc.hotjar.io bam-cell.nr-data.net api.traversedlp.com *.yotpo.com *.kaltura.com *.nytrng.com nytrng.com *.clarity.ms *.dynamicyield.com *.zendesk.com zendesk-eu.my.sentry.io *.cnstrc.com https://cdnjs.cloudflare.com/ajax/libs/Swiper/4.4.6/js/swiper.js https://*.gladly.com https://*.smooch.io https://d1fc8wv8zag5ca.cloudfront.net https://api.us-1.gladly.chat wss://ws.us-1.gladly.chat https://chat-assets.cdn.gladly.com https://chat-sdk.cdn.gladly.com https://api.us-uat.gladly.chat wss://ws.us-uat.gladly.chat https://chat-assets.cdn.gladly.qa https://chat-sdk.cdn.gladly.qa webchat.dotdigital.com webchat.staging.dotdigital.com *.authorize.net maps.googleapis.com places.googleapis.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-3Ex1SIAYskUI7Cm_kCgpGA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' blob:; 				script-src 'unsafe-inline' 'report-sample' blob: 'self' *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.google.com googleads.g.doubleclick.net px.airpr.com bat.bing.com api8436.d41.co cdn-0.d41.co app.enzuzo.com connect.facebook.net tracking.g2crowd.com *.hotjar.com static.ads-twitter.com *.zoominfo.com *.clearbitjs.com *.clearbit.com *.clearbitscripts.com assets.adobedtm.com *.youtube-nocookie.com *.youtube.com *.ytimg.com *.appian.com ecf.d41.co snap.licdn.com *.metadata.io cdn.jsdelivr.net cdn.vidstack.io *.adobe.com *.gstatic.com tags.srv.stackadapt.com *.g2.com *.mktoweb.com *.marketo.net js.zi-scripts.com *.mouseflow.com *.cvent.com *.cvent.cloud *.adsrvr.org *.uidapi.com *.rlcdn.com js.qualified.com; 				style-src 'unsafe-inline' 'report-sample' 'self' *.appian.com cdn.jsdelivr.net fonts.googleapis.com *.googletagmanager.com tagmanager.google.com *.hotjar.com cdn.vidstack.io *.adobe.com tags.srv.stackadapt.com *.mktoweb.com *.marketo.net *.cvent.com *.cvent.cloud *.qualified.com; 				object-src 'none'; 				base-uri 'self'; 				frame-ancestors 'self'; 				connect-src 'self' *.googleadservices.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.google.com *.doubleclick.net bat.bing.com api8436.d41.co app.enzuzo.com tracking.g2crowd.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.zoominfo.com js.zi-scripts.com *.omtrdc.net *.googlesyndication.com *.linkedin.com *.metadata.io api.ipify.org *.ytimg.com *.adobe.io *.appian.com tags.srv.stackadapt.com *.g2.com *.googleapis.com *.vidstack.io *.d41.co *.mktoweb.com *.marketo.net *.mktoresp.com *.mouseflow.com *.cvent.com *.cvent.cloud *.amazonaws.com *.adsrvr.org *.uidapi.com *.rlcdn.com *.qualified.com wss://*.qualified.com; 				font-src 'self' data: cdn.jsdelivr.net fonts.gstatic.com *.hotjar.com *.mouseflow.com *.cvent.com *.cvent.cloud *.qualified.com; 				frame-src 'self' *.googletagmanager.com *.doubleclick.net *.youtube.com *.youtube-nocookie.com *.appian.com *.amazonaws.com *.adobe.com *.google.com *.mktoweb.com *.marketo.net *.mouseflow.com *.cvent.com *.cvent.cloud *.appiancloud.com *.adsrvr.org *.qualified.com; 				form-action 'self' *.marketo.com *.mktoweb.com *.appian.com; 				media-src 'self' blob: mediastream: *.qualified.com; 				worker-src 'self' blob:; 				img-src 'self' blob: data: *.appian.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.gstatic.com *.google.com *.googlesyndication.com www.facebook.com *.linkedin.com segment.prod.bidr.io *.zoominfo.com *.ytimg.com *.youtube.com bat.bing.com analytics.twitter.com t.co *.omtrdc.net dpx.airpr.com *.hotjar.com *.vidstack.io *.mouseflow.com *.cvent.com *.cvent.cloud *.marketo.org *.adsrvr.org *.rlcdn.com; 				report-uri https://dujjyxdxaujq2swvhj3shultuy0upafr.lambda-url.us-east-1.on.aws/ 1
report-uri /csp-report.php; 1
base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://*.hsforms.com; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' 'report-sample'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https:; media-src 'self' https: data: blob:; worker-src 'self' blob: data:; frame-src https:; manifest-src 'self'; report-uri https://b288bea8a51fb90daf961744c3a98a53.report-uri.com/r/t/csp/reportOnly; 1
object-src 'none';base-uri 'self';script-src 'nonce-jQGXGkhTrCZASiablxKCSw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
img-src 'self' data: https://www.facebook.com  https://secure.gravatar.com https://ts.w.org https://s.w.org https://ps.w.org; default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googleadservices.com  https://www.google.com  https://www.gstatic.com  https://googleads.g.doubleclick.net  https://www.youtube.com  'unsafe-eval'; script-src-elem 'self' 'unsafe-inline' https://www.googleadservices.com  https://www.google.com  https://www.gstatic.com  https://googleads.g.doubleclick.net  https://www.youtube.com ; style-src 'self' 'unsafe-inline' https://cdn.materialdesignicons.com  https://fonts.googleapis.com ; style-src-elem 'self' 'unsafe-inline' https://cdn.materialdesignicons.com  https://fonts.googleapis.com ; font-src 'self' https://fonts.gstatic.com  data:; frame-src 'self' https://www.youtube.com  blob:; connect-src 'self' https://stats.g.doubleclick.net  https://www.google.com  https://analytics.google.com;  report-uri https://www.studentclearinghouse.org/wp-json/really-simple-security/v1/csp?rsssl_apitoken=587938375; 1
frame-ancestors 'self'; report-uri https://ordermygear.report-uri.com/r/t/csp/wizard 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.paddle.com connect.facebook.net mc.yandex.com mc.yandex.ru quantcast.mgr.consensu.org rules.quantcount.com secure.quantserve.com ssl.google-analytics.com translate.google.com translate.googleapis.com translate-pa.googleapis.com www.google-analytics.com www.googletagmanager.com cmp.auslogics.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.paddle.com use.fontawesome.com www.iubenda.com translate.googleapis.com; img-src 'self' data: cms.quantserve.com mc.webvisor.org mc.yandex.by mc.yandex.com mc.yandex.com.tr mc.yandex.fr mc.yandex.kz mc.yandex.ru mc.yandex.ua mc.yandex.uz pixel.quantcount.com pixel.quantserve.com ssl.google-analytics.com ssl.gstatic.com translate.google.com translate.googleapis.com www.facebook.com *.google.ae *.google.al *.google.am *.google.at *.google.az *.google.ba *.google.be *.google.bf *.google.bg *.google.bj *.google.bs *.google.by *.google.ca *.google.cd *.google.ch *.google.ci *.google.cl *.google.cm *.google.cn *.google.co.ao *.google.co.bw *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ls *.google.co.ma *.google.co.nz *.google.co.th *.google.co.tz *.google.co.ug *.google.co.uk *.google.co.uz *.google.co.ve *.google.co.za *.google.co.zm *.google.co.zw *.google.com *.google.com.af *.google.com.ar *.google.com.au *.google.com.bd *.google.com.bh *.google.com.bn *.google.com.bo *.google.com.br *.google.com.bz *.google.com.co *.google.com.cu *.google.com.cy *.google.com.do *.google.com.ec *.google.com.eg *.google.com.et *.google.com.gh *.google.com.gt *.google.com.hk *.google.com.jm *.google.com.kh *.google.com.kw *.google.com.lb *.google.com.ly *.google.com.mm *.google.com.mt *.google.com.mx *.google.com.my *.google.com.na *.google.com.ng *.google.com.ni *.google.com.np *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.com.pr *.google.com.py *.google.com.qa *.google.com.sa *.google.com.sg *.google.com.sv *.google.com.tj *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.uy *.google.com.vc *.google.com.vn *.google.cv *.google.cz *.google.de *.google.dk *.google.dz *.google.ee *.google.es *.google.fi *.google.fr *.google.ge *.google.gr *.google.gy *.google.hn *.google.hr *.google.ht *.google.hu *.google.ie *.google.im *.google.iq *.google.is *.google.it *.google.jo *.google.kg *.google.kz *.google.la *.google.lk *.google.lt *.google.lu *.google.lv *.google.md *.google.me *.google.mg *.google.mk *.google.mn *.google.mu *.google.mv *.google.mw *.google.ne *.google.nl *.google.no *.google.pl *.google.ps *.google.pt *.google.ro *.google.rs *.google.ru *.google.se *.google.si *.google.sk *.google.sm *.google.sn *.google.sr *.google.tn *.google.tt *.google.td *.google.je *.google.ws *.google.rw *.google.co.mz *.google.sc *.google.tm *.google.ga *.google.tg *.google.com.ag *.google.co.in *.google.ad *.google.ml *.google.cg www.google-analytics.com www.googletagmanager.com www.gstatic.com yastatic.net; connect-src 'self' audit-tcfv2.quantcast.mgr.consensu.org code.jquery.com mc.yandex.by mc.yandex.com mc.yandex.com.tr mc.yandex.fr mc.yandex.kz mc.yandex.md mc.yandex.ru mc.yandex.ua mc.yandex.uz quantcast.mgr.consensu.org translate.googleapis.com www.google-analytics.com stats.g.doubleclick.net est.quantcast.mgr.consensu.org *.google.ae *.google.al *.google.am *.google.at *.google.az *.google.ba *.google.be *.google.bf *.google.bg *.google.bj *.google.bs *.google.by *.google.ca *.google.cd *.google.ch *.google.ci *.google.cl *.google.cm *.google.cn *.google.co.ao *.google.co.bw *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ls *.google.co.ma *.google.co.nz *.google.co.th *.google.co.tz *.google.co.ug *.google.co.uk *.google.co.uz *.google.co.ve *.google.co.za *.google.co.zm *.google.co.zw *.google.com *.google.com.af *.google.com.ar *.google.com.au *.google.com.bd *.google.com.bh *.google.com.bn *.google.com.bo *.google.com.br *.google.com.bz *.google.com.co *.google.com.cu *.google.com.cy *.google.com.do *.google.com.ec *.google.com.eg *.google.com.et *.google.com.gh *.google.com.gt *.google.com.hk *.google.com.jm *.google.com.kh *.google.com.kw *.google.com.lb *.google.com.ly *.google.com.mm *.google.com.mt *.google.com.mx *.google.com.my *.google.com.na *.google.com.ng *.google.com.ni *.google.com.np *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.com.pr *.google.com.py *.google.com.qa *.google.com.sa *.google.com.sg *.google.com.sv *.google.com.tj *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.uy *.google.com.vc *.google.com.vn *.google.cv *.google.cz *.google.de *.google.dk *.google.dz *.google.ee *.google.es *.google.fi *.google.fr *.google.ge *.google.gr *.google.gy *.google.hn *.google.hr *.google.ht *.google.hu *.google.ie *.google.im *.google.iq *.google.is *.google.it *.google.jo *.google.kg *.google.kz *.google.la *.google.lk *.google.lt *.google.lu *.google.lv *.google.md *.google.me *.google.mg *.google.mk *.google.mn *.google.mu *.google.mv *.google.mw *.google.ne *.google.nl *.google.no *.google.pl *.google.ps *.google.pt *.google.ro *.google.rs *.google.ru *.google.se *.google.si *.google.sk *.google.sm *.google.sn *.google.sr *.google.tn *.google.tt *.google.td *.google.je *.google.ws *.google.rw *.google.co.mz *.google.sc *.google.tm *.google.ga *.google.tg *.google.com.ag *.google.co.in *.google.ad *.google.ml *.google.cg cmp.auslogics.com; font-src 'self' fonts.gstatic.com use.fontawesome.com; object-src 'self'; media-src 'self'; form-action 'self'; frame-src 'self' m.youtube.com mc.yandex.com web.facebook.com www.facebook.com *.google.com www.googletagmanager.com www.youtube.com youtube.com; child-src 'self' www.facebook.com; worker-src 'self'; manifest-src 'self'; report-uri /secure-headers/report/r/d/csp/enforce; block-all-mixed-content; upgrade-insecure-requests 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self' https://app.storyblok.com; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://st.anyip.io https://af.anyip.io https://script.tapfiliate.com https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.gstatic.com https://*.doubleclick.net https://*.googleadservices.com https://*.hs-scripts.com https://*.hs-analytics.net https://*.hs-banner.com https://ph.anyip.io https://widget.intercom.io https://js.intercomcdn.com https://connect.facebook.net https://www.redditstatic.com https://valley-intent.nyc3.digitaloceanspaces.com https://d-code.liadm.com https://*.clarity.ms https://bat.bing.com https://static.cloudflareinsights.com https://snap.licdn.com https://static.ads-twitter.com https://app.factors.ai https://code.upscope.io https://js.upscope.io https://widget.trustpilot.com https://ddwl4m2hdecbv.cloudfront.net https://sc.lfeeder.com https://t.rightmessage.com https://app.storyblok.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://fonts.intercomcdn.com; media-src 'self' https://js.intercomcdn.com; connect-src 'self' https: wss:; frame-src 'self' https://st.anyip.io https://*.googletagmanager.com https://*.google.com https://*.recaptcha.net https://*.intercom.io https://*.liadm.com https://widget.trustpilot.com https://*.trustpilot.com; form-action 'self'; worker-src 'self' blob:; report-uri /api/csp-report 1
base-uri 'self'; default-src data: *.youtube.com *.youtu.be *.vimeo.com *.google.com *.google-analytics.com *.googletagmanager.com cdn.alireviews.io cdn.jsdelivr.net *.alicdn.com *.weaverse.io *.shopify.com *.myshopify.com 'self' 'nonce-c2338348c0559bb13045cfbcfb449512' https://cdn.shopify.com https://shopify.com; frame-ancestors 'none'; style-src *.weaverse.io *.shopify.com *.myshopify.com 'self' 'unsafe-inline' https://cdn.shopify.com; connect-src vimeo.com *.shopifysvc.com https://www.google-analytics.com https://region1.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://tagassistant.google.com https://websdk.appsflyersdk.com https://banner.appsflyersdk.com https://creatives-cdn.appsflyersdk.com https://cnstrc.com https://*.cnstrc.com *.weaverse.io *.shopify.com *.myshopify.com 'self' https://cdn.shopify.com/ https://monorail-edge.shopifysvc.com https://theoutnet-checkout.weaverse.dev https://wcacjh-wq.myshopify.com; script-src https://cdn.shopify.com https://www.googletagmanager.com https://tagmanager.google.com https://cct.google https://www.google-analytics.com https://ssl.google-analytics.com https://websdk.appsflyersdk.com https://cnstrc.com https://*.cnstrc.com https://cdn.tapcart.com 'nonce-c2338348c0559bb13045cfbcfb449512'; img-src 'self' data: blob: https://cdn.shopify.com https://shopify.com https://*.shopify.com https://*.myshopify.com cdn.alireviews.io cdn.jsdelivr.net *.alicdn.com https://cnstrc.com https://*.cnstrc.com https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://impressions.onelink.me *.weaverse.io *.shopify.com *.myshopify.com; font-src 'self' data: https://cdn.shopify.com https://cdn.appsflyer.com; frame-src *.youtube.com *.youtu.be *.vimeo.com https://www.googletagmanager.com https://maps.google.com *.weaverse.io *.shopify.com *.myshopify.com 1
default-src 'self'; script-src 'self' https:; style-src 'self' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; frame-ancestors 'self'; form-action 'self' https:; base-uri 'self'; object-src 'none' 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data: https://*.stripe.com; object-src 'none'; script-src 'self' https: https://connect-js.stripe.com https://js.stripe.com https://*.js.stripe.com https://maps.googleapis.com 'nonce-niXTagcEabRYQQlTF5XKOg=='; style-src 'self' https: 'nonce-niXTagcEabRYQQlTF5XKOg=='; style-src-attr 'unsafe-inline'; frame-src 'self' https://connect-js.stripe.com https://js.stripe.com https://*.js.stripe.com https://hooks.stripe.com; connect-src 'self' https://api.stripe.com https://maps.googleapis.com; report-uri /systems/csp_report 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; report-uri /api/csp-report-logger; 1
frame-ancestors *.sbazar.cz 'self' *.seznam.cz *.sdn.cz https://pay.google.com https://connect-js.stripe.com https://js.stripe.com; script-src *.sbazar.cz 'self' 'unsafe-inline' *.seznam.cz *.sdn.cz *.szn.cz *.pszn.cz *.im.cz *.mapy.cz *.mapy.com https://gacz.hit.gemius.pl https://scz.hit.gemius.pl https://ls.hit.gemius.pl https://login.seznam.cz https://notifikace.seznam.cz https://www.googletagmanager.com https://region1.google-analytics.com https://www.google-analytics.com https://connect.facebook.net https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://widget.packeta.com https://connect-js.stripe.com https://js.stripe.com *.adform.net *.adnxs.com *.adnxs-simple.com *.adsafeprotected.com *.consensu.org *.doubleclick.net *.doubleverify.com *.googlesyndication.com *.googletagservices.com *.imedia.cz *.imedia.dev.dszn.cz *.pliing.com *.pubmatic.com *.sbeta.cz *.sdn.szn.cz *.serving-sys.com *.sklik.cz ads.celtra.com *.2mdn.net ams.creativecdn.com cdn.id5-sync.com tags.crwdcntrl.net id5-sync.com/gm/v3 dis.criteo.com tracker.adnami.io script.adnami.io macro.adnami.io assets.adnami.io functions.adnami.io directive.adnami.io rmb.adnami.io https://www.sbazar.cz https://c.imedia.cz https://im.cz https://chat.sbazar.cz *.seznam.dev.dszn.cz *.seznam.test.dszn.cz; report-uri https://sentry.pszn.cz/api/232/security/?sentry_key=c74f7db661ae4cad8d94282c184d08f9 1
connect-src https://zendesk-eu.my.sentry.io https://sandbox.usaepay.com https://*.analytics.google.com https://*.google.com https://www.usaepay.com https://ekr.zdassets.com 'self' https://addgene.zendesk.com cloudflareinsights.com *.addgene.org *.nr-data.net https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google-analytics.com; script-src https://widget.surveymonkey.com 'unsafe-inline' https://googleads.g.doubleclick.net https://*.googletagmanager.com static.cloudflareinsights.com https://challenges.cloudflare.com https://js-agent.newrelic.com https://www.usaepay.com 'self' *.addgene.org https://googletagmanager.com https://www.googleadservices.com https://sandbox.usaepay.com https://static.zdassets.com https://tagmanager.google.com http://static-assets:8080 https://www.google.com https://assets.zendesk.com https://ajax.googleapis.com https://www.googletagmanager.com; default-src 'self' *.addgene.org; img-src https://googleads.g.doubleclick.net https://*.analytics.google.com https://google.com data: http://static-assets:8080 https://*.google.com https://www.gstatic.com https://www.google.com 'self' *.addgene.org https://ssl.gstatic.com *.addgene.org.s3.amazonaws.com https://i.ytimg.com https://*.googletagmanager.com https://*.g.doubleclick.net https://googletagmanager.com https://*.google-analytics.com; style-src 'unsafe-inline' http://static-assets:8080 'self' https://fonts.googleapis.com *.addgene.org https://tagmanager.google.com https://googletagmanager.com; frame-src https://sandbox.usaepay.com https://td.doubleclick.net https://www.usaepay.com 'self' *.addgene.org https://www.youtube.com https://www.googletagmanager.com https://challenges.cloudflare.com https://www.surveymonkey.com https://bid.g.doubleclick.net; font-src data: http://static-assets:8080 'self' https://fonts.gstatic.com *.addgene.org; report-uri /csp-reporting/ 1
default-src 'self'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=Bp8Kui1vR8LYLdklSh1GWVcajfC.t.F_YcVzzSz56Lk-1789268109.6014965-1.0.1.1-fqx.iHH79BcWQyasWr.qZPOiEFeYRb3.IkBopEmmCCkpfDTEEnRWjtfQ48Y2CIA1_mebdeNpwegCiquOi7GKYPnkLtda1xL7ieho88EYmwlRva87w2ZQ1wR7vGP65jz4SHnWj6ChZpfl8luo7DGy24GXfqC0mBlzOYE8ko52_PJZTRKdPhgQXImwQKIOotT3; report-to cf-dkmedywfhqyyrcnw 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data: blob: *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io assets.traveljoy.com; object-src 'none'; style-src 'self' https: 'unsafe-inline' *.visualwebsiteoptimizer.com app.vwo.com fonts.googleapis.com; base-uri 'self'; worker-src 'self' blob:; connect-src 'self' *.visualwebsiteoptimizer.com app.vwo.com fonts.googleapis.com assets.traveljoy.com bam.nr-data.net sandbox-assets.tjoy.io api.us.nylas.com maps.googleapis.com placehold.co hare-media-cdn.tripadvisor.com s3-dev.traveljoy.com s3-assets.traveljoy.com api.unlayer.com canny.io www.recaptcha.net 'self' wss://nexus-websocket-a.intercom.io/ https://ekr.zdassets.com/ https://global.ketchcdn.com/ https://traveljoy.zendesk.com/ wss://traveljoy.zendesk.com/ https://api-js.mixpanel.com/ https://bam.nr-data.net/ https://api-iam.intercom.io/ https://www.google-analytics.com/ https://api.smooch.io wss://api.smooch.io https://edge.fullstory.com/ https://rs.fullstory.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' js.stripe.com checkout.stripe.com connect-js.stripe.com cdn.plaid.com js-agent.newrelic.com www.recaptcha.net www.gstatic.com www.googletagmanager.com global.ketchcdn.com edge.fullstory.com cdn.mxpnl.com widget.intercom.io static.zdassets.com connect.facebook.net *.visualwebsiteoptimizer.com app.vwo.com canny.io cdnjs.cloudflare.com assets.traveljoy.com calendly.com cdn.zapier.com editor.unlayer.com htp.tokenex.com; frame-src js.stripe.com connect-js.stripe.com *.visualwebsiteoptimizer.com app.vwo.com cdn.plaid.com checkout.stripe.com *.youtube.com *.youtu.be *.recaptcha.net editor.unlayer.com canny.io htp.tokenex.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://aau.edu.jo https://*.aau.edu.jo *.googleusercontent.com *.jsdelivr.net *.gstatic.com *.bootstrapcdn.com *.googleapis.com *.google.com; report-uri //report-csp-violation 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.googletagmanager.com https://*.google-analytics.com https://*.amplitude.com https://*.hs-scripts.com https://*.hs-analytics.net https://*.hsforms.net https://*.hubspot.com https://js.hs-scripts.com https://*.intercom.io https://*.intercomcdn.com https://*.sentry.io https://*.ingest.sentry.io https://*.algolia.net https://*.algolianet.com https://*.vercel-insights.com https://va.vercel-scripts.com https://cdn.cookielaw.org https://connect.facebook.net https://*.facebook.com https://snap.licdn.com https://static.ads-twitter.com https://*.twitter.com https://bat.bing.com https://c.amazon-adsystem.com https://www.redditstatic.com https://pixel.byspotify.com https://bzrcdn.openai.com https://analytics.tiktok.com https://*.tiktok.com https://widget.trustpilot.com https://fast.wistia.com https://fast.wistia.net https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.instagram.com https://holded.chilipiper.com https://app.holded.com https://accounts.google.com https://*.doubleclick.net https://js.hs-banner.com https://browser.sentry-cdn.com https://www.google.com https://www.gstatic.com https://vercel.live https://*.clarity.ms https://sdks.shopifycdn.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.intercomcdn.com https://widget.trustpilot.com https://cdn.cookielaw.org https://fast.wistia.com; font-src 'self' data: https://fonts.gstatic.com https://*.intercomcdn.com https://cdn.cookielaw.org https://*.wistia.com https://*.wistia.net; img-src 'self' data: blob: https://cdn.prod.website-files.com https://lh3.googleusercontent.com https://*.googleusercontent.com https://api.holded.com https://i.imgur.com https://*.google-analytics.com https://*.googletagmanager.com https://*.hubspot.com https://*.hsforms.com https://*.intercomcdn.com https://*.intercom-attachments-1.com https://*.trustpilot.com https://*.facebook.com https://www.facebook.com https://px.ads.linkedin.com https://*.tiktok.com https://bat.bing.com https://*.amazon-adsystem.com https://t.co https://cdn.cookielaw.org https://*.wistia.com https://*.wistia.net https://*.twitter.com https://www.google.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.com.ai https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.cl https://www.google.cm https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.ms https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat https://i.ytimg.com https://static.intercomassets.com https://avatars.githubusercontent.com https://connect.facebook.net https://www.googleadservices.com https://*.reddit.com https://*.doubleclick.net https://*.clarity.ms https://cdn.shopify.com; connect-src 'self' https://*.amplitude.com https://api.eu.amplitude.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.googletagmanager.com https://www.google.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.com.ai https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.cl https://www.google.cm https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.ms https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat https://www.googleadservices.com https://t.co https://*.doubleclick.net https://*.googlesyndication.com https://*.onetrust.com https://*.litix.io https://pixels.spotify.com https://*.openai.com https://*.reddit.com https://*.tiktokw.us blob: https://*.hubspot.com https://*.hs-analytics.net https://*.hsforms.net https://*.hsforms.com https://api.hubapi.com https://*.intercom.io wss://*.intercom.io https://*.sentry.io https://*.ingest.sentry.io https://*.algolia.net https://*.algolianet.com https://*.cookielaw.org https://*.facebook.com https://px.ads.linkedin.com https://*.tiktok.com https://analytics.tiktok.com https://*.openai.com https://bat.bing.com https://*.amazon-adsystem.com https://*.twitter.com https://app.holded.com https://api.holded.com https://api.supersonik.ai https://latest.currency-api.pages.dev https://*.wistia.com https://*.wistia.net https://*.clarity.ms https://*.myshopify.com; frame-src 'self' https://*.youtube.com https://*.youtube-nocookie.com https://player.vimeo.com https://*.hubspot.com https://*.hsforms.com https://*.hsforms.net https://*.intercom.io https://www.intercom-reporting.com https://aax-eu.amazon-adsystem.com https://app.supersonik.ai https://accounts.google.com https://holded.chilipiper.com https://app.livestorm.co https://*.wistia.com https://*.wistia.net https://www.instagram.com https://www.tiktok.com https://*.doubleclick.net https://www.facebook.com https://*.facebook.com https://www.google.com https://vercel.live https://*.myshopify.com https://*.shopify.com https://shop.app; media-src 'self' blob: data: https://*.youtube.com https://player.vimeo.com https://*.wistia.com https://*.wistia.net; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://forms.hsforms.com https://app.holded.com https://www.facebook.com; frame-ancestors 'none'; report-uri https://o448960.ingest.us.sentry.io/api/4511387690205184/security/?sentry_key=6867907cf3e65f0e365d418527f14341&sentry_environment=production; report-to csp-endpoint 1
frame-src viz.tools.investis.com irs.tools.investis.com www.youtube.com www.youtube-nocookie.com www.youtu.be; report-uri /report-csp-violation 1
object-src 'none';base-uri 'self';script-src 'nonce-Ub1M36bRpxloj168z-fcYw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' primericaonline.okta.com login.primericaonline.com *.oktacdn.com *.primerica.com *.primericaonline.com cdn.cookielaw.org kit.fontawesome.com *.contentstack.io; connect-src 'self' primericaonline.okta.com primericaonline-admin.okta.com login.primericaonline.com *.oktacdn.com *.mixpanel.com *.mapbox.com primericaonline.kerberos.okta.com primericaonline.mtls.okta.com *.authenticatorlocalprod.com:8769 http://localhost:8769 http://127.0.0.1:8769 *.authenticatorlocalprod.com:65111 http://localhost:65111 http://127.0.0.1:65111 *.authenticatorlocalprod.com:65121 http://localhost:65121 http://127.0.0.1:65121 *.authenticatorlocalprod.com:65131 http://localhost:65131 http://127.0.0.1:65131 *.authenticatorlocalprod.com:65141 http://localhost:65141 http://127.0.0.1:65141 *.authenticatorlocalprod.com:65151 http://localhost:65151 http://127.0.0.1:65151 https://oinmanager.okta.com data: *.primerica.com *.primericaonline.com cdn.cookielaw.org kit.fontawesome.com *.contentstack.io *.ingest.sentry.io; script-src 'unsafe-inline' 'unsafe-eval' 'self' 'report-sample' primericaonline.okta.com login.primericaonline.com *.oktacdn.com *.primerica.com *.primericaonline.com cdn.cookielaw.org kit.fontawesome.com *.contentstack.io; style-src 'unsafe-inline' 'self' 'report-sample' primericaonline.okta.com login.primericaonline.com *.oktacdn.com *.primerica.com *.primericaonline.com cdn.cookielaw.org kit.fontawesome.com *.contentstack.io; frame-src 'self' primericaonline.okta.com primericaonline-admin.okta.com login.primericaonline.com login.okta.com *.vidyard.com com-okta-authenticator: *.primerica.com *.primericaonline.com cdn.cookielaw.org kit.fontawesome.com *.contentstack.io; img-src 'self' primericaonline.okta.com login.primericaonline.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: *.primerica.com *.primericaonline.com cdn.cookielaw.org kit.fontawesome.com *.contentstack.io blob:; font-src 'self' primericaonline.okta.com login.primericaonline.com data: *.oktacdn.com fonts.gstatic.com *.primerica.com *.primericaonline.com cdn.cookielaw.org kit.fontawesome.com *.contentstack.io; frame-ancestors 'self' https://mob.primericaonline.com https://*.primericaonline.com 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://platform.twitter.com https://scripts.cleverwebserver.com https://ui.cleverwebserver.com https://www.dianomi.com https://airwhon.com https://code.jquery.com https://www.googletagmanager.com https://cloud.umami.is https://s3.tradingview.com https://main.pubexchange.com https://module.pubexchange.com https://cdn2.pubexchange.com; style-src 'self' 'unsafe-inline' https://airwhon.com https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.supabase.co wss://*.supabase.co https://call.cleverwebserver.com https://ui.cleverwebserver.com https://view.clvrads.com https://www.dianomi.com https://airwhon.com https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://cloud.umami.is https://api.giphy.com https://o4510573709033472.ingest.us.sentry.io; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://youtu.be https://player.vimeo.com https://www.vimeo.com https://odysee.com https://www.odysee.com https://www.tradingview.com https://s.tradingview.com https://twitter.com https://www.twitter.com https://x.com https://www.x.com https://platform.twitter.com https://syndication.twitter.com https://player.cnbc.com https://www.player.cnbc.com https://open.spotify.com https://embed.podcasts.apple.com https://w.soundcloud.com https://www.buzzsprout.com https://buzzsprout.com https://share.transistor.fm https://play.libsyn.com https://html5-player.libsyn.com; media-src 'self' blob: https:; worker-src 'self' blob:; manifest-src 'self'; report-uri https://o4510573709033472.ingest.us.sentry.io/api/4510573728104448/csp-report/?sentry_key=07d4db80f21bb01b039308b9eb35fd4f 1
default-src 'none'; connect-src 'self' forms.hsforms.com www.google.com px.ads.linkedin.com region1.analytics.google.com stats.g.doubleclick.net bat.bing.net cta-service-cms2.hubspot.com api.hubapi.com forms.hscollectedforms.net pulse.clickguard.com; form-action 'none'; frame-ancestors 'none'; frame-src https://www.googletagmanager.com https://td.doubleclick.net; img-src 'self' data: forms-na1.hsforms.com px.ads.linkedin.com www.google.es bat.bing.net www.google.com forms.hsforms.com perf-na1.hsforms.com track.hubspot.com; font-src 'self' data:; media-src 'none'; object-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' js.hsforms.net www.googletagmanager.com bat.bing.com static.hotjar.com snap.licdn.com js.hs-scripts.com www.clarity.ms tracking-api.g2.com pulse.clickguard.com script.hotjar.com js.hscollectedforms.net js.hs-analytics.net js.hsadspixel.net js.hubspot.com js.hs-banner.com googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com; 1
connect-src 'none'; font-src 'self'; frame-src 'none'; img-src 'self'; media-src 'none'; object-src 'none'; report-uri https://browser-intake-us3-datadoghq.com/api/v2/logs?dd-api-key=pub073cc344e99148d91a146b4cfdfbd3e9&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Atrac-jobs-website%2Cenv%3Aprod%2Cversion%3A2026.2; script-src 'self' https://ajax.googleapis.com/; style-src 'self'; worker-src 'none' 1
object-src 'none';base-uri 'self';script-src 'nonce-zbp2_c_g8BX-8nSYRookzg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-ACXg-Fc_ATt6U0SGB0XFNw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagservices.com https://*.googlesyndication.com https://*.doubleclick.net https://securepubads.g.doubleclick.net https://*.googleadservices.com https://www.google-analytics.com https://*.google-analytics.com https://*.googletagmanager.com https://fundingchoicesmessages.google.com https://www.google.com https://www.gstatic.com https://insight.bljesak.info https://*.dotmetrics.net https://*.iprom.net https://*.ipromcloud.com https://platform.twitter.com https://www.youtube.com https://w.soundcloud.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; media-src 'self' https: blob:; connect-src 'self' https://*.bljesak.info https://*.google-analytics.com https://*.googletagmanager.com https://*.doubleclick.net https://*.googlesyndication.com https://fundingchoicesmessages.google.com https://*.dotmetrics.net https://*.iprom.net https://*.ipromcloud.com; frame-src https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://platform.twitter.com https://w.soundcloud.com https://*.doubleclick.net https://*.googlesyndication.com https://fundingchoicesmessages.google.com https://www.facebook.com https://*.instagram.com https://*.sofascore.com https://*.bljesak.photo https://strawpoll.com https://*.strawpoll.com https://izbori-bih-2026.vercel.app; worker-src 'self' blob:; upgrade-insecure-requests 1
default-src 'self'; img-src 'self' data: https://tile.openstreetmap.org; object-src 'none'; script-src 'self' 'nonce-bXJ2TGxzc3Y2blFWN3gweGlmYXJOOA==' 'report-sample'; style-src 'self' 'unsafe-inline' 'report-sample'; report-to csp; report-uri /csp-report?parent_request_id=00218hldt92br8522b80&parent_request_id_hmac=795a18ec706d41c66df6cb3c39db3adcb5ed31a7 1
default-src 'self' https://*.dukascopy.com https://www.dukascopy.com ; script-src 'self' 'nonce-HQQarEZdUB1Zh5hMKfgkyw' 'unsafe-eval' https://*.cloudflare.com https://www.dukascopy.com https://*.hotjar.com https://*.google.com https://*.g.doubleclick.net https://*.googlesyndication.com https://static.cloudflareinsights.com https://*.googletagmanager.com ; script-src-elem 'self' 'nonce-HQQarEZdUB1Zh5hMKfgkyw' https://*.googlesyndication.com https://static.cloudflareinsights.com https://*.cloudflare.com https://*.dukascopy.com https://www.dukascopy.com https://*.telefision.com https://*.jsdelivr.net https://*.hotjar.com https://*.google.com https://*.trustpilot.com https://*.gstatic.com https://*.g.doubleclick.net https://*.redditstatic.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://freeserv-static.dukascopy.com https://freeserv.dukascopy.com ; style-src 'self' 'unsafe-inline' https://*.dukascopy.com https://www.dukascopy.com https://*.jsdelivr.net https://*.telefision.com https://*.googleapis.com https://*.gstatic.com https://*.dukascopy.jp ; object-src 'none' ; frame-ancestors 'self' ; form-action 'self' https://trustpilot.com https://*.trustpilot.com ; frame-src 'self' data: blob: https://*.cloudflare.com https://*.dukascopy.jp https://*.dukascopy.com https://www.dukascopy.com https://*.trustpilot.com https://www.youtube.com https://*.google.com https://*.googletagmanager.com https://*.doubleclick.net ; img-src 'self' https://*.dukascopy.com https://www.dukascopy.com https://*.dukascopy.jp https://*.google.com https://*.googleadservices.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.googleapis.com https://*.g.doubleclick.net https://*.doubleclick.net https://*.google.us https://*.google.co.us https://*.google.com.us https://*.reddit.com https://*.googletagmanager.com https://*.google-analytics.com https://*.trustpilot.com https://*.g.doubleclick.net https://*.ytimg.com https://*.gstatic.com https://*.hotjar.com data: blob:; font-src 'self' https://freeserv-static.dukascopy.com https://*.dukascopy.com https://www.dukascopy.com https://*.telefision.com https://fonts.gstatic.com https://*.hotjar.com data:; media-src 'self' https://*.dukascopy.com https://www.dukascopy.com https://*.dukascopy.jp https://*.telefision.com data: blob:; connect-src 'self' https://*.dukascopy.com https://www.dukascopy.com https://*.dukascopy.online https://cloudflareinsights.com https://*.hotjar.com https://*.hotjar.io https://www.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.googleapis.com https://*.g.doubleclick.net https://*.doubleclick.net https://*.google.us https://*.google.co.us https://*.google.com.us wss://*.hotjar.com https://*.reddit.com wss://*.dukascopy.com wss://*.telefision.com https://*.telefision.com https://*.g.doubleclick.net https://*.trustpilot.com https://*.google-analytics.com https://*.googlesyndication.com https://*.google.com https://*.analytics.google.com ; report-uri /api/csp-report 1
base-uri 'self'; connect-src 'self' https://*.fontawesome.com/ https://*.formassembly.com/ https://*.promedica.app/ https://*.vercel-storage.com/ https://*.vercel.app/ https://analytics.google.com/ https://api.stadiamaps.com/ https://cdn.cookielaw.org/ https://cm.pmdt-jss.localhost/ https://maps.googleapis.com/ https://mc-3f4459e6-26cc-45d7-95b4-1637-cd.azurewebsites.net/ https://mc-d506a988-cc64-4e20-af8c-4606-afd.azurefd.net/ https://pagead2.googlesyndication.com/ https://pcl-staging.promedica.org/ https://pcl.promedica.org/ https://promedica.matomo.cloud/ https://siteintercept.qualtrics.com/ https://stats.g.doubleclick.net/ https://www.google-analytics.com/; default-src 'self' https://*.promedica.app/ https://*.vercel.app/; font-src 'self' data: https://*.fontawesome.com/ https://*.promedica.app/ https://*.vercel.app/ https://fonts.gstatic.com/ https://use.typekit.net/; frame-src 'self' https://td.doubleclick.net/ https://www.google.com/ https://www.youtube.com/; img-src 'self' data: http://dummyimage.com https://*.promedica.app https://*.qualtrics.com https://*.vercel.app https://cdn.cookielaw.org https://maps.googleapis.com https://maps.gstatic.com https://mc-3f4459e6-26cc-45d7-95b4-1637-cd.azurewebsites.net https://mc-d506a988-cc64-4e20-af8c-4606-afd.azurefd.net https://pcl-staging.promedica.org https://pcl.promedica.org https://www.google-analytics.com https://www.google.com.ec https://www.google.com https://www.googletagmanager.com; manifest-src 'self'; media-src 'self' data: https://pcl.promedica.org/ https://pcl-staging.promedica.org/; object-src 'none'; report-uri https://6480f3f9bf4bdd8c5cde6f2b.endpoint.csper.io/?v=1; script-src 'unsafe-inline' 'unsafe-eval' 'report-sample' 'self' https://*.promedica.app/ https://*.vercel.app/ https://cdn.cookielaw.org/ https://cdn.matomo.cloud/ https://cdn.mouseflow.com/ https://googleads.g.doubleclick.net/ https://kit.fontawesome.com/ https://maps.googleapis.com/ https://promedica.tfaforms.net/ https://siteintercept.qualtrics.com/ https://unpkg.com/ https://www.google-analytics.com/ https://www.google.com/recaptcha/ https://www.googletagmanager.com/ https://www.gstatic.com/ https://www.youtube.com/ https://zn86cv25rplysllsr-promedica.siteintercept.qualtrics.com/SIE/; style-src 'report-sample' 'unsafe-inline' 'self' https://*.promedica.app/ https://*.vercel.app/ https://fonts.googleapis.com/ https://promedica.tfaforms.net/; worker-src 'self' blob: 1
default-src 'self'; script-src 'self' 'nonce-/kwtKO3iVP9DEQ+kxAiOnQ==' 'strict-dynamic' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://files.any.run; media-src 'self' blob: https://files.any.run; font-src 'self' data:; connect-src 'self' https://analytics.any.run https://sentry.any.run https://api-gb.any.run; frame-src 'self' https://challenges.cloudflare.com; frame-ancestors 'self'; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; manifest-src 'self' https://files.any.run; upgrade-insecure-requests; report-uri /api/csp-report/create 1
default-src 'self' https://qad.com https://www.qad.com https://staticfiles.qad.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.qad.com https://staticfiles.qad.com https://*.trustarc.com https://cdn.cookielaw.org https://www.googletagmanager.com https://js.qualified.com https://*.wistia.com https://*.wistia.net https://browser.sentry-cdn.com https://snap.licdn.com https://munchkin.marketo.net https://j.nrich.ai https://js.zi-scripts.com https://browser-update.org https://translate.google.com https://translate.googleapis.com https://cdnjs.cloudflare.com https://www.google.com https://www.gstatic.com https://cdn.datatables.net; style-src 'self' 'unsafe-inline' https://*.qad.com https://staticfiles.qad.com https://translate.googleapis.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://www.gstatic.com https://*.typekit.net https://cdn.datatables.net; frame-src 'self' https://*.qad.com https://go.qad.com https://*.trustarc.com https://*.wistia.com https://*.wistia.net https://www.google.com; connect-src 'self' https://*.qad.com https://*.trustarc.com https://cdn.cookielaw.org https://*.onetrust.com https://*.marketo.com https://*.mktoresp.com https://px.ads.linkedin.com https://pagead2.googlesyndication.com https://*.qualified.com https://*.zi-scripts.com https://*.zoominfo.com https://*.wistia.com https://*.wistia.net https://browser.sentry-cdn.com https://*.litix.io; font-src 'self' data: https://*.trustarc.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://*.typekit.net https://*.wistia.com https://*.wistia.net; img-src 'self' data: https://*.qad.com https://staticfiles.qad.com https://*.trustarc.com https://*.truste.com https://cdn.cookielaw.org https://px.ads.linkedin.com https://translate.google.com https://*.marketo.net https://*.mktoresp.com https://*.wistia.com https://www.googletagmanager.com https://www.figma.com https://cdnjs.cloudflare.com; media-src 'self' blob: https://*.qad.com https://*.wistia.com https://*.wistia.net; frame-ancestors 'self' http://*.qad.com https://*.qad.com https://*.cebos.com https://*.dys.com https://*.precisionsoftware.com https://*.trustarc.com; 1
default-src 'self'; script-src 'self' https://trusted-scripts.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://trusted-images.com; font-src 'self'; frame-src 'self' https://forms.office.com; object-src 'none'; base-uri 'self'; form-action 'self'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net *.hotjar.com data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com *.authorize.net challenges.cloudflare.com data: *.hotjar.com *.gstatic.com *.doubleclick.net *.facebook.com *.brand-display.com *.sitescout.com *.addthis.com *.metalocator.com *.googletagmanager.com *.medallia.com *.adsrvr.org *.ipredictive.com *.spotify.com *.byspotify.com *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.certcapture.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com *.magentocommerce.com *.facebook.com *.doubleclick.net *.google.com *.brand-display.com *.sitescout.com *.googletagmanager.com *.googleapis.com *.analytics.yahoo.com *.ktxlytics.io *.adnxs.com *.metalocator.com *.scooterscoffee.com *.kampyle.com *.ipredictive.com *.spotify.com *.byspotify.com *.cdninstagram.com *.fbcdn.net *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.certcapture.com *.disqus.com *.avada.io *.shopify.com *.authorize.net challenges.cloudflare.com *.bluecore.com *.facebook.net *.googleapis.com *.hotjar.com *.googletagmanager.com *.doubleclick.net *.gstatic.com *.brand-display.com *.cloudflare.com *.sitescout.com up.pixel.ad *.xg4ken.com *.usersnap.com chimpstatic.com data: *.ktxlytics.io *.app-us1.com *.amazonaws.com *.addthis.com *.addthisedge.com trackcmp.net *.moatads.com *.metalocator.com *.jsdelivr.net *.medallia.com *.snapchat.com *.trackedweb.net *.appboycdn.com sc-static.net *.adsrvr.org *.ipredictive.com *.spotify.com *.byspotify.com *.adroll.com *.tiktokw.us *.redditstatic.com *.braze.com *.instagram.com *.googleadservices.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.fontawesome.com https://fonts.bunny.net *.googleapis.com *.mailchimp.com *.typekit.net *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.certcapture.com https://get.geojs.io *.avada.io *.authorize.net *.bluecore.com *.googleapis.com *.hotjar.com *.hotjar.io *.doubleclick.net *.ktxlytics.io *.medallia.com *.snapchat.com *.trackedweb.net *.appboycdn.com sc-static.net *.kampyle.com *.ipredictive.com *.spotify.com *.byspotify.com *.adroll.com *.tiktokw.us *.redditstatic.com *.adsrvr.org *.braze.com *.instagram.com *.googleusercontent.com *.facebook.net *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.run.app 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://scooterscoffee.com/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; frame-ancestors 'self'; form-action 'self'; base-uri 'self'; object-src 'none'; report-uri https://gydk4ua5.uriports.com/reports/report; report-to default 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://embed.tawk.to https://*.tawk.to; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com; img-src 'self' data: blob: https: http://cms.tophost.md https://cms.tophost.md; font-src 'self' data: https://cdn.jsdelivr.net https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://billing.tophost.md https://*.tawk.to wss://*.tawk.to https://cdn.jsdelivr.net; frame-src 'self' https://www.google.com https://maps.google.com https://embed.tawk.to https://*.tawk.to https://billing.tophost.md; form-action 'self' https://billing.tophost.md 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://*.googletagmanager.com https://tagmanager.google.com https://connect.facebook.net https://www.clarity.ms https://c.clarity.ms https://strava-embeds.com https://d335luupugsy2.cloudfront.net https://challenges.cloudflare.com https://vercel.live https://static.zdassets.com https://static.hotjar.com https://cdn.mouseflow.com https://www.googleadservices.com https://static.cloudflareinsights.com https://posthog.ingresse.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://googletagmanager.com https://tagmanager.google.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://api.ticketsports.com.br https://api-beta.ticketsports.com.br https://accounts.ticketsports.com.br https://*.googletagmanager.com https://app.posthog.com https://us.i.posthog.com https://nominatim.openstreetmap.org https://www.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://www.facebook.com https://c.clarity.ms https://e.clarity.ms https://app.rdstation.com.br https://api.rd.services https://challenges.cloudflare.com https://www.strava.com https://vars.hotjar.com https://mouseflow.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://ekr.zdassets.com https://posthog.ingresse.com https://capiq.datah04.com; frame-src 'self' https://www.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://challenges.cloudflare.com https://td.doubleclick.net https://www.strava.com https://strava-embeds.com https://vercel.live https://vars.hotjar.com; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests 1
prefetch-src *.bing.com *.cdn-apple.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://*.gstatic.com applepay.cdn-apple.com *.fontawesome.com *.alicdn.com *.bootstrapcdn.com *.cdnfonts.com *.googleapis.com *.rockler.com *.slant.co data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.adyen.com pay.google.com payments-eu.amazon.com *.amazon.de *.cordialdev.com *.cordial.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.adyen.com pay.google.com *.certcapture.com *.cordialdev.com *.cordial.com *.cordial.io applepay.cdn-apple.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * photos.pixlee.co https://photos.pixlee.co landofcoder.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.adyen.com pay.google.com *.payments-amazon.com *.media-amazon.com *.paypalobjects.com https://*.gstatic.com *.certcapture.com applepay.cdn-apple.com https://scontent-bom1-1.cdninstagram.com/ https://scontent-bom2-2.xx.fbcdn.net https://scontent-bom1-2.cdninstagram.com https://scontent-bom1-2 ftcdn.net https://scontent-bom1-2.xx.fbcdn.net/ *.cdninstagram.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com *.disqus.com https://img.youtube.com store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com wac.edgecastcdn.net *.lightboxcdn.com https://hello.zonos.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com *.1rx.io *.360yield.com *.3lift.com *.adnxs.com *.ad-stir.com *.alicdn.com *.amazon-adsystem.com *.attentivemobile.com *.attn.tv *.bidr.io *.bing.com *.bing.net *.casalemedia.com *.clarity.ms *.cookiebot.com *.cordial.com *.crazyegg.com *.creativecdn.com d3cgm8py10hi0z.cloudfront.net *.facebook.net *.ggpht.com *.googleadservices.com www.google.ad www.google.ae www.google.al www.google.am www.google.as www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.nr www.google.nu www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu www.google.ws google.com *.googlesyndication.com *.gumgum.com *.inmobi.com *.liadm.com *.lijit.com *.media.net *.mountain.com *.nexx360.io *.openx.net *.opera.com *.outbrain.com *.pinimg.com *.pinterest.com *.pubmatic.com *.rakuten.com rockler.com *.rockler.com *.rubiconproject.com *.searchspring.io *.searchspring.net *.sharethrough.com *.shop.pe shop.pe *.smaato.net *.smartadserver.com *.sonobi.com *.taboola.com *.teads.tv *.turnto.com yastatic.net *.yieldmo.com *.ytimg.com *.zonos.com user-sync.fwmrm.net data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.attn.tv events.attentivemobile.com *.certcapture.com *.cordialdev.com *.cordial.com track.cordial.io *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com utt.impactcdn.com *.disqus.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.googleapis.com https://cdn.searchspring.net *.turnto.com https://checkoutshopper-test.adyen.com *.lightboxcdn.com *.news.rockler.com https://hello.zonos.com cdn.searchspring.net https://widgets.turnto.com we.turnto.com landofcoder.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net addshoppers.s3.amazonaws.com *.bing.com *.blackfire.io *.clarity.ms *.cookiebot.com *.crazyegg.com *.creativecdn.com d2mjzob2nc713b.cloudfront.net *.googlesyndication.com *.gstatic.com *.impactcdn.com *.liadm.com *.mountain.com *.pinimg.com *.pinterest.com *.rockler.com *.searchspring.io *.searchspring.net *.shop.pe shop.pe *.tiktokcdn-us.com *.vimeo.com *.zonos.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com/ *.certcapture.com *.gstatic.com *.googleapis.com *.fontawesome.com assets.braintreegateway.com *.turnto.com cdn.searchspring.net https://widgets.turnto.com *.tagmanager.google.com *.googletagmanager.com *.attn.tv *.bootstrapcdn.com *.crazyegg.com *.lightboxcdn.com *.rockler.com *.searchspring.net *.tiktokcdn-us.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com https://scontent-bom1-2.cdninstagram.com/ *.cdninstagram.com *.googleapis.com *.google.com *.gstatic.com *.mountain.com *.youtube.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.adyen.com payments-eu.amazon.com *.attn.tv events.attentivemobile.com *.certcapture.com *.cordialdev.com *.cordial.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.turnto.com apay-us.amazon.com *.google-analytics.com https://hello.zonos.com https://*.a.searchspring.io https://cdn-ws.turnto.com landofcoder.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.rockler.com 100.20.58.101 18.210.229.244 *.1rx.io 3.212.39.155 34.215.155.61 35.160.46.251 44.212.189.233 44.228.85.26 44.238.122.172 52.22.50.55 52.71.121.170 54.156.2.105 *.adnxs.com *.alicdn.com *.attentivemobile.com *.bing.com *.bing.net *.clarity.ms *.cookiebot.com *.crazyegg.com *.creativecdn.com *.facebook.com *.googleadservices.com *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cd www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sn www.google.so www.google.sr www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu *.googlesyndication.com *.gstatic.com *.gumgum.com *.inmobi.com *.liadm.com *.lightboxcdn.com *.lijit.com *.mountain.com *.nexx360.io *.opera.com *.pinterest.com *.pubmatic.com *.rakuten.com *.rubiconproject.com *.safeopt.com *.searchspring.io *.searchspring.net *.sharethrough.com *.shop.pe shop.pe *.smaato.net *.sonobi.com *.zonos.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri rockler.com *.rockler.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; report-uri https://a5cc4e91-2050-4411-835a-70713844fbf7.sansec.watch/; report-to report-endpoint; 1
default-src 'self' *.devfolio.co data:; script-src 'self' *.devfolio.co 'unsafe-eval' 'unsafe-inline' https://cdn.segment.com/ https://maps.googleapis.com/ https://cdnjs.cloudflare.com/ https://cdn.jsdelivr.net/ https://cdnmd.global-cache.online/ https://static.cloudflareinsights.com/ https://www.youtube.com/ https://checkout.razorpay.com/ https://apis.google.com/ https://gstatic.com/ https://ssl.gstatic.com/ https://player.vimeo.com/ https://connect.facebook.net/ https://google.com/ https://accounts.google.com/gsi/client https://ssl.google-analytics.com/ https://translate.googleapis.com/ https://unpkg.com/ https://www.pagespeed-mod.com/ https://www.google-analytics.com/ https://www.gstatic.com/ http://www.google.com/ *.cloudfront.net/ https://polyfill.io/ https://sessions.bugsnag.com/ https://d2wy8f7a9ursnm.cloudfront.net/v7/bugsnag.min.js https://cdn.tokenproof.xyz/js/tokenproof-oa-widget-v1.0.js https://us-assets.i.posthog.com/ blob:; connect-src 'self' *.devfolio.co https://sessions.bugsnag.com/ https://maps.googleapis.com/ https://api.segment.io/ https://cdn.segment.com/ https://autocomplete.clearbit.com/ wss://*.devfolio.co/ https://lh3.googleusercontent.com/ https://sentry.io/ https://vimeo.com/ wss://*.bridge.walletconnect.org/ https://mainnet.infura.io wss://mainnet.infura.io https://arbitrum-mainnet.infura.io wss://eth-mainnet.ws.alchemyapi.io/ https://eth-mainnet.alchemyapi.io/ https://arb-mainnet.g.alchemy.com/ wss://arb-mainnet.g.alchemy.com/ wss://www.walletlink.org/ https://api.wallet.coinbase.com https://dns.google.com/ https://api.giphy.com/ https://registry.walletconnect.org/ https://api.segment.io/ https://www.google-analytics.com/ https://devfolio-prod.s3.ap-south-1.amazonaws.com/ https://explorer-api.walletconnect.com/ wss://relay.walletconnect.com/ https://sockjs-us2.pusher.com/ https://cloudflare-eth.com/ https://anon-aadhaar-artifacts.s3.eu-central-1.amazonaws.com/ https://us-assets.i.posthog.com/ https://us.i.posthog.com/ https://app.posthog.com/ data:; style-src 'self' https://api.devfolio.co/api/hotfix/css/all.css https://fonts.googleapis.com/ https://translate.googleapis.com/ 'unsafe-inline' data:; img-src 'self' * *.devfolio.co/ data: blob:; frame-src https://www.loom.com/ https://www.youtube.com/ https://drive.google.com/ https://m.youtube.com/ https://www.dailymotion.com/  https://vimeo.com/ https://api.razorpay.com/ https://accounts.google.com/ https://www.google.com/ https://player.vimeo.com/ https://loom.com/ https://www.drive.google.com/ https://razorpay.com/ *.razorpay.com/ https://mozbar.moz.com/; font-src 'self' https://fonts.gstatic.com/ https://devfolio-prod.s3.ap-south-1.amazonaws.com/ https://o91302.ingest.sentry.io/  https://mozbar.moz.com https://cdn.tokenproof.xyz/fonts/ data:; frame-ancestors 'self'; media-src 'self' *.devfolio.co/ *.githubusercontent.com/ https://www.youtube.com/ https://m.youtube.com/ https://youtu.be/ https://youtube.com/ https://drive.google.com/ https://www.drive.google.com/ data: blob:; report-uri https://o91302.ingest.sentry.io/api/1193563/security/?sentry_key=66b59c332abd4ee9902ba11631dc07c6 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *.adingo.jp *.adsrvr.org *.ad-stir.com *.ads-twitter.com *.amanad.adtdp.com *.bidswitch.net *.bing.com *.bootstrapcdn.com *.caprofitx.com *.casalemedia.com *.clarity.ms t.co creativecdn.com id5-sync.com *.contentsquare.com *.contentsquare.net *.creativecdn.com *.criteo.com *.datasign.co *.demdex.net *.doubleclick.net *.eu-1-id5-sync.com *.facebook.com *.facebook.net *.fanp.me *.fanplayr.com *.fontawesome.com sdk.form.run *.fastly.net *.gmossp-sp.jp *.google.co.jp *.google.com *.google-analytics.com *.googleapis.com *.googletagmanager.com cs.gssprt.jp fonts.gstatic.com *.id5-sync.com *.im-apps.net *.imgvc.com *.jp.cinarra.com *.zeals.ai *.jp2.as.criteo.net *.ladsp.com *.ladsp.jp tr.line.me *.line-scdn.net www.login.secomtrust.net *.mazrica.com www2.mouse-jp.co.jp *.openx.net sync.outbrain.com *.promolayer.io *.ptengine.com *.ptengine.jp *.pubmatic.com show.revico.jp *.rubiconproject.com form.run s-cs.send.microad.jp match.sharethrough.com *.slim02.jp *.smartadserver.com *.smartnews-ads.com *.smbc-gp.co.jp *.snva.jp *.socdm.com *.st-hatena.com *.taboola.com *.tiktok.com *.tiktokw.us *.treasuredata.com *.twitter.com rt.udmserve.net *.valuecommerce.com *.valuecommerce.ne.jp *.yahoo.co.jp *.yimg.jp *.youtube.com *.ytimg.com *.prandolisto.com tag.flvcdn.net sp-trk.com ib.adnxs.com placehold.jp *.adobedtm.com *.googleadservices.com *.yjtag.jp; report-to csp-endpoint; 1
default-src 'self'; connect-src *; img-src * data:; script-src 'nonce-g/qGGTYXFJsk2FSAAW/yrhB1bZLFgKRf' 'unsafe-eval' 'strict-dynamic' 'unsafe-inline' 'self' https: http: 'self' cdn.bizible.com; style-src 'self' 'unsafe-inline' https://404-tpa-276.mktoweb.com/ https://*.qualified.com; font-src 'self' kit.fontawesome.com ka-p.fontawesome.com https://fast.wistia.com/ https://fast.wistia.net/ data:; form-action 'self'; object-src 'none'; media-src 'self' blob: mediastream: https://*.qualified.com; frame-src https://www.googletagmanager.com https://td.doubleclick.net/ https://gtm.lawpay.com/ https://gtm.mycase.com/ https://insight.adsrvr.org/ https://app.netlify.com/ https://404-tpa-276.mktoweb.com/ https://*.qualified.com; child-src https://*.qualified.com; frame-ancestors demo.affinipay.com ka-p.fontawesome.com; upgrade-insecure-requests; block-all-mixed-content; report-uri /.netlify/functions/__csp-violations 1
default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://code.jquery.com https://ajax.googleapis.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://www.googletagmanager.com https://analytics.tiktok.com https://www.google-analytics.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.gstatic.com; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: blob: https://jazzcash.com.pk https://www.jazzcash.com.pk https://*.jazzcash.com.pk https://fonts.gstatic.com https://cdnjs.cloudflare.com https://www.google.com https://www.google.com.pk https://www.gstatic.com https://*.tile.openstreetmap.org https://raw.githubusercontent.com https://www.facebook.com https://analytics.tiktok.com https://googleads.g.doubleclick.net; media-src 'self' blob:; connect-src 'self' https://www.google.com https://www.gstatic.com https://*.googleapis.com https://speech.googleapis.com https://www.google-analytics.com https://analytics.google.com https://analytics.tiktok.com https://www.facebook.com https://ad.doubleclick.net https://googleads.g.doubleclick.net wss://www.google.com wss://*.google.com; frame-src 'self' https://www.google.com https://www.gstatic.com https://www.youtube.com https://www.youtube-nocookie.com https://maps.google.com https://www.googletagmanager.com; worker-src 'self' blob:; manifest-src 'self'; 1
default-src  'self' blob: data: 'unsafe-inline' 'unsafe-eval' fonts.gstatic.com embed.geckochat.io fonts.geckoform.com api.geckochat.io app.geckoform.com www.google.com analytics.google.com www.googletagmanager.com *.doubleclick.net *.6sc.co *.6sense.com *.crazyegg.com *.wistia.com *.vimeo.com *.youtube.com youtube.com ytimg.com *.ytimg.com youtube-nocookie.com *.youtube-nocookie.com *.widen.net widencdn.net *.widencdn.net *.jsdelivr.net *.facebook.net facebook.net *.facebook.com *.linkedin.com *.adsymptotic.com *.nr-data.net *.adnxs.com *.fullcircleinsights.com *.lightwidget.com lightwidget.com *.bing.com *.unibuddy.co *.visualwebsiteoptimizer.com app.vwo.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' blob: www.youtube.com www.googletagmanager.com embed.geckochat.io cdn.jsdelivr.net cdn.unibuddy.co *.doubleclick.net *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com; style-src  'unsafe-inline' 'self' fonts.googleapis.com fonts.geckoform.com embed.geckochat.io *.visualwebsiteoptimizer.com cdn.pushcrew.com; img-src  'unsafe-inline' 'unsafe-eval' 'self' data: humbercollege.widen.net www.google.com www.google.ca www.googletagmanager.com widget-assets.geckochat.io *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io cdn.pushcrew.com; font-src 'self' data: fonts.gstatic.com embed.geckochat.io fonts.geckoform.com; 1
default-src https: data: 'self' 'unsafe-inline' 'unsafe-eval'     *.googleapis.com      fonts.gstatic.com      *.fontawesome.com      *.aspnetcdn.com      *.jsdelivr.net      *.googletagmanager.com;     img-src * data: *.wistia.com;     frame-ancestors 'self';     object-src 'none';     form-action 'self' *.hsforms.com *.agencybloc.com *.spinutech.com https://www.facebook.com/tr/;     base-uri 'self';     media-src s3.amazonaws.com blob: *.wistia.com *.wistia.net;     report-uri /csp/; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.bootstrapcdn.com *.yotpo.com *.userway.org mediacdn.espssl.com *.klarnacdn.net *.fontawesome.com *.cloudflare.com *.googleapis.com *.twitter.com nitropack.io *.nitrocdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com widget.nfusionsolutions.com *.klarna.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com *.addthis.com *.trustpilot.com *.twitter.com *.vimeo.com *.doubleclick.net nitropack.io c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googletagmanager.com *.typeform.com *.yotpo.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.taboola.com *.scalebus.com scalebus.com www.facebook.com t.vibe.co verifi.pdscrb.com p.yotpoapi.com i.liadm.com i6.liadm.com connect.facebook.net pixel.tapad.com match.adsrvr.org *.userway.org *.listrakbi.com *.klarna.com *.klarnaevt.com *.klarnacdn.net magefan.com cm.magefan.com *.disqus.com https://img.youtube.com *.cloudflare.com *.google-analytics.com *.twitter.com *.contentsquare.net nitropack.io *.nitrocdn.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com *.yotpo.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.abtasty.com *.scalebus.com scalebus.com *.taboola.com connect.facebook.net blob: *.userway.org *.yotpo.com *.cloudfront.net *.listrakbi.com *.google-analytics.com *.gstatic.com widget.nfusionsolutions.com *.northbeam.io i.govmint.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.cloudflare.com widget.freshworks.com m2epro.freshdesk.com *.klarnaservices.com *.disqus.com *.addthis.com *.googleapis.com *.fontawesome.com googletagmanager.com graph.facebook.com *.moatads.com *.trustpilot.com widgets.pinterest.com *.contentsquare.com *.contentsquare.net cdn.tailwindcss.com cdn.jsdelivr.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com https://cdn-scripts.signifyd.com https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.bootstrapcdn.com *.userway.org *.yotpo.com *.listrakbi.com widget.freshworks.com m2epro.freshdesk.com *.klarnacdn.net *.fontawesome.com *.cloudflare.com *.googleapis.com *.gstatic.com *.twitter.com cdn.tailwindcss.com nitropack.io cdnjs.cloudflare.com *.nitrocdn.com cdn.jsdelivr.net assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.abtasty.com api.experianaperture.io *.scalebus.com scalebus.com *.taboola.com www.facebook.com graph.facebook.com ipv4.pdscrb.com d2pupanw9x802c.cloudfront.net t.lt02.net *.userway.org *.listrakbi.com bam.nr-data.net *.launchdarkly.com dp.signifyd.com *.northbeam.io i.govmint.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net widget.freshworks.com m2epro.freshdesk.com *.klarnaservices.com *.klarna.com *.cloudflare.com *.twitter.com *.contentsquare.net *.google-analytics.com *.nitrocdn.com nitropack.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com *.yotpo.com https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src bam.nr-data.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src woobox.com https://glgefieuo4.execute-api.us-east-2.amazonaws.com/babylock/top-of-the-line-form-submissions player.vimeo.com https://t5nizayt41.execute-api.us-east-2.amazonaws.com/production/bl_validateEmailOnWebForm81ForWebForm84 hcaptcha.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri sewactivate.phc.brother woobox.com paypal.com vimeo.com facebook.com *.vimeocdn.com player.vimeo.com 'self' 'unsafe-inline'; frame-src sewactivate.phc.brother vimeo.com *.vimeocdn.com player.vimeo.com fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com https://www.google.com/recaptcha/ www.googletagmanager.com *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca https://www.googletagmanager.com/ https://*.google.com newassets.hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; media-src *.us-east-1.amazonaws.com *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; style-src *.fontawesome.com *.googletagmanager.com fonts.googleapis.com *.adobe.com https://static.klaviyo.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; img-src *.bing.com *.bttrack.com *.d3k81ch9hvuctc.cloudfront.net *.cookielaw.org *.clarity.ms *.simpli.fi *.doubleclick.net *.cloudflare.com *.amazonaws.com https://bttrack.com/Pixel/Retarget/2864 shareasale.com bttrack.com *.cloudfront.net img.babylock.com *.reddit.com s3.amazonaws.com google.com data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com *.googleapis.com https://*.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca s3.us-east-1.amazonaws.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.google.com https://*.googleapis.com https://*.googleusercontent.com *.hsforms.net *.hsforms.com 'self' data: https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src *.bing.com *.clarity.ms *.bttrack.com *.vibe.co *.loggly.com *.cookielaw.org *.referralcandy.com *.online-metrix.net *.simpli.fi https://bttrack.com/engagement/js shareasale-analytics.com bttrack.com *.execute-api.us-east-2.amazonaws.com *.us-east-1.amazonaws.com https://api-gateway.scriptintel.io/service/visitorintel/visitorTag/277188/script.js *.redditstatic.com https://www.dwin1.com/60357.js *.fullstory.com *.klaviyo.com cdn.cookielaw.org sewactivate.phc.brother woobox.com vimeo.com *.vimeocdn.com player.vimeo.com assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com https://*.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.hsforms.net *.hsforms.com *.gstatic.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; font-src *.klaviyo.com *.fontawesome.com www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com https://www.gstatic.com https://fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; connect-src *.bttrack.com *.cookielaw.org *.clarity.ms *.vibe.co *.loggly.com *.bing.com *.datadome.co bttrack.com *.execute-api.us-east-2.amazonaws.com https://api-gateway.scriptintel.io/service/visitorintel/visitorTag/277188/script.js *.sentry-cdn.com *.prodregistryv2.org *.reddit.com *.fullstory.com *.klaviyo.com cdn.cookielaw.org google.com sewactivate.phc.brother woobox.com https://glgefieuo4.execute-api.us-east-2.amazonaws.com/babylock/top-of-the-line-form-submissions https://t5nizayt41.execute-api.us-east-2.amazonaws.com/production/bl_validateEmailOnWebForm81ForWebForm84 *.googlesyndication.com player.vimeo.com dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com t.elasticsuite.io *.hsforms.net *.hsforms.com https://imgs.signifyd.com 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; object-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; 1
base-uri 'self'; connect-src 'self' https://*.kadaster.nl https://hetkadaster.bbvms.com https://api.mypurecloud.de https://api-cdn.mypurecloud.de https://kadasterbv.containers.piwik.pro https://kadasterbv.piwik.pro https://api.pdok.nl https://service.pdok.nl https://bat.bing.net https://cdn.bluebillywig.com wss://webmessaging.mypurecloud.de/v1; default-src 'self'; font-src 'self' https://kadasterbv.containers.piwik.pro https://*.kadaster.nl; frame-ancestors 'self'; frame-src 'self' https://apps.mypurecloud.de; img-src 'self' data: blob: https://*.kadaster.nl https://hetkadaster.bbvms.com https://stats.bluebillywig.com https://kadasterbv.containers.piwik.pro https://kadasterbv.piwik.pro https://service.pdok.nl https://www.toegankelijkheidsverklaring.nl https://6052693.global.siteimproveanalytics.io; media-src 'self' data: blob: https://*.kadaster.nl https://cdn.bluebillywig.com https://hetkadaster.bbvms.com https://d17w22xdcwd6zx.cloudfront.net/hetkadaster/; report-to report-uri-com; report-uri https://kadasternl.report-uri.com/r/t/csp/reportOnly; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.kadaster.nl https://cdn.bluebillywig.com https://apps.mypurecloud.de https://hetkadaster.bbvms.com https://kadasterbv.piwik.pro/ppms.js https://kadasterbv.containers.piwik.pro https://siteimproveanalytics.com https://bat.bing.com https://www.googleadservices.com; style-src 'self' 'unsafe-inline' https://*.kadaster.nl; 1
default-src 'self'; report-to csp-endpoint; report-uri https://csp.darwinapps.com/api/v1/reports/csp/csp_oSrYzeL6BgHQ1qQrlDzImmMcCqm0km5yDyl9-798ejA; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https://challenges.cloudflare.com https://pagead2.googlesyndication.com https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://challenges.cloudflare.com https://www.google-analytics.com https://region1.google-analytics.com; frame-src 'self' https://challenges.cloudflare.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com; worker-src 'self' blob:; report-uri /csp-report; report-to csp-endpoint 1
default-src 'self' *.nku.edu; base-uri 'self'; connect-src 'self' *.acalog.com *.adtrafficquality.google *.analytics.google.com *.bugherd.com *.bugsnag.com *.clarity.ms *.cloudfront.net *.cookieyes.com *.ctctcdn.com *.dubbot.com *.ebsco.com *.elink.io *.fontawesome.com *.google-analytics.com *.googletagmanager.com *.ivy.ai *.kaltura.com *.libanswers.com *.libapps.com *.mailchimp.com *.nku.edu *.padlet.com*.pusher.com *.qualtrics.com *.technolutions.net *.tockify.com analytics.google.com analytics.tiktok.com cdn-cookieyes.com connect.facebook.net insight.adsrvr.org log.cookieyes.com stats.g.doubleclick.net tr.snapchat.com tr6.snapchat.com wss://*.pusher.com www.clarity.ms www.facebook.com www.google.com; font-src 'self' *.cloudfront.net *.fontawesome.com *.ivy.ai *.nku.edu data: fonts.gstatic.com ka-f.fontawesome.com use.fontawesome.com use.typekit.net; form-action 'self' *.cookieyes.com *.libanswers.com *.list-manage.com *.mailchimp.com *.nku.edu *.qualtrics.com *.technolutions.net; frame-ancestors 'self' *.nku.edu; frame-src 'self' *.acalog.com *.adtrafficquality.google *.bugherd.com *.buzzsprout.com *.candidcareer.com *.collegesource.com *.ebsco.com *.elink.io *.eventbrite.com *.facebook.com *.google.com *.ivy.ai *.kaltura.com *.knightlab.com *.libanswers.com *.libapps.com *.mailchimp.com *.matchinggifts.com *.nku.edu *.padlet.com *.powerbi.com *.qualtrics.com *.spotify.com *.technolutions.net *.tockify.com *.transistor.fm calendar.google.com elink.io *.padlet.com *.syndicatedsearch.goog *.whova.com insight.adsrvr.org maps.google.com player.vimeo.com tockify.com www.google.com www.youtube-nocookie.com www.youtube.com; img-src 'self' *.acalog.com *.adtrafficquality.google *.analytics.google.com *.bing.com *.bugherd.com *.clarity.ms *.cloudfront.net *.ctctcdn.com *.ebsco.com *.fontawesome.com *.google-analytics.com *.google.com *.googleapis.com *.googleusercontent.com *.gstatic.com *.ivy-cdn.com *.ivy.ai *.kaltura.com *.libanswers.com *.libapps.com *.mailchimp.com *.nku.edu *.padlet.com *.qualtrics.com *.technolutions.net *.vimeocdn.com *.youtube.com *.ytimg.com blob: bugherd-attachments.s3.us-west-2.amazonaws.com cdn-cookieyes.com data: *.padlet.net *.whova.com i.ytimg.com tr.snapchat.com tr6.snapchat.com www.facebook.com www.google.com www.googletagmanager.com; manifest-src 'self'; media-src 'self' *.cloudfront.net *.googlevideo.com *.kaltura.com *.nku.edu *.vimeocdn.com *.youtube.com blob: data: player.vimeo.com; object-src 'none'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.acalog.com *.analytics.google.com *.bugherd.com *.clarity.ms *.cloudfront.net *.cookieyes.com *.ctctcdn.com *.dubbot.com *.ebsco.com *.elink.io *.fontawesome.com *.google-analytics.com *.googleapis.com *.gstatic.com *.ivy.ai *.kaltura.com *.libanswers.com *.libapps.com *.mailchimp.com *.nku.edu *.padlet.com *.qualtrics.com *.technolutions.net *.tockify.com analytics.tiktok.com cdn-cookieyes.com cdnapisec.kaltura.com chimpstatic.com connect.facebook.net cse.google.com elink.io googleads.g.doubleclick.net js.adsrvr.org kit.fontawesome.com player.vimeo.com s.ytimg.com sc-static.net static.ctctcdn.com tockify.com tr.snapchat.com unpkg.com use.fontawesome.com www.bugherd.com www.clarity.ms www.dubbot.com www.google.com www.googletagmanager.com www.youtube-nocookie.com www.youtube.com *.cloudflare.com *.jquery.com *.amazonaws.com *.youtube.com; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' *.acalog.com *.adtrafficquality.google *.amazonaws.com *.analytics.google.com *.bugherd.com *.buzzsprout.com *.clarity.ms *.cloudflare.com *.cloudflareinsights.com *.cloudfront.net *.cookieyes.com *.ctctcdn.com *.doubleclick.net *.dubbot.com *.ebsco.com *.ebscohost.com *.elink.io *.eventbrite.com *.flockler.com *.fontawesome.com *.google-analytics.com *.google.com *.googleadservices.com *.googleapis.com *.gstatic.com *.ivy.ai *.jquery.com *.kaltura.com *.libanswers.com *.libapps.com *.mailchimp.com *.nku.edu *.padlet.com *.qualtrics.com *.rawgit.com *.technolutions.net *.tockify.com *.youtube.com analytics.tiktok.com cdn-cookieyes.com cdnapisec.kaltura.com chimpstatic.com connect.facebook.net cse.google.com elink.io googleads.g.doubleclick.net *.whova.com js.adsrvr.org kit.fontawesome.com player.vimeo.com s.ytimg.com sc-static.net static.ctctcdn.com tockify.com tr.snapchat.com unpkg.com use.fontawesome.com www.bugherd.com www.clarity.ms www.dubbot.com www.google.com www.googletagmanager.com www.youtube-nocookie.com www.youtube.com; style-src 'self' 'unsafe-inline' *.mailchimp.com *.cloudfront.net *.fontawesome.com *.ivy.ai *.kaltura.com *.nku.edu *.qualtrics.com *.technolutions.net cdn-cookieyes.com fonts.googleapis.com p.typekit.net unpkg.com use.typekit.net www.google.com; style-src-elem 'self' 'unsafe-inline' *.cloudfront.net *.fontawesome.com *.ivy.ai *.kaltura.com *.mailchimp.com *.nku.edu *.qualtrics.com *.technolutions.net cdn-cookieyes.com fonts.googleapis.com p.typekit.net unpkg.com use.typekit.net www.google.com; worker-src 'self' blob:; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' blob: https://cdn.prod.website-files.com https://www.googletagmanager.com https://widget.intercom.io https://smartpass.referralrock.com https://js.navattic.com https://js.hs-scripts.com https://global.localizecdn.com https://js.intercomcdn.com https://js.refiner.io https://embed.lu.ma https://app.posthog.com https://static.cloudflareinsights.com https://smartpass.instatus.com; style-src 'self' https://cdn.prod.website-files.com https://embed.lu.ma https://fonts.googleapis.com https://rsms.me/inter/ 'unsafe-inline'; font-src 'self' https://rsms.me/inter/font-files/ https://fonts.gstatic.com; img-src 'self' data: https://smartpass.app https://*.smartpass.app https://cdn.prod.website-files.com https://storage.googleapis.com/sp-img-cdn/ https://global.localizecdn.com https://www.googletagmanager.com https://widget.intercom.io https://smartpass.referralrock.com https://js.navattic.com https://js.hs-scripts.com; connect-src 'self' https://smartpass.app wss://smartpass.app https://global.localizecdn.com https://firebaseinstallations.googleapis.com https://fcmregistrations.googleapis.com https://*.ingest.sentry.io https://cdn.prod.website-files.com https://www.googletagmanager.com https://*.intercom.io wss://*.intercom.io https://smartpass.referralrock.com https://js.navattic.com https://js.hs-scripts.com  https://*.refiner.io https://api.instatus.com; frame-src 'self' https://js.refiner.io 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://cdn.cookielaw.org https://tracker.dataiku.com https://js.hsforms.net https://js.hs-scripts.com https://js.hs-analytics.net https://js.hscollectedforms.net https://play.vidyard.com https://dnf20ypvrc856.cloudfront.net https://*.goldcast.io https://www.gartner.com https://snap.licdn.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.cookielaw.org https://www.gartner.com; font-src 'self' data: https://fonts.gstatic.com https://cdn.cookielaw.org; img-src 'self' data: blob: https:; media-src 'self' blob: https:; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://stats.g.doubleclick.net https://cdn.cookielaw.org https://geolocation.onetrust.com https://tracker.dataiku.com https://forms.hsforms.com https://forms.hubspot.com https://api.hubspot.com https://*.hs-analytics.net https://*.hscollectedforms.net https://backend.goldcast.io https://*.goldcast.io https://play.vidyard.com https://*.vidyard.com https://images.ctfassets.net https://videos.ctfassets.net https://px.ads.linkedin.com; frame-src 'self' https://www.googletagmanager.com https://td.doubleclick.net https://*.fls.doubleclick.net https://play.vidyard.com https://player.vimeo.com https://www.youtube.com https://www.youtube-nocookie.com https://open.spotify.com https://podcasts.apple.com https://embed.podcasts.apple.com https://*.goldcast.io https://*.hsforms.net https://*.hsforms.com https://*.hubspot.com https://www.gartner.com https://www.facebook.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://forms.hsforms.com https://*.hsforms.com https://*.hubspot.com https://*.goldcast.io; worker-src 'self' blob:; manifest-src 'self'; report-uri /api/csp-report 1
default-src 'self'; connect-src *; img-src * data:; script-src 'nonce-jbt9Pcr1kVqb/iBGWM2YYuyVxDHOGLxi' 'unsafe-eval' 'strict-dynamic' 'unsafe-inline' 'self' https: http: 'self' cdn.bizible.com; style-src 'self' 'unsafe-inline' https://404-tpa-276.mktoweb.com/ https://*.qualified.com; font-src 'self' kit.fontawesome.com https://ka-p.fontawesome.com/ https://fast.wistia.com/ data:; form-action 'self'; object-src 'none'; media-src 'self' blob: mediastream: https://*.qualified.com; frame-src https://www.googletagmanager.com https://td.doubleclick.net/ https://gtm.casepeer.com/ https://gtm.mycase.com/ https://insight.adsrvr.org/ https://app.netlify.com/ https://404-tpa-276.mktoweb.com/ https://*.qualified.com; child-src https://*.qualified.com; frame-ancestors demo.affinipay.com ka-p.fontawesome.com; upgrade-insecure-requests; block-all-mixed-content; report-uri /.netlify/functions/__csp-violations 1
default-src *; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.tool.lu *.baidu.com *.bdstatic.com; object-src 'none'; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.tool.lu *.baidu.com; img-src 'self' data: *.tool.lu *.href.lu *.baidu.com; media-src 'none'; child-src 'self' *.tool.lu; font-src *.tool.lu *.alicdn.com; connect-src 'self' *.tool.lu *.baidu.com *.alicdn.com; report-uri //a.tool.lu/csp 1
default-src 'self' *.ctfassets.net *.trackjs.com *.demdex.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.googletagmanager.com *.onetrust.com assets.adobedtm.com script.hotjar.com *.googleapis.com; script-src-elem 'self' 'unsafe-inline' *.hotjar.com assets.adobedtm.com *.go-mpulse.net cdn-ukwest.onetrust.com maps.googleapis.com fonts.googleapis.com static.hotjar.com *.googletagmanager.com; script-src-attr 'self' 'unsafe-inline'; style-src 'self' *.googleapis.com; style-src-elem 'self' 'unsafe-inline' cdn.honey.io *.googleapis.com *.googletagmanager.com; style-src-attr 'self' 'unsafe-inline'; img-src 'self' data: mdm-assets.integration.costacoffee.com *.demdex.net *.ctfassets.net *.trackjs.com costalimited.d3.sc.omtrdc.net *.gstatic.com *.onetrust.com cm.everesttech.net *.googleapis.com; font-src 'self' *.gstatic.com; connect-src 'self' web.costa-loyalty-platform.com ws://ws27.hotjar.com *.hotjar.com *.hotjar.io *.onetrust.com *.go-mpulse.net trial-eum-clientnsv4-s.akamaihd.net trial-eum-clienttons-s.akamaihd.net *.akstat.io *.demdex.net costalimited.d3.sc.omtrdc.net costalimited.tt.omtrdc.net *.onetrust.io *.trackjs.com maps.googleapis.com *.techlab-cdn.com login.costa.co.uk *.google-analytics.com wss://ws.hotjar.com; frame-ancestors 'self'; frame-src costalimited.demdex.net *.hotjar.com; report-uri https://costa.report-uri.com/r/t/csp/reportonly; report-to default 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com; 1
default-src 'self'; connect-src 'self' *.engagement.coremedia.cloud *.byside.com wss://*.engagement.coremedia.cloud wss://*.byside.com; script-src 'self' *.engagement.coremedia.cloud 'unsafe-inline'; style-src 'self' *.engagement.coremedia.cloud 'unsafe-inline'; img-src 'self' *.engagement.coremedia.cloud data:; 1
default-src 'self' *.storedgefms.com https://enterprise.storedge.com https://talemonger.auth.storable.io https://cdn.talemonger.auth.storable.io https://portal.storable.io https://esign-service.polaris.storable.io *.payments.storable.io; script-src 'self' blob: 'unsafe-eval' 'unsafe-inline' 'unsafe-hashes' *.google-analytics.com https://ajax.googleapis.com https://cdn.hellosign.com https://code.jquery.com https://cdn.pendo.io https://static.zdassets.com https://edge.fullstory.com https://*.storage.googleapis.com https://data.pendo.io *.pusher.com *.storedgefms.com https://enterprise.storedge.com https://talemonger.auth.storable.io https://cdn.talemonger.auth.storable.io https://portal.storable.io https://esign-service.polaris.storable.io *.payments.storable.io; script-src-elem 'self' blob: *.googletagmanager.com *.cloudflare.com *.google-analytics.com 'unsafe-inline' 'unsafe-hashes' https://ajax.googleapis.com https://code.jquery.com https://cdn.hellosign.com https://cdn.pendo.io https://static.zdassets.com https://edge.fullstory.com https://*.storage.googleapis.com https://data.pendo.io *.pusher.com *.storedgefms.com https://enterprise.storedge.com https://talemonger.auth.storable.io https://cdn.talemonger.auth.storable.io https://portal.storable.io https://esign-service.polaris.storable.io *.payments.storable.io; img-src 'self' data: *.google-analytics.com *.googletagmanager.com https://*.storage.googleapis.com https://data.pendo.io *.storedgefms.com https://enterprise.storedge.com https://talemonger.auth.storable.io https://cdn.talemonger.auth.storable.io https://portal.storable.io https://esign-service.polaris.storable.io *.payments.storable.io; connect-src 'self' *.google-analytics.com wss://ws-ap2.pusher.com *.pusher.com https://app.hellosign.com https://*.zdassets.com wss://ws-mt1.pusher.com https://storedge.zendesk.com https://edge.fullstory.com https://rs.fullstory.com https://data.pendo.io https://*.storedge.com *.storedgefms.com https://enterprise.storedge.com https://talemonger.auth.storable.io https://cdn.talemonger.auth.storable.io https://portal.storable.io https://esign-service.polaris.storable.io *.payments.storable.io; frame-src 'self' https://app.hellosign.com https://esign-signing-ui.polaris.devable.io https://esign-signing-ui.polaris.stageable.io https://esign-signing-ui.polaris.storable.io *.storedgefms.com https://enterprise.storedge.com https://talemonger.auth.storable.io https://cdn.talemonger.auth.storable.io https://portal.storable.io https://esign-service.polaris.storable.io *.payments.storable.io https://astria-porta.access.devable.io/ https://astria-porta.access.stageable.io/ https://astria-porta.access.storable.io/; style-src 'self' 'unsafe-inline' 'unsafe-hashes' fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://data.pendo.io https://*.storage.googleapis.com https://stackpath.bootstrapcdn.com *.storedgefms.com https://enterprise.storedge.com https://talemonger.auth.storable.io https://cdn.talemonger.auth.storable.io https://portal.storable.io https://esign-service.polaris.storable.io *.payments.storable.io; font-src 'self' fonts.gstatic.com; form-action 'self' *.storedgefms.com https://enterprise.storedge.com https://talemonger.auth.storable.io https://cdn.talemonger.auth.storable.io https://portal.storable.io https://esign-service.polaris.storable.io *.payments.storable.io; frame-ancestors 'self' *.storedgefms.com https://enterprise.storedge.com https://talemonger.auth.storable.io https://cdn.talemonger.auth.storable.io https://portal.storable.io https://esign-service.polaris.storable.io *.payments.storable.io; report-uri /csp_report 1
object-src 'none';base-uri 'self';script-src 'nonce-DG-OeBqVj_68GdntHKOB7Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com/ https://www.google-analytics.com https://telegram.org/ https://yandex.ru/ https://*.yandex.ru/ http://*.yandex.ru/ http://*.yandex.com/ https://*.yandex.com/ wss://*.yandex.com/ https://*.yandex.md/ https://*.yandex.net/ https://yastatic.net/ https://*.mail.ru/ https://*.marquiz.ru/ https://cdnjs.cloudflare.com/ https://*.clients-cdnnow.ru/ http://*.websuccess-data.com/ https://*.googletagmanager.com/ wss://mc.yandex.ru/ https://vk.com/ https://*.vk.com/ https://public-api.uxfeedback.ru/ https://*.execute-api.us-east-1.amazonaws.com/ https://unpkg.com/ https://youtube.com/ https://*.youtube.com/ https://youtu.be/ https://vkvideo.ru/ https://*.vkvideon.ru/ https://ibb.org.ru/ https://aichatbot.rdtex.ru:8000/ wss://aichatbot.rdtex.ru:8000/ https://*.bpcontent.cloud/ https://*.botpress.cloud/ https://gc.kis.v2.scr.kaspersky-labs.com/ data:; font-src 'self' https://*.gstatic.com/ data:; report-to rdtex-csp; report-uri https://ct-csp.rdtex.ru/cgi-bin/csp-notify; 1
default-src 'self';base-uri 'self';object-src 'none';frame-ancestors 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.google-analytics.com https://cdn-cookieyes.com https://*.cookieyes.com https://pi.pardot.com https://*.pardot.com https://tags.srv.stackadapt.com https://*.stackadapt.com https://*.rb2b.com https://ddwl4m2hdecbv.cloudfront.net https://fast.wistia.com https://fast.wistia.net https://*.wistia.com https://www.youtube.com https://statuspal.io https://*.statuspal.io https://snap.licdn.com https://*.linkedin.com https://static.hotjar.com https://script.hotjar.com;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;font-src 'self' https://fonts.gstatic.com data: https://*.hotjar.com;img-src 'self' data: https:;connect-src 'self' https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://pi.pardot.com https://*.pardot.com https://ww2.armorpoint.com https://www.armorpoint.com https://tags.srv.stackadapt.com https://*.stackadapt.com https://*.rb2b.com https://*.cookieyes.com https://*.wistia.com https://*.wistia.net https://statuspal.io https://*.statuspal.io https://status.armorpoint.com https://api.armorpoint.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com;frame-src 'self' https://fast.wistia.net https://*.wistia.net https://www.youtube.com https://*.youtube.com https://*.pardot.com https://*.statuspal.io https://vars.hotjar.com;media-src 'self' data: https://*.wistia.com https://*.wistia.net https://*.cloudfront.net;form-action 'self' https://*.pardot.com https://pi.pardot.com https://ww2.armorpoint.com https://www.armorpoint.com;report-uri /api/public/csp-report;report-to csp-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' data: fonts.gstatic.com; img-src 'self' data: https://*.w.org https://secure.gravatar.com; 1
upgrade-insecure-requests; frame-ancestors 'self' https://*.sensibull.com https://kite.zerodha.com; report-uri https://7eae552da389ebb083bedadbd9428ed2.report-uri.com/r/d/csp/reportOnly 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://accounts.google.com https://www.gstatic.com https://ssl.gstatic.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline'; img-src 'self' blob: data: https:; font-src 'self' data:; connect-src 'self' https://*.sarvam.ai https://*.sentry.io https://us.i.posthog.com https://us-assets.i.posthog.com; frame-src 'self' https://accounts.google.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://*.sarvam.ai https://accounts.google.com; object-src 'none' 1
default-src 'self'; script-src 'self' 'nonce-oHLatLg847VWU5LYUfYYqw==' https://www.google-analytics.com https://widget.trustpilot.com http://widget.trustpilot.com https://*.sentry.io https://*.firebase.googleapis.com https://static.zdassets.com https://ai-widget.changenow.com; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self' https://content-api.changenow.io https://widget.trustpilot.com https://changenow.io https://explorer-api.walletconnect.com https://ai-widget.changenow.com; connect-src 'self' https://l.changenow.org https://*.zdassets.com https://www.google-analytics.com https://vip-api.changenow.io https://content-api.changenow.io https://changenow.io https://affiliate-backend.changenow.io https://api.changenow.io https://explorer-api.walletconnect.com https://verify.walletconnect.com https://changenow.zendesk.com https://ai-widget.changenow.com; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; frame-src 'self' https://widget.trustpilot.com http://widget.trustpilot.com https://changenow.io https://youtube.com https://verify.walletconnect.com https://www.youtube.com https://ai-widget.changenow.com; report-uri https://l.changenow.org/api/3/security/?sentry_key=caf1b4c4d55fac9fb827b0fc4c20f664 1
script-src 'self' 'unsafe-eval' assets.sitescdn.net connect.cooper.edu https://cdnjs.cloudflare.com https://www.skynettechnologies.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' answers-embed.cooper.edu.pagescdn.com buttons-config.sharethis.com cdn.unibuddy.co chimpstatic.com mx.technolutions.net traffic-drivers.unibuddy.co www.google-analytics.com www.googletagmanager.com www.youvisit.com www.youtube.com cooper.us10.list-manage.com s3.amazonaws.com t.sharethis.com js-agent.newrelic.com www.skynettechnologies.com assets.sitescdn.net connect.cooper.edu https://cdnjs.cloudflare.com https://www.skynettechnologies.com; style-src 'self' fonts.googleapis.com https://assets.sitescdn.net https://cdnjs.cloudflare.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' cdn-images.mailchimp.com fonts.googleapis.com https://assets.sitescdn.net https://cdnjs.cloudflare.com; frame-ancestors 'self' cooper.edu; report-uri https://cooper.report-uri.com/r/d/csp/wizard 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; media-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; upgrade-insecure-requests; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://managewp.com https://orion.managewp.com https://s42013.pcdn.co https://db0hcalplzljl.cloudfront.net/ https://*.google.com api.w.org https://*.googleapis.com ogp.me https://www.facebook.com *.google-analytics.com api.w.org *.googletagmanager.com tags.tiqcdn.com use.typekit.net s.w.org https://secure.gravatar.com https://connect.facebook.net https://p.typekit.net https://www.googleadservices.com https://fonts.gstatic.com https://www.gstatic.com  https://*.g.doubleclick.net https://player.vimeo.com https://*.youtube.com https://*.youtube-nocookie.com https://*.googlevideo.com https://*.ytimg.com data:;  img-src * data:;  object-src 'none'; 1
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gfiber-static-marketing-jt-team 1
object-src 'none';base-uri 'self';script-src 'nonce-3Bv_dlwVfJAiROkbpVbsvQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.googleapis.com applepay.cdn-apple.com *.fontawesome.com *.oct8ne.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com pay.google.com applepay.cdn-apple.com https://www.googletagmanager.com/ *.oct8ne.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.feedaty.com *.erickson.it http://risorseonline.erickson.it *.salesmanago.com *.doofinder.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com cdn.klarna.com www.gstatic.com pay.google.com applepay.cdn-apple.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.oct8ne.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.googleapis.com *.gstatic.com *.feedaty.com *.iubenda.com *.acsbapp.com *.salesmanago.com *.erickson.it *.zdassets.com *.doofinder.com https://code.gelproximity.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com www.google.com www.gstatic.com pay.google.com applepay.cdn-apple.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.oct8ne.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.feedaty.com *.doofinder.com *.fontawesome.com assets.braintreegateway.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.feedaty.com *.doubleclick.net *.scalapay.com *.erickson.it *.acsbapp.com *.zdassets.com *.iubenda.com *.doofinder.com wss://*.doofinder.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com pay.google.com applepay.cdn-apple.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.oct8ne.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.gstatic.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' http://*.uqtr.uquebec.ca http://*.uqtr.ca data: https: blob:; base-uri 'self' http://*.uqtr.ca; form-action 'self' https: javascript: inline:; report-to csp-endpoint; report-uri https://webservice.uqtr.ca/prod/nginx/csp_api/report 1
default-src 'self'; object-src 'none'; base-uri 'none'; script-src 'nonce-3346ecaca87e83f1ad497d93e6637253' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://at.alicdn.com; img-src 'self' data: https: http: blob:; connect-src 'self' https: wss:; frame-src 'self' https: http:; media-src 'self' data: https: http: blob:; worker-src 'self' blob: 1
default-src 'self' https: 'unsafe-inline' data: 'unsafe-eval'; report-uri https://servix.idnes.cz/log/csp-report.aspx?w=emimino 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://recaptchaenterprise.googleapis.com; frame-src https://www.google.com; object-src 'none'; base-uri 'self'; frame-ancestors 'none' 1
default-src 'self' 'unsafe-inline' https://*.fontawesome.com https://*.googleapis.com https://accounts.google.com https://analytics.google.com https://*.analytics.google.com https://*.sentry.io https://*.google-analytics.com https://*.gstatic.com https://google-analytics.com https://*.leadinfo.net https://*.leadinfo.com https://*.doubleclick.net https://*.hotjar.io https://*.hotjar.com https://*.googletagmanager.com https://unpkg.com https://*.google.com https://*.google.be https://*.google.de https://*.google.fr https://*.google.lu https://*.google.nl https://*.google.pl https://*.google.co.uk ; font-src 'self' 'unsafe-inline' https://*.fontawesome.com https://fonts.gstatic.com data: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/ https://maps.googleapis.com https://accounts.google.com/gsi/ https://*.google-analytics.com https://js.mollie.com https://cdn.leadinfo.net/ ; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/ https://maps.googleapis.com https://accounts.google.com/gsi/ https://*.google-analytics.com https://js.mollie.com https://cdn.leadinfo.net/ ; frame-src 'self' https://*.doubleclick.net/ https://accounts.google.com/ https://*.mollie.com https://*.googletagmanager.com https://*.google.com https://*.google.be https://*.google.de https://*.google.fr https://*.google.lu https://*.google.nl https://*.google.pl https://*.google.co.uk ; img-src 'self' https://*.googletagmanager.com https://*.googleapis.com https://*.gstatic.com https://*.doubleclick.net blob: data: https://tile.openstreetmap.org https://*.tile.openstreetmap.org https://*.google.com https://*.google.be https://*.google.de https://*.google.fr https://*.google.lu https://*.google.nl https://*.google.pl https://*.google.co.uk ;  report-to csp-endpoint; report-uri  https://www.companyweb.be/cspviolation 1
default-src 'none'; base-uri 'self' about:; form-action 'self' https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://*.adyen.com https://pay-staging.canneslions.com https://pay-staging.money2020.com https://yap-staging.ascential.com; object-src 'none'; script-src 'self' 'nonce-0k/VRCk/HYK4Vv0yLQ2aOA==' 'strict-dynamic' 'unsafe-eval'; script-src-elem 'self' 'unsafe-inline' https://*.raygun.io https://transcend-cdn.com https://www.googletagmanager.com https://tagmanager.google.com https://*.cloudfront.net https://*.s3.amazonaws.com https://*.marketo.com https://*.intercom.io https://*.intercomcdn.com https://use.typekit.net https://ajax.googleapis.com https://maps.googleapis.com https://page.money2020.com https://page.ascential.com https://cdn.ingo.me https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://*.adyen.com https://pay.google.com https://*.payments-amazon.com https://*.paypal.com https://*.ratepay.com https://*.cash.app https://cookie-cdn.cookiepro.com https://player.vimeo.com https://*.production.platform-team.com https://static.hotjar.com https://script.hotjar.com https://www.google-analytics.com https://platform.twitter.com https://static.ads-twitter.com https://munchkin.marketo.net https://snap.licdn.com https://extend.vimeocdn.com https://connect.facebook.net https://www.everestjs.net https://*.taboola.com https://bat.bing.com https://*.adsrvr.org https://analytics.tiktok.com https://tags.srv.stackadapt.com https://*.doubleclick.net https://*.googleadservices.com https://*.livechatinc.com; connect-src 'self' https://*.raygun.io https://transcend-cdn.com https://telemetry.transcend.io https://in.hotjar.com https://*.hotjar.com wss://*.hotjar.com https://vc.hotjar.io https://*.hotjar.io https://www.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://tagmanager.google.com https://api.raygun.io https://images.ctfassets.net https://ascentialcdn.filespin.io https://cdn.filespin.io https://videocdn.filespin.io https://horizon-assets.production.platform-team.com https://*.production.platform-team.com https://*.auth0.com https://*.cloudfront.net https://*.s3.amazonaws.com https://*.marketo.com https://*.intercom.io https://cannes-integration.lionsfestivals.com https://dmsproxyapi.lionscreativity.com https://dmsproxyapi-integration.lionsfestivals.com https://dmsproxyapi-uat.lionsfestivals.com https://dmsproxyapi-staging.lionsfestivals.com https://page.money2020.com https://page.ascential.com https://www.linkedin.com https://*.facebook.com https://maps.googleapis.com https://cookie-cdn.cookiepro.com https://geolocation.onetrust.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://*.adyen.com https://pay.google.com https://*.payments-amazon.com https://*.paypal.com https://*.ratepay.com https://*.cash.app https://vimeo.com https://www.google.com https://region1.google-analytics.com https://*.integration.platform-team.com https://*.taboola.com https://px.ads.linkedin.com https://privacyportal.cookiepro.com https://*.mktoresp.com https://bat.bing.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://*.adsrvr.org https://*.srv.stackadapt.com https://0jaku7mk0a.execute-api.eu-west-1.amazonaws.com; img-src 'self' data: blob: https://images.ctfassets.net https://ascentialcdn.filespin.io https://assets-jpeg.imgix.net https://cdn.filespin.io https://portal-assets.imgix.net https://videocdn.filespin.io https://www.google-analytics.com https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://maps.gstatic.com https://horizon-assets.production.platform-team.com https://horizon-mfe-assets.production.platform-team.com https://*.adsrvr.org https://*.everesttech.net https://*.intercomcdn.com https://lions-shared.imgix.net https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://checkoutshopper-test.cdn.adyen.com https://checkoutshopper-live.cdn.adyen.com https://s.gravatar.com https://cdn.auth0.com https://cookie-cdn.cookiepro.com https://*.ascential.com https://*.google.com https://*.google.co.uk https://*.doubleclick.net https://*.googleadservices.com https://*.facebook.com https://bat.bing.com https://*.bing.net https://page.money2020.com https://px.ads.linkedin.com https://*.ads.linkedin.com https://analytics.twitter.com https://t.co https://*.wp.com; style-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://*.cloudfront.net https://*.s3.amazonaws.com 'unsafe-inline' https://horizon-mfe-assets.production.platform-team.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://*.cash.app https://transcend-cdn.com https://page.money2020.com https://page.ascential.com https://*.srv.stackadapt.com; style-src-elem 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://*.cloudfront.net https://*.s3.amazonaws.com 'unsafe-inline' https://horizon-mfe-assets.production.platform-team.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://*.cash.app https://transcend-cdn.com https://page.money2020.com https://page.ascential.com https://*.srv.stackadapt.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com https://*.intercomcdn.com https://*.typekit.net https://cash-f.squarecdn.com; worker-src 'self' blob:; media-src 'self' blob: https://videos.ctfassets.net https://videocdn.filespin.io https://www.google-analytics.com https://*.intercomcdn.com; frame-src 'self' https://app.contentful.com https://www.googletagmanager.com https://vars.hotjar.com https://transcend-cdn.com https://*.auth0.com https://www.youtube.com https://youtube.com https://*.youtube.com https://player.vimeo.com https://vimeo.com https://*.vimeo.com https://*.marketo.com blob: https://page.money2020.com https://page.ascential.com https://www.linkedin.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://pay.google.com https://*.payments-amazon.com https://*.paypal.com https://*.ratepay.com https://*.cash.app https://*.everestjs.net https://*.everesttech.net https://*.adsrvr.org https://*.livechatinc.com; frame-ancestors 'self' https://app.contentful.com; manifest-src 'self' https://*.integration.platform-team.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; 1
object-src 'none'; script-src 'self' https://api.mapbox.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com unpkg.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem * 'unsafe-inline'; style-src 'self' cdnjs.cloudflare.com https://api.mapbox.com https://cdnjs.cloudflare.com https://unpkg.com unpkg.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem * 'unsafe-inline'; frame-ancestors 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com cash-f.squarecdn.com *.googleapis.com data: cdnjs.cloudflare.com js-agent.newrelic.com api.map.baidu.com *.baidu.com *.bdimg.com *.mtcaptcha.com *.bglobale.com *.global-e.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * www.google.com *.bglobale.com *.global-e.com maisongoyard--staging.sandbox.my.salesforce-sites.com maisongoyard.my.salesforce-sites.com *.mtcaptcha.com *.smartpixels.fr *.ls-group.fr c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * *.googleapis.com maps.googleapis.com maps.gstatic.com *.baidu.com *.bdimg.com sdk.privacy-center.org *.mtcaptcha.com *.bglobale.com *.global-e.com *.goyard.com *.smartpixels.fr goyard-marquage-test-we-appservice-webconf.azurewebsites.net *.ls-group.fr sprint-7onpvba-jccxky3s5ebcw.us-a1.magentosite.cloud www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ cdnjs.cloudflare.com bam.nr-data.net mcstaging.goyard.com mcprod.goyard.com goyard.com js-agent.newrelic.com api.map.baidu.com *.baidu.com *.bdimg.com sdk.privacy-center.org *.mtcaptcha.com *.bglobale.com *.global-e.com *.goyard.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app cdnjs.cloudflare.com *.googleapis.com *.baidu.com *.bdimg.com *.mtcaptcha.com *.bglobale.com *.global-e.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.goyard.com *.goyard.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.googleapis.com api.map.baidu.com *.baidu.com *.bdimg.com api.privacy-center.org *.mtcaptcha.com *.goyard.com *.bglobale.com *.global-e.com *.smartpixels.fr *.ls-group.fr api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src maisongoyard--staging.sandbox.my.salesforce-sites.com maisongoyard.my.salesforce-sites.com *.mtcaptcha.com *.goyard.com *.bglobale.com *.global-e.com *.nr-data.net *.smartpixels.fr *.ls-group.fr 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; frame-ancestors 'none'; base-uri 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.mercdn.net https://www.google.com https://*.adtrafficquality.google https://*.g.doubleclick.net https://analytics.tiktok.com https://b99.yahoo.co.jp https://bat.bing.com https://*.smartnews-ads.com https://connect.facebook.net https://ct.pinterest.com https://d.line-scdn.net https://dmp.im-apps.net https://dynamic.criteo.com https://h.accesstrade.net https://s.pinimg.com https://s.yimg.jp https://*.criteo.com https://static.ads-twitter.com https://statics.a8.net https://*.blob.core.windows.net https://trj.valuecommerce.com https://*.google-analytics.com https://apps.rokt.com https://apps.rokt-api.com https://apps.roktecommerce.com https://sourcemaps-wsdk.roktinternal.com https://*.forter.com; worker-src blob:; style-src 'self' 'unsafe-inline' https://*.mercdn.net https://fonts.googleapis.com; font-src https://fonts.gstatic.com; 1
default-src 'none'; report-uri /next-external/log/csp/violations; report-to csp-violations; connect-src 'self' wss://www.nordnet.fi https://www.googletagmanager.com https://analytics.nordnet.fi https://cdn.prod.nntech.io https://files.nordnet.fi https://api.prod.nntech.io https://experimentation.public.prod.nntech.io https://www.google.com https://storage.googleapis.com https://www.recaptcha.net https://relay.prod.nntech.io; font-src 'self' https://cdn.prod.nntech.io https://files.nordnet.fi; frame-src 'self' https://analytics.nordnet.fi https://10961666.fls.doubleclick.net https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://w.soundcloud.com https://embed.acast.com https://link.tink.com https://www.tv2.no https://checkout.trustly.com https://www.recaptcha.net https://www.google.com https://t.email.nordnet.fi https://dashboard.fundrella.com; img-src 'self' https://www.googletagmanager.com https://analytics.nordnet.fi https://cdn.prod.nntech.io https://files.nordnet.fi https://api.prod.nntech.io data: blob: https://cdn.tink.se https://images.ctfassets.net https://i.vimeocdn.com https://img.youtube.com https://i.scdn.co https://www.recaptcha.net; manifest-src 'self'; media-src https://cdn.prod.nntech.io https://files.nordnet.fi https://videos.ctfassets.net; object-src 'self'; script-src 'self' 'nonce-ea23ef1b-c95b-405d-9260-8aed18427f32' https://analytics.nordnet.fi https://cdn.prod.nntech.io https://files.nordnet.fi https://www.recaptcha.net https://www.google.com; script-src-attr 'none'; style-src 'unsafe-inline' 'self' https://cdn.prod.nntech.io https://files.nordnet.fi; worker-src 'none'; base-uri 'none'; form-action 'self' https://pvu.nets.no https://pvu.avtalegiro.no https://online.alandsbanken.fi https://verkkopankki.danskebank.fi https://verkkomaksu.handelsbanken.fi https://epmt.nordea.fi https://identify.nordea.com https://verkkomaksu.poppankki.fi https://verkkomaksu.saastopankki.fi https://online.s-pankki.fi https://auth.aktia.fi https://kirjaudu.aktia.fi https://ebank.aktia.fi; frame-ancestors 'self' https://app.contentful.com; 1
default-src https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.amazongamestudios.com https://*.amazongames.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://chat.amazon.eu https://chat.amazon.co.jp https://sentry.amazongames.com https://d13pe3bn1jpqwf.cloudfront.net; script-src 'nonce-17a4dbca52d54ad78890db28f35e6a4d'  https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.amazongamestudios.com https://*.amazongames.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://chat.amazon.eu https://chat.amazon.co.jp https://sentry.amazongames.com https://d13pe3bn1jpqwf.cloudfront.net; style-src 'self' 'nonce-17a4dbca52d54ad78890db28f35e6a4d'  https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.amazongamestudios.com https://*.amazongames.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://chat.amazon.eu https://chat.amazon.co.jp https://sentry.amazongames.com https://d13pe3bn1jpqwf.cloudfront.net; img-src 'self' data:  https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.amazongamestudios.com https://*.amazongames.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://chat.amazon.eu https://chat.amazon.co.jp https://sentry.amazongames.com https://d13pe3bn1jpqwf.cloudfront.net https://*.twimg.com https://player.twitch.tv/ https://*.ytimg.com; media-src 'self' data:  https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.amazongamestudios.com https://*.amazongames.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://chat.amazon.eu https://chat.amazon.co.jp https://sentry.amazongames.com https://d13pe3bn1jpqwf.cloudfront.net https://*.twimg.com https://player.twitch.tv/ https://www.youtube.com https://youtube.com https://*.googlevideo.com; frame-src https://www.youtube.com https://youtube.com https://*.googlevideo.com https://*.twimg.com https://player.twitch.tv/  https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.amazongamestudios.com https://*.amazongames.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://chat.amazon.eu https://chat.amazon.co.jp https://sentry.amazongames.com https://d13pe3bn1jpqwf.cloudfront.net; report-uri https://www.amazon.com/1/batch/2/OE/mid=ATVPDKIKX0DER:sid=137-7018664-5224333:rid=C06864C387614058ACA4:sn=www.amazongamestudios.com 1
object-src 'none'; script-src 'self' *.brandinsight.tech *.bing.com *.taboola.com *.geocomply.com *.kameleoon.io *.ads-twitter.com *.jsdelivr.net *.kwai.net *.clarity.ms *.greencolumnart.com *.adalyser.com *.performgroup.com *.scoutgg.net *.pa4r.com res-odx.op-mobile.opera.com *.bannerflow.net *.facebook.com *.cloudfront.net *.maze.co *.betano.co *.datadome.co *.betano.bg *.sportal365.com d32tdr35c4icxo.cloudfront.net *.app.delivery *.betano.com *.betgenius.com *.cloudflare.com *.cloudflareinsights.com *.cookielaw.org *.creativecdn.com *.facebook.net *.fullstory.com *.gmlinteractive.com *.google-analytics.com *.googletagmanager.com *.kaizengaming.com *.kameleoon.eu *.lgrckt-in.com *.optimove.net *.sportradar.com *.sportradarserving.com *.tostarsbuilding.com *.adform.net *.logr-in.com; worker-src 'self' blob:; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=OHFDI88HygzTc5oGiw0HV37AiDlh50E7GcVxUzDYbVo-1789272675.8301816-1.0.1.1-.uKJiUWU0.4LYrWUrB7DWcMO59hZKKl.XAsEeLGpl4wXWfIjoL.680kw7VlImYsdS4xzPl7cnwSNdB2Nb1n_YHKdFnhS9HYWay3CYafPEfiZQI7DKPCGDYj38A2_SssEvPKd4v992KGKh_CuiQD2fAASta3SbiiIgKjY2QPTKyumNKPhix1GWIMazTprhg_R; report-to cf-zqszqbwmxzfauifo 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://beacon-v2.helpscout.net https://cdnjs.cloudflare.com https://cdn.firstpromoter.com https://fast.bentonow.com https://js.stripe.com https://widget.docsbot.ai; script-src-elem 'self' 'unsafe-inline' https://beacon-v2.helpscout.net https://cdnjs.cloudflare.com https://cdn.firstpromoter.com https://fast.bentonow.com https://js.stripe.com https://widget.docsbot.ai; script-src-attr 'none'; worker-src 'self' blob: https://cdnjs.cloudflare.com; child-src 'self' blob:; connect-src 'self' https://api.docsbot.ai wss://api.docsbot.ai https://cdn.docsbot.ai https://docsbot.ai https://*.bentonow.com https://*.firebaseio.com wss://*.firebaseio.com https://*.googleapis.com https://*.helpscout.net wss://*.helpscout.net https://*.posthog.com https://api.stripe.com https://eu.i.posthog.com https://firebasestorage.googleapis.com https://r.stripe.com https://securetoken.googleapis.com https://widget.docsbot.ai; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; media-src 'self' data: blob: https:; frame-src 'self' https://checkout.stripe.com https://hooks.stripe.com https://js.stripe.com https://www.youtube.com https://www.youtube-nocookie.com; form-action 'self' https://checkout.stripe.com 1
default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; report-uri /CspReport/Report 1
default-src 'self'; connect-src *; img-src * data:; script-src 'nonce-4nHR3oHRQkSAxztEFJHzfj7QUHZ0yoto' 'unsafe-eval' 'strict-dynamic' 'unsafe-inline' 'self' https: http: 'self' cdn.bizible.com; style-src 'self' 'unsafe-inline' https://404-tpa-276.mktoweb.com/ https://*.qualified.com; font-src 'self' kit.fontawesome.com https://ka-p.fontawesome.com/ https://fast.wistia.com/ data:; form-action 'self'; object-src 'none'; media-src 'self' blob: mediastream: https://*.qualified.com; frame-src https://www.googletagmanager.com https://td.doubleclick.net/ https://gtm.docketwise.com/ https://www.youtube.com/ https://insight.adsrvr.org/ https://app.netlify.com/ https://404-tpa-276.mktoweb.com/ https://*.qualified.com; child-src https://*.qualified.com; frame-ancestors demo.affinipay.com ka-p.fontawesome.com; upgrade-insecure-requests; block-all-mixed-content; report-uri /.netlify/functions/__csp-violations 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net cash-f.squarecdn.com https://client.crisp.chat https://plugin-magento-ui.glopalservice.com *.fontawesome.com https://fonts.bunny.net *.cloudflare.com fonts.gstatic.com/ maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://applepay.cdn-apple.com applepay.cdn-apple.com www.promessedefleurs.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com p.monetico-services.com www.promessedefleurs.com 'self' 'unsafe-inline'; frame-ancestors www.promessedefleurs.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ * ct.pinterest.com *.payplug.com *.dalenys.com https://applepay.cdn-apple.com api-qa.payplug.com secure-qa.payplug.com www.promessedefleurs.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io * https://images.unsplash.com https://image.crisp.chat *.google.com *.google.fr *.google.ie *.jardindupicvert.com *.jardindupicvert.com.localhost *.promessedefleurs.com *.promessedefleurs.com.localhost cl.avis-verifies.com ct.pinterest.com bat.bing.com www.google.com.vn https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com https://firebasestorage.googleapis.com https://secure-magenta.dalenys.com bzr.openai.com https://redchamps.com *.openstreetmap.fr *.openstreetmap.org unpkg.com www.promessedefleurs.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://maps.googleapis.com https://player.vimeo.com https://client.crisp.chat *.google.com *.google.fr *.google.ie *.googletagmanager.com *.googleadservices.com cl.avis-verifies.com bat.bing.com s.pinimg.com https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com cdn-renderer.glopalstore.com *.avada.io *.shopify.com https://cdnjs.cloudflare.com https://secure-magenta.dalenys.com https://applepay.cdn-apple.com api-qa.payplug.com cdn.payplug.com https://cdn.payplug.com cdn-qa.payplug.com https://cdn-qa.payplug.com *.clarity.ms bzrcdn.openai.com https://unpkg.com/pwacompat www.promessedefleurs.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app https://client.crisp.chat https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://secure-magenta.dalenys.com unpkg.com www.promessedefleurs.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.promessedefleurs.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io * https://maps.googleapis.com https://player.vimeo.com https://client.crisp.chat wss://client.relay.crisp.chat https://plugins.crisp.chat *.doubleclick.net *.jardindupicvert.com *.jardindupicvert.com.localhost *.promessedefleurs.com *.promessedefleurs.com.localhost ct.pinterest.com https://api-plugin-facade.glopalservice.com https://cognito-idp.eu-west-1.amazonaws.com api.glopaltranslator.com https://get.geojs.io *.avada.io *.clarity.ms c.bing.com bzr.openai.com bzrcdn.openai.com *.openstreetmap.org *.arcgis.com www.promessedefleurs.com 'self' 'unsafe-inline'; child-src www.promessedefleurs.com http: https: blob: 'self' 'unsafe-inline'; default-src cl.avis-verifies.com www.promessedefleurs.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' blob: https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; upgrade-insecure-requests 1
base-uri 'self';connect-src 'self' https: wss:;default-src 'none';font-src 'self' data: https:;form-action 'self' https:;frame-ancestors https:;frame-src https: blob:;img-src 'self' blob: data: https: http:;manifest-src 'none';media-src 'self' https: blob:;object-src 'self' https://djtflbt20bdde.cloudfront.net;script-src 'self' 'unsafe-inline' 'unsafe-eval' https:;worker-src 'self' https://zenkit.com https://*.zenkit.com;report-uri /csp-report;script-src-attr 'none';style-src 'self' https: 'unsafe-inline' 1
default-src 'self' www.google-analytics.com www.youtube.com cdn.cookielaw.org *.onetrust.com *.gstatic.com *.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com cdn.jsdelivr.net cdn.cookielaw.org img03.en25.com *.youtube.com *.google.com *.gstatic.com *.google-analytics.com embed.vev.page *.vev.design *.googleapis.com discover.hdrinc.com *.cloudflare.com unpkg.com; style-src 'self' 'unsafe-inline' cloud.typography.com cdn.jsdelivr.net *.googleapis.com www.hdrinc.com unpkg.com *.cloudflare.com; img-src 'self' data: *; media-src film.vev.design cdn.vev.design; frame-src 'self' *.google.com *.youtube.com *.vimeo.com discover.hdrinc.com *.doubleclick.net player.blubrry.com e.issuu.com caupneif01 *.youtube-nocookie.com *.googletagmanager.com *.cloudflare.com; child-src 'self' *.google.com *.youtube.com; font-src 'self' data: cloud.typography.com cdn.vev.design *.gstatic.com www.hdrinc.com cdn.scite.ai use.typekit.net fonts.vev.design; connect-src 'self' *.googleapis.com *.google-analytics.com *.cookielaw.org *.onetrust.com analytics.google.com *.doubleclick.net region1.analytics.google.com *.google.com *.gstatic.com; report-uri /report-csp-violation; upgrade-insecure-requests 1
default-src 'self' *.h24.ua h24.ua *.iit.com.ua *.cloudflare.com; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.gstatic.com *.googleapis.com *.h24.ua; img-src 'self' data: blob: h24.ua *.h24.ua *.google.com *.google.com.ua *.google-analytics.com *.googletagmanager.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.gstatic.com googleads.g.doubleclick.net www.googleadservices.com https://*.clarity.ms https://c.bing.com https://www.facebook.com https://*.facebook.com; font-src 'self' data: fonts.gstatic.com *.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cloudflare.com static.cloudflareinsights.com www.googletagmanager.com *.google-analytics.com *.facebook.net maps.googleapis.com googleads.g.doubleclick.net www.clarity.ms scripts.clarity.ms script.crazyegg.com meet.jit.si *.jit.si telegram.org *.telegram.org; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' *.cloudflare.com static.cloudflareinsights.com www.googletagmanager.com *.google-analytics.com *.facebook.net maps.googleapis.com googleads.g.doubleclick.net www.clarity.ms scripts.clarity.ms script.crazyegg.com meet.jit.si *.jit.si telegram.org *.telegram.org; connect-src 'self' https://*.google.com https://*.h24.ua https://h24.ua https://*.google-analytics.com https://*.google.com.ua https://*.facebook.net https://*.facebook.com https://www.facebook.com https://*.googleapis.com https://*.gstatic.com https://www.googletagmanager.com https://challenges.cloudflare.com https://maps.googleapis.com https://static.cloudflareinsights.com https://cloudflareinsights.com https://*.cloudflareinsights.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.googleadservices.com https://meet.jit.si https://*.jit.si https://telegram.org https://*.telegram.org https://mpc2-prod-29-is5qnl632q-uc.a.run.app https://demo-1.conversionsapigateway.com https://*.clarity.ms wss://*.h24.ua wss://meet.jit.si wss://*.jit.si; frame-src 'self' www.googletagmanager.com eu.iit.com.ua *.iit.com.ua *.google.com *.google.com.ua *.h24.ua meet.jit.si *.jit.si id.gov.ua *.id.gov.ua; media-src 'self' blob: meet.jit.si *.jit.si; worker-src 'self' blob:; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' https:; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; media-src 'self' data: blob: https:; connect-src 'self' https: wss:; frame-src 'self' blob: https:; worker-src 'self' blob: https://unpkg.com; child-src 'self' blob: https:; manifest-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com; frame-ancestors 'self'; upgrade-insecure-requests; report-uri /api/security/csp-report; report-to csp-endpoint 1
default-src 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' https://cdn.cookielaw.org https://*.scarabresearch.com https://cdn.usefathom.com https://*.userway.org https://cdn.veritonic.com https://cdnjs.cloudflare.com https://compass.halfspace.co.uk https://*.facebook.net https://*.freshworks.com https://*.doubleclick.net https://imagesrv.adition.com https://js.stripe.com https://*.licdn.com https://*.ads-twitter.com https://*.contentsquare.net https://www.details-enterprise-7.com https://*.google.com https://*.googletagmanager.com https://www.google-analytics.com https://tag.demandbase.com https://*.usbrowserspeed.com https://*.gstatic.com https://cdn.matomo.cloud; style-src 'unsafe-inline' 'self' https://*.userway.org; object-src 'none'; base-uri 'self'; connect-src 'self' https://*.doubleclick.net https://*.avfcservices.co.uk https://*.userway.org https://av-halfspacegroup.matomo.cloud https://*.contentsquare.net https://cdn.cookielaw.org https://cdn.usefathom.com https://*.mux.com https://*.on.aws https://*.litix.io https://ip.veritonicmetrics.com https://*.linkedin.com https://*.scarabresearch.com https://*.google.com https://*.google.co.uk; font-src 'self' data: https://*.userway.org; frame-src 'self' https://*.google.com https://*.userway.org https://js.stripe.com https://*.facebook.com; img-src 'self' https://*.linkedin.com https://*.twitter.com https://cdn.cookielaw.org https://cdn.usefathom.com https://*.userway.org https://compass.halfspace.co.uk https://*.mux.com https://*.avfcservices.co.uk https://t.co https://*.facebook.com https://*.google.co.uk https://*.google.com; manifest-src 'self'; media-src 'self'; 1
font-src *.gstatic.com data: fonts.googleapis.com fonts.gstatic.com *.fontawesome.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.gstatic.com *.googleapis.com maps.googleapis.com maps.gstatic.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com *.avada.io *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com https://get.geojs.io *.avada.io *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' https://js.stripe.com https://client.crisp.chat https://*.crisp.chat; style-src 'self' 'unsafe-inline' https://api.mapbox.com https://*.crisp.chat; img-src 'self' data: blob: https://lh3.googleusercontent.com https://pbs.twimg.com https://images.unsplash.com https://logos-world.net https://cdn.jsdelivr.net https://d1aebdcemlt4l7.cloudfront.net https://*.mapbox.com https://*.crisp.chat; font-src 'self' data: https://*.crisp.chat; connect-src 'self' https://datafa.st https://*.datafa.st https://api.mapbox.com https://events.mapbox.com https://*.mapbox.com https://*.crisp.chat wss://*.crisp.chat https://vitals.vercel-insights.com; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://*.crisp.chat; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; media-src 'self' blob: https:; worker-src 'self' blob:; child-src 'self' blob: https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; manifest-src 'self'; upgrade-insecure-requests; 1
font-src fonts.gstatic.com use.typekit.net *.googleapis.com fonts.googleapis.com https://fonts.gstatic.com *.fontawesome.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: static.curations.bazaarvoice.com maxcdn.bootstrapcdn.com *.hotjar.com x.klarnacdn.net *.yotpo.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com api.bazaarvoice.com stg.api.bazaarvoice.com www.facebook.com *.wahooligan.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googletagmanager.com *.affirm.com *.affirm.ca *.certcapture.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com https://www.googletagmanager.com/ *.refersion.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com wahoofitness.pxf.io insight.adsrvr.org match.adsrvr.org www.affirm.com sandbox.affirm.com *.attn.tv bugcrowd.com imgs.cdn-btsg.com *.cloudfront.net consentag.eu track.cordial.io gum.criteo.com bid.g.doubleclick.net *.fls.doubleclick.net td.doubleclick.net www.facebook.com script.google.com *.googleapis.com *.hotjar.com *.iterable.com *.klarnaservices.com *.online-metrix.net privacyportal-cdn.onetrust.com imgs.signifyd.com js.stripe.com *.vimeo.com vimeo.com *.wahooligan.com record.webeyez.com d.emails.wahoofitness.com wahoofitness.yonyx.com *.yotpo.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com p.typekit.net *.googleapis.com *.gstatic.com maps.googleapis.com maps.gstatic.com *.affirm.com *.affirm.ca *.certcapture.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com https://helloextend-static-assets.s3.amazonaws.com https://extendcoreoffersdemo-offersthemelogobucketeb21afa-19jnurg0a0o17.s3.amazonaws.com https://s3.amazonaws.com https://extendcoreoffersprod-offersthemelogobucketeb21afa-1lr7le13dvgtp.s3.amazonaws.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.googletagmanager.com wahoofitness.pxf.io *.adnxs.com public.adobecc.com data.adxcel-ec2.com insight.adsrvr.org match.adsrvr.org *.amazonaws.com *.atdmt.com *.bing.com *.bazaarvoice.com imgs.cdn-btsg.com *.clarity.ms cdn.cookielaw.org dis.criteo.com gum.criteo.com *.ctnsnet.com ad.doubleclick.net cm.g.doubleclick.net stats.g.doubleclick.net www.facebook.com *.google.com *.googletagmanager.com *.hotjar.com humango.ai *.iterable.com kcc0.com www.kinomap.com *.klarnaevt.com *.klarnaservices.com *.klarnauserservices.com *.ktxlytics.io www.lightboxcdn.com simage2.pubmatic.com alb.reddit.com *.rudderstack.com imgs.signifyd.com image.simplecastcdn.com t.co tk0x1.com *.wahoofitness.com *.xg4ken.com ads.yahoo.com *.analytics.yahoo.com *.yotpo.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com *.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googletagmanager.com www.gstatic.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.affirm.com *.affirm.ca *.certcapture.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com https://*.helloextend.com utt.impactcdn.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io *.refersion.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com unsafe-inline *.adnxs.com js.adsrvr.org cdn.jsdelivr.net lightboxapi.azurewebsites.net cdn.attn.tv bam-cell.nr-data.net *.bazaarvoice.com bat.bing.com bugcrowd.com assets.bugcrowdusercontent.com imgs.cdn-btsg.com *.clarity.ms static.curations.bazaarvoice.com consentag.eu cdn.cookielaw.org track.cordial.io script.crazyegg.com static.criteo.net sslwidget.criteo.com *.ctnsnet.com connect.facebook.net *.fontawesome.com *.getroster.com *.google.com googleads.g.doubleclick.net *.hotjar.com *.iterable.com *.ktxlytics.io www.lightboxcdn.com cdn.livesession.io i.loopme.me js-agent.newrelic.com bam.nr-data.net code.jquery.com eu-library.klarnaservices.com eu-library.playground.klarnaservices.com oc-library.klarnaservices.com oc-library.playground.klarnaservices.com x.klarnacdn.net geolocation.onetrust.com h64.online-metrix.net cdn.optimizely.com www.redditstatic.com www.refersion.com assets.reflow.tv *.rudderlabs.com *.rudderstack.com cdn.segment.com imgs.signifyd.com *.stackadapt.com js.stripe.com static.ads-twitter.com analytics.twitter.com modelviewer.dev d.emails.wahoofitness.com forms.wahoofitness.com record.webeyez.com sec.webeyez.com *.xg4ken.com *.yotpo.com www.youtube.com https://cdn-scripts.signifyd.com https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com display.ugc.bazaarvoice.com https://fonts.googleapis.com *.fontawesome.com static.curations.bazaarvoice.com maxcdn.bootstrapcdn.com cdn.cookielaw.org *.hotjar.com www.lightboxcdn.com x.klarnacdn.net *.stackadapt.com forms.wahoofitness.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.bazaarvoice.com data: mpsnare.iesnare.com www.wahoofitness.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.adobe.io performance.typekit.net *.sentry.io geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.googleapis.com *.affirm.com *.affirm.ca *.certcapture.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com https://*.helloextend.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.refersion.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com wahoofitness.pxf.io *.attentivemobile.com *.attn.tv bam-cell.nr-data.net *.bing.com imgs.cdn-btsg.com *.clarity.ms cdn.cookielaw.org track.cordial.io script.crazyegg.com i.ctnsnet.com stats.g.doubleclick.net ad.doubleclick.net www.facebook.com *.getroster.com analytics.google.com *.analytics.google.com *.hotjar.com *.hotjar.io mpsnare.iesnare.com *.iterable.com wss: gdpr.loopme.com i.loopme.me *.klarnaservices.com *.klarnauserservices.com *.ktxlytics.io rs.livesession.io bam.nr-data.net *.onetrust.com insight.reflow.tv *.rollbar.com *.rudderlabs.com *.rudderstack.com api.segment.io cdn.segment.com imgs.signifyd.com bt.signifyd.com bt.signifyd.com:1103 bt.signifyd.com:11103 d.emails.wahoofitness.com vimeo.com record.webeyez.com send.webeyez.com *.xg4ken.com *.yotpo.com https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.wahoofitness.com/nullreport/report/nullendpoint; report-to report-endpoint; 1
default-src 'self' 'unsafe-inline' *.gardners.com;         script-src 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline' *.gardners.com/ js.braintreegateway.com/ *.cardinalcommerce.com/ *.gardners.com/scripts/jquery-3.7.1.min.js *.google-analytics.com/ www.googletagmanager.com/ api.os.uk api.whichosmap.co.uk/ code.jquery.com/* maps-api-ssl.google.com/ songbird.cardinalcommerce.com/ whichosmap.co.uk/ www.gstatic.com/ rum-static.pingdom.net/ kg668dbov0.execute-api.us-east-1.amazonaws.com/ *.cardinaltrusted.com/ code.jquery.com/jquery-migrate-3.5.2.min.js *.csidetm.com s3.amazonaws.com/downloads.mailchimp.com/js/ c.paypal.com/;  style-src 'report-sample' 'self' 'unsafe-inline' *.gardners.com *.braintreegateway.com *.cardinalcommerce.com *.googleapis.com api.os.uk api.whichosmap.co.uk assets.braintreegateway.com stackpath.bootstrapcdn.com whichosmap.co.uk cdn-images.mailchimp.com;  object-src 'none';  base-uri 'self';  connect-src 'self' 'unsafe-eval' 'unsafe-inline' data: *.gardners.com *.braintree-api.com *.braintreegateway.com *.cardinalcommerce.com www.googletagmanager.com *.google-analytics.com api.braintreegateway.com api2.smartrecruitonline.com client-analytics.braintreegateway.com maps.googleapis.com translate.googleapis.com *.cardinaltrusted.com rum-collector-2.pingdom.net www.paypal.com www.paypalobjects.com pay.google.com https://pay.google.com https://pay.google.com/about/redirect/ https://google.com/pay api.whichosmap.co.uk kg668dbov0.execute-api.us-east-1.amazonaws.com *.csidetm.com;  font-src 'report-sample' 'self' 'unsafe-inline' data: *.braintreegateway.com *.cardinalcommerce.com *.googleapis.com api.os.uk api.whichosmap.co.uk fonts.gstatic.com stackpath.bootstrapcdn.com *.paypal.com cdn.jsdelivr.net fonts.cdnfonts.com;  frame-src 'report-sample' 'self' *.cardinalcommerce.com www.rsa3dsauth.co.uk *.arcot.com channel-cards-html.lloydsbankinggroup.com verify.monzo.com 3dsecure.starlingbank.com acs.revolut.com acs-challenge.apata.io *.paypal.com api.whichosmap.co.uk assets.braintreegateway.com whichosmap.co.uk www.googletagmanager.com www.youtube.com;  img-src 'report-sample' 'self' blob: data: https: *.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.paypal.com *.youtube.com/ api.os.uk api.whichosmap.co.uk assets.braintreegateway.com jackets.dmmserver.com maps-api-ssl.google.com maps.gstatic.com www.googletagmanager.com;  manifest-src 'self';  media-src 'self';  worker-src 'self' *.csidetm.com;  report-uri https://67917890e3f085153460661d.endpoint.csper.io?v=13; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://maps.googleapis.com https://s3-eu-west-1.amazonaws.com https://unpkg.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com https://*.recaptcha.net https://*.google.com https://*.doubleclick.net https://*.googleusercontent.com https://*.youtube.com https://*.facebook.net https://*.hotjar.com https://*.inteliwise.com https://bat.bing.com https://pixel.wp.pl https://*.clarity.ms https://analytics.tiktok.com https://static.ads-twitter.com https://www.googleadservices.com https://microsoft.com https://perfo.salestube.pl https://*.przelewy24.pl https://browser-update.org https://cdn.evgnet.com https://cdn.evergage.com https://tenantpluginapiserver1.eloacc.warta.pl https://public-api-sessionserver1.eloacc.warta.pl https://*.startquestion.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://s3-eu-west-1.amazonaws.com https://*.hotjar.com https://*.inteliwise.com https://maxcdn.bootstrapcdn.com https://www.googletagmanager.com https://www.gstatic.com https://tenantpluginapiserver1.eloacc.warta.pl https://public-api-sessionserver1.eloacc.warta.pl https://*.startquestion.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; connect-src 'self' https://inteliwise-eu.s3.amazonaws.com https://maps.googleapis.com https://s3-eu-west-1.amazonaws.com https://stats.g.doubleclick.net https://www.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://www.google.com https://www.recaptcha.net https://*.hotjar.com https://*.inteliwise.com https://pixel.wp.pl https://*.evergage.com https://*.evgnet.com https://rail-publisher.app.inteliwi.se https://ad.doubleclick.net https://*.clarity.ms wss://ws.hotjar.com https://content.hotjar.io https://metrics.hotjar.io https://www.facebook.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://bat.bing.com https://unpkg.com https://vc.hotjar.io https://googleads.g.doubleclick.net https://www.googleadservices.com https://microsoft.com https://perfo.salestube.pl https://*.przelewy24.pl https://tenantpluginapiserver1.eloacc.warta.pl https://public-api-sessionserver1.eloacc.warta.pl https://*.startquestion.com; font-src 'self' data: https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://tenantpluginapiserver1.eloacc.warta.pl https://public-api-sessionserver1.eloacc.warta.pl; frame-src 'self' https://10798259.fls.doubleclick.net https://9049979.fls.doubleclick.net https://s3-eu-west-1.amazonaws.com https://www.recaptcha.net https://*.google.com https://*.hotjar.com https://*.inteliwise.com https://www.googletagmanager.com https://td.doubleclick.net https://*.youtube.com https://*.vimeo.com https://*.wp.pl https://tenantpluginapiserver1.eloacc.warta.pl https://*.startquestion.com; img-src 'self' data: https://maps.googleapis.com https://maps.gstatic.com https://www.google-analytics.com https://www.google.com https://www.google.pl https://*.hotjar.com https://*.inteliwise.com https://pixel.wp.pl https://ad.doubleclick.net https://bat.bing.com https://*.clarity.ms https://www.googletagmanager.com https://www.facebook.com https://connect.facebook.net https://c.bing.com https://t.co https://analytics.twitter.com https://fonts.gstatic.com https://*.ytimg.com https://*.vimeocdn.com https://tenantpluginapiserver1.eloacc.warta.pl https://public-api-sessionserver1.eloacc.warta.pl https://*.startquestion.com; manifest-src 'self'; media-src 'self' https://tenantpluginapiserver1.eloacc.warta.pl https://public-api-sessionserver1.eloacc.warta.pl; worker-src 'self' blob:; report-uri /csp-report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://analytics-eu.clickdimensions.com https://www.googletagmanager.com https://maps.googleapis.com https://www.jscache.com https://www.youtube.com https://www.google.com https://www.riddle.com https://p.teads.tv https://webservices.data-8.co.uk https://www.eventbrite.co.uk https://connect.facebook.net https://acdn.adnxs.com https://c0.adalyser.com https://static.hotjar.com https://script.hotjar.com https://k.r66net.com https://www.tripadvisor.com https://www.tripadvisor.co.uk https://static.tacdn.com https://*.resdiary.com https://js.stripe.com https://*.elavon.com https://secure.supercontrol.co.uk https://*.clarity.ms https://cdn.veritonic.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net https://cdnjs.cloudflare.com https://webservices.data-8.co.uk https://static.tacdn.com https://fonts.googleapis.com https://*.resdiary.com; img-src 'self' data: blob: https://ntswebstorage01.blob.core.windows.net https://www.tripadvisor.co.uk https://ciim-data.nts.org.uk https://nts-production.imgix.net https://nts-staging-test.imgix.net https://t.teads.tv https://ib.adnxs.com https://www.facebook.com https://maps.gstatic.com https://maps.googleapis.com https://*.resdiary.com https://resdiary.blob.core.windows.net https://webservices.data-8.co.uk; connect-src 'self' https://maps.googleapis.com https://googleads.g.doubleclick.net https://ciim-data.nts.org.uk https://analytics-eu.clickdimensions.com https://nts-production.imgix.net https://nts-staging-test.imgix.net https://p.typekit.net https://use.typekit.net https://*.hotjar.com wss://*.hotjar.com https://*.resdiary.com https://webservices.data-8.co.uk https://api.supercontrol.co.uk https://ntswebstorage01.blob.core.windows.net https://*.clarity.ms https://*.veritonicmetrics.com https://www.google.com; font-src 'self' https://www.nts.org.uk https://use.typekit.net https://static.tacdn.com https://fonts.gstatic.com https://*.resdiary.com; object-src 'none'; media-src 'self' https://ntswebstorage01.blob.core.windows.net; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.googletagmanager.com https://www.riddle.com https://w.soundcloud.com https://*.doubleclick.net https://*.hotjar.com https://www.eventbrite.co.uk https://*.resdiary.com https://js.stripe.com https://*.elavon.com https://secure.supercontrol.co.uk https://mpembed.com https://web.nts.org.uk https://www.facebook.com https://www.google.com; frame-ancestors 'self'; base-uri 'self'; 1
default-src 'self' *.scorito.com; frame-ancestors 'self' *.scorito.com; form-action 'self' *.scorito.com betalen.rabobank.nl *.wlp-acs.com *.arcot.com *.americanexpress.com *.paypal.com; script-src-elem 'unsafe-inline' blob: *.scorito.com *.cdn.adyen.com static.cloudflareinsights.com cdnjs.cloudflare.com *.g.doubleclick.net www.google-analytics.com www.googletagmanager.com https://*.googlesyndication.com apis.google.com ajax.googleapis.com *.adtrafficquality.google script.hotjar.com static.hotjar.com *.lfeeder.com https://cdn.leadinfo.net snap.licdn.com js-agent.newrelic.com bam-cell.nr-data.net bam.nr-data.net live.steam.eu.com app.termly.io sdk.privacy-center.org platform.twitter.com https://www.youtube.com; script-src 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' *.scorito.com static.cloudflareinsights.com cdnjs.cloudflare.com https://*.gleap.io www.googletagmanager.com *.g.doubleclick.net www.google-analytics.com *.adtrafficquality.google https://static.hotjar.com https://script.hotjar.com https://cdn.leadinfo.net snap.licdn.com *.nr-data.net https://js-agent.newrelic.com app.termly.io; img-src data: blob: *.scorito.com *.scorito-sports.com https://*.cdn.adyen.com 'self' https://*.gleap.io https://www.googletagmanager.com https://www.google.com www.google.nl www.googleadservices.com *.g.doubleclick.net https://*.googlesyndication.com *.adtrafficquality.google onts.gstatic.com https://static.hotjar.com https://script.hotjar.com https://survey-images.hotjar.com https://collector.leadinfo.net *.lfeeder.com *.ads.linkedin.com https://assets.morrizz.com *.nr-data.net *.podbean.com *.steam.eu.com https://app.termly.io https://syndication.twitter.com https://i.ytimg.com; style-src 'unsafe-inline' 'unsafe-hashes' *.scorito.com 'self' https://static.hotjar.com https://script.hotjar.com snap.licdn.com https://app.termly.io; style-src-elem 'unsafe-inline' *.scorito.com *.cdn.adyen.com fonts.googleapis.com live.steam.eu.com; connect-src data: *.scorito.com *.scorito-sports.com live-signalr.service.signalr.net wss://live-signalr.service.signalr.net *.adyen.com *.paypal.com static.cloudflareinsights.com 'self' https://*.gleap.io wss://ws.gleap.io www.googletagmanager.com www.google.com *.googlesyndication.com *.google-analytics.com *.gstatic.com www.googleadservices.com *.analytics.google.com analytics.google.com *.g.doubleclick.net *.adtrafficquality.google https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://api.leadinfo.com https://*.leadinfo.net *.ads.linkedin.com login.microsoftonline.com *.nr-data.net js-agent.newrelic.com feed.podbean.com live.steam.eu.com *.termly.io platform.twitter.com; font-src data: *.scorito.com fonts.gstatic.com https://script.hotjar.com; manifest-src *.scorito.com; media-src data: *.scorito.com 'self' https://*.gleap.io live.steam.eu.com; frame-src *.scorito.com *.cdn.adyen.com checkoutshopper-live.adyen.com *.wlp-acs.com betalen.rabobank.nl *.arcot.com *.americanexpress.com *.paypal.com https://*.gleap.io *.googletagmanager.com *.safeframe.googlesyndication.com cm.g.doubleclick.net *.adtrafficquality.google login.microsoft.com login.microsoftonline.com platform.twitter.com syndication.twitter.com youtube.com *.youtube.com; worker-src blob: *.scorito.com; report-uri https://cspviolations.scorito.com/report; report-to csp-endpoint; 1
script-src 'nonce-4KBXkxPPjvlQoUcXin6Now==' 'strict-dynamic' https: 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com https://applepay.cdn-apple.com data:; connect-src https: wss:; form-action 'self'; base-uri 'none'; object-src 'none'; frame-ancestors 'self'; report-uri https://o4510362602373120.ingest.us.sentry.io/api/4510758972751874/security/?sentry_key=4ec6ab1391cb32106e853449cd1a1770&sentry_environment=prod&sentry_release=1-125-0; report-to csp 1
default-src *.bellroy.com 'self' https: data:; base-uri 'self'; connect-src *.bellroy.com https: wss: www.google.com api.tangiblee.com; font-src *.bellroy.com 'self' data: https: themes.googleusercontent.com fonts.googleapis.com fonts.gstatic.com; frame-src *.bellroy.com 'self' https: data: ms-appx-web: www.facebook.com; img-src *.bellroy.com https: data: blob: android-webview-video-poster:; media-src *.bellroy.com https: data: blob:; script-src *.bellroy.com 'self' https: 'unsafe-inline' 'unsafe-eval' data: opera: google.com *.visa.com d1fc8wv8zag5ca.cloudfront.net; style-src *.bellroy.com https: 'unsafe-inline' data:; worker-src 'self' blob:; child-src 'self' blob:; block-all-mixed-content; report-uri /csp_reports 1
font-src *.googleapis.com *.gstatic.com data: 'self' data: *.doubleclick.net *.facebook.com *.alicdn.com *.cloudflare.com *.faceworks.nl *.font.im ncspublicasset.s3.eu-west-3.amazonaws.com *.typekit.net data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action *.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.sharethis.com www.google.com *.google.com *.doubleclick.net *.facebook.com *.multisafepay.com https://pay.google.com www.paypal.com www.sandbox.paypal.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.xtento.com *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.sharethis.com *.gstatic.com *.googleapis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.multisafepay.com www.paypal.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com www.xtento.com cdn.xtento.com *.alicdn.com *.bing.com *.bing.net *.cookiebot.com europe-west1-maxlead-dwh-test.cloudfunctions.net *.googleadservices.com *.google-analytics.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cd www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt google.com *.googlesyndication.com *.licdn.com *.linkedin.com *.magento.cloud *.mailplus.nl s3.amazonaws.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.sharethis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.multisafepay.com https://pay.google.com m17.mailplus.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com www.xtento.com cdn.xtento.com 9292.nl *.bing.com *.clarity.ms *.cloudflare.com *.cookiebot.com *.cookiebot.eu *.googleadservices.com *.googlesyndication.com *.hotjar.com *.ipify.org *.licdn.com *.mailplus.nl *.marker.io *.oribi.io *.pinimg.com *.pinterest.com *.thinglink.me *.vimeo.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com *.sharethis.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.multisafepay.com unsafe-inline assets.braintreegateway.com *.mailplus.nl *.typekit.net *.vimeocdn.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.gstatic.com *.vimeocdn.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.sharethis.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.multisafepay.com www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com t.elasticsuite.io 9292.nl *.alicdn.com *.bing.com *.bing.net *.clarity.ms *.cookiebot.com *.cookiebot.eu *.doubleclick.net *.googleadservices.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bj www.google.bs www.google.by www.google.ca www.google.cd www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gg www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.mw www.google.ne www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.se www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.tg www.google.tn www.google.tt *.googlesyndication.com *.gstatic.com *.hotjar.com *.hotjar.io *.ipify.org *.jquery.com *.licdn.com *.linkedin.com *.marker.io *.pinterest.com s3.ap-east-1.amazonaws.com s3.eu-west-1.amazonaws.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://95b39a76-7377-449c-a715-7f75d8431eb4.sansec.watch/; report-to report-endpoint; 1
default-src 'none'; connect-src googleads.g.doubleclick.net our.umbraco.com stats.g.doubleclick.net www.google-analytics.com www.google.com cdn.linkedin.oribi.io region1.analytics.google.com iwfsecurity.report-uri.com consentcdn.cookiebot.com translate.googleapis.com 'self';  font-src fonts.gstatic.com use.typekit.net 'self'; manifest-src 'self'; object-src 'self'; frame-src vimeo.com donorbox.org www.buzzsprout.com player.vimeo.com www.googletagmanager.com www.youtube.com consentcdn.cookiebot.com www.google.com indd.adobe.com 'self'; frame-ancestors 'self'; img-src data: t.co analytics.twitter.com fonts.gstatic.com www.google.co.uk our.umbraco.com www.gravatar.com www.googletagmanager.com www.linkedin.com www.facebook.com px4.ads.linkedin.com www.google-analytics.com px.ads.linkedin.com gtranslate.net p.typekit.net www.gstatic.com dashboard.umbraco.com i.vimeocdn.com www.google.com translate.googleapis.com translate.google.com bat.bing.com *.cookiebot.com 'self'; media-src data: 'self' vimeo.com player.vimeo.com *.akamaized.net; script-src 'self' 'unsafe-eval' bat.bing.com static.ads-twitter.com vimeo.com www.vimeo.com ajax.aspnetcdn.com www.google.com connect.facebook.net www.googleadservices.com www.gstatic.com www.google-analytics.com snap.licdn.com translate-pa.googleapis.com consent.cookiebot.com use.typekit.net translate.google.com translate.googleapis.com consentcdn.cookiebot.com use.typekit.net dev.iwf.org.uk www.googletagmanager.com *.iwf.org.uk *.cookiebot.com *.typekit.net cdn.veritonic.com inline: 'unsafe-inline' 'unsafe-eval' 'self'; style-src translate.googleapis.com  www.gstatic.com inline: 'self' 'unsafe-inline'; report-uri https://iwfsecurity.report-uri.com/r/d/csp/enforce; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; 1
default-src https: data: blob: 'unsafe-inline' 'unsafe-eval' ; report-uri https://events.ocdn.eu/v2/csp-report?_ac=events&_fv=www.forbes.pl::PROD_V2 1
default-src 'self' d1c7drk47yg0al.cloudfront.net; base-uri 'self'; object-src 'none'; script-src 'self' 'nonce-ODcxY2FhZGQtNGZjYy00MjQ1LWE1Y2QtZWEwMGNkMTEzZTRk' 'wasm-unsafe-eval' d1c7drk47yg0al.cloudfront.net js.stripe.com www.paypalobjects.com www.googletagmanager.com *.gstatic.com www.google-analytics.com www.google.com maps.googleapis.com connect.facebook.net challenges.cloudflare.com cdn.segment.com cdn-cookieyes.com browser.sentry-cdn.com cdn.tailwindcss.com cdn.mxpnl.com *.filepicker.io static.filestackapi.com widget.trustpilot.com dev.visualwebsiteoptimizer.com *.vimeo.com *.youtube.com *.youtube-nocookie.com *.youtu.be o4508130513256448.ingest.de.sentry.io; style-src 'self' 'unsafe-inline' d1c7drk47yg0al.cloudfront.net fonts.googleapis.com *.gstatic.com *.filepicker.io static.filestackapi.com *.vimeo.com *.youtube.com *.youtube-nocookie.com *.youtu.be; font-src 'self' d1c7drk47yg0al.cloudfront.net fonts.gstatic.com static.filestackapi.com data:; img-src 'self' data: blob: d1c7drk47yg0al.cloudfront.net prod-chuffedcontent.s3.amazonaws.com *.facebook.com connect.facebook.net www.google-analytics.com www.googletagmanager.com googleads.g.doubleclick.net stats.g.doubleclick.net www.googleadservices.com maps.googleapis.com *.gstatic.com *.amazonaws.com *.chuffed.org chuffed.org cdn-cookieyes.com dev.visualwebsiteoptimizer.com *.mxpnl.com image.mux.com *.litix.io *.filepicker.io static.filestackapi.com process.filestackapi.com cdn.filestackcontent.com *.storyblok.com *.vimeo.com *.vimeocdn.com *.youtube.com img.youtube.com i.ytimg.com *.youtube-nocookie.com *.youtu.be www.google.com www.google.com.au translate.googleapis.com translate.google.com; connect-src 'self' d1c7drk47yg0al.cloudfront.net chuffed.org *.stripe.com *.stripe.network api.paypal.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com maps.googleapis.com *.facebook.com *.segment.io cdn.segment.com o4508130513256448.ingest.de.sentry.io *.launchdarkly.com *.mixpanel.com *.mxpnl.com *.mux.com *.amazonaws.com dev.visualwebsiteoptimizer.com cdn-cookieyes.com directory.cookieyes.com log.cookieyes.com analytics.google.com ad.doubleclick.net stats.g.doubleclick.net www.googleadservices.com vimeo.com *.filepicker.io *.filestackapi.com challenges.cloudflare.com https://*.pusher.com wss://*.pusher.com blob: *.litix.io storage.googleapis.com widget.trustpilot.com www.google.com translate.googleapis.com translate.google.com; frame-src 'self' *.stripe.com www.facebook.com m.facebook.com www.google.com challenges.cloudflare.com www.googletagmanager.com *.filepicker.io *.vimeo.com *.youtube.com *.youtube-nocookie.com *.youtu.be; media-src 'self' blob: d1c7drk47yg0al.cloudfront.net *.mux.com *.vimeo.com *.gstatic.com *.youtube.com *.youtube-nocookie.com 1
font-src *.googleapis.com *.gstatic.com data: fonts.googleapis.com fonts.gstatic.com *.fontawesome.com * *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.twitter.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com *.googleapis.com maps.googleapis.com maps.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com gateway.apaylater.com gateway.atome.sg ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.facebook.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.googletagmanager.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com maps.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ maps.gstatic.com fonts.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com gateway.apaylater.com gateway.atome.sg chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.googletagmanager.com *.facebook.net www.termsfeed.com *.avada.io https://*.googletagmanager.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com gateway.apaylater.com gateway.atome.sg downloads.mailchimp.com *.fontawesome.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.google-analytics.com https://get.geojs.io *.avada.io https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com *.cloudflare.com *.twitter.com *.twimg.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
font-src https://fonts.gstatic.com *.klevu.com *.ksearchnet.com fonts.gstatic.com blog.vintageking.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.syfpos.com *.facebook.com blog.vintageking.com 'self' 'unsafe-inline'; frame-ancestors blog.vintageking.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.affirm.com *.affirm.ca c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * syf.demdex.net *.syfpos.com *.syf.com *.weltpixel.com www.xtento.com *.wesupply.xyz https://wesupplylabs.com *.googletagmanager.com *.doubleclick.net https://*.online-metrix.net https://imgs.signifyd.com blog.vintageking.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com *.affirm.com *.affirm.ca https://helloextend-static-assets.s3.amazonaws.com validate.fishpig.co.uk www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.syfpos.com *.syf.com analytics.synchrony.com *.d1.sc.omtrdc.net www.xtento.com cdn.xtento.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com *.gstatic.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com https://imgs.signifyd.com https://*.online-metrix.net blog.vintageking.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.affirm.com *.affirm.ca https://*.helloextend.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.syfpos.com analytics.synchrony.com *.mysynchrony.com https://*.leadmanagerfx.com https://*.marketingcloudfx.com www.xtento.com cdn.xtento.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com *.cloudflare.com *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net https://cdn-scripts.signifyd.com https://imgs.signifyd.com blog.vintageking.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://fonts.googleapis.com unsafe-inline assets.braintreegateway.com *.syfpos.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com blog.vintageking.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blog.vintageking.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.affirm.com *.affirm.ca https://*.helloextend.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.syfpos.com *.syf.com *.d1.sc.omtrdc.net https://*.leadmanagerfx.com https://*.marketingcloudfx.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app https://imgs.signifyd.com blog.vintageking.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com blog.vintageking.com http: https: blob: 'self' 'unsafe-inline'; default-src blog.vintageking.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-yPONP9HNWta/VQnUTQXovQ==' 'strict-dynamic' https://stats.theglobalfund.org; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https://stats.theglobalfund.org; frame-src 'self' https:; media-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; report-uri /csp-report; report-to csp-endpoint 1
upgrade-insecure-requests;base-uri	'self';child-src	'self'	blob:;connect-src	'self'	api.raiffeisen.ch	boerse.raiffeisen.ch	login.raiffeisen.ch	tools.raiffeisen.ch	microsites.raiffeisen.ch	statistics.raiffeisen.ch	scene7.raiffeisen.ch	livechat.raiffeisen.ch	wss://livechat.raiffeisen.ch	maps.googleapis.com	dpm.demdex.net	idservice.raiffeisen.ch	raiffeisen.tt.omtrdc.net	offers.raiffeisen.ch;default-src	'none';font-src	'self'	livechat.raiffeisen.ch	fonts.googleapis.com	fonts.gstatic.com;form-action	'self'	www.news.raiffeisen.ch;frame-ancestors	ebanking.raiffeisen.ch	experience.adobe.com	raiffeisen.experiencecloud.adobe.com;frame-src	blob:	microsites.raiffeisen.ch	activitymap.adobe.com	authorize.omniture.com	sitecatalyst.omniture.com	cdn.tt.omtrdc.net	media10.simplex.tv	nubes.simplex.tv;img-src	'self'	data:	tools.raiffeisen.ch	idservice.raiffeisen.ch	livechat.raiffeisen.ch	statistics.raiffeisen.ch	analytics.rmarkt.ch	analytics.raiffeisen.ch	scene7.raiffeisen.ch	www.facebook.com	www.google.ch	www.google.com	khms0.googleapis.com	khms1.googleapis.com	maps.googleapis.com	csi.gstatic.com	maps.gstatic.com	dmp.adform.net	dpm.demdex.net	raiffeisen.demdex.net	googleads.g.doubleclick.net	media10.simplex.tv;manifest-src	'self';media-src	'self'	blob:	scene7.raiffeisen.ch	media10.simplex.tv;object-src	'self';script-src	'self'	'unsafe-eval'	'unsafe-inline'	login.raiffeisen.ch	tools.raiffeisen.ch	microsites.raiffeisen.ch	livechat.raiffeisen.ch	scene7.raiffeisen.ch	activitymap.adobe.com	www.googleadservices.com	maps.googleapis.com	googleads.g.doubleclick.net	cdn.tt.omtrdc.net;style-src	'self'	'unsafe-inline'	tools.raiffeisen.ch	microsites.raiffeisen.ch	livechat.raiffeisen.ch	scene7.raiffeisen.ch	fonts.googleapis.com	cdn.tt.omtrdc.net;worker-src	'self';report-uri https://api.rreports.ch/svreport/v1/api/wwwrch/csp; 1
default-src 'self'; script-src 'self' https://cdn.jsdelivr.net https://www.googletagmanager.com https://unpkg.com; style-src 'self' https://fonts.googleapis.com; img-src 'self' data:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self'; frame-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests; 1
worker-src blob:; font-src fonts.gstatic.com *.kxcdn.com *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com *.gstatic.com 'self' data: principiaskin.com *.principiaskin.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.facebook.com *.pinterest.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com google.com *.addthis.com *.mercadolibre.com *.weltpixel.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com *.authorize.net *.google.com *.paypal.com *.freshchat.com *.pagseguro.uol.com.br *.doubleclick.net *.pinterest.com *.principiacosmeticos.com principiaskin.com *.principiaskin.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io scontent.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com google.com *.gstatic.com *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.pagseguro.uol.com.br content.app-us1.com cdn.jsdelivr.net *.cloudfront.net *.hsforms.net *.hsforms.com 'self' data: *.instagram.com *.magentocommerce.com *.ytimg.com s.ytimg.com *.pinterest.com *.googleadservices.com *.google.com *.google.com.br *.google.it *.google-analytics.com www.paypalobjects.com *.paypalobjects.com *.paypal.com www.paypal.com t.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.ftcdn.com *.behance.com www.apptrian.com *.apptrian.com *.mercadolivre.com *.yotpo.com *.adobedtm.com *.demdex.net *.everesttech.net assets.braintreegateway.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com c.paypal.com checkout.paypal.com https://pagseguro.uol.com.br https://sandbox.pagseguro.uol.com.br https://stc.pagseguro.uol.com.br https://sandbox.stc.pagseguro.uol.com.br *.doubleclick.net *.onesignal.com *.principiacosmeticos.com principiaskin.com *.principiaskin.com *.googletagmanager.com https://principiacosmeticos.com/mtracking.gif https://www.google.com.ar/ads/ga-audiences https://www.google.com.ar/pagead/1p-user-list/700931334/ https://principiaskincare.com.br/mtracking.gif https://t.co/1/i/adsct *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com google.com *.gstatic.com cdn.ampproject.org connect.facebook.net www.googletagmanager.com googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com *.mlstatic.com www.facebook.com graph.facebook.com business.facebook.com *.google.com *.avada.io diffuser-cdn.app-us1.com prism.app-us1.com *.activehosted.com trackcmp.net cdn.jsdelivr.net *.hsforms.net *.hsforms.com *.ap4r.com *.ks-la.net *.kwai.net *.kwai-pro.com *.freshchat.com *.google-analytics.com *.facebook.com *.adobedtm.com *.authorize.net *.braintreegateway.com *.cardinalcommerce.com *.paypal.com www.paypal.com *.ytimg.com *.googleadservices.com *.paypalobjects.com www.paypalobjects.com *.vimeo.com www.youtube.com *.viacep.com.br www.apptrian.com *.apptrian.com *.polyfill.io *.cloudflare.com *.pagseguro.uol.com.br *.tiktok.com *.pinimg.com *.mercadopago.com *.doubleclick.net *.ccdc02.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com pay.google.com *.yotpo.com *.onesignal.com https://onesignal.com/api/v1/sync/980b27db-f331-407d-8b91-7ea1ff79c577/web *.principiacosmeticos.com https://principiacosmeticos.com/mtc.js *.k-analytix.com principiaskin.com *.principiaskin.com *.cloudflareinsights.com https://designestylelab.com/css/ https://analytics-manager.com/an https://analytics-manager.com/an/ https://principiaskincare.com.br/mtc.js https://static.cloudflareinights.com/beacon.min.js/v52afc6f149f6479b8c77fa569edb01181681764108816 *.ads-twitter.com/uwt.js *.pinterest.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com google.com *.kxcdn.com *.gstatic.com *.fontawesome.com *.google.com cdn.jsdelivr.net *.freshchat.com fonts.googleapis.com *.mercadopago.com getfirebug.com cdn.dnky.co webchat.dotdigital.com *.yotpo.com *.onesignal.com https://onesignal.com/sdks/OneSignalSDKStyles.css *.principiacosmeticos.com principiaskin.com *.principiaskin.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.mercadopago.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.rastreio.alfatracking.com.br *.tracking.totalexpress.com.br *.rastreio.fmtransportes.com.br *.correios.com.br http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io *.viacep.com.br *.activehosted.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.ap4r.com *.kwai.net *.kwai-pro.com *.mythad.com *.instagram.com *.pinterest.com www.apptrian.com *.apptrian.com *.polyfill.io *.cloudflare.com *.paypal.com *.pinimg.com *.tiktok.com *.google.com *.google.com.br *.google.it https://www.google.com.br/ads/ga-audiences https://www.google.it/ads/ga-audiences *.doubleclick.net *.yotpo.com *.mercadolibre.com *.onesignal.com https://onesignal.com/api/v1/apps/980b27db-f331-407d-8b91-7ea1ff79c577/icon *.principiacosmeticos.com https://principiacosmeticos.com/mtc/event *.konduto.com principiaskin.com *.principiaskin.com *.googleapis.com https://viacep.com.br/ws/ viacep.com.br/ws *.amcglobal.sc.omtrdc.net *.geostag.cardinalcommerce.com *.geo.cardinalcommerce.com *.1eafstag.cardinalcommerce.com *.1eaf.cardinalcommerce.com *.centinelapistag.cardinalcommerce.com *.centinelapi.cardinalcommerce.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.api.comapi.com *.webchat.dotdigital.com *.ekr.zdassets.com *.braintreegateway.com *.braintree-api.com https://principiaskincare.com.br/mtc/event https://pagead2.googlesyndication.com/pagead/buyside_topics/set/ analytics.pangle-ads.com https://google.com/ccm/form-data/700931334 https://google.com/pagead/form-data/700931334 analytics-ipv6.tiktokw.us 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:; font-src 'self' https: data:; object-src 'none'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com; worker-src 'self' blob:; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: www.googletagmanager.com; connect-src 'self' https: ws: wss:; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubf68dfe1092b9b71f30b0f8123a55b7f0&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=project%3Ask%2Cenv%3Aproduction&service=sk 1
default-src 'self'; script-src 'self' 'sha256-KRBprNr4DWO3/FHh5dcOtrQXcvjR7p1hkC3JJk3PZSo=' 'sha256-/q35rpf/AVJadvqDcbPcbMT4vH9XjOl0hW64u6uLvFY=' 'sha256-NMJ76hPpLBjvSbjqdmE9l+O7whlqwrkzrP4CHU5uedk=' 'sha256-alw6ukPmer0umdTpJo4qo91sjHzeAcWjroXN11MKHXA=' 'sha256-pvdnVs0cU7XwQPSzVwnUK5+DS9vwHTyfbHhlFMUT95g=' 'sha256-BaWtKTtJv38JC9y9FzlPS3jW0rVjM8k58br2sS711RY=' 'sha256-LOt4egTxbgB3FWTl2vL3IumdjygU0V+4SXY+TboFF3s=' 'sha256-FYXDsSTuKIc603efXJdVDc3S5bxjK6/djpW30DROdoM=' 'sha256-rOy92FMzNqpHMIRJuffM/qsIrMrZ5DSEhUsbuZHrKj0=' 'sha256-GvmdLyo+2VsblVYXQ6mSOUlE+FbP5iROpw6rsC6F14w=' 'sha256-04thO+ixvtlZU2w5i6oPk3eppRrDNomHxe7ZA6iNwwQ=' 'sha256-XzFiuvYA21TiTBoKt2Hqobb73cFUAAZsHRnXL94wW5E=' 'sha256-m1XKIkE3Zgdm8PEepQa7dcCos/k9TTAfd46byya7KHg=' 'sha256-sJo1Kmpj+6L+aTwFYqB4yRAHCFGITUB8yECp8ZYc2X4=' 'sha256-cOUD21qB4yOI1mF9pWywWKUq3fZ7hpgyf7pVtuzd+7M=' 'sha256-IPsnT+QK3vDhzp7Jv++SDjVONbjZ7Kn36ZibWCdw87Y=' 'sha256-FKMQLMl2DLwfNeEGS6V57FBigJbFWnKqNz5zYj/818Y=' 'sha256-+SIVQ6J4UAx/inNMclVnbOupJMhIL56dJkBkmgp0AQc=' 'sha256-bXGjGHrjaTk56pkDfdhztoMDfKh3wYzk88T2aYe5cq4=' 'sha256-3pNrD4TR6kso+E2s7XDZDzqc8NiWxIObbSYHVxSP8zk=' 'sha256-5Lx4WpcGPOFUSUo/DLhl4nkxLc4h3N2bCRORmpc2uPY=' 'sha256-R0ACV71YraXfq6TM2HFsTNTGWjQmNthUPPWEymRCRlc=' 'sha256-yJWxx+rwT+UkeaHJ0YokdJdtvhIWtLCg7upihytAMUg=' 'sha256-yAN93zyQ0nA7bJ4x2eW67E7jolnMVsR8voaOWMikKGk=' 'sha256-vzrEa408Gicpbh0oFH3agfx+A0Fi9WHIbQtmc/D/QfY=' 'sha256-5MoEQwF0N21nfEGYWtyinb+e3sjfrGTGRHXNMC1IE4w=' 'sha256-x+zW2zEbt58KCESttT0N1tQziOZrqGu8op7tizMbGvQ=' 'sha256-z8anABVqjPet/N7pCzHrUU/3k3oklaK9kO0Gqsc2ZpE=' 'sha256-AiLbK3MVwIqil5ZFsU2J0ncs+2jOLn0ZUtmeH2gy7nM=' 'wasm-unsafe-eval' static.cloudflareinsights.com *.googletagmanager.com monsido-consent.com moderate.cleantalk.org heatmaps.monsido.com app-script.monsido.com fd.cleantalk.org; object-src 'none'; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com; img-src 'self' data: tracking.monsido.com;; media-src 'self'; frame-src 'self' *.vidyard.com *.youtube.com www.google.com *.supersaas.com *.matterport.com *.podbean.com; frame-ancestors 'self'; child-src 'self' blob:; font-src 'self' fonts.gstatic.com cdnjs.cloudflare.com data:; connect-src 'self' *.googletagmanager.com *.google-analytics.com analytics.google.com *.google.com *.vidyard.com *.eloqua.com monsido-consent.com *.monsido-consent.com *.monsido.com script.crazyegg.com tracking.crazyegg.com use.typekit.net kit.fontawesome.com ka-p.fontawesome.com *.jwpsrv.com *.jwplayer.com *.searchstax.com stats.g.doubleclick.net fd-api.cleantalk.org; report-uri /report-csp-violation 1
frame-ancestors https://*.facebook.com https://*.youtube.com https://*.cleverwebserver.com https://*.graphic.com.gh https://*.x.com; 1
connect-src 'self' https://correspondent.report-uri.com https://static.cdn-decorrespondent.nl https://useruploads.cdn-decorrespondent.nl https://decorrespondent.matomo.cloud https://o206126.ingest.sentry.io https://space-corre.video-dns.com; media-src 'self' https://static.cdn-decorrespondent.nl https://traffic.omny.fm https://*.pdn.tritondigital.com https://useruploads.cdn-decorrespondent.nl blob: https://space-corre.video-dns.com; form-action 'self' https://www.mollie.com https://pay.ideal.nl; report-uri https://correspondent.report-uri.com/r/d/csp/reportOnly; report-to csp-report-only-endpoint 1
default-src 'self'; style-src 'self' https://*.typekit.net https://cdnjs.cloudflare.com; font-src https://*.typekit.net; script-src 'self' https://sparkplatform.com https://cdnjs.cloudflare.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://mc.yandex.ru https://api-maps.yandex.ru; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self'; connect-src 'self' https://mc.yandex.ru; frame-src https://api-maps.yandex.ru https://yandex.ru 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://cdn.cookielaw.org https://www.bnpparibas.de https://brasil.bnpparibas; script-src 'self' 'unsafe-eval' https://fast.wistia.com https://beacon-v2 https://analyticsgroupcom.bnpparibas.com https://cdn-group.bnpparibas.com https://cdn.cookielaw.org https://cdn.territories.bnpparibas ajax.googleapis.com www.googletagmanager.com googletagmanager.com tagmanager.google.com 'sha256-F+QMJISS2IIkRUd2a+c+u1owMqMSoidCaHFDAmzUgOo=' 'sha256-iqOPaRlwwgtNy7J3vh/+LSW9/QVdN+Fl+YfMS8+GcPo=' 'sha256-yZHeusBmoqYSsqdm5ylf993dfqVyosFaYa5gueKZDsA=' 'sha256-rjfSUjIA2A20p4lATAefLLG7Fy7VJssnkJ+SnJ2TXNo=' 'sha256-NoWu+BuWxBsWAc9iEH0HnQQP7HC05AcUDK7axdIDjwo=' 'sha256-RWn1w3BKiDlDNbD6vM1kYLpeWCwwWPkob0LMWJ2gKJk=' 'sha256-of5cgqSO76eV+sIV9C1322WVhxlBj767C0pFwbjTPts=' 'sha256-fPXetwWx4258jL256OrNtQQyvFVR4/BotkeZKtfk54Q=' 'sha256-yElBEKucE35qwHf8qWcAvqD25zOJ7TqTptcHyzGhOxw=' 'sha256-Xr7tFjKXkiF47o9/dlJ+izWVWEtr67XyWOK085/Y43E=' 'sha256-qcT/R0HkWUs2DMxvtvcMobUms6Z5/fPtfgUe2hN67gE='; style-src 'self' 'unsafe-inline' data: https://fonts.googleapis.com https://www.gstatic.com https://cdn-group.bnpparibas.com https://cdn.cookielaw.org https://cdn.territories.bnpparibas fonts.googleapis.com www.googletagmanager.com tagmanager.google.com; img-src 'self' data: https://s.w.org https://wp-rocket.me https://c.tile.openstreetmap.org https://a.tile.openstreetmap.org https://b.tile.openstreetmap.org blob: https://www.google.com/pagead/landing https://ade.googlesyndication.com https://pagead2.googlesyndication.com https://ad.doubleclick.net https://contrib.territories.bnpparibas https://cdn-group.bnpparibas.com https://cdn.cookielaw.org https://cdn.territories.bnpparibas secure.gravatar.com www.gravatar.com i.ytimg.com data: www.googletagmanager.com; connect-src 'self' https://bnp-privacy.my.onetrust.com https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location https://yoast.com https://cdn.cookielaw.org https://o173685.ingest.sentry.io https://analyticsgroupcom.bnpparibas.com https://contrib.territories.bnpparibas https://www.google.com/pagead/landing https://pagead2.googlesyndication.com https://adservice.google.com https://sourcemap.devowl.io https://sourcemap.devowl.io/real-media-library/4.22.47/adb9a2f4ef22d5d85978840bd322bf76/index.js.map www.googletagmanager.com; font-src 'self' data: https://fonts.gstatic.com https://fast.wistia.com https://github.com/google/fonts https://cdn-group.bnpparibas.com https://cdn.cookielaw.org https://cdn.territories.bnpparibas fonts.gstatic.com fonts.googleapis.com data:; media-src 'self' https://asset.mediahub.bnpparibas https://upload.wikimedia.org https://broadcast.mediahub.bnpparibas data: https://mediahub.group.echonet https://my.mediahub.bnpparibas https://my.mediahub.bnpparibas/AssetLink/1cwfu8n4ki414p6d240ff18r41ver00j.mp4 https://cdn-group.bnpparibas.com https://cdn.cookielaw.org https://cdn.territories.bnpparibas; frame-src 'self' https://www.youtube.com https://wp-rocket.me https://open.spotify.com https://www.youtube-nocookie.com https://centric.bnpparibas.com https://13179764.fls.doubleclick.net https://td.doubleclick.net https://gateway.zscalertwo.net https://remove.video https://mozbar.moz.com blob: https://fxplus.bnpparibas.com www.youtube.com www.googletagmanager.com; child-src 'self' www.youtube.com www.googletagmanager.com; worker-src 'self' blob:; 1
object-src 'none'; script-src 'self' adform.net *.adform.net betano.com *.betano.com betano.ng *.betano.ng cloudflare.com *.cloudflare.com cookielaw.org *.cookielaw.org facebook.net *.facebook.net fullstory.com *.fullstory.com gmlinteractive.com *.gmlinteractive.com googletagmanager.com *.googletagmanager.com kaizengaming.com *.kaizengaming.com kameleoon.io *.kameleoon.io optimove.net *.optimove.net sportradar.com *.sportradar.com sportradarserving.com *.sportradarserving.com cloudflareinsights.com *.cloudflareinsights.com ads-twitter.com *.ads-twitter.com app.delivery *.app.delivery lgrckt-in.com *.lgrckt-in.com tostarsbuilding.com *.tostarsbuilding.com *.bing.com *.taboola.com *.geocomply.com *.creativecdn.com *.kameleoon.eu *.google-analytics.com *.jsdelivr.net *.kwai.net *.clarity.ms *.betgenius.com *.greencolumnart.com *.adalyser.com *.performgroup.com *.scoutgg.net *.pa4r.com res-odx.op-mobile.opera.com *.bannerflow.net *.facebook.com *.cloudfront.net *.maze.co *.betano.co *.datadome.co d32tdr35c4icxo.cloudfront.net; worker-src 'self' blob:; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=acHWsOZHJe.RJf.vX1wuKAhXYKOgTvtxFmleW9Tyr_o-1789265906.1468303-1.0.1.1-suEYXo7ehbyCC23dvhqbHHaWxzgHXu2nzbHfXu1MBMiJ5PQAKU1eo09ttWl6EVgoV9yFlNIQLU6Me98xUOgyvbTM8sYDhriFQj3fBdeh388dPxlFjVX.gYfm_yCQW5Cc_4osMIqp3ohSictF_i_VN5EUIo42NjFijFT6DOg8uEbNlqLAk0MXD4_6xflQRXWU; report-to cf-vonrrfivofeqhedu 1
default-src none blob: data: gap:; script-src 'self' 'nonce-nCvQyjVBl_ijT95DxDtgYzd7YYTJXncxs4a5LUnJ4AMbzfUUCsSvyA' 'strict-dynamic' https://www.utrecht.nl https://www.utrecht.nl.internal https://accept.utrecht.typocloud.nl data: https://virtuele-gemeente-assistent.nl https://siteimproveanalytics.com https://cdn-eu.readspeaker.com formulieren.digitaal.utrecht.nl stats.utrecht.nl 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://translate.google.com https://stats.utrecht.nl https://www.toegankelijkheidsverklaring.nl https://nieuwsbrieven.utrecht.nl https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com https://web.archive.org *.6006206.global.siteimproveanalytics.io https://6006206.global.siteimproveanalytics.io/image.aspx https://www.utrecht.nl https://www.utrecht.nl.internal https://accept.utrecht.typocloud.nl https://*.siteimproveanalytics.io https://virtuele-gemeente-assistent.nl https://*.siteimproveanalytics.com; base-uri none; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://kaarten.utrecht.onatlas.nl https://subsidie-checker.nl https://sdk.companywebcast.com https://infogram.com https://nieuwsbrieven.utrecht.nl *.google.com *.gu-geo.maps.arcgis.com https://infogram-download-eu.s3.eu-west-1.amazonaws.com https://app-eu.readspeaker.com https://sketchfab.com https://utrecht-kaarten-review-acc-skda4g.delta10-review.nl https://e.infogram.com https://vttts-eu.readspeaker.com https://www.utrecht.nl https://www.utrecht.nl.internal https://accept.utrecht.typocloud.nl https://www.youtube-nocookie.com; style-src-elem 'self' 'nonce-nCvQyjVBl_ijT95DxDtgYzd7YYTJXncxs4a5LUnJ4AMbzfUUCsSvyA' https://formulieren.digitaal.utrecht.nl https://cdn-eu.readspeaker.com https://virtuele-gemeente-assistent.nl https://mijn.virtuele-gemeente-assistent.nl https://www.gstatic.com https://formulieren.digitaal.utrecht.nl/static/sdk/open-forms-sdk.css https://fonts.gstatic.com https://fonts.googleapis.com *.formulieren.digitaal.utrecht.nl *.mijn.virtuele-gemeente-assistent.nl *.virtuele-gemeente-assistent.nl https://virtuele-gemeente-assistent.nl/static/css/widget-v25.3.1-base.css https://virtuele-gemeente-assistent.nl/static/css/widget-v25.3.1-custom.css https://mijn.virtuele-gemeente-assistent.nl/utrecht/_styling https://cdn.honey.io/css/empty.css *.www.gstatic.com https://v.kcmg.nl/surveyembedding/assets/css/standard_controls_inline.css https://v.kcmg.nl/surveyembedding/assets/css/ng-survey.component.css https://v.kcmg.nl/surveyembedding/assets/css/bootstrapslider.css https://v.kcmg.nl/surveyembedding/assets/css/surveyjs-readded-csp-styles.css https://v.kcmg.nl https://v.kcmg.nl/surveyembedding/assets/css/surveyjs-defaultv2css@1.12.23/defaultV2.fontless.min.css *.v.kcmg.nl https://v.kcmg.nl/surveyembedding/assets/css/survey.component.css https://openstad-cdn.nl 'sha256-JQEHXnSrj4DJZ2DOwDDXtfkDs5+y7/1gFxshQP2KBoA=' https://*.utrecht.nl https://viewer.kcmg.nl 'report-sample'; connect-src 'self' https://public.pandosearch.com https://www.utrecht.nl wss://virtuele-gemeente-assistent.nl https://formulieren.digitaal.utrecht.nl *.google.com https://*.googleapis.com https://*.gstatic.com blob: data: https://translate.googleapis.com https://mijn.virtuele-gemeente-assistent.nl https://api.kcmg.nl https://viewerapi.kcmg.nl/StartSurvey https://viewerapi.kcmg.nl *.viewerapi.kcmg.nl https://api.utrecht.openstad.dev *.obi4wan.com *.readspeaker.com *.pandosearch.com https://stats.utrecht.nl https://chatapi.obi4wan.com/api https://cloudstatic.obi4wan.com/api https://virtuele-gemeente-assistent.nl wss://virtuele-gemeente-assistent.nl/socket.io/ wss://ws-eu.pusher.com/app https://cdn-eu.readspeaker.com; font-src 'self' https://formulieren.digitaal.utrecht.nl https://www.utrecht.nl https://fonts.gstatic.com https://v.kcmg.nl/surveyembedding/assets/webfonts/fa-brands-400.ttf https://v.kcmg.nl/surveyembedding/assets/webfonts/fa-regular-400.woff https://v.kcmg.nl/surveyembedding/assets/webfonts/fa-solid-900.woff https://v.kcmg.nl/surveyembedding/assets/webfonts/fa-regular-400.ttf https://v.kcmg.nl/surveyembedding/assets/webfonts/fa-regular-400.svg https://v.kcmg.nl/surveyembedding/assets/webfonts/fa-brands-400.eot https://v.kcmg.nl/surveyembedding/assets/webfonts/Radnika-Medium.otf https://v.kcmg.nl/surveyembedding/assets/webfonts/fa-solid-900.svg https://v.kcmg.nl/surveyembedding/assets/webfonts/fa-solid-900.woff2 https://v.kcmg.nl/surveyembedding/assets/webfonts/fa-regular-400.woff2 https://v.kcmg.nl/surveyembedding/assets/webfonts/fa-solid-900.eot https://v.kcmg.nl/surveyembedding/assets/webfonts/fa-solid-900.ttf https://v.kcmg.nl/surveyembedding/assets/webfonts/fa-brands-400.woff2 https://v.kcmg.nl *.v.kcmg.nl https://openstad-cdn.nl https://cdn.faceworks.nl data: https://cdn-eu.readspeaker.com; script-src-elem 'self' 'nonce-nCvQyjVBl_ijT95DxDtgYzd7YYTJXncxs4a5LUnJ4AMbzfUUCsSvyA' https://stats.utrecht.nl https://formulieren.digitaal.utrecht.nl https://virtuele-gemeente-assistent.nl https://siteimproveanalytics.com https://e.infogram.com https://infogram.com 'strict-dynamic' https: 'unsafe-eval' blob: https://www.utrecht.nl https://formulieren.digitaal.utrecht.nl/static/sdk/open-forms-sdk.js *.virtuele-gemeente-assistent.nl https://www.utrecht.nl/templates/js/wijkvoorkeuren-wijzigen.js https://www.utrecht.nl/templates/js/eventtracking.js *.www.utrecht.nl https://www.utrecht.nl/fileadmin/open-forms.js https://virtuele-gemeente-assistent.nl/static/js/widget.js *.formulieren.digitaal.utrecht.nl https://www.utrecht.nl.internal https://accept.utrecht.typocloud.nl data: https://cdn-eu.readspeaker.com formulieren.digitaal.utrecht.nl stats.utrecht.nl https://viewer.kcmg.nl 'report-sample'; worker-src 'self' 'nonce-nCvQyjVBl_ijT95DxDtgYzd7YYTJXncxs4a5LUnJ4AMbzfUUCsSvyA' blob:; style-src none blob: data: gap: 'self' *.obi4wan.com *.readspeaker.com https://www.utrecht.nl https://www.utrecht.nl.internal https://accept.utrecht.typocloud.nl https://redactie-acceptatie.utrecht.nl https://virtuele-gemeente-assistent.nl https://mijn.virtuele-gemeente-assistent.nl https://cdn-eu.readspeaker.com formulieren.digitaal.utrecht.nl 'report-sample'; form-action 'self' https://action.spike.email https://app-eu.readspeaker.com; media-src none blob: data: gap: https://app-eu.readspeaker.com https://cdn-eu.readspeaker.com https://vttts-eu.readspeaker.com; object-src none; report-uri https://www.utrecht.nl/@http-reporting?csp=report&requestTime=1789266171682596&requestHash=585d5b785efe3a8ca13f007de940eed38f1dc16b 1
default-src 'self'; img-src 'self' 'unsafe-inline' data: blob: https: https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://*.maxwork.pt https://*.maxwork.fr https://*.google.com https://*.gstatic.com https://api.mapbox.com https://*.proptexx.com https://widget.opinionsystem.fr; font-src 'self' https: data:; media-src 'self' https: blob: data:; connect-src https: wss: https://*.maxwork.pt https://*.maxwork.fr; script-src 'self' 'nonce-xnNb7ni-Vuv1eQeiGuTaTu150IbrU4dsfDjk7n41AZE' 'unsafe-eval' https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://www.googleadservices.com https://www.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://ade.googlesyndication.com https://adservice.google.com https://*.google.com https://*.gstatic.com https://*.facebook.net 'sha256-vq3MdMjj+48fD6QeeFSr4SDBaDKd1ciOBDLl5J/otHU=' https://*.proptexx.com https://api.mapbox.com https://*.cookiebot.com https://widget.opinionsystem.fr https://deskbolt.com https://*.deskbolt.com 'sha256-C2KfArrunTPoL2Kq85oxvp4H5m3fX6SjROY6tiauAAE=' https://www.youtube.com https://player.vimeo.com https://*.clarity.ms 'sha256-oD7IpqoAHRbqg0aDpmIBd08ulAhgbSXDtdixbfkH/L4='; object-src 'self'; frame-src 'self' https:; form-action 'self'; frame-ancestors 'self'; worker-src 'self' blob:; base-uri 'self'; style-src 'self' 'unsafe-inline' https://*.proptexx.com https://www.googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.gstatic.com https://widget.opinionsystem.fr https://deskbolt.com https://*.deskbolt.com; report-uri /api/csp-report; report-to csp-endpoint 1
font-src *.fontawesome.com https://fonts.bunny.net *.cloudflare.com *.cookiebot.com fonts.gstatic.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.feedaty.com https://firebasestorage.googleapis.com *.gumlet.io *.cookiebot.com *.google.it stileo.it *.adnxs.com *.sharethrough.com *.doubleclick.net *.bidswitch.net *.smartadserver.com *.taboola.com *.omnitagjs.com *.casalemedia.com *.criteo.com *.media.net *.mediavine. *.postrelease.com *.outbrain.com *.pubmatic.com *.rubiconproject.com *.teads.tv *.tremorhub.com *.ivitrack.com *.3lift.com *.yieldlab.net ad.360yield.com id5-sync.com sync.1rx.io sync-criteo.ads.yieldmo.com *.emxdgt.com *.servenobid.com *.unrulymedia.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com www.gstatic.com pay.google.com google.com/pay ecomms2s.sella.it sandbox.gestpay.net img.riskified.com *.gstatic.com *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://unpkg.com *.feedaty.com *.avada.io *.shopify.com https://widget.feedaty.com https://insights.algolia.io *.cookiebot.com *.dwin1.com *.criteo.com glamipixel.com *.cookieless-data.com *.cloudfront.net *.datnova.com *.sddan.com fonts.googleapis.com consent.cookiebot.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.google.com www.gstatic.com beacon.riskified.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.feedaty.com *.fontawesome.com https://fonts.bunny.net https://widget.feedaty.com *.cloudflare.com *.cookiebot.com fonts.googleapis.com unsafe-inline assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com insights.algolia.io *.feedaty.com https://get.geojs.io *.avada.io https://widget.feedaty.com *.cookiebot.com wss://ws.salecycle.com *.salecycle.com *.criteo.com *.doubleclick.net *.fontawesome.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com www.google.com www.gstatic.com pay.google.com google.com/pay ecomms2s.sella.it sandbox.gestpay.net c.riskified.com *.google-analytics.com *.facebook.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com https://fonts.gstatic.com 'self' data: *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.google.com *.youtube.com *.yotpo.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.twitter.com *.google.com *.youtube.com maps.googleapis.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com *.facebook.com *.facebook.net www.googletagmanager.com https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.twitter.com *.google.com maps.googleapis.com lightwidget.com *.maps.gstatic.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com quickchart.io img.youtube.com https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudflare.com *.klarna.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.youtube.com maps.googleapis.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.googleapis.com *.placeholder.com *.maps.gstatic.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com *.facebook.com *.facebook.net *.avada.io cdn.jsdelivr.net connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com https://player.vimeo.com https://www.youtube.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.google.com *.youtube.com maps.googleapis.com cdn.lightwidget.com *.instagram.com *.cdninstagram.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.googleapis.com *.placeholder.com *.maps.gstatic.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net fonts.gstatic.com fonts.googleapis.com https://fonts.googleapis.com http://fonts.googleapis.com unsafe-inline *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.google.com *.youtube.com maps.googleapis.com *.cdninstagram.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.placeholder.com *.maps.gstatic.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com *.facebook.com *.facebook.net https://get.geojs.io *.avada.io *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com www.nif.pt *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.google.com *.youtube.com maps.googleapis.com facebook.net *.maps.gstatic.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';  font-src 'self'    https://static.sanitas.es    https://maxcdn.bootstrapcdn.com    https://s3.lightboxcdn.com    https://fonts.gstatic.com    https://sanitaspre.herokuapp.com;  style-src 'self' 'unsafe-inline'    https://static.sanitas.es    https://sanitaspre.herokuapp.com    https://forms.zetaglobal.net    https://fonts.googleapis.com    https://maxcdn.bootstrapcdn.com;  img-src 'self'    data:    https://www.sanitas.es    https://static.sanitas.es    https://www.bupa.pt    https://cdn.cookielaw.org    https://sanitassociedadanonimade.data.adobedc.net    https://www.googletagmanager.com    https://www.google.com    https://forms.zetaglobal.net    https://sanitaspre.herokuapp.com    https://maps.gstatic.com    https://maps.googleapis.com    https://lh3.googleusercontent.com    https://www.google.es;  script-src 'self' 'unsafe-inline' 'unsafe-eval'    https://static.sanitas.es    https://www.googletagmanager.com    https://x.empathy.co    https://sanitaspre.herokuapp.com    https://assets.adobedtm.com https://cdn.cookielaw.org    https://static.hotjar.com https://euhosted.live.rezync.com    https://googleads.g.doubleclick.net    https://cdnjs.cloudflare.com    https://www.lightboxcdn.com    https://script.hotjar.com    https://forms.zetaglobal.net    https://d30o4d63vvluug.cloudfront.net    https://maps.googleapis.com    https://assets.exatom.io    https://cdn.eu.zetaglobal.net;  connect-src 'self'    https://api.sanitas.es    https://sanitassociedad.tt.omtrdc.net    https://cdn.cookielaw.org    https://onsiterecs.api.eu.zetaglobal.net    https://sanitaspre.herokuapp.com    https://events.api.eu.zetaglobal.net    https://content.hotjar.io    https://people.api.eu.zetaglobal.net    https://api.eu.zetaglobal.net    https://jsonplaceholder.typicode.com    https://maps.googleapis.com    https://assets.exatom.io    https://dpm.demdex.net    https://ad.doubleclick.net    https://www.google.com    wss://sanitaspre.herokuapp.com    wss://ws.hotjar.com;  frame-src 'self'    https://sania.chat    https://www.sania.chat    https://8508277.fls.doubleclick.net    https://sanitassociedadanonimade.demdex.net; 1
font-src www.paypalobjects.com *.affilitizer.com *.googleusercontent.com *.jsdelivr.net https://widgets.trustedshops.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com bid.g.doubleclick.net js.mollie.com *.cookiebot.com *.doubleclick.net *.google.com *.googletagmanager.com *.jobrad.org www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com https://www.mollie.com *.authorized.by *.cookiebot.com *.doubleclick.net *.google.com *.googleapis.com *.googleusercontent.com *.gstatic.com *.trustedshops.com www.google.ae www.google.al www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.by www.google.ca www.google.ch www.google.cl www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ma www.google.co.nz www.google.co.th www.google.co.uk www.google.co.uz www.google.com.ar www.google.com.bd www.google.com.br www.google.com.co www.google.com.eg www.google.com.hk www.google.com.jm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ng www.google.com.pa www.google.com.ph www.google.com.pk www.google.com.sg www.google.com.tr www.google.com.ua www.google.com.vn www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gr www.google.hr www.google.hu www.google.ie www.google.im www.google.is www.google.it www.google.jo www.google.kz www.google.li www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mv www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk www.google.tg www.google.tn https://widgets.trustedshops.com https://widgets-qa.trustedshops.com www.xtento.com cdn.xtento.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com app.authorized.by player.vimeo.com js.mollie.com *.authorized.by *.cloudflare.com *.cookiebot.com *.google.com *.googleapis.com *.googletagmanager.com *.jsdelivr.net *.trustedshops.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com www.xtento.com cdn.xtento.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.authorized.by *.googleapis.com *.gstatic.com *.jsdelivr.net https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src *.cookiebot.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com app.authorized.by api.friendlycaptcha.com eu-api.friendlycaptcha.eu *.adm-services.goog *.affilitizer.com *.cookiebot.com *.doubleclick.net *.googleapis.com www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.by www.google.ca www.google.ch www.google.co.in www.google.co.jp www.google.co.ma www.google.co.nz www.google.co.th www.google.co.uk www.google.com.ar www.google.com.bd www.google.com.br www.google.com.co www.google.com.eg www.google.com.mx www.google.com.ng www.google.com.pk www.google.com.tr www.google.com.ua www.google.com.vn www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.gr www.google.hr www.google.hu www.google.ie www.google.it www.google.li www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mk www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk www.google.tn *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://9d149a5d-cd44-43a1-b850-cd1f930c5061.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://forms.hsforms.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.timetopet.com https://app.enzuzo.com https://app.getbeamer.com https://assets.daysmartpayments.com https://ph.daysmartpayments.com https://cdn.mouseflow.com https://cdn.plaid.com https://connect-js.stripe.com https://js.stripe.com https://connect.facebook.net https://ct.capterra.com https://embed.typeform.com https://googleads.g.doubleclick.net https://maps.googleapis.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.gstatic.cn https://www.recaptcha.net https://code.jquery.com https://js.storylane.io https://*.hubspot.com https://*.hs-scripts.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hsforms.net https://*.intercom.io https://*.intercomcdn.com; style-src 'self' 'unsafe-inline' https://cdn.timetopet.com https://app.getbeamer.com https://embed.typeform.com https://fonts.googleapis.com; font-src 'self' data: https://cdn.timetopet.com https://fonts.gstatic.com https://static.hsappstatic.net https://*.intercomcdn.com; img-src 'self' data: blob: https:; connect-src 'self' blob: https: wss:; media-src 'self' blob: https://js.intercomcdn.com; worker-src 'self' blob:; frame-src 'self' https://www.googletagmanager.com https://app.getbeamer.com https://connect-js.stripe.com https://js.stripe.com https://form.typeform.com https://forms.hsforms.com https://player.vimeo.com https://www.youtube.com https://www.facebook.com https://www.google.com https://www.recaptcha.net https://drive.google.com https://daysmart.storylane.io https://intercom-sheets.com https://www.intercom-reporting.com https://customer-y7bu0j063mhudygl.cloudflarestream.com; report-uri https://dashboard.timetopet.com/csp-report?site=marketing 1
default-src 'self'; script-src 'nonce-ODUyYzJjOWUtMzE3Ni00OWFlLTliNGUtYmRiMGRiNWU4MDBl' 'strict-dynamic' https://*.googletagmanager.com https://*.clarity.ms https://c.seznam.cz/js/rc.js 'unsafe-eval' https://*.hotjar.com 'unsafe-inline' 'self' https://tagmanager.google.com https://www.googleadservices.com https://www.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://bzrcdn.openai.com; style-src 'self' 'unsafe-inline' https://p.typekit.net https://use.typekit.net https://*.hotjar.com https://www.googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' *.typekit.net fonts.googleapis.com https://www.googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com; img-src 'self' data: blob: https://c.seznam.cz https://*.googlesyndication.com https://*.ads.linkedin.com https://www.facebook.com https://analytics.twitter.com https://www.google.com https://www.google.cz https://www.google.sk https://t.co https://my.teamio.com https://*.cloudimg.io https://dummyimage.com https://*.google-analytics.com https://*.googletagmanager.com https://*.hotjar.com https://static.intercomassets.com https://ssl.gstatic.com https://www.gstatic.com https://*.g.doubleclick.net https://*.google.com https://*.google.cz https://*.google.sk https://google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.intercomcdn.com https://intercom.helpdata.io https://bzr.openai.com; font-src 'self' data: https://use.typekit.net https://fonts.googleapis.com https://fonts.gstatic.com https://script.hotjar.com https://*.hotjar.com https://*.hotjar.io https://fonts.intercomcdn.com https://js.intercomcdn.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; connect-src 'self' https://www.prace.cz https://*.almacareer.tech https://api.selfservice.career-useraccount-prod.almacareer.net https://*.clarity.ms https://*.googlesyndication.com https://*.google-analytics.com https://*.analytics.google.com https://www.google.com https://stats.g.doubleclick.net https://*.googletagmanager.com https://h.seznam.cz https://c.seznam.cz https://*.ads.linkedin.com https://www.facebook.com https://maps.geo.eu-west-1.amazonaws.com https://*.teamio.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.abtasty.com https://api-iam.intercom.io wss://nexus-websocket-a.intercom.io wss://*.intercom-messenger.com wss://*.intercom.io https://ad.doubleclick.net https://ct.leady.com https://*.s3.eu-west-1.amazonaws.com https://*.g.doubleclick.net https://*.google.com https://*.google.cz https://*.google.sk https://google.com https://www.google.cz https://www.google.sk https://www.googleadservices.com https://bzr.openai.com https://bzrcdn.openai.com; frame-src 'self' https://www.googletagmanager.com https://td.doubleclick.net https://www.youtube-nocookie.com/ https://track.adform.net; manifest-src 'self'; media-src 'self' https://js.intercomcdn.com; worker-src 'self' blob:; report-uri /api/report/csp; 1
object-src 'none'; script-src * 'unsafe-inline' 'unsafe-eval'; script-src-attr 'self'; base-uri 'self'; frame-ancestors 'self' https: 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://fast.wistia.com https://*.wistia.com https://js.hsforms.net https://statuspal.io https://connect.facebook.net https://bat.bing.com https://tracking.g2crowd.com https://www.redditstatic.com https://www.clarity.ms https://*.clarity.ms https://c.bing.com https://snap.licdn.com https://a.burly.io https://j.6sc.co https://cdn.stat-track.com https://*.zoominfo.com; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; frame-src https://fast.wistia.com https://*.wistia.com https://forms.hsforms.com https://statuspal.io; img-src 'self' https: data: https://www.facebook.com https://static.xx.fbcdn.net https://*.wistia.com https://www.googletagmanager.com https://*.googletagmanager.com https://*.google-analytics.com https://bat.bing.com; connect-src 'self' https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net https://*.google.com https://pagead2.googlesyndication.com https://www.facebook.com https://bat.bing.com https://tracking.g2crowd.com https://forms.hsforms.com https://*.hubspot.com https://statuspal.io https://*.wistia.com https://www.clarity.ms https://*.clarity.ms https://c.bing.com https://px.ads.linkedin.com https://a.burly.io https://j.6sc.co https://cdn.stat-track.com https://*.zoominfo.com; media-src 'self' https://embedwistia-a.akamaihd.net https://*.wistia.com 1
worker-src blob:; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cash-f.squarecdn.com *.googleapis.com https://www.gstatic.com maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com https://*.contentsquare.net https://*.contentsquare.com https://analytics.tiktok.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * https://images.unsplash.com *.googleapis.com https://*.gstatic.com https://*.google.com https://*.googleapis.com https://*.googleusercontent.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://*.contentsquare.net https://*.contentsquare.com https://www.google.nl https://www.google.de https://bat.bing.com https://match.sharethrough.com https://cm.g.doubleclick.net https://criteo-partners.tremorhub.com https://x.bidswitch.net https://ib.adnxs.com https://rtb-csync.smartadserver.com https://sync-t1.taboola.com https://visitor.omnitagjs.com https://r.casalemedia.com https://gum.criteo.com https://id5-sync.com https://ad.360yield.com https://matching.ivitrack.com https://contextual.media.net https://ad.yieldlab.net https://ps.eyeota.net https://exchange.mediavine.com https://jadserve.postrelease.com https://sync.outbrain.com https://simage2.pubmatic.com https://pixel.rubiconproject.com https://criteo-sync.teads.tv https://eb2.3lift.com https://sync-criteo.ads.yieldmo.com https://e1.emxdgt.com https://dis.criteo.com https://sync.1rx.io https://analytics.tiktok.com https://*.reskyt.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js *.googleapis.com https://*.gstatic.com https://*.google.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com t.contentsquare.net static.hotjar.com https://*.contentsquare.net https://app.contentsquare.com https://*.cookiefirst.com https://*.noibu.com https://cdn-4.convertexperiments.com https://s.pinimg.com https://static.criteo.net https://www.dwin1.com https://bat.bing.com https://ct.pinterest.com https://cdn.watchtower.graindata.com https://script.hotjar.com https://lantern.roeyecdn.com https://sslwidget.criteo.com https://cdn.segmentify.com https://*.prenatal.nl https://analytics.tiktok.com https://*.reskyt.com https://app.aiden.cx https://ar-view-zieny.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.cash.app maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com assets.braintreegateway.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com https://*.cookiefirst.com https://cdn.segmentify.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com * *.googleapis.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://*.contentsquare.net https://*.contentsquare.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://*.cookiefirst.com https://pipeline.prenatal.nl https://region1.google-analytics.com https://www.google.nl https://ct.pinterest.com https://measurement-api.criteo.com https://vc.hotjar.io https://gandalf-eu.segmentify.com https://*.convertexperiments.com https://*.noibu.com wss://*.noibu.com https://analytics.tiktok.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com blob: http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-Z7YA9nMUbc8koKZJS96ycA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/tv_google 1
default-src https: wss: 'unsafe-inline' 'unsafe-eval'; img-src https: data: blob:; worker-src blob: 'self'; font-src https: data: 'unsafe-inline' 'unsafe-eval'; media-src https: wss: blob: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://ostrava.cz https://*.ostrava.cz https://cdn-cookieyes.com https://*.google.com https://*.gstatic.com https://*.googlesyndication.com https://*.googleadservices.com https://*.adtrafficquality.google https://syndicatedsearch.goog https://se-forms.cz https://app.smartemailing.cz https://cdnjs.cloudflare.com; worker-src 'self' blob:; child-src 'self' blob:; style-src 'self' 'unsafe-inline' https://*.google.com https://*.gstatic.com https://se-forms.cz https://app.smartemailing.cz; img-src 'self' data: blob: https://ostrava.cz https://*.ostrava.cz https://*.gstatic.com https://*.youtube.com https://*.ytimg.com https://cdn-cookieyes.com https://*.cookieyes.com https://tile.openstreetmap.org https://*.tile.openstreetmap.org https://*.google.com https://*.googlesyndication.com https://*.adtrafficquality.google https://syndicatedsearch.goog https://ovm.bezstavy.cz; font-src 'self' data:; connect-src 'self' blob: https://ostrava.cz https://*.ostrava.cz https://cdn-cookieyes.com https://*.cookieyes.com https://*.google.com https://*.googlesyndication.com https://*.doubleclick.net https://*.adtrafficquality.google https://syndicatedsearch.goog https://se-forms.cz https://app.smartemailing.cz; frame-src 'self' https://*.youtube.com https://www.youtube-nocookie.com https://*.arcgis.com https://ostrava.cz https://*.ostrava.cz https://cityvizor.cz https://api.602.cz https://*.google.com https://*.googlesyndication.com https://*.doubleclick.net https://*.adtrafficquality.google https://syndicatedsearch.goog; object-src 'none'; base-uri 'self'; form-action 'self' https://*.google.com; frame-ancestors 'self' https://ostrava.cz https://*.ostrava.cz https://digitalninosice.cz https://www.digitalninosice.cz 1
default-src 'self'; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; frame-src 'self' https:; connect-src 'self' https:; 1
object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-'; base-uri 'none'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:; upgrade-insecure-requests; block-all-mixed-content 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https: http:; style-src 'self' 'unsafe-inline' https: http:; img-src 'self' data: blob: https: http:; font-src 'self' data: https:; connect-src 'self' https: http: ws: wss:; frame-src 'self' https: http:; worker-src 'self' blob:; media-src 'self' https: http:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri https://www.uahurtado.cl/__csp_report__ 1
frame-ancestors 'self' https://www.nwcg.gov 1
font-src *.klevu.com *.ksearchnet.com *.gstatic.com https://fonts.gstatic.com *.fontawesome.com fonts.gstatic.com https://pos.snapscan.io *.cloudflare.com *.googleapis.com *.zopim.com *.tawk.to *.jsdelivr.net media.flixfacts.com 'unsafe-inline' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://secure.paygate.co.za/payweb3/process.trans https://sandbox.payfast.co.za https://www.payfast.co.za/eng/process oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com *.facebook.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; frame-ancestors *.hana.ondemand.com 'self'; style-src *.adobe.com *.klevu.com *.ksearchnet.com *.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com oppwa.com *.oppwa.com *.peachpayments.com *.cloudflare.com *.jsdelivr.net www.gstatic.com media.flixcar.com 'unsafe-inline' data: https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; connect-src *.google-analytics.com dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://*.ingest.sentry.io *.klevu.com *.ksearchnet.com https://ipinfo.io *.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://get.geojs.io *.avada.io oppwa.com *.oppwa.com *.peachpayments.com *.testfreaks.com *.nosto.com *.hotjar.io *.hotjar.com *.doubleclick.net *.zendesk.com *.paypal.com *.tawk.to wss://*.tawk.to *.tawk.link *.addthis.com *.addthisedge.com *.what3words.com *.googleapis.com vsb111.tawk.to ekr.zdassets.com api.magento.com commerce.adobedc.net app.mobicredwidget.co.za wss://widget-mediator.zopim.com bam.nr-data.net *.googletagmanager.com security-hub.vaimo.network 'unsafe-eval' data: 'self' 'unsafe-inline'; frame-src data:text fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com *.nosto.com *.issuu.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.criteo.net *.criteo.com *.addthis.com *.facebook.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; img-src *.criteo.com *.krxd.net *.chatlayer.ai assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'unsafe-inline' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.klevu.com *.ksearchnet.com *.google.com *.gstatic.com https://*.googleapis.com https://*.googleusercontent.com oppwa.com *.oppwa.com *.peachpayments.com *.eu-west-1.amazonaws.com https://pos.snapscan.io *.cloudflare.com *.google.lv *.google.co.za *.google.com.na *.google.na *.zopim.com *.nosto.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.zopim.io *.sfdr.co sfdr.co *.tawk.to tawk.link *.tawk.link *.addthis.com *.jsdelivr.net *.facebook.com *.azurewebsites.net maps.googleapis.com app.mobicredwidget.co.za media.flixcar.com rt.flix360.com assets.secure.checkout.visa.com data: 'self' 'unsafe-inline'; script-src *.incredible.co.za *.chatlayer.ai assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://browser.sentry-cdn.com *.klevu.com *.ksearchnet.com *.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.avada.io *.oppwa.com oppwa.com *.peachpayments.com *.zopim.com *.videoly.co sfdr.co *.cnetcontent.com *.cloudfront.net *.google.lv *.google.co.za *.google.com.na *.google.na *.cloudflare.com *.cloudflareinsights.com *.nosto.com *.hotjar.com *.googletagmanager.com *.criteo.net *.criteo.com *.sfdr.co *.tawk.to *.tawk.link *.jsdelivr.net *.addthis.com *.addthisedge.com *.moatads.com *.mouseflow.com *.facebook.com *.what3words.com maps.googleapis.com commerce.adobedtm.com magento-recs-sdk.adobe.net static.zdassets.com app.mobicredwidget.co.za www.gstatic.com connect.facebook.net bam.nr-data.net js.testfreaks.com media.flixfacts.com media.flixcar.com security-hub.vaimo.network https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; 1
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/  https://widget.trustpilot.com;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://appleid.cdn-apple.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com *.myheritage.de https://www.myheritage.de  'unsafe-eval' 'nonce-b753ab92c445bddfc387ea7cef6b2f72' 'strict-dynamic' https://widget.trustpilot.com https://invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style  https://widget.trustpilot.com;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io https://www.google.com/recaptcha/enterprise/* https://www.google.com/recaptcha/enterprise/ https://www.google.com/recaptcha/enterprise/clr https://www.google.com/recaptcha/ https://maps.googleapis.com https://people.googleapis.com https://translate-pa.googleapis.com *.myheritage.de https://widget.trustpilot.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:  https://widget.trustpilot.com https://*.trustpilot.com;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=report&canonical_page_id=/company/home/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com https://cdn.sheetjs.com https://snap.licdn.com https://*.hotjar.com https://*.googleapis.com https://*.gstatic.com https://*.google.com https://www.googletagmanager.com https://*.iubenda.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.iubenda.com https://unpkg.com; font-src 'self' data: https://*.gstatic.com https://*.hotjar.com; img-src 'self' data: blob: https://*.googleapis.com https://*.ads.linkedin.com https://www.asem.it https://www.asemautomation.com https://*.google-analytics.com https://*.gstatic.com https://*.google.com https://*.googleusercontent.com https://i.ytimg.com https://www.googletagmanager.com https://*.iubenda.com; frame-src 'self' https://*.google.com https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://*.iubenda.com; connect-src 'self' https://*.googleapis.com https://*.google.com https://*.gstatic.com https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.iubenda.com https://*.ads.linkedin.com https://*.hotjar.com https://*.hotjar.io; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.mercadolibre.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar *.mercadolivre.com maps.googleapis.com maps.gstatic.com 'self' data: gpsfarma.com www.afip.gob.ar www.google.com.ar https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.mlstatic.com *.mercadopago.com maps.googleapis.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.mercadopago.com *.mercadolibre.com maps.googleapis.com stats.g.doubleclick.net https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'none'; script-src 'self' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'self'; img-src 'self' https://challenges.cloudflare.com data:; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self' 1
default-src 'self' https://*.mziq.com; script-src 'self' https://*.mziq.com; script-src-elem 'self' https://*.mziq.com 'sha256-kQ7PZqRD+DW+OLPgGpzeit+ne5Q32Q7r0bNZq//y0Rw=' 'sha256-2L+nOGxRAxUhUjVdJf/7Wl9Y9CJvuXyNSb7gUk9APMU=' https://*.googletagmanager.com https://*.googleapis.com https://*.gstatic.com https://*.tinymce.com https://*.tiny.cloud; style-src 'self' 'unsafe-inline' https://*.mziq.com; style-src-elem 'self' 'unsafe-inline' https://*.mziq.com https://fonts.googleapis.com https://fonts.gstatic.com https://*.tinymce.com https://*.tiny.cloud; font-src 'self' data: https://*.mziq.com https://fonts.googleapis.com https://fonts.gstatic.com https://*.tinymce.com https://*.tiny.cloud; connect-src 'self' https://*.mziq.com wss://*.mziq.com https://mzai-iq.mzsuite.com https://*.google.com https://*.google.com.br https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net https://*.googletagmanager.com https://*.googleapis.com https://*.gstatic.com https://*.tinymce.com https://*.tiny.cloud https://mz-prd-pub-filemanager-external.s3.us-east-1.amazonaws.com https://mz-prd-pub-mziq-cdn.s3.us-east-1.amazonaws.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com blob:; img-src 'self' data: polygon: https://*.mziq.com https://*.google.com https://*.google.com.br https://*.googleapis.com https://*.gstatic.com https://*.tinymce.com https://*.tiny.cloud https://s3.amazonaws.com/mz-mailer blob:; object-src 'none'; base-uri 'self'; worker-src blob:; report-uri https://csp-report.mziq.com/csp-report; report-to csp-endpoint; 1
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/  https://widget.trustpilot.com;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://appleid.cdn-apple.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com *.myheritage.es https://www.myheritage.es  'unsafe-eval' 'nonce-bf19a7f73579ac670b152f6d82edd2ab' 'strict-dynamic' https://widget.trustpilot.com https://invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style  https://widget.trustpilot.com;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io https://www.google.com/recaptcha/enterprise/* https://www.google.com/recaptcha/enterprise/ https://www.google.com/recaptcha/enterprise/clr https://www.google.com/recaptcha/ https://maps.googleapis.com https://people.googleapis.com https://translate-pa.googleapis.com *.myheritage.es https://widget.trustpilot.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:  https://widget.trustpilot.com https://*.trustpilot.com;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=report&canonical_page_id=/company/home/ 1
default-src 'self'; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-Vn5N9EwwPVa3DYwtnfLu3g=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://kit.fontawesome.com https://ka-p.fontawesome.com https://fonts.googleapis.com https://cdn.trustindex.io https://embed.typeform.com dev-hellowork.com *.dev-hellowork.com; img-src 'self' data: blob: https://www.google.bj https://www.google.cm https://fonts.gstatic.com https://www.google.tg https://www.googleadservices.com https://www.netreviews.eu c.clarity.ms lh3.googleusercontent.com phosphor.utils.elfsightcdn.com i.ytimg.com googleusercontent.com https://cdn.trustindex.io f.maformation.fr hellowork.com *.hellowork.com dev-hellowork.com *.dev-hellowork.com googletagmanager.com *.googletagmanager.com google.com *.google.com *.google.fr *.google.cm *.google.ie *.google.be *.google.co.uk *.google.co.id *.google.de *.google.it *.google.es *.google.nl *.google.ch googlesyndication.com *.googlesyndication.com cl.avis-verifies.com *.dmcdn.net linkedin.com *.linkedin.com *.bing.com *.facebook.com *.facebook.net *.smartadserver.com *.bidswitch.net *.doubleclick.net *.casalemedia.com *.criteo.com *.criteo.net id5-sync.com *.id5-sync.com *.360yield.com *.media.net *.mediavine.com *.postrelease.com *.outbrain.com *.pubmatic.com *.rubiconproject.com *.teads.tv *.tremorhub.com *.3lift.com *.yieldlab.net *.1rx.io *.demdex.net *.unrulymedia.com *.agkn.com *.taboola.com *.dmxleo.com joko-mobile-app-media.s3.eu-west-1.amazonaws.com *.tiktok.com analytics.tiktok.com https://googleads.g.doubleclick.net; font-src 'self' data: https://ka-p.fontawesome.com https://cdn.trustindex.io https://fonts.gstatic.com; connect-src 'self' https://ka-p.fontawesome.com https://analytics-ipv6.tiktokw.us https://safesearchinc.com sslwidget.criteo.com *.clarity.ms hellowork.com *.hellowork.com dev-hellowork.com *.dev-hellowork.com hellowork-group.com *.hellowork-group.com https://infra-hellowork.com https://*.infra-hellowork.com infra-hellowork.com *.infra-hellowork.com regionsjob.com *.regionsjob.com https://www.google.com https://*.google.com https://*.google.com:443 google.com *.google.fr *.google.de *.google.it *.google.es *.google.nl *.google.be *.google.ch https://www.googleadservices.com https://*.googleadservices.com https://*.doubleclick.net googletagmanager.com *.googletagmanager.com googlesyndication.com *.googlesyndication.com googleadservices.com *.googleadservices.com abtasty.com *.abtasty.com aticdn.net *.aticdn.net bing.com *.bing.com linkedin.com *.linkedin.com facebook.com *.facebook.com *.tiktok.com analytics-ipv6.tiktokw.us *.skeepers.io *.doubleclick.net trustindex.io *.trustindex.io *.elfsight.com api.typeform.eu *.typeform.com https://googleads.g.doubleclick.net; frame-src *.typeform.com *.typeform.eu cl.avis-verifies.com widget.trustpilot.com youtube-nocookie.com *.youtube-nocookie.com dailymotion.com *.dailymotion.com player.vimeo.com *.player.vimeo.com googletagmanager.com *.googletagmanager.com google.com *.google.com criteo.com *.criteo.com *.criteo.net *.doubleclick.net facebook.com *.facebook.com abtasty.com *.abtasty.com *.zscloud.net https://googleads.g.doubleclick.net; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com; frame-ancestors 'none'; report-to csp-endpoint; report-uri /csp-report 1
font-src fonts.gstatic.com use.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.klevu.com *.personalizer.ai data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.facebook.com *.googlesyndication.com *.constructor.com *.constructor.dev 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.vimeo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.personalizer.ai *.klevu.com *.eplaneta.ha.rs *.eplaneta.rs *.google.hr *.google.rs *.constructor.com *.constructor.dev data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com https://browser.sentry-cdn.com *.klevu.com *.personalizer.ai *.platforma-microservices.loc platforma-microservices.loc *.constructor.com *.constructor.dev 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.klevu.com *.personalizer.ai 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com https://*.ingest.sentry.io *.personalizer.ai *.zsdevelopment.com *.platforma-microservices.loc platforma-microservices.loc *.remiks.com *.eplaneta.rs *.eplaneta.loc *.google.hr *.google.rs *.constructor.com *.constructor.dev *.cnstrc.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' blob:  https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; frame-src 'self' https://*.noxiaohao.com https://telegram.org https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://accounts.google.com https://oauth.telegram.org https://sgtm.btsgtm.com  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; script-src 'self' 'nonce-CPIxjtt8H3MfQUQvbsd80Q==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh/v3RIRuG3kMikr5iha+7P/0TN/GNA=' https://*.noxiaohao.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://accounts.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://play.google.com https://analytics.google.com https://fonts.gstatic.com https://telegram.org https://oauth.telegram.org https://*.geetest.com https://*.geevisit.com https://sgtm.btsgtm.com https://static.wangsustatic.xyz https://static.wangsustatic.vip ; connect-src 'self' https://stats.g.doubleclick.net https://analytics.google.com https://*.noxiaohao.com wss://*.noxiaohao.com wss: https://www.turingfraud.net https://play.google.com https://accounts.google.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://telegram.org https://oauth.telegram.org https://static.geetest.com https://static.geevisit.com wss://stream.bitget.cloud https://www.google.com https://sgtm.btsgtm.com  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; worker-src 'self' blob:; img-src 'self' data: blob: https://img.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://img.bitgetimg.com https://img.gurenla.com https://*.bgbstatic.com https://lh3.googleusercontent.com https://static.geetest.com https://static.geevisit.com https://static-web.jjdsn.vip https://cdn.bitkeep.vip https://www.google.co.jp https://bin.wangsustatic.com https://sgtm.btsgtm.com https://analytics.google.com https://stats.g.doubleclick.net  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; style-src 'self' 'unsafe-inline' https://static.geetest.com https://static.geevisit.com https://accounts.google.com https://fonts.googleapis.com https://static.bgbstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; font-src 'self' data: https://static.geetest.com https://static.geevisit.com https://fonts.gstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri /v1/buried/log/cspSecurity /v1/monitor/csp?appId=d4b6df7d; 1
connect-src 'self' data: https://www.motonet.fi https://graphql.datocms.com https://*.doubleclick.net https://www.instagram.com https://*.broman.group https://*.litix.io https://vimeo.com https://*.adyen.com/checkoutanalytics/ https://*.adyen.com/checkoutshopper/ https://api.checkout.uat.walleydev.com/checkout/ https://api.checkout.walleypay.com/checkout/ https://api.postmarkapp.com https://www.youtube.com https://api.videoly.co https://js.testfreaks.com https://api.testfreaks.com https://reviews.testfreaks.com https://policy.app.cookieinformation.com https://consent.app.cookieinformation.com/api/consent https://api.custobar.com https://*.google-analytics.com https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ https://*.googlesyndication.com https://*.adform.net https://*.creativecdn.com https://connect.facebook.net https://browser-intake-datadoghq.eu https://motonet.pbx.fi:883 https://*.broman.group https://*.cdn.adyen.com/checkoutshopper/ https://i.ytimg.com https://www.datocms-assets.com https://stagingaksapimanagementbroman.azure-api.net https://testapimanagementbroman.azure-api.net https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com https://*.mux.com https://*.vimeocdn.com https://dapi.videoly.co https://*.facebook.com https://*.seadform.net https://*.adform.net https://*.criteo.net https://*.criteo.com https://www.googletagmanager.com/ https://ib.adnxs.com/setuid https://ib.adnxs.com/getuid https://cm.g.doubleclick.net https://qr.motonet.fi https://embed.upseller.cloud https://cm4-production-assets.s3.amazonaws.com/ https://general-runtime.voiceflow.com https://runtime-api.voiceflow.com https://embed.upseller.cloud https://upseller-analytics.vercel.app wss://general-runtime.voiceflow.com wss://runtime-api.voiceflow.com wss://embed.upseller.cloud https://*.googletagmanager.com https://eu.fw-cdn.com https://*.freshchat.com/ https://src.freshmarketer.eu/mas https://*.giosg.com https://*.interactions.giosgusercontent.com https://ac.cnstrc.com https://pcs.cnstrc.com; img-src 'self' data: https://www.datocms-assets.com https://i.ytimg.com https://image.mux.com https://*.broman.group https://*.cdn.adyen.com/checkoutshopper/ https://i.ytimg.com https://www.datocms-assets.com https://stagingaksapimanagementbroman.azure-api.net https://testapimanagementbroman.azure-api.net https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com https://*.mux.com https://*.vimeocdn.com https://dapi.videoly.co https://*.facebook.com https://*.seadform.net https://*.adform.net https://*.criteo.net https://*.criteo.com https://www.googletagmanager.com/ https://ib.adnxs.com/setuid https://ib.adnxs.com/getuid https://cm.g.doubleclick.net https://qr.motonet.fi https://embed.upseller.cloud https://cm4-production-assets.s3.amazonaws.com/; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://checkout.uat.walleydev.com/ https://checkout.walleypay.com/ https://*.adyen.com/ https://*.vimeo.com https://app.ecoonline.com https://www.maston.fi https://websds.volvo.com https://policy.app.cookieinformation.com/ https://*.criteo.com https://*.adform.net https://*.creativecdn.com https://www.facebook.com https://www.gatestechzone.com https://staging-cdn.broman.group https://cdn.motonet.fi https://embed.upseller.cloud https://*.googletagmanager.com https://eu.fw-cdn.com https://*.freshchat.com https://*.giosg.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.broman.group https://maps.googleapis.com https://api.walleypay.com/walley-checkout-loader.js https://api.videoly.co/1/quchbox/0/299/quch.js https://www.paypal.com/sdk/js https://dapi.videoly.co https://www.youtube.com https://*.vimeo.com https://policy.app.cookieinformation.com https://script.custobar.com https://*.criteo.net https://*.criteo.com https://*.adform.net https://connect.facebook.net https://tags.creativecdn.com https://embed.upseller.cloud https://cdn.voiceflow.com https://*.googletagmanager.com https://eu.fw-cdn.com https://*.freshchat.com https://*.giosg.com https://globalcdn.interactiondesigner.giosg.com https://cnstrc.com; object-src data:; worker-src 'self' blob:; 1
form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.facebook.net webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; frame-ancestors *.hana.ondemand.com 'self'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'unsafe-inline' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.klevu.com *.ksearchnet.com magefan.com cm.magefan.com *.facebook.com *.facebook.net https://www.magezon.com ozow-live-cdn.s3.eu-west-1.amazonaws.com *.cloudflare.com https://cdn.klarna.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com *.cdninstagram.com *.google.com *.google.lv *.google.co.za *.google.com.na *.google.na *.zopim.com *.nosto.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.zopim.io *.sfdr.co sfdr.co *.tawk.to tawk.link *.tawk.link *.jsdelivr.net *.azurewebsites.net maps.googleapis.com app.mobicredwidget.co.za media.flixcar.com rt.flix360.com assets.secure.checkout.visa.com *.adobedtm.com data: 'self' 'unsafe-inline'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.googleapis.com *.cloudflare.com *.jsdelivr.net www.gstatic.com media.flixcar.com 'unsafe-inline' data: https://js.klevu.com https://www.ctm.co.za 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com *.amazonaws.com *.googleapis.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; font-src https://www.roomvo.com fonts.gstatic.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.fonts.googleapis.com *.gstatic.com 'unsafe-inline' data: *.cloudflare.com *.googleapis.com *.zopim.com *.tawk.to *.jsdelivr.net media.flixfacts.com data: 'self' 'unsafe-inline'; connect-src https://agents.engati.ai wt.omnisendlink.com dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com cdn.ampproject.org https://*.ingest.sentry.io *.klevu.com *.ksearchnet.com ekr.zdassets.com/ *.facebook.com *.facebook.net https://get.geojs.io *.avada.io embed.payjustnow.com *.payjustnow.com *.cloudflare.com *.paypal.com *.googleapis.com *.addthis.com *.cardinalcommerce.com https://graph.instagram.com *.testfreaks.com *.google.com *.nosto.com *.hotjar.io *.hotjar.com *.doubleclick.net *.zendesk.com *.tawk.to wss://*.tawk.to *.tawk.link *.addthisedge.com *.what3words.com vsb111.tawk.to ekr.zdassets.com api.magento.com commerce.adobedc.net app.mobicredwidget.co.za wss://widget-mediator.zopim.com bam.nr-data.net *.googletagmanager.com security-hub.vaimo.network 'unsafe-eval' data: cdn.plyr.io noembed.com 'self' 'unsafe-inline'; frame-src https://unicons.iconscout.com https://youtube.com fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.facebook.com *.facebook.net *.google.com embed.payjustnow.com *.payjustnow.com *.addthis.com *.pinterest.com *.nosto.com *.issuu.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.criteo.net *.criteo.com webchat.jdg.co.za *.jdg.co.za www.youtube.com 'self' 'unsafe-inline'; script-src https://unicons.iconscout.com https://agents.engati.ai https://bb.branding-element.com *.convertexperiments.com www.roomvo.com omnisnippet1.com bat.bing.com *.omnisnippet1.com static.ads-twitter.com analytics.tiktok.com https://s.pinterest.com https://scripts.clarity.ms assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.ampproject.org raw.githubusercontent.com chimpstatic.com downloads.mailchimp.com *.list-manage.com https://polyfill-fastly.io https://browser.sentry-cdn.com js.klevu.com *.ksearchnet.com s7.addthis.com *.facebook.com *.facebook.net *.avada.io *.google.com embed.payjustnow.com *.payjustnow.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.zopim.com *.videoly.co sfdr.co *.cnetcontent.com *.cloudfront.net *.klevu.com *.google.lv *.google.co.za *.google.com.na *.google.na *.cloudflare.com *.cloudflareinsights.com *.nosto.com *.hotjar.com *.googletagmanager.com *.criteo.net *.criteo.com *.sfdr.co *.tawk.to *.tawk.link *.jsdelivr.net *.mouseflow.com *.what3words.com maps.googleapis.com commerce.adobedtm.com magento-recs-sdk.adobe.net static.zdassets.com app.mobicredwidget.co.za www.gstatic.com connect.facebook.net bam.nr-data.net js.testfreaks.com media.flixfacts.com media.flixcar.com security-hub.vaimo.network www.youtube.com player.vimeo.com https://js.klevu.com https://www.ctm.co.za https://www.roomvo.com 'self' 'unsafe-inline' 'unsafe-eval'; 1
base-uri 'none'; object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-IC95BEf3XP0w6LCXgoFRng==' 1
frame-ancestors 'none'; default-src 'self'; script-src 'self' 'nonce-MjM2NDZmNWQtN2I5NS00M2MwLWIyNDUtMWFkMTFlMjE2YzNl' https://status.livepix.gg https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://js.intercomcdn.com https://widget.intercom.io https://www.youtube.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com https://fonts.intercomcdn.com; img-src 'self' https://static.livepix.gg https://cdn.livepix.gg https://www.googletagmanager.com https://downloads.intercomcdn.com https://static.intercomassets.com https://js.intercomcdn.com https://messenger-apps.intercom.io https://i.ytimg.com; frame-src 'self' https://checkout.livepix.gg https://rlgrjlrv2czy.statuspage.io https://www.googletagmanager.com https://intercom-sheets.com https://www.google.com https://www.youtube.com; connect-src 'self' https://webservice.livepix.gg https://fingerprint.livepix.gg https://fp.livepix.gg https://livia.livepix.gg https://www.google.com https://www.google-analytics.com https://api-iam.intercom.io wss://nexus-websocket-a.intercom.io https://o4508013286391808.ingest.us.sentry.io; manifest-src 'self' https://static.livepix.gg; media-src 'self' blob: https://static.livepix.gg https://js.intercomcdn.com 1
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/sre_google 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; img-src 'self' data: blob: https://www.googletagmanager.com https://www.google-analytics.com; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net; connect-src 'self' blob: https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com https://www.google.com; worker-src 'self' blob:; frame-src 'self' https://www.google.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https://news.google.com https://www.googletagmanager.com https://www.google-analytics.com https://www.clarity.ms https://*.clarity.ms https://www.google.com https://www.gstatic.com https://maps.googleapis.com https://maps.gstatic.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https://news.google.com https://backend.moldtelecom.md https://apiwww.moldtelecom.md https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://www.google.com https://www.google.md https://*.g.doubleclick.net https://www.facebook.com https://*.clarity.ms https://c.bing.com https://maps.googleapis.com https://maps.gstatic.com https://*.googleapis.com https://*.ggpht.com https://img.youtube.com https://i.ytimg.com https://pagead2.googlesyndication.com https://eprel.ec.europa.eu; connect-src 'self' https://news.google.com https://backend.moldtelecom.md https://apiwww.moldtelecom.md https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://*.clarity.ms https://c.bing.com https://maps.googleapis.com https://*.googleapis.com https://connect.facebook.net https://www.facebook.com; frame-src 'self' https://news.google.com https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://www.googletagmanager.com https://td.doubleclick.net https://*.facebook.com https://moldtc.speedtestcustom.com; media-src 'self' https://www.moldtelecom.md; worker-src 'self' blob:; manifest-src 'self' 1
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/  https://widget.trustpilot.com;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://appleid.cdn-apple.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com *.myheritage.nl https://www.myheritage.nl  'unsafe-eval' 'nonce-995d46700af2868e386da52ee3fb6db0' 'strict-dynamic' https://widget.trustpilot.com https://invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style  https://widget.trustpilot.com;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io https://www.google.com/recaptcha/enterprise/* https://www.google.com/recaptcha/enterprise/ https://www.google.com/recaptcha/enterprise/clr https://www.google.com/recaptcha/ https://maps.googleapis.com https://people.googleapis.com https://translate-pa.googleapis.com *.myheritage.nl https://widget.trustpilot.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:  https://widget.trustpilot.com https://*.trustpilot.com;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=report&canonical_page_id=/company/home/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://accounts.google.com https://oauth2.googleapis.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: blob:; connect-src 'self' https:; font-src 'self' data:; frame-src 'self' https://www.google.com https://accounts.google.com; object-src 'none'; base-uri 'self' 1
object-src 'none'; script-src 'self' adform.net *.adform.net *.bing.com *.taboola.com *.fullstory.com *.geocomply.com *.kameleoon.eu *.ads-twitter.com *.google-analytics.com *.kaizengaming.com *.jsdelivr.net *.kwai.net *.clarity.ms *.greencolumnart.com *.adalyser.com *.performgroup.com *.scoutgg.net *.sportradarserving.com *.pa4r.com res-odx.op-mobile.opera.com *.bannerflow.net *.facebook.com *.cloudfront.net *.maze.co *.app.delivery *.betano.co *.betgenius.com *.cloudflare.com *.cloudflareinsights.com *.cookielaw.org *.creativecdn.com *.facebook.net *.gmlinteractive.com *.googletagmanager.com *.kameleoon.io *.lgrckt-in.com *.optimove.net *.sportradar.com *.tostarsbuilding.com *.betano.cz *.datadome.co d32tdr35c4icxo.cloudfront.net *.logr-in.com; worker-src 'self' blob:; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=chwrH5vsH18otNC_JwG9brFb5S3wtCryMrrkcHNb.34-1789264857.255612-1.0.1.1-lqV0_CKRSwleMtA.wCkOluo1MVyyYwwNUMqU4mPm_4hhyLizkhxUdo5JXneYW0FFG_YUb2.BG1kgRsryI2kOSXWecrBaVXa_VPmM4MweJHlEdb9W9p06.Ib6Jo6hjLsvPOB2ZrdmugHfu5xsTb9u05DCwResZjtClF753qGoWvvXV3EyS4otUcs2BajvodLG; report-to cf-ylyaqbohlkoequvh 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com cash-f.squarecdn.com converse.com.br https://magento.com *.converse.com.br *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * www.facebook.com 'self' connect.facebook.net graph.facebook.com business.facebook.com https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * www.google.com https://gum.criteo.com/ api.sunset.systems targeting.voxus.tv https://springmedia.go2cloud.org/ https://googleads.g.doubleclick.net/ https://www.google.com.br/ https://tpc.googlesyndication.com/ https://static.criteo.net/ td.doubleclick.net https://fledge.us.criteo.com/ https://www.googletagmanager.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com https://plumrocket.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * converse.com.br www.facebook.com https://mcstaging.converse.com.br www.google.com.br conectiva.io https://s.ad.smaato.net https://simage2.pubmatic.com https://ade.clmbtech.com/ https://sync-criteo.ads.yieldmo.com https://e1.emxdgt.com https://x.bidswitch.net/ https://cm.g.doubleclick.net https://ib.adnxs.com/ secure.adnxs.com https://pixel.rubiconproject.com/ https://match.sharethrough.com https://rtb-csync.smartadserver.com https://sync-t1.taboola.com/ https://criteo-sync.teads.tv https://eb2.3lift.com/ https://ups.analytics.yahoo.com/ https://tg.socdm.com/ https://visitor.omnitagjs.com https://gum.criteo.com https://r.casalemedia.com https://ads.stickyadstv.com https://ad.360yield.com https://matching.ivitrack.com https://i.liadm.com/ https://exchange.mediavine.com https://c.bing.com/ https://trends.revcontent.com https://criteo-partners.tremorhub.com/ https://secure.adnxs.com https://contextual.media.net https://dis.criteo.com https://tags.bluekai.com https://cm.adgrx.com https://sync.outbrain.com bat.bing.com https://device.clearsale.com.br https://c.clarity.ms https://rsp.servername.net http://rsp.servername.net https://googleads.g.doubleclick.net/ http://www.googleadservices.com/ https://idsync.rlcdn.com/ https://*.rakuten.com https://*.linksynergy.com https://*.nxtck.com https://*.xg4ken.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.com.br *.converse.com.br http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ connect.facebook.net graph.facebook.com business.facebook.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com https://adobe.com/ www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net https://amcglobal.sc.omtrdc.net/ commerce.adobe.net use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-ds.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://adyen.com pay.google.com *.payments-amazon.com http://www.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ converse.com.br js-agent.newrelic.com js.go2sdk.com tag.rmp.rakuten.com ads01.groovinads.com img.metaffiliation.com https://assets.adobedtm.com/ https://secure.authorize.net/ https://test.authorize.net/ https://js.braintreegateway.com/ https://unpkg.com/ https://commerce.adobe.net/ https://use.typekit.net/ https://t.paypal.com https://s.ytimg.com https://magento-ds.com www.facebook.com connect.facebook.net https://graph.facebook.com/ https://business.facebook.com/ https://google.com.br/ https://gstatic.com/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ http://www.paypalobjects.com https://www.googleoptimize.com https://static.zdassets.com/ https://device.clearsale.com.br https://dynamic.criteo.com www.rtb123.com conectiva.io analytics.tiktok.com cdn.targeting.voxus.com.br https://app.cartstack.com.br bat.bing.com https://static.hotjar.com https://service.maxymiser.net https://widget-mediator.zopim.com https://sslwidget.criteo.com https://bat.bing.com www.clarity.ms targeting.voxus.com.br https://script.hotjar.com/ https://tpc.googlesyndication.com https://*.rakuten.com https://*.linksynergy.com https://*.nxtck.com https://*.xg4ken.com https://*.googletagmanager.com *.converse.com.br *.collect.igodigital.com https://cdn.pmweb.com.br graph.facebook.com business.facebook.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://adobe.com fonts.googleapis.com *.cash.app converse.com.br https://fonts.googleapis.com https://magento.com *.fontawesome.com https://gstatic.com use.typekit.net p.typekit.net *.converse.com.br *.googleapis.com *.google.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://static.zdassets.com/ *.converse.com.br http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io commerce.adobe.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com qa-api.magedevteam.com * fcmregistrations.googleapis.com firebaseinstallations.googleapis.com k.clarity.ms bam.nr-data.net converse.com.br https://dpm.demdex.net https://amcglobal.sc.omtrdc.net www.google-analytics.com https://commerce.adobedtm.com https://commerce.adobedc.net https://*.snplow.net https://api.magento.com https://*.adobe.io https://performance.typekit.net https://www.sandbox.paypal.com https://www.paypalobjects.com https://www.paypal.com https://pilot-payflowlink.paypal.com https://commerce.adobe.io https://commerce.adobe.net https://qa-api.magedevteam.com https://*.sentry.io https://*.adyen.com http://magento.com https://magento.com http://stats.g.doubleclick.net https://stats.g.doubleclick.net http://www.google-analytics.com https://www.google-analytics.com www.facebook.com https://connect.facebook.net https://graph.facebook.com https://business.facebook.com https://t.elasticsuite.io https://analytics.google.com/ analytics.google.com https://ekr.zdassets.com/ https://conscooper.zendesk.com wss://widget-mediator.zopim.com https://analytics.tiktok.com targeting.voxus.com.br api.performa.ai https://www.google.com.br https://bat.bing.com/ https://api.ipify.org logs-01.loggly.com https://api.voxus.tv https://conectiva.io https://coopershoes.zendesk.com/ https://*.clarity.ms/ https://vc.hotjar.io/ https://pagead2.googlesyndication.com/ https://measurement-api.criteo.com/ https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.com.br *.converse.com.br http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ connect.facebook.net graph.facebook.com business.facebook.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src converse.com.br bat.bing.com k.clarity.ms www.google.com commerce.adobedc.net analytics.tiktok.com *.converse.com.br *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net https://www.gstatic.com https://fonts.gstatic.com www.redwolfairsoft.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com airwallex.com *.airwallex.com google.com *.google.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com www.redwolfairsoft.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com www.redwolfairsoft.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com checkout.airwallex.com checkout-demo.airwallex.com h.online-metrix.net/ static-demo.airwallex.com pci-api-demo.airwallex.com demo-pacybsmock.airwallex.com imgs.signifyd.com airwallex.com *.airwallex.com *.cdn-apple.com www.google.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com https://www.google.com www.redwolfairsoft.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net google.com *.online-metrix.net/ checkout.airwallex.com imgs.signifyd.com checkout-demo.airwallex.com airwallex.com *.airwallex.com *.google.com www.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com www.redwolfairsoft.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com checkout.airwallex.com checkout-demo.airwallex.com h.online-metrix.net/ static-demo.airwallex.com static.airwallex.com cdn-scripts.signifyd.com bws-demo.airwallex.com bws.airwallex.com imgs.signifyd.com h64.online-metrix.net airwallex.com *.airwallex.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com https://www.google.com https://www.gstatic.com www.redwolfairsoft.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net www.redwolfairsoft.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.redwolfairsoft.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com checkout.airwallex.com checkout-demo.airwallex.com h.online-metrix.net/ bws-demo.airwallex.com bws.airwallex.com api-demo.airwallex.com api.airwallex.com o11y-demo.airwallex.com o11y.airwallex.com imgs.signifyd.com airwallex.com *.airwallex.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io www.redwolfairsoft.com 'self' 'unsafe-inline'; child-src airwallex.com *.airwallex.com www.redwolfairsoft.com http: https: blob: 'self' 'unsafe-inline'; default-src airwallex.com *.airwallex.com www.redwolfairsoft.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'self'; report-uri https://taogroup.com/wp-json/tao-sec/v1/csp-report; 1
default-src * 'self' 'unsafe-eval' 'unsafe-inline' data: blob: ws: wss:; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://accounts.google.com https://apis.google.com https://cdn.goentri.com https://cdn.razorpay.com https://cdn.replit.com https://cdn.segment.com https://checkout.razorpay.com https://connect.facebook.net https://cross-border-cdn.razorpay.com https://elements.stytch.com https://fast.wistia.net https://googleads.g.doubleclick.net https://hcaptcha.com https://*.hcaptcha.com https://js.stripe.com https://sp.replit.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com; worker-src 'self' blob:; report-uri https://o1151714.ingest.us.sentry.io/api/4509669501698048/security/?sentry_key=7eb3d90eb4660416caf507087367e67e&sentry_environment=production&sentry_release=22d66a37; report-to csp-endpoint; 1
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/  https://widget.trustpilot.com;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://appleid.cdn-apple.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com *.myheritage.fr https://www.myheritage.fr  'unsafe-eval' 'nonce-0e72d348dfc4383bf16b6eb44c7291fa' 'strict-dynamic' https://widget.trustpilot.com https://invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style  https://widget.trustpilot.com;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io https://www.google.com/recaptcha/enterprise/* https://www.google.com/recaptcha/enterprise/ https://www.google.com/recaptcha/enterprise/clr https://www.google.com/recaptcha/ https://maps.googleapis.com https://people.googleapis.com https://translate-pa.googleapis.com *.myheritage.fr https://widget.trustpilot.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:  https://widget.trustpilot.com https://*.trustpilot.com;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=report&canonical_page_id=/company/home/ 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' shop2gether.com.br *.shop2gether.com.br wake-components.fbitsstatic.net shop2gether.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br gstatic.com *.criteo.com *.criteo.net *.g.doubleclick.net *.google.com.br *.googleadservices.com static.zdassets.com clarity.ms assets.zendesk.com *.creativecdn.com *.zdassets.com shop2gether.zendesk.com widget-mediator.zopim.com *.clarity.ms td.doubleclick.net icomm-public.s3.amazonaws.com vm.icommgroup.com.br:3005 *.icommgroup.com.br:3005 *.icommgroup.com.br s3.sa-east-1.amazonaws.com *.infraicommgroup.com:3005 *.infraicommgroup.com n8n.icommgroup.com.br *.hotjar.com koin-custom-conector-gateway.fbits.net static.hotjar.com static.fbits.net payments.koin.com.br *.pinterest.com *.useinsider.com *.api.useinsider.com nocodb.infraicommgroup.com:8080 nocodb.infraicommgroup.com *.varify.io *.wepowerconnections.com *.sciencebehindecommerce.com *.zenaps.com *.awin1.com *.dwin1.com recommendationv2.api.useinsider.com wake-commerce-scripts.omni.chat viacep.com.br nominatim.openstreetmap.org trackings.nemu.com.br openfpcdn.io api.bigdatacloud.net firebase.googleapis.com cdn.jsdelivr.net appleid.cdn-apple.com src.mastercard.com api.fpjs.io *.smarthint.co analytics.tiktok.com s.pinimg.com bat.bing.net bat.bing.com *.bing.com *.bing.net googleads.g.doubleclick.net *.doubleclick.net z.asbmit.com artfut.com pafutos.com lemkmio.com ad.admitad.com; frame-ancestors *.shop2gether.com.br shop2gether.com.br; report-uri https://pub-csp.fbits.net/1d2ada4d-4e07-4a9f-a734-9df2c6c4c037; report-to csp-endpoint; worker-src 'self' blob:; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://cdnjs.cloudflare.com *.cloudfront.net *.googleapis.com *.webformatlabs.com *.pu.subcom.it *.passionebeauty.com https://fonts.gstatic.com *.zdassets.com *.zopim.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://forms-eu1.hsforms.com *.zdassets.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.bolt.com *.passionebeauty.com cloudfront.net self https: *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com *.bolt.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.firework.com *.fwcdn1.com *.fwcdn2.com *.fwcdn3.com self https: integration.api.scalapay.com api.scalapay.com consentcdn.cookiebot.com www.paypalobjects.com *.hipay-tpp.com *.hipay.com *.facebook.com www.youtube.com www.twitter.com *.nr-data.net *.criteo.net/ *.criteo.com/ *.hotjar.com https://optimize.google.com https://*.adform.net https://cdn.smooch.io/ *.hsforms.com *.hubspot.com https://*.hs-sites-eu1.com *.zdassets.com *.zopim.com https://app-eu1.hubspot.com *.typeform.com https://passione-toolkit.replit.app/ *.cloudfront.net *.passionebeauty.com *.omtrdc.net *.demdex.net assets.adobedtm.com cm.everesttech.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net commerce.adobe.io widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net data: https://images.unsplash.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.firework.com *.fw-assets1.com *.fwcdn1.com *.fwcdn2.com *.fwcdn3.com asset.fwcdn2.com *.asset.fwcdn2.com asset.fwcdn1.com *.asset.fwcdn1.com fireworktv.com *.fireworktv.com p2.fwpixel.com *.p2.fwpixel.com integration.api.scalapay.com api.scalapay.com www.sandbox.paypal.com *.hipay-tpp.com *.hipay.com *.cloudfront.net *.googleadservices.com *.google-analytics.com https://www.googletagmanager.com www.google.it *.google.com *.webformatlabs.com *.pu.subcom.it *.passionebeauty.com *.criteo.net/ *.criteo.com/ *.facebook.com https://s.thebrighttag.com https://beacon.krxd.net https://ad.yieldlab.net https://matching.ivitrack.com https://visitor.omnitagjs.com https://*.adform.net https://ups.analytics.yahoo.com https://eb2.3lift.com https://criteo-sync.teads.tv https://sync-t1.taboola.com https://rtb-csync.smartadserver.com https://pixel.rubiconproject.com https://simage2.pubmatic.com https://exchange.mediavine.com https://contextual.media.net https://ad.360yield.com https://ib.adnxs.com https://dis.criteo.com https://cm.g.doubleclick.net https://x.bidswitch.net https://r.casalemedia.com https://sync.outbrain.com https://match.sharethrough.com https://id5-sync.com https://criteo-partners.tremorhub.com https://sync-criteo.ads.yieldmo.com *.hsforms.com *.hubspot.com https://track.hubspot.com https://perf-eu1.hsforms.com https://cta-eu1.hubspot.com https://js-eu1.hubspot.com https://static.hubspot.com *.hsappstatic.net https://optimize.google.com *.googleapis.com *.etrusted.com https://analytics.tiktok.com https://cdn.qapla.it https://s.pinimg.com *.zdassets.com *.zopim.com https://imgsct.cookiebot.com https://c.clarity.ms *.postrelease.com app.passionebeauty.test fireworkapi1.com asset.fwcdn3.com fireworkadservices1.com asset.fwbiz1.com asset.fwpub1.com asset.fwadcdn1.com cdn1.fireworkn.com fireworkanalytics.com *.agora.io *.sd-rtn.com business.firework.com api.firework.com ig-importer.firework-prod.com cdn.fw-assets1.com *.execute-api.us-west-2.amazonaws.com *.omtrdc.net *.demdex.net 'self' blob: *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com commerce.adobe.io geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com beacon-qa.magento-datasolutions.com beacon-stage.magento-ds.com beacon.magento-ds.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.bolt.com *.commerce-quick-checkout.com http://localhost:8082 https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com unpkg.com https://maps.googleapis.com https://player.vimeo.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.firework.com *.fw-assets1.com *.fwcdn1.com *.fwcdn2.com *.fwcdn3.com asset.fwcdn1.com *.asset.fwcdn1.com asset.fwcdn3.com *.asset.fwcdn3.com asset.fwcdn2.com *.asset.fwcdn2.com https://cdnjs.cloudflare.com integration.api.scalapay.com api.scalapay.com *.paypal.com *.cloudfront.net *.fontawesome.com *.google-analytics.com googletagmanager.com *.gstatic.com js-agent.newrelic.com *.webformatlabs.com *.pu.subcom.it *.passionebeauty.com consent.cookiebot.com consentcdn.cookiebot.com bam.eu01.nr-data.net https://www.googleoptimize.com https://optimize.google.com *.criteo.net/ *.criteo.com/ *.hotjar.com s7.addthis.com *.hipay-tpp.com *.hipay.com zn1ynnliufrct75cb-paypalxm.siteintercept.qualtrics.com www.recaptcha.net *.facebook.com *.doubleclick.net https://*.adform.net *.hs-scripts.com *.hs-banner.com *.hs-analytics.net *.hscollectedforms.net *.hsleadflows.net *.hsforms.net *.hubspot.com *.hubspotfeedback.com https://www.googleanalytics.com https://cdn.logico3c.com *.webgains.io *.solocpm.com *.tangooserver.com https://api.qapla.it *.googleapis.com *.onyourmap.com *.mapbox.com https://analytics.tiktok.com *.euh.stape.io *.euh.stape.net https://ajax.googleapis.com https://s.pinimg.com *.zdassets.com *.zopim.com *.clarity.ms https://js-eu1.usemessages.com https://pagead2.googlesyndication.com https://app-eu1.hubspot.com https://rum.hlx.page *.goaffpro.com *.hsadspixel.net *.typeform.com *.impactcdn.com cdn.jsdelivr.net/npm/photoswipe/ player.vimeo.com *.omtrdc.net *.demdex.net cm.everesttech.net bat.bing.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.googleapis.com https://cdnjs.cloudflare.com integration.api.scalapay.com api.scalapay.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com *.hipay-tpp.com *.hipay.com *.paypal.com *.cloudfront.net *.gstatic.com js-agent.newrelic.com *.webformatlabs.com *.pu.subcom.it *.passionebeauty.com *.facebook.com https://optimize.google.com *.etrusted.com https://api.qapla.it *.zdassets.com *.zopim.com https://webgains.io *.typeform.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com *.yotpo.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.firework.com *.fw-assets1.com *.fwcdn1.com *.fwcdn2.com *.fwcdn3.com *.live-video.net *.playback.live-video.net cdn4.fireworktv.com *.cdn4.fireworktv.com 'self' data: blob: * *.passionebeauty.com 'self' 'unsafe-inline'; manifest-src *.cloudfront.net 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com p13n-mr.adobe.io *.adobedc.net *.demdex.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.bolt.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com commerce.adobedtm.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://maps.googleapis.com https://player.vimeo.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.firework.com *.live-video.net *.playback.live-video.net *.agora.io *.sd-rtn.com *.execute-api.us-west-2.amazonaws.com *.pixelsdata.com wss: p2.fwpixel.com *.p2.fwpixel.com fireworkapi1.com *.fireworkapi1.com fireworkadservices1.com *.fireworkadservices1.com fireworkanalytics.com *.fireworkanalytics.com consentcdn.cookiebot.com api-staging.oney.io api.oney.io integration.api.scalapay.com api.scalapay.com *.hipay-tpp.com *.hipay.com *.cloudfront.net consent.cookiebot.com *.doubleclick.net *.pu.subcom.it *.webformatlabs.com *.passionebeauty.com bam.eu01.nr-data.net pagead2.googlesyndication.com *.facebook.com zn1ynnliufrct75cb-paypalxm.siteintercept.qualtrics.com www.recaptcha.net *.hotjar.com commerce.adobe.io *.criteo.net/ *.criteo.com/ *.hubspot.com *.hs-banner.com *.hscollectedforms.net *.hsforms.com https://*.adform.net *.webgains.io *.googleapis.com *.onyourmap.com *.mapbox.com api.qapla.it https://analytics.tiktok.com *.euh.stape.io *.euh.stape.net https://s.pinimg.com *.zendesk.com https://passionebeauty-it.zendesk.com *.zdassets.com *.zopim.com *.clarity.ms https://rum.hlx.page *.hubapi.com *.pinterest.com *.typeform.com passionebeauty.sjv.io *.fireworktv.com wss://fireworkapi1.com asset.fwcdn3.com asset.fwcdn1.com asset.fwcdn2.com asset.fwbiz1.com asset.fwpub1.com asset.fwadcdn1.com cdn1.fireworkn.com business.firework.com api.firework.com ig-importer.firework-prod.com cdn.fw-assets1.com *.2o7.net *.omtrdc.net assets.adobedtm.com cm.everesttech.net cdn.scalapay.com bat.bing.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.gstatic.com *.google-analytics.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com *.gstatic.com 'self' data: fonts.googleapis.com fonts.gstatic.com *.hotjar.com *.clickdimensions.com *.permaleads.ch *.mouseflow.com *.smart-business-intuition.com data: 'self' 'unsafe-inline'; form-action www.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com www.linkedin.com linkedin.com *.clickdimensions.com *.permaleads.ch *.mouseflow.com *.smart-business-intuition.com 'self'; frame-src bid.g.doubleclick.net youtube.com *.youtube-nocookie.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com landofcoder.com www.paypal.com www.sandbox.paypal.com www.youtube.com *.hotjar.com *.google.com www.facebook.com www.linkedin.com linkedin.com *.clickdimensions.com *.permaleads.ch *.mouseflow.com *.smart-business-intuition.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com youtube.com validator.swagger.io magefan.com cm.magefan.com *.disqus.com https://img.youtube.com *.hsforms.net *.hsforms.com 'self' data: fpdbs.paypal.com fpdbs.sandbox.paypal.com s.ytimg.com t.paypal.com www.google-analytics.com www.paypal.com www.paypalobjects.com px.ads.linkedin.com stats.g.doubleclick.net *.googleapis.com *.gstatic.com www.linkedin.com linkedin.com googletagmanager.com www.facebook.com master-7rqtwti-mnyjem72y4b5c.eu-5.magentosite.cloud img.youtube.com *.clickdimensions.com *.permaleads.ch *.mouseflow.com *.smart-business-intuition.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ landofcoder.com *.disqus.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com js.braintreegateway.com t.paypal.com video.google.com www.paypal.com www.paypalobjects.com www.sandbox.paypal.com google.com www.google.com gstatic.com www.gstatic.com *.googleapis.com *.hotjar.com *.fontawesome.com connect.facebook.net apis.google.com www.linkedin.com linkedin.com platform.linkedin.com *.clickdimensions.com *.permaleads.ch *.mouseflow.com *.smart-business-intuition.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.fontawesome.com *.googleapis.com *.gstatic.com *.clickdimensions.com *.permaleads.ch *.mouseflow.com *.smart-business-intuition.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com landofcoder.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.fontawesome.com www.google-analytics.com stats.g.doubleclick.net *.hotjar.com *.hotjar.io *.clickdimensions.com *.permaleads.ch *.mouseflow.com *.smart-business-intuition.com *.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.klaviyo.com *.paypalobjects.com *.licdn.com *.clarity.ms https://ttz41d7zd1.execute-api.eu-west-1.amazonaws.com/Prod/js storage.googleapis.com cdn.mxpnl.com *.finance-calculator.co.uk angus.finance-calculator.co.uk *.collector-11207.tvsquared.com collector-11207.tvsquared.com bat.bing.com cdn.sub2tech.com *.sub2tech.com dmtrk.net dmtrk.com r1.dmtrk.net r1.dmtrk.com r2.dmtrk.net r2.dmtrk.com r3.dmtrk.net r3.dmtrk.com ddlnk.net ddlnk.com r1.ddlnk.net r1.ddlnk.com r2.ddlnk.net r2.ddlnk.com r3.ddlnk.net r3.ddlnk.com t.trackedlink.net r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net webinsight.s3.amazonaws.com static.trackedweb.net trackedweb.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net i.emlfiles.com i.emlfiles1.com i.emlfiles2.com i.emlfiles3.com i.emlfiles4.com i.emlfiles5.com i.emlfiles6.com i.emlfiles7.com i.emlfiles8.com i.emfiles9.com r1.dotmailer-surveys.com r2.dotmailer-surveys.com r3.dotmailer-surveys.com r1.dotdigital-surveys.com r2.dotdigital-surveys.com r3.dotdigital-surveys.com *.dotdigital-pages.com script.hotjar.com player.vimeo.com www.googleoptimize.com *.bookingbug.com *.paypal.com static.trackedweb.net *.trackedlink.net *.gstatic.com static.zdassets.com *.trustpilot.com optimize.google.com tagmanager.google.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.facebook.net *.cquotient.com services.postcodeanywhere.co.uk cdn.cquotient.com www.googletagmanager.com googleads.g.doubleclick.net https://iploc.tryzens-analytics.com:12443 *.pcapredict.com maps.googleapis.com services.postcodeanywhere.co.uk *.collector-11207.tvsquared.com collector-11207.tvsquared.com bat.bing.com cdn.sub2tech.com *.collector-11207.tvsquared.com collector-11207.tvsquared.com *.sub2tech.com www.google-analytics.com p.cquotient.com static.hotjar.com www.googleadservices.com *.adyen.com geolocation.onetrust.com cdn.cookielaw.org *.googletagmanager.com extend.vimeocdn.com *.christopherward.com *.appointedd.com *.ratepay.com unpkg.com *.tryzens-analytics.com tally.so *.tally.so px4.ads.linkedin.com bat.bing.net *.getflowbox.com *.flbx.io; style-src 'self' 'unsafe-inline' *.klaviyo.com angus.finance-calculator.co.uk storage.googleapis.com *.collector-11207.tvsquared.com collector-11207.tvsquared.com bat.bing.com cdn.sub2tech.com *.sub2tech.com *.paypalobjects.com dmtrk.net dmtrk.com r1.dmtrk.net r1.dmtrk.com r2.dmtrk.net r2.dmtrk.com r3.dmtrk.net r3.dmtrk.com ddlnk.net ddlnk.com r1.ddlnk.net r1.ddlnk.com r2.ddlnk.net r2.ddlnk.com r3.ddlnk.net r3.ddlnk.com t.trackedlink.net r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net webinsight.s3.amazonaws.com static.trackedweb.net trackedweb.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net i.emlfiles.com i.emlfiles1.com i.emlfiles2.com i.emlfiles3.com i.emlfiles4.com i.emlfiles5.com i.emlfiles6.com i.emlfiles7.com i.emlfiles8.com i.emfiles9.com r1.dotmailer-surveys.com r2.dotmailer-surveys.com r3.dotmailer-surveys.com r1.dotdigital-surveys.com r2.dotdigital-surveys.com r3.dotdigital-surveys.com *.adyen.com optimize.google.com tagmanager.google.com foursixty.com cdn.jsdelivr.net fonts.googleapis.com services.postcodeanywhere.co.uk cdn.cookielaw.org *.christopherward.com px4.ads.linkedin.com bat.bing.net *.getflowbox.com *.flbx.io; frame-src 'self' *.doubleclick.net storage.googleapis.com *.surveymonkey.com *.finance-calculator.co.uk *.collector-11207.tvsquared.com collector-11207.tvsquared.com bat.bing.com cdn.sub2tech.com *.sub2tech.com *.dotdigital-pages.com *.bookingbug.com vars.hotjar.com *.paypal.com *.paypalobjects.com *.google.com widget.trustpilot.com *.youtube.com *.vimeo.com optimize.google.com www.facebook.com *.klarnaservices.com *.adyen.com extend.vimeocdn.com *.appointedd.com tally.so *.tally.so https://www.googletagmanager.com https://data.christopherward.com px4.ads.linkedin.com bat.bing.net *.getflowbox.com *.flbx.io; child-src 'none'; img-src 'self' data: *.doubleclick.net *.vimeocdn.com *.clarity.ms px.ads.linkedin.com c.bing.com storage.googleapis.com angus.finance-calculator.co.uk *.paypalobjects.com dmtrk.net dmtrk.com r1.dmtrk.net r1.dmtrk.com r2.dmtrk.net r2.dmtrk.com r3.dmtrk.net r3.dmtrk.com ddlnk.net ddlnk.com r1.ddlnk.net r1.ddlnk.com r2.ddlnk.net r2.ddlnk.com r3.ddlnk.net r3.ddlnk.com t.trackedlink.net r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net webinsight.s3.amazonaws.com static.trackedweb.net trackedweb.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net i.emlfiles.com i.emlfiles1.com i.emlfiles2.com i.emlfiles3.com i.emlfiles4.com i.emlfiles5.com i.emlfiles6.com i.emlfiles7.com i.emlfiles8.com i.emfiles9.com r1.dotmailer-surveys.com r2.dotmailer-surveys.com r3.dotmailer-surveys.com r1.dotdigital-surveys.com r2.dotdigital-surveys.com r3.dotdigital-surveys.com www.jrni.com *.bookingbug.com *.paypal.com stats.g.doubleclick.net *.collector-11207.tvsquared.com collector-11207.tvsquared.com bat.bing.com cdn.sub2tech.com *.sub2tech.com edge.disstg.commercecloud.salesforce.com *.collector-11207.tvsquared.com collector-11207.tvsquared.com cdn.sub2tech.com *.sub2tech.com www.google-analytics.com *.paypalobjects.com static.secure-afterpay.com.au um.simpli.fi www.instagram.com www.googletagmanager.com services.postcodeanywhere.co.uk pixel.mathtag.com aa.agkn.com cx.atdmt.com www.facebook.com *.pbbl.co *.optimove.net *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.gstatic.com *.googleapis.com *.google.com *.adyen.com t1.stormiq.com cdn.cookielaw.org *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.christopherward.com *.cloudflare.com *.ctfassets.net px4.ads.linkedin.com bat.bing.net *.getflowbox.com *.flbx.io; font-src 'self' data: www.christopherward.com fonts.gstatic.com res.cloudinary.com *.paypalobjects.com googleads.g.doubleclick.net px4.ads.linkedin.com bat.bing.net *.getflowbox.com *.flbx.io; connect-src 'self' *.onetrust.com *.mixpanel.com *.klaviyo.com *.collector-11207.tvsquared.com g.clarity.ms clarity.ms collector-11207.tvsquared.com bat.bing.com cdn.sub2tech.com *.sub2tech.com angus.finance-calculator.co.uk dmtrk.net dmtrk.com r1.dmtrk.net r1.dmtrk.com r2.dmtrk.net r2.dmtrk.com r3.dmtrk.net r3.dmtrk.com ddlnk.net ddlnk.com r1.ddlnk.net r1.ddlnk.com r2.ddlnk.net r2.ddlnk.com r3.ddlnk.net r3.ddlnk.com t.trackedlink.net r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net webinsight.s3.amazonaws.com static.trackedweb.net trackedweb.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net i.emlfiles.com i.emlfiles1.com i.emlfiles2.com i.emlfiles3.com i.emlfiles4.com i.emlfiles5.com i.emlfiles6.com i.emlfiles7.com i.emlfiles8.com i.emfiles9.com r1.dotmailer-surveys.com r2.dotmailer-surveys.com r3.dotmailer-surveys.com r1.dotdigital-surveys.com r2.dotdigital-surveys.com r3.dotdigital-surveys.com wss://*.hotjar.com *.hotjar.com *.hotjar.io *.paypal.com *.adyen.com widget.trustpilot.com wss://widget-mediator.zopim.com christopherward.zendesk.com *.trackedweb.net ekr.zdassets.com https://ttz41d7zd1.execute-api.eu-west-1.amazonaws.com/Prod/js* *.klarnaevt.com stats.g.doubleclick.net www.facebook.com https://www.tryzens-analytics.com:12280 *.pinterest.com *.klarnauserservices.com *.optimove.events www.google-analytics.com *.hotjar.com *.optimove.net *.hotjar.io https://uat.tryzens-analytics.com:12280 api.cquotient.com services.postcodeanywhere.co.uk cdn.cookielaw.org *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat google.com/pay extend.vimeocdn.com unpkg.com *.tryzens-analytics.com player.vimeo.com download-video-ak.vimeocdn.com px.ads.linkedin.com https://data.christopherward.com px4.ads.linkedin.com bat.bing.net *.getflowbox.com *.flbx.io; form-action 'self' http://portal.afterpay.com http://portal-sandbox.afterpay.com *.playground.klarna.com *.klarna.com *.afterpay.com www.facebook.com *.collector-11207.tvsquared.com collector-11207.tvsquared.com bat.bing.com cdn.sub2tech.com *.sub2tech.com *.paypal.com *.adyen.com https://data.christopherward.com px.ads.linkedin.com px4.ads.linkedin.com bat.bing.net *.getflowbox.com *.flbx.io; media-src 'self' static.zdassets.com res.cloudinary.com *.akamaized.net download-video-ak.vimeocdn.com player.vimeo.com px4.ads.linkedin.com bat.bing.net *.getflowbox.com *.flbx.io;; report-uri https://289r1hnfc9.execute-api.eu-west-1.amazonaws.com/prod/chw-cspdata; 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' oqvestir.com.br *.oqvestir.com.br wake-components.fbitsstatic.net oqvestir.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br *.g.doubleclick.net *.doubleclick.net oqvestir.fbitsstatic.net *.criteo.com *.clarity.ms capig.shop2gether.com.br q.clarity.ms static.criteo.net clarity.ms sslwidget.criteo.com dynamic.criteo.com googleads.g.doubleclick.net gum.criteo.com bat.bing.com google.com.br googleadservices.com tags.creativecdn.com apigate.shop2gether.com.br o.clarity.ms *.creativecdn.com n8n.icommgroup.com.br *.icommgroup.com.br *.pinterest.com *.api.useinsider.com *.useinsider.com *.dwin1.com *.awin1.com *.zenaps.com *.sciencebehindecommerce.com *.wepowerconnections.com recommendationv2.api.useinsider.com wake-commerce-scripts.omni.chat trackings.nemu.com.br openfpcdn.io ipinfo.io api.bigdatacloud.net firebase.googleapis.com *.googleapis.com d1vrnvkozosezy.cloudfront.net *.infraicommgroup.com src.mastercard.com *.viacep.com.br viacep.com.br analytics.tiktok.com s.pinimg.com td.doubleclick.net bat.bing.net *.bing.com *.bing.net *.googleadservices.com artfut.com pafutos.com lemkmio.com ad.admitad.com z.asbmit.com pagead2.googlesyndication.com cep.awesomeapi.com.br firebaseio.com assets.mastercard.com; frame-ancestors *.oqvestir.com.br oqvestir.com.br; report-uri https://pub-csp.fbits.net/bf66cacb-9ede-4b63-acbf-4d72218da96d; report-to csp-endpoint; worker-src 'self' blob:; 1
default-src 'self'; script-src 'self' https://vercel.live https://challenges.cloudflare.com https://cdnjs.cloudflare.com https://cdn.arena.ai https://*.posthog.com https://www.googletagmanager.com https://static.cloudflareinsights.com https://www.google.com https://www.gstatic.com https://ah-cdn.merge.dev 'unsafe-inline' 'unsafe-eval'; script-src-elem 'self' https://vercel.live https://challenges.cloudflare.com https://cdnjs.cloudflare.com https://cdn.arena.ai https://*.posthog.com https://www.googletagmanager.com https://arena.ai https://static.cloudflareinsights.com/ https://www.google.com https://www.gstatic.com https://ah-cdn.merge.dev 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://challenges.cloudflare.com https://vercel.live https://us.posthog.com; img-src 'self' data: blob: https://challenges.cloudflare.com https://*.posthog.com https://vercel.live https://vercel.com https://*.27c852f3500f38c1e7786e2c9ff9e48f.r2.cloudflarestorage.com https://lh3.googleusercontent.com https://*.googletagmanager.com; connect-src 'self' https://arena.ai https://vercel.live wss://ws-us3.pusher.com https://*.posthog.com https://posthog.com https://challenges.cloudflare.com https://unpkg.com/@rive-app/ https://www.google-analytics.com https://*.google-analytics.com https://www.google.com https://*.27c852f3500f38c1e7786e2c9ff9e48f.r2.cloudflarestorage.com https://browser-intake-us3-datadoghq.com https://api.trigger.dev; frame-src 'self' https://vercel.live https://challenges.cloudflare.com https://www.google.com https://*.arena.site https://*.staging.arena.site https://ah-cdn.merge.dev; font-src 'self' data: https://vercel.live https://assets.vercel.com https://*.gstatic.com; worker-src 'self' blob: 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' stories.greenclimate.fund greenclimatefund.shorthandstories.com *.shorthand.com survey.alchemer.com cxppusa1formui01cdnsa01-endpoint.azureedge.net player.meta-fusion.com www.googletagmanager.com *.google-analytics.com www.clarity.ms scripts.clarity.ms snap.licdn.com ipmeta.io public-apj.mkt.dynamics.com www.youtube.com *.youtube.com s.ytimg.com; object-src 'none'; style-src 'self' 'unsafe-inline' fonts.googleapis.com use.typekit.net p.typekit.net; img-src 'self' data: stgcfwebsitetest.blob.core.windows.net i.vimeocdn.com img.youtube.com i.ytimg.com www.googletagmanager.com *.google-analytics.com *.doubleclick.net assets-apj.mkt.dynamics.com c.clarity.ms px.ads.linkedin.com stories.greenclimate.fund *.shorthand.com i.postimg.cc *.bing.com; media-src 'self' stories.greenclimate.fund; frame-src 'self' www.youtube.com www.youtube-nocookie.com player.vimeo.com surveys.greenclimate.fund gcf.meta-dcr.com www.googletagmanager.com *.shorthand.com; frame-ancestors 'self'; child-src 'self' blob:; font-src 'self' use.typekit.net fonts.gstatic.com; connect-src 'self' public-apj.mkt.dynamics.com assets-apj.mkt.dynamics.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com c.clarity.ms *.clarity.ms ipmeta.io px.ads.linkedin.com snap.licdn.com *.shorthand.com stories.greenclimate.fund www.gstatic.com cxppusa1formui01cdnsa01-endpoint.azureedge.net blob: 1
default-src 'self' blob: *.facebookcareers.com *.metacareers.com *.fbcdn.net *.facebook.com connect.facebook.net;script-src *.facebook.com *.fbcdn.net *.facebook.net 'nonce-qO0K4y4j' blob: 'self' https://www.googletagmanager.com/gtag/js https://www.googletagmanager.com https://*.youtube.com;style-src data: blob: 'unsafe-inline' *.facebookcareers.com *.metacareers.com *.fbcdn.net *.facebook.com 'unsafe-eval';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.metacareers.com:* lookaside.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' *.facebookcareers.com *.metacareers.com gateway.metacareers.com wss://gateway.metacareers.com https://analytics.google.com https://*.analytics.google.com https://*.google-analytics.com https://*.googletagmanager.com;font-src 'self' data: blob: *.facebookcareers.com *.metacareers.com *.fbcdn.net *.facebook.com connect.facebook.net;img-src 'self' data: blob: *.facebookcareers.com *.metacareers.com *.fbcdn.net *.facebook.com *.fbsbx.com https://*.google-analytics.com https://*.googletagmanager.com https://www.googletagmanager.com https://*.ytimg.com *.youtube.com jsv3.recruitics.com;media-src 'self' data: blob: *.facebookcareers.com *.metacareers.com *.fbcdn.net lookaside.fbsbx.com *.facebook.com connect.facebook.net;child-src 'self' data: blob: *.facebookcareers.com *.metacareers.com *.fbcdn.net *.facebook.com connect.facebook.net;frame-src 'self' *.facebook.com *.fbcdn.net *.fbsbx.com https://*.youtube.com;manifest-src 'self' data: blob: *.facebookcareers.com *.metacareers.com *.fbcdn.net *.facebook.com connect.facebook.net;object-src 'self' data: blob: *.facebookcareers.com *.metacareers.com *.fbcdn.net *.facebook.com connect.facebook.net;worker-src 'self' data: blob: *.facebookcareers.com *.metacareers.com *.fbcdn.net *.facebook.com connect.facebook.net;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=tr_exp&minimize=0; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://cdn.pushpushgo.com https://connect.facebook.net https://accounts.google.com https://www.google.com https://www.gstatic.com https://ajax.googleapis.com https://maps.googleapis.com https://maps.gstatic.com https://app.getreview.pl https://consent.cookiebot.com https://consentcdn.cookiebot.com https://trivernapl.user.com https://widget.user.com https://cdn.thulium.com https://tags.creativecdn.com; style-src 'self' 'unsafe-inline' https://accounts.google.com https://fonts.googleapis.com https://app.getreview.pl https://*.thulium.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://hub.triverna.pl https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com https://www.google.com https://www.googleapis.com https://maps.googleapis.com https://maps.gstatic.com https://app.getreview.pl https://graph.facebook.com https://www.facebook.com https://*.pushpushgo.com https://*.cookiebot.com https://*.user.com https://ams.creativecdn.com https://*.thulium.com wss://*.thulium.com; frame-src 'self' https://www.googletagmanager.com https://accounts.google.com https://consentcdn.cookiebot.com https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://mapa-turystyczna.pl https://www.facebook.com https://app.getreview.pl https://*.thulium.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; report-uri /api/csp-report 1
default-src data: blob: https: http: 'self' *.extron.com *.google.com *.google-analytics.com *.googletagmanager.com *.adobe.com https://*.clarity.ms 'unsafe-inline' 'unsafe-eval'; connect-src 'self' blob: data: https://*.bitmovin.com https://licensing.bitmovin.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net https://*.google.com https://*.media.azure.net https://*.bing.microsoft.com https://*.googleapis.com https://*.clarity.ms https://hh.extron.com https://hh-stg.extron.com https://hh-dev.extron.com https://cdn.linkedin.oribi.io https://px.ads.linkedin.com https://*.mediakind.com; media-src 'self' https://*.extron.com https://*.streaming.mediakind.com blob: data:; worker-src 'self' blob:; child-src 'self' https://*.extron.com https://mediastg.extron.com blob:; frame-src 'self' https://*.extron.com https://mediastg.extron.com https://app.powerbi.com https://*.powerbi.com blob:; frame-ancestors 'self' https://*.extron.com 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.oney.io *.staging.oney.io *.fontawesome.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.gelproximity.com *.hipay-tpp.com *.hipay.com *.googleapis.com https://www.googletagmanager.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.openstreetmap.org *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://maps.googleapis.com *.hipay.com *.googleapis.com *.oney.io *.staging.oney.io http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.gelproximity.com *.hipay.com *.hipay-tpp.com https://mpsnare.iesnare.com *.zdassets.com *.zipchat.ai *.salesmanago.pl *.salesmanago.es *.salesmanago.com mpsnare.iesnare.com *.paypal.com *.googleapis.com *.oney.io *.staging.oney.io http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.hipay.com *.googleapis.com *.fontawesome.com assets.braintreegateway.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.zdassets.com data: mpsnare.iesnare.com *.googleapis.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.zendesk.com *.zdassets.com *.zopim.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.openstreetmap.org https://maps.googleapis.com *.hipay-tpp.com *.hipay.com wss://mpsnare.iesnare.com *.googleapis.com *.oney.io *.staging.oney.io http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.gstatic.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; default-src data: *.youtube.com *.youtu.be *.vimeo.com *.google.com *.google-analytics.com *.googletagmanager.com cdn.alireviews.io cdn.jsdelivr.net *.alicdn.com *.weaverse.io *.shopify.com *.myshopify.com 'self' https://cdn.shopify.com https://shopify.com 'nonce-bf10748a9287a11e69c3f156c3e8e084'; frame-ancestors 'none'; style-src *.weaverse.io *.shopify.com *.myshopify.com 'self' 'unsafe-inline' https://cdn.shopify.com; connect-src vimeo.com *.google-analytics.com *.weaverse.io *.shopify.com *.myshopify.com 'self' https://cdn.shopify.com/ https://monorail-edge.shopifysvc.com https://checkout.westside.com https://my-westside.myshopify.com 1
default-src 'self'; script-src 'self' *.hubspot.com *.hsforms.com *.hs-sites.com *.hubspotusercontent.net *.hubapi.com *.hs-analytics.net *.hscollectedforms.net *.hs-banner.com *.hsadspixel.net static.hsappstatic.net code.jquery.com cdn.datatables.net cdn.jsdelivr.net maps.googleapis.com d2wy8f7a9ursnm.cloudfront.net *.oracle.com *.oraclecorp.com *.oraclecloud.com *.custhelp.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.facebook.net *.rnengage.com platform.twitter.com platform.linkedin.com *.banrural.niu.marketing banrural.niu.marketing https://*.hotjar.com https://*.hotjar.io https://*.hotjarcdn.com *.google.com 'strict-dynamic' 'nonce-O396/vKSoHT41YzrgUZY/w==' 'nonce-UXf1NOAOXMS/xI0qCZfgjg=='; style-src 'self' tailwindcss.com *.hubspot.com *.hsforms.com *.hs-sites.com *.hubspotusercontent.net *.fs1.hubspotusercontent-na1.net fonts.googleapis.com *.custhelp.com *.hsappstatic.net cdn.datatables.net cdn.jsdelivr.net *.banrural.niu.marketing banrural.niu.marketing https://*.hotjar.com https://*.hotjar.io https://*.hotjarcdn.com *.googletagmanager.com *.google.com; img-src 'self' data: blob: www.tailwindcss.com *.hubspot.com *.hsforms.com *.hs-sites.com *.hubspotusercontent.net *.hubspotusercontent-na1.net maps.googleapis.com *.gstatic.com forms.hsforms.com *.custhelp.com *.hsappstatic.net *.banrural.com.gt *.banrural.niu.marketing banrural.niu.marketing *.facebook.com connect.facebook.net px.ads.linkedin.com *.rnengage.com *.google.com *.google.com.gt *.googletagmanager.com *.google-analytics.com https://*.hotjar.com https://*.hotjar.io https://*.hotjarcdn.com; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com *.hubspotusercontent-na1.net *.custhelp.com *.banrural.niu.marketing banrural.niu.marketing static.hsappstatic.net; frame-src 'self' https://i-a.co blob: https://www.youtube.com https://docs.google.com https://www.google.com https://google.com https://www.banrural.com.gt https://21994660.fs1.hubspotusercontent-na1.net https://50794169.fs1.hubspotusercontent-na1.net *.hubspot.com *.hsforms.com *.hsforms.net play.hubspotvideo.com https://*.jotform.com *.oracle.com *.oraclecloud.com *.custhelp.com *.googletagmanager.com td.doubleclick.net platform.twitter.com banrural-klaro.tiiny.site https://*.hotjar.com; connect-src *.on.aws *.run.app https://stats.g.doubleclick.net https://analytics.ahrefs.com https://ad.doubleclick.net js.hs-banner.com banrural.com.gt unpkg.com *.contentsquare.net *.fs1.hubspotusercontent-na1.net 'self' https://static.hsappstatic.net https://js.hsforms.net static.hsappstatic.net *.hubspot.com *.hsforms.com *.hs-sites.com *.hubapi.com *.hubspotusercontent.net d2wy8f7a9ursnm.cloudfront.net *.oracle.com *.oraclecorp.com *.oraclecloud.com *.custhelp.com forms.hscollectedforms.net *.google.com *.google.com.gt *.googletagmanager.com *.google-analytics.com maps.googleapis.com *.banrural.niu.marketing banrural.niu.marketing px.ads.linkedin.com sessions.bugsnag.com otlp.bugsnag.com in.hotjar.com content.hotjar.io ws.hotjar.com wss://*.hotjar.com https://*.hotjar.com https://*.hotjar.io; worker-src 'self' blob:; upgrade-insecure-requests 1
form-action 'self' https://uwosh.tfaforms.net https://www.facebook.com/tr/; frame-src 'self' https://www.googletagmanager.com https://*.doubleclick.net https://syndicatedsearch.goog https://*.adtrafficquality.google https://www.google.com https://tr.snapchat.com https://player.vimeo.com https://www.youtube.com https://static.addtoany.com https://www.facebook.com https://public.tableau.com https://bbox.blackbaudhosting.com https://cdn.yoshki.com https://cdnapisec.kaltura.com; frame-ancestors 'self'; object-src 'none'; report-uri https://sentry.it.uwosh.edu/api/3/security/?sentry_key=a83fa724347d841bd65fdab57f19925a; report-to csp-endpoint 1
default-src 'self'; object-src 'none'; base-uri 'none'; script-src 'nonce-6754e58bb3051fcd3efb5fc33fc818b2' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://at.alicdn.com; img-src 'self' data: https: http: blob:; connect-src 'self' https: wss:; frame-src 'self' https: http:; media-src 'self' data: https: http: blob:; worker-src 'self' blob: 1
default-src 'self' 'unsafe-inline' www.uscc.gov www.google.com analytics.google.com fonts.googleapis.com www.googletagmanager.com www.gstatic.com fonts.gstatic.com use.fontawesome.com s7.addthis.com www.senate.gov; 1
default-src 'self'; script-src 'self' 'nonce-z7fy4gScSYM17TGUy4nutMq0YCvWkqUFhdeayITy' 'report-sample' https://challenges.cloudflare.com https://www.instagram.com https://play.pod.co; style-src 'self' 'unsafe-inline' 'report-sample'; img-src 'self' data: https://media.creativeboom.com; media-src 'self' https://media.creativeboom.com; font-src 'self'; connect-src 'self' https://media.creativeboom.com; frame-src https://www.youtube.com https://youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.instagram.com https://instagram.com https://challenges.cloudflare.com https://play.pod.co; base-uri 'self'; form-action 'self'; object-src 'none'; report-uri https://www.creativeboom.com/csp-report 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; media-src 'self' https: blob:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://courses.wallstreetmojo.com https://academy.wallstreetmojo.com https://india.wallstreetmojo.com https://wallstreetmojo.knorish.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; upgrade-insecure-requests 1
object-src 'none'; script-src 'self' chosen.jquery.js https://unpkg.com; script-src-attr 'self'; style-src 'self' chosen.css https://use.typekit.net; style-src-attr 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'nonce-8BFBEX0teGSL6xNjTrq5OA' 'strict-dynamic' https: http: https://www.googletagmanager.com https://*.googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://www.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://cdn.cookielaw.org https://js.qualified.com https://go.everlaw.com https://munchkin.marketo.net https://connect.facebook.net https://snap.licdn.com https://www.clarity.ms https://extend.vimeocdn.com https://player.vimeo.com https://app.leandata.com https://cdn-3.convertexperiments.com https://cdn-4.convertexperiments.com https://tracking.g2crowd.com https://ws.zoominfo.com https://ddwl4m2hdecbv.cloudfront.net https://www.datadoghq-browser-agent.com https://static.ads-twitter.com https://bat.bing.com; style-src 'self' 'nonce-8BFBEX0teGSL6xNjTrq5OA' https://www.googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com https://cdn.cookielaw.org; img-src 'self' data: blob: https://images.ctfassets.net https://www.googletagmanager.com https://*.googletagmanager.com https://googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://*.google-analytics.com https://*.g.doubleclick.net https://*.google.com https://*.google.co.uk https://google.com https://www.google.com https://www.google.co.uk https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://adservice.google.com https://ad.doubleclick.net https://ade.googlesyndication.com https://static.doubleclick.net https://www.facebook.com https://px.ads.linkedin.com https://*.linkedin.com https://www.clarity.ms https://b.clarity.ms https://c.clarity.ms https://c.bing.com https://bat.bing.com https://bat.bing.net https://t.co https://analytics.twitter.com https://i.vimeocdn.com https://f.vimeocdn.com https://fresnel.vimeocdn.com https://tracking.g2crowd.com https://ws.zoominfo.com https://munchkin.marketo.net https://go.everlaw.com https://cdn.cookielaw.org https://*.datadoghq.com https://alb.reddit.com; font-src 'self' data: https://fonts.gstatic.com https://cdn.cookielaw.org https://js.qualified.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.co.uk https://www.google.com https://google.com https://www.google.co.uk https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://ad.doubleclick.net https://stats.g.doubleclick.net https://go.everlaw.com https://munchkin.marketo.net https://*.marketo.net https://314-qpm-328.mktoresp.com https://314-qpm-328.mktoutil.com https://api.qualified.com https://*.qualified.com wss://*.qualified.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://www.clarity.ms https://*.clarity.ms https://www.facebook.com https://px.ads.linkedin.com https://snap.licdn.com https://player.vimeo.com https://vimeo.com https://*.vimeocdn.com https://*.datadoghq.com https://browser-intake-datadoghq.com https://browser-intake-us3-datadoghq.com https://*.bugsnag.com https://notify.bugsnag.com https://sessions.bugsnag.com https://ws.zoominfo.com https://js.zi-scripts.com https://ddwl4m2hdecbv.cloudfront.net https://graphql.contentful.com https://images.ctfassets.net https://*.algolia.net https://*.algolianet.com https://app.leandata.com https://cdn-3.convertexperiments.com https://cdn-4.convertexperiments.com https://tracking-api.g2.com https://bat.bing.com https://bat.bing.net https://static.ads-twitter.com https://pixel-config.reddit.com; frame-src 'self' https://www.googletagmanager.com https://td.doubleclick.net https://*.fls.doubleclick.net https://player.vimeo.com https://www.youtube.com https://www.youtube-nocookie.com https://app.leandata.com https://js.qualified.com https://*.qualified.com https://www.facebook.com https://go.everlaw.com https://www.google.com; media-src 'self' blob: data: https://player.vimeo.com https://*.vimeocdn.com https://js.qualified.com https://app.qualified.com https://videos.ctfassets.net; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; form-action 'self' https://go.everlaw.com https://www.facebook.com; report-uri https://browser-intake-us3-datadoghq.com/api/v2/logs?dd-api-key=pubef23fdfafee01c9da472a178f535c7dd&dd-evp-origin=content-security-policy&ddsource=csp-report; report-to csp-endpoint 1
default-src 'self'; script-src 'self' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' https: data: blob:; connect-src 'self' https:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com; object-src 'none'; base-uri 'self'; frame-ancestors 'none' 1
default-src 'self' data: *.facebook.com *.google.com.au *.tpc.googlesyndication.com *.stats.g.doubleclick.net *.google.co.in *.tgtag.io *.youtube.com *.abtasty.com *.gstatic.com *.googleapis.com *.amazonaws.com *.powerfront.com *.exacttarget.com *.adimo.co *.adimouat.co *.amazonaws.com *.formstack.com *.clarity.ms *.bing.com *.adswizz.com *.spotify.com *.googletagmanager.com *.adnxs.com *.aidemsrv.com *.criteo.com *.pinimg.com *.omguk.com *.abtasty.com *.bing.com *.cellardoor.co *.clarity.ms *.cquotient.com *.criteo.com *.criteo.net *.doubleclick.net *.facebook.com *.facebook.net *.force.com *.fouanalytics.com *.google.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.igodigital.com *.linkedin.com *.omneo.io *.penfolds.cn *.penfolds.com *.salesforce.com *.salesforceliveagent.com *.spotify.com *.subscribepro.com *.tealiumiq.com *.tiqcdn.com *.vimeocdn.com *.wolfblass.com *.pinterest.com *.linkedin.com *.licdn.com *.smartadserver.com analytics.tiktok.com *.tiktok.com analytics-ipv6.tiktokw.us ads.tiktok.com; script-src 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' *.site.com *.flippingbook.com *.criteo.net *.cquotient.com *.adyen.com *.doubleclick.net *.hotjar.com *.google.com *.googleapis.com *.google-analytics.com *.googleadservices.com *.gstatic.com *.paypal.com *.paypalobjects.com *.facebook.net *.googletagmanager.com *.datatoolscloud.net.au *.igodigital.com *.salesforceliveagent.com *.serving-sys.com *.force.com *.tiqcdn.com *.rezdy.com *.polyfill.io *.cloudflare.com *.subscribepro.com *.dwin1.com *.criteo.com *.adnxs.com *.salesforce.com *.wayin.com *.typekit.net *.ooyala.com *.licdn.com *.getwisp.co *.omneo.io *.vimeo.com *.formstack.com *.thefork.com.au *.resy.com *.tealiumiq.com *.yimg.com *.go2cloud.org *.adobe.com *.cloudfront.net *.sc-static.net sc-static.net *.adsrvr.org *.googleoptimize.com *.googleanalytics.com *.bing.com *.facebook.com *.google.com.au *.tpc.googlesyndication.com *.stats.g.doubleclick.net *.google.co.in *.onelink-edge.com *.inside-graph.com *.fouanalytics.com *.tgtag.io *.youtube.com *.byspotify.com *.abtasty.com *.tryzens.com *.powerfront.com *.exacttarget.com blob: *.adimo.co *.adimouat.co *.amazonaws.com *.clarity.ms *.bing.com *.adswizz.com *.spotify.com *.aidemsrv.com *.pinimg.com *.omguk.com commerceops.tryzens-analytics.com *.abtasty.com *.bing.com *.cellardoor.co *.clarity.ms *.cquotient.com *.criteo.com *.criteo.net *.doubleclick.net *.facebook.com *.facebook.net *.force.com *.fouanalytics.com *.google.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.igodigital.com *.linkedin.com *.omneo.io *.penfolds.cn *.penfolds.com *.salesforce.com *.salesforceliveagent.com *.spotify.com *.subscribepro.com *.tealiumiq.com *.tiqcdn.com *.vimeocdn.com *.wolfblass.com *.pinterest.com *.linkedin.com *.licdn.com *.smartadserver.com *.dyntrk.com unpkg.com https://hcaptcha.com https://*.hcaptcha.com *.site.com d.ratepay.com *.ratepay.com analytics.tiktok.com *.tiktok.com analytics-ipv6.tiktokw.us ads.tiktok.com *.cloudflareinsights.com s.yimg.com d.yimg.com; style-src 'self' data: 'unsafe-inline' 'unsafe-hashes' *.site.com *.adyen.com *.googleapis.com *.force.com *.omneo.io *.subscribepro.com *.datatoolscloud.net.au *.salesforceliveagent.com *.ooyala.com *.formstack.com *.thefork.com.au *.go2cloud.org *.sc-static.net *.google.com *.google-analytics.com *.bing.com *.facebook.com *.google.com.au *.tpc.googlesyndication.com *.stats.g.doubleclick.net *.google.co.in *.inside-graph.com *.fouanalytics.com *.tgtag.io *.youtube.com *.byspotify.com *.abtasty.com *.gstatic.com *.powerfront.com *.exacttarget.com *.adimo.co *.adimouat.co *.amazonaws.com *.clarity.ms *.adswizz.com *.spotify.com *.googletagmanager.com *.adnxs.com *.aidemsrv.com *.criteo.com *.pinimg.com *.omguk.com *.abtasty.com *.bing.com *.cellardoor.co *.clarity.ms *.cquotient.com *.criteo.com *.criteo.net *.doubleclick.net *.facebook.com *.facebook.net *.force.com *.fouanalytics.com *.google.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.igodigital.com *.linkedin.com *.omneo.io *.penfolds.cn *.penfolds.com *.salesforce.com *.salesforceliveagent.com *.spotify.com *.subscribepro.com *.tealiumiq.com *.tiqcdn.com *.vimeocdn.com *.wolfblass.com *.pinterest.com *.linkedin.com *.licdn.com *.smartadserver.com https://hcaptcha.com https://*.hcaptcha.com *.site.com analytics.tiktok.com *.tiktok.com analytics-ipv6.tiktokw.us ads.tiktok.com; img-src 'self' data: *.penfolds.com *.site.com *.cloudfront.net *.flippingbook.com *.adyen.com *.doubleclick.net *.facebook.com *.adform.net *.mediavine.com *.postrelease.com *.360yield.com *.twiago.com *.adscale.de *.1rx.io *.meba.kr *.rubiconproject.com *.aralego.com *.daum.net *.adsrvr.org *.dotomi.com *.contextweb.com *.admixer.co.kr *.adsymptotic.com *.smrtb.com *.bnmla.com *.tpmn.co.kr *.zemanta.com *.stackadapt.com *.kakao.com *.toast.com *.outbrain.com *.addthis.com *.gstatic.com *.google-analytics.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.bidswitch.net *.salesforce.com *.googletagmanager.com *.googleapis.com *.paypal.com *.mookie1.com *.igodigital.com *.adnxs.com *.googleadservices.com *.zenaps.com *.placeholder.com *.facebook.net *.3lift.com *.ad-stir.com *.adtdp.com *.advertising.com *.bing.com *.casalemedia.com *.clmbtech.com *.criteo.com *.dmxleo.com *.ivitrack.com *.mgid.com *.omnitagjs.com *.pubmatic.com *.rlcdn.com *.sharethrough.com *.smartadserver.com *.socdm.com *.stickyadstv.com *.taboola.com *.tapad.com *.yahoo.com *.yieldmo.com *.dable.io *.adingo.jp *.gssprt.jp *.microad.jp *.demandware.net *.media.net *.openx.net *.smaato.net *.smartclip.net *.yieldlab.net *.teads.tv *.ants.vn *.adswizz.com *.serving-sys.com *.unsplash.com *.typekit.net *.linkedin.com *.vimeocdn.com *.hotjar.com *.mathtag.com *.tealiumiq.com *.yimg.com *.go2cloud.org *.tpc.googlesyndication.com *.stats.g.doubleclick.net *.inside-graph.com *.fouanalytics.com *.tgtag.io *.youtube.com *.abtasty.com *.amazonaws.com *.powerfront.com *.exacttarget.com blob: *.adimo.co *.adimouat.co *.amazonaws.com *.formstack.com *.clarity.ms *.bing.com *.spotify.com *.aidemsrv.com *.pinimg.com *.omguk.com *.cquotient.com *.abtasty.com *.bing.com *.cellardoor.co *.clarity.ms *.criteo.com *.criteo.net *.doubleclick.net *.facebook.com *.facebook.net *.force.com *.fouanalytics.com *.google.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.igodigital.com *.linkedin.com *.omneo.io *.penfolds.cn *.penfolds.com *.salesforce.com *.salesforceliveagent.com *.spotify.com *.subscribepro.com *.tealiumiq.com *.tiqcdn.com *.vimeocdn.com *.wolfblass.com *.pinterest.com *.linkedin.com *.licdn.com *.smartadserver.com *.dyntrk.com cdn.n.dynstc.com analytics.tiktok.com *.tiktok.com analytics-ipv6.tiktokw.us ads.tiktok.com sp.analytics.yahoo.com geo.yahoo.com s.yimg.com d.yimg.com; font-src 'self' data: *.site.com *.sfdcstatic.com *.gstatic.com *.typekit.net *.hotjar.com *.ooyala.com *.formstack.com *.go2cloud.org *.inside-graph.com *.fouanalytics.com *.byspotify.com *.abtasty.com *.googleapis.com *.powerfront.com *.exacttarget.com blob: *.adimo.co *.adimouat.co *.amazonaws.com *.clarity.ms *.bing.com *.adswizz.com *.spotify.com *.googletagmanager.com *.adnxs.com *.aidemsrv.com *.facebook.com *.criteo.com *.pinimg.com *.omguk.com *.abtasty.com *.bing.com *.cellardoor.co *.clarity.ms *.cquotient.com *.criteo.com *.criteo.net *.doubleclick.net *.facebook.com *.facebook.net *.force.com *.fouanalytics.com *.google.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.igodigital.com *.linkedin.com *.omneo.io *.penfolds.cn *.penfolds.com *.salesforce.com *.salesforceliveagent.com *.spotify.com *.subscribepro.com *.tealiumiq.com *.tiqcdn.com *.vimeocdn.com *.wolfblass.com; connect-src 'self' *.site.com *.analytics.google.com analytics.google.com *.flippingbook.com *.hotjar.com *.hotjar.io *.serving-sys.com *.paypal.com *.tryzens-analytics.com:12280 *.tryzens-analytics.com:12443 *.google-analytics.com *.googleapis.com *.tealiumiq.com *.facebook.net *.demandware.net *.ooyala.com *.getomneo.com *.force.com wss: *.yimg.com *.adobe.io *.snapchat.com *.onelink-edge.com *.inside-graph.com *.fouanalytics.com *.youtube.com *.byspotify.com *.abtasty.com https://google.com *.google.com *.adyen.com *.powerfront.com *.exacttarget.com *.adimo.co *.adimouat.co *.amazonaws.com *.formstack.com *.clarity.ms *.bing.com *.adswizz.com *.spotify.com *.googletagmanager.com *.adnxs.com *.aidemsrv.com *.facebook.com *.criteo.com *.pinimg.com *.omguk.com *.cquotient.com *.abtasty.com *.bing.com *.cellardoor.co *.clarity.ms *.criteo.com *.criteo.net *.doubleclick.net *.facebook.com *.facebook.net *.force.com *.fouanalytics.com *.google.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.igodigital.com *.linkedin.com *.omneo.io *.penfolds.cn *.penfolds.com *.salesforce.com *.salesforceliveagent.com *.spotify.com *.subscribepro.com *.tealiumiq.com *.tiqcdn.com *.vimeocdn.com *.wolfblass.com *.pinterest.com *.linkedin.com *.licdn.com *.smartadserver.com commerceops.tryzens-analytics.com https://hcaptcha.com https://*.hcaptcha.com *.site.com analytics.tiktok.com *.tiktok.com analytics-ipv6.tiktokw.us ads.tiktok.com *.google.co.in sp.analytics.yahoo.com geo.yahoo.com dataxoline.yahoo.com aaca.yahooinc.com batch.datax.yahoo.com; frame-src 'self' bytedance: sslocal: *.adsrvr.org *.vintagejournal.co *.doubleclick.net *.paypalobjects.com *.adyen.com *.hotjar.com *.facebook.com *.criteo.net *.paypal.com *.google.com *.force.com *.rezdy.com *.matterport.com *.criteo.com *.vimeo.com *.wayin.com *.typekit.net *.ooyala.com *.snazzymaps.com https://snazzymaps.com *.spotify.com *.exacttarget.com *.sfmc-content.com *.thefork.com.au *.lafourchette.com *.resy.com vimeo.com *.serving-sys.com *.flipsnack.com *.adobe.com *.opinionstage.com *.cloudfront.net *.penfolds.com *.snapchat.com *.bing.com *.inside-graph.com *.fouanalytics.com *.youtube.com *.byspotify.com *.abtasty.com *.gstatic.com *.googleapis.com *.amazonaws.com *.powerfront.com *.exacttarget.com *.adimo.co *.adimouat.co *.amazonaws.com *.formstack.com *.clarity.ms *.adswizz.com *.spotify.com *.googletagmanager.com *.adnxs.com *.aidemsrv.com *.pinimg.com *.omguk.com *.abtasty.com *.bing.com *.cellardoor.co *.clarity.ms *.cquotient.com *.criteo.com *.criteo.net *.doubleclick.net *.facebook.com *.facebook.net *.force.com *.fouanalytics.com *.google.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.igodigital.com *.linkedin.com *.omneo.io *.penfolds.cn *.penfolds.com *.salesforce.com *.salesforceliveagent.com *.spotify.com *.subscribepro.com *.tealiumiq.com *.tiqcdn.com *.vimeocdn.com *.wolfblass.com *.pinterest.com *.linkedin.com *.licdn.com *.smartadserver.com https://hcaptcha.com https://*.hcaptcha.com *.site.com analytics.tiktok.com *.tiktok.com analytics-ipv6.tiktokw.us ads.tiktok.com; worker-src 'self' blob: *.datatoolscloud.net.au *.adyen.com *.cloudflare.com *.cquotient.com *.dwin1.com *.force.com *.google-analytics.com *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.igodigital.com *.licdn.com *.paypal.com *.paypalobjects.com *.rezdy.com *.salesforceliveagent.com *.serving-sys.com *.tiqcdn.com *.polyfill.io *.doubleclick.net *.facebook.net 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *.getwisp.co *.criteo.com *.subscribepro.com *.youtube.com *.powerfront.com *.exacttarget.com *.adimo.co *.adimouat.co *.amazonaws.com *.formstack.com *.clarity.ms *.bing.com *.adswizz.com *.spotify.com *.adnxs.com *.aidemsrv.com *.facebook.com *.pinimg.com *.omguk.com *.cquotient.com *.abtasty.com *.bing.com *.cellardoor.co *.clarity.ms *.criteo.com *.criteo.net *.doubleclick.net *.facebook.com *.facebook.net *.force.com *.fouanalytics.com *.google.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.igodigital.com *.linkedin.com *.omneo.io *.penfolds.cn *.penfolds.com *.salesforce.com *.salesforceliveagent.com *.spotify.com *.subscribepro.com *.tealiumiq.com *.tiqcdn.com *.vimeocdn.com *.wolfblass.com *.pinterest.com *.linkedin.com *.licdn.com *.smartadserver.com; frame-ancestors 'self' data: *.site.com;; report-uri https://tweau-csp.tryzens-analytics.com; 1
object-src 'none';base-uri 'self';script-src 'nonce-daLTyj6huRCo0hCyZxjBGQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
style-src-elem preprod-cdn.otter.ro cdn.otter.ro dev.otter247.local stage2.otter.ro stage2.tezyo.ro stage2.gryxx.ro stage2.aldoshoes.ro data: https://static.klaviyo.com https://cdn.jsdelivr.net https://*.adobe.com https://fonts.googleapis.com https://*.doubleclick.net https://*.facebook.com https://fonts.gstatic.com https://*.googletagmanager.com https://*.googlesyndication.com https://*.fontawesome.com https://maxcdn.bootstrapcdn.com https://fonts.bunny.net https://fonts.static.com https://*.nosto.com https://*.nos.to https://assets.braintreegateaway.com https://*.cloudfront.net https://*.reviews.io https://*.reviews.co.uk https://preprod-cdn.otter.ro https://cdn.otter.ro 'unsafe-inline' https://www.googletagmanager.com https://www.googlesyndication.com https://use.fontawesome.com https://assets.braintreegateway.com https://d2c7ipcroan06u2.cloudfront.net; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com maxcdn.bootstrapcdn.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.googleapis.com https://fonts.bunny.net fonts.googleapis.com preprod-cdn.otter.ro cdn.otter.ro static.klaviyo.com cdn.jsdelivr.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.nosto.com *.nos.to *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors https://www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ https://www.google.com/ *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.innoship.ro *.nosto.com *.nos.to *.reviews.io *.reviews.co.uk preprod-cdn.otter.ro cdn.otter.ro static.klaviyo.com cdn.jsdelivr.net https://www.googletagmanager.com https://consentcdn.cookiebot.eu https://event.2performant.com https://ams.creativecdn.com https://www.gstatic.com/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com *.tile.openstreetmap.org *.openstreetmap.org https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ * https://www.magezon.com *.nosto.com *.nos.to *.cloudfront.net *.reviews.io *.reviews.co.uk https://firebasestorage.googleapis.com quickchart.io img.youtube.com www.google.com.ua preprod-cdn.otter.ro cdn.otter.ro static.klaviyo.com cdn.jsdelivr.net https://ss.otter.ro data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://www.google.com/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com cdn.jsdelivr.net *.tiktok.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ * *.nosto.com *.nos.to *.reviews.io *.reviews.co.uk *.fontawesome.com *.googleapis.com https://www.gstatic.com/ *.avada.io *.shopify.com maps.googleapis.com preprod-cdn.otter.ro cdn.otter.ro static.klaviyo.com https://cdn.otter.ro https://ss.otter.ro 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://*.adobe.com fonts.googleapis.com *.googleapis.com https://*.doubleclick.net https://*.facebook.com *.gstatic.com https://*.googletagmanager.com https://*.googlesyndication.com *.tiktok.com https://*.fontawesome.com maxcdn.bootstrapcdn.com https://static.klaviyo.com https://*.nosto.com *.nos.to https://*.cloudfront.net *.reviews.io *.reviews.co.uk https://fonts.bunny.net fonts.gstatic.com preprod-cdn.otter.ro cdn.otter.ro dev.otter247.local stage2.otter.ro stage2.tezyo.ro stage2.gryxx.ro stage2.aldoshoes.ro data: https://cdn.jsdelivr.net https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://fonts.static.com https://*.nos.to https://assets.braintreegateaway.com https://*.reviews.io https://*.reviews.co.uk https://preprod-cdn.otter.ro https://cdn.otter.ro 'unsafe-inline' https://www.googletagmanager.com https://www.googlesyndication.com https://use.fontawesome.com https://assets.braintreegateway.com https://d2c7ipcroan06u2.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com preprod-cdn.otter.ro cdn.otter.ro static.klaviyo.com cdn.jsdelivr.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.facebook.com *.facebook.net https://www.google.com/ *.doubleclick.net *.googlesyndication.com *.tiktok.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.nosto.com *.nos.to *.cloudfront.net *.reviews.io *.reviews.co.uk https://get.geojs.io *.avada.io maps.googleapis.com preprod-cdn.otter.ro cdn.otter.ro stage2.otter.ro stage2.tezyo.ro stage2.gryxx.ro stage2.aldoshoes.ro static.klaviyo.com cdn.jsdelivr.net https://tezyo.zendesk.com https://ekr.zdassets.com https://*.zendesk.com https://*.zdassets.com https://event.2performant.com https://tidytracking.com https://ss.otter.ro 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.cloudflare.com *.twitter.com *.facebook.net *.twimg.com *.hotjar.com *.trustedshops.com *.googleapis.com *.magentocommerce.com *.paypal.com *.cardinalcommerce.com *.authorize.net *.fontawesome.com https://fonts.bunny.net *.mncdn.com *.masterpassturkiye.com *.iyzipay.com *.bkm.com.tr *.akbank.com.tr *.yapikredi.com.tr *.garanti.com.tr *.ingage.tech *.useinsider.com *.pinterest.com *.pinimg.com *.connectad.io *.opera.com *.gumgum.com *.rakuten.com *.smaato.net *.adtarget.com *.mgid.com *.onetag-sys.com *.adscale.com *.loopme.me *.smilewanted.com *.wawlabs.com *.dmxleo.com *.cloudfront.net *.openx.net *.sharethis.com *.google.com.tr *.googlesyndication.com https://buysoci.al *.agkn.com *.a.run.app *.clarity.ms sc-static.net jadserve.postrelease.com sync.1rx.io sync.targeting.unrulymedia.com *.cloudflareinsights.com *.cookiespool.com *.tiktokw.us *.zopim.com *.zopim.io *.personaclick.com *.mnmedya.com *.ipaper.io https://*.useinsider.com wss://*.useinsider.com *.tiktok.com *.googleoptimize.com *.creativecdn.com https://*.amazonaws.com *.criteo.com *.rossmann.com.tr cdn.rossmann.com.tr *.vimeo.com www.rossmann.com.tr *.snapchat.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.twitter.com *.facebook.com *.ingage.tech *.useinsider.com *.pinterest.com *.pinimg.com *.connectad.io *.opera.com *.gumgum.com *.rakuten.com *.smaato.net *.adtarget.com *.mgid.com *.onetag-sys.com *.adscale.com *.loopme.me *.smilewanted.com *.wawlabs.com *.dmxleo.com *.cloudfront.net *.openx.net *.sharethis.com *.google.com.tr *.googlesyndication.com https://buysoci.al *.agkn.com *.a.run.app *.clarity.ms sc-static.net jadserve.postrelease.com sync.1rx.io sync.targeting.unrulymedia.com *.cloudflareinsights.com *.cookiespool.com *.tiktokw.us *.mncdn.com *.personaclick.com *.mnmedya.com *.ipaper.io https://*.useinsider.com wss://*.useinsider.com *.tiktok.com *.googleoptimize.com *.creativecdn.com https://*.amazonaws.com *.criteo.com *.rossmann.com.tr cdn.rossmann.com.tr *.vimeo.com *.snapchat.com 'self' 'unsafe-inline'; frame-ancestors *.google.com *.gstatic.com *.ingage.tech *.useinsider.com *.pinterest.com *.pinimg.com *.connectad.io *.opera.com *.gumgum.com *.rakuten.com *.smaato.net *.adtarget.com *.mgid.com *.onetag-sys.com *.adscale.com *.loopme.me *.smilewanted.com *.wawlabs.com *.dmxleo.com *.cloudfront.net *.openx.net *.sharethis.com *.google.com.tr *.googlesyndication.com https://buysoci.al *.agkn.com *.a.run.app *.clarity.ms sc-static.net jadserve.postrelease.com sync.1rx.io sync.targeting.unrulymedia.com *.cloudflareinsights.com *.cookiespool.com *.tiktokw.us *.mncdn.com *.personaclick.com *.mnmedya.com *.ipaper.io https://*.useinsider.com wss://*.useinsider.com *.tiktok.com *.googleoptimize.com *.creativecdn.com https://*.amazonaws.com *.criteo.com *.rossmann.com.tr cdn.rossmann.com.tr *.vimeo.com *.snapchat.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.googletagmanager.com/ *.twitter.com *.gstatic.com *.hotjar.com *.google.com.tr *.veinteractive.com *.demdex.net *.solocpm.com *.facebook.com *.facebook.net *.addthis.com *.livechatinc.com *.yandex.ru *.adyen.com *.vimeo.com *.doubleclick.net *.bluekai.com *.useinsider.com *.masterpassturkiye.com *.iyzipay.com *.bkm.com.tr *.akbank.com.tr *.yapikredi.com.tr *.garanti.com.tr *.ingage.tech *.pinterest.com *.pinimg.com *.connectad.io *.opera.com *.gumgum.com *.rakuten.com *.smaato.net *.adtarget.com *.mgid.com *.onetag-sys.com *.adscale.com *.loopme.me *.smilewanted.com *.wawlabs.com *.dmxleo.com *.cloudfront.net *.openx.net *.sharethis.com *.googlesyndication.com https://buysoci.al *.agkn.com *.a.run.app *.clarity.ms sc-static.net jadserve.postrelease.com sync.1rx.io sync.targeting.unrulymedia.com *.cloudflareinsights.com *.cookiespool.com *.tiktokw.us https://www.youtube.com http://www.sandbox.paypal.com www.paypal.com *.mncdn.com *.personaclick.com *.mnmedya.com *.ipaper.io https://*.useinsider.com wss://*.useinsider.com *.tiktok.com *.googleoptimize.com *.creativecdn.com https://*.amazonaws.com *.criteo.com *.rossmann.com.tr cdn.rossmann.com.tr rossmann.api.useinsider.com td.doubleclick.net ams.creativecdn.com *.snapchat.com 'self' 'unsafe-inline'; img-src 'self' data: *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.swagger.io https://images.unsplash.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.cloudflare.com *.klarna.com *.googleadservices.com *.paypalobjects.com *.hotjar.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.magentocommerce.com *.cardinalcommerce.com *.authorize.net *.omtrdc.net *.newrelic.com *.doubleclick.net *.google.com *.google.com.tr *.facebook.com *.facebook.net *.demdex.net *.everesttech.net *.googleapis.com *.adis.ws *.livechatinc.com *.yandex.ru *.adyen.com *.setrowid.com *.setrow.com *.instagram.com *.useinsider.com *.googletagmanager.com https://firebasestorage.googleapis.com *.mncdn.com *.iyzicopwi.com.tr *.masterpassturkiye.com *.iyzipay.com *.bkm.com.tr *.akbank.com.tr *.yapikredi.com.tr *.garanti.com.tr *.ingage.tech *.pinterest.com *.pinimg.com *.connectad.io *.opera.com *.gumgum.com *.rakuten.com *.smaato.net *.adtarget.com *.mgid.com *.onetag-sys.com *.adscale.com *.loopme.me *.smilewanted.com *.wawlabs.com *.dmxleo.com *.cloudfront.net *.openx.net *.sharethis.com *.googlesyndication.com https://buysoci.al *.agkn.com *.a.run.app *.clarity.ms sc-static.net jadserve.postrelease.com sync.1rx.io sync.targeting.unrulymedia.com *.cloudflareinsights.com *.cookiespool.com *.tiktokw.us *.bing.com *.zopim.com *.zopim.io *.google.co.in *.mastercard.com *.personaclick.com *.mnmedya.com *.ipaper.io https://*.useinsider.com wss://*.useinsider.com *.tiktok.com *.googleoptimize.com *.creativecdn.com https://*.amazonaws.com *.criteo.com *.rossmann.com.tr *.vimeo.com *.bidswitch.net *.adnxs.com *.casalemedia.com *.media.net *.360yield.com *.outbrain.com *.rubinproject.com *.sharethrough.com *.smartadserver.net *.taboola.com *.teads.tv *.3lift.com *.emxdgt.com *.adform.net *.omnitagjs.com *.sync.com *.ivitrack.com *.mediavine.com *.pubmatic.com *.tremorhub.com *.yieldlab.net *.yieldmo.com *.semasio.net *.krxd.net *.thebrighttag.com *.smartadserver.com *.yahoo.com https://id5-sync.com *.rubiconproject.com www.rossmann.com.tr cdn.rossmann.com.tr web-image.useinsider.com image.useinsider.com static.ads-twitter.com ads-twitter.com ads-api.twitter.com analytics.twitter.com t.co www.facebook.com *.snapchat.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.magentocommerce.com *.paypal.com *.hotjar.com *.cardinalcommerce.com *.authorize.net *.omtrdc.net *.instana.io *.google.com.tr *.googletagmanager.com *.veinteractive.com *.facebook.net *.supert.ag *.setrowid.com *.mainadv.com *.doubleclick.net *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.livechatinc.com *.yandex.ru *.adyen.com *.vimeo.com *.jsdelivr.net *.setrow.com *.instagram.com *.criteo.com *.criteo.net *.ciritizr.com *.bkrtx.com *.cloudfront.net *.useinsider.com *.critizr.com *.behance.net *.swagger.io *.avada.io *.shopify.com *.mncdn.com *.iyzicopwi.com.tr *.masterpassturkiye.com *.iyzipay.com *.bkm.com.tr *.akbank.com.tr *.garanti.com.tr *.ingage.tech *.pinterest.com *.pinimg.com *.connectad.io *.opera.com *.gumgum.com *.rakuten.com *.smaato.net *.adtarget.com *.mgid.com *.onetag-sys.com *.adscale.com *.loopme.me *.smilewanted.com *.wawlabs.com *.dmxleo.com *.openx.net *.sharethis.com *.googlesyndication.com https://buysoci.al *.agkn.com *.a.run.app *.clarity.ms sc-static.net jadserve.postrelease.com sync.1rx.io sync.targeting.unrulymedia.com *.cloudflareinsights.com *.cookiespool.com *.tiktokw.us *.bing.com *.zopim.com *.zdassets.com *.personaclick.com *.mnmedya.com *.ipaper.io https://*.useinsider.com wss://*.useinsider.com *.tiktok.com *.googleoptimize.com *.creativecdn.com https://*.amazonaws.com *.rossmann.com.tr www.rossmann.com.tr rossmann.api.useinsider.com connect.facebook.net tags.creativecdn.com static.ads-twitter.com ads-twitter.com ads-api.twitter.com analytics.twitter.com embeds.ipaper.io static.hotjar.com cdn.rossmann.com.tr eitri.api.useinsider.com analytics.tiktok.com script.hotjar.com ams.creativecdn.com *.snapchat.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.facebook.net *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.magentocommerce.com *.fontawesome.com *.paypal.com *.paypalobjects.com *.hotjar.com *.cardinalcommerce.com *.authorize.net *.omtrdc.net *.newrelic.com *.setrowid.com *.setrow.com *.critizr.com *.useinsider.com *.adobedtm.com *.google-analytics.com *.googletagmanager.com *.swagger.io https://fonts.bunny.net *.mncdn.com *.masterpassturkiye.com *.iyzipay.com *.bkm.com.tr *.akbank.com.tr *.yapikredi.com.tr *.garanti.com.tr *.ingage.tech *.pinterest.com *.pinimg.com *.connectad.io *.opera.com *.gumgum.com *.rakuten.com *.smaato.net *.adtarget.com *.mgid.com *.onetag-sys.com *.adscale.com *.loopme.me *.smilewanted.com *.wawlabs.com *.dmxleo.com *.cloudfront.net *.openx.net *.sharethis.com *.google.com.tr *.googlesyndication.com https://buysoci.al *.agkn.com *.a.run.app *.clarity.ms sc-static.net jadserve.postrelease.com sync.1rx.io sync.targeting.unrulymedia.com *.cloudflareinsights.com *.cookiespool.com *.tiktokw.us *.bing.com *.personaclick.com *.mnmedya.com *.ipaper.io https://*.useinsider.com wss://*.useinsider.com *.tiktok.com *.googleoptimize.com *.creativecdn.com https://*.amazonaws.com *.criteo.com *.rossmann.com.tr *.vimeo.com www.rossmann.com.tr cdn.rossmann.com.tr maxcdn.bootstrapcdn.com assets.api.useinsider.com *.snapchat.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net *.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.cloudflare.com www.google-analytics.com https://stats.g.doubleclick.net *.twitter.com *.facebook.com *.facebook.net *.paypalobjects.com *.hotjar.com *.hotjar.io *.twimg.com *.magentocommerce.com *.cardinalcommerce.com *.cardinalcommerce.net *.veinteractive.com *.demdex.net *.yandex.ru *.vimeo.com *.setrowid.com *.setrow.com *.useinsider.com *.adobedtm.com *.swagger.io https://get.geojs.io *.avada.io *.masterpassturkiye.com *.iyzipay.com *.bkm.com.tr *.akbank.com.tr *.yapikredi.com.tr *.garanti.com.tr https://mnemos-api.ahtapot.ai *.ingage.tech *.pinterest.com *.pinimg.com *.connectad.io *.opera.com *.gumgum.com *.rakuten.com *.smaato.net *.adtarget.com *.mgid.com *.onetag-sys.com *.adscale.com *.loopme.me *.smilewanted.com *.wawlabs.com *.dmxleo.com *.cloudfront.net *.openx.net *.sharethis.com *.google.com.tr *.googlesyndication.com https://buysoci.al *.agkn.com *.a.run.app *.clarity.ms sc-static.net jadserve.postrelease.com sync.1rx.io sync.targeting.unrulymedia.com *.cloudflareinsights.com *.cookiespool.com *.tiktokw.us *.zdassets.com *.zopim.com *.zopim.io wss://widget-mediator.zopim.com *.mncdn.com *.personaclick.com *.mnmedya.com *.ipaper.io https://*.useinsider.com wss://*.useinsider.com *.tiktok.com *.googleoptimize.com *.creativecdn.com https://*.amazonaws.com *.criteo.com *.rossmann.com.tr analytics.google.com www.rossmann.com.tr cdn.rossmann.com.tr rossmann.api.useinsider.com aryuder.api.useinsider.com hit.api.useinsider.com ams.creativecdn.com recommendationv2.api.useinsider.com *.snapchat.com static.ads-twitter.com ads-twitter.com ads-api.twitter.com analytics.twitter.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.ingage.tech *.useinsider.com *.pinterest.com *.pinimg.com *.connectad.io *.opera.com *.gumgum.com *.rakuten.com *.smaato.net *.adtarget.com *.mgid.com *.onetag-sys.com *.adscale.com *.loopme.me *.smilewanted.com *.wawlabs.com *.dmxleo.com *.cloudfront.net *.openx.net *.sharethis.com *.google.com.tr *.googlesyndication.com *.buysoci.al *.agkn.com *.a.run.app sc-static.net jadserve.postrelease.com sync.1rx.io sync.targeting.unrulymedia.com www.rossmann.com.tr cdn.rossmann.com.tr *.clarity.ms googleads.g.doubleclick.net analytics.tiktok.com *.snapchat.com *.twitter.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.staging-pbffinancecalculator.info *.pbffinancecalculator.info *.paybyfinance.co.uk *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.staging-pbffinancecalculator.info *.pbffinancecalculator.info *.paybyfinance.co.uk *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.staging-pbffinancecalculator.info *.pbffinancecalculator.info *.paybyfinance.co.uk https://www.googletagmanager.com/ *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.bing.com *.googleadservices.com *.google.co.uk maps.gstatic.com *.googletagmanager.com *.expressentry.melissadata.net *.paypalobjects.com *.ometria.services *.feefo.com *.adobedtm.com https://www.anglingdirect.co.uk *.pbffinancecalculator.info cdn.shopify.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.ometria.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.bing.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googleapis.com googleapis.com maps.googleapis.com expressentry.melissadata.net *.paypalobjects.com *.ometria.services *.noibu.com https://www.noibu.com https://cdn.noibu.com *.facebook.net https://cdn.jsdelivr.net https://applepay.cdn-apple.com https://www.anglingdirect.co.uk *.staging-pbffinancecalculator.info *.pbffinancecalculator.info *.paybyfinance.co.uk http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.dixa.io x.klarnacdn.net *.klarnaservices.com *.avada.io *.shopify.com https://api.ometria.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.ometria.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.bing.com *.googletagmanager.com *.googlesyndication.com *.googleapis.com maps.googleapis.com places.googleapis.com expressentry.melissadata.net *.paypalobjects.com *.ometria.services *.advancedcommerce.services https://cdn.noibu.com wss://input.noibu.com https://input.noibu.com *.noibu.com *.facebook.net https://cdn.jsdelivr.net *.apple.com https://api.stripe.com ad.doubleclick.net *.doubleclick.net doubleclick.net *.staging-pbffinancecalculator.info *.pbffinancecalculator.info wss://*.staging-pbffinancecalculator.info wss://*.pbffinancecalculator.info *.paybyfinance.co.uk http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.dixa.io x.klarnacdn.net *.klarnaservices.com https://get.geojs.io *.avada.io https://api.ometria.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.ometria.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; font-src data: https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud; script-src 'self' https://*.bazaarvoice.com https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://exc.mm.dm.rs https://mpsnare.iesnare.com https://omt.dm.rs https://tags.tiqcdn.com https://web.cmp.usercentrics.eu https://www.dm.rs https://www.google.com https://www.google.com/recaptcha/ https://www.gstatic.com https://www.gstatic.com/recaptcha/; worker-src 'self' blob:; connect-src 'self' https://*.bazaarvoice.com https://aggregator.service.usercentrics.eu https://api.mapbox.com https://api.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://browser-intake-datadoghq.eu https://cart-recos.services.dmtech.com https://cdcs.usercentrics.eu https://collect.tealiumiq.com https://consent-api.service.consent.usercentrics.eu https://consent-rt-ret.service.consent.usercentrics.eu https://consents.usercentrics.eu https://content-preview.apps.prod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://direct-collect.dy-api.eu https://direct.dy-api.eu https://dmpay-gateway.services.dmtech.com https://dy-api.eu https://editorial-content.dm-static.com https://events.mapbox.com https://exc.mm.dm.rs https://frontend-tracking-infra-service.services.dmtech.com https://graphql.usercentrics.eu https://insights.algolia.io https://logs.browser-intake-datadoghq.eu https://maut-prod.services.dmtech.com https://maut-rls.nonprod.services.dmtech.com https://mpsnare.iesnare.com https://my-products-api.services.dmtech.com https://omacs.services.dmtech.com https://omc.dm.rs https://predictive-shopping-service.services.dmtech.com https://product-based-recos.services.dmtech.com https://product-search.services.dmtech.com https://product-semantic-search.services.dmtech.com https://rcom-eu.dynamicyield.com https://recos-as-a-service.services.dmtech.com https://region1.google-analytics.com https://retail-media.services.dmtech.com https://rum.browser-intake-datadoghq.eu https://s2s.adjust.com https://signin.dm.rs https://sos-prod.availability.services.dmtech.com https://staedtetour.dm-fb2.de https://stars.services.dmtech.com https://storage.googleapis.com/gift-card-builder-emergency-disabled-bucket/ https://store-data-service.services.dmtech.com https://store-order-service.services.dmtech.com https://v1.api.service.cmp.usercentrics.eu https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://zoe-shop-proxy-prod.services.dmtech.com https://kuba-prod.services.dmtech.com https://zoe-shop-proxy-prod.services.dmtech.com https://cartnext.services.dmtech.com https://dmcsm-proxy.prod.services.dmtech.com https://zoe-shop-proxy-prod.services.dmtech.com https://customer-helpcenter-prod.services.dmtech.com https://paint-prod.services.dmtech.com https://content.services.dmtech.com https://content-search-service-preview.apps.prod.gcp.dmtech.cloud https://content-search-service.services.dmtech.com https://products.dm.de https://pds-import-prod.apps.prod.gcp.dmtech.cloud https://shopping-list-prod.services.dmtech.com; media-src 'self'; style-src 'self' 'unsafe-inline' https://*.bazaarvoice.com https://api.tiles.mapbox.com https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud; form-action 'self' https://*.bazaarvoice.com https://apps.bazaarvoice.com https://checkout.dm.rs https://giftcard-checkout.dm.de/api/checkout https://signin.dm.rs; img-src 'self' blob: data: https://*.bazaarvoice.com https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://cdn-eu.dynamicyield.com https://composer.apps.nonprod.cf.dmtech.cloud https://content-preview.apps.prod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://editorial-content.dm-static.com https://exc.mm.dm.rs https://i.ytimg.com https://images.podigee-cdn.net https://img.usercentrics.eu https://img.youtube.com/ https://media.dm-static.com https://photos-eu.bazaarvoice.com https://products.dm-static.com https://uct.service.usercentrics.eu https://content.services.dmtech.com; frame-ancestors 'self' https://account.dm.rs https://app.datadoghq.eu https://checkout.dm.rs https://content-preview.apps.prod.gcp.dmtech.cloud https://mobileapp.dm.rs https://studio.dm-drogeriemarkt.com; frame-src 'self' https://*.bazaarvoice.com https://account.dm.rs https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://cdn.podigee.com https://checkout.dm.rs https://configurator.nuk.de https://gastfamilie.podigee.io https://geburtskanal-dm.podigee.io https://hey-familie.podigee.io https://kinderwunschsprechstunde.podigee.io https://mobileapp.dm.rs https://player.podigee-cdn.net https://recaptcha.google.com/recaptcha/ https://sandbox.om.dm.rs https://signin.dm.rs https://web.cmp.usercentrics.eu https://www.google.com https://www.google.com/recaptcha/ https://www.youtube-nocookie.com; base-uri 'self' https://exc.mm.dm.rs; child-src 'self' blob:; manifest-src 'self'; report-to csp-endpoint; report-uri /__csp-reports__ 1
font-src https://www.googletagmanager.com *.googleapis.com *.gstatic.com https://*.gopersonal.ai *.yotpo.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com https://plumrocket.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ https://*.gopersonal.ai https://plumrocket.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io *.gstatic.com https://*.gopersonal.ai *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ tagmanager.google.com https://www.googletagmanager.com https://assets.emarsys.net https://cdn.scarabresearch.com https://*.gopersonal.ai https://*.gstatic.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://production-tailoy-repo-magento-statics.s3.us-east-2.amazonaws.com https://*.gopersonal.ai *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com https://www.google-analytics.com https://recommender.scarabresearch.com https://*.gopersonal.ai https://*.goshops.ai https://*.googleapis.com https://*.gstatic.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; script-src 'self' https:; style-src 'self' https:; report-uri https://csp-collector-qt0v.onrender.com/csp-report 1
default-src 'self' https: *.channel.io *.channel.app *.cdninstagram.com; font-src 'self' https: data:; img-src 'self' https: data: blob: https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com *.channel.io *.cdninstagram.com *.with.is; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://connect.facebook.net https://platform.twitter.com https://cdn.jsdelivr.net https://*.googletagmanager.com https://www.google-analytics.com *.channel.io *.sentry-cdn.com https://static.ads-twitter.com https://js-agent.newrelic.com *.with.is; style-src 'self' https: 'unsafe-inline'; connect-src 'self' https://api.stripe.com https://analytics.twitter.com https://www.facebook.com https://support.with.is *.channel.io *.channel.app *.sentry.io wss://*.channel.io wss://*.desk-ws.channel.io wss://*.front-ws.channel.io https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.co.jp https://*.google.com wss://ntjp.mieru-ca.com https://bam.nr-data.net *.with.is; frame-src 'self' https://js.stripe.com https://www.facebook.com https://www.youtube.com https://cdn.d2-apps.net https://10252404.fls.doubleclick.net https://www.google.com https://with-1923.firebaseapp.com; report-uri /csp-violation-report 1
default-src 'self'; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' ajax.aspnetcdn.com *.plexonline.com *.plexus-online.com *.plex.com web-sdk.aptrinsic.com; style-src 'report-sample' 'self' data: 'unsafe-inline' ajax.aspnetcdn.com *.plexonline.com *.plexus-online.com *.plex.com web-sdk.aptrinsic.com; img-src 'self' data: ajax.aspnetcdn.com *.plexonline.com *.plexus-online.com www.gstatic.com 127.0.0.1:18623 *.plex.com; font-src 'self' *.plex.com data: *.plexus-online.com fonts.gstatic.com maxcdn.bootstrapcdn.com *.plexonline.com at.alicdn.com use.typekit.net; connect-src 'self' web-sdk.aptrinsic.com esp.aptrinsic.com *.plex.com pcn-move.plexdev.io cdnma.cdnservice.space cdnma.global-cache.online cdnmb.global-cache.online 127.0.0.1:18623 js.authorize.net tablet.sigwebtablet.com:47290; media-src 'self' *.plex.com; object-src 'self'; child-src 'self'; frame-src 'self'; worker-src 'self'; frame-ancestors 'self' www.plexonline.com www.plexus-online.com; form-action 'self' *.plexus-online.com *.plexonline.com *.plex.com; base-uri 'self'; manifest-src 'self'; script-src-elem 'self' 'unsafe-inline' web-sdk.aptrinsic.com www.gstatic.com *.plexonline.com *.plex.com js.authorize.net jstest.authorize.net *.google-analytics.com www.pagespeed-mod.com *.plexus-online.com www.gstatic.com; style-src-elem 'unsafe-inline' *.plexonline.com web-sdk.aptrinsic.com www.gstatic.com maxcdn.bootstrapcdn.com *.plex.com *.plexus-online.com; report-uri https://csp.security.plex.com/csp/reporting 1
font-src use.typekit.net fonts.gstatic.com static.sensefuel.live *.lafoirfouille.fr data: 'self' 'unsafe-inline'; form-action sogecommerce.societegenerale.eu *.multisafepay.com *.lafoirfouille.fr 'self' 'unsafe-inline'; frame-src www.google.com sogecommerce.societegenerale.eu https://v.calameo.com/ *.lafoirfouille.fr 'self' 'unsafe-inline' about: data:; img-src www.googletagmanager.com cdn-cookieyes.com tag.beyable.com www.facebook.com tr.snapchat.com *.lafoirfouille.fr data: 'self' 'unsafe-inline'; script-src front.activation.beyable.com tag.search.sensefuel.live tag.search.sensefuel.com tag.beyable.com www.gstatic.com www.google.com www.googletagmanager.com cdn-cookieyes.com *.socloz.com beyableprodrt.blob.core.windows.net connect.facebook.net sc-static.net *.clarity.ms *.lafoirfouille.fr 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com use.typekit.net p.typekit.net tag.search.sensefuel.com *.search.sensefuel.live tag.beyable.com *.lafoirfouille.fr 'self' 'unsafe-inline'; manifest-src *.lafoirfouille.fr 'self' 'unsafe-inline'; connect-src cdn-cookieyes.com *.cookieyes.com geolocation.onetrust.com *.search.sensefuel.live api.sensefuel.live *.ingest.de.sentry.io *.google-analytics.com beyableprodrt.blob.core.windows.net www.googletagmanager.com www.google.com graph.facebook.com www.facebook.com tr.snapchat.com *.clarity.ms *.lafoirfouille.fr 'self' 'unsafe-inline'; media-src *.search.sensefuel.live *.lafoirfouille.fr 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; frame-ancestors https://api.cqeq65dd63-ffdigital1-d1-public.model-t.cc.commerce.ondemand.com https://api.cqeq65dd63-ffdigital1-s1-public.model-t.cc.commerce.ondemand.com https://api.cqeq65dd63-ffdigital1-p1-public.model-t.cc.commerce.ondemand.com https://v.calameo.com https://*.lafoirfouille.fr/ 'self'; object-src data: 'self' 'unsafe-inline'; child-src www.google.com sogecommerce.societegenerale.eu https://v.calameo.com/ *.lafoirfouille.fr http: https: blob: data: 'self' 'unsafe-inline' about:; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://widget.trustpilot.com; connect-src 'self' https://sa.money.co.uk; img-src 'self' data: https://img.money.co.uk https://ubrand.s3.eu-west-1.amazonaws.com https://money-includes-production.s3-eu-west-1.amazonaws.com; style-src 'self' 'unsafe-inline'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; report-uri /csp-report; report-to csp-endpoint 1
script-src 'self' 'unsafe-eval' https://connect.facebook.net https://am.yahoo.co.jp https://b99.yahoo.co.jp https://www.google-analytics.com assets.adobedtm.com https://www.googletagmanager.com http://hm.mieru-ca.com https://hpjp.mieru-ca.com https://www.everestjs.net https://s.yimg.jp http://aigjapan.sc.omtrdc.net https://www.youtube.com 'sha256-dMIRRtml3Oi21Iaq03PtC+8mIuBozHki1nfF3K1YXgw=' 'sha256-Yw3/67WDFoT7czVF2RALaOaLaRtweKwjgMzcHEb7oIs=' 'sha256-+/WzJIUpU+5NsHuQGBp2n0iZvi5LUQ0h8K/qrDy2YJQ=' 'sha256-T4GdVguKtoAY/4wetSihwnlAEpUpN0SBr64TOJa8NU0=' 'sha256-KIDFo1cCsPZjm0CKg+wI3amz1hzD9mNUJ2+4AGHa3uU=' 'sha256-LBsTTQlX5+H68ly1EZvOY6Z9bHzQqntXIpb70r7UJis=' 'sha256-U/nEWHrEPshKXL66+Ph2p6sLJqyHx9w9Sjv8K1Ya0zU=' 'sha256-BcF795XkHI9YEs7DNkb2Auwhmzf0SqcdlO/cXV17POc=' 'sha256-cQonxShNT1IfSfxwOOa2GnQjv3H9iqQdPYmUrW6Tl9w=' 'sha256-Dsxt1/qoUZUtAc/xB2KsqxHj3ORjhh9iGH+ezhmuyks=' 'sha256-UeZ0R36qQ5kcoJ4QcT9JHYwgL70p9095Vm9jdRGAKSc=' 'nonce-nk03vdrwuu1baa';script-src-elem 'self' https://connect.facebook.net https://am.yahoo.co.jp https://b99.yahoo.co.jp https://www.google-analytics.com assets.adobedtm.com https://www.googletagmanager.com http://hm.mieru-ca.com https://hpjp.mieru-ca.com https://www.everestjs.net https://s.yimg.jp http://aigjapan.sc.omtrdc.net https://www.youtube.com 'sha256-dMIRRtml3Oi21Iaq03PtC+8mIuBozHki1nfF3K1YXgw=' 'sha256-Yw3/67WDFoT7czVF2RALaOaLaRtweKwjgMzcHEb7oIs=' 'sha256-+/WzJIUpU+5NsHuQGBp2n0iZvi5LUQ0h8K/qrDy2YJQ=' 'sha256-T4GdVguKtoAY/4wetSihwnlAEpUpN0SBr64TOJa8NU0=' 'sha256-KIDFo1cCsPZjm0CKg+wI3amz1hzD9mNUJ2+4AGHa3uU=' 'sha256-LBsTTQlX5+H68ly1EZvOY6Z9bHzQqntXIpb70r7UJis=' 'sha256-U/nEWHrEPshKXL66+Ph2p6sLJqyHx9w9Sjv8K1Ya0zU=' 'sha256-BcF795XkHI9YEs7DNkb2Auwhmzf0SqcdlO/cXV17POc=' 'sha256-cQonxShNT1IfSfxwOOa2GnQjv3H9iqQdPYmUrW6Tl9w=' 'sha256-Dsxt1/qoUZUtAc/xB2KsqxHj3ORjhh9iGH+ezhmuyks=' 'sha256-UeZ0R36qQ5kcoJ4QcT9JHYwgL70p9095Vm9jdRGAKSc=' 'nonce-nk03vdrwuu1baa'; 1
default-src 'self'; script-src 'self' https://ccm.bbaw.de https://piwik.bbaw.de; connect-src 'self' https://piwik.bbaw.de https://ccm.bbaw.de; img-src 'self' https://digilib.bbaw.de https://piwik.bbaw.de data:; style-src 'self' https://ccm.bbaw.de 'unsafe-inline'; frame-src https://player.vimeo.com https://www.youtube.com https://youtu.be https://w.soundcloud.com https://embed.contentflow.net https://lisa.gerda-henkel-stiftung.de; font-src 'self'; object-src 'none'; base-uri 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.toyscenter.it https://www.googletagmanager.com https://www.google-analytics.com https://widget.heresai.it https://*.google-analytics.com https://*.analytics.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com https://maps.gstatic.com https://js.api.here.com https://cdn.scalapay.com https://*.scalapay.com https://*.klarnacdn.net https://*.klarna.com https://eu1-config.doofinder.com https://*.doofinder.com https://invitejs.trustpilot.com https://*.trustpilot.com https://www.dwin1.com https://*.awin1.com https://*.tiktok.com https://cdn.cookielaw.org https://*.bing.com https://*.facebook.net https://responder.wt-safetag.com https://pixel.queryo.com https://widget.heres.ai https://*.toyscenter.it https://googleads.g.doubleclick.net https://dynamic.criteo.com https://static.hotjar.com https://sslwidget.criteo.com https://applepay.cdn-apple.com https://www.paypal.com https://the.sciencebehindecommerce.com https://pay.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://cdn.toyscenter.it https://fonts.googleapis.com https://cdn.doofinder.com https://js.api.here.com https://widget.heres.ai https://x.klarnacdn.net https://ajax.googleapis.com https://www.gstatic.com https://use.typekit.net; img-src 'self' data: blob: https://cdn.toyscenter.it https://www.toyscenter.it https://www.toyscenter.it https://assets.heresai.it https://*.google-analytics.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://www.google.com https://www.gstatic.com https://maps.googleapis.com https://maps.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://*.here.com https://*.hereapi.com https://*.scalapay.com https://*.klarnacdn.net https://*.trustpilot.com https://*.awin1.com https://*.dwin1.com https://*.toyscenter.it https://media.bimbo.prenatal-services.com https://cdn.cookielaw.org https://*.facebook.com https://bucket.heres.ai https://*.bing.com https://cdn.doofinder.com https://www.google.it https://t.mateti.net https://eu1-doofinderuser.s3.amazonaws.com https://checkoutshopper-live.cdn.adyen.com https://bat.bing.net https://cdn.toyscenter.it https://googleads.g.doubleclick.net https://img.youtube.com https://osm.klarnaservices.com https://pagead2.googlesyndication.com https://toyscenter.it https://raw.githubusercontent.com https://*.facebook.net https://public.prenatal-services.com https://www.zenaps.com https://client-side-metrics.nl3.eu.criteo.net https://www.google.al https://www.google.co.uk https://www.google.sm https://www.google.com.eg https://secure.gravatar.com https://www.googleadservices.com https://*.tiktok.com https://i.ytimg.com https://media.toys.prenatal-services.com https://www.google.co.in https://www.google.ch https://www.google.fr https://www.google.es https://www.google.ie https://www.google.com.tr https://www.google.de https://www.google.no https://www.google.com.om https://www.google.hr https://www.google.ca https://www.google.gr https://www.google.nl https://www.google.rs https://www.google.ge https://www.google.mu https://www.google.is; font-src 'self' data: https://fonts.gstatic.com https://cdn.toyscenter.it https://x.klarnacdn.net https://applepay.cdn-apple.com https://js.api.here.com https://use.typekit.net; connect-src 'self' https://www.toyscenter.it https://cdn.toyscenter.it https://config.heresai.it wss://bot.heresai.it https://*.doofinder.com wss://*.doofinder.com https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://www.googletagmanager.com https://maps.googleapis.com https://*.api.here.com https://*.hereapi.com https://*.scalapay.com https://*.klarna.com https://*.trustpilot.com https://*.awin1.com https://*.dwin1.com https://*.tiktok.com https://cdn.cookielaw.org https://*.bing.com https://www.google.com https://prenatal-services.com https://bat.bing.net https://pubsub.googleapis.com https://widget.heres.ai https://o24547.ingest.sentry.io https://www.paypal.com https://*.toyscenter.it https://eu.klarnaevt.com https://*.facebook.com https://pagead2.googlesyndication.com https://analytics-ipv6.tiktokw.us https://geolocation.onetrust.com https://privacyportal-eu.onetrust.com https://google.com https://www.googleadservices.com https://www.wepowerconnections.com https://na.klarnaevt.com https://www.google.it https://checkoutanalytics-live.adyen.com https://the.sciencebehindecommerce.com https://sslwidget.criteo.com https://pay.google.com blob: https://googleads.g.doubleclick.net https://fcmregistrations.googleapis.com https://www.zenaps.com https://www.awinblackfriday.com https://checkoutshopper-live.cdn.adyen.com https://checkoutshopper-live.adyen.com https://analytics.google.com https://*.klarnaevt.com https://*.klarnacdn.net https://spay.samsung.com https://t.mateti.net https://fonts.googleapis.com https://www.gstatic.com https://play.google.com https://www.google.al https://www.google.co.in https://www.google.gr https://www.google.co.uk; frame-src https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://*.scalapay.com https://*.klarna.com https://td.doubleclick.net https://www.googletagmanager.com https://servedby.flashtalking.com https://www.paypal.com https://gum.criteo.com https://728252369996325.mateti.net https://checkoutshopper-live.adyen.com https://*.facebook.com https://www.awin1.com https://static-bot.heres.ai https://www.youtube.com https://3ds.nexigroup.com https://pay.google.com https://secure7.arcot.com https://prenatal-services.com https://gumi.criteo.com https://*.nexigroup.com https://youtube.com https://www.toyscenter.it https://s1.trovaprezzi.it https://osm.klarnaservices.com https://applepay.cdn-apple.com https://cdn.iubenda.com https://catalogo.toyscenter.it https://acs.netsgroup.com; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://www.toyscenter.it https://*.facebook.com https://3ds4.nexigroup.com https://*.nexigroup.com https://acs.netsgroup.com; frame-ancestors 'self' https://prg-dashboard-prod.web.app; upgrade-insecure-requests; block-all-mixed-content; report-uri https://889ecefd2de50feabce01d0fae49ca81.report-uri.com/r/d/csp/reportOnly; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; 1
font-src fonts.googleapis.com fonts.gstatic.com *.googleapis.com *.gstatic.com data: *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action *.googlesyndication.com *.clarity.ms *.google.com *.facebook.com  'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net *.youtube-nocookie.com www.google.com *.tbibank.ro consentcdn.cookiebot.com *.google.ro *.facebook.com *.weltpixel.com  https://*.sameday.ro *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com https://images.unsplash.com *.tbicp.com *.tbibank.ro imgsct.cookiebot.com *.google.ro *.clarity.ms *.bing.com https://a.tile.openstreetmap.org https://b.tile.openstreetmap.org https://c.tile.openstreetmap.org https://www.selfawb.ro t.themarketer.com cdn1.themarketer.com https://firebasestorage.googleapis.com flagpedia.net *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://maps.googleapis.com *.tbicp.com *.tbibank.ro consentcdn.cookiebot.com *.cookiebot.com *.google.ro *.clarity.ms *.aqurate.ai *.themarketer.com t.themarketer.com cdn1.themarketer.com *.avada.io https://*.sameday.ro *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.google.ro *.fontawesome.com t.themarketer.com cdn1.themarketer.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com https://*.sameday.ro *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.google.ro *.google.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com consentcdn.cookiebot.com *.googlesyndication.com *.clarity.ms *.google.com google.com *.facebook.com *.aqurate.ai *.themarketer.com https://ecommerce.fancourier.ro https://nominatim.openstreetmap.org https://api.fancourier.ro t.themarketer.com cdn1.themarketer.com https://get.geojs.io *.avada.io www.gstatic.com  *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://251703a9-46ab-4e4f-ab25-1de6ee452399.sansec.watch/; report-to report-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-jpOPoVXKwPc5pxdZEdSIDA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com https://js.stripe.com https://challenges.cloudflare.com https://js.cloudflare.com https://newrelic.com https://js-agent.newrelic.com https://beacon.helpscout.net https://beacon-v2.helpscout.net https://ajax.googleapis.com https://api.amplitude.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://showroom.doyoubuzz.com; img-src 'self' data: https://www.google-analytics.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.doyoubuzz.com https://images.prismic.io https://static.cdn.prismic.io; frame-src 'self' https://www.google.com https://js.stripe.com https://challenges.cloudflare.com https://secure.helpscout.net https://www.youtube.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://js-agent.newrelic.com https://bam.nr-data.net https://beacon.helpscout.net https://api.stripe.com https://region1.google-analytics.com https://region1.analytics.google.com https://beacon-v2.helpscout.net https://*.cloudfront.net https://api.amplitude.com https://www.google.com https://www.googletagmanager.com https://beaconapi.helpscout.net data; style-src-elem 'self' 'unsafe-inline' https://www.gstatic.com https://fonts.googleapis.com; media-src 'self' https://beacon-v2.helpscout.net; style-src-attr 'unsafe-inline'; form-action 'self'; object-src 'none'; frame-ancestors 'self'; report-to default 1
default-src *; script-src data: http: https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' data: 'unsafe-inline' https: *.bootstrapcdn.com; img-src * 'self' data: blob:; font-src *; connect-src https:; media-src *; object-src 'none'; frame-src *; report-uri https://www.hsag.com/_csp; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net cash-f.squarecdn.com fonts.googleapis.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.nosto.com *.nos.to 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com www.googletagmanager.com * a9p7q2lm.adopt.com www.facebook.com *.nosto.com *.nos.to challenges.cloudflare.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io * https://images.unsplash.com a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org *.openstreetmap.org maps.googleapis.com maps.gstatic.com *.nosto.com *.nos.to *.gstatic.com *.googleapis.com *.hsforms.net *.hsforms.com adopt.twic.pics 'self' data: data: 'self' 'unsafe-inline'; script-src www.google-analytics.com googleads.g.doubleclick.net www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com try.abtasty.com a9p7q2lm.adopt.com *.clarity.ms *.iadvize.com *.mention-me.com *.wonderpush.com *.usedrop.io *.brevo.com sibautomation.com *.bambuser.com https://maps.googleapis.com https://rum.hlx.page www.google.com maps.googleapis.com www.gstatic.com cookie-cdn.cookiepro.com checkoutshopper-test.adyen.com geolocation.onetrust.com maps.gstatic.com fonts.googleapis.com *.nosto.com *.nos.to *.googleapis.com *.gstatic.com challenges.cloudflare.com *.hsforms.net *.hsforms.com adopt.twic.pics sdk.privacy-center.org *.google.com https://challenges.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.cash.app use.typekit.net p.typekit.net *.nosto.com *.nos.to *.gstatic.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io * dcinfos-cache.abtasty.com try.abtasty.com a9p7q2lm.adopt.com *.iadvize.com *.mention-me.com *.wonderpush.com *.usedrop.io *.brevo.com sibautomation.com *.bambuser.com https://maps.googleapis.com https://player.vimeo.com cookie-cdn.cookiepro.com maps.googleapis.com *.nosto.com *.nos.to t.elasticsuite.io *.hsforms.net *.hsforms.com adopt.twic.pics 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-Y2ExZDAxZTEtN2FkMS00Y2VmLTkzZjItMjAzN2YwM2QxMjNj' 'strict-dynamic'; style-src 'self' 'unsafe-inline' fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com; style-src-attr 'unsafe-inline'; img-src 'self' blob: data: *.fbcdn.net *.cdninstagram.com *.od.facebook.com www.facebook.com; media-src 'self' blob: data: *.fbcdn.net *.cdninstagram.com; font-src 'self' data: fonts.gstatic.com; connect-src 'self' *.sentry.io *.ingest.sentry.io vitals.vercel-insights.com *.fbcdn.net *.meta.ai; worker-src 'self' blob:; child-src 'self' blob:; frame-src 'self' blob:; frame-ancestors 'none'; form-action 'self'; base-uri 'self'; object-src 'none'; report-uri /api/csp-report https://o4509963614355457.ingest.us.sentry.io/api/4509985459404800/security/?sentry_key=2f357cf8852a33530d72872e55d86a65; report-to csp; upgrade-insecure-requests 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https: wss:; frame-src 'self' https:; form-action 'self' https:; upgrade-insecure-requests 1
script-src * 'self' 'unsafe-inline' 'unsafe-eval' blob *.zuerich.com *.holidu.com *.usercentrics.eu plausible.io *.tomas-travel.com *.dynamics.com *.vimeo.com *.youtube.com *.youtube-nocookie.com *.facebook.net connect.facebook.net *.tiktok.com *.sojern.com static.sojern.com *.licdn.com snap.licdn.com *.datadoghq.com *.azureedge.net *.guidle.com *.list-manage.com *.ostendis.com cdnjs.cloudflare.com *.goodguys.ai *.joaia.app *.windows.net *.ddev.site *.platformsh.site *.jsdelivr.net *.siteimprove.net *.siteimprove.com *.cloudfront.net *.newrelic.com *.datatrans.com *.doubleclick.net secured-pixel.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googleapis.com *.google.com; object-src *.ddev.site; style-src 'self' 'unsafe-inline' *.zuerich.com *.tomas-travel.com *.ostendis.com *.windows.net *.googleapis.com *.goodguys.ai *.ddev.site *.platformsh.site *.datatrans.com *.guidle.com *.joaia.app *.googletagmanager.com *.gstatic.com; img-src * 'self' blob: data: *.zuerich.com *.isu.pub *.mapz.com *.tomas-travel.com *.tomas.travel *.roundshot.com *.matterport.com *.goodguys.ai *.joaia.app *.ytimg.com *.vimeocdn.com *.usercentrics.eu *.yieldoptimizer.com *.doubleclick.net *.ads.linkedin.com *.adsrvr.org *.sojern.com *.adnxs.com *.giphy.com *.facebook.com *.tiktok.com *.tiktokw.us *.run.app *.ddev.site *.platformsh.site *.canto.de *.googlesyndication.com *.guidle.com bexi.ch *.sky-cam.ch *.yellow.camera *.einsiedeln.ch *.linkedin.com *.dynamics.com *.gstatic.com *.facebook.net *.amazee.io *.amazonaws.com *.brunnialpthal.ch *.honey.io *.phia.com *.pinterest.com *.rapperswil-zuerichsee.ch *.researchsolutions.com *.segelclub-sihlsee.ch *.studen-sz.ch *.waegitalersee.ch *.webcontentassessor.com *.webserve.ch *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googleapis.com *.google.com; media-src 'self' *.zuerich.com *.vimeo.com *.youtube.com *.youtube-nocookie.com datawrapper.dwcdn.net *.ddev.site *.platformsh.site; frame-src *.googletagmanager.com *.usercentrics.eu *.doubleclick.net *.issuu.com *.vimeo.com *.zuerich.com *.ddev.site *.platformsh.site *.youtube-nocookie.com *.joaia.app *.goodguys.ai *.canto.de *.cloudfront.net *.datatrans.com *.facebook.net *.guidle.com *.dailymotion.com *.roundshot.com *.feratel.com *.youtube.com camserver.ch *.camserver.ch *.tiktok.com *.facebook.com *.fotoshare.co datawrapper.dwcdn.net *.lunchgate.ch *.zscloud.net *.baustoffportal.com *.dynamics.com *.matterport.com *.moving-pictures.com *.it-wms.com *.eyz.swiss *.rapperswil-zuerichsee.ch *.zuerich-experience.com *.tomas-travel.com; frame-ancestors 'self' *.joaia.app *.goodguys.ai; font-src 'self' data: *.gstatic.com *.zuerich.com *.ddev.site *.platformsh.site *.perplexity.ai; connect-src * 'self' *.zuerich.com *.sentry.io *.tomas-travel.com vimeo.com *.vimeo.com *.youtube.com *.youtube-nocookie.com *.usercentrics.eu plausible.io *.doubleclick.net *.g.doubleclick.net *.googlesyndication.com *.dynamics.com *.guidle.com *.ostendis.com cdnjs.cloudflare.com *.goodguys.ai wss://*.goodguys.ai *.amazonaws.com *.joaia.app *.facebook.net *.ads.linkedin.com px.ads.linkedin.com *.tiktok.com *.tiktokw.us *.run.app *.sojern.com *.conversionsapigateway.com *.logs.datadoghq.com *.browser-intake-datadoghq.com *.ddev.site *.platformsh.site *.siteimprove.com *.facebook.com *.canto.de *.datatrans.com *.azure-api.net *.launchdarkly.com *.linkedin.com *.windows.net *.wordtune.com rumt-zh.com safesearchinc.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googleapis.com *.google.com *.azureedge.net; report-uri /api/csp-report 1
default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self' https://my.functionhealth.com https://www.zeropartyforms.com; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.lightboxcdn.com https://www.zeropartyforms.com https://global.ketchcdn.com https://cdn.ketchjs.com https://metrics.functionhealth.com https://*.functionhealth.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googletagservices.com https://*.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net https://*.google.com https://*.gstatic.com https://*.mxpnl.com https://*.mixpanel.com https://*.intercom.io https://*.intercomcdn.com https://*.statsig.com https://*.ketchcdn.com https://*.facebook.net https://*.tiktokcdn.com; connect-src 'self' https://ip-lookup-kappa.vercel.app https://global.ketchcdn.com https://metrics.functionhealth.com https://ipv4-cdn.oursprivacy.com https://statsig.functionhealth.com https://api-js.mixpanel.com https://*.functionhealth.com https://*.google-analytics.com https://*.googletagmanager.com https://*.doubleclick.net https://*.mxpnl.com https://*.mixpanel.com https://*.intercom.io https://*.intercomcdn.com https://*.statsig.com https://*.featuregates.org https://*.prodregistryv2.org https://*.ketchcdn.com https://*.facebook.com https://*.tiktok.com wss://*.intercom.io; img-src 'self' data: blob: https:; media-src 'self' blob: https://*.public.blob.vercel-storage.com https://cdn.sanity.io; style-src 'self' 'unsafe-inline' https://www.zeropartyforms.com https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://*.intercomcdn.com; frame-src 'self' https://*.youtube.com https://*.youtube-nocookie.com https://*.vimeo.com https://*.intercom.io https://*.doubleclick.net; worker-src 'self' blob:; manifest-src 'self' 1
font-src fonts.gstatic.com use.typekit.net *.fontawesome.com https://cdnjs.cloudflare.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.awin1.com *.zenaps.com *.fls.doubleclick.net account.wmf.com accountuat.wmf.com ad4m.at ct.pinterest.com fledge.eu.criteo.com groupe-seb.my.salesforce-sites.com gum.criteo.com service.force.com static.criteo.com static.criteo.net td.doubleclick.net www.paypalobjects.com www.sovendus-connect.com backoffice-eu.oct8ne.com static.trbo.com collect.trbo.com track2.trbo.com charger-v2.trbo.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.awin1.com *.zenaps.com *.wepowerconnections.com magefan.com cm.magefan.com https://images.unsplash.com *.disqus.com https://img.youtube.com * https://api.mapbox.com *.hsforms.net *.hsforms.com 'self' data: *.contentsquare.net static.trbo.com collect.trbo.com track2.trbo.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com https://maps.googleapis.com https://player.vimeo.com *.disqus.com * https://cdnjs.cloudflare.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com *.contentsquare.net *.contentsquare.com halc.iadvize.com static.trbo.com api-v4.trbo.com charger-v2.trbo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.fontawesome.com https://fonts.googleapis.com https://cdnjs.cloudflare.com *.googleapis.com *.gstatic.com service.force.com static.trbo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.wepowerconnections.com https://the.sciencebehindecommerce.com https://maps.googleapis.com https://player.vimeo.com autocomplete2.postdirekt.de t.elasticsuite.io *.hsforms.net *.hsforms.com *.contentsquare.net app.contentsquare.com api.paypal.com ariane.abtasty.com bat.bing.com cdn.cookielaw.org content.hotjar.io ct.pinterest.com dcinfos-cache.abtasty.com geolocation.onetrust.com googleads.g.doubleclick.net identification-api.sovendus.com maps.googleapis.com measurement-api.criteo.com pagead2.googlesyndication.com privacyportal-eu.onetrust.com region1.analytics.google.com stats.g.doubleclick.net tag.commander1.com try.abtasty.com ws.hotjar.com www.google.com www.google.de www.pinterest.com halc.iadvize.com data.trbo.com newsletter-api.trbo.com api-v4.trbo.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self';base-uri 'self';form-action 'self' 1
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' *.buzzsprout.com *.cookielaw.org *.getblueshift.com *.onetrust.org *.typekit.net *.vercel-scripts.com bat.bing.com connect.facebook.net static.hotjar.com script.hotjar.com vercel.live *.chatbot.com *.clarity.ms crux-api-onerhino.vercel.app unpkg.com cwv.onerhino.com *.internationalliving.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net;style-src 'self' 'unsafe-inline' *.typekit.net vercel.live;img-src 'self' blob: data: *.buzzsprout.com *.cookielaw.org *.ctfassets.net *.facebook.com *.internationalliving.com *.nodebb.com *.youtube.com *.ytimg.com *.vercel.com vercel.com *.bing.com *.clarity.ms https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat;connect-src wss://*.pusher.com 'self' *.cookielaw.org api.getblueshift.com *.onetrust.com *.hotjar.io vercel.live *.chatbot.com bat.bing.com *.clarity.ms crux-api.vercel.app *.internationalliving.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat;font-src 'self' *.typekit.net vercel.live;frame-src 'self' *.buzzsprout.com *.typeform.com *.youtube-nocookie.com *.youtube.com fast.wistia.net player.vimeo.com td.doubleclick.net vimeo.com vercel.live *.chatbot.com *.googletagmanager.com;object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'none' 1
default-src 'none'; base-uri 'self'; child-src 'self' blob:; connect-src 'self' bam.nr-data.net links.services.disqus.com cdn.cookielaw.org api.segment.io *.mapbox.com *.mux.com analytics.google.com www.google-analytics.com geolocation.onetrust.com wss: bat.bing.com *.clarity.ms wahoofitness-us.attn.tv wahoofitness.attn.tv events.attentivemobile.com stats.g.doubleclick.net region1.analytics.google.com www.google.com privacyportal.onetrust.com api.rudderstack.com vc.hotjar.io region1.google-analytics.com www.google.cz www.google.au cdn.segment.com fonts.googleapis.com cdn.wahooligan.com www.google.no *.wahooligan.com; font-src 'self' cdn.wahooligan.com fonts.gstatic.com moz-extension data:; form-action 'self' www.wahooligan.com *.wahoofitness.com wahoofitness.zendesk.com api.wahooligan.com www.facebook.com bat.bing.com n.clarity.ms analytics.google.com wahoofitness.centercode.com api.wahooligan.com/oauth/authorize api.staging.wahooligan.com/oauth/authorize *.wahooligan.com; frame-ancestors 'self' *.zendesk.com *.wahooligan.com *.wahoofitness.com; frame-src 'self' disqus.com metabase.wahooligan.com www.youtube-nocookie.com js.stripe.com www.googletagmanager.com td.doubleclick.net www.facebook.com; img-src * data: blob:; media-src blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.wahooligan.com www.google-analytics.com api.tiles.mapbox.com code.jquery.com cdn.segment.com cdnjs.cloudflare.com js.stripe.com js-agent.newrelic.com bam.nr-data.net bam.nr-data.com *.zendesk.com static.zdassets.com cdn.cookielaw.org c.disquscdn.com optanon.blob.core.windows.net www.gstatic.com www.googletagmanager.com cdn.rudderlabs.com data: *.wahooligan.com; script-src-elem 'self' 'unsafe-inline' cdn.wahooligan.com code.jquery.online code.jquery.com cdn.cookielaw.org cdn.segment.com bam.nr-data.com bam.nr-data.net www.googletagmanager.com js-agent.newrelic.com optanon.blob.core.windows.net assets.zendesk.com static.zdassets.com www.google-analytics.com api.tiles.mapbox.com cdnjs.cloudflare.com geolocation.onetrust.com www.gstatic.com js.stripe.com cdn.rudderlabs.com cdn.attn.tv *.zendesk.com www.clarity.ms script.hotjar.com static.hotjar.com resources.xg4ken.com googleads.g.doubleclick.net bat.bing.com connect.facebook.net n.clarity.ms analytics.google.com *.wahooligan.com; style-src 'self' 'unsafe-inline' fonts.gstatic.com cdn.cookielaw.org fonts.googleapis.com api.tiles.mapbox.com cdn.wahooligan.com c.disquscdn.com www.gstatic.com; style-src-elem 'self' 'unsafe-inline' cdn.wahooligan.com cdn.cookielaw.org assets.zendesk.com api.tiles.mapbox.com fonts.googleapis.com www.gstatic.com connect.facebook.net cdnjs.cloudflare.com; report-uri https://www.wahooligan.com/csp_reports 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://tagmanager.google.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com; object-src 'none'; 1
default-src 'self'; script-src 'self' 'unsafe-eval'; style-src 'self'; img-src 'self' data:; connect-src 'self'; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; report-uri /__vsctcspreport__ 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.cloudflare.com  https://*.migracion.gob.do https://cdn.userway.org https://eticket.migracion.gob.do https://personal.migracion.gob.do https://cdn.jsdelivr.net https://connect.facebook.net https://www.google-analytics.com https://challenges.cloudflare.com https://static.cloudflareinsights.com; worker-src https://migracion.gob.do blob:; style-src 'self' 'unsafe-inline' https://cdn.userway.org https://fonts.googleapis.com https://cdn.jsdelivr.net; font-src 'self' https://cdn.userway.org https://fonts.gstatic.com https://cdn.jsdelivr.net; media-src https://cdn.userway.org; img-src 'self' https://secure.gravatar.com https://s.w.org https://a.tile.openstreetmap.org https://b.tile.openstreetmap.org https://c.tile.openstreetmap.org data: https://cdn.userway.org https://*.migracion.gob.do https://cdn.jsdelivr.net https://www.google-analytics.com; connect-src 'self' https://cdn.userway.org https://api.userway.org https://*.migracion.gob.do https://www.google-analytics.com https://challenges.cloudflare.com; frame-src 'self' https://cdn.userway.org https://www.facebook.com https://www.youtube.com https://be.nortic.ogtic.gob.do https://eticket.migracion.gob.do https://challenges.cloudflare.com; object-src 'self'; base-uri 'self'; form-action 'self' https://*.migracion.gob.do; frame-ancestors 'self'; upgrade-insecure-requests; block-all-mixed-content; report-uri https://report-uri.migracion.gob.do/api/reports; report-to csp-endpoint; 1
script-src 'self' 'unsafe-inline' *.bootsopticians.com *.tiktok.com *.facebook.net *.googleapis.com *.abtasty.com *.pinimg.com *.openai.com *.cloudflareinsights.com *.cquotient.com *.googletagmanager.com *.salecycle.com *.contentsquare.net *.cookielaw.org *.unpkg.com; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=hHRs5BSFBd6djqSLXgvE6GwiI5BAlqrivP0EC1f_Pkk-1789274438.6890442-1.0.1.1-66FHM9rXRW.FSlEcWvZHoQt5o5fmd6XpuBOUyRDsBL13Nm8od3uLf_BJyERz14EqnRCFlAJciemcV0IHlMXPDkLaLK7lPSJc31vwNkYSD1ibavpFB59yew9fbKgI3qo9.4P5GWRMD6IrnUrYKfgqMFSrDJI9NAKMR_bPa1Ixt6YMdCoOt9mdZ_cmu_WETp2grWV1SR7QZ_dJEdlKrJoSsQ; report-to cf-ktogqhevymjtozdg 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.posthog.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https:; worker-src 'self' blob:; frame-src 'self' https:; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net https://cdnjs.cloudflare.com *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com http://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.googleadservices.com *.paypal.com *.google-analytics.com https://l.clarity.ms/collect  *.paypal.com  https://get.geojs.io  https://js-agent.newrelic.com  https://royaloak-dev.codilar.in https://mcstaging.royaloakindia.com  https://royaloakindia.com  https://bam.nr-data.net https://f.clarity.ms https://sdk-01.moengage.com/ https://mcprod.royaloakindia.com https://cdnjs.cloudflare.com https://commerce.adobedtm.com https://js-agent.newrelic.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors https://cdnjs.cloudflare.com https://js-agent.newrelic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.googleadservices.com *.paypal.com *.google-analytics.com https://l.clarity.ms/collect  *.paypal.com  https://get.geojs.io  https://js-agent.newrelic.com  https://royaloak-dev.codilar.in  https://mcstaging.royaloakindia.com  https://royaloakindia.com  https://bam.nr-data.net https://f.clarity.ms https://sdk-01.moengage.com/ https://mcprod.royaloakindia.com https://cdnjs.cloudflare.com https://commerce.adobedtm.com https://js-agent.newrelic.com api.razorpay.com www.youtube-nocookie.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com http://x.nitrocommerce.ai https://x.nitrocommerce.ai http://t.makehook.ws https://t.makehook.ws c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://plumrocket.com testourcode.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net *.googleadservices.com *.paypalobjects.com *.google-analytics.com https://l.clarity.ms/collect  *.paypal.com  https://get.geojs.io  https://js-agent.newrelic.com  https://royaloak-dev.codilar.in  https://mcstaging.royaloakindia.com  https://royaloakindia.com  https://bam.nr-data.net https://f.clarity.ms https://sdk-01.moengage.com/ https://mcprod.royaloakindia.com https://cdnjs.cloudflare.com https://commerce.adobedtm.com https://js-agent.newrelic.com https://pdp.gokwik.co https://res.shopster.chat https://x.nitrocommerce.ai https://staging.royaloakindia.com https://www.facebook.com cdn.razorpay.com magefan.com cm.magefan.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com http://x.nitrocommerce.ai http://t.makehook.ws https://t.makehook.ws www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com assets.snapmint.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-ds.com *.googleadservices.com *.paypal.com *.google-analytics.com https://l.clarity.ms/collect  *.paypal.com  https://get.geojs.io  https://js-agent.newrelic.com  https://royaloak-dev.codilar.in  https://mcstaging.royaloakindia.com  https://royaloakindia.com  https://bam.nr-data.net https://f.clarity.ms https://sdk-01.moengage.com/ https://mcprod.royaloakindia.com https://cdnjs.cloudflare.com https://commerce.adobedtm.com https://js-agent.newrelic.com https://pdp.gokwik.co https://offer-widget.gokwik.co https://x.nitrocommerce.ai https://urlbird.nitrocommerce.ai https://assets.snapmint.com https://cdn.razorpay.com https://checkout.razorpay.com https://clarity.ms https://www.clarity.ms www.facebook.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://bat.bing.com https://unpkg.com checkout.razorpay.com *.googleapis.com *.google.com *.gstatic.com connect.facebook.net graph.facebook.com business.facebook.com http://x.nitrocommerce.ai http://t.makehook.ws https://t.makehook.ws js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com api.snapmint.com assets.snapmint.com sandboxapi.snapmint.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://cdnjs.cloudflare.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com http://x.nitrocommerce.ai https://x.nitrocommerce.ai http://t.makehook.ws https://t.makehook.ws http://fonts.googleapis.com https://fonts.googleapis.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io commerce.adobe.net qa-api.magedevteam.com *.sentry.io *.googleadservices.com *.paypal.com *.google-analytics.com https://l.clarity.ms/collect  *.paypal.com  https://get.geojs.io  https://js-agent.newrelic.com  https://royaloak-dev.codilar.in  https://mcstaging.royaloakindia.com  https://royaloakindia.com  https://bam.nr-data.net https://f.clarity.ms https://sdk-01.moengage.com/ https://mcprod.royaloakindia.com https://cdnjs.cloudflare.com https://commerce.adobedtm.com https://js-agent.newrelic.com https://pdp.gokwik.co https://x.nitrocommerce.ai https://urlbird.nitrocommerce.ai https://t.makehook.ws https://assets.snapmint.com https://api.snapmint.com https://lumberjack.razorpay.com https://lumberjack-metrics.razorpay.com https://googleads.g.doubleclick.net https://clarity.ms https://mpc2-prod-26-is5qnl632q-uc.a.run.app https://api.braintreegateway.com https://client-analytics.braintreegateway.com lumberjack.razorpay.com lumberjack-metrics.razorpay.com www.youtube.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com *.gstatic.com http://x.nitrocommerce.ai http://t.makehook.ws api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; media-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ista.piwik.pro https://*.usercentrics.eu https://www.youtube.com https://maps.googleapis.com https://*.g.doubleclick.net https://*.google-analytics.com https://*.googlesyndication.com https://*.googleapis.com https://tracking.ista.com https://www.googletagmanager.com https://www.clickcease.com https://www.googleoptimize.com https://*.hotjar.com https://siteintercept.qualtrics.com https://*.siteintercept.qualtrics.com https://www.facebook.com https://connect.facebook.net https://*.twitter.com 'report-sample'; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https: blob: 'report-sample'; style-src 'self' 'unsafe-inline' https://*.usercentrics.eu https://fonts.googleapis.com 'report-sample'; style-src-elem 'self' 'unsafe-inline' https://fonts.gstatic.com https://fonts.googleapis.com https://www.googletagmanager.com/debug/badge.css 'report-sample'; worker-src 'self' 'unsafe-inline' 'unsafe-eval' blob: 'report-sample'; object-src 'none'; connect-src 'self' https://tracking.ista.com https://ista.piwik.pro https://*.usercentrics.eu https://fonts.googleapis.com *.google.com https://*.googleapis.com https://*.gstatic.com blob: data: https://*.google.com https://*.google.de https://*.g.doubleclick.net https://*.google-analytics.com https://*.googlesyndication.com https://siteintercept.qualtrics.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com; frame-src 'self' https://*.usercentrics.eu *.youtube-nocookie.com *.youtube.com *.vimeo.com *.google.com https://*.doubleclick.net https://*.g.doubleclick.net https://*.googlesyndication.com https://tracking.ista.com https://www.googletagmanager.com https://www.facebook.com https://*.twitter.com; frame-ancestors 'self'; report-uri https://www.ista.com/corporate/@http-reporting?csp=report&requestTime=1789220515463459&requestHash=d0f1b78ae714f540e524656e4d262b745585be9c 1
base-uri https://*.adnami.io; worker-src blob: data: 1
default-src 'self' *.apsiyon.com; style-src 'self' 'unsafe-inline' analytics.tiktok.com analytics.tiktok.com/api/v2/monitor cdn.apsiyon.com cdnjs.cloudflare.com translate.googleapis.com fonts.googleapis.com *.apsiyon.com wchat.freshchat.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.apsiyon.com www.google.com www.clarity.ms cdn.apsiyon.com analytics.tiktok.com analytics.tiktok.com/api/v2/monitor www.analytics.tiktok.com/api/v2/monitor connect.facebook.net www.googledservices.com www.googleadservices.com code.jquery.com cdn.jsdelivr.net maps.googleapis.com www.googletagmanager.com  www.google-analytics.com googleads.g.doubleclick.net cdn.taboola.com trc.taboola.com  www.gstatic.com wchat.freshchat.com  snap.licdn.com; frame-src 'self' www.googletagmanager.com www.googleadservices.com connect.facebook.net web.facebook.com *.apsiyon.com m.facebook.com  www.google.ro www.youtube.com youtube.com httpsapsiyoncom.webpush.freshchat.com www.google.com bid.g.doubleclick.net wchat.freshchat.com www.facebook.com analytics.tiktok.com analytics.tiktok.com/api/v2/monitor; img-src data: * ; connect-src 'self' 'unsafe-inline' localhost:51192 analytics.tiktok.com analytics.tiktok.com/api/v2/monitor www.google.bg www.google.li www.google.com.bd www.google.ro www.google.com.hk www.google.co.jp www.google.tm www.google.ps www.google.pl www.google.ba www.google.co.za www.google.cz www.google.md www.google.com.ua www.google.com.qa www.google.ba www.google.com.et www.google.jo www.google.hu www.google.ph stats.g.doubleclick.net www.google.at www.google.com.cy www.google.nl www.google.kz www.google.co.in www.google.com.sa www.google.es www.google.kg  www.google.co.id www.google.dk www.google.com.kw www.google.co.kr www.google.cn www.google.co.th www.google.co.uz www.google.co.uk www.google.ae www.google.ch www.google.az www.google.lu www.google.it www.google.com.pk www.google.be www.google.fi www.google.no www.google.sn www.bing.com www.google.se www.google.iq www.google.ie www.google.fr www.googleanalytics.com www.google.de www.google.ru *.taboola.com www.google.co.il  www.facebook.com  www.google.com.tr *.clarity.ms  *.apsiyon.com  analytics.google.com www.google-analytics.com; font-src 'self' data: fonts.googleapis.com use.fontawesome.com themes.googleusercontent.com *.apsiyon.com themes.googleusercontent.com static3.avast.com cdnjs.cloudflare.com fonts.gstatic.com; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://fonts.gstatic.com https://ws.colissimo.fr *.fontawesome.com maxcdn.bootstrapcdn.com https://assets-staging.oney.io https://assets.oney.io data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com https://plumrocket.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.dotdigital-pages.com *.dotdigital.com https://www.youtube.com https://form.typeform.com *.criteo.com *.hotjar.com *.facebook.com *.simply-jobs.fr https://plumrocket.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.bird.eu *.trackedlink.net *.ddlnk.net https://maps.googleapis.com https://maps.gstatic.com https://ws.colissimo.fr https://*.tile.openstreetmap.fr https://*.onyourmap.com https://google.fr magefan.com cm.magefan.com *.disqus.com *.thebrighttag.com *.avis-verifies.com *.adform.net id5-sync.com *.liadm.com *.google.com *.google.fr *.kameleoon.eu *.nr-data.net *.metaffiliation.com *.facebook.com *.d-bi.fr *.adnxs.com *.omnitagjs.com *.casalemedia.com *.dmxleo.com *.360yield.com *.criteo.com *.media.net *.mediavine.com *.outbrain.com *.pubmatic.com *.rubiconproject.com *.sharethrough.com *.smaato.net *.smartadserver.com *.taboola.com *.teads.tv *.3lift.com *.advertising.com *.yahoo.com *.yieldlab.net *.yieldmo.com *.rlcdn.com *.smartclip.net *.tremorhub.com *.twiago.com *.krxd.net *.bing.com *.bidswitch.net *.doubleclick.net *.googletagmanager.com *.googleapis.com *.monnaiedeparis.fr blob: www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://widget-stg.oney.io https://assets-staging.oney.io https://assets.oney.io data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-ds.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com *.disqus.com *.kameleoon.eu *.google.fr *.facebook.net *.d-bi.fr *.hotjar.com *.serving-sys.com *.criteo.com *.criteo.net *.monnaiedeparis.fr *.metaffiliation.com *.eulerian.net *.doubleclick.net *.bing.com *.soundclound.com *.soundcloud.com *.piwik.pro *.gstatic.com *.clarity.ms ipinfo.io *.addtoany.com maps.googleapis.com api.mapbox.com ws.colissimo.fr *.googletagmanager.com *.m1by1.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://assets-staging.oney.io https://assets.oney.io https://www.monnaiedeparis.fr 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com *.fontawesome.com *.googleapis.com *.addtoany.com 'self' data: *.typekit.net maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io commerce.adobe.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com qa-api.magedevteam.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https://ws.colissimo.fr https://maps.googleapis.com https://nominatim.openstreetmap.org https://*.onyourmap.com https://*.mapbox.com http://dpm.demdex.net *.google-analytics.com *.g.doubleclick.net *.kameleoon.eu *.google.fr *.hotjar.com *.serving-sys.com *.criteo.com *.criteo.net *.monnaiedeparis.fr *.metaffiliation.com *.eulerian.net *.piwik.pro * payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://widget-stg.oney.io https://oney.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://fonts.googleapis.com; report-to report-endpoint; 1
font-src *.googleapis.com *.gstatic.com data: *.klarnacdn.net *.fontawesome.com *.cdn-apple.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.klarna.com *.playground.klarna.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.facebook.com *.bing.com *.coccinelle.com stileo.it *.cookiebot.com *.google.it *.klarnacdn.net *.klarnaservices.com *.playground.klarnaservices.com *.klarna.com *.klarnaevt.com *.worldline-solutions.com *.secured-by-ingenico.com https://firebasestorage.googleapis.com *.webtrekk.net *.wt-eu02.net https://fbc.wcfbc.net https://*.flx1.com/ https://dmp.adform.net/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de kit.fontawesome.com *.cookiebot.com *.jsdelivr.net *.facebook.net *.clarity.ms *.bing.com glamipixel.com *.coccinelle.com *.rakuten.com *.rmtag.com *.criteo.com *.adobedtm.com *.cardinalcommerce.com *.doubleclick.net *.google.com *.r-data.net *.accelasearch.io *.klarnacdn.net *.klarnaservices.com *.playground.klarnaservices.com *.klarna.com x.klarnacdn.net *.cdn-apple.com *.avada.io https://responder.wt-safetag.com https://*.flx1.com/ https://www.googletagmanager.com https://*.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.klarnacdn.net *.fontawesome.com *.gstatic.com *.googleapis.com *.google.com https://fonts.bunny.net unsafe-inline assets.braintreegateway.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cloudfront.net *.amazonaws.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.cookiebot.com *.googlesyndication.com *.google-analytics.com *.doubleclick.net *.coccinelle.com *.criteo.com *.klarnaevt.com *.playground.klarnaevt.com *.klarnaservices.com *.playground.klarnaservices.com *.klarnacdn.net x.klarnacdn.net *.klarna.com *.worldline-solutions.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io https://*.flx1.com/ https://*.gstatic.com https://jamie.g.shortest-route.com https://*.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.stripe.com klarna.com *.link.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; font-src 'self'; connect-src 'self'; frame-ancestors 'self'; form-action 'self'; base-uri 'self'; report-uri https://www.myfone.com.tw/api/v1/csp/report; report-to csp-endpoint; 1
default-src 'self' https://exlibris.ch https://*.exlibris.ch https://*.sentry.io https://chatbot-api.migros.ch https://chatbot-cdn.migros.ch https://*.service.migros.cloud; script-src  'self' 'unsafe-inline' 'unsafe-eval' https://exlibris.ch https://*.exlibris.ch https://googletagmanager.com https://*.googletagmanager.com https://epoq-systems.de http://epoq-systems.de https://*.epoq-systems.de http://*.epoq-systems.de https://epoq.de http://epoq.de https://*.epoq.de http://*.epoq.de https://connect.facebook.net https://google.com https://*.google.com https://googleanalytics.com https://*.googleanalytics.com https://google-analytics.com https://*.google-analytics.com https://googlesyndication.com https://*.googlesyndication.com https://gstatic.com https://*.gstatic.com https://googleapis.com https://*.googleapis.com https://googleadservices.com https://*.googleadservices.com bat.bing.com https://*.hotjar.com https://*.hotjar.io https://datatrans.com https://*.datatrans.com https://googleads.g.doubleclick.net https://cookielaw.org https://*.cookielaw.org https://*.trustpilot.com https://pay.google.com https://sandbox.secure.checkout.visa.com https://*.sentry.io analytics.tiktok.com analytics-ipv6.tiktokw.us http://ads.tiktok.com https://chatbot-api.migros.ch https://chatbot-cdn.migros.ch https://*.service.migros.cloud; worker-src 'self' blob: https://chatbot-api.migros.ch https://chatbot-cdn.migros.ch https://*.service.migros.cloud; connect-src 'self' https://exlibris.ch https://*.exlibris.ch exlibris.azureedge.net exlibris.blob.core.windows.net https://epoq.de https://*.epoq.de http://epoq-systems.de https://epoq-systems.de *.facebook.com https://migros.ch https://www.google.at https://*.google.ba https://*.migros.ch https://*.google.de https://*.google.ch https://*.google.com https://www.google.fr https://*.google.it https://*.google.li https://*.google.tn https://*.google.co.uk https://*.google.com.sa https://www.googleadservices.com https://google-analytics.com https://*.google-analytics.com https://google-analytics.ch https://*.google-analytics.ch https://google.com https://*.google.com https://analytics.google.com https://*.analytics.google.com https://analytics.google.ch https://*.analytics.google.ch https://googleapis.com https://*.googleapis.com https://googlesyndication.com https://*.googlesyndication.com https://*.googletagmanager.com bat.bing.com bat.bing.net https://doubleclick.net https://*.doubleclick.net https://g.doubleclick.net https://*.g.doubleclick.net https://cookielaw.org https://*.cookielaw.org https://onetrust.com https://*.onetrust.com https://onetrust.io https://*.onetrust.io https://hotjar.com https://*.hotjar.com https://hotjar.io https://*.hotjar.io wss://*.hotjar.com wss://hotjar.com https://*.sentry.io analytics.tiktok.com analytics-ipv6.tiktokw.us http://ads.tiktok.com https://widget.trustpilot.com https://chatbot-api.migros.ch https://chatbot-cdn.migros.ch https://*.service.migros.cloud; style-src 'self' 'unsafe-inline' https://exlibris.ch https://*.exlibris.ch https://googleapis.com https://*.googleapis.com https://google.com https://*.google.com https://googletagmanager.com https://tagmanager.google.com fast.fonts.net https://epoq-systems.de https://*.epoq-systems.de https://epoq.de https://*.epoq.de http://epoq-systems.de http://*.epoq-systems.de http://epoq.de http://*.epoq.de; img-src 'self' dhttps data: *.facebook.com https://exlibris.ch https://*.exlibris.ch exlibris.azureedge.net https://epoq-systems.de https://*.epoq-systems.de https://epoq.de https://*.epoq.de http://epoq-systems.de http://*.epoq-systems.de http://epoq.de http://*.epoq.de https://gstatic.com https://*.gstatic.com https://googleapis.com https://*.googleapis.com https://google-analytics.com https://*.google-analytics.com https://doubleclick.net https://*.doubleclick.net https://g.doubleclick.net https://*.g.doubleclick.net https://googlesyndication.com https://*.googlesyndication.com https://*.google.at https://*.google.ch https://*.google.de https://*.google.dz https://*.google.es https://*.google.fr https://*.google.hr https://*.google.it https://*.google.li https://*.google.lu https://*.google.nl https://*.google.sc https://*.google.si https://*.google.co.uk https://*.google.co.in https://*.google.com https://*.google.com.pa https://*.google.com.ph https://*.google.com.gh https://*.google.com.tr https://*.google.com.br https://*.google.com.cy https://www.googleadservices.com https://googletagmanager.com https://*.googletagmanager.com https://hotjar.com https://*.hotjar.com https://hotjar.io https://*.hotjar.io bat.bing.com https://cookielaw.org https://*.cookielaw.org optanon.blob.core.windows.net exlibris.blob.core.windows.net https://migros.ch https://*.migros.ch analytics.tiktok.com analytics-ipv6.tiktokw.us http://ads.tiktok.com https://ytimg.com https://*.ytimg.com https://chatbot-cdn.migros.ch https://*.service.migros.cloud; media-src 'self' data https://exlibris.ch https://*.exlibris.ch exlibris.blob.core.windows.net https://*.phononet.de/ exlibris.azureedge.net https://chatbot-api.migros.ch https://chatbot-cdn.migros.ch https://*.service.migros.cloud; frame-src 'self' bytedance: sslocal: https://exlibris.ch https://*.exlibris.ch https://google.de https://*.google.de https://google.com https://*.google.com https://googletagmanager.com https://*.googletagmanager.com https://googlesyndication.com https://*.googlesyndication.com https://youtube.com https://*.youtube.com https://datatrans.com https://*.datatrans.com https://*.fls.doubleclick.net https://bic-media.com https://*.bic-media.com https://youtube-nocookie.com https://*.youtube-nocookie.com https://doubleclick.net https://*.doubleclick.net https://hotjar.com https://*.hotjar.com https://hotjar.io https://*.hotjar.io https://tradedoubler.com https://*.tradedoubler.com https://blickinsbuch.de https://*.blickinsbuch.de https://book2look.com https://*.book2look.com https://postfinance.ch https://*.postfinance.ch https://viseca.ch/ https://*.viseca.ch/ https://bonuscard.ch/ https://*.bonuscard.ch/ https://3ds.bonuscard.ch/ https://*.3ds.bonuscard.ch/ https://arcot.com/ https://*.arcot.com/ https://*.trustpilot.com https://pay.google.com https://sandbox.secure.checkout.visa.com https://3d.datatrans.com https://3d.sandbox.datatrans.com https://chatbot-api.migros.ch https://chatbot-cdn.migros.ch https://*.service.migros.cloud; font-src 'self' data: https://exlibris.ch https://*.exlibris.ch https://gstatic.com https://*.gstatic.com https://google.com https://*.google.com https://hotjar.com https://*.hotjar.com https://hotjar.io https://*.hotjar.io https://chatbot-api.migros.ch https://chatbot-cdn.migros.ch https://*.service.migros.cloud; manifest-src 'self' https://exlibris.ch https://*.exlibris.ch; frame-ancestors 'self' https://exlibris.ch https://*.exlibris.ch; report-uri /loc/csp-report 1
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com https://applepay.cdn-apple.com https://static.dhlecommerce.nl https://fonts.gstatic.com *.fontawesome.com * data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://applepay.cdn-apple.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io js.mollie.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https://images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com https://static.buckaroo.nl https://www.buckaroo.nl https://www.paypalobjects.com https://pay.google.com https://developers.google.com https://applepay.cdn-apple.com https://maps.googleapis.com https://maps.gstatic.com magefan.com cm.magefan.com https://www.mollie.com * data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js https://maps.googleapis.com https://player.vimeo.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com https://www.sandbox.paypal.com https://applepay.cdn-apple.com https://pay.google.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://static.dhlecommerce.nl js.mollie.com * 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://static.dhlecommerce.nl https://maps.googleapis.com https://fonts.googleapis.com *.fontawesome.com * 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com * 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://applepay.buckaroo.io https://smp-paymentservices.apple.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://api-gw.dhlparcel.nl https://static.dhlecommerce.nl * 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://209c367d-15d5-45b5-8149-cd4f425fd724.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; script-src 'report-sample' 'self' https://api-maps.yandex.ru/2.1/ https://bitrix.info/ba.js https://cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js https://mc.yandex.ru/metrika/watch.js https://yastatic.net/s3/front-maps-static/maps-front-jsapi-v2-1/2.1.79-16700290/out/release/full-eab6f8e3ccfa741c06508cb710c0ae92a2a0c8ac.js; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self' https://bitrix.info https://mc.yandex.ru; font-src 'self'; frame-src 'self' https://mc.yandex.ru; img-src 'self' data: https://api-maps.yandex.ru; manifest-src 'self'; media-src 'self'; worker-src 'none'; 1
script-src 'nonce-+l/uNRsAVM8yIS84OBxWig==' 'strict-dynamic' 'unsafe-eval' 'report-sample' https: 'unsafe-inline'; object-src 'none'; base-uri 'none'; report-to csp-endpoint; report-uri https://pdb9u9n7.uriports.com/reports 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://*.doubleclick.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; form-action 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; upgrade-insecure-requests 1
script-src 'nonce-hfnBgQm93MS4SYr7o73Z7w==' 'strict-dynamic' 'unsafe-eval' 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; report-uri /_/csp-report 1
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/  https://widget.trustpilot.com;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://appleid.cdn-apple.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com *.myheritage.pl https://www.myheritage.pl  'unsafe-eval' 'nonce-9f67473a09bd049e7d76a5dbf93e608e' 'strict-dynamic' https://widget.trustpilot.com https://invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style  https://widget.trustpilot.com;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io https://www.google.com/recaptcha/enterprise/* https://www.google.com/recaptcha/enterprise/ https://www.google.com/recaptcha/enterprise/clr https://www.google.com/recaptcha/ https://maps.googleapis.com https://people.googleapis.com https://translate-pa.googleapis.com *.myheritage.pl https://widget.trustpilot.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:  https://widget.trustpilot.com https://*.trustpilot.com;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=report&canonical_page_id=/company/home/ 1
default-src 'self'; font-src data: https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud; script-src 'self' https://*.bazaarvoice.com https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://exc.mm.dm.at https://mpsnare.iesnare.com https://omt.dm.at https://tags.tiqcdn.com https://web.cmp.usercentrics.eu https://www.dm.at https://www.google.com https://www.google.com/recaptcha/ https://www.gstatic.com https://www.gstatic.com/recaptcha/; worker-src 'self' blob:; connect-src 'self' https://*.bazaarvoice.com https://aggregator.service.usercentrics.eu https://api.mapbox.com https://api.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://browser-intake-datadoghq.eu https://cart-recos.services.dmtech.com https://cdcs.usercentrics.eu https://collect.tealiumiq.com https://consent-api.service.consent.usercentrics.eu https://consent-rt-ret.service.consent.usercentrics.eu https://consents.usercentrics.eu https://content-preview.apps.prod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://direct-collect.dy-api.eu https://direct.dy-api.eu https://dmpay-gateway.services.dmtech.com https://dy-api.eu https://editorial-content.dm-static.com https://events.mapbox.com https://exc.mm.dm.at https://frontend-tracking-infra-service.services.dmtech.com https://graphql.usercentrics.eu https://insights.algolia.io https://logs.browser-intake-datadoghq.eu https://maut-prod.services.dmtech.com https://maut-rls.nonprod.services.dmtech.com https://mpsnare.iesnare.com https://my-products-api.services.dmtech.com https://omacs.services.dmtech.com https://omc.dm.at https://predictive-shopping-service.services.dmtech.com https://product-based-recos.services.dmtech.com https://product-search.services.dmtech.com https://product-semantic-search.services.dmtech.com https://rcom-eu.dynamicyield.com https://recos-as-a-service.services.dmtech.com https://region1.google-analytics.com https://retail-media.services.dmtech.com https://rum.browser-intake-datadoghq.eu https://s2s.adjust.com https://signin.dm.at https://sos-prod.availability.services.dmtech.com https://staedtetour.dm-fb2.de https://stars.services.dmtech.com https://storage.googleapis.com/gift-card-builder-emergency-disabled-bucket/ https://store-data-service.services.dmtech.com https://store-order-service.services.dmtech.com https://v1.api.service.cmp.usercentrics.eu https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://zoe-shop-proxy-prod.services.dmtech.com https://kuba-prod.services.dmtech.com https://zoe-shop-proxy-prod.services.dmtech.com https://cartnext.services.dmtech.com https://dmcsm-proxy.prod.services.dmtech.com https://zoe-shop-proxy-prod.services.dmtech.com https://customer-helpcenter-prod.services.dmtech.com https://paint-prod.services.dmtech.com https://content.services.dmtech.com https://content-search-service-preview.apps.prod.gcp.dmtech.cloud https://content-search-service.services.dmtech.com https://products.dm.de https://pds-import-prod.apps.prod.gcp.dmtech.cloud https://shopping-list-prod.services.dmtech.com; media-src 'self'; style-src 'self' 'unsafe-inline' https://*.bazaarvoice.com https://api.tiles.mapbox.com https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud; form-action 'self' https://*.bazaarvoice.com https://apps.bazaarvoice.com https://checkout.dm.at https://giftcard-checkout.dm.de/api/checkout https://signin.dm.at; img-src 'self' blob: data: https://*.bazaarvoice.com https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://cdn-eu.dynamicyield.com https://composer.apps.nonprod.cf.dmtech.cloud https://content-preview.apps.prod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://editorial-content.dm-static.com https://exc.mm.dm.at https://i.ytimg.com https://images.podigee-cdn.net https://img.usercentrics.eu https://img.youtube.com/ https://media.dm-static.com https://photos-eu.bazaarvoice.com https://products.dm-static.com https://uct.service.usercentrics.eu https://content.services.dmtech.com; frame-ancestors 'self' https://account.dm.at https://app.datadoghq.eu https://checkout.dm.at https://content-preview.apps.prod.gcp.dmtech.cloud https://mobileapp.dm.at https://studio.dm-drogeriemarkt.com; frame-src 'self' https://*.bazaarvoice.com https://account.dm.at https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://cdn.podigee.com https://checkout.dm.at https://configurator.nuk.de https://gastfamilie.podigee.io https://geburtskanal-dm.podigee.io https://hey-familie.podigee.io https://kinderwunschsprechstunde.podigee.io https://mobileapp.dm.at https://player.podigee-cdn.net https://recaptcha.google.com/recaptcha/ https://sandbox.om.dm.at https://signin.dm.at https://web.cmp.usercentrics.eu https://www.google.com https://www.google.com/recaptcha/ https://www.youtube-nocookie.com; base-uri 'self' https://exc.mm.dm.at; child-src 'self' blob:; manifest-src 'self'; report-to csp-endpoint; report-uri /__csp-reports__ 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.checkout.com *.cdn-apple.com *.bglobale.com *.global-e.com https://fonts.gstatic.com *.klarnacdn.net *.fontawesome.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com s3-eu-west-1.amazonaws.com fonts.feefo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.checkout.com *.klarna.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com *.bglobale.com *.global-e.com https://www.googletagmanager.com/ js.mollie.com *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.youtube.com/ *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com *.afd.co.uk https://images.unsplash.com *.brsrvr.com *.bloomreach.cloud *.checkout.com *.bglobale.com *.global-e.com *.klarna.com *.klarnaevt.com *.klarnacdn.net http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: *.cloudflare.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu cookie-cdn.cookiepro.com public.feefo.com data.joebrowns.co.uk lantern.roeye.com sync.missena.io bh.contextweb.com ams.creativecdn.com public-prod-dspcookiematching.dmxleo.com sync.adtech.ink brxcdn.com us.ck-ie.com inv-nets.admixer.net match.sharethrough.com sync.1rx.io www.google.co.uk sync.targeting.unrulymedia.com ik.imagekit.io *.facebook.com *.reddit.com *.ads-twitter.com t.co *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page www.google.com *.afd.co.uk *.jsdelivr.net https://maps.googleapis.com https://player.vimeo.com cdn.brcdn.com *.checkout.com *.klarnacdn.net *.online-metrix.net testflex.cybersource.com flex.cybersource.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.bglobale.com *.global-e.com *.klarna.com *.klarnaservices.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.trackedlink.net cdn.jsdelivr.net *.exponea.com *.cookiepro.com www.uqd.io login.dotomi.com cdns.brsrvr.com www.dwin1.com api.feefo.com register.feefo.com lantern.roeyecdn.com tags.creativecdn.com code.jquery.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.checkout.com *.bglobale.com *.global-e.com https://fonts.googleapis.com *.klarnacdn.net *.fontawesome.com assets.braintreegateway.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu register.feefo.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.afd.co.uk https://maps.googleapis.com https://player.vimeo.com *.dxpapi.com *.checkout.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.browser-intake-datadoghq.com x.klarnacdn.net *.klarnaservices.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.klarnauserservices.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cloudflare.com *.twitter.com *.twimg.com *.googleadservices.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org experiments-api.fabric-analytics.com *.exponea.com *.global-e.com ams.creativecdn.com analytics-ipv6.tiktokw.us cookie-cdn.cookiepro.com geolocation.onetrust.com pagead2.googlesyndication.com api.feefo.com collect.feefo.com *.bglobale.com data.joebrowns.co.uk *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https://*.s4c.cymru https://s4c.cymru; img-src 'self' data: https://*.s4c.cymru https://s4c.cymru https://cdn-cookieyes.com https://i.ytimg.com https://*.google.com/cse https://clients1.google.com https://*.gstatic.com; font-src 'self' data: https://*.s4c.cymru https://s4c.cymru https://fonts.gstatic.com https://cloud.typography.com; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn-cookieyes.com https://*.googletagmanager.com https://*.google.com/cse https://*.hotjar.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cloud.typography.com https://*.s4c.cymru https://s4c.cymru https://*.google.com/cse; connect-src https://*.s4c.cymru https://s4c.cymru https://cdn-cookieyes.com https://log.cookieyes.com https://*.google-analytics.com; object-src 'none'; frame-ancestors 'none'; frame-src 'self' https:; report-uri https://csp.s4c.cymru/report; report-to csp-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net *.merkur-static.si cdn.jsdelivr.net cdn.cnj.si omara.cdn-cnj.si ka-p.fontawesome.com media.flixfacts.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://lapp.leanpay.hr https://app.leanpay.hr https://stage-app.leanpay.si https://app.leanpay.si https://stage-app.leanpay.ro https://vendor.leanpay.ro *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com https://firebasestorage.googleapis.com cdn.jsdelivr.net *.nosto.com *.merkur-static.si *.fontawesome.com img.cdn-cnj.si www.merkur-static.si thumbs.nosto.com media.flixcar.com media.flixfacts.com logo.flix360.io rt.flix360.com maps.gstatic.com *.visualwebsiteoptimizer.com *.google.si *.facebook.com *.iprom.net *.hubspot.com inpref.com 536003278.recs.igodigital.com maps.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://api.cartfox.io https://app.cartfox.io *.avada.io *.shopify.com *.merkur-static.si cdn.jsdelivr.net unpkg.com *.pushpushgo.com *.fontawesome.com *.nosto.com *.smind.si kit.fontawesome.com inte.searchnode.io connect.nosto.com cpx.smind.si *.loadbee.com *.pandachat.ai media.flixfacts.com media.flixcar.com maps.googleapis.com *.cloudfront.net *.iprom.net *.hs-scripts.com *.hs-banner.com *.hs-analytics.net *.facebook.net *.videoly.co 536003278.recs.igodigital.com 536003278.collect.igodigital.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.gstatic.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net *.merkur-static.si cdn.jsdelivr.net media.flixcar.com assets.braintreegateway.com *.googleapis.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://api.cartfox.io https://app.cartfox.io https://get.geojs.io *.avada.io *.merkur-static.si unpkg.com *.pushpushgo.com *.nosto.com *.fontawesome.com *.loadbee.com region1.google-analytics.com kit.fontawesome.com ka-p.fontawesome.com connect.nosto.com media.flixcar.com maps.googleapis.com *.visualwebsiteoptimizer.com inpref.com *.doubleclick.net *.iprom.net 536003278.recs.igodigital.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src media.flixcar.com rt.flix360.com 536003278.recs.igodigital.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://d045c69f-01fa-46bf-a2b1-87c1c2bb7952.sansec.watch/; report-to report-endpoint; 1
default-src 'self' https: 'unsafe-inline' 'unsafe-eval'; object-src 'none'; 1
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' https://www.googletagmanager.com; connect-src 'self' https: 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-V5alwj0W5B9VPDfSlrkYmg' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
font-src *.fontawesome.com *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.twitter.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.trustpilot.com static.addtoany.com *.cookiebot.com *.doubleclick.net consentcdn.cookiebot.com bat.bing.com www.googletagmanager.com hose.gardeningexpress.co.uk pipe.gardeningexpress.co.uk consent.cookiebot.com pixel.thoughtmetric.io www.clarity.ms stats.g.doubleclick.net www.google.com www.gstatic.com cdn.tangoo.it cdn.tangooserver.com  ban.tangooserver.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com www.feedoptimise.com cdn.feedoptimise.com services.postcodeanywhere.co.uk *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cloudfront.net www.google.com.ua magefan.com cm.magefan.com mageside.com flagpedia.net www.ojrq.net *.clarity.ms *.bing.com *.cookiebot.com help.gardeningexpress.co.uk/ www.google.de www.google.co.uk bat.bing.com hose.gardeningexpress.co.uk fonts.gstatic.com bat.bing.net https://pipe.gardeningexpress.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ polyfill.io chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com www.feedoptimise.com cdn.feedoptimise.com api.addressy.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.googleapis.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.trustpilot.com maps.googleapis.com static.addtoany.com *.cookiebot.com *.clarity.ms bam.nr-data.net cdn.jsdelivr.net *.impactcdn.com *.newrelic.com consent.cookiebot.com ajax.googleapis.com bat.bing.com pagead2.googlesyndication.com pipe.gardeningexpress.co.uk pixel.thoughtmetric.io www.clarity.ms stats.g.doubleclick.net www.gstatic.com cdn.tangoo.it cdn.tangooserver.com  ban.tangooserver.com https://pipe.gardeningexpress.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com *.fontawesome.com api.addressy.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com *.addtoany.com *.trustpilot.com www.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://gardeningexpress.us12.list-manage.com api.addressy.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com http://dpm.demdex.net www.gstatic.com maps.googleapis.com static.addtoany.com *.cookiebot.com *.clarity.ms bam.nr-data.net cdn.jsdelivr.net *.impactcdn.com pagead2.googlesyndication.com gardeningexpress.pxf.io *.doubleclick.net *.google.com bat.bing.com hose.gardeningexpress.co.uk google.com bat.bing.net pipe.gardeningexpress.co.uk consent.cookiebot.com pixel.thoughtmetric.io www.clarity.ms data.thoughtmetric.io stats.g.doubleclick.net www.google.com cdn.tangoo.it cdn.tangooserver.com  ban.tangooserver.com https://pipe.gardeningexpress.co.uk 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src bat.bing.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://accounts.google.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://pagead2.googlesyndication.com https://securepubads.g.doubleclick.net https://tpc.googlesyndication.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://connect.facebook.net https://static.xx.fbcdn.net https://cdn.onesignal.com https://onesignal.com https://www.clarity.ms https://scripts.clarity.ms https://ak.sail-horizon.com https://static.cloudflareinsights.com https://package.webvitalize.io https://maps.googleapis.com https://www.youtube.com https://cdn.ampproject.org https://*.adsafeprotected.com https://*.flashtalking.com https://ajs-assets.ftstatic.com https://js.ad-score.com https://creative-measurement.quantcount.com https://*.2mdn.net https://www.googletagservices.com https://media.adcanvas.com https://imasdk.googleapis.com https://dsp-media.eskimi.com https://ad.doubleclick.net https://track.adform.net https://dev.visualwebsiteoptimizer.com https://embed.typeform.com https://widget.usersnap.com https://websdk.appsflyer.com https://cookie-cdn.cookiepro.com https://euob.roundprinceweb.com https://obseu.roundprinceweb.com https://dynamic.criteo.com https://sslwidget.criteo.com https://comcluster.cxense.com https://code3.adtlgc.com https://widget.surveymonkey.com https://ajax.googleapis.com https://cdn.livechatinc.com https://api.livechatinc.com https://assets.imoradar24.ro; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; report-uri https://www.imoradar24.ro/csp-report 1
frame-ancestors *.googleapis.com 'self'; 1
object-src 'none';base-uri 'self';script-src 'nonce-_dz3V-nzKxVHZitIWcEjZQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cdn.jsdelivr.net cdn.almapay.com https://fonts.gstatic.com https://ws.colissimo.fr *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud https://cdnjs.cloudflare.com 'self' data: static.sensefuel.live data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.sips-services.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com https://www.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.getalma.eu *.almapay.com/ *.stripe.com/ *.checkout.com/ *.adyen.com/ *.truefitcorp.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com *.weltpixel.com https://form.typeform.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net *.afd.co.uk t.powerreviews.com assets-manager.abtasty.com https://maps.googleapis.com https://maps.gstatic.com https://ws.colissimo.fr https://*.tile.openstreetmap.fr https://*.onyourmap.com https://google.fr https://www.magezon.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud ebizmarts-website.s3.amazonaws.com *.openstreetmap.org www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com maps.googleapis.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.afd.co.uk cdn.jsdelivr.net js-agent.newrelic.com party.spockee.io app.ekoo.co ui.powerreviews.com *.truefitcorp.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com widget.proximis.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com maps.googleapis.com *.gstatic.com https://www.googletagmanager.com tagmanager.google.com  tag.search.sensefuel.live pdata.damart.fr try.abtasty.com                  'self' 'unsafe-eval' 'nonce-aG1tenRjdmdjZzR4b3Qxdnp0cXowYjRsNWk1M3VscGc=' 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY/CkTMBhjNhwPvglpYumjx31B4fjkY8='; style-src *.adobe.com fonts.googleapis.com cdn.jsdelivr.net ui.powerreviews.com cdn-mobile.actito.com https://fonts.googleapis.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud https://cdnjs.cloudflare.com assets.braintreegateway.com *.googleapis.com *.gstatic.com tagmanager.google.com tag.search.sensefuel.live 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net vimeo.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.afd.co.uk *.getalma.eu *.almapay.com api.spockee.io backoffice-api.spockee.io ui.powerreviews.com display.powerreviews.com app.ekoo.co maps.googleapis.com cdn-mobile.actito.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com https://ws.colissimo.fr https://maps.googleapis.com https://nominatim.openstreetmap.org https://*.onyourmap.com https://*.mapbox.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.openstreetmap.org api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com c.search.sensefuel.live 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.klevu.com *.ksearchnet.com *.fontawesome.com *.typekit.net https://widgets.trustedshops.com integrations.etrusted.com *.cloudflare.com *.twitter.com *.gstatic.com *.twimg.com *.trustedshops.com *.googleapis.com maxcdn.bootstrapcdn.com 'self' data: *.yotpo.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://seo.mageplaza.com www.facebook.com *.copernica.com *.twitter.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com player.vimeo.com https://www.paypal.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com https://*.dpdconnect.nl *.dpdconnect.nl service2.loyaltyinabox.com *.pinterest.com www.facebook.com www.youtube.com view.publitas.com www.google.com www.google.nl www.google.de *.google.com maps.google.com chat.babypark.nl *.doubleclick.net td.doubleclick.net googleads.g.doubleclick.net widget.trustpilot.com *.cookiebot.com *.cookiebot.eu chatwidget-prod.web.app www.googletagmanager.com sst.babypark.nl sst.babypark.de sst.babydeals.be sst.baby-dump.nl folders.baby-dump.nl *.twitter.com platform.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com https://portal.payconiq.com https://static.buckaroo.nl https://www.paypalobjects.com *.klevu.com *.ksearchnet.com www.babypark.nl www.babypark.de www.babydeals.be dehoevebuitenleven.nl m2.babypark.mavendev.com m2.babypark-de.mavendev.com www.ikenik.nl m2.ikenik.mavendev.com m2.babydump.mavendev.com m2.babydump-de.mavendev.com www.google.com www.google.nl www.google.de www.google.com.ua www.facebook.com ct.pinterest.com www.googletagmanager.com www.zenaps.com www.awin1.com static.zdassets.com *.bing.com *.bing.net www.thuiswinkel.org i.ytimg.com img.youtube.com blob: lantern.roeye.com *.clarity.ms *.cookiebot.com *.cookiebot.eu integrations.etrusted.com stats.g.doubleclick.net sst.babypark.nl sst.babypark.de sst.babydeals.be sst.baby-dump.nl *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.google.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu pinterest.com assets.pinterest.com syndication.twitter.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com https://widgets.trustedshops.com *.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com https://*.dpdconnect.nl js.klevu.com *.ksearchnet.com *.avada.io www.googletagmanager.com checkout.buckaroo.nl *.clarity.ms lantern.roeyecdn.com widgets.trustedshops.com web-sdk.smartlook.com www.dwin1.com s.pinimg.com connect.facebook.net static.buckaroo.nl view.publitas.com api.360productviewer.com googleads.g.doubleclick.net bat.bing.com bat.bing.net static.zdassets.com js-agent.newrelic.com *.livechatinc.com bam.eu01.nr-data.net chat.babypark.nl widget.trustpilot.com *.pinterest.com *.hotjar.com *.hotjar.io *.cookiebot.com *.cookiebot.eu integrations.etrusted.com chatwidget-prod.web.app *.cloudflare.com *.google.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com twitter.com platform.twitter.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com maps.googleapis.com https://widgets.trustedshops.com *.yotpo.com sst.babypark.de https: 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl cdn.dnky.co webchat.dotdigital.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.typekit.net checkout.buckaroo.nl integrations.etrusted.com chatwidget-css.web.app *.cloudflare.com *.googleapis.com *.google.com *.twitter.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu maxcdn.bootstrapcdn.com unsafe-inline https://widgets.trustedshops.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src static.zdassets.com integrations.etrusted.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com wss://websocketservice-externalapi.prod.buckaroo.io https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://applepay.buckaroo.io *.paypal.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com *.klevu.com *.ksearchnet.com *.clarity.ms *.pinterest.com *.doubleclick.net stats.g.doubleclick.net googleads.g.doubleclick.net manager.eu.smartlook.cloud ekr.zdassets.com wss://widget-mediator.zopim.com api.360productviewer.com www.facebook.com livechat.fabulor.eu bam.eu01.nr-data.net region1.analytics.google.com *.google.com *.hotjar.com *.hotjar.io analytics.google.com bat.bing.com bat.bing.net *.cookiebot.com *.cookiebot.eu *.copernica.com integrations.etrusted.com api.ipify.org *.cloudflare.com *.twitter.com *.twimg.com www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.google-analytics.com *.trustedshops.com *.etrusted.com *.yotpo.com sst.babypark.de https: 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.google.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://report-uri.com/r/d/csp/reportOnly; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; 1
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/  https://widget.trustpilot.com;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://appleid.cdn-apple.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com *.myheritage.se https://www.myheritage.se  'unsafe-eval' 'nonce-1b19204219d07b94a289d02f55e170fa' 'strict-dynamic' https://widget.trustpilot.com https://invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style  https://widget.trustpilot.com;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io https://www.google.com/recaptcha/enterprise/* https://www.google.com/recaptcha/enterprise/ https://www.google.com/recaptcha/enterprise/clr https://www.google.com/recaptcha/ https://maps.googleapis.com https://people.googleapis.com https://translate-pa.googleapis.com *.myheritage.se https://widget.trustpilot.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:  https://widget.trustpilot.com https://*.trustpilot.com;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=report&canonical_page_id=/company/home/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' blob: https://thaipbs.or.th https://www.googletagmanager.com https://analytics-psb.thaipbs.or.th https://lvs.truehits.in.th https://mnjura.com https://*.mnjura.com https://cdn.taboola.com https://pm-widget.taboola.com https://cdn.thelead.tech https://connect.facebook.net https://storage.googleapis.com https://use.typekit.net https://www.instagram.com https://www.youtube.com https://cdn.moengage.com https://www.google-analytics.com https://*.clarity.ms https://analytics.tiktok.com https://d.line-scdn.net https://analytics.ahrefs.com https://byteark-sdk.cdn.byteark.com https://www.gstatic.com https://apis.google.com https://platform.twitter.com https://thaipbs-web-lionhead-asset.thaipbs.or.th; style-src 'self' 'unsafe-inline' https://use.typekit.net https://thaipbs.or.th https://byteark-sdk.cdn.byteark.com https://fonts.googleapis.com https://thaipbs-web-lionhead-asset.thaipbs.or.th; font-src 'self' https://thaipbs-web-lionhead-asset.thaipbs.or.th https://use.typekit.net https://fonts.gstatic.com; img-src 'self' data: https://*.thaipbs.or.th https://thaipbs.or.th https://d3dyak49qszsk5.cloudfront.net https://thaipbs-program.s3-ap-southeast-1.amazonaws.com https://thaipbs-program-production.s3.amazonaws.com https://thaipbs-web-lionhead-asset.s3.amazonaws.com https://www.thaipbs.or.th https://thaipbs-web-lionhead-asset.thaipbs.or.th https://www.thaipbspodcast.com https://st-th-1.byteark.com https://www.facebook.com https://www.altv.tv https://storage.googleapis.com https://img.youtube.com https://tr.line.me https://lvs.truehits.in.th https://www.google.co.th https://www.googletagmanager.com https://connect.facebook.net https://*.mnjura.com https://*.taboola.com; connect-src 'self' https://*.thaipbs.or.th https://one.thaipbs.th https://www.altv.tv https://fleetapi.byteark.com https://*.cdn.byteark.com https://*.stream-playlist.byteark.com https://*.cdntrace.byteark.com https://gateway.lh.byteark.com https://timemachine.byteark.com https://analytics-psb.thaipbs.or.th https://lvs.truehits.in.th https://mnjura.com https://*.mnjura.com https://www.facebook.com https://www.instagram.com https://*.moengage.com https://analytics.google.com https://www.google-analytics.com https://*.clarity.ms https://analytics.tiktok.com https://*.taboola.com; frame-src 'self' https://*.thaipbs.or.th https://www.thaipbs.th https://www.googletagmanager.com https://www.youtube.com https://players.brightcove.net https://www.facebook.com https://vod.thaipbs.or.th https://stream-player.byteark.com https://platform.twitter.com https://syndication.twitter.com https://main.dji64z3tmvxa2.amplifyapp.com; media-src 'self' blob: https://*.thaipbs.or.th https://*.cdn.byteark.com https://vod.thaipbs.or.th https://4056.radio2.thzhost.com; worker-src 'self'; frame-ancestors 'none' 1
child-src 'self' https://maps.googleapis.com; connect-src 'self' http://localhost:49755 https://*.dna.ip-only.net https://02d22c83a39531f497f8176997802343-httpcache0-80501-cacheod0.dna.ip-only.net https://177f070ca788ce3aac4d391fb312464c-httpcache0-80501-httpcache0.dna.ip-only.net https://analytics.qbrick.com https://api.checkin.no https://api.curator.io https://cdn.jsdelivr.net https://consentcdn.cookiebot.com https://esp-eu.aptrinsic.com https://fotball.formstack.com https://js.monitor.azure.com https://maps.googleapis.com https://matomo.fotball.no https://notifications.fotball.no https://play2.qbrick.com https://servedbyadbutler.com https://static.checkin.no https://static.formstack.com https://video.qbrick.com https://westeurope-5.in.applicationinsights.azure.com wss://notification.qbrick.com wss://ws.checkin.no; font-src 'self' data: https://*.cloudfront.net/graphik/ https://*.cloudfront.net/lato/ https://*.typekit.net https://cdn.jsdelivr.net https://fonts.gstatic.com https://fotball.formstack.com https://play2.qbrick.com https://r2cdn.perplexity.ai https://static.formstack.com https://vjs.zencdn.net https://www.fotball.no; frame-src 'self' https://akilles.h5p.com/ https://app.bwz.se/ https://app.powerbi.com https://calendar.google.com https://cdn.knightlab.com https://consentcdn.cookiebot.com https://forms.office.com https://fotball-iv.azurewebsites.net https://imagevault.fotball.no https://m.facebook.com https://maps.googleapis.com https://norges-fotballforbund.campaign.playable.com https://open.spotify.com https://play2.qbrick.com https://player.vimeo.com https://servedbyadbutler.com https://video.qbrick.com https://vimeo.com/ https://w.soundcloud.com https://www.facebook.com https://www.instagram.com https://www.youtube.com; img-src 'self' data: https://*.dna.ip-only.net https://curator-assets.b-cdn.net https://dam.fotball.no https://fonts.gstatic.com https://httpcache0-80501-cachedown0.dna.ip-only.net https://i.ytimg.com https://images.fotball.no https://imgsct.cookiebot.com https://khms0.googleapis.com https://khms1.googleapis.com https://maps.googleapis.com https://maps.gstatic.com https://matomo.fotball.no https://play2.qbrick.com https://s3.amazonaws.com https://servedbyadbutler.com https://translate.google.com https://vimeo.com/ https://www.fotball.no https://www.google-analytics.com; script-src-elem 'self' 'unsafe-inline' https://akilles.h5p.com https://app.playable.com https://cdn.curator.io https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.jquery.com https://connect.facebook.net https://consent.cookiebot.com https://consentcdn.cookiebot.com https://e.issuu.com https://files.cdn.leadfamly.com https://fotball.formstack.com https://js.monitor.azure.com https://maps.googleapis.com https://matomo.fotball.no https://maxcdn.bootstrapcdn.com https://play2.qbrick.com https://player.vimeo.com https://registration.checkin.no https://servedbyadbutler.com https://static.formstack.com https://web-sdk-eu.aptrinsic.com https://www.instagram.com https://www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdn.curator.io https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.jquery.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://files.cdn.leadfamly.com https://fotball.formstack.com https://js.monitor.azure.com https://maps.googleapis.com https://matomo.fotball.no https://maxcdn.bootstrapcdn.com https://play2.qbrick.com https://servedbyadbutler.com https://static.formstack.com https://web-sdk-eu.aptrinsic.com https://www.fotball.no; style-src-elem 'self' 'unsafe-inline' https://*.typekit.net https://cdn.jsdelivr.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://play2.qbrick.com https://registration.checkin.no https://use.typekit.net https://vjs.zencdn.net https://web-sdk-eu.aptrinsic.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://*.typekit.net https://fonts.googleapis.com https://maps.googleapis.com https://maxcdn.bootstrapcdn.com https://play2.qbrick.com https://use.typekit.net https://vjs.zencdn.net https://www.fotball.no; style-src-attr 'unsafe-inline'; default-src 'none'; base-uri https://play2.qbrick.com https://www.fotball.no; media-src blob: https://0190b0b31b8dd17a1463ce1a6d517637-httpcache0-80501-cacheod0.dna.ip-only.net https://104ca5673faec03f15eefd6f0ab056f2-httpcache0-80501-cacheod0.dna.ip-only.net https://4b26957422d55a62b16b4379c74cf8a0-httpcache0-80501-httpcache0.dna.ip-only.net https://77c6108b1f24550417860e13b5402c99-httpcache0-80501-cacheod0.dna.ip-only.net https://curator-assets.b-cdn.net https://httpcache0-80501-cachedown0.dna.ip-only.net https://maps.googleapis.com https://play2.qbrick.com https://vimeo.com/ https://www.fotball.no; object-src https://maps.googleapis.com; manifest-src https://www.fotball.no; worker-src blob:; script-src-attr https://cdn.curator.io; report-to stott-security-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://js.arcgis.com blob:; style-src 'self' 'unsafe-inline' https://js.arcgis.com https://fonts.googleapis.com; img-src 'self' data: blob: https: http:; font-src 'self' data: https://fonts.gstatic.com https://js.arcgis.com; connect-src 'self' data: https://www.axon-testing-dnssec-enabled.com https: http: wss: ws:; frame-src 'self' https://*.evidence.com https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://www.facebook.com https://*.dronesense.com https://*.dronesense.co.uk https://*.dronesense.ca https://*.dronesense.eu https://*.dronesense.se; media-src 'self' blob: https: http:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; 1
base-uri 'none'; object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-+bomdmo4JCg9ily5GKetVg==' 1
font-src fonts.googleapis.com fonts.gstatic.com *.fontawesome.com *.fonts.googleapis.com *.gstatic.com data: *.cloudflare.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de api.bazaarvoice.com stg.api.bazaarvoice.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com accounts.google.com *.google.com https://www.youtube.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.addthis.com *.pinterest.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com maps.googleapis.com maps.gstatic.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com *.facebook.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudflare.com https://cdn.klarna.com https://s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com *.cdninstagram.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com *.googletagmanager.com *.facebook.net *.avada.io accounts.google.com *.google.com/ assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com display.ugc.bazaarvoice.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com accounts.google.com unsafe-inline *.googleapis.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com *.google-analytics.com https://get.geojs.io *.avada.io accounts.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cloudflare.com *.paypal.com *.googleapis.com *.addthis.com *.cardinalcommerce.com https://graph.instagram.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' data:; frame-ancestors *.weirdfish.co.uk *.adyen.com *.amazon.com *.paypal.com *.google.com *.exponea.com *.monetate.net; connect-src * data:; font-src * data:; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline' data:; 1
default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https://*.khealth-test.com https://*.khealth.com https://*.stream-io-api.com https://*.stream-io-video.com https://*.zoom.us https://api.segment.io https://aubrey.carenav.novanthealth.org/ https://browser-intake-datadoghq.com https://cdnapisec.kaltura.com/ https://doxy.me https://epicproxy.et0798.epichosted.com https://mychart-np.et0798.epichosted.com https://mycharttest.novanthealth.org https://premier.trustcommerce.com/ https://stagepremier.trustcommerce.com https://uataubrey.carenav.novanthealth.org/ https://www.novantmychart.org https://www.youtube-nocookie.com https://www.youtube.com;script-src 'nonce-72f377b1e4144e24958feddeb95edb15' https://novantmychart.org 'self';img-src https://* 'self' blob: data:;connect-src 'self' epichttp: https://*.kaltura.com;style-src https://novantmychart.org 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action 'self';media-src https://* 'self' blob:; 1
default-src * 'unsafe-inline' 'unsafe-eval'; img-src * data:; report-uri /report-csp-violation; upgrade-insecure-requests 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com maxcdn.bootstrapcdn.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com x.klarnacdn.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com *.bird.eu flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.adobedtm.com dev.visualwebsiteoptimizer.com *.exacttarget.com google.it/pagead/1p-conversion self data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.avada.io maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.cardinalcommerce.com *.authorize.net *.ccdc02.com *.googleadservices.com *.paypalobjects.com  *.braintreegateway.com   *.paypal.com   *.ytimg.com www.gstatic.com/recaptcha www.google.com/recaptcha *.js-agent.newrelic.com unpkg.com/@googlemaps/markerclusterer/dist/index.min.js self *.criteo.com *.yandex.com *.yandex.ru *.teads.tv *.mainadv.com *.bing.com *.clarity.ms *.pinterest.com *.amazon-adsystem.com *.quantserve.com 'sha256-g/qbQ8sW5eJ9JO8sQzRJ1OvARbUyKpJXFeof9SLw1eI=' 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.stripe.network *.stripecdn.com *.amazon.com service.force.com x.klarnacdn.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.adobe.com assets.adobedtm.com *.googletagmanager.com *.authorize.net *.ccdc02.com *.googleadservices.com *.paypalobjects.com  *.braintreegateway.com   *.paypal.com   *.ytimg.com *.vimeocdn.com www.gstatic.com/recaptcha www.google.com/recaptcha *.google.bg unpkg.com/@googlemaps/markerclusterer/dist/index.min.js unpkg.com/@googlemaps/markerclusterer/dist/* self consentcdn.cookiebot.com dev.visualwebsiteoptimizer.com js.klarna.com na.klarnaevt.com trustpilot.com googleads.g.doubleclick.net bam.nr-data.net *.criteo.com *.yandex.com *.yandex.ru *.teads.tv *.mainadv.com *.bing.com *.clarity.ms *.pinterest.com *.amazon-adsystem.com *.quantserve.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src bam.nr-data.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'strict-dynamic' 'nonce-01iaNiWWPp8GsZqtsgnFBg==' 1
style-src-elem maps.gstatic.com maps.googleapis.com fonts.googleapis.com *.gstatic.com 'unsafe-inline' 'self' mcstaging.chopo.com.mx www.chopo.com.mx; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com fonts.googleapis.com https://fonts.bunny.net https://fonts.gstatic.com data: https://www.google.com https://www.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action *.paypal.com *.mercadopago.com.mx https://mercadopago.com.mx https://grupoproa.qualtrics.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mitec.com.mx 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com.mx https://mercadopago.com.mx https://grupoproa.qualtrics.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mitec.com.mx www.gstatic.com self www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com *.braintreegateway.com *.paypal.com google.com *.google.com *.mercadopago.com.mx https://mercadopago.com.mx https://grupoproa.qualtrics.com https://*.crazyegg.com 'self' *.doubleclick.net *.sharethis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mitec.com.mx www.google.com www.gstatic.com apis.google.com *.sapproa.com.mx https://devoluciones.sapproa.com.mx:34271 https://devolucionesqa.sapproa.com.mx:34271 *.examedi.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.mercadopago.com.mx https://mercadopago.com.mx https://grupoproa.qualtrics.com https://*.crazyegg.com https://user-images.crazyeggcdn.com maps.gstatic.com maps.googleapis.com *.facebook.com *.sharethis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://firebasestorage.googleapis.com *.mitec.com.mx *.googleapis.com *.sapproa.com.mx https://devoluciones.sapproa.com.mx:34271 https://devolucionesqa.sapproa.com.mx:34271 *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.mercadopago.com.mx https://mercadopago.com.mx https://grupoproa.qualtrics.com https://*.crazyegg.com *.googleapis.com maps.google.com *.gstatic.com *.sharethis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.avada.io *.shopify.com *.mitec.com.mx www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.sapproa.com.mx https://devoluciones.sapproa.com.mx:34271 https://devolucionesqa.sapproa.com.mx:34271 *.jscrambler.com *.examedi.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.fontawesome.com *.mercadopago.com.mx https://mercadopago.com.mx https://grupoproa.qualtrics.com https://*.crazyegg.com maps.gstatic.com maps.googleapis.com *.gstatic.com 'unsafe-inline' 'self' mcstaging.chopo.com.mx www.chopo.com.mx *.sharethis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://fonts.bunny.net *.googleapis.com *.addtoany.com *.mitec.com.mx *.google.com *.sapproa.com.mx https://devoluciones.sapproa.com.mx:34271 https://devolucionesqa.sapproa.com.mx:34271 https://www.chopo.com.mx 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.mercadopago.com.mx https://mercadopago.com.mx https://grupoproa.qualtrics.com https://*.crazyegg.com *.googleapis.com maps.google.com *.gstatic.com *.sharethis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://get.geojs.io *.avada.io http://dpm.demdex.net *.mitec.com.mx https://www.google.com https://www.gstatic.com *.sapproa.com.mx https://devoluciones.sapproa.com.mx:34271 https://devolucionesqa.sapproa.com.mx:34271 *.jscrambler.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src https://*.crazyegg.com blob: http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; report-uri /csp-violation 1
default-src 'self' https://media.pharmaciedesdrakkars.com; script-src 'self' 'unsafe-inline' https://media.pharmaciedesdrakkars.com https://cdn.usefathom.com https://rs.clic2buy.com https://widget.trustpilot.com https://cdn.doofinder.com https://eu1-config.doofinder.com; style-src 'self' 'unsafe-inline' https://media.pharmaciedesdrakkars.com https://cdn.doofinder.com; img-src 'self' data: https://media.pharmaciedesdrakkars.com https://widget.trustpilot.com; font-src 'self' data: https://media.pharmaciedesdrakkars.com; connect-src 'self' https://cdn.usefathom.com https://eu1-api.doofinder.com https://widget.trustpilot.com https://nominatim.openstreetmap.org; frame-src https://widget.trustpilot.com https://www.paypal.com https://clicandpay.groupecdn.fr https://payment.cawl-solutions.fr; base-uri 'self'; form-action 'self' https://www.paypal.com https://clicandpay.groupecdn.fr https://payment.cawl-solutions.fr 1
default-src data: 'self' blob: 'unsafe-inline' 'unsafe-eval' *.atyarisi.com wss://*.atyarisi.com *.google.com *.google.com.tr *.googletagmanager.com *.google-analytics.com *.support.google.com *.doubleclick.net *.googleadservices.com *.microsoft.com *.apple.com *.facebook.com *.facebook.net *.yahoo.com *.newrelic.com *.twitter.com *.instagram.com *.youtube.com tjktv.ercdn.net *.tjk.org *.broadage.com *.media.net *.liderform.com.tr *.googleapis.com *.googlevideo.com *.gstatic.com *.nsoft-cdn.com *.stg-digi.com *.rlcdn.com *.crwdcntrl.net *.dengage.com *.nr-data.net *.taboola.com *.tiktok.com *.dengagecdn.com *.sisalsanstech.com *.ondigitalocean.app *.millipiyangoonline.com *.rsc.cdn77.org *.7777gaming.tech *.7777gaming.xyz *.7777gaming.com.tr *.draggedbed.com *.shunnedstudios.com *.clarity.ms scripts.clarity.ms *.tiktokw.us *.tiktokv.com *.byteoversea.com https://106gamesgalaxsys.online https://shunnedstudios.com/ *.mobilproses.com *.gtechgames.com football.playbook-fusion.com *.trhosted.com *.biahosted.net *.gametech.tr pagead2.googlesyndication.com; img-src * data:; report-uri /csp/cspreport/ 1
default-src 'self'; script-src 'self' *.artfut.com *.bootstrapcdn.com *.clarity.ms *.cloudfront.net *.criteo.com *.facebook.com *.fullstory.com *.gstatic.com *.google-analytics.com *.google.com *.googleapis.com *.jsdelivr.net *.livechatinc.com *.moengage.com *.onetrust.com *.razorpay.com *.tatadigital.com *.trackier.com *.unbxdapi.com c.amazon-adsystem.com connect.facebook.net googleads.g.doubleclick.net sc-static.net tr.snapchat.com www.googleadservices.com www.googletagmanager.com; style-src 'self' 'unsafe-inline' *.bootstrapcdn.com *.googleapis.com *.jsdelivr.net *.onetrust.com www.gstatic.com; img-src 'self' data: https:; connect-src 'self' aax-eu.amazon-adsystem.com ad.doubleclick.net analytics.google.com api.fastrackeyewear.com apac-recommendations.unbxd.io ara.paa-reporting-advertising.amazon connect.facebook.net d3995ea24pmi7m.cloudfront.net google.com *.amazon.in *.clarity.ms *.criteo.com *.facebook.com *.fullstory.com *.google.com *.googleapis.com *.livechatinc.com *.moengage.com *.onetrust.com *.paytm.in *.phonepe.com *.razorpay.com *.tatadigital.com *.titaneyeplus.com *.unbxdapi.com s.amazon-adsystem.com search.unbxd.io secure.paytmpayments.com stats.g.doubleclick.net tr.snapchat.com tr6.snapchat.com www.google-analytics.com www.google.co.in www.google.com www.googleadservices.com; font-src 'self' *.amazon-adsystem.com *.gstatic.com *.google.co.in *.onetrust.com *.unbxd.io ad.doubleclick.net ara.paa-reporting-advertising.amazon google.com stats.g.doubleclick.net www.google-analytics.com www.googleadservices.com; frame-src 'self' *; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.prenatal.com https://www.googletagmanager.com https://challenges.cloudflare.com https://www.google-analytics.com https://widget.heresai.it https://*.google-analytics.com https://*.analytics.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com https://maps.gstatic.com https://js.api.here.com https://cdn.scalapay.com https://*.scalapay.com https://*.klarnacdn.net https://*.klarna.com https://eu1-config.doofinder.com https://*.doofinder.com https://invitejs.trustpilot.com https://*.trustpilot.com https://www.dwin1.com https://*.awin1.com https://*.tiktok.com https://cdn.cookielaw.org https://*.bing.com https://*.facebook.net https://responder.wt-safetag.com https://pixel.queryo.com https://widget.heres.ai https://*.toyscenter.it https://googleads.g.doubleclick.net https://dynamic.criteo.com https://static.hotjar.com https://sslwidget.criteo.com https://applepay.cdn-apple.com https://www.paypal.com https://the.sciencebehindecommerce.com https://pay.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://cdn.prenatal.com https://fonts.googleapis.com https://cdn.doofinder.com https://js.api.here.com https://widget.heres.ai https://x.klarnacdn.net https://ajax.googleapis.com https://www.gstatic.com https://use.typekit.net; img-src 'self' data: blob: https://cdn.prenatal.com https://www.prenatal.com https://www.toyscenter.it https://assets.heresai.it https://*.google-analytics.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://www.google.com https://www.gstatic.com https://maps.googleapis.com https://maps.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://*.here.com https://*.hereapi.com https://*.scalapay.com https://*.klarnacdn.net https://*.trustpilot.com https://*.awin1.com https://*.dwin1.com https://*.toyscenter.it https://media.bimbo.prenatal-services.com https://cdn.cookielaw.org https://*.facebook.com https://bucket.heres.ai https://*.bing.com https://cdn.doofinder.com https://www.google.it https://t.mateti.net https://eu1-doofinderuser.s3.amazonaws.com https://checkoutshopper-live.cdn.adyen.com https://bat.bing.net https://cdn.toyscenter.it https://googleads.g.doubleclick.net https://img.youtube.com https://osm.klarnaservices.com https://pagead2.googlesyndication.com https://prenatal.com https://raw.githubusercontent.com https://*.facebook.net https://public.prenatal-services.com https://www.zenaps.com https://client-side-metrics.nl3.eu.criteo.net https://www.google.al https://www.google.co.uk https://www.google.sm https://www.google.com.eg https://secure.gravatar.com https://www.googleadservices.com https://*.tiktok.com https://i.ytimg.com https://media.toys.prenatal-services.com https://www.google.co.in https://www.google.ch https://www.google.fr https://www.google.es https://www.google.ie https://www.google.com.tr https://www.google.de https://www.google.no https://www.google.com.om https://www.google.hr https://www.google.ca https://www.google.gr https://www.google.nl https://www.google.rs https://www.google.ge https://www.google.mu https://www.google.is; font-src 'self' data: https://fonts.gstatic.com https://cdn.prenatal.com https://x.klarnacdn.net https://applepay.cdn-apple.com https://js.api.here.com https://use.typekit.net; connect-src 'self' https://challenges.cloudflare.com https://www.prenatal.com https://cdn.prenatal.com https://config.heresai.it wss://bot.heresai.it https://*.doofinder.com wss://*.doofinder.com https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://www.googletagmanager.com https://maps.googleapis.com https://*.api.here.com https://*.hereapi.com https://*.scalapay.com https://*.klarna.com https://*.trustpilot.com https://*.awin1.com https://*.dwin1.com https://*.tiktok.com https://cdn.cookielaw.org https://*.bing.com https://www.google.com https://prenatal-services.com https://bat.bing.net https://pubsub.googleapis.com https://widget.heres.ai https://o24547.ingest.sentry.io https://www.paypal.com https://*.toyscenter.it https://eu.klarnaevt.com https://*.facebook.com https://pagead2.googlesyndication.com https://analytics-ipv6.tiktokw.us https://geolocation.onetrust.com https://privacyportal-eu.onetrust.com https://google.com https://www.googleadservices.com https://www.wepowerconnections.com https://na.klarnaevt.com https://www.google.it https://checkoutanalytics-live.adyen.com https://the.sciencebehindecommerce.com https://sslwidget.criteo.com https://pay.google.com blob: https://googleads.g.doubleclick.net https://fcmregistrations.googleapis.com https://www.zenaps.com https://www.awinblackfriday.com https://checkoutshopper-live.cdn.adyen.com https://checkoutshopper-live.adyen.com https://analytics.google.com https://*.klarnaevt.com https://*.klarnacdn.net https://spay.samsung.com https://t.mateti.net https://fonts.googleapis.com https://www.gstatic.com https://play.google.com https://www.google.al https://www.google.co.in https://www.google.gr https://www.google.co.uk; frame-src https://challenges.cloudflare.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://*.scalapay.com https://*.klarna.com https://td.doubleclick.net https://www.googletagmanager.com https://servedby.flashtalking.com https://www.paypal.com https://gum.criteo.com https://728252369996325.mateti.net https://checkoutshopper-live.adyen.com https://*.facebook.com https://www.awin1.com https://static-bot.heres.ai https://www.youtube.com https://3ds.nexigroup.com https://pay.google.com https://secure7.arcot.com https://prenatal-services.com https://gumi.criteo.com https://*.nexigroup.com https://youtube.com https://www.prenatal.com https://s1.trovaprezzi.it https://osm.klarnaservices.com https://applepay.cdn-apple.com https://cdn.iubenda.com https://catalogo.prenatal.com https://acs.netsgroup.com; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://www.prenatal.com https://*.facebook.com https://3ds4.nexigroup.com https://*.nexigroup.com https://acs.netsgroup.com; frame-ancestors 'self' https://prg-dashboard-prod.web.app; upgrade-insecure-requests; block-all-mixed-content; report-uri https://889ecefd2de50feabce01d0fae49ca81.report-uri.com/r/d/csp/reportOnly; 1
default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https://pay-staging.instamed.com https://pay.instamed.com;script-src 'nonce-6e72da348a174132ae92d4a18f126f43' https://myhealthatvanderbilt.com 'self';img-src https://* 'self' blob: data:;connect-src 'self' epichttp:;style-src https://myhealthatvanderbilt.com 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://accounts.google.com https://cdn.ampproject.org https://cdn.izooto.com https://cdn.onesignal.com https://connect.facebook.net https://onesignal.com https://pagead2.googlesyndication.com https://platform.twitter.com https://securepubads.g.doubleclick.net https://ssl.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googlesyndication.com https://www.instagram.com https://www.metype.com https://www.tiktok.com; style-src 'self' 'unsafe-inline' https://assets.fortuneindia.com https://fonts.googleapis.com https://media.fortuneindia.com https://platform.twitter.com https://ton.twimg.com; img-src 'self' blob: https://accounts.google.com https://assets.fortuneindia.com https://cdn.ampproject.org https://cdn.izooto.com https://googleads.g.doubleclick.net https://i.ytimg.com https://lh3.googleusercontent.com https://lh5.googleusercontent.com https://lh6.googleusercontent.com https://media.fortuneindia.com https://pagead2.googlesyndication.com https://pbs.twimg.com https://securepubads.g.doubleclick.net https://stats.g.doubleclick.net https://stg-quintype-dropbox.s3-accelerate.amazonaws.com https://thumbor-stg.assettype.com https://ton.twimg.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com https://www.shutterstock.com; font-src 'self' https://assets.fortuneindia.com https://fonts.gstatic.com; connect-src 'self' https://accounts.google.com https://api-uat.fortuneindiaapp.com https://cdn.izooto.com https://onesignal.com https://pagead2.googlesyndication.com https://podcast-uat.fortuneindiaapp.com https://securepubads.g.doubleclick.net https://stats.g.doubleclick.net https://www.google-analytics.com https://www.google.com https://www.googleapis.com https://www.googletagmanager.com; frame-src 'self' https://accounts.google.com https://cdn.ampproject.org https://fortuneindia-rpsg-beta.quintype.io https://fortuneindia-rpsg-uat.quintype.io https://fortuneindia-rpsg2-beta.quintype.io https://fortuneindia-rpsg2-uat.quintype.io https://googleads.g.doubleclick.net https://platform.twitter.com https://securepubads.g.doubleclick.net https://tpc.googlesyndication.com https://www.facebook.com https://www.google.com https://www.googletagmanager.com https://www.instagram.com https://www.tiktok.com https://www.youtube.com https://www.youtube-nocookie.com; worker-src 'self' blob: https://cdn.izooto.com https://cdn.onesignal.com; media-src 'self' blob: https://media.fortuneindia.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'nonce-Sq4cDzyaa3j1v9u4I9AVaXZtD7FBVOcUcRZ4rtLVIg9hSlsiDigjIQ' data: https://*.openstreetmap.org 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://*.openstreetmap.org https://*.typo3.org https://*.tile.openstreetmap.org https://bitvtest.de; base-uri 'self'; frame-src 'self' https://www.youtube-nocookie.com https://lecture2go.ostfalia.de; connect-src 'self' data: https://*.openstreetmap.org https://matomo.ostfalia.de; worker-src blob: 'report-sample'; style-src 'self' 'unsafe-inline' 'report-sample'; script-src-elem 'self' 'nonce-Sq4cDzyaa3j1v9u4I9AVaXZtD7FBVOcUcRZ4rtLVIg9hSlsiDigjIQ' data: https://*.openstreetmap.org https://matomo.ostfalia.de 'report-sample'; report-uri https://www.ostfalia.de/@http-reporting?csp=report&requestTime=1789276184816686&requestHash=c75e6f31198bc643e24b4716fb9f47aca28ef07b 1
default-src 'self' https://www.stacksocial.com; script-src 'nonce-NTFmMWZkMzEtMmZjZC00OTE4LTk4MDItMDFmY2IyN2UxZDhl' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' https: blob:; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://www.stacksocial.com https://*.stackcommerce.io https://*.stackcommerce.net https://*.stackcommerce.dev https://*.stackassets.com https://stack-assets.s3.amazonaws.com https://stack-support.s3.amazonaws.com https://stack-public-sale-image-embed.s3.amazonaws.com https://use.typekit.net https://p.typekit.net https://fonts.googleapis.com https://www.gstatic.com https://www.zeropartyforms.com; font-src 'self' https://www.stacksocial.com https://*.stackcommerce.io https://*.stackcommerce.net https://*.stackcommerce.dev https://*.stackassets.com https://stack-assets.s3.amazonaws.com https://stack-support.s3.amazonaws.com https://stack-public-sale-image-embed.s3.amazonaws.com https://use.typekit.net https://fonts.gstatic.com https://*.optimizely.com data:; img-src https: data: blob:; connect-src 'self' https://www.stacksocial.com https://*.stackcommerce.io https://*.stackcommerce.net https://*.stackcommerce.dev https://*.stackassets.com https://stack-assets.s3.amazonaws.com https://stack-support.s3.amazonaws.com https://stack-public-sale-image-embed.s3.amazonaws.com https://www.google.ae https://www.google.at https://www.google.be https://www.google.bg https://www.google.ca https://www.google.ch https://www.google.cl https://www.google.co.cr https://www.google.co.id https://www.google.co.il https://www.google.co.in https://www.google.co.jp https://www.google.co.kr https://www.google.co.ma https://www.google.co.nz https://www.google.co.th https://www.google.co.uk https://www.google.co.za https://www.google.com https://www.google.com.ar https://www.google.com.au https://www.google.com.bd https://www.google.com.br https://www.google.com.co https://www.google.com.do https://www.google.com.ec https://www.google.com.eg https://www.google.com.gh https://www.google.com.hk https://www.google.com.jm https://www.google.com.kw https://www.google.com.mx https://www.google.com.my https://www.google.com.ng https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.ph https://www.google.com.pk https://www.google.com.pr https://www.google.com.qa https://www.google.com.sa https://www.google.com.sg https://www.google.com.tr https://www.google.com.tw https://www.google.com.ua https://www.google.com.vn https://www.google.cz https://www.google.de https://www.google.dk https://www.google.dz https://www.google.ee https://www.google.es https://www.google.fi https://www.google.fr https://www.google.gr https://www.google.hr https://www.google.hu https://www.google.ie https://www.google.it https://www.google.jo https://www.google.lt https://www.google.lv https://www.google.nl https://www.google.no https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.rs https://www.google.ru https://www.google.se https://www.google.si https://www.google.sk https://www.google.tt https://api.stackcommerce.net https://api.stripe.com https://maps.googleapis.com https://api.segment.io https://*.sentry.io https://*.paypal.com https://imgs.signifyd.com https://dp.signifyd.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://*.taboola.com https://www.facebook.com https://google.com https://*.analytics.google.com https://analytics.google.com https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://ad.doubleclick.net https://stats.g.doubleclick.net https://analytics.twitter.com https://t.co https://*.clarity.ms https://bat.bing.com https://bat.bing.net https://px.ads.linkedin.com https://use.typekit.net https://ekr.zdassets.com https://jscloud.net https://oirt.aggle.net https://cdn.gladly.com https://analytics.gladly.com https://*.gladly.com https://*.gladly.chat https://app.enzuzo.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://k.p-n.io https://alocdn.com https://vimeo.com https://www.zeropartyforms.com https://logx.optimizely.com https://*.optimizely.com wss://*.optimizely.com; frame-src 'self' https://www.stacksocial.com https://js.stripe.com https://*.js.stripe.com https://hooks.stripe.com https://www.google.com https://www.googletagmanager.com https://*.paypal.com https://imgs.signifyd.com https://*.online-metrix.net https://*.optimizely.com https://www.facebook.com https://player.vimeo.com https://nytrng.com https://pxdrop.lijit.com https://www.youtube.com; media-src 'self' https://www.stacksocial.com https://cdn.gladly.com data: blob:; worker-src 'self' blob:; frame-ancestors 'self' https://www.stacksocial.com; base-uri 'self'; form-action 'self' https://www.stacksocial.com https://www.facebook.com; report-uri https://o76184.ingest.sentry.io/api/5453351/security/?sentry_key=eb6136c615334da89d0f03105155c5cf 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.googletagmanager.com https://www.google-analytics.com https://sdk.privacy-center.org https://tag.aticdn.net https://*.xiti.com; object-src 'none'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://*.gstatic.com https://www.google-analytics.com https://*.xiti.com; frame-src 'self' https://www.youtube.com https://player.vimeo.com; frame-ancestors 'self'; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://*.xiti.com; report-uri /report-csp-violation; upgrade-insecure-requests 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' tierpointdev.wpengine.com *.duosecurity.com forms.hsforms.com www.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: js.hsforms.net js.hs-scripts.com www.googletagmanager.com www.googleadservices.com www.clarity.ms tierpoint.my.site.com browser.sentry-cdn.com fd.cleantalk.org play.vidyard.com cdn.jsdelivr.net cdnjs.cloudflare.com www.youtube.com player.vimeo.com vimeo.com vzaar.com maps.googleapis.com www.google.com www.gstatic.com wec-assets.terminus.services cdn.callrail.com trk.techtarget.com www.statcounter.com snap.licdn.com ws.zoominfo.com js.zi-scripts.com static.ads-twitter.com www.clickcease.com tag.demandbase.com cdn.webexperiences.com connect.facebook.net www.redditstatic.com bzrcdn.openai.com bat.bing.com assets.pinterest.com platform.twitter.com apis.google.com js.callrail.com scripts.clarity.ms ws-assets.zoominfo.com js.hsadspixel.net js.hs-banner.com js.hs-analytics.net s.webexperiences.com googleads.g.doubleclick.net kit.fontawesome.com www.recaptcha.net web-sdk.smartlook.com www.gstatic.cn unpkg.com analytics.tiktok.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com tierpoint.com cdn.jsdelivr.net cdnjs.cloudflare.com tierpoint.my.site.com www.gstatic.com; font-src 'self' data: fonts.gstatic.com cdnjs.cloudflare.com ka-p.fontawesome.com www.gstatic.com kit-uploads.fontawesome.com; img-src 'self' data: blob: www.tierpoint.com tierpointstg.wpengine.com tierpoint.my.site.com www.googletagmanager.com c.statcounter.com *.ads.linkedin.com monitor.clickcease.com ws.zoominfo.com moderate.cleantalk.org moderate-v4.cleantalk.org www.google-analytics.com stats.g.doubleclick.net googleads.g.doubleclick.net td.doubleclick.net www.google.com www.gstatic.com bat.bing.com img.youtube.com i.ytimg.com secure.gravatar.com via.placeholder.com maps.gstatic.com *.hsforms.com track.hubspot.com t.co analytics.twitter.com alb.reddit.com id.rlcdn.com www.facebook.com *.clarity.ms www.google.ca segments.company-target.com c.bing.com www.googleadservices.com no-cache.hubspot.com fonts.gstatic.com connect.facebook.net; connect-src 'self' data: api.ipify.org tierpoint.my.salesforce-scrt.com tierpoint.my.site.com fonts.googleapis.com cdnjs.cloudflare.com sentry.io www.clarity.ms *.clarity.ms www.google-analytics.com analytics.google.com region1.google-analytics.com stats.g.doubleclick.net bat.bing.com www.facebook.com www.google.com maps.googleapis.com *.hsforms.com fd-api.cleantalk.org *.ads.linkedin.com js.callrail.com bzrcdn.openai.com js.hs-banner.com ws.zoominfo.com ad.doubleclick.net c.statcounter.com js.zi-scripts.com bzr.openai.com www.googleadservices.com api.hubapi.com ibc-flow.techtarget.com api.company-target.com tag-logger.demandbase.com monitor.clickcease.com analytics.twitter.com t.co ka-p.fontawesome.com kit.fontawesome.com region1.analytics.google.com www.google.ca segments.company-target.com s.webexperiences.com www.googletagmanager.com hubspot-forms-static-embed.s3.amazonaws.com ws-assets.zoominfo.com manager.eu.smartlook.cloud google.com analytics.tiktok.com analytics-ipv6.tiktokw.us fonts.gstatic.com js.hsforms.net cdn.callrail.com js.hs-scripts.com tierpointstg.wpengine.com web.tierpoint.com kit-uploads.fontawesome.com; frame-src 'self' www.googletagmanager.com tierpoint.my.site.com www.youtube.com www.youtube-nocookie.com player.vimeo.com view.vzaar.com fast.wistia.net www.google.com td.doubleclick.net s.company-target.com *.vidyard.com www.recaptcha.net forms.hsforms.com forms.office.com forms.cloud.microsoft open.spotify.com web.tierpoint.com www.facebook.com toolytics.pa.clients6.google.com tierpointllc.widget.insent.ai www.zerto.com; media-src 'self' www.tierpoint.com www.youtube.com web.tierpoint.com; report-uri https://o4511936368410624.ingest.us.sentry.io/api/4511936396656640/security/?sentry_key=4bc2c287105b644e21a2c18b94784d85&sentry_environment=prod&sentry_release=csp-9 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com 'self' data: use.fontawesome.com *.antartica.cl data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com webpay3g.transbank.cl webpay3gint.transbank.cl *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com tracking.bciplus.cl www.google.com wchat.freshchat.com *.antartica.cl www.mercadopago.cl www.mercadolibre.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.trackedlink.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.hsforms.net *.hsforms.com 'self' data: www.facebook.com www.google.cl *.antartica.cl www.gstatic.com www.mercadolibre.com www.mercadopago.cl *.google.com.ar antartica.cl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.fw-cdn.com/ *.freshchat.com/ *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.hsforms.net *.hsforms.com *.gstatic.com *.mercadopago.cl *.googletagmanager.com *.facebook.net *.hotjar.com unpkg.com tracking.krip.cl r2-t.trackedlink.net magento-recs-sdk.adobe.net www.clarity.ms static.trackedweb.net js-agent.newrelic.com wchat.freshchat.com static.zdassets.com *.antartica.cl sdk.mercadopago.com http2.mlstatic.com https://fw-cdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com webchat.dotdigital.com webchat.staging.dotdigital.com assets.braintreegateway.com https://*.freshchat.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.googleapis.com *.gstatic.com use.fontawesome.com *.antartica.cl www.mercadopago.cl www.gstatic.com *.googletagmanager.com *.cookielaw.org 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com t.elasticsuite.io *.hsforms.net *.hsforms.com analytics.google.com api.bciplus.cl www.google-analytics.com ekr.zdassets.com libreriaantartica.zendesk.com wchat.freshchat.com bam.nr-data.net *.antartica.cl api.mercadopago.com www.mercadolibre.com events.mercadopago.com *.hotjar.com *.hotjar.io *.clarity.ms *.doubleclick.net *.cookielaw.org 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com www.google.com bam.nr-data.net r2.trackedweb.net commerce.adobedc.net *.antartica.cl 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';               script-src 'self'                'unsafe-inline' 'unsafe-eval'                 https://www.googletagmanager.com                 https://*.google-analytics.com                 https://www.gstatic.com                 https://maps.googleapis.com                 https://static.hotjar.com                 https://script.hotjar.com                 https://s.ytimg.com                 https://*.googlesyndication.com                 https://*.jsdelivr.net                 https://*.linkedin.net                 https://*.linkedin.com                 https://*.securesitetray.com                 https://*.livechatinc.com                 https://*.xg4ken.com                 https://*.cudasvc.com                 https://*.facebook.net                 https://*.facebook.com                 https://*.youtube.com                 https://securesitetray.com                 https://api.ipstack.com                 https://*.cloudflare.com                 https://*.scene7.com                 https://hcaptcha.com https://*.hcaptcha.com                 https://*.salesforce.com                 https://www.beian.suzhou.gov.cn                 https://*.bdimg.com                 https://*.baidu.com                 https://*.bing.com                 https://*.bing.net                 https://*.clarity.ms                 https://*.marchex.io                 https://*.licdn.com                 https://*.plavxml.com                 https://*.cookielaw.org                 https://*.onetrust.com                 https://*.adsrvr.org                 https://*.adform.net                 https://*.gammaplatform.com;               style-src 'self' https://fonts.googleapis.com https://use.typekit.net https://p.typekit.net https://hcaptcha.com https://*.hcaptcha.com https://*.scene7.com https://*.cookielaw.org https://*.onetrust.com https://*.googletagmanager.com 'unsafe-inline';               font-src 'self' https://fonts.gstatic.com https://use.typekit.net https://p.typekit.net https://*.cookielaw.org https://*.onetrust.com;               img-src 'self' data:                 https://*.google-analytics.com                 https://maps.googleapis.com                 https://maps.gstatic.com                 https://*.hotjar.com                 https://i.ytimg.com                 https://*.linkedin.net                 https://*.linkedin.com                 https://*.facebook.com                 https://*.googletagmanager.com                 https://*.scene7.com                 https://*.facebook.net                 https://*.crown.com                 https://*.salesforce.com                 https://*.bdimg.com                 https://*.baidu.com                 https://*.gammaplatform.com                 https://*.doubleclick.net                 https://*.googlesyndication.com                 https://*.bing.net                 https://*.bing.com                 https://*.seadform.net                 https://*.clarity.ms                 https://*.cookielaw.org                 https://*.onetrust.com                 https://www.beian.suzhou.gov.cn;               connect-src 'self'                 https://*.google-analytics.com                 https://region1.analytics.google.com                 https://*.hotjar.com                 https://*.hotjar.io                 wss://ws.hotjar.com                 https://*.salesforce.com                 https://maps.googleapis.com                 https://*.google.com                 https://*.googlesyndication.com                 https://*.googletagmanager.com                 https://*.jsdelivr.net                 https://*.youtube.com                 https://*.linkedin.net                 https://*.linkedin.com                 https://*.crown.com                 https://*.facebook.com                 https://api.caeiox1tx-crownequi1-s1-public.model-t.cc.commerce.ondemand.com                 https://api.caeiox1tx-crownequi1-d1-public.model-t.cc.commerce.ondemand.com                 https://*.googleapis.com                 https://linkprotect.cudasvc.com                 https://*.scene7.com                 https://hcaptcha.com https://*.hcaptcha.com                 https://*.baidu.com                 https://*.livechatinc.com                 https://api.ipstack.com                 https://*.googleadservices.com                 https://*.doubleclick.net                 https://*.cookielaw.org                 https://*.onetrust.com                 https://*.bing.com                 https://*.bing.net                 https://*.clarity.ms                 https://*.adsrvr.org                 https://*.adform.net                 https://*.google.com.gt;               frame-src 'self'                 https://www.googletagmanager.com                 https://*.google-analytics.com                 https://www.google.com                 https://maps.googleapis.com                 https://*.hotjar.com                 https://*.salesforce.com                 https://*.crown.com                 https://*.facebook.com                 https://www.youtube.com                 https://*.livechatinc.com                 https://hcaptcha.com https://*.hcaptcha.com                 https://*.baidu.com                 https://www.youtube-nocookie.com                 https://*.cookielaw.org                 https://*.onetrust.com                 https://*.adsrvr.org                 https://*.adform.net                 https://*.doubleclick.net;               object-src 'none';               base-uri 'self';               form-action 'self' https://*.facebook.com https://*.salesforce.com;               frame-ancestors 'self';               upgrade-insecure-requests; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com https://geowidget.easypack24.net static.payu.com maxcdn.bootstrapcdn.com *.spotify.com *.cepd.tech *.drogerienatura.pl 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https://geowidget-app.inpost.pl/ secure.payu.com merch-prod.snd.payu.com static.payu.com credit-widget-config.payu.com/ *.addthis.com *.spotify.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://images.unsplash.com *.googleapis.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org static.payu.com credit-widget-config.payu.com/ magefan.com cm.magefan.com *.disqus.com https://img.youtube.com *.spotify.com *.cepd.tech *.drogerienatura.pl *.syndigo.cloud trustmate.io cdn.cookiesaur.com google.pl *.google.pl visitor.omnitagjs.com sync.addlv.smt.docomo.ne.jp hbx.media.net *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.gstatic.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googletagmanager.com tagmanager.google.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org secure.payu.com secure.snd.payu.com static.payu.com credit-widget-config.payu.com/ pay.google.com applepay.cdn-apple.com *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com *.jsdelivr.net https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech *.spotify.com *.cookiesaur.com *.cloudflare.com *.syndigo.com *.cepd.tech *.drogerienatura.pl trustmate.io static.hotjar.com tags.creativecdn.com connect.facebook.net s2.adform.net script.hotjar.com track.adform.net *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com tagmanager.google.com fonts.google.com https://geowidget.easypack24.net https://geowidget.inpost.pl https://cdn.jsdelivr.net https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech maxcdn.bootstrapcdn.com *.spotify.com *.cloudflare.com *.cepd.tech *.drogerienatura.pl trustmate.io *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googletagmanager.com *.easypack24.net *.inpost.pl *.openstreetmap.org secure.payu.com merch-prod.snd.payu.com static.payu.com credit-widget-config.payu.com/ https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech *.spotify.com *.cookiesaur.com *.syndigo.com trustmate.io *.cepd.tech *.drogerienatura.pl ams.creativecdn.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; media-src 'self' blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self' 1
frame-ancestors 'self' www.kuntarekrytointi.fi; script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com apis.google.com use.typekit.net cdn.ontame.io eu.posthog.com eu-assets.i.posthog.com consentcdn.cookiebot.com consent.cookiebot.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com use.typekit.net; font-src 'self' fonts.gstatic.com use.typekit.net; img-src 'self' data: blob: p.typekit.net i.ytimg.com dreambroker.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.vuukle.com https://script.google.com https://www.youtube.com https://platform.instagram.com https://platform.twitter.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://images.assettype.com https://media.assettype.com https://gumlet.assettype.com https://i.ytimg.com https://www.google-analytics.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://tribune.quintype.io https://www.google-analytics.com https://cdn.vuukle.com https://query1.finance.yahoo.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.facebook.com https://platform.twitter.com; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'report-sample' https://*.csidetm.com https://*.csidefd.com https://simonwijckmans.com https://*.simonwijckmans.com https://js.hsforms.net; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; img-src 'self' data: https:; font-src 'self' data:; frame-src 'self' https://www.googletagmanager.com https://www.google.com https://api.vector.co https://www.youtube.com https://www.youtube-nocookie.com https://meetings.hubspot.com; report-uri https://edge.csidetm.com/csp; report-to csp-endpoint; 1
font-src *.oct8ne.com *.salesforce-sites.com *.lightning.force.com *.syndigo.com fonts.gstatic.com *.azureedge.net *.doofinder.com *.typekit.net *.googleapis.com data: 'self' 'unsafe-inline'; frame-ancestors *.storyblok.com 'self'; style-src *.doofinder.com *.salesforce-sites.com *.lightning.force.com *.syndigo.com *.photoslurp.com *.nosto.com *.klaviyo.com *.typekit.net *.storyblok.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.salesforce-sites.com *.lightning.force.com *.storyblok.com *.zdassets.com *.doofinder.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; form-action https://www.facebook.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; img-src https://www.googletagmanager.com https://connect.facebook.net https://www.facebook.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https://images.unsplash.com *.awin1.com *.zenaps.com *.wepowerconnections.com *.doofinder.com *.oct8ne.com *.salesforce-sites.com *.lightning.force.com https://sandbox.sequracdn.com https://live.sequracdn.com *.syndigo.com *.syndigo.cloud www.googletagmanager.com *.facebook.com *.google.com *.google.es widgets.trustedshops.com *.twitter.com t.co *.azureedge.net *.pinterest.com *.bing.com *.storyblok.com data: 'self' 'unsafe-inline'; frame-src https://www.googletagmanager.com https://www.google.com https://www.facebook.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.awin1.com *.zenaps.com *.fls.doubleclick.net *.oct8ne.com *.salesforce-sites.com *.lightning.force.com https://sandbox.sequracdn.com https://live.sequracdn.com www.googletagmanager.com *.hotjar.com *.pinterest.com *.doofinder.com *.empathybroker.com *.empathy.co *.criteo.com 'self' 'unsafe-inline'; script-src https://analytics.tiktok.com/ https://ui.swogo.net/ https://www.googletagmanager.com https://connect.facebook.net www.googleadservices.com www.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com *.doofinder.com *.oct8ne.com *.salesforce-sites.com *.lightning.force.com https://sandbox.sequracdn.com https://live.sequracdn.com *.syndigo.com www.googletagmanager.com *.googleoptimize.com widgets.trustedshops.com static-eu.oct8ne.com static.zdassets.com *.facebook.net *.tradedoubler.com *.doubleclick.net *.hotjar.com *.ads-twitter.com smct.co *.bsmartdata.com *.retargeted.co *.bing.com *.clarity.ms *.smartsuppcdn.com *.smartsuppchat.com *.smartsupp.com *.connectif.cloud *.klaviyo.com *.photoslurp.com *.pinimg.com *.nosto.com *.empathybroker.com *.unpkg.com *.storyblok.com 'self' 'unsafe-inline' 'unsafe-eval'; connect-src https://analytics.tiktok.com/ https://tracking.swogo.net/ https://api.swogo.net/ https://api.trustedshops.com/ https://www.googletagmanager.com https://www.google.com https://www.facebook.com https://connect.facebook.net www.google-analytics.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com *.wepowerconnections.com https://the.sciencebehindecommerce.com *.doofinder.com wss://*.doofinder.com *.oct8ne.com *.salesforce-sites.com *.lightning.force.com https://sandbox.sequracdn.com https://live.sequracdn.com *.syndigo.com *.syndigo.cloud www.googletagmanager.com *.zendesk.com *.zopim.com *.doubleclick.net *.hotjar.com *.hotjar.io *.clarity.ms *.smartsuppcdn.com *.googleapis.com *.gstatic.com *.google-analytics.com *.google.es *.connectif.cloud *.klaviyo.com *.photoslurp.com *.zdassets.com *.pinterest.com *.nosto.com *.empathybroker.com *.empathy.co 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.transbank.cl 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https://construmart-help.freshchat.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://www.clarity.ms https://c.clarity.ms https://construmart-help.freshchat.com https://www.construmart.cl https://bat.bing.com https://c.bing.com https://www.facebook.com https://www.google.com.ar *.pubmatic.com maps.gstatic.com maps.googleapis.com https://maps.gstatic.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page https://www.clarity.ms https://scripts.clarity.ms https://construmart-help.freshchat.com https://bat.bing.com https://connect.facebook.net https://scripts.icommkt.online https://web-sdk.smartlook.com *.pubmatic.com www.google.com www.gstatic.com maps.googleapis.com https://maps.googleapis.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://construmart-help.freshchat.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://construmartpro.cl 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.clarity.ms https://scripts.clarity.ms https://l.clarity.ms https://construmart-help.freshchat.com *.doubleclick.net *.facebook.com *.smartlook.cloud *.pubmatic.com maps.googleapis.com https://maps.googleapis.com https://www.google.com/recaptcha/ *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; script-src 'self' adform.net *.adform.net betano.com *.betano.com betano.dk *.betano.dk betgenius.com *.betgenius.com cookielaw.org *.cookielaw.org creativecdn.com *.creativecdn.com facebook.net *.facebook.net fullstory.com *.fullstory.com gmlinteractive.com *.gmlinteractive.com googletagmanager.com *.googletagmanager.com optimove.net *.optimove.net sportradar.com *.sportradar.com cloudflareinsights.com *.cloudflareinsights.com app.delivery *.app.delivery lgrckt-in.com *.lgrckt-in.com tostarsbuilding.com *.tostarsbuilding.com *.performgroup.com *.bing.com *.taboola.com *.geocomply.com *.kameleoon.io *.kameleoon.eu *.ads-twitter.com *.google-analytics.com *.kaizengaming.com *.cloudflare.com *.jsdelivr.net *.kwai.net *.clarity.ms *.greencolumnart.com *.adalyser.com *.scoutgg.net *.sportradarserving.com *.pa4r.com res-odx.op-mobile.opera.com *.bannerflow.net *.facebook.com *.cloudfront.net *.maze.co d32tdr35c4icxo.cloudfront.net; worker-src 'self' blob:; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=e.rDM_Kv6wGrtWldaZmMXH1mgISoKvpA0g6KAaPtPGQ-1789283074.9868906-1.0.1.1-L9r_QxLW1Rkoyfc6heSf8xwb_fcWY61P0vDQjrXvH7qZWY11gclF5ZmsOpFsgkZ0dxOUP6ndNSk5HjrUNrmpsUGf.aTRfurK4qwsY9XNyxtuuhVkAi.yR.6imX0Vmn2Vode.4n.LqTrFl_3G_3aCbsF1fOWrB42Lwo6NwVyLASmSyaYe2tj.6l6vlqZMPTQn; report-to cf-pahtmioqhqjhmoqk 1
default-src 'none'; script-src 'self' 'nonce-soGb24cg7q5pMwpd'; style-src 'self' 'nonce-4lWminvcgNViUZnF' https://p.typekit.net; img-src 'self' https://images.squarespace-cdn.com; font-src 'self'; media-src 'self';  1
default-src 'none'; connect-src 'self' https://*.icfcdn.com https://www.google.com https://cdn.plyr.io https://*.gstatic.com; script-src 'nonce-a3e579d6b5b3517656f21a2fc43b5e9dea1dd83a7c5b9ad85701bfd9abb3b2b2' 'strict-dynamic' 'report-sample' 'self' https://*.icfcdn.com https://www.google.com https://www.gstatic.com https://*.googleapis.com; style-src 'self' 'nonce-a3e579d6b5b3517656f21a2fc43b5e9dea1dd83a7c5b9ad85701bfd9abb3b2b2' 'report-sample' https://fonts.googleapis.com; style-src-elem 'unsafe-inline' 'report-sample' https://fonts.googleapis.com; style-src-attr 'unsafe-inline' 'report-sample'; font-src https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' blob: https://*.gstatic.com https://*.nsimg.net https://*.icfcdn.com; media-src 'self' data: https://cdn.plyr.io https://*.nsimg.net https://live.metamediafonts.com; frame-src https:; frame-ancestors 'self'; base-uri 'self'; report-to report-only; report-uri /reporting/cspReport?reportOnly 1
object-src 'none'; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.jsdelivr.net cdnjs.cloudflare.com unpkg.com cdn3.theuaelottery.ae cdn3.uat-uaenl.ae www.gstatic.com;report-uri https://muddy-meadow-fb56.swang-203.workers.dev/csp-report 1
script-src-elem https://widget01.popin.to https://store.popin.to https://widget01.popin.to/production *.popin.to blob: data: 'unsafe-inline' *.paypal.com *.paypalobjects.com; font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.googleapis.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com uat.pinepg.in https://uat.pinepg.in/api/PG/V2 secure.pinepg.in https://secure.pinepg.in/payment 'self' data: *.payu.in 'self' 'unsafe-inline'; frame-ancestors 'self' data: *.payu.in *.facebook.com *.flydubai.com *.myshopify.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ https://googleads.g.doubleclick.net https://td.doubleclick.net *.doubleclick.net 'self' data: *.payu.in *.facebook.com *.flydubai.com *.myshopify.com https://widget01.popin.to *.popin.to blob: *.paypal.com *.paypalobjects.com landofcoder.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.ftcdn.net *.behance.net *.googleapis.com maps.gstatic.com www.pinelabs.com https://www.pinelabs.com/img/logo.png https://www.magezon.com *.gstatic.com https://googleads.g.doubleclick.net *.doubleclick.net https://www.googleadservices.com https://pagead2.googlesyndication.com https://widget01.popin.to https://store.popin.to *.popin.to blob: *.paypal.com *.paypalobjects.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com https://rum.hlx.page maps.googleapis.com https://www.gstatic.com https://www.googletagmanager.com tagmanager.google.com https://www.googleadservices.com https://js-agent.newrelic.com *.payu.in jssdk.payu.in https://widget01.popin.to https://store.popin.to https://widget01.popin.to/production *.popin.to blob: data: 'unsafe-inline' 'unsafe-eval' *.paypal.com *.paypalobjects.com *.googleapis.com landofcoder.com https://storage.googleapis.com *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.fontawesome.com tagmanager.google.com 'unsafe-inline' blob: 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https://store.popin.to *.popin.to blob: 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.magento-datasolutions.com *.magento-ds.com maps.googleapis.com https://www.google-analytics.com https://fonts.gstatic.com https://googleads.g.doubleclick.net *.doubleclick.net https://www.googleadservices.com https://pagead2.googlesyndication.com https://bam.nr-data.net https://js-agent.newrelic.com *.payu.in https://widget01.popin.to https://store.popin.to *.popin.to blob: *.paypal.com *.paypalobjects.com *.googleapis.com https://www.gstatic.com landofcoder.com https://storage.googleapis.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src *.popin.to blob: http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri www.googleadservices.com 'self' 'unsafe-inline'; 1
object-src 'none'; script-src 'nonce-p9JOau2FHxo3UxMBSzTXXA==' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; base-uri 'none' 1
base-uri 'self'; object-src 'none'; script-src 'nonce-Jn5Y1GLmgoxEOVnxQ6DG4TGMY' 'strict-dynamic' 'wasm-unsafe-eval'; worker-src 'self' blob:; frame-ancestors 'self'; manifest-src 'self' 1
default-src 'self'; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com; connect-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *.zma.gs *.devhec.com *.abtasty.com abtasty.com api-data-connector.abtasty.com ariane.abtasty.com assets-manager.abtasty.com common-fonts.abtasty.com dcinfos-cache.abtasty.com try.abtasty.com *.ipredictive.com ipredictive.com adlucent.com deepsearch.adlucent.com *.everesttech.net everesttech.net *.typekit.net typekit.net amazonaws.com execute-api.us-west-2.amazonaws.com us-east-2.amazonaws.com socialannex.com *.adnxs.com adnxs.com *.auryc.com auryc.com *.bidr.io prod.bidr.io *.bing.com *.bing.net bat.bing.net bing.com *.brxcdn.com brxcdn.com *.btttag.com btttag.com *.builder.io builder.io *.cloudflare.com *.cloudflareinsights.com cdnfonts.com cloudflare.com cloudflareinsights.com *.cloudfront.net cloudfront.net *.cloudinary.com cloudinary.com *.cnstrc.com cnstrc.com *.contentsquare.net bf.contentsquare.net contentsquare.net hj.contentsquare.net *.criteo.com criteo.com *.delighted.com delighted.com g.doubleclick.net *.doubleclick.net doubleclick.net fls.doubleclick.net *.dstillery.com dstillery.com media6degrees.com *.facebook.com *.facebook.net facebook.com facebook.net *.getfastr.com getfastr.com *.iesnare.com iesnare.com *.google.com *.googlesyndication.com *.gstatic.com analytics.google.com google.bg google.bs google.ca google.ch google.co.cr google.co.il google.co.in google.co.jp google.co.th google.co.uk google.co.vi google.co.za google.com google.com.ar google.com.au google.com.br google.com.bz google.com.co google.com.eg google.com.hk google.com.mx google.com.my google.com.ng google.com.pa google.com.pe google.com.ph google.com.pk google.com.pr google.com.sa google.com.sg google.com.sv google.com.tr google.com.tw google.de google.es google.fr google.hn google.hr google.ie google.it google.nl google.pt google.ro google.sc google.se google.sk google.tt googlesyndication.com gstatic.com *.googleadservices.com googleadservices.com *.googleapis.com googleapis.com *.googletagmanager.com googletagmanager.com *.google-analytics.com google-analytics.com *.fsastore.com *.hsastore.com *.welldeservedhealth.com fsastore.com hsastore.com welldeservedhealth.com *.heap-api.com *.heapanalytics.com heap-api.com heapanalytics.com us.heap-api.com ip-api.com *.izooto.com izooto.com jquery.com listrak.com listrakbi.com *.liadm.com liadm.com *.pcapredict.com *.postcodeanywhere.co.uk pcapredict.com bing.net *.clarity.ms mountain.com *.northbeam.io northbeam.io *.oursprivacy.com oursprivacy.com *.paypalobjects.com paypalobjects.com *.pepperjam.com *.pepperjamnetwork.com pepperjam.com pepperjamnetwork.com *.pinimg.com *.pinterest.com pinimg.com pinterest.com *.pdst.fm *.powerreviews.com powerreviews.com *.riskified.com riskified.com disstg.commercecloud.salesforce.com *.segment.com *.segment.io segment.com segment.io ingest.sentry.io *.spotify.com *.mobify-storefront.com mobify-storefront.com alocdn.com *.adsrvr.org adsrvr.org *.trustarc.com trustarc.com acsbapp.com postcodeanywhere.co.uk telemetry.vaultdcr.com zma.gs *.vaultdcr.com *.youtube.com *.ytimg.com youtube.com ytimg.com *.zdassets.com *.zendesk.com zdassets.com zendesk.com zopim.com *.zmags.com *.zmags.workers.dev creator-prod.zmags.com zmags.com zmags.workers.dev *.fsastore.com *.amazonaws.com *.google.nl *.google.ru *.ip-api.com *.ivaws.com *.legitscript.com *.usbrowserspeed.com clarity.ms google.ae google.co.ma google.com.bd google.com.qa google.lt google.no google.pl google.ru ivaws.com legitscript.com usbrowserspeed.com; frame-ancestors capacitor://localhost; 1
default-src 'self';    object-src 'none';    base-uri 'self';    frame-ancestors 'none';    form-action 'self';    script-src 'self'      https://cdn.cookielaw.org      https://www.googletagmanager.com      https://www.google-analytics.com      https://assets.convertflow.com      https://cdn.jsdelivr.net      https://snap.licdn.com      https://pi.pardot.com      https://stats.g.doubleclick.net      https://region1.google-analytics.com;    style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;    font-src 'self' https://fonts.gstatic.com;    img-src 'self' data:      https://www.google-analytics.com     .https://stats.g.doubleclick.net      https://cdn.cookielaw.org      https://cdn.convertflow.com      https://px.ads.linkedin.com      https://pi.pardot.com;    connect-src 'self'      https://www.google-analytics.com      https://analytics.google.com      https://region1.google-analytics.com      https://stats.g.doubleclick.net      https://api.convertflow.com      https://app.convertflow.co      https://cdn.cookielaw.org      https://geolocation.onetrust.com      https://snap.licdn.com      https://px.ads.linkedin.com      https://pi.pardot.com;    frame-src 'self'      https://www.googletagmanager.com      https://app.convertflow.co      https://pi.pardot.com;    upgrade-insecure-requests;    report-to csp-endpoint;    report-uri reporting URL/report; 1
default-src 'self'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=m6xrdacJ8jc6hiBxyTFLYb6zdSM1H.V0lZKKAjuAOaA-1789289595.5183392-1.0.1.1-4b2dqQKAXtmypVF4kCLOQbnarxHLxlX.JAHDyRJs14VzZLutpcwr9SwUlMoK9C6uFHqQ4VHGgi.DpRJ4wioVcv2Eut7hSOo26C3E8n5BHvMB7zQVssqX4vY6NYKKFOXOpo1k3psplRalA5tdUlzXtZI9hRtNuT1gnnj49pFmeDF3LwfsvWjwaY.NeVH3fVaW; report-to cf-ufljllrkadizsopt 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://*.paribu.com https://*.blackswan.run https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://*.paribu.com https://*.blackswan.run; img-src 'self' data: blob: https://*.paribu.com https://*.blackswan.run https://cdn.v5.maximus.team https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self' data: https://*.paribu.com; connect-src 'self' https://*.paribu.com https://*.blackswan.run wss://*.paribu.com wss://*.blackswan.run https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com; worker-src 'self' blob:; frame-src https://www.googletagmanager.com; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https://*.altondoctors.com https://*.bjc.org https://*.instamed.com https://*.kaltura.com https://*.missouribaptist.org https://*.patientco.com https://*.payconex.net https://*.paymentfusion.com https://*.personalphysicianstl.com https://*.trustcommerce.com https://*.usaepay.com https://*.wustl.edu https://altondoctors.com https://epicproxy.et0965.epichosted.com https://usaepay.com;script-src 'nonce-35499e6895af4e07af1c961d3c5bb667' https://mychart.et0965.epichosted.com 'self';img-src https://* 'self' blob: data: http://altondoctors.com http://doctors.bjc.org;connect-src 'self' epichttp: https://*.kaltura.com;style-src https://mychart.et0965.epichosted.com 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self' http://127.0.0.1 https://localhost.lambdatest.com https://mychart-np.et0965.epichosted.com https://scheduling-dev.bjc.org https://scheduling-test.bjc.org https://scheduling.bjc.org https://www.mypatientchart.org;media-src https://* 'self' blob:; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://accounts.google.com https://cdn.yektanet.com https://van.najva.com https://p1z.ir; connect-src 'self' https://accounts.google.com https://cdn.yektanet.com https://van.najva.com https://p1z.ir; frame-src 'self' https://accounts.google.com; img-src 'self' data: https:; style-src 'self' 'unsafe-inline'; font-src 'self' data: 1
default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https://*.kaltura.com https://apps.mywvuchart.com https://doctors.wvumedicine.org/ https://mychart.personapay.com https://wvumedicine.org;script-src 'nonce-4e5a60686525420d903afee444851ef6' 'self' https://doctors.wvumedicine.org/ https://wvumedicine.org/ https://wvumedicinestg.local/ https://wvumedicinestg.wpenginepowered.com/ https://www.wvumedicine.org/;img-src https://* 'self' blob: data:;connect-src 'self' epichttp:;style-src 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cash-f.squarecdn.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.sharethis.com platform.cloud-iq.com.au *.facebook.com *.adyen.com *.doubleclick.net *.bedbathntable.com.au *.criteo.com *.pinterest.com *.dotdigital-pages.com *.dotdigital.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.youtube.com www.youtube-nocookie.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net * *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.sharethis.com *.googleapis.com dev.visualwebsiteoptimizer.com *.google.com *.facebook.com *.cloud-iq.com.au *.adyen.com *.afterpay.com *.linksynergy.com *.google.com.au *.bedbathntable.com.au bbnt-m2-image-library.s3-ap-southeast-2.amazonaws.com *.cdninstagram.com *.google.lk *.doubleclick.net *.bidswitch.net *.adnxs.com *.smartadserver.com *.taboola.com *.socdm.com *.criteo.com *.casalemedia.com *.dable.io *.adingo.jp *.stickyadstv.com *.360yield.com *.rlcdn.com *.media.net *.bing.com *.yieldmo.com *.aralego.com *.3lift.com *.clmbtech.com *.teads.tv *.smaato.net *.rubiconproject.com *.pubmatic.com *.outbrain.com *.aralego.net *.bluekai.com *.1rx.io *.contextweb.com *.unrulymedia.com px.ads.linkedin.com *.trackedlink.net *.ddlnk.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com t.zip.co static.zip.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.googletagmanager.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.sharethis.com *.googleapis.com *.gstatic.com *.searchspring.net *.athoscommerce.net applepay.cdn-apple.com dev.visualwebsiteoptimizer.com cdnjs.cloudflare.com bam-cell.nr-data.net platform.cloud-iq.com.au *.crazyegg.com *.facebook.net *.facebook.com *.rakuten.com googleads.g.doubleclick.net cdn.lr-ingest.io *.foursixty.com *.bedbathntable.com.au *.tiktok.com *.pinimg.com *.criteo.com *.pinterest.com *.freshworks.net *.freshworks.com *.abtasty.com snap.licdn.com *.clarity.ms *.stackadapt.com *.insightech.com foursixty.com *.zip.co player.vimeo.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com static.zip.co zip.co https://www.bedbathntable.com.au 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.sharethis.com *.searchspring.net *.athoscommerce.net unpkg.com *.foursixty.com *.bedbathntable.com.au *.cloud-iq.com.au use.typekit.net p.typekit.net *.stackadapt.com foursixty.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com *.sharethis.com *.googleapis.com *.searchspring.net *.athoscommerce.net *.crazyegg.com googleads.g.doubleclick.net *.lr-ingest.io *.foursixty.com foursixty.com *.google-analytics.com *.doubleclick.net *.bedbathntable.com.au *.pinterest.com *.pangle-ads.com *.tiktok.com *.criteo.com *.freshworks.net *.freshworks.com *.attraqt.io *.abtasty.com px.ads.linkedin.com *.clarity.ms *.insightech.com *.stackadapt.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net data: fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.despegar.com *.koin.com.br *.googletagmanager.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com cdn.dnky.co amc.demdex.net www.google.com www.facebook.com youtube.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.despegar.com *.koin.com.br *.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net maps.gstatic.com maps.googleapis.com accounts.google.com www.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.despegar.com *.koin.com.br *.googletagmanager.com fonts.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com cdn.dnky.co r1-t.trackedlink.net www.gstatic.com js-agent.newrelic.com bam.nr-data.net maps.googleapis.com connect.facebook.net player.vimeo.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://live.decidir.com/ *.despegar.com *.koin.com.br *.googletagmanager.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.google.com *.gstatic.com https://maps.googleapis.com https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ live.decidir.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com cdn.dnky.co *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.googleapis.com *.gstatic.com https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.magento-datasolutions.com *.magento-ds.com maps.googleapis.com api.comapi.com bam.nr-data.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.despegar.com *.googletagmanager.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.google-analytics.com https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ *.decidir.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.2mdn.net *.3lift.com *.a47b.com *.acuityplatform.com *.ad-score.com *.adform.net *.adnxs.com *.ads.smartadserver.com *.adsafeprotected.com *.adsappier.com *.adsrvr.org *.adtrafficquality.google *.amazon-adsystem.com *.amazonaws.com *.ampproject.org *.azureedge.net *.b2c.com *.basis.net *.betrad.com *.bidr.io *.browsiprod.com *.c3tag.com *.cdn.fastclick.net *.celtra.com *.cloudfront.net *.cog-tr3.com *.cog-tr4.com *.demdex.net *.dotomi.com *.doubleclick.net *.doubleverify.com *.enzymic.co *.evidon.com *.exelator.com *.eyeota.net *.flashtalking.com *.flx10.com *.fouanalytics.com *.ftstatic.com *.g.doubleclick.net *.getrockerbox.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com *.gumgum.com *.id5-sync.com *.innovid.com *.insiad.com *.intentiq.com *.jivox.com *.js7k.com *.jwplayer.com *.l-dsp.inmobicdn.net *.microsoft.com *.mxptint.net *.ns1p.net *.ntv.io *.onedsp.inmobi.com *.p.jwpcdn.com *.padsquad.com *.peer-39.com *.polarcdn.com *.poupdate.pulsepoint.com *.privacymanager.io *.puzzmo-game-assets.com *.puzzmo.com *.puzzmousercontent.com *.quantcount.com *.quantserve.com *.rendering.sharethrough.com *.rfihub.com *.rqtrk.eu *.rubiconproject.com *.rudderlabs.com *.scorecardresearch.com *.script.ac *.smadex.com *.srv.stackadapt.com *.trustarc.com *.truste.com *.turn.com *.update.adsrvr.org *.update.indexww.com *.update.rubiconproject.com *.update.wo.gumgum.com *.yabidos.com *.ybp.yahoo.com *.yimg.com adrta.com cdn-cookieyes.com htlbid.com lottingem.com openfpcdn.io; connect-src 'self' *.3lift.com *.ad-score.com *.adform.net *.adnxs.com *.ads.smartadserver.com *.adsrvr.org *.adtrafficquality.google *.amazon-adsystem.com *.amazonaws.com *.appiersig.com *.b2c.com *.c.appier.net *.c3tag.com *.casalemedia.com *.cheilmedia.com *.cloudfront.net *.cog-tr101.com *.contextweb.com *.cookieyes.com *.dotomi.com *.doubleclick.net *.doubleverify.com *.eu-1-id5-sync.com *.eu-3-id5-sync.com *.eu-4-id5-sync.com *.flashtalking.com *.fouanalytics.com *.ftstatic.com *.g.doubleclick.net *.google-analytics.com *.google.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.gumgum.com *.id5-sync.com *.ingest.sentry.io *.innovid.com *.insiad.com *.jwplayer.com *.liadm.com *.lynx.cognitivlabs.com *.ns1p.net *.openx.net *.peer-39.com *.poupdate.pulsepoint.com *.prod.na.adsqtungsten.a9.amazon.dev *.pubmatic.com *.puzzmo-game-assets.com *.puzzmo.com *.puzzmousercontent.com *.quantserve.com *.rlcdn.com *.rubiconproject.com *.rudderstack.com *.srv.stackadapt.com *.tahoe-analytics.publishers.advertising.a2z.com *.update.adsrvr.org *.update.indexww.com *.update.rubiconproject.com *.update.wo.gumgum.com *.us-east-1.cxm-bcn.publisher-services.amazon.dev *.ybp.yahoo.com cdn-cookieyes.com data: geo-location.prebid.cloud geo.privacymanager.io id5-sync.com o1223952.ingest.sentry.io prebid.outcomes.net sevendata.fun wss://*.puzzmo.com; form-action 'none'; report-to default 1
default-src 'self';base-uri 'self';frame-ancestors 'self' https://cancercarespecialists.org/mychart/ https://osfhealthcare.org/ https://sthcares.org/mychart/ https://www.cancercarespecialists.org/mychart/ https://www.osfhealthcare.org/ https://www.sthcares.org/mychart/;frame-src 'self' epichttp: https://*.appcues.com https://*.dermengine.com https://*.gyantts.com/ https://*.intranet.osfnet.org/ https://*.kyruus.com/ https://*.mixpanel.com https://*.neurotrack.com/ https://*.neurotrack.io/ https://*.osfhealthcare.org/ https://*.skin.app https://*.stripe.com https://*.zipnosis.com/ https://cdnapisec.kaltura.com/ https://d2y285dhddzdli.cloudfront.net https://integrations-core.fabrichealth.com https://integrations-core.stage.fabrichealth.com https://mychart-stg.personapay.com https://mychart.personapay.com https://pay.instamed.com https://premier.trustcommerce.com https://s3.amazonaws.com/assets.gyant.com/ https://securecheckout-test.onplanprocessing.com https://securecheckout.onplanprocessing.com https://ssproxy.osfhealthcare.org https://stagepremier.trustcommerce.com wss://*.gyantts.com/;script-src 'nonce-8360c182ed6d43428f0bd1c48c2cc4c0' https://www.osfmychart.org 'self' https://*.appcues.com https://*.dermengine.com https://*.gyantts.com/ https://*.intranet.osfnet.org/ https://*.kyruus.com/ https://*.mixpanel.com https://*.neurotrack.com/ https://*.neurotrack.io/ https://*.osfhealthcare.org/ https://*.skin.app https://*.stripe.com https://d2y285dhddzdli.cloudfront.net https://s3.amazonaws.com/assets.gyant.com/ https://siteimproveanalytics.com/ wss://*.gyantts.com/;img-src https://* 'self' blob: data: https://*.appcues.com https://*.dermengine.com https://*.gyantts.com/ https://*.intranet.osfnet.org/ https://*.kyruus.com/ https://*.mixpanel.com https://*.neurotrack.com/ https://*.neurotrack.io/ https://*.osfhealthcare.org/ https://*.skin.app https://*.stripe.com https://d2y285dhddzdli.cloudfront.net https://s3.amazonaws.com/assets.gyant.com/ wss://*.gyantts.com/;connect-src 'self' epichttp: https://*.appcues.com https://*.dermengine.com https://*.gyantts.com/ https://*.intranet.osfnet.org/ https://*.kaltura.com https://*.kyruus.com/ https://*.mixpanel.com https://*.neurotrack.com/ https://*.neurotrack.io/ https://*.osfhealthcare.org/ https://*.skin.app https://*.stripe.com https://d2y285dhddzdli.cloudfront.net https://s3.amazonaws.com/assets.gyant.com/ wss://*.gyantts.com/;style-src https://www.osfmychart.org 'self' 'unsafe-inline' https://*.appcues.com https://*.dermengine.com https://*.gyantts.com/ https://*.intranet.osfnet.org/ https://*.kyruus.com/ https://*.mixpanel.com https://*.neurotrack.com/ https://*.neurotrack.io/ https://*.osfhealthcare.org/ https://*.skin.app https://*.stripe.com https://d2y285dhddzdli.cloudfront.net https://s3.amazonaws.com/assets.gyant.com/ wss://*.gyantts.com/;manifest-src 'self' https://*.appcues.com https://*.dermengine.com https://*.gyantts.com/ https://*.intranet.osfnet.org/ https://*.kyruus.com/ https://*.mixpanel.com https://*.neurotrack.com/ https://*.neurotrack.io/ https://*.osfhealthcare.org/ https://*.skin.app https://*.stripe.com https://d2y285dhddzdli.cloudfront.net https://s3.amazonaws.com/assets.gyant.com/ wss://*.gyantts.com/;worker-src 'self' blob: https://*.appcues.com https://*.dermengine.com https://*.gyantts.com/ https://*.intranet.osfnet.org/ https://*.kyruus.com/ https://*.mixpanel.com https://*.neurotrack.com/ https://*.neurotrack.io/ https://*.osfhealthcare.org/ https://*.skin.app https://*.stripe.com https://d2y285dhddzdli.cloudfront.net https://s3.amazonaws.com/assets.gyant.com/ wss://*.gyantts.com/;child-src 'self' blob: https://*.appcues.com https://*.dermengine.com https://*.gyantts.com/ https://*.intranet.osfnet.org/ https://*.kyruus.com/ https://*.mixpanel.com https://*.neurotrack.com/ https://*.neurotrack.io/ https://*.osfhealthcare.org/ https://*.skin.app https://*.stripe.com https://d2y285dhddzdli.cloudfront.net https://s3.amazonaws.com/assets.gyant.com/ wss://*.gyantts.com/;font-src 'self' https://*.appcues.com https://*.dermengine.com https://*.gyantts.com/ https://*.intranet.osfnet.org/ https://*.kyruus.com/ https://*.mixpanel.com https://*.neurotrack.com/ https://*.neurotrack.io/ https://*.osfhealthcare.org/ https://*.skin.app https://*.stripe.com https://d2y285dhddzdli.cloudfront.net https://s3.amazonaws.com/assets.gyant.com/ wss://*.gyantts.com/;object-src 'self' https://*.appcues.com https://*.dermengine.com https://*.gyantts.com/ https://*.intranet.osfnet.org/ https://*.kyruus.com/ https://*.mixpanel.com https://*.neurotrack.com/ https://*.neurotrack.io/ https://*.osfhealthcare.org/ https://*.skin.app https://*.stripe.com https://d2y285dhddzdli.cloudfront.net https://s3.amazonaws.com/assets.gyant.com/ wss://*.gyantts.com/;form-action https://central.mychart.org/MyChart/ 'self' https://*.appcues.com https://*.dermengine.com https://*.fabrichealth.com https://*.gyantts.com/ https://*.intranet.osfnet.org/ https://*.kyruus.com/ https://*.mixpanel.com https://*.neurotrack.com/ https://*.neurotrack.io/ https://*.osfhealthcare.org/ https://*.skin.app https://*.stripe.com https://*.zipnosis.com/ https://d2y285dhddzdli.cloudfront.net https://s3.amazonaws.com/assets.gyant.com/ wss://*.gyantts.com/;media-src https://* 'self' blob: https://*.appcues.com https://*.dermengine.com https://*.gyantts.com/ https://*.intranet.osfnet.org/ https://*.kyruus.com/ https://*.mixpanel.com https://*.neurotrack.com/ https://*.neurotrack.io/ https://*.osfhealthcare.org/ https://*.skin.app https://*.stripe.com https://d2y285dhddzdli.cloudfront.net https://s3.amazonaws.com/assets.gyant.com/ wss://*.gyantts.com/; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com d1cwup7r903a1d.cloudfront.net https://embed.tawk.to https://acsbapp.com https://cdnjs.cloudflare.com/ *.klaviyo.com/ *.smartwaiver.com/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.affirm.com *.affirm.ca connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://plumrocket.com *.criteo.com https://static.criteo.net https://www.xtento.com *.divers-supply.com https://cdn.routeapp.io/ *.tawk.to *.smartwaiver.com/ https://smartwaiver.com/ *.enterpriseapplicationdevelopers.com www.xtento.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.affirm.com *.affirm.ca connect.bolt.com connect-sandbox.bolt.com s3-us-west-1.amazonaws.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com *.google.com *.googleadservices.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.targetbay.com *.criteo.com *.criteo.net www.xtento.com https://www.catchmarketingservices.com www.google-analytics.com *.divers-supply.com https://targetbay.s3.amazonaws.com https://www.google.co.in *.routeapp.io *.yahoo.com https://criteo-sync.teads.tv https://cm.g.doubleclick.net https://s.ad.smaato.net https://ad.360yield.com https://r.casalemedia.com https://ups.analytics.yahoo.com https://eb2.3lift.com *.adnxs.com https://x.bidswitch.net https://sync-criteo.ads.yieldmo.com https://cdn.aralego.net https://ade.clmbtech.com https://simage2.pubmatic.com https://sync.outbrain.com https://c.bing.com https://exchange.mediavine.com https://idsync.rlcdn.com https://cs.adingo.jp https://adx.dable.io *.socdm.com https://sync-t1.taboola.com https://rtb-csync.smartadserver.com https://match.sharethrough.com https://pixel.rubiconproject.com https://contextual.media.net https://ads.stickyadstv.com https://sync.aralego.com https://bat.bing.com https://googleads.g.doubleclick.net *.emxdgt.com/ https://tawk.link https://img-msg.tb-list.com *.googleapis.com *.bayengage.com https://acsbapp.com https://cm.adgrx.com/ https://aa.agkn.com/ https://tags.bluekai.com/ https://trends.revcontent.com/ https://jadserve.postrelease.com/ https://i.liadm.com/ https://matching.ivitrack.com/ https://visitor.omnitagjs.com/ https://partner.mediawallahscript.com/ *.amazonaws.com *.tawk.to https://pixel.iceweb.io/ *.yahoo.net https://public-prod-dspcookiematching.dmxleo.com https://c1.adform.net/ https://d3k81ch9hvuctc.cloudfront.net/ *.klaviyo.com/ *.krxd.net/ *.smartwaiver.com/ https://smartwaiver.com/ https://image-msg.tb-list.com/ *.bolt.com/ *.cloudflare.com *.enterpriseapplicationdevelopers.com *.figpii.com cdn.xtento.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.affirm.com *.affirm.ca connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.avada.io *.shopify.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com cdn.routeapp.io fonts.googleapis.com *.amplitude.com cdn.jsdelivr.net protect-quote-q.route.com protection-widget.route.com stage-protection-widget.route.com protect-lightning-bolt-widget.route.com d3od5si8vgcekb.cloudfront.net ddbmicszvqxcg.cloudfront.net unpkg.com wobs.route.com *.divers-supply.com *.bayengage.com https://www.google-analytics.com https://embed.tawk.to https://acsbapp.com https://acsbap.com *.googleapis.com *.criteo.net *.criteo.com *.targetbay.com https://googleads.g.doubleclick.net https://cdn.jsdelivr.net *.bing.com https://polyfill.io/ https://route-cdn.s3.amazonaws.com/ https://pixel.iceweb.io/ *.klaviyo.com/ *.smartwaiver.com/ https://smartwaiver.com/ *.enterpriseapplicationdevelopers.com *.figpii.com *.fontawesome.com www.xtento.com cdn.xtento.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com d1cwup7r903a1d.cloudfront.net 'self' 'unsafe-inline' https://www.divers-supply.com/ https://embed.tawk.to https://route-cdn.s3.amazonaws.com/ https://cdnjs.cloudflare.com/ *.targetbay.com/ *.klaviyo.com/ *.smartwaiver.com/ https://smartwaiver.com/ *.enterpriseapplicationdevelopers.com *.figpii.com 'self' 'unsafe-inline'; object-src connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.affirm.com *.affirm.ca connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com sessions.bugsnag.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io *.googletagmanager.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com api.route.com *.amplitude.com cdn.jsdelivr.net protect-quote-q.route.com protection-widget.route.com stage-protection-widget.route.com d3od5si8vgcekb.cloudfront.net protect-lightning-bolt-widget.route.com ddbmicszvqxcg.cloudfront.net unpkg.com wobs.route.com https://www.divers-supply.com *.bayengage.com *.acsbapp.com *.targetbay.com *.tawk.to wss://*.tawk.to *.googleapis.com https://www.google-analytics.com *.criteo.com https://geolocation-db.com/ *.ipapi.com https://acsbapp.com/ *.klaviyo.com/ *.smartwaiver.com/ https://smartwaiver.com/ https://api.rollbar.com/ https://prodregistryv2.org/ https://featureassets.org/ *.enterpriseapplicationdevelopers.com *.figpii.com wss://*.figpii.com *.facebook.com https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; script-src 'self'  cdnjs.cloudflare.com https://cdn.jsdelivr.net https://unpkg.com platform.twitter.com; script-src-attr 'self'; style-src 'self' fonts.googleapis.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://unpkg.com https://www.w3schools.com; style-src-attr 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'nonce-74726e0e-7bea-44d1-8519-20c73c06c0c8' 'unsafe-eval' https://pagead2.googlesyndication.com https://securepubads.g.doubleclick.net https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://cdn.ad.plus https://www.gstatic.com https://www.google.com https://*.criteo.com https://*.criteo.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.googletagmanager.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; connect-src 'self' blob: https: wss:; media-src 'self' blob: https:; frame-src 'self' https://*.googlesyndication.com https://*.doubleclick.net https://*.google.com https://*.googleadservices.com https://*.gstatic.com https://*.adtrafficquality.google https://*.ad.plus https://*.facebook.com https://*.facebook.net https://*.pubmatic.com https://*.indexexchange.com https://*.casalemedia.com https://*.rubiconproject.com https://*.media.net https://*.onetag.com https://*.rhythmone.com https://*.unrulymedia.com https://*.sovrn.com https://*.lijit.com https://*.criteo.com https://*.criteo.net; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://www.google.com https://www.facebook.com; worker-src 'self' blob:; upgrade-insecure-requests; report-uri /api/csp-report 1
default-src 'self';base-uri 'self';frame-ancestors 'self' https://*.epic.com https://*.geisinger.edu https://*.geisinger.org https://*.mycarecompass.edu https://*.mycarecompass.org https://*.mygeisinger.org https://geisinger.org https://www.geisinger.org;frame-src 'self' epichttp: https://*.geisinger.edu https://cdnapisec.kaltura.com/ https://geisapi.geisinger.edu https://pay.instamed.com https://paymentsafe.experianhealth.com;script-src https://mychart.mycarecompass.org 'self' 'unsafe-eval' 'unsafe-inline' https://*.geisinger.edu https://*.geisinger.org https://*.google.com https://*.googleapis.com https://*.jquery.com https://*.mycarecompass.org https://*.virtualearth.net https://ajax.microsoft.com https://mycarecompass.org https://twemoji.maxcdn.com https://unpkg.com https://www.gstatic.com;img-src https://* 'self' blob: data:;connect-src 'self' epichttp: https://*.amazonaws.com https://*.kaltura.com;style-src https://mychart.mycarecompass.org 'self' 'unsafe-inline' https://*.geisinger.edu https://*.geisinger.org https://*.mycarecompass.org https://mycarecompass.org https://s3.amazonaws.com;worker-src 'self' blob:;child-src 'self' blob:;font-src 'self' https://s3.amazonaws.com;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.amarstock.com https://accounts.google.com https://apis.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://www.google-analytics.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://code.jquery.com https://*.posthog.com https://player.vimeo.com https://embed.tawk.to https://*.tawk.to; style-src 'self' 'unsafe-inline' https://*.amarstock.com https://accounts.google.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://fonts.googleapis.com; font-src 'self' data: https://*.amarstock.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com; img-src 'self' data: blob: https://*.amarstock.com https://*.posthog.com https://www.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://*.g.doubleclick.net https://www.google.com https://*.google.com.bd https://play.google.com https://*.googleusercontent.com https://www.gstatic.com https://i.ytimg.com https://img.youtube.com https://*.vimeocdn.com https://tools.applemediaservices.com https://toolbox.marketingtools.apple.com https://*.tawk.to; connect-src 'self' blob: https://*.amarstock.com wss://*.amarstock.com https://*.posthog.com https://*.google-analytics.com https://analytics.google.com https://*.g.doubleclick.net https://www.googletagmanager.com https://accounts.google.com https://www.google.com https://www.gstatic.com https://*.tawk.to wss://*.tawk.to https://vimeo.com https://player.vimeo.com https://*.vimeocdn.com; frame-src 'self' blob: https://*.amarstock.com https://accounts.google.com https://apis.google.com https://content.googleapis.com https://www.google.com https://recaptcha.google.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://td.doubleclick.net; media-src 'self' data: blob: https://*.amarstock.com; worker-src 'self' blob:; child-src 'self' blob: https://*.amarstock.com; frame-ancestors 'self' https://*.amarstock.com; object-src 'none'; base-uri 'self' 1
default-src 'self';base-uri 'self';frame-ancestors 'self' www.columbiadoctors.org www.nyp.org;frame-src 'self' epichttp: https://*.columbia.edu https://*.cornell.edu https://*.epichosted.com https://*.nyp.org https://*.personapay.com https://*.trustcommerce.com https://*.zoom.com https://*.zoom.us https://*.zoomapp.cloud https://*.zoomstatus.com https://cdnapisec.kaltura.com/ https://columbia.edu https://cornell.edu https://epicproxy-np.et1089.epichosted.com https://epicproxy-pub-np.et1089.epichosted.com https://epicproxy-pub.et1089.epichosted.com https://epicproxy.et1089.epichosted.com https://nyp.org https://personapay.com https://premier.trustcommerce.com https://safe.menlosecurity.com https://stagepremier.trustcommerce.com https://trustcommerce.com https://zoom.com https://zoom.us https://zoomapp.cloud https://zoomstatus.com;script-src 'nonce-9d86681f25784332bd30085c8667039c' https://www.myconnectnyc.org 'self' https://*.columbia.edu https://*.cornell.edu https://*.nyp.org https://*.personapay.com https://*.trustcommerce.com https://personapay.com https://trustcommerce.com;img-src https://* 'self' blob: data: https://*.columbia.edu https://*.cornell.edu https://*.nyp.org https://*.personapay.com https://*.trustcommerce.com https://personapay.com https://trustcommerce.com;connect-src 'self' epichttp: https://*.columbia.edu https://*.cornell.edu https://*.kaltura.com https://*.nyp.org https://*.personapay.com https://*.trustcommerce.com https://personapay.com https://trustcommerce.com;style-src https://www.myconnectnyc.org 'self' 'unsafe-inline' https://*.columbia.edu https://*.cornell.edu https://*.nyp.org https://*.personapay.com https://*.trustcommerce.com https://personapay.com https://trustcommerce.com;manifest-src 'self' https://*.columbia.edu https://*.cornell.edu https://*.nyp.org https://*.personapay.com https://*.trustcommerce.com https://personapay.com https://trustcommerce.com;prefetch-src 'self' https://*.columbia.edu https://*.cornell.edu https://*.nyp.org https://*.personapay.com https://*.trustcommerce.com https://personapay.com https://trustcommerce.com;worker-src 'self' blob: https://*.columbia.edu https://*.cornell.edu https://*.nyp.org https://*.personapay.com https://*.trustcommerce.com https://personapay.com https://trustcommerce.com;child-src 'self' blob: https://*.columbia.edu https://*.cornell.edu https://*.nyp.org https://*.personapay.com https://*.trustcommerce.com https://personapay.com https://trustcommerce.com;font-src 'self' https://*.columbia.edu https://*.cornell.edu https://*.nyp.org https://*.personapay.com https://*.trustcommerce.com https://personapay.com https://trustcommerce.com;object-src 'self' https://*.columbia.edu https://*.cornell.edu https://*.nyp.org https://*.personapay.com https://*.trustcommerce.com https://personapay.com https://trustcommerce.com;form-action https://central.mychart.org/MyChart/ 'self' https://*.columbia.edu https://*.cornell.edu https://*.epichosted.com https://*.nyp.org https://*.personapay.com https://*.trustcommerce.com https://central.mychart.org https://mychart-np.et4084.epichosted.com https://personapay.com https://trustcommerce.com;media-src https://* 'self' blob: https://*.columbia.edu https://*.cornell.edu https://*.nyp.org https://*.personapay.com https://*.trustcommerce.com https://personapay.com https://trustcommerce.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' statistiques.cnas.fr www.google.com ajax.googleapis.com cdn.ckeditor.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.datatables.net unpkg.com; object-src 'none'; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net cdnjs.cloudflare.com cdn.datatables.net; img-src 'self' data: *.tile.openstreetmap.org www.cnas.fr statistiques.cnas.fr; media-src 'self'; frame-src 'self' my.sendinblue.com *.sibforms.com app.powerbi.com; frame-ancestors 'self'; child-src 'self' blob:; font-src 'self' cdn.jsdelivr.net; connect-src 'self' *.cnas.fr statistiques.cnas.fr api.friendlycaptcha.com eu-api.friendlycaptcha.eu app.powerbi.com; report-uri /report-csp-violation 1
font-src https://fonts.gstatic.com/ https://fonts.googleapis.com/ https://www.google.com/ https://www.gstatic.com/ https://maps.googleapis.com/ https://www.google-analytics.com/ https://static.cloudflareinsights.com/ data: https://maps.gstatic.com https://credomatic.compassmerchantsolutions.com/ *.core.windows.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com self *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * secure.nmi.com secure.networkmerchants.com collectcheckout.com  'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://*.doubleclick.net/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * secure.nmi.com secure.networkmerchants.com collectcheckout.com  'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://kalicr.com https://www.google.co.cr/ https://www.facebook.com/ https://almaceneselrey.com/ https://www.google.com/ https://www.gstatic.com/ https://maps.googleapis.com/ https://www.google-analytics.com/ https://static.cloudflareinsights.com/ https://maps.gstatic.com https://fonts.googleapis.com/ https://credomatic.compassmerchantsolutions.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.core.windows.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://googletagmanager.com/ https://www.googletagmanager.com/ data: https://connect.facebook.net/ https://applepay.cdn-apple.com https://www.google.com/ https://www.gstatic.com/ https://maps.googleapis.com/ https://www.google-analytics.com/ https://static.cloudflareinsights.com/ https://maps.gstatic.com https://fonts.googleapis.com/ https://credomatic.compassmerchantsolutions.com/ s7.addthis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.core.windows.net secure.nmi.com secure.networkmerchants.com collectcheckout.com  'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://credomatic.compassmerchantsolutions.com/ https://fonts.gstatic.com/ https://fonts.googleapis.com/ https://googletagmanager.com/ https://www.googletagmanager.com/ data: https://secure.networkmerchants.com/ https://www.google.com/ https://www.gstatic.com/ https://maps.googleapis.com/ https://www.google-analytics.com/ https://static.cloudflareinsights.com/ https://maps.gstatic.com unsafe-inline assets.braintreegateway.com *.core.windows.net secure.nmi.com  'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.core.windows.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://credomatic.compassmerchantsolutions.com/ https://googletagmanager.com/ https://www.googletagmanager.com/ https://*.doubleclick.net/ data: https://www.facebook.com/ https://places.googleapis.com/ https://www.google.co.cr https://www.google.com/ https://www.gstatic.com/ https://maps.googleapis.com/ https://www.google-analytics.com/ https://static.cloudflareinsights.com/ https://maps.gstatic.com https://fonts.googleapis.com/ ekr.zdassets.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.core.windows.net secure.nmi.com secure.networkmerchants.com collectcheckout.com  'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.payu.in https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' *.payu.in www.facebook.com *.apitest.payu.in *.google.com *.clarity.ms 'self' 'unsafe-inline'; frame-ancestors 'self' *.payu.in 'self'; frame-src fast.amc.demdex.net https://*.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net https://*.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https://*.facebook.com *.criteo.com/ *.sandbox.paypal.com *.paypalobjects.com *.criteo.net *.apitest.payu.in https://fast.amc.demdex.net https://geostag.cardinalcommerce.com https://geo.cardinalcommerce.com https://1eafstag.cardinalcommerce.com https://1eaf.cardinalcommerce.com https://centinelapistag.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://bid.g.doubleclick.net https://*.demdex.net https://*.youtube-nocookie.com https://www.paypal.com https://www.sandbox.paypal.com https://pilot-payflowlink.paypal.com https://www.paypalobjects.com https://player.vimeo.com https://www.google.com https://*.braintreegateway.com https://*.paypal.com https://www.googletagmanager.com https://*.criteo.com https://*.criteo.net https://*.apitest.payu.in https://*.payu.in https://api.razorpay.com https://*.pickrr.com https://*.shiprocket.in https://cdn.lightwidget.com cdn.lightwidget.com *.clarity.ms 'self' *.payu.in api.razorpay.com *.pickrr.com *.shiprocket.in 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net maps.gstatic.com *.muftijeans.in *.google.co.in *.google.com *.bing.com *.pinterest.com *.criteo.com *.bidswitch.net *.doubleclick.net *.adnxs.com *.socdm.com *.casalemedia.com *.adingo.jp *.360yield.com *.rlcdn.com *.outbrain.com *.pubmatic.com *.rubiconproject.com *.smartadserver.com *.taboola.com *.teads.tv *.clmbtech.com *.3lift.com *.1rx.io *.media.net *.unrulymedia.com *.www.googleadservices.com *.www.google.com *.facebook.com *.cloudfront.net *.dmxleo.com *.facebook.net *.agkn.com cdn.lightwidget.com *.clarity.ms https://firebasestorage.googleapis.com flagpedia.net *.payu.in cdn.razorpay.com *.pickrr.com *.netlify.app aa.agkn.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.youtube.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page maps.googleapis.com *.gstatic.com *.facebook.com *.criteo.com *.criteo.net https://www.google.com/recaptcha/api2/webworker.js *.muftijeans.in *.hotjar.com https://static.hotjar.com *.googleapis.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.vimeo.com https://www.googletagmanager.com *.smartlook.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.google.co.in *.www.google.co.in *.facebook.net cdn.lightwidget.com *.clarity.ms *.avada.io *.shopify.com *.payu.in checkout.razorpay.com *.pickrr.com *.netlify.app *.shiprocket.in https://otpless.com *.shiprocket.com connect.facebook.net *.adobedtm.com sc-static.net tr.snapchat.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.coolzcloud.com *.amazonaws.com *.googletagmanager.com cdn.lightwidget.com *.clarity.ms *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com *.payu.in *.pickrr.com *.netlify.app *.shiprocket.com https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src *.muftijeans.in *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.clarity.ms 'self' 'unsafe-inline'; media-src *.adobe.com *.muftijeans.in 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.doubleclick.net *.facebook.com *.googleapis.com *.criteo.com *.pinterest.com *.facebook.net *.hotjar.com *.hotjar.io wss://ws.hotjar.com *.sandbox.paypal.com *.paypalobjects.com *.google.co.in *.www.google.co.in *.clarity.ms https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com *.payu.in lumberjack.razorpay.com lumberjack-metrics.razorpay.com *.pickrr.com *.netlify.app *.fastrr.com *.shiprocket.in https://cred.club *.razorpay.com tr.snapchat.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';  script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' https://events.framer.com/script https://framer.com https://framerusercontent.com https://www.googletagmanager.com/gtm.js https://www.googletagmanager.com/gtag/js;  style-src 'report-sample' 'self' 'unsafe-inline';  object-src 'none';  base-uri 'self';  connect-src 'self' https://events.framer.com https://lottie.host https://region1.google-analytics.com https://website-data-beta.vercel.app https://www.google-analytics.com;  font-src 'self' https://cdnjs.cloudflare.com https://framerusercontent.com;  frame-src 'self' https://embeds.beehiiv.com https://framer.com;  img-src 'self' data: https://framerusercontent.com https://www.googletagmanager.com https://yastatic.net;  manifest-src 'self';  media-src 'self' https://framerusercontent.com;  worker-src 'none';  frame-ancestors 'self';  report-uri https://68af03dee39705929f59b2eb.endpoint.csper.io?builder=true&v=9; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://vlibras.gov.br https://*.vlibras.gov.br; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://unpkg.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https:; connect-src 'self' https://www.google-analytics.com https://*.vlibras.gov.br; frame-src 'self' https:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' 1
script-src 'nonce-5c0o2Mr2fYD87sK4cRUO4g' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/static-on-bigtable; base-uri 'none' 1
object-src 'none';base-uri 'self';script-src 'nonce-x5-vZmcsi55pqyxyQgUNsg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'self' cdn.robinhood.com cdn.pdst.fm/ping.min.js *.google-analytics.com *.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ tagmanager.google.com connect.facebook.net sc-static.net d.impactradius-event.com www.redditstatic.com analytics.tiktok.com boards.greenhouse.io bat.bing.com www.googleadservices.com googleads.g.doubleclick.net pagead2.googlesyndication.com web-sdk-cdn.singular.net/singular-gtm-interface/latest/singular-gtm-interface.js web-sdk-cdn.singular.net/singular-sdk/latest/singular-sdk.js static.ads-twitter.com s.yimg.com *.usercentrics.eu snap.licdn.com collector-47804.us.tvsquared.com/tv2track.js js.stripe.com public.flourish.studio/resources/embed.js csi.gstatic.com cdn.parsely.com *.doubleclick.net *.googlesyndication.com *.googletagservices.com platform.twitter.com/ platform.x.com/ platform.instagram.com/ www.instagram.com/embed.js www.threads.net/embed.js www.tiktok.com/embed.js lf16-tiktok-web.tiktokcdn-us.com/ www.facebook.com/ www.youtube.com/ ak.sail-horizon.com *.celtra.com *.doubleverify.com *.infogram.com cdn.concert.io *.adtrafficquality.google hymnal-prod.vox-cdn.com www.documentcloud.org/notes/loader.js truthsocial.com/embed.js embed.reddit.com/widgets.js embed.bsky.app/static/embed.js *.permutive.app 'unsafe-eval' 'unsafe-eval' ; report-uri https://o62437.ingest.us.sentry.io/api/4511655832846336/security/?sentry_key=2c2d794d57d1a3cb8f62530c00238b7a 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'   https://www.betpassion.info   https://www.googletagmanager.com   https://www.google-analytics.com   https://connect.facebook.net   https://js-eu1.hs-scripts.com   https://js-eu1.hscollectedforms.net   https://js-eu1.hs-banner.com   https://js-eu1.hs-analytics.net   https://an.gr-wcon.com   https://us-an.gr-cdn.com   https://microgame.askmesuite.com   https://cdn.jsdelivr.net   https://cdnjs.cloudflare.com   https://cdn.cookielaw.org   https://s.go-mpulse.net   https://www.datadoghq-browser-agent.com   https://www.gstatic.com   https://secure.safecharge.com   https://cdn.safecharge.com   https://googleads.g.doubleclick.net;  style-src 'self' 'unsafe-inline'   https://fonts.googleapis.com   https://cdn.cookielaw.org;  font-src 'self' data: https://fonts.gstatic.com; img-src 'self' blob: data:   https://www.googletagmanager.com   https://www.google.com   https://www.google.it   https://www.google.de   https://www.google.fr   https://www.google.es   https://www.google.co.uk   https://www.google.ch   https://www.google.at   https://www.google.be   https://www.facebook.com   https://connect.facebook.net   https://*.amazonaws.com   https://microgame.askmesuite.com   https://*.betpassion.it   https://betpassion.info   https://*.gstatic.com   https://translate.google.com;  media-src 'self'   https://microgame.askmesuite.com;  worker-src blob:; connect-src 'self'   https://www.google.com   https://www.google.it   https://region1.analytics.google.com   https://region1.google-analytics.com   https://analytics.google.com   https://www.googletagmanager.com   https://www.google-analytics.com   https://www.googleadservices.com   https://ad.doubleclick.net   https://stats.g.doubleclick.net   https://translate.googleapis.com   https://connect.facebook.net   https://www.facebook.com   https://js-eu1.hs-scripts.com   https://js-eu1.hscollectedforms.net   https://js-eu1.hs-analytics.net   https://betpassion.info   https://*.akstat.io   https://*.go-mpulse.net   https://*.akamaihd.net   https://browser-intake-datadoghq.eu   https://microgame.askmesuite.com   wss://microgame.askmesuite.com   https://webapi.microgame.it   https://mpc2-prod-25-is5qnl632q-wl.a.run.app   https://firestore.googleapis.com   https://mainwebapi.papigames.bet.br   https://*.ecs.us-east-1.on.aws   https://m3.aircash.eu;  frame-src 'self' intent:   https://*.safecharge.com   https://acs.nexigroup.com   https://3ds.nexigroup.com   https://paye.netsgroup.com   https://www.paypal.com   https://www.googletagmanager.com   https://*.betpassion.it   https://*.poste.it   https://web.vaservices.eu   https://mywallet-sandbox.admiralpay.it   https://*.sportradar.com   https://*.microgame.it   https://*.skrill.com   https://*.giocodigitale.it   https://*.evo-games.com   https://www.facebook.com   https://casinotournamentsmodule-release-prod-betpassion.g3x.io   https://game-box-v2-master.888drafts.com;  frame-ancestors 'self' https://mokabingo3.giocodigitale.it; object-src 'none'; base-uri 'self'; form-action 'self'   https://*.safecharge.com   https://resources.betpassion.it   https://www.facebook.com;  report-uri https://csp-report.microgamenewbos.it/csp-report; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-v_tQ_OUo-QtNOZpfOZUK6g' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.craft.cloud https://tlt-cdn.prd.teamleader.eu https://cdn.segment.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://js.hsforms.net https://js.hs-scripts.com https://js.hs-analytics.net https://js.hscta.net https://js.usemessages.com https://fast.wistia.com; style-src 'self' 'unsafe-inline' https://cdn.craft.cloud; font-src 'self' https://cdn.craft.cloud; img-src 'self' data: blob: https://cdn.craft.cloud https://fast.wistia.com https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://track.hubspot.com https://forms.hsforms.com; connect-src 'self' https://tlt-cdn.prd.teamleader.eu https://api.segment.io https://cdn.segment.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://js.hsforms.net https://api.hubspot.com https://forms.hubspot.com https://track.hubspot.com https://js.hs-analytics.net https://js.usemessages.com https://fast.wistia.com https://embedwistia-a.akamaihd.net; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://fast.wistia.com https://js.hsforms.net https://forms.hsforms.com https://meetings.hubspot.com https://consent.cookiebot.com https://consentcdn.cookiebot.com; worker-src 'self' blob:; media-src 'self' https://fast.wistia.com https://embedwistia-a.akamaihd.net blob:; manifest-src 'self'; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://forms.hubspot.com https://forms.hsforms.com; upgrade-insecure-requests ; report-uri https://teamleader.uriports.com/reports/report; report-to default; 1
default-src 'self'; script-src 'self' 'sha256-LPVgiGXP5ugI6AyggLLDsIF8M9WRauLJwxaEP7ydWeQ=' https://analytics.ahrefs.com https://bat.bing.com https://beacon.riskified.com https://cdn-cookieyes.com https://chimpstatic.com https://device.maxmind.com https://dynamic.criteo.com https://form-assets.mailchimp.com https://js.authorize.net https://maps.googleapis.com https://static.olark.com https://api.olark.com https://utt.impactcdn.com https://www.clarity.ms https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.recaptcha.net https://www.redditstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://static.olark.com https://www.gstatic.com; img-src 'self' data: blob: https://cdn.bullionexchanges.com https://log.olark.com https://www.gstatic.com https://bat.bing.com https://www.google-analytics.com https://www.google.com https://www.facebook.com https://seal-newyork.bbb.org; connect-src 'self' https://bullionexchanges.com https://form-assets.mailchimp.com https://knrpc.olark.com https://api.olark.com https://js.authorize.net https://maps.googleapis.com https://analytics.ahrefs.com https://bat.bing.com https://beacon.riskified.com https://device.maxmind.com https://dynamic.criteo.com https://www.clarity.ms https://*.clarity.ms https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://www.google.com https://www.recaptcha.net https://static.olark.com; worker-src 'self' blob:; frame-ancestors 'self'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://*.adtrafficquality.google https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://partner.googleadservices.com https://adservice.google.com https://www.gstatic.com https://www.googleapis.com https://apis.google.com https://js.stripe.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https: https://gifftme-pull.b-cdn.net; font-src 'self' data: https://fonts.gstatic.com https://www.gstatic.com; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com https://*.googleapis.com https://*.firebaseio.com https://*.firebasedatabase.app https://securetoken.googleapis.com https://identitytoolkit.googleapis.com https://firebaseinstallations.googleapis.com https://firebaseappcheck.googleapis.com https://firestore.googleapis.com https://fonts.gstatic.com https://api.stripe.com https://*.doubleclick.net https://*.googlesyndication.com https://gifftme-pull.b-cdn.net; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://*.google.com https://*.adtrafficquality.google https://*.doubleclick.net https://*.googlesyndication.com; worker-src 'self' blob:; manifest-src 'self'; media-src 'self' blob: https: https://gifftme-pull.b-cdn.net; form-action 'self' https://checkout.stripe.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.iubenda.com cdn.iubenda.com www.googletagmanager.com *.googletagmanager.com www.google-analytics.com *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.googletagservices.com www.google.com accounts.google.com www.gstatic.com apis.google.com connect.facebook.net cdn.firstpromoter.com firstpromoter.com cdn-4.convertexperiments.com t.undetectable.ai analytics.aweber.com cdn.cgb.la public.reduxpayments.com va.vercel-scripts.com static.cloudflareinsights.com bat.bing.com bat.bing.net www.youtube.com s.ytimg.com googleads.g.doubleclick.net capi-automation.s3.us-east-2.amazonaws.com sc-static.net *.snapchat.com bzrcdn.openai.com bzr.openai.com static.hotjar.com script.hotjar.com *.hotjar.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.iubenda.com accounts.google.com static.hotjar.com script.hotjar.com; font-src 'self' data: fonts.gstatic.com *.iubenda.com script.hotjar.com; img-src 'self' data: blob: *.iubenda.com www.facebook.com *.facebook.com www.google-analytics.com *.google-analytics.com google.com www.google.com *.google.com *.google.com.br google.com.br *.google.de google.de *.google.fr google.fr *.google.es google.es *.google.it google.it *.google.nl google.nl *.google.pl google.pl *.google.pt google.pt *.google.co.uk google.co.uk *.google.co.jp google.co.jp *.google.co.kr google.co.kr *.google.co.in google.co.in *.google.co.id google.co.id *.google.com.mx google.com.mx *.google.com.au google.com.au *.google.com.ar google.com.ar *.google.ca google.ca www.googletagmanager.com *.googleadservices.com *.googlesyndication.com lh3.googleusercontent.com *.googleusercontent.com image.undetectable.ai static.undetectable.ai www.gstatic.com t.undetectable.ai cdn-4.convertexperiments.com analytics.aweber.com bat.bing.com bat.bing.net i.ytimg.com *.doubleclick.net sc-static.net *.snapchat.com bzrcdn.openai.com bzr.openai.com capig.stape.chat *.hotjar.com script.hotjar.com; connect-src 'self' *.iubenda.com www.google-analytics.com *.google-analytics.com region1.google-analytics.com analytics.google.com accounts.google.com google.com www.google.com *.google.com *.google.com.br google.com.br *.google.de google.de *.google.fr google.fr *.google.es google.es *.google.it google.it *.google.nl google.nl *.google.pl google.pl *.google.pt google.pt *.google.co.uk google.co.uk *.google.co.jp google.co.jp *.google.co.kr google.co.kr *.google.co.in google.co.in *.google.co.id google.co.id *.google.com.mx google.com.mx *.google.com.au google.com.au *.google.com.ar google.com.ar *.google.ca google.ca www.gstatic.com apis.google.com www.googleadservices.com graph.facebook.com *.facebook.com t.undetectable.ai cdn.firstpromoter.com firstpromoter.com cdn-4.convertexperiments.com analytics.aweber.com api.chargeblast.com vitals.vercel-insights.com vitals.vercel-analytics.com *.vercel-scripts.com static.cloudflareinsights.com bat.bing.com bat.bing.net *.doubleclick.net capi-automation.s3.us-east-2.amazonaws.com sc-static.net *.snapchat.com bzrcdn.openai.com bzr.openai.com capig.stape.chat *.hotjar.com *.hotjar.io wss://*.hotjar.com; frame-src 'self' *.iubenda.com cdn.iubenda.com www.googletagmanager.com td.doubleclick.net www.facebook.com accounts.google.com www.youtube.com www.youtube-nocookie.com *.snapchat.com sc-static.net bzrcdn.openai.com bzr.openai.com vars.hotjar.com *.hotjar.com; worker-src 'self' blob:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://ajax.googleapis.com https://ajax.aspnetcdn.com https://unpkg.com https://www.googletagmanager.com https://www.google-analytics.com https://maps.google.com https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://downloads.mailchimp.com https://locationbank.net https://mobicred.co.za https://app.mobicredwidget.co.za https://googleads.g.doubleclick.net https://ad.doubleclick.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com; frame-src https://www.youtube.com https://www.googletagmanager.com https://www.google.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https://identity.cashcrusaders.co.za; report-uri /csp-report 1
default-src 'self'; script-src 'self' https://code.jquery.com https://www.googletagmanager.com https://pxl-csumbedu.terminalfour.net https://static.hotjar.com https://script.hotjar.com https://cbe.capturehighered.net https://s.adroll.com https://d.adroll.com https://www.google.com https://cse.google.com https://www.gstatic.com https://siteimproveanalytics.com https://bot.io.gravyty.com 'unsafe-inline'; style-src 'self' https://fonts.googleapis.com https://pxl-csumbedu.terminalfour.net https://www.google.com https://www.csuci.edu 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com https://pxl-csumbedu.terminalfour.net data:; img-src 'self' https://www.csuci.edu https://pxl-csumbedu.terminalfour.net https://40230.global.siteimproveanalytics.io data:; media-src 'self' https://player.vimeo.com https://vimeocdn.com; connect-src 'self' https://region1.google-analytics.com https://content.hotjar.io wss://ws.hotjar.com https://bot.io.gravyty.com; frame-src 'self' https://www.google.com; frame-ancestors 'self'; object-src 'none'; base-uri 'none'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; manifest-src 'self'; worker-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://*.leakshaven.com https://*.egirlshaven.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://static.cloudflareinsights.com https://challenges.cloudflare.com https://www.clarity.ms https://*.clarity.ms; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://www.gstatic.com; img-src 'self' data: blob: https://*.leakshaven.com https://*.egirlshaven.com https://*.imgcrate.com https://ts.buzzheavier.com https://cdn.jsdelivr.net https://placehold.co https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com https://*.g.doubleclick.net https://www.google.com https://www.google.de https://www.google.co.uk https://www.google.fr https://www.google.es https://www.google.it https://www.google.nl https://www.google.pl https://www.google.se https://www.google.ch https://www.google.at https://www.google.be https://www.google.dk https://www.google.no https://www.google.fi https://www.google.ie https://www.google.pt https://www.google.cz https://www.google.gr https://www.google.ca https://www.google.com.au https://www.google.com.br https://www.google.com.mx https://www.google.co.in https://www.google.co.jp https://www.google.ru https://www.clarity.ms https://*.clarity.ms https://c.bing.com; font-src 'self' data: https://www.gstatic.com; media-src 'self' blob: data: https://*.leakshaven.com https://*.egirlshaven.com https://*.imgcrate.com https://ts.buzzheavier.com; connect-src 'self' https://*.leakshaven.com https://*.egirlshaven.com https://*.syntheticacloud.com https://*.imgcrate.com https://ts.buzzheavier.com https://cdn.jsdelivr.net https://placehold.co https://photon.komoot.io https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net https://www.google.com https://www.gstatic.com https://static.cloudflareinsights.com https://cloudflareinsights.com https://challenges.cloudflare.com https://www.clarity.ms https://*.clarity.ms https://c.bing.com wss://*.leakshaven.com wss://*.egirlshaven.com; frame-src 'self' https://*.leakshaven.com https://*.egirlshaven.com https://www.google.com https://challenges.cloudflare.com https://www.googletagmanager.com https://www.clarity.ms; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https: wss:; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss: blob:; frame-src 'self' https: blob:; worker-src 'self' blob:; media-src 'self' https: blob:; upgrade-insecure-requests; 1
default-src 'self' https://datadryad.org; connect-src 'self' https: https://blog.datadryad.org https://*.google-analytics.com https://cdn.jsdelivr.net https://*.awswaf.com https://*.datacite.org https://*.amazonaws.com https://doi.org https://datadryad.org; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.google-analytics.com https://cdnjs.cloudflare.com https://www.google.com https://www.recaptcha.net https://www.gstatic.com https://datadryad.org; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://*.google-analytics.com https://*.awswaf.com https://*.proxy.hfzk.net.cn https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://js.stripe.com https://www.google.com https://www.recaptcha.net https://www.gstatic.com https://datadryad.org; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.googleapis.com https://datadryad.org; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.googleapis.com https://datadryad.org; style-src-attr 'unsafe-inline'; font-src 'self' data: https://fonts.gstatic.com https://fonts.gstatic.cn https://*.googleapis.com chrome-extension: moz-extension: safari-web-extension: https://*.proxy.hfzk.net.cn https://cdn.scite.ai https://datadryad.org; img-src 'self' https: data:; media-src 'self' data: https://datadryad.org; worker-src 'self' blob: https://cdnjs.cloudflare.com https://datadryad.org; child-src blob:; frame-src 'self' https:; object-src 'none'; report-uri /csp-violation-report-endpoint 1
default-src https: data: wss: 'unsafe-inline' 'unsafe-eval'; worker-src blob: 1
default-src 'self'; img-src 'self' *.taiko-p.jp data: https://www.googletagmanager.com/ https://www.google.co.jp/ https://cdn-au.onetrust.com/; style-src 'self' 'unsafe-inline'; script-src 'self' 'nonce-6aa6605a7cad7' */gtm.js https://www.googletagmanager.com/ https://cdn-au.onetrust.com/; connect-src */ajax/ https://stats.g.doubleclick.net/ https://cdn-au.onetrust.com/ https://www.google-analytics.com https://geolocation.onetrust.com/ https://privacyportal-au.onetrust.com/ https://analytics.google.com/ https://www.google.co.jp/; report-uri csp_report.php; 1
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' https:; connect-src 'self' https: 1
default-src 'self'; connect-src 'self' https://cdn.jsdelivr.net https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://assets-can.mkt.dynamics.com https://public-can.mkt.dynamics.com/ https://bam.nr-data.net https://region1.google-analytics.com https://formui-usa1.mkt.dynamics.com https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://fonts.gstatic.com https://assets-can.mkt.dynamics.com data:; frame-src 'self' https://www.youtube.com https://vimeo.com https://player.vimeo.com/ https://www.google.com; img-src 'self' data: https://6148348.global.siteimproveanalytics.io https://www.google-analytics.com https://www.googletagmanager.com; object-src 'none'; script-src 'self' 'report-sample' https://js-agent.newrelic.com https://www.googletagmanager.com https://www.google-analytics.com https://siteimproveanalytics.com https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://www.gstatic.com https://formui-usa1.mkt.dynamics.com cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://platform.twitter.com https://www.google.com; style-src 'self' 'report-sample' 'unsafe-inline' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; style-src-attr 'self' 'report-sample' 'unsafe-inline'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri https://csplog.evolvingweb.net/api/v1/report/cmmuro47c0000q901qvxd8f5h 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; media-src 'self' https: blob:; connect-src 'self' https: wss:; frame-ancestors 'self' 1
default-src 'self';base-uri 'self';frame-ancestors 'self' https://lvhn.org https://my.lvhn.org https://www.lvhn.org;frame-src 'self' epichttp: https://*.ada.com/ https://*.lvhn.org/ https://cdnapisec.kaltura.com/ https://epic.gateway.patientco.com https://lvhn.org https://my.lvhn.org https://my.lvhn.org/ https://pay.instamed.com https://pay.usbank.com https://proxy.lvh.com https://www.lvhn.org/;script-src 'nonce-8df8fcccc8d84064b0a8e121ec7caacf' https://mylvhn.org 'self' https://www.google.com/reCaptcha/enterprise.js;img-src https://* 'self' blob: data:;connect-src 'self' epichttp: https://www.google.com;style-src https://mylvhn.org 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net cash-f.squarecdn.com self data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * https://store.plumrocket.com pal-test.adyen.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ * self *.doubleclick.net *.criteo.com *.easydmp.net *.snapchat.com https://store.plumrocket.com https://accounts.google.com checkoutshopper-test.adyen.com pal-test.adyen.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io * self *.bing.com *.paypal.com *.google.fr *.electrodepot.fr *.electrodepot.be *.electrodepot.es *.cookielaw.org *.snapchat.com checkoutshopper-test.adyen.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com self sc-static.net *.abtasty.com *.jsdelivr.net *.gstatic.com *.facebook.net *.tiktok.com *.googleapis.com *.easydmp.net *.vzbl.eu *.aticdn.net *.m1by1.com *.woosmap.com *.doubleclick.net *.cookielaw.org *.snapchat.com *.valiuz.com *.mediarithmics.com *.prediggo.services https://accounts.google.com checkoutshopper-test.adyen.com 'self' 'unsafe-eval' 'nonce-YXB5M3ZxaXRhNDV4ZGs1dHpod3g3YTB0M3d3cm12dGw=' 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY/CkTMBhjNhwPvglpYumjx31B4fjkY8='; style-src *.adobe.com fonts.googleapis.com *.cash.app self *.gstatic.com *.electrodepot.fr *.electrodepot.be *.electrodepot.es *.snapchat.com https://accounts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io * self *.snapchat.com *.cookielaw.org *.abtasty.com *.googleapis.com *.vzbl.eu *.criteo.com *.easydmp.net *.paypal.com *.xiti.com *.valiuz.com *.doubleclick.net *.mediarithmics.com https://accounts.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.electrodepot.fr *.electrodepot.be *.electrodepot.es *.bing.com *.criteo.net *.snapchat.com *.netvigie.com *.xiti.com *.valiuz.com *.googletagmanager.com *.google.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.uship.com https://api.uship.com https://api-web.uship.com https://login.uship.com https://about.uship.com https://api-reviews.uship.com https://collect.uship.com https://content.uship.com https://go.uship.com https://help.uship.com https://ship.uship.com https://static.uship.com https://tm.uship.com https://track.uship.com https://login.okta.com https://www.ushipcdn.cloud https://t.ushipcdn.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://ajax.googleapis.com https://fonts.googleapis.com https://maps.googleapis.com https://www.google.com https://www.googleadservices.com https://www.youtube.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://cdn.optimizely.com https://logx.optimizely.com https://rum.optimizely.com https://eum.instana.io https://eum-red-saas.instana.io https://app-sj21.marketo.com https://544-zar-489.mktoresp.com https://munchkin.marketo.net https://js.stripe.com https://bat.bing.com https://www.bing.com https://bat.bing.net https://edge.fullstory.com https://rs.fullstory.com https://d.adroll.com https://ipv4.d.adroll.com https://s.adroll.com https://aorta.clickagy.com https://hemsync.clickagy.com https://tags.clickagy.com https://pixels.spotify.com https://file-paa.zoom.us https://log-gateway.zoom.us https://us01apizva.zoom.us https://us01campaign.zoom.us https://us01ccistatic.zoom.us https://p.yotpo.com https://staticw2.yotpo.com https://cdn-widgetsrepository.yotpo.com https://bzrcdn.openai.com https://unpkg.com https://ajax.cloudflare.com https://cdnjs.cloudflare.com https://vjs.zencdn.net https://static.cloudflareinsights.com https://connect.facebook.net https://www.facebook.com https://snap.licdn.com https://px.ads.linkedin.com https://pixel.byspotify.com https://ct.pinterest.com https://d.impactradius-event.com https://d.impct.site https://fast.ssqt.io https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://lex.33across.com https://insight.adsrvr.org https://js.adsrvr.org https://match.adsrvr.org https://tags.tiqcdn.com https://collect.tealiumiq.com https://cdn.mxpnl.com https://api-js.mixpanel.com https://js.zi-scripts.com https://ws.zoominfo.com https://widget.trustpilot.com https://player.vimeo.com https://app-sj21.marketo.com https://ekr.zdassets.com https://static.zdassets.com https://ushipaibot.zendesk.com; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://www.uship.com https://api.uship.com https://api-web.uship.com https://login.uship.com https://about.uship.com https://api-reviews.uship.com https://collect.uship.com https://content.uship.com https://go.uship.com https://help.uship.com https://ship.uship.com https://static.uship.com https://tm.uship.com https://track.uship.com https://login.okta.com https://www.ushipcdn.cloud https://t.ushipcdn.com https://ajax.googleapis.com https://fonts.googleapis.com https://maps.googleapis.com https://p.yotpo.com https://staticw2.yotpo.com https://cdn-widgetsrepository.yotpo.com https://unpkg.com https://ajax.cloudflare.com https://cdnjs.cloudflare.com https://vjs.zencdn.net https://static.cloudflareinsights.com https://fonts.gstatic.com https://use.fontawesome.com; img-src 'self' data: https://www.uship.com https://api.uship.com https://api-web.uship.com https://login.uship.com https://about.uship.com https://api-reviews.uship.com https://collect.uship.com https://content.uship.com https://go.uship.com https://help.uship.com https://ship.uship.com https://static.uship.com https://tm.uship.com https://track.uship.com https://login.okta.com https://www.ushipcdn.cloud https://t.ushipcdn.com https://s.ushipcdn.com https://resources.awsuship.com https://d2i7mi0re7cgbq.cloudfront.net https://proof-of-delivery-prod.s3.us-east-1.amazonaws.com https://uship-legacy-resources-prod.s3.us-east-1.amazonaws.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://ajax.googleapis.com https://fonts.googleapis.com https://maps.googleapis.com https://fonts.gstatic.com https://maps.gstatic.com https://www.gstatic.com https://www.google.com https://www.googleadservices.com https://www.youtube.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://cdn.optimizely.com https://logx.optimizely.com https://rum.optimizely.com https://eum.instana.io https://eum-red-saas.instana.io https://bat.bing.com https://www.bing.com https://bat.bing.net https://edge.fullstory.com https://rs.fullstory.com https://d.adroll.com https://ipv4.d.adroll.com https://s.adroll.com https://aorta.clickagy.com https://hemsync.clickagy.com https://tags.clickagy.com https://p.yotpo.com https://staticw2.yotpo.com https://cdn-widgetsrepository.yotpo.com https://bzr.openai.com https://connect.facebook.net https://www.facebook.com https://snap.licdn.com https://px.ads.linkedin.com https://pixel.byspotify.com https://ct.pinterest.com https://d.impactradius-event.com https://d.impct.site https://fast.ssqt.io https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://lex.33across.com https://insight.adsrvr.org https://js.adsrvr.org https://match.adsrvr.org https://*.online-metrix.net https://cdn.sanity.io https://notify.bugsnag.com https://app.jazz.co https://t.vibe.co; font-src 'self' data: https://www.uship.com https://api.uship.com https://api-web.uship.com https://login.uship.com https://about.uship.com https://api-reviews.uship.com https://collect.uship.com https://content.uship.com https://go.uship.com https://help.uship.com https://ship.uship.com https://static.uship.com https://tm.uship.com https://track.uship.com https://login.okta.com https://www.ushipcdn.cloud https://t.ushipcdn.com https://p.yotpo.com https://staticw2.yotpo.com https://cdn-widgetsrepository.yotpo.com https://fonts.gstatic.com https://use.fontawesome.com https://unpkg.com https://ajax.cloudflare.com https://cdnjs.cloudflare.com https://vjs.zencdn.net https://static.cloudflareinsights.com https://api.radar.io https://static.radar.com; connect-src 'self' https://www.uship.com https://api.uship.com https://api-web.uship.com https://login.uship.com https://about.uship.com https://api-reviews.uship.com https://collect.uship.com https://content.uship.com https://go.uship.com https://help.uship.com https://ship.uship.com https://static.uship.com https://tm.uship.com https://track.uship.com https://login.okta.com https://www.ushipcdn.cloud https://t.ushipcdn.com https://proof-of-delivery-prod.s3.us-east-1.amazonaws.com https://uship-legacy-resources-prod.s3.us-east-1.amazonaws.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://ajax.googleapis.com https://fonts.googleapis.com https://maps.googleapis.com https://www.google.com https://www.googleadservices.com https://www.youtube.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://cdn.optimizely.com https://logx.optimizely.com https://rum.optimizely.com https://eum.instana.io https://eum-red-saas.instana.io https://app-sj21.marketo.com https://544-zar-489.mktoresp.com https://munchkin.marketo.net https://bat.bing.com https://www.bing.com https://bat.bing.net https://edge.fullstory.com https://rs.fullstory.com https://d.adroll.com https://ipv4.d.adroll.com https://s.adroll.com https://aorta.clickagy.com https://hemsync.clickagy.com https://tags.clickagy.com https://pixels.spotify.com https://file-paa.zoom.us https://log-gateway.zoom.us https://us01apizva.zoom.us https://us01campaign.zoom.us https://us01ccistatic.zoom.us https://p.yotpo.com https://staticw2.yotpo.com https://cdn-widgetsrepository.yotpo.com https://bzr.openai.com https://connect.facebook.net https://www.facebook.com https://snap.licdn.com https://px.ads.linkedin.com https://pixel.byspotify.com https://ct.pinterest.com https://d.impactradius-event.com https://d.impct.site https://fast.ssqt.io https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://lex.33across.com https://insight.adsrvr.org https://js.adsrvr.org https://match.adsrvr.org https://tags.tiqcdn.com https://collect.tealiumiq.com https://cdn.mxpnl.com https://api-js.mixpanel.com https://js.zi-scripts.com https://ws.zoominfo.com https://api.radar.io https://static.radar.com https://ekr.zdassets.com https://static.zdassets.com https://ushipaibot.zendesk.com; media-src 'self' data: https://www.uship.com https://api.uship.com https://api-web.uship.com https://login.uship.com https://about.uship.com https://api-reviews.uship.com https://collect.uship.com https://content.uship.com https://go.uship.com https://help.uship.com https://ship.uship.com https://static.uship.com https://tm.uship.com https://track.uship.com https://login.okta.com https://www.ushipcdn.cloud; frame-src 'self' https://www.uship.com https://api.uship.com https://api-web.uship.com https://login.uship.com https://about.uship.com https://api-reviews.uship.com https://collect.uship.com https://content.uship.com https://go.uship.com https://help.uship.com https://ship.uship.com https://static.uship.com https://tm.uship.com https://track.uship.com https://login.okta.com https://www.ushipcdn.cloud https://www.googletagmanager.com https://www.google.com https://www.youtube.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://cdn.optimizely.com https://logx.optimizely.com https://rum.optimizely.com https://js.stripe.com https://connect.stripe.com https://bat.bing.com https://www.bing.com https://bat.bing.net https://aorta.clickagy.com https://hemsync.clickagy.com https://tags.clickagy.com https://file-paa.zoom.us https://log-gateway.zoom.us https://us01apizva.zoom.us https://us01campaign.zoom.us https://us01ccistatic.zoom.us https://connect.facebook.net https://www.facebook.com https://snap.licdn.com https://px.ads.linkedin.com https://pixel.byspotify.com https://ct.pinterest.com https://d.impactradius-event.com https://d.impct.site https://fast.ssqt.io https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://lex.33across.com https://insight.adsrvr.org https://js.adsrvr.org https://match.adsrvr.org https://*.online-metrix.net https://widget.trustpilot.com https://player.vimeo.com https://app-sj21.marketo.com; worker-src 'self' blob:; child-src 'self'; manifest-src 'self' https://www.ushipcdn.cloud; object-src 'none'; frame-ancestors 'self'; block-all-mixed-content; report-uri https://uship.report-uri.com/r/t/csp/reportOnly; report-to csp 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://*.clarity.ms https://securepubads.g.doubleclick.net https://ep2.adtrafficquality.google https://pagead2.googlesyndication.com https://fundingchoicesmessages.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://api.fxblue.com https://*.google-analytics.com https://www.googletagmanager.com https://*.clarity.ms wss://mtis-shared.fxbluelabs.com:9101 wss://mtis-shared.fxbluelabs.com:9111 https://pagead2.googlesyndication.com https://ep1.adtrafficquality.google https://securepubads.g.doubleclick.net https://www.google.com https://csi.gstatic.com https://fundingchoicesmessages.google.com; frame-src 'self' https://figaro.fxbluelabs.com https://www.youtube-nocookie.com https://www.youtube.com https://securepubads.g.doubleclick.net https://api.fxblue.com https://www.fxblue.com https://*.safeframe.googlesyndication.com https://ep2.adtrafficquality.google https://www.google.com https://cm.g.doubleclick.net https://pagead2.googlesyndication.com https://fundingchoicesmessages.google.com; worker-src 'self' blob:; report-uri /api/csp-report; report-to csp-endpoint 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://t.diffchecker.com https://accounts.google.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://assets.calendly.com https://cloudimanage.com https://js.braintreegateway.com https://assets.braintreegateway.com https://*.paypal.com https://www.paypalobjects.com https://songbird.cardinalcommerce.com https://*.cardinaltrusted.com; style-src 'self' 'unsafe-inline' https://accounts.google.com https://assets.calendly.com https://assets.braintreegateway.com https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://use.typekit.net https://fonts.gstatic.com; connect-src 'self' blob: https://api.diffchecker.com https://t.diffchecker.com https://replay-proxy.diffchecker.com wss://replay-proxy.diffchecker.com https://harper-bucket.diffchecker.com https://ocr-models.diffchecker.com https://*.r2.cloudflarestorage.com https://sentry.io https://accounts.google.com https://www.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://stats.g.doubleclick.net https://srv.buysellads.com https://www.google.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat https://www.gstatic.com https://calendly.com https://*.braintreegateway.com https://*.braintree-api.com https://*.paypal.com https://*.cardinalcommerce.com https://*.cardinaltrusted.com https://kg668dbov0.execute-api.us-east-1.amazonaws.com; frame-src 'self' https://accounts.google.com https://www.google.com https://calendly.com https://assets.braintreegateway.com https://*.paypal.com https://*.cardinalcommerce.com; worker-src 'self' blob:; frame-ancestors 'self' 1
default-src 'self';base-uri 'self';frame-ancestors 'self' https://communityconnect.essentiahealth.org https://lintonregionalmedicalcenter.org https://mychart.ridgeviewmedical.org https://ridgeview.dev.geonetric.com https://www.ridgeviewmedical.org;frame-src 'self' epichttp: https://*.essentiahealth.org https://cdnapisec.kaltura.com/ https://ehr.carecredit.com https://ehr.carecredit.com/ https://m.essentiahealth.org https://pay.instamed.com https://premier.trustcommerce.com https://stagepremier.trustcommerce.com https://www.essentiahealth.org https://www.ridgeviewmedical.org;script-src 'nonce-938e92e3b2e44dcb9e7cbec5ba5bdd39' https://essentiamychart.org 'self' 'sha256-Qkxe1qM2p+AhSSPfmWtjhk7TC0XxKliynZ1DEvWnkxQ=' https://emyhtst.essentiahealth.org https://www.google.com https://www.google.com/recaptcha/api.js https://www.gstatic.com;img-src https://* 'self' blob: data:;connect-src 'self' epichttp: https://*.app.st-343.epiccloud.io https://*.kaltura.com https://mychart-mychart-chat-mediator.app.st-343.epiccloud.io wss://*.webpubsub.azure.com;style-src https://essentiamychart.org 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.ispe.org https://*.typekit.net https://*.fusesearch.app https://*.googletagmanager.com https://www.googletagmanager.com https://*.google.com https://*.gstatic.com https://*.googlesyndication.com https://c.adsco.re https://*.adtrafficquality.google https://*.doubleclick.net https://*.cloudflare.com https://app.termly.io https://*.mathjax.org https://*.addthis.com https://*.cloudfront.net https://*.bettybot.ai https://*.facebook.net https://*.linkedin.com https://*.twitter.com https://*.vimeo.com https://*.blackfire.io https://*.clarity.ms https://js.hs-scripts.com https://*.licdn.com https://*.hubspot.com https://*.hs-banner.com https://*.hs-analytics.net https://*.hscollectedforms.net https://*.usemessages.com https://*.jsdelivr.net https://unpkg.com; object-src 'none'; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.ispe.org https://*.bettybot.ai https://fonts.googleapis.com https://app.termly.io https://ispe.webscribble.com https://unpkg.com; img-src 'self' blob: data: https:; media-src 'self' data: https://ispe.org https://*.ispe.org https://ispefoundation.org https://ispewebassets.org https://*.platformsh.site; frame-src https://ispe.org https://*.ispe.org https://ispefoundation.org https://*.platformsh.site https://*.vimeo.com https://*.youtube.com https://*.youtube-nocookie.com https://app.termly.io https://*.hubspot.com https://*.hs-sites.com https://*.google.com https://*.googleadservices.com https://*.doubleclick.net https://*.googlesyndication.com https://*.googletagmanager.com https://*.adtrafficquality.google https://*.twitter.com https://*.facebook.com https://online.fliphtml5.com; frame-ancestors 'self' https://ispe.org https://*.ispe.org https://ispefoundation.org https://*.platformsh.site; child-src https://ispe.org https://*.ispe.org https://ispefoundation.org https://*.platformsh.site https://*.vimeo.com https://*.youtube.com https://*.youtube-nocookie.com https://app.termly.io https://*.hubspot.com https://*.hs-sites.com https://*.google.com https://*.googleadservices.com https://*.doubleclick.net https://*.googlesyndication.com https://*.googletagmanager.com https://*.adtrafficquality.google https://*.twitter.com https://*.facebook.com; font-src 'self' https://*.typekit.net https://*.cloudfront.net https://fonts.gstatic.com https://*.cloudflare.com; connect-src 'self' https://*.ispe.org https://ispewebassets.org  https://betty-api.tasio.co https://*.clarity.ms https://ad.doubleclick.net https://stats.g.doubleclick.net https://*.fusesearch.app https://*.hubspot.com https://*.hsforms.com https://*.hscollectedforms.net https://*.linkedin.com https://*.openfpcdn.io  https://sentry.io https://*.termly.io https://*.typekit.net https://*.google-analytics.com https://*.googleadservices.com https://*.googletagmanager.com https://*.googlesyndication.com https://*.gstatic.com https://*.adtrafficquality.google https://google.com https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat; report-uri /report-csp-violation 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob: https://*.hubspot.com https://*.hubapi.com https://*.hsforms.com https://*.hs-scripts.com https://*.hscollectedforms.net https://*.hs-banner.com https://*.hubspotusercontent.com https://*.hubspotusercontent-eu1.net https://js.hs-analytics.net https://js.hsforms.net https://api.hsforms.com https://api.hubapi.com https://*.hsleadflows.net https://*.hsadspixel.net https://*.hs-web-analytics.net https://static.hsappstatic.net https://cdn2.hubspot.net https://cdn.hubspot.com https://*.cloudfront.net https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://stats.g.doubleclick.net https://www.googleadservices.com https://cdn.cookielaw.org https://www.youtube.com; style-src 'self' 'unsafe-inline' https: data:; img-src 'self' https: data: blob:; font-src 'self' https: data:; frame-src 'self' https: data:; connect-src 'self' https: wss: https://www.cadburydessertscorner.com; media-src 'self' https: data: blob:; worker-src 'self' https: blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self' https://*.hubspot.com; 1
default-src 'self'; script-src 'self' https://www.google.com https://www.gstatic.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-src https://www.google.com; object-src 'none'; base-uri 'self'; form-action 'self'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cash-f.squarecdn.com *.googleapis.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net https://cdnjs.cloudflare.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * https://plumrocket.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.instagram.com https://plumrocket.com *.dotdigital-pages.com *.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.trustpilot.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * *.cdninstagram.com *.googleapis.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com *.trackedlink.net magefan.com cm.magefan.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: *.cookielaw.org *.facebook.com *.google.fr data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com *.instagram.com *.googleapis.com *.gstatic.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.avada.io https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com https://paul-marius.my.join-stories.com *.hsforms.net *.hsforms.com https://genki.paulmarius.fr https://genki.paulmarius.de https://genki.paulmarius.es https://genki.paulmarius.it https://genki.paulmarius.nl https://genki.paulmarius.com https://genki.paulmarius.us https://genki.paulmarius.co.uk *.bing.com *.clarity.ms https://js.klarna.com *.trustpilot.com *.cookielaw.org *.cookieless-data.com *.paulmarius.fr *.googlesyndication.com *.doubleclick.net *.apicit.net *.clickintext.net *.facebook.net *.googletagmanager.com apicit.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.fontawesome.com https://fonts.bunny.net https://fonts.googleapis.com https://cdnjs.cloudflare.com assets.braintreegateway.com *.googleapis.com *.gstatic.com https://x.klarnacdn.net *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.googleapis.com maps.googleapis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.cookielaw.org *.googlesyndication.com *.db-ip.com *.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com  *.google-analytics.com www.2checkout.com connect.facebook.net *.google.com www.googletagmanager.com www.gstatic.com *.amazon-adsystem.com; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com fonts.googleapis.com; img-src 'self' data: librarika.com covers.librarika.com:8443 storage101.lon3.clouddrive.com *.ssl.cf3.rackcdn.com *.media-amazon.com *.ssl-images-amazon.com *.amazon-adsystem.com *.amazon.com  *.gstatic.com *.google-analytics.com *.google.com; font-src 'self' data: fonts.gstatic.com; frame-src *.librarika.com www.2checkout.com *.facebook.com *.google.com *.amazon-adsystem.com *.youtube.com; connect-src 'self' *.google.com www.google-analytics.com; object-src 'none'; report-uri https://5e5aa7c5f482dc373380fd2db250ce83.report-uri.com/r/d/csp/enforce 1
report-uri https://opensociety.report-uri.com/r/d/csp/reportOnly;base-uri 'self';connect-src 'self' https://translate.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.ingest.sentry.io https://docket.justiceinitiative.org https://justiceinitiative.piwik.pro https://justiceinitiative.containers.piwik.pro https://cdn.matomo.cloud https://theideasletter.matomo.cloud https://cdn-cookieyes.com https://log.cookieyes.com https://*.cookieyes.com;default-src 'self';form-action 'self';img-src 'self' data: https: https://www.gstatic.com https://*.googletagmanager.com https://osjicontent.imgix.net https://*.google-analytics.com;object-src 'self';script-src 'self' 'unsafe-eval' https://translate.googleapis.com https://www.justiceinitiative.org https://cdn.plyr.io/3.4.4/plyr.polyfilled.js https://cdnjs.cloudflare.com/ajax/libs/picturefill/3.0.2/picturefill.min.js https://*.google-analytics.com https://*.googletagmanager.com https://www.youtube.com/iframe_api https://www2.osfound.org/shorten https://*.ingest.sentry.io https://docket.justiceinitiative.org https://justiceinitiative.containers.piwik.pro https://*.justiceinitiative.org https://cdn-cookieyes.com https://log.cookieyes.com https://*.cookieyes.com https://cdn.matomo.cloud https://theideasletter.matomo.cloud 'sha256-fowkKyEQi1SMOmkzKHVR3kVRCxAkb7eITj4LYDwWuwE=' 'sha256-oLlgRvu5927ZsW/Ke7hqoXyWhVhfjYt888/If4Yk6Cc=' 'sha256-zTv/Ocm+3ZUxPK95MsRtR405opnhJuWd8OOOlDOY4jg=' 'sha256-rWd9UEdKeFeLqC7IaJz1wxlZctnoLlCVLl196dQ3XcM=' 'sha256-Wuuo8pjCq8p1DupaB6iKVd7xGXUV2cZ6FNKupyZkqtA=' 'sha256-Yo0rp6K5ZDMBPy3XfvFf6KNJPsyXl4KgVKlu1R1a3xQ=' 'sha256-MM3CG7szGAeVIKY58JGR+X+7xTDccDemqcIY0lQLrX8=' 'sha256-oh6ZTSefRfIBPlcye8dBjlQBkC0A32V1QIb2htJq7ao=' 'sha256-NmZgHsyoB9XJ6Wd+G4VMaoO3gnTIG8KiH+uVcxOeeoc=' 'sha256-qwhoBj+FiypvTPR3eQkqsvLUkSeShbVBRVleFpBWM0g=' 'sha256-ojZToIWnCw4yAO2wwSr0xkCYSoCACGXKKYmr9ZV6u7I=' 'sha256-MK/1crn2Wl/TYQNKpPss5ootd4EotbGRxQsmw+4y1gU=' 'sha256-IobZaBCT4PRq1c9DaVhn7w+Z0rXZcBjmuQBfk+M+z64=' 'sha256-DqrJErZI/7pog0A9GesbTSM9ARg5dFwEiTotQt+PXns=' 'sha256-veJ+ybPvqZmAOLrVwklPodQgAnVnspZnObsF0U42hqo' 'sha256-+fx2G+aE0ETxN+0K/lnVPgcwJBbC7vQs8fcKUg1eWKc=' 'sha256-lGf/YZe+HEzkMEOQc5bjVpCG99fBIWrHzKnAn+UsbmE=' 'nonce-oeptc636vFIdfwWDY3bff11jzCgLtjoH';style-src 'self' 'unsafe-inline' https:;frame-src 'self';font-src 'self' https:;media-src 'self' https:;manifest-src 'self';worker-src 'none' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com cash-f.squarecdn.com https://*.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com *.klarnacdn.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.adyen.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.adyen.com *.doubleclick.net *.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com consentcdn.cookiebot.com service.force.com *.livestory.io *.trustpilot.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com img.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io s.ytimg.com *.ftcdn.net *.behance.net * https://*.gstatic.com *.adyen.com *.bird.eu 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.adobedtm.com dev.visualwebsiteoptimizer.com *.exacttarget.com *.google.it/pagead/1p-user-list serverside.stiga.com *.cookiebot.com via.placeholder.com maps.googleapis.com *.teads.tv www.xtento.com *.trustpilot.com imgsct.cookiebot.com *.livestory.io cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com *.newrelic.com *.nr-data.net *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-ds.com *.magento-datasolutions.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.youtube.com video.google.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.avada.io *.shopify.com *.alothemes.com *.magepow.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com maps.googleapis.com *.klarna.com consent.cookiebot.com *.collect.igodigital.com serverside.stiga.com cdnjs.cloudflare.com service.force.com *.salesforceliveagent.com *.salesforce-scrt.com *.site.com *.mczbf.com *.emjcd.com dev.visualwebsiteoptimizer.com *.clarity.ms *.imedia.cz consentcdn.cookiebot.com *.teads.tv *.seznam.cz *.xtento.com *.livestory.io *.trustpilot.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com getfirebug.com *.cash.app https://fonts.googleapis.com/ *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com assets.braintreegateway.com service.force.com *.klarnacdn.net *.site.com *.livestory.io *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.magento-datasolutions.com *.magento-ds.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.adyen.com fcmregistrations.googleapis.com firebaseinstallations.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net api.addressy.com https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com maps.googleapis.com consentcdn.cookiebot.com *.googlesyndication.com dev.visualwebsiteoptimizer.com serverside.stiga.com *.klarna.com *.klarnaevt.com trustpilot.com googleads.g.doubleclick.net *.teads.tv *.clarity.ms noembed.com *.livestory.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js https://apis.google.com/js/api.js https://assets.revenuehero.io/scheduler.min.js https://bat.bing.com/bat.js https://bat.bing.com/p/action/ https://bcrw.apple.com https://cdn.amplitude.com/libs/amplitude-4.2.1-min.gz.js https://cdn.heapanalytics.com/js/heap-3300992513.js https://cdn.jsdelivr.net/npm/emoji-picker-element@%5E1/ https://cdn.omniconvert.com https://connect.facebook.net/en_US/fbevents.js https://connect.facebook.net/signals/config/911812568926572 https://ct.capterra.com https://dev.visualwebsiteoptimizer.com https://googleads.g.doubleclick.net/pagead/viewthroughconversion/936719971/ https://heymarket.chilipiper.com/concierge-js/cjs/concierge.js https://hubspot.clearbit.com/v1/forms/pk_a581c4d2aac522c5c0c5eaf9046b399d/forms.js https://play.vidyard.com/ https://reveal.clearbit.com/v1/companies/reveal https://snap.licdn.com/li.lms-analytics/insight.min.js https://snap.licdn.com/li.lms-analytics/insight.old.min.js https://stackpath.bootstrapcdn.com https://tag.clearbitscripts.com/v1/pk_a581c4d2aac522c5c0c5eaf9046b399d/ https://widget.heymarket.com/heymk-widget.bundle.js https://www.clickcease.com/monitor/stat.js https://www.googletagmanager.com/gtm.js https://www.googletagmanager.com/gtag/ https://x.clearbitjs.com https://*.clarity.ms/ https://*.contentsquare.net/ https://*.hs-analytics.net https://*.hs-banner.com/v2/9234745/banner.js https://*.hs-scripts.com/9234745.js https://*.hscollectedforms.net/ https://*.hsforms.com/ https://*.hsforms.net/forms/v2.js https://bzrcdn.openai.com; connect-src 'self' https://ad.doubleclick.net https://api.amplitude.com https://app.clearbit.com https://app.omniconvert.com https://app.revenuehero.io/ https://bat.bing.com https://bcrw.apple.com https://cdn.jsdelivr.net https://ct.capterra.com https://dev.visualwebsiteoptimizer.com https://heapanalytics.com https://hubspot-forms-static-embed.s3.amazonaws.com/prod/ https://px.ads.linkedin.com https://www.facebook.com https://www.google-analytics.com https://www.google.com https://*.clarity.ms https://*.contentsquare.net/ https://*.heymarket.com wss://*.heymarket.com https://*.hscollectedforms.net https://*.hsforms.com https://analytics.google.com https://stats.g.doubleclick.net https://monitor.clickcease.com https://www.googleadservices.com https://bzrcdn.openai.com https://bzr.openai.com; img-src 'self' data: https://bat.bing.com https://cdn.vidyard.com https://dev.visualwebsiteoptimizer.com https://embrace-uploads-mms.s3.us-west-1.amazonaws.com https://heapanalytics.com https://play.vidyard.com https://*.ads.linkedin.com https://secure.gravatar.com https://tracking.g2crowd.com https://www.facebook.com https://www.google.com https://www.google.ca https://www.googleadservices.com https://www.googletagmanager.com https://www.linkedin.com/px/li_sync https://*.clarity.ms/ https://*.contentsquare.net/ https://*.heymarket.com https://*.hsforms.com https://*.hubspot.com https://googleads.g.doubleclick.net https://c.bing.com; default-src 'self'; style-src 'report-sample' 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://stackpath.bootstrapcdn.com; object-src 'none'; base-uri 'self'; font-src 'self' data: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://stackpath.bootstrapcdn.com; frame-src 'self' https://heymarket.chilipiper.com https://play.vidyard.com https://td.doubleclick.net https://www.googletagmanager.com https://*.heymarket.com https://www.facebook.com; frame-ancestors 'self' https://*.heymarket.com; manifest-src 'self'; media-src 'self' https://app.heymarket.com; worker-src 'self' blob:; form-action 'self' https://api.hsforms.com https://webto.salesforce.com https://www.facebook.com; report-uri https://www.heymarket.com/wp-json/heymarket/v1/csp-report; 1
default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' https: data:; connect-src 'self' https:; frame-ancestors 'self' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com https://api-gw-v4.dev.gokwik.io https://sandbox.pdp.gokwik.co https://pdp.gokwik.co *.adobe.com *.adobedtm.com *.cardinalcommerce.com *.ccdc02.com *.jsdelivr.net unpkg.com *.kapturecrm.com *.wizzy.ai *.gozayaan.com *.googletagmanager.com *.supabase.co *.hotjar.com swopstore.com script.google.com *.facebook.net *.matomo.cloud *.soch.com *.bing.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.adobedtm.com *.cardinalcommerce.com *.ccdc02.com *.jsdelivr.net unpkg.com *.kapturecrm.com *.wizzy.ai *.gozayaan.com *.googletagmanager.com *.supabase.co *.hotjar.com swopstore.com script.google.com *.facebook.net *.matomo.cloud *.soch.com *.bing.com api.razorpay.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com * 'self' 'unsafe-inline'; img-src *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com https://api-gw-v4.dev.gokwik.io https://sandbox.pdp.gokwik.co https://pdp.gokwik.co *.adtrafficquality.google *.clarity.ms *.cardinalcommerce.com *.ccdc02.com *.jsdelivr.net unpkg.com *.kapturecrm.com *.wizzy.ai *.gozayaan.com *.googletagmanager.com *.supabase.co *.hotjar.com swopstore.com script.google.com *.facebook.net *.matomo.cloud *.soch.com *.bing.com cdn.razorpay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net assets.adobedtm.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.magento-datasolutions.com *.googleapis.com *.gstatic.com http://sp-kf-collector.dev.gokwik.io https://api-gw-v4.dev.gokwik.io https://sandbox.pdp.gokwik.co https://pdp.gokwik.co *.lightwidget.com *.artfut.com *.adtrafficquality.google *.googlesyndication.com s3-ap-southeast-1.amazonaws.com *.cloudflare.com *.clarity.ms *.vimeo.com *.mxpnl.com *.bing.com *.cardinalcommerce.com *.ccdc02.com *.jsdelivr.net unpkg.com *.kapturecrm.com *.wizzy.ai *.gozayaan.com *.googletagmanager.com *.supabase.co *.hotjar.com swopstore.com script.google.com *.facebook.net *.matomo.cloud *.soch.com cdn.jsdelivr.net checkout.razorpay.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.adobedtm.com *.cardinalcommerce.com *.ccdc02.com *.jsdelivr.net unpkg.com *.kapturecrm.com *.wizzy.ai *.gozayaan.com *.googletagmanager.com *.supabase.co *.hotjar.com swopstore.com script.google.com *.facebook.net *.matomo.cloud *.soch.com *.bing.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com http://sp-kf-collector.dev.gokwik.io https://api-gw-v4.dev.gokwik.io https://sandbox.pdp.gokwik.co https://pdp.gokwik.co *.onedirect.in *.adtrafficquality.google *.clarity.ms *.mixpanel.com *.adobe.com *.adobedtm.com *.cardinalcommerce.com *.ccdc02.com *.jsdelivr.net unpkg.com *.kapturecrm.com *.wizzy.ai *.gozayaan.com *.googletagmanager.com *.supabase.co *.hotjar.com swopstore.com script.google.com *.facebook.net *.matomo.cloud *.soch.com *.bing.com lumberjack.razorpay.com lumberjack-metrics.razorpay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com wss://sockets.wizzy.ai *.wizsearch.in wss://sockets.wizsearch.in 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-ydK9CegztkA-n9w0RGwNEw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'nonce-phDjoPq3wWrVsSUWO/JFGQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://code.etracker.com www.etracker.de; script-src-elem 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://code.etracker.com www.etracker.de; style-src 'self' 'report-sample' 'unsafe-inline' https://cdn.jsdelivr.net; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self';         script-src 'self' 'unsafe-inline' 'unsafe-eval' https:;         style-src 'self' 'unsafe-inline' https:;         img-src 'self' data: https:;         font-src 'self' data: https:;         connect-src 'self' https:;         frame-ancestors 'self';         worker-src 'self' blob:;         object-src 'none';         base-uri 'self';         upgrade-insecure-requests; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' tags.tiqcdn.com tags.tiqcdn.cn collect.tealiumiq.com *.criteo.com *.criteo.net *.omtrdc.net *.yimg.jp *.yahoo.co.jp prf.hn *.doubleclick.net *.line.me *.google.com *.google.it *.bing.com *.google-analytics.com *.licdn.com *.tiktok.com sc-static.net *.usehero.com *.contentsquare.net *.demdex.net *.facebook.com *.googletagmanager.com *.facebook.net *.googleadservices.com *.teads.tv zegna.d3.sc.omtrdc.net www.google.* *.zegna.com *.measmerize.com *.googlesyndication.com maps.gstatic.com *.riskified.com sandbox.gestpay.net ecomm.sella.it *.online-metrix.net amp.akamaized.net *.snapchat.com *.gstatic.com *.go-mpulse.net cm.everesttech.net *.googleapis.com *.akstat.io *.akamaihd.net *.line-scdn.net *.algolianet.com *.algolia.net *.algolia.com zegna-cloud-media.s3.amazonaws.com zegna-cloud-media.s3.eu-west-1.amazonaws.com zegna-cloud-media.s3-eu-west-1.amazonaws.com livechat.zegna.cn *.baidu.com blob: data: ; font-src 'self' data: *.googleapis.com *.gstatic.com; report-uri /cgi-bin/csp_report.cgi 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://securepubads.g.doubleclick.net https://tpc.googlesyndication.com https://cdn.cookielaw.org https://connect.facebook.net https://platform.twitter.com https://www.instagram.com https://www.tiktok.com https://open.spotify.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://cdn.sanity.io https://*.googleusercontent.com https://www.google-analytics.com https://pagead2.googlesyndication.com; font-src 'self'; connect-src 'self' https://*.sanity.io https://www.google-analytics.com https://*.algolia.net https://*.algolianet.com; frame-src 'self' https://www.youtube.com https://www.instagram.com https://www.tiktok.com https://open.spotify.com https://player.vimeo.com https://players.brightcove.net https://securepubads.g.doubleclick.net https://tpc.googlesyndication.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://console.googletagservices.com https://cm.g.doubleclick.net https://*.safeframe.googlesyndication.com https://ep2.adtrafficquality.google https://www.google.com https://vercel.live; media-src 'self' https://cdn.sanity.io; object-src 'none'; base-uri 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cdnjs.cloudflare.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com magento.buildify.shop *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com platform.twitter.com magento.buildify.shop c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://www.paypal.com https://*.paypal.com https://*.paypalobjects.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.sharethis.com s3.amazonaws.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://tr.lfeeder.com https://*.lfeeder.com https://www.google.by https://*.google.by https://media.aheadworks.com https://*.aheadworks.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sharethis.com platform.twitter.com platform.instagram.com apis.google.com magento.buildify.shop https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.paypal.com https://*.paypal.com https://*.paypalobjects.com *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com cdnjs.cloudflare.com magento.buildify.shop https://static.klaviyo.com *.fontawesome.com assets.braintreegateway.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://www.paypal.com https://*.paypal.com https://*.paypalobjects.com https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.authorize.net *.google.com cdnjs.cloudflare.com cdn.rawgit.com maps.googleapis.com rw1.marchex.io connect.facebook.net googleads.g.doubleclick.net *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.gstatic.com cdn.jsdelivr.net *.youtube.com *.vimeo.com s.ytimg.com *.googlesyndication.com *.hotjar.com unpkg.com *.googleapis.com investors.danaher.com cdn.cookielaw.org *.onetrust.com *.marketingcloudfx.com *.leadmanagerfx.com *.usefathom.com *.decibelinsight.net *.decibel.com *.medallia.com; object-src *.oembed.com *.vimeo.com *.youtube.com; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com fonts.googleapis.com tagmanager.google.com *.gstatic.com *.typekit.net *.jsdelivr.net maxcdn.bootstrapcdn.com investors.danaher.com *.onetrust.com; img-src 'self' 'unsafe-inline' data: maps.googleapis.com px.marchex.io *.facebook.com *.google.com *.gstatic.com cdn.rawgit.com raw.githubusercontent.com *.g.doubleclick.net *.google-analytics.com *.googletagmanager.com zensource-salisbury.s3.amazonaws.com chat.mcsoftware.com *.timevaluecalculators.com *.ytimg.com cdn.cookielaw.org *.vimeocdn.com *.usefathom.com; media-src *.vimeo.com *.youtube.com *.spotify.com *.vimeocdn.com 'self'; frame-src 'self' 'unsafe-inline' *.doubleclick.net *.google.com players.brightcove.net *.youtube.com *.googletagmanager.com vars.hotjar.com *.spotify.com *.vimeo.com player.vimeo.com; font-src data: 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com use.typekit.net maxcdn.bootstrapcdn.com cdnjs.cloudflare.com *.onetrust.com; connect-src 'self' 'unsafe-inline' *.authorize.net *.facebook.com *.onetrust.com stats.addtoany.com *.google-analytics.com cdn.cookielaw.org *.hotjar.com:* *.hotjar.com:* vc.hotjar.io:* wss://*.hotjar.com stats.g.doubleclick.net *.clarity.ms privacyportal-de.onetrust.com *.marketingcloudfx.com  *.leadmanagerfx.com *.decibelinsight.net *.decibel.com *.medallia.com; report-uri /report-csp-violation 1
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/wallet_google 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klarnacdn.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.vaude.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.klarna.com js.mollie.com td.doubleclick.net app.usercentrics.eu web.cmp.usercentrics.eu v1.api.service.cmp.usercentrics.eu production.neocomapp.com agent.api.production.neocomapp.com *.outtra.com *.googletagmanager.com *.fls.doubleclick.net *.amazon-adsystem.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://img.youtube.com https://www.mollie.com *.hsforms.net *.hsforms.com 'self' data: www.vaude.com vaude.localhost https://vaude.localhost/ www.google.de app.usercentrics.eu web.cmp.usercentrics.eu v1.api.service.cmp.usercentrics.eu uct.service.usercentrics.eu *.equalweb.com production.neocomapp.com cdn.neocomapp.com *.weglot.com ad.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.disqus.com https://cdn.jsdelivr.net *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com js.mollie.com *.hsforms.net *.hsforms.com *.gstatic.com *.abtasty.com ion.vaude.com id.vaude.com analytics.vaude.com js-agent.newrelic.com vaude.matomo.cloud app.usercentrics.eu web.cmp.usercentrics.eu v1.api.service.cmp.usercentrics.eu api.usercentrics.eu graphql.usercentrics.eu privacy-proxy.usercentrics.eu *.scarabresearch.com *.equalweb.com cdn.matomo.cloud cdn.scarabresearch.com static.scarabresearch.com webchannel-content.eservice.emarsys.net production.neocomapp.com cdn.neocomapp.com https://vaude.homepagerecruiter.de https://cdn.tailwindcss.com https://production.neocomapp.com *.weglot.com *.outtra.com *.amazon-adsystem.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://cdn.jsdelivr.net *.klarnacdn.net *.googleapis.com *.gstatic.com *.equalweb.com production.neocomapp.com *.weglot.com *.outtra.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.abtasty.com analytics.vaude.com bam.nr-data.net pagead2.googlesyndication.com vaude.matomo.cloud app.usercentrics.eu web.cmp.usercentrics.eu v1.api.service.cmp.usercentrics.eu api.usercentrics.eu graphql.usercentrics.eu privacy-proxy.usercentrics.eu aggregator.service.usercentrics.eu consent-api.service.consent.usercentrics.eu *.scarabresearch.com *.equalweb.com cdn.matomo.cloud cdn.scarabresearch.com static.scarabresearch.com webchannel-content.eservice.emarsys.net production.neocomapp.com api.neocomapp.com agent.api.production.neocomapp.com https://production.neocomapp.com https://prompts.api.production.neocomapp.com *.weglot.com https://cdn-api-weglot.com *.outtra.com *.amazon-adsystem.com *.paa-reporting-advertising.amazon 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /csp-report.php 1
script-src 'unsafe-inline' 'unsafe-eval' cdn2.hubspot.net *.hubspot.com *.hubspotusercontent10.net js.hscollectedforms.net js.hsleadflows.net js.hs-scripts.com js.hsadspixel.net js.hs-analytics.net js.hs-banner.com js.hs-banner.net *.hsforms.net *.hsforms.com static.hsappstatic.net js.hubspotfeedback.com feedback.hubapi.com js.usemessages.com *.vidyard.com cdnjs.cloudflare.com cdnjs.cloudflare.com 10921146.fls.doubleclick.net plausible.io *.hotjar.com *.hotjar.io *.qualified.com bttrack.com *.googletagmanager.com *.force.com *.thycotic.com *.centrify.com *.bidr.io *.rlcdn.cm t.co *.twitter.com burly.io *.clickagy.com *.doubleclck.net *.zoominfo.com lltrck.com facebook.com *.facebook.net *.redditstatic.com *.linkedin.com *.licdn.com *.demandbase.com *.zoominfo.com 'strict-dynamic' 'nonce-yOX/rdKWO9iImL40KtbpvQ==' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://ep1.adtrafficquality.google https://*.doubleclick.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https://i.meee.com.tw https://cdn.meee.com.tw https://www.googletagmanager.com https://www.google-analytics.com https://*.doubleclick.net https://*.googlesyndication.com; connect-src 'self' https://www.google-analytics.com https://*.r2.cloudflarestorage.com https://i.meee.com.tw https://cdn.meee.com.tw https://pagead2.googlesyndication.com https://ep1.adtrafficquality.google; frame-src 'self' https://www.googletagmanager.com https://googleads.g.doubleclick.net https://*.googlesyndication.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'nonce-puJ1MScdMZai+p2+ZSnpug==' 'strict-dynamic' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' 'sha256-f9ms/4u9WrRYV3p93xXv88VDowcvTVxabxYcmCxoxBE=' https://connect.facebook.net https://accounts.google.com https://www.googletagmanager.com https://cdn.jifo.co https://s.infogram.com https://www.youtube.com https://www.google.com https://www.google.com.au https://www.googleadservices.com https://www.google.co.in https://www.gstatic.com https://securepubads.g.doubleclick.net https://bat.bing.com https://www.clarity.ms https://play.google.com https://can.canstar.com.au https://graph.canstar.com.au https://jnn-pa.googleapis.com https://logx.optimizely.com https://identitytoolkit.googleapis.com https://sso.canstar.com.au https://ad.doubleclick.net https://adservice.google.com https://analytics.google.com https://sdk-02.moengage.com https://metrics.hotjar.io https://siteintercept.qualtrics.com https://collector-px58c3a4zy.perimeterx.net https://platform.twitter.com https://syndication.twitter.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://gfonts.jifo.co https://cdn.jifo.co https://themes.jifo.co https://accounts.google.com https://graph.canstar.com.au https://platform.twitter.com; style-src-attr 'self' 'unsafe-inline'; script-src-attr 'self' 'unsafe-inline' https://cns-angular-content-uat-2.freetls.fastly.net https://cns-angular-content-prod-1.freetls.fastly.net https://cns-angular-content-prod-2.freetls.fastly.net; img-src 'self' data: blob: https://graph.canstar.com.au https://snapshots.uat.canstar.com.au https://snapshots.canstar.com.au https://www.youtube.com https://i.ytimg.com https://yt3.ggpht.com https://images.jifo.co https://www.google.com https://www.google.com.au https://www.google.co.in https://www.gstatic.com https://www.googletagmanager.com https://securepubads.g.doubleclick.net https://bat.bing.com https://www.clarity.ms https://play.google.com https://can.canstar.com.au https://graph.canstar.com.au https://jnn-pa.googleapis.com https://logx.optimizely.com https://identitytoolkit.googleapis.com https://sso.canstar.com.au https://ad.doubleclick.net https://adservice.google.com https://analytics.google.com https://sdk-02.moengage.com https://fonts.gstatic.com https://themes.jifo.co https://gfonts.jifo.co https://cdn.jifo.co https://www.facebook.com https://connect.facebook.net https://analytics.tiktok.com https://www.canstarblue.com.au https://www.canstar.com.au https://secure.gravatar.com https://ep1.adtrafficquality.google https://adtrafficquality.google; font-src 'self' https://fonts.gstatic.com https://themes.jifo.co https://gfonts.jifo.co https://cdn.jifo.co https://script.hotjar.com; frame-src 'self' https://www.youtube.com https://accounts.google.com https://e.infogram.com https://www.googletagmanager.com http://www.googletagmanager.com https://10445216.fls.doubleclick.net https://10420344.fls.doubleclick.net https://can.canstar.com.au https://can.canstarblue.com.au https://securepubads.g.doubleclick.net https://platform.twitter.com https://syndication.twitter.com https://a25480140109.cdn.optimizely.com; connect-src 'self' https://graph.canstar.com.au https://can.canstar.com.au https://can.canstarblue.com.au https://jnn-pa.googleapis.com https://www.google-analytics.com https://bat.bing.com https://www.clarity.ms https://sdk-02.moengage.com https://connect.facebook.net https://www.facebook.com https://accounts.google.com https://www.googletagmanager.com https://cdn.jifo.co https://s.infogram.com https://www.youtube.com https://www.google.com https://www.google.com.au https://www.googleadservices.com https://www.google.co.in https://www.gstatic.com https://securepubads.g.doubleclick.net https://stats.g.doubleclick.net https://play.google.com https://logx.optimizely.com https://identitytoolkit.googleapis.com https://sso.canstar.com.au https://ad.doubleclick.net https://adservice.google.com https://analytics.google.com https://clerk.canstar.com.au https://vital-wasp-63.clerk.accounts.dev https://faithful-gannet-95.clerk.accounts.dev https://clerk-telemetry.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://metrics.hotjar.io https://surveystats.hotjar.io https://siteintercept.qualtrics.com https://collector-px58c3a4zy.perimeterx.net https://ep1.adtrafficquality.google https://adtrafficquality.google https://cns-angular-content-uat-2.freetls.fastly.net https://cns-angular-content-prod-1.freetls.fastly.net https://cns-angular-content-prod-2.freetls.fastly.net; worker-src 'self' blob:; base-uri 'self'; form-action 'self'; report-uri https://graph.canstar.com.au/csp-report; 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' *.sleekplan.com *.mspbackups.com https://unpkg.com/ionicons@4.5.10-0/dist/ionicons/ d1f8f9xcsvx3ha.cloudfront.net posthog.mon.mspbackups.com https://salesiq.zohopublic.com https://static.zohocdn.com https://js.zohocdn.com https://momentjs.com/downloads/moment-timezone-with-data.min.js https://momentjs.com/downloads/moment.js https://code.jquery.com/jquery-3.5.1.min.js https://accounts.google.com/gsi/client https://alcdn.msauth.net/browser/2.28.1/js/msal-browser.min.js; report-uri /csp-violation-report-endpoint/ 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cdn.jsdelivr.net cdn.almapay.com https://fonts.gstatic.com https://ws.colissimo.fr *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud https://cdnjs.cloudflare.com 'self' data: static.sensefuel.live data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.sips-services.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com https://www.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.getalma.eu *.almapay.com/ *.stripe.com/ *.checkout.com/ *.adyen.com/ *.truefitcorp.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com *.weltpixel.com https://form.typeform.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net *.afd.co.uk t.powerreviews.com assets-manager.abtasty.com https://maps.googleapis.com https://maps.gstatic.com https://ws.colissimo.fr https://*.tile.openstreetmap.fr https://*.onyourmap.com https://google.fr https://www.magezon.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud ebizmarts-website.s3.amazonaws.com *.openstreetmap.org www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com maps.googleapis.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.afd.co.uk cdn.jsdelivr.net js-agent.newrelic.com party.spockee.io app.ekoo.co ui.powerreviews.com *.truefitcorp.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com widget.proximis.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com maps.googleapis.com *.gstatic.com https://www.googletagmanager.com tagmanager.google.com  tag.search.sensefuel.live pdata.damart.fr try.abtasty.com                  'self' 'unsafe-eval' 'nonce-NTNjY3Zod3E5MmJpN2V2Zjh2NjJ2OHV1b2FoMmx5NmQ=' 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY/CkTMBhjNhwPvglpYumjx31B4fjkY8='; style-src *.adobe.com fonts.googleapis.com cdn.jsdelivr.net ui.powerreviews.com cdn-mobile.actito.com https://fonts.googleapis.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud https://cdnjs.cloudflare.com assets.braintreegateway.com *.googleapis.com *.gstatic.com tagmanager.google.com tag.search.sensefuel.live 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net vimeo.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.afd.co.uk *.getalma.eu *.almapay.com api.spockee.io backoffice-api.spockee.io ui.powerreviews.com display.powerreviews.com app.ekoo.co maps.googleapis.com cdn-mobile.actito.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com https://ws.colissimo.fr https://maps.googleapis.com https://nominatim.openstreetmap.org https://*.onyourmap.com https://*.mapbox.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.openstreetmap.org api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com c.search.sensefuel.live 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com data: *.fontawesome.com fonts.googleapis.com *.gstatic.com 'self' data: https://www.e-ver.com.ar/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; frame-ancestors *.magerocket.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.gocuotas.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ cdn.dnky.co amc.demdex.net www.google.com www.facebook.com youtube.com *.magerocket.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.gocuotas.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net maps.gstatic.com maps.googleapis.com accounts.google.com www.facebook.com *.magerocket.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.gocuotas.com *.hsforms.net *.hsforms.com 'self' data: https://www.e-ver.com.ar/ https://www.ver.com.ar/ https://api.snappylabs.io/ https://storage.snappylabs.io/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com cdn.dnky.co r1-t.trackedlink.net www.gstatic.com js-agent.newrelic.com bam.nr-data.net maps.googleapis.com connect.facebook.net player.vimeo.com https://live.decidir.com/ *.magerocket.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.gocuotas.com *.hsforms.net *.hsforms.com https://www.google.com *.gstatic.com *.woowup.com https://maps.googleapis.com https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ https://www.e-ver.com.ar/ https://static.hotjar.com/ https://q.clarity.ms/ https://www.clarity.ms/ https://snappychat.snappylabs.io/ https://api.snappylabs.io/ *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com cdn.dnky.co *.googletagmanager.com *.cookielaw.org *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.fontawesome.com *.googleapis.com *.gstatic.com https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ https://www.e-ver.com.ar/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://snappychat.snappylabs.io/ https://www.e-ver.com.ar/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io maps.googleapis.com api.comapi.com bam.nr-data.net https://developers.decidir.com *.magerocket.com *.cookielaw.org *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.gocuotas.com t.elasticsuite.io *.hsforms.net *.hsforms.com https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ https://www.e-ver.com.ar/ https://q.clarity.ms/ https://live.decidir.com/ https://chat.snappylabs.io/ https://o.clarity.ms/ https://ws.snappylabs.io/ https://sessions.bugsnag.com/ https://www.google.com/ccm/collect https://analytics.google.com/g/collect 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https://cdnapisec.kaltura.com https://pay.instamed.com;script-src 'nonce-4e129f36f65a4128a8f0d5879dac8df9' https://www.mylghealth.org 'self' http://fad.Lghealth.org https://cdc.gov https://patientportal.natera.com https://www.healthwise.net https://www.lancastergeneralhealth.org;img-src https://* 'self' blob: data: http://fad.lghealth.org https://fad.lghealth.org;connect-src 'self' epichttp: https://acrobat.adobe.com;style-src https://www.mylghealth.org 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; frame-ancestors *.hana.ondemand.com 'self'; object-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; media-src *.gstatic.com *.google.com capitracking.istore.co.za analytics.twitter.com t.co sp.analytics.yahoo.com cdn1.stamped.io stamped.io *.zdassets.com 'self' 'unsafe-inline'; font-src *.gstatic.com fonts.gstatic.com use.typekit.net *.typekit.net https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net cdn1.stamped.io stamped.io *.cloudflare.com *.googleapis.com *.klevu.com *.zopim.com *.tawk.to *.jsdelivr.net media.flixfacts.com 'unsafe-inline' data: data: 'self' 'unsafe-inline'; style-src *.googleapis.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com https://fonts.bunny.net *.nosto.com *.nos.to assets.braintreegateway.com cdn1.stamped.io stamped.io *.cloudflare.com *.klevu.com *.jsdelivr.net www.gstatic.com media.flixcar.com 'unsafe-inline' data: 'self' 'unsafe-inline'; connect-src *.googleapis.com *.google.com *.gstatic.com s.yimg.com in.visitors.live dsp-trk.eskimi.com dsp-ap.eskimi.com sslwidget.criteo.com wss://in.visitors.live analytics.tiktok.com/* portal.immerss.live *.linkedin.com *.creativecdn.com wss://ws.hotjar.com *.istore.co.za *.tiktok.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.magento-datasolutions.com *.magento-ds.com *.paypal.com google.com *.braintreegateway.com *.braintree-api.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://*.ingest.sentry.io sandbox-api.layup.co.za layup.co.za https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://get.geojs.io *.avada.io *.nosto.com *.nos.to api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com cdn1.stamped.io stamped.io *.testfreaks.com *.ksearchnet.com *.klevu.com *.hotjar.io *.hotjar.com *.doubleclick.net *.zendesk.com *.tawk.to wss://*.tawk.to *.tawk.link *.addthis.com *.addthisedge.com *.what3words.com vsb111.tawk.to ekr.zdassets.com app.mobicredwidget.co.za wss://widget-mediator.zopim.com bam.nr-data.net *.googletagmanager.com security-hub.vaimo.network 'unsafe-eval' data: 'self' 'unsafe-inline'; frame-src *.google.com ams.creativecdn.com portal.immerss.live *.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.nosto.com *.nos.to c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.issuu.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.criteo.net *.criteo.com *.addthis.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; img-src *.googleapis.com *.gstatic.com *.google.com *.googleusercontent.com capitracking.istore.co.za analytics.twitter.com t.co sp.analytics.yahoo.com pixel.rubiconproject.com cm.g.doubleclick.net r.casalemedia.com eb2.3lift.com simage2.pubmatic.com contextual.media.net sync-t1.taboola.com exchange.mediavine.com s.ad.smaato.net match.sharethrough.com jadserve.postrelease.com c.bing.com sync.outbrain.com rtb-csync.smartadserver.com secure.adnxs.com ib.adnxs.com ads.yahoo.com ups.analytics.yahoo.com dis.criteo.com *.doubleclick.net *.linkedin.com *.tribalfusion.com sync.go.sonobi.com istore.co.za cm.adform.net ams.creativecdn.com bh.contextweb.com widgets.magentocommerce.com 'unsafe-inline' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://*.googleapis.com https://*.googleusercontent.com https://firebasestorage.googleapis.com *.nosto.com *.nos.to store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: cdn1.stamped.io stamped.io *.cloudflare.com *.google.lv *.google.co.za *.google.com.na *.google.na *.klevu.com *.zopim.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.zopim.io *.sfdr.co sfdr.co *.tawk.to tawk.link *.tawk.link *.addthis.com *.jsdelivr.net *.azurewebsites.net maps.googleapis.com app.mobicredwidget.co.za amcglobal.sc.omtrdc.net media.flixcar.com rt.flix360.com assets.secure.checkout.visa.com data: 'self' 'unsafe-inline'; script-src *.google.com *.googleapis.com *.gstatic.com capitracking.istore.co.za s.yimg.com platform2.cloud-iq.com static.ads-twitter.com rookdsp.com dsp-media.eskimi.com portal.immerss.live snap.licdn.com tags.creativecdn.com *.tiktok.com *.tribalfusion.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.typekit.net google.com *.cdn-apple.com *.braintreegateway.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://browser.sentry-cdn.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.avada.io *.shopify.com *.nosto.com *.nos.to js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com cdn1.stamped.io stamped.io *.zopim.com *.videoly.co sfdr.co *.cnetcontent.com *.cloudfront.net *.klevu.com *.google.lv *.google.co.za *.google.com.na *.google.na *.cloudflare.com *.cloudflareinsights.com *.hotjar.com *.googletagmanager.com *.criteo.net *.criteo.com *.sfdr.co *.tawk.to *.tawk.link *.jsdelivr.net *.addthis.com *.addthisedge.com *.moatads.com *.mouseflow.com *.facebook.com *.what3words.com maps.googleapis.com static.zdassets.com app.mobicredwidget.co.za www.gstatic.com bam.nr-data.net js.testfreaks.com media.flixfacts.com media.flixcar.com security-hub.vaimo.network https://istorepreowned.co.za 'self' 'unsafe-inline' 'unsafe-eval'; 1
default-src 'self';script-src 'self' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' https: https://analytics.therapistaid.com 'nonce-NbqXy7oGB94nw6zLX8GsWQQF3uKSzHgr';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://unpkg.com;img-src 'self' data: blob: https:;font-src 'self' data: https://fonts.gstatic.com;connect-src 'self' https: https://*.sentry.io https://analytics.therapistaid.com;frame-src 'self' https: https://sandtray.therapistaid.com;form-action 'self' https:;base-uri 'none';object-src 'none';media-src 'self' blob: https:;manifest-src 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.cookiebot.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.google.com *.gstatic.com *.doubleclick.net *.curator.io *.elfsight.com *.hotjar.com *.facebook.net *.cloudfront.net *.micpn.com *.searchstax.com *.wisepops.com wisepops.com *.wisepops.net wisepops.net *.sentry-cdn.com *.thehotelsnetwork.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.fonts.net *.myfonts.net *.doubleclick.net *.curator.io; img-src 'self' data: blob: *.google.co.uk *.facebook.com *.doubleclick.net *.google-analytics.com *.micpn.com *.googleapis.com *.gstatic.com *.cloudfront.net *.curator.io *.tripadvisor.com; connect-src 'self' *.bing.com *.cookiebot.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.google.com *.gstatic.com *.doubleclick.net *.micpn.com *.facebook.com *.mapbox.com *.curator.io *.wisepops.net *.wisepops.com wisepops.net wisepops.com *.thehotelsnetwork.com; font-src 'self' data: *.fonts.net *.myfonts.net *.gstatic.com; worker-src 'self' blob:; child-src 'self' blob: *.google.com *.googleapis.com *.googletagmanager.com *.doubleclick.net; frame-src 'self' *.google.com *.doubleclick.net *.facebook.com; media-src 'self'; object-src 'none'; base-uri 'self'; report-uri https://3chillies.report-uri.com/r/d/csp/reportOnly; 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; script-src 'self' https: 'sha256-rpGmXk3NQLo45ldl81BcJ8jtlryCws9E/NadLKU0Z3A=' 'sha256-mC5tw35wQ7CvlgNEqD4wVhLgMaY0tWtBDwJUfrtxrZk=' 'nonce-zpcUWNkFUnGeszf8l9l90g=='; style-src 'self' https: 'unsafe-inline'; report-uri /csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.cloudflare.com *.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.facebook.com *.twitter.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cloudflare.com *.cloudfront.net *.baen.com *.twitter.com *.twimg.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.cloudflare.com *.twitter.com *.twimg.com *.fontawesome.com *.facebook.net *.authorize.net *.simpli.fi js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.fontawesome.com *.bootstrapcdn.com *.gstatic.com *.twitter.com *.twimg.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.cloudflare.com *.authorize.net *.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com https://static.contactlab.it https://ingestion.webanalytics.italia.it https://www.youtube.com; object-src 'none'; style-src 'self' 'unsafe-inline' https://static.cineca.it; img-src 'self' data: https:; media-src 'self'; frame-src 'self'; frame-ancestors 'self'; child-src 'self'; font-src 'self' data: https://static.cineca.it; connect-src 'self' https://static.cloudflareinsights.com https://ingestion.webanalytics.italia.it https://www.youtube.com; report-uri /report-csp-violation 1
default-src *.pharm24.gr *.skroutz.gr static.zdassets.com data:; frame-src *.pharm24.gr virtual-assistants.gr *.googletagmanager.com *.skroutz.gr *.hotjar.com *.checkout.com *.dco.gr *.disqus.com *.linkwi.se *.adsrvr.org *.google.com *.googlesyndication.com *.agkn.com *.facebook.net *.facebook.com *.youtube.com *.cookiebot.com *.aimtell.com; img-src * data: *.pharm24.gr *.youtube.com *.facebook.com trustmark.gr; script-src 'self' 'unsafe-inline' *.pharm24.gr *.skroutz.gr *.google.com *.debugbear.com virtual-assistants.gr secure.dcomodo.net *.vc-portal.com *.skroutz.gr *.gstatic.com *.checkout.com salesmanago.com *.salesmanago.com *.saleago.com bat.bing.com *.clarity.ms *.adman.gr *.hotjar.com *.googleapis.com *.google.com *.cloudflareinsights.com *.cloudflare.com *.disquscdn.com *.shareaholic.com *.shareaholic.net *.stackpathcdn.com *.cloudfront.net *.adsrvr.org *.instagram.com *.ampproject.org *.googlesyndication.com *.disqus.com *.cookiebot.com trustmark.gr *.agkn.com *.zdassets.com *.trustmark.gr *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.facebook.com connect.facebook.net *.facebook.net googleads.g.doubleclick.net *.doubleclick.net *.zopim.com *.linkwi.se s3.amazonaws.com *.amazonaws.com *.aimtell.com cdn-cfdnp.nitrocdn.com 'unsafe-inline' 'unsafe-eval' blob: data: gap:; style-src 'self' *.googleapis.com *.googletagmanager.com *.pharm24.gr *.vc-portal.com *.bootstrapcdn.com cdn-cfdnp.nitrocdn.com 'unsafe-inline'; worker-src 'self' *.aimtell.com blob: data: gap:; font-src 'self' *.hotjar.com *.stats.pharm24.gr *.pharm24.gr *.vc-portal.com *.gstatic.com *.bootstrapcdn.com *.stackpathcdn.com *.zopim.com cdn-cfdnp.nitrocdn.com data:; connect-src *.debugbear.com google.com *.googletagmanager.com *.checkout.com *.cookiebot.com *.zendesk.com *.saleago.com *.salesmanago.com *.salesmanago.pl *.getnitropack.com *.adman.gr *.hotjar.com *.googlesyndication.com *.trustmark.gr *.ampproject.org *.google.com *.google.gr *.disqus.com *.shareaholic.com *.shareaholic.net backup.pharm24.gr:* *.pharm24.gr *.doubleclick.net *.google-analytics.com *.agkn.com *.zdassets.com  *.amazonaws.com *.zopim.com bat.bing.com a.clarity.ms *.facebook.com *.aimtell.com wss://widget-mediator.zopim.com wss://ws6.hotjar.com/api/v2/client/ws 1
base-uri 'self'; connect-src 'self' https://*.google.com https://boards-api.greenhouse.io https://images.prismic.io https://o43253.ingest.sentry.io https://pagead2.googlesyndication.com https://www.gstatic.com https://bat.bing.com https://*.clarity.ms; default-src 'self'; font-src 'self'; form-action 'none'; frame-ancestors 'none'; frame-src https://*.enterprise.ada.com https://boards.greenhouse.io https://insight.adsrvr.org https://td.doubleclick.net https://tpc.googlesyndication.com https://www.youtube-nocookie.com; img-src 'self' data: https://adahealth.cdn.prismic.io https://assets.ada.com https://connect.facebook.net https://googleads.g.doubleclick.net https://images.prismic.io https://prismic-io.s3.amazonaws.com https://www.facebook.com https://pagead2.googlesyndication.com https://adservice.google.com https://www.google.com https://www.googletagmanager.com https://bat.bing.com https://*.clarity.ms; manifest-src 'self'; media-src 'self' https://adahealth.cdn.prismic.io; script-src 'self' 'unsafe-inline' https://boards.greenhouse.io https://connect.facebook.net https://googleads.g.doubleclick.net https://js.adsrvr.org https://tpc.googlesyndication.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.youtube.com https://bat.bing.com https://www.clarity.ms; style-src 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.wesupply.xyz https://wesupplylabs.com *.sandbox.paypal.com *.paypalobjects.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.swagger.io *.ftcdn.net *.behance.net *.googleapis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com julio.com *.scene7.com *.doubleclick.net *.google.com *.google-analytics.com *.googleadservices.com *.braintreegateway.com mcusercontent.com www.google.com.co *.sharethis.com *.aplazo.mx *.api.useinsider.com *.sandbox.paypal.com *.paypalobjects.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.reddit.com *.bing.com *.clarity.ms *.googletagmanager.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.net *.connect.facebook.net https://smetrics.julio.com *.julio.com *.cardinalcommerce.com unpkg.com cdn.jsdelivr.net *.magento-datasolutions.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.paypal.com *.paypalobjects.com *.bolt.com *.commerce-quick-checkout.com *.online-metrix.net *.cybersource.com *.sharethis.com *.pingdom.net *.hotjar.com *.zdassets.com *.useinsider.com *.usizy.es usizy.com *.cloudflare.com *.sandbox.paypal.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.redditstatic.com *.reddit.com *.tiktok.com *.bing.com *.clarity.ms *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.fontawesome.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.amazonaws.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com julio.com https://smetrics.julio.com *.demdex.net *.cardinalcommerce.com *.snplow.net *.pingdom.net *.woorank.com *.adobedc.net *.youtube.com https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com *.bolt.com *.magento-ds.com *.sharethis.com *.zdassets.com grupojulio.zendesk.com *.usizy.es usizy.com *.hotjar.io *.api.useinsider.com *.useinsider.com *.g.doubleclick.net *.crwdcntrl.net *.sandbox.paypal.com *.paypalobjects.com www.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.bing.com *.clarity.ms *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src julio.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src * https: data: blob: 'unsafe-inline' 'unsafe-hashes'; 1
default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https://cdnapisec.kaltura.com/ https://content.d-h.org/ https://content.dev.dhsandbox.org/ https://edhwebportal.hitchcock.org https://premier.trustcommerce.com https://stagepremier.trustcommerce.com;script-src 'nonce-6e11e078973645119c693c3495811e08' https://portal.mydh.org 'self';img-src https://* 'self' blob: data:;connect-src 'self' epichttp: https://*.kaltura.com;style-src https://portal.mydh.org 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://core.sanity-cdn.com https://cdn.rudderlabs.com https://salesviewer.org https://www.salesviewer.com https://doo.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://cdn.sanity.io https://*.sanity-cdn.com https://images.uninow.com https://salesviewer.org https://doo.net; font-src 'self' data:; connect-src 'self' https://*.sanity.io https://*.sanity-cdn.com wss://*.sanity.io https://rudderstack.uninow.io https://cdn.rudderlabs.com https://sentry.uninow.io https://salesviewer.org https://www.salesviewer.com https://doo.net; frame-src https://doo.net https://www.youtube-nocookie.com https://www.youtube.com https://open.spotify.com; media-src 'self' https://cdn.sanity.io; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none' 1
default-src 'self' *.bbcearth.com *.bbc.com *.bbc.co.uk *.bbci.co.uk https://cloud.email.bbc.com *.zscalertwo.net *.**.bbc.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bbcearth.com *.bbc.com *.bbc.co.uk *.bbci.co.uk https://cloud.email.bbc.com *.zscalertwo.net *.**.bbc.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.googlesyndication.com *.google.com *.googleadservices.com *.youtube.com *.youtube-nocookie.com *.google *.the-ozone-project.com *.optimizely.com *.go-mpulse.net *.quantserve.com *.quantcount.com tag.aticdn.net cdn.shopify.com cdn.jsdelivr.net scripts.webcontentassessor.com *.wayin.com static.xx.fbcdn.net/; style-src 'self' 'unsafe-inline' *.bbcearth.com *.bbc.com *.bbc.co.uk *.bbci.co.uk https://cloud.email.bbc.com *.zscalertwo.net *.**.bbc.com fonts.googleapis.com fonts.gstatic.com *.typekit.net; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com *.typekit.net; img-src 'self' data: blob: https: http: *.bbcearth.com *.bbc.com *.bbc.co.uk *.bbci.co.uk https://cloud.email.bbc.com *.zscalertwo.net *.**.bbc.com; connect-src 'self' *.bbcearth.com *.bbc.com *.bbc.co.uk *.bbci.co.uk https://cloud.email.bbc.com *.zscalertwo.net *.**.bbc.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.googlesyndication.com *.google.com *.googleadservices.com *.youtube.com *.youtube-nocookie.com *.google *.the-ozone-project.com *.optimizely.com *.go-mpulse.net *.quantserve.com *.quantcount.com cdn.jsdelivr.net; frame-src 'self' *.bbcearth.com *.bbc.com *.bbc.co.uk *.bbci.co.uk https://cloud.email.bbc.com *.zscalertwo.net *.**.bbc.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.googlesyndication.com *.google.com *.googleadservices.com *.youtube.com *.youtube-nocookie.com *.google *.brightcove.com *.brightcove.net *.sajari.com *.akstat.io *.the-ozone-project.com *.optimizely.com *.go-mpulse.net *.quantserve.com *.quantcount.com; media-src 'self' data: *.bbcearth.com *.bbc.com *.bbc.co.uk *.bbci.co.uk https://cloud.email.bbc.com *.zscalertwo.net *.**.bbc.com *.brightcove.com *.brightcove.net *.sajari.com *.akstat.io; object-src 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; media-src 'self' blob: https:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https: 1
default-src 'self' data: *.wroclaw.pl *.cookiebot.com *.google.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.youtube.com *.youtube-nocookie.com *.ytimg.com *.facebook.com *.fbcdn.net *.googleusercontent.com fonts.gstatic.com https://unpkg.com *.curator.io https://curator-assets.b-cdn.net *.amazonaws.com https://api.mapbox.com https://callme360.com *.doubleclick.net https://cdn.jsdelivr.net *.googlesyndication.com *.openstreetmap.org *.cloudflare.com https://cdn.gravitec.net *.crazyegg.com *.gemius.pl *.criteo.com *.criteo.net *.optad360.net *.google.pl *.cloudflareinsights.com *.clarity.ms *.newrelic.com *.gravitec.media *.crwdcntrl.net *.openxcdn.net *.nr-data.net *.optad360-video.com optad360-video.com *.adtrafficquality.google *.googleadservices.com *.2mdn.net *.facebook.net *.slideshare.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.wroclaw.pl *.googleapis.com *.cookiebot.com *.google.com *.googletagmanager.com *.google-analytics.com *.youtube.com *.ytimg.com *.facebook.net https://unpkg.com *.juicer.io *.curator.io https://api.mapbox.com *.jsdelivr.net *.cloudflare.com *.highcharts.com *.statsforads.com *.optad360.io *.doubleclick.net https://callme360.com *.gstatic.com https://cdn.gravitec.net *.crazyegg.com *.gemius.pl *.criteo.com *.criteo.net *.cloudflareinsights.com *.clarity.ms *.newrelic.com *.gravitec.media *.crwdcntrl.net *.openxcdn.net *.nr-data.net *.adtrafficquality.google *.googleadservices.com *.googlesyndication.com *.2mdn.net; style-src 'self' 'unsafe-inline' *.wroclaw.pl *.googleapis.com *.google.com https://unpkg.com *.curator.io https://api.mapbox.com https://callme360.com *.cloudflare.com *.jsdelivr.net https://cdn.jsdelivr.net; 1
default-src 'self';     base-uri 'self';     object-src 'none';     frame-ancestors 'self';     upgrade-insecure-requests;     form-action 'self'      https://accounts.google.com      https://login.microsoftonline.com      https://pi.pardot.com;     script-src 'self' 'unsafe-eval'      https://www.googletagmanager.com      https://www.google-analytics.com      https://analytics.google.com      https://googleads.g.doubleclick.net      https://www.google.com      https://scripts.clarity.ms      https://j.clarity.ms https://www.clarity.ms      https://dc.services.visualstudio.com      https://az416426.vo.msecnd.net      https://connect.facebook.net      https://static.ads-twitter.com      https://snap.licdn.com      https://px.ads.linkedin.com      https://js.zi-scripts.com      https://ws.zoominfo.com      https://pi.pardot.com      https://goto.blackbox.com      https://ok.blackbox.com https://okt.to      https://j.6sc.co      https://scatec.io      https://t.channeladvisor.com      https://cdnjs.cloudflare.com      https://bbcdn1.azureedge.net      https://www.blackbox.com;     script-src-elem 'self' 'unsafe-inline'      https://www.googletagmanager.com       https://www.google-analytics.com       https://analytics.google.com      https://googleads.g.doubleclick.net       https://www.google.com      https://scripts.clarity.ms       https://j.clarity.ms       https://www.clarity.ms      https://dc.services.visualstudio.com       https://az416426.vo.msecnd.net      https://connect.facebook.net       https://static.ads-twitter.com      https://snap.licdn.com       https://px.ads.linkedin.com      https://js.zi-scripts.com       https://ws.zoominfo.com       https://pi.pardot.com      https://goto.blackbox.com       https://ok.blackbox.com https://okt.to      https://j.6sc.co       https://scatec.io       https://t.channeladvisor.com      https://cdnjs.cloudflare.com       https://bbcdn1.azureedge.net       https://www.blackbox.com      https://ajax.googleapis.com      https://recaptcha.net      https://www.gstatic.com      https://cdn.blackbox.com      https://content.etilize.com;     script-src-attr 'self' 'unsafe-inline';     connect-src 'self'      https://www.googletagmanager.com      https://www.google-analytics.com      https://analytics.google.com      https://googleads.g.doubleclick.net      https://scripts.clarity.ms      https://j.clarity.ms      https://www.clarity.ms      https://dc.services.visualstudio.com      https://connect.facebook.net      https://www.facebook.com      https://static.ads-twitter.com      https://analytics.twitter.com      https://t.co      https://snap.licdn.com      https://px.ads.linkedin.com      https://js.zi-scripts.com      https://ws.zoominfo.com      https://pi.pardot.com      https://goto.blackbox.com      https://ok.blackbox.com       https://okt.to      https://j.6sc.co       https://b.6sc.co       https://c.6sc.co       https://ipv6.6sc.co      https://scatec.io       https://t.channeladvisor.com      https://ekr.zdassets.com       https://static.zdassets.com      https://ajax.googleapis.com      https://www.google.com      https://recaptcha.net      https://az416426.vo.msecnd.net      https://bbcdn1.azureedge.net;     style-src 'self' 'unsafe-inline'       https://fonts.googleapis.com;     font-src 'self' https:      https://fonts.gstatic.com;     img-src 'self' data:      https://cdn.blackbox.com       https://*.azureedge.net       https://*.azurefd.net      https://bbcdn1.azureedge.net       https://bbnscdn.azureedge.net      https://bbpimassetsp-aza7efghcfa8c2dh.a03.azurefd.net      https://b.6sc.co       https://t.co       https://www.google.com      https://googleads.g.doubleclick.net       https://px.ads.linkedin.com       https://recaptcha.net      https://www.googletagmanager.com;     frame-src 'self'      https://recaptcha.net       https://www.google.com       https://www.gstatic.com      https://www.googletagmanager.com 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; upgrade-insecure-requests; script-src 'strict-dynamic' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://*.zadig-et-voltaire.com https://*.z-v.cloud https://*.algolia.net https://*.algolianet.com https://*.algolia.io https://cognito-idp.eu-west-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com https://*.amazoncognito.com https://maps.googleapis.com https://addressvalidation.googleapis.com https://places.googleapis.com https://www.google.com https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net https://*.adyen.com https://*.nosto.com https://*.riskified.com https://*.nr-data.net https://*.global-e.com https://*.bglobale.com https://*.socloz.com https://*.abtasty.com https://*.privacy-center.org https://*.facil-iti.app https://*.metav.rs https://bat.bing.com https://*.tiktok.com https://*.tiktokw.us https://*.snapchat.com https://*.criteo.com https://*.creativecdn.com https://*.outbrain.com https://*.zemanta.com https://*.rakuten.com https://*.linksynergy.com https://*.adnxs.com https://*.contentsquare.net https://*.trackad.ai https://*.salecycle.com https://*.pinterest.com https://*.shopmy.us https://*.reelevant.com https://www.googleadservices.com https://*.listrakbi.com https://*.listrak.com https://*.lt02.net https://*.clarity.ms https://*.reddit.com; frame-src 'self' https://*.adyen.com https://*.global-e.com https://*.bglobale.com https://www.google.com https://recaptcha.google.com https://www.googletagmanager.com https://*.socloz.com https://player.vimeo.com https://www.youtube.com https://www.youtube-nocookie.com https://*.abtasty.com https://*.snapchat.com https://*.salecycle.com https://*.criteo.com https://*.metav.rs; media-src 'self' blob: data: https://*.zadig-et-voltaire.com https://*.imgix.net https://*.prismic.io; worker-src 'self' blob:; manifest-src 'self'; form-action 'self' https://*.adyen.com https://*.global-e.com https://*.bglobale.com; report-uri https://helios.zadig-et-voltaire.com/api/v1/csp/report; 1
default-src 'self'; script-src 'self' 'nonce-0gmVDZ/CnJXKPEI5lI2vyg==' 'sha256-7PAskhS3cHXXYcT9zKDcOhYxpwJo4loI0JngjVANGCU=' 'strict-dynamic' https://www.googletagmanager.com https://www.google-analytics.com https://js.hs-scripts.com https://js-eu1.hs-scripts.com https://js.hsforms.net https://js.hscollectedforms.net https://js-eu1.hs-analytics.net https://js-eu1.hs-banner.com https://js-eu1.hscta.net https://js-eu1.usemessages.com https://static.hsappstatic.net https://challenges.cloudflare.com https://assets.cello.so https://assets.sandbox.cello.so; style-src 'self' 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://pagead2.googlesyndication.com https://api.hubapi.com https://api-eu1.hubapi.com https://api-eu1.hubspot.com https://api.hsforms.com https://cta-eu1.hubspot.com https://track-eu1.hubspot.com https://forms.hscollectedforms.net https://forms-eu1.hscollectedforms.net https://exceptions-eu1.hubspot.com https://js-eu1.hs-banner.com https://js-eu1.hscta.net wss://js-eu1.usemessages.com https://challenges.cloudflare.com https://assets.cello.so https://api.cello.so; frame-src 'self' https://www.googletagmanager.com https://challenges.cloudflare.com https://www.loom.com https://cdn.loom.com https://www.youtube-nocookie.com https://www.youtube.com https://meetings-eu1.hubspot.com https://app-eu1.hubspot.com https://js-eu1.usemessages.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none'; report-uri /api/csp-report; report-to csp-endpoint 1
script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=7BPd3AuhWMm.k5w6e5BRZK8JZIjx2NEj88qBaLmar0M-1789279612.6302273-1.0.1.1-XMGntFDi8YZQ7jMTeFWQ6q.z6ET3ij_euq01sozb3loFgqaickwoo0eWXkdmMiFmmFxweUC7FL4YsyGnJsq_EHO.HvpmGTrAffkhLVt_Ql15JJngIdLH86VT_EE7X34ZBSNKMB7_7ztrVEeSiIQBQkWFUw609DIoQdn2fGnsQpM; report-to cf-csp-endpoint 1
script-src-elem data: 'self' 'unsafe-inline' 'report-sample' 'unsafe-eval' https://web-sdk.aptrinsic.com https://s7.addthis.com https://static.hotjar.com https://script.hotjar.com https://host.hotjar.com https://www.google.com https://assets.adobedtm.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://analytics.google.com https://www.googletagmanager.com https://www.googleapis.com https://*.newrelic.com https://*.nr-data.net https://geostag.cardinalcommerce.com https://1eafstag.cardinalcommerce.com https://geoapi.cardinalcommerce.com https://1eafapi.cardinalcommerce.com https://songbird.cardinalcommerce.com https://www.paypal.com https://www.sandbox.paypal.com https://www.paypalobjects.com https://t.paypal.com https://vimeo.com https://www.vimeo.com https://*.vimeocdn.com https://*.youtube.com https://use.typekit.net https://*.typekit.net https://*.magento-ds.com https://*.cloudflare.com https://*.gstatic.com https://js.braintreegateway.com https://assets.braintreegateway.com https://api.braintreegateway.com https://api.sandbox.braintreegateway.com https://client-analytics.braintreegateway.com https://client-analytics.sandbox.braintreegateway.com https://checkout.razorpay.com https://*.facebook.net https://*.avada.io; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.cloudflare.com maxcdn.bootstrapcdn.com https://maxcdn.bootstrapcdn.com/ https://maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com 'self' data: play.google.com api.razorpay.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net https://cm.everesttech.net https://*.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com https://*.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self'  https://www.magecomp.com https://assets.adobedtm.com https://amcglobal.sc.omtrdc.net https://dpm.demdex.net https://widgets.magentocommerce.com https://www.googleadservices.com https://www.google.co.in https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.google.com https://bid.g.doubleclick.net https://analytics.google.com https://www.googletagmanager.com https://*.ftcdn.net https://*.behance.net https://www.paypal.com https://www.paypalobjects.com https://fpdbs.paypal.com https://fpdbs.sandbox.paypal.com https://*.vimeocdn.com https://p.typekit.net https://*.gstatic.com https://validator.swagger.io https://cdn.razorpay.com https://*.facebook.com https://firebasestorage.googleapis.com https://assets.braintreegateway.com https://checkout.paypal.com cdn.razorpay.com *.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ 'self' data: 'report-sample' 'unsafe-inline' 'unsafe-eval' https://*.cloudflare.com https://static.hotjar.com https://script.hotjar.com https://assets.adobedtm.com https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com tagmanager.google.com https://*.facebook.net https://js.braintreegateway.com https://checkout.razorpay.com checkout.razorpay.com *.googletagmanager.com *.facebook.net *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com 'self' data: 'report-sample' *.cloudflare.com https://maxcdn.bootstrapcdn.com https://www.bunnycart.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com 'self' data: *.hotjar.io wss://ws.hotjar.com https://*.hotjar.io https://*.facebook.com https://www.facebook.com https://www.facebook.com/*/ https://lumberjack-cx.razorpay.com lumberjack.razorpay.com lumberjack-metrics.razorpay.com *.google-analytics.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' 'unsafe-eval' chrome-extension: https://rusmeteo.net https://pos.gosuslugi.ru https://cdn.jsdelivr.net https://counter.rambler.ru 'unsafe-inline' 'unsafe-inline' https://mc.yandex.ru https://stat.sputnik.ru 127.0.0.1:8182 127.0.0.1:8888 127.0.0.1:5005; frame-src 'self' https://pos.gosuslugi.ru chrome-extension: https://mc.yandex.ru https://mc.yandex.com; object-src 'self'; report-uri /cspreportonly; 1
base-uri 'none'; object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-F0wBms9NU88ariT4PvTemA==' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com cdn.jsdelivr.net cdn.almapay.com maxcdn.bootstrapcdn.com *.fontawesome.com instantcredit.net test.instantcredit.net *.aplazame.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.paycomet.com api.paycomet.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com localhost:* *.motive.co 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.getalma.eu *.almapay.com/ *.stripe.com/ *.checkout.com/ *.adyen.com/ www.google.com com.hobbyexpert.es www.paycomet.com api.paycomet.com instantcredit.net test.instantcredit.net https://cdn.aplazame.com https://static.addtoany.com https://consentcdn.cookiebot.com *.salesmanago.pl *.googletagmanager.com www.facebook.com platform.twitter.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.salesmanago.pl *.salesmanago.es *.salesmanago.com com.hobbyexpert.es instantcredit.net test.instantcredit.net https://www.google.com https://www.google.es *.hobbyexpert.es https://imgsct.cookiebot.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com *.motive.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com cdn.jsdelivr.net www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.salesmanago.pl *.salesmanago.es *.salesmanago.com com.hobbyexpert.es www.paycomet.com api.paycomet.com instantcredit.net test.instantcredit.net code.jquery.com *.aplazame.com *.addtoany.com *.cookiebot.com *.facebook.com *.google-analytics.com *.hotjar.com *.hotjar.io *.apisearch.cloud *.clarity.ms *.cloudflareinsights.com connect.facebook.net twitter.com platform.twitter.com *.motive.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com *.fontawesome.com com.hobbyexpert.es instantcredit.net test.instantcredit.net *.googleapis.com *.addtoany.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.getalma.eu *.almapay.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com com.hobbyexpert.es wss://com.hobbyexpert.es instantcredit.net *.instantcredit.net https://www.google-analytics.com https://consentcdn.cookiebot.com https://api.aplazame.com *.hotjar.com http://dpm.demdex.net *.motive.co 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://33c9f1d8-2484-4560-9bbf-aee3f8fa0343.sansec.watch/; report-to report-endpoint; 1
frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=website-grader-ui/static-1.8565/html/public-en.html&cfRay=a3a5c367aa6bc090-IAD 1
object-src 'none';base-uri 'self';script-src 'nonce-W-E2PINqrwpzUogJmNZlcA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob: https://*.hubspot.com https://*.hubapi.com https://*.hsforms.com https://*.hs-scripts.com https://*.hscollectedforms.net https://*.hs-banner.com https://*.hubspotusercontent.com https://*.hubspotusercontent-eu1.net https://js.hs-analytics.net https://js.hsforms.net https://api.hsforms.com https://api.hubapi.com https://*.hsleadflows.net https://*.hsadspixel.net https://*.hs-web-analytics.net https://static.hsappstatic.net https://cdn2.hubspot.net https://cdn.hubspot.com https://*.cloudfront.net https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://stats.g.doubleclick.net https://www.googleadservices.com https://cdn.cookielaw.org https://www.youtube.com; style-src 'self' 'unsafe-inline' https: data:; img-src 'self' https: data: blob:; font-src 'self' https: data:; frame-src 'self' https: data:; connect-src 'self' https: wss: https://www.tayyarijeetki.in; media-src 'self' https: data: blob:; worker-src 'self' https: blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self' https://*.hubspot.com; 1
default-src 'self' blob: data: 'unsafe-inline' 'unsafe-eval' ws: *.nexiuslearning.com *.google-analytics.com *.etitan.hu *.googletagmanager.com *.googleapis.com *.gstatic.com  *.google.com *.bootstrapcdn.com *.extremenet.hu stats.g.doubleclick.net www.youtube-nocookie.com; report-uri https://etitancsp.azurewebsites.net/api/eTitanCSP; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-CvrZiLYtEP2jkjndJO6UBw' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
object-src 'none';base-uri 'self';script-src 'nonce-kODt3BoxPEh6voHLEHs-_w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
base-uri 'self'; connect-src 'self' https://opluswork.com https://www.opluswork.com https://api.iconify.design https://js.hsforms.net https://api.youcanbook.me https://storage.googleapis.com https://*.hubspot.com https://*.hsforms.com https://*.hscollectedforms.net https://static.hsappstatic.net https://www.google.com https://www.google.co.jp https://www.google-analytics.com https://www.googletagmanager.com https://analytics.google.com https://*.analytics.google.com https://stats.g.doubleclick.net; default-src 'self'; font-src data: 'self' https://opluswork.com https://fonts.gstatic.com https://use.fontawesome.com https://cdnjs.cloudflare.com https://storage.googleapis.com; form-action 'self' https://opluswork.com https://www.opluswork.com; frame-ancestors 'none'; frame-src 'self' https://opluswork.com https://timerex.net https://www.youtube.com https://player.vimeo.com https://oplus-support.youcanbook.me https://js.hsforms.net https://js.stripe.com https://hooks.stripe.com https://*.hubspot.com https://*.usemessages.com https://drive.google.com https://interfaces.zapier.com https://oplus.zapier.app; img-src data: 'self' https://opluswork.com https://filestorage.opluswork.com https://images.unsplash.com https://img.youtube.com https://i.ibb.co https://storage.googleapis.com https://www.google.com https://www.google.co.jp https://www.googletagmanager.com https://www.kingtime.jp https://www.youtube.com https://translate.google.com https://*.hubspot.com https://*.hsforms.com https://stats.g.doubleclick.net https://*.hscollectedforms.net; object-src 'none'; report-uri /csp-report; script-src 'self' https://opluswork.com 'nonce-YP2zVwkN1h6DRtHgmvPVnw' https://ajax.googleapis.com https://api.iconify.design https://asset.timerex.net https://cdn.tailwindcss.com https://cdnjs.cloudflare.com https://code.iconify.design https://code.jquery.com https://*.hs-scripts.com https://js.hsforms.net https://js.stripe.com https://oss.maxcdn.com https://stackpath.bootstrapcdn.com https://static.hsappstatic.net https://storage.googleapis.com https://use.fontawesome.com https://www.googletagmanager.com https://www.google-analytics.com https://*.hubspot.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hscollectedforms.net https://*.usemessages.com https://www.google.com https://www.gstatic.com https://www.gstatic.cn https://www.recaptcha.net; style-src 'self' https://opluswork.com 'unsafe-inline' https://cdn.jsdelivr.net https://cdn.tailwindcss.com https://cdnjs.cloudflare.com/ajax/libs/ https://fonts.googleapis.com https://stackpath.bootstrapcdn.com https://storage.googleapis.com https://use.fontawesome.com; style-src-attr 'unsafe-inline'; style-src-elem 'self' https://opluswork.com 'unsafe-inline' https://cdn.jsdelivr.net https://cdn.tailwindcss.com https://cdnjs.cloudflare.com/ajax/libs/ https://fonts.googleapis.com https://stackpath.bootstrapcdn.com https://storage.googleapis.com https://use.fontawesome.com 1
object-src 'none';base-uri 'self';script-src 'nonce-7Tc8rZFvyT4gbQZbkr_ktw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'https://checkout.shopflo.co' https://js.boxx.ai https://p.cquotient.com https://connect.facebook.net https://www.google-analytics.com https://unpkg.com https://www.googletagmanager.com https://cdn.cquotient.com https://code.jquery.com https://*.gokwik.co https://*.netcoresmartech.com https://*.shopflo.com https://swopstore.com 'unsafe-inline' 'unsafe-eval';  script-src-elem 'self' https://checkout.shopflo.co https://js.boxx.ai https://p.cquotient.com https://connect.facebook.net https://www.google-analytics.com https://unpkg.com https://www.googletagmanager.com https://cdn.cquotient.com https://code.jquery.com https://*.gokwik.co https://*.netcoresmartech.com https://*.shopflo.com https://swopstore.com 'unsafe-inline'; style-src 'self' https://unpkg.com https://fonts.googleapis.com 'unsafe-inline'; img-src 'self' https://www.facebook.com https://www.google.com https://www.google-analytics.com https://*.shopflo.com https://*.gokwik.co https://d1pdzcnm6xgxlz.cloudfront.net https://*.salesforce.com data:; connect-src 'self' https://checkout.shopflo.co https://api.shopflo.co https://loki.boxx.ai https://wdc.netcoresmartech.com https://p.cquotient.com https://www.google-analytics.com https://*.shopflo.com https://*.gokwik.co https://*.netcoresmartech.com https://d1pdzcnm6xgxlz.cloudfront.net https://swopstore.com https://*.facebook.com https://*.facebook.net; font-src 'self' https://unpkg.com https://fonts.gstatic.com data:; manifest-src 'self' https://checkout.shopflo.co https://wdc.netcoresmartech.com; media-src 'self' https://*.shopflo.com https://*.gokwik.co https://*.netcoresmartech.com https://d1pdzcnm6xgxlz.cloudfront.net https://swopstore.com; frame-src 'self' https://*.shopflo.com https://*.gokwik.co https://*.netcoresmartech.com https://d1pdzcnm6xgxlz.cloudfront.net https://swopstore.com; report-uri /on/demandware.store/Sites-MIRAI-Site/default/CSP-Report; 1
object-src 'none';base-uri 'self';script-src 'nonce-LlVu69LyI17m6dp8Bp9ixQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
block-all-mixed-content; report-uri /csp/report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://www.google.com https://www.gstatic.com https://challenges.cloudflare.com https://www.youtube.com https://s.ytimg.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.google-analytics.com https://stats.g.doubleclick.net https://*.g.doubleclick.net https://static.cloudflareinsights.com https://cloudflareinsights.com https://sdk.mercadopago.com https://*.mercadopago.com https://*.mercadolibre.com https://http2.mlstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com data:; img-src 'self' data: blob: https:; media-src 'self' blob: https:; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.google-analytics.com https://stats.g.doubleclick.net https://*.g.doubleclick.net https://static.cloudflareinsights.com https://cloudflareinsights.com https://sdk.mercadopago.com https://*.mercadopago.com https://*.mercadolibre.com https://http2.mlstatic.com; frame-src 'self' https://www.youtube.com https://www.google.com https://challenges.cloudflare.com https://sdk.mercadopago.com https://*.mercadopago.com https://*.mercadolibre.com https://http2.mlstatic.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://connect.facebook.net https://analytics.tiktok.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https:; img-src 'self' https: data: blob:; frame-src 'none'; object-src 'none'; base-uri 'self'; form-action 'self' 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-ZoBYqcO04E95_FOun3fPzQ' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com maxcdn.bootstrapcdn.com https://maxcdn.bootstrapcdn.com https://eastprodcdn.azureedge.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com landofcoder.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.gstatic.com https://images.unsplash.com https://bat.bing.net https://bat.bing.com https://d.adroll.com https://eastprodcdn.azureedge.net https://forms.hsforms.com https://cdn.origene.com https://perf-na1.hsforms.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://track.hubspot.com https://www.bizgeniusapp.com https://www.ncbi.nlm.nih.gov https://pmc.ncbi.nlm.nih.gov https://cdn.ncbi.nlm.nih.gov https://x.bidswitch.net https://pixel.tapad.com https://ps.eyeota.net https://rtb-csync.smartadserver.com https://ml314.com https://dsum-sec.casalemedia.com https://idsync.rlcdn.com https://sync.outbrain.com https://us-u.openx.net https://image2.pubmatic.com https://eb2.3lift.com https://sync.taboola.com https://ib.adnxs.com https://match.adsrvr.org https://pixel.rubiconproject.com https://s.amazon-adsystem.com https://onetag-sys.com https://jadserve.postrelease.com https://secure.adnxs.com https://ups.analytics.yahoo.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://maps.googleapis.com https://player.vimeo.com landofcoder.com https://bat.bing.com https://cdn.noibu.com https://connect.facebook.net https://d.adroll.com https://eastprodcdn.azureedge.net https://galleryuseastprod.blob.core.windows.net https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://js.hscollectedforms.net https://js.hubspot.com https://js.usemessages.com https://s.adroll.com https://scripts.clarity.ms https://script.hotjar.com https://snap.licdn.com https://static.hotjar.com https://unpkg.com https://workspace.velaro.com https://www.bizgeniusapp.com https://www.clarity.ms https://cdnjs.cloudflare.com https://cdn.jsdelivr.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com https://maxcdn.bootstrapcdn.com https://eastprodcdn.azureedge.net https://galleryuseastprod.blob.core.windows.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com landofcoder.com https://ad.doubleclick.net https://api-engagement-us-east.velaro.com https://api.hubspot.com https://api-main-us-east.velaro.com https://api-visitor-us-east.velaro.com https://bat.bing.net https://cta-service-cms2.hubspot.com https://d.adroll.com https://e.clarity.ms https://forms.hscollectedforms.net https://px.ads.linkedin.com https://stats.g.doubleclick.net https://u.clarity.ms https://www.bizgeniusapp.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-ancestors 'self'; report-uri https://www.themercury.com.au/csp-reports 1
worker-src *.noibu.com; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.fontawesome.com *.googleapis.com www.google.com www.gstatic.com *.bootstrapcdn.com *.paypalobjects.com *.gladly.com *.cookielaw.org data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://plumrocket.com *.tilebar-vis.com *.byondxr.com *.cardinalcommerce.com *.cardinaltrusted.com *.facebook.com *.facebook.net *.yotpo.com *.listrakbi.com *.cookielaw.org 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app www.google.com *.affirm.com *.affirm.ca https://plumrocket.com *.tilebar-vis.com *.byondxr.com sketchfab.com *.weltpixel.com cdn.cardknox.com *.cardinalcommerce.com *.cardinaltrusted.com pay.google.com *.solapayments.com *.cardknox.com photos.pixlee.co *.facebook.com *.paypalobjects.com *.yotpo.com *.vimeo.com vimeo.com *.googletagmanager.com *.xtento.com *.doubleclick.net *.gladly.com *.optimizely.com *.creativecdn.com *.pinterest.com *.listrakbi.com *.cookielaw.org *.noibu.com c.paypal.com checkout.paypal.com assets.braintreegateway.com * speedsize.com *.speedsize.com www.xtento.com 'self' 'unsafe-inline'; img-src *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app www.apptrian.com *.affirm.com *.affirm.ca www.gstatic.com *.solapayments.com *.cardknox.com wac.edgecastcdn.net *.googleadservices.com *.facebook.com *.yotpo.com *.cdninstagram.com *.google-analytics.com *.google.com *.google.com.vn *.google.co.il *.google.com.sg *.google.co.uk *.google.de *.magentocommerce.com *.paypalobjects.com *.ytimg.com *.web-view.net *.googleapis.com *.nagich.co.il vimeo.com *.vimeo.com *.tilebar.com *.zdassets.com *.pxlecdn.com *.cloudfront.net *.roomvo.com *.tilebar-vis.com *.byondxr.com *.searchspring.net *.gladly.com *.edgecastcdn.net *.doubleclick.net *.bing.com *.pinterest.com *.optimizely.com *.adnxs.com *.pubmatic.com *.adingo.jp *.adingo.com *.creativecdn.com *.yahoo.com *.yahoo.net *.33across.com *.mobon.net *.seedtag.com *.clarity.ms *.brcdn.com *.brsrvr.com *.listrakbi.com *.cookielaw.org www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://redchamps.com speedsize.com *.speedsize.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com *.affirm.com *.affirm.ca *.byondxr.com *.tilebar-vis.com https://cdn.cardknox.com/ifields/3.3.2601.2901/ifields.min.js https://cdn.cardknox.com/sdk-3ds/1.1.2601.0701/cardknox-3ds.min.js *.googleapis.com *.gstatic.com cdn.cardknox.com *.cardinalcommerce.com *.cardinaltrusted.com www.gstatic.com *.solapayments.com *.cardknox.com *.turnto.com *.fontawesome.com *.dxpapi.com *.google-analytics.com apis.google.com *.googleadservices.com *.googletagmanager.com *.facebook.net *.doubleclick.net *.analytics.com *.rawgit.com *.nagich.co.il *.luckyorange.com *.xtento.com *.paypal.com *.paypalobjects.com *.forsixty.com *.criteo.com *.searchspring.io *.searchspring.net *.roomvo.io *.roomvo.com *.cloudflareinsights.com *.optimizely.com *.pixlee.com *.pxlecdn.com *.cloudflare.com *.gladly.com *.smooch.io *.bing.com *.creativecdn.com *.pinimg.com *.particularaudience.com *.googletagservices.com *.googlesyndication.com cnstrc.com getrockerbox.com/ *.adnxs.com *.adingo.jp *.adingo.com *.cnstrc.com *.tilebar.com *.pinterest.com *.callrail.com *.clarity.ms *.algoliaradar.com *.brcdn.com *.listrakbi.com *.cloudfront.net *.cookielaw.org *.noibu.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com speedsize.com *.speedsize.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com cdn.cardknox.com/ *.turnto.com *.bootstrapcdn.com *.cloudflare.com *.gladly.com *.brcdn.com *.listrakbi.com *.cookielaw.org *.typekit.net assets.braintreegateway.com speedsize.com *.speedsize.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com speedsize.com *.speedsize.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com www.apptrian.com *.affirm.com *.affirm.ca http://dpm.demdex.net https://api.cardknox.com/threeds/v1/jwt/staging https://kg668dbov0.execute-api.us-east-1.amazonaws.com/stag/log https://www.google.com https://www.gstatic.com api.cardknox.com *.cardinalcommerce.com *.cardinaltrusted.com kg668dbov0.execute-api.us-east-1.amazonaws.com pay.google.com play.google.com cdn.cardknox.com/ *.turnto.com *.dxpapi.com *.doubleclick.net *.analytics.com *.facebook.com *.google-analytics.com *.nagich.co.il player.vimeo.com *.luckyorange.com *.googleapis.com *.visitors.live *.zdassets.com *.searchspring.io *.searchspring.net *.roomvo.io *.roomvo.com cloudflareinsights.com *.cloudflareinsights.com *.optimizely.com *.tilebar-vis.com *.byondxr.com unpkg.com *.unpkg.com *.gladly.com *.smooch.io *.creativecdn.com *.pinimg.com *.particularaudience.com *.googletagservices.com *.googlesyndication.com *.pinterest.com *.cnstrc.com *.cardknox.com *.clarity.ms *.pixlee.com *.algolia.io *.listrakbi.com *.betanetqa.me *.cloudflare.com *.cookielaw.org https://*.noibu.com wss://*.noibu.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com speedsize.com *.speedsize.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src speedsize.com *.speedsize.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri /bnews/csp/report; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://sso.kau.edu.sa; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' data: blob: https: http://localhost:* http://127.0.0.1:*; font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://kau.edu.sa https://www.kau.edu.sa http://localhost:* http://127.0.0.1:* ws://localhost:* ws://127.0.0.1:*; media-src 'self' blob: https://kau.edu.sa https://www.kau.edu.sa http://localhost:* http://127.0.0.1:*; frame-src 'self' https://www.youtube.com https://youtube.com https://www.google.com https://maps.google.com https://www.googletagmanager.com; worker-src 'self' blob:; report-uri /csp-report 1
object-src 'none'; script-src 'nonce-511654997' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; base-uri 'none'; 1
default-src 'self' https://*.ototoy.jp; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.ototoy.jp https://bccks.jp https://cdnjs.cloudflare.com/ajax/libs/jquery.bootstrapvalidator/ https://connect.facebook.net https://platform.instagram.com https://www.instagram.com https://code.jquery.com https://scdn.line-apps.com https://d.line-scdn.net https://embed.nicovideo.jp https://platform.twitter.com https://syndication.twitter.com https://player.vimeo.com https://platform.vine.co https://static-fe.payments-amazon.com https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.ggpht.com https://*.googleusercontent.com https://*.google-analytics.com https://*.googletagmanager.com; style-src 'self' 'unsafe-inline' https://*.ototoy.jp https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cdnjs.cloudflare.com/ajax/libs/jquery.bootstrapvalidator/ https://fonts.googleapis.com; img-src 'self' data: blob: *; font-src 'self' data: https://*.ototoy.jp https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://fonts.gstatic.com; connect-src 'self' data: blob: https://*.ototoy.jp https://payments-fe.amazon.com https://api3.veritrans.co.jp https://*.googleapis.com https://*.gstatic.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat; frame-src 'self' https://bandcamp.com https://m.facebook.com https://mobile.facebook.com https://web.facebook.com https://www.facebook.com https://www.instagram.com https://social-plugins.line.me https://embed.nicovideo.jp https://w.soundcloud.com https://open.spotify.com https://platform.twitter.com https://syndication.twitter.com https://player.vimeo.com https://www.youtube.com https://secure2.arcot.com https://secure4.arcot.com https://dig-acs2.cafis-paynet.jp https://dig3ds.cafis-paynet.jp https://geoissuer.cardinalcommerce.com https://acs-jcn.dnp-cdms.jp https://api.veritrans.co.jp https://*.google.com https://td.doubleclick.net; report-uri /csp-report.php?v=3 1
frame-ancestors 'self'; report-uri https://www.bodyandsoul.com.au/csp-reports 1
font-src fonts.gstatic.com use.typekit.net *.googleapis.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * api.bazaarvoice.com stg.api.bazaarvoice.com *.authorize.net 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.affirm.com *.affirm.ca *.certcapture.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com *.authorize.net *.trustpilot.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.ftcdn.net *.behance.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com *.affirm.com *.affirm.ca *.certcapture.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com services.postcodeanywhere.co.uk https://firebasestorage.googleapis.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com *.affirm.com *.affirm.ca *.certcapture.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com api.addressy.com *.avada.io *.authorize.net *.trustpilot.com *.cloudflare.com https://cdn-scripts.signifyd.com https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.certcapture.com display.ugc.bazaarvoice.com api.addressy.com *.fontawesome.com https://fonts.bunny.net *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com *.affirm.com *.affirm.ca *.certcapture.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com api.addressy.com https://get.geojs.io *.avada.io *.authorize.net https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'nonce-iPW86ImKQgY2RiEqgmwtuw==' 'self' 'unsafe-eval' cdn.orsted.com *.googletagmanager.com *.app.cookieinformation.com cdn.appdynamics.com *.googletagmanager.com *.gstatic.com *.googleoptimize.com www.googleadservices.com *.googleapis.com *.bing.com *.doubleclick.net *.t.co *.pardot.com *.youtube.com *.linkedin.com *.twitter.com *.globenewswire.com *.23video.com delivery.twentythree.com orsted.containers.piwik.pro orsted.piwik.pro *.crazyegg.com unpkg.com cs.lf-discover.com *.puzzel.com *.arcgis.com code.jquery.com *.lfeeder.com orsted-global-graduate-programme.simplecast.com omny.fm cdnjs.cloudflare.com *.bootstrapcdn.com *.defgo.com *.defgo.net *.vimeo.com presscloud.com *.ritzau.dk *.simplecast.com *.elnet.danskenergi.dk *.sli.do *.audioboom.com *.licdn.com *.adsrvr.org *.soundcloud.com *.google.com *.google.com.my *.google.nl *.google.dk *.facebook.net;       style-src 'nonce-iPW86ImKQgY2RiEqgmwtuw==' 'self' cdn.orsted.com fonts.googleapis.com;       style-src-attr 'unsafe-inline' cdn.orsted.com;       img-src 'self' data: cdn.orsted.com *.azureedge.net *.youtube.com *.23video.com delivery.twentythree.com www.googletagmanager.com *.lfeeder.com *.linkedin.com *.doubleclick.net *.pardot.com;       media-src 'self' blob: cdn.orsted.com *.youtube.com *.23video.com delivery.twentythree.com;       font-src 'self' data: fonts.gstatic.com cdn.orsted.com;       frame-src 'self' *.app.cookieinformation.com *.youtube.com *.23video.com delivery.twentythree.com *.google.com *.google.nl *.googletagmanager.com *.doubleclick.net *.pardot.com;       connect-src 'self' *.app.cookieinformation.com *.euroland.com *.eum-appdynamics.com *.googletagmanager.com *.google.com *.doubleclick.net *.googleadservices.com *.crazyegg.com *.linkedin.com orsted.piwik.pro *.pardot.com *.signalfx.com;       worker-src 'self'; 1
frame-ancestors 'self'; report-uri https://kidspot.news.com.au/csp-reports 1
default-src * 'unsafe-inline' data: blob:; report-uri "https://leaderpost.com/wp-json/pmd/v1/csp-report"; report-to csp-endpoint 1
default-src 'self'; script-src 'nonce-e556f9a2-254e-43c7-9a5b-497cb28fc992' 'self' 'strict-dynamic'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://*.aptrinsic.com https://*.bevylabs.com https://*.osano.com https://*.brainfi.sh; font-src 'self' data: https://*.bevylabs.com https://fonts.googleapis.com https://fonts.gstatic.com https://res.cloudinary.com https://consent.trustarc.com https://*.brainfi.sh; img-src 'self' data: blob: https://unpkg.com https://*.aptrinsic.com https://*.bevylabs.com https://*.cloudinary.com https://*.facebook.com https://*.google-analytics.com https://*.gstatic.com https://*.googleapis.com https://storage.googleapis.com https://*.googleusercontent.com https://*.googletagmanager.com https://px.ads.linkedin.com https://www.googletagmanager.com https://www.startupgrind.com https://image.mux.com https://img.youtube.com https://i.ytimg.com https://*.vidyard.com https://i.vimeocdn.com https://cdn.bizible.com https://*.lrkt-in.com https://*.litix.io https://consent.trustarc.com https://cdn.prod.website-files.com https://*.brainfi.sh https://*.adroll.com https://ml314.com https://x.bidswitch.net https://pixel.tapad.com https://pixel.rubiconproject.com https://ps.eyeota.net https://idsync.rlcdn.com https://dsum-sec.casalemedia.com https://us-u.openx.net https://sync.outbrain.com https://sync.taboola.com https://eb2.3lift.com https://image2.pubmatic.com https://ib.adnxs.com https://secure.adnxs.com https://match.adsrvr.org https://t.co https://*.twitter.com https://*.ads-twitter.com https://*.reddit.com https://*.redditstatic.com https://alb.reddit.com https://*.hubspot.com https://*.hubapi.com https://track.hubspot.com https://www.google.com.mx https://www.google.com.ph https://www.google.co.uk https://www.google.fr https://www.google.nl https://www.google.es https://www.google.it https://www.google.pt https://www.google.co.cr https://www.google.co.ke https://www.google.com.ar https://www.google.com.co https://www.google.com.eg https://www.google.com.pe https://www.google.sk https://www.google.kg; frame-src 'self' https://*.cloud.looker.com https://www.google.com/maps/embed/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://*.osano.com https://*.youtube.com https://*.youtube-nocookie.com https://*.exceedlms.com https://embed-cdn.spotifycdn.com https://exceedlms.com https://js.stripe.com/ https://player.vimeo.com https://static.elfsight.com/platform/platform.js https://td.doubleclick.net/ https://www.slideshare.net/ https://bevywidgets.com https://play.vidyard.com https://*.googletagmanager.com https://stream.mux.com https://*.brainfi.sh; connect-src 'self' blob: data: wss: https://*.algolia.io https://*.algolia.net https://*.algolianet.com https://*.aptrinsic.com https://*.bevylabs.com https://*.cloudinary.com https://*.google-analytics.com https://*.google.com https://*.gstatic.com https://*.lr-ingest.io https://*.logrocket.io https://*.lrkt-in.com https://*.mux.com https://*.litix.io https://*.osano.com https://*.posthog.com https://*.stripe.com https://*.zdassets.com https://*.zendesk.com https://*.daily.co https://*.googleapis.com https://*.pluot.blue https://chat.stream-io-api.com https://px.ads.linkedin.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://*.mktoresp.com https://*.fides-cdn.ethyca.com https://*.ethyca.com https://*.adroll.com https://*.intercom.io https://*.intercomcdn.com https://*.twitter.com https://*.ads-twitter.com https://api.segment.io https://cdn.segment.com https://*.sumome.com https://*.brainfi.sh wss://*.brainfi.sh https://*.reddit.com https://*.redditstatic.com https://*.hubspot.com https://*.hubapi.com https://*.hs-scripts.com https://*.hsadspixel.net https://*.hs-banner.com https://*.hs-analytics.net https://*.hotjar.com https://*.hotjar.io https://*.googlesyndication.com https://www.google.com.mx https://www.google.com.ph https://www.google.co.uk https://www.google.fr https://www.google.nl https://www.google.es https://www.google.it https://www.google.pt https://www.google.co.cr https://www.google.co.ke https://www.google.com.ar https://www.google.com.co https://www.google.com.eg https://www.google.com.pe https://www.google.sk https://www.google.kg; media-src 'self' blob: https://*.mux.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://*.bevy.com; upgrade-insecure-requests; report-uri /api/csp-report/ 1
object-src 'none'; block-all-mixed-content; default-src 'self'; img-src 'self' data: https://biblionix.com/ https://demonstration.biblionix.com https://secure.gravatar.com/; style-src 'self' 'unsafe-inline' https://demonstration.biblionix.com https://www.gstatic.com/ https://fonts.googleapis.com/; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://demonstration.biblionix.com https://www.gstatic.com/ https://cdn.walkme.com/; font-src 'self' https://fonts.gstatic.com/ data:; report-uri https://www.biblionix.com/report/?block=0 1
default-src 'self'; img-src 'self' data: https:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://challenges.cloudflare.com; connect-src 'self' https://www.google-analytics.com https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; form-action 'self' 1
base-uri; default-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com https://analytics.google.com https://stats.g.doubleclick.net https://ajax.googleapis.com https://teket.jp/organizer data:; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com https://analytics.google.com https://stats.g.doubleclick.net https://ajax.googleapis.com https://teket.zendesk.com https://zendesk-eu.my.sentry.io https://static.zdassets.com https://ekr.zdassets.com https://api.smooch.io wss://api.smooch.io https://s.clarity.ms https://teket.jp/organizer; form-action; frame-src https://www.google.com/ https://p01.mul-pay.jp; img-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com https://analytics.google.com https://stats.g.doubleclick.net https://ajax.googleapis.com https://teket.zendesk.com https://zendesk-eu.my.sentry.io https://static.zdassets.com https://ekr.zdassets.com https://api.smooch.io wss://api.smooch.io https://teket.jp/organizer data:; object-src; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com https://analytics.google.com https://stats.g.doubleclick.net https://ajax.googleapis.com https://teket.zendesk.com https://zendesk-eu.my.sentry.io https://static.zdassets.com https://ekr.zdassets.com https://api.smooch.io wss://api.smooch.io https://p01.mul-pay.jp 'unsafe-inline' 'unsafe-eval' blob:; script-src-elem 'self' https://www.googletagmanager.com https://www.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com https://analytics.google.com https://stats.g.doubleclick.net https://ajax.googleapis.com https://teket.zendesk.com https://zendesk-eu.my.sentry.io https://static.zdassets.com https://ekr.zdassets.com https://api.smooch.io wss://api.smooch.io https://www.clarity.ms https://cdnjs.cloudflare.com https://code.jquery.com https://connect.facebook.net 'unsafe-inline' blob:; style-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com https://analytics.google.com https://stats.g.doubleclick.net https://ajax.googleapis.com https://teket.zendesk.com https://zendesk-eu.my.sentry.io https://static.zdassets.com https://ekr.zdassets.com https://api.smooch.io wss://api.smooch.io 'unsafe-inline' 1
default-src 'self'; child-src 'none'; connect-src 'self' https://*.bozar.be https://*.contentsquare.net https://*.facebook.com https://*.google-analytics.com https://*.onetrust.com https://*.secutix.com https://*.visualwebsiteoptimizer.com https://*.vwo.com https://o419740.ingest.sentry.io/api/5336472/envelope/; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://*.googletagmanager.com https://*.google.com https://*.matterport.com https://*.soundcloud.com https://*.spotify.com https://*.vimeo.com https://*.youtube.com; img-src 'self' https://*.cookielaw.org https://*.facebook.com https://*.googletagmanager.com https://*.vimeocdn.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.bozar.be https://*.hotjar.com https://*.cookielaw.org https://*.contentsquare.net https://*.googletagmanager.com cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://script.crazyegg.com https://unpkg.com https://www.google.com; script-src-elem 'self' 'unsafe-inline' https://*.bozar.be https://*.cookielaw.org https://*.facebook.net https://*.googletagmanager.com https://*.hotjar.com https://matomojs.trackify.info https://*.visualwebsiteoptimizer.com https://*.vwo.com https://*.youtube.com cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://script.crazyegg.com https://unpkg.com https://www.google.com; style-src 'self' 'report-sample' 'unsafe-inline' https://unpkg.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://unpkg.com; worker-src 'self'; base-uri 'none'; form-action 'self'; frame-ancestors 'self' https://*.bozar.be https://*.secutix.com; report-uri https://o419740.ingest.sentry.io/api/5336472/security/?sentry_key=352ab04e14224ad0804d381177289653&sentry_environment=prod&sentry_release=20260911161355; block-all-mixed-content 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://www.clarity.ms https://scripts.clarity.ms https://www.googletagmanager.com https://maps.googleapis.com https://translate.google.com https://translate.googleapis.com https://translate-pa.googleapis.com https://static.addtoany.com https://connect.facebook.net https://addtocalendar.com https://js-agent.newrelic.com https://cse.google.com https://www.google.com https://partner.googleadservices.com https://ep2.adtrafficquality.google https://cdn.knightlab.com https://unpkg.com/@googlemaps/markerclustererplus/dist/index.min.js; object-src 'none'; style-src 'self' 'unsafe-inline' https://addtocalendar.com https://translate.googleapis.com https://fonts.googleapis.com https://use.fontawesome.com https://www.gstatic.com https://www.google.com https://cdn.knightlab.com; img-src 'self' s3: data: https://files.chicagoparkdistrict.com https://maps.googleapis.com https://maps.gstatic.com https://www.gstatic.com https://ssl.gstatic.com https://static.addtoany.com https://www.google.com https://fonts.gstatic.com https://clients1.google.com https://ep1.adtrafficquality.google https://stats.g.doubleclick.net https://cdn.jsdelivr.net https://i.vimeocdn.com https://i.ytimg.com; media-src 'self' s3: https://files.chicagoparkdistrict.com https://ssl.gstatic.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://static.addtoany.com https://cse.google.com https://syndicatedsearch.goog https://ep2.adtrafficquality.google https://chiparks.maps.arcgis.com https://arcg.is https://w.soundcloud.com https://app.powerbigov.us; frame-ancestors 'self'; child-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://static.addtoany.com https://cse.google.com https://syndicatedsearch.goog https://ep2.adtrafficquality.google https://chiparks.maps.arcgis.com https://arcg.is https://w.soundcloud.com https://app.powerbigov.us; font-src 'self' data: https://fonts.gstatic.com https://use.fontawesome.com https://cdn.knightlab.com; connect-src 'self' https://data.cityofchicago.org https://maps.googleapis.com https://www.google-analytics.com https://analytics.google.com https://translate.googleapis.com https://translate-pa.googleapis.com https://region1.analytics.google.com https://bam.nr-data.net https://js-agent.newrelic.com https://*.clarity.ms https://report.clarity.ms https://ep1.adtrafficquality.google https://syndicatedsearch.goog https://stats.g.doubleclick.net https://www.google.com https://www.googletagmanager.com; report-uri /report-csp-violation 1
script-src 'unsafe-inline' 'unsafe-eval' *.alicdn.com *.aliyun.com *.alyasset.com *.alcasset.com *.alipay.com log.mmstat.com ynuf.aliapp.org *.alipayobjects.com local.alipcsec.com:6691 appx appx-t2; style-src 'unsafe-inline' *.alicdn.com *.aliyun.com *.alipay.com *.alipayobjects.com; font-src data: *.alicdn.com *.aliyun.com *.alipayobjects.com; frame-src *.aliyun.com *.alicdn.com *.aliyuncs.com *.alipay.com *.taobao.com *.alibabacloud.com *.1688.com xstore.insights.1688.com; report-uri //www.aliyun.com/api/log/csp-report 1
default-src 'self'; script-src 'nonce-0+zO+GFEFh4Z/vOJjffagg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
img-src 'data' data: https://assets.eetgroup.com https://c.clarity.ms https://cdne-clientresources-cdn-eet-prod-lcd.azureedge.net https://content.eetgroup.com https://content-media.eetgroup.com https://fonts.gstatic.com https://googleads.g.doubleclick.net https://img.youtube.com https://inishop.com https://m2.getsitecontrol.com https://media.eetgroup.com https://product-images.eetgroup.com https://stats.g.doubleclick.net https://www.eetgroup.com https://www.google.dk https://www.googletagmanager.com; font-src data: https://at.alicdn.com https://cdne-clientresources-cdn-eet-prod-lcd.azureedge.net https://use.typekit.net; script-src eval 'eval' https://googleads.g.doubleclick.net https://l.getsitecontrol.com https://s2.getsitecontrol.com https://scripts.clarity.ms https://snap.licdn.com https://www.clarity.ms 'unsafe-eval' 'unsafe-inline' 'wasm-eval'; connect-src https://a.clarity.ms https://ad.doubleclick.net https://api.eetgroup.com https://b.clarity.ms https://c.clarity.ms https://cdn.jsdelivr.net https://cdne-clientresources-cdn-eet-prod-lcd.azureedge.net https://consentcdn.cookiebot.com https://content.eetgroup.com https://d.clarity.ms https://e.clarity.ms https://events.getsitectrl.com https://f.clarity.ms https://func-eetdis-wl-prod.azurewebsites.net https://func-eetdis-wl-test.azurewebsites.net https://g.clarity.ms https://googleads.g.doubleclick.net https://h.clarity.ms https://i.clarity.ms https://j.clarity.ms https://k.clarity.ms https://l.clarity.ms https://l.getsitecontrol.com https://m.clarity.ms https://maps.googleapis.com https://n.clarity.ms https://o.clarity.ms https://p.clarity.ms https://q.clarity.ms https://r.clarity.ms https://region1.analytics.google.com https://report.clarity.ms https://s.clarity.ms https://stats.g.doubleclick.net https://t.clarity.ms https://u.clarity.ms https://v.clarity.ms https://vimeo.com https://www.google.com https://www.google.dk https://www.googletagmanager.com https://x.clarity.ms https://y.clarity.ms https://z.clarity.ms; script-src-elem https://cdne-clientresources-cdn-eet-prod-lcd.azureedge.net https://connect.facebook.net https://consent.cookiebot.com https://consentcdn.cookiebot.com https://fde-client-resources-prod-eet-hub-adbjbjgscsguggfj.z01.azurefd.net https://googleads.g.doubleclick.net https://l.getsitecontrol.com https://s2.getsitecontrol.com https://scripts.clarity.ms https://snap.licdn.com https://storageeetprodlcd.blob.core.windows.net https://www.clarity.ms https://www.google.com https://www.googletagmanager.com https://www.gstatic.com 'inline' 'unsafe-inline'; style-src-elem https://cdne-clientresources-cdn-eet-prod-lcd.azureedge.net https://fde-client-resources-prod-eet-hub-adbjbjgscsguggfj.z01.azurefd.net 'inline' 'unsafe-inline'; frame-src https://consentcdn.cookiebot.com https://form.jotform.com https://player.vimeo.com https://www.google.com; default-src https://googleads.g.doubleclick.net https://snap.licdn.com 'self'; media-src https://media.eetgroup.com; style-src-attr 'inline'; report-uri /csp-report; report-to csp-endpoint 1
object-src 'none';base-uri 'self';script-src 'nonce-ziJATzGiF9jfKWFqbq61Kg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; connect-src 'self' www.apfelkiste.ch devnull.apfelkiste.ch challenges.cloudflare.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net *.google.com pagead2.googlesyndication.com translate.googleapis.com rumdash.io api.zakeke.com renderer.dealoo.test *.dealoo.ch api.fraud0.com *.dynamicyield.com *.dynamicyield.eu obseu.sd570596.cheq.apfelkiste.ch connect.facebook.net *.creativecdn.com; script-src 'nonce-28d879cc-b47d-4a1d-83ad-5c08d33007be' 'strict-dynamic' 'unsafe-eval'; style-src fonts.googleapis.com www.gstatic.com accounts.google.com *.dealoo.ch *.dynamicyield.com 'unsafe-inline'; img-src 'self' www.apfelkiste.ch cms-data.apfelkiste.ch media.apfelkiste.ch data: blob: i.ytimg.com i.vimeocdn.com *.googletagmanager.com *.google-analytics.com *.g.doubleclick.net *.google.com csi.gstatic.com www.google.de www.google.ch www.google.fr fonts.gstatic.com *.dealoo.ch api.fraud0.com *.dynamicyield.com obseu.sd570596.cheq.apfelkiste.ch log.pinterest.com *.creativecdn.com; worker-src 'self' blob:; child-src 'self' blob: www.youtube.com player.vimeo.com challenges.cloudflare.com www.googletagmanager.com accounts.google.com www.google.com portal.zakeke.com/ *.dealoo.ch obseu.sd570596.cheq.apfelkiste.ch *.creativecdn.com; frame-src 'self' www.youtube.com player.vimeo.com challenges.cloudflare.com www.googletagmanager.com accounts.google.com www.google.com portal.zakeke.com/ *.dealoo.ch obseu.sd570596.cheq.apfelkiste.ch *.creativecdn.com; font-src 'self' fonts.gstatic.com; media-src 'self' cms-data.apfelkiste.ch; frame-ancestors 'self' cms.apfelkiste.ch; report-uri https://devnull.apfelkiste.ch/api/8/security/?sentry_key=291d0d843488451caadd66b48b4a6ae4 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com fonts.googleapis.com https://www.gstatic.com https://fonts.gstatic.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.certcapture.com *.weltpixel.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.wesupply.xyz https://wesupplylabs.com guarantee-cdn.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googletagmanager.com *.doubleclick.net www.xtento.com *.yotpo.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com maps.googleapis.com maps.gstatic.com guarantee-cdn.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com www.xtento.com cdn.xtento.com *.yotpo.com dhv2ziothpgrr.cloudfront.net https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com maps.googleapis.com get.geojs.io *.cloudflare.com guarantee-cdn.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net www.xtento.com cdn.xtento.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com https://static.klaviyo.com *.fontawesome.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.googleapis.com *.addtoany.com assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com *.yotpo.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com maps.googleapis.com http://dpm.demdex.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' cdn.plaid.com js.stripe.com www.googletagmanager.com connect.facebook.net utt.impactcdn.com www.redditstatic.com googleads.g.doubleclick.net q.quora.com cdn-cookieyes.com widget.intercom.io js.intercomcdn.com 'unsafe-inline'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; style-src 'self' 'unsafe-inline'; connect-src 'self' *.joinkudos.com api-iam.intercom.io events.launchdarkly.com app.launchdarkly.com o1336925.ingest.sentry.io clientstream.launchdarkly.com cognito-idp.us-east-2.amazonaws.com kudos-upload-prod.s3.us-east-2.amazonaws.com trykudos.github.io connect.facebook.net googleads.g.doubleclick.net stats.g.doubleclick.net www.google-analytics.com www.google.com analytics.google.com www.googleadservices.com mpc-prod-24-s6uit34pua-uw.a.run.app www.facebook.com api.mapbox.com app.adjust.com app.adjust.world pixel-config.reddit.com browser-intake-us5-datadoghq.com kudos.sjv.io *.conversionsapigateway.com www.googletagmanager.com cdn-cookieyes.com log.cookieyes.com; font-src 'self' data: use.typekit.net; frame-src cdn.plaid.com trykudos.github.io production.widget.scribeup.io www.googletagmanager.com js.stripe.com; img-src 'self' data: *.joinkudos.com logos.ntropy.com www.google.com googleads.g.doubleclick.net alb.reddit.com www.facebook.com connect.facebook.net googleads.g.doubleclick.net stats.g.doubleclick.net www.googletagmanager.com www.googleadservices.com www.ojrq.net q.quora.com cdn-cookieyes.com; media-src 'self' *.joinkudos.com; worker-src 'self' blob:; report-uri https://joinkudos.com/csp-report; 1
default-src 'self' https:; base-uri 'self'; connect-src 'self' https: wss:; font-src 'self' https: data:; form-action 'self' https:; frame-src 'self' https:; img-src 'self' https: data: blob:; object-src 'none'; script-src 'self' https: 'nonce-tZ4ogxpNng4GJ+pKrxIVfw=='; style-src 'self' https: 'unsafe-inline' 1
default-src 'none'; form-action 'none'; frame-ancestors 'none'; connect-src 'self' web-analytics.intelliscapesolutions.com analytics.intelliscapesolutions.com; font-src 'self' fonts.gstatic.com; frame-src www.google.com; img-src 'self' web-analytics.intelliscapesolutions.com analytics.intelliscapesolutions.com; manifest-src 'self'; script-src-elem 'self' 'unsafe-inline' donorbox.org web-analytics.intelliscapesolutions.com analytics.intelliscapesolutions.com www.google.com www.gstatic.com cdn.jsdelivr.net static.cloudflareinsights.com; script-src 'unsafe-eval' 'self' 'unsafe-inline' donorbox.org web-analytics.intelliscapesolutions.com analytics.intelliscapesolutions.com www.google.com www.gstatic.com; style-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com; style-src 'self' 'unsafe-eval' 'unsafe-inline' fonts.googleapis.com; report-uri https://intelliscape.report-uri.com/r/d/csp/wizard 1
default-src 'none'; report-uri /next-external/log/csp/violations; report-to csp-violations; connect-src 'self' wss://www.nordnet.se https://www.googletagmanager.com https://analytics.nordnet.se https://cdn.prod.nntech.io https://files.nordnet.se https://api.prod.nntech.io https://experimentation.public.prod.nntech.io https://www.google.com https://storage.googleapis.com https://www.recaptcha.net https://relay.prod.nntech.io; font-src 'self' https://cdn.prod.nntech.io https://files.nordnet.se; frame-src 'self' https://analytics.nordnet.se https://10961666.fls.doubleclick.net https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://w.soundcloud.com https://embed.acast.com https://link.tink.com https://www.tv2.no https://checkout.trustly.com https://www.recaptcha.net https://www.google.com https://t.email.nordnet.se https://dashboard.fundrella.com; img-src 'self' https://www.googletagmanager.com https://analytics.nordnet.se https://cdn.prod.nntech.io https://files.nordnet.se https://api.prod.nntech.io data: blob: https://cdn.tink.se https://images.ctfassets.net https://i.vimeocdn.com https://img.youtube.com https://i.scdn.co https://www.recaptcha.net; manifest-src 'self'; media-src https://cdn.prod.nntech.io https://files.nordnet.se https://videos.ctfassets.net; object-src 'self'; script-src 'self' 'nonce-8253542a-6ed2-429d-ab1f-5b554d118bdd' https://analytics.nordnet.se https://cdn.prod.nntech.io https://files.nordnet.se https://www.recaptcha.net https://www.google.com; script-src-attr 'none'; style-src 'unsafe-inline' 'self' https://cdn.prod.nntech.io https://files.nordnet.se; worker-src 'none'; base-uri 'none'; form-action 'self' https://pvu.nets.no https://pvu.avtalegiro.no https://online.alandsbanken.fi https://verkkopankki.danskebank.fi https://verkkomaksu.handelsbanken.fi https://epmt.nordea.fi https://identify.nordea.com https://verkkomaksu.poppankki.fi https://verkkomaksu.saastopankki.fi https://online.s-pankki.fi https://auth.aktia.fi https://kirjaudu.aktia.fi https://ebank.aktia.fi; frame-ancestors 'self' https://app.contentful.com https://app.sigmastocks.com; 1
style-src-elem cdn.consentmanager.net cdn.honey.io www.bing.com r.bing.com *.hagel-shop.de *.hagel-shop.at 'unsafe-inline' tracking.paqato.com static-tracking.klaviyo.com m2stage-blog.hagel-shop.de www.gstatic.com fonts.googleapis.com; script-src-elem rum.hlx.page tracking.paqato.com platform.instagram.com dynamic.criteo.com www.googletagmanager.com www.dwin1.com kerastase-quiz.vercel.app unpkg.com lantern.roeyecdn.com www.instagram.com commerce.adobedtm.com cdn.consentmanager.net a.delivery.consentmanager.net www.clarity.ms static-eu.payments-amazon.com magento-recs-sdk.adobe.net bat.bing.com player.reetags.com connect.facebook.net analytics.tiktok.com js.mollie.com sslwidget.criteo.com; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com data: *.paypal.com *.paypalobjects.com applepay.cdn-apple.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io d3dc1lgancj6l0.cloudfront.net maxcdn.bootstrapcdn.com https://widgets.trustedshops.com https://integrations.etrusted.com cdn.elev.io media.flixfacts.com static.klaviyo.com tracking.paqato.com account.affilitizer.com at.alicdn.com cdn-uicons.flaticon.com cdn.faceworks.nl cdn.honey.io media.flixcar.com moz-extension: r2cdn.perplexity.ai data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com http://*.facebook.com https://*.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.hagel-shop.de 'self' www.hagel-shop.de 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://cdn.consentmanager.net https://delivery.consentmanager.net https://www.googletagmanager.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.sandbox.paypal.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://www.google.com/ http://*.facebook.com https://*.facebook.com js.mollie.com www.awin1.com cdn.consentmanager.net *.criteo.com *.criteo.net *.dixa.io *.doubleclick.net *.durchsichtig.xyz *.hagel-shop.de *.hotjar.com media.flixcar.com *.klarinsights.net www.paypalobjects.com www.sovendus-benefits.com www.sovendus-campaign.com www.sovendus-connect.com www.sovendus-network.com bat.bing.com www.instagram.com return.4sellers.de 10.10.10.1:8090 bcsgsrv.com bispadisch.de caclk.com cdn.elev.io cmodul.solutenetwork.com div.show fwwh.werkhaus-bielefeld.de:8091 gateway.zscaler.net gateway.zscloud.net hipodi.com kerastase-quiz.vercel.app oponas.com ptclk.com www.explorr.net www.pricejoe.com gateways.zscloud.net ifw.noel.gv.at 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https://cdn.consentmanager.net https://delivery.consentmanager.net validate.fishpig.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.sandbox.paypal.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io http://*.linkedin.com https://*.linkedin.com http://*.facebook.com https://*.facebook.com http://www.google.com/ http://www.google.de/ https://www.google.de/ https://www.googletagmanager.com http://www.googletagmanager.com userlike-cdn-operators.s3-eu-west-1.amazonaws.com https://widgets.trustedshops.com/ https://www.mollie.com https://api.mapbox.com https://widgets.trustedshops.com https://integrations.etrusted.com sync.1rx.io ad.360yield.com eb2.3lift.com *.adnxs.com *.agkn.com www.awin1.com *.bing.com *.bing.net *.bidswitch.net *.casalemedia.com *.cloudfront.net *.consentmanager.net *.criteo.com public-prod-dspcookiematching.dmxleo.com *.doubleclick.net e1.emxdgt.com media.flixcar.com *.flix360.com *.google.com *.google.de *.googletagmanager.com fonts.gstatic.com *.hagel-shop.de id5-sync.com matching.ivitrack.com contextual.media.net exchange.mediavine.com visitor.omnitagjs.com sync.outbrain.com jadserve.postrelease.com simage2.pubmatic.com *.roeye.com pixel.rubiconproject.com match.sharethrough.com rtb-csync.smartadserver.com criteo-sync.teads.tv *.tiktok.com criteo-partners.tremorhub.com a.twiago.com *.taboola.com sync.targeting.unrulymedia.com t.ssl.ak.dynamic.tiles.virtualearth.net www.wepowerconnections.com ad.yieldlab.net sync-criteo.ads.yieldmo.com *.zenaps.com c.clarity.ms assets.paqato.com www.google.hu www.google.es csm.nl3.eu.criteo.net www.google.nl *.hagel-shop.at bat.bing.com blob: client-side-metrics.fr3.eu.criteo.net client-side-metrics.nl3.eu.criteo.net d3k81ch9hvuctc.cloudfront.net google.com hagel-de.ddev.site media.flixfacts.com modular.flix360.io static-eu.payments-amazon.com t0.ssl.ak.dynamic.tiles.virtualearth.net t1.ssl.ak.dynamic.tiles.virtualearth.net www.google.ae www.google.am www.google.at www.google.ba www.google.be www.google.bg www.google.ca www.google.ch www.google.co.il www.google.co.in www.google.co.kr www.google.co.th www.google.co.uk www.google.co.uz www.google.co.za www.google.com.au www.google.com.br www.google.com.eg www.google.com.hk www.google.com.lb www.google.com.mt www.google.com.mx www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.cz www.google.de www.google.dk www.google.ee www.google.fi www.google.fr www.google.gr www.google.hr www.google.ie www.google.it www.google.jo www.google.li www.google.lu www.google.lv www.google.md www.google.mk www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk www.google.tn www.zenaps.com www.hagel-shop.at www.googleads.g.doubleckick.net www.google.com.ro data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.googletagmanager.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de jsd-widget.atlassian.com https://cdn.consentmanager.net https://delivery.consentmanager.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com https://connect.facebook.net/ https://snap.licdn.com/li.lms-analytics/insight.min.js http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io unsafe-inline userlike-cdn-widgets.s3-eu-west-1.amazonaws.com d3dc1lgancj6l0.cloudfront.net api.userlike.com http://www.google.com/recaptcha/ https://widgets.trustedshops.com/ js.mollie.com https://widgets.trustedshops.com https://integrations.etrusted.com *.hagel-shop.de *.hagel-shop.at *.ablyft.com www.awin1.com *.bing.com *.clarity.ms *.consentmanager.net *.criteo.com messenger.dixa.io www.dwin1.com cdn.elev.io prod.flixgvid.flix360.io media.flixcar.com media.flixfacts.com *.google-analytics.com *.googleoptimize.com *.hotjar.com lantern.roeyecdn.com lantern.roeye.com the.sciencebehindecommerce.com *.sovendus.com www.sovendus-benefits.com www.sovendus-campaign.com www.sovendus-connect.com www.sovendus-network.com analytics.tiktok.com *.virtualearth.net www.zeitung-direkt.de tracking.paqato.com rum.hlx.page 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com *.magento-datasolutions.com *.magento-ds.com https://static.klaviyo.com maxcdn.bootstrapcdn.com https://widgets.trustedshops.com https://integrations.etrusted.com *.bing.com media.flixcar.com *.googletagmanager.com css/light.theme.css static-tracking.klaviyo.com tracking.paqato.com www.gstatic.com 'unsafe-inline' 'self' 'unsafe-inline'; object-src https://cdn.consentmanager.net https://delivery.consentmanager.net data: 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com https://cdn.consentmanager.net https://delivery.consentmanager.net http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.hagel-shop.de data: mcprod.hagel-shop.de media.flixfacts.com youtube.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de jsd-widget.atlassian.com api-private.atlassian.com https://cdn.consentmanager.net https://delivery.consentmanager.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.sandbox.paypal.com http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com http://salesviewer.org/ userlike-cdn-widgets.s3-eu-west-1.amazonaws.com autocomplete2.postdirekt.de *.trustedshops.com *.etrusted.com *.ablyft.com magento-recs-sdk.adobe.net commerce.adobedtm.com *.bing.com *.bing.net *.clarity.ms *.consentmanager.net *.dixa.io *.criteo.com *.doubleclick.net *.durchsichtig.xyz *.elev.io media.flixcar.com maps.googleapis.com *.google-analytics.com *.google.de *.hagel-shop.de *.hotjar.com *.hotjar.io *.klarinsights.net the.sciencebehindecommerce.com *.sovendus.com analytics.tiktok.com unpkg.com/@adobe/ www.wepowerconnections.com tracking.paqato.com api-js.datadome.co api.killadsapi.com api.vid-adblocker.com cmodul.solutenetwork.com data: overbridgenet.com rt.flix360.com static-eu.payments-amazon.com update.adblock360.org www.google.at www.google.ba www.google.be www.google.bg www.google.ca www.google.ch www.google.co.il www.google.co.in www.google.co.kr www.google.co.th www.google.co.uk www.google.com.eg www.google.com.hk www.google.com.mx www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.vn www.google.dk www.google.es www.google.fi www.google.fr www.google.gr www.google.hr www.google.hu www.google.it www.google.lt www.google.lu www.google.mk www.google.nl www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk www.google.tn rum.hlx.page analytics-ipv6.tiktokw.us www.google.cz 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com https://cdn.consentmanager.net https://delivery.consentmanager.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.shockmedia.com.ar https://www.youtube.com https://s.ytimg.com https://platform.twitter.com https://connect.facebook.net https://www.instagram.com https://*.gatekeeperconsent.com https://*.ezojs.com https://ezoicanalytics.com https://*.ezoic.net https://*.ezodn.com https://pagead2.googlesyndication.com https://securepubads.g.doubleclick.net https://www.googletagservices.com https://www.googletagmanager.com https://*.adtrafficquality.google https://fundingchoicesmessages.google.com https://*.cleverwebserver.com https://*.clvrads.com https://cads.adsboosters.xyz https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; media-src 'self' blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://imbtgnvsoydhotevzcfu.supabase.co wss://imbtgnvsoydhotevzcfu.supabase.co https://*.shockmedia.com.ar https://*.gatekeeperconsent.com https://*.ezojs.com https://ezoicanalytics.com https://*.ezoic.net https://*.ezodn.com https://pagead2.googlesyndication.com https://securepubads.g.doubleclick.net https://*.doubleclick.net https://*.googlesyndication.com https://*.adtrafficquality.google https://csi.gstatic.com https://www.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://cloudflareinsights.com https://fundingchoicesmessages.google.com https://*.cleverwebserver.com https://*.clvrads.com https://cads.adsboosters.xyz; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.facebook.com https://www.instagram.com https://platform.twitter.com https://t.me https://*.ezodn.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://tpc.googlesyndication.com https://*.googlesyndication.com https://*.adtrafficquality.google https://www.google.com https://*.cleverwebserver.com https://*.clvrads.com https://cleveradvertising.com 1
default-src 'self'; img-src data: blob: *; script-src-elem 'self' 'strict-dynamic' assets.ubuntu.com www.google-analytics.com www.googletagmanager.com www.youtube.com asciinema.org player.vimeo.com script.crazyegg.com www.googleadservices.com js.zi-scripts.com *.g.doubleclick.net www.google.com www.gstatic.com www.brighttalk.com snap.licdn.com connect.facebook.net maps.googleapis.com www.redditstatic.com munchkin.marketo.net *.googlesyndication.com cdn.jsdelivr.net https://esm.sh https://cdn.jsdelivr.net buttons.github.io cdn.livechatinc.com api.livechatinc.com secure.livechatinc.com www.tfaforms.com 'nonce-kDXwxHqEvjP8nDdOUGju9w'; font-src 'self' assets.ubuntu.com fonts.google.com cdn.livechatinc.com secure.livechatinc.com; script-src 'self' blob: 'wasm-unsafe-eval' 'nonce-kDXwxHqEvjP8nDdOUGju9w'; connect-src 'self' ubuntu.com analytics.google.com www.googletagmanager.com o4510662863749120.ingest.de.sentry.io www.google-analytics.com *.crazyegg.com *.g.doubleclick.net ad.doubleclick.net *.clarity.ms bat.bing.com bat.bing.net www.googleadservices.com js.zi-scripts.com *.google-analytics.com px.ads.linkedin.com ws.zoominfo.com youtube.com google.com www.google.ad www.google.ae www.google.al www.google.am www.google.as www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cat www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.cn www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.com www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.nr www.google.nu www.google.pl www.google.pn www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.st www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu www.google.ws fonts.google.com maps.googleapis.com pixel-config.reddit.com www.redditstatic.com conversions-config.reddit.com https://esm.sh https://lottie.host https://cdn.jsdelivr.net *.analytics.google.com www.facebook.com *.googlesyndication.com *.mktoresp.com assets.ubuntu.com api.github.com raw.githubusercontent.com api.livechatinc.com cdn.livechatinc.com secure.livechatinc.com web.facebook.com www.tfaforms.com unpkg.com; frame-src 'self' assets.ubuntu.com *.doubleclick.net *.crazyegg.com www.youtube.com/ asciinema.org player.vimeo.com www.googletagmanager.com www.google.com www.brighttalk.com cdn.livechatinc.com secure.livechatinc.com cdn.livechat-static.com; style-src 'self' cdn.jsdelivr.net www.tfaforms.com 'unsafe-inline'; media-src 'self' res.cloudinary.com assets.ubuntu.com; child-src 'self' blob: youtube.com google.com fonts.google.com api.livechatinc.com cdn.livechatinc.com secure.livechatinc.com; form-action 'self' https://pages.ubuntu.com https://ubuntu.com https://www.tfaforms.com; object-src 'none'; base-uri 'self'; worker-src 'self' blob:; report-uri /csp-report; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.cookielaw.org https://optly.heap.io https://www.googleoptimize.com https://www.googletagmanager.com https://cdn.us.heap-api.com https://marketo.clearbit.com https://*.wistia.net https://js.chilipiper.com https://js.driftt.com https://*.clearbit.com https://app-ab33.marketo.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.cookielaw.org https://*.ctfassets.net; img-src 'self' data: https://*.ctfassets.net https://www.google-analytics.com https://www.googletagmanager.com https://*.wistia.net https://heapanalytics.com https://*.clearbit.com https://*.doubleclick.net; connect-src 'self' https://*.contentful.com https://*.heap-api.com https://heapanalytics.com https://www.google-analytics.com https://*.wistia.net https://*.doubleclick.net https://*.cookielaw.org https://app-ab33.marketo.com; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://*.wistia.net https://*.marketo.com https://*.chilipiper.com; worker-src 'self' blob:; manifest-src 'self'; base-uri 'self'; form-action 'self' https://*.marketo.com; frame-ancestors 'self'; media-src 'self' https://*.wistia.net blob:; object-src 'none' 1
require-trusted-types-for 'script'; report-uri /api/csp-report 1
script-src 'self' *.fallcoweb.it fallcoweb.it *.portalenotarile.it portalenotarile.it 'unsafe-eval' 'nonce-vj2nyaQW3+zmoFCg8esovZh8aosgWCmmlib1k6Sabps=' 'strict-dynamic' 'report-sample';  script-src-attr 'unsafe-inline' 'report-sample';  img-src http: https: data: blob: ;  object-src 'self' firma.fallcoweb.it firma-test.fallcoweb.it;  base-uri 'self';  frame-ancestors 'self' *.fallcoweb.it fallcoweb.it *.portalenotarile.it portalenotarile.it;  report-uri https://o4510754677194752.ingest.de.sentry.io/api/4510872859639888/security/?sentry_key=67749a8c401880af5dd5dacefaff505d; 1
default-src 'none'; report-uri /api/sec-csp/110000764/report 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://*.googletagmanager.com https://www.google.com https://www.gstatic.com https://maps.googleapis.com https://*.yotpo.com https://static.zdassets.com https://*.zendesk.com https://cdn.scarabresearch.com https://static.scarabresearch.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://connect.facebook.net https://js.adsrvr.org https://www.clarity.ms https://scripts.clarity.ms https://static.hotjar.com https://script.hotjar.com https://seoab.io https://*.usercentrics.eu https://*.cmp.usercentrics.eu https://cdn.jsdelivr.net https://app.checkout.australia-southeast1.gcp.commercetools.com https://*.assets.australia-southeast1.gcp.3.commercetools.app https://checkoutshopper-live.adyen.com https://checkoutshopper-live-au.adyen.com https://checkoutshopper-test.adyen.com https://pay.google.com https://www.paypal.com https://www.sandbox.paypal.com https://applepay.cdn-apple.com https://www.youtube.com https://player.vimeo.com; style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net https://fonts.googleapis.com https://*.yotpo.com https://app.checkout.australia-southeast1.gcp.commercetools.com https://checkoutshopper-live.adyen.com https://checkoutshopper-live-au.adyen.com https://checkoutshopper-test.adyen.com https://embed.typeform.com; font-src 'self' https://use.typekit.net https://fonts.gstatic.com data: https://applepay.cdn-apple.com https://*.yotpo.com; img-src 'self' data: blob: https://images.cdn.australia-southeast1.gcp.commercetools.com https://images.ctfassets.net https://videos.ctfassets.net https://bynder.beaconlighting.com.au https://assets.beaconlighting.com.au https://www.beaconlighting.com.au https://beacon-lighting-assets.s3.ap-southeast-2.amazonaws.com https://beacon-lighting-assets-prod.s3.ap-southeast-2.amazonaws.com https://static.pxlecdn.com https://www.googletagmanager.com https://*.google-analytics.com https://www.gstatic.com https://www.google.com https://www.google.com.au https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.facebook.com https://insight.adsrvr.org https://*.hotjar.com https://*.clarity.ms https://*.usercentrics.eu https://*.cmp.usercentrics.eu https://maps.googleapis.com https://maps.gstatic.com https://*.yotpo.com https://p.yotpoapi.com https://*.zdassets.com https://*.zendesk.com https://checkoutshopper-live.adyen.com https://checkoutshopper-live-au.adyen.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.cdn.adyen.com https://checkoutshopper-test.cdn.adyen.com https://pay.google.com https://*.paypal.com https://*.paypalobjects.com https://applepay.cdn-apple.com https://img.youtube.com https://i.ytimg.com https://i.vimeocdn.com https://ade.googlesyndication.com; connect-src 'self' https://*.algolia.net https://*.algolianet.com https://*.algolia.io https://cdn.contentful.com https://preview.contentful.com https://images.ctfassets.net https://assets.ctfassets.net https://dev-api.beaconlighting.com.au https://api.beaconlighting.com.au https://api-ct-bff.beaconlighting.com.au https://api-ct-bff-staging.beaconlighting.com.au https://cognito-idp.ap-southeast-2.amazonaws.com https://cognito-identity.ap-southeast-2.amazonaws.com https://app.checkout.australia-southeast1.gcp.commercetools.com https://checkout.australia-southeast1.gcp.commercetools.com https://*.australia-southeast1.gcp.3.commercetools.app https://checkoutshopper-live.adyen.com https://checkoutshopper-live-au.adyen.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.cdn.adyen.com https://checkoutshopper-test.cdn.adyen.com https://checkoutanalytics-live.adyen.com https://checkoutanalytics-test.adyen.com https://pay.google.com https://*.paypal.com https://maps.googleapis.com https://*.yotpo.com https://www.google.com https://distillery.pixlee.co https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://www.googletagmanager.com https://www.google.com.au https://ad.doubleclick.net https://stats.g.doubleclick.net https://www.googleadservices.com https://google.com https://www.facebook.com https://7s-d309b5b93ece4e188e0aa4e9c7906f0f.ecs.us-west-1.on.aws https://insight.adsrvr.org https://*.clarity.ms https://*.hotjar.com wss://*.hotjar.com https://*.hotjar.io https://recommender.scarabresearch.com https://webchannel-content.eservice.emarsys.net https://*.usercentrics.eu https://*.cmp.usercentrics.eu https://*.zdassets.com https://*.zendesk.com https://*.zopim.com wss://*.zendesk.com wss://*.zopim.com https://vimeo.com; media-src 'self' blob: https://videos.ctfassets.net https://bynder.beaconlighting.com.au https://assets.beaconlighting.com.au https://beacon-lighting-assets.s3.ap-southeast-2.amazonaws.com https://beacon-lighting-assets-prod.s3.ap-southeast-2.amazonaws.com; frame-src 'self' https://www.google.com https://app.checkout.australia-southeast1.gcp.commercetools.com https://checkoutshopper-live.adyen.com https://checkoutshopper-live-au.adyen.com https://checkoutshopper-test.adyen.com https://pay.google.com https://*.paypal.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://my.matterport.com https://form.typeform.com https://www.facebook.com https://insight.adsrvr.org https://match.adsrvr.org https://*.fls.doubleclick.net https://asia.creativecdn.com https:; frame-ancestors https://app.contentful.com; form-action 'self' https:; base-uri 'self'; object-src 'none'; worker-src 'self' blob:; manifest-src 'self'; report-uri /api/csp-report; report-to csp-endpoint 1
report-uri https://www.dropbox.com/csp_log?policy_name=dash&report_only=true; default-src 'none'; img-src 'self' data: https://*; font-src 'self' data:; object-src 'none'; frame-src https://www.dropbox.com https://snippet.meticulous.ai https://*.dropboxusercontent.com https://www.youtube.com https://www.youtube-nocookie.com; connect-src 'self' blob: https://*.dropbox.com https://*.logs.datadoghq.com https://*.logs.datadoghq.eu https://*.sentry.io https://api.dropboxapi.com https://content.dropboxapi.com https://cdn.dropboxexperiment.com https://api.sprig.com https://cognito-identity.us-west-2.amazonaws.com https://user-events-v3.s3-accelerate.amazonaws.com https://*.dropboxusercontent.com https://cfl.dropboxstatic.com https://edge.fullstory.com https://rs.fullstory.com https://browser.sentry-cdn.com https://s2.googleusercontent.com https://paper.dropboxstatic.com https://app.dropboxer.net https://cdn.prod.website-files.com; media-src 'self' https://*.dropbox.com https://*.dropboxusercontent.com blob:; script-src 'self' 'report-sample' 'wasm-unsafe-eval' 'sha256-roap/WuzYB2wh2tvlLixXzzse29Pczg3jgvuJlmqVfI=' https://www.dropbox.com https://browser.sentry-cdn.com https://snippet.meticulous.ai https://cfl.dropboxstatic.com; style-src 'self' 'unsafe-inline'; worker-src 'self' blob:; 1
default-src 'self' https://dte.maharashtra.gov.in/; script-src 'self' https://dte.maharashtra.gov.in/; style-src 'self' https://dte.maharashtra.gov.in/; img-src 'self' data: https://dte.maharashtra.gov.in/; connect-src 'self' https://dte.maharashtra.gov.in/; font-src 'self' https://dte.maharashtra.gov.in/; media-src 'self' https://dte.maharashtra.gov.in/; frame-ancestors 'self'; frame-src 'none' https://dte.maharashtra.gov.in/; worker-src https://dte.maharashtra.gov.in/; manifest-src https://dte.maharashtra.gov.in/ 1
script-src 'nonce-GYmbftPdkLyc6mVJR3FGjw' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/static-on-bigtable; base-uri 'none' 1
font-src www.paypalobjects.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net sst.nonpaints.com https://www.googletagmanager.com/ *.multisafepay.com https://pay.google.com 'self' 'unsafe-inline'; img-src cdn.nonpaints.com data: widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com https://images.unsplash.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com *.disqus.com https://img.youtube.com *.multisafepay.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: https: 'self' 'unsafe-inline'; script-src www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.disqus.com https://cdn.jsdelivr.net *.multisafepay.com https://pay.google.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://cdn.jsdelivr.net *.multisafepay.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ api.addressy.com *.multisafepay.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data:; font-src 'self' https: data:; connect-src 'self' https:; 1
connect-src 'self' *.amap.com *.amemv.com *.baidu.com *.byteacctimg.com *.byted-static.com *.bytedance.com *.bytedance.net *.bytednsdoc.com *.bytefcdn.com *.bytefcdnrd.com *.bytegoofy.com *.byteimg.com *.bytescm.com *.bytetcc.com *.bytetos.com *.ibytedapm.com *.shidianguji.com *.snssdk.com *.yhgfb-cn-static.com *.zijieapi.com *.goofy.app shidianguji.com; script-src 'nonce-d556e8507e144347414a7a68fbca7205-argus' 'report-sample' 'self' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' *.amap.com *.amemv.com *.baidu.com *.byted-static.com *.bytedance.com *.bytedance.net *.bytednsdoc.com *.bytegecko.com *.bytegoofy.com *.bytescm.com *.bytetos.com *.ibytedapm.com *.pstatp.com *.shidianguji.com *.snssdk.com *.yhgfb-cn-static.com *.zijieapi.com bytedance.net shidianguji.com; frame-ancestors 'self' *.yongledadian.com.cn shidianguji.com *.shidianguji.com *.bytedance.net; upgrade-insecure-requests ; report-to slardar-endpoint; report-uri https://mon.zijieapi.com/monitor_browser/collect/batch/security/?bid=welfare_book_fe; require-trusted-types-for 'script'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' *.theoutbound.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: *.theoutbound.com *.mapbox.com; connect-src 'self' *.theoutbound.com *.mapbox.com; font-src 'self' data:; worker-src 'self' blob:; report-uri /csp-report; report-to csp-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-4Lmzk0h7Wv5lq0xnMZr0BQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'nonce-13Ntvc3sPXrh3x0dw1TwGQ==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https://events.mercadolibre.com/csp/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=7ae4c457-cb5e-4bf3-bb0a-dbbb7e104f8a; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https://http2.mlstatic.com/ https://mlstaticquic-a.akamaihd.net/; frame-ancestors 'self' https://*.mercadolibre.cl:* https://*.mercadolibre.com:* https://*.mercadolibre.com.ve:* https://*.mercadolibre.com.ar:* https://*.mercadolivre.com.br:* https://*.mercadolibre.com.co:* https://*.mercadolibre.com.ec:* https://*.mercadolibre.com.mx:* https://*.mercadolibre.com.pe:* https://*.mercadolibre.com.uy:* https://*.mercadopago.cl:* https://*.mercadopago.com.ar:* https://*.mercadopago.com.br:* https://*.mercadopago.com.co:* https://*.mercadopago.com.mx:* https://*.mercadopago.com.pe:* https://*.mercadopago.com.uy:* https://*.mercadopago.com.ve:* https://*.mercadopago.com:* https://*.adminml.com:* https://*.mercadolibre.co.cr:* https://*.mercadolibre.com.pa:* https://*.mercadolibre.com.do:* https://*.mercadolibre.com.bo:* https://*.mercadolibre.com.py:* https://*.mercadolibre.com.gt:* https://*.mercadolibre.com.hn:* https://*.mercadolibre.com.ni:* https://*.mercadolibre.com.sv:* https://*.mercadopago.com.ec:* https://*.portalinmobiliario.com:* https://*.mercadolivre.com:* 1
script-src 'self' *.hsadspixel.net *.hs-analytics.net js.hscta.net *.hubspot.com static.hsappstatic.net *.usemessages.com *.hs-banner.com *.hscollectedforms.net *.hsleadflows.net *.hsforms.net *.hsforms.com *.hs-scripts.com *.hubspotfeedback.com feedback.hubapi.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspot.net consent.cookiebot.com oag.chilipiper.com g9904216750.co; connect-src 'self' *.hubapi.com js.hscta.net *.hubspot.com *.hs-banner.com *.hscollectedforms.net *.hsforms.com oag.chilipiper.com g9904216750.co; img-src 'self' js.hscta.net no-cache.hubspot.com *.hubspot.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspot.net cdn2.hubspot.net *.hsforms.net *.hsforms.com; frame-src 'self' *.hubspot.com *.hs-sites.com *.hubspot.net play.hubspotvideo.com *.hsforms.net *.hsforms.com oag.chilipiper.com consent.cookiebot.com consentcdn.cookiebot.com; style-src 'self' *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net cdn2.hubspot.net 'unsafe-inline'; child-src *.hsforms.com; 1
base-uri 'self'; block-all-mixed-content; default-src 'self'; form-action 'self'; frame-ancestors 'self'; plugin-types 'none'; script-src 'self' 'report-sample' 'unsafe-inline'; style-src 'self' 'report-sample' 'unsafe-inline'; object-src 'none'; worker-src 'none'; report-uri https://prod.ap.batic.cudasvc.com/xenios/api/v1/error/report??paid=151&spid=26980&v=v1.0&payload=OQqrUogt9k7lwV4dxklwb3ac73asuZ5HWxxXQytKO-k54FhQlEFlPcEsJGXIKuLbrTUFBPmeW4GNckCm-1Uu7l9nt2sC91eT0qxEgVD7syV1drfLMDJvVakYjyLmTOuaYEDn-n7CloBjY3cmzQY9lBYvNi0CUCIvwjh5KbPakda360BDYS-HKI7Cq_j9jImesCMdBciXws9rzaZSnPn9tA==; 1
font-src www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com js.mollie.com consentcdn.cookiebot.com belenbo-sst-1082904994961.europe-west1.run.app *.addthis.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com https://images.unsplash.com https://www.mollie.com consentcdn.cookiebot.com *.clarity.ms belenbo-sst-1082904994961.europe-west1.run.app *.google.be *.doubleclick.net *.bing.com *.contentsquare.net *.openstreetmap.org https://maps.googleapis.com maps.gstatic.com maps.googleapis.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https://maps.googleapis.com https://player.vimeo.com js.mollie.com pay.google.com applepay.cdn-apple.com consentcdn.cookiebot.com *.clarity.ms belenbo-sst-1082904994961.europe-west1.run.app *.google.be *.doubleclick.net *.bing.com *.contentsquare.net maps.googleapis.com unpkg.com/@googlemaps/markerclusterer/ *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.avada.io *.shopify.com https://unpkg.com/swiper@11.2.5/swiper-bundle.min.js *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.fontawesome.com https://cdn.jsdelivr.net https://fonts.bunny.net https://unpkg.com/swiper@11.2.5/swiper-bundle.min.css tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net vimeo.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com consentcdn.cookiebot.com *.clarity.ms belenbo-sst-1082904994961.europe-west1.run.app *.google.be *.doubleclick.net *.bing.com *.contentsquare.net www.google.com *.openstreetmap.org places.googleapis.com *.gstatic.com https://get.geojs.io *.avada.io *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://site-bundle.chibbis.ru; script-src-elem 'self' 'unsafe-inline' blob: data: https://widget.me-talk.ru wss://widget.me-talk.ru https://mc.yandex.ru https://mc.yandex.com https://smartcaptcha.yandexcloud.net https://api-maps.yandex.ru https://yastatic.net https://api-maps.yandex.ru https://lcab.talk-me.ru https://checkout.cloudpayments.ru https://site-static.chibbis.ru https://yandex.ru/ads/system/context.js https://site-bundle.chibbis.ru https://sentry.chibbis.ru; style-src 'self' data: 'unsafe-inline' https://site-bundle.chibbis.ru https://site-static.chibbis.ru; img-src 'self' data: https://static-featured-set-actual-production.chibbis.ru https://static-actual-production.chibbis.ru https://scdn.chibbis.ru https://static.me-talk.ru https://core-renderer-tiles.maps.yandex.net https://mc.yandex.ru https://mc.yandex.com https://mc.yandex.kz https://mc.yandex.by https://yandex.ru https://avatars.mds.yandex.net https://qr.nspk.ru https://pic.me-talk.ru https://site-static.chibbis.ru; font-src 'self' https://yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2 https://site-static.chibbis.ru; manifest-src 'self' https://yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2 https://site-static.chibbis.ru; media-src 'self' https://widget.me-talk.ru; frame-src 'self' *; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.ru wss://mc.yandex.com https://mc.yandex.kz https://mc.yandex.by https://mc.yandex.md https://yandex.ru https://yastatic.net https://log.api-maps.yandex.ru https://core-renderer-tiles.maps.yandex.net https://api-maps.yandex.ru https://geocode-maps.yandex.ru https://static.me-talk.ru https://lcab.talk-me.ru https://widget.me-talk.ru wss://widget.me-talk.ru https://checkout.cloudpayments.ru https://api.cloudpayments.ru https://sentry.chibbis.ru; worker-src 'self' 'unsafe-inline' blob: data: https://widget.me-talk.ru wss://widget.me-talk.ru https://mc.yandex.ru https://mc.yandex.com https://smartcaptcha.yandexcloud.net https://api-maps.yandex.ru https://yastatic.net https://api-maps.yandex.ru https://lcab.talk-me.ru https://checkout.cloudpayments.ru https://site-static.chibbis.ru https://yandex.ru/ads/system/context.js https://site-bundle.chibbis.ru https://sentry.chibbis.ru; base-uri 'self'; report-uri /health/csp; report-to default 1
default-src 'self' *.irsn.fr *.asnr.fr; script-src 'self' 'unsafe-inline' *.irsn.fr *.asnr.fr cdn.ckeditor.com embed.api.video static.doubleclick.net unpkg.com vod.api.video www.google.com www.gstatic.com www.youtube.com www.youtube-nocookie.com e.infogram.com matomo.asnr.fr; object-src 'none'; style-src 'self' 'unsafe-inline'  *.irsn.fr *.asnr.fr fonts.googleapis.com unpkg.com www.youtube.com www.youtube-nocookie.com; img-src 'self' data:  *.irsn.fr *.asnr.fr i.ytimg.com yt3.ggpht.com *.tile.openstreetmap.org fonts.gstatic.com; media-src 'self' data:  *.irsn.fr *.asnr.fr; frame-src 'self'  *.irsn.fr *.asnr.fr embed.api.video www.youtube.com www.youtube-nocookie.com irsn.libcast.com e.infogram.com irsn.libcast.com open.spotify.com; frame-ancestors 'self'  *.irsn.fr *.asnr.fr; child-src 'self'  *.irsn.fr *.asnr.fr embed.api.video www.youtube.com www.youtube-nocookie.com; font-src 'self' data:  *.irsn.fr *.asnr.fr embed.api.video fonts.gstatic.com themes.googleusercontent.com; connect-src 'self'  *.irsn.fr *.asnr.fr collector.api.video googleads.g.doubleclick.net jnn-pa.googleapis.com vod.api.video www.youtube.com www.youtube-nocookie.com; report-uri /sa-report-csp-violation; upgrade-insecure-requests 1
default-src 'self' data: *.deliveryhero.io; connect-src * data: blob: wss:; font-src * data:; frame-src * blob:; img-src * data: blob:; manifest-src *; media-src * data: blob:; object-src 'none'; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' *.grafana.net *.sentry.io *.hotjar.com *.hotjar.io *.api.useinsider.com *.useinsider.com *.qualtrics.com *.siteintercept.qualtrics.com *.px-cloud.net *.px-cdn.net *.pxchk.net *.px-client.net *.perimeterx.net *.botchk.net *.appcues.com *.appcues.net *.youtube.com *.cloudfront.net *.amazonaws.com *.google.com *.gstatic.com *.googleapis.com *.google-analytics.com www.googletagmanager.com; style-src * 'unsafe-inline'; worker-src * blob:; base-uri 'self'; form-action 'self' *.qualtrics.com; frame-ancestors 'self' ops-portal.pedidosya.com; report-uri https://o516780.ingest.us.sentry.io/api/4507300079796224/security/?sentry_key=e1e196e276372428a5ecb141664aae68; report-to csp-endpoint; 1
default-src 'self' data: https://cdn.eye-able.com https://www.eye-able-cdn.com; script-src 'self' 'nonce-yqTiprrhDG76N6gWEH7XkYpZ9ouEgArYzmxQGOoakjwq2-PgENNLIQ' data: https://*.openstreetmap.org https://piwik.westfaelische-hochschule.org https://*.b-ite.com https://www.eye-able-cdn.com 'sha256-kpp7jp1G7DKU2k6CPD6k/asyeO7+E2xEijdXf6SIVBo=' 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://*.openstreetmap.org https://cdn.eye-able.com https://www.eye-able-cdn.com https://*.b-ite.com https://fonts.gstatic.com; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com; style-src-elem 'self' 'nonce-yqTiprrhDG76N6gWEH7XkYpZ9ouEgArYzmxQGOoakjwq2-PgENNLIQ' https://cdn.eye-able.com https://www.eye-able-cdn.com https://*.b-ite.com https://www.gstatic.com 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-ON+MdrZ2dq2tx2UE4WU1JvzaQayLhnhp+UdCmcBUXVA=' 'sha256-evlXprP8aYZfWtGuNDGteVp2szOTXZRCzJSjAs6HoQU=' 'sha256-WMm2rxgrdLbPiNOT3khywmfmX3KBQRnomQ+oL369Sik=' 'sha256-ZVjd2zfSTfAVh1y7eCcNk0SPGUQOP/H8vzrFJIVgg90=' 'sha256-cLU5/oMMUHS/N9urTg6WSPUWPuAZ02hayXsYjoUkva4=' 'sha256-iYqob1vCcitIN4aN8bIKm+LqktmCbhq/FJKYOIMyJI4=' 'sha256-p08VBe6m5i8+qtXWjnH/AN3klt1l4uoOLsjNn8BjdQo=' 'report-sample'; connect-src 'self' data: https://*.openstreetmap.org https://piwik.westfaelische-hochschule.org https://*.b-ite.com; font-src 'self' data: https://cdn.eye-able.com https://www.eye-able-cdn.com https://fonts.gstatic.com https://cdn.scite.ai; style-src 'self' data: https://cdn.eye-able.com https://www.eye-able-cdn.com https://*.b-ite.com 'report-sample'; script-src-elem 'self' 'nonce-yqTiprrhDG76N6gWEH7XkYpZ9ouEgArYzmxQGOoakjwq2-PgENNLIQ' data: https://*.openstreetmap.org https://piwik.westfaelische-hochschule.org https://*.b-ite.com https://www.eye-able-cdn.com 'sha256-kpp7jp1G7DKU2k6CPD6k/asyeO7+E2xEijdXf6SIVBo=' https://cdn.eye-able.com https://connect.facebook.net 'sha256-Qv/VPCnMI30bPS9FCon86d6xCsmIBEeK7FUH2g3DSLA=' 'sha256-DHn6qIXxJ7Goiu9HCn2oUxRIiD5CncdiPGVck5LCmSw=' 'sha256-NNTZOCItJc2lwjmx5YPNr6GxN4IApSMqiyET2r1se98=' 'sha256-L1KTRnCkar390nbS9IVhytBi3LCcvlipxKCUQ5Pwh34=' 'sha256-xalV6Dk0W9vOogZ92sSSJKhCykaV2LYzK6On9AJ322o=' 'sha256-p25tvfrhwmHHQYBjAzut79Nba5GtD0Ddk31vVGWslfs=' 'sha256-rtaVU57dLbRdkXCugTr49x7HJRqjTwe5YoVCy2M4dDE=' 'sha256-ZgQOjhfNErc+jFOCITznCiFox3pQHBhC74pqacwXZ3Q=' 'sha256-ZgQOjhfNErc+jFOCITznCiFox3pQHBhC74pqacwXZ3Q=' 'sha256-+6LzFOOApZCAm6cux/qCcYofBOE+g5eXU6nFCrc0eyA=' 'sha256-ZIbFciq4U8SN2z6C2F3IsHx9XU+6EjoyS1Va9yDsHP4=' 'report-sample'; script-src-attr 'self' data: 'unsafe-inline' 'report-sample'; object-src 'none'; report-uri https://www.w-hs.de/@http-reporting?csp=report&requestTime=1789288597545812&requestHash=a603770ecb00a66da6626e5079d0f14a354bcb25 1
default-src 'self'; script-src 'report-sample' 'self' 'sha256-BiNyGbGZEG1ZcMWhdKvmZ1DwYSpvZ8xcAxRrIag59sQ=' 'sha256-p96cet82gMKBOah5xqTlTC1NImfgmfwp9xhnLYsv45Q=' 'sha256-K7F5t+0jCUOcvI0w5XCLORVrRe6Cl7fcvsyOhpNlvRA=' 'sha256-osJOIDsvZzKR6jjDkmJzOK/lCl+6P59lwiMwf2WwwX0=' 'sha256-ech7dK56PGMmo3zLhyCe9XpUu/4+pGU11bUeBEpq56o=' 'sha256-5aTBNtoMSFGD0AJ9+0YPRibd5APCDzFjjKtA16wQik8=' 'sha256-hV1mihBfiWqmXQxPNANChEuUWIOIlte4D1DUOfqSY2Y=' 'sha256-DHkQzQeawSI3bMDJPOulIinzX/ih38goNk2cvBZsgPM=' 'sha256-LjOYZt74qQlHixQckZ1K+NyxwGO8jPc/zUDhd43i7qY=' 'sha256-C6r1Uv+2BkE8Qjrq+iYLyfsjck3nrA/PhDEE1u7CHtk=' 'sha256-hV1mihBfiWqmXQxPNANChEuUWIOIlte4D1DUOfqSY2Y=' 'sha256-BxUWVs1+UwaUImPFWmLpOCjBDGTFuFcwcXgQwKyVSYU=' https://www.googletagmanager.com/gtm.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googleadservices.com/pagead/conversion_async.js https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/releases/ https://googleads.g.doubleclick.net/pagead/viewthroughconversion/976618339/ https://a.clickcertain.com/px/smart/a/ https://a.remarketstats.com/px/smart/; style-src 'report-sample' 'self' 'unsafe-inline'; object-src 'none'; base-uri 'self'; connect-src 'self' https://stats.g.doubleclick.net https://www.google-analytics.com; font-src 'self'; frame-src 'self' https://www.google.com https://a.clickcertain.com/; img-src 'self' https://www.google-analytics.com https://www.google.com https://www.google.pl; manifest-src 'self'; media-src 'self'; worker-src 'none'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' https: data:; img-src 'self' https: data: blob:; connect-src 'self' https:; frame-src https:; frame-ancestors 'none':; base-uri 'self'; form-action https:; object-src 'none'; upgrade-insecure-requests; report-uri https://api.fwicloud.com/common/v1/csp-reports; report-to csp-endpoint 1
default-src 'self'; base-uri 'self'; object-src 'none';  script-src   'self'   'unsafe-inline'   'unsafe-eval'   https://www.googletagmanager.com   https://*.google-analytics.com   https://www.googleadservices.com   https://connect.facebook.net https://consent.cookiebot.com https://consentcdn.cookiebot.eu https://cdn.cookielaw.org https://static.cloudflareinsights.com https://js.monitor.azure.com https://bat.bing.com https://*.clarity.ms;  style-src   'self'   'unsafe-inline'   https://fonts.googleapis.com;  font-src   'self'   https://fonts.gstatic.com   data:;  img-src   'self'   data:   blob:   https://assets.skyexpress.gr https://*.google-analytics.com   https://www.googletagmanager.com   https://www.facebook.com https://consent.cookiebot.com https://consentcdn.cookiebot.eu https://ade.googlesyndication.com https://bat.bing.net;  connect-src   'self'   https://*.google-analytics.com   https://analytics.google.com https://*.applicationinsights.azure.com https://bat.bing.net https://www.facebook.com https://consent.cookiebot.com https://consentcdn.cookiebot.eu https://cdn.cookielaw.org https://*.skyexpress.gr https://*.clarity.ms;  frame-src   'self'   https://www.googletagmanager.com   https://www.facebook.com https://consentcdn.cookiebot.eu;  frame-ancestors 'none'; form-action 'self'; upgrade-insecure-requests; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self'; report-uri https://dcc-cspreport.enovation.ie/csp-report-dccdrupal.php 1
font-src *.typekit.net fonts.gstatic.com use.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.affirm.com *.affirm.ca *.google.com/ https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com https://*.gstatic.com *.affirm.com *.affirm.ca https://*.google.com https://*.googleapis.com https://*.googleusercontent.com https://www.magezon.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com beacon-qa.magento-datasolutions.com beacon-stage.magento-ds.com beacon.magento-ds.com beacon-audiences.magento-ds.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-ds.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com https://*.gstatic.com *.affirm.com *.affirm.ca *.google.com/ https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com beacon-audiences.magento-ds.com fonts.googleapis.com assets.braintreegateway.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net p13n-mr.adobe.io *.adobedc.net *.demdex.net beacon-audiences.magento-ds.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io commerce.adobe.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com qa-api.magedevteam.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.affirm.com *.affirm.ca https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; script-src 'self' 'report-sample' https://cdnjs.cloudflare.com https://static.addtoany.com https://widgets.flymyairport.com https://www.google.com https://www.googletagmanager.com; style-src 'self' 'report-sample' https://cdnjs.cloudflare.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
frame-ancestors 'none'; report-uri /csp_logger/; 1
script-src 'nonce-L+/53AfjxPxXJG7+bODVJg==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https://events.mercadolibre.com/csp/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=6fd71cb5-a467-4e18-9291-fa445cb1f6c0; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https://http2.mlstatic.com/ https://mlstaticquic-a.akamaihd.net/; frame-ancestors 'self' https://*.mercadolibre.cl:* https://*.mercadolibre.com:* https://*.mercadolibre.com.ve:* https://*.mercadolibre.com.ar:* https://*.mercadolivre.com.br:* https://*.mercadolibre.com.co:* https://*.mercadolibre.com.ec:* https://*.mercadolibre.com.mx:* https://*.mercadolibre.com.pe:* https://*.mercadolibre.com.uy:* https://*.mercadopago.cl:* https://*.mercadopago.com.ar:* https://*.mercadopago.com.br:* https://*.mercadopago.com.co:* https://*.mercadopago.com.mx:* https://*.mercadopago.com.pe:* https://*.mercadopago.com.uy:* https://*.mercadopago.com.ve:* https://*.mercadopago.com:* https://*.adminml.com:* https://*.mercadolibre.co.cr:* https://*.mercadolibre.com.pa:* https://*.mercadolibre.com.do:* https://*.mercadolibre.com.bo:* https://*.mercadolibre.com.py:* https://*.mercadolibre.com.gt:* https://*.mercadolibre.com.hn:* https://*.mercadolibre.com.ni:* https://*.mercadolibre.com.sv:* https://*.mercadopago.com.ec:* https://*.portalinmobiliario.com:* https://*.mercadolivre.com:* 1
default-src 'self'; style-src 'self' 'unsafe-inline' https://stackpath.bootstrapcdn.com https://fonts.googleapis.com https://cdn.jsdelivr.net https://optimize.google.com https://fonts.googleapis.com; script-src 'self' https://*.smallcase.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googletagmanager.com https://app.link https://script.hotjar.com https://static.hotjar.com https://www.youtube.com https://s.ytimg.com https://apis.google.com https://connect.facebook.net https://*.razorpay.com https://*.gateway-tt.in https://cdn.segment.com https://cdn.amplitude.com https://cdn.moengage.com https://stackpath.bootstrapcdn.com https://a.quora.com https://q.quora.com 'unsafe-eval' 'unsafe-inline' https://appleid.cdn-apple.com https://optimize.google.com https://www.googleoptimize.com https://*.googlesyndication.com https://partner.googleadservices.com https://www.googletagservices.com https://adservice.google.com https://adservice.google.co.in https://*.tickertape.in https://*.vmax.com https://*.smartyads.com https://*.itdsmr.com https://*.google.com https://www.gstatic.com https://*.nexum.smallcase.com https://securepubads.g.doubleclick.net https://cms.stag.smallcase.com https://tally.so/widgets/embed.js https://www.clarity.ms https://bfin.creditcase.in https://websdk.hvcdn.co; img-src 'self' data: https://*.tickertape.in http://*.tickertape.in https://*.smallcase.com https://*.cloudfront.net https://s3.ap-south-1.amazonaws.com https://s3.amazonaws.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://www.google.com https://www.google.co.in https://pocket-image-cache.com https://*.ytimg.com https://script.hotjar.com https://premium.thehindubusinessline.com https://thehindubusinessline.com https://thehindu.com https://www.thehindu.com https://www.thehindubusinessline.com https://*.reutersmedia.net https://img.youtube.com https://www.facebook.com https://cdn.razorpay.com https://d36bckgfrodyym.cloudfront.net https://moe-email-campaigns.s3.amazonaws.com https://image.moengage.com https://via.placeholder.com https://q.quora.com https://optimize.google.com https://*.tenor.com https://d3jkipq6ucdzmu.cloudfront.net https://pagead2.googlesyndication.com https://www.dspim.com https://*.vmax.com https://*.smartyads.com https://*.itdsmr.com https://dummyimage.com https://*.dummyimage.com https://*.coolbootsmedia.com https://*.pubmatic.com https://*.ergadx.com https://*.criteo.com https://*.themediagrid.com https://*.Pubmatic.com https://*.openx.com https://*.rubiconproject.com https://*.colombiaonline.com https://*.teads.tv https://*.rubiconproject.com https://*.triplelift.com https://*.edge.hyperverge.co https://websdk.hvcdn.co; connect-src https://*.tickertape.in http://*.tickertape.in wss://*.tickertape.in https://*.smallcase.com https://stag.use.smallcase.com https://beta.use.smallcase.com https://production.use.smallcase.com https://www.google-analytics.com https://www.googletagmanager.com https://*.hotjar.com:* https://vc.hotjar.io:* wss://*.hotjar.com https://surveystats.hotjar.io https://stats.g.doubleclick.net https://graph.facebook.com https://*.razorpay.com https://cdn.segment.com https://api.segment.io https://api.amplitude.com/ https://s3.ap-south-1.amazonaws.com https://sdk-01.moengage.com https://sdk-02.moengage.com https://sdk-03.moengage.com https://d36bckgfrodyym.cloudfront.net https://*.s3.ap-south-1.amazonaws.com https://analytics.google.com https://optimize.google.com https://*.tenor.com https://d3jkipq6ucdzmu.cloudfront.net https://pagead2.googlesyndication.com https://*.vmax.com https://*.amplitude.com:* https://*.smartyads.com https://*.itdsmr.com https://*.google.com https://firebaseremoteconfig.googleapis.com https://firebaseinstallations.googleapis.com https://firebase.googleapis.com https://*.facebook.com https://*.nexum.smallcase.com https://securepubads.g.doubleclick.net https://cms.stag.smallcase.com https://bfin.creditcase.in https://*.edge.hyperverge.co https://websdk.hvcdn.co; frame-src https://sdk.stag.use.smallcase.com https://sdk-beta.use.smallcase.com https://sdk.use.smallcase.com https://stag.use.smallcase.com https://beta.use.smallcase.com https://production.use.smallcase.com https://connect.smallcase.com https://stag-use.smallcase.com/ https://connect.smallca.se https://gateway.smallca.se/ https://vars.hotjar.com https://www.googletagmanager.com https://accounts.google.com https://www.youtube.com https://api.razorpay.com https://*.gateway-tt.in https://cdn.moengage.com https://optimize.google.com https://tpc.googlesyndication.com https://*.googlesyndication.com/ https://*.tenor.com https://googleads.g.doubleclick.net https://smallcase.zerodha.com https://*.vmax.com https://*.smartyads.com https://*.itdsmr.com https://*.google.com https://securepubads.g.doubleclick.net https://bfin.creditcase.in; font-src 'self' data: https://script.hotjar.com https://fonts.gstatic.com https://fonts.gstatic.com; frame-ancestors 'self' https://*.smallcase.com; object-src 'none' 1
style-src 'self' 'unsafe-inline' https://emotivecdn.io *.dev-emotive.com fonts.googleapis.com;frame-src ;img-src 'self' data:;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://emotivecdn.io *.dev-emotive.com https://www.googletagmanager.com;frame-ancestors 'self' *.dev-emotive.com https://setup-shop.emotiveapp.co *.myshopify.com;font-src fonts.gstatic.com;default-src 'self';connect-src 1
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com maxcdn.bootstrapcdn.com *.cloudflare.com *.jsdelivr.net *.meeting8sync.nl *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com https://www.googletagmanager.com/ *.multisafepay.com https://pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://images.unsplash.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.widget.trengo.eu *.amazonaws.com *.meeting8sync.nl https://firebasestorage.googleapis.com https://www.magezon.com *.multisafepay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com chimpstatic.com downloads.mailchimp.com *.list-manage.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.widget.trengo.eu *.meeting8sync.nl *.avada.io *.multisafepay.com https://pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com downloads.mailchimp.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.multisafepay.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.widget.trengo.eu *.meeting8sync.nl 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.widget.trengo.eu *.meeting8sync.nl https://get.geojs.io *.avada.io *.multisafepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' d1re4mvb3lawey.cloudfront.net *.bibliu.co *.bibliu.com; style-src 'self'; img-src 'self' d1re4mvb3lawey.cloudfront.net *.bibliu.co *.bibliu.com; font-src 'self' d1re4mvb3lawey.cloudfront.net *.bibliu.co *.bibliu.com; frame-src 'self' *.bibliu.co *.bibliu.com; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'report-sample' https://www.googletagmanager.com https://www.google.co.uk https://www.google.com https://feeds.trac.jobs feeds.trac.jobs 'nonce-SOIb6O1CPqi0q+5fRuJbMA=='; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'report-sample' *.gosh.nhs.uk www.gosh.nhs.uk feeds.trac.jobs *.googletagmanager.com www.cqc.org.uk e.issuu.com 'nonce-SOIb6O1CPqi0q+5fRuJbMA=='; object-src 'none'; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.doubleclick.net www.google.co.uk https://analytics.google.com https://vc.hotjar.io https://in.hotjar.com https://content.hotjar.io https://csmetrics.hotjar.com metrics.hotjar.io wss://ws.hotjar.com surveystats.hotjar.io https://feeds.trac.jobs sentry.issuu.com stats.g.doubleclick.net translate.googleapis.com *.onetrust.com cdn-ukwest.onetrust.com adservice.google.com https://ask.hotjar.io www.googleadservices.com www.google.com www.google.ad www.google.ae www.google.com.af www.google.com.ag www.google.com.ai www.google.al www.google.am www.google.co.ao www.google.com.ar www.google.as www.google.at www.google.com.au www.google.az www.google.ba www.google.com.bd www.google.be www.google.bf www.google.bg www.google.com.bh www.google.bi www.google.bj www.google.com.bn www.google.com.bo www.google.com.br www.google.bs www.google.bt www.google.co.bw www.google.by www.google.com.bz www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.co.ck www.google.cl www.google.cm www.google.cn www.google.com.co www.google.co.cr www.google.com.cu www.google.cv www.google.com.cy www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.com.do www.google.dz www.google.com.ec www.google.ee www.google.com.eg www.google.es www.google.com.et www.google.fi www.google.com.fj www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.com.gh www.google.com.gi www.google.gl www.google.gm www.google.gr www.google.com.gt www.google.gy www.google.com.hk www.google.hn www.google.hr www.google.ht www.google.hu www.google.co.id www.google.ie www.google.co.il www.google.im www.google.co.in www.google.iq www.google.is www.google.it www.google.je www.google.com.jm www.google.jo www.google.co.jp www.google.co.ke www.google.com.kh www.google.ki www.google.kg www.google.co.kr www.google.com.kw www.google.kz www.google.la www.google.com.lb www.google.li www.google.lk www.google.co.ls www.google.lt www.google.lu www.google.lv www.google.com.ly www.google.co.ma www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.com.mm www.google.mn www.google.ms www.google.com.mt www.google.mu www.google.mv www.google.mw www.google.com.mx www.google.com.my www.google.co.mz www.google.com.na www.google.com.ng www.google.com.ni www.google.ne www.google.nl www.google.no www.google.com.np www.google.nr www.google.nu www.google.co.nz www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.pl www.google.pn www.google.com.pr www.google.ps www.google.pt www.google.com.py www.google.com.qa www.google.ro www.google.ru www.google.rw www.google.com.sa www.google.com.sb www.google.sc www.google.se www.google.com.sg www.google.sh www.google.si www.google.sk www.google.com.sl www.google.sn www.google.so www.google.sm www.google.sr www.google.st www.google.com.sv www.google.td www.google.tg www.google.co.th www.google.com.tj www.google.tl www.google.tm www.google.tn www.google.to www.google.com.tr www.google.tt www.google.com.tw www.google.co.tz www.google.com.ua www.google.co.ug www.google.co.uk www.google.com.uy www.google.co.uz www.google.com.vc www.google.co.ve www.google.vg www.google.co.vi www.google.com.vn www.google.vu www.google.ws www.google.rs www.google.co.za www.google.co.zm www.google.co.zw www.google.cat; media-src 'self' gosh.shorthandstories.com cdn.plyr.io data: media.gosh.nhs.uk ssl.gstatic.com *.s3.amazonaws.com; base-uri 'self'; frame-src 'self' https://www.google.com  https://www.youtube.com https://vars.hotjar.com www.googletagmanager.com e.issuu.com *.recaptcha.net td.doubleclick.net; style-src 'self' 'report-sample' 'unsafe-inline' services.postcodeanywhere.co.uk fonts.googleapis.com feeds.trac.jobs www.cqc.org.uk www.gstatic.com; font-src 'self' https://fonts.gstatic.com  script.hotjar.com https://fonts.googleapis.com data:; manifest-src 'self' *.gosh.nhs.uk; default-src 'self' *.gosh.nhs.uk; img-src 'self' data: *.gosh.nhs.uk *.google-analytics.com *.googletagmanager.com i.ytimg.com *.cqc.org.uk *.gstatic.com *.google.com stats.g.doubleclick.net feeds.trac.jobs https://static.trac.jobs static.trac.jobs healthjobsuk.com services.postcodeanywhere.co.uk dx4nr741tfc02.cloudfront.net www.healthjobsuk.com 'sha384-YephmBv2489Q13yLaARSHqhDtSlHeIs5DEiq8I1fyh4aQcG+nRoz5Y6eWndd5cVz' *.onetrust.com cdn-ukwest.onetrust.com script.hotjar.com survey-images.hotjar.com www.google.com www.google.ad www.google.ae www.google.com.af www.google.com.ag www.google.com.ai www.google.al www.google.am www.google.co.ao www.google.com.ar www.google.as www.google.at www.google.com.au www.google.az www.google.ba www.google.com.bd www.google.be www.google.bf www.google.bg www.google.com.bh www.google.bi www.google.bj www.google.com.bn www.google.com.bo www.google.com.br www.google.bs www.google.bt www.google.co.bw www.google.by www.google.com.bz www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.co.ck www.google.cl www.google.cm www.google.cn www.google.com.co www.google.co.cr www.google.com.cu www.google.cv www.google.com.cy www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.com.do www.google.dz www.google.com.ec www.google.ee www.google.com.eg www.google.es www.google.com.et www.google.fi www.google.com.fj www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.com.gh www.google.com.gi www.google.gl www.google.gm www.google.gr www.google.com.gt www.google.gy www.google.com.hk www.google.hn www.google.hr www.google.ht www.google.hu www.google.co.id www.google.ie www.google.co.il www.google.im www.google.co.in www.google.iq www.google.is www.google.it www.google.je www.google.com.jm www.google.jo www.google.co.jp www.google.co.ke www.google.com.kh www.google.ki www.google.kg www.google.co.kr www.google.com.kw www.google.kz www.google.la www.google.com.lb www.google.li www.google.lk www.google.co.ls www.google.lt www.google.lu www.google.lv www.google.com.ly www.google.co.ma www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.com.mm www.google.mn www.google.ms www.google.com.mt www.google.mu www.google.mv www.google.mw www.google.com.mx www.google.com.my www.google.co.mz www.google.com.na www.google.com.ng www.google.com.ni www.google.ne www.google.nl www.google.no www.google.com.np www.google.nr www.google.nu www.google.co.nz www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.pl www.google.pn www.google.com.pr www.google.ps www.google.pt www.google.com.py www.google.com.qa www.google.ro www.google.ru www.google.rw www.google.com.sa www.google.com.sb www.google.sc www.google.se www.google.com.sg www.google.sh www.google.si www.google.sk www.google.com.sl www.google.sn www.google.so www.google.sm www.google.sr www.google.st www.google.com.sv www.google.td www.google.tg www.google.co.th www.google.com.tj www.google.tl www.google.tm www.google.tn www.google.to www.google.com.tr www.google.tt www.google.com.tw www.google.co.tz www.google.com.ua www.google.co.ug www.google.co.uk www.google.com.uy www.google.co.uz www.google.com.vc www.google.co.ve www.google.vg www.google.co.vi www.google.com.vn www.google.vu www.google.ws www.google.rs www.google.co.za www.google.co.zm www.google.co.zw www.google.cat; report-uri https://o516378.ingest.sentry.io/api/5622733/security/?sentry_key=c5f8a650e74b48a889ccadeaa5014261&sentry_environment=production 1
frame-ancestors 'self'; report-uri https://www.ntnews.com.au/csp-reports 1
script-src 'strict-dynamic' 'nonce-T9CgnzaYWF8B9SEC2lds/w==' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self' data:; connect-src 'self' blob:; frame-src 'self' blob:; media-src 'self' data: blob: 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cloudflare.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.trustedshops.com *.googleapis.com *.bootstrapcdn.com data: *.paypal.com *.cloudfront.net https://static.futureshop.co.uk cash-f.squarecdn.com https://*.gstatic.com fonts.googleapis.com *.salesfire.co.uk *.klarnacdn.net https://fonts.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.reviews.io *.reviews.co.uk data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.facebook.com *.trustedshops.com *.google.com *.cloudfront.net * *.adyen.com https://plumrocket.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.twitter.com https://www.google.co.in https://www.facebook.com *.trustedshops.com *.cloudfront.net * *.adyen.com www.google.com js.stripe.com https://plumrocket.com *.salesfire.co.uk *.google.com/ https://www.googletagmanager.com/ js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.reviews.io *.reviews.co.uk *.sendcloud.sc www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cloudflare.com *.google.com *.google.co.in https://www.facebook.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.connect.facebook.net https://stats.g.doubleclick.net https://d.adroll.com https://pixel.advertising.com https://pixel.rubiconproject.com https://simage2.pubmatic.com https://dsum-sec.casalemedia.com https://ads.yahoo.com https://eb2.3lift.com https://sync.outbrain.com https://trc.taboola.com https://x.bidswitch.net/sync https://ib.adnxs.com https://idsync.rlcdn.com https://us-u.openx.net https://ups.analytics.yahoo.com https://segments.company-target.com https://sync.tidaltv.com *.trustedshops.com *.postcodeanywhere.co.uk *.cloudfront.net *.bing.com https://media.futureshop.co.uk https://static.futureshop.co.uk https://c.clarity.ms * https://*.gstatic.com *.adyen.com https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com https://redchamps.com https://www.magezon.com *.salesfire.co.uk http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://firebasestorage.googleapis.com https://meetanshi.com https://placehold.co flagpedia.net https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.reviews.io *.reviews.co.uk www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.cloudflare.com *.twitter.com *.google.co.in *.facebook.com *.googleadservices.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://connect.facebook.net *.paypalobjects.com *.paypal.com https://chimpstatic.com *.googletagmanager.com https://s.adroll.com https://d.adroll.com https://d.adroll.mgr.consensu.org *.bootstrapcdn.com *.pcapredict.com *.postcodeanywhere.co.uk *.cloudfront.net https://cdn.cookielaw.org https://geolocation.onetrust.com *.bing.com *.doubleclick.net http://cdn.cookie-script.com https://cdn.jsdelivr.net https://consent.cookie-script.com https://assets.adobedtm.com https://checkoutanalytics-test.adyen.com *.mastercard.com *.visa.com *.cloudflareinsights.com *.zoho.com *.zohopublic.com https://geo.cookie-script.com https://www.futureshop.co.uk https://infirc.com https://media.futureshop.co.uk https://static.futureshop.co.uk https://overbridgenet.com https://www.clarity.ms *.adyen.com pay.google.com *.payments-amazon.com *.ratepay.com *.cash.app applepay.cdn-apple.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ js.stripe.com *.salesfire.co.uk *.google.com/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.etrusted.com *.avada.io *.shopify.com player.vimeo.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.reviews.io *.reviews.co.uk *.sendcloud.sc www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.youtube.com *.bootstrapcdn.com *.paypal.com *.postcodeanywhere.co.uk *.cloudfront.net https://media.futureshop.co.uk https://static.futureshop.co.uk *.cash.app https://fonts.googleapis.com/ data: *.salesfire.co.uk https://fonts.googleapis.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.cloudflare.com *.twitter.com *.twimg.com *.google.co.in *.facebook.com *.trustedshops.com *.postcodeanywhere.co.uk *.cloudfront.net *.etrusted.com https://cdn.cookielaw.org *.bing.com *.doubleclick.net *.adyen.com http://cdn.cookie-script.com https://cdn.jsdelivr.net https://consent.cookie-script.com https://assets.adobedtm.com https://checkoutanalytics-test.adyen.com *.zohopublic.com https://media.futureshop.co.uk https://static.futureshop.co.uk https://c.clarity.ms *.clarity.ms * https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com api.addressy.com *.salesfire.co.uk *.smartmetrics.co.uk http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io www.gstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' blob:  https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com; frame-src 'self' https://*.noxiaohao.com https://telegram.org https://*.bitget.com https://accounts.google.com https://oauth.telegram.org https://sgtm.btsgtm.com ; script-src 'self' 'nonce-nXYwa/PfjNkLKr8SGi39Vw==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh/v3RIRuG3kMikr5iha+7P/0TN/GNA=' https://*.noxiaohao.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com https://accounts.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://play.google.com https://analytics.google.com https://fonts.gstatic.com https://telegram.org https://oauth.telegram.org https://*.geetest.com https://*.geevisit.com https://sgtm.btsgtm.com; connect-src 'self' wss: https://stats.g.doubleclick.net https://analytics.google.com https://www.google.com wss://stream.bitget.cloud https://*.noxiaohao.com wss://*.noxiaohao.com wss://*.bitget.com https://www.turingfraud.net https://play.google.com https://accounts.google.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com https://telegram.org https://oauth.telegram.org https://static.geetest.com https://static.geevisit.com https://sgtm.btsgtm.com ; worker-src 'self' blob:; img-src 'self' data: blob: https://www.googletagmanager.com https://img.bgbstatic.com https://*.bgstatic.com https://img.bitgetimg.com https://img.gurenla.com https://*.bgbstatic.com https://lh3.googleusercontent.com https://static.geetest.com https://static.geevisit.com https://static-web.jjdsn.vip https://cdn.bitkeep.vip https://www.google.co.jp https://bin.wangsustatic.com https://sgtm.btsgtm.com https://analytics.google.com https://stats.g.doubleclick.net ; style-src 'self' 'unsafe-inline' https://static.geetest.com https://static.geevisit.com https://accounts.google.com https://fonts.googleapis.com https://static.bgbstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com; font-src 'self' data: https://static.geetest.com https://static.geevisit.com https://fonts.gstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri /v1/buried/log/cspSecurity /v1/monitor/csp?appId=d4b6df7d; 1
base-uri 'none'; object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-WU7bL6wYJage3rHJ/wF0QA==' 1
default-src 'self' blob: 'unsafe-inline'; script-src 'self' 'nonce-T3CzFBM2HLQ7aBMSrsvzQ7roHWDG1zjX' 'wasm-unsafe-eval' 'unsafe-eval' *.consentmanager.net https://secure.quantserve.com/ https://platform.twitter.com https://*.vattenfall.se https://rules.quantcount.com/ https://www.gstatic.com https://www.youtube.com https://connect.facebook.net https://bat.bing.com https://platform.twitter.com/ https://rules.quantcount.com/ https://*.snapchat.com/ https://dev.visualwebsiteoptimizer.com https://www.google.com https://survey-cdn.lumoa.me/ https://cdn.optimizely.com/ https://vattenfallnordic.containers.piwik.pro/ https://vattenfallnordic.piwik.pro/ https://js.hsforms.net/; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' data: *.consentmanager.net https://secure.quantserve.com/ https://app.readpeak.com/* https://connect.facebook.net/ https://platform.twitter.com/* https://www.youtube.com/ https://*.vattenfall.se/ https://bat.bing.com/ https://dev.visualwebsiteoptimizer.com/ https://www.gstatic.com/ https://www.google.com/ https://ecpacc-gwe.vattenfall.se/ https://rules.quantcount.com/ https://cdn.optimizely.com/ https://vattenfallnordic.containers.piwik.pro/ https://vattenfallnordic.piwik.pro/ https://js.hsforms.net/ https://cdn.jsdelivr.net/ https://*.lumoa.me/ https://www.googletagmanager.com/ https://s.pinimg.com/ https://snap.licdn.com/ https://googleads.g.doubleclick.net/ https://www.googletagmanager.com/ https://ct.pinterest.com/ https://js.hs-scripts.com/ https://js-eu1.hs-scripts.com/ https://js-eu1.usemessages.com/ https://js-eu1.hubspot.com/ https://js-eu1.hs-analytics.net/ https://js-eu1.hsadspixel.net/ https://js-eu1.hs-banner.com/ https://sc-static.net/ https://tr.snapchat.com/ https://cdn.adt393.com/; img-src 'self' data: blob: *.consentmanager.net *.vattenfall.se https://www.facebook.com https://analytics.twitter.com/ https://sync.taboola.com https://bat.bing.com/ https://www.linkedin.com/ https://cm.g.doubleclick.net/ https://*.visualwebsiteoptimizer.com/ https://app.readpeak.com https://www.google.com/ https://www.google.se/ https://*.linkedin.com/ https://*.pinterest.com/ https://pixel.quantserve.com/ https://platform.twitter.com/* https://*.snapchat.com/ https://www.gstatic.com/ https://t.co/ https://prreqcroab.icu/ https://forms-eu1.hsforms.com/ https://forms-na1.hsforms.com/ https://ad.doubleclick.net/ https://adservice.google.com/ https://www.googletagmanager.com/ https://perf-eu1.hsforms.com/ https://track-eu1.hubspot.com/ https://connect.facebook.net/ https://i.ytimg.com/; style-src 'self' 'unsafe-inline' 'strict-dynamic' data:; style-src-elem 'self' https://*.vattenfall.se/ 'unsafe-inline' 'unsafe-eval' data: https://fonts.googleapis.com https://elements.vattenfall.se https://ecp-gwe.vattenfall.se/; font-src 'self' https://*.vattenfall.nl https://vfsalesstorageprd.blob.core.windows.net/ https://*.vattenfall.se/ https://fonts.gstatic.com/ https://incharge.azureedge.net/ data:; connect-src 'self' wss://*.vattenfall.se/ data: blob: properties https://*.doubleclick.net https://dev.visualwebsiteoptimizer.com/* https://*.visualwebsiteoptimizer.com/ https://dc.services.visualstudio.com/* https://bat.bing.com/* https://*.vattenfall.se/ https://*.visualwebsiteoptimizer.com/* https://pixel.quantcount.com/ https://*.visualstudio.com/ https://*.pinterest.com/ https://bat.bing.com/ https://www.facebook.com/ https://app.readpeak.com/ https://adservice.google.com/ https://cdn.linkedin.oribi.io/ https://www.google.com/ https://businessspecificapimanglobal.azure-api.net/ https://tr.snapchat.com https://logx.optimizely.com/ https://vattenfallnordic.piwik.pro/ https://vattenfallnordic.containers.piwik.pro/ https://cdn.optimizely.com/ https://forms.hsforms.com/ https://forms-eu1.hsforms.com/ https://rum.optimizely.com/ https://px.ads.linkedin.com/ https://cta-eu1.hubspot.com/ https://api-eu1.hubapi.com/ https://api-eu1.hubspot.com/ https://mpc-prod-27-s6uit34pua-uk.a.run.app/ https://bat.bing.net/ https://rum.optimizely.com/ https://*.snapchat.com/ https://eu-api.friendlycaptcha.eu/; frame-src 'self' https://*.doubleclick.net https://*.snapchat.com https://*.pinterest.com https://www.youtube.com https://www.facebook.com https://forms-eu1.hsforms.com/ https://*.cdn.optimizely.com/ https://heatoutagemap.vattenfall.se/ https://player.admiralcloud.com/ mailto: anwebconsole; worker-src blob:; object-src 'none'; report-uri https://selfserviceapi.www.vattenfall.se/api/csp-report/report-uri?key=sedaca04a6; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://webalytix.th-nuernberg.de https://static.b-ite.com https://cs-assets.b-ite.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' https://webalytix.th-nuernberg.de data:; base-uri 'none'; frame-src https://webalytix.th-nuernberg.de https://virtuohm.ohmportal.de; connect-src 'self' https://webalytix.th-nuernberg.de https://jobs.b-ite.com; style-src 'self' 'unsafe-inline' data: 'report-sample'; object-src 'none'; font-src 'self' data:; report-uri https://www.th-nuernberg.de/@http-reporting?csp=report&requestTime=1789279179086858&requestHash=2969b9472086d3f3866e7fc31c2b7639cf7f7567 1
default-src 'self' *.air.org; child-src 'self' *.air.org; connect-src 'self' *.sharethis.com *.air.org https://analytics.google.com https://fd.cleantalk.org https://www.google.com https://www.googleadservices.com https://stats.g.doubleclick.net https://data.stbuttons.click https://moderate.cleantalk.org https://region1.analytics.google.com https://www.googletagmanager.com https://www.google-analytics.com https://use.typekit.net https://views.unsplash.com https://gateway.shorthand.com https://www.google.co.in https://use.fontawesome.com; font-src 'self' *.typekit.net *.fontawesome.com *.gstatic.com *.air.org; frame-src 'self' *.air.org https://www.googletagmanager.com https://www.youtube.com https://job-boards.greenhouse.io https://player.vimeo.com https://public.tableau.com https://www.google.com https://support.google.com https://w.soundcloud.com https://experience.arcgis.com https://iframely.shorthand.com *.softr.app; img-src 'self' *.sharethis.com *.knightlab.com *.air.org https://googleads.g.doubleclick.net https://www.google.com https://www.googletagmanager.com https://air-workspace.shorthandstories.com https://www.googleadservices.com https://public.tableau.com data:; manifest-src 'self'; media-src 'self' *.air.org https://air-workspace.shorthandstories.com; script-src 'self' *.sharethis.com *.air.org https://www.googletagmanager.com https://fd.cleantalk.org https://googleads.g.doubleclick.net https://www.youtube.com https://boards.greenhouse.io cdn.jsdelivr.net cdnjs.cloudflare.com chosen.js https://cdn.ckeditor.com https://cdn.jsdelivr.net https://code.jquery.com https://maxcdn.bootstrapcdn.com https://moderate.cleantalk.org https://unpkg.com https://use.fontawesome.com mdbootstrap.com stackpath.bootstrapcdn.com; script-src-attr 'self'; script-src-elem 'self' 'unsafe-inline' *.googletagmanager.com *.googleapis.com *.sharethis.com *.typekit.net *.knightlab.com *.air.org https://googleads.g.doubleclick.net https://fd.cleantalk.org https://www.youtube.com https://boards.greenhouse.io https://app.icontact.com https://air-workspace.shorthandstories.com https://public.tableau.com https://player.vimeo.com https://www.google.com https://www.gstatic.com https://analytics.shorthand.com https://platform-api.sharethis.com https://iframely.shorthand.com https://www.googletagmanager.com https://stackpath.bootstrapcdn.com https://connect.facebook.net https://moderate.cleantalk.org cdn.jsdelivr.net cdnjs.cloudflare.com chosen.js https://cdn.ckeditor.com https://cdn.jsdelivr.net https://code.jquery.com https://maxcdn.bootstrapcdn.com https://unpkg.com https://use.fontawesome.com mdbootstrap.com stackpath.bootstrapcdn.com; style-src 'self' *.air.org cdn.jsdelivr.net cdnjs.cloudflare.com chosen.css fonts.googleapis.com https://cdn.jsdelivr.net mdbootstrap.com stackpath.bootstrapcdn.com use.fontawesome.com use.typekit.net; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' *.typekit.net *.knightlab.com *.air.org https://app.icontact.com cdn.jsdelivr.net cdnjs.cloudflare.com chosen.css fonts.googleapis.com https://cdn.jsdelivr.net mdbootstrap.com stackpath.bootstrapcdn.com use.fontawesome.com use.typekit.net; webrtc 'block'; base-uri 'self' *.air.org; form-action 'self' *.air.org https://app.icontact.com; frame-ancestors 'self' https://www.air.org https://air.org; report-uri https://air.org/log-report-uri/reportOnly; block-all-mixed-content; trusted-types 'none' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://embed.tawk.to https://va.tawk.to assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha https://www.google.com/recaptcha amcglobal.sc.omtrdc.net *.magento-ds.com *.google.com *.cdn-apple.com https://maps.googleapis.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com https://cdn.jsdelivr.net *.klarna.com *.klarnacdn.net *.klarnaevt.com *.cloudflare.com *.bootstrapcdn.com data: *.livechatinc.com *.stripe.com klarna.com *.amazonaws.com *.cloudfront.net *.global.prod.fastly.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://embed.tawk.to https://va.tawk.to assets.adobedtm.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha https://www.google.com/recaptcha amcglobal.sc.omtrdc.net *.magento-ds.com *.typekit.net *.cdn-apple.com https://maps.googleapis.com js.braintreegateway.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com https://cdn.jsdelivr.net *.klarna.com *.klarnacdn.net *.klarnaevt.com *.trustpilot.com *.hotjar.com *.livechatinc.com *.doubleclick.net *.facebook.com *.addthis.com giphy.com gfycat.com *.stripe.com klarna.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com validate.fishpig.co.uk https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://embed.tawk.to https://va.tawk.to *.googleadservices.com www.google-analytics.com analytics.google.com *.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com https://www.gstatic.com/recaptcha https://www.google.com/recaptcha *.magento-ds.com *.google.com *.cdn-apple.com https://maps.googleapis.com js.mollie.com js.braintreegateway.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com https://cdn.jsdelivr.net *.klarna.com *.klarnacdn.net *.klarnaevt.com *.cloudflare.com *.ytimg.com *.adsymptotic.com *.bing.com *.linkedin.com *.facebook.com *.facebook.net *.google.co.in *.slideteam.net *.slidegeeks.com slidegeeks.com *.livechatinc.com *.pinterest.com *.doubleclick.net *.gravatar.com *.resultspage.com *.resultsdemo.com *.giphy.com *.clarity.ms *.quora.com *.lfeeder.com *.livechat-files.com https://slide-appai.s3.us-west-1.amazonaws.com *.amazonaws.com *.cloudfront.net *.global.prod.fastly.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://va.tawk.to *.tawk.to https://embed.tawk.to wss://*.tawk.to 'self' 'unsafe-inline' *.googleadservices.com *.googletagmanager.com https://www.gstatic.com/recaptcha https://www.google.com/recaptcha https://cdn.jsdelivr.net *.klarna.com *.klarnacdn.net *.klarnaevt.com *.cloudflare.com *.scarabresearch.com *.trustpilot.com *.bing.com *.licdn.com *.resultspage.com *.googleoptimize.com *.hotjar.com *.facebook.net *.doubleclick.net *.livechatinc.com *.addthis.com *.addthisedge.com *.formisimo.com *.moatads.com *.2checkout.com *.pinterest.com *.gravatar.com *.clarity.ms *.jquery.com *.resultsdemo.com *.quora.com *.lfeeder.com www.gstatic.com *.stripe.com klarna.com *.amazonaws.com *.cloudfront.net *.global.prod.fastly.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com assets.braintreegateway.com https://embed.tawk.to https://va.tawk.to assets.adobedtm.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com *.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha https://www.google.com/recaptcha amcglobal.sc.omtrdc.net *.magento-ds.com *.typekit.net *.google.com *.cdn-apple.com https://maps.googleapis.com js.mollie.com js.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com https://cdn.jsdelivr.net *.klarna.com *.klarnacdn.net *.klarnaevt.com *.cloudflare.com *.bootstrapcdn.com *.resultspage.com *.resultsdemo.com data: *.amazonaws.com *.cloudfront.net *.global.prod.fastly.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.livechatinc.com *.amazonaws.com *.cloudfront.net *.global.prod.fastly.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://va.tawk.to *.tawk.to https://embed.tawk.to wss://*.tawk.to 'self' 'unsafe-inline' assets.adobedtm.com *.adobe.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha https://www.google.com/recaptcha *.magento-ds.com *.typekit.net *.cdn-apple.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com https://cdn.jsdelivr.net *.klarna.com *.klarnacdn.net *.klarnaevt.com *.cloudflare.com *.scarabresearch.com *.emarsys.net *.doubleclick.net *.addthis.com *.addthisedge.com *.livechatinc.com *.2checkout.com *.trustpilot.com *.hotjar.com *.bing.com *.clarity.ms *.quora.com wss://*.hotjar.com https://prodai.slideteam.net wss://prodai.slideteam.net *.stripe.com klarna.com *.amazonaws.com *.cloudfront.net *.global.prod.fastly.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' blob:  https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com; frame-src 'self' https://*.noxiaohao.com https://telegram.org https://*.bitget.com https://accounts.google.com https://oauth.telegram.org https://sgtm.btsgtm.com ; script-src 'self' 'nonce-/b5UF4WuXR/YYE/9hqvpvg==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh/v3RIRuG3kMikr5iha+7P/0TN/GNA=' https://*.noxiaohao.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com https://accounts.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://play.google.com https://analytics.google.com https://fonts.gstatic.com https://telegram.org https://oauth.telegram.org https://*.geetest.com https://*.geevisit.com https://sgtm.btsgtm.com; connect-src 'self' wss: https://stats.g.doubleclick.net https://analytics.google.com https://www.google.com wss://stream.bitget.cloud https://*.noxiaohao.com wss://*.noxiaohao.com wss://*.bitget.com https://www.turingfraud.net https://play.google.com https://accounts.google.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com https://telegram.org https://oauth.telegram.org https://static.geetest.com https://static.geevisit.com https://sgtm.btsgtm.com ; worker-src 'self' blob:; img-src 'self' data: blob: https://www.googletagmanager.com https://img.bgbstatic.com https://*.bgstatic.com https://img.bitgetimg.com https://img.gurenla.com https://*.bgbstatic.com https://lh3.googleusercontent.com https://static.geetest.com https://static.geevisit.com https://static-web.jjdsn.vip https://cdn.bitkeep.vip https://www.google.co.jp https://bin.wangsustatic.com https://sgtm.btsgtm.com https://analytics.google.com https://stats.g.doubleclick.net ; style-src 'self' 'unsafe-inline' https://static.geetest.com https://static.geevisit.com https://accounts.google.com https://fonts.googleapis.com https://static.bgbstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com; font-src 'self' data: https://static.geetest.com https://static.geevisit.com https://fonts.gstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri /v1/buried/log/cspSecurity /v1/monitor/csp?appId=d4b6df7d; 1
default-src 'self' *.wistia.com *.wistia.net embedwistia-a.akamaihd.net/ https://fonts.googleapis.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://edge.fullstory.com https://rs.fullstory.com https://ajax.googleapis.com/ https://first.iovation.com/ https://mpsnare.iesnare.com/ https://128-koi-090.mktoresp.com/ *.gskydev.net *.gskydev.com https://auth.prod.greensky.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://code.jquery.com https://cdn.jsdelivr.net https://pages.greenskycredit.com https://www.google.com/ https://www.gstatic.com https://cdnjs.cloudflare.com https://app-ab27.marketo.com https://munchkin.marketo.net https://abrtp1-cdn.marketo.com blob: http://static.site24x7rum.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com *.wistia.com https://rtp-static.marketo.com https://abrtp1.marketo.com https://js.driftt.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com/ https://pages.greenskycredit.com/ https://cdn.jsdelivr.net/ https://www.greensky.com/ *.gskydev.com *.gskydev.net https://use.fontawesome.com/ https://pro.fontawesome.com/ https://rtp-static.marketo.com/ https://fonts.googleapis.com/ https://fonts.googleapis.com/css/ https://app-ab27.marketo.com/ https://munchkin.marketo.net; font-src 'self' https://cdnjs.cloudflare.com https://pro.fontawesome.com/ data: https://fonts.gstatic.com https://fast.wistia.com https://use.fontawesome.com; img-src 'self' https://www.googletagmanager.com https://rs.fullstory.com *.greensky.com/ *.gskydev.com/ *.gskydev.net/ https://embed-ssl.wistia.com data: https://www.google-analytics.com https://stats.g.doubleclick.net https://fast.wistia.com https://greensky.dotcmscloud.com https://*.greensky.dotcmscloud.com embedwistia-a.akamaihd.net/ https://embed-fastly.wistia.com http://embed.wistia.com/ https://www.google.com https://www.google.de https://app-ab27.marketo.com https://pages.greenskycredit.com; media-src 'self' blob: https://js.driftt.com; frame-src 'self' https://pages.greenskycredit.com/ https://app-ab27.marketo.com/ https://www.google.com/ https://js.driftt.com; connect-src 'self' https://analytics.google.com https://edge.fullstory.com https://rs.fullstory.com *.gskydev.com/ *.gskydev.net/ https://128-koi-090.mktoresp.com/ https://abrtp1.marketo.com https://*.google-analytics.com https://stats.g.doubleclick.net *.greensky.dotcmscloud.com https://greensky.dotcmscloud.com *.greensky.com *.litix.io embedwistia-a.akamaihd.net/ *.wistia.com https://128-koi-090.mktoresp.com; object-src 'self' https://app-ab27.marketo.com/ ; base-uri 'self';manifest-src 'self'; worker-src 'none'; report-to https://www.greensky.com 1
default-src 'self'; script-src 'nonce-fg4PQ7T08deCfbUFbnKXig==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-fC2ZR7HPJNU2iilv1rBllA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-Byq7kmVFHuTQQUoCSgzTHw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
object-src 'none';base-uri 'self';script-src 'nonce-WwMJ6Uxd5f5EJftBbtzr0A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'nonce-1Mv5LiDdIqD8hYRmXvYWOg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-UoCJVNLSgLz8TrJjlxAjzw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
object-src 'none';base-uri 'self';script-src 'nonce-tWtP2E29iZy75mN1Qr1LjQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self';font-src 'self' data: https://fonts.gstatic.com;connect-src 'self' https://brandportal.uponor.com https://*.usercentrics.eu https://*.google.com https://*.googleapis.com https://*.linkedin.com https://*.stackadapt.com https://*.doubleclick.net https://*.teads.tv https://*.clarity.ms https://*.google-analytics.com https://*.adobe.io https://*.hotjar.io wss://*.hotjar.com https://*.bing.com https://uponorna.my.site.com https://*.lumoa.me https://*.sharethis.com https://pixel-config.reddit.com https://www.redditstatic.com https://*.google.ee https://*.google.de https://*.google.cz https://*.google.se https://salesviewer.org https://*.google.fi https://bat.bing.net https://*.facebook.com https://*.google.is https://*.google.pl https://*.google.sk; frame-src https://*.youtube.com https://*.googletagmanager.com https://*.doubleclick.net https://*.force.com https://*.google.com https://*.usercentrics.eu https://*.teads.tv https://*.adobe.com https://*.tfaforms.net https://*.facebook.com https://*.bimsmith.com https://go.eu.uponor.com https://*.transistor.fm https://go.uponor.info https://youtube.com https://locator.maplet.com/ https://uponorna.my.site.com/; script-src 'self' 'nonce-cJr4jhG8xAbSdZwMsbRgS6Tx5bk5LmNDjsq4Nkus33M=' 'strict-dynamic'; img-src 'self' data: https://brandportal.uponor.com https://*.usercentrics.eu https://*.facebook.com https://*.linkedin.com https://*.teads.tv https://bat.bing.com https://maps.gstatic.com https://*.google.com https://*.doubleclick.net https://d2csxpduxe849s.cloudfront.net https://*.googletagmanager.com https://*.clarity.ms https://img.youtube.com https://*.sharethis.com https://*.uponor.com https://googleapis.com https://*.krxd.net https://*.google.lt https://*.google.hu https://*.google.dk https://alb.reddit.com https://*.google.ca https://*.google.ee https://*.google.de https://*.google.cz https://*.google.se https://*.google.co.uk https://*.google.pt https://*.globenewswire.com https://*.google.pl https://*.google.nl https://*.google.es https://*.google.ba https://cdn.midas-network.com https://*.google.fr https://*.google.si https://*.google.com.uy https://*.google.fi https://*.google.sk https://*.google.co.in https://*.google.no https://*.google.ro; style-src 'self' 'unsafe-inline' https://*.force.com https://*.usercentrics.eu https://*.stackadapt.com https://*.googleapis.com; object-src 'self' https://*.usercentrics.eu;form-action 'self' https://*.uponor.com https://*.tfaforms.net https://*.facebook.com; base-uri 'self'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.afterpay.com *.klevu.com *.yotpo.com *.livechatinc.com *.vimeo.com *.pixlee.com *.pxlecdn.com *.pixlee.co *.jst.ai *.jsdelivr.net *.klaviyo.com *.elev.io *.zdassets.com *.cartfulsolutions.com *.cloudmaestro.com *.freshchat.com *.visualwebsiteoptimizer.com *.cloudflare.com polyfill.io *.cartsave.io *.paypal.com *.braintree-api.com data: *.greatlakesskipper.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com fonts.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.cybersource.com *.freshchat.com *.visualwebsiteoptimizer.com *.cloudflare.com polyfill.io *.cartsave.io *.braintree-api.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com www.google.com *.braintreegateway.com *.paypal.com google.com *.google.com *.criteo.net *.criteo.com *.livechatinc.com *.wufoo.com *.yotpo.com *.vimeo.com *.pixlee.com *.pxlecdn.com *.pixlee.co *.jst.ai *.jsdelivr.net getshogun.com *.klaviyo.com *.facebook.com *.cybersource.com insight.adsrvr.com insight.adsrvr.org *.frstre.com *.cloudfront.net *.g.doubleclick.net *.twitter.com *.cloudmaestro.com *.elev.io *.freshchat.com *.visualwebsiteoptimizer.com *.cloudflare.com polyfill.io *.cartsave.io *.braintree-api.com *.addthis.com *.recaptcha.net *.freshdesk.com airtable.com *.paypalobjects.com *.kaptcha.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://plumrocket.com *.wesupply.xyz https://wesupplylabs.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: landofcoder.com *.yotpo.com *.vimeo.com *.pixlee.com *.pixlee.co *.pxlecdn.co *.jst.ai *.jsdelivr.net *.pxlecdn.com *.klaviyo.com *.facebook.com *.facebook.net *.google.com *.bing.com *.choozle.com s3.amazon.com s3.amazonaws.com *.g.doubleclick.net *.adsrvr.org *.twitter.com *.swagger.io *.cloudfront.net *.godaddy.com *.cartfulsolutions.com *.cloudmaestro.com *.trustwave.com/ *.taboola.com *.media.net *.3lift.com *.rubiconproject.com *.adnxs.com *.outbrain.com *.adform.net *.360yield.com *.yieldmo.com *.bidswitch.net *.yahoo.com *.smartadserver.com *.advertising.com *.stickyadstv.com *.fwmrm.net *.adscale.de *.teads.tv *.postrelease.com *.sharethrough.com *.ivitrack.com *.casalemedia.com *.smaato.net *.pubmatic.com *.omnitagjs.com *.criteo.com *.mediawallahscript.com *.mgid.com *.addthis.com *.revcontent.com *.liadm.com *.rlcdn.com *.turn.com *.krxd.net *.google.com.ar *.freshchat.com *.visualwebsiteoptimizer.com *.cloudflare.com polyfill.io *.cartsave.io *.braintree-api.com *.bazaarvoice.com *.klevu.com *.greatlakesskipper.com *.clmbtech.com *.tapad.com *.openx.net *.dmxleo.com *.tremorhub.com *.kargo.com *.tpmn.co.kr *.agkn.com *.amanad.adtdp.com *.bluekai.com *.mathtag.com *.zemanta.com *.bnmla.com *.stackadapt.com *.simpli.fi *.admanmedia.com *.loopme.me *.digitaleast.mobi *.yieldlab.net *.lemmatechnologies.com *.avct.cloud *.deepintent.com *.dotomi.com *.creative-serving.com *.twiago.com *.amazon-adsystem.com *.mediavine.com *.socdm.com *.octillion.tv *.bidr.io.tv *.everesttech.net *.w55c.net *.emxdgt.com *.adgrx.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.reddit.com *.googletagmanager.com *.doubleclick.net *.trackedlink.net *.ksearchnet.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://firebasestorage.googleapis.com quickchart.io img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ www.google.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.klevu.com *.cloudflare.com *.klaviyo.com acsbapp.com *.acsbap.com acsbap.com *.online-metrix.net *.criteo.net *.criteo.com *.trustwave.com *.livechatinc.com *.wufoo.com *.fontawesome.com *.yotpo.com *.vimeo.com *.pixlee.com *.pxlecdn.com *.pixlee.co *.jst.ai *.gstatic.com *.jsdelivr.net *.justuno.com *.getshogun.com *.zdassets.com *.elev.io *.facebook.net *.zopim.com *.govx.com govxconnect.com *.pinimg.com *.bing.com *.tapfiliate.com *.cloudfront.net *.pepperjam.net *.pepperjam.com *.g.doubleclick.net *.ensighten.com *.bestworlds.com *.cartsave.io *.twitter.com *.swagger.io *.payments-amazon.com *.amazon.com *.godaddy.com *.cartfulsolutions.com *.cybersource.com *.cloudmaestro.com *.freshchat.com *.visualwebsiteoptimizer.com polyfill.io *.oribi.io *.paypal.com *.cloudflareinsights.com *.braintree-api.com *.greatlakesskipper.com *.trackedweb.net *.emxdgt.com *.uptrendsdata.com *.noibu.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.googleapis.com *.googletagmanager.com *.googleadservices.com *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.trackedlink.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.ksearchnet.com *.disqus.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.klevu.com *.fontawesome.com *.yotpo.com *.vimeo.com *.pixlee.com *.pxlecdn.com *.pixlee.co *.jst.ai *.jsdelivr.net *.klaviyo.com *.bestworlds.com *.cartsave.io *.cloudmaestro.com *.freshchat.com *.visualwebsiteoptimizer.com *.cloudflare.com polyfill.io *.paypal.com *.braintree-api.com apps.bazaarvoice.com *.greatlakesskipper.com *.googleapis.com https://static.klaviyo.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.tagmanager.google.com *.googletagmanager.com webchat.dotdigital.com webchat.staging.dotdigital.com *.ksearchnet.com https://fonts.bunny.net maxcdn.bootstrapcdn.com fonts.gstatic.com assets.braintreegateway.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.vimeo.com *.pixlee.com *.pxlecdn.com *.pixlee.co *.jst.ai *.jsdelivr.net *.klaviyo.com *.zdassets.com *.cloudmaestro.com agentcore.s3.amazonaws.com *.freshchat.com *.cloudflare.com polyfill.io *.cartsave.io *.paypal.com *.braintree-api.com *.livechatinc.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.yotpo.com *.vimeo.com *.pixlee.com *.pxlecdn.com *.pixlee.co *.klaviyo.com *.jst.ai *.acsbapp.com acsbapp.com *.jsdelivr.net *.zdassets.com *.zendesk.com *.facebook.com *.elev.io *.zopim.com wss://*.zopim.com *.google-analytics.com *.g.doubleclick.net *.pinterest.com *.bestworlds.com *.cartsave.io *.bing.com *.amazon.com *.cartfulsolutions.com *.cloudmaestro.com adapter.aivo.co *.agentbot.net *.oribi.io *.hotjar.com *.freshchat.com *.visualwebsiteoptimizer.com *.cloudflare.com polyfill.io *.ksearchnet.com *.trackedweb.net *.googleadservices.com *.google.com.ar *.uptrendsdata.com *.noibu.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.twitter.com *.twimg.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.trackedlink.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klevu.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.klaviyo.com *.cloudmaestro.com *.visualwebsiteoptimizer.com *.cloudflare.com polyfill.io *.cartsave.io *.paypal.com *.braintree-api.com *.greatlakesskipper.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self' https:; base-uri 'self'; object-src 'none'; frame-ancestors 'self' https://hsselite.zendesk.com; connect-src 'self' https: wss: https://*.zendesk.com https://*.zdassets.com https://*.onesignal.com https://api.onesignal.com; img-src 'self' https: data:; font-src 'self' https: data:; style-src 'self' https: 'unsafe-inline'; script-src 'self' https://static.zdassets.com https://*.onesignal.com https://*.zendesk.com https://ajax.googleapis.com https://maxcdn.bootstrapcdn.com https://cmp.osano.com https://static.ada.support https://cdn.onesignal.com https://www.googletagmanager.com https://js.go2sdk.com 'unsafe-inline'; worker-src 'self' blob:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://cdn.informz.net https://snap.licdn.com https://static.cloudflareinsights.com https://tags.srv.stackadapt.com https://googleads.g.doubleclick.net https://*.asmintl.workers.dev https://cdn.jsdelivr.net https://us-assets.i.posthog.com; style-src 'self' 'unsafe-inline' https://*.asmintl.workers.dev https://p.typekit.net https://use.typekit.net https://tags.srv.stackadapt.com; img-src 'self' data: blob: https: https://cdn-prd-main.asm-media.cloud; font-src 'self' data: https://cdn-prd-main.asm-media.cloud https://use.typekit.net; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://www.googletagmanager.com https://cdn.informz.net https://asminternational.informz.net https://www.google.com https://tags.srv.stackadapt.com https://*.asmintl.workers.dev https://us.i.posthog.com https://us-assets.i.posthog.com https://ad.doubleclick.net https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://px.ads.linkedin.com; frame-src 'self' https://challenges.cloudflare.com https://www.googletagmanager.com; report-uri /csp-report; report-to csp-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-2EAC98jFxXdqSJy24FW_tQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
require-trusted-types-for 'script'; report-uri /api/csp-report/ 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com *.hsforms.com *.hotjar.com *.google-analytics.com *.google.com *.bing.com * *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.punchout2go.com *.tradecentric.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com 'self' 'unsafe-inline'; frame-ancestors *.hsforms.com *.hotjar.com *.google-analytics.com *.google.com *.bing.com *.ariba.com *.tradecentric.com * *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.hsforms.com *.hotjar.com *.google-analytics.com *.bing.com * *.punchout2go.com *.tradecentric.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com maps.gstatic.com *.hsforms.com forms-na1.hsforms.com track.hubspot.com mcstaging.ebhorsman.com icon-phone.png spin.adhq.com *.hubspotusercontent-na1.net *.hotjar.com *.google.com *.bing.com * *.authorize.net assets.secure.checkout.visa.com sandbox.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page tagmanager.google.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com maps.googleapis.com *.hsforms.com js.hsforms.net js-eu1.hsforms.net js-agent.newrelic.com js.hs-scripts.com js.hscollectedforms.net js.hs-banner.com js.hs-analytics.net scripts.sirv.com script.hotjar.com static.hotjar.com *.google-analytics.com *.bing.com * *.punchout2go.com *.tradecentric.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.hsforms.com *.hotjar.com cdn.styles.com scripts.sirv.com *.google-analytics.com *.google.com *.bing.com js.usemessages.com * *.fontawesome.com *.punchout2go.com *.tradecentric.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.hsforms.com *.hotjar.com media.example.com *.google-analytics.com *.google.com *.bing.com * 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.googleapis.com *.hsforms.com forms.hsforms.com bam.nr-data.net forms.hscollectedforms.net spin.adhq.com stats.sirv.com content.hotjar.io ws.hotjar.com *.hotjar.com *.bing.com api.hubspot.com forms-na1.hubspot.com * *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com maps.googleapis.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' static.hebban.nl www.hebban.nl browser.sentry-cdn.com *.ingest.us.sentry.io www.google.com consentcdn.cookiebot.com analytics.ahrefs.com region1.google-analytics.com region1.analytics.google.com www.googletagmanager.com *.aso1.net euc-widget.freshworks.com cpnb.freshdesk.com pagead2.googlesyndication.com scripts.simpleanalyticscdn.com queue.simpleanalyticscdn.com;style-src *  'unsafe-inline'; img-src * 'self' data: ;font-src *; frame-src consentcdn.cookiebot.com *.doubleclick.net www.google.com www.googletagmanager.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' hebbandemo.nl www.hebbandemo.nl nieuwsbrieven.cpnb.nl www.gstatic.com google.com www.google.com hebbanstatic.yunademo.nl static.hebban.nl consent.cookiebot.com consentcdn.cookiebot.com js.sentry-cdn.com browser.sentry-cdn.com hebban.yunademo.nl www.hebban.nl *.google-analytics.com *.googletagmanager.com *.chartbeat.com sb.scorecardresearch.com *.hotjar.com track.adform.net connect.facebook.net *.doubleclick.net analytics.ahrefs.com *.aso1.net euc-widget.freshworks.com scripts.simpleanalyticscdn.com;worker-src 'self' blob:;media-src *;frame-ancestors *; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' c.amazon-adsystem.com *.prod.mplat-ppcprotect.com res4.applovin.com c.albss.com s.axon.ai cdn.attn.tv the.sciencebehindecommerce.com lantern.roeyecdn.com www.dwin1.com *.bing.com bat.bing.net t.contentsquare.net *.scarabresearch.com connect.facebook.net www.facebook.com uktc.fospha.com www.googletagmanager.com maps.googleapis.com pagead2.googlesyndication.com googleads.g.doubleclick.net www.google-analytics.com *.google.com www.gstatic.com *.google-analytics.com heapanalytics.com cdn.heapanalytics.com cdn.huel.io widget.intercom.io js.intercomcdn.com *.intercom.io *.intercomcdn.com app.intercom.io global.localizecdn.com *.clarity.ms *.onetrust.com *.optimizely.com paperplaneslive.com www.paypal.com cdn.pdst.fm d34r8q7sht0t9k.cloudfront.net www.redditstatic.com https://s3-us-west-2.amazonaws.com/jsstore/ *.shopify.com cdn.shopify.com sc-static.net tr.snapchat.com pixel.byspotify.com js.stripe.com cdn.studentbeans.com connect.studentbeans.com d2hrivdxn8ekm8.cloudfront.net acdn.adnxs.com action.dstillery.com *.tiktok.com analytics-ipv6.tiktokw.us sf16-website-login.neutral.ttwstatic.com widget.trustpilot.com va.vercel-scripts.com vercel.live b99.yahoo.co.jp s.yimg.jp; style-src 'self' 'unsafe-inline' fonts.googleapis.com www.gstatic.com fonts.gstatic.com cdn.huel.io *.intercom.io *.intercomcdn.com *.onetrust.com cdn.studentbeans.com sf16-website-login.neutral.ttwstatic.com vercel.live; img-src blob: data: 'self' trkn.us match.adsrvr.org ce.lijit.com huel-us.attn.tv events.attentivemobile.com www.awin1.com www.wepowerconnections.com lantern.roeye.com *.bing.com bat.bing.net *.contentsquare.net www.facebook.com connect.facebook.com connect.facebook.net lookaside.fbsbx.com uktc.fospha.com www.googletagmanager.com *.gstatic.com maps.google.com googleads.g.doubleclick.net cm.g.doubleclick.net region1.analytics.google.com analytics.google.com stats.g.doubleclick.net *.google-analytics.com pagead2.googlesyndication.com google.com translate.google.com www.googleadservices.com www.google.com www.google.ad www.google.ae www.google.com.af www.google.com.ag www.google.al www.google.am www.google.co.ao www.google.com.ar www.google.as www.google.at www.google.com.au www.google.az www.google.ba www.google.com.bd www.google.be www.google.bf www.google.bg www.google.com.bh www.google.bi www.google.bj www.google.com.bn www.google.com.bo www.google.com.br www.google.bs www.google.bt www.google.co.bw www.google.by www.google.com.bz www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.co.ck www.google.cl www.google.cm www.google.cn www.google.com.co www.google.co.cr www.google.com.cu www.google.cv www.google.com.cy www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.com.do www.google.dz www.google.com.ec www.google.ee www.google.com.eg www.google.es www.google.com.et www.google.fi www.google.com.fj www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.com.gh www.google.com.gi www.google.gl www.google.gm www.google.gr www.google.com.gt www.google.gy www.google.com.hk www.google.hn www.google.hr www.google.ht www.google.hu www.google.co.id www.google.ie www.google.co.il www.google.im www.google.co.in www.google.iq www.google.is www.google.it www.google.je www.google.com.jm www.google.jo www.google.co.jp www.google.co.ke www.google.com.kh www.google.ki www.google.kg www.google.co.kr www.google.com.kw www.google.kz www.google.la www.google.com.lb www.google.li www.google.lk www.google.co.ls www.google.lt www.google.lu www.google.lv www.google.com.ly www.google.co.ma www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.com.mm www.google.mn www.google.com.mt www.google.mu www.google.mv www.google.mw www.google.com.mx www.google.com.my www.google.co.mz www.google.com.na www.google.com.ng www.google.com.ni www.google.ne www.google.nl www.google.no www.google.com.np www.google.nr www.google.nu www.google.co.nz www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.pl www.google.pn www.google.com.pr www.google.ps www.google.pt www.google.com.py www.google.com.qa www.google.ro www.google.ru www.google.rw www.google.com.sa www.google.com.sb www.google.sc www.google.se www.google.com.sg www.google.sh www.google.si www.google.sk www.google.com.sl www.google.sn www.google.so www.google.sm www.google.sr www.google.st www.google.com.sv www.google.td www.google.tg www.google.co.th www.google.com.tj www.google.tl www.google.tm www.google.tn www.google.to www.google.com.tr www.google.tt www.google.com.tw www.google.co.tz www.google.com.ua www.google.co.ug www.google.co.uk www.google.com.uy www.google.co.uz www.google.com.vc www.google.co.ve www.google.co.vi www.google.com.vn www.google.vu www.google.ws www.google.rs www.google.co.za www.google.co.zm www.google.co.zw www.google.cat heapanalytics.com cdn.heapanalytics.com cdn.huel.io cdn.shopify.com huel.io us-s2s.huel.com uk-s2s.huel.com huel-assets.s3.eu-west-2.amazonaws.com s3.eu-west-2.amazonaws.com huel.imgix.net huel-crm.imgix.net *.intercom.io *.intercomcdn.com static.intercomassets.com static.intercomassets.eu *.intercomassets.com *.intercomassets.eu downloads.intercomcdn.com downloads.eu.intercomcdn.com global.localizecdn.com *.clarity.ms *.onetrust.com paperplaneslive.com t.paypal.com *.podscribe.com alb.reddit.com cdn.sanity.io tr.snapchat.com segment.prod.bidr.io *.media6degree.com ib.adnxs.com analytics.tiktok.com analytics-ipv6.tiktokw.us vercel.live vercel.com b99.yahoo.co.jp; font-src 'self' data: fonts.gstatic.com js.intercomcdn.com fonts.intercomcdn.com *.onetrust.com vercel.live; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' www.facebook.com intercom.help api-iam.intercom.io api-iam.eu.intercom.io; media-src data: blob: 'self' lookaside.fbsbx.com cdn.huel.io js.intercomcdn.com downloads.intercomcdn.com downloads.eu.intercomcdn.com cdn.sanity.io cdn.shopify.com; frame-src 'self' huelus.aftership.com aax-eu.amazon-adsystem.com s.amazon-adsystem.com www.awin1.com www.facebook.com www.googletagmanager.com www.google.com www.gstatic.com *.huel.com huel.com widget.intercom.io *.intercom.io *.intercomcdn.com intercom-sheets.com www.intercom-reporting.com huel-privacy.my.onetrust.com *.optimizely.com tr.snapchat.com js.stripe.com *.studentbeans.com www.tiktok.com widget.trustpilot.com vercel.live *.youtube.com; connect-src 'self' o168620.ingest.us.sentry.io aax-eu.amazon-adsystem.com ara.paa-reporting-advertising.amazon ara.paa-reporting-advertising.amazon.com c.amazon-adsystem.com s.amazon-adsystem.com *.prod.mplat-ppcprotect.com *.applovin.com ttip-ipv4-prod.telemetry.vaultdcr.com ttip-ipv6-prod.telemetry.vaultdcr.com tte-prod.telemetry.vaultdcr.com *.attn.tv events.attentivemobile.com the.sciencebehindecommerce.com www.wepowerconnections.com *.bing.com bat.bing.net *.contentsquare.net webchannel-content.eservice.emarsys.net *.scarabresearch.com www.facebook.com connect.facebook.net lookaside.fbsbx.com fbcapig.huel.com *.googlesyndication.com *.google-analytics.com *.googleapis.com *.cloudfunctions.net google.com analytics.google.com region1.analytics.google.com stats.g.doubleclick.net googleads.g.doubleclick.net ad.doubleclick.net www.googletagmanager.com www.googleadservices.com pagead2.googlesyndication.com www.google.com www.google.ad www.google.ae www.google.com.af www.google.com.ag www.google.al www.google.am www.google.co.ao www.google.com.ar www.google.as www.google.at www.google.com.au www.google.az www.google.ba www.google.com.bd www.google.be www.google.bf www.google.bg www.google.com.bh www.google.bi www.google.bj www.google.com.bn www.google.com.bo www.google.com.br www.google.bs www.google.bt www.google.co.bw www.google.by www.google.com.bz www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.co.ck www.google.cl www.google.cm www.google.cn www.google.com.co www.google.co.cr www.google.com.cu www.google.cv www.google.com.cy www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.com.do www.google.dz www.google.com.ec www.google.ee www.google.com.eg www.google.es www.google.com.et www.google.fi www.google.com.fj www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.com.gh www.google.com.gi www.google.gl www.google.gm www.google.gr www.google.com.gt www.google.gy www.google.com.hk www.google.hn www.google.hr www.google.ht www.google.hu www.google.co.id www.google.ie www.google.co.il www.google.im www.google.co.in www.google.iq www.google.is www.google.it www.google.je www.google.com.jm www.google.jo www.google.co.jp www.google.co.ke www.google.com.kh www.google.ki www.google.kg www.google.co.kr www.google.com.kw www.google.kz www.google.la www.google.com.lb www.google.li www.google.lk www.google.co.ls www.google.lt www.google.lu www.google.lv www.google.com.ly www.google.co.ma www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.com.mm www.google.mn www.google.com.mt www.google.mu www.google.mv www.google.mw www.google.com.mx www.google.com.my www.google.co.mz www.google.com.na www.google.com.ng www.google.com.ni www.google.ne www.google.nl www.google.no www.google.com.np www.google.nr www.google.nu www.google.co.nz www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.pl www.google.pn www.google.com.pr www.google.ps www.google.pt www.google.com.py www.google.com.qa www.google.ro www.google.ru www.google.rw www.google.com.sa www.google.com.sb www.google.sc www.google.se www.google.com.sg www.google.sh www.google.si www.google.sk www.google.com.sl www.google.sn www.google.so www.google.sm www.google.sr www.google.st www.google.com.sv www.google.td www.google.tg www.google.co.th www.google.com.tj www.google.tl www.google.tm www.google.tn www.google.to www.google.com.tr www.google.tt www.google.com.tw www.google.co.tz www.google.com.ua www.google.co.ug www.google.co.uk www.google.com.uy www.google.co.uz www.google.com.vc www.google.co.ve www.google.co.vi www.google.com.vn www.google.vu www.google.ws www.google.rs www.google.co.za www.google.co.zm www.google.co.zw www.google.cat heapanalytics.com cdn.heapanalytics.com huel.io *.huel.io wss://api.huel.io *.huel-staging.io huel.com *.huel.com hibble.myshopify.com huelczech.myshopify.com huelpoland.myshopify.com hueleurope.myshopify.com hueldenmark.myshopify.com huelgermany.myshopify.com huelamerica.myshopify.com hueljapan.myshopify.com huelsweden.myshopify.com huel.imgix.net huel-crm.imgix.net api-iam.eu.intercom.io api-iam.intercom.io *.intercom.io *.intercomcdn.com uploads.intercomcdn.com uploads.eu.intercomcdn.com wss://*.intercom.io *.intercom-messenger.com wss://*.intercom-messenger.com global.localizecdn.com api.addressy.com *.clarity.ms *.onetrust.com *.optimizely.com paperplaneslive.com *.podscribe.com *.reddit.com www.redditstatic.com cdn.sanity.io *.shopify.com monorail-edge.shopifysvc.com *.snapchat.com pixels.spotify.com *.studentbeans.com ib.adnxs.com *.tiktok.com analytics-ipv6.tiktokw.us vercel.live; upgrade-insecure-requests; report-to csp; report-uri https://d3u3r2ljnqpfae5wngbn7rhdku0zmrhr.lambda-url.us-west-2.on.aws/; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://octane.co https://*.octane.co https://prequalflex.com https://www.prequalflex.com https://ride-static.octane.co https://ride-api.octane.co https://octane.co https://*.octane.co https://octanelending.com https://*.octanelending.com *.googletagmanager.com *.google-analytics.com *.gstatic.com *.google.com *.vwo.com *.visualwebsiteoptimizer.com *.intercom.io *.intercomcdn.com *.onetrust.com https://cdn.cookielaw.org; style-src 'self' 'unsafe-inline' 'unsafe-eval' https://octane.co https://*.octane.co https://prequalflex.com https://www.prequalflex.com https://ride-static.octane.co https://ride-api.octane.co https://octane.co https://*.octane.co https://octanelending.com https://*.octanelending.com fonts.googleapis.com www.gstatic.com app.vwo.com www.googletagmanager.com translate.googleapis.com; frame-ancestors 'self' https://polarisxchange.com https://slingshot.polarisxchange.com https://indianmotorcycle.polarisxchange.com https://www.rvs.com https://rvs.com https://buy.cycletrader.com https://www.atvrider.com https://www.cyclevolta.com https://www.cycleworld.com https://www.dirtrider.com https://www.motorcyclecruiser.com https://www.motorcyclistonline.com https://www.utvdriver.com https://octane.co https://*.octane.co https://prequalflex.com https://www.prequalflex.com https://ride-static.octane.co https://ride-api.octane.co https://octanelending.com https://*.octanelending.com https://*.dev-octanelisting.com https://*.octanelisting.com; worker-src 'self' blob:; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'strict-dynamic' 'unsafe-inline' https://*.funnel.io https://funnel.io https://*.hsadspixel.net https://*.hs-analytics.net https://js.hscta.net https://js-eu1.hscta.net https://*.hubspot.com https://static.hsappstatic.net https://*.usemessages.com https://*.hs-banner.com https://*.hubspotusercontent00.net https://*.hubspotusercontent10.net https://*.hubspotusercontent20.net https://*.hubspotusercontent30.net https://*.hubspotusercontent40.net https://*.hubspot.net https://*.hscollectedforms.net https://*.hsleadflows.net https://*.hsforms.net https://*.hsforms.com https://*.hs-scripts.com https://*.hubspotfeedback.com https://feedback.hubapi.com https://feedback-eu1.hubapi.com https://googletagmanager.com https://*.googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://www.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://tags.fullcontact.com https://bat.bing.com https://*.tiktok.com https://tr.snapchat.com https://tr.capterra.com https://s.pinimg.com https://connect.facebook.net https://snap.licdn.com https://*.claydar.com https://*.convertexperiments.com https://*.fullstory.com https://funnel-io.github.io https://analytics.sayprimer.com 'nonce-X4pslXjEcjRE/yRMRDZd4Q=='; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.hubspotusercontent-na1.net https://cdn2.hubspot.net https://*.hsappstatic.net https://www.gstatic.com https://cdnjs.cloudflare.com https://funnel.io https://lf16-tiktok-web.tiktokcdn-us.com https://sf16-website-login.neutral.ttwstatic.com https://googletagmanager.com https://tagmanager.google.com; style-src-attr 'unsafe-inline'; connect-src 'self' https://*.funnel.io https://funnel.io https://*.sentry.io https://*.convertexperiments.com/ https://*.hsforms.com https://*.hubapi.com https://*.hubspot.com https://*.fullstory.com https://api.claydar.com https://collector.funnel.io https://idm-api.access.us.funnel.io https://resolver.confidence.dev https://googletagmanager.com https://*.googletagmanager.com https://www.googleadservices.com https://www.google.com https://wdhengbze2.execute-api.eu-west-1.amazonaws.com https://vnhkzlu3i8.execute-api.eu-west-1.amazonaws.com https://js.hsforms.net/ https://tr.snapchat.com https://tr6.snapchat.com https://bat.bing.com https://ct.pinterest.com https://pixel-config.reddit.com https://px.ads.linkedin.com https://www.facebook.com https://connect.facebook.net https://*.tiktok.com https://analytics-ipv6.tiktokw.us https://*.byteoversea.com https://js.hs-banner.com https://*.google-analytics.com https://*.analytics.google.com https://*.doubleclick.net https://*.clarity.ms https://pagead2.googlesyndication.com https://google.com https://web-script.api.sayprimer.com https://api.fullcontact.com https://*.liadm.com https://tr.capterra.com https://hubspot-forms-static-embed.s3.amazonaws.com https://vimeo.com; img-src 'self' data: https:; frame-src 'self' https://collector.funnel.io https://*.hubspot.com https://*.hubspot.net https://*.hubspotvideo.com https://*.hsforms.com https://*.googletagmanager.com https://safeframe.googlesyndication.com https://www.youtube.com https://www.instagram.com https://ct.pinterest.com https://tr.snapchat.com https://www.facebook.com https://www.tiktok.com https://vimeo.com https://player.vimeo.com https://platform.twitter.com https://www.linkedin.com https://funnel.storylane.io https://www.google.com https://open.spotify.com https://app.convert.com https://*.clients6.google.com https://*.liadm.com; font-src 'self' data: https://fonts.gstatic.com https://*.funnel.io https://funnel.io https://*.hubspotusercontent-na1.net https://static.hsappstatic.net; media-src 'self' data: https://funnel.io; base-uri 'self'; report-to csp-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.builder.io https://cdn.izooto.com https://cdn.onesignal.com https://onesignal.com https://pagead2.googlesyndication.com https://securepubads.g.doubleclick.net https://www.google-analytics.com https://ssl.google-analytics.com https://www.googletagmanager.com https://www.googlesyndication.com https://www.metype.com; style-src 'self' 'unsafe-inline' https://assets.openthemagazine.com https://fonts.googleapis.com https://media.openthemagazine.com; img-src 'self' blob: https://assets.openthemagazine.com https://cdn.builder.io https://cdn.izooto.com https://googleads.g.doubleclick.net https://i.ytimg.com https://lh3.googleusercontent.com https://lh5.googleusercontent.com https://media.fortuneindia.com https://media.openthemagazine.com https://pagead2.googlesyndication.com https://securepubads.g.doubleclick.net https://stats.g.doubleclick.net https://stg-quintype-dropbox.s3-accelerate.amazonaws.com https://thumbor-stg.assettype.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com https://www.shutterstock.com; font-src 'self' https://assets.openthemagazine.com https://fonts.gstatic.com; connect-src 'self' https://api-uat.openthemagazine.com https://cdn.izooto.com https://onesignal.com https://pagead2.googlesyndication.com https://podcast-uat.openthemagazine.com https://securepubads.g.doubleclick.net https://stats.g.doubleclick.net https://www.google-analytics.com https://www.google.com https://www.googleapis.com https://www.googletagmanager.com; frame-src 'self' https://googleads.g.doubleclick.net https://securepubads.g.doubleclick.net https://tpc.googlesyndication.com https://www.google.com https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com; worker-src 'self' blob: https://cdn.izooto.com https://cdn.onesignal.com; media-src 'self' blob: https://media.openthemagazine.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://snap.licdn.com https://cdn-cookieyes.com https://challenges.cloudflare.com https://secureform.luxsci.com; style-src 'self' 'unsafe-inline' https://cdn-cookieyes.com; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://luxsci.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://www.google.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://px.ads.linkedin.com https://px4.ads.linkedin.com https://dc.ads.linkedin.com https://*.cookieyes.com https://cdn-cookieyes.com https://challenges.cloudflare.com https://secureform.luxsci.com; frame-src https://challenges.cloudflare.com https://www.googletagmanager.com https://td.doubleclick.net https://www.google.com https://maps.google.com https://www.youtube.com https://www.youtube-nocookie.com; media-src 'self' https://luxsci.com https://www.luxsci.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /_csp/report; report-to csp-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self'; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none' 1
default-src * 'unsafe-inline' data: blob:; report-uri "https://thestarphoenix.com/wp-json/pmd/v1/csp-report"; report-to csp-endpoint 1
default-src 'self'; img-src https: http: blob: data:; style-src 'self' 'unsafe-inline' https://scripts.gmod.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://scripts.gmod.de https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://ssl.google-analytics.com https://www.google.com/js/ https://vbg-version.vbulletin.com; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://scripts.gmod.de https://www.google.com/recaptcha/ https://www.youtube.com; object-src 'none'; upgrade-insecure-requests; report-uri https://tunnat.report-uri.com/r/d/csp/reportOnly 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://scripts.mediavine.com https://www.googletagmanager.com https://us.i.posthog.com https://us-assets.i.posthog.com; img-src * data:; style-src 'self' 'unsafe-inline'; connect-src *; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
connect-src 'self' https://*.analytics.google.com https://*.aptrinsic.com https://*.g.doubleclick.net https://*.google-analytics.com https://*.google.com https://*.googletagmanager.com https://*.sentry.io https://api.ipgeolocation.io https://api.triptease.io https://bat.bing.com https://bat.bing.net https://consent.cookiebot.com https://consentcdn.cookiebot.com https://content.hotjar.io https://data.flip.to https://dc.services.visualstudio.com https://fonts.googleapis.com https://google.com https://googleads.g.doubleclick.net https://maps.googleapis.com https://mc.yandex.com https://mc.yandex.ru https://messages.guest-experience.triptease.io https://metrics.corinthia.com https://metrics.hotjar.io https://onboard.triptease.io https://p.relay-t.io https://region1.analytics.google.com https://sa.flip.to https://scripts.affilired.com https://sleeknotestaticcontent.sleeknote.com https://static-meta.triptease.io https://stats.g.doubleclick.net https://sync.srv.stackadapt.com https://tags.srv.stackadapt.com https://vc.hotjar.io https://wl-suppliers.app.cvent.com https://www.dripuploads.com https://www.facebook.com https://www.google.ae https://www.google.co.uk https://www.google.com https://www.menumodo.com https://www.thehotelsnetwork.com wss://ws.hotjar.com; default-src 'self' https://*.adform.net https://*.adnxs.com https://*.sentry.io https://cdn.jsdelivr.net/npm/bootstrap@4.6.2/; font-src 'self' data: https://*.cloudfront.net/graphik/ https://*.cloudfront.net/lato/ https://fonts.googleapis.com https://fonts.gstatic.com https://fonts.gstatic.com/s/barlow/ https://fonts.gstatic.com/s/lato/ https://fonts.gstatic.com/s/roboto/ https://static.tacdn.com https://use.typekit.net https://www.menumodo.com; frame-src 'self' https://*.adsrvr.org https://*.fls.doubleclick.net https://*.speedrfp.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://customs.affilired.com https://mc.yandex.com https://mc.yandex.ru https://onboard.triptease.io https://targeted-messages.triptease.io https://td.doubleclick.net https://www.facebook.com https://www.google.com https://www.googletagmanager.com https://www.opentable.co.uk https://www.thehotelsnetwork.com https://www.youtube-nocookie.com; img-src 'self' blob: data: *.ggpht.com *.googleapis.com *.linkedin.com https://*.adform.net https://*.adnxs.com https://*.adsrvr.org https://*.analytics.google.com https://*.g.doubleclick.net https://*.google-analytics.com https://*.google.com https://*.googletagmanager.com https://*.sojern.com https://*.speedrfp.com https://*.youtube.com https://ad.doubleclick.net https://bat.bing.com https://cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.19/ https://cm.g.doubleclick.net/pixel https://cms.analytics.yahoo.com https://d1cmxvrarpztze.cloudfront.net https://dpm.demdex.net https://googletagmanager.com https://i.ytimg.com https://imgsct.cookiebot.com https://mc.yandex.com https://mc.yandex.ru https://metrics.corinthia.com https://pubads.g.doubleclick.net https://region1.analytics.google.com https://ssl.gstatic.com https://stackadapt.com https://static.tacdn.com https://stats.g.doubleclick.net https://storage.ghadiscovery.com https://sync.srv.stackadapt.com https://tags.srv.stackadapt.com https://tags.w55c.net https://www.facebook.com https://www.google.ae https://www.google.co.uk https://www.google.com https://www.gstatic.com https://www.menumodo.com https://www.pages04.net https://www.tripadvisor.co.uk maps.gstatic.com; manifest-src 'self'; media-src 'self'; script-src-elem 'self' 'unsafe-inline' *.licdn.com https://*.adsrvr.org https://*.aptrinsic.com https://*.google-analytics.com https://*.google.com https://*.googletagmanager.com https://*.sojern.com https://*.speedrfp.com https://*.youtube.com https://ajax.googleapis.com https://api.getdrip.com https://bat.bing.com https://browser.sentry-cdn.com https://cdn.denomatic.com https://cdn.flip.to https://cdn.jsdelivr.net https://cdn.jsdelivr.net/npm/bootstrap@4.6.2/ https://cdn.jsdelivr.net/npm/bootstrap@5.0.0-beta2/ https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/ https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/ https://cdn.jsdelivr.net/npm/feather-icons/ https://cdn.jsdelivr.net/npm/ip-geolocation-api-jquery-sdk@1.0.6/ https://cdn.jsdelivr.net/npm/jquery@3.5.1/ https://cdn.jsdelivr.net/npm/jquery@3.6.4/ https://cdn.jsdelivr.net/npm/popper.js@1.16.1/ https://cdn.otstatic.com https://cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.19/ https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/ https://code.jquery.com/jquery-3.2.1.slim.min.js https://components.flip.to https://connect.facebook.net https://consent.cookiebot.com https://consentcdn.cookiebot.com https://contentz.mkt941.com https://customs.affilired.com https://d16fk4ms6rqz1v.cloudfront.net https://googleads.g.doubleclick.net https://integration.flip.to https://js.monitor.azure.com https://js.sentry-cdn.com https://maps.googleapis.com https://maps.googleapis.com/maps/api/* https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/ https://mc.yandex.com https://mc.yandex.ru https://navigator.ink-global.com https://onboard.triptease.io https://p.relay-t.io https://script.crazyegg.com https://script.hotjar.com https://sleeknotecustomerscripts.sleeknote.com https://sleeknotestaticcontent.s3.eu-west-1.amazonaws.com https://sleeknotestaticcontent.sleeknote.com https://static-meta.triptease.io https://static.hotjar.com https://static.tacdn.com https://static.x-channel.triptease.io https://tag.getdrip.com https://tag.yieldoptimizer.com https://tagmanager.google.com https://tags.srv.stackadapt.com/events.js https://targeted-messages.triptease.io https://www.googletagmanager.com https://www.gstatic.com/recaptcha/ https://www.jscache.com https://www.menumodo.com https://www.opentable.co.uk https://www.thehotelsnetwork.com https://www.tripadvisor.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.adsrvr.org https://*.aptrinsic.com https://*.google-analytics.com https://*.googletagmanager.com https://*.gstatic.com https://*.sojern.com https://*.speedrfp.com https://*.youtube.com https://ajax.googleapis.com https://api.getdrip.com https://bat.bing.com https://browser.sentry-cdn.com https://cdn.denomatic.com https://cdn.flip.to https://cdn.jsdelivr.net/npm/bootstrap@4.6.2/ https://cdn.jsdelivr.net/npm/bootstrap@5.0.0-beta2/ https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/ https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/ https://cdn.jsdelivr.net/npm/feather-icons@4.29.0/ https://cdn.jsdelivr.net/npm/feather-icons/ https://cdn.jsdelivr.net/npm/ip-geolocation-api-jquery-sdk@1.0.6/ https://cdn.jsdelivr.net/npm/jquery@3.5.1/ https://cdn.jsdelivr.net/npm/jquery@3.6.4/ https://cdn.jsdelivr.net/npm/popper.js@1.16.1/ https://cdn.otstatic.com https://cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.19/ https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/ https://code.jquery.com/jquery-3.2.1.slim.min.js https://components.flip.to https://connect.facebook.net https://consent.cookiebot.com https://consentcdn.cookiebot.com https://contentz.mkt941.com https://customs.affilired.com https://d16fk4ms6rqz1v.cloudfront.net https://googleads.g.doubleclick.net https://googletagmanager.com https://integration.flip.to https://js.monitor.azure.com https://js.sentry-cdn.com https://maps.googleapis.com https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/ https://mc.yandex.com https://mc.yandex.ru https://navigator.ink-global.com https://onboard.triptease.io https://p.relay-t.io https://script.crazyegg.com https://script.hotjar.com https://sleeknotecustomerscripts.sleeknote.com https://sleeknotestaticcontent.s3.eu-west-1.amazonaws.com https://sleeknotestaticcontent.sleeknote.com https://static-meta.triptease.io https://static.hotjar.com https://static.tacdn.com https://tag.getdrip.com https://tag.yieldoptimizer.com https://tagmanager.google.com https://tags.srv.stackadapt.com https://targeted-messages.triptease.io https://wl-suppliers.app.cvent.com https://www.google.com https://www.gstatic.com/recaptcha/ https://www.jscache.com https://www.opentable.co.uk https://www.thehotelsnetwork.com https://www.tripadvisor.co.uk https://www.tripadvisor.com; style-src-elem 'self' 'unsafe-inline' https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/dist/css/bootstrap.min.css https://p.typekit.net https://tags.srv.stackadapt.com/sa.css https://use.typekit.net https://www.menumodo.com; style-src 'self' 'unsafe-inline' data: https://*.aptrinsic.com https://*.googletagmanager.com https://cdn.jsdelivr.net/npm/bootstrap@4.6.2/ https://cdn.jsdelivr.net/npm/bootstrap@5.0.0-beta2/ https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/ https://cdn.jsdelivr.net/npm/bootstrap@5.2.3/ https://cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.19/ https://fonts.googleapis.com https://googletagmanager.com https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/ https://p.typekit.net https://static.tacdn.com https://tagmanager.google.com https://use.typekit.net https://www.menumodo.com; script-src-attr https://www.menumodo.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://piwik.stwk.at https://code.etracker.com https://*.etracker.com https://maps.googleapis.com https://ajax.googleapis.com https://www.google.com https://www.gstatic.com https://embed.skylinewebcams.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com blob: https://piwik.stwk.at https://*.etracker.com https://*.streamdiver.com https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.googleusercontent.com https://embed.skylinewebcams.com https://www.foto-webcam.eu; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://*.streamdiver.com https://www.google.com https://maps.google.com https://app.sli.do https://formulare.kufnet.at https://embed.skylinewebcams.com https://www.skylinewebcams.com; object-src 'none'; frame-ancestors 'self'; form-action 'self'; style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net https://embed.skylinewebcams.com 'report-sample'; font-src 'self' data: https://use.typekit.net https://p.typekit.net; connect-src 'self' https://piwik.stwk.at https://*.etracker.com https://*.googleapis.com; media-src 'self' data: blob:; worker-src 'self' blob: 'report-sample'; report-uri https://www.kufnet.at/@http-reporting?csp=report&requestTime=1789275367117805&requestHash=5287a172e16d689c14b56e20c7cf22d77a2fa034 1
default-src 'none';  connect-src 'self' embedr.flickr.com chat-us.libanswers.com resources.bepress.com playback.bepressaws.com cascade2.libchat.com visitor2.constantcontact.com distillery.wistia.com api-iam.intercom.io wss://nexus-websocket-a.intercom.io yoast.com listgrowth.ctctcdn.com www.facebook.com stats.g.doubleclick.net *.google-analytics.com analytics.google.com *.analytics.google.com *.googleapis.com;  font-src 'self' data: cdn.jsdelivr.net fonts.gstatic.com static.juicer.io fonts.bunny.net;  frame-src 'self' imsa.libanswers.com accounts.google.com admin.helperhelper.com community.imsa.edu v2.libanswers.com docs.google.com calendar.google.com www.youtube.com www.google.com www.facebook.com bbox.blackbaudhosting.com assets.bepress.com *.concept3d.com;  img-src 'self' connect.facebook.net *.gstatic.com live.staticflickr.com www.googletagmanager.com previews.dropbox.com www.google-analytics.com *.imsa.edu s.w.org ps.w.org theeventscalendar.com fast.wistia.com data: embedwistia-a.akamaihd.net cdnjs.cloudflare.com www.paypalobjects.com *.googleapis.com onpointplugins.com secure.gravatar.com cdn.datatables.net *.facebook.com bbox.blackbaudhosting.com cdn.weglot.com localist-images.azureedge.net *.cloudfront.net imsa.edu *.googleusercontent.com *.google.com *.ctctcdn.com *.ytimg.com *.imsa.edu blackfacts.com;  script-src data: 'self' 'unsafe-inline' 'unsafe-eval' assets.bepress.com blackfacts.com imsa.libanswers.com community.imsa.edu pi.pardot.com cdn.jsdelivr.net widget.intercom.io js.intercomcdn.com fast.wistia.com ajax.googleapis.com www.google.com www.gstatic.com cdnjs.cloudflare.com static.ctctcdn.com connect.facebook.net www.facebook.com assets.juicer.io bbox.blackbaudhosting.com bbox.blackbaudhosting.com cdn.datatables.net connect.facebook.net www.google-analytics.com www.googletagmanager.com;  style-src 'self' 'unsafe-inline' www.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com *.googleapis.com static.ctctcdn.com assets.juicer.io bbox.blackbaudhosting.com cdn.datatables.net;  script-src-elem 'self' 'unsafe-inline' imsa.libanswers.com *.googleapis.com assets.bepress.com connect.facebook.net www.gstatic.com *.google.com cdnjs.cloudflare.com static.ctctcdn.com www.google-analytics.com cdn.datatables.net www.googletagmanager.com embedr.flickr.com widgets.flickr.com imsa.enterprise.localist.com *.imsa.edu blackfacts.com;  style-src-elem 'self' 'unsafe-inline' static.ctctcdn.com *.googleapis.com cdn.datatables.net www.gstatic.com *.imsa.edu fonts.bunny.net imsa.enterprise.localist.com;  media-src 'self' blob: ;  worker-src 'self' blob: ;  report-uri https://app.imsa.edu/connect/csp/report 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.clarity.ms https://www.shoppingsheet.com https://connect.facebook.net https://bbox.blackbaudhosting.com https://www.youvisit.com https://*.google.com https://*.uwplatt.edu https://googleads.g.doubleclick.net https://8ab0a26cb0027939bcf5-49c99c3c0c9c98b3365b710757036e1b.ssl.cf5.rackcdn.com https://cdn.jsdelivr.net https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://fw.cdn.technolutions.net https://googleads.g.doubleclick.net https://libraryh3lp.com https://mx.technolutions.net https://partner.googleadservices.com https://s.yimg.com https://siteimproveanalytics.com https://slate-technolutions-net.cdn.technolutions.net https://slate-uwplatt-edu.cdn.technolutions.net https://slate.uwplatt.edu https://*.olark.com https://unpkg.com https://www.googletagmanager.com https://www.googletagmanager.com/ https://www.youtube.com https://youtube.com; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' data: https://*.clarity.ms https://www.shoppingsheet.com https://connect.facebook.net https://bbox.blackbaudhosting.com https://www.youvisit.com https://*.google.com https://*.uwplatt.edu https://googleads.g.doubleclick.net https://8ab0a26cb0027939bcf5-49c99c3c0c9c98b3365b710757036e1b.ssl.cf5.rackcdn.com https://cdn.jsdelivr.net https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://fw.cdn.technolutions.net https://googleads.g.doubleclick.net https://libraryh3lp.com https://mx.technolutions.net https://partner.googleadservices.com https://s.yimg.com https://siteimproveanalytics.com https://slate-technolutions-net.cdn.technolutions.net https://slate-uwplatt-edu.cdn.technolutions.net https://slate.uwplatt.edu https://*.olark.com https://unpkg.com https://www.googletagmanager.com https://www.googletagmanager.com/ https://www.youtube.com https://youtube.com; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://www.shoppingsheet.com https://www.google.com https://cdn.jsdelivr.net https://fonts.googleapis.com https://static.olark.com; style-src-elem 'self' 'unsafe-inline' https://www.gstatic.com https://www.shoppingsheet.com https://slate-technolutions-net.cdn.technolutions.net https://static.olark.com https://cdn.jsdelivr.net https://fonts.googleapis.com https://*.google.com https://*.uwplatt.edu https://ep2.adtrafficquality.google https://slate-uwplatt-edu.cdn.technolutions.net https://fw.cdn.technolutions.net; object-src 'none'; base-uri 'self'; connect-src 'self' https://*.clarity.ms https://ad.doubleclick.net https://syndicatedsearch.goog https://www.google-analytics.com https://cdn-graphql.youvisit.com https://region1.analytics.google.com https://knrpc.olark.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://libraryh3lp.com https://6349506.global.r2.siteimproveanalytics.io https://analytics.google.com https://mx.technolutions.net https://s.yimg.com https://*.uwplatt.edu https://www.google.com https://www.googletagmanager.com https://slate-uwplatt-edu.cdn.technolutions.net https://ep1.adtrafficquality.google; font-src 'self' data: https://fonts.gstatic.com https://static.olark.com; frame-src 'self' https://app.powerbi.com https://cdn2.yoshki.com https://app.powerbi.com https://signup.e2ma.net https://ww2.matchinggifts.com https://www.youvisit.com https://www.shoppingsheet.com https://app.e2ma.net https://cdn.yoshki.com https://cdn.youvisit.com https://www.youtube-nocookie.com https://static.olark.com https://libraryh3lp.com https://e.issuu.com https://www.googletagmanager.com https://ep2.adtrafficquality.google https://syndicatedsearch.goog https://www.youtube.com https://*.uwplatt.edu; img-src 'self' data: https://c.bing.com https://*.clarity.ms https://stats.g.doubleclick.net https://*.gstatic.com https://se-images.campuslabs.com https://www.googleadservices.com https://trck.youvisit.com https://googleads.g.doubleclick.net/ https://se-images.campuslabs.com https://id.ocelotbot.com https://image.isu.pub https://6349506.global.r2.siteimproveanalytics.io https://*.uwplatt.edu https://sp.analytics.yahoo.com https://trkn.us https://*.google.com https://log.olark.com https://www.googletagmanager.com https://syndicatedsearch.goog https://ep1.adtrafficquality.google; manifest-src 'self'; media-src 'self' https://static.olark.com; worker-src 'none'; frame-ancestors 'self' https://*.uwplatt.edu https://uwplatt.sharepoint.com https://uwplatt.quickbase.com; report-uri https://sentry.uwplatt.edu/api/5/security/?sentry_key=92e79271e0a535df88c88de202623cf3&sentry_environment=csp_reporting; report-to csp-endpoint; 1
default-src https: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' https://*.thomascook.in https://*.sotc.in 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.redditstatic.com https://static.ads-twitter.com https://challenges.cloudflare.com https://chatly.gg https://clerk.flameproxies.com https://js.stripe.com; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: blob: https://flagcdn.com https://i.pravatar.cc https://framerusercontent.com https://i.imgur.com https://randomuser.me https://img.clerk.com https://www.googletagmanager.com https://www.google-analytics.com; connect-src 'self' https://clerk.flameproxies.com https://ads-api.reddit.com https://www.google-analytics.com https://analytics.google.com https://rapi.flashproxy.com https://reseller-api.flameproxies.com https://api.stripe.com https://challenges.cloudflare.com; frame-src https://challenges.cloudflare.com https://js.stripe.com https://paymentpage.ecommpay.com https://www.googletagmanager.com; worker-src 'self' blob:; form-action 'self' https://paymentpage.ecommpay.com; require-trusted-types-for 'script' 1
object-src 'none';base-uri 'self';script-src 'nonce-TPFjaDa9DYx3vrZwRsr9ZQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-v_wpK8HdH270O5VPgKgyqA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
worker-src blob: 'self' *.noibu.com wss://*.noibu.com; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://hpp.worldpay.com/app/hpp-iframe/integration/wpg/corporate https://secure-test.worldpay.com/shopper/3ds/ddc.html https://secure.worldpay.com/shopper/3ds/ddc.html https://payments-test.worldpay.com/app/hpp-iframe/integration/wpg/corporate https://payments-live.hpp.apps.eu-west-1-7z55k.dev.msp.worldpay.io/app/hpp-iframe/integration/wpg/corporate https://payments.worldpay.com/app/hpp-iframe/integration/wpg/corporate *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors https://pay.google.com/ 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com https://payments-test.worldpay.com/app/hpp-iframe/integration/wpg/corporate https://payments.worldpay.com/app/hpp-iframe/integration/wpg/corporate https://payments-live.hpp.apps.eu-west-1-7z55k.dev.msp.worldpay.io/app/hpp-iframe/integration/wpg/corporate https://pay.google.com https://secure-test.worldpay.com https://hpp.worldpay.com/ https://www.paypal.com/sdk/js *.yotpo.com www.xtento.com *.fls.doubleclick.net *.worldpay.com *.trustarc.com sdx.microsoft.com *.googleapis.com blob: *.dwin1.com *.awin1.com *.zenaps.com *.sciencebehindecommerce.com *.hub-box.com *.dam.wexup.com fidelitepro.screwfix.fr 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.trackedlink.net *.ddlnk.net *.dycdn.net *.cloudflare.com www.google-analytics.com *.yotpo.com www.xtento.com cdn.xtento.com *.googleapis.com https://*.ggpht.com media.screwfix.fr media.screwfix.eu consent.trustarc.com *.doubleclick.net *.contentsquare.net *.postcodeanywhere.co.uk yotpo-editor-production.s3.amazonaws.com sp.analytics.yahoo.com s.yimg.com p1.zemanta.com *.googletagmanager.com *.googleusercontent.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.bing.com *.microsoft.com *.dwin1.com *.awin1.com *.zenaps.com *.sciencebehindecommerce.com cdn.optimizely.com *.tealiumiq.com *.facebook.com *.facebook.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.dycdn.net dn1i8v75r669j.cloudfront.net dkpklk99llpj0.cloudfront.net ds9p2a60lh6fp.cloudfront.net d1y9qtn9cuc3xw.cloudfront.net d81mfvml8p5ml.cloudfront.net *.freshrelevance.com *.dotdigital.com https://www.google.com/recaptcha/api.js www.gstatic.com cdnjs.cloudflare.com https://pay.google.com/gp/p/js/pay.js https://applepay.cdn-apple.com/jsapi/v1/apple-pay-sdk.js https://payments.worldpay.com/resources/cse/js/worldpay-cse-1.0.2.min.js https://payments.worldpay.com/resources/hpp/integrations/embedded/js/hpp-embedded-integration-library.js https://d35p4vvdul393k.cloudfront.net/sdk_library/us/stg/ops/pc_gsmpi_web_sdk.js https://d16i99j5zwwv51.cloudfront.net/sdk_library/us/prd/ops/pc_gsmpi_web_sdk.js https://www.paypal.com/sdk/js *.yotpo.com *.sdiapi.com www.xtento.com cdn.xtento.com *.googleapis.com storage.googleapis.com consent.trustarc.com js-agent.newrelic.com bam.nr-data.net tags.tiqcdn.com www.res-x.com *.googletagmanager.com unsafe-inline t.contentsquare.net app.contentsquare.com payments.worldpay.com *.pcapredict.com services.postcodeanywhere.co.uk www.google.com *.contentsquare.net *.truste.com sp.analytics.yahoo.com s.yimg.com js-tag.zemanta.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat region1.google-analytics.com bat.bing.com r.bing.com *.dwin1.com *.awin1.com *.zenaps.com *.sciencebehindecommerce.com *.optimizely.com optimizely.s3.amazonaws.com cdn-assets-prod.s3.amazonaws.com strict-dynamic *.confirmit.com *.creativecdn.com *.tealiumiq.com *.facebook.com *.facebook.net *.noibu.com wss://*.noibu.com https://www.screwfix.fr 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com webchat.dotdigital.com webchat.staging.dotdigital.com *.dycdn.net cdnjs.cloudflare.com https://fonts.googleapis.com/css *.yotpo.com *.googleapis.com payments.worldpay.com services.postcodeanywhere.co.uk *.bing.com *.dwin1.com *.awin1.com unsafe-inline 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.dycdn.net *.freshrelevance.com wss://*.freshrelevance.com wss://*.dycdn.net dn1i8v75r669j.cloudfront.net *.dotdigital.com *.hub-box.com https://www.google.com/pay https://pay.google.com/gp/p/web_manifest.json https://pay.google.com/gp/p/payment_method_manifest.json https://pay.google.com/ https://google.com/pay *.worldpay.com https://hpp.worldpay.com/app/hpp/135-0/telemetry https://hpp.worldpay.com/app/hpp/135-0/payment/paypalsmartbutton/continue https://www.paypal.com/sdk/js https://payments.worldpay.com/app/hpp/135-0/telemetry/iframe *.yotpo.com *.sdiapi.com *.googleapis.com www.google-analytics.com stats.g.doubleclick.net bam.nr-data.net *.contentsquare.net media.screwfix.fr *.postcodeanywhere.co.uk sp.analytics.yahoo.com s.yimg.com *.bing.com wss://*.bing.com region1.google-analytics.com *.sciencebehindecommerce.com *.google.co.uk *.optimizely.com *.creativecdn.com *.confirmit.com *.tealiumiq.com *.facebook.com *.facebook.net *.noibu.com wss://*.noibu.com 'self' 'unsafe-inline'; child-src blob: http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://e90dc890-c7f3-4322-adbb-3a37b4df98b3.sansec.watch/; report-to report-endpoint; 1
worker-src blob:; sandbox *.425.degree *.425degree.com 425degree.com www.425degree.com https://www.facebook.com *.facebook.com *.facebook.net *.tiktok.com https://browser-intake-datadoghq.com *.datadoghq.com; font-src *.cloudflare.com *.425degree.com *.fontawesome.com *.typekit.net *.trustedshops.com https://browser-intake-datadoghq.com *.datadoghq.com *.googleapis.com https://www.gstatic.com fonts.gstatic.com *.kxcdn.com maxcdn.bootstrapcdn.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action www.facebook.com https://browser-intake-datadoghq.com *.datadoghq.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.doubleclick.net *.infogram.com *.facebook.com *.googleadservices.com *.googlesyndication.com https://www.google.co.th *.kasikornbank.com *.googletagmanager.com *.pinterest.com *.425.degree *.425degree.com https://browser-intake-datadoghq.com *.datadoghq.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com https://www.google.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com *.cloudflare.com https://cdn.klarna.com *.425degree.com *.425.degree https://www.trustmarkthai.com/ https://t.co https://www.google.co.th *.doubleclick.net *.facebook.com *.pinterest.com https://www.googletagmanager.com/ *.googleadservices.com *.paypal.com *.vimeocdn.com https://s.ytimg.com *.usercentrics.eu *.clarity.ms www.clarity.ms *.bing.com https://browser-intake-datadoghq.com *.datadoghq.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com i.ytimg.com *.youtube.com validator.swagger.io *.googleapis.com *.gstatic.com *.cdninstagram.com *.kxcdn.com *.twitter.com *.google.com *.fbcdn.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com *.cloudflare.com https://www.trustmarkthai.com/ https://chimpstatic.com/ *.twitter.com *.ads-twitter.com *.425.degree *.425degree.com https://googleads.g.doubleclick.net *.infogram.com *.facebook.com *.newrelic.com *.nr-data.net *.pinimg.com www.google-analytics.com *.googlesyndication.com *.trustedshops.com *.usercentrics.eu *.tiktok.com *.fullstory.com *.clarity.ms www.clarity.ms *.bing.com https://browser-intake-datadoghq.com *.datadoghq.com www.googleadservices.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com https://www.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.kasikornbank.com www.facebook.com graph.facebook.com business.facebook.com twitter.com https://www.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cloudflare.com *.425degree.com *.fontawesome.com *.typekit.net *.trustedshops.com *.usercentrics.eu https://browser-intake-datadoghq.com *.datadoghq.com fonts.googleapis.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com downloads.mailchimp.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.425.degree *.425degree.com https://browser-intake-datadoghq.com *.datadoghq.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.cloudflare.com *.pinterest.com *.paypal.com *.tiktok.com *.fullstory.com *.clarity.ms www.clarity.ms *.bing.com https://browser-intake-datadoghq.com *.datadoghq.com https://www.trustmarkthai.com/ https://t.co *.425.degree *.nr-data.net www.facebook.com www.google-analytics.com *.doubleclick.net www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self' https: data: wss: http: umbraco.tv packages.umbraco.org our.umbraco.org; block-all-mixed-content; form-action https:;script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.cloudflare.com static.cloudflareinsights.com umbraco.tv packages.umbraco.org our.umbraco.org code.jquery.com fonts.googleapis.com use.typekit.net unpkg.com cdn.jsdelivr.net ajax.aspnetcdn.com kit.fontawesome.com www.googletagmanager.com www.recaptcha.net www.google.com www.google-analytics.com www.gstatic.com js.authorize.net jstest.authorize.net;font-src 'self' https: data: fonts.gstatic.com use.typekit.net kit-pro.fontawesome.com;img-src 'self' https: data: umbraco.tv packages.umbraco.org our.umbraco.org p.typekit.net www.goole-analytics.com www.gstatic.com www.googletagmanager.com;media-src https: data: umbraco.tv packages.umbraco.org our.umbraco.org p.typekit.net;style-src 'self' 'unsafe-inline' https: data: use.typekit.net p.typekit.net fonts.googleapis.com kit-pro.fontawesome.com unpkg.com cdn.jsdelivr.net; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://maps.googleapis.com https://accounts.google.com https://appleid.cdn-apple.com https://www.paypal.com https://widget.intercom.io https://js.intercomcdn.com https://cdn.speedcurve.com https://www.youtube.com https://connect.facebook.net https://*.sentry.io; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://js.intercomcdn.com; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; frame-src 'self' https://www.youtube.com https://www.google.com https://maps.google.com https://www.paypal.com https://www.facebook.com https://widget.intercom.io https://appleid.apple.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
worker-src 'self' blob:; font-src www.paypalobjects.com 'self' data: *.gstatic.com 'self' data: *.varify.io data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ 'self' *.jotform.com secure.pay1.de *.tokenization.secure.payone.com *.weltpixel.com *.google.com/ payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.trustpilot.com *.googletagmanager.com *.doubleclick.net *.criteo.com *.criteo.net *.facebook.com *.online-metrix.net *.payla.io *.scratcher.io *.varify.io vimeo.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io 'self' *.online-metrix.net ake-e2ee.s3.amazonaws.com render.barcodes.systems cdn.pay1.de https://images.unsplash.com https://www.magezon.com x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com https://x.klarnacdn.net maps.gstatic.com *.googleapis.com *.ggpht.com *.hsforms.net *.hsforms.com 'self' data: *.gstatic.com *.googletagmanager.com *.doubleclick.net *.google.com *.consentmanager.net *.contentsquare.net *.criteo.com *.criteo.net *.emarsys.net *.facebook.com *.facebook.net *.jotform.com *.payla.io *.scratcher.io *.sysnetgs.com *.trustpilot.com *.trustpilot.net data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' www.google.de zldqcc.dodenhof.de; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ 'self' *.online-metrix.net *.scarabresearch.com secure.pay1.de *.tokenization.secure.payone.com https://maps.googleapis.com https://player.vimeo.com *.google.com d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io https://secure.pay1.de https://x.klarnacdn.net maps.googleapis.com *.trustpilot.com *.hsforms.net *.hsforms.com *.gstatic.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.baqend.com *.consentmanager.net *.contentsquare.com *.contentsquare.net *.criteo.com d5yoctgpv4cpx.cloudfront.net *.facebook.net *.jotform.com *.openai.com *.pay1.de *.payla.io *.scratcher.io *.sentry-cdn.com *.sysnetgs.com *.tag-monitoring.com *.varify.io 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src d.ratepay.com d.payla.io dr.payla.io src.mastercard.com *.trustpilot.com *.googleapis.com *.gstatic.com *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com *.consentmanager.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io 'self' *.scarabresearch.com h.online-metrix.net secure.pay1.de *.tokenization.secure.payone.com https://maps.googleapis.com https://player.vimeo.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.gstatic.com data: t.elasticsuite.io *.hsforms.net *.hsforms.com *.doubleclick.net 127.0.0.1 ake-e2ee.s3.amazonaws.com *.baqend.com *.consentmanager.net *.contentsquare.com *.contentsquare.net *.criteo.com *.emarsys.net *.facebook.com *.facebook.net localhost *.online-metrix.net *.openai.com p2iqhncxyh.execute-api.eu-central-1.amazonaws.com *.payla.io *.sentry-cdn.com *.sentry.io *.tag-monitoring.com *.trustpilot.com *.varify.io 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' www.google.com; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' secure.pay1.de *.googleapis.com *.criteo.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; base-uri 'self' 'unsafe-inline'; report-uri https://1e8f5bec-f9ea-40a5-b847-cd8990d97b94.sansec.watch/; report-to report-endpoint; 1
default-src 'self'           *.ponycanyon.co.jp;         font-src 'self'           *.ponycanyon.co.jp           fonts.gstatic.com           data:;         form-action 'self'           *.ponycanyon.co.jp;         worker-src 'self'           blob:           *.ponycanyon.co.jp           cdnjs.cloudflare.com;         connect-src 'self'           *.ponycanyon.co.jp           *.google-analytics.com           *.analytics.google.com           *.googletagmanager.com           *.g.doubleclick.net           *.google.com           www.google.co.jp 	  *.clarity.ms;         frame-src 'self'           *.ponycanyon.co.jp           www.youtube.com           td.doubleclick.net 	  www.googletagmanager.com           open.spotify.com 	  embed-cdn.spotifycdn.com;         img-src *;         media-src 'self'           blob:           *.ponycanyon.co.jp;         script-src 'self'           'unsafe-inline'           *.ponycanyon.co.jp           ajax.aspnetcdn.com           cdn.jsdelivr.net           cdnjs.cloudflare.com           *.googletagmanager.com           *.google.com           www.google-analytics.com           ad.jp.ap.valuecommerce.com 	  *.clarity.ms 	  embed-cdn.spotifycdn.com;         style-src 'self'           'unsafe-inline'           *.ponycanyon.co.jp           cdn.jsdelivr.net           cdnjs.cloudflare.com           fonts.googleapis.com           tagmanager.google.com;         report-uri https://csp-log.ponycanyon.co.jp/; 1
default-src 'self'; connect-src 'self' https://*.adsrvr.org https://*.arcgis.com https://*.clarity.ms https://*.googleapis.com https://*.googlesyndication.com https://*.lovi.ai https://*.onetrust.com https://*.openfpcdn.io https://*.pingdom.net https://*.schaer.com https://*.teads.tv https://*.userway.org https://*.yotpo.com https://ad.doubleclick.net https://analytics-ipv6.tiktokw.us https://analytics.tiktok.com https://brands.click2buy.com https://cdn.cookielaw.org https://ct.pinterest.com https://demo-1.conversionsapigateway.com https://*.g.doubleclick.net https://hlc7l6v5w6.execute-api.us-west-2.amazonaws.com https://*.adnxs.com https://lets.shop https://maxmind.destinilocators.com https://*.google-analytics.com https://s.yimg.com https://www.facebook.com https://www.google.at https://www.google.be https://www.google.ca https://www.google.ch https://www.google.co.uk https://*.google.com https://www.google.com.ar https://www.google.com.br https://www.google.com.mx https://www.google.com.tr https://www.google.cz https://www.google.de https://www.google.dk https://www.google.ee https://www.google.es https://www.google.fi https://www.google.fr https://www.google.gr https://www.google.hr https://www.google.hu https://www.google.it https://www.google.nl https://www.google.no https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.rs https://www.google.ru https://www.google.se https://www.google.si https://www.google.sk https://www.googleadservices.com https://*.googletagmanager.com https://www.opinionstage.com https://*.a.run.app data: https://connect.facebook.net https://*.gstatic.com https://p.yotpoapi.com https://gmc.lingotek.com https://google.com https://www.google.ie https://www.google.com.au https://www.google.cl https://www.google.com.sa https://www.google.com.lb https://www.google.co.il https://www.google.com.cy https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' data: https://*.schaer.com https://*.arcgis.com https://*.gstatic.com https://*.userway.org https://*.yotpo.com; frame-src 'self' https://*.adsrvr.org https://*.fls.doubleclick.net https://game-eu.flarie.com https://game.flarie.com https://gateway.zscloud.net https://*.lovi.ai https://*.userway.org https://ct.pinterest.com https://*.adform.net https://www.facebook.com https://www.google.com https://www.instagram.com https://*.googletagmanager.com https://www.opinionstage.com https://www.youtube.com https://game-us.flarie.com https://game-ap.flarie.com https://drschaer.api.oneall.com https://www.gut-sense.com https://*.googlesyndication.com; img-src 'self' blob: data: https:; media-src 'self' data: https://*.userway.org; object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://*.adsrvr.org https://*.arcgis.com https://*.blackfire.io https://*.clarity.ms https://*.googleapis.com https://*.gstatic.com https://*.lovi.ai https://*.pingdom.net https://*.serving-sys.com https://*.teads.tv https://*.userway.org https://*.yotpo.com https://*.adnxs.com https://ad.uinterbox.com https://analytics.clic2buy.com https://analytics.tiktok.com https://cdn.cookielaw.org https://connect.facebook.net https://ct.pinterest.com https://*.g.doubleclick.net https://googletagmanager.com https://lets.shop https://s.pinimg.com https://s.yimg.com https://unpkg.com https://www.google.com https://www.instagram.com https://*.googletagmanager.com https://www.opinionstage.com https://*.adform.net https://play.flarie.com https://secured-pixel.com https://www.youtube.com blob: https://*.schaer.com https://apis.google.com gmc.lingotek.com https://cdn.jsdelivr.net https://cscoreproweustor.blob.core.windows.net https://d3js.org https://maxcdn.bootstrapcdn.com https://widget.clic2buy.com maps.google.com; script-src-elem 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://*.adsrvr.org https://*.arcgis.com https://*.blackfire.io https://*.clarity.ms https://*.googleapis.com https://*.gstatic.com https://*.lovi.ai https://*.pingdom.net https://*.serving-sys.com https://*.teads.tv https://*.userway.org https://*.yotpo.com https://*.adnxs.com https://ad.uinterbox.com https://analytics.clic2buy.com https://analytics.tiktok.com https://cdn.cookielaw.org https://connect.facebook.net https://ct.pinterest.com https://*.g.doubleclick.net https://googletagmanager.com https://lets.shop https://s.pinimg.com https://s.yimg.com https://unpkg.com https://www.google.com https://www.instagram.com https://*.googletagmanager.com https://www.opinionstage.com https://*.adform.net https://play.flarie.com https://secured-pixel.com https://www.youtube.com blob: https://*.schaer.com https://apis.google.com gmc.lingotek.com https://cdn.jsdelivr.net https://cscoreproweustor.blob.core.windows.net https://d3js.org https://maxcdn.bootstrapcdn.com https://widget.clic2buy.com maps.google.com; style-src 'self' 'report-sample' 'unsafe-inline' https://*.arcgis.com https://*.googleapis.com https://*.gstatic.com https://*.userway.org https://*.yotpo.com data: https://*.schaer.com https://*.googletagmanager.com gmc.lingotek.com https://cdn.jsdelivr.net; worker-src 'self' blob:; base-uri 'self'; form-action 'self' https://www.facebook.com https://*.schaer.com; frame-ancestors 'self' https://*.schaer.com; report-uri https://www.schaer.com/en-us/log-report-uri/reportOnly 1
default-src 'self'; connect-src 'self' https://t.segger.com/ https://segger-corporate-fal-nprd.s3.eu-central-1.amazonaws.com https://segger-corporate-fal-nprd.s3.amazonaws.com; font-src 'self' 'unsafe-inline' data: ; style-src 'self' 'unsafe-inline' data: ; img-src 'self' data: blob: https://t.segger.com/ https://kb.segger.com/ https://i.ytimg.com https://segger-corporate-fal-nprd.s3.eu-central-1.amazonaws.com https://segger-corporate-fal-nprd.s3.amazonaws.com; script-src 'self' 'unsafe-inline' https://t.segger.com/; script-src-elem 'self' 'unsafe-inline' https://t.segger.com/ https://www.youtube.com/iframe_api; frame-src https://www.youtube-nocookie.com 'self'; object-src 'self' data: blob:; media-src 'self'; report-uri https://sentry.marketing-factory.de/api/23/security/?sentry_key=c95fa11bd7c34b6757a4f34eca12437f 1
default-src 'self' blob:  https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; frame-src 'self' https://*.noxiaohao.com https://telegram.org https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://accounts.google.com https://oauth.telegram.org https://sgtm.btsgtm.com  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; script-src 'self' 'nonce-RXbLRLE1wgQEHWCo3CmncQ==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh/v3RIRuG3kMikr5iha+7P/0TN/GNA=' https://*.noxiaohao.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://accounts.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://play.google.com https://analytics.google.com https://fonts.gstatic.com https://telegram.org https://oauth.telegram.org https://*.geetest.com https://*.geevisit.com https://sgtm.btsgtm.com https://static.wangsustatic.xyz https://static.wangsustatic.vip ; connect-src 'self' https://stats.g.doubleclick.net https://analytics.google.com https://*.noxiaohao.com wss://*.noxiaohao.com wss: https://www.turingfraud.net https://play.google.com https://accounts.google.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://telegram.org https://oauth.telegram.org https://static.geetest.com https://static.geevisit.com wss://stream.bitget.cloud https://www.google.com https://sgtm.btsgtm.com  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; worker-src 'self' blob:; img-src 'self' data: blob: https://img.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://img.bitgetimg.com https://img.gurenla.com https://*.bgbstatic.com https://lh3.googleusercontent.com https://static.geetest.com https://static.geevisit.com https://static-web.jjdsn.vip https://cdn.bitkeep.vip https://www.google.co.jp https://bin.wangsustatic.com https://sgtm.btsgtm.com https://analytics.google.com https://stats.g.doubleclick.net  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; style-src 'self' 'unsafe-inline' https://static.geetest.com https://static.geevisit.com https://accounts.google.com https://fonts.googleapis.com https://static.bgbstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; font-src 'self' data: https://static.geetest.com https://static.geevisit.com https://fonts.gstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri /v1/buried/log/cspSecurity /v1/monitor/csp?appId=d4b6df7d; 1
default-src 'self'; style-src 'self' 'unsafe-inline' https://*.typekit.net https://fonts.googleapis.com https://cdn.jsdelivr.net https://*.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleapis.com https://*.loginwithamazon.com https://*.doubleclick.net https://cdn-cookieyes.com https://js.hs-scripts.com https://js.hs-banner.com https://js.usemessages.com https://js.hsadspixel.net https://js.hs-analytics.net https://snap.licdn.com https://*.zdassets.com https://*.facebook.net https://*.c-ctrip.com https://*.quantummetric.com https://*.scriptcdn.net https://*.alipayobjects.com https://*.navahididi.com https://cdn.brightwrite.com https://cdn.brightwrite-staging.com https://*.fullstory.com https://fullstory.com https://*.xcover.com; connect-src 'self' https://*.sentry.io https://sentry.io https://*.amazonaws.com https://*.amazon.com https://*.google.com https://google.com https://*.google.com.au https://*.google.com.br https://*.google.com.co https://*.google.com.mt https://*.google.com.mx https://*.google.com.sg https://*.google.com.sv https://*.google.com.ph https://*.googleapis.com https://*.google-analytics.com https://*.google.ae https://*.google.at https://*.google.be https://*.google.ch https://*.google.cz https://*.google.de https://*.google.es https://*.google.fr https://*.google.hu https://*.google.ie https://*.google.it https://*.google.nl https://*.google.no https://*.google.pl https://*.google.pt https://*.google.co.id https://*.google.co.jp https://*.google.co.kr https://*.google.com.my https://*.google.com.tr https://*.google.com.tw https://*.google.co.uk https://*.google.co.za https://*.doubleclick.net https://*.linkedin.com https://*.hubapi.com https://*.cookieyes.com https://cdn-cookieyes.com https://*.brightwrite.com https://brightwrite-data.com https://*.fullstory.com https://*.hubspot.com https://*.adyen.com https://*.zdassets.com https://*.xcover.com https://*.covergenius.biz https://*.zendesk.com https://*.hsforms.com https://api.transferwise.com blob: data: https://browser-intake-datadoghq.eu https://*.datadoghq.eu https://*.googlesyndication.com; img-src 'self' https: data: blob:; font-src 'self' https: data:; frame-src 'self' https://*.google.com https://*.googletagmanager.com https://*.amazon.com https://*.doubleclick.net https://*.adyen.com https://*.web.app https://*.xcover.com; worker-src 'self' blob:; upgrade-insecure-requests; report-uri https://csp-report.browser-intake-datadoghq.eu/api/v2/logs?dd-api-key=pube2daa5996f2fad21d085fd09ecccdd5d&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Axcover-website%2Ccluster-group%3Axcover%2Cenv%3Aproduction 1
default-src 'self' https://www.googletagmanager.com https://connect.facebook.net; child-src 'self' https://unisabanastartdev.prod.acquia-sites.com https://unisabanastartstage.prod.acquia-sites.com https://unisabanastartprod.prod.acquia-sites.com https://campusvirtual.unisabana.edu.co http://campusvirtual.unisabana.edu.co; connect-src 'self' https: data: wss:; font-src 'self' data: https:; frame-src 'self' https://static.addtoany.com https://cdn.userway.org https://www.youtube.com https://online.flippingbook.com https://formconnector.com https://view.genially.com https://vimeo.com https://player.vimeo.com https://www.google.com https://canvateam.zendesk.com https://phoenix.canva.com https://www.canva-iris.com https://www.canva.com https://app.powerbi.com https://view.genial.ly https://w.soundcloud.com https://www.googletagmanager.com https://td.doubleclick.net https://calendar.google.com https://google.com https://live.unisabana.edu.co https://avi.unisabana.edu.co; img-src 'self' data: https: blob:; media-src 'self' data: https: blob:; object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://js-agent.newrelic.com/nr-spa-1.310.1.min.js https://cdn.userway.org https://cdn.gtranslate.net https://cdn.agentbot.net https://www.youtube.com https://vimeo.com https://player.vimeo.com https://translate.google.com https://translate.googleapis.com https://translate-pa.googleapis.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google-analytics.com https://connect.facebook.net https://d335luupugsy2.cloudfront.net https://www.facebook.com https://*.facebook.net https://*.fbcdn.net https://snap.licdn.com https://avi-web-scripts.s3.us-east-1.amazonaws.com https://avi.unisabana.edu.co https://www.clarity.ms https://images.unisabana.edu.co https://scripts.clarity.ms cdn.jsdelivr.net https://cdnjs.cloudflare.com https://static.addtoany.com https://unpkg.com maps.googleapis.com; style-src 'self' 'report-sample' 'unsafe-inline' https://cdn.userway.org https://static.canva.com https://unpkg.com https://cdnjs.cloudflare.com https://cdn.gtranslate.net https://translate.google.com https://translate.googleapis.com https://translate-pa.googleapis.com https://www.gstatic.com cdn.jsdelivr.net fonts.googleapis.com; webrtc 'block'; worker-src 'self' blob:; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://www.unisabana.edu.co https://unisabanastartdev.prod.acquia-sites.com https://unisabanastartstage.prod.acquia-sites.com https://unisabanastartprod.prod.acquia-sites.com https://campusvirtual.unisabana.edu.co http://campusvirtual.unisabana.edu.co https://unisabanaprod.acquia-sites.com https://unisabanaprod.prod.acquia-sites.com 1
default-src 'self' dropbox.okta.com *.oktacdn.com; connect-src 'self' dropbox.okta.com dropbox-admin.okta.com *.oktacdn.com *.mixpanel.com *.mapbox.com dropbox.kerberos.okta.com dropbox.mtls.okta.com *.authenticatorlocalprod.com:8769 http://localhost:8769 http://127.0.0.1:8769 *.authenticatorlocalprod.com:65111 http://localhost:65111 http://127.0.0.1:65111 *.authenticatorlocalprod.com:65121 http://localhost:65121 http://127.0.0.1:65121 *.authenticatorlocalprod.com:65131 http://localhost:65131 http://127.0.0.1:65131 *.authenticatorlocalprod.com:65141 http://localhost:65141 http://127.0.0.1:65141 *.authenticatorlocalprod.com:65151 http://localhost:65151 http://127.0.0.1:65151 https://oinmanager.okta.com data: *.ingest.sentry.io; script-src 'unsafe-inline' 'nonce-m_5HOtq29bufiP5IOP_Ruw' 'self' 'report-sample' dropbox.okta.com *.oktacdn.com; style-src 'unsafe-inline' 'nonce-m_5HOtq29bufiP5IOP_Ruw' 'self' 'report-sample' dropbox.okta.com *.oktacdn.com; frame-src 'self' dropbox.okta.com dropbox-admin.okta.com login.okta.com *.vidyard.com com-okta-authenticator: api-37ec43d7.duosecurity.com; img-src 'self' dropbox.okta.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: blob:; font-src 'self' dropbox.okta.com data: *.oktacdn.com fonts.gstatic.com; frame-ancestors 'self' https://app.dropboxer.net 1
default-src 'self'; script-src 'self' 'unsafe-inline'   https://*.googlesyndication.com   https://*.doubleclick.net   https://googleads.g.doubleclick.net   https://pagead2.googlesyndication.com   https://tpc.googlesyndication.com   https://www.googletagmanager.com   https://www.google-analytics.com   https://*.google.com   https://adservice.google.com https://adservice.google.co.uk   https://challenges.cloudflare.com   https://www.gstatic.com https://www.recaptcha.net   https://static.cloudflareinsights.com   https://*.adtrafficquality.google; connect-src 'self' https:; img-src 'self' data: blob: https:; frame-src 'self'   https://*.doubleclick.net https://*.googlesyndication.com   https://googleads.g.doubleclick.net https://tpc.googlesyndication.com   https://fundingchoicesmessages.google.com   https://*.google.com https://www.gstatic.com https://www.recaptcha.net   https://challenges.cloudflare.com   https://*.adtrafficquality.google; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; base-uri 'self'; frame-ancestors 'self'; upgrade-insecure-requests; 1
object-src 'none';base-uri 'self';script-src 'nonce-XXQAl92p0giuif4gM5S0Yw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-IL2qEdSSKh82lLPAmWuJfw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' https://www.googletagmanager.com https://tagmanager.google.com https://dig-aboprod.noncd.db.de https://*.consentmanager.net https://web-assets-stage.dc.vvs.de https://web-assets-prod.dc.vvs.de https://www-assets.vvs.de 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://bildermangel.de https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://*.consentmanager.net https://web-assets-stage.dc.vvs.de https://web-assets-prod.dc.vvs.de https://www-assets.vvs.de; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://www.youtube.com https://www.youtube-nocookie.com https://*.vvs.de https://vvsjobs.softgarden.io https://www.paperturn-view.com http://paperturn-view.com https://*.paperturn-view.com https://www.unserebroschuere.de https://dig-aboprod.noncd.db.de https://www.googletagmanager.com https://*.consentmanager.net; font-src 'self' https://dig-aboprod.noncd.db.de https://*.consentmanager.net https://web-assets-stage.dc.vvs.de https://web-assets-prod.dc.vvs.de https://www-assets.vvs.de; worker-src 'self' https://www.googletagmanager.com https://tagmanager.google.com https://dig-aboprod.noncd.db.de https://*.consentmanager.net https://web-assets-stage.dc.vvs.de https://web-assets-prod.dc.vvs.de https://www-assets.vvs.de https://*.vvs.de; connect-src 'self' https://apistaging.vvs.de https://*.vvs.de https://www.google-analytics.com https://stats.g.doubleclick.net https://analytics.google.com https://www.googletagmanager.com https://region1.google-analytics.com https://abo.bahn.de https://dig-aboprod.noncd.db.de https://*.consentmanager.net https://web-assets-stage.dc.vvs.de https://web-assets-prod.dc.vvs.de https://www-assets.vvs.de; object-src 'none'; style-src 'self' https://dig-aboprod.noncd.db.de https://*.consentmanager.net https://web-assets-stage.dc.vvs.de https://web-assets-prod.dc.vvs.de https://www-assets.vvs.de 'unsafe-inline' 'report-sample'; form-action 'self' https://dig-aboprod.noncd.db.de https://abo.bahn.de; script-src-attr 'none' 'report-sample'; report-uri https://www.vvs.de/@http-reporting?csp=report&requestTime=1758610862619452&requestHash=37a59644ef9051c8efc5aa5fa70c9054b934deef 1
default-src 'none'; worker-src 'none'; style-src 'unsafe-inline' *; font-src 'self' data:; base-uri 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io browser.sentry-cdn.com; object-src 'none'; frame-ancestors 'none'; img-src blob: data: *; frame-src demo.arcade.software; script-src 'self' 'unsafe-inline' 'report-sample' 'nonce-6likvNU2oRoTkEG3kLBP1A=='; media-src * 1
default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://code.jquery.com/ui/ https://src.mastercard.com/srci/integration/components/ https://cdn.jsdelivr.net/npm/intl-tel-input@25.3.1/build/css/intlTelInput.css https://cdn.gotab.io/static/; script-src 'self' 'unsafe-eval' 'nonce-8e884640073c236007a7d6a8bdb9ae1f' https://js.stripe.com/ https://g.stripe.com/ https://hosted.paysafe.com/request/ https://ajax.cloudflare.com https://cdnjs.cloudflare.com/ajax/libs/moment.js/ https://static.cloudflareinsights.com https://cdn.webrtc-experiment.com/DetectRTC.min.js https://code.jquery.com/ui/ https://maps.googleapis.com/maps/api/ https://challenges.cloudflare.com/turnstile/v0/api.js https://www.google.com/recaptcha/api.js https://www.datadoghq-browser-agent.com/datadog-logs-us.js https://www.datadoghq-browser-agent.com/datadog-rum-us.js https://www.datadoghq-browser-agent.com/datadog-rum-v4.js http://stats.pusher.com/timeline/v2/jsonp/ https://cdn.onesignal.com/ https://onesignal.com/api/v1/sync/ https://hpoint-cr-binaries-prod.s3.amazonaws.com/cloud/sdk/wrappers/js/ https://cdn.jsdelivr.net/npm/intl-tel-input@25.3.1/build/js/intlTelInputWithUtils.min.js https://src.mastercard.com/ https://secure.checkout.visa.com/checkout-widget/resources/js/ https://qwww.aexp-static.com/akamai/remotecommerce/scripts/ https://webapp.src.discover.com/websdk/ https://content.discovercard.com/ https://js.verygoodvault.com/vgs-collect/ https://js3.verygoodvault.com/vgs-collect/ https://live.adyen.com/hpp/js/df.js https://www.datadoghq-browser-agent.com/datadog-logs-v4.js https://applepay.cdn-apple.com/jsapi/ https://cdn.gotab.io/static/; font-src 'self' data: https://fonts.gstatic.com https://cdn.gotab.io/static/; img-src 'self' data: https://img.gotab.io/ https://static.gotab.io/ https://s3.amazonaws.com/gotabpublic/ https://s3.amazonaws.com/gotabpublic/ https://maps.gstatic.com/ https://maps.googleapis.com/maps/ https://i.vimeocdn.com/video/ https://src.mastercard.com/srci/integration/ https://content.discovercard.com/ https://cdn.jsdelivr.net/npm/intl-tel-input@25.3.1/build/img/ https://*.untappd.com/ https://checkoutshopper-live.adyen.com/checkoutshopper/images/ https://checkoutshopper-live-us.adyen.com/ https://checkoutshopper-live.cdn.adyen.com/checkoutshopper/images/ https://checkoutshopper-live-us.cdn.adyen.com/checkoutshopper/images/ https://applepay.cdn-apple.com https://*.googleapis.com https://gotabpublic.s3.amazonaws.com/ https://cdn.gotab.io/static/; media-src 'self' data: https://s3.amazonaws.com/gotabpublic/ https://gotabpublic.s3.amazonaws.com/ https://cdn.gotab.io/static/; frame-src 'self' https://js.stripe.com/ https://metabase.gotab.io/ https://report.gotab.io/ https://www.google.com/ https://js.verygoodvault.com/vgs-collect/ https://content.discovercard.com/ https://src.mastercard.com/ https://srcdcf.americanexpress.com/ https://secure.checkout.visa.com/checkout-widget/ https://checkoutshopper-live.adyen.com/ https://checkoutshopper-live-us.adyen.com/ https://challenges.cloudflare.com/ https://applepay.cdn-apple.com https://loveychat.gotab.io/ https://app.opsi.io/; connect-src 'self' https://*.gotab.io/ wss://stats.gotab.io/ https://s3.amazonaws.com/gotabpublic/ https://s3.amazonaws.com/gotabpublic/ https://hosted.paysafe.com/request/api/ https://api.paysafe.com/request/api/ https://api.paysafe.com/request/api/v1/ https://checkoutshopper-live.adyen.com/checkoutshopper/ https://checkoutshopper-live-us.adyen.com/ https://checkoutanalytics-live.adyen.com/checkoutanalytics/ https://checkoutanalytics-live-us.adyen.com/checkoutanalytics/ https://*.logs.datadoghq.com/ https://*.browser-intake-datadoghq.com/ https://openreplay.gotab.org/ https://otel.gotab.io/ *.verygoodvault.com *.verygoodproxy.com https://maps.googleapis.com/maps/api/ https://cloud.handpoint.io/ https://cloud.handpoint.com/ ws://ws-mt1.pusher.com/app/ https://vimeo.com/api/ https://vgs-collect-keeper.apps.verygood.systems/vgs https://*.mastercard.com/ https://*.aexp-static.com/ https://*.americanexpress.com/ https://*.visa.com/ https://*.staticv.me/ https://*.discover.com/ https://*.discovercard.com/ https://content.discovercard.com/ https://src.apis.discover.com/sdk/ https://www.google.com/maps/conversion/collect https://*.googleapis.com https://www.google.com/recaptcha/ https://home.gotablocal.com https://home1.gotablocal.com; worker-src 'self' blob: https://cdn.gotab.io/static/; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub4721f170b2076f8c4dce4d125ff9509d&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=version%3Adev%2Cservice%3Agotabnode%2Cenv%3Aproduction; report-to csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; script-src-elem 'self' 'unsafe-inline' https: blob:; style-src 'self' 'unsafe-inline' https:; style-src-elem 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss: blob:; media-src 'self' blob: data: https:; frame-src 'self' https:; child-src 'self' blob: https:; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; report-uri /internal/api/csp-report; report-to csp-endpoint 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' 'nonce-6ffe1c8a-ca88-4ed3-9f2a-b2f3638210d4'  *.aaui-879784980514.s3.us-east-2.amazonaws.com *.aauicdnva7.azureedge.net *.adform.net *.app.launchdarkly.com *.awaascicdprodva7.blob.core.windows.net *.d30ln29764hddd.cloudfront.net *.doubleclick.net *.euroland.com *.eurolandir.com *.googletagmanager.com *.jquery.com *.leaddesk.com *.linkedin.com *.omniture.com *.omtrdc.net *.services.adobe.com *.youtube.com http://maps.google.com/maps-api-v3/api/ http://maps.google.com/maps/api/ http://maps.googleapis.com/maps/api/ https://*.aptrinsic.com https://*.flockler.com https://adminconsole.adobe.com https://adobe.com https://adobe.io https://adobe.net https://adobeid-na1.services.adobe.com https://ajax.googleapis.com https://analytics-eu.clickdimensions.com https://api.emea01.idio.episerver.net https://app.powerbi.com https://assets.adobedtm.com https://assets.adobedtm.com https://assets2.adobe.com https://az416426.vo.msecnd.net/scripts/a/ai.0.js https://cdn.cookielaw.org https://cdn.jsdelivr.net/npm/ https://cdnjs.cloudflare.com/ajax/libs/popper.js/ https://cloudui-emea01.profilestore.episerver.net https://connect.facebook.net https://cookie-cdn.cookiepro.com https://d1igp3oop3iho5.cloudfront.net/v2/YTCU__QFgA3N4sqa5K5xQA-eu1/zaius-min.js https://d1igp3oop3iho5.cloudfront.net/v2/buA6R3hGThUwo2b3jMhdjQ-eu1/zaius-min.js https://dl.episerver.net https://fl-cdn.scdn1.secure.raxcdn.com https://geolocation.onetrust.com https://googleads.g.doubleclick.net https://js.monitor.azure.com/scripts/ https://kuula.co https://ld-webchat.s3.eu-north-1.amazonaws.com https://login.microsoftonline.com https://maps.googleapis.com https://maxcdn.bootstrapcdn.com/bootstrap/ https://research.innolink.fi https://s.emea01.idio.episerver.net/ https://snap.licdn.com https://sstats.adobe.com https://static.ads-twitter.com https://tpc.googlesyndication.com https://videolle.viewin360.co https://www.google.com https://www.google.com/recaptcha/ https://www.googleadservices.com https://www.gstatic.com/recaptcha/ https://youtube.com https://metsa-virtual-exhibition.netlify.app https://metsa-virtual-exhibition-two.netlify.app  https://cxppusa1formui01cdnsa01-endpoint.azureedge.net/  https://*.hotjar.com/ https://cxppeur1rdrect01sa02cdn.blob.core.windows.net/ https://analytics.tiktok.com/ https://s.pinimg.com/ https://ct.pinterest.com ;  report-uri https://www.metsagroup.com/api/reporting/;  report-to csp-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.payfabric.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.payfabric.com https://www.trustedsite.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net *.paypal.com *.typekit.net *.gstatic.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com acsbapp.com acsbap.com *.acsbapp.com *.acsbap.com *.payfabric.com https://cdn.ywxi.net https://meetanshi.com/media/logo.png www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.commerce-payment-services.com *.magento-datasolutions.com *.magento-ds.com *.typekit.net google.com *.google.com tagmanager.google.com https://www.googletagmanager.com chimpstatic.com downloads.mailchimp.com *.list-manage.com acsbapp.com acsbap.com *.acsbapp.com *.acsbap.com *.googleapis.com *.payfabric.com https://cdn.ywxi.net https://www.trustedsite.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com downloads.mailchimp.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io *.paypal.com google.com *.google.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com acsbapp.com acsbap.com *.acsbapp.com *.acsbap.com *.wikipedia.org *.googleapis.com *.payfabric.com https://s3-us-west-2.amazonaws.com/mfesecure-public/ https://www.trustedsite.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
connect-src 'self' data: wss://fulltextsearch.org/flare ka-f.fontawesome.com yoast.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://www.google.pl translate.googleapis.com www.gdpsystem.eu connect.facebook.net; default-src 'self'; font-src 'self' data: https://fonts.gstatic.com fonts.googleapis.com cdn.jsdelivr.net *.fontawesome.com/releases/v5.15.4/; frame-src 'self' data: uwr.edu.pl *.uwr.edu.pl maps.google.com *.youtube.com youtube.com player.vimeo.com www.google.com; img-src 'self' data: blob: graph.facebook.com *.xx.fbcdn.net s.w.org *.ytimg.com uwr.edu.pl *.uwr.edu.pl *.fna.fbcdn.net secure.gravatar.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com www.google.pl https://ssl.gstatic.com https://www.gstatic.com *.vimeocdn.com; object-src 'self'; script-src 'self' cdn.jsdelivr.net https://*.googletagmanager.com www.youtube.com use.fontawesome.com kit.fontawesome.com ajax.googleapis.com cdn-eu.readspeaker.com polyfill.io code.jquery.com https://tagmanager.google.com www.googletagmanager.com https://www.google-analytics.com www.gdpsystem.eu 'unsafe-eval' 'unsafe-inline'; script-src-elem 'self' uwr.edu.pl data: code.jquery.com kit.fontawesome.com polyfill.io cdn-eu.readspeaker.com cdn-eu.readspeaker.com ajax.googleapis.com cdn.jsdelivr.net www.youtube.com/iframe_api *.www-widgetapi.js www.youtube.com cdnjs.cloudflare.com cdn.datatables.net secure.polldaddy.com connect.facebook.net www.googletagmanager.com www.gdpsystem.eu 'unsafe-inline'; style-src 'self' cdn.jsdelivr.net cdn-eu.readspeaker.com https://tagmanager.google.com https://fonts.googleapis.com www.gdpsystem.eu 'unsafe-inline'; style-src-elem 'self' uwr.edu.pl cdn.jsdelivr.net www.youtube.com fonts.googleapis.com cdn-eu.readspeaker.com www.gdpsystem.eu 'unsafe-inline'; worker-src 'self' uwr.edu.pl blob: 1
default-src 'self' *.googleapis.com *.googletagmanager.com;connect-src 'self' *.gstatic.com *.google.com *.google-analytics.com *.google *.googlesyndication.com *.googletagmanager.com;frame-src 'self' *.google *.doubleclick.net *.google.com *.googlesyndication.com;font-src 'self' data: fonts.gstatic.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cloudflare.com  *.ampproject.org *.facebook.net *.jquery.com *.cloudfront.net *.google *.google.com *.googlesyndication.com *.googletagmanager.com *.googleapis.com;style-src 'self' 'unsafe-inline' 'unsafe-eval' *.jquery.com *.cloudfront.net *.googleapis.com *.cloudflare.com;img-src 'self' data: *.cloudfront.net *.google.com *;report-to csp-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: wss://ws.salecycle.com; object-src 'none'; style-src 'self' https: 'unsafe-hashes' 'unsafe-inline' https://*.aircaraibes.com https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com; img-src 'self' data: https:; media-src 'self'; frame-src 'self' https://*.aircaraibes.com https://aircaraibes.qualifioapp.com https://www.googletagmanager.com/ https://*.salecycle.com https://*.pinterest.com https://*.criteo.com https://*.cloudfront.net; frame-ancestors 'self' https://www.liligo.com https://www.liligo.fr https://checkin.si.amadeus.net https://*.aircaraibes.com; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://*.finchatbot.com; connect-src 'self' https: wss://ws.salecycle.com; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'nonce-e+xoiASCfYRS1n7TRLXuwg==' 'report-sample' 'unsafe-hashes' 'sha256-lfXlPY3+MCPOPb4mrw1Y961+745U3WlDQVcOXdchSQc=' 'sha256-jT+D+kdRwqBci9k8jWtVNp+HR3GntLaboGVzqI/tkXY=' https://www.googletagmanager.com https://connect.facebook.net https://js.braintreegateway.com https://code.jquery.com https://www.redditstatic.com https://cse.google.com https://www.google.com https://www.gstatic.com https://www.youtube.com https://storage.googleapis.com https://cdn.bachtrack.com; script-src-elem 'self' 'nonce-e+xoiASCfYRS1n7TRLXuwg==' 'report-sample' 'unsafe-hashes' 'sha256-lfXlPY3+MCPOPb4mrw1Y961+745U3WlDQVcOXdchSQc=' 'sha256-jT+D+kdRwqBci9k8jWtVNp+HR3GntLaboGVzqI/tkXY=' https://www.googletagmanager.com https://connect.facebook.net https://js.braintreegateway.com https://code.jquery.com https://www.redditstatic.com https://cse.google.com https://www.google.com https://www.gstatic.com https://www.youtube.com https://storage.googleapis.com https://cdn.bachtrack.com; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com https://storage.googleapis.com https://cdn.bachtrack.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://player.vimeo.com https://www.youtube.com https://embed.spotify.com https://open.spotify.com/embed/ https://w.soundcloud.com https://bandcamp.com https://www.arte.tv https://www.google.com https://www.facebook.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://*.reddit.com https://www.facebook.com https://www.google.com https://maps.googleapis.com https://player.vimeo.com https://places.googleapis.com; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com; frame-ancestors 'self'; report-uri /handler/view-error-logs/csp-report 1
default-src 'self'; script-src 'nonce-BRasu7vsUm2pgl6kZyJ3Wg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
object-src 'none';base-uri 'self';script-src 'nonce-MzTWbcRg06jbAyEDmnoCTA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-K9wB2SmmRNpzHmMexxe77A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https://*.google.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googlesyndication.com https://*.googleadservices.com https://*.doubleclick.net https://*.adtrafficquality.google https://*.gstatic.com https://cdn.jsdelivr.net https://d3js.org https://emailfake.com https://pagead2.googlesyndication.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://emailfake.com https://imasdk.googleapis.com https://tempm.com https://www.gstatic.com; img-src 'self' data: blob: https: https://www.google-analytics.com https://www.tempm.com; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net https://fonts.gstatic.com; connect-src 'self' https://*.google.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googlesyndication.com https://*.googleadservices.com https://*.doubleclick.net https://*.adtrafficquality.google https://*.gstatic.com https://email-fake.com https://emailfake.com https://es.emailfake.com https://generator.email https://ip.myip-address.com https://ip4.myip-address.com https://ip6.myip-address.com https://it.emailfake.com https://mail-temp.com https://new.emailfake.com https://tempm.com https://tr.emailfake.com https://translate-pa.googleapis.com https://translate.googleapis.com https://vi.emailfake.com https://www.google.ae https://www.google.al https://www.google.at https://www.google.az https://www.google.be https://www.google.bf https://www.google.bi https://www.google.bj https://www.google.by https://www.google.ca https://www.google.ch https://www.google.ci https://www.google.co.id https://www.google.co.il https://www.google.co.in https://www.google.co.jp https://www.google.co.ke https://www.google.co.kr https://www.google.co.ma https://www.google.co.th https://www.google.co.tz https://www.google.co.uk https://www.google.co.uz https://www.google.co.ve https://www.google.co.za https://www.google.com.ar https://www.google.com.au https://www.google.com.bd https://www.google.com.bh https://www.google.com.bn https://www.google.com.br https://www.google.com.co https://www.google.com.eg https://www.google.com.et https://www.google.com.gh https://www.google.com.hk https://www.google.com.kh https://www.google.com.kw https://www.google.com.lb https://www.google.com.mm https://www.google.com.mx https://www.google.com.my https://www.google.com.ng https://www.google.com.np https://www.google.com.om; media-src 'self' blob: https:; frame-src 'self' https://*.google.com https://*.googlesyndication.com https://*.googleadservices.com https://*.doubleclick.net https://*.adtrafficquality.google; worker-src 'self' blob: 1
object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.clarity.ms https://cdn.cookielaw.org https://www.googletagmanager.com https://www.google-analytics.com https://players.brightcove.net/ https://www.recaptcha.net https://www.gstatic.com https://js-agent.newrelic.com https://pi.pardot.com https://www.youtube.com https://in2.taskanalytics.com https://bam.nr-data.net https://snap.licdn.com https://googleads.g.doubleclick.net https://info.weareplanet.com https://www.googleadservices.com https://static.hotjar.com https://script.hotjar.com https://tag.demandbase.com https://j.6sc.co https://tracking.g2crowd.com https://connect.facebook.net https://tpc.googlesyndication.com https://cdn.weglot.com/weglot.min.js https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com; style-src 'self' 'report-sample' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self' data: blob:; connect-src 'self'; media-src 'self' data: blob:; frame-src 'self' data: blob:; worker-src 'self' data: blob:; manifest-src 'self'; object-src 'self' data: blob:; form-action 'self'; base-uri 'self'; report-uri /csp_reports 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net www.fastco.co.uk data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.fastco.co.uk 'self' 'unsafe-inline'; frame-ancestors www.fastco.co.uk 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * js.mollie.com *.trustpilot.com www.fastco.co.uk 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.apptrian.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com flagpedia.net https://www.mollie.com www.fastco.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.apptrian.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com *.gstatic.com maps.googleapis.com js.mollie.com applepay.cdn-apple.com *.trustpilot.com www.fastco.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com maxcdn.bootstrapcdn.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net *.gstatic.com *.trustpilot.com www.fastco.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com www.fastco.co.uk 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com www.apptrian.com *.ideal-postcodes.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com www.fastco.co.uk 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com www.fastco.co.uk http: https: blob: 'self' 'unsafe-inline'; default-src www.fastco.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'inline-speculation-rules' https://www.google.com https://www.gstatic.com https://pkware.my.site.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://pkware.my.site.com https://www.googletagmanager.com https://www.google-analytics.com; font-src 'self'; connect-src 'self' https://pkware.my.salesforce-scrt.com https://pkware.my.site.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com; media-src 'self'; object-src 'none'; frame-src 'self' https://www.youtube-nocookie.com https://www.google.com https://pkware.my.site.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 1
default-src 'self'; script-src 'report-sample' 'self' https://bat.bing.com https://cdn.segment.com https://connect.facebook.net https://container.pepperjam.com https://dev.visualwebsiteoptimizer.com https://googleads.g.doubleclick.net https://js.stripe.com https://maps.googleapis.com https://player.vimeo.com https://static.zdassets.com https://websdk.appsflyer.com https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://www.upsellit.com https://app.upsellit.com https://cdn.gbqofs.com/bluebottle/u/detector-dom.min.js https://cdn.optimizely.com; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self' https://1wjcus8nhr-1.algolianet.com https://1wjcus8nhr-2.algolianet.com https://1wjcus8nhr-3.algolianet.com https://1wjcus8nhr-dsn.algolia.net https://www.googletagmanager.com https://adservice.google.com https://analytics.google.com https://api.honeybadger.io https://api.segment.io https://app.brightback.com https://banner.appsflyer.com https://bat.bing.com https://blue-bottle-coffee.assembly-api.com https://bluebottlecoffeesupport.zendesk.com https://cdn.segment.com https://cognito-identity.us-east-1.amazonaws.com https://cognito-idp.us-east-1.amazonaws.com https://creatives-cdn.appsflyer.com https://dev.visualwebsiteoptimizer.com https://ekr.zdassets.com https://maps.googleapis.com https://pixel.quantcount.com https://region1.analytics.google.com https://region1.google-analytics.com https://report.nestle.gbqofs.io https://res.cloudinary.com https://stats.g.doubleclick.net https://umry56azoa.execute-api.us-east-1.amazonaws.com https://vimeo.com https://www.facebook.com https://adservice.google.com https://www.google-analytics.com https://www.google.ca https://www.google.com https://logx.optimizely.com; font-src 'self' data: https://cdn.appsflyer.com https://res.cloudinary.com https://static.rakuten.com https://storage.googleapis.com; frame-src 'self' https://8721801.fls.doubleclick.net https://cdn.pbbl.co https://js.stripe.com https://player.vimeo.com https://t.pepperjamnetwork.com https://td.doubleclick.net https://www.facebook.com https://www.googletagmanager.com https://a12600010354.cdn.optimizely.com/; img-src 'self' data: http://res.cloudinary.com https://ad.doubleclick.net https://bat.bing.com https://blue-bottle-cms.global.ssl.fastly.net https://chord-oms-production-public-web-assets.s3.amazonaws.com/bluebottlecoffee/ https://dev.visualwebsiteoptimizer.com https://googleads.g.doubleclick.net https://res.cloudinary.com https://www.facebook.com https://www.google-analytics.com https://adservice.google.com https://www.googleadservices.com https://www.google.ae https://www.google.ca https://www.google.com.co https://www.google.com.mx https://www.google.com.in https://www.google.com.ng https://www.google.sr https://www.google.com.ph https://www.google.com.sa https://www.google.de https://www.google.cn https://www.google.com https://www.google.com.au https://www.google.com.br https://www.google.com.hk https://www.google.com.vn https://www.google.fr https://www.google.it https://www.google.nl https://www.google.no https://www.google.co.kr https://www.google.com.tw https://www.google.co.uk https://www.google.co.jp https://www.google.com.pa https://www.google.bg https://translate.google.com https://www.google.com.gt https://www.googletagmanager.com https://www.upsellit.com; manifest-src 'self'; media-src 'self' https://res.cloudinary.com; worker-src blob:; frame-ancestors https://studio.bluebottlecoffee.dev; report-uri https://6998a7fb68a97a37f8789b5c.endpoint.csper.io?v=0; 1
default-src 'self' cdnweb.sbermobile.ru; frame-src https://cdn.rutarget.ru/ https://api.flocktory.com https://mc.yandex.ru https://tag.rutarget.ru/ ; style-src 'unsafe-inline' 'self' fonts.googleapis.com cdnweb.sbermobile.ru; font-src 'self' cdnweb.sbermobile.ru data: fonts.gstatic.com ; connect-src 'self' https://yandexmetrica.com:*/ *.sbermarketing.ru uaas.yandex.ru ad.adriver.ru api.flocktory.com kraken.rambler.ru https://*.mc.yandex.ru/ https://stats.g.doubleclick.net/ https://suggestions.dadata.ru/ https://suggest-maps.yandex.ru/ https://ymetrica1.com/ https://www.google-analytics.com/ https://unpkg.com/ https://stats.g.doubleclick.net/ https://mc.yandex.ru/ https://*.sberbank.ru/ https://sa.online.sberbank.ru:8098/; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnweb.sbermobile.ru *.yandex.net *.trbcdn.net  top-fwz1.mail.ru api.flocktory.com *.top100.ru *.adriver.ru px.adhigh.net cdn.rutarget.ru yastatic.net *.maps.yandex.net suggest-maps.yandex.ru api-maps.yandex.ru *.otm-r.com www.google-analytics.com ajax.googleapis.com fonts.googleapis.com *.mc.yandex.ru mc.yandex.ru nlb-clickstream.sberbank.ru sp.otm-r.com stats.g.doubleclick.net www.google-analytics.com www.google.ru www.googletagmanager.com ; img-src 'self' data: www.gstatic.com cdnweb.sbermobile.ru adservings.ru api.flocktory.com top-fwz1.mail.ru kraken.rambler.ru api-maps.yandex.ru *.maps.yandex.net *.mc.yandex.com *.mc.yandex.ru mc.yandex.ru *.googleusercontent.com www.googletagmanager.com www.google.ru www.google.com www.google-analytics.com *.otm-r.com yandex.ru; base-uri 'self' cdnweb.sbermobile.ru; form-action 'self'; frame-ancestors 'none' 1
default-src 'self' https://*.appreciatehub.com *.google-analytics.com *.cloudflare.com https://*.googleapis.com https://*.pendo.io https://*.alamoapp.octanner.io https://*.api.octanner.net https://*.salesforce.com *.cloudinary.com *.assets.octanner.com https://s3.amazonaws.com/oc-images-api/* *.doubleclick.net *.octanner.net *.gstatic.com *.jwpcdn.com *.recaptcha.net https://www.gstatic.com/recaptcha/releases/*  wss://*.fathomvoice.com *.fathomvoice.com *.fonticons.com *.fortawesome.com 'unsafe-inline' 'unsafe-eval' data:; frame-src 'self' www.google.com www.recaptcha.net https://res.cloudinary.com *.assets.octanner.com; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://api-sogecommerce.societegenerale.eu/static/ *.fontawesome.com *.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.zopim.com *.zopim.io *.bushboard.co.uk *.cookiebot.com *.chatbeacon.io *.jquery.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://sogecommerce.societegenerale.eu/vads-payment/ https://api-sogecommerce.societegenerale.eu/api-payment/ https://api-sogecommerce.societegenerale.eu/static/ *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.wilsonart.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https://sogecommerce.societegenerale.eu/vads-payment/ https://api-sogecommerce.societegenerale.eu/static/ *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://www.youtube.com http://www.sandbox.paypal.com *.twitter.com *.wilsonart.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://sogecommerce.societegenerale.eu/static/latest/images/type-carte/ https://api-sogecommerce.societegenerale.eu/static/ https://sogecommerce.societegenerale.eu/vads-payment/ magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://maps.gstatic.com/ *.cloudflare.com *.google.com *.twitter.com *.twimg.com *.google.co.in *.ytimg.com *.googleadservices.com *.fontawesome.com *.mastercard.com *.bushboard.co.uk *.cookiebot.com *.chatbeacon.io *.hotjar.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://api-sogecommerce.societegenerale.eu/api-payment/ https://api-sogecommerce.societegenerale.eu/static/ https://static-sogecommerce.societegenerale.eu/static/ *.fontawesome.com *.googleapis.com *.gstatic.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://maps.googleapis.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.bing.com *.zopim.com *.zdassets.com *.bushboard.co.uk *.cookiebot.com *.chatbeacon.io *.jquery.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://api-sogecommerce.societegenerale.eu/static/ https://static-sogecommerce.societegenerale.eu/static/ *.fontawesome.com assets.braintreegateway.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.bing.com *.bushboard.co.uk *.cookiebot.com *.chatbeacon.io *.jquery.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zopim.com *.zopim.io *.wilsonart.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://sogecommerce.societegenerale.eu/vads-payment/ https://api-sogecommerce.societegenerale.eu/api-payment/ *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://maps.googleapis.com www.google-analytics.com *.cloudflare.com *.twitter.com *.twimg.com *.zdassets.com *.zopim.com *.zopim.io wss://widget-mediator.zopim.com *.g.doubleclick.net *.bushboard.co.uk *.cookiebot.com *.chatbeacon.io *.jquery.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src https://sogecommerce.societegenerale.eu/vads-payment/ https://api-sogecommerce.societegenerale.eu/api-payment/ https://api-sogecommerce.societegenerale.eu/static/ 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
media-src https://faq.wadax.ne.jp https://www.google.com https://analytics.google.com 'self' https://stats.g.doubleclick.net https://gmocloudcommunity.force.com https://b99.yahoo.co.jp blob: https://translation.googleapis.com https://www.google.co.jp https://www.domainking.jp https://support.gmocloud.com https://icl.dns.ishioka.xyz https://altus.gmocloud.com https://dnsck.gmocloud.com https://www.googletagmanager.com https://www.wadax.ne.jp https://www.google-analytics.com *.salesforce.com https://www.rapidsite.jp https://www.youtube.com; report-to sfdc-csp-ep; report-uri https://gmogshd-ch.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D10000000Hq6P&networkId=0DM5F00000001rL&type=communities 1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; media-src 'self' blob: https:; font-src 'self'; connect-src 'self' https://auth.privy.io https://*.rpc.privy.systems https://explorer-api.walletconnect.com wss://relay.walletconnect.com wss://relay.walletconnect.org https://plausible.io https://media.otherside.xyz https://media.sandbox.otherside.xyz wss://indexer.yuga.com wss://admin.m2worlds.io; frame-src https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; report-uri /api/csp-report 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-1GBNTmGPvjh330NhNTkLyQ' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
report-uri https://logs-01.loggly.com/inputs/4e92d8a9-baa6-4559-82e2-05428d10fa7b/tag/csp; report-to default 1
default-src 'self' https://cdn.ooc.ai;                script-src 'self' https://cdn.ooc.ai 'strict-dynamic' 'nonce-029844490a00aa7c1f3a9a90c7a73ded';                script-src-elem 'self' https://cdn.ooc.ai https://*.googletagmanager.com https://js.stripe.com https://websdk.appsflyersdk.com 'nonce-029844490a00aa7c1f3a9a90c7a73ded';                style-src 'self' 'unsafe-inline' https://cdn.ooc.ai;                img-src 'self' data: https: blob:;                font-src https://cdn.ooc.ai;                connect-src 'self' https://cdn.ooc.ai https://api.ooc.ai wss://api.ooc.ai https://unleash-edge.ooc.ai https://api-js.mixpanel.com https://api.stripe.com https://firestore.googleapis.com https://*.ingest.sentry.io https://*.ingest.us.sentry.io https://www.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.google-analytics.com https://stats.g.doubleclick.net https://wa.appsflyersdk.com https://wa.onelink.me https://websdk.appsflyersdk.com;                frame-src https:;                object-src 'none';                base-uri 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: dvngeac8rg9mb.cloudfront.net js.stripe.com www.gstatic.com *.googleapis.com ws.zoominfo.com www.google.com www.googletagmanager.com compilers.widgets.sphere-engine.com kit.fontawesome.com d34s7xanp5e5sf.cloudfront.net; connect-src 'self' api.stripe.com *.googleapis.com *.fontawesome.com wss://push.piazza.com; img-src 'self' data: http: https:; object-src 'none'; font-src 'self' data: *.typekit.net *.gstatic.com *.fontawesome.com; style-src 'self' 'unsafe-inline' blob: *.typekit.net *.gstatic.com *.googleapis.com dvngeac8rg9mb.cloudfront.net; frame-src 'self' www.youtube.com www.youtube-nocookie.com www.vimeo.com player.vimeo.com www.facebook.com youtu.be gfycat.com www.google.com giphy.com docs.google.com calendar.google.com www.desmos.com www.geogebra.org js.stripe.com; report-uri /security/csp_report 1
connect-src 'self' https://analytics.tiktok.com https://api.hubspot.com https://cdn.cookielaw.org https://cdn.dreamdata.cloud https://content.hotjar.io https://cta-service-cms2.hubspot.com https://forms.hsforms.com https://px.ads.linkedin.com https://script.crazyegg.com https://www.google-analytics.com https://www.google.com https://edge.api.brightcove.com https://bat.bing.com/ https://manifest.prod.boltdns.net https://sdl.brightcovecdn.com https://logx.optimizely.com https://*.optimizely.com; default-src 'self'; font-src 'self' data: https://use.typekit.net https://*.optimizely.com; frame-ancestors 'none'; frame-src https://www.googletagmanager.com https://googleads.g.doubleclick.net https://cm.g.doubleclick.net https://www.facebook.com https://calendly.com https://forms.hsforms.com https://a5098497884553216.cdn.optimizely.com https://a5098497884553216.cdn-pci.optimizely.com; img-src 'self' data: https://bat.bing.com https://forms-na1.hsforms.com https://ib.adnxs.com https://perf-na1.hsforms.com https://px.ads.linkedin.com https://secure.adnxs.com https://track.accountinsight.cloud https://track.hubspot.com https://www.facebook.com https://www.google.com https://www.google.com.ua https://metrics.brightcove.com https://www.googletagmanager.com https://cf-images.us-east-1.prod.boltdns.net https://cdn.optimizely.com https://app.optimizely.com; media-src 'self' blob:; script-src 'self' 'nonce-pnCyo5GYRonR6RVLkJaFrg==' https://a.dpmsrv.com https://analytics.tiktok.com https://bat.bing.com https://cdn.cookielaw.org https://cdn.dreamdata.cloud https://cm.g.doubleclick.net https://connect.facebook.net https://googleads.g.doubleclick.net https://ib.adnxs.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://js.hsforms.net https://js.hubspot.com https://js.usemessages.com https://s.dpmsrv.com https://script.crazyegg.com https://script.hotjar.com https://serve.nrich.ai https://snap.licdn.com https://st.getsitecontrol.com https://static.hotjar.com https://widgets.getsitecontrol.com https://www.googletagmanager.com https://assets.calendly.com https://static.hsappstatic.net https://48752163.fs1.hubspotusercontent-na1.net https://cdnjs.cloudflare.com https://players.brightcove.net wss://ws.hotjar.com/ https://*.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://*.typekit.net https://assets.calendly.com https://*.optimizely.com https://app.optimizely.com; worker-src 'self' blob:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://googleads.g.doubleclick.net https://www.google-analytics.com https://challenges.cloudflare.com https://accounts.google.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://*.seminuevos.com https://*.latamautos.com https://www.googletagmanager.com https://www.google-analytics.com https://*.analytics.google.com https://*.adtrafficquality.google; frame-src 'self' https://securepubads.g.doubleclick.net https://www.googletagmanager.com https://challenges.cloudflare.com https://accounts.google.com https://*.seminuevos.com 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https://www.googletagmanager.com/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net api.mundipagg.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page api.mundipagg.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com api.mundipagg.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-lVJdcU7rsclGomF02DYpOA' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
script-src 'self' 'unsafe-inline' chrome-extension: https://mc.yandex.ru 'unsafe-eval' https://smartcaptcha.yandexcloud.net https://mc.yandex.com 127.0.0.1:8182 127.0.0.1:8888 127.0.0.1:5005; frame-src 'self' https://mc.yandex.ru chrome-extension: https://mc.yandex.md https://mc.yandex.com https://smartcaptcha.yandexcloud.net; object-src 'self'; report-uri /cspreportonly; 1
font-src *.bootstrapcdn.com *.trackcmp.net *.hotjar.com *.google-analytics.com *.nr-data.net *.typeform.com fonts.gstatic.com *.yotpo.com *.googleapis.com *.gstatic.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.authorize.net https://plumrocket.com *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.bolt.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.bolt.com https://www.google.com/recaptcha/ www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.google.com *.authorize.net https://plumrocket.com *.hotjar.com *.addthis.com *.libsyn.com *.locally.com *.sheerid.com *.wayin.com *.newtonsoftware.com https://recruitingbypaycor.com/ *.curalate.com *.formstack.com *.trackcmp.net *.google-analytics.com *.nr-data.net data: *.typeform.com *.pagescdn.com *.yextpages.net *.googleapis.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com magefan.com cm.magefan.com store.paradoxlabs.com *.disqus.com *.google.com *.mageside.com mageside.com *.bc0a.com *.curalate.com *.s3.amazonaws.com *.amazonaws.com *.leupold.com *.googleapis.com *.gstatic.com *.trackcmp.net *.hotjar.com *.google-analytics.com *.nr-data.net *.typeform.com *.b0e8.com https://img.youtube.com maps.gstatic.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.bolt.com *.commerce-quick-checkout.com http://localhost:8082 https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ polyfill.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://developer.adobe.com https://assets.armanet.us *.kaptcha.com *.disqus.com *.google.com *.gstatic.com *.authorize.net *.hotjar.com *.curalate.com *.app-us1.com *.avmws.com *.acsbapp.com acsbapp.com *.googleapis.com *.googletagmanager.com *.paypalobjects.com *.sheerid.com *.jsdelivr.net *.addthis.com *.addthisedge.com *.moatads.com *.cloudfront.net *.locally.com *.wayin.com *.activehosted.com *.newtonsoftware.com recruitingbypaycor.com *.leupold.com *.trackcmp.net *.google-analytics.com trackcmp.net *.vimeo.com *.apptrian.com *.facebook.com *.typeform.com *.sitescdn.net *.yextpages.net *.pagescdn.com *.b0e8.com *.bc0a.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.sheerid.com *.bootstrapcdn.com *.trackcmp.net *.hotjar.com *.google-analytics.com *.nr-data.net *.typeform.com *.sitescdn.net *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; object-src *.trackcmp.net *.hotjar.com *.google-analytics.com *.nr-data.net *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.bolt.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://srv.armanet.us https://assets.armanet.us *.kaptcha.com *.authorize.net *.bc0a.com *.hotjar.com wss://*.hotjar.com *.addthis.com *.googleapis.com *.acsbapp.com *.curalate.com *.hotjar.io *.trackcmp.net *.google-analytics.com *.g.doubleclick.net *.typeform.com *.pagescdn.com *.yext.com *.yext-pixel.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com *.doubleclick.net *.run.app *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; script-src 'self' 'unsafe-inline' https://mstat.rik.ee https://www.riigiteataja.ee/cdn-cgi/challenge-platform/ *.cloudflareinsights.com; worker-src 'self' blob:; manifest-src 'self'; media-src 'self'; object-src 'self' blob:; frame-ancestors 'self'; frame-src 'self' blob:; font-src 'self' https://fonts.gstatic.com; form-action 'self'; connect-src 'self' blob: https://mstat.rik.ee; img-src 'self' blob: data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; report-uri https://www.riigiteataja.ee/public-api/csp; 1
default-src 'self' *.irsn.fr *.asnr.fr; script-src 'self' 'unsafe-inline' *.irsn.fr *.asnr.fr cdn.ckeditor.com embed.api.video static.doubleclick.net unpkg.com vod.api.video www.google.com www.gstatic.com www.youtube.com www.youtube-nocookie.com e.infogram.com matomo.asnr.fr reglementation-controle.asnr.fr; object-src 'none'; style-src 'self' 'unsafe-inline'  *.irsn.fr *.asnr.fr fonts.googleapis.com unpkg.com www.youtube.com www.youtube-nocookie.com; img-src 'self' data:  *.irsn.fr *.asnr.fr i.ytimg.com yt3.ggpht.com *.tile.openstreetmap.org fonts.gstatic.com; media-src 'self'  *.irsn.fr *.asnr.fr; frame-src 'self'  *.irsn.fr *.asnr.fr embed.api.video www.youtube.com www.youtube-nocookie.com e.infogram.com; frame-ancestors 'self'  *.irsn.fr *.asnr.fr; child-src 'self'  *.irsn.fr *.asnr.fr embed.api.video www.youtube.com www.youtube-nocookie.com; font-src 'self' data:  *.irsn.fr *.asnr.fr embed.api.video fonts.gstatic.com themes.googleusercontent.com; connect-src 'self'  *.irsn.fr *.asnr.fr collector.api.video googleads.g.doubleclick.net jnn-pa.googleapis.com vod.api.video www.youtube.com www.youtube-nocookie.com; report-uri /sa-report-csp-violation; upgrade-insecure-requests 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; report-uri /api/csp-report 1
script-src 'self' https://cloud.typography.com/7315076/7256812/css/fonts.css siteimproveanalytics.com ; object-src 'none'; img-src *.siteimproveanalytics.io 1
default-src 'self';   connect-src 'self' https://gvb-apim-service-prod2.azure-api.net https://gvb-app.matomo.cloud consentcdn.cookiebot.com https://dc.services.visualstudio.com/v2/track https://*.algolia.net https://*.algolianet.com https://*.algolia.io https://*.dynamics.com https://*.azureedge.net ;   script-src 'strict-dynamic' 'nonce-uX4GNJqsb13b/9oO4oQQNrYhACQtaUJb+yxqpku2gwk=' 'sha256-X9GtzORyUShRgrb5vBVwF3p8WtKom3jBuMyocEhfL3Q='  'self' https://cdn.matomo.cloud https://gvb-app.matomo.cloud consent.cookiebot.com consentcdn.cookiebot.com https://*.dynamics.com https://*.azureedge.net;   frame-src 'self' consentcdn.cookiebot.com https://*.tiqets.com;   base-uri 'self';   block-all-mixed-content;   font-src 'self' https: data:;   img-src * 'self' data: https;   object-src 'none';   script-src-attr 'none';   style-src 'self' https://gvb-apim-service-prod2.azure-api.net 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce--9GBvmVrBfdm9Hfq1SBNnQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https:; connect-src 'self' https: properties:; font-src 'self' https: data:; img-src 'self' https: data: blob:; object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' 'strict-dynamic' *.halalstatic.com www.googletagmanager.com accounts.google.com maps.google.com connect.facebook.net applepay.cdn-apple.com *.checkout.com *.stripe.com *.recaptcha.net cdn.safecharge.com 'nonce-swMSgVj522pa6D1ZTKoPOg=='; style-src 'self' https: 'nonce-swMSgVj522pa6D1ZTKoPOg=='; style-src-elem 'self' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src-attr 'unsafe-inline' 1
default-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=n_DJUPBtMqih8Yi0UqQH79KDqVHn1L3PZju.WmeuAzs-1789273351.0962129-1.0.1.1-gbRxW.rS_se8I70m1AIMz4LGnAaHRy01bk1IMiU9eG.N8Q3oL.ejphZVOidOWBcbqKLL5wE6v1sK5ue5TJOD5OefOyTZw9IOTdZr9Ugjf3LauYUQLt3EWC80GsSfk2wy_t4b5o2ajfj8uxc2OD2TO7W.oDYs.4ntXSvXKKUZXp_vuH1Yo1NWS0KsMmzIDRrj8GvLvKuu9tJqdpR2NNNJrg; report-to cf-bnlfbmsnpzfyoylo 1
base-uri 'self'; object-src 'none'; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.klarnacdn.net *.klevu.com *.ksearchnet.com https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.nosto.com *.nos.to 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.zenaps.com *.fls.doubleclick.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.nosto.com *.nos.to *.klarna.com https://www.googletagmanager.com/ js.mollie.com https://www.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.awin1.com *.zenaps.com *.wepowerconnections.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.nosto.com *.nos.to *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.mollie.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.nosto.com *.nos.to *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.klevu.com *.ksearchnet.com widget.freshworks.com m2epro.freshdesk.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ js.mollie.com https://www.google.com https://www.gstatic.com https://js.klevu.com https://www.bakerross.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.nosto.com *.nos.to *.klarnacdn.net https://static.klaviyo.com *.klevu.com *.ksearchnet.com widget.freshworks.com m2epro.freshdesk.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.wepowerconnections.com https://the.sciencebehindecommerce.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.nosto.com *.nos.to *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com widget.freshworks.com m2epro.freshdesk.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://20a27546-5165-4716-8e1c-c91dee6f68ae.sansec.watch/; report-to report-endpoint; 1
script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=DR8_UTMtweODk7bvLESqGvbBjgBX1JW1x6aGc1vPjqU-1789275157.123665-1.0.1.1-_CHXFh.zLzu.RgLLYXmpooZv3KHjXrlxqrOLlS8FY0EOT9ko.n8JnTfWoSuP4RKELB6mfObl6VDdkEixwkLb7.P2F6LBpV1UjUjltxfJ6FZs.jBquiQLehftlAQdn96ROUKDS2C6YqvGsZqW3izGjAUe30.zdVLgQSHzzxpETs1.sfq3mgvN65Qv_zYljSkd; report-to cf-csp-endpoint 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googlesyndication.com https://*.googletagmanager.com https://*.google-analytics.com https://mc.yandex.ru https://mc.yandex.com https://go.trvdp.com https://cdn.jsdelivr.net https://fundingchoicesmessages.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net; connect-src 'self' https://*.google-analytics.com https://*.googlesyndication.com https://*.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://fundingchoicesmessages.google.com https://*.adtrafficquality.google; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://googleads.g.doubleclick.net https://*.googlesyndication.com https://fundingchoicesmessages.google.com https://www.google.com https://*.adtrafficquality.google https://mc.yandex.ru https://mc.yandex.com; object-src 'none'; base-uri 'self'; form-action 'self'; 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data: https://*.stripe.com; object-src 'none'; script-src 'self' https: https://connect-js.stripe.com https://js.stripe.com https://*.js.stripe.com https://maps.googleapis.com 'nonce-oKq2DNJ6ZnVBtwglME+bdw=='; style-src 'self' https: 'nonce-oKq2DNJ6ZnVBtwglME+bdw=='; style-src-attr 'unsafe-inline'; frame-src 'self' https://connect-js.stripe.com https://js.stripe.com https://*.js.stripe.com https://hooks.stripe.com; connect-src 'self' https://api.stripe.com https://maps.googleapis.com; report-uri /systems/csp_report 1
font-src *.googleapis.com *.gstatic.com data: maxcdn.bootstrapcdn.com *.bzr.openai.com *.fontawesome.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com www.apexmagnets.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apexmagnets.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com www.apexmagnets.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com www.google.com *.bzr.openai.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com www.apexmagnets.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com validate.fishpig.co.uk magefan.com cm.magefan.com *.bzr.openai.com flagpedia.net www.apexmagnets.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.bzr.openai.com bzrcdn.openai.com maps.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com www.apexmagnets.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.bzr.openai.com *.fontawesome.com *.gstatic.com www.apexmagnets.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apexmagnets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com *.bzr.openai.com bzr.openai.com bzrcdn.openai.com www.gstatic.com maps.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com www.apexmagnets.com 'self' 'unsafe-inline'; child-src www.apexmagnets.com http: https: blob: 'self' 'unsafe-inline'; default-src www.apexmagnets.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googleadservices.com https://*.googlesyndication.com https://*.g.doubleclick.net https://doubleclick.net https://www.youtube.com https://www.youtube-nocookie.com https://s.ytimg.com https://platform.twitter.com https://cdn.syndication.twimg.com https://rv-vepple-tour.web.app https://cc.cdn.civiccomputing.com https://*.hotjar.com https://secure.quantserve.com https://rules.quantcount.com https://pixel.byspotify.com https://*.flashtalking.com https://px.ads.linkedin.com https://*.salesforce.com https://*.force.com https://*.my.site.com; style-src 'self' 'unsafe-inline' https://platform.twitter.com https://fonts.googleapis.com https://*.my.site.com; img-src 'self' data: blob: https://www.canterbury.ac.uk https://*.contensis.cloud https://*.cloud.contensis.com https://www.contensis.com https://img.youtube.com https://i.ytimg.com https://www.google-analytics.com https://www.googletagmanager.com https://*.googlesyndication.com https://*.g.doubleclick.net https://www.googleadservices.com https://ssl.gstatic.com https://www.gstatic.com https://pbs.twimg.com https://syndication.twitter.com https://*.hotjar.com https://pixel.quantserve.com https://secure.quantserve.com https://pixel.byspotify.com https://pixels.spotify.com https://*.flashtalking.com https://*.salesforce.com https://*.force.com https://*.my.site.com; font-src 'self' data: https://fonts.gstatic.com https://*.hotjar.com https://*.my.site.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://www.googleapis.com https://*.googlesyndication.com https://*.g.doubleclick.net https://www.googleadservices.com https://*.contensis.cloud https://*.cloud.contensis.com https://api.canterbury.rvhosted.com https://apikeys.civiccomputing.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://pixel.quantserve.com https://secure.quantserve.com https://rules.quantcount.com https://pixel.byspotify.com https://pixels.spotify.com https://*.salesforce-scrt.com wss://*.salesforce-scrt.com https://*.salesforce.com https://*.force.com https://*.my.site.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://platform.twitter.com https://syndication.twitter.com https://rv-vepple-tour.web.app https://*.flashtalking.com https://canterbury.tfaforms.net https://*.salesforce.com https://*.force.com https://*.my.site.com; media-src 'self' https://*.contensis.cloud https://*.cloud.contensis.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /csp-report 1
default-src https:; connect-src https: wss:; font-src https: data:; frame-src https:; img-src https: data:; media-src https:; object-src https:; script-src 'unsafe-inline' 'unsafe-eval' https: data: blob:; style-src 'unsafe-inline' https:; report-uri https://www.check24.net/csp-violation-ezmd9dpdxv7nb0ecejb9/ 1
default-src 'none';base-uri 'none';font-src 'self' https://cdn.openagenda.com https://client.crisp.chat;form-action 'self';frame-ancestors 'self';img-src 'self' https: data: blob: https://matomo.openagenda.com https://client.crisp.chat https://image.crisp.chat https://storage.crisp.chat;object-src 'none';script-src https: 'unsafe-inline' 'strict-dynamic' 'nonce-e3UrrVm2egB16wtEYmELyg==' https://client.crisp.chat https://settings.crisp.chat;script-src-attr 'none';style-src 'self' 'unsafe-inline' https://cdn.openagenda.com https://client.crisp.chat;media-src 'self' https: data: https://client.crisp.chat;frame-src 'self' https://service.mtcaptcha.com https://service2.mtcaptcha.com https://game.crisp.chat;connect-src 'self' https://cdn.openagenda.com https://matomo.openagenda.com https://client.crisp.chat https://storage.crisp.chat wss://client.relay.crisp.chat wss://stream.relay.crisp.chat;upgrade-insecure-requests;report-to default;report-uri https://openagenda.com/reports 1
default-src *; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' *; object-src *; style-src 'self' 'unsafe-inline' *; img-src 'self' data: *; media-src *; frame-src *; frame-ancestors *; child-src 'self' blob: *; font-src *; connect-src *; report-uri /report-csp-violation 1
default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; media-src https: http: rtsp: rtmp: data:; report-uri /csp-report 1
connect-src 'self' 8x8.com *.8x8.com algolia.io *.algolia.io algolia.net *.algolia.net algolianet.com *.algolianet.com attentivemobile.com *.attentivemobile.com attn.tv *.attn.tv azure.com *.azure.com boltdns.net *.boltdns.net brightcove.com *.brightcove.com brightcove.net *.brightcove.net brightcovecdn.com *.brightcovecdn.com clarity.ms *.clarity.ms cloudflare.com *.cloudflare.com cloudflareinsights.com *.cloudflareinsights.com d1igp3oop3iho5.cloudfront.net *.d1igp3oop3iho5.cloudfront.net delego-cloud.com *.delego-cloud.com doubleclick.net *.doubleclick.net episerver.net *.episerver.net facebook.com *.facebook.com facebook.net *.facebook.net gadstat.com *.gadstat.com google-analytics.com *.google-analytics.com google.ca *.google.ca google.cl *.google.cl google.co.cr *.google.co.cr google.co.jp *.google.co.jp google.co.kr *.google.co.kr google.co.nz *.google.co.nz google.co.uk *.google.co.uk google.co.vi *.google.co.vi google.com *.google.com google.de *.google.de googleadservices.com *.googleadservices.com googletagmanager.com *.googletagmanager.com hs-analytics.net *.hs-analytics.net hs-banner.com *.hs-banner.com hs-scripts.com *.hs-scripts.com hsadspixel.net *.hsadspixel.net hsforms.com *.hsforms.com hsforms.net *.hsforms.net hubapi.com *.hubapi.com hubspot.com *.hubspot.com iesnare.com *.iesnare.com ipify.org *.ipify.org jquery.com *.jquery.com licdn.com *.licdn.com linkedin.com *.linkedin.com lottingem.com *.lottingem.com maps.googleapis.com *.maps.googleapis.com optimizely.com *.optimizely.com paypal.com *.paypal.com paypalobjects.com *.paypalobjects.com perimeterx.net *.perimeterx.net powerreviews.com *.powerreviews.com prospectdesk.ai *.prospectdesk.ai px-cloud.net *.px-cloud.net riogrande.com *.riogrande.com statsdata.online *.statsdata.online trovo-tag.com *.trovo-tag.com vaudiencelabs.io *.vaudiencelabs.io youtube.com *.youtube.com; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=vXXDlh5syE8O05ZZRfTqliTbsFEOWEyrtxefbNhPcwc-1789279950.4968987-1.0.1.1-TBGwforEyV5YsEq30ktmywqUNw.l9K_FrixtMbyGtksRQbl4._TLROtzsQGKa2RuHqvOiMUZXAlpjoJoRiw0kw_M4u6Bya2OEVktcw5hmLg7xVz3lgUtaZZdH2HtdKfNoXQXccCknlUKDWNu3RRWvkMCJypnK2KRawp10qMfdowXpcahXNf4wOPevbg7U3HukY_OeccFW1n50VfhGyA6OA; report-to cf-gyjytgbnavysgiro 1
default-src 'self' blob:  https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; frame-src 'self' https://*.noxiaohao.com https://telegram.org https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://accounts.google.com https://oauth.telegram.org https://sgtm.btsgtm.com  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; script-src 'self' 'nonce-hMuBKK/uqiFJMnRHbcF56A==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh/v3RIRuG3kMikr5iha+7P/0TN/GNA=' https://*.noxiaohao.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://accounts.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://play.google.com https://analytics.google.com https://fonts.gstatic.com https://telegram.org https://oauth.telegram.org https://*.geetest.com https://*.geevisit.com https://sgtm.btsgtm.com https://static.wangsustatic.xyz https://static.wangsustatic.vip ; connect-src 'self' https://stats.g.doubleclick.net https://analytics.google.com https://*.noxiaohao.com wss://*.noxiaohao.com wss: https://www.turingfraud.net https://play.google.com https://accounts.google.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://telegram.org https://oauth.telegram.org https://static.geetest.com https://static.geevisit.com wss://stream.bitget.cloud https://www.google.com https://sgtm.btsgtm.com  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; worker-src 'self' blob:; img-src 'self' data: blob: https://img.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://img.bitgetimg.com https://img.gurenla.com https://*.bgbstatic.com https://lh3.googleusercontent.com https://static.geetest.com https://static.geevisit.com https://static-web.jjdsn.vip https://cdn.bitkeep.vip https://www.google.co.jp https://bin.wangsustatic.com https://sgtm.btsgtm.com https://analytics.google.com https://stats.g.doubleclick.net  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; style-src 'self' 'unsafe-inline' https://static.geetest.com https://static.geevisit.com https://accounts.google.com https://fonts.googleapis.com https://static.bgbstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; font-src 'self' data: https://static.geetest.com https://static.geevisit.com https://fonts.gstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri /v1/buried/log/cspSecurity /v1/monitor/csp?appId=d4b6df7d; 1
frame-ancestors 'none'; report-uri https://13fc2e96c75baedc98bc60c37c2c93be.report-uri.com/r/d/csp/wizard; script-src 'strict-dynamic' 'nonce-MCdPb0jEXRgsdVKSZSNA7Q==' 1
default-src 'self' blob:  https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; frame-src 'self' https://*.noxiaohao.com https://telegram.org https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://accounts.google.com https://oauth.telegram.org https://sgtm.btsgtm.com  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; script-src 'self' 'nonce-U20EWTt4evadyKnMMcdjGQ==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh/v3RIRuG3kMikr5iha+7P/0TN/GNA=' https://*.noxiaohao.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://accounts.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://play.google.com https://analytics.google.com https://fonts.gstatic.com https://telegram.org https://oauth.telegram.org https://*.geetest.com https://*.geevisit.com https://sgtm.btsgtm.com https://static.wangsustatic.xyz https://static.wangsustatic.vip ; connect-src 'self' https://stats.g.doubleclick.net https://analytics.google.com https://*.noxiaohao.com wss://*.noxiaohao.com wss: https://www.turingfraud.net https://play.google.com https://accounts.google.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://telegram.org https://oauth.telegram.org https://static.geetest.com https://static.geevisit.com wss://stream.bitget.cloud https://www.google.com https://sgtm.btsgtm.com  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; worker-src 'self' blob:; img-src 'self' data: blob: https://img.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://img.bitgetimg.com https://img.gurenla.com https://*.bgbstatic.com https://lh3.googleusercontent.com https://static.geetest.com https://static.geevisit.com https://static-web.jjdsn.vip https://cdn.bitkeep.vip https://www.google.co.jp https://bin.wangsustatic.com https://sgtm.btsgtm.com https://analytics.google.com https://stats.g.doubleclick.net  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; style-src 'self' 'unsafe-inline' https://static.geetest.com https://static.geevisit.com https://accounts.google.com https://fonts.googleapis.com https://static.bgbstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; font-src 'self' data: https://static.geetest.com https://static.geevisit.com https://fonts.gstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri /v1/buried/log/cspSecurity /v1/monitor/csp?appId=d4b6df7d; 1
default-src 'self'; frame-src https://www.youtube.com https://www.youtube-nocookie.com; img-src 'self' data: https://i.ytimg.com; script-src 'self' https://www.youtube.com https://www.youtube-nocookie.com; connect-src 'self' https://www.youtube.com; media-src 'self' https://www.youtube.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://platform.twitter.com https://static.codepen.io https://cpwebassets.codepen.io https://production-assets.codepen.io https://gist.github.com https://w.soundcloud.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://github.githubassets.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; media-src 'self' https:; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://open.spotify.com https://w.soundcloud.com https://codepen.io https://www.slideshare.net https://substack.com https://platform.twitter.com; connect-src 'self' https://*.google-analytics.com https://www.googletagmanager.com https://webmention.io; object-src 'none'; base-uri 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://matomo.eah-jena.de/ https://*.openstreetmap.org 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://*.openstreetmap.org https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com *.openstreetmap.org https://*.typo3.org https://www.studycheck.de/%2A https://matomo.eah-jena.de/ https://www.studycheck.de; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com *.google.com https://www2.hochschulsport.eah-jena.de; connect-src 'self' data: https://*.openstreetmap.org *.google.com https://*.googleapis.com https://*.gstatic.com https://nominatim.openstreetmap.org blob: https://matomo.eah-jena.de https://www.eah-jena.de; font-src 'self' https://fonts.gstatic.com data:; worker-src 'self' 'nonce-_OTYKFtE2ZiIIn5_FmLOO2naJyA22p-MPgAiQ9l083CbG0wdxj1KGQ' data: https://*.openstreetmap.org blob: 'report-sample'; form-action 'self' https://katalogplus.bibliothek.eah-jena.de; style-src blob: data: 'self' 'unsafe-inline' 'report-sample'; frame-ancestors 'none'; object-src 'none'; report-uri https://www.eah-jena.de/@http-reporting?csp=report&requestTime=1789283990604422&requestHash=81a87ed95446fc591624c894c9abc042b9098d79 1
object-src 'none';base-uri 'self';script-src 'nonce-meHiBZYBX4IuGFm0kDXOaw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; frame-ancestors 'self'; object-src 'self'; script-src 'self' 'unsafe-inline' https://download.digiaccess.org https://download.digiaccess.org/digiaccess/tool https://*.digiaccess.org https://translate-pa.googleapis.com https://translate.google.com https://translate.googleapis.com; worker-src 'self' blob:; img-src 'self' https://download.digiaccess.org https://translate.google.com https://www.gstatic.com https://www.google.com https://fonts.gstatic.com https://translate.googleapis.com https://translate.googleapis.com/images https://*.digiaccess.org *.translate.googleapis.com data:; connect-src 'self' https://translate-pa.googleapis.com https://digiaccess.org https://download.digiaccess.org https://api.digiaccess.org https://api.digiaccess.org/subscriptions/active https://translate.googleapis.com; font-src 'self' https://api.digiaccess.org https://download.digiaccess.org; media-src 'self' *.4982.cdn.video.taxi; frame-src 'self' https://www.youtube-nocookie.com https://stadtatlas.darmstadt.de *.stadtatlas.darmstadt.de https://media.video.taxi *.media.video.taxi; style-src 'self' 'unsafe-inline'; style-src-elem 'self' https://www.gstatic.com https://download.digiaccess.org https://translate.google.com 'unsafe-inline' 'report-sample'; base-uri 'self'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app maxcdn.bootstrapcdn.com 'unsafe-inline' data: *.klaviyo.com *.zip.co *.cloudflare.com *.slant.co data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.workscene.com.au *.workscene.co.nz https://decorate.workscene.com.au *.facebook.com *.kaptcha.com *.zipmoney.com.au *.doubleclick.net https://9063659.fls.doubleclick.net *.zdassets.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.google.com.au *.google.ro *.google.com *.workscene.com.au *.facebook.com https://www.facebook.com *.zipmoney.com.au *.afterpay.com *.cloudflareaccess.com https://workscene.co.nz *.cloudfront.net *.zip.co https://zip.co *.google.com.vn *.workscene.co.nz *.workscene.co.au *.facebook.net workscene.com.au www.google.co.id www.google.co.in www.google.co.kr www.google.co.nz www.google.co.th www.google.co.uk www.google.com.eg www.google.com.my www.google.com.np www.google.com.ph www.google.com.pk www.google.com.sb www.google.com.sg www.google.com.tw www.google.de www.google.hn www.google.ie www.google.mk www.google.mn www.google.pl *.cloudflare.com www.google.am www.google.at www.google.ba www.google.be www.google.ca www.google.co.ao www.google.co.jp www.google.co.ug www.google.co.za www.google.com.bd www.google.com.br www.google.com.co www.google.com.cy www.google.com.ec www.google.com.gh www.google.com.hk www.google.com.kh www.google.com.mt www.google.com.mx www.google.com.na www.google.com.pg www.google.com.qa www.google.com.sa www.google.com.tr www.google.com.ua www.google.dk www.google.dz www.google.es www.google.fi www.google.fr www.google.hr www.google.ht www.google.it www.google.jo www.google.lk www.google.lt www.google.lv www.google.nl www.google.ru www.google.se www.google.si www.google.so www.google.ws www.google.co.il www.google.com.fj www.google.ae www.google.bg www.google.bs www.google.cl www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.ma www.google.co.ve www.google.co.vi www.google.co.zm www.google.co.zw www.google.com.au www.google.com.bo www.google.com.gi www.google.com.jm www.google.com.ly www.google.com.ng www.google.com.pe www.google.com.sv www.google.com.uy www.google.gy www.google.hu www.google.no www.google.nu www.google.pt www.google.rs www.google.to www.google.tt www.google.al www.google.as www.google.az www.google.bf www.google.bj www.google.bt www.google.by www.google.cd www.google.ch www.google.ci www.google.co.ke www.google.co.ls www.google.co.tz www.google.co.uz www.google.com.ag www.google.com.ar www.google.com.bh www.google.com.bn www.google.com.do www.google.com.et www.google.com.gt www.google.com.kw www.google.com.lb www.google.com.mm www.google.com.ni www.google.com.om www.google.com.pr www.google.cz www.google.dm www.google.ee www.google.ge www.google.gr www.google.im www.google.iq www.google.is www.google.kz www.google.la www.google.lu www.google.md www.google.me www.google.mg www.google.ml www.google.mu www.google.mv www.google.nr www.google.ps www.google.rw www.google.sk www.google.sr www.google.tg www.google.tl www.google.tn www.google.vu *.doubleclick.net *.googletagmanager.com *.tiktok.com google.com workscene.co.nz www.google.co.mz www.google.com.cu www.google.com.pa www.google.com.py www.google.je www.google.sc www.google.sn *.ggpht.com *.tangooserver.com www.google.com.af yastatic.net www.google.com.vc *.googleadservices.com www.google.com.sl s3.amazonaws.com www.google.cg www.google.ki d3k81ch9hvuctc.cloudfront.net www.google.cm www.google.com.bz www.google.gg www.google.kg www.google.tm *.tiktokw.us www.google.td t.zip.co static.zip.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.chimpstatic.com https://chimpstatic.com *.googleapis.com *.zdassets.com *.doubleclick.net *.facebook.net *.gstatic.com *.zipmoney.com.au *.bing.com https://bat.bing.com *.fullstory.com https://edge.fullstory.com *.tiktok.com https://analytics.tiktok.com *.zip.co *.cfjump.com *.retargeted.co *.klaviyo.com localhost *.googletagmanager.com *.tangooserver.com *.workscene.com.au *.cloudflareinsights.com *.googleadservices.com polyfill-fastly.io static.client.cardinaltrusted.com d3aq2u4yw77ivo.cloudfront.net static.zip.co zip.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app https://static.klaviyo.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.googleapis.com *.zip.co *.typekit.net *.klaviyo.com *.cloudflare.com *.googletagmanager.com *.gstatic.com *.tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com *.gstatic.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app cdn.jsdelivr.net api.lab.amplitude.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.doubleclick.net *.zendesk.com *.zdassets.com *.zopim.com wss://widget-mediator.zopim.com *.zipmoney.com.au *.zip.co https://zipmoneyau.zendesk.com *.cardinaltrusted.com *.cloudfront.net *.google.com.vn *.google.com.au *.algolia.io *.facebook.com *.retargeted.co localhost www.google.co.in www.google.co.kr www.google.co.nz www.google.co.th www.google.com.pk www.google.de www.google.mk *.datadome.co www.google.am www.google.at www.google.be www.google.ca www.google.co.id www.google.co.jp www.google.co.uk www.google.co.za www.google.com.bd www.google.com.br www.google.com.co www.google.com.gh www.google.com.hk www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.pg www.google.com.ph www.google.com.sb www.google.com.sg www.google.com.tw www.google.fi www.google.it www.google.lt www.google.lv www.google.nl www.google.so www.google.ws www.google.bg www.google.cl www.google.co.ck www.google.co.ug www.google.co.vi www.google.com.fj www.google.com.ly www.google.com.np www.google.fr www.google.nu www.google.rs www.google.ru www.google.tt *.typekit.net www.google.ae www.google.as www.google.ba www.google.bt www.google.cd www.google.ch www.google.co.ao www.google.co.bw www.google.co.il www.google.co.ke www.google.co.ma www.google.co.tz www.google.co.uz www.google.co.ve www.google.co.zm www.google.co.zw www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bn www.google.com.cy www.google.com.eg www.google.com.et www.google.com.gt www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ng www.google.com.pe www.google.com.pr www.google.com.qa www.google.com.sa www.google.com.tr www.google.com.ua www.google.cz www.google.dk www.google.es www.google.gr www.google.hn www.google.hu www.google.ie www.google.iq www.google.is www.google.la www.google.lk www.google.md www.google.me www.google.mg www.google.ml www.google.mn www.google.mu www.google.no www.google.nr www.google.pl www.google.ps www.google.pt www.google.ro www.google.rw www.google.se www.google.si www.google.sk www.google.sr www.google.tg www.google.tl www.google.tn www.google.to www.google.vu *.klaviyo.com *.pangle-ads.com *.tiktokw.us kg668dbov0.execute-api.us-east-1.amazonaws.com www.google.az www.google.bs www.google.co.mz www.google.com.bo www.google.com.do www.google.com.ec www.google.com.py www.google.com.sv www.google.hr www.google.jo www.google.sc zip.co www.google.ge www.google.com.af www.google.com.vc *.googleadservices.com www.google.com.ni *.tiktok.com www.google.bf www.google.com.sl www.google.kz www.google.cg www.google.com.om www.google.com.uy www.google.ki *.gstatic.com www.google.by www.google.ci www.google.gg www.google.sn www.google.com.mm www.google.gy *.googleapis.com *.samsung.com www.google.al www.google.co.cr www.google.com.bh www.google.ee www.google.je *.facebook.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://032d1b56-4a9f-455b-8863-84d9bea84b8f.sansec.watch/; report-to report-endpoint; 1
object-src 'none'; script-src 'self' 'unsafe-inline' https://cdn.matomo.cloud https://heritagefund.matomo.cloud https://cdn.ckeditor.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://naver.github.io https://player.vimeo.com https://unpkg.com https://www.gstatic.com https://heritagefund.matomo.cloud/; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://cdn.matomo.cloud https://heritagefund.matomo.cloud https://cdn.ckeditor.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://naver.github.io https://player.vimeo.com https://unpkg.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://p.typekit.net https://cdn.jsdelivr.net https://naver.github.io; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://p.typekit.net/ https://cdn.jsdelivr.net https://naver.github.io; frame-ancestors 'self' 1
default-src 'self' 'unsafe-inline' data: 'unsafe-eval'; report-uri /errors/csp-violation/ 1
script-src 'self' 'unsafe-inline' cdn.jsdelivr.net cdnjs.cloudflare.com ajax.googleapis.com js.pusher.com use.fontawesome.com sdk.amazonaws.com app-rsrc.getbee.io loader.getbee.io localhost:3000 localhost:8080 127.0.0.1:3000 127.0.0.1:8080; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com; img-src 'self' secure.gravatar.com cartstack.s3.amazonaws.com; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com; connect-src 'self' api.cartstack.com ws-us3.pusher.com wss://ws-us3.pusher.com bee-auth.getbee.io bee-utils.getbee.io bee-stats.getbee.io bee-sentry.beefree.io bee-bumper.getbee.io localhost:3000 localhost:8080 ws://localhost:3000 ws://localhost:8080; frame-src 'self' app.getbee.io; default-src 'none'; object-src 'none'; media-src 'self'; worker-src 'self'; manifest-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /csp-report.php 1
default-src 'self'; script-src 'self' 'nonce-62mTw4/0KBe5OKr5sdf1fg==' 'strict-dynamic' https://www.googletagmanager.com https://www.googleadservices.com https://www.googlesyndication.com https://www.doubleclick.net https://google-analytics.com https://tagmanager.google.com https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.analytics.google.com https://www.gstatic.com/recaptcha/ https://region1.google-analytics.com https://region1.analytics.google.com https://d1igp3oop3iho5.cloudfront.net/ https://b.6sc.co https://j.6sc.co https://c.6sc.co https://ipv6.6sc.co https://epsilon.6sense.com https://secure.adnxs.com https://www.clarity.ms/ https://clarity.microsoft.com https://bat.bing.com https://bat.r.msn.com/ https://clarity.ms/ http://microsofttranslator.com/ https://snap.licdn.com https://px.ads.linkedin.com https://js.zi-scripts.com https://play.vidyard.com https://*.vidyard.com https://cdn.cookielaw.org https://privacyportal.onetrust.com https://cookie-cdn.cookiepro.com https://geolocation.onetrust.com https://lp.aptean.com https://munchkin.marketo.net https://*.marketo.com https://mktoweb.com https://e.issuu.com https://issuu.com https://widget.usersnap.com https://api.usersnap.com https://cdn.optimizely.com https://logx.optimizely.com https://www.optimizely.com https://*.zoominfo.com http://ws.zoominfo.com/ https://js.qualified.com https://assets.qualified.com https://messenger-assets.qualified.com https://qualified.com https://www.qualified.com https://tags.srv.stackadapt.com https://stackadapt.com https://cdn.bizible.com https://*.bizible.com https://tracking-api.g2.com https://*.g2.com https://scout-cdn.salesloft.com https://*.salesloft.com https://ct.capterra.com https://tr.capterra.com https://js.storylane.io https://*.storylane.io https://static.xingcdn.com https://*.xing.com http://www.xing.com/ https://crebos.com https://*.crebos.com http://view.ceros.com/ ; style-src 'unsafe-inline' 'self' https://fonts.googleapis.com https://tagmanager.google.com https://www.googletagmanager.com https://play.vidyard.com https://*.vidyard.com https://cdn.cookielaw.org https://privacyportal.onetrust.com https://cookie-cdn.cookiepro.com https://geolocation.onetrust.com https://lp.aptean.com https://munchkin.marketo.net https://*.marketo.com https://mktoweb.com https://e.issuu.com https://issuu.com https://assets.qualified.com https://messenger-assets.qualified.com https://qualified.com https://www.qualified.com ; img-src 'self' https://images.ctfassets.net https://assets.ctfassets.net https://www.googletagmanager.com https://google-analytics.com https://ssl.gstatic.com https://www.googleadservices.com https://www.googlesyndication.com https://www.doubleclick.net https://www.gstatic.com https://www.google-analytics.com https://region1.google-analytics.com https://www.analytics.google.com https://ct.capterra.com https://tr.capterra.com https://b.6sc.co https://api.zaius.com https://play.vidyard.com https://*.vidyard.com https://cdn.cookielaw.org https://privacyportal.onetrust.com https://cookie-cdn.cookiepro.com https://geolocation.onetrust.com https://lp.aptean.com https://munchkin.marketo.net https://*.marketo.com https://mktoweb.com https://www.clarity.ms/ https://clarity.microsoft.com https://bat.bing.com https://bat.r.msn.com/ https://clarity.ms/ http://microsofttranslator.com/ https://e.issuu.com https://issuu.com https://assets.qualified.com https://messenger-assets.qualified.com https://snap.licdn.com https://px.ads.linkedin.com https://qualified.com https://www.qualified.com https://tags.srv.stackadapt.com https://stackadapt.com https://tracking-api.g2.com https://*.g2.com https://static.xingcdn.com https://*.xing.com http://www.xing.com/ ; font-src 'self' https://fonts.gstatic.com https://e.issuu.com https://issuu.com https://assets.qualified.com https://messenger-assets.qualified.com ; frame-src 'self' https://www.youtube.com https://www.googletagmanager.com https://tagmanager.google.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://lp.aptean.com/partner.html https://www.googleadservices.com https://www.googlesyndication.com https://www.doubleclick.net https://play.vidyard.com https://*.vidyard.com https://lp.aptean.com https://munchkin.marketo.net https://*.marketo.com https://mktoweb.com https://e.issuu.com https://issuu.com https://*.involve.me https://js.qualified.com https://qualified.com https://www.qualified.com https://js.storylane.io https://*.storylane.io https://crebos.com https://*.crebos.com http://view.ceros.com/ ; media-src 'self' blob: https://play.vidyard.com https://*.vidyard.com https://assets.qualified.com https://messenger-assets.qualified.com ; connect-src 'self' https://webto.salesforce.com https://www.google-analytics.com https://region1.google-analytics.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://www.googleadservices.com https://www.googlesyndication.com https://www.doubleclick.net https://www.googletagmanager.com https://www.analytics.google.com https://tagmanager.google.com https://google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://openexchangerates.org https://b.6sc.co https://j.6sc.co https://c.6sc.co https://ipv6.6sc.co https://epsilon.6sense.com https://secure.adnxs.com https://api.zaius.com https://tracking-api.g2.com https://snap.licdn.com https://px.ads.linkedin.com https://www.clarity.ms/ https://clarity.microsoft.com https://bat.bing.com https://bat.r.msn.com/ https://clarity.ms/ http://microsofttranslator.com/ https://cdn.cookielaw.org https://privacyportal.onetrust.com https://cookie-cdn.cookiepro.com https://geolocation.onetrust.com https://lp.aptean.com https://munchkin.marketo.net https://*.marketo.com https://mktoweb.com https://app.qualified.com https://api.qualified.com wss://messaging.qualified.com https://qualified.com https://www.qualified.com https://js.qualified.com https://e.issuu.com https://issuu.com https://widget.usersnap.com https://api.usersnap.com https://cdn.optimizely.com https://logx.optimizely.com https://www.optimizely.com https://*.zoominfo.com http://ws.zoominfo.com/ https://tags.srv.stackadapt.com https://stackadapt.com https://cdn.bizible.com https://*.bizible.com https://scout-cdn.salesloft.com https://*.salesloft.com https://tracking-api.g2.com https://*.g2.com https://js.storylane.io https://*.storylane.io https://static.xingcdn.com https://*.xing.com http://www.xing.com/ https://crebos.com https://*.crebos.com http://view.ceros.com/ https://api.ipify.org https://api.ipgeolocation.io ; worker-src 'self' blob: https://js.qualified.com ; object-src 'none'; base-uri 'self'; form-action 'self' https://webto.salesforce.com https://lp.aptean.com https://munchkin.marketo.net https://*.marketo.com https://mktoweb.com https://app.qualified.com https://api.qualified.com wss://messaging.qualified.com ; frame-ancestors 'self'; upgrade-insecure-requests; 1
default-src 'self' aipoweredmarketer.okta.com login.goacoustic.com *.oktacdn.com www.acoustic.com app.goacoustic.com consent.trustarc.com; connect-src 'self' aipoweredmarketer.okta.com aipoweredmarketer-admin.okta.com login.goacoustic.com *.oktacdn.com *.mixpanel.com *.mapbox.com aipoweredmarketer.kerberos.okta.com aipoweredmarketer.mtls.okta.com https://oinmanager.okta.com data: www.acoustic.com app.goacoustic.com consent.trustarc.com *.ingest.sentry.io; script-src 'unsafe-inline' 'unsafe-eval' 'self' 'report-sample' aipoweredmarketer.okta.com login.goacoustic.com *.oktacdn.com www.acoustic.com app.goacoustic.com consent.trustarc.com; style-src 'unsafe-inline' 'self' 'report-sample' aipoweredmarketer.okta.com login.goacoustic.com *.oktacdn.com www.acoustic.com app.goacoustic.com consent.trustarc.com; frame-src 'self' aipoweredmarketer.okta.com aipoweredmarketer-admin.okta.com login.goacoustic.com login.okta.com *.vidyard.com www.acoustic.com app.goacoustic.com consent.trustarc.com; img-src 'self' aipoweredmarketer.okta.com login.goacoustic.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: www.acoustic.com app.goacoustic.com consent.trustarc.com blob:; font-src 'self' aipoweredmarketer.okta.com login.goacoustic.com data: *.oktacdn.com fonts.gstatic.com www.acoustic.com app.goacoustic.com consent.trustarc.com; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-s9ydlsNtBe_DcxcqrvIHhg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'nonce-4F0_n3W81R9rklZ75C8vZg' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/static-on-bigtable; base-uri 'none' 1
base-uri 'none'; font-src 'self' https: data: https://lightning.dcuniverseinfinite.com https://fonts.gstatic.com https://use.fontawesome.com data:; form-action 'self'; frame-ancestors 'self' https://multiverse.dc.com https://multiverse.qa.wbdnmv.net https://local.qa.wbdndc.net:444; img-src 'self' data: blob: https://lightning.dcuniverseinfinite.com https://reader.dcuniverseinfinite.com https://www.dcuniverseinfinite.com https://imgix-media.wbdndc.net https://cdn.cookielaw.org https://www.google.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.paypalobjects.com https://*.stats.paypal.com *.paypal.com *.paypalobjects.com *.venmo.com data: https://dc-qa-reader.drama9.com https://dc-qa-www.drama9.com https://imgix-media-qa.wbdndc.net https://imgix-media-dev.wbdndc.net https://c.sandbox.paypal.com; object-src 'none'; script-src-attr 'unsafe-inline'; style-src 'self' https://lightning.dcuniverseinfinite.com https://fonts.googleapis.com https://use.fontawesome.com https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com *.paypal.com *.paypalobjects.com *.venmo.com unsafe-inline 'unsafe-inline'; script-src 'self' https: https://googleads.g.doubleclick.net https://*.doubleclick.net https://cdn.cookielaw.org https://cdn.optimizely.com https://cdn.segment.com https://client-api.arkoselabs.com https://lightning.dcuniverseinfinite.com https://pg.feroot.com https://ssl.kaptcha.com https://www.google-analytics.com https://*.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://*.ingest.sentry.io *.paypal.com *.paypalobjects.com *.venmo.com unsafe-inline https://tst.kaptcha.com 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' 'nonce-6ye0oP9k3dMGGsvfTD3cIiWH'; upgrade-insecure-requests; connect-src 'self' https://reader.dcuniverseinfinite.com https://search.dcuniverseinfinite.com https://api.segment.io https://cdn.cookielaw.org https://cdn.segment.com https://www.googleadservices.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.doubleclick.net https://*.google.com https://pagead2.googlesyndication.com https://ssl.kaptcha.com https://d.agkn.com https://pg.feroot.com https://client-api.arkoselabs.com https://lightning.dcuniverseinfinite.com https://privacyportal.onetrust.com https://geolocation.onetrust.com https://api.braintreegateway.com https://receive.wmcdp.io https://wmff.warnermediacdn.com https://*.optimizely.com https://sdk.iad-03.braze.com https://atlas.ngtv.io https://*.ingest.sentry.io https://payments.braintreegateway.com https://gateway.braintreegateway.com *.paypal.com *.paypalobjects.com *.venmo.com https://dc-qa-reader.drama9.com https://dc-qa-search.drama9.com https://dc-qa-www.drama9.com https://stats.g.doubleclick.net https://api.sandbox.braintreegateway.com https://payments.sandbox.braintree-api.com https://gateway-sand.sandbox.braintree-api.com https://test.receive.wmcdp.io https://tst.kaptcha.com https://sourcemaps-wsdk.roktinternal.com https://browser-intake-us5-datadoghq.com https://browser-intake-datadoghq.com; frame-src 'self' https://lightning.dcuniverseinfinite.com https://lightning.warnermediacdn.com https://d.agkn.com https://www.googletagmanager.com https://checkout.paypal.com https://assets.braintreegateway.com https://a1464009.cdn.optimizely.com https://client-api.arkoselabs.com https://apps.rokt.com https://*.cdn.optimizely.com https://*.kaptcha.com https://*.paypal.com *.paypalobjects.com *.venmo.com https://c.sandbox.paypal.com https://tst.kaptcha.com; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub4f016f96ffe92caf11f87dc365619a51&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3AdcuiWebApp%2Cenv%3Aprod; 1
object-src 'none'; base-uri 'self'; report-uri https://o4506109752377344.ingest.us.sentry.io/api/4506109754540032/security/?sentry_key=298c6df95911a5e816424477197661bd; report-to csp-endpoint 1
block-all-mixed-content; report-uri https://awp.abd.jp/apiViewer/getCspInfo 1
script-src 'nonce-zUCHHXp3jlKj6xhCI2HdXQ' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/static-on-bigtable; base-uri 'none' 1
script-src 'unsafe-inline' 'unsafe-eval' cdn2.hubspot.net *.hubspot.com *.hubspotusercontent10.net js.hscollectedforms.net js.hsleadflows.net js.hs-scripts.com js.hsadspixel.net js.hs-analytics.net js.hs-banner.com js.hs-banner.net *.hsforms.net *.hsforms.com static.hsappstatic.net js.hubspotfeedback.com feedback.hubapi.com js.usemessages.com *.vidyard.com cdnjs.cloudflare.com cdnjs.cloudflare.com 10921146.fls.doubleclick.net plausible.io *.hotjar.com *.hotjar.io *.qualified.com bttrack.com *.googletagmanager.com *.force.com *.thycotic.com *.centrify.com *.bidr.io *.rlcdn.cm t.co *.twitter.com burly.io *.clickagy.com *.doubleclck.net *.zoominfo.com lltrck.com facebook.com *.facebook.net *.redditstatic.com *.linkedin.com *.licdn.com *.demandbase.com *.zoominfo.com 'strict-dynamic' 'nonce-eVWrswQ2zbZ5mZv6V3z3HA==' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com *.alothemes.com *.magepow.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.bootstrapcdn.com *.hotjar.com *.audioeye.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com *.authorize.net *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.affirm.com *.affirm.ca *.certcapture.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com https://www.gstatic.com/ *.authorize.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.googletagmanager.com https://*.online-metrix.net https://imgs.signifyd.com *.doubleclick.net *.leasestation.com *.kaptcha.com *.google.co.in *.networkmerchants.com *.paypalobjects.com *.cdn-btsg.com *.audioeye.com *.milwaukeetool.com *.ohiopowertool.com *.facebook.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com *.affirm.com *.affirm.ca *.certcapture.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com *.trackedlink.net *.ddlnk.net *.alothemes.com *.magepow.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com https://imgs.signifyd.com https://*.online-metrix.net *.ohiopowertool.com https://seal-centralohio.bbb.org *.google.com *.google.co.in *.bing.com *.clarity.ms *.amazonaws.com *.shareasale.com *.nexmart.com *.noibu.com *.cdn-btsg.com *.quickspark.com *.bazaarvoice.com https://arttrk.com/ *.hotjar.com *.userway.org *.ojrq.net *.linkedin.com https://cdn.cookielaw.org data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page www.apptrian.com *.affirm.com *.affirm.ca *.certcapture.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.impactcdn.com *.impct.site *.ssqt.io *.alothemes.com *.magepow.com *.authorize.net sandbox-assets.secure.checkout.visa.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.googletagmanager.com tagmanager.google.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net https://www.dwin1.com https://seal-centralohio.bbb.org *.bing.com *.quickspark.com *.doubleclick.net *.clarity.ms *.networkmerchants.com *.milwaukeetool.com *.noibu.com *.cdn-btsg.com *.pricespider.com *.hotjar.com *.audioeye.com *.online-metrix.net *.userway.org *.gstatic.com *.licdn.com https://cdn.cookielaw.org *.roeyecdn.com *.epigraph.cloud https://www.ohiopowertool.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com display.ugc.bazaarvoice.com webchat.dotdigital.com webchat.staging.dotdigital.com *.fontawesome.com *.alothemes.com *.magepow.com *.stripe.network *.stripecdn.com *.amazon.com tagmanager.google.com fonts.google.com *.mailchimp.com *.bootstrapcdn.com *.quickspark.com *.networkmerchants.com *.gstatic.com *.googleapis.com *.userway.org 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com *.affirm.com *.affirm.ca *.certcapture.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.impct.site *.impactcdn.com *.ssqt.io *.alothemes.com *.magepow.com *.authorize.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.googletagmanager.com https://imgs.signifyd.com *.doubleclick.net *.clarity.ms *.networkmerchants.com *.bing.com *.noibu.com wss://*.noibu.com *.cdn-btsg.com *.hotjar.com *.hotjar.io wss://ws.hotjar.com *.audioeye.com *.sjv.io *.userway.org *.linkedin.com https://cdn.cookielaw.org 'self' 'unsafe-inline'; child-src *.certcapture.com strict-dynamic http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://cdn.monetnik.ru; style-src 'self' https://cdn.monetnik.ru 'unsafe-inline' https://yastatic.net  https://*.mindbox.ru;  object-src 'none';  script-src 'self' 'unsafe-inline' 'unsafe-eval'  https://cdn.monetnik.ru  https://www.googletagmanager.com/  https://www.google-analytics.com/   https://*.mail.ru  https://vk.com https://*.mindbox.ru https://yastatic.net   https://mc.yandex.ru;  connect-src 'self' https://cdn.monetnik.ru https://mc.yandex.com  https://www.google.com/ https://analytics.google.com/ https://stats.g.doubleclick.net/  https://*.mail.ru/ https://*.mindbox.ru https://vk.com https://mc.yandex.ru  wss://mc.yandex.ru;  img-src https: data:;  frame-src https://mc.yandex.com https://mc.yandex.ru  https://content.adriver.ru   https://yandex.ru;  worker-src blob:;  font-src 'self' https://cdn.monetnik.ru fonts.gstatic.com; report-uri /external-event/log/csp/ 1
default-src 'self'; object-src 'none'; base-uri 'none'; script-src 'nonce-86b0cc26e718ed9cdd1837c246fe4db5' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://at.alicdn.com; img-src 'self' data: https: http: blob:; connect-src 'self' https: wss:; frame-src 'self' https: http:; media-src 'self' data: https: http: blob:; worker-src 'self' blob: 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com static.klaviyo.com www.shopperapproved.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com https://www.youtube.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://img.youtube.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com tracking.avantlink.com dgjcoqnzn763b.cloudfront.net www.shopperapproved.com seal.trustguard.com tgscript.s3.amazonaws.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://developer.adobe.com https://magento.com https://cdn.avmws.com/ http://cdn.avmws.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ s7.addthis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com acsbapp.com *.google-analytics.com js-agent.newrelic.com googletagmanager.com *.hotjar.com ssl.avmws.com d395yjvh5spyzw.cloudfront.net edge.curalate.com www.google.com *.googleapis.com config.gorgias.chat contact.gorgias.help s.pinimg.com *.pinterest.com https://cdn.searchspring.net/intellisuggest/is.min.js www.shopperapproved.com shopperapproved.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com analytics.tiktok.com tgscript.s3.amazonaws.com https://app.zinrelo.com app.zinrelo.com https://cdn.zinrelo.com/js/all.js snapui.searchspring.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com https://static.klaviyo.com www.gstatic.com www.shopperapproved.com use.typekit.net p.typekit.net tgscript.s3.amazonaws.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://developer.adobe.com https://cdn.avmws.com/ http://cdn.avmws.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ ekr.zdassets.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com cdn.acsbapp.com stats.g.doubleclick.net *.google-analytics.com googletagmanager.com *.hotjar.io *.hotjar.com wss://*.hotjar.com *.tiktokw.us *.googleapis.com config.gorgias.chat wss://us-east1-898b.gorgias.chat s.pinimg.com ct.pinterest.com *.pinterest.com https://beacon.searchspring.io/beacon shopperapproved.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com analytics.tiktok.com api.trustguard.com *.searchspring.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src assets.gorgias.chat 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src https://www.googletagmanager.com *.googleapis.com *.gstatic.com *.fontawesome.com https://cdnjs.cloudflare.com https://static.klaviyo.com https://fonts.cdnfonts.com *.typekit.net *.yotpo.com dhv2ziothpgrr.cloudfront.net www-wp.silencercentral.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.authorize.net *.yotpo.com www-wp.silencercentral.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net www-wp.silencercentral.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ *.certcapture.com https://elements.sandbox.fortis.tech https://elements.fortis.tech *.authorize.net checkout.sezzle.com sandbox.checkout.sezzle.com tracking.sezzle.com *.yotpo.com www-wp.silencercentral.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com media.sezzle.com maps.gstatic.com https://*.ipredictive.com https://www.googletagmanager.com *.gleamjs.io *.gleam.io https://p.yotpoapi.com *.yotpo.com dhv2ziothpgrr.cloudfront.net www-wp.silencercentral.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ tagmanager.google.com https://www.googletagmanager.com *.certcapture.com https://developer.adobe.com https://magento.com https://cdn.avmws.com/ http://cdn.avmws.com/ https://js.sandbox.fortis.tech https://js.fortis.tech https://elements.sandbox.fortis.tech https://elements.fortis.tech https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ code.jquery.com cdnjs.cloudflare.com *.authorize.net checkout-sdk.sezzle.com sandbox.checkout-sdk.sezzle.com widget.sezzle.com maps.googleapis.com https://js.ipredictive.com *.gleamjs.io *.gleam.io cdn.popt.in https://silencer-central.chat.getzowie.com https://cdn.jsdelivr.net https://web-sdk.smartlook.com/ *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net www-wp.silencercentral.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.certcapture.com https://static.klaviyo.com cdnjs.cloudflare.com fonts.cdnfonts.com fonts.googleapis.com *.typekit.net *.yotpo.com dhv2ziothpgrr.cloudfront.net www-wp.silencercentral.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://silencer-central.chat.getzowie.com www-wp.silencercentral.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://www.google-analytics.com *.certcapture.com https://developer.adobe.com https://cdn.avmws.com/ http://cdn.avmws.com/ https://elements.sandbox.fortis.tech https://elements.fortis.tech https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.authorize.net gateway.sezzle.com sandbox.gateway.sezzle.com media.sezzle.com widget.sezzle.com maps.googleapis.com https://www.google.com https://silencer-central.chat.getzowie.com https://manager.eu.smartlook.cloud *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com www-wp.silencercentral.com 'self' 'unsafe-inline'; child-src www-wp.silencercentral.com http: https: blob: 'self' 'unsafe-inline'; default-src www-wp.silencercentral.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-VTDXxv7F/fWQWtM67PThyAHUT5M=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
default-src 'self'; connect-src 'self' https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://translate.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com; font-src 'self' data:; frame-src 'self' https://static.addtoany.com https://web.facebook.com https://www.facebook.com https://www.google.com https://www.googletagmanager.com https://www.youtube.com https://www.flickr.com; img-src 'self' data: blob: https://*.google-analytics.com https://*.analytics.google.com https://*.fbcdn.net https://translate.google.com https://translate.googleapis.com https://www.gcis.gov.za https://www.google.com https://www.google.co.za https://www.googletagmanager.com https://www.gov.za https://www.gstatic.com https://www.publicsectormanager.gov.za https://www.sanews.gov.za https://www.vukuzenzele.gov.za https://*.openstreetmap.org https://*.ytimg.com https://www.google-analytics.com; object-src 'none'; script-src 'self' 'report-sample' blob: https://*.google-analytics.com https://static.addtoany.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.sanews.gov.za; style-src 'self' 'report-sample' 'unsafe-inline' https://www.gstatic.com; webrtc 'block'; worker-src 'self' blob:; base-uri 'self'; form-action 'self' https://list.gcis.gov.za; frame-ancestors 'self'; report-uri /system/reporting/default; report-to default 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://cdn.cookie-script.com https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://td.doubleclick.net https://connect.facebook.net https://www.facebook.com https://acsbapp.com https://*.acsbapp.com; style-src 'self' 'unsafe-inline' https://acsbapp.com https://*.acsbapp.com; img-src 'self' data: blob: https://d2evc1g1j8lz15.cloudfront.net https://assets.papaya.com https://cdn.cookie-script.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://td.doubleclick.net https://connect.facebook.net https://www.facebook.com https://acsbapp.com https://*.acsbapp.com; font-src 'self' data: https://acsbapp.com https://*.acsbapp.com; media-src 'self' blob: https://d2evc1g1j8lz15.cloudfront.net https://assets.papaya.com; connect-src 'self' https://cms.papaya.com https://api.comeet.co https://cdn.cookie-script.com https://report.cookie-script.com https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://td.doubleclick.net https://connect.facebook.net https://www.facebook.com https://acsbapp.com https://*.acsbapp.com; frame-src 'self' https://www.comeet.co https://solitairecash.papaya.com https://assets.papaya.com https://www.google.com https://www.gstatic.com https://www.youtube.com https://www.youtube-nocookie.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests; report-uri /api/csp-report 1
default-src 'self'; child-src 'none'; object-src 'none'; script-src http: https: 'nonce-Xv3dnjeWSWAihw6i7CASIbUiavzqpgu0PCv8yMEQWro='; connect-src 'self'; worker-src blob:; style-src 'self' 'unsafe-inline'; img-src 'self'; font-src 'self'; base-uri 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://dpv85fgkqesen.cloudfront.net https://use.fontawesome.com https://*.googletagmanager.com; style-src 'self' 'unsafe-inline' https://dpv85fgkqesen.cloudfront.net https://use.fontawesome.com; img-src 'self' data: https://dpv85fgkqesen.cloudfront.net https://*.google-analytics.com https://*.googletagmanager.com; frame-src 'self' https://public.tableau.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.google.com; frame-ancestors 'self'; font-src 'self' data: https://dpv85fgkqesen.cloudfront.net https://use.fontawesome.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com; report-uri /report-csp-violation 1
child-src 'self'; connect-src 'self' blob: https://*.acsbapp.com https://*.ads-twitter.com https://*.bing.com https://*.clarity.ms https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.genial.ly https://*.genially.com https://*.google-analytics.com https://*.google.com https://*.googleadservices.com https://*.googleapis.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.iiba.org https://*.inspectlet.com https://*.licdn.com https://*.linkedin.com https://*.optimizely.com/ https://*.pardot.com https://*.salesforce.com https://*.sharethis.com https://*.smassets.net https://*.surveymonkey.com https://*.termly.io https://*.vimeocdn.com https://*.zdassets.com https://*.zendesk.com https://acsbapp.com https://ad.doubleclick.net/ccm/s/collect https://analytics.twitter.com https://app.termly.io https://canadacentral-1.in.applicationinsights.azure.com//v2/track https://cdn.jsdelivr.net https://dc.services.visualstudio.com https://go.iiba.org https://js.monitor.azure.com https://static.mobilemonkey.com https://www.facebook.com https://www.google.ca https://www.google.ca/rmkt/* wss://*.inspectlet.com wss://*.zopim.com; default-src 'self'; font-src 'self' https://*.cloudfront.net/graphik/ https://*.cloudfront.net/lato/ https://*.genial.ly https://*.genially.com https://*.smassets.net https://cdn.smassets.net/assets* https://fonts.gstatic.com https://prod.smassets.net/*; frame-src 'self' https://*.doubleclick.net https://*.find.episerver.net/ https://*.genially.com https://*.optimizely.com/ https://*.surveymonkey.com https://*.vimeo.com https://*.zendesk.com https://fast.wistia.net https://go.iiba.org https://prezi.com https://www.youtube-nocookie.com https://www.youtube.com; img-src 'self' data: https://*.ads-twitter.com https://*.bing.com https://*.clarity.ms https://*.doubleclick.net https://*.facebook.com https://*.genial.ly https://*.google-analytics.com https://*.google.com https://*.googleadservices.com https://*.googletagmanager.com https://*.iiba.org https://*.inspectlet.com https://*.licdn.com https://*.linkedin.com https://*.optimizely.com/ https://*.sharethis.com https://*.smassets.net https://*.vimeocdn.com https://analytics.twitter.com https://cdn.smassets.net/assets* https://prod.smassets.net/* https://t.co https://www.facebook.com https://www.google.ca https://www.google.co.in https://www.google.co.uk https://www.google.com.au https://www.google.com.pk https://www.google.de https://www.google.fr https://www.iiba.org; media-src 'self' https://*.zdassets.com; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' https://*.ads-twitter.com https://*.bing.com https://*.clarity.ms https://*.doubleclick.net https://*.facebook.net https://*.genially.com https://*.google-analytics.com https://*.googleadservices.com https://*.googleapis.com https://*.googletagmanager.com https://*.inspectlet.com https://*.licdn.com https://*.optimizely.com/ https://*.pardot.com https://*.sharethis.com https://*.smassets.net https://*.surveymonkey.com https://*.termly.io https://*.zdassets.com https://acsbapp.com https://app.termly.io https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.jquery.com https://go.iiba.org https://js.monitor.azure.com https://static.mobilemonkey.com https://www.google.ca https://www.youtube.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.ads-twitter.com https://*.bing.com https://*.clarity.ms https://*.doubleclick.net https://*.facebook.net https://*.genially.com https://*.google-analytics.com https://*.googleadservices.com https://*.googleapis.com https://*.googletagmanager.com https://*.inspectlet.com https://*.licdn.com https://*.optimizely.com/ https://*.pardot.com https://*.sharethis.com https://*.smassets.net https://*.surveymonkey.com https://*.termly.io https://*.zdassets.com https://acsbapp.com https://app.termly.io https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.jquery.com https://go.iiba.org https://js.monitor.azure.com https://static.mobilemonkey.com https://www.google.ca https://www.youtube.com; style-src-elem 'self' 'unsafe-inline' https://*.genially.com https://*.optimizely.com/ https://cdn.jsdelivr.net https://fonts.googleapis.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://*.genially.com https://*.optimizely.com/ https://cdn.jsdelivr.net https://fonts.googleapis.com; 1
default-src 'self'; script-src 'self' 'nonce-ubSOlVgv0gO3UnYPmrcMHQ==' https://cdn-cookieyes.com https://www.google-analytics.com https://www.googletagmanager.com https://static.hotjar.com https://stats.xovis.com https://www.youtube.com; style-src 'self' 'nonce-ubSOlVgv0gO3UnYPmrcMHQ=='; style-src-attr 'unsafe-inline'; img-src 'self' data: blob: https://www.googletagmanager.com https://cdn-cookieyes.com https://api.xovis.com; media-src 'self' data: https://api.xovis.com; font-src 'self' data:; connect-src 'self' https://*.google-analytics.com https://stats.xovis.com https://*.hotjar.io https://cdn-cookieyes.com https://*.cookieyes.com https://api.xovis.com; frame-src 'self' http://iframely.net https://go.xovis.com https://www.youtube-nocookie.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /csp-report 1
default-src 'self' https://*.brandhub.codered.net https://*.powertrain.codered.net;         media-src 'self' blob:;         script-src 'self' https://mb.etrackingserver.de https://*.scene7.com https://app.usercentrics.eu https://chatbot.codered.net/static/ 'unsafe-inline' 'unsafe-eval' blob:;         style-src 'self' 'unsafe-inline' https://*.scene7.com https://chatbot.codered.net/static/;         img-src 'self' https://js.api.here.com https://*.scene7.com https://*.usercentrics.eu https://dev.day.com blob: data:;         connect-src 'self' https://*.usercentrics.eu https://mb.etrackingserver.de https://*.scene7.com https://*.mercedes-benz-trucks.net https://*.hereapi.com https://*.api.here.com https://chatbot.codered.net blob:;         font-src 'self' https://js.api.here.com data:; 1
report-uri https://o7202.ingest.us.sentry.io/api/278133/security/?sentry_key=3fa89efb7ac645f5820f641a4e80c50f&sentry_environment=production; report-to csp-endpoint; default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; script-src * 'unsafe-inline' 'unsafe-eval' data: blob:; connect-src * data: blob:; img-src * data: blob:; style-src * 'unsafe-inline' data: blob:; media-src * data: blob:; font-src * data: blob:; object-src * data: blob:; frame-src * data: blob:; worker-src * data: blob:; manifest-src * data: blob:; frame-ancestors *; 1
default-src 'none'; connect-src 'self' https: policy.app.cookieinformation.com; font-src https:; frame-src https:; img-src 'self' data: https:; manifest-src 'self' https:; media-src 'self' https: blob:; script-src 'unsafe-inline' https: maps.google.com; style-src 'unsafe-inline' https: mi; worker-src https:; base-uri https:; form-action https:; frame-ancestors 'self' https:; report-uri https://ing.dk/log-report-uri/reportOnly 1
default-src 'self' https:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self' 1
script-src 'nonce-yZqs95hogA2grekLETkCZvcs' 'strict-dynamic' 'unsafe-eval'; base-uri 'self'; object-src 'none'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https://www.googletagmanager.com https://www.google-analytics.com https://tagmanager.google.com https://ssl.google-analytics.com https://js.stripe.com https://connect.facebook.net https://cc.cdn.civiccomputing.com https://static.trackedweb.net https://sends.rcpch.ac.uk https://googleads.g.doubleclick.net https://cdnjs.cloudflare.com https://spark.adobe.com 'nonce-w5-y_E8b_cF79-xjFHyHKlZgzRhjdMXp'; object-src 'none'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://api.addressnow.co.uk; img-src 'self' data: https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://www.google.com https://www.google.co.uk https://www.google.co.in https://www.google.ie https://www.google.com.au https://www.google.com.sg https://www.google.com.hk https://www.facebook.com https://spark.adobe.com https://googleads.g.doubleclick.net https://r1-t.trackedlink.net https://www.googleadservices.com; frame-src 'self' https://www.googletagmanager.com https://js.stripe.com https://hooks.stripe.com https://www.canva.com https://express.adobe.com https://spark.adobe.com https://challenges.cloudflare.com https://www.youtube-nocookie.com https://player.vimeo.com https://e.infogram.com e.issuu.com app.powerbi.com; frame-ancestors 'self'; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://region1.analytics.google.com https://www.google.com https://www.google.co.uk https://apikeys.civiccomputing.com https://r1.trackedweb.net https://api.stripe.com https://www.googletagmanager.com https://www.facebook.com https://ad.doubleclick.net https://www.googleadservices.com https://region1.google-analytics.com https://googleads.g.doubleclick.net https://api.addressnow.co.uk https://pagead2.googlesyndication.com; report-uri https://csp.rcpch.digital/csp-report/csp_eO-K_Gh463jlPBqVa0S4QAWbcPf3eO-yBv6uVwOTkU8; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.ggpht.com https://*.googleusercontent.com blob: https://*.googletagmanager.com https://*.google-analytics.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://*.youtube.com https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.googleusercontent.com https://*.ggpht.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://i.creativecommons.org https://licensebuttons.net/; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://e.issuu.com/ https://registry.blockmarktech.com/ https://js.stripe.com https://www.designcouncil.org.uk; connect-src 'self' https://*.googleapis.com https://*.google.com https://*.gstatic.com data: blob: https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net *.dynamics.com; font-src 'self' https://fonts.gstatic.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com 'report-sample'; worker-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.ggpht.com https://*.googleusercontent.com blob: 'report-sample'; report-uri https://www.designcouncil.org.uk/@http-reporting?csp=report&requestTime=1789280654051193&requestHash=a253572af5e6226e4ae846c2393910888b369a47 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://www.googletagmanager.com *.googleapis.com *.zohocdn.com www.shopperapproved.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.fonts.googleapis.com data: *.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com www.googletagmanager.com td.doubleclick.net sst.surveillance-video.com googleads.g.doubleclick.net ep2.adtrafficquality.google cerulean-cannoli-8f496c.netlify.app elaborate-capybara-a25bf1.netlify.app salesiq.zohopublic.com *.addthis.com *.pinterest.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com www.gstatic.com cdn.gtranslate.net css.zohocdn.com www.shopperapproved.com ep1.adtrafficquality.google pagead2.googlesyndication.com d3k81ch9hvuctc.cloudfront.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://firebasestorage.googleapis.com *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.addthis.com *.pinterest.com *.cdninstagram.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://api.goaffpro.com https://static.goaffpro.com pagead2.googlesyndication.com *.hotjar.com prod.benchmarkemail.com monitor.fraudblocker.com salesiq.zoho.com *.zohocdn.com cdn.gtranslate.net www.shopperapproved.com load.sst.surveillance-video.com sst.surveillance-video.com ep2.adtrafficquality.google https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.klevu.com *.ksearchnet.com *.avada.io *.shopify.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.instagram.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.zohocdn.com *.zohostatic.com *.zohopublic.com www.googletagmanager.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.zohocdn.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.googleapis.com https://api.goaffpro.com https://static.goaffpro.com googleads.g.doubleclick.net *.zohopublic.com wss://vts.zohopublic.com *.hotjar.io wss://ws.hotjar.com stats.g.doubleclick.net sst.surveillance-video.com ep1.adtrafficquality.google https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://get.geojs.io *.avada.io *.cloudflare.com *.addthis.com *.cardinalcommerce.com *.graph.instagram.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'nonce-chuNZlwKH0CZMiTw7wApRBaLACdKDmKY' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' 'self' https: http:; report-uri /.netlify/functions/__csp-violations 1
font-src *.fontawesome.com *.gstatic.com/ *.bootstrapcdn.com/ https://analytics.google.com/ https://www.googletagmanager.com/ *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.googleapis.com/ *.gstatic.com/ https://analytics.google.com/ https://www.googletagmanager.com/ *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.criteo.com/ *.criteo.net/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://maps.gstatic.com/ *.googleapis.com/ *.w3.org/ https://analytics.google.com/ *.cdn.place1seo.com/ https://cdn.beedash.com/ https://www.google.com/ https://www.googletagmanager.com/ https://cm.g.doubleclick.net/ https://x.bidswitch.net/ https://ib.adnxs.com/ https://contextual.media.net/ https://pixel.rubiconproject.com/ https://rtb-csync.smartadserver.com/ https://sync-t1.taboola.com/ https://criteo-sync.teads.tv/ https://eb2.3lift.com/ *.yahoo.com *.socdm.com/ *.criteo.com/ https://r.casalemedia.com/ https://adx.dable.io/ https://cs.adingo.jp/ https://ads.stickyadstv.com/ *.360yield.com/ https://idsync.rlcdn.com/ https://exchange.mediavine.com/ https://c.bing.com/ https://sync.outbrain.com/ https://simage2.pubmatic.com/ https://s.ad.smaato.net/ https://ade.clmbtech.com/ https://sync.aralego.com/ https://sync-criteo.ads.yieldmo.com/ https://tags.bluekai.com/ *.yahoo.net/ https://beacon.krxd.net/ https://cdn.aralego.net/ https://public-prod-dspcookiematching.dmxleo.com/ store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.avada.io *.googleapis.com/ https://analytics.google.com/ https://googleads.g.doubleclick.net/ https://www.googletagmanager.com/ *.criteo.com/ *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com *.googleapis.com/ https://analytics.google.com/ *.bootstrapcdn.com/ https://www.googletagmanager.com/ unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://get.geojs.io *.avada.io https://analytics.google.com/ https://googleads.g.doubleclick.net/ https://stats.g.doubleclick.net/ https://www.googletagmanager.com/ *.criteo.com/ *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-src 'self' https:; object-src 'none'; base-uri 'self'; media-src 'self' https://d2ixvq6dqmuoso.cloudfront.net https://d2sp5foucw1oeu.cloudfront.net; img-src 'self' data: https:; form-action 'self' https://www.facebook.com; default-src 'self'; frame-ancestors 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https:; connect-src 'self' https: https://rebot.jp https://d2ixvq6dqmuoso.cloudfront.net https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://n-analytics.io https://stats.g.doubleclick.net https://www.datadoghq-browser-agent.com https://browser-intake-ap1-datadoghq.com; style-src 'self' 'unsafe-inline' https://rebot.jp https://d2ixvq6dqmuoso.cloudfront.net https://use.fontawesome.com; font-src 'self' data: https://d2ixvq6dqmuoso.cloudfront.net https://use.fontawesome.com https://fonts.gstatic.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' snippet.maze.co www.googletagmanager.com static.zdassets.com www.google.com www.gstatic.com apis.google.com tally.so; style-src 'self'    'unsafe-inline'; font-src 'self' cnx-fonts.s3.sa-east-1.amazonaws.com use.typekit.net fonts.gstatic.com; img-src 'self' data: www.googletagmanager.com                                        drvirtual.s3.sa-east-1.amazonaws.com; connect-src 'self' services.zenklub.com.br ms-auth.conexasaude.com.br ms-gestao-paciente.conexasaude.com.br api.conexasaude.com.br prompts.maze.co   relacionamentogestor.zendesk.com ekr.zdassets.com identitytoolkit.googleapis.com securetoken.googleapis.com www.google.com www.googletagmanager.com www.google-analytics.com                   region1.google-analytics.com viacep.com.br api.ipify.org metabase-reports.conexasaude.com.br; frame-src 'self' superset.conexasaude.com.br metabase-reports.conexasaude.com.br               zenklub.com.br app.powerbi.com zen-empresas.firebaseapp.com www.google.com tally.so; worker-src 'self' blob:; media-src 'self'; report-uri   https://9fv2y0jl3k.execute-api.sa-east-1.amazonaws.com/default/csp-report-collector-conexa 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; media-src 'self' blob: https:; connect-src 'self' https: wss:; font-src 'self' data: https:; frame-ancestors 'self'; base-uri 'self'; object-src 'none' 1
connect-src 'self' https://o11y.sfproxy-core1.sfdc-yfeipo.svc.sfdcfc.net/ui-telemetry https://checkoutshopper-test.adyen.com/ https://cdn.cookielaw.org api.salesforce.com https://*.forethought.ai https://acquia--full--c.sandbox.vf.force.com https://*.springcm.com https://*.api.salesforce.com http://adn.acquia.com https://feeds.feedburner.com https://dev-adn.acquia.com https://d3mvpbun2t0ap6.cloudfront.net https://calendar.google.com https://acquia.my.salesforce-scrt.com https://fonts.googleapis.com/css2 *.amazonaws.com https://app.arcade.software wss://*.slack-gov-dev.com wss://api.salesforce.com https://sentry.io *.widencollective.com https://cdn.cbweb.code-builder.platform.salesforce.com https://agent.acquia.net https://payments.salesforce.com/ https://api.mixpanel.com https://www.paypal.com https://gateway.gainsightcloud.com https://acquia.gainsightcloud.com https://dev-agent.acquia.net wss://*.slack.com https://fonts.gstatic.com https://demo.arcade.software https://checkoutshopper-live.adyen.com/ https://acquia.my.site.com https://aq112111s.searchunify.com https://aq142201p.searchunify.com https://*.trustarc.com https://acquia.my.salesforce.com https://geolocation.onetrust.com https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/ https://sfapi-sandbox.formstack.io https://embed.widencdn.net wss://*.api.salesforce.com https://www.google.com/recaptcha/ https://www.sandbox.paypal.com https://js.stripe.com/ https://www.acquia.com https://api.forethought.ai https://acquia.widen.net https://www.googletagmanager.com https://www.equusoft.com https://www.widen.com https://d1z9ryalr1cz6s.cloudfront.net https://www.google-analytics.com *.salesforce.com https://widen.widen.net *.api.salesforce.com https://sfapi.formstack.io wss://*.slack-gov.com; report-to sfdc-csp-ep; report-uri https://acquia.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D6g000003vCaM&networkId=0DM6g000000eGOT&type=communities 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com secure.apspaymentgateway.com portal.apsclicktopay.com testportal.apsclicktopay.com aps-clicktopay.uat.repay.net aps-clicktopay.repay.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com static.klaviyo.com p.typekit.net www.googletagmanager.com www.google-analytics.com analytics.google.com *.sitevibes.com sitevibes.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * secure.apspaymentgateway.com portal.apsclicktopay.com testportal.apsclicktopay.com aps-clicktopay.uat.repay.net aps-clicktopay.repay.net *.authorize.net https://plumrocket.com *.sitevibes.com sitevibes.com 'self' 'unsafe-inline'; frame-ancestors secure.apspaymentgateway.com portal.apsclicktopay.com testportal.apsclicktopay.com aps-clicktopay.uat.repay.net aps-clicktopay.repay.net *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * secure.apspaymentgateway.com portal.apsclicktopay.com testportal.apsclicktopay.com aps-clicktopay.uat.repay.net aps-clicktopay.repay.net *.certcapture.com *.getbread.com *.breadpayments.com *.rbcpayplan.com *.weltpixel.com *.authorize.net https://plumrocket.com www.google.com *.sitevibes.com sitevibes.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com secure.apspaymentgateway.com portal.apsclicktopay.com testportal.apsclicktopay.com aps-clicktopay.uat.repay.net aps-clicktopay.repay.net *.certcapture.com *.getbread.com *.breadpayments.com *.rbcpayplan.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ mageside.com shipping-offers-static-images-bucket-platformsandbox.s3.amazonaws.com shipping-offers-static-images-bucket-stage.s3.amazonaws.com shipping-offers-static-images-bucket-prod.s3.amazonaws.com shipping-offers-static-images-bucket-dev.s3.amazonaws.com shipping-offers-static-images-bucket-demo.s3.amazonaws.com helloextend-static-assets.s3.amazonaws.com extendcoreoffersprod-offersthemelogobucketeb21afa-1lr7le13dvgtp.s3.amazonaws.com extendcoreoffersdemo-offersthemelogobucketeb21afa-19jnurg0a0o17.s3.amazonaws.com extendcoreoffersdev-offersthemelogobucketeb21afaa-2ttuvks0mzbd.s3.amazonaws.com extendcoreoffersstage-offersthemelogobucketeb21af-1f81w2c7u5t7p.s3.amazonaws.com https://s3.amazonaws.com/ccspersistenceprod-contentstaticassets04b201d4-1apqb8dyegznm/offers/learnMoreModal-default-1654273334107-learnMoreModal.backgroundImageUrl_Generic_WomanwithBox2.jpg https://s3.amazonaws.com/ccspersistenceprod-contentstaticassets04b201d4-1apqb8dyegznm/offers/shippingProtectionCartOffer-default-1720746621507-extend_svg_cart.svg magefan.com cm.magefan.com https://firebasestorage.googleapis.com flagpedia.net s3.amazonaws.com/ www.facebook.com *.facebook.net www.google.co.in *.pubmatic.com *.media.net *.s3.us-east-1.amazonaws.com bat.bing.com ib.adnxs.com *.bidswitch.net *.doubleclick.net tg.socdm.com r.casalemedia.com *.adingo.jp ad.360yield.com idsync.rlcdn.com *.bing.com *.criteo.com sync.outbrain.com pixel.rubiconproject.com rtb-csync.smartadserver.com sync-t1.taboola.com criteo-sync.teads.tv ade.clmbtech.com eb2.3lift.com sync.1rx.io sync.targeting.unrulymedia.com www.google-analytics.com analytics.google.com cs.fluctssp.smt.docomo.ne.jp sync.crwdcntrl.net *.dmxleo.com maps.gstatic.com *.sitevibes.com sitevibes.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com secure.apspaymentgateway.com portal.apsclicktopay.com testportal.apsclicktopay.com aps-clicktopay.uat.repay.net aps-clicktopay.repay.net *.certcapture.com *.getbread.com *.breadpayments.com *.rbcpayplan.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://sdk.helloextend.com/ *.avada.io *.shopify.com maps.googleapis.com *.authorize.net *.hotjar.com connect.facebook.net static.addtoany.com *.criteo.com *.id5-sync.com rum-static.pingdom.net bat.bing.com *.clarity.ms *.noibu.com *.doubleclick.net https://*.paypal.com https://*.paypalobjects.com *.sitevibes.com sitevibes.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com secure.apspaymentgateway.com portal.apsclicktopay.com testportal.apsclicktopay.com aps-clicktopay.uat.repay.net aps-clicktopay.repay.net *.certcapture.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net *.googleapis.com *.addtoany.com maxcdn.bootstrapcdn.com *.gstatic.com *.typekit.net www.googletagmanager.com www.google-analytics.com analytics.google.com *.sitevibes.com sitevibes.com 'self' 'unsafe-inline'; object-src secure.apspaymentgateway.com portal.apsclicktopay.com testportal.apsclicktopay.com aps-clicktopay.uat.repay.net aps-clicktopay.repay.net 'self' 'unsafe-inline'; media-src *.adobe.com secure.apspaymentgateway.com portal.apsclicktopay.com testportal.apsclicktopay.com aps-clicktopay.uat.repay.net aps-clicktopay.repay.net 'self' 'unsafe-inline'; manifest-src secure.apspaymentgateway.com portal.apsclicktopay.com testportal.apsclicktopay.com aps-clicktopay.uat.repay.net aps-clicktopay.repay.net 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com secure.apspaymentgateway.com portal.apsclicktopay.com testportal.apsclicktopay.com aps-clicktopay.uat.repay.net aps-clicktopay.repay.net *.certcapture.com *.getbread.com *.breadpayments.com *.rbcpayplan.com *.breadgateway.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.helloextend.com/ https://*.extend.com/ https://get.geojs.io *.avada.io http://dpm.demdex.net www.gstatic.com maps.googleapis.com *.authorize.net *.doubleclick.net vapaendgo.com *.hotjar.io wss://*.hotjar.com www.google.co.in *.id5-sync.com *.pingdom.net *.clarity.ms *.bing.com analytics.google.com www.google-analytics.com *.noibu.com wss://*.noibu.com places.googleapis.com *.sitevibes.com sitevibes.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com secure.apspaymentgateway.com portal.apsclicktopay.com testportal.apsclicktopay.com aps-clicktopay.uat.repay.net aps-clicktopay.repay.net *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src secure.apspaymentgateway.com portal.apsclicktopay.com testportal.apsclicktopay.com aps-clicktopay.uat.repay.net aps-clicktopay.repay.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri secure.apspaymentgateway.com portal.apsclicktopay.com testportal.apsclicktopay.com aps-clicktopay.uat.repay.net aps-clicktopay.repay.net 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com https://www.gstatic.com *.fontawesome.com https://live.icecat.biz data: https://googletagmanager.com https://tagmanager.google.com https://fonts.gstatic.com locator.uberall.com script.hotjar.com *.hotjar.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com js.mollie.com dashboard.trustprofile.com td.doubleclick.net https://s3-eu-west-1.amazonaws.com/ https://td.doubleclick.net https://google-analytics.com https://objects.icecat.biz/ *.trustpilot.com https://www.google.com trafic-career.talent-soft.com view.publitas.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.doofinder.com magefan.com cm.magefan.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.mollie.com funtrafic.imgix.net bat.bing.com www.google.be lqip-funtrafic.imgix.net https://funtrafic-large.imgix.net/media/ https://funtrafic-thumb.imgix.net/media/ https://pdpthumb-funtrafic.imgix.net https://pdplarge-funtrafic.imgix.net https://pdpfull-funtrafic.imgix.net https://content.fun.be https://adservice.google.com https://region1.analytics.google.com https://googletagmanager.com https://tagmanager.google.com https://bat.bing.com  https://pagead2.googlesyndication.com https://td.doubleclick.net https://google-analytics.com bat.bing.net catalogmedia.trafic.com funtrafic-thumb.imgix.net joko-mobile-app-media.s3.eu-west-1.amazonaws.com locator.uberall.com magentoadmin.trafic.com www.google.de www.google.fr www.google.lt www.google.lu *.google.com www.trafic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com https://www.gstatic.com *.doofinder.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.mollie.com static.hotjar.com eu1-config.doofinder.com widget.trustpilot.com invitejs.trustpilot.com cdn.doofinder.com script.hotjar.com bat.bing.com js-agent.newrelic.com https://live.icecat.biz https://bat.bing.com  https://js-agent.newrelic.com https://googletagmanager.com https://tagmanager.google.com https://td.doubleclick.net https://google-analytics.com *.trustpilot.com api.mapbox.com locator.uberall.com view.publitas.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.doofinder.com *.fontawesome.com cdn.doofinder.com https://live.icecat.biz blob: https://googletagmanager.com https://tagmanager.google.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.googleapis.com *.doofinder.com wss://*.doofinder.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com region1.analytics.google.com eu1-api.doofinder.com bam.eu01.nr-data.net https://invitejs.trustpilot.com https://live.icecat.biz https://magentoadmin.trafic.docker https://adservice.google.com https://region1.analytics.google.com https://www.google.com https://www.google.be https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://td.doubleclick.net https://google-analytics.com  https://pagead2.googlesyndication.com api.mapbox.com bat.bing.com bat.bing.net content.hotjar.io events.mapbox.com locator.uberall.com surveystats.hotjar.io vc.hotjar.io *.hotjar.com wss: wss://ws.hotjar.com www.google.lu *.mapbox.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src bat.bing.com bam.eu01.nr-data.net googleads.g.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://js-agent.newrelic.com https://cdnjs.cloudflare.com https://code.jquery.com https://ws.sharethis.com https://www.google.com https://www.youtube.com https://mdbootstrap.com https://stackpath.bootstrapcdn.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.gstatic.com https://e.infogram.com https://platform.x.com https://platform.twitter.com https://www.instagram.com https://connect.facebook.net https://www.facebook.com https://platform.linkedin.com https://bat.bing.com https://static.ads-twitter.com https://js.adsrvr.org https://snap.licdn.com https://s.pinimg.com https://analytics.tiktok.com https://player.vimeo.com https://e.infogr.am https://livestream.com https://magic.piktochart.com https://www.clarity.ms https://consent.cookiebot.com https://public.tableausoftware.com https://us-assets.i.posthog.com https://e.issuu.com https://www.jeroenwijering.com https://cdn.onesignal.com https://americasquarterly.org https://counciloftheamericas.org blob: cdn.jsdelivr.net cdnjs.cloudflare.com mdbootstrap.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://js-agent.newrelic.com https://cdnjs.cloudflare.com https://code.jquery.com https://ws.sharethis.com https://www.google.com https://www.youtube.com https://mdbootstrap.com https://stackpath.bootstrapcdn.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.gstatic.com https://e.infogram.com https://platform.x.com https://platform.twitter.com https://www.instagram.com https://connect.facebook.net https://www.facebook.com https://platform.linkedin.com https://bat.bing.com https://static.ads-twitter.com https://js.adsrvr.org https://snap.licdn.com https://s.pinimg.com https://analytics.tiktok.com https://player.vimeo.com https://e.infogr.am https://livestream.com https://magic.piktochart.com https://www.clarity.ms https://consent.cookiebot.com https://public.tableausoftware.com https://us-assets.i.posthog.com https://e.issuu.com https://www.jeroenwijering.com https://cdn.onesignal.com https://americasquarterly.org https://counciloftheamericas.org blob: cdn.jsdelivr.net cdnjs.cloudflare.com mdbootstrap.com; style-src 'self' 'report-sample' 'unsafe-hashes' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://js-agent.newrelic.com https://cdnjs.cloudflare.com https://code.jquery.com https://ws.sharethis.com https://www.google.com https://mdbootstrap.com https://stackpath.bootstrapcdn.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.gstatic.com https://e.infogram.com https://use.fontawesome.com https://americasquarterly.org cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com mdbootstrap.com use.fontawesome.com; style-src-attr 'self' 'report-sample' 'unsafe-hashes' 'unsafe-inline'; style-src-elem 'self' 'report-sample' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://js-agent.newrelic.com https://cdnjs.cloudflare.com https://code.jquery.com https://ws.sharethis.com https://www.google.com https://mdbootstrap.com https://stackpath.bootstrapcdn.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.gstatic.com https://e.infogram.com https://use.fontawesome.com https://americasquarterly.org cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com mdbootstrap.com use.fontawesome.com; worker-src 'self' blob:; frame-ancestors 'self'; report-uri https://www.as-coa.org/log-report-uri/reportOnly 1
script-src 'strict-dynamic' 'unsafe-inline' https: 'nonce-22329b3f9b6547934381769a300ca528';object-src 'none';base-uri 'none';frame-src 'self' https://paywall.imoje.pl https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://wchat.freshchat.com https://*.webpush.freshchat.com https://www.youtube.com https://youtube.com https://youtu.be https://www.youtube-nocookie.com https://youtube-nocookie.com https://www.facebook.com https://open.spotify.com/embed/ https://podcasters.spotify.com/pod/show/ https://player.vimeo.com/video/ https://td.doubleclick.net https://platform.twitter.com/ https://www.googletagmanager.com/ https://www.wp.pl https://ssp.wp.pl https://srv.patronite.pl 1
default-src 'self' *.simyo.es *.typekit.net *.sumup.com *.opentech.com *.consorsbank.de *.bkm.com.tr *.micb.md *.capitecbank.co.za *.asseco-see.hr *.ing.com *.privatbank.ua *.n26.com *.six-group.com *.seglan.com *.monext.fr *.rsa3dsauth.com *.papara.com *.sibs.pt *.bpcbt.com *.capitalone.com *.bpcprocessing.com *.kapital24.uz *.alignet.io *.revolut.com *.wlp-acs.com *.mycardplace.com *.emlpayments.com *.abanca.com *.viseca.ch *.edb.com *.arca.am *.modirum.com *.redsys.es *.marqeta.com *.vinea.es *.cardinalcommerce.com;  script-src-elem 'self' 'unsafe-inline' *.redsys.es *.cardinalcommerce.com *.googleapis.com *.pinterest.com bat.bing.com *.gstatic.com *.googletagmanager.com *.doubleclick.net *.amazon-adsystem.com *.pinimg.com *.taboola.com amplify.outbrain.com jgb8.simyo.es analytics.tiktok.com *.weborama.fr connect.facebook.net foodin.site sc-static.net *.hotjar.com *.mathtag.com *.appboycdn.com *.google-analytics.com *.useinsider.com *.criteo.com *.jsdelivr.net *.cardinalcommerce.com *.google.com www.google.com/recaptcha *.xizumubama.com *.thetto.com *.roterf.com *.snapchat.com *.appsflyer.com *.bazaarvoice.com *.bimien.com;  script-src 'self' 'unsafe-inline' https: 'unsafe-eval' *.typekit.net *.redsys.es *.cardinalcommerce.com *.googletagmanager.com bat.bing.com *.googleapis.com *.gstatic.com *.google.com *.ggpht.com *.googleusercontent.com *.yandex.net yastatic.net blob:;  img-src 'self' *.redsys.es *.simyo.es *.google.es *.doubleclick.net *.weborama.fr *.facebook.com *.cardinalcommerce.com bat.bing.com *.google-analytics.com analytics.tiktok.com *.typekit.net *.googletagmanager.com *.googleapis.com *.gstatic.com *.google.com  *.googleusercontent.com *.vimeocdn.com data: *.360yield.com *.doubleclick.net *.stickyadstv.com *.yieldmo.com *.bing.com blob: bttrack.com *.shoppiday.es *.goin.cloud *.honey.io *.media.net *.camarabilbao.com *.adxcel-ec2.com *.mediavine.com *.weborama.fr *.criteo.com *.liadm.com *.adnxs.com *.rlcdn.com *.postrelease.com *.roeye.com *.ggpht.com *.sharethrough.com *.yandex.ru *.veritone-ce.com *.mediawallahscript.com *.rubiconproject.com *.casalemedia.com *.smartadserver.com *.pubmatic.com *.yahoo.com *.igstatic.com *.taboola.com *.1rx.io *.outbrain.com *.revcontent.com *.omnitagjs.com webkit-masked-url://hidden *.facebook.com *.google.ad *.google.al *.google.at *.google.be *.google.bg *.google.by *.google.ca *.google.ch *.google.cl *.google.cn *.google.co.cr *.google.co.id *.google.co.in *.google.co.jp *.google.co.kr *.google.co.ma *.google.co.th *.google.co.uk *.google.co.ve *.google.co.za *.google.com *.google.com.ar *.google.com.au *.google.com.br *.google.com.co *.google.com.do *.google.com.ec *.google.ba *.google.co.uz *.google.bf *.google.ci *.google.com.gi *.google.com.gt *.google.com.ni *.google.com.np *.google.com.eg *.google.com.hk *.google.com.mt *.google.com.mx *.google.com.my *.google.com.pe *.google.com.py *.google.com.qa *.google.com.sg *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.uy *.google.com.vn *.google.com.gh *.google.cz *.google.de *.google.dk *.google.ee *.google.es *.google.co.ao *.google.co.il *.google.co.ug *.google.com.bo *.google.com.bz *.google.com.na *.google.com.sv *.google.md *.google.mw *.google.iq *.google.am *.google.fi *.google.cv *.google.dz *.google.ge *.google.hn *.google.kz *.google.lk *.google.lv *.google.rs *.google.sn *.google.fr *.google.gr *.google.hr *.google.hu *.google.ie *.google.is *.google.it *.google.lt *.google.lu *.google.ae *.google.mu *.google.nl *.google.no *.google.pl *.google.pt *.google.ro *.google.ru *.google.se *.google.si *.google.sk *.google.cm *.google.co.ke *.google.co.nz *.google.com.pa *.google.com.ph *.google.com.pk *.google.com.pr *.google.com.sa *.google.me *.google.mv *.google.tn *.bidswitch.net *.groovinads.com *.clarity.ms *.ytimg.com mikkiload.com *.prfrm-ads.com *.charleskeith.co.th *.barclays.co.uk *.snapchat.com *.adentifi.com *.amazonaws.com *.discordapp.com *.yandex.com *.productfruits.com *.discordapp.net *.profileengine.com *.phncdn.com *.leanlibrary.app *.ibb.co *.facebook.net *.css-tricks.com *.ipredictive.com *.line.me *.reskyt.com *.marca.com *.baidu.com *.huffingtonpost.es *.eficads.net;  frame-src *.simyo.es *.redsys.es simyospain.speedtestcustom.com *.weborama.fr buybutwhere.com hipodi.com *.awin1.com *.googleapis.com cookieaquila.com *.mycardplace.com *.cardinalcommerce.com bat.bing.com *.pinterest.com *.amazon-adsystem.com *.doubleclick.net mapacob.aptica.es *.google.com *.socialmediaserver.es *.vimeo.com *.n26.com *.abanca.com *.borica.bg *.emlpayments.com *.nexigroup.com *.sebkort.com *.vinea.es *.cardcenter.ch 3dsecure-vrp.de acestream.tv *.modirum.com *.3dsecure.no *.apata.io *.edb.com *.bpcbt.com *.revolut.com *.targobank.de *.modirum.com acs2.arca.am *.bgpb.by *.marqeta.com *.wlp-acs.com *.opendns.com bnext.areq.mpts.modirum.com:9702 *.icard.com ebanking1.ccb.com.cn emet.live emet.news gateway.zscaler.net gateway.zscalertwo.net gateway.zscloud.net *.criteo.com *.rsa3dsauth.com *.moz.com sas.mc.redsys.es:9731 *.dkb.de *.arcot.com * *.criteo.net tdschded.monext.fr visa2.acs.cmbchina.com *.facebook.com *.googletagmanager.com *.pluscard.de *.pkobp.pl *.sia.eu *.alignet.io *.bpcprocessing.com *.sibs.pt *.swedbank.se *.useinsider.com *.boc.cn *.cloudfront.net *.kaspersky-labs.com *.micb.md *.merck.com *.zscalerthree.net *.secureacs.com *.bankserv.co.za *.gpesecure.com *.adsrvr.org *.ing.de *.viseca.ch *.icbc.com.cn *.netsgroup.com *.jysanbank.kz *.ukrsibbank.com *.monzo.com *.securesuite.net *.capitalone.com *.mtbank.by:8043 *.hitrust.com:9750 *.ajgirona.org *.creditagricole.ma *.mycardsecure.com *.google.com skytraf.xyz acs.hitrust-us.com:9750 securegw1.micb.md:6444 *.groovinads.com *.danskebank.com *.seglan.com *.useinsider.com div.show *.consorsbank.de *.co.uk *.indra-netplus.com *.firstdata.de *.snapchat.com *.sparkasse.at securesuite.net *.wibmo.com *.citibank.com *.zscaler.com *.bog.ge noop.style *.3dsacs.net *.bunq.com *.cihbank.ma *.ukrgasbank.com *.acdcproc.com *.privatbank.ua *.csi-processing.com *.placetopay.com *.s-id-check-sparkassen.de *.eewosecure.com *.cm-cic.com *.gc.ge *.sinnad.com.bh *.mercurypaymentservices.it ;  font-src 'self' *.simyo.es *.redsys.es *.affilitizer.com *.escribelo.ai *.cdnfonts.com *.googleusercontent.com *.bootstrapcdn.com *.cardinalcommerce.com *.fontawesome.com fonts.gstatic.com *.typekit.net *.goin.cloud *.scite.ai *.cloudflare.com *.windows.net *.migaku.com *.slant.co *.alicdn.com *.faceworks.nl *.zohocdn.com yastatic.net ray.st chrome-extension moz-extension ms-browser-extension data:;  connect-src 'self' *.adblockertool.com *.adfreevision.com *.amcreativemedia.com *.bttrack.com *.blackcrow.ai *.yimg.com *.browsekeeper.com *.creativecdn.com *.mczbf.com *.highdataanalytics.com *.uniswap.org *.kaspersky-labs.com infragrid.v.network *.dbankcloud.cn *.overbridgenet.com *.googlesyndication.com *.facebook.com *.simyo.es *.redsys.es ara.paa-reporting-advertising.amazon *.cardinalcommerce.com bat.bing.com *.taboola.com analytics.tiktok.com *.amazon-adsystem.com *.google-analytics.com *.doubleclick.net *.pinterest.com *.googleapis.com *.google.com *.google.com.ar *.google.com.co *.google.com.do *.google.com.mx *.google.com.pe *.google.com.tr *.google.com.uy *.google.de *.google.es *.google.fr *.google.ie *.google.it *.google.lt *.google.pt *.google.kz *.google.ro *.google.ae *.google.at *.google.ca *.google.ch *.google.cl *.google.co.ma *.google.co.uk *.google.co.ve  *.google.be *.google.cm *.google.co.jp *.google.co.nz *.google.com.br *.google.cz *.google.fi *.google.com.pk *.google.com.pr *.google.com.sg *.google.com.gi *.google.ad *.google.by *.google.ba *.google.gr *.google.hu *.google.nl *.google.no *.google.rs *.google.sk *.google.se *.google.ru *.google.sn *.google.tn *.google.co.il *.google.com.pa *.google.com.qa *.google.dk *.google.me *.google.com.au *.google.com.gt *.google.com.hk *.google.co.cr *.gstatic.com *.googleadservices.com *.mplxtms.com *.yandex.ru *.cdn77.org *.adtonus.com *.fbanalytics.org *.mkmediaworks.com *.ultimateaderaser.com *.zendesk.com *.jquery.com *.zdassets.com meetlookup.com *.amazonaws.com rbtds.net *.clarity.ms zone1-services-cdn.com *.socialsolutionapp.com *.awesomeblocker.com *.global-data-lab.com *.range-offer.com *.report-uri.com *.pangle-ads.com *.adblocking247.com *.blocksly.org *.crystal-blocker.com *.datacloudstat.com *.software-downloading.com cubox.pro *.vimeocdn.com *.typekit.net *.vimeo.com *.reskyt.com *.braze.com *.criteo.com *.snapchat.com *.yandex.net *.yandex.com *.productfruits.com *.hotjar.io *.appsflyer.com *.onelink.me *.googletagmanager.com ya.ru *.socialmediaserver.es data: blob:;  style-src-elem 'self' 'unsafe-inline' *.typekit.net *.googleapis.com *.scriptcdn.net *.tiktok.com *.webgains.io *.bing.com blob: bttrack.com *.amazon-adsystem.com *.taboola.com *.trackmytarget.com *.facebook.net *.weborama.fr *.pinterest.com *.eligrop.com *.hicloud.com *.kaspersky-labs.com *.doubleclick.net infimv.com *.blackcrow.ai *.simyo.es *.roeyecdn.com *.yandex.ru *.acestream.net *.pinimg.com *.yimg.com *.mplxtms.com *.criteo.net *.creativecdn.com *.dwin1.com *.google.com *.googleadservices.com *.googletagmanager.com *.mczbf.com *.opera-mini.net *.honey.io *.gstatic.com *.groovinads.com *.cloudflare.com  *.useinsider.com *.line-scdn.net *.vulapo.com *.cloudfront.net *.mediarithmics.com hublosk.com *.adsrvr.org jullyambery.net *.adguard.org mikkiload.com *.prfrm-ads.com *.zdassets.com *.charleskeith.co.th *.eficads.net *.artfut.com *.clarity.ms *.reskyt.com *.bootstrapcdn.com *.fontawesome.com lonelyfix.com data:;  style-src-attr 'unsafe-inline' *.typekit.net;  style-src 'self' 'unsafe-inline' *.typekit.net *.googleapis.com *.google.com *.reskyt.com *.gstatic.com *.googleadservices.com;  media-src data:;  worker-src blob:; 1
connect-src https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.searchspring.io *.a.searchspring.io analytics.searchspring.net *.gorgias.chat *.cookieyes.com cdn-cookieyes.com 'self' 'unsafe-inline' maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.turnto.com; img-src https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.a.searchspring.io cdn-cookieyes.com *.gorgias.chat 'self' 'unsafe-inline' data: maps.googleapis.com maps.gstatic.com *.turnto.com wac.edgecastcdn.net; media-src www.sportys.com www.sportystoolshop.com www.preferredliving.com www.aviationgifts.com 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' assets.adobedtm.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com js.authorize.net jstest.authorize.net t.paypal.com s.ytimg.com video.google.com vimeo.com *.vimeocdn.com cdn-scripts.signifyd.com *.googleapis.com r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net cdn.dnky.co api.comapi.com webchat.dotdigital.com connect.facebook.net graph.facebook.com business.facebook.com cdn.xtento.com *.klevu.com *.ksearchnet.com *.avada.io *.trustpilot.com *.yotpo.com preferredliving.com *.preferredliving.com sportys.com *.sportys.com sportystoolshop.com *.sportystoolshop.com wright-bros.com *.wright-bros.com na-library.klarnaservices.com www.googleadservices.com bat.bing.com www.googletagmanager.com *.bc0a.com hello.zonos.com cdn.mouseflow.com secure.quantserve.com cdn.attn.tv *.datasteam.io googleads.g.doubleclick.net rules.quantcount.com aa.agkn.com *.cloudmaestro.com cdn.b0e8.com cdn.iglobalstores.com *.listrakbi.com www.google-analytics.com *.listrak.com widgets.turnto.com www.google.com www.gstatic.com widget.heymarket.com *.clarity.ms *.aviationgifts.com snapui.searchspring.io cdn.searchspring.net js.klevu.com *.gorgias.chat cdn.tailwindcss.com cdn-cookieyes.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.turnto.com; style-src https://static.klaviyo.com static.klaviyo.com fonts.bunny.net 'self' 'unsafe-inline' fonts.googleapis.com *.turnto.com; report-uri /.webscale/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.blenheimpalace.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.googlesyndication.com www.googleadservices.com *.google.com maps.googleapis.com *.gstatic.com *.doubleclick.net *.convertexperiments.com *.cookiebot.com *.civiccomputing.com connect.facebook.net analytics.tiktok.com bat.bing.com snap.licdn.com *.clarity.ms static.cloudflareinsights.com challenges.cloudflare.com js.createsend1.com *.tradedoubler.com a.tdguard.eu *.app-us1.com *.adswizz.com *.youtube.com www.youtube-nocookie.com cdn.jsdelivr.net static.beaconproducts.co.uk js.stripe.com *.hcaptcha.com *.codepen.io d2513fpustehec.cloudfront.net capi-automation.s3.us-east-2.amazonaws.com; style-src 'self' 'unsafe-inline' use.typekit.net p.typekit.net fonts.googleapis.com cdn.jsdelivr.net *.codepen.io *.gstatic.com *.blenheimpalace.com; font-src 'self' data: use.typekit.net fonts.gstatic.com cdn.jsdelivr.net *.codepen.io d2513fpustehec.cloudfront.net *.blenheimpalace.com; img-src https: data: blob:; connect-src https: wss:; media-src 'self' data: blob: *.blenheimpalace.com d2513fpustehec.cloudfront.net; frame-src 'self' *.blenheimpalace.com *.cookiebot.com *.facebook.com *.youtube.com www.youtube-nocookie.com forms.office.com forms.cloud.microsoft *.beaconforms.com js.stripe.com m.stripe.com *.hcaptcha.com challenges.cloudflare.com *.doubleclick.net www.googletagmanager.com *.codepen.io cdpn.io *.formsite.com *.livevacancies.co.uk *.google.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' *.blenheimpalace.com forms.office.com *.beaconforms.com *.formsite.com *.createsend.com *.facebook.com 1
default-src 'self';
      script-src 'self' 'unsafe-inline' 'unsafe-eval'
      		*.beaconforms.com
      		*.beaconproducts.co.uk
      		*.bootstrapcdn.com
      		*.calendly.com
      		calendly.com
      		*.cloudflare.com
      		*.doubleclick.net
      		*.facebook.net
      		*.fontawesome.com
      		*.google-analytics.com
      		*.google.com
      		*.googleadservices.com
      		*.googleapis.com
      		*.googletagmanager.com
      		*.gravatar.com
      		*.gstatic.com
      		*.myfonts.net
      		*.victimsupport.org.uk
      		*.w.org
      		*.wpdownloadmanager.com
      		*.yoast.com
      		js.stripe.com
      		yoast.com
      		*.youtube.com
      		cdn-cookieyes.com
      		s.ytimg.com;
      style-src 'self' 'unsafe-inline'
      		*.fontawesome.com
      		*.googleapis.com
      		*.gstatic.com
      		hello.myfonts.net
      		stackpath.bootstrapcdn.com
      		static.userback.io;
      img-src 'self' data:
      		*.beaconforms.com
      		*.beaconproducts.co.uk
      		*.bootstrapcdn.com
      		*.calendly.com
      		*.cloudflare.com
      		*.doubleclick.net
      		*.facebook.net
      		*.fontawesome.com
      		*.google-analytics.com
      		*.google.com
      		*.google.ro
      		*.google.co.uk
      		*.googleadservices.com
      		*.googleapis.com
      		*.googletagmanager.com
      		*.gravatar.com
      		*.gstatic.com
      		*.myfonts.net
      		*.victimsupport.org.uk
      		*.w.org
      		*.wpdownloadmanager.com
      		*.yoast.com
      		*.youtube.com
      		cdn-cookieyes.com
      		s.ytimg.com
      		www.facebook.com;
      font-src 'self' data:
      		*.fontawesome.com
      		*.googleapis.com
      		*.gstatic.com
      		static.userback.io;
      connect-src 'self'
      		*.beaconforms.com
      		*.beaconproducts.co.uk
      		*.bootstrapcdn.com
      		*.calendly.com
      		*.cloudflare.com
      		*.doubleclick.net
      		*.facebook.net
      		*.fontawesome.com
      		*.google-analytics.com
      		*.google.com
      		*.google.co.uk
      		*.googleadservices.com
      		*.googleapis.com
      		*.googletagmanager.com
      		*.gravatar.com
      		*.gstatic.com
      		*.myfonts.net
      		*.pagead2.googlesyndication.com
      		*.victimsupport.org.uk
      		*.w.org
      		*.wpdownloadmanager.com
      		*.yoast.com
      		*.youtube.com
      		*.browser-intake-datadoghq.com
      		*.browser-intake-datadoghq.eu
      		api.stripe.com 
      		api.userback.io
      		cdn-cookieyes.com
      		directory.cookieyes.com
      		graph.facebook.com
      		log.cookieyes.com
      		static.userback.io
      		www.facebook.com;
      frame-src 'self'
      		*.beaconforms.com
      		*.beaconproducts.co.uk
      		*.bootstrapcdn.com
      		*.calendly.com
      		*.cloudflare.com
      		*.doubleclick.net
      		*.facebook.net
      		*.fontawesome.com
      		*.google-analytics.com
      		*.google.com
      		*.googleadservices.com
      		*.googleapis.com
      		*.googletagmanager.com
      		*.gravatar.com
      		*.gstatic.com
      		*.myfonts.net
      		*.victimsupport.org.uk
      		*.w.org
      		*.wpdownloadmanager.com
      		*.yoast.com
      		*.youtube.com
      		calendly.com
      		cdn-cookieyes.com
      		js.stripe.com
      		s.ytimg.com
      		static.userback.io
      		yoast.com;
	report-uri /csp-report;
	report-to csp-endpoint;
       1
default-src 'self'; script-src 'self' 'nonce-xpGQoHppCP5KfEgEoYwQXw==' 'strict-dynamic' https: 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data:; font-src 'self' https: data:; connect-src 'self' https:; frame-src https:; form-action 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /csp-report.php; report-to csp-endpoint 1
font-src *.fontawesome.com *.fonts.googleapis.com *.gstatic.com data: *.cloudflare.com *.elecrow.com *.chromestatus.com *.bootcss.com maxcdn.bootstrapcdn.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com https://store.plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.addthis.com *.pinterest.com *.amazonaws.com *.awin1.com *.zenaps.com *.fls.doubleclick.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://store.plumrocket.com cashier1.uat.useepay.com cashier.useepay.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com *.cdninstagram.com *.elecrow.com *.shopify.com github.com *.githubusercontent.com *.wp.com *.imgur.com bitronics.store www.longan-labs.cc www.facebook.com elecrow.s3.us-west-1.amazonaws.com *.sharethis.com *.awin1.com *.zenaps.com *.wepowerconnections.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: blob: 'unsafe-inline' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.google-analytics.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.facebook.net *.pinterest.com *.instagram.com *.dwin1.com *.livechatinc.com *.elecrow.com *.bootcdn.net *.googletagmanager.com *.doubleclick.net t.contentsquare.net *.awin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com s7.addthis.com *.fontawesome.com *.gstatic.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com cashier.useepay.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.bootcss.com maxcdn.bootstrapcdn.com plugin-code.salesmartly.com *.fontawesome.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com client.salesmartly.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.cloudflare.com *.paypal.com *.googleapis.com *.addthis.com *.cardinalcommerce.com *.graph.instagram.com *.google-analytics.com *.elecrow.com *.googletagmanager.com *.doubleclick.net *.amazonaws.com *.wepowerconnections.com https://the.sciencebehindecommerce.com ekr.zdassets.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'strict-dynamic' 'nonce-sUdvVlb97km31nsHCgv/wQ==' https://*.adyen.com https://*.adyenpayments.com https://*.bambuser.com https://*.cevoid.com https://*.contentsquare.net https://*.doubleclick.net https://*.klarna.com https://*.klarnacdn.net https://*.kustom.co https://*.taboola.com https://*.usercentrics.eu https://analytics.tiktok.com https://api.unifaun.com https://assets.voyado.com https://bat.bing.com https://chat.kindlycdn.com https://connect.facebook.net https://ct.pinterest.com https://gallery.cevoid.com https://google-analytics.com https://pay.google.com https://s.pinimg.com https://t.contentsquare.net https://tr.snapchat.com https://www.googleadservices.com https://www.googletagmanager.com https://www.googletagservices.com https://ad.doubleclick.net https://modules.ecomid.com https://*.inretrn.com https://returnsportal.inretrn.com; style-src 'self' 'unsafe-inline' https: data:; connect-src 'self' https://*.az.contentsquare.net https://*.bambuser.com https://*.cevoid.com https://*.contentsquare.net https://*.facebook.com https://*.google-analytics.com https://*.google.com https://www.google.com https://*.google.se https://*.klarna.com https://*.kindly.ai https://*.kustom.co https://*.snapchat.com https://*.taboola.com https://*.tiktok.com https://*.usercentrics.eu https://*.kappahl.com https://*.newbie.com https://analytics-ipv6.tiktokw.us https://api.cevoid.com https://api.klarna.com https://api.raygun.io https://api.screen9.com https://api.unifaun.com https://assets.voyado.com https://bat.bing.com https://bat.bing.net https://bot.kindly.ai https://cdn.raygun.io https://chat.kindlycdn.com https://checkout-test.adyen.com https://checkout.adyen.com https://checkoutanalytics-test.adyen.com https://checkoutshopper-test.cdn.adyen.com https://checkoutshopper-test.cdn.adyen.com/ https://checkoutanalytics-live.adyen.com https://ct.pinterest.com https://dc.services.visualstudio.com https://gallery.cevoid.com https://google.com https://maps.googleapis.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://pay.google.com https://qcdn.screen9.com https://qcnl.tv https://statsapi.screen9.com https://t.contentsquare.net https://t1.voyado.com https://wapi.lipscore.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.pinterest.com https://www.sandbox.paypal.com https://ad.doubleclick.net https://stats.g.doubleclick.net https://modules.ecomid.com https://events.ecomid.com https://api.ecomid.com https://sockjs-eu.pusher.com https://*.inretrn.com https://returnsportal.inretrn.com; frame-src 'self' https://*.adyen.com https://*.adyenpayments.com https://*.bambuser.com https://*.doubleclick.net https://*.klarna.com https://*.klarnacdn.net https://*.kustom.co https://*.usercentrics.eu https://checkout.klarna.com https://ct.pinterest.com https://pay.google.com https://*.kappahl.com https://*.newbie.com https://tr.snapchat.com https://www.googletagmanager.com https://www.sandbox.paypal.com https://modules.ecomid.com https://www.facebook.com https://*.inretrn.com https://returnsportal.inretrn.com; img-src 'self' data: https: blob:; media-src 'self' blob: data: https:;font-src 'self' https: data:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; report-uri /csp-report; 1
base-uri 'self'; block-all-mixed-content; default-src 'self'; form-action 'self'; frame-ancestors 'self'; plugin-types 'none'; script-src 'self' 'report-sample' 'unsafe-inline'; style-src 'self' 'report-sample' 'unsafe-inline'; object-src 'none'; worker-src 'none'; report-uri https://prod.ap.batic.cudasvc.com/xenios/api/v1/error/report??paid=151&spid=437&v=v1.0&payload=rJeyhteK1R4ehvX19W96lNbaCGhFOwYEfK03vVIAbGT5-Q7yZ9OToevWcEsUgEtr9MXVmN9aW_lyGoT9yW1-UCgf76Ah_t5frpYDgASdIh53J9TF63WfkPb5_PGSdQYJG57RZrYoDH0amOaXK3ShGJDfzOJj3jyoZtOF5uL1OJbl12aK96HApxbBz_TpoER4O4eb-opAzBmipUky9F8zmw==; 1
default-src 'none'; form-action 'none'; frame-ancestors 'none'; 1
base-uri 'none'; font-src 'self' https: data:; form-action https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://www.facebook.com; frame-ancestors 'self'; img-src https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://ads-twitter.com https://ads-api.twitter.com https://analytics.twitter.com https://mautic.netcup.news https://px.ads.linkedin.com 'self' blob: data: https: https://www.captcha.eu; object-src 'none'; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://www.captcha.eu; script-src https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://chat.netcup.com https://chat-dev-ui.netcup.net https://chat-ui.netcup.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com https://*.onetrust.com https://measure.netcup.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://widget.trustpilot.com https://cdn.brevo.com/js/sdk-loader.js https://www.captcha.eu 'self' 'wasm-unsafe-eval' 'nonce-3PyFNdK20ZN03URsU8PCCHli'; child-src blob: https://td.doubleclick.net; connect-src https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://chat.netcup.com https://chat-dev-ui.netcup.net https://chat-ui.netcup.com https://ads-twitter.com https://ads-api.twitter.com https://analytics.twitter.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com https://*.onetrust.com https://www.google.com https://in-automate.brevo.com https://measure.netcup.com https://google.com https://px.ads.linkedin.com https://*.clarity.ms/ 'self' https://*.analytics.google.com https://*.google-analytics.com https://stats.g.doubleclick.net https://www.captcha.eu https://googleads.g.doubleclick.net https://www.googleadservices.com https://cdn.cookielaw.org https://adservice.google.com https://pagead2.googlesyndication.com https://www.redditstatic.com https://pixel-config.reddit.com https://analytics.tiktok.com https://ads.tiktok.com https://bat.bing.com https://widget.trustpilot.com; frame-src https://td.doubleclick.net https://www.facebook.com https://www.googletagmanager.com https://measure.netcup.com https://www.youtube.com https://www.youtube-nocookie.com/ https://widget.trustpilot.com https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://chat.netcup.com https://chat-dev-ui.netcup.net https://chat-ui.netcup.com; script-src-elem https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://chat.netcup.com https://chat-dev-ui.netcup.net https://chat-ui.netcup.com https://cdn.brevo.com/js/sdk-loader.js https://sibautomation.com/sa.js https://sibforms.com/ https://www.googleadservices.com https://www.redditstatic.com 'self' 'unsafe-inline' https://*.googletagmanager.com https://static.ads-twitter.com https://snap.licdn.com https://bat.bing.com https://connect.facebook.net https://*.clarity.ms https://googleads.g.doubleclick.net https://cdn.cookielaw.org https://analytics.tiktok.com https://ads.tiktok.com https://measure.netcup.com https://www.youtube.com https://pagead2.googlesyndication.com https://widget.trustpilot.com; worker-src blob:; report-to csp-endpoint; 1
default-src 'self'; script-src 'self' https://cdn.sanity.io https://core.sanity-cdn.com https://eu.i.posthog.com https://eu-assets.i.posthog.com https://*.googletagmanager.com https://*.google-analytics.com https://*.hotjar.com https://transcend-cdn.com https://www.transcend-cdn.com https://cloud.umami.is https://analytics.newgenre.studio https://assets.slater.app https://www.clarity.ms https://*.clarity.ms https://*.website-files.com https://d3e54v103j8qbb.cloudfront.net https://ajax.googleapis.com https://open.spotify.com https://*.spotifycdn.com https://cdn.jsdelivr.net https://vercel.live; style-src 'self' 'unsafe-inline' https://cdn.sanity.io https://*.googletagmanager.com https://*.hotjar.com https://fonts.googleapis.com https://transcend-cdn.com https://*.website-files.com https://*.spotifycdn.com https://assets.slater.app; img-src 'self' data: blob: https://cdn.sanity.io https://i.ytimg.com https://img.youtube.com https://lh3.googleusercontent.com https://*.googletagmanager.com https://*.google-analytics.com https://*.g.doubleclick.net https://*.hotjar.com https://*.website-files.com https://uploads-ssl.webflow.com https://d3e54v103j8qbb.cloudfront.net https://*.clarity.ms https://c.bing.com https://*.scdn.co https://*.spotifycdn.com; font-src 'self' data: https://*.hotjar.com https://fonts.gstatic.com https://*.website-files.com https://*.scdn.co; connect-src 'self' https://cdn.sanity.io https://*.sanity.io wss://*.sanity.io https://core.sanity-cdn.com https://sanity-cdn.com https://raw.githubusercontent.com https://eu.i.posthog.com https://eu-assets.i.posthog.com https://*.algolia.net https://*.algolianet.com https://insights.algolia.io https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://accel-2024-build.webflow.io https://transcend-cdn.com https://www.transcend-cdn.com https://telemetry.transcend.io https://cdn.jsdelivr.net https://*.website-files.com https://*.spotifycdn.com https://*.scdn.co https://apresolve.spotify.com https://cloud.umami.is https://gateway.umami.is https://analytics.newgenre.studio https://*.clarity.ms https://*.accel-com.workers.dev https://vercel.live; media-src 'self' https://cdn.sanity.io https://*.website-files.com https://*.spotifycdn.com https://*.scdn.co; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://docs.google.com https://*.googletagmanager.com https://*.hotjar.com https://td.doubleclick.net https://open.spotify.com https://vercel.live; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'none'; form-action 'self'; frame-ancestors 'self'; script-src-attr 'none'; upgrade-insecure-requests; report-uri https://eu.i.posthog.com/report/?token=phc_D88kyrKsnDLmuD7zHgYCgFel2I3O99FHpOvHmAc4Xlz; report-to posthog 1
default-src 'self'; connect-src 'self' https://cdn.cookielaw.org https://geolocation.onetrust.com https://*.onetrust.com https://*.omtrdc.net https://*.demdex.net https://smetrics.mastercard.com https://*.ads.linkedin.com https://*.hsforms.net https://*.hsforms.com https://*.hubspot.com; font-src 'self' data:; frame-src 'self' https://static.addtoany.com https://www.google.com https://*.onetrust.com https://*.demdex.net https://*.hsforms.net https://*.hsforms.com https://*.hubspot.com; img-src 'self' data: https://cdn.cookielaw.org https://*.onetrust.com https://static.addtoany.com https://*.demdex.net https://*.omtrdc.net https://asset.mastercard.com https://smetrics.mastercard.com https://*.ads.linkedin.com https://www.linkedin.com https://*.hsforms.net https://*.hsforms.com https://*.hubspot.com; object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://cdn.cookielaw.org https://geolocation.onetrust.com https://*.onetrust.com https://assets.adobedtm.com https://static.addtoany.com https://snap.licdn.com https://www.google.com https://www.gstatic.com https://js.hsforms.net https://js.hs-scripts.com https://*.hsforms.net https://*.hsforms.com https://*.hubspot.com cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.ethoca.com; script-src-elem 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://cdn.cookielaw.org https://geolocation.onetrust.com https://*.onetrust.com https://assets.adobedtm.com https://static.addtoany.com https://snap.licdn.com https://www.google.com https://www.gstatic.com https://js.hsforms.net https://js.hs-scripts.com https://*.hsforms.net https://*.hsforms.com https://*.hubspot.com cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.ethoca.com; style-src 'self' 'report-sample' 'unsafe-inline' https://cdn.cookielaw.org https://*.onetrust.com https://*.hsforms.net https://*.hubspot.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; worker-src 'self'; base-uri 'self' 1
default-src 'none'; report-uri /next-external/log/csp/violations; report-to csp-violations; connect-src 'self' wss://www.nordnet.no https://www.googletagmanager.com https://analytics.nordnet.no https://cdn.prod.nntech.io https://files.nordnet.no https://api.prod.nntech.io https://experimentation.public.prod.nntech.io https://www.google.com https://storage.googleapis.com https://www.recaptcha.net https://relay.prod.nntech.io; font-src 'self' https://cdn.prod.nntech.io https://files.nordnet.no; frame-src 'self' https://analytics.nordnet.no https://10961666.fls.doubleclick.net https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://w.soundcloud.com https://embed.acast.com https://link.tink.com https://www.tv2.no https://checkout.trustly.com https://www.recaptcha.net https://www.google.com https://t.email.nordnet.no https://dashboard.fundrella.com; img-src 'self' https://www.googletagmanager.com https://analytics.nordnet.no https://cdn.prod.nntech.io https://files.nordnet.no https://api.prod.nntech.io data: blob: https://cdn.tink.se https://images.ctfassets.net https://i.vimeocdn.com https://img.youtube.com https://i.scdn.co https://www.recaptcha.net; manifest-src 'self'; media-src https://cdn.prod.nntech.io https://files.nordnet.no https://videos.ctfassets.net; object-src 'self'; script-src 'self' 'nonce-570be0e9-89e6-4960-8e17-839402c86aff' https://analytics.nordnet.no https://cdn.prod.nntech.io https://files.nordnet.no https://www.recaptcha.net https://www.google.com; script-src-attr 'none'; style-src 'unsafe-inline' 'self' https://cdn.prod.nntech.io https://files.nordnet.no; worker-src 'none'; base-uri 'none'; form-action 'self' https://pvu.nets.no https://pvu.avtalegiro.no https://online.alandsbanken.fi https://verkkopankki.danskebank.fi https://verkkomaksu.handelsbanken.fi https://epmt.nordea.fi https://identify.nordea.com https://verkkomaksu.poppankki.fi https://verkkomaksu.saastopankki.fi https://online.s-pankki.fi https://auth.aktia.fi https://kirjaudu.aktia.fi https://ebank.aktia.fi; frame-ancestors 'self' https://app.contentful.com; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-igySBFFKM2-Xy2Mxlfs6nQ' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
script-src-elem 'self' *.googletagmanager.com https://*.mopinion.com https://integration.occ7.mtel.eu https://connect.facebook.net https://snap.licdn.com https://www.clarity.ms https://c.clarity.ms/ https://www.youtube.com https://static.doubleclick.net https://api.evolveip.eu/ChatWebAzure/EipChat.js 'nonce-Qwkl/IwmMh7UU6cWt87i6dy3iuDpHIsvS7VcKiXWv4c='; script-src 'self' 'unsafe-eval' *.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net 'sha256-TqjM/ocl9Ih4hsJxBuYJi9DiPkAJnBID1b5nkiBEnYI=' 'sha256-vemytl4W5Qmww8+4p7ijbNPmvDbs6GPIf7CXCwtOWgc=' 'nonce-Qwkl/IwmMh7UU6cWt87i6dy3iuDpHIsvS7VcKiXWv4c='; report-uri /api/csp/report; default-src 'none'; font-src 'self' data: https://fonts.gstatic.com https://cdn.faceworks.nl https://*.mopinion.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://fonts.mopinion.com https://edge.cookieconsent.io; img-src 'self' mijn.s-bb.nl *.googletagmanager.com px.ads.linkedin.com https://www.facebook.com https://edge.cookieconsent.io https://www.toegankelijkheidsverklaring.nl; form-action 'self'; base-uri 'self'; frame-ancestors 'self'; frame-src 'self' youtube.com www.youtube.com https://*.s-bb.nl; manifest-src 'self'; connect-src 'self' https://*.google-analytics.com https://*.mopinion.com https://*.clarity.ms https://api.cookieconsent.io https://px.ads.linkedin.com https://connect.facebook.net https://api.evolveip.eu https://ukaz-web01f.ccaas.enghouse.cloud/scripts/ChatExtension.dll https://ukaz-web01e.ccaas.enghouse.cloud/scripts/ChatExtension.dll 1
frame-ancestors 'self'; report-uri https://www.delicious.com.au/csp-reports 1
default-src 'self' *.oktacdn.com; connect-src 'self' *.oktacdn.com *.mixpanel.com *.mapbox.com https://oinmanager.trexcloud.com data:; script-src 'unsafe-inline' 'nonce-VzkcumIMcQjVcHxU5FKngg' 'self' 'report-sample' *.oktacdn.com; style-src 'unsafe-inline' 'nonce-VzkcumIMcQjVcHxU5FKngg' 'self' 'report-sample' *.oktacdn.com; frame-src 'self' login.trexcloud.com *.vidyard.com; img-src 'self' *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: blob:; font-src 'self' data: *.oktacdn.com fonts.gstatic.com; object-src 'none'; base-uri 'none'; frame-ancestors 'self'; report-uri https://oktacsp.report-uri.com/r/t/csp/reportOnly; report-to csp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com *.fonts.googleapis.com data: *.cloudflare.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com landofcoder.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com https://www.google.com https://recaptcha.google.com *.weltpixel.com *.addthis.com *.pinterest.com *.googletagmanager.com *.doubleclick.net *.typeform.com *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.certcapture.com magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://redchamps.com *.authorize.net assets.secure.checkout.visa.com sandbox.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.addthis.com *.pinterest.com *.cdninstagram.com *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.certcapture.com landofcoder.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com https://www.google.com https://www.gstatic.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.instagram.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com *.fontawesome.com assets.braintreegateway.com *.googleapis.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com *.yotpo.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com https://www.sandbox.paypal.com https://www.paypal.com landofcoder.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com https://www.google.com *.cloudflare.com *.googleapis.com *.addthis.com *.graph.instagram.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com *.yotpo.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; img-src data: blob: *; script-src-elem 'self' 'strict-dynamic' assets.ubuntu.com www.google-analytics.com www.googletagmanager.com www.youtube.com asciinema.org player.vimeo.com script.crazyegg.com www.googleadservices.com js.zi-scripts.com *.g.doubleclick.net www.google.com www.gstatic.com www.brighttalk.com snap.licdn.com connect.facebook.net maps.googleapis.com www.redditstatic.com munchkin.marketo.net *.googlesyndication.com cdn.jsdelivr.net https://esm.sh https://cdn.jsdelivr.net buttons.github.io cdn.livechatinc.com api.livechatinc.com secure.livechatinc.com www.tfaforms.com 'nonce-rP7exV-EflzO5GGZLov16w'; font-src 'self' assets.ubuntu.com fonts.google.com cdn.livechatinc.com secure.livechatinc.com; script-src 'self' blob: 'wasm-unsafe-eval' 'nonce-rP7exV-EflzO5GGZLov16w'; connect-src 'self' ubuntu.com analytics.google.com www.googletagmanager.com o4510662863749120.ingest.de.sentry.io www.google-analytics.com *.crazyegg.com *.g.doubleclick.net ad.doubleclick.net *.clarity.ms bat.bing.com bat.bing.net www.googleadservices.com js.zi-scripts.com *.google-analytics.com px.ads.linkedin.com ws.zoominfo.com youtube.com google.com www.google.ad www.google.ae www.google.al www.google.am www.google.as www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cat www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.cn www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.com www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.nr www.google.nu www.google.pl www.google.pn www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.st www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu www.google.ws fonts.google.com maps.googleapis.com pixel-config.reddit.com www.redditstatic.com conversions-config.reddit.com https://esm.sh https://lottie.host https://cdn.jsdelivr.net *.analytics.google.com www.facebook.com *.googlesyndication.com *.mktoresp.com assets.ubuntu.com api.github.com raw.githubusercontent.com api.livechatinc.com cdn.livechatinc.com secure.livechatinc.com web.facebook.com www.tfaforms.com unpkg.com; frame-src 'self' assets.ubuntu.com *.doubleclick.net *.crazyegg.com www.youtube.com/ asciinema.org player.vimeo.com www.googletagmanager.com www.google.com www.brighttalk.com cdn.livechatinc.com secure.livechatinc.com cdn.livechat-static.com; style-src 'self' cdn.jsdelivr.net www.tfaforms.com 'unsafe-inline'; media-src 'self' res.cloudinary.com assets.ubuntu.com; child-src 'self' blob: youtube.com google.com fonts.google.com api.livechatinc.com cdn.livechatinc.com secure.livechatinc.com; form-action 'self' https://pages.ubuntu.com https://ubuntu.com https://www.tfaforms.com; object-src 'none'; base-uri 'self'; worker-src 'self' blob:; report-uri /csp-report; 1
report-uri https://events.mercadolibre.com/csp/reports?identifier=jGB5ZO7AjWpGFi4HlBkTfEkCFFP76cbDs3XOZKT8nYhJ6VFD9R4ie2UtNDnzboqZNSA=&policy_id=71&user_id=&request_id=ad9fe205-4ffc-4e77-8217-4aaa16325426; report-to csp-endpoint-jgbzoajwpgfihlbktfekcffpcbdsxozktnyhjvfdrieutndnzboqznsa; frame-ancestors 'none' 1
default-src 'self';base-uri 'self';font-src 'self' https://*.audiencemedia.com https://use.fontawesome.com;form-action 'self';frame-ancestors 'none';img-src 'self' data: blob: https://*.ziniopro.com https://*.audiencemedia.com https://googleads.g.doubleclick.net https://www.google.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://google.com https://*.paypal.com https://*.braintreegateway.com https://discover.zinio.com https://*.google-analytics.com https://*.googletagmanager.com https://www.googletagmanager.com https://*.kaptcha.com;object-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn-web.zinio.com https://js-agent.newrelic.com https://*.nr-data.net https://www.googleadservices.com https://www.google.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://*.paypal.com https://www.paypalobjects.com https://*.braintreegateway.com https://*.cardinalcommerce.com https://www.googletagmanager.com https://www.google-analytics.com https://*.googletagmanager.com https://recaptcha.net https://www.gstatic.com https://apis.google.com https://accounts.google.com/gsi/client https://*.kaptcha.com;script-src-attr 'none';style-src 'self' 'unsafe-inline' https://*.audiencemedia.com https://use.fontawesome.com https://accounts.google.com/gsi/style;media-src 'self';connect-src 'self' webpack: https://*.audiencemedia.com https://*.ziniopro.com https://*.nr-data.net https://googleads.g.doubleclick.net https://adservice.google.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://google.com https://cdn.jsdelivr.net https://*.braintree-api.com https://*.braintreegateway.com https://*.cardinalcommerce.com https://www.paypal.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://www.google.com https://*.googletagmanager.com https://collector.datacloud.zinio.com https://sdk.iad-07.braze.com https://use.fontawesome.com https://accounts.google.com/gsi/ https://*.kaptcha.com collector.datacloud.zinio.com;frame-src 'self' https://td.doubleclick.net https://www.googletagmanager.com https://*.paypal.com https://*.braintreegateway.com https://recaptcha.net https://accounts.google.com/gsi/;child-src 'self' https://*.kaptcha.com 1
script-src 'nonce-vyJYPQ79mM0CDa8BuesDjg==' 'strict-dynamic' 'unsafe-eval' 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; report-uri /_/csp-report 1
default-src 'self'; font-src data: https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud; script-src 'self' https://*.bazaarvoice.com https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://exc.mm.dm.cz https://mpsnare.iesnare.com https://omt.dm.cz https://tags.tiqcdn.com https://web.cmp.usercentrics.eu https://www.dm.cz https://www.google.com https://www.google.com/recaptcha/ https://www.gstatic.com https://www.gstatic.com/recaptcha/; worker-src 'self' blob:; connect-src 'self' https://*.bazaarvoice.com https://aggregator.service.usercentrics.eu https://api.mapbox.com https://api.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://browser-intake-datadoghq.eu https://cart-recos.services.dmtech.com https://cdcs.usercentrics.eu https://collect.tealiumiq.com https://consent-api.service.consent.usercentrics.eu https://consent-rt-ret.service.consent.usercentrics.eu https://consents.usercentrics.eu https://content-preview.apps.prod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://direct-collect.dy-api.eu https://direct.dy-api.eu https://dmpay-gateway.services.dmtech.com https://dy-api.eu https://editorial-content.dm-static.com https://events.mapbox.com https://exc.mm.dm.cz https://frontend-tracking-infra-service.services.dmtech.com https://graphql.usercentrics.eu https://insights.algolia.io https://logs.browser-intake-datadoghq.eu https://maut-prod.services.dmtech.com https://maut-rls.nonprod.services.dmtech.com https://mpsnare.iesnare.com https://my-products-api.services.dmtech.com https://omacs.services.dmtech.com https://omc.dm.cz https://predictive-shopping-service.services.dmtech.com https://product-based-recos.services.dmtech.com https://product-search.services.dmtech.com https://product-semantic-search.services.dmtech.com https://rcom-eu.dynamicyield.com https://recos-as-a-service.services.dmtech.com https://region1.google-analytics.com https://retail-media.services.dmtech.com https://rum.browser-intake-datadoghq.eu https://s2s.adjust.com https://signin.dm.cz https://sos-prod.availability.services.dmtech.com https://staedtetour.dm-fb2.de https://stars.services.dmtech.com https://storage.googleapis.com/gift-card-builder-emergency-disabled-bucket/ https://store-data-service.services.dmtech.com https://store-order-service.services.dmtech.com https://v1.api.service.cmp.usercentrics.eu https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://zoe-shop-proxy-prod.services.dmtech.com https://kuba-prod.services.dmtech.com https://zoe-shop-proxy-prod.services.dmtech.com https://cartnext.services.dmtech.com https://dmcsm-proxy.prod.services.dmtech.com https://zoe-shop-proxy-prod.services.dmtech.com https://customer-helpcenter-prod.services.dmtech.com https://paint-prod.services.dmtech.com https://content.services.dmtech.com https://content-search-service-preview.apps.prod.gcp.dmtech.cloud https://content-search-service.services.dmtech.com https://products.dm.de https://pds-import-prod.apps.prod.gcp.dmtech.cloud https://shopping-list-prod.services.dmtech.com; media-src 'self'; style-src 'self' 'unsafe-inline' https://*.bazaarvoice.com https://api.tiles.mapbox.com https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud; form-action 'self' https://*.bazaarvoice.com https://apps.bazaarvoice.com https://checkout.dm.cz https://giftcard-checkout.dm.de/api/checkout https://signin.dm.cz; img-src 'self' blob: data: https://*.bazaarvoice.com https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://cdn-eu.dynamicyield.com https://composer.apps.nonprod.cf.dmtech.cloud https://content-preview.apps.prod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://editorial-content.dm-static.com https://exc.mm.dm.cz https://i.ytimg.com https://images.podigee-cdn.net https://img.usercentrics.eu https://img.youtube.com/ https://media.dm-static.com https://photos-eu.bazaarvoice.com https://products.dm-static.com https://uct.service.usercentrics.eu https://content.services.dmtech.com; frame-ancestors 'self' https://account.dm.cz https://app.datadoghq.eu https://checkout.dm.cz https://content-preview.apps.prod.gcp.dmtech.cloud https://mobileapp.dm.cz https://studio.dm-drogeriemarkt.com; frame-src 'self' https://*.bazaarvoice.com https://account.dm.cz https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://cdn.podigee.com https://checkout.dm.cz https://configurator.nuk.de https://gastfamilie.podigee.io https://geburtskanal-dm.podigee.io https://hey-familie.podigee.io https://kinderwunschsprechstunde.podigee.io https://mobileapp.dm.cz https://player.podigee-cdn.net https://recaptcha.google.com/recaptcha/ https://sandbox.om.dm.cz https://signin.dm.cz https://web.cmp.usercentrics.eu https://www.google.com https://www.google.com/recaptcha/ https://www.youtube-nocookie.com; base-uri 'self' https://exc.mm.dm.cz; child-src 'self' blob:; manifest-src 'self'; report-to csp-endpoint; report-uri /__csp-reports__ 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com www.xtento.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.googleapis.com *.trustpilot.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com www.xtento.com cdn.xtento.com *.trackedlink.net *.ddlnk.net *.stripe.com *.stripe.network ebizmarts-website.s3.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com *.feefo.com flagpedia.net maps.googleapis.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com *.gstatic.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com www.xtento.com cdn.xtento.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.sagepay.com *.opayo.eu.elavon.com *.feefo.com maps.googleapis.com assets.shipperhq.com *.trustpilot.com https://www.builderdepot.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.feefo.com maxcdn.bootstrapcdn.com assets.shipperhq.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.googleapis.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.feefo.com www.gstatic.com maps.googleapis.com rms.shipperhq.com https://rms.shipperhq.com wss://rms.shipperhq.com ovs.shipperhq.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; child-src 'self' blob:; connect-src 'self' https://*.algolia.net https://*.litix.io https://*.wistia.com https://*.wistia.net https://a.clarity.ms https://accesswidget-log-receiver.acsbapp.com https://ad.doubleclick.net https://analytics.google.com https://analytics.twitter.com https://aorta.clickagy.com https://b.clarity.ms https://bat.bing.com https://bat.bing.net https://cdn.acsbapp.com https://cdn.cookielaw.org https://content.hotjar.io https://d.clarity.ms https://dc.services.visualstudio.com https://e.clarity.ms https://esp-eu.aptrinsic.com https://eu-cdn.acsbapp.com https://eu.acsbapp.com https://f.clarity.ms https://geolocation.onetrust.com https://googleads.g.doubleclick.net https://h.clarity.ms https://i.clarity.ms https://insight.adsrvr.org https://j.clarity.ms https://js.zi-scripts.com https://k.clarity.ms https://l.clarity.ms https://m.clarity.ms https://metrics.hotjar.io https://n.clarity.ms https://o.clarity.ms https://p.clarity.ms https://pagead2.googlesyndication.com https://pipedream.wistia.com https://plausible.io https://privacyportal.onetrust.com https://px.ads.linkedin.com https://q.clarity.ms https://r.clarity.ms https://region1.analytics.google.com https://s.clarity.ms https://sockjs.pusher.com https://stats.g.doubleclick.net https://t.clarity.ms https://t.co https://v.clarity.ms https://vc.hotjar.io https://ws-assets.zoominfo.com https://ws.hotjar.com https://ws.zoominfo.com https://www.google-analytics.com https://www.google.ae https://www.google.ca https://www.google.co.il https://www.google.co.in https://www.google.co.jp https://www.google.co.uk https://www.google.com https://www.google.com.bd https://www.google.com.hk https://www.google.com.ng https://www.google.com.sg https://www.google.com.tw https://www.google.com.vn https://www.google.es https://www.googleadservices.com https://www.googletagmanager.com https://www.idcomet.com https://x.clarity.ms https://y.clarity.ms https://z.clarity.ms wss://ws.hotjar.com wss://www.idcomet.com; default-src 'self'; font-src 'self' data: https://*.wistia.com https://fonts.gstatic.com; form-action 'self'; frame-ancestors 'self'; frame-src 'self' https://fast.wistia.com https://fast.wistia.net https://insight.adsrvr.org https://match.adsrvr.org https://player.flipsnack.com https://www.google.com https://www.googletagmanager.com; img-src 'self' data: https://*.wistia.com https://*.wistia.net https://a.usea01.idio.episerver.net https://analytics.twitter.com https://aorta.clickagy.com https://api.zaius.com https://bat.bing.com https://bat.bing.net https://c.clarity.ms https://cdn.cookielaw.org https://googleads.g.doubleclick.net https://oktp.omnicell.com https://omnicell.me https://pagead2.googlesyndication.com https://px.ads.linkedin.com https://t.co https://www.google.ae https://www.google.ca https://www.google.cl https://www.google.co.id https://www.google.co.il https://www.google.co.in https://www.google.co.jp https://www.google.co.ke https://www.google.co.kr https://www.google.co.uk https://www.google.co.uz https://www.google.co.za https://www.google.com https://www.google.com.ar https://www.google.com.au https://www.google.com.bd https://www.google.com.bo https://www.google.com.br https://www.google.com.eg https://www.google.com.hk https://www.google.com.jm https://www.google.com.my https://www.google.com.ng https://www.google.com.ph https://www.google.com.pk https://www.google.com.qa https://www.google.com.sa https://www.google.com.sg https://www.google.com.tr https://www.google.com.tw https://www.google.com.ua https://www.google.com.uy https://www.google.com.vn https://www.google.de https://www.google.es https://www.google.fr https://www.google.ge https://www.google.it https://www.google.jo https://www.google.kg https://www.google.mn https://www.google.pt https://www.google.ru https://www.googleadservices.com https://www.googletagmanager.com https://www.omnicell.co.uk https://www.omnicell.com https://www.omnicell.de; script-src-elem 'self' 'unsafe-inline' blob: https://bat.bing.com https://browser.sentry-cdn.com https://cdn.cookielaw.org https://cdn.digitalreachagency.com https://connect.facebook.net https://d1igp3oop3iho5.cloudfront.net https://eu.acsbapp.com https://fast.wistia.com https://fast.wistia.net https://go.omnicell.com https://googleads.g.doubleclick.net https://js.adsrvr.org https://js.monitor.azure.com https://js.zi-scripts.com https://oktp.omnicell.com https://pi.pardot.com https://plausible.io https://s.usea01.idio.episerver.net https://schedule.zoominfo.com https://script.hotjar.com https://scripts.clarity.ms https://snap.licdn.com https://static.ads-twitter.com https://static.hotjar.com https://static.oktopost.com https://tag.simpli.fi https://tags.clickagy.com https://web-sdk-eu.aptrinsic.com https://ws-assets.zoominfo.com https://www.clarity.ms https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.idcomet.com; script-src 'self' 'unsafe-inline' https://*.sentry-cdn.com https://*.wistia.com https://*.wistia.net https://cdn.cookielaw.org https://src.litix.io; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://web-sdk-eu.aptrinsic.com; style-src 'self' 'unsafe-inline' blob: https://fast.wistia.com; object-src 'none'; script-src-attr 'none'; media-src blob: data: https://*.wistia.com https://*.wistia.net; style-src-attr 'unsafe-inline'; worker-src blob:; report-to stott-security-external-endpoint; 1
font-src *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.fontawesome.com maxcdn.bootstrapcdn.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.reviews.io *.reviews.co.uk *.paymentexpress.com *.windcave.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app https://static.addtoany.com/ *.instagram.com www.google.com *.reviews.io *.reviews.co.uk *.weltpixel.com *.paymentexpress.com *.windcave.com https://www.googleadservices.com https://www.gstatic.com https://www.google.com https://popup.laybuy.com https://td.doubleclick.net https://placement-api.sandbox.afterpay.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.cdninstagram.com *.fbcdn.net/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://maps.gstatic.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.paymentexpress.com *.windcave.com https://stats.g.doubleclick.net https://www.facebook.com https://www.google.co.nz https://www.google.com https://integration-assets.laybuy.com 'self' data: t.zip.co static.zipmoney.com.au static.zip.co *.facebook.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app https://static.addtoany.com/ *.instagram.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://maps.googleapis.com cdn.jsdelivr.net *.reviews.io *.reviews.co.uk *.paymentexpress.com *.windcave.com https://chimpstatic.com https://connect.facebook.net https://googleads.g.doubleclick.net https://www.google.com https://www.gstatic.com https://bpi.zip.co static.zipmoney.com.au static.zip.co zip.co *.facebook.net *.googletagmanager.com *.googleadservices.com *.google.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app https://static.klaviyo.com *.fontawesome.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app cdn.jsdelivr.net api.lab.amplitude.com https://stats.addtoany.com/menu https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://maps.googleapis.com *.cloudfront.net *.reviews.io *.reviews.co.uk https://www.google-analytics.com https://stats.g.doubleclick.net https://google.com https://www.googletagmanager.com https://bpi.zip.co *.facebook.net *.google-analytics.com *.analytics.google.com *.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' wss:; script-src 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline' *.%2A.civiccomputing.com *.civiccomputing.com *.clarity.ms *.cloudflare.com *.googletagmanager.com *.jsdelivr.net *.library.wales; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://*.youtube.com https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.googleusercontent.com https://*.ggpht.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net *.googletagmanager.com *.library.wales *.llgc.org.uk *.staticflickr.com *.ticketsource.co.uk fonts.gstatic.com play.google.com syndication.twitter.com translate.google.com; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com *.google.com *.libanswers.com *.library.wales *.llyfrgell.cymru *.lyfrgell.cymru *.twitter.com div.show hwb.gov.wales sketchfab.com www.canva.com; style-src-elem 'report-sample' 'self' 'unsafe-inline' *.clarity.ms *.fontawesome.com *.libanswers.com *.library.wales connect.facebook.net fonts.googleapis.com; connect-src 'self' https://*.googleapis.com https://*.google.com https://*.gstatic.com data: blob: https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net; font-src 'self' https://fonts.gstatic.com; worker-src 'self' 'nonce-6bAGPvt4KpQoAPx6pH7HiH40E6gaI0LQYI9fLFUXTMh3issh0lJ27g' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.ggpht.com https://*.googleusercontent.com blob:; style-src 'self' 'unsafe-eval' 'unsafe-inline' wss: 'inline' 'report-sample'; script-src-elem 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline' *.%2A.civiccomputing.com *.civiccomputing.com *.clarity.ms *.cloudflare.com *.googletagmanager.com *.jsdelivr.net *.library.wales *.%2A.v2.scr.kaspersky-labs.com *.flickr.com *.libanswers.com adblockers.opera-mini.net connect.facebook.net s3.amazonaws.com wusote.hirizasune.com; report-uri https://www.library.wales/@http-reporting?csp=report&requestTime=1789276542739451&requestHash=5048ce4f0380d38f938f3094981e4b020774e2f1 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com fonts.googleapis.com *.slant.co *.userway.org eadn-wc05-14712294.nxedge.io *.fontawesome.com *.klevu.com *.ksearchnet.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com https://plumrocket.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://static.addtoany.com/ *.instagram.com *.weltpixel.com https://td.doubleclick.net widget.usersnap.com *.googletagmanager.com *.doubleclick.net https://plumrocket.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * landofcoder.com *.google.com/ *.wesupply.xyz https://wesupplylabs.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cdninstagram.com maps.googleapis.com maps.gstatic.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.agkn.com *.doubleclick.net *.facebook.com *.google.com *.nexcesscdn.net *.pricespider.com *.sitescout.com *.userway.org *.pixel.ad eadn-wc05-14712294.nxedge.io *.reddit.com *.google-analytics.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.klevu.com *.ksearchnet.com https://firebasestorage.googleapis.com https://www.magezon.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://static.addtoany.com/ *.instagram.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.nakanohito.jp/b3/bi.js *.addthis.com *.crazyegg.com *.doubleclick.net *.elfsight.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.klevu.com *.mapbox.com *.noibu.com *.pricespider.com *.userway.org d31qbv1cthcecs.cloudfront.net *.krxd.net *.pixel.ad *.sitescout.com *.owneriq.net eadn-wc05-14712294.nxedge.io widget.usersnap.com resources.usersnap.com *.googleadservices.com *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://browser.sentry-cdn.com js.klevu.com *.ksearchnet.com https://ajax.cloudflare.com *.kaptcha.com landofcoder.com *.avada.io *.google.com/ *.cloudflare.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.mapbox.com *.pricespider.com *.userway.org eadn-wc05-14712294.nxedge.io *.tagmanager.google.com *.googletagmanager.com *.fontawesome.com assets.braintreegateway.com *.klevu.com *.ksearchnet.com https://fonts.bunny.net https://js.klevu.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://stats.addtoany.com/menu *.addthis.com *.crazyegg.com *.doubleclick.net *.facebook.com *.google-analytics.com *.googleapis.com *.mapbox.com *.noibu.com wss://input.noibu.com *.pricespider.com *.userway.org *.pixel.ad *.agkn.com *.sitescout.com *.owneriq.net *.elfsight.com eadn-wc05-14712294.nxedge.io widget.usersnap.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://*.ingest.sentry.io *.klevu.com *.ksearchnet.com *.kaptcha.com landofcoder.com https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://86c8b4f9-cefc-4184-9926-360586b833fe.sansec.watch/; report-to report-endpoint; 1
default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-ev$ 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.sitecorecloud.io https://*.vercel.app https://*.vercel-insights.com https://www.googletagmanager.com https://*.google-analytics.com https://googleads.g.doubleclick.net https://cdn.cookielaw.org https://bat.bing.com https://snap.licdn.com https://rum.hlx.page https://tags.tiqcdn.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.cookielaw.org; img-src 'self' data: blob: https: https://*.sitecorecloud.io https://www.interwellhealth.com https://www.google-analytics.com https://*.googletagmanager.com https://bat.bing.com https://px.ads.linkedin.com https://cdn.cookielaw.org https://maps.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://edge.sitecorecloud.io https://*.sitecorecloud.io https://*.vercel.app https://*.vercel-insights.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://cdn.cookielaw.org https://geolocation.onetrust.com https://bat.bing.com https://snap.licdn.com https://*.linkedin.com https://rum.hlx.page https://tags.tiqcdn.com https://maps.googleapis.com; frame-src 'self' https://www.googletagmanager.com https://td.doubleclick.net; frame-ancestors 'self' https://*.sitecorecloud.io; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests; report-uri /api/csp-report; 1
report-uri /api/csp 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://api.klipy.com; frame-src 'self' https://challenges.cloudflare.com https://www.youtube.com https://player.vimeo.com https://codepen.io; media-src 'self' https:; worker-src 'self' blob: 1
frame-src 'none' 1
default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval' data: blob:; style-src * 'unsafe-inline' data:; connect-src * data: blob:; img-src * data: blob:; font-src * data:; frame-src *; object-src 'none'; base-uri 'self'; form-action *; report-uri /csp-report 1
default-src 'self'; script-src 'self' https://agrilife.org; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://agrilife.org; 1
object-src 'none'; script-src 'self' cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.google.com maps.googleapis.com mdbootstrap.com 'sha256-e3OsTH0KIUdK3veWO2CJ9QDxFNgZ4fTPuRsN5mkj7yU=' 'sha256-Le91+7OYQB8mDGwT8a7ohhgxLnj7pEbIyIsCqy2AycY=' 'sha256-Mk1VPQtxz8qtUlboAEAEF57/5KA2HyZKTQo2BfVSEf4=' 'sha256-Rpvi6xMF257AsTk05m1mKcwS/+Chfi6ud9QyVvVPUsw=' 'sha256-J2BlRZ5cxigjmZyEY7otnpWUvdOdedhBg4muz0XoGaQ=' 'sha256-Q6HvhRBY4wBN2UirYxuCQzLDL0d2cDvrdfiuD6hJV0Q='; script-src-attr 'self'; script-src-elem 'self' cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.google.com maps.googleapis.com mdbootstrap.com 'sha256-e3OsTH0KIUdK3veWO2CJ9QDxFNgZ4fTPuRsN5mkj7yU=' 'sha256-Le91+7OYQB8mDGwT8a7ohhgxLnj7pEbIyIsCqy2AycY=' 'sha256-Mk1VPQtxz8qtUlboAEAEF57/5KA2HyZKTQo2BfVSEf4=' 'sha256-Rpvi6xMF257AsTk05m1mKcwS/+Chfi6ud9QyVvVPUsw=' 'sha256-J2BlRZ5cxigjmZyEY7otnpWUvdOdedhBg4muz0XoGaQ=' 'sha256-Q6HvhRBY4wBN2UirYxuCQzLDL0d2cDvrdfiuD6hJV0Q='; style-src 'self' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com mdbootstrap.com use.fontawesome.com 'sha256-1VTAHS0X+0lgrfu7iW/2ikIZ/VIANi00phY6Pqavxdg=' 'sha256-gol7YIWSDJAuuPVuy7CDfvODTfZpdnZDAjxzHF8Q3RQ=' 'sha256-TqQplrOl6sBGQcWy3yrIBeYVuzKxfK8tblQ1bfbwzhI=' 'sha256-0EZqoz+oBhx7gF4nvY2bSqoGyy4zLjNF+SDQXGp/ZrY=' 'sha256-pEflAPLL74jE+1CxyCx7uJ/qaKMSgeaGKurIvYB9tOc=' 'sha256-ixVUGs3ai0rMA0pgIVBN0KVlYbQip7/5SGmnUwJPNqE=' 'sha256-faU7yAF8NxuMTNEwVmBz+VcYeIoBQ2EMHW3WaVxCvnk=' 'sha256-FxaRpFb/qsrMe0VdEKIdvoXDJdGhfpMk/vOvkJPTyqw=' 'sha256-wornWxYFbAwLXubOXT3N+rjYVG8hZCO/ImKrTbdki90=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-9rWG6k1Tr8Xi8liYIjfOLVdgfnWvGD4XMRij1dPZKpw=' 'sha256-8QgCOUffSB4K7v7WmNd1vG695sw8Z0ed68ZgyqpQrII=' 'sha256-RoUQFkGVw7irhiviq8rOxjfuePbTcjBKSFfea361ip4=' 'sha256-gZ6LuPVnY26zpymRfjUnHy6K1lFesemD+Lueifelj48=' 'sha256-FDQXmMn1d8h0bBo5sy1B2jS5nCITOkVm2N+5P+qey9g=' 'sha256-h9xGdwT9aDVMCtTp2tdUKKWQAi3+snoFwKcYcQBerds=' 'sha256-biLFinpqYMtWHmXfkA1BPeCY0/fNt46SAZ+BBk5YUog=' 'unsafe-hashes' 'sha256-aqNNdDLnnrDOnTNdkJpYlAxKVJtLt9CtFLklmInuUAE=' 'sha256-KHhg+VKos8dDWtW4w5KXBSbUOuM6ejBjyy40oZ/gNpw=' 'sha256-i7lTJWwQJj4pveauPVpuAh1OBOpNjk872Oyt7fwQ2A4=' 'sha256-QgOcf0A96mLOsYqx1UWukP4se1gxUTXu9j7jXxId1/A=' 'sha256-a+H1SVa2oQZImOdFYPsJ9ER+rbyms3skVy8l+wZasJM=' 'sha256-BOQuU3IXroqPYrAWR5h4ImeCEjO3hJeRIwp6A9zYvoU=' 'sha256-hKDoxLDb3OpE3Af4HZ+uqErJUCA/tlXaF4zFm9txGb8=' 'sha256-KWR0UfBVwUihRKDnFDZLXVjkiaAlrgyev/6WvEY7yYc=' 'sha256-bGUlTsVqSKMBpQsmfoP++Mfq/Q0pJFwyMl+c4ov5paI=' 'sha256-VLB55+tQRwSWla0o2bi/RYTp6RhoQlUJLU8CTFedJ/g='; style-src-attr 'self' 'sha256-biLFinpqYMtWHmXfkA1BPeCY0/fNt46SAZ+BBk5YUog=' 'unsafe-hashes' 'sha256-aqNNdDLnnrDOnTNdkJpYlAxKVJtLt9CtFLklmInuUAE=' 'sha256-KHhg+VKos8dDWtW4w5KXBSbUOuM6ejBjyy40oZ/gNpw=' 'sha256-i7lTJWwQJj4pveauPVpuAh1OBOpNjk872Oyt7fwQ2A4=' 'sha256-QgOcf0A96mLOsYqx1UWukP4se1gxUTXu9j7jXxId1/A=' 'sha256-a+H1SVa2oQZImOdFYPsJ9ER+rbyms3skVy8l+wZasJM=' 'sha256-BOQuU3IXroqPYrAWR5h4ImeCEjO3hJeRIwp6A9zYvoU=' 'sha256-hKDoxLDb3OpE3Af4HZ+uqErJUCA/tlXaF4zFm9txGb8=' 'sha256-KWR0UfBVwUihRKDnFDZLXVjkiaAlrgyev/6WvEY7yYc=' 'sha256-bGUlTsVqSKMBpQsmfoP++Mfq/Q0pJFwyMl+c4ov5paI=' 'sha256-VLB55+tQRwSWla0o2bi/RYTp6RhoQlUJLU8CTFedJ/g='; style-src-elem 'self' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com mdbootstrap.com use.fontawesome.com 'sha256-1VTAHS0X+0lgrfu7iW/2ikIZ/VIANi00phY6Pqavxdg=' 'sha256-gol7YIWSDJAuuPVuy7CDfvODTfZpdnZDAjxzHF8Q3RQ=' 'sha256-TqQplrOl6sBGQcWy3yrIBeYVuzKxfK8tblQ1bfbwzhI=' 'sha256-0EZqoz+oBhx7gF4nvY2bSqoGyy4zLjNF+SDQXGp/ZrY=' 'sha256-pEflAPLL74jE+1CxyCx7uJ/qaKMSgeaGKurIvYB9tOc=' 'sha256-ixVUGs3ai0rMA0pgIVBN0KVlYbQip7/5SGmnUwJPNqE=' 'sha256-faU7yAF8NxuMTNEwVmBz+VcYeIoBQ2EMHW3WaVxCvnk=' 'sha256-FxaRpFb/qsrMe0VdEKIdvoXDJdGhfpMk/vOvkJPTyqw=' 'sha256-wornWxYFbAwLXubOXT3N+rjYVG8hZCO/ImKrTbdki90=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-9rWG6k1Tr8Xi8liYIjfOLVdgfnWvGD4XMRij1dPZKpw=' 'sha256-8QgCOUffSB4K7v7WmNd1vG695sw8Z0ed68ZgyqpQrII=' 'sha256-RoUQFkGVw7irhiviq8rOxjfuePbTcjBKSFfea361ip4=' 'sha256-gZ6LuPVnY26zpymRfjUnHy6K1lFesemD+Lueifelj48=' 'sha256-FDQXmMn1d8h0bBo5sy1B2jS5nCITOkVm2N+5P+qey9g=' 'sha256-h9xGdwT9aDVMCtTp2tdUKKWQAi3+snoFwKcYcQBerds='; worker-src 'self'; base-uri 'self'; frame-ancestors 'self' 1
default-src 'self'; font-src 'self' *.gstatic.com *.googleapis.com *.googletagmanager.com *.fontawesome.com data:; img-src 'self' *.ch-aviation.com *.servedbyadbutler.com servedbyadbutler.com *.secureprivacy.ai images.prismic.io *.googletagmanager.com googletagmanager.com *.googleapis.com *.google.com *.gstatic.com data:; script-src 'self' *.servedbyadbutler.com servedbyadbutler.com *.googleapis.com *.googletagmanager.com *.google.com *.highcharts.com *.secureprivacy.ai wasm-unsafe-eval data: rum.haystack.es; script-src-elem 'self' *.secureprivacy.ai *.servedbyadbutler.com servedbyadbutler.com *.gstatic.com *.googleapis.com *.googletagmanager.com *.googletagservices.com *.google.com *.doubleclick.net *.highcharts.com *.secureprivacy.ai *.freshdesk.com data: 'unsafe-inline'; script-src-attr 'self' 'unsafe-inline'; connect-src 'self' *.google.com *.gstatic.com *.servedbyadbutler.com servedbyadbutler.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.googlesyndication.com *.doubleclick.net *.secureprivacy.ai *.sentry.io *.talentlyft.com data: 'unsafe-inline'; frame-src 'self' *.doubleclick.net *.google.com *.freshdesk.com *.ch-aviation.com; style-src 'self' *.fontawesome.com *.secureprivacy.ai *.googleapis.com *.freshdesk.com 'unsafe-inline'; media-src 'self' data:; report-uri https://www.ch-aviation.com/csp-report-to 1
default-src 'self' ; base-uri 'self' ; object-src 'none' ; style-src 'self' 'unsafe-inline' cdn.plyr.io https://fonts.googleapis.com https://devcomapbotpilot-test.azurewebsites.net/ https://chatbotapp-stage.azurewebsites.net/ https://intelibot-prod.azurewebsites.net/ ; script-src 'strict-dynamic' 'nonce-xB55CAbNqrq76TBX5PBqtiaEPrDhUkkr' 'self' 'unsafe-inline' 'unsafe-eval' https://js.monitor.azure.com https://admin.dev.comap-control.bluehosting.cz https://chatbotapp-stage.azurewebsites.net/ https://devcomapbotpilot-test.azurewebsites.net/ https://intelibot-prod.azurewebsites.net/ ; font-src 'self' https://fonts.gstatic.com/ ; connect-src 'self' https://*.google.com https://*.logic.azure.com/ https://chatbotapp-stage.azurewebsites.net/ https://intelibot-prod.azurewebsites.net/   https://intelisearch.azurewebsites.net https://directline.botframework.com https://websearchproxy.azure-api.net wss://directline.botframework.com https://*.in.applicationinsights.azure.com/ wss://localhost:44377 ws://localhost:50602 noembed.com cdn.plyr.io ; img-src * 'self' data: ; media-src 'self' *.comap-control.com/ https://comapkenticouat6527.blob.core.windows.net ; frame-src https://www.thinglink.com youtube-nocookie.com www.youtube-nocookie.com youtube.com www.youtube.com vimeo.com www.vimeo.com https://www.google.com/ ; frame-ancestors https://admin.dev.comap-control.bluehosting.cz/ 1
style-src-elem https://webcache.datareporter.eu https://webcache-eu.datareporter.eu 'self' 'unsafe-inline' 'strict-dynamic'; script-src-elem webcache.datareporter.eu webcache-eu.datareporter.eu 'self' 'unsafe-inline' 'strict-dynamic'; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cash-f.squarecdn.com https://www.googletagmanager.com *.googleapis.com webcachex-eu.datareporter.eu *.fontawesome.com *.yotpo.com 'self' data: dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.yotpo.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * https://images.unsplash.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com *.yotpo.com 'self' data: www.xtento.com cdn.xtento.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://maps.googleapis.com https://player.vimeo.com tagmanager.google.com https://www.googletagmanager.com *.datareporter.eu js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.yotpo.com *.gstatic.com www.xtento.com cdn.xtento.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; style-src *.adobe.com fonts.googleapis.com *.cash.app https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.datareporter.eu *.fontawesome.com assets.braintreegateway.com *.yotpo.com *.gstatic.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; object-src ; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * https://maps.googleapis.com https://player.vimeo.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.datareporter.eu api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.yotpo.com *.google-analytics.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; base-uri 'self' 'unsafe-inline'; report-uri https://www.regalraum.com/rest/V1/configurable-csp/request ; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com data: fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' data: https://www.surviocdn.com/ *.survicate.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.googletagmanager.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.magerocket.com *.despegar.com *.koinlatam.com *.koin.com.br *.googletagmanager.com *.gocuotas.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com cdn.dnky.co amc.demdex.net www.google.com www.facebook.com youtube.com *.globalgetnet.com *.magerocket.com https://accounts.google.com *.despegar.com *.koinlatam.com *.koin.com.br *.googletagmanager.com *.gocuotas.com *.mercadolibre.com mldp.mercadopago.com www.mercadolibre.com https://www.survio.com/ *.doubleclick.net *.pinterest.com *.getblue.io *.groovinads.com *.online-metrix.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net maps.gstatic.com maps.googleapis.com accounts.google.com www.facebook.com *.globalgetnet.com *.magerocket.com *.despegar.com *.koinlatam.com *.koin.com.br *.googletagmanager.com fonts.googleapis.com *.gocuotas.com imgmp.mlstatic.com *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar 'self' data: www.mercadolibre.com www.mercadolibre.com.mx www.mercadolibre.com.ar www.mercadolibre.com.br a248.e.akamai.net mercadolivre.com.br www.mercadolivre.com.br www.mercadolivre.com.mx www.mercadolivre.com.ar www.mercadopago.com secure.mlstatic.com *.google.com.ar *.doubleclick.net *.mercadolivre.com www.mailing.somosrex.com *.clarity.ms *.groovinads.com *.bing.com *.online-metrix.net img.survicate.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page cdn.dnky.co r1-t.trackedlink.net www.gstatic.com js-agent.newrelic.com bam.nr-data.net maps.googleapis.com connect.facebook.net player.vimeo.com https://live.decidir.com *.globalgetnet.com *.magerocket.com *.despegar.com *.koinlatam.com *.koin.com.br *.googletagmanager.com *.gocuotas.com *.mlstatic.com https://www.google.com *.gstatic.com http2.mlstatic.com secure.mlstatic.com https://maps.googleapis.com https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ *.convertexperiments.com *.wcx.cloud *.pinimg.com *.survicate.com *.clarity.ms *.mathtag.com *.tiktok.com *.getblue.io *.groovinads.com *.wcentrix.com *.cloudfront.net *.pinterest.com *.icommarketing.com *.decidir.com *.mercadopago.com *.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com cdn.dnky.co https://accounts.google.com *.fontawesome.com maxcdn.bootstrapcdn.com *.googleapis.com *.gstatic.com https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ *.survicate.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com maps.googleapis.com api.comapi.com bam.nr-data.net https://developers.decidir.com/ *.globalgetnet.com *.iesnare.com wss://mpsnare.iesnare.com *.magerocket.com https://accounts.google.com *.despegar.com *.koinlatam.com *.googletagmanager.com *.gocuotas.com *.mercadopago.com *.google-analytics.com api.mercadopago.com events.mercadopago.com www.mercadolibre.com https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ *.doubleclick.net notifications-icommkt.com track-icommkt.com *.clarity.ms *.pinterest.com *.tiktok.com *.convertexperiments.com *.decidir.com *.online-metrix.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.globalgetnet.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src *; script-src *; object-src *; style-src *; img-src *; media-src *; frame-src *; font-src *; connect-src * 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://www.facebook.com https://js.hs-scripts.com https://cdn.eu.amplitude.com https://cdnjs.cloudflare.com https://js.authorize.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https:; frame-src 'self' https://www.facebook.com https://js.authorize.net https://*.paypal.com https://*.chargebee.com; object-src 'none'; base-uri 'self' 1
default-src 'none'; report-uri /next-external/log/csp/violations; report-to csp-violations; connect-src 'self' wss://www.nordnet.dk https://www.googletagmanager.com https://analytics.nordnet.dk https://cdn.prod.nntech.io https://files.nordnet.dk https://api.prod.nntech.io https://experimentation.public.prod.nntech.io https://www.google.com https://storage.googleapis.com https://www.recaptcha.net https://relay.prod.nntech.io; font-src 'self' https://cdn.prod.nntech.io https://files.nordnet.dk; frame-src 'self' https://analytics.nordnet.dk https://10961666.fls.doubleclick.net https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://w.soundcloud.com https://embed.acast.com https://link.tink.com https://www.tv2.no https://checkout.trustly.com https://www.recaptcha.net https://www.google.com https://t.email.nordnet.dk https://dashboard.fundrella.com; img-src 'self' https://www.googletagmanager.com https://analytics.nordnet.dk https://cdn.prod.nntech.io https://files.nordnet.dk https://api.prod.nntech.io data: blob: https://cdn.tink.se https://images.ctfassets.net https://i.vimeocdn.com https://img.youtube.com https://i.scdn.co https://www.recaptcha.net; manifest-src 'self'; media-src https://cdn.prod.nntech.io https://files.nordnet.dk https://videos.ctfassets.net; object-src 'self'; script-src 'self' 'nonce-d7ee84be-c905-4a32-a2ca-cadec5f1ec75' https://analytics.nordnet.dk https://cdn.prod.nntech.io https://files.nordnet.dk https://www.recaptcha.net https://www.google.com; script-src-attr 'none'; style-src 'unsafe-inline' 'self' https://cdn.prod.nntech.io https://files.nordnet.dk; worker-src 'none'; base-uri 'none'; form-action 'self' https://pvu.nets.no https://pvu.avtalegiro.no https://online.alandsbanken.fi https://verkkopankki.danskebank.fi https://verkkomaksu.handelsbanken.fi https://epmt.nordea.fi https://identify.nordea.com https://verkkomaksu.poppankki.fi https://verkkomaksu.saastopankki.fi https://online.s-pankki.fi https://auth.aktia.fi https://kirjaudu.aktia.fi https://ebank.aktia.fi; frame-ancestors 'self' https://app.contentful.com; 1
worker-src blob:; font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br *.fontawesome.com *.yotpo.com *.googleapis.com https://fonts.bunny.net https: data: blob: https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.maskfitar.com https://plumrocket.com *.yotpo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.facebook.com medchatapp.com tr.snapchat.com/cm/i *.aeroflowdirect.com *.aeroflowbreastpumps.com *.aeroflowurology.com *.aeroflowsleep.com *.cpapsupplies.com *.cheapcpapsupplies.com *.motifmedical.com *.pumpingessentials.com *.lactationlink.com *.aeroflowdiabetes.com *.authorize.net 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com lootly.io *.aeroflowdirect.com *.aeroflowbreastpumps.com *.aeroflowurology.com *.aeroflowsleep.com *.cpapsupplies.com *.cheapcpapsupplies.com *.motifmedical.com *.pumpingessentials.com *.lactationlink.com *.aeroflowdiabetes.com shop.aeroflowinc.com *.aeroflow.dev *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.affirm.com *.affirm.ca t.sharethis.com *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com *.meetanshi.com https://plumrocket.com *.yotpo.com urology.nxfe2.aeroflow.ninja *.nxfe.aeroflow.ninja *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de lootly.io www.affirm.com cmp.osano.com ct.pinterest.com *.five9.net graph.instagram.com *.googlesyndication.com *.healthline.com medchatapp.com mozbar.moz.com tr.snapchat.com ws.sharethis.com www.facebook.com www.youtube.com www.youtube-nocookie.com aeroflow-breastpumps.gorgias.help help-center.gorgias.help www.instagram.com players.brightcove.net www.tiktok.com *.aeroflowdirect.com *.aeroflowbreastpumps.com *.aeroflowurology.com *.aeroflowsleep.com *.cpapsupplies.com *.cheapcpapsupplies.com *.motifmedical.com *.pumpingessentials.com *.lactationlink.com *.aeroflowdiabetes.com shop.aeroflowinc.com www.nbcnews.com/news/embedded-video/ ep2.adtrafficquality.google *.authorize.net https://*.online-metrix.net https://imgs.signifyd.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://aeroflow-experiments.com https://*.aeroflow-experiments.com upload-widget.cloudinary.com https://gtm.aeroflowbreastpumps.com https: 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.affirm.com *.affirm.ca *.sharethis.com *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com *.meetanshi.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com https://meetanshi.com/media/logo.png *.disqus.com *.yotpo.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https://img.youtube.com https://firebasestorage.googleapis.com https: blob: https://imgs.signifyd.com https://*.online-metrix.net https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://aeroflow-experiments.com https://*.aeroflow-experiments.com data: https: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.affirm.com *.affirm.ca *.sharethis.com https://ajax.googleapis.com https://cdn.jsdelivr.net *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com https://www.datadoghq-browser-agent.com *.meetanshi.com https://s3.amazonaws.com/idme/developer/idme-buttons/assets/* https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.yotpo.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de lootly.io cdn.rangetouch.com *.avada.io *.shopify.com https://static.kameleoon.com https://*.kameleoon.io https://js.appboycdn.com https://cdn.noibu.com https://staticw2.yotpo.com https://acds-events.adobe.io https://static.cloudflareinsights.com https://cmp.osano.com https://us01ccistatic.zoom.us https://bat.bing.com https://snippet.maze.com https://widget.gotolstoy.com https://lootly.io https://www.clarity.ms https://scripts.clarity.ms *.authorize.net https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net https://we3qsoy7z9.aeroflow-experiments.com https://cdn.gbqofs.com https://*.kameleoon.com https://*.kameleoon.eu https://*.kameleoon.net https://aeroflow-experiments.com https://*.aeroflow-experiments.com widget.cloudinary.com/v2.0/global/all.js https://gtm.aeroflowbreastpumps.com https: 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.sharethis.com https://cdn.jsdelivr.net *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br *.tagmanager.google.com *.googletagmanager.com *.typeform.com https://static.klaviyo.com *.fontawesome.com *.yotpo.com *.googleapis.com https://fonts.bunny.net https: data: blob: https://fonts.googleapis.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://aeroflow-experiments.com https://*.aeroflow-experiments.com https: 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https: data: blob: 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.affirm.com *.affirm.ca *.sharethis.com https://ipapi.co https://ajax.googleapis.com *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com *.meetanshi.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.yotpo.com https://resupply.aeroflowurology.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de www.mczbf.com pipedream.wistia.com us-autocomplete-pro.api.smarty.com lootly.io https://get.geojs.io *.avada.io self wss://input.noibu.com *.authorize.net https://imgs.signifyd.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://aeroflow-experiments.com https://*.aeroflow-experiments.com portal.aeroflow.online https: 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://aeroflow-experiments.com https://*.aeroflow-experiments.com portal.aeroflow.online https: 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.cdnfonts.com *.cloudflare.com *.gstatic.com *.klaviyo.com *.slant.co *.yotpo.com *.zip.co sc-static.net *.zdassets.com *.zendesk.com tryme.directory *.hotjar.com *.klarnacdn.net *.klevu.com *.ksearchnet.com *.googleapis.com dhv2ziothpgrr.cloudfront.net www.sportrx.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com www.sportrx.com 'self' 'unsafe-inline'; frame-ancestors www.sportrx.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.googletagmanager.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com bytedance: sslocal: www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.googletagmanager.com *.zdassets.com *.zendesk.com *.hotjar.com *.klarna.com *.yotpo.com www.sportrx.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net p.typekit.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.adsrvr.org *.avantlink.com *.bing.com *.bing.net *.cloudflare.com *.criteo.com *.criteo.net *.doubleclick.net *.facebook.com *.google-analytics.com *.google.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gravatar.com *.gstatic.com *.klevu.com *.linksynergy.com *.liquifire.com *.pushcrew.com *.rlcdn.com *.sharethis.com *.sportrx.com *.teamusa.org *.visualwebsiteoptimizer.com *.wileyxrx.com *.xg4ken.com *.yotpo.com *.youtube.com cdn-cookieyes.com d10lpsik1i8c69.cloudfront.net *d3k81ch9hvuctc.cloudfront.net extendcoreoffersprod-offersthemelogobucketeb21afa-1lr7le13dvgtp.s3.amazonaws.com s3.amazonaws.com *.zdassets.com *.zendesk.com *.hotjar.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.ksearchnet.com dhv2ziothpgrr.cloudfront.net www.sportrx.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net www.sandbox.paypal.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com www.googletagmanager.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com *.attn.tv events.attentivemobile.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.zendesk.com wss://api.smooch.io *.luckyorange.net *.luckyorange.com *.googleapis.com *.pushcrew.com *.addthis.com *.addthisedge.com *.adobedtm.com *.adsrvr.org *.bing.com *.braintreegateway.com *.cloudflare.com d10lpsik1i8c69.cloudfront.net d3k81ch9hvuctc.cloudfront.net *.criteo.com *.criteo.net *.doubleclick.net *.facebook.net *.google-analytics.com *.google.com *.googlesyndication.com *.googletagmanager.com *.invoca.net *.invocacdn.com *.klaviyo.com *.klevu.com *.linksynergy.com *.moatads.com *.noibu.com input.noibu.com wss://input.noibu.com *.sharethis.com *.tiktok.com *.visualwebsiteoptimizer.com *.xg4ken.com *.yotpo.com *.youtube.com *.zdassets.com acsbapp.com cdn.acsbapp.com *.acsbapp.com cdn-cookieyes.com google-analytics.com tryme.directory *.newrelic.com *.rakuten.com *.rlcdn.com *.hotjar.com cdn.avmws.com/1016937/ *.smooch.io *.liquifire.com *.klarnacdn.net *.klarna.com *.glasseson.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klarnaservices.com js.klevu.com *.ksearchnet.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net www.sportrx.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com unsafe-inline assets.braintreegateway.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.klaviyo.com *.klevu.com *.pushcrew.com *.yotpo.com *.zdassets.com *.zendesk.com *.hotjar.com https://static.klaviyo.com *.klarnacdn.net *.ksearchnet.com dhv2ziothpgrr.cloudfront.net www.sportrx.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com *.bing.com *.googleapis.com *.gstatic.com *.zdassets.com *.zendesk.com *.hotjar.com *.glasseson.com *.cloudfront.net www.sportrx.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com *.snplow.net commerce.adobedc.net api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com *.attn.tv events.attentivemobile.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.zendesk.com wss://api.smooch.io *.googleapis.com *.addthis.com *.adsrvr.org *.bing.com *.bing.net *.cloudflare.com *.criteo.com *.criteo.net *.datadome.co *.doubleclick.net *.facebook.com *.google-analytics.com *.googlesyndication.com *.googletagmanager.com *.gravatar.com *.gstatic.com *.invoca.net *.invocacdn.com *.klaviyo.com *.linksynergy.com *.luckyorange.net *.luckyorange.com *.noibu.com input.noibu.com wss://input.noibu.com *.nr-data.net *.pushcrew.com *.rlcdn.com *.samsung.com *.sharethis.com *.teamusa.org *.tiktok.com *.visualwebsiteoptimizer.com *.youtube.com *.zdassets.com acsbapp.com cdn.acsbapp.com *.acsbapp.com cdn-cookieyes.com *.cookieyes.com google-analytics.com tryme.directory d10lpsik1i8c69.cloudfront.net d3k81ch9hvuctc.cloudfront.net *.hotjar.com *.klarnaevt.com *.glasseson.com *.mixpanel.com *.cloudfront.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klarnacdn.net *.klarna.com *.klarnaservices.com *.klevu.com *.ksearchnet.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com www.sportrx.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com www.sportrx.com http: https: blob: wss: 'self' 'unsafe-inline'; default-src *.glasseson.com *.cloudfront.net www.sportrx.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://f67b9549-76ff-40d0-b57c-93081e358fa4.sansec.watch/; report-to report-endpoint; 1
font-src 'self' data:; script-src-attr 'self'; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://instinet-matomo.teamricochet.com/ https://js-agent.newrelic.com/ https://www.google-analytics.com/ cdnjs.cloudflare.com https://cdn.datatables.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com stackpath.bootstrapcdn.com unpkg.com; style-src 'self' cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.datatables.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://live-instinet-drupal.pantheonsite.io https://unpkg.com stackpath.bootstrapcdn.com; style-src-attr 'self' 'unsafe-inline'; frame-ancestors 'self' 1
default-src 'self';script-src 'self' 'unsafe-inline' 'nonce-3v1FCzXyVaGlkASIr47Vk1ae' 'unsafe-eval' https://pixel.byspotify.com *.travcorpservices.com https://www.google.com https://www.google-analytics.com https://www.googleoptimize.com https://www.googletagmanager.com https://ajax.googleapis.com https://www.gstatic.com https://googleads.g.doubleclick.net https://api.feefo.com https://register.feefo.com https://bat.bing.com https://cdn.evgnet.com https://connect.facebook.net https://i.clarity.ms https://static-ssl.responsetap.com *.hotjar.com https://tag.simpli.fi https://unpkg.com https://www.bugherd.com https://decagon.ai https://www.datadoghq-browser-agent.com https://assetscdn.stackla.com/media/js https://vjs.zencdn.net https://cdn.amplitude.com/libs https://sdk.joinsherpa.io https://apps.mypurecloud.com https://consentcdn.cookiebot.com https://cdnjs.cloudflare.com https://ttc-contiki.entry.promo https://cdn.optimizely.com https://www.riddle.com;style-src 'self' 'unsafe-inline' https://assetscdn.stackla.com/media/components/stackla-uikit/dist https://fonts.googleapis.com https://p.typekit.net https://use.typekit.net https://vjs.zencdn.net https://apps.mypurecloud.com;img-src 'self' https://bat.bing.com https://c.clarity.ms https://i.ytimg.com https://www.facebook.com https://www.google-analytics.com https://www.google.com https://www.uplift-platform.com data:;frame-src 'self' https://10006172.fls.doubleclick.net https://uplift-cdn-stg.uplift.com https://vars.hotjar.com https://widget.stackla.com https://www.google.com https://apps.joinsherpa.io https://www.googletagmanager.com https://a25408250069.cdn.optimizely.com;font-src 'self' https://assetscdn.stackla.com https://fonts.gstatic.com https://use.typekit.net https://vjs.zencdn.net https://apps.mypurecloud.com;connect-src 'self' *.travcorpservices.com *.travcorp.com *.corp.ttc:7443 https://api.feefo.com https://bat.bing.com https://in.hotjar.com https://ws11.hotjar.com/api https://l.clarity.ms https://metrics.responsetap.com/infinity https://noembed.com https://pm-mrkt.prodgw.uplift-platform.com https://rum.browser-intake-datadoghq.com https://session-replay.browser-intake-datadoghq.com https://ttctravel.germany-2.evergage.com https://www.facebook.com https://www.google-analytics.com https://logx.optimizely.com https://region1.analytics.google.com https://ttc.contiki.com 1
object-src 'none'; base-uri 'none'; report-uri https://o225139.ingest.us.sentry.io/api/4508413967400960/security/?sentry_key=3e448f8df21f7ffe3ceda28e5ae1b362&sentry_environment=PRODUCTION; script-src 'unsafe-eval' 'strict-dynamic' 'report-sample' 'unsafe-hashes' 'sha256-lo7ZdP6kFds+wf1WMWvn7MhcFVFJV44kAXODRevzRZ8=' 'sha256-rRMdkshZyJlCmDX27XnL7g3zXaxv7ei6Sg+yt4R3svU=' 'sha256-kbHtQyYDQKz4SWMQ8OHVol3EC0t3tHEJFPCSwNG9NxQ=' 'nonce-1kR4NVEoYQsdMHztEQn4xw==' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.clarity.ms c.bing.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.clarity.ms c.bing.com magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.doubleclick.net https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com https://maps.googleapis.com *.clarity.ms c.bing.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.gstatic.com *.googletagmanager.com *.doubleclick.net js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.fontawesome.com *.googleapis.com *.googletagmanager.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://maps.googleapis.com https://player.vimeo.com *.clarity.ms c.bing.com *.google-analytics.com *.doubleclick.net *.googlesyndication.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.klevu.com *.ksearchnet.com maxcdn.bootstrapcdn.com d17anp2eo56k6j.cloudfront.net d9h1vtbtgkgvf.cloudfront.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://plumrocket.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.affirm.com *.affirm.ca d17anp2eo56k6j.cloudfront.net d9h1vtbtgkgvf.cloudfront.net https://plumrocket.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.affirm.com *.affirm.ca https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com d17anp2eo56k6j.cloudfront.net d9h1vtbtgkgvf.cloudfront.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.googletagmanager.com *.affirm.com *.affirm.ca https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.klevu.com *.ksearchnet.com d17anp2eo56k6j.cloudfront.net d9h1vtbtgkgvf.cloudfront.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com maxcdn.bootstrapcdn.com d17anp2eo56k6j.cloudfront.net d9h1vtbtgkgvf.cloudfront.net unsafe-inline assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.affirm.com *.affirm.ca https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com d17anp2eo56k6j.cloudfront.net d9h1vtbtgkgvf.cloudfront.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; script-src 'self' 'unsafe-eval' 'report-sample' cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://code.jquery.com https://extend.vimeocdn.com https://js.maxmind.com 'strict-dynamic' https://geolocation.onetrust.com 'nonce-VIpcwAsHhNMcS1Iv7XzSxw'; script-src-elem 'self' 'unsafe-eval' 'report-sample' cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://code.jquery.com https://extend.vimeocdn.com https://js.maxmind.com 'strict-dynamic' https://geolocation.onetrust.com 'nonce-VIpcwAsHhNMcS1Iv7XzSxw'; base-uri 'self'; report-uri https://coopervision.com/log-report-uri/reportOnly 1
default-src 'self'; style-src 'self' 'unsafe-inline' 'report-sample' https://cdn.cookielaw.org https://*.bounceexchange.com https://*.bazaarvoice.com https://*.dynamicyield.com https://cdn.parcellab.com https://fonts.googleapis.com; img-src 'self' data: https://*.commercecloud.salesforce.com https://*.demandware.net https://*.cc.salesforce.com https://*.amplience.net https://*.bigcontent.io https://*.dynamicyield.com https://*.bazaarvoice.com https://*.curalate.com https://*.googletagmanager.com https://*.google-analytics.com https://www.google.com https://*.doubleclick.net https://*.klarna.com https://*.klarnaevt.com https://cdn.cookielaw.org https://*.facebook.com https://s.pinimg.com https://*.paypal.com https://*.paypalobjects.com https://applepay.cdn-apple.com https://*.online-metrix.net https://*.signifyd.com https://*.foresee.com https://sees.com https://*.sees.com https://bat.bing.com https://*.bounceexchange.com https://*.bouncex.net https://*.cdnwidget.com https://*.dstillery.com https://*.media6degrees.com https://idsync.rlcdn.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.commercecloud.salesforce.com https://*.demandware.net https://challenges.cloudflare.com https://api.cquotient.com https://*.amplience.net https://*.bigcontent.io https://*.dynamicyield.com https://sgtm.sees.com https://*.googletagmanager.com https://*.google-analytics.com https://www.google.com https://*.doubleclick.net https://*.cookielaw.org https://*.onetrust.com https://*.bazaarvoice.com https://*.ordergroove.com https://*.klarna.com https://*.klarnaevt.com https://*.facebook.com https://connect.facebook.net https://*.pinterest.com https://s.pinimg.com https://*.nice-incontact.com https://*.parcellab.com https://*.cybersource.com https://*.cardinalcommerce.com https://*.braintreegateway.com https://*.braintree-api.com https://*.paypal.com https://*.signifyd.com https://*.fullstory.com https://*.curalate.com https://*.verint-cdn.com https://*.foresee.com https://*.analytics.google.com https://analytics.google.com https://cloudflareinsights.com https://bat.bing.com https://*.zi-scripts.com https://*.zoominfo.com https://*.cdnwidget.com https://*.domdog.io; frame-src 'self' https://challenges.cloudflare.com https://*.klarna.com https://*.onetrust.com https://*.bazaarvoice.com https://*.doubleclick.net https://ct.pinterest.com https://*.facebook.com https://www.youtube-nocookie.com https://www.buyatab.com https://*.nice-incontact.com https://*.cybersource.com https://*.cardinalcommerce.com https://*.braintreegateway.com https://*.paypal.com https://applepay.cdn-apple.com https://www.google.com https://*.online-metrix.net https://*.signifyd.com https://sgtm.sees.com https://*.bounceexchange.com https://*.sfmc-content.com; frame-ancestors 'self' https://runtime.commercecloud.com https://content.amplience.net https://app.amplience.net; form-action 'self' https://www.facebook.com https://api.bazaarvoice.com https://*.my.salesforce.com; base-uri 'self'; object-src 'none'; script-src 'self' https://challenges.cloudflare.com 'unsafe-eval' 'report-sample' blob: https://*.dynamicyield.com https://sgtm.sees.com https://*.googletagmanager.com https://cdn.cookielaw.org https://*.onetrust.com https://*.klarnacdn.net https://*.klarna.com https://*.bazaarvoice.com https://*.ordergroove.com https://*.curalate.com https://connect.facebook.net https://s.pinimg.com https://ct.pinterest.com https://*.nice-incontact.com https://www.buyatab.com https://cdn.parcellab.com https://*.cybersource.com https://*.cardinalcommerce.com https://*.braintreegateway.com https://*.paypal.com https://*.paypalobjects.com https://applepay.cdn-apple.com https://*.signifyd.com https://www.google.com https://www.gstatic.com https://*.online-metrix.net https://*.fullstory.com https://*.verint-cdn.com https://*.foresee.com https://*.bounceexchange.com https://tag.wknd.ai https://bat.bing.com https://*.zi-scripts.com https://*.zoominfo.com https://*.domdog.io https://cdnjs.cloudflare.com/ajax/libs/crypto-js/ https://*.cloudflareinsights.com https://*.dstillery.com https://*.media6degrees.com 'nonce-PMKAb+1Zex+tG0orjooJCw==' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://i.imgur.com https://opengraph.amboss.space; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' wss:; frame-src 'none'; worker-src 'self' blob:; manifest-src 'self'; report-uri /api/csp-report; report-to csp-endpoint 1
base-uri 'self'; default-src 'self' https://cdn.sanity.io https://widget.trustpilot.com https://www.youtube.com 'self' https://cdn.shopify.com https://shopify.com; frame-ancestors 'self' https://*.pavers.co.uk https://cms.pavers.co.uk/pavers-uk; style-src 'self' 'unsafe-inline' https://cdn.shopify.com https://fonts.googleapis.com https://fonts.gstatic.com 'self' 'unsafe-inline' https://cdn.shopify.com; connect-src https://sv3k3p3d.api.sanity.io wss://sv3k3p3d.api.sanity.io 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googleapis.com https://*.myshopify.dev https://widget.trustpilot.com https://cdn.shopify.com https://shopifycloud.com https://chat.system.gnatta.com https://metrics.pavers.co.uk https://metrics.jonesbootmaker.com https://pagead2.googlesyndication.com https://www.google.com https://bat.bing.net https://bat.bing.com https://cdn.sanity.io https://log.cookieyes.com https://ct.pinterest.com https://try.abtasty.com https://s.pinimg.com https://cdn.jsdelivr.net https://pixels.spotify.com https://cdn-cookieyes.com https://dcinfos-cache.abtasty.com https://routes.soreto.com https://checkout.pavers.co.uk https://pavers.co.uk https://*.pavers.co.uk https://*.jonesbootmaker.com https://r1.trackedweb.net https://api-r4.tagalys.com https://ariane.abtasty.com/ https://c4.dycdn.net https://click.prod.mplat-ppcprotect.com wss://r1-am.dycdn.net/ https://ad.doubleclick.net https://checkout.jonesbootmaker.com https://q.clarity.ms https://r1-am.dycdn.net wss://ws.hotjar.com/ https://content.hotjar.io https://metrics.hotjar.io https://directory.cookieyes.com/ https://content.hotjar.io/ 'self' https://cdn.shopify.com/ https://monorail-edge.shopifysvc.com https://pvstest.myshopify.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdn.shopify.com https://*.googletagmanager.com https://maps.googleapis.com https://maps.google.com https://www.gstatic.com https://widget.trustpilot.com https://chat.system.gnatta.com https://metrics.pavers.co.uk https://metrics.jonesbootmaker.com https://bat.bing.com https://s.pinimg.com https://connect.facebook.net https://assets.soreto.com https://lantern.roeyecdn.com https://script.hotjar.com https://www.clarity.ms https://s.tribalfusion.com https://c0.adalyser.com https://client.prod.mplat-ppcprotect.com https://pixel.byspotify.com/ https://cdn-cookieyes.com https://try.abtasty.com https://static.trackedweb.net https://d81mfvml8p5ml.cloudfront.net https://r1-am.dycdn.net https://cfg.dycdn.net/ https://ct.pinterest.com https://scripts.clarity.ms https://tagalys-assets.s3.ap-southeast-1.amazonaws.com ; img-src 'self' https://cdn.sanity.io https://cdn.shopify.com https://*.google-analytics.com https://*.googletagmanager.com https://www.google.com https://www.google.co.uk https://www.google.ie https://www.google.cz https://maps.googleapis.com https://maps.gstatic.com https://www.gstatic.com https://bat.bing.net https://ade.googlesyndication.com data: https://bat.bing.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://a.mktgcdn.com https://s.tribalfusion.com https://lantern.roeye.com https://metrics.pavers.co.uk https://metrics.jonesbootmaker.com https://ib.adnxs.com https://cdn-cookieyes.com https://www.facebook.com https://c0.adalyser.com; frame-src https://www.youtube.com https://widget.trustpilot.com https://www.google.com https://*.frcapi.com https://secure.gocertify.me https://www.mainadv.com https://metrics.pavers.co.uk https://metrics.jonesbootmaker.com https://www.facebook.com/ https://ct.pinterest.com/ https://10333593.fls.doubleclick.net/; font-src 'self' https://cdn.shopify.com https://fonts.googleapis.com https://fonts.gstatic.com;; trusted-types app-default goog#html lit-html google-maps-api-loader google-maps-api#html facebook.com/signals/iwl connect.facebook.net/fbevents 'allow-duplicates'; 1
connect-src 'self' https://b.clarity.ms https://bat.bing.com https://ekr.zdassets.com https://numberbarn.zendesk.com wss://api.smooch.io; default-src 'none'; font-src 'report-sample' 'self' https://fonts.gstatic.com; form-action 'report-sample' 'self'; frame-ancestors 'report-sample' 'self'; frame-src 'self' https://js.stripe.com https://www.google.com; img-src 'report-sample' 'self' data: https://bat.bing.com https://px.ads.linkedin.com https://static.zdassets.com https://www.facebook.com https://www.google.com; report-to default; report-uri https://www.tierra.net/special/report/csp; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://api.smooch.io https://bat.bing.com https://connect.facebook.net https://googleads.g.doubleclick.net https://js.stripe.com https://snap.licdn.com https://static.zdassets.com https://www.clarity.ms https://www.clearhello.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com; style-src 'report-sample' 'self' 'unsafe-inline' https://fonts.googleapis.com 1
object-src 'none'; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; worker-src 'self' blob:; base-uri 'self'; form-action *; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-KfKc-AYZs-XGD9JRTM0xBg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; font-src 'self'; img-src 'self'; script-src 'self'; style-src 'self'; report-uri https://nz14bhs2.uriports.com/reports/report; report-to default 1
font-src www.paypalobjects.com *.accelasearch.io *.googleapis.com *.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com cdn.motoabbigliamento.it *.scalapay.com data: 'self' 'unsafe-inline'; form-action * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src * 'self' 'unsafe-inline'; img-src *.doubleclick.net assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com www.google.com *.analytics.google.com www.googletagmanager.com www.paypalobjects.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.accelasearch.io https://images.unsplash.com *.gstatic.com *.googleapis.com assets.braintreegateway.com *.paypal.com https://www.mollie.com cdn.motoabbigliamento.it *.facebook.com *.bing.net *.bing.com *.google.it *.scalapay.com data: 'self' 'unsafe-inline'; script-src *.cardinalcommerce.com *.braintreegateway.com *.google.com assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.googletagmanager.com *.newrelic.com *.nr-data.net includestest.ccdc02.com www.paypalobjects.com s.ytimg.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.accelasearch.io *.googleapis.com *.gstatic.com *.paypal.com js.mollie.com cdn.motoabbigliamento.it *.cookiebot.com *.bing.com *.clarity.ms *.facebook.net *.scalapay.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.accelasearch.io *.fontawesome.com assets.braintreegateway.com maxcdn.bootstrapcdn.com cdn.motoabbigliamento.it *.scalapay.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.braintreegateway.com dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.paypalobjects.com *.accelasearch.io https://player.vimeo.com *.googleapis.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googlesyndication.com *.cookiebot.com *.bing.net *.bing.com *.clarity.ms *.facebook.net *.facebook.com *.doubleclick.net *.google.it *.scalapay.com *.gstatic.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://cdn.jsdelivr.net https://code.jquery.com https://cdnjs.cloudflare.com https://ajax.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none' 1
font-src fonts.gstatic.com use.typekit.net *.googleapis.com *.gstatic.com *.fontawesome.com *.typekit.net 'self' data: data: 'self' 'unsafe-inline'; form-action *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com pestweb.com https://*.cardconnect.com/ *.dotdigital-pages.com *.dotdigital.com *.iubenda.com *.google.com/ *.addthis.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.googleapis.com *.gstatic.com https://www.magezon.com https://cdn.brainier.com https://img.delvenetworks.com *.trackedlink.net *.ddlnk.net *.iubenda.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com *.nr-data.net uat01-ecommerceidentity.cs90.force.com univar--uat01.my.salesforce.com *.hsforms.net *.hsforms.com www.google.com.ua *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://rum.hlx.page *.googleapis.com *.gstatic.com *.rejoiner.com https://*.cloudfront.net https://*.gosquared.com https://sst.veseris.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.iubenda.com *.disqus.com *.google.com uat01-ecommerceidentity.cs90.force.com univar--uat01.my.salesforce.com *.hsforms.net *.hsforms.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com https://veseris.com sst.veseris.com https: 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.typekit.net *.googleapis.com *.gstatic.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.googleapis.com *.rejoiner.com https://sst.veseris.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.iubenda.com *.stats.g.doubleclick.net *.doubleclick.net *.google-analytics.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.facebook.net sst.veseris.com https: 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-ancestors *.hana.ondemand.com 'self'; object-src 'self' 'unsafe-inline'; media-src *.zdassets.com 'self' 'unsafe-inline'; manifest-src *.netcore.co.in/ *.hansel.io/ *.netcoresmartech.com *.boxx.ai *.netcorein.com *.netcore.co.in 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; font-src https://*.flixcar.com https://*.hirschs.co.za https://*.mailercdn.net www.paypalobjects.com *.klevu.com *.ksearchnet.com *.netcore.co.in/ *.hansel.io/ *.netcoresmartech.com https://local.netcoresmartech.com:3000 *.boxx.ai *.netcorein.com *.netcore.co.in *.cloudflare.com *.googleapis.com *.zopim.com *.gstatic.com *.tawk.to *.jsdelivr.net media.flixfacts.com 'unsafe-inline' data: http://js.klevu.com data: 'self' 'unsafe-inline'; style-src https://*.tawk.to https://*.hirschs.co.za https://hirschsmedia.co.za/cdn/overrides/css/styles.css https://*.mailercdn.net/ downloads.mailchimp.com https://widgets.payflex.co.za *.klevu.com *.ksearchnet.com *.netcore.co.in/ *.hansel.io/ *.netcoresmartech.com *.boxx.ai *.netcorein.com *.netcore.co.in assets.braintreegateway.com *.cloudflare.com *.googleapis.com *.jsdelivr.net www.gstatic.com media.flixcar.com 'unsafe-inline' data: http://js.klevu.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; connect-src https://*.luckyorange.net https://*.demdex.net https://*.facebook.com https://*.snapchat.com https://*.luckyorange.com https://*.googleapis.com https://*.visualstudio.com https://*.flixcar.com https://*.google.co.za https://*.clarity.ms https://*.bing.com https://*.tiktok.com https://*.flix360.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.klevu.com *.ksearchnet.com *.netcore.co.in/ *.hansel.io/ *.netcoresmartech.com *.boxx.ai *.netcorein.com *.netcore.co.in api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.testfreaks.com http://js.klevu.com *.nosto.com *.hotjar.io *.hotjar.com *.doubleclick.net *.zendesk.com *.tawk.to wss://*.tawk.to *.tawk.link *.addthis.com *.addthisedge.com vsb111.tawk.to ekr.zdassets.com api.magento.com commerce.adobedc.net app.mobicredwidget.co.za www.google-analytics.com wss://widget-mediator.zopim.com bam.nr-data.net *.googletagmanager.com security-hub.vaimo.network 'unsafe-eval' data: https://bam.nr-data.net fabonline.co.za 'self' 'unsafe-inline'; form-action https://*.googleadservices.com https://*.snapchat.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://secure.paygate.co.za/payweb3/process.trans *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; frame-src https://*.everesttech.net https://*.everestjs.net https://*.demdex.net https://*.snapchat.com https://*.googlesyndication.com https://*.doubleclick.net/ geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.google.com *.nosto.com *.issuu.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.criteo.net *.criteo.com *.addthis.com *.facebook.com webchat.jdg.co.za *.jdg.co.za https://www.google.com https://www.gstatic.com 'self' 'unsafe-inline'; img-src https://*.everesttech.net https://*.doubleclick.net https://*.payflex.co.za https://*.hirschs.co.za https://*.windows.net https://*.googlesyndication.com https://static.addtoany.com https://*.clarity.ms https://*.bing.com/ https://hirschsmedia.co.za/cdn/overrides/css/styles.css https://*. pushpushgo.com 'unsafe-inline' data: widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://widgets.payflex.co.za *.klevu.com *.ksearchnet.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: *.paypal.com *.cloudflare.com *.google.com *.google.lv *.google.co.za *.google.com.na *.google.na *.gstatic.com *.zopim.com *.nosto.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.zopim.io *.sfdr.co sfdr.co *.tawk.to tawk.link *.tawk.link *.addthis.com *.jsdelivr.net *.facebook.com *.azurewebsites.net www.google-analytics.com maps.googleapis.com app.mobicredwidget.co.za amcglobal.sc.omtrdc.net media.flixcar.com rt.flix360.com assets.secure.checkout.visa.com http://js.klevu.com https://www.facebook.com fabonline.co.za data: 'self' 'unsafe-inline'; script-src https://*.everestjs.net https://sc-static.net/scevent.min.js https://*.windows.net https://*.payflex.co.za https://*.hirschs.co.za https://*.googlesyndication.com https://*.luckyorange.com https://*.msecnd.net https://*.pushpushgo.com https://*.flix360.io https://*.bing.com https://*.tiktok.com https://*.clarity.ms https://hirschsmedia.co.za/cdn/overrides/js/scripts.js https://tr.snapchat.com/config/za/2a3f29a7-7687-4168-8b74-5f1365939f2e.js https://www.hirschs.co.za/media/overrides/js/sw.js https://*.googletagmanager.com https://www.googletagmanager.com https://*.google-analytics.com https://www.google-analytics.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.googletagmanager.com www.google-analytics.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://widgets.payflex.co.za https://partpayassets.blob.core.windows.net js.klevu.com *.ksearchnet.com *.netcore.co.in/ *.hansel.io/ *.netcoresmartech.com *.boxx.ai *.netcorein.com *.netcore.co.in js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.zopim.com *.videoly.co sfdr.co *.cnetcontent.com *.cloudfront.net *.klevu.com *.google.com *.google.lv *.google.co.za *.google.com.na *.google.na *.cloudflare.com *.cloudflareinsights.com *.nosto.com *.hotjar.com *.googletagmanager.com *.criteo.net *.criteo.com *.sfdr.co *.tawk.to *.tawk.link *.jsdelivr.net *.addthis.com *.addthisedge.com *.moatads.com *.mouseflow.com *.facebook.com maps.googleapis.com www.googleadservices.com commerce.adobedtm.com magento-recs-sdk.adobe.net static.zdassets.com app.mobicredwidget.co.za www.gstatic.com connect.facebook.net bam.nr-data.net googleads.g.doubleclick.net js.testfreaks.com media.flixfacts.com media.flixcar.com security-hub.vaimo.network http://js.klevu.com https://js-agent.newrelic.com https://bam.nr-data.net https://connect.facebook.net https://www.google.com https://www.gstatic.com fabonline.co.za 'self' 'unsafe-inline' 'unsafe-eval'; report-uri https://security-hub.vaimo.network/public/api/content-security-policy.php; report-to report-endpoint; 1
object-src 'none'; script-src 'self' adform.net *.adform.net *.brandinsight.tech *.bing.com *.taboola.com *.fullstory.com *.geocomply.com *.kameleoon.eu *.ads-twitter.com *.google-analytics.com *.kaizengaming.com *.jsdelivr.net *.kwai.net *.clarity.ms *.greencolumnart.com *.adalyser.com *.performgroup.com *.scoutgg.net *.sportradarserving.com *.pa4r.com res-odx.op-mobile.opera.com *.bannerflow.net *.facebook.com *.cloudfront.net *.maze.co *.app.delivery *.betano.co *.betgenius.com *.cloudflare.com *.cloudflareinsights.com *.cookielaw.org *.creativecdn.com *.facebook.net *.gmlinteractive.com *.googletagmanager.com *.kameleoon.io *.lgrckt-in.com *.optimove.net *.sportradar.com *.tostarsbuilding.com *.datadome.co *.stoiximan.com.cy; worker-src 'self' blob:; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=.semmyGeBvliYpthtqd7EgtW_450X_r2FVCOleGxKQ4-1789281294.5392506-1.0.1.1-f1FdkUB69eblXWoRcrOc23Xd0hiS21_Qtd78LMLKcueQB6UGjSlw2924HO4eqlRVmj13e5tLfhFJB9YQxtFapoTYrPIE_sdnZDqVaoRZZZ7Trn4R9jrMIbAvjUSdXkabQaWQ_uXvDTi3r94QsitcJsYqs38U_TvY_5IS6lX_5IoOSglH8Uns_Ny.hOFF09F5PSXI98GoZEn0luKa6LjiDg; report-to cf-zobifojdwerwjtvn 1
object-src 'none';base-uri 'self';script-src 'nonce-vddJK1R2W60MjaYyCIYJ-Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/maps-tactile 1
manifest-src https:; media-src https:; upgrade-insecure-requests; style-src 'self' https: 'unsafe-inline'; object-src 'none'; connect-src 'self' https:; frame-ancestors 'none' 1
script-src       'self'       'report-sample'       'unsafe-inline'       *.zohocdn.com       static.zohocdn.com.cn       *.zohostatic.com       *.zohowebstatic.com       dre.zoho.com       salesiq.zohocorppublic.in       creator.zoho.com       desk.zoho.in       js.zohostatic.in       cdn.pagesense.io       live.zwidgets.com       zapier.com       cdn.zapier.com       www.googletagmanager.com       www.google-analytics.com       www.recaptcha.net       www.gstatic.com;       script-src-elem       'self'       'report-sample'       *.zohocdn.com       static.zohocdn.com.cn       *.zohostatic.com       *.zohowebstatic.com       dre.zoho.com       salesiq.zohocorppublic.in       creator.zoho.com       desk.zoho.in       js.zohostatic.in       cdn.pagesense.io       live.zwidgets.com       zapier.com       cdn.zapier.com       www.googletagmanager.com       www.google-analytics.com       www.recaptcha.net       www.gstatic.com;       script-src-attr       'report-sample'       'unsafe-inline';       report-uri https://logsapi.zoho.com/csplog?service=creator; 1
script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://accounts.google.com/gsi/client https://apis.google.com/js/api.js https://billing-ads-qa-devel.corp.google.com/payments/v4/js/integrator.js https://payments.google.com/payments/v4/js/integrator.js https://payments.sandbox.google.com/payments/v4/js/integrator.js https://www.googletagmanager.com/gtm.js https://www.gstatic.com/glue/cookienotificationbar/cookienotificationbar.min.js https://www-onepick-opensocial.googleusercontent.com/gadgets/js/rpc.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-makersuite/_/js/k=boq-makersuite.MakerSuite.en_US.oarKZteeJNQ.2018.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://payments.youtube.com/payments/v4/js/integrator.js https://payments.cloud.google/payments/v4/js/integrator.js;report-uri /_/MakerSuite/cspreport/fine-allowlist 1
default-src 'self';    script-src 'self' 'unsafe-inline' https: http: https://vercel.live https://vercel.com https://*.posthog.com *.clerk.accounts.dev https://cdn.mux.com https://mux.com https://*.mux.com https://stream.mux.com https://*.gleap.io/ https://translate.google.com/ https://translate.googleapis.com/ https://www.gstatic.com/ https://*.google.com/;    style-src 'self' 'unsafe-inline' https://vercel.live/ https://*.mux.com;    img-src 'self' blob: data: https: *.thenational.academy/ thenational.academy/;    font-src 'self' gstatic-fonts.thenational.academy/ fonts.gstatic.com/ data: https://vercel.live/ https://assets.vercel.com;    object-src 'self' *.google.com;    base-uri 'self';    form-action 'self';    frame-ancestors 'self' *.google.com/;    connect-src *.thenational.academy thenational.academy https://vercel.live/ https://vercel.com *.pusher.com *.pusherapp.com *.hubspot.com *.hsforms.com *.cloudinary.com/ https://eu.i.posthog.com *.posthog.com https://api.avo.app/ *.clerk.accounts.dev clerk-telemetry.com https://mux.com https://*.mux.com https://stream.mux.com https://inferred.litix.io *.gleap.io wss://*.gleap.io *.google.com *.bugsnag.smartbear.com *.bugsnag.com;    media-src 'self' blob: *.thenational.academy/ https://res.cloudinary.com/ https://oaknationalacademy-res.cloudinary.com/ https://*.cloudinary.com/ https://*.mux.com/ https://stream.mux.com/ https://*.gleap.io/ https://ssl.gstatic.com;    frame-src 'self' *.thenational.academy/ https://vercel.live/ https://vercel.com https://challenges.cloudflare.com https://www.avo.app/ https://stream.mux.com https://*.mux.com https://*.gleap.io/ *.google.com/;    worker-src 'self' blob: *.thenational.academy/;    child-src blob:;    report-uri https://ph-eu-api.thenational.academy/report/?token=phc_LCrtgEAumOz4qgXuJNqMK2xisQ4mGaApixHEPXeRRoN&sample_rate=0.05&v=1;    report-to posthog 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' wss:; script-src 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline' *.%2A.civiccomputing.com *.civiccomputing.com *.clarity.ms *.cloudflare.com *.googletagmanager.com *.jsdelivr.net *.library.wales; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://*.youtube.com https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.googleusercontent.com https://*.ggpht.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net *.googletagmanager.com *.library.wales *.llgc.org.uk *.staticflickr.com *.ticketsource.co.uk fonts.gstatic.com play.google.com syndication.twitter.com translate.google.com; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com *.google.com *.libanswers.com *.library.wales *.llyfrgell.cymru *.lyfrgell.cymru *.twitter.com div.show hwb.gov.wales sketchfab.com www.canva.com; style-src-elem 'report-sample' 'self' 'unsafe-inline' *.clarity.ms *.fontawesome.com *.libanswers.com *.library.wales connect.facebook.net fonts.googleapis.com; connect-src 'self' https://*.googleapis.com https://*.google.com https://*.gstatic.com data: blob: https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net; font-src 'self' https://fonts.gstatic.com; worker-src 'self' 'nonce-fdNKL2MQTYovcl2Uyah33EWqEiGiuGH6df-mhtM_bIDUtT9Li8wgaQ' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.ggpht.com https://*.googleusercontent.com blob:; style-src 'self' 'unsafe-eval' 'unsafe-inline' wss: 'inline' 'report-sample'; script-src-elem 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline' *.%2A.civiccomputing.com *.civiccomputing.com *.clarity.ms *.cloudflare.com *.googletagmanager.com *.jsdelivr.net *.library.wales *.%2A.v2.scr.kaspersky-labs.com *.flickr.com *.libanswers.com adblockers.opera-mini.net connect.facebook.net s3.amazonaws.com wusote.hirizasune.com; report-uri https://www.library.wales/@http-reporting?csp=report&requestTime=1789286611786284&requestHash=b839ac36730f892db46d0be3e520e29d94d99337 1
script-src 'unsafe-inline' 'unsafe-eval'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=eHvIkgMqUKv6bVYqkST3NLRtukn7Qn0nvps0FAK6Kak-1789277028.3247788-1.0.1.1-S8fl4sIKdM.bO2r_NSKF4w6EhN2RDZWndmCpmxXuPzCw65jrknXCPOXEPIKNEa7TFhmYFrfJJktSIjIvpzH3Wp1e2jPbIgaVzU.fcsJp9WaqDrLBahycT85xbKrdmd4_N1on4phoJ8KVgDNiw58_JgAZu4ba5A8xP_6RThQ5CJS0cWlXmwYxK0x6BJat9vGr; report-to cf-csp-endpoint 1
report-to slardar-endpoint; report-uri https://mon.zijieapi.com/monitor_browser/collect/batch/security/?bid=slardar_web_music_promotion; object-src 'self'; frame-ancestors *.douyin.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' 'report-sample' data: blob: 'nonce-3b7b7fb2b3e2b6ca38f236b6599e4d13-argus' 'strict-dynamic' https:; base-uri 'self'; frame-src 'self' *.douyin.com:* *.bytedance.net:* *.bytedance.com:* *.toutiao.com:* bytedance:; 1
default-src 'self' http: https://*-chcf-wp.pantheonsite.io/ https://chcf-wp.ddev.site https://*.addthis.com https://*.youtube.com; script-src 'unsafe-inline' 'unsafe-eval' http: https://*.google.com https://fonts.googleapis.com https://ajax.googleapis.com https://jnn-pa.googleapis.com https://*.googletagmanager.com https://*.youtube.com https://*.addthis.com https://*.google-analytics.com https://*.ytimg.com https://*.moatads.com https://*.doubleclick.net https://*.addthisedge.com https://cdnjs.cloudflare.com; style-src 'unsafe-inline' http: https://*.google.com https://fonts.googleapis.com https://ajax.googleapis.com https://jnn-pa.googleapis.com https://*.youtube.com; img-src 'self' http: data: https://*.ytimg.com https://*.ggpht.com https://*.gstatic.com https://*.google-analytics.com; connect-src 'self' https://*.google-analytics.com https://*.bookingbug.com https://geolocation.onetrust.com https://*.cookielaw.org https://fonts.googleapis.com https://ajax.googleapis.com https://jnn-pa.googleapis.com *.addtoany.com; font-src 'self' data: fonts.gstatic.com use.typekit.net use.fontawesome.com bespoke.bookingbug.com; media-src 'self' *.youtube.com *.vimeo.com *.akamaized.net; report-uri 'self'; child-src 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'self'; frame-src 'self' blob: *.youtube.com *.youtube-nocookie.com *.doubleclick.net *.soundcloud.com *.facebook.com *.vimeo.com *.addtoany.com *.infogram.com *.simplecast.com; worker-src 'self'; manifest-src 'self'; navigate-to 'self'; prefetch-src 'self'; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com st.softgamings.com *.softgamings.com cdn.livechatinc.com api.livechatinc.com www.gstatic.com snap.licdn.com bat.bing.com connect.facebook.net mc.yandex.ru mc.yandex.com mc.yandex.by mc.yandex.kz mc.yandex.ua mc.yandex.tr webvisor.com *.webvisor.com www.clarity.ms scripts.clarity.ms consent.cookiebot.com cdn.cookiebot.com consentcdn.cookiebot.com clickiocmp.com *.clickiocdn.com cdn.matomo.cloud softgamings.matomo.cloud www.gstatic.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com st.softgamings.com *.softgamings.com; font-src 'self' fonts.gstatic.com st.softgamings.com data: *.softgamings.com; img-src 'self' data: https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://www.google.com https://googleads.g.doubleclick.net st.softgamings.com www.facebook.com www.google.ru px.ads.linkedin.com cdn.files-text.com secure.gravatar.com agstatic.com bat.bing.com www.googletagmanager.com *.softgamings.com images.dmca.com https://up.clickiocdn.com https://mc.yandex.com https://mc.yandex.com https://mc.yandex.ru https://mc.yandex.kz https://webvisor.com *.webvisor.com https://www.google.by www.clarity.ms c.clarity.ms; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://www.google.com https://px.ads.linkedin.com https://z.clarity.ms https://v.clarity.ms wss://*.clarity.ms wss://mc.yandex.ru wss://mc.yandex.com https://mc.yandex.ru https://mc.yandex.com https://mc.yandex.kz https://webvisor.com *.webvisor.com *.softgamings.com https://hooks.slack.com https://bat.bing.com https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googletagmanager.com https://googleads.g.doubleclick.net softgamings.matomo.cloud https://*.matomo.cloud; frame-src 'self' https://www.google.com https://www.googletagmanager.com https://bid.g.doubleclick.net https://cdn.livechatinc.com https://secure.livechatinc.com https://mc.yandex.ru https://mc.yandex.com https://mc.yandex.kz https://mc.yandex.tr https://webvisor.com *.webvisor.com https://www.clarity.ms *.softgamings.com https://www.youtube.com/ https://consentcdn.cookiebot.com; frame-ancestors 'self' https://webvisor.com https://mc.yandex.ru https://mc.yandex.com https://metrika.yandex.ru https://metrika.yandex.com https://metrica.yandex.ru https://metrica.yandex.com; media-src 'self' https://video.softgamings.com *.softgamings.com 1
frame-ancestors 'self'; report-uri https://www.thechronicle.com.au/csp-reports 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.google.com www.google-analytics.com www.googleadservices.com *.googleapis.com map.googleapis.com maps.googleapis.com *.googletagmanager.com *.google.com.ua *.google.ca *.google.co.in *.adobe.com *.adobedtm.com *.crazyegg.com *.licdn.com *.facebook.net *.facebook.com *.zoominfo.com *.adsrvr.org *.cloudfront.net js.authorize.net *.authorize.net 'self' * 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google-analytics.com www.googleadservices.com *.googleapis.com map.googleapis.com maps.googleapis.com *.googletagmanager.com *.google.com.ua *.google.ca *.google.co.in *.adobedtm.com *.crazyegg.com *.licdn.com *.facebook.net *.facebook.com *.zoominfo.com *.adsrvr.org *.doubleclick.net *.hubspot.com *.cloudfront.net js.authorize.net *.authorize.net *.4over.com 'self' 'self' 'unsafe-inline'; img-src data: *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.google.com www.google-analytics.com *.googleapis.com map.googleapis.com maps.googleapis.com *.googletagmanager.com *.google.com.ua *.google.ca *.google.co.in *.crazyegg.com *.licdn.com *.facebook.net *.facebook.com *.zoominfo.com *.adsrvr.org *.cloudfront.net js.authorize.net *.authorize.net 'self' * *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com map.googleapis.com maps.googleapis.com *.googletagmanager.com *.google.com.ua *.google.ca *.google.co.in *.crazyegg.com *.licdn.com *.facebook.net *.facebook.com *.zoominfo.com *.clickagy.com *.adsrvr.org *.hs-scripts.com *.hsleadflows.net *.hs-banner.com *.hsadspixel.net *.hs-analytics.net *.usemessages.com *.hubspotfeedback.com *.cloudfront.net js.authorize.net *.authorize.net *.4over.com 'self' *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.google.com www.google-analytics.com www.googleadservices.com *.googleapis.com map.googleapis.com maps.googleapis.com *.googletagmanager.com *.google.com.ua *.google.ca *.google.co.in *.adobedtm.com *.crazyegg.com *.licdn.com *.facebook.net *.facebook.com *.zoominfo.com *.adsrvr.org *.cloudfront.net js.authorize.net *.authorize.net 'self' * *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.google.com www.google-analytics.com www.googleadservices.com *.googleapis.com map.googleapis.com maps.googleapis.com *.googletagmanager.com *.google.com.ua *.google.ca *.google.co.in *.adobedtm.com *.crazyegg.com *.licdn.com *.facebook.net *.facebook.com *.zoominfo.com *.adsrvr.org *.cloudfront.net js.authorize.net *.authorize.net 'self' * 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com map.googleapis.com maps.googleapis.com *.googletagmanager.com *.google.com.ua *.google.ca *.google.co.in *.adobe.com *.adobedtm.com *.crazyegg.com *.licdn.com *.facebook.net *.facebook.com *.zoominfo.com *.clickagy.com *.adsrvr.org *.linkedin.com *.hubspot.com *.hubapi.com *.trustpilot.com *.cloudfront.net js.authorize.net *.authorize.net *.4over.com 'self' t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.google-analytics.com https://acsbapp.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://translate.google.com https://translate.googleapis.com https://translate-pa.googleapis.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://www.gstatic.com; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://*.ingest.sentry.io https://*.ingest.us.sentry.io https://*.houstonairports.mobi https://pcal1pbho5.execute-api.us-east-1.amazonaws.com https://a.locuslabs.com https://img.locuslabs.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://acsbapp.com https://*.acsbapp.com https://translate.googleapis.com https://translate-pa.googleapis.com https://*.doubleclick.net https://www.google.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://*.googletagmanager.com https://houston.wherewefly.com https://iahmaps.fly2houston.com https://houmaps.fly2houston.com https://*.booking.fly2houston.com https://survey3.medallia.com https://consentcdn.cookiebot.com; upgrade-insecure-requests 1
font-src www.paypalobjects.com *.googleapis.com https://*.gstatic.com data: https://*.cookiebot.com https://*.typekit.net *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net *.cloudfront.net *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.typekit.net *.klarnacdn.net fonts.gstatic.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com https://*.doubleclick.net https://*.paypal.com https://*.trustpilot.com https://*.salesfire.co.uk https://*.cookiebot.com https://*.google.com https://*.hotjar.com *.google.com *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://*.paypal.com https://*.salesfire.co.uk https://*.cookiebot.com https://*.doubleclick.net https://*.google.com https://*.google.co.uk *.cloudfront.net *.klevu.com *.ksearchnet.com https://firebasestorage.googleapis.com *.reviews.io *.reviews.co.uk *.salesfire.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page *.googleapis.com https://www.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://*.cloudfront.net https://*.google-analytics.com https://*.doubleclick.net https://*.paypal.com https://*.trustpilot.com https://*.salesfire.co.uk https://*.smartmetrics.co.uk https://*.cookiebot.com https://*.pcapredict.com/js/sensor.js https://www.googletagmanager.com https://www.google.com https://*.hotjar.com https://secure.leadforensics.com https://*.googleapis.com *.klevu.com *.ksearchnet.com *.avada.io *.shopify.com *.google.com *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://js.klevu.com https://www.heamar.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com https://*.cloudfront.net https://*.googleapis.com https://*.salesfire.co.uk https://*.cookiebot.com https://*.typekit.net *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net *.cloudfront.net *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.typekit.net *.stripe.network *.stripecdn.com *.amazon.com https://www.heamar.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://*.cloudfront.net https://*.cookiebot.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://*.freshdesk.com https://*.hotjar.com wss://*.hotjar.com https://*.googleapis.com https://*.cloudfront.net https://*.cookiebot.com wss://*.cookiebot.com api.addressy.com https://*.adobedc.net https://*.nr-data.net *.klevu.com *.ksearchnet.com https://get.geojs.io *.avada.io *.cloudfront.net *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.smartmetrics.co.uk *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp.deploy.co.uk/019b0385-48f2-71e4-b630-d188b00601f3; report-to report-endpoint; 1
default-src 'self'; object-src 'none'; base-uri 'none'; script-src 'nonce-3f9d53f7017649662ae059164976a3da' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https: http: blob:; connect-src 'self' https: wss:; frame-src 'self' https: http:; media-src 'self' https: http:; worker-src 'self' blob: 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.doubleclick.net *.googlesyndication.com *.google.com *.microsoft.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.gstatic.com data: cdn.jsdelivr.net; img-src * data: blob:; connect-src *; frame-src *; media-src *; report-uri /api/csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.stape.io *.fontawesome.com https://fonts.bunny.net *.cloudflare.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.hotjar.com *.trustedshops.com *.googleapis.com *.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline' *.twitter.com *.facebook.com sso.uniway.es 'self' 'unsafe-inline'; frame-ancestors https://www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.stripe.com *.google.com/ *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.stape.io js.mollie.com *.stripe.com 'self' 'unsafe-inline' *.twitter.com https://www.google.com https://www.google.co.in https://www.facebook.com *.doubleclick.net *.hubspot.com https://www.googletagmanager.com *.hsforms.net *.hs-sites.com *.hotjar.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com https://www.magezon.com magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com *.stape.io https://firebasestorage.googleapis.com https://www.mollie.com *.hsappstatic.net *.cloudflare.com 'self' 'unsafe-inline' *.hotjar.com *.google.co.in https://www.facebook.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.connect.facebook.net https://d.adroll.com https://pixel.advertising.com https://pixel.rubiconproject.com https://simage2.pubmatic.com https://dsum-sec.casalemedia.com https://ads.yahoo.com https://eb2.3lift.com https://sync.outbrain.com https://trc.taboola.com https://x.bidswitch.net/sync https://ib.adnxs.com https://idsync.rlcdn.com https://us-u.openx.net https://ups.analytics.yahoo.com https://segments.company-target.com https://sync.tidaltv.com *.hsforms.com *.hubspot.com *.linkedin.com *.google.es *.uniway.es *.adsymptotic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com *.stripe.com *.google.com/ *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.stape.io *.avada.io *.shopify.com js.mollie.com *.cloudflare.com 'self' 'unsafe-inline' *.twitter.com *.google.co.in *.facebook.com *.googleapis.com *.googleadservices.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://connect.facebook.net *.paypalobjects.com *.paypal.com https://chimpstatic.com https://s.adroll.com https://d.adroll.com https://d.adroll.mgr.consensu.org *.bootstrapcdn.com *.trackedlink.net *.mailmunch.co *.hs-scripts.com *.hs-analytics.net *.hsadspixel.net *.hscollectedforms.net *.hs-banner.com *.hsforms.net *.hsforms.com *.licdn.com *.usemessages.com *.hsleadflows.net *.jquery.com *.hotjar.com *.hubspot.com https://googleads.g.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.googletagmanager.com *.stape.io *.fontawesome.com https://fonts.bunny.net *.cloudflare.com 'self' 'unsafe-inline' *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.youtube.com *.hotjar.com *.bootstrapcdn.com *.mailmunch.co 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog *.stape.io https://get.geojs.io *.avada.io *.cloudflare.com *.twitter.com 'self' 'unsafe-inline' *.twimg.com *.google.co.in *.facebook.com *.mailmunch.co *.hubspot.com *.hubapi.com *.hsforms.com *.hscollectedforms.net *.linkedin.oribi.io *.linkedin.com *.hotjar.com *.hotjar.io wss://*.hotjar.com sso.uniway.es 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.uniway.es/; report-to report-endpoint; 1
default-src amplitude.com *.amplitude.com cash.app *.cash.app cloudflare.com *.cloudflare.com cloudflareinsights.com *.cloudflareinsights.com datatables.net *.datatables.net doubleclick.net *.doubleclick.net google-analytics.com *.google-analytics.com google.com *.google.com googletagmanager.com *.googletagmanager.com jquery.com *.jquery.com paypal.com *.paypal.com sentry.io *.sentry.io tiny.cloud *.tiny.cloud tinymce.com *.tinymce.com citconpay.com *.citconpay.com facebook.net *.facebook.net google.co.uk *.google.co.uk kcp.co.kr *.kcp.co.kr ngrok-free.app *.ngrok-free.app sift.com *.sift.com 'unsafe-inline' 'unsafe-eval' 'self'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=U6dyJbLKpcDCYdD9GnpQ2NXVytxKJTH0izFvUnqrZw0-1789271557.1656833-1.0.1.1-vQWYAPL1olM7DhFtJPspPzwzAE1WgsYZTwKoYd.ciVDCSBZjt9r0LTPh2E4CPW0yK4uieMNrrXsusR_ufr7ARLvpL1xI4Rinks9D7omgPcQz13U.pWiGnMPGLY6OMaeg2Qj3xnN02HJVkL4nmKCtJ_ltwxt4THiac1CQaGbWZGXIQukzNj_7j8YE85ep9x1z; report-to cf-rqljpgnupbyixwhp 1
object-src 'none';base-uri 'self';script-src 'nonce-c4wGtlI73ZYh_Xrt2B7RxA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com chimpstatic.com downloads.mailchimp.com *.list-manage.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; child-src 'self'; connect-src 'self' https://*.clarity.ms https://ad.doubleclick.net https://cdn.auth0.com https://consent.app.cookieinformation.com https://cta-eu1.hubspot.com https://cta-service-cms2.hubspot.com https://forms-eu1.hsforms.com https://forms.hsforms.com https://js.monitor.azure.com https://maps.googleapis.com https://ms01.nasjonalmuseet.no https://northeurope-2.in.applicationinsights.azure.com https://o4509280890519552.ingest.de.sentry.io https://perf-eu1.hsforms.com https://perf-na1.hsforms.com https://policy.app.cookieinformation.com https://prod-nasjonalmuseet-favorites-api.azurewebsites.net https://region1.analytics.google.com https://region1.google-analytics.com https://shop.nasjonalmuseet.no https://www.facebook.com https://www.google-analytics.com https://www.google.com https://www.google.no https://www.googletagmanager.com https://www.nasjonalmuseet.no; default-src 'self'; font-src 'self' data: https://*.cloudfront.net/graphik/ https://*.cloudfront.net/lato/ https://fonts.gstatic.com; form-action 'self' https://forms-eu1.hsforms.com https://forms.hsforms.com https://www.facebook.com; frame-ancestors 'self'; frame-src 'self' https://11993474.fls.doubleclick.net https://auth.nasjonalmuseet.no https://discover.matterport.com https://forms-eu1.hsforms.com https://forms.hsforms.com https://matterport.com https://ms01.nasjonalmuseet.no https://my.matterport.com https://policy.app.cookieinformation.com https://www.facebook.com https://www.instagram.com https://www.youtube.com; img-src 'self' data: https://ad.doubleclick.net https://ade.googlesyndication.com https://c.clarity.ms https://cdn.auth0.com https://connect.facebook.net https://forms-eu1.hsforms.com https://forms-na1.hsforms.com https://i.ytimg.com https://img.youtube.com https://maps.googleapis.com https://maps.gstatic.com https://ms01.nasjonalmuseet.no https://perf-eu1.hsforms.com https://perf-na1.hsforms.com https://shop.nasjonalmuseet.no https://track-eu1.hubspot.com https://track.hubspot.com https://www.facebook.com https://www.google.no https://www.googletagmanager.com https://www.nasjonalmuseet.no; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' https://apis.google.com https://cdn.auth0.com https://cdn.eu.auth0.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://common.optimizely.com https://connect.facebook.net https://js-eu1.hs-analytics.net https://js-eu1.hs-banner.com https://js-eu1.hs-scripts.com https://js-eu1.hubspot.com https://js-na1.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://js.hsforms.net https://js.hubspot.com https://js.monitor.azure.com https://maps.googleapis.com https://policy.app.cookieinformation.com https://scripts.clarity.ms https://www.clarity.ms https://www.google-analytics.com https://www.googletagmanager.com https://www.instagram.com; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com; style-src 'self' 'unsafe-inline'; manifest-src https://www.nasjonalmuseet.no; media-src https://gamma.nasjonalmuseet.no https://www.nasjonalmuseet.no; worker-src blob:; report-to stott-security-endpoint; 1
default-src 'self' sf-tbid.okta.com tbid.digital.salesforce.com *.oktacdn.com; connect-src 'self' sf-tbid.okta.com sf-tbid-admin.okta.com tbid.digital.salesforce.com *.oktacdn.com *.mixpanel.com *.mapbox.com sf-tbid.kerberos.okta.com sf-tbid.mtls.okta.com *.authenticatorlocalprod.com:8769 http://localhost:8769 http://127.0.0.1:8769 *.authenticatorlocalprod.com:65111 http://localhost:65111 http://127.0.0.1:65111 *.authenticatorlocalprod.com:65121 http://localhost:65121 http://127.0.0.1:65121 *.authenticatorlocalprod.com:65131 http://localhost:65131 http://127.0.0.1:65131 *.authenticatorlocalprod.com:65141 http://localhost:65141 http://127.0.0.1:65141 *.authenticatorlocalprod.com:65151 http://localhost:65151 http://127.0.0.1:65151 https://oinmanager.okta.com data: *.ingest.sentry.io https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; script-src 'unsafe-inline' 'unsafe-eval' 'self' 'report-sample' sf-tbid.okta.com tbid.digital.salesforce.com *.oktacdn.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'unsafe-inline' 'self' 'report-sample' sf-tbid.okta.com tbid.digital.salesforce.com *.oktacdn.com; frame-src 'self' sf-tbid.okta.com sf-tbid-admin.okta.com tbid.digital.salesforce.com login.okta.com *.vidyard.com com-okta-authenticator: https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; img-src 'self' sf-tbid.okta.com tbid.digital.salesforce.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: blob:; font-src 'self' sf-tbid.okta.com tbid.digital.salesforce.com data: *.oktacdn.com fonts.gstatic.com; frame-ancestors 'self' https://iis.digital.salesforce.com 1
object-src 'none';base-uri 'self';script-src 'nonce-9wtqFLY3Qj6n9pfk8P4nKA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; worker-src 'self' blob:; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://*.tile.opentopomap.org https://api.summitx.info https://*.google.com https://*.googleapis.com; frame-src 'self' https://www.youtube.com https://player.vimeo.com https://vk.com; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'nonce-1Pc52woY6MkaX36tfBfVjK9gRVf5j4+v2GCAYDTY9wc=' 'strict-dynamic' https:; style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net; img-src 'self' data: https://checkout.saphe.com https://cdn.shopify.com https://*.trustpilot.com; media-src 'self' https://checkout.saphe.com; font-src 'self' data: https://use.typekit.net https://p.typekit.net; connect-src 'self' https://use.typekit.net https://p.typekit.net https://www.google.com https://www.gstatic.com https://*.trustpilot.com https://www.googletagmanager.com https://connect.facebook.net https://analytics.tiktok.com https://consent.cookiebot.com https://consentcdn.cookiebot.eu https://www.clarity.ms; frame-src https://load.sst.saphe.com https://www.google.com https://*.trustpilot.com https://consent.cookiebot.com https://consentcdn.cookiebot.eu; frame-ancestors 'self'; form-action 'self' https://checkout.saphe.com; object-src 'none'; base-uri 'self'; require-trusted-types-for 'script'; 1
default-src 'self' cumulusmedia.com www.cumulusmedia.com 'report-sample'; base-uri 'self'; script-src 'nonce-OFj8yT/ZbNmPof658JkFKW1u' 'self' 'inline-speculation-rules' cumulusmedia.com www.cumulusmedia.com 'sha256-MhtPZXr7+LpJUY5qtMutB+qWfQtMaPccfe7QXtCcEYc=' *.googletagmanager.com 'sha256-GyUsdBtdHKlqtQSzGDSvNCHPdK8s1GO2S2y9jj4oYog=' *.google-analytics.com stats.wp.com 'sha256-+zMjo4vywISTRiN+RDp+W665czd5i8MOxiovBqr69F0=' 'sha256-X7SYke/fTbXP5LTn1g56zfcWCiSzQpGhzSLHvvNm0jo=' form.jotform.com cdn.jotfor.ms *.cookielaw.org 'sha256-iqOPaRlwwgtNy7J3vh/+LSW9/QVdN+Fl+YfMS8+GcPo=' *.onetrust.com connect.facebook.net s3.tradingview.com https://www.google.com/recaptcha/ https://challenges.cloudflare.com/turnstile/ 'sha256-riitXBKGtl5y5ccA7GF6ccqJuwEVP5tm8j0ff/fbw9U=' 'sha256-k8zlbQ8Yw3tO1mzGrtP0m5BxCIEa+iH8LXA4dctSEMI=' 'sha256-wBhUGm/Lzl4TA4tJsiguA/vnV9LaNE6plmk4Xn/6/Mw=' 'sha256-6wRdeNJzEHNIsDAMAdKbdVLWIqu8b6+Bs+xVNZqplQw=' 'sha256-5oZoxPs07HkLGv2K/yyNWiLlCvxwJuQdhXLKg2AXhT0=' 'sha256-U6RUMq5+odqSjfOrLU4UryQNhktP4MuDKOApor+55jo=' 'unsafe-inline' 'unsafe-eval' 'report-sample'; style-src 'self' 'unsafe-inline' cumulusmedia.com www.cumulusmedia.com fonts.googleapis.com cdn.jotfor.ms 'report-sample'; img-src 'self' data: cumulusmedia.com www.cumulusmedia.com player.cumulusmedia.com *.wp.com *.googletagmanager.com *.google-analytics.com *.cookielaw.org *.jotform.com; font-src 'self' data: cumulusmedia.com www.cumulusmedia.com fonts.gstatic.com https://www.google.com/recaptcha/; connect-src 'self' cumulusmedia.com www.cumulusmedia.com player.cumulusmedia.com *.google-analytics.com https://www.google.com/g/collect www.googletagmanager.com *.doubleclick.net submit.jotform.com *.cookielaw.org *.onetrust.com; object-src 'none'; frame-src 'self' cumulusmedia.com www.cumulusmedia.com *.jotform.com *.youtube.com s.tradingview.com www.tradingview-widget.com challenges.cloudflare.com; report-uri https://www.cumulusmedia.com/wp-admin/admin-ajax.php?action=wpshr 1
default-src 'none'; base-uri 'self'; connect-src 'self' https://www.google-analytics.com; font-src 'self' https://fonts.gstatic.com; frame-ancestors 'none'; frame-src https://www.google.com; img-src 'self' https://www.google-analytics.com; manifest-src 'self'; media-src 'self'; object-src 'none'; script-src 'report-sample' 'self' https://s.go-mpulse.net https://www.googletagmanager.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'report-sample' 'self' https://fonts.googleapis.com; worker-src 'none' 1
default-src https: 'unsafe-inline' 'unsafe-eval'; report-uri https://www.allesedv.at/mixedContentReporting.php 1
default-src 'self'; base-uri 'none'; object-src 'none'; form-action https:; img-src 'self' https: data: blob:; font-src 'self' https: data:; style-src 'self' 'unsafe-inline' https:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https: data: blob:; media-src 'self' https: data:; worker-src 'self' blob:; frame-src https:; manifest-src 'self' https:; 1
object-src 'none';base-uri 'self';script-src 'nonce-O9sdOlQ7qQkd6748DLMbig' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'strict-dynamic' 'nonce-920fdb9ce30bd32676a1b6bc52a048be' 'unsafe-inline' 'unsafe-eval' https: ; frame-ancestors 'self' ; base-uri 'self'; object-src 'none'; report-uri https://csp.phenompeople.com/violations; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://cdn.leadster.com.br; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https: http:; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https: wss:; frame-src 'self' https://*.facebook.com https://www.youtube.com https://www.youtube-nocookie.com; object-src 'none'; base-uri 'self' 1
default-src 'self'; script-src 'self' inline 'unsafe-eval'; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline'; script-src-attr 'self' 'unsafe-inline' inline; style-src 'self' 'unsafe-inline'; style-src-attr 'self' 'unsafe-inline' inline; style-src-elem 'self' 'unsafe-inline' blob:; object-src 'none'; base-uri 'self'; connect-src 'self'; font-src 'self' data:; frame-src 'self'; img-src 'self' data:; manifest-src 'self'; media-src 'self'; worker-src 'none'; report-uri /CspReportLogger.php 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'nonce-YxccWxwWYBEanrivUCgv1g==' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; style-src https: http: data: 'unsafe-inline'; img-src https: http: blob: data:; frame-src 'self' https: http: blob:; worker-src blob: 'self' https: http:; font-src data: 'self' https: http:; connect-src 'self' https: http: blob:; frame-ancestors 'self'; 1
font-src https://cdnjs.cloudflare.com https://static.payzen.eu/static/ *.oney.io *.staging.oney.io https://fonts.gstatic.com *.fontawesome.com *.typekit.net https://static.lyra.com/static/ maxcdn.bootstrapcdn.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://secure.payzen.eu/vads-payment/ https://api.payzen.eu/api-payment/ https://static.payzen.eu/static/ *.facebook.com https://secure.lyra.com/vads-payment/ https://api.lyra.com/api-payment/ https://static.lyra.com/static/ 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com js.stripe.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://secure.payzen.eu/vads-payment/ https://static.payzen.eu/static/ *.hipay-tpp.com *.hipay.com *.paypal.com *.googleapis.com *.avis-verifies.com *.botnation.ai *.doubleclick.net *.facebook.com *.googletagmanager.com *.hotjar.com *.zenaps.com https://secure.lyra.com/vads-payment/ https://static.lyra.com/static/ *.myspectro.io *.kxcdn.com *.weltpixel.com js.mollie.com www.xtento.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com https://images.unsplash.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de axeptio.imgix.net https://secure.payzen.eu/static/latest/images/type-carte/ https://static.payzen.eu/static/ https://secure.payzen.eu/vads-payment/ *.hipay.com *.google.com *.oney.io *.staging.oney.io https://www.google.fr https://api.mapbox.com *.tile.openstreetmap.org *.avis-verifies.com *.awin1.com *.bing.com *.clarity.ms *.facebook.com *.analytics.google.com *.lacompagniedesanimaux.com *.netreviews.eu *.twgdns.com *.zenaps.com *.youtube.com *.vumbnail.com https://secure.lyra.com/static/latest/images/type-carte/ https://static.lyra.com/static/ https://secure.lyra.com/vads-payment/ https://www.mollie.com https://maps.googleapis.com https://maps.gstatic.com *.gstatic.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.google.com/recaptcha/ www.gstatic.com/recaptcha/ js.stripe.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.axept.io https://cdnjs.cloudflare.com https://api.payzen.eu/api-payment/ https://static.payzen.eu/static/ widget.freshworks.com m2epro.freshdesk.com *.hipay-tpp.com *.hipay.com mpsnare.iesnare.com *.paypal.com *.googleapis.com *.oney.io *.staging.oney.io *.avis-verifies.com *.bing.com *.botnation.ai *.clarity.ms *.doubleclick.net *.dwin1.com *.facebook.net *.analytics.google.com *.hotjar.com *.iadvize.com *.newrelic.com *.nr-data.net *.remisesetprivileges.fr *.roeyecdn.com *.sciencebehindecommerce.com *.skeepers.io *.twenga.fr *.zdassets.com *.zenaps.com https://api.lyra.com/api-payment/ https://static.lyra.com/static/ *.myspectro.io *.kxcdn.com s.kk-resources.com js.mollie.com *.googletagmanager.com *.googleadservices.com *.google.com *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://fonts.googleapis.com https://cdnjs.cloudflare.com https://static.payzen.eu/static/ widget.freshworks.com m2epro.freshdesk.com *.hipay.com *.googleapis.com *.fontawesome.com *.botnation.ai *.jsdelivr.net *.typekit.net https://static.lyra.com/static/ maxcdn.bootstrapcdn.com *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src data: mpsnare.iesnare.com *.googleapis.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com https://maps.googleapis.com https://player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de api.axept.io client.axept.io https://secure.payzen.eu/vads-payment/ https://api.payzen.eu/api-payment/ widget.freshworks.com m2epro.freshdesk.com *.hipay-tpp.com *.hipay.com wss://mpsnare.iesnare.com *.google.com *.oney.io *.staging.oney.io *.fact-finder.de *.fact-finder.com *.fact-finder.co.uk *.fact-finder.fr *.fact-finder.pl *.fact-finder.it *.fact-finder.at *.fact-finder.ch *.fact-finder.cloud https://nominatim.openstreetmap.org *.botnation.ai *.clarity.ms *.doubleclick.net *.google-analytics.com *.analytics.google.com *.googleapis.com *.iadvize.com *.nr-data.net *.remisesetprivileges.fr *.sciencebehindecommerce.com *.zdassets.com *.zendesk.com https://secure.lyra.com/vads-payment/ https://api.lyra.com/api-payment/ *.myspectro.io *.kxcdn.com s.kelkoogroup.net *.hotjar.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src https://secure.payzen.eu/vads-payment/ https://api.payzen.eu/api-payment/ https://static.payzen.eu/static/ https://secure.lyra.com/vads-payment/ https://api.lyra.com/api-payment/ https://static.lyra.com/static/ 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src https://fonts.gstatic.com userlike-cdn-umm.b-cdn.net *.gstatic.com data: *.cloudfront.net *.mey.com app.usercentrics.eu 'self';form-action secure.authorize.net pilot-payflowlink.paypal.com www.facebook.com 'self' 'unsafe-inline';frame-ancestors https://*.etracker.com www.gstatic.com 'self';frame-src *.frcapi.com *.google.com vimeo.com charger-v2.trbo.com static.trbo.com track2.trbo.com collect.trbo.com https://www.googletagmanager.com https://td.doubleclick.net *.youtube-nocookie.com https://collect.mey.com https://*.criteo.com userlike-cdn-umm.b-cdn.net userlike-cdn-widgets.s3-eu-west-1.amazonaws.com api.userlike.com https://static.criteo.net *.zenaps.com *.awin1.com bid.g.doubleclick.net ct.pinterest.com www.awin1.com fast.amc.demdex.net *.adobe.com secure.authorize.net www.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.googletagmanager.com *.adyen.com www.google.com ad.ad-srv.net *.adsrvr.org *.fls.doubleclick.net www.facebook.com opt.kuponacdn.de gum.criteo.com pixel.mathtag.com pp.payengine.de checkoutshopper.adyen.com/ 'self' 'unsafe-inline';img-src *.google.at *.3lift.com ad.360yield.com *.adfarm1.adition.com *.adition.com *.adnxs.com *.adobe.com *.adscale.de ads.creative-serving.com *.ad.smaato.net ad.sxp.smartclip.net ads.yahoo.com *.adyen.com ad.yieldlab.net aggregator.service.usercentrics.eu amcglobal.sc.omtrdc.net api.usercentrics.eu app.usercentrics.eu assets.adobedtm.com *.awin1.com bat.bing.com beacon.krxd.net *.behance.net *.bidswitch.net *.bing.com *.casalemedia.com *.cdninstagram.com cdn.stickyadstv.com checkoutshopper.adyen.com/ *.clarity.ms *.cloudfront.net cm.adform.net cm.everesttech.net collect.trbo.com contextual.media.net cotads.adscale.de *.criteo.com criteo-partners.tremorhub.com criteo-sync.teads.tv ct.pinterest.com *.doubleclick.net dpm.demdex.net *.emxdgt.com exchange.mediavine.com fpdbs.paypal.com *.ftcdn.net *.g.doubleclick.net googleads.g.doubleclick.net *.googleapis.com *.google.com *.google.de *.googleusercontent.com *.gstatic.com https://*.google.ch https://*.google.nl https://googleads.g.doubleclick.net https://*.googleapis.com https://google.com https://*.gstatic.com https://*.outbrain.com https://pagead2.googlesyndication.com https://*.roeye.com https://www.googleadservices.com https://www.googletagmanager.com https://www.wepowerconnections.com id5-sync.com i.ytimg.com *.liadm.com matching.ivitrack.com match.sharethrough.com *.mey.com *.pinterest.com pixel.mathtag.com pixel.rubiconproject.com *.pubmatic.com *.smartadserver.com sp.analytics.yahoo.com static.trbo.com stats.g.doubleclick.net s.thebrighttag.com *.stickyadstv.com sync-criteo.ads.yieldmo.com sync.outbrain.com *.taboola.com t.paypal.com track2.trbo.com *.twiago.com *.uimserv.net ups.analytics.yahoo.com *.usercentrics.eu userlike-cdn-operators.s3-eu-west-1.amazonaws.com userlike-cdn-operators.userlike.com userlike-cdn-web.b-cdn.net userlike-store-media-files.s3.amazonaws.com *.vimeocdn.com visitor.omnitagjs.com widgets.magentocommerce.com www.awin1.com www.etracker.de www.facebook.com www.googleadservices.com www.google-analytics.com www.google.com www.google.de www.googletagmanager.com www.paypal.com www.paypalobjects.com www.userlike.com *.zenaps.com 'self';script-src *.adform.net *.adnxs.com *.adobe.com *.adyen.com api.userlike.com api-v4.trbo.com app.theadx.com app.usercentrics.eu assets.adobedtm.com *.awin1.com bam.eu01.nr-data.net bam.nr-data.net bat.bing.com browser.sentry-cdn.com browser-update.org cdn.polyfill.io charger-v2.trbo.com *.clarity.ms *.cloudfront.net collect.mey.com connect.facebook.net ct.pinterest.com *.dt51.net *.etracker.com *.etracker.de googleads.g.doubleclick.net *.google-analytics.com *.googleapis.com *.google.com *.google.de *.googletagmanager.com *.googleusercontent.com *.gstatic.com https://*.criteo.com https://*.ggpht.com https://googleads.g.doubleclick.net https://*.googleapis.com https://googletagmanager.com https://*.gstatic.com https://*.outbrain.com https://pagead2.googlesyndication.com https://*.roeyecdn.com https://tagmanager.google.com https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com jquery.sellxed.com js.adsrvr.org js-agent.newrelic.com js.braintreegateway.com *.kuponacdn.de mastertag.kpcustomer.de *.mey.com opt.kuponacdn.de pixel.mathtag.com platform.instagram.com player.vimeo.com secure.authorize.net s.pinimg.com sslwidget.criteo.com static.criteo.net static.shopgate.com static.trbo.com s.ytimg.com tagmanager.google.com the.sciencebehindecommerce.com t.paypal.com *.usercentrics.eu userlike-cdn-umm.b-cdn.net userlike-cdn-widgets.s3-eu-west-1.amazonaws.com *.vimeocdn.com vimeo.com www.awin1.com www.dwin1.com www.googleadservices.com www.google-analytics.com www.googleapis.com www.google.com www.googleoptimize.com www.gstatic.com www.instagram.com www.paypal.com www.paypalobjects.com www.vimeo.com *.zenaps.com 'self' 'unsafe-inline' 'unsafe-eval';style-src https://fonts.googleapis.com static.trbo.com https://tagmanager.google.com https://googletagmanager.com https://www.googletagmanager.com *.adobe.com fonts.googleapis.com *.usercentrics.eu *.cloudfront.net *.mey.com *.googleapis.com *.gstatic.com app.usercentrics.eu 'self' 'unsafe-inline';object-src 'self' 'unsafe-inline';media-src *.cdninstagram.com www.userlike.com userlike-store-media-files.s3.amazonaws.com userlike-cdn-umm.b-cdn.net *.adobe.com blob: 'self' 'unsafe-inline';manifest-src 'self' 'unsafe-inline';connect-src https://*.gstatic.com https://*.googleapis.com www.instagram.com platform.instagram.com *.cdninstagram.com data.trbo.com newsletter-api.trbo.com api-v4.trbo.com *.snplow.net commerce.adobedc.net *.adobe.io https://www.google.com https://google.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://player.vimeo.com vimeo.com http://bat.bing.net https://*.outbrain.com www.userlike.com userlike-cdn-web.b-cdn.net umd.userlike.com wss://umd.userlike.com ct.pinterest.com https://*.etracker.de https://*.criteo.com https://*.wepowerconnections.com https://*.g.doubleclick.net https://*.google.com https://*.google.de https://*.google.ch https://*.google.nl https://*.google.at https://collect.mey.com https://*.googletagmanager.com *.addressy.com maps.googleapis.com userlike-cdn-umm.b-cdn.net api.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com sentry.mey.netz98.org eu-api.friendlycaptcha.eu www.etracker.de www.facebook.com www.clarity.ms dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.paypalobjects.com www.paypal.com *.adyen.com stats.g.doubleclick.net mey.dvinci-hr.com bam.eu01.nr-data.net the.sciencebehindecommerce.com *.usercentrics.eu bat.bing.com *.pinterest.com *.google-analytics.com *.maps.googleapis.com *.mey.com *.cloudfront.net *.clarity.ms www.googletagmanager.com api.usercentrics.eu aggregator.service.usercentrics.eu blob: 'self'  'unsafe-inline';child-src userlike-cdn-umm.b-cdn.net userlike-cdn-widgets.s3-eu-west-1.amazonaws.com api.userlike.com http: https: blob: 'self' 'unsafe-inline';default-src https://*.outbrain.com https://*.clarity.ms https://c.bing.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval';base-uri 'self' 'unsafe-inline';report-uri https://sentry.mey.netz98.org/api/2/security/?sentry_key=81ac2c0efc304bedbb370dc8e745b346&sentry_environment=production;report-to csp-endpoint; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://*.mogucdn.com https://*.mogucdn.com http://*.juangua.com https://*.juangua.com http://*.meilishuo.com https://*.meilishuo.com http://*.meilishuo.net https://*.meilishuo.net http://*.mogujie.com https://*.mogujie.com http://*.qq.com https://*.qq.com http://*.mogujie.org https://*.mogujie.org http://*.meili-inc.com https://*.meili-inc.com http://*.mogu.com https://*.mogu.com http://*.mogu-inc.com https://*.mogu-inc.com; report-uri http://sd.mogujie.com/index.php 1
connect-src 'self' *.posthog.com *.cybaa.io cybaa.kinde.com *.eu.kinde.com cloudflareinsights.com https://api.stripe.com; font-src cdnjs.cloudflare.com use.fontawesome.com fonts.gstatic.com 'self'; frame-src https://js.stripe.com https://*.js.stripe.com *.cybaa.io; img-src 'self' https: data:; manifest-src 'self' cybaa.cloudflareaccess.com; script-src-elem 'self' 'report-sha256' https://js.stripe.com/v3/pricing-table.js https://js.stripe.com/v3/buy-button.js *.cybaa.io cdnjs.cloudflare.com 'unsafe-inline' static.cloudflareinsights.com *.posthog.com; style-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com use.fontawesome.com; script-src 'self' 'report-sha256' 'wasm-unsafe-eval' 'unsafe-eval' *.cybaa.io 'unsafe-inline' static.cloudflareinsights.com https://*.js.stripe.com https://js.stripe.com; frame-ancestors https://*.cybaa.io; worker-src 'self' blob: data:; report-uri https://cybaa.report-uri.com/r/d/csp/enforce; report-to default 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' 'unsafe-inline' chrome-extension: https://mc.yandex.ru https://cloud.roistat.com https://flyflat.market https://uos.unistroyrf.ru https://cllctr.roistat.com https://ymdxm3qa9p.ru https://connect.facebook.net 127.0.0.1:8182 127.0.0.1:8888 127.0.0.1:5005; frame-src 'self' https://cloud.roistat.com chrome-extension: https://mc.yandex.ru https://mc.yandex.com https://quiz.marquiz.ru https://www.youtube.com https://uos.unistroyrf.ru; object-src 'self'; report-uri /cspreportonly; 1
default-src 'self' https:; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' https: data:; font-src 'self' https: data:; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; frame-src 'self' https:; connect-src 'self' https: 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube.com *.ytimg.com *.wistia.com *.wistia.net *.qq.com *.gtimg.cn *.cookiefirst.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.doubleclick.net *.linkedin.com snap.licdn.com *.facebook.com *.facebook.net connect.facebook.net *.dynamics.com *.microsoftonline.com *.friendlycaptcha.com friendlycaptcha.com *.heraeus-web.com *.cookiefirst.com; script-src-elem 'self' 'unsafe-inline' *.youtube.com *.wistia.com *.wistia.net *.qq.com *.cookiefirst.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.linkedin.com *.facebook.com *.facebook.net *.dynamics.com *.friendlycaptcha.com *.sociablekit.com localtesting.com *.azureedge.net *.maptiler.com *.licdn.com *.heraeus-web.com; style-src 'self' 'unsafe-inline' *.wistia.com *.wistia.net *.friendlycaptcha.com *.sociablekit.com *.cookiefirst.com *.heraeus-web.com; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com *.heraeus-web.com *.cookiefirst.com *.sociablekit.com; img-src 'self' data: blob: *.youtube.com *.ytimg.com *.googlevideo.com *.wistia.com *.wistia.net *.qq.com *.gtimg.cn *.cookiefirst.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.doubleclick.net *.linkedin.com *.facebook.com *.facebook.net *.dynamics.com *.friendlycaptcha.com *.sociablekit.com *.azureedge.net *.heraeus.com *.heraeus-web.com; font-src 'self' data: *.wistia.com *.wistia.net *.heraeus-web.com; connect-src 'self' *.youtube.com *.wistia.com *.wistia.net *.qq.com *.cookiefirst.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.doubleclick.net *.linkedin.com *.facebook.com *.facebook.net *.dynamics.com *.microsoftonline.com *.friendlycaptcha.com friendlycaptcha.com *.heraeus-web.com *.accentapi.com *.heraeus.com *.azurewebsites.net *.azureedge.net *.sociablekit.com *.maptiler.com *.highcharts.com localtesting.com sgtm.argor-heraeus.com sgtm.heraeus-medical.com sgtm.heraeus-medevio.com sgtm.heraeus-electronics.com sgtm.heraeus-precious-metals.com sgtm.heraeus-printed-electronics.com sgtm.heraeus-remloy.com sgtm.heraeus-electro-nite.com sgtm.heraeus-epurio.com sgtm.heraeus-amloy.com sgtm.heraeus.com; frame-src 'self' *.youtube.com *.youtube-nocookie.com *.wistia.com *.wistia.net *.qq.com *.linkedin.com *.facebook.com *.dynamics.com *.friendlycaptcha.com friendlycaptcha.com *.powerapps.com *.heraeus-web.com *.heraeus.com heraeus.sharepoint.com login.microsoftonline.com sgtm.argor-heraeus.com sgtm.heraeus-medical.com sgtm.heraeus-medevio.com sgtm.heraeus-group.com sgtm.heraeus-electronics.com sgtm.heraeus-precious-metals.com sgtm.heraeus-printed-electronics.com sgtm.heraeus-remloy.com sgtm.heraeus-electro-nite.com sgtm.heraeus-epurio.com sgtm.heraeus-amloy.com sgtm.heraeus.com; frame-ancestors 'self' *.heraeus-web.com *.heraeus.com; media-src 'self' data: blob: *.wistia.com *.wistia.net *.licdn.com *.heraeus-web.com *.heraeus.com; child-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' *.dynamics.com; report-uri /api/csp-report 1
connect-src *; frame-src *; img-src https: data: blob: about: safari-extension: safari-resource: chrome-extension:; worker-src blob: https: 'unsafe-eval' 'unsafe-inline'; script-src https: 'unsafe-eval' 'unsafe-inline'; report-uri https://portfolio.ccpsx.com/api/v1/errors/csp 1
default-src 'self'; connect-src 'self' https://*.google-analytics.com https://*.brightcove.com https://*.boltdns.net https://*.brightcovecdn.com https://www.google.com; font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' https://info.mumc.nl https://www.google.com https://players.brightcove.net https://*.youtube.com https://*.vimeo.com https://heritage.mumc.nl https://www.googletagmanager.com https://tagging.mumc.nl; img-src 'self' https://metrics.brightcove.com https://*.boltdns.net https://*.ytimg.com data:; media-src 'self' https://*.brightcovecdn.com https://*.boltdns.net blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.texthelp.com https://*.browsealoud.com https://players.brightcove.net https://vjs.zencdn.net https://cdn.rawgit.com https://www.googletagmanager.com https://www.google-analytics.com https://apis.google.com https://www.google.com https://www.gstatic.com https://tagging.mumc.nl blob: cdn.jsdelivr.net https://cdn.jsdelivr.net https://unpkg.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com cdn.jsdelivr.net; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri https://www.mumc.nl/system/reporting/default; report-to default; block-all-mixed-content 1
font-src fonts.gstatic.com cdn.livechatinc.com stats.g.doubleclick.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.livechatinc.com *.dotit.com *.ncco.com dotit.wufoo.com stats.g.doubleclick.net 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.livechatinc.com stats.g.doubleclick.net dotit.wufoo.com www.wrike.com *.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.livechatinc.com *.disqus.com *.dotit.com *.ncco.com stats.g.doubleclick.net cp-ywz-382.chili-publish.online cp-ywz-382.chili-publish-sandbox.online https://img.youtube.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.livechatinc.com *.disqus.com stats.g.doubleclick.net chimpstatic.com *.wufoo.com www.youtube.com apis.google.com *.google.pl 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com stats.g.doubleclick.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.livechatinc.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.livechatinc.com stats.g.doubleclick.net *.analytics.google.com *.google-analytics.com dotit.wufoo.com *.smartystreets.com apis.google.com *.google.pl 'self' 'unsafe-inline'; child-src stats.g.doubleclick.net http: https: blob: 'self' 'unsafe-inline'; default-src stats.g.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri stats.g.doubleclick.net 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'sha256-Knh4mlq20bHznITMvrcrZU2hVo+VjHXVyTrX3DKkmLY=' 'sha256-unvNYDGBu3GxHPBptP6Ubjy2m3VNIY60Z2+0zmQSp7k=' 'sha256-UITiqbXyaWS7NpwiFrMIbdXAZy5EXLRUHkpylF4504k=' 'sha256-/QDhAVonS39JvspacR1qfqaLkxuuldkxr8HMAk/h9Go=' 'sha256-qq52vdXywbt3bQr/OyG/W7Rh6IDPqet6bHOCdPDfXj0=' 'sha256-OnxM/713rGNXGmXTcEJnMiTjlFjOsUKcREmGD4ErZHU=' 'sha256-BaM6WGQsQNlWi5s4XsDAMy466L5MJzTTvORn2E3rdXg=' https://www.browsealoud.com https://apis.google.com https://customer.cludo.com https://www.googletagmanager.com https://siteimproveanalytics.com https://connect.facebook.net https://ads.counciladvertising.net https://s3.eu-west-2.amazonaws.com https://bat.bing.com https://secure.quantserve.com https://rules.quantcount.com https://googleads.g.doubleclick.net; script-src-attr 'unsafe-inline'; style-src 'self'; style-src-elem 'self' 'unsafe-inline'; style-src-attr 'unsafe-inline'; img-src 'self' data: https://www.browsealoud.com https://browsealoud-webservices-8.texthelp.com https://browsealoud-webservices-eu.texthelp.com https://customer.cludo.com https://486329.global.siteimproveanalytics.io https://www.google.com https://www.google.co.uk https://www.facebook.com https://connect.facebook.net https://bat.bing.com https://pixel.quantserve.com https://www.googletagmanager.com; font-src 'self'; connect-src 'self' blob: https://*.speechstream.net https://www.browsealoud.com https://plus.browsealoud.com https://browsealoud-webservices-8.texthelp.com https://browsealoud-webservices-eu.texthelp.com https://ads.counciladvertising.net https://ad.doubleclick.net https://www.google.com https://pixel.quantserve.com https://region1.google-analytics.com https://www.googletagmanager.com https://bat.bing.com https://api.cludo.com; frame-src 'self' https://www.googletagmanager.com https://www.facebook.com/ https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://content.googleapis.com; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com/tr/ https://*.speechstream.net; media-src 'self' blob: https://*.speechstream.net; 1
upgrade-insecure-requests; script-src 'none'; object-src 'none'; frame-ancestors 'self' 1
image-src new.completepumpsupplies.co.uk test.completepumpsupplies.co.uk *.stripe.com *.google-analytics.com *.googletagmanager.com *.analytics.google.com *.g.doubleclick.net *.google.com *.cookiebot.com imgsct.cookiebot.com bat.bing.com c.clarity.ms tr-tc.lfeeder.com *.meetanshi.com; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com new.completepumpsupplies.co.uk *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.cloudfront.net *.reviews.io *.reviews.co.uk 'self' data: *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://plumrocket.com *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.stripe.com td.doubleclick.net www.googletagmanager.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de https://plumrocket.com *.reviews.io *.reviews.co.uk klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com services.postcodeanywhere.co.uk magefan.com cm.magefan.com *.disqus.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.doubleclick.net https://firebasestorage.googleapis.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com chimpstatic.com downloads.mailchimp.com *.list-manage.com new.completepumpsupplies.co.uk *.stripe.com *.googletagmanager.com maxcdn.bootstrapcdn.com *.cookiebot.com embed.tawk.to *.loqate.com cdn.loqate.com ruler.nyltx.com analytics.nyltx.com bat.bing.com sc.lfeeder.com www.clarity.ms api.addressy.com *.disqus.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.doubleclick.net s7.addthis.com *.avada.io *.shopify.com *.reviews.io *.reviews.co.uk *.hsforms.net *.hsforms.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com cdn.jsdelivr.net https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com new.completepumpsupplies.co.uk *.typekit.net embed.tawk.to api.addressy.com *.googleapis.com *.googletagmanager.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.gstatic.com 'self' 'unsafe-inline'; object-src https://new.completepumpsupplies.co.uk 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com new.completepumpsupplies.co.uk *.stripe.com *.googletagmanager.com *.g.doubleclick.net www.google.co.uk *.pcapredict.com api.loqate.com va.tawk.to api.addressy.com *.doubleclick.net *.googlesyndication.com ekr.zdassets.com/ https://get.geojs.io *.avada.io *.cloudfront.net *.reviews.io *.reviews.co.uk t.elasticsuite.io *.hsforms.net *.hsforms.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'none';   connect-src     'self'     analytics-ipv6.tiktokw.us     api.ldnfrpl.com     api.leadinfo.com     c.ba.contentsquare.net     cdn.cookielaw.org     collector.leadinfo.net     collector4.leadinfo.net     *.bing.com     *.bing.net     *.brightsg.com     *.clarity.ms     *.cloudflare.com     *.doubleclick.net     *.facebook.com     *.google-analytics.com     *.google.com     *.googleapis.com     *.googletagmanager.com     *.googlesyndication.com     *.hotjar.com     *.hotjar.io     *.hubapi.com     *.hubspot.com     *.linkedin.com     *.onetrust.com     *.reddit.com     *.redditstatic.com     *.tiktok.com     sentry.io     wss://ws.hotjar.com;   default-src 'none';   font-src     https:     data:;   form-action     'self'     *.hsforms.com     shop.ie.brightsg.com;   frame-ancestors 'self';   frame-src     'self'     *.cloudflare.com     *.google.com     *.googletagmanager.com     *.hs-sites-eu1.com     *.hs-sites.com     *.hsforms.com     *.hubspot.com     *.jotform.com     *.vimeo.com     *.youtube.com;   img-src     https:     data:     blob:;   media-src     https:     data:;   object-src 'none';   prefetch-src     'self'     https:;   script-src     'self'     'unsafe-inline'    brightsg.referralrock.com     cdn.cookielaw.org     cdn.ldnfrpl.com     cdn.leadinfo.net     *.bing.com     *.bing.net     *.brightsg.com     *.capterra.com     *.clarity.ms     *.cloudflare.com     *.doubleclick.net     *.facebook.com     *.facebook.net     *.google-analytics.com     *.google.com     *.googleadservices.com     *.googletagmanager.com     *.googlesyndication.com     *.gstatic.com     *.hotjar.com     *.hotjar.io     *.hs-analytics.net     *.hs-banner.com     *.hs-scripts.com     *.hsadspixel.net     *.hsforms.net     *.hubapi.com     *.hubspot.com     *.jotform.com     *.licdn.com     *.linkedin.com     *.tiktok.com;   script-src-attr     'unsafe-inline';   style-src     'self'     'unsafe-inline'     https:;   upgrade-insecure-requests;   worker-src     'self'     blob:; report-uri https://brightsg.report-uri.com/r/d/csp/wizard; report-to csp-endpoint; 1
default-src 'self' https: data: blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; img-src 'self' https: data: blob:; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; font-src 'self' https: data:; connect-src 'self' https: ws: wss:; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com 'self' data: *.doubleclick.net *.facebook.com *.bootstrapcdn.com js.klevu.com *.finance-calculator.co.uk *.klarnacdn.net *.klevu.com *.ksearchnet.com *.magentocommerce.com *.googleapis.com *.cloudfront.net fonts.googleapis.com *.hotjar.com *.zopim.com *.fontawesome.com *.paypal.com *.feefo.com *.postcodeanywhere.co.uk *.magentosite.cloud https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com https://plumrocket.com www.facebook.com 1merchantacsstag.cardinalcommerce.com payments.securetrading.net 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.instagram.com https://www.google.com *.doubleclick.net *.facebook.com assets.braintreegateway.com tst.kaptcha.com c.paypal.com www.paypalobjects.com *.zopim.com *.finance-calculator.co.uk *.deko.finance *.dekopay.com *.dekopay.org *.klarnacdn.net https://plumrocket.com *.magentocommerce.com cdn.dnky.co *.hotjar.com www.facebook.com *.trustpilot.com *.feefo.com *.postcodeanywhere.co.uk *.magentosite.cloud x.klarnacdn.net *.pinterest.com *.pinterdev.com commerce-app.pintergration.com webservices.securetrading.net cdn.eu.trustpayments.com brw.3ds.trustpayments.com songbirdstag.cardinalcommerce.com 1merchantacsstag.cardinalcommerce.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.cdninstagram.com 'self' data: https://*.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.bing.com *.clarity.ms js.klevu.com cdn-cookieyes.com *.finance-calculator.co.uk *.dekopay.com *.klarnacdn.net *.klarnaevt.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com *.magentocommerce.com *.cloudfront.net https://*.gstatic.com www.google.nl connect.onlinesucces.nl px.ads.linkedin.com *.googleapis.com www.linkedin.com linkedin.com gallery.mailchimp.com *.trustedshops.com *.zopim.com cdn.jsdelivr.net *.feefo.com *.postcodeanywhere.co.uk *.magentosite.cloud *.increasingly.co services.postcodeanywhere.co.uk https://*.googleapis.com https://*.googleusercontent.com https://www.magezon.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.instagram.com 'self' *.google.com/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com bat.bing.com js.klevu.com *.clarity.ms c.paypal.com chimpstatic.com cdn-cookieyes.com *.hotjar.com sentry.bigeyedeers.dev browser.sentry-cdn.com *.finance-calculator.co.uk *.dekopay.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.ksearchnet.com *.magentocommerce.com *.cloudfront.net maps.googleapis.com *.trackedlink.net *.increasingly.co *.increasingly.com *.googleapis.com cdn.dnky.co api.comapi.com snap.licdn.com checkout.buckaroo.nl *.adyen.com *.zopim.com *.zdassets.com *.sendcloud.sc *.mailchimp.com *.trustedshops.com *.fontawesome.com www.feedbackcompany.com *.trustpilot.com cdn.jsdelivr.net www.googleoptimize.com *.paypal.com js.klarna.com *.eu-library.klarnaservices.com/lib.js *.feefo.com *.postcodeanywhere.co.uk *.magentosite.cloud *.mouseflow.com *.webgains.io api.addressy.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com player.vimeo.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com https://apis.google.com webservices.securetrading.net cdn.eu.trustpayments.com songbirdstag.cardinalcommerce.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.bootstrapcdn.com *.typekit.net js.klevu.com *.klarnacdn.net https://static.klaviyo.com *.klevu.com *.ksearchnet.com 'self' *.magentocommerce.com *.cloudfront.net cdn.dnky.co *.fontawesome.com *.mailchimp.com *.finance-calculator.co.uk *.trustpilot.com cdn.jsdelivr.net *.paypal.com *.feefo.com *.postcodeanywhere.co.uk *.magentosite.cloud *.increasingly.co api.addressy.com https://fonts.googleapis.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com *.zopim.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.google-analytics.com *.facebook.com *.facebook.net https://*.google.com *.sandbox.braintree-api.com *.clarity.ms *.cookieyes.com cdn-cookieyes.com *.doubleclick.net *.trustpilot.com *.hotjar.com *.googlesyndication.com sentry.bigeyedeers.dev *.finance-calculator.co.uk *.dekopay.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com *.cloudfront.net *.magentocommerce.com commerce.adobedc.net api.comapi.com *.googleapis.com *.zdassets.com *.hotjar.io *.zopim.com wss://*.zopim.com www.feedbackcompany.com *.zendesk.com *.eu-library.klarnaservices.com/lib.js *.feefo.com *.postcodeanywhere.co.uk *.magentosite.cloud *.increasingly.co api.addressy.com https://ipinfo.io https://*.gstatic.com https://*.googleapis.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com o402164.ingest.sentry.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; media-src 'self' https://cdn.sanity.io; connect-src 'self' https:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; 1
img-src 'self' data: https://i0.wp.com  https://pixel.wp.com  https://c0.wp.com  https://www.googletagmanager.com  https://assets.elementor.com  https://en.wordpress.com  https://svcs.tql.com  https://translate.google.com  blob:  https://conticorporation.com  https://api.phia.com  https://fonts.gstatic.com  https://cdn.honey.io  https://c4.wallpaperflare.com  https://wordpress.org  https://2.gravatar.com  https://ds9ywulh7jrls.cloudfront.net  https://c.clarity.ms  https://0.gravatar.com  https://s0.wp.com  https://metrics.brightcove.com  https://cf-images.us-east-1.prod.boltdns.net  http://pixel.wp.com  https://secure.gravatar.com https://ts.w.org https://s.w.org https://ps.w.org; default-src 'self'; script-src 'self' 'unsafe-inline' https://stats.wp.com  https://javascript.browser.wasscan.tenable  https://c0.wp.com  https://widgets.wp.com  https://img1.wsimg.com  https://www.googletagmanager.com  https://edge.fullstory.com  https://cdn.jsdelivr.net  https://ds9ywulh7jrls.cloudfront.net  https://cdnjs.cloudflare.com  https://s0.wp.com  https://www.youtube.com  https://rs.fullstory.com  https://captcha.wpsecurity.godaddy.com  https://conticorporation.com  https://www.gstatic.com  https://3001.scriptcdn.net  https://lottingem.com  https://api.wire.threatspike.com  https://scripts.clarity.ms  https://www.clarity.ms  https://img.otv.cc  https://seekeeseekeeseekeeseekeeseekee.comcomcom  https://players.brightcove.net  blob:  http://stats.wp.com  http://www.googletagmanager.com  https://gc.kis.v2.scr.kaspersky-labs.com  'unsafe-eval' https://www.google.com/recaptcha/; script-src-elem 'self' 'unsafe-inline' https://stats.wp.com  https://javascript.browser.wasscan.tenable  https://c0.wp.com  https://widgets.wp.com  https://img1.wsimg.com  https://www.googletagmanager.com  https://edge.fullstory.com  https://cdn.jsdelivr.net  https://ds9ywulh7jrls.cloudfront.net  https://cdnjs.cloudflare.com  https://s0.wp.com  https://www.youtube.com  https://rs.fullstory.com  https://captcha.wpsecurity.godaddy.com  https://conticorporation.com  https://3001.scriptcdn.net  https://lottingem.com  https://api.wire.threatspike.com  https://scripts.clarity.ms  https://www.clarity.ms  https://img.otv.cc  https://seekeeseekeeseekeeseekeeseekee.comcomcom  https://players.brightcove.net  blob:  http://stats.wp.com  http://www.googletagmanager.com  https://gc.kis.v2.scr.kaspersky-labs.com  https://google.com https://www.google.com https://gstatic.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://c0.wp.com  https://ds9ywulh7jrls.cloudfront.net  https://fonts.googleapis.com  https://s0.wp.com  https://cdn.honey.io  https://conticorporation.com  https://www.gstatic.com  https://widgets.wp.com  http://fonts.googleapis.com ; style-src-elem 'self' 'unsafe-inline' https://c0.wp.com  https://ds9ywulh7jrls.cloudfront.net  https://fonts.googleapis.com  https://s0.wp.com  https://cdn.honey.io  https://conticorporation.com  https://www.gstatic.com  https://widgets.wp.com  http://fonts.googleapis.com ; font-src 'self' https://fonts.gstatic.com  https://s0.wp.com  https://account.affilitizer.com  https://s1.wp.com  https://svcs.tql.com  https://c0.wp.com  https://conticorporation.com  https://at.alicdn.com  http://fonts.gstatic.com  https://static.hsappstatic.net  data:; frame-src 'self' https://widgets.wp.com  https://wordpress.com  https://authenticate.ibotta.com  https://gateway.zscaler.net  https://gateway.zscalerthree.net  https://conticorporation.com  https://login.zscaler.net  https://hobfpproxy02.nashville.org  https://www.youtube.com  https://tools.akismet.com  https://login.microsoftonline.com  blob: https://google.com https://www.google.com https://gstatic.com https://www.gstatic.com; connect-src 'self' https://www.google-analytics.com  https://csp.secureserver.net  https://rs.fullstory.com  https://www.googletagmanager.com  https://public-api.wordpress.com  https://edge.fullstory.com  https://region1.google-analytics.com  https://www.google.com  https://c0.wp.com  https://img1.wsimg.com  data:  https://conticorporation.com  https://singleview.site  https://gadstat.com  wss://127.0.0.1  https://translate.googleapis.com  https://ds9ywulh7jrls.cloudfront.net  https://pixel.wp.com  https://app.monsterinsights.com  https://s.clarity.ms  https://fonts.googleapis.com  https://a.clarity.ms  https://edge.api.brightcove.com  https://manifest.prod.boltdns.net  https://overbridgenet.com;  media-src 'self' blob:;  worker-src 'self' blob:;  report-uri https://conticorporation.com/wp-json/really-simple-security/v1/csp?rsssl_apitoken=743876341; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cdn.jsdelivr.net cdn.almapay.com *.googleapis.com *.mauboussin.fr data: * *.fontawesome.com maxcdn.bootstrapcdn.com applepay.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.adyen.com *.google.com *.mauboussin.fr * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.adyen.com *.getalma.eu *.almapay.com/ *.stripe.com/ *.checkout.com/ *.adyen.com/ *.gstatic.com *.mauboussin.fr * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.googletagmanager.com/ api-qa.payplug.com secure-qa.payplug.com *.payplug.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com *.adyen.com *.googleapis.com *.mauboussin.fr * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://secure-magenta.dalenys.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com cdn.jsdelivr.net *.googleapis.com *.gstatic.com *.mauboussin.fr * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ applepay.cdn-apple.com api-qa.payplug.com cdn-qa.payplug.com https://cdn-qa.payplug.com https://secure-magenta.dalenys.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.jsdelivr.net *.googleapis.com/ *.mauboussin.fr * *.fontawesome.com maxcdn.bootstrapcdn.com https://secure-magenta.dalenys.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.adyen.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.getalma.eu *.almapay.com *.googleapis.com *.mauboussin.fr * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ maps.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.gstatic.com *.mauboussin.fr *.criteo.net *.pinterest.com *.googletagmanager.com *.snapppt.com *.360yield.com * 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
form-action 'report-sample' 'self' 1
default-src 'nonce-07ccdcb15672a58f1a45f2a3f0fa93f0' 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://tags.tiqcdn.com https://www.googletagmanager.com https://www.google-analytics.com https://*.gigya.com https://*.talkable.com https://*.contentsquare.net https://*.paypalobjects.com https://*.klarna.com https://cdnjs.cloudflare.com https://cdn.cookielaw.org https://static.queue-it.net https://assets.queue-it.net https://cdn-scripts.signifyd.com https://applepay.cdn-apple.com https://cdn-widgetsrepository.yotpo.com https://staticw2.yotpo.com https://www.youtube.com https://request.eprotect.vantivprelive.com https://production.cdp.ingest.chord.co https://d2jjzw81hqbuqv.cloudfront.net https://d38xvr37kwwhcm.cloudfront.net https://s.yimg.com https://static.shopmy.us https://*.mountain.com https://utt.impactcdn.com https://tags.srv.stackadapt.com https://cdn.mgln.ai https://js.adsrvr.org https://7323087.collect.igodigital.com https://s.pinimg.com https://connect.facebook.net https://rodanandfields.api.useinsider.com https://eitri.api.useinsider.com https://analytics.tiktok.com https://cdn.us.heap-api.com https://ct.pinterest.com https://na-library.playground.klarnaservices.com https://*.online-metrix.net https://www.paypal.com https://x.klarnacdn.net https://code.jquery.com https://j.northbeam.io https://na-library.klarnaservices.com https://request.eprotect.vantivcnp.com https://cdntm.rodanandfields.com https://sneakpeek-1.s3.us-east-1.amazonaws.com https://rodanandfields.queue-it.net https://www.google.com https://www.gstatic.com https://testflex.cybersource.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.klarna.com https://storage.googleapis.com https://cdn-widget-assets.yotpo.com https://cdn-widgetsrepository.yotpo.com https://tags.srv.stackadapt.com https://assets.api.useinsider.com https://staticw2.yotpo.com https://x.klarnacdn.net https://www.rodanandfields.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://storage.googleapis.com https://applepay.cdn-apple.com https://cdn-widgetsrepository.yotpo.com https://cdn.shopify.com https://font.static.useinsider.com https://x.klarnacdn.net https://staticw2.yotpo.com https://claritydesignsystem.com; connect-src 'self' https://*.tealiumiq.com https://www.google-analytics.com https://analytics.google.com https://*.gigya.com https://*.contentsquare.net https://*.avalara.com https://*.paypal.com https://*.klarna.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://production.cdp.ingest.chord.co https://dp.signifyd.com https://www.cloudflare.com https://gigya-login.rodanandfields.com https://api-cdn.yotpo.com https://s.yimg.com https://mgln.ai https://tags.srv.stackadapt.com https://*.useinsider.com https://c.us.heap-api.com https://cdn.us.heap-api.com https://ct.pinterest.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://insight.adsrvr.org https://rodanfields.pxf.io https://www.google.com https://ad.doubleclick.net https://*.online-metrix.net https://na.playground.klarnaevt.com https://x.klarnacdn.net https://i.rodanandfields.com https://gigya-login.rodanandfields.ca https://staticw2.yotpo.com https://evt-na.playground.klarnaservices.com https://www.talkable.com https://stats.g.doubleclick.net https://api.precisely.com https://trail.grin.co https://www.google.com.ar https://44.238.122.172 https://100.20.58.101 https://35.85.84.151 https://44.228.85.26 https://34.215.155.61 https://35.160.46.251 https://52.71.121.170 https://18.210.229.244 https://44.212.189.233 https://3.212.39.155 https://52.22.50.55 https://54.156.2.105; frame-src 'self' https://*.paypal.com https://*.klarna.com https://*.cybersource.com https://*.ic3.com https://*.vantiv.com https://*.worldpay.com https://gigya-login.rodanandfields.com https://rodanandfields.api.useinsider.com https://imgs.signifyd.com https://ct.pinterest.com https://insight.adsrvr.org https://match.adsrvr.org https://*.online-metrix.net https://request.eprotect.vantivprelive.com https://www.talkable.com https://www.youtube.com https://*.doubleclick.net https://*.fls.doubleclick.net https://*.contentsquare.net https://tr.snapchat.com https://share.rodanandfields.com https://cdntm.rodanandfields.com https://request.eprotect.vantivcnp.com https://www.facebook.com https://*.gigya.com https://www.google.com https://www.google.co.in https://cdn.builder.io https://*.brilliantcollector.com; media-src 'self' https://storage.googleapis.com https://www.rodanandfields.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; report-uri /csp-report; 1
font-src www.paypalobjects.com https://fonts.gstatic.com *.cloudflare.com *.nuovaroma.org *.googleapis.com *.gstatic.com *.fontawesome.com https://www.google.com https://www.gstatic.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://0merchantacsstag.cardinalcommerce.com 'self' 'unsafe-inline'; frame-ancestors https://api.clerk.io https://cdn.clerk.io 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ https://assets.braintreegateway.com https://c.paypal.com https://tst.kaptcha.com https://geostag.cardinalcommerce.com https://0merchantacsstag.cardinalcommerce.com https://centinelapistag.cardinalcommerce.com https://checkout.paypal.com https://www.google.com https://player.vimeo.com static.addtoany.com *.addthis.com *.cookiebot.com *.criteo.com *.fls.doubleclick.net *.2trk.info cm.g.doubleclick.net *.googletagmanager.com *.nuovaroma.org *.awin1.com *.zenaps.com *.wesupply.xyz https://wesupplylabs.com *.trustpilot.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://www.google.it https://b.stats.paypal.com https://c.paypal.com https://dub.stats.paypal.com blob: https://maps.google.com https://maps.gstatic.com *.facebook.com *.google.it *.bidswitch.net *.doubleclick.net *.adnxs.com *.media.net *.rubiconproject.com *.sharethrough.com *.smartadserver.com *.taboola.com *.teads.tv *.3lift.com *.ups.analytics.yahoo.com *.adform.net *.omnitagjs.com *.casalemedia.com id5-sync.com *.360yield.com *.ivitrack.com *.mediavine.com/ *.outbrain.com *.pubmatic.com *.tremorhub.com *.yieldlab.net *.krxd.net *.thebrighttag.com *.cookiebot.com *.roeye.com *.emxdgt.com *.yieldmo.com *.postrelease.com *.criteo.com *.1rx.com *.dmxleo.com *.unrulymedia.com *.nuovaroma.org *.googleapis.com *.gstatic.com *.awin1.com *.zenaps.com *.wepowerconnections.com *.bird.eu https://cdn.clerk.io *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://www.google.com https://www.gstatic.com https://c.paypal.com https://songbirdstag.cardinalcommerce.com https://maps.google.com https://maps.googleapis.com static.addtoany.com connect.facebook.net *.addthis.com *.moatads.com *.addthisedge.com *.newrelic.com *.nr-data.net *.cookiebot.com *.criteo.com *.gestpay.net *.dwin1.com *.hotjar.com *.sella.it *.roeyecdn.com *.preciso.net *.2trk.info *.nuovaroma.org *.googleapis.com *.gstatic.com *.awin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com https://api.clerk.io https://cdn.clerk.io https://custom.clerk.io *.google.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.hsforms.net *.hsforms.com *.cloudflare.com *.trustpilot.com https://www.googletagmanager.com tagmanager.google.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://fonts.googleapis.com https://www.gstatic.com *.cloudflare.com *.nuovaroma.org fonts.googleapis.com https://api.clerk.io https://cdn.clerk.io *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com *.addtoany.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.trustpilot.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://payments.sandbox.braintree-api.com https://api.sandbox.braintreegateway.com https://origin-analytics-sand.sandbox.braintree-api.com https://centinelapistag.cardinalcommerce.com https://kg668dbov0.execute-api.us-east-1.amazonaws.com https://writer.cardinalcommerce.com https://www.sandbox.paypal.com https://vimeo.com https://maps.googleapis.com *.addthis.com *.googleapis.com *.nr-data.net *.doubleclick.net *.cookiebot.com *.google.com *.criteo.com *.nuovaroma.org *.wepowerconnections.com https://the.sciencebehindecommerce.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.gstatic.com t.elasticsuite.io *.hsforms.net *.hsforms.com analytics.google.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com maxcdn.bootstrapcdn.com static.baufragen.de data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com sandbox.przelewy24.pl secure.przelewy24.pl 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.multisafepay.com https://pay.google.com *.cookiebot.com cloud.web.oracdecor.com/newsletter cloud.web.oracdecor.com ct.pinterest.com www.baufragen.de pay.google.com apm.przelewy24.pl *.przelewy24.pl *.espago.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com *.googleapis.com cdn.flbx.io *.cloudfront.net magefan.com cm.magefan.com *.disqus.com https://img.youtube.com *.multisafepay.com *.cookiebot.com api.taggrs.io c.clarity.ms static.przelewy24.pl www.gstatic.com gstatic.com *.googletagmanager.com ssl.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.gstatic.com *.getflowbox.com *.disqus.com https://cdn.jsdelivr.net *.multisafepay.com https://pay.google.com svs.oracdecor.com www.clarity.ms scripts.clarity.ms consent.cookiebot.com consentcdn.cookiebot.com snap.licdn.com bat.bing.com script.hotjar.com static.hotjar.com connect.facebook.net s.pinimg.com ct.pinterest.com cdn.leadinfo.net static.cloudflareinsights.com ingest.promptwatch.com www.datadoghq-browser-agent.com sandbox.przelewy24.pl secure.przelewy24.pl pay.google.com apm.przelewy24.pl *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://cdn.jsdelivr.net maxcdn.bootstrapcdn.com *.multisafepay.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.getflowbox.com *.multisafepay.com px.ads.linkedin.com ingest.promptwatch.com *.leadinfo.net api.leadinfo.com *.clarity.ms content.hotjar.io wss://ws.hotjar.com consentcdn.cookiebot.com browser-intake-datadoghq.eu browser-intake-datadoghq.com sandbox.przelewy24.pl secure.przelewy24.pl wss://ws.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' *.google.com *.nr-data.net; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://*.pendo.io https://*.jquery.com https://*.google.com https://*.gstatic.com https://*.storage.googleapis.com https://js-agent.newrelic.com *.newrelic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com blob: *.newrelic.com; script-src-elem 'self' https://*.pendo.io *.newrelic.com *.googleapis.com; img-src 'self' https://*.pendo.io https://myhealthrecord.com:9999 https://*.myhealthrecord.com:9999 https://*.greenwayhealth.com:9999 https://*.googleapis.com https://*.gstatic.com *.google.com  *.googleusercontent.com blob data:; font-src 'self' https://fonts.gstatic.com https://*.greenwayhealth.com https://*.login.greenwayhealth.com https://*.authstagingpoc.aws.greenwayhealth.com https://*.gisdev.aws.greenwayhealth.com data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com *.googleapis.com; style-src-elem 'self' 'unsafe-inline' https://*.storage.googleapis.com https://*.googleapis.com https://myhealthrecord.com:9999 https://*.myhealthrecord.com:9999 https://*.greenwayhealth.com:9999 https://pendo-static-4979136297566208.storage.googleapis.com *.googleapis.com https://*.pendo.io; style-src-elem 'self' *.googleapis.com https://pendo-static-4979136297566208.storage.googleapis.com https://*.pendo.io; connect-src 'self' https://*.pendo.io https://*.greenwayhealth.com:9004 https://*.myhealthrecord.com https://bam.nr-data.net https://bam-cell.nr-data.net *.nr-data.net https://phprod-patient-specific-documents.s3.amazonaws.com *.googleapis.com https://pendo-static-4979136297566208.storage.googleapis.com; frame-src 'self' https://*.instamed.com https://*.aws.greenwayhealth.com https://*.google.com https://*.pendo.io; report-uri https://api.myhealthrecord.com/PortalAPI/v1/CspReporting/LogCspReport 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.cloudflare.com *.google.com *.google.nl *.google.at *.google.de *.google.be *.google.it *.google.fr *.dhlparcel.nl *.klaviyo.com *.bing.com integrations.etrusted.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.google.nl *.google.at *.google.de *.google.be *.google.fr *.google.it www.googletagmanager.com *.trustpilot.com *.pinterest.com *.criteo.com *.criteo.net *.cookiebot.com https://squeezely.tech integrations.etrusted.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com 'self' data: *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com connect.facebook.net graph.facebook.com business.facebook.com https://firebasestorage.googleapis.com flagpedia.net https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.mailcampaigns.nl *.linkedin.com *.pinterest.com *.google.com.ua *.google.de *.google.nl *.google.at *.google.be *.google.fr *.google.it *.twitter.com *.yahoo.com *.webwinkelkeur.nl *.cookiebot.com *.criteo.com *.criteo.net *.bing.com *.cloudflare.com *.magentocommerce.com trusted.images.com integrations.etrusted.com *.zdassets.com *.amazonaws.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.gstatic.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com *.avada.io maps.googleapis.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.google.nl *.google.at *.google.de *.google.be *.google.it *.google.fr chimpstatic.com *.cloudflare.com *.criteo.net *.robinhq.com *.mailcampaigns.nl *.cloudflareinsights.com *.hotjar.com *.trustpilot.com *.dhlparcel.nl *.criteo.com *.cookiebot.com *.bing.com *.msecnd.net *.pinterest.com *.clarity.ms *.pinimg.com *.licdn.com *.sooqr.com https://squeezely.tech trustedshops.com *.trustedshops.com *.etrusted.com integrations.etrusted.com *.tiktok.com *.esputnik.com https://esputnik.com *.zdassets.com *.sendcloud.sc *.jsdelivr.net https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.fontawesome.com *.google.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.cloudflare.com *.mailcampaigns.nl *.google.nl *.google.at *.google.de *.google.be *.google.it *.google.fr *.dhlparcel.nl *.typekit.net *.klaviyo.com *.bing.com *.sooqr.com trusted.styles.com integrations.etrusted.com *.esputnik.com *.sendcloud.sc *.jsdelivr.net https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.google.com *.google.nl *.google.at *.google.de *.google.be *.google.it *.google.fr 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.google-analytics.com www.facebook.com *.facebook.net connect.facebook.net graph.facebook.com business.facebook.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.mailcampaigns.nl *.visualstudio.com *.pinterest.com *.google.nl *.google.at *.google.de *.google.be *.google.it *.google.fr *.bing.com *.linkedin.com *.hotjar.com *.hotjar.io *.trustpilot.com *.doubleclick.net *.googletagmanager.com *.criteo.com *.criteo.net *.cookiebot.com *.clarity.ms *.amazonaws.com https://squeezely.tech *.googleapis.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com trustedshops.com *.trustedshops.com *.etrusted.com integrations.etrusted.com *.tiktok.com *.esputnik.com https://esputnik.com *.zdassets.com *.zendesk.com *.run.app https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https://*.rsync.net:443 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagservices.com https://*.googlesyndication.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://www.googletagmanager.com https://fundingchoicesmessages.google.com https://*.adtrafficquality.google https://*.optad360.io https://cdn.onesignal.com https://*.onesignal.com https://insight.faktor.ba https://connect.facebook.net https://www.facebook.com https://challenges.cloudflare.com https://static.cloudflareinsights.com https://platform.twitter.com https://*.twitter.com https://*.tiktok.com https://*.vimeo.com https://www.youtube.com https://script.dotmetrics.net https://*.dotmetrics.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: blob: https:; media-src 'self' blob: https:; frame-src 'self' https://*.vimeo.com https://*.youtube.com https://*.youtube-nocookie.com https://*.facebook.com https://*.twitter.com https://*.tiktok.com https://*.googletagservices.com https://*.doubleclick.net https://*.googlesyndication.com https://*.adtrafficquality.google https://*.optad360.io https://fundingchoicesmessages.google.com https://challenges.cloudflare.com https://*.onesignal.com https://*.dotmetrics.net; connect-src 'self' https://c.faktor.ba https://cdn.faktor.ba https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://www.google.com https://*.googletagmanager.com https://*.doubleclick.net https://*.googletagservices.com https://*.googlesyndication.com https://fundingchoicesmessages.google.com https://*.adtrafficquality.google https://*.optad360.io https://static.cloudflareinsights.com https://*.onesignal.com https://insight.faktor.ba https://connect.facebook.net https://www.facebook.com https://*.vimeo.com https://*.dotmetrics.net; frame-ancestors 'self'; form-action 'self'; base-uri 'self'; object-src 'none' 1
default-src 'self'; script-src 'self' 'nonce-CLOrh/fCYyefmUIvpTIFfg==' 'strict-dynamic' https://www.googletagmanager.com https://cdn-cookieyes.com https://*.amplitude.com https://widget.intercom.io https://*.intercomcdn.com https://widget.trustpilot.com https://invitejs.trustpilot.com https://js.convertflow.co https://app.convertflow.co https://convertflow.co https://tag.getdrip.com https://*.gist.build https://*.cloud.gist.build https://www.youtube.com https://*.gstatic.com https://*.googleapis.com https://*.google.com https://*.doubleclick.net https://featureassets.org https://prodregistryv2.org https://*.eppo.cloud https://connect.facebook.net https://analytics.tiktok.com https://www.redditstatic.com https://*.bing.com https://*.clarity.ms https://*.hotjar.com https://*.outbrain.com https://c0.adalyser.com https://cdn.getaddress.io https://cdn.onesignal.com https://*.adyen.com https://*.livi.co.uk https://numan.cal.com https://numan.cal.eu https://public.flourish.studio https://*.numan.com https://*.staging.numan.com https://*.integration.numan.com https://*.review.numan.cloud https://apps.rokt-api.com; style-src 'self' 'unsafe-inline' https://cdn-cookieyes.com https://www.youtube.com https://widget.trustpilot.com https://*.numan.com https://*.staging.numan.com https://*.integration.numan.com https://*.review.numan.cloud https://fonts.googleapis.com; font-src 'self' data: https://*.gstatic.com https://*.gist.build https://*.numan.com https://*.staging.numan.com https://*.integration.numan.com https://*.review.numan.cloud https://*.intercomcdn.com https://cal.com; img-src 'self' data: blob: https: http://c0.adalyser.com http://a.storyblok.com cdn-cookieyes.com; connect-src 'self' https://*.amplitude.com https://*.google.com https://*.google-analytics.com https://*.googleapis.com https://*.doubleclick.net https://*.clarity.ms https://*.bing.com https://*.bing.net https://*.contentsquare.net https://*.ba.contentsquare.net https://*.tiktokw.us https://*.googleadservices.com https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat https://google.com https://www.googletagmanager.com https://*.hotjar.io https://*.zapier.com https://www.facebook.com https://analytics.tiktok.com https://*.outbrain.com https://*.reddit.com https://*.get663.com https://safesearchinc.com https://*.safesearchinc.com https://cdp-eu.customer.io https://track-eu.customer.io https://*.gist.build https://*.cloud.gist.build https://api-iam.intercom.io wss://*.intercom.io https://app.convertflow.co https://convertflow.co https://o316823.ingest.us.sentry.io https://featureassets.org https://prodregistryv2.org https://*.eppo.cloud https://www.youtube.com https://widget.trustpilot.com https://*.adyen.com https://*.livi.co.uk https://numan.cal.com https://numan.cal.eu wss://ws-eu.pusher.com https://api.pusher.com https://*.numan.com https://*.staging.numan.com https://*.integration.numan.com https://*.review.numan.cloud https://api.ideal-postcodes.co.uk https://cdn-cookieyes.com https://*.cookieyes.com https://apps.rokt-api.com https://*.googlesyndication.com https://*.cloudflarestream.com https://*.sciencebehindecommerce.com; frame-src 'self' https://www.youtube.com https://widget.trustpilot.com https://widget.intercom.io https://*.gist.build https://www.googletagmanager.com https://*.adyen.com https://*.livi.co.uk https://numan.cal.com https://numan.cal.eu https://public.flourish.studio https://*.numan.com https://*.staging.numan.com https://*.integration.numan.com https://*.review.numan.cloud https://apps.rokt-api.com https://apps.rokt.com https://*.awin1.com; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; form-action 'self'; manifest-src 'self'; worker-src 'self' blob:; media-src 'self' https: 1
default-src 'self' https://*.clarity.ms https://c.bing.com; block-all-mixed-content; child-src https://intercom-sheets.com https://www.intercom-reporting.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net; connect-src 'self' data: *.intercom.io *.intercom-messenger.com wss://*.intercom-messenger.com *.sentry.io wss://nexus-websocket-a.intercom.io https://stats.g.doubleclick.net *.clarity.ms track.hubspot.com  static.cloudflareinsights.com *.cloudflare.com vimeo.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com; font-src 'self' data: https://js.intercomcdn.com https://fonts.intercomcdn.com https://fonts.gstatic.com; frame-ancestors 'self'; frame-src 'self' youtube.com www.youtube-nocookie.com challenges.cloudflare.com player.vimeo.com; img-src 'self' data: image-cdn.bankoflamps.com i.ytimg.com c.bing.com *.clarity.ms  i.vimeocdn.com https://js.intercomcdn.com https://static.intercomassets.com; media-src 'self' blob-cdn.bankoflamps.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' youtube.com 'nonce-22QRy0YvC1qJXgeqZyd8TCL4l0et6AaGLTbnMaSNxyk=' static.cloudflareinsights.com challenges.cloudflare.com https://js.intercomcdn.com https://widget.intercom.io *.clarity.ms track.hubspot.com 'nonce-0ftpEamr+2QmRKs/GrQo7g=='; style-src 'self' 'unsafe-inline'; report-uri /csp/report; worker-src 'self' blob: 1
default-src *; script-src 'self' 'unsafe-eval' *.bkw.ch *.cookiebot.com 'report-sample'; img-src 'self' data: blob: *.linkedin.com *.usercentrics.eu 6016554.global.siteimproveanalytics.io pms.imgix.net www.google.ch www.google.com *.bkw.ch *.bkw.com; base-uri 'self'; frame-src 'self' login.portal-services.ch *.adform.net *.doubleclick.net *.usercentrics.eu *.bkw.com; style-src-elem 'self' 'unsafe-inline' *.bkw.ch *.gstatic.com 'report-sample'; script-src-elem 'self' 'unsafe-inline' blob: login.portal-services.ch *.adform.net *.clarity.ms *.doubleclick.net *.usercentrics.eu *.bkw.ch 'report-sample'; script-src-attr 'self' 'unsafe-inline' 'report-sample'; style-src 'self' 'unsafe-inline' *.bkw.ch *.cookiebot.com 'report-sample'; font-src 'self' data: *.bkw.ch *.gstatic.com; frame-ancestors 'self' *.bkw.ch markenportal.bkw.ch; media-src 'self' data:; worker-src 'self' blob:; report-uri https://sentry.bkw.ch/api/5/security/?sentry_key=17d36f4cce6ab33fecda30bd4ceaed85 1
default-src https: wss: blob:; connect-src https: wss: blob:; script-src https: 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob:; style-src https: 'unsafe-inline' blob:; img-src https: data: blob:; font-src https: data: blob:; object-src https: data:; media-src https: data: blob:; frame-ancestors 'none'; report-uri /security/csp_violations 1
default-src 'self'; script-src 'self' 'nonce-c9PbTkonZ6oyT5dgugCRjQ==' 'strict-dynamic' https: 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://www.google.com; img-src 'self' data: https://track.hubspot.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://cdn12.lemnisk.co https://cdn25.lemnisk.co https://www.google.com https://www.google.co.in https://i.ytimg.com https://forms-na1.hsforms.com https://www.googletagmanager.com https://www.google-analytics.com https://secure.gravatar.com https://*.hubspotusercontent-na1.net https://cdn2.hubspot.net; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://www.youtube.com https://forms.hsforms.com https://app.hubspot.com https://td.doubleclick.net https://www.googletagmanager.com https://www.google.com; connect-src 'self' https://analytics.google.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://*.hubspot.com https://*.usemessages.com https://api.hubapi.com https://forms.hubspot.com https://forms.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com https://mu-ax-n.lemnisk.co https://mu-pl.lemnisk.co https://px.ads.linkedin.com https://jnn-pa.googleapis.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; frame-src 'self' https://maps.google.com https://www.google.com https://beacon.upcomers.com; form-action 'self'; script-src 'self' 'unsafe-inline' https://beacon.upcomers.com https://www.googletagmanager.com https://connect.facebook.net https://us.i.posthog.com https://us-assets.i.posthog.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://cdn.upcomers.com https://fxltgimtqrakygafjksy.supabase.co https://i.ytimg.com https://beacon.upcomers.com https://www.facebook.com https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' data:; connect-src 'self' https://cdn.upcomers.com https://beacon.upcomers.com https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com https://www.facebook.com https://us.i.posthog.com https://us-assets.i.posthog.com; worker-src 'self' blob: 1
default-src 'self'; img-src 'self' data: https://www.fundraisingregulator.org.uk https://bat.bing.net https://bat.bing.com https://ipt.arthritis-uk.org https://cdn-cookieyes.com https://cdn.gtranslate.net https://www.google.co.uk https://www.google.com https://region1.analytics.google.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.googletagmanager.com https://img.youtube.com https://analytics.google.com https://www.facebook.com https://pagead2.googlesyndication.com https://maps.googleapis.com https://maps.gstatic.com https://i.ytimg.com https://www.google.ie; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com https://tags.srv.stackadapt.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.youtube.com https://maps.googleapis.com https://www.googletagmanager.com https://cloud.umami.is https://cdn.chatbot.com https://cdn-cookieyes.com https://bat.bing.com https://www.gstatic.com https://www.google.com https://translate.googleapis.com https://translate.google.com https://translate-pa.googleapis.com https://cdn.gtranslate.net https://cdn.openwidget.com https://api.openwidget.com https://googleads.g.doubleclick.net https://tags.srv.stackadapt.com https://cdn.raygun.io https://connect.facebook.net https://script.hotjar.com https://static.hotjar.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://pagead2.googlesyndication.com https://maps.googleapis.com https://translate.googleapis.com https://translate-pa.googleapis.com https://cdn.chatbot.com https://bat.bing.net https://api-gateway.umami.dev https://region1.google-analytics.com https://bat.bing.com https://ipt.arthritis-uk.org https://www.google.com https://log.cookieyes.com https://cdn-cookieyes.com https://tags.srv.stackadapt.com https://analytics.google.com https://content.hotjar.io https://directory.cookieyes.com https://googleads.g.doubleclick.net https://metrics.hotjar.io https://vc.hotjar.io https://www.googleadservices.com https://www.googletagmanager.com wss://ws.hotjar.com; frame-ancestors 'self'; frame-src 'self' https://www.youtube.com https://www.googletagmanager.com https://cdn.openwidget.com https://ipt.arthritis-uk.org https://www.google.com; base-uri 'self'; object-src 'none'; report-uri https://report-to-api.raygun.com/reports-csp?apikey=okxCWBJHplIq88tzwzL3Q 1
object-src 'none'; script-src 'nonce-vb5qSZTRkmUXxDtkn13ti99v' 'strict-dynamic' http: https:; base-uri 'none'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com 'unsafe-inline' data: *.channelsight.com *.bazaarvoice.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.facebook.com *.snapchat.com *.tiktok.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.twitter.com s.amazon-adsystem.com *.facebook.com *.doubleclick.net insight.adsrvr.org *.filestackapi.com *.addthis.com flexfaceoffsweeps.azurewebsites.net match.adsrvr.org viewinyourspace.com *.viewinyourspace.com *.myepigraph.com playcanv.as *.snapchat.com *.clinch.co *.pinterest.com https://recaptcha.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.bazaarvoice.com *.google.com *.taboola.com *.facebook.com *.facebook.net *.hubspot.com *.hsforms.com r.turn.com *.adnxs.com pixel.mediaiqdigital.com *.gravatar.com *.channelsight.com cscoreproweustor.blob.core.windows.net *.skil.com *.googleapis.com *.doubleclick.net *.seeitinyourspace.com *.pinterest.com *.nextdoor.com *.reddit.com insight.adsrvr.org *.ispot.tv egopowerplus.com *.egopowerplus.com egopowerplus.com.au *.flexpowertools.com pixel.roymorgan.com *.myepigraph.com *.intentiq.com edge.curalate.com *.linkedin.com ad.ipredictive.com api.copilot.livex.ai www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page datadash.egopowerplus.com datadash.skil.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bazaarvoice.com *.filestackapi.com *.facebook.net *.crazyegg.com js.hs-scripts.com *.taboola.com js.adsrvr.org js.hs-analytics.net js.hs-banner.com js.hscollectedforms.net *.googleapis.com geoip-js.com secure-ds.serving-sys.com *.adnxs.com bs.serving-sys.com *.addthis.com *.addthisedge.com z.moatads.com cscoreproweustor.blob.core.windows.net flexsweepstakes2022.azurewebsites.net js.monitor.azure.com edge.curalate.com ipinfo.io *.tiktok.com sc-static.net *.channelsight.com unpkg.com *.jsdelivr.net viewinyourspace.com *.viewinyourspace.com *.cookielaw.org *.addevent.com *.pinimg.com *.nextdoor.com *.crwdcntrl.com *.crwdcntrl.net mjca-yijws.global.ssl.fastly.net cdn.480app.com cdn.nmgassets.com *.clinch.co *.vimeo.com *.redditstatic.com *.snapchat.com adriano-au.avanser.com *.amazon-adsystem.com *.licdn.com *.pinterest.com *.egopowerplus.com cdn.cookie-script.com stapecdn.com chatbox.copilot.livex.ai js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bazaarvoice.com cscoreproweustor.blob.core.windows.net *.channelsight.com cdn.jsdelivr.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com api.bazaarvoice.com *.vimeo.com vod-progressive.akamaized.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com insight.adsrvr.org *.cloudflare.com *.twitter.com *.twimg.com *.bazaarvoice.com *.crazyegg.com forms.hubspot.com *.channelsight.com *.doubleclick.net *.taboola.com secure-ds.serving-sys.com viewinyourspace.com *.viewinyourspace.com chervon-website-api.herokuapp.com chervon-website-api-dev.herokuapp.com *.jotform.com dc.services.visualstudio.com *.addthis.com edge.curalate.com geoip-js.com *.hsforms.com *.facebook.com *.tiktok.com *.snapchat.com *.cookielaw.org *.rain-staging.com *.seeitinyourspace.com *.gstatic.com blob: *.googleapis.com *.pinterest.com cdn.nmgassets.com jdl.nmgplatform.com colrep.sitelabweb.com lm.serving-sys.com us-central1-epigraph-product-configurator.cloudfunctions.net *.intentiq.com *.flexpowertools.com *.skil.com *.egopowerplus.com *.linkedin.com *.amazon-adsystem.com ara.paa-reporting-advertising.amazon js.monitor.azure.com *.reddit.com *.redditstatic.com *.nextdoor.com api.copilot.livex.ai api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; font-src 'self' https: data:; img-src 'self' data: https:; object-src 'none'; style-src 'self' https: 'unsafe-inline'; connect-src 'self' https:; manifest-src https://s3.amazonaws.com/galore-assets/manifest.json; frame-src 'self' https://js.stripe.com https://www.recaptcha.net/ https://www.facebook.com/ https://bid.g.doubleclick.net; frame-ancestors 'self' https://www.care.com/ https://getgalore.com/; script-src 'self' https: 'unsafe-inline' http://cdn.mxpnl.com/libs/mixpanel-2.2.min.js http://connect.facebook.net/en_US/sdk.js https://connect.facebook.net/en_US/fbevents.js https://connect.facebook.net/en_US/sdk.js; upgrade-insecure-requests; report-uri https://o466311.ingest.sentry.io/api/6004104/security/?sentry_key=2c284ff228ac4d0e8b8ad9ea17497eee&sentry_release=galore-mfe@v18.308.0&sentry_environment=prod 1
font-src fonts.gstatic.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * sandbox.przelewy24.pl secure.przelewy24.pl 'self' 'unsafe-inline'; frame-ancestors pay.google.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * apm.przelewy24.pl *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com static.przelewy24.pl www.gstatic.com gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com sandbox.przelewy24.pl secure.przelewy24.pl apm.przelewy24.pl *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com sandbox.przelewy24.pl secure.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-ancestors 'self'; report-uri https://www.geelongadvertiser.com.au/csp-reports 1
default-src 'self' blob:  https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com; frame-src 'self' https://*.noxiaohao.com https://telegram.org https://*.bitget.com https://accounts.google.com https://oauth.telegram.org https://sgtm.btsgtm.com ; script-src 'self' 'nonce-rzlzWojtH9nq3R+o8YYcdw==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh/v3RIRuG3kMikr5iha+7P/0TN/GNA=' https://*.noxiaohao.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com https://accounts.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://play.google.com https://analytics.google.com https://fonts.gstatic.com https://telegram.org https://oauth.telegram.org https://*.geetest.com https://*.geevisit.com https://sgtm.btsgtm.com; connect-src 'self' wss: https://stats.g.doubleclick.net https://analytics.google.com https://www.google.com wss://stream.bitget.cloud https://*.noxiaohao.com wss://*.noxiaohao.com wss://*.bitget.com https://www.turingfraud.net https://play.google.com https://accounts.google.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com https://telegram.org https://oauth.telegram.org https://static.geetest.com https://static.geevisit.com https://sgtm.btsgtm.com ; worker-src 'self' blob:; img-src 'self' data: blob: https://www.googletagmanager.com https://img.bgbstatic.com https://*.bgstatic.com https://img.bitgetimg.com https://img.gurenla.com https://*.bgbstatic.com https://lh3.googleusercontent.com https://static.geetest.com https://static.geevisit.com https://static-web.jjdsn.vip https://cdn.bitkeep.vip https://www.google.co.jp https://bin.wangsustatic.com https://sgtm.btsgtm.com https://analytics.google.com https://stats.g.doubleclick.net ; style-src 'self' 'unsafe-inline' https://static.geetest.com https://static.geevisit.com https://accounts.google.com https://fonts.googleapis.com https://static.bgbstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com; font-src 'self' data: https://static.geetest.com https://static.geevisit.com https://fonts.gstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri /v1/buried/log/cspSecurity /v1/monitor/csp?appId=d4b6df7d; 1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com maxcdn.bootstrapcdn.com https://script.hotjar.com *.fontawesome.com *.fonts.googleapis.com data: https://b2c-static.staging.popolini.com https://static.popolini.com https://static.popolini.ch https://static.popolini.hu https://*.popolini.dev 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; frame-ancestors https://*.etracker.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.youtube.com/ www.facebook.com platform.twitter.com js.mollie.com https://challenges.cloudflare.com *.addthis.com *.sharethis.com *.pinterest.com https://www.youtube-nocookie.com test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://maps.gstatic.com https://maps.googleapis.com https://*.etracker.com https://*.etracker.de *.cloudflare.com *.cdn.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.s.ytimg.com *.lightemporium.com *.usercentrics.eu www.facebook.com *.pinterest.com assets.pinterest.com syndication.twitter.com https://www.mollie.com https://www.facebook.com https://c.clarity.ms https://c.bing.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.addthis.com *.sharethis.com *.cdninstagram.com https://b2c-media.staging.popolini.com https://media.popolini.com https://media.popolini.ch https://media.popolini.hu https://media-b2c.popolini.dev https://b2c-static.staging.popolini.com https://static.popolini.com https://static.popolini.ch https://static.popolini.hu https://*.popolini.dev test.saferpay.com www.saferpay.com saferpay.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://*.etracker.com https://*.etracker.de *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.trackedlink.net *.facebook.com twitter.com platform.twitter.com static.addtoany.com js.mollie.com pay.google.com applepay.cdn-apple.com https://challenges.cloudflare.com https://connect.facebook.net https://script.hotjar.com https://static.hotjar.com https://www.clarity.ms *.googleapis.com *.addthis.com *.sharethis.com *.moatads.com *.addthisedge.com *.pinterest.com *.instagram.com https://devdocs.magento.com https://magento.com https://b2c-static.staging.popolini.com https://static.popolini.com https://static.popolini.ch https://static.popolini.hu https://*.popolini.dev https://cdn.brevo.com test.saferpay.com www.saferpay.com saferpay.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com maxcdn.bootstrapcdn.com https://b2c-media.staging.popolini.com https://media.popolini.com https://media.popolini.ch https://media.popolini.hu https://media-b2c.popolini.dev https://b2c-static.staging.popolini.com https://static.popolini.com https://static.popolini.ch https://static.popolini.hu https://*.popolini.dev 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://*.etracker.de *.cloudflare.com *.twitter.com *.twimg.com *.googleadservices.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org stats.addtoany.com https://challenges.cloudflare.com wss://ws.hotjar.com https://content.hotjar.io https://h.clarity.ms https://in.hotjar.com *.googleapis.com *.addthis.com *.sharethis.com *.cardinalcommerce.com *.graph.instagram.com https://stats.g.doubleclick.net https://b2c-static.staging.popolini.com https://static.popolini.com https://static.popolini.ch https://static.popolini.hu https://*.popolini.dev test.saferpay.com www.saferpay.com saferpay.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src test.saferpay.com www.saferpay.com saferpay.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
child-src 'self'; connect-src 'self' https://*.optimizely.com/ https://ad.doubleclick.net https://c.6sc.co https://consentcdn.cookiebot.eu https://ipv6.6sc.co https://tag.valtech.com https://www.google.com; default-src 'self'; font-src 'self' https://*.cloudfront.net/graphik/ https://*.cloudfront.net/lato/; frame-src 'self' https://*.optimizely.com/ https://consentcdn.cookiebot.eu https://go.valtech.com; img-src 'self' data: https://*.optimizely.com/ https://b.6sc.co https://go.valtech.com; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' https://*.optimizely.com/ https://az416426.vo.msecnd.net https://connect.facebook.net https://consent.cookiebot.eu https://consentcdn.cookiebot.eu https://go.valtech.com https://googleads.g.doubleclick.net https://munchkin.marketo.net https://s.emea01.idio.episerver.net https://siteimproveanalytics.com https://snap.licdn.com https://static.ads-twitter.com https://tag.valtech.com https://www.googletagmanager.com https://www.linkedin.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.optimizely.com/; style-src-elem 'self' 'unsafe-inline' https://*.optimizely.com/ https://go.valtech.com; style-src 'self' 'unsafe-inline' https://*.optimizely.com/; worker-src blob:; report-to stott-security-endpoint; 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; media-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
object-src  'none'; connect-src 'self' *.evilangel.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.evilangel.com join.gammasecure.com; script-src 'self' *.evilangel.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.evilangel.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
default-src 'self'; script-src 'self' 'unsafe-inline' *.biahosted.com *.biahosted.net *.sumsub.com *.trustly.com https://browser.sentry-cdn.com https://mpsnare.iesnare.com https://static.cloudflareinsights.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://widgets-static.databet.cloud https://nolimitjs.nolimitcdn.com *.slotmagie.de https://analytics.cnd-motionmedia.de https://cdn.cookie-script.com https://connect.facebook.net https://googleads.g.doubleclick.net https://malta.nolimitcdn.com https://monitor.fraudblocker.com https://s2.adform.net https://static.zdassets.com https://track.adform.net https://trck.spoteffects.net https://bat.bing.com https://widget.trustpilot.com *.clarity.ms https://www.google-analytics.com https://www.salesmanago.com https://app.tugi.ai; worker-src 'self' blob: *.sumsub.com; connect-src 'self' *.biahosted.com *.sentry.io *.sumsub.com https://sentry.io *.trustly.com https://browser.sentry-cdn.com *.nolimitcdn.com https://sb2wsdk-cdn-altenar2.biahosted.net wss://mpsnare.iesnare.com https://tma-lambda-upload-tma1-prd-uploads2.s3.eu-west-1.amazonaws.com https://widgets-gql.databet.cloud *.slotmagie.de https://bat.bing.com https://analytics.tiktok.com https://ekr.zdassets.com https://analytics.google.com https://ad.doubleclick.net https://consent.cookie-script.com https://fcmregistrations.googleapis.com https://firebaseinstallations.googleapis.com https://googleads.g.doubleclick.net https://malta.nolimitcdn.com https://monitor.fraudblocker.com https://region1.analytics.google.com https://region1.google-analytics.com https://pagead2.googlesyndication.com https://sentry.io https://slotmagie.zendesk.com https://stats.g.doubleclick.net *.clarity.ms https://vc-service.salesmanago.com https://widget.trustpilot.com https://www.google-analytics.com https://www.google.de https://www.googleadservices.com https://www.google.com https://www.salesmanago.com wss://malta.nolimitcity.com https://app.tugi.ai wss://ws.tugi.ai prod-tugi-files.s3.eu-west-1.amazonaws.com https://api-tma1-prd.themill.tech wss://websocket-tma1-prd.themill.tech; img-src 'self' data: *.biahosted.net *.clarity.ms https://c.bing.com https://softgeniusblobstorage.blob.core.windows.net *.graphassets.com *.themill.tech *.sumsub.com *.trustly.com https://www.google.com https://tma-lambda-upload-tma1-prd-uploads2.s3.eu-west-1.amazonaws.com https://widgets-static.databet.cloud *.slotmagie.de blob: https://bat.bing.com https://analytics.google.com https://analytics.tiktok.com https://c.clarity.ms https://connect.facebook.net https://fonts.gstatic.com https://googleads.g.doubleclick.net https://region1.analytics.google.com https://solisortus.zendesk.com https://stats.g.doubleclick.net https://trck-ipv6.spoteffects.net https://trck.spoteffects.net https://translate.google.com https://www.google.at https://www.google.ba https://www.google.bg https://www.google.ch https://www.google.co.jp https://www.google.co.th https://www.google.co.uk https://www.google.com.mt https://www.google.com.ph https://www.google.com.ua https://www.google.de https://www.google.es https://www.google.fi https://www.google.gr https://www.google.hr https://www.google.hu https://www.google.it https://www.google.lt https://www.google.lu https://www.google.mk https://www.google.no https://www.google.pl https://www.google.ro https://www.google.ru https://www.google.sk https://www.googleadservices.com https://www.googletagmanager.com https://www.salesmanago.com https://tma-lambda-upload-tma1-prd-uploads2.s3.eu-west-1.amazonaws.com; media-src 'self' *.graphassets.com *.sumsub.com https://game-assets-tma1-prd.themill.tech; font-src 'self' https://fonts.gstatic.com *.sumsub.com *.slotmagie.de; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com *.sumsub.com; form-action 'self' https://checkoutshopper-live.adyen.com *.sumsub.com https://pay.skrill.com https://www.facebook.com; frame-src 'self' *.sumsub.com *.edictmaltaservices.com.mt *.oryxgaming.com *.relaxg.com *.elk.se *.evo.games *.netent.com *.nolimit.city *.pgsoft.com *.playngonetwork.com *.playson.com *.pragmaticplay.com https://cajdsoitek.jmxyelekig.net *.quickspin.com https://d1oij17g4yikkz.cloudfront.net *.spinomenal.com *.thunderkick.com *.wazdan.com *.yggdrasilgaming.com https://*.box-int-54f2g.com https://*.contentmedia.eu https://*.evo-games.com https://*.hacksawgaming.com https://*.nolimitcdn.com https://*.pragmaticplaylive.net https://*.regulated.pushgaming.com https://cf-casino-cdn-tdc-stage.relaxg.net https://*.spinomenal.io https://*.swintt-casino-mt.com *.trustly.com https://checkoutshopper-live.adyen.com https://customer.cc.at.paysafecard.com https://login.paysafecard.com https://m15ucbqk30.execute-api.eu-west-1.amazonaws.com https://my.paysafecard.com https://registration.paysafecard.com https://www.google.com https://www.gstatic.com *.slotmagie.de https://monitor.fraudblocker.com https://pic-solisortus.mentor.neccton.com https://widget.trustpilot.com https://www.salesmanago.com https://www.facebook.com; report-to csp-endpoint 1
default-src 'self'; script-src 'self' https://ddwl4m2hdecbv.cloudfront.net https://b-code.liadm.com https://rp.liadm.com https://idx.liadm.com; connect-src 'self' https://pro.ip-api.com https://alocdn.com https://*.liadm.com https://9xgnrndqve.execute-api.us-west-2.amazonaws.com https://a.usbrowserspeed.com; img-src 'self' data:; style-src 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://js-na1.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hsadspixel.net https://js.hscollectedforms.net https://forms.hscollectedforms.net https://api.hubapi.com https://track.hubspot.com https://static.hsappstatic.net https://static.zdassets.com https://ekr.zdassets.com https://vulners.zendesk.com https://challenges.cloudflare.com https://static.cloudflareinsights.com https://snap.licdn.com https://px.ads.linkedin.com https://assets.apollo.io https://aplo-evnt.com https://www.redditstatic.com https://pixel-config.reddit.com https://alb.reddit.com https://player.vimeo.com https://www.youtube.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https:; connect-src 'self' https://sentry-public.vulners.com https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://js-na1.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hsadspixel.net https://js.hscollectedforms.net https://forms.hscollectedforms.net https://api.hubapi.com https://track.hubspot.com https://static.hsappstatic.net https://static.zdassets.com https://ekr.zdassets.com https://vulners.zendesk.com https://challenges.cloudflare.com https://static.cloudflareinsights.com https://snap.licdn.com https://px.ads.linkedin.com https://assets.apollo.io https://aplo-evnt.com https://www.redditstatic.com https://pixel-config.reddit.com https://alb.reddit.com; frame-src 'self' https://player.vimeo.com https://www.youtube.com https://www.googletagmanager.com https://challenges.cloudflare.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri https://sentry.vulners.com//api/8/security/?sentry_key=afff0c0b9fea4021b656ee39a079ba04 1
default-src 'self'; script-src 'self' 'nonce-WpmumS7Vp2P2WAb6pbfMuA==' https://widget.trustpilot.com https://www.google.com https://www.gstatic.com https://cdn.talkjs.com https://toursbylocals.callkarma.ai https://js.pusher.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self'; connect-src 'self' https: https://app.talkjs.com wss://realtime.talkjs.com https://toursbylocals.callkarma.ai https://*.pusher.com wss://*.pusher.com; frame-src 'self' https://widget.trustpilot.com https://www.google.com; frame-ancestors 'none'; form-action 'self' https://toursbylocalshelp.zendesk.com; base-uri 'self'; object-src 'none'; media-src 'self' https://cdn.talkjs.com 1
default-src 'self' https://d1g5x7b3jtu99v.cloudfront.net;script-src 'self' 'unsafe-inline' https://www2.chromatic.com js.stripe.com widget.intercom.io js.intercomcdn.com https://chat.cdn-plain.com cdn.segment.com cdn.lr-in-prod.com https://*.google-analytics.com api.figma.com https://d1g5x7b3jtu99v.cloudfront.net data: connect.facebook.net https://googleads.g.doubleclick.net https://*.googletagmanager.com cdn.jsdelivr.net js.hs-scripts.com js.hscollectedforms.net js.hs-banner.com js.hs-analytics.net js.hsforms.net static.hsappstatic.net us-assets.i.posthog.com https://www.googleadservices.com https://www.google.com https://pagead2.googlesyndication.com https://cdn.vector.co/pixel.js https://*.clarity.ms https://api.app.bullseye.so cdn.getkoala.com js.hsadspixel.net cdn.cr-relay.com a.usbrowserspeed.com d-code.liadm.com https://web.cmp.usercentrics.eu https://assets.revenuehero.io snap.licdn.com;style-src 'self' 'unsafe-inline' fonts.googleapis.com https://d1g5x7b3jtu99v.cloudfront.net https://www2.chromatic.com;img-src * data:;font-src 'self' fonts.gstatic.com https://fonts.intercomcdn.com https://d1g5x7b3jtu99v.cloudfront.net;media-src 'self' https://js.intercomcdn.com https://d1g5x7b3jtu99v.cloudfront.net;connect-src 'self' https://*.chromatic.com https://index.chromatic.com snapshots.chromatic.com api-iam.intercom.io nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://chat.uk.plain.com wss://chat.uk.plain.com https://prod-uk-services-attachm-attachmentsuploadbucket2-1l2e4906o2asm.s3.eu-west-2.amazonaws.com https://cdn.segment.com https://*.google-analytics.com https://analytics.google.com https://api.segment.io https://stats.g.doubleclick.net https://api-us-east-1.graphcms.com https://r.lr-in-prod.com webmention.io hichroma.us15.list-manage.com https://*.ingest.sentry.io api.figma.com us.i.posthog.com https://pagead2.googlesyndication.com https://forms.hscollectedforms.net https://api.hsforms.com forms.hsforms.com https://*.googletagmanager.com https://www.googleadservices.com https://www.google.com https://google.com api.vector.co https://*.clarity.ms https://api.app.bullseye.so https://pro.ip-api.com api.cr-relay.com https://www.facebook.com api.getkoala.com https://api.hubapi.com https://*.usercentrics.eu https://app.revenuehero.io px.ads.linkedin.com;child-src 'self' blob:;frame-src 'self' https://www.chromatic.com https://index.chromatic.com snapshots.chromatic.com js.stripe.com https://www.youtube.com https://chromatic-interactive-demo.netlify.app https://*.chromatic.com https://td.doubleclick.net https://*.googletagmanager.com https://meetings.hubspot.com https://forms.hsforms.com https://popup.schedulehero.io;frame-ancestors 'self' https://*.chromatic.com 1
worker-src blob:; font-src cdn.parcellab.com fonts.gstatic.com http://use.typekit.net *.typekit.net *.gstatic.com *.applepay.cdn-apple.com applepay.cdn-apple.com *.byredo.com *.cloudflare.com *.googleapis.com js.klevu.com *.trustedshops.com *.twimg.com *.twitter.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.booxi.eu data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com http://pilot-payflowlink.paypal.com http://www.paypal.com http://www.sandbox.paypal.com *.paypal.com *.adyen.com *.facebook.com *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self' https://app.eu.contentful.com; frame-src cdn.parcellab.com fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com http://bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com http://www.paypal.com http://www.sandbox.paypal.com http://pilot-payflowlink.paypal.com http://player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com http://google.com *.google.com www.googletagmanager.com *.adyen.com csxd.byredo.com *.facebook.com *.hotjar.com *.pinterest.com *.twitter.com *.criteo.com *.kameleoon.com *.vimeo.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * http://www.xtento.com *.weltpixel.com 'self' 'unsafe-inline'; img-src cdn.parcellab.com images.eu.ctfassets.net videos.ctfassets.net videos.eu.ctfassets.net https://*.processout.com assets.adobedtm.com amcglobal.sc.omtrdc.net http://dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com http://www.google-analytics.com http://googleads.g.doubleclick.net *.google.com.ua *.google.fr *.google.de *.google.hu *.google.be *.google.lu *.google.co.jp *.google.co.uk *.google.ch *.google.it *.google.se http://www.google.com http://bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com http://www.paypal.com www.paypalobjects.com http://fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com http://p.typekit.net *.paypal.com *.typekit.net *.gstatic.com http://validator.swagger.io *.ftcdn.net *.behance.net data: *.adyen.com *.bing.com *.byredo.com *.clarity.ms *.cloudflare.com *.contentsquare.net *.contentsquare.com *.cookielaw.org *.cookiepro.com blob: *.facebook.com *.google.com *.google-analytics. *.googleadservices.com *.klarna.com *.cloudfront.net js.klevu.com *.lightemporium.com *.linksynergy.com *.mediaforge.com *.nr-data.net *.nxtck.com *.pinterest.com *.teads.tv *.twimg.com *.twitter.com *.usercentrics.eu *.ytimg.com *.criteo.com *.doubleclick.net tr.line.me adservice.google.com *.kameleoon.com *.kameleoon.eu *.kameleoon.io *.googlesyndication.com analytics.tiktok.com *.klevu.com *.ksearchnet.com http://www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudimg.io http://www.xtento.com http://cdn.xtento.com *.jrs5.com *.storefrontcloud.io *.vaimo.net data: 'self' 'unsafe-inline'; script-src cdn.parcellab.com developers.kakao.com *.kakaocdn.net assets.adobedtm.com https://*.processout.com ariane.abtasty.com cdn.abtasty.com try.abtasty.com *.try.abtasty.com https://try.abtasty.com *.g10894638425.co *.google.com *.adobe.com *.booxi.eu https://js.processout.com/processout.js *.rakuten.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com http://www.google-analytics.com http://googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com http://www.paypal.com http://www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com http://www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com http://use.typekit.net *.typekit.net http://google.com *.google.com *.cdn-apple.com *.adyen.com *.bing.com *.byredo.com *.clarity.ms *.cloudflare.com *.cloudfront.net *.contentsquare.net *.contentsquare.com cdn.cookielaw.org *.cookiepro.com *.doubleclick.net *.emarsys.net *.facebook.com *.forter.com wss://cdn0.forter.com http://geolocation.onetrust.com *.google-analytics.com *.googleapis.com *.hotjar.com:* *.hotjar.io *.ksearchnet.com http://privacyportal-eu.onetrust.com *.pinterest.com *.scarabresearch.com *.teads.tv *.twimg.com *.twitter.com *.zdassets.com wss://widget-mediator.zopim.com/ *.zendesk.com *.criteo.com *.analytics.google.com *.kameleoon.com *.kameleoon.eu *.kameleoon.io *.googlesyndication.com analytics.tiktok.com madefor.github.io *.klevu.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.contentful.com cdn.contentful.com videos.eu.ctfassets.net *.ctfassets.net *.cloudflareinsights.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src cdn.parcellab.com *.adobe.com fonts.googleapis.com *.byredo.com *.cloudflare.com *.fontawesome.com *.googleapis.com *.gstatic.com js.klevu.com *.trustedshops.com *.twimg.com *.twitter.com *.typekit.net *.usercentrics.eu *.kameleoon.com *.klevu.com *.ksearchnet.com assets.braintreegateway.com *.cloudimg.io *.scaleflex.it https://js.klevu.com *.booxi.eu 'self' 'unsafe-inline'; object-src *.cookiepro.com; media-src cdn.parcellab.com *.adobe.com *.zdassets.com *.videos.eu.ctfassets.net videos.ctfassets.net videos.eu.ctfassets.net *.assets.eu.ctfassets.net assets.ctfassets.net assets.eu.ctfassets.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src https://www.byredo.com cdn.parcellab.com *.kakao.com *.kakaocdn.net https://open.spotify.com https://*.processout.com https://*.ravelin.click https://*.onetrust.com http://dpm.demdex.net dcinfos-cache.abtasty.com *.abtasty.com ariane.abtasty.com cdn.abtasty.com amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com http://www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net http://vimeo.com http://www.sandbox.paypal.com www.paypalobjects.com http://www.paypal.com http://pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com http://google.com *.google.com *.adyen.com *.bing.com *.byredo.com *.clarity.ms *.cloudflare.com *.cloudfront.net *.contentsquare.net *.contentsquare.com cdn.cookielaw.org *.cookiepro.com *.doubleclick.net *.emarsys.net *.facebook.com *.forter.com wss://cdn0.forter.com http://geolocation.onetrust.com *.google-analytics.com *.googleapis.com *.hotjar.com:* *.hotjar.io *.ksearchnet.com http://privacyportal-eu.onetrust.com *.pinterest.com *.scarabresearch.com *.teads.tv *.twimg.com *.twitter.com *.zdassets.com wss://widget-mediator.zopim.com/ *.zendesk.com *.criteo.com *.analytics.google.com *.kameleoon.com *.kameleoon.eu *.kameleoon.io *.googlesyndication.com analytics.tiktok.com madefor.github.io *.klevu.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.contentful.com *.cdn.contentful.com videos.eu.ctfassets.net *.ctfassets.net 'self' 'unsafe-inline'; child-src blob: assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; frame-src 'self' https:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.googleapis.com https://fonts.gstatic.com *.googleapis.com https://www.gstatic.com https://afflelou-web.my.join-stories.com applepay.cdn-apple.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.payplug.com *.dalenys.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com api-qa.payplug.com secure-qa.payplug.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com https://*.afflelou.com https://p.sharinpix.com *.googlesyndication.com https://editor-assets.abtasty.com https://www.google.fr https://www.facebook.com https://ct.pinterest.com https://bat.bing.com *.doofinder.com *.googleapis.com https://*.gstatic.com https://mcstaging.afflelou.com *.join-stories.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://flagcdn.com https://mafranchise.afflelou.com https://cms-mafranchise.afflelou.com https://dev.visualwebsiteoptimizer.com https://secure-magenta.dalenys.com https://*.google.com https://*.googleapis.com https://*.googleusercontent.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page https://maps.googleapis.com *.disqus.com https://eu1-config.doofinder.com https://*.googlesyndication.com https://halc.iadvize.com https://static.iadvize.com https://iadvize.com https://static.livechat.iadvize.com https://api.iadvize.com https://try.abtasty.com https://msr.afflelou.com https://bat.bing.com https://analytics.tiktok.com https://vto-advanced-integration-api.fittingbox.com/ *.doofinder.com *.googleapis.com https://*.gstatic.com https://sst.afflelou.com https://sst.afflelou.es https://afflelou-web.my.join-stories.com https://js-agent.newrelic.com afflelou.containers.piwik.pro js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://dev.visualwebsiteoptimizer.com https://secure-magenta.dalenys.com applepay.cdn-apple.com api-qa.payplug.com cdn-qa.payplug.com cdn.payplug.com https://*.google.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://cdn.jsdelivr.net https://cdn.payplug.com https://cdn-qa.payplug.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://try.abtasty.com https://cdn.fonts.net *.doofinder.com assets.braintreegateway.com https://secure-magenta.dalenys.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://cdn.plyr.io https://*.googlesyndication.com https://halc.iadvize.com https://api.iadvize.com https://collector.iadvize.com wss://*.iadvize.com https://*.abtasty.com https://fonts.googleapis.com https://fonts.gstatic.com https://cdn.fonts.net https://bat.bing.com *.doofinder.com wss://*.doofinder.com *.googleapis.com https://sst.afflelou.com https://sst.afflelou.es https://afflelou-web.my.join-stories.com *.join-stories.com https://api.stories.studio https://bam.nr-data.net https://bam-cell.nr-data.net https://bam.eu01.nr-data.net afflelou.piwik.pro afflelou.containers.piwik.pro api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://dev.visualwebsiteoptimizer.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://bohds.afflelou.com https://bohds.afflelou.es https://bohds.afflelou.be https://bohds.afflelou.ch https://bohds.afflelou.pt https://bohds.afflelou.ma https://bohds.malentille.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'nonce-ThiQkURkPd6iuwewo3aQvw' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/static-on-bigtable; base-uri 'none' 1
default-src 'self'; base-uri 'self'; child-src 'self' blob: *.doubleclick.net *.facebook.com *.google.com *.googlesyndication.com *.vimeo.com connect.facebook.net vimeo.com www.googletagmanager.com; connect-src 'self' 'strict-dynamic' *.analytics.google.com *.bsnteamsports.com *.fancloth.shop *.fontawesome.com *.google.com *.google-analytics.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.nr-data.net *.optimizely.com *.zdassets.com *.zendesk.com *.zopim.com *.zopim.io ajax.googleapis.com browser-intake-datadoghq.com cdn.cookielaw.org code.jquery.com dev.visualwebsiteoptimizer.com fonts.googleapis.com fonts.gstatic.com geolocation.onetrust.com privacyportal.onetrust.com settings.luckyorange.net stats.g.doubleclick.net vimeo.com vimeocdn.com www.facebook.com www.ssgecom.com wss://*.hotjar.com wss://in.visitors.live wss://visitors.live wss://widget-mediator.zopim.co https://chat-assets.cdn.gladly.com https://chat-sdk.cdn.gladly.com https://cdn.gladly.com https://us-1.gladly.com https://api.us-1.gladly.chat wss://ws.us-1.gladly.chat https://api.smooch.io https://*.config.smooch.io wss://api.smooch.io https://gladly-production.sinter-collect.com https://js.verygoodvault.com https://js2.verygoodvault.com https://st-ea.hiw19909.jscrambler.com https://hiw19909.jscrambler.com https://jscrambler.com; font-src 'self' data: *.bsnteamsports.com *.fancloth.shop *.bootstrapcdn.com *.bsnteamsports.com *.fancloth.shop *.fontawesome.com *.gladly.com *.typekit.net *.zopim.com cdnjs.cloudflare.com fonts.googleapis.com fonts.gstatic.com script.hotjar.com static.zdassets.com; form-action 'self' *.facebook.com *.google.com connect.facebook.net; frame-src 'self' *.paymetric.combid.g.doubleclick.net *.vimeo.com xiecomm.worldpay.com cert-xiecomm.worldpay.com vars.hotjar.com www.google.com www.googletagmanager.com td.doubleclick.net https://js.verygoodvault.com https://js2.verygoodvault.com; img-src 'self' data: blob: *.bsnteamsports.com *.fancloth.shop *.bsnteamsports.com *.bsnsports.com *.google.com *.google-analytics.com *.googletagmanager.com *.gstatic.com *.nr-data.net *.zdassets.com *.zdusercontent.com *.zendesk.com *.zopim.com *.zopim.io *.vimeo.com *.vimeocdn.com ajax.googleapis.com cdn.cookielaw.org code.jquery.com dev.visualwebsiteoptimizer.com googleads.g.doubleclick.net imfarm.bsnsports.com pulse.art.bsnsports.com script.hotjar.com ssgsales.com www.facebook.com stats.g.doubleclick.net https://chat-assets.cdn.gladly.com https://media.cdn.gladly.com https://media.smooch.io; media-src *.vimeo.com static.zdassets.com vimeo.com https://chat-sdk.cdn.gladly.com https://cdn.gladly.com; object-src 'none'; script-src 'self' 'strict-dynamic' 'unsafe-eval' 'report-sample' https: 'unsafe-inline' 'nonce-B3MnK84TfbX/7jed6sY/fQ=='; style-src 'self' 'report-sample' 'unsafe-inline' *.bsnteamsports.com *.fancloth.shop *.bootstrapcdn.com *.fontawesome.com *.google.com *.googleapis.com *.typekit.net *.zdassets.com cdn.jsdelivr.net cdnjs.cloudflare.com code.jquery.com fonts.googleapis.com tagmanager.google.com unpkg.com www.googletagmanager.com https://chat-sdk.cdn.gladly.com https://cdn.gladly.com; upgrade-insecure-requests; report-uri https://62e17a85e7a4e344fdd77145.endpoint.csper.io?v=1; worker-src 'self' blob: www.google.com 1
default-src 'self'; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' https://kit.fontawesome.com/5f78583775.js https://cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js https://cdnjs.cloudflare.com/ajax/libs/bootstrap/5.2.2/js/bootstrap.bundle.min.js https://cdnjs.cloudflare.com/ajax/libs/is-in-viewport/3.0.4/isInViewport.min.js https://cdnjs.cloudflare.com/ajax/libs/autosize.js/5.0.1/autosize.min.js https://cdnjs.cloudflare.com/ajax/libs/sharer.js/0.5.1/sharer.min.js https://email.efex.com.au/resources/sharing/embed.js https://unpkg.com/@lottiefiles/lottie-player@1.6.0/dist/lottie-player.js https://www.googletagmanager.com/gtag/js https://unpkg.com/@lottiefiles/lottie-interactivity@1.6.2/dist/lottie-interactivity.min.js https://vimeo.com/api/oembed.json https://f.vimeocdn.com/p/4.25.13/js/player.module.js https://f.vimeocdn.com/p/4.25.13/js/vendor.module.js https://f.vimeocdn.com/js_opt/modules/utils/vuid.min.js https://f.vimeocdn.com/js_opt/modules/utils/vuid.min.js https://www.googletagmanager.com/gtm.js https://www.gstatic.com/cast/sdk/libs/sender/1.0/cast_framework.js https://www.gstatic.com/eureka/clank/117/cast_sender.js https://f.vimeocdn.com/p/4.25.13/js/player.module.js https://f.vimeocdn.com/p/4.25.13/js/vendor.module.js https://f.vimeocdn.com/js_opt/modules/utils/vuid.min.js https://www.gstatic.com/cv/js/sender/v1/cast_sender.js https://www.gstatic.com/cast/sdk/libs/sender/1.0/cast_framework.js  https://www.gstatic.com/eureka/clank/117/cast_sender.js https://email.efex.com.au/assets/scripts/LandingPagesEmbedded1_2 https://email.efex.com.au/Resources/LandingPagesEmbedded/localised/strings.js https://www.googletagmanager.com/gtm.js https://unpkg.com/@lottiefiles/lottie-interactivity@latest/dist/lottie-interactivity.min.js https://www.vimeo.com/api/oembed.json https://maps.googleapis.com https://click.efex.com.au/lp/assets/lightning_out_embed/prod/en-US/ https://click.efex.com.au/lp/assets/scripts/external-forms-host.min.js https://click.efex.com.au/lp/webruntime/log/errors https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/releases/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://cdn.c360a.salesforce.com/beacon/c360a/ https://efexgroup.my.site.com/ESWEFEXWebsiteAgent1774570590343/assets/js/bootstrap.min.js https://efexgroup.my.site.com/ESWEFEXWebsiteAgent1774570590343/assets/js/init.min.js https://efexgroup.my.site.com/ESWEFEXWebsiteAgent1774570590343/assets/js/rpc-manager.iife.js; style-src 'report-sample' 'self' 'unsafe-inline' https://p.typekit.net https://use.typekit.net https://fonts.googleapis.com https://kit.fontawesome.com https://efexgroup.my.site.com; object-src 'none'; base-uri 'self'; connect-src 'self' https://click.efex.com.au https://ka-p.fontawesome.com https://kit-uploads.fontawesome.com https://www.google-analytics.com https://maps.googleapis.com https://cke4.ckeditor.com https://cdnjs.cloudflare.com https://www.google.com https://efexgroup.my.salesforce-scrt.com https://stats.g.doubleclick.net https://analytics.google.com; font-src 'self' https://fonts.gstatic.com https://use.typekit.net; frame-src 'self' https://email.efex.com.au https://click.efex.com.au https://player.vimeo.com https://r1.dotdigital-pages.com https://www.youtube.com https://www.google.com https://recaptcha.google.com https://efexgroup.my.site.com; img-src data: blob: 'self' https://www.googletagmanager.com https://maps.googleapis.com https://maps.googleapis.com https://maps.gstatic.com https://i.vimeocdn.com https://lh3.ggpht.com https://lh3.ggpht.com https://i.vimeocdn.com https://www.google.com.au; manifest-src 'self'; media-src 'self'; worker-src 'none'; form-action 'self'; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com connect.facebook.net a.clarity.ms *.adobedtm.com *.adobe.com *.facebook.com *.g.doubleclick.net *.clarity.ms scripts.clarity.ms *.google.co.in *.bing.com *.ccavenue.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com connect.facebook.net a.clarity.ms *.adobedtm.com *.facebook.com *.g.doubleclick.net *.clarity.ms scripts.clarity.ms *.google.co.in *.bing.com *.ccavenue.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://plumrocket.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io connect.facebook.net a.clarity.ms *.adobedtm.com *.facebook.com *.g.doubleclick.net *.clarity.ms scripts.clarity.ms *.google.co.in *.bing.com geostag.cardinalcommerce.com *.ccavenue.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page connect.facebook.net a.clarity.ms *.adobedtm.com *.facebook.com *.g.doubleclick.net *.clarity.ms scripts.clarity.ms *.google.co.in *.bing.com *.ccavenue.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com connect.facebook.net a.clarity.ms *.adobedtm.com *.adobe.com *.facebook.com *.g.doubleclick.net *.clarity.ms scripts.clarity.ms *.google.co.in *.bing.com *.ccavenue.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
child-src self; connect-src self; default-src self; font-src self; img-src self; manifest-src self; media-src self; prefetch-src self; object-src self; script-src 'strict-dynamic' 'sha256-SR8bN339OMynNJtiOzokEXzJnun61AQRM3sZP6Vm+M4=' 'sha256-e7BqW+Mz8De6tDOpzCgFFWJBq9fvGqslbgDO6DpdXgk=' 'nonce-MjZlYzNiNjVkMmE2MzY0YmU3MjdhMTE5YTVjZWM0MzNiNDYwZTM1NGU2MTg5Y2ZmOTI5YzA3YWUxNTg3MTY4MTZjZTcyZjYyMWZiZTVlNTU3YzdhMzQ3NjU5OWI5ZGMzYmEzOGJiOGM5MjU1NjQyZDQzYWI3MTY2Zjg3NWVhYjM=' self; style-src  'nonce-MjZlYzNiNjVkMmE2MzY0YmU3MjdhMTE5YTVjZWM0MzNiNDYwZTM1NGU2MTg5Y2ZmOTI5YzA3YWUxNTg3MTY4MTZjZTcyZjYyMWZiZTVlNTU3YzdhMzQ3NjU5OWI5ZGMzYmEzOGJiOGM5MjU1NjQyZDQzYWI3MTY2Zjg3NWVhYjM=' self; worker-src self; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net cash-f.squarecdn.com *.fontawesome.com www.searchanise.com *.searchserverapi.com staticw2.yotpo.com https://*.hotjar.com use.fontawesome.com maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com www.searchanise.com *.searchserverapi.com *.twitter.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ * www.google.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com www.searchanise.com *.searchserverapi.com *.twitter.com secure.livechatinc.com widget.trustpilot.com frame.hubbox.com *.yotpo.com swellrewards.com *.swellrewards.com *.1account.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com * *.trackedlink.net *.ddlnk.net *.dycdn.net *.twitter.com *.twimg.com www.google.ru www.searchanise.com *.searchserverapi.com s3.amazonaws.com services.postcodeanywhere.co.uk *.google-analytics.com *.analytics.google.com https://*.hotjar.com *.yotpo.com swellrewards.com *.swellrewards.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io magento-recs-sdk.adobe.net www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.online-metrix.net testflex.cybersource.com flex.cybersource.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.trackedlink.net *.trackedweb.net *.ddlnk.net debug-tracking.dotdigital.internal *.dycdn.net dn1i8v75r669j.cloudfront.net dkpklk99llpj0.cloudfront.net ds9p2a60lh6fp.cloudfront.net d1y9qtn9cuc3xw.cloudfront.net d81mfvml8p5ml.cloudfront.net *.freshrelevance.com *.dotdigital.com searchanise-ef84.kxcdn.com ajax.aspnetcdn.com www.searchanise.com *.searchserverapi.com *.searchanise.com api.amplitude.com cdn.cookie-script.com cdn.livechatinc.com api.livechatinc.com js-agent.newrelic.com bam.nr-data.net bam-cell.nr-data.net widget.trustpilot.com searchserverapi.com cpage11112.pcapredict.com services.postcodeanywhere.co.uk analytics.ahrefs.com www.googleoptimize.com *.clarity.ms https://*.hotjar.com *.yotpo.com swellrewards.com *.swellrewards.com *.1account.net https://vapeuk.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.cash.app *.dycdn.net www.searchanise.com *.searchserverapi.com searchanise-ef84.kxcdn.com *.twitter.com services.postcodeanywhere.co.uk maxcdn.bootstrapcdn.com https://*.hotjar.com *.yotpo.com swellrewards.com *.swellrewards.com *.1account.net *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net pilot-payflowlink.paypal.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io * *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.dycdn.net *.freshrelevance.com wss://*.freshrelevance.com wss://*.dycdn.net dn1i8v75r669j.cloudfront.net *.dotdigital.com *.hub-box.com api.amplitude.com stats.g.doubleclick.net bam.nr-data.net bam-cell.nr-data.net services.postcodeanywhere.co.uk api.livechatinc.com *.google-analytics.com *.analytics.google.com mcprod.vapeuk.co.uk *.clarity.ms api.pwnedpasswords.com analytics.ahrefs.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';   script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com https://www.googletagmanager.com https://jscloud.net;   style-src 'self' 'unsafe-inline';   img-src 'self' data: https://images.fitatu.com https://secure.gravatar.com https://www.google-analytics.com https://www.googletagmanager.com;   font-src 'self' data:;   connect-src 'self' https://cloudflareinsights.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com;   frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://docs.google.com;   frame-ancestors 'self';   base-uri 'self';   form-action 'self' https://docs.google.com;   object-src 'none';   upgrade-insecure-requests 1
default-src 'self'; child-src 'none'; object-src 'none'; script-src http: https: 'nonce-43aVWPsgiYjUUif5x38hEVGdOpxgOmykl6WR0zol0RM='; connect-src 'self'; worker-src blob:; style-src 'self' 'unsafe-inline'; img-src 'self'; font-src 'self'; base-uri 'self'; 1
default-src 'self'; script-src 'self' 'nonce-rAJVIRV-M-dT1uZDa2OY_jCmpCXW3kjnOYTrXUOSD3K2EEckgxHT8A' data: https://api-web.educagri.fr *.google-analytics.com https://www.googletagmanager.com https://analytics-sc.institut-agro.fr https://player.vimeo.com 'report-sample' https://ajax.googleapis.com/ https://analytics-sc.institut-agro.fr/; style-src-attr 'unsafe-inline' 'self' 'report-sample' data: https://api-web.educagri.fr https://use.fontawesome.com *.ckeditor.com; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://api-web.educagri.fr https://www.google-analytics.com https://www.googletagmanager.com https://www.youtube-nocookie.com/ https://www.youtube.com/; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com *.data.sigea.educagri.fr *.dailymotion.com *.genially.com *.view.genial.ly https://view.genial.ly *.arteradio.com *.calameo.com *.facebook.com https://www.google.com https://fermewikisagro.fr *.francetv.fr; font-src 'self' data: https://fonts.gstatic.com https://use.fontawesome.com https://api-web.educagri.fr; connect-src 'self' data: https://api-web.educagri.fr *.google-analytics.com https://analytics-sc.institut-agro.fr https://analytics-sc.institut-agro.fr/; style-src 'self' 'report-sample' data: https://api-web.educagri.fr https://fonts.googleapis.com https://use.fontawesome.com; script-src-elem 'self' 'nonce-rAJVIRV-M-dT1uZDa2OY_jCmpCXW3kjnOYTrXUOSD3K2EEckgxHT8A' data: https://api-web.educagri.fr *.google-analytics.com https://www.googletagmanager.com https://analytics-sc.institut-agro.fr https://player.vimeo.com 'report-sample'; report-uri https://cem.educagri.fr/api/csp/0/FE 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' catalog.grcc.edu www.googletagmanager.com www.google-analytics.com ssl.google-analytics.com accounts.google.com cse.google.com careerinsight.burning-glass.com googleads.g.doubleclick.net analytics.tiktok.com connect.facebook.net cdn.jsdelivr.net grcc.shell.451.io siteimproveanalytics.com snap.licdn.com *.googleadservices.com *.google.com *.clearcompany.com connect.facebook.net ep2.adtrafficquality.google maps.googleapis.com js.stripe.com embed-forms.451.io unpkg.com js-agent.newrelic.com; object-src 'none'; style-src 'self' 'unsafe-inline' catalog.grcc.edu www.google.com  *.clearcompany.com cdn.jsdelivr.net unpkg.com; img-src 'self' data: www.google.com www.googletagmanager.com www.google-analytics.com ssl.gstatic.com www.gstatic.com www.facebook.com *.siteimproveanalytics.io px.ads.linkedin.com *.doubleclick.net *.linkedin.com *.clearcompany.com *.google.com www.google.ca *.siteimproveanalytics.io ep1.adtrafficquality.google analytics.api.451.io www.googleadservices.com *.opentable.com www.google.com.ph www.google.fr; media-src 'self'; frame-src 'self' www.youtube.com player.vimeo.com www.google.com grcc.messenger.451.io www.googletagmanager.com grcc.discoveredu.ai syndicatedsearch.goog ep2.adtrafficquality.google www.facebook.com forms.office.com; frame-ancestors 'self'; font-src 'self' fonts.gstatic.com; connect-src 'self' content.getrave.com www.google-analytics.com analytics.google.com www.google.com analytics.tiktok.com analytics-ipv6.tiktokw.us analytics.api.451.io t.451.io px.ads.linkedin.com sites-management-api.451.io stats.g.doubleclick.net www.googleadservices.com www.facebook.com *.clearcompany.com catalog.grcc.edu www.google.ca www.googletagmanager.com *.linkedin.com syndicatedsearch.goog ep1.adtrafficquality.google grcc.api.451.io region1.analytics.google.com ad.doubleclick.net; report-uri /report-csp-violation 1
default-src 'self'; script-src 'self' https://www.dementiauk.org https://ajax.googleapis.com https://*.clarity.ms https://www.googletagmanager.com https://tagmanager.google.com https://*.google-analytics.com https://*.google.com https://www.gstatic.com https://dev.visualwebsiteoptimizer.com https://analytics.wpmucdn.com https://analytics1.wpmudev.com https://bat.bing.com https://cdn.cookielaw.org https://*.pcapredict.com https://services.postcodeanywhere.co.uk https://*.postcodeanywhere.co.uk https://*.puzzel.com https://*.simplybook.cc https://yoast.com https://*.yoast.com https://*.hotjar.com https://*.hotjar.io https://*.nextdoor.com https://*.licdn.com https://*.trackedlink.net https://*.pinimg.com https://*.quantserve.com https://*.quantcount.com https://pixel.byspotify.com https://*.byspotify.com https://*.creativecdn.com https://*.stackadapt.com https://*.tiktok.com https://*.teads.tv https://*.veritonic.com https://connect.facebook.net https://*.facebook.net https://vimeo.com https://*.vimeo.com https://maps.googleapis.com https://www.youtube.com https://www.googleadservices.com https://*.g.doubleclick.net https://*.doubleclick.net https://ct.pinterest.com https://*.muchloved.com https://apis.google.com https://cdn.segment.com https://*.segment.com https://*.missena.io 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline' https://www.dementiauk.org https://fonts.googleapis.com https://www.gstatic.com https://services.postcodeanywhere.co.uk https://*.stackadapt.com; img-src 'self' data: blob: https://www.dementiauk.org https://*.wpenginepowered.com https://*.smushcdn.com https://*.assetcdn.net https://www.googletagmanager.com https://*.google-analytics.com https://*.facebook.com https://analytics.wpmucdn.com https://cdn.cookielaw.org https://ade.googlesyndication.com https://pagead2.googlesyndication.com https://bat.bing.net https://*.bing.com https://secure.gravatar.com https://s.w.org https://*.simplybook.cc https://*.secure.simplybook.cc https://dev.visualwebsiteoptimizer.com https://*.google.co.uk https://*.google.ie https://*.google.com.ng https://*.google.bg https://*.google.co.nz https://*.google.com.au https://*.google.ca https://*.google.fr https://*.google.es https://*.google.de https://*.google.it https://*.google.nl https://*.google.ch https://*.google.gr https://*.google.co.in https://*.google.com.hk https://*.google.com.tr https://*.google.co.za https://*.google.com.bn https://*.google.com.sg https://*.google.com.my https://*.google.se https://*.google.pt https://*.google.dk https://*.google.co.jp https://*.clarity.ms https://*.g.doubleclick.net https://*.doubleclick.net https://ib.adnxs.com https://*.teads.tv https://flask.nextdoor.com https://pixel.quantserve.com https://px.ads.linkedin.com https://*.udmserve.net https://*.casalemedia.com https://*.mgid.com https://*.33across.com https://*.smartadserver.com https://*.taboola.com https://*.gstatic.com https://services.postcodeanywhere.co.uk https://*.rubiconproject.com https://*.rlcdn.com https://*.3lift.com https://*.fwmrm.net https://*.1rx.io https://*.outbrain.com https://*.tremorhub.com https://*.pubmatic.com https://*.emxdgt.com https://*.bidswitch.net https://*.lijit.com https://*.infolinks.com https://*.agkn.com https://*.adscale.de https://*.tealiumiq.com https://*.zeotap.com https://*.smartclip.net https://*.researchnow.com https://*.demdex.net https://*.yieldmo.com https://*.vimeocdn.com https://*.googleadservices.com https://*.openx.net https://*.sonobi.com https://*.adform.net https://*.seedtag.com https://*.360yield.com https://*.inmobi.com https://*.nexx360.io https://*.dmxleo.com https://*.contextweb.com https://*.creativecdn.com https://*.omnitagjs.com https://*.trackedlink.net https://*.hotjar.com https://*.google.com https://*.google.gg https://*.google.com.mt https://*.google.im https://*.google.ee https://*.google.je https://*.google.is https://*.google.co.ma https://*.google.co.th https://*.google.com.mx https://*.google.com.pk https://*.google.cz https://*.google.ro https://*.google.co.id https://*.google.no https://*.google.ae https://*.admixer.net https://*.loopme.me https://*.ck-ie.com https://*.onetag-sys.com https://*.sharethrough.com https://*.media.net https://*.e-planning.net https://*.ytimg.com https://*.smaato.net https://*.adtech.ink https://*.adx.opera.com https://*.connectad.io https://*.google.com.tw https://*.google.com.ph https://*.rakuten.com https://*.gumgum.com https://*.google.ad https://*.acast.com https://*.muchloved.com https://*.google.pl https://*.google.be https://*.google.com.br https://*.google.lk https://*.google.hr https://*.google.com.cy https://*.google.at https://*.google.md https://*.docomo.ne.jp https://*.missena.io https://*.adtarget.com.tr; font-src 'self' data: https://fonts.gstatic.com https://*.hotjar.com https://script.hotjar.com; connect-src 'self' https://www.dementiauk.org https://*.smushcdn.com https://dev.visualwebsiteoptimizer.com https://www.googletagmanager.com https://tagmanager.google.com https://*.google-analytics.com https://*.analytics.google.com https://*.google.com https://*.google.co.uk https://*.google.com.au https://*.google.ie https://*.google.fr https://*.google.es https://*.google.co.in https://*.google.com.hk https://www.googleadservices.com https://*.clarity.ms https://analytics.wpmucdn.com https://analytics1.wpmudev.com https://api.w.org https://s.w.org https://bat.bing.net https://*.bing.com https://cdn.cookielaw.org https://*.stackadapt.com https://*.onetrust.com https://pagead2.googlesyndication.com https://ade.googlesyndication.com https://*.g.doubleclick.net https://*.doubleclick.net https://ad.doubleclick.net https://api.postcodes.io https://services.postcodeanywhere.co.uk https://maps.googleapis.com https://*.puzzel.com wss://*.puzzel.com https://*.simplybook.cc https://*.tiktok.com https://*.tiktokw.us https://*.nextdoor.com https://ams.creativecdn.com https://*.creativecdn.com https://*.quantserve.com https://*.quantcount.com https://*.spotify.com https://*.veritonicmetrics.com https://px.ads.linkedin.com https://*.linkedin.com https://*.teads.tv https://ct.pinterest.com https://*.hotjar.io https://*.hotjar.com wss://*.hotjar.com https://vc.hotjar.io https://vimeo.com https://*.vimeo.com https://*.google.com.mt https://*.google.is https://*.google.je https://*.google.com.mx https://*.google.ca https://*.google.co.nz https://*.google.gr https://*.google.co.ma https://*.google.co.za https://*.google.nl https://*.google.pt https://*.google.com.br https://*.google.com.sg https://*.google.cm https://*.google.se https://*.google.de https://*.google.it https://*.google.com.pk https://*.google.com.tr https://*.google.ae https://*.google.md https://*.google.com.kh https://*.docomo.ne.jp https://*.missena.io; worker-src 'self' blob:; frame-src 'self' data: blob: https://www.dementiauk.org https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://*.vimeo.com https://*.google.com https://*.google.co.uk https://*.google.md https://*.google.com.kh https://secure.dementiauk.org https://lottery.dementiauk.org https://shop.dementiauk.org https://dementiauk.blackboard.com https://*.facebook.com https://*.simplybook.cc https://*.secure.simplybook.cc https://*.puzzel.com https://*.doubleclick.net https://*.fls.doubleclick.net https://*.acast.com https://ct.pinterest.com https://*.pinterest.com https://www.muchloved.com https://*.muchloved.com https://*.dementiauk.org https://*.twitter.com https://vimeo.com https://*.docomo.ne.jp https://*.missena.io; frame-ancestors 'self'; media-src 'self' data: blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://secure.dementiauk.org https://www.dementiauk.org; upgrade-insecure-requests; report-to reasondigital_csp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * test.saferpay.com www.saferpay.com saferpay.com https://eu.docupass.app/ https://consentcdn.cookiebot.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com magefan.com cm.magefan.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com test.saferpay.com www.saferpay.com saferpay.com *.idanalyzer.com https://imgsct.cookiebot.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com tagmanager.google.com https://www.googletagmanager.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com test.saferpay.com www.saferpay.com saferpay.com https://consent.cookiebot.com https://consentcdn.cookiebot.com sunnyeurope--uat01.sandbox.my.site.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com assets.braintreegateway.com sunnyeurope--uat01.sandbox.my.site.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com test.saferpay.com www.saferpay.com saferpay.com https://livery.cookiebot.com https://consentcdn.cookiebot.com sunnyeurope--uat01.sandbox.my.salesforce-scrt.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://*.veriff.me https://*.veriff.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://v.scrambly.io https://gnet.prod.verisoul.ai https://js.verisoul.ai https://sandbox.js.verisoul.ai https://gnet.sandbox.verisoul.ai https://*.veriff.me https://*.veriff.com https://*.hotjar.com https://*.probity.io https://www.google.com https://www.gstatic.com https://apis.google.com https://accounts.google.com https://widget.freshworks.com https://appleid.cdn-apple.com https://cdn.segment.com https://web.cmp.usercentrics.eu https://www.googletagmanager.com https://googleads.g.doubleclick.net https://connect.facebook.net https://analytics.tiktok.com https://www.redditstatic.com https://bat.bing.com https://s.pinimg.com https://ct.pinterest.com https://cdn.taboola.com https://app.intercom.io https://js.intercomcdn.com https://widget.intercom.io; script-src-elem 'self' 'unsafe-inline' https://v.scrambly.io https://gnet.prod.verisoul.ai https://js.verisoul.ai https://sandbox.js.verisoul.ai https://gnet.sandbox.verisoul.ai https://*.veriff.me https://*.veriff.com https://*.hotjar.com https://*.probity.io https://www.google.com https://www.gstatic.com https://apis.google.com https://accounts.google.com https://widget.freshworks.com https://appleid.cdn-apple.com https://cdn.segment.com https://web.cmp.usercentrics.eu https://www.googletagmanager.com https://googleads.g.doubleclick.net https://connect.facebook.net https://analytics.tiktok.com https://www.redditstatic.com https://bat.bing.com https://s.pinimg.com https://ct.pinterest.com https://cdn.taboola.com https://app.intercom.io https://js.intercomcdn.com https://widget.intercom.io; style-src 'self' 'unsafe-inline' https://accounts.google.com https://widget.freshworks.com https://fonts.googleapis.com https://www.gstatic.com https://*.veriff.me https://*.veriff.com; style-src-elem 'self' 'unsafe-inline' https://accounts.google.com https://widget.freshworks.com https://fonts.googleapis.com https://www.gstatic.com https://*.veriff.me https://*.veriff.com; font-src 'self' https: data:; img-src 'self' blob: data: https:; media-src 'self' https://js.intercomcdn.com https://downloads.intercomcdn.com https://downloads.intercomcdn.eu https://downloads.au.intercomcdn.com; connect-src 'self' https: blob: wss://socket.scrambly.io wss://v.scrambly.io wss://*.verisoul.ai https://via.intercom.io https://api.intercom.io https://api.au.intercom.io https://api.eu.intercom.io https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io https://api-ping.intercom.io https://*.intercom-messenger.com wss://*.intercom-messenger.com https://nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-b.intercom.io https://nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io https://nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io https://uploads.intercomcdn.com https://uploads.intercomcdn.eu https://uploads.au.intercomcdn.com https://uploads.eu.intercomcdn.com https://uploads.intercomusercontent.com; worker-src 'self' blob:; frame-src 'self' https://accounts.google.com https://www.google.com https://ct.pinterest.com https://*.gist.build https://www.facebook.com https://td.doubleclick.net https://www.googletagmanager.com https://*.veriff.me https://*.veriff.com https://*.hotjar.com https://intercom-sheets.com https://widget.intercom.io https://www.intercom-reporting.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com; report-uri /api/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://call.chatra.io https://*.chatra.io; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://*.chatra.io wss://*.chatra.io; frame-src https://*.chatra.io; object-src 'none'; base-uri 'none'; form-action 'self' 1
worker-src blob:; form-action *.cardinalcommerce.com *.paypal.com www.sandbox.paypal.com *.amazon.com *.facebook.com *.googlesyndication.com *.tiktok.com connect.facebook.net 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src *.googletagmanager.com *.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com *.paypal.com www.sandbox.paypal.com www.paypalobjects.com player.vimeo.com *.google.com *.braintreegateway.com google.com *.klarna.com js.stripe.com *.amazon.com *.payments-amazon.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com connect.facebook.net www.commercepartnerhub.com assets.braintreegateway.com plumrocket.com *.authorize.net *.artifi.net www.googleadservices.com assets.pinterest.com ct.pinterest.com i.liadm.com *.securly.com gateway.zscalerthree.net ep2.adtrafficquality.google 'self' 'unsafe-inline'; script-src *.googletagmanager.com *.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net *.google.com *.newrelic.com *.nr-data.net *.authorize.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.paypal.com www.sandbox.paypal.com www.paypalobjects.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.gstatic.com assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com *.typekit.net google.com *.cdn-apple.com *.braintreegateway.com *.klarna.com *.klarnacdn.net x.klarnacdn.net js.stripe.com *.payments-amazon.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.searchspring.net *.athoscommerce.net *.klarnaservices.com *.klaviyo.com fast.a.klaviyo.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.shopify.com *.sandbox.braintreegateway.com *.popt.in *.cloudflare.com *.artifi.net maps.googleapis.com www.googletagservices.com *.visualwebsiteoptimizer.com https://cdn.searchspring.net/intellisuggest/is.min.js *.searchspring.io *.cloudfront.net s.pinimg.com bat.bing.com tag.rmp.rakuten.com ut.rd.linksynergy.com *.pinterest.com cdn.noibu.com *.hotjar.com b-code.liadm.com secure.merchantadvantage.com *.celebros.com ep2.adtrafficquality.google static.currentcatalog.com 'self' 'unsafe-inline' 'unsafe-eval'; report-uri https://www.currentcatalog.com/pr-csp/report/add/; report-to report-endpoint; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' code.jquery.com cdn.appdynamics.com col.eum-appdynamics.com fonts.gstatic.com ajax.googleapis.com www.googleapis.com fonts.googleapis.com use.fontawesome.com www.w3schools.com home.textkernel.nl staging.textkernel.nl www.dropbox.com apis.google.com www.google.com html5shim.googlecode.com media.readspeaker.com s7.addthis.com d2sl310zdnr3q6.cloudfront.net https://apps.knollenstein.com https://appsdev.knollenstein.com font.visma.com *.easycruit.com m.addthis.com api-public.addthis.com flowanalytic.site networkanalytics.xyz knowledge-and-support-center.visma.net m.addthisedge.com apply.indeed.com content.googleapis.com commondatastorage.googleapis.com themes.googleusercontent.com fast.fonts.net db.onlinewebfonts.com hello.myfonts.net cdnjs.cloudflare.com d1fc8wv8zag5ca.cloudfront.net connect.facebook.net emea3.recruitmentplatform.com tag.goldenbees.fr s.ytimg.com www.findizer.fr webfonts.zohostatic.com platform.linkedin.com zgao.nl cdn.ontame.io *.ziggeo.com *.amazonaws.com api-eu-west-1.ziggeo.com embed-cdn-eu-west-1.ziggeo.com embed-eu-west-1.ziggeo.com assets.ziggeo.com hc-cdn.visma.net cdn.wootric.com production.wootric.com eligibility.wootric.com *.onetrust.com cdn.cookielaw.org https://storage.googleapis.com/snowplow-cto-office-tracker-bucket/3.1.1/sp.js https://snowplow.visma.com/com.snowplowanalytics.snowplow/tp2 *.sharethis.com www.gstatic.com easycruit.com *.google-analytics.com *.googletagmanager.com *.analytics.google.com *.cookie-script.com; img-src 'self' data: * 'unsafe-inline' 'unsafe-eval'; report-uri https://easycruit.com/api/logging/v1/csp-report 1
default-src 'self' 'unsafe-inline' 'unsafe-eval';  font-src 'self' data:;  script-src 'self' 'unsafe-inline' 'unsafe-eval';  frame-src 'self' https://cdn.cohesionapps.com/ https://www.googletagmanager.com/;  connect-src 'self' https://cdn.cookielaw.org/ https://www.google-analytics.com/ https://yg3l958nut-dsn.algolia.net https://www.google.com/ https://geolocation.onetrust.com/ https://bam.nr-data.net https://content.cmn.com https://api.mobius.highereducation.com https://www.googletagmanager.com/ https://cdn.cohesionapps.com/ https://www.edx.org/;  img-src 'self' https://res.cloudinary.com https://navi.cohesionapps.com https://cms.psychology.org/ https://simple-storage-server.highereducation.com/ https://content.cmn.com data:;  script-src-elem 'self' 'unsafe-inline' https://content.cmn.com/ https://js-agent.newrelic.com/ https://www.googletagmanager.com/ https://www.google-analytics.com/ https://sb.scorecardresearch.com https://www.edx.org/beam.js 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' 'report-sample' https://www.googletagmanager.com https://www.google-analytics.com; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com blob: maps.googleapis.com maps.gstatic.com https://www.google.com https://www.google.de https://www.googletagmanager.com https://fonts.gstatic.com https://files.newsletter2go.com https://*.francke-halle.de; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://global.frcapi.com/ https://*.googletagmanager.com https://*.youtube-nocookie.com https://*.francke-halle.de player.vimeo.com; script-src-elem 'self' 'unsafe-inline' https://cdn.plyr.io https://*.noembed.com https://www.youtube.com https://player.vimeo.com https://unpkg.com https://static.newsletter2go.com https://matomo-infohub.cms-relaunch.de https://webstat.francke-halle.de https://maps.googleapis.com/maps/api/js 'report-sample'; script-src-attr 'unsafe-inline' 'unsafe-hashes' 'report-sample'; style-src-elem 'self' 'unsafe-inline' 'unsafe-hashes' 'report-sample' https://fonts.googleapis.com https://unpkg.com https://www.googletagmanager.com; media-src 'self' blob: data:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' 'unsafe-eval' cdn.plyr.io noembed.com youtube.com youtube.de maps.googleapis.com https://eu-api.friendlycaptcha.eu https://api.friendlycaptcha.com https://api.newsletter2go.com https://www.google.com https://www.google.de https://www.googletagmanager.com https://www.google-analytics.com https://*.francke-halle.de; frame-ancestors 'self' https://*.francke-halle.de; report-uri https://www.francke-halle.de/@http-reporting?csp=report&requestTime=1789280567314984&requestHash=77d487f618bb3d6969a047d8e8aee254edce7b03 1
object-src 'none';report-uri /csp-report 1
default-src 'none'; base-uri 'self' about:; form-action 'self' https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://*.adyen.com https://pay-staging.canneslions.com https://pay-staging.money2020.com https://yap-staging.ascential.com; object-src 'none'; script-src 'self' 'nonce-WJCMl6pk1C+liVyg4SAkMg==' 'strict-dynamic' 'unsafe-eval'; script-src-elem 'self' 'unsafe-inline' https://*.raygun.io https://transcend-cdn.com https://www.googletagmanager.com https://tagmanager.google.com https://*.cloudfront.net https://*.s3.amazonaws.com https://*.marketo.com https://*.intercom.io https://*.intercomcdn.com https://use.typekit.net https://ajax.googleapis.com https://maps.googleapis.com https://page.money2020.com https://page.ascential.com https://cdn.ingo.me https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://*.adyen.com https://pay.google.com https://*.payments-amazon.com https://*.paypal.com https://*.ratepay.com https://*.cash.app https://cookie-cdn.cookiepro.com https://player.vimeo.com https://*.production.platform-team.com https://static.hotjar.com https://script.hotjar.com https://www.google-analytics.com https://platform.twitter.com https://static.ads-twitter.com https://munchkin.marketo.net https://snap.licdn.com https://extend.vimeocdn.com https://connect.facebook.net https://www.everestjs.net https://*.taboola.com https://bat.bing.com https://*.adsrvr.org https://analytics.tiktok.com https://tags.srv.stackadapt.com https://*.doubleclick.net https://*.googleadservices.com https://*.livechatinc.com; connect-src 'self' https://*.raygun.io https://transcend-cdn.com https://telemetry.transcend.io https://in.hotjar.com https://*.hotjar.com wss://*.hotjar.com https://vc.hotjar.io https://*.hotjar.io https://www.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://tagmanager.google.com https://api.raygun.io https://images.ctfassets.net https://ascentialcdn.filespin.io https://cdn.filespin.io https://videocdn.filespin.io https://horizon-assets.production.platform-team.com https://*.production.platform-team.com https://*.auth0.com https://*.cloudfront.net https://*.s3.amazonaws.com https://*.marketo.com https://*.intercom.io https://cannes-integration.lionsfestivals.com https://dmsproxyapi.lionscreativity.com https://dmsproxyapi-integration.lionsfestivals.com https://dmsproxyapi-uat.lionsfestivals.com https://dmsproxyapi-staging.lionsfestivals.com https://page.money2020.com https://page.ascential.com https://www.linkedin.com https://*.facebook.com https://maps.googleapis.com https://cookie-cdn.cookiepro.com https://geolocation.onetrust.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://*.adyen.com https://pay.google.com https://*.payments-amazon.com https://*.paypal.com https://*.ratepay.com https://*.cash.app https://vimeo.com https://www.google.com https://region1.google-analytics.com https://*.integration.platform-team.com https://*.taboola.com https://px.ads.linkedin.com https://privacyportal.cookiepro.com https://*.mktoresp.com https://bat.bing.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://*.adsrvr.org https://*.srv.stackadapt.com https://0jaku7mk0a.execute-api.eu-west-1.amazonaws.com; img-src 'self' data: blob: https://images.ctfassets.net https://ascentialcdn.filespin.io https://assets-jpeg.imgix.net https://cdn.filespin.io https://portal-assets.imgix.net https://videocdn.filespin.io https://www.google-analytics.com https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://maps.gstatic.com https://horizon-assets.production.platform-team.com https://horizon-mfe-assets.production.platform-team.com https://*.adsrvr.org https://*.everesttech.net https://*.intercomcdn.com https://lions-shared.imgix.net https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://checkoutshopper-test.cdn.adyen.com https://checkoutshopper-live.cdn.adyen.com https://s.gravatar.com https://cdn.auth0.com https://cookie-cdn.cookiepro.com https://*.ascential.com https://*.google.com https://*.google.co.uk https://*.doubleclick.net https://*.googleadservices.com https://*.facebook.com https://bat.bing.com https://*.bing.net https://page.money2020.com https://px.ads.linkedin.com https://*.ads.linkedin.com https://analytics.twitter.com https://t.co https://*.wp.com; style-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://*.cloudfront.net https://*.s3.amazonaws.com 'unsafe-inline' https://horizon-mfe-assets.production.platform-team.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://*.cash.app https://transcend-cdn.com https://page.money2020.com https://page.ascential.com https://*.srv.stackadapt.com; style-src-elem 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://*.cloudfront.net https://*.s3.amazonaws.com 'unsafe-inline' https://horizon-mfe-assets.production.platform-team.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://*.cash.app https://transcend-cdn.com https://page.money2020.com https://page.ascential.com https://*.srv.stackadapt.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com https://*.intercomcdn.com https://*.typekit.net https://cash-f.squarecdn.com; worker-src 'self' blob:; media-src 'self' blob: https://videos.ctfassets.net https://videocdn.filespin.io https://www.google-analytics.com https://*.intercomcdn.com; frame-src 'self' https://app.contentful.com https://www.googletagmanager.com https://vars.hotjar.com https://transcend-cdn.com https://*.auth0.com https://www.youtube.com https://youtube.com https://*.youtube.com https://player.vimeo.com https://vimeo.com https://*.vimeo.com https://*.marketo.com blob: https://page.money2020.com https://page.ascential.com https://www.linkedin.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://pay.google.com https://*.payments-amazon.com https://*.paypal.com https://*.ratepay.com https://*.cash.app https://*.everestjs.net https://*.everesttech.net https://*.adsrvr.org https://*.livechatinc.com; frame-ancestors 'self' https://app.contentful.com; manifest-src 'self' https://*.integration.platform-team.com; 1
default-src 'self'; font-src data: https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud; script-src 'self' https://*.bazaarvoice.com https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://exc.mm.dm.hr https://mpsnare.iesnare.com https://omt.dm.hr https://tags.tiqcdn.com https://web.cmp.usercentrics.eu https://www.dm.hr https://www.google.com https://www.google.com/recaptcha/ https://www.gstatic.com https://www.gstatic.com/recaptcha/; worker-src 'self' blob:; connect-src 'self' https://*.bazaarvoice.com https://aggregator.service.usercentrics.eu https://api.mapbox.com https://api.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://browser-intake-datadoghq.eu https://cart-recos.services.dmtech.com https://cdcs.usercentrics.eu https://collect.tealiumiq.com https://consent-api.service.consent.usercentrics.eu https://consent-rt-ret.service.consent.usercentrics.eu https://consents.usercentrics.eu https://content-preview.apps.prod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://direct-collect.dy-api.eu https://direct.dy-api.eu https://dmpay-gateway.services.dmtech.com https://dy-api.eu https://editorial-content.dm-static.com https://events.mapbox.com https://exc.mm.dm.hr https://frontend-tracking-infra-service.services.dmtech.com https://graphql.usercentrics.eu https://insights.algolia.io https://logs.browser-intake-datadoghq.eu https://maut-prod.services.dmtech.com https://maut-rls.nonprod.services.dmtech.com https://mpsnare.iesnare.com https://my-products-api.services.dmtech.com https://omacs.services.dmtech.com https://omc.dm.hr https://predictive-shopping-service.services.dmtech.com https://product-based-recos.services.dmtech.com https://product-search.services.dmtech.com https://product-semantic-search.services.dmtech.com https://rcom-eu.dynamicyield.com https://recos-as-a-service.services.dmtech.com https://region1.google-analytics.com https://retail-media.services.dmtech.com https://rum.browser-intake-datadoghq.eu https://s2s.adjust.com https://signin.dm.hr https://sos-prod.availability.services.dmtech.com https://staedtetour.dm-fb2.de https://stars.services.dmtech.com https://storage.googleapis.com/gift-card-builder-emergency-disabled-bucket/ https://store-data-service.services.dmtech.com https://store-order-service.services.dmtech.com https://v1.api.service.cmp.usercentrics.eu https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://zoe-shop-proxy-prod.services.dmtech.com https://kuba-prod.services.dmtech.com https://zoe-shop-proxy-prod.services.dmtech.com https://cartnext.services.dmtech.com https://dmcsm-proxy.prod.services.dmtech.com https://zoe-shop-proxy-prod.services.dmtech.com https://customer-helpcenter-prod.services.dmtech.com https://paint-prod.services.dmtech.com https://content.services.dmtech.com https://content-search-service-preview.apps.prod.gcp.dmtech.cloud https://content-search-service.services.dmtech.com https://products.dm.de https://pds-import-prod.apps.prod.gcp.dmtech.cloud https://shopping-list-prod.services.dmtech.com; media-src 'self'; style-src 'self' 'unsafe-inline' https://*.bazaarvoice.com https://api.tiles.mapbox.com https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud; form-action 'self' https://*.bazaarvoice.com https://apps.bazaarvoice.com https://checkout.dm.hr https://giftcard-checkout.dm.de/api/checkout https://signin.dm.hr; img-src 'self' blob: data: https://*.bazaarvoice.com https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://cdn-eu.dynamicyield.com https://composer.apps.nonprod.cf.dmtech.cloud https://content-preview.apps.prod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://editorial-content.dm-static.com https://exc.mm.dm.hr https://i.ytimg.com https://images.podigee-cdn.net https://img.usercentrics.eu https://img.youtube.com/ https://media.dm-static.com https://photos-eu.bazaarvoice.com https://products.dm-static.com https://uct.service.usercentrics.eu https://content.services.dmtech.com; frame-ancestors 'self' https://account.dm.hr https://app.datadoghq.eu https://checkout.dm.hr https://content-preview.apps.prod.gcp.dmtech.cloud https://mobileapp.dm.hr https://studio.dm-drogeriemarkt.com; frame-src 'self' https://*.bazaarvoice.com https://account.dm.hr https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://cdn.podigee.com https://checkout.dm.hr https://configurator.nuk.de https://gastfamilie.podigee.io https://geburtskanal-dm.podigee.io https://hey-familie.podigee.io https://kinderwunschsprechstunde.podigee.io https://mobileapp.dm.hr https://player.podigee-cdn.net https://recaptcha.google.com/recaptcha/ https://sandbox.om.dm.hr https://signin.dm.hr https://web.cmp.usercentrics.eu https://www.google.com https://www.google.com/recaptcha/ https://www.youtube-nocookie.com; base-uri 'self' https://exc.mm.dm.hr; child-src 'self' blob:; manifest-src 'self'; report-to csp-endpoint; report-uri /__csp-reports__ 1
object-src 'none';base-uri 'self';script-src 'nonce-EWr_n5DGnRQ74I_16V3vLg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
base-uri 'self'; form-action 'self'; default-src 'self'; connect-src 'self' data: https://stats.nederhost.nl/ https://zammad.nederhost.nl/ wss://zammad.nederhost.nl/; frame-ancestors 'none'; frame-src 'self'; img-src 'self' data:; report-to csp-endpoint; report-uri /_/report_csp_violation; script-src 'self' 'nonce-T180MnzVfLb8hAkm' 'unsafe-eval' https://stats.nederhost.nl/ https://cdn.matomo.cloud/stats.nederhost.nl/ https://zammad.nederhost.nl/; style-src 'self' data: 'nonce-T180MnzVfLb8hAkm' https://zammad.nederhost.nl/; style-src-attr 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: *.careem-pay.com *.fontawesome.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.zopim.com *.zopim.io checkout.tabby.ai widgets.tabby.ai cdn.tabby.ai fonts.googleapis.com storage.googleapis.com https://fonts.bunny.net use.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.kpaytest.com.kw *.kpay.com.kw *.twitter.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com bytedance: sslocal: *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com *.weltpixel.com cdn.moengage.com/ *.kpaytest.com.kw *.kpay.com.kw *.b-cdn.net *.tap.company *.careem-pay.com http://www.sandbox.paypal.com *.twitter.com checkout.tabby.ai static.addtoany.com/ *.google-analytics.com *.gstatic.com *.pinterest.com *.facebook.com 'self' 'unsafe-inline'; img-src 'self' data: *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com ads.tiktok.com analytics.tiktok.com analytics-ipv6.tiktokw.us www.gstatic.com moe-email-campaigns.s3.amazonaws.com/ image.moengage.com/ *.b-cdn.net *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.bing.com *.zopim.com *.zopim.io *.doubleclick.net *.google.com *.google.co.in *.mastercard.com checkout.tabby.ai widgets.tabby.ai cdn.tabby.ai fonts.googleapis.com storage.googleapis.com unpkg.com *.unpkg.com imagekit.io *.imagekit.io *.braintreegateway.com *.amazonaws.com antoine-images.com *.olx.com.lb *.ibb.co cdn-cookieyes.com https://firebasestorage.googleapis.com https://www.magezon.com *.pinterest.com *.facebook.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com assets.adobedtm.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com ads.tiktok.com analytics.tiktok.com analytics-ipv6.tiktokw.us *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com cdn.moengage.com/webpush/moe_webSdk.min.latest.js cdn.moengage.com/webpush/modules/inapp.js cdn.moengage.com/webpush/beta/sdk.inapp.cdnHelper.js cdn.moengage.com/webpush/releases/serviceworker_cdn.min.latest.js cdn.moengage.com/webpush/moe_webSdk_cards.min.latest.js cdn.moengage.com/webpush/moe_webSdk_webp.min.latest.js app-cdn.moengage.com/ cdn.moengage.com/release/dc_2/moe_webSdk.min.latest.js *.b-cdn.net *.careem-pay.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bing.com *.zopim.com *.zdassets.com checkout.tabby.ai widgets.tabby.ai cdn.segment.com cdn.sift.com score.jcsc.online seondf.com deviceinf.com getdeviceinf.com *.cardinalcommerce.com *.doubleclick.net *.paypal.com *.ytimg.com unpkg.com *.unpkg.com cdnjs.cloudflare.com imagekit.io *.imagekit.io *.mastercard.com *.gateway.mastercard.com static.addtoany.com cdn-cookieyes.com *.livechatinc.com 'self' data: *.avada.io *.shopify.com *.pinterest.com *.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.cloudflare.com *.googleapis.com *.b-cdn.net *.fontawesome.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.bing.com https://fonts.bunny.net use.fontawesome.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com *.zopim.com *.zopim.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com ads.tiktok.com analytics.tiktok.com analytics-ipv6.tiktokw.us *.sdk-02.moengage.com/ sdk-02.moengage.com *.kpaytest.com.kw *.kpay.com.kw *.dev.tap.company *.tap.company *.cloudflare.com *.twitter.com *.cookieyes.com *.twimg.com *.zdassets.com *.zopim.com *.zopim.io wss://widget-mediator.zopim.com https://stats.g.doubleclick.net checkout.tabby.ai widgets.tabby.ai cdn.segment.com api.segment.com api.segment.io api.amplitude.com *.seondfresolver.com *.deviceinfresolver.com *.getdeviceinfresolver.com *.cardinalcommerce.com analytics.google.com unpkg.com *.unpkg.com imagekit.io *.imagekit.io cdn-cookieyes.com *.livechatinc.com 'self' data: maps.googleapis.com https://get.geojs.io *.avada.io stats.g.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.seondnsresolve.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.google-analytics.com https://connect.facebook.net https://analytics.tiktok.com https://*.sentry.io https://ad.admitad.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://*.rukita.co https://cdn.rukita.co https://ik.imagekit.io https://images.rukita.co https://*.google-analytics.com https://*.facebook.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://*.rukita.co https://*.google-analytics.com https://*.sentry.io https://*.facebook.com https://analytics.tiktok.com; frame-src 'self' https://*.google.com https://*.facebook.com 1
font-src *.fontawesome.com *.cloudflare.com fonts.googleapis.com fonts.gstatic.com *.hotjar.com *.zopim.com data: https://fonts.gstatic.com maxcdn.bootstrapcdn.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com www.indiaabundance.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com *.facebook.com www.indiaabundance.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com www.indiaabundance.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com *.addtoany.com cdn.dnky.co *.hotjar.com *.google.com *.facebook.com *.trustpilot.com *.criteo.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com www.indiaabundance.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.google.com *.google.nl connect.onlinesucces.nl px.ads.linkedin.com stats.g.doubleclick.net *.googleapis.com *.gstatic.com *.linkedin.com *.googletagmanager.com gallery.mailchimp.com *.trustedshops.com *.facebook.com *.zopim.com cdn.jsdelivr.net *.jmango360.com *.datatrics.com *.smaato.net www.indiaabundance.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com maps.googleapis.com *.addtoany.com *.google.com *.gstatic.com *.googletagmanager.com *.googleapis.com *.googleadservices.com cdn.dnky.co api.comapi.com *.trackedlink.net snap.licdn.com chimpstatic.com checkout.buckaroo.nl *.adyen.com *.zopim.com *.hotjar.com *.zdassets.com *.sendcloud.sc *.mailchimp.com *.trustedshops.com *.fontawesome.com *.facebook.net *.feedbackcompany.com *.google-analytics.com *.trustpilot.com *.newrelic.com *.nr-data.net cdn.jsdelivr.net *.googleoptimize.com *.clarity.ms *.datatrics.com *.criteo.net *.criteo.com cdn.mouseflow.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com conoret.com www.indiaabundance.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline *.fontawesome.com *.gstatic.com *.cloudflare.com *.googleapis.com cdn.dnky.co checkout.buckaroo.nl *.mailchimp.com *.trustpilot.com cdn.jsdelivr.net *.addtoany.com maxcdn.bootstrapcdn.com www.indiaabundance.com 'self' 'unsafe-inline'; object-src www.indiaabundance.com 'self' 'unsafe-inline'; media-src *.adobe.com *.zopim.com www.indiaabundance.com 'self' 'unsafe-inline'; manifest-src www.indiaabundance.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.googleapis.com commerce.adobedc.net api.comapi.com stats.g.doubleclick.net *.zdassets.com *.hotjar.com *.hotjar.io *.zopim.com wss://*.zopim.com *.feedbackcompany.com *.zendesk.com *.nr-data.net *.clarity.ms *.facebook.com *.datatrics.com http://dpm.demdex.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com www.indiaabundance.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com www.indiaabundance.com http: https: blob: 'self' 'unsafe-inline'; default-src www.indiaabundance.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri www.indiaabundance.com 'self' 'unsafe-inline'; report-uri /csp_reporter.php; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com; img-src 'self' data: blob: https://image.arrivalguides.com https://d1taxzywhomyrl.cloudfront.net https://img.youtube.com https://www.dailymotion.com https://*.dmcdn.net https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com; font-src 'self' data: https://cdnjs.cloudflare.com; media-src 'self' blob: https://image.arrivalguides.com https://d1taxzywhomyrl.cloudfront.net; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.dailymotion.com; worker-src 'self' blob:; report-uri /api/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: *.signifyd.com *.online-metrix.net *.klaviyo.com *.klevu.com *.yotpo.com *.sezzle.com *.crazyegg.com *.liadm.com *.armanet.us *.richpanel.com *.noibu.com guarantee-cdn.com js-agent.newrelic.com analytics.ahrefs.com backend.alia-prod.com aorta.clickagy.com tags.clickagy.com js-prod01.narvar.com connect.facebook.net www.google-analytics.com region1.google-analytics.com www.googletagmanager.com www.google.com challenges.cloudflare.com static.cloudflareinsights.com www.gstatic.com unpkg.com js.stripe.com www.paypalobjects.com cdn.mouseflow.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' blob: data: *.signifyd.com *.online-metrix.net *.klaviyo.com *.klevu.com *.yotpo.com *.sezzle.com *.crazyegg.com *.liadm.com *.armanet.us *.richpanel.com *.noibu.com guarantee-cdn.com js-agent.newrelic.com analytics.ahrefs.com backend.alia-prod.com aorta.clickagy.com tags.clickagy.com js-prod01.narvar.com connect.facebook.net www.google-analytics.com region1.google-analytics.com www.googletagmanager.com www.google.com challenges.cloudflare.com static.cloudflareinsights.com www.gstatic.com unpkg.com js.stripe.com www.paypalobjects.com cdn.mouseflow.com; connect-src 'self' *.signifyd.com *.online-metrix.net *.klaviyo.com *.klevu.com *.ksearchnet.com *.yotpo.com *.sezzle.com *.richpanel.com *.noibu.com *.liadm.com *.clickagy.com *.mouseflow.com guarantee-cdn.com bam.nr-data.net srv.armanet.us backend.alia-prod.com analytics.ahrefs.com www.google-analytics.com region1.google-analytics.com www.googletagmanager.com www.google.com static.cloudflareinsights.com api.stripe.com wss://ws-prod.richpanel.com wss://input.noibu.com; img-src 'self' data: *.online-metrix.net *.klaviyo.com *.yotpo.com *.yotpoapi.com *.doubleclick.net *.agkn.com *.liadm.com *.signifyd.com www.google-analytics.com www.googletagmanager.com www.googleadservices.com www.google.com i.ytimg.com d34uoa9py2cgca.cloudfront.net js.klevu.com guarantee-cdn.com aorta.clickagy.com api.delivrabl.net media.sezzle.com pixel-sync.sitescout.com a.usbrowserspeed.com idsync.rlcdn.com dpm.demdex.net us-u.openx.net; style-src 'self' 'unsafe-inline' static.klaviyo.com cdn-widgetsrepository.yotpo.com fonts.googleapis.com fonts.cdnfonts.com; font-src 'self' data: fonts.gstatic.com *.klaviyo.com *.yotpo.com fonts.cdnfonts.com; frame-src 'self' *.narvar.com *.signifyd.com *.online-metrix.net challenges.cloudflare.com js.klevu.com widget.sezzle.com js.stripe.com www.paypal.com www.youtube.com www.youtube-nocookie.com www.google.com player.vimeo.com; frame-ancestors 'self'; form-action 'self'; base-uri 'self'; object-src 'none'; worker-src 'self' blob:; manifest-src 'self'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report 1
base-uri 'self'; frame-ancestors 'self'; object-src 'none'; default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://js-eu1.hs-scripts.com https://js-eu1.hs-analytics.net https://js-eu1.hs-banner.com https://www.google-analytics.com https://connect.facebook.net https://snap.licdn.com https://analytics.tiktok.com https://www.clarity.ms https://scripts.clarity.ms https://cdn.snippet.abtshield.com https://googleads.g.doubleclick.net https://widget.wenetasystent.ai; img-src 'self' data: https://d3uzafqejbarne.cloudfront.net https://img.youtube.com https://www.google.com https://www.google.pl https://www.facebook.com https://px.ads.linkedin.com https://track-eu1.hubspot.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://maps.google.com https://www.googletagmanager.com https://14350050.fls.doubleclick.net https://widget.wenetasystent.ai; style-src 'self' 'unsafe-inline'; connect-src 'self' https://www.google-analytics.com https://www.google.com https://region1.analytics.google.com https://ad.doubleclick.net https://pagead2.googlesyndication.com https://px.ads.linkedin.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://app.wenetasystent.ai https://d1.abtshield.com https://mpc-prod-28-1053047382554.us-central1.run.app https://mpc2-prod-25-is5qnl632q-wl.a.run.app https://v5-b75ccb2b73c54aa4a5098ab7f8533696.ecs.us-east-2.on.aws; report-uri /api/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://ajax.googleapis.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://aa9b574d78e2f5bfd5e0-d066e35b23885a2271792ba09324b3b0.ssl.cf1.rackcdn.com; img-src 'self' data: https://aa9b574d78e2f5bfd5e0-d066e35b23885a2271792ba09324b3b0.ssl.cf1.rackcdn.com https://www.google-analytics.com; connect-src 'self' https://www.google-analytics.com; font-src 'self' data:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; upgrade-insecure-requests 1
default-src * data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval';worker-src 'self' blob:; style-src * data: blob: 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://*.googlesyndication.com https://*.doubleclick.net https://*.google.com https://*.gstatic.com https://*.googleadservices.com https://*.adtrafficquality.google https://www.googletagmanager.com https://*.cloudflare.com https://*.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.googlesyndication.com; font-src 'self' data: https://fonts.gstatic.com; img-src * data: blob:; media-src 'self' https://*.googlesyndication.com https://*.doubleclick.net https://*.googlevideo.com; frame-src 'self' https://*.googlesyndication.com https://*.doubleclick.net https://*.google.com https://*.adtrafficquality.google https://www.youtube.com https://challenges.cloudflare.com https://*.stripe.com; connect-src 'self' https://*.google.com https://*.googlesyndication.com https://*.doubleclick.net https://*.adtrafficquality.google https://*.gstatic.com https://*.googleadservices.com https://*.cloudflareinsights.com https://*.cloudflare.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://*.stripe.com; frame-ancestors 'self'; report-uri /csp-report.php 1
worker-src 'self' blob: *.logrocket.com *.logrocket.io; font-src cash-f.squarecdn.com https://*.gstatic.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.adyen.com *.bootstrapcdn.com *.googleapis.com *.gstatic.com *.bounceexchange.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.adyen.com *.bounceexchange.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net player.vimeo.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com https://www.google.com/recaptcha/ www.googletagmanager.com * *.adyen.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.clearpay.co.uk www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' *.bing.com *.doubleclick.net *.omtrdc.net *.criteo.net *.bounceexchange.com *.onetrust.com *.cookielaw.org www.xtento.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; img-src *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com validator.swagger.io * https://*.gstatic.com *.adyen.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.clearpay.co.uk *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.doubleclick.net *.bing.com *.omtrdc.net *.paypal.com www.xtento.com *.scarabresearch.com *.emarsys.net *.tiktok.com *.riskified.com *.bounceexchange.com *.bouncex.net *.micpn.com *.gstatic.com *.equalweb.com *.snapchat.com *.bynder.com *.onetrust.com *.cookielaw.org cash-f.squarecdn.com cdn.xtento.com t.zip.co static.zipmoney.com.au static.zip.co www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.clearpay.co.uk https://hbiq.net *.plugins.emarsys.net *.scarabresearch.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' *.bootstrapcdn.com *.cloudflare.com *.cloudfront.net *.attraqt.io *.logrocket.io *.agilone.com/ *.wknd.ai *.micpn.com *.tiktok.com *.bing.com *.usabilla.com *.doubleclick.net *.omtrdc.net *.zipmoney.com.au *.riskified.com *.google.com *.emarsys.net *.inside-graph.com *.criteo.net *.zip.co *.trendii.com *.pinimg.com *.pinterest.com *.quantserve.com *.criteo.com *.snapchat.com sc-static.net *.useinsider.com *.qualtrics.com *.quantcount.com *.bounceexchange.com *.rmtag.com *.logrocket.com *.equalweb.com *.weglot.com *.onetrust.com *.cookielaw.org *.truefitcorp.com www.xtento.com cdn.xtento.com static.zipmoney.com.au static.zip.co zip.co js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cash.app https://fonts.googleapis.com/ *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' *.adyen.com *.bootstrapcdn.com *.riskified.com *.googleapis.com *.quantserve.com *.bounceexchange.com *.equalweb.com *.weglot.com *.onetrust.com *.cookielaw.org unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'self' 'unsafe-inline'; manifest-src 'self' 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com * *.adyen.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com *.clearpay.co.uk https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com *.scarabresearch.com *.eservice.emarsys.net *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' *.bing.com *.doubleclick.net *.omtrdc.net *.tiktok.com *.riskified.com *.criteo.net *.criteo.com *.snapchat.com sc-static.net *.trendii.com *.useinsider.com *.quantcount.com *.bounceexchange.com *.logrocket.io *.google.com *.logrocket.com *.quantserve.com *.bouncex.net *.equalweb.com *.weglot.com *.onetrust.com *.cookielaw.org consumer.truefitcorp.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' data: https: wss:; frame-src 'self' https:; media-src 'self' data: https:; worker-src 'self' blob:; child-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https:; upgrade-insecure-requests; report-uri https://www.northwestfirearms.com/_csp/report; report-to csp-endpoint; 1
img-src https://higherlogicdownload.s3.amazonaws.com/UNIFORMLAWS/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/UNIFORMLAWS/ https://img.youtube.com/vi/ https://static.filestackapi.com/picker/ https://d2x5ku95bkycr3.cloudfront.net https://higherlogiclongterm.s3.amazonaws.com/UNIFORMLAWS/ blob: https://d132x6oi8ychic.cloudfront.net 'self'; style-src https://d132x6oi8ychic.cloudfront.net 'unsafe-inline' https://higherlogiccloudfront.s3.amazonaws.com https://cdn.jsdelivr.net/jquery.slick/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://d2x5ku95bkycr3.cloudfront.net/ https://ajax.googleapis.com/ajax/libs/jqueryui/ https://use.fortawesome.com/ https://cdn.higherlogic.com/ai-assistant https://static.filestackapi.com/picker/ https://fonts.googleapis.com/ https://d3uf7shreuzboy.cloudfront.net/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/UNIFORMLAWS/ https://higherlogicdownload.s3.amazonaws.com/UNIFORMLAWS/ https://higherlogiclongterm.s3.amazonaws.com/UNIFORMLAWS/ 'self'; font-src https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogiccloudfront.s3.amazonaws.com https://higherlogicdownload.s3.amazonaws.com/UNIFORMLAWS/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/UNIFORMLAWS/ 'self' https://higherlogiclongterm.s3.amazonaws.com/UNIFORMLAWS/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://d2x5ku95bkycr3.cloudfront.net https://d132x6oi8ychic.cloudfront.net data:; script-src-elem https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d3uf7shreuzboy.cloudfront.net/ https://static.filestackapi.com/picker/ https://cdn.higherlogic.com/ai-assistant https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d2x5ku95bkycr3.cloudfront.net/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://www.gstatic.com/recaptcha/ https://static.filestackapi.com/filestack-js/ 'self' https://ajax.aspnetcdn.com/ajax/ 'unsafe-eval' 'unsafe-inline'; media-src https://higherlogiclongterm.s3.amazonaws.com/UNIFORMLAWS/ https://higherlogicdownload.s3.amazonaws.com/UNIFORMLAWS/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/UNIFORMLAWS/ https://higherlogicstream.s3.amazonaws.com/UNIFORMLAWS/ 'self' https://d132x6oi8ychic.cloudfront.net; script-src https://higherlogiclongterm.s3.amazonaws.com/UNIFORMLAWS/ https://higherlogicdownload.s3.amazonaws.com/UNIFORMLAWS/ https://ajax.aspnetcdn.com/ajax/ https://cdn.jsdelivr.net/jquery.slick/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d132x6oi8ychic.cloudfront.net https://cdn.informz.net 'unsafe-eval' https://use.fortawesome.com/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/UNIFORMLAWS/ https://cdnjs.cloudflare.com/ajax/libs/prism/ 'unsafe-inline' https://d2x5ku95bkycr3.cloudfront.net/ https://higherlogiccloudfront.s3.amazonaws.com https://static.filestackapi.com https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d3uf7shreuzboy.cloudfront.net/ 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://api.connectedcommunity.org/ 'self' https://www.youtube.com/embed/ https://*.kb.us.higherlogic.com; connect-src https://upload.filestackapi.com https://static.filestackapi.com https://cloud.filestackapi.com/folder/list/ 'self' https://hl-managedservices.informz.net https://d3uf7shreuzboy.cloudfront.net/ blob:; worker-src 'self'; default-src 'self'; base-uri 'self'; frame-ancestors https://*.connectedcommunity.org/ 'self'; object-src 'none'; manifest-src 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.bgbau.de *.portsol19.de consent.cookiefirst.com www.youtube.com *.readspeaker.com *.friendlycaptcha.eu *.friendlycaptcha.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com blob: *.bgbau.de *.portsol19.de consent.cookiefirst.com *.youtube.com *.google.com fonts.gstatic.com *.readspeaker.com; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com *.bgbau.de *.portsol19.de consent.cookiefirst.com *.friendlycaptcha.eu *.friendlycaptcha.com *.readspeaker.com static.b-ite.com; style-src-elem 'self' 'unsafe-inline' consent.cookiefirst.com *.readspeaker.com fonts.googleapis.com www.gstatic.com um-proxy.bgbau.de 'report-sample'; frame-ancestors 'self' uv-nexus-portal-ab-uv-nexus-portal-qa.apps.ocean-11.bgpdmz.bgnet.de uv-nexus-portal-dev-uv-nexus-portal-dev.apps.ocean-05.ppro.bgnet.de; script-src-attr 'unsafe-inline' 'report-sample'; script-src-elem 'self' 'unsafe-inline' *.bgbau.de *.portsol19.de consent.cookiefirst.com *.readspeaker.com *.friendlycaptcha.eu *.friendlycaptcha.com static.b-ite.com cs-assets.b-ite.com connect.facebook.net fonts.gstatic.com 'report-sample'; style-src 'unsafe-inline' *.bgbau.de *.portsol19.de fonts.gstatic.com fonts.googleapis.com consent.cookiefirst.com *.readspeaker.com 'report-sample'; font-src 'self' data: *.bgbau.de *.portsol19.de fonts.gstatic.com; form-action 'self' *.bgbau.de *.portsol19.de *.readspeaker.com; media-src data: *.readspeaker.com *.bgbau.de *.portsol19.de; connect-src data: *.bgbau.de *.portsol19.de *.youtube-nocookie.com *.cookiefirst.com *.friendlycaptcha.eu *.friendlycaptcha.com jnn-pa.googleapis.com translate.googleapis.com *.readspeaker.com static.b-ite.com jobs.b-ite.com; worker-src blob: statistik.portsol19.de; object-src none; report-uri https://www.bgbau.de/@http-reporting?csp=report&requestTime=1789263854890460&requestHash=a4b1fe96a30d07373122dfab7cefc689555ae462 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'   https://*.googletagmanager.com   https://www.google.com https://www.gstatic.com   https://webforms.pipedrive.com https://cdn.cmh-1.pipedriveassets.com https://cdn.was-1.pipedriveassets.com   https://client.crisp.chat   https://static.hotjar.com https://script.hotjar.com   https://use.typekit.net   https://cdn-cookieyes.com https://cdn.weglot.com https://cdn.nitrocdn.com https://bat.bing.com; connect-src 'self'   https://*.googletagmanager.com   https://www.google.com https://*.analytics.google.com https://www.gstatic.com   https://client.crisp.chat wss://client.relay.crisp.chat   https://api.weglot.com   https://cdn-cookieyes.com https://log.cookieyes.com   https://vc.hotjar.io   https://stats.g.doubleclick.net https://cdn.weglot.com https://api-eu.mixpanel.com https://*.cookieyes.com https://to.getnitropack.com https://ad.doubleclick.net https://bat.bing.com; frame-src 'self'   https://www.google.com   https://webforms.pipedrive.com   https://*.googletagmanager.com   https://www.youtube.com https://www.youtube-nocookie.com   https://datastudio.google.com https://lookerstudio.google.com; img-src 'self' data: https:   https://image.crisp.chat   https://img.youtube.com; style-src 'self' 'unsafe-inline'   https://client.crisp.chat   https://use.typekit.net https://p.typekit.net https://cdn.weglot.com https://cdn.nitrocdn.com; font-src 'self' data: https: https://use.typekit.net; object-src 'none'; 1
default-src 'self' *.across.to across.to wss://api.blocknative.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' platform.twitter.com vercel.live www.googletagmanager.com widget.intercom.io js.intercomcdn.com; connect-src wss://*.walletconnect.com *.walletconnect.com wss://api.blocknative.com mainnet.infura.io *.across.to across.to *.wallet.coinbase.com *.alchemy.com *.infura.io *.sentry.io api-iam.intercom.io nexus-websocket-a.intercom.io api.intercom.io *.intercom.io api.hyperliquid.xyz; img-src 'self' *.walletconnect.com assets.vercel.com images.ctfassets.net data: js.intercomcdn.com static.intercomassets.com downloads.intercomcdn.com uploads.intercomusercontent.com gifs.intercomcdn.com; font-src 'self' fonts.gstatic.com assets.vercel.com use.typekit.net data: js.intercomcdn.com; style-src 'self' 'unsafe-inline' p.typekit.net use.typekit.net fonts.googleapis.com; frame-src 'self' vercel.live platform.twitter.com *.walletconnect.com intercom-sheets.com; frame-ancestors 'self'; report-uri https://umaproject.uriports.com/reports/report; report-to default 1
font-src *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com use.fontawesome.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://seo.mageplaza.com https://shopline.itau.com.br 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com player.vimeo.com www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de magento-cloudflare.jetrails.com www.youtube.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com https://plumrocket.com *.getbeamer.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.ytimg.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com cdn.mundipagg.com api.pagar.me www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.getbeamer.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com apis.google.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.googleapis.com *.google.com *.gstatic.com *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.googletagmanager.com *.facebook.net *.getbeamer.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com unsafe-inline use.fontawesome.com *.getbeamer.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de http://dpm.demdex.net https://www.google.com https://www.gstatic.com http://api.itaushopline.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.mundipagg.com api.pagar.me www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com https://viacep.com.br/ws/ *.google-analytics.com *.getbeamer.com https://api.mundipagg.com/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; worker-src 'self' blob:; base-uri 'self'; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-u0BhHkYYSBmbfU-v65pZpg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com fonts.gstatic.com craftelier.com *.craftelier.com hartem.com *.hartem.com *.paypal.com *.paypalobjects.com instantcredit.net test.instantcredit.net *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com es-blog.craftelier.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com webpay3g.transbank.cl webpay3gint.transbank.cl www.facebook.com www.paycomet.com api.paycomet.com https://plumrocket.com es-blog.craftelier.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com es-blog.craftelier.com 'self'; frame-src fast.amc.demdex.net *.adobe.com player.vimeo.com *.youtube.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com https://www.google.com/recaptcha/ bid.g.doubleclick.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com landofcoder.com www.facebook.com platform.twitter.com ct.pinterest.com td.doubleclick.net www.paycomet.com api.paycomet.com instantcredit.net test.instantcredit.net https://plumrocket.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.googletagmanager.com es-blog.craftelier.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com *.vimeocdn.com i.ytimg.com *.youtube.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.connectif.cloud *.stripe.com *.stripe.network *.google.com ebizmarts-website.s3.amazonaws.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com https://firebasestorage.googleapis.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com craftelier.com *.craftelier.com hartem.com *.hartem.com ct.pinterest.com s3-eu-west-1.amazonaws.com c.clarity.ms c.bing.com *.doofinder.com instantcredit.net test.instantcredit.net *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com https://redchamps.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.google.es *.googleadservices.com es-blog.craftelier.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.connectif.cloud *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.google.com *.sagepay.com *.opayo.eu.elavon.com landofcoder.com *.avada.io *.shopify.com connect.facebook.net twitter.com platform.twitter.com static.addtoany.com craftelier.com *.craftelier.com hartem.com *.hartem.com static.zdassets.com analytics.tiktok.com cdn.stg.p-a.io cdn.scalapay.com api.instagram.com js-agent.newrelic.com bam.eu01.nr-data.net cdn.connectif.cloud cdn.particularaudience.com b2c-cdn.scalapay.com s.pinimg.com www.clarity.ms dev.visualwebsiteoptimizer.com snippet.maze.co *.doofinder.com www.paycomet.com api.paycomet.com instantcredit.net test.instantcredit.net code.jquery.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.googletagmanager.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.google-analytics.com *.googleadservices.com es-blog.craftelier.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com craftelier.com *.craftelier.com hartem.com *.hartem.com *.doofinder.com instantcredit.net test.instantcredit.net *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.googletagmanager.com es-blog.craftelier.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com static.zdassets.com es-blog.craftelier.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.connectif.cloud *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com landofcoder.com https://get.geojs.io *.avada.io stats.addtoany.com craftelier.com *.craftelier.com hartem.com *.hartem.com analytics-ipv6.tiktokw.us stats.g.doubleclick.net ekr.zendesk.com ekr.zdassets.com recs-ap-e1a.stg.p-a.io craftelier.zendesk.com cdn.integration.scalapay.com wss://widget-mediator.zopim.com bam.eu01.nr-data.net eu5-api.connectif.cloud recs-us-e1a.particularaudience.com api.amplitude.com ct.pinterest.com www.facebook.com p.clarity.ms v.clarity.ms *.paypalobjects.com *.doofinder.com instantcredit.net *.instantcredit.net *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com https://analytics.tiktok.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.google.com *.googlesyndication.com *.googletagmanager.com googleads.g.doubleclick.net es-blog.craftelier.com 'self' 'unsafe-inline'; child-src es-blog.craftelier.com http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com craftelier.com *.craftelier.com hartem.com *.hartem.com widget-mediator.zopim.com analytics.tiktok.com es-blog.craftelier.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https://*.hint.com 'self' https://static.hsappstatic.net; img-src 'self' https://*.hint.com https://www.facebook.com https://app.hubspot.com https://*.hsforms.com https://avatars.hubspot.net https://static.hsappstatic.net https://www.google.com https://www.google.com https://t.co https://www.google-analytics.com https://analytics.twitter.com https://facebook.com https://heapanalytics.com https://p.typekit.net https://px.ads.linkedin.com https://www.google.com/ads https://www.facebook.com/tr https://track.hubspot.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://www.gstatic.com https://www.google.com/recaptcha/enterprise.js https://313589.fs1.hubspotusercontent-na1.net https://platform.twitter.com https://platform.linkedin.com/in.js  https://js.hsleadflows.net https://script.hotjar.com https://www.googletagmanager.com https://snap.licdn.com https://static.hotjar.com https://static.hsappstatic.net https://js.hs-scripts.com https://app.hubspot.com https://www.google-analytics.com https://static.ads-twitter.com https://cdn.heapanalytics.com https://connect.facebook.net https://my.hellobar.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hscollectedforms.net https://js.hsadspixel.net https://hsleadflows.net https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' https://static.hsappstatic.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://www.gstatic.com https://use.typekit.net https://cdn2.hubspot.net https://p.typekit.net https://fast.fonts.net https://px.ads.linkedin.com; object-src 'self'; font-src 'self' https://2562809.fs1.hubspotusercontent-na1.net https://cdnjs.cloudflare.com https://fonts.gstatic.com https://cdn2.hubspot.net https://use.typekit.net; connect-src 'self' https://forms.hscollectforms.net https://forms.hscollectforms.net https://js.hs-banner.com https://api.hubapi.com https://www.google-analytics.com https://*.hubspot.com https://stats.g.doubleclick.net https://forms.hscollectedforms.net; frame-src https://platform.twitter.com https://www.google.com 1
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: images.thegundock.com www.thegundock.com images.gunarama.com www.crowshootingsupply.com media.chattanoogashooting.com webstore.kinseysinc.com www2.hicksinc.com media.server.theshootingwarehouse.com www.lipseyscloud.com www.lipseys.net shop2.gzanders.com *.coreware.com testnetsuite.camfour.com *.app.netsuite.com www.mgewholesale.com www.msrdistribution.com *.cloudinary.com www.2ndamendmentwholesale.com lotpicture.com www.lotpicture.com *.cloudfront.net www.ironvalleysupply.com athlonoptics.com volquartsen.com i0.wp.com cdn11.bigcommerce.com primaryweapons.com ar15discounts.com *.avlws.com images.guns.com op1.0ps.us static.atncorp.com www.atncorp.com cdn.shopify.com checkout.ultradyneusa.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.hubspot.com *.hsforms.com *.hsforms.net *.hubapi.com js.hs-scripts.com js.hs-analytics.net js.hscollectedforms.net www.google.com www.gstatic.com challenges.cloudflare.com a.omappapi.com app.optinmonster.com app.enzuzo.com analytics.ahrefs.com *.convertexperiments.com www.youtube.com s.ytimg.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' data: fonts.gstatic.com; img-src 'self' data: https:; frame-src 'self' www.youtube.com www.youtube-nocookie.com www.googletagmanager.com *.hubspot.com *.hsforms.com *.hsforms.net challenges.cloudflare.com td.doubleclick.net www.google.com; connect-src 'self' *.google-analytics.com analytics.google.com *.hubapi.com *.hubspot.com app.enzuzo.com analytics.ahrefs.com *.convertexperiments.com ingest.promptwatch.com; frame-ancestors 'self'; form-action 'self' *.hubspot.com *.hsforms.com; object-src 'none'; base-uri 'self' 1
script-src 'unsafe-eval' 'self' *.futurumtest.nl *.futurumshop.nl *.criteo.net *.2mdn.net *.doubleclick.net *.google-analytics.com *.krxd.net *.youtube-nocookie.com adservice.google.be *.google.com adservice.google.nl *.googleapis.com c.go-mpulse.net cdn.syndication.twimg.com connect.facebook.net d31qbv1cthcecs.cloudfront.net ds-aksb-a.akamaihd.net fbstatic-a.akamaihd.net live.adyen.com *.cdn-apple.com *.googlesyndication.com *.googleadservices.com *.twitter.com s.ytimg.com securewebregistrations.net *.googletagservices.com *.gstatic.com *.visualstudio.com *.vimeo.com *.criteo.com *.visualwebsiteoptimizer.com *.googletagmanager.com *.bing.com robincontentdesktop.blob.core.windows.net googleads.g.doubleclick.net cdn.nowinteract.com rum-static.pingdom.net *.clarity.ms *.hotjar.com *.gstatic.com *.youtube.com *.facebook.net *.google-analytics.com *.robinhq.com *.vo.msecnd.net *.adyen.com *.paypal.com *.googleoptimize.com *.newrelic.com *.nr-data.net a.omappapi.com *.simpleanalyticscdn.com *.cloudflare.com analytics.ahrefs.com static.cloudflareinsights.com ; 1
frame-ancestors 'self'; object-src 'none'; report-to stott-security-endpoint; 1
style-src 'self' 'unsafe-inline' *.helsana.ch fonts.googleapis.com translate.googleapis.com;style-src-elem 'self' 'unsafe-inline' *.helsana.ch fonts.googleapis.com translate.googleapis.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com d3dc1lgancj6l0.cloudfront.net interaktiv.contilla.de use.fontawesome.com;img-src 'self' data: *.helsana.ch *.pinterest.com s0.2mdn.net bat.bing.com www.facebook.com connect.facebook.net cm.everesttech.net dpm.demdex.net apple-resources.s3.amazonaws.com  *.applemediaservices.com *.googlesyndication.com *.gstatic.com maps.googleapis.com www.googleadservices.com www.googletagmanager.com www.google-analytics.com *.doubleclick.net  t.co *.linkedin.com *.google.com *.google.ch *.google.de *.google.fr *.google.li *.google.it *.google.ad *.google.ae *.google.al *.google.at *.google.ba *.google.be *.google.bf *.google.bg *.google.bj *.google.ca *.google.cd *.google.cg *.google.ci *.google.cl *.google.cm *.google.cn *.google.cz *.google.dk *.google.dz *.google.ee *.google.es *.google.fi *.google.ga *.google.gr *.google.ht *.google.hr *.google.hu *.google.ie *.google.iq *.google.jo *.google.lk *.google.lt *.google.lu *.google.lv *.google.me *.google.mg *.google.ml *.google.mu *.google.nl *.google.no *.google.pl *.google.pt *.google.ro *.google.rs *.google.ru *.google.rw *.google.sc *.google.se *.google.si *.google.sk *.google.sn *.google.tg *.google.tn *.google.tt *.google.vg *.google.co.ao *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ma *.google.co.th *.google.co.uk *.google.co.za *.google.com.af *.google.com.ar *.google.com.au *.google.com.bh *.google.com.bo *.google.com.br *.google.com.co *.google.com.cy *.google.com.ec *.google.com.eg *.google.com.gh *.google.com.hk *.google.com.kh *.google.com.lb *.google.com.mt *.google.com.mx *.google.com.my *.google.com.na *.google.com.ni *.google.com.pe *.google.com.pk *.google.com.py *.google.com.sa *.google.com.sg *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.vn userlike-cdn-operators.s3-eu-west-1.amazonaws.com d3upe020n1uosc.cloudfront.net www.userlike.com userlike-store-media-files.s3.amazonaws.com i.ytimg.com interaktiv.contilla.de;font-src 'self' data: *.gstatic.com d3dc1lgancj6l0.cloudfront.net use.fontawesome.com *.helsana.ch;media-src 'self' data: blob: *.helsana.ch d3dc1lgancj6l0.cloudfront.net userlike-store-media-files.s3.amazonaws.com www.userlike.com;object-src 'none';worker-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.helsana.ch cdn.cookielaw.org static.ads-twitter.com analytics.twitter.com *.pinterest.com s.pinimg.com *.gstatic.com api.microsofttranslator.com bat.bing.com www.google.ch www.google.com www.google.de www.google.fr *.googlesyndication.com *.doubleclick.net www.googletagservices.com consentcdn.cookiebot.com analytics.twitter.com snap.licdn.com www.googleadservices.com www.google-analytics.com connect.facebook.net consent.cookiebot.com cdn.tt.omtrdc.net  maps.googleapis.com www.googletagmanager.com  assets.adobedtm.com api.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com d3dc1lgancj6l0.cloudfront.net;script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' blob: *.helsana.ch cdn.cookielaw.org static.ads-twitter.com snap.licdn.com analytics.twitter.com *.pinterest.com s.pinimg.com *.gstatic.com api.microsofttranslator.com bat.bing.com  www.google.ch www.google.com www.google.de www.google.fr *.googlesyndication.com *.doubleclick.net www.googletagservices.com consentcdn.cookiebot.com www.googleadservices.com www.google-analytics.com connect.facebook.net consent.cookiebot.com cdn.tt.omtrdc.net maps.googleapis.com www.googletagmanager.com cdnjs.cloudflare.com assets.adobedtm.com api.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com d3dc1lgancj6l0.cloudfront.net interaktiv.contilla.de analytics.tiktok.com;connect-src 'self' wss://*.helsana.ch *.helsana.ch maps.googleapis.com privacyportal-eu.onetrust.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com *.cookielaw.org api.sitesearch360.com *.ads-twitter.com *.linkedin.com *.pinterest.com api.openweathermap.org  www.facebook.com www.bing.com bat.bing.com *.googlesyndication.com  *.google.com *.doubleclick.net www.google-analytics.com  tt.omtrdc.net dpm.demdex.net wss://umd.userlike.com umd.userlike.com api.userlike.com d3upe020n1uosc.cloudfront.net www.userlike.com api.friendlycaptcha.com eu-api.friendlycaptcha.eu interaktiv.contilla.de;frame-src 'self' *.helsana.ch *.pinterest.ch *.pinterest.com *.google.com *.googlesyndication.com bid.g.doubleclick.net  consentcdn.cookiebot.com www.youtube.com fls.doubleclick.net assets.adobedtm.com  www.facebook.com api.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com d3dc1lgancj6l0.cloudfront.net www.youtube.com player.vimeo.com *.undpartner.digital;frame-ancestors 'self' *.helsana.ch;report-uri https://helsana.report-uri.com/r/d/csp/wizard;report-to wizard; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com cash-f.squarecdn.com fonts.googleapis.com *.googleapis.com data: cdn.equalweb.com access.equalweb.com *.fontawesome.com *.oct8ne.com oct8necdneu.azureedge.net blob: *.yotpo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * https://plumrocket.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * www.google.com *.certcapture.com access.equalweb.com www.xtento.com https://plumrocket.com js.mollie.com *.oct8ne.com static-eu.oct8ne.com *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.certcapture.com access.equalweb.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.xtento.com cdn.xtento.com https://maps.gstatic.com https://purecatamphetamine.github.io https://cdnjs.cloudflare.com https://www.mollie.com *.oct8ne.com static-eu.oct8ne.com oct8necdneu.azureedge.net blob: *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com beacon-qa.magento-datasolutions.com beacon-stage.magento-ds.com beacon.magento-ds.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://maps.googleapis.com https://player.vimeo.com https://rum.hlx.page maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.certcapture.com cdn.equalweb.com access.equalweb.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.xtento.com cdn.xtento.com js.mollie.com *.oct8ne.com static-eu.oct8ne.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.cash.app *.certcapture.com cdn.equalweb.com access.equalweb.com https://static.klaviyo.com *.fontawesome.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://www.youtube.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net p13n-mr.adobe.io *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.adobedc.net *.demdex.net *.magento-datasolutions.com *.magento-ds.com * https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.certcapture.com access.equalweb.com cdn.equalweb.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://ipinfo.io/json *.oct8ne.com static-eu.oct8ne.com *.yotpo.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com *.fontawesome.com https://cdnjs.cloudflare.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://www.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.ultra-rouge.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.dotdigital-pages.com *.dotdigital.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com webchat.dotdigital.com webchat.staging.dotdigital.com https://www.facebook.com https://ct.pinterest.com *.weltpixel.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net *.trackedlink.net *.ddlnk.net *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org https://cook.shortest-route.com https://cdn.cookielaw.org https://www.facebook.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.googleapis.com *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com webchat.dotdigital.com webchat.staging.dotdigital.com *.lenotre.com https://cdn.cookielaw.org https://bam.nr-data.net *.aticdn.net https://connect.facebook.net https://snap.licdn.com *.hotjar.com *.criteo.net *.criteo.com https://s.pinimg.com *.pinterest.com *.googlesyndication.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com https://cdnjs.cloudflare.com *.hsforms.net *.hsforms.com https://www.googletagmanager.com tagmanager.google.com https://www.lenotre.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com webchat.dotdigital.com webchat.staging.dotdigital.com *.fontawesome.com https://fonts.googleapis.com https://cdnjs.cloudflare.com *.googleapis.com *.gstatic.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com webchat.dotdigital.com webchat.staging.dotdigital.com https://maps.googleapis.com https://cdn.cookielaw.org https://bam.nr-data.net https://dmp.lenotre.com https://logs1412.xiti.com *.onetrust.com https://ct.pinterest.com https://region1.analytics.google.com *.linkedin.com *.criteo.com *.doubleclick.net *.googlesyndication.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com t.elasticsuite.io *.hsforms.net *.hsforms.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
upgrade-insecure-requests; default-src 'none'; object-src 'self'; media-src 'self'; connect-src 'self'; frame-ancestors 'none'; frame-src https://www.youtube.com; img-src 'self' data: https://www.google-analytics.com https://maps.gstatic.com https://csi.gstatic.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; script-src 'self' 'nonce-4ce9fb8f68deb455408629559a3b3f9bfa063e4c' 'sha256-NeueIEO8rwnaeJW0jYHRwrarPP+KzGzhk6xBJ06ntlw=' https://www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://maps.googleapis.com; 1
default-src 'none'; img-src 'self' https: ; script-src 'self' https: ; style-src 'self'; object-src 'none' 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-yJV3i9-d8RbA3IfqrYvInA' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
default-src 'self'; script-src 'self' https://www.googleadservices.com https://static.ads-twitter.com https://*.google.com https://*.google.be https://*.cloudflareinsights.com https://*.freshworks.com https://*.tiktok.com https://*.tiktokw.us https://*.zzgtech.com https://*.facebook.net https://widget.trustpilot.com https://*.ssevt.com https://*.googleapis.com https://*.gstatic.com https://*.google-analytics.com https://*.facebook.com https://*.googletagmanager.com https://*.signalsight.io https://cdn.jsdelivr.net https://kit.fontawesome.com https://*.pinimg.com https://ct.pinterest.com 'unsafe-inline'; img-src 'self' data: https://*.zzgtech.com https://*.pinterest.com https://*.tiktok.com https://*.tiktokw.us https://*.facebook.net https://*.ssevt.com https://*.googleapis.com https://*.gstatic.com https://*.google-analytics.com https://*.facebook.com https://*.googletagmanager.com https://*.signalsight.io https://www.googleadservices.com https://googleads.g.doubleclick.net https://analytics.twitter.com https://t.co https://*.google.com https://*.google.be; font-src 'self' https://*.bootstrapcdn.com https://*.sc-static.net https://*.googleapis.com https://*.gstatic.com https://*.fontawesome.com; style-src 'self' https://*.freshworks.com https://*.signalsight.io https://signalsight.io https://*.fontawesome.com https://*.bootstrapcdn.com https://*.googleapis.com 'unsafe-inline'; connect-src 'self' https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.freshworks.com https://*.zzgtech.com https://*.tiktok.com https://*.tiktokw.us https://*.facebook.net https://*.ssevt.com https://*.googleapis.com https://*.gstatic.com https://*.google-analytics.com https://*.facebook.com https://*.googletagmanager.com https://*.signalsight.io https://*.fontawesome.com https://*.pinterest.com https://*.google.com https://*.google.be https://analytics.twitter.com https://t.co; frame-src 'self' https://www.googleadservices.com https://widget.trustpilot.com https://www.googletagmanager.com https://*.zzgtech.com https://*.pinterest.com https://*.google.com https://*.google.be; form-action 'self'; frame-ancestors *.signalsight.io; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com https://www.afip.gob.ar https://www.facebook.com https://www.google.com.ar https://www.mercadopago.com.ar data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.avada.io *.shopify.com https://connect.facebook.net/ https://scripts.publitas.com https://www.googletagmanager.com https://www.clarity.ms https://scripts.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://get.geojs.io *.avada.io https://i.clarity.ms 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-ancestors 'self'; report-uri https://www.cairnspost.com.au/csp-reports 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: *.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.gstatic.com *.google-analytics.com unpkg.com hq.upment.com embedsocial.com connect.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.googleapis.com *.gstatic.com embedsocial.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubf6ba9bcf3c8946fb103ec6260f14c9ec&dd-evp-origin=content-security-policy&ddsource=csp-report; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.hsadspixel.net https://cognito-identity.eu-west-1.amazonaws.com https://www.googletagmanager.com https://www.google-analytics.com https://cdn.cookielaw.org http://cdn-4.convertexperiments.com https://www.gstatic.com https://s.pinimg.com https://dx.mountain.com https://bat.bing.com https://www.redditstatic.com https://smct.co https://advertiserpro.flexoffers.com http://collector-22856.us.tvsquared.com https://share.iflyworld.com https://www.clarity.ms https://c.amazon-adsystem.com https://connect.facebook.net https://cdn.attn.tv http://www.gstatic.com https://googleads.g.doubleclick.net http://origin-5.xtlo.net http://origin-2.xtlo.net http://origin-7.xtlo.net https://js.smct.io https://scripts.clarity.ms https://ct.pinterest.com http://px.mountain.com https://maps.googleapis.com https://gs.mountain.com https://js.hs-scripts.com https://js.hubspot.com https://js.hs-analytics.net https://js.hs-banner.com https://js.smct.co https://unpkg.com https://www.instagram.com https://capi-automation.s3.us-east-2.amazonaws.com https://bzrcdn.openai.com; script-src-elem 'self' 'unsafe-inline' blob: https://js.hsadspixel.net https://cognito-identity.eu-west-1.amazonaws.com https://www.googletagmanager.com https://www.google-analytics.com https://cdn.cookielaw.org http://cdn-4.convertexperiments.com https://www.gstatic.com https://s.pinimg.com https://dx.mountain.com https://bat.bing.com https://www.redditstatic.com https://smct.co https://advertiserpro.flexoffers.com http://collector-22856.us.tvsquared.com https://share.iflyworld.com https://www.clarity.ms https://c.amazon-adsystem.com https://connect.facebook.net https://cdn.attn.tv http://www.gstatic.com https://googleads.g.doubleclick.net http://origin-5.xtlo.net http://origin-2.xtlo.net http://origin-7.xtlo.net https://js.smct.io https://scripts.clarity.ms https://ct.pinterest.com http://px.mountain.com https://maps.googleapis.com https://gs.mountain.com https://js.hs-scripts.com https://js.hubspot.com https://js.hs-analytics.net https://js.hs-banner.com https://js.smct.co https://unpkg.com https://www.instagram.com https://capi-automation.s3.us-east-2.amazonaws.com https://apis.google.com https://cdn.segment.com https://cdn.crescendo.ai https://bzrcdn.openai.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://unpkg.com https://www.gstatic.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://unpkg.com https://www.gstatic.com https://www.paypalobjects.com https://cdn.crescendo.ai; media-src 'self' blob: data: https://cdn-development-products.iflyworld.com https://cdn-production-products.iflyworld.com https://stable-baseball-0abcece43b.media.strapiapp.com https://patient-flower-5496d2d8a2.strapiapp.com; img-src 'self' data: https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://analytics.google.com https://bat.bing.com https://c.bing.com https://cdn-production-products.iflyworld.com https://cdn-development-products.iflyworld.com https://patient-flower-5496d2d8a2.media.strapiapp.com https://stable-baseball-0abcece43b.media.strapiapp.com https://patient-flower-5496d2d8a2.strapiapp.com https://cdn.cookielaw.org https://bidagent.xad.com https://alb.reddit.com http://collector-22856.us.tvsquared.com https://*.clarity.ms https://googleads.g.doubleclick.net https://www.facebook.com https://events.smct.co https://stats.g.doubleclick.net https://perf-na1.hsforms.com https://www.googleadservices.com https://maps.gstatic.com https://maps.googleapis.com https://track.hubspot.com https://connect.facebook.net https://events.attentivemobile.com https://fonts.gstatic.com https://px.premion.com https://region1.analytics.google.com https://storage.googleapis.com https://api.phia.com https://www.google.be https://www.google.ca https://www.google.co.za https://www.google.com.ec https://iflyworld-us.attn.tv https://www.google.es https://www.google.nl https://streetviewpixels-pa.googleapis.com https://khms0.googleapis.com https://khms1.googleapis.com https://lh3.googleusercontent.com https://lh3.ggpht.com https://www.paypalobjects.com https://pagead2.googlesyndication.com https://www.google.com.au https://www.google.co.uk https://www.google.co.in https://www.google.se https://www.google.com.mx https://www.google.com.ph https://www.google.com.pk https://www.google.com.sg https://www.google.com.tw https://www.google.bg https://www.google.com.ng https://www.google.com.co https://www.google.com.br https://www.google.pt https://www.google.ae https://www.google.com.vn https://www.google.hn https://www.google.bs https://www.google.no https://www.google.com.pr https://www.google.ro https://www.google.co.nz https://www.google.co.th https://www.google.co.jp https://www.google.dk https://www.google.fr https://www.google.it https://bzr.openai.com https://sgtm.iflyworld.com; font-src 'self' data: https://fonts.gstatic.com https://www.paypalobjects.com https://cdn.honey.io; connect-src 'self' https://s.pinimg.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://stg-coreapi.iflyworld.com https://coreapi.iflyworld.com https://sgtm.iflyworld.com https://px.premion.com https://ct.pinterest.com https://c.amazon-adsystem.com https://s.amazon-adsystem.com https://ara.paa-reporting-advertising.amazon https://bat.bing.com https://pixel-config.reddit.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://events.attentivemobile.com https://www.googleadservices.com https://iflyworld-us.attn.tv https://*.clarity.ms https://cognito-identity.eu-west-1.amazonaws.com https://maps.googleapis.com https://browser-intake-datadoghq.com https://browser-intake-us3-datadoghq.com https://js.smct.io https://www.facebook.com https://cdn-4.convertexperiments.com https://firehose.eu-west-1.amazonaws.com https://mpc2-prod-29-is5qnl632q-uc.a.run.app https://privacyportal.onetrust.com https://googleads.g.doubleclick.net https://api.hubapi.com https://cta-service-cms2.hubspot.com https://aax-eu.amazon-adsystem.com https://bot-service.enegel.ai https://iflyworld.attn.tv https://js.smct.co https://100.20.58.101 https://18.210.229.244 https://3.212.39.155 https://34.215.155.61 https://35.160.46.251 https://35.85.84.151 https://44.212.189.233 https://44.228.85.26 https://44.238.122.172 https://52.22.50.55 https://52.71.121.170 https://54.156.2.105 https://pagead2.googlesyndication.com https://demo-1.conversionsapigateway.com https://bat.bing.net https://bot.crescendo.ai wss://bot.crescendo.ai https://ad.doubleclick.net https://bzr.openai.com https://bzrcdn.openai.com; frame-src 'self' https://www.google.com https://www.googletagmanager.com https://ct.pinterest.com https://sgtm.iflyworld.com https://d2d7do8qaecbru.cloudfront.net https://s.amazon-adsystem.com https://www.facebook.com https://ls.smct.io https://creatives.attn.tv https://www.instagram.com https://toolytics.pa.clients6.google.com https://6994014.fls.doubleclick.net; object-src 'none'; base-uri 'self'; worker-src 'self' blob:; child-src 'self' blob:; form-action 'self' https://booking.iflyworld.com https://www.facebook.com; 1
default-src 'self'; base-uri 'none'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' https://platform.twitter.com https://*.twitter.com https://*.twimg.com https://s3.tradingview.com https://*.tradingview.com https://va.vercel-scripts.com; style-src 'self' 'unsafe-inline' https://platform.twitter.com https://*.twimg.com; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https://twitter.com https://*.twitter.com https://tradingview.com https://*.tradingview.com https://tradingview-widget.com https://*.tradingview-widget.com https://dexscreener.com https://*.dexscreener.com https://geckoterminal.com https://*.geckoterminal.com https://defined.fi https://*.defined.fi; worker-src 'self' blob:; media-src 'self' data: blob: https:; manifest-src 'self'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * landofcoder.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://firebasestorage.googleapis.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.avada.io *.shopify.com *.google.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com landofcoder.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com landofcoder.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
report-to *.usercentrics.eu; font-src https://www.googletagmanager.com *.googleapis.com *.gstatic.com https://geowidget.easypack24.net maxcdn.bootstrapcdn.com https://widgets.trustedshops.com *.fontawesome.com *.usercentrics.eu data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.usercentrics.eu 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://d3bo67muzbfgtl.cloudfront.net js.mollie.com https://geowidget-app.inpost.pl/ https://sandbox-easy-geowidget.easypack24.net/ secure.payu.com merch-prod.snd.payu.com *.usercentrics.eu *.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com https://images.unsplash.com *.googleapis.com https://d3bo67muzbfgtl.cloudfront.net https://d3vhsxl1pwzf0p.cloudfront.net https://www.mollie.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org static.payu.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.usercentrics.eu https://admin.helikon-tex.com *.etrusted.com *.googlesyndication.com *.google.pl *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com tagmanager.google.com https://www.googletagmanager.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js https://maps.googleapis.com *.googleapis.com *.gstatic.com https://d3bo67muzbfgtl.cloudfront.net https://d3vhsxl1pwzf0p.cloudfront.net js.mollie.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org secure.payu.com secure.snd.payu.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.avada.io *.usercentrics.eu https://id1247.entirem.com *.cloudflareinsights.com *.trustedshops.com *.clarity.ms https://mailing.entirem.com *.ahrefs.com *.crazyegg.com *.gr-cdn.com *.gr-wcon.com *.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com fonts.googleapis.com https://geowidget.easypack24.net https://geowidget.inpost.pl maxcdn.bootstrapcdn.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.fontawesome.com *.usercentrics.eu *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com https://api.edrone.me *.easypack24.net *.inpost.pl *.openstreetmap.org secure.payu.com merch-prod.snd.payu.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://get.geojs.io *.avada.io *.usercentrics.eu https://id1247.entirem.com *.cloudflareinsights.com *.frankfurter.app *.doubleclick.net *.clarity.ms *.getresponse.com *.ahrefs.com *.crazyegg.com *.facebook.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://s7.addthis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com *.payu.co.za *.spitz.co.za 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.googleapis.com *.gstatic.com *.payu.co.za *.spitz.co.za 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-ancestors 'self'; report-uri https://www.townsvillebulletin.com.au/csp-reports 1
default-src 'self'; script-src 'report-sample' 'self' https://cdnjs.cloudflare.com/ajax/libs/lottie-web/5.8.1/lottie.min.js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/js https://player.vimeo.com/api/player.js 'sha256-FSevH+aW1elUrWYqKfiu3xdrYlsrq1pzbI5VpKisyLM='; style-src 'report-sample' 'self' https://fonts.googleapis.com 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='; object-src 'none'; base-uri 'self'; connect-src 'self' https://analytics.google.com https://www.google-analytics.com https://o969560.ingest.sentry.io https://stats.g.doubleclick.net; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://player.vimeo.com; img-src https: data:; manifest-src 'self'; media-src 'self' https://assts.stories.sc https://player.vimeo.com https://*.vimeocdn.com; report-uri https://o969560.ingest.sentry.io/api/5920728/security/?sentry_key=e6ced77cc723478fad969f5f3ba00b06 worker-src 'none'; 1
object-src 'none';base-uri 'self';script-src 'nonce-RWcoBOaq1XGBKhKjngS5mQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src * data: blob: ; script-src 'nonce-1052162fcdd87ac42ab04fe6d3520450' 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.realmusic.ru https://www.realrocks.ru https://*.realmusic.ru https://*.realrocks.ru https://s.ytimg.com https://*.google-analytics.com https://*.youtube.com https://maps.googleapis.com https://translate.googleapis.com https://*.google.com https://google.com https://*.gstatic.com https://*.google.ru https://www.googletagmanager.com https://googletagmanager.com https://fonts.googleapis.com/ https://cdnjs.cloudflare.com/ https://yastatic.net https://mc.yandex.ru https://mc.yandex.com https://unpkg.com/ https://cdn.jsdelivr.net https://code.jquery.com ; script-src-attr 'self' 'unsafe-inline' ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://cdnjs.cloudflare.com/ https://unpkg.com/ https://cdn.jsdelivr.net ; media-src 'self' about: https://*.realrocks.ru https://*.realmusic.ru ; frame-ancestors 'self' https://vk.com https://*.vk.com https://away.vk.com https://www.vk.com ; report-uri /report-to.php ; report-to csp 1
script-src 'self' https: https://www.google-analytics.com https://cdn.amplitude.com 'unsafe-eval' 'unsafe-inline' data: 'nonce-oqvKErrOYfI1d9GHcrSTIw=='; worker-src blob: data:; report-uri https://us.sentry.io/api/4506690010480640/security/?sentry_key=aab2498373841041d6b48d721aefbdc1&sentry_environment=production&sentry_release=36303ea48609a3c49a7c54f572c82757b3bf3bed 1
default-src 'self' https://*.phl.org https://phl.org http://phl-preprod.eastus2.cloudapp.azure.com https://*.opendns.com; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://use.typekit.net https://p.typekit.net https://cdn.jsdelivr.net https://www.gstatic.com https://code.jquery.com https://*.userway.org; img-src 'self' https: data: https://*.google-analytics.com https://www.googletagmanager.com https://*.g.doubleclick.net https://*.google.com ; font-src 'self' https://fonts.gstatic.com https://use.typekit.net https://p.typekit.net https://cdnjs.cloudflare.com data:; connect-src 'self' https://cdn.jsdelivr.net https://www.facebook.com http://*.facebook.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://*.crazyegg.com https://api.livereachmedia.com https://translate.googleapis.com https://*.phl.org https://phl.org http://phl-preprod.eastus2.cloudapp.azure.com https://*.opendns.com http://10.10.19.5 http://*.crazyegg.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://*.googleapis.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://pagead2.googlesyndication.com https://*.userway.org https://ad.doubleclick.net https://www.googleadservices.com https://googleads.g.doubleclick.net; frame-src 'self' https://phl.wherewefly.com https://www.googletagmanager.com https://www.youtube.com https://www.google.com https://phl.maps.arcgis.com https://simplebooklet.com https://webtrak.emsbk.com https://us.webtrak.aero https://www.googletagmanager.com; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com https://cdn.fastcomments.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://*.crazyegg.com https://api.livereachmedia.com https://code.jquery.com https://cdnjs.cloudflare.com https://translate.googleapis.com https://translate-pa.googleapis.com https://translate.google.com https://cdn.jsdelivr.net https://*.doubleclick.net https://*.googleadservices.com https://connect.facebook.net https://*.phl.org https://phl.org http://phl-preprod.eastus2.cloudapp.azure.com https://*.opendns.com http://*.crazyegg.com http://code.jquery.com https://www.youtube.com https://*.facebook.com https://cdn.userway.org https://www.googleadservices.com https://googleads.g.doubleclick.net https://ssl.google-analytics.com https://tagmanager.google.com https://cdn.cookielaw.org https://privacyportal-eu.onetrust.com https://privacyportal.onetrust.com 'nonce-3aIp50L3Sz8jgh4PiMK4HA=='; report-uri /report-csp-violation; 1
connect-src *.spiraxsarco.com *.onetrust.com *.onetrust.io *.google-analytics.com *.hotjar.com *.hotjar.io *.clarity.ms wss://*.hotjar.com 'self' px.ads.linkedin.com google.com analytics.google.com region1.analytics.google.com www.google-analytics.com www.googletagmanager.com pagead2.googlesyndication.com www.googleadservices.com ad.doubleclick.net stats.g.doubleclick.net 680-ryi-639.mktoresp.com forms.hubspot.com forms.hsforms.com cdn.linkedin.oribi.io hummingbirdwebsocket-nld2.cloud.adobe.io adservice.google.com translate.googleapis.com googleads.g.doubleclick.net www.google.com www.google.co.uk www.google.ae www.google.by www.google.com.gh www.google.com.mm www.google.ga www.google.am www.google.as www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bi www.google.bs www.google.ca www.google.cd www.google.cg www.google.ch www.google.ci www.google.cl www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.hu www.google.co.id www.google.co.il www.google.co.im www.google.co.in www.google.co.je www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.co.nz www.google.co.th www.google.co.ug www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kw www.google.com.ly www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.nf www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.uz www.google.com.vc www.google.com.vn www.google.cn www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.gg www.google.gl www.google.gm www.google.gr www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.is www.google.it www.google.jo www.google.kg www.google.kz www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.mn www.google.ms www.google.mu www.google.mw www.google.net www.google.nl www.google.no www.google.nr www.google.nu www.google.pl www.google.pn www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.tm www.google.tn www.google.to www.google.tp www.google.tt www.google.tv www.google.uz www.google.vg www.google.vu www.google.ws www.google.co.zw www.google.dz/ads/ga-audiences www.google.al/ads/ga-audiences www.google.bf/ads/ga-audiences ttps://www.google.by/ads/ga-audiences www.google.cm/ads/ga-audiences www.google.co.ao/ads/ga-audiences ttps://www.google.co.mz/ads/ga-audiences www.google.co.tz/ads/ga-audiences www.google.com.bn/ads/ga-audiences ttps://www.google.com.gh/ads/ga-audiences www.google.com.kh/ads/ga-audiences www.google.com.lb/ads/ga-audiences ttps://www.google.com.mm/ads/ga-audiences www.google.com.ng/ads/ga-audiences www.google.com.pg/ads/ga-audiences ttps://www.google.dz/ads/ga-audiences www.google.ge/ads/ga-audiences www.google.iq/ads/ga-audiences www.google.sr/ads/ga-audiences 680-ryi-639.mktoutil.com wss://lo.msg.liveperson.net bat.bing.com js.calltrk.com mc.yandex.ru yandexmetrica.com:30103 ymetrica1.com; font-src *.onetrust.com 'self' fonts.gstatic.com use.typekit.net script.hotjar.com data:; img-src optimize.google.com www.google-analytics.com www.googletagmanager.com 'self' data: *; manifest-src 'self'; script-src *.onetrust.com *.scr.kaspersky-labs.com www.googleanalytics.com www.googleoptimize.com optimize.google.com static.ads-twitter.com 'self' 'nonce-YThjN2I2YWItZWVhMy00NDA5LWI3NGEtOTNmYThlMjQwNzVh' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' 'sha256-MhtPZXr7+LpJUY5qtMutB+qWfQtMaPccfe7QXtCcEYc=' 'sha256-NiPpcuG5iPK1KPR3YIEEEz98KT0W7243V6u7FeP7hdE=' 'sha256-gRuNVLzs+xy+3p6+I1CnZb8pDmnXUWSlO9ejbnSR/lQ=' 'sha256-ibqfaR/CmFL3wQZAxIuZ0V4RMm9txqHSln46Z5WyeVA=' 'sha256-30EB3olZggJZ3OT2ahL22VzuYSIEPTzmMb+L3StxKgI=' 'sha256-IgMQOOOedQeMPBl7lSreMVPmJvU62bc6l8HcsGXnbWc=' 'sha256-qbWCytLP5JMsZSG1DsvruBVK5O5otEfzrwtrYklbihw=' 'sha256-bkXrlHTrWu78qnQooXw+JqlG1rZijbuVZIkNBzTfagM=' 'sha256-vbs/XR7vkC12NXdDH8FEaUASiJdg/16cqF/0T3ze1ks=' 'sha256-4nxBwvGtrokGNkqD2OxOt8Y07P7caJHk00sGwjNYF5I=' 'sha256-/Fu0G2rh4wmpTYIDt4lb/x5WJp6zusqpavun8dZ8Yns=' 'sha256-yqVa7ver8F3o3KAsmdt2r10wQlIPCHuaBhkxEMbFQKE=' 'sha256-pZ/qdkaCfUhJbPDW6dxGk6IT/oRRR/mlpXeonIs9iew=' 'sha256-t2dxu6v8zWLBnuT0wS9gbS8+6dWSZKwyh8Oc1O+KFKM=' 'sha256-nOEqrdYQbjOqHNv8REn7NbgmgfgpHFGAMJeDad9+6Cc=' 'sha256-i9Hqrp5R5xqtEYAfxGINmtDPcds/LnLceINVGS0StZg=' 'sha256-5E/6sj96qbSHixz46qooKeWA+LIjK6XzdMgxXJYGMCo=' 'sha256-ZjDDDO/TrMCju3UiIns3DMC7cnl6jp0zh9NKm11JAyY=' 'sha256-pJrmX8BIQNU7+D+cF3F3p3Z/mHxe83gyTZAzRGq+YBE=' solutions.spiraxsarco.com ssl.google-analytics.com connect.facebook.net www.facebook.net www.google-analytics.com www.googletagmanager.com www.gstatic.com www.youtube.com platform.twitter.com cdn.syndication.twimg.com www.google.com accdn.lpsnmedia.net googleads.g.doubleclick.net js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsforms.net js.hsleadflows.net lo.v.liveperson.net lpcdn.lpsnmedia.net lptag.liveperson.net munchkin.marketo.net script.hotjar.com snap.licdn.com static.hotjar.com www.googleadservices.com www3.spiraxsarco.com cdn.calltrk.com pi.pardot.com bat.bing.com js.calltrk.com; style-src-elem *.onetrust.com 'self' solutions.spiraxsarco.com fonts.googleapis.com p.typekit.net use.typekit.net platform.twitter.com ton.twimg.com assets.calendly.com optimize.google.com www.googletagmanager.com 'unsafe-inline'; frame-src *.spiraxsarco.com *.doubleclick.net optimize.google.com vars.hotjar.com *.liveperson.net lpcdn.lpsnmedia.net www.traceparts.com traceparts-cache.s3.eu-west-1.amazonaws.com www.googletagmanager.com www.facebook.com www.google.com www.youtube.com m.youtube.com share.hsforms.com platform.twitter.com syndication.twitter.com player.vimeo.com calendly.com spiraxsarco.octadesk.com www.buzzsprout.com go.pardot.com www.linkedin.com; media-src 'self' *.spiraxsarco.com lpcdn.lpsnmedia.net; form-action 'self' resources.spiraxsarco.com; style-src-attr 'unsafe-inline'; object-src 'none'; base-uri 'self'; report-uri https://steam.report-uri.com/r/d/csp/enforce 1
default-src 'self' 'unsafe-inline'; script-src https: 'self' 'unsafe-inline' 'unsafe-eval'; style-src https: 'self' 'unsafe-inline'; 1
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/  https://widget.trustpilot.com;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://appleid.cdn-apple.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com *.myheritage.dk https://www.myheritage.dk  'unsafe-eval' 'nonce-e7ee4698225d1c89093afd5fc9c42c86' 'strict-dynamic' https://widget.trustpilot.com https://invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style  https://widget.trustpilot.com;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io https://www.google.com/recaptcha/enterprise/* https://www.google.com/recaptcha/enterprise/ https://www.google.com/recaptcha/enterprise/clr https://www.google.com/recaptcha/ https://maps.googleapis.com https://people.googleapis.com https://translate-pa.googleapis.com *.myheritage.dk https://widget.trustpilot.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:  https://widget.trustpilot.com https://*.trustpilot.com;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=report&canonical_page_id=/company/home/ 1
base-uri 'self'; connect-src 'self' https://ph.brightside.com https://to.getnitropack.com https://www.googletagmanager.com https://us.i.posthog.com https://cdn-bdbem.nitrocdn.com https://app.impact.com https://segment.brightside.com https://analytics.brightside.com https://logs.browser-intake-datadoghq.com https://rum.browser-intake-datadoghq.com https://api.segment.io https://api.lab.amplitude.com https://api.reviews.io; default-src 'self'; font-src 'self' data: https://cdn-bdbem.nitrocdn.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://use.typekit.net; form-action 'self' https://app.brightside.com; frame-ancestors 'self'; frame-src 'self' https://player.vimeo.com https://www.googletagmanager.com https://decagon.ai https://ats.rippling.com; img-src 'self' data: blob: https://cdn-bdbem.nitrocdn.com https://www.googletagmanager.com https://us.i.posthog.com https://ph.brightside.com https://www.psychologytoday.com https://static.legitscript.com https://seal-goldengate.bbb.org https://brightside.com; manifest-src 'self'; media-src 'self' https://cdn-bdbem.nitrocdn.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn-bdbem.nitrocdn.com https://ph.brightside.com https://www.googletagmanager.com https://to.getnitropack.com https://us.i.posthog.com https://analytics.brightside.com https://static.cloudflareinsights.com https://cdnjs.cloudflare.com https://unpkg.com https://member.psychologytoday.com https://www.psychologytoday.com https://www.datadoghq-browser-agent.com https://ajax.googleapis.com https://seal-goldengate.bbb.org https://decagon.ai https://static.legitscript.com https://cdn.amplitude.com https://player.vimeo.com https://static-assets.ripplingcdn.com; style-src 'self' 'unsafe-inline' https://cdn-bdbem.nitrocdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://use.typekit.net https://p.typekit.net; worker-src 'self' blob:; report-uri https://us.i.posthog.com/report/?sample_rate=0.81&token=phc_O2SwT92ydVijluprDRqDw8tcGiuNPR4DSE4J96gXKwM&v=cloudflare-marketing-report-only-v1 1
default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://picsum.photos https://images.unsplash.com https://new.oic-oci.org https://cdn.oic-apps.org https://flagpedia.net https://cdn.britannica.com https://upload.wikimedia.org https://img.youtube.com; media-src 'self' blob:; font-src 'self' data:; connect-src 'self'; frame-src 'self' https://www.youtube.com https://www.google.com https://maps.google.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; require-trusted-types-for 'script' 1
default-src 'self'; img-src 'self' data: blob:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://pagead2.googlesyndication.com https://*.googlesyndication.com https://*.googletagservices.com https://fundingchoicesmessages.google.com https://termine.zebrapunkte.com https://stats.namibia-forum.ch; frame-src 'self' https://*.googlesyndication.com https://googleads.g.doubleclick.net https://www.youtube-nocookie.com https://player.vimeo.com https://termine.zebrapunkte.com https://www.google.com https://zebramap.com; connect-src 'self' https://*.google.com https://*.googlesyndication.com https://termine.zebrapunkte.com https://stats.namibia-forum.ch; font-src 'self' data:; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://gcsoft.it *.smartsuppchat.com *.smartsuppcdn.com wss://*.smartsupp.com https://*google-analytics.com https://xptrading.gcsoft.it https://mywallet-sandbox.admiralpay.it cdnjs.cloudflare.com betitaly.it *.betitaly.it askmesuite.com *.askmesuite.com safecharge.com *.safecharge.com cdn.cookielaw.org cdn.jsdelivr.net *.amazonaws.com *.duckdb.org *.microgame.it *.go-mpulse.net *.akstat.io *.akamaihd.net; style-src 'self' 'unsafe-inline' *.smartsuppcdn.com https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' about: https://3ds.nexigroup.com https://secure7.arcot.com https://mywallet-sandbox.admiralpay.it https://affiliazione.betitalynetwork.it https://*.poste.it https://acs.nexigroup.com https://apps.drimify.com https://paye.netsgroup.com https://shoplocator.betitalynetwork.it safecharge.com *.safecharge.com *.betitaly.it web.vaservices.eu *.sportradar.com *.microgame.it *.skrill.com *.giocodigitale.it *.evo-games.com; img-src 'self' blob: data: *.amazonaws.com https://www.googletagmanager.com *.smartsuppcdn.com *.betitaly.it; frame-ancestors 'self' https://www.betitaly.it mokabingo3.giocodigitale.it; report-uri https://csp-report.microgamenewbos.it/csp-report; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net *.userway.org maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com magefan.com cm.magefan.com https://images.unsplash.com maps.gstatic.com *.googleapis.com *.ggpht.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com https://firebasestorage.googleapis.com *.userway.org *.automann.com *.pixriot.com *.storeimaging.com data: 'self' 'unsafe-inline'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net *.userway.org maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; connect-src *.clarity.ms dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://maps.googleapis.com https://player.vimeo.com *.amazonaws.com wss://transcribestreaming.us-east-1.amazonaws.com:8443 *.gstatic.com data: *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net https://get.geojs.io *.avada.io *.userway.org webservices.purolator.com devwebservices.purolator.com *.pixriot.com *.storeimaging.com 'self' 'unsafe-inline'; frame-src automann-scanner.global.ssl.fastly.net fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.livechatinc.com *.userway.org webservices.purolator.com devwebservices.purolator.com 'self' 'unsafe-inline'; script-src *.clarity.ms *.cloudfront.net assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://cdn.jsdelivr.net/ https://maps.googleapis.com maps.googleapis.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.avada.io *.shopify.com browser-update.org *.userway.org *.livechatinc.com 'self' 'unsafe-inline' 'unsafe-eval'; 1
font-src fonts.gstatic.com use.typekit.net *.klarnacdn.net *.fontawesome.com *.cloudfront.net *.zopim.com *.sfdcstatic.com https://c1.sfdcstatic.com/etc/clientlibs/sfdc-aem-master/clientlibs_base/fonts/SalesforceSans-Regular.ttf use.fontawesome.com maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klarna.com landofcoder.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://plumrocket.com www.xtento.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net widgets.automizely.com widgets.automizely.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de static-eu.payments-amazon.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://img.youtube.com *.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.scosche.com *.google.co.in *.sharethis.com *.adnxs.com *.adsrvr.org *.b1img.com *.amazon.com/* http://b1img.com *.force.com *.cloudfront.net www.xtento.com cdn.xtento.com *.yotpo.com swellrewards.com *.swellrewards.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com ajax.googleapis.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.thecustomproductbuilder.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klarna.com *.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.kaptcha.com landofcoder.com s7.addthis.com *.googletagmanager.com *.facebook.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinalcommerce.com g.doubleclick.net *.google.com *.zdassets.com *.nmgassets.com *.expertrec.com *.tiktok.com *.trackedweb.net *.shop.pe *.google.co.in *.sharethis.com *.zopim.com *.adnxs.com *.b1js.com *.cloudfront.net *.hotjar.com *.b1img.com http://shop.pe *.amazonaws.com http://b1img.com *.jsdelivr.net *.zendesk.com *.newrelic.com *.force.com https://service.force.com/embeddedservice/5.0/esw.min.js *.shopbox.ai https://shopbox-widgets-storybook.pages.dev/sbmain.min.js https://d.la1-core1.sfdc-lywfpd.salesforceliveagent.com *.salesforceliveagent.com https://d41000002lgrjea2.my.salesforce-sites.com *.my.salesforce-sites.com https://d41000002lgrjea2.my.salesforce.com/lightning/lightning.out.js https://d41000002lgrjea2.my.salesforce.com/lightning/lightning.out.delegate.js https://cdnjs.cloudflare.com/ajax/libs/dompurify/1.0.10/purify.js https://cmp.osano.com/AzqbnpTQhAyVm3E99/8df62698-cfde-462e-8a72-94fe3192c7c1/osano.js https://s.pinimg.com/ct/core.js https://s.pinimg.com/ct/lib/main.15f60036.js https://d41000002lgrjea2.my.salesforce-sites.com/liveAgentSetupFlow/embeddedService/sidebarApp.app *.iesnare.com *.pinimg.com *.pinterest.com www.xtento.com cdn.xtento.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com widgets.automizely.com widgets.automizely.io *.klarnacdn.net https://static.klaviyo.com *.fontawesome.com unsafe-inline assets.braintreegateway.com *.cloudfront.net *.addshoppers.com *.force.com https://d41000002lgrjea2.my.salesforce-sites.com https://d.la1-core1.sfdc-lywfpd.salesforceliveagent.com *.salesforceliveagent.com *.my.salesforce-sites.com https://static-tracking.klaviyo.com/onsite/js/532.fa051703115da6a50763.css *.klaviyo.com *.yotpo.com swellrewards.com *.swellrewards.com maxcdn.bootstrapcdn.com *.googleapis.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com *.iesnare.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io api.automizely.com api.automizely.io *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.kaptcha.com landofcoder.com ekr.zdassets.com/ *.google-analytics.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.sharethis.com *.trackedweb.net *.klaviyo.com *.zopim.com *.zendesk.com *.hotjar.io *.shop.pe wss://widget-mediator.zopim.com wss://pod-27.zendesk.com *.nr-data.net https://bam.nr-data.net *.jsdelivr.net *.my.sentry.io *.hotjar.com/* wss://ws.hotjar.com *.safeopt.com *.scosche.com *.force.com *.run.app *.a.run.app https://d.la1-core1.sfdc-lywfpd.salesforceliveagent.com *.salesforceliveagent.com https://d41000002lgrjea2.my.salesforce-sites.com *.my.salesforce-sites.com *.tiktok.com *.pinterest.com *.googleapis.com *.iesnare.com *.osano.com *.api.osano.com  wss://mpsnare.iesnare.com/star *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=aafu6bFcplf4EIueqiQAsNuwopaPG_op.VKYvuWchvM-1789267437.9449527-1.0.1.1-KN6iZz9xvdBmjtt4q1UgiOhbt5LAr0cH1wq8w3LwvCc7CX_ZEoAfZ0eIOE8tg3ww2_XqjEzVwbqT8TjU.ENU3ByMsnvMfl9lF9R49lNiUx4Et_btRULe6LllWsNUAOkTEMsmfWV5eUeFDCpL7lY_W_pyFPMJbloEitcnTctl5ps; report-to cf-csp-endpoint 1
font-src data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors *.paypal.com *.paypalobjects.com 'self' 'unsafe-inline'; frame-src www.paypal.com www.sandbox.paypal.com accounts.google.com *.paypal.com *.paypalobjects.com player.vimeo.com vimeo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com https://static.afterpay.com https://site-assets.afterpay.com/ *.paypal.com *.paypalobjects.com maps.gstatic.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com www.googleadservices.com www.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com cdn-scripts.signifyd.com https://portal.sandbox.afterpay.com https://portal.afterpay.com https://static.afterpay.com https://js.sandbox.afterpay.com https://js.afterpay.com accounts.google.com *.paypal.com *.paypalobjects.com maps.googleapis.com https://accounts.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src static.afterpay.com/ js.sandbox.afterpay.com js.afterpay.com accounts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src player.vimeo.com vimeo.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src static.afterpay.com static.sandbox.afterpay.com js.sandbox.afterpay.com js.afterpay.com accounts.google.com *.paypal.com *.paypalobjects.com 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https: 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.klarnacdn.net 'self' data: *.cloudflare.com fonts.googleapis.com *.mdoq.io *.mdoq.dev *.tweekscycles.com *.demon-tweeks.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.clearpay.co.uk *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klarna.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com widget.trustpilot.com lpcdn.lpsnmedia.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * *.afterpay.com *.clearpay.co.uk *.trackedlink.net https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: *.googletagmanager.com ssl.gstatic.com www.gstatic.com *.cloudflare.com *.google.com *.google.co.uk *.cookiebot.com *.mdoq.io *.mdoq.dev *.tweekscycles.com *.demon-tweeks.com *.facebook.com *.bing.com *.roeye.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com *.afterpay.com *.clearpay.co.uk *.squarecdn.com https://hbiq.net *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com https://maps.googleapis.com https://player.vimeo.com *.disqus.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://cdn.jsdelivr.net js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com *.googletagmanager.com tagmanager.google.com *.cloudflare.com *.twitter.com *.fontawesome.com *.liveperson.net *.trustpilot.com *.lpsnmedia.net *.cookiebot.com *.mdoq.io *.mdoq.dev *.tweekscycles.com *.demon-tweeks.com wisepops.net *.bing.com *.roeye.com *.crazyegg.com *.facebook.net *.hotjar.com *.roeyecdn.com *.dwin1.com demon11123.pcapredict.com services.postcodeanywhere.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.afterpay.com/ *.squarecdn.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klarnacdn.net https://cdn.jsdelivr.net assets.braintreegateway.com *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com *.cloudflare.com *.fontawesome.com *.bootstrapcdn.com *.mdoq.io *.mdoq.dev *.tweekscycles.com *.demon-tweeks.com services.postcodeanywhere.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src *.mdoq.io *.mdoq.dev *.tweekscycles.com *.demon-tweeks.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.clearpay.co.uk *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com https://maps.googleapis.com https://player.vimeo.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.googletagmanager.com *.cloudflare.com stats.g.doubleclick.net *.cookiebot.com *.crazyegg.com *.bing.com *.facebook.net *.hotjar.com *.roeyecdn.com *.dwin1.com *.mdoq.io *.mdoq.dev *.tweekscycles.com *.demon-tweeks.com services.postcodeanywhere.co.uk 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://zero1.report-uri.com/r/d/csp/reportOnly; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.bootstrapcdn.com *.hsappstatic.net *.ivaws.com *.ravecapture.com s3.amazonaws.com trustspot-app-assets.s3.amazonaws.com trustspot.io https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com fonts.googleapis.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net https://plumrocket.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.affirm.com *.affirm.ca *.attn.tv *.bing.com *.doubleclick.net *.facebook.com *.googletagmanager.com *.livechatinc.com *.opendns.com *.paypalobjects.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.authorize.net https://plumrocket.com *.wesupply.xyz https://wesupplylabs.com guarantee-cdn.com *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com https://aheadworks.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://images.unsplash.com *.affirm.com *.affirm.ca https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com *.attentivemobile.com *.attn.tv *.bing.com *.bing.net *.doubleclick.net *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.googletagmanager.com *.imgix.net *.ivaws.com *.paypalobjects.com *.ravecapture.com *.trustspot.io *.ytimg.com ravecapture-app-assets.s3.amazonaws.com s3.amazonaws.com www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bs www.google.by www.google.ca www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.co.nz www.google.co.th www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.eg www.google.com.et www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.cz www.google.de www.google.dj www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gg www.google.gr www.google.gy www.google.hn www.google.hr www.google.hu www.google.ie www.google.iq www.google.is www.google.it www.google.jo www.google.kg www.google.kz www.google.li www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mk www.google.mn www.google.mu www.google.mv www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk www.google.sn www.google.so www.google.sr www.google.tn https://connect.facebook.net https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://img.youtube.com https://firebasestorage.googleapis.com guarantee-cdn.com *.reddit.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com *.affirm.com *.affirm.ca https://cdn.attn.tv https://events.attentivemobile.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com https://cdn.jsdelivr.net *.addthis.com *.algolia.net *.algolianet.com *.attn.tv *.authorize.net *.bing.com *.doubleclick.net *.facebook.net *.fullstory.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.klaviyo.com *.livechatinc.com *.paypal.com *.ravecapture.com trustspot.io https://hogworkz.com https://static-tracking.klaviyo.com https://app.ravecapture.com https://hogworkz.attn.tv https://js-agent.newrelic.com https://bam.nr-data.net widget.freshworks.com m2epro.freshdesk.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.avada.io *.shopify.com *.cloudflare.com guarantee-cdn.com *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com https://static.klaviyo.com https://cdn.jsdelivr.net *.bootstrapcdn.com *.gstatic.com *.klaviyo.com *.ravecapture.com s3.amazonaws.com trustspot.io widget.freshworks.com m2epro.freshdesk.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com https://fonts.bunny.net *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.youtube.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com *.googleapis.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com https://player.vimeo.com *.affirm.com *.affirm.ca *.attn.tv events.attentivemobile.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.attentivemobile.com *.authorize.net *.bing.com *.bing.net *.doubleclick.net *.facebook.com *.googleadservices.com *.googletagmanager.com *.imgix.net *.klaviyo.com *.livechatinc.com *.ravecapture.com ravecapture-app-assets.s3.amazonaws.com trustspot.io www.google.ae www.google.al www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bs www.google.by www.google.ca www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.co.nz www.google.co.th www.google.co.uk www.google.co.ve www.google.co.vi www.google.co.za www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.eg www.google.com.gh www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ng www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.cz www.google.de www.google.dj www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gr www.google.gy www.google.hn www.google.hr www.google.hu www.google.ie www.google.iq www.google.is www.google.it www.google.jo www.google.kg www.google.kz www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mk www.google.mn www.google.mu www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk www.google.sn https://events.attentivemobile.com https://bam.nr-data.net https://hogworkz.com widget.freshworks.com m2epro.freshdesk.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://get.geojs.io *.avada.io *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-NDLZ0Qh8VPNcBjtNcY2Z-g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com https://challenges.cloudflare.com https://eu-assets.i.posthog.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline'; img-src 'self' https://assets-bucket.deadlock-api.com https://*.steamstatic.com data:; connect-src 'self' https://api.deadlock-api.com https://s3-cache.deadlock-api.com https://cdn.jsdelivr.net https://eu.i.posthog.com https://eu-assets.i.posthog.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://stats.g.doubleclick.net; worker-src 'self' blob:; font-src 'self'; frame-src https://challenges.cloudflare.com; 1
object-src 'none';base-uri 'self';script-src 'nonce-ewokmcVYj9WhejnJez-3nw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' data: blob: wss: webpack: *.morganphilips.cn morganphilips.cn *.stage.morganphilips.com *.morganphilips.com morganphilips.com axeptio.imgix.net *.axept.io *.ads.linkedin.com www.google.com api.hubspot.com track.hubspot.com forms.hscollectedforms.net forms.hsforms.com api.hubapi.com www.googletagmanager.com *.doubleclick.net *.analytics.google.com stats.g.doubleclick.net *.clarity.ms www.google.be www.google.nl *.ytimg.com cf-images.eu-west-1.prod.boltdns.net synthesia-ttv-data.s3-eu-west-1.amazonaws.com image.synthesia.io platform.twitter.com *.pinterest.com *.hsforms.com *.gstatic.com www.ratedo.de *.provenexpert.com *.provenexpert.net *.hsappstatic.net *.bing.com *.hubspot.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.morganphilips.com *.morganphilips.cn static.axept.io *.hs-scripts.com www.google.com *.gstatic.com js.hscollectedforms.net js.usemessages.com js.hsadspixel.net js.hs-banner.com js.hs-analytics.net snap.licdn.com www.googletagmanager.com *.clarity.ms unpkg.com *.bootstrapcdn.com cdn-public.sociabble.com js.hsforms.net platform.twitter.com platform.linkedin.com assets.pinterest.com www.ratedo.de *.provenexpert.com *.provenexpert.net unpkg.com maxcdn.bootstrapcdn.com; style-src 'self' 'unsafe-inline' *.morganphilips.com *.morganphilips.cn fonts.googleapis.com fonts.axept.io unpkg.com www.ratedo.de *.provenexpert.com; frame-ancestors 'self' www.google.com unpkg.com 1
default-src 'self'; font-src data: https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud; script-src 'self' https://*.bazaarvoice.com https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://exc.mm.dm.hu https://mpsnare.iesnare.com https://omt.dm.hu https://tags.tiqcdn.com https://web.cmp.usercentrics.eu https://www.dm.hu https://www.google.com https://www.google.com/recaptcha/ https://www.gstatic.com https://www.gstatic.com/recaptcha/; worker-src 'self' blob:; connect-src 'self' https://*.bazaarvoice.com https://aggregator.service.usercentrics.eu https://api.mapbox.com https://api.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://browser-intake-datadoghq.eu https://cart-recos.services.dmtech.com https://cdcs.usercentrics.eu https://collect.tealiumiq.com https://consent-api.service.consent.usercentrics.eu https://consent-rt-ret.service.consent.usercentrics.eu https://consents.usercentrics.eu https://content-preview.apps.prod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://direct-collect.dy-api.eu https://direct.dy-api.eu https://dmpay-gateway.services.dmtech.com https://dy-api.eu https://editorial-content.dm-static.com https://events.mapbox.com https://exc.mm.dm.hu https://frontend-tracking-infra-service.services.dmtech.com https://graphql.usercentrics.eu https://insights.algolia.io https://logs.browser-intake-datadoghq.eu https://maut-prod.services.dmtech.com https://maut-rls.nonprod.services.dmtech.com https://mpsnare.iesnare.com https://my-products-api.services.dmtech.com https://omacs.services.dmtech.com https://omc.dm.hu https://predictive-shopping-service.services.dmtech.com https://product-based-recos.services.dmtech.com https://product-search.services.dmtech.com https://product-semantic-search.services.dmtech.com https://rcom-eu.dynamicyield.com https://recos-as-a-service.services.dmtech.com https://region1.google-analytics.com https://retail-media.services.dmtech.com https://rum.browser-intake-datadoghq.eu https://s2s.adjust.com https://signin.dm.hu https://sos-prod.availability.services.dmtech.com https://staedtetour.dm-fb2.de https://stars.services.dmtech.com https://storage.googleapis.com/gift-card-builder-emergency-disabled-bucket/ https://store-data-service.services.dmtech.com https://store-order-service.services.dmtech.com https://v1.api.service.cmp.usercentrics.eu https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://zoe-shop-proxy-prod.services.dmtech.com https://kuba-prod.services.dmtech.com https://zoe-shop-proxy-prod.services.dmtech.com https://cartnext.services.dmtech.com https://dmcsm-proxy.prod.services.dmtech.com https://zoe-shop-proxy-prod.services.dmtech.com https://customer-helpcenter-prod.services.dmtech.com https://paint-prod.services.dmtech.com https://content.services.dmtech.com https://content-search-service-preview.apps.prod.gcp.dmtech.cloud https://content-search-service.services.dmtech.com https://products.dm.de https://pds-import-prod.apps.prod.gcp.dmtech.cloud https://shopping-list-prod.services.dmtech.com; media-src 'self'; style-src 'self' 'unsafe-inline' https://*.bazaarvoice.com https://api.tiles.mapbox.com https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud; form-action 'self' https://*.bazaarvoice.com https://apps.bazaarvoice.com https://checkout.dm.hu https://giftcard-checkout.dm.de/api/checkout https://signin.dm.hu; img-src 'self' blob: data: https://*.bazaarvoice.com https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://cdn-eu.dynamicyield.com https://composer.apps.nonprod.cf.dmtech.cloud https://content-preview.apps.prod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://editorial-content.dm-static.com https://exc.mm.dm.hu https://i.ytimg.com https://images.podigee-cdn.net https://img.usercentrics.eu https://img.youtube.com/ https://media.dm-static.com https://photos-eu.bazaarvoice.com https://products.dm-static.com https://uct.service.usercentrics.eu https://content.services.dmtech.com; frame-ancestors 'self' https://account.dm.hu https://app.datadoghq.eu https://checkout.dm.hu https://content-preview.apps.prod.gcp.dmtech.cloud https://mobileapp.dm.hu https://studio.dm-drogeriemarkt.com; frame-src 'self' https://*.bazaarvoice.com https://account.dm.hu https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://cdn.podigee.com https://checkout.dm.hu https://configurator.nuk.de https://gastfamilie.podigee.io https://geburtskanal-dm.podigee.io https://hey-familie.podigee.io https://kinderwunschsprechstunde.podigee.io https://mobileapp.dm.hu https://player.podigee-cdn.net https://recaptcha.google.com/recaptcha/ https://sandbox.om.dm.hu https://signin.dm.hu https://web.cmp.usercentrics.eu https://www.google.com https://www.google.com/recaptcha/ https://www.youtube-nocookie.com; base-uri 'self' https://exc.mm.dm.hu; child-src 'self' blob:; manifest-src 'self'; report-to csp-endpoint; report-uri /__csp-reports__ 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://js.hsforms.net https://js.hs-scripts.com https://js.hs-analytics.net https://js.hubspot.com https://js.hscollectedforms.net https://js.hs-banner.com https://js.hsadspixel.net https://cdn.ketchjs.com https://t.contentsquare.net https://snap.licdn.com https://cdnjs.cloudflare.com https://code.jquery.com https://cdn.callrail.com https://cdn.wmxtools.com https://bat.bing.com https://widget.nfusionsolutions.com https://static.hotjar.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://www.google.com https://www.google.co.in https://googleads.g.doubleclick.net https://px.ads.linkedin.com https://px.mountain.com https://emailsignature.trustpilot.com https://gs-api-prod.gbi-hosted.net https://gs-reg-new-api-prod.gbi-hosted.net; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; connect-src 'self' https://www.googletagmanager.com https://t.contentsquare.net https://c.ba.contentsquare.net https://forms.hsforms.com https://forms-na1.hsforms.com https://perf-na1.hsforms.com https://api.hubapi.com https://track.hubspot.com https://global.ketchcdn.com https://dx.mountain.com https://gs.mountain.com https://cta-service-cms2.hubspot.com; frame-src 'self' https://www.google.com 1
object-src  'none'; connect-src 'self' *.puretaboo.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.puretaboo.com join.gammasecure.com; script-src 'self' *.puretaboo.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.puretaboo.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
img-src https://higherlogicdownload.s3.amazonaws.com/ACCA/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/ACCA/ https://img.youtube.com/vi/ https://static.filestackapi.com/picker/ https://d2x5ku95bkycr3.cloudfront.net https://higherlogiclongterm.s3.amazonaws.com/ACCA/ blob: https://d132x6oi8ychic.cloudfront.net 'self'; style-src https://d132x6oi8ychic.cloudfront.net 'unsafe-inline' https://higherlogiccloudfront.s3.amazonaws.com https://cdn.jsdelivr.net/jquery.slick/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://d2x5ku95bkycr3.cloudfront.net/ https://ajax.googleapis.com/ajax/libs/jqueryui/ https://use.fortawesome.com/ https://cdn.higherlogic.com/ai-assistant https://static.filestackapi.com/picker/ https://fonts.googleapis.com/ https://d3uf7shreuzboy.cloudfront.net/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/ACCA/ https://higherlogicdownload.s3.amazonaws.com/ACCA/ https://higherlogiclongterm.s3.amazonaws.com/ACCA/ 'self'; font-src https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogiccloudfront.s3.amazonaws.com https://higherlogicdownload.s3.amazonaws.com/ACCA/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/ACCA/ 'self' https://higherlogiclongterm.s3.amazonaws.com/ACCA/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://d2x5ku95bkycr3.cloudfront.net https://d132x6oi8ychic.cloudfront.net data:; script-src-elem https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d3uf7shreuzboy.cloudfront.net/ https://static.filestackapi.com/picker/ https://cdn.higherlogic.com/ai-assistant https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d2x5ku95bkycr3.cloudfront.net/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://www.gstatic.com/recaptcha/ https://static.filestackapi.com/filestack-js/ 'self' https://ajax.aspnetcdn.com/ajax/ 'unsafe-eval' 'unsafe-inline'; media-src https://higherlogiclongterm.s3.amazonaws.com/ACCA/ https://higherlogicdownload.s3.amazonaws.com/ACCA/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/ACCA/ https://higherlogicstream.s3.amazonaws.com/ACCA/ 'self' https://d132x6oi8ychic.cloudfront.net; script-src https://higherlogiclongterm.s3.amazonaws.com/ACCA/ https://higherlogicdownload.s3.amazonaws.com/ACCA/ https://ajax.aspnetcdn.com/ajax/ https://cdn.jsdelivr.net/jquery.slick/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d132x6oi8ychic.cloudfront.net https://cdn.informz.net 'unsafe-eval' https://use.fortawesome.com/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/ACCA/ https://cdnjs.cloudflare.com/ajax/libs/prism/ 'unsafe-inline' https://d2x5ku95bkycr3.cloudfront.net/ https://higherlogiccloudfront.s3.amazonaws.com https://static.filestackapi.com https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d3uf7shreuzboy.cloudfront.net/ 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://api.connectedcommunity.org/ 'self' https://www.youtube.com/embed/ https://*.kb.us.higherlogic.com https://10176109.fls.doubleclick.net/ https://www.googletagmanager.com/; connect-src https://upload.filestackapi.com https://static.filestackapi.com https://cloud.filestackapi.com/folder/list/ 'self' https://hl-managedservices.informz.net https://d3uf7shreuzboy.cloudfront.net/ blob:; worker-src 'self'; default-src 'self'; base-uri 'self'; frame-ancestors https://*.connectedcommunity.org/ 'self'; object-src 'none'; manifest-src 'self'; 1
frame-ancestors 'self'; report-uri https://www.gq.com.au/csp-reports 1
default-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
script-src 'self' 'nonce-4HG7RqAUa44xeiua+SxhOLN8UGeV5JdVzl9AsRlSPRU=' 'strict-dynamic' 'wasm-unsafe-eval' www.youtube.com  az416426.vo.msecnd.net cdn.cookielaw.org www.google-analytics.com maps.googleapis.com www.googletagmanager.com  dl.episerver.net www.youtube.com www.google.com www.gstatic.com snap.licdn.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.com.ai https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.ms https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.vg https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat  https://connect.facebook.net/ https://munchkin.marketo.net/ static.hotjar.com script.hotjar.com https://cdn.jsdelivr.net/ https://cdn.cookielaw.org/;object-src 'none';base-uri 'self';report-uri https://o4507537122852864.ingest.de.sentry.io/api/4507764299726928/security/?sentry_key=2e67b3fa9c193f38db8ea33933d09ffa&sentry_environment=production&sentry_release=sprint24; 1
frame-ancestors 'self' https://dsa.no/ https://dsa.no/ https://storymaps.arcgis.com https://miljostatus.miljodirektoratet.no/ https://storymaps.arcgis.com/stories/ https://miljotall.miljodirektoratet.no/ https://play.libsyn.com/ https://www.miljodirektoratet.no/ https://videoforweb.aventia.no; 1
default-src 'self'; font-src data: https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud; script-src 'self' https://*.bazaarvoice.com https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://exc.mm.dm-drogeriemarkt.ro https://mpsnare.iesnare.com https://omt.dm.ro https://tags.tiqcdn.com https://web.cmp.usercentrics.eu https://www.dm.ro https://www.google.com https://www.google.com/recaptcha/ https://www.gstatic.com https://www.gstatic.com/recaptcha/; worker-src 'self' blob:; connect-src 'self' https://*.bazaarvoice.com https://aggregator.service.usercentrics.eu https://api.mapbox.com https://api.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://browser-intake-datadoghq.eu https://cart-recos.services.dmtech.com https://cdcs.usercentrics.eu https://collect.tealiumiq.com https://consent-api.service.consent.usercentrics.eu https://consent-rt-ret.service.consent.usercentrics.eu https://consents.usercentrics.eu https://content-preview.apps.prod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://direct-collect.dy-api.eu https://direct.dy-api.eu https://dmpay-gateway.services.dmtech.com https://dy-api.eu https://editorial-content.dm-static.com https://events.mapbox.com https://exc.mm.dm-drogeriemarkt.ro https://frontend-tracking-infra-service.services.dmtech.com https://graphql.usercentrics.eu https://insights.algolia.io https://logs.browser-intake-datadoghq.eu https://maut-prod.services.dmtech.com https://maut-rls.nonprod.services.dmtech.com https://mpsnare.iesnare.com https://my-products-api.services.dmtech.com https://omacs.services.dmtech.com https://omc.dm.ro https://predictive-shopping-service.services.dmtech.com https://product-based-recos.services.dmtech.com https://product-search.services.dmtech.com https://product-semantic-search.services.dmtech.com https://rcom-eu.dynamicyield.com https://recos-as-a-service.services.dmtech.com https://region1.google-analytics.com https://retail-media.services.dmtech.com https://rum.browser-intake-datadoghq.eu https://s2s.adjust.com https://signin.dm.ro https://sos-prod.availability.services.dmtech.com https://staedtetour.dm-fb2.de https://stars.services.dmtech.com https://storage.googleapis.com/gift-card-builder-emergency-disabled-bucket/ https://store-data-service.services.dmtech.com https://store-order-service.services.dmtech.com https://v1.api.service.cmp.usercentrics.eu https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://zoe-shop-proxy-prod.services.dmtech.com https://kuba-prod.services.dmtech.com https://zoe-shop-proxy-prod.services.dmtech.com https://cartnext.services.dmtech.com https://dmcsm-proxy.prod.services.dmtech.com https://zoe-shop-proxy-prod.services.dmtech.com https://customer-helpcenter-prod.services.dmtech.com https://paint-prod.services.dmtech.com https://content.services.dmtech.com https://content-search-service-preview.apps.prod.gcp.dmtech.cloud https://content-search-service.services.dmtech.com https://products.dm.de https://pds-import-prod.apps.prod.gcp.dmtech.cloud https://shopping-list-prod.services.dmtech.com; media-src 'self'; style-src 'self' 'unsafe-inline' https://*.bazaarvoice.com https://api.tiles.mapbox.com https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud; form-action 'self' https://*.bazaarvoice.com https://apps.bazaarvoice.com https://checkout.dm.ro https://giftcard-checkout.dm.de/api/checkout https://signin.dm.ro; img-src 'self' blob: data: https://*.bazaarvoice.com https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://cdn-eu.dynamicyield.com https://composer.apps.nonprod.cf.dmtech.cloud https://content-preview.apps.prod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://editorial-content.dm-static.com https://exc.mm.dm-drogeriemarkt.ro https://i.ytimg.com https://images.podigee-cdn.net https://img.usercentrics.eu https://img.youtube.com/ https://media.dm-static.com https://photos-eu.bazaarvoice.com https://products.dm-static.com https://uct.service.usercentrics.eu https://content.services.dmtech.com; frame-ancestors 'self' https://account.dm.ro https://app.datadoghq.eu https://checkout.dm.ro https://content-preview.apps.prod.gcp.dmtech.cloud https://mobileapp.dm.ro https://studio.dm-drogeriemarkt.com; frame-src 'self' https://*.bazaarvoice.com https://account.dm.ro https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://cdn.podigee.com https://checkout.dm.ro https://configurator.nuk.de https://gastfamilie.podigee.io https://geburtskanal-dm.podigee.io https://hey-familie.podigee.io https://kinderwunschsprechstunde.podigee.io https://mobileapp.dm.ro https://player.podigee-cdn.net https://recaptcha.google.com/recaptcha/ https://sandbox.om.dm.ro https://signin.dm.ro https://web.cmp.usercentrics.eu https://www.google.com https://www.google.com/recaptcha/ https://www.youtube-nocookie.com; base-uri 'self' https://exc.mm.dm-drogeriemarkt.ro; child-src 'self' blob:; manifest-src 'self'; report-to csp-endpoint; report-uri /__csp-reports__ 1
frame-ancestors 'self'; report-uri https://www.weeklytimesnow.com.au/csp-reports 1
script-src 'nonce-zkMNhfjR3oJETQUP44yP7A==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https://events.mercadolibre.com/csp/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=0eab3d1e-f749-40d3-903a-84bc1ca365f9; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https://http2.mlstatic.com/ https://mlstaticquic-a.akamaihd.net/; frame-ancestors 'self' https://*.mercadolibre.cl:* https://*.mercadolibre.com:* https://*.mercadolibre.com.ve:* https://*.mercadolibre.com.ar:* https://*.mercadolivre.com.br:* https://*.mercadolibre.com.co:* https://*.mercadolibre.com.ec:* https://*.mercadolibre.com.mx:* https://*.mercadolibre.com.pe:* https://*.mercadolibre.com.uy:* https://*.mercadopago.cl:* https://*.mercadopago.com.ar:* https://*.mercadopago.com.br:* https://*.mercadopago.com.co:* https://*.mercadopago.com.mx:* https://*.mercadopago.com.pe:* https://*.mercadopago.com.uy:* https://*.mercadopago.com.ve:* https://*.mercadopago.com:* https://*.adminml.com:* https://*.mercadolibre.co.cr:* https://*.mercadolibre.com.pa:* https://*.mercadolibre.com.do:* https://*.mercadolibre.com.bo:* https://*.mercadolibre.com.py:* https://*.mercadolibre.com.gt:* https://*.mercadolibre.com.hn:* https://*.mercadolibre.com.ni:* https://*.mercadolibre.com.sv:* https://*.mercadopago.com.ec:* https://*.portalinmobiliario.com:* https://*.mercadolivre.com:* 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://www.gstatic.com https://www.tiktok.com https://*.tiktokcdn.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://www.facebook.com https://stats.g.doubleclick.net; frame-src 'self' https://www.youtube.com https://www.tiktok.com https://player.vimeo.com; media-src 'self' blob: data: https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com https://*.vntsm.com https://*.rubiconproject.com https://*.pubmatic.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.google-analytics.com https://*.jwplayer.com https://*.jwpcdn.com https://platform.twitter.com https://www.youtube.com https://*.chartbeat.com https://*.sentry.io https://*.amazon-adsystem.com https://cadmus.script.ac https://*.viously.com https://*.aniview.com https://imasdk.googleapis.com https://*.fastclick.net https://*.liadm.com https://*.fundingchoicesmessages.google.com https://*.doubleclick.net; img-src 'self' data: https:; frame-src https:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; connect-src 'self' https:; media-src 'self' https: 1
default-src 'self' https://*.zorgdomein.nl; style-src 'self' 'unsafe-inline' https://*.zorgdomein.nl https://fonts.googleapis.com https://surveys-static.survicate.com https://surveys-static-prd.survicate-cdn.com; style-src-elem 'self' 'unsafe-inline' https://*.zorgdomein.nl https://fonts.googleapis.com https://surveys-static.survicate.com https://surveys-static-prd.survicate-cdn.com; script-src 'self' 'nonce-f6b4af3cd42c86e3f373115ae1ded910' 'wasm-unsafe-eval' https://*.zorgdomein.nl https://*.zdassets.com https://*.zendesk.com https://*.zopim.com https://zendesk-eu.my.sentry.io wss://*.zendesk.com wss://*.zopim.com https://*.googleapis.com https://survey.survicate.com https://surveys-static.survicate.com https://surveys-static-prd.survicate-cdn.com https://survey-prd.survicate-cdn.com; img-src https://* 'self' https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com blob: data: https://surveys-static.survicate.com https://surveys-static-prd.survicate-cdn.com https://assets.survicate.com https://img.survicate.com https://images.unsplash.com; connect-src https://*.zorgdomein.nl wss://*.zorgdomein.nl https://*.zdassets.com https://*.zendesk.com https://*.zopim.com https://zendesk-eu.my.sentry.io wss://*.zendesk.com wss://*.zopim.com https://*.googleapis.com *.google.com https://*.gstatic.com https://respondent.survicate.com https://hv.survicate.com https://survey.survicate.com https://survey-prd.survicate-cdn.com https://production-respondent-uploads.s3.eu-west-1.amazonaws.com https://surveys-static-prd.survicate-cdn.com; frame-src 'self' https://*.zorgdomein.nl https://*.quicksight.aws.amazon.com *.google.com http: https:; report-uri /api/v1/report-uri; font-src 'self' https://*.zorgdomein.nl https://fonts.gstatic.com data: https://surveys-static.survicate.com https://surveys-static-prd.survicate-cdn.com; worker-src 'self' blob:; base-uri 'self' 1
default-src 'self'; font-src data: https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud; script-src 'self' https://*.bazaarvoice.com https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://exc.mm.mojadm.sk https://mpsnare.iesnare.com https://omt.mojadm.sk https://tags.tiqcdn.com https://web.cmp.usercentrics.eu https://www.google.com https://www.google.com/recaptcha/ https://www.gstatic.com https://www.gstatic.com/recaptcha/ https://www.mojadm.sk; worker-src 'self' blob:; connect-src 'self' https://*.bazaarvoice.com https://aggregator.service.usercentrics.eu https://api.mapbox.com https://api.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://browser-intake-datadoghq.eu https://cart-recos.services.dmtech.com https://cdcs.usercentrics.eu https://collect.tealiumiq.com https://consent-api.service.consent.usercentrics.eu https://consent-rt-ret.service.consent.usercentrics.eu https://consents.usercentrics.eu https://content-preview.apps.prod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://direct-collect.dy-api.eu https://direct.dy-api.eu https://dmpay-gateway.services.dmtech.com https://dy-api.eu https://editorial-content.dm-static.com https://events.mapbox.com https://exc.mm.mojadm.sk https://frontend-tracking-infra-service.services.dmtech.com https://graphql.usercentrics.eu https://insights.algolia.io https://logs.browser-intake-datadoghq.eu https://maut-prod.services.dmtech.com https://maut-rls.nonprod.services.dmtech.com https://mpsnare.iesnare.com https://my-products-api.services.dmtech.com https://omacs.services.dmtech.com https://omc.mojadm.sk https://predictive-shopping-service.services.dmtech.com https://product-based-recos.services.dmtech.com https://product-search.services.dmtech.com https://product-semantic-search.services.dmtech.com https://rcom-eu.dynamicyield.com https://recos-as-a-service.services.dmtech.com https://region1.google-analytics.com https://retail-media.services.dmtech.com https://rum.browser-intake-datadoghq.eu https://s2s.adjust.com https://signin.mojadm.sk https://sos-prod.availability.services.dmtech.com https://staedtetour.dm-fb2.de https://stars.services.dmtech.com https://storage.googleapis.com/gift-card-builder-emergency-disabled-bucket/ https://store-data-service.services.dmtech.com https://store-order-service.services.dmtech.com https://v1.api.service.cmp.usercentrics.eu https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://zoe-shop-proxy-prod.services.dmtech.com https://kuba-prod.services.dmtech.com https://zoe-shop-proxy-prod.services.dmtech.com https://cartnext.services.dmtech.com https://dmcsm-proxy.prod.services.dmtech.com https://zoe-shop-proxy-prod.services.dmtech.com https://customer-helpcenter-prod.services.dmtech.com https://paint-prod.services.dmtech.com https://content.services.dmtech.com https://content-search-service-preview.apps.prod.gcp.dmtech.cloud https://content-search-service.services.dmtech.com https://products.dm.de https://pds-import-prod.apps.prod.gcp.dmtech.cloud https://shopping-list-prod.services.dmtech.com; media-src 'self'; style-src 'self' 'unsafe-inline' https://*.bazaarvoice.com https://api.tiles.mapbox.com https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud; form-action 'self' https://*.bazaarvoice.com https://apps.bazaarvoice.com https://checkout.mojadm.sk https://giftcard-checkout.dm.de/api/checkout https://signin.mojadm.sk; img-src 'self' blob: data: https://*.bazaarvoice.com https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://cdn-eu.dynamicyield.com https://composer.apps.nonprod.cf.dmtech.cloud https://content-preview.apps.prod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://editorial-content.dm-static.com https://exc.mm.mojadm.sk https://i.ytimg.com https://images.podigee-cdn.net https://img.usercentrics.eu https://img.youtube.com/ https://media.dm-static.com https://photos-eu.bazaarvoice.com https://products.dm-static.com https://uct.service.usercentrics.eu https://content.services.dmtech.com; frame-ancestors 'self' https://account.mojadm.sk https://app.datadoghq.eu https://checkout.mojadm.sk https://content-preview.apps.prod.gcp.dmtech.cloud https://mobileapp.mojadm.sk https://studio.dm-drogeriemarkt.com; frame-src 'self' https://*.bazaarvoice.com https://account.mojadm.sk https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://cdn.podigee.com https://checkout.mojadm.sk https://configurator.nuk.de https://gastfamilie.podigee.io https://geburtskanal-dm.podigee.io https://hey-familie.podigee.io https://kinderwunschsprechstunde.podigee.io https://mobileapp.mojadm.sk https://player.podigee-cdn.net https://recaptcha.google.com/recaptcha/ https://sandbox.om.mojadm.sk https://signin.mojadm.sk https://web.cmp.usercentrics.eu https://www.google.com https://www.google.com/recaptcha/ https://www.youtube-nocookie.com; base-uri 'self' https://exc.mm.mojadm.sk; child-src 'self' blob:; manifest-src 'self'; report-to csp-endpoint; report-uri /__csp-reports__ 1
object-src 'none'; script-src 'nonce-7TL4Z3xdcl81E96FHAJuscUC' 'strict-dynamic' http: https:; base-uri 'none';  1
frame-ancestors 'self' *.andrew.com; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cash-f.squarecdn.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.hotjar.com static.klaviyo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com *.reviews.io *.reviews.co.uk *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com https://www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.twitter.com www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.reviews.io *.reviews.co.uk *.doubleclick.net *.hotjar.com *.livechatinc.com widget.reviews.co.uk *.pingdom.com *.heritagepartscentre.com *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net * www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cloudfront.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.reviews.io *.reviews.co.uk *.doubleclick.net *.google.com *.google.co.uk *.facebook.com *.yotpo.com *.heritagepartscenter.com www.google.co.in bat.bing.com imgsct.cookiebot.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com widget.freshworks.com m2epro.freshdesk.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com www.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.reviews.io *.reviews.co.uk *.pcapredict.com/js/sensor.js *.hotjar.com *.doubleclick.net *.newrelic.net *.livechatinc.com *.facebook.net *.webgains.io *.chimpstatic.com *.yotpo.com *.trackedlink.net gtm.heritagepartscentre.com consent.cookiebot.com bat.bing.com www.clarity.ms consentcdn.cookiebot.com scripts.clarity.ms static.zdassets.com static.zdassets.com/web_widget static.onsitesupport.io https://www.googletagmanager.com tagmanager.google.com unpkg.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.cash.app widget.freshworks.com m2epro.freshdesk.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://static.klaviyo.com assets.braintreegateway.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.yotpo.com static.onsitesupport.io tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.livechatinc.com *.heritagepartscenter.com *.onsitesupport.io static.onsitesupport.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com * *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com widget.freshworks.com m2epro.freshdesk.com *.cloudflare.com *.twitter.com *.twimg.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.hotjar.com *.adobedc.net bat.bing.com l.clarity.ms consentcdn.cookiebot.com *.google-analytics.com *.facebook.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
report-uri /core/api/Monitoring/SaveCSPReport 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'self'; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.markfi.xyz https://*.hcaptcha.com https://*.privy.io https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://*.hcaptcha.com https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https: wss:; frame-src 'self' https://*.hcaptcha.com https://*.privy.io https://challenges.cloudflare.com https://*.solflare.com; media-src 'self' blob: data:; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; report-uri https://o4509988543332352.ingest.us.sentry.io/api/4509989702336512/security/?sentry_key=048d262803a0589d5ba7145ed9d0c16d; report-to csp-endpoint 1
font-src www.paypalobjects.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com *.cloudflare.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com td.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.awin1.com *.zenaps.com js.mollie.com consentcdn.cookiebot.com www.googletagmanager.com https://www.googletagmanager.com https://td.doubleclick.net https://widget.trustpilot.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https://images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com *.awin1.com *.zenaps.com *.wepowerconnections.com magefan.com cm.magefan.com https://www.mollie.com *.cloudflare.com imgproxy.vendic.dev imgsct.cookiebot.com *.hsforms.net *.hsforms.com https://imgproxy.vendic.dev data: 'self' 'unsafe-inline'; script-src www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.stats.g.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com js.mollie.com *.cdnjs.cloudflare.com data: *.increasingly.co *.googleadservices.com *.sandbox.paypal.com *.googleapis.com *.paypalobjects.com *.the.sciencebehindecommerce.com *.sciencebehindecommerce.com *.hal9000.redintelligence.net *.redintelligence.net googleads.g.doubleclick.net td.doubleclick.net script.hotjar.com consentcdn.cookiebot.com *.albeka.nl *.mollie.com *.google.co.in *.static.widget.trengo.eu *.widget.trengo.eu *.trengo.s3.eu-central-1.amazonaws.com *.google.nl *.api.widget.trengo.eu *.trengo.eu bat.bing.com/bat.js www.clarity.ms *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.fontawesome.com *.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com *.facebook.com *.facebook.net https://www.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com *.wepowerconnections.com https://the.sciencebehindecommerce.com *.cloudflare.com consentcdn.cookiebot.com/ sst.albeka.nl/ t.elasticsuite.io *.hsforms.net *.hsforms.com https://p2iqhncxyh.execute-api.eu-central-1.amazonaws.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net fonts.googleapis.com *.googleapis.com *.gstatic.com data: *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.klarnacdn.net *.fontawesome.com maxcdn.bootstrapcdn.com *.oct8ne.com https://*.dnafactory.it https://*.dnalab.online https://*.semprefarmacia.it https://*.cloudflare.com https://*.shippypro.com https://*.google.com https://*.klarna.com https://*.channelize.io https://*.reskyt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://*.dnafactory.it https://*.dnalab.online https://*.semprefarmacia.it https://*.shippypro.com https://*.google.com https://*.klarna.com https://*.channelize.io https://*.reskyt.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.sella.it *.gestpay.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.sella.it *.gestpay.net https://*.tiktokcdn-eu.com https://*.tiktok.com https://www.googletagmanager.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://*.klarna.com *.oct8ne.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://*.dnafactory.it https://*.dnalab.online https://*.semprefarmacia.it https://*.shippypro.com https://*.google.com https://*.channelize.io https://*.reskyt.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com https://images.unsplash.com *.feedaty.com https://*.tiktokcdn-eu.com https://*.tiktok.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com cdn.doofinder.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://*.klarna.com *.klarnaevt.com *.klarnacdn.net *.oct8ne.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com www.gstatic.com pay.google.com google.com/pay ecomms2s.sella.it sandbox.gestpay.net img.riskified.com https://*.dnafactory.it https://*.dnalab.online https://*.semprefarmacia.it https://semprefarmacia.it https://*.cookiebot.com https://*.feedaty.com https://*.shippypro.com https://*.google.it https://*.doubleclick.net https://*.bidswitch.net https://*.adnxs.com https://*.smartadserver.com https://*.taboola.com https://*.1rx.io https://*.omnitagjs.com https://*.casalemedia.com https://*.criteo.com https://id5-sync.com https://*.360yield.com https://*.ivitrack.com https://*.media.net https://*.mediavine.com https://*.postrelease.com https://*.outbrain.com https://*.pubmatic.com https://*.rubiconproject.com https://*.sharethrough.com https://*.teads.tv https://*.tremorhub.com https://*.3lift.com https://*.yieldlab.net https://*.yieldmo.com https://*.emxdgt.com https://*.adform.net https://*.unrulymedia.com https://*.google.com https://*.amazonaws.com https://*.getsitecontrol.com https://*.icons8.com https://*.agkn.com https://*.lgw.com https://*.awin1.com https://*.idealo-partner.com https://*.zenaps.com https://*.wepowerconnections.com https://*.dmxleo.com https://*.kelkoogroup.net https://*.channelize.io https://*.doofinder.com https://*.reskyt.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com https://rum.hlx.page maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.channelize.io *.sella.it *.gestpay.net *.feedaty.com https://*.tiktokcdn-eu.com https://*.tiktok.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com cdn.doofinder.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://*.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com widget.freshworks.com m2epro.freshdesk.com *.avada.io *.oct8ne.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.google.com www.gstatic.com beacon.riskified.com https://*.dnafactory.it https://*.dnalab.online https://*.semprefarmacia.it https://*.facebook.net https://*.cookiebot.com https://*.feedaty.com https://*.cloudflare.com https://*.shippypro.com https://*.google.com https://*.videoask.com https://*.videoask.it https://*.criteo.net https://*.criteo.com https://*.dwin1.com https://*.hotjar.com https://*.zdassets.com https://*.getsitecontrol.com https://*.connectif.cloud https://*.cloudflareinsights.com https://*.calendly.com https://*.kk-resources.com https://*.shopalike.it https://*.awin1.com https://*.sciencebehindecommerce.com https://*.channelize.io https://*.reskyt.com https://*.doofinder.com tracking.trovaprezzi.it www.trovaprezzi.it tps.trovaprezzi.it 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.feedaty.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.doofinder.com *.klarnacdn.net widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com https://*.dnafactory.it https://*.dnalab.online https://*.semprefarmacia.it https://*.cloudflare.com https://*.shippypro.com https://*.google.com https://*.feedaty.com https://*.klarna.com https://*.channelize.io https://*.reskyt.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://*.tiktokcdn-eu.com https://*.tiktok.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://*.dnafactory.it https://*.dnalab.online https://*.semprefarmacia.it https://*.shippypro.com https://*.google.com https://*.youtube.com https://*.klarna.com https://*.channelize.io https://*.reskyt.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.channelize.io *.feedaty.com https://*.tiktokcdn-eu.com https://*.tiktok.com *.doofinder.com wss://*.doofinder.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://*.klarna.com widget.freshworks.com m2epro.freshdesk.com https://get.geojs.io *.avada.io *.oct8ne.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com www.google.com www.gstatic.com pay.google.com google.com/pay ecomms2s.sella.it sandbox.gestpay.net c.riskified.com https://*.dnafactory.it https://*.dnalab.online https://*.semprefarmacia.it https://*.google.com https://google.com https://*.google-analytics.com https://*.cookiebot.com https://*.feedaty.com https://*.shippypro.com https://*.googlesyndication.com https://*.criteo.com https://*.zdassets.com https://*.getsitecontrol.com https://*.zendesk.com https://*.doubleclick.net https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.connectif.cloud https://*.getsitectrl.com https://*.kelkoogroup.net https://*.sciencebehindecommerce.com https://*.channelize.io https://*.reskyt.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com https://devdocs.magento.com https://magento.com *.google.com *.google.ca *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.bootstrapcdn.com data: *.postescanada-canadapost.ca *.tiktok.com *.facebook.net *.facebook.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://seo.mageplaza.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; style-src *.adobe.com fonts.googleapis.com https://devdocs.magento.com https://magento.com *.google.com *.gstatic.com *.google.ca *.google-analytics.com *.googleapis.com *.googletagmanager.com *.doubleclick.net *.bootstrapcdn.com *.postescanada-canadapost.ca *.tiktok.com *.facebook.net *.facebook.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; img-src *.googletagmanager.com *.google.com *.gstatic.com *.google.ca *.google-analytics.com *.googleapis.com *.hsforms.net googleadservices.com google-analytics.com paypalobjects.com *.braintreegateway.com www.paypal.com *.cardinalcommerce.com *.paypal.com *.vimeo.com *.youtube.com *.hsforms.com  google-analytics.com data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com p.typekit.net *.typekit.net validator.swagger.io https://devdocs.magento.com https://magento.com *.doubleclick.net *.bootstrapcdn.com *.postescanada-canadapost.ca *.tiktok.com *.facebook.net *.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; frame-src *.googletagmanager.com *.google.com *.gstatic.com *.google.ca *.google-analytics.com *.googleapis.com *.hsforms.net googleadservices.com google-analytics.com paypalobjects.com *.braintreegateway.com www.paypal.com *.cardinalcommerce.com *.paypal.com *.vimeo.com *.youtube.com *.hsforms.com  google-analytics.com  youtube.com fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com google.com https://devdocs.magento.com https://magento.com *.doubleclick.net *.bootstrapcdn.com *.postescanada-canadapost.ca *.tiktok.com *.facebook.net *.facebook.com insight.adsrvr.org c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com * 'self' 'unsafe-inline'; connect-src *.googletagmanager.com *.google.com *.gstatic.com *.google.ca *.google-analytics.com *.googleapis.com *.hsforms.net googleadservices.com google-analytics.com paypalobjects.com *.braintreegateway.com www.paypal.com *.cardinalcommerce.com *.paypal.com *.vimeo.com *.youtube.com *.hsforms.com  google-analytics.com *.doubleclick.net dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io google.com https://devdocs.magento.com https://magento.com *.bootstrapcdn.com *.postescanada-canadapost.ca *.tiktok.com *.facebook.net *.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com 'self' 'unsafe-inline'; script-src *.googletagmanager.com *.google.com *.gstatic.com *.google.ca *.google-analytics.com *.googleapis.com *.hsforms.net googleadservices.com google-analytics.com paypalobjects.com *.braintreegateway.com www.paypal.com *.cardinalcommerce.com *.paypal.com *.vimeo.com *.youtube.com *.hsforms.com  google-analytics.com  *.cloudflareinsights.com assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.cdn-apple.com https://devdocs.magento.com https://magento.com *.doubleclick.net *.bootstrapcdn.com *.postescanada-canadapost.ca *.tiktok.com *.facebook.net *.facebook.com *.googleadservices.com *.adobedtm.com js.adsrvr.org js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; 1
script-src *.hsadspixel.net *.hs-analytics.net js.hscta.net *.hubspot.com static.hsappstatic.net *.usemessages.com *.hs-banner.com *.hubspot.net *.hscollectedforms.net *.hsleadflows.net *.hsforms.net *.hsforms.com *.hs-scripts.com *.hubspotfeedback.com feedback.hubapi.com *.googletagmanager.com *.hotjar.com 'unsafe-inline' *.mouseflow.com; img-src js.hscta.net no-cache.hubspot.com *.hubspot.com *.hubspot.net *.hsforms.net *.hsforms.com *.google-analytics.com *.googletagmanager.com *.hotjar.com *.mouseflow.com; connect-src *.hubapi.com js.hscta.net *.hubspot.com *.hs-banner.com *.hsforms.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.mouseflow.com; frame-src *.hubspot.com play.hubspotvideo.com *.hubspot.net *.hsforms.net *.mouseflow.com; style-src cdn2.hubspot.net *.harmonicinc.com; child-src *.hsforms.com *.mouseflow.com; font-src *.hotjar.com *.hotjar.io *.mouseflow.com; 1
default-src 'self';media-src 'self' blob: data: https:// *.onnetwork.tv *.tvp.pl;worker-src 'self' blob: data: *.sadeczanin.info;script-src 'self' 'unsafe-inline' 'unsafe-eval'  *.googleapis.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com https://weatherwidget.io *.weatherwidget.io *.google.com *.g.doubleclick.net *.instagram.com *.googlesyndication.com *.twitter.com  *.openxcdn.net *.4dex.io *.criteo.net tags.crwdcntrl.net *.creativecdn.com cdn.id5-sync.com cdn.prod.uidapi.com *.onnetwork.tv *.googleapis.com *.jsdelivr.net *.facebook.net *.2mdn.net *.google-analytics.com *.optad360.io *.script.ac *.ampproject.org; img-src 'self' https: data: blob: http://api.sadeczanin.info; style-src 'self' 'unsafe-inline' www.fonts.googleapis.com *.googleapis.com *.onnetwork.tv *.google.com; font-src 'self' data:  *.fonts.googleapis.com *.onnetwork.tv *.gstatic.com; frame-src 'self' https://weatherwidget.io *.weatherwidget.io https://instagram.com *.instagram.com https://twitframe.com *.twitframe.com *.twitter.com *.facebook.com *.googlesyndication.com *.google.com *.g.doubleclick.net *.googleadservices.com *.youtube.com *.youtu.be https://youtube.com https://youtu.be https://zrzutka.pl *.zrzutka.pl *.criteo.com *.onnetwork.tv *.googleapis.com *.aztv.pl *.casalemedia.com *.openx.net *.quantumdex.io *.adxbid.info *.openx.net *.quantumdex.io https://adxbid.info *.adxbid.info https://onetag-sys.com *.onetag-sys.com *.openx.net *.smartadserver.com *.wp.pl *.rubiconproject.com *.pubmatic.com *.a-mo.net *.indexww.com *.adnxs.com *.3lift.com https://hdsystem.pl https://www.hdsystem.pl *.richaudience.com; connect-src 'self' *.google-analytics.com *.sadeczanin.info pagead2.googlesyndication.com *.google.com *.g.doubleclick.net *.gstatic.com bcp.crwdcntrl.net id5-sync.com *.criteo.com *.criteo.net *.onnetwork.tv *.jsdelivr.net *.openx.net *.adnxs.com *.quantumdex.io *.wp.pl *.rubiconproject.com https://dnacdn.net *.dnacdn.net *.onetag-sys.com https://onetag-sys.com *.a-mo.net *.casalemedia.com *.pubmatic.com *.smartadserver.com *.adform.net *.creativecdn.com *.vidoomy.com *.4dex.io *.adxpremium.services *.adsrvr.org *.richaudience.com; 1
default-src https://d13qcyivyon4xf.cloudfront.net https://*.recollect.net https://www2.elpasotexas.gov https://*.piktochart.com https://elpasotx.citysourced.com https://alive5.com https://*.pure.cloud https://td.doubleclick.net https://*.userway.org https://*.powerbigov.us 'self' data:; script-src https://*.fontawesome.com https://*.googletagmanager.com https://*.google.com https://*.google-analytics.com https://*.gstatic.com https://*.jquery.com 'sha256-EFV8pmp/wh+U6PZamj4KQ0q8X4ZQK18tF7skjashMC0=' 'sha256-d470bixwKmL9bRvqX+/YcGn63ywAfKoybYPkM5Uytpg=' 'sha256-CWheM/qrotfHL9rkBHCUQoQJ26R59qBT9Y6zmdWMo4I=' https://*.cloudflare.com https://*.jsdelivr.net https://*.recollect.net 'sha256-GZcyqV0YX2St+S/OQczTu1wNNg/O+RTwzw2JTTta3P0=' https://googletagmanager.com https://acsbapp.com https://*.pure.cloud https://*.acsbapp.com 'sha256-EhQpu6NNucte8YbnJ4xqNQ3ZEr6lZr9OylXRM08U23w=' 'sha256-6LGMzcnzg+kSHN9kCfnGBfyFkTD5ralHy4kgX9bEKac=' https://*.userway.org https://alive5.com 'sha256-Ktbr5+uWaq/tdIzd+uSnzMynWRb8C1GgwNmidruZnl4=' https://*.elpasotexas.gov 'sha256-N/ojzpn0NH2iToAWgtz7/qj3VTBrzGc5Kq/wcHmeC9g=' 'sha256-32mhgs7qr26DY71TSkr2GH6b4cN1O1vqJZeD8VqK09E=' 'sha256-ogBzyJChbukfa3Sy3FmuFfBT4HErpPzLDY1mDXuD08I=' https://*.clarity.ms 'sha256-1Mtgu0LP1N914Q7hPqP5oj1G7I5kj4eUK9emzGHCGU0=' https://*.youtube.com 'sha256-ISZqhiP5lsW/o4tzWAjiLcmBSgn4ci50MHTdBAJeJzo=' https://*.googleadservices.com https://*.facebook.net https://*.adtrafficquality.google https://*.cloudflareinsights.com 'self' 'report-sample' 'nonce-af3e1dc2915dcb76'; style-src https://*.googleapis.com https://*.fontawesome.com https://*.google.com https://*.jsdelivr.net https://*.typekit.net https://*.fastly.net https://alive5.com https://*.userway.org https://*.gstatic.com 'self' 'unsafe-inline' 'report-sample'; connect-src https://*.fontawesome.com https://*.google-analytics.com https://*.doubleclick.net https://*.google.com https://googletagmanager.com https://*.acsbapp.com https://webmessaging.usw2.pure.cloud https://*.pure.cloud https://*.userway.org https://*.alive5.com https://alive5.com https://*.clarity.ms https://*.adtrafficquality.google https://*.g.doubleclick.net https://*.googleapis.com https://*.youtube.com https://youtube.com 'self' data:; font-src https://*.gstatic.com https://*.fontawesome.com https://*.jsdelivr.net https://*.typekit.net https://*.fastly.net https://acsbapp.com https://*.userway.org 'self' data:; img-src https://*.google.com https://*.googleapis.com https://*.google-analytics.com https://*.jsdelivr.net https://*.fastly.net https://*.recollect.net https://*.piktochart.com https://*.userway.org https://*.alive5.com https://*.clarity.ms https://*.gstatic.com https://*.googletagmanager.com https://*.bing.com https://tip411.com https://*.tip411.com https://*.adtrafficquality.google https://*.g.doubleclick.net https://*.google.com.mx https://*.youtube.com 'self' data:; Strict-Transport-Security max-age=31536000; frame-src https://syndicatedsearch.goog https://www2.elpasotexas.gov https://alive5.com https://*.youtube.com https://*.powerbigov.us https://*.google.com https://*.adtrafficquality.google https://*.userway.org https://googletagmanager.com https://coepgis.map.arcgis.com https://*.googletagmanager.com https://tip411.com https://*.tip411.com https://youtube.com https://www.youtube-nocookie.com https://api.recollect.net/ 'self'; media-src https://*.gstatic.com https://*.youtube.com https://youtube.com 'self'; script-src-elem https://*.fontawesome.com https://*.googletagmanager.com https://*.google.com https://*.google-analytics.com https://*.gstatic.com https://*.jquery.com 'sha256-EFV8pmp/wh+U6PZamj4KQ0q8X4ZQK18tF7skjashMC0=' 'sha256-d470bixwKmL9bRvqX+/YcGn63ywAfKoybYPkM5Uytpg=' 'sha256-CWheM/qrotfHL9rkBHCUQoQJ26R59qBT9Y6zmdWMo4I=' https://*.cloudflare.com https://*.jsdelivr.net https://*.recollect.net 'sha256-GZcyqV0YX2St+S/OQczTu1wNNg/O+RTwzw2JTTta3P0=' https://googletagmanager.com https://acsbapp.com https://*.pure.cloud https://*.acsbapp.com 'sha256-EhQpu6NNucte8YbnJ4xqNQ3ZEr6lZr9OylXRM08U23w=' 'sha256-6LGMzcnzg+kSHN9kCfnGBfyFkTD5ralHy4kgX9bEKac=' https://*.userway.org https://alive5.com 'sha256-Ktbr5+uWaq/tdIzd+uSnzMynWRb8C1GgwNmidruZnl4=' https://*.elpasotexas.gov 'sha256-N/ojzpn0NH2iToAWgtz7/qj3VTBrzGc5Kq/wcHmeC9g=' 'sha256-32mhgs7qr26DY71TSkr2GH6b4cN1O1vqJZeD8VqK09E=' 'sha256-ogBzyJChbukfa3Sy3FmuFfBT4HErpPzLDY1mDXuD08I=' https://*.clarity.ms 'sha256-1Mtgu0LP1N914Q7hPqP5oj1G7I5kj4eUK9emzGHCGU0=' https://*.youtube.com 'sha256-ISZqhiP5lsW/o4tzWAjiLcmBSgn4ci50MHTdBAJeJzo=' https://*.googleadservices.com 'unsafe-eval' https://*.facebook.net https://*.adtrafficquality.google 'sha256-RlhVC6WGhVrcsY0hAmbU/YhaSUz2iA2q1f16/7A6jLU=' 'sha256-qiBaJwz/YabgUI2mfu+mesFLqAtMG+FDIxb/RZnawDk=' 'self' 'report-sample' 'nonce-af3e1dc2915dcb76'; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; 1
script-src 'nonce-FUn05m/RCOwGnNGTyJvrgg==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https://events.mercadolibre.com/csp/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=dffc1266-6045-4a08-8156-1622104b87d0; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https://http2.mlstatic.com/ https://mlstaticquic-a.akamaihd.net/; frame-ancestors 'self' https://*.mercadolibre.cl:* https://*.mercadolibre.com:* https://*.mercadolibre.com.ve:* https://*.mercadolibre.com.ar:* https://*.mercadolivre.com.br:* https://*.mercadolibre.com.co:* https://*.mercadolibre.com.ec:* https://*.mercadolibre.com.mx:* https://*.mercadolibre.com.pe:* https://*.mercadolibre.com.uy:* https://*.mercadopago.cl:* https://*.mercadopago.com.ar:* https://*.mercadopago.com.br:* https://*.mercadopago.com.co:* https://*.mercadopago.com.mx:* https://*.mercadopago.com.pe:* https://*.mercadopago.com.uy:* https://*.mercadopago.com.ve:* https://*.mercadopago.com:* https://*.adminml.com:* https://*.mercadolibre.co.cr:* https://*.mercadolibre.com.pa:* https://*.mercadolibre.com.do:* https://*.mercadolibre.com.bo:* https://*.mercadolibre.com.py:* https://*.mercadolibre.com.gt:* https://*.mercadolibre.com.hn:* https://*.mercadolibre.com.ni:* https://*.mercadolibre.com.sv:* https://*.mercadopago.com.ec:* https://*.portalinmobiliario.com:* https://*.mercadolivre.com:* 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com *.checkout.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.dotdigital-pages.com *.dotdigital.com www.google.com *.checkout.com *.klarna.com www.paypal.com www.sandbox.paypal.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * webchat.dotdigital.com webchat.staging.dotdigital.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.trackedlink.net *.googleapis.com *.checkout.com www.paypal.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com *.gstatic.com *.checkout.com *.klarnacdn.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com webchat.dotdigital.com webchat.staging.dotdigital.com *.avada.io *.shopify.com https://ipinfo.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.checkout.com *.fontawesome.com assets.braintreegateway.com webchat.dotdigital.com webchat.staging.dotdigital.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.googleapis.com *.checkout.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.browser-intake-datadoghq.com www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com webchat.dotdigital.com webchat.staging.dotdigital.com https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' *.nscc.ca; img-src 'self' *.nscc.ca *.gstatic.com *.fontawesome.com *.google.ca *.google.com www.google-analytics.com app.careerbeacon.com s3.amazonaws.com syndication.twitter.com www.facebook.com *.monsido.com data: www.googletagmanager.com maps.googleapis.com https://ad.doubleclick.net https://px.ads.linkedin.com/ https://www.linkedin.com/px/ https://i.ytimg.com/vi_webp/ https://syndicatedsearch.goog https://ep1.adtrafficquality.google https://alb.reddit.com; font-src 'self' *.nscc.ca *.fontawesome.com *.googleapis.com *.gstatic.com cdn.kendostatic.com data:; style-src 'self' *.nscc.ca *.fontawesome.com *.googleapis.com *.google.com app.simplycast.ca widget.alongside.com cdn.kendostatic.com kendo.cdn.telerik.com tags.srv.stackadapt.com www.googletagmanager.com static-assets-ca.libanswers.com https://kendo.cdn.telerik.com https://customer.cludo.com 'unsafe-inline'; script-src 'self' *.nscc.ca *.google.com *.googleapis.com *.gstatic.com https://googleads.g.doubleclick.net *.fontawesome.com *.google-analytics.com *.googletagmanager.com app.simplycast.ca *.youtube.com widget.alongside.com platform.twitter.com lgapi-ca.libapps.com https://ep2.adtrafficquality.google islpronto.islonline.net ca.libraryh3lp.com api3-ca.libcal.com cdn.kendostatic.com *.monsido.com *.crazyegg.com connect.facebook.net tags.srv.stackadapt.com js.adsrvr.org blob: static-assets-ca.libanswers.com https://jsonip.com https://server402.islonline.net/live/islpronto https://code.jquery.com https://unpkg.com https://cdn.kendostatic.com/2023.3.1010/js/* https://kendo.cdn.telerik.com https://qvdt3feo.com/events.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://analytics.tiktok.com/i18n/pixel/events.js https://analytics.tiktok.com/i18n/pixel/static/ https://www.redditstatic.com https://customer.cludo.com 'unsafe-inline'; connect-src 'self' *.nscc.ca www.google-analytics.com https://www.google.com https://ad.doubleclick.net csp.withgoogle.com ka-p.fontawesome.com kit.fontawesome.com api3-ca.libcal.com *.crazyegg.com tags.srv.stackadapt.com *.monsido.com analytics.google.com stats.g.doubleclick.net maps.googleapis.com https://px.ads.linkedin.com/ https://px.ads.linkedin.com/wa/ https://analytics.tiktok.com/api/v2/pixel https://analytics.tiktok.com/api/v2/pixel/act https://ep1.adtrafficquality.google https://www.google.ca https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://mpc-prod-27-s6uit34pua-uk.a.run.app https://pixel-config.reddit.com https://app.simplycast.ca https://api-us1.cludo.com; frame-src 'self' *.youtube.com *.google.com https://www.googletagmanager.com syndication.twitter.com platform.twitter.com ca.libraryh3lp.com *.fls.doubleclick.net insight.adsrvr.org cckc.airtime.pro www.facebook.com https://player.vimeo.com https://td.doubleclick.net https://app.simplycast.ca https://match.adsrvr.org/track/upb/* https://ep2.adtrafficquality.google; frame-ancestors 'self' *.nscc.ca:*; 1
script-src 'self' 'nonce-n6aVLbEOzU00XHtldnZ56fWVLgKYz4s8' 'strict-dynamic' *.googletagmanager.com *.cookiebot.com *.googleapis.com *.google.com *.gstatic.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' res.cloudinary.com rimibaltic-web-res.cloudinary.com rimibaltic-res.cloudinary.com *.cookiebot.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.google.com *.google.lv *.google.lt *.google.ee *.googleusercontent.com *.doubleclick.net *.googleadservices.com *.googlesyndication.com *.onrimi.net data: *.rimi.lv *.rimi.lt *.rimi.ee; form-action 'self'; base-uri 'self'; object-src 'none'; report-uri https://sentry.onrimi.net/api/25/security/?sentry_key=8e496e045aea8c4c78851b26c67ab67a&sentry_environment=production-azure-web&sentry_release=v1623-5bc59850563276ab520fc7e35fcb30602468a73a 1
default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; font-src 'self'; object-src 'none'; base-uri 'self'; 1
font-src *.klevu.com *.ksearchnet.com *.fontawesome.com *.typekit.net https://widgets.trustedshops.com integrations.etrusted.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://seo.mageplaza.com www.facebook.com *.copernica.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com player.vimeo.com https://www.paypal.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com https://*.dpdconnect.nl *.dpdconnect.nl service2.loyaltyinabox.com *.pinterest.com www.facebook.com www.youtube.com view.publitas.com www.google.com www.google.nl www.google.de *.google.com maps.google.com chat.babypark.nl *.doubleclick.net td.doubleclick.net googleads.g.doubleclick.net widget.trustpilot.com *.cookiebot.com *.cookiebot.eu chatwidget-prod.web.app www.googletagmanager.com sst.babypark.nl sst.babypark.de sst.babydeals.be sst.baby-dump.nl folders.baby-dump.nl platform.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com https://portal.payconiq.com https://static.buckaroo.nl https://www.paypalobjects.com *.klevu.com *.ksearchnet.com www.babypark.nl www.babypark.de www.babydeals.be dehoevebuitenleven.nl m2.babypark.mavendev.com m2.babypark-de.mavendev.com www.ikenik.nl m2.ikenik.mavendev.com m2.babydump.mavendev.com m2.babydump-de.mavendev.com www.google.com www.google.nl www.google.de www.google.com.ua www.facebook.com ct.pinterest.com www.googletagmanager.com www.zenaps.com www.awin1.com static.zdassets.com *.bing.com *.bing.net www.thuiswinkel.org i.ytimg.com img.youtube.com blob: lantern.roeye.com *.clarity.ms *.cookiebot.com *.cookiebot.eu integrations.etrusted.com stats.g.doubleclick.net sst.babypark.nl sst.babypark.de sst.babydeals.be sst.baby-dump.nl pinterest.com assets.pinterest.com syndication.twitter.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: maps.gstatic.com https://widgets.trustedshops.com *.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com https://*.dpdconnect.nl js.klevu.com *.ksearchnet.com *.avada.io www.googletagmanager.com checkout.buckaroo.nl *.clarity.ms lantern.roeyecdn.com widgets.trustedshops.com web-sdk.smartlook.com www.dwin1.com s.pinimg.com connect.facebook.net static.buckaroo.nl view.publitas.com api.360productviewer.com googleads.g.doubleclick.net bat.bing.com bat.bing.net static.zdassets.com js-agent.newrelic.com *.livechatinc.com bam.eu01.nr-data.net chat.babypark.nl widget.trustpilot.com *.pinterest.com *.hotjar.com *.hotjar.io *.cookiebot.com *.cookiebot.eu integrations.etrusted.com chatwidget-prod.web.app twitter.com platform.twitter.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.google.com *.gstatic.com maps.googleapis.com https://widgets.trustedshops.com *.yotpo.com sst.baby-dump.nl https: 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl cdn.dnky.co webchat.dotdigital.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.typekit.net checkout.buckaroo.nl integrations.etrusted.com chatwidget-css.web.app maxcdn.bootstrapcdn.com unsafe-inline *.googleapis.com *.gstatic.com https://widgets.trustedshops.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src static.zdassets.com integrations.etrusted.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com wss://websocketservice-externalapi.prod.buckaroo.io https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://applepay.buckaroo.io https://www.paypal.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com *.klevu.com *.ksearchnet.com *.clarity.ms *.pinterest.com *.doubleclick.net stats.g.doubleclick.net googleads.g.doubleclick.net manager.eu.smartlook.cloud ekr.zdassets.com wss://widget-mediator.zopim.com api.360productviewer.com www.facebook.com livechat.fabulor.eu bam.eu01.nr-data.net region1.analytics.google.com *.google.com *.hotjar.com *.hotjar.io analytics.google.com bat.bing.com bat.bing.net *.cookiebot.com *.cookiebot.eu *.copernica.com integrations.etrusted.com api.ipify.org www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.google-analytics.com *.trustedshops.com *.etrusted.com *.yotpo.com sst.baby-dump.nl https: 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.google.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://report-uri.com/r/d/csp/reportOnly; report-to report-endpoint; 1
default-src 'self' https://stats.g.doubleclick.net; connect-src 'self' https: wss: data: https://www.facebook.com https://graph.facebook.com https://*.nr-data.net https://bam.nr-data.net https://bam.eu01.nr-data.net https://js-agent.newrelic.com https://www.bpp.com https://discoveruni.gov.uk https://*.du-widget.com https://*.google-analytics.com http://*.google-analytics.com https://pro.ip-api.com/json https://*.analytics.google.com http://*.analytics.google.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://td.doubleclick.net https://*.doubleclick.net https://tpc.googlesyndication.com https://*.privacy-center.org https://*.didomi.io https://pagead2.googlesyndication.com https://bat.bing.com http://bat.bing.com https://bat.bing.net http://bat.bing.net https://u.clarity.ms https://*.clarity.ms https://px.ads.linkedin.com https://www.googleadservices.com https://www.google.com https://googleads.g.doubleclick.net https://tagmanager.google.com https://www.googletagmanager.com https://*.googletagmanager.com https://secure.leadforensics.com https://*.agile-company-365.com https://*.igodigital.com https://connect.facebook.net https://www.facebook.net http://www.facebook.net http://www.facebook.com https://snap.licdn.com https://www.google-analytics.com https://cdn.mouseflow.com https://*.mouseflow.com wss://*.mouseflow.com https://aiden.learnwise.ai https://*.learnwise.ai https://tags.srv.stackadapt.com http://tags.srv.stackadapt.com https://*.usbrowserspeed.com https://*.salesforceliveagent.com https://ws-assets.zoominfo.com http://ws-assets.zoominfo.com https://analytics.tiktok.com http://analytics.tiktok.com https://analytics-ipv6.tiktokw.us http://analytics-ipv6.tiktokw.us https://pixels.spotify.com http://pixels.spotify.com; font-src 'self' data: https://fonts.gstatic.com https://*.cdn.office.net https://use.typekit.net https://use.typekit.com https://fonts.googleapis.com https://cdn.mouseflow.com https://www.bpp.com; frame-src 'self' data: https://www.youtube-nocookie.com https://www.youtube.com https://discoveruni.gov.uk https://*.du-widget.com https://*.fls.doubleclick.net http://*.fls.doubleclick.net https://td.doubleclick.net https://www.facebook.com https://www.googletagmanager.com https://*.doubleclick.net https://adservice.google.com https://chat.learnwise.ai https://*.learnwise.ai https://match.adsrvr.org https://www.google.com https://www.datocms-assets.com https://*.opendns.com https://*.deferrerstrust.com https://safeframe.googlesyndication.com http://safeframe.googlesyndication.com https://*.safeframe.googlesyndication.com http://*.safeframe.googlesyndication.com https://consentcdn.cookiebot.com https://www.googleadservices.com https://*.id.opendns.com http://*.id.opendns.com; img-src 'self' https: data: blob: https://discoveruni.gov.uk https://*.du-widget.com https://*.cloudfunctions.net https://www.google-analytics.com https://www.facebook.com http://www.facebook.com https://www.google.com https://www.google.co.uk https://i.ytimg.com https://pagead2.googlesyndication.com http://pagead2.googlesyndication.com https://ad.doubleclick.net http://ad.doubleclick.net https://*.privacy-center.org https://www.googleadservices.com https://www.googletagmanager.com https://ade.googlesyndication.com https://tpc.googlesyndication.com https://c.clarity.ms https://px.ads.linkedin.com https://*.doubleclick.net https://bat.bing.com http://bat.bing.com https://bat.bing.net http://bat.bing.net https://c.bing.com https://pixel.byspotify.com http://pixel.byspotify.com https://*.igodigital.com https://www.datocms-assets.com https://*.mouseflow.com https://www.bpp.com; media-src 'self' https: data: blob:; object-src https://discoveruni.gov.uk; script-src 'self' blob: data: 'nonce-NjViOTgyYTUtMzQ3OS00NGZmLWFlMmMtMTY0OGFkZTRkNWQx' 'strict-dynamic' 'report-sample' http: https: 'unsafe-eval' https://js-agent.newrelic.com https://bam.nr-data.net https://bam.eu01.nr-data.net https://www.bpp.com https://www.googletagmanager.com https://tagmanager.google.com https://*.googletagmanager.com https://www.google-analytics.com https://www.googleoptimize.com https://connect.facebook.net https://*.privacy-center.org https://bat.bing.com http://bat.bing.com https://bat.bing.net http://bat.bing.net https://snap.licdn.com https://secure.agile-company-365.com https://*.agile-company-365.com https://px.ads.linkedin.com https://www.clarity.ms https://*.clarity.ms https://www.clarity.com https://ts.clarity.com https://v.clarity.com https://ad.doubleclick.net https://*.doubleclick.net https://adservice.google.com https://adservice.google.co.uk https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://securepubads.g.doubleclick.net https://stats.g.doubleclick.net https://tpc.googlesyndication.com https://secure.leadforensics.com https://pixel.byspotify.com https://*.igodigital.com https://*.infinity-tracking.com https://cdn.mouseflow.com https://aiden.learnwise.ai https://*.learnwise.ai https://tags.srv.stackadapt.com https://*.usbrowserspeed.com https://*.salesforceliveagent.com; style-src 'self' blob: data: 'unsafe-inline' https://fonts.googleapis.com https://www.googletagmanager.com https://tagmanager.google.com https://aiden.learnwise.ai https://*.learnwise.ai https://tags.srv.stackadapt.com; upgrade-insecure-requests; base-uri 'self'; frame-ancestors 'self'; report-uri https://o4508693778268160.ingest.de.sentry.io/api/4509629814800465/security/?sentry_key=7af8eb49226dd30e4cc31a2e2f6ea5cc&sentry_environment=prod; 1
style-src-elem fonts.googleapis.com tags.srv.stackadapt.com cdn-widgetsrepository.yotpo.com cdn-widget-assets.yotpo.com *.dibspayment.eu 'self' 'unsafe-inline'; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com static.klaviyo.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.ingrid.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.mczbf.com *.emjcd.com *.dibspayment.eu 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com magefan.com cm.magefan.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com *.disqus.com https://firebasestorage.googleapis.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.googleusercontent.com cdn.cookielaw.org *.adzerk.net bat.bing.net s.zkcdn.net ad.doubleclick.net https://cdn-int.safecharge.com https://cdn.safecharge.com https://devmobile.sccdev-qa.com https://secure.safecharge.com/ cdn-widgetsrepository.yotpo.com loyalty.yotpo.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.klarnaevt.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.klevu.com *.ksearchnet.com *.disqus.com *.avada.io connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com cdn.cookielaw.org *.googleapis.com *.gstatic.com widget.trustpilot.com static.fbot.me campaign.fbot.me tags.srv.stackadapt.com acsbapp.com bat.bing.com www.clarity.ms scripts.clarity.ms unpkg.com *.ingrid.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com  https://magento.com https://cdn.safecharge.com https://devmobile.sccdev-qa.com https://cdn-int.safecharge.com https://play.google.com cdn-widgetsrepository.yotpo.com loyalty.yotpo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.mczbf.com *.emjcd.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com https://cdn.safecharge.com https://devmobile.sccdev-qa.com  https://fonts.googleapis.com cdn-widgetsrepository.yotpo.com loyalty.yotpo.com assets.braintreegateway.com *.dibspayment.eu https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com cdn-widgetsrepository.yotpo.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://get.geojs.io *.avada.io *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net cdn.cookielaw.org *.onetrust.com *.googleapis.com *.gstatic.com cdn.acsbapp.com tags.srv.stackadapt.com bat.bing.net l.clarity.ms eu-tracks.trackingplan.com *.ingrid.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com  https://sdkmon.safecharge.com https://ppp-test.safecharge.com https://ppp-test.nuvei.com https://secure.safecharge.com https://play.google.com cdn-widgetsrepository.yotpo.com loyalty.yotpo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.mczbf.com *.emjcd.com *.dibspayment.eu 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src cdn-widgetsrepository.yotpo.com loyalty.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-03T6WijFTgLDVCy7et5Lvg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com *.oney.io *.staging.oney.io https://fonts.gstatic.com https://ws.colissimo.fr *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.beautysuccess.fr fonts.googleapis.com googleapis.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action *.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src bid.g.doubleclick.net player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.youtube-nocookie.com *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.weltpixel.com *.hipay-tpp.com *.hipay.com *.googleapis.com https://www.youtube.com https://form.typeform.com libs.hipay.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com *.hipay.com *.googleapis.com *.oney.io *.staging.oney.io https://maps.googleapis.com https://maps.gstatic.com https://ws.colissimo.fr https://*.tile.openstreetmap.fr https://*.onyourmap.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.beautysuccess.fr maps.googleapis.com googleapis.com maps.gstatic.com *.openstreetmap.org api.maptiler.com magefan.com cm.magefan.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.hipay-tpp.com *.hipay.com mpsnare.iesnare.com *.paypal.com *.googleapis.com *.oney.io *.staging.oney.io https://www.google.com https://www.gstatic.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.gstatic.com *.beautysuccess.fr *.googletagmanager.com maps.googleapis.com googleapis.com api.socloz.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.hipay.com https://fonts.googleapis.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.gstatic.com *.beautysuccess.fr googleapis.com libs.hipay.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src data: mpsnare.iesnare.com *.googleapis.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.adobe.io performance.typekit.net *.sentry.io vimeo.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://maps.googleapis.com https://player.vimeo.com *.hipay-tpp.com *.hipay.com wss://mpsnare.iesnare.com *.googleapis.com *.oney.io *.staging.oney.io https://ws.colissimo.fr https://nominatim.openstreetmap.org https://*.onyourmap.com https://*.mapbox.com *.beautysuccess.fr api.maptiler.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.exponea.com *.shopify.com cdn.shopify.com *.positivegrid.com kit.fontawesome.com connect.facebook.net *.juniphq.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.shopify.com; font-src 'self' data: fonts.gstatic.com cdn.shopify.com; img-src 'self' data: blob: https:; connect-src 'self' *.googletagmanager.com *.google-analytics.com *.exponea.com *.shopify.com *.positivegrid.com *.ingest.us.sentry.io *.facebook.com connect.facebook.net *.juniphq.com; frame-src 'self' *.positivegrid.com *.youtube.com *.youtube-nocookie.com *.figma.com; media-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' *.positivegrid.com *.shopify.com; frame-ancestors 'none'; upgrade-insecure-requests 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.cloudflare.com *.twitter.com https://fonts.gstatic.com *.googleapis.com https://use.fontawesome.com *.bootstrapcdn.com *.trustindex.io embed.tawk.to maxcdn.bootstrapcdn.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://www.google.com https://www.gstatic.com https://cdnjs.cloudflare.com data: 'self' data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.list-manage.com *.twitter.com *.trustindex.io 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com https://www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://metrics.ladecormarmi.com *.twitter.com *.addthis.com *.trustindex.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://metrics.ladecormarmi.com *.cloudflare.com *.google.com https://images-eu.ssl-images-amazon.com *.google.co.in *.googleapis.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.twitter.com *.trustindex.io *.amazon.it *.googleusercontent.com *.paypalobjects.com *.facebook.com *.images-eu.ssl-images-amazon.com cdn-cookieyes.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.feedaty.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://firebasestorage.googleapis.com https://www.google.it https://www.google.com.pk 'self' *.google.com.pk https://raw.githubusercontent.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.list-manage.com chimpstatic.com https://metrics.ladecormarmi.com cdn-cookieyes.com *.cloudflare.com *.twitter.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.gstatic.com *.trustedshops.com *.fontawesome.com *.addthis.com s7.addthis.com m.addthis.com z.moatads.com *.addthisedge.com *.googleapis.com *.facebook.com graph.facebook.com widgets.pinterest.com *.pinterest.com *.trustindex.io *.paypal.com *.paypalobjects.com *.vimeo.com www.gstatic.com/recaptcha/ connect.facebook.net downloads.mailchimp.com form-assets.mailchimp.com *.feedaty.com *.disqus.com *.avada.io *.shopify.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' *.ladecormarmi.com 'self' 'unsafe-eval' blob: *.adobedtm.com www.google.com/recaptcha/ *.iubenda.com accounts.google.com js.braintreegateway.com assets.braintreegateway.com *.pinimg.com commerce-app.pintergration.com embed.tawk.to cdn.trustindex.io pay.google.com www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com https://fonts.googleapis.com *.twitter.com *.gstatic.com *.typekit.net https://use.fontawesome.com *.bootstrapcdn.com embed.tawk.to downloads.mailchimp.com *.feedaty.com maxcdn.bootstrapcdn.com https://fonts.bunny.net *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.tawk.to *.list-manage.com directory.cookieyes.com cdn-cookieyes.com https://metrics.ladecormarmi.com *.cloudflare.com *.twitter.com *.trustindex.io *.googlesyndication.com *.doubleclick.net *.google-analytics.com *.googleadservices.com *.googletagmanager.com log.cookieyes.com *.facebook.com *.instagram.com *.googleapis.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.feedaty.com https://get.geojs.io *.avada.io https://olegnax.com https://api.instagram.com https://graph.instagram.com/ *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com     www.google-analytics.com      analytics.google.com  pilot-payflowlink.paypal.com  *.iubenda.com ekr.zdassets.com/ http://dpm.demdex.net https://www.google.com https://www.gstatic.com accounts.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.multisafepay.com https://graph.instagram.com/  api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com https://firebaseinstallations.googleapis.com https://fcmregistrations.googleapis.com 'self' *.pinimg.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://cdn.intergient.com https://hb.vntsm.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://uploads.videogamemods.com https://media.rawg.io https://img.youtube.com https://*.ytimg.com; font-src 'self' data:; connect-src 'self' https://*.supabase.co wss://*.supabase.co https://api.rawg.io https://uploads.videogamemods.com https://challenges.cloudflare.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://challenges.cloudflare.com; media-src 'self' https://uploads.videogamemods.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.ogormans.co.uk *.tawk.to *.cloudflare.com *.fontawesome.com https://fonts.bunny.net use.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com *.arcot.com *.rsa3dsauth.co.uk *.rsa3dsauth.com *.boc.cn *.afs.com.bh *.enfuce.com *.cardcenter.ch *.nexigroup.com *.pluscard.de *.qiib.com.qa *.paylife.at *.redsys.es *.3dsecure.no *.modirum.com *.edb.com *.viseca.ch *.apata.io *.capitalone.com *.dnp-cdms.jp *.revolut.com *.bankserv.co.za *.swisscard.ch *.six-group.com *.marqeta.com *.cardinalcommerce.com *.wlp-acs.com *.imbank.com *.tsys.co.uk *.sia.eu *.garanti.com.tr *.commerzbank.de *.cmbchina.com *.alahli.com *.mycardsecure.com *.gps.com.bh *.citibank.com *.wibmo.com *.dkb.de *.monzo.com *.alinma.com *.nccc.com.tw *.starlingbank.com *.danskebank.com *.pekao24.pl *.lloydsbank.co.uk/ *.lloydsbank.com/ *.lloydsbankinggroup.com/ *.channel-cards-auth-api.lloydsbankinggroup.com/ *.sparebank1.no *.ogormans.co.uk *.tawk.to 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.arcot.com *.rsa3dsauth.co.uk *.rsa3dsauth.com *.boc.cn *.afs.com.bh *.enfuce.com *.cardcenter.ch *.pluscard.de *.qiib.com.qa *.nexigroup.com *.paylife.at *.redsys.es *.3dsecure.no *.modirum.com *.edb.com *.viseca.ch *.apata.io *.capitalone.com *.dnp-cdms.jp *.revolut.com *.bankserv.co.za *.swisscard.ch *.six-group.com *.marqeta.com *.cardinalcommerce.com *.wlp-acs.com *.imbank.com *.tsys.co.uk *.sia.eu *.garanti.com.tr *.commerzbank.de *.cmbchina.com *.alahli.com *.mycardsecure.com *.gps.com.bh *.citibank.com *.wibmo.com *.dkb.de *.monzo.com *.alinma.com *.nccc.com.tw *.starlingbank.com *.danskebank.com *.pekao24.pl *.lloydsbank.co.uk/ *.lloydsbank.com/ *.lloydsbankinggroup.com/ *.channel-cards-auth-api.lloydsbankinggroup.com/ *.sparebank1.no *.ogormans.co.uk *.tawk.to *.googlesyndication.com *.doubleclick.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.stripe.com *.stripe.network *.google.com ebizmarts-website.s3.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com *.ogormans.co.uk cdn.jsdelivr.net *.amazonaws.com *.facebook.com *.bing.net *.bing.com *.feefo.com *.youreko.com *.flix360.com *.googlesyndication.com *.doubleclick.net https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.sagepay.com *.opayo.eu.elavon.com *.ogormans.co.uk *.tawk.to *.jsdelivr.net *.cloudflare.com *.amazonaws.com *.sharethis.com *.isitetv.com *.loadbee.com *.flixfacts.com *.flixcar.com *.facebook.net *.bing.com *.feefo.com *.gstatic.com *.youreko.com *.googlesyndication.com *.doubleclick.net adservice.google.com *.googletagservices.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.ogormans.co.uk *.tawk.to *.jsdelivr.net *.cloudflare.com *.amazonaws.com *.feefo.com *.youreko.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com use.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.ogormans.co.uk *.amazonaws.com *.tawk.to tawk.link 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.ogormans.co.uk *.sharethis.com *.amazonaws.com *.feefo.com *.bing.net *.google.ie *.google.co.uk *.youreko.com *.flixcar.com *.isitetv.com *.googlesyndication.com *.doubleclick.net adservice.google.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; media-src 'self' blob: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.hubspot.com https://js.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hubspotfeedback.com https://js.hsadspixel.net https://js.hscollectedforms.net https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://connect.facebook.net https://www.clarity.ms https://static.hotjar.com https://script.hotjar.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https: blob:; connect-src 'self' https://*.hubspot.com https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://www.clarity.ms https://*.hotjar.com wss://*.hotjar.com https://connect.facebook.net; frame-src 'self' https://www.googletagmanager.com https://www.facebook.com https://*.hotjar.com https://www.google.com; object-src 'none'; base-uri 'self'; report-uri https://jusfy.com.br/wp-json/jusfy/v1/csp-report 1
object-src 'none';base-uri 'self';script-src 'nonce-IJc7UOl0d-SyjNp4S_hxNA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.clarity.ms https://js-agent.newrelic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://*.clarity.ms https://bam.nr-data.net https://*.nr-data.net https://script.google.com https://script.googleusercontent.com; img-src 'self' data: blob: https://storage.googleapis.com https://assets.driverdb.com https://www.the-race.com https://storage.ghost.io https://i.ytimg.com https://www.google-analytics.com; frame-src 'self' https://www.youtube.com https://www.instagram.com; font-src 'self' data: https://fonts.gstatic.com; media-src 'self' blob:; worker-src blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /api/csp-report; report-to csp-endpoint 1
default-src 'self' https: wss:; img-src * data: blob:; media-src * data:; style-src 'self' 'unsafe-inline' https://hsbgot.humany.net https://wds.ace.teliacompany.com https://fonts.googleapis.com https://www.gstatic.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mata.hsb.se https://tracker.hsb.open-analytics.se https://*.hotjar.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://maps.googleapis.com https://*.imbox.io https://js.monitor.azure.com https://*.cookiebot.com https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.min.js https://dl.episerver.net wss://*.hotjar.com https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://userlike-cdn-umm.b-cdn.net https://connect.facebook.net https://fonts.googleapis.com https://www.google.com https://www.gstatic.com https://wds.ace.teliacompany.com https://*.superoffice.com https://www.youtube.com ; frame-src 'self' https: ; report-uri /api/ContentSecurityPolicy/ReportViolation 1
default-src 'self' wss: *.gravatar.com *.seeclickfix.com *.civicplus.com *.civicplus.pro *.civicclerk.com engage6.azureedge.net cdn-live.evolve.civicplus.io *.audioeye.com *.pendo.io *.zdassets.com *.zendesk.com *.zopim.com *.arcgis.com *.arcgisonline.com *.services.visualstudio.com *.monitor.azure.com *.googleapis.com *.googletagmanager.com *.google-analytics.com use.fontawesome.com *.google.com *.gstatic.com gstatic.com cdn.embedly.com/widgets/platform.js cdnjs.cloudflare.com static.cloudflareinsights.com *.fontawesome.com *.countyofsb.org * 'self'; style-src * 'self' 'unsafe-inline'; img-src * 'self' data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.googletagmanager.com *.seeclickfix.com *.civicplus.com *.civicplus.pro *.civicclerk.com engage6.azureedge.net cdn-live.evolve.civicplus.io *.audioeye.com *.pendo.io *.zdassets.com *.zendesk.com *.zopim.com *.arcgis.com *.arcgisonline.com *.services.visualstudio.com *.monitor.azure.com *.googleapis.com *.googletagmanager.com *.google-analytics.com use.fontawesome.com *.google.com *.gstatic.com gstatic.com cdn.embedly.com/widgets/platform.js cdnjs.cloudflare.com static.cloudflareinsights.com *.fontawesome.com * 'self' about: 'unsafe-inline' 'unsafe-eval' data:; worker-src * 'self' data: blob: 'unsafe-eval' 'unsafe-inline'; frame-src * 'self'; media-src 'self' blob: *; font-src * 'self' data: *.fontawesome.com * 'self' data:; upgrade-insecure-requests; form-action 'self'; frame-ancestors 'self';report-uri /contentsecuritypolicy/report 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://*.publitas.com *.fontawesome.com *.kohlerbycochez.com https://script.hotjar.com *.algolia.com *.googleapis.com *.bootstrapcdn.com https://*.bazaarvoice.com c42eu1doj8gpxa9sp-1.a1.typesense.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * c42eu1doj8gpxa9sp-1.a1.typesense.net 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com https://*.publitas.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * c42eu1doj8gpxa9sp-1.a1.typesense.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.kohlerbycochez.com network-a.bazaarvoice.com maps.gstatic.com *.algolia.com media.flixcar.com rt.flix360.com *.google.com *.google-analytics.com *.googleadservices.com https://www.google.com https://www.google.com.co maps.googleapis.com *.facebook.com *.reddit.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://*.bazaarvoice.com https://*.google.com.pa c42eu1doj8gpxa9sp-1.a1.typesense.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://*.publitas.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://apps.bazaarvoice.com *.kohlerbycochez.com apps.bazaarvoice.com static.hotjar.com script.hotjar.com h.online-metrix.net js-agent.newrelic.com www.google.com www.gstatic.com maps.googleapis.com *.algolia.com media.flixfacts.com media.flixcar.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://cdn.jsdelivr.net c42eu1doj8gpxa9sp-1.a1.typesense.net https://view.publitas.com https://scripts.publitas.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://*.publitas.com *.fontawesome.com *.kohlerbycochez.com *.algolia.com *.google.com *.googleapis.com *.gstatic.com *.bootstrapcdn.com tagmanager.google.com assets.braintreegateway.com c42eu1doj8gpxa9sp-1.a1.typesense.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com videos.pexels.com *.algolia.com c42eu1doj8gpxa9sp-1.a1.typesense.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.kohlerbycochez.com bam.nr-data.net maps.googleapis.com https://surveystats.hotjar.io media.flixcar.com *.google-analytics.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://*.bazaarvoice.com https://*.hotjar.io c42eu1doj8gpxa9sp-1.a1.typesense.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com c42eu1doj8gpxa9sp-1.a1.typesense.net http: https: blob: 'self' 'unsafe-inline'; default-src bam.nr-data.net *.kohlerbycochez.com ws.hotjar.com c42eu1doj8gpxa9sp-1.a1.typesense.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-TRlBSmI7BzJVC6edgFe91w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https://branchapp.in https://branch.co https://branch.co.ke https://branch.com.ng https://branch.co.tz https://d2c5ectx2y1vm9.cloudfront.net; script-src 'self' https://d2c5ectx2y1vm9.cloudfront.net https://code.jquery.com https://ga.jspm.io https://connect.facebook.net https://www.googletagmanager.com https://www.gstatic.com/ https://cdnjs.cloudflare.com 'unsafe-inline' blob: https://www.recaptcha.net https://sdk.cashfree.com https://public.releases.juspay.in https://*.google-analytics.com https://*.google.com; style-src 'self' https://d2c5ectx2y1vm9.cloudfront.net https://cdnjs.cloudflare.com 'unsafe-inline'; font-src 'self' https://d2c5ectx2y1vm9.cloudfront.net https://fonts.gstatic.com data:; img-src 'self' https://d2c5ectx2y1vm9.cloudfront.net https://www.facebook.com data: blob: https://branch-in-production.s3.ap-south-1.amazonaws.com https://fonts.gstatic.com https://graph.facebook.com https://branch-in-public.s3.amazonaws.com; object-src 'self' blob:; connect-src 'self' https://accounts.google.com https://browser-intake-datadoghq.com https://ga.jspm.io https://d2c5ectx2y1vm9.cloudfront.net https://branch-in-production-temp.s3.ap-south-1.amazonaws.com https://www.recaptcha.net https://*.google-analytics.com https://*.google.com; frame-src https://www.recaptcha.net https://sdk.cashfree.com https://www.googletagmanager.com https://branch-in-production.s3.ap-south-1.amazonaws.com; media-src https://d2c5ectx2y1vm9.cloudfront.net; report-uri /csp-violation-report-endpoint 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.feedbackcompany.com *.googleapis.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.feedbackcompany.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.newrelic.com www.xtento.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.sharethis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com *.feedbackcompany.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sharethis.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.feedbackcompany.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.sharethis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com *.feedbackcompany.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://d088f4f9-ddea-4faf-b7bc-b7ce45ac64e7.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://connect.facebook.net https://*.hotjar.com https://*.hotjar.io https://js.hsforms.net https://js.hs-scripts.com https://js.hs-banner.com https://js.hubspot.com https://maps.googleapis.com https://maps.gstatic.com https://cdn.siteground.com https://www.google.com https://www.gstatic.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://fonts.googleapis.com https://cdn.siteground.com 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://connect.facebook.net https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://api.hubapi.com https://forms.hsforms.com https://maps.googleapis.com https://maps.gstatic.com; frame-src 'self' https://forms.hsforms.com https://js.hsforms.net https://www.google.com https://www.google.com/recaptcha/ https://www.youtube.com https://www.youtube-nocookie.com; frame-ancestors 'self'; form-action 'self' https://forms.hsforms.com; object-src 'none'; base-uri 'self'; upgrade-insecure-requests; 1
font-src www.paypalobjects.com *.googleapis.com *.gstatic.com fonts.gstatic.com maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com sandbox.przelewy24.pl secure.przelewy24.pl https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ pay.google.com apm.przelewy24.pl *.przelewy24.pl *.espago.com https://www.google.com https://plumrocket.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.googleapis.com https://www.gstatic.com static.przelewy24.pl www.gstatic.com gstatic.com https://www.googletagmanager.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com https://www.gstatic.com sandbox.przelewy24.pl secure.przelewy24.pl pay.google.com apm.przelewy24.pl https://www.googletagmanager.com https://trafficscanner.pl https://www.google.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com sandbox.przelewy24.pl secure.przelewy24.pl wss://ws.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl google.com www.google.com pay.google.com https://www.googletagmanager.com https://region1.google-analytics.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://trafficscanner.pl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com https://www.shopperapproved.com *.bootstrapcdn.com https://v2.zopim.com data: *.emanualonline.com https://use.typekit.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.klevu.com *.ksearchnet.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self' *.stripe.com stripe.com *.link.com *.amazon.com *.meetanshi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.stripe.com https://www.googletagmanager.com/ www.google.com *.facebook.com https://bid.g.doubleclick.net/ *.force.com *.hotjar.com *.stripe.com *.criteo.com *.paypalobjects.com https://editor.varify.io 'self' klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://emanualonline.services.answerbase.com *.weltpixel.com *.meetanshi.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://v2.zopim.com https://storage.googleapis.com/ bat.bing.com *.facebook.com *.shopperapproved.com *.emanualonline.com https://googleads.g.doubleclick.net *.linksynergy.com *.kxcdn.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.nxtck.com *.mediaforge.com *.jrs5.com *.dc-storm.com *.stripe.com https://q.quora.com https://alb.reddit.com *.magentocommerce.com *.adroll.com *.yahoo.com https://x.bidswitch.net https://ib.adnxs.com https://idsync.rlcdn.com https://us-u.openx.net https://segments.company-target.com https://ds.reson8.com *.pippio.com https://rc.rlcdn.com https://subscription.omnithrottle.com https://c.bing.com https://tags.bluekai.com https://idsync.reson8.com https://dpm.demdex.net https://pixel.mathtag.com https://thrtle.com *.doubleclick.net *.trustguard.com https://evidenceapp.s3-us-west-2.amazonaws.com *.evidence.io https://tgscript.s3.amazonaws.com *.clarity.ms https://imgsct.cookiebot.com https://portal.brandlock.io maps.gstatic.com *.googleapis.com *.ggpht.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://emanualonline.services.answerbase.com https://data3.answerbase.com https://meetanshi.com/media/logo.png *.meetanshi.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.google.com.ua data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com js.stripe.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ www.google.com www.gstatic.com *.hotjar.com https://chimpstatic.com https://v2.zopim.com https://static.zdassets.com https://my.hellobar.com https://js.stripe.com *.shopperapproved.com *.googletagmanager.com *.upsellit.com *.facebook.net bat.bing.com https://googleads.g.doubleclick.net *.emanualonline.com *.force.com *.salesforceliveagent.com *.salesforce.com *.rakuten.com *.nxtck.com *.mediaforge.com *.jrs5.com *.dc-storm.com *.stripe.com https://connectio.s3.amazonaws.com *.redditstatic.com https://diffuser-cdn.app-us1.com https://prism.app-us1.com https://trackcmp.net https://app.viralsweep.com *.criteo.com *.criteo.net *.adobedtm.com *.adroll.com https://d.adroll.mgr.consensu.org *.evidence.io https://tgscript.s3.amazonaws.com *.clarity.ms https://consent.cookiebot.com https://a.omappapi.com *.cloudfront.net https://pagead2.googlesyndication.com https://cdn.amplitude.com https://polyfill.io https://app.varify.io https://editor.varify.io https://emanualonline.freshdesk.com *.openai.com https://a1.engage-x.io https://s1.engage-x.io https://s1.caraml.net maps.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.klevu.com *.ksearchnet.com https://emanualonline.services.answerbase.com https://ajax.googleapis.com *.meetanshi.com cdn.jsdelivr.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com *.bootstrapcdn.com *.emanualonline.com *.force.com https://tgscript.s3.amazonaws.com *.typekit.net https://a.omappapi.com https://www.shopperapproved.com https://emanualonline.freshdesk.com https://static.klaviyo.com *.stripe.network *.stripecdn.com *.amazon.com *.klevu.com *.ksearchnet.com https://emanualonline.services.answerbase.com *.answerbase.com *.fontawesome.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com assets.braintreegateway.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.kxcdn.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://ekr.zdassets.com wss://widget-mediator.zopim.com https://v2.zopim.com https://www.paypal.com https://fonts.googleapis.com https://stats.g.doubleclick.net *.emanualonline.com/ *.force.com *.hotjar.com *.hotjar.io *.stripe.com *.avada.io *.facebook.com https://bat.bing.com *.evidence.io wss://wss.evidence.io *.trustguard.com *.clarity.ms https://pagead2.googlesyndication.com/ https://portal.brandlock.io https://api.omappapi.com https://googleads.g.doubleclick.net https://api2.amplitude.com https://ip.varify.dev *.openai.com https://a1.engage-x.io https://s1.engage-x.io https://s1.caraml.net *.gstatic.com data: https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.klevu.com *.ksearchnet.com https://emanualonline.services.answerbase.com *.meetanshi.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-z3YnC_prnxfpGdkwB0w-jQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; media-src 'self' blob: https:; connect-src 'self' https: wss:; frame-src https:; worker-src 'self' blob: 1
frame-ancestors 'self'; object-src 'none'; upgrade-insecure-requests; 1
font-src https://fonts.gstatic.com https://www.google.com https://www.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.google.com https://cdn.cardknox.com/ checkout.sezzle.com sandbox.checkout.sezzle.com tracking.sezzle.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ media.sezzle.com *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://cdn.cardknox.com/ifields/2.15.2405.1601/ifields.min.js *.googleapis.com *.google.com *.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ checkout-sdk.sezzle.com sandbox.checkout-sdk.sezzle.com widget.sezzle.com https://www.googletagmanager.com tagmanager.google.com *.maxmind.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com *.googleapis.com *.google.com *.gstatic.com https://static.klaviyo.com *.fontawesome.com maxcdn.bootstrapcdn.com fonts.cdnfonts.com fonts.googleapis.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ gateway.sezzle.com sandbox.gateway.sezzle.com media.sezzle.com widget.sezzle.com https://www.google-analytics.com *.mmapiws.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-Yr-xzK6xuMzP68AryBazoQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' *.azure.com *.visualstudio.com *.fitch-hk.com *.isb.edu *.umbraco.io *.google-analytics.com *.google.com www.google.com www.gstatic.com *.googletagmanager.com *.sharethis.com *.accentapi.com *.youtube.com youtube.com *.vimeo.com player.vimeo.com google.com *.doubleclick.net *.linkedin.com *.clarity.ms *.hotjar.com *.hotjar.io wss://ws.hotjar.com *.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' https://www.googletagmanager.com *.google.com www.gstatic.com *.sharethis.com *.youtube.com youtube.com *.vimeo.com player.vimeo.com *.google-analytics.com static.ads-twitter.com a.quora.com unpkg.com snap.licdn.com bat.bing.com static.hotjar.com connect.facebook.net *.clarity.ms *.doubleclick.net *.hotjar.com *.consentmanager.net pagead2.googlesyndication.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src 'self' blob: data: https: *.fitch-hk.com *.umbraco.io placehold.co picsum.photos *.azurewebsites.net *.isb.edu *.sharethis.com px.ads.linkedin.com *.google.com *.quora.com *.twitter.com t.co *.facebook.com *.bing.com *.google-analytics.com *.googletagmanager.com *.clarity.ms www.clarity.ms; font-src 'self' data:; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com https://web.facebook.com; frame-ancestors 'none'; connect-src 'self' *.azure.com *.visualstudio.com *.fitch-hk.com *.isb.edu *.umbraco.io *.sharethis.com *.accentapi.com *.youtube.com youtube.com *.vimeo.com player.vimeo.com google.com *.google.com *.facebook.com *.clarity.ms *.google-analytics.com www.google.com www.gstatic.com *.googletagmanager.com stats.g.doubleclick.net *.ads.linkedin.com *.hotjar.com *.doubleclick.net pagead2.googlesyndication.com www.googleadservices.com *.linkedin.com *.hotjar.io wss://ws.hotjar.com *.easyinsights.in; 1
default-src 'self'; object-src 'none'; base-uri 'none'; script-src 'nonce-32f89c6f440d5cb539bed8b497983dd9' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://at.alicdn.com; img-src 'self' data: https: http: blob:; connect-src 'self' https: wss:; frame-src 'self' https: http:; media-src 'self' data: https: http: blob:; worker-src 'self' blob: 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.zoho.com *.zohocdn.com *.licdn.com *.maillist-manage.com *.google-analytics.com *.doubleclick.net *.cloudfront.net *.googletagmanager.com maillist-manage.com *.google.com *.gstatic.com; style-src 'self' 'unsafe-inline' data: *.zohocdn.com *.googleapis.com; img-src 'self' data: *.linkedin.com secure.gravatar.com www.gravatar.com; connect-src 'self' wss://vts.zohopublic.com salesiq.zohopublic.com; font-src 'self' data: *.zohocdn.com *.googleapis.com *.gstatic.com; frame-src 'self' *.google.com; report-uri https://set-works.com?gdsih-csp-report; 1
default-src 'self'; media-src 'self'; connect-src 'self' https://vpncdn.protonweb.com https://account.proton.me https://account.protonvpn.com https://telemetry.protonvpn.com *.metrics.convertexperiments.com logs.convertexperiments.com *.convertexperiments.com https://growth.proton.me ; script-src 'self' blob: 'unsafe-eval' 'unsafe-inline' https://vpncdn.protonweb.com; style-src 'self' 'unsafe-inline' https://vpncdn.protonweb.com; font-src 'self' https://vpncdn.protonweb.com; img-src 'self' data: blob: https:; frame-src 'self' data: blob: https://www.youtube-nocookie.com https://www.openstreetmap.org; object-src 'self' data: blob:; child-src 'self' data: blob:; report-uri https://reports.proton.me/reports/csp; frame-ancestors 'self'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com data: www.google.com www.google.by unpkg.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://www.merchante-solutions.com https://hostedpayments.merchante.com https://merchantacsstag.cardinalcommerce.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.ca-dev.co *.chargeafter.com www.google.com *.certcapture.com https://elements.sandbox.fortis.tech https://elements.fortis.tech https://merchantacsstag.cardinalcommerce.com *.livechatinc.com *.facebook.com *.kaptcha.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://cdn-sandbox.ca-dev.co https://cdn.chargeafter.com *.googleapis.com *.bing.com *.bing.net *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.files-text.com *.livechatinc.com *.livechat-files.com *.livechat-static.com cdn.files-text.com www.google.by www.facebook.com *.godaddy.com *.omappapi.com www.shopperapproved.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://cdn-sandbox.ca-dev.co https://cdn.chargeafter.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.bing.com *.certcapture.com https://developer.adobe.com https://magento.com https://js.sandbox.fortis.tech https://js.fortis.tech https://elements.sandbox.fortis.tech https://elements.fortis.tech https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.kaptcha.com *.livechatinc.com *.livechat-static.com https://api.merchante-solutions.com https://cert.merchante-solutions.com https://testapi.merchante-solutions.com *.omappapi.com a.opmnstr.com api.chargeafter.com seal.godaddy.com connect.facebook.net *.callrail.com wss://*.livechatinc.com client.prod.mplat-ppcprotect.com *.searchspring.net snapui.searchspring.io app.termly.io www.clarity.ms *.prod.equally.ai www.shopperapproved.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com https://static.klaviyo.com *.livechatinc.com *.typekit.net a.omappapi.com unpkg.com 'self' 'unsafe-inline'; object-src *.livechatinc.com 'self' 'unsafe-inline'; media-src *.adobe.com *.livechatinc.com *.livechat-static.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.ca-dev.co *.chargeafter.com *.googleapis.com *.bing.com *.bing.net *.certcapture.com https://developer.adobe.com https://elements.sandbox.fortis.tech https://elements.fortis.tech https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.kaptcha.com *.livechatinc.com *.text.com https://api.merchante-solutions.com https://cert.merchante-solutions.com https://testapi.merchante-solutions.com https://writer.cardinalcommerce.com logging-proxy-ca-production-170512-af60esna.uc.gateway.dev *.omappapi.com *.gateway.dev js.callrail.com click.prod.mplat-ppcprotect.com app.termly.io 9vbqsm.a.searchspring.io d.clarity.ms app.callrail.com wss://*.livechatinc.com *.doubleclick.net *.googlesyndication.com *.prod.equally.ai *.consent.api.termly.io xoksmy.a.searchspring.io 'self' 'unsafe-inline'; child-src *.certcapture.com *.livechatinc.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-ancestors 'self' uveg.edu.mx *.uveg.edu.mx; default-src 'self' uveg.edu.mx *.uveg.edu.mx; 1
default-src 'self' https://media.ffycdn.net;    script-src 'self' 'unsafe-inline' wss://*.rp.secure.iproov.me https://cdn.iproov.app https://*.iproov.me https://cdn.cookielaw.org https://sdk.optimove.net https://sb2wsdk-cdn-altenar2.biahosted.net https://sb2frontend-altenar2.biahosted.com https://sb2auth-altenar2.biahosted.com https://sb2integration-altenar2.biahosted.com https://sb2wsdk-altenar2.biahosted.com https://sb2bonus-altenar2.biahosted.com ;    style-src 'self' 'unsafe-inline';    style-src-elem 'self' 'unsafe-inline' https://cdn.iproov.app https://fonts.googleapis.com;    img-src 'self' data: https://media.ffycdn.net https://cdn-assets-eu.frontify.com https://cdn.iproov.app;    font-src 'self' https://cdn.iproov.app https://fonts.gstatic.com;    worker-src 'self' blob: data: https://cdn.iproov.app;    object-src 'none';    base-uri 'self';    form-action 'self';    frame-ancestors 'none';    frame-src 'self';    upgrade-insecure-requests;    connect-src 'self' https://*.jumio.ai wss://*.rp.secure.iproov.me https://cdn.iproov.app https://*.iproov.me https://*.optimove.net;    report-to csp-endpoint;    report-uri /api/errors/csp-report; 1
default-src 'none'; base-uri 'self'; block-all-mixed-content; connect-src 'self' support.webkeeper.ch wss://support.webkeeper.ch www.google-analytics.com my.webkeeper.ch stats.g.doubleclick.net; font-src * data:; form-action 'self' www.webkeeper.ch; frame-ancestors 'none'; frame-src support.webkeeper.ch; img-src * data:; manifest-src 'self'; media-src support.webkeeper.ch; script-src 'self' 'unsafe-inline' 'unsafe-eval' support.webkeeper.ch www.google-analytics.com maps.googleapis.com developers.google.com treellionaire.com data:; style-src 'self' 'unsafe-inline' support.webkeeper.ch fonts.googleapis.com data:; report-uri /csp-report.php 1
default-src 'self';         script-src 'self' 'unsafe-eval' 'unsafe-inline'         https://www.google.com/recaptcha/         https://www.gstatic.com/recaptcha/         https://*.googletagmanager.com         https://*.googleadservices.com         https://googleads.g.doubleclick.net         https://tagmanager.google.com         https://ajax.googleapis.com         https://*.scene7.com         https://*.hotjar.com         https://px.ads.linkedin.com         https://snap.licdn.com         https://*.demandbase.com         https://view.ceros.com         https://*.surveymonkey.com         https://cdnjs.cloudflare.com/ajax/libs/c3/         https://d3js.org         https://static.cloud.coveo.com;         style-src 'self' 'unsafe-inline'         https://*.typekit.net         https://fonts.googleapis.com         https://*.scene7.com         https://tagmanager.google.com         https://*.surveymonkey.com         https://cdnjs.cloudflare.com/ajax/libs/c3/         https://static.cloud.coveo.com;         img-src 'self' data: https:;         frame-src 'self' https:;         connect-src 'self'         https://static.cloud.coveo.com         https://platform.cloud.coveo.com         https://*.org.coveo.com         https://px.ads.linkedin.com         https://*.scene7.com         https://*.hotjar.io         https://*.company-target.com         https://*.demandbase.com         https://*.google-analytics.com         https://*.google.com         https://googleads.g.doubleclick.net         https://*.googleadservices.com         https://*.googletagmanager.com;         font-src 'self' data:         https://*.typekit.net         https://fonts.gstatic.com;         object-src 'none';         base-uri 'self';         frame-ancestors 'self';         media-src 'self' blob: https://*.scene7.com;         worker-src 'self' blob:; 1
img-src 'self' live.ternbicycles.com staging.ternbicycles.com dev.ternbicycles.com https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com https://www.google-analytics.com https://www.googletagmanager.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.cloudflare.com https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://unpkg.com s3.amazonaws.com; script-src-attr 'self'; script-src-elem 'self' https://www.clarity.ms/s/0.8.1/clarity.js https://www.googletagmanager.com https://cdn.fonts.net/ https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://unpkg.com s3.amazonaws.com; style-src 'self'; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://ajax.cloudflare.com; frame-ancestors 'self'; require-trusted-types-for 'script' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://*.publitas.com *.fontawesome.com *.kohlerbycochez.com https://script.hotjar.com *.algolia.com *.googleapis.com *.bootstrapcdn.com https://*.bazaarvoice.com c42eu1doj8gpxa9sp-1.a1.typesense.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * c42eu1doj8gpxa9sp-1.a1.typesense.net 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com https://*.publitas.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * c42eu1doj8gpxa9sp-1.a1.typesense.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.kohlerbycochez.com network-a.bazaarvoice.com maps.gstatic.com *.algolia.com media.flixcar.com rt.flix360.com *.google.com *.google-analytics.com *.googleadservices.com https://www.google.com https://www.google.com.co maps.googleapis.com *.facebook.com *.reddit.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://*.bazaarvoice.com https://*.google.com.pa c42eu1doj8gpxa9sp-1.a1.typesense.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://*.publitas.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://apps.bazaarvoice.com *.kohlerbycochez.com apps.bazaarvoice.com static.hotjar.com script.hotjar.com h.online-metrix.net js-agent.newrelic.com www.google.com www.gstatic.com maps.googleapis.com *.algolia.com media.flixfacts.com media.flixcar.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://cdn.jsdelivr.net c42eu1doj8gpxa9sp-1.a1.typesense.net https://scripts.publitas.com https://view.publitas.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://*.publitas.com *.fontawesome.com *.kohlerbycochez.com *.algolia.com *.google.com *.googleapis.com *.gstatic.com *.bootstrapcdn.com tagmanager.google.com assets.braintreegateway.com c42eu1doj8gpxa9sp-1.a1.typesense.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com videos.pexels.com *.algolia.com c42eu1doj8gpxa9sp-1.a1.typesense.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.kohlerbycochez.com bam.nr-data.net maps.googleapis.com https://surveystats.hotjar.io media.flixcar.com *.google-analytics.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://*.bazaarvoice.com https://*.hotjar.io c42eu1doj8gpxa9sp-1.a1.typesense.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com c42eu1doj8gpxa9sp-1.a1.typesense.net http: https: blob: 'self' 'unsafe-inline'; default-src bam.nr-data.net *.kohlerbycochez.com ws.hotjar.com c42eu1doj8gpxa9sp-1.a1.typesense.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com cash-f.squarecdn.com https://*.gstatic.com *.googleapis.com data: *.sodatech.com *.sodatech.net cdn.livechatinc.com mediacdn.espssl.com viewer.byondxr.com use.fontawesome.com 'self' data: https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.adyen.com api.bazaarvoice.com stg.api.bazaarvoice.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com pal-test.adyen.com www.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.adyen.com *.sharethis.com *.certcapture.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com *.ehappify.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.vimeo.com *.jsctool.com *.pinterest.com *.mmcagentur.at *.doubleclick.net *.facebook.com *.facebook.net *.demdex.net *.authorize.net *.googletagmanager.com *.xtento.com *.app-wallee.com *.waltpixel.com *.equitystory.com offer.slgnt.us vars.hotjar.com *.pepperjamnetwork.com services.listrak.com *.serverdata.net *.livechatinc.com *.lindtusa.com *.russellstover.com *.ghirardelli.com www.xtento.com https://app-wallee.com *.weltpixel.com https://*.ordergroove.com www.jsctool.com static.ogmystyle.com static2.ogmystyle.com www.mystyleplatform.com *.trustpilot.com geowidget.inpost.pl sandbox-easy-geowidget-sdk.easypack24.net widget.packeta.com https://www.paypalobjects.com https://lindtusa.rlvs.co.uk https://ghirardelli.slgnt.us https://byondxr-viewer.byondxr.com/launcher/1.0.58/package/index.js tinyurl.com/LINDT-LAUNCHER https://optmize.google.com nytrng.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https://*.gstatic.com *.adyen.com *.sharethis.com *.googleapis.com *.certcapture.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com *.cloudfront.net *.amazonaws.com *.regalify.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com blob: lindt.test *.lindt.test maps.googleapis.com *.pinterest.com *.postcodeanywhere.co.uk *.klarna.com *.invibes.com *.b26net.com https://www.google-analytics.com *.googletagmanager.com *.teads.tv *.videostep.com *.facebook.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.taboola.com *.doubleclick.net *.outbrain.com *.adobedtm.com *.omtrdc.net *.demdex.net *.everesttech.net *.magentocommerce.com *.sodatech.com *.sodatech.net api.official-deals.co.uk api.official-coupons.com *.adsymptotic.com cdn.livechat-files.com cp.official-coupons.com cookie-cdn.cookiepro.com cp.official-deals.co.uk site-azp.slgnt.us ct.pinterest.com *.ads.linkedin.com cdn.polyfill.io offer.slgnt.us *.blob.core.windows.net s.pinimg.com snap.licdn.com mediacdn.espssl.com *.clarity.ms *.bing.com *.serverdata.net lindtna.test *.lindtna.test *.livechatinc.com mageside.com www.xtento.com cdn.xtento.com *.hsforms.net *.hsforms.com https://app-wallee.com d.ratepay.com viewer.byondxr.com s3.us-west-2.amazonaws.com showroom-media.byondxr.com media-optimization-service.byondxr.com *.byondxr.com *.listrakbi.com www.mystyleplatform.com static.mystyleplatform.com static2.mystyleplatform.com static2.ogmystyle.com mystyleplatform.s3.us-west-2.amazonaws.com https://www.unifaunonline.se https://*.tile.openstreetmap.org/ https://redchamps.com 'self' data: geowidget.inpost.pl sandbox-easy-geowidget-sdk.easypack24.net widget.packeta.com https://mediacdn.espssl.com/2824/Shared/Modal/chocolate.png https://www.linkedin.com https://*.linkedin.com/ https://px.ads.linkedin.com https://mcstaging.russellstover.com https://mcstaging.lindtusa.com https://mcstaging.ghirardelli.com https://mcprod.lindtusa.com *.googleadservices.com *.yieldify.com https://www.google-anaytics.com https://www.googletagmanager.com https://optimize.google.com https://cdn.livechat-static.com *.bazaarvoice.com https://shopper.shop.pe i.liadm.com v2assets.zopim.io *.cloudfunctions.net partner.mediawallahscript.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page *.sharethis.com *.googleapis.com *.attn.tv events.attentivemobile.com *.certcapture.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.pcapredict.com lindt.slgnt.eu maps.googleapis.com *.pinterest.com *.postcodeanywhere.co.uk *.cloudflare.com *.teads.tv *.r66net.com *.facebook.net *.googleadservices.com *.doubleclick.net *.cookiepro.com *.cloudfront.net *.videostep.com *.mfgroup.ch *.taboola.com *.outbrain.com *.adobedtm.com *.authorize.net *.unpkg.com *.fontawesome.com *.sodatech.net *.sodatech.com www.clarity.ms bat.bing.com *.b2c.com bt.fraud0.com container.pepperjam.com www.googleoptimize.com *.hotjar.com *.pepperjamnetwork.com *.revlifter.io site-azp.slgnt.us ct.pinterest.com *.ads.linkedin.com cdn.polyfill.io offer.slgnt.us *.blob.core.windows.net s.pinimg.com snap.licdn.com acsbapp.com cdn.noibu.com www.youtube.com *.upsellit.com *.livechatinc.com *.serverdata.net *.tiktok.com www.xtento.com cdn.xtento.com *.hsforms.net *.hsforms.com https://app-wallee.com https://gmtech.mfgroup.ch https://assets.secure.checkout.visa.com *.ordergroove.com https://www.googletagmanager.com tagmanager.google.com d.ratepay.com www.jsctool.com byondxr-viewer.byondxr.com web-apps.byondxr.com *.listrakbi.com *.listrak.com mystyleplatform.com www.mystyleplatform.com static.ogmystyle.com static2.ogmystyle.com d203yb14zlmxwn.cloudfront.net cdnjs.cloudflare.com cdn.jsdelivr.net use.fontawesome.com *.mczbf.com https://api.unifaun.com *.gstatic.com *.trustpilot.com geowidget.inpost.pl sandbox-easy-geowidget-sdk.easypack24.net widget.packeta.com https://www.youtube.com https://acsbapp.com/apps/app/dist/js/app.js https://cdn.noibu.com/collect.js https://byondxr-viewer.byondxr.com/launcher/1.0.58/package/index.js tinyurl.com/LINDT-LAUNCHER *.yieldify.com *.fraud0.com https://www.googleanalytics.com https://www.google-analytics.com https://www.googleoptimize.com 'unsafe-inline' https://optimize.google.com 'unsafe-inline' https://cdn.attn.tv https://www.lindt-spruengli.com/* https://www.lindt-spruengli.com/media/target/VAPI.min.js https://www.lindt-spruengli.com/media/target/at.js shop.pe *.shop.pe d3rr3d0n31t48m.cloudfront.net addshoppers.s3.amazonaws.com .traversedlp.com .voltn.com *.addshoppers.com static.traversedlp.com static.zdassets.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.cash.app https://fonts.googleapis.com/ *.sharethis.com *.googleapis.com *.certcapture.com display.ugc.bazaarvoice.com *.amazonaws.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com assets.braintreegateway.com *.fonts.net *.postcodeanywhere.co.uk *.cloudfront.net *.cloudflare.com *.sodatech.com *.sodatech.net *.getfirebug.com cloud.typography.com *.serverdata.net *.myfonts.net *.russellstover.com https://app-wallee.com tagmanager.google.com d.ratepay.com *.listrakbi.com *.listrak.com use.fontawesome.com www.mystyleplatform.com static.ogmystyle.com static2.ogmystyle.com *.gstatic.com *.trustpilot.com geowidget.inpost.pl widget.packeta.com https://cloud.typography.com https://byondxr-viewer.byondxr.com/launcher/1.0.58/package/index.js 'unsafe-inline' https://optimize.google.com https://fonts.googleapis.com 'unsafe-inline' cookie-cdn.cookiepro.com https://cookie-cdn.cookiepro.com https://cdn.cookiepro.com/scripttemplates/*/assets 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cloudfront.net *.serverdata.net *.livechatinc.com *.listrakbi.com static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net vimeo.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net api.magento.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com * *.adyen.com *.sharethis.com *.googleapis.com *.attn.tv events.attentivemobile.com *.certcapture.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.postcodeanywhere.co.uk *.ratepay.com *.luckyorange.net *.cookiepro.com *.mfgroup.ch *.doubleclick.net *.visitors.live wss://in.visitors.live wss://visitors.live wss://in.visitors.live/ wss://visitors.live/ visitors.live *.taboola.com *.demdex.net *.omtrdc.net *.magento.com *.adobe.net *.adobedtm.com *.adobedc.net *.typekit.net *.magedevteam.com *.sodatech.com *.sodatech.net *.teads.tv www.sjwoe.com input.noibu.com wss://input.noibu.com/pv_part in.hotjar.com www.facebook.com *.b2c.com bt.fraud0.com *.revlifter.com *.pepperjamnetwork.com *.revlifter.io site-azp.slgnt.us ct.pinterest.com *.ads.linkedin.com cdn.polyfill.io offer.slgnt.us s.pinimg.com snap.licdn.com *.acsbapp.com cdn.noibu.com https://maps.googleapis.com *.clarity.ms *.facebook.com *.serverdata.net *.livechatinc.com api.addressy.com *.listrakbi.com *.mczbf.com *.tiktok.com t.elasticsuite.io *.hsforms.net *.hsforms.com https://app-wallee.com https://assets.secure.checkout.visa.com *.ordergroove.com https://www.google-analytics.com d.ratepay.com www.jsctool.com *.byondxr.com api.byondxr.com s3.us-west-2.amazonaws.com https://vc.hotjar.io https://cdn.linkedin.oribi.io https://byondxr-viewer.byondxr.com/launcher/1.0.58/package/index.js *.fraud0.com *.lindtusa.com *.yieldify.com https://content.hotjar.io wss://ws.hotjar.com https://metrics.hotjar.io https://lindt-us.attn.tv https://events.attentivemobile.com lindt.attn.tv cookie-cdn.cookiepro.com https://geolocation.onetrust.com https://bat.bing.com shop.pe *.shop.pe  ekr.zdassets.com lindtusa.zendesk.com wss://widget-mediator.zopim.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.byondxr.com *.googleapis.com https://viewer.byondxr.com https://web-apps.byondxr.com https://app.byondxr.com https://byondxr-viewer.byondxr.com https://app.byondvr.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'none'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://elegant-harmony-f8a4c00980.strapiapp.com https://elegant-harmony-f8a4c00980.media.strapiapp.com https://cms.sandbox-london-b.fetch-ai.com https://res.cloudinary.com; font-src 'self' https://fonts.gstatic.com; media-src 'self' https://www.dropbox.com https://*.dropboxusercontent.com; connect-src 'self' https://www.google-analytics.com; frame-ancestors 'none'; base-uri 'self'; object-src 'none'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com data: *.googleapis.com 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com https://fonts.bunny.net https://cdnjs.cloudflare.com https://applepay.cdn-apple.com *.survicate.com https://github.com https://use.typekit.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com *.monetico-services.com 'self' connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.doubleclick.net www.facebook.com *.monetico-services.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.payplug.com *.dalenys.com https://applepay.cdn-apple.com *.vimeo.com *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://px.ads.linkedin.com https://a.omappapi.com https://c.clarity.ms https://c.bing.com https://z.omappapi.com 'self' data: *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://secure-magenta.dalenys.com *.cdninstagram.com *.google.fr data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.gstatic.com https://static.splio.pro https://analytics.tiktok.com https://a.omappapi.com https://cdn.jsdelivr.net https://2a32d22daa154ee199982eae183342fa.js.ubembed.com https://assets.ubembed.com https://snap.licdn.com https://cdn.payplug.com *.google.bg *.googletagmanager.com www.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com connect.facebook.net graph.facebook.com business.facebook.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://secure-magenta.dalenys.com https://applepay.cdn-apple.com api.payplug.com cdn.payplug.com survey.survicate.com sdk.privacy-center.org cdn.mouseflow.com *.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.splio.pro https://analytics.tiktok.com https://a.omappapi.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net https://fonts.googleapis.com https://cdnjs.cloudflare.com assets.braintreegateway.com https://secure-magenta.dalenys.com *.survicate.com *.typekit.net *.klaviyo.com *.clarity.ms 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://sdk-sdk-backend.apigw.splio.pro https://analytics.tiktok.com https://px.ads.linkedin.com https://ad.doubleclick.net https://web-tracking.splio.com https://api.omappapi.com https://analytics-ipv6.tiktokw.us https://a.omappapi.com https://z.omappapi.com www.facebook.com *.facebook.net *.monetico-services.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://o2.mouseflow.com *.clarity.ms 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://analytics.ahrefs.com https://static.reo.dev https://static.hsappstatic.net https://snap.licdn.com https://vercel.live https://www.googletagmanager.com https://*.google.com https://*.doubleclick.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://last9.ghost.io https://last9.github.io https://prod-files-secure.s3.us-west-2.amazonaws.com https://cdn.simpleicons.org https://www.gravatar.com https://i.ytimg.com https://images.unsplash.com data: https://px.ads.linkedin.com https://www.google.es https://www.google.it https://www.google.ru https://www.google.fi https://www.google.de https://www.google.no https://www.google.fr https://www.google.pl https://www.google.lk https://www.google.dk https://www.google.ro https://*.google.com https://*.google.co.in https://*.doubleclick.net; connect-src 'self' https://analytics.ahrefs.com https://api.reo.dev https://px.ads.linkedin.com https://analytics.google.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://region1.google-analytics.com https://www.google.pl https://*.google.com https://*.google.co.in; frame-src 'self' https://meetings.hubspot.com https://www.youtube.com https://www.loom.com https://vercel.live https://www.googletagmanager.com https://td.doubleclick.net; font-src 'self' https://fonts.gstatic.com data:; report-to csp-endpoint; report-uri https://last9.io/api/csp-report/ 1
font-src *.sitejabber.com *.smartcustomer.com *.gstatic.com *.nexcesscdn.net https://fonts.gstatic.com *.klarnacdn.net *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.facebook.com https://plumrocket.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.googletagmanager.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.facebook.com td.doubleclick.net https://plumrocket.com *.weltpixel.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.amazonaws.com *.postcodeanywhere.co.uk *.cloudfront.net *.godaddy.com *.sitejabber.com *.smartcustomer.com *.edesk.com *.securitymetrics.com *.sixityauto.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.googlesyndication.com *.facebook.com *.bing.com *.bing.net *.analytics.yahoo.com *.wistia.com *.nexcesscdn.net google.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.trackedlink.net https://helloextend-static-assets.s3.amazonaws.com *.klarna.com *.klarnaevt.com *.klarnacdn.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googletagmanager.com *.google-analytics.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de data.stats.tools *.googleadservices.com *.googlesyndication.com *.g.doubleclick.net *.googleapis.com *.google.com *.sitejabber.com *.smartcustomer.com *.xsellco.com *.newrelic.com *.nr-data.net *.searchspring.net *.capredict.com *.pcapredict.com *.godaddy.com *.addressy.com *.bing.com *.bing.net *.facebook.net *.yimg.com *.pepperjam.com *.wistia.com *.sentry-cdn.com *.clarity.ms *.nexcesscdn.net *.gstatic.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com https://*.helloextend.com *.klarna.com *.klarnacdn.net *.klarnaservices.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.addressy.com *.sitejabber.com *.smartcustomer.com *.xsellco.com *.searchspring.net *.googleapis.com *.nexcesscdn.net webchat.dotdigital.com webchat.staging.dotdigital.com https://fonts.googleapis.com *.klarnacdn.net *.fontawesome.com unsafe-inline assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.wistia.com *.sixityauto.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.addressy.com *.searchspring.io *.sitejabber.com *.smartcustomer.com *.xsellco.com *.newrelic.com *.nr-data.net *.bing.net *.googletagmanager.com *.googleadservices.com *.googlesyndication.com *.g.doubleclick.net google.com *.google.com *.analytics.google.com *.yimg.com *.wistia.com *.litix.io *.amazonaws.com *.clarity.ms *.bing.com *.nexcesscdn.net *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com https://*.helloextend.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://*.app.cookieinformation.com https://*.bet25.dk; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.actito.com https://*.adform.net https://*.app.cookieinformation.com https://*.bet25.dk https://*.contentsquare.net https://*.g.doubleclick.net https://*.snapchat.com https://a.native.azerion.com https://app.playable.com https://bat.bing.com https://bat.bing.net https://cdn.accutics.net https://connect.facebook.net https://sc-static.net https://static.ads-twitter.com https://static.cloudflareinsights.com https://t.contentsquare.net https://tgtag.io https://www.googletagmanager.com; script-src-elem 'self' 'unsafe-inline' https://*.actito.com https://*.adform.net https://*.app.cookieinformation.com https://*.bet25.dk https://*.g.doubleclick.net https://*.snapchat.com https://a.native.azerion.com https://bat.bing.com https://bat.bing.net https://cdn.accutics.net https://connect.facebook.net https://sc-static.net https://static.ads-twitter.com https://static.cloudflareinsights.com https://t.contentsquare.net https://tgtag.io https://www.googletagmanager.com; script-src-attr 'self' 'unsafe-inline' https://*.bet25.dk; style-src 'self' 'unsafe-inline' https://*.bet25.dk; style-src-elem 'self' 'unsafe-inline' https://*.bet25.dk https://fonts.googleapis.com; style-src-attr 'self' 'unsafe-inline' https://*.bet25.dk; img-src 'self' blob: data: https://*.aa.contentsquare.net https://*.actito.com https://*.adform.net https://*.analytics.google.com https://*.az.contentsquare.net https://*.bet25.dk https://*.contentsquare.net https://*.g.doubleclick.net https://*.gstatic.com https://*.intercomcdn.com https://*.notifica.re https://*.snapchat.com https://a.native.azerion.com https://ad.doubleclick.net https://analytics.google.com https://analytics.twitter.com https://bat.bing.com https://bat.bing.net https://connect.facebook.net https://delivery.adnuntius.com https://i.imgur.com https://lh.trafficguard.ai https://netseidbroker.dk https://pagead2.googlesyndication.com https://static.intercomassets.com https://t.co https://www.facebook.com https://www.google.com https://www.google.de https://www.google.dk https://www.google.fi https://www.google.fo https://www.google.gl https://www.google.no https://www.google.se https://www.googleadservices.com https://www.googletagmanager.com; font-src 'self' data: https://*.bet25.dk https://*.intercomcdn.com https://applepay.cdn-apple.com https://cdnjs.cloudflare.com https://fonts.gstatic.com; connect-src 'self' data: https: wss:; object-src 'none'; frame-src 'self' blob: data: https: https://*.bet25.dk; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; report-to csp-endpoint; report-uri https://csp.bet25.dk/reports; 1
default-src 'self' blob:  https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; frame-src 'self' https://*.noxiaohao.com https://telegram.org https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://accounts.google.com https://oauth.telegram.org https://sgtm.btsgtm.com  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; script-src 'self' 'nonce-MpyXCdlOUKcG4wdVvPgfHA==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh/v3RIRuG3kMikr5iha+7P/0TN/GNA=' https://*.noxiaohao.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://accounts.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://play.google.com https://analytics.google.com https://fonts.gstatic.com https://telegram.org https://oauth.telegram.org https://*.geetest.com https://*.geevisit.com https://sgtm.btsgtm.com https://static.wangsustatic.xyz https://static.wangsustatic.vip ; connect-src 'self' https://stats.g.doubleclick.net https://analytics.google.com https://*.noxiaohao.com wss://*.noxiaohao.com wss: https://www.turingfraud.net https://play.google.com https://accounts.google.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://telegram.org https://oauth.telegram.org https://static.geetest.com https://static.geevisit.com wss://stream.bitget.cloud https://www.google.com https://sgtm.btsgtm.com  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; worker-src 'self' blob:; img-src 'self' data: blob: https://img.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://img.bitgetimg.com https://img.gurenla.com https://*.bgbstatic.com https://lh3.googleusercontent.com https://static.geetest.com https://static.geevisit.com https://static-web.jjdsn.vip https://cdn.bitkeep.vip https://www.google.co.jp https://bin.wangsustatic.com https://sgtm.btsgtm.com https://analytics.google.com https://stats.g.doubleclick.net  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; style-src 'self' 'unsafe-inline' https://static.geetest.com https://static.geevisit.com https://accounts.google.com https://fonts.googleapis.com https://static.bgbstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; font-src 'self' data: https://static.geetest.com https://static.geevisit.com https://fonts.gstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri /v1/buried/log/cspSecurity /v1/monitor/csp?appId=d4b6df7d; 1
default-src 'self' https://static.slo-tech.com https://zy.si https://push.slo-tech.com; script-src 'self' 'unsafe-inline' https://static.slo-tech.com https://oglasi.slo-tech.com https://zy.si; style-src 'self' data: 'unsafe-inline' static.slo-tech.com; img-src 'self' data: https://* http://* https://static.slo-tech.com https://oglasi.slo-tech.com https://zy.si; connect-src 'self' https://oglasi.slo-tech.com https://push.slo-tech.com wss://push.slo-tech.com ws://push.slo-tech.com https://zy.si; frame-src 'self' https://oglasi.slo-tech.com https://www.youtube-nocookie.com; worker-src 'none'; frame-ancestors 'none'; form-action 'self'; upgrade-insecure-requests; sandbox; report-uri https://sentry.ilol.si/api/2/security/?sentry_key=1caf1e883a1146c09085276ddd50841d 1
default-src 'self' https://france-cadastre.fr https://www.france-cadastre.fr; script-src 'self' https://france-cadastre.fr https://www.france-cadastre.fr 'unsafe-inline' 'unsafe-eval' blob: https://maps.googleapis.com https://maps.gstatic.com https://www.gstatic.com https://ajax.googleapis.com https://www.google.com https://cdn.ampproject.org https://api.mapbox.com https://unpkg.com https://cdnjs.cloudflare.com https://ajax.cloudflare.com https://cdn.jsdelivr.net https://cdn.datatables.net https://code.jquery.com https://stackpath.bootstrapcdn.com https://www.googletagmanager.com https://www.google-analytics.com https://fundingchoicesmessages.google.com https://*.adtrafficquality.google https://pagead2.googlesyndication.com https://*.googlesyndication.com https://adservice.google.com https://*.g.doubleclick.net https://partner.googleadservices.com; style-src 'self' https://france-cadastre.fr https://www.france-cadastre.fr 'unsafe-inline' https://unpkg.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.datatables.net https://fonts.googleapis.com https://api.mapbox.com https://www.gstatic.com https://stackpath.bootstrapcdn.com; worker-src 'self' https://france-cadastre.fr https://www.france-cadastre.fr blob:; img-src 'self' https://france-cadastre.fr https://www.france-cadastre.fr data: blob: https:; font-src 'self' https://france-cadastre.fr https://www.france-cadastre.fr data: https://fonts.gstatic.com https://cdnjs.cloudflare.com https://stackpath.bootstrapcdn.com; connect-src 'self' https://france-cadastre.fr https://www.france-cadastre.fr data: https:; frame-src 'self' https://france-cadastre.fr https://www.france-cadastre.fr data: blob: https:; object-src 'self' https://france-cadastre.fr https://www.france-cadastre.fr https://plu.france-cadastre.fr; manifest-src 'self' https://france-cadastre.fr https://www.france-cadastre.fr; base-uri 'self' https://france-cadastre.fr https://www.france-cadastre.fr; report-uri /csp-report.php 1
font-src fonts.gstatic.com use.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com https://*.gstatic.com https://*.typekit.net https://static.klaviyo.com *.klaviyo.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ https://*.google.com *.doubleclick.net *.facebook.com https://*.doubleclick.net *.hotjar.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * js.stripe.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com 'self' data: *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com https://*.doubleclick.net https://*.google.co.uk https://*.cloudfront.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com bat.bing.com *.google.co.uk *.googleadservices.com *.google-analytics.com *.magentocommerce.com *.widgets.magentocommerce.com *.paypalobjects.com *.postcodeanywhere.co.uk www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com https://rum.hlx.page https://www.google.com *.google.bg *.googletagmanager.com connect.facebook.net *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com https://*.pcapredict.com/js/sensor.js https://www.googletagmanager.com https://www.gstatic.com https://*.hotjar.com https://*.doubleclick.net https://secure.leadforensics.com https://*.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com js-agent.newrelic.com bam.nr-data.net *.pcapredict.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com https://*.googleapis.com *.typekit.net https://static.klaviyo.com unsafe-inline assets.braintreegateway.com services.postcodeanywhere.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.magento-datasolutions.com *.magento-ds.com *.google-analytics.com *.facebook.com *.facebook.net *.google.co.uk https://*.hotjar.com https://*.adobedc.net https://*.nr-data.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googlesyndication.com *.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-Cjj0IDG1ZTvD8RLujZpr7A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-mnFrC1n9CIamRwkaBO2cmw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src 'self' fonts.googleapis.com fonts.gstatic.com fonts.soundestlink.com data:;style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.gstatic.com fonts.soundestlink.com assets.mxapis.com *.cloudfront.net www.gstatic.com;style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com fonts.soundestlink.com www.gstatic.com assets.mxapis.com *.cloudfront.net;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.cookiebot.com *.google-analytics.com *.googleapis.com *.google.com *.google.lt *.google.lv *.googleadservices.com *.googlesyndication.com *.facebook.net *.bing.com *.cloudflare.com *.hotjar.com *.cloudflare.com *.doubleclick.net static.cloudflareinsights.com *.clarity.ms *.nosto.com omnisnippet1.com *.rackcdn.com *.equalweb.com *.mxapis.com *.ladesk.com cdn.dot.vu tags.creativecdn.com analytics.tiktok.com chimpstatic.com *.mailchimp.com *.list-manage.com *.cloudfront.net static.cloudflareinsights.com *.adform.net *.googleapis.com;script-src-elem 'self' 'unsafe-inline' cdn.datatables.net static.cloudflareinsights.com *.clarity.ms *.googletagmanager.com *.cookiebot.com *.google-analytics.com *.googleapis.com *.google.com *.google.lt *.google.lv *.googleadservices.com *.googlesyndication.com *.facebook.net *.bing.com *.cloudflare.com *.cloudflare.com *.doubleclick.net www.youtube.com pagead2.googlesyndication.com *.nosto.com omnisnippet1.com *.rackcdn.com *.equalweb.com *.mxapis.com *.ladesk.com cdn.dot.vu tags.creativecdn.com analytics.tiktok.com chimpstatic.com *.mailchimp.com *.list-manage.com *.cloudfront.net static.cloudflareinsights.com *.adform.net;connect-src 'self' https://api.e-menessaptieka.lv *.nordcode.io *.google-analytics.com *.doubleclick.net *.google.com *.cookiebot.com *.bing.com *.googlesyndication.com *.clarity.ms *.facebook.com adservice.google.com graph.facebook.com www.googleadservices.com www.google.com www.google.lt www.google.lv googleadservices.com google.com google.lt google.lv pagead2.googlesyndication.com *.nosto.com *.sentry.io *.googleapis.com *.equalweb.com *.soundestlink.com *.dot.vu ams.creativecdn.com analytics.tiktok.com *.e-menessaptieka.lv *.moonmart.lt *.mxapis.com *.tiktokw.us;frame-src 'self' *.cookiebot.com *.doubleclick.net *.youtube.com accounts.google.com *.ladesk.com live.dot.vu ams.creativecdn.com cdn.mxapis.com;img-src 'self' data: https://api.e-menessaptieka.lv https://images.e-menessaptieka.lv *.klix.app *.cookiebot.com *.google-analytics.com *.doubleclick.net *.googlesyndication.com *.googletagmanager.com *.google.com *.google.lt *.google.lv *.cloudflare.com *.tawk.to tawk.link *.hotjar.com *.soundestlink.com *.googleapis.com *.gstatic.com *.facebook.com *.youtube.com *.doubleclick.net *.dmxleo.com *.hotjar.com *.bing.com *.adform.net *.criteo.com *.clarity.ms *.demdex.net x.bidswitch.net ib.adnxs.com rtb-csync.smartadserver.com sync-t1.taboola.com visitor.omnitagjs.com r.casalemedia.com ad.360yield.com matching.ivitrack.com contextual.media.net exchange.mediavine.com jadserve.postrelease.com sync.outbrain.com simage2.pubmatic.com pixel.rubiconproject.com match.sharethrough.com criteo-sync.teads.tv criteo-partners.tremorhub.com eb2.3lift.com ad.yieldlab.net sync-criteo.ads.yieldmo.com e1.emxdgt.com googleads.g.doubleclick.net omnisnippet1.com csm.fr3.eu.criteo.net id5-sync.com ade.googlesyndication.com *.nosto.com *.appspot.com serve.mxapis.com *.e-menessaptieka.lv *.moonmart.lt www.googleadservices.com *.creativecdn.com static.salidzini.lv ema.ladesk.com;default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://api.e-menessaptieka.lv https://images.e-menessaptieka.lv;report-uri https://api.e-menessaptieka.lv/csp/report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com *.paypal.com *.paypalobjects.com https://fonts.gstatic.com https://fonts.bunny.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://seo.mageplaza.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.xtento.com *.sandbox.paypal.com https://app-wallee.com https://gateway.vr-payment.de 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.xtento.com cdn.xtento.com *.sandbox.paypal.com https://firebasestorage.googleapis.com https://api.mapbox.com https://redchamps.com *.hsforms.net *.hsforms.com 'self' data: https://app-wallee.com https://gateway.vr-payment.de data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com https://cdn.cookie-script.com http://cdn.cookie-script.com www.xtento.com cdn.xtento.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.avada.io *.shopify.com *.hsforms.net *.hsforms.com *.gstatic.com https://app-wallee.com https://gateway.vr-payment.de https://gmtech.mfgroup.ch https://assets.secure.checkout.visa.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.googleapis.com https://fonts.bunny.net *.googleapis.com *.gstatic.com https://app-wallee.com https://gateway.vr-payment.de 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://report.cookie-script.com https://api.cookie-script.com *.sandbox.paypal.com https://get.geojs.io *.avada.io t.elasticsuite.io *.hsforms.net *.hsforms.com https://app-wallee.com https://gateway.vr-payment.de https://assets.secure.checkout.visa.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://pagead2.googlesyndication.com https://*.googlesyndication.com https://www.googletagmanager.com https://www.google-analytics.com https://accounts.google.com https://apis.google.com https://*.posthog.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://*.posthog.com https://api.wikinerd.com.br https://accounts.google.com https://oauth2.googleapis.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://*.googlesyndication.com https://googleads.g.doubleclick.net; frame-src 'self' https://accounts.google.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://www.google.com https://www.youtube.com; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; form-action 'self' https://accounts.google.com 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; media-src 'self' https: 1
img-src https://placehold.co 'self' data: app.usercentrics.eu privacy-proxy-server.usercentrics.eu uct.service.usercentrics.eu https://lh3.ggpht.com https://*.google-analytics.com *.google.com https://www.google.com https://*.googleadservices.com https://*.googleapis.com *.googlesyndication.com https://pagead2.googlesyndication.com https://*.googletagmanager.com https://maps.gstatic.com https://*.hsforms.com *.hubspot.com https://*.lenze.com/ https://*.linkedin.com https://*.hana.ondemand.com/ https://via.placeholder.com https://*.twimg.com https://platform.twitter.com https://syndication.twitter.com https://*.vimeocdn.com *.youtube.com *.ytimg.com https://i.ytimg.com https://www.google.de https://eu6.heatmap.it *.doubleclick.net https://*.hubspotusercontent40.net https://*.google.nl https://cdn.cookielaw.org https://*.ads.linkedin.com https://px.ads.linkedin.com fonts.gstatic.com *.gstatic.com gstatic.com https://www.google.hu https://www.google.co https://www.google.ch https://www.google.pt https://www.google.com.mx https://www.google.ca https://www.google.es https://www.google.sm https://www.google.com.sa https://www.google.com.tw https://www.google.com.pk https://www.facebook.com  *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat https://googleads.g.doubleclick.net https://ad.doubleclick.net https://ade.googlesyndication.com blob: cdn2.hubspot.net forms.hsforms.com https://x4support.lenze.digital https://outlook.office365.com https://static.hsappstatic.net *.hubspotusercontent-na1.net https://cdn.ixon.cloud; script-src 'report-sample' 'self' 'nonce-6b45f05fc90cf0e8faedb70bfdfe56d9' blob: data: https://web.cmp.usercentrics.eu/ https://privacy-proxy.usercentrics.eu/latest/uc-block.bundle.js https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://kit.fontawesome.com https://*.google-analytics.com/ https://*.google.com https://www.google.com https://*.googleadservices.com https://maps.googleapis.com https://*.googlesyndication.com https://www.googletagmanager.com/ https://*.googletagservices.com https://js.hs-banner.com https://js.hs-scripts.com https://forms.hsforms.com https://*.hubspot.com https://code.jquery.com https://*.lenze.com https://snap.licdn.com/li.lms-analytics/ https://*.hana.ondemand.com/ https://geolocation.onetrust.com https://cdn.syndication.twimg.com https://platform.twitter.com https://unpkg.com https://js.usemessages.com https://m.youtube.com https://www.youtube.com https://players.yumpu.com https://polyfill.io https://u.heatmap.it https://u.heatmap.it/log.js https://*.doubleclick.net https://googleads.g.doubleclick.net https://connect.facebook.net https://js.hs-analytics.net https://js.hsadspixel.net https://js.hscta.net https://js.hsforms.net https://js.hsleadflows.net https://cdn.jsdelivr.net https://cdn.cookielaw.org https://google-analytics.com about: https://js.hsadspixel.net https://js.hubspotfeedback.com https://js.hscollectedforms.net https://js-na1.hs-scripts.com ajax.googleapis.com; style-src 'report-sample' 'self' 'nonce-6b45f05fc90cf0e8faedb70bfdfe56d9' 'strict-dynamic' 'unsafe-hashes' *.google.com fonts.googleapis.com https://*.lenze.com/ https://*.hana.ondemand.com/ https://ton.twimg.com https://platform.twitter.com https://www.googletagmanager.com translate.googleapis.com 'sha256-N6HduNaywXTc9TsAJfAPIddstNgqLVZjNhYByeI9B8g=' 'sha256-kFAIUwypIt04FgLyVU63Lcmp2AQimPh/TdYjy04Flxs=' 'sha256-vuylZAqj8xbIZieH0Mdx8nP+L3+qg8czsM8La7NZ3cw=' 'sha256-BZun+khwG2fSO7p/mr18d7W9Q3Th2SjNpYGYCPfiX38=' 'sha256-IrAm3nf7lrwi8JeUTq5X87foQzHdKlkPu14M36iGhcM=' 'sha256-9e7+vw3gfExD8UlOjcnBl044HG2UAr5vCYHxq0OyOr8=' 'sha256-GBZYAyS/Xk/Q5vM5oBcqhkK5E7uQb9XjPLm9APfWY1Q=' 'sha256-n3PICNRXPxCQtkC63gpriSKMUgP920Pe+2XzgMWdYYI=' 'sha256-Y3p8ZBYNOKyJ+oQnQ0QTFqwf1wz2S7tq/6yiNiNdFXE=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-REKDcBnwNN0DM5oaVP/QJ0XHxQPTvNGliT1Hcq+1Wdg=' 'sha256-e+Z0n8P0IwqIce2RMye3/p5TaNb2k/QdJT4urKCsrwk=' 'sha256-edW+KixhylnxLGOJoo3iC5UsjEj4HijvIQvP3cgo7ig=' 'sha256-0rhr2SSs9caOx9I4sAMu+RJi6pXlKeDNcZSStYLSLqg=' 'sha256-VgXfHGJN9u67JkhhEY53qSsi4C3YeVA7zXT0WTmb/7I=' 'sha256-K9flzbVzWnVGoln6FNPgUlW32/n8CUJbkheAQ60Mu9s=' 'sha256-Te/ldmUBtNOJo/wprIEf1hh/PIt5Nv+BZye1kjdPF00='; frame-src https://web.cmp.usercentrics.eu https://player.vimeo.com blob: forms.hsforms.com *.yumpu.com *.google.com *.googlesyndication.com https://*.lenze.com/ https://lenze-portal.rexx-recruitment.com www.youtube-nocookie.com youtu.be *.youtube.com *.doubleclick.net *.hana.ondemand.com https://www.googletagmanager.com https://www.linkedin.com https://platform.twitter.com https://www.facebook.com https://syndication.twitter.com https://onyx.www.linkedin.com https://www.linkedin.cn https://www.linkedin.com https://web.facebook.com https://bid.g.doubleclick.net js.hsadspixel.net *.hubspot.com js.hscollectedforms.net js.usemessages.com https://docfinderreloadedstg.blob.core.windows.net https://outlook.office365.com https://6269699.hs-sites.com https://www.lenze.cn; media-src dai.google.com https://*.lenze.com/ data: https://*.hana.ondemand.com *.lenze.cn; frame-ancestors 'self' https://js.hsforms.net; object-src 'self' *.googlesyndication.com https://*.lenze.com/ https://*.hana.ondemand.com; font-src 'self' data: https://website-widgets.pages.dev https://ka-f.fontawesome.com fonts.googleapis.com fonts.gstatic.com https://*.lenze.com/ https://*.hana.ondemand.com/ https://ui5.sap.com https://sdk.openui5.org/; form-action forms.hsforms.com forms.hubspot.com *.google.com https://*.lenze.com https://*.hana.ondemand.com https://syndication.twitter.com platform.twitter.com *.lenze.cn https://get.teamviewer.com; worker-src blob: www.google.com https://*.lenze.com/ https://*.hana.ondemand.com; connect-src 'self' https://api.ci9qprcp-bhndienst1-p1-public.model-t.cc.commerce.ondemand.com https://privacy-proxy.usercentrics.eu https://v1.api.service.cmp.usercentrics.eu https://consent-api.service.consent.usercentrics.eu/ about: https://geo.fcc.gov https://api.opencagedata.com https://forms.hscollectedforms.net https://region1.google-analytics.com https://hubspot-forms-static-embed.s3.amazonaws.com https://extreme-ip-lookup.com https://ka-f.fontawesome.com https://www.google-analytics.com *.google.com https://maps.googleapis.com *.googlesyndication.com https://pagead2.googlesyndication.com www.googletagservices.com forms.hsforms.com api.hubapi.com *.hubspot.com https://forms.hubspot.com https://*.lenze.com/ https://*.hana.ondemand.com/ https://privacyportal-de.onetrust.com https://scandk1.scandit.com https://*.lenze.eec.gec.io *.doubleclick.net https://cdn.jsdelivr.net https://cdn.cookielaw.org fonts.googleapis.com fonts.gstatic.com js.usemessages.com js.hsleadflows.net js.hs-banner.com js.hubspotfeedback.com js.hsadspixel.net js.hs-analytics.net js.hs-scripts.com https://geolocation.onetrust.com api.hsforms.com apps-digital-services.lenze.com https://cdn.linkedin.oribi.io https://px.ads.linkedin.com https://js.hscollectedforms.net https://www.google.hu https://www.google.co https://www.google.ch https://www.google.pt https://www.google.com.mx https://www.google.ca https://www.google.es https://www.google.sm https://www.google.com.sa https://www.google.com.tw https://www.google.com.pk https://www.facebook.com  *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.google.de; child-src blob: *.google.com *.googlesyndication.com https://*.lenze.com/ www.youtube.com *.doubleclick.net https://*.hana.ondemand.com app.hubspot.com forms.hsforms.com js.hsadspixel.net js.hscollectedforms.net js.usemessages.com; default-src 'self' blob: https://*.facebook.com https://www.google.com https://forms.hsforms.com https://forms.hubspot.com https://*.lenze.com/ https://www.linkedin.com https://*.hana.ondemand.com/ https://lenze-portal.rexx-recruitment.com https://platform.twitter.com https://syndication.twitter.com https://player.vimeo.com https://www.youtube-nocookie.com https://www.youtube.com https://www.yumpu.com https://*.doubleclick.net https://*.lenze.cn; report-uri https://csp-report.lenze.com/api/3/security/?sentry_key=38d57e3bed4640f198e8cb5a750ff134&sentry_environment=production 1
default-src 'self'; script-src 'self' 'nonce-x_htG683AuvSObnucH3Vndo7YIVzw2jX_ByIGt_k31SUiKnzqLoRsQ' 'strict-dynamic' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://analytics.tiktok.com https://connect.facebook.net https://www.redditstatic.com https://www.youtube.com https://player.vimeo.com data: https://*.openstreetmap.org 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://alb.reddit.com https://www.facebook.com https://www.googletagmanager.com https://www.google-analytics.com https://imgsrc.cookiebot.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://www.google.ch https://www.google.de https://www.google.at https://www.google.fr https://www.google.it https://www.google.nl https://www.google.be https://www.google.es https://www.google.co.uk https://www.google.pl https://www.google.se https://www.google.al https://i.ytimg.com https://img.youtube.com https://*.googleapis.com https://*.gstatic.com https://*.googleusercontent.com https://hscl.unilu.ch https://*.openstreetmap.org; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://tube.switch.ch https://www.googletagmanager.com https://consentcdn.cookiebot.com https://*.google.com https://www.facebook.com; connect-src 'self' https://*.aws.found.io:9243 https://alb.reddit.com https://pixel-config.reddit.com https://www.facebook.com https://analytics.tiktok.com https://*.tiktokw.us https://hscl.unilu.ch https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://region1.analytics.google.com https://consentcdn.cookiebot.com https://eu-api.friendlycaptcha.eu https://cdn.plyr.io https://vimeo.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://www.google.ch https://www.google.de https://www.google.at https://www.google.fr https://www.google.it https://www.google.nl https://www.google.be https://www.google.es https://www.google.co.uk https://www.google.pl https://www.google.se https://www.google.al https://*.googleapis.com https://*.gstatic.com blob: data: https://*.openstreetmap.org; font-src 'self' https://fonts.gstatic.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.gstatic.com 'report-sample'; media-src 'self' https://cdn.plyr.io; worker-src 'self' blob: 'report-sample'; report-uri https://sentry.visol.ch/api/66/security/?sentry_key=6b0ce31f3eda7eab335ea1bd579169dc&sentry_environment=unilu-production&sentry_release=aef38b27 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://www.googletagmanager.com *.googleapis.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.facebook.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com flagpedia.net static.secure-afterpay.com.au www.facebook.com stats.g.doubleclick.net www.google.com.au a.klaviyo.com *.google.com *.google.com.vn *.googleusercontent.com *.clarity.ms https://c.bing.com images.sleepsolutions.com.au sleepsolutions.com.au www.google.com.ua www.xtento.com cdn.xtento.com https://sleepsolutions.com.au/ioms data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com api.addressfinder.io https://maps.googleapis.com https://player.vimeo.com tagmanager.google.com https://www.googletagmanager.com www.google.com www.gstatic.com/recaptcha/ widget.freshworks.com m2epro.freshdesk.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.gstatic.com maps.googleapis.com connect.facebook.net www.facebook.com api.instagram.com www.gstatic.com bam.nr-data.net static.klaviyo.com fast.a.klaviyo.com *.sentry-cdn.com cdnjs.cloudflare.com uwnrkcru.sleepsolutions.com.au *.clarity.ms https://c.bing.com static.client.cardinaltrusted.com sleepsolutions.com.au cdn.instant.one www.xtento.com cdn.xtento.com https://sleepsolutions.com.au/ioms 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com api.addressfinder.io https://www.googletagmanager.com tagmanager.google.com *.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app https://static.klaviyo.com *.fontawesome.com assets.braintreegateway.com maxcdn.bootstrapcdn.com *.gstatic.com static.klaviyo.com use.typekit.net p.typekit.net cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.addressfinder.io https://maps.googleapis.com https://player.vimeo.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com widget.freshworks.com m2epro.freshdesk.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app cdn.jsdelivr.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.lab.amplitude.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com www.gstatic.com maps.googleapis.com payments.braintree-api.com/graphql fast.a.klaviyo.com stats.g.doubleclick.net www.facebook.com *.clarity.ms *.cardinaltrusted.com sleepsolutions.com.au ad.doubleclick.net api.instant.one *.api.instant.one https://sleepsolutions.com.au/ioms 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.clarity.ms https://c.bing.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self'; connect-src 'self'; frame-ancestors 'none' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://dev-sgwf-01.bepsa.com.py https://checkout.dinelco.com.py/ www.facebook.com platform.twitter.com td.doubleclick.net 13605183.fls.doubleclick.net www.google.com cdn.octadesk.com *.infonet.com.py *.infonet.com.py:8888/ https://vpos.infonet.com.py:8888/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com static.tacdn.com ad.doubleclick.net www.google.com.py adservice.google.com *.clarity.ms c.bing.com cellshop.com.py integration-5ojmyuq-qoiivjresdo6e.us-5.magentosite.cloud cdn.leadster.com.br *.googletagmanager.com ssl.gstatic.com www.gstatic.com *.google.co.in https://desa.infonet.com.py:8035/ https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page https://dev-sgwf-01.bepsa.com.py https://checkout.dinelco.com.py/ connect.facebook.net twitter.com platform.twitter.com static.addtoany.com static.cloudflareinsights.com js-agent.newrelic.com www.tripadvisor.com unpkg.com www.tripadvisor.es www.google.com static.tacdn.com www.gstatic.com *.clarity.ms www.jscache.com vpos.infonet.com.py www.tripadvisor.com.br cdn.octadesk.com *.cellshop.com.py *.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com tagmanager.google.com ssl.google-analytics.com *.infonet.com.py:8888/ *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com static.tacdn.com tagmanager.google.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://dev-sgwf-01.bepsa.com.py https://checkout.dinelco.com.py/ stats.addtoany.com *.infonet.com.py:8888 *.infonet.com.py bam.nr-data.net *.clarity.ms *.analytics.google.com *.google-analytics.com *.googletagmanager.com *.g.doubleclick.net https://viacep.com.br https://www.viacep.com.br https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com places.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com bam.nr-data.net *.clarity.ms commerce.adobedc.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.googleapis.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com https://tr.snapchat.com *.itxuc.com/ 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com www.google.com *.klarna.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com cdnapisec.kaltura.com https://js.klarna.com https://js.playground.klarna.com https://online2.superoffice.com *.fls.doubleclick.net  https://tr.snapchat.com https://vars.hotjar.com *.itxuc.com/ https://secure.livechatinc.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.klarna.com *.klarnaevt.com *.klarnacdn.net *.googleapis.com *.gstatic.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com https://eu.klarnaevt.com https://eu.playground.klarnaevt.com https://x.klarnacdn.net/ https://visitanalytics.userreport.com https://ad.doubleclick.net  https://ib.adnxs.com https://adservice.google.com https://www.google.com https://www.google.se https://www.google.no https://www.facebook.com *.itxuc.com/ flagpedia.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.klarna.com *.klarnacdn.net *.googleapis.com *.gstatic.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com https://js.klarna.com https://js.playground.klarna.com https://js-agent.newrelic.com/ https://bam.eu01.nr-data.net/ https://cdn-ukwest.onetrust.com/ https://www.tryggehandel.no/ https://online2.superoffice.com https://www.googleoptimize.com https://static.hotjar.com https://sc-static.net https://connect.facebook.net  *.adnxs.com https://track.adform.net https://script.hotjar.com *.itxuc.com/ maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.klarnaevt.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com https://*.54proxy.com https://eu.klarnaevt.com https://eu.playground.klarnaevt.com *.kustom.co https://bam.eu01.nr-data.net https://cdn-ukwest.onetrust.com https://www.google-analytics.com https://stats.g.doubleclick.net https://tr.snapchat.com https://maps.googleapis.com *.itxuc.com/ *.klarnacdn.net *.klarna.com www.gstatic.com maps.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
connect-src *.bundesregierung.de analytics.bundesregierung.de 'self' https://hls-hd.myrasec.de *.stage.bio ; style-src *.bundesregierung.de 'self' 'unsafe-inline' ; script-src *.bundesregierung.de 'self' ; script-src-elem 'self' *.bundesregierung.de 'nonce-sFy1DR4msv36gjbYnuGq5eskJ335w59v9+h9jqcQSHTZ7KDKkxAnEnQWJwyKmNxBvkewvy6DiIOI+hjlIotx4WVn39ccLvd8Bv2mgaVpm/Ja9o7BOYDseAkBIIZ63Q+gWhEgm0nU04nToWE5bx5rna5PDgi2YjGsbXX1gJzUdsY=' *.stage.bio ; frame-src *.bundesregierung.de 'self' streaming.sendewerk.berlin ; media-src *.bundesregierung.de 'self' http://video.bundesregierung.de https://zdf-hls-18.akamaized.net *.stage.bio ; frame-ancestors *.bundesregierung.de 'self' ; img-src 'self' *.bundesregierung.de https://*.tile.openstreetmap.de data: *.stage.bio ; default-src *.bundesregierung.de 'self' ; font-src *.bundesregierung.de 'self' ; report-uri https://www.bundeskanzler.de/service/csp-report ; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://tags.tiqcdn.com https://www.googletagmanager.com https://mwa.tui.com https://siteintercept.qualtrics.com https://js.monitor.azure.com https://payment.direct.worldline-solutions.com https://s.go-mpulse.net https://bat.bing.com https://analytics.skyscanner.net https://zn3p5vlerjtzcmegh-tuigroup.siteintercept.qualtrics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://payment.direct.worldline-solutions.com; img-src 'self' data: https://images.ctfassets.net https://www.google.co.uk https://dpm.demdex.net https://tuiuk.d1.sc.omtrdc.net https://www.googletagmanager.com https://payment.direct.worldline-solutions.com https://mwa.tui.com https://cm.everesttech.net https://siteintercept.qualtrics.com https://bat.bing.com https://cdn.content.tuigroup.com https://www.google.de; connect-src 'self' https://cdn.contentful.com https://collect.tealiumiq.com https://dc.services.visualstudio.com https://dpm.demdex.net https://js.monitor.azure.com https://mboxedge37.tt.omtrdc.net https://mwa.tui.com https://region1.analytics.google.com https://siteintercept.qualtrics.com https://tags.tiqcdn.com https://tuiuk.d1.sc.omtrdc.net https://www.google.co.uk https://www.googletagmanager.com https://zn3p5vlerjtzcmegh-tuigroup.siteintercept.qualtrics.com https://extensions.tuifly.com https://digitalapi-akm.tuifly.com https://c.go-mpulse.net https://bat.bing.com https://tuiinteractive.122.2o7.net https://trial-eum-clienttons-s.akamaihd.net https://trial-eum-clientnsv4-s.akamaihd.net https://tuiukltd.tt.omtrdc.net https://*.akstat.io https://stats.g.doubleclick.net https://mboxedge35.tt.omtrdc.net; font-src 'self' https://fonts.gstatic.com https://mwa.tui.com; frame-src 'self' https://secure.ogone.com https://payment.direct.worldline-solutions.com https://tuicom.demdex.net https://tuiukltd.demdex.net; report-uri https://extensions.tuifly.com/api/v1/csp/report?code=7ZAoNhIVRu6XEIdoyhBC6yD7hTbNJI9v8L2Ht85FgXAsAzFuuXcGBg==; report-to csp-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https:; worker-src 'self' blob:; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/  https://widget.trustpilot.com;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://appleid.cdn-apple.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com *.myheritage.no https://www.myheritage.no  'unsafe-eval' 'nonce-08038d85f2f568c35bd43aeee3fa7312' 'strict-dynamic' https://widget.trustpilot.com https://invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style  https://widget.trustpilot.com;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io https://www.google.com/recaptcha/enterprise/* https://www.google.com/recaptcha/enterprise/ https://www.google.com/recaptcha/enterprise/clr https://www.google.com/recaptcha/ https://maps.googleapis.com https://people.googleapis.com https://translate-pa.googleapis.com *.myheritage.no https://widget.trustpilot.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:  https://widget.trustpilot.com https://*.trustpilot.com;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=report&canonical_page_id=/company/home/ 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.acuityplatform.com challenges.cloudflare.com *.cloudfunctions.net *.configcat.com storage.googleapis.com cloudflare.hcaptcha.com cf-assets.hcaptcha.com *.kooth.com global.localizecdn.com *.segment.com *.segment.io *.sentry.io *.usefathom.com *.xenzonegroup.com wss://*.xenzonegroup.com wss://*.twilio.com *.snapchat.com media.twiliocdn.com flex-api.twilio.com; script-src-elem 'self' 'unsafe-inline' data: *.acuityplatform.com challenges.cloudflare.com storage.googleapis.com *.kooth.com global.localizecdn.com *.segment.com *.usefathom.com *.xenzonegroup.com www.googletagmanager.com *.doubleclick.net connect.facebook.net sc-static.net *.snapchat.com media.twiliocdn.com flex-api.twilio.com; connect-src 'self' *.cloudfunctions.net *.configcat.com *.kooth.com global.localizecdn.com *.localizejs.com *.segment.com *.segment.io *.segmentapis.com *.sentry.io *.usefathom.com *.xenzonegroup.com https://next-serenity.koothapi.com wss://*.xenzonegroup.com wss://*.twilio.com *.analytics.google.com *.google-analytics.com *.snapchat.com media.twiliocdn.com flex-api.twilio.com; img-src * data:; media-src * data:; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src * data: chrome-extension: moz-extension: safari-web-extension:; frame-src 'self' vimeo.com *.vimeo.com challenges.cloudflare.com www.googletagmanager.com *.doubleclick.net *.snapchat.com; object-src 'none'; report-uri https://o367623.ingest.sentry.io/api/5691169/security/?sentry_key=d228aa23f64c4234b0ed98ff46a429d3?sentry_environment=csp_header_in_test_environments_or_csp-report-only_header_in_live 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *.zma.gs *.devhec.com *.abtasty.com abtasty.com api-data-connector.abtasty.com ariane.abtasty.com assets-manager.abtasty.com common-fonts.abtasty.com dcinfos-cache.abtasty.com try.abtasty.com *.ipredictive.com ipredictive.com adlucent.com deepsearch.adlucent.com *.everesttech.net everesttech.net *.typekit.net typekit.net amazonaws.com execute-api.us-west-2.amazonaws.com us-east-2.amazonaws.com socialannex.com *.adnxs.com adnxs.com *.auryc.com auryc.com *.bidr.io prod.bidr.io *.bing.com *.bing.net bat.bing.net bing.com *.brxcdn.com brxcdn.com *.btttag.com btttag.com *.builder.io builder.io *.cloudflare.com *.cloudflareinsights.com cdnfonts.com cloudflare.com cloudflareinsights.com *.cloudfront.net cloudfront.net *.cloudinary.com cloudinary.com *.cnstrc.com cnstrc.com *.contentsquare.net bf.contentsquare.net contentsquare.net hj.contentsquare.net *.criteo.com criteo.com *.delighted.com delighted.com g.doubleclick.net *.doubleclick.net doubleclick.net fls.doubleclick.net *.dstillery.com dstillery.com media6degrees.com *.facebook.com *.facebook.net facebook.com facebook.net *.getfastr.com getfastr.com *.iesnare.com iesnare.com *.google.com *.googlesyndication.com *.gstatic.com analytics.google.com google.bg google.bs google.ca google.ch google.co.cr google.co.il google.co.in google.co.jp google.co.th google.co.uk google.co.vi google.co.za google.com google.com.ar google.com.au google.com.br google.com.bz google.com.co google.com.eg google.com.hk google.com.mx google.com.my google.com.ng google.com.pa google.com.pe google.com.ph google.com.pk google.com.pr google.com.sa google.com.sg google.com.sv google.com.tr google.com.tw google.de google.es google.fr google.hn google.hr google.ie google.it google.nl google.pt google.ro google.sc google.se google.sk google.tt googlesyndication.com gstatic.com *.googleadservices.com googleadservices.com *.googleapis.com googleapis.com *.googletagmanager.com googletagmanager.com *.google-analytics.com google-analytics.com *.fsastore.com *.hsastore.com *.welldeservedhealth.com fsastore.com hsastore.com welldeservedhealth.com *.heap-api.com *.heapanalytics.com heap-api.com heapanalytics.com us.heap-api.com ip-api.com *.izooto.com izooto.com jquery.com listrak.com listrakbi.com *.liadm.com liadm.com *.pcapredict.com *.postcodeanywhere.co.uk pcapredict.com bing.net *.clarity.ms mountain.com *.northbeam.io northbeam.io *.oursprivacy.com oursprivacy.com *.paypalobjects.com paypalobjects.com *.pepperjam.com *.pepperjamnetwork.com pepperjam.com pepperjamnetwork.com *.pinimg.com *.pinterest.com pinimg.com pinterest.com *.pdst.fm *.powerreviews.com powerreviews.com *.riskified.com riskified.com disstg.commercecloud.salesforce.com *.segment.com *.segment.io segment.com segment.io ingest.sentry.io *.spotify.com *.mobify-storefront.com mobify-storefront.com alocdn.com *.adsrvr.org adsrvr.org *.trustarc.com trustarc.com acsbapp.com postcodeanywhere.co.uk telemetry.vaultdcr.com zma.gs *.vaultdcr.com *.youtube.com *.ytimg.com youtube.com ytimg.com *.zdassets.com *.zendesk.com zdassets.com zendesk.com zopim.com *.zmags.com *.zmags.workers.dev creator-prod.zmags.com zmags.com zmags.workers.dev *.hsastore.com *.amazonaws.com *.google.nl *.google.ru *.ip-api.com *.ivaws.com *.legitscript.com *.usbrowserspeed.com clarity.ms google.ae google.co.ma google.com.bd google.com.qa google.lt google.no google.pl google.ru ivaws.com legitscript.com usbrowserspeed.com; frame-ancestors capacitor://localhost; 1
default-src 'self'; base-uri 'self'; connect-src 'self' https://widgets.sprinklecontent.com https://www.google-analytics.com https://stats.g.doubleclick.net https://*.hotjar.com:* wss://*.hotjar.com ; font-src 'self' data: https://fonts.gstatic.com https://*.hotjar.com; form-action 'self' https://secureshop-test.firstdata.lv; frame-ancestors 'self'; frame-src 'self' https://www.google.cz https://www.google.sk https://www.google.at https://www.google.pl https://www.google.de https://www.google.com/ https://www.youtube-nocookie.com/ https://proxy.strossle.it https://maps.google.com/ https://*.hotjar.com http://bbnaut.ibillboard.com http://bbnaut.bbelements.com http://ih.adscale.de/adscale-ih/dum http://bbnaut.m6r.eu; img-src 'self' data: https://www.ifauna.cz https://www.google.cz https://www.google.sk https://www.google.at https://www.google.pl https://www.google.de https://www.google.com https://maps.googleapis.com https://maps.gstatic.com https://www.google-analytics.com https://stats.g.doubleclick.net https://*.hotjar.com https://via.placeholder.com http://go.eu.bbelements.com https://i.ctnsnet.com; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com https://www.google.cz https://www.google.sk https://www.google.at https://www.google.pl https://www.google.de https://www.google.com https://www.gstatic.com https://browser-update.org https://widgets.sprinklecontent.com https://www.google-analytics.com https://www.googletagmanager.com https://tagmanager.google.com https://*.hotjar.com https://go.eu.bbelements.com http://go.eu.bbelements.com http://bbcdn-bbnaut.ibillboard.com http://bbnaut.ibillboard.com http://static.hotjar.com/c/hotjar-370109.js; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://tagmanager.google.com https://www.gstatic.com; worker-src 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https:; frame-ancestors 'self'; base-uri 'self' 1
frame-ancestors 'self' https://tanga.zendesk.com https://app.optimizely.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.adobe.com *.google.com *.googletagmanager.com *.facebook.com *.tealium.com *.qualtrics.com *.quantcast.com *.bing.com *.braze.com *.impact.com *.skyscanner.com *.sizmek.com *.travelsupermarket.com *.tripadvisor.com *.snapchat.com *.amazon-adsystem.com *.raptor.com *.missionlabs.com *.ceros.com *.yahoo.com *.amobee.com *.trustpilot.com *.appsflyer.com *.pageworkers.com *.sky.com *.pinterest.com *.adform.net *.datadoghq.com *.tiktok.com *.rtbhouse.com *.coframe.io *.quantummetric.com *.ozone.com *.bils.com *.icelolly.com *.tui.com *.tui.co.uk; connect-src 'self' *.adobe.com *.google.com *.google-analytics.com *.facebook.com *.tealium.com *.qualtrics.com *.quantcast.com *.bing.com *.braze.com *.datadoghq.com *.amazon-adsystem.com *.snapchat.com *.tripadvisor.com *.pinterest.com *.tiktok.com *.coframe.io *.quantummetric.com *.tui.com *.tui.co.uk; img-src 'self' data: *.adobe.com *.google.com *.googletagmanager.com *.doubleclick.net *.facebook.com *.fbcdn.net *.tealium.com *.qualtrics.com *.quantcast.com *.bing.com *.braze.com *.impact.com *.skyscanner.com *.sizmek.com *.travelsupermarket.com *.tripadvisor.com *.snapchat.com *.amazon-adsystem.com *.yahoo.com *.amobee.com *.trustpilot.com *.appsflyer.com *.sky.com *.pinterest.com *.adform.net *.tiktok.com *.rtbhouse.com *.ozone.com *.bils.com *.icelolly.com *.tui.com *.tui.co.uk; frame-src 'self' *.qualtrics.com *.missionlabs.com *.ceros.com *.trustpilot.com *.coframe.io *.tui.com *.tui.co.uk; font-src 'self' data: *.adobe.com *.google.com *.gstatic.com *.tui.com *.tui.co.uk; report-uri https://csp-reports.securitypractice.network/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://pi.pardot.com https://*.pardotusercontent.com https://*.salesforce.com https://*.force.com https://www.youtube.com https://s.ytimg.com https://static.elfsight.com https://apps.elfsight.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://maps.googleapis.com https://*.g.doubleclick.net https://snap.licdn.com https://*.cookiebot.com https://*.sitesearch360.com https://cdnjs.cloudflare.com https://*.piwik.pro https://johnsmanville.kbmax.com https://*.salesforceliveagent.com; style-src 'self' 'unsafe-inline' https://*.force.com https://*.pardotusercontent.com https://static.elfsight.com https://fonts.googleapis.com https://use.fontawesome.com https://cdnjs.cloudflare.com; img-src 'self' data: https: https://*.pardotusercontent.com https://*.salesforce.com https://i.ytimg.com https://img.youtube.com https://static.elfsight.com https://www.googletagmanager.com https://maps.gstatic.com https://*.piwik.pro; connect-src 'self' https://pi.pardot.com https://*.pardot.com https://*.salesforce.com https://www.youtube.com https://apps.elfsight.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://maps.googleapis.com https://*.g.doubleclick.net https://px.ads.linkedin.com https://*.cookiebot.com https://*.sitesearch360.com https://www.google.com https://ad.doubleclick.net https://*.piwik.pro https://*.elfsight.com https://*.salesforceliveagent.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://*.pardot.com https://*.salesforce.com https://*.force.com https://apps.elfsight.com https://www.googletagmanager.com https://*.g.doubleclick.net https://*.cookiebot.com https://*.sitesearch360.com https://johnsmanville.kbmax.com https://html5-player.libsyn.com https://www2.jm.com; font-src 'self' data: https: https://static.elfsight.com https://fonts.gstatic.com https://maps.gstatic.com; media-src 'self' https://www.youtube.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://*.pardot.com https://*.salesforce.com 1
default-src 'self' https://www.sescpr.com.br https://vlibras.gov.br https://www.google.com/ https://selos-site-defender.s3.amazonaws.com/ https://cdn.jsdelivr.net/ https://www.googletagmanager.com/ https://www.gstatic.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://vlibras.gov.br https://www.googletagmanager.com/ https://www.google.com/ https://cdn.jsdelivr.net/ https://www.gstatic.com/ https://www.google-analytics.com/ https://connect.facebook.net https://challenges.cloudflare.com https://viacep.com.br; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; img-src 'self' data: https: https://www.sescpr.com.br; font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' https://www.google.com https://vlibras.gov.br https://challenges.cloudflare.com; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://vlibras.gov.br;frame-ancestors 'self' https://googleads.g.doubleclick.net https://static.doubleclick.net https://ff.kes.v2.scr.kaspersky-labs.com  1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; media-src 'self' blob: https://cdn.paddleworldwide.com https://*.b-cdn.net; font-src 'self' data:; connect-src 'self' https://monitoring.paddleworldwide.com https://cdn.paddleworldwide.com https://*.b-cdn.net; frame-src https: https://player.mediadelivery.net; worker-src 'self' blob:; frame-ancestors 'self' https://pww.paddleworldwide.com https://www.pww.paddleworldwide.com https://paddleworldwide.com https://www.paddleworldwide.com; object-src 'none'; base-uri 'self'; form-action 'self'; report-to csp-endpoint; report-uri /api/csp-report 1
font-src *.fontawesome.com maxcdn.bootstrapcdn.com 'unsafe-inline' data: *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com *.authorize.net *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com *.authorize.net https://app.webeyez.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com *.certcapture.com https://www.googletagmanager.com/ *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://www.youtube.com https://c.paypal.com/ *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com *.certcapture.com store.paradoxlabs.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://b.stats.paypal.com/ https://slc.stats.paypal.com/ https://c.paypal.com/ 'self' data: blog.designsbyjuju.com www.designsbyjuju.com *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com s.pinimg.com *.attn.tv events.attentivemobile.com *.certcapture.com player.vimeo.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.fontawesome.com *.google-analytics.com https://bam.nr-data.net https://bam-cell.nr-data.net https://c.paypal.com *.google.com *.gstatic.com embedsocial.com sec.webeyez.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.certcapture.com *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com *.googleapis.com *.gstatic.com embedsocial.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com *.attn.tv events.attentivemobile.com *.certcapture.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.google-analytics.com https://bam.nr-data.net https://bam-cell.nr-data.net https://payments.sandbox.braintree-api.com/ https://origin-analytics-sand.sandbox.braintree-api.com/ send.webeyez.com sec.webeyez.com cognito-identity.eu-west-1.amazonaws.com firehose.eu-west-1.amazonaws.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://smartsolutions.report-uri.com/r/d/csp/reportOnly; report-to report-endpoint; 1
script-src 'self' https://*.obvsg.at 'unsafe-inline' 1
default-src 'self'; script-src 'self' 'nonce-ZyV5G5knIJ4KBomEf3Zwmg==' 'strict-dynamic' 'unsafe-inline' https://www.googletagmanager.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.instagram.com https://platform.twitter.com https://www.tiktok.com; style-src 'self' 'unsafe-inline'; img-src 'self' https://cms.sat1regional.de data: blob: https:; font-src 'self' data:; media-src 'self' https:; connect-src 'self' https://cms.sat1regional.de https://*.google-analytics.com https://www.googletagmanager.com https://consentcdn.cookiebot.com; frame-src 'self' https://player.mediadelivery.net https://iframe.mediadelivery.net https://www.youtube.com https://www.youtube-nocookie.com https://open.spotify.com https://www.facebook.com https://www.linkedin.com https://www.instagram.com https://platform.twitter.com https://www.tiktok.com https://consentcdn.cookiebot.com https://playout.3qsdn.com; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /api/csp-report 1
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/  https://widget.trustpilot.com;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://appleid.cdn-apple.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com *.myheritage.com.br https://www.myheritage.com.br  'unsafe-eval' 'nonce-723c0d4096309f96cbc5d3827f17f0bf' 'strict-dynamic' https://widget.trustpilot.com https://invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style  https://widget.trustpilot.com;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io https://www.google.com/recaptcha/enterprise/* https://www.google.com/recaptcha/enterprise/ https://www.google.com/recaptcha/enterprise/clr https://www.google.com/recaptcha/ https://maps.googleapis.com https://people.googleapis.com https://translate-pa.googleapis.com *.myheritage.com.br https://widget.trustpilot.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:  https://widget.trustpilot.com https://*.trustpilot.com;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=report&canonical_page_id=/company/home/ 1
report-uri /csp_reports; report-to csp-endpoint; script-src 'self' 'unsafe-inline' http://js-eu1.hsforms.net http://js-eu1.hs-scripts.com https://www.googletagmanager.com https://dev.visualwebsiteoptimizer.com https://js.chargebee.com https://js-eu1.hs-scripts.com https://assets.slater.app https://hubspotonwebflow.com https://js-eu1.hscollectedforms.net https://js-eu1.hubspotfeedback.com https://d3e54v103j8qbb.cloudfront.net https://cdn.prod.website-files.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://snap.licdn.com https://slater-app.s3.amazonaws.com js-eu1.hs-banner.com js-eu1.usemessages.com js-eu1.hubspot.com js-eu1.hs-analytics.net js-eu1.hsadspixel.net www.google.com https://static.hotjar.com https://script.hotjar.com https://cdn.segment.com https://cdn.pendo.io https://data.pendo.io https://app.pendo.io https://www.gstatic.com https://global-uploads.webflow.com https://assets.provenance.org ; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://stats.wp.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://*.wp.com; frame-src https://www.youtube.com https://www.youtube-nocookie.com; media-src 'self' https:; form-action 'self'; upgrade-insecure-requests; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://js.hs-scripts.com https://js.hs-banner.com https://js.hsforms.net https://js.usemessages.com https://*.hubspot.com https://*.hubspotfeedback.com https://xebiainnovationproject.kinsta.cloud; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https: https://xebiainnovationproject.kinsta.cloud; font-src 'self' data:; connect-src 'self' https://www.googletagmanager.com https://*.hubspot.com https://*.hsforms.com https://*.algolia.net https://*.algolianet.com https://xebiacareers.recruitee.com https://xebiainnovationproject.kinsta.cloud; frame-src 'self' https://*.hubspot.com https://www.googletagmanager.com; form-action 'self' https://*.hubspot.com https://xebiacareers.recruitee.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' signal.helcim.com *.googletagmanager.com *.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.doubleclick.net *.googleadservices.com *.googlesyndication.com static.hsappstatic.net *.hubspot.com *.hubapi.com *.hsforms.com *.hs-scripts.com *.hs-analytics.net *.hsadspixel.net *.hscollectedforms.net *.hs-banner.com *.usemessages.com connect.facebook.net *.bing.com *.clarity.ms *.tiktok.com *.redditstatic.com *.ahrefs.com *.g2.com *.mountain.com *.s10h.io cdn.jsdelivr.net *.amazonaws.com widget.trustpilot.com unpkg.com cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.vimeocdn.com widget.trustpilot.com; img-src 'self' data: www.helcim.com *.googletagmanager.com *.google-analytics.com *.google.com *.google.ca *.google.co.uk *.googleapis.com *.gstatic.com *.doubleclick.net *.googleadservices.com *.googlesyndication.com *.hubspot.com *.hsforms.com track.hubspot.com *.facebook.com *.bing.com *.reddit.com widget.trustpilot.com *.trustpilot.com i.ytimg.com *.vumbnail.com vumbnail.com lottie.host; font-src 'self' data: fonts.gstatic.com; connect-src 'self' signal.helcim.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.google.com *.doubleclick.net *.hubspot.com *.hubapi.com *.hsforms.com *.hs-analytics.net *.hscollectedforms.net *.amazonaws.com *.on.aws *.bing.com *.clarity.ms *.tiktok.com *.tiktokw.us *.reddit.com *.ahrefs.com *.s10h.io *.mountain.com *.g2.com lottie.host widget.trustpilot.com; frame-src 'self' player.vimeo.com www.youtube.com demo.helcim.com pricing.helcim.com *.hubspot.com *.hsforms.com *.googletagmanager.com *.doubleclick.net *.google.com *.facebook.com *.bing.com widget.trustpilot.com; media-src 'self' www.helcim.com lottie.host; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none' 1
default-src 'self';    script-src 'self' 'unsafe-inline'  https://cdn.jsdelivr.net/npm/@gumlet/ webapp.gumlet.com snap.licdn.com googleads.g.doubleclick.net js-na2.hs-scripts.com challenges.cloudflare.com script.hotjar.com embed.savvycal.com tracking.g2crowd.com analytics.ahrefs.com cdn.firstpromoter.com www.googletagmanager.com js-na2.hsadspixel.net js-na2.hs-banner.com js-na2.hs-analytics.net static.hotjar.com browser-update.org www.redditstatic.com static.cloudflareinsights.com static.ads-twitter.com widget.intercom.io js.intercomcdn.com app.factors.ai;    style-src 'self' 'unsafe-inline';    img-src * blob: data:;    font-src *;    media-src video.gumlet.io;    object-src 'none';    base-uri 'self';    form-action 'self' *.gumlet.com webapp.gumlet.com;    connect-src *;    frame-ancestors 'none';    frame-src play.gumlet.io www.googletagmanager.com savvycal.com challenges.cloudflare.com;    upgrade-insecure-requests;    report-to gumlet-nel; 1
frame-ancestors 'self' nearpod.com *.nearpod.com *.nearpod.us; report-uri https://nearpod.report-uri.com/r/t/csp/reportOnly 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com llmo.now *.googleapis.com data: *.fontawesome.com *.bootstrapcdn.com *.hotjar.com fonts.googleapis.com cdn.cookiehub.eu https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com https://www.youtube.com https://www.google.com/maps https://www.google.com/ https://insight.adsrvr.org/ https://analytics.google.com https://vimeo.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com llmo.now *.networkmerchants.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com googleads.g.doubleclick.net secure.livechatinc.com https://songbird.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://*.cardinalcommerce.com https://*.centinelapi.cardinalcommerce.com https://insight.adsrvr.org/ https://analytics.google.com https://vimeo.com *.weltpixel.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googletagmanager.com *.doubleclick.net www.xtento.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com llmo.now cc-api-behance.adobe.io validator.swagger.io *.ftcdn.net *.behance.net data: *.networkmerchants.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com magefan.com cm.magefan.com *.disqus.com *.amazonaws.com bat.bing.com cdn.ywxi.net blob *.instantsearchplus.com *.bbb.org cdn.livechat-files.com *.facebook.com *.hotjar.com *.clarity.ms *.bing.com *.google.com.ar www.doubleclick.net cdn.cookiehub.eu p.brsrvr.com bat.bing.net *.adobedtm.com *.trackedlink.net *.ddlnk.net https://img.youtube.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com www.xtento.com cdn.xtento.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https://vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com llmo.now *.magento-datasolutions.com https://rum.hlx.page *.networkmerchants.com *.googleapis.com *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com acp-magento.appspot.com *.akamaized.net *.instantsearchplus.com *.fastsimon.com fastsimon-grid.akamaized.net *.certcapture.com *.disqus.com *.fontawesome.com *.livechatinc.com bat.bing.com *.clarity.ms 199001.tctm.co *.facebook.net *.facebook.com *.cokertirecompany.com *.hotjar.com e.zip-corvette.com www.googletagservices.com www.doubleclick.net cdn.cookiehub.eu cdn.brcdn.com *.adobedtm.com https://cdn1.ebizcharge.net https://songbird.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://cdnjs.cloudflare.com https://insight.adsrvr.org/ https://dpm.demdex.net https://amcglobal.sc.omtrdc.net https://geostag.cardinalcommerce.com https://geo.cardinalcommerce.com https://centinelapistag.cardinalcommerce.com https://analytics.google.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net www.xtento.com cdn.xtento.com https://cdn-scripts.signifyd.com https://imgs.signifyd.com https://h64.online-metrix.net https://cokertire.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com llmo.now *.magento-datasolutions.com *.magento-ds.com *.networkmerchants.com *.certcapture.com *.bootstrapcdn.com static-autocomplete.fastsimon.com ping.fastsimon.com settings.fastsimon.com static-grid.fastsimon.com *.typekit.net cdn.cookiehub.eu webchat.dotdigital.com webchat.staging.dotdigital.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net https://vimeo.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.experiencecloud.live ims-na1.adobelogin.com adobeid-na1.services.adobe.com adobeid-na1-stg1.services.adobe.com *.commerce-core-saas.com api.magento.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.networkmerchants.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com *.clarity.ms api.livechatinc.com bat.bing.com api.fastsimon.com suggest.instantsearchplus.com suggest.fastsimon.com static-autocomplete.fastsimon.com static-grid.fastsimon.com ping.fastsimon.com settings.fastsimon.com stats.g.doubleclick.net bam.nr-data.net 199001.tctm.co *.facebook.com *.hotjar.com *.hotjar.io wss://ws.hotjar.com googleads.g.doubleclick.net cdn.cookiehub.eu c.ba.contentsquare.net region-eu.cookiehub.net bat.bing.net pagead2.googlesyndication.com *.cookiehub.net *.signifyd.com 3dsapi.ebizcharge.net kg668dbov0.execute-api.us-east-1.amazonaws.com ebizcharge3ds-staging1.azurewebsites.net *.ebizcharge.net https://songbird.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://cdnjs.cloudflare.com https://insight.adsrvr.org/ https://dpm.demdex.net https://amcglobal.sc.omtrdc.net https://geostag.cardinalcommerce.com https://geo.cardinalcommerce.com https://centinelapistag.cardinalcommerce.com https://analytics.google.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src llmo.now *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' https://cdn-cookieyes.com https://js.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; connect-src 'self' https://api.hubapi.com https://forms.hsforms.com https://www.google-analytics.com https://analytics.google.com; frame-src https://js.hsforms.net; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://forms.hsforms.com; 1
default-src 'self'; base-uri 'none'; connect-src https: wss:; font-src https: data:; form-action 'self' *.bauhaus.cz *.facebook.com *.mail-komplet.cz; frame-ancestors 'self'; frame-src https:; img-src https: data:; media-src 'self' https://widget.molin.ai; object-src 'none'; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; report-uri https://kosik.bauhaus.cz/csp_report; report-to bauhaus-csp; 1
default-src 'self'; script-src 'report-sample' 'nonce-QjlofH/dbkv5iBbnMmfI9A==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' 'unsafe-hashes' 'sha256-iffhzpv61p80FBhEFLKhSxZWMzLInZvQVBjAAVf80Do=' 'sha256-WxMcE+rsrxkUcjFA/XO+S9jrPU+1RSZmq0WxmiS5aF0='; style-src 'report-sample' 'self' 'unsafe-inline' caribou.com fonts-api.wp.com s0.wp.com c0.wp.com i0.wp.com widgets.wp.com transcend-cdn.com www.googletagmanager.com bzrcdn.openai.com; style-src-elem 'report-sample' 'self' 'unsafe-inline' caribou.com fonts-api.wp.com s0.wp.com c0.wp.com i0.wp.com widgets.wp.com transcend-cdn.com www.googletagmanager.com translate.google.com *.gstatic.com; style-src-attr 'report-sample' 'unsafe-inline'; img-src 'self' data: blob: caribou.com i0.wp.com c0.wp.com pixel.wp.com secure.gravatar.com *.visualwebsiteoptimizer.com widget.trustpilot.com www.facebook.com analytics.tiktok.com analytics-ipv6.tiktokw.us ads.tiktok.com bat.bing.net www.googletagmanager.com googleads.g.doubleclick.net google.com bat.bing.com tvspix.com www.google.com rp.liadm.com i.ytimg.com storage.googleapis.com translate.google.com *.gstatic.com region1.analytics.google.com analytics.google.com www.googleadservices.com connect.facebook.net forms-na1.hsforms.com; font-src 'self' data: caribou.com fonts-api.wp.com fonts.wp.com s0.wp.com c0.wp.com translate.google.com *.gstatic.com; connect-src 'self' caribou.com analytics-api.caribou.com analytics-cdn.caribou.com widget.trustpilot.com api.segment.io transcend-cdn.com telemetry.us.transcend.io browser-intake-datadoghq.com browser-intake-us5-datadoghq.com sdk.iad-06.braze.com public-api.wordpress.com pixel.wp.com bzrcdn.openai.com analytics.tiktok.com analytics-ipv6.tiktokw.us ads.tiktok.com bat.bing.com *.liadm.com bzr.openai.com analytics.google.com www.googletagmanager.com www.google.com *.visualwebsiteoptimizer.com stats.g.doubleclick.net www.googleadservices.com googleads.g.doubleclick.net ad.doubleclick.net capi.goodwaygroup.com region1.analytics.google.com www.google-analytics.com forms.hsforms.com; media-src 'self'; object-src 'none'; frame-src 'self' wordpress.com jetpack.wordpress.com widgets.wp.com widget.trustpilot.com www.youtube.com www.youtube-nocookie.com i.liadm.com job-boards.greenhouse.io bytedance: sslocal:; worker-src 'self' blob:; form-action 'self' app.caribou.com; frame-ancestors 'self'; base-uri 'self' about:; upgrade-insecure-requests; report-uri https://browser-intake-us5-datadoghq.com/api/v2/logs?dd-api-key= pub892282fbb3c5eacb67a653c92981a9a9&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Acaribou.com%2Cenv%3Aprod; report-to csp-endpoint-report-only 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klarnacdn.net https://fonts.gstatic.com data: *.klevu.com *.flixcar.com *.flixfacts.com https://bf-content.elon.se https://c.bannerflow.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.klarna.com *.klevu.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://briqpay.test *.briqpay.com *.klarna.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.hotjar.com *.klarnaservices.com *.ingrid.com *.klarnaevt.com *.dibspayment.eu 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.klarna.com *.klarnaevt.com *.klarnacdn.net https://*.google.com https://*.googleapis.com https://*.googleusercontent.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.adnxs.com *.omtrdc.net *.bing.com *.cloudflare.com *.cookiebot.com *.elongroup.se *.elon.se elon.se *.facebook.com *.googleadservices.com *.google-analytics.com *.google.se *.google.pl *.googletagmanager.com *.googleapis.com *.imbox.io *.klevu.com *.klarnaservices.com *.vaimo.net *.ytimg.com *.pricerunner.se *.flixcar.com *.flixfacts.com *.flix360.com *.flix360.io *.jwpsrv.com *.jwplayer.com *.uc.se *.prisjakt.no *.googlesyndication.com *.where-to-buy.co *.clarity.ms *.doubleclick.net *.dialogtrail.com *.lemonpi.io *.facebook.net *.reddit.com *.elon.no *.wistia.com *.videoly.co *.testfreaks.com https://where-to-buy.co https://bf-content.elon.se https://c.bannerflow.net js.live.kustom.co js.playground.kustom.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://briqpay.test *.briqpay.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.adnxs.com *.bing.com *.clarity.ms *.cookiebot.com *.depict.ai *.elongroup.se *.facebook.net *.googletagmanager.com *.googleapis.com *.hotjar.com *.imbox.io *.klevu.com *.myvisitors.se *.oribi.io *.pertento.ai *.pinimg.com *.pinterest.com *.testfreaks.com *.charpstar.net *.flixfacts.com *.loadbee.com *.flix360.io *.flixcar.com *.unpkg.com *.dialogtrail.com *.adform.net *.elon.se *.cloudfront.net *.videoly.co *.scaleflex.it *.redditstatic.com *.voyado.com https://unpkg.com https://bf-content.elon.se https://c.bannerflow.net js.live.kustom.co js.playground.kustom.co js.adsrvr.org *.redeal.se blob: *.tiktok.com *.ingrid.com *.klarnaevt.com https://www.elon.se 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com *.klarnacdn.net https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com assets.braintreegateway.com *.depict.ai *.dibspayment.eu *.googleapis.com *.gstatic.com *.klevu.com *.flixcar.com *.testfreaks.com https://www.elon.se 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.flixcar.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.adnxs.com *.demdex.net *.clarity.ms *.cookiebot.com *.depict.ai *.dibspayment.eu *.google-analytics.com *.g.doubleclick.net *.hotjar.com *.hotjar.io *.klarnauserservices.com *.ksearchnet.com *.pertento.ai *.pinterest.com security-hub.vaimo.network *.vaimo.net *.apptus.cloud *.iconify.design *.dialogtrail.com *.flix360.io *.charpstar.net *.loadbee.com *.flixcar.com *.googlesyndication.com *.elon.no *.bing.com *.facebook.com *.reddit.com *.unisvg.com *.testfreaks.com wss://ws.depict.ai wss://headless.dialogtrail.com https://bf-content.elon.se https://c.bannerflow.net js.live.kustom.co js.playground.kustom.co ad.doubleclick.net insight.adsrvr.org *.voyado.com *.tiktok.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' https://plausible.io https://www.googletagmanager.com https://analytics.ahrefs.com https://ads.adthrive.com https://platform.twitter.com https://talk.hyvor.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://cdn.dronexl.co https://cdn.evxl.co https://u.djicdn.com https://embed-ssl.wistia.com https://d.newsweek.com https://www.google-analytics.com; font-src 'self' data:; connect-src 'self' https://plausible.io https://analytics.ahrefs.com https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://talk.hyvor.com https://ads.adthrive.com https://syndication.twitter.com https://cdn.syndication.twimg.com; frame-src 'self' https://www.youtube.com https://player.vimeo.com https://platform.twitter.com https://twitter.com https://x.com https://www.facebook.com https://www.linkedin.com https://sketchfab.com https://w3.cdn.anvato.net https://www.google.com https://talk.hyvor.com https://www.washingtonpost.com https://www.myrtlebeachonline.com https://www.kansascity.com https://roundme.com https://assets.scrippsdigital.com; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://b.skedsocial.com https://www.googletagmanager.com https://*.hubspot.com https://js.hs-scripts.com https://js.hsforms.net https://js.hsadspixel.net https://js.hs-banner.com https://js.hs-analytics.net https://js.usemessages.com https://js.hubspotfeedback.com https://static.cloudflareinsights.com https://challenges.cloudflare.com https://connect.facebook.net https://capi-automation.s3.us-east-2.amazonaws.com https://analytics.tiktok.com https://snap.licdn.com https://s.pinimg.com https://ct.pinterest.com https://bat.bing.com https://cdn.firstpromoter.com https://analytics.roadwayai.com https://tracking.g2crowd.com https://assets.apollo.io https://bzrcdn.openai.com https://ct.capterra.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://b.skedsocial.com https://metrics.skedsocial.com https://*.hubspot.com https://*.hubapi.com https://forms.hscollectedforms.net https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://www.google.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://cloudflareinsights.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://px.ads.linkedin.com https://ct.pinterest.com https://tracking-api.g2.com https://assets.apollo.io https://bzrcdn.openai.com https://ct.capterra.com; frame-src 'self' https://*.hubspot.com https://*.hsforms.com https://metrics.skedsocial.com https://ct.pinterest.com https://www.youtube-nocookie.com https://www.youtube.com https://player.vimeo.com https://www.instagram.com https://www.tiktok.com https://platform.twitter.com https://www.linkedin.com https://open.spotify.com https://challenges.cloudflare.com; object-src 'none'; base-uri 'self' 1
font-src *.googleapis.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com upstream.heidipay.com sbx-upstream.heidipay.io *.fontawesome.com https://fonts.bunny.net *.revolut.com *.google.com google.com *.cdn-apple.com pay.google.com *.fonts.googleapis.com data: *.cloudflare.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com *.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.clearpay.co.uk *.multisafepay.com https://pay.google.com *.revolut.com *.cdn-apple.com pay.google.com *.gstatic.com *.addthis.com *.pinterest.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.googleapis.com *.gstatic.com 'self' data: google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.afterpay.com *.clearpay.co.uk storage.googleapis.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com *.multisafepay.com *.revolut.com *.google.com *.cdn-apple.com pay.google.com *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.addthis.com *.pinterest.com *.cdninstagram.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.afterpay.com *.clearpay.co.uk *.squarecdn.com https://hbiq.net widget.freshworks.com m2epro.freshdesk.com upstream.heidipay.com sbx-upstream.heidipay.io *.disqus.com *.avada.io *.shopify.com *.multisafepay.com https://pay.google.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ *.revolut.com *.google.com *.cdn-apple.com pay.google.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.instagram.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.afterpay.com/ *.squarecdn.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com https://fonts.bunny.net *.multisafepay.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net google.com *.clearpay.co.uk *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com widget.freshworks.com m2epro.freshdesk.com upstream.heidipay.com sbx-upstream.heidipay.io https://get.geojs.io *.avada.io *.multisafepay.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ *.revolut.com *.google.com *.cdn-apple.com pay.google.com *.gstatic.com *.cloudflare.com *.paypal.com *.addthis.com *.cardinalcommerce.com *.graph.instagram.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self'; frame-ancestors 'self'; base-uri 'self'; object-src 'none' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com www.cembrapay.ch cembrapay.ch *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.google.com/ www.cembrapay.ch cembrapay.ch landofcoder.com maps.googleapis.com chart.googleapis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * test.saferpay.com www.saferpay.com saferpay.com ai.stoeckli.ch red-mud-07164bb03-test.westeurope.5.azurestaticapps.net *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://www.magezon.com cembrapay.ch www.cembrapay.ch www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com test.saferpay.com www.saferpay.com saferpay.com *.googleapis.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com https://rum.hlx.page www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.google.com/ www.cembrapay.ch cembrapay.ch landofcoder.com maps.googleapis.com chart.googleapis.com ipinfo.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com test.saferpay.com www.saferpay.com saferpay.com *.googleapis.com *.googletagmanager.com tagmanager.google.com https://7258763.collect.igodigital.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com assets.braintreegateway.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src landofcoder.com maps.googleapis.com chart.googleapis.com 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net vimeo.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com www.cembrapay.ch cembrapay.ch landofcoder.com maps.googleapis.com chart.googleapis.com ipinfo.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com test.saferpay.com www.saferpay.com saferpay.com *.googleapis.com ai.stoeckli.ch red-mud-07164bb03-test.westeurope.5.azurestaticapps.net *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src www.cembrapay.ch cembrapay.ch test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; img-src 'self' data: blob: https:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self'; connect-src 'self' https://*.sanity.io wss://*.api.sanity.io https://*.supabase.co wss://*.supabase.co https://maps.googleapis.com https://*.googleapis.com https://*.gstatic.com; frame-src 'self' https://*.sanity.io https://www.google.com; worker-src 'self' blob:; media-src 'self' https: data: blob: 1
base-uri 'self'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://td.doubleclick.net; connect-src 'self' https://swile-privacy.my.onetrust.com https://cdn.cookielaw.org https://static.axept.io https://api.axept.io https://client.axept.io https://swile.containers.piwik.pro https://swile.piwik.pro/ https://adservice.google.com https://googleads.g.doubleclick.net https://www.google.com; img-src 'self' blob: data: https://cdn.cookielaw.org https://static.axept.io https://axeptio.imgix.net https://www.google.fr https://www.googletagmanager.com https://fonts.gstatic.com; manifest-src 'self'; object-src 'none'; report-uri https://csp-report.browser-intake-datadoghq.eu/api/v2/logs?dd-api-key=pub1f7041eb55ec9a12eea50b161be3d8c0&dd-evp-origin=content-security-policy&ddsource=csp-report; report-to csp; script-src 'nonce-MmYwNDRjNmItZTdlYi00N2ZiLWE4M2UtOTc3NTIwMzRlNGI0' 'strict-dynamic' https://static.axept.io; style-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://fonts.googleapis.com 1
default-src 'self' *.gs.com; script-src 'unsafe-inline' 'unsafe-eval' *.gs.com:* https://assets.adobedtm.com https://gsgir.122.2o7.net https://*.tt.omtrdc.net https://view.ceros.com ir-vh.akamaihd.net https://amp.akamaized.net https://cdn.appdynamics.com; connect-src 'self' wss://*.gs.com:* *.gs.com:* https://assets.adobedtm.com https://gsgir.122.2o7.net https://*.tt.omtrdc.net https://view.ceros.com ir-vh.akamaihd.net https://amp.akamaized.net https://col.eum-appdynamics.com https://girprod.akamaized.net https://irqa.akamaized.net https://video.goldmansachs.com *.datadoghq.com; img-src *.gs.com:* https://gsgir.122.2o7.net data: blob: https://col.eum-appdynamics.com; style-src 'unsafe-inline' *.gs.com:* https://fast.fonts.net; media-src 'self' *.gs.com ir-vh.akamaihd.net blob: https://girprod.akamaized.net https://irqa.akamaized.net https://video.goldmansachs.com; frame-ancestors 'self' https://goldmansachs.experiencecloud.adobe.com:*; worker-src blob: *.gs.com:* *.gs.com:*; 1
font-src *.klarnacdn.net *.fontawesome.com *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.google.com *.youtube.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.google.com *.youtube.com maps.googleapis.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.twitter.com *.google.com *.facebook.com maps.googleapis.com lightwidget.com *.maps.gstatic.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.klarna.com *.klarnaevt.com *.klarnacdn.net * www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.cloudflare.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.com maps.googleapis.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.googleapis.com *.placeholder.com *.maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.klarna.com *.klarnacdn.net *.klarnaservices.com *.avada.io * js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.google.com maps.googleapis.com *.facebook.net cdn.lightwidget.com *.instagram.com *.cdninstagram.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.googleapis.com *.placeholder.com *.maps.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.klarnacdn.net *.fontawesome.com unsafe-inline assets.braintreegateway.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.google.com *.youtube.com maps.googleapis.com *.cdninstagram.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.placeholder.com *.maps.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.cloudflare.com *.twitter.com *.twimg.com *.youtube.com maps.googleapis.com facebook.net *.maps.gstatic.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
style-src https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com 'unsafe-inline';report-uri /1/batch/2/OE/mid=ATVPDKIKX0DER:sid=137-2706795-7047547:rid=9G5AMB0S78W0ZTTNPQPH:sn=www.primevideo.com;script-src https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com 'unsafe-inline' 'unsafe-eval';default-src https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com 1
font-src *.googleapis.com *.gstatic.com data: *.globalpay.com https://fonts.gstatic.com *.klarnacdn.net maxcdn.bootstrapcdn.com *.yotpo.com www.bedstar.co.uk data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.gpwebpay.com *.gpe.cz *.globalpay-ecommerce.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com www.bedstar.co.uk 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com www.bedstar.co.uk 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com https://js.mollie.com https://checkoutshopper-test.adyen.com https://checkoutshopper.adyen.com *.adyen.com account.fetchify.com *.americanexpress.com *.globalpay.com *.mastercard.com *.visa.com *.gpwebpay.com *.gpe.cz *.globalpay-ecommerce.com *.klarna.com https://www.googletagmanager.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.xtento.com *.yotpo.com www.bedstar.co.uk 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com https://s3.amazonaws.com https://aggregate-imgs.s3.eu-north-1.amazonaws.com https://fsc-images.s3.eu-north-1.amazonaws.com https://checkoutshopper-test.adyen.com https://checkoutshopper.adyen.com checkoutshopper-test.cdn.adyen.com checkoutshopper.cdn.adyen.com *.cdn.adyen.com *.adyen.com *.globalpay.com https://www.magezon.com *.klarna.com *.klarnaevt.com *.klarnacdn.net http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com www.google.com www.google.com.ua maps.gstatic.com www.xtento.com cdn.xtento.com *.yotpo.com www.bedstar.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://js.mollie.com https://*.ngrok.app https://checkoutshopper-test.adyen.com https://checkoutshopper.adyen.com *.adyen.com *.aexp-static.com https://ajax.aspnetcdn.com *.globalpay.com *.gpapiservices.com https://pay.google.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com www.gstatic.com www.xtento.com cdn.xtento.com *.yotpo.com www.bedstar.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cc-cdn.com https://fonts.googleapis.com *.klarnacdn.net unsafe-inline assets.braintreegateway.com www.gstatic.com maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com www.bedstar.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ www.bedstar.co.uk 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com https://*.fero.com https://*.ngrok.app wss://*.ngrok.app wss://fero.ngrok.app:3000/ws https://checkoutshopper-test.adyen.com https://checkoutshopper.adyen.com checkoutshopper-test.cdn.adyen.com checkoutshopper-live.cdn.adyen.com *.adyen.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk https://google.com/pay *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com www.googleapis.com *.yotpo.com www.bedstar.co.uk 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com www.bedstar.co.uk http: https: blob: 'self' 'unsafe-inline'; default-src www.bedstar.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'report-sample' 'self' https://analytics.tiktok.com https://api.270degrees.nl https://az.bbvms.com https://b.delivery.consentmanager.net https://cdn.bluebillywig.com https://cdn.consentmanager.net https://connect.facebook.net https://js.hs-analytics.net https://js.hs-banner.com https://js.hsadspixel.net https://snap.licdn.com https://www.googletagmanager.com; style-src 'report-sample' 'self' 'unsafe-inline' https://fonts.googleapis.com https://p.typekit.net https://use.typekit.net; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; connect-src 'self' blob: data: https://api.270degrees.nl https://az.bbvms.com https://stats.bluebillywig.com https://www.gstatic.com; font-src 'self' data: https://d19djcpdozzvjk.cloudfront.net https://fonts.gstatic.com https://use.typekit.net; frame-src 'self' https://cdn.consentmanager.net; img-src 'self' data: https://az.bbvms.com https://b.delivery.consentmanager.net https://stats.bluebillywig.com; manifest-src 'self'; media-src 'self' blob: https://az.bbvms.com; worker-src blob:; report-to csp-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://*.osano.com https://www.googletagmanager.com https://cdn.segment.com https://maps.googleapis.com https://*.liveperson.net https://*.lpsnmedia.net https://*.wistia.com https://*.wistia.net https://browser.sentry-cdn.com https://gs.mountain.com https://analytics.tiktok.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' data: https://fonts.googleapis.com; img-src 'self' data: blob: https://embed.widencdn.net https://claytonhomes.widen.net https://*.claytonhomes.com https://api.claytonhomes.dev.cct-pubweb.com https://api.claytonhomes.itg.cct-pubweb.com https://api.claytonhomes.qua.cct-pubweb.com https://media.ffycdn.net https://images.ctfassets.net https://maps.googleapis.com https://maps.gstatic.com https://*.googleapis.com https://*.ggpht.com https://www.googletagmanager.com https://*.google-analytics.com https://*.wistia.com https://*.lpsnmedia.net; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://api.segment.io https://cdn.segment.com https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com https://*.datadoghq.com https://www.googletagmanager.com https://*.google-analytics.com https://maps.googleapis.com https://places.googleapis.com https://*.liveperson.net https://*.lpsnmedia.net https://*.osano.com https://*.wistia.com https://*.wistia.net https://*.litix.io https://*.facebook.com https://analytics.tiktok.com; frame-src 'self' https://*.wistia.net https://*.matterport.com https://momento360.com https://*.momento360.com https://*.liveperson.net https://*.lpsnmedia.net https://*.osano.com https://*.facebook.com; media-src 'self' blob: https://*.wistia.com https://*.wistia.net; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://*.facebook.com; frame-ancestors 'none'; report-uri /api/csp-report; report-to csp-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://*.gstatic.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com https://*.bootstrapcdn.com https://cdnjs.cloudflare.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://*.gstatic.com https://*.bootstrapcdn.com https://cdnjs.cloudflare.com; frame-src 'self' https://www.google.com https://www.recaptcha.net; connect-src 'self' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com; 1
manifest-src 'self' *.granngarden.se; media-src 'self' data: blob:; style-src 'self' 'unsafe-inline' *.fontawesome.com r.testfreaks.com fonts.googleapis.com *.videoly.co *.nshiftportal.com *.aptrinsic.com; worker-src blob:; img-src https://app.optimizely.com https://cdn.optimizely.com 'self' data: blob: *.granngarden.se *.google.com *.google.se *.google.no *.google.fi *.google.fr *.google.ca *.google.be *.google.dk *.google.nl *.google.de *.google.is *.google.ch *.google.ro *.google.pl *.google.es *.google.ee *.google.lv *.google.at *.google.ba *.google.cg *.google.cl *.google.cz *.google.gr *.google.hr *.google.hu *.google.ie *.google.it *.google.lt *.google.mu *.google.rs *.google.ru *.google.si *.google.sk *.google.al *.google.co.uk *.google.co.in *.google.co.id *.google.co.jp *.google.co.ma *.google.co.nz *.google.co.th *.google.com.ar *.google.com.au *.google.com.bd *.google.com.br *.google.com.cy *.google.com.hk *.google.com.mt *.google.com.mx *.google.com.ni *.google.com.pk *.google.com.sg *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.vn *.googletagmanager.com *.googlesyndication.com *.googleadservices.com *.google-analytics.com *.clarity.ms *.bing.com *.bing.net *.doubleclick.net *.kxcdn.com maps.googleapis.com retail.googleapis.com *.imgi.no *.imageshop.no *.testfreaks.com *.ytimg.com i.vimeocdn.com *.videoly.co pricespy-75b8.kxcdn.com cdn.pji.nu api.unifaun.com *.nshiftportal.com *.kustom.co cdn.ecoonline.com; font-src 'self' data: *.fontawesome.com res-1.cdn.office.net res.cdn.office.net fonts.gstatic.com *.hotjar.com dhm5hy2vn8l0l.cloudfront.net; report-to report-only-endpoint; connect-src https://dc.services.visualstudio.com https://js.monitor.azure.com https://*.optimizely.com 'self' data: *.granngarden.se *.google.com *.google.se *.google.no *.google.fi *.google.fr *.google.ca *.google.be *.google.dk *.google.nl *.google.de *.google.is *.google.ch *.google.ro *.google.pl *.google.es *.google.ee *.google.lv *.google.at *.google.ba *.google.cg *.google.cl *.google.cz *.google.gr *.google.hr *.google.hu *.google.ie *.google.it *.google.lt *.google.mu *.google.rs *.google.ru *.google.si *.google.sk *.google.al *.google.co.uk *.google.co.in *.google.co.id *.google.co.jp *.google.co.ma *.google.co.nz *.google.co.th *.google.com.ar *.google.com.au *.google.com.bd *.google.com.br *.google.com.cy *.google.com.hk *.google.com.mt *.google.com.mx *.google.com.ni *.google.com.pk *.google.com.sg *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.vn google.com *.google-analytics.com *.clarity.ms *.run.app *.googlesyndication.com *.bing.com *.bing.net *.googletagmanager.com *.googleadservices.com *.doubleclick.net sst.granngarden.se *.imgi.no *.testfreaks.com *.cookieinformation.com *.videoly.co api.schibsted.com api.pj.nu *.nshiftportal.com *.kustom.co *.voyado.com *.hotjar.com *.hotjar.io wss://ws.hotjar.com *.aptrinsic.com; default-src 'self' data: blob: *.easycruit.com *.vismatalent.com; frame-src https://*.cdn.optimizely.com https://*.cdn-pci.optimizely.com *.youtube.com *.youtube-nocookie.com *.cookieinformation.com player.vimeo.com hire.vismatalent.com *.mimsafe.com *.mimsafe.se *.mim.se *.gardena.com *.kustom.co guide.championgenerators.se infocenter.oregonproducts.eu *.granngarden.se www.google.com; report-uri https://www.granngarden.se/report-endpoints/report-only; script-src https://js.monitor.azure.com https://*.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com 'self' *.granngarden.se 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' *.google.com *.google.se *.googletagmanager.com *.clarity.ms *.bing.com *.doubleclick.net www.gstatic.com sst.granngarden.se *.testfreaks.com *.youtube.com *.cookieinformation.com *.videoly.co *.scriptcdn.net cdn.pji.nu api.unifaun.com *.nshiftportal.com *.kustom.co *.voyado.com *.hotjar.com *.aptrinsic.com infocenter.oregonproducts.eu; 1
script-src 'nonce-439b03b13108493269ff10fd6807fbd8fc21cf528bcbfdd06e2f6f6ab825743b' 'strict-dynamic';object-src 'none';base-uri 'none';frame-ancestors 'none'; 1
default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data:; frame-src https://www.google.com; frame-ancestors 'self'; connect-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; 1
default-src 'self'; font-src data: https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud; script-src 'self' https://*.bazaarvoice.com https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://exc.mm.dm-drogeriemarkt.it https://mpsnare.iesnare.com https://omt.dm-drogeriemarkt.it https://tags.tiqcdn.com https://web.cmp.usercentrics.eu https://www.dm-drogeriemarkt.it https://www.google.com https://www.google.com/recaptcha/ https://www.gstatic.com https://www.gstatic.com/recaptcha/; worker-src 'self' blob:; connect-src 'self' https://*.bazaarvoice.com https://aggregator.service.usercentrics.eu https://api.mapbox.com https://api.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://browser-intake-datadoghq.eu https://cart-recos.services.dmtech.com https://cdcs.usercentrics.eu https://collect.tealiumiq.com https://consent-api.service.consent.usercentrics.eu https://consent-rt-ret.service.consent.usercentrics.eu https://consents.usercentrics.eu https://content-preview.apps.prod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://direct-collect.dy-api.eu https://direct.dy-api.eu https://dmpay-gateway.services.dmtech.com https://dy-api.eu https://editorial-content.dm-static.com https://events.mapbox.com https://exc.mm.dm-drogeriemarkt.it https://frontend-tracking-infra-service.services.dmtech.com https://graphql.usercentrics.eu https://insights.algolia.io https://logs.browser-intake-datadoghq.eu https://maut-prod.services.dmtech.com https://maut-rls.nonprod.services.dmtech.com https://mpsnare.iesnare.com https://my-products-api.services.dmtech.com https://omacs.services.dmtech.com https://omc.dm-drogeriemarkt.it https://predictive-shopping-service.services.dmtech.com https://product-based-recos.services.dmtech.com https://product-search.services.dmtech.com https://product-semantic-search.services.dmtech.com https://rcom-eu.dynamicyield.com https://recos-as-a-service.services.dmtech.com https://region1.google-analytics.com https://retail-media.services.dmtech.com https://rum.browser-intake-datadoghq.eu https://s2s.adjust.com https://signin.dm-drogeriemarkt.it https://sos-prod.availability.services.dmtech.com https://staedtetour.dm-fb2.de https://stars.services.dmtech.com https://storage.googleapis.com/gift-card-builder-emergency-disabled-bucket/ https://store-data-service.services.dmtech.com https://store-order-service.services.dmtech.com https://v1.api.service.cmp.usercentrics.eu https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://zoe-shop-proxy-prod.services.dmtech.com https://kuba-prod.services.dmtech.com https://zoe-shop-proxy-prod.services.dmtech.com https://cartnext.services.dmtech.com https://dmcsm-proxy.prod.services.dmtech.com https://zoe-shop-proxy-prod.services.dmtech.com https://customer-helpcenter-prod.services.dmtech.com https://paint-prod.services.dmtech.com https://content.services.dmtech.com https://content-search-service-preview.apps.prod.gcp.dmtech.cloud https://content-search-service.services.dmtech.com https://products.dm.de https://pds-import-prod.apps.prod.gcp.dmtech.cloud https://shopping-list-prod.services.dmtech.com; media-src 'self'; style-src 'self' 'unsafe-inline' https://*.bazaarvoice.com https://api.tiles.mapbox.com https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud; form-action 'self' https://*.bazaarvoice.com https://apps.bazaarvoice.com https://checkout.dm-drogeriemarkt.it https://giftcard-checkout.dm.de/api/checkout https://signin.dm-drogeriemarkt.it; img-src 'self' blob: data: https://*.bazaarvoice.com https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://cdn-eu.dynamicyield.com https://composer.apps.nonprod.cf.dmtech.cloud https://content-preview.apps.prod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://editorial-content.dm-static.com https://exc.mm.dm-drogeriemarkt.it https://i.ytimg.com https://images.podigee-cdn.net https://img.usercentrics.eu https://img.youtube.com/ https://media.dm-static.com https://photos-eu.bazaarvoice.com https://products.dm-static.com https://uct.service.usercentrics.eu https://content.services.dmtech.com; frame-ancestors 'self' https://account.dm-drogeriemarkt.it https://app.datadoghq.eu https://checkout.dm-drogeriemarkt.it https://content-preview.apps.prod.gcp.dmtech.cloud https://mobileapp.dm-drogeriemarkt.it https://studio.dm-drogeriemarkt.com; frame-src 'self' https://*.bazaarvoice.com https://account.dm-drogeriemarkt.it https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://cdn.podigee.com https://checkout.dm-drogeriemarkt.it https://configurator.nuk.de https://gastfamilie.podigee.io https://geburtskanal-dm.podigee.io https://hey-familie.podigee.io https://kinderwunschsprechstunde.podigee.io https://mobileapp.dm-drogeriemarkt.it https://player.podigee-cdn.net https://recaptcha.google.com/recaptcha/ https://sandbox.om.dm-drogeriemarkt.it https://signin.dm-drogeriemarkt.it https://web.cmp.usercentrics.eu https://www.google.com https://www.google.com/recaptcha/ https://www.youtube-nocookie.com; base-uri 'self' https://exc.mm.dm-drogeriemarkt.it; child-src 'self' blob:; manifest-src 'self'; report-to csp-endpoint; report-uri /__csp-reports__ 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' *.amazonaws.com; connect-src 'self' *.gyandhan.com wss: http://localhost:3000 http://localhost:3001 fonts.googleapis.com cdn.ckeditor.com d1i7580riw15wg.cloudfront.net *.clarity.ms connect.facebook.net *.gdinternal.com static.addtoany.com *.digio.in *.razorpay.com *.avanse.com *.signzy.tech *.karza.in *.recaptcha.net code.jquery.com cdnjs.cloudflare.com cke4.ckeditor.com *.youtube-nocookie.com *.gyandhan.localhost px.ads.linkedin.com stats.addtoany.com cdn.moengage.com *.moengage.com google.com *.google.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.gstatic.com *.googleapis.com *.doubleclick.net pagead2.googlesyndication.com tpc.googlesyndication.com *.youtube.com; font-src 'self'  https: data:; frame-src 'self'  *.gyandhan.com blob: *.amazonaws.com http://localhost:3000 cdn.ckeditor.com d1i7580riw15wg.cloudfront.net *.clarity.ms connect.facebook.net *.gdinternal.com fonts.googleapis.com static.addtoany.com *.digio.in *.razorpay.com *.avanse.com *.signzy.tech *.karza.in *.recaptcha.net code.jquery.com cdnjs.cloudflare.com cke4.ckeditor.com *.youtube-nocookie.com *.gyandhan.localhost px.ads.linkedin.com stats.addtoany.com cdn.moengage.com *.moengage.com google.com *.google.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.gstatic.com *.googleapis.com *.doubleclick.net pagead2.googlesyndication.com tpc.googlesyndication.com *.youtube.com; img-src 'self'  *.amazonaws.com data: https: http://localhost:3000 cdn.ckeditor.com d1i7580riw15wg.cloudfront.net *.clarity.ms connect.facebook.net *.gdinternal.com fonts.googleapis.com static.addtoany.com *.digio.in *.razorpay.com *.avanse.com *.signzy.tech *.karza.in *.recaptcha.net code.jquery.com cdnjs.cloudflare.com cke4.ckeditor.com *.gyandhan.com *.youtube-nocookie.com *.gyandhan.localhost px.ads.linkedin.com stats.addtoany.com cdn.moengage.com *.moengage.com google.com *.google.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.gstatic.com *.googleapis.com *.doubleclick.net pagead2.googlesyndication.com tpc.googlesyndication.com *.youtube.com; media-src 'self'  *.gyandhan.com blob: *.amazonaws.com http://localhost:3000 cdn.ckeditor.com d1i7580riw15wg.cloudfront.net *.clarity.ms connect.facebook.net *.gdinternal.com fonts.googleapis.com static.addtoany.com *.digio.in *.razorpay.com *.avanse.com *.signzy.tech *.karza.in *.recaptcha.net code.jquery.com cdnjs.cloudflare.com cke4.ckeditor.com *.youtube-nocookie.com *.gyandhan.localhost px.ads.linkedin.com stats.addtoany.com cdn.moengage.com *.moengage.com google.com *.google.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.gstatic.com *.googleapis.com *.doubleclick.net pagead2.googlesyndication.com tpc.googlesyndication.com *.youtube.com; object-src *.gyandhan.com *.amazonaws.com http://localhost:3000 http://localhost:3001 cdn.ckeditor.com d1i7580riw15wg.cloudfront.net *.clarity.ms connect.facebook.net *.gdinternal.com fonts.googleapis.com static.addtoany.com *.digio.in *.razorpay.com *.avanse.com *.signzy.tech *.karza.in *.recaptcha.net code.jquery.com cdnjs.cloudflare.com cke4.ckeditor.com *.youtube-nocookie.com *.gyandhan.localhost px.ads.linkedin.com stats.addtoany.com cdn.moengage.com *.moengage.com google.com *.google.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.gstatic.com *.googleapis.com *.doubleclick.net pagead2.googlesyndication.com tpc.googlesyndication.com *.youtube.com; script-src 'self'  'unsafe-inline' 'unsafe-eval' https: http://localhost:3000 cdn.ckeditor.com d1i7580riw15wg.cloudfront.net *.clarity.ms connect.facebook.net *.gdinternal.com fonts.googleapis.com static.addtoany.com *.digio.in *.razorpay.com *.avanse.com *.signzy.tech *.karza.in *.recaptcha.net code.jquery.com cdnjs.cloudflare.com cke4.ckeditor.com *.gyandhan.com *.youtube-nocookie.com *.gyandhan.localhost px.ads.linkedin.com stats.addtoany.com cdn.moengage.com *.moengage.com google.com *.google.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.gstatic.com *.googleapis.com *.doubleclick.net pagead2.googlesyndication.com tpc.googlesyndication.com *.youtube.com; style-src 'self'  'unsafe-inline' https: http://localhost:3000 cdn.ckeditor.com d1i7580riw15wg.cloudfront.net *.clarity.ms connect.facebook.net *.gdinternal.com fonts.googleapis.com static.addtoany.com *.digio.in *.razorpay.com *.avanse.com *.signzy.tech *.karza.in *.recaptcha.net code.jquery.com cdnjs.cloudflare.com cke4.ckeditor.com *.gyandhan.com *.youtube-nocookie.com *.gyandhan.localhost px.ads.linkedin.com stats.addtoany.com cdn.moengage.com *.moengage.com google.com *.google.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.gstatic.com *.googleapis.com *.doubleclick.net pagead2.googlesyndication.com tpc.googlesyndication.com *.youtube.com; report-uri /csp_reports?report_only=true 1
font-src fonts.gstatic.com use.typekit.net https://*.klevu.com https://*.gstatic.com https://*.typekit.net *.klevu.com *.ksearchnet.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com https://*.doubleclick.net https://*.braintreegateway.com https://*.kaptcha.com https://*.paypal.com https://*.google.com https://*.hotjar.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://*.klevu.com https://*.paypal.com https://*.gumlet.io https://*.onetrust.com https://*.doubleclick.net https://*.google.com https://*.google.co.uk https://*.cloudfront.net *.klevu.com *.ksearchnet.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com https://rum.hlx.page *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com https://*.cloudfront.net https://*.klevu.com https://*.google-analytics.com https://*.doubleclick.net https://*.braintreegateway.com https://*.paypal.com https://*.onetrust.com https://*.newrelic.com https://*.nr-data.net https://*.trackedweb.net https://*.pcapredict.com/js/sensor.js https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://*.hotjar.com https://secure.leadforensics.com https://*.googleapis.com js.klevu.com *.ksearchnet.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.algoliaradar.com insights.algolia.io tagmanager.google.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com https://*.cloudfront.net https://*.klevu.com https://*.googleapis.com https://*.typekit.net *.klevu.com *.ksearchnet.com unsafe-inline assets.braintreegateway.com tagmanager.google.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://*.cloudfront.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com https://*.freshdesk.com https://*.google-analytics.com https://*.doubleclick.net https://*.hotjar.com wss://*.hotjar.com https://*.hotjar.io wss://*.hotjar.io https://*.braintreegateway.com https://*.braintree-api.com https://*.onetrust.com https://*.adobedc.net https://*.nr-data.net *.klevu.com *.ksearchnet.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://www.shopperapproved.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.affirm.com *.affirm.ca *.certcapture.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://static.zdassets.com https://v2.zopim.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.affirm.com *.affirm.ca *.certcapture.com https://www.shopperapproved.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com magefan.com cm.magefan.com *.facebook.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://seal.trustguard.com https://pubads.g.doubleclick.net https://www.google.co.in https://bat.bing.com https://collector-26166.us.tvsquared.com https://d3k81ch9hvuctc.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.affirm.com *.affirm.ca *.certcapture.com https://www.shopperapproved.com https://direct.shopperapproved.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.klevu.com *.ksearchnet.com *.kaptcha.com *.googletagmanager.com *.facebook.net www.termsfeed.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://polaris.truevaultcdn.com https://v2.zopim.com https://static.zdassets.com https://130961.tctm.co https://acsbapp.com https://collector-26166.us.tvsquared.com https://px.premion.com https://bat.bing.com https://www.clarity.ms https://scripts.clarity.ms https://tgscript.s3.amazonaws.com https://maps.googleapis.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com https://www.shopperapproved.com https://static-tracking.klaviyo.com https://tgscript.s3.amazonaws.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://places.googleapis.com *.affirm.com *.affirm.ca *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com *.kaptcha.com *.google-analytics.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://location.truevaultcdn.com https://cdn.acsbapp.com https://ekr.zdassets.com wss://widget-mediator.zopim.com https://brucepallman.zendesk.com https://px.premion.com https://y.clarity.ms https://pro.ip-api.com https://stats.g.doubleclick.net https://erp.usedphotopro.com https://testing-used-photo-pro.azurewebsites.net https://maps.googleapis.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.fontawesome.com *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com https://cdnjs.cloudflare.com tendencias.tiendaflores.cl data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.twitter.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * tendencias.tiendaflores.cl 'self' 'unsafe-inline'; frame-ancestors tendencias.tiendaflores.cl 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.youtube.com/ *.addthis.com *.facebook.com *.twitter.com *.mercadolibre.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com tendencias.tiendaflores.cl 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.addthisedge.com *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar *.mercadolivre.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.gstatic.com tendencias.tiendaflores.cl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-ds.com https://rum.hlx.page *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.trackedlink.net *.addthis.com *.moatads.com *.addthisedge.com *.facebook.net *.mlstatic.com *.mercadopago.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com tendencias.tiendaflores.cl 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu https://fonts.googleapis.com https://cdnjs.cloudflare.com unsafe-inline assets.braintreegateway.com tagmanager.google.com tendencias.tiendaflores.cl 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com tendencias.tiendaflores.cl 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io commerce.adobe.net qa-api.magedevteam.com *.sentry.io *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.googleadservices.com *.google-analytics.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org *.mercadopago.com *.mercadolibre.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google.com google.com https://www.google-analytics.com tendencias.tiendaflores.cl 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com tendencias.tiendaflores.cl http: https: blob: 'self' 'unsafe-inline'; default-src tendencias.tiendaflores.cl 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.checkout.com *.cdn-apple.com *.oney.io *.staging.oney.io *.fontawesome.com https://fonts.bunny.net fonts.googleapis.com fonts.gstatic.com https://stackpath.bootstrapcdn.com https://fonts.gstatic.com/ https://akio-25-49.akio.cloud/ https://service.joomeo.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.fd-recette.net https://akio-25-49.akio.cloud/ https://service.joomeo.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com *.checkout.com *.klarna.com *.hipay-tpp.com *.hipay.com *.paypal.com *.google.com/ *.googleapis.com *.photoweb.com *.photoweb.es *.contentsquare.net *.kwanko.com https://hq-dev.magento.digitalphoto.dev https://cdn.segment.com https://events.eu1.segmentapis.com https://akio-25-49.akio.cloud/ https://www.googletagmanager.com https://widget.trustpilot.com https://privacy.fnac.phoenix.digitalphoto.group https://www.dwin1.com *.awin1.com *.zenaps.com https://the.sciencebehindecommerce.com https://*.wepowerconnections.com https://lantern.roeyecdn.com https://lantern.roeye.com https://service.joomeo.com https://gum.criteo.com/ https://www.mainadv.com/ https://tag.perfmaker.net/ https://tagassistant.google.com https://sst.photoweb.fr https://gum.criteo.com https://www.mainadv.com https://tag.perfmaker.net *.wepowerconnections.com *.facebook.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.checkout.com *.hipay.com *.google.com *.oney.io *.staging.oney.io magefan.com cm.magefan.com *.facebook.com https://firebasestorage.googleapis.com * https://www.magezon.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com photoweb.com *.photoweb.com *.magento.digitalphoto.dev blob: *.contentsquare.net https://akio-25-49.akio.cloud/ https://www.dwin1.com *.awin1.com *.zenaps.com https://the.sciencebehindecommerce.com https://*.wepowerconnections.com https://lantern.roeyecdn.com https://lantern.roeye.com https://service.joomeo.com braze-images.com *.braze-images.com *.braze.eu *.hsforms.net *.hsforms.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.checkout.com *.klarnacdn.net *.cdn-apple.com *.hipay-tpp.com *.hipay.com mpsnare.iesnare.com *.paypal.com *.google.com *.oney.io *.staging.oney.io *.googletagmanager.com *.facebook.net *.avada.io *.shopify.com * maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.eu01.nr-data.net *.trustpilot.com *.contentsquare.net *.privacy-center.org *.kwanko.com https://hq-dev.magento.digitalphoto.dev https://cdn.segment.com https://events.eu1.segmentapis.com https://akio-25-49.akio.cloud/ https://www.dwin1.com *.awin1.com *.zenaps.com https://the.sciencebehindecommerce.com https://*.wepowerconnections.com https://lantern.roeyecdn.com https://lantern.roeye.com https://service.joomeo.com https://cdn.jsdelivr.net *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.checkout.com *.hipay.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net fonts.googleapis.com https://stackpath.bootstrapcdn.com https://fonts.googleapis.com/ https://fonts.google.com https://akio-25-49.akio.cloud/ https://service.joomeo.com https://cdn.jsdelivr.net *.gstatic.com https://www.googletagmanager.com https://tag.perfmaker.net/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com data: mpsnare.iesnare.com *.googleapis.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.checkout.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.browser-intake-datadoghq.com *.hipay-tpp.com *.hipay.com wss://mpsnare.iesnare.com *.googleapis.com *.oney.io *.staging.oney.io *.google-analytics.com https://get.geojs.io *.avada.io maps.googleapis.com *.google.com https://stats.g.doubleclick.net *.eu01.nr-data.net *.contentsquare.net *.kwanko.com https://hq-dev.magento.digitalphoto.dev https://cdn.segment.com https://events.eu1.segmentapis.com https://akio-25-49.akio.cloud/ https://api.privacy-center.org/v1/events https://prompts.maze.co/api/widgets https://sdk.fra-02.braze.eu/api/v3/data/ https://pagead2.googlesyndication.com/ https://jls.photoweb.fr/ https://www.dwin1.com *.awin1.com *.zenaps.com https://the.sciencebehindecommerce.com https://*.wepowerconnections.com https://lantern.roeyecdn.com https://lantern.roeye.com https://service.joomeo.com t.elasticsuite.io *.hsforms.net *.hsforms.com https://sst.photoweb.fr *.googletagmanager.com region1.google-analytics.com region1.analytics.google.com stats.g.doubleclick.net https://halc.iadvize.com https://api.privacy-center.org https://prompts.maze.co https://sdk.fra-02.braze.eu https://akio-25-49.akio.cloud https://jls.photoweb.fr *.kameleoon.io *.merchant-center-analytics.goog *.iadvize.com *.tiktok.com *.perfmaker.net *.clarity.ms *.bing.com *.google.pt *.google.fr *.google.es *.google.de *.google.it *.google.be *.google.nl *.google.co.uk *.tiktokw.us *.trustpilot.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://www.google.com https://google.com https://ad.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; connect-src 'self' https://px.ads.linkedin.com https://*.linkedin.com https://*.zi-scripts.com https://ws.zoominfo.com https://*.hsforms.com https://js.hubspot.com https://cta-service-cms2.hubspot.com https://*.wistia.com https://*.wistia.net https://*.litix.io https://www.googletagmanager.com https://analytics.google.com https://*.analytics.google.com https://www.google-analytics.com https://stats.g.doubleclick.net https://o936403.ingest.sentry.io https://o936403.ingest.us.sentry.io https://hubspot-forms-static-embed.s3.amazonaws.com https://cdn.livechatinc.com https://stackpath.bootstrapcdn.com https://cdnjs.cloudflare.com; font-src 'self' data: https://fonts.gstatic.com https://use.fontawesome.com https://cdnjs.cloudflare.com https://stackpath.bootstrapcdn.com https://cdn.jsdelivr.net https://*.wistia.com https://*.wistia.net; frame-ancestors 'self'; frame-src 'self' blob: https://464431.hs-sites.com https://*.hsforms.com https://*.livechatinc.com; img-src 'self' data: blob: https://www.googletagmanager.com https://stats.g.doubleclick.net https://px.ads.linkedin.com https://*.linkedin.com https://cdn.livechat-static.com https://cdn.livechat-files.com https://cdn.files-text.com https://*.hsforms.com https://*.hubspot.com https://static.hsappstatic.net https://*.wistia.com https://*.wistia.net https://cdnjs.cloudflare.com https://fonts.gstatic.com https://use.fontawesome.com; media-src 'self' blob:; object-src 'self'; script-src 'strict-dynamic' 'nonce-3DeSLhUCg2a5cpnoC1e6og==' 'report-sample'; script-src-elem 'strict-dynamic' 'nonce-3DeSLhUCg2a5cpnoC1e6og=='; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.fontawesome.com https://cdnjs.cloudflare.com https://stackpath.bootstrapcdn.com https://cdn.jsdelivr.net; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.fontawesome.com https://cdnjs.cloudflare.com https://stackpath.bootstrapcdn.com https://cdn.jsdelivr.net; report-uri https://hesoedxbb6.execute-api.us-west-2.amazonaws.com/prod/report 1
object-src 'none'; script-src 'self' https://fonts.googleapis.com cdn.jsdelivr.net https://api.mapbox.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://unpkg.com unpkg.com; script-src-attr 'self'; script-src-elem 'self' cdn.jsdelivr.net https://api.mapbox.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://unpkg.com unpkg.com; style-src 'self' https://api.mapbox.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src-attr 'self'; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-MKp7PXRD1bzJN0c4J1SkpA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'nonce-RpQlp1AbpQIPCdIBDon+8A==' 'strict-dynamic' 'unsafe-eval' 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; report-uri /_/csp-report 1
base-uri 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' assets.talentio.com cdn.ravenjs.com widget.intercom.io js.intercomcdn.com www.google-analytics.com analytics.google.com translate.googleapis.com www.googletagmanager.com ; img-src 'self' data: blob: https: http:; child-src 'self' blob:; form-action 'self' www.facebook.com api-iam.intercom.io ; font-src 'self' data: assets.talentio.com fonts.gstatic.com use.fontawesome.com use.typekit.net fonts.intercomcdn.com ; frame-ancestors 'self'; frame-src 'self' blob: youtube.com *.youtube.com speakerdeck.com *.speakerdeck.com slideshare.net *.slideshare.net twitter.com *.twitter.com note.com *.note.com google.com *.google.com google.co.jp *.google.co.jp facebook.com *.facebook.com backcheck.jp *.backcheck.jp s3.ap-northeast-1.amazonaws.com intercom-sheets.com; manifest-src 'none'; object-src 'self' blob: s3.ap-northeast-1.amazonaws.com; style-src 'self' 'unsafe-inline' assets.talentio.com fonts.googleapis.com use.typekit.net p.typekit.net use.fontawesome.com translate.googleapis.com ; media-src 'none'; worker-src 'self' blob:; connect-src 'self' assets.talentio.com *.sentry.io sentry.io api-iam.intercom.io uploads.intercomcdn.com wss://nexus-websocket-a.intercom.io www.google-analytics.com analytics.google.com s3.ap-northeast-1.amazonaws.com translate.googleapis.com 1
font-src *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com fonts.gstatic.com use.typekit.net *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action *.twitter.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com/ bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com *.paytabs.com *.paytabs.sa * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.vimeocdn.com *.ytimg.com 'self' data: *.lightemporium.com *.usercentrics.eu www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.nr-data.net *.newrelic.com *.trackedlink.net *.facebook.net *.googletagmanager.com *.google.com *.jsdelivr.net www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com fonts.googleapis.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.googleadservices.com *.google-analytics.com *.equiti.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.nr-data.net *.newrelic.com *.ampproject.org www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https: data: blob: wss: android-webview-video-poster: 'unsafe-inline' 'unsafe-eval'; form-action https:; report-to default; report-uri https://sentry.io/api/256178/csp-report/?sentry_key=c2fb05422b2242faaec1d6d8a2a000fc&sentry_environment=production&sentry_release=1.2.122 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com data: *.fontawesome.com https://fonts.google.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com 'self' connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com play.gumlet.io *.gumlet.io https://widget.trustpilot.com https://consentcdn.cookiebot.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://app-wallee.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com www.feedoptimise.com cdn.feedoptimise.com *.amazonaws.com video.gumlet.io *.gumlet.io *.gumlet.com maps.gstatic.com https://bat.bing.com https://www.google.co.uk https://s.ytimg.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google.com *.googleadservices.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://app-wallee.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.feedoptimise.com cdn.feedoptimise.com play.gumlet.io video.gumlet.io api.gumlet.com *.gumlet.io maps.googleapis.com https://widget.trustpilot.com https://bat.bing.com https://script.thisisbeacon.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://cdnjs.cloudflare.com https://js-agent.newrelic.com https://bam.nr-data.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://app-wallee.com https://gmtech.mfgroup.ch https://assets.secure.checkout.visa.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://static.klaviyo.com maxcdn.bootstrapcdn.com assets.braintreegateway.com https://app-wallee.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.googleapis.com ws.postcoder.com play.gumlet.io api.gumlet.com *.gumlet.io https://youtube.com https://google.com https://fonts.google.com https://v5api.thisisbeacon.com https://consentcdn.cookiebot.com https://bam.nr-data.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googletagmanager.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://app-wallee.com https://assets.secure.checkout.visa.com 'self' 'unsafe-inline'; child-src https://youtube.com https://google.com https://fonts.google.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; media-src 'self' https://stream.klgd.ru rtmp://stream.klgd.ru https://wowza.klgd.ru https://cctv.klgd.ru 1
default-src 'self'; script-src https: 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com kit.fontawesome.com *.hsadspixel.net *.hs-analytics.net js.hscta.net *.hubspot.com static.hsappstatic.net *.usemessages.com *.hs-banner.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspot.net www.garp.org *.hscollectedforms.net *.hsleadflows.net *.hsforms.net *.hsforms.com *.hs-scripts.com *.hubspotfeedback.com feedback.hubapi.com; style-src 'self' 'unsafe-inline' *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net cdn2.hubspot.net www.garp.org static.hsappstatic.net; img-src https: 'self' 'unsafe-eval' js.hscta.net no-cache.hubspot.com *.hubspot.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspot.net cdn2.hubspot.net *.hsforms.net *.hsforms.com s3-us-west-2.amazonaws.com; font-src 'self' ka-p.fontawesome.com; connect-src 'self' *.google.com *.googletagmanager.com www.google-analytics.com googleads.g.doubleclick.net *.vidyard.com *.fontawesome.com content.hotjar.io *.hotjar.com wss://wsp14.hotjar.com wss://wsp43.hotjar.com/api/v2/client/ws stats.g.doubleclick.net static.libsyn.com cdn.linkedin.oribi.io *.hubapi.com js.hscta.net *.hubspot.com *.hs-banner.com *.hscollectedforms.net *.hsforms.com bat.bing.com hm.baidu.com; object-src 'none'; media-src 'self'; frame-src html5-player.libsyn.com forms.hsforms.com *.hubspot.com *.hs-sites.com *.hubspot.net play.hubspotvideo.com www.garp.org *.hsforms.net *.hsforms.com *.googletagmanager.com *.twitter.com *.facebook.com fast.wistia.net *.youtube.com; base-uri 'self'; report-to /csp-violation-report-endpoint/; 1
script-src 'nonce-ngHfMkGVjXxGHahTxeY93A==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https://events.mercadolibre.com/csp/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=218e3dfd-b8aa-4968-b313-a3f9e4468f0e; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https://http2.mlstatic.com/ https://mlstaticquic-a.akamaihd.net/; frame-ancestors 'self' https://*.mercadolibre.cl:* https://*.mercadolibre.com:* https://*.mercadolibre.com.ve:* https://*.mercadolibre.com.ar:* https://*.mercadolivre.com.br:* https://*.mercadolibre.com.co:* https://*.mercadolibre.com.ec:* https://*.mercadolibre.com.mx:* https://*.mercadolibre.com.pe:* https://*.mercadolibre.com.uy:* https://*.mercadopago.cl:* https://*.mercadopago.com.ar:* https://*.mercadopago.com.br:* https://*.mercadopago.com.co:* https://*.mercadopago.com.mx:* https://*.mercadopago.com.pe:* https://*.mercadopago.com.uy:* https://*.mercadopago.com.ve:* https://*.mercadopago.com:* https://*.adminml.com:* https://*.mercadolibre.co.cr:* https://*.mercadolibre.com.pa:* https://*.mercadolibre.com.do:* https://*.mercadolibre.com.bo:* https://*.mercadolibre.com.py:* https://*.mercadolibre.com.gt:* https://*.mercadolibre.com.hn:* https://*.mercadolibre.com.ni:* https://*.mercadolibre.com.sv:* https://*.mercadopago.com.ec:* https://*.portalinmobiliario.com:* https://*.mercadolivre.com:* 1
default-src 'self' *.typekit.net *.googletagmanager.com *.bootstrapcdn.com *.google.com *.google-analytics.com *.facebook.com *.crazyegg.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.teststellar.com *.authxlab.com *.quantserve.com https://rules.quantcount.com *.cloudflare.com *.basis.net *.doubleclick.net *.optimizely.com https://cdn.optimizely.com *.calendly.com *.tailwindcss.com *.jsdelivr.net *.gstatic.com *.google-analytics.com *.crazyegg.com *.facebook.net *.simpli.fi *.google.com *.googleapis.com *.googletagmanager.com https://code.jquery.com *.cdn4dd.com https://drive-widget.cdn4dd.com *.tribalfusion.com; connect-src 'self' *.teststellar.com *.cheetahedp.com *.crazyegg.com *.google-analytics.com *.google.com *.typekit.net *.gstatic.com *.doubleclick.net https://pixel.quantserve.com *.quantserve.com *.optimizely.com https://logx.optimizely.com; frame-src 'self' *.googletagmanager.com calendly.com *.calendly.com *.gstatic.com *.google.com *.doubleclick.net https://pixel-sync.sitescout.com *.sitescout.com *.optimizely.com https://a12600010354.cdn.optimizely.com; font-src 'self' data: *.deltaco.com *.gstatic.com *.bootstrapcdn.com *.typekit.net https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.calendly.com *.googleapis.com https://fonts.googleapis.com *.typekit.net www.googletagmanager.com maxcdn.bootstrapcdn.com; img-src 'self' https: data: *.quantserve.com *.sitescout.com; report-to csp-endpoint 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.googleapis.com 'unsafe-inline' data: data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.libreka.de *.fontawesome.com https://fonts.bunny.net *.bootstrapcdn.com *.cloudfront.net https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * www.google.com js.stripe.com secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.libreka.de www.sovendus-connect.com www.sovendus-benefits.com *.googletagmanager.com *.cookiebot.com *.pinterest.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * *.googleapis.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com cdn.cookielaw.org qm.magazinabo.com qm.bergweltenabo.ch qm.getredbulletin.ch *.libreka.de *.googletagmanager.com ssl.gstatic.com www.gstatic.com https://firebasestorage.googleapis.com *.cookiefirst.com *.cookiebot.com *.elfsight.com *.facebook.com *.google.de *.linkedin.com *.pinterest.com *.redbull.com *.usd.de *.usercentrics.eu *.scnem2.com cdn.consentmanager.net cloud.ccm19.de *.matomo.cloud *.ppzv.de *.hsforms.net *.hsforms.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ js.stripe.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com cdn.cookielaw.org qm.magazinabo.com qm.bergweltenabo.ch qm.getredbulletin.ch *.libreka.de api.sovendus.com *.googletagmanager.com tagmanager.google.com *.avada.io *.shopify.com *.cloudfront.net *.cookiefirst.com *.cookiebot.com *.elfsight.com *.facebook.net *.google-analytics.com *.haymarketstat.de *.licdn.com *.linkedin.com *.logopaletti.de *.redbull.com *.trustedshops.com *.pinimg.com *.usercentrics.eu *.scnem2.com *.s7.addthis.com cdn.consentmanager.net d.delivery.consentmanager.net cloud.ccm19.de *.matomo.cloud *.ppzv.de *.hsforms.net *.hsforms.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app d.ratepay.com d.payla.io dr.payla.io src.mastercard.com *.stripe.network *.stripecdn.com *.amazon.com *.libreka.de *.fontawesome.com tagmanager.google.com fonts.google.com https://fonts.bunny.net *.cloudfront.net *.cookiefirst.com *.google.com *.trustedshops.com cdn.consentmanager.net cloud.ccm19.de https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.libreka.de *.cloudfront.net *.amazonaws.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.googleapis.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com privacyportal-de.onetrust.com pagead2.googlesyndication.com qm.magazinabo.com qm.getredbulletin.ch *.libreka.de identification-api.sovendus.com press-tracking-api.sovendus.com *.googletagmanager.com https://get.geojs.io *.avada.io *.cookiefirst.com *.cookiebot.com *.cookielaw.org *.doubleclick.net *.elfsight.com *.google.de *.haymarketstat.de *.logopaletti.de *.usercentrics.eu *.pinterest.com cloud.ccm19.de *.matomo.cloud *.ppzv.de t.elasticsuite.io *.hsforms.net *.hsforms.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; form-action 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https:; frame-src 'self' blob: https:; frame-ancestors 'self'; report-uri /csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://connect.facebook.net https://uvcw.tools https://ajax.googleapis.com https://player.vimeo.com https://stackpath.bootstrapcdn.com https://cdn.jsdelivr.net https://plausible.io https://kit.fontawesome.com https://client.crisp.chat https://www.google.com https://www.gstatic.com https://cdn.by.wonderpush.com https://code.jquery.com https://cdnjs.cloudflare.com https://unpkg.com https://platform.twitter.com; style-src 'self' 'unsafe-inline' https://unpkg.com https://cdn.jsdelivr.net https://client.crisp.chat https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' https://client.crisp.chat https://fonts.gstatic.com https://ka-p.fontawesome.com data:; connect-src 'self' https: wss:; frame-src 'self' https://www.facebook.com https://uvcw.tools https://datawrapper.dwcdn.net https://platform.twitter.com https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com; object-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://uvcw.sharepoint.com; 1
default-src 'self' *.tillamook.com tillamook.com stackpath.bootstrapcdn.com; img-src 'self' data: *.ctfassets.net ctfassets.net *.cookielaw.org cookielaw.org www.google.com/ads/ www.google-analytics.com/ www.facebook.com/ c.lytics.io/c/b5c7317d218cb2a0ef160219694b5a9e www.googletagmanager.com; media-src 'self' *.ctfassets.net ctfassets.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: destinilocators.com https://connect.facebook.net/ *.hotjar.com hotjar.com *.klaviyo.com klaviyo.com *.cookielaw.org cookielaw.org www.google-analytics.com/ www.googletagmanager.com/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.clarity.ms givebutter.com/ destinilocators.com/ www.googleoptimize.com/ cdnjs.cloudflare.com/polyfill/v3/polyfill.min.js cdnjs.cloudflare.com/ajax/libs/iframe-resizer/2.8.10/iframeResizer.min.js cdnjs.cloudflare.com/ajax/libs/easyXDM/2.4.20/easyXDM.min.js va.vercel-scripts.com/v1/speed-insights/script.debug.js widget.intercom.io js.intercomcdn.com www.recaptcha.net analytics.tiktok.com/i18n/pixel/events.js; style-src 'self' 'unsafe-inline' *.typekit.net typekit.net api.tiles.mapbox.com www.exploretock.com stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css fonts.googleapis.com/css; style-src-elem 'self' 'unsafe-inline' *.typekit.net stackpath.bootstrapcdn.com fonts.googleapis.com; font-src 'self' *.tillamook.com tillamook.com *.typekit.net typekit.net www.exploretock.com stackpath.bootstrapcdn.com fonts.gstatic.com; connect-src 'self' wss: *.tillamook.com tillamook.com *.hotjar.com hotjar.com *.klaviyo.com klaviyo.com *.doubleclick.net doubleclick.net *.ingest.sentry.io *.ingest.us.sentry.io *.ctfassets.net ctfassets.net *.mapbox.com mapbox.com *.algolianet.com *.algolia.net *.onetrust.com onetrust.com *.cookielaw.org cookielaw.org analytics.google.com api.addresszen.com *.clarity.ms/collect www.recaptcha.net preview.contentful.com/ www.google-analytics.com/ vitals.vercel-insights.com/ cdn.contentful.com/ analytics.google.com/ d2k6913brarspg.cloudfront.net/ www.facebook.com/tr/ analytics.tiktok.com/api/v2/pixel qcjajnmiprtqkimhahis.supabase.co; frame-src 'self' https://vars.hotjar.com https://www.facebook.com/ https://www.google.com/ https://www.youtube.com https://www.youtube-nocookie.com https://destinilocators.com/ https://td.doubleclick.net/; frame-ancestors https://app.contentful.com; worker-src 'self' blob:; child-src 'self' blob:; report-uri https://16x3230g.uriports.com/reports/report; report-to default 1
frame-ancestors 'self';script-src 'unsafe-inline' 'unsafe-eval' 'self' https://www.youtube.com https://maps.googleapis.com https://cdn.gamifiera.com https://policy.app.cookieinformation.com https://www.googletagmanager.com https://api.uat.walleydev.com https://api.walleypay.com https://dapi.videoly.co https://api.videoly.co https://cdn.pji.nu https://connect.facebook.net https://assets.voyado.com https://sst.jernia.no https://sc-static.net https://bat.bing.com https://static.hotjar.com https://script.hotjar.com https://s2.adform.net https://www.clarity.ms https://static.redeal.se https://track.adform.net https://googleads.g.doubleclick.net https://tr.snapchat.com https://scripts.clarity.ms https://core.sanity-cdn.com https://challenges.cloudflare.com https://jotuncolourpicker-embed.jotun.com;style-src 'unsafe-inline' 'self' https://cdn.gamifiera.com https://fonts.googleapis.com;frame-src 'self' https://policy.app.cookieinformation.com https://checkout.uat.walleydev.com https://www.youtube-nocookie.com https://checkout.walleypay.com https://sst.jernia.no https://tr.snapchat.com https://www.facebook.com https://15643634.fls.doubleclick.net https://challenges.cloudflare.com;worker-src 'self' blob:;report-uri https://www.jernia.no/api/internal/csp-report;report-to csp-endpoint; 1
font-src www.paypalobjects.com cash-f.squarecdn.com https://www.gstatic.com https://fonts.gstatic.com 'self' 'self' data: https://*.tawk.to data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * 'self' https://*.adyen.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com * https://www.googletagmanager.com/ https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com 'self' https://consentcdn.cookiebot.com 'self' 'unsafe-inline'; img-src cdn.zitmaxx.nl https://pim.zitmaxx.nl assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com * https://images.unsplash.com maps.gstatic.com *.googleapis.com *.ggpht.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.googletagmanager.com magefan.com cm.magefan.com *.disqus.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com 'self' data: https: http: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://cdn.ablyft.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.disqus.com https://www.google.com https://www.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval' https://*.google-analytics.com https://www.googletagmanager.com https://www.googleoptimize.com https://*.tawk.to https://secure.adnxs.com d5yoctgpv4cpx.cloudfront.net https://consent.cookiebot.com https://consentcdn.cookiebot.com https://sst.zitmaxx.nl 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cash.app https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.jsdelivr.net 'self' 'unsafe-inline' https://*.tawk.to 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src https://pim.zitmaxx.nl dpm.demdex.net amcglobal.sc.omtrdc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com * https://maps.googleapis.com https://player.vimeo.com *.gstatic.com data: http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com 'self' https://*.google-analytics.com wss://*.tawk.to rkkck31tec.execute-api.eu-central-1.amazonaws.com https: 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com cdn.livechatinc.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.punchout2go.com *.tradecentric.com https://connect.punchout2go.com 'self' 'unsafe-inline'; frame-ancestors https://cdn.livechatinc.com https://stemcelltechnologies.my.site.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.punchout2go.com *.tradecentric.com https://*.adobeio-static.net https://cdn.chatbot.com https://*.doubleclick.net https://*.livechatinc.com https://vars.hotjar.com https://*.paymetric.com https://stementorstg.wpengine.com https://calendar.time.ly https://*.worldpay.com https://stemcelltechnologies.my.site.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.files-text.com *.livechatinc.com *.livechat-files.com *.livechat-static.com https://p.adsymptotic.com https://hm.baidu.com/hm.gif https://bat.bing.com https://c.bing.com https://c.clarity.ms https://*.doubleclick.net https://d3cgm8py10hi0z.cloudfront.net/is.gif https://www.facebook.com/privacy_sandbox/ https://www.facebook.com/tr/ https://maps.googleapis.com/maps/ https://maps.gstatic.com/mapfiles/ https://www.google.ca/pagead/ https://www.google.com/pagead/ https://www.google.ca/ads/ https://www.google.com/ads/ https://www.googletagmanager.com https://static.kameleoon.com https://*.ads.linkedin.com https://cdn.files-text.com/api/accounts/avatars/ https://connect.punchout2go.com https://*.stemcell.com https://t.co https://analytics.twitter.com https://sp.analytics.yahoo.com https://www.linkedin.com https://id.rlcdn.com https://aorta.clickagy.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.livechatinc.com *.livechat-static.com *.punchout2go.com *.tradecentric.com https://cdn.recapture.io https://*.adobeio-static.net https://acds-events.adobe.io https://rum.hlx.page https://maps.googleapis.com https://hm.baidu.com/hm.js https://bat.bing.com https://*.clarity.ms https://cdn.chatbot.com https://tags.clickagy.com https://www.clickcease.com https://img.en25.com https://*.doubleclick.net https://connect.facebook.net https://ajax.googleapis.com/ajax/libs/ https://seal.geotrust.com/getgeotrustsslseal geoip-js.com https://*.hotjar.com https://*.livechatinc.com https://snap.licdn.com https://js-agent.newrelic.com https://bam.nr-data.net https://cmp.osano.com https://connect.punchout2go.com/jslib/ https://*.recapture.io/beacon/ https://cdn.recapture.io/sdk/ https://cdn.c360a.salesforce.com/beacon/ https://cdn.searchspring.net/intellisuggest/is.min.js https://*.stemcell.com/media/ https://*.twitter.com https://static.ads-twitter.com https://calendar.time.ly https://unpkg.com/tabulator-tables@6.2.1/dist/js/tabulator.min.js https://*.worldpay.com https://s.yimg.com/wi/ytc.js https://ws.zoominfo.com https://stemc11116.pcapredict.com https://stemcelltechnologies.my.site.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com *.magento-datasolutions.com *.magento-ds.com *.livechatinc.com *.fontawesome.com *.punchout2go.com *.tradecentric.com https://*.adobeio-static.net https://connect.punchout2go.com/jslib/ https://www.googletagmanager.com/debug/badge.css 'self' 'unsafe-inline'; object-src *.livechatinc.com 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com *.livechatinc.com *.livechat-static.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.magento.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.livechatinc.com *.text.com https://app.recapture.io https://*.adobeio-static.net https://bat.bing.com https://cdn.chatbot.com https://*.clarity.ms https://*.doubleclick.net https://geoip-js.com https://www.googleadservices.com https://analytics.google.com *.google-analytics.com https://fonts.googleapis.com https://www.google.com/pagead/ https://maps.googleapis.com https://*.googlesyndication.com https://*.hotjar.com https://*.hotjar.io https://api.kameleoon.com https://na-data.kameleoon.io https://na-data.kameleoon.eu https://px.ads.linkedin.com https://cdn.linkedin.oribi.io https://*.livechatinc.com https://bam.nr-data.net https://cmp.osano.com https://*.api.osano.com https://connect.punchout2go.com https://d3peztlk7w3332.cloudfront.net *.searchspring.io *.searchspring.net https://s.yimg.com https://*.salesforce.com/web/ https://geo-ip.js wss://*.hotjar.com https://aorta.clickagy.com https://vc.hotjar.io https://www.google.com/recaptcha 'self' 'unsafe-inline'; child-src *.livechatinc.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
form-action 'self' https://login.microsoftonline.com; frame-src 'self' https://adverteren.rd.nl https://apps.powerapps.com https://www.youtube.com; frame-ancestors 'self'; base-uri 'self' 1
connect-src *.bundesregierung.de analytics.bundesregierung.de 'self' https://hls-hd.myrasec.de *.stage.bio ; style-src *.bundesregierung.de 'self' 'unsafe-inline' ; script-src *.bundesregierung.de 'self' ; script-src-elem 'self' *.bundesregierung.de 'nonce-i9OaN31JaqQ3Ez/DIpqF0JOR0G4JzMSantjZezXP1LynOIpXU3OgGaDjyMDW8EH28X5mHWMsWmx7BcWliYljtHoHFYk6b16HL65rvrjtN6QZMDAiFvHOfCqe0IhYaBcR8tNPan/EKgMEsE9CU/+bt7wR0ZENTaAlwe6AkW7igJ0=' *.stage.bio ; frame-src *.bundesregierung.de 'self' streaming.sendewerk.berlin ; media-src *.bundesregierung.de 'self' http://video.bundesregierung.de https://zdf-hls-18.akamaized.net *.stage.bio ; frame-ancestors *.bundesregierung.de 'self' ; img-src 'self' *.bundesregierung.de https://*.tile.openstreetmap.de data: *.stage.bio ; default-src *.bundesregierung.de 'self' ; font-src *.bundesregierung.de 'self' ; report-uri https://www.bundeskanzler.de/service/csp-report ; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' js.recurly.com applepay.cdn-apple.com www.googletagmanager.com pay.google.com *.paypal.com apis.google.com accounts.google.com bzrcdn.openai.com; style-src 'self' 'unsafe-inline'; connect-src 'self' js.recurly.com applepay.cdn-apple.com www.googletagmanager.com *.google-analytics.com fileworld-prod-s3.s3.eu-central-1.amazonaws.com fileworld-dev-s3.s3.eu-central-1.amazonaws.com metrics.fileworld.co plausible.io bat.bing.net bat.bing.com pagead2.googlesyndication.com www.googleapis.com content.googleapis.com bzr.openai.com d3fpc485506m00.cloudfront.net; img-src 'self' data: blob: https:; font-src 'self' applepay.cdn-apple.com d3fpc485506m00.cloudfront.net; frame-src 'self' js.recurly.com docs.google.com drive.google.com accounts.google.com; worker-src 'self' blob:; frame-ancestors 'none'; object-src 'none'; base-uri 'self' 1
connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://analytics.google.com https://www.google.com https://stats.g.doubleclick.net https://a.clarity.ms; default-src 'self'; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://tracking.g2crowd.com https://cdnjs.cloudflare.com https://ajax.googleapis.com https://cdn.jsdelivr.net https://ai-chatbot.tayori.com https://bat.bing.com https://ip2c.landscape.co.jp http://api.docodoco.jp https://v6.docodoco.jp https://www.clarity.ms https://scripts.clarity.ms https://googleads.g.doubleclick.net https://bake.surfpoint.jp 'unsafe-inline' 'unsafe-eval'; object-src 'none'; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' https: data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://cp.itreview.jp https://product.plainer.co.jp 1
font-src *.googleapis.com *.gstatic.com https://script.hotjar.com *.kueskipay.com maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.kueskipay.com 'self' connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com *.tawk.to 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ pay.conekta.com https://pay.digitalfemsa.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com api-static.mercadopago.com td.doubleclick.net *.kueskipay.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.tawk.to 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.googleapis.com *.gstatic.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://static.hotjar.com cdn.aplazo.mx www.google.com.mx *.kueskipay.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com quickchart.io img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.tawk.to cdn.jsdelivr.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com cdn.conekta.io pay.conekta.com conektaapi.s3.amazonaws.com pay.digitalfemsa.io chimpstatic.com downloads.mailchimp.com *.list-manage.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com https://static.hotjar.com https://script.hotjar.com *.kueskipay.com *.googletagmanager.com *.mxpnl.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com cdn.jsdelivr.net *.googleadservices.com *.google-analytics.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.tawk.to 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net https://static.hotjar.com https://script.hotjar.com *.kueskipay.com *.googletagmanager.com *.mxpnl.com fonts.gstatic.com unsafe-inline assets.braintreegateway.com *.tawk.to 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com api.conekta.io pay.conekta.com api.digitalfemsa.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com *.kueskipay.com *.doubleclick.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.tawk.to wss://*.tawk.to 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/ https://cse.google.com/ https://www.eventbrite.com/ https://apply.ciis.edu https://apply-ciis-edu.cdn.technolutions.net/ https://slate-technolutions-net.cdn.technolutions.net/ https://fw.cdn.technolutions.net/ https://bbox.blackbaudhosting.com/ https://mx.technolutions.net/ https://player.vimeo.com/ https://www.googletagmanager.com/ https://payments.blackbaud.com/ https://www.gstatic.com/ apply.ciis.edu https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://www.google.com/ https://cse.google.com/ https://www.eventbrite.com/ https://apply.ciis.edu https://apply-ciis-edu.cdn.technolutions.net/ https://slate-technolutions-net.cdn.technolutions.net/ https://fw.cdn.technolutions.net/ https://bbox.blackbaudhosting.com/ https://mx.technolutions.net/ https://player.vimeo.com/ https://www.googletagmanager.com/ https://payments.blackbaud.com/ https://www.gstatic.com/ apply.ciis.edu https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src 'self' 'unsafe-inline' https://use.typekit.net/ https://p.typekit.net/ https://www.google.com/ https://www.eventbrite.com/ https://apply.ciis.edu https://apply-ciis-edu.cdn.technolutions.net/ https://slate-technolutions-net.cdn.technolutions.net/ https://fw.cdn.technolutions.net/ https://bbox.blackbaudhosting.com/ https://mx.technolutions.net/ https://player.vimeo.com/ https://www.googletagmanager.com/ https://payments.blackbaud.com/ https://www.gstatic.com/ cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://use.typekit.net; style-src-attr 'self' 'unsafe-inline'; frame-ancestors 'self' https://www.eventbrite.com/ https://apply.ciis.edu https://apply-ciis-edu.cdn.technolutions.net/ https://slate-technolutions-net.cdn.technolutions.net/ https://fw.cdn.technolutions.net/ https://bbox.blackbaudhosting.com/ https://mx.technolutions.net/ https://player.vimeo.com/ https://www.googletagmanager.com/ https://payments.blackbaud.com/ https://www.gstatic.com/ 1
object-src 'none'; script-src 'self' 'unsafe-inline' https://cdn.consentmanager.net www.etracker.de de.etracker.com https://delivery.consentmanager.net https://use.typekit.net/eho0yem.js cdn.consentmanager.net delivery.consentmanager.ne use.typekit.net c.delivery.consentmanager.net https://doo.net https://www.doo.net https://wirvwsth.pi-asp.de https://widget.surveymonkey.com https://ajax.googleapis.com https://code.etracker.com/code/e.js code.etracker.com/code/e.js https://code.etracker.com/t.js code.etracker.com/t.js https://code.etracker.com/v1/consent-banners/N8Kcr3/icon https://code.etracker.com/v2/consent-banners/N8Kcr3/banner https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://doo.net https://www.doo.net https://wirvwsth.pi-asp.de https://widget.surveymonkey.com https://ajax.googleapis.com https://code.etracker.com/code/e.js code.etracker.com/code/e.js https://code.etracker.com/t.js code.etracker.com/t.js https://code.etracker.com/v1/consent-banners/N8Kcr3/icon https://code.etracker.com/v2/consent-banners/N8Kcr3/banner https://cdnjs.cloudflare.com; frame-ancestors 'self' https://doo.net https://www.doo.net https://wirvwsth.pi-asp.de https://widget.surveymonkey.com https://ajax.googleapis.com 1
default-src 'self' https:; font-src 'self' https: data: https://d3858hfkbmzrt.cloudfront.net; img-src 'self' https: data: blob: https://d3858hfkbmzrt.cloudfront.net; object-src 'none'; script-src 'strict-dynamic' 'self' https: blob: 'unsafe-eval' https://js-agent.newrelic.com https://*.nr-data.net https://*.sdkassets.chime.aws https://d3858hfkbmzrt.cloudfront.net 'nonce-Xw/HVzQqDWlEEihRtowBUQ=='; style-src 'self' https: 'unsafe-inline' https://d3858hfkbmzrt.cloudfront.net 'nonce-Xw/HVzQqDWlEEihRtowBUQ=='; frame-src 'self' blob: https://helloglobo.looker.com https://globo.embed-omniapp.co; manifest-src 'self'; worker-src 'self' blob: https://*.sdkassets.chime.aws; media-src 'self' https: https://d3858hfkbmzrt.cloudfront.net; base-uri 'self'; connect-src 'self' ws: wss: wss://*.pusher.com wss://*.pusherapp.com https://*.pusher.com https://*.twilio.com wss://*.twilio.com https://js-agent.newrelic.com https://*.nr-data.net https://*.chime.aws wss://*.chime.aws https://*.amazonaws.com https://*.sdkassets.chime.aws https://*.realtime.cloudflare.com wss://*.realtime.cloudflare.com 1
default-src 'none' ; img-src 'self' data: https://blob.userflow.com https://cdn.userflow.com https://js.userflow.com https://storage.googleapis.com/studio1-prod-blob/ * ; connect-src 'self' pigment-frames.app sv.pigment-frames.app staging.pigment-frames.app sv.staging.pigment-frames.app https://browser-intake-datadoghq.eu https://rum.browser-intake-datadoghq.eu https://logs.browser-intake-datadoghq.eu https://session-replay.browser-intake-datadoghq.eu https://api.analytics.pigment.app https://cdn.analytics.pigment.app https://auth.pigment.app https://staging-login.pigment.app wss://pigment.app wss://e.userflow.com https://cdn.userflow.com https://e.userflow.com https://js.userflow.com https://rs.fullstory.com wss://rs.fullstory.com https://edge.fullstory.com https://global.oktacdn.com https://api.segment.io https://cdn.segment.com https://api.maptiler.com https://api.vitally-eu.io https://app.vitally-eu.io https://use.typekit.net https://fonts.googleapis.com https://fonts.gstatic.com cdn.vitally-eu.io *.birdie.so wss://*.birdie.so ; script-src 'self' cdn.analytics.pigment.app edge.fullstory.com rs.fullstory.com js.userflow.com cdn.userflow.com cdn.announcekit.app cdn.segment.com cdn.vitally-eu.io *.birdie.so *.front-tools.pigment.app ; frame-src announcekit.co auth.pigment.app staging-login.pigment.app pigment-frames.app sv.pigment-frames.app staging.pigment-frames.app sv.staging.pigment-frames.app staging.pigment.app https://fast.wistia.net pigmentforms.typeform.com *.birdie.so ; style-src 'self' 'unsafe-inline' js.userflow.com cdn.userflow.com fonts.googleapis.com cdn.announcekit.co https://use.typekit.net https://p.typekit.net ; worker-src blob: ; font-src 'self' https://use.typekit.net fonts.gstatic.com data: ; manifest-src 'self' ; object-src 'none' ; media-src https://blob.userflow.com https://cdn.userflow.com https://storage.googleapis.com/studio1-prod-blob/ ; frame-ancestors https://pigment7-dev-ed.develop.lightning.force.com/ https://pigment7-dev-ed--c.develop.vf.force.com/ https://wiki.klarna.net/ ; base-uri 'self' ; form-action https://announcekit.co ; report-uri https://csp-report.browser-intake-datadoghq.eu/api/v2/logs?dd-api-key=pub64383535b37d7304649259d5e5c3e089&dd-evp-origin=content-security-policy&ddsource=csp-report ; report-to report ; 1
script-src 'self' 'unsafe-inline'  blob: https://*.popl.co https://*.googletagmanager.com https://*.google-analytics.com https://cdn.shopify.com https://*.shopifycloud.com https://*.shopifysvc.com https://shop.app https://*.stapecdn.com https://*.clarity.ms https://*.hubspot.com https://*.hsforms.net https://*.hs-scripts.com https://*.hscollectedforms.net https://*.hsadspixel.net https://*.hs-banner.com https://*.hs-analytics.net https://*.intercom.io https://*.intercomcdn.com https://*.zoominfo.com https://*.zi-scripts.com https://*.vector.co https://*.apollo.io https://*.g2crowd.com https://*.chilipiper.com https://*.truevaultcdn.com https://*.openai.com https://connect.facebook.net https://snap.licdn.com https://bat.bing.com https://www.google.com https://www.gstatic.com https://ajax.googleapis.com; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; upgrade-insecure-requests; report-uri https://csp-reports.popl-co.workers.dev; report-to csp-endpoint 1
base-uri 'self'; connect-src 'self' data: https://noembed.com https://www.chatbase.co https://bat.bing.com https://in-automate.brevo.com https://www.facebook.com https://www.googleadservices.com https://maps.googleapis.com https://pagead2.googlesyndication.com https://www.googletagmanager.com https://www.gstatic.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://ad.doubleclick.net https://twebshop.tomas-travel.com https://px.ads.linkedin.com https://analytics.tiktok.com https://cdn.plyr.io https://analytics-ipv6.tiktokw.us https://*.pinterest.com https://*.geneve.com https://*.google.com https://*.google-analytics.com https://*.google.ch https://*.axept.io https://*.clarity.ms https://*.personizely.net; default-src 'self'; font-src 'self' data: https://cdn.scite.ai https://cdn.vev.design https://fonts.gstatic.com https://fonts.axept.io https://assets.personizely.net; frame-src 'self' https:; img-src 'self' data: blob: https:; manifest-src 'self'; media-src 'self'; object-src 'none'; script-src 'self' 'unsafe-eval' inline eval https://www.googletagmanager.com; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' inline https://sibautomation.com https://www.chatbase.co https://bat.bing.com https://cdn.brevo.com https://maps.googleapis.com https://www.googletagmanager.com https://snap.licdn.com https://pixel.mathtag.com https://twebshop.tomas-travel.com https://connect.facebook.net https://www.youtube.com https://s.pinimg.com https://ct.pinterest.com https://analytics.tiktok.com https://cdn.vev.design https://js.vev.design https://embed.vev.page https://io1.eulerian.net https://static.personizely.net https://*.axept.io https://*.clarity.ms https://*.doubleclick.net; script-src-attr 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://twebshop.tomas-travel.com https://fonts.googleapis.com https://fonts.axept.io https://www.gstatic.com; worker-src blob:; report-to csp-endpoint 1
script-src 'self' 'report-sample'; script-src-elem 'self' 'report-sample' https://stat.rouen.fr https://cdnjs.cloudflare.com https://unpkg.com; style-src 'self' 'report-sample' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; form-action 'self'; frame-ancestors 'self'; report-uri https://rouen.fr/fr/log-report-uri/reportOnly 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' https:; connect-src 'self'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com https://www.googletagmanager.com *.googleapis.com *.rab.equipment magento2.docker *.intervieweb.it *.algolia.com *.cloudflare.com *.twitter.com *.fontawesome.com *.bootstrapcdn.com *.klarnaservices.com *.klarna.com *.klarnacdn.net *.rentle.io *.wisepops.net wisepops.net *.wisepops.com wisepops.com feather.rab.equipment *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.storyblok.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.dotdigital-pages.com *.dotdigital.com magento2.docker *.intervieweb.it *.rentle.io *.twitter.com *.wisepops.net wisepops.net *.wisepops.com wisepops.com feather.rab.equipment account.fetchify.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com www.youtube.com *.yotpo.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * *.trackedlink.net *.ddlnk.net https://images.unsplash.com magefan.com cm.magefan.com magento2.docker *.clarity.ms *.rab.equipment *.intervieweb.it *.rentle.io *.klarnaservices.com *.klarna.com *.klarnacdn.net *.algolia.com *.iesnare.com *.locally.com *.cloudflare.com *.googleadservices.com *.google.co.uk *.twitter.com *.wisepops.net wisepops.net *.wisepops.com wisepops.com feather.rab.equipment *.storyblok.com https://cc-cdn.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.adobedtm.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal tagmanager.google.com https://www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com https://*.avln.me/t.js https://developer.adobe.com https://magento.com https://cdn.avmws.com/ http://cdn.avmws.com/ magento2.docker *.rab.equipment *.rentle.io *.intervieweb.it *.klarnaservices.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.trustpilot.com *.algolia.com *.algolia.io *.locally.com *.outtra.com *.cookiefirst.com *.iesnare.com *.cloudflare.com *.twitter.com *.google-analytics.com *.googlesyndication.com googletagmanager.com *.gstatic.com *.trustedshops.com *.fontawesome.com apis.google.com feather.rab.equipment gtm.rab.equipment gtm.mcstaging.rab.equipment *.polyfill-fastly.io polyfill-fastly.io *.clarity.ms *.wisepops.net wisepops.net *.wisepops.com wisepops.com *.storyblok.com cc-cdn.com https://cc-cdn.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com www.youtube.com player.vimeo.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.rab.equipment magento2.docker *.intervieweb.it *.rentle.io *.algolia.com *.outtra.com *.locally.com *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.fontawesome.com *.bootstrapcdn.com *.klarnaservices.com *.klarna.com *.klarnacdn.net *.cookiefirst.com *.wisepops.net wisepops.net *.wisepops.com wisepops.com feather.rab.equipment *.storyblok.com cc-cdn.com assets.braintreegateway.com *.yotpo.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.intervieweb.it magento2.docker *.klarnaservices.com *.klarna.com *.klarnacdn.net *.algolia.com *.iesnare.com *.locally.com 'self' data: *.rab.equipment *.rentle.io *.wisepops.net wisepops.net *.wisepops.com wisepops.com feather.rab.equipment *.amazonaws.com *.googleapis.com *.google.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://maps.googleapis.com https://player.vimeo.com https://developer.adobe.com https://cdn.avmws.com/ http://cdn.avmws.com/ magento2.docker *.intervieweb.it *.rentle.io *.klarnaevt.com *.klarnaservices.com *.klarna.com *.klarnacdn.net *.algolia.io *.locally.com *.outtra.com wss://mpsnare.iesnare.com *.iesnare.com *.cloudflare.com *.twitter.com *.googlesyndication.com *.doubleclick.net *.cookiefirst.com *.clarity.ms *.wisepops.net wisepops.net *.wisepops.com wisepops.com feather.rab.equipment api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com *.hub-box.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com cdn.plyr.io noembed.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'sha256-GFDoNbUy6v1iXvSaaJ8Ol4hhTBcBu8kFzEd4XNm+KHQ=' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' blob: data: https://*.carcode.com https://*.edmunds.com https://www.google-analytics.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.carcode.com wss://*.carcode.com https://*.nr-data.net https://log-api.newrelic.com https://www.googletagmanager.com https://www.google-analytics.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-gYhBlEBuWfx6IuPfTHxnvA' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' www.resellerratings.com www.paypal.com cdn.attn.tv s.yimg.com static.klaviyo.com cdn-tp4.mozu.com/27977-44902/ t.contentsquare.net ajax.googleapis.com www.googleadservices.com bat.bing.com www.google.com www.googletagmanager.com live-chat.chatbotize.com d2gh7vqn9p1ieu.cloudfront.net www.res-x.com resources.xg4ken.com polaris.truevaultcdn.com pay.google.com www.paypalobjects.com challenges.cloudflare.com googleads.g.doubleclick.net cdn.sift.com www.google-analytics.com www.mczbf.com acsbapp.com s3-us-west-2.amazonaws.com maps.googleapis.com www.clarity.ms static-tracking.klaviyo.com b-code.liadm.com sv.calendars.com edge1.certona.net services.xg4ken.com connect.facebook.net se.monetate.net cdn-tp4.mozu.com cdn.equalweb.com access.equalweb.com; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=P5ziZ7Na8pkjCy940grtmb4TmavXZyuDpxeywpVT7I4-1789269518.5168748-1.0.1.1-Ii1a1ZgInwQjsCKN7VbhYeIyCgYdjvmwXdNgqgtvXtg9kjwuYzQ7uHVgoNN_sUfiKHy49TUlYpKnjXJq47SRntoTeUOeLg.B0slTsfhzvajSWO46yokftvolCJX_F.BF.Da0lJojqaYEgXlEsYFN4ozwrLKlW5VbzWpfv2NkkJ9i9w_C28AR03.i8hxhl7QSr7zevRiCDCGcCAP3btu4Jw; report-to cf-ftbpsapmlbgbociq 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://analytics.tiktok.com https://script.hotjar.com https://static.hotjar.com https://scripts.clarity.ms https://www.clarity.ms https://sp.vtex.com https://bat.bing.com https://s.lilstts.com https://storage.googleapis.com https://cdn.trinio.co https://www.dwin1.com https://lantern.roeyecdn.com https://snap.licdn.com https://110004423.collect.igodigital.com https://api.weclever.co https://sdk.crmback.io https://googleads.g.doubleclick.net https://bzrcdn.openai.com https://www.googleadservices.com; img-src 'self' data: https: blob:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https://www.googletagmanager.com https://*.firebaseapp.com https://checkout.trinio.co https://*.fls.doubleclick.net; media-src 'self' https:; object-src 'none'; base-uri 'self'; report-uri /_csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.bugherd.com *.cloudfront.net data: *.hotjar.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com accounts.google.com *.hotjar.com www.facebook.com live.sagepay.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com img.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.bird.eu bugherd-attachments.s3.amazonaws.com *.cloudfront.net bat.bing.com www.google.co.uk stats.g.doubleclick.net maps.gstatic.com maps.googleapis.com www.facebook.com *.cdninstagram.com services.postcodeanywhere.co.uk ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ accounts.google.com www.bugherd.com *.cloudfront.net bat.bing.com www.google.com www.gstatic.com maps.googleapis.com *.hotjar.com chimpstatic.com connect.facebook.net pi-test.sagepay.com services.postcodeanywhere.co.uk *.pcapredict.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.disqus.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com accounts.google.com *.cloudfront.net fast.fonts.net *.typekit.net services.postcodeanywhere.co.uk downloads.mailchimp.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com accounts.google.com www.bugherd.com sessions.bugsnag.com wss://ws.pusherapp.com *.pusher.com www.google.co.uk stats.g.doubleclick.net www.google-analytics.com *.hotjar.com *.hotjar.io www.facebook.com graph.instagram.com services.postcodeanywhere.co.uk form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
report-to https://r4com.report-uri.io/r/default/csp/reportOnly 1
script-src 'sha256-tJ3sArnBO7E0uAWnS89WL5F//pHyRpUxCDg8Ax9OheU=' 'self' self unsafe-eval *.criteo.com; style-src self unsafe-eval; report-uri https://0771da0b-b592-4245-a1e0-f93423ca942b.sansec.watch/ 1
connect-src 'self' data: https://www.motonet.se https://graphql.datocms.com https://*.doubleclick.net https://www.instagram.com https://*.broman.group https://*.litix.io https://vimeo.com https://*.adyen.com/checkoutanalytics/ https://*.adyen.com/checkoutshopper/ https://api.checkout.uat.walleydev.com/checkout/ https://api.checkout.walleypay.com/checkout/ https://api.postmarkapp.com https://www.youtube.com https://api.videoly.co https://js.testfreaks.com https://api.testfreaks.com https://reviews.testfreaks.com https://policy.app.cookieinformation.com https://consent.app.cookieinformation.com/api/consent https://api.custobar.com https://*.google-analytics.com https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ https://*.googlesyndication.com https://*.adform.net https://*.creativecdn.com https://connect.facebook.net https://browser-intake-datadoghq.eu  https://*.broman.group https://*.cdn.adyen.com/checkoutshopper/ https://i.ytimg.com https://www.datocms-assets.com https://stagingaksapimanagementbroman.azure-api.net https://testapimanagementbroman.azure-api.net https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com https://*.mux.com https://*.vimeocdn.com https://dapi.videoly.co https://*.facebook.com https://*.seadform.net https://*.adform.net https://*.criteo.net https://*.criteo.com https://www.googletagmanager.com/ https://ib.adnxs.com/setuid https://ib.adnxs.com/getuid https://cm.g.doubleclick.net https://qr.motonet.se https://embed.upseller.cloud https://cm4-production-assets.s3.amazonaws.com/ https://general-runtime.voiceflow.com https://runtime-api.voiceflow.com https://embed.upseller.cloud https://upseller-analytics.vercel.app wss://general-runtime.voiceflow.com wss://runtime-api.voiceflow.com wss://embed.upseller.cloud https://*.googletagmanager.com https://eu.fw-cdn.com https://*.freshchat.com/ https://src.freshmarketer.eu/mas https://*.giosg.com https://*.interactions.giosgusercontent.com; img-src 'self' data: https://www.datocms-assets.com https://i.ytimg.com https://image.mux.com https://*.broman.group https://*.cdn.adyen.com/checkoutshopper/ https://i.ytimg.com https://www.datocms-assets.com https://stagingaksapimanagementbroman.azure-api.net https://testapimanagementbroman.azure-api.net https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com https://*.mux.com https://*.vimeocdn.com https://dapi.videoly.co https://*.facebook.com https://*.seadform.net https://*.adform.net https://*.criteo.net https://*.criteo.com https://www.googletagmanager.com/ https://ib.adnxs.com/setuid https://ib.adnxs.com/getuid https://cm.g.doubleclick.net https://qr.motonet.se https://embed.upseller.cloud https://cm4-production-assets.s3.amazonaws.com/; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://checkout.uat.walleydev.com/ https://checkout.walleypay.com/ https://*.adyen.com/ https://*.vimeo.com https://app.ecoonline.com https://www.maston.fi https://websds.volvo.com https://policy.app.cookieinformation.com/ https://*.criteo.com https://*.adform.net https://*.creativecdn.com https://www.facebook.com https://www.gatestechzone.com https://staging-cdn.broman.group https://cdn.motonet.fi https://embed.upseller.cloud https://*.googletagmanager.com https://eu.fw-cdn.com https://*.freshchat.com https://*.giosg.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.broman.group https://maps.googleapis.com https://api.walleypay.com/walley-checkout-loader.js https://api.videoly.co/1/quchbox/0/5257/quch.js https://www.paypal.com/sdk/js https://dapi.videoly.co https://www.youtube.com https://*.vimeo.com https://policy.app.cookieinformation.com https://script.custobar.com https://*.criteo.net https://*.criteo.com https://*.adform.net https://connect.facebook.net https://tags.creativecdn.com https://embed.upseller.cloud https://cdn.voiceflow.com https://*.googletagmanager.com https://eu.fw-cdn.com https://*.freshchat.com https://*.giosg.com https://globalcdn.interactiondesigner.giosg.com; object-src data:; worker-src 'self' blob:; 1
font-src cdn.jsdelivr.net fonts.gstatic.com cdn.almapay.com *.gstatic.com *.sensefuel.live *.clarity.ms *.cookiebot.com *.facebook.com *.facebook.net *.flockler.com *.flockler.app instant.page babylux.customer.voyado.com *.fontawesome.com https://fonts.bunny.net https://cdnjs.cloudflare.com 'self' data: data: 'self' 'unsafe-inline'; form-action https://www.baby-lux.com/ https://www.babylux.be/fr/ https://www.babylux.nl/ https://www.babylux.be/nl/ pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src https://www.baby-lux.com/ https://www.babylux.be/fr/ https://www.babylux.nl/ https://www.babylux.be/nl/ bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com *.youtube-nocookie.com *.getalma.eu *.almapay.com/ *.stripe.com/ *.checkout.com/ *.adyen.com/ widget.trustpilot.com maps.google.com *.clarity.ms *.facebook.com *.facebook.net *.cookiebot.com *.pinterest.com *.doubleclick.net *.googletagmanager.com *.flockler.com *.flockler.app instant.page babylux.customer.voyado.com *.sendcloud.sc *.jsdelivr.net challenges.cloudflare.com js.mollie.com www.google.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.doubleclick.net *.lorempixel.com *.google.com *.google.be *.gstatic.com *.googleapis.com *.babylux.nl *.babylux.be *.baby-lux.com *.clarity.ms *.googletagmanager.com *.google-analytics.com *.facebook.com *.facebook.net *.cookiebot.com *.pinterest.com placehold.co *.getsitecontrol.com *.flockler.com *.flockler.app instant.page babylux.customer.voyado.com *.amazonaws.com ssl.gstatic.com www.gstatic.com *.disqus.com https://img.youtube.com https://firebasestorage.googleapis.com https://www.mollie.com *.hsforms.net *.hsforms.com 'self' data: www.google.com.ua data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com cdn.jsdelivr.net *.sensefuel.live *.cloudflare.com *.g.doubleclick.net *.googletagmanager.com widget.trustpilot.com *.googleapis.com *.tpc.googlesyndication.com *.clarity.ms *.google-analytics.com *.googleadservices.com *.google.com *.facebook.com *.facebook.net *.cookiebot.com *.pinimg.com *.getsitecontrol.com *.flockler.com *.flockler.app instant.page babylux.customer.voyado.com static.redeal.se assets.voyado.com *.sendcloud.sc *.jsdelivr.net challenges.cloudflare.com tagmanager.google.com *.disqus.com *.avada.io js.mollie.com https://cdnjs.cloudflare.com www.gstatic.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src cdn.jsdelivr.net fonts.googleapis.com *.sensefuel.live *.clarity.ms *.cookiebot.com *.googletagmanager.com *.facebook.com *.facebook.net *.flockler.com *.flockler.app instant.page babylux.customer.voyado.com *.sendcloud.sc *.jsdelivr.net tagmanager.google.com fonts.google.com *.fontawesome.com https://fonts.bunny.net https://fonts.googleapis.com https://cdnjs.cloudflare.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com vimeo.com *.getalma.eu *.almapay.com *.google-analytics.com *.analytics.google.com *.doubleclick.net *.sensefuel.live *.googleapis.com *.clarity.ms *.googletagmanager.com *.cookiebot.com *.google.com google.com cdn.jsdelivr.net *.pinterest.com *.getsitecontrol.com *.getsitectrl.com *.flockler.com *.flockler.app instant.page babylux.customer.voyado.com *.redeal.se api.onsite.voyado.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com https://get.geojs.io *.avada.io t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://83f99021-b14f-47b7-8ca8-7d59ce24ff4f.sansec.watch/; report-to report-endpoint; 1
worker-src *.noibu.com wss://*.noibu.com; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com 'self' data: p.typekit.net static.klaviyo.com libs.intiaro.com likeshop.me data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com *.certcapture.com https://webchat.mitel.io https://*.nice-incontact.com https://cxone.niceincontact.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.certcapture.com *.googleapis.com cdn.metalocator.com cdn.brandfolder.io log.pinterest.com cdn.cookielaw.org https://images.dashsocial.com https://likeshop.me https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.certcapture.com *.gstatic.com *.googleapis.com use.fontawesome.com js-agent.newrelic.com bam.nr-data.net bam-cell.nr-data.net code.metalocator.com assets.pinterest.com libs.intiaro.com cdn.dashhudson.com cdn.cookielaw.org sec.webeyez.com js.hellomedian.com *.noibu.com wss://*.noibu.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://webchat.mitel.io https://*.nice-incontact.com https://cxone.niceincontact.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com https://js-agent.newrelic.com https://cdn.visenze.com https://home-c61.nice-incontact.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.gstatic.com *.googleapis.com use.fontawesome.com use.typekit.net p.typekit.net libs.intiaro.com https://static.klaviyo.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.certcapture.com *.gstatic.com *.googleapis.com bam.nr-data.net bam-cell.nr-data.net analytics.data.visenze.com api.likeshop.me search.visenze.com kravet.prinpay.com wss://wss.public-api.intiaro.com cdn.cookielaw.org hlg.tokbox.com wss://socket.hellomedian.com app.hellomedian.com *.noibu.com wss://*.noibu.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri /_csp/report; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.klevu.com *.ksearchnet.com *.cloudflare.com *.googleapis.com *.zopim.com *.tawk.to *.jsdelivr.net media.flixfacts.com 'unsafe-inline' data: data: 'self' 'unsafe-inline'; frame-ancestors *.hana.ondemand.com 'self'; img-src widgets.magentocommerce.com 'unsafe-inline' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.klevu.com *.ksearchnet.com oppwa.com *.oppwa.com *.peachpayments.com *.eu-west-1.amazonaws.com *.cloudflare.com *.google.com *.google.lv *.google.co.za *.google.com.na *.google.na *.zopim.com *.nosto.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.zopim.io *.sfdr.co sfdr.co *.tawk.to tawk.link *.tawk.link *.addthis.com *.jsdelivr.net *.facebook.com *.azurewebsites.net maps.googleapis.com app.mobicredwidget.co.za amcglobal.sc.omtrdc.net media.flixcar.com rt.flix360.com assets.secure.checkout.visa.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://browser.sentry-cdn.com js.klevu.com *.ksearchnet.com landofcoder.com maps.googleapis.com chart.googleapis.com *.oppwa.com oppwa.com *.peachpayments.com *.zopim.com *.videoly.co sfdr.co *.cnetcontent.com *.cloudfront.net *.newrelic.com *.klevu.com *.google.lv *.google.co.za *.google.com.na *.google.na *.cloudflare.com *.cloudflareinsights.com *.nosto.com *.hotjar.com *.googletagmanager.com *.criteo.net *.criteo.com *.sfdr.co *.tawk.to *.tawk.link *.jsdelivr.net *.addthis.com *.addthisedge.com *.moatads.com *.mouseflow.com *.nr-data.net *.facebook.com *.what3words.com commerce.adobedtm.com magento-recs-sdk.adobe.net static.zdassets.com app.mobicredwidget.co.za www.gstatic.com connect.facebook.net bam.nr-data.net js.testfreaks.com media.flixfacts.com media.flixcar.com security-hub.vaimo.network https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.klevu.com *.ksearchnet.com oppwa.com *.oppwa.com *.peachpayments.com *.cloudflare.com *.googleapis.com *.jsdelivr.net www.gstatic.com media.flixcar.com 'unsafe-inline' data: https://js.klevu.com https://www.adendorff.co.za 'self' 'unsafe-inline'; object-src landofcoder.com maps.googleapis.com chart.googleapis.com 'self' 'unsafe-inline'; media-src *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://*.ingest.sentry.io *.klevu.com *.ksearchnet.com landofcoder.com maps.googleapis.com chart.googleapis.com oppwa.com *.oppwa.com *.peachpayments.com *.testfreaks.com *.nosto.com *.hotjar.io *.hotjar.com *.doubleclick.net *.zendesk.com *.tawk.to wss://*.tawk.to *.tawk.link *.addthis.com *.addthisedge.com *.nr-data.net *.what3words.com *.googleapis.com vsb111.tawk.to ekr.zdassets.com api.magento.com commerce.adobedc.net app.mobicredwidget.co.za wss://widget-mediator.zopim.com bam.nr-data.net *.googletagmanager.com security-hub.vaimo.network 'unsafe-eval' data: 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; form-action *.cognitoforms.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://secure.paygate.co.za/payweb3/process.trans oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com *.facebook.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; frame-src *.cognitoforms.com *.peachpayments.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com landofcoder.com maps.googleapis.com chart.googleapis.com oppwa.com *.oppwa.com peachpayments.com *.nosto.com *.issuu.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.criteo.net *.criteo.com *.addthis.com *.facebook.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; 1
default-src 'self' https://*.alltuu.live https://*.alltuu.site https://alltuu-frontend-log-tracking.cn-hangzhou.log.aliyuncs.com https://alltuu-frontend-log.cn-hangzhou.log.aliyuncs.com https://www.gstatic.com https://alltuu-help-video.oss-cn-shanghai.aliyuncs.com https://open.work.weixin.qq.com https://cdn.jsdelivr.net https://cdnjs.cloundflare.com https://gw.alipayobjects.com https://lf1-cdn-tos.bytegoofy.com https://alltuu.cc https://alltuu.pw https://alltuu.co https://alltuu.tv https://s9.cnzz.com https://zz.bdstatic.com https://v1.cnzz.com https://g.alicdn.com https://mp.weixin.qq.com https://res.wx.qq.com https://open.weixin.qq.com https://turing.captcha.qcloud.com https://sp0.baidu.com/ https://turing.captcha.gtimg.com https://at.alicdn.com https://wx.gtimg.com/ https://cdn.yiban.io https://lf-flow-web-cdn.doubao.com data: blob: https://*.alltuu.ren https://*.alltuu.com https://*.vphant.com 'unsafe-eval' 'unsafe-inline'; report-uri https://csp-page.alltuu.com;connect-src 'self' https://*.alltuu.live https://*.captcha-open-southeast.aliyuncs.com/ https://mcs.snssdk.com https://alltuu-storage.oss-accelerate.aliyuncs.com https://alltuu-prsoon-private.oss-cn-hangzhou.aliyuncs.com https://aegis.qq.com https://mp.weixin.qq.com/ https://alltuu-msg.cn-hangzhou.log.aliyuncs.com/ https://alltuu-flashapp.cn-hangzhou.log.aliyuncs.com https://ai-platform-data-analysis.cn-hangzhou.log.aliyuncs.com https://ai-data-analysis.cn-hangzhou.log.aliyuncs.com https://*.alltuu.com wss://*.alltuu.com https://alltuu-frontend-log.cn-hangzhou.log.aliyuncs.com https://videocloud.cn-hangzhou.log.aliyuncs.com https://alltuu-storage.oss-cn-hangzhou.aliyuncs.com https://alltuu-frontend-log-tracking.cn-hangzhou.log.aliyuncs.com https://*.vphant.com data: blob:;frame-src 'self' dxwebview: https://* blob: data: ; 1
frame-ancestors 'self' goldcoast.admin.opencities.com www.goldcoast.qld.gov.au;  1
font-src *.zip.co *.iyzipay.com *.gstatic.com *.cloudfront.net *.checkout.com data: 'self' 'unsafe-inline';frame-ancestors 'self';frame-src *.tradedoubler.com *.googletagmanager.com *.teads.tv *.demdex.net *.euw2.pure.cloud 'self' 'unsafe-inline';img-src *.dyson.vn *.google.co.in *.google.com *.boldchat.com *.googleadservices.com *.dyson.com *.zip.co *.bazaarvoice.com *.teads.tv *.facebook.com *.boltdns.net *.brightcove.com *.afterpay.com *.doubleclick.net *.everesttech.net *.omtrdc.net *.googletagmanager.com *.demdex.net *.everesttech.net *.euw2.pure.cloud *.assetsadobe2.com *.amazonaws.com *.adobe.com *.google-analytics.com *.riskified.com data: 'self' 'unsafe-inline';script-src *.go-mpulse.net *.tamara.co *.paypal.com *.paypalobjects.com *.zencdn.net *.zipmoney.com.au *.afterpay.com *.facebook.net *.teads.tv *.brightcove.net *.tiktok.com *.googletagmanager.com *.dynatrace.com *.go-mpulse.net *.googletagmanager.com *.boldchat.com *.newrelic.com *.googleapis.com *.google-analytics.com *.adobedtm.com *.bazaarvoice.com *.optimizely.com *.nr-data.net *.newrelic.com *.euw2.pure.cloud blob: 'self' 'unsafe-inline' 'unsafe-eval';style-src *.zip.co *.checkout.com *.gstatic.com *.googleapis.com *.optimizely.com 'self' 'unsafe-inline';object-src *.euw2.pure.cloud 'self' 'unsafe-inline';child-src *.euw2.pure.cloud blob: 'self' 'unsafe-inline';media-src *.dyson.com *.s3.amazonaws.com *.assetsadobe.com *.euw2.pure.cloud blob: 'self' 'unsafe-inline';manifest-src 'self' 'unsafe-inline';connect-src *.boldchat.com *.paypal.com *.bazaarvoice.com *.googleadservices.com *.breezometer.com *.accuweather.com *.teads.tv *.pangle-ads.com *.akamaihd.net *.boltdns.net *.brightcove.com *.cloudfront.net *.dynatrace.com *.tiktok.com *.dyson.vn *.doubleclick.net *.google-analytics.com *.go-mpulse.net *.google.com *.omtrdc.net *.demdex.net *.nr-data.net *.amazonaws.com *.newrelic.com *.euw2.pure.cloud 'self' 'unsafe-inline';base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self' https://mastercardfoundation.activehosted.com; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' https://unpkg.com https://api.mapbox.com https://www.googletagmanager.com https://snap.licdn.com; style-src 'self' 'unsafe-inline' https://unpkg.com https://api.mapbox.com; img-src 'self' data: blob: https://cdn.buttercms.com https://img.youtube.com https://api.mapbox.com https://px.ads.linkedin.com https://www.googletagmanager.com; font-src 'self' data:; media-src 'self' https://cdn.buttercms.com; worker-src 'self' blob:; connect-src 'self' https://cdn.buttercms.com https://api.mapbox.com https://events.mapbox.com https://www.googletagmanager.com https://www.google-analytics.com https://px.ads.linkedin.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://play.libsyn.com https://www.facebook.com https://td.doubleclick.net; upgrade-insecure-requests 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com cdnjs.cloudflare.com www.google.cl cdn-mz-gj-vai.verificado.ai *.googletagmanager.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.facebook.com *.googletagmanager.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io assets.fintoc.com https://assets.fintoc.com repuestosboston.cl *.repuestosboston.cl repuestosboston.improntus.cl *.google.com *.google.com.ar *.bing.com *.clarity.ms www.facebook.com www.google.cl cdn-mz-gj-vai.verificado.ai *.googletagmanager.com fonts.gstatic.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.facebook.com *.clarity.ms static.cloudflareinsights.com connect.facebook.net *.adobedtm.com www.gstatic.com unpkg.com cdn-mz-gj-vai.verificado.ai stats.g.doubleclick.net www.clarity.ms cdnjs.cloudflare.com ajax.cloudflare.com repuestosboston.cl *.repuestosboston.cl *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.oct8ne.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com cdn-mz-gj-vai.verificado.ai cdnjs.cloudflare.com *.typekit.net *.repuestosboston.cl *.googletagmanager.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.facebook.com *.octane.com *.clarity.ms api.verificado.ai *.repuestosboston.cl analytics.google.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.google-analytics.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src bam.nr-data.net www.google.com commerce.adobedc.net repuestosboston.cl *.repuestosboston.cl www.google.cl 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.google-analytics.com https://*.consentmanager.net https://c.delivery.consentmanager.net https://cdn.consentmanager.net https://*.hsforms.net https://*.hsforms.com https://*.hubspot.com https://*.hs-scripts.com https://*.hs-analytics.net https://*.hs-banner.com https://js.usemessages.com https://app.storyblok.com https://*.visualwebsiteoptimizer.com https://www.youtube.com https://s.ytimg.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.google-analytics.com https://*.consentmanager.net https://c.delivery.consentmanager.net https://cdn.consentmanager.net https://*.hsforms.net https://*.hsforms.com https://*.hubspot.com https://*.hs-scripts.com https://*.hs-analytics.net https://*.hs-banner.com https://js.usemessages.com https://app.storyblok.com https://*.visualwebsiteoptimizer.com https://www.youtube.com https://s.ytimg.com https://connect.facebook.net https://rns.matelso.de https://bat.bing.com https://snap.licdn.com https://amplify.outbrain.com https://www.clarity.ms https://trck.spoteffects.net https://js.hscollectedforms.net https://googleads.g.doubleclick.net https://scripts.clarity.ms https://wave.outbrain.com https://tr.outbrain.com https://cdn.docmedico-rezeption.de; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://p.typekit.net https://use.typekit.net; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://p.typekit.net https://use.typekit.net; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://use.typekit.net; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://api.hsforms.com https://*.hubspot.com https://*.hsforms.com https://app.storyblok.com https://api.storyblok.com https://a.storyblok.com https://api.friendlycaptcha.com https://eu-api.friendlycaptcha.eu https://global.frcapi.com https://*.consentmanager.net https://*.visualwebsiteoptimizer.com https://ad.doubleclick.net https://www.google.com https://k.clarity.ms https://capig.stape.pro https://px.ads.linkedin.com https://forms.hscollectedforms.net https://bat.bing.com https://tr.outbrain.com https://rns.matelso.de https://stats.g.doubleclick.net https://video.smileeyes.de; frame-src 'self' https://www.googletagmanager.com https://*.hsforms.com https://www.youtube.com https://www.youtube-nocookie.com https://app.storyblok.com https://*.consentmanager.net https://global.frcapi.com https://embed.docmedico-rezeption.de https://online.arzttermin-widget.de https://cdn.knightlab.com https://gtm.smileeyes.de; frame-ancestors 'self'; form-action 'self' https://*.hsforms.com; object-src 'none'; base-uri 'self'; upgrade-insecure-requests 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://components-bnpl-pe-bbva-moprestamo-com.s3.amazonaws.com data: *.fontawesome.com fonts.googleapis.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com static.zdassets.com www.gstatic.com script.hotjar.com static.hotjar.com googleadservices.com maps.googleapis.com/ webpay3g.transbank.cl webpay3gint.transbank.cl *.google.com 'self' 'unsafe-inline'; frame-ancestors static.zdassets.com www.gstatic.com static.hotjar.com script.hotjar.com googleadservices.com maps.googleapis.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.moprestamo.com cdn.dnky.co amc.demdex.net www.google.com www.facebook.com youtube.com challenges.cloudflare.com https://accounts.google.com *.izipay.pe connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com vars.hotjar.com *.doubleclick.net *.pinterest.com *.tryadviser.com *.webviewer.appar.io *.paperless.com.pe *.extranetrosen.cl api.empathy.co static-content.vnforapps.com 'self' 'unsafe-inline'; img-src 'self' data: *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.moprestamo.com maps.gstatic.com maps.googleapis.com accounts.google.com www.facebook.com magefan.com cm.magefan.com connect.facebook.net graph.facebook.com business.facebook.com banco.santander.cl static.placetopay.com www.placetopay.com www.extranetrosen.cl *.hsforms.com track.hubspot.com www.google.com.pe static.zdassets.com www.gstatic.com static.hotjar.com script.hotjar.com *.pinterest.com *.sendtric.com *.tryadviser.com *.adnxs.com *.linkedin.com *.doubleclick.net *.rosen.cl *.rosen.com.pe *.sonataplatform.com *.googleadservices.com cdn.ckeditor.com google.com.ar https://www.mercadopago.com.pe https://www.google.com.ar https://www.google.es data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.dpm.demdex.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.moprestamo.com cdn.dnky.co r1-t.trackedlink.net www.gstatic.com js-agent.newrelic.com bam.nr-data.net maps.googleapis.com connect.facebook.net player.vimeo.com challenges.cloudflare.com *.izipay.pe www.facebook.com graph.facebook.com business.facebook.com www.extranetrosen.cl static.zdassets.com js.hs-scripts.com js.hs-analytics.net js.hscollectedforms.net js.hs-banner.com www.googleoptimize.com static.hotjar.com *.google.cl script.hotjar.com js.hsleadflows.net *.pinimg.com www.youtube.com *.tryadviser.com *.adnxs.com *.hsadspixel.net *.verificado.ai api.verificado.ai snap.licdn.com *.google-analytics.com *.commerce.adobe.net *.magento.com *.hscollectedforms.net *.doubleclick.net *.omtrdc.net *.googletagmanager.com *.rosen.cl *.rosen.com.pe *.sonataplatform.com *.mouseflow.com *.hubspot.com *.vnforapps.com rum.hlx.page dev.visualwebsiteoptimizer.com data.appar.io *.pinterest.com https://maps.googleapis.com *.gstatic.com api.empathy.co cdn.ckeditor.com/ pinterest.com https://www.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.moprestamo.com cdn.dnky.co https://accounts.google.com *.fontawesome.com *.rosen.cl *.rosen.com.pe www.extranetrosen.cl *.tryadviser.com *.googleapis.com *.gstatic.com fonts.googleapis.com/ cdn.ckeditor.com/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com maps.googleapis.com api.comapi.com bam.nr-data.net https://accounts.google.com *.izipay.pe *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com static.zdassets.com v2.zopim.com ekr.zdassets.com rollbar-eu.zendesk.com wa.me *.hubspot.com stats.g.doubleclick.net rosen.zendesk.com wss://widget-mediator.zopim.com *.hotjar.com vc.hotjar.io www.facebook.com public.delivery.janisqa.in public.delivery.janis.in *.google.cl *.pinterest.com wss://*.hotjar.com *.hscollectedforms.net *.hubapi.com *.amazonaws.com *.amazon.com *.zendesk.com *.linkedin.com ad.doubleclick.net dev.visualwebsiteoptimizer.com api.empathy.co maps.googleapis.com/ *.visualwebsiteoptimizer.com http://localhost:12387 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=cgfNEdcpX1cn7xxcLCPUrn_eYnOINDLojscYid4MwH8-1789277231.6764162-1.0.1.1-qeuDPYyZ2XWirUjgQmeUf.d.J00JjAs2I7cDGe3KZWoHgjRgqGGvN2dGFUVEeCVEC7HaQOv3l4iLrxIpH_VXGsBiq_.I1zXcrmo8g6dxfdBW2weV_yAKVdx6a5PuVZCO6E_SOwcUECBmJOvJ7cSWdl9O2FZ2VE_u59Sh.l7dJYPIAPEdVxgUb180NalsIAz0; report-to cf-csp-endpoint 1
img-src *.force.com slack-imgs-mil-dev.com 'self' https://img.youtube.com https://payments.salesforce.com/icons/ https://login.salesforce.com/icons/ https://www.gstatic.com *.slack-edge-gov.com *.my-salesforce.com *.cloudinary.com static.lightning.force.com https://www.kdpcommunity.com *.slack-gov.com blob: *.slack-gov-dev.com https://indiecommunity.my.salesforce.com https://completion.amazon.com slack-imgs.com *.sfdcstatic.com *.twimg.com https://testdata.coremetrics.com a.static.lightning.force.com *.slack.com https://www.paypal.com https://images-na.ssl-images-amazon.com https://www.abebooks.com *.slack-imgs.com slack-imgs-gov.com https://usa856.sfdc-yfeipo.salesforce.com/icons/ https://i.ytimg.com https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/icons/ *.salesforce-experience.com https://indiecommunity.file.force.com slack-imgs-gov-dev.com *.slack-edge.com https://cdn.content.aws-prod1-useast1.aws.sfdc.cl/icons/ slack-mil-dev.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.slack-edge.mil https://www.sandbox.paypal.com https://kdpcommunity.com https://assets.prod.abebookscdn.com b.static.lightning.force.com https://i.vimeocdn.com static.sandbox.lightning.force.com *.salesforce.com https://*.adyen.com slack-imgs.mil data:; report-to sfdc-csp-ep; report-uri https://indiecommunity.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00Df4000001cwvQ&networkId=0DMf4000000gttr&type=communities 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' blob: data: https:; style-src 'self' 'unsafe-inline' blob: data: https:; default-src 'self' https:; img-src https: blob: data: android-webview-video-poster:; frame-src blob: data: https:; worker-src blob: data: https:; child-src blob: data: https:; object-src 'self'; font-src 'self' https: blob: data: safari-extension://*; media-src 'self' blob: data: https:; connect-src wss: blob: data: https:; report-uri /csp_ep 1
default-src 'self' ; img-src data: *; script-src 'unsafe-inline' 'unsafe-eval' * blob:; font-src data: 'unsafe-inline' *; style-src 'unsafe-inline' *; media-src * blob:; report-uri https://www.senate.be/_csp 1
default-src 'self'; script-src 'self' 'nonce-KEGbDC1uJ8Q92D8I5cXZtbjHpklwSUfv9F1u6xjfl8Y177dAkc9x-w' data: https://*.openstreetmap.org 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://*.openstreetmap.org https://*.typo3.org https://*.tile.openstreetmap.org https://bitvtest.de; base-uri 'self'; frame-src 'self' https://www.youtube-nocookie.com https://lecture2go.ostfalia.de; connect-src 'self' data: https://*.openstreetmap.org https://matomo.ostfalia.de; worker-src blob: 'report-sample'; style-src 'self' 'unsafe-inline' 'report-sample'; script-src-elem 'self' 'nonce-KEGbDC1uJ8Q92D8I5cXZtbjHpklwSUfv9F1u6xjfl8Y177dAkc9x-w' data: https://*.openstreetmap.org https://matomo.ostfalia.de 'report-sample'; report-uri https://www.ostfalia.de/@http-reporting?csp=report&requestTime=1789281431946001&requestHash=2a3125c05383205670d7f944671f5bb2c62762a1 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.googletagmanager.com *.google-analytics.com *.doubleclick.net *.google.com www.google.com *.gstatic.com www.gstatic.com *.facebook.net *.facebook.com *.hotjar.com *.licdn.com *.linkedin.com *.ads-twitter.com *.twitter.com t.co *.zoominfo.com *.tradingview.com *.hubspot.com *.hubapi.com *.hubspot.net *.hsforms.net *.hsforms.com *.hs-banner.com *.hs-analytics.net *.hs-scripts.com *.hsadspixel.net *.hscollectedforms.net *.hsleadflows.net *.hubspotfeedback.com *.usemessages.com *.hscta.net static.hsappstatic.net feedback.hubapi.com feedback-eu1.hubapi.com *.hubspotusercontent-na1.net *.hubspotusercontent-eu1.net *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.rive.com *.unpkg.com unpkg.com code.jquery.com *.onetrust.com cdn.cookielaw.org *.cloudflare.com challenges.cloudflare.com *.lfeeder.com; style-src 'self' 'unsafe-inline' cdn2.hubspot.net static.hsappstatic.net *.hubspotusercontent-na1.net *.hubspotusercontent-eu1.net *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.onetrust.com cdn.cookielaw.org *.cloudflare.com *.unpkg.com unpkg.com fonts.googleapis.com; img-src 'self' https: data: blob:; connect-src 'self' https: wss:; frame-src 'self' blob: *.hubspot.com *.hubspot.net *.hs-sites.com *.hs-sites-eu1.com *.hsforms.net *.hsforms.com play.hubspotvideo.com play-eu1.hubspotvideo.com *.doubleclick.net *.facebook.com *.hotjar.com *.tradingview.com *.google.com www.google.com *.google.co.in www.google.co.in www.youtube.com www.youtube-nocookie.com *.twitter.com challenges.cloudflare.com; font-src 'self' data: static.hsappstatic.net *.cloudflare.com *.unpkg.com unpkg.com cdn.cookielaw.org fonts.gstatic.com; media-src 'self' blob: *.hubspot.net play.hubspotvideo.com play-eu1.hubspotvideo.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' *.hsforms.com *.hubspot.com; frame-ancestors 'self'; upgrade-insecure-requests; 1
font-src *.gstatic.com data: *.paypalobjects.com *.klarnaservices.com *.klarnacdn.net *.google.com fonts.googleapis.com js.klarna.com *.fontawesome.com *.cloudfront.net *.reviews.io *.reviews.co.uk service.force.com *.salesforceliveagent.com *.my.salesforce-sites.com api.paypal.com static.cloudflareinsights.com a.omappapi.com api.omappapi.com googleads.g.doubleclick.net ct.pinterest.com *.bing.com *.hotjar.com *.hotjar.io *.doubleclick.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adyen.com *.paypalobjects.com *.klarnaservices.com *.klarnacdn.net *.google.com google.com js.klarna.com ggmmoebel.com www.ggmmoebel.com *.reviews.io *.reviews.co.uk *.facebook.com service.force.com *.salesforceliveagent.com *.my.salesforce-sites.com api.paypal.com static.cloudflareinsights.com a.omappapi.com api.omappapi.com googleads.g.doubleclick.net ct.pinterest.com *.bing.com *.hotjar.com *.hotjar.io *.doubleclick.net 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adyen.com www.google.com media.ggmmoebel.com cdn.ggmmoebel.com mediacdn.ggmmoebel.com *.paypalobjects.com *.klarnaservices.com *.klarnacdn.net *.google.com google.com js.klarna.com *.googletagmanager.com backend.ggmmoebel.com ggmmoebel.com www.ggmmoebel.com *.cloudflarestream.com *.mondu.ai/ *.mondu.local localhost:*/ *.reviews.io *.reviews.co.uk *.facebook.com *.pinterest.com service.force.com *.salesforceliveagent.com *.my.salesforce-sites.com *.cookiefirst.com api.paypal.com static.cloudflareinsights.com a.omappapi.com api.omappapi.com googleads.g.doubleclick.net ct.pinterest.com *.bing.com *.hotjar.com *.hotjar.io *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.adyen.com https://images.unsplash.com *.gstatic.com *.googleapis.com media.ggmmoebel.com cdn.ggmmoebel.com mediacdn.ggmmoebel.com *.paypalobjects.com *.klarnaservices.com *.klarnacdn.net *.google.com google.com js.klarna.com *.googletagmanager.com backend.ggmmoebel.com ggmmoebel.com www.ggmmoebel.com website.ggm-m.com *.cdninstagram.com *.content.instagram.com *.google.ba *.cloudfront.net *.reviews.io *.reviews.co.uk *.bing.com *.smarketer.de *.pinimg.com *.facebook.com *.pinterest.com *.facebook.net *.google.de *.hotjar.com service.force.com *.salesforceliveagent.com *.my.salesforce-sites.com *.cookiefirst.com api.paypal.com static.cloudflareinsights.com a.omappapi.com api.omappapi.com ct.pinterest.com *.clarity.ms *.hotjar.io *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.adyen.com polyfill.io *.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ media.ggmmoebel.com cdn.ggmmoebel.com mediacdn.ggmmoebel.com *.paypalobjects.com *.klarnaservices.com *.klarnacdn.net *.google.com google.com js.klarna.com widget.freshworks.com m2epro.freshdesk.com *.googletagmanager.com backend.ggmmoebel.com ggmmoebel.com www.ggmmoebel.com analytics.tiktok.com analytics-ipv6.tiktokw.us cdn.dashjs.org *.mondu.ai/widget.js *.mondu.local/widget.js localhost:*/dist/widget.js *.reviews.io *.reviews.co.uk cdn.jsdelivr.net www.youtube.com *.bing.com *.smarketer.de *.pinimg.com *.facebook.com *.facebook.net *.hotjar.com service.force.com *.salesforceliveagent.com *.my.salesforce-sites.com *.cookiefirst.com api.paypal.com static.cloudflareinsights.com a.omappapi.com api.omappapi.com ct.pinterest.com *.clarity.ms *.hotjar.io *.doubleclick.net *.avada.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.paypalobjects.com *.klarnaservices.com *.klarnacdn.net *.google.com fonts.googleapis.com js.klarna.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com *.googletagmanager.com backend.ggmmoebel.com ggmmoebel.com www.ggmmoebel.com *.cloudfront.net *.reviews.io *.reviews.co.uk cdn.jsdelivr.net service.force.com *.salesforceliveagent.com *.my.salesforce-sites.com *.cookiefirst.com api.paypal.com static.cloudflareinsights.com a.omappapi.com api.omappapi.com googleads.g.doubleclick.net ct.pinterest.com *.bing.com *.hotjar.com *.hotjar.io *.doubleclick.net maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com *.content.instagram.com *.cloudflarestream.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adyen.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io *.paypalobjects.com *.klarnaservices.com *.klarnacdn.net *.google.com google.com js.klarna.com widget.freshworks.com m2epro.freshdesk.com insights.algolia.io ggmmoebel.com www.ggmmoebel.com analytics.tiktok.com analytics-ipv6.tiktokw.us *.cloudfront.net *.reviews.io *.reviews.co.uk stats.g.doubleclick.net *.google-analytics.com *.pinterest.com *.smarketer.de *.facebook.com *.hotjar.com *.googlesyndication.com service.force.com *.salesforceliveagent.com *.my.salesforce-sites.com *.cookiefirst.com api.paypal.com static.cloudflareinsights.com a.omappapi.com api.omappapi.com googleads.g.doubleclick.net ct.pinterest.com *.clarity.ms *.bing.com *.hotjar.io *.doubleclick.net https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src media.ggmmoebel.com cdn.ggmmoebel.com mediacdn.ggmmoebel.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-kybc7utL0qJjhuY8r6j1Gg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net https://fonts.gstatic.com *.gstatic.com *.googleapis.com https://fonts.googleapis.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com https://api.systempay.fr/static/ *.fontawesome.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://paiement.systempay.fr/vads-payment/ https://api.systempay.fr/api-payment/ https://api.systempay.fr/static/ 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com https://*.pinterest.com/ https://wisepops.net/ https://*.wisepops.com/ https://*.trustpilot.com/ https://*.systempay.fr/ https://*.amaymag2.dnd.fr/ https://*.atelier-amaya.com/ https://cdn.smooch.io/ https://tss.atelier-amaya.com/ *.weltpixel.com js.mollie.com *.trustpilot.com *.dotdigital-pages.com *.dotdigital.com https://paiement.systempay.fr/vads-payment/ https://api.systempay.fr/static/ www.xtento.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com https://*.cdninstagram.com/ https://*.instagram.com/ https://*.google.com/ https://*.google.fr/ https://*.zdassets.com/ https://*.pinterest.com/ https://*.facebook.com/ https://tss.atelier-amaya.com/ https://cdn.cookielaw.org/ https://bat.bing.com/ cdn.wisepops.net https://maps.googleapis.com https://maps.gstatic.com https://www.mollie.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com https://assets.shipup.co https://paiement.systempay.fr/static/latest/images/type-carte/ https://api.systempay.fr/static/ https://paiement.systempay.fr/vads-payment/ magefan.com cm.magefan.com www.xtento.com cdn.xtento.com *.amazonaws.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com assets.adobedtm.com *.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com https://rum.hlx.page https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js *.nr-data.net *.tiktok.com *.wisepops.net wisepops.net *.wisepops.com *.pinterest.com commerce.adobedc.net cdn.cookielaw.org *.zdassets.com *.zendesk.com *.zopim.com tss.atelier-amaya.com bat.bing.com *.clarity.ms *.adn.cloud *.google.com *.eulerian.net *.kameleoon.eu js-agent.newrelic.com rum.hlx.page https://maps.googleapis.com https://maps.gstatic.com https://unpkg.com/@googlemaps js.mollie.com *.trustpilot.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com https://cdn.shipup.co *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https://api.systempay.fr/api-payment/ https://api.systempay.fr/static/ https://www.googletagmanager.com tagmanager.google.com www.xtento.com cdn.xtento.com https://cdnjs.cloudflare.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com https://fonts.googleapis.com *.gstatic.com *.googleapis.com *.trustpilot.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com https://cdn.shipup.co https://api.systempay.fr/static/ *.fontawesome.com tagmanager.google.com https://cdnjs.cloudflare.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https://*.zdassets.com/ 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.magento-datasolutions.com *.magento-ds.com *.nr-data.net *.tiktok.com *.wisepops.net wisepops.net *.wisepops.com *.trustpilot.com *.pinterest.com cdn.cookielaw.org *.zdassets.com *.zendesk.com *.zopim.com tss.atelier-amaya.com bat.bing.com *.clarity.ms *.adn.cloud *.google.com *.eulerian.net *.kameleoon.eu https://maps.googleapis.com https://api.shipup.co *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https://paiement.systempay.fr/vads-payment/ https://api.systempay.fr/api-payment/ https://www.google-analytics.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https://paiement.systempay.fr/vads-payment/ https://api.systempay.fr/api-payment/ https://api.systempay.fr/static/ 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; connect-src 'self' pdfconvertertools.com *.pdfconvertertools.com *.google.com *.youtube.com *.facebook.com *.amazon.com sentry-cdn.com *.ingest.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: pdfconvertertools.com *.pdfconvertertools.com *.google.com *.youtube.com *.facebook.com *.amazon.com cdnjs.cloudflare.com js.sentry-cdn.com *.sentry-cdn.com chrome-extension: *.googletagmanager.com *.doubleclick.net *.googleadservices.com; style-src 'self' 'unsafe-inline' pdfconvertertools.com fonts.googleapis.com cdnjs.cloudflare.com; font-src 'self' data: fonts.gstatic.com fonts.googleapis.com cdnjs.cloudflare.com; media-src 'self' data: blob:; img-src 'self' data: https: chrome-extension: pdfconvertertools.com *.pdfconvertertools.com *.google.com *.youtube.com *.facebook.com *.amazon.com storage.googleapis.com *.googletagmanager.com *.doubleclick.net *.googleadservices.com; frame-src 'self' pdfconvertertools.com *.pdfconvertertools.com *.google.com *.youtube.com *.facebook.com *.amazon.com *.googletagmanager.com *.doubleclick.net; report-uri /csp-report 1
default-src 'self'; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://snap.licdn.com https://px.ads.linkedin.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://api.storyblok.com https://api.friendlycaptcha.com https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://px.ads.linkedin.com https://connect.facebook.net; frame-src https://app.storyblok.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self' https://app.storyblok.com; upgrade-insecure-requests 1
font-src fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ https://www.googletagmanager.com/ www.paypal.com www.sandbox.paypal.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com www.facebook.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.magezon.com www.paypal.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.cookie-script.com static.hotjar.com script.hotjar.com connect.facebook.net chimpstatic.com downloads.mailchimp.com *.list-manage.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ www.paypal.com www.sandbox.paypal.com www.paypalobjects.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com downloads.mailchimp.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com region1.analytics.google.com region1.google-analytics.com googleads.g.doubleclick.net http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src googleads.g.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.cookielaw.org cdn.segment.com sdk.split.io maps.googleapis.com www.googletagmanager.com s.pinimg.com ct.pinterest.com connect.facebook.net analytics.tiktok.com bat.bing.com js.adsrvr.org sc-static.net static.ads-twitter.com pixel.byspotify.com secure.quantserve.com tr.snapchat.com googleads.g.doubleclick.net rules.quantcount.com www.clarity.ms scripts.clarity.ms; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data: blob: media.alle.com res.cloudinary.com maps.gstatic.com maps.googleapis.com *.cloudinary.com cdn.cookielaw.org www.googletagmanager.com www.facebook.com c.clarity.ms di.rlcdn.com bat.bing.com pixel.quantserve.com tr.snapchat.com t.co analytics.twitter.com www.google.com c.bing.com insight.adsrvr.org www.googleadservices.com; font-src 'self' fonts.gstatic.com media.alle.com; connect-src 'self' api.segment.io cdn.segment.com *.split.io *.datadoghq.com browser-intake-datadoghq.com www.google-analytics.com ct.pinterest.com geolocation.onetrust.com api.alle.com api.dev.alle.com api.stage.alle.com api.demo.alle.com maps.googleapis.com cdn.cookielaw.org *.clarity.ms www.facebook.com analytics.tiktok.com *.snapchat.com pixels.spotify.com pixel.quantserve.com insight.adsrvr.org match.adsrvr.org bat.bing.com ad.doubleclick.net *.fls.doubleclick.net stats.g.doubleclick.net googleads.g.doubleclick.net cm.g.doubleclick.net analytics.twitter.com pixel.tapad.com ib.adnxs.com pixel.rubiconproject.com www.googleadservices.com www.google.com analytics.google.com; frame-ancestors 'self'; frame-src 'self' cdn.cookielaw.org ct.pinterest.com *.fls.doubleclick.net insight.adsrvr.org bid.g.doubleclick.net tr.snapchat.com match.adsrvr.org 1
default-src 'self'; img-src 'self' data: https://srgresearch-public.s3.amazonaws.com https://srgresearch-public.s3.us-west-2.amazonaws.com; script-src 'self' 'nonce-6SCaX1SE_-ve2QMjWwnBzg' 'report-sample'; style-src 'self' 'nonce-6SCaX1SE_-ve2QMjWwnBzg' 'report-sample'; style-src-attr 'unsafe-inline'; form-action 'self'; base-uri 'none'; object-src 'none'; report-uri /csp-report 1
frame-ancestors 'self' *.liantis.be; 1
img-src 'self' data: https://*.siteimproveanalytics.io; script-src 'self' https://siteimproveanalytics.com cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.google.com; script-src-attr 'self'; script-src-elem 'self' https://js-agent.newrelic.com https://bam.nr-data.net https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.google.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com; style-src-attr 'self' 'unsafe-inline'; frame-ancestors 'self' 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.readspeaker.com *.twitter.com *.google-analytics.com *.googletagmanager.com dap.digitalgov.gov cdn.syndication.twimg.com; object-src 'none'; style-src 'self' 'unsafe-inline' *.readspeaker.com platform.twitter.com cdn.syndication.twimg.com ton.twimg.com; frame-src 'self' *.readspeaker.com *.twitter.com *.youtube.com; child-src 'self' *.twitter.com *.youtube.com *.readspeaker.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.yuma.ai scripts.luigisbox.tech static.senja.io exp.baerskintactical.com api.exponea.com ph.baerskintactical.com *.posthog.com invitejs.trustpilot.com widget.trustpilot.com connect.facebook.net www.facebook.com www.google-analytics.com tag.google.com www.googletagmanager.com *.doubleclick.net *.doubleclick.net:* js.stripe.com paypal.com *.paypal.com *.google.com recaptcha.net maps.googleapis.com cdn.vercel-insights.com va.vercel-scripts.com vercel.live baerskintactical.com bat.bing.com *.clarity.ms *.luigisbox.tech cdnjs.cloudflare.com static.ads-twitter.com *.cookie-script.com *.applovin.com s.axon.ai bzrcdn.openai.com *.newsbreak.com *.liadm.com cdn.id5-sync.com *.ads.rmbl.ws api.goaffpro.com da1bbbz2bvais.cloudfront.net s3-us-west-2.amazonaws.com/jsstore/ s3-us-west-2.amazonaws.com/storejs/ s3-us-west-2.amazonaws.com/files.getemails.com/ d2hrivdxn8ekm8.cloudfront.net; style-src 'self' 'unsafe-inline' data: fonts.googleapis.com ph.baerskintactical.com vercel.live cdnjs.cloudflare.com www.gstatic.com; img-src 'self' data: blob: *.baerskintactical.com *.baerskinhoodie.com *.div.haus baerskin.media cdn.senja.io ik.imagekit.io flagcdn.com www.facebook.com www.google-analytics.com www.googletagmanager.com *.google.com *.google.co.uk www.google.ca www.google.de www.google.com.au www.google.nl www.google.co.nz www.google.ie www.google.at www.google.be www.google.no www.google.es www.google.fr www.google.ch www.google.dk www.google.com.mx www.google.co.il www.google.co.in www.google.com.ph www.google.co.th www.google.ad www.google.ae www.google.al www.google.am www.google.as www.google.az www.google.ba www.google.bg www.google.bs www.google.cg www.google.ci www.google.cl www.google.co.ao www.google.co.cr www.google.co.id www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.co.ug www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.com.af www.google.com.ag www.google.com.ar www.google.com.bd www.google.com.bn www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.my www.google.com.ng www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.cv www.google.cz www.google.dz www.google.fi www.google.ge www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mk www.google.mn www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.sc www.google.se www.google.si www.google.sk www.google.sn www.google.sr www.google.tt maps.gstatic.com stripe.com paypal.com *.paypal.com www.paypalobjects.com cm4-production-assets.s3.amazonaws.com t.co analytics.twitter.com bat.bing.com *.bidr.io vercel.live *.doubleclick.net *.doubleclick.net:* *.clarity.ms brxcdn.com d15k2d11r6t6rl.cloudfront.net connect.facebook.net cdnjs.cloudflare.com bat.bing.net i.ytimg.com www.gstatic.com fonts.gstatic.com pagead2.googlesyndication.com bzr.openai.com cdn.us1.exponea.com lh3.googleusercontent.com www.googleadservices.com b.applovin.com id5-sync.com storage.googleapis.com encrypted-tbn0.gstatic.com encrypted-tbn1.gstatic.com encrypted-tbn2.gstatic.com encrypted-tbn3.gstatic.com *.liadm.com *.ads.rmbl.ws alocdn.com jsstore.s3-us-west-2.amazonaws.com translate-pa.googleapis.com; font-src 'self' data: fonts.gstatic.com fonts.googleapis.com vercel.live; connect-src 'self' *.div.haus *.baerskintactical.com id.baerskintactical.com id.baerskin.dev *.baerskinhoodie.com pro.ip-api.com api.weatherapi.com exp.baerskintactical.com exp.baerskinhoodie.com ph.baerskintactical.com *.posthog.com api.exponea.com inn.gs *.yuma.ai static.senja.io invitejs.trustpilot.com api.stripe.com paypal.com *.paypal.com maps.googleapis.com places.googleapis.com api.mapbox.com connect.facebook.net www.facebook.com www.google-analytics.com *.analytics.google.com www.googletagmanager.com *.google.com *.google.co.uk www.google.ca www.google.de www.google.com.au www.google.nl www.google.co.nz www.google.ie www.google.at www.google.be www.google.no www.google.es www.google.fr www.google.ch www.google.dk www.google.com.mx www.google.co.il www.google.co.in www.google.com.ph www.google.co.th *.doubleclick.net *.doubleclick.net:* recaptcha.net vitals.vercel-insights.com vercel.live wss://ws-us3.pusher.com baerskintactical.com *.clarity.ms *.luigisbox.tech api.luigisbox.com *.b-cdn.net bat.bing.com bat.bing.net t.co analytics.twitter.com static.ads-twitter.com *.google-analytics.com www.googleadservices.com pagead2.googlesyndication.com *.cookie-script.com *.applovin.com b.quantarelay.net id5-sync.com *.id5-sync.com *.eu-1-id5-sync.com:* *.eu-2-id5-sync.com:* *.eu-3-id5-sync.com:* *.eu-4-id5-sync.com:* bzr.openai.com baerskin.media x.baerskin.dev *.newsbreak.com *.liadm.com *.ads.rmbl.ws api.goaffpro.com api2.goaffpro.com a.usbrowserspeed.com api.usbrowserspeed.com ckjjzdn8vk.execute-api.us-west-2.amazonaws.com uqmscnlvii.execute-api.us-west-2.amazonaws.com vxdq9yx2sd.execute-api.us-west-2.amazonaws.com s3shglasfi.execute-api.us-west-2.amazonaws.com alocdn.com *.telemetry.vaultdcr.com translate-pa.googleapis.com v5-b75ccb2b73c54aa4a5098ab7f8533696.ecs.us-east-2.on.aws *.ecs.us-west-1.on.aws bded8a3c6ae-1-1053047382554.us-central1.run.app; frame-src 'self' app.yuma.ai js.stripe.com hooks.stripe.com checkout.stripe.com paypal.com *.paypal.com www.google.com recaptcha.net widget.trustpilot.com challenges.cloudflare.com id-msp.newsbreak.com vercel.live www.youtube-nocookie.com www.facebook.com; worker-src 'self' blob:; media-src 'self' data: blob: *.b-cdn.net baerskin.media; object-src 'none'; base-uri 'self'; form-action 'self' www.facebook.com; manifest-src 'self'; report-uri https://ph.baerskintactical.com/report/?token=phc_CoU6p1XZv62l9TmFXWRSYpcs0p060G2gyTfOjpF6JzX; report-to posthog 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://sdk.privacy-center.org https://matomo.freelance.com https://js.hsforms.net https://assets.calendly.com https://widget.trustpilot.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://matomo.freelance.com https://www.youtube.com https://img.youtube.com https://wp.freelance.com https://*.freelance.com; font-src 'self' https://www.freelance.com https://preprod-freelance.netlify.app; connect-src 'self' https://wp.freelance.com https://matomo.freelance.com https://sdk.privacy-center.org https://www.googletagmanager.com; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://assets.calendly.com; frame-ancestors 'none'; form-action 'self' https://plateforme.freelance.com; base-uri 'self'; report-uri /api/csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com https://geowidget.easypack24.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * consentcdn.cookiebot.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com https://geowidget-app.inpost.pl/ https://sandbox-easy-geowidget.easypack24.net/ https://geowidget-app.inpost-group.com/ https://sandbox-global-geowidget.easypack24.net/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.disqus.com https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com *.google.com *.googleadservices.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com blob: googleadservices.com google-analytics.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.disqus.com *.googleapis.com *.gstatic.com *.avada.io *.shopify.com *.alothemes.com *.magepow.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.snrcdn.net *.snrbox.com *.ekomiapps.de clarity.ms *.clarity.ms googleadservices.com gstatis.co *.gstatis.co gstatic.com paypal.com tpay.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com sandbox-global-geowidget-sdk.easypack24.net geowidget.inpost-group.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com https://fonts.bunny.net *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com assets.braintreegateway.com https://embedsocial.com/ https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com sandbox-global-geowidget-sdk.easypack24.net geowidget.inpost-group.com https://geowidget.easypack24.net https://geowidget.inpost.pl 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src https://marsalabutikpl.savecart.pl/ 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com *.googletagmanager.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.clarity.ms https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com *.easypack24.net *.inpost.pl *.openstreetmap.org t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://www.masterdc.com https://admin.masterdc.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval'   https://challenges.cloudflare.com   https://www.googletagmanager.com   https://googleads.g.doubleclick.net   https://www.googleadservices.com   https://pagead2.googlesyndication.com   https://cdn.ip2c.net   https://reveal.ip2c.net   https://ct.leady.com   https://cdnjs.cloudflare.com   https://www.youtube.com; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data:   https://fonts.gstatic.com   https://www.masterdc.com   https://cdnjs.cloudflare.com; img-src 'self' data: blob:   https://www.masterdc.com   https://t.leady.com   https://i.ytimg.com   https://www.googleadservices.com   https://www.googletagmanager.com   https://pagead2.googlesyndication.com   https://googleads.g.doubleclick.net   https://www.google.com https://www.google.cz https://www.google.sk   https://www.google.de https://www.google.at https://www.google.fr   https://www.google.nl https://www.google.pl https://www.google.ro   https://www.google.hr https://www.google.ca https://www.google.com.hk   https://www.google.com.ng https://www.google.com.om; connect-src 'self'   https://challenges.cloudflare.com   https://api.ip2c.net   https://t.leady.com   https://www.google.com https://google.com   https://www.google.cz https://www.google.sk https://www.google.de   https://www.google.com.hk https://www.google.com.om   https://www.google-analytics.com   https://region1.google-analytics.com   https://analytics.google.com   https://region1.analytics.google.com   https://pagead2.googlesyndication.com   https://googleads.g.doubleclick.net   https://www.googleadservices.com   https://ad.doubleclick.net   https://stats.g.doubleclick.net   https://www.googletagmanager.com; frame-src 'self'   https://challenges.cloudflare.com   https://www.youtube-nocookie.com   https://www.youtube.com   https://maps.google.com   https://www.google.com; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; report-uri /csp-report.php; report-to csp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.authorize.net *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.facebook.com/ *.yelpcdn.com/ *.authorize.net/ *.sitelock.com/ *.google.co.in/ https://firebasestorage.googleapis.com store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.facebook.net/ *.yelpcdn.com/ *.avada.io *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.facebook.net/ https://get.geojs.io *.avada.io *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://edge.fullstory.com https://cdnjs.cloudflare.com https://code.jquery.com https://maps.googleapis.com https://libs.salemove.com https://api.salemove.com https://cdn.elliemae.io https://cdn.jsdelivr.net https://unpkg.com https://ajax.googleapis.com; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://libs.salemove.com https://cdn.jsdelivr.net; img-src 'self' *.dev.ultraamps.com:* *.ultraamps.com *.xactus360.com *.cbct.com https://uploads.salemove.com data: blob: https://maps.gstatic.com https://cdnjs.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com data:; connect-src 'self' https://rs.fullstory.com https://edge.fullstory.com https://maps.googleapis.com https://api.salemove.com https://client-logger.salemove.com https://pubsub.salemove.com wss://pubsub.salemove.com https://kluster.salemove.com wss://kluster.salemove.com; frame-src 'self' https://*.appraisalfirewall.com https://resource.xactus.com https://secure.xactus.com; media-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://ultraamps.com https://*.ultraamps.com https://xactus360.com https://*.xactus360.com https://*.dev.ultraamps.com:*; frame-ancestors 'self' https://ultraamps.com https://*.ultraamps.com https://xactus360.com https://*.xactus360.com https://*.dev.ultraamps.com:* https://encompass.ice.com https://beta.encompass.elliemae.io https://encompassloconnect.com https://www.encompassloconnect.com https://concept.idp.elliemae.com https://idp.elliemae.com; child-src 'self'; worker-src 'self' blob:; upgrade-insecure-requests; report-uri https://9mjx30dx84.execute-api.us-east-1.amazonaws.com/prod/report; 1
default-src 'self';connect-src 'self' https://*.samsung.com https://*.samsungosp.com https://*.2c2p.com https://*.adyen.com https://*.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.adyen.com https://*.samsung.com https://*.samsungosp.com https://*.2c2p.com https://*.youtube.com https://*.google.com https://*.gstatic.com; img-src 'self' https://*.adyen.com https://*.2c2p.com https://*.samsung.com https://*.ytimg.com https://*.google.com data: blob:; font-src 'self' https://*.adyen.com https://*.2c2p.com https://*.samsung.com https://*.gstatic.com data:; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https://*.2c2p.com https://*.adyen.com https://*.samsung.com; frame-src 'self' https: https://*.adyen.com https://*.youtube.com https://*.youtube-nocookie.com https://*.google.com https://*.gstatic.com; report-uri /api/csp-report; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; media-src 'self' https:; frame-src https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https: 1
default-src 'self'; script-src 'self' https://ajax.googleapis.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; connect-src 'self'; font-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; report-uri /csp-report 1
default-src 'self'; script-src 'nonce-C6HC238PJKwjOs+W5ozOug==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self';     script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://connect.facebook.net https://www.googleadservices.com https://www.gstatic.com https://www.google.com https://recaptcha.net https://www.recaptcha.net https://cdn.onesignal.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com;     style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;     img-src 'self' data: blob: https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.facebook.com https://www.gstatic.com https://cardnet.com.do https://www.cardnet.com.do https://*.google-analytics.com https://*.g.doubleclick.net https://*.google.com https://www.google.com.do https://www.google.com.co https://google.com https://www.googleadservices.com https://pagead2.googlesyndication.com;     font-src 'self' data: https://fonts.gstatic.com https://www.cardnet.com.do;     connect-src 'self' https://cardnet-functions.firehut.app https://us-central1-cardnet-website.cloudfunctions.net https://api.my-ip.io https://webto.salesforce.com https://www.google-analytics.com https://analytics.google.com https://firebase.googleapis.com https://*.googleapis.com https://fcmregistrations.googleapis.com https://firebaseinstallations.googleapis.com https://www.facebook.com https://connect.facebook.net https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://google.com https://www.google.com.do https://www.google.com.co https://www.googleadservices.com https://pagead2.googlesyndication.com https://ad.doubleclick.net https://recaptcha.net https://www.recaptcha.net;     frame-src 'self' https://www.google.com https://recaptcha.net https://www.recaptcha.net https://www.youtube.com https://youtube.com https://app.vectary.com https://www.googletagmanager.com https://recaptcha.google.com;     object-src 'none';     base-uri 'self';     frame-ancestors 'self';     worker-src 'self' blob: 1
script-src 'self' https://*.launchdarkly.com https://*.auth0.com https://*.salesforce.com https://*.force.com https://www.googletagmanager.com https://*.google-analytics.com https://*.datadoghq.com; object-src 'none'; base-uri 'self' 1
default-src 'self'; img-src data: blob: *; script-src-elem 'self' 'strict-dynamic' assets.ubuntu.com www.google-analytics.com www.googletagmanager.com www.youtube.com asciinema.org player.vimeo.com script.crazyegg.com www.googleadservices.com js.zi-scripts.com *.g.doubleclick.net www.google.com www.gstatic.com www.brighttalk.com snap.licdn.com connect.facebook.net maps.googleapis.com www.redditstatic.com munchkin.marketo.net *.googlesyndication.com cdn.jsdelivr.net https://esm.sh https://cdn.jsdelivr.net buttons.github.io cdn.livechatinc.com api.livechatinc.com secure.livechatinc.com www.tfaforms.com 'nonce-vKKGtBPlbCjGcF-xjgbitw'; font-src 'self' assets.ubuntu.com fonts.google.com cdn.livechatinc.com secure.livechatinc.com; script-src 'self' blob: 'wasm-unsafe-eval' 'nonce-vKKGtBPlbCjGcF-xjgbitw'; connect-src 'self' ubuntu.com analytics.google.com www.googletagmanager.com o4510662863749120.ingest.de.sentry.io www.google-analytics.com *.crazyegg.com *.g.doubleclick.net ad.doubleclick.net *.clarity.ms bat.bing.com bat.bing.net www.googleadservices.com js.zi-scripts.com *.google-analytics.com px.ads.linkedin.com ws.zoominfo.com youtube.com google.com www.google.ad www.google.ae www.google.al www.google.am www.google.as www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cat www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.cn www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.com www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.nr www.google.nu www.google.pl www.google.pn www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.st www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu www.google.ws fonts.google.com maps.googleapis.com pixel-config.reddit.com www.redditstatic.com conversions-config.reddit.com https://esm.sh https://lottie.host https://cdn.jsdelivr.net *.analytics.google.com www.facebook.com *.googlesyndication.com *.mktoresp.com assets.ubuntu.com api.github.com raw.githubusercontent.com api.livechatinc.com cdn.livechatinc.com secure.livechatinc.com web.facebook.com www.tfaforms.com unpkg.com; frame-src 'self' assets.ubuntu.com *.doubleclick.net *.crazyegg.com www.youtube.com/ asciinema.org player.vimeo.com www.googletagmanager.com www.google.com www.brighttalk.com cdn.livechatinc.com secure.livechatinc.com cdn.livechat-static.com; style-src 'self' cdn.jsdelivr.net www.tfaforms.com 'unsafe-inline'; media-src 'self' res.cloudinary.com assets.ubuntu.com; child-src 'self' blob: youtube.com google.com fonts.google.com api.livechatinc.com cdn.livechatinc.com secure.livechatinc.com; form-action 'self' https://pages.ubuntu.com https://ubuntu.com https://www.tfaforms.com; object-src 'none'; base-uri 'self'; worker-src 'self' blob:; report-uri /csp-report; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: ; img-src 'self' data: secure.gravatar.com www.gravatar.com; report-uri https://www.netpresenter.com/?gdsih-csp-report; 1
default-src 'self'; base-uri 'self'; form-action 'self' mailing.schau-hin.info eu2.cleverreach.com; object-src 'none'; frame-src 'self' medienquiz.schau-hin.info www.youtube-nocookie.com www.google.com; script-src 'self' 'unsafe-inline' static.etracker.com code.etracker.com www.etracker.de www.google.com www.gstatic.com 'report-sample'; style-src 'self' 'unsafe-inline' data: 'report-sample'; img-src 'self' data: blob:; font-src 'self' data:; connect-src 'self' ipinfo.io www.etracker.de; manifest-src 'self'; report-uri https://www.schau-hin.info/@http-reporting?csp=report&requestTime=1789273954112755&requestHash=8cb21617c1cab2341713e1d96ed05cf0c8f0b63e 1
default-src 'self'; script-src 'self' 'nonce-Tgd7e4Sn/0DOaTGhy+wO6Q==' 'sha256-Dk1UAic/KZ2O0+PLyKFvhd4S+sVvCBHSNB5RTPMFTio=' blob: https://challenges.cloudflare.com https://browser.sentry-cdn.com https://*.wistia.com https://*.wistia.net https://fast.wistia.com https://*.intercom.io https://*.intercomcdn.com https://widget.intercom.io https://*.intercom-messenger.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://js.zi-scripts.com https://cdn.jsdelivr.net https://js.jam.dev; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fast.wistia.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://*.intercomcdn.com https://use.typekit.net https://fast.wistia.net https://fast.wistia.com; connect-src 'self' https://*.intercom.io wss://*.intercom.io https://*.intercom-messenger.com wss://*.intercom-messenger.com https://*.intercomcdn.com https://uploads.intercomusercontent.com https://*.wistia.com https://*.wistia.net https://*.ingest.us.sentry.io https://*.algolia.net https://*.algolianet.com https://api.firecrawl.dev https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://www.googletagmanager.com https://www.googleadservices.com https://*.doubleclick.net https://www.google.com https://res.cloudinary.com https://js.zi-scripts.com https://ws.zoominfo.com https://*.zoominfo.com; frame-src 'self' https://challenges.cloudflare.com https://*.wistia.com https://fast.wistia.net https://www.youtube.com https://www.youtube-nocookie.com https://*.intercom.io https://intercom-sheets.com https://www.intercom-reporting.com https://player.vimeo.com https://www.googletagmanager.com https://maps.google.com https://www.google.com; media-src 'self' blob: https://*.supabase.co https://*.intercomcdn.com https://*.wistia.com https://res.cloudinary.com https://d1xtq3npxmh3dt.cloudfront.net; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://intercom.help https://api-iam.intercom.io; report-uri /api/csp-report; report-to csp-endpoint 1
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; img-src 'self' data: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' https:; connect-src 'self' https:; frame-src 'self' https: 1
default-src 'self' https://wog.ch/ https://www.wog.ch/ https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2; base-uri 'self' https://wog.ch/ https://www.wog.ch/; style-src-elem 'self' https://wog.ch/ https://www.wog.ch/ 'unsafe-inline' https://fonts.googleapis.com/; style-src 'self' 'unsafe-inline' https://wog.ch/ https://www.wog.ch/ https://fonts.googleapis.com/; media-src 'self' data: https://wog.ch/ https://wwww.wog.ch/; img-src 'self' https://wog.ch/ https://www.wog.ch/ https://www.games.ch/ https://i.ytimg.com/ data: https://www.paypalobjects.com/ https://t.paypal.com/ https://developer.android.com/ https://files.newsletter2go.com/ https://www.google.com/ https://www.googleadservices.com/ https://adservice.google.com/ https://google.com/ https://www.google.ch https://*.google-analytics.com https://*.googletagmanager.com https://googleads.g.doubleclick.net https://www.econda-monitor.de; script-src-elem 'self' 'unsafe-inline' https://apis.google.com https://wog.ch/ https://www.wog.ch/ https://s.ytimg.com/ https://www.google.com/ https://www.gstatic.com/ https://www.paypal.com/ https://www.paypalobjects.com/ https://checkout.postfinance.ch/ https://static.newsletter2go.com/ https://appjs.blickinsbuch.de/ https://www.blickinsbuch.de/ https://*.googletagmanager.com https://www.googleadservices.com/ https://www.google-analytics.com/ https://googleads.g.doubleclick.net/ https://www.econda-monitor.de/; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://wog.ch/ https://www.wog.ch/ https://www.paypal.com/ https://www.paypalobjects.com/ https://checkout.postfinance.ch/ https://s.ytimg.com/ https://www.google.com/ https://www.googletagmanager.com/ https://www.googleadservices.com/ https://www.gstatic.com/ https://googleads.g.doubleclick.net https://appjs.blickinsbuch.de/ https://www.blickinsbuch.de/gateway/check.php; font-src 'self' https://wog.ch/ https://www.wog.ch/ data: https://fonts.gstatic.com; frame-src 'self' https://accounts.google.com https://wog.ch/ https://www.wog.ch/ https://www.youtube.com/ https://www.google.com/ https://www.googletagmanager.com/ https://myaccount.google.com/ https://maps.google.com/ https://bid.g.doubleclick.net https://td.doubleclick.net https://www.sandbox.paypal.com/ https://www.paypal.com/ https://www.paypalobjects.com/ https://wog.games.ch/ https://www.games.ch/ https://www.blickinsbuch.de/ https://www.blickinsbuch.net/ https://checkout.postfinance.ch/; connect-src 'self' data: https://wog.ch/ https://www.wog.ch/ https://code.jquery.com https://checkout.postfinance.ch/ https://www.sandbox.paypal.com/ https://www.paypal.com/ https://api.newsletter2go.com/ https://www.econda-monitor.de/ https://adservice.google.com/ https://www.googleadservices.com/ https://ad.doubleclick.net/ https://www.google.com/ https://region1.google-analytics.com/ https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com; report-uri https://worldofgames.report-uri.com/r/d/csp/reportOnly; report-to default 1
default-src 'self'; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' https://static.zdassets.com https://region1.google-analytics.com https://v2.zopim.com https://ajax.googleapis.com https://analytics.silktide.com https://analytics.tiktok.com https://api.reciteme.com/asset/js https://app.geckoform.com https://cdn.populo-services.com https://connect.facebook.net https://chat-widget.geckoengage.com https://googleads.g.doubleclick.net https://l.getsitecontrol.com https://sc-static.net/scevent.min.js https://script.hotjar.com https://static.hotjar.com https://tr.snapchat.com https://www.googletagmanager.com https://cdn.populo-services.com https://www.gstatic.com https://cdn-cookieyes.com; style-src 'report-sample' 'self' 'unsafe-inline' https://fonts.geckoform.com https://fonts.gstatic.com/ https://chat-widget.geckoengage.com https://fonts.googleapis.com https://cdn-cookieyes.com; object-src 'none'; base-uri 'self'; connect-src 'self' https://cms-stmarys.cloud.contensis.com https://surveystats.hotjar.io https://googleads.g.doubleclick.net https://capigateway.adaptworldwide.com wss://widget-mediator.zopim.com https://chat-widget.geckoengage.com https://sm.api.geckoengage.com https://stats.g.doubleclick.net https://www.google.com https://region1.google-analytics.com https://pagead2.googlesyndication.com https://a.eu.silktide.com https://analytics.tiktok.com https://ekr.zdassets.com https://l.getsitecontrol.com https://region1.analytics.google.com https://tr.snapchat.com https://tr6.snapchat.com https://www.google.co.uk https://www.google.com https://www.googleadservices.com https://app.geckoform.com https://cdn-cookieyes.com https://log.cookieyes.com; font-src 'self' https://script.hotjar.com https://fonts.geckoform.com https://chat-widget.geckoengage.com https://fonts.gstatic.com/; frame-src 'self' https://app.geckoform.com https://td.doubleclick.net https://tr.snapchat.com https://www.tiktok.com https://www.youtube.com; img-src 'self' data: https://cdn-cookieyes.com https://analytics.tiktok.com https://survey-images.hotjar.com https://img.youtube.com https://www.googletagmanager.com https://chat-widget.geckoengage.com https://www.facebook.com https://i.ytimg.com https://populo.populo-services.com https://www.google.co.uk https://www.google.com; manifest-src 'self'; media-src 'self' https://chat-widget.geckoengage.com; worker-src 'none'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://tagmanager.google.com; style-src 'self' https://edge-platform.sitecorecloud.io https://fonts.googleapis.com; img-src 'self' data: https://www.googletagmanager.com https://*.sitecorecloud.io https://*.sitecorecontenthub.cloud https://cdn.wcqtest.com.au https://cdn.workcoverqld.com.au https://img.youtube.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://*.sitecorecloud.io https://*.rfk.workcoverqld.com.au https://www.googletagmanager.com https://*.google-analytics.com https://www.google.com https://*.analytics.google.com; frame-src 'self' https://www.youtube.com https://www.googletagmanager.com; frame-ancestors 'none'; object-src 'none'; base-uri 'none'; form-action 'self'; require-trusted-types-for 'script' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com data: *.klarnacdn.net *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.klarna.com https://www.googletagmanager.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com https://cdn.ingrid.com/ https://js.klarna.com/ https://js.playground.kustom.co/ https://js.live.kustom.co/ https://td.doubleclick.net/ https://widget.imbox.io/ https://widget-launcher.imbox.io/ *.trustpilot.com *.yotpo.com *.ingrid.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com *.googleapis.com *.klarna.com *.klarnaevt.com *.klarnacdn.net http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://js.klarna.com/ https://js.playground.kustom.co/ https://js.live.kustom.co/ bat.bing.com bat.bing.net cdn-cookieyes.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://core.helloretail.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com *.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com bat.bing.com bat.bing.net cdn-cookieyes.com *.trustpilot.com *.yotpo.com *.ingrid.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com *.klarnacdn.net *.trustpilot.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://core.helloretail.com https://helloretailcdn.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://js.klarna.com/ https://js.playground.kustom.co/ https://js.live.kustom.co/ region1.google-analytics.com region1.analytics.google.com pagead2.googlesyndication.com www.google.com/ccm/collect log.cookieyes.com cdn-cookieyes.com bat.bing.com bat.bing.net *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://26dd9fdb-d1ae-4de1-a1b1-9eeb5fbcd903.sansec.watch/; report-to report-endpoint; 1
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/transparency_google 1
font-src *.googleapis.com *.gstatic.com data: 'self' data: *.doubleclick.net *.facebook.com *.klarnacdn.net *.fontawesome.com *.oct8ne.com *.cloudflare.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.pharmasi.it *.paypal.com *.oct8ne.com 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com www.google.com *.google.com *.doubleclick.net *.facebook.com *.iubenda.com *.klarna.com *.oct8ne.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.pharmasi.it 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.gstatic.com *.googleapis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.doofinder.com *.iubenda.com *.klarna.com *.klarnaevt.com *.klarnacdn.net intpaye.netsgroup.com *.oct8ne.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.feedaty.com *.mailmnta.com *.zdassets.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.doofinder.com *.iubenda.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.oct8ne.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.acsbapp.com *.cloudflare.com *.feedaty.com *.mailmnta.com mn.pharmasi.it *.zendesk.com *.cookiebot.com *.optimalpeople.fr *.tradedoubler.com *.trovaprezzi.it *.development.scalapay.com *.staging.scalapay.com *.scalapay.com maps.googleapis.com www.gstatic.com tracking.trovaprezzi.it www.trovaprezzi.it 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.doofinder.com *.klarnacdn.net *.fontawesome.com unsafe-inline assets.braintreegateway.com *.acsbapp.com *.cloudflare.com *.feedaty.com *.mailmnta.com *.oct8ne.com *.zdassets.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com www.gstatic.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doofinder.com wss://*.doofinder.com *.iubenda.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.oct8ne.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com PLACEHOLDER *.acsbapp.com *.cgtarsenal.com *.feedaty.com *.mailmnta.com *.zdassets.com *.zendesk.com *.cookiebot.com *.google.it *.googlesyndication.com *.googletagmanager.com *.optimalpeople.fr *.tradedoubler.com *.trovaprezzi.it www.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' https:; img-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; report-to wizard 1
default-src 'self';                       script-src 'report-sample' 'self' 'unsafe-eval' https://googleads.g.doubleclick.net/pagead/viewthroughconversion/823935011/ https://js.monitor.azure.com/scripts/b/ai.2.min.js https://player.vimeo.com/api/player.js https://www.clarity.ms https://www.googletagmanager.com/gtm.js;                       script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com/gtm.js https://www.googletagmanager.com/gtag/js https://player.vimeo.com/api/player.js https://f.vimeocdn.com https://googleads.g.doubleclick.net https://snap.licdn.com https://www.clarity.ms https://www.google.com/recaptcha/api.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/recaptcha/releases/ https://www.youtube.com/iframe_api https://www.youtube.com/s/player/;                       style-src 'report-sample' 'self' 'unsafe-inline';                       object-src 'none';                       base-uri 'self';                       connect-src 'self' https://eastus-0.in.applicationinsights.azure.com https://*.clarity.ms https://www.google-analytics.com https://www.google.com https://px.ads.linkedin.com https://www.googleadservice.com/pagead;                       font-src 'self';                       frame-src 'self' https://td.doubleclick.net https://www.googletagmanager.com https://ai.appraisalinstitute.org/ https://embed.podcasts.apple.com/ https://player.vimeo.com/ https://www.google.com/ https://www.youtube.com/;                       img-src 'self' data: https://*.appraisalinstitute.org https://dummyimage.com https://placedog.net https://via.placeholder.com https://*.clarity.ms https://www.google.com https://www.googletagmanager.com https://appraisalinstitute-org-authoring-2023.azurewebsites.net https://px.ads.linkedin.com https://*.bing.com;                       manifest-src 'self';                       media-src 'self';                       worker-src 'none';                       frame-ancestors 'self'  https://appraisal-org-local-2023.bluemod.me/ https://appraisal-cms-local-2023.bluemod.me/                        https://appraisal-org-dev-2023.bluemod.us/ https://appraisal-cms-dev-2023.bluemod.us/                       https://appraisal-org-test-2023.bluemod.us/ https://appraisal-cms-test-2023.bluemod.us/                       https://appraisalinstitute-org-authoring-2023.azurewebsites.net/ https://appraisalinstitute-cms-authoring-2023.azurewebsites.net/                       https://www.appraisalinstitute.org/ https://appraisalinstitute-cms-prod-2023.azurewebsites.net/; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://use.typekit.net maxcdn.bootstrapcdn.com https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https://*.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.dotdigital-pages.com *.dotdigital.com https://www.facebook.com https://tpc.googlesyndication.com https://consentcdn.cookiebot.com https://assets.braintreegateway.com https://*.paypal.com https://interfaces.zapier.com https://*.zapier.app https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: https://*.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com *.trackedlink.net *.ddlnk.net https://www.google.fi https://www.google.ee https://maps.gstatic.com https://maps.googleapis.com https://log.pinterest.com https://eckerolinechatbottest.blob.core.windows.net https://fonts.gstatic.com https://assets.braintreegateway.com https://*.paypal.com https://imgsct.cookiebot.com https://px.ads.linkedin.com https://www.paypalobjects.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page https://*.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal https://ajax.cloudflare.com https://js-agent.newrelic.com https://bam-cell.nr-data.net https://bam.eu01.nr-data.net https://bam.nr-data.net https://assets.pinterest.com https://maps.googleapis.com https://eckerolinechatbottest.blob.core.windows.net https://api.videoly.co https://www.google.fi https://www.google.ee https://www.googleadservices.com https://tpc.googlesyndication.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://js.braintreegateway.com https://assets.braintreegateway.com https://www.paypalobjects.com https://*.paypal.com https://snap.licdn.com https://interfaces.zapier.com https://dapi.videoly.co https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://www.eckeroline.fi 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com https://fast.fonts.net https://eckerolinechatbottest.blob.core.windows.net https://use.typekit.net https://p.typekit.net https://assets.braintreegateway.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.facebook.com *.facebook.net https://*.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https://bam-cell.nr-data.net https://bam.eu01.nr-data.net https://bam.nr-data.net https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://maps.googleapis.com https://fonts.gstatic.com https://vimeo.com https://consentcdn.cookiebot.com https://api.sandbox.braintreegateway.com https://client-analytics.sandbox.braintreegateway.com https://*.braintree-api.com https://api.braintreegateway.com https://client-analytics.braintreegateway.com https://*.paypal.com https://px.ads.linkedin.com https://rum.hlx.page https://www.google.fi https://www.google.ee https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com 'self' 'unsafe-inline'; child-src https://assets.braintreegateway.com https://*.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'none';font-src 'self' data: https://*.intercomcdn.com https://fonts.gstatic.com https://cmp.osano.com https://cdn.dicey.com;img-src 'self' data: https://cdn.dicey.com https://img-cdn.magiceden.dev https://usercontent.cc https://*.intercomcdn.com https://*.sir.sportradar.com https://*.anjcdn.org https://cmp.osano.com;object-src 'none';script-src 'strict-dynamic' 'self' 'wasm-unsafe-eval' 'nonce-68d8141a05bfc88765cf469bd763bc62' 'sha256-dNy0y48tFd3Ueh+izbVssQPVSHSkZce1VpirT2wc1j4=' https://cmp.osano.com https://cdn.dicey.com;script-src-attr 'none';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.sir.sportradar.com https://cmp.osano.com https://cdn.dicey.com;connect-src 'self' https://*.dicey.com https://*.stytch.com https://browser-intake-datadoghq.com https://*.intercom.io https://*.intercomassets.com https://*.stream-io-api.com https://*.sir.sportradar.com https://*.anjcdn.org https://challenges.cloudflare.com https://*.optimove.net https://api.rudderstack.com https://rs.dicey.com https://cmp.osano.com https://*.a8r.games wss://*.dicey.com wss://*.intercom.io wss://*.stream-io-api.com;frame-src 'self' https://*.stytch.com https://*.intercom.io https://*.sir.sportradar.com https://*.anjcdn.org https://challenges.cloudflare.com https://s3.eu-central-1.amazonaws.com/ignition.button/ https://disir.oddin.gg https://www.youtube.com https://www.youtube-nocookie.com https://player.twitch.tv https://player.kick.com https://www.bilibili.com https://liveshare.huya.com https://games-ui.dicey.com;manifest-src 'self';media-src 'self' data: https://cdn.dicey.com;worker-src 'self' blob:;base-uri 'self';form-action 'self';frame-ancestors 'none';report-to csp-endpoint;report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub0882336394893341aa1bc5a875ee0005&dd-evp-origin=content-security-policy&ddsource=csp-report&service=dicey-prod 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://*.gstatic.com https://*.typekit.net *.klevu.com *.ksearchnet.com *.fontawesome.com applepay.cdn-apple.com *.salesfire.co.uk *.klarnacdn.net *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.securetrading.net *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com www.google.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com https://*.doubleclick.net https://*.google.com https://*.hotjar.com *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * *.rvvuptech.com *.rvvup.com *.afterpay.com *.clearpay.co.uk *.sandbox.paypal.com cdn.eu.trustpayments.com *.trustpayments.com *.securetrading.net *.secure.checkout.visa.com thm.visa.com *.mastercard.com *.salesfire.co.uk *.googletagmanager.com *.doubleclick.net *.typeform.com *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.sharethis.com www.gstatic.com https://*.doubleclick.net https://*.google.com https://*.google.co.uk https://*.cloudfront.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.afterpay.com assets.dev.rvvuptech.com assets.rvvup.com *.sandbox.paypal.com *.stats.paypal.com *.vims.visa.com *.secure.checkout.visa.com *.mastercard.com widgets.dividebuy.co.uk widgets.dividebuysandbox.co.uk *.salesfire.co.uk *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.sharethis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.plugins.emarsys.net *.scarabresearch.com https://*.pcapredict.com/js/sensor.js https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://*.hotjar.com https://*.doubleclick.net https://secure.leadforensics.com https://*.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.afterpay.com *.sandbox.paypal.com checkout.dev.rvvuptech.com checkout.rvvup.com cdn.eu.trustpayments.com *.securetrading.net *.secure.checkout.visa.com *.cardinalcommerce.com *.mastercard.com applepay.cdn-apple.com widgets.dividebuysandbox.co.uk widgets.dividebuy.co.uk *.salesfire.co.uk *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.sharethis.com https://*.googleapis.com https://*.typekit.net https://static.klaviyo.com *.klevu.com *.ksearchnet.com *.fontawesome.com assets.braintreegateway.com checkout.dev.rvvuptech.com checkout.rvvup.com widgets.dividebuy.co.uk widgets.dividebuysandbox.co.uk *.salesfire.co.uk *.typekit.net *.tagmanager.google.com *.googletagmanager.com *.typeform.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.sharethis.com *.scarabresearch.com *.eservice.emarsys.net https://*.hotjar.com https://*.adobedc.net https://*.nr-data.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.afterpay.com *.sandbox.paypal.com *.dev.rvvuptech.com *.rvvup.com www.apple.com apple.com browser-intake-datadoghq.com browser-intake-datadoghq.eu api.dividebuysandbox.co.uk api.dividebuy.co.uk *.salesfire.co.uk *.smartmetrics.co.uk *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'nonce-asGpwFsivgqcMGNjYblQGg==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https://events.mercadolibre.com/csp/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=34379c40-43e5-44c7-a316-b9074203c418; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https://http2.mlstatic.com/ https://mlstaticquic-a.akamaihd.net/; frame-ancestors 'self' https://*.mercadolibre.cl:* https://*.mercadolibre.com:* https://*.mercadolibre.com.ve:* https://*.mercadolibre.com.ar:* https://*.mercadolivre.com.br:* https://*.mercadolibre.com.co:* https://*.mercadolibre.com.ec:* https://*.mercadolibre.com.mx:* https://*.mercadolibre.com.pe:* https://*.mercadolibre.com.uy:* https://*.mercadopago.cl:* https://*.mercadopago.com.ar:* https://*.mercadopago.com.br:* https://*.mercadopago.com.co:* https://*.mercadopago.com.mx:* https://*.mercadopago.com.pe:* https://*.mercadopago.com.uy:* https://*.mercadopago.com.ve:* https://*.mercadopago.com:* https://*.adminml.com:* https://*.mercadolibre.co.cr:* https://*.mercadolibre.com.pa:* https://*.mercadolibre.com.do:* https://*.mercadolibre.com.bo:* https://*.mercadolibre.com.py:* https://*.mercadolibre.com.gt:* https://*.mercadolibre.com.hn:* https://*.mercadolibre.com.ni:* https://*.mercadolibre.com.sv:* https://*.mercadopago.com.ec:* https://*.portalinmobiliario.com:* https://*.mercadolivre.com:* 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com *.bootstrapcdn.com *.cloudflare.com *.cloudfront.net *.fontawesome.com *.hotjar.com *.sfdcstatic.com *.shopify.com *.trustedshops.com *.twimg.com *.twitter.com *.checkout.vficloud.net *.vficloud.net *.amazonaws.com *.checkout.verifone.cloud *.verifone.cloud https://fonts.gstatic.com *.klevu.com *.ksearchnet.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.swellrewards.com *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.checkout.vficloud.net *.vficloud.net *.checkout.verifone.cloud *.verifone.cloud 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.boyslife.org *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com *.doubleclick.net *.facebook.com *.force.com *.hotjar.com *.kaptcha.com *.scouting.org *.swellrewards.com *.twitter.com *.weltpixel.com *.checkout.vficloud.net *.vficloud.net *.checkout.verifone.cloud *.verifone.cloud js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.googleapis.com *.cookiebot.com *.amazonaws.com *.bing.com *.clarity.ms *.cloudflare.com *.cloudfront.net *.facebook.com *.facebook.net *.google.com *.google.co.in *.google.lv *.googleadservices.com *.googletagmanager.com *.hotjar.com *.klarna.com *.lightemporium.com *.magentocommerce.com *.scoutshop.org *.scoutstuff.org *.shopify.com *.siteimproveanalytics.io *.smsbump.com *.swellrewards.com *.twimg.com *.twitter.com *.usercentrics.eu *.ytimg.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com *.reddit.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com player.vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com *.googleapis.com *.gstatic.com *.cookiebot.com *.verifone.cloud *.clarity.ms *.cloudflare.com *.crazyegg.com *.doubleclick.net *.ecomm-nav.com *.facebook.net *.fontawesome.com *.force.com *.google-analytics.com *.googleoptimize.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.jquery.com *.klaviyo.com *.nextopia.net *.nextopiasoftware.com *.paypal.com *.salesforceliveagent.com siteimproveanalytics.com *.stape.io *.swellrewards.com *.trustedshops.com *.twimg.com *.twitter.com *.usercentrics.eu *.vficloud.net *.chasepaymentechhostedpay-var.com *.chasepaymentechhostedpay.com *.my.salesforce-sites.com *.lightning.force.com *.secure.force.com widget.freshworks.com m2epro.freshdesk.com *.checkout.vficloud.net *.checkout.verifone.cloud https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://www.googletagmanager.com tagmanager.google.com *.redditstatic.com *.reddit.com unpkg.com *.kaptcha.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com youtu.be https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.bootstrapcdn.com *.cloudflare.com *.fontawesome.com *.force.com *.google.com *.googleapis.com *.gstatic.com *.klaviyo.com *.nextopia.net *.swellrewards.com *.trustedshops.com *.twimg.com *.twitter.com *.typekit.net *.usercentrics.eu *.secure.force.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://fonts.googleapis.com *.klevu.com *.ksearchnet.com tagmanager.google.com assets.braintreegateway.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.scoutshop.org player.vimeo.com www.youtube.com youtu.be 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.cookiebot.com *.clarity.ms *.cloudflare.com *.crazyegg.com *.doubleclick.net *.facebook.com *.google.lv *.hotjar.com *.hotjar.io *.klaviyo.com *.scoutshop.org *.socialannex.com *.swellrewards.com *.twimg.com *.twitter.com wss: *.secure.force.com widget.freshworks.com m2epro.freshdesk.com *.checkout.vficloud.net *.vficloud.net *.checkout.verifone.cloud *.verifone.cloud https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.kaptcha.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.klaviyo.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://f0e6bfef-e270-42d2-8f01-c8e72656172d.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://www.synergie.fr; frame-src 'self' https://*.docusign.net https://*.docusign.com; script-src 'self' 'strict-dynamic' https://cdn.synergie.fr https://www.googletagmanager.com https://chat-window.kmblabs.com http://static.axept.io https://v2.synergie.intconv.kmblabs.com https://www.gstatic.com https://www.google.com https://maps.googleapis.com https://cdn.signalfx.com 'nonce-hp3X6c8WKimMSbA6NJkafA=='; connect-src 'self' data: https://api.synergie.fr https://www.google-analytics.com https://chatwindow-v2.api.kmblabs.com https://client.axept.io https://api.axept.io https://bam.eu01.nr-data.net https://099bx3d09i.execute-api.eu-west-1.amazonaws.com https://maps.googleapis.com https://synergie-prod.alb.chatbot.kmblabs.com https://rum-ingest.eu1.signalfx.com https://*.signalfx.com https://v2.synergie.intconv.kmblabs.com; img-src 'self' https://cdn.synergie.fr https://media.synergie.fr https://cdnjs.cloudflare.com data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.axept.io https://v2.synergie.intconv.kmblabs.com; font-src 'self' https://fonts.gstatic.com https://fonts.axept.io https://chat-window.kmblabs.com https://v2.synergie.intconv.kmblabs.com 1
script-src 'self' https://cdn.jsdelivr.net; script-src-attr 'self'; style-src 'self'; frame-ancestors 'self' 1
report-uri /csp-report; frame-ancestors www.flygresor.se secure.rentalcars.com brands.datahc.com hyrbil.flygresor.se; child-src 'self' www.flygresor.se b2b-api.etraveli.com www.cdn-net.com www.travelpartner.se secure5.arcot.com staticxx.facebook.com tr.snapchat.com *.adform.net/ *.doubleclick.net weatherwidget.io *.googlesyndication.com *.flygresor.se *.flightmate.com flygresor-travelinfo.fwdev.se *.fwdev.se www.google.com ct.pinterest.com www.googletagmanager.com 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.klarnacdn.net *.klevu.com *.ksearchnet.com https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.nosto.com *.nos.to 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.zenaps.com *.fls.doubleclick.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.nosto.com *.nos.to *.klarna.com https://www.googletagmanager.com/ js.mollie.com https://www.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.awin1.com *.zenaps.com *.wepowerconnections.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.nosto.com *.nos.to *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.mollie.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.nosto.com *.nos.to *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.klevu.com *.ksearchnet.com widget.freshworks.com m2epro.freshdesk.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ js.mollie.com https://www.google.com https://www.gstatic.com https://js.klevu.com https://www.bakerross.com.au 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.nosto.com *.nos.to *.klarnacdn.net https://static.klaviyo.com *.klevu.com *.ksearchnet.com widget.freshworks.com m2epro.freshdesk.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.wepowerconnections.com https://the.sciencebehindecommerce.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.nosto.com *.nos.to *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com widget.freshworks.com m2epro.freshdesk.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://20a27546-5165-4716-8e1c-c91dee6f68ae.sansec.watch/; report-to report-endpoint; 1
default-src * data: mediastream: blob: filesystem: about: ws: wss: 'unsafe-eval' 'wasm-unsafe-eval' 'unsafe-inline';  script-src * data: blob: 'sha256-KWDEEoZgBqBbDbgZCGB7PwwF1esGq0IMYVkC8xtGpuo=';  connect-src * data: blob: 'unsafe-inline';  img-src * data: blob: 'unsafe-inline';  frame-src * data: blob: ;  style-src * data: blob: 'unsafe-inline'; font-src * data: blob: 'unsafe-inline'; frame-ancestors * data: blob:; 1
frame-ancestors 'none'; default-src https://www.czater.pl 'self'; script-src https://www.googletagmanager.com https://*.analytics.google.com https://*.google-analytics.com https://googleads.g.doubleclick.net https://*.czater.pl 'self' 'unsafe-inline'; img-src https://static.sprintdatacenter.pl https://rapiddc.pl https://www.googletagmanager.com https://*.analytics.google.com https://*.google-analytics.com https://*.google.com https://*.google.pl https://googleads.g.doubleclick.net https://www.googleadservices.com data: 'self'; style-src https://www.czater.pl 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.gstatic.com; form-action 'self'; connect-src https://*.googletagmanager.com https://*.analytics.google.com https://*.google-analytics.com https://*.google.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com wss://s2.czater.pl 1
default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; 1
default-src 'self' https: ; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' ; style-src 'self' https: 'unsafe-inline' blob: ; img-src 'self' https: data: blob: ; font-src 'self' https: data: ; media-src 'self' https: blob: ; worker-src 'self' https: blob: ; connect-src 'self' https: wss: ; frame-ancestors 'self' ; base-uri 'self' ; form-action 'self' https: ; frame-src 'self' https: mailto: tel: ; report-uri /csp-report; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com accounts.google.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com www.paypal.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.borica.bg 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com magefan.com cm.magefan.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com https://maps.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com tagmanager.google.com https://www.googletagmanager.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.hsforms.net *.hsforms.com *.gstatic.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com downloads.mailchimp.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://maps.googleapis.com https://player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.google-analytics.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com *.googletagmanager.com *.google.com *.squarecdn.com https://square-fonts-production-f.squarecdn.com https://cash-f.squarecdn.com https://d1g145x70srn7h.cloudfront.net *.fontawesome.com https://fonts.bunny.net *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com https://square-fonts-production-f.squarecdn.com/ https://d1g145x70srn7h.cloudfront.net/ https://cash-f.squarecdn.com/ https://fonts.gstatic.com/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.google.com *.googletagmanager.com *.googleapis.com *.facebook.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.googletagmanager.com *.facebook.com *.squarecdn.com https://sandbox.web.squarecdn.com connect.facebook.net *.disqus.com disqus.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.twitter.com https://pci-connect.squareup.com https://connect.squareup.com https://pci-connect.squareupsandbox.com https://connect.squareupsandbox.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com maps.gstatic.com *.google.com *.google.co.in *.redditstatic.com *.reddit.com connect.facebook.net *.facebook.com *.fbcdn.net *.disqus.com *.disquscdn.com https://firebasestorage.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://meetanshi.com/media/logo.png www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cloudfront.net https://www.gstatic.com/ https://sandbox.api.cash.app/ https://site-assets.afterpay.com/ https://sandbox.web.squarecdn.com/ https://api.cash.app/ https://web.squarecdn.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://franklin-assets.s3.amazonaws.com/ https://static.sandbox.afterpay.com/ https://static.afterpay.com/ https://static.sandbox.afterpay.com/logo/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com maps.googleapis.com *.authorize.net *.paypal.com *.mouseflow.com localmenu.katzsdelicatessen.com *.addthis.com *.noibu.com *.redditstatic.com *.reddit.com *.tiktok.com *.tiktokw.us *.facebook.com *.vibe.co *.squarecdn.com connect.facebook.net *.disqus.com *.disquscdn.com *.avada.io *.shopify.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.googletagmanager.com *.facebook.net www.termsfeed.com *.fontawesome.com *.googleapis.com *.gstatic.com player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu https://js-sandbox.squarecdn.com https://js.squareup.com https://js.afterpay.com/ https://nd.squarecdn.com https://js.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://portal.sandbox.afterpay.com/ https://portal.afterpay.com/ https://cdn.plaid.com/ https://sandbox.kit.cash.app/ https://kit.cash.app/ https://js-sandbox.squarecdn.com/ https://js.squarecdn.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.googletagmanager.com *.google.com *.klaviyo.com *.fontawesome.com *.disquscdn.com https://fonts.bunny.net https://static.klaviyo.com assets.braintreegateway.com *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://fonts.googleapis.com/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com maps.googleapis.com  *.google-analytics.com *.googletagmanager.com *.googleapis.com *.doubleclick.net *.klaviyo.com *.report-uri.com *.noibu.com wss://*.noibu.com *.redditstatic.com *.reddit.com *.facebook.com *.tiktok.com *.tiktokw.us *.vibe.co *.squarecdn.com connect.facebook.net *.disqus.com disqus.com *.disquscdn.com https://get.geojs.io *.avada.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com *.cloudflare.com *.twitter.com *.twimg.com https://pci-connect.squareup.com https://pci-connect.squareupsandbox.com https://api.amplitude.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://o160250.ingest.sentry.io/ https://api.lab.amplitude.com/sdk/vardata https://sandbox.plaid.com/ https://production.plaid.com/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.report-uri.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://katzsdelicatessen.report-uri.com/r/d/csp/enforce; report-to report-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-puaGEggp_Y9xP7IYMIUh0Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://analytics.tiktok.com https://www.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://*.google-analytics.com https://*.bing.com https://connect.facebook.net https://paytr.com https://*.efilli.com https://*.clarity.ms https://*.criteo.net https://*.criteo.com https://*.api.useinsider.com https://api.useinsider.com; style-src 'self' 'unsafe-inline' https://tagmanager.google.com https://fonts.googleapis.com https://*.api.useinsider.com https://*.criteo.net https://*.criteo.com https://*.efilli.com https://teklifimgelsin.com; img-src 'self' blob: data: https://*.teklifimgelsin.com https://www.googletagmanager.com https://www.google.com https://www.google.com.tr https://ssl.gstatic.com https://www.gstatic.com https://*.criteo.net https://*.criteo.com https://*.google-analytics.com https://*.googletagmanager.com https://*.efilli.com https://*.g.doubleclick.net https://*.google.com https://pagead2.googlesyndication.com https://*.bing.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.facebook.com https://ad.doubleclick.net https://ade.googlesyndication.com https://*.clarity.ms https://*.useinsider.com https://*.api.useinsider.com https://c.bing.com https://adservice.google.com; connect-src 'self' https://*.teklifimgelsin.com wss://stream.teklifimgelsin.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://www.google.com https://www.google.com.tr https://*.g.doubleclick.net https://*.google.com https://*.criteo.net https://*.criteo.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.clarity.ms https://c.bing.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://*.bing.com https://o4508680698789888.ingest.de.sentry.io https://*.api.useinsider.com https://*.useinsider.com/ https://*.efilli.com https://ad.doubleclick.net; font-src 'self' data: https://*.static.useinsider.com https://*.efilli.com https://*.criteo.net https://*.criteo.com https://fonts.gstatic.com; frame-src 'self' https://youtube.com https://*.fls.doubleclick.net https://www.youtube.com https://*.efilli.com https://*.criteo.net https://*.criteo.com https://www.googletagmanager.com; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri https://teklifimgelsin.report-uri.com/r/d/csp/reportOnly; 1
default-src 'self' https://www.dinersclub.com.ec;  script-src 'self' blob: https://www.dinersclub.com.ec https://cdn.jsdelivr.net https://www.googletagmanager.com https://*.googletagmanager.com https://*.tagmanager.google.com https://tagassistant.google.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.google.com https://maps.googleapis.com https://*.hotjar.com https://*.cookie-script.com https://validator.cookie-script.com https://*.ads.microsoft.com https://analytics.tiktok.com https://*.analytics.tiktok.com https://*.ads.google.com https://ad.doubleclick.net https://*.doubleclick.net https://*.googleadservices.com https://*.googlesyndication.com https://*.clarity.ms https://*.bing.com https://*.getblueshift.com https://blueshift.com https://cdn.getblueshift.com https://*.facebook.net https://*.facebook.com https://adocolumbia.ado-tech.com https://*.ado-tech.com https://*.amazonaws.com https://stags.bluekai.com https://partner.bluekai.com https://platform.twitter.com https://static.ads-twitter.com https://analytics.twitter.com https://t.co https://*.taboola.com https://*.crwdcntrl.net https://*.criteo.com https://acdn.adnxs.com https://ib.adnxs.com https://demo-1.conversionsapigateway.com https://api.ipify.org https://tags.bkrtx.com https://dce.everflowclient.com https://www.everflow.io https://everflowclient.com https://pii.techlab-cdn.com https://oracleinfinity.io https://*.oracleinfinity.io https://snap.licdn.com https://*.licdn.com https://seguridad.evidenciainformatica.com.ec https://cdnjs.cloudflare.com https://unpkg.com https://www.googleoptimize.com https://*.ads.linkedin.com https://platform.linkedin.com https://recursos.dinersclub.com.ec https://gc.kis.v2.scr.kaspersky-labs.com wss://gc.kis.v2.scr.kaspersky-labs.com https://www.google.com.ec https://www.googleanalytics.com 'unsafe-inline' 'unsafe-eval';  worker-src 'self' blob:;  style-src 'self' https://www.dinersclub.com.ec https://cdn.jsdelivr.net https://*.hotjar.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://dce-documents.s3.amazonaws.com https://dce-documents-npr.s3.amazonaws.com https://dce-documents-npr.s3.us-east-2.amazonaws.com https://dce-documents.s3.us-east-1.amazonaws.com https://optimize.google.com https://tagmanager.google.com https://gc.kis.v2.scr.kaspersky-labs.com wss://gc.kis.v2.scr.kaspersky-labs.com 'unsafe-inline';  img-src 'self' data: blob: https://www.dinersclub.com.ec https://css0.org https://*.hotjar.com https://*.google-analytics.com https://analytics.google.com https://*.linkedin.com https://snap.licdn.com https://*.licdn.com https://www.googletagmanager.com https://oracleinfinity.io https://*.oracleinfinity.io https://*.google.com https://*.google.com.ec https://*.google.com.co https://*.google.com.pe https://*.facebook.com https://stags.bluekai.com https://*.ads.microsoft.com https://*.bing.com https://bat.bing.com https://*.clarity.ms https://*.criteo.com https://*.amazonaws.com https://www.googleadservices.com https://*.googleadservices.com https://*.doubleclick.net https://analytics.tiktok.com https://*.analytics.tiktok.com https://comunidad.com.ec https://apiv3.blubenefits.com.ec https://pagead2.googlesyndication.com https://www.google.es https://gc.kis.v2.scr.kaspersky-labs.com;  media-src 'self' blob: https://dce-documents.s3.amazonaws.com https://*.amazonaws.com;  font-src 'self' data: https://fonts.gstatic.com;  connect-src 'self' https://www.dinersclub.com.ec https://*.dinersclub.com.ec https://oracleinfinity.io https://*.oracleinfinity.io https://*.google.com https://*.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://www.googleadservices.com https://*.googleadservices.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://*.doubleclick.net https://*.hotjar.io wss://*.hotjar.io https://in.hotjar.com https://vc.hotjar.io https://*.getblueshift.com https://blueshift.com https://cdn.getblueshift.com https://*.facebook.com https://connect.facebook.net https://ads.facebook.com https://adocolumbia.ado-tech.com https://*.ado-tech.com https://*.amazonaws.com https://partner.bluekai.com https://analytics.twitter.com https://t.co https://*.taboola.com https://*.crwdcntrl.net https://*.criteo.com https://acdn.adnxs.com https://ib.adnxs.com https://validator.cookie-script.com https://*.cookie-script.com https://analytics.tiktok.com https://*.analytics.tiktok.com https://snap.licdn.com https://*.licdn.com https://seguridad.evidenciainformatica.com.ec https://mpc-prod-23-s6uit34pua-ue.a.run.app https://mpc-prod-14-s6uit34pua-ue.a.run.app https://mpc2-prod-25-is5qn1632q-wl.a.run.app https://demo-1.conversionsapigateway.com https://api.ipify.org wss://www.dinersclub.com.ec https://px.ads.linkedin.com wss://gc.kis.v2.scr.kaspersky-labs.com https://maps.googleapis.com https://cdn.jsdelivr.net https://dinersclub.com.ec https://develop-portal-dce.staging-otb.com https://*.hotjar.com wss://*.hotjar.com https://px.ads.linkedin.com https://analytics-ipv6.tiktokw.us https://pagead2.googlesyndication.com https://banner.appsflyersdk.com https://maps.googleapis.com https://cdn.jsdelivr.net https://www.google.com.ec wss://gc.kis.v2.scr.kaspersky-labs.com https://*.oraclesys.com https://mpc2-prod-25-is5qnl632q-wl.a.run.app https://www.google.com.ec;  frame-src 'self' https://www.dinersclub.com.ec https://www.googletagmanager.com https://*.google.com https://*.hotjar.com https://*.ads.microsoft.com https://*.facebook.com https://*.taboola.com https://www.youtube.com  https://stags.bluekai.com;  object-src 'none';  base-uri 'self';  form-action 'self' https://www.dinersclub.com.ec https://*.dinersclub.com.ec;  frame-ancestors 'self';  upgrade-insecure-requests; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com *.fontawesome.com data: *.cloudfront.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.force.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com 'self' data: blob: 'unsafe-inline' data: www.gstatic.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com magefan.com cm.magefan.com *.cloudfront.net *.google.com *.google.com.mx *.notifications-icommkt.website notifications-icommkt.website *.facebook.com *.google.co.in data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com * *.facebook.net connect.facebook.net graph.facebook.com business.facebook.com https://cdn.jsdelivr.net *.cloudfront.net *.wcx.cloud notifications-icommkt.com *.wcentrix.com *.force.com *.salesforceliveagent.com *.demoup.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com assets.braintreegateway.com *.fontawesome.com https://cdn.jsdelivr.net *.cloudfront.net *.wcentrix.com *.force.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cloudfront.net *.notifications-icommkt.com notifications-icommkt.com track-icommkt.com *.doubleclick.net *.tiktok.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://dismac.com.bo/; report-to report-endpoint; 1
default-src 'self'; object-src 'none'; frame-ancestors 'self'; base-uri 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.klarnacdn.net *.fontawesome.com https://widgets.trustedshops.com 'self' data: https://integrations.etrusted.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.klarna.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.ftcdn.net *.behance.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.oxomi.com/ *.google.com https://widgets.trustedshops.com https://oxomi.com https://integrations.etrusted.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://rum.hlx.page *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com secure.authorize.net test.authorize.net js.braintreegateway.com 'self' data: cdn.novalnet.de cdn.barzahlen.de *.authorize.net *.ytimg.com *.google.com *.paypal.com *.trustedshops.com consent.cookiefirst.com *.oxomi.com https://oxomi.com webitems.matoma.net https://widgets.trustedshops.com https://integrations.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.klarnacdn.net *.fontawesome.com 'self' data: *.oxomi.com https://widgets.trustedshops.com https://oxomi.com webitems.matoma.net https://integrations.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com 'self' data: secure.authorize.net test.authorize.net *.trustedshops.com *.oxomi.com *.etrusted.com https://gc.kes.v2.scr.kaspersky-labs.com https://consent.cookiefirst.com https://edge.cookiefirst.com https://oxomi.com webitems.matoma.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://sdmage2.report-uri.com/r/d/csp/reportOnly; report-to report-endpoint; 1
default-src 'self'; script-src 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' *.google.com *.googleadservices.com *.googletagmanager.com *.jquery.com *.facebook.net *.cookiebot.com *.doubleclick.net *.privacymanager.io *.disqus.com *.twitter.com *.trustpilot.com *.clarity.ms *.gstatic.com *.youtube.com youtube.com *.redditstatic.com; style-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com *.disquscdn.com; img-src 'self' data: https://a.disquscdn.com https://c.clarity.ms https://c.disquscdn.com https://clm.nektony.com https://googleads.g.doubleclick.net https://imgsct.cookiebot.com https://nektony.com https://ps.w.org https://referrer.disqus.com https://secure.gravatar.com https://ssl.gstatic.com https://syndication.twitter.com https://www.google.com https://www.google.com.ua https://www.googletagmanager.com *.facebook.com *.bing.com *.ytimg.com alb.reddit.com; font-src 'self' data: https://fonts.gstatic.com https://nektony.com; connect-src *; media-src 'self'; frame-src 'self' https://consentcdn.cookiebot.com https://disqus.com https://store.payproglobal.com https://td.doubleclick.net https://widget.trustpilot.com https://www.facebook.com https://www.google.com https://www.googletagmanager.com https://www.youtube-nocookie.com https://www.youtube.com; worker-src 'self'; upgrade-insecure-requests; report-uri https://nektony.com/csp-report-mode1.php; manifest-src 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://yastatic.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; media-src 'self' blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://proxy.tproger.ru https://mc.yandex.ru https://top-fwz1.mail.ru https://privacy-cs.mail.ru https://yastatic.net https://*.yandex.ru https://telegram.org https://*.telegram.org https://www.youtube.com https://ads.adfox.ru; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' data: https://mc.yandex.ru wss://mc.yandex.ru https://*.yandex.net https://*.yandex.ru https://top-fwz1.mail.ru https://privacy-cs.mail.ru wss://tproger.ru wss://msg.tproger.ru; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://mc.yandex.ru https://*.yandex.ru https://t.me https://*.telegram.org https://vk.com https://*.vk.com https://rutube.ru https://vkvideo.ru https://codepen.io https://ads.adfox.ru; media-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /wp-node/csp-report 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://www.mycvcreator.com; upgrade-insecure-requests; script-src 'self' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://accounts.google.com https://www.googletagmanager.com https://telegram.org; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com; img-src 'self' data: https://www.google-analytics.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; frame-src https://www.google.com https://recaptcha.google.com https://accounts.google.com; 1
default-src 'self'; base-uri 'self'; form-action 'self' https://siberalemapi.com https://www.siberalemapi.com; frame-ancestors 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://siberalem.com https://*.siberalem.com https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://*.g.doubleclick.net https://www.googleadservices.com https://*.clarity.ms https://connect.facebook.net https://*.tiktok.com https://analytics-ipv6.tiktokw.us https://websdk.appsflyer.com https://*.helpscout.net https://static.cloudflareinsights.com https://appleid.cdn-apple.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.helpscout.net; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://*.siberalem.com https://*.helpscout.net; media-src 'self' https://*.siberalem.com https://*.helpscout.net; connect-src 'self' https://siberalem.com https://*.siberalem.com https://siberalemapi.com https://www.siberalemapi.com https://sibercms.pages.dev https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.g.doubleclick.net https://www.google.com https://www.google.com.tr https://www.googletagmanager.com https://*.clarity.ms https://connect.facebook.net https://www.facebook.com https://graph.facebook.com https://*.tiktok.com https://analytics-ipv6.tiktokw.us https://*.appsflyer.com https://*.appsflyersdk.com https://*.onelink.me https://cloudflareinsights.com https://*.helpscout.net https://d3hb14vkzrxvla.cloudfront.net https://*.pusher.com wss://*.pusher.com https://appleid.apple.com https://signin.apple.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.googletagmanager.com https://*.helpscout.net https://appleid.apple.com https://signin.apple.com; worker-src 'self' blob:; upgrade-insecure-requests 1
frame-ancestors 'self' *.preview.devprod.cloudflare.dev;frame-src 'self' www.youtube.com player.vimeo.com www.recaptcha.net www.google.com www.googletagmanager.com sgtm-cr.vistra.com *.hsforms.com td.doubleclick.net consentcdn.cookiebot.com s.company-target.com cdn.yoshki.com cdn.userway.org platform.twitter.com; report-uri https://vistragroup.com/csp-report 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://cdn.jsdelivr.net https://echqrtrlzdhzyuhtueoj.supabase.co https://cdn.discordapp.com; font-src 'self' data:; media-src 'self' blob: mediastream:; connect-src 'self' https://echqrtrlzdhzyuhtueoj.supabase.co wss://echqrtrlzdhzyuhtueoj.supabase.co https://*.omoggle.com wss://*.omoggle.com; worker-src 'self' blob:; frame-src 'self' 1
default-src 'self' stat.joomlapolis.com https:  data ;     script-src-attr 'self' 'unsafe-inline' stat.joomlapolis.com *.stripe.com *.stripe.network translate.google.com translate.googleapis.com      www.googletagmanager.comi www.google-analytics.com connect.facebook.net blob data ;     script-src 'self' 'unsafe-inline' 'unsafe-eval' stat.joomlapolis.com *.stripe.com *.stripe.network translate.google.com translate.googleapis.com      www.googletagmanager.comi www.google-analytics.com connect.facebook.net blob data ;     script-src-elem 'self' 'unsafe-inline' stat.joomlapolis.com *.stripe.com *.stripe.network translate.google.com translate.googleapis.com     www.google-analytics.com gc.kis.v2.scr.kaspersky-labs.com me.kis.v2.scr.kaspersky-labs.com *.kaspersky-labs.com www.pagespeed-mod.com connect.facebook.net  ;         style-src 'self' 'unsafe-inline' translate.google.com translate.googleapis.com ;     style-src-elem 'self' 'unsafe-inline' translate.googleapis.com  www.gstatic.com  fonts.googleapis.com gc.kis.v2.scr.kaspersky-labs.com me.kis.v2.scr.kaspersky-labs.com *.kaspersky-labs.com pwm-image.trendmicro.com adblockers.opera-mini.net ;     img-src 'self' data: www.joomlapolis.com stat.joomlapolis.com forge.joomlapolis.com *.stripe.com *.stripe.network *.ytimg.com www.gstatic.com www.google.com translate.google.com translate.googleapis.com www.google.com/images fonts.gstatic.com    yastatic.net i.imgur.com servimg.com tinypic.com www.google-analytics.com www.googleadservices.com www.facebook.com img391.imageshack.us blob data ;         frame-src 'self' *.stripe.com *.stripe.network www.youtube.com www.youtube-nocookie.com www.slideshare.net      mozbar.moz.com div.show pwm-image.trendmicro.com ;     font-src 'self' data: fonts.gstatic.com use.typekit.net     *.avast.com chrome-extension github.com/google/fonts/blob chrome-extension   ;     connect-src *.joomlapolis.com *.googleapis.com ;     report-uri /report-csp-jp-c.php ; 1
worker-src blob:; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com *.kxcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com *.eprohub.net *.ariba.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.addthis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.eprohub.net *.ariba.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.fbcdn.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com magefan.com cm.magefan.com *.disqus.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com www.apptrian.com *.googleapis.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com sce.toogoerp.net sce.toogo.io sce-test.toogoerp.net *.disqus.com *.eprohub.net *.ariba.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com downloads.mailchimp.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com www.apptrian.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
child-src 'self' https://*.qualified.com; default-src 'self'; frame-src 'self' https://9628652.fls.doubleclick.net https://td.doubleclick.net https://js.driftt.com https://*.qualified.com https://a8447815042.cdn-pci.optimizely.com https://ct.pinterest.com https://tealium-f.squarecdn.com; worker-src 'self' blob:; connect-src 'self' https://assets.ctfassets.net https://api.broadway.squareup.com https://campaign-hub-production-f.squarecdn.com https://api.squareup.com/v1/cdp/batch https://api.squarestagingexternal.com/v1/cdp/batch https://api.squarestagingexternal.com https://api.squareup.com https://api.squareupstaging.com *.contentsquare.net https://capi.squareup.com https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com https://stats.g.doubleclick.net https://facebook.com https://www.facebook.com https://googleads.g.doubleclick.net http://www.google-analytics.com https://www.google-analytics.com https://google.com https://www.google.com https://us-central1-sq-sgtm-prod.cloudfunctions.net https://www.googletagmanager.com http://images.ctfassets.net https://images.ctfassets.net http://424-iab-218.mktoresp.com https://424-iab-218.mktoresp.com https://xms2-marketo.beta.stage.sqprod.co https://424-iab-218.mktoutil.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://logx.optimizely.com https://ct.pinterest.com https://conversions-config.reddit.com https://pixel-config.reddit.com https://www.redditstatic.com *.ingest.us.sentry.io *.6sc.co https://api.sprig.com https://squareupstaging.com https://visitor-scoring-new.marketlinc.com https://api.chilipiper.com https://squareinc-sandbox.chilipiper.com https://squareinc.chilipiper.com https://www.workwithsquare.com wss://*.qualified.com https://*.qualified.com https://pw-renderer-production-c.squarecdn.com localhost:*; font-src 'self' https://cash-f.squarecdn.com https://square-fonts-production-f.squarecdn.com; img-src 'self' data: blob: https://ib.adnxs.com https://assets.ctfassets.net https://cdn.blisspointmedia.com https://campaign-hub-production-f.squarecdn.com *.contentsquare.net https://ad.doubleclick.net https://facebook.com https://www.facebook.com https://google.com https://www.google.com https://adservice.google.com https://googleads.g.doubleclick.net http://www.google-analytics.com https://www.google-analytics.com https://*.g.doubleclick.net https://www.googletagmanager.com http://images.ctfassets.net https://images.ctfassets.net https://px.ads.linkedin.com https://cdn.cookielaw.org https://pixel.pointmediatracker.com https://alb.reddit.com *.6sc.co https://api.squareup.com https://api.squareupstaging.com https://insight.adsrvr.org https://match.adsrvr.org https://*.qualified.com https://pw-renderer-production-c.squarecdn.com; manifest-src 'self' https://pw-renderer-production-c.squarecdn.com; media-src 'self' mediastream: https://assets.ctfassets.net https://js.driftt.com http://videos.ctfassets.net https://videos.ctfassets.net https://*.qualified.com; script-src 'self' *.contentsquare.net https://www.datadoghq-browser-agent.com https://js.driftt.com https://*.qualified.com https://connect.facebook.net https://www.googleadservices.com https://googleads.g.doubleclick.net http://www.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com https://campaign-hub-production-f.squarecdn.com https://lift-ai-js.marketlinc.com https://martech-development-c.squarecdn.com https://martech-production-c.squarecdn.com https://martech-staging-c.squarecdn.com http://munchkin.marketo.net https://munchkin.marketo.net https://cdn.cookielaw.org https://a8447815042.cdn-pci.optimizely.com https://s.pinimg.com https://ct.pinterest.com https://pw-renderer-production-c.squarecdn.com https://pw-renderer-staging-c.squarecdn.com https://pwt-production-c.squarecdn.com https://pwt-staging-c.squarecdn.com https://sales-bridge-production-c.squarecdn.com https://sales-bridge-staging-c.squarecdn.com https://squareinc-sandbox.chilipiper.com https://squareinc.chilipiper.com https://www.workwithsquare.com https://www.redditstatic.com *.6sc.co https://cdn.sprig.com https://xms-production-f.squarecdn.com https://www.youtube.com https://pw-renderer-production-c.squarecdn.com 'nonce-D5/zamBVxrOJUHnNNy12qw=='; style-src 'self' https://square-fonts-production-f.squarecdn.com https://sales-bridge-production-c.squarecdn.com https://sales-bridge-staging-c.squarecdn.com 'unsafe-inline' https://*.qualified.com https://pw-renderer-production-c.squarecdn.com; frame-ancestors 'self' https://app.contentful.com; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubd9af00759e65a48ba7ee3ff1dfa4260b&dd-evp-origin=content-security-policy&ddsource=csp-report; report-to browser-intake-datadoghq 1
font-src *.googleapis.com *.gstatic.com data: 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com https://fonts.gstatic.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.google.com *.doubleclick.net *.facebook.com https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.avada.io player.vimeo.com https://player.vimeo.com https://www.youtube.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.fontawesome.com https://fonts.googleapis.com http://fonts.googleapis.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com https://get.geojs.io *.avada.io https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; frame-src 'self' googletagmanager.com *.googletagmanager.com localizedirect.cdn.gridly.com *.gridly.com; script-src 'nonce-ied/uc76riS7eln6IF9ukImiZGF7YJRr' 'unsafe-eval' 'unsafe-inline' 'self' https: http: 'self' 'unsafe-inline' 'unsafe-hashes'; script-src-attr 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' localizedirect.cdn.gridly.com *.gridly.com googletagmanager.com *.googletagmanager.com googleapis.com *.googleapis.com hsforms.net *.hsforms.net hsforms.com *.hsforms.com onetrust.com *.onetrust.com doubleclick.net *.doubleclick.net; connect-src 'self' hsforms.net *.hsforms.net hsforms.com *.hsforms.com onetrust.com *.onetrust.com google.com *.google.com doubleclick.net *.doubleclick.net; img-src * data:; media-src * data:; style-src 'self' 'unsafe-inline' localizedirect.cdn.gridly.com *.gridly.com fonts.googleapis.com google.com *.google.com hsforms.net *.hsforms.net hsforms.com *.hsforms.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' localizedirect.cdn.gridly.com *.gridly.com fonts.googleapis.com hsforms.net *.hsforms.net hsforms.com *.hsforms.com; font-src 'self' data: fonts.gstatic.com; base-uri 'self'; form-action 'self'; report-uri /.netlify/functions/__csp-violations 1
object-src 'none';base-uri 'self';script-src 'nonce-QgCjCVcCeIiP-6e7KmpwmA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
connect-src 'self' noembed.com *.plyr.io *.usercentrics.eu tracker.muellergroup.com translate.googleapis.com; img-src 'self' data: *.ytimg.com *.usercentrics.eu translate.google.com fonts.gstatic.com www.facebook.com; default-src 'self' 'unsafe-inline' *.usercentrics.eu *.youtube.com tracker.muellergroup.com data: connect.facebook.net; frame-src *.youtube.com *.youtube-nocookie.com; report-uri https://www.muellergroup.com/@http-reporting?csp=report&requestTime=1789284350159951&requestHash=0bf60db6144627cec5108be1fbe8ca5995f02cb1 1
default-src 'self'; script-src 'self' 'nonce-NV4npLi1rZ48gliQS2EfaOCF2DLhixs9RInX5zSxnU5dxOIuGLy4EA' 'wasm-unsafe-eval' https://matomo.ecchr.eu https://consent.cookiebot.com https://consentcdn.cookiebot.com https://connect.facebook.net https://*.googleapis.com https://js.hcaptcha.com https://spenden.twingle.de 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://imgsct.cookiebot.com https://*.gstatic.com https://*.googleapis.com https://*.google.com https://*.googleusercontent.com https://*.ggpht.com https://www.facebook.com; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://consentcdn.cookiebot.com https://newassets.hcaptcha.com https://loa.ecchr.eu/ https://loa-staging.ecchr.eu/ https://spenden.twingle.de/ mailto:; worker-src 'self' blob:; media-src 'self' data:; style-src 'self' 'unsafe-inline' blob: https://*.googleapis.com https://*.gstatic.com 'report-sample'; style-src-elem 'self' 'unsafe-inline' https://*.googleapis.com https://*.gstatic.com 'report-sample'; connect-src 'self' data: https://consent.cookiebot.com https://consentcdn.cookiebot.com https://matomo.ecchr.eu/ https://newassets.hcaptcha.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://www.facebook.com; font-src 'self' data: https://fonts.gstatic.com; report-uri https://www.ecchr.eu/@http-reporting?csp=report&requestTime=1789284551661503&requestHash=04a7b9271dc1327ba70cd7e98e10b117d4a38160 1
script-src ‘self’; frame-ancestors 'self' 1
script-src 'self' 'nonce-TjFH0OUpaSJQaeFLircIbQ=='; report-uri / 1
default-src 'self'; img-src *; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 1
default-src 'self'; script-src 'self' https://analytics.tiktok.com https://bat.bing.com https://cdn-3.convertexperiments.com https://cdn-4.convertexperiments.com https://cdn.cookielaw.org https://cdn.debugbear.com https://cdn.ometria.com https://script.hotjar.com https://code.jquery.com https://connect.facebook.net https://googleads.g.doubleclick.net https://p.teads.tv https://s.pinimg.com https://script.hotjar.com https://static.hotjar.com https://unpkg.com https://widget.trustpilot.com https://www.bing.com https://js.klarna.com https://payments.worldpay.com https://rum-static.pingdom.net https://www.awin1.com https://www.dwin1.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://app.convert.com https://ct.pinterest.com https://no-cdn.convertexperiments.com https://r.bing.com https://apis.google.com https://js.playground.klarna.com https://translate-pa.googleapis.com https://translate.google.com https://translate.googleapis.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://*.ssl.ak.dynamic.tiles.virtualearth.net https://www.flyingflowers.co.uk https://www.interflora.ie https://www.interflora.co.uk https://www.paypal.com https://static.zdassets.com 'report-sample'; script-src-attr 'self'; script-src-elem 'self' https://cdn-4.convertexperiments.com https://www.paypal.com https://tr.snapchat.com https://atlas.microsoft.com https://static.zdassets.com https://www.googletagmanager.com https://www.dwin1.com https://widget.trustpilot.com https://unpkg.com https://static.hotjar.com https://script.hotjar.com https://s.pinimg.com https://rum-static.pingdom.net https://js.klarna.com https://googleads.g.doubleclick.net https://ct.pinterest.com https://connect.facebook.net https://cdn.ometria.com https://cdn.debugbear.com https://cdn.cookielaw.org https://bat.bing.com https://analytics.tiktok.com https://payments.worldpay.com; connect-src 'self' https://hpp.worldpay.com https://tr.snapchat.com https://tr6.snapchat.com https://*.metrics.convertexperiments.com https://ekr.zdassets.com https://ad.doubleclick.net https://analytics.tiktok.com https://ask.hotjar.io https://bat.bing.com https://cdn-3.convertexperiments.com https://cdn.cookielaw.org https://cdn.debugbear.com https://cm.teads.tv https://content.hotjar.io https://ct.pinterest.com https://data.debugbear.com https://googleads.g.doubleclick.net https://in.hotjar.com https://insights.algolia.io https://l.teads.tv https://logs.convertexperiments.com https://metrics.hotjar.io https://msn7pvpzhu-1.algolianet.com https://msn7pvpzhu-2.algolianet.com https://msn7pvpzhu-3.algolianet.com https://msn7pvpzhu-dsn.algolia.net https://stats.g.doubleclick.net https://surveystats.hotjar.io https://t.teads.tv https://trk.ometria.com https://unpkg.com https://vc.hotjar.io https://widget.trustpilot.com wss://ws.hotjar.com https://www.bing.com https://www.facebook.com https://media.interflora.co.uk https://apis.google.com https://cdn.ometria.com https://geolocation.onetrust.com https://payments.worldpay.com https://privacyportal-eu.onetrust.com https://rum-collector-2.pingdom.net https://rum-static.pingdom.net https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://uksouth-0.in.applicationinsights.azure.com https://region1.google-analytics.com https://pagead2.googlesyndication.com https://o4506853695881216.ingest.us.sentry.io https://*.playground.klarnaevt.com https://adservice.google.com https://cdn-4.convertexperiments.com https://connect.facebook.net https://js.klarna.com https://js.playground.klarna.com https://oc.klarnaevt.com https://eu.klarnaevt.com https://region1.analytics.google.com https://analytics.google.com https://api.edq.com https://bat.bing.net https://dev.virtualearth.net https://translate.googleapis.com https://translate-pa.googleapis.com https://www.google.co.uk https://na.klarnaevt.com https://atlas.microsoft.com https://na.klarnaevt.com https://www.interflora.ie https://www.flyingflowers.co.uk https://dc.services.visualstudio.com https://www.awin1.com https://www.googleadservices.com https://wepowerconnections.com https://fonts.gstatic.com https://google.com https://www.paypal.com https://analytics-ipv6.tiktokw.us https://www.sandbox.paypal.com https://cdn.media.amplience.net https://o24547.ingest.sentry.io; style-src 'self' 'unsafe-inline'; frame-src 'self' https://tr.snapchat.com https://*.fls.doubleclick.net https://match.adsrvr.org https://ct.pinterest.com https://hpp.worldpay.com https://js.klarna.com https://payments.worldpay.com https://td.doubleclick.net https://widget.trustpilot.com https://www.awin1.com https://www.facebook.com https://js.klarna.com https://pay.klarna.com https://www.paypal.com https://www.googletagmanager.com https://www.sandbox.paypal.com; img-src 'self' data: https://www.interflora.co.uk https://media.interflora.co.uk https://ad.doubleclick.net https://analytics.tiktok.com https://bat.bing.com https://cdn.cookielaw.org https://cm.teads.tv https://connect.facebook.net https://googleads.g.doubleclick.net https://l.teads.tv https://stats.g.doubleclick.net https://t.teads.tv https://trk.ometria.com https://www.awin1.com https://www.bing.com https://www.facebook.com https://logs.convertexperiments.com https://adservice.google.com https://media.flyingflowers.co.uk https://translate.google.com https://www.flyingflowers.co.uk https://www.googletagmanager.com https://t.ssl.ak.dynamic.tiles.virtualearth.net https://interflora.a.bigcontent.io https://ade.googlesyndication.com https://www.wepowerconnections.com https://eu.fareye.co https://cdn.media.amplience.net https://media.interflora.ie https://www.interflora.ie https://fonts.gstatic.com https://www.google.co.uk https://www.google.com https://pagead2.googlesyndication.com https://bat.bing.net https://analytics-ipv6.tiktokw.us https://google.com https://www.googleadservices.com; form-action 'self' https://payments.worldpay.com; worker-src 'self'; report-uri https://interflorauk.report-uri.com/r/t/csp/reportOnly;  1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.fontawesome.com https://fonts.bunny.net https://www.nominette.com https://demo.nominette.nl data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.adyen.com 'self' 'unsafe-inline'; frame-ancestors *.gstatic.com https://www.nominette.com https://demo.nominette.nl 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.braintreegateway.com *.paypal.com google.com *.google.com * www.google.com *.hotjar.com *.hotjar.io https://www.nominette.com https://demo.nominette.nl 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https://firebasestorage.googleapis.com maps.gstatic.com maps.googleapis.com *.openstreetmap.org https://maps.googleapis.com *.google.com *.google.be *.googleapis.com *.magentocommerce.com *.trustprofile.io bat.bing.com *.facebook.com https://www.nominette.com https://demo.nominette.nl maps.google.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page *.avada.io *.shopify.com www.gstatic.com maps.googleapis.com *.googleapis.com *.hotjar.com *.hotjar.io *.voyado.com https://www.nominette.com bat.bing.com *.clarity.ms *.realytics.io *.realytics.net connect.facebook.net https://demo.nominette.nl 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.cash.app *.fontawesome.com https://fonts.bunny.net *.googleapis.com https://www.nominette.com https://demo.nominette.nl 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * https://get.geojs.io *.avada.io *.openstreetmap.org https://maps.googleapis.com *.adyen.com *.google.be *.googleapis.com *.g.doubleclick.net *.hotjar.com *.hotjar.io *.voyado.com *.exatom.io bat.bing.com *.clarity.ms *.realytics.io *.stape.cc 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' *.doubleclick.net get.geojs.io sgtm.adagio-city.com; child-src 'self' blob:; connect-src 'self' cdn.cookielaw.org maps.googleapis.com *.googletagmanager.com *.cedexis.com *.google-analytics.com *.contentsquare.net connect.facebook.net *.tradelab.fr ib.adnxs.com *.googleadservices.com ad.avtm.fr *.google.com.ua *.cardinalcommerce.com *.online-metrix.net *.fastlylb.net *.facebook.com *.execute-api.us-east-1.amazonaws.com *.google.nl *.metaffiliation.com *.wonderpush.com *.analytics.google.com googleads.g.doubleclick.net *.cedexis-radar.net *.google.com *.doubleclick.net ipinfo.io *.gstatic.com a-cedexis.msedge.net *.onetrust.com *.fastlyb.net swrap.tradedoubler.com sgtm.adagio-city.com *.pinterest.com s.pinimg.com get.geojs.io analytics.tiktok.com *.nr-data.net *.us-east-1.amazonaws.com *.kontorolabs.com *.sojern.com bat.bing.net bat.bing.com *.ip-api.com 2643.userly.net mapsresources-pa.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com; font-src *; frame-src 'self' *.cedexis-test.com *.doubleclick.net static.addtoany.com *.google.com *.youtube.com my.matterport.com *.citrix-itm-test.com *.facebook.com *.fbcdn.net *.citm-test.com *.cardinalcommerce.com *.online-metrix.net cedexis-test.gcorelabs.com *.contentsquare.net csxd.all.accor.com csxd.mag-adagio.com ct.pinterest.com s.pinimg.com *.adagio-city.com *.googletagmanager.com sgtm.adagio-city.com *.itm.cloud.com *.by.wonderpush.com data: blob:; img-src * data:; media-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' adagio.nonce cdn.cookielaw.org maps.googleapis.com *.googletagmanager.com *.cedexis.com *.google-analytics.com ssl.google-analytics.com *.contentsquare.net connect.facebook.net *.tradelab.fr ib.adnxs.com *.googleadservices.com googleads.g.doubleclick.net *.cedexis-radar.net *.google.com *.doubleclick.net ipinfo.io *.gstatic.com a-cedexis.msedge.net *.onetrust.com *.fastlyb.net swrap.tradedoubler.com ad.avtm.fr *.google.com.ua *.google.de *.cardinalcommerce.com *.elitrack.com *.metaffiliation.com *.wonderpush.com ct.pinterest.com s.pinimg.com *.sojern.com sgtm.adagio-city.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://github.com https://static.addtoany.com https://try.abtasty.com https://www.google.com staticaws.fbwebprogram.com; script-src-attr 'self' 'unsafe-hashes' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' cdn.cookielaw.org maps.googleapis.com *.googletagmanager.com *.cedexis.com *.google-analytics.com *.contentsquare.net connect.facebook.net *.tradelab.fr ib.adnxs.com *.googleadservices.com googleads.g.doubleclick.net *.cedexis-radar.net *.google.com *.doubleclick.net ipinfo.io *.gstatic.com a-cedexis.msedge.net *.onetrust.com *.fastlyb.net swrap.tradedoubler.com ad.avtm.fr *.google.com.ua *.cardinalcommerce.com *.online-metrix.net *.elitrack.com *.metaffiliation.com *.wonderpush.com s.pinimg.com cdn.jsdelivr.net *.adagio-city.com analytics.tiktok.com ct.pinterest.com bat.bing.com *.sojern.com surveys-static-prd.survicate-cdn.com survey.survicate.com 2643.userly.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://github.com https://static.addtoany.com https://try.abtasty.com https://www.google.com staticaws.fbwebprogram.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; style-src-attr 'self' 'unsafe-hashes' 'unsafe-inline'; style-src-elem * 'unsafe-inline'; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com cash-f.squarecdn.com https://*.gstatic.com *.pikolin.com/es *.pikolin.com/pt *.magentosite.cloud *.beds.es *.googleapis.com https://script.hotjar.com *.landbot.io applepay.cdn-apple.com/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.adyen.com *.pikolin.com/es *.pikolin.com/pt *.magentosite.cloud *.beds.es api.paycomet.com *.ogone.com *.v-psp.com https://www.facebook.com *.redsys.es 'self' 'unsafe-inline'; frame-ancestors *.pikolin.com/es *.pikolin.com/pt *.magentosite.cloud *.beds.es *.adobe.com https://bid.g.doubleclick.net https://www.linkbux.com/ 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.adyen.com *.dotdigital-pages.com *.dotdigital.com *.awin1.com *.zenaps.com *.fls.doubleclick.net *.pikolin.com/es *.pikolin.com/pt *.magentosite.cloud *.beds.es www.google.com api.paycomet.com *.doubleclick.net pay.google.com service.force.com hal9000.redintelligence.net https://pikolinrecommend.botslovers.com https://*.soreto.com https://ams.creativecdn.com/ https://www.facebook.com/ https://www.awin1.com/ *.redsys.es https://www.googletagmanager.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.trustpilot.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https://*.gstatic.com *.adyen.com *.trackedlink.net *.ddlnk.net *.awin1.com *.zenaps.com *.wepowerconnections.com *.pikolin.com https://pikolin.com *.magentosite.cloud *.beds.es *.adotmob.com *.facebook.com *.facebook.net *.google.com *.google.es *.googleapis.com *.omtrdc.net https://*.g.doubleclick.net/ *.doubleclick.net https://*.googletagmanager.com *.media-amazon.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com https://ade.googlesyndication.com https://lantern.roeyecdn.com https://lantern.roeye.com https://pikolinrecommend.botslovers.com https://*.tagmanager.google.com https://pikolin.botslovers.com https://cdn.botslovers.com https://t.teads.tv/ https://c.clarity.ms/ https://*.bing.com/ https://static.hotjar.com https://script.hotjar.com https://survey-images.hotjar.com https://rt.udmserve.net/ https://pixel.rubiconproject.com https://www.awin1.com/ https://eb2.3lift.com/ https://secure.adnxs.com/ https://ih.adscale.de/ https://sync.outbrain.com/ https://ssp-csync.smartadserver.com/ https://ads.stickyadstv.com https://ads.yieldmo.com/ https://api.soreto.com/ https://cdn.doofinder.com/ https://ib.adnxs.com/ eu1-doofinderuser.s3.amazonaws.com https://*.collect.igodigital.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com *.pikolin.com/es *.pikolin.com/pt *.magentosite.cloud *.beds.es www.google.com https://maps.googleapis.com *.gstatic.com *.zdassets.com js-agent.newrelic.com *.serving-sys.com *.facebook.net *.doubleclick.net *.zopim.com *.cstatic.weborama.fr https://cdn.cookielaw.org https://pikolin.botslovers.com.co https://pikolin.botslovers.com https://pikolinrecommend.botslovers.com https://cdn.landbot.io https://service.force.com https://cdn.doofinder.com *.clarity.ms *.hotjar.com https://www.dwin1.com https://www.wepowerconnections.com https://lantern.roeyecdn.com https://espadesa.my.salesforce.com/ https://*.googletagmanager.com https://*.tagmanager.google.com https://*.google-analytics.com https://www.googleadservices.com https://p.teads.tv/ https://*.soreto.com https://cdn.frizbit.com/ https://js.cookieless-data.com/ https://*.adform.net/ https://js.sddan.com/ https://tags.creativecdn.com/ https://*.bing.com https://www.awin1.com/ https://the.sciencebehindecommerce.com/ https://*.datnova.com/ https://static.lightning.force.com https://espadesa.secure.force.com https://d.la11-core1.sfdc-cehfhs.salesforceliveagent.com/ https://d.la2-c1-cdg.salesforceliveagent.com/ *.redsys.es https://sslwidget.criteo.com/ https://dynamic.criteo.com/ https://pikolin--presandbox.sandbox.my.site.com/ https://pikolin.my.site.com/ https://www.cetelem.es/ https://*.collect.igodigital.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.trustpilot.com https://assets.adobedtm.com https://510004498.collect.igodigital.com https://www.pikolin.com https://pikolin.my.site.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.cash.app https://fonts.googleapis.com/ *.pikolin.com/es *.pikolin.com/pt *.magentosite.cloud *.beds.es *.googleapis.com service.force.com *.clarity.ms https://cdn.doofinder.com https://*.googletagmanager.com https://*.tagmanager.google.com https://static.hotjar.com https://script.hotjar.com https://cdn.frizbit.com/ https://espadesa.secure.force.com/ https://pikolin--presandbox.sandbox.my.site.com/ https://pikolin.my.site.com/ *.trustpilot.com 'self' 'unsafe-inline'; object-src *.pikolin.com/es *.pikolin.com/pt *.magentosite.cloud *.beds.es 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.pikolin.com https://pikolin.com *.magentosite.cloud *.beds.es *.zdassets.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.pikolin.com/es *.pikolin.com/pt *.magentosite.cloud *.beds.es 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com * *.adyen.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.wepowerconnections.com https://the.sciencebehindecommerce.com *.pikolin.com/es *.pikolin.com/pt pikolin.tt.omtrdc.net *.magentosite.cloud *.beds.es *.zdassets.com *.zendesk.com *.zopim.com wss://widget-mediator.zopim.com *.serving-sys.com *.analytics.analytics.com *.googletagmanager.com *.g.doubleclick.net *.demdex.net *.doubleclick.net https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com https://maps.googleapis.com https://google.com https://www.google.es https://www.google.com https://pagead2.googlesyndication.com pay.google.com https://payments-eu.amazon.com *.amazon.com eu1-layer.doofinder.com wss://eu1-layer.doofinder.com/ *.clarity.ms https://*.hotjar.io https://*.hotjar.com wss://*.hotjar.com https://pikolinrecommend.botslovers.com *.tt.omtrdc.net https://pikolin.botslovers.com https://cdn.botslovers.com/ https://www.facebook.com/ https://cm.teads.tv/ https://t.teads.tv/ https://www.wepowerconnections.com https://*.soreto.com https://*.frizbit.com/ https://ams.creativecdn.com/ https://the.sciencebehindecommerce.com/ https://geolocation.onetrust.com https://privacyportal.onetrust.com https://privacyportal-eu.onetrust.com https://*.bing.com/ https://espadesa.secure.force.com/ *.googleapis.com *.landbot.io sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com https://*.trustpilot.com/ 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com *.pikolin.com/es *.pikolin.com/pt *.magentosite.cloud *.beds.es https://*.soreto.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.pikolin.com/es *.pikolin.com/pt *.magentosite.cloud *.beds.es 'self' 'unsafe-inline'; report-uri https://pikolin.report-uri.com/r/d/csp/reportOnly; report-to report-endpoint; 1
font-src *.fontawesome.com fonts.gstatic.com maxcdn.bootstrapcdn.com *.typekit.net *.gstatic.com 'self' data: *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com sandbox.przelewy24.pl secure.przelewy24.pl *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://www.facebook.com/ *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ pay.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com https://vars.hotjar.com/ https://www.facebook.com/ https://ct.pinterest.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com static.przelewy24.pl www.gstatic.com gstatic.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de https://www.google.pl/ https://www.google.com/ https://www.facebook.com/ https://ct.pinterest.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ sandbox.przelewy24.pl secure.przelewy24.pl pay.google.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https://cdn.polyfill.io https://browser.sentry-cdn.com s7.addthis.com *.avada.io https://www.googletagmanager.com/ https://googleads.g.doubleclick.net/ https://static.cloudflareinsights.com/ https://connect.facebook.net/ https://static.hotjar.com/ https://script.hotjar.com/ https://s.pinimg.com/ assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.google.com *.gstatic.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com fonts.googleapis.com maxcdn.bootstrapcdn.com unsafe-inline *.typekit.net *.googleapis.com *.gstatic.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com sandbox.przelewy24.pl secure.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https://*.ingest.sentry.io ekr.zdassets.com/ https://get.geojs.io *.avada.io https://region1.analytics.google.com/ https://stats.g.doubleclick.net/ https://www.facebook.com/ https://vc.hotjar.io/ https://in.hotjar.com/ https://content.hotjar.io/ https://ct.pinterest.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com ws: t.elasticsuite.io *.google-analytics.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'nonce-56TxvLl-skRoFwk41nLrLtYS' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; img-src 'self' data: https:; font-src 'self' data: https://cdnjs.cloudflare.com; connect-src 'self'; frame-src 'self' https://www.youtube.com https://player.vimeo.com; form-action 'self'; upgrade-insecure-requests; block-all-mixed-content 1
default-src 'self' https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https: 1
default-src 'self' https://cdn.static-benufarma.it; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.static-benufarma.it https://www.googletagmanager.com https://www.google-analytics.com https://www.benufarma.it https://*.klaviyo.com https://*.usercentrics.eu https://googleads.g.doubleclick.net https://*.heresai.it https://*.competitoor.com https://widget.feedaty.com https://connect.facebook.net https://accessibile.adiacent.space https://*.hotjar.com https://bat.bing.com https://tps.trovaprezzi.it https://utt.impactcdn.com https://maps.googleapis.com https://cdn.preciso.net https://s.kk-resources.com https://ban.2trk.info https://*.verbolia.com; style-src 'self' 'unsafe-inline' https://cdn.static-benufarma.it https://widget.feedaty.com https://fonts.googleapis.com https://*.klaviyo.com https://www.gstatic.com; img-src 'self' data: https://cdn.static-benufarma.it https://cdn.shopify.com https://www.google-analytics.com https://benufarma-cms-prod.spotview.dev https://widget.feedaty.com https://cms.static-benufarma.it https://*.heresai.it https://www.google.it https://www.google.com https://*.usercentrics.eu https://maps.googleapis.com https://*.competitoor.com https://d3k81ch9hvuctc.cloudfront.net https://www.googletagmanager.com https://bat.bing.com https://maps.gstatic.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.ojrq.net https://flagcdn.com https://www.facebook.com https://cdn-img.widilo.it https://fonts.gstatic.com; connect-src 'self' https://cdn.static-benufarma.it https://*.algolia.net https://*.algolianet.com https://insights.algolia.io https://www.google-analytics.com https://region1.analytics.google.com https://bat.bing.com https://*.verbolia.com https://www.google.com https://*.usercentrics.eu https://*.google-analytics.com https://pagead2.googlesyndication.com https://*.klaviyo.com https://widget.feedaty.com https://*.heresai.it wss://bot.heresai.it https://checkout.benufarma.it https://*.doubleclick.net https://admentaitaliaspa.pxf.io https://maps.googleapis.com https://www.googleadservices.com https://*.hotjar.io https://*.hotjar.com wss://ws.hotjar.com https://analytics.google.com https://www.googletagmanager.com https://www.google.it https://loyalty.benufarma.it https://bat.bing.net https://wishlist-prod-755544889294.europe-west3.run.app; font-src 'self' https://cdn.static-benufarma.it https://fonts.gstatic.com https://*.klaviyo.com data:; frame-src 'self' https://app.usercentrics.eu https://*.doubleclick.net https://ban.2trk.info https://benuflyers.localstrategy.it https://www.youtube.com; worker-src 'self' blob:; media-src 'self' https://cdn.static-benufarma.it https://www.benufarma.it; report-uri https://www.benufarma.it/api/csp-report 1
default-src 'self' *.fls.doubleclick.net *.google-analytics.com *.overdrive.com bam.nr-data.net connect.facebook.net hello.myfonts.net stats.g.doubleclick.net tracking.crazyegg.com/clock; connect-src 'self' *.google-analytics.com analytics.google.com bam.nr-data.net hello.myfonts.net manager.us.smartlook.cloud script.crazyegg.com/pages/data-scripts/0023/8294.json stats.g.doubleclick.net tracking.crazyegg.com/clock www.facebook.com/tr/ api.digioh.com jsapi.azurewebsites.net analytics.digioh.com; script-src 'self' apis.google.com/js/platform.js bam.nr-data.net connect.facebook.com connect.facebook.net js-agent.newrelic.com script.crazyegg.com servedbyadbutler.com/adserve/ servedbyadbutler.com/app.js web-sdk.smartlook.com www.google-analytics.com/analytics.js www.googletagmanager.com cdn.digioh.com scripts.digioh.com lightboxcdn.digioh.com 'unsafe-eval' 'unsafe-inline'; script-src-elem 'self' apis.google.com/ apis.google.com/_/scs/apps-static/_/js/ apis.google.com/js/platform.js bam.nr-data.net connect.facebook.net js-agent.newrelic.com/ script.crazyegg.com/pages/scripts/0023/8294.js script.crazyegg.com/pages/versioned/common-scripts/ servedbyadbutler.com/adserve/ servedbyadbutler.com/app.js web-sdk.smartlook.com www.google-analytics.com/analytics.js www.google-analytics.com/plugins/ua/ec.js www.google.com/recaptcha www.googletagmanager.com 'unsafe-inline'; style-src 'self' 'unsafe-inline'; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'nonce-O3BN4a16uhL0s/wSCEc23sx1jUo='; img-src 'self' data: images.contentreserve.com/ img1.od-cdn.com servedbyadbutler.com/getad.img/ t.co/i/ www.facebook.com/tr/ www.google-analytics.com/collect www.google.com/ads/ www.googletagmanager.com/a www.googletagmanager.com/td cdn.digioh.com *.google-analytics.com *.doubleclick.net; frame-src 'self' 9250847.fls.doubleclick.net accounts.google.com/ classroom.google.com www.facebook.com/ www.gstatic.com/; worker-src blob:; object-src 'none'; report-uri https://itsentry.overdrive.com/api/13/security/?sentry_key=86a98bc6ee19c71aed01755910f50c3c 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://challenges.cloudflare.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' data: https: blob:; font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com; connect-src 'self' https: https://*.dns.ipwtf.com https://challenges.cloudflare.com https://cloudflareinsights.com https://*.cloudflareinsights.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net wss:; frame-src 'self' https://challenges.cloudflare.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://connect.facebook.net https://data.milieudefensie.nl https://www.googletagmanager.com https://consent.cookiebot.com https://js-eu1.hs-scripts.com https://js-eu1.hs-analytics.net https://js-eu1.hs-banner.com https://js-eu1.usemessages.com https://js-eu1.hubspot.com https://snap.licdn.com https://siteimproveanalytics.com https://analytics.milieudefensie.nl https://consentcdn.cookiebot.com https://eu-assets.i.posthog.com https://dev.visualwebsiteoptimizer.com https://googleads.g.doubleclick.net; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://connect.facebook.net https://data.milieudefensie.nl https://www.googletagmanager.com https://consent.cookiebot.com https://js-eu1.hs-scripts.com https://js-eu1.hs-analytics.net https://js-eu1.hs-banner.com https://js-eu1.usemessages.com https://js-eu1.hubspot.com https://snap.licdn.com https://siteimproveanalytics.com https://analytics.milieudefensie.nl https://consentcdn.cookiebot.com https://eu-assets.i.posthog.com https://dev.visualwebsiteoptimizer.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://data.milieudefensie.nl https://www.google.com https://dev.visualwebsiteoptimizer.com https://consentcdn.cookiebot.com https://eu.i.posthog.com https://api-eu1.hubspot.com https://cta-eu1.hubspot.com https://analytics.milieudefensie.nl https://px.ads.linkedin.com; frame-src 'self' https://consentcdn.cookiebot.com https://data.milieudefensie.nl; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com https://static.dhlecommerce.nl https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https://www.googletagmanager.com/ *.addthis.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com *.trustpilot.com 'self' 'unsafe-inline'; img-src cdn.verfwinkel.nl data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://maps.googleapis.com https://maps.gstatic.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com *.disqus.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://img.youtube.com https://www.mollie.com www.google.com.ua https://gtm.verfwinkel.nl data: https: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://static.dhlecommerce.nl http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com *.trustpilot.com https://gtm.verfwinkel.nl 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.dhlecommerce.nl https://maps.googleapis.com https://fonts.googleapis.com https://cdn.jsdelivr.net https://hcaptcha.com https://*.hcaptcha.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://api-gw.dhlparcel.nl https://static.dhlecommerce.nl http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://gtm.verfwinkel.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.google-analytics.com https://connect.facebook.net https://*.clarity.ms https://*.moengage.com https://*.tradingview.com https://www.youtube.com https://s.ytimg.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; connect-src 'self' https://*.google-analytics.com https://*.googletagmanager.com https://*.clarity.ms https://*.moengage.com https://get.geojs.io https://equentiswealthapis.cmots.com https://equentis-web-bucket.equentis.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://*.tradingview.com https://drive.google.com https://www.google.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none' 1
font-src fonts.gstatic.com use.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://widgets.trustedshops.com https://integrations.etrusted.com data: 'self' 'unsafe-inline'; form-action 'self' geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com *; frame-ancestors 'self'; frame-src 'self' *.cookiebot.com fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com secure.payu.com merch-prod.snd.payu.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com *; img-src 'self' *.cookiebot.com *.openstreetmap.org *.google.pl assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com static.payu.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://widgets.trustedshops.com https://integrations.etrusted.com; script-src 'self' *.cookiebot.com 'unsafe-eval' 'unsafe-inline' *.openstreetmap.org *.makalu.com.pl *.paynow.pl assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com secure.payu.com secure.snd.payu.com *.snrbox.com *.disqus.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://widgets.trustedshops.com https://integrations.etrusted.com 'nonce-ZzlpNmcxam5laWk0eGRqbHFmeG8xZzhpZnI1YjI2OWw=' 'nonce-MmI5bHNqbnhseXdmY3g2cnVqYTcwcmU1amFycDZ5YnU=' 'nonce-YTMyMDNlOW9sOXI0cDJiM3o2cDB0eWJrdThkYjU3MWg=' 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY/CkTMBhjNhwPvglpYumjx31B4fjkY8='; style-src 'self' 'unsafe-eval' 'unsafe-inline' *.makalu.com.pl *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.snrcdn.net *.fontawesome.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com assets.braintreegateway.com https://widgets.trustedshops.com https://integrations.etrusted.com; object-src 'self' 'unsafe-eval'; media-src 'self' *.adobe.com; manifest-src 'self' 'unsafe-inline'; connect-src 'self' *.cookiebot.com 'unsafe-inline' *.openstreetmap.org *.makalu.com.pl *.google.pl dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com secure.payu.com merch-prod.snd.payu.com *.snrbox.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com *.trustedshops.com *.etrusted.com; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' *.googleapis.com; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.googleapis.com *.kr-vysocina.cz ajax.googleapis.com api.hypeagent.ai api.ipify.org app.productfruits.com c.imedia.cz c.seznam.cz cdn.voiceflow.com ci3.googleusercontent.com cm4-production-assets.s3.amazonaws.com connect.facebook.net evvo.kr-vysocina.cz extranet.kr-vysocina.cz fonts.googleapis.com fonts.gstatic.com general-runtime.voiceflow.com h.seznam.cz hypedigitaly.github.io i.ytimg.com kalendar.kr-vysocina.cz quickchart.io region1.google-analytics.com tim.abirun.eu translate-pa.googleapis.com translate.google.com translate.googleapis.com utils.hypedigitaly.ai www.google-analytics.com www.google.com www.googletagmanager.com www.gstatic.com www.ksusv.cz www.vys-edu.cz www.youtube.com;img-src 'self' 'unsafe-inline' data: *.kr-vysocina.cz api.hypeagent.ai c.seznam.cz fonts.gstatic.com quickchart.io translate.google.com translate.googleapis.com www.facebook.com www.google.com www.googletagmanager.com www.gstatic.com www.smocr.cz;frame-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.kr-vysocina.cz www.youtube.com tim.abirun.eu extranet.kr-vysocina.cz;script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' data: *.seznam.cz api.hypeagent.ai c.imedia.cz c.seznam.cz connect.facebook.net fonts.gstatic.com my.productfruits.com translate-pa.googleapis.com translate.google.com translate.googleapis.com www.google.com www.googletagmanager.com www.kudyznudy.cz www.smocr.cz;connect-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.kr-vysocina.cz *.seznam.cz api.hypeagent.ai h.seznam.cz kr-vysocina.cz my.productfruits.com region1.google-analytics.com translate.googleapis.com www.google-analytics.com www.googletagmanager.com;report-uri /vismo/csp-reports.asp 1
default-src 'self' ; script-src 'self' 'unsafe-inline'  https://addtocalendar.com  https://use.typekit.net https://cdn.userway.org https://cdn.siteimprove.net https://www.googletagmanager.com https://cdn.jsdelivr.net https://www.google-analytics.com https://copperalliance.org https://internationalcopper.org/ https://cdn.svgator.com; style-src 'self' 'unsafe-inline' https://addtocalendar.com https://cdn.jsdelivr.net  https://cdn.userway.org; img-src 'self'  https://p.typekit.net https://cdn.userway.org data: *; media-src *.cloudfront.net; frame-src https://cdn.userway.org; font-src 'self' https://cdn.jsdelivr.net https://use.typekit.net  https://cdn.userway.org ; connect-src 'self' https://freeport2017ir.q4web.com https://api.userway.org https://www.google-analytics.com https://contentassistant.eu.siteimprove.com https://id.eu.siteimprove.com https://cdn.userway.org https://cdn77.api.userway.org https://region1.google-analytics.com; report-uri /report-csp-violation 1
base-uri 'none'; child-src 'none'; connect-src 'self' https://api.stripe.com https://m.stripe.network https://errors.stripe.com https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://challenges.cloudflare.com https://cdn.cgb.la https://*.cgb.la https://pay.orchestrapay.com https://api-europe.orchestrapay.com https://nominatim.openstreetmap.org https://cdn.postclic.com https://s3.eu-west-par.io.cloud.ovh.net https://s3-projectx.s3.eu-west-par.io.cloud.ovh.net; default-src 'self'; font-src 'self' data: https://cdn.jsdelivr.net https://cdn.postclic.com https://s3.eu-west-par.io.cloud.ovh.net https://s3-projectx.s3.eu-west-par.io.cloud.ovh.net; form-action 'self'; frame-ancestors 'none'; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://m.stripe.network https://challenges.cloudflare.com https://pay.orchestrapay.com; img-src 'self' blob: data: https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://www.google.com https://*.g.doubleclick.net https://tile.openstreetmap.org https://cdn.jsdelivr.net https://images.unsplash.com https://upload.wikimedia.org https://cdn.postclic.com https://s3.eu-west-par.io.cloud.ovh.net https://s3-projectx.s3.eu-west-par.io.cloud.ovh.net; manifest-src 'self'; media-src 'self'; object-src 'none'; script-src 'self' 'nonce-Mjk3NzdkMDMtODZiNi00MTRjLTgwNjMtZTJlYzY5ZDJiMzE1' https://js.stripe.com https://m.stripe.network https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://challenges.cloudflare.com https://cdn.cgb.la https://*.cgb.la https://pay.orchestrapay.com https://api-europe.orchestrapay.com; style-src 'self' 'unsafe-inline'; worker-src 'self'; 1
script-src 'unsafe-eval' 'unsafe-inline' data: 'self' blob: www.google-analytics.com www.googletagmanager.com ajax.googleapis.com www.google.com js.klevu.com www.gstatic.com *.cloudmaestro.com www.googleadservices.com googleads.g.doubleclick.net r2-t.trackedlink.net static.hotjar.com wchat.freshchat.com staticw2.yotpo.com browser-update.org script.hotjar.com dev.visualwebsiteoptimizer.com js-agent.newrelic.com bam-cell.nr-data.net *.freshchat.com maps.googleapis.com assets.adobedtm.com www.googleoptimize.com h.online-metrix.net *.cardinalcommerce.com html5.dcatalog.com unpkg.com commerce.adobedtm.com cdnjs.cloudflare.com web-sdk.aptrinsic.com commerce.adobe.net fonts.googleapis.com magento-recs-sdk.adobe.net static.trackedweb.net tags.srv.stackadapt.com snap.licdn.com tags.srv.stackadapt.com bat.bing.com e.performancehealth.com f.vimeocdn.com tags.srv.stackadapt.com bam.nr-data.net services-connector-ui.magento-ds.com r2.dotdigital-pages.com *.punchout2go.com *.tradecentric.com *.pinterest.com *.facebook.net *.facebook.com *.licdn.com *.userway.org cdn.optimizely.com optimizely.com performancehealth.freshchat.com cnstrc.com *.cookie-script.com *.cardinaltrusted.com *.online-metrix.net; style-src 'self' 'unsafe-inline' wchat.freshchat.com fonts.googleapis.com js.klevu.com tags.srv.stackadapt.com staticw2.yotpo.com; report-uri /.webscale/csp-report 1
script-src 'unsafe-inline' 'unsafe-eval' https:; style-src * 'unsafe-inline' 'unsafe-eval'; object-src 'none'; base-uri 'none'; worker-src 'self' blob:; frame-ancestors 'self'; report-to br.loccitaneaubresil.com; 1
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com use.typekit.net *.adbr.io *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors https://api.clerk.io https://cdn.clerk.io 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.cookiebot.com *.adbr.io *.googletagmanager.com *.cookiebot.eu *.criteo.com *.lightwidget.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com *.addthis.com *.twitter.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com https://cdn.clerk.io *.google.it *.zopim.io *.adbr.io *.adabra.com *.bing.com img.sct.eu1.usercentrics.eu *.clarity.ms *.bidswitch.net *.criteo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.addthisedge.com *.twitter.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com https://api.clerk.io https://cdn.clerk.io *.cookiebot.com *.cookiebot.eu fullstory.com assets.zendesk.com static.zdassets.com cdn.jsdelivr.net *.adbr.io *.cloudflare.com *.reaktion.com *.clerk.io *.bing.com *.criteo.com *.clarity.ms *.lightwidget.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com *.addthis.com *.moatads.com *.addthisedge.com *.twitter.com https://cdn.scalapay.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com https://api.clerk.io https://cdn.clerk.io *.bootstrapcdn.com cdn.jsdelivr.net fonts.gstatic.com fonts.googleapis.com *.typekit.net *.adbr.io *.fontawesome.com https://static.klaviyo.com unsafe-inline maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.cookiebot.com *.g.doubleclick.net *.googlesyndication.com *.zendesk.com *.zopim.com *.zdassets.com wss://widget-mediator.zopim.com *.adbr.io *.reaktion.com *.bing.com *.criteo.com *.clarity.ms *.cookiebot.eu https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-6c73KO1TtdBatJlMnlTvEQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; img-src https://cdn-cookieyes.com https://cdn.gtranslate.net https://*.google.es https://www.google.se https://www.google.bg https://www.google.com.au https://www.google.ca https://www.google.de https://www.google.it https://www.google.co.uk https://www.googletagmanager.com https://www.google.co.ma https://isa-sociology.org https://www.google.com.br data: https://www.google.co.nz https://isapsa.blob.core.windows.net https://www.google.co.in https://www.google.com.tr https://www.google.fr https://*.google.com https://*.gstatic.com; connect-src https://*.cookieyes.com https://*.google-analytics.com https://*.google.com https://*.doubleclick.net https://*.azurewebsites.net https://www.google.com.tr https://www.googletagmanager.com https://www.google.co.ma https://cdn-cookieyes.com; script-src-elem https://cdn-cookieyes.com https://*.gtranslate.net https://*.googletagmanager.com https://connect.facebook.net 'unsafe-inline' https://*.stripe.com; script-src-attr 'unsafe-inline'; style-src-elem 'unsafe-inline'; style-src-attr 'unsafe-inline'; font-src https://*.alicdn.com data:; frame-src https://*.stripe.com; report-uri https://backend-api-production-3f38.up.railway.app/api/csp/report/019ea8a6-62e7-735a-91f1-b511dcd3ebaa; report-to csp-endpoint 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com static.klaviyo.com *.cloudfront.net *.reviews.io *.reviews.co.uk https://www.gstatic.com https://fonts.gstatic.com www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.reviews.io *.reviews.co.uk *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.searchanise.com *.searchserverapi.com *.searchserverapi1.com *.twitter.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com test.authorize.net sandbox.authorize.net *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.certcapture.com *.reviews.io *.reviews.co.uk https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.searchanise.com *.searchserverapi.com *.searchserverapi1.com *.twitter.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net www.xtento.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.certcapture.com *.cloudfront.net *.reviews.io *.reviews.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com *.authorize.net assets.secure.checkout.visa.com sandbox.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.twitter.com *.twimg.com www.google.ru www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com s3.amazonaws.com *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com www.xtento.com cdn.xtento.com https://imgs.signifyd.com https://*.online-metrix.net https://www.google.co.in/ https://bat.bing.com/ https://bat.bing.com/action/ https://www.google.co.in/pagead/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.certcapture.com cdn.cookie-script.com *.reviews.io *.reviews.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://includes.ccdc02.com/cardinalcruise/v1/songbird.js https://includestest.ccdc02.com/cardinalcruise/v1/songbird.js https://includestest.ccdc02.com/cardinalcruise/v1/0a125400b09de2105a63/5.0a125400b09de2105a63.songbird.js https://includes.ccdc02.com/cardinalcruise/v1/b109e0c6fd2a5b6b93b2/1.b109e0c6fd2a5b6b93b2.songbird.js https://jstest.authorize.net/v1/Accept.js https://jstest.authorize.net/v1/AcceptCore.js https://js.authorize.net/v1/Accept.js https://js.authorize.net/v1/AcceptCore.js *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com searchanise-ef84.kxcdn.com s3.amazonaws.com ajax.aspnetcdn.com www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com *.searchanise.com api.amplitude.com *.twitter.com *.twimg.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net www.xtento.com cdn.xtento.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net https://bat.bing.net/ https://bat.bing.net/bat.js https://bat.bing.com/ https://widget.intercom.io/ https://widget.intercom.io/widget/ https://widget.intercom.io/widget/d7uwavyz https://js.intercomcdn.com/ https://bat.bing.com/p/action/ https://bat.bing.com/p/ https://bat.bing.com/p/conversions/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com *.cloudfront.net *.reviews.io *.reviews.co.uk https://static.klaviyo.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com assets.braintreegateway.com www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com searchanise-ef84.kxcdn.com s3.amazonaws.com *.twitter.com ton.twimg.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com *.cloudfront.net *.reviews.io *.reviews.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://apitest.authorize.net/xml/v1/request.api https://api.authorize.net/xml/v1/request.api https://includes.ccdc02.com/cardinalcruise/v1/songbird.js https://includestest.ccdc02.com/cardinalcruise/v1/songbird.js https://includestest.ccdc02.com/cardinalcruise/v1/0a125400b09de2105a63/5.0a125400b09de2105a63.songbird.js https://includes.ccdc02.com/cardinalcruise/v1/b109e0c6fd2a5b6b93b2/1.b109e0c6fd2a5b6b93b2.songbird.js https://jstest.authorize.net/v1/Accept.js https://jstest.authorize.net/v1/AcceptCore.js https://js.authorize.net/v1/Accept.js https://js.authorize.net/v1/AcceptCore.js *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com api.amplitude.com stats.g.doubleclick.net www.google-analytics.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app https://imgs.signifyd.com https://bat.bing.net/ https://bat.bing.net/actionp/ https://bat.bing.com/ https://bat.bing.com/actionp wss://nexus-websocket-a.intercom.io/ https://api-iam.intercom.io/ https://api-iam.intercom.io/messenger/ https://api-iam.intercom.io/messenger/web/metrics https://bat.bing.com/p/conversions/c/b  wss://nexus-websocket-a.intercom.io/pubsub/ 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval';style-src 'self' 'unsafe-inline';img-src 'self' data: https:; report-uri https://issues.calpendo.com/anon/csp; report-to csp-endpoint 1
script-src 'self' 'nonce-HXwMcEXgyeOrj4GJuz85dyp9T4lbp6gy' 'strict-dynamic' *.googletagmanager.com *.cookiebot.com *.googleapis.com *.google.com *.gstatic.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' res.cloudinary.com rimibaltic-web-res.cloudinary.com rimibaltic-res.cloudinary.com *.cookiebot.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.google.com *.google.lv *.google.lt *.google.ee *.googleusercontent.com *.doubleclick.net *.googleadservices.com *.googlesyndication.com *.onrimi.net data: *.rimi.lv *.rimi.lt *.rimi.ee; form-action 'self'; base-uri 'self'; object-src 'none'; report-uri https://sentry.onrimi.net/api/25/security/?sentry_key=8e496e045aea8c4c78851b26c67ab67a&sentry_environment=production-azure-web&sentry_release=v1623-5bc59850563276ab520fc7e35fcb30602468a73a 1
default-src 'self'; frame-src https://www.youtube-nocookie.com/ https://td.doubleclick.net https://www.googletagmanager.com https://*.fls.doubleclick.net https://tracking.arcraiders.com https://preview.tracking.arcraiders.com; img-src 'self' https://* data:; font-src 'self' https://fonts.gstatic.com data: https://assets.arcraiders.com; style-src 'self' 'unsafe-inline' https://googletagmanager.com https://www.googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com https://assets.arcraiders.com; script-src 'self' 'unsafe-inline' https://connect.facebook.net https://www.redditstatic.com https://www.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://*.googletagmanager.com https://www.googleadservices.com https://www.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://assets.arcraiders.com; connect-src 'self' https://*.sibforms.com/ https://connect.facebook.net https://www.facebook.com https://*.reddit.com https://www.redditstatic.com www.googletagmanager.com https://*.analytics.google.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://www.google.com https://google.com https://ad.doubleclick.net https://tracking.arcraiders.com https://preview.tracking.arcraiders.com; report-uri /api/csp-report; report-to csp-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://connect.facebook.net https://www.clarity.ms https://*.clarity.ms https://apis.google.com https://www.gstatic.com https://*.gstatic.com https://*.firebaseapp.com https://plausible.io https://www.youtube.com; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: blob: https:; media-src 'self' blob: https:; connect-src 'self' https://livemcq.com https://web.livemcq.app https://web.livemcq.com https://web.livemcq.com https://webadmin.livemcq.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://*.g.doubleclick.net https://www.clarity.ms https://*.clarity.ms https://c.bing.com https://www.facebook.com https://*.facebook.com https://*.googleapis.com https://identitytoolkit.googleapis.com https://securetoken.googleapis.com https://plausible.io; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://*.firebaseapp.com https://accounts.google.com https://*.facebook.com https://www.googletagmanager.com https://td.doubleclick.net; frame-ancestors 'self' https://web.livemcq.com https://webadmin.livemcq.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://livemcq.com https://web.livemcq.com; manifest-src 'self' 1
default-src 'self';         script-src 'self' 'unsafe-inline' 'unsafe-eval';         style-src 'self' 'unsafe-inline';         img-src 'self' data: blob: https:;         font-src 'self' data:;         connect-src 'self';         media-src 'self';         object-src 'none';         frame-src 'self';         frame-ancestors 'self';         form-action 'self';         base-uri 'self' 1
connect-src 'self' 'unsafe-inline' 'unsafe-eval' backenster.com *.clarity.ms *.cloudflare.com *.cloudflareinsights.com *.contentsquare.net *.doubleclick.net *.facebook.com *.facebook.net *.ggpht.com *.googleadservices.com *.google-analytics.com *.googleapis.com translate.google.com.hk www.google.at www.google.be www.google.ch www.google.com.hk www.google.com.ph www.google.com.ua www.google.co.uk www.google.de www.google.es www.google.fr www.google.nl www.google.pl www.google.pt *.google.com google.com *.googlesyndication.com *.googletagmanager.com *.googleusercontent.com *.gstatic.com *.klaviyo.com *.pinimg.com *.pinterest.com *.promptwatch.com *.rotoviewstudios.com *.storyblok.com *.tweakwise.com unpkg.com *.varify.io *.youtube.com *.zeltrufgam.com api.marker.io ssr.marker.io s3.eu-west-1.amazonaws.com/marker.sessions.prod consent.cookiebot.com consentcdn.cookiebot.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.clarity.ms *.contentsquare.net *.doubleclick.net *.facebook.com *.facebook.net *.ggpht.com *.googleadservices.com *.googleapis.com www.google.at www.google.be www.google.ch www.google.com.eg www.google.com.hk www.google.com.lb www.google.com.ph www.google.com.sg www.google.com.tr www.google.com.ua www.google.co.uk www.google.cz www.google.de www.google.dk www.google.es www.google.fr www.google.it www.google.nl www.google.pl www.google.pt *.google.com *.googlesyndication.com *.googletagmanager.com *.googleusercontent.com *.gstatic.com *.rotoviewstudios.com *.storyblok.com blob: data: media.marker.io app.marker.io edge.marker.io imgsct.cookiebot.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.clarity.ms *.cloudflare.com *.cloudflareinsights.com *.contentsquare.net *.doubleclick.net *.facebook.net *.googleapis.com translate.google.com.hk *.googlesyndication.com *.googletagmanager.com *.klaviyo.com *.pinimg.com *.promptwatch.com *.rotoviewstudios.com *.storyblok.com *.tweakwise.com unpkg.com *.varify.io *.youtube.com *.zeltrufgam.com edge.marker.io app.marker.io consent.cookiebot.com consentcdn.cookiebot.com; frame-src 'self' 'unsafe-inline' 'unsafe-eval' *.cloudflare.com div.show *.facebook.com *.pinterest.com *.youtube.com *.zscalertwo.net app.marker.io consent.cookiebot.com consentcdn.cookiebot.com; default-src 'self' 'unsafe-inline' 'unsafe-eval' *.facebook.com *.gstatic.com *.klaviyo.com; form-action 'self' 'unsafe-inline' 'unsafe-eval' *.facebook.com app.marker.io api.marker.io; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com *.klaviyo.com *.rotoviewstudios.com; font-src 'self' 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.klaviyo.com pouch-global-font-assets.s3.eu-central-1.amazonaws.com app.marker.io edge.marker.io; child-src 'self' 'unsafe-inline' 'unsafe-eval'  app.marker.io; media-src 'self' 'unsafe-inline' 'unsafe-eval' media.marker.io app.marker.io edge.marker.io; report-uri https://b1c3d56e-840e-4cb0-ba39-47d59d063ecc.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://unpkg.com/meta-capi-param-builder-clientjs/; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; media-src 'self' https:; frame-src https://www.youtube.com https://www.tiktok.com; connect-src 'self' https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://stats.g.doubleclick.net https://www.facebook.com https://connect.facebook.net https://tw-0fde0867b14c4d8e9131519b5349f6f2.ecs.us-west-2.on.aws https://teuida.net:8443; worker-src 'self' blob:; manifest-src 'self'; report-uri /api/csp-report; report-to csp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://www.googletagmanager.com https://*.sentry.io https://www.redditstatic.com https://www.google-analytics.com https://snap.licdn.com https://js.chargebee.com; connect-src 'self' https://support.0patch.com https://graphql.datocms.com https://graphql-listen.datocms.com https://www.googletagmanager.com https://*.google-analytics.com https://*.sentry.io https://www.datocms-assets.com https://www.google.com https://0patch.com https://pixel-config.reddit.com https://px.ads.linkedin.com https://js.chargebee.com; img-src 'self' data: https://www.googletagmanager.com https://www.datocms-assets.com https://www.google-analytics.com https://www.redditstatic.com https://0patch.com https://alb.reddit.com https://px.ads.linkedin.com https://cb-invoice-logos-prod.s3.us-east-1.amazonaws.com https://www.linkedin.com https://i.ytimg.com https://www.google.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat; style-src 'self' 'unsafe-inline' https://js.chargebee.com; font-src 'self'; frame-src https://www.googletagmanager.com https://*.chargebee.com https://www.youtube-nocookie.com https://twitter.com https://x.com; object-src 'none'; report-uri https://o4509950550671360.ingest.de.sentry.io/api/4511486374707280/security/?sentry_key=f102ac81737f579f0a3975b5086d2810; 1
font-src data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.awin1.com maps.vodafone.co.uk a1.adform.net vodafoneuk.demdex.net *.digitalcx.com *.doubleclick.net *.salecycle.com *.lpsnmedia.net *.liveperson.net *.trustpilot.com talkmobile.co.uk *.talkmobile.co.uk 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io magefan.com cm.magefan.com *.disqus.com https://img.youtube.com awin1.com *.zenaps.com *.awin1.com d16fk4ms6rqz1v.cloudfront.net bat.bing.com *.contentsquare.net *.cookielaw.org *.doubleclick.net *.google.co.uk *.google.com lantern.roeye.com lantern.roeyecdn.com vodafoneuk.tt.omtrdc.net mboxedge37.tt.omtrdc.net *.salecycle.com smetrics.vodafone.co.uk *.elitechnology.com *.lpsnmedia.net *.trustpilot.com talkmobile.co.uk *.talkmobile.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page *.disqus.com *.dwin1.com cdnjs.cloudflare.com a1.adform.net s2.adform.net rum.hlx.page *.zenaps.com *.awin1.com d16fk4ms6rqz1v.cloudfront.net c.amazon-adsystem.com bat.bing.com *.contentsquare.net *.cookielaw.org *.digitalcx.com *.doubleclick.net *.google.co.uk *.google.com ajax.googleapis.com *.hotjar.com *.hotjar.io lantern.roeye.com lantern.roeyecdn.com vodafoneuk.tt.omtrdc.net mboxedge37.tt.omtrdc.net *.onetrust.com *.salecycle.com *.elitechnology.com *.liveperson.net *.lpsnmedia.net *.co-buying.com *.trustpilot.com tags.tiqcdn.com talkmobile.co.uk *.talkmobile.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdnjs.cloudflare.com *.elitechnology.com *.lpsnmedia.net *.liveperson.net talkmobile.co.uk *.talkmobile.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: *.lpsnmedia.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com cdnjs.cloudflare.com a1.adform.net s2.adform.net rum.hlx.page *.zenaps.com *.awin1.com d16fk4ms6rqz1v.cloudfront.net c.amazon-adsystem.com bat.bing.com *.contentsquare.net *.cookielaw.org *.digitalcx.com *.doubleclick.net *.dwin1.com *.google.co.uk *.google.com *.hotjar.com *.hotjar.io lantern.roeye.com lantern.roeyecdn.com vodafoneuk.tt.omtrdc.net mboxedge37.tt.omtrdc.net *.onetrust.com *.salecycle.com *.elitechnology.com wss://*.liveperson.net *.liveperson.net *.lpsnmedia.net *.trustpilot.com talkmobile.co.uk *.talkmobile.co.uk 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.lpsnmedia.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.cookielaw.org https://*.onetrust.com https://optanon.blob.core.windows.net https://assets.adobedtm.com https://*.omtrdc.net https://*.demdex.net https://cm.everesttech.net https://*.hotjar.com https://*.hotjar.io https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://ads.nextdoor.com https://img.en25.com https://wsmcdn.audioeye.com https://wsv3cdn.audioeye.com https://www.google-analytics.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://connect.facebook.net https://snap.licdn.com https://cdn.walkme.com https://tags.srv.stackadapt.com https://bat.bing.com https://s.yimg.com https://cdn.callrail.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.hotjar.com https://wsv3cdn.audioeye.com https://cdn.walkme.com https://tags.srv.stackadapt.com; font-src 'self' data: https://fonts.gstatic.com https://script.hotjar.com https://wsv3cdn.audioeye.com https://wsmcdn.audioeye.com https://cdn.walkme.com; img-src 'self' data: https:; connect-src 'self' https://*.onetrust.com https://cdn.cookielaw.org https://*.omtrdc.net https://*.demdex.net https://cm.everesttech.net https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://www.google.com https://www.gstatic.com https://flask.nextdoor.com https://ads.nextdoor.com https://analytics.audioeye.com https://www.google-analytics.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://connect.facebook.net https://snap.licdn.com https://cdn.walkme.com https://bat.bing.com https://s.yimg.com https://cdn.callrail.com; frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; 1
script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' www.googletagmanager.com *.google-analytics.com js.stripe.com apis.google.com www.gstatic.com www.google.com cdn.now.gg analytics.tiktok.com connect.facebook.net static.ads-twitter.com consent.cookiebot.com accounts.google.com/gsi/; object-src 'none'; base-uri 'self'; report-uri https://o53961.ingest.us.sentry.io/api/149663/security/?sentry_key=f7c8dfa4a4684c839b8b5885e08b0a6a; report-to csp-endpoint 1
script-src 'nonce-7g0tPDgcJOYjZ2iKYeXIrg==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https://events.mercadolibre.com/csp/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=eab571d8-05b7-428b-80d4-7c0f67b9f11d; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https://http2.mlstatic.com/ https://mlstaticquic-a.akamaihd.net/; frame-ancestors 'self' https://*.mercadolibre.cl:* https://*.mercadolibre.com:* https://*.mercadolibre.com.ve:* https://*.mercadolibre.com.ar:* https://*.mercadolivre.com.br:* https://*.mercadolibre.com.co:* https://*.mercadolibre.com.ec:* https://*.mercadolibre.com.mx:* https://*.mercadolibre.com.pe:* https://*.mercadolibre.com.uy:* https://*.mercadopago.cl:* https://*.mercadopago.com.ar:* https://*.mercadopago.com.br:* https://*.mercadopago.com.co:* https://*.mercadopago.com.mx:* https://*.mercadopago.com.pe:* https://*.mercadopago.com.uy:* https://*.mercadopago.com.ve:* https://*.mercadopago.com:* https://*.adminml.com:* https://*.mercadolibre.co.cr:* https://*.mercadolibre.com.pa:* https://*.mercadolibre.com.do:* https://*.mercadolibre.com.bo:* https://*.mercadolibre.com.py:* https://*.mercadolibre.com.gt:* https://*.mercadolibre.com.hn:* https://*.mercadolibre.com.ni:* https://*.mercadolibre.com.sv:* https://*.mercadopago.com.ec:* https://*.portalinmobiliario.com:* https://*.mercadolivre.com:* 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://www.googletagmanager.com https://cdn-cookieyes.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com; img-src 'self' data: https:; font-src 'self' https: data:; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://pagead2.googlesyndication.com; frame-src 'self' https://www.googletagmanager.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com maxcdn.bootstrapcdn.com fonts.feefo.com *.klarnacdn.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors https://pay.google.com *.stripe.com stripe.com *.link.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.awin1.com *.zenaps.com *.fls.doubleclick.net www.mainadv.com ls.smct.io d2d7do8qaecbru.cloudfront.net js.stripe.com b.stripecdn.com pay.google.com newassets.hcaptcha.com m.stripe.network account.fetchify.com *.klarna.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.awin1.com *.zenaps.com *.wepowerconnections.com api.feefo.com secure.adnxs.com www.facebook.com lantern.roeye.com bat.bing.com register.feefo.com editor-upload-cdn.optimonk.com www.gstatic.com https://www.wepowerconnections.com https://www.google.co.uk https://www.googleadservices.com https://v2assets.zopim.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klarna.com *.klarnaevt.com *.klarnacdn.net connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com secure.smart-enterprise-acumen.com static.zdassets.com api.feefo.com chimpstatic.com www.dwin1.com connect.facebook.net www.instagram.com register.feefo.com onsite.optimonk.com smct.co cdn-asset.optimonk.com static.hotjar.com bat.bing.com js.smct.io script.hotjar.com gs-cdn.optimonk.com ban.tangooserver.com www.clarity.ms js.stripe.com www.gstatic.com front.optimonk.com cdnjs.cloudflare.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klarna.com *.klarnacdn.net *.klarnaservices.com www.facebook.com graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.link.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com register.feefo.com cdn-asset.optimonk.com cdnjs.cloudflare.com cc-cdn.com https://static.klaviyo.com *.klarnacdn.net assets.braintreegateway.com *.stripe.network *.stripecdn.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.wepowerconnections.com https://the.sciencebehindecommerce.com region1.analytics.google.com ekr.zdassets.com front.optimonk.com cdn-account.optimonk.com theskirtingboardshop.zendesk.com cdn-limit.optimonk.com api.feefo.com collect.feefo.com jfapiprod.optimonk.com cdn-renderer.optimonk.com cognito-identity.eu-west-1.amazonaws.com l.clarity.ms firehose.eu-west-1.amazonaws.com m.stripe.com js.stripe.com merchant-ui-api.stripe.com r.stripe.com api.stripe.com pay.google.com play.google.com api.hcaptcha.com api2.hcaptcha.com googleads.g.doubleclick.net wss://widget-mediator.zopim.com vc.hotjar.io https://region1.google-analytics.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.link.com *.google-analytics.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src bat.bing.com l.clarity.ms www.mainadv.com widget-mediator.zopim.com www.google.co.uk r.stripe.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/  https://widget.trustpilot.com;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://appleid.cdn-apple.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com *.myheritage.fi https://www.myheritage.fi  'unsafe-eval' 'nonce-dfd6845e906b4313e995517ed4c1b426' 'strict-dynamic' https://widget.trustpilot.com https://invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style  https://widget.trustpilot.com;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io https://www.google.com/recaptcha/enterprise/* https://www.google.com/recaptcha/enterprise/ https://www.google.com/recaptcha/enterprise/clr https://www.google.com/recaptcha/ https://maps.googleapis.com https://people.googleapis.com https://translate-pa.googleapis.com *.myheritage.fi https://widget.trustpilot.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:  https://widget.trustpilot.com https://*.trustpilot.com;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=report&canonical_page_id=/company/home/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://kit.fontawesome.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://api.fontshare.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://ka-f.fontawesome.com https://api.fontshare.com; connect-src 'self' https://api.pwnedpasswords.com; media-src 'self' https: 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://kundecrm.my.site.com https://kundecrm.my.salesforce.com; script-src-elem 'self' 'unsafe-inline' https://kundecrm.my.site.com https://kundecrm.my.salesforce.com https://service.force.com https://operationsmessengerservices.azurewebsites.net https://nexus.ensighten.com https://www.googletagmanager.com https://*.salesforceliveagent.com https://bs.serving-sys.com https://img.en25.com https://files.cdn.leadfamly.com https://*.snapchat.com https://app.varify.io https://*.clarity.ms https://*.hotjar.com https://sc-static.net https://connect.facebook.net https://collect.danskespil.dk https://tags.danskespil.dk; style-src * 'unsafe-inline'; style-src-elem * 'unsafe-inline'; font-src 'self' data: https://fonts.gstatic.com https://operationsmessengerservices.azurewebsites.net; img-src 'self' data: https://track.adform.net https://www.facebook.com https://s166423343.t.eloqua.com https://ad.doubleclick.net https://*.clarity.ms https://tc-static.dk https://*.tc-static.dk; connect-src 'self' https://kundecrm.my.site.com https://kundecrm.my.salesforce-scrt.com https://kundecrm.secure.force.com https://operationsmessengerservices.azurewebsites.net https://dsoperationsmessenger.blob.core.windows.net https://region1.google-analytics.com https://region1.analytics.google.com https://www.googletagmanager.com https://tivoli-casino-be.dsservice.eu https://dawa.aws.dk https://*.snapchat.com https://app.varify.io https://analytics.google.com https://stats.g.doubleclick.net https://*.hotjar.io https://*.clarity.ms https://doh.cq0.co https://collect.danskespil.dk https://tags.danskespil.dk https://tracking.danskespil.dk wss://ws.hotjar.com; frame-src * intent:; report-uri /api/tivolicasino/security/csp/testreport; block-all-mixed-content; 1
default-src 'self';  script-src 'self' 'unsafe-inline' 'unsafe-eval'   plausible.io   *.bing.com   *.boomtrain.com   *.callrail.com   *.cdn.digitaloceanspaces.com   *.cloudflare.com   *.cloudflareinsights.com   *.cookielaw.org   *.crazyegg.com   *.derbysoftsec.com   *.doubleclick.net   *.facebook.net   *.gstatic.com   *.google-analytics.com   *.google.com   *.googleadservices.com   *.googleapis.com   *.googletagmanager.com   *.quantcount.com   *.quantserve.com   *.rezync.com   *.rfihub.net   *.sojern.com   *.stackadapt.com   *.stripe.com   *.tiqcdn.com   *.azds.com   *.qvdt3feo.com   *.pendry.com;  script-src-elem 'self' 'unsafe-inline'   plausible.io   *.bing.com   *.boomtrain.com   *.callrail.com   *.cdn.digitaloceanspaces.com   *.cloudflare.com   *.cloudflareinsights.com   *.cookielaw.org   *.crazyegg.com   *.derbysoftsec.com   *.doubleclick.net   *.facebook.net   *.gstatic.com   *.google-analytics.com   *.google.com   *.googleadservices.com   *.googleapis.com   *.googletagmanager.com   *.quantcount.com   *.quantserve.com   *.rezync.com   *.rfihub.net   *.sojern.com   *.stackadapt.com   *.stripe.com   *.storage.googleapis.com   *.tiqcdn.com   *.azds.com   *.acumbamail.com   *.threatspike.com   *.acumbamail.com   *.tms-plugins.com   *.sc-static.net   *.googlesyndication.com   *.infird.com   *.pendry.com   blob:;  connect-src 'self'   *.azds.com   *.boomtrain.com   *.callrail.com   *.cookielaw.org   *.crazyegg.com   *.doubleclick.net   *.facebook.com   *.g.doubleclick.net   *.google-analytics.com   google.com   *.google.com   *.googleadservices.com   *.googletagmanager.com   *.googleapis.com   *.google.com.mx   *.google.pl   *.google.ca   *.onetrust.com   *.sojern.com   *.stackadapt.com   *.tiqcdn.com   *.myhotelshop.de   *.awsapprunner.com   *.run.app   *.letsway.com   *.bing.com   *.bing.net   *.googlesyndication.com   *.quantcount.com   *.quantserve.com   plausible.io   *.emlsend.com   *.yoast.com   *.cloudfront.net   *.launchdarkly.com   *.overbridgenet.com   *.geoedge.com   *.dreamsadnetwork.com   *.pendry.com;  frame-src 'self'   *.doubleclick.net   *.facebook.com   *.googletagmanager.com   *.google.com   *.pcibooking.net   *.rfihub.net   *.rfihub.com   *.sojern.com   *.stripe.com   *.azds.com   *.techloq.com   *.ibosscloud.com   *.wikimedia.org   *.zscalerthree.net   *.zscaler.net   visitingmedia.com   *.vimeo.com   *.formcrafts.com   *.menlosecurity.com   *.dadco.com   *..dpisd.org   *.linewize.net   *.pendry.com   blob:;  img-src * data: blob:; font-src * data:; media-src * 'self' data:; manifest-src * 'self'; style-src * 'unsafe-inline' data:; worker-src 'self' blob:;  report-uri https://cfe87652b26de6b69f71ed43bef9cf37.report-uri.com/r/d/csp/reportOnly; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net https://cdn.privacytools.com.br https://fonts.googleapis.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com js.stripe.com https://cdn.privacytools.com.br https://api.pre.globalgetnet.com https://api.globalgetnet.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net d2r1yp2w7bby2u.cloudfront.net us1.clevertap-prod.com eu1.clevertap-prod.com us1.clevertap.com *.wzrkt.com https://firebasestorage.googleapis.com https://cdn.privacytools.com.br *.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ js.stripe.com in1.api.clevertap.com sg1.api.clevertap.com us1.api.clevertap.com aps3.api.clevertap.com mec1.api.clevertap.com api.clevertap.com us1.clevertap-prod.com eu1.clevertap-prod.com d2r1yp2w7bby2u.cloudfront.net s3-eu-west-1.amazonaws.com *.wzrkt.com *.avada.io *.shopify.com https://cdn.privacytools.com.br https://privacyportal-br-cdn.onetrust.com https://api.globalgetnet.com https://api.sandbox.globalgetnet.com *.googletagmanager.com *.facebook.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net https://cdn.privacytools.com.br https://fonts.googleapis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com assets.braintreegateway.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com in1.api.clevertap.com sg1.api.clevertap.com us1.api.clevertap.com aps3.api.clevertap.com mec1.api.clevertap.com api.clevertap.com us1.clevertap-prod.com eu1.clevertap-prod.com us1.clevertap.com *.wzrkt.com https://get.geojs.io *.avada.io https://cdn.privacytools.com.br *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com fonts.googleapis.com *.kueskipay.com *.fontawesome.com cdn.aplazo.mx data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.kueskipay.com retailrocket.net *.retailrocket.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' editor.varify.io 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com www.ups.com rms.ups.com maps.googleapis.com www.bing.com *.virtualearth.net *.kueskipay.com retailrocket.net *.retailrocket.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.pinterest.com *.pinterdev.com commerce-app.pintergration.com *.hubspot.com *.hs-sites.com *.hubspot.net play.hubspotvideo.com *.hsforms.net *.hsforms.com editor.varify.io https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io b.stats.paypal.com dub.stats.paypal.com paypal.com *.googleapis.com https://ecommerce.creditea.com www.ups.com rms.ups.com maps.googleapis.com www.bing.com *.virtualearth.net *.kueskipay.com *.google.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com cdn.aplazo.mx *.aplazo.mx *.joyeriasbizzarro.com *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io www.google.cl tag.simpli.fi *.hubspot.com cdn2.hubspot.net no-cache.hubspot.com js.hscta.net *.hsforms.net *.hsforms.com *.tangiblee.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com *.gstatic.com www.ups.com rms.ups.com maps.googleapis.com polyfill.io www.bing.com *.virtualearth.net *.kueskipay.com *.googletagmanager.com *.mxpnl.com retailrocket.net *.retailrocket.net https://tracking.retailrocket.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com *.visualwebsiteoptimizer.com app.vwo.com cdnjs.cloudflare.com analytics.tiktok.com static.hotjar.com script.hotjar.com tag.simpli.fi commerce.adobedc.net js-na1.hs-scripts.com h64.online-metrix.net imgs.signifyd.com www.clarity.ms scripts.clarity.ms *.hsadspixel.net *.hs-analytics.net js.hscta.net *.hubspot.com static.hsappstatic.net *.usemessages.com *.hs-banner.com *.hubspot.net *.hscollectedforms.net *.hsleadflows.net *.hsforms.net *.hsforms.com *.hs-scripts.com *.hubspotfeedback.com feedback.hubapi.com app.varify.io editor.varify.io rum.hlx.page cdn.tangiblee.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net https://app.varify.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com www.ups.com rms.ups.com maps.googleapis.com *.kueskipay.com *.googletagmanager.com *.mxpnl.com *.google.com retailrocket.ne *.retailrocket.ne *.fontawesome.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com assets.braintreegateway.com cdn.aplazo.mx *.visualwebsiteoptimizer.com app.vwo.com cdn2.hubspot.net *.tangiblee.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com ws://localhost:9109/ws wss://localhost:9109/ws wss://localhost:9109/ *.googleapis.com www.ups.com rms.ups.com maps.googleapis.com www.bing.com *.virtualearth.net *.kueskipay.com *.doubleclick.net retailrocket.net *.retailrocket.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com api.aplazo.mx api.aplazo.net cdn.aplazo.mx *.clarity.ms *.visualwebsiteoptimizer.com app.vwo.com tag.simpli.fi analytics.tiktok.com content.hotjar.io vc.hotjar.io ws.hotjar.com wss://ws.hotjar.com metrics.hotjar.io static.hsappstatic.net analytics.pangle-ads.com *.hubapi.com js.hscta.net *.hubspot.com *.hs-banner.com *.hscollectedforms.net *.hsforms.com app.varify.io ip.varify.dev editor.varify.io *.tangiblee.com https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://sine.co https://*.sine.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://cdnjs.cloudflare.com https://*.nitrocdn.com https://hcenews.honeywell.com https://hbtmkto.honeywell.com https://munchkin.marketo.net https://www.googletagmanager.com https://www.googleadservices.com https://www.google.com https://googleads.g.doubleclick.net https://adservice.google.com https://pagead2.googlesyndication.com https://snap.licdn.com https://*.clarity.ms https://bat.bing.com https://cdn.cookielaw.org https://cdn.bizible.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://www.youtube.com https://www.youtube-nocookie.com https://cdn.jsdelivr.net https://unpkg.com https://ajax.googleapis.com https://www.gstatic.com https://tracking.g2crowd.com https://*.teddybearmetal.com; style-src 'self' 'unsafe-inline' https://*.nitrocdn.com https://unpkg.com https://cdnjs.cloudflare.com https://cdn.cookielaw.org https://hcenews.honeywell.com https://hbtmkto.honeywell.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://*.nitrocdn.com https://js.intercomcdn.com https://fonts.intercomcdn.com; media-src 'self' https://js.intercomcdn.com https://downloads.intercomcdn.com; worker-src 'self' blob: data:; connect-src 'self' https://*.nitrocdn.com https://hcenews.honeywell.com https://hbtmkto.honeywell.com https://munchkin.marketo.net https://*.mktoresp.com https://*.mktoutil.com https://to.getnitropack.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://*.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://www.google.com https://google.com https://*.google.com https://www.google.com.au https://www.google.co.in https://www.google.co.nz https://www.google.com.tw https://www.google.com.hk https://www.google.com.my https://www.google.com.pa https://www.google.hu https://*.clarity.ms https://c.bing.com https://px.ads.linkedin.com https://tracking.g2crowd.com https://*.g2.com https://*.lottiefiles.com https://cdn.cookielaw.org https://*.onetrust.com https://bat.bing.com https://bat.bing.net https://*.teddybearmetal.com https://via.intercom.io https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://widget.intercom.io https://*.intercom-messenger.com wss://*.intercom-messenger.com https://nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-b.intercom.io https://uploads.intercomcdn.com https://uploads.intercomusercontent.com; frame-src 'self' data: https://hcenews.honeywell.com https://hbtmkto.honeywell.com https://www.googletagmanager.com https://td.doubleclick.net https://ad.doubleclick.net https://*.fls.doubleclick.net https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.google.com https://widget.intercom.io https://intercom-sheets.com https://www.intercom-reporting.com; form-action 'self' https://hcenews.honeywell.com https://hbtmkto.honeywell.com https://intercom.help https://api-iam.intercom.io; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; report-uri https://eebf1029f5e3b0b6c527e1e8cc684b05.report-uri.com/r/d/csp/reportOnly; report-to default 1
default-src 'self';connect-src 'self' marketing.cockroachlabs.cloud https://autocomplete.clearbit.com https://status.cockroachlabs.cloud https://marketing.cockroachlabs.cloud https://marketing.management-staging.crdb.io 350-qin-827.mktoresp.com https://eligibility.wootric.com https://wootric-eligibility.herokuapp.com https://r3f773swz03t.statuspage.io https://checkout.stripe.com https://api.stripe.com https://fast.appcues.com wss://api.appcues.net https://api.segment.io https://cdn.segment.com https://session-replay.browser-intake-datadoghq.com https://rum.browser-intake-datadoghq.com https://logs.browser-intake-datadoghq.com https://session-replay.browser-intake-us5-datadoghq.com https://rum.browser-intake-us5-datadoghq.com https://logs.browser-intake-us5-datadoghq.com https://browser-intake-us5-datadoghq.com https://kapa-widget-proxy-la7dkmplpq-uc.a.run.app https://fast.chameleon.io https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat https://cdn.cookielaw.org https://privacyportal.onetrust.com https://geolocation.onetrust.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' marketing.cockroachlabs.cloud https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://*.google-analytics.com https://*.googletagmanager.com cdn.wootric.com munchkin.marketo.net https://checkout.stripe.com https://js.stripe.com cdn.segment.com https://cdn.madkudu.com fast.appcues.com https://widget.kapa.ai https://fast.chameleon.io https://cdn.cookielaw.org https://cdn.jsdelivr.net;child-src 'self' marketing.cockroachlabs.cloud blob: https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://www.cockroachlabs.com https://td.doubleclick.net https://checkout.stripe.com https://js.stripe.com https://r3f773swz03t.statuspage.io https://fast.chameleon.io;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fast.appcues.com;font-src 'self' https://fonts.gstatic.com data:;img-src 'self' data: https://logo.clearbit.com https://*.stripe.com https://cdn.cookielaw.org https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat;report-uri /csp-reports 1
font-src www.paypalobjects.com *.fontawesome.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com api.trustpilot.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com js.mollie.com https://www.googletagmanager.com https://td.doubleclick.net 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com https://www.mollie.com *.hsforms.net *.hsforms.com 'self' data: https://imgproxy.vendic.dev cdn.trustpilot.net images-static.trustpilot.com data: 'self' 'unsafe-inline'; script-src s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com s.pinimg.com https://maps.googleapis.com *.disqus.com js.mollie.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com reviewcollection.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.fontawesome.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com https://maps.googleapis.com https://player.vimeo.com t.elasticsuite.io *.hsforms.net *.hsforms.com https://www.google.com api.trustpilot.com reviewcollection.trustpilot.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https://cdnapisec.kaltura.com/ https://epic-rproxyprod.coh.org https://pay.instamed.com/;script-src 'nonce-d756a650e9d248049fcf55dc2ac697b7' https://epic-mychartprod.coh.org 'self';img-src https://* 'self' blob: data:;connect-src 'self' epichttp:;style-src https://epic-mychartprod.coh.org 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https://cdnapisec.kaltura.com/ https://kelseyseyboldepiciframe-pp-prtl.spectrumretailnet.com https://kelseyseyboldepiciframe-pp-prtltsttest.spectrumretailnet.com https://play.vidyard.com https://ssrx.ksnet.com;script-src 'nonce-0a1fbfaf091a4ee8937d31ead47f81c1' 'self' https://play.vidyard.com/ media.imi.chat repo-stg.rakanto.com repo.rakanto.com;img-src https://* 'self' blob: data:;connect-src 'self' cse.rakanto.com epichttp: https://*.kaltura.com https://stage-cse.rakanto.com www.google.com;style-src 'self' 'unsafe-inline' www.gstatic.com;worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:;report-uri /MkoApi/api/CspReport; 1
connect-src 'self' www.google-analytics.com; font-src 'self' fonts.gstatic.com use.fontawesome.com; frame-src 'self' platform.twitter.com syndication.twitter.com www.google.com; img-src 'self' data: w3.org/svg/2000 google-analytics.com syndication.twitter.com www.googletagmanager.com; object-src 'none'; script-src 'report-sample' 'self' 'unsafe-inline' ajax.googleapis.com code.jquery.com connect.facebook.net platform.twitter.com  www.google.com www.google-analytics.com www.googletagmanager.com www.gstatic.com; style-src 'report-sample' 'self' 'unsafe-inline' fonts.googleapis.com use.fontawesome.com; worker-src 'none'; default-src 'self' 'report-sample'; 1
base-uri 'self'; connect-src 'self' https://cms.mirka.com https://img.mirka.com https://*.applicationinsights.azure.com https://js.monitor.azure.com/scripts/ https://consent.cookiebot.com https://consentcdn.cookiebot.com https://edge.fullstory.com https://rs.fullstory.com https://www.googletagmanager.com *.google-analytics.com https://maps.googleapis.com/maps/api/ https://maps.googleapis.com/$rpc/ https://maps.googleapis.com/maps_api_js_slo/log https://smc-lp.s4hana.ondemand.com https://api.mavenoid.com/api/graphql https://plausible.io/api/event https://www.google.com/ccm/ https://www.google.com/g/collect https://www.google.com:443/g/collect https://www.google.com/rmkt/collect/10939717309/ https://www.google.com:443/rmkt/collect/10939717309/ https://pagead2.googlesyndication.com/ccm/collect https://pagead2.googlesyndication.com:443/ccm/collect https://pagead2.googlesyndication.com https://www.google.com/pagead/ https://px.ads.linkedin.com https://www.googleadservices.com https://facebook.com https://www.facebook.com https://sdk.fra-02.braze.eu https://klear.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://c.amazon-adsystem.com https://aax-eu.amazon-adsystem.com https://ara.paa-reporting-advertising.amazon https://s.amazon-adsystem.com https://s.amazon-adsystem.com:443 https://*.sinch.com; frame-ancestors 'self' https://cms.mirka.com; frame-src 'self' https://consentcdn.cookiebot.com https://www.youtube.com https://mirka.paperturn-view.com https://www.paperturn-view.com https://www.paperturn.com https://player.bilibili.com https://www.googletagmanager.com https://www.facebook.com https://open.spotify.com/ https://*.sinch.com; object-src 'none'; worker-src 'self'; report-to csp-endpoint 1
frame-src 'self' data: https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://open.spotify.com https://anchor.fm https://podcasters.spotify.com https://creators.spotify.com https://w.soundcloud.com https://bandcamp.com https://*.bandcamp.com https://embed.music.apple.com https://embed.podcasts.apple.com https://instagram.com https://www.instagram.com https://read.amazon.com https://iframely.net https://cdn.iframe.ly https://team-hosted-public.s3.amazonaws.com https://*.dwcdn.net https://datawrapper.de https://www.datawrapper.de https://tiktok.com https://www.tiktok.com https://lichess.org https://embed.polymarket.com https://polymarket.com https://manifold.markets https://metaculus.com https://www.metaculus.com https://embed.bsky.app https://delphi.ai https://www.delphi.ai https://delphi.build https://app.askdewey.co https://*.substackcode.com https://js.stripe.com https://hooks.stripe.com https://withpersona.com https://*.withpersona.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.facebook.com https://tr.snapchat.com https://substack.com https://*.substack.com; script-src 'self' 'report-sample' 'wasm-unsafe-eval' https://substackcdn.com https://app.viral-loops.com https://browser.sentry-cdn.com https://cdn.parsely.com https://cdn.withpersona.com https://cdnjs.cloudflare.com https://decagon.ai https://js.sentry-cdn.com https://js.stripe.com https://static.ads-twitter.com https://static.chartbeat.com https://static.cloudflareinsights.com https://www.datadoghq-browser-agent.com https://www.google.com https://www.googletagmanager.com https://www.instagram.com https://googleads.g.doubleclick.net 'nonce-ZfDD_nXqKcW751sMrz6OIg' 'sha256-oNUpYJTjyv6mHx4JzPCmMhElUii2dwkB0MFj/41GTy4=' 'sha256-6mPxECCUmrjOqGu7V7AJtjO9bkmffsxNz7vhLmOvV/U='; worker-src 'self' blob:; report-uri https://o350427.ingest.us.sentry.io/api/4512007192838144/security/?sentry_key=0dd7d049b002dc4a3455fefa8a530c88&sentry_environment=production 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.linkedin.com https://snap.licdn.com https://px.ads.linkedin.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://td.doubleclick.net https://connect.facebook.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://maps.googleapis.com https://maps.gstatic.com https://www.google.com https://dev.visualwebsiteoptimizer.com https://w.clarity.ms https://c.clarity.ms https://cdn.chatbot.com https://*.openwidget.com https://vuejs.org; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https:; frame-src 'self' https://www.youtube-nocookie.com https://www.facebook.com https://*.linkedin.com; connect-src 'self' https://*.algolia.net https://*.algolianet.com https://www.google-analytics.com https://analytics.google.com https://www.clarity.ms https://geodata.phplift.net https://geodata.solutions https://battuta.medunes.net; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; upgrade-insecure-requests; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: https:; media-src 'self' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https:; frame-src 'self' https:; upgrade-insecure-requests; report-uri https://hotze-com.uriports.com/reports/report; report-to default 1
default-src 'self' https: 'unsafe-inline' 'unsafe-eval'; img-src 'self' https: data: blob:; media-src 'self' https: data: blob:; font-src 'self' https: data:; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; frame-src 'self' https:; frame-ancestors 'self'; form-action 'self' https:; upgrade-insecure-requests 1
default-src * 'unsafe-inline' 'unsafe-eval' data: blob: http: https:; script-src * 'unsafe-inline' 'unsafe-eval' data: blob:; style-src * 'unsafe-inline' data: blob:; img-src * data: blob: https: android-webview-video-poster:; frame-src * data: blob: about:; connect-src * data: blob: ws: wss: properties:; font-src * data: blob:; media-src * data: blob:; object-src 'none'; report-uri /csp-report; 1
default-src 'self'; base-uri 'self'; script-src 'strict-dynamic' https://ipac.ctnsnet.com 'nonce-01DkFjzzn79HyWHrimccxw=='; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://assets.juicer.io; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com https://static.juicer.io; frame-src 'self' https://www.google.com https://www.youtube.com https://maps.google.com https://*.twitter.com https://www.instagram.com/ https://consentcdn.cookiebot.com/ https://www.facebook.com/; img-src 'self' data: https://img.youtube.com https://maps.gstatic.com https://maps.googleapis.com https://www.gravatar.com https://our.umbraco.com https://www.juicer.io https://static.juicer.io https://scontent.cdninstagram.com https://www.googletagmanager.com https://www.google.co.nz https://www.google.com https://*.doubleclick.net https://px.ads.linkedin.com/ https://www.facebook.com; connect-src 'self' ws: wss: https://*.google.com https://our.umbraco.com https://maps.googleapis.com https://www.juicer.io https://www.google-analytics.com https://397068a8c548.55310384.ap-southeast-2.token.awswaf.com https://consentcdn.cookiebot.com/ https://ad.doubleclick.net/ https://www.googleadservices.com/ https://googleads.g.doubleclick.net https://www.google.co.nz https://collect-ap-southeast-2.tealiumiq.com https://px.ads.linkedin.com https://stats.g.doubleclick.net https://*.openai.com https://*.googlesyndication.com; report-uri https://report-to-api.raygun.com/reports?apikey=fn27HUsHpLLA/Y34RJYSiA==; report-to csp-endpoint; 1
require-trusted-types-for 'script'; report-uri https://workplacepure.com/csp-report; 1
default-src 'self' *.halo.com *.hsforms.com; object-src 'none'; base-uri 'self' *.halo.com; frame-ancestors 'self' *.halo.com; form-action 'self' *.halo.com *.hsforms.com; script-src 'self' *.halo.com 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com tags.srv.stackadapt.com *.ml314.com *.hsadspixel.net *.hs-banner.com *.hs-analytics.net *.usemessages.com *.hs-scripts.com *.google.com *.gstatic.com *.licdn.com *.hsforms.com *.parsely.com *.adroll.com *.cookielaw.org *.intercomcdn.com *.flippingbook.com *.cloudfront.net *.wp.com *.marketo.com *.marketo.net *.clarity.ms *.facebook.net *.google-analytics.com *.doubleclick.net googleads.g.doubleclick.net *.onetrust.com geolocation.onetrust.com *.zi-scripts.com *.intercom.io *.fullstory.com cdn.cookielaw.org.; style-src 'self' *.halo.com 'unsafe-inline' tags.srv.stackadapt.com *.marketo.com; img-src 'self' *.halo.com *.gravatar.com *.hubspot.com *.hsforms.com data: *.gstatic.com *.parsely.com *.wp.com *.google.com *.ads.linkedin.com *.linkedin.com *.cookielaw.org *.adroll.com *.facebook.com *.google.com.ph *.flippingbook.com; font-src 'self' *.halo.com data:; connect-src 'self' *.halo.com *.clarity.ms *.adroll.com *.stackadapt.com *.zoominfo.com *.hsforms.com hubspot-forms-static-embed.s3.amazonaws.com *.hubapi.com *.doubleclick.net *.google.com *.linkedin.com *.hubspot.com *.hsappstatic.net *.parsely.com *.intercom.io *.cookielaw.org *.onetrust.com wss://nexus-websocket-a.intercom.io *.flippingbook.com *.fullstory.com *.google-analytics.com *.mktoresp.com *.marketo.com *.zi-scripts.com; frame-src 'self' *.halo.com https://www.google.com *.hsforms.com *.google.com *.flippingbook.com *.hubspot.com *.vimeo.com *.youtube.com 1
object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; base-uri 'none'; default-src 'self' https: data: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src https:; report-uri /csp-report; 1
default-src 'self'; font-src 'self' fonts.gstatic.com; img-src 'self' cdn.conservadoresdigitales.cl www.google-analytics.com www.googletagmanager.com; script-src 'self' www.googletagmanager.com www.google-analytics.com www.gstatic.com www.google.com ajax.googleapis.com analytics.google.com; style-src 'self' inline fonts.googleapis.com; frame-ancestors 'self' 1
form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; script-src static/version1692682616/frontend/Stenik/cypho/bg_BG/fonts/Montserrat/Montserrat-Bold.woff.js assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.avada.io *.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.gstatic.com https://www.googletagmanager.com tagmanager.google.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; frame-ancestors unsafe-inline 'self'; frame-src unsafe-inline fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://plumrocket.com *.weltpixel.com 'self' 'unsafe-inline'; connect-src www.google-analytics.com stats.g.doubleclick.net/j/ dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com t.elasticsuite.io *.google-analytics.com *.doubleclick.net 'self' 'unsafe-inline'; img-src data: www.google.bg/pagead/ www.google.com/pagead/ www.facebook.com/tr/ maps.googleapis.com www.google.bg/ads/ga-audiences www.google.com/ads/ga-audiences assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com 'self' data: *.gstatic.com data: 'self' 'unsafe-inline'; font-src maxcdn.bootstrapcdn.com fonts.gstatic.com googleapis.com *.fontawesome.com https://fonts.gstatic.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; style-src connect.facebook.com connect.facebook.net facebook.com googleads.g.doubleclick.net www.google-analytics.com www.google.com/pagead/ www.google.bg/pagead/ www.facebook.com/tr/ maps.googleapis.com ajax.cloudflare.com/cdn-cgi/scripts/ ssets.adobedtm.com secure.authorize.net test.authorize.net js.braintreegateway.com bimg.abv.bg/GDPR/GDPR.js dmp.adwise.bg chimpstatic.com cdn.onesignal.com/sdks/OneSignalSDK.js static.zdassets.com/ekr/asset_composer.js v2.zopim.com/ cdn.onesignal.com/ onesignal.com/ maxcdn.bootstrapcdn.com fonts.googleapis.com *.adobe.com *.fontawesome.com unsafe-inline assets.braintreegateway.com https://fonts.googleapis.com *.googleapis.com *.gstatic.com tagmanager.google.com 'self' 'unsafe-inline'; 1
default-src 'self' http: https: data: blob: 'unsafe-inline' 'unsafe-eval' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' blob: https://challenges.cloudflare.com https://us-assets.i.posthog.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://*.basemaps.cartocdn.com; font-src 'self' data:; connect-src 'self' https://us.i.posthog.com https://us-assets.i.posthog.com https://extensions.duckdb.org https://*.basemaps.cartocdn.com; worker-src 'self' blob:; frame-src https://challenges.cloudflare.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' challenges.cloudflare.com console.rul.ai www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src * data:; font-src static.paddle.com; connect-src 'self' api.paddle.com console.rul.ai app.launchdarkly.com clientstream.launchdarkly.com events.launchdarkly.com *.google-analytics.com o522631.ingest.sentry.io; frame-src challenges.cloudflare.com console.rul.ai; upgrade-insecure-requests; report-uri https://paddlecp.report-uri.com/r/t/csp/reportOnly 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://cdn-cookieyes.com https://sdk.woosmap.com https://unpkg.com https://checkoutshopper-test.cdn.adyen.com https://checkoutshopper-live.cdn.adyen.com https://f.vimeocdn.com https://www.youtube.com https://www.google.com https://static.doubleclick.net https://*.omniconvert.com; style-src 'self' 'unsafe-inline' https://cdn-cookieyes.com https://checkoutshopper-test.cdn.adyen.com https://checkoutshopper-live.cdn.adyen.com https://f.vimeocdn.com https://www.youtube.com; img-src 'self' data: blob: https://cdn-cookieyes.com https://www.google.com https://www.google.es https://www.googletagmanager.com https://i.vimeocdn.com https://www.youtube.com https://*.omniconvert.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://api.woosmap.com https://cdn-cookieyes.com https://region1.google-analytics.com https://region1.analytics.google.com https://pagead2.googlesyndication.com https://www.google.com https://stats.g.doubleclick.net https://log.cookieyes.com https://www.googletagmanager.com https://vimeo.com https://arclight.vimeo.com https://lensflare.vimeo.com https://i.vimeocdn.com https://f.vimeocdn.com https://vod-adaptive-ak.vimeocdn.com https://www.youtube.com https://googleads.g.doubleclick.net https://jnn-pa.googleapis.com https://*.omniconvert.com; frame-src 'self' https://*.cdn.adyen.com https://player.vimeo.com https://vimeo.com https://www.googletagmanager.com https://www.youtube.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; 1
default-src https:; font-src https: data:; style-src 'unsafe-inline' https:; object-src 'self'; connect-src https: wss:; script-src 'nonce-o+E0NxEGR+WWj75a3alpptm7k4JMUZvzo9p1pfFH2bs=' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; img-src https: data:; report-uri /ra/csp-log/create 1
object-src 'none'; script-src 'self' cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://unpkg.com https://www.recaptcha.net unpkg.com; style-src 'self' cdnjs.cloudflare.com fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com unpkg.com; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' https://cdn.jsdelivr.net https://code.jquery.com https://cdn.datatables.net https://js.stripe.com https://cdn.tailwindcss.com https://cdn.tiny.cloud https://www.paypal.com https://www.youtube.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com https://cdn.datatables.net https://cdn.tailwindcss.com https://cdn.tiny.cloud; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net https://cdn.datatables.net; img-src 'self' data: blob: https:; connect-src 'self' https://app.atera.com https://nominatim.openstreetmap.org wss://vps-b1b88f2e.vps.ovh.us:9801 wss://vps-b1b88f2e.vps.ovh.us:9802; frame-src 'self' https://js.stripe.com https://www.youtube.com https://www.youtube-nocookie.com https://www.paypal.com https://www.openstreetmap.org https://calendar.google.com; media-src 'self' data: blob: https:; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://www.paypal.com; frame-ancestors 'self'; report-uri https://weldonpc.com/csp-report; report-to csp-endpoint 1
object-src 'none';base-uri 'self';script-src 'nonce-g28HS23OLF9_-zTKc180GA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' media1.jpc.de wom.de; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; script-src 'self' media1.jpc.de wom.de 'nonce-DkebBpDDxRzuaHGD/PCw05qk+Hk+3ZeoAbbIwUxSAZsz9wzPjCMm30uA1vn6WUEgwYsmwZCjs8szX2meFyQ1MQ==' 'report-sample'; style-src 'self' media1.jpc.de wom.de 'report-sample' 'unsafe-inline'; font-src 'self' media1.jpc.de wom.de; img-src 'self' media1.jpc.de wom.de data:; connect-src 'self' media1.jpc.de wom.de https://use.jpc.de; report-uri /csp/; report-to csp-endpoint 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: *.fontawesome.com https://fonts.bunny.net *.facebook.com *.facebook.net *.cloudflare.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://seo.mageplaza.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.facebook.com *.facebook.net mercadopago.com.mx www.mercadopago.com.mx *.mercadopago.com.mx 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.hubspot.com *.hubapi.com *.googletagmanager.com *.doubleclick.net *.facebook.com *.facebook.net *.cloudflare.com mercadopago.com.mx www.mercadopago.com.mx *.mercadopago.com.mx *.stripe.com stripe.com *.link.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com js.mollie.com *.hubspot.com *.hubapi.com *.googletagmanager.com *.doubleclick.net *.facebook.com *.facebook.net *.cloudflare.com mercadopago.com.mx www.mercadopago.com.mx *.mercadopago.com.mx *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.sandbox.paypal.com *.paypalobjects.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io maps.googleapis.com maps.gstatic.com *.googleapis.com https://images.unsplash.com https://maps.googleapis.com https://firebasestorage.googleapis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://www.mollie.com *.hubspot.com *.hubapi.com *.googletagmanager.com *.doubleclick.net *.hsforms.com *.google.com.mx *.facebook.com *.facebook.net *.cloudflare.com mercadopago.com.mx www.mercadopago.com.mx *.mercadopago.com.mx *.sandbox.paypal.com *.paypalobjects.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com https://cdn.jsdelivr.net/npm/@fancyapps/ui@5.0/dist/fancybox/fancybox.umd.js *.avada.io *.shopify.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com js.mollie.com *.hs-scripts.com *.hs-banner.com *.hscollectedforms.net js.usemessages.com *.hsadspixel.net *.hs-analytics.net *.hsforms.com *.hubspot.com *.hubapi.com *.googletagmanager.com *.doubleclick.net *.facebook.com *.facebook.net *.cloudflare.com *.jsdelivr.net cdn.jsdelivr.net us1-config.doofinder.com cdn.doofinder.com *.doofinder.com mercadopago.com.mx www.mercadopago.com.mx *.mercadopago.com.mx *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://cdn.jsdelivr.net/npm/@fancyapps/ui@5.0/dist/fancybox/fancybox.css https://cdnjs.cloudflare.com *.fontawesome.com https://fonts.bunny.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.hubapi.com *.facebook.com *.facebook.net *.cloudflare.com *.jsdelivr.net cdn.jsdelivr.net mercadopago.com.mx www.mercadopago.com.mx *.mercadopago.com.mx *.stripe.network *.stripecdn.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com https://get.geojs.io *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.hubspot.com forms.hscollectedforms.net *.hubapi.com *.googletagmanager.com *.doubleclick.net *.facebook.com *.facebook.net *.cloudflare.com mercadopago.com.mx www.mercadopago.com.mx *.mercadopago.com.mx *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com us1-config.doofinder.com cdn.doofinder.com *.doofinder.com *.sandbox.paypal.com *.paypalobjects.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';script-src 'self' 'unsafe-inline' 'nonce-tR4c971P3pAF1ucNpaco6mpS' 'unsafe-eval' https://pixel.byspotify.com *.travcorpservices.com https://www.google.com https://www.google-analytics.com https://www.googleoptimize.com https://www.googletagmanager.com https://ajax.googleapis.com https://www.gstatic.com https://googleads.g.doubleclick.net https://api.feefo.com https://register.feefo.com https://bat.bing.com https://cdn.evgnet.com https://connect.facebook.net https://i.clarity.ms https://static-ssl.responsetap.com *.hotjar.com https://tag.simpli.fi https://unpkg.com https://www.bugherd.com https://decagon.ai https://www.datadoghq-browser-agent.com https://assetscdn.stackla.com/media/js https://vjs.zencdn.net https://cdn.amplitude.com/libs https://sdk.joinsherpa.io https://apps.mypurecloud.com https://consentcdn.cookiebot.com https://cdnjs.cloudflare.com https://ttc-contiki.entry.promo https://cdn.optimizely.com https://www.riddle.com;style-src 'self' 'unsafe-inline' https://assetscdn.stackla.com/media/components/stackla-uikit/dist https://fonts.googleapis.com https://p.typekit.net https://use.typekit.net https://vjs.zencdn.net https://apps.mypurecloud.com;img-src 'self' https://bat.bing.com https://c.clarity.ms https://i.ytimg.com https://www.facebook.com https://www.google-analytics.com https://www.google.com https://www.uplift-platform.com data:;frame-src 'self' https://10006172.fls.doubleclick.net https://uplift-cdn-stg.uplift.com https://vars.hotjar.com https://widget.stackla.com https://www.google.com https://apps.joinsherpa.io https://www.googletagmanager.com https://a25408250069.cdn.optimizely.com;font-src 'self' https://assetscdn.stackla.com https://fonts.gstatic.com https://use.typekit.net https://vjs.zencdn.net https://apps.mypurecloud.com;connect-src 'self' *.travcorpservices.com *.travcorp.com *.corp.ttc:7443 https://api.feefo.com https://bat.bing.com https://in.hotjar.com https://ws11.hotjar.com/api https://l.clarity.ms https://metrics.responsetap.com/infinity https://noembed.com https://pm-mrkt.prodgw.uplift-platform.com https://rum.browser-intake-datadoghq.com https://session-replay.browser-intake-datadoghq.com https://ttctravel.germany-2.evergage.com https://www.facebook.com https://www.google-analytics.com https://logx.optimizely.com https://region1.analytics.google.com https://ttc.contiki.com 1
base-uri 'self'; form-action 'self' https://www.facebook.com/tr/; frame-ancestors 'self'; connect-src 'self' https://cdn.cookielaw.org https://googleads.g.doubleclick.net https://www.googletagmanager.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://www.googleadservices.com https://stats.g.doubleclick.net https://translate.googleapis.com https://cdn.linkedin.oribi.io https://ad.doubleclick.net https://pagead2.googlesyndication.com https://tags.srv.stackadapt.com https://px.ads.linkedin.com/ https://adservice.google.com/ https://www.google.com https://www.facebook.com; default-src 'self' https://fonts.googleapis.com https://translate.googleapis.com https://www.googletagmanager.com https://cdnjs.cloudflare.com https://translate.google.com https://www.google-analytics.com https://cdn.cookielaw.org https://www.googleadservices.com https://googleads.g.doubleclick.net https://script.crazyegg.com https://www.google.com https://www.gstatic.com https://snap.licdn.com https://cdn.callrail.com https://translate-pa.googleapis.com https://code.getmdl.io/ https://tags.srv.stackadapt.com https://connect.facebook.net; font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' https://client-experience-dev.flightsafety.com/ https://www.google.com https://www.youtube.com https://www.facebook.com https://player.vimeo.com https://9815470.fls.doubleclick.net https://td.doubleclick.net https://go.flightsafety.com/ https://www.googletagmanager.com; img-src 'self' data: https://www.gstatic.com https://www.google.com https://www.google-analytics.com/collect https://px.ads.linkedin.com https://p.adsymptotic.com https://cdn.cookielaw.org https://www.linkedin.com https://fonts.gstatic.com https://googleads.g.doubleclick.net https://www.facebook.com https://ad.doubleclick.net https://di.rlcdn.com https://d.agkn.com/ https://www.googletagmanager.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.cookielaw.org https://pi.pardot.com/ https://www.googletagmanager.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://www.googleadservices.com http://translate.google.com https://translate.googleapis.com https://script.crazyegg.com https://script.crazyegg.com/pages/scripts/0068/5465.js https://snap.licdn.com http://cdn.callrail.com https://www.google.com https://www.gstatic.com https://googleads.g.doubleclick.net https://translate-pa.googleapis.com https://code.getmdl.io https://connect.facebook.net https://tags.srv.stackadapt.com https://player.vimeo.com https://go.flightsafety.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://code.getmdl.io https://fonts.googleapis.com https://translate.googleapis.com https://cdn.cookielaw.org https://www.googletagmanager.com https://translate-pa.googleapis.com https://www.gstatic.com https://cdnjs.cloudflare.com https://tags.srv.stackadapt.com; report-to https://652d4e11b6167cf8f68c6359.endpoint.csper.io/?v=0;; report-uri https://652d4e11b6167cf8f68c6359.endpoint.csper.io/?v=0;; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://platform.twitter.com https://platform.instagram.com https://www.instagram.com https://connect.facebook.net https://vk.com https://telegram.org https://www.tiktok.com https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://www.googletagmanager.com https://www.google-analytics.com; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; img-src 'self' data: blob: https: http:; media-src 'self' blob: https:; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com data:; connect-src 'self' https://api.nbrb.by https://cdn.jsdelivr.net https://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.ru wss://mc.yandex.com https://www.google-analytics.com https://www.googletagmanager.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://youtube.com https://player.vimeo.com https://vimeo.com https://rutube.ru https://www.rutube.ru https://www.tiktok.com https://tiktok.com https://vk.com https://www.vk.com https://ok.ru https://www.ok.ru https://t.me https://telegram.org https://www.instagram.com https://instagram.com https://www.facebook.com https://facebook.com https://platform.twitter.com https://twitter.com https://x.com https://yandex.ru https://yandex.by https://maps.yandex.ru https://mc.yandex.ru https://www.google.com https://google.com https://maps.google.com https://music.yandex.ru https://music.yandex.by https://open.spotify.com https://spotify.com https://soundcloud.com https://w.soundcloud.com https://www.threads.net https://threads.net https://www.threads.com https://threads.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint 1
script-src-elem 'self' 'unsafe-inline' flex.cybersource.com testflex.cybersource.com connect.facebook.net www.google-analytics.com *.google.com www.googleadservices.com www.googletagmanager.com *.hlx.page rum.hlx.page *.newrelic.com; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: maxcdn.bootstrapcdn.com *.fontawesome.com use.fontawesome.com https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com 'self' www.facebook.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com 'self' www.facebook.com *.doubleclick.net *.facebook.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://www.googletagmanager.com/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.gstatic.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com 'self' adobe.com googleads.g.doubleclick.net *.facebook.com *.doubleclick.net *.facebook.net *.google.com *.googleadservices.com *.googletagmanager.com forceamerica.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.googletagmanager.com magefan.com cm.magefan.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.googletagmanager.com https://rum.hlx.page *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com  'self' connect.facebook.net *.hlx.page rum.hlx.page *.facebook.net *.google-analytics.com *.googletagmanager.com *.gstatic.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com 'self' maxcdn.bootstrapcdn.com *.fontawesome.com *.fonts.net *.googleapis.com *.gstatic.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com api-m.sandbox.cybersource.com flex.cybersource.com secureacceptance.cybersource.com testflex.cybersource.com testsecureacceptance.cybersource.com googleads.g.doubleclick.net www.facebook.com connect.facebook.net www.googleadservices.com www.googletagmanager.com *.doubleclick.net *.facebook.com *.facebook.net *.google-analytics.com *.googleadservices.com *.googletagmanager.com rum.hlx.page https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src bam.nr-data.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://fd9bbbe8-62e0-4bb0-97f1-225bf4f3f691.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; font-src 'self'; connect-src 'self'; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; form-action 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com https://cdnjs.cloudflare.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com paymentpage.axepta.bnpparibas 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com cl.avis-verifies.com js.mollie.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://images.unsplash.com *.googleapis.com magefan.com cm.magefan.com t.mydialoginsight.com axeptio.imgix.net a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org https://www.mollie.com *.disqus.com https://img.youtube.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.gstatic.com static.axept.io https://cdn.jsdelivr.net *.axept.io *.cabesto.com https://cdnjs.cloudflare.com js.mollie.com pay.google.com applepay.cdn-apple.com *.disqus.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https://cdn.jsdelivr.net *.cabesto.com https://fonts.googleapis.com https://cdnjs.cloudflare.com *.fontawesome.com maxcdn.bootstrapcdn.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src *.wonderpush.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; media-src 'self' https: blob:; frame-src 'self' https:; form-action 'self'; report-uri /csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https:; frame-src 'self' https:; media-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/  https://widget.trustpilot.com;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://appleid.cdn-apple.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com *.myheritage.it https://www.myheritage.it  'unsafe-eval' 'nonce-10e7727bdf0a9309b6296656ffb48467' 'strict-dynamic' https://widget.trustpilot.com https://invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style  https://widget.trustpilot.com;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io https://www.google.com/recaptcha/enterprise/* https://www.google.com/recaptcha/enterprise/ https://www.google.com/recaptcha/enterprise/clr https://www.google.com/recaptcha/ https://maps.googleapis.com https://people.googleapis.com https://translate-pa.googleapis.com *.myheritage.it https://widget.trustpilot.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:  https://widget.trustpilot.com https://*.trustpilot.com;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=report&canonical_page_id=/company/home/ 1
child-src blob: data: https:; connect-src https: wss:; default-src blob: data: https: 'report-sample' 'unsafe-eval' 'unsafe-inline'; font-src data: https:; form-action https:; frame-src data: https:; img-src blob: data: https:; media-src blob: data: https:; object-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; script-src-elem https: 'nonce-MGM3JJb25XibxBRvVzu7Hg=='; style-src https: 'unsafe-inline'; report-uri https://csp.ffx.io/; report-to csp-endpoint 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com wheelofpopups.com www.wheelofpopups.com d27jz0887nb4wl.cloudfront.net https://client.crisp.chat https://fonts.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com wheelofpopups.com www.wheelofpopups.com eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com https://sandbox.suyool.com https://suyool.com *.suyool.com suyoolpay: static.addtoany.com/ 'self' 'unsafe-inline'; img-src 'self' data: *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: wheelofpopups.com www.wheelofpopups.com d27jz0887nb4wl.cloudfront.net https://image.crisp.chat *.amazonaws.com s3.antoineonline.com *.doubleclick.net *.ytimg.com unpkg.com *.unpkg.com imagekit.io *.imagekit.io *.googleadservices.com antoine-images.com *.olx.com.lb *.ibb.co cdn-cookieyes.com *.clarity.ms *.google.com.lb *.bing.com https://maps.googleapis.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page wheelofpopups.com www.wheelofpopups.com https://client.crisp.chat eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com s3.antoineonline.com *.cardinalcommerce.com *.doubleclick.net *.paypal.com *.ytimg.com unpkg.com *.unpkg.com cdnjs.cloudflare.com imagekit.io *.imagekit.io *.mastercard.com pay.google.com static.addtoany.com cdn-cookieyes.com *.livechatinc.com *.clarity.ms 'self' data: https://maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com wheelofpopups.com www.wheelofpopups.com d27jz0887nb4wl.cloudfront.net https://client.crisp.chat *.googleapis.com *.addtoany.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com wheelofpopups.com www.wheelofpopups.com d27jz0887nb4wl.cloudfront.net https://client.crisp.chat wss://client.relay.crisp.chat https://plugins.crisp.chat s3.antoineonline.com *.cardinalcommerce.com analytics.google.com unpkg.com *.unpkg.com imagekit.io *.imagekit.io *.cookieyes.com cdn-cookieyes.com *.livechatinc.com *.clarity.ms stats.g.doubleclick.net 'self' data: https://maps.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
style-src-elem *.googleadservices.com *.googletagmanager.com *.oktopost.com ajax.googleapis.com analytics-eu.clickdimensions.com cdn.jsdelivr.net connect.facebook.net facebook.com googleads.g.doubleclick.net myaskai.com px.ads.linkedin.com 'self' snap.licdn.com static.hotjar.com 'unsafe-inline';style-src *.googleadservices.com *.googletagmanager.com *.oktopost.com ajax.googleapis.com analytics-eu.clickdimensions.com cdn.jsdelivr.net connect.facebook.net facebook.com googleads.g.doubleclick.net myaskai.com px.ads.linkedin.com 'self' snap.licdn.com static.hotjar.com 'unsafe-inline';script-src-elem *.googleadservices.com *.googletagmanager.com *.oktopost.com ajax.googleapis.com analytics-eu.clickdimensions.com cdn.jsdelivr.net connect.facebook.net consent.cookiebot.com facebook.com googleads.g.doubleclick.net myaskai.com px.ads.linkedin.com 'self' 'sha256-JAfSbjIneyRXAKYefy9pInCPw6uXo633rpduFp4nkVo=' 'sha256-S+NXAzOOcmFPKskT3E+XD/cvY1vzuWtdVi/FUm+2dGo=' snap.licdn.com static.hotjar.com;frame-src *.googleadservices.com *.googletagmanager.com *.oktopost.com analytics-eu.clickdimensions.com consentcdn.cookiebot.com googleads.g.doubleclick.net myaskai.com px.ads.linkedin.com 'self';script-src *.googleadservices.com *.googletagmanager.com *.oktopost.com ajax.googleapis.com analytics-eu.clickdimensions.com cdn.jsdelivr.net connect.facebook.net facebook.com googleads.g.doubleclick.net myaskai.com px.ads.linkedin.com 'self' 'sha256-JAfSbjIneyRXAKYefy9pInCPw6uXo633rpduFp4nkVo=' 'sha256-S+NXAzOOcmFPKskT3E+XD/cvY1vzuWtdVi/FUm+2dGo=' snap.licdn.com static.hotjar.com 'nonce-uBRxFJc71Ymqr42/fuJvGg==';img-src *.googleadservices.com *.googletagmanager.com *.oktopost.com analytics-eu.clickdimensions.com connect.facebook.net data: facebook.com googleads.g.doubleclick.net imgsct.cookiebot.com myaskai.com px.ads.linkedin.com 'self' snap.licdn.com static.hotjar.com www.google.co.uk;connect-src *.googleadservices.com *.googletagmanager.com *.oktopost.com ajax.googleapis.com analytics-eu.clickdimensions.com cdn.jsdelivr.net connect.facebook.net consent.cookiebot.com consentcdn.cookiebot.com facebook.com googleads.g.doubleclick.net myaskai.com px.ads.linkedin.com region1.google-analytics.com 'self' snap.licdn.com static.hotjar.com stats.g.doubleclick.net ws:; www.google.co.uk;font-src cdn.jsdelivr.net 'self';script-src-attr consentcdn.cookiebot.com;object-src 'none';base-uri 'none';form-action 'self';default-src 'self';frame-ancestors treasurers.org www-live.treasurers.org;upgrade-insecure-requests 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://geowidget.easypack24.net *.easypack24.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.klarna.com secure.payu.com merch-prod.snd.payu.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://geowidget-app.inpost.pl/ https://lilou-configurator.netlify.app exchange.mediavine.com ams.creativecdn.com tags.creativecdn.com *.criteo.com *.criteo.net facebook.com 'unsafe-inline' data: 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com *.klarna.com *.klarnaevt.com *.klarnacdn.net static.payu.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.hsforms.net *.hsforms.com *.cdninstagram.com *.google.pl google.com google.pl *.criteo.com *.criteo.net https: data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.klarna.com *.klarnacdn.net x.klarnacdn.net secure.payu.com secure.snd.payu.com *.klarnaservices.com https://d3bo67muzbfgtl.cloudfront.net *.snrbox.com https://sentry.lilou.pl *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.hsforms.net *.hsforms.com *.sentry-cdn.com exchange.mediavine.com unpkg.com *.mapbox.com furgonetka.pl *.hotjar.com *.criteo.com *.criteo.net *.cloudflareinsights.com *.wp.pl *.clickonometrics.pl bat.bing.com tags.creativecdn.com ams.creativecdn.com lib.onet.pl sgqcvfjvr.onet.pl events.onet.pl events.ocdn.eu clarity.ms *.clarity.ms 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com cdngazeta.pl capi-automation.s3.us-east-2.amazonaws.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.klarnacdn.net *.fontawesome.com https://d3bo67muzbfgtl.cloudfront.net *.snrcdn.net https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com https://geowidget.easypack24.net https://geowidget.inpost.pl *.easypack24.net *.openstreetmap.org lilouparis.test lilou.test *.lilouparis.com *.lilou.pl 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net secure.payu.com merch-prod.snd.payu.com *.klarnaservices.com *.klarna.com https://api.edrone.me *.snrbox.com https://sentry.lilou.pl https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.easypack24.net *.inpost.pl *.openstreetmap.org t.elasticsuite.io *.hsforms.net *.hsforms.com *.sentry-cdn.com *.wp.pl exchange.mediavine.com bat.bing.com bat.bing.net ams.creativecdn.com tags.creativecdn.com measurement-api.criteo.com api-s.edrone.me events.ocdn.eu *.googleadservices.com *.google.pl *.googletagmanager.com health.ems.onet.pl content.hotjar.io hotjar.com wss://ws.hotjar.com *.onet.pl analytics-ipv6.tiktokw.us *.gazeta.pl clk.leadexpert.pl gtm.lilou.pl gtm.lilou.dev *.clarity.ms 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com bat.bing.com google.com exchange.mediavine.com www.googletagmanager.com tags.creativecdn.com ams.creativecdn.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=ryLOZ2FQNZTz4s3O0zQhQp6_cBjoTI2cm6TPvQnTDt4-1789269967.2710614-1.0.1.1-pAg3wqlwCKyFcgwCDFg2zhLKTNUGzDt3kccXrsIyFo0AaiX9tfm1MWVJaZfpb5bCFPJPQ4UBZIA0bya2MVwOEXLOj0tWsKOifaT4FbIz1DQ5TKjWBJl76h5c5Wsey50FG00wQ4BqJT2lQOOhQA5nRLC0ZnduTsB8A8Bo0hcmG.2jSlF24l9xGeHZ7cn_KYE6; report-to cf-csp-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://cdn.userway.org https://static.cloudflareinsights.com https://connect.facebook.net https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://assets.pinterest.com https://platform.twitter.com; style-src 'self' 'unsafe-inline' https://cdn.userway.org https://fonts.googleapis.com; img-src 'self' https: data: blob: http://www.icomamerica.com http://microsat.com.pl http://palomar-engineers.com; connect-src 'self' data: https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://cdn.userway.org https://static.cloudflareinsights.com https://api.userway.org https://www.google.com; font-src 'self' data: https://cdn.userway.org https://fonts.gstatic.com; frame-src 'self' https://cdn.userway.org https://www.facebook.com https://m.facebook.com https://web.facebook.com https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://maps.google.com https://recaptcha.google.com https://platform.twitter.com https://assets.pinterest.com; media-src 'self' data: https://www.youtube.com https://*.fbcdn.net; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://www.paypal.com; report-uri /csp-report.cfm; 1
default-src 'self';script-src 'self' 'unsafe-inline' https:;style-src 'self' 'unsafe-inline' https:;img-src 'self' data: https:;font-src 'self' data: https:;connect-src 'self' https:;frame-src 'self' https: data:;object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';script-src-attr 'none';upgrade-insecure-requests 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' crisecia.com.br *.crisecia.com.br wake-components.fbitsstatic.net crisecia.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br hertzen.com rdstation.com.br googleadservices.com konduto.com shoptarget.com.br traycheckout.com.br clearsale.com.br shopback.net yapay.com.br doubleclick.net online-metrix.net bing.com hotjar.com linximpulse.net cloudfront.net shopconvert.com.br cloudflare.com hotjar.io retargeter.com.br jsdelivr.net *.doubleclick.net *.bing.com *.hotjar.com *.linximpulse.net *.shopback.net *.hertzen.com *.rdstation.com.br *.googleadservices.com *.konduto.com *.shoptarget.com.br *.shopconvert.com.br *.hotjar.io *.retargeter.com.br *.cloudflare.com *.jsdelivr.net *.tiktok.com; frame-ancestors *.crisecia.com.br crisecia.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
font-src https://cdn.checkout.com *.cdn-apple.com instantcredit.net test.instantcredit.net druni.my.site.com *.salesforce.com *.force.com *.salesforce-sites.com *.lightning.force.com fonts.gstatic.com *.azureedge.net *.doofinder.com *.typekit.net *.googleapis.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.paycomet.com api.paycomet.com 'self' 'unsafe-inline'; frame-ancestors *.storyblok.com 'self'; style-src https://cdn.checkout.com *.doofinder.com instantcredit.net test.instantcredit.net druni.my.site.com *.salesforce.com *.force.com *.salesforce-sites.com *.lightning.force.com *.storyblok.com *.photoslurp.com *.nosto.com *.klaviyo.com *.typekit.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src druni.my.site.com *.salesforce.com *.force.com *.salesforce-sites.com *.lightning.force.com *.storyblok.com *.zdassets.com *.doofinder.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; img-src https://www.googletagmanager.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.awin1.com *.zenaps.com *.wepowerconnections.com *.doofinder.com https://images.unsplash.com instantcredit.net test.instantcredit.net www.googletagmanager.com www.druni.pt druni.my.site.com *.salesforce.com *.force.com *.salesforce-sites.com *.lightning.force.com https://sandbox.sequracdn.com https://live.sequracdn.com *.storyblok.com *.facebook.com *.google.com *.google.es widgets.trustedshops.com *.twitter.com t.co *.azureedge.net *.pinterest.com *.bing.com data: 'self' 'unsafe-inline'; frame-src https://www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.awin1.com *.zenaps.com *.fls.doubleclick.net https://js.checkout.com *.klarna.com www.paycomet.com api.paycomet.com instantcredit.net test.instantcredit.net www.googletagmanager.com druni.my.site.com *.salesforce.com *.force.com *.salesforce-sites.com *.lightning.force.com https://sandbox.sequracdn.com https://live.sequracdn.com *.hotjar.com *.oct8ne.com *.pinterest.com *.doofinder.com *.empathybroker.com *.empathy.co *.criteo.com 'self' 'unsafe-inline'; script-src https://analytics.tiktok.com/ https://ui.swogo.net/ https://www.googletagmanager.com https://ct.pinterest.com www.googleadservices.com www.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com https://*.checkout.com *.klarnacdn.net *.cdn-apple.com *.doofinder.com https://maps.googleapis.com www.paycomet.com api.paycomet.com instantcredit.net test.instantcredit.net code.jquery.com www.googletagmanager.com druni.my.site.com druni.my.salesforce-scrt.com *.salesforce.com *.force.com *.salesforce-sites.com *.lightning.force.com https://sandbox.sequracdn.com https://live.sequracdn.com *.storyblok.com *.googleoptimize.com widgets.trustedshops.com static-eu.oct8ne.com static.zdassets.com *.facebook.net *.tradedoubler.com *.doubleclick.net *.hotjar.com *.ads-twitter.com smct.co *.bsmartdata.com *.retargeted.co *.bing.com *.clarity.ms *.smartsuppcdn.com *.smartsuppchat.com *.smartsupp.com *.connectif.cloud *.klaviyo.com *.photoslurp.com *.pinimg.com *.nosto.com *.empathybroker.com *.unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; connect-src https://analytics.tiktok.com/ https://tracking.swogo.net/ https://api.swogo.net/ https://api.trustedshops.com/ https://www.googletagmanager.com www.google-analytics.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.wepowerconnections.com https://the.sciencebehindecommerce.com https://js.checkout.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.doofinder.com wss://*.doofinder.com https://maps.googleapis.com https://player.vimeo.com instantcredit.net *.instantcredit.net www.googletagmanager.com druni.my.salesforce-scrt.com druni.my.site.com *.salesforce.com *.force.com *.salesforce-sites.com *.lightning.force.com https://sandbox.sequracdn.com https://live.sequracdn.com *.oct8ne.com *.zendesk.com *.zopim.com *.doubleclick.net *.hotjar.com *.hotjar.io *.clarity.ms *.smartsuppcdn.com *.googleapis.com *.gstatic.com *.google-analytics.com *.google.es *.connectif.cloud *.klaviyo.com *.photoslurp.com *.zdassets.com *.pinterest.com *.nosto.com *.empathybroker.com *.empathy.co 'self' 'unsafe-inline'; 1
default-src 'self' https:; connect-src 'self' https: wss:; script-src 'unsafe-inline' 'self' https:; worker-src blob:; style-src 'unsafe-inline' 'self' https:; object-src 'none'; img-src 'self' data: https:; frame-ancestors 'self' 1
default-src 'self' guatemaladigital.com:* ; form-action 'none' ; frame-src 'self' googleads.g.doubleclick.net tpc.googlesyndication.com pagead2.googlesyndication.com www.google.com/recaptcha/ recaptcha.google.com/recaptcha/ td.doubleclick.net *.doubleclick.net www.google.com *.adtrafficquality.google www.youtube.com goods-vod.kwcdn.com www.googletagmanager.com ; frame-ancestors 'self' https://*.guatemaladigital.com https://www.amazon.com ; style-src 'self' 'unsafe-inline' fonts.googleapis.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' c.bing.com www.statcounter.com www.google-analytics.com ssl.google-analytics.com www.google.com www.googletagmanager.com www.gstatic.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.com.gt adservice.google.com.sv adservice.google.co.cr static.hotjar.com tools.luckyorange.com websdk.smartlook.com script.hotjar.com settings.luckyorange.com ssl.mousestats.com www.clarity.ms a.plerdy.com *.adtrafficquality.google googleads.g.doubleclick.net ; script-src-elem 'self' 'unsafe-inline' c.bing.com www.statcounter.com www.google-analytics.com ssl.google-analytics.com www.google.com www.googletagmanager.com www.gstatic.com pagead2.googlesyndication.com partner.googleadservices.com tpc.googlesyndication.com www.googletagservices.com adservice.google.com adservice.google.com.gt adservice.google.com.sv adservice.google.co.cr static.hotjar.com tools.luckyorange.com websdk.smartlook.com script.hotjar.com settings.luckyorange.com ssl.mousestats.com www.clarity.ms a.plerdy.com *.adtrafficquality.google googleads.g.doubleclick.net ; img-src 'self' data: d3w3rr05w2dn4u.cloudfront.net *.amazonaws.com images-na.ssl-images-amazon.com/images/ m.media-amazon.com/images/ g-ecx.images-amazon.com i.ebayimg.com/images/ www.googletagmanager.com pagead2.googlesyndication.com www.google-analytics.com www.google.com www.google.com.gt www.google.com.sv www.google.com.ar www.google.hn www.google.ro www.google.ch www.google.co.uk www.google.cl www.google.co.cr www.googleadservices.com googleads.g.doubleclick.net guatemaladigital.com costaricaya.com unpkg.com *.tile.openstreetmap.org *.clarity.ms *.bing.com *.adtrafficquality.google *.doubleclick.net i.ytimg.com img.kwcdn.com guatemaladigital.com www.guatemaladigital.com ; connect-src 'self' data: guatemaladigital.com:* webapi.guatemaladigital.click pagead2.googlesyndication.com c.statcounter.com www.google-analytics.com www.googletagmanager.com settings.luckyorange.com vc.hotjar.io ws.hotjar.com content.hotjar.io wss://ws.hotjar.com analytics.google.com *.analytics.google.com i.clarity.ms *.adtrafficquality.google *.doubleclick.net ad.doubleclick.net stats.g.doubleclick.net googleads.g.doubleclick.net csi.gstatic.com www.google.com www.google.com.gt www.googleadservices.com o4511780443258880.ingest.us.sentry.io ; font-src 'self' fonts.gstatic.com ; media-src 'self' gd-archivos.s3.amazonaws.com *.clarity.ms *.bing.com ; child-src 'self' *.doubleclick.net www.google.com ; report-uri https://o4511780443258880.ingest.us.sentry.io/api/4511790793359361/security/?sentry_key=062b0cf191bbed9cc6313e2bf0f8d6ea ; 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; form-action 'self' https://secure.payu.in https://api.razorpay.com https://*.ccavenue.com 1
object-src 'none';base-uri 'self';script-src 'nonce-6sV2hGrAwW8tN4iYrW7cEw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-tXrZgrMrikjlfVectQ-RRA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https://*.onsolve.com https://onsolve.com https://*.onsolve.net https://onsolve.net https://*.onsolve.eu https://onsolve.eu https://*.worldtravelprotection.com https://*.cem.onsolve.eu https://*.ocp.onsolve.com https://*.datadoghq-browser-agent.com https://*.ddog-gov-browser-agent.com https://*.quicksight.aws.amazon.com https://*.gstatic.com https://*.arcgisonline.com https://*.stabilitas.io https://*.svstaging.net https://*.arcgis.com https://*.google-analytics.com https://*.googleapis.com https://*.mapbox.com https://*.googletagmanager.com https://*.bugsnag.com https://browser-intake-datadoghq.com https://browser-intake-ddog-gov.com https://lottie.host wss://*.stabilitas.io wss://*.svstaging.net wss://*.onsolve.com wss://onsolve.com wss://*.onsolve.net wss://onsolve.net wss://*.onsolve.eu wss://onsolve.eu https://*.s3.amazonaws.com https://*.cloudfront.net https://*.walkme.com https://s3.walkmeusercontent.com https://*.openstreetmap.org https://*.cartocdn.com https://*.maptiler.com; base-uri 'self'; object-src 'none'; connect-src 'self' blob: https://*.onsolve.com https://onsolve.com https://*.onsolve.net https://onsolve.net https://*.onsolve.eu https://onsolve.eu https://*.worldtravelprotection.com https://*.cem.onsolve.eu https://*.ocp.onsolve.com https://*.datadoghq-browser-agent.com https://*.ddog-gov-browser-agent.com https://*.quicksight.aws.amazon.com https://*.gstatic.com https://*.arcgisonline.com https://*.stabilitas.io https://*.svstaging.net https://*.arcgis.com https://*.google-analytics.com https://*.googleapis.com https://*.mapbox.com https://*.googletagmanager.com https://*.bugsnag.com https://browser-intake-datadoghq.com https://browser-intake-ddog-gov.com https://lottie.host wss://*.stabilitas.io wss://*.svstaging.net wss://*.onsolve.com wss://onsolve.com wss://*.onsolve.net wss://onsolve.net wss://*.onsolve.eu wss://onsolve.eu https://*.s3.amazonaws.com https://*.cloudfront.net https://*.walkme.com https://s3.walkmeusercontent.com https://*.openstreetmap.org https://*.cartocdn.com https://*.maptiler.com https://*.onsolvestack-useast1.onsolve.com https://*.ocp.onsolve.net https://*.ocp.onsolve.eu https://*.integration-configuration.com https://api.twitter.com; worker-src 'self' blob: https://*.onsolve.com https://onsolve.com https://*.onsolve.net https://onsolve.net https://*.onsolve.eu https://onsolve.eu https://*.worldtravelprotection.com https://*.cem.onsolve.eu https://*.ocp.onsolve.com https://*.datadoghq-browser-agent.com https://*.ddog-gov-browser-agent.com https://*.quicksight.aws.amazon.com https://*.gstatic.com https://*.arcgisonline.com https://*.stabilitas.io https://*.svstaging.net https://*.arcgis.com https://*.google-analytics.com https://*.googleapis.com https://*.mapbox.com https://*.googletagmanager.com https://*.bugsnag.com https://browser-intake-datadoghq.com https://browser-intake-ddog-gov.com https://lottie.host wss://*.stabilitas.io wss://*.svstaging.net wss://*.onsolve.com wss://onsolve.com wss://*.onsolve.net wss://onsolve.net wss://*.onsolve.eu wss://onsolve.eu https://*.s3.amazonaws.com https://*.cloudfront.net https://*.walkme.com https://s3.walkmeusercontent.com https://*.openstreetmap.org https://*.cartocdn.com https://*.maptiler.com; child-src 'self' blob: https://*.onsolve.com https://onsolve.com https://*.onsolve.net https://onsolve.net https://*.onsolve.eu https://onsolve.eu https://*.worldtravelprotection.com https://*.cem.onsolve.eu https://*.ocp.onsolve.com https://*.datadoghq-browser-agent.com https://*.ddog-gov-browser-agent.com https://*.quicksight.aws.amazon.com https://*.gstatic.com https://*.arcgisonline.com https://*.stabilitas.io https://*.svstaging.net https://*.arcgis.com https://*.google-analytics.com https://*.googleapis.com https://*.mapbox.com https://*.googletagmanager.com https://*.bugsnag.com https://browser-intake-datadoghq.com https://browser-intake-ddog-gov.com https://lottie.host wss://*.stabilitas.io wss://*.svstaging.net wss://*.onsolve.com wss://onsolve.com wss://*.onsolve.net wss://onsolve.net wss://*.onsolve.eu wss://onsolve.eu https://*.s3.amazonaws.com https://*.cloudfront.net https://*.walkme.com https://s3.walkmeusercontent.com https://*.openstreetmap.org https://*.cartocdn.com https://*.maptiler.com; font-src 'self' data: https://*.onsolve.com https://onsolve.com https://*.onsolve.net https://onsolve.net https://*.onsolve.eu https://onsolve.eu https://*.worldtravelprotection.com https://*.cem.onsolve.eu https://*.ocp.onsolve.com https://*.datadoghq-browser-agent.com https://*.ddog-gov-browser-agent.com https://*.quicksight.aws.amazon.com https://*.gstatic.com https://*.arcgisonline.com https://*.stabilitas.io https://*.svstaging.net https://*.arcgis.com https://*.google-analytics.com https://*.googleapis.com https://*.mapbox.com https://*.googletagmanager.com https://*.bugsnag.com https://browser-intake-datadoghq.com https://browser-intake-ddog-gov.com https://lottie.host wss://*.stabilitas.io wss://*.svstaging.net wss://*.onsolve.com wss://onsolve.com wss://*.onsolve.net wss://onsolve.net wss://*.onsolve.eu wss://onsolve.eu https://*.s3.amazonaws.com https://*.cloudfront.net https://*.walkme.com https://s3.walkmeusercontent.com https://*.openstreetmap.org https://*.cartocdn.com https://*.maptiler.com; img-src 'self' data: blob: https://*.onsolve.com https://onsolve.com https://*.onsolve.net https://onsolve.net https://*.onsolve.eu https://onsolve.eu https://*.worldtravelprotection.com https://*.cem.onsolve.eu https://*.ocp.onsolve.com https://*.datadoghq-browser-agent.com https://*.ddog-gov-browser-agent.com https://*.quicksight.aws.amazon.com https://*.gstatic.com https://*.arcgisonline.com https://*.stabilitas.io https://*.svstaging.net https://*.arcgis.com https://*.google-analytics.com https://*.googleapis.com https://*.mapbox.com https://*.googletagmanager.com https://*.bugsnag.com https://browser-intake-datadoghq.com https://browser-intake-ddog-gov.com https://lottie.host wss://*.stabilitas.io wss://*.svstaging.net wss://*.onsolve.com wss://onsolve.com wss://*.onsolve.net wss://onsolve.net wss://*.onsolve.eu wss://onsolve.eu https://*.s3.amazonaws.com https://*.cloudfront.net https://*.walkme.com https://s3.walkmeusercontent.com https://*.openstreetmap.org https://*.cartocdn.com https://*.maptiler.com https://*.townnews.com https://webpubcontent.gray.tv https://*.brightspotcdn.com https://image.pbs.org https://pbs.twimg.com https://th.bing.com https://static.themebuilder.aws.arc.pub; style-src 'self' 'unsafe-inline' https://*.onsolve.com https://onsolve.com https://*.onsolve.net https://onsolve.net https://*.onsolve.eu https://onsolve.eu https://*.worldtravelprotection.com https://*.cem.onsolve.eu https://*.ocp.onsolve.com https://*.datadoghq-browser-agent.com https://*.ddog-gov-browser-agent.com https://*.quicksight.aws.amazon.com https://*.gstatic.com https://*.arcgisonline.com https://*.stabilitas.io https://*.svstaging.net https://*.arcgis.com https://*.google-analytics.com https://*.googleapis.com https://*.mapbox.com https://*.googletagmanager.com https://*.bugsnag.com https://browser-intake-datadoghq.com https://browser-intake-ddog-gov.com https://lottie.host wss://*.stabilitas.io wss://*.svstaging.net wss://*.onsolve.com wss://onsolve.com wss://*.onsolve.net wss://onsolve.net wss://*.onsolve.eu wss://onsolve.eu https://*.s3.amazonaws.com https://*.cloudfront.net https://*.walkme.com https://s3.walkmeusercontent.com https://*.openstreetmap.org https://*.cartocdn.com https://*.maptiler.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.onsolve.com https://onsolve.com https://*.onsolve.net https://onsolve.net https://*.onsolve.eu https://onsolve.eu https://*.worldtravelprotection.com https://*.cem.onsolve.eu https://*.ocp.onsolve.com https://*.datadoghq-browser-agent.com https://*.ddog-gov-browser-agent.com https://*.quicksight.aws.amazon.com https://*.gstatic.com https://*.arcgisonline.com https://*.stabilitas.io https://*.svstaging.net https://*.arcgis.com https://*.google-analytics.com https://*.googleapis.com https://*.mapbox.com https://*.googletagmanager.com https://*.bugsnag.com https://browser-intake-datadoghq.com https://browser-intake-ddog-gov.com https://lottie.host wss://*.stabilitas.io wss://*.svstaging.net wss://*.onsolve.com wss://onsolve.com wss://*.onsolve.net wss://onsolve.net wss://*.onsolve.eu wss://onsolve.eu https://*.s3.amazonaws.com https://*.cloudfront.net https://*.walkme.com https://s3.walkmeusercontent.com https://*.openstreetmap.org https://*.cartocdn.com https://*.maptiler.com; frame-src 'self' https://*.onsolve.com https://onsolve.com https://*.onsolve.net https://onsolve.net https://*.onsolve.eu https://onsolve.eu https://*.worldtravelprotection.com https://*.cem.onsolve.eu https://*.ocp.onsolve.com https://*.datadoghq-browser-agent.com https://*.ddog-gov-browser-agent.com https://*.quicksight.aws.amazon.com https://*.gstatic.com https://*.arcgisonline.com https://*.stabilitas.io https://*.svstaging.net https://*.arcgis.com https://*.google-analytics.com https://*.googleapis.com https://*.mapbox.com https://*.googletagmanager.com https://*.bugsnag.com https://browser-intake-datadoghq.com https://browser-intake-ddog-gov.com https://lottie.host wss://*.stabilitas.io wss://*.svstaging.net wss://*.onsolve.com wss://onsolve.com wss://*.onsolve.net wss://onsolve.net wss://*.onsolve.eu wss://onsolve.eu https://*.s3.amazonaws.com https://*.cloudfront.net https://*.walkme.com https://s3.walkmeusercontent.com https://*.openstreetmap.org https://*.cartocdn.com https://*.maptiler.com https://*.onsolvestack-useast1.onsolve.com https://*.ocp.onsolve.net https://*.ocp.onsolve.eu https://*.integration-configuration.com https://api.twitter.com; frame-ancestors 'self' https://*.onsolve.eu https://*.onsolve.net https://*.onsolve.com https://*.cem.onsolve.eu; form-action 'self' https://*.onsolve.com https://onsolve.com https://*.onsolve.net https://onsolve.net https://*.onsolve.eu https://onsolve.eu https://*.worldtravelprotection.com https://*.cem.onsolve.eu https://*.ocp.onsolve.com https://*.datadoghq-browser-agent.com https://*.ddog-gov-browser-agent.com https://*.quicksight.aws.amazon.com https://*.gstatic.com https://*.arcgisonline.com https://*.stabilitas.io https://*.svstaging.net https://*.arcgis.com https://*.google-analytics.com https://*.googleapis.com https://*.mapbox.com https://*.googletagmanager.com https://*.bugsnag.com https://browser-intake-datadoghq.com https://browser-intake-ddog-gov.com https://lottie.host wss://*.stabilitas.io wss://*.svstaging.net wss://*.onsolve.com wss://onsolve.com wss://*.onsolve.net wss://onsolve.net wss://*.onsolve.eu wss://onsolve.eu https://*.s3.amazonaws.com https://*.cloudfront.net https://*.walkme.com https://s3.walkmeusercontent.com https://*.openstreetmap.org https://*.cartocdn.com https://*.maptiler.com https://*.onsolvestack-useast1.onsolve.com https://*.ocp.onsolve.net https://*.ocp.onsolve.eu https://*.integration-configuration.com https://api.twitter.com; report-uri /csp-violation-report; 1
default-src 'self'; script-src 'strict-dynamic' 'unsafe-eval' 'nonce-Wh5b/lPK/1Bi1v+6mhsBdQ=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' https: data:; img-src 'self' https: data: blob:; frame-src 'self' https:; manifest-src 'self' https:; media-src 'self' https: data:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; connect-src 'self' https: wss: blob:; upgrade-insecure-requests; report-uri https://relay-iad.sentry.insops.net/api/13/security/?sentry_key=eed8d2dc6d324ba295378228ac35a0dd&sentry_release=3134c9a35352f4204bc078a9bea6da42f9b17460&sentry_environment=prod 1
default-src 'self'; script-src 'self' https://challenges.cloudflare.com https://www.googletagmanager.com https://bat.bing.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline'; img-src 'self' https://50pnlpush-3ac6.kxcdn.com https://bat.bing.com https://www.google.nl https://www.google.com https://www.google.be https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.googleadservices.com data:; font-src 'self' data: https://use.typekit.net; connect-src 'self' https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://bat.bing.com https://bat.bing.net https://google.com https://www.google.com https://www.google.nl https://www.googleadservices.com https://*.doubleclick.net; frame-src https://challenges.cloudflare.com https://www.googletagmanager.com; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /inc_new/csp-report.php; 1
frame-src *.bimco.org *.cookiebot.com *.dotdigital-pages.com *.doubleclick.net *.googletagmanager.com 'self';font-src *.gstatic.com data: 'self';img-src data: https: 'self';script-src https: 'self' 'strict-dynamic' 'unsafe-eval' 'nonce-foh4CjQLfgGcJUmQQqdPqFnv';connect-src https: 'self';style-src https: 'self' 'unsafe-inline';default-src 'self' 1
script-src-elem 'self' 'unsafe-inline' https://script.hotjar.com/modules.e4b2dc39f985f11fb1e4.js https://static.hotjar.com/c/hotjar-4972391.js https://euassets.gulfoilltd.com/ https://www.youtube.com/ https://platform.twitter.com/ https://www.gstatic.com/ https://secure.data-insight365.com/js/265784.js https://www.google-analytics.com/analytics.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://static.hotjar.com/c/hotjar-3470892.js https://snap.licdn.com/li.lms-analytics/insight.old.min.js https://script.hotjar.com/modules.2de3322c0609a6da3702.js https://connect.facebook.net/signals/config/214369947959115 https://secure.data-insight365.com/Track/Capture.aspx https://connect.facebook.net/signals/config/515690463347689 https://script.hotjar.com/modules.cf637fb03b42388e3bf3.js https://script.hotjar.com/browser-perf.33dcc26815d7481e62e8.js https://script.hotjar.com/modules.12bb18a8ada54a042e86.js cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com https://connect.facebook.net/en_US/fbevents.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://script.hotjar.com/modules.4bbac2bdc7f1b66d3009.js https://www.googletagmanager.com/ https://pbs.twimg.com https://script.hotjar.com/modules.60031afbf51fb3e88a5b.js https://script.hotjar.com/modules.3128f1ee3ce5b65c4961.js https://a.usbrowserspeed.com https://secure.data-insight365.com https://script.hotjar.com/modules.a3cb6dcf71aec7e1a87f.js https://script.hotjar.com/sentry.58c81e3e25532810f6fd.js https://script.hotjar.com/ https://static.addtoany.com https://www.gstatic.com; style-src 'self' cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com netdna.bootstrapcdn.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://euassets.gulfoilltd.com/ https://script.hotjar.com/modules.0ef46a83101151841364.js https://cdn.fonts.net/t/1.css cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com netdna.bootstrapcdn.com; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.oscato.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://hnd.stats.paypal.com *.oscato.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.avada.io *.shopify.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://assets.optile.net *.oscato.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net *.googleapis.com *.addtoany.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://get.geojs.io *.avada.io http://dpm.demdex.net *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.oscato.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' 'unsafe-inline' https://static.b-ite.com https://cs-assets.b-ite.com https://api.eu-1.smooch.io cdn-eu.readspeaker.com cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.etracker.com https://static.conword.io https://swk.kauz.ai https://www.cdn.botfriendsx.com platform.instagram.com platform.twitter.com www.etracker.de; style-src 'self' 'unsafe-inline' https://www.cdn.botfriendsx.com https://swk.kauz.ai https://cdnjs.cloudflare.com cdn-eu.readspeaker.com 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https://t.rightmessage.com https://www.googletagmanager.com https://app.bentonow.com https://cdn.usefathom.com https://us-assets.i.posthog.com https://connect.facebook.net https://snap.licdn.com; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: blob: https://*.rightmessage.com https://*.google-analytics.com https://*.googletagmanager.com https://*.google.com https://*.doubleclick.net https://*.bentonow.com https://*.usefathom.com https://*.posthog.com https://www.facebook.com https://px.ads.linkedin.com; connect-src 'self' https://*.rightmessage.com https://*.google-analytics.com https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.doubleclick.net https://*.bentonow.com https://*.usefathom.com https://*.posthog.com https://connect.facebook.net https://www.facebook.com https://snap.licdn.com https://px.ads.linkedin.com; frame-src https://www.youtube-nocookie.com; worker-src 'self' blob:; manifest-src 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.googleapis.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://www.facebook.com *.facebook.com *.facebook.net 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com *.braintreegateway.com *.paypal.com google.com *.google.com secure.payu.com merch-prod.snd.payu.com https://www.opineo.pl https://ssl.ceneo.pl https://www.facebook.com www.google.com *.facebook.com *.facebook.net *.google.com/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com magefan.com cm.magefan.com static.payu.com https://www.opineo.pl https://www.facebook.com https://www.google.com https://www.google.pl https://ssl.ceneo.pl https://static.payu.com https://www.magezon.com *.facebook.com *.facebook.net https://firebasestorage.googleapis.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com secure.payu.com secure.snd.payu.com https://connect.facebook.net https://www.googletagmanager.com https://www.opineo.pl https://shop-js.buybox.click https://ssl.ceneo.pl/shops/sw.js https://browser-update.org/update.min.js https://googleads.g.doubleclick.net https://*.cloudfront.net https://maps.googleapis.com https://secure.payu.com delivery.clickonometrics.pl *.clickonometrics.pl www.google.com/recaptcha/ www.gstatic.com/recaptcha/ s7.addthis.com *.facebook.com *.facebook.net *.avada.io *.shopify.com *.googletagmanager.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com https://www.opineo.pl *.fontawesome.com https://fonts.bunny.net *.typekit.net *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com secure.payu.com merch-prod.snd.payu.com https://www.google-analytics.com https://api.edrone.me https://stats.g.doubleclick.net https://secure.payu.com delivery.clickonometrics.pl *.clickonometrics.pl ekr.zdassets.com/ *.facebook.com *.facebook.net https://get.geojs.io *.avada.io ws: t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' blob: data: 'unsafe-inline' 'unsafe-eval' *.adobedtm.com *.amazon-adsystem.com *.appdemostore.com *.atdmt.com *.avocet.io *.blubrry.com *.clicktale.net *.craftyclicks.co.uk *.chatcora.natwest.com   *.doubleclick.net *.everesttech.net *.facebook.com *.facebook.net *.fca.org.uk *.google.co.uk *.google.com *.google.ie *.googleadservices.com *.jwpcdn.com *.liveperson.net *.linkedin.com *.lpsnmedia.net *.neolane.net *.omguk.com *.omtrdc.net *.pinimg.com *.pinterest.com *.snapchat.com *.ulsterbank.co.uk *.ulsterbank.com *.ulsterbankanytimebanking.co.uk *.userzoom.com *.youtube.com *.ytimg.com analytics.twitter.com api.swiftype.com dcs.demdex.net dpm.demdex.net fast.demdex.net fast.rbs.demdex.net jwpltx.com rbs.demdex.net sc-static.net static.ads-twitter.com t.co www.brightedge.com; upgrade-insecure-requests; block-all-mixed-content; report-uri https://ulsterbankni.report-uri.com/r/t/csp/reportOnly 1
default-src 'self'; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; frame-ancestors 'self'; upgrade-insecure-requests 1
object-src 'none';base-uri 'self';script-src 'nonce-vQn9pLs0XjWE2JqQ2JL-9g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://js.stripe.com https://*.hs-scripts.com https://*.hsforms.net https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https: wss:; frame-src 'self' https://js.stripe.com https://www.googletagmanager.com; upgrade-insecure-requests 1
base-uri 'self'; block-all-mixed-content; default-src 'self'; form-action 'self'; frame-ancestors 'self'; plugin-types 'none'; script-src 'self' 'report-sample' 'unsafe-inline'; style-src 'self' 'report-sample' 'unsafe-inline'; object-src 'none'; worker-src 'none'; report-uri https://prod.ap.batic.cudasvc.com/xenios/api/v1/error/report??paid=151&spid=24831&v=v1.0&payload=ymp00hZ1EycWvkX3IquhUieuZ-WwiM7wmeLf82fnMT62VH9RY6LXrJ4GXWmhbG7wlD-RD-N1yIjp25VBQ2hhWp0bvhvXs_4hL4yNJbd28kZycQ36JHFKWJyog5Q3z2YAj8jyfvtWbtHpcWcYWs7wZWcANLtymxHrotjb_41OZ4s=; 1
object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-yRuPvvVxWoZ_8IRvEWht1v4ZXS0JXzG9'; base-uri 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'  https://www.googletagmanager.com https://customer.cludo.com https://nyhedsbrevet.kglteater.dk https://nyhedsbrev.kglteater.dk https://app-cdn.puzzel.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://connect.facebook.net https://bat.bing.com https://www.clarity.ms https://app-script.monsido.com https://heatmaps.monsido.com https://pagecorrect.monsido.com https://googleads.g.doubleclick.net https://capi-automation.s3.us-east-2.amazonaws.com; style-src 'self' 'unsafe-inline' https://customer.cludo.com https://fonts.googleapis.com; img-src 'self' data: https: blob:; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://www.googletagmanager.com https://gtm.kglteater.dk https://consentcdn.cookiebot.com https://billet.kglteater.dk https://www.youtube.com https://www.youtube-nocookie.com https://video.kglteater.dk; connect-src 'self' https://api.cludo.com https://consentcdn.cookiebot.com https://www.google.com https://gtm.kglteater.dk https://app-cdn.puzzel.com https://app-consumeridp.puzzel.com https://app-state.puzzel.com https://bat.bing.com https://pagecorrect.monsido.com https://heatmaps.monsido.com https://www.facebook.com https://*.clarity.ms https://c.bing.com https://app-script.monsido.com; media-src 'self' https://video.kglteater.dk; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleusercontent.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com www.google.com *.newrelic.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.sharethis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sharethis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.marker.io *.google-analytics.com *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.marker.io *.eu-west-1.amazonaws.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://6f9839f2-a620-4b69-8bd2-090aec0e506e.sansec.watch/; report-to report-endpoint; 1
frame-src 'self' https://werbung.transgourmet.de https://www.youtube.com https://www.google.com www.recaptcha.net *.b2clogin.com *.loadbee.com *.youtube.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com js-agent.newrelic.com www.youtube.com www.google-analytics.com bam.nr-data.net static.dvinci-easy.com maps.googleapis.com bat.bing.com www.gstatic.com connect.facebook.net widget.msgp.pl googleads.g.doubleclick.net blob: cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.kiprotect.com https://cdnjs.cloudflare.com https://unpkg.com unpkg.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' www.googletagmanager.com static.dvinci-easy.com unpkg.com js-agent.newrelic.com www.google-analytics.com maps.googleapis.com bam.nr-data.net connect.facebook.net bat.bing.com www.gstatic.com www.youtube.com widget.msgp.pl https://www.xing-events.com/resources/js/amiandoExport.js www.google.com content.syndigo.com www.recaptcha.net js.monitor.azure.com googleads.g.doubleclick.net job.transgourmet.de *.dvinci-easy.com *.clarity.ms *.loadbee.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.kiprotect.com https://cdnjs.cloudflare.com https://unpkg.com; style-src 'self' 'unsafe-inline' static.dvinci-easy.com fonts.googleapis.com cdnjs.cloudflare.com https://cdn.jsdelivr.net unpkg.com; style-src-attr 'self' 'unsafe-inline'; base-uri 'self'; frame-ancestors 'self' https://werbung.transgourmet.de 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.globalpay.com https://fonts.gstatic.com *.klevu.com *.ksearchnet.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.gpwebpay.com *.gpe.cz *.globalpay-ecommerce.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com *.americanexpress.com *.globalpay.com *.mastercard.com *.visa.com *.gpwebpay.com *.gpe.cz *.globalpay-ecommerce.com https://www.googletagmanager.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.trustpilot.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.globalpay.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.aexp-static.com https://ajax.aspnetcdn.com *.globalpay.com *.gpapiservices.com https://pay.google.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.klevu.com *.ksearchnet.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.trustpilot.com www.xtento.com cdn.xtento.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com assets.braintreegateway.com *.trustpilot.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://google.com/pay https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://270363f4-8181-4deb-9681-5d3de892b01b.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.googleapis.com *.gstatic.com *.cloudflare.com *.googletagmanager.com *.heliumads.com cdn.heliumads.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src * data: blob:; font-src 'self' fonts.gstatic.com data:; frame-src 'self' www.youtube.com *.google.com *.doubleclick.net; connect-src *; media-src 'self' *.youtube.com; object-src 'none' 1
default-src 'self' https://quickquack.com https://*.quickquack.com https://dontdrivedirty.com https://*.dontdrivedirty.com *.qqcw.us; connect-src 'self' https://*.ecs.us-east-1.on.aws https://*.us-central1.run.app https://global.ketchcdn.com https://*.ads.linkedin.com https://www.googleadservices.com https://analytics-ipv6.tiktokw.us https://analytics.tiktok.com https://sdk.iad-07.braze.com https://js.appboycdn.com https://quickquack.com https://*.quickquack.com https://dontdrivedirty.com https://*.dontdrivedirty.com https://*.qqcw.us https://js.stripe.com https://m.stripe.network https://m.stripe.com https://api.stripe.com https://*.googleapis.com https://cdn.sanity.io https://*.google.com https://*.gstatic.com https://unpkg.com https://*.mouseflow.com https://api.segment.io/v1/m https://connect.facebook.net/en_US/fbevents.js https://*.facebook.net https://*.facebook.com https://qqcw.report-uri.com/r/t/csp/reportOnly https://www.googletagmanager.com https://tagmanager.google.com https://*.fbot.me https://cdn.feathery.io https://api.feathery.io https://cdn.jsdelivr.net https://www.google-analytics.com https://google.com https://*.doubleclick.net https://*.adroll.com https://*.adsrvr.org data: blob:; font-src 'self' https://use.fontawesome.com https://fonts.gstatic.com https://js.stripe.com https://m.stripe.network https://m.stripe.com https://*.fbot.me https://use.typekit.net; img-src 'self' https: data: blob:; media-src 'self' https://quickquack.com https://*.quickquack.com https://dontdrivedirty.com https://*.dontdrivedirty.com https://*.qqcw.us https://*.fbot.me; script-src 'nonce-af1a3f47f6fe0f9f5a7fded1d72a1212' 'strict-dynamic' https: 'unsafe-eval' blob:; style-src 'self' 'unsafe-inline' https://*.googletagmanager.com https://quickquack.com https://*.quickquack.com https://dontdrivedirty.com https://*.dontdrivedirty.com https://use.fontawesome.com https://fonts.googleapis.com https://tagmanager.google.com/ https://fonts.googleapis.com/ https://*.fbot.me data: blob:; frame-src 'self' https://www.facebook.com https://js.stripe.com https://m.stripe.network https://m.stripe.com *.google.com https://www.googletagmanager.com https://tagmanager.google.com/ https://*.fbot.me https://cdn.feathery.io https://cdn.jsdelivr.net https://*.doubleclick.net https://www.youtube-nocookie.com/ https://keycloak.dev.qqcw.us https://auth.dontdrivedirty.com https://adsrvr.org https://*.adsrvr.org https://*.insight.adsrvr.org; frame-ancestors 'self' https://keycloak.dev.qqcw.us https://auth.dontdrivedirty.com; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com; worker-src 'self' blob:; report-uri https://qqcwstg.report-uri.com/r/d/csp/reportOnly; 1
object-src 'none';base-uri 'self';script-src 'nonce-gK__rynzGSjn8WieDofTwg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com llmo.now *.googleapis.com data: *.fontawesome.com *.bootstrapcdn.com *.hotjar.com fonts.googleapis.com cdn.cookiehub.eu https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com https://www.youtube.com https://www.google.com/maps https://www.google.com/ https://insight.adsrvr.org/ https://analytics.google.com https://vimeo.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com llmo.now *.networkmerchants.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com googleads.g.doubleclick.net secure.livechatinc.com https://songbird.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://*.cardinalcommerce.com https://*.centinelapi.cardinalcommerce.com https://insight.adsrvr.org/ https://analytics.google.com https://vimeo.com *.weltpixel.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googletagmanager.com *.doubleclick.net www.xtento.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com llmo.now cc-api-behance.adobe.io validator.swagger.io *.ftcdn.net *.behance.net data: *.networkmerchants.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com magefan.com cm.magefan.com *.disqus.com *.amazonaws.com bat.bing.com cdn.ywxi.net blob *.instantsearchplus.com *.bbb.org cdn.livechat-files.com *.facebook.com *.hotjar.com *.clarity.ms *.bing.com *.google.com.ar www.doubleclick.net cdn.cookiehub.eu p.brsrvr.com bat.bing.net *.adobedtm.com *.trackedlink.net *.ddlnk.net https://img.youtube.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com www.xtento.com cdn.xtento.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https://vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com llmo.now *.magento-datasolutions.com https://rum.hlx.page *.networkmerchants.com *.googleapis.com *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com acp-magento.appspot.com *.akamaized.net *.instantsearchplus.com *.fastsimon.com fastsimon-grid.akamaized.net *.certcapture.com *.disqus.com *.fontawesome.com *.livechatinc.com bat.bing.com *.clarity.ms 199001.tctm.co *.facebook.net *.facebook.com *.cokertirecompany.com *.hotjar.com e.zip-corvette.com www.googletagservices.com www.doubleclick.net cdn.cookiehub.eu cdn.brcdn.com *.adobedtm.com https://cdn1.ebizcharge.net https://songbird.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://cdnjs.cloudflare.com https://insight.adsrvr.org/ https://dpm.demdex.net https://amcglobal.sc.omtrdc.net https://geostag.cardinalcommerce.com https://geo.cardinalcommerce.com https://centinelapistag.cardinalcommerce.com https://analytics.google.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net www.xtento.com cdn.xtento.com https://cdn-scripts.signifyd.com https://imgs.signifyd.com https://h64.online-metrix.net https://www.zip-corvette.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com llmo.now *.magento-datasolutions.com *.magento-ds.com *.networkmerchants.com *.certcapture.com *.bootstrapcdn.com static-autocomplete.fastsimon.com ping.fastsimon.com settings.fastsimon.com static-grid.fastsimon.com *.typekit.net cdn.cookiehub.eu webchat.dotdigital.com webchat.staging.dotdigital.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net https://vimeo.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.experiencecloud.live ims-na1.adobelogin.com adobeid-na1.services.adobe.com adobeid-na1-stg1.services.adobe.com *.commerce-core-saas.com api.magento.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.networkmerchants.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com *.clarity.ms api.livechatinc.com bat.bing.com api.fastsimon.com suggest.instantsearchplus.com suggest.fastsimon.com static-autocomplete.fastsimon.com static-grid.fastsimon.com ping.fastsimon.com settings.fastsimon.com stats.g.doubleclick.net bam.nr-data.net 199001.tctm.co *.facebook.com *.hotjar.com *.hotjar.io wss://ws.hotjar.com googleads.g.doubleclick.net cdn.cookiehub.eu c.ba.contentsquare.net region-eu.cookiehub.net bat.bing.net pagead2.googlesyndication.com *.cookiehub.net *.signifyd.com 3dsapi.ebizcharge.net kg668dbov0.execute-api.us-east-1.amazonaws.com ebizcharge3ds-staging1.azurewebsites.net *.ebizcharge.net https://songbird.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://cdnjs.cloudflare.com https://insight.adsrvr.org/ https://dpm.demdex.net https://amcglobal.sc.omtrdc.net https://geostag.cardinalcommerce.com https://geo.cardinalcommerce.com https://centinelapistag.cardinalcommerce.com https://analytics.google.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src llmo.now *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; connect-src 'self' https: wss://client.relay.crisp.chat wss://ws.hotjar.com; frame-src 'self' https://player.vimeo.com; 1
font-src maxcdn.bootstrapcdn.com *.oct8ne.com fonts.gstatic.com *.azureedge.net *.doofinder.com *.typekit.net *.googleapis.com data: 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com *.storyblok.com 'self'; frame-src www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.facebook.com platform.twitter.com *.multisafepay.com https://pay.google.com *.oct8ne.com www.googletagmanager.com https://sandbox.sequracdn.com https://live.sequracdn.com *.hotjar.com *.pinterest.com *.doofinder.com *.empathybroker.com *.empathy.co *.criteo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://images.unsplash.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com *.multisafepay.com *.oct8ne.com www.googletagmanager.com https://sandbox.sequracdn.com https://live.sequracdn.com *.facebook.com *.google.com *.google.es widgets.trustedshops.com *.twitter.com t.co *.azureedge.net *.pinterest.com *.doofinder.com *.bing.com *.storyblok.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://maps.googleapis.com connect.facebook.net twitter.com platform.twitter.com *.multisafepay.com https://pay.google.com *.oct8ne.com www.googletagmanager.com https://sandbox.sequracdn.com https://live.sequracdn.com *.googleoptimize.com widgets.trustedshops.com static-eu.oct8ne.com static.zdassets.com *.facebook.net *.tradedoubler.com *.doubleclick.net *.hotjar.com *.ads-twitter.com smct.co *.bsmartdata.com *.retargeted.co *.bing.com *.clarity.ms *.smartsuppcdn.com *.smartsuppchat.com *.smartsupp.com *.connectif.cloud *.klaviyo.com *.photoslurp.com *.pinimg.com *.nosto.com *.doofinder.com *.empathybroker.com *.unpkg.com *.storyblok.com *.usizy.es 'self' 'unsafe-inline' 'unsafe-eval'; style-src maxcdn.bootstrapcdn.com *.multisafepay.com *.photoslurp.com *.nosto.com *.doofinder.com *.klaviyo.com *.typekit.net *.storyblok.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.storyblok.com *.zdassets.com *.doofinder.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://maps.googleapis.com https://player.vimeo.com *.multisafepay.com *.oct8ne.com www.googletagmanager.com https://sandbox.sequracdn.com https://live.sequracdn.com *.zendesk.com *.zopim.com *.doubleclick.net *.hotjar.com *.hotjar.io *.clarity.ms *.smartsuppcdn.com *.googleapis.com *.gstatic.com *.google-analytics.com *.google.es *.connectif.cloud *.klaviyo.com *.photoslurp.com *.zdassets.com *.pinterest.com *.nosto.com *.doofinder.com *.empathybroker.com *.empathy.co usizy.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; form-action https://sis.redsys.es/ pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com https://*.gstatic.com *.googleapis.com *.fontawesome.com smct.co *.smct.co smct.io *.smct.io *.amazonaws.com *.akamaihd.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.adyen.com *.facebook.com *.google.com *.list-manage.com *.americanexpress.com *.cartasi.it *.nexi.it 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.adyen.com *.sharethis.com js.mollie.com *.iubenda.com *.livechatinc.com *.online-metrix.net *.tracead.com tracead.com *.signifyd.com img.signifyd.com *.addthis.com *.jrs5.com pubxtag1.com amc.demdex.net *.facebook.com smct.co *.smct.co smct.io *.smct.io *.amazonaws.com *.hotjar.com *.cartasi.it *.nexi.it 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https://*.gstatic.com *.adyen.com *.sharethis.com *.googleapis.com *.feedaty.com https://images.unsplash.com https://www.mollie.com *.payments-amazon.com *.linksynergy.com *.nxtck.com *.mediaforge.com *.jrs5.com *.dc-storm.com *.rd.linksynergy.com *.ra.linksynergy.com *.facebook.com *.google.it *.google.com *.signifyd.com *.e.aa.online-metrix.net smct.co *.smct.co smct.io *.smct.io *.amazonaws.com *.demdex.net *.ytimg.com *.facebook.net *.akamaihd.net *.photorank.me *.zoorate.com *.nomination.com *.bing.com *.livehelp.it *.doubleclick.net *.googletagmanager.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page *.sharethis.com *.googleapis.com *.gstatic.com *.feedaty.com https://maps.googleapis.com https://player.vimeo.com js.mollie.com *.iubenda.com *.googletagmanager.com *.chimpstatic.com chimpstatic.com *.doofinder.com *.signifyd.com *.livechatinc.com *.facebook.net *.rmtag.com *.tracead.com tracead.com *.addthis.com *.amazon.com *.amazonaws.com *.googleadservices.com *.google-analytics.com *.jsdelivr.net *.moatads.com *.addthisedge.com *.pinterest.com smct.co *.smct.co smct.io *.smct.io *.akamaihd.net *.zoorate.com *.cloudflare.com *.bing.com *.hotjar.com *.doubleclick.net *.livehelp.it 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app https://fonts.googleapis.com/ *.sharethis.com *.feedaty.com *.fontawesome.com *.cloudflare.com *.googleapis.com *.jsdelivr.net *.gstatic.com *.zoorate.com *.akamaihd.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.adyen.com *.sharethis.com *.algolia.net *.algolia.io *.algolianet.com *.insights.algolia.io insights.algolia.io *.googleapis.com *.feedaty.com https://maps.googleapis.com https://player.vimeo.com *.iubenda.com *.doofinder.com *.g.doubleclick.net *.doubleclick.net *.signifyd.com *.signifyd.com:11103 *.signifyd.com:11103/onload https://bt.signifyd.com:11103 https://bt.signifyd.com:11103/onload bt.signifyd.com *.facebook.com *.livechatinc.com *.addthis.com smct.co *.smct.co smct.io *.smct.io *.amazonaws.com *.akamaihd.net *.hotjar.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
img-src *.force.com https://omt.honda.com https://owners.honda.com https://ahfc.techsee.me slack-imgs-mil-dev.com https://honda.demdex.net 'self' https://www.acura.com https://stats.g.doubleclick.net https://usa690.sfdc-lywfpd.salesforce.com/icons/ https://img.youtube.com https://media-ahfc.cdn-us.techsee.me https://payments.salesforce.com/icons/ https://cdn.cookielaw.org https://login.salesforce.com/icons/ http://code.jquery.com https://ahfc-api.techsee.me https://somt.honda.com https://ahfc--webproj1.my.salesforce.com https://www.gstatic.com *.slack-edge-gov.com https://self1.techsee.me *.my-salesforce.com https://assets.adobedtm.com *.cloudinary.com https://www.google.com https://analytics.google.com https://rec1.techsee.me static.lightning.force.com https://dpm.demdex.net https://techsee.me *.slack-gov.com blob: *.slack-gov-dev.com https://survey2.sendyouropinions.com *.gstatic.com https://ahfc.my.salesforce.com https://eshopping.americanhondafinance.com *.facebook.com slack-imgs.com *.sfdcstatic.com *.youtube.com https://ssl.gstatic.com *.twimg.com a.static.lightning.force.com *.youtube-nocookie.com *.slack.com https://www.paypal.com https://imagebaseurl.techsee.me https://ahfc.file.force.com https://cm.everesttech.net *.slack-imgs.com slack-imgs-gov.com https://uat2.sendyouropinions.com https://prod-us.techsee.me https://i.ytimg.com https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/icons/ https://prod-eu.techsee.me *.salesforce-experience.com https://sdk-us.techsee.me https://maps.a.forceusercontent.com https://consent-api.onetrust.com slack-imgs-gov-dev.com *.slack-edge.com https://self.techsee.me https://ahfc.sf-na.techsee.me https://cdn.content.aws-prod1-useast1.aws.sfdc.cl/icons/ https://fonts.googleapis.com https://rec.techsee.me slack-mil-dev.com https://www.gstatic.com/recaptcha/ https://geolocation.onetrust.com https://privacyportal-ae.onetrust.com https://td.doubleclick.net https://automobiles.honda.com https://powersports.honda.com https://www.google.com/recaptcha/ *.slack-edge.mil https://www.sandbox.paypal.com b.static.lightning.force.com https://i.vimeocdn.com static.sandbox.lightning.force.com https://www.googletagmanager.com https://www.google-analytics.com *.salesforce.com https://ahfc.sf-na.desktop.show https://*.adyen.com slack-imgs.mil data:; report-to sfdc-csp-ep; report-uri https://ahfc.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00Dj0000001oPqD&networkId=0DM5b000000wk5s&type=communities 1
default-src 'self' blob:  https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; frame-src 'self' https://*.noxiaohao.com https://telegram.org https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://accounts.google.com https://oauth.telegram.org https://sgtm.btsgtm.com  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; script-src 'self' 'nonce-ihTUbLz2Lcm+IlCzgMEJEg==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh/v3RIRuG3kMikr5iha+7P/0TN/GNA=' https://*.noxiaohao.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://accounts.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://play.google.com https://analytics.google.com https://fonts.gstatic.com https://telegram.org https://oauth.telegram.org https://*.geetest.com https://*.geevisit.com https://sgtm.btsgtm.com https://static.wangsustatic.xyz https://static.wangsustatic.vip ; connect-src 'self' https://stats.g.doubleclick.net https://analytics.google.com https://*.noxiaohao.com wss://*.noxiaohao.com wss: https://www.turingfraud.net https://play.google.com https://accounts.google.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://telegram.org https://oauth.telegram.org https://static.geetest.com https://static.geevisit.com wss://stream.bitget.cloud https://www.google.com https://sgtm.btsgtm.com  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; worker-src 'self' blob:; img-src 'self' data: blob: https://img.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://img.bitgetimg.com https://img.gurenla.com https://*.bgbstatic.com https://lh3.googleusercontent.com https://static.geetest.com https://static.geevisit.com https://static-web.jjdsn.vip https://cdn.bitkeep.vip https://www.google.co.jp https://bin.wangsustatic.com https://sgtm.btsgtm.com https://analytics.google.com https://stats.g.doubleclick.net  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; style-src 'self' 'unsafe-inline' https://static.geetest.com https://static.geevisit.com https://accounts.google.com https://fonts.googleapis.com https://static.bgbstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; font-src 'self' data: https://static.geetest.com https://static.geevisit.com https://fonts.gstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri /v1/buried/log/cspSecurity /v1/monitor/csp?appId=d4b6df7d; 1
base-uri 'self'; connect-src 'self' translate.googleapis.com google-analytics.com *.google-analytics.com googletagmanager.com *.googletagmanager.com myccpay.com *.myccpay.com paynearme.com *.paynearme.com; default-src 'self'; font-src 'self' data: https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://use.typekit.net https://croissant-services-data-public-assets-us-east-2-production.s3.us-east-2.amazonaws.com gstatic.com *.gstatic.com; form-action 'self' https://translate.googleapis.com https://www.creditviewdashboard.com https://creditviewsv-test.ctf.tuint.com; frame-src 'self' https://www.paynearme-sandbox.com https://www.paynearme.com; img-src 'self' data: https://analytics.twitter.com https://bat.bing.com https://sp.analytics.yahoo.com https://t.co https://images.totalcardinc.com https://images.staging.totalcardinc.com https://images.dev.totalcardinc.com https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://translate.google.com https://fonts.gstatic.com https://api.fillr.com; manifest-src 'self'; media-src 'self'; object-src 'none'; script-src 'self' google-analytics.com *.google-analytics.com googletagmanager.com *.googletagmanager.com myccpay.com *.myccpay.com paynearme.com *.paynearme.com pure.cloud *.pure.cloud secured-pixel.com *.secured-pixel.com totalcardinc.com *.totalcardinc.com; style-src 'self' https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://www.paynearme-sandbox.com https://www.paynearme.com https://fonts.googleapis.com 'sha256-7VXlcg/uSZugHSa6UtIG2/44ju460LiO4M0CyQfraX8='; worker-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=JZ4Xba5WDmx9MwNrEl7JsbxauzpgQ3c7bW3Fp9xVM2w-1789271158.6033103-1.0.1.1-hRVWEdzgpbECxWvd1GRWtaVPFl4.yFhKg.Ur9rQa.lCgXtUuz.5ws6Lb3cDc11UtXVt.N3Rhh6sGNUUbwV6r0ucUwjZIlMXkEHB5sQZIGn65j2DW6JhIUd59tr3Bhq1QqerJfzbcxPS2tO262nzLmasMMF2j7Qh2dsGhl9xaCkeiOY10fm.TQqZtDnPLYQMQ; report-to cf-jcouxatiquvhzkos 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.dotdigital-pages.com *.dotdigital.com *.certcapture.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.pinterest.com *.pinterdev.com commerce-app.pintergration.com photos.pixlee.co *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.trackedlink.net *.googleapis.com *.certcapture.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klevu.com *.ksearchnet.com *.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com *.pixlee.com *.inicis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.googleapis.com *.gstatic.com *.certcapture.com https://developer.adobe.com https://magento.com https://cdn.avmws.com/ http://cdn.avmws.com/ apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.klevu.com *.ksearchnet.com *.googletagmanager.com *.facebook.net www.termsfeed.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com *.pxlecdn.com *.pixlee.com *.inicis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.certcapture.com display.ugc.bazaarvoice.com *.klevu.com *.ksearchnet.com *.fontawesome.com assets.braintreegateway.com *.inicis.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.googleapis.com *.certcapture.com https://developer.adobe.com https://cdn.avmws.com/ http://cdn.avmws.com/ api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klevu.com *.ksearchnet.com *.google-analytics.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com https://inbound-analytics.pixlee.com *.inicis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://224c98c5-2b57-48b9-abd5-386e2aff2a6c.sansec.watch/; report-to report-endpoint; 1
worker-src 'self' blob: 'self' https://*.oppwa.com; font-src cash-f.squarecdn.com https://*.gstatic.com *.klarnacdn.net *.fontawesome.com *.gstatic.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://*.bootstrapcdn.com https://*.typekit.net https://prilla.com *.fonts.googleapis.com data: *.cloudflare.com *.yotpo.com *.googleapis.com https://*.klaviyo.com/ data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.adyen.com https://*.qliro.com https://*.vipps.no https://*.trustly.com https://*.ideal.nl https://*.apple.com https://*.unzer.com https://*.heidelpay.com 'self' https://www.facebook.com https://*.techlab-cdn.com *.yotpo.com https://*.qit.nu 'self' 'unsafe-inline'; frame-ancestors 'self' 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com https://www.google.com/recaptcha/ * *.adyen.com *.klarna.com https://*.qliro.com *.trustpilot.com 'self' *.google.com https://*.gstatic.com https://*.g.doubleclick.net https://www.facebook.com https://policy.app.cookieinformation.com https://*.online-metrix.net https://*.paypal.com https://*.paypalobjects.com https://applepay.cdn-apple.com https://pay.google.com https://*.techlab-cdn.com www.xtento.com *.addthis.com *.pinterest.com www.facebook.com platform.twitter.com *.yotpo.com https://*.kustom.co/ https://*.stripe.com/ https://*.qit.nu https://*.cookiebot.eu https://*.tradedoubler.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com validator.swagger.io * https://*.gstatic.com *.adyen.com cembrapay.ch https://info.dibs.se https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.agechecked.com https://firebasestorage.googleapis.com 'self' https://*.google.com https://*.google-analytics.com https://*.googletagmanager.com https://*.doubleclick.net https://*.googlesyndication.com *.paypal.com https://*.paypalobjects.com https://*.trustpilot.com https://*.facebook.com https://*.nr-data.net https://*.hotjar.io https://*.adform.net https://*.amazon-adsystem.com https://*.rubiconproject.com https://*.pubmatic.com https://*.openx.net https://*.adroll.com https://*.outbrain.com https://*.taboola.com https://*.usercentrics.eu https://policy.app.cookieinformation.com https://*.typekit.net https://*.bootstrapcdn.com https://*.fontawesome.com https://*.kargo.com https://*.zeotap.com https://*.rfihub.com https://*.imgstatics.com https://*.techlab-cdn.com www.xtento.com cdn.xtento.com *.cloudflare.com https://cdn.klarna.com *.vimeocdn.com https://s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com *.cdninstagram.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com *.yotpo.com https://*.qliro.com https://*.qit.nu https://*.cookiebot.eu https://*.tradedoubler.com https://ml314.com/ data: 'self' 'unsafe-inline'; script-src https://*.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.adyen.com pay.google.com *.payments-amazon.com https://*.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://*.dibspayment.eu https://maps.googleapis.com https://player.vimeo.com *.disqus.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.agechecked.com https://*.qliro.com https://*.trustpilot.com https://cdn.jsdelivr.net *.avada.io *.shopify.com 'self' https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.gstatic.com https://*.magento.com https://*.nr-data.net https://*.newrelic.com https://policy.app.cookieinformation.com https://connect.facebook.net https://www.snapengage.com https://*.pingdom.net blob: https://*.clarity.ms www.xtento.com cdn.xtento.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com connect.facebook.net twitter.com platform.twitter.com *.yotpo.com https://applepay.cdn-apple.com https://*.cookiebot.com https://*.techlab-cdn.com https://chat.digitalgenius.com https://capi-automation.s3.us-east-2.amazonaws.com/ https://*.klaviyo.com/ https://madhat.customerfirst.ai https://*.bidtheatre.com/ https://*.adnxs.com/ https://*.clarity.ms/ https://*.creative-serving.com/ https://*.creative-serving.org/ https://*.pingdom.net/ https://cdn.jsdelivr.net/ https://*.kustom.co/ https://*.stripe.com/ https://*.cookiebot.eu https://trserv.snusexpress.com https://*.adform.net https://statics.snus.at https://*.cloudflareinsights.com https://*.qit.nu https://*.tradedoubler.com https://*.bidtheatre.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cash.app https://fonts.googleapis.com/ https://*.dibspayment.eu *.klarnacdn.net https://static.klaviyo.com *.agechecked.com https://*.fontawesome.com *.trustpilot.com https://cdn.jsdelivr.net https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' https://*.bootstrapcdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://*.googletagmanager.com https://*.typekit.net *.googleapis.com *.yotpo.com https://*.kustom.co/ https://*.klaviyo.com https://*.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' https://*.snapengage.com https://*.inkclub.com:9000 https://*.qliro.com https://*.qit.nu 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com * *.adyen.com https://*.dibspayment.eu https://maps.googleapis.com https://player.vimeo.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io 'self' https://*.google.com *.googleapis.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.googleadservices.com https://*.adobedtm.com https://*.adobe.com https://*.magento.com https://*.demdex.net https://*.nr-data.net https://*.clarity.ms https://*.pingdom.net https://*.hotjar.com https://*.hotjar.io https://*.usercentrics.eu https://policy.app.cookieinformation.com https://id5-sync.com https://*.adform.net https://*.online-metrix.net https://*.rfihub.com https://*.zeotap.com https://*.gstatic.com https://*.imgstatics.com https://*.techlab-cdn.com https://madhat.customerfirst.ai *.cloudflare.com *.paypal.com *.addthis.com *.cardinalcommerce.com https://graph.instagram.com *.yotpo.com https://*.qliro.com https://*.cookiebot.eu 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.snushof.ch/; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: https://www.googletagmanager.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.authorize.net *.syfpos.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.authorize.net syf.demdex.net *.syfpos.com *.syf.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.bing.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de static-eu.payments-amazon.com magefan.com cm.magefan.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://img.youtube.com store.paradoxlabs.com *.syfpos.com *.syf.com analytics.synchrony.com *.d1.sc.omtrdc.net *.mysynchrony.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.bing.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.attn.tv events.attentivemobile.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ s7.addthis.com *.authorize.net *.syfpos.com analytics.synchrony.com *.mysynchrony.com *.syf.com *.tiqcdn.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com unsafe-inline assets.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://static.klaviyo.com *.syfpos.com *.yotpo.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.attn.tv events.attentivemobile.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ ekr.zdassets.com/ *.authorize.net *.syfpos.com *.syf.com *.d1.sc.omtrdc.net *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-zCjhq1-ijyDfz1kIYCKuTw' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
font-src fonts.gstatic.com use.typekit.net data: *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com *.gstatic.com 'self' data: https://media.flixcar.com/ https://media.flixfacts.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://www.facebook.com/tr/ https://content.jwplatform.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com cdn.dnky.co amc.demdex.net www.google.com youtube.com *.hotjar.com https://www.facebook.com/tr/ https://static.addtoany.com/ https://static.zdassets.com/ https://script.hotjar.com *.googlesyndication.com *.googletagmanager.com *.doubleclick.net *.google 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.ftcdn.net *.behance.net data: www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com maps.gstatic.com maps.googleapis.com accounts.google.com https://googleads.g.doubleclick.net https://www.google.com.ar https://www.google.com.do https://www.googletagmanager.com https://www.m.casacuesta.com https://connect.facebook.net logo.flixfacts.co.uk https://widgets.magentocommerce.com/ https://media.flixcar.com/ *.flix360.com notifications-icommkt.website *.googlesyndication.com *.zdassets.com/ekr/snippet.js *.googletagmanager.com *.simpleanalyticscdn.com *.flixcar.com *.ocularsolution.com *.amazonaws.com *.syndigo.cloud *.baidu.com *.cloudfront.net *.syndigo.com *.google *.bing.com data: 'self' 'unsafe-inline'; script-src https://assets.adobedtm.com/ *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net commerce.adobe.net unpkg.com commerce.adobedtm.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com cdn.dnky.co r1-t.trackedlink.net www.gstatic.com js-agent.newrelic.com bam.nr-data.net maps.googleapis.com player.vimeo.com *.googleapis.com *.google.com *.gstatic.com *.avada.io *.hotjar.com *.hotjar.io https://static.hotjar.com/c/hotjar- https://static.hotjar.com https://script.hotjar.com https://www.google-analytics.com https://www.google-analytics.com/u/analytics_debug.js https://stats.g.doubleclick.net http://www.google.com/recaptcha/api.js https://static.zdassets.com/ https://d12zyq17vm1xwx.cloudfront.net/v2/wpn.min.js https://static.cloudflareinsights.com/ https://externalassets.icommarketing.com/icomMkt_tracking_jquery.min.js intent://arvr.google.com https://static.addtoany.com/menu/page.js https://static.addtoany.com/ https://static.zdassets.com/ekr/snippet.js *.flixfacts.com/ *.flixcar.com/ https://media.flixfacts.com/js/loader.js https://media.flixcar.com/delivery/static/tracking/tracking.js https://samsungxr.s3.amazonaws.com/js/ar_casacuesta.js https://cdn.jsdelivr.net/gh/Wruczek/Bootstrap-Cookie-Alert@gh-pages/cookiealert.js https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/releases/1AZgzF1o3OlP73CVr69UmL65/recaptcha__es.js *.googlesyndication.com *.googletagmanager.com *.singular.net *.icommkt.online *.syndigo.com *.flixfacts.com *.ocularsolution.com *.syndigo.cloud *.zdassets.com *.zopim.com *.flix360.io *.adobedtm.com *.google/sodar/sodar2.js *.gbqofs.com *.gbqofs.io *.doubleclick.net *.gbss.io *.ms *.tiktok.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.dnky.co *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com https://media.flixfacts.com/ https://media.flixcar.com/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.youtube.com https://static.zdassets.com/ https://media.flixcar.com/ https://media.flixfacts.com/ https://media.flixsyndication.net/ https://assets-jpcust.jwpsrv.com/ https://ssl.p.jwpcdn.com/ *.cloudfront.net/ https://d3nkfb7815bs43.cloudfront.net/ https://d2m3ikv8mpgiy8.cloudfront.net/ https://media.pointandplace.com/ https://player.pointandplace.com/ https://t.pointandplace.com/ *.pointandplace.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.adobe.io performance.typekit.net vimeo.com api.magento.com commerce.adobedtm.com commerce.adobedc.net commerce.adobe.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com api.comapi.com bam.nr-data.net http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io t.elasticsuite.io *.google-analytics.com *.hotjar.com *.hotjar.io https://www.google-analytics.com https://stats.g.doubleclick.net https://www.facebook.com/tr/ http://ccnecommerce.com/ https://notifications-icommkt.com/ https://track-icommkt.com/ https://casacuesta.zendesk.com/ https://ekr.zdassets.com/ wss://widget-mediator.zopim.com/ *.youtube.com https://prod.flixgvid.flix360.io https://t.flix360.com https://syndication.flix360.com *.flix360.com *.amazonaws.com *.flixcar.com *.googlesyndication.com *.syndigo.com *.ocularsolution.com *.simpleanalitycscdn.com *.casacuesta.com *.simpleanalyticscdn.com *.singular.net *.baidu.com *.google *.gbqofs.io *.gstatic.com *.google.com.do/ads/ga-audiences wss://ws.hotjar.com/api/v2/client/ws *.g.doubleclick.net *.syndigo.cloud *.googleapis.com *.gbss.io *.gbqofs.com *.clarity.ms 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' https://us-assets.i.posthog.com https://*.daily.co; style-src 'self' 'unsafe-inline' 'report-sample' https://fonts.googleapis.com; img-src 'self' data: blob: https://lh3.googleusercontent.com https://media.licdn.com https://images.unsplash.com https://www.google.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://us.i.posthog.com https://us-assets.i.posthog.com https://*.datadoghq.eu https://*.datadoghq.com https://*.auth0.com wss://*.livekit.cloud wss://*.daily.co https://*.daily.co https://www.loom.com https://withpersona.com https://*.withpersona.com; media-src 'self' blob:; frame-src 'self' https://*.daily.co https://www.loom.com https://withpersona.com https://*.withpersona.com; frame-ancestors 'none'; worker-src 'self' blob:; report-uri /api/csp-report 1
default-src 'self' 'nonce-mqQHbZqkWQ3tSkEf526kNg==' *.google-analytics.com *.googlesyndication.com *.gstatic.com *.youtube.com *.fontawesome.com *.googletagmanager.com *.trustpilot.com; script-src 'strict-dynamic' 'unsafe-eval' 'nonce-mqQHbZqkWQ3tSkEf526kNg==' *.unpkg.com *.addtoany.com *.trustpilot.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com *.jsdelivr.net *.vimeo.com *.godaddy.com *.cloudflare.com *.google-analytics.com; style-src 'unsafe-inline' 'self' *.jsdelivr.net *.cloudflare.com *.typekit.net https://tagmanager.google.com https://fonts.googleapis.com; connect-src 'self' https://lottie.host/ *.6sense.com *.pingdom.net *.salesloft.com http://ib.adnxs.com https://secure.adnxs.com/ https://pagead2.googlesyndication.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.co.uk *.cookiebot.com *.linkedin.com *.6sc.co; frame-src 'self' 'nonce-mqQHbZqkWQ3tSkEf526kNg==' *.addtoany.com https://www.googletagmanager.com https://td.doubleclick.net *.youtube.com *.vimeo.com *.google.com *.cookiebot.com *.trustpilot.com *.doubleclick.net; font-src 'self' 'nonce-mqQHbZqkWQ3tSkEf526kNg==' data: *.jsdelivr.net *.cloudflare.com *.typekit.net *.fontawesome.com https://fonts.gstatic.com; img-src 'self' data: https://www.quartix.com/ https://b.sf-syn.com/ https://www.google.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com *.gravatar.com *.google.co.uk *.6sc.co *.facebook.com *.facebook.net *.linkedin.com *.metricool.com *.cookiebot.com; object-src 'nonce-mqQHbZqkWQ3tSkEf526kNg=='; 1
default-src 'self';   script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.yoast.com https://www.googletagmanager.com https://www.google-analytics.com https://acsbapp.com https://connect.facebook.net https://snap.licdn.com https://googleads.g.doubleclick.net https://*.vimeo.com;   style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;   img-src 'self' data: https: https://secure.gravatar.com;   font-src 'self' data: https://fonts.gstatic.com https://*.wpenginepowered.com https://*.bwxt.com;   connect-src 'self' https://www.google-analytics.com https://cdn.acsbapp.com https://www.google.com https://px.ads.linkedin.com;   frame-src 'self' blob: https://www.youtube.com https://www.youtube-nocookie.com https://*.vimeo.com;   worker-src 'self' blob:;   object-src 'none';   base-uri 'self';   form-action 'self';   upgrade-insecure-requests; 1
default-src *.emersya.com emersya.com 'self'; script-src  'unsafe-inline' *.vimeocdn.com *.emersya.com cdn-cookieyes.com *.hubspot.com yoast.com js-eu1.hubspot.com *.hs-scripts.com *.hs-analytics.net *.hscollectedforms.net *.hs-banner.com *.hsforms.net 146805878.hs-sites-eu1.com *.hsappstatic.net google.com beacon-v2.helpscout.net www.gstatic.com cdnjs.cloudflare.com cdn.jsdelivr.net 'self' blob:; connect-src yoast.com my.yoast.com cdn-cookieyes.com *.cookieyes.com *.emersya.com *.hubspot.com *.hscollectedforms.net d3hb14vkzrxvla.cloudfront.net *.mixpanel.com 'self'; img-src *.w.org *.gravatar.com *.vimeocdn.com emersya.com *.emersya.com *.hubspot.com *.hsforms.com static.hsappstatic.net cdn-cookieyes.com assets.elementor.com 'self' data:; style-src  'unsafe-inline' emersya.com *.emersya.com *.vimeocdn.com designsystem.brevo.com fonts.googleapis.com 'self';  media-src *.vimeocdn.com 'self';frame-src emersya.com *.emersya.com player.vimeo.com 146805878.hs-sites-eu1.com *.hsforms.net *.hubspot.com google.com 'self'; font-src emersya.com *.emersya.com designsystem.brevo.com fonts.gstatic.com 'self' data:; report-to csp-endpoint 1
default-src 'self' blob: data: 'unsafe-inline' 'unsafe-eval' *.adobedtm.com *.coutts.com   *.amazon-adsystem.com *.atdmt.com *.avocet.io *.blubrry.com *.clicktale.net *.demdex.net *.doubleclick.net *.everesttech.net *.facebook.com *.facebook.net *.fca.org.uk *.google.co.uk *.google.com *.google.ie *.googleadservices.com   *.jwpcdn.com *.jwpltx.com *.liveperson.net *.lpsnmedia.net *.neolane.net *.omtrdc.net *.pinimg.com *.pinterest.com *.userzoom.com *.youtube.com *.ytimg.com *.contentsquare.net *.contentsquare.com https://geolocation.onetrust.com   https://privacyportal-eu.onetrust.com https://googleads.g.doubleclick.net https://www.googleadservices.com snap.licdn.com cdn.cookielaw.org www.gstatic.com www.googletagmanager.com www.google-analytics.com googleapis.com https://coutts.scene7.com;   upgrade-insecure-requests; block-all-mixed-content; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.paypal.com https://*.paypalobjects.com https://*.venmo.com https://challenges.cloudflare.com https://static.cloudflareinsights.com https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://maps.googleapis.com https://www.youtube.com https://player.vimeo.com https://apis.google.com https://*.mediacliphub.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.paypal.com; font-src 'self' data: https://fonts.gstatic.com https://cdn.uniquephoto.com https://*.azureedge.net; img-src 'self' data: blob: https: http://localhost; media-src 'self' blob: https://cdn.uniquephoto.com https://*.azureedge.net https://*.mediacliphub.com https://www.lvcsoftball.com https://*.lvcsoftball.com; connect-src 'self' https: wss: https://www.google-analytics.com https://*.paypal.com https://*.paypalobjects.com https://*.venmo.com https://challenges.cloudflare.com https://cloudflareinsights.com https://*.cloudflareinsights.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://*.mediacliphub.com; frame-src 'self' https://*.paypal.com https://*.venmo.com https://challenges.cloudflare.com https://www.youtube.com https://player.vimeo.com https://www.google.com https://maps.google.com https://render.mediacliphub.com https://designer.mediacliphub.com https://apis.google.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://*.paypal.com https://*.venmo.com; report-uri /api/csp-report; report-to csp-endpoint 1
report-uri https://d1aosrekaw7sk8.cloudfront.net/reports; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' ws: blob: data: tagging.dupixent.com ad.doubleclick.net iron-wsa01 ironport 8188202.fls.doubleclick.net ad.doubleclick.net adservice.google.com aim-tag.hcn.health ajax.googleapis.com analytics.google.com analytics.tiktok.com ap.lijit.com apis.google.com apps.healthgrades.com bat.bing.com bcbolt446c5271-a.akamaihd.net bcp.crwdcntrl.net bh.contextweb.com c.clarity.ms cdn.cookielaw.org cdn.di-capt.com cdn.jsdelivr.net cdnjs.cloudflare.com clientstream.launchdarkly.com cm.g.doubleclick.net code.jquery.com connect.facebook.net content.hotjar.io contextual.media.net d1lkfzu2puirk6.cloudfront.net di.rlcdn.com dpm.demdex.net eb2.3lift.com edge.api.brightcove.com fast.fonts.net feedback-pa.clients6.google.com fonts.cdnfonts.com fonts.googleapis.com fonts.googleapis.com fonts.gstatic.com form.typeform.com geolocation.onetrust.com googleads.g.doubleclick.net gum.criteo.com i.liadm.com i6.liadm.com ib.adnxs.com insight.adsrvr.org insights.algolia.io integrations.eu-de.assistant.watson.appdomain.cloud js.adsrvr.org manzanasjuegosco-a.akamaihd.net maps.googleapis.com maps.gstatic.com match.adsrvr.org match.deepintent.com match.sharethrough.com metrics.brightcove.com metrics.hotjar.io ms-cookie-sync.presage.io pixel.rubiconproject.com player.vimeo.com players.brightcove.net players.brightcove.net privacyportal-eu.onetrust.com px.ads.linkedin.com px4.ads.linkedin.com region1.analytics.google.com region1.google-analytics.com rialto-gms.s3.amazonaws.com rtb-csync.smartadserver.com rtb.gumgum.com sc-static.net script.hotjar.com security-eu.mimecast.com snap.licdn.com spoppe-b.azureedge.net ssum-sec.casalemedia.com staging-apps.healthgrades.com static.hotjar.com stats.g.doubleclick.net sync.1rx.io sync.crwdcntrl.net tags.bluekai.com td.doubleclick.net td.doubleclick.net thrtle.com token.rubiconproject.com translate-pa.googleapis.com translate.googleapis.com trc.lhmos.com trotjidayo-1.algolianet.com trotjidayo-2.algolianet.com trotjidayo-3.algolianet.com trotjidayo-dsn.algolia.net uipglob.semasio.net unpkg.com use.fontawesome.com vc.hotjar.io vjs.zencdn.net web-chat.global.assistant.watson.appdomain.cloud www.clarity.ms www.dupixent.com www.facebook.com www.google-analytics.com www.google-analytics.com www.google.com www.google.com.au www.googletagmanager.com fresnel-events.vimeocdn.com vod-adaptive-ak.vimeocdn.com player-telemetry.vimeo.com fresnel.vimeocdn.com www.medtargetsystem.com z.clarity.ms ws.hotjar.com secure.adnxs.com www.gstatic.com www.eventmgmtportal.com sanofi-privacy.my.onetrust.com trotjidayo-1.algolianet.com trotjidayo-3.algolianet.com trotjidayo-2.algolianet.com trotjidayo-dsn.algolia.net lpopeventportal-2-0-2.sanofigenzyme.intouch-preview.com som.healthgrades.com sanofi-japan-dev.eval.janraincapture.com sanofi-japan-staging.eval.janraincapture.com sanofi-japan.us.janraincapture.com sanofi-dev.us-dev.janraincapture.com sanofi-staging.us-dev.janraincapture.com sanofi.us.janraincapture.com sanofi-dev.eu-dev.janraincapture.com sanofi-staging.eu-dev.janraincapture.com sanofi.eu.janraincapture.com vod-adaptive-ak.vimeocdn.com player-telemetry.vimeo.com fresnel.vimeocdn.com fresnel-events.vimeocdn.com photos.healthgrades.com use.typekit.net p.typekit.net alb.reddit.com api.securedvisit.com arttrk.com c.pmsrv.co c.tvpixel.com cdn.decibelinsight.net content.securedvisit.com d34r8q7sht0t9k.cloudfront.net p.tvpixel.com pixel-config.reddit.com px.adentifi.com track.securedvisit.com track.sv.rkdms.com www.redditstatic.com; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cloudinary.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com cloudinary.com *.cloudinary.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com *.braintreegateway.com *.paypal.com google.com *.google.com cloudinary.com *.cloudinary.com cdnjs.cloudflare.com maps.googleapis.com chart.googleapis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com *.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io cloudinary.com *.cloudinary.com blob: https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://widgets.payflex.co.za oppwa.com *.oppwa.com *.peachpayments.com *.eu-west-1.amazonaws.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com cloudinary.com *.cloudinary.com cdnjs.cloudflare.com *.vimeo.com unpkg.com *.frizbit.com https://browser.sentry-cdn.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com maps.googleapis.com chart.googleapis.com *.disqus.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://widgets.payflex.co.za https://partpayassets.blob.core.windows.net *.oppwa.com oppwa.com *.peachpayments.com *.yotpo.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com cloudinary.com *.cloudinary.com *.googleapis.com unpkg.com *.frizbit.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com https://widgets.payflex.co.za oppwa.com *.oppwa.com *.peachpayments.com *.yotpo.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src maps.googleapis.com chart.googleapis.com 'self' 'unsafe-inline'; media-src cloudinary.com *.cloudinary.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com cloudinary.com *.cloudinary.com *.frizbit.com https://*.ingest.sentry.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com maps.googleapis.com chart.googleapis.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com oppwa.com *.oppwa.com *.peachpayments.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://checkout.razorpay.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; connect-src 'self' https://www.google-analytics.com https://api.razorpay.com; frame-src 'self' https://api.razorpay.com https://www.google.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none' 1
font-src data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com *.facebook.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.google-analytics.com *.facebook.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src https://www.google.com/recaptcha/ *.multisafepay.com https://pay.google.com js.mollie.com *.sendcloud.sc 'self' 'unsafe-inline'; img-src data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypalobjects.com *.multisafepay.com https://www.mollie.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypalobjects.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.multisafepay.com https://pay.google.com js.mollie.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.multisafepay.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com www.paypalobjects.com *.multisafepay.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://monitor.bigbridgedev.nl/csp; report-to report-endpoint; 1
font-src *.squarecdn.com *.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ widgets.sandbox.afterpay.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com www.googletagmanager.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.afterpay.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com www.google.com.ua t.zip.co static.zipmoney.com.au static.zip.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://portal.sandbox.afterpay.com https://portal.afterpay.com https://static.afterpay.com *.squarecdn.com https://hbiq.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com static.zipmoney.com.au static.zip.co zip.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com static.afterpay.com/ *.squarecdn.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.afterpay.com *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com *.googleapis.com *.cdnfonts.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors self www.google.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com www.google.com www.gstatic.com apis.google.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.sandbox.paypal.com *.paypalobjects.com landofcoder.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar gnc.com.mx *.gnc.com.mx *.mercadopago.com.mx *.google.com.mx *.bing.com *.clarity.ms https://cdn.aplazo.mx/ assets.instantsearchplus.com *.akamaized.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.sandbox.paypal.com *.paypalobjects.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.acp-magento.appspot.com *.akamaized.net *.instantsearchplus.com *.fastsimon.com fastsimon-grid.akamaized.net cdnjs.cloudflare.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com *.gstatic.com *.fontawesome.com player.vimeo.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.getblue.io *.scarabresearch.com *.facebook.net *.appspot.com *.convertexperiments.com *.clarity.ms *.hotjar.com *.zdassets.com *.survicate.com *.recapture.io *.bing.com *.tiktok.com *.zendesk.com wss://widget-mediator.zopim.com/ https://api.aplazo.net https://posbifrost.aplazo.net https://api.aplazo.mx https://posbifrost.aplazo.mx js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.sandbox.paypal.com *.paypalobjects.com landofcoder.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.cdnfonts.com *.fastsimon.com assets.braintreegateway.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.fastsimon.com *.scarabresearch.com *.zdassets.com *.zendesk.com *.zopim.com *.clarity.ms *.tiktok.com wss://widget-mediator.zopim.com/ *.doubleclick.net *.hotjar.com *.googleapis.com https://api.aplazo.net https://posbifrost.aplazo.net https://api.aplazo.mx https://posbifrost.aplazo.mx api.instantsearchplus.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.sandbox.paypal.com *.paypalobjects.com landofcoder.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' *.salesforce.com 'report-sample'; style-src *.force.com 'unsafe-inline' 'self' *.salesforce.com *.visualforce.com:*; img-src *.force.com slack-imgs-mil-dev.com a.static.lightning.force.com *.slack.com 'self' *.slack-imgs.com slack-imgs-gov.com *.salesforce-experience.com *.slack-edge-gov.com *.my-salesforce.com slack-imgs-gov-dev.com *.slack-edge.com *.cloudinary.com slack-mil-dev.com static.lightning.force.com *.slack-gov.com *.slack-gov-dev.com blob: *.slack-edge.mil b.static.lightning.force.com slack-imgs.com static.sandbox.lightning.force.com *.sfdcstatic.com *.salesforce.com *.twimg.com slack-imgs.mil data:; media-src 'self' *.salesforce.com; frame-src *.force.com *.quip.com *.arkoselabs.com 'self' *.youtube-nocookie.com *.youtube.co.uk *.cybersource.com *.youtube.com.br *.youtube.es *.salesforce-experience.com *.salesforceliveagent.com *.adis.ws *.sfdcfc.net *.youtube.ca *.youtube.ie *.cloudinary.com *.vidyard.com *.vimeo.com *.youtube.jp bcove.video *.youtube.fr *.forceusercontent.com *.brightcove.net *.youtube.com *.wistia.net *.salesforce.com *.youtube.nl *.youtube.pl; font-src *.force.com 'self' *.salesforce.com blob: data:; connect-src 'self' *.amazonaws.com *.salesforce.com https://cdn.cbweb.code-builder.platform.salesforce.com api.salesforce.com wss://*.slack-gov-dev.com wss://*.api.salesforce.com *.api.salesforce.com wss://*.slack.com wss://*.slack-gov.com wss://api.salesforce.com; report-to sfdc-csp-ep; report-uri https://csp-report.force.com/_/ContentDomainCSPNoAuth?type=login 1
default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https://cdnapisec.kaltura.com/ https://epicproxy.et0316.epichosted.com https://premier.trustcommerce.com/;script-src 'nonce-1173380d22494c128d18e318b7a27863' https://mycarle.com 'self';img-src https://* 'self' blob: data:;connect-src 'self' epichttp: https://mychart-mychart-chat-mediator. wss://*.webpubsub.azure.com;style-src https://mycarle.com 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
default-src 'self'; script-src 'self' https://challenges.cloudflare.com https://*.googletagmanager.com 'nonce-DeigRLVn8VGGS5DFgG6UpA==' 'strict-dynamic'; style-src 'self' 'unsafe-inline' https://*.raceresult.com; img-src 'self' data: https:; font-src 'self' data:; manifest-src 'self'; connect-src 'self' https://o4511698897403904.ingest.de.sentry.io https://challenges.cloudflare.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.raceresult.com; frame-src 'self' https://challenges.cloudflare.com https://www.youtube.com https://player.vimeo.com https://www.dailymotion.com https://www.google.com https://*.revolugo.com; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; form-action 'self' https://p.monetico-services.com https://p.monetico.fr; report-uri https://o4511698897403904.ingest.de.sentry.io/api/4511699500138576/security/?sentry_key=edf0c9f25e03f0fb77b965cbd14a9d0a&sentry_environment=production; report-to csp-endpoint 1
default-src 'self'; script-src 'self' 'report-sample' 'strict-dynamic' https://ajax.googleapis.com/ https://api.tiles.mapbox.com/ https://cdn.nolt.io/ https://cdn.statuspage.io/ https://cdn.tiny.cloud/ https://cdnjs.cloudflare.com/ https://code.jquery.com/ https://j1h014tryv29.statuspage.io/ https://static.zdassets.com/ https://www.googletagmanager.com/ 'nonce-YXFaUWF5MDFkY19yNEtyblpTOFVGQUFBQUlV'; object-src 'none'; style-src 'self' 'report-sample' 'strict-dynamic' https://api.tiles.mapbox.com https://cdnjs.cloudflare.com https://fonts.googleapis.com 'nonce-YXFaUWF5MDFkY19yNEtyblpTOFVGQUFBQUlV'; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-ancestors 'none'; base-uri 'self'; img-src 'self' data: https://sp.tinymce.com https://api.tiles.mapbox.com; frame-src 'self' https://j1h014tryv29.statuspage.io; media-src 'self' https://static.zdassets.com; connect-src 'self' https://ekr.zdassets.com https://omnilert.zendesk.com wss://widget-mediator.zopim.com; report-uri https://afiwlxkn53.execute-api.us-east-1.amazonaws.com/latest/csp_reports; report-to https://afiwlxkn53.execute-api.us-east-1.amazonaws.com/latest/csp_reports; 1
default-src 'none'; form-action 'none'; frame-ancestors 'none'; report-uri; report-uri https://cybersmart.report-uri.com/r/d/csp/wizard 1
default-src 'self' 'unsafe-inline'  forms-na1.hsforms.com staticcontent.fxstreet.com https://www.youtube.com  https://assets.app.lmax.com https://login-lmax.my.site.com https://img.youtube.com https://mtfclosingprices.lmax.com; font-src * data:; script-src 'unsafe-inline' 'unsafe-eval' *; frame-src 'self'  forms-na1.hsforms.com staticcontent.fxstreet.com https://www.youtube.com  https://assets.app.lmax.com https://login-lmax.my.site.com https://img.youtube.com https://mtfclosingprices.lmax.com; img-src 'self'  forms-na1.hsforms.com staticcontent.fxstreet.com https://www.youtube.com  https://assets.app.lmax.com https://login-lmax.my.site.com https://img.youtube.com https://mtfclosingprices.lmax.com data:; connect-src *; frame-ancestors 'self'  forms-na1.hsforms.com staticcontent.fxstreet.com https://www.youtube.com  https://assets.app.lmax.com https://login-lmax.my.site.com https://img.youtube.com https://mtfclosingprices.lmax.com; media-src 'self'  forms-na1.hsforms.com staticcontent.fxstreet.com https://www.youtube.com  https://assets.app.lmax.com https://login-lmax.my.site.com https://img.youtube.com https://mtfclosingprices.lmax.com data:; style-src-elem 'unsafe-inline' *; report-uri https://www.silicontrade.uk/wp-json/csp/v1/report; 1
font-src fonts.gstatic.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.fonts.googleapis.com *.gstatic.com data: *.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.facebook.net 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.facebook.com *.facebook.net *.google.com embed.payjustnow.com *.payjustnow.com *.addthis.com *.pinterest.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.klevu.com *.ksearchnet.com magefan.com cm.magefan.com *.facebook.com *.facebook.net https://www.magezon.com *.cloudflare.com https://cdn.klarna.com https://s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com *.cdninstagram.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.ampproject.org raw.githubusercontent.com chimpstatic.com downloads.mailchimp.com *.list-manage.com https://polyfill-fastly.io https://browser.sentry-cdn.com js.klevu.com *.ksearchnet.com s7.addthis.com *.facebook.com *.facebook.net *.avada.io *.google.com/ embed.payjustnow.com *.payjustnow.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com https://js.klevu.com https://www.topt.co.za 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.googleapis.com https://js.klevu.com https://www.topt.co.za 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com cdn.ampproject.org https://*.ingest.sentry.io *.klevu.com *.ksearchnet.com sandbox-api.layup.co.za layup.co.za ekr.zdassets.com/ *.facebook.com *.facebook.net https://get.geojs.io *.avada.io embed.payjustnow.com *.payjustnow.com *.cloudflare.com *.paypal.com *.googleapis.com *.addthis.com *.cardinalcommerce.com https://graph.instagram.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' https: https://www.google-analytics.com https://cdn.amplitude.com 'unsafe-eval' 'unsafe-inline' data: 'nonce-Rh8arZq1DFXSDtRh08Eplw=='; worker-src blob: data:; report-uri https://us.sentry.io/api/4506690010480640/security/?sentry_key=aab2498373841041d6b48d721aefbdc1&sentry_environment=production&sentry_release=0d1fb9a2e563d88794824e3d9b1613dac411b5ae 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; media-src 'self' https:; object-src 'none'; base-uri 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-GHIHFsieyrxIvBJ7swbAtw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; connect-src 'self' https: wss:; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https:; 1
default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; upgrade-insecure-requests; 1
font-src *.gstatic.com fonts.gstatic.com use.typekit.net *.typekit.net www.paypalobjects.com *.googleapis.com data: https://www.googletagmanager.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action www.facebook.com ecommerce.raiffeisenbank.rs *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self' *.jasmin.rs *.cookiebot.com *.hotjar.com *.googletagmanager.com www.gstatic.com 'self'; frame-src www.facebook.com bid.g.doubleclick.net storifyme.com storifyme.xyz *.storifyme.com *.storifyme.xyz *.jasmin.rs *.yandex.com *.yandex.md *.doubleclick.net *.cookiebot.com *.googletagmanager.com *.yango.com fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.paypal.com www.sandbox.paypal.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com 'self' 'unsafe-inline'; img-src *.googleapis.com *.gstatic.com stats.g.doubleclick.net www.google.com www.google.rs www.facebook.com www.googletagmanager.com storifyme.com storifyme.xyz *.storifyme.com *.storifyme.xyz assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net bid.g.doubleclick.net analytics.google.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io maps.googleapis.com maps.gstatic.com *.yandex.ru https://yandex.ru *.yandex.com *.yandex.md *.cookiebot.com *.yads.tech *.sharethis.com *.ymmobi.com *.doubleclick.net *.opera.com *.jasmin.rs jasmin.b-cdn.net kickoffcrm.com *.google.ru *.yango.com *.facebook.net *.linkedin.com i0.wp.com data: www.googleadservices.com www.google-analytics.com p.typekit.net *.paypal.com *.typekit.net www.paypal.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src *.googleapis.com *.gstatic.com *.googletagmanager.com www.google-analytics.com connect.facebook.net googleads.g.doubleclick.net stats.g.doubleclick.net storifyme.com storifyme.xyz *.storifyme.com *.storifyme.xyz *.hotjar.com *.yandex.ru *.yandex.com *.cookiebot.com *.jasmin.rs mc.yango.com jasmin.sales-snap.com *.licdn.com *.tiktok.com assets.adobedtm.com *.adobe.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.disqus.com *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.jasmin.rs jasmin.sales-snap.com *.adobe.com fonts.googleapis.com assets.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.b-cdn.net storifyme.com storifyme.xyz *.storifyme.com *.storifyme.xyz *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.googleapis.com *.google.com google.com www.google-analytics.com connect.facebook.net stats.g.doubleclick.net *.facebook.com dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com analytics.google.com www.googletagmanager.com *.cardinalcommerce.com vimeo.com ekr.zdassets.com get.geojs.io *.avada.io *.hotjar.com *.hotjar.io wss://ws.hotjar.com storifyme.com storifyme.xyz *.storifyme.com *.storifyme.xyz *.yandex.ru *.yandex.com yandex.com *.yandex.md *.doubleclick.net *.jasmin.rs *.googlesyndication.com *.yango.com jasmin.sales-snap.com *.linkedin.com *.cookiebot.com *.tiktok.com *.newrelic.com *.nr-data.net *.adobe.io performance.typekit.net *.sentry.io *.paypal.com *.braintreegateway.com *.braintree-api.com www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://get.geojs.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.googleapis.com fonts.gstatic.com *.googleapis.com *.gstatic.com data: cdnjs.cloudflare.com cloud.tagbox.com *.cloudflare.com https://fonts.gstatic.com *.slant.co *.tagbox.com *.taggbox.com *.typekit.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.authorize.net *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.authorize.net 'self'; frame-src bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.youtube-nocookie.com www.google.com challenges.cloudflare.com *.cloudflare.com maps.googleapis.com maps.gstatic.com *.pinterest.com *.snapchat.com *.tagbox.com *.taggbox.com *.twitter.com www.googletagmanager.com www.youtube.com *.googleapis.com *.google.com *.weltpixel.com *.authorize.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com cdn.jsdelivr.net cdnjs.cloudflare.com *.cloudflare.com fonts.googleapis.com plant.gertens.com plants.gertens.com *.qscaping.com *.snapchat.com *.tagbox.com *.taggbox.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.hsforms.net *.hsforms.com 'self' data: *.facebook.com *.reddit.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ challenges.cloudflare.com apis.google.com cdn.jsdelivr.net cloud.tagbox.com *.cloudflare.com s.pinimg.com *.pinterest.com *.shipperhq.com sc-static.net *.snapchat.com *.tagbox.com *.taggbox.com analytics.tiktok.com *.twitter.com www.google.com www.gstatic.com assets.shipperhq.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.authorize.net *.hsforms.net *.hsforms.com *.google.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net *.redditstatic.com *.reddit.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com cdn.jsdelivr.net cdnjs.cloudflare.com cloud.tagbox.com *.cloudflare.com https://fonts.googleapis.com maps.googleapis.com maps.gstatic.com static.klaviyo.com *.tagbox.com *.taggbox.com *.typekit.net assets.shipperhq.com https://static.klaviyo.com *.googleapis.com *.gstatic.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com vimeo.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.cloudflare.com *.facebook.com *.klaviyo.com *.pinterest.com *.snapchat.com *.tagbox.com *.taggbox.com *.tiktok.com www.google.com rms.shipperhq.com https://rms.shipperhq.com wss://rms.shipperhq.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.authorize.net ovs.shipperhq.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.facebook.net *.redditstatic.com *.reddit.com *.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://381bf725-3220-4831-a9b1-8d89358a6b9c.sansec.watch/; report-to report-endpoint; 1
require-trusted-types-for 'script'; trusted-types 'allow-duplicates' default nextjs nextjs#bundler dompurify goog#html 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net maxcdn.bootstrapcdn.com *.fontawesome.com *.googleapis.com *.gstatic.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.addthis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.doofinder.com https://images.unsplash.com magefan.com cm.magefan.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.doofinder.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ s7.addthis.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.fontawesome.com *.googleapis.com *.gstatic.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.doofinder.com maxcdn.bootstrapcdn.com https://static.klaviyo.com https://cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.doofinder.com wss://*.doofinder.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ ekr.zdassets.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com analytics.google.com *.facebook.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://js.hubspot.com https://cp.hubspot.com https://app.hubspot.com https://no-cache.hubspot.com https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.clarity.ms https://cdn-cookieyes.com https://widget.freshworks.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net;connect-src 'self' https://js.hubspot.com https://cp.hubspot.com https://app.hubspot.com https://can-store.chargehub.com https://click.chargehub.com https://www.clarity.ms https://f.clarity.ms https://www.google-analytics.com https://region1.google-analytics.com; frame-src https://www.youtube.com https://widget.freshworks.com; object-src 'none'; base-uri 'self'; upgrade-insecure-requests 1
object-src 'none';base-uri 'self';script-src 'nonce-mRcItzxByoFocrONt-IXGg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; style-src 'self' 'unsafe-inline' https://p.typekit.net https://use.typekit.net; style-src-elem 'self' 'unsafe-inline' https://p.typekit.net https://use.typekit.net; script-src 'self' 'unsafe-inline'; font-src 'self' https://www.bayreuther-festspiele.de https://use.typekit.net; img-src 'self' data:; worker-src blob:; report-uri https://csp-rep.tmt.de/csp-report; report-to csp-endpoint 1
default-src 'none'; connect-src 'self'; img-src 'self' data:; style-src 'self'; font-src 'self' data:; frame-ancestors *.ssi-schaefer.com; form-action 'self'; script-src 'self' *.ssi-schaefer.com *.engagement.coremedia.cloud 'unsafe-inline' www.googletagmanager.com; script-src-elem 'self' *.ssi-schaefer.com *.engagement.coremedia.cloud 'unsafe-inline' www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' *.engagement.coremedia.cloud data: *.ytimg.com; font-src 'self'; media-src 'self'; frame-ancestors *.ssi-schaefer.com; connect-src 'self' *.engagement.coremedia.cloud *.ssi-schaefer.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.livechatinc.com https://*.haiku.ai https://api.hubspot.com https://api.mixpanel.com https://cdn.freshmarketer.com https://cdn.mxpnl.com https://cdnjs.cloudflare.com https://code.jquery.com https://connect.facebook.net https://forms.hsforms.com https://googleads.g.doubleclick.net https://info.proctoru.com https://ip.freshmarketer.com https://js.hs-analytics.net https://js.hs-scripts.com https://js.hsadspixel.net https://js.hsforms.net https://js.usemessages.com https://maxcdn.bootstrapcdn.com https://pi.pardot.com https://px.ads.linkedin.com https://snap.licdn.com https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://www.linkedin.com https://www.youtube.com https://js.hscta.net https://cta-service-cms2.hubspot.com https://hire.withgoogle.com https://*.adroll.com https://*.consensu.org https://*.twitter.com/ https://cdn.syndication.twimg.com/ https://*.fullstory.com/ https://js.hs-banner.com https://api.hubapi.com https://sc.lfeeder.com https://tagmanager.google.com https://yas.bamboohr.com https://*.cincopa.com https://www.meazurelearning.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.typekit.net https://maxcdn.bootstrapcdn.com https://platform.twitter.com/ https://tagmanager.google.com https://*.bamboohr.com https://*.meazurelearning.com https://cdn.jsdelivr.net; img-src https: data:; connect-src https://www.google-analytics.com https://*.haiku.ai https://api.mixpanel.com https://api.hubspot.com https://api.hubapi.com https://*.fullstory.com/ https://*.bamboohr.com https://stats.g.doubleclick.net; font-src 'self' data: https://use.typekit.net https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; media-src https://*.livechatinc.com; frame-ancestors 'none'; object-src 'none'; frame-src https://secure.livechatinc.com https://bid.g.doubleclick.net https://forms.hsforms.com https://www.facebook.com https://www.youtube.com https://hire.withgoogle.com https://www.proctoru.com https://player.vimeo.com https://platform.twitter.com/ https://syndication.twitter.com/ https://twitter.com/; upgrade-insecure-requests 1
default-src 'unsafe-inline' 'self' *.zoon.by zoon.by *.zoon.kz zoon.kz *.zoon.ru zoon.ru fonts.googleapis.com fonts.gstatic.com www.gstatic.com data: blob: yandex.com yandex.net *.yandex.net yandex.ru *.yandex.ru yastatic.net *.adfox.ru adfox.ru *.adriver.ru adriver.ru *.yandexadexchange.net yandexadexchange.net *.googleusercontent.com i.ytimg.com *.googlevideo.com *.gstatic.com challenges.cloudflare.com static.cloudflareinsights.com rutube.ru *.rutube.ru vk.com *.vk.com vkvideo.ru *.vkvideo.ru userapi.com *.userapi.com *.vkuser.net *.vkuserlive.net mc.webvisor.com mc.webvisor.org mc.yandex.by mc.yandex.com mc.yandex.com.tr mc.yandex.kz mc.yandex.md mc.yandex.ru mc.yandex.uz mc.yandex.az mc.yandex.tm mc.yandex.com.ge ymkvww9tj4.ru; script-src 'self' *.zoon.by zoon.by *.zoon.kz zoon.kz *.zoon.ru zoon.ru yandex.com yandex.net *.yandex.net yandex.ru *.yandex.ru yastatic.net *.adfox.ru adfox.ru *.adriver.ru adriver.ru *.yandexadexchange.net yandexadexchange.net challenges.cloudflare.com static.cloudflareinsights.com s.ytimg.com mc.webvisor.com mc.webvisor.org mc.yandex.by mc.yandex.com mc.yandex.com.tr mc.yandex.kz mc.yandex.md mc.yandex.ru mc.yandex.uz mc.yandex.az mc.yandex.tm mc.yandex.com.ge ymkvww9tj4.ru wss://mc.webvisor.com wss://mc.webvisor.org wss://mc.yandex.by wss://mc.yandex.com wss://mc.yandex.com.tr wss://mc.yandex.kz wss://mc.yandex.md wss://mc.yandex.ru wss://mc.yandex.uz wss://mc.yandex.com.ge 'nonce-N457bxccZxEDW5b4vYCKxNuH'; script-src-elem 'report-sample' 'nonce-N457bxccZxEDW5b4vYCKxNuH' 'strict-dynamic'; style-src 'unsafe-inline' 'report-sample' 'self' *.zoon.by zoon.by *.zoon.kz zoon.kz *.zoon.ru zoon.ru *.gstatic.com fonts.googleapis.com fonts.gstatic.com blob:; frame-src 'self' *.zoon.by zoon.by *.zoon.kz zoon.kz *.zoon.ru zoon.ru blob: yandex.com yandex.net *.yandex.net yandex.ru *.yandex.ru yastatic.net *.adfox.ru adfox.ru *.adriver.ru adriver.ru *.yandexadexchange.net yandexadexchange.net *.gdelu-pro.ru gdelu-pro.ru challenges.cloudflare.com static.cloudflareinsights.com rutube.ru *.rutube.ru googlevideo.com *.googlevideo.com youtube.com *.youtube.com youtube-nocookie.com *.youtube-nocookie.com *.ytimg.com ytimg.com vk.com *.vk.com vkvideo.ru *.vkvideo.ru userapi.com *.userapi.com *.vkuser.net *.vkuserlive.net mc.webvisor.com mc.webvisor.org mc.yandex.by mc.yandex.com mc.yandex.com.tr mc.yandex.kz mc.yandex.md mc.yandex.ru mc.yandex.uz mc.yandex.az mc.yandex.tm mc.yandex.com.ge ymkvww9tj4.ru wss://mc.webvisor.com wss://mc.webvisor.org wss://mc.yandex.by wss://mc.yandex.com wss://mc.yandex.com.tr wss://mc.yandex.kz wss://mc.yandex.md wss://mc.yandex.ru wss://mc.yandex.uz wss://mc.yandex.com.ge master-hauz.ru etro-mejk-ap-salon.ru inpromed-med.ru; connect-src 'self' *.zoon.by zoon.by *.zoon.kz zoon.kz *.zoon.ru zoon.ru yandex.com yandex.net *.yandex.net yandex.ru *.yandex.ru yastatic.net *.adfox.ru adfox.ru *.adriver.ru adriver.ru *.yandexadexchange.net yandexadexchange.net googlevideo.com *.googlevideo.com youtube.com *.youtube.com youtube-nocookie.com *.youtube-nocookie.com *.ytimg.com ytimg.com mc.webvisor.com mc.webvisor.org mc.yandex.by mc.yandex.com mc.yandex.com.tr mc.yandex.kz mc.yandex.md mc.yandex.ru mc.yandex.uz mc.yandex.az mc.yandex.tm mc.yandex.com.ge ymkvww9tj4.ru wss://mc.webvisor.com wss://mc.webvisor.org wss://mc.yandex.by wss://mc.yandex.com wss://mc.yandex.com.tr wss://mc.yandex.kz wss://mc.yandex.md wss://mc.yandex.ru wss://mc.yandex.uz wss://mc.yandex.com.ge wss://ws.zoon.ru:2481 wss://ws.zoon.ru:17375 https://ws.zoon.ru:17375; object-src 'none'; base-uri 'self'; form-action 'self'; report-to csp-public; report-uri /csp.php?csp_area=public&user_id=15040885&secret=MLzKOTho 1
base-uri 'self'; child-src 'self' *.websiteni.com blob:; connect-src 'self' lottie.host *.googleapis.com *.facebook.net *.pay.com api.staging.pay.com api.pay.com *.mckinneycompetitions.com *.google-analytics.com *.cloudflare.com *.jsdelivr.net *.typekit.net *.unpkg.com *.culchiecomps.com *.google.com *.tiktok.com; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com *.jsdelivr.net *.cloudflare.com data: *.typekit.net *.cdn-apple.com; form-action 'self' www.facebook.com; frame-ancestors 'self' *.youtube.com *.youtube-nocookie.com; frame-src 'self' *.trustpilot.com *.pay.com universal.staging.pay.com universal.pay.com *.cardinalcommerce.com *.youtube.com *.youtube.com *.youtube-nocookie.com *.googletagmanager.com *.facebook.com; img-src 'self' mckinneycompetitions.com imagedelivery.net maps.gstatic.com maps.googleapis.com data: *.google.com *.facebook.com *.facebook.net *.googletagmanager.com *.google.co.uk *.google-analytics.com; media-src 'self'; object-src 'self'; script-src 'self' unpkg.com widget.trustpilot.com lottie.host fonts.googleapis.com maps.googleapis.com *.jquery.com *.cloudflare.com *.jsdelivr.net 'unsafe-inline' *.datatables.net 'unsafe-eval' *.lakedistrictgiveaways.co.uk *.facebook.net *.pay.com js.staging.pay.com www.googletagmanager.com matomo.mckinneycompetitions.com *.cdn-apple.com *.checkout.com *.doubleclick.net *.tiktok.com *.klaviyo.com; style-src 'self' *.cloudflare.com *.jsdelivr.net fonts.googleapis.com widget.trustpilot.com lottie.host 'unsafe-inline' *.datatables.net maps.googleapis.com *.typekit.net; manifest-src 'self'; 1
default-src 'self' ;   script-src 'self' 'unsafe-eval' https://analitica.dacoruna.gal 'nonce-aqYW2peGxyLZ9W_r0tLyFAAAAEM';   img-src 'self' data: blob: ;   frame-src 'self' ;   style-src 'self' 'unsafe-inline';   font-src 'self' ;   connect-src 'self' https://analitica.dacoruna.gal ;   object-src 'self' ;   frame-ancestors 'self' ; 1
object-src 'none';base-uri 'self';script-src 'nonce-aP7odWIP9a3_Aisn5O-cCA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://cdn.goentri.com https://cdn.tolt.io https://cdn.jsdelivr.net https://www.googletagmanager.com https://*.googletagmanager.com https://www.googleadservices.com https://www.google-analytics.com https://ssl.google-analytics.com https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://*.posthog.com https://us-assets.i.posthog.com; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https://cdn.blink.new https://firebasestorage.googleapis.com https://storage.googleapis.com https://images.unsplash.com https://lh3.googleusercontent.com https://avatars.githubusercontent.com https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://*.googletagmanager.com https://*.posthog.com; connect-src 'self' https://core.blink.new https://*.sites.blink.new https://*.exp.direct https://*.preview-blink.com https://*.googleapis.com wss://*.blink.new https://cdn.tolt.io https://*.tolt.io https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.google-analytics.com https://analytics.google.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://*.googletagmanager.com https://pagead2.googlesyndication.com https://*.posthog.com https://us.i.posthog.com https://us-assets.i.posthog.com; frame-src 'self' https://*.sites.blink.new https://*.blinkusercontent.com https://*.blink.new https://*.exp.direct https://*.preview-blink.com https://td.doubleclick.net https://www.googletagmanager.com; frame-ancestors 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net https://fonts.gstatic.com fonts.googleapis.com assets.ottu.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com landofcoder.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io blueskytechmage.com mageblueskytech.com placehold.jp magefan.com cm.magefan.com *.disqus.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com https://firebasestorage.googleapis.com sandbox.ottu.net sandbox.ottu.dev assets.ottu.net pay.muscatdutyfree.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com landofcoder.com *.disqus.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.avada.io *.shopify.com assets.ottu.net assets.ottu.dev 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.googletagmanager.com *.fontawesome.com https://fonts.bunny.net *.addtoany.com assets.ottu.net assets.ottu.dev 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com landofcoder.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog https://get.geojs.io *.avada.io http://dpm.demdex.net sentry.ottu.net sdkstudio.ottu.dev sdkstudio.ottu.net sandbox.ottu.dev sandbox.ottu.net pay.muscatdutyfree.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.fontawesome.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.monetico-services.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.wonderpush.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.monetico-services.com *.freshchat.com https://www.googletagmanager.com/ *.kameleoon.com *.experimentation.dev *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com *.chomette.com *.facebook.com *.criteo.com *.canva.com *.wonderpush.com *.worldline-solutions.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com *.hsforms.net *.hsforms.com *.freshchat.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://images.join-stories.com *.kameleoon.com *.kameleoon.io *.kameleoon.eu *.experimentation.dev *.openstreetmap.org https://maps.googleapis.com *.disqus.com 'self' data: *.cookielaw.org/ *.hotjar.com *.clarity.ms *.google.com *.google.fr *.google.de *.googletagmanager.com *.doubleclick.net *.facebook.com *.facebook.net *.criteo.com *.affilae.com *.bing.com *.dialoginsight.com *.mydialoginsight.com *.stripe.com *.worldline-solutions.com *.wonderpush.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.hsforms.net *.hsforms.com *.freshchat.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://chomette.my.join-stories.com *.kameleoon.com *.kameleoon.io *.kameleoon.eu *.experimentation.dev *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ *.disqus.com *.gstatic.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com *.cookielaw.org/ *.hotjar.com *.clarity.ms *.google.fr *.google.de *.googletagmanager.com *.facebook.com *.facebook.net *.criteo.com *.affilae.com *.bing.com *.dialoginsight.com *.mydialoginsight.com *.worldline-solutions.com *.paypal.com *.wonderpush.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.freshchat.com *.kameleoon.com *.kameleoon.io *.kameleoon.eu *.experimentation.dev *.fontawesome.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.monetico-services.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.freshchat.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://meas.join-stories.com https://videos.join-stories.com *.kameleoon.com *.kameleoon.io *.kameleoon.eu *.experimentation.dev *.openstreetmap.org https://maps.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com *.cookielaw.org/ *.onetrust.com/ *.hotjar.com *.clarity.ms *.google.fr *.google.de *.googletagmanager.com *.doubleclick.net *.facebook.com *.facebook.net *.criteo.com *.affilae.com *.bing.com *.bing.net *.dialoginsight.com *.mydialoginsight.com *.worldline-solutions.com *.wonderpush.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://connect.facebook.net https://pagead2.googlesyndication.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://ep2.adtrafficquality.google https://ws.sharethis.com https://t.sharethis.com https://www.instagram.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://ws.sharethis.com https://cdnjs.cloudflare.com; img-src 'self' data: https://www.google-analytics.com https://maps.gstatic.com https://www.facebook.com https://www.google.com https://www.google.cl https://ep1.adtrafficquality.google https://pagead2.googlesyndication.com https://www.googleadservices.com https://update.dotnetnuke.com https://www.googletagmanager.com; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; frame-src 'self' https://www.google.com/recaptcha/ https://googleads.g.doubleclick.net https://www.instagram.com https://ep2.adtrafficquality.google https://www.google.com https://t.sharethis.com https://ws.sharethis.com; connect-src 'self' https://www.google.com https://analytics.google.com https://www.google-analytics.com https://ep1.adtrafficquality.google https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.cl https://l.sharethis.com https://ad.doubleclick.net https://pagead2.googlesyndication.com; 1
base-uri 'none'; object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-TbPef9VtA0TKe6rk0ZSRXA==' 1
default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https://cdnapisec.kaltura.com/ https://pay.instamed.com;script-src 'nonce-c2c1891993c5472caf8d1d15add38360' https://www.hoagconnect.org 'self';img-src https://* 'self' blob: data:;connect-src 'self' epichttp:;style-src https://www.hoagconnect.org 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
font-src fonts.gstatic.com use.typekit.net *.googleapis.com 'self' data: js.klevu.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.authorize.net *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de 'self' www.google.com 'self' *.affirm.com 'self' *.vimeo.com 'self' *.sharethis.mgr.consensu.org 'self' *.sharethis.com drive.google.com *.wufoo.com *.paypal.com *.braintreegateway.com *.dnky.co *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com hello.zonos.com js.klevu.com *.paypal.com cdn.datamanager.arinet.com *.trackedlink.net *.ddlnk.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de chimpstatic.com *.adroll.com *.adroll.mgr.consensu.org *.facebook.net *.affirm.com www.google.com *.sharethis.com *.wufoo.com *.linkedin.com *.licdn.com js.klevu.com hello.zonos.com cdn.iglobalstores.com assets.shipperhq.com *.paypal.com *.trackedlink.net *.dnky.co js-agent.newrelic.com bam.nr-data.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com maps.googleapis.com https://hello.zonos.com https://www.rrproducts.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com 'self' *.sharethis.com *.licdn.com js.klevu.com assets.shipperhq.com *.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com performance.typekit.net *.magento-datasolutions.com *.magento-ds.com *.adobe.io maps.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.affirm.com *.adroll.com *.doubleclick.net 'self' *.sharethis.com hello.zonos.com rms.shipperhq.com wss://rms.shipperhq.com *.braintree-api.com *.paypal.com *.braintreegateway.com *.dotdigital.com *.ksearchnet.com bam.nr-data.net *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google.com google.com ovs.shipperhq.com wss://rms.shipperhq.com/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.example.com/; report-to report-endpoint; 1
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://gumball.fm https://static.gumballcdn.com https://js.sentry-cdn.com https://browser.sentry-cdn.com https://static.cloudflareinsights.com https://www.googletagmanager.com https://www.google-analytics.com https://www.youtube.com https://js.stripe.com;style-src 'self' 'unsafe-inline' https://gumball.fm https://static.gumballcdn.com https://fonts.googleapis.com https://themes.googleusercontent.com;font-src 'self' https://fonts.gstatic.com data:;img-src 'self' data: https:;connect-src 'self' https://static.gumballcdn.com wss://gumball.fm https://*.sentry.io https://*.ingest.sentry.io https://*.transloadit.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://stats.g.doubleclick.net https://www.google.com https://www.googletagmanager.com https://www.googleadservices.com https://itunes.apple.com https://static.cloudflareinsights.com https://api.stripe.com;worker-src 'self' blob:;media-src 'self' blob: https://static.gumballcdn.com https://*.s3.amazonaws.com https://storage.googleapis.com https://*.r2.dev;frame-ancestors 'self';frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://www.youtube.com;base-uri 'self';object-src 'none';form-action 'self';report-uri https://o110026.ingest.sentry.io/api/242169/security/?sentry_key=be9cbf6e8a4746bd96d1a8f86f21c73d 1
default-src 'self'; base-uri 'self'; child-src 'self' *.youtube-nocookie.com *.twitter.com *.gstatic.com *.googleapis.com *.googletagmanager.com 3f5l8ze0o4j2m.cloudfront.net *.youtube.com *.youtube-no-cookie.com *.ytimg.com *.google.com www.google.com https://player.vimeo.com https://www.facebook.com https://staticxx.facebook.com; connect-src 'self' *.twimg.com *.twitter.com *.gstatic.com *.googleapis.com *.google-analytics.com https://www.facebook.com/tr http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com https://heatmaps.monsido.com https://stats.g.doubleclick.net/ https://analytics.tiktok.com/ https://px.ads.linkedin.com https://region1.analytics.google.com https://www.google.com https://analytics.google.com a.eu.silktide.com a.us.silktide.com https://js-ap1.hscollectedforms.net https://forms-ap1.hscollectedforms.net; frame-src 'self' https://staticcdn.co.nz https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io *.youtube-nocookie.com *.twitter.com *.gstatic.com *.googleapis.com *.googletagmanager.com 3f5l8ze0o4j2m.cloudfront.net *.youtube.com *.youtube-no-cookie.com *.ytimg.com *.google.com www.google.com https://player.vimeo.com https://www.facebook.com https://staticxx.facebook.com https://optimize.google.com https://tr.snapchat.com https://bid.g.doubleclick.net/ https://td.doubleclick.net; frame-ancestors 'self'; font-src 'self' *.twimg.com *.twitter.com *.gstatic.com *.googleapis.com fonts.gstatic.com fonts.googleapis.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://use.typekit.net data: 'self'; form-action 'self' *.twitter.com https://www.facebook.com/tr/ https://connect.facebook.com https://tr.snapchat.com/; img-src 'self' *.twimg.com *.twitter.com *.gstatic.com *.googleapis.com *.google-analytics.com *.googletagmanager.com d3f5l8ze0o4j2m.cloudfront.net *.ytimg.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://staticcdn.co.nz/embed/close.png https://optimize.google.com https://p.typekit.net https://px.ads.linkedin.com https://bat.bing.com/ https://p.adsymptotic.com/ https://www.google.com/ https://www.google.co.nz/ https://www.google.co.uk/ https://tracking.monsido.com/ https://cdn.monsido.com/ https://www.linkedin.com/ https://dc.ads.linkedin.com/ data: https://www.facebook.com https://www.xn--tepkenga-szb.ac.nz https://px4.ads.linkedin.com https://i.vimeocdn.com https://forms-ap1.hsforms.com https://track-ap1.hubspot.com https://www.google.com.au/; manifest-src 'self'; media-src 'self'; object-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.jquery.com *.staticcdn.co.nz https://use.typekit.net https://cdnjs.cloudflare.com http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://static.hotjar.com/* d3f5l8ze0o4j2m.cloudfront.net https://connect.facebook.net https://staticcdn.co.nz https://www.googletagmanager.com https://www.google-analytics.com https://www.google-analytics.com/analytics.js https://stats.g.doubleclick.net https://optimize.google.com https://snap.licdn.com/li.lms-analytics/insight.min.js https://bat.bing.com https://46e2fa37ca504ebc8217a70ea9c22c81.js.ubembed.com/ https://sc-static.net/ https://www.nmit.ac.nz/ https://app-script.monsido.com/ https://assets.ubembed.com/ https://vxml4.plavxml.com/ https://heatmaps.monsido.com/ https://cdn.monsido.com/ https://analytics.tiktok.com/ https://googleads.g.doubleclick.net/ https://www.googleadservices.com/ https://tags.tiqcdn.com https://analytics.silktide.com https://snap.licdn.com https://js-ap1.hs-scripts.com https://js-ap1.hscollectedforms.net https://js-ap1.hs-banner.com https://js-ap1.hs-analytics.net; style-src 'self' 'unsafe-inline' *.twimg.com *.twitter.com *.gstatic.com *.googleapis.com fonts.googleapis.com https://optimize.google.com/optimize/editor/css/css.css https://optimize.google.com https://www.nmit.ac.nz/themes/nmit/css/cookieconsent.min.css; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com www.facebook.com platform.twitter.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com www.xtento.com googleadservices.com *.googleadservices.com google-analytics.com *.google-analytics.com googletagmanager.com googleapis.com *.googleapis.com gstatic.com *.gstatic.com facebook.com *.facebook.com paypal.com sandbox.paypal.com *.sandbox.paypal.com paypalobjects.com *.paypalobjects.com stripe.com *.stripe.com js.stripe.com *.js.stripe.com vimeo.com *.vimeo.com wetanz.com *.wetanz.com wetanz.co.nz *.wetanz.co.nz xtento.com *.xtento.com rum.hlx.page *.rum.hlx.page ddlnk.net *.ddlnk.net freshworks.com *.freshworks.com widget.freshworks.com *.widget.freshworks.com *.fw-cdn.com/20195190/105526.js *.freshchat.com googlesyndication.com *.googlesyndication.com google.co.nz *.google.co.nz doubleclick.net staticcdn.co.nz *.staticcdn.co.nz newrelic.com *.newrelic.com nr-data.net *.nr-data.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.trackedlink.net *.ddlnk.net www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com xtento.com cdn.xtento.com google.com googleadservices.com *.googleadservices.com google-analytics.com googletagmanager.com googleapis.com *.googleapis.com gstatic.com facebook.com paypal.com sandbox.paypal.com *.sandbox.paypal.com paypalobjects.com *.paypalobjects.com stripe.com *.stripe.com js.stripe.com *.js.stripe.com vimeo.com *.vimeo.com wetanz.com *.wetanz.com wetanz.co.nz *.wetanz.co.nz *.xtento.com rum.hlx.page *.rum.hlx.page ddlnk.net freshworks.com *.freshworks.com widget.freshworks.com *.widget.freshworks.com *.fw-cdn.com/20195190/105526.js *.freshchat.com googlesyndication.com *.googlesyndication.com google.co.nz *.google.co.nz doubleclick.net staticcdn.co.nz *.staticcdn.co.nz newrelic.com *.newrelic.com nr-data.net *.nr-data.net shielded.co.nz data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com connect.facebook.net twitter.com platform.twitter.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com *.maxmind.com www.xtento.com cdn.xtento.com googleadservices.com google-analytics.com *.google-analytics.com googletagmanager.com googleapis.com *.googleapis.com gstatic.com *.gstatic.com facebook.com *.facebook.com paypal.com *.paypal.com sandbox.paypal.com *.sandbox.paypal.com paypalobjects.com *.paypalobjects.com stripe.com *.stripe.com js.stripe.com *.js.stripe.com *.vimeo.com wetanz.com *.wetanz.com wetanz.co.nz *.wetanz.co.nz xtento.com *.xtento.com rum.hlx.page *.rum.hlx.page ddlnk.net freshworks.com *.freshworks.com widget.freshworks.com *.widget.freshworks.com *.fw-cdn.com/20195190/105526.js *.freshchat.com googlesyndication.com *.googlesyndication.com google.co.nz *.google.co.nz doubleclick.net staticcdn.co.nz *.staticcdn.co.nz newrelic.com nr-data.net 'sha256-3cz5CwUGJYaBgvqL7Zow6rxNqvIMCo5+8dkfoFVMBRk=' 'sha256-2+j+o/gAIC5crSeZ6lvP7/Lg0USsV2TyK+VVNa6mh5E=' 'sha256-FsmI1rigSCVcHx/L9zqM5LWHjxehiykTKGBRm/DTmyk=' 'sha256-hCuBtAIskDfn0gXz8OivmweQ4fwkaWNOf3u6XRliMMM=' 'sha256-YKg6IezlbqH2UnSB2FT6WYio5ygNuGIz9TGACiE3EkE=' 'sha256-OevdvVOYTLZg29yLx6RDndbXcueWzP37gr1xAOMH6hk=' 'sha256-AnufUBKr2fT9bEGWf4oPXRN94rLrWN6qkt8pFw3Hq8s=' 'sha256-3cz5CwUGJYaBgvql7Zow6rxNqvIMCo5+8dkfofVMbRk=' https://www.wetanz.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com webchat.dotdigital.com webchat.staging.dotdigital.com maxcdn.bootstrapcdn.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com *.fw-cdn.com/20195190/105526.js https://widget.freshworks.com *.freshchat.com googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com *.mmapiws.com googleadservices.com *.googleadservices.com google-analytics.com googletagmanager.com *.googletagmanager.com googleapis.com *.googleapis.com gstatic.com *.gstatic.com facebook.com *.facebook.com paypal.com sandbox.paypal.com *.sandbox.paypal.com paypalobjects.com *.paypalobjects.com stripe.com *.stripe.com js.stripe.com *.js.stripe.com *.vimeo.com wetanz.com *.wetanz.com wetanz.co.nz *.wetanz.co.nz xtento.com *.xtento.com rum.hlx.page *.rum.hlx.page ddlnk.net *.ddlnk.net freshworks.com *.freshworks.com widget.freshworks.com *.widget.freshworks.com *.fw-cdn.com/20195190/105526.js *.freshchat.com googlesyndication.com *.googlesyndication.com google.co.nz *.google.co.nz doubleclick.net staticcdn.co.nz *.staticcdn.co.nz newrelic.com nr-data.net t.co 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *.sitevibes.com sitevibes.com preprod-maint.famous-smoke.com https://www.google.com/ https://cdn.noibu.com/ https://cdn.izooto.com/ *.paypal.com *.googletagmanager.com *.noibu.com *.klevu.com *.izooto.com *.matomo.com *.zdassets.com; worker-src *.famous-smoke.com; report-uri /.webscale/csp-report 1
default-src 'self';     script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://checkout.stripe.com https://*.paypal.com https://*.paypalobjects.com https://www.gstatic.com https://www.googletagmanager.com https://*.google-analytics.com https://cdn.mxpnl.com https://cdn.retently.com/public/ https://www.google.com/recaptcha/;     style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://pro.fontawesome.com https://www.paypalobjects.com https://*.stripe.com;     font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://pro.fontawesome.com;     img-src 'self' data: https://*.stripe.com https://www.paypalobjects.com https://www.paypal.com https://www.gravatar.com https://www.googletagmanager.com;     frame-src 'self' https://www.google.com https://js.stripe.com https://checkout.stripe.com https://hooks.stripe.com https://*.paypal.com https://*.paypalobjects.com;     frame-ancestors 'self';     form-action 'self' https://www.paypal.com;     connect-src 'self' https://api.stripe.com https://checkout.stripe.com https://*.google-analytics.com https://www.googletagmanager.com https://app.retently.com/api/ https://*.paypal.com https://*.paypalobjects.com https://*.venmo.com;     base-uri 'self';     object-src 'none';     upgrade-insecure-requests;     report-uri https://csp-reports.quick.net.au/csp-reports.php;     report-to csp-endpoint; 1
font-src *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.googletagmanager.com *.grudado.com.br *.doubleclick.net *.paypal.com *.mercadolibre.com *.pinterest.com *.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.addthis.com *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.googletagmanager.com *.grudado.com.br *.facebook.com *.facebook.net *.google.com *.google.com.br *.mercadolibre.com *.mercadolivre.com *.mercadolivre.com.br *.doubleclick.net *.bing.com *.pinimg.com *.pinterest.com *.mercadopago.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://images.unsplash.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com *.hsforms.net *.hsforms.com 'self' data: www.google.com.ua *.gstatic.com www.xtento.com cdn.xtento.com https://load.sgtm.grudado.com.br data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://cdn.mixpnl.com https://analytics.tiktok.com *.clarity.ms *.logr-ingest.com *.googleadservices.com *.google-analytics.com *.paypalobjects.com *.paypal.com *.vimeo.com *.video.google.com *.facebook.net *.doubleclick.net *.mlstatic.com *.mercadopago.com *.bing.com *.pinimg.com *.sgtm.grudado.com.br ct.pinterest.com *.mercadolibre.com.br *.mercadopago.com.br *.mercadolivre.com.br google.com *.facebook.com  'unsafe-inline'  *.mercadolivre.com *.mercadolibre.com https://mercadopago.com.br https://maps.googleapis.com https://player.vimeo.com s7.addthis.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.avada.io *.shopify.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com https://www.googletagmanager.com tagmanager.google.com unpkg.com www.xtento.com cdn.xtento.com https://load.sgtm.grudado.com.br 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.googleapis.com *.gstatic.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://*.mixpanel.com https://cdn.growthbook.io https://analytics.tiktok.com https://*.clarity.ms https://*.grudado.com.br https://viacep.com.br *.doubleclick.net *.google.com *.mercadopago.com *.mercadolibre.com *.pinterest.com *.pinpiaa.com *.bing.com *.mercadolibre.com.br *.mercadopago.com.br *.mercadolivre.com.br google.com *.facebook.com *.mercadolivre.com https://mercadopago.com.br *.mlstatic.com https://maps.googleapis.com https://player.vimeo.com ekr.zdassets.com/ https://get.geojs.io *.avada.io t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.facebook.net https://load.sgtm.grudado.com.br 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; connect-src 'self' https://*.supabase.co; img-src 'self' data: https:; style-src 'self' 'unsafe-inline'; script-src 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https:; connect-src 'self' https:; frame-src https:; object-src 'none'; base-uri 'self'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; manifest-src 'self'; worker-src 'self'; media-src 'self'; script-src 'self' 'unsafe-inline' https://js.stripe.com https://*.js.stripe.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://bat.bing.com https://maps.googleapis.com https://cdn.mxpnl.com https://static.zdassets.com https://ekr.zdassets.com https://assets.churnkey.co; style-src 'self' 'unsafe-inline'; font-src 'self' https://cdn.jsdelivr.net; connect-src 'self' https://api.stripe.com https://link.com https://*.link.com https://maps.googleapis.com https://api-js.mixpanel.com https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://*.doubleclick.net https://www.googleadservices.com https://www.google.com https://bat.bing.com https://api.churnkey.co https://ekr.zdassets.com https://jaguar.rocket-resume.com https://taxonomy.rocket-resume.com https://edge.rocket-resume.com; frame-src 'self' https://js.stripe.com https://*.js.stripe.com https://hooks.stripe.com https://link.com https://*.link.com https://www.googletagmanager.com https://*.churnkey.co; child-src 'self' https://js.stripe.com https://*.js.stripe.com https://hooks.stripe.com https://link.com https://*.link.com https://www.googletagmanager.com https://*.churnkey.co; img-src 'self' data: blob: https://*.stripe.com https://*.link.com https://maps.googleapis.com https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://bat.bing.com https://i.rocket-resume.com https://*.churnkey.co; report-uri /api/csp-report; report-to csp-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://accounts.google.com https://connect.facebook.net https://cdn.roomvo.com https://bat.bing.com https://snap.licdn.com https://*.doubleclick.net https://*.clarity.ms https://www.youtube.com; style-src 'self' 'unsafe-inline' https://accounts.google.com; img-src 'self' data: blob: https://cdn.remax.co.za https://s3-eu-west-1.amazonaws.com https://s3.eu-west-1.amazonaws.com https://za.fusionagency.net https://fusionstoragelive.blob.core.windows.net https://za.fusionstoragelive.blob.core.windows.net https://*.tile.openstreetmap.org https://www.facebook.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.google.co.za https://px.ads.linkedin.com https://px4.ads.linkedin.com https://cdnjs.cloudflare.com https://www.googleadservices.com https://bat.bing.com https://*.roomvo.com; font-src 'self' data:; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://www.googletagmanager.com https://www.facebook.com https://accounts.google.com https://*.roomvo.com https://www.google.com https://www.google.co.za https://www.youtube.com https://*.doubleclick.net https://www.googleadservices.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://*.clarity.ms https://bat.bing.com https://bat.bing.net https://services.betterlife.co.za; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://*.roomvo.com https://www.google.com https://www.recaptcha.net https://www.facebook.com https://accounts.google.com https://*.doubleclick.net https://www.googletagmanager.com; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com; frame-ancestors 'none'; report-uri /api/csp-report 1
script-src 'unsafe-inline' 'unsafe-eval'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=sbyUHRAn7idVNN1Yl3gHvvLYSZMD38OCflib84MlPho-1789167764.9862778-1.0.1.1-YRc2KYJ7PH.2DUH5_UrM1mX_UJ_b6YvZ1DbA.uxMoRuTRgg2IJ2JNd5A6ju2Lhk1N_E7MlUVZ7qKwNys2fw62hJxuaXojmsgssL3knoXvWI8__uXUOxVjc0xHpCsaZQMFweY51SxoO_8G3Mu.G_bM75dqKl72OMd3apgAqXmSFC3MOZGGg9V7No92dpNCvt7; report-to cf-csp-endpoint 1
base-uri 'self'; frame-ancestors 'self'; child-src 'self'; connect-src 'self' ws: https://www.psychologytools.com https://*.psychologytools.com https://a.optinmonster.com https://a.omappapi.com https://api.omappapi.com https://checkout.stripe.com https://api.stripe.com https://maps.googleapis.com https://plausible.io https://hemsync.clickagy.com https://aorta.clickagy.com https://js.zi-scripts.com https://arclight.vimeo.com https://lensflare.vimeo.com https://ws-assets.zoominfo.com http://ws-assets.zoominfo.com https://ws.zoominfo.com http://ws.zoominfo.com; default-src 'self'; font-src 'self' https://fonts.gstatic.com https://www.psychologytools.com https://*.psychologytools.com https://fonts.bunny.net data:; form-action 'self' https://www.psychologytools.com https://*.psychologytools.com https://app.au.psychologytools.com https://app.us.psychologytools.com https://app.uk.psychologytools.com https://app.ca.psychologytools.com https://app.eu.psychologytools.com; frame-src 'self' https://www.psychologytools.com https://*.psychologytools.com https://checkout.stripe.com https://connect-js.stripe.com https://js.stripe.com https://*.js.stripe.com https://hooks.stripe.com https://www.youtube.com https://hemsync.clickagy.com https://player.vimeo.com; img-src 'self' data: https://www.psychologytools.com https://*.psychologytools.com https://media-engine-production-public.s3.eu-west-2.amazonaws.com https://*.stripe.com https://gravatar.com https://*.cloudfront.net; manifest-src 'self'; media-src 'self'; object-src 'none'; script-src  'nonce-9H5Wb5BSLoJ5iYNwwJr3qITK9UFqBA7V' 'self' 'unsafe-eval' https://www.psychologytools.com https://*.psychologytools.com https://checkout.stripe.com https://connect-js.stripe.com https://js.stripe.com https://*.js.stripe.com https://maps.googleapis.com https://js.zi-scripts.com https://ws.zoominfo.com https://tags.clickagy.com https://cdn.jsdelivr.net blob:; script-src-attr 'self' 'unsafe-inline' https://www.psychologytools.com https://*.psychologytools.com https://cdn.jsdelivr.net https://media-engine-production-public.s3.eu-west-2.amazonaws.com; script-src-elem 'self' 'unsafe-inline' https://www.psychologytools.com https://*.psychologytools.com https://a.omappapi.com https://cdn.jsdelivr.net https://plausible.io https://ws-assets.zoominfo.com https://js.zi-scripts.com blob:; style-src 'self' 'unsafe-inline' https://www.psychologytools.com https://*.psychologytools.com https://cdn.jsdelivr.net; style-src-attr 'self' 'unsafe-inline' https://www.psychologytools.com https://*.psychologytools.com https://cdn.jsdelivr.net; style-src-elem 'self' 'unsafe-inline' https://www.psychologytools.com https://*.psychologytools.com https://fonts.googleapis.com https://a.omappapi.com https://cdn.jsdelivr.net https://fonts.bunny.net; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com *.klarnacdn.net *.klevu.com *.ksearchnet.com fonts.googleapis.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://seo.mageplaza.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.klarna.com *.iubenda.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.feedaty.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.iubenda.com *.klevu.com *.ksearchnet.com https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.salesmanago.pl *.salesmanago.es *.salesmanago.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.feedaty.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.iubenda.com *.klarnaservices.com js.klevu.com *.ksearchnet.com *.avada.io *.shopify.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com tracking.trovaprezzi.it www.trovaprezzi.it https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.feedaty.com *.fontawesome.com downloads.mailchimp.com *.klarnacdn.net *.klevu.com *.ksearchnet.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.salesmanago.pl *.salesmanago.es *.salesmanago.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.feedaty.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.iubenda.com *.klarnaservices.com *.klarna.com *.klevu.com *.ksearchnet.com https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com klarna.com *.link.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://*.uestra.de https://cloud.ccm19.de; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cloud.ccm19.de https://gvh.demo.hafas.cloud https://gvh.hafas.de https://*.uestra.de https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: https://img.youtube.com https://gvh.demo.hafas.cloud https://gvh.hafas.de https://*.uestra.de https://cloud.ccm19.de https://elma.gvh.de https://uestra-produktion.pi-asp.de/ https://www.facebook.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://google.com https://www.google.de; base-uri 'self' https://*.uestra.de; frame-src 'self' blob: https://*.youtube.com/ https://gvh.demo.hafas.cloud https://gvh.hafas.de https://abo.gvh.de https://cloud.ccm19.de https://deutschlandticket.gvh.de https://transport.novafind.eu/ https://uestra-produktion.pi-asp.de/ https://www.googletagmanager.com; media-src 'self' blob:; style-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://cloud.ccm19.de https://*.hafas.cloud https://*.hafas.de https://elma.gvh.de https://stats.uestra.de 'report-sample'; font-src 'self' data: https://fonts.gstatic.com https://gvh.demo.hafas.cloud https://gvh.hafas.de https://stats.uestra.de https://elma.gvh.de https://uestra-produktion.pi-asp.de/; connect-src 'self' https://gvh.demo.hafas.cloud https://gvh.hafas.de https://cloud.ccm19.de https://stats.uestra.de https://elma.gvh.de https://www.facebook.com https://*.google-analytics.com https://*.analytics.google.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://www.google.com https://google.com https://www.google.de; object-src 'self' blob: https://*.uestra.de; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' https://cloud.ccm19.de https://gvh.demo.hafas.cloud https://gvh.hafas.de https://*.uestra.de https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://relaunch.uestra.de https://*.webit.de https://*.hafas.cloud https://*.hafas.de https://elma.gvh.de https://connect.facebook.net 'report-sample'; style-src-elem 'self' 'unsafe-inline' https://www.uestra.de https://relaunch.uestra.de https://stats.uestra.de https://gvh.demo.hafas.cloud https://gvh.hafas.de https://cloud.ccm19.de https://elma.gvh.de 'report-sample'; frame-ancestors 'self' https://*.uestra.de https://gvh.demo.hafas.cloud https://gvh.hafas.de https://uestra-produktion.pi-asp.de/; form-action 'self'; report-uri https://www.uestra.de/@http-reporting?csp=report&requestTime=1789286553304762&requestHash=c701d3d853f77b8b44dbaff59bc96aa562bdd121 1
script-src 'self' https://acsbapp.com https://cdn.acsbapp.com https://api.company-target.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://munchkin.marketo.net https://engage.pcl.com https://snap.licdn.com https://connect.facebook.net https://view.ceros.com https://sc.lfeeder.com https://www.clarity.ms https://scripts.clarity.ms https://directline.botframework.com https://q.clarity.ms https://googleads.g.doubleclick.net https://www.youtube.com https://jnn-pa.googleapis.com https://pcl-prd-hrchatbot-web.azurewebsites.net https://pcl-stg-hrchatbot-web.azurewebsites.net https://pcl-dev-hrchatbot-bsweb.azurewebsites.net https://cdn.botframework.com https://pcl.egnyte.com https://urldefense.com https://www.logicmonitor.com https://docs.rapid7.com https://www.google-analytics.com https://analytics.google.com https://www.google.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://assets.ceros.site https://*.ceros.site; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://engage.pcl.com; img-src 'self' data: https: https://engage.pcl.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://view.ceros.com https://assets.ceros.site https://*.ceros.site https://stats.g.doubleclick.net https://www.google-analytics.com https://analytics.google.com https://www.google.com https://www.google.ca https://www.google.com.au https://adservice.google.com https://cct.google https://pagead2.googlesyndication.com https://www.googleadservices.com https://px.ads.linkedin.com https://www.facebook.com https://www.clarity.ms https://q.clarity.ms https://munchkin.marketo.net https://engage.pcl.com https://sc.lfeeder.com https://snap.licdn.com https://connect.facebook.net https://cdn.acsbapp.com https://directline.botframework.com wss://directline.botframework.com https://pcl-prd-hrchatbot-web.azurewebsites.net https://pcl-stg-hrchatbot-web.azurewebsites.net https://pcl-dev-hrchatbot-bsweb.azurewebsites.net; object-src 'none'; base-uri 'self'; form-action 'self' https://engage.pcl.com; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://view.ceros.com https://assets.ceros.site https://pcl.egnyte.com https://*.ceros.site https://pclindustrial.github.io https://engage.pcl.com https://ade.googlesyndication.com https://player.flipsnack.com; frame-ancestors 'self'; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval'; script-src 'self' cdn.globalpay.com.co cdnjs.cloudflare.com https://cdn.ampproject.org https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://polyfill-fastly.io https://unpkg.com https://www.google.com; script-src-attr 'self'; style-src 'self' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src-attr 'self'; frame-ancestors 'self' 1
script-src https://www.charly.com/ 'nonce-cHh0Y20xOXcycnBwbDFqdTNidXY2YWV2ajh6OHV2Mm5wcnN5OG5wM2FlbTJm' 'self' 'unsafe-eval' *.adobe.com *.adobe.io *.adobedtm.com *.braintreegateway.com *.magento-datasolutions.com *.magento-ds.com *.newrelic.com *.nr-data.net *.paypal.com *.paypalobjects.com *.search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com *.sentry-cdn.com *.sentry.io *.vimeocdn.com *.youtube.com amcglobal.sc.omtrdc.net cdn.jsdelivr.net/npm/@adobe/ commerce.adobe.net developers.google.com https://h64.online-metrix.net https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ js.magento-datasolutions.com magento-recs-sdk.adobe.net maps.googleapis.com https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com unpkg.com/@adobe/ use.typekit.net vimeo.com www.vimeo.com byspotify.com tiktok.com global-cache.online infird.com gstatic.com paypalobjects.com googleapis.com facebook.net facebook.com connect.facebook.net *.googletagmanager.com *.google-analytics.com *.google.com pinimg.com pinterest.com; style-src 'self' blob: 'unsafe-inline' https://www.charly.com/ 'unsafe-hashes' *.fonts.googleapis.com https://fonts.googleapis.com; img-src data: 'self' https://www.charly.com/ *.google.ie *.paypal.com *.paypalobjects.com *.facebook.com *.facebook.net connect.facebook.net google.com gstatic.com paypal.com flagcdn.com *.googletagmanager.com wolfcharly.com mcstaging.wolfcharly.com googleapis.com google.cctld com.mxmedia *.paypalobjects.com *.maps.gstatic.com *.maps.googleapis.com https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com; object-src 'none'; base-uri 'none'; child-src 'self'; font-src 'self' fonts.gstatic.com use.typekit.net *fonts.googleapis.com https://fonts.gstatic.com cdnfonts.com; frame-src assets.braintreegateway.com *.google.com *.youtube.com *.youtu.be *.vimeo.com *.adobe.com *.braintreegateway.com *.demdex.net fast.amc.demdex.net *.paypal.com *.paypalobjects.com *.youtube-nocookie.com schools-blocked.s3-website-us-east-1.amazonaws.com opendns.com paypal.com doubleclick.net pinterest.com *.googletagmanager.com *.google-analytics.com; report_uri https://82b58f34-a752-41e9-b0d2-7837f734aca7.sansec.watch/; report-to report-endpoint; frame-ancestors 'self' https://www.charly.com/; manifest-src 'self' 'unsafe-inline' https://www.charly.com/; connect-src 'self' https://www.charly.com/ *.adobe.io *.analytics.google.com *.braintreegateway.com 'unsafe-inline' *.magento-datasolutions.com *.magento-ds.com *.newrelic.com *.nr-data.net *.paypal.com *.paypalobjects.com *.search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com *.sentry-cdn.com *.sentry.io *.snplow.net *.telemetry-dev.adobe.io *.telemetry.adobe.io amcglobal.sc.omtrdc.net api.magento.com commerce.adobedc.net dpm.demdex.net maps.googleapis.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com search-admin-ui-qa.magento-datasolutions.com search-admin-ui.magento-ds.com www.facebook.com; worker-src 'self'; 1
default-src 'self' *.localphone.com *.localphone.co.uk; img-src * data:; child-src *; frame-src *; script-src 'self' 'unsafe-inline' *.localphone.com https://js.stripe.com https://*.google.com https://ajax.googleapis.com http://www.google-analytics.com https://*.gstatic.com https://*.g.doubleclick.net https://www.googleadservices.com https://www.facebook.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' *.localphone.com https://*.googleapis.com https://cdn.jsdelivr.net; font-src 'self' data: fonts.gstatic.com https://sxt.cdn.skype.com; connect-src 'self' *.localphone.com; 1
font-src fonts.gstatic.com use.typekit.net *.gstatic.com data: d1hcctelsiwksg.cloudfront.net mcstaging-cdn.lilyanncabinets.com dk5s5cje1o3yr.cloudfront.net *.answerbase.com *.static.klaviyo.com *.static-tracking.klaviyo.com *.klaviyo.com *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.freshmarketer.com *.answerbase.com *.static.klaviyo.com *.static-tracking.klaviyo.com *.klaviyo.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com www.google.com *.certcapture.com *.getbread.com *.breadpayments.com *.rbcpayplan.com *.hotjar.com www.facebook.com *.pinterest.com *.g.doubleclick.net *.zinrelo.com *.google.com *.google.co.in *.freshchat.com *.freshmarketer.com *.adroll.com panorama.2020.net *.ampproject.org *.answerbase.com *.static.klaviyo.com *.static-tracking.klaviyo.com *.klaviyo.com *.lilyanncabinets.com *.lilyanncabinets.local mcstaging.lilyanncabinets.com lilyanncabinets.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com *.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com lilyanncabinets.local t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net data: *.certcapture.com *.getbread.com *.breadpayments.com *.rbcpayplan.com *.visualwebsiteoptimizer.com bat.bing.com *.bing.com www.google.co.in *.facebook.com *.facebook.net *.pinterest.com cdn.pushcrew.com *.magecomp.com *.googletagmanager.com *.shopperapproved.com *.clarity.ms *.lilyanncabinets.com *.cloudfront.net *.amazonaws.com *.adroll.com d1hcctelsiwksg.cloudfront.net mcstaging-cdn.lilyanncabinets.com pixel.rubiconproject.com pixel.advertising.com sync.outbrain.com sync.taboola.com eb2.3lift.com dsum-sec.casalemedia.com image2.pubmatic.com ups.analytics.yahoo.com dk5s5cje1o3yr.cloudfront.net *.ytimg.com *.pinimg.com *.heatmap.it *.gstatic.com maps.googleapis.com *.hotjar.io *.hotjar.com *.answerbase.com *.static.klaviyo.com *.static-tracking.klaviyo.com *.klaviyo.com mcstaging.lilyanncabinets.com lilyanncabinets.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com lilyanncabinets.local livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ www.google.com assets.adobedtm.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com *.getbread.com *.breadpayments.com *.rbcpayplan.com bat.bing.com *.woopra.com chimpstatic.com dev.visualwebsiteoptimizer.com cdn.pushcrew.com connect.facebook.net s.pinimg.com apis.google.com *.freshchat.com *.freshmarketer.com www.gstatic.com *.googletagmanager.com *.clarity.ms *.smartlook.com *.cardinalcommerce.com *.shopperapproved.com *.googlecommerce.com *.zinrelo.com *.cloudfront.net webmoder.space *.adroll.com *.hotjar.com d1hcctelsiwksg.cloudfront.net mcstaging-cdn.lilyanncabinets.com *.pinterest.com dk5s5cje1o3yr.cloudfront.net downloads.mailchimp.com mc.us2.list-manage.com ajax.googleapis.com *.heatmap.it *.fw-cdn.com *.klaviyo.com maps.googleapis.com https://analytics.tiktok.com *.fwusercontent.com *.ampproject.org *.answerbase.com cdn.skypack.dev *.static.klaviyo.com *.static-tracking.klaviyo.com *.cdnjs.cloudflare.com *.ttwstatic.com fw-cdn.com https://s.pinimg.com data-management-external.magento-ds.com *.lilyanncabinets.local *.lilyanncabinets.com mcstaging.lilyanncabinets.com lilyanncabinets.com *.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.list-manage.com *.googleapis.com *.google.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com lilyanncabinets.local *.magento-datasolutions.com *.magento-ds.com *.certcapture.com cdn.pushcrew.com *.freshchat.com *.freshmarketer.com d1hcctelsiwksg.cloudfront.net mcstaging-cdn.lilyanncabinets.com *.adroll.com *.pinterest.com dk5s5cje1o3yr.cloudfront.net downloads.mailchimp.com mc.us2.list-manage.com *.hotjar.io *.hotjar.com *.answerbase.com *.static.klaviyo.com *.static-tracking.klaviyo.com *.klaviyo.com *.ttwstatic.com *.shopperapproved.com *.lilyanncabinets.com mcstaging.lilyanncabinets.com lilyanncabinets.com *.gstatic.com *.fontawesome.com https://static.klaviyo.com *.googleapis.com *.google.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com lilyanncabinets.local https://lilyanncabinets.com *.cdninstagram.com *.amazonaws.com d1hcctelsiwksg.cloudfront.net mcstaging-cdn.lilyanncabinets.com *.lilyanncabinets.com dk5s5cje1o3yr.cloudfront.net *.answerbase.com *.static.klaviyo.com *.static-tracking.klaviyo.com *.klaviyo.com mcstaging.lilyanncabinets.com lilyanncabinets.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com lilyanncabinets.local *.lilyanncabinets.com mcstaging.lilyanncabinets.com lilyanncabinets.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com lilyanncabinets.local livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com performance.typekit.net *.magento-datasolutions.com *.magento-ds.com *.adobe.io *.certcapture.com *.getbread.com *.breadpayments.com *.rbcpayplan.com *.klaviyo.com *.visualwebsiteoptimizer.com *.clarity.ms ct.pinterest.com *.doubleclick.net *.cardinalcommerce.com *.google-analytics.com *.smartlook.cloud *.smartlook.com *.demdex.net *.chimpstatic.com *.facebook.com *.woopra.com *.hotjar.com *.hotjar.io ws34.hotjar.com *.adroll.com *.pinterest.com d1hcctelsiwksg.cloudfront.net mcstaging-cdn.lilyanncabinets.com *.lilyanncabinets.com *.lilyanncabinets.local dk5s5cje1o3yr.cloudfront.net *.freshmarketer.com maps.googleapis.com ws23.hotjar.com *.tiktok.com *.fw-cdn.com *.fwusercontent.com *.ampproject.org *.answerbase.com *.google.co.in *.googleadservices.com *.algolia.io prod-init.100ms.live wss://*.100ms.live wss://rts-us-fcht.freshworksapi.com *.static.klaviyo.com *.static-tracking.klaviyo.com *.app.zinrelo.com wss://*.hotjar.com www.google.com https://google.com bat.bing.com *.bing.com *.breadgateway.net data-management-external.magento-ds.com mcstaging.lilyanncabinets.com lilyanncabinets.com *.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://dpm.demdex.net https://www.google.com https://www.gstatic.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.google.com google.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com lilyanncabinets.local *.getbread.com *.chimpstatic.com *.cloudfront.net *.adroll.com *.pinterest.com *.klaviyo.com *.hotjar.io *.hotjar.com ws23.hotjar.com *.fw-cdn.com *.ampproject.org *.answerbase.com *.static.klaviyo.com *.static-tracking.klaviyo.com *.lilyanncabinets.com mcstaging.lilyanncabinets.com lilyanncabinets.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://js.stripe.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://*.stripe.com https:; font-src 'self' data:; connect-src 'self' https://*.upperlevel.com https://api.stripe.com https://www.google-analytics.com https://analytics.google.com https://*.google-analytics.com https://www.googletagmanager.com https://www.google.com; frame-src 'self' https://js.stripe.com https://hooks.stripe.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self' https://portal.upperlevel.com; object-src 'none'; upgrade-insecure-requests; report-uri https://admin.upperlevel.com/api/v1/csp-report 1
base-uri 'self'; default-src 'self' https://*.concern.net https://*.concern.org.uk https://*.systemseed.host https://*.google.com https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.cookiebot.com https://*.stripe.com https://*.sociablekit.com https://*.rollbar.com https://*.raisely.com https://*.fundraiseup.com https://*.paypal.com https://*.paypalobjects.com https://*.autoaddress.ie https://maxcdn.bootstrapcdn.com 'nonce-aYtb/cGE3Oerypbqijh05w==' 'strict-dynamic' https:; connect-src 'self' https: wss:; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data:; font-src 'self' https: data:; object-src 'none'; frame-ancestors 'self'; upgrade-insecure-requests; block-all-mixed-content; form-action 'self' https://*.facebook.com; frame-src 'self' https:; report-uri https://browser-intake-datadoghq.eu/api/v2/logs?dd-api-key=pub91b897b2a14e748cb0371152f548c32c&dd-evp-origin=content-security-policy&ddsource=csp-report-IE-v5 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' https://app.cal.com https://www.googletagmanager.com 'sha256-U2x7mAFBVeRwuqXpThlPTD1AsJL2JD5g8RM2cmuddHY='; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self' data:; connect-src 'self' https://analytics.google.com https://stats.g.doubleclick.net; frame-src https://app.cal.com https://www.youtube-nocookie.com; manifest-src 'self' 1
script-src https://www.charly.com/ 'nonce-Z2pnY3g0OG56d3l3czBjMmkyMGJlZjVndXNmaTVkNGFwbXUybGtzeWl4MXN4' 'self' 'unsafe-eval' 'unsafe-inline' *.adobe.com *.adobe.io *.adobedtm.com *.braintreegateway.com *.magento-datasolutions.com *.magento-ds.com *.newrelic.com *.nr-data.net *.paypal.com *.paypalobjects.com *.search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com *.sentry-cdn.com *.sentry.io *.vimeocdn.com *.youtube.com amcglobal.sc.omtrdc.net cdn.jsdelivr.net/npm/@adobe/ commerce.adobe.net developers.google.com https://h64.online-metrix.net https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com js.magento-datasolutions.com magento-recs-sdk.adobe.net maps.googleapis.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com unpkg.com/@adobe/ use.typekit.net vimeo.com www.vimeo.com byspotify.com tiktok.com global-cache.online infird.com gstatic.com paypalobjects.com googleapis.com facebook.net facebook.com connect.facebook.net *.googletagmanager.com *.google-analytics.com *.google.com pinimg.com pinterest.com; style-src 'self' blob: 'unsafe-inline' https://www.charly.com/ 'unsafe-hashes' *.fonts.googleapis.com https://fonts.googleapis.com; img-src data: 'self' https://www.charly.com/ *.facebook.com *.facebook.net connect.facebook.net google.com gstatic.com paypal.com flagcdn.com *.googletagmanager.com wolfcharly.com mcstaging.wolfcharly.com googleapis.com google.cctld com.mxmedia *.google.ie *.paypal.com *.paypalobjects.com *.maps.gstatic.com *.maps.googleapis.com https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com; object-src 'none'; base-uri 'none'; child-src 'self'; font-src 'self' fonts.gstatic.com use.typekit.net *fonts.googleapis.com https://fonts.gstatic.com cdnfonts.com; frame-src assets.braintreegateway.com *.google.com *.youtube.com *.youtu.be *.vimeo.com *.adobe.com *.braintreegateway.com *.demdex.net fast.amc.demdex.net *.paypal.com *.paypalobjects.com *.youtube-nocookie.com schools-blocked.s3-website-us-east-1.amazonaws.com opendns.com paypal.com doubleclick.net pinterest.com *.googletagmanager.com *.google-analytics.com; report_uri https://5fe7c116-36c5-41f5-b861-bc20b8976b0b.sansec.watch/; report-to report-endpoint; frame-ancestors 'self' https://www.charly.com/; manifest-src 'self' 'unsafe-inline' https://www.charly.com/; connect-src 'self' https://www.charly.com/ *.adobe.io *.analytics.google.com *.braintreegateway.com 'unsafe-inline' *.magento-datasolutions.com *.magento-ds.com *.newrelic.com *.nr-data.net *.paypal.com *.paypalobjects.com *.search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com *.sentry-cdn.com *.sentry.io *.snplow.net *.telemetry-dev.adobe.io *.telemetry.adobe.io amcglobal.sc.omtrdc.net api.magento.com commerce.adobedc.net dpm.demdex.net maps.googleapis.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com search-admin-ui-qa.magento-datasolutions.com search-admin-ui.magento-ds.com www.facebook.com https://*.googleapis.com *.google.com https://*.gstatic.com spotify.com tiktok.com google.com *.google-analytics.com *.google.com global-cache.online paypal.com googleapis.com freeipapi.com pinterest.com www.facebook.com connect.facebook.net; worker-src 'self'; 1
connect-src 'self' cmp.osano.com www.curtmfg.com www.ariesautomotive.com www.luvernetruck.com www.uwsta.com; script-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *.curtmfg.com googleads.g.doubleclick.net www.googletagmanager.com secure.quantserve.com www.google-analytics.com www.google.com connect.facebook.net static.hotjar.com stats.g.doubleclick.net www.gstatic.com maps.googleapis.com www.googleadservices.com rules.quantcount.com *.hotjar.com js-agent.newrelic.com bam-cell.nr-data.net https://cmp.osano.com/* *.ariesautomotive.com *.luvernetruck.com *.uwsta.com cmp.osano.com osano.com www.ariesautomotive.com www.curtmfg.com www.luvernetruck.com www.uwsta.com; worker-src blob: www.curtmfg.com www.ariesautomotive.com www.luvernetruck.com www.uwsta.com; report-uri /.webscale/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; script-src-elem 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src https://www.youtube-nocookie.com https://www.youtube.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 1
default-src 'self'; img-src 'self'; script-src 'unsafe-eval' 'unsafe-inline'; report-uri https://njunktr7.uriports.com/reports/report; report-to default 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.hs-scripts.com *.hs-analytics.net static.hsappstatic.net *.hsforms.net *.hsforms.com *.hsadspixel.net js.hscta.net js-eu1.hscta.net *.hubspot.com *.usemessages.com *.hs-banner.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspot.net *.hscollectedforms.net *.hsleadflows.net *.hubspotfeedback.com feedback.hubapi.com feedback-eu1.hubapi.com www.googletagmanager.com www.google-analytics.com snap.licdn.com genio.co; style-src 'self' 'unsafe-inline' static.hsappstatic.net fonts.googleapis.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net cdn2.hubspot.net genio.co; img-src 'self' data: *.hubspot.com *.hs-scripts.com www.google-analytics.com licdn.com js.hscta.net js-eu1.hscta.net no-cache.hubspot.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspot.net cdn2.hubspot.net *.hsforms.net *.hsforms.com; connect-src 'self' *.hubapi.com js.hscta.net js-eu1.hscta.net *.hubspot.com *.hs-banner.com *.hscollectedforms.net *.hsforms.com *.hs-analytics.net *.azure.com *.posthog.com www.google-analytics.com; frame-src 'self' *.hubspot.com *.hs-sites.com *.hs-sites-eu1.com play.hubspotvideo.com play-eu1.hubspotvideo.com *.hubspot.net *.hsforms.net *.hsforms.com www.youtube.com player.vimeo.com genio.co; child-src *.hsforms.com; font-src 'self' static.hsappstatic.net fonts.gstatic.com; upgrade-insecure-requests; 1
default-src * 'unsafe-eval' 'unsafe-inline' data: blob:; report-to main-endpoint; 1
default-src 'self' *.doctorwho.tv *.bbc.com *.bbc.co.uk *.bbci.co.uk; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.doctorwho.tv *.bbc.com *.bbc.co.uk *.bbci.co.uk *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.googlesyndication.com *.google.com *.googleadservices.com *.youtube.com *.youtube-nocookie.com *.google *.the-ozone-project.com *.optimizely.com *.go-mpulse.net *.quantserve.com *.quantcount.com tag.aticdn.net cdn.shopify.com cdn.jsdelivr.net scripts.webcontentassessor.com *.wayin.com; style-src 'self' 'unsafe-inline' *.doctorwho.tv *.bbc.com *.bbc.co.uk *.bbci.co.uk fonts.googleapis.com fonts.gstatic.com *.typekit.net; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com *.typekit.net; img-src 'self' data: blob: https: http: *.doctorwho.tv *.bbc.com *.bbc.co.uk *.bbci.co.uk; connect-src 'self' *.doctorwho.tv *.bbc.com *.bbc.co.uk *.bbci.co.uk *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.googlesyndication.com *.google.com *.googleadservices.com *.youtube.com *.youtube-nocookie.com *.google *.the-ozone-project.com *.optimizely.com *.go-mpulse.net *.quantserve.com *.quantcount.com cdn.jsdelivr.net; frame-src 'self' *.doctorwho.tv *.bbc.com *.bbc.co.uk *.bbci.co.uk *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.googlesyndication.com *.google.com *.googleadservices.com *.youtube.com *.youtube-nocookie.com *.google *.brightcove.com *.brightcove.net *.sajari.com *.akstat.io *.the-ozone-project.com *.optimizely.com *.go-mpulse.net *.quantserve.com *.quantcount.com; media-src 'self' data: *.doctorwho.tv *.bbc.com *.bbc.co.uk *.bbci.co.uk *.brightcove.com *.brightcove.net *.sajari.com *.akstat.io; object-src 'none' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com https://fonts.gstatic.com *.fontawesome.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net cdn.bestdenki.com.sg maxcdn.bootstrapcdn.com media.flixfacts.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com *.mpgs.axisbank.com *.americanexpress.com *.accertify.net *.paymentsvcs.com *.amxvpos.com *.accelya.com *.commbank.com.au *.americanexpress.co.in *.areeba.com *.bbvaglobalgateway.com *.arcpay.travel *.merchantlink.com *.paymentgateway.nomba.com *.nab.com.au *.unicredit.ro *.paymentgateway.epay.halykbank.kz *.commerce.nbg.gr *.prahsys.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.google.com/ eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com *.mpgs.axisbank.com *.americanexpress.com *.accertify.net *.paymentsvcs.com *.amxvpos.com *.accelya.com *.commbank.com.au *.americanexpress.co.in *.areeba.com *.bbvaglobalgateway.com *.arcpay.travel *.merchantlink.com *.paymentgateway.nomba.com *.nab.com.au *.unicredit.ro *.paymentgateway.epay.halykbank.kz *.commerce.nbg.gr *.prahsys.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://firebasestorage.googleapis.com https://www.magezon.com cdn.bestdenki.com.sg flagpedia.net rt.flix360.com media.flixfacts.com magento-1482700-5635152.cloudwaysapps.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com tagmanager.google.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.plugins.emarsys.net *.scarabresearch.com *.avada.io *.shopify.com *.google.com/ eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com *.gateway.spring.citi.com *.mpgs.axisbank.com *.americanexpress.com *.accertify.net *.paymentsvcs.com *.amxvpos.com *.accelya.com *.commbank.com.au *.americanexpress.co.in *.areeba.com *.bbvaglobalgateway.com *.arcpay.travel *.merchantlink.com *.paymentgateway.nomba.com *.nab.com.au *.unicredit.ro *.paymentgateway.epay.halykbank.kz *.commerce.nbg.gr *.prahsys.com cdn.bestdenki.com.sg maps.googleapis.com media.flixfacts.com media.flixcar.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com *.google.com *.gstatic.com https://fonts.bunny.net cdn.bestdenki.com.sg maxcdn.bootstrapcdn.com media.flixfacts.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com magento-1482700-5635152.cloudwaysapps.co media.flixfacts.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.googleapis.com fcmregistrations.googleapis.com firebaseinstallations.googleapis.com *.scarabresearch.com *.eservice.emarsys.net http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io cdn.bestdenki.com.sg www.gstatic.com maps.googleapis.com media.flixfacts.com media.flixcar.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.klevu.com *.ksearchnet.com *.bootstrapcdn.com *.cloudflare.com *.contivio.com *.gstatic.com *.hsappstatic.net *.ivaws.com *.redditstatic.com *.slant.co *.tiktok.com data: *.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://challenges.cloudflare.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.adroll.com *.bing.com *.braintreegateway.com *.cloudflare.com *.compton.k12.ca.us *.contivio.com *.criteo.com *.criteo.net *.deledao.com *.doubleclick.net *.facebook.com *.google.com *.googletagmanager.com *.ibosscloud.com *.jotform.com *.liadm.com *.linewize.net *.lsfilter.com *.microsoftonline.com *.netsuite.com *.opendns.com *.securly.com *.shareasale-analytics.com *.shareasale.com *.skimresources.com *.trustpilot.com *.vimeo.com 127.0.0.1 lsrelay-config-production.s3.amazonaws.com vimeo.com www.google.bs www.google.ca www.google.ch www.google.co.cr www.google.co.in www.google.co.nz www.google.co.th www.google.co.uk www.google.com.au www.google.com.br www.google.com.eg www.google.com.mx www.google.com.pr www.google.com.qa www.google.de www.google.es www.google.it www.google.no www.xtento.com *.addthis.com https://plumrocket.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.ftcdn.net *.behance.net validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.klevu.com *.ksearchnet.com maps.googleapis.com maps.gstatic.com *.ablyft.com *.adroll.com *.bing.com *.bing.net *.clarity.ms *.cloudflare.com *.contivio.com *.criteo.net *.dicebear.com *.doubleclick.net *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.ivaws.com *.liadm.com *.mailchimp.com *.pinimg.com *.pinterest.com *.reddit.com *.redditstatic.com *.tiktok.com *.wepowerconnections.com *.ytimg.com d1z0mfyqx7ypd2.cloudfront.net d3k81ch9hvuctc.cloudfront.net google.com shareasale.com www.google.ad www.google.ae www.google.al www.google.am www.google.as www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.si www.google.sk www.google.sn www.google.so www.google.sr www.google.tm www.google.tn www.google.tt www.google.ws cdn.xtento.com flagpedia.net www.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://challenges.cloudflare.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com js.klevu.com *.ksearchnet.com maps.googleapis.com maps.gstatic.com *.33across.com *.ablyft.com *.adroll.com *.amped.io *.bing.com *.boldchat.com *.braintreegateway.com *.clarity.ms *.cloudflare.com *.cloudflareinsights.com *.contivio.com *.criteo.com *.doubleclick.net *.dwin1.com *.facebook.net *.fullstory.com *.getgobot.com *.google-analytics.com *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.jotfor.ms *.jsdelivr.net *.klaviyo.com *.klevu.com *.liadm.com *.mailchimp.com *.noibu.com *.optiversal.com *.pinterest.com *.redditstatic.com *.rmbl.ws *.smtrk.net *.tiktok.com *.trustpilot.com acsbapp.com unpkg.com xxredda.s3.amazonaws.com *.cardinalcommerce.com magento-recs-sdk.adobe.net s7.addthis.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net www.xtento.com cdn.xtento.com https://www.googletagmanager.com tagmanager.google.com https://www.googleadservices.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https://static.klaviyo.com unsafe-inline assets.braintreegateway.com *.klevu.com *.ksearchnet.com *.ablyft.com *.bootstrapcdn.com *.cloudflare.com *.contivio.com *.googleapis.com *.gstatic.com *.klaviyo.com *.rakuten.com xxredda.s3.amazonaws.com https://cdn.jsdelivr.net *.fontawesome.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.contivio.com *.gstatic.com *.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.klevu.com *.ksearchnet.com maps.googleapis.com maps.gstatic.com *.ablyft.com *.acsbapp.com *.adblocknext.com *.bing.com *.bing.net *.braintreegateway.com *.clarity.ms *.contivio.com *.criteo.com *.datadome.co *.doubleclick.net *.facebook.com *.facebook.net *.getgobot.com *.google-analytics.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.intuit.com *.klaviyo.com *.liadm.com *.mailchimp.com *.moonshot-ai.com *.noibu.com *.reddit.com *.redditstatic.com *.rmbl.ws *.tiktok.com *.tiktokw.us *.trustpilot.com *.wepowerconnections.com 9kvu81ddh3.execute-api.us-east-2.amazonaws.com acsbapp.com d3k81ch9hvuctc.cloudfront.net ipapi.co www.google.ae www.google.al www.google.as www.google.at www.google.be www.google.bg www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cf www.google.ch www.google.cl www.google.cm www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.gh www.google.com.gi www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ng www.google.com.ni www.google.com.np www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.cz www.google.de www.google.dk www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gg www.google.gr www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.iq www.google.is www.google.it www.google.je www.google.kz www.google.la www.google.lk www.google.lt www.google.md www.google.me www.google.mg www.google.mk www.google.mu www.google.mv www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.se www.google.si www.google.sk www.google.sn www.google.so www.google.sr www.google.tn www.google.tt ekr.zdassets.com/ www.gstatic.com sp.americanflags.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https: data: wss: 'unsafe-inline' 'unsafe-eval'; worker-src blob; frame-ancestors none: 1
font-src fonts.gstatic.com use.typekit.net *.hotjar.com *.yotpo.com *.googleapis.com *.gstatic.com *.wistia.com *.zip.co *.rakuten.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.weltpixel.com js.stripe.com *.awin1.com *.zenaps.com *.fls.doubleclick.net *.getbread.com *.breadpayments.com *.rbcpayplan.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com *.accuquilt.com *.hotjar.com *.bounceexchange.com *.wistia.net *.twitter.com *.duosecurity.com *.doubleclick.net *.kaptcha.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.yotpo.com *.paypalobjects.com *.facebook.com vimeo.com localhost *.pinterest.com *.google.com *.googletagmanager.com google.com *.vimeo.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net magefan.com cm.magefan.com *.awin1.com *.zenaps.com *.wepowerconnections.com *.getbread.com *.breadpayments.com *.rbcpayplan.com www.gstatic.com *.gstatic.com *.useinsider.com *.visualwebsiteoptimizer.com *.bing.com *.locker2.com *.accuquilt.com *.pippio.com *.bouncex.net *.bounceexchange.com *.datatables.net e-accuquilt.com *.google.com.vn *.disqus.com https://img.youtube.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.gstatic.com *.yotpo.com *.googleapis.com www.google.com.cy www.google.co.id *.listrakbi.com www.google.com.co www.google.com.bh www.google.com.tw www.google.com.om *.espssl.com www.google.tn www.google.tt www.google.com.sg *.facebook.com www.google.nl www.google.co.in www.google.ge www.google.by www.google.lk *.bing.net www.google.ad www.google.at www.google.ro *.googleusercontent.com www.google.no www.google.rs www.google.com.sv www.google.ie www.google.co.ke www.google.hr www.google.com.pa www.google.co.ve www.google.ae google.com www.google.pl www.google.com.fj www.google.com.tr www.google.com.kw www.google.dk www.google.com.uy www.google.pt www.google.se www.google.mg *.imgur.com www.google.com.pe www.google.be www.google.co.il www.google.com.mx www.google.mu www.google.hn sharethis.com www.google.ru www.google.jo www.google.co.cr *.rakuten.com www.google.it www.google.com.et www.google.ch www.google.ee www.google.com.py www.google.hu www.google.co.ao *.paypalobjects.com *.google.com www.google.com.pr www.google.ca www.google.com.cu www.google.com.na www.google.sn www.google.com.mm www.google.md www.google.co.jp www.google.sr www.google.am www.google.de www.google.cl www.google.im *.doubleclick.net *.wistia.com www.google.com.ni www.google.es www.google.co.za www.google.lt www.google.is www.google.co.nz www.google.com.bz www.google.lu www.google.co.uk www.google.com.do www.google.co.zw www.google.com.eg www.google.com.gt www.google.co.ma www.google.com.br www.google.com.jm www.google.com.bd www.google.fi www.google.sk *.twitter.com www.google.kz www.google.com.ph www.google.je www.google.com.au www.google.si www.google.bs *.pinterest.com www.google.ba *.nexcesscdn.net www.google.co.ck *.adelixir.com www.google.com.kh www.google.com.sa www.google.cz www.google.co.th www.google.co.kr www.google.dz www.google.ps www.google.com.hk www.google.co.vi www.google.com.ua www.google.com.af www.google.com.ar www.google.com.gh www.google.bg www.google.com.my www.google.com.pk www.google.gr www.google.fr www.google.com.ng data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com assets.adobedtm.com *.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com js.stripe.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com *.getbread.com *.breadpayments.com *.rbcpayplan.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com unpkg.com *.kaptcha.com *.referralcandy.com *.useinsider.com *.hotjar.com *.bing.com *.visualwebsiteoptimizer.com *.bounceexchange.com *.datatables.net *.yottaa.com *.attn.tv *.noibu.com *.cloudfront.net *.disqus.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com *.yotpo.com *.listrakbi.com *.googleapis.com *.wistia.com *.google.com *.pinterest.com *.vimeo.com *.doubleclick.net localhost *.adelixir.com *.cloudflare.com *.convertexperiments.com *.twitter.com *.zdassets.com *.googletagmanager.com *.facebook.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com tagmanager.google.com *.bounceexchange.com *.datatables.net *.yotpo.com *.googleapis.com *.listrakbi.com *.googletagmanager.com *.nexcesscdn.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.wistia.com *.bing.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.adobe.io performance.typekit.net *.magento-datasolutions.com *.magento-ds.com *.wepowerconnections.com https://the.sciencebehindecommerce.com *.getbread.com *.breadpayments.com *.rbcpayplan.com *.google-analytics.com *.kaptcha.com *.bouncex.net *.hotjar.com *.bing.com *.doubleclick.net *.noibu.com *.bounceexchange.com *.googleapis.com *.yottaa.net *.attn.tv google.com *.useinsider.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.yotpo.com www.google.cz *.listrakbi.com www.google.com.pr www.google.com.bd www.google.ee *.cloudflare.com www.google.co.ao localhost www.google.com.gt *.wistia.com www.google.com.gh www.google.com.ar www.google.co.zw www.google.ae www.google.gr *.google.com www.google.com.ni www.google.ro www.google.es www.google.com.jm www.google.at www.google.com.pk www.google.bs www.google.se www.google.pl www.google.com.hk *.facebook.com www.google.ie www.google.com.vn www.google.de www.google.mu www.google.co.ve www.google.lk www.google.sn www.google.co.za www.google.co.kr www.google.kz www.google.fi *.bing.net www.google.cl www.google.com.pa www.google.be www.google.dz www.google.co.cr www.google.co.ke www.google.ba www.google.co.nz www.google.nl www.google.ch www.google.com.bz www.google.com.cu www.google.bg www.google.hn www.google.pt www.google.rs www.google.hu www.google.com.mx www.google.com.kh www.google.com.ua www.google.co.il *.convertexperiments.com www.google.co.uk www.google.fr www.google.co.in www.google.ps www.google.co.jp www.google.com.br www.google.no www.google.com.tw www.google.je *.listrak.com www.google.com.pe www.google.com.kw www.google.dk www.google.com.tr www.google.hr www.google.com.au www.google.ru www.google.com.et www.google.sk www.google.com.sa www.google.ca *.breadgateway.net www.google.com.sg www.google.com.eg www.google.co.id www.google.it www.google.com.af www.google.co.vi www.google.is www.google.com.do www.google.co.th www.google.com.ng www.google.com.ph www.google.co.ma www.google.com.cy www.google.com.co www.google.com.my www.google.si 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://75377fd6-3893-4bc0-8153-38484baaccb0.sansec.watch/; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com google.com *.google.com googleapis.com *.googleapis.com gstatic.com paypal.com *.paypal.com youtube.com *.youtube.com wp.pl *.wp.pl id5-sync.com *.id5-sync.com magezon.com *.magezon.com clickonometrics.pl *.clickonometrics.pl *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com criteo.com *.criteo.com google.pl *.google.pl doubleclick.net *.doubleclick.net googletagmanager.com *.googletagmanager.com facebook.com *.facebook.com paypal.com youtube.com wp.pl *.wp.pl id5-sync.com *.id5-sync.com magezon.com *.magezon.com clickonometrics.pl *.clickonometrics.pl https://pudofinder.dpd.com.pl *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.youtube.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io cookieyes.com *.cookieyes.com cdn-cookieyes.com *.cdn-cookieyes.com crazyegg.com *.crazyegg.com bing.com *.bing.com bing.net *.bing.net facebook.net *.facebook.net facebook.com *.facebook.com onet.pl *.onet.pl ocdn.eu *.ocdn.eu ceneo.pl *.ceneo.pl tiktok.com *.tiktok.com cdngazeta.pl *.cdngazeta.pl criteo.com *.criteo.com paypal.com youtube.com wp.pl *.wp.pl id5-sync.com *.id5-sync.com magezon.com *.magezon.com shopdeputy.com *.shopdeputy.com creativecdn.com *.creativecdn.com kk-resources.com *.kk-resources.com clarity.ms *.clarity.ms cloudfront.net *.cloudfront.net edrone.me *.edrone.me google.com *.google.com google.pl *.google.pl googletagmanager.com *.googletagmanager.com googleapis.com *.googleapis.com gstatic.com google-analytics.com googleadservices.com *.googleadservices.com doubleclick.net *.doubleclick.net clickonometrics.pl *.clickonometrics.pl https://www.magezon.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com cookieyes.com *.cookieyes.com cdn-cookieyes.com *.cdn-cookieyes.com crazyegg.com *.crazyegg.com bing.com *.bing.com bing.net *.bing.net facebook.net *.facebook.net facebook.com *.facebook.com onet.pl *.onet.pl ocdn.eu *.ocdn.eu ceneo.pl *.ceneo.pl tiktok.com *.tiktok.com cdngazeta.pl *.cdngazeta.pl criteo.com *.criteo.com paypal.com *.paypal.com youtube.com wp.pl *.wp.pl id5-sync.com *.id5-sync.com magezon.com *.magezon.com shopdeputy.com *.shopdeputy.com creativecdn.com *.creativecdn.com kk-resources.com *.kk-resources.com clarity.ms *.clarity.ms cloudfront.net *.cloudfront.net edrone.me *.edrone.me google.pl *.google.pl googletagmanager.com *.googletagmanager.com googleapis.com *.googleapis.com gstatic.com *.gstatic.com google-analytics.com *.google-analytics.com googleadservices.com *.googleadservices.com doubleclick.net *.doubleclick.net clickonometrics.pl *.clickonometrics.pl *.disqus.com *.avada.io *.shopify.com *.google.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com www.youtube.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com google.com *.google.com googleapis.com *.googleapis.com gstatic.com *.gstatic.com paypal.com *.paypal.com youtube.com *.youtube.com wp.pl *.wp.pl id5-sync.com *.id5-sync.com magezon.com *.magezon.com clickonometrics.pl *.clickonometrics.pl *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com cookieyes.com *.cookieyes.com cdn-cookieyes.com *.cdn-cookieyes.com crazyegg.com *.crazyegg.com bing.com *.bing.com bing.net *.bing.net facebook.net *.facebook.net facebook.com *.facebook.com onet.pl *.onet.pl ocdn.eu *.ocdn.eu ceneo.pl *.ceneo.pl tiktok.com *.tiktok.com cdngazeta.pl *.cdngazeta.pl criteo.com *.criteo.com paypal.com youtube.com *.youtube.com wp.pl *.wp.pl id5-sync.com *.id5-sync.com magezon.com *.magezon.com shopdeputy.com *.shopdeputy.com creativecdn.com *.creativecdn.com kk-resources.com *.kk-resources.com clarity.ms *.clarity.ms cloudfront.net *.cloudfront.net edrone.me *.edrone.me google.pl *.google.pl googletagmanager.com *.googletagmanager.com googleapis.com *.googleapis.com gstatic.com *.gstatic.com google-analytics.com googleadservices.com *.googleadservices.com doubleclick.net *.doubleclick.net clickonometrics.pl *.clickonometrics.pl https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com cdn.plyr.io noembed.com 'self' 'unsafe-inline'; child-src https://pudofinder.dpd.com.pl assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src cookieyes.com *.cookieyes.com cdn-cookieyes.com *.cdn-cookieyes.com crazyegg.com *.crazyegg.com bing.com *.bing.com bing.net *.bing.net facebook.net *.facebook.net facebook.com *.facebook.com onet.pl *.onet.pl ocdn.eu *.ocdn.eu ceneo.pl *.ceneo.pl tiktok.com *.tiktok.com cdngazeta.pl *.cdngazeta.pl criteo.com *.criteo.com paypal.com *.paypal.com youtube.com *.youtube.com wp.pl *.wp.pl id5-sync.com *.id5-sync-com magezon.com *.magezon.com shopdeputy.com *.shopdeputy.com creativecdn.com *.creativecdn.com kk-resources.com *.kk-resources.com clarity.ms *.clarity.ms cloudfront.net *.cloudfront.net edrone.me *.edrone.me google.com *.google.com google.pl *.google.pl googletagmanager.com *.googletagmanager.com googleapis.com *.googleapis.com gstatic.com *.gstatic.com google-analytics.com *.google-analytics.com googleadservices.com *.googleadservices.com doubleclick.net *.doubleclick.net clickonometrics.pl *.clickonometrics.pl 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' blob: https://prod-bk-web.de.rbi.tools/en/static/js/vendor.5dc447bb.js https://prod-bk-web.de.rbi.tools/en/static/js/main.eef366b9.js https://prod-bk-web.de.rbi.tools/en/static/js/runtime.52c4739e.js https://*.mparticle.com https://cdn.cookielaw.org https://www.googletagmanager.com https://*.onetrust.com https://static.ads-twitter.com https://platform.twitter.com https://www.google-analytics.com https://connect.facebook.net https://secure.quantserve.com https://dynamic.criteo.com https://rules.quantcount.com https://cdn.branch.io https://app.link https://*.cdn4.forter.com https://dlthst9q2beh8.cloudfront.net https://sslwidget.criteo.com https://widget.eu.criteo.com https://pagead2.googlesyndication.com https://cdn.amplitude.com https://accounts.google.com https://appleid.cdn-apple.com https://analytics.tiktok.com https://c.amazon-adsystem.com https://js.adsrvr.org https://maps.googleapis.com https://googleads.g.doubleclick.net https://static.zdassets.com https://bat.bing.com https://cdn-st.adsmurai.com https://www.youtube.com https://player.vimeo.com https://prod-bk-web.de.rbi.tools/en/static/js/main.ae5d2789.js https://prod-bk-web.de.rbi.tools/en/static/js/runtime.5117e863.js; object-src 'none'; base-uri 'none'; worker-src 'self' blob:; report-uri https://intl-csp-service.rbictg.com/report 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com maxcdn.bootstrapcdn.com https://static.klaviyo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://s7.addthis.com https://payflowlink.paypal.com/ https://www.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://www.google.co.in https://www.googletagmanager.com *.doubleclick.net *.kickfire.com *.yahoo.com *.clarity.ms https://c.bing.com *.facebook.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://js-agent.newrelic.com https://bam.nr-data.net https://m.addthis.com https://z.moatads.com https://v1.addthisedge.com *.kickfire.com *.clarity.ms https://tag.simpli.fi *.yimg.com *.facebook.net https://assets.adobedtm.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com maxcdn.bootstrapcdn.com assets.braintreegateway.com https://fonts.googleapis.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://letsmakebeauty.com/media/wysiwyg/Masthead_Video_v4.mp4 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://analytics.google.com https://bam.nr-data.net https://stats.g.doubleclick.net https://m.addthis.com *.clarity.ms *.yimg.com *.facebook.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://connect.facebook.net https://connect.facebook.com https://script.hotjar.com https://static.hotjar.com https://cdn.intelliticks.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.fontawesome.com; font-src 'self' data: https://fonts.gstatic.com https://use.fontawesome.com; img-src 'self' data: blob: https:; connect-src 'self' https:; media-src 'self' https://cdn.intelliticks.com; worker-src 'self' blob:; frame-src 'self' https:; report-uri https://o4511789393838080.ingest.us.sentry.io/api/4511789720338432/security/?sentry_key=29c3e309bc19980896bb3c7f14d8824f&sentry_environment=production; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com *.indigo.ai mtmc.iltrovatore.it data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net/ *.vimeo.com *.demdex.net *.indigo.ai mtmc.iltrovatore.it 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io ebizmarts-website.s3.amazonaws.com *.mailchimp.com gallery.mailchimp.com magefan.com cm.magefan.com *.google.com *.google.it *.googleapis.com *.google-analytics.com *.analytics.google.com *.googleadservices.com *.vimeo.com *.googletagmanager.com *.paypalobjects.com *.demdex.net *.amazonaws.com *.swagger.io *.ytimg.com *.doubleclick.net *.magentocommerce.com *.adobe.com  *.everesttech.net *.omtrdc.net *.adobedtm.com *.bing.com *.indigo.ai mtmc.iltrovatore.it *.appdomain.cloud data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.youtube.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com chimpstatic.com downloads.mailchimp.com *.list-manage.com s7.addthis.com *.adobedtm.com *.googleadservices.com *.doubleclick.net *.googletagmanager.com *.paypal.com *.paypalobjects.com *.googleapis.com *.vimeo.com *.chimpstatic.com *.mailchimp.com *.addthis.com *.bing.com *.hotjar.com *.facebook.net *.iubenda.com *.indigo.ai mtmc.iltrovatore.it 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.fontawesome.com *.googleapis.com *.iubenda.com *.indigo.ai mtmc.iltrovatore.it 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.indigo.ai mtmc.iltrovatore.it 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com ekr.zdassets.com/ *.demdex.net *.omtrdc.net *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.vimeo.com *.paypalobjects.com *.zdassets.com *.googleapis.com *.youtube.com https://maps.googleapis.com https://fonts.googleapis.com *.doubleclick.net *.hotjar.com *.iubenda.com *.indigo.ai mtmc.iltrovatore.it 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src https://bbb.test bbbcycling.com; font-src cash-f.squarecdn.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com *.typekit.net https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.storyblok.com 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.mollie.com consentcdn.cookiebot.com td.doubleclick.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com * https://images.unsplash.com *.gstatic.com *.storyblok.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.mollie.com *.pon.bike images.pondigital.solutions *.google.nl *.google.com *.mailplus.nl imgsct.cookiebot.com widget.thuiswinkel-cdn.org *.hotjar.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://maps.googleapis.com *.googleapis.com tagmanager.google.com https://www.googletagmanager.com *.storyblok.com connect.facebook.net graph.facebook.com business.facebook.com js.mollie.com www.facebook.com chimpstatic.com rum-static.pingdom.net rum-collector-2.pingdom.net consentcdn.cookiebot.com consent.cookiebot.com googleads.g.doubleclick.net widget.thuiswinkel.org widget.thuiswinkel-cdn.org *.clarity.ms restapi.mailplus.nl squeezely.tech static.hotjar.com script.hotjar.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.cash.app https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.storyblok.com *.typekit.net widget.thuiswinkel-cdn.org https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com * https://maps.googleapis.com https://player.vimeo.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com devdocs.magento.com rum-collector-2.pingdom.net widgetcontent.thuiswinkel-cdn.org www.google.com *.clarity.ms consent.cookiebot.com consentcdn.cookiebot.com *.hotjar.com *.hotjar.io *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://banners.helloretailcdn.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.maksuturva.fi http://host.docker.internal:7001 *.piimega.fi *.google.fi https://v2assets.zopim.io *.mycliplister.com *.demoup.com https://halpahalli.fi data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://core.helloretail.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.maksuturva.fi http://host.docker.internal:7001 https://script.custobar.com *.klevu.com *.ksearchnet.com https://script.custobar.com/nf3ax/custobar-k7wdkh46linx.js *.cookiebot.com https://s2.adform.net https://s.pinimg.com *.zdassets.com https://popup.campaign.playable.com https://www.clarity.ms https://track.adform.net https://ct.pinterest.com https://scripts.clarity.ms *.demoup.com https://static-cdn.mycliplister.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com downloads.mailchimp.com maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com *.demoup.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://core.helloretail.com https://helloretailcdn.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.maksuturva.fi http://host.docker.internal:7001 *.custobar.com *.zdassets.com *.cookiebot.com https://ct.pinterest.com *.zendesk.com *.clarity.ms wss://widget-mediator.zopim.com https://mycliplister.com *.demoup.com https://static-cdn.mycliplister.com blob: 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data: blob:; media-src 'self' https: data: blob: https://customer-sq5yvp9r2b0l3cjb.cloudflarestream.com; object-src 'none'; script-src 'strict-dynamic' 'wasm-unsafe-eval' 'report-sample' 'nonce-5Z3Ydah2cLVCyLobsEnH9w=='; script-src-attr 'report-sample'; style-src 'self' https: 'unsafe-inline' data: 'report-sample'; style-src-elem 'self' https: 'unsafe-inline' data: 'report-sample'; connect-src 'self' https: wss: data:; worker-src 'self' blob:; frame-src 'self' https:; frame-ancestors 'self'; form-action 'self' https:; base-uri 'self' 1
script-src https://www.aah.co.uk/ https://www.googletagmanager.com/gtm.js 'unsafe-inline' https://*.evergage.com 'self' https://payments.salesforce.com/ https://stats.g.doubleclick.net https://checkoutshopper-test.adyen.com/ https://pal-test.adyen.com https://cdn.cookielaw.org https://cdn-ukwest.onetrust.com/consent/ae1f04fa-00ba-4719-b25f-f9edcd356795/OtAutoBlock.js https://consent.trustarc.com http://aahtools.co.uk https://*.cookiechimp.com https://www.gstatic.com https://checkoutshopper-live.adyen.com/ https://*.clarity.ms https://cdn.content.aws-prod1-useast1.aws.sfdc.cl/ https://cdn.evgnet.com https://cdn.jsdelivr.net https://cookiechimp.com https://pay.google.com https://tagmanager.google.com https://www.gstatic.com/recaptcha/ https://uip.canary.lwc.dev https://geolocation.onetrust.com https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/ blob: https://www.googletagmanager.com/gtag/js https://www.google.com/recaptcha/ https://js.stripe.com/ https://*.abtasty.com https://cdn-ukwest.onetrust.com/scripttemplates/202308.2.0/otBannerSdk.js https://www.googletagmanager.com import: https://cdn-ukwest.onetrust.com/scripttemplates/otSDKStub.js https://www.google-analytics.com https://ssl.gstatic.com *.salesforce.com https://www.paypal.com/sdk/js 'report-sample' https://service.force.com/embeddedservice/ 'unsafe-eval'; report-to sfdc-csp-ep; report-uri https://celesio.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D24000000aWJn&networkId=0DM4H000000TnMn&type=communities 1
default-src 'self' *.ctfassets.net *.cookieinformation.com;img-src data: blob: *;style-src 'self' 'unsafe-inline' *.gstatic.com;font-src 'self' fonts.gstatic.com;media-src 'self' *.ctfassets.net *.gstatic.com;frame-src 'self' *.cookieinformation.com *.ctfassets.net *.youtube.com *.ungpd.com;connect-src 'self' *.ctfassets.net *.contentful.com *.swish.nu *.cookieinformation.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com;object-src 'none';script-src 'self' 'unsafe-inline' *.cookieinformation.com *.googletagmanager.com; report-uri https://eo7f9vdutam5kd9.m.pipedream.net; report-to csp-report; 1
report-uri /csp-log.php;         report-to csp-log-endpoint;         default-src 'self';         style-src 'self' 'unsafe-inline' https://static.tegut.com/ *.typekit.com *.typekit.net https://fast.fonts.net/;         script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.usercentrics.eu *.typekit.com *.typekit.net https://static.tegut.com/ https://maps.googleapis.com/ https://www.googletagmanager.com/ https://www.google-analytics.com/ https://googleads.g.doubleclick.net/ https://connect.facebook.net/ https://www.facebook.com/ https://analytics.tiktok.com/ https://www.youtube.com/ https://www.googleadservices.com/ https://www.google.com https://www.google.hu https://www.google.lu/ https://www.google.de/ https://www.google.at/ https://www.google.pl/ https://ad1.adfarm1.adition.com/ https://cdn.scarabresearch.com/ https://static.scarabresearch.com/ https://bat.bing.com/ https://s.pinimg.com/ https://s2.adform.net/ https://track.adform.net/ https://ct.pinterest.com/ https://track.adform.net/ https://assets.pinterest.com/;         img-src 'self' data: https://static.tegut.com/ https://*.usercentrics.eu https://www.google.com https://www.google.hu https://www.google.lu/ https://www.google.de/ https://www.google.at/ https://www.google.pl/ https://www.facebook.com/ https://www.google-analytics.com/ https://tegut.maps.dmknet.de/ https://ad.doubleclick.net/ https://googleads.g.doubleclick.net/ https://bat.bing.com/ https://www.googletagmanager.com/ https://maps.gstatic.com/ https://log.pinterest.com/;         media-src 'self' https://static.tegut.com/;         object-src 'self' https://*.usercentrics.eu https://static.tegut.com/ blob:;         connect-src 'self' data: https://*.usercentrics.eu https://maps.googleapis.com/ https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://www.facebook.com/ https://region1.google-analytics.com/ https://recommender.scarabresearch.com/ https://www.google.com https://www.google.hu https://www.google.lu/ https://www.google.de/ https://www.google.at/ https://www.google.pl/ https://analytics.tiktok.com/ https://webchannel-content.eservice.emarsys.net/ https://ct.pinterest.com/ https://bat.bing.net/ https://bat.bing.com/ https://www.googleadservices.com/;         font-src 'self' data: https://static.tegut.com/ https://use.typekit.com/;         frame-src 'self' https://jackpot.tegut.com/ https://www.youtube-nocookie.com/ https://12761294.fls.doubleclick.net/ https://www.facebook.com/ https://ct.pinterest.com/ https://td.doubleclick.net/ https://www.googletagmanager.com/; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://b.tokenkarma.app https://us-assets.i.posthog.com https://connect.facebook.net https://tally.so https://counterscale.jean-r-mi-larcelet-prost.workers.dev; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://b.tokenkarma.app https://api.tokenkarma.app https://waitlist.tokenkarma.app https://us.i.posthog.com https://counterscale.jean-r-mi-larcelet-prost.workers.dev; frame-src https://tally.so; frame-ancestors 'self' 1
style-src *.searchspring.net *.klaviyo.com platform-api.sharethis.com *.adobe.com fonts.googleapis.com https://fonts.googleapis.com assets.braintreegateway.com *.yotpo.com *.googleapis.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; media-src *.kaltura.com *.zdassets.com *.elfsightcdn.com *.d3k81ch9hvuctc.cloudfront.net ccspersistenceprod-contentstaticassets04b201d4-1apqb8dyegznm.s3.us-east-1.amazonaws.com *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; img-src *.elfsightcdn.com *.googlesyndication.com *.clarity.ms *.adtrafficquality.google *.kaltura.com *.bing.com *.zonos.com d3k81ch9hvuctc.cloudfront.net *.searchspring.io *.ccspersistenceprod-contentstaticassets04b201d4-1apqb8dyegznm.s3.us-east-1.amazonaws.com *.sharethis.com *.wisepops.com *.zendesk.com *.google.com.py *.zdusercontent.com *.google.es *.bing.net *.google.ca *.google.com.ar *.google.rs *.google.com.br *.google.cz *.google.com.pe *.google.pl *.google.hr *.google.com.ph *.google.de *.google.co.jp *.google.co.in *.google.co.uk *.google.fr *.google.ch *.google.co.za *.google.ie ccspersistenceprod-contentstaticassets04b201d4-1apqb8dyegznm.s3.us-east-1.amazonaws.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.bird.eu *.getbread.com *.breadpayments.com *.rbcpayplan.com maps.gstatic.com https://helloextend-static-assets.s3.amazonaws.com https://extendcoreoffersdemo-offersthemelogobucketeb21afa-19jnurg0a0o17.s3.amazonaws.com https://s3.amazonaws.com https://extendcoreoffersprod-offersthemelogobucketeb21afa-1lr7le13dvgtp.s3.amazonaws.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://firebasestorage.googleapis.com www.xtento.com cdn.xtento.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; connect-src *.wisepops.net *.elfsight.com *.wisepops.com *.clarity.ms *.adtrafficquality.google *.acsbapp.com *.bing.com *.breadgateway.net *.zdassets.com *.zonos.com *.gstatic.com *.searchspring.io *.googlesyndication.com *.zendesk.com *.zopim.com *.sharethis.com *.bing.net *.datadome.co *.google.com.ar *.google.rs *.elfsightcdn.com *.google.com.ph *.google.fr *.google.ch platform-api.sharethis.com wisepops.net browser.sentry-cdn.com analytics.searchspring.net dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.getbread.com *.breadpayments.com *.rbcpayplan.com *.googleapis.com https://*.helloextend.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://*.ingest.sentry.io *.yotpo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.route.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io *.refersion.com https://imgs.signifyd.com 'self' 'unsafe-inline'; script-src *.elfsight.com *.googlesyndication.com *.polyfill-fastly.io *.cloudflareinsights.com *.wisepops.net *.hotjar.com *.clarity.ms *.acsbapp.com *.adtrafficquality.google *.bing.com *.searchspring.net *.zdassets.com *.zopim.com *.zonos.com *.sharethis.com *.wisepops.com *.scriptcdn.net *.elfsightcdn.com *.highpointscientific.com *.googletagmanager.com platform-api.sharethis.com elfsightcdn.com wisepops.net assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.getbread.com *.breadpayments.com *.rbcpayplan.com *.googleapis.com https://*.helloextend.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://browser.sentry-cdn.com *.yotpo.com polyfill-fastly.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ cdn.routeapp.io fonts.googleapis.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.disqus.com *.avada.io *.refersion.com www.xtento.com cdn.xtento.com https://cdn-scripts.signifyd.com https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; font-src *.klaviyo.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://fonts.gstatic.com *.yotpo.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.getbread.com *.breadpayments.com *.rbcpayplan.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.yotpo.com https://www.googletagmanager.com/ *.refersion.com www.xtento.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-gsa1v2WcvDhBlU6IuEKefg' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' hubspot.mintlify.dev app.hubspot.com cdn-3.convertexperiments.com cdnjs.cloudflare.com connect.facebook.net cta-service-cms2.hubspot.com js.hsforms.net js.hs-analytics.net js.hs-banner.com js.hsleadflows.net js.hubspotfeedback.com js.usemessages.com platform.twitter.com play.vidyard.com run.pstmn.io script.crazyegg.com script.hotjar.com static.hotjar.com static.hsappstatic.net use.typekit.net www.googletagmanager.com www.google-analytics.com www.hubspot.com api.s10h.io 'strict-dynamic' 'nonce-EmmPnJlpnlXxZmmHpW6mCQ=='; report-uri https://send.hsbrowserreports.com/csp/report 1
default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https://cdnapisec.kaltura.com/ https://ema.franciscanalliance.org https://pay.instamed.com;script-src 'nonce-5666cc9f5068478fb7d5bbfa774b6d10' https://az-mychart.franciscanalliance.org 'self';img-src https://* 'self' blob: data:;connect-src 'self' epichttp: https://*.kaltura.com;style-src https://az-mychart.franciscanalliance.org 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.gstatic.com https://widget-react.raychat.io https://www.googletagmanager.com https://www.clarity.ms https://scripts.clarity.ms; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://widget-react.raychat.io; font-src 'self' data: https://fonts.gstatic.com https://widget-react.raychat.io; img-src 'self' data: blob: https://*.raychat.io https://*.clarity.ms https://www.googletagmanager.com; connect-src 'self' https://*.raychat.io wss://*.raychat.io https://*.clarity.ms https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com; frame-src https://www.google.com; object-src 'none'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; frame-ancestors 'self'; 1
default-src https: 'unsafe-inline' 'unsafe-eval'; connect-src https: wss:; img-src https: 'unsafe-inline' 'unsafe-eval' data: 1
script-src 'nonce-7F6gbWJCH5a2fA78MzTi8w==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https://events.mercadolibre.com/csp/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=00198c48-a988-402f-a599-74ca62ebbebe; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https://http2.mlstatic.com/ https://mlstaticquic-a.akamaihd.net/; frame-ancestors 'self' https://*.mercadolibre.cl:* https://*.mercadolibre.com:* https://*.mercadolibre.com.ve:* https://*.mercadolibre.com.ar:* https://*.mercadolivre.com.br:* https://*.mercadolibre.com.co:* https://*.mercadolibre.com.ec:* https://*.mercadolibre.com.mx:* https://*.mercadolibre.com.pe:* https://*.mercadolibre.com.uy:* https://*.mercadopago.cl:* https://*.mercadopago.com.ar:* https://*.mercadopago.com.br:* https://*.mercadopago.com.co:* https://*.mercadopago.com.mx:* https://*.mercadopago.com.pe:* https://*.mercadopago.com.uy:* https://*.mercadopago.com.ve:* https://*.mercadopago.com:* https://*.adminml.com:* https://*.mercadolibre.co.cr:* https://*.mercadolibre.com.pa:* https://*.mercadolibre.com.do:* https://*.mercadolibre.com.bo:* https://*.mercadolibre.com.py:* https://*.mercadolibre.com.gt:* https://*.mercadolibre.com.hn:* https://*.mercadolibre.com.ni:* https://*.mercadolibre.com.sv:* https://*.mercadopago.com.ec:* https://*.portalinmobiliario.com:* https://*.mercadolivre.com:* 1
default-src 'self'; script-src 'nonce-KF1VBymDubL6DqJX8WDxow==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
frame-ancestors 'self'; report-uri https://supercoach.com.au/csp-reports 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://maps.googleapis.com https://maps.gstatic.com https://cdn.merge.dev https://js.stripe.com https://cdn.plaid.com https://www.googletagmanager.com https://snap.licdn.com https://mango-cdn.b-cdn.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://mango-cdn.b-cdn.net; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://mango-cdn.b-cdn.net; img-src 'self' https: data: blob:; media-src 'self' https: data: blob:; frame-src 'self' https: blob:; connect-src 'self' https://api.openai.com https://maps.googleapis.com https://cdn.jsdelivr.net https://unpkg.com https://mango-cdn.b-cdn.net https://stats.pusher.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://px.ads.linkedin.com https://*.iq.mangoapps.com wss://*.iq.mangoapps.com wss://ws-us2.pusher.com https://sockjs-us2.pusher.com wss://*.livekit.cloud https://*.livekit.cloud wss://onemango-cfsl07u1.livekit.cloud https://onemango-cfsl07u1.livekit.cloud https://mangoops-prod.s3.us-east-1.amazonaws.com https://mangoops-prod.s3.amazonaws.com; worker-src 'self' blob:; manifest-src 'self'; report-uri /csp-reports 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.youtube.com https://s.ytimg.com; object-src 'none'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://www.google-analytics.com https://www.googletagmanager.com https://i.ytimg.com https://i.vimeocdn.com; media-src 'self' https://player.vimeo.com https://download-video-ak.vimeocdn.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.googletagmanager.com; frame-ancestors 'self'; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com; report-uri /report-csp-violation 1
default-src 'self';   script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.sms-speedway.com   https://code.jquery.com https://stackpath.bootstrapcdn.com https://cdn.jsdelivr.net   https://cdnjs.cloudflare.com https://www.googletagmanager.com   https://www.google-analytics.com https://www.kerfuffle.com https://js.api.here.com;   style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com   https://bootswatch.com https://fonts.googleapis.com https://use.fontawesome.com;   img-src 'self' data: https:;   font-src 'self' data: https://fonts.gstatic.com https://use.fontawesome.com https://cdn.jsdelivr.net;   connect-src 'self' https://*.sms-speedway.com https://www.google-analytics.com   https://*.analytics.google.com https://stats.g.doubleclick.net https://*.hereapi.com;   frame-src 'self' https://kerfuffle.com https://www.kerfuffle.com;   frame-ancestors 'self';   report-uri /csp-violation 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com https://*.haco.nu https://*.pinterest.com js.mollie.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com https://www.haco.nu https://*.taggrs.io https://*.haco.nu https://*.marello.com https://www.mollie.com *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://cdn.jsdelivr.net https://*.cookiefirst.com https://*.pinimg.com https://*.clarity.ms https://*.pinterest.com js.mollie.com pay.google.com applepay.cdn-apple.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com https://use.typekit.net https://p.typekit.net https://*.cookiefirst.com https://*.pinimg.com https://*.clarity.ms *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://*.googlesyndication.com https://*.haco.nu https://*.amazonaws.com https://*.pinterest.com https://*.cookiefirst.com https://*.clarity.ms *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';             script-src 'self' 'unsafe-inline' 'unsafe-eval'       https://www.google-analytics.com               https://www.googletagmanager.com               https://translate.google.com                https://translate.googleapis.com                https://translate-pa.googleapis.com                https://ad.doubleclick.net                https://px.ads.linkedin.com                https://snap.licdn.com               https://connect.facebook.net               https://js.adsrvr.org               https://chat.satis.fi                https://mpc2-prod-25-is5qnl632q-wl.a.run.app;                          script-src-elem 'self' 'unsafe-inline'       https://www.google-analytics.com               https://cdn.jsdelivr.net                https://www.googletagmanager.com               https://translate.google.com                https://translate.googleapis.com                https://translate-pa.googleapis.com                https://ad.doubleclick.net                https://px.ads.linkedin.com                https://snap.licdn.com               https://connect.facebook.net               https://js.adsrvr.org               https://chat.satis.fi                https://mpc2-prod-25-is5qnl632q-wl.a.run.app;                          style-src 'self' 'unsafe-inline'                      https://fonts.googleapis.com                https://cdnjs.cloudflare.com                https://www.gstatic.com                https://d1p5cqqchvbqmy.cloudfront.net                https://chat.satis.fi                https://prod-satisfilabs-resources-gcs.satis.fi;                          font-src 'self' data:                https://fonts.gstatic.com                https://cdnjs.cloudflare.com                https://d1p5cqqchvbqmy.cloudfront.net               https://chat.satis.fi                https://prod-satisfilabs-resources-gcs.satis.fi;                          img-src 'self' data:       https://solutions.mappedin.com               https://www.yyc.com                https://fonts.gstatic.com                https://www.gstatic.com                https://www.google.com       https://www.google.ca               http://localhost:91                https://px.ads.linkedin.com                https://www.facebook.com      https://cdn.mappedin.com      https://prod-satisfilabs-resources-gcs.satis.fi;                          connect-src 'self' blob:                 https://cdn.jsdelivr.net                https://www.yyc.com                https://translate.googleapis.com                https://ad.doubleclick.net                https://www.google.com                https://www.google-analytics.com               https://analytics.google.com       https://www.google.ca               https://www.googletagmanager.com               https://mpc2-prod-25-is5qnl632q-wl.a.run.app                https://px.ads.linkedin.com                https://insight.adsrvr.org                https://chat.satis.fi                https://prod-satisfilabs-resources-gcs.satis.fi      https://analytics.audioeye.com      https://tiles-cdn.mappedin.com      https://api-gateway.mappedin.com      https://cdn.mappedin.com      https://auth.mappedin.com      https://ph-api.mappedin.com      https://stats.g.doubleclick.net;                          frame-src 'self'       https://www.youtube.com      https://www.google.com               https://chat.satis.fi               https://9762745.fls.doubleclick.net               https://insight.adsrvr.org      https://match.adsrvr.org      https://www.facebook.com;        worker-src 'self' blob:;              frame-ancestors 'self';              base-uri 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.vercel-insights.com https://va.vercel-scripts.com https://cdn.jsdelivr.net https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; img-src 'self' data: blob: https: http:; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net; connect-src 'self' https: wss:; media-src 'self' https: blob:; worker-src 'self' blob:; child-src 'self' blob:; frame-src 'self' https:; object-src 'none'; base-uri 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://www.googletagmanager.com https://accounts.google.com https://appleid.cdn-apple.com https://platform.twitter.com https://embed.twitch.tv https://d3u598arehftfk.cloudfront.net https://hbagency.it https://boot.pbstck.com https://cdn.pbstck.com https://cmp.inmobi.com https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://*.safeframe.googlesyndication.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://cdnjs.cloudflare.com https://wrappers.geoedge.be https://static.kueezrtb.com https://u.kueezrtb.com https://static.smilewanted.com https://csync.smilewanted.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://accounts.google.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' https:; frame-src 'self' https:; worker-src 'self' blob:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'; report-uri /api/csp-report; report-to csp-endpoint 1
script-src 'self' 127.0.0.1:8182 127.0.0.1:8888 127.0.0.1:5005; frame-src 'self'; object-src 'self'; report-uri /cspreportonly; 1
default-src 'self' https:; img-src 'self' https: assets.braintreegateway.com checkout.paypal.com bam.nr-data.net staging.shirtspace.com *.googletagmanager.com data:; font-src 'self' *.typekit.net cdn.shirtspace.com *.gstatic.com *.googleapis.com *.acsbapp.com data:; object-src 'none'; script-src 'self' 'unsafe-eval' *.google-analytics.com *.google.com *.googletagmanager.com *.gstatic.com *.googleadservices.com *.g.doubleclick.net *.googlecommerce.com *.newrelic.com bam.nr-data.net *.braintreegateway.com www.paypalobjects.com *.paypal.com c.paypal.com widget.trustpilot.com connect.facebook.net graph.facebook.com bat.bing.com s.yimg.com sp.analytics.yahoo.com *.pinterest.com *.pinimg.com device.maxmind.com *.typekit.net cdn.jsdelivr.net *.honeybadger.io *.ckeditor.com io.clickguard.com acsbapp.com sc-static.net api.ipify.org cdnjs.cloudflare.com *.easysize.me *.klaviyo.com unleash.shirtspace.com unpkg.com *.frontapp.com cdn.shirtspace.com 'nonce-'; style-src 'self' cdn.shirtspace.com *.googleapis.com *.typekit.net *.typeform.com *.ckeditor.com cdnjs.cloudflare.com *.easysize.me *.klaviyo.com 'unsafe-inline' 'nonce-'; child-src 'self' assets.braintreegateway.com c.paypal.com; frame-src 'self' assets.braintreegateway.com *.paypal.com widget.trustpilot.com www.facebook.com *.g.doubleclick.net *.google.com *.googletagmanager.com *.pinterest.com www.youtube.com *.acsbapp.com accessibe.com player.vimeo.com tr.snapchat.com tpc.googlesyndication.com *.easysize.me *.typeform.com; connect-src 'self' *.braintreegateway.com 'unsafe-inline' *.google-analytics.com *.g.doubleclick.net *.google.com *.braintree-api.com *.paypal.com *.pinterest.com *.mmapiws.com widget.trustpilot.com *.typekit.net www.facebook.com s.yimg.com http://localhost:3035 ws://localhost:3035 *.acsbapp.com io.clickguard.com bam.nr-data.net *.klaviyo.com *.easysize.me unleash.shirtspace.com cdn.shirtspace.com 1
font-src cdn.jsdelivr.net fonts.gstatic.com cdn.almapay.com sdk.privacy-center.org https://applepay.cdn-apple.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.getalma.eu *.almapay.com/ *.stripe.com/ *.checkout.com/ *.adyen.com/ *.instagram.com https://www.googletagmanager.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.payplug.com *.dalenys.com https://applepay.cdn-apple.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.cdninstagram.com cdn.doofinder.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ sdk.privacy-center.org https://img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://secure-magenta.dalenys.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.jsdelivr.net *.instagram.com cdn.doofinder.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ sdk.privacy-center.org s7.addthis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com https://secure-magenta.dalenys.com https://applepay.cdn-apple.com api-qa.payplug.com cdn-qa.payplug.com api.payplug.com cdn.payplug.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.jsdelivr.net fonts.googleapis.com *.doofinder.com sdk.privacy-center.org unsafe-inline assets.braintreegateway.com https://secure-magenta.dalenys.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.getalma.eu *.almapay.com *.doofinder.com wss://*.doofinder.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ api.privacy-center.org sdk.privacy-center.org vendor-list.consensu.org ekr.zdassets.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src *; img-src https:; frame-src 'none' 1
default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: google.com http://epicproxy.et1206.epichosted.com https://affiliates.baptistchart.com https://apps.healthcare.elsevier.com https://cdnapisec.kaltura.com/ https://epicproxy.et1206.epichosted.com pay.instamed.com;script-src 'nonce-7d9ae947a2f3451c9e4e7cfedb0deafc' 'self';img-src https://* 'self' blob: data: google.com https://affiliates.baptistchart.com;connect-src 'self' epichttp: google.com https://*.app.st-1206.epiccloud.io https://*.kaltura.com https://affiliates.baptistchart.com https://mychart-mychart-chat-mediator.app.st-1206.epiccloud.io https://www.google.com wss://*.webpubsub.azure.com;style-src 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self' google.com https://affiliates.baptistchart.com;media-src https://* 'self' blob:; 1
font-src *.googleapis.com *.gstatic.com *.bootstrapcdn.com https://analytics.google.com/ https://www.google.com/ *.googlevideo.com/ https://www.facebook.com/ *.facebook.net/ https://www.youtube.com/ https://img.youtube.com/ https://www.youtube-nocookie.com/ https://yt3.ggpht.com/ https://vimeo.com/ *.vimeocdn.com/ https://static.placetopay.com/ https://*.googleapis.com/ https://checkout.placetopay.ec https://checkout-test.placetopay.ec https://checkout.placetopay.com https://checkout-test.placetopay.com *.placetopay.com *.placetopay.ec 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.bolt.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com https://www.youtube.com/ *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com *.bolt.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com https://analytics.google.com/ https://www.google.com/ *.googlevideo.com/ https://www.facebook.com/ *.facebook.net/ https://img.youtube.com/ https://www.youtube-nocookie.com/ https://yt3.ggpht.com/ https://vimeo.com/ *.vimeocdn.com/ https://static.placetopay.com/ https://*.googleapis.com/ https://checkout.placetopay.ec https://checkout-test.placetopay.ec https://checkout.placetopay.com https://checkout-test.placetopay.com *.placetopay.com *.placetopay.ec c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com https://www.youtube.com/ validator.swagger.io *.doofinder.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google.com *.gstatic.com *.google-analytics.com *.googleadservices.com *.paypal.com https://www.google.com https://www.google.com.co https://*.googleapis.com/ https://analytics.google.com/ https://www.google.com/ *.googlevideo.com/ https://www.facebook.com/ *.facebook.net/ https://img.youtube.com/ https://www.youtube-nocookie.com/ https://yt3.ggpht.com/ https://vimeo.com/ *.vimeocdn.com/ https://static.placetopay.com/ https://* https://checkout-test.placetopay.ec *.placetopay.com *.placetopay.ec www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https://vimeo.com/ www.vimeo.com *.vimeocdn.com https://www.youtube.com/ *.bolt.com *.commerce-quick-checkout.com http://localhost:8082 https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.doofinder.com https://*.hotjar.io/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://*.googleapis.com/ https://analytics.google.com/ *.google.com *.googlevideo.com/ https://www.facebook.com/ *.facebook.net/ https://img.youtube.com/ https://www.youtube-nocookie.com/ https://yt3.ggpht.com/ *.vimeocdn.com/ https://bam.nr-data.net/ https://js-agent.newrelic.com/ https://static.placetopay.com/ https://*.hotjar.com/ https://*.cloudfront.net/ wss://ws.hotjar.com https://*.hotjar.io https://metrics.hotjar.io https://stats.g.doubleclick.net https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://checkout.placetopay.ec https://checkout-test.placetopay.ec https://checkout.placetopay.com https://checkout-test.placetopay.com *.placetopay.com *.placetopay.ec js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.doofinder.com *.google.com *.googleapis.com *.gstatic.com *.bootstrapcdn.com https://checkout.placetopay.ec https://checkout-test.placetopay.ec https://checkout.placetopay.com https://checkout-test.placetopay.com *.placetopay.com *.placetopay.ec unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://analytics.google.com/ https://www.google.com/ *.googlevideo.com/ https://www.facebook.com/ *.facebook.net/ https://www.youtube.com/ https://img.youtube.com/ https://www.youtube-nocookie.com/ https://yt3.ggpht.com/ https://vimeo.com/ *.vimeocdn.com/ https://static.placetopay.com/ https://*.googleapis.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.bolt.com *.doofinder.com wss://*.doofinder.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com https://metrics.hotjar.io https://*.hotjar.io wss://ws.hotjar.com https://stats.g.doubleclick.net https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://*.clarity.ms https://checkout.placetopay.ec https://checkout-test.placetopay.ec https://checkout.placetopay.com https://checkout-test.placetopay.com *.placetopay.com *.placetopay.ec api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'strict-dynamic' 'nonce-tmgkuuV6fHM4sCMhGXGmqg==' 'unsafe-inline' https: http: 'report-sample'; style-src 'self' 'unsafe-inline' https:; font-src 'self' https: data:; img-src 'self' data: https:; media-src 'self' https:; connect-src 'self' wss: https:; frame-src 'self' https:; object-src 'none'; base-uri 'none'; form-action 'self'; frame-ancestors *; report-uri https://t2.savvycal.com/report/?token=phc_DzKsKw4jfIItcVBCFLX5jX0GDGxQmYgeVxjBLO5CpnT&sample_rate=0.05&v=1 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.fontawesome.com *.googleapis.com *.cloudflare.com *.vimeo.com *.youtube.com *.googletagmanager.com *.ckeditor.com *.google-analytics.com *.newrelic.com *.nr-data.net *.livechatinc.com *.gstatic.com *.gtranslate.net *.google.com *.datatables.net  *.doubleclick.net *.jquery.com; object-src *; img-src * data: blob:; frame-src *; font-src * data: blob:; report-uri /report-csp-violation 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /api/csp-report/; report-to csp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com maxcdn.bootstrapcdn.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com challenges.cloudflare.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com b1img.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.avada.io challenges.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.fontawesome.com *.b1js.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.fontawesome.com cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com  *.fontawesome.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
img-src https://higherlogicdownload.s3.amazonaws.com/NSBA/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/NSBA/ https://img.youtube.com/vi/ https://static.filestackapi.com/picker/ https://d2x5ku95bkycr3.cloudfront.net https://higherlogiclongterm.s3.amazonaws.com/NSBA/ blob: https://d132x6oi8ychic.cloudfront.net 'self'; style-src https://d132x6oi8ychic.cloudfront.net 'unsafe-inline' https://higherlogiccloudfront.s3.amazonaws.com https://cdn.jsdelivr.net/jquery.slick/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://d2x5ku95bkycr3.cloudfront.net/ https://ajax.googleapis.com/ajax/libs/jqueryui/ https://use.fortawesome.com/ https://cdn.higherlogic.com/ai-assistant https://static.filestackapi.com/picker/ https://fonts.googleapis.com/ https://d3uf7shreuzboy.cloudfront.net/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/NSBA/ https://higherlogicdownload.s3.amazonaws.com/NSBA/ https://higherlogiclongterm.s3.amazonaws.com/NSBA/ 'self'; font-src https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogiccloudfront.s3.amazonaws.com https://higherlogicdownload.s3.amazonaws.com/NSBA/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/NSBA/ 'self' https://higherlogiclongterm.s3.amazonaws.com/NSBA/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://d2x5ku95bkycr3.cloudfront.net https://d132x6oi8ychic.cloudfront.net data:; script-src-elem https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d3uf7shreuzboy.cloudfront.net/ https://static.filestackapi.com/picker/ https://cdn.higherlogic.com/ai-assistant https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d2x5ku95bkycr3.cloudfront.net/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://www.gstatic.com/recaptcha/ https://static.filestackapi.com/filestack-js/ 'self' https://ajax.aspnetcdn.com/ajax/ 'unsafe-eval' 'unsafe-inline'; media-src https://higherlogiclongterm.s3.amazonaws.com/NSBA/ https://higherlogicdownload.s3.amazonaws.com/NSBA/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/NSBA/ https://higherlogicstream.s3.amazonaws.com/NSBA/ 'self' https://d132x6oi8ychic.cloudfront.net; script-src https://higherlogiclongterm.s3.amazonaws.com/NSBA/ https://higherlogicdownload.s3.amazonaws.com/NSBA/ https://ajax.aspnetcdn.com/ajax/ https://cdn.jsdelivr.net/jquery.slick/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d132x6oi8ychic.cloudfront.net https://cdn.informz.net 'unsafe-eval' https://use.fortawesome.com/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/NSBA/ https://cdnjs.cloudflare.com/ajax/libs/prism/ 'unsafe-inline' https://d2x5ku95bkycr3.cloudfront.net/ https://higherlogiccloudfront.s3.amazonaws.com https://static.filestackapi.com https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d3uf7shreuzboy.cloudfront.net/ 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://api.connectedcommunity.org/ 'self' https://www.youtube.com/embed/ https://*.kb.us.higherlogic.com; connect-src https://upload.filestackapi.com https://static.filestackapi.com https://cloud.filestackapi.com/folder/list/ 'self' https://hl-managedservices.informz.net https://d3uf7shreuzboy.cloudfront.net/ blob:; worker-src 'self'; default-src 'self'; base-uri 'self'; frame-ancestors https://*.connectedcommunity.org/ 'self'; object-src 'none'; manifest-src 'self'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.tawk.to https://cdn.jsdelivr.net https://challenges.cloudflare.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://*.tawk.to https://cdn.jsdelivr.net https://fonts.googleapis.com; img-src 'self' data: blob: https://citrea.xyz https://*.citrea.xyz https://*.tawk.to https://cdn.jsdelivr.net https://s3.amazonaws.com https://storage.ghost.io https://tawk.link https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' data: https://*.tawk.to https://fonts.gstatic.com; connect-src 'self' https://citrea.xyz https://*.citrea.xyz https://*.drpc.org https://*.publicnode.com https://*.tawk.to https://*.walletconnect.com https://*.walletconnect.org https://*.web3modal.org https://1rpc.io https://api-v2.swaps.xyz https://challenges.cloudflare.com https://eth.llamarpc.com https://ipapi.co https://lb.drpc.live https://scan.layerzero-api.com https://*.google-analytics.com https://www.googletagmanager.com wss://*.tawk.to wss://*.walletconnect.com wss://*.walletconnect.org; frame-src 'self' https://*.tawk.to https://challenges.cloudflare.com https://secure.walletconnect.org https://verify.walletconnect.org; worker-src 'self' blob:; media-src 'self' data: blob: https://*.tawk.to; manifest-src 'self'; form-action 'self' https://citrea.xyz https://*.citrea.xyz https://*.tawk.to; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net *.squarecdn.com *.fontawesome.com maxcdn.bootstrapcdn.com *.cloudflare.com *.cloudfront.net *.gstatic.com *.typekit.net *.trustedshops.com *.trustpilot.com *.googleapis.com *.klaviyo.com *.zip.co data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.paymentexpress.com *.windcave.com *.klaviyo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ widgets.sandbox.afterpay.com *.cash.app www.xtento.com winathuntingandfishing.co.nz *.laybuy.com *.addthis.com *.facebook.com huntingandfishing.freshdesk.com *.weltpixel.com *.paymentexpress.com *.windcave.com *.doubleclick.net *.issuu.com app.redpepperdigital.net *.afterpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net *.afterpay.com/ *.cash.app magefan.com cm.magefan.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.xtento.com cdn.xtento.com *.disqus.com https://img.youtube.com *.cloudflare.com *.cloudfront.net https://cdn.klarna.com *.gstatic.com *.paypal.com *.afterpay.com https://s.ytimg.com *.usercentrics.eu *.trustpilot.com *.googleapis.com *.cdninstagram.com *.instagram.com *.facebook.net *.facebook.com *.clarity.ms *.bing.com *.paymentexpress.com *.windcave.com *.google.co.nz *.zip.co partpayassets.blob.core.windows.net tags.srv.stackadapt.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com https://api.addressfinder.io https://rum.hlx.page https://portal.sandbox.afterpay.com https://portal.afterpay.com https://static.afterpay.com *.squarecdn.com https://hbiq.net *.cash.app https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.xtento.com cdn.xtento.com *.disqus.com *.cloudflare.com *.cloudfront.net foursixty.com *.trustedshops.com *.usercentrics.eu *.trustpilot.com *.googleapis.com *.intercomcdn.com *.intercom.io *.addthis.com *.addthisedge.com *.moatads.com *.facebook.net *.clarity.ms *.freshworks.com s3.amazonaws.com/assets.freshdesk.com/ *.paymentexpress.com *.windcave.com *.hotjar.com *.zip.co zipmoney.com.au app.redpepperdigital.net tags.srv.stackadapt.com *.google.co.nz 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com https://api.addressfinder.io static.afterpay.com/ *.squarecdn.com *.cash.app https://static.klaviyo.com *.fontawesome.com maxcdn.bootstrapcdn.com *.cloudflare.com *.cloudfront.net *.typekit.net foursixty.com *.trustedshops.com *.usercentrics.eu *.trustpilot.com *.googleapis.com *.freshworks.com s3.amazonaws.com/assets.freshdesk.com/ *.zip.co tags.srv.stackadapt.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.cdninstagram.com *.instagram.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.magento-datasolutions.com *.magento-ds.com https://api.addressfinder.io *.afterpay.com *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com *.cash.app api.lab.amplitude.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.cloudflare.com *.cloudfront.net foursixty.com *.paypal.com *.googleapis.com *.addthis.com *.addthisedge.com *.moatads.com *.intercom.io *.cdninstagram.com *.instagram.com *.clarity.ms *.doubleclick.net *.freshworks.com google.com *.hotjar.io *.zip.co tags.srv.stackadapt.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://ultron-agent.wanwang.xin; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://*.googletagmanager.com https://ultron-agent.wanwang.xin; frame-src 'self' https://www.googletagmanager.com https://ultron-agent.wanwang.xin; base-uri 'self'; form-action 'self'; object-src 'none' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.klarnacdn.net *.klevu.com *.ksearchnet.com https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.nosto.com *.nos.to 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.zenaps.com *.fls.doubleclick.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.nosto.com *.nos.to *.klarna.com https://www.googletagmanager.com/ js.mollie.com https://www.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.awin1.com *.zenaps.com *.wepowerconnections.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.nosto.com *.nos.to *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.mollie.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.nosto.com *.nos.to *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.klevu.com *.ksearchnet.com widget.freshworks.com m2epro.freshdesk.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ js.mollie.com https://www.google.com https://www.gstatic.com https://js.klevu.com https://www.bakerross.ie 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.nosto.com *.nos.to *.klarnacdn.net https://static.klaviyo.com *.klevu.com *.ksearchnet.com widget.freshworks.com m2epro.freshdesk.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.wepowerconnections.com https://the.sciencebehindecommerce.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.nosto.com *.nos.to *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com widget.freshworks.com m2epro.freshdesk.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://20a27546-5165-4716-8e1c-c91dee6f68ae.sansec.watch/; report-to report-endpoint; 1
base-uri 'self'; default-src 'self' 'nonce-f28d11c5ed840f7ffb1e52e3466399e5' https://cdn.shopify.com https://shopify.com; frame-ancestors 'none'; style-src 'self' https://fonts.googleapis.com https://static.klaviyo.com https://cdn-widgetsrepository.yotpo.com https://cdn-widget-assets.yotpo.com https://staticw2.yotpo.com https://widget.trustpilot.com 'self' 'unsafe-inline' https://cdn.shopify.com; connect-src 'self' https://*.sentry.io https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://www.googleadservices.com https://www.google.com https://www.google.co.uk/ https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://fast.a.klaviyo.com https://a.klaviyo.com https://static-forms.klaviyo.com https://sdk.postscript.io https://sdk-api-proxy.postscript.io/ https://server.veeperapp.com/api/ https://bicp-analytics.postscript.io/api/v1/page_events https://cdn-widgetsrepository.yotpo.com https://staticw2.yotpo.com https://api-cdn.yotpo.com https://widget.trustpilot.com https://consumer.trustpilot.com https://stream.mux.com https://*.mux.com https://*.litix.io 'self' https://cdn.shopify.com/ https://monorail-edge.shopifysvc.com https://us.manage.myskylight.com https://us.manage.myskylight.com; script-src 'self' https://cdn.shopify.com https://*.googletagmanager.com https://googletagmanager.com https://googleads.g.doubleclick.net https://static-tracking.klaviyo.com https://static.klaviyo.com https://sdk.postscript.io https://cdn.sdk.veeperapp.com https://cdn-widgetsrepository.yotpo.com https://staticw2.yotpo.com https://widget.trustpilot.com 'nonce-f28d11c5ed840f7ffb1e52e3466399e5'; img-src 'self' https://cdn.shopify.com https://*.googletagmanager.com https://*.google-analytics.com https://www.google.com https://www.google.co.uk/ https://googleads.g.doubleclick.net https://strategicmedia-1-adswizz.attribution.adswizz.com https://arttrk.com/pixel/ https://pixel.tapad.com/idsync/ https://cdn-widgetsrepository.yotpo.com https://cdn-yotpo-images-production.yotpo.com data: http://p.yotpoapi.com https://consumer.trustpilot.com https://image.mux.com; frame-src 'self' https://*.googletagmanager.com https://sdk.postscript.io https://widget.trustpilot.com https://consumer.trustpilot.com; font-src 'self' data: https://static.klaviyo.com https://skylight-marketing-fonts.s3.amazonaws.com https://skylight-marketing-fonts.s3.us-east-1.amazonaws.com https://fonts.gstatic.com https://cdn-widgetsrepository.yotpo.com 1
default-src 'self'; connect-src 'self'; form-action 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; frame-src 'self' https://mycollexion.com; font-src 'self' data:; object-src 'none'; img-src 'self' data: https:; frame-ancestors 'none'; report-uri /csp-report/ 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.checkout.com *.fontawesome.com fonts.googleapis.com *.fonts.googleapis.com data: *.cloudflare.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.moyasar.com https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com *.youtube.com *.braintreegateway.com *.paypal.com google.com *.google.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com *.amwal.tech *.amwal.dev https://unpkg.com https://eu-test.oppwa.com https://eu-test.ppipe.net https://secure.iframe.com https://iframe.com *.checkout.com *.klarna.com *.weltpixel.com https://checkout.tabby.ai *.google.com/ *.addthis.com *.pinterest.com *.moyasar.com https://plumrocket.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com *.checkout.com https://www.magezon.com *.cloudflare.com https://cdn.klarna.com https://s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.addthis.com *.pinterest.com *.cdninstagram.com *.tamara.co ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://firebasestorage.googleapis.com *.moyasar.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com *.amwal.tech *.amwal.dev https://unpkg.com https://eu-test.oppwa.com https://test.ppipe.net https://secure.iframe.com https://iframe.com *.sentry.io www.apptrian.com *.checkout.com *.klarnacdn.net https://www.googletagmanager.com tagmanager.google.com https://checkout.tabby.ai http://cdnjs.cloudflare.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.tamara.co chimpstatic.com downloads.mailchimp.com *.list-manage.com *.gstatic.com *.avada.io *.shopify.com *.google.com/ *.moyasar.com https://cdn.jrnf.baytonia.com https://static.journify.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.checkout.com tagmanager.google.com *.fontawesome.com https://cdnjs.cloudflare.com *.tamara.co downloads.mailchimp.com *.google.com *.gstatic.com https://fonts.bunny.net *.moyasar.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com *.tamara.co 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amwal.tech *.amwal.dev https://unpkg.com *.ingest.us.sentry.io www.apptrian.com *.checkout.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.browser-intake-datadoghq.com https://www.google-analytics.com https://checkout.tabby.ai *.cloudflare.com *.googleapis.com *.addthis.com *.cardinalcommerce.com https://graph.instagram.com *.tamara.co http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io *.moyasar.com https://jrnf.baytonia.com https://t.journify.io https://static.journify.io https://cdn.jrnf.baytonia.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com data: *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.facebook.com *.facebook.net *.clarity.ms get.geojs.io stats.g.doubleclick.net *.zdassets.com *.zendesk.com rum-collector-2.pingdom.net bam.nr-data.net *.klaviyo.com *.xtento.com *.tiktok.com *.google.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://www.facebook.com/tr/ 'self' 'unsafe-inline'; frame-ancestors *.bebemundo.com.do *.jugueton.com.do *.zdassets.com *.hotjar.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com cdn.dnky.co amc.demdex.net www.google.com youtube.com https://applepay.cdn-apple.com *.facebook.com *.facebook.net *.clarity.ms get.geojs.io stats.g.doubleclick.net *.zdassets.com *.zendesk.com rum-collector-2.pingdom.net bam.nr-data.net *.klaviyo.com *.xtento.com *.tiktok.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://www.hotjar.com https://static.hotjar.com https://script.hotjar.com https://www.facebook.com/tr/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com maps.gstatic.com maps.googleapis.com accounts.google.com *.facebook.com *.facebook.net *.clarity.ms get.geojs.io stats.g.doubleclick.net *.zdassets.com *.zendesk.com rum-collector-2.pingdom.net bam.nr-data.net *.klaviyo.com *.xtento.com *.tiktok.com *.google.com *.google.com.pa www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com https://googleads.g.doubleclick.net www.google.com.ar www.google.com.do https://www.googletagmanager.com https://www.m.casacuesta.com https://connect.facebook.net https://notifications-icommkt.website data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com https://applepay.cdn-apple.com *.braintreegateway.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com cdn.dnky.co r1-t.trackedlink.net www.gstatic.com js-agent.newrelic.com bam.nr-data.net maps.googleapis.com player.vimeo.com *.googleapis.com *.gstatic.com *.facebook.com *.facebook.net *.clarity.ms get.geojs.io stats.g.doubleclick.net *.zdassets.com *.zendesk.com rum-collector-2.pingdom.net *.klaviyo.com *.xtento.com *.tiktok.com *.pangle-ads.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com https://www.google.com https://www.hotjar.com https://static.hotjar.com https://script.hotjar.com https://www.google-analytics.com https://stats.g.doubleclick.net http://www.google.com/recaptcha/api.js https://d12zyq17vm1xwx.cloudfront.net/v2/wpn.min.js https://static.cloudflareinsights.com/ https://www.gstatic.com/recaptcha/releases/tFhBvPrftr7Y91fo1S1ASkA6/recaptcha__es.js https://externalassets.icommarketing.com/icomMkt_tracking_jquery.min.js https://static.zdassets.com ekr.zdassets.com https://maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.dnky.co *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://static.zdassets.com *.youtube.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com api.comapi.com bam.nr-data.net maps.googleapis.com https://apple.com https://applepay.cdn-apple.com https://apple-pay-gateway.apple.com https://apple-pay-gateway-cert.apple.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com *.facebook.com *.facebook.net *.clarity.ms get.geojs.io stats.g.doubleclick.net *.zdassets.com *.zendesk.com rum-collector-2.pingdom.net *.klaviyo.com *.xtento.com *.tiktok.com *.pangle-ads.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com https://www.hotjar.com https://script.hotjar.com https://analytics.google.com https://stats.g.doubleclick.net https://www.facebook.com/tr/ http://ccnecommerce.com/ https://notifications-icommkt.com/ https://track-icommkt.com/ wss://widget-mediator.zopim.com/ *.youtube.com https://static.zdassets.com ekr.zdassets.com jugueton.zendesk.com bebemundord.zendesk.com casacuesta.zendesk.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' *.aswo.com *.euras.com *.aswo.net ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.aswo.com *.euras.com *.aswo.net ; style-src 'self' 'unsafe-inline' *.aswo.com *.euras.com *.aswo.net ; img-src 'self' 'unsafe-inline' *.aswo.com *.euras.com *.aswo.net data: ; font-src 'self' 'unsafe-inline' *.aswo.com *.euras.com *aswo.net ; connect-src 'self' *.aswo.com *.euras.com *aswo.net ; object-src 'self' 'unsafe-inline' *.aswo.com *.euras.com *.aswo.net ; report-uri /log881.php; 1
object-src 'none';base-uri 'self';script-src 'nonce-hnzIHK2p81vF_QUiRlBmow' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none'; worker-src 'self'; base-uri 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' challenges.cloudflare.com js.stripe.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: cdn.onlylinks.com *.r2.dev *.cdninstagram.com *.twimg.com *.pexels.com images.pexels.com randomuser.me; connect-src 'self' analytics.onlylinks.com *.sentry.io *.stripe.com challenges.cloudflare.com; frame-src 'self' challenges.cloudflare.com js.stripe.com *.youtube.com; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self' https://*.saddleback.com; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.saddleback.com https://www.googletagmanager.com https://js.monitor.azure.com https://*.applicationinsights.azure.com https://js.cdn.applicationinsights.io https://js.cdn.monitor.azure.com https://az416426.vo.msecnd.net https://tags.srv.stackadapt.com https://connect.facebook.net https://cdn.jsdelivr.net https://unpkg.com https://code.jquery.com https://cdnjs.cloudflare.com https://ajax.googleapis.com https://maps.googleapis.com https://cdn.jwplayer.com https://*.jwpcdn.com https://www.gstatic.com https://www.youtube.com https://player.vimeo.com https://players.sardius.media https://cdn.s73cloud.com https://artifact.plugin.npaw.com https://s3.amazonaws.com https://js.stripe.com https://source.zoom.us https://www.google-analytics.com https://ssl.google-analytics.com https://fast.wistia.com https://fast.wistia.net https://browser.sentry-cdn.com; style-src 'self' 'unsafe-inline' https://cdn-images.mailchimp.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://use.typekit.net https://p.typekit.net https://tags.srv.stackadapt.com https://unpkg.com https://code.jquery.com https://ajax.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://use.typekit.net https://cdn.jsdelivr.net; img-src 'self' data: blob: https://*.saddleback.com https://saddleback.com https://www.facebook.com https://img.youtube.com https://i.vimeocdn.com https://*.amazonaws.com https://*.cloudfront.net https://*.blob.core.windows.net https://saddlebackmscdnprod.azureedge.net https://media.saddlebackfamily.com https://p.typekit.net https://qr.payme.hsbc.com.hk https://maps.googleapis.com https://maps.gstatic.com https://*.gstatic.com https://*.google-analytics.com https://www.googletagmanager.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://unpkg.com https://*.jwpltx.com https://*.giphy.com https://*.wistia.com https://*.wistia.net https://embedwistia-a.akamaihd.net https://embed-fastly.wistia.com https://embed-cloudfront.wistia.com https://storage.sardius.media; media-src 'self' blob: https://*.saddleback.com https://*.amazonaws.com https://resi.media https://lib.resi.media https://cdn.jwplayer.com https://content.jwplatform.com https://*.jwpcdn.com https://players.sardius.media https://storage.sardius.media https://media.saddlebackfamily.com https://sbstoragecdnprod.blob.core.windows.net https://*.wistia.com https://*.wistia.net https://embedwistia-a.akamaihd.net https://embed-fastly.wistia.com https://embed-cloudfront.wistia.com; frame-src 'self' https://*.saddleback.com https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://form.jotform.com https://*.transistor.fm https://players.sardius.media https://*.zoom.us https://give.tithe.ly https://give.tithelyqa.com https://js.stripe.com https://hooks.stripe.com https://fast.wistia.net; connect-src 'self' blob: https://*.saddleback.com https://dc.services.visualstudio.com https://*.in.applicationinsights.azure.com https://*.applicationinsights.azure.com https://js.monitor.azure.com https://js.cdn.applicationinsights.io https://js.cdn.monitor.azure.com https://tags.srv.stackadapt.com https://connect.facebook.net https://www.facebook.com https://www.googletagmanager.com https://*.google-analytics.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://www.youtube.com https://vimeo.com https://*.vimeocdn.com https://*.jwplayer.com https://*.jwpltx.com https://content.jwplatform.com https://fast.wistia.com https://*.wistia.com https://*.wistia.net https://*.ingest.sentry.io https://*.ingest.us.sentry.io https://api.stripe.com https://ipapi.co https://maps.googleapis.com https://saddleback.us10.list-manage.com https://source.zoom.us https://*.zoom.us wss://*.zoom.us https://resi.media https://lib.resi.media https://api.sardius.media https://storage.sardius.media https://players.sardius.media https://licensing.bitmovin.com https://*.s73cloud.com wss://*.s73cloud.com https://*.npaw.com https://*.youboranqs01.com https://api.giphy.com; worker-src 'self' blob:; form-action 'self' https://*.saddleback.com https://give.tithe.ly https://give.tithelyqa.com https://saddleback.us10.list-manage.com https://form.jotform.com https://login.planningcenteronline.com 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.instagram.com *.google.com.ua *.google.co.uk 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cdninstagram.com *.fbcdn.net/ *.google.com *.google.com.ua *.google.co.uk *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.instagram.com stats.g.doubleclick.net apple.com *.apple.com *.google.com.ua *.google.co.uk *.gstatic.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com stats.g.doubleclick.net apple.com *.apple.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/passwords_google 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com unicons.iconscout.com static.klaviyo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.facebook.com *.googletagmanager.com *.tiktok.com *.cookiebot.com *.cookiebot.eu js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://plumrocket.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com *.cookiebot.com *.cookiebot.eu d3k81ch9hvuctc.cloudfront.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.cookiebot.com *.cookiebot.eu https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com unicons.iconscout.com static-tracking.klaviyo.com https://static.klaviyo.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com *.cookiebot.com *.cookiebot.eu https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; connect-src 'self' https://hyubm2fzmb.execute-api.us-east-1.amazonaws.com https://maps.googleapis.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.sandbox.paypal.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://www.google.com; img-src 'self' data https://d21y75miwcfqoq.cloudfront.net https://www.googletagmanager.com https://prod-totalplay-residencial-mx.s3.us-east-1.amazonaws.com; manifest-src 'self'; script-src 'self' https://www.sandbox.paypal.com https://maps.googleapis.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.paypal.com; style-src 'self' https://fonts.googleapis.com; object-src 'none'; media-src 'self'; worker-src 'self'; base-uri 'self'; frame-ancestors 'self'; report-to csp-endpoint; form-action 'self' 1
media-src *; worker-src 'none'; font-src 'self' data:; frame-src demo.arcade.software; img-src blob: data: *; script-src 'self' 'unsafe-inline' 'report-sample' 'nonce-s7cEbiGp4EF1tGxUGhkaDQ=='; base-uri 'none'; frame-ancestors 'none'; style-src 'unsafe-inline' *; default-src 'none'; object-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io browser.sentry-cdn.com 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klevu.com *.ksearchnet.com https://staticfiles.solutiontree.com https://contentstatic.solutiontree.com *.cloudflare.com *.twitter.com *.olark.com *.trustedshops.com *.googleapis.com https://fast.fonts.net *.yotpo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net secure.authorize.net test.authorize.net *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.authorize.net https://fast.wistia.net https://www.googletagmanager.com secure.authorize.net test.authorize.net 1eaf.cardinalcommerce.om *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.weltpixel.com *.yotpo.com https://mkt.solution-tree.com https://mkt.solutiontree.com https://mkt.marzanoresources.com *.olark.com https://bid.g.doubleclick.net https://docs.google.com https://drive.google.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.klevu.com *.ksearchnet.com *.facebook.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://staticfiles.solutiontree.com https://contentstatic.solutiontree.com https://cloudfront-s3.solutiontree.com https://marzano-s3.solutiontree.com https://mediafiles.solutiontree.com https://solutiontree.s3.amazonaws.com https://px.ads.linkedin.com https://t.co https://www.google.com  https://www.google.co.in https://*.google-analytics.com https://*.analytics.google.com https://*.usercentrics.eu https://www.facebook.com https://d.adroll.com https://log.olark.com https://dc.ads.linkedin.com https://googleads.g.doubleclick.net https://dsum-sec.casalemedia.com https://pixel.rubiconproject.com https://pixel.advertising.com https://sync.outbrain.com https://simage2.pubmatic.com https://ads.yahoo.com https://sync.taboola.com https://eb2.3lift.com https://p.adsymptotic.com https://ups.analytics.yahoo.com https://soltreemrls3.s3-us-west-2.amazonaws.com *.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com *.olark.com https://soltreemrls3.s3.us-west-2.amazonaws.com blob: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://lookupapi.agile-ed.com *.klevu.com *.ksearchnet.com *.googletagmanager.com *.facebook.net www.termsfeed.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net https://cdn.raygun.io https://staticfiles.solutiontree.com https://contentstatic.solutiontree.com https://connect.facebook.net https://s.adroll.com https://snap.licdn.com https://static.ads-twitter.com https://script.crazyegg.com https://analytics.twitter.com https://d.adroll.com https://fast.wistia.com https://fast.wistia.net https://static.olark.com https://pi.pardot.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net secure.authorize.net test.authorize.net *.google.co.in *.facebook.com *.olark.com/ *.pardot.com/ *.cloudflare.com *.twitter.com *.linkedin.com *.twimg.com *.gstatic.com *.paypalobjects.com *.paypal.com *.bootstrapcdn.com https://*.google-analytics.com https://*.analytics.google.com https://app.usercentrics.eu js.braintreegateway.com *.cardinalcommerce.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.yotpo.com https://mkt.solution-tree.com https://mkt.solutiontree.com https://mkt.marzanoresources.com https://static.cloudflareinsights.com https://docs.google.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.klevu.com *.ksearchnet.com https://staticfiles.solutiontree.com https://contentstatic.solutiontree.com https://s.adroll.com *.olark.com https://fast.fonts.net/ *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.olark.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.klevu.com *.ksearchnet.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net https://api.raygun.io https://staticfiles.solutiontree.com https://contentstatic.solutiontree.com https://stats.g.doubleclick.net https://script.crazyegg.com https://www.facebook.com https://s.adroll.com https://d.adroll.com https://tracking.crazyegg.com https://*.google-analytics.com https://*.analytics.google.com https://*.usercentrics.eu *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com api.braintreegateway.com client-analytics.sandbox.braintreegateway.com client-analytics.braintreegateway.com *.yotpo.com *.olark.com *.crazyegg.com www.google.com 'self' 'unsafe-inline'; child-src https://docs.google.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';base-uri 'self';frame-ancestors 'self' https://bassett.org/ https://www.bassett.org/;frame-src 'self' epichttp: https://cdnapisec.kaltura.com/ https://salucro5.salucro.com https://soap.bassett.org;script-src 'nonce-d12cdfdb4c5d4667a1664382d4351a1a' https://www.mybassetthealthconnection.org 'self';img-src https://* 'self' blob: data:;connect-src 'self' epichttp:;style-src https://www.mybassetthealthconnection.org 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://code.jquery.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://static-m.meteo.cat; font-src 'self' https://fonts.gstatic.com; 1
default-src 'self' *.idiap.ch; style-src 'self' 'unsafe-inline' *.idiap.ch; script-src 'self' 'unsafe-inline' *.idiap.ch; frame-ancestors 'self' *.idiap.ch; report-uri https://cdn.idiap.ch/666/csp-violation?token=da39a3ee5e6b4b0d3255bfef95601890&uri=/en&ip=172.30.0.1 1
default-src 'self'; script-src 'self' 'nonce-d254727b-34bb-4b6d-b5b4-c6864edf1477' 'strict-dynamic' https: 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://www.gstatic.com; img-src 'self' data: blob: https:; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com; frame-ancestors 'none'; upgrade-insecure-requests; report-uri /api/csp-report; 1
default-src 'self' *.analytics.google.com *.clarity.ms *.google-analytics.com *.googletagmanager.com affil.eshop-rychle.cz consent.cookie-script.com exponea-api.eshop-rychle.cz googleads.g.doubleclick.net pagead2.googlesyndication.com stats.g.doubleclick.net www.google.com www.youtube.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com; font-src 'self' *.hotjar.com fonts.gstatic.com; img-src 'self' *.bing.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.hotjar.com bat.bing.com c.seznam.cz googleads.g.doubleclick.net www.facebook.com www.google.com www.google.cz www.seznam.cz; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.googletagmanager.com *.hotjar.com affil.eshop-rychle.cz bat.bing.com c.imedia.cz c.seznam.cz cdn.cookie-script.com connect.facebook.net exponea-api.eshop-rychle.cz googleads.g.doubleclick.net static.hotjar.com script.hotjar.com www.clarity.ms www.google.com www.googleadservices.com www.gstatic.com www.seznam.cz; style-src 'self' 'unsafe-inline' *.hotjar.com fonts.googleapis.com 1
font-src *.bootstrapcdn.com *.gstatic.com *.googleapis.com *.paypal.com *.juicer.io/fonts/ *.fontawesome.com https://fonts.gstatic.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://plumrocket.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.certcapture.com *.google.com https://plumrocket.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.certcapture.com *.bootstrapcdn.com *.googleapis.com *.paypal.com *.gstatic.com *.paypalobjects.com *.omtrdc.net magefan.com cm.magefan.com *.google.com *.mageside.com mageside.com *.disqus.com *.juicer.io https://img.youtube.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.certcapture.com https://developer.adobe.com https://magento.com https://cdn.avmws.com/ http://cdn.avmws.com/ *.bootstrapcdn.com *.googleapis.com www.google.com *.paypal.com *.gstatic.com chimpstatic.com freegeoip.net *.ipstack.com *.google.com *.disqus.com *.juicer.io/embed.js cdn.jsdelivr.net services.sheerid.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.certcapture.com *.bootstrapcdn.com *.googleapis.com *.paypal.com *.gstatic.com *.juicer.io/embed.css cdn.jsdelivr.net *.fontawesome.com https://fonts.googleapis.com *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.certcapture.com https://developer.adobe.com https://cdn.avmws.com/ http://cdn.avmws.com/ *.juicer.io *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.clarity.ms https://scripts.clarity.ms https://www.google-analytics.com https://www.googleadservices.com https://www.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://*.google-analytics.com https://www.googletagmanager.com https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.clarity.ms https://archive.mtsoln.com https://vitals.vercel-insights.com; frame-src https://www.googletagmanager.com https://td.doubleclick.net; frame-ancestors 'self'; object-src 'none'; base-uri 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://*.sentry.io https://www.gstatic.com https://*.firebaseio.com https://cdn.ideanetwork.site; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.sentry.io https://*.googleapis.com https://*.firebaseio.com wss://*.firebaseio.com https://cdn.ideanetwork.site; media-src 'self' https: blob:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://platform.twitter.com https://www.instagram.com https://www.tiktok.com; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /api/csp-report 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss:; media-src 'self' https: data: blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https://UMHEALTHCAREEPICIFRAME-PP-PRTLTST.SPECTRUMRETAILNET.COM https://cdn.instamed.com/ https://cdnapisec.kaltura.com/ https://epicproxy.et0747.epichosted.com https://pay.instamed.com/ https://umhealthcareepiciframe-pp-prtl.spectrumretailnet.com;script-src 'nonce-363d5279738648338d93313aeaf9271e' https://myuhealthchart.com 'self';img-src https://* 'self' blob: data:;connect-src 'self' epichttp:;style-src https://myuhealthchart.com 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: https://fonts.gstatic.com tag.search.sensefuel.live *.fontawesome.com https://cdnjs.cloudflare.com * data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.hipay-tpp.com *.hipay.com *.weltpixel.com *.devatics.com *.hypay.com *.criteo.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.facebook.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.googleapis.com https://images.unsplash.com *.amazonaws.com *.criteo.com *.googletagmanager.com *.google-analytics.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.doubleclick.net *.tremorhub.com *.dmxleo.com *.advertising.com *.yieldmo.com *.outbrain.com *.taboola.com *.artadserver.com *.3lift.com *.360yield.com *.smartadserver.com *.pubmatic.com *.casalemedia.com *.teads.tv *.media.net *.adform.net *.omnitagjs.com *.sharethrough.com *.ivitrack.com *.stickyadstv.com *.mediavine.com *.smaato.net *.adnxs.com *.bing.com *.yahoo.com *.liadm.com *.imgix.net *.bidswitch.net *.facebook.com * *.pubads.g.doubleclick.net *.google.com *.google.fr data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.hipay-tpp.com *.hipay.com *.iesnare.com *.paypal.com secure-gateway.hipay-tpp.com tag.search.sensefuel.live *.axept.io *.abtasty.com fw-cdn.com *.criteo.net *.criteo.com *.googletagmanager.com ssl.google-analytics.com https://www.googletagmanager.com tagmanager.google.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.facebook.net * *.googleads.g.doubleclick.net *.googleadservices.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.hipay.com https://fonts.googleapis.com tag.search.sensefuel.live *.hypay.com *.fontawesome.com tagmanager.google.com https://cdnjs.cloudflare.com assets.braintreegateway.com * 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com data: *.iesnare.com * 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.hipay-tpp.com *.hipay.com wss://mpsnare.iesnare.com *.google.fr *.axept.io *.hypay.com *.search.sensefuel.live *.googletagmanager.com *.analytics.google.com https://www.google-analytics.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.doubleclick.net * *.stats.g.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com * http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'nonce-FfpmUIuqwk3D9B5K00M3Dw==' 'strict-dynamic' 'self' 'unsafe-inline' 'unsafe-eval' https://app.storyblok.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://accounts.google.com https://www.google.com https://www.gstatic.com https://recaptcha.net https://www.recaptcha.net https://challenges.cloudflare.com https://va.vercel-scripts.com https://*.clarity.ms https://*.paypal.com https://www.paypalobjects.com https://*.adyen.com https://applepay.cdn-apple.com https://appleid.cdn-apple.com https://connect.facebook.net https://analytics.tiktok.com https://bat.bing.com https://*.customer.io https://*.gist.build https://*.firstpromoter.com; style-src 'self' 'unsafe-inline' https://accounts.google.com https://applepay.cdn-apple.com; img-src 'self' data: blob: https:; font-src 'self' data: https://applepay.cdn-apple.com; connect-src 'self' https://api.tracklib.com https://api.test.tracklib.com wss://downloads.tracklib.com wss://downloads.test.tracklib.com https://api-eu.storyblok.com https://api.storyblok.com https://a.storyblok.com https://imagor.tracklib.com https://imagor.test.tracklib.com https://*.vercel-insights.com https://tracks-preview.t-lib.com https://sounds-preview.t-lib.com https://d1q68655ah1zmx.cloudfront.net https://d16rld81n68o3g.cloudfront.net https://d1crpx7nwhenps.cloudfront.net https://d1n23ssx177y99.cloudfront.net https://da9ovlny9o3pu.cloudfront.net https://dzjiezq5aqmg2.cloudfront.net https://*.clarity.ms https://*.sentry.io https://gtm.tracklib.com https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://ad.doubleclick.net https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://google.com https://accounts.google.com https://www.google.com https://recaptcha.net https://www.recaptcha.net https://*.paypal.com https://*.adyen.com https://applepay.cdn-apple.com https://*.facebook.com https://connect.facebook.net https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://analytics.pangle-ads.com https://*.pangleglobal.com https://bat.bing.com https://bat.bing.net https://*.customer.io https://*.gist.build https://*.firstpromoter.com; media-src 'self' data: blob: https:; frame-src 'self' https://app.storyblok.com https://gtm.tracklib.com https://*.gist.build https://accounts.google.com https://www.google.com https://td.doubleclick.net https://recaptcha.net https://www.youtube-nocookie.com https://www.youtube.com https://open.spotify.com https://bandcamp.com https://w.soundcloud.com https://*.paypal.com https://www.paypalobjects.com https://*.adyen.com https://applepay.cdn-apple.com https://*.facebook.com; worker-src 'self' blob:; manifest-src 'self'; frame-ancestors 'self' https://app.storyblok.com https://www.tracklib.com; base-uri 'self'; object-src 'none'; form-action 'self' https://*.adyen.com https://www.facebook.com; report-uri https://o64385.ingest.us.sentry.io/api/4511469182058496/security/?sentry_key=3d75fa6cc3cabf108110a148826ca1bf 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://*.google-analytics.com https://*.googletagmanager.com https://www.clarity.ms https://*.clarity.ms https://form.jotform.com https://*.jotform.com https://triad-chat-web.pages.dev https://chat.triadhq.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https: blob:; frame-src https://form.jotform.com https://*.cloudflarestream.com https://www.googletagmanager.com; connect-src 'self' https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://www.clarity.ms https://*.clarity.ms https://www.bing.com https://triad-chat-web.pages.dev https://chat.triadhq.com; report-uri /csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.sirv.com hobgoblin.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com/tr/ *.googlesyndication.com *.tiktok.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * hobgoblin.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com hobgoblin.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com/recaptcha/ www.googletagmanager.com *.trustpilot.com www.xtento.com hobgoblin.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com *.stripe.com *.stripe.network ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com services.postcodeanywhere.co.uk https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.sirv.com stats.g.doubleclick.net www.google.co.uk maps.gstatic.com/mapfiles/ https://s.ytimg.com bat.bing.com www.instagram.com *.cookieyes.com cdn-cookieyes.com *.googleapis.com widget.trustpilot.com www.xtento.com cdn.xtento.com hobgoblin.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com api.addressy.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.sirv.com player.vimeo.com googleads.g.doubleclick.net/pagead/viewthroughconversion/ google.com/pagead/ maps.googleapis.com/maps/ maps.googleapis.com/maps-api-v3/ *.usersnap.com mc.us7.list-manage.com assets.pinterest.com bat.bing.com polyfill.io *.algolia.net *.algolianet.com *.cookieyes.com cdn-cookieyes.com log.cookieyes.com directory.cookieyes.com *.klarna.net *.googleapis.com *.trustpilot.com www.xtento.com cdn.xtento.com hobgoblin.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com downloads.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com api.addressy.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.sirv.com *.typekit.net *.trustpilot.com hobgoblin.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.sirv.com hobgoblin.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolianet.com *.insights.algolia.io insights.algolia.io www.facebook.com/tr/ *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com api.addressy.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.sirv.com *.youtube.com blob: stats.g.doubleclick.net www.google.com maps.googleapis.com/maps/ maps.googleapis.com/maps-api-v3/ www.instagram.com *.cookieyes.com *.klarna.net *.googleapis.com widget.trustpilot.com hobgoblin.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com hobgoblin.com http: https: blob: 'self' 'unsafe-inline'; default-src hobgoblin.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net solerpalau.com www.solerpalau.com forms.hsforms.com api.hubspot.com api.hubapi.com perf-na1.hsforms.com track.hubspot.com cta-service-cms2.hubspot.com static.hubspot.com www.facebook.com px.ads.linkedin.com cdn.cookielaw.org www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com solerpalau.com www.solerpalau.com js.hs-scripts.com js.hs-banner.com js.hsadspixel.net js.hscollectedforms.net js.hs-analytics.net js.hubspot.com js.usemessages.com connect.facebook.net www.clarity.ms scripts.clarity.ms snap.licdn.com cdn.cookielaw.org js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com forms.hscollectedforms.net api.hubspot.com api.hubapi.com cta-service-cms2.hubspot.com px.ads.linkedin.com a.clarity.ms geolocation.onetrust.com cdn.cookielaw.org api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.fontawesome.com https://geowidget.easypack24.net https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com maxcdn.bootstrapcdn.com *.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.twitter.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.facebook.com connect.facebook.net salesbot.trafficwatchdog.pl *.trafficwatchdog.pl 'self' 'unsafe-inline'; frame-ancestors *.youtube.com salesbot.trafficwatchdog.pl *.trafficwatchdog.pl 'self'; frame-src bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.twitter.com https://geowidget-app.inpost.pl/ https://sandbox-easy-geowidget.easypack24.net/ https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.addthis.com youtube.com salesbot.trafficwatchdog.pl *.trafficwatchdog.pl 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com www.apptrian.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: *.hsforms.net *.hsforms.com www.google.pl ssl.ceneo.pl allekurier.pl icd.pl www.icd.pl cdn.samito.co icdpl.savecart.pl commerce-connector.com www.commerce-connector.com *.impartner.io savecart.pl *.savecart.pl *.cookiebot.com salesbot.trafficwatchdog.pl *.trafficwatchdog.pl data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com www.apptrian.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com *.avada.io player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com googletagmanager.com *.addthis.com s7.addthis.com m.addthis.com z.moatads.com *.addthisedge.com *.googleapis.com graph.facebook.com widgets.pinterest.com bam-cell.nr-data.net js-agent.newrelic.com bam.nr-data.net ssl.ceneo.pl cdn.allekurier.pl *.saleago.com icdpl.savecart.pl *.impartner.io *.hotjar.com savecart.pl *.savecart.pl *.cookiebot.com trafficscanner.pl *.trafficscanner.pl salesbot.trafficwatchdog.pl *.trafficwatchdog.pl 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://geowidget.easypack24.net https://geowidget.inpost.pl https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com *.bootstrapcdn.com icdpl.savecart.pl savecart.pl *.savecart.pl salesbot.trafficwatchdog.pl *.trafficwatchdog.pl 'self' 'unsafe-inline'; object-src *.youtube.com salesbot.trafficwatchdog.pl *.trafficwatchdog.pl 'self' 'unsafe-inline'; media-src www.apptrian.com https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com www.apptrian.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.easypack24.net *.inpost.pl *.openstreetmap.org https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com google.com t.elasticsuite.io *.hsforms.net *.hsforms.com bam.nr-data.net *.googleapis.com googleads.g.doubleclick.net *.saleago.com icdpl.savecart.pl stats.g.doubleclick.net *.hotjar.com *.hotjar.io wss://ws.hotjar.com savecart.pl *.savecart.pl *.cookiebot.com trafficscanner.pl *.trafficscanner.pl salesbot.trafficwatchdog.pl *.trafficwatchdog.pl 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.icd.pl/; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.fontawesome.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.googletagmanager.com *.demdex.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.dotdigital-pages.com *.dotdigital.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de cdn.dnky.co webchat.dotdigital.com *.doubleclick.net *.hotjar.com consentcdn.cookiebot.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de cdn.doofinder.com www.google.com www.google.es *.bing.com *.analytics.yahoo.com *.pinterest.com *.connectif.cloud *.yotpo.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net * www.paypalobjects.com js.braintreegateway.com www.paypal.com unpkg.com commerce.adobedtm.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de cdn.doofinder.com cdn.dnky.co webchat.dotdigital.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.doofinder.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com api.magento.com commerce.adobe.io www.google-analytics.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io p13n.adobe.io p13n-mr.adobe.io * commerce.adobedtm.com commerce.adobedc.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.doofinder.com wss://*.doofinder.com webchat.dotdigital.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';base-uri 'self';frame-ancestors 'self' https://hsw.et1267.epichosted.com/HSWeb_PRD/;frame-src 'self' epichttp: https://*.kaltura.com https://epicproxy.et1267.epichosted.com https://mychart-stg.personapay.com https://mychart.personapay.com;script-src 'nonce-61402db913ff48019aeb864e67001a88' 'self';img-src https://* 'self' blob: data:;connect-src 'self' epichttp: https://*.kaltura.com;style-src 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
default-src 'self'; connect-src 'self' https://*.usercentrics.eu https://analytics.algolia.com https://*.algolia.net https://insights.algolia.io https://*.scarabresearch.com https://*.abtasty.com https://api-js.mixpanel.com https://maps.googleapis.com https://maps.gstatic.com https://www.google.com https://www.google.de https://ams.creativecdn.com https://bat.bing.net https://bat.bing.com https://*.pinterest.com https://www.googleadservices.com https://locator.uberall.com https://*.mapbox.com https://google.com/ https://api.friendlycaptcha.com https://*.adyen.com https://*.zenloop.com https://*.sovendus.com https://api.userlike.com https://userlike-cdn-umm.b-cdn.net https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://www.facebook.com https://webchannel-content.eservice.emarsys.net https://www.paypal.com https://www.sandbox.paypal.com https://apple-pay-gateway.apple.com https://apple-pay-gateway-cert.apple.com https://sgtm.blume2000.de https://sgtm.blume2000.at https://eu-api.friendlycaptcha.eu wss://umd.userlike.com umd.userlike.com https://userlike-cdn-web.b-cdn.net https://www.userlike.com blob: https://y.clarity.ms https://s.clarity.ms https://v.clarity.ms https://blume2000.app.baqend.com; script-src 'self' https://*.usercentrics.eu https://*.scarabresearch.com https://try.abtasty.com https://maps.googleapis.com https://www.googletagmanager.com https://va.vercel-scripts.com https://sgtm.blume2000.de https://sgtm.blume2000.at https://connect.facebook.net https://s.pinimg.com https://ct.pinterest.com https://tags.creativecdn.com https://bat.bing.com https://www.dwin1.com https://lantern.roeyecdn.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://cdn.jsdelivr.net/gh/paulirish/lite-youtube-embed@master/src/lite-yt-embed.js https://locator.uberall.com https://*.mapbox.com https://zenloop-website-overlay-production.s3.amazonaws.com https://*.zenloop.com https://userlike-cdn-umm.b-cdn.net https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://api.sovendus.com https://vercel.live https://www.paypal.com https://apple-pay-gateway.apple.com https://apple-pay-gateway-cert.apple.com https://applepay.cdn-apple.com https://pay.google.com https://dynamic.criteo.com https://sslwidget.criteo.com https://*.abtasty.com https://www.clarity.ms https://scripts.clarity.ms 'unsafe-inline' 'unsafe-eval' https://api.userlike.com https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://www.clarity.ms https://scripts.clarity.ms https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://blume2000.app.baqend.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://*.abtasty.com; img-src 'self' data: blob: https://suite16.emarsys.net https://link.mailing.blume2000.de https://link.mailing.blume2000.at https://*.abtasty.com https://res.cloudinary.com https://maps.gstatic.com https://maps.googleapis.com https://app.usercentrics.eu https://lantern.roeye.com https://bat.bing.net https://bat.bing.com https://www.google.com https://www.google.de https://www.googleadservices.com https://www.facebook.com https://i.ytimg.com/ https://www.googletagmanager.com https://locator.uberall.com https://connect.facebook.net https://*.cdn.adyen.com https://*.doubleclick.net https://uct.service.usercentrics.eu https://www.paypalobjects.com https://*.google-analytics.com https://storage.googleapis.com https://api.mapbox.com https://ib.adnxs.com https://rt.udmserve.net https://cm.adform.net https://ih.adscale.de https://cm.g.doubleclick.net https://visitor.omnitagjs.com https://pixel.advertising.com https://ice.360yield.com https://dsum-sec.casalemedia.com https://pixel.rubiconproject.com https://hbx.media.net https://cs.mobfox.com/ https://cm.mgid.com https://onetag-sys.com https://us-u.openx.net https://sync.outbrain.com https://simage2.pubmatic.com https://bh.contextweb.com https://s.seedtag.com/ https://match.sharethrough.com https://s.ad.smaato.net https://us.ck-ie.com https://ce.lijit.com https://sync.taboola.com https://eb2.3lift.com https://s-cs.rmp.rakuten.com https://dot.wp.pl https://ad.yieldlab.net https://ads.yieldmo.com https://t.visx.net https://ssc-cms.33across.com/ https://inv-nets.admixer.net https://sync.e-planning.net https://csync.loopme.me https://adn.caprofitx.com https://sync.addlv.smt.docomo.ne.jp https://sync.teads.tv https://sync.console.adtarget.com.tr https://dot.wp.pl https://sync.1rx.io https://ssp-csync.smartadserver.com https://rtb.gumgum.com https://sync.connectad.io https://csync.smilewanted.com https://sync.go.sonobi.com https://fast.nexx360.io https://hb.yahoo.net https://sync-service.net https://sync.cootlogix.com https://cs.adingo.jp https://sync.inmobi.com https://stickyadstv.com https://yellowblue.io https://dmxleo.com https://ms-cookie-sync.presage.io https://adtech.ink https://cm-exchange.toast.com https://ad.as.amanad.adtdp.com https://sync.bidence.net https://cs.gssprt.jp https://sp.gmossp-sp.jp/ https://analytics.ad.daum.net https://s-cs.send.microad.jp https://mixer.mobon.net https://tg.socdm.com https://sync.ad-stir.com https://t.adx.opera.com https://ad.tpmn.co.kr https://userlike-cdn-operators.userlike.com https://userlike-cdn-operators.s3-eu-west-1.amazonaws.com https://userlike-cdn-web.b-cdn.net https://www.userlike.com https://userlike-store-media-files.s3.amazonaws.com https://i.ytimg.com https://privacy-proxy-server.usercentrics.eu/video/youtube/; font-src 'self' https://res.cloudinary.com https://locator.uberall.com https://assets.zenloop.com https://userlike-cdn-umm.b-cdn.net https://*.abtasty.com https://applepay.cdn-apple.com https://fonts.gstatic.com; worker-src 'self' blob:; frame-src 'self' https://www.youtube-nocookie.com https://www.youtube.com https://www.googletagmanager.com https://ct.pinterest.com https://www.facebook.com https://*.adyen.com https://www.sovendus-connect.com https://www.sovendus-benefits.com https://vercel.live/ https://www.paypal.com https://www.sandbox.paypal.com https://apple-pay-gateway.apple.com https://apple-pay-gateway-cert.apple.com https://pay.google.com https://gum.criteo.com https://sgtm.blume2000.de https://sgtm.blume2000.at https://ams.creativecdn.com https://*.edb.com https://*.abtasty.com https://applepay.cdn-apple.com https://api.userlike.com https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://userlike-cdn-umm.b-cdn.net https://www.youtube.com https://player.vimeo.com; frame-ancestors 'self' https://app.storyblok.com https://blume2000.io https://*.blume2000.io https://blume2000.de https://*.blume2000.de https://blume2000.at https://*.blume2000.at http://localhost:3000 http://localhost:3001; media-src 'self' https://userlike-cdn-umm.b-cdn.net https://userlike-store-media-files.s3.amazonaws.com https://www.userlike.com blob:; child-src 'self' https://api.userlike.com https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://userlike-cdn-umm.b-cdn.net blob:; object-src 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://cmp.osano.com https://acsbapp.com https://js.hs-scripts.com https://js.hsforms.net https://lltrck.com https://mimoto-agent-releases.s3.us-west-1.amazonaws.com https://va.vercel-scripts.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://cdn.sanity.io; font-src 'self'; connect-src 'self' https://fo9xc2x1.api.sanity.io https://641MIWOHXO-dsn.algolia.net https://captcha.mimoto.ai https://va.vercel-scripts.com https://vitals.vercel-insights.com https://*.google-analytics.com https://*.analytics.google.com https://cmp.osano.com https://forms.hsforms.com https://lltrck.com; frame-src https://www.youtube-nocookie.com https://open.spotify.com https://www.googletagmanager.com 1
base-uri 'self'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubbc97f311fa4b760aa9d5cff03790e285&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=production; font-src 'self' fast.fonts.net fonts.gstatic.com *.fontawesome.com d2m21dzi54s7kp.cloudfront.net cdnjs.cloudflare.com data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' d2m21dzi54s7kp.cloudfront.net *.googletagmanager.com *.addthis.com *.addthisedge.com *.informz.net *.adroll.com *.snapengage.com *.bugherd.com *.facebook.com *.bootstrapcdn.com cdnjs.cloudflare.com polyfill.io *.moatads.com *.fontawesome.com *.google-analytics.com *.licdn.com *.googleapis.com *.facebook.net; media-src 'self'; object-src 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://*.ezoic.net https://*.ezoic.com https://*.ezoic.ai https://www.youtube.com https://s.ytimg.com https://*.googlesyndication.com https://*.doubleclick.net https://connect.facebook.net https://platform.twitter.com https://assets.pinterest.com https://chat.nettv4u.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; frame-src 'self' https://www.youtube.com https://www.facebook.com https://platform.twitter.com https://www.instagram.com https://td.doubleclick.net https://*.ezoic.net; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://*.ezoic.net https://*.ezoic.com https://chat.nettv4u.com; media-src 'self' data: https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
default-src https:; connect-src https: wss:; script-src https: 'unsafe-eval' 'unsafe-inline' blob:; script-src-elem https: 'unsafe-eval' 'unsafe-inline' blob:; img-src https: data: blob:; media-src https: data: blob:; frame-src https: data: blob:; form-action 'self' https://www.facebook.com; font-src https: data:; style-src 'unsafe-inline' https:; worker-src https: blob:;report-to csp-report-endpoint 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self' https://app.agilitycms.com; form-action 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://unpkg.com https://scripts.teamtailor-cdn.com; style-src 'self' 'unsafe-inline' https://unpkg.com; img-src 'self' data: blob: https://*.aglty.io https://cdn-ca.agilitycms.com https://www.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://i.ytimg.com https://i.vimeocdn.com; font-src 'self' data:; media-src 'self' https://*.aglty.io https://cdn-ca.agilitycms.com; connect-src 'self' https://app.agilitycms.com https://*.algolia.net https://*.algolianet.com https://*.in.applicationinsights.azure.com https://js.monitor.azure.com https://www.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://app.powerbi.com https://forms.cloud.microsoft; worker-src 'self' blob:; manifest-src 'self'; report-uri /api/csp-report; report-to csp-endpoint; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' https://use.fontawesome.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://use.fontawesome.com; img-src 'self' data:;; font-src 'self' https://fonts.gstatic.com https://use.fontawesome.com https://themes.googleusercontent.com; report-uri /report-csp-violation; upgrade-insecure-requests 1
font-src *.cloudflare.com ct.pinterest.com *.googleapis.com *.gstatic.com livechat.alc-crm.com maxcdn.bootstrapcdn.com *.naturalia.fr *.payline.com *.cdn.payline.com *.pinimg.com *.pinterest.com rct-livechat.alc-crm.com s.pinimg.com *.trustedshops.com *.twimg.com *.twitter.com *.typekit.net sdk.privacy-center.org sdk.woosmap.com https://cdnjs.cloudflare.com 'self' data: fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.gstatic.com maxcdn.bootstrapcdn.com *.payline.com *.cdn.payline.com *.twitter.com *.wlp-acs.com *.cic.fr *.monext.fr *.banque-accord.fr *.bpce.fr *.lcl.fr *.creditmutuel.fr *.bnpparibas.com *.e-cartebleue.com *.cardinalcommerce.com *.visa.com *.modirum.com sdk.privacy-center.org 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com maxcdn.bootstrapcdn.com *.payline.com *.cdn.payline.com *.twitter.com https://td.doubleclick.net *.criteo.com *.wlp-acs.com *.cic.fr *.monext.fr *.banque-accord.fr *.bpce.fr *.lcl.fr *.creditmutuel.fr *.bnpparibas.com *.e-cartebleue.com *.cardinalcommerce.com *.visa.com *.modirum.com sdk.privacy-center.org *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.openstreetmap.org https://maps.googleapis.com ct.pinterest.com *.cloudflare.com cdn.cookielaw.org *.google-analytics.com *.googleadservices.com *.google.com *.google.fr *.googletagmanager.com *.klarna.com *.lightemporium.com *.linkedin.com maxcdn.bootstrapcdn.com *.naturalia.fr *.payline.com *.cdn.payline.com *.paypal.com *.pinimg.com *.pinterest.com s.pinimg.com *.twimg.com *.twitter.com *.usercentrics.eu *.ytimg.com *.facebook.com sdk.woosmap.com maps.gstatic.com *.google.es sdk.privacy-center.org ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.cloudflare.com cdn.cookielaw.org ct.pinterest.com *.doubleclick.net *.facebook.net *.fontawesome.com *.google.com *.google-analytics.com *.googletagmanager.com *.gstatic.com livechat.alc-crm.com maxcdn.bootstrapcdn.com *.naturalia.fr *.payline.com *.cdn.payline.com *.pinimg.com *.pinterest.com rct-livechat.alc-crm.com snap.licdn.com s.pinimg.com *.trustedshops.com *.twimg.com *.twitter.com *.usercentrics.eu https://bam.eu01.nr-data.net *.googleoptimize.com *.criteo.com *.actito.com *.aticdn.net https://2453.userly.net naturalia.local *.abtasty.com sdk.woosmap.com sdk.privacy-center.org https://cdnjs.cloudflare.com unpkg.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cloudflare.com *.fontawesome.com *.googleapis.com *.gstatic.com livechat.alc-crm.com maxcdn.bootstrapcdn.com *.naturalia.fr *.payline.com *.cdn.payline.com rct-livechat.alc-crm.com *.trustedshops.com *.twimg.com *.twitter.com *.typekit.net *.usercentrics.eu sdk.woosmap.com https://fonts.googleapis.com https://cdnjs.cloudflare.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.payline.com *.cdn.payline.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.openstreetmap.org https://maps.googleapis.com *.cloudflare.com cdn.cookielaw.org ct.pinterest.com *.doubleclick.net livechat.alc-crm.com maxcdn.bootstrapcdn.com *.naturalia.fr *.payline.com *.cdn.payline.com *.paypal.com *.pinimg.com *.pinterest.com rct-livechat.alc-crm.com s.pinimg.com *.twimg.com *.twitter.com https://bam.eu01.nr-data.net *.onetrust.com https://cdn.linkedin.oribi.io *.criteo.com https://region1.analytics.google.com *.xiti.com https://naturalia.local api.woosmap.com *.google.com *.abtasty.com *.linkedin.com *.facebook.com sdk.privacy-center.org *.reach5.co *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';base-uri 'self';frame-ancestors 'self' https://bowdlehc.com https://freemanregional.com https://lakeshealth.org https://nwiasurgeons.com https://rhshc.com https://www.accesshealth.net https://www.avera.org https://www.averahealthplans.com https://www.brookingshealth.org https://www.floydvalley.org https://www.hegghc.org https://www.hendrickshosp.org https://www.nwiabone.com https://www.osceolarhc.org https://www.pipestonehealth.org https://www.redfieldcmh.org https://www.siouxcenterhealth.org https://www.spencerhospital.org https://www.surgicalinstitute.com;frame-src 'self' epichttp: https://*.kaltura.com https://apps-staging.healthcare.elsevier.com https://apps.healthcare.elsevier.com https://epic.gateway.patientco.com https://epic.integration.gateway.patientco.com https://epicproxy-np.et1439.epichosted.com https://epicproxy.et1439.epichosted.com https://epicproxy.et1439.epichosted.com/FHIRProxyPRD/api/FHIR/R4 https://patientpass-staging.healthcare.elsevier.com https://patientpass.healthcare.elsevier.com https://www.youtube.com;script-src 'nonce-280e3eb0d61a4b209cbb3a876063eb50' https://averamychart.org 'self';img-src https://* 'self' blob: data:;connect-src 'self' epichttp:;style-src https://averamychart.org 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.globalpay.com https://fonts.gstatic.com *.pricespider.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com *.gpwebpay.com *.gpe.cz *.globalpay-ecommerce.com https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com *.americanexpress.com *.globalpay.com *.mastercard.com *.visa.com *.gpwebpay.com *.gpe.cz *.globalpay-ecommerce.com https://plumrocket.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com *.globalpay.com *.pricespider.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com *.aexp-static.com https://ajax.aspnetcdn.com *.globalpay.com *.gpapiservices.com https://pay.google.com *.pricespider.com s7.addthis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com display.ugc.bazaarvoice.com https://fonts.googleapis.com *.pricespider.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com https://google.com/pay *.pricespider.com ekr.zdassets.com/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-ancestors 'self'; report-uri https://www.escape.com.au/csp-reports 1
default-src 'self'; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' https://cwi.shell.451.io/ https://cwi2.shell.451.io/ https://embed-forms.451.io/ https://js.hubspot.com/ https://maps.googleapis.com/ https://25livepub.collegenet.com/ https://ai.ocelotbot.com/ https://ajax.googleapis.com/ajax/libs/ https://analytics.tiktok.com/ https://analytics.tiktok.com/i18n/pixel/events.js https://api3.libcal.com/ https://cdn.jsdelivr.net/npm/ https://cdn.jsdelivr.net/gh/snowplow/ https://cdnjs.cloudflare.com/ajax/libs/ https://collector-16905.us.tvsquared.com/tv2track.js https://connect.facebook.net/en_US/fbevents.js https://connect.facebook.net/ https://cwi.edu/ https://cwidaho.libanswers.com/ https://embed.financialaidtv.com/ https://embed.ocelotbot.com/ https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1027274136/ https://googleads.g.doubleclick.net/pagead/ https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1027274136/ https://h5p.org/ https://imageserver.ebscohost.com/ https://js-agent.newrelic.com/ https://js.hs-analytics.net/analytics/1692888000000/21023521.js https://js.hs-analytics.net/analytics/ https://js.hs-banner.com/ https://js.hs-scripts.com/21023521.js https://js.hsadspixel.net/fb.js https://js.hscollectedforms.net/ https://js.hsforms.net/ https://js.hscta.net/cta/ https://cta-service-cms2.hubspot.com/ https://lgapi.libapps.com/ https://live.cwid7.lndo.site/ https://us2.siteimprove.com/ https://*.clarity.ms/ https://wufoo.com/scripts/embed/form.js https://www.google-analytics.com/ https://www.google.com/jsapi/ https://www.google.com/recaptcha/ https://www.google.com/pagead/ https://translate.google.com/ https://translate.googleapis.com/ https://dev.visualwebsiteoptimizer.com/ https://www.googletagmanager.com/ https://www.gstatic.com/ https://www.googleadservices.com/ https://unpkg.com/ https://*.googlesyndication.com/ https://app.vwo.com/ https://static.kuula.io/ https://use.typekit.net/ https://js.stripe.com/ https://snap.licdn.com/ https://c.lytics.io/ https://static.ads-twitter.com/ https://secure.qgiv.com/ https://bat.bing.com/ https://search.cwi.edu/ https://browsersync.cwidaho.ddev.site/ https://translate-pa.googleapis.com/ https://cdn.gtranslate.net/; object-src 'none'; style-src 'report-sample' 'self' 'unsafe-inline' https://cwi.edu https://ai.ocelotbot.com https://fonts.googleapis.com https://p.typekit.net https://stackpath.bootstrapcdn.com https://use.typekit.net https://www.gstatic.com https://app.vwo.com https://c.lytics.io https://search.cwi.edu/ https://api.lytics.io/; img-src https: data:; media-src 'self' data:; frame-src 'self' https://cwi.messenger.451.io https://cwi.discoveredu.ai https://cwi2.messenger.451.io https://ctl.h5p.com https://*.hsforms.com https://embed-forms.451.io https://cwi.maps.arcgis.com https://cwi.wufoo.com https://cwilibrary.wufoo.com https://cwidaho.libanswers.com https://docs.google.com https://e.issuu.com https://embed.ocelotbot.com https://maps.google.com https://player.vimeo.com https://www.facebook.com https://www.google.com https://www.youtube.com https://yoshki.com https://*.doubleclick.net https://25livepub.collegenet.com https://*.googlesyndication.com https://www.googletagmanager.com https://creatorapp.zohopublic.com https://creator.zohopublic.com https://app.vwo.com https://kuula.co/ https://cwidaho.viewin360.co/ https://js.stripe.com/ https://cwi.bolt-discovery.451.io/ https://cwi2.bolt-discovery.451.io/ https://c.lytics.io/ https://secure.qgiv.com/; worker-src 'self' blob:; font-src 'self' data: https://fonts.gstatic.com https://stackpath.bootstrapcdn.com https://use.typekit.net; connect-src 'self' https://*.google-analytics.com https://analytics.google.com https://*.451.io/ https://*.hsforms.com https://api.hubapi.com/ https://cta-service-cms2.hubspot.com/ https://25livepub.collegenet.com https://ai.ocelotbot.com https://analytics.tiktok.com https://api3.libcal.com https://bam.nr-data.net https://*.siteimprove.com https://forms.hscollectedforms.net https://hubspot-forms-static-embed.s3.amazonaws.com https://live.cwid7.lndo.site https://*.clarity.ms https://*.doubleclick.net https://use.typekit.net https://pubsub.googleapis.com https://translate.googleapis.com/ https://www.facebook.com https://www.googletagmanager.com https://adservice.google.com https://www.google.com https://*.googlesyndication.com https://maps.googleapis.com https://*.visualwebsiteoptimizer.com/ https://px.ads.linkedin.com/ https://search.cwi.edu/ https://bat.bing.com/; report-uri https://64dcbe2ca068cd9821c1af0b.endpoint.csper.io?v=41; base-uri 'self'; manifest-src 'self' 1
font-src *.fontawesome.com *.googleapis.com *.gstatic.com https://fonts.bunny.net *.alothemes.com *.magepow.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.facebook.net 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.facebook.com *.facebook.net sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io ts.tradetracker.net www.magmodules.eu magefan.com cm.magefan.com *.facebook.com *.facebook.net https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ tm.tradetracker.net *.facebook.com *.facebook.net *.googletagmanager.com *.fontawesome.com *.googleapis.com *.gstatic.com *.avada.io *.alothemes.com *.magepow.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.facebook.com *.facebook.net *.google-analytics.com https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.google-analytics.com https://maps.googleapis.com https://*.securiti.ai https://*.zetaglobal.com https://*.boomtrain.com https://*.rezync.com https://vercel.live https://va.vercel-scripts.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://*.ctfassets.net https://maps.googleapis.com https://maps.gstatic.com https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://www.google.com https://*.securiti.ai https://*.zetaglobal.com https://*.boomtrain.com https://*.rezync.com https://vercel.live https://vercel.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://maps.googleapis.com https://*.securiti.ai https://*.zetaglobal.com https://*.boomtrain.com https://*.rezync.com https://vercel.live https://vitals.vercel-insights.com wss://*.pusher.com; media-src 'self' https://*.ctfassets.net; frame-src 'self' https://www.googletagmanager.com https://*.securiti.ai https://*.mypreferences.com https://vercel.live; worker-src 'self' blob: 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://cdn.seline.com https://analytics.ahrefs.com https://beacon-v2.helpscout.net https://d3hb14vkzrxvla.cloudfront.net https://www.paypal.com https://www.paypalobjects.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://api.seline.com https://analytics.ahrefs.com https://beaconapi.helpscout.net https://d3hb14vkzrxvla.cloudfront.net https://chatapi.helpscout.net wss://chatapi.helpscout.net https://www.google-analytics.com https://app.entrythingy.com; frame-src 'self' https://www.googletagmanager.com https://www.paypal.com https://app.entrythingy.com; object-src 'none'; base-uri 'self'; form-action 'self' https://app.entrythingy.com; frame-ancestors 'self'; upgrade-insecure-requests 1
default-src 'self' fact24.f24.com; upgrade-insecure-requests; report-uri https://kcwa-uri.uriports.com/reports/report; report-to csp-endpoint; manifest-src 'self'; script-src https://www.googletagmanager.com https://tagmanager.google.com https://*.googletagmanager.com googleads.g.doubleclick.net cdn.cookielaw.org cookie-cdn.cookiepro.com *.onetrust.com snap.licdn.com j.6sc.co https://pi.pardot.com https://www.youtube-nocookie.com https://www.youtube.com https://www.clarity.ms https://scripts.clarity.ms https://bat.bing.com https://go.f24.com 'self' fact24.f24.com 'unsafe-inline'; style-src https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com cdn.cookielaw.org cookie-cdn.cookiepro.com *.onetrust.com https://www.youtube-nocookie.com https://www.youtube.com 'self' fact24.f24.com 'unsafe-inline'; img-src data: f24.com www.google.com www.google.hr www.google.fr www.google.fi www.google.se www.google.no www.google.ch www.google.lu www.google.de www.google.at www.google.es www.google.hn www.google.dk www.google.nl www.google.be www.google.ci www.google.li www.google.co.th www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://*.google-analytics.com https://*.googletagmanager.com googleads.g.doubleclick.net pagead2.googlesyndication.com cdn.cookielaw.org px.ads.linkedin.com px4.ads.linkedin.com b.6sc.co img.youtube.com img.youtube-nocookie.com i.ytimg.com https://c.clarity.ms https://claritystatic.blob.core.windows.net https://c.bing.com https://bat.bing.com 'self' fact24.f24.com; frame-src https://www.googletagmanager.com https://www.youtube-nocookie.com https://www.youtube.com www.tfaforms.com f24.jobs.personio.de https://go.f24.com 'self' fact24.f24.com; font-src https://fonts.gstatic.com data: 'self' fact24.f24.com; connect-src www.googletagmanager.com www.google.com www.google.hr www.google.fr www.google.fi www.google.se www.google.no www.google.ch www.google.lu www.google.de www.google.at www.google.es www.google.hn www.google.dk www.google.nl www.google.be www.google.ci www.google.li www.google.co.th https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com www.googleadservices.com pagead2.googlesyndication.com googleads.g.doubleclick.net cdn.cookielaw.org geolocation.onetrust.com privacyportal-eu.onetrust.com px.ads.linkedin.com ipv6.6sc.co c.6sc.co epsilon.6sense.com https://www.youtube-nocookie.com https://www.youtube.com noembed.com https://www.clarity.ms https://a.clarity.ms https://b.clarity.ms https://c.clarity.ms https://d.clarity.ms https://e.clarity.ms https://f.clarity.ms https://g.clarity.ms https://h.clarity.ms https://i.clarity.ms https://j.clarity.ms https://k.clarity.ms https://l.clarity.ms https://m.clarity.ms https://n.clarity.ms https://o.clarity.ms https://p.clarity.ms https://q.clarity.ms https://r.clarity.ms https://s.clarity.ms https://t.clarity.ms https://u.clarity.ms https://v.clarity.ms https://w.clarity.ms https://x.clarity.ms https://y.clarity.ms https://z.clarity.ms https://bat.bing.com 'self' fact24.f24.com; frame-ancestors 'none'; 1
default-src 'self';     script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://s7.addthis.com https://www.google-analytics.com https://www.googletagmanager.com https://*.helppier.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/;     style-src 'self' 'unsafe-inline' https://s7.addthis.com https://*.helppier.com;     img-src 'self' data: https:;     font-src 'self' data: https://*.helppier.com;     connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://*.addthis.com https://*.helppier.com;     object-src 'none';     base-uri 'self';     form-action 'self';     frame-src https://www.google.com/recaptcha/;     frame-ancestors 'none' 1
default-src 'self' blob:  https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; frame-src 'self' https://*.noxiaohao.com https://telegram.org https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://accounts.google.com https://oauth.telegram.org https://sgtm.btsgtm.com  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; script-src 'self' 'nonce-jTXNb2m7SkHDFvvYwXxVyQ==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh/v3RIRuG3kMikr5iha+7P/0TN/GNA=' https://*.noxiaohao.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://accounts.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://play.google.com https://analytics.google.com https://fonts.gstatic.com https://telegram.org https://oauth.telegram.org https://*.geetest.com https://*.geevisit.com https://sgtm.btsgtm.com https://static.wangsustatic.xyz https://static.wangsustatic.vip ; connect-src 'self' https://stats.g.doubleclick.net https://analytics.google.com https://*.noxiaohao.com wss://*.noxiaohao.com wss: https://www.turingfraud.net https://play.google.com https://accounts.google.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://telegram.org https://oauth.telegram.org https://static.geetest.com https://static.geevisit.com wss://stream.bitget.cloud https://www.google.com https://sgtm.btsgtm.com  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; worker-src 'self' blob:; img-src 'self' data: blob: https://img.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://img.bitgetimg.com https://img.gurenla.com https://*.bgbstatic.com https://lh3.googleusercontent.com https://static.geetest.com https://static.geevisit.com https://static-web.jjdsn.vip https://cdn.bitkeep.vip https://www.google.co.jp https://bin.wangsustatic.com https://sgtm.btsgtm.com https://analytics.google.com https://stats.g.doubleclick.net  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; style-src 'self' 'unsafe-inline' https://static.geetest.com https://static.geevisit.com https://accounts.google.com https://fonts.googleapis.com https://static.bgbstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; font-src 'self' data: https://static.geetest.com https://static.geevisit.com https://fonts.gstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri /v1/buried/log/cspSecurity /v1/monitor/csp?appId=d4b6df7d; 1
default-src 'self'; img-src 'self' data: https:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self' wss: https:; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.facebook.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googletagmanager.com *.facebook.net *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.googleapis.com *.google-analytics.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.fontawesome.com *.gstatic.com *.cloudfront.net *.reviews.io *.reviews.co.uk https://pos.snapscan.io https://fonts.bunny.net *.typekit.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com community.seedsman.com *.nosto.com *.nos.to https://plumrocket.com *.reviews.io *.reviews.co.uk *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * secure.nmi.com secure.networkmerchants.com collectcheckout.com merchantx.transactiongateway.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.prtpe.com test.prtpe.com *.nosto.com *.nos.to https://plumrocket.com *.reviews.io *.reviews.co.uk c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * secure.nmi.com secure.networkmerchants.com collectcheckout.com merchantx.transactiongateway.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net https://www.googletagmanager.com *.prtpe.com test.prtpe.com *.nosto.com *.nos.to *.cloudfront.net *.reviews.io *.reviews.co.uk https://pos.snapscan.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://*.bablic.com https://s3-us-west-2.amazonaws.com/jsstore/a/* *.prtpe.com test.prtpe.com unpkg.com cdn.jsdelivr.net https://www.gstatic.com https://www.google.com https://s3-us-west-2.amazonaws.com *.fraudlabspro.com *.nosto.com *.nos.to https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com https://a.klaviyo.com https://telemetrics.klaviyo.com/ *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.reviews.io *.reviews.co.uk *.googletagmanager.com *.aptrinsic.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ secure.nmi.com secure.networkmerchants.com collectcheckout.com merchantx.transactiongateway.com https://staticm246.seedsman.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.prtpe.com test.prtpe.com *.fontawesome.com *.googleapis.com *.nosto.com *.nos.to *.cloudfront.net *.reviews.io *.reviews.co.uk https://static.klaviyo.com https://fonts.bunny.net unsafe-inline assets.braintreegateway.com *.typekit.net secure.nmi.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.snplow.net commerce.adobedc.net commerce.adobe.io https://c.bablic.com https://e2.bablic.com *.prtpe.com test.prtpe.com *.nosto.com *.nos.to *.cloudfront.net *.reviews.io *.reviews.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com ws: secure.nmi.com secure.networkmerchants.com collectcheckout.com merchantx.transactiongateway.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-I_vKZn-zC7nlTwqokTO1Hw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https://js.intercomcdn.com/; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://trusted.cdn.com https://www.googletagmanager.com https://connect.facebook.net https://gtm.billo.app https://script.tapfiliate.com https://consent.cookiebot.com https://static.hotjar.com https://widget.intercom.io https://bat.bing.com https://snap.licdn.com https://analytics.tiktok.com https://www.googleadservices.com https://www.clarity.ms https://js.intercomcdn.com https://cdn.mxpnl.com https://static.klaviyo.com https://dev.visualwebsiteoptimizer.com https://widget.trustpilot.com https://api-iam.intercom.io/ https://billo.app/ https://s.clarity.ms https://www.instagram.com https://code.jquery.com/ https://vc.hotjar.io/ https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js https://googleads.g.doubleclick.net/ https://www.youtube.com/; script-src-elem 'self' 'unsafe-inline' data: https://stats.wp.com/ https://ddwl4m2hdecbv.cloudfront.net/ https://scripts.clarity.ms/ https://analytics.ahrefs.com/analytics.js https://www.redditstatic.com/ads/pixel.js https://trusted.cdn.com https://www.googletagmanager.com https://connect.facebook.net https://gtm.billo.app https://script.tapfiliate.com https://consent.cookiebot.com https://static.hotjar.com https://widget.intercom.io https://bat.bing.com https://snap.licdn.com https://analytics.tiktok.com https://www.googleadservices.com https://www.clarity.ms https://js.intercomcdn.com https://cdn.mxpnl.com https://static.klaviyo.com https://dev.visualwebsiteoptimizer.com https://widget.trustpilot.com https://script.hotjar.com/ https://consentcdn.cookiebot.com/ https://static-tracking.klaviyo.com/ https://cdnjs.cloudflare.com/ https://www.youtube.com/ https://www.tiktok.com/ https://sf16-website-login.neutral.ttwstatic.com/ https://assets.calendly.com/ https://pagead2.googlesyndication.com/ https://api-iam.intercom.io/ https://billo.app/ https://s.clarity.ms https://www.instagram.com https://code.jquery.com/ https://vc.hotjar.io/ https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js https://googleads.g.doubleclick.net/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://sf16-website-login.neutral.ttwstatic.com/ https://billo.app/ https://s.clarity.ms https://www.instagram.com https://static-tracking.klaviyo.com/ https://static.klaviyo.com/ https://vc.hotjar.io/ https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js https://googleads.g.doubleclick.net/ https://www.youtube.com/; img-src 'self' data: https://pixel.wp.com/ https://alb.reddit.com/ https://trusted.images.com https://www.facebook.com https://www.google-analytics.com https://analytics.tiktok.com https://static.klaviyo.com https://cdn.mxpnl.com https://www.clarity.ms https://www.googleadservices.com https://secure.gravatar.com/ https://px.ads.linkedin.com/ https://bat.bing.com/ https://googleads.g.doubleclick.net/ https://google.com/ https://www.google.com/ https://www.google.lt/ https://imgsct.cookiebot.com/ https://dev.visualwebsiteoptimizer.com/ https://connect.facebook.net/ https://www.youtube.com/ https://c.clarity.ms/ https://c.bing.com https://www.googletagmanager.com/ https://i.ytimg.com/ https://bat.bing.net/ https://downloads.intercomcdn.com/ https://static.intercomassets.com/ https://js.intercomcdn.com/ https://billo.app/ https://s.clarity.ms https://www.instagram.com https://cdnjs.cloudflare.com/ https://imgsct.cookiebot.com/ https://vc.hotjar.io/ https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js https://d3k81ch9hvuctc.cloudfront.net/; font-src 'self' data: https://fonts.gstatic.com https://static.klaviyo.com https://js.intercomcdn.com https://fonts.intercomcdn.com https://manage.billo.app https://billo.app/ https://s.clarity.ms https://www.instagram.com https://vc.hotjar.io/ https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js https://googleads.g.doubleclick.net/ https://www.youtube.com/ https://static.billo.app/; connect-src 'self' https://z.clarity.ms/collect https://analytics.ahrefs.com/api/event https://pixel-config.reddit.com/pixels/a2_hg53cwjcn9f1/config https://www.google-analytics.com https://gtm.billo.app https://widget.intercom.io https://analytics.tiktok.com https://cdn.mxpnl.com https://static.klaviyo.com https://www.clarity.ms https://dev.visualwebsiteoptimizer.com https://your-api-endpoint.com https://www.google.com https://px.ads.linkedin.com/ https://region1.analytics.google.com/ https://api-iam.intercom.io/ https://bat.bing.com/ wss://nexus-websocket-a.intercom.io https://a.clarity.ms/ https://consentcdn.cookiebot.com/ https://fast.a.klaviyo.com/ https://api-js.mixpanel.com/ https://static-forms.klaviyo.com/ https://www.googleadservices.com/ https://pagead2.googlesyndication.com/ https://stats.g.doubleclick.net/ https://region1.google-analytics.com/ https://bat.bing.net/ https://www.facebook.com/ wss://ws.hotjar.com https://content.hotjar.io/ https://www.tiktok.com/ https://metrics.hotjar.io/ https://billo.app/ https://s.clarity.ms https://www.instagram.com https://a.klaviyo.com https://vc.hotjar.io/ https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js https://googleads.g.doubleclick.net/ https://www.youtube.com/ https://analytics-ipv6.tiktokw.us/ https://www.google.lt/pagead/; frame-src 'self' https://www.youtube.com https://www.facebook.com https://widget.trustpilot.com https://consent.cookiebot.com https://consentcdn.cookiebot.com/ https://gtm.billo.app/ https://td.doubleclick.net/ https://www.googletagmanager.com/ https://www.tiktok.com/ https://calendly.com/ http://intercom-sheets.com/ https://billo.app/ https://s.clarity.ms https://www.instagram.com https://vc.hotjar.io/ https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js https://googleads.g.doubleclick.net/ https://www.youtube-nocookie.com/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://consent.cookiebot.com https://consent.cookiebot.eu https://consentcdn.cookiebot.com https://get.mirando.de https://cdn.twiago.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://www.gstatic.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https://www.googletagmanager.com https://fonts.gstatic.com https://translate.google.com https://imgsct.cookiebot.com https://wetterdaten.wetter.net https://radar.qmet.de https://profikarten.dev.nc.qmet.de https://profikarten.nc.qmet.de https://redaktion.wetter.net https://files.red.nc.qmet.de https://files.red.qs.nc.qmet.de https://files.red.dev.nc.qmet.de https://i.ytimg.com https://www.google.com https://www.gstatic.com https://consentcdn.cookiebot.com https://get.mirando.de https://gdpr.mirando.de https://cdn.twiago.com https://a.twiago.com; media-src 'self' data: https://wetterdaten.wetter.net; connect-src 'self' data: https://wetterdaten.wetter.net https://translate.googleapis.com https://sentry.nc.qmet.de https://www.google.com https://www.googletagmanager.com https://*.google-analytics.com https://consentcdn.cookiebot.com https://map.nc.qmet.de https://map.dev.nc.qmet.de https://map.qs.nc.qmet.de https://radar.qmet.de https://get.mirando.de https://gdpr.mirando.de https://cdn.twiago.com https://a.twiago.com; frame-src 'self' https://www.googletagmanager.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.youtube.com https://www.youtube-nocookie.com https://platform.twitter.com https://www.instagram.com https://w.soundcloud.com https://www.facebook.com https://map.nc.qmet.de https://map.dev.nc.qmet.de https://map.qs.nc.qmet.de https://get.mirando.de https://a.twiago.com https://www.google.com; manifest-src 'self'; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none'; report-uri /api/csp-report 1
font-src *.gstatic.com 'self' data: fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ test.saferpay.com www.saferpay.com saferpay.com js.mollie.com https://td.doubleclick.net https://bid.g.doubleclick.net *.trustedshops.com https://www.paypal.com https://js.mollie.com https://www.youtube-nocookie.com https://player.vimeo.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https://images.unsplash.com *.koongo.com test.saferpay.com www.saferpay.com saferpay.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.mollie.com *.hsforms.net *.hsforms.com https://integrations.etrusted.com https://widgets.trustedshops.com *.trustedshops.com *.usercentrics.eu *.g.doubleclick.net www.google.de www.google.at www.google.ch *.googleadservices.com https://www.google-analytics.com https://www.paypalobjects.com 'self' data: *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com test.saferpay.com www.saferpay.com saferpay.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.mollie.com pay.google.com applepay.cdn-apple.com *.hsforms.net *.hsforms.com https://web.cmp.usercentrics.eu https://privacy-proxy.usercentrics.eu *.usercentrics.eu https://integrations.etrusted.com https://widgets.trustedshops.com *.googleadservices.com https://www.googletagmanager.com https://www.paypal.com https://www.paypalobjects.com https://js.mollie.com *.google.com *.gstatic.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src cdnjs.cloudflare.com/ajax/libs/highlight.js/9.3.0/styles/darkula.min.css https://static.klaviyo.com https://integrations.etrusted.com *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com *.koongo.com test.saferpay.com www.saferpay.com saferpay.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ t.elasticsuite.io *.hsforms.net *.hsforms.com https://privacy-proxy.usercentrics.eu https://api.usercentrics.eu https://aggregator.service.usercentrics.eu *.usercentrics.eu https://integrations.etrusted.com https://widgets.trustedshops.com https://api.trustedshops.com *.trustedshops.com *.g.doubleclick.net https://ad.doubleclick.net *.googleadservices.com www.google.com www.google.de www.google.at www.google.ch https://www.google-analytics.com https://www.paypal.com https://js.mollie.com https://api.mollie.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src test.saferpay.com www.saferpay.com saferpay.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' 'self' https://*.wistia.com https://csn-integration-sandbox.socialtables.com https://onsite-dv50.socialtables.com https://st-csn-integration.us-east-1.core-socialtables-prod.cvent.cloud https://csn-integration.socialtables.com https://connect.socialtables.com; script-src 'self' https://cdn.rudderlabs.com https://*.pendo.io https://*.aptrinsic.com https://cdn.synthesia.io 'self' 'nonce-NzRiZTY1ODUtNDU4My00MjY1LWEyMzQtMDFkNjBlNzZlNTg2' https://browser.sentry-cdn.com https://maps.googleapis.com https://*.salesforceliveagent.com https://*.storage.googleapis.com https://*.bing.com https://*.virtualearth.net https://*.wistia.com http://*.wistia.com https://*.wistia.net http://*.wistia.net https://www.google-analytics.com https://*.facebook.net https://www.googletagmanager.com https://cdn.cookielaw.org; connect-src 'self' ws: https://rum-http-intake.logs.datadoghq.com https://browser-http-intake.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://*.rudderstack.com https://*.rudderlabs.com https://*.cvent.com https://*.cvent.cloud https://*.aptrinsic.com https://*.synthesia.io https://*.mux.com https://*.litix.io 'self' https://*.core.cvent.org https://maps.googleapis.com https://*.bing.com https://atlas.microsoft.com https://*.salesforceliveagent.com https://*.virtualearth.net https://*.wistia.com http://*.wistia.com https://*.wistia.net http://*.wistia.net https://www.google-analytics.com https://*.facebook.net https://www.googletagmanager.com https://cdn.cookielaw.org https://*.onetrust.com https://*.edge.sdk.awswaf.com https://www.google.com; worker-src 'self' blob: 'self' blob:; img-src 'self' https://*.pendo.io https://www.cvent.com data: https://cdn.synthesia.io 'self' data: http://*.cvent.com https://*.cvent.com https://*.cvent.org http://*.doubleclick.net https://maps.googleapis.com https://maps.gstatic.com https://*.virtualearth.net https://*.bing.com https://www.googletagmanager.com https://*.wistia.com http://*.wistia.com https://*.wistia.net http://*.wistia.net https://www.google.com https://www.google.co.in; media-src 'self' https://*.mux.com; style-src 'self' 'unsafe-inline' https://*.aptrinsic.com 'self' https://fonts.googleapis.com https://*.bing.com; font-src 'self' https://www.cvent-assets.com https://*.cvent.com https://*.cvent.org 'self' data: https://fonts.google.com https://fonts.gstatic.com https://atlas.microsoft.com; frame-ancestors 'none'; frame-src 'self' https://*.cvent.com https://*.cvent.org https://share.synthesia.io; base-uri 'none'; form-action 'none'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-evp-origin=content-security-policy&ddsource=csp-report&dd-api-key=pub4f462d1973ce9764489fa90a69576b5a&ddtags=service%3Avenue-search-app%2Cenv%3Apr50; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com data: *.facebook.com *.onetrust.com *.cookielaw.org *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com data: *.addthis.com *.tagembed.com *.flipsnack.com *.facebook.com bt.signifyd.com:11103 *.walls.io *.onetrust.com *.cookielaw.org *.equalada-api.herokuapp.com *.herokuapp.com *.doubleclick.net landofcoder.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com *.cardinalcommerce.com *.facebook.com *.google.com www.google.co.in mcusercontent.com *.onetrust.com *.cookielaw.org *.clarity.ms *.googletagmanager.com c.bing.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com data: *.cardinalcommerce.com *.facebook.net *.zassets.com static.zdassets.com walls.io *.g.doubleclick.net *.moatads.com *.addthisedge.com *.addthis.com *.tagembed.com *.ccdc02.com chimpstatic.com *.authorize.net mc.us5.list-manage.com *.mailchimp.com *.zopim.com *.onetrust.com *.cookielaw.org *.hotjar.com *.smartlook.com *.clarity.ms *.googletagmanager.com landofcoder.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com data: *.mailchimp.com *.onetrust.com *.cookielaw.org *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com data: *.zdassets.com *.onetrust.com *.cookielaw.org 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com data: wss: *.zendesk.com *.zopim.com widget-mediator.zopim.com stats.g.doubleclick.net bam-cell.nr-data.net *.authorize.net bt.signifyd.com:11103 *.onetrust.com *.cookielaw.org bam.nr-data.net analytics.google.com vc.hotjar.io *.clarity.ms *.demdex.net *.cardinalcommerce.com manager.eu.smartlook.cloud landofcoder.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://s.salecycle.com https://d16fk4ms6rqz1v.cloudfront.net/ https://i.salecycle.com/ wss://ws.salecycle.com https://assets.sc-trc.com/ https://mymachine.salecycle.com:8080 https://media.beaverbrooks.co.uk https://media.loupe.co.uk https://*.graphics.amplience.net https://*.amplience.net https://amplience.net https://*.amplience.com https://amplience.com https://*.staging.bigcontent.io https://*.bigcontent.io https://*.beaverbrooks.co.uk https://beaverbrooks.co.uk https://www.beaverbrooks.co.uk https://*.loupe.co.uk https://loupe.co.uk https://www.loupe.co.uk https://*.cookiebot.com https://cookiebot.com https://*.ggpht.com https://ggpht.com https://i.vimeocdn.com https://vimeocdn.com https://*.salecycle.com https://salecycle.com https://d16fk4ms6rqz1v.cloudfront.net https://i.salecycle.com https://c.salecycle.com wss://ws.salecycle.com https://assets.sc-trc.com https://mymachine.salecycle.com:8080 https://*.gstatic.com https://gstatic.com https://*.vee24.com https://vee24.com https://static.vee24.com https://vercel.live https://*.vercel-scripts.com https://vercel-scripts.com https://*.pusher.com wss://*.pusher.com https://*.vercel.com https://vercel.com https://*.vercel.aws.beaverbrooks.co.uk https://*.aws.beaverbrooks.co.uk https://*.vercel.aws.loupe.co.uk https://*.aws.loupe.co.uk; script-src 'self' https://abtasty.com https://*.abtasty.com https://analytics.tiktok.com https://*.analytics.tiktok.com https://s.salecycle.com https://d16fk4ms6rqz1v.cloudfront.net/ https://i.salecycle.com/ wss://ws.salecycle.com https://assets.sc-trc.com/ https://mymachine.salecycle.com:8080 https://tag.beyable.com https://media.beaverbrooks.co.uk https://media.loupe.co.uk https://*.graphics.amplience.net https://*.amplience.net https://amplience.net https://*.amplience.com https://amplience.com https://*.staging.bigcontent.io https://*.bigcontent.io https://*.beaverbrooks.co.uk https://beaverbrooks.co.uk https://www.beaverbrooks.co.uk https://*.loupe.co.uk https://loupe.co.uk https://www.loupe.co.uk https://*.cookiebot.com https://cookiebot.com https://*.ggpht.com https://ggpht.com https://i.vimeocdn.com https://vimeocdn.com https://vercel.live https://*.vercel-scripts.com https://vercel-scripts.com https://*.pusher.com wss://*.pusher.com https://*.vercel.com https://vercel.com https://*.vercel.aws.beaverbrooks.co.uk https://*.aws.beaverbrooks.co.uk https://*.vercel.aws.loupe.co.uk https://*.aws.loupe.co.uk https://*.trustpilot.com https://trustpilot.com https://*.appointedd.com https://appointedd.com https://*.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://*.pixlee.com https://pixlee.com https://*.pixlee.co https://pixlee.co https://*.pxlecdn.com https://pxlecdn.com https://*.google-analytics.com https://google-analytics.com https://*.gstatic.com https://gstatic.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://*.doubleclick.net https://doubleclick.net https://googleads.g.doubleclick.net https://*.googlesyndication.com https://googlesyndication.com https://*.awin1.com https://awin1.com https://*.dwin1.com https://dwin1.com https://*.roeyecdn.com https://roeyecdn.com https://*.roeye.com https://roeye.com https://*.zenaps.com https://zenaps.com https://*.wepowerconnections.com https://wepowerconnections.com https://*.tiktok.com https://tiktok.com https://*.tiktokw.us https://tiktokw.us https://*.pingdom.net https://pingdom.net https://*.facebook.net https://facebook.net https://*.facebook.com https://facebook.com https://*.contentsquare.net https://contentsquare.net https://*.criteo.com https://criteo.com https://*.criteo.net https://criteo.net https://*.criteo.eu https://criteo.eu https://*.nl3.eu.criteo.net https://nl3.eu.criteo.net https://*.cybersource.com https://cybersource.com https://*.digicert.com https://digicert.com https://*.vee24.com https://vee24.com https://static.vee24.com https://*.paypal.com https://paypal.com https://*.paypalobjects.com https://paypalobjects.com https://www.sandbox.paypal.com https://*.klarnacdn.net https://klarnacdn.net https://*.klarna.com https://klarna.com https://*.klarnaapi.com https://klarnaapi.com https://klarnaevt.com https://*.klarnaevt.com https://klarnaservices.com https://*.klarnaservices.com https://*.bing.com https://bat.bing.com https://*.bat.bing.com https://flex.atdmt.com https://*.flex.atdmt.com https://clarity.ms https://*.clarity.ms https://*.rolex.com https://rolex.com https://*.recaptcha.net https://recaptcha.net https://*.adobedtm.com https://adobedtm.com https://*.demdex.net https://demdex.net https://*.everesttech.net https://everesttech.net https://*.abtasty.com https://abtasty.com https://*.naver.com https://naver.com https://*.naver.net https://naver.net https://*.pstatic.net https://pstatic.net https://www.youtube.com https://*.vimeo.com https://vimeo.com https://*.googleapis.com https://googleapis.com https://*.google.com https://google.com https://*.google.pl https://google.pl https://*.google.co.uk https://google.co.uk https://*.google.md https://google.md https://google.ie https://*.google.ie https://google.ae https://*.google.ae https://google.se https://*.google.se https://google.es https://*.google.es https://google.nl https://*.google.nl https://google.de https://*.google.de https://google.it https://*.google.it https://google.com.hk https://*.google.com.hk https://google.co.id https://*.google.co.id https://google.cz https://*.google.cz https://google.fr https://*.google.fr https://google.am https://*.google.am https://google.at https://*.google.at https://google.bg https://*.google.bg https://google.ca https://*.google.ca https://google.ch https://*.google.ch https://google.co.il https://*.google.co.il https://google.co.in https://*.google.co.in https://google.co.kr https://*.google.co.kr https://google.co.nz https://*.google.co.nz https://google.co.th https://*.google.co.th https://google.co.uz https://*.google.co.uz https://google.co.za https://*.google.co.za https://google.com.au https://*.google.com.au https://google.com.cy https://*.google.com.cy https://google.com.gh https://*.google.com.gh https://google.com.kw https://*.google.com.kw https://google.com.mt https://*.google.com.mt https://google.com.my https://*.google.com.my https://google.com.ng https://*.google.com.ng https://google.com.np https://*.google.com.np https://google.com.ph https://*.google.com.ph https://google.com.pk https://*.google.com.pk https://google.com.sg https://*.google.com.sg https://google.com.tr https://*.google.com.tr https://google.com.tw https://*.google.com.tw https://google.com.ua https://*.google.com.ua https://google.ge https://*.google.ge https://google.gg https://*.google.gg https://google.gr https://*.google.gr https://google.hr https://*.google.hr https://google.hu https://*.google.hu https://google.iq https://*.google.iq https://google.je https://*.google.je https://google.lt https://*.google.lt https://google.lu https://*.google.lu https://google.no https://*.google.no https://google.ro https://*.google.ro https://google.rs https://*.google.rs https://*.jquery.com https://jquery.com https://*.givex.com https://givex.com https://*.sentry.io https://sentry.io https://*.ingest.sentry.io https://ingest.sentry.io https://*.sentry-cdn.com https://sentry-cdn.com https://*.exponea.com https://exponea.com https://*.uk.exponea.com https://*.pinterest.com https://pinterest.com https://*.pinimg.com https://pinimg.com https://*.salecycle.com https://salecycle.com https://d16fk4ms6rqz1v.cloudfront.net https://i.salecycle.com https://c.salecycle.com wss://ws.salecycle.com https://mymachine.salecycle.com:8080 https://unpkg.com/react-scan/dist/auto.global.js 'unsafe-eval' 'unsafe-inline'; style-src 'self' https://*.googleapis.com https://googleapis.com https://vercel.live https://*.vercel-scripts.com https://vercel-scripts.com https://*.pusher.com wss://*.pusher.com https://*.vercel.com https://vercel.com https://*.vercel.aws.beaverbrooks.co.uk https://*.aws.beaverbrooks.co.uk https://*.vercel.aws.loupe.co.uk https://*.aws.loupe.co.uk https://*.vee24.com https://vee24.com https://static.vee24.com https://*.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://*.abtasty.com https://abtasty.com 'unsafe-inline'; img-src 'self' https://ggpht.com https://*.ggpht.com https://abtasty.com https://*.abtasty.com https://googleads.g.doubleclick.net https://google.ie https://*.google.ie https://google.ae https://*.google.ae https://google.se https://*.google.se https://google.es https://*.google.es https://google.nl https://*.google.nl https://google.de https://*.google.de https://google.it https://*.google.it https://google.com.hk https://*.google.com.hk https://beyable.twic.pics https://beyableprodrt.blob.core.windows.net https://media.beaverbrooks.co.uk https://media.loupe.co.uk https://*.graphics.amplience.net https://*.amplience.net https://amplience.net https://*.amplience.com https://amplience.com https://*.staging.bigcontent.io https://*.bigcontent.io https://*.beaverbrooks.co.uk https://beaverbrooks.co.uk https://www.beaverbrooks.co.uk https://*.loupe.co.uk https://loupe.co.uk https://www.loupe.co.uk https://*.cookiebot.com https://cookiebot.com https://*.ggpht.com https://ggpht.com https://i.vimeocdn.com https://vimeocdn.com https://*.facebook.net https://facebook.net https://*.facebook.com https://facebook.com https://*.googleapis.com https://googleapis.com https://*.google.com https://google.com https://*.google.pl https://google.pl https://*.google.co.uk https://google.co.uk https://*.google.md https://google.md https://google.ie https://*.google.ie https://google.ae https://*.google.ae https://google.se https://*.google.se https://google.es https://*.google.es https://google.nl https://*.google.nl https://google.de https://*.google.de https://google.it https://*.google.it https://google.com.hk https://*.google.com.hk https://google.co.id https://*.google.co.id https://google.cz https://*.google.cz https://google.fr https://*.google.fr https://google.am https://*.google.am https://google.at https://*.google.at https://google.bg https://*.google.bg https://google.ca https://*.google.ca https://google.ch https://*.google.ch https://google.co.il https://*.google.co.il https://google.co.in https://*.google.co.in https://google.co.kr https://*.google.co.kr https://google.co.nz https://*.google.co.nz https://google.co.th https://*.google.co.th https://google.co.uz https://*.google.co.uz https://google.co.za https://*.google.co.za https://google.com.au https://*.google.com.au https://google.com.cy https://*.google.com.cy https://google.com.gh https://*.google.com.gh https://google.com.kw https://*.google.com.kw https://google.com.mt https://*.google.com.mt https://google.com.my https://*.google.com.my https://google.com.ng https://*.google.com.ng https://google.com.np https://*.google.com.np https://google.com.ph https://*.google.com.ph https://google.com.pk https://*.google.com.pk https://google.com.sg https://*.google.com.sg https://google.com.tr https://*.google.com.tr https://google.com.tw https://*.google.com.tw https://google.com.ua https://*.google.com.ua https://google.ge https://*.google.ge https://google.gg https://*.google.gg https://google.gr https://*.google.gr https://google.hr https://*.google.hr https://google.hu https://*.google.hu https://google.iq https://*.google.iq https://google.je https://*.google.je https://google.lt https://*.google.lt https://google.lu https://*.google.lu https://google.no https://*.google.no https://google.ro https://*.google.ro https://google.rs https://*.google.rs https://*.gstatic.com https://gstatic.com https://*.googleusercontent.com https://googleusercontent.com https://*.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://*.doubleclick.net https://doubleclick.net https://googleads.g.doubleclick.net https://*.googlesyndication.com https://googlesyndication.com https://*.google-analytics.com https://google-analytics.com https://*.awin1.com https://awin1.com https://*.dwin1.com https://dwin1.com https://*.roeyecdn.com https://roeyecdn.com https://*.roeye.com https://roeye.com https://*.zenaps.com https://zenaps.com https://*.wepowerconnections.com https://wepowerconnections.com https://vercel.live https://*.vercel-scripts.com https://vercel-scripts.com https://*.pusher.com wss://*.pusher.com https://*.vercel.com https://vercel.com https://*.vercel.aws.beaverbrooks.co.uk https://*.aws.beaverbrooks.co.uk https://*.vercel.aws.loupe.co.uk https://*.aws.loupe.co.uk https://*.digicert.com https://digicert.com https://*.paypal.com https://paypal.com https://*.paypalobjects.com https://paypalobjects.com https://www.sandbox.paypal.com https://*.klarnacdn.net https://klarnacdn.net https://*.klarna.com https://klarna.com https://*.klarnaapi.com https://klarnaapi.com https://klarnaevt.com https://*.klarnaevt.com https://klarnaservices.com https://*.klarnaservices.com https://*.contentsquare.net https://contentsquare.net https://*.rolex.com https://rolex.com https://*.bing.com https://bat.bing.com https://*.bat.bing.com https://flex.atdmt.com https://*.flex.atdmt.com https://clarity.ms https://*.clarity.ms https://*.pixlee.com https://pixlee.com https://*.pixlee.co https://pixlee.co https://*.pxlecdn.com https://pxlecdn.com https://*.ytimg.com https://ytimg.com https://*.adobedtm.com https://adobedtm.com https://*.demdex.net https://demdex.net https://*.everesttech.net https://everesttech.net https://*.tiktok.com https://tiktok.com https://*.tiktokw.us https://tiktokw.us https://*.vee24.com https://vee24.com https://static.vee24.com https://assets.sc-trc.com https://*.abtasty.com https://abtasty.com https://*.criteo.com https://criteo.com https://*.criteo.net https://criteo.net https://*.criteo.eu https://criteo.eu https://*.nl3.eu.criteo.net https://nl3.eu.criteo.net https://*.360yield.com https://360yield.com https://*.yieldlab.net https://yieldlab.net https://*.tremorhub.com https://tremorhub.com https://*.teads.tv https://teads.tv https://*.media.net https://media.net https://*.3lift.com https://3lift.com https://*.mediavine.com https://mediavine.com https://*.adnxs.com https://adnxs.com https://*.id5-sync.com https://id5-sync.com https://*.postrelease.com https://postrelease.com https://*.rubiconproject.com https://rubiconproject.com https://*.dmxleo.com https://dmxleo.com https://*.casalemedia.com https://casalemedia.com https://*.smartadserver.com https://smartadserver.com https://*.pubmatic.com https://pubmatic.com https://*.taboola.com https://taboola.com https://*.1rx.io https://1rx.io https://*.outbrain.com https://outbrain.com https://*.bidswitch.net https://bidswitch.net data:; frame-src 'self' https://pinterest.com https://*.pinterest.com https://s.salecycle.com https://d16fk4ms6rqz1v.cloudfront.net/ https://i.salecycle.com/ wss://ws.salecycle.com https://assets.sc-trc.com/ https://mymachine.salecycle.com:8080 https://*.jotform.com/ https://jotform.com/ https://vercel.live https://*.vercel-scripts.com https://vercel-scripts.com https://*.pusher.com wss://*.pusher.com https://*.vercel.com https://vercel.com https://*.vercel.aws.beaverbrooks.co.uk https://*.aws.beaverbrooks.co.uk https://*.vercel.aws.loupe.co.uk https://*.aws.loupe.co.uk https://*.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://*.trustpilot.com https://trustpilot.com https://*.cookiebot.com https://cookiebot.com https://*.pixlee.com https://pixlee.com https://*.pixlee.co https://pixlee.co https://*.pxlecdn.com https://pxlecdn.com https://www.youtube.com https://*.vimeo.com https://vimeo.com https://*.beaverbrooks.co.uk https://beaverbrooks.co.uk https://www.beaverbrooks.co.uk https://*.loupe.co.uk https://loupe.co.uk https://www.loupe.co.uk https://*.graphics.amplience.net https://*.amplience.net https://amplience.net https://*.amplience.com https://amplience.com https://*.staging.bigcontent.io https://*.bigcontent.io https://*.appointedd.com https://appointedd.com https://*.vee24.com https://vee24.com https://static.vee24.com https://*.cybersource.com https://cybersource.com https://*.facebook.net https://facebook.net https://*.facebook.com https://facebook.com https://*.paypal.com https://paypal.com https://*.paypalobjects.com https://paypalobjects.com https://www.sandbox.paypal.com https://*.klarnacdn.net https://klarnacdn.net https://*.klarna.com https://klarna.com https://*.klarnaapi.com https://klarnaapi.com https://klarnaevt.com https://*.klarnaevt.com https://klarnaservices.com https://*.klarnaservices.com https://*.rolex.com https://rolex.com https://*.recaptcha.net https://recaptcha.net https://*.cardinalcommerce.com https://cardinalcommerce.com https://*.cardinaltrusted.com https://*.google.com https://google.com https://*.google.pl https://google.pl https://*.google.co.uk https://google.co.uk https://*.google.md https://google.md https://google.ie https://*.google.ie https://*.ggpht.com https://google.ae https://*.google.ae https://google.se https://*.google.se https://google.es https://*.google.es https://google.nl https://*.google.nl https://google.de https://*.google.de https://google.it https://*.google.it https://google.com.hk https://*.google.com.hk https://google.co.id https://*.google.co.id https://google.cz https://*.google.cz https://google.fr https://*.google.fr https://google.am https://*.google.am https://google.at https://*.google.at https://google.bg https://*.google.bg https://google.ca https://*.google.ca https://google.ch https://*.google.ch https://google.co.il https://*.google.co.il https://google.co.in https://*.google.co.in https://google.co.kr https://*.google.co.kr https://google.co.nz https://*.google.co.nz https://google.co.th https://*.google.co.th https://google.co.uz https://*.google.co.uz https://google.co.za https://*.google.co.za https://google.com.au https://*.google.com.au https://google.com.cy https://*.google.com.cy https://google.com.gh https://*.google.com.gh https://google.com.kw https://*.google.com.kw https://google.com.mt https://*.google.com.mt https://google.com.my https://*.google.com.my https://google.com.ng https://*.google.com.ng https://google.com.np https://*.google.com.np https://google.com.ph https://*.google.com.ph https://google.com.pk https://*.google.com.pk https://google.com.sg https://*.google.com.sg https://google.com.tr https://*.google.com.tr https://google.com.tw https://*.google.com.tw https://google.com.ua https://*.google.com.ua https://google.ge https://*.google.ge https://google.gg https://*.google.gg https://google.gr https://*.google.gr https://google.hr https://*.google.hr https://google.hu https://*.google.hu https://google.iq https://*.google.iq https://google.je https://*.google.je https://google.lt https://*.google.lt https://google.lu https://*.google.lu https://google.no https://*.google.no https://google.ro https://*.google.ro https://google.rs https://*.google.rs https://*.adobedtm.com https://adobedtm.com https://*.demdex.net https://demdex.net https://*.everesttech.net https://everesttech.net https://*.givex.com https://givex.com https://*.pinterest.com https://pinterest.com https://*.pinimg.com https://pinimg.com https://*.v12finance.com https://m.v12finance.com https://v12finance.com https://v12retailfinance.com/ https://*.salecycle.com https://salecycle.com https://d16fk4ms6rqz1v.cloudfront.net https://i.salecycle.com https://c.salecycle.com wss://ws.salecycle.com https://assets.sc-trc.com https://mymachine.salecycle.com:8080 https://*.criteo.com https://criteo.com https://*.criteo.net https://criteo.net https://*.criteo.eu https://criteo.eu https://*.nl3.eu.criteo.net https://nl3.eu.criteo.net https://gateway.zscaler.net https://*.zscaler.net https://zscaler.net https://*.awin1.com https://awin1.com; frame-ancestors 'self' https://*.jotform.com/ https://jotform.com/ https://vercel.live https://*.vercel-scripts.com https://vercel-scripts.com https://*.pusher.com wss://*.pusher.com https://*.vercel.com https://vercel.com https://*.vercel.aws.beaverbrooks.co.uk https://*.aws.beaverbrooks.co.uk https://*.vercel.aws.loupe.co.uk https://*.aws.loupe.co.uk https://*.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://*.trustpilot.com https://trustpilot.com https://*.cookiebot.com https://cookiebot.com https://*.pixlee.com https://pixlee.com https://*.pixlee.co https://pixlee.co https://*.pxlecdn.com https://pxlecdn.com https://www.youtube.com https://*.vimeo.com https://vimeo.com https://*.beaverbrooks.co.uk https://beaverbrooks.co.uk https://www.beaverbrooks.co.uk https://*.loupe.co.uk https://loupe.co.uk https://www.loupe.co.uk https://*.graphics.amplience.net https://*.amplience.net https://amplience.net https://*.amplience.com https://amplience.com https://*.staging.bigcontent.io https://*.bigcontent.io https://*.appointedd.com https://appointedd.com https://*.vee24.com https://vee24.com https://static.vee24.com https://*.cybersource.com https://cybersource.com https://*.facebook.net https://facebook.net https://*.facebook.com https://facebook.com https://*.paypal.com https://paypal.com https://*.paypalobjects.com https://paypalobjects.com https://www.sandbox.paypal.com https://*.klarnacdn.net https://klarnacdn.net https://*.klarna.com https://klarna.com https://*.klarnaapi.com https://klarnaapi.com https://klarnaevt.com https://*.klarnaevt.com https://klarnaservices.com https://*.klarnaservices.com https://*.rolex.com https://rolex.com https://*.recaptcha.net https://recaptcha.net https://*.cardinalcommerce.com https://cardinalcommerce.com https://*.cardinaltrusted.com https://*.google.com https://google.com https://*.google.pl https://google.pl https://*.google.co.uk https://google.co.uk https://*.google.md https://google.md https://google.ie https://*.google.ie https://*.ggpht.com https://google.ae https://*.google.ae https://google.se https://*.google.se https://google.es https://*.google.es https://google.nl https://*.google.nl https://google.de https://*.google.de https://google.it https://*.google.it https://google.com.hk https://*.google.com.hk https://google.co.id https://*.google.co.id https://google.cz https://*.google.cz https://google.fr https://*.google.fr https://google.am https://*.google.am https://google.at https://*.google.at https://google.bg https://*.google.bg https://google.ca https://*.google.ca https://google.ch https://*.google.ch https://google.co.il https://*.google.co.il https://google.co.in https://*.google.co.in https://google.co.kr https://*.google.co.kr https://google.co.nz https://*.google.co.nz https://google.co.th https://*.google.co.th https://google.co.uz https://*.google.co.uz https://google.co.za https://*.google.co.za https://google.com.au https://*.google.com.au https://google.com.cy https://*.google.com.cy https://google.com.gh https://*.google.com.gh https://google.com.kw https://*.google.com.kw https://google.com.mt https://*.google.com.mt https://google.com.my https://*.google.com.my https://google.com.ng https://*.google.com.ng https://google.com.np https://*.google.com.np https://google.com.ph https://*.google.com.ph https://google.com.pk https://*.google.com.pk https://google.com.sg https://*.google.com.sg https://google.com.tr https://*.google.com.tr https://google.com.tw https://*.google.com.tw https://google.com.ua https://*.google.com.ua https://google.ge https://*.google.ge https://google.gg https://*.google.gg https://google.gr https://*.google.gr https://google.hr https://*.google.hr https://google.hu https://*.google.hu https://google.iq https://*.google.iq https://google.je https://*.google.je https://google.lt https://*.google.lt https://google.lu https://*.google.lu https://google.no https://*.google.no https://google.ro https://*.google.ro https://google.rs https://*.google.rs https://*.adobedtm.com https://adobedtm.com https://*.demdex.net https://demdex.net https://*.everesttech.net https://everesttech.net https://*.givex.com https://givex.com https://*.pinterest.com https://pinterest.com https://*.pinimg.com https://pinimg.com https://*.v12finance.com https://m.v12finance.com https://v12finance.com https://v12retailfinance.com/ https://*.salecycle.com https://salecycle.com https://d16fk4ms6rqz1v.cloudfront.net https://i.salecycle.com https://c.salecycle.com wss://ws.salecycle.com https://assets.sc-trc.com https://mymachine.salecycle.com:8080 https://*.criteo.com https://criteo.com https://*.criteo.net https://criteo.net https://*.criteo.eu https://criteo.eu https://*.nl3.eu.criteo.net https://nl3.eu.criteo.net https://gateway.zscaler.net https://*.zscaler.net https://zscaler.net https://*.awin1.com https://awin1.com; form-action https://*.paypal.com https://paypal.com https://*.facebook.net https://facebook.net https://*.facebook.com https://facebook.com https://*.cardinalcommerce.com https://cardinalcommerce.com https://*.cardinaltrusted.com https://*.paypal.com https://paypal.com https://*.paypalobjects.com https://paypalobjects.com https://www.sandbox.paypal.com 'self'; worker-src 'self' https://media.beaverbrooks.co.uk https://media.loupe.co.uk https://*.graphics.amplience.net https://*.amplience.net https://amplience.net https://*.amplience.com https://amplience.com https://*.staging.bigcontent.io https://*.bigcontent.io https://*.beaverbrooks.co.uk https://beaverbrooks.co.uk https://www.beaverbrooks.co.uk https://*.loupe.co.uk https://loupe.co.uk https://www.loupe.co.uk https://*.cookiebot.com https://cookiebot.com https://*.ggpht.com https://ggpht.com https://i.vimeocdn.com https://vimeocdn.com https://vercel.live https://*.vercel-scripts.com https://vercel-scripts.com https://*.pusher.com wss://*.pusher.com https://*.vercel.com https://vercel.com https://*.vercel.aws.beaverbrooks.co.uk https://*.aws.beaverbrooks.co.uk https://*.vercel.aws.loupe.co.uk https://*.aws.loupe.co.uk https://*.trustpilot.com https://trustpilot.com https://*.appointedd.com https://appointedd.com https://*.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://*.pixlee.com https://pixlee.com https://*.pixlee.co https://pixlee.co https://*.pxlecdn.com https://pxlecdn.com https://*.google-analytics.com https://google-analytics.com https://*.gstatic.com https://gstatic.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://*.doubleclick.net https://doubleclick.net https://googleads.g.doubleclick.net https://*.googlesyndication.com https://googlesyndication.com https://*.awin1.com https://awin1.com https://*.dwin1.com https://dwin1.com https://*.roeyecdn.com https://roeyecdn.com https://*.roeye.com https://roeye.com https://*.zenaps.com https://zenaps.com https://*.wepowerconnections.com https://wepowerconnections.com https://*.tiktok.com https://tiktok.com https://*.tiktokw.us https://tiktokw.us https://*.pingdom.net https://pingdom.net https://*.facebook.net https://facebook.net https://*.facebook.com https://facebook.com https://*.contentsquare.net https://contentsquare.net https://*.criteo.com https://criteo.com https://*.criteo.net https://criteo.net https://*.criteo.eu https://criteo.eu https://*.nl3.eu.criteo.net https://nl3.eu.criteo.net https://*.cybersource.com https://cybersource.com https://*.digicert.com https://digicert.com https://*.vee24.com https://vee24.com https://static.vee24.com https://*.paypal.com https://paypal.com https://*.paypalobjects.com https://paypalobjects.com https://www.sandbox.paypal.com https://*.klarnacdn.net https://klarnacdn.net https://*.klarna.com https://klarna.com https://*.klarnaapi.com https://klarnaapi.com https://klarnaevt.com https://*.klarnaevt.com https://klarnaservices.com https://*.klarnaservices.com https://*.bing.com https://bat.bing.com https://*.bat.bing.com https://flex.atdmt.com https://*.flex.atdmt.com https://clarity.ms https://*.clarity.ms https://*.rolex.com https://rolex.com https://*.recaptcha.net https://recaptcha.net https://*.adobedtm.com https://adobedtm.com https://*.demdex.net https://demdex.net https://*.everesttech.net https://everesttech.net https://*.abtasty.com https://abtasty.com https://*.naver.com https://naver.com https://*.naver.net https://naver.net https://*.pstatic.net https://pstatic.net https://www.youtube.com https://*.vimeo.com https://vimeo.com https://*.googleapis.com https://googleapis.com https://*.google.com https://google.com https://*.google.pl https://google.pl https://*.google.co.uk https://google.co.uk https://*.google.md https://google.md https://google.ie https://*.google.ie https://google.ae https://*.google.ae https://google.se https://*.google.se https://google.es https://*.google.es https://google.nl https://*.google.nl https://google.de https://*.google.de https://google.it https://*.google.it https://google.com.hk https://*.google.com.hk https://google.co.id https://*.google.co.id https://google.cz https://*.google.cz https://google.fr https://*.google.fr https://google.am https://*.google.am https://google.at https://*.google.at https://google.bg https://*.google.bg https://google.ca https://*.google.ca https://google.ch https://*.google.ch https://google.co.il https://*.google.co.il https://google.co.in https://*.google.co.in https://google.co.kr https://*.google.co.kr https://google.co.nz https://*.google.co.nz https://google.co.th https://*.google.co.th https://google.co.uz https://*.google.co.uz https://google.co.za https://*.google.co.za https://google.com.au https://*.google.com.au https://google.com.cy https://*.google.com.cy https://google.com.gh https://*.google.com.gh https://google.com.kw https://*.google.com.kw https://google.com.mt https://*.google.com.mt https://google.com.my https://*.google.com.my https://google.com.ng https://*.google.com.ng https://google.com.np https://*.google.com.np https://google.com.ph https://*.google.com.ph https://google.com.pk https://*.google.com.pk https://google.com.sg https://*.google.com.sg https://google.com.tr https://*.google.com.tr https://google.com.tw https://*.google.com.tw https://google.com.ua https://*.google.com.ua https://google.ge https://*.google.ge https://google.gg https://*.google.gg https://google.gr https://*.google.gr https://google.hr https://*.google.hr https://google.hu https://*.google.hu https://google.iq https://*.google.iq https://google.je https://*.google.je https://google.lt https://*.google.lt https://google.lu https://*.google.lu https://google.no https://*.google.no https://google.ro https://*.google.ro https://google.rs https://*.google.rs https://*.jquery.com https://jquery.com https://*.givex.com https://givex.com https://*.sentry.io https://sentry.io https://*.ingest.sentry.io https://ingest.sentry.io https://*.sentry-cdn.com https://sentry-cdn.com https://*.exponea.com https://exponea.com https://*.uk.exponea.com https://*.pinterest.com https://pinterest.com https://*.pinimg.com https://pinimg.com https://*.salecycle.com https://salecycle.com https://d16fk4ms6rqz1v.cloudfront.net https://i.salecycle.com https://c.salecycle.com wss://ws.salecycle.com https://mymachine.salecycle.com:8080 https://unpkg.com/react-scan/dist/auto.global.js blob: 'unsafe-eval' 'unsafe-inline'; connect-src 'self' https://s.salecycle.com https://d16fk4ms6rqz1v.cloudfront.net/ https://i.salecycle.com/ wss://ws.salecycle.com https://assets.sc-trc.com/ https://mymachine.salecycle.com:8080 https://front.activation.beyable.com https://fd.front.activation.beyable.com https://beyableprodrt.blob.core.windows.net https://vercel.live https://*.vercel-scripts.com https://vercel-scripts.com https://*.pusher.com wss://*.pusher.com https://*.vercel.com https://vercel.com https://*.vercel.aws.beaverbrooks.co.uk https://*.aws.beaverbrooks.co.uk https://*.vercel.aws.loupe.co.uk https://*.aws.loupe.co.uk https://*.trustpilot.com https://trustpilot.com https://*.appointedd.com https://appointedd.com https://*.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://*.pixlee.com https://pixlee.com https://*.pixlee.co https://pixlee.co https://*.pxlecdn.com https://pxlecdn.com https://*.cookiebot.com https://cookiebot.com https://*.google-analytics.com https://google-analytics.com https://*.gstatic.com https://gstatic.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://*.doubleclick.net https://doubleclick.net https://googleads.g.doubleclick.net https://*.googlesyndication.com https://googlesyndication.com https://*.awin1.com https://awin1.com https://*.dwin1.com https://dwin1.com https://*.roeyecdn.com https://roeyecdn.com https://*.roeye.com https://roeye.com https://*.zenaps.com https://zenaps.com https://*.wepowerconnections.com https://wepowerconnections.com https://*.tiktok.com https://tiktok.com https://*.tiktokw.us https://tiktokw.us https://*.pingdom.net https://pingdom.net https://*.facebook.net https://facebook.net https://*.facebook.com https://facebook.com https://*.contentsquare.net https://contentsquare.net https://*.criteo.com https://criteo.com https://*.criteo.net https://criteo.net https://*.criteo.eu https://criteo.eu https://*.nl3.eu.criteo.net https://nl3.eu.criteo.net https://*.cybersource.com https://cybersource.com https://*.digicert.com https://digicert.com https://*.vee24.com https://vee24.com https://static.vee24.com https://*.paypal.com https://paypal.com https://*.paypalobjects.com https://paypalobjects.com https://www.sandbox.paypal.com https://*.klarnacdn.net https://klarnacdn.net https://*.klarna.com https://klarna.com https://*.klarnaapi.com https://klarnaapi.com https://klarnaevt.com https://*.klarnaevt.com https://klarnaservices.com https://*.klarnaservices.com https://*.bing.com https://bat.bing.com https://*.bat.bing.com https://flex.atdmt.com https://*.flex.atdmt.com https://clarity.ms https://*.clarity.ms https://*.rolex.com https://rolex.com https://*.recaptcha.net https://recaptcha.net https://*.adobedtm.com https://adobedtm.com https://*.demdex.net https://demdex.net https://*.everesttech.net https://everesttech.net https://*.abtasty.com https://abtasty.com https://*.naver.com https://naver.com https://*.naver.net https://naver.net https://*.pstatic.net https://pstatic.net https://www.youtube.com https://*.vimeo.com https://vimeo.com https://*.googleapis.com https://googleapis.com https://*.google.com https://google.com https://*.google.pl https://google.pl https://*.google.co.uk https://google.co.uk https://*.google.md https://google.md https://google.ie https://*.google.ie https://*.ggpht.com https://google.ae https://*.google.ae https://google.se https://*.google.se https://google.es https://*.google.es https://google.nl https://*.google.nl https://google.de https://*.google.de https://google.it https://*.google.it https://google.com.hk https://*.google.com.hk https://google.co.id https://*.google.co.id https://google.cz https://*.google.cz https://google.fr https://*.google.fr https://google.am https://*.google.am https://google.at https://*.google.at https://google.bg https://*.google.bg https://google.ca https://*.google.ca https://google.ch https://*.google.ch https://google.co.il https://*.google.co.il https://google.co.in https://*.google.co.in https://google.co.kr https://*.google.co.kr https://google.co.nz https://*.google.co.nz https://google.co.th https://*.google.co.th https://google.co.uz https://*.google.co.uz https://google.co.za https://*.google.co.za https://google.com.au https://*.google.com.au https://google.com.cy https://*.google.com.cy https://google.com.gh https://*.google.com.gh https://google.com.kw https://*.google.com.kw https://google.com.mt https://*.google.com.mt https://google.com.my https://*.google.com.my https://google.com.ng https://*.google.com.ng https://google.com.np https://*.google.com.np https://google.com.ph https://*.google.com.ph https://google.com.pk https://*.google.com.pk https://google.com.sg https://*.google.com.sg https://google.com.tr https://*.google.com.tr https://google.com.tw https://*.google.com.tw https://google.com.ua https://*.google.com.ua https://google.ge https://*.google.ge https://google.gg https://*.google.gg https://google.gr https://*.google.gr https://google.hr https://*.google.hr https://google.hu https://*.google.hu https://google.iq https://*.google.iq https://google.je https://*.google.je https://google.lt https://*.google.lt https://google.lu https://*.google.lu https://google.no https://*.google.no https://google.ro https://*.google.ro https://google.rs https://*.google.rs https://*.jquery.com https://jquery.com https://*.givex.com https://givex.com https://*.sentry.io https://sentry.io https://*.ingest.sentry.io https://ingest.sentry.io https://*.sentry-cdn.com https://sentry-cdn.com https://*.exponea.com https://exponea.com https://*.uk.exponea.com https://*.pinterest.com https://pinterest.com https://*.pinimg.com https://pinimg.com https://*.salecycle.com https://salecycle.com https://d16fk4ms6rqz1v.cloudfront.net https://i.salecycle.com https://c.salecycle.com wss://ws.salecycle.com https://mymachine.salecycle.com:8080 https://unpkg.com/react-scan/dist/auto.global.js https://media.beaverbrooks.co.uk https://media.loupe.co.uk https://*.graphics.amplience.net https://*.amplience.net https://amplience.net https://*.amplience.com https://amplience.com https://*.staging.bigcontent.io https://*.bigcontent.io https://*.beaverbrooks.co.uk https://beaverbrooks.co.uk https://www.beaverbrooks.co.uk https://*.loupe.co.uk https://loupe.co.uk https://www.loupe.co.uk https://ggpht.com https://i.vimeocdn.com https://vimeocdn.com https://*.attraqt.io https://attraqt.io https://*.attraqt.com https://attraqt.com https://*.richrelevance.com https://richrelevance.com; object-src 'none'; base-uri 'self'; report-uri /api/csp-report; report-to csp-endpoint; 1
default-src 'self'; script-src 'self' https://cdnjs.cloudflare.com https://unpkg.com https://static.cloudflareinsights.com https://assets.mailerlite.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://i.ytimg.com; font-src 'self' data:; connect-src 'self' https://cloudflareinsights.com https://api.botpoison.com https://staging.xlsform.getodk.org; frame-src 'self' https://staging.xlsform.getodk.org https://www.youtube.com; object-src 'none'; report-uri https://o130137.ingest.us.sentry.io/api/4509499598307328/security/?sentry_key=898adfd606e362d4f4106ffe69b4d0bf&sentry_environment=www; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn-cookieyes.com https://connect.facebook.net https://www.googletagmanager.com https://www.google-analytics.com https://s.ytimg.com https://player.twitch.tv https://embed.twitch.tv; style-src 'self' 'unsafe-inline' https://cdn-cookieyes.com; img-src 'self' data: https://img.navi.gg https://cdn-cookieyes.com https://vod-secure.twitch.tv https://yt3.ggpht.com https://i.ytimg.com https://static-cdn.jtvnw.net https://sso-media.navi.gg https://comments-media.navi.gg; font-src 'self' data:; connect-src 'self' https://comments.navi.gg https://cdn-cookieyes.com https://log.cookieyes.com https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net https://www.facebook.com https://gql.twitch.tv https://*.ttvnw.net https://*.googlevideo.com wss://ws.navi.gg; frame-src 'self' https://player.twitch.tv https://embed.twitch.tv https://www.youtube.com https://www.youtube-nocookie.com https://www.facebook.com https://td.doubleclick.net; media-src 'self' blob: https://img.navi.gg https://*.ttvnw.net https://*.googlevideo.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
script-src 'nonce-w6mY88SpUuetl2vyiov2CQ' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/static-on-bigtable; base-uri 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://maps.googleapis.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://code.jquery.com; img-src 'self' data:; font-src 'self'; connect-src 'self'; frame-ancestors 'self'; report-uri /csp-report.asp 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://sdk.cashfree.com https://static.swag.gg; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://static.swag.gg; font-src 'self' data: https://fonts.gstatic.com https://static.swag.gg; img-src 'self' data: blob: https://*.swag.gg https://*.swagapp.in https://juniors-us.s3.us-west-1.amazonaws.com https://www.google-analytics.com https://www.googletagmanager.com; media-src 'self' blob: https://*.swag.gg https://*.swagapp.in https://juniors-us.s3.us-west-1.amazonaws.com; connect-src 'self' https://*.swag.gg https://*.swagapp.in https://juniors-us.s3.us-west-1.amazonaws.com https://*.cashfree.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://api-js.mixpanel.com https://api.mixpanel.com https://*.ingest.sentry.io https://*.sentry.io; frame-src 'self' https://*.cashfree.com; worker-src 'self' blob:; form-action 'self' https://*.cashfree.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://www.google.com https://www.recaptcha.net; frame-src https://www.google.com https://www.recaptcha.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; connect-src 'self' https://*.google-analytics.com https://*.list-manage.com; frame-ancestors 'self'; base-uri 'self' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self'; frame-src 'self'; form-action 'self'; upgrade-insecure-requests 1
default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https://*.hcaptcha.uth.edu https://*.hcaptchatest.uth.edu https://cdnapisec.kaltura.com/ https://pay.instamed.com;script-src 'nonce-98ee60e00f374db785ffce3171cc8144' https://myuthealthhouston.org 'self' https://hcaptcha.uth.edu https://hcaptchatest.uth.edu;img-src https://* 'self' blob: data:;connect-src 'self' epichttp:;style-src https://myuthealthhouston.org 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
font-src *.googleapis.com *.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com https://www.facebook.com/tr/ 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com https://www.facebook.com https://www.google.com https://www.gstatic.com landofcoder.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com https://www.facebook.com *.taggrs.io data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com *.googleapis.com *.gstatic.com https://www.google.com https://www.gstatic.com *.croapp.net https://unpkg.com landofcoder.com *.taggrs.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline fonts.googleapis.com *.fontawesome.com *.googleapis.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.googleapis.com https://analytics.ringostat.net https://region1.analytics.google.com https://sst.kuz.ua https://www.google.com https://www.gstatic.com landofcoder.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com www.vinhosevinhos.com *.bootstrapcdn.com *.smarthint.co *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.twitter.com www.vinhosevinhos.com *.bootstrapcdn.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.yapay.com.br/ *.cloudfront.net/; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com player.vimeo.com www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cademeupedido.com.br https://vinhosevinhos.cademeupedido.com.br *.twitter.com *.addthis.com *.doubleclick.net *.google.com https://www.google.com/* *.yapay.com.br/ *.cloudfront.net/ *.pagaleve.io *.pagaleve.com.br c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.magesolution.com *.vinhosevinhos.com *.google.com *.google.com.br *.magesolution.com/* www.vinhosevinhos.com *.facebook.com *.ebit.com.br *.googletagmanager.com *.dnzdns.com *.ebitempresa.com.br *.doubleclick.net *.akamaihd.net *.siteblindado.com *.dinamize.com *.cloudfront.net/ *.yapay.com.br/ *.vindi.com.br/ https://firebasestorage.googleapis.com *.pagaleve.com.br www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.gstatic.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cloudflare.com *.twitter.com *.google-analytics.com *.googleadservices.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.vimeo.com *.youtube.com *.addthis.com *.paypal.com *.paypalobjects.com *.addthisedge.com *.moatads.com *.facebook.com *.googletagmanager.com *.doubleclick.net *.dinamize.com *.facebook.net *.google.com *.ebit.com.br *.siteblindado.com *.google.com.br www.vinhosevinhos.com https://static.cloudflareinsights.com *.smarthint.co *.yapay.com.br/ *.vindi.com.br/ *.avada.io *.shopify.com http://viacep.com.br *.pagaleve.com.br assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com www.vinhosevinhos.com *.bootstrapcdn.com *.ebit.com.br *.googletagmanager.com *.smarthint.co https://fonts.bunny.net unsafe-inline tagmanager.google.com 'self' 'unsafe-inline'; object-src *.cloudfront.net/ *.yapay.com.br/ *.vindi.com.br/ 'self' 'unsafe-inline'; media-src www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.addthis.com *.google-analytics.com *.doubleclick.net www.vinhosevinhos.com *.facebook.com *.ebit.com.br *.googletagmanager.com *.azurewebsites.net *.siteblindado.com *.dinamize.com *.analytics.google.com https://analytics.google.com *.smarthint.co *.cloudfront.net/ *.yapay.com.br/ *.vindi.com.br/ https://get.geojs.io *.avada.io www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src https://oauth.bb.com.br/oauth/token https://api.bb.com.br/cobrancas/v2 https://oauth.hm.bb.com.br/oauth/token https://api.hm.bb.com.br/cobrancas/v2 https://www63.bb.com.br/ https://apisandbox.redeecommerce.rede.com.br/ https://apiquerysandbox.redeecommerce.rede.com.br/ https://api.redeecommerce.rede.com.br/ https://apiquery.redeecommerce.rede.com.br/ *.dinamize.com *.siteblindado.com *.ebit.com.br 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.vinhosevinhos.com/; report-to report-endpoint; 1
default-src 'self';  script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://cdnjs.cloudflare.com https://static.addtoany.com;  style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.typekit.net https://p.typekit.net https://fonts.bunny.net;  img-src 'self' https://wpassets.ncwit.org https://www.google-analytics.com https://secure.gravatar.com data:;  font-src 'self' https://fonts.gstatic.com https://use.typekit.net https://fonts.bunny.net data:;  connect-src 'self' https://analytics.google.com;  frame-src 'self' https://www.youtube.com https://static.addtoany.com https://www.google.com https://academic-alliance-memberships.softr.app https://ncwit-workforce-members.softr.app;  object-src 'none'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cash-f.squarecdn.com maxcdn.bootstrapcdn.com *.fontawesome.com data: *.googleapis.com *.acsbapp.com acsbapp.com *.laderach.com laderach.com https://fonts.bunny.net https://fonts.gstatic.com *.cloudflare.com *.bootstrapcdn.com *.twitter.com nitropack.io *.nitrocdn.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * https://plumrocket.com www.facebook.com *.adyen.com laderach.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * www.googletagmanager.com https://plumrocket.com consentcdn.cookiebot.com *.addthis.com *.avada.io *.paypalobjects.com www.facebook.com tpc.googlesyndication.com vars.hotjar.com *.laderach.com *.demdex.net *.vimeo.com *.doubleclick.net laderach.com policy.app.cookieinformation.com *.trustpilot.com *.twitter.com nitropack.io 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com maps.gstatic.com *.ytimg.com *.vimeocdn.com *.facebook.net *.acsbapp.com *.googleusercontent.com *.googleapis.com *.clarity.ms *.bing.com *.google.de *.google.es *.doubleclick.net *.paypalobjects.com services.postcodeanywhere.co.uk laderach.isa-test.de www.facebook.com bat.bing.com googletagmanager.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.laderach.com laderach.com *.disqus.com https://firebasestorage.googleapis.com *.cloudflare.com *.twitter.com *.contentsquare.net nitropack.io *.nitrocdn.com flagpedia.net https://redchamps.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com consent.cookiebot.com *.addthisedge.com *.addthis.com *.moatads.com acsbapp.com *.acsbapp.com googletagmanager.com *.doubleclick.net *.gstatic.com *.paypalobjects.com static.addtoany.com lader11112.pcapredict.com services.postcodeanywhere.co.uk checkoutshopper-live.adyen.com g3367433695.co g3565518030.co g6140614385.co g15252493795.co g15450578130.co g15648662465.co *.cloudflare.com tpc.googlesyndication.com static.hotjar.com script.hotjar.com bat.bing.com *.clarity.ms *.laderach.com laderach.com *.disqus.com *.avada.io *.shopify.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net policy.app.cookieinformation.com *.fontawesome.com graph.facebook.com *.trustpilot.com *.vimeo.com widgets.pinterest.com *.contentsquare.com *.contentsquare.net cdn.tailwindcss.com cdn.jsdelivr.net code.jquery.com cdnjs.cloudflare.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app https://static.klaviyo.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com *.googleapis.com *.gstatic.com services.postcodeanywhere.co.uk *.laderach.com laderach.com https://fonts.bunny.net https://fonts.googleapis.com https://cdn.jsdelivr.net *.cloudflare.com *.twitter.com cdn.tailwindcss.com nitropack.io *.nitrocdn.com cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.youtube-nocookie.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.googleapis.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net googletagmanager.com *.addthis.com *.facebook.com facebook.com *.acsbapp.com *.doubleclick.net wss://ws30.hotjar.com *.hotjar.io *.hotjar.com metrics.laderach.com *.clarity.ms services.postcodeanywhere.co.uk bat.bing.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.laderach.com laderach.com maps.googleapis.com https://get.geojs.io *.avada.io policy.app.cookieinformation.com consent.app.cookieinformation.com *.cloudflare.com *.twitter.com *.contentsquare.net *.nitrocdn.com nitropack.io www.gstatic.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.googletagmanager.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://www.google.com https://www.gstatic.com https://recaptcha.net https://www.youtube.com https://s.ytimg.com https://www.zoom-letter.com https://www.zoomletter.com https://*.zoomvoucher.com https://*.hopenapi.com https://ibe.behopenapi.com https://connect.facebook.net https://consent.cookiebot.com https://consentcdn.cookiebot.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://cdn.quilljs.com https://www.zoom-letter.com https://www.zoomletter.com; font-src 'self' data: https://*.twodo.cz https://fonts.gstatic.com; img-src 'self' data: blob: https://*.twodo.cz https://i.ytimg.com https://*.ggpht.com https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com; media-src 'self' blob: https://*.twodo.cz https://www.youtube.com; connect-src 'self' https://api.trustyou.com https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://tagging.ensanahotels.com https://r2.ensana-media.twodo.cz https://*.hopenapi.com https://consentcdn.cookiebot.com https://www.zoom-letter.com https://www.zoomletter.com; frame-src 'self' https://www.youtube.com https://www.google.com https://recaptcha.google.com https://*.zoomvoucher.com https://*.hopenapi.com https://consentcdn.cookiebot.com https://www.zoom-letter.com https://www.zoomletter.com; child-src 'self' https://www.youtube.com https://www.google.com https://recaptcha.google.com https://*.zoomvoucher.com https://*.hopenapi.com https://consentcdn.cookiebot.com https://www.zoom-letter.com https://www.zoomletter.com; worker-src 'self' blob:; form-action 'self' https://*.hopenapi.com 1
child-src 'self' *.youtube.com; default-src * 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' https://challenges.cloudflare.com *.plaid.com js.stripe.com *.youtube.com https://calendly.com https://*.calendly.com https://iframe.cloudflarestream.com/ https://customer-x5mykgv2c1zv0440.cloudflarestream.com/; img-src 'self' *.guideline.io https://cms-assets.guideline.com https://imagedelivery.net https://ssl.gstatic.com https://www.gstatic.com https://www.google.com *.bing.com *.microsoft.com https://cdn.cookielaw.org https://www.gravatar.com https://*.googleadservices.com data:; manifest-src 'self'; media-src 'self'; object-src 'none'; script-src 'self' https://challenges.cloudflare.com https://cdn-assets-prod.s3.amazonaws.com https://cdn.prod.uidapi.com 'unsafe-eval' 'nonce-2f5bc2cc58e54961200505eca1fa1589' 'strict-dynamic'; worker-src 'self' *.youtube.com; base-uri 'self'; frame-ancestors 'self'; report-uri https://sentry2.guideline.com/api/6/security/?sentry_key=f678b7ad3eade55e6da26393e869e420; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.affirm.com *.affirm.ca *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com https://www.googletagmanager.com/ platform.twitter.com secure.livechatinc.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.affirm.com *.affirm.ca *.certcapture.com connect.bolt.com connect-sandbox.bolt.com s3-us-west-1.amazonaws.com https://helloextend-static-assets.s3.amazonaws.com https://extendcoreoffersdemo-offersthemelogobucketeb21afa-19jnurg0a0o17.s3.amazonaws.com https://s3.amazonaws.com https://extendcoreoffersprod-offersthemelogobucketeb21afa-1lr7le13dvgtp.s3.amazonaws.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com *.disqus.com pinterest.com assets.pinterest.com syndication.twitter.com *.files-text.com *.livechatinc.com *.livechat-files.com *.livechat-static.com https://img.youtube.com flagpedia.net moogento.com *.moogento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.affirm.com *.affirm.ca *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com widget.freshworks.com m2epro.freshdesk.com https://*.helloextend.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.disqus.com https://cdn.jsdelivr.net twitter.com platform.twitter.com *.livechatinc.com *.livechat-static.com cdn.jsdelivr.net *.gstatic.com maps.googleapis.com cdn1.affirm.com sdk.helloextend.com cdn.livechatinc.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.fontawesome.com widget.freshworks.com m2epro.freshdesk.com https://fonts.googleapis.com https://static.klaviyo.com https://cdn.jsdelivr.net maxcdn.bootstrapcdn.com *.livechatinc.com cdn.jsdelivr.net *.gstatic.com 'self' 'unsafe-inline'; object-src connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com *.livechatinc.com 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.livechatinc.com *.livechat-static.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.affirm.com *.affirm.ca *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com sessions.bugsnag.com widget.freshworks.com m2epro.freshdesk.com https://*.helloextend.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.livechatinc.com *.text.com www.gstatic.com maps.googleapis.com 'self' 'unsafe-inline'; child-src *.certcapture.com *.livechatinc.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://e4d51802-a473-4ed1-8641-fab46596696a.sansec.watch/; report-to report-endpoint; 1
report-uri /_/csp-reports 1
connect-src https://d.la1-c1cs-ph2.salesforceliveagent.com 'self' https://stats.g.doubleclick.net courseraservices--c.cs62.visual.force.com https://checkoutshopper-test.adyen.com/ api.salesforce.com https://*.api.salesforce.com drive.google.com https://d.la5-c1-ia4.salesforceliveagent.com https://business.coursera.help https://www.google.com https://analytics.google.com https://fonts.googleapis.com/css2 https://o11y.sfproxy-core2.sfdc-lywfpd.svc.sfdcfc.net/ui-telemetry *.amazonaws.com https://www.getfeedback.com https://app.arcade.software https://courseraservices.my.salesforce-scrt.com wss://*.slack-gov-dev.com https://d.la1-core2.sfdc-lywfpd.salesforceliveagent.com wss://api.salesforce.com https://d.la1-c1cs-iad.salesforceliveagent.com https://cdn.cbweb.code-builder.platform.salesforce.com https://courseraservices.lightning.force.com https://payments.salesforce.com/ https://www.paypal.com https://courseraservices--uat--c.cs62.visual.force.com https://d.la5-c1-ia5.salesforceliveagent.com wss://*.slack.com https://d.la2-c1-ph2.salesforceliveagent.com https://demo.arcade.software https://checkoutshopper-live.adyen.com/ https://*.walkme.com *.googleusercontent.com courseraservices--c.visualforce.com https://courseraservices.my.salesforce.com https://courseraservices--c.documentforce.com https://www.coursera.support https://courseraservices--c.visualforce.com https://d.la11-core2.sfdc-lywfpd.salesforceliveagent.com https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/ accounts.google.com https://d.la13-core2.sfdc-lywfpd.salesforceliveagent.com https://courseraservices.my.site.com https://courseraservices--c.na207.visual.force.com https://www.google.co.in wss://*.api.salesforce.com https://www.google.com/recaptcha/ https://www.sandbox.paypal.com https://js.stripe.com/ https://d.la2-c1cs-iad.salesforceliveagent.com https://www.googletagmanager.com https://www.google-analytics.com *.salesforce.com *.api.salesforce.com wss://*.slack-gov.com; report-to sfdc-csp-ep; report-uri https://courseraservices.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D1U000000y4UJ&networkId=0DM1U000000F7e3&type=communities 1
default-src 'self' https://hosting.gl; script-src 'self' 'unsafe-inline' https://hosting.gl https://hosting.gl/templates/lagom2/assets/js/ https://statistics.hosting.gl https://www.googletagmanager.com https://connect.facebook.net https://widget.trustpilot.com https://cdn.datatables.net https://customerwidget.joinflow.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; connect-src 'self' https://region1.google-analytics.com https://statistics.hosting.gl https://www.facebook.com https://api.telavox.se https://payment.quickpay.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://www.facebook.com data:; font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' https://widget.trustpilot.com; form-action 'self'; frame-ancestors 'self'; report-uri https://hostinggl.report-uri.com/r/d/csp/wizard 1
connect-src 'self' geolocation.onetrust.com cdn.cookielaw.org; frame-src 'self' *.postbank.bg www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'self'; form-action 'self'; style-src 'self' 'report-sample' fonts.googleapis.com cdnjs.cloudflare.com cdn.jsdelivr.net; base-uri 'self'; img-src 'self' data:; default-src 'self'; font-src 'self' fonts.gstatic.com cdnjs.cloudflare.com cdn.jsdelivr.net *.postbank.bg; style-src-attr 'self' 'report-sample'; script-src 'self' 'report-sample' cdn.cookielaw.org www.googletagmanager.com *.postbank.bg www.google.com/recaptcha/ www.gstatic.com; report-uri /csp-report/ 1
default-src ewel-collaboration-confir-web.azurewebsites.net 'self' fonts.googleapis.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.google.com *.ewel.co.jp *.sysewel.jp *.chatplus.jp *.kenpos.jp mhlab.jp aissy.co.jp; script-src ewel-collaboration-confir-web.azurewebsites.net 'self' 'unsafe-eval' *.google.com *.googletagmanager.com *.gstatic.com ssl-cache.stream.ne.jp *.chatplus.jp *.kenpos.jp code.jquery.com cdn.jsdelivr.net; style-src 'self' 'unsafe-eval' *.googleapis.com *.gstatic.com *.chatplus.jp *.kenpos.jp cdn.jsdelivr.net; frame-ancestors 'self' *.ewel.co.jp *.sysewel.jp *.chatplus.jp *.kenpos.jp mhlab.jp aissy.co.jp; form-action 'self' *.googleapis.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.google.com *.ewel.co.jp *.sysewel.jp *.chatplus.jp *.kenpos.jp mhlab.jp aissy.co.jp; 1
default-src 'self'; script-src 'self' 'report-sample' https://cdn.jsdelivr.net https://www.googletagmanager.com https://cdn.bizible.com https://nd.nasdaq.com https://signin.nasdaq.com https://nasdaq-ciam.okta.com https://*.oktacdn.com https://*.pendo.io https://*.storage.googleapis.com https://*.cdn.data.nasdaq.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://checkout.stripe.com; style-src 'self' 'report-sample' https://cdn.jsdelivr.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://nd.nasdaq.com https://signin.nasdaq.com https://nasdaq-ciam.okta.com https://*.oktacdn.com https://*.pendo.io https://*.storage.googleapis.com https://*.cdn.data.nasdaq.com; img-src 'self' data: https://*.cdn.data.nasdaq.com https://cdn.bizible.com https://cdn.bizibly.com https://images.ctfassets.net https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://www.google.co.in https://*.pendo.io https://*.storage.googleapis.com https://*.s3.amazonaws.com; font-src 'self' data: https://cdn.jsdelivr.net https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://nd.nasdaq.com https://*.cdn.data.nasdaq.com; connect-src 'self' https://preview.contentful.com https://cdn.contentful.com https://*.algolianet.com https://*.algolia.net https://*.algolia.io https://www.google-analytics.com https://stats.g.doubleclick.net https://*.pendo.io https://*.storage.googleapis.com https://nd.nasdaq.com https://signin.nasdaq.com https://nasdaq-ciam.okta.com https://*.okta.com https://*.oktacdn.com https://www.google.com/recaptcha/ https://*.google.com https://api.stripe.com https://api.typeform.com https://*.s3.amazonaws.com; frame-src 'self' https://nd.nasdaq.com https://app.pendo.io https://*.pendo.io https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://checkout.stripe.com https://*.typeform.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-XHHQGPXXBf2k8GHjn32FgQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' blob: data: https://*.dzengi.com https://dzengi.com https://ekr.zdassets.com https://currencysupport1713960465.zendesk.com https://id.zopim.com https://img.youtube.com https://i.ytimg.com https://syndication.twitter.com https://connect.facebook.net https://www.facebook.com https://dzengi.bamboohr.com https://www.google.com https://www.gstatic.com https://fonts.gstatic.com https://*.analytics.google.com https://*.google-analytics.com https://analytics.google.com https://accounts.google.com https://apis.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://translate-pa.googleapis.com https://translate.google.com https://translate.googleapis.com https://translate.googleapis.com https://www.google.ae https://www.google.am https://www.google.az https://www.google.bg https://www.google.by https://www.google.ca https://www.google.cz https://www.google.de https://www.google.dk https://www.google.ee https://www.google.es https://www.google.fi https://www.google.fr https://www.google.ge https://www.google.ie https://www.google.it https://www.google.kg https://www.google.kz https://www.google.lt https://www.google.lv https://www.google.md https://www.google.nl https://www.google.no https://www.google.pl https://www.google.ro https://www.google.rs https://www.google.ru https://www.google.sk https://www.google.co.id https://www.google.co.il https://www.google.co.in https://www.google.co.th https://www.google.co.uk https://www.google.co.uz https://www.google.co.za https://www.google.com.ar https://www.google.com.cy https://www.google.com.ng https://www.google.com.np https://www.google.com.tr https://www.google.com.ua https://test-website-files.idzengi.xyz https://test-website-static.idzengi.xyz https://*.backend-capital.com wss://*.backend-capital.com wss://*.dzengi.com wss://widget-mediator.zopim.com https://mc.yandex.az https://mc.yandex.by https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.ru https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://yandex.ru https://yastatic.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://test-website-static.idzengi.xyz https://prod-static.dzengi.com https://www.googletagmanager.com https://www.gstatic.com https://www.google.com https://accounts.google.com https://apis.google.com https://*.google-analytics.com https://*.analytics.google.com https://connect.facebook.net https://appleid.cdn-apple.com https://platform.twitter.com https://static.zdassets.com https://translate-pa.googleapis.com https://translate.google.com https://translate.googleapis.com https://mc.yandex.ru https://mc.yandex.by https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.yandex.com.am https://mc.yandex.az https://mc.yandex.md https://yandex.ru https://yastatic.net https://mc.yandex.kz https://mc.yandex.com https://mc.yandex.com.ge; style-src 'self' 'unsafe-inline' https://test-website-static.idzengi.xyz https://prod-static.dzengi.com https://www.googletagmanager.com https://www.gstatic.com https://accounts.google.com https://fonts.googleapis.com; media-src 'self' data: blob: https://static.zdassets.com; font-src 'self' data: https://test-website-static.idzengi.xyz https://prod-static.dzengi.com https://fonts.gstatic.com; frame-src 'self' https://www.youtube.com https://www.google.com https://www.googletagmanager.com https://accounts.google.com https://support.google.com https://td.doubleclick.net https://platform.twitter.com https://mc.yandex.ru https://mc.yandex.by https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.yandex.com.am https://mc.yandex.az https://mc.yandex.md https://yandex.ru https://yastatic.net https://mc.yandex.kz https://mc.yandex.com https://mc.yandex.com.ge; report-uri https://test-api.dzengi.com/csp 1
font-src www.paypalobjects.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com static.ugatu.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.cookielaw.org static.ugatu.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ tagmanager.google.com https://www.googletagmanager.com *.cookielaw.org *.googleapis.com static.ugatu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com static.ugatu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.ugatu.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.cookielaw.org *.googleapis.com *.paypal.com static.ugatu.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.facebook.com https://connect.facebook.net https://js.tosspayments.com https://*.vercel-scripts.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://*.supabase.co wss://*.supabase.co https://*.tosspayments.com https://api.stripe.com https://*.vercel-insights.com https://www.facebook.com https://*.ingest.us.sentry.io; frame-src 'self' https://js.stripe.com https://*.tosspayments.com; media-src 'self' https: blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com/tr/ https://npg.settlebank.co.kr https://tbnpg.settlebank.co.kr https://www.cookiepayments.com https://sandbox.cookiepayments.com; frame-ancestors 'self' 1
img-src 'self' data: https://imageservice.asgoodasnew.com https://sw-assets.ekomiapps.de https://smart-widget-assets.ekomiapps.de https://control.wirkaufens.de https://region1.analytics.google.com https://wirkaufens.de https://www.wirkaufens.de https://asgoodasnew.omq.de https://i.ytimg.com https://www.google.de https://www.google.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://gum.criteo.com https://criteo-sync.teads.tv https://*.pubmatic.com https://rtb-csync.smartadserver.com https://x.bidswitch.net https://r.casalemedia.com https://exchange.mediavine.com https://sync.outbrain.com https://id5-sync.com https://criteo-partners.tremorhub.com https://ad.360yield.com https://sync-t1.taboola.com https://cs.media.net https://ad.yieldlab.net https://eb2.3lift.com https://a.twiago.com https://sync.1rx.io https://jadserve.postrelease.com https://rtb-csync.smartadserver.com https://www.facebook.com; connect-src 'self' https://sw-assets.ekomiapps.de https://api.melibo.de https://www.google.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://asgoodasnew.omq.de https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.de https://pagead2.googlesyndication.com http://*.prod.svc.cluster.local email-smtp.eu-central-1.amazonaws.com https://marketing-tracking-api.asgoodasnew.com https://consent.cookie-script.com https://px.ads.linkedin.com https://*.clarity.ms https://bat.bing.com https://*.wirkaufens.de; frame-src 'self' https://gum.criteo.com https://www.awin1.com https://www.youtube.com https://www.youtube-nocookie.com https://load.control.asgoodasnew.com https://www.google.com https://www.googletagmanager.com https://control.wirkaufens.de https://load.control.wirkaufens.de https://load.control.asgoodasnew.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://wirkaufens.de https://*.wirkaufens.de https://load.control.asgoodasnew.com https://widgets.ekomi.com https://sw-assets.ekomiapps.de https://smart-widget-assets.ekomiapps.de https://cdn.melibo.de https://cdn.cookie-script.com https://cdnjs.cloudflare.com https://googleads.g.doubleclick.net https://bat.bing.com https://snap.licdn.com https://*.criteo.com https://www.dwin1.com https://connect.facebook.net https://px.ads.linkedin.com https://asgoodasnew.omq.de https://www.google.com https://www.gstatic.com https://www.youtube.com https://s.ytimg.com https://*.googletagmanager.com https://load.control.wirkaufens.de https://load.control.asgoodasnew.de 'sha256-2BxQxmAQ5lWaNC9I2hKxwb7K1Uza8sHxLOCayoJEuVg=' 'sha256-tHUsD4Y+uaqDuVrVUF2Fl2YZXDDyG5kuz8Zuew5N3k4='; script-src-attr 'unsafe-hashes' 'sha256-0Uy5vBKw53G9/Do8gNnkyq3xMeHsxUEB3lEAcdC5hfY=' 'sha256-1GpHD8bKgKhA8V5aMEGApTKzX9Hzg1p40SvwgKWVEhE=' 'sha256-f1iyv5FTgUdqb44YRAFA+o0KAatXEpeDEliuQXCh8Do=' 'sha256-OEbd/fw3yX/3rcudfghuOrjjEH2r7jIKcyJpCTOSDBU='; frame-ancestors 'self' https://asgoodasnew.de/ https://asgoodasnew.fr/ https://asgoodasnew.es/ https://asgoodasnew.it/ https://wirkaufens.de/; report-uri https://cors-monitoring-test.asgoodasnew.cloud/csp-violation-report-endpoint/ 1
default-src 'self'; base-uri 'self'; form-action 'self' https://accounts.google.com https://appleid.apple.com https://api.paystack.co; img-src 'self' data: blob: https://*.thebftonline.com https://lh3.googleusercontent.com https://i.ytimg.com https://img.youtube.com https://*.cloudflare.com https://images.unsplash.com https://googlesyndication.com https://*.googlesyndication.com https://doubleclick.net https://*.doubleclick.net https://googleads.g.doubleclick.net https://googleadservices.com https://*.googleadservices.com https://google.com https://*.google.com https://www.google-analytics.com https://*.google-analytics.com https://*.googletagmanager.com; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://accounts.google.com; script-src 'nonce-028655d932b4ca97f283c6c874f02a16' 'strict-dynamic'; script-src-attr 'none'; connect-src 'self' https://api.paystack.co https://accounts.google.com https://appleid.apple.com https://androidpublisher.googleapis.com wss://thebftonline.com https://googlesyndication.com https://*.googlesyndication.com https://doubleclick.net https://*.doubleclick.net https://googleadservices.com https://*.googleadservices.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com; frame-src 'self' https://accounts.google.com https://oauth.googleusercontent.com https://appleid.apple.com https://www.youtube.com https://www.youtube-nocookie.com https://www.facebook.com https://www.google.com/maps/embed https://googlesyndication.com https://*.googlesyndication.com https://doubleclick.net https://*.doubleclick.net https://googleads.g.doubleclick.net; media-src 'self' data: blob: https:; manifest-src 'self'; object-src 'none'; worker-src 'self' blob:; report-to csp-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.bing.com *.braintreegateway.com *.cardinalcommerce.com *.doubleclick.net *.dwin1.com *.facebook.net *.getwisp.co *.google.com *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.helpscout.net *.klaviyo.com *.paypal.com *.roeyecdn.com *.trustpilot.com *.wisepops.com *.wisepops.net *.youtube.com cdn-cookieyes.com wisepops.net; style-src 'self' 'unsafe-inline' *.fontawesome.com *.googleapis.com *.gstatic.com; img-src 'self' data: *.awin1.com *.bing.com *.bing.net *.doubleclick.net *.facebook.com *.google.com *.google.co.uk *.googleadservices.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.paypal.com *.roeye.com *.wisepops.com *.youtube.com *.ytimg.com cdn-cookieyes.com image-charts.com; font-src 'self' *.fontawesome.com *.gstatic.com; frame-src 'self' *.bing.com *.braintreegateway.com *.cardinalcommerce.com *.doubleclick.net *.facebook.com *.getwisp.co *.google.com *.googletagmanager.com *.trustpilot.com *.wisepops.com *.wisepops.net *.youtube.com wisepops.net; connect-src 'self' *.bing.com *.bing.net *.braintree-api.com *.braintreegateway.com *.cardinalcommerce.com *.cookieyes.com *.doubleclick.net *.facebook.com *.google-analytics.com *.google.com *.googlesyndication.com *.helpscout.net *.klaviyo.com *.paypal.com *.wisepops.com *.wisepops.net cdn-cookieyes.com google.com wisepops.net; frame-ancestors 'self'; form-action 'self'; base-uri 'self'; upgrade-insecure-requests; report-uri https://b965d175-0c60-4d34-b3f2-c7244d93f81a.sansec.watch/; media-src 'self'; object-src 'none'; worker-src 'self'; manifest-src 'self'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com static.klaviyo.com www.oxygenconcentratorstore.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.affirm.com *.affirm.ca www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.weltpixel.com gum.criteo.com fledge.eu.criteo.com fledge.us.criteo.com x.adroll.com widget.trustpilot.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.affirm.com *.affirm.ca d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com bat.bing.com c.bing.com m.media-amazon.com www.gstatic.com segment.prod.bidr.io i.liadm.com cdn-assets.affirm.com d.adroll.com x.adroll.com ib.adnxs.com dsum-sec.casalemedia.com sync.outbrain.com ml314.com us-u.openx.net pixel.rubiconproject.com sync.taboola.com eb2.3lift.com image2.pubmatic.com x.bidswitch.net pixel.tapad.com cdn.ywxi.net criteo-partners.tremorhub.com ad.360yield.com sync-t1.taboola.com simage2.pubmatic.com jadserve.postrelease.com criteo-sync.teads.tv tapestry.tapad.com r.casalemedia.com contextual.media.net exchange.mediavine.com dis.criteo.com sync.targeting.unrulymedia.com aa.agkn.com ade.clmbtech.com ad.tpmn.io www.oxygenconcentratorstore.com www.shareasale.com *.g.doubleclick.net gum.criteo.com ads.stickyadstv.com trends.revcontent.com rtb-csync.smartadserver.com ad.tpmn.co.kr sync.1rx.io www.facebook.com partner.mediawallahscript.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.affirm.com *.affirm.ca www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de device.maxmind.com static.klaviyo.com static-tracking.klaviyo.com static.criteo.net services.nofraud.com bat.bing.com static.cloudflareinsights.com www.google.com www.gstatic.com static-na.payments-amazon.com www.clarity.ms widget.eu.criteo.com apis.google.com js-agent.newrelic.com eastprodcdn.azureedge.net www.dwin1.com solutions.invocacdn.com s.vibe.co d2hrivdxn8ekm8.cloudfront.net acdn.adnxs.com sslwidget.criteo.com action.media6degrees.com s.adroll.com d.adroll.com connect.facebook.net cdn1.affirm.com cdn.ywxi.net widget.trustpilot.com action.dstillery.com www.oxygenconcentratorstore.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://static.klaviyo.com assets.braintreegateway.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.affirm.com *.affirm.ca *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de device.maxmind.com fast.a.klaviyo.com static-forms.klaviyo.com gum.criteo.com j.clarity.ms apay-us.amazon.com api-visitor-us-east.velaro.com bam.nr-data.net api-main-us-east.velaro.com d-ipv6.mmapiws.com t.vibe.co measurement-api.criteo.com tte-prod.telemetry.vaultdcr.com pnapi.invoca.net api-engagement-us-east.velaro.com dp70uvwpivouv.cloudfront.net x.adroll.com www.google.com www.affirm.com cdn-assets.affirm.com featureassets.org s3-us-west-2.amazonaws.com widget.trustpilot.com prodregistryv2.org ib.adnxs.com services.nofraud.com *.clarity.ms cloudflareinsights.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src j.clarity.ms www.google.com fledge.eu.criteo.com apay-us.amazon.com bat.bing.com bam.nr-data.net fledge.us.criteo.com csm.us5.us.criteo.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net cash-f.squarecdn.com self data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * https://store.plumrocket.com pal-test.adyen.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ * self *.doubleclick.net *.criteo.com *.easydmp.net *.snapchat.com https://store.plumrocket.com https://accounts.google.com checkoutshopper-test.adyen.com pal-test.adyen.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io * self *.bing.com *.paypal.com *.google.fr *.electrodepot.fr *.electrodepot.be *.electrodepot.es *.cookielaw.org *.snapchat.com checkoutshopper-test.adyen.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com self sc-static.net *.abtasty.com *.jsdelivr.net *.gstatic.com *.facebook.net *.tiktok.com *.googleapis.com *.easydmp.net *.vzbl.eu *.aticdn.net *.m1by1.com *.woosmap.com *.doubleclick.net *.cookielaw.org *.snapchat.com *.valiuz.com *.mediarithmics.com *.prediggo.services https://accounts.google.com checkoutshopper-test.adyen.com 'self' 'unsafe-eval' 'nonce-czNiZnBoYmx4NW8zanZ1YWJuYjVqczdnb2treDlndzA=' 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY/CkTMBhjNhwPvglpYumjx31B4fjkY8='; style-src *.adobe.com fonts.googleapis.com *.cash.app self *.gstatic.com *.electrodepot.fr *.electrodepot.be *.electrodepot.es *.snapchat.com https://accounts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io * self *.snapchat.com *.cookielaw.org *.abtasty.com *.googleapis.com *.vzbl.eu *.criteo.com *.easydmp.net *.paypal.com *.xiti.com *.valiuz.com *.doubleclick.net *.mediarithmics.com https://accounts.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.electrodepot.fr *.electrodepot.be *.electrodepot.es *.bing.com *.criteo.net *.snapchat.com *.netvigie.com *.xiti.com *.valiuz.com *.googletagmanager.com *.google.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-6pbI_Wtq6EELmmg-NBOaZQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-WOZzC8Ss/eCpLHA3xGMZ' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'report-sample';report-uri https://csp.withgoogle.com/csp/scfe 1
object-src 'none';base-uri 'self';script-src 'nonce-S5waCj27xLDgqgBzgLKNDg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; upgrade-insecure-requests; block-all-mixed-content;  script-src     'self'     'unsafe-inline'     blob:     https://js.stripe.com     https://www.googletagmanager.com     https://www.google-analytics.com     https://www.gstatic.com     https://www.google.com     https://*.google.com     https://www.youtube.com     https://s.ytimg.com     https://static.fundraiseup.com     https://cdn.fundraiseup.com     https://app.usercentrics.eu     https://privacy-proxy.usercentrics.eu     https://a.omappapi.com     https://ams.wpml.org     https://cdn.domdog.io     https://static.cloudflareinsights.com     https://connect.facebook.net     https://static.hotjar.com     https://script.hotjar.com     https://snap.licdn.com     https://s.pinimg.com     https://static.ads-twitter.com     https://bat.bing.com     https://collector-12876.tvsquared.com     https://googleads.g.doubleclick.net;  style-src     'self'     'unsafe-inline'     https://fonts.googleapis.com     https://a.omappapi.com     https://ams.wpml.org;  font-src     'self'     https://fonts.gstatic.com     https://static.fundraiseup.com     data:;  img-src     'self'     data:     blob:     https:;  connect-src     'self'     https://www.google.com     https://*.google.com     https://www.google-analytics.com     https://region1.google-analytics.com     https://stats.g.doubleclick.net     https://ad.doubleclick.net     https://googleads.g.doubleclick.net     https://www.googletagmanager.com     https://www.facebook.com     https://stape.animalsasia.org     https://cdn.fundraiseup.com     https://api.fundraiseup.com     https://static.fundraiseup.com     https://fndrsp.net     https://app.usercentrics.eu     https://api.usercentrics.eu     https://privacy-proxy.usercentrics.eu     https://consent-api.service.consent.usercentrics.eu     https://a.omappapi.com     https://api.omappapi.com     https://ams.wpml.org     https://cdn.domdog.io     https://jsa-animalsasia.domdog.io     https://static.cloudflareinsights.com     https://ct.pinterest.com     https://analytics.twitter.com     https://t.co     https://px.ads.linkedin.com     https://bat.bing.com     https://content.hotjar.io     wss://ws.hotjar.com;  frame-src     'self'     https://js.stripe.com     https://hooks.stripe.com     https://checkout.stripe.com     https://www.google.com     https://*.google.com     https://www.youtube.com     https://www.youtube-nocookie.com     https://stape.animalsasia.org     https://ct.pinterest.com;  worker-src     'self'     blob:;  media-src     'self'     blob:; 1
script-src 'nonce-H4/7zDk0N6X+aH+iI5WRMM68dxulypzDNN850Qon+Ow=' 'unsafe-eval' 'strict-dynamic' https:; frame-ancestors 'self'; report-uri https://www.thonhotels.com/api/ContentSecurityViolation/; report-to csp-endpoint; object-src 'self'; base-uri 'self' 1
report-uri https://csp.pdffiller.com/csp_report ; report-to csp-endpoint 1
default-src 'self'; img-src 'self' data: https:; script-src 'self' https: 'unsafe-inline'; style-src 'self' https: 'unsafe-inline'; font-src 'self' data: https:; connect-src 'self' https:; frame-src https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; 1
default-src 'self';     script-src 'report-sample' 'self' 'unsafe-inline' https://www.gstatic.com https://www.google.com https://assets.adobedtm.com https://bat.bing.com https://cdn.cookielaw.org https://connect.facebook.net https://googleads.g.doubleclick.net https://static.sanitas.tech https://www.googletagmanager.com;     style-src 'report-sample' 'self' 'unsafe-inline' https://enterprise-assets.sanitas.tech https://static.sanitas.tech;     object-src 'none';     base-uri 'self';     connect-src 'self' https://adservice.google.com https://dpm.demdex.net https://cdn.cookielaw.org https://sslsc.sanitas.com https://ddrum.sanitas.com https://api3.sanitas.com https://ad.doubleclick.net https://bat.bing.com https://bat.bing.net https://c.az.contentsquare.net https://googleads.g.doubleclick.net https://k-eu1.az.contentsquare.net https://region1.analytics.google.com https://stats.g.doubleclick.net https://target.sanitas.com https://www.google.ch https://www.google.com;     font-src 'self' data: https://static.sanitas.tech https://enterprise-assets.sanitas.tech;     frame-src 'self' https://portal.sanitas.com https://www.google.com https://auth.sanitas.com https://sanitas.demdex.net https://www.googletagmanager.com;     frame-ancestors 'self' https://*.sanitas.com https://*.sanet17.ch;     img-src 'self' data: https://dpm.demdex.net https://cdn.cookielaw.org https://ad.doubleclick.net https://bat.bing.com https://c.az.contentsquare.net https://cm.everesttech.net https://googleads.g.doubleclick.net https://sslsc.sanitas.com https://static.sanitas.tech https://www.facebook.com https://www.google.ch https://www.google.com https://www.googletagmanager.com;     manifest-src 'self';     media-src 'self';     worker-src blob:;     report-uri https://ddrum.sanitas.com/intake-proxy/api/v2/logs?dd-api-key=pub161d9c93ae7ae51dbddf3fcb1a905ef5&dd-evp-origin=content-security-policy&ddsource=csp-report 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https: blob:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' https: blob:; worker-src 'self' blob: 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com 'self' data: use.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com *.sendcloud.sc *.jsdelivr.net *.trustpilot.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com maps.gstatic.com maps.googleapis.com magefan.com cm.magefan.com *.googleapis.com *.ggpht.com *.disqus.com *.cloudfront.net https://www.mollie.com *.amazonaws.com *.hsforms.net *.hsforms.com 'self' data: *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com *.disqus.com js.mollie.com *.sendcloud.sc *.jsdelivr.net *.hsforms.net *.hsforms.com *.gstatic.com https://cdn.jsdelivr.net/gh/orestbida/cookieconsent@v3.0.0/dist/cookieconsent.umd.js *.trustpilot.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.sendcloud.sc *.jsdelivr.net *.googleapis.com *.gstatic.com https://cdn.jsdelivr.net/gh/orestbida/cookieconsent@v3.0.0/dist/cookieconsent.css use.fontawesome.com *.trustpilot.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.gstatic.com data: widget.trustpilot.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; connect-src 'self' https://prod.radiozamaneh.org https://s3.eu-de.cloud-object-storage.appdomain.cloud/static-reflection/ https://static-reflection.netlify.app https://i.zamaneh.media https://*.contentinsights.com https://*.smartocto.com https://www.googleapis.com https://attestation.android.com https://securepubads.g.doubleclick.net https://googleads.g.doubleclick.net https://*.googlesyndication.com https://csi.gstatic.com https://*.adtrafficquality.google; font-src 'self'; img-src 'self' https://i.zamaneh.media https://*.contentinsights.com https://i.ytimg.com https://www.google.com https://*.doubleclick.net https://*.googlesyndication.com data:; script-src 'self' 'unsafe-inline' *; style-src 'self' 'unsafe-inline'; frame-src https://platform.twitter.com https://www.youtube-nocookie.com https://www.instagram.com https://w.soundcloud.com https://www.google.com https://*.googlesyndication.com https://www.googleadservices.com https://securepubads.g.doubleclick.net; report-uri https://snfbtd92.uriports.com/reports/report; report-to policy 1
default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://api-eu.mixpanel.com https://api.mixpanel.com https://*.g.alchemy.com https://rpc.ankr.com https://rpc.tac.build https://*.walletconnect.com https://*.walletconnect.org wss://*.walletconnect.com wss://*.walletconnect.org https://*.metamask.io wss://*.metamask.io https://nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://api-iam.intercom.io https://*.intercomcdn.com https://www.google-analytics.com https://*.analytics.google.com; frame-src 'self' https://verify.walletconnect.com https://verify.walletconnect.org https://app.safe.global https://*.metamask.io https://*.intercom.io; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; script-src 'self' 'nonce-lEfL6PKVELF9/WbZhs63ug==' https://unpkg.com https://www.googletagmanager.com https://www.google-analytics.com https://widget.intercom.io https://js.intercomcdn.com; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' administrado-assets.s3.amazonaws.com ajax.googleapis.com maps.googleapis.com www.googletagmanager.com www.google-analytics.com googleads.g.doubleclick.net www.gstatic.com www.googleadservices.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.ckeditor.com cdn.datatables.net cdn.onesignal.com cdn.wootric.com js.stripe.com connect.facebook.net analytics.tiktok.com static.ads-twitter.com snap.licdn.com px.ads.linkedin.com static.hotjar.com script.hotjar.com assets.apollo.io widget.intercom.io js.intercomcdn.com kit.fontawesome.com js.pusher.com stats.pusher.com onesignal.com challenges.cloudflare.com bzrcdn.openai.com; style-src 'self' 'unsafe-inline' administrado-assets.s3.amazonaws.com fonts.googleapis.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.datatables.net rsms.me use.fontawesome.com js.intercomcdn.com onesignal.com; font-src 'self' data: fonts.gstatic.com rsms.me cdnjs.cloudflare.com administrado-assets.s3.amazonaws.com use.fontawesome.com ka-f.fontawesome.com js.intercomcdn.com fonts.intercomcdn.com; img-src 'self' data: blob: https: http2.mlstatic.com img.mlstatic.com; connect-src 'self' https: wss:; media-src 'self' data: administrado-assets.s3.amazonaws.com administrado.s3.amazonaws.com js.intercomcdn.com; worker-src 'self' blob:; manifest-src 'self'; frame-src 'self' js.stripe.com www.googletagmanager.com www.youtube.com www.youtube-nocookie.com player.vimeo.com www.loom.com staticxx.facebook.com www.facebook.com intercom-sheets.com www.intercom-reporting.com challenges.cloudflare.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' www.administrado.net administrado.net www.facebook.com; upgrade-insecure-requests; report-uri https://o130369.ingest.sentry.io/api/1319879/security/?sentry_key=9e9526a9cd1c4c53b27e969ef17ada9d 1
default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data:; font-src 'self' data:; connect-src 'self'; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; 1
default-src 'self'; script-src 'nonce-zoN1xQVCei51j18R9AMQdA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
object-src 'none';base-uri 'self';script-src 'nonce-_RDCtJbuaSQKV4svxBIUiw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-sWd7j2vcwNCVY7OrE39S3w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com js.mollie.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com flagpedia.net https://www.mollie.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.gstatic.com maps.googleapis.com js.mollie.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.gstatic.com maps.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src https:; media-src 'self' https: blob:; object-src 'none'; base-uri 'self' 1
object-src 'none'; script-src 'nonce-f98O78xK_ZbglFksOfclKyNt' 'strict-dynamic' http: https:; base-uri 'none'; 1
default-src 'self'; script-src 'nonce-abcqgluJZBmVhW/y4WGvMg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'sha256-8xLuOsMDZxJH+r9geHmiRzHgDq3FFPCCB10H1UKehtY=' 'sha256-bKQZ4k3PXhYkObtRFNXwZmy86m7PTkTqURfdJ+j+RMA=' https://www.googletagmanager.com https://gso.kommo.com https://cdnjs.cloudflare.com https://challenges.cloudflare.com https://connect.facebook.net; script-src-elem 'self' 'sha256-8xLuOsMDZxJH+r9geHmiRzHgDq3FFPCCB10H1UKehtY=' 'sha256-bKQZ4k3PXhYkObtRFNXwZmy86m7PTkTqURfdJ+j+RMA=' https://www.googletagmanager.com https://gso.kommo.com https://cdnjs.cloudflare.com https://challenges.cloudflare.com https://connect.facebook.net; style-src 'self' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://gso.kommo.com; style-src-elem 'self' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://gso.kommo.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: https:; frame-src https://www.googletagmanager.com https://challenges.cloudflare.com https://gso.kommo.com; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://www.google.com https://gso.kommo.com https://form.ecuafact.com https://challenges.cloudflare.com https://www.facebook.com; form-action 'self' https://form.ecuafact.com; report-uri /csp-report; report-to csp-endpoint; 1
default-src 'self'; script-src 'nonce-DOP8XtjGaSfQb/Ppj0uamw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
object-src 'none';base-uri 'self';script-src 'nonce-P8PMPwlMF_KkaTcPKhI7wg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'nonce-D+hIXUkcamuiScPxZYGxjA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' https://trusted-scripts.com; style-src 'self' 'unsafe-inline'; img-src 'self' data:; report-uri /csp-report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com data: https://api.systempay.fr/static/ *.fontawesome.com https://cdnjs.cloudflare.com *.googleusercontent.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://paiement.systempay.fr/vads-payment/ https://api.systempay.fr/api-payment/ https://api.systempay.fr/static/ *.hsforms.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com https://paiement.systempay.fr/vads-payment/ https://api.systempay.fr/static/ https://www.googletagmanager.com/ *.hs-sites.com *.hsforms.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://paiement.systempay.fr/static/latest/images/type-carte/ https://api.systempay.fr/static/ https://paiement.systempay.fr/vads-payment/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://maps.googleapis.com https://maps.gstatic.com https://www.google.fr https://api.mapbox.com *.tile.openstreetmap.org *.axept.io *.google.com *.googletagmanager.com *.googleusercontent.com *.hsforms.com *.hubspot.com *.imgix.net *.openstreetmap.org *.hsforms.net 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://api.systempay.fr/api-payment/ https://api.systempay.fr/static/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://cdnjs.cloudflare.com https://maps.googleapis.com *.axept.io *.facebook.net *.googletagmanager.com *.hotjar.com *.hs-analytics.net *.hs-banner.com *.hs-scripts.com *.hscollectedforms.net *.hsforms.net *.hubspot.com *.bing.com *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://api.systempay.fr/static/ *.fontawesome.com https://fonts.googleapis.com https://cdnjs.cloudflare.com *.googletagmanager.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://paiement.systempay.fr/vads-payment/ https://api.systempay.fr/api-payment/ http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://maps.googleapis.com https://nominatim.openstreetmap.org *.axept.io *.axeptio.tech *.google-analytics.com *.hotjar.com *.hotjar.io wss://ws.hotjar.com *.hsforms.com *.hscollectedforms.net *.hubspot.com t.elasticsuite.io *.hsforms.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src https://paiement.systempay.fr/vads-payment/ https://api.systempay.fr/api-payment/ https://api.systempay.fr/static/ *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://76c33e6e-b3ed-47af-8820-21ea80415831.sansec.watch/; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * webpay3g.transbank.cl webpay3gint.transbank.cl 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.blue.cl *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://firebasestorage.googleapis.com *.facebook.com *.google.com *.googleadservices.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.blue.cl *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.avada.io *.shopify.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://liolaweb.cl 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.blue.cl *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://get.geojs.io *.avada.io *.googletagmanager.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:;img-src 'self' https:;style-src 'unsafe-inline' https:;script-src 'unsafe-inline' 'unsafe-eval' http:;media-src *;frame-ancestors 'self' https:; 1
object-src 'none';base-uri 'self';script-src 'nonce-PNRsjaEhmn9ML_ZJAwOlzQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-jve_ZatEGbCUy8N0_ZEmTQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://app.flyfish.ai https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: https:; connect-src 'self' https://app.flyfish.ai https://www.google-analytics.com; frame-src https://www.youtube.com https://www.google.com; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.gstatic.com *.cdn.userway.org; font-src 'self' fonts.gstatic.com; img-src 'self' cdn.userway.org data: sppagebuilder.com maps.googleapis.com; connect-src 'self' cdn77.api.userway.org api.userway.org maps.googleapis.com; script-src 'self' cdn.userway.org ajax.googleapis.com maxcdn.bootstrapcdn.com; frame-src 'self'; script-src-elem 'self' maps.googleapis.com cdn.userway.org 'sha256-N/4d8ewez3Wzx5WmnOwGLZfRBddPWJMlVZKikRqRiQo=' 'sha256-fjHH/hDGedQwWCxjrFtTeJTwaWHkUA4R2FtSczrt+nE=' 'sha256-QMfduvzot+N77aMq4Ad7jDgq8k/X3CPHmCK3Vhh7Abw=' 'sha256-3N2OR1PZdIZ1vFuw3e0TfFqZy9zUOfzV8wTs2Amy7K4='; media-src 'self'; 1
object-src 'none';base-uri 'self';script-src 'nonce-3qasNdQNa3u3lU8rW5A4Tg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'nonce-dA7mcRjf8J3NDFUeodaZfg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.syncfusion.com https://js.stripe.com https://m.stripe.network; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.syncfusion.com; font-src 'self' data: https://fonts.gstatic.com https://cdn.syncfusion.com; img-src 'self' data: blob: https:; connect-src 'self' https://smartpay.tj https://*.smartpay.tj wss://*.smartpay.tj ws://*.smartpay.tj https://api.stripe.com https://m.stripe.network; frame-src 'self' blob: https://js.stripe.com https://hooks.stripe.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-t81MwlvYvpCcjDz-yPMEog' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'nonce-+pLZEPgi/nteYBxKuNMa/w==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.firebaseapp.com https://*.googleapis.com https://apis.google.com https://www.gstatic.com https://cdn.jsdelivr.net https://static.cloudflareinsights.com https://performance.radar.cloudflare.com https://www.googletagmanager.com https://connect.facebook.net https://*.ufathai.biz https://ufathai.biz; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://sentry.ufa-th.dev https://chat.ufathai.ai wss://chat.ufathai.ai https://chatwoot-api.ufa-services.com wss://chatwoot-api.ufa-services.com https://media.ufathai.biz https://*.firebaseio.com wss://*.firebaseio.com https://*.firebaseapp.com https://*.googleapis.com https://apis.google.com https://identitytoolkit.googleapis.com https://securetoken.googleapis.com https://*.google-analytics.com https://www.google.com https://www.googletagmanager.com https://m1.openfpcdn.io https://translate.googleapis.com https://*.ufathai.win; frame-src 'self' https://*.firebaseapp.com https://www.youtube.com https:; media-src 'self' https://media.ufathai.biz; worker-src 'self' blob: https://cdn.jsdelivr.net; manifest-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri https://sentry.ufa-th.dev/api/9/security/?sentry_key=ecfeac15a4f90be7badd10be4e79af43 1
object-src 'none';base-uri 'self';script-src 'nonce-6z6ksRqQ_EClwGXv5a-sFA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; object-src 'none'; base-uri 'none'; frame-src 'self' https:; 1
default-src 'self'; object-src 'none'; base-uri 'none'; script-src 'nonce-bbe74da03ccd29cceca133d802454bc1' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://at.alicdn.com; img-src 'self' data: https: http: blob:; connect-src 'self' https: wss:; frame-src 'self' https: http:; media-src 'self' data: https: http: blob:; worker-src 'self' blob: 1
connect-src 'self' blob: *.agendrix.com analytics.google.com region1.analytics.google.com region1.google-analytics.com www.google-analytics.com www.google.com www.google.ca www.google.fr stats.g.doubleclick.net www.googletagmanager.com *.hubapi.com *.hubspot.com *.hsforms.com content.hotjar.io metrics.hotjar.io vc.hotjar.io wss://ws.hotjar.com *.pathmonk.com a.omappapi.com api.omappapi.com z.omappapi.com bat.bing.com bat.bing.net www.facebook.com px.ads.linkedin.com pixel-config.reddit.com www.googleadservices.com pagead2.googlesyndication.com cdn-cookieyes.com log.cookieyes.com directory.cookieyes.com ams.wpml.org maps.googleapis.com g.tenor.com media.tenor.com my.yoast.com static.cloudflareinsights.com cloudflareinsights.com unpkg.com edge.fullstory.com rs.fullstory.com *.ingest.sentry.io nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io api-iam.intercom.io *.intercom-messenger.com agendrix.cloudflareaccess.com cdn.jsdelivr.net cdn-4.convertexperiments.com; default-src 'self' *.agendrix.com; font-src 'self' data: *.agendrix.com fonts.gstatic.com fonts.intercomcdn.com; form-action 'self' *.agendrix.com accounts.google.com appleid.apple.com *.hsforms.com; frame-ancestors 'self'; frame-src 'self' *.agendrix.com www.google.com www.googletagmanager.com calendly.com *.hotjar.com vars.hotjar.com *.hsforms.com www.facebook.com td.doubleclick.net www.youtube.com www.youtube-nocookie.com; img-src 'self' data: blob: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.agendrix.com *.hs-analytics.net *.hs-scripts.com *.hs-banner.com *.hsadspixel.net *.hsforms.net www.googletagmanager.com static.cloudflareinsights.com cdn-4.convertexperiments.com *.pathmonk.com static.hotjar.com script.hotjar.com a.omappapi.com cdn-cookieyes.com www.google.com www.gstatic.com maps.googleapis.com googleads.g.doubleclick.net snap.licdn.com bat.bing.com www.redditstatic.com connect.facebook.net unpkg.com assets.calendly.com ams.wpml.org yoast.com edge.fullstory.com widget.intercom.io js.intercomcdn.com www.youtube.com; style-src 'self' 'unsafe-inline' *.agendrix.com fonts.googleapis.com a.omappapi.com *.pathmonk.com ams.wpml.org cdnjs.cloudflare.com; upgrade-insecure-requests; worker-src 'self' blob:; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=o_cfKOUnWRkyMJntpcpuL3sjuGpIkv.K.ArD1JyiQbE-1789285416.6886969-1.0.1.1-gk6ZZ79yo52krhUQX5TpLWdvkG.p4h2k8oJ7qwwv2YZTTuiE1SBxROPVd00zuOrISe80PLehRotXf6kadIvzo27wCM72REt0Bu25azxKj2TWbuBrybFPP9ML0sGPY06KHFUFqJ4ZfFZqizKsCaH17ZOOC0C.3t18s4LJIma54PCSZ7DWimZYi5BCY2wCzNGzt0NKku0WxCaz4JporV7BFg; report-to cf-gboculmwwjjwqulw 1
default-src 'self' https: data: blob; script-src 'self' https: 'unsafe-inline'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob; font-src 'self' https: data:; connect-src 'self' https:; frame-ancestors 'self'; frame-src https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; upgrade-insecure-requests 1
font-src *.googleapis.com *.gstatic.com data: www.paypalobjects.com 'self' data: 'unsafe-inline' data: *.bootstrapcdn.com *.trustedshops.com https://widgets.trustedshops.com https://integrations.etrusted.com *.fontawesome.com maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com *.fonts.googleapis.com *.cloudflare.com *.klaviyo.com unpkg.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action *.facebook.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com api.boldcommerce.com api.staging.boldcommerce.com *.paypal.com *.bold.ninja static-eps.secure.boldcommerce.com static-eps.secure.staging.boldcommerce.com *.stripe.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.hotjar.com *.google.com *.jsctool.com *.online-metrix.net *.weltpixel.com js.mollie.com *.addthis.com *.pinterest.com www.xtento.com *.bing.com *.doubleclick.net *.googletagmanager.com *.solutenetwork.com *.trustedshops.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes';, img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.ytimg.com *.gstatic.com *.googleapis.com static.boldcommerce.com *.paypal.com www.gstatic.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com 'self' data: 'unsafe-inline' data: *.bing.com *.imgur.com *.trustedshops.com *.cloudfront.net *.online-metrix.net *.google.de https://widgets.trustedshops.com https://integrations.etrusted.com flagpedia.net https://www.mollie.com *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.addthis.com *.pinterest.com *.cdninstagram.com *.reddit.com www.xtento.com cdn.xtento.com *.amasty.netnews *.bing.net *.boldcommerce.com *.bremertresor.at *.bremertresor.de *.clarity.ms d3k81ch9hvuctc.cloudfront.net *.doubleclick.net *.etrusted.com *.facebook.net *.googleadservices.com *.google-analytics.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bj www.google.bs www.google.by www.google.ca www.google.cd www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.ph www.google.com.pk www.google.com.py www.google.com.sa www.google.com.sg www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gl www.google.gr www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.kg www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mk www.google.mn www.google.mu www.google.mv www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.sc www.google.se www.google.si www.google.sk www.google.sn www.google.tn google.com *.google.com *.googlesyndication.com *.googletagmanager.com *.googleusercontent.com *.hansa-tresor.com *.paypalobjects.com placehold.co *.usercentrics.eu *.youtube.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes';, script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ api.boldcommerce.com api.staging.boldcommerce.com eps.secure.staging.boldcommerce.com cashier.boldcommerce.com *.paypal.com *.paypalobjects.com static-eps.secure.boldcommerce.com static-eps.secure.staging.boldcommerce.com *.bold.ninja *.cdn-apple.com *.stripe.com cdn.safecharge.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.bing.com *.hotjar.com *.facebook.net *.cloudflare.com *.s24.com *.google.com *.googlecommerce.com *.doubleclick.net *.trustedshops.com *.payments-amazon.com *.ratepay.com *.pay1.de *.online-metrix.net *.shopgate.com https://widgets.trustedshops.com https://integrations.etrusted.com *.avada.io maps.googleapis.com js.mollie.com https://cdnjs.cloudflare.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.instagram.com https://www.googletagmanager.com tagmanager.google.com *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com www.xtento.com cdn.xtento.com *.boldcommerce.com *.bremertresor.de *.clarity.ms *.clickcease.com *.cloudflareinsights.com *.etrusted.com *.googleadservices.com *.google-analytics.com *.googlesyndication.com *.googletagmanager.com *.jquery.com *.klaviyo.com *.tailwindcss.com *.usercentrics.eu 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src fonts.googleapis.com *.bold.ninja static-eps.secure.boldcommerce.com static-eps.secure.staging.boldcommerce.com https://static.klaviyo.com *.cloudflare.com *.fontawesome.com *.bootstrapcdn.com *.trustedshops.com *.googleapis.com https://widgets.trustedshops.com https://integrations.etrusted.com maxcdn.bootstrapcdn.com *.gstatic.com https://fonts.googleapis.com https://cdnjs.cloudflare.com tagmanager.google.com *.boldcommerce.com *.klaviyo.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src api.boldcommerce.com api.staging.boldcommerce.com 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline';, connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com *.newrelic.com *.nr-data.net *.googleapis.com api.boldcommerce.com api.staging.boldcommerce.com eps.secure.staging.boldcommerce.com cashier.boldcommerce.com *.sandbox.braintree-api.com *.braintree-api.com *.paypal.com *.braintreegateway.com www.paypalobjects.com eps.secure.boldcommerce.com static-eps.secure.boldcommerce.com static-eps.secure.staging.boldcommerce.com *.bold.ninja *.cdn-apple.com ppp-test.safecharge.com secure.safecharge.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google-analytics.com *.payments-amazon.com *.amazon.com *.amazon.de *.trustedshops.com *.ratepay.com *.online-metrix.net *.bing.com *.doubleclick.net *.etrusted.com https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com *.cloudflare.com *.addthis.com *.cardinalcommerce.com *.graph.instagram.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app *.bing.net *.bremertresor.de *.clarity.ms *.clickcease.com *.datadome.co digital-cloak.net *.googleadservices.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.by www.google.ca www.google.ch www.google.cl www.google.cm www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.eg www.google.com.et www.google.com.gh www.google.com.hk www.google.com.mt www.google.com.mx www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.ph www.google.com.pk www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.co.nz www.google.co.th www.google.co.uk www.google.co.uz www.google.co.ve www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gr www.google.hr www.google.hu www.google.ie www.google.is www.google.it www.google.li www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mk www.google.mn www.google.mu www.google.mv www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.sc www.google.se www.google.si www.google.sk *.google.com google.com *.googlesyndication.com *.hotjar.com *.hotjar.io *.hyr.so *.jquery.com *.klaviyo.com *.solutenetwork.com *.usercentrics.eu 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src api.boldcommerce.com api.staging.boldcommerce.com http: https: blob: 'self' 'unsafe-inline'; default-src *.bing.com *.bing.net *.boldcommerce.com *.bootstrapcdn.com *.bremertresor.de *.cdn-apple.com *.clarity.ms *.clickcease.com *.cloudflareinsights.com d3k81ch9hvuctc.cloudfront.net *.datadome.co *.doubleclick.net *.etrusted.com *.facebook.com *.facebook.net *.googleadservices.com *.google-analytics.com *.googleapis.com www.google.ae www.google.al www.google.at www.google.bg www.google.ch www.google.co.cr www.google.co.in www.google.com.au www.google.com.br www.google.com.pe www.google.co.uk www.google.de www.google.es www.google.fr www.google.lu www.google.md www.google.nl www.google.pl www.google.ro www.google.ru google.com *.google.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hansa-tresor.com *.hotjar.com *.hotjar.io *.hyr.so *.klaviyo.com *.paypal.com *.paypalobjects.com *.solutenetwork.com *.tailwindcss.com *.trustedshops.com *.usercentrics.eu *.youtube.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; base-uri *.bing.com *.clarity.ms *.trustedshops.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes';, report-uri https://a698956b-b25b-4008-9b89-43c63366e98e.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self'; object-src 'none'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com 'self' data: 3efe134ec6.nxcli.io data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.yotpo.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.facebook.com 3efe134ec6.nxcli.io 'self' 'unsafe-inline'; frame-ancestors 3efe134ec6.nxcli.io 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com platform.twitter.com *.yotpo.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.twitter.com *.facebook.com *.googletagmanager.com www.xtento.com *.weltpixel.com 3efe134ec6.nxcli.io *.doubleclick.net 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com *.yotpo.com https://firebasestorage.googleapis.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.adroll.com *.klarna.com *.googleadservices.com *.google.com *.google.co.uk *.twitter.com *.twimg.com *.ytimg.com *.herokuapp.com *.pooldawg.com *.bing.com *.doubleclick.net *.bidswitch.net *.adnxs.com *.smartadserver.com *.taboola.com www.xtento.com cdn.xtento.com *.hsforms.net *.hsforms.com 3efe134ec6.nxcli.io *.googletagmanager.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.plugins.emarsys.net *.scarabresearch.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com twitter.com platform.twitter.com *.yotpo.com *.avada.io *.shopify.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.adroll.com *.klaviyo.com *.googleadservices.com *.gstatic.com *.google-analytics.com *.bing.com *.mountain.com *.criteo.net *.criteo.com *.conversionwax.com *.attn.tv www.xtento.com cdn.xtento.com *.hsforms.net *.hsforms.com 3efe134ec6.nxcli.io *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.yotpo.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu static.ctctcdn.com *.klaviyo.com *.google.com *.googletagmanager.com 3efe134ec6.nxcli.io *.tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 3efe134ec6.nxcli.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.scarabresearch.com *.eservice.emarsys.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.yotpo.com https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com d.adroll.com *.doubleclick.net *.bing.com t.elasticsuite.io *.hsforms.net *.hsforms.com 3efe134ec6.nxcli.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com 3efe134ec6.nxcli.io http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 3efe134ec6.nxcli.io 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
connect-src 'self' 'unsafe-inline' 'unsafe-eval' *.akeneo.cloud *.bing.com *.bing.net *.doubleclick.net *.facebook.com *.facebook.net *.googleadservices.com *.google-analytics.com *.googleapis.com www.google.be www.google.ch www.google.co.uk www.google.de www.google.nl google.com *.google.com *.googlesyndication.com *.googletagmanager.com *.hotjar.com *.hotjar.io mpc2-prod-28-is5qnl632q-ue.a.run.app *.multisafepay.com noembed.com pimarketingcloud.blob.core.windows.net *.pinimg.com *.pinterest.com rkn3.net squeezely.tech *.squeezely.tech *.storyblok.com *.taggrs.io *.tiktok.com *.tiktokw.us *.trustpilot.com *.youtube.com *.ytimg.com api.marker.io ssr.marker.io s3.eu-west-1.amazonaws.com/marker.sessions.prod; img-src 'self' 'unsafe-inline' 'unsafe-eval' *.akeneo.cloud *.bing.com *.bing.net *.doubleclick.net *.facebook.com *.facebook.net *.googleadservices.com *.googleapis.com www.google.be www.google.ch www.google.co.uk www.google.de www.google.fr www.google.it www.google.nl *.google.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com pimarketingcloud.blob.core.windows.net rkn3.net *.squeezely.tech *.storyblok.com *.taggrs.io *.tiktok.com *.tiktokw.us *.ytimg.com blob: data: media.marker.io app.marker.io edge.marker.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.doubleclick.net *.facebook.net *.google-analytics.com *.googleapis.com *.googletagmanager.com *.hotjar.com *.multisafepay.com *.pinimg.com squeezely.tech *.tiktok.com *.trustpilot.com *.youtube.com edge.marker.io app.marker.io; form-action 'self' 'unsafe-inline' 'unsafe-eval' *.facebook.com app.marker.io api.marker.io; frame-src 'self' 'unsafe-inline' 'unsafe-eval' *.facebook.com *.pinterest.com *.trustpilot.com *.youtube.com app.marker.io; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com *.multisafepay.com; font-src 'self' 'unsafe-inline' 'unsafe-eval' *.gstatic.com app.marker.io edge.marker.io; child-src 'self' 'unsafe-inline' 'unsafe-eval'  app.marker.io; media-src 'self' 'unsafe-inline' 'unsafe-eval' media.marker.io app.marker.io edge.marker.io; report-uri https://aee276e1-d3fd-47a0-acf8-badd9b287445.sansec.watch/; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com cash-f.squarecdn.com https://*.typekit.net maxcdn.bootstrapcdn.com data: https://cdn.honey.io data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * https://www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.verify.monzo.com https://*.arcot.com *.hsforms.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * https://www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com https://*.doubleclick.net *.google.com/ https://*.hotjar.com *.addthis.com https://*.paypal.com https://*.braintreegateway.com *.kaptcha.com *.cardinalcommerce.com *.doubleclick.net *.verify.monzo.com https://secure.livechatinc.com https://*.demdex.net https://tpc.googlesyndication.com *.hsforms.net https://*.channelcentral.net https://*.arcot.com *.hsforms.com https://challenges.cloudflare.com *.trustpilot.com *.weltpixel.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com https://*.omtrdc.net dpm.demdex.net https://cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https://www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://*.doubleclick.net *.google.com https://*.google.co.uk https://*.cloudfront.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.files-text.com *.livechatinc.com *.livechat-files.com *.livechat-static.com https://img.youtube.com https://www.magezon.com *.google.co.in *.googletagmanager.com *.techbuyer.com *.techbuydev1.dev.iwebcloud.co.uk https://api.feefo.com *.vzaar.com https://techbuyer.gumlet.io https://bat.bing.com https://t.co https://*.hsforms.com https://track.hubspot.com https://consent.linksynergy.com https://consent.nxtck.com https://consent.mediaforge.com https://consent.jrs5.com https://consent.dc-storm.com https://www.googletagmanager.com https://www.google.fr https://www.google.com.eg https://www.google.de https://www.google.com.my https://www.google.co.id https://www.google.com.au https://www.google.co.nz https://www.google.ie https://www.google.ch https://www.google.at https://www.google.nl https://www.google.es https://www.google.com.ua https://www.google.com.tr https://www.google.com.tw https://www.google.tn https://www.google.co.in https://www.google.com.pk https://www.google.com.ng https://www.google.co.jp https://www.google.be https://www.google.co.mz https://www.google.ca https://www.google.com.vn https://www.google.com.hk https://www.google.ro https://www.google.it https://www.google.hr https://www.google.pl https://www.google.co.kr https://www.google.com.ph https://www.google.co.ke https://i.ytimg.com https://cdn.honey.io https://*.livechatinc.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page https://connect.facebook.net connect.facebook.net graph.facebook.com business.facebook.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://*.pcapredict.com/js/sensor.js https://www.googletagmanager.com *.google.com/ https://www.gstatic.com https://*.hotjar.com https://*.doubleclick.net https://secure.leadforensics.com https://*.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.livechatinc.com *.livechat-static.com https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech s7.addthis.com *.moatads.com *.addthis.com *.facebook.net *.google-analytics.com *.addthisedge.com *.cardinalcommerce.com *.doubleclick.net *.zdassets.com *.hoolah.co *.nmgassets.com https://*.feefo.com *.cookiefirst.com *.verify.monzo.com https://*.wisepops.com *.hsforms.com https://*.ads-twitter.com https://bat.bing.com https://secure.feed5mown.com https://o2.mouseflow.com https://cdn.mouseflow.com https://*.livechatinc.com https://cdn.oribi.io https://js.hs-analytics.net https://js.hscollectedforms.net https://js.hs-banner.com https://assets.revlifter.io https://analytics.twitter.com https://*.nofraud.com https://d-ipv6.mmapiws.com *.hsforms.net https://js.hs-scripts.com https://cdn.noibu.com https://cdn.raygun.io https://*.braintreegateway.com https://*.openai.com https://challenges.cloudflare.com *.trustpilot.com *.googletagmanager.com *.googleadservices.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.cash.app https://*.googleapis.com https://*.typekit.net https://static.klaviyo.com *.livechatinc.com https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech maxcdn.bootstrapcdn.com *.cookiefirst.com *.verify.monzo.com *.trustpilot.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src *.livechatinc.com 'self' 'unsafe-inline'; media-src *.adobe.com *.livechatinc.com *.livechat-static.com *.feefo.com *.vzaar.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net https://*.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com * https://www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://*.hotjar.com https://*.adobedc.net https://*.nr-data.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.livechatinc.com *.text.com https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech ekr.zdassets.com/ https://stats.g.doubleclick.net *.addthis.com *.amazonaws.com https://*.braintreegateway.com *.cardinalcommerce.com *.nmgplatform.com https://*.feefo.com *.cookiefirst.com *.verify.monzo.com https://o2.mouseflow.com https://www.google-analytics.com *.hsforms.com https://*.livechatinc.com https://bat.bing.com https://adservice.google.com https://www.google.com https://*.demdex.net https://*.mmapiws.com https://forms.hubspot.com https://input.noibu.com wss://input.noibu.com https://analytics.google.com https://api.raygun.io https://api.ipinfo.io https://challenges.cloudflare.com *.doubleclick.net 'self' 'unsafe-inline'; child-src *.livechatinc.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src https://pro.fontawesome.com cdn.jsdelivr.net fonts.gstatic.com cdn.almapay.com *.googleapis.com *.gstatic.com fonts.googleapis.com https://fonts.gstatic.com https://ws.colissimo.fr https://fonts.bunny.net *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.getalma.eu *.almapay.com/ *.stripe.com/ *.checkout.com/ *.adyen.com/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com bytedance: sslocal: *.affirm.com *.affirm.ca https://player.vimeo.com https://www.youtube.com https://form.typeform.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com *.affirm.com *.affirm.ca maps.googleapis.com https://www.facebook.com https://www.google.fr https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://maps.googleapis.com https://maps.gstatic.com https://ws.colissimo.fr https://*.tile.openstreetmap.fr https://*.onyourmap.com https://google.fr https://scontent.cdninstagram.com https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https://vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.jsdelivr.net *.googleapis.com *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com *.affirm.com *.affirm.ca https://www.google.com https://magento.com *.googlejs.com https://connect.facebook.net maps.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://maps.googleapis.com https://www.gstatic.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com *.avada.io *.shopify.com *.alothemes.com *.magepow.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com cdn.jsdelivr.net fonts.googleapis.com https://fonts.googleapis.com https://static.klaviyo.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com https://fonts.bunny.net *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com *.gstatic.com https://cdnjs.cloudflare.com unsafe-inline assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.getalma.eu *.almapay.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com *.affirm.com *.affirm.ca places.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://ws.colissimo.fr https://maps.googleapis.com https://nominatim.openstreetmap.org https://*.onyourmap.com https://*.mapbox.com https://graph.instagram.com https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data.geopf.fr 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.iubenda.com cs.iubenda.com www.googletagmanager.com *.google-analytics.com www.google.com challenges.cloudflare.com static.cloudflareinsights.com sibautomation.com e.photoephemeris.com us-assets.i.posthog.com; style-src 'self' 'unsafe-inline' cdn.iubenda.com; img-src 'self' data: assets.photoephemeris.com imagedelivery.net *.photoephemeris.com cdn.iubenda.com www.googletagmanager.com *.google-analytics.com *.google.com *.doubleclick.net; font-src 'self'; connect-src 'self' data: api.photoephemeris.com bamburgh.photoephemeris.com cdn.iubenda.com idb.iubenda.com challenges.cloudflare.com www.googletagmanager.com *.google-analytics.com analytics.google.com *.analytics.google.com www.google.com *.doubleclick.net cloudflareinsights.com sibautomation.com in-automate.brevo.com o381349.ingest.us.sentry.io e.photoephemeris.com us.i.posthog.com us-assets.i.posthog.com; frame-src widget.radiantdrift.com challenges.cloudflare.com www.youtube.com www.youtube-nocookie.com www.iubenda.com cdn.iubenda.com player.vimeo.com td.doubleclick.net www.google.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'; manifest-src 'self'; worker-src 'self' blob: challenges.cloudflare.com; report-uri https://csp-reports.photoephemeris.com/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://www.googletagmanager.com https://*.google-analytics.com https://www.googleadservices.com https://partner.googleadservices.com https://googleads.g.doubleclick.net https://*.adtrafficquality.google https://connect.facebook.net https://askmn.libanswers.com https://mnscuservices.widget.custhelp.com https://cse.google.com https://www.google.com https://www.gstatic.com https://ajax.googleapis.com https://adp.eab.com https://apply.bemidjistate.edu https://*.cdn.technolutions.net https://calendar.bemidjistate.edu https://cdnjs.cloudflare.com https://*.hotjar.com https://tag.brandcdn.com https://adservices.brandcdn.com https://www.youvisit.com https://cdn.knightlab.com https://connect.soundcloud.com https://spark.adobe.com https://express.adobe.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.google.com https://www.gstatic.com https://cdnjs.cloudflare.com https://*.cdn.technolutions.net https://apply.bemidjistate.edu https://*.hotjar.com; img-src 'self' data: blob: https://*.google-analytics.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.adtrafficquality.google https://www.facebook.com https://www.google.com https://clients1.google.com https://ssl.gstatic.com https://libapps.s3.amazonaws.com https://i.ytimg.com https://i.vimeocdn.com https://secure.gravatar.com https://www.bemidjistate.edu https://blogs.bemidjistate.edu https://*.hotjar.com https://insight.adsrvr.org https://*.mdhv.io https://mnscuservices.widget.custhelp.com https://www.rmcep.com https://www.nemojt.org https://intercountycc.org https://img.apmcdn.org https://nhl.bamcontent.com https://www.century.edu https://syndicatedsearch.goog https://translate.google.com https://english.njucm.edu.cn https://trck.youvisit.com https://fonts.gstatic.com https://stats.g.doubleclick.net https://ps.w.org https://s.w.org https://mediaspace.minnstate.edu https://cdnapisec.kaltura.com https://meltwater-apps-production.s3.eu-west-1.amazonaws.com https://spark.adobe.com https://express.adobe.com; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com https://*.hotjar.com; connect-src 'self' https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://www.google.com https://www.googleadservices.com https://ad.doubleclick.net https://googleads.g.doubleclick.net https://*.cdn.technolutions.net https://syndicatedsearch.goog https://*.adtrafficquality.google https://www.facebook.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://api.presence.io https://apply.bemidjistate.edu https://translate.googleapis.com https://api.soundcloud.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://td.doubleclick.net https://www.google.com https://www.googletagmanager.com https://syndicatedsearch.goog https://*.adtrafficquality.google https://bookings.cloud.microsoft https://www.facebook.com https://insight.adsrvr.org https://adservices.brandcdn.com https://d1eoo1tco6rr5e.cloudfront.net https://*.yoshki.com https://apply.bemidjistate.edu https://w.soundcloud.com https://mediaspace.minnstate.edu https://cdnapisec.kaltura.com https://cdn.youvisit.com https://www.candidcareer.com https://lptv.org https://cdn.knightlab.com; media-src 'self'; object-src 'none'; base-uri 'self'; worker-src 'self' blob:; form-action 'self' https://*.minnstate.edu https://apply.bemidjistate.edu https://www.facebook.com https://www.focus2career.com https://mnpals-bsu.primo.exlibrisgroup.com; upgrade-insecure-requests; report-uri /csp-report; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com *.fonts.googleapis.com data: *.cloudflare.com fonts.googleapis.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://use.fontawesome.com https://static.klaviyo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.addthis.com *.pinterest.com *.meetanshi.com www.facebook.com platform.twitter.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.addthis.com pinterest.com *.cdninstagram.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://meetanshi.com/media/logo.png *.meetanshi.com www.facebook.com assets.pinterest.com syndication.twitter.com https://maps.gstatic.com https://maps.googleapis.com maps.gstatic.com https://*.bcwsupplies.com https://www.google.com https://www.google.co.in https://www.google.co.us data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com connect.facebook.net *.pinterest.com *.instagram.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.meetanshi.com twitter.com platform.twitter.com static.addtoany.com https://maps.googleapis.com https://maps.gstatic.com maps.googleapis.com self https://*.clarity.ms https://www.clarity.ms https://*.cloudflare.com https://*.cloudflareinsights.com https://*.jotform.com https://use.fontawesome.com https://s.pinimg.com https://kit.fontawesome.com https://assets.adobedtm.com https://*.adobe.com https://www.googleadservices.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.googletagmanager.com https://*.newrelic.com https://*.nr-data.net https://geostag.cardinalcommerce.com https://1eafstag.cardinalcommerce.com https://geoapi.cardinalcommerce.com https://1eafapi.cardinalcommerce.com https://songbird.cardinalcommerce.com https://includestest.ccdc02.com https://*.commerce-payment-services.com https://*.ytimg.com https://www.googleapis.com https://www.vimeo.com https://*.vimeocdn.com https://*.youtube.com https://amcglobal.sc.omtrdc.net https://*.magento-ds.com https://*.typekit.net https://*.google.com https://*.klaviyo.com https://*.meetanshi.com https://*.facebook.com https://*.twitter.com https://*.braintreegateway.com https://payments.braintree-api.com/ https://*.paypal.com https://*.paypalobjects.com https://songbirdstag.cardinalcommerce.com https://*.googleapis.com https://*.addthis.com https://*.moatads.com https://*.addthisedge.com https://*.pinterest.com https://*.instagram.com https://*.jquery.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.fontawesome.com *.googleapis.com https://static.klaviyo.com maxcdn.bootstrapcdn.com https://use.fontawesome.com https://cdnjs.cloudflare.com https://*.klaviyo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cloudflare.com *.googleapis.com *.addthis.com *.graph.instagram.com *.google-analytics.com https://*.bcwsupplies.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.meetanshi.com stats.addtoany.com https://maps.googleapis.com maps.googleapis.com https://*.pinterest.com https://*.clarity.ms https://*.google.com https://*.klaviyo.com https://*.googleapis.com https://*.braintree-api.com https://*.braintreegateway.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
require-sri-for script; report-uri https://www.captrust.com/wp-json/captrust/v1/sri-report 1
default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; 1
connect-src 'self' https://dev.visualwebsiteoptimizer.com https://global.oktacdn.com https://px.ads.linkedin.com https://static.hsappstatic.net https://api.hubapi.com https://i.clarity.ms https://surveystats.hotjar.io https://pagead2.googlesyndication.com https://bat.bing.com https://previewtac.oktapreview.com https://tac.okta.com https://www.facebook.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.google.com https://analytics.google.com https://bam.nr-data.net wss://ws.hotjar.com https://content.hotjar.io https://api.global.chalet.8x8.com https://hubspot-forms-static-embed.s3.amazonaws.com https://forms.hsforms.com https://youtube.com https://www.google-analytics.com https://www.clarity.ms https://events.hotjar.io https://www.youtube.com https://region1.google-analytics.com https://api.hsforms.com https://theamericancollege--tacfulluat.sandbox.my.site.com https://www.googletagmanager.com; font-src 'self' https://consentcdn.cookiebot.com https://www.googletagmanager.com https://youtube.com https://www.youtube.com; frame-src 'self' https://consentcdn.cookiebot.com https://www.googletagmanager.com https://youtube.com https://theamericancollege--tacfulluat.sandbox.my.site.com; object-src 'self' blob:; script-src 'self' 'report-sample' 'unsafe-inline' blob: https://www.googletagmanager.com https://dev.visualwebsiteoptimizer.com https://code.jquery.com https://consent.cookiebot.com https://static.hotjar.com https://js.hs-scripts.com https://snap.licdn.com https://bat.bing.com https://connect.facebook.net https://www.google-analytics.com https://js.hs-analytics.net https://js.hsadspixel.net https://js.hs-banner.com https://www.clarity.ms https://script.hotjar.com https://scripts.clarity.ms https://previewtac.oktapreview.com https://tac.okta.com https://consentcdn.cookiebot.com https://googleads.g.doubleclick.net https://js-agent.newrelic.com https://bam.nr-data.net https://js.hsforms.net https://theamericancollege--tacfulluat.sandbox.my.site.com cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com mdbootstrap.com; style-src 'self' 'report-sample' 'unsafe-inline' blob: data: cdnjs.cloudflare.com fonts.googleapis.com https://unpkg.com mdbootstrap.com use.fontawesome.com; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://theamericancollege--tacfulluat.sandbox.my.site.com 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com fonts.googleapis.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com www.facebook.com *.facebook.com *.facebook.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com www.xtento.com ws.sharethis.com c.sharethis.mgr.consensu.org www.facebook.com t.sharethis.com *.weltpixel.com https://api.midtrans.com https://api.sandbox.midtrans.com *.facebook.com *.facebook.net www.paypal.com www.sandbox.paypal.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * landofcoder.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com www.xtento.com cdn.xtento.com https://api.midtrans.com https://api.sandbox.midtrans.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.google.co.in www.crocs.co.id crocs.co.id magefan.com cm.magefan.com *.disqus.com *.facebook.com *.facebook.net https://maps.googleapis.com https://maps.gstatic.com www.paypal.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com *.cdninstagram.com *.fbcdn.net maps.googleapis.com *.amazonaws.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com www.xtento.com cdn.xtento.com connect.facebook.net googletagmanager.com ws.sharethis.com maps.googleapis.com foursixty.com jscdn.appier.net click.accesstra.de goofleads.g.doubleclick.net t.sharethis.com https://api.midtrans.com https://api.sandbox.midtrans.com https://cdnjs.cloudflare.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.zdassets.com *.unbxdapi.com static.zdassets.com tag.lexer.io analytics.tiktok.com crocsid.api.useinsider.com *.useinsider.com *.disqus.com *.facebook.com *.facebook.net https://maps.googleapis.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com ajax.googleapis.com landofcoder.com https://www.googletagmanager.com tagmanager.google.com *.googletagmanager.com *.googleadservices.com *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com *.instagram.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com display.ugc.bazaarvoice.com cdn.curator.io ws.sharethis.com https://cdnjs.cloudflare.com https://api.midtrans.com https://api.sandbox.midtrans.com https://static.klaviyo.com *.fontawesome.com assets.braintreegateway.com tagmanager.google.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com anylist.c.appier.net l.sharethis.com https://api.midtrans.com https://api.sandbox.midtrans.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.googleapis.com *.zendesk.com *.unbxdapi.com *.unbxd.io *.zdassets.com mpc-prod-1-1053047382554.us-central1.run.app *.run.app maps.googleapis.com crocsid.zendesk.com analytics.tiktok.com *.facebook.com *.facebook.net https://maps.googleapis.com www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com landofcoder.com https://www.google-analytics.com *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.typeform.com *.instagram.com *.googleusercontent.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self';  default-src 'self';  connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://www.googleadservices.com https://beyondwickedmapping.org https://*.google-analytics.com https://*.fra.meilisearch.io https://*.sanity.io https://*.snapchat.com https://*.googlesyndication.com https://consentcdn.cookiebot.com https://eu01.rec.mouseflow.com https://ad.doubleclick.net https://www.facebook.com https://vercel.live wss://ws-us3.pusher.com https://clerk.cappelendamm.no https://featuregates.org https://featureassets.org https://assetsconfigcdn.org https://prodregistryv2.org https://cloudflare-dns.com https://beyondwickedmapping.org https://clerk.www.flammeforlag.no/ https://clerk.www.norskeserier.no https://clerk.flammeforlag.no/ https://clerk.fontini.no/ https://clerk.norskeserier.no https://browser-intake-datadoghq.eu;  font-src 'self' https://*.typekit.net https://cdn.mouseflow.com https://vercel.live https://assets.vercel.com;  frame-src 'self' https://assets-eur.mkt https://e.issuu.com https://www.googletagmanager.com https://www.google.com https://consentcdn.cookiebot.com https://tr.snapchat.com https://15316350.fls.doubleclick.net https://www.facebook.com https://vercel.live https://challenges.cloudflare.com https://open.spotify.com https://www.youtube.com;  img-src 'self' blob: data: https://cdn.sanity.io https://media.crystallize.com https://sr.bokbasen.io https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://google.com https://tr.snapchat.com https://www.facebook.com https://vercel.live https://vercel.com https://imgsct.cookiebot.com https://ade.googlesyndication.com;  media-src 'self' https://sr.bokbasen.io;  object-src 'none';  script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://vercel.live https://*.cookiebot.com https://cdn.mouseflow.com https://connect.facebook.net https://sc-static.net https://static.readpeak.com https://*.snapchat.com https://www.youtube.com https://clerk.cappelendamm.no https://clerk.flammeforlag.no https://clerk.www.flammeforlag.no https://clerk.fontini.no https://clerk.norskeserier.no https://clerk.www.norskeserier.no;  style-src 'self' 'unsafe-inline' https://vercel.live https://*.typekit.net https://cdn.jsdelivr.net/gh/paulirish/lite-youtube-embed@master/src/lite-yt-embed.css https://checkout.dibspayment.eu;  worker-src 'self' blob:;  upgrade-insecure-requests; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://crawlbase.com https://diffuser-cdn.app-us1.com https://trackcmp.net https://prism.app-us1.com https://wp-ui.app-us1.com https://www.redditstatic.com https://a.quora.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://snap.licdn.com https://www.clarity.ms https://scripts.clarity.ms https://app.helpkey.co https://browser.sentry-cdn.com https://bat.bing.net https://bat.bing.com https://cdn.paddle.com https://assets.churnfree.com https://www.gstatic.com https://www.google.com https://accounts.google.com https://apis.google.com https://static.cloudflareinsights.com https://googleads.g.doubleclick.net https://public.profitwell.com; style-src 'self' 'unsafe-inline' https://cdn.paddle.com https://accounts.google.com https://fonts.googleapis.com; img-src 'self' data: https:; media-src 'self' data:; font-src 'self' data: https://fonts.gstatic.com; object-src 'none'; connect-src 'self' https://crawlbase.com https://api.crawlbase.com https://app.helpkey.co https://o384316.ingest.sentry.io https://www.google-analytics.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://*.clarity.ms https://bat.bing.net https://bat.bing.com https://identitytoolkit.googleapis.com https://securetoken.googleapis.com https://content-firebaseappcheck.googleapis.com https://accounts.google.com https://checkout.paddle.com https://assets.churnfree.com https://churnfree.com https://analytics.google.com https://region1.analytics.google.com https://www.google.com https://ad.doubleclick.net https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://px.ads.linkedin.com https://q.quora.com; worker-src 'self' blob:; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; frame-src 'self' https://www.googletagmanager.com https://buy.paddle.com https://www.google.com https://accounts.google.com https://td.doubleclick.net https://crawlbase-web.firebaseapp.com; report-uri /csp-report; report-to csp-endpoint 1
base-uri 'self'; default-src 'self' *.fein.com *.fein.de *.mosaiq.com *.fein13.mosaiq.com www.youtube-nocookie.com www.youtube.com region1.analytics.google.com stats.g.doubleclick.net; font-src 'self' *.fein.com *.fein.de *.mosaiq.com *.fein13.mosaiq.com *.gstatic.com data:; img-src 'self' *.fein.com *.fein.de *.mosaiq.com *.fein13.mosaiq.com matomo.feinus.com analytics.tiktok.com i.ytimg.com yt3.ggpht.com www.youtube-nocookie.com maps.googleapis.com www.google.com www.google.de www.googletagmanager.com www.googleadservices.com px.ads.linkedin.com px4.ads.linkedin.com www.facebook.com connect.facebook.net lh3.googleusercontent.com www.gstatic.com fonts.gstatic.com maps.gstatic.com stats.g.doubleclick.net googleads.g.doubleclick.net shoplogos.commerce-connector.de azdyn365storage.blob.core.windows.net data: blob:; script-src 'self' *.fein.com *.fein.de *.mosaiq.com *.fein13.mosaiq.com matomo.feinus.com analytics.tiktok.com www.youtube-nocookie.com maps.googleapis.com www.google.com www.googletagmanager.com www.googleadservices.com www.google-analytics.com snap.licdn.com px.ads.linkedin.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com connect.facebook.net www.youtube.com diffuser-cdn.app-us1.com prism.app-us1.com googleads.g.doubleclick.net userlike-cdn-umm.b-cdn.net 'unsafe-inline' 'unsafe-eval' blob: 'report-sample'; worker-src 'self' blob: 'report-sample'; connect-src 'self' *.fein.com *.fein.de *.mosaiq.com *.fein13.mosaiq.com matomo.feinus.com analytics.tiktok.com analytics-ipv6.tiktokw.us api.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com www.googlesyndication.com www.googletagmanager.com stats.g.doubleclick.net maps.googleapis.com www.googleadservices.com www.google.com www.google.de www.gstatic.com fonts.gstatic.com www.youtube-nocookie.com px.ads.linkedin.com region1.analytics.google.com region1.google-analytics.com pagead2.googlesyndication.com analytics.google.com prism.app-us1.com googleads.g.doubleclick.net diffuser-cdn.app-us1.com userlike-cdn-umm.b-cdn.net fein.microsoftcrmportals.com jnn-pa.googleapis.com; object-src 'none'; style-src 'self' *.fein.com *.fein.de *.mosaiq.com *.fein13.mosaiq.com www.youtube-nocookie.com www.googletagmanager.com maps.googleapis.com fonts.googleapis.com www.google.com www.google.de 'unsafe-inline' 'report-sample'; frame-src 'self' *.fein.com *.fein.de *.mosaiq.com *.fein13.mosaiq.com www.youtube-nocookie.com www.youtube.com www.google.com www.googletagmanager.com fein.microsoftcrmportals.com blob: data:; frame-ancestors 'self' *.fein.com *.fein.de *.mosaiq.com *.fein13.mosaiq.com; media-src 'self' data:; form-action 'self'; manifest-src 'self'; report-uri https://fein.com/@http-reporting?csp=report&requestTime=1789263367569848&requestHash=0dc04a8b46580594f133fc2c51de7b60ca8cf26e 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.u-srv.net https://connect.facebook.net https://static.zdassets.com https://js.zdassets.com https://bam.nr-data.net https://js-agent.newrelic.com https://gtm.uppababy.com https://cdn.cookielaw.org https://analytics.tiktok.com https://applepay.cdn-apple.com https://cdn.attn.tv https://ui.powerreviews.com https://googleads.g.doubleclick.net https://maps.googleapis.com https://maps.gstatic.com https://ekr.zdassets.com https://t.contentsquare.net https://vnuvb.uppababy.com blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://static.zdassets.com https://ui.powerreviews.com https://p.typekit.net; img-src 'self' data: https://uppababy.com https://cdn.uppababy.com https://prod.uppababy.com https://back.prod.uppababy.com https://back.uppababy.com https://www.google-analytics.com https://analytics.google.com https://www.facebook.com https://static.zdassets.com https://cdn.u-srv.net https://bam.nr-data.net https://cdn.cookielaw.org https://gtm.uppababy.com https://analytics.tiktok.com https://cdn.attn.tv https://ui.powerreviews.com https://googleads.g.doubleclick.net https://maps.googleapis.com https://maps.gstatic.com https://ekr.zdassets.com https://t.contentsquare.net https://c.az.contentsquare.net https://www.google.com; font-src 'self' https://fonts.gstatic.com https://p.typekit.net https://ui.powerreviews.com https://use.typekit.net; connect-src 'self' https://back.uppababy.com https://back.prod.uppababy.com https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://connect.facebook.net https://bam.nr-data.net https://js-agent.newrelic.com https://static.zdassets.com https://k-us1.az.contentsquare.net https://t.contentsquare.net https://c.az.contentsquare.net https://cdn.cookielaw.org https://events.attentivemobile.com https://vnuvb.uppababy.com https://uppababy-us.attn.tv https://uppababy1730824702.zendesk.com https://uppababy.zendesk.com https://ekr.zdassets.com https://analytics.tiktok.com https://cdn.attn.tv https://gtm.uppababy.com https://maps.googleapis.com https://maps.gstatic.com https://www.google.com https://ui.powerreviews.com wss://widget-mediator.zopim.com; frame-src https://www.youtube.com https://static.zdassets.com https://gtm.uppababy.com https://connect.facebook.net; media-src 'self' https://static.zdassets.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; 1
connect-src *.google-analytics.com www.google-analytics.com *.analytics.google.com *.practicalaction.org practicalaction.org *.cloudflare.com *.doubleclick.net *.hotjar.com *.hotjar.io wss://ws.hotjar.com *.cookiepro.com *.onetrust.com *.sharethis.com  *.google.com  *.ads.linkedin.com  *.linkedin.com *.bing.com *.soundcloud.com *.muchloved.com *.googlesyndication.com *.sharepoint.com www.google.co.uk *.bing.net www.facebook.com *.googletagmanager.com pixel-config.reddit.com pixels.spotify.com analytics.tiktok.com analytics-ipv6.tiktokw.us; default-src 'self' 'unsafe-inline' www.googletagmanager.com; font-src 'self' data: *.practicalaction.org practicalaction.org *.gstatic.com *.bootstrapcdn.com *.fontawesome.com *.hotjar.com; frame-src 'self' data: www.google.com platform.twitter.com www.googletagmanager.com player.vimeo.com vimeo.com youtube.com www.youtube.com www.youtube-nocookie.com *.twitter.com *.cloudflare.com  *.fls.doubleclick.net *.doubleclick.net *.soundcloud.com *.muchloved.com *.sharepoint.com *.infogram.com; img-src 'self' data: www.google-analytics.com www.gstatic.com www.google.co.uk www.googletagmanager.com *.gravatar.com  *.vimeocdn.com  *.ytimg.com  *.twitter.com *.youtube.com *.practicalaction.org practicalaction.org  ad.doubleclick.net  *.nextdoor.com  *.cookiepro.com  bat.bing.com  *.ads.linkedin.com  *.linkedin.com  t.co *.facebook.com  *.sharethis.com platform-cdn.sharethis.com *.soundcloud.com *.googlesyndication.com *.sharepoint.com *.bing.net  *.infogram.com *.reddit.com; media-src 'self' blob: data: *.soundcloud.com *.youtube.com *.youtube-nocookie.com *.muchloved.com *.sharepoint.com; script-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' connect.facebook.net *.muchloved.com cdn.jsdelivr.net *.sharepoint.com *.infogram.com *.redditstatic.com pixel.byspotify.com analytics.tiktok.com capi-automation.s3.us-east-2.amazonaws.com; script-src-elem 'self' 'unsafe-inline' player.vimeo.com vimeo.com apis.google.com www.youtube.com www.youtube-nocookie.com platform.twitter.com googletagmanager.com www.googletagmanager.com www.google.com google.com www.gstatic.com gstatic.com www.google-analytics.com connect.facebook.net *.cloudflare.com *.cookiepro.com code.jquery.com *.sharethis.com  static.ads-twitter.com  static.hotjar.com  bat.bing.com  snap.licdn.com  unpkg.com  ads.nextdoor.com  *.hotjar.com *.muchloved.com *.jsdelivr.net *.visitdatajs.com *.sharepoint.com *.infogram.com googleads.g.doubleclick.net  bat.bing-int.com *.redditstatic.com pixel.byspotify.com analytics.tiktok.com capi-automation.s3.us-east-2.amazonaws.com; style-src 'self' 'unsafe-inline' blob:; style-src-elem 'self' 'unsafe-inline' *.cloudflare.com fonts.googleapis.com *.bootstrapcdn.com *.jquery.com *.fontawesome.com; worker-src 'self' blob:; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com *.fontawesome.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://*.uc.r.appspot.com https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://*.rdstation.com.br https://*.cloudfront.net https://*.amazonaws.com https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com  https://googletagmanager.com https://googleapis.com https://g.doubleclick.net https://uc.r.appspot.com https://facebook.com https://facebook.com.br https://facebook.net https://rdstation.com.br https://cloudfront.net https://amazonaws.com https://consent.cookiefirst.com/ *.yourviews.com.br *.yviews.com.br *.cloudflare.com *.uploadcare.com *.ucarecdn.com https://uploadcare.com/ https://ucarecdn.com/ *.getblue.io https://*.i-goal.com.br https://*.reclameaqui.com.br https://*.ebit.com.br https://newimgebit-a.akamaihd.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.clearsale.com.br https://commerce.adobedc.net https://commerce.adobedtm.com https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://*.uc.r.appspot.com https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://*.rdstation.com.br https://*.cloudfront.net https://*.amazonaws.com https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com  https://googletagmanager.com https://googleapis.com https://g.doubleclick.net https://uc.r.appspot.com https://facebook.com https://facebook.com.br https://facebook.net https://rdstation.com.br https://cloudfront.net https://amazonaws.com 'unsafe-inline' https://consent.cookiefirst.com/ *.yourviews.com.br *.yviews.com.br *.cloudflare.com *.uploadcare.com *.ucarecdn.com https://uploadcare.com/ https://ucarecdn.com/ *.getblue.io https://*.i-goal.com.br https://*.reclameaqui.com.br https://*.ebit.com.br https://newimgebit-a.akamaihd.net 'self' 'unsafe-inline'; frame-ancestors *.clearsale.com.br https://commerce.adobedc.net https://commerce.adobedtm.com https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://*.uc.r.appspot.com https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://*.rdstation.com.br https://*.cloudfront.net https://*.amazonaws.com https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com  https://googletagmanager.com https://googleapis.com https://g.doubleclick.net https://uc.r.appspot.com https://facebook.com https://facebook.com.br https://facebook.net https://*.business.facebook.com https://rdstation.com.br https://cloudfront.net https://amazonaws.com 'self' https://consent.cookiefirst.com/ *.yourviews.com.br *.yviews.com.br *.cloudflare.com *.uploadcare.com *.ucarecdn.com https://uploadcare.com/ https://ucarecdn.com/ *.getblue.io https://*.i-goal.com.br https://*.reclameaqui.com.br https://*.ebit.com.br https://newimgebit-a.akamaihd.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.clearsale.com.br https://commerce.adobedc.net https://commerce.adobedtm.com https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://td.doubleclick.net https://*.uc.r.appspot.com https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://*.rdstation.com.br https://*.cloudfront.net https://*.amazonaws.com https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com  https://googletagmanager.com https://googleapis.com https://g.doubleclick.net https://uc.r.appspot.com https://facebook.com https://facebook.com.br https://facebook.net https://rdstation.com.br https://cloudfront.net https://amazonaws.com https://consent.cookiefirst.com/ *.yourviews.com.br *.yviews.com.br *.cloudflare.com *.uploadcare.com *.ucarecdn.com https://uploadcare.com/ https://ucarecdn.com/ *.getblue.io https://*.i-goal.com.br https://*.reclameaqui.com.br https://*.ebit.com.br https://newimgebit-a.akamaihd.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com *.trackedlink.net www.facebook.com connect.facebook.net graph.facebook.com https://*.business.facebook.com *.clearsale.com.br https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://*.uc.r.appspot.com https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://stats.g.doubleclick.net https://staticfiles.yviews.com.br https://service.yourviews.com.br https://yv-misc.s3.amazonaws.com https://api.pagar.me https://cdn.mundipagg.com https://img.youtube.com https://*.rdstation.com.br https://*.cloudfront.net https://*.amazonaws.com https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com  https://googletagmanager.com https://googleapis.com https://g.doubleclick.net https://uc.r.appspot.com https://facebook.com https://facebook.com.br https://facebook.net https://rdstation.com.br https://cloudfront.net https://amazonaws.com https://consent.cookiefirst.com/ *.yourviews.com.br *.yviews.com.br *.cloudflare.com *.uploadcare.com *.ucarecdn.com https://uploadcare.com/ https://ucarecdn.com/ *.getblue.io https://*.i-goal.com.br https://*.reclameaqui.com.br https://*.ebit.com.br https://newimgebit-a.akamaihd.net https://www.ebitempresa.com.br/ https://*.posclick.dinamize.com https://*.clarity.ms https://*.bing.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com *.gstatic.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.clearsale.com.br https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://*.uc.r.appspot.com https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com  https://googletagmanager.com https://googleapis.com https://www.googleoptimize.com https://g.doubleclick.net https://uc.r.appspot.com https://facebook.com https://facebook.com.br https://facebook.net https://rdstation.com.br https://cloudfront.net https://amazonaws.com https://cdn.awsli.com.br https://*.optimonk.com https://h.online-metrix.net https://commerce.adobedtm.com https://js-agent.newrelic.com/ https://consent.cookiefirst.com/ *.hotjar.com *.hotjar.io *.yourviews.com.br *.yviews.com.br *.cloudflare.com *.uploadcare.com *.ucarecdn.com https://uploadcare.com/ https://ucarecdn.com/ *.getblue.io https://*.i-goal.com.br https://*.amazonaws.com https://*.reclameaqui.com.br https://*.ebit.com.br https://newimgebit-a.akamaihd.net https://*.clarity.ms 'self' https://*.siteblindado.com https://*.posclick.dinamize.com https://d3eq1zq78ux3cv.cloudfront.net https://cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.fontawesome.com *.clearsale.com.br https://commerce.adobedc.net https://commerce.adobedtm.com https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://*.uc.r.appspot.com https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://*.rdstation.com.br https://*.cloudfront.net https://*.amazonaws.com https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com  https://googletagmanager.com https://googleapis.com https://g.doubleclick.net https://uc.r.appspot.com https://facebook.com https://facebook.com.br https://facebook.net https://rdstation.com.br https://cloudfront.net https://amazonaws.com 'self' 'unsafe-inline' https://consent.cookiefirst.com/ *.yourviews.com.br *.yviews.com.br *.cloudflare.com *.uploadcare.com *.ucarecdn.com https://uploadcare.com/ https://ucarecdn.com/ *.getblue.io https://*.i-goal.com.br https://*.reclameaqui.com.br https://*.ebit.com.br https://newimgebit-a.akamaihd.net 'self' 'unsafe-inline'; object-src *.clearsale.com.br https://commerce.adobedc.net https://commerce.adobedtm.com https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://*.uc.r.appspot.com https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://*.rdstation.com.br https://*.cloudfront.net https://*.amazonaws.com https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com  https://googletagmanager.com https://googleapis.com https://g.doubleclick.net https://uc.r.appspot.com https://facebook.com https://facebook.com.br https://facebook.net https://rdstation.com.br https://cloudfront.net https://amazonaws.com https://consent.cookiefirst.com/ *.yourviews.com.br *.yviews.com.br *.cloudflare.com *.uploadcare.com *.ucarecdn.com https://uploadcare.com/ https://ucarecdn.com/ *.getblue.io https://*.i-goal.com.br https://*.reclameaqui.com.br https://*.ebit.com.br https://newimgebit-a.akamaihd.net 'self' 'unsafe-inline'; media-src *.adobe.com *.clearsale.com.br https://commerce.adobedc.net https://commerce.adobedtm.com https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://*.uc.r.appspot.com https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://*.rdstation.com.br https://*.cloudfront.net https://*.amazonaws.com https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com  https://googletagmanager.com https://googleapis.com https://g.doubleclick.net https://uc.r.appspot.com https://facebook.com https://facebook.com.br https://facebook.net https://rdstation.com.br https://cloudfront.net https://amazonaws.com https://consent.cookiefirst.com/ *.yourviews.com.br *.yviews.com.br *.cloudflare.com *.uploadcare.com *.ucarecdn.com https://uploadcare.com/ https://ucarecdn.com/ *.getblue.io https://*.i-goal.com.br https://*.reclameaqui.com.br https://*.ebit.com.br https://newimgebit-a.akamaihd.net https://*.posclick.dinamize.com 'self' 'unsafe-inline'; manifest-src https://commerce.adobedc.net https://commerce.adobedtm.com https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://*.uc.r.appspot.com https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://*.rdstation.com.br https://*.cloudfront.net https://*.amazonaws.com https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com  https://googletagmanager.com https://googleapis.com https://g.doubleclick.net https://uc.r.appspot.com https://facebook.com https://facebook.com.br https://facebook.net https://rdstation.com.br https://cloudfront.net https://amazonaws.com https://consent.cookiefirst.com/ *.yourviews.com.br *.yviews.com.br *.cloudflare.com *.uploadcare.com *.ucarecdn.com https://uploadcare.com/ https://ucarecdn.com/ *.getblue.io https://*.i-goal.com.br https://*.reclameaqui.com.br https://*.ebit.com.br https://newimgebit-a.akamaihd.net 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com sts.itau.com.br api.itau.com.br www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.clearsale.com.br https://commerce.adobedc.net https://commerce.adobedtm.com https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://*.uc.r.appspot.com https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://*.rdstation.com.br https://*.cloudfront.net https://*.amazonaws.com https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com  https://googletagmanager.com https://googleapis.com https://g.doubleclick.net https://uc.r.appspot.com https://facebook.com https://facebook.com.br https://facebook.net https://rdstation.com.br https://cloudfront.net https://amazonaws.com https://consent.cookiefirst.com/ *.hotjar.com *.hotjar.io ws://ws.hotjar.com *.yourviews.com.br *.yviews.com.br *.cloudflare.com *.uploadcare.com *.ucarecdn.com https://uploadcare.com/ https://ucarecdn.com/ *.getblue.io https://*.i-goal.com.br https://*.reclameaqui.com.br https://*.ebit.com.br https://newimgebit-a.akamaihd.net https://*.optimonk.com https://*.clarity.ms https://*.siteblindado.com https://*.posclick.dinamize.com https://receiver.posclick.dinamize.com *.mailbiz.one https://d3eq1zq78ux3cv.cloudfront.net https://cdn.jsdelivr.net 'self' 'unsafe-inline'; child-src *.clearsale.com.br https://commerce.adobedc.net https://commerce.adobedtm.com https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://td.doubleclick.net https://*.uc.r.appspot.com https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://*.rdstation.com.br https://*.cloudfront.net https://*.amazonaws.com https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com  https://googletagmanager.com https://googleapis.com https://g.doubleclick.net https://uc.r.appspot.com https://facebook.com https://facebook.com.br https://facebook.net https://rdstation.com.br https://cloudfront.net https://amazonaws.com https://consent.cookiefirst.com/ *.yourviews.com.br *.yviews.com.br *.cloudflare.com *.uploadcare.com *.ucarecdn.com https://uploadcare.com/ https://ucarecdn.com/ *.getblue.io https://*.i-goal.com.br https://*.reclameaqui.com.br https://*.ebit.com.br https://newimgebit-a.akamaihd.net http: https: blob: 'self' 'unsafe-inline'; default-src https://commerce.adobedc.net https://commerce.adobedtm.com https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://*.uc.r.appspot.com https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://*.rdstation.com.br https://*.cloudfront.net https://*.amazonaws.com https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com https://googletagmanager.com https://googleapis.com https://g.doubleclick.net https://td.doubleclick.net https://uc.r.appspot.com https://facebook.com https://facebook.com.br https://facebook.net https://rdstation.com.br https://cloudfront.net https://amazonaws.com 'self' 'unsafe-inline' https://consent.cookiefirst.com/ *.yourviews.com.br *.yviews.com.br *.cloudflare.com *.uploadcare.com *.ucarecdn.com https://uploadcare.com/ https://ucarecdn.com/ *.getblue.io https://*.i-goal.com.br https://*.reclameaqui.com.br https://*.ebit.com.br https://newimgebit-a.akamaihd.net https://*.dinamize.com *.mailbiz.one 'self' 'unsafe-inline' 'unsafe-eval'; base-uri https://commerce.adobedc.net https://commerce.adobedtm.com https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://td.doubleclick.net https://*.uc.r.appspot.com https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://*.rdstation.com.br https://*.cloudfront.net https://*.amazonaws.com https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com  https://googletagmanager.com https://googleapis.com https://g.doubleclick.net https://uc.r.appspot.com https://facebook.com https://facebook.com.br https://facebook.net https://rdstation.com.br https://cloudfront.net https://amazonaws.com https://consent.cookiefirst.com/ *.yourviews.com.br *.yviews.com.br *.cloudflare.com *.uploadcare.com *.ucarecdn.com https://uploadcare.com/ https://ucarecdn.com/ *.getblue.io https://*.i-goal.com.br https://*.reclameaqui.com.br https://*.ebit.com.br https://newimgebit-a.akamaihd.net 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.youtube.com https://js.adsrvr.org https://*.clarity.ms https://*.cvent.com https://js.navattic.com https://*.navattic.com https://www.googleadservices.com https://*.storage.googleapis.com https://*.vimeo.com https://vimeo.com https://app.pendo.io https://cdn.pendo.io https://*.pendo.io https://cookie-cdn.cookiepro.com https://*.cookiepro.com https://cdn.cookielaw.org https://ajax.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.google.com https://analytics.google.com https://tagassistant.google.com https://widget.surveymonkey.com https://go.octus.com https://go.reorg-research.com https://*.pardot.com https://*.doubleclick.net https://cdn.us.heap-api.com https://cdn.jsdelivr.net https://rs.fullstory.com https://edge.fullstory.com https://px.ads.linkedin.com https://snap.licdn.com https://stats.g.doubleclick.net https://dev.visualwebsiteoptimizer.com; style-src 'self' 'unsafe-inline' https://*.storage.googleapis.com https://cdn.jsdelivr.net; img-src 'self' data: https://*.octus.com https://secure.gravatar.com https://s.ml-attr.com https://cookie-cdn.cookiepro.com https://app.pendo.io https://www.googletagmanager.com https://dev.visualwebsiteoptimizer.com https://www.google.at https://www.google.be https://www.google.ca https://www.google.dk https://www.google.fr https://www.google.de https://www.google.ie https://www.google.it https://www.google.nl https://www.google.no https://www.google.es https://www.google.se https://www.google.ch https://www.google.co.uk https://www.google.com.ph https://www.google.com https://www.google.co.il https://www.google.com.pk https://px.ads.linkedin.com https://*.clarity.ms https://pagead2.googlesyndication.com https://*.storage.googleapis.com https://s.w.org; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://insight.adsrvr.org https://*.clarity.ms https://*.cvent.com https://*.navattic.com https://*.algolia.net https://*.algolia.io https://*.algolianet.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://*.doubleclick.net https://app.pendo.io https://*.pendo.io https://geolocation.onetrust.com https://*.cookiepro.com https://cdn.cookielaw.org https://go.octus.com https://c.us.heap-api.com https://www.googletagmanager.com https://tagassistant.google.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.google.com https://analytics.google.com https://rs.fullstory.com https://edge.fullstory.com https://px.ads.linkedin.com https://snap.licdn.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://dev.visualwebsiteoptimizer.com https://www.google.at https://www.google.be https://www.google.ca https://www.google.dk https://www.google.fr https://www.google.de https://www.google.ie https://www.google.it https://www.google.nl https://www.google.no https://www.google.es https://www.google.se https://www.google.ch https://www.google.co.uk https://www.google.com.ph https://www.google.co.il https://www.google.com.pk; frame-src 'self' https://open.spotify.com https://www.youtube.com https://www.youtube-nocookie.com https://insight.adsrvr.org https://match.adsrvr.org https://*.cvent.com https://*.navattic.com https://app.vwo.com https://vimeo.com https://player.vimeo.com https://www.googletagmanager.com https://tagassistant.google.com https://www.surveymonkey.com https://td.doubleclick.net https://go.octus.com https://www.podbean.com https://*.podbean.com https://res.cloudinary.com https://*.cloudinary.com; worker-src 'self' blob:; report-uri https://octus.com/wp-json/csp/v2/report/; report-to csp-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-SAvrn1-dOmCRQXAun9IoMw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: https://fonts.gstatic.com *.bootstrapcdn.com *.jsdelivr.net *.bunny.net *.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com https://*.dpdconnect.nl js.mollie.com *.trengo.eu *.trustpilot.com *.hotjar.com *.googletagmanager.com *.cookiebot.eu *.pinterest.com *.facebook.com *.facebook.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com https://www.mollie.com *.getqonfi.com agryghsjho.cloudimg.io https://redchamps.com www.sleiderink.nl staging.sleiderink.nl sleiderinkupd.hypernode.io *.cloudflare.com *.cloudimage.io *.cloudimg.io *.linkedin.com *.adsymptotic.com *.google.com *.google.nl *.trengo.eu *.bing.com *.feedbucket.app sleiderink.stimmt.dev *.usercentrics.eu *.facebook.com *.facebook.net *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://*.dpdconnect.nl https://browser.sentry-cdn.com js.mollie.com *.getqonfi.com *.cloudflare.com *.twitter.com *.fontawesome.com *.pingdom.net *.trustpilot.com *.hotjar.com *.licdn.com *.googletagmanager.com *.chimpstatic.com *.adobetm.com polyfill.io *.doubleclick.net *.cookiebot.eu *.bing.com *.clarity.ms *.clarity.ms/collect *.pinimg.com *.pinterest.com *.trengo.eu *.feedbucket.app *.jsdelivr.net *.facebook.net *.leadinfo.net tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com *.fontawesome.com *.bunny.net *.feedbucket.app *.jsdelivr.net tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.trengo.eu 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://*.ingest.sentry.io *.getqonfi.com *.cloudflare.com *.pingdom.net *.hotjar.com *.doubleclick.net *.usercentrics.eu *.pinterest.com *.bing.com *.trengo.eu *.clarity.ms *.clarity.ms/collect *.cookiebot.eu *.feedbucket.app *.facebook.com *.facebook.net *.leadinfo.net *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://sleiderink.dev/; report-to report-endpoint; 1
default-src https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.newworld.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://sentry.amazongames.com https://dqzvgunkova5o.cloudfront.net; script-src 'nonce-bf78d3afa72342ff9d101da59dc756ba'  https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.newworld.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://sentry.amazongames.com https://dqzvgunkova5o.cloudfront.net; style-src 'self' 'nonce-bf78d3afa72342ff9d101da59dc756ba'  https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.newworld.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://sentry.amazongames.com https://dqzvgunkova5o.cloudfront.net; img-src 'self' data:  https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.newworld.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://sentry.amazongames.com https://dqzvgunkova5o.cloudfront.net https://*.twimg.com https://player.twitch.tv/ https://*.ytimg.com; media-src 'self' data:  https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.newworld.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://sentry.amazongames.com https://dqzvgunkova5o.cloudfront.net https://*.twimg.com https://player.twitch.tv/ https://www.youtube.com https://youtube.com https://*.googlevideo.com; frame-src https://www.youtube.com https://youtube.com https://*.googlevideo.com https://*.twimg.com https://player.twitch.tv/  https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.newworld.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://sentry.amazongames.com https://dqzvgunkova5o.cloudfront.net; report-uri https://www.amazon.com/1/batch/2/OE/mid=ATVPDKIKX0DER:sid=145-8924364-9337837:rid=71203C56BB4F4B6FB7DF:sn=www.newworld.com 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.ing.com https://www.google.com https://www.gstatic.com https://tags.tiqcdn.com https://api.homebank.ro https://api.www.homebank.ro; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://cdn.ing.com https://analytics.homebank.ro https://dealwise-static.homebank.ro https://dw-static.homebank.ro https://i.ytimg.com https://yt3.ggpht.com https://ing.ro https://www.ing.ro; font-src 'self' data: https://fonts.gstatic.com https://cdn.ing.com; connect-src 'self' https://api.www.homebank.ro https://api.homebank.ro https://cdn.ing.com https://*.googlevideo.com https://jnn-pa.googleapis.com https://analytics.homebank.ro https://ingbankromania.sc.omtrdc.net; media-src blob: https://*.googlevideo.com; child-src 'self'; frame-src 'self' https:; frame-ancestors 'self' https://securepay.ing.ro; form-action 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; report-uri /csp-report/ 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: ws: trysen.kupibilet.ru top-fwz1.mail.ru personalization-web-stable.mindbox.ru web-static.mindbox.ru https://privacy-cs.mail.ru api.mindbox.ru google.nl yastatic.net apis.google.com mc.yandex.ru *.tildacdn.com *.google.com pay.google.com  www.google.com https://google.com *.gstatic.com www.gstatic.com *.analytics.google.com analytics.google.com adservice.google.com td.doubleclick.net cdnjs.cloudflare.com static.aviasales.com avsplow.com *.avsplow.com vsplow.com tp.media *.travelpayouts.com travelpayouts.com vc.hotjar.io *.kupi.com uploads.intercomcdn.com capture.trackjs.com www.facebook.com connect.facebook.net appleid.cdn-apple.com mc.yandex.com translate.google.com script.hotjar.com sdk.inappstory.com *.hotjar.com vk.com widget.intercom.io js.intercomcdn.com api-iam.intercom.io stats.g.doubleclick.net googleads.g.doubleclick.net www.googleadservices.com accounts.google.com fonts.googleapis.com *.google-analytics.com *.googleoptimize.com *.googletagmanager.com nexus-websocket-a.intercom.io *.clarity.ms www.kupi.com  websdk.appsflyer.com banner.appsflyer.com ; base-uri 'self'; object-src 'none'; font-src 'self' cdn.appsflyer.com *.tildacdn.com https://fonts.gstatic.com www.travelpayouts.com fonts.intercomcdn.com data:; img-src 'self' data: *.kupi.com www.kupi.com www.gstatic.com landings-api-v2-img.kupibilet.ru landings-api-v2.kupibilet.ru top-fwz1.mail.ru www.google.ru mc.yandex.ru mc.yandex.com www.google.nl www.google.com facebook.com www.facebook.com *.travelpayouts.com downloads.intercomcdn.com static.intercomassets.com www.google-analytics.com www.googletagmanager.com vk.com login.vk.com usage.trackjs.com *.tile.openstreetmap.org js.intercomcdn.com; manifest-src 'self'; media-src 'self' js.intercomcdn.com; frame-src * 1
font-src *.fontawesome.com *.fonts.googleapis.com *.gstatic.com data: *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.cdninstagram.com *.smarthint.co challenges.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.twitter.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.google.com *.addthis.com *.sharethis.com *.pinterest.com *.twitter.com *.cdninstagram.com *.smarthint.co *.hotjar.io *.hotjar.com *.sunset.systems challenges.cloudflare.com mymetric.com.br jcdecor-server.ue.r.appspot.com 'self' https://bid.g.doubleclick.net https://www.googletagmanager.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.pagaleve.io *.pagaleve.com.br *.weltpixel.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cloudflare.com *.klarna.com *.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.sharethis.com *.pinterest.com *.cdninstagram.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.lightemporium.com *.usercentrics.eu *.google.com *.mercadolibre.com *.mercadolivre.com *.facebook.com *.googletagmanager.com *.arrowhitech.net *.mercadopago.com *.mercadopago.com.br *.yourviews.com.br *.yviews.com.br *.jcdecor.com.br *.google.com.br *.googleusercontent.com *.amazonaws.com *.smarthint.co *.doubleclick.net *.conectiva.io https://conectiva.io *.jivosite.com *.clarity.ms *.bing.com *.imgur.com *.widde.io challenges.cloudflare.com bzr.openai.com *.mercadolibre.com.br https://mercadopago.com.br *.mlstatic.com *.pagaleve.com.br *.pagseguro.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.googleapis.com *.addthis.com *.sharethis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.instagram.com *.cloudflare.com *.twitter.com *.google-analytics.com *.googleadservices.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.vimeo.com *.paypal.com *.paypalobjects.com *.cdninstagram.com *.facebook.net *.google.com *.yourviews.com.br *.yviews.com.br *.hotjar.io *.hotjar.com *.google.com.br *.smarthint.co *.jivosite.com *.jquery.com *.cartstack.com.br *.conectiva.io https://conectiva.io *.doubleclick.net *.clarity.ms *.widde.io *.zdassets.com *.zopim.com challenges.cloudflare.com *.crazyegg.com *.cloudflareinsights.com *.cloudfront.net cdn.jsdelivr.net bzrcdn.openai.com *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.openpix.com.br *.openpix.dev *.sentry.io *.ingest.sentry.io https://plugin.openpix.dev/v1/openpix-dev.js https://api.openpix.dev https://graphql.openpix.dev/openpix/graphql https://graphql.openpix.dev/shopper/graphql https://plugin.openpix.com.br/v1/openpix.js https://api.openpix.com.br/openpix/graphql https://api.openpix.com.br/shopper/graphql *.pagaleve.com.br *.pagseguro.com.br https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.cdninstagram.com *.yourviews.com.br *.yviews.com.br *.smarthint.co *.googletagmanager.com *.jivosite.com *.jquery.com challenges.cloudflare.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.jivosite.com *.widde.io challenges.cloudflare.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.edrone.me www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cloudflare.com *.paypal.com *.googleapis.com *.addthis.com *.sharethis.com *.cardinalcommerce.com *.graph.instagram.com *.google-analytics.com *.twitter.com *.twimg.com *.cdninstagram.com *.facebook.net *.mercadolibre.com *.yourviews.com.br *.doubleclick.net *.hotjar.io wss://ws14.hotjar.com/* *.hotjar.com *.facebook.com *.openpix.com.br *.performa.ai *.conectiva.io *.zendesk.com *.zdassets.com *.zopim.com wss://widget-mediator.zopim.com https://conectiva.io *.jivosite.com wss://vi-ya-4.jivosite.com *.google.com *.cartstack.com.br *.crazyegg.com *.clarity.ms *.smarthint.co *.googlesyndication.com https://x.clarity.ms/collect *.widde.io jcdecor-server.ue.r.appspot.com challenges.cloudflare.com mymetric.com.br api.ip2location.io https://api.edrone.me bzr.openai.com bzrcdn.openai.com mpc2-prod-29-is5qnl632q-uc.a.run.app https://get.geojs.io *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri *.jcdecor.com.br/; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net cdn.jsdelivr.net cdn.almapay.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com upstream.heidipay.com sbx-upstream.heidipay.io *.klarnacdn.net *.fontawesome.com https://applepay.cdn-apple.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com *.vieffetrade.com *.livechatinc.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.getalma.eu *.almapay.com/ *.stripe.com/ *.checkout.com/ *.adyen.com/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.payplug.com *.dalenys.com https://applepay.cdn-apple.com *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com storage.googleapis.com *.klarna.com *.klarnaevt.com *.klarnacdn.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://secure-magenta.dalenys.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.vieffetrade.com *.livechatinc.com *.doofinder.com *.google.it cdn.files-text.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com https://rum.hlx.page cdn.jsdelivr.net *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com www.apptrian.com pinterest.com www.pinterest.com s.pinimg.com upstream.heidipay.com sbx-upstream.heidipay.io *.klarna.com *.klarnacdn.net *.klarnaservices.com https://cdn.jsdelivr.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://secure-magenta.dalenys.com https://applepay.cdn-apple.com api-qa.payplug.com cdn-qa.payplug.com api.payplug.com cdn.payplug.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com *.vieffetrade.com 'unsafe-inline' data: widget.trustpilot.com cdn.iubenda.com cs.iubenda.com *.livechatinc.com *.payplug.com *.hotjar.com *.doofinder.com ct.pinterest.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com cdn.jsdelivr.net *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.klarnacdn.net *.fontawesome.com unsafe-inline assets.braintreegateway.com https://secure-magenta.dalenys.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.stripe.network *.stripecdn.com *.amazon.com *.vieffetrade.com *.livechatinc.com *.doofinder.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.magento-datasolutions.com *.magento-ds.com *.getalma.eu *.almapay.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com upstream.heidipay.com sbx-upstream.heidipay.io *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.stripe.com klarna.com *.link.com *.amazon.com *.vieffetrade.com idb.iubenda.com widget.trustpilot.com *.livechatinc.com *.doofinder.com s.pinimg.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; object-src 'none'; base-uri 'self'; frame-ancestors 'self' https://*.showmetech.com.br 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://statistik.hohenschwangau.de https://*.statistik.hohenschwangau.de; style-src-attr 'unsafe-inline'; img-src 'self' data: blob:; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com; object-src 'none'; frame-ancestors 'self'; form-action 'self'; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://statistik.hohenschwangau.de https://*.statistik.hohenschwangau.de *.statistik.hohenschwangau.de; script-src-attr 'unsafe-inline'; connect-src 'self' https://statistik.hohenschwangau.de https://*.statistik.hohenschwangau.de *.statistik.hohenschwangau.de; worker-src 'self' blob: 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://i.plug.it https://ssl-i.plug.it https://wips.plug.it https://i5.plug.it https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://www.google.com https://www.google.it https://www.gstatic.com https://ajax.googleapis.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://cdn.iubenda.com https://cs.iubenda.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://players.brightcove.net https://cdn-4.convertexperiments.com https://tags.crwdcntrl.net https://secure-it.imrworldwide.com https://cdn-gl.imnworldwide.com https://a-ssl.ligatus.com https://connect.facebook.net https://staticxx.facebook.com https://evnt.iol.it https://static.pgol.it https://sb.scorecardresearch.com https://player.vimeo.com https://www.youtube.com https://s.ytimg.com https://cdn.ampproject.org; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src * data: blob:; connect-src *; worker-src 'self' blob:; frame-src 'self' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://sso.italiaonline.it https://ssc.pgcasa.it https://cdn-gl.imrworldwide.com https://cmp.pgcasa.it https://cdn.iubenda.com https://cs.iubenda.com https://player.vimeo.com https://www.youtube.com https://www.youtube-nocookie.com; font-src 'self' data: https://fonts.gstatic.com 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.vertexsmb.com www.googletagmanager.com www.sageexchange.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com https://ebizcharge3ds-new1-dev1-guebbzfmbwdggkcp.westus3-01.azurewebsites.net https://cas.static.client.cardinaltrusted.com https://cas.client.cardinaltrusted.com https://www.youtube.com https://www.google.com/maps https://www.google.com/ https://insight.adsrvr.org/ https://analytics.google.com https://vimeo.com https://static.addtoany.com https://cdn.livechatinc.com https://api.livechatinc.com https://includestest.ccdc02.com/cardinalcruise/ https://centinelapi.cardinalcommerce.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com https://songbird.cardinalcommerce.com https://songbirdstag.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://ebizcharge3ds-new1-dev1-guebbzfmbwdggkcp.westus3-01.azurewebsites.net https://*.cardinalcommerce.com https://cas.static.client.cardinaltrusted.com https://cas.client.cardinaltrusted.com https://*.centinelapi.cardinalcommerce.com https://insight.adsrvr.org/ https://analytics.google.com https://vimeo.com https://static.addtoany.com https://cdn.livechatinc.com https://api.livechatinc.com https://includestest.ccdc02.com/cardinalcruise/ *.vertexsmb.com seal.godaddy.com static.hotjar.com www.sageexchange.com *.formstack.com www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src data: *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com *.certcapture.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com seal-boston.bbb.org *.googleapis.com seal.godaddy.com stats.g.doubleclick.net bat.bing.com google.com *.facebook.com cdn.ywxi.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https://vimeo.com/ www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.certcapture.com chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://assets.adobedtm.com https://*.adobe.com https://cdn1.ebizcharge.net https://songbird.cardinalcommerce.com https://songbirdstag.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://ebizcharge3ds-new1-dev1-guebbzfmbwdggkcp.westus3-01.azurewebsites.net https://cdnjs.cloudflare.com https://insight.adsrvr.org/ https://dpm.demdex.net https://amcglobal.sc.omtrdc.net https://geostag.cardinalcommerce.com https://geo.cardinalcommerce.com https://centinelapistag.cardinalcommerce.com https://centinelapi.cardinalcommerce.com/ https://analytics.google.com/ https://static.addtoany.com https://cdn.livechatinc.com https://api.livechatinc.com https://includestest.ccdc02.com/cardinalcruise/ *.vertexsmb.com seal.godaddy.com static.hotjar.com www.sageexchange.com *.formstack.com stats.g.doubleclick.net bat.bing.com *.ywxi.net *.amazonaws.com *.gstatic.com www.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com https://cas.static.client.cardinaltrusted.com https://cas.client.cardinaltrusted.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com downloads.mailchimp.com *.googleapis.com seal.godaddy.com stats.g.doubleclick.net bat.bing.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net https://vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.certcapture.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com 3dsapi.ebizcharge.net kg668dbov0.execute-api.us-east-1.amazonaws.com ebizcharge3ds-staging1.azurewebsites.net https://includestest.ccdc02.com https://ebizcharge3ds-new1-dev1-guebbzfmbwdggkcp.westus3-01.azurewebsites.net *.ebizcharge.net https://songbird.cardinalcommerce.com https://cas.static.client.cardinaltrusted.com https://cas.client.cardinaltrusted.com https://songbirdstag.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://cdnjs.cloudflare.com https://insight.adsrvr.org/ https://dpm.demdex.net https://amcglobal.sc.omtrdc.net https://geostag.cardinalcommerce.com https://geo.cardinalcommerce.com https://centinelapistag.cardinalcommerce.com https://analytics.google.com https://static.addtoany.com https://cdn.livechatinc.com https://api.livechatinc.com https://includestest.ccdc02.com/cardinalcruise/ *.vertexsmb.com seal.godaddy.com static.hotjar.com *.googleapis.com *.formstack.com stats.g.doubleclick.net *.signifyd.com www.sageexchange.com *.ywxi.net bat.bing.com eventcollector.mcf-prod.a.intuit.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com maps.googleapis.com places.googleapis.com https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'sha256-Du+OJKJSbdUgz5nrHeWWINvez6XKDDU/tyj/5c2uvwo=' 'sha256-hAnE79KGcx1h084cBVTYz54RPk0XBmokftjGOP8HK8M=' 'sha256-WYQ6wL1Nq49Yz3aaJRoK8WESkEC59fPmMOTwRRdA5fw=' 'unsafe-hashes' 'sha256-NXgJIJJYQbjLZDdAmJyEXQ0ldk+Rf0iQY7WdZ1mQrZ4=' https://cdn.consentmanager.net https://static.cleverpush.com https://t.leben-und-erziehen.de https://www.googletagmanager.com https://syndication.target-video.com https://*.googlesyndication.com https://*.doubleclick.net https://*.googletagservices.com https://www.instagram.com https://www.tiktok.com https://player.glomex.com 'sha256-Kytkw/gNtUU4nAAChiwVLLzTQGcUX6ybqmtFNcPWiGA=' 'sha256-WZRJfWvsnNCPcxzZwvyhovnZGqhZaC+8gPGPRbx6wTk=' 'sha256-iDbGyANn/fPgzWrF2pRJ+hvlpFcxXPboYLJDmhSAtdQ='; img-src 'self' data: https:; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; font-src 'self'; frame-src https:; worker-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/v1/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.google-analytics.com https://*.cdnjs.cloudflare.com https://*.cloudflareinsights.com https://*.facebook.net https://*.crisp.chat https://*.clarity.ms https://*.mczbf.com https://*.adalyser.com https://*.doubleclick.net https://*.googleadservices.com https://*.klarna.com https://*.gstatic.com https://*.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.crisp.chat https://*.clarity.ms https://*.klarnacdn.net https://netdna.bootstrapcdn.com; img-src 'self' data: blob: https://*.googletagmanager.com https://*.google-analytics.com https://*.facebook.com https://*.crisp.chat https://*.clarity.ms https://*.doubleclick.net https://*.adalyser.com https://*.mczbf.com https://*.google.com https://*.google.co.uk https://*.blackpoolpleasurebeach.com https://*.gstatic.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.stats.g.doubleclick.net https://*.clarity.ms https://*.facebook.com https://*.klarna.com https://*.adalyser.com https://*.mczbf.com https://*.google.com https://*.crisp.chat wss://*.crisp.chat https://*.doubleclick.net https://*.klarnaevt.com; frame-src 'self' https://*.klarna.com https://pay.google.com https://*.doubleclick.net; font-src 'self' data: https://fonts.gstatic.com https://*.crisp.chat https://*.klarnacdn.net https://netdna.bootstrapcdn.com; worker-src 'self' blob: https://*.blackpoolpleasurebeach.com; upgrade-insecure-requests; 1
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; img-src 'self' data: https:; media-src 'self' https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https:; 1
default-src 'self' syndication.twitter.com; script-src js.suedtirolerland.it 'unsafe-inline' 'unsafe-eval' player.peer.tv stats.peer.biz platform.twitter.com apis.google.com; connect-src 'self' stats.peer.biz; img-src 'self' data: images2.suedtirolerland.it css.suedtirolerland.it  www.hotel-guide.it player.peer.tv stats.peer.biz carto.peer.biz www.gravatar.com syndication.twitter.com api.trustyou.com; style-src 'self' 'unsafe-inline' css.suedtirolerland.it js.suedtirolerland.it; font-src css.suedtirolerland.it; frame-src 'self' player.peer.tv www.facebook.com platform.twitter.com apis.google.com accounts.google.com www.youtube.com; child-src 'self' player.peer.tv www.facebook.com platform.twitter.com apis.google.com accounts.google.com www.youtube.com; report-uri https://csp-report.peer.biz/reportOnly/index 1
default-src 'self';   base-uri 'self';   object-src 'none';   script-src     'self' 'unsafe-inline' 'unsafe-eval' 'report-sample'     https://www.googletagmanager.com     https://cdn.rudderlabs.com     https://static.cloudflareinsights.com     https://carrierenterprise.my.site.com     https://storage.googleapis.com     https://maps.googleapis.com     https://js.authorize.net     https://static.ecorebates.com     https://www.wufoo.com;   style-src     'self' 'unsafe-inline' 'report-sample'     https://fonts.googleapis.com     https://carrierenterprise.my.site.com;   img-src     'self' data: blob:     https://resource.carrierenterprise.com     https://www.googletagmanager.com     https://api-news.carrierenterprise.com     https://maps.googleapis.com     https://maps.gstatic.com     https://i.vimeocdn.com     https://www.google.ca     https://ca-manufacturer-documents.s3.us-east-1.amazonaws.com;   font-src     'self' data:     https://fonts.gstatic.com     https://*.fontawesome.com     https://www.slant.co     https://cdn-uicons.flaticon.com;   media-src     'self'     https://resource.carrierenterprise.com;   connect-src     'self'     https://api-news.carrierenterprise.com     https://api.rudderstack.com     https://*.dataplane.rudderstack.com     https://browser-intake-datadoghq.com     https://www.googletagmanager.com     https://www.google-analytics.com     https://analytics.google.com     https://region1.analytics.google.com     https://region1.google-analytics.com     https://www.google.com     https://www.google.ca     https://stats.g.doubleclick.net     https://*.ecorebates.com     https://carrierenterprise.my.site.com     https://carrierenterprise.my.salesforce-scrt.com     https://id.hvacproplus.com     https://js.authorize.net     https://api2.authorize.net     https://maps.googleapis.com     https://maps.gstatic.com     https://places.googleapis.com     https://resource.carrierenterprise.com     https://carrierenterprise.com     https://carrierenterprise.ca;   worker-src 'self' blob:;   manifest-src 'self';   frame-src     'self'     https://carrierenterprise.my.site.com     https://player.vimeo.com     https://www.youtube.com     https://www.getfeedback.com     https://e.issuu.com     https://tfaforms.com     https://stxce.wufoo.com;   frame-ancestors     'self'     *.carrierenterprise.com     *.carrierenterprise.ca     *.punchout2go.com     *.tradecentric.com     *.buyerquest.net     docs.google.com;   form-action 'self' *.authorize.net *.punchout2go.com;   report-uri https://carrierenterprise.report-uri.com/r/t/csp/reportOnly; 1
default-src 'self' 'unsafe-inline'  https://*.google-analytics.com; img-src https://*; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ajax.googleapis.com https://connect.facebook.net https://cdn.jsdelivr.net https://uploads-ssl.webflow.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; img-src 'self' data: https: blob:; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://api.pledgebox.com https://manage.pledgebox.com https://backer.pledgebox.com; frame-src 'self' https://js.stripe.com https://www.facebook.com; object-src 'none'; base-uri 'self' 1
default-src 'self'  *.google-analytics.com *.google.com *.googleapis.com *.swiftypecdn.com *.google.com *.jquery.com *.facebook.net *.google-analytics.com *.siteimprove.net *.swiftypecdn.com; script-src 'self' 'unsafe-inline'  *.googletagmanager.com  *.jsdelivr.net *.addtoany.com *.googleapis.com *.swiftypecdn.com *.google.com *.jquery.com *.facebook.net *.google-analytics.com *.siteimprove.net *.swiftypecdn.com siteimproveanalytics.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.jsdelivr.net *.swiftypecdn.com *.gstatic.com; img-src 'self' 'unsafe-inline' *.gstatic.com *.swiftype.com *.google.com googleads.g.doubleclick.net *.siteimproveanalytics.io *.facebook.com data: *.swiftypecdn.com; font-src 'self'  *.gstatic.com data:;; report-uri /report-csp-violation 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://web.cmp.usercentrics.eu https://app.usercentrics.eu https://api.usercentrics.eu https://privacy-proxy.usercentrics.eu https://cdn.firstpromoter.com https://cdn.mxpnl.com https://play.vidyard.com https://cdnjs.cloudflare.com https://assets.calendly.com https://bzrcdn.openai.com; style-src 'self' 'unsafe-inline' https://assets.calendly.com https://cdnjs.cloudflare.com; img-src 'self' data: blob: https:; font-src 'self' data: https://cdnjs.cloudflare.com; connect-src 'self' https://*.genieai.co https://*.usercentrics.eu https://www.google-analytics.com https://analytics.google.com https://api-eu.mixpanel.com https://track-eu.customer.io https://*.vidyard.com; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://play.vidyard.com https://calendly.com https://*.calendly.com https://meetings.hubspot.com https://meetings-eu1.hubspot.com; media-src 'self' blob: https://play.vidyard.com; object-src 'none'; base-uri 'self'; form-action 'self' https://*.genieai.co; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app 'self' data: *.doubleclick.net *.facebook.com *.getfastr.com *.zmags.com *.klarnacdn.net *.klevu.com *.ksearchnet.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.doubleclick.net *.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.klarna.com www.facebook.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.rlcdn.com *.googleapis.com *.linksynergy.com *.getfastr.com *.zmags.com *.unityclient.com *.listrakbi.com magefan.com cm.magefan.com blob: www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.klevu.com *.ksearchnet.com services.postcodeanywhere.co.uk *.disqus.com https://img.youtube.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.pcapredict.com *.addressy.com *.zmags.com *.zma.gs *.googleapis.com *.unityclient.com *.listrakbi.com *.thrive.today recruitingbypaycor.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klevu.com *.ksearchnet.com api.addressy.com *.disqus.com cdn.ampproject.org connect.facebook.net https://maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.addressy.com *.zmags.com *.zma.gs *.unityclient.com *.listrakbi.com assets.braintreegateway.com *.klarnacdn.net *.klevu.com *.ksearchnet.com api.addressy.com maxcdn.bootstrapcdn.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app cdn.jsdelivr.net api.lab.amplitude.com *.facebook.com *.facebook.net *.doubleclick.net *.addressy.com *.zmags.workers.dev *.zmags.com *.zma.gs *.googleapis.com *.unityclient.com *.listrakbi.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.klevu.com *.ksearchnet.com api.addressy.com cdn.ampproject.org 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
style-src-elem assets.gocertify.me fonts.salesfire.co.uk *.googleapis.com *.bootstrapcdn.com *.envolvetech.com *.trustpilot.com *.feefo.com; script-src-elem www.litecraft.co.uk www.bhs.com script.crazyegg.com static.cloudflareinsights.com *.googletagmanager.com *.google-analytics.com *.googleapis.com *.gstatic.com *.doubleclick.net *.facebook.net s.pinimg.com ct.pinterest.com js.stripe.com chimpstatic.com cdn.salesfire.co.uk analytics.webgains.io *.webgains.io assets.gocertify.me *.envolvetech.com *.trustpilot.com www.google.com register.feefo.com api.feefo.com *.klarnaservices.com; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com *.bhs.com *.bootstrapcdn.com *.facebook.com https://fonts.gstatic.com fonts.feefo.com fonts.salesfire.co.uk data: maxcdn.bootstrapcdn.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.klarnacdn.net https://www.google.com https://www.gstatic.com https://fonts.bunny.net *.cdn-apple.com *.salesfire.co.uk data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com *.facebook.com *.sagepay.com *.stripe.com *.opayo.eu.elavon.com *.opayo.cloud *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors self www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com 8050302.fls.doubleclick.net direct.lc.chat *.ad-srv.net *.facebook.com *.doubleclick.net *.klarnaservices.com *.addthis.com *.sagepay.com *.googleapis.com *.trustpilot.com *.stripe.com *.stripe.network *.link.com *.opayo.eu.elavon.com *.opayo.cloud *.klarna.com www.google.com www.gstatic.com apis.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://plumrocket.com *.salesfire.co.uk *.weltpixel.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com adservice.google.com *.googleadservices.com *.facebook.com *.doubleclick.net *.google.com.ua *.google.co.uk *.googletagmanager.com *.googleapis.com *.klarnaservices.com *.sagepay.co.uk *.sooqr.com *.bhs.com *.feefo.com *.trustpilot.com pagead2.googlesyndication.com ade.googlesyndication.com assets.gocertify.me *.stripe.com ebizmarts-website.s3.amazonaws.com brippo.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.klarna.com *.klarnaevt.com *.klarnacdn.net magefan.com cm.magefan.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.salesfire.co.uk *.reddit.com *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com s.pinimg.com analytics.webgains.io api.feefo.com assets.gocertify.me cdn.salesfire.co.uk js.klarna.com js.stripe.com m.stripe.network maps.googleapis.com pay.google.com register.feefo.com x.klarnacdn.net *.gstatic.com *.webgains.io *.webgains.com *.googletagmanager.com *.googleapis.com *.sooqr.com *.facebook.net *.facebook.com *.doubleclick.net *.moatads.com *.addthis.com *.addthisedge.com *.klarnaservices.com *.sagepay.com w-it.m-t.io chimpstatic.com *.feefo.com widgets.feefo.com *.envolvetech.com *.trustpilot.com *.stripe.com *.link.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.opayo.eu.elavon.com *.opayo.cloud widget.freshworks.com m2epro.freshdesk.com *.klarna.com *.klarnacdn.net *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.cardinaltrusted.com *.salesfire.co.uk *.googleadservices.com *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com fonts.salesfire.co.uk maxcdn.bootstrapcdn.com *.googleapis.com *.sooqr.com *.bootstrapcdn.com *.feefo.com *.envolvetech.com *.trustpilot.com downloads.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud widget.freshworks.com m2epro.freshdesk.com *.klarnacdn.net *.google.com *.gstatic.com https://fonts.bunny.net assets.braintreegateway.com *.salesfire.co.uk *.typekit.net *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com ad.doubleclick.net analytics.google.com collect.feefo.com hit.salesfire.co.uk live.smartmetrics.co.uk merchant-ui-api.stripe.com play.google.com cognito-identity.eu-central-1.amazonaws.com firehose.eu-central-1.amazonaws.com *.appspot.com *.klarnauserservices.com *.addthis.com *.webgains.io *.webgains.com *.feefo.com *.doubleclick.net *.facebook.com *.googleapis.com *.trustpilot.com tracking.crazyegg.com script.crazyegg.com pagestates-tracking.crazyegg.com assets-tracking.crazyegg.com secure.gocertify.me *.stripe.com *.stripe.network *.link.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud widget.freshworks.com m2epro.freshdesk.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com *.salesfire.co.uk *.smartmetrics.co.uk *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src eu.klarnaevt.com r.stripe.com www.bhs.com www.google.com www.paypal.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.bhs.com/pr-csp/report/add/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://js-agent.newrelic.com https://www.googletagmanager.com https://cdn.us.heap-api.com https://px.mountain.com https://dx.mountain.com https://gs.mountain.com https://mtag-cdn.mountain.com https://connect.facebook.net https://analytics.tiktok.com https://bat.bing.com https://s.adroll.com https://d.adroll.com https://www.clarity.ms https://scripts.clarity.ms https://cdn.pagesense.io https://crmplus.zoho.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://images.chelseapiers.com https://cdn.sanity.io https://www.googletagmanager.com https://*.google-analytics.com https://www.google.com https://d.adroll.com https://ipv4.d.adroll.com https://c.clarity.ms https://bat.bing.com https://bat.bing.net https://www.facebook.com https://connect.facebook.net https://pagead2.googlesyndication.com https://heapanalytics.com; media-src 'self' https://images.chelseapiers.com https://cdn.sanity.io https://baywatch.chelseapiers.com; font-src 'self' data:; worker-src 'self' blob:; frame-src 'self' https://forms.zohopublic.com https://form.chelseapiers.com https://chelseapiers.zohobookings.com https://*.adyen.com https://www.google.com https://maps.google.com https://www.facebook.com; connect-src 'self' https://bam.nr-data.net https://*.nr-data.net https://*.ingest.sentry.io https://*.ingest.us.sentry.io https://www.googletagmanager.com https://*.google-analytics.com https://*.launchdarkly.com https://api.sanity.io https://apicdn.sanity.io https://cdn.sanity.io https://gangway-api.chelseapiers.com https://staging-gangway-api.chelseapiers.com https://chelsea-piers-data-api.chelseapiers.com https://c.us.heap-api.com https://speedboat-prod-cptech-111nf6ub.inth.app https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://pagead2.googlesyndication.com https://ad.doubleclick.net https://stats.g.doubleclick.net https://www.googleadservices.com https://www.facebook.com https://d.adroll.com https://bat.bing.com https://bat.bing.net https://pxs.mountain.com https://www.google.com https://analytics.google.com https://*.clarity.ms https://44.238.122.172 https://100.20.58.101 https://35.85.84.151 https://44.228.85.26 https://34.215.155.61 https://35.160.46.251 https://52.71.121.170 https://18.210.229.244 https://44.212.189.233 https://3.212.39.155 https://52.22.50.55 https://54.156.2.105 https://o4506186200907776.ingest.us.sentry.io; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://chelseapiers.sanity.studio; object-src 'none'; report-to csp-endpoint; report-uri https://o4506186200907776.ingest.us.sentry.io/api/4509923702145024/security/?sentry_key=bbd1a798b232cb02147e5958df7ac187&sentry_environment=production 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.klevu.com *.ksearchnet.com maxcdn.bootstrapcdn.com https://media.flixcar.com https://media.flixfacts.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * services.paytrail.com paytrail.com *.paytrail.com epmt.nordea.fi *.nordea.com verkkopankki.danskebank.fi online.s-pankki.fi verkkomaksu.poppankki.fi verkkomaksu.omasp.fi auth.aktia.fi verkkomaksu.handelsbanken.fi verkkomaksu.saastopankki.fi online.alandsbanken.fi maksu.pivo.fi qa-maksu.pivo.fi v1-hub-staging.sph-test-solinor.com v1.api.paymenthighway.io *.paymenthighway.io *.mobilepay.fi 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * consentcdn.cookiebot.com service.giosg.com static.hotjar.com https://www.googletagmanager.com https://tracking.veikonkone.fi 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com *.klevu.com *.ksearchnet.com https://www.unifaunonline.se https://*.tile.openstreetmap.org/ https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com cdn2.hubspot.net resources.paytrail.com *.visualwebsiteoptimizer.com bat.bing.com imgsct.cookiebot.com where-to-buy.co strack.where-to-buy.co *.videoly.co rt.flix360.com media.flixcar.com https://www.veikonkone.fi https://www.google.fi/ https://tracking.veikonkone.fi https://cdn.giosgusercontent.com https://embed-ssl.wistia.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.klevu.com *.ksearchnet.com https://api.unifaun.com js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com services.paytrail.com resources.paytrail.com *.visualwebsiteoptimizer.com api.custobar.com consentcdn.cookiebot.com consent.cookiebot.com bat.bing.com service.giosg.com *.hotjar.com app.kuvio.io *.videoly.co where-to-buy.co payment-widget.avarda.com payment-widget.stage.avarda.com media.flixfacts.com media.flixcar.com https://js.klevu.com https://cdn.jsdelivr.net https://prod.flixgvid.flix360.io https://globalcdn.interactiondesigner.giosg.com https://js.klevu.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.klevu.com *.ksearchnet.com maxcdn.bootstrapcdn.com assets.braintreegateway.com https://statsjs.klevu.com https://js.klevu.com https://cdn.jsdelivr.net https://media.flixcar.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com *.klevu.com *.ksearchnet.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.paytrail.com tracking.veikonkone.fi service.giosg.com checkout-api.avarda.com stage.checkout-api.avarda.com *.hotjar.io media.flixcar.com bat.bing.com api.kuvio.io https://api.custobar.com https://9cfc0d92-bc44-495e-b48c-f1d005cf1d55.interactions.giosgusercontent.com https://consentcdn.cookiebot.com https://api.giosg.com https://0ab79cf7-f195-4696-8ae4-d038878b095c.interactions.giosgusercontent.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https://*.googletagmanager.com https://cmp.osano.com https://platform.twitter.com https://syndication.twitter.com https://public.flourish.studio https://flo.uri.sh https://www.instagram.com https://www.airbnb.com https://www.airbnb.es https://www.airbnb.fr https://www.airbnb.co.uk https://www.airbnb.it https://www.airbnb.pt https://www.airbnb.com.br https://da.airbnb.com https://de.airbnb.com https://zh.airbnb.com https://www.airbnb.nl https://ar.airbnb.com https://ko.airbnb.com https://ja.airbnb.com https://th.airbnb.com; style-src 'self' 'unsafe-inline' https://cmp.osano.com; img-src 'self' data: blob: https://news-assets.withairbnb.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://cmp.osano.com https://pbs.twimg.com https://abs.twimg.com https://*.cdninstagram.com https://*.fbcdn.net https://public.flourish.studio https://flo.uri.sh; font-src 'self' data:; connect-src 'self' https://news-assets.withairbnb.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://cmp.osano.com https://consent.api.osano.com https://public.flourish.studio https://flo.uri.sh https://www.instagram.com; frame-src 'self' https://*.googletagmanager.com https://www.youtube-nocookie.com https://player.vimeo.com https://public.flourish.studio https://flo.uri.sh https://platform.twitter.com https://syndication.twitter.com https://www.instagram.com https://www.airbnb.com https://www.airbnb.es https://www.airbnb.fr https://www.airbnb.co.uk https://www.airbnb.it https://www.airbnb.pt https://www.airbnb.com.br https://da.airbnb.com https://de.airbnb.com https://zh.airbnb.com https://www.airbnb.nl https://ar.airbnb.com https://ko.airbnb.com https://ja.airbnb.com https://th.airbnb.com; media-src 'self' https://news-assets.withairbnb.com; worker-src 'self' blob:; manifest-src 'self'; report-uri /api/csp-report; report-to csp-endpoint 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.thegoodlady.com.au https://use.fontawesome.com https://fonts.bunny.net https://fonts.gstatic.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://*.ewaypayments.com https://*.sandbox.ewaypayments.com *.thegoodlady.com.au c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.thegoodlady.com.au https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://*.ewaypayments.com https://*.sandbox.ewaypayments.com *.cloudflareinsights.com *.gstatic.com *.thegoodlady.com.au *.commbank.com.au *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.thegoodlady.com.au https://use.fontawesome.com https://fonts.bunny.net https://fonts.googleapis.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.thegoodlady.com.au https://get.geojs.io *.avada.io https://olegnax.com https://api.instagram.com https://graph.instagram.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.intelligenceadx.com https://d2klx87bgzngce.cloudfront.net https://a.magsrv.com https://a.pemsrv.com https://s.pemsrv.com https://criminaldissolved.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://www.googletagmanager.com https://a.pemsrv.com https://s.pemsrv.com; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; frame-src https://streamtape.com https://*.streamtape.com https://mixdrop.ag https://*.mixdrop.ag https://mixdrop.co https://*.mixdrop.co https://mixdrop.to https://*.mixdrop.to https://mixdrop.sx https://*.mixdrop.sx; media-src 'self' blob: data:; upgrade-insecure-requests 1
default-src 'self'; connect-src *; font-src data: *; frame-src *; img-src data: *; media-src *; object-src *; script-src 'self' 'unsafe-eval' 'unsafe-inline' *; style-src 'self' 'unsafe-inline'; report-uri https://csp-reports.firmseek.com/hodgsonruss; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://platform-api.sharethis.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.doubleclick.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://club.astromatrix.org https://retro.astromatrix.app https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://platform-api.sharethis.com; frame-src https://www.youtube.com https://www.youtube-nocookie.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
connect-src 'unsafe-inline' 'unsafe-eval' adsrvr.org *.adsrvr.org attentivemobile.com *.attentivemobile.com attn.tv *.attn.tv adnxs.com *.adnxs.com cdn-api-weglot.com cloudflare.com *.cloudflare.com cloudflareinsights.com *.cloudflareinsights.com contentsquare.net *.contentsquare.net doubleclick.net *.doubleclick.net f1lasvegasgp.com *.f1lasvegasgp.com facebook.com *.facebook.com facebook.net *.facebook.net fonts.googleapis.com google-analytics.com *.google-analytics.com google.ae *.google.ae google.at *.google.at google.be *.google.be google.ca *.google.ca google.cl *.google.cl google.co.id *.google.co.id google.co.il *.google.co.il google.co.in *.google.co.in google.co.jp *.google.co.jp google.co.kr *.google.co.kr google.co.ma *.google.co.ma google.co.nz *.google.co.nz google.co.uk *.google.co.uk google.co.ve *.google.co.ve google.co.za *.google.co.za google.com *.google.com google.de *.google.de google.dk *.google.dk google.es *.google.es google.fi *.google.fi google.fr *.google.fr google.gr *.google.gr google.it *.google.it google.nl *.google.nl google.pl *.google.pl google.ro *.google.ro google.rs *.google.rs google.se *.google.se google.si *.google.si googleadservices.com *.googleadservices.com googlesyndication.com *.googlesyndication.com googletagmanager.com *.googletagmanager.com gstatic.com *.gstatic.com jsdelivr.net *.jsdelivr.net hotjar.com *.hotjar.com licdn.com *.licdn.com linkedin.com *.linkedin.com perplexity.ai *.perplexity.ai privacy-mgmt.com *.privacy-mgmt.com salesforce-scrt.com *.salesforce-scrt.com site.com *.site.com sojern.com *.sojern.com tiktok.com *.tiktok.com tiktokw.us *.tiktokw.us vimeo.com *.vimeo.com weglot.com *.weglot.com zi-scripts.com *.zi-scripts.com zoominfo.com *.zoominfo.com google.pt *.google.pt; frame-src 'unsafe-inline' 'unsafe-eval' site.com *.site.com privacy-mgmt.com *.privacy-mgmt.com doubleclick.net *.doubleclick.net vimeo.com *.vimeo.com; img-src 'unsafe-inline' 'unsafe-eval' adnxs.com *.adnxs.com adsrvr.org *.adsrvr.org attentivemobile.com *.attentivemobile.com attn.tv *.attn.tv cdn-api-weglot.com cloudflare.com *.cloudflare.com cloudflareinsights.com *.cloudflareinsights.com contentsquare.net *.contentsquare.net doubleclick.net *.doubleclick.net f1lasvegasgp.com *.f1lasvegasgp.com facebook.com *.facebook.com facebook.net *.facebook.net fonts.googleapis.com google-analytics.com *.google-analytics.com google.ae *.google.ae google.at *.google.at google.be *.google.be google.ca *.google.ca google.cl *.google.cl google.co.id *.google.co.id google.co.il *.google.co.il google.co.in *.google.co.in google.co.jp *.google.co.jp google.co.kr *.google.co.kr google.co.ma *.google.co.ma google.co.nz *.google.co.nz google.co.uk *.google.co.uk google.co.ve *.google.co.ve google.co.za *.google.co.za google.com *.google.com google.de *.google.de google.dk *.google.dk google.es *.google.es google.fi *.google.fi google.fr *.google.fr google.gr *.google.gr google.it *.google.it google.nl *.google.nl google.pl *.google.pl google.pt *.google.pt google.rs *.google.rs google.ro *.google.ro google.se *.google.se google.si *.google.si googleadservices.com *.googleadservices.com googlesyndication.com *.googlesyndication.com googletagmanager.com *.googletagmanager.com gstatic.com *.gstatic.com hotjar.com *.hotjar.com jsdelivr.net *.jsdelivr.net licdn.com *.licdn.com linkedin.com *.linkedin.com perplexity.ai *.perplexity.ai privacy-mgmt.com *.privacy-mgmt.com salesforce-scrt.com *.salesforce-scrt.com site.com *.site.com sojern.com *.sojern.com tiktok.com *.tiktok.com tiktokw.us *.tiktokw.us vimeo.com *.vimeo.com weglot.com *.weglot.com zi-scripts.com *.zi-scripts.com zoominfo.com *.zoominfo.com www.google.com.au www.google.com www.google.com.mx googleads.g.doubleclick.net www.google.com.co www.google.com.ar www.google.com.qa www.google.com.tw www.google.com.py www.google.com.br www.google.com.my www.google.com.sv google.co.bw *.google.co.bw google.co.ke *.google.co.ke google.cz *.google.cz; style-src site.com *.site.com 'unsafe-inline' 'unsafe-eval' fonts.googleapis.com f1lasvegasgp.com *.f1lasvegasgp.com weglot.com *.weglot.com; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=.z.tzxNiqvQ4No.sHmylxNr025UDCASMEL12HDB1MDk-1789290066.7111175-1.0.1.1-6WBXJ_BBeNdtV_64F2V3VORpCT5P51TJ2gIBtvub5wfUxtMMYkK65BRMoYGAQ0vXUdjQfsiey1FVE3p7JvZ1LSsZeGcakz26ttZv4p0IUdNajpYsgqbUSM240IA00SDKocZ2gZKzzQufg3JGzAo7gA0Ri1n3MDyXuMfIxwcS7e5mx2kdE.GZkjKw8pMmR8ltZCWozDIdQqg3svOgYnyV_g; report-to cf-exstnxfkfguqqeuk 1
font-src cdn.jsdelivr.net https://fonts.gstatic.com cdn.almapay.com *.googleapis.com *.gstatic.com https://cdnjs.cloudflare.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://www.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.getalma.eu *.almapay.com/ *.stripe.com/ *.checkout.com/ *.adyen.com/ www.google.com *.certcapture.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com unpkg.com/@googlemaps/markerclusterer/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com https://www.youtube-nocookie.com https://i.ytimg.com https://player.vimeo.com https://fermob.media https://*.fermob.media *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https://images.unsplash.com *.googleapis.com *.gstatic.com *.certcapture.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://i.ytimg.com https://i.vimeocdn.com https://fermob.media https://*.fermob.media data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.jsdelivr.net https://maps.googleapis.com *.googleapis.com *.gstatic.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.certcapture.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ unpkg.com/@googlemaps/markerclusterer/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://cdnjs.cloudflare.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://maps.googleapis.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.jsdelivr.net https://fonts.googleapis.com fonts.googleapis.com *.certcapture.com downloads.mailchimp.com https://static.klaviyo.com https://cdnjs.cloudflare.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://fermob.media https://*.fermob.media 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.getalma.eu *.almapay.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.certcapture.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://places.googleapis.com/ https://maps.googleapis.com/ 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src unpkg.com/@googlemaps/markerclusterer/ 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://tagmanager.google.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: blob: https://big-reward-5b88d17b18.strapiapp.com; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://region1.google-analytics.com https://region1.analytics.google.com https://*.amplitude.com https://big-reward-5b88d17b18.strapiapp.com https://www.app.lorka.ai; frame-src 'self' https://www.googletagmanager.com https://www.youtube-nocookie.com https://www.youtube.com; media-src 'self' https://big-reward-5b88d17b18.strapiapp.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://big-reward-5b88d17b18.strapiapp.com; upgrade-insecure-requests; 1
default-src 'self'; script-src 'self' 'unsafe-inline' ; style-src 'self' 'unsafe-inline' ; img-src 'self' *.gaertner.de; frame-src 'self' https://www.openstreetmap.org ; font-src 'self' ; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
connect-src 'self' app.termly.io us.consent.api.termly.io www.google.com; default-src 'self'; font-src 'self' data: cdnjs.cloudflare.com fonts.googleapis.com fonts.gstatic.com; frame-src app.termly.io www.youtube.com www.google.com; img-src 'self' data: s.w.org secure.gravatar.com www.googletagmanager.com i.ytimg.com; manifest-src 'self'; object-src 'none'; script-src 'self' googletagmanager.com; script-src-elem 'nonce-46e8cb0f25' 'self' app.termly.io www.googletagmanager.com ajax.cloudflare.com www.google.com www.gstatic.com static.cloudflareinsights.com; style-src 'self' cdnjs.cloudflare.com fonts.googleapis.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' cdnjs.cloudflare.com fonts.googleapis.com static.cloudflareinsights.com; worker-src blob:; base-uri 'none'; report-uri https://w73n8sbh.uriports.com/reports 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://fonts.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com *.weltpixel.com https://www.googletagmanager.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.sharethis.com https://www.facebook.com magefan.com cm.magefan.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://bat.bing.com/ http://bat.bing.com/ www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sharethis.com *.attn.tv events.attentivemobile.com https://www.dwin1.com https://widget.usersnap.com https://s.pinimg.com https://ct.pinterest.com https://connect.facebook.net https://analytics.tiktok.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.kaptcha.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://bat.bing.com/ http://bat.bing.com/ www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com https://fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com https://places.googleapis.com *.attn.tv events.attentivemobile.com https://www.facebook.com https://ct.pinterest.com https://analytics.tiktok.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.kaptcha.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://bat.bing.com/ http://bat.bing.com/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com *.yotpo.com *.googleapis.com https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://plumrocket.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.certcapture.com www.chatbase.co www.google.com https://plumrocket.com *.yotpo.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://images.unsplash.com *.certcapture.com gophersport.com bat.bing.net sp.analytics.yahoo.com www.google.si maps.googleapis.com maps.gstatic.com *.yotpo.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com apis.google.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page https://maps.googleapis.com *.certcapture.com 'unsafe-eval' vip.gophersport.com onsite.optimonk.com cdn-asset.optimonk.com gs-cdn.optimonk.com rum.hlx.page www.clarity.ms scripts.clarity.ms bat.bing.com api.ipify.org s.yimg.com www.chatbase.co tagmanager.google.com cdn.mida.so maps.googleapis.com *.googletagmanager.com *.yotpo.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com vip.gophersport.com *.fontawesome.com *.yotpo.com *.googleapis.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://maps.googleapis.com https://player.vimeo.com *.certcapture.com vip.gophersport.com onsite.optimonk.com front.optimonk.com cdn-account.optimonk.com cdn-limit.optimonk.com jfapiprod.optimonk.com rum.hlx.page j.clarity.ms bat.bing.net s.yimg.com www.chatbase.co stats.g.doubleclick.net cdn.mida.so api.mida.so maps.googleapis.com *.yotpo.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; script-src 'self' cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.ckeditor.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com maps.google.com maps.googleapis.com; script-src-attr 'self'; style-src 'self' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src-attr 'self'; frame-ancestors 'self' 1
default-src 'self' https: https://accounts.google.com; font-src 'self' https: https://fonts.gstatic.com http://fonts.gstatic.com https://recaptcha.net; img-src 'self' https: data: blob:; object-src 'none'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' https://fonts.googleapis.com https://browser-update.org http://fonts.googleapis.com http://browser-update.org http://ajax.googleapis.com https://accounts.google.com; style-src 'self' https: 'unsafe-inline' https://fonts.googleapis.com http://fonts.googleapis.com; frame-ancestors 'self' https://admin.google.com https://www.google.com https://accounts.google.com https://ogs.google.com; frame-src 'self' https://accounts.google.com https://ogs.google.com https://datastudio.google.com https://admin.google.com https://js.stripe.com https://www.recaptcha.net https://lookerstudio.google.com/ https://www.youtube.com https://player.vimeo.com 1
object-src 'none';base-uri 'self';script-src 'nonce-trUQNLjlKcwkOSwrlAdGaw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://smartcaptcha.cloud.yandex.ru; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self' data: blob: https:; connect-src 'self' https://mc.yandex.ru https://smartcaptcha.cloud.yandex.ru https://api.polza.ai; frame-src 'none'; object-src 'none'; base-uri 'self' 1
font-src maxcdn.bootstrapcdn.com *.fontawesome.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io qr.nspk.ru api-maps.yandex.ru core-renderer-tiles.maps.yandex.net top-fwz1.mail.ru ad.mail.ru vk.com www.google.ru pandorarussia.ru *.frisbuy.ru www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.disqus.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.avada.io suggestions.dadata.ru api-maps.yandex.ru core-renderer-tiles.maps.yandex.net yastatic.net mc.yandex.ru vk.com top-fwz1.mail.ru cdn1.imshop.io api.mindbox.ru cdn.helpdeskeddy.com kellypandora.helpdeskeddy.com *.frisbuy.ru js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.gstatic.com *.disqus.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com maxcdn.bootstrapcdn.com *.fontawesome.com cdn1.imshop.io fonts.googleapis.com unsafe-inline assets.braintreegateway.com www.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://get.geojs.io *.avada.io suggestions.dadata.ru mc.yandex.ru vk.com stats.g.doubleclick.net *.mindbox.ru api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googlesyndication.com https://*.doubleclick.net https://*.adtrafficquality.google https://*.googletagmanager.com https://*.googleapis.com https://*.gstatic.com https://fundingchoicesmessages.google.com https://www.google.com https://s0.2mdn.net https://*.vntsm.com https://*.vntsm.io https://*.venatusmedia.com https://hb-vntsm-com.global.ssl.fastly.net https://*.atmtd.com https://*.adnxs.com https://*.rubiconproject.com https://*.3lift.com https://*.sharethrough.com https://*.criteo.com https://onetag-sys.com https://*.yellowblue.io https://*.4dex.io https://*.bids.ws https://*.ingage.tech https://*.bidmatic.io https://*.creativecdn.com https://*.taboola.com https://*.aniview.com https://*.liadm.com https://cadmus.script.ac https://*.clean.gg https://static.getclicky.com https://analytics.ahrefs.com https://*.hotjar.com https://*.hotjar.io https://challenges.cloudflare.com https://js.stripe.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; media-src 'self' https: blob:; frame-src 'self' https:; worker-src 'self' blob:; manifest-src 'self'; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self' data: ; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://aosmd.componentsearchengine.com https://cdn-cookieyes.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://i.ytimg.com https://componentsearchengine.com https://aosmd.componentsearchengine.com https://cdn-cookieyes.com; frame-src https://www.google.com ; font-src 'self' https://fonts.gstatic.com https://aosmd.componentsearchengine.com https://cdn-cookieyes.com; connect-src 'self' https://www.google-analytics.com https://noembed.com https://ngenah6dvg-dsn.algolia.net https://log.cookieyes.com https://cdn-cookieyes.com; upgrade-insecure-requests 1
font-src fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action www.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src https://www.google.com/recaptcha/ *.multisafepay.com https://pay.google.com js.mollie.com *.sanitairkamer.nl *.gichaa.nl *.youtube.com *.google.com *.dpdconnect.nl ct.pinterest.com www.facebook.com live.tourdash.com tourmkr.com 'self' 'unsafe-inline'; img-src data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypalobjects.com *.multisafepay.com https://www.mollie.com *.sanitairkamer.nl *.gichaa.nl maps.googleapis.com maps.gstatic.com *.google.nl *.google.com *.google.be *.google.de *.google.co.uk pagead2.googlesyndication.com stats.g.doubleclick.net i.ytimg.com img.youtube.com bat.bing.com bat.bing.net www.facebook.com connect.facebook.net cdn.flbx.io https://gzuvq.sanitairkamer.nl data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypalobjects.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.multisafepay.com https://pay.google.com js.mollie.com *.sanitairkamer.nl *.gichaa.nl stapecdn.com maps.googleapis.com connect.getflowbox.com d5yoctgpv4cpx.cloudfront.net integrations.etrusted.com bat.bing.com ct.beslist.nl pixel.biano.nl www.youtube.com analytics.tiktok.com connect.facebook.net capi-automation.s3.us-east-2.amazonaws.com ct.pinterest.com assets.pinterest.com s.pinimg.com tm.tradetracker.net ob.jollyoutdoorjogger.com obs.jollyoutdoorjogger.com https://gzuvq.sanitairkamer.nl 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.multisafepay.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src cdn.flbx.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com www.paypalobjects.com *.multisafepay.com *.sanitairkamer.nl *.gichaa.nl maps.googleapis.com www.google.com pagead2.googlesyndication.com ad.doubleclick.net p.biano.nl bat.bing.com bat.bing.net ct.beslist.nl *.getflowbox.com ct.pinterest.com p2iqhncxyh.execute-api.eu-central-1.amazonaws.com analytics.tiktok.com analytics-ipv6.tiktokw.us www.facebook.com s.pinimg.com https://gzuvq.sanitairkamer.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://monitor.bigbridgedev.nl/csp; report-to report-endpoint; 1
default-src 'self'; script-src 'self'; style-src 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://pagead2.googlesyndication.com https://fundingchoicesmessages.google.com https://ep2.adtrafficquality.google https://www.youtube.com https://cdn.jsdelivr.net https://unpkg.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://unpkg.com; img-src 'self' data: https:; manifest-src 'self' data:; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net; frame-src https://www.google.com https://www.youtube.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://ep2.adtrafficquality.google; connect-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' https://www.google.com 1
script-src 'nonce-KyBMJpViBhn9E3kCUUVKrw==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https://events.mercadolibre.com/csp/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=806714c1-8dfe-4664-8f7e-908bf9c88fba; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https://http2.mlstatic.com/ https://mlstaticquic-a.akamaihd.net/; frame-ancestors 'self' https://*.mercadolibre.cl:* https://*.mercadolibre.com:* https://*.mercadolibre.com.ve:* https://*.mercadolibre.com.ar:* https://*.mercadolivre.com.br:* https://*.mercadolibre.com.co:* https://*.mercadolibre.com.ec:* https://*.mercadolibre.com.mx:* https://*.mercadolibre.com.pe:* https://*.mercadolibre.com.uy:* https://*.mercadopago.cl:* https://*.mercadopago.com.ar:* https://*.mercadopago.com.br:* https://*.mercadopago.com.co:* https://*.mercadopago.com.mx:* https://*.mercadopago.com.pe:* https://*.mercadopago.com.uy:* https://*.mercadopago.com.ve:* https://*.mercadopago.com:* https://*.adminml.com:* https://*.mercadolibre.co.cr:* https://*.mercadolibre.com.pa:* https://*.mercadolibre.com.do:* https://*.mercadolibre.com.bo:* https://*.mercadolibre.com.py:* https://*.mercadolibre.com.gt:* https://*.mercadolibre.com.hn:* https://*.mercadolibre.com.ni:* https://*.mercadolibre.com.sv:* https://*.mercadopago.com.ec:* https://*.portalinmobiliario.com:* https://*.mercadolivre.com:* 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-ltO_NowBbbn1kbgjr2EezQ' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://*.gstatic.com *.googleapis.com *.cloudflare.com *.google-analytics.com *.twitter.com *.twimg.com *.global-e.com *.yotpo.com *.klevu.com data: *.mention-me.com *.daylesford.com *.ksearchnet.com *.fontawesome.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.adyen.com pay.google.com payments-eu.amazon.com *.amazon.de *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.adyen.com pay.google.com *.twitter.com *.bglobale.com *.hotjar.com *.hotjar.io *.duel.me *.vimeo.com *.shipperhq.com *.ometria.com *.ometria.email *.addtoany.com/ *.pinterest.com *.visualwebsiteoptimizer.com *.daylesford.com *.cookiebot.com *.luckyorange.com *.googletagmanager.com *.mention-me.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * www.xtento.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: *.adyen.com pay.google.com *.payments-amazon.com *.media-amazon.com *.paypalobjects.com https://images.unsplash.com https://*.gstatic.com *.googleapis.com *.cloudflare.com *.google.com *.google.co.uk maps.googleapis.com *.google-analytics.com *.googleadservices.com *.global-e.com *.yotpo.com yotpo-stool.s3.amazonaws.com *.doubleclick.net *.ometria.com *.postcodeanywhere.co.uk *.shipperhq.com *.klevu.com *.daylesford.com *.kaltura.com *.pinterest.com *.facebook.net *.facebook.com *.sendtric.com *.visualwebsiteoptimizer.com dev.visualwebsiteoptimizer.com cdn.pushcrew.com wingify-assets.s3.amazonaws.com chart.googleapis.com *.rakuten.com track.linksynergy.com *.cookiebot.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com magefan.com cm.magefan.com *.disqus.com *.luckyorange.com *.ksearchnet.com *.contentsquare.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://img.youtube.com https://maps.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.xtento.com cdn.xtento.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com https://maps.googleapis.com *.googleapis.com *.gstatic.com *.cloudflare.com *.google-analytics.com *.googletagmanager.com *.gtm.daylesford.com maps.googleapis.com *.twitter.com *.twimg.com *.bglobale.com *.yotpo.com js-agent.newrelic.com *.doubleclick.net *.ometria.com *.hotjar.com *.hotjar.io *.duel.me *.postcodeanywhere.co.uk *.pcapredict.com *.shipperhq.com *.zdassets.com www.bugherd.com *.klevu.com *.addtoany.com *.zendesk.com *.kaltura.com *.pinterest.com *.pinimg.com *.facebook.net *.sendtric.com *.visualwebsiteoptimizer.com dev.visualwebsiteoptimizer.com cdn.pushcrew.com *.rakuten.com track.linksynergy.com *.adobedtm.com *.googleadservices.com *.cookiebot.com *.azurewebsites.net assets-horizon-online.azurewebsites.net *.horizoncdp.com tagmanager.google.com *.disqus.com 'unsafe-eval' gtm.daylesford.com tools.luckyorange.com loader.usehero.com cdn.usehero.com *.contentsquare.net static.shopmy.us *.ksearchnet.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.mention-me.com js.mollie.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com www.xtento.com cdn.xtento.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com/ *.cloudflare.com *.google.com *.gstatic.com *.google-analytics.com *.googleapis.com 'self' data: *.twitter.com *.typekit.net *.twimg.com getfirebug.com *.yotpo.com *.postcodeanywhere.co.uk *.shipperhq.com *.klevu.com *.myfonts.net *.zendesk.com *.facebook.net *.sendtric.com *.visualwebsiteoptimizer.com dev.visualwebsiteoptimizer.com cdn.pushcrew.com s3.amazonaws.com *.rakuten.com track.linksynergy.com *.daylesford.com *.cookiebot.com tagmanager.google.com fonts.google.com tools.luckyorange.com *.ksearchnet.com *.adyen.com https://static.klaviyo.com *.fontawesome.com assets.braintreegateway.com dhv2ziothpgrr.cloudfront.net https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com/ *.zendesk.com *.kaltura.com *.daylesford.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.adyen.com payments-eu.amazon.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.cloudflare.com *.google-analytics.com *.twitter.com *.twimg.com *.yotpo.com stats.g.doubleclick.net *.hotjar.com *.hotjar.io *.postcodeanywhere.co.uk *.shipperhq.com wss://rms.shipperhq.com wss://widget-mediator.zopim.com *.zdassets.com *.ksearchnet.com *.zendesk.com *.pinterest.com *.sendtric.com *.yes track.linksynergy.com *.daylesford.com *.cookiebot.com *.googlesyndication.com *.azurewebsites.net assets-horizon-online.azurewebsites.net *.horizoncdp.com *.analytics.google.com *.googletagmanager.com *.luckyorange.com dev.visualwebsiteoptimizer.com api.usehero.com *.contentsquare.net api.addressy.com apiv3.shopmy.us *.klevu.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.mention-me.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://607bdae1-801a-4b2d-8098-f0afe2ca51fc.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tiktok.com https://connect.facebook.net/ https://ct.pinterest.com https://js-agent.newrelic.com https://*.hs-scripts.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hsadspixel.net https://*.hsforms.net https://*.hsleadflows.net https://*.hubspot.com https://*.usemessages.com https://static.getclicky.com https://www.googletagmanager.com https://in.getclicky.com https://*.pinimg.com https://bat.bing.com https://*.getsitecontrol.com https://www.youtube.com https://*.hsappstatic.net https://maps.googleapis.com https://*.hu-manity.co https://www.google.com https://*.google.com https://*.nagich.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://s.pinimg.com https://bat.bing.com https://*.getsitecontrol.com https://www.youtube.com; object-src 'none'; base-uri 'self'; connect-src 'self' https://analytics.google.com https://*.tiktok.com https://bam.nr-data.net https://*.hsforms.com https://*.pinterest.com https://*.hubspot.com https://*.hubapi.com https://stats.g.doubleclick.net https://maps.googleapis.com https://*.hu-manity.co https://www.google.com https://*.nagich.com; font-src 'self' data: https://*.alicdn.com https://fonts.gstatic.com https://www.denvercenter.org; frame-src 'self' https://www.facebook.com https://www.googletagmanager.com https://*.doubleclick.net https://ct.pinterest.com https://www.youtube.com https://www.google.com https://www.jotform.com https://*.nagich.com https://*.hubspot.com; img-src 'self' data: blob: https://*.hsforms.com https://*.tiktok.com https://track.hubspot.com https://www.facebook.com https://*.gravatar.com https://*.google.com https://bat.bing.com https://*.doubleclick.net https://*.hsappstatic.net https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.byhttps://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu; manifest-src 'self'; media-src 'self'; worker-src 'none'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com www.sulisfineart.com www.sulisfineart.com/static/* https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com td.doubleclick.net www.google.com checkout.paypal.com c.paypal.com www.paypalobjects.com https://js.stripe.com https://*.stripecdn.com https://pay.google.com https://server.fillout.com https://*.fillout.com *.trustpilot.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com flagpedia.net x.klarnacdn.net *.google.com c.paypal.com www.sulisfineart.com dashboard.edesk.com c6.paypal.com lhr.stats.paypal.com https://www.google-analytics.com https://www.googletagmanager.com https://static.cloudflareinsights.com https://*.paypal.com https://pay.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://api.getdrip.com https://tag.getdrip.com https://sleeknotecustomerscripts.sleeknote.com https://sleeknotestaticcontent.sleeknote.com widget.freshworks.com m2epro.freshdesk.com *.avada.io *.shopify.com *.gstatic.com maps.googleapis.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.app.easyship.com http://cdnjs.cloudflare.com *.newrelic.com *.sdk.loyaltylion.net *.sdk-static.loyaltylion.net *.paypal.com *.google-analytics.com *.googletagmanager.com sulisfineart.local.com www.sulisfineart.com sdk.loyaltylion.net widgets.xsellco.com sdk-static.loyaltylion.net www.google.com www.gstatic.com www.sulisfineart.com/static/* js.braintreegateway.com c.paypal.com *.posthog.com https://www.googletagmanager.com https://www.google-analytics.com https://js-agent.newrelic.com https://sdk.loyaltylion.net https://static.cloudflareinsights.com https://js.stripe.com https://*.stripecdn.com https://pay.google.com https://server.fillout.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com sdk.loyaltylion.net www.sulisfineart.com https://cdnjs.cloudflare.com sdk-static.loyaltylion.net widgets.xsellco.com www.sulisfineart.com/static/* *.trustpilot.com 'self' 'unsafe-inline'; object-src www.sulisfineart.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com widget.freshworks.com m2epro.freshdesk.com https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com app.sulisfineart.com *.app.easyship.com *.nr-data.net *.google-analytics.com *.eu.klarnaevt.com *.gstatic.com www.sulisfineart.com widgets.xsellco.com platform.loyaltylion.com www.sulisfineart.com/static/* https://cdnjs.cloudflare.com payments.braintree-api.com client-analytics.braintreegateway.com c.paypal.com *.posthog.com https://www.google-analytics.com https://sdk.loyaltylion.net https://eu.i.posthog.com https://api.stripe.com https://pay.google.com https://server.fillout.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src www.sulisfineart.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.sulisfineart.com/; report-to report-endpoint; 1
style-src-elem m2.staging.henrykrank.com.cfstack.com m2.dev.henrykrank.com.cfstack.com henrykrank.com www.henrykrank.com m2.dev.trade.henrykrank.com.cfstack.com m2.staging.trade.henrykrank.com.cfstack.com trade.henrykrank.com fonts.googleapis.com *.fontawesome.com fonts.bunny.net use.typekit.net p.typekit.net cdnjs.cloudflare.com cdn.jsdelivr.net cdn.doofinder.com cc-cdn.com static.klaviyo.com; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.fontawesome.com https://fonts.bunny.net m2.staging.henrykrank.com.cfstack.com m2.dev.henrykrank.com.cfstack.com henrykrank.com www.henrykrank.com m2.dev.trade.henrykrank.com.cfstack.com m2.staging.trade.henrykrank.com.cfstack.com trade.henrykrank.com p.typekit.net fonts.bunny.net static.klaviyo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com www.henrykrank.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com www.henrykrank.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com account.fetchify.com www.henrykrank.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io cdn.doofinder.com *.stripe.com *.stripe.network *.google.com ebizmarts-website.s3.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com m2.staging.henrykrank.com.cfstack.com m2.dev.henrykrank.com.cfstack.com henrykrank.com www.henrykrank.com m2.dev.trade.henrykrank.com.cfstack.com m2.staging.trade.henrykrank.com.cfstack.com trade.henrykrank.com d3k81ch9hvuctc.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com cdn.doofinder.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.sagepay.com *.opayo.eu.elavon.com cc-cdn.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com m2.staging.henrykrank.com.cfstack.com m2.dev.henrykrank.com.cfstack.com henrykrank.com www.henrykrank.com m2.dev.trade.henrykrank.com.cfstack.com m2.staging.trade.henrykrank.com.cfstack.com trade.henrykrank.com cdnjs.cloudflare.com cdn.jsdelivr.net eu1-config.doofinder.com trackcmp.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.doofinder.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com *.sagepay.com *.opayo.eu.elavon.com cc-cdn.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net m2.staging.henrykrank.com.cfstack.com m2.dev.henrykrank.com.cfstack.com henrykrank.com www.henrykrank.com m2.dev.trade.henrykrank.com.cfstack.com m2.staging.trade.henrykrank.com.cfstack.com trade.henrykrank.com cdnjs.cloudflare.com cdn.jsdelivr.net use.typekit.net p.typekit.net cdn.doofinder.com static.klaviyo.com static-tracking.klaviyo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.henrykrank.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.doofinder.com wss://*.doofinder.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io m2.staging.henrykrank.com.cfstack.com m2.dev.henrykrank.com.cfstack.com henrykrank.com www.henrykrank.com m2.dev.trade.henrykrank.com.cfstack.com m2.staging.trade.henrykrank.com.cfstack.com trade.henrykrank.com api-js.datadome.co cdnjs.cloudflare.com 'self' 'unsafe-inline'; child-src www.henrykrank.com http: https: blob: 'self' 'unsafe-inline'; default-src www.henrykrank.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; connect-src 'self' https://translate.googleapis.com https://koop.piwik.pro; font-src 'self' https://themes.googleusercontent.com https://koop.piwik.pro; img-src 'self' data: https://validator.swagger.io https://fonts.gstatic.com https://www.gstatic.com https://koop.piwik.pro; script-src 'self' https://translate-pa.googleapis.com https://translate.google.com https://koop.piwik.pro 'nonce-b66b906cd0bcc440c6107281488f4f3a1b129edc202674ca9c20d69f012894c9'; script-src-elem 'self' https://translate-pa.googleapis.com https://translate.google.com https://koop.piwik.pro 'nonce-b66b906cd0bcc440c6107281488f4f3a1b129edc202674ca9c20d69f012894c9'; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://koop.piwik.pro 1
object-src 'none';base-uri 'self';script-src 'nonce-uLhQCkAjRmlPYfv5QJLLRA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; connect-src 'self' https://www.google-analytics.com *.fontawesome.com; font-src 'self' http://fonts.googleapis.com https://fonts.gstatic.com *.fontawesome.com https://cdnjs.cloudflare.com http://themes.googleusercontent.com; frame-src 'self' https://www.youtube.com http://www.youtube.com https://www.google.com https://maps.google.com https://player.vimeo.com https://www.facebook.com; img-src * data:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://ajax.googleapis.com https://www.google-analytics.com https://ssl.google-analytics.com https://code.jquery.com *.fontawesome.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://polyfill.io https://unpkg.com mdbootstrap.com stackpath.bootstrapcdn.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' *.fontawesome.com https://www.google-analytics.com https://ssl.google-analytics.com http://themes.googleusercontent.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://polyfill.io https://unpkg.com mdbootstrap.com stackpath.bootstrapcdn.com; style-src 'self' fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com mdbootstrap.com stackpath.bootstrapcdn.com use.fontawesome.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' *.fontawesome.com *.mailchimp.com fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com mdbootstrap.com stackpath.bootstrapcdn.com use.fontawesome.com; frame-ancestors 'self' 1
script-src 'unsafe-inline' https://d.la1-c1cs-ph2.salesforceliveagent.com 'self' https://payments.salesforce.com/ https://stats.g.doubleclick.net https://checkoutshopper-test.adyen.com/ https://pal-test.adyen.com https://d.la1-core1.sfdc-8tgtt5.salesforceliveagent.com/chat/rest/Visitor/Settings.jsonp https://acronis.my.salesforce-scrt.com https://acronis.my.site.com https://acronis--community.my.salesforce.com https://d.la1-core1.sfdc-8tgtt5.salesforceliveagent.com/chat/rest/EmbeddedService/EmbeddedServiceConfig.jsonp https://checkoutshopper-live.adyen.com/ https://d.la3-c1-ia6.salesforceliveagent.com/chat/rest/EmbeddedService/EmbeddedServiceConfig.jsonp https://cdn.content.aws-prod1-useast1.aws.sfdc.cl/ https://d.la2-c1cs-ph2.salesforceliveagent.com https://acronis.file.force.com https://care.acronis.com https://pay.google.com https://www.gstatic.com/recaptcha/ https://uip.canary.lwc.dev https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/ https://d.la2-c1cs-ph2.salesforceliveagent.com/chat/rest/Visitor/Settings.jsonp https://d.la3-c1-ia6.salesforceliveagent.com/chat/rest/Visitor/Availability.jsonp https://td.doubleclick.net blob: https://www.googletagmanager.com/gtag/js https://www.google.com/recaptcha/ https://js.stripe.com/ https://d.la1-core1.sfdc-8tgtt5.salesforceliveagent.com/chat/rest/Visitor/Availability.jsonp https://acronis.preview.salesforce-experience.com https://www.googletagmanager.com import: https://www.google-analytics.com https://d.la13-core1.sfdc-8tgtt5.salesforceliveagent.com *.salesforce.com https://www.paypal.com/sdk/js https://d.la3-c1-ia6.salesforceliveagent.com/chat/rest/Visitor/Settings.jsonp 'report-sample' https://service.force.com/embeddedservice/ https://d.la2-c1cs-ph2.salesforceliveagent.com/chat/rest/EmbeddedService/EmbeddedServiceConfig.jsonp 'unsafe-eval'; report-to sfdc-csp-ep; report-uri https://acronis.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D300000000Zcb&networkId=0DM1T0000004FEZ&type=communities 1
default-src 'self' http: https: ws: wss: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' http: https:; style-src 'self' 'unsafe-inline' http: https:; img-src 'self' data: http: https:; connect-src 'self' http: https: ws: wss:; frame-ancestors 'self'; report-uri /csp-report; 1
default-src 'self'; base-uri 'self'; script-src 'self' 'nonce-HzOeFXaDlkgf9fXkNSPPyhlX' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://apis.google.com https://googleads.g.doubleclick.net https://bat.bing.com https://*.clarity.ms https://js.braintreegateway.com https://applepay.cdn-apple.com https://www.paypal.com https://c.paypal.com https://www.paypalobjects.com; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://flare.fullsource.com; font-src 'self' data: https://fonts.gstatic.com https://flare.fullsource.com https://applepay.cdn-apple.com; img-src 'self' data: blob: https:; connect-src 'self' https://www.googletagmanager.com https://www.google.com https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://play.google.com https://bat.bing.com https://*.clarity.ms https://c.bing.com https://checkout.fullsource.com https://flare.fullsource.com https://*.braintreegateway.com https://*.braintree-api.com https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://checkout.fullsource.com https://www.googletagmanager.com https://www.google.com https://docs.google.com https://www.youtube.com https://cdn.fullsource.com https://*.braintreegateway.com https://*.paypal.com; object-src 'self' blob: https:; media-src 'self' blob: https:; worker-src 'self' blob:; manifest-src 'self'; form-action 'self' https://checkout.fullsource.com; report-to csp; report-uri /api/csp/report 1
default-src 'none'; script-src 'unsafe-eval' 'self' 'unsafe-inline' 'unsafe-hashes' 'sha256-w/dYwr8dOxSxXkSn1TX2wSmL6acNm6A2QZk/9IX63rs=' 'sha256-Pe5Y4eCVWENJ4/Dqtek4RNDRdkI7SBJ/Mz9iTDLwjiA=' *.usercentrics.eu/ *.usercentrics.com/ https://maps.googleapis.com https://app.usercentrics.eu https://js.hsforms.net https://js.hs-banner.com https://js.hs-analytics.net https://js.usemessages.com https://js.hs-scripts.com https://apps.elfsight.com https://static.elfsight.com https://forms.hsforms.com/ https://static.businessbike.de/; script-src-elem 'self' 'unsafe-inline' https://googleads.g.doubleclick.net https://*.hubspot.com https://analytics.tiktok.com https://*.redditstatic.com secure.adnxs.com/ *.facebook.net/ *.ads-twitter.com/ *.youtube.com/ *.gstatic.com/ *.google-analytics.com/ *.google.com/ https://snap.licdn.com/ https://px.ads.linkedin.com/ *.linkedin.com/ *.clarity.ms https://a.clarity.ms/ https://i.clarity.ms/ https://j.clarity.ms/ https://c.clarity.ms/ https://bat.bing.com/ 'sha256-OwC3Bmh3vk+mJXs4ObkYFCiNpm9wzy6lYA6Dbl8B0GA=' 'sha256-u6EjqE6QO8DkyTdpvdyvJKJ15kfu6gSa89ftCW5Qjvg=' 'sha256-eQwkKSAFkpymWoMr1PHlgPg3aR9VvmOUjP2IIgMxzXg=' 'sha256-ZC4Ihfl+1sv3E25DQh090ITQKwffxiocyA9C1vaePKU=' 'sha256-MdlFkCGaZJKqdQRWbI4q7anVqVWdp+/EEWFBsACXq5g=' 'sha256-u6EjqE6QO8DkyTdpvdyvJKJ15kfu6gSa89ftCW5Qjvg=' 'sha256-+fdBjI6fMToomtYR0ycdJhGsuUaibX4JJ/4drnsZ5mg=' 'sha256-4nxBwvGtrokGNkqD2OxOt8Y07P7caJHk00sGwjNYF5I=' 'sha256-e+vQru+J5olo5XfVYmbhG6S1CgJkxHw5wR7fgr2WHvg=' 'sha256-l/HU4XTOsQHPJm2RViDCMdELfKC0E+6fI6r46fd1F18=' 'sha256-4Fgc+rmY2CWIS/Iu4eOBLSwEVHSJHQwRQA8QsAcoaMA=' 'sha256-QoPdnbMd1dyknqCfvI971xGxlajhOMS54r7tclyRsNk=' 'sha256-UMWfmReBIoR8be6oLQoUUzfsjUbjHmPU5X5Oa2xB2bw=' 'sha256-rTWylbtfP2tlUZy1UTVC+e8VaJ8myvtf3jfO6kzET6I=' 'sha256-Pe5Y4eCVWENJ4/Dqtek4RNDRdkI7SBJ/Mz9iTDLwjiA=' 'sha256-rs6KClOKD5uekeoTJFtkA1CY/JzoQHftoDxKSxUfinM=' 'sha256-ayRPOmXL8YpsmCidiv5T8WnQJZ23P9j3ODKs8L1dQag=' https://www.googletagmanager.com blob: https://forms.hsforms.com/ https://js.hsforms.net/ https://js.hs-scripts.com/ https://apps.elfsight.com/ https://app.usercentrics.eu/ https://static.businessbike.de/ https://js.hs-analytics.net/ https://js.usemessages.com/ https://js.hs-banner.com/ https://static.elfsight.com/ https://maps.googleapis.com/ https://maps.googleapis.com/maps/api/mapsjs/ 'sha256-rwMOiOeVICH7/Cjy5SkreID3OOi5HTrit357k22hUDQ=' 'sha256-LPE1FjPoSbFVAFRURZZRaYmFd2oy1AXZ0z0OVQ6bI6k='; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https://* *.google.com/ *.google.de/ *.google-analytics.com/ *.hsforms.com/ *.usercentrics.eu/ *.usercentrics.com/ *.businessbike.de/ *.bing.com/ *.linkedin.com/ *.clarity.ms/ https://c.bing.com/ https://px.ads.linkedin.com/ https://c.clarity.ms/ https://bat.bing.com/ www.googletagmanager.com https://static.businessbike.de/ https://app.usercentrics.eu https://track.hubspot.com https://images.eu.ctfassets.net https://i.ytimg.com https://maps.gstatic.com/ https://maps.googleapis.com/maps/ data:; font-src 'self' https://fonts.gstatic.com/ data:; connect-src 'self' https://*.businessbike.de https://*.google.com/ cdn.linkedin.oribi.io/ *.doubleclick.net/ *.google-analytics.com/ *.usercentrics.eu/ *.clarity.ms/ *.hsforms.com/ https://apps.elfsight.com https://service-reviews-ultimate.elfsight.com/ https://*.hubspot.com https://hubspot-forms-static-embed.s3.amazonaws.com/ https://maps.googleapis.com/ https://portal.businessbike.de/ https://api.usercentrics.eu https://pixel-config.reddit.com https://www.redditstatic.com https://bat.bing.net https://bat.bing.com https://analytics-ipv6.tiktokw.us https://analytics.tiktok.com; media-src 'self' https://videos.ctfassets.net; object-src 'none'; frame-src 'self' *.facebook.com/ *.google.com/ *.usercentrics.eu/ *.usercentrics.com/ *.hsforms.com/ https://app.hubspot.com https://www.youtube-nocookie.com https://www.youtube.com https://player.vimeo.com https://www.googletagmanager.com; worker-src 'self'; upgrade-insecure-requests; block-all-mixed-content; base-uri 'self'; manifest-src 'self'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com cash-f.squarecdn.com 'self' data: *.doubleclick.net *.facebook.com *.klevu.com *.ksearchnet.com https://fonts.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com https://plumrocket.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * https://*.google.com *.doubleclick.net *.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com https://plumrocket.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com *.multisafepay.com https://pay.google.com *.zonka.co https://accounts.google.com *.trustpilot.com *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https://images.unsplash.com 'self' data: https://*.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com www.feedoptimise.com cdn.feedoptimise.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.klevu.com *.ksearchnet.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://www.mollie.com *.multisafepay.com *.zonka.co *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://maps.googleapis.com https://player.vimeo.com https://*.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.attn.tv events.attentivemobile.com www.feedoptimise.com cdn.feedoptimise.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ cdn.jsdelivr.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com js.klevu.com *.ksearchnet.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com applepay.cdn-apple.com *.multisafepay.com https://pay.google.com *.zonka.co us-js.zonka.co *.apis.zonkafeedback.com https://accounts.google.com https://www.gstatic.com *.trustpilot.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com https://static.klaviyo.com cdn.jsdelivr.net assets.braintreegateway.com *.klevu.com *.ksearchnet.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com maxcdn.bootstrapcdn.com *.multisafepay.com *.zonka.co https://accounts.google.com https://www.gstatic.com *.trustpilot.com *.yotpo.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * https://maps.googleapis.com https://player.vimeo.com *.facebook.com *.facebook.net https://*.google.com *.attn.tv events.attentivemobile.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.klevu.com *.ksearchnet.com https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.multisafepay.com *.zonka.co us-js.zonka.co *.apis.zonkafeedback.com https://accounts.google.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
prefetch-src live.opayo.eu.elavon.com *.opayo.eu sandbox.opayo.eu.elavon.com assets.ci.opayo.cloud assets.opayo.cloud; worker-src live.opayo.eu.elavon.com *.opayo.eu sandbox.opayo.eu.elavon.com assets.ci.opayo.cloud assets.opayo.cloud; font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud https://www.gstatic.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com live.opayo.eu.elavon.com *.opayo.eu sandbox.opayo.eu.elavon.com assets.ci.opayo.cloud assets.opayo.cloud data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * live.opayo.eu.elavon.com *.opayo.eu sandbox.opayo.eu.elavon.com assets.ci.opayo.cloud assets.opayo.cloud 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.awin1.com *.zenaps.com *.fls.doubleclick.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * live.opayo.eu.elavon.com *.opayo.eu sandbox.opayo.eu.elavon.com assets.ci.opayo.cloud assets.opayo.cloud 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.awin1.com *.zenaps.com *.wepowerconnections.com *.stripe.com *.stripe.network https://*.google.com ebizmarts-website.s3.amazonaws.com brippo.s3.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.google.com.ua *.elfsightcdn.com *.feefo.com *.onetrust.com lantern.roeye.com *.sweetanalytics.com live.opayo.eu.elavon.com *.opayo.eu sandbox.opayo.eu.elavon.com assets.ci.opayo.cloud assets.opayo.cloud https://connect.wentworthpuzzles.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://*.google.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.elfsight.com euwa.puzzel.com *.feefo.com berrythompson.innocraft.cloud *.puzzel.com *.onetrust.com *.sweetanalytics.com unpkg.com live.opayo.eu.elavon.com *.opayo.eu sandbox.opayo.eu.elavon.com assets.ci.opayo.cloud assets.opayo.cloud https://connect.wentworthpuzzles.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.stripe.network *.stripecdn.com *.amazon.com https://fonts.googleapis.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://hcaptcha.com https://*.hcaptcha.com maxcdn.bootstrapcdn.com assets.braintreegateway.com live.opayo.eu.elavon.com *.opayo.eu sandbox.opayo.eu.elavon.com assets.ci.opayo.cloud assets.opayo.cloud 'self' 'unsafe-inline'; object-src live.opayo.eu.elavon.com *.opayo.eu sandbox.opayo.eu.elavon.com assets.ci.opayo.cloud assets.opayo.cloud 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.cloudflarestream.com live.opayo.eu.elavon.com *.opayo.eu sandbox.opayo.eu.elavon.com assets.ci.opayo.cloud assets.opayo.cloud 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com live.opayo.eu.elavon.com *.opayo.eu sandbox.opayo.eu.elavon.com assets.ci.opayo.cloud assets.opayo.cloud 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.wepowerconnections.com https://the.sciencebehindecommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com fonts.googleapis.com fonts.gstatic.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.addressy.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com api.puzzel.com *.feefo.com *.elfsight.com berrythompson.innocraft.cloud *.onetrust.com *.sweetanalytics.com live.opayo.eu.elavon.com *.opayo.eu sandbox.opayo.eu.elavon.com assets.ci.opayo.cloud assets.opayo.cloud https://connect.wentworthpuzzles.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com live.opayo.eu.elavon.com *.opayo.eu sandbox.opayo.eu.elavon.com assets.ci.opayo.cloud assets.opayo.cloud 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://a19bde59-13ef-45e6-afd8-1c13b7fc2c39.sansec.watch/; report-to report-endpoint; 1
font-src *.fontawesome.com *.googleapis.com *.gstatic.com https://fonts.bunny.net https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com *.google.com/ https://www.youtube.com js.mollie.com https://www.googletagmanager.com https://www.paypal.com https://vimeo.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.sendcloud.sc *.jsdelivr.net www.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com https://www.magezon.com https://www.mollie.com https://www.gstatic.com https://*.trustedshops.com https://zigarre-de.alterspruefung365.de www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com *.amazonaws.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com stats.g.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.fontawesome.com *.googleapis.com *.gstatic.com *.avada.io *.shopify.com *.google.com/ js.mollie.com https://static-eu.payments-amazon.com https://*.braintreegateway.com https://integrations.etrusted.com https://pay.google.com https://www.google.com/recaptcha https://www.googletagmanager.com https://cdn.klarna.com https://*.paypal.com https://widgets.trustedshops.com https://zigarre-de.alterspruefung365.de js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.sendcloud.sc *.jsdelivr.net https://widgets-qa.trustedshops.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://static.klaviyo.com https://*.fontawesome.com https://fonts.bunny.net https://fonts.googleapis.com https://*.klaviyo.com https://*.trustedshops.com https://zigarre-de.alterspruefung365.de unsafe-inline assets.braintreegateway.com d.ratepay.com d.payla.io dr.payla.io *.sendcloud.sc *.jsdelivr.net https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io https://payments-eu.amazon.com https://payments.amazon.de https://*.braintreegateway.com https://integrations.etrusted.com https://cdn.klarna.com https://*.klaviyo.com https://d.ratepay.com https://secure.pay1.de https://zigarre-de.alterspruefung365.de api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site region1.google-analytics.com *.analytics.google.com stats.g.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src https://googleads.g.doubleclick.net https://www.googleadservices.com 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.clarity.ms https://connect.facebook.net https://posthog.cityberry.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cart.istanbul.com https://use.typekit.net https://challenges.cloudflare.com https://static.cloudflareinsights.com https://cdn.pera.cityberry.com https://*.revolut.com; style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' data: https: blob:; font-src 'self' https://use.typekit.net https://fonts.gstatic.com https://cdnjs.cloudflare.com; connect-src https://googleads.g.doubleclick.net https://www.googleadservices.com 'self' https://www.google-analytics.com https://www.google.com https://ad.doubleclick.net https://*.analytics.google.com https://*.clarity.ms https://www.facebook.com https://connect.facebook.net https://posthog.cityberry.com https://*.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://cart.istanbul.com https://images.istanbul.com https://challenges.cloudflare.com https://chat.pera.cityberry.com https://account.istanbul.com https://api.supacon.istanbul.com https://*.revolut.com https://tiles.openfreemap.org; frame-src https://googleads.g.doubleclick.net https://www.googleadservices.com 'self' https://challenges.cloudflare.com https://www.googletagmanager.com https://td.doubleclick.net https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://maps.google.com https://www.google.com https://cdn.pera.cityberry.com https://*.revolut.com https://www.facebook.com https://web.facebook.com; media-src 'self' https://images.istanbul.com https://*.istanbul.com; worker-src 'self' blob:; report-uri https://ist-csp-report.istanbul-com-holding-s-account.workers.dev/ 1
object-src 'none';base-uri 'self';script-src 'nonce-qlzTNsYk04pb0FB3oEs8mQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src https: wss:; script-src https: wss: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; report-uri /csp-report 1
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.googletagmanager.com https://d1fxy698ilbz6u.cloudfront.net https://d3e26335nux8ic.cloudfront.net https://uptime.betterstack.com; img-src 'self' data: https://landia-logos.s3.amazonaws.com https://landia-misc.s3-us-west-2.amazonaws.com https://www.google-analytics.com https://www.facebook.com https://www.google.com https://www.google.cz https://d1fxy698ilbz6u.cloudfront.net https://d3e26335nux8ic.cloudfront.net https://cdn.jsdelivr.net https://googleads.g.doubleclick.net; default-src 'self' 'unsafe-inline'; frame-src 'self' https://td.doubleclick.net https://www.googletagmanager.com https://js.stripe.com/; font-src 'self' 'unsafe-inline' https://fonts.gstatic.com https://d1fxy698ilbz6u.cloudfront.net https://d3e26335nux8ic.cloudfront.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.amplitude.com https://googleads.g.doubleclick.net https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://widget.trustpilot.com https://d1fxy698ilbz6u.cloudfront.net https://d3e26335nux8ic.cloudfront.net https://uptime.betterstack.com https://js.stripe.com; media-src 'self' https://landia-audio-assets.s3.us-west-2.amazonaws.com; connect-src 'self' https://google.com https://www.google.com https://storage.googleapis.com https://www.google-analytics.com https://www.googleadservices.com https://region1.analytics.google.com https://pagead2.googlesyndication.com https://analytics.google.com https://stats.g.doubleclick.net https://d1fxy698ilbz6u.cloudfront.net https://d3e26335nux8ic.cloudfront.net https://region1.google-analytics.com https://region2.google-analytics.com https://region3.google-analytics.com https://www.facebook.com https://api.amplitude.com https://www.myreviews.ai https://uptime.betterstack.com https://landia-audio-assets.s3.us-west-2.amazonaws.com 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' https://www.clarity.ms https://*.clarity.ms https://hcaptcha.com https://*.hcaptcha.com https://arcaptcha.ir https://*.arcaptcha.ir https://www.goftino.com https://*.goftino.com https://t.contentsquare.net https://*.contentsquare.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.goftino.com; font-src 'self' data: https://fonts.gstatic.com https://*.goftino.com; img-src 'self' data: blob: https:; connect-src 'self' https://api.asacoine.com wss://api.asacoine.com https://assets.asacoine.com https://asacoine-statics.s3.ir-tbz-sh1.arvanstorage.ir https://*.clarity.ms https://c.bing.com https://*.sentry.io https://*.ingest.sentry.io https://hcaptcha.com https://*.hcaptcha.com https://arcaptcha.ir https://*.arcaptcha.ir https://www.goftino.com https://*.goftino.com wss://*.goftino.com https://t.contentsquare.net https://*.contentsquare.net; frame-src 'self' https://hcaptcha.com https://*.hcaptcha.com https://arcaptcha.ir https://*.arcaptcha.ir https://*.goftino.com; worker-src 'self' blob:; manifest-src 'self' 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' lojavirus.com.br *.lojavirus.com.br wake-components.fbitsstatic.net lojavirus.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br googleadservices.com yapay.com.br googlesyndication.com cloudflare.com cnt.my clearsale.com.br zdassets.com ebit.com.br traycheckout.com.br doubleclick.net ecommercemail.com.br online-metrix.net hertzen.com zendesk.com citydsp.com *.googleadservices.com *.cloudflare.com *.googlesyndication.com *.cnt.my *.ebit.com.br *.zdassets.com *.hertzen.com *.doubleclick.net *.ecommercemail.com.br *.zendesk.com *.citydsp.com *.zopim.com *.yourviews.com.br *.yviews.com.br *.lojaconfiavel.com *.lightwidget.com lojavirus.fbitsstatic.net *.fbitsstatic.net gstatic.com; frame-ancestors *.lojavirus.com.br lojavirus.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
script-src 'report-sample' 'nonce-TeRuvZdV2f9TyTyQclpgBw' 'unsafe-inline';object-src 'none';base-uri 'self';worker-src 'self';report-uri /cspreport 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-3kKaN9BiiSdPZpd5OfdrKQ' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
default-src 'self'; script-src 'self' 'unsafe-inline' *.hubspot.com *.hs-sites.com *.hsforms.net *.hsforms.com *.hscollectedforms.net js.hscta.net js.hs-scripts.com *.hubspotusercontent-na1.net *.googletagmanager.com *.google-analytics.com connect.facebook.net snap.licdn.com; style-src 'self' 'unsafe-inline' *.hubspot.com; img-src 'self' data: *.hubspot.com *.hubspotusercontent-na1.net *.google-analytics.com *.googletagmanager.com www.facebook.com px.ads.linkedin.com; font-src 'self' data: *.hubspot.com; media-src 'self' *.hubspot.com *.hubspotusercontent-na1.net; connect-src 'self' *.hubapi.com *.hubspot.com *.googletagmanager.com *.google-analytics.com; frame-src 'self' *.hubspot.com *.hs-sites.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' *.hubspot.com; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net 'self' data: https://*.sovendus.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.googletagmanager.com/ *.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://*.sovendus.com https://www.sovendus-benefits.com https://www.sovendus-campaign.com https://www.sovendus-connect.com https://www.sovendus-network.com https://app-wallee.com https://paymentshub.weareplanet.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com *.disqus.com *.cookiebot.com maps.googleapis.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.cdninstagram.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: https://*.sovendus.com www.google.com.ua https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com https://app-wallee.com https://paymentshub.weareplanet.com https://www.moevenpick-wein.com/mt www.facebook.com www.google.pl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.disqus.com tracking.moevenpick-wein.com *.cookiebot.com maps.googleapis.com newsletter.moevenpick-wein.de http://www.googletagmanager.com/ https://www.googletagmanager.com/ player.vimeo.com connect.facebook.net cdnjs.cloudflare.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com https://*.sovendus.com https://www.sovopt.com https://static.sovopt.com https://www.getback.ch https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://app-wallee.com https://paymentshub.weareplanet.com https://gmtech.mfgroup.ch https://assets.secure.checkout.visa.com https://www.moevenpick-wein.com https://www.moevenpick-wein.com/mt consent.cookiebot.com www.r8xnst.com gtm.adt313.net tally.so d5yoctgpv4cpx.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.googleapis.com *.gstatic.com https://static.getback.ch https://*.sovendus.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://app-wallee.com https://paymentshub.weareplanet.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com tracking.moevenpick-wein.com *.cookiebot.com maps.googleapis.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com https://*.sovendus.com https://www.sovendus-benefits.com https://www.sovendus-campaign.com https://www.sovendus-connect.com https://www.sovendus-network.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://app-wallee.com https://paymentshub.weareplanet.com https://assets.secure.checkout.visa.com https://www.moevenpick-wein.com/mt p2iqhncxyh.execute-api.eu-central-1.amazonaws.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-DkgMiXT_NS7nQIEF7rBJgA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-_kLjrrK7UOTOU7rwSJN4pw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' blob: https: data: mediastream: 'unsafe-eval' 'unsafe-inline'; connect-src cdn.builder.codes *.builder.io *.schneider-electric.com *.se.com glue.pes-stg.cloud.spryker.toys service.force.com *.apc.com nebula-cdn.kampyle.com ubt-eu.kampyle.com sbt-prod.kampyle.com udc-neb.kampyle.com *.ariba.com *.amazonaws.com twitter.com zinfi.net firebaselogging-pa.googleapis.com firebaseremoteconfig.googleapis.com firebaseinstallations.googleapis.com resources.digital-cloud.medallia.eu/ partnerassessment.secure.force.com se.my.salesforce.com se.my.salesforce-sites.com *.salesforceliveagent.com *.squared.com/* *.onetrust.com seadvantage.force.com:443/ seadvantage.my.site.com:443/ seadvantage.my.site.com/* *.pendo.io tag.commander1.com www.google-analytics.com *.google.com salesforce.com salesforceliveagent.com documentforce.com kampyle.com force.com cookielaw.org unpkg.com cdn.jsdelivr.net *.demandbase.com twimg.com *.twimg.com *.youtube.com *.zinfi.net *.google.ru akstat.io *.go-mpulse.net/* microsoft.com *.clipsal.com/* cdn.cookielaw.org maxcdn.bootstrapcdn.com *.dynatrace.com *.kampyle.com *.google-analytics.com *.amazoncognito.com *.doubleclick.net googlemaps.github.io *.googlemaps.github.io/* maps.googleapis.com *.googleapis.com *.zscaler.net static.lightning.force.com www.apc.com api.company-target.com js-cdn.dynatrace.com c.go-mpulse.net *.akstat.io *.applanga.com 'self' *.akstat.io/ *.d2osz8slymlqdp.cloudfront.net *.google.com.sa *.google.by su.symexbelgium.com d2osz8slymlqdp.cloudfront.net d2cbq57joo8non.cloudfront.net use.typekit.net wss://*.execute-api.us-east-1.amazonaws.com wss://*.iot.us-east-1.amazonaws.com wss://4g5de7bcl4.execute-api.us-east-1.amazonaws.com wss://545sekhka2.execute-api.us-east-1.amazonaws.com wss://a307bjgfbycsj5-ats.iot.us-east-1.amazonaws.com wss://fjwji5pjgbbzzp2xmyispmyo6u.appsync-realtime-api.us-east-1.amazonaws.com wss://ixbskdr5a5bnbhl3qtwi5nhslu.appsync-realtime-api.us-east-1.amazonaws.com wss://qjye63smz5ggbb33xs4rn6hoiq.appsync-realtime-api.us-east-1.amazonaws.com wss://tu43ymv7pc.execute-api.us-east-1.amazonaws.com wss://0jyqaecg5j.execute-api.us-east-1.amazonaws.com wss://a307bjgfbycsj5-ats.iot.us-east-1.amazonaws.com wss://xbezullc75gyffaqf3npo2pavi.appsync-realtime-api.us-east-1.amazonaws.com *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io; img-src *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io; report-uri https://semyschneiderweb.report-uri.com/r/t/csp/reportOnly; script-src 'self' blob: https: data: mediastream: 'unsafe-eval' 'unsafe-inline' 'nonce-PoBpgWx3IkBqoHL1GSohwg==' 1
default-src 'self'; script-src 'self' 'nonce-SysC7UIpwUyHwOAblqdl5g==' 'strict-dynamic' 'unsafe-eval'; connect-src 'self' https://privatevpn.com https://www.mczbf.com https://www.emjcd.com https://www.sjwoe.com https://cj.dotomi.com https://www.cj.com https://affiliate.privatevpn.com https://widget.intercom.io https://events.intercom.com https://api-iam.eu.intercom.io https://api.eu.intercom.io https://uploads.intercomcdn.eu https://uploads.intercomusercontent.com https://js.intercomcdn.com https://downloads.intercomcdn.eu wss://nexus-europe-websocket.intercom.io wss://primary-realtime-eu.intercom-messenger.com https://api.stripe.com https://r.stripe.com https://hooks.stripe.com https://js.stripe.com https://connect-js.stripe.com https://pay.google.com https://wallet.googleapis.com https://app.termly.io https://us.consent.api.termly.io https://eu.consent.api.termly.io https://www.google-analytics.com https://region1.google-analytics.com https://pagead2.googlesyndication.com https://stape.privatevpn.com https://stape.privatesurfforme.net https://q.quora.com https://alb.reddit.com https://googleads.g.doubleclick.net https://www.google.com https://pixel-config.reddit.com; frame-src 'self' https://app.termly.io https://us.consent.api.termly.io https://eu.consent.api.termly.io https://intercom-sheets.com https://www.intercom-reporting.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net https://api.stripe.com https://r.stripe.com https://hooks.stripe.com https://js.stripe.com https://connect-js.stripe.com https://pay.google.com https://wallet.googleapis.com https://widget.trustpilot.com https://stape.privatevpn.com https://stape.privatesurfforme.net https://www.googletagmanager.com; frame-ancestors 'self'; img-src 'self' data: blob: privatevpn-cms-prod.us-ord-1.linodeobjects.com https://*.stripe.com https://app.termly.io https://us.consent.api.termly.io https://eu.consent.api.termly.io https://widget.trustpilot.com https://q.quora.com https://alb.reddit.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://region1.analytics.google.com https://stape.privatevpn.com https://stape.privatesurfforme.net https://www.googletagmanager.com https://www.google.com https://www.google.se https://js.intercomcdn.com https://static.intercomassets.eu https://downloads.intercomcdn.eu https://uploads.intercomusercontent.com https://gifs.intercomcdn.com https://video-messages.intercomcdn.com; media-src 'self' https://downloads.intercomcdn.eu https://downloads.intercomcdn.com; style-src 'self' 'unsafe-inline' https://app.termly.io https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com https://js.intercomcdn.com https://fonts.intercomcdn.com; object-src 'none'; base-uri 'self'; 1
worker-src 'self' blob: 'self' https://*.oppwa.com; font-src cash-f.squarecdn.com https://*.gstatic.com *.klarnacdn.net *.fontawesome.com *.gstatic.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://*.bootstrapcdn.com https://*.typekit.net https://prilla.com *.fonts.googleapis.com data: *.cloudflare.com *.yotpo.com *.googleapis.com https://*.klaviyo.com https://www.nshiftportal.com https://chat.digitalgenius.com https://static.klaviyo.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.adyen.com https://*.qliro.com https://*.vipps.no https://*.trustly.com https://*.ideal.nl https://*.apple.com https://*.unzer.com https://*.heidelpay.com 'self' https://www.facebook.com https://*.techlab-cdn.com *.yotpo.com https://*.epayment.nets.eu 'self' 'unsafe-inline'; frame-ancestors 'self' 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com https://www.google.com/recaptcha/ * *.adyen.com *.klarna.com https://*.qliro.com *.trustpilot.com 'self' *.google.com https://*.gstatic.com https://*.g.doubleclick.net https://www.facebook.com https://policy.app.cookieinformation.com https://*.online-metrix.net https://*.paypal.com https://*.paypalobjects.com https://applepay.cdn-apple.com https://pay.google.com https://*.techlab-cdn.com www.xtento.com *.addthis.com *.pinterest.com www.facebook.com platform.twitter.com *.yotpo.com https://www.nshiftportal.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com validator.swagger.io * https://*.gstatic.com *.adyen.com cembrapay.ch https://info.dibs.se https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.agechecked.com https://firebasestorage.googleapis.com 'self' https://*.google.com https://*.google-analytics.com https://*.googletagmanager.com https://*.doubleclick.net https://*.googlesyndication.com *.paypal.com https://*.paypalobjects.com https://*.trustpilot.com https://*.facebook.com https://*.nr-data.net https://*.hotjar.io https://*.adform.net https://*.amazon-adsystem.com https://*.rubiconproject.com https://*.pubmatic.com https://*.openx.net https://*.adroll.com https://*.outbrain.com https://*.taboola.com https://*.usercentrics.eu https://policy.app.cookieinformation.com https://*.typekit.net https://*.bootstrapcdn.com https://*.fontawesome.com https://*.kargo.com https://*.zeotap.com https://*.rfihub.com https://*.imgstatics.com https://*.techlab-cdn.com www.xtento.com cdn.xtento.com *.cloudflare.com https://cdn.klarna.com *.vimeocdn.com https://s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com *.cdninstagram.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com *.yotpo.com https://www.nshiftportal.com data: 'self' 'unsafe-inline'; script-src https://*.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.adyen.com pay.google.com *.payments-amazon.com https://*.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://*.dibspayment.eu https://maps.googleapis.com https://player.vimeo.com *.disqus.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.agechecked.com https://*.qliro.com https://*.trustpilot.com https://cdn.jsdelivr.net *.avada.io *.shopify.com 'self' https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.gstatic.com https://*.magento.com https://*.nr-data.net https://*.newrelic.com https://policy.app.cookieinformation.com https://connect.facebook.net https://www.snapengage.com https://*.pingdom.net blob: https://*.clarity.ms www.xtento.com cdn.xtento.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com connect.facebook.net twitter.com platform.twitter.com *.yotpo.com https://applepay.cdn-apple.com https://consent.cookiebot.com https://trserv.snusexpress.com https://*.creative-serving.com https://*.creative-serving.org https://www.nshiftportal.com https://*.hotjar.com https://chat.digitalgenius.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cash.app https://fonts.googleapis.com/ https://*.dibspayment.eu *.klarnacdn.net https://static.klaviyo.com *.agechecked.com https://*.fontawesome.com *.trustpilot.com https://cdn.jsdelivr.net https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' https://*.bootstrapcdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://*.googletagmanager.com https://*.typekit.net *.googleapis.com *.yotpo.com https://www.nshiftportal.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' https://*.snapengage.com https://*.inkclub.com:9000 https://www.nshiftportal.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com * *.adyen.com https://*.dibspayment.eu https://maps.googleapis.com https://player.vimeo.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io 'self' https://*.google.com *.googleapis.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.googleadservices.com https://*.adobedtm.com https://*.adobe.com https://*.magento.com https://*.demdex.net https://*.nr-data.net https://*.clarity.ms https://*.pingdom.net https://*.hotjar.com https://*.hotjar.io https://*.usercentrics.eu https://policy.app.cookieinformation.com https://id5-sync.com https://*.adform.net https://*.online-metrix.net https://*.rfihub.com https://*.zeotap.com https://*.gstatic.com https://*.imgstatics.com https://*.techlab-cdn.com https://madhat.customerfirst.ai *.cloudflare.com *.paypal.com *.addthis.com *.cardinalcommerce.com https://graph.instagram.com *.yotpo.com https://www.nshiftportal.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.snushof.ch/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://cdn.gtranslate.net https://cdn-cookieyes.com https://*.clarity.ms https://c.bing.com https://wia.servicedesk.net https://sc.lfeeder.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.gtranslate.net; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https:; frame-src 'self' https://www.googletagmanager.com https://td.doubleclick.net https://wia.servicedesk.net https://www.youtube-nocookie.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://region1.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://*.clarity.ms https://c.bing.com https://wia.servicedesk.net https://sc.lfeeder.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
base-uri 'none'; object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-BLCug1ne/2zf3sCu7UocXw==' 1
default-src 'self';    script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' data: *.wpml.org https://unpkg.com/ https://cdn.pagesense.io https://ma.zoho.com/ https://maillist-manage.com/ https://cdn.jsdelivr.net/ https://www.youtube.com/ https://www.clarity.ms/ https://scripts.clarity.ms/ *.wp.com https://fast.wistia.com/ https://analytics.wpmucdn.com/ https://cdn.jotfor.ms/ https://cdnjs.cloudflare.com/ https://sidebar.bugherd.com/ https://maps.googleapis.com/ *.google.com https://www.gstatic.com/ https://payfacto.bamboohr.com/ https://www.bugherd.com/ https://cdn-cookieyes.com/ https://hb.wpmucdn.com/maitredpos.com/ https://www.googletagmanager.com/ https://stats.wpmucdn.com/ https://cdn.callrail.com/ https://js.callrail.com/ https://j.6sc.co/ https://www.gstatic.com/ https://static.hotjar.com/ https://script.hotjar.com/;    style-src 'report-sample' 'self' 'unsafe-inline' https://use.fontawesome.com/ *.wpml.org https://fonts.bunny.net/ https://hb.wpmucdn.com/maitredpos.com/ https://fonts.googleapis.com/;    object-src 'none'; base-uri 'self';    connect-src 'self' https://pagesense-collect.zoho.com https://pagesense-hb-collect.zoho.com https://ipinfo.io/ *.clarity.ms https://analytics3.wpmudev.com/ https://sessions.bugsnag.com/ wss://ws-mt1.pusher.com/ https://sockjs.pusher.com/ https://epsilon.6sense.com/ https://cdn.ampproject.org/ *.wpml.org https://maps.google.com/ https://maps.googleapis.com/ https://app.callrail.com/ https://www.google-analytics.com/ https://metrics.hotjar.io/ wss://ws.hotjar.com/ https://content.hotjar.io/ https://distillery.wistia.com/ https://payfacto.bamboohr.com/ https://stats.g.doubleclick.net/ https://c.6sc.co/ https://analytics.google.com/ https://ipv6.6sc.co/ https://js.callrail.com/ *.cookieyes.com https://cdn-cookieyes.com/ https://stats1.wpmudev.com/;    font-src 'self' data: https://use.fontawesome.com/ https://fonts.bunny.net/ https://fonts.gstatic.com/;    frame-src 'self' about: blob: data: https://brainstormforce.github.io/ https://form.jotform.com/ https://maps.google.com/ https://www.google.com/ https://sidebar.bugherd.com/ https://www.google.com/ https://forms.zohopublic.com;    img-src 'self' data: https://plugins.svn.wordpress.org/ https://store.assets.wpdeveloper.com/ *.zoho.com *.assetcdn.net https://assets.elementor.com/ https://maps.googleapis.com/ https://maps.gstatic.com/ https://www.googletagmanager.com/ https://c.clarity.ms/c.gif https://c.bing.com/ *.smushcdn.com *.wp.com https://d2iiunr5ws5ch1.cloudfront.net/ https://ps.w.org/ https://secure.gravatar.com/ https://wpmudev.com/ https://i0.wp.com/ https://www.google.ca/ https://resources.bamboohr.com/ https://b.6sc.co/ https://cdn-cookieyes.com/ https://b3550802.smushcdn.com/;    manifest-src 'self';    media-src 'self';    worker-src blob:;    frame-ancestors 'self' https://google.com/; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-4lZDdizuIlWaKnGaxCLOaQ' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
script-src 'nonce-+VWEnm+7KIlO2a5JWSu339/TdOtpwmrX5PXxKZxdBQI=' 'unsafe-eval' 'strict-dynamic' https:; frame-ancestors 'self'; report-uri https://www.thonhotels.no/api/ContentSecurityViolation/; report-to csp-endpoint; object-src 'self'; base-uri 'self' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://api.theindependentpharmacy.co.uk; script-src 'self' https://gv.theindependentpharmacy.co.uk 'unsafe-inline' 'unsafe-eval' https://pay.google.com https://www.dwin1.com https://*.contentsquare.net https://app.contentsquare.com https://consent.cookiebot.com https://widget.reviews.co.uk https://cdn.checkout.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net; font-src 'self' data: https://use.typekit.net https://p.typekit.net; img-src 'self' data: blob: https://cdn.sanity.io https://www.dwin1.com https://*.contentsquare.net https://app.contentsquare.com https://consent.cookiebot.com https://widget.reviews.co.uk; connect-src 'self' https://gv.theindependentpharmacy.co.uk https://api.theindependentpharmacy.co.uk https://*.sentry.io https://*.sanity.io https://*.algolia.net https://*.algolianet.com https://*.algolia.io https://pay.google.com https://cdn.checkout.com https://*.contentsquare.net https://app.contentsquare.com https://www.dwin1.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://widget.reviews.co.uk https://cdn.growthbook.io; frame-src 'self' https://cdn.checkout.com https://pay.google.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://csxd.theindependentpharmacy.co.uk; child-src 'self' blob:; worker-src 'self' blob:; upgrade-insecure-requests; report-to csp-endpoint 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' https: https://connect.facebook.net https://ajax.googleapis.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data:; font-src 'self' https:; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com 'self' data: *.doubleclick.net stats.g.doubleclick.net sgtm.trudon.com *.facebook.com *.googlesyndication.com *.fontawesome.com https://fonts.bunny.net https://cdnjs.cloudflare.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com trudon-prod.b-cdn.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.facebook.com *.googlesyndication.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.google.com/ *.doubleclick.net stats.g.doubleclick.net sgtm.trudon.com *.facebook.com *.googlesyndication.com *.certcapture.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com www.youtube.com *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com 'self' data: *.google.com *.google.fr *.facebook.com *.facebook.net *.doubleclick.net stats.g.doubleclick.net sgtm.trudon.com *.googletagmanager.com *.googlesyndication.com *.certcapture.com https://www.magezon.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com maps.gstatic.com trudon-prod.b-cdn.net *.adobedtm.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.googleapis.com *.gstatic.com *.google.com/ *.google.fr *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net stats.g.doubleclick.net sgtm.trudon.com *.google-analytics.com *.googlesyndication.com *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com https://cdnjs.cloudflare.com maps.googleapis.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com trudon-prod.b-cdn.net www.youtube.com player.vimeo.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.googleapis.com .doubleclick.net stats.g.doubleclick.net sgtm.trudon.com *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.certcapture.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net https://fonts.googleapis.com https://cdnjs.cloudflare.com *.stripe.network *.stripecdn.com *.amazon.com trudon-prod.b-cdn.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.amazonaws.com *.googleapis.com *.google.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com *.googleapis.com *.facebook.com *.facebook.net *.doubleclick.net stats.g.doubleclick.net sgtm.trudon.com *.googlesyndication.com *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io maps.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com trudon-prod.b-cdn.net cdn.plyr.io noembed.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://b0a24144-3357-4f12-b5c2-c9c89923ac50.sansec.watch/; report-to report-endpoint; 1
default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; object-src 'self' blob:; font-src https: data:; report-uri /csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.zdassets.com *.zendesk.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com js.mollie.com https://www.googletagmanager.com/ ct.pinterest.com *.googletagmanager.com ad.doubleclick.net *.facebook.com https://app.aiden.cx *.zdassets.com *.zendesk.com 'self' 'unsafe-inline'; img-src cdn.into-led.com data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.sharethis.com https://images.unsplash.com https://www.mollie.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.googletagmanager.com ad.doubleclick.net *.googleadservices.com *.zdassets.com *.zendesk.com ts.tradetracker.net www.magmodules.eu data: https: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sharethis.com https://maps.googleapis.com https://player.vimeo.com js.mollie.com pay.google.com applepay.cdn-apple.com *.crwdcntrl.net http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.cloudflareinsights.com connect.facebook.net *.googletagmanager.com *.google-analytics.com *.googleadservices.com ad.doubleclick.net s.pinimg.com https://app.aiden.cx *.zdassets.com *.zendesk.com tm.tradetracker.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.zdassets.com *.zendesk.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com https://maps.googleapis.com https://player.vimeo.com *.crwdcntrl.net http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.cloudflareinsights.com *.googletagmanager.com *.googleadservices.com ad.doubleclick.net pagead2.googlesyndication.com https://an.into-led.com ct.pinterest.com s.pinimg.com https://app.aiden.cx *.zdassets.com *.zendesk.com *.zopim.com wss://*.zopim.com https://api.eu-1.smooch.io wss://api.eu-1.smooch.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://code.jivo.ru https://*.jivosite.com; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: https:; connect-src 'self' https://*.jivo.ru https://*.jivosite.com wss://*.jivosite.com; frame-src https://code.jivo.ru https://*.jivosite.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none' 1
default-src 'self' blob:  https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; frame-src 'self' https://*.noxiaohao.com https://telegram.org https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://accounts.google.com https://oauth.telegram.org https://sgtm.btsgtm.com  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; script-src 'self' 'nonce-ApvTAmZY6+LZo3l4uU60Zg==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh/v3RIRuG3kMikr5iha+7P/0TN/GNA=' https://*.noxiaohao.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://accounts.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://play.google.com https://analytics.google.com https://fonts.gstatic.com https://telegram.org https://oauth.telegram.org https://*.geetest.com https://*.geevisit.com https://sgtm.btsgtm.com https://static.wangsustatic.xyz https://static.wangsustatic.vip ; connect-src 'self' https://stats.g.doubleclick.net https://analytics.google.com https://*.noxiaohao.com wss://*.noxiaohao.com wss: https://www.turingfraud.net https://play.google.com https://accounts.google.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://telegram.org https://oauth.telegram.org https://static.geetest.com https://static.geevisit.com wss://stream.bitget.cloud https://www.google.com https://sgtm.btsgtm.com  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; worker-src 'self' blob:; img-src 'self' data: blob: https://img.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://img.bitgetimg.com https://img.gurenla.com https://*.bgbstatic.com https://lh3.googleusercontent.com https://static.geetest.com https://static.geevisit.com https://static-web.jjdsn.vip https://cdn.bitkeep.vip https://www.google.co.jp https://bin.wangsustatic.com https://sgtm.btsgtm.com https://analytics.google.com https://stats.g.doubleclick.net  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; style-src 'self' 'unsafe-inline' https://static.geetest.com https://static.geevisit.com https://accounts.google.com https://fonts.googleapis.com https://static.bgbstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; font-src 'self' data: https://static.geetest.com https://static.geevisit.com https://fonts.gstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri /v1/buried/log/cspSecurity /v1/monitor/csp?appId=d4b6df7d; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://use.typekit.net https://www.goodsalt.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ bid.g.doubleclick.net *.braintreegateway.com *.paypal.com google.com *.google.com https://www.goodsalt.com https://td.doubleclick.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.paypal.com *.typekit.net *.gstatic.com maps.gstatic.com https://www.goodsalt.com 'self' data: data: 'self' 'unsafe-inline'; script-src *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://browser.sentry-cdn.com https://cdn.lr-ingest.io maps.googleapis.com https://www.goodsalt.com *.gstatic.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.fontawesome.com https://www.goodsalt.com *.googleapis.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://*.ingest.sentry.io maps.googleapis.com https://www.goodsalt.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-N4ayflNp3iRDOzdjXjBK1A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
none 1
script-src 'nonce-PNWNXKP1o7c4tm__FpguyQ' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/static-on-bigtable; base-uri 'none' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.klarnacdn.net *.klevu.com *.ksearchnet.com https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.nosto.com *.nos.to 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.zenaps.com *.fls.doubleclick.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.nosto.com *.nos.to *.klarna.com https://www.googletagmanager.com/ js.mollie.com https://www.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.awin1.com *.zenaps.com *.wepowerconnections.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.nosto.com *.nos.to *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.mollie.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.nosto.com *.nos.to *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.klevu.com *.ksearchnet.com widget.freshworks.com m2epro.freshdesk.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ js.mollie.com https://www.google.com https://www.gstatic.com https://js.klevu.com https://www.bakerross.de 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.nosto.com *.nos.to *.klarnacdn.net https://static.klaviyo.com *.klevu.com *.ksearchnet.com widget.freshworks.com m2epro.freshdesk.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.wepowerconnections.com https://the.sciencebehindecommerce.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.nosto.com *.nos.to *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com widget.freshworks.com m2epro.freshdesk.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://20a27546-5165-4716-8e1c-c91dee6f68ae.sansec.watch/; report-to report-endpoint; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' js.hscta.net js-eu1.hscta.net js.hs-analytics.net static.hsappstatic.net track.hubspot.com no-cache.hubspot.com *.hubspot.com *.hs-sites.com *.hs-scripts.com forms.hsforms.com forms.hsforms.net cdn2.hubspot.net www.googletagmanager.com www.google-analytics.com stats.g.doubleclick.net connect.facebook.net snap.licdn.com bat.bing.com 'strict-dynamic' 'nonce-vl7rrQ+dUSRUAD8MyIf9xg==' 1
object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://polyfill-fastly.io https://unpkg.com; style-src 'self' 'report-sample' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; worker-src 'self'; base-uri 'self'; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-TFsXx8O7M6sUN2fVNaHrPQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com fonts.googleapis.com *.googleapis.com 'unsafe-inline' data: *.cloudflare.com mishimoto.nyc3.cdn.digitaloceanspaces.com *.mishimoto.com *.parastorage.com https://client.crisp.chat maxcdn.bootstrapcdn.com *.klarnacdn.net *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.mishimoto.com *.mishimoto.com/checkout *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net https://www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.certcapture.com *.sandbox.paypal.com creatives.attn.tv *.paypalobjects.com api.sandbox.braintreegateway.com *.google.com/ www.facebook.com platform.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.klarna.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.cardinaltrusted.com 'self' 'unsafe-inline'; img-src 'unsafe-inline' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io maps.googleapis.com maps.gstatic.com *.googleapis.com https://images.unsplash.com *.certcapture.com *.google.com *.google.co.uk *.mishimoto.com *.bing.com *.clarity.ms *.cookielaw.org *.nyc3.cdn.digitaloceanspaces.com *.cloudimg.io https://image.crisp.chat magefan.com cm.magefan.com *.disqus.com https://www.magezon.com *.googleadservices.com *.googletagmanager.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://img.youtube.com connect.facebook.net graph.facebook.com business.facebook.com *.reddit.com *.online-metrix.net data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://maps.googleapis.com *.certcapture.com *.google-analytics.com *.googleadservices.com bam.nr-data.net *.sandbox.paypal.com *.bing.com *.mishimoto.com *.getbread.com *.breadpayments.com cdn.attn.tv *.attentivemobile.com *.clarity.ms *.cookielaw.org *.arkane.com *.nyc3.cdn.digitaloceanspaces.com *.hotjar.com cdnjs.cloudflare.com cdn.optimizely.com *.jquery.com https://client.crisp.chat *.disqus.com https://cdn.jsdelivr.net *.google.com/ connect.facebook.net *.googletagmanager.com twitter.com platform.twitter.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com www.facebook.com graph.facebook.com business.facebook.com assets.shipperhq.com wmvvz.mishimoto.eu cdn.bc0a.com *.logr-ingest.com *.lrkt-in.com *.logr-in.com *.redditstatic.com *.tapfiliate.com *.cardinaltrusted.com *.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com *.mishimoto.com mishimoto.nyc3.cdn.digitaloceanspaces.com *.parastorage.com https://client.crisp.chat https://cdn.jsdelivr.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.klarnacdn.net *.fontawesome.com assets.shipperhq.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com *.certcapture.com analytics.google.com *.googlesyndication.com stats.g.doubleclick.net *.sandbox.paypal.com bam.nr-data.net *.mishimoto.com/checkout *.mishimoto.com *.attn.tv *.clarity.ms events.attentivemobile.com *.cookielaw.org *.arkane.com *.optimizely.com *.jquery.com *.logr-in.com https://client.crisp.chat wss://client.relay.crisp.chat https://plugins.crisp.chat *.googletagmanager.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com rms.shipperhq.com wss://rms.shipperhq.com/ places.googleapis.com msearch.mishimoto.com *.bc0a.com *.logr-ingest.com *.lrkt-in.com *.redditstatic.com *.reddit.com *.cardinaltrusted.com *.online-metrix.net kg668dbov0.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.cookielaw.org 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://*.charteredaccountants.ie https://*.realexpayments.com https://*.payandshop.com https://*.digicert.com https://*.zendesk.com https://*.zopim.com https://*.zdassets.com https://*.youtube.com https://googleads.g.doubleclick.net https://*.licdn.com https://*.google-analytics.com https://*.cookiebot.com https://*.fontawesome.com https://*.jsdelivr.net https://*.crazyegg.com https://*.telerikstatic.com https://*.aspnetcdn.com https://*.facebook.net https://*.facebook.com https://*.cloudflare.com https://*.googleapis.com https://*.googletagmanager.com https://*.jquery.com https://*.doubleclick.net https://*.tiktok.com https://*.google.co.uk https://*.google.com https://*.google.ie https://*.googleadservices.com https://*.google.co.in https://*.bootstrapcdn.com https://*.gstatic.com https://charteredaccountantsireland.mediasite.com https://*.linkedin.com 'unsafe-inline' 'unsafe-eval' data: blob:; object-src 'none'; base-uri 'self' https://*.charteredaccountants.ie; frame-ancestors 'self' https://*.google.com https://*.charteredaccountants.ie https://*.realexpayments.com https://*.payandshop.com; report-uri https://csp.charteredaccountants.ie/index.php; worker-src blob:; 1
default-src 'self';style-src 'self' 'unsafe-inline';style-src-elem 'unsafe-inline' 'self' https://*.intercomcdn.com/ https://fonts.googleapis.com/css2;script-src 'unsafe-eval' https://*.intercom.io;script-src-elem 'self' 'unsafe-inline' https://*.intercom.io/ https://*.intercomcdn.com/ https://www.googletagmanager.com/gtag/ https://fonts.googleapis.com/css2;img-src 'self' data: blob: https://images.stealthex.io https://stealthex.io/blog/wp-content/ https://*.intercomassets.com https://*.intercomcdn.com	https://fc-use1-00-pics-bkt-00.s3.amazonaws.com/;media-src https://*.intercom.io;frame-src https://*.intercom.io https://intercom-sheets.com;worker-src 'self' blob: https://*.intercom.io/;font-src 'self' data: https://fonts.gstatic.com/ https://*.intercomcdn.com/;connect-src 'self' https://stealthex.io/api/ https://www.google-analytics.com/g/collect https://*.ingest.sentry.io/api/ wss://*.intercom.io/ https://*.intercom.io/;report-uri https://stealthex.report-uri.com/r/d/csp/reportOnly 1
default-src 'self' data: 'unsafe-inline' https://www.google.com https://www.gstatic.com https://api.sandbox.braintreegateway.com https://api.braintreegateway.com https://browser-update.org https://cdn.jsdelivr.net https://fonts.googleapis.com https://widget.freshworks.com https://chart.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com; font-src *; form-action 'self'; report-uri /API/csp-report.php 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cdn.jsdelivr.net cdn.almapay.com fonts.googleapis.com *.fontawesome.com https://applepay.cdn-apple.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.monetico-services.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.getalma.eu *.almapay.com/ *.stripe.com/ *.checkout.com/ *.adyen.com/ *.monetico-services.com *.cookiebot.com *.cookiebot.eu c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.payplug.com *.dalenys.com https://applepay.cdn-apple.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org magefan.com cm.magefan.com *.disqus.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com *.hsforms.net *.hsforms.com *.cookiebot.com *.cookiebot.eu https://img.youtube.com *.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://secure-magenta.dalenys.com 'self' data: *.google.fr *.google.com https://bat.bing.com https://bat.bing.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com cdn.jsdelivr.net *.disqus.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.hsforms.net *.hsforms.com widget.azu.levia.ai *.cookiebot.com *.cookiebot.eu *.googletagmanager.com *.facebook.net www.termsfeed.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://secure-magenta.dalenys.com https://applepay.cdn-apple.com api.payplug.com cdn.payplug.com *.gstatic.com cdn.almapay.com static.zdassets.com *.zendesk.com *.zopim.com bat.bing.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.jsdelivr.net api.fontshare.com *.cookiebot.com *.fontawesome.com assets.braintreegateway.com https://secure-magenta.dalenys.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.getalma.eu *.almapay.com *.monetico-services.com maps.googleapis.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.cookiebot.com *.cookiebot.eu api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://itjustgood.zendesk.com wss://widget-mediator.zopim.com https://ekr.zdassets.com https://bat.bing.com https://bat.bing.net https://cdn.jsdelivr.net *.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-Ds4ZXeQrs5AwzR6RybtIbQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.fontawesome.com maxcdn.bootstrapcdn.com https://fonts.gstatic.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://plumrocket.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io blueskytechmage.com mageblueskytech.com placehold.jp magefan.com cm.magefan.com https://www.magezon.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ s7.addthis.com *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://player.vimeo.com https://www.youtube.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com http://fonts.googleapis.com unsafe-inline assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com ekr.zdassets.com/ https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' https://s.pdf-archive.com; style-src 'self' https://s.pdf-archive.com 'sha256-58+en1RZEttLV2MXQE3duYy6G1qzq6xG3dLfZuPfIr4='; font-src 'self' https://s.pdf-archive.com; img-src 'self' data: https://s.pdf-archive.com; connect-src 'self'; report-uri /_csp-report.php 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.braintreegateway.com https://*.google.com https://*.cdn-apple.com https://*.reviews.io https://*.reviews.co.uk https://grwapi.net https://*.cloudflare.com https://*.jquery.com https://*.jsdelivr.net https://*.termly.io https://*.gstatic.com https://*.facebook.net https://*.googletagmanager.com https://*.google-analytics.com https://*.gumlet.com https://*.cardinalcommerce.com https://*.doubleclick.net https://*.googleadservices.com https://*.paypal.com https://*.paypalobjects.com https://*.pcapredict.com https://*.postcodeanywhere.co.uk https://where-to-buy.co https://*.where-to-buy.co https://*.pricespider.com; style-src 'self' 'unsafe-inline' data: https://grwapi.net https://*.reviews.io https://*.braintreegateway.com https://*.cloudflare.com https://*.jsdelivr.net https://*.googleapis.com https://*.google.com https://*.gstatic.com https://*.tooled-up.com https://*.postcodeanywhere.co.uk; img-src 'self' data: blob: https://grwapi.net https://*.tooled-up.com https://*.gumlet.com https://*.paypal.com https://*.paypalobjects.com https://*.facebook.com https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.google.co.uk https://*.googlesyndication.com https://*.doubleclick.net https://*.googleadservices.com https://*.reviews.io https://*.gstatic.com https://*.postcodeanywhere.co.uk https://*.ytimg.com https://*.where-to-buy.co https://where-to-buy.co; frame-src 'self' https://*.reviews.io https://*.youtube.com https://*.braintreegateway.com https://*.googletagmanager.com https://*.google.co.uk https://*.google.com https://*.termly.io https://*.doubleclick.net https://*.facebook.com https://*.cardinalcommerce.com https://*.paypal.com https://*.reviews.co.uk https://*.youtube-nocookie.com https://*.americanexpress.com https://*.rsa3dsauth.co.uk https://*.pricespider.com https://*.channelsight.com https://challenges.cloudflare.com; connect-src 'self' https: wss:; font-src 'self' data: https://*.reviews.io https://*.cloudflare.com https://*.jsdelivr.net https://*.gstatic.com; report-uri https://www.tooled-up.com/api/csp-report; report-to csp-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com *.decksdirect.com *.klaviyo.com *.cdn-apple.com *.yotpoapi.com *.cloudflare.com *.trustedshops.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.affirm.com *.affirm.ca c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.hubspot.com *.addthis.com www.google.com youtu.be *.vimeo.com *.yotpo.com js.mollie.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://images.unsplash.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.affirm.com *.affirm.ca www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ decksdirect.com *.klaviyo.com *.googleadservices.com *.google-analytics.com *.google.com *.google.co.in *.mastercard.com *.networkmerchants.com *.hubspot.com *.hsforms.com *.yotpoapi.com *.shopperapproved.com *.decksdirect.com *.disqus.com maps.googleapis.com maps.gstatic.com *.cloudflare.com https://cdn.klarna.com https://s.ytimg.com *.usercentrics.eu blob: *.yotpo.com https://www.mollie.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.clarity.ms *.googletagmanager.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page https://maps.googleapis.com *.facebook.net connect.facebook.net graph.facebook.com business.facebook.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.affirm.com *.affirm.ca js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.decksdirect.com *.klaviyo.com *.hlx.page *.hsforms.net *.hs-scripts.com *.hscollectedforms.net *.hs-banner.com *.hs-analytics.net *.hsappstatic.net *.googletagmanager.com acsbapp.com f.vimeocdn.com *.yotpoapi.com *.hubspot.com *.trkn.us *.iconnode.com *.usemessages.com *.yotpo.com *.cookie-script.com *.bing.com *.stapecdn.com stapecdn.com *.shopperapproved.com *.gstatic.com static-tracking.klaviyo.com *.disqus.com maps.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com https://cdn.jsdelivr.net *.cloudflare.com *.google-analytics.com *.googleadservices.com *.googleapis.com *.trustedshops.com *.usercentrics.eu js.mollie.com *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.clarity.ms unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com assets.braintreegateway.com *.fontawesome.com https://static.klaviyo.com *.decksdirect.com *.hotjar.com *.omappapi.com *.cardinalcommerce.com *.ccdc02.com *.google-analytics.com *.authorize.net *.paypalobjects.com *.paypal.com *.googleapis.com *.callrail.com *.vimeo.com *.braintreegateway.net *.googleadservices.com *.googletagmanager.com *.ytimg.com f.vimeocdn.com *.adobedtm.com *.gstatic.com *.networkmerchants.com *.yotpoapi.com *.klaviyo.com https://cdn.jsdelivr.net *.cloudflare.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.yotpo.com *.tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://maps.googleapis.com https://player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.affirm.com *.affirm.ca api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ *.klaviyo.com https://telemetrics.klaviyo.com/ *.hlx.page *.decksdirect.com *.hsforms.com *.hscollectedforms.net *.hsappstatic.net cdn.acsbapp.com *.iconnode.com p.ksrndkehqnwntyxlhgto.com *.yotpoapi.com *.hubspot.com *.google.co.in *.stapecdn.com server-side-tagging.a *.cookie-script.com *.googlesyndication.com *.google.ca maps.googleapis.com *.cloudflare.com *.googleapis.com *.yotpo.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.clarity.ms *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.nr-data.net *.adobedc.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri commerce.adobedc.net 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.youtube.com https://www.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://generativelanguage.googleapis.com https://www.uit.edu.vn; media-src 'self' https:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.google.com https://maps.google.com https://www.facebook.com; worker-src 'self' blob: 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com cash-f.squarecdn.com www.amac.nl *.amac.nl a-mac.nl www.amac-pro.nl *.aidencloud.eu *.youweagency.dev *.youweplatform.com apps-amac.bookerz.nl script.hotjar.com amac.inforaction.nl inruil.amac.nl https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.sandbox.paypal.com *.pilot-payflowlink.paypal.com *.adyen.com *.pay.google.com *.payments.amazon.com *.payments-eu.amazon.com *.rsa3d.com amac.inforaction.nl inruil.amac.nl 'self' 'unsafe-inline'; frame-ancestors app.contenzi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * app.aiden.cx *.aiden.cx *.adyen.com *.adyenpayments.com abc.amac.nl apps-amac.bookerz.nl contact.robinhq.com tr.snapchat.com td.doubleclick.net 6615279.fls.doubleclick.net www.facebook.com *.rsa3d.com *.securesuite.co.uk amac.inforaction.nl inruil.amac.nl https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com * www.amac.nl *.amac.nl a-mac.nl www.amac-pro.nl *.aidencloud.eu *.youweagency.dev *.youweplatform.com dev.visualwebsiteoptimizer.com px.ads.linkedin.com tr.snapchat.com t.squeezely.tech www.facebook.com ad.doubleclick.net adservice.google.com www.google.nl abc.amac.nl region1.analytics.google.com robincontentdesktop.blob.core.windows.net ade.googlesyndication.com www.linkedin.com amac.inforaction.nl inruil.amac.nl https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-ds.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com app.aiden.cx *.aiden.cx www.amac.nl *.amac.nl *.aidencloud.eu *.youweagency.dev *.youweplatform.com code.jquery.com static.cloudflareinsights.com apps-amac.bookerz.nl widget.trustpilot.com invitejs.trustpilot.com unpkg.com www.dwin1.com snap.licdn.com sc-static.net static.hotjar.com squeezely.tech script.hotjar.com dev.visualwebsiteoptimizer.com tr.snapchat.com robincontentdesktop.blob.core.windows.net connect.facebook.net az416426.vo.msecnd.net magento-recs-sdk.adobe.net analytics.tiktok.com ajax.cloudflare.com cdnjs.cloudflare.com selfservice.robinhq.com www.googleoptimize.com bat.bing.com amac.inforaction.nl inruil.amac.nl https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.disqus.com *.googletagmanager.com tagmanager.google.com a11328.ctz-content.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app www.amac.nl *.amac.nl *.aidencloud.eu *.youweagency.dev *.youweplatform.com apps-amac.bookerz.nl code.jquery.com amac.inforaction.nl inruil.amac.nl https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.amac.nl *.aidencloud.eu a-mac.nl www.amac-pro.nl *.youweagency.dev *.youweplatform.com amac.inforaction.nl inruil.amac.nl 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net vimeo.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.snplow.net commerce.adobedc.net commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * app.aiden.cx *.aiden.cx dev.visualwebsiteoptimizer.com www.amac.nl px.ads.linkedin.com abc.amac.nl googleads.g.doubleclick.net dc.services.visualstudio.com tr6.snapchat.com tr.snapchat.com analytics.tiktok.com www.facebook.com pagead2.googlesyndication.com bat.bing.net amac.inforaction.nl inruil.amac.nl https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.googletagmanager.com maps.googleapis.com a11328.ctz-content.com 'self' 'unsafe-inline'; child-src app.aiden.cx *.aiden.cx http: https: blob: 'self' 'unsafe-inline'; default-src www.amac.nl *.amac.nl *.aidencloud.eu *.youweagency.dev *.youweplatform.com tr6.snapchat.com tr.snapchat.com commerce.adobedc.net googleads.g.doubleclick.net analytics.tiktok.com amac.inforaction.nl inruil.amac.nl 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://404d70f5-70c9-40a8-824b-f381e27a4eeb.sansec.watch/; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com fonts.googleapis.com *.googleapis.com data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://*.bootstrapcdn.com https://*.fontawesome.com https://*.gstatic.com https://*.klarnacdn.net https://frontend-cdn.perplexity.ai data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com https://*.facebook.com https://*.securetrading.net 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com *.dropbox.com account.fetchify.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.trustpilot.com *.weltpixel.com www.xtento.com 'self' https://*.facebook.com https://*.google.com https://*.googletagmanager.com https://*.hotjar.com https://*.livechatinc.com https://*.pinterest.co.uk https://*.securetrading.net https://*.trustpilot.com https://*.vimeo.com https://*.youtube.com https://player.flipsnack.com https://ssl-proxy-login.blackspider.com https://websiteintegration.source.thenbs.com https://www.google.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com maps.googleapis.com maps.gstatic.com https://images.unsplash.com *.googleapis.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com https://cc-cdn.com *.ggpht.com *.disqus.com www.xtento.com cdn.xtento.com https://*.bing.com https://*.bing.net https://*.cladco.co.uk https://*.cladcodecking.co.uk https://*.clarity.ms https://*.doubleclick.net https://*.facebook.com https://*.files-text.com https://*.google.co.uk https://*.google.com https://*.googletagmanager.com https://*.googleusercontent.com https://*.livechatinc.com https://*.visualwebsiteoptimizer.com https://cdn.ons.gov.uk https://cladcodecking.co.uk https://connect.facebook.net https://l.contentsquare.net https://pagead2.googlesyndication.com https://s3.amazonaws.com/adimages.adbeat.com/ https://www.google.ae https://www.google.be https://www.google.ca https://www.google.ch https://www.google.com.au https://www.google.com.bd https://www.google.com.ng https://www.google.com.ph https://www.google.com.sa https://www.google.de https://www.google.es https://www.google.fr https://www.google.gg https://www.google.gr https://www.google.ie https://www.google.it https://www.google.je https://www.google.nl https://www.google.pl https://www.google.pt https://www.google.ro *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com pinterest.com ct.pinterest.com www.pinterest.com s.pinimg.com chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.dropbox.com widget.freshworks.com m2epro.freshdesk.com cc-cdn.com https://cc-cdn.com *.disqus.com https://cdn.jsdelivr.net *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.trustpilot.com www.xtento.com cdn.xtento.com https://*.bing.com https://*.chimpstatic.com https://*.clarity.ms https://*.cookie-script.com https://*.elfsight.com https://*.facebook.net https://*.google-analytics.com https://*.google.com https://*.googletagmanager.com https://*.gstatic.com https://*.hotjar.com https://*.klarnaservices.com https://*.livechatinc.com https://*.newrelic.com https://*.nr-data.net https://*.pinterest.com https://*.tiktok.com https://*.trustpilot.com https://*.zoominfo.com https://googleads.g.doubleclick.net https://googletagmanager.com https://secured-pixel.com https://static.cloudflareinsights.com https://t.contentsquare.net https://universe-static.elfsightcdn.com https://chimpstatic.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com downloads.mailchimp.com https://static.klaviyo.com widget.freshworks.com m2epro.freshdesk.com cc-cdn.com https://cdn.jsdelivr.net *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com https://*.bootstrapcdn.com https://*.fontawesome.com https://*.gstatic.com https://*.klarnacdn.net *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com https://*.livechatinc.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com s.pinimg.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com https://portal.envisagedigital.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ widget.freshworks.com m2epro.freshdesk.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com *.gstatic.com data: *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' https://*.bing.com https://*.bing.net https://*.clarity.ms https://*.craftyclicks.co.uk https://*.doubleclick.net https://*.elfsight.com https://*.facebook.com https://*.fontawesome.com https://*.google-analytics.com https://*.google.co.uk https://*.google.com https://*.googleadservices.com https://*.googlesyndication.com https://*.hotjar.com https://*.hotjar.io https://*.klarnaservices.com https://*.livechatinc.com https://*.nr-data.net https://*.tiktok.com https://*.tiktokw.us https://*.visualwebsiteoptimizer.com https://ad.doubleclick.net https://analytics-ipv6.tiktokw.us https://analytics.tiktok.com https://c.ba.contentsquare.net https://invitejs.trustpilot.com https://k.ba.contentsquare.net https://l.contentsquare.net https://srm.ba.contentsquare.net https://t.contentsquare.net https://www.google.ca https://www.google.com https://www.google.com.ph https://www.google.com.sa https://www.google.es https://www.google.fr https://www.google.ie https://www.googleadservices.com *.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://portal.envisagedigital.co.uk/api/reporting/IQf5aI6JQiUe6tqErpTJn3NIckTiH0bQHustESGVhQ4ZUGYmhvdKoTdPiLrp8nGG; report-to envisage-ed9ecd3c30d5; 1
object-src 'none';base-uri 'self';script-src 'nonce-6NtrGwgUqiGlJUgu_d2x_A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'self' https://api-maps.yandex.ru chrome-extension: 'unsafe-eval' 'unsafe-inline' 'unsafe-inline' https://www.googletagmanager.com https://yastatic.net https://www.google.com https://www.gstatic.com https://mc.yandex.ru https://www.google-analytics.com 127.0.0.1:8182 127.0.0.1:8888 127.0.0.1:5005; frame-src 'self' https://mc.yandex.ru chrome-extension: https://www.facebook.com https://www.googletagmanager.com https://mc.yandex.com; object-src 'self'; report-uri /cspreportonly; 1
default-src 'none'; base-uri 'self'; child-src 'self' platform.twitter.com syndication.twitter.com *.youtube.com; connect-src 'self' https://webpush.ii.nl/; font-src 'self'; form-action 'self' syndication.twitter.com; frame-ancestors 'self'; frame-src 'self' platform.twitter.com syndication.twitter.com *.youtube.com; img-src 'self' data: *.ii.nl blob: abs.twimg.com pbs.twimg.com ton.twimg.com platform.twitter.com syndication.twitter.com; manifest-src 'self'; media-src 'none'; object-src 'none'; report-uri /csp-report; script-src 'self' platform.twitter.com; style-src 'unsafe-inline' 'self' platform.twitter.com ton.twimg.com 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'nonce-rTDPYmPDUZ44bpX8sF7N7VChPwqjINGh24f4KECB' https://challenges.cloudflare.com; frame-src https://challenges.cloudflare.com; img-src 'self' data: https:; style-src 'self' 'unsafe-inline'; media-src 'self' blob:; connect-src 'self' 1
script-src 'self'; report-uri https://infosupport.com/csp-report-endpoint; 1
font-src data: *.gstatic.com oct8necdneu.azureedge.net *.klarnacdn.net *.hspvst.com *.stripe.com klarna.com *.klarna.com *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com sis-t.redsys.es:* sis.redsys.es sis-t.sermepa.es:* sis.sermepa.es *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.hspvst.com 'self' 'unsafe-inline'; frame-ancestors *.googleapis.com *.hspvst.com *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.langshop.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.vimeo.com *.oct8ne.com *.cookiebot.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.hspvst.com *.doubleclick.net www.xtento.com *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://images.unsplash.com *.googleapis.com *.google.com *.google.es *.google.com.br *.gstatic.com *.googletagmanager.com *.google-analytics.com *.g.doubleclick.net oct8necdneu.azureedge.net *.ggpht *.klarna.com *.klarnaevt.com *.klarnacdn.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.tapad.com *.rlcdn.com *.reson8.com *.cookiebot.com *.rawgit.com *.jsdelivr.net *.hspvst.com hspvst.com *.w55c.net w55c.net hotjar.com *.hotjar.com *.arkeero.net *.kelkoogroup.net *.mailchimp.com adroll.com *.adroll.com *.mmgo.io awin.com motionmailapp.com google.pt *.google.pt *.bidswitch.net *.outbrain.com *.openx.net *.rubiconproject.com *.pubmatic.com *.yahoo.com *.taboola.com *.adnxs.com *.3lift.com *.casalemedia.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com chimpstatic.com downloads.mailchimp.com *.list-manage.com polyfill.io *.googleapis.com *.google.com *.google.es *.google.com.br *.gstatic.com *.googletagmanager.com *.google-analytics.com *.g.doubleclick.net *.cookiebot.com *.oct8ne.com *.adyen.com *.klarna.com *.klarnacdn.net *.klarnaservices.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.adsmurai.com *.criteo.com *.hspvst.com hspvst.com *.w55c.net w55c.net hotjar.com *.hotjar.com *.arkeero.net *.kelkoogroup.net *.mailchimp.com *.amazonaws.com adroll.com *.adroll.com *.mmgo.io awin.com motionmailapp.com *.kk-resources.com *.googlesyndication.com www.xtento.com cdn.xtento.com *.stripe.com klarna.com *.klarnaevt.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com *.googleapis.com *.klarnacdn.net unsafe-inline assets.braintreegateway.com *.googletagmanager.com *.hspvst.com hspvst.com *.w55c.net w55c.net *.arkeero.net *.kelkoogroup.net *.mailchimp.com adroll.com *.adroll.com *.mmgo.io awin.com motionmailapp.com 'self' 'unsafe-inline'; object-src *.hspvst.com 'self' 'unsafe-inline'; media-src *.adobe.com *.hspvst.com 'self' 'unsafe-inline'; manifest-src *.hspvst.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google.com *.google.es *.google.com.br *.googletagmanager.com *.google-analytics.com *.g.doubleclick.net *.oct8ne.com *.adyen.com *.googleapis.com *.cookiebot.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com *.hspvst.com *.adroll.com *.adsmurai.com *.googlesyndication.com *.stripe.com klarna.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com *.hspvst.com http: https: blob: 'self' 'unsafe-inline'; default-src *.hspvst.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.hspvst.com 'self' 'unsafe-inline'; 1
frame-src 'self'; object-src 'none'; script-src 'self' cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://rebilly.github.io https://unpkg.com https://www.google.com maps.google.com platform.instagram.com platform.twitter.com 'nonce-vsttpLuxxxw0yurzJrKi3Q'; script-src-attr 'self'; style-src 'self' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src-attr 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://fonts.googleapis.com/ https://consent.cookiefirst.com https://edge.cookiefirst.com https://api.cookiefirst.com https://cdn.voiceflow.com *.googleapis.com https://geowidget.easypack24.net maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com addtoany.com bam.eu01.nr-data.net 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.youtube.com https://www.instagram.com https://google.com https://www.googletagmanager.com/ landofcoder.com https://geowidget-app.inpost.pl/ https://sandbox-easy-geowidget.easypack24.net/ *.addtoany.com bam.eu01.nr-data.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.apptrian.com magefan.com cm.magefan.com https://www.facebook.com https://www.google.de https://www.google.en https://www.google.pl https://www.google.com.ua https://www.google.com https://maps.gstatic.com https://cdn.voiceflow.com *.amazonaws.com https://www.lamillou.com https://scontent.cdninstagram.com https://*.fbcdn.net https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.addtoany.com bam.eu01.nr-data.net https://meetanshi.com/media/logo.png https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.apptrian.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleservices.com https://v2.zopim.com https://consent.cookiefirst.com https://edge.cookiefirst.com https://api.cookiefirst.com https://connect.facebook.net https://region1.google-analytics.com https://analytics.google.com https://www.instagram.com https://appleid.cdn-apple.com https://analytics.tiktok.com https://cdn.voiceflow.com landofcoder.com https://ipinfo.io *.fontawesome.com *.googleapis.com *.gstatic.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.addtoany.com bam.eu01.nr-data.net *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com www.gstatic.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://consent.cookiefirst.com https://www.google.com https://www.gstatic.com https://fast.fonts.net https://edge.cookiefirst.com https://api.cookiefirst.com https://cdn.voiceflow.com *.googleapis.com *.addtoany.com https://geowidget.easypack24.net https://geowidget.inpost.pl maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com www.gstatic.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com https://instagram.fhan5-6.fna.fbcdn.net https://*.fbcdn.net https://scontent.cdninstagram.com https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.apptrian.com https://widget-mediator.zopim.com https://consent.cookiefirst.com https://edge.cookiefirst.com https://api.cookiefirst.com https://www.facebook.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://analytics.google.com https://maps.gstatic.com https://pagead2.googlesyndication.com https://region1.analytics.google.com https://maps.googleapis.com https://google.com https://www.google.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://general-runtime.voiceflow.com https://graph.instagram.com landofcoder.com http://dpm.demdex.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.addtoany.com bam.eu01.nr-data.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-LQ1OL1DpPxCOaKqunGfjlg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'none'; script-src 'self' 'strict-dynamic' 'nonce-p6m3vUsszlXLMcxexbI1kw==' 'unsafe-inline' https:; script-src-attr 'none'; style-src 'self' 'unsafe-inline'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob: https://lh3.googleusercontent.com https://static-cdn.jtvnw.net https://*.cloudfront.net https://*.tiktokcdn.com https://obs-plugin.decart.ai https://*.decart.ai https://i.ytimg.com https://*.ggpht.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://www.google.com https://stats.g.doubleclick.net https://*.g.doubleclick.net https://ad.doubleclick.net https://www.google.ca https://www.google.com.mx https://www.google.com.br https://www.google.com.ar https://www.google.com.co https://www.google.com.pe https://www.google.com.cl https://www.google.com.uy https://www.google.com.ve https://www.google.co.uk https://www.google.de https://www.google.fr https://www.google.es https://www.google.it https://www.google.nl https://www.google.be https://www.google.ch https://www.google.at https://www.google.se https://www.google.no https://www.google.dk https://www.google.fi https://www.google.pt https://www.google.ie https://www.google.gr https://www.google.lu https://www.google.pl https://www.google.cz https://www.google.sk https://www.google.hu https://www.google.ro https://www.google.bg https://www.google.hr https://www.google.si https://www.google.lt https://www.google.lv https://www.google.ee https://www.google.com.tr https://www.google.ru https://www.google.ua https://www.google.co.il https://www.google.com.sa https://www.google.ae https://www.google.com.eg https://www.google.co.za https://www.google.co.ke https://www.google.com.ng https://www.google.co.jp https://www.google.co.kr https://www.google.co.in https://www.google.co.id https://www.google.co.th https://www.google.com.sg https://www.google.com.my https://www.google.com.ph https://www.google.com.vn https://www.google.com.pk https://www.google.com.hk https://www.google.com.tw https://www.google.com.au https://www.google.co.nz https://alb.reddit.com https://tr.snapchat.com https://analytics.twitter.com https://t.co https://snap.licdn.com https://px.ads.linkedin.com https://px4.ads.linkedin.com; media-src 'self' blob: https://*.ttvnw.net https://*.cloudfront.net; font-src 'self' data:; connect-src 'self' https://*.cloudfront.net https://us.i.posthog.com https://us-assets.i.posthog.com https://api.twitch.tv https://id.twitch.tv https://gql.twitch.tv https://usher.ttvnw.net wss://irc-ws.chat.twitch.tv https://accounts.google.com https://oauth2.googleapis.com https://www.googleapis.com https://generativelanguage.googleapis.com https://storage.googleapis.com https://api.kick.com https://id.kick.com https://open.tiktokapis.com https://api.veriff.me https://*.decart.ai wss://*.decart.ai https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://www.google.com https://stats.g.doubleclick.net https://*.g.doubleclick.net https://ad.doubleclick.net https://pixel-config.reddit.com https://tr.snapchat.com https://analytics.twitter.com https://t.co https://snap.licdn.com https://px.ads.linkedin.com https://px4.ads.linkedin.com ws://127.0.0.1:* https://*.workers.dev wss://*.workers.dev; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://station.veriff.com https://www.googletagmanager.com; frame-ancestors 'none'; form-action 'self'; base-uri 'self'; object-src 'none'; worker-src 'self' blob:; manifest-src 'self'; report-to csp-endpoint 1
script-src 'self' https://cdnjs.cloudflare.com; script-src-attr 'self'; style-src 'self' https://cdnjs.cloudflare.com; style-src-attr 'self'; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-SSB0eg3eCTdwTYbKqwJONA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
frame-src 'self' *.house.gov congress.gov www.congress.gov *.congressnewsletter.net www.google.com www.instagram.com www.facebook.com platform.twitter.com video.teleforumonline.com vekeo.com syndication.twitter.com pixel-sync.sitescout.com www.googletagmanager.com www.youtube.com syndicatedsearch.goog m.facebook.com ws.sharethis.com web.facebook.com pixel.sitescout.com www.youtube-nocookie.com video.ibm.com www.ustream.tv creators.spotify.com podcasters.spotify.com anchor.fm www.c-span.org www.census.gov http://www.youtube.com www.washingtonpost.com maps.google.com house.us1.list-manage.com house.us21.list-manage.com http://www.youtube-nocookie.com googleads.g.doubleclick.net authenticate.ibotta.com sts1.auth.ecuf.deas.mil safe.menlosecurity.com cdn.flipsnack.com www.canva.com vastcdn.outbrain.com tpc.googlesyndication.com *.safeframe.googlesyndication.com imasdk.googleapis.com denied.schoolsbroadband.net docs.google.com w.soundcloud.com lookerstudio.google.com storify.com rumble.com uw-media.app.com interactive.tegna-media.com disqus.com embed.podcasts.apple.com; report-uri https://api.web.fireside21.app/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://consent.cookiebot.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https://www.google.com https://consent.cookiebot.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
default-src 'self';         script-src 'self' 'unsafe-inline' 'unsafe-eval' https://altinea.fr https://cdn.astra.com https://static.elfsight.com https://core.service.elfsight.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com/recaptcha/api.js;         style-src 'self' 'unsafe-inline' https://altinea.fr https://cdn.astra.com https://fonts.googleapis.com https://use.fontawesome.com/releases/v6.6.0/css/v4-shims.css https://use.fontawesome.com/releases/v6.6.0/css/all.css https://use.typekit.net/gme6kbk.css https://p.typekit.net/gme6kbk.css;         img-src 'self' https://altinea.fr data: *.webp;         font-src 'self' https://altinea.fr/wp-content/ https://fonts.gstatic.com https://use.fontawesome.com/releases/v6.6.0/fonts/ https://use.typekit.net/fonts/ data:;         connect-src 'self' https://altinea.fr https://core.service.elfsight.com https://www.google.com;         media-src 'self' https://altinea.fr;         frame-src 'self' https://altinea.fr https://www.google.com;         object-src 'none';         base-uri 'self';         form-action 'self';         upgrade-insecure-requests;         report-uri https://votreservice.report-uri.com/r/d/csp/reportOnly; 1
base-uri 'self'; form-action 'self'; frame-ancestors 'self'; frame-src https://www.googletagmanager.com; 1
object-src  'none'; connect-src 'self' *.21sextury.com *.21members.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.21sextury.com *.21members.com join.gammasecure.com; script-src 'self' *.21sextury.com *.21members.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.21sextury.com *.21members.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
base-uri 'self'; default-src 'self' https: wss: ws:; script-src 'self' 'unsafe-eval' https://cdn.jsdelivr.net/npm/cross-storage@1.0.0/dist/hub.min.js https://og-frontend.stg-east.frontend.public.atl-paas.net/assets/ https://*.services.atlassian.com https://code.jquery.com/jquery-3.6.0.min.js https://remote-app-switcher.stg-east.frontend.public.atl-paas.net https://translate.googleapis.com/_/translate_http/_/js/ https://ajax.googleapis.com/ajax/libs/jqueryui/1.13.2/jquery-ui.min.js https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js https://js.intercomcdn.com https://widget.intercom.io/widget/ https://www.gstatic.com/recaptcha/releases/ https://www.google.com/recaptcha/ https://js.stripe.com https://meet.jit.si https://bam.nr-data.net 'sha256-u8Qc9T1x0D5Z/CHTQ498yO/+i2ySExBMOwf4RL2t4WI=' 'sha256-FV4wGfcn2NrqSJwtGQUWZ2Ie5XrIVKqtnc6g2gmRRco=' 'sha256-6wRdeNJzEHNIsDAMAdKbdVLWIqu8b6+Bs+xVNZqplQw=' 'sha256-N6H1UNp6u4dhUx+FZUQMMcXz17KIEWQw+ZVCPp4d3Zo=' 'sha256-qyYeb40S0YW7zrzwvSX5SEThkjXxwfWSwDp+FlCY0ic=' 'sha256-XHhqFY/vlAF49XCJL4Eg+ttSAnGAobln30utBWOcPhU=' 'sha256-L8u6aiCFdh23FnTLOjO9T7p6zkSJPTaOzZoZUz9OnVQ=' 'sha256-ZMCyrJrkz95Pmv4GzcpT7uihWvUib4x2CFIKGfMsuYU=' 'sha256-ffGUIypjdVM8v7ybOzYmI52fKI8S9IVsUI1OqyrUw8Q=' 'sha256-4qVpzn2Bx0qK9KtIsF/n3VVomtjXD/qPqKpKFNRrMWY=' 'sha256-eETIIu3VZ7EA7inGoTk/IDe2GZACdmowaBuJOhm6Bik=' 'nonce-d783803ba7ba470e9ecb4728e9599a63'; style-src 'self' 'unsafe-inline' https://*.opsgeni.us https://og-frontend.stg-east.frontend.public.atl-paas.net/assets/ https://fonts.googleapis.com/css2 data:; img-src 'self' data: https:; font-src 'self' https://og-frontend.stg-east.frontend.public.atl-paas.net/assets/ https://fonts.intercomcdn.com https://fonts.gstatic.com data:; frame-ancestors 'self' https://*.app.opsgeni.us https://*.opsgeni.us https://*.atlassian.net chrome-extension://dmjofbngkpnmmiccjhikngiodkbofnpc chrome-extension://deejhllflojhohbeechaicbcofamcbkp; form-action 'self'; report-uri https://web-security-reports.services.atlassian.com/csp-report/og-frontend; report-to csp-default-endpoint; connect-src 'self' https: wss: ws:; object-src 'none'; frame-src 'self' https://*.opsgeni.us https://intercom-sheets.com https://*.atlassian.com https://*.opsgenie.com https://js.stripe.com https://reporting.opsgenie.com https://www.google.com 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com *.disqus.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com https://img.youtube.com https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com ipinfo.io *.disqus.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.avada.io *.shopify.com *.alothemes.com *.magepow.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.googletagmanager.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com ipinfo.io *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; frame-src 'self' https://www.youtube.com https://player.vimeo.com https://www.googletagmanager.com; connect-src 'self' https://www.google-analytics.com; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self' blob:  https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com; frame-src 'self' https://*.noxiaohao.com https://telegram.org https://*.bitget.com https://accounts.google.com https://oauth.telegram.org https://sgtm.btsgtm.com ; script-src 'self' 'nonce-NdnNQdHjZZmZz4gnDrJeKg==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh/v3RIRuG3kMikr5iha+7P/0TN/GNA=' https://*.noxiaohao.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com https://accounts.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://play.google.com https://analytics.google.com https://fonts.gstatic.com https://telegram.org https://oauth.telegram.org https://*.geetest.com https://*.geevisit.com https://sgtm.btsgtm.com; connect-src 'self' wss: https://stats.g.doubleclick.net https://analytics.google.com https://www.google.com wss://stream.bitget.cloud https://*.noxiaohao.com wss://*.noxiaohao.com wss://*.bitget.com https://www.turingfraud.net https://play.google.com https://accounts.google.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com https://telegram.org https://oauth.telegram.org https://static.geetest.com https://static.geevisit.com https://sgtm.btsgtm.com ; worker-src 'self' blob:; img-src 'self' data: blob: https://www.googletagmanager.com https://img.bgbstatic.com https://*.bgstatic.com https://img.bitgetimg.com https://img.gurenla.com https://*.bgbstatic.com https://lh3.googleusercontent.com https://static.geetest.com https://static.geevisit.com https://static-web.jjdsn.vip https://cdn.bitkeep.vip https://www.google.co.jp https://bin.wangsustatic.com https://sgtm.btsgtm.com https://analytics.google.com https://stats.g.doubleclick.net ; style-src 'self' 'unsafe-inline' https://static.geetest.com https://static.geevisit.com https://accounts.google.com https://fonts.googleapis.com https://static.bgbstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com; font-src 'self' data: https://static.geetest.com https://static.geevisit.com https://fonts.gstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.bitget.com; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri /v1/buried/log/cspSecurity /v1/monitor/csp?appId=d4b6df7d; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com www.crossdrilledrotors.ca data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.reddit.com *.reddit.net *.facebook.com *.facebook.net www.crossdrilledrotors.ca 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com www.crossdrilledrotors.ca 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.reddit.com *.reddit.net *.facebook.com *.facebook.net *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com challenges.cloudflare.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com www.crossdrilledrotors.ca 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.reddit.com *.reddit.net magefan.com cm.magefan.com *.facebook.com *.facebook.net *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com www.crossdrilledrotors.ca data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.reddit.com *.reddit.net https://www.redditstatic.com/ https://www.redditstatic.com/ads/ *.facebook.com *.facebook.net *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.avada.io challenges.cloudflare.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com www.crossdrilledrotors.ca 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.googleapis.com *.googletagmanager.com *.fontawesome.com *.stripe.network *.stripecdn.com *.amazon.com www.crossdrilledrotors.ca 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.crossdrilledrotors.ca 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.reddit.com *.reddit.net *.facebook.com *.facebook.net *.google-analytics.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog https://get.geojs.io *.avada.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com www.crossdrilledrotors.ca 'self' 'unsafe-inline'; child-src www.crossdrilledrotors.ca http: https: blob: 'self' 'unsafe-inline'; default-src www.crossdrilledrotors.ca 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' https://d2wy8f7a9ursnm.cloudfront.net https://www.gstatic.com https://www.googleapis.com https://maps.googleapis.com https://static.carelinx.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://code.jquery.com https://cdn.bugsnag.com; connect-src 'self' https://maps.googleapis.com https://firestore.googleapis.com https://sessions.bugsnag.com https://notify.bugsnag.com ; style-src 'self' https://static.carelinx.com https://maxcdn.bootstrapcdn.com; font-src 'self' https://static.carelinx.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; report-uri https://api.carelinx.com/csp-report/ 1
default-src 'self'; script-src 'self' 'nonce-iDAowPlJql7lE4-XgHYULgGh6REGbLF3P4yXU_1N4Ynmb-Zbz_I0aw' 'unsafe-eval' 'strict-dynamic' https://sentry.punkt.de https://analytics.ph-karlsruhe.de https://*.analytics.ph-karlsruhe.de 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://analytics.ph-karlsruhe.de https://*.analytics.ph-karlsruhe.de https://sentry.punkt.de; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com; style-src 'self' 'unsafe-inline' 'report-sample'; connect-src 'self' https://sentry.punkt.de https://analytics.ph-karlsruhe.de https://*.analytics.ph-karlsruhe.de https://jobs.b-ite.com; report-uri https://sentry.punkt.de/api/62/security/?sentry_key=f04df077af0fc11b78c4f28edc3e2b8b 1
default-src 'self' data: 'unsafe-inline' d.bongo4u.com; script-src 'self' data: 'unsafe-inline' d.bongo4u.com blob: 'unsafe-eval' bongo4u.com *.bongo4u.com *.emerge2.com *.google.com *.gstatic.com *.google-analytics.com *.googleapis.com *.googleusercontent.com *.googleadservices.com *.googletagmanager.com *.facebook.net *.twitter.com *.twimg.com *.youtube.com youtu.be *.ytimg.com *.yahooapis.com *.mailchimp.com *.list-manage.com chimpstatic.com *.ipify.org jsonip.com *.amazonaws.com/downloads.mailchimp.com/ *.jquery.com *.hotjar.com acsbapp.com *.bootstrapcdn.com googleads.g.doubleclick.net *.elfsight.com *.createsend1.com *.roomvo.com; connect-src 'self' data: 'unsafe-inline' d.bongo4u.com comments.emerge2.com util.emerge2.com bongo4u.com *.emerge2.com *.google-analytics.com *.googletagmanager.com *.google.com *.google.ca *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.doubleclick.net *.facebook.com *.hotjar.io *.hotjar.com acsbapp.com *.acsbapp.com *.elfsight.com createsend.com *.ipify.org *.mailchimp.com *.catalog-display.com *.roomvo.com *.opencagedata.com *.googleusercontent.com; frame-src 'self' data: 'unsafe-inline' d.bongo4u.com bongo4u.com *.google.com *.google.ca *.googleapis.com *.googletagmanager.com *.youtube.com *.youtu.be *.facebook.com *.twitter.com *.twimg.com *.instagram.com *.yahoo.com *.catalog-display.com *.shortstack.com *.pgtb.me *.formstack.com *.list-manage.com *.doubleclick.net *.orgill.com *.orgill.ca *.adobe.com *.hotjar.com *.storefrontcloud.io *.roomvo.com *.loom.com; object-src 'self' data: 'unsafe-inline' d.bongo4u.com  blob: *.apple.com *.macromedia.com; img-src 'self' https: data: blob: d.bongo4u.com *.bongo4u.com *.ytimg.com *.orgill.com android-webview-video-poster; media-src 'self' https: data: d.bongo4u.com; style-src 'self' data: 'unsafe-inline' d.bongo4u.com bongo4u.com *.bongo4u.com *.googletagmanager.com *.google.com *.google-analytics.com *.googleapis.com *.googleusercontent.com *.bootstrapcdn.com *.twitter.com *.twimg.com *.mailchimp.com *.cloudflare.com/ajax/libs/; font-src 'self' data: 'unsafe-inline' d.bongo4u.com *.googleapis.com fonts.gstatic.com *.bootstrapcdn.com fonts.cdnfonts.com *.googleusercontent.com *.cloudflare.com/ajax/libs/ *.hotjar.com *.acsbapp.com;  report-uri https://util.emerge2.com/csp_violations_tracker.php; 1
object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://use.fontawesome.com https://static.ctctcdn.com https://www.google.com https://www.gstatic.com https://t.sharethis.com https://platform-api.sharethis.com https://www.googletagmanager.com https://www.google-analytics.com https://s3-us-west-2.amazonaws.com https://crm.bloomerang.co https://ajax.aspnetcdn.com https://aacdn.nagich.com https://access.nagich.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://unpkg.com https://ws.sharethis.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://use.fontawesome.com https://static.ctctcdn.com https://aacdn.nagich.com https://www.google.com https://www.gstatic.com https://t.sharethis.com https://platform-api.sharethis.com https://www.googletagmanager.com https://www.google-analytics.com https://s3-us-west-2.amazonaws.com https://crm.bloomerang.co https://ajax.aspnetcdn.com https://access.nagich.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://unpkg.com https://ws.sharethis.com; style-src 'self'; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://cloud.typography.com https://cdnjs.cloudflare.com https://use.fontawesome.com https://static.ctctcdn.com https://ws.sharethis.com https://aacdn.nagich.com https://access.nagich.com; frame-ancestors 'self' 1
default-src * data: 'unsafe-eval' 'unsafe-inline' blob: 1
worker-src 'self' blob:; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net cash-f.squarecdn.com https://*.gstatic.com *.gstatic.com *.cloudinary.com *.klarnacdn.net *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com *.narvar.com *.narvar.qa *.abtasty.com applepay.cdn-apple.com cdnjs.cloudflare.com *.yottaa.net use.fontawesome.com maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.adyen.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com cloudinary.com *.cloudinary.com 'self' connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com forms.hsforms.com globalshopex.com api.ometria.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com self www.google.com *.krxd.net *.attn.tv 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com * *.adyen.com *.certcapture.com cloudinary.com *.cloudinary.com cdnjs.cloudflare.com *.klarna.com www.google.com www.gstatic.com apis.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com *.google.com forms.hsforms.com cdn.krxd.net ct.pinterest.com globalshopex.com scrubsandbeyond.ytuz.net *.attn.tv *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.ftcdn.net *.behance.net * https://*.gstatic.com *.adyen.com *.certcapture.com cloudinary.com *.cloudinary.com blob: *.klarna.com *.klarnaevt.com *.klarnacdn.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.narvar.com *.narvar.qa *.ometria.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.abtasty.com aa.agkn.com *.amazonaws.com *.bing.com *.clarity.ms maps.gstatic.com maps.googleapis.com forms.hsforms.com track.hubspot.com beacon.krxd.net *.pinterest.com *.px-cloud.net track.sv.rkdms.com www.scrubsandbeyond.com *.yottaa.net fonts.gstatic.com track.securedvisit.com scrubsandbeyond.ytuz.net events.attentivemobile.com *.yotpo.com swellrewards.com *.swellrewards.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com *.certcapture.com cloudinary.com *.cloudinary.com cdnjs.cloudflare.com *.vimeo.com unpkg.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.googleapis.com *.google.com *.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com cdn.amplitude.com *.abtasty.com bat.bing.com www.clarity.ms cnstrc.com maps.googleapis.com js.hs-analytics.net js.hs-banner.com js.hscollectedforms.net js.hsforms.net *.hs-scripts.com *.krxd.net action.media6degrees.com s.pinimg.com ct.pinterest.com assets.pinterest.com seoab.io *.yottaa.net rapid-cdn.yottaa.com *.yottaa-prod.com api.consentjs.datagrail.io globalshopex.com *.securedvisit.com d.impactradius-event.com cdn.noibu.com *.attn.tv api.segment.io cdn.segment.com *.yotpo.com swellrewards.com *.swellrewards.com js.zi-scripts.com platform.twitter.com *.ometria.com https://tkzgz.scrubsandbeyond.com https://globalshopex.com https://www.scrubsandbeyond.com https://cdn.ometria.com http: https: blob: 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.certcapture.com cloudinary.com *.cloudinary.com *.googleapis.com unpkg.com *.klarnacdn.net *.fontawesome.com *.google.com *.gstatic.com assets.braintreegateway.com *.abtasty.com *.yottaa.net use.typekit.net p.typekit.net www.googletagmanager.com ometria.email *.yotpo.com swellrewards.com *.swellrewards.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com cloudinary.com *.cloudinary.com *.narvar.com *.narvar.qa 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io * *.adyen.com *.certcapture.com cloudinary.com *.cloudinary.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com google.com/pay pay.google.com https://*.cnstrc.com *.amazonaws.com *.abtasty.com bat.bing.com *.clarity.ms stats.g.doubleclick.net accounts.google.com fonts.googleapis.com maps.googleapis.com forms.hubspot.com forms.hsforms.com api.ipify.org www.iplocate.io *.ingest.sentry.io ct.pinterest.com *.px-cloud.net seoab.io storage.googleapis.com event-service-jtdpxp3bfa-ew.a.run.app *.yottaa.net scrubsandbeyond.ytuz.net cdn.noibu.com input.noibu.com wss://input.noibu.com *.attn.tv events.attentivemobile.com tkzgz.scrubsandbeyond.com https://api.scrubsandbeyond.com/api/locations *.yotpo.com swellrewards.com *.swellrewards.com *.ometria.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' 'nonce-9FUXhhMqOng+xxQbw3nEEoef8yY=' 'strict-dynamic' 'unsafe-eval'; object-src 'none'; 1
default-src 'self' https://d2v8pn2kg220hg.cloudfront.net/428a47a6-6ac1-443e-b83f-f4b54053c7c4/ ; script-src 'self' https://d2v8pn2kg220hg.cloudfront.net/428a47a6-6ac1-443e-b83f-f4b54053c7c4/ 'unsafe-inline' 'unsafe-eval' https://unpkg.com/tailwindcss@%5E1.0/ https://unpkg.com/tailwindcss@^1.0/ https://unpkg.com/trix@1.2.3/ https://cdn.jsdelivr.net/jquery/ https://cdn.jsdelivr.net/momentjs/ https://cdn.jsdelivr.net/npm/daterangepicker/ https://cdn.jsdelivr.net/npm/ace-builds@1.43.1/ https://cdn.jsdelivr.net/npm/ace-builds@1.43.3/ https://a.slack-edge.com https://s3.amazonaws.com/media.mycurricula.com/ https://media.mycurricula.com.s3.amazonaws.com https://s3.us-east-1.amazonaws.com/media.mycurricula.com/ https://s3.amazonaws.com/media.aws-cdn/ https://media.aws-cdn.s3.amazonaws.com https://s3.us-east-1.amazonaws.com/media.aws-cdn/ https://s3.amazonaws.com/aware-production/ https://aware-production.s3.amazonaws.com https://s3.us-east-1.amazonaws.com/aware-production/ https://s3.amazonaws.com/curricula-phishing/ https://curricula-phishing.s3.amazonaws.com https://s3.us-east-1.amazonaws.com/curricula-phishing/ https://cmp.osano.com https://snippet.maze.co https://challenges.cloudflare.com https://ajax.cloudflare.com/cdn-cgi/scripts/ https://ajax.aspnetcdn.com https://appsforoffice.microsoft.com https://cdn.amplitude.com https://js.stripe.com https://cdn.mycurricula.com/external/experiences/ ; style-src 'self' https://d2v8pn2kg220hg.cloudfront.net/428a47a6-6ac1-443e-b83f-f4b54053c7c4/ 'unsafe-inline' https://unpkg.com/tailwindcss@%5E1.0/ https://unpkg.com/tailwindcss@^1.0/ https://unpkg.com/trix@1.2.3/ https://cdn.jsdelivr.net/npm/daterangepicker/ https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com/bootstrap/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://use.fontawesome.com https://static.licdn.com https://a.slack-edge.com https://s3.amazonaws.com/media.mycurricula.com/ https://media.mycurricula.com.s3.amazonaws.com https://s3.us-east-1.amazonaws.com/media.mycurricula.com/ https://s3.amazonaws.com/media.aws-cdn/ https://media.aws-cdn.s3.amazonaws.com https://s3.us-east-1.amazonaws.com/media.aws-cdn/ https://s3.amazonaws.com/aware-production/ https://aware-production.s3.amazonaws.com https://s3.us-east-1.amazonaws.com/aware-production/ https://s3.amazonaws.com/curricula-phishing/ https://curricula-phishing.s3.amazonaws.com https://s3.us-east-1.amazonaws.com/curricula-phishing/ https://assets-cdn.maze.co https://cdn.mycurricula.com/external/experiences/ ; img-src * data: blob: ; font-src 'self' https://d2v8pn2kg220hg.cloudfront.net/428a47a6-6ac1-443e-b83f-f4b54053c7c4/ data: https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com/font-awesome/ https://use.fontawesome.com https://a.slack-edge.com https://s3.amazonaws.com/media.mycurricula.com/ https://media.mycurricula.com.s3.amazonaws.com https://s3.us-east-1.amazonaws.com/media.mycurricula.com/ https://s3.amazonaws.com/media.aws-cdn/ https://media.aws-cdn.s3.amazonaws.com https://s3.us-east-1.amazonaws.com/media.aws-cdn/ https://s3.amazonaws.com/aware-production/ https://aware-production.s3.amazonaws.com https://s3.us-east-1.amazonaws.com/aware-production/ https://s3.amazonaws.com/curricula-phishing/ https://curricula-phishing.s3.amazonaws.com https://s3.us-east-1.amazonaws.com/curricula-phishing/ https://assets-cdn.maze.co https://i.s-microsoft.com/fonts/ https://cdn.mycurricula.com/external/experiences/ ; media-src 'self' https://d2v8pn2kg220hg.cloudfront.net/428a47a6-6ac1-443e-b83f-f4b54053c7c4/ data: https://s3.amazonaws.com/media.mycurricula.com/ https://media.mycurricula.com.s3.amazonaws.com https://s3.us-east-1.amazonaws.com/media.mycurricula.com/ https://s3.amazonaws.com/media.aws-cdn/ https://media.aws-cdn.s3.amazonaws.com https://s3.us-east-1.amazonaws.com/media.aws-cdn/ https://s3.amazonaws.com/aware-production/ https://aware-production.s3.amazonaws.com https://s3.us-east-1.amazonaws.com/aware-production/ https://s3.amazonaws.com/curricula-phishing/ https://curricula-phishing.s3.amazonaws.com https://s3.us-east-1.amazonaws.com/curricula-phishing/ https://cdn.mycurricula.com ; connect-src 'self' https://d2v8pn2kg220hg.cloudfront.net/428a47a6-6ac1-443e-b83f-f4b54053c7c4/ data: blob: https://cdn.plyr.io https://s3.amazonaws.com/media.mycurricula.com/ https://media.mycurricula.com.s3.amazonaws.com https://s3.us-east-1.amazonaws.com/media.mycurricula.com/ https://s3.amazonaws.com/media.aws-cdn/ https://media.aws-cdn.s3.amazonaws.com https://s3.us-east-1.amazonaws.com/media.aws-cdn/ https://s3.amazonaws.com/aware-production/ https://aware-production.s3.amazonaws.com https://s3.us-east-1.amazonaws.com/aware-production/ https://s3.amazonaws.com/curricula-phishing/ https://curricula-phishing.s3.amazonaws.com https://s3.us-east-1.amazonaws.com/curricula-phishing/ https://tattle.api.osano.com https://prompts.maze.co https://graph.microsoft.com https://browser-intake-datadoghq.com https://cdn.jsdelivr.net/codemirror.spell-checker/ wss://sat-ws.mycurricula.com https://sr-client-cfg.amplitude.com https://api-sr.amplitude.com https://gs.amplitude.com https://api2.amplitude.com/2/httpapi https://api.eu.amplitude.com/2/httpapi https://api.lab.amplitude.com https://flag.lab.amplitude.com https://cdn.mycurricula.com/external/experiences/ ; worker-src 'self' https://d2v8pn2kg220hg.cloudfront.net/428a47a6-6ac1-443e-b83f-f4b54053c7c4/ blob: ; frame-src 'self' https://d2v8pn2kg220hg.cloudfront.net/428a47a6-6ac1-443e-b83f-f4b54053c7c4/ https://breach-notice.com https://businessnotice.org https://databoxonline.com https://electronic-hr.com https://emailtransaction.com https://employee-services.org https://feedback-collect.com https://filesharingnow.com https://fraud-assistance.com https://governmentnotice.org https://invite-meeting.com https://mailbox-quota.com https://news-article.com https://notificationservices.org https://passwordsnotification.com https://payment-process.com https://securelinkedin.com https://security-updater.com https://securitynotifications.org https://t.maze.co https://challenges.cloudflare.com https://js.stripe.com https://www.youtube.com https://player.vimeo.com ; manifest-src 'self' https://d2v8pn2kg220hg.cloudfront.net/428a47a6-6ac1-443e-b83f-f4b54053c7c4/ https://s3.amazonaws.com/media.mycurricula.com/ https://media.mycurricula.com.s3.amazonaws.com https://s3.us-east-1.amazonaws.com/media.mycurricula.com/ https://s3.amazonaws.com/media.aws-cdn/ https://media.aws-cdn.s3.amazonaws.com https://s3.us-east-1.amazonaws.com/media.aws-cdn/ https://s3.amazonaws.com/aware-production/ https://aware-production.s3.amazonaws.com https://s3.us-east-1.amazonaws.com/aware-production/ https://s3.amazonaws.com/curricula-phishing/ https://curricula-phishing.s3.amazonaws.com https://s3.us-east-1.amazonaws.com/curricula-phishing/ https://cdn.mycurricula.com/external/experiences/ ; child-src 'self' https://d2v8pn2kg220hg.cloudfront.net/428a47a6-6ac1-443e-b83f-f4b54053c7c4/ blob: ; report-uri https://mycurricula.com/_/csp/report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com https://plugin-magento-ui.glopalservice.com maxcdn.bootstrapcdn.com *.salesfire.co.uk data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com *.bugherd.com *.livechatinc.com *.livechat.com *.stripe.com *.stripe.network klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com account.fetchify.com js.mollie.com *.salesfire.co.uk 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com *.sweetanalytics.com *.brooktaverner.us *.visualwebsiteoptimizer.com *.bing.com *.clarity.ms *.google.co.uk *.livechatinc.com *.livechat.com *.stripe.com *.stripe.network *.google.com ebizmarts-website.s3.amazonaws.com brippo.s3.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klarna.com *.klarnaevt.com *.klarnacdn.net magefan.com cm.magefan.com mageside.com https://maps.googleapis.com https://maps.gstatic.com https://www.mollie.com *.salesfire.co.uk data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com *.trustpilot.com *.glopal.com *.sweetanalytics.com *.ads-twitter.com *.twitter.com *.googletagmanager.com *.visualwebsiteoptimizer.com *.zdassets.com *.bing.com *.clarity.ms *.adroll.com *.bugherd.com *.livechatinc.com *.livechat.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.sagepay.com *.opayo.eu.elavon.com cc-cdn.com https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com cdn-renderer.glopalstore.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ x.klarnacdn.net *.klarnaservices.com js.mollie.com pay.google.com applepay.cdn-apple.com *.salesfire.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com https://fonts.googleapis.com *.certcapture.com *.glopal.com *.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com *.sagepay.com *.opayo.eu.elavon.com cc-cdn.com https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com https://static.klaviyo.com maxcdn.bootstrapcdn.com *.klarnacdn.net *.salesfire.co.uk *.typekit.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com *.sweetanalytics.com *.zopim.com *.clarity.ms brooktaverner.zendesk.com *.zdassets.com *.livechatinc.com *.livechat.com *.stripe.com *.stripe.network klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com fonts.googleapis.com fonts.gstatic.com *.sagepay.com *.opayo.eu.elavon.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com https://api-plugin-facade.glopalservice.com https://cognito-idp.eu-west-1.amazonaws.com api.glopaltranslator.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ x.klarnacdn.net *.klarnaservices.com *.salesfire.co.uk *.smartmetrics.co.uk 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce--np6ZkrRpagkjef57Dmi0w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-yNMTm7n8bvXfojrQ4EgXyg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.linearicons.com *.fontawesome.com *.tawk.to maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com gettysburgflagworks.referralrock.com *.adroll.com *.livechatinc.com *.googletagmanager.com *.facebook.com td.doubleclick.net tsdtocl.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.facebook.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.certcapture.com *.google.com *.google.com.vn *.tapad.com *.adroll.com *.reson8.com *.adnxs.com *.livechat-files.com *.taboola.com *.gravatar.com *.gleam.io *.casalemedia.com *.zaius.com ml314.com *.apptrian.com www.sandbox.paypal.com s3.us-east-1.amazonaws.com *.bidswitch.com *.bidswitch.net *.rlcdn.com *.outbrain.com *.pubmatic.com *.3lift.com *.rubiconproject.com *.openx.com *.openx.net *.company-target.com *.adsrvr.org *.googletagmanager.com *.facebook.net *.liadm.com *.cloudfront.net b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.certcapture.com widget.freshworks.com m2epro.freshdesk.com *.cloudflare.com *.googleadservices.com *.trustedshops.com *.usercentrics.eu *.jsdelivr.net *.tawk.to *.paypalobjects.com *.paypal.com *.facebook.net chimpstatic.com *.googleapis.com *.googletagmanager.com *.adroll.com *.adroll.mgr.consensu.org *.cloudfront.net gleam.io *.casalemedia.com *.zaius.com s3.us-east-1.amazonaws.com *.google-analytics.com *.gstatic.com cdn.jsdelivr.net *.cloudfront.com unsafe-inline *.livechatinc.com *.hotjar.com *.taboola.com *.gravatar.com *.gleam.io *.cloudflareinsights.com gettysburgflagworks.referralrock.com *.apptrian.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com maps.googleapis.com cdn.ampproject.org www.gstatic.com connect.facebook.net tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com widget.freshworks.com m2epro.freshdesk.com *.linearicons.com *.fontawesome.com *.tawk.to *.cloudfront.net *.googletagmanager.com *.livechatinc.com *.gleam.io *.hotjar.com *.adroll.com *.livechat-files.com *.taboola.com *.gravatar.com *.casalemedia.com *.zaius.com assets.braintreegateway.com www.gstatic.com maxcdn.bootstrapcdn.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.certcapture.com widget.freshworks.com m2epro.freshdesk.com analytics.google.com googleads.g.doubleclick.net stats.g.doubleclick.net *.youtube.com paypal.com *.paypalobjects.com bam.eu01.nr-data.net *.tawk.to *.facebook.net chimpstatic.com *.googleapis.com *.googletagmanager.com *.amazonaws.com *.adroll.com *.adroll.mgr.consensu.org *.taboola.com *.gravatar.com *.gleam.io *.casalemedia.com *.zaius.com s3.us-east-1.amazonaws.com *.hotjar.com *.hotjar.io nexus-websocket-a.intercom.io *.apptrian.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com cdn.ampproject.org www.googleapis.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src-elem * 'unsafe-inline'; font-src *.googleapis.com *.gstatic.com data: *.bootstrapcdn.com *.yotpo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com *.yotpo.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com *.kaltura.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.yotpo.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.zdassets.com *.kaltura.com chimpstatic.com downloads.mailchimp.com *.list-manage.com s7.addthis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com *.yotpo.com https://cdn-scripts.signifyd.com https://imgs.signifyd.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.bootstrapcdn.com downloads.mailchimp.com unsafe-inline assets.braintreegateway.com tagmanager.google.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com *.zendesk.com *.zdassets.com *.signifyd.com ekr.zdassets.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://www.google-analytics.com *.yotpo.com https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.hubspot.com *.hs-scripts.com *.hs-analytics.net *.hsadspixel.net *.hs-banner.com *.hscollectedforms.net *.hsleadflows.net *.hsforms.net *.hsforms.com *.usemessages.com js.hscta.net static.hsappstatic.net *.hubspot.net *.hubspotusercontent-na1.net *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net snap.licdn.com app.lemlist.com analytics.ahrefs.com; connect-src 'self' *.hubapi.com *.hubspot.com *.hs-banner.com *.hscollectedforms.net *.hsforms.com js.hscta.net *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net px.ads.linkedin.com www.google.com *.licdn.com *.linkedin.com app.lemlist.com analytics.ahrefs.com; img-src 'self' data: blob: *.hubspot.com no-cache.hubspot.com js.hscta.net cdn2.hubspot.net *.hubspot.net *.hubspotusercontent-na1.net *.hsforms.net *.hsforms.com static.hsappstatic.net *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net px.ads.linkedin.com *.ytimg.com www.google.com *.licdn.com *.linkedin.com; style-src 'self' 'unsafe-inline' cdn2.hubspot.net *.hubspotusercontent-na1.net fonts.googleapis.com static.hsappstatic.net; font-src 'self' data: fonts.gstatic.com static.hsappstatic.net; frame-src 'self' *.hubspot.com *.hs-sites.com *.hsforms.net *.hsforms.com play.hubspotvideo.com *.hubspot.net www.youtube.com www.youtube-nocookie.com *.linkedin.com *.doubleclick.net *.googleadservices.com 1
font-src *.gstatic.com 'self' data: https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action https://www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ https://d.hobbyshop-online.nl https://ct.pinterest.com https://www.facebook.com https://www.googletagmanager.com https://td.doubleclick.net 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.google-analytics.com *.vimeocdn.com i.ytimg.com *.youtube.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://banners.helloretailcdn.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com cdn.magmodules.eu *.hsforms.net *.hsforms.com 'self' data: https://maps.gstatic.com https://imgproxy.vendic.dev data: 'self' 'unsafe-inline'; script-src www.google-analytics.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://core.helloretail.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com d5yoctgpv4cpx.cloudfront.net p2iqhncxyh.execute-api.eu-central-1.amazonaws.com https://maps.googleapis.com https://player.vimeo.com *.disqus.com https://cdn.jsdelivr.net *.hsforms.net *.hsforms.com *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com downloads.mailchimp.com https://cdn.jsdelivr.net *.googleapis.com *.gstatic.com https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com *.newrelic.com *.nr-data.net https://core.helloretail.com https://helloretailcdn.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com d5yoctgpv4cpx.cloudfront.net p2iqhncxyh.execute-api.eu-central-1.amazonaws.com https://maps.googleapis.com https://player.vimeo.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com https://www.google.com *.pay.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://translate.google.com https://translate.googleapis.com https://translate-pa.googleapis.com https://www.gstatic.com https://www.cognitoforms.com; style-src 'self' 'unsafe-inline' https://translate.googleapis.com https://www.gstatic.com; img-src 'self' data: blob: https://images.ctfassets.net https://cdn.mappedin.com https://resize-worker.mappedin.com https://www.googletagmanager.com https://*.google-analytics.com https://www.google-analytics.com https://translate.google.com https://translate.googleapis.com https://www.gstatic.com https://fonts.gstatic.com https://www.cognitoforms.com; font-src 'self' data: https://fonts.gstatic.com; media-src 'self' https://videos.ctfassets.net; connect-src 'self' https://*.algolia.net https://*.algolianet.com https://*.algolia.io https://o232156.ingest.us.sentry.io https://www.googletagmanager.com https://*.google-analytics.com https://www.google-analytics.com https://stats.g.doubleclick.net https://translate.googleapis.com https://translate-pa.googleapis.com https://consentcdn.cookiebot.com https://cdn.mappedin.com https://app.mappedin.com https://api.mappedin.com; frame-src 'self' https://www.cognitoforms.com https://las-pubforms.azurewebsites.net https://las-realestate-pubforms.azurewebsites.net https://pubforms4.harryreidairport.com https://pubforms9.harryreidairport.com https://securedd.harryreidairport.com https://realestategis.lasairport.com https://embed.zensors.live https://zensors.live https://*.list-manage.com https://las.lostandfoundsoftware.com https://www.youtube.com https://www.youtube-nocookie.com https://www.googletagmanager.com https://consentcdn.cookiebot.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; report-uri https://o232156.ingest.us.sentry.io/api/4509327168110592/security/?sentry_key=6d1ef15be41ece8272232deecd7c7c61&sentry_environment=production 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://webalytix.th-nuernberg.de https://static.b-ite.com https://cs-assets.b-ite.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' https://webalytix.th-nuernberg.de data:; base-uri 'none'; frame-src https://webalytix.th-nuernberg.de https://virtuohm.ohmportal.de; connect-src 'self' https://webalytix.th-nuernberg.de https://jobs.b-ite.com; style-src 'self' 'unsafe-inline' data: 'report-sample'; object-src 'none'; font-src 'self' data:; report-uri https://www.th-nuernberg.de/@http-reporting?csp=report&requestTime=1789274035135155&requestHash=566bc776db77822d78fcfdc45d2b770e1fad30c0 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.yotpo.com *.googleapis.com *.baomitu.com *.cloudflare.com *.faceworks.nl *.faircado.com *.flaticon.com *.googleusercontent.com *.jsdelivr.net data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.facebook.com *.yotpo.com *.3dsecure.no 3dsecure-vrp.de *.americanexpress.com *.apata.io *.arcot.com *.cardcomplete.com *.easybank.at *.eewosecure.com *.firstdata.de *.google.com *.ing.de *.marqeta.com *.monext.fr *.n26.com *.psa.at *.rabobank.nl *.rsa3dsauth.com *.salesforce.com *.securesuite.co.uk *.securesuite.net *.sparkasse.at *.sparkassen-kreditkarten.de *.wlp-acs.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.sendcloud.sc *.jsdelivr.net *.weltpixel.com *.yotpo.com *.3dsecure.no 3dsecure-vrp.de *.agu.com *.americanexpress.com *.apata.io *.arcot.com *.bing.com bing.com caclk.com *.cloudflare.com *.convert.com *.doubleclick.net *.easybank.at *.eewosecure.com *.facebook.com *.firstdata.de *.googletagmanager.com *.ing.de *.marqeta.com *.microsoftonline.com *.monext.fr *.n26.com *.opendns.com *.psa.at *.rabobank.nl *.rsa3dsauth.com *.saasprotection.com *.sbk-vs.de *.securesuite.co.uk *.securesuite.net *.sparkasse.at *.sparkassen-kreditkarten.de *.tradetracker.net *.vimeo.com vimeo.com *.voyado.com *.wlp-acs.com *.zscaler.net *.zscalertwo.net *.zscloud.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * https://www.google.nl magefan.com cm.magefan.com *.amazonaws.com *.facebook.com *.yotpo.com agu.com *.agu.com *.bing.com *.bing.net bucket-ip-website.s3.eu-central-1.amazonaws.com *.clarity.ms *.convertexperiments.com *.doubleclick.net *.facebook.net *.flaticon.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.google.com google.com *.googletagmanager.com *.googleusercontent.com *.h-ams.net ipavatarbucket.s3.eu-central-1.amazonaws.com *.linkedin.com *.tiktok.com *.trackedlink.net *.trackedweb.net *.tradetracker.net *.trustedshops.com *.vimeo.com yastatic.net data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page *.sendcloud.sc *.jsdelivr.net https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com *.yotpo.com *.agu.com *.bing.com *.clarity.ms *.convert.com *.convertexperiments.com *.cookie-script.com d5yoctgpv4cpx.cloudfront.net *.doubleclick.net *.eyefitu.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.kk-resources.com *.licdn.com *.redeal.se secured-pixel.com *.tiktok.com *.trackedlink.net *.trackedweb.net *.tradetracker.net *.trustedshops.com *.varify.io *.vimeo.com *.voyado.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.sendcloud.sc *.jsdelivr.net tagmanager.google.com *.yotpo.com *.googleapis.com *.cloudflare.com *.googletagmanager.com *.gstatic.com *.typekit.net *.voyado.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.bing.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.google-analytics.com *.facebook.net *.yotpo.com agu.com *.agu.com *.azure.com *.bing.com *.bing.net *.clarity.ms *.convertexperiments.com *.cookie-script.com *.doubleclick.net *.eyefitu.com *.facebook.com *.googleadservices.com *.googleapis.com *.gstatic.com *.hotjar.io *.linkedin.com *.npass.app p2iqhncxyh.execute-api.eu-central-1.amazonaws.com *.tiktok.com *.trustedshops.com *.varify.io *.visualstudio.com *.voyado.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; report-uri https://d3a47fe8-35b6-4db2-9ced-33cd80c05948.sansec.watch/; report-to report-endpoint; 1
font-src *.googleapis.com *.gstatic.com data: *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com static.userback.io *.cylindo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.carnegiefabrics.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com www.xtento.com *.twitter.com fast.wistia.net td.doubleclick.net 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com www.xtento.com cdn.xtento.com *.pinterest.com *.cloudflare.com *.klarna.com *.googletagmanager.com *.googleadservices.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.wistia.com *.elfsight.com *.elfsightcdn.com *.cylindo.com content-v2.cylindo.com *.google.com www.google.com.ua *.linkedin.com carnegiefabrics.com https://redchamps.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.xtento.com cdn.xtento.com fast.wistia.net static.userback.io *.carnegiefabrics.com *.cloudflare.com cookie-cdn.cookiepro.com *.twitter.com *.crazyegg.com *.pardot.com *.pinterest.com *.google-analytics.com *.google.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com js-agent.newrelic.com bam.nr-data.net *.wistia.com *.elfsight.com *.cylindo.com snap.licdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com static.userback.io *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.cylindo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: *.wistia.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.googleapis.com api.userback.io *.stackpathdns.com cookie-cdn.cookiepro.com *.crazyegg.com stats.g.doubleclick.net geolocation.onetrust.com *.cloudflare.com *.twitter.com *.paypal.com bam.nr-data.net *.wistia.com *.elfsight.com *.litix.io *.cylindo.com content-v2.cylindo.com analytics.google.com *.linkedin.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.carnegiefabrics.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval';font-src data: https://fast.wistia.com https://fonts.gstatic.com;connect-src 'self' https://*.wistia.com https://fx.kubra.com https://bat.bing.com https://insight.adsrvr.org https://js.zi-scripts.com https://analytics.google.com https://www.google.com https://*.clarity.ms https://ws.zoominfo.com https://fg8vvsvnieiv3ej16jby.litix.io https://forms.hscollectedforms.net https://forms.hsforms.com https://*.doubleclick.net https://www.googleadservices.com https://www.googletagmanager.com;script-src 'unsafe-inline' 'unsafe-eval' https://fast.wistia.net https://fast.wistia.com https://ajax.googleapis.com https://browser.sentry-cdn.com https://js-na1.hs-scripts.com;script-src-elem 'self' 'unsafe-inline' blob: https://fast.wistia.com https://fast.wistia.net https://fx.kubra.com https://bat.bing.com https://js.zi-scripts.com https://www.googletagmanager.com https://ajax.googleapis.com https://browser.sentry-cdn.com https://js-na1.hs-scripts.com https://js.adsrvr.org https://js.hs-analytics.net https://js.hs-banner.com https://js.hscollectedforms.net https://*.clarity.ms https://www.comparably.com  https://js.hsforms.net https://*.sharethis.com;img-src 'self' https://*.wistia.com https://bat.bing.com https://track.hubspot.com https://*.hsforms.com https://www.googletagmanager.com https://platform-cdn.sharethis.com https://www.google.ca https://*.google.com https://fonts.gstatic.com;style-src 'self' https://fonts.googleapis.com;style-src-elem 'self' 'unsafe-inline' blob: https://fonts.googleapis.com;style-src-attr 'unsafe-inline';frame-src  https://insight.adsrvr.org https://fast.wistia.com https://fast.wistia.net https://www.comparably.com https://match.adsrvr.org https://t.sharethis.com;media-src blob:;report-uri /CSPReport; 1
report-uri /api/v1/csp-report; default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net/npm/chart.js https://cdn.jsdelivr.net/npm/chartjs-plugin-datalabels@2 https://cdn.tauschwohnung.com https://sst.tauschwohnung.com https://capi-automation.s3.us-east-2.amazonaws.com https://www.googletagmanager.com https://*.google-analytics.com https://www.clarity.ms https://scripts.clarity.ms https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://analytics.tiktok.com https://connect.facebook.net https://embed.typeform.com https://widget.trustpilot.com https://*.consentmanager.net https://www.gstatic.com https://s.pinimg.com https://ct.pinterest.com; style-src 'self' 'unsafe-inline' https://*.tauschwohnung.com https://fonts.googleapis.com https://www.gstatic.com https://embed.typeform.com https://*.consentmanager.net; font-src 'self' data: https://*.tauschwohnung.com https://fonts.gstatic.com; img-src 'self' data: blob: https://*.tauschwohnung.com https://c.clarity.ms https://c.bing.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://www.facebook.com https://connect.facebook.net https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://*.consentmanager.net https://*.google.com https://www.google.de https://www.google.at https://www.google.ch https://www.google.nl https://www.google.dk https://www.google.se https://*.gstatic.com https://*.openstreetmap.org https://i.ytimg.com; connect-src 'self' https://*.tauschwohnung.com https://*.clarity.ms https://*.google-analytics.com https://*.analytics.google.com https://www.google.com https://google.com https://ad.doubleclick.net https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://www.googletagmanager.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://www.facebook.com https://mv-prod-1-1053047382554.us-central1.run.app https://api.maptiler.com https://api.typeform.com https://*.consentmanager.net https://firebaseinstallations.googleapis.com https://fcmregistrations.googleapis.com https://ct.pinterest.com https://s.pinimg.com https://bzr.openai.com; media-src 'self' blob: https://*.tauschwohnung.com; worker-src 'self' blob:; child-src 'self' blob:; frame-src 'self' https://*.tauschwohnung.com https://www.youtube-nocookie.com https://form.typeform.com https://widget.trustpilot.com https://www.facebook.com https://ct.pinterest.com https://*.consentmanager.net https://js.mollie.com https://lookerstudio.google.com https://datastudio.google.com https://www.google.com; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://checkout.stripe.com https://js.stripe.com; script-src 'self' 'unsafe-inline' https://widget.trustpilot.com https://*.trustpilot.com https://challenges.cloudflare.com https://*.posthog.com https://eu.i.posthog.com https://*.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.g.doubleclick.net https://www.google.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://plausible.io https://js.sentry-cdn.com https://o4511261878321152.ingest.de.sentry.io https://va.vercel-scripts.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://cdn.flymedi.com https://sc.flymedi.com https://widget.trustpilot.com https://*.trustpilot.com https://*.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.g.doubleclick.net https://www.google.com https://consent.cookiebot.com https://consentcdn.cookiebot.com; font-src 'self' data:; connect-src 'self' https://*.posthog.com https://eu.i.posthog.com https://*.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.g.doubleclick.net https://www.google.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://challenges.cloudflare.com https://plausible.io https://js.sentry-cdn.com https://o4511261878321152.ingest.de.sentry.io https://vitals.vercel-insights.com; frame-src 'self' https://www.youtube-nocookie.com https://www.youtube.com https://challenges.cloudflare.com https://widget.trustpilot.com https://*.trustpilot.com https://checkout.stripe.com https://js.stripe.com https://consent.cookiebot.com https://consentcdn.cookiebot.com; media-src 'self' data: blob:; worker-src 'self' blob:; manifest-src 'self'; report-uri /api/csp-report; report-to csp 1
default-src 'self'; script-src 'self' https://www.googletagmanager.com https://connect.facebook.net https://cdn-cookieyes.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://*.hotjar.com; style-src 'self' https://cdnjs.cloudflare.com; connect-src 'self' https://*.hotjar.com wss://*.hotjar.com; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests; 1
base-uri 'self' 'unsafe-inline'; report-uri https://rev-a-shelf.com/csp/index/report; report-to report-endpoint; default-src 'self' 'unsafe-inline' 'unsafe-eval'; child-src http: https: blob: 'self' 'unsafe-inline' assets.braintreegateway.com c.paypal.com *.paypal.com *.certcapture.com; connect-src 'self' 'unsafe-inline' dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net https://vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.certcapture.com https://ct.pinterest.com https://stats.g.doubleclick.net https://m.addthis.com https://www.paypalobjects.com https://www.chasepaymentechhostedpay-var.com *.facebook.com https://bam.nr-data.net/ wss://ws.hotjar.com/ https://www.google.com https://www.gstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.cloudflare.com *.googleapis.com *.addthis.com *.graph.instagram.com *.aptrinsic.com https://searchserverapi.com https://dpm.demdex.net *.hotjar.io https://bam-cell.nr-data.net/ 3dsapi.ebizcharge.net kg668dbov0.execute-api.us-east-1.amazonaws.com ebizcharge3ds-staging1.azurewebsites.net *.googletagmanager.com *.doubleclick.net *.google.ca *.google.com.mx *.braintreegateway.com https://maps.googleapis.com *.ebizcharge.net https://songbird.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://cdnjs.cloudflare.com https://insight.adsrvr.org/ https://amcglobal.sc.omtrdc.net https://geostag.cardinalcommerce.com https://geo.cardinalcommerce.com https://centinelapistag.cardinalcommerce.com https://analytics.google.com; manifest-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline' *.adobe.com; object-src 'self'; style-src 'self' 'unsafe-inline' *.adobe.com fonts.googleapis.com *.certcapture.com https://static.rev-a-shelf.com *.rev-a-shelf.com https://static.trescolighting.com https://fonts.googleapis.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.aptrinsic.com https://searchserverapi.com www.gstatic.com; script-src 'self' 'unsafe-eval' 'nonce-bXBndjl5NjdhMXN1dXFhZmNjN2RndG8wNmV5anFydGg=' 'nonce-dWFtZzZrZWZyMGV1d2Z6aGQycmQ5eWtjb281ZmUzd2I=' 'sha256-UMrwMsNK5sO+p3F0aT6Hw7vIQCR131ROgVA5fMIHr4w=' 'sha256-gM3INQ3RIP/oY17YQwg7u7A93bTctVg1pzIyOz+cJ/Y=' 'sha256-LlqoHgLxPrfiN2MxpkG8C989z7x2mHIHTMMTTD/E0OM' 'sha256-9HXDQYYCK6Ux68i7qX/BDffkw+qFTzFKGKsGRMhRYg0=' *.commerce-payment-services.com *.certcapture.com https://cdn1.ebizcharge.net *.cdn-apple.com *.disqus.com *.braintreegateway.com https://maps.googleapis.com https://maps.gstatic.com https://vimeo.com https://songbird.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://cdnjs.cloudflare.com https://insight.adsrvr.org/ https://dpm.demdex.net https://amcglobal.sc.omtrdc.net https://geostag.cardinalcommerce.com https://geo.cardinalcommerce.com https://centinelapistag.cardinalcommerce.com https://analytics.google.com www.gstatic.com commerce-payments-sdk.adobe.io https://rum.hlx.page; img-src data: blob: data: 'self' 'unsafe-inline' assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.certcapture.com https://static.rev-a-shelf.com *.rev-a-shelf.com https://s3.amazonaws.com/ https://www.facebook.com https://ct.pinterest.com https://static.trescolighting.com https://cdn.klarna.com/ https://www.google.co.in/ *.adobedtm.com https://tresco-lighting-layout-images.s3.amazonaws.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.addthis.com *.pinterest.com *.cdninstagram.com *.aptrinsic.com storage.googleapis.com https://searchserverapi.com https://img.youtube.com/ https://images.salsify.com/ https://searchanise-ef84.kxcdn.com *.youtube.com trescolighting.com *.googletagmanager.com *.google.ca *.google.com.mx s3.us-east-1.amazonaws.com/assets.trescolighting.com/images/lightinglayoutform/catalog-specs-image.png *.amazonaws.com/assets.trescolighting.com/ magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://maps.gstatic.com https://maps.googleapis.com; frame-src mailto: 'self' 'unsafe-inline' fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.certcapture.com https://ct.pinterest.com https://s7.addthis.com https://www.chasepaymentechhostedpay-var.com *.facebook.com *.issuu.com https://www.google.com https://www.youtube.com https://youtube.com https://www.ytimg.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.addthis.com *.pinterest.com https://searchserverapi.com *.googletagmanager.com www.paypalobjects.com app.smartsheet.com https://songbird.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://*.cardinalcommerce.com https://*.centinelapi.cardinalcommerce.com https://insight.adsrvr.org/ https://analytics.google.com https://vimeo.com www.google.com www.gstatic.com apis.google.com *.salsify.com; frame-ancestors self 'self' *.certcapture.com google.com https://www.youtube.com https://www.google.com/maps https://www.google.com/ https://insight.adsrvr.org/ https://analytics.google.com https://vimeo.com www.google.com; form-action 'self' 'unsafe-inline' geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com https://searchserverapi.com; font-src data: data: 'self' 'unsafe-inline' fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://static.rev-a-shelf.com *.rev-a-shelf.com https://static.trescolighting.com https://fonts.gstatic.com *.fontawesome.com https://www.google.com https://www.gstatic.com maxcdn.bootstrapcdn.com *.fonts.googleapis.com *.cloudflare.com https://searchserverapi.com www.paypalobjects.com https://fonts.googleapis.com; script-src-elem 'self' 'nonce-bXBndjl5NjdhMXN1dXFhZmNjN2RndG8wNmV5anFydGg=' 'nonce-dWFtZzZrZWZyMGV1d2Z6aGQycmQ5eWtjb281ZmUzd2I=' 'sha256-pEPkw2gqZHzBkthmOWxqnol8ClG12G199Dw3nT+pDb0=' 'sha256-ABlQ06egcTt9+4rrvQsST7Q7TeAo5iDj0jYlxv+VZPo=' 'sha256-t7HU6t3yHm1Yl/MG0g+0/1/eG/hXpaLYlXkLob0jN+w=' 'sha256-pGChAVRNB6/2sc/FkmpjRh3kMtSBM4abHmVSiKoLHXE=' 'sha256-7k81SbkyyBTFk6YccVLGQElU4x6brDYmpk9Puob3g/8=' 'sha256-ObEaVru4l21dF2oobOPLiz6uR0zenjySeVYH1TVtth4=' 'sha256-/2i5N0FfkYMaQ14EMRwoNtht9CQAlqBAOEy85wFWDV0=' 'sha256-WvcjCAO1NybNRQvogNNsPmZzD1ed5ij+8+ea6IcDzM0=' 'sha256-aUaBdX+Dkc/SsetrUbS41PY1tLi89PFjf9FDEkMr4Wk=' 'sha256-hnsGmuwSHRQPTtyIDFlF0cyx2JzXlMwiMaQHUw7AiR4=' 'sha256-LlqoHgLxPrfiN2MxpkG8C989z7x2mHIHTMMTTD/E0OM=' 'sha256-jOPUuh40bYUkNwdPg9/KVSHKnnvCdU3PPQxRfO/Hw3s=' 'sha256-9HXDQYYCK6Ux68i7qX/BDffkw+qFTzFKGKsGRMhRYg0=' 'sha256-40i/giXk+KGoARzqKG92xgRIEWPqbC9yHT5qga7Wlyo=' 'sha256-KhOr8lNBsfYcRLPRirTZ1tXOi+ZBNlGXZ+QN8/iFTkE=' 'sha256-1ozuCt5fPv779wJQEWXLF2gXag+V1bnu3hmAhDbY0Cg=' 'sha256-J16qEvJfRzusU0DZremppxvWkCWYD4JoqsC4cIJeO6Q=' 'sha256-BJAE1Y5A33mFMprdlxqghbZYnuF/0kSZ92Df4LtzoCw=' 'sha256-d9KgqyS8aTDiVyoh9llE3o6R30o/W3Cidf967elQFfA=' 'sha256-ji9536TfK2EyjaggbOD6Q0V/pUYXFaizqdBRrTk9y/M=' 'sha256-M0fEEBIMnZ4+E2frNPPPp1anmifnbL65XzPzP2SzdR0=' 'sha256-AmfschZEuIg8qaygYvUNUqB/ZEXfhqLldlaFf5dsxrg=' 'sha256-f5g6BkxJ1yWIe/gRp3R+jf8SkUVo9bSekseH2x1cB+k=' 'sha256-XCjHBpaJ2MMTK2D60LwYW7MoiXEyygSUv2OWOfB4GsI=' 'sha256-bnoagQ4sHTFTe9LkTwWgICYn+h7iVhK9tqmp5gQ2wts=' 'sha256-LUEESa896v9DQyxeJ6N4kdA24eAeHXw35AF5ejMdzag=' 'sha256-TUkxntqDKcwfh/oJd3/fRO0Co9jQ2KdZHBU8oyYtxks=' 'sha256-WXUnM8H8wlAa+Bkl8LV8c8FAqzYA2Lm034EouIF0m/Q=' 'sha256-rHufDnCeYVG9tMSYUA3D79sfbgC0AQJghN5jsFZlNE0=' 'sha256-L8Ad3/5p9o8+SNAqIq1T/rmCj0k7NxZDGuFDkh3M76k=' 'sha256-JTvveE01dCdYJoGC7Krj6DHMZg1oXMMdZwLrPDSunjA=' 'sha256-kSZaTLgs02vtrIi+BMzjIeGvT5hsBj/EXemRbXdbOXQ=' 'sha256-acaEWH422KBbXWw9yfor2cT2eZwOq1BXhdsxjIZ8M5o=' 'sha256-GAjmaehDsJH2jDoKMtZaYsCWJI2Ugs8esNnVYk0k3f0=' 'sha256-DKXqMWZ8QmFbTXyYpHblJUN9dVAOD9GRBrWT5mZzvgw=' 'sha256-U7OQEsAhph3g18KQWpEGK3Ku7uXxy6g9XHI4B3pQUdE=' https://script.hotjar.com/ https://static.hotjar.com/ https://www.googletagmanager.com/gtm.js js-agent.newrelic.com/ https://www.google.com/recaptcha/api.js *.paypal.com https://www.paypalobjects.com/webstatic/r/fb/fb-all-prod.pp.min.js https://js-agent.newrelic.com/nr-spa-1.267.0.min.js *.paypalobjects.com https://payments-sdk.live.commerce-payment-services.com *.youtube.com *.braintreegateway.com https://rum.hlx.page; 1
default-src 'self'; script-src 'nonce-0y3guiFw8wJ7JQjAf2e/oQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
connect-src https: wss:; font-src data: https:; frame-src https:; img-src blob: data: https:; media-src blob: data: https:; object-src 'self' https://*.app-eu.wrike.com https://*.wrike.com https://*.www.wrike.com https://youtube.com https://d3tvpxjako9ywy.cloudfront.net https://d1c5qktmphn2d.cloudfront.net; manifest-src 'self' https://cdn.wrike.com; script-src 'unsafe-eval' 'unsafe-inline' data: https://*.wrike.com https://*.www.wrike.com https://*.app-eu.wrike.com https://*.google-analytics.com https://*.usercentrics.eu https://*.marketo.com https://*.marketo.net https://apis.google.com https://bat.bing.com https://cdn.ravenjs.com https://connect.facebook.net https://googleads.g.doubleclick.net https://snap.licdn.com https://static.ads-twitter.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://pagead2.googlesyndication.com/pagead/conversion/962492627/ https://s.yimg.jp/images/listing/tool/cv/ytag.js https://tag.demandbase.com/63365c817f510bbb.min.js https://api.tomi.ai/029/loader.js https://tags.srv.stackadapt.com/events.js https://s.yimg.jp/images/listing/tool/cv/conversion.js https://cdn.metadata.io https://js.partnerstack.com/v1/ https://www.clarity.ms/ https://tracking.intentsify.io/ https://b97.yahoo.co.jp/pagead/conversion_async.js https://ad.doubleclick.net/ddm/adj/N1344363.197812NSO.CODESRV/ https://*.d41.co https://d3tvpxjako9ywy.cloudfront.net https://d1c5qktmphn2d.cloudfront.net https://static.cloudflareinsights.com https://*.goldcast.io https://fast.wistia.com https://js.qualified.com https://static.axept.io https://j.6sc.co https://www.youtube.com https://cdn.dreamdata.cloud; style-src 'unsafe-inline' data: https:; default-src 'self'; report-uri https://sentry.wrike.com/api/20/security/?sentry_key=38ca5e63ef594e30b392b3cec0b162cf&sentry_environment=website; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.googletagmanager.com *.google-analytics.com *.hubspot.com *.linkedin.com *.rb2b.com cdn.vibe.co *.default.com challenges.cloudflare.com *.vercel-scripts.com *.licdn.com ddwl4m2hdecbv.cloudfront.net https://*.posthog.com *.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: cdn.sanity.io *.googletagmanager.com *.google-analytics.com px.ads.linkedin.com *.hubspot.com *.facebook.com i.ytimg.com; font-src 'self'; connect-src 'self' *.googletagmanager.com *.google-analytics.com *.hubspot.com *.linkedin.com *.rb2b.com cdn.vibe.co *.default.com cdn.sanity.io *.vercel-scripts.com *.bland.ai https://*.posthog.com *.facebook.com; worker-src 'self' blob: data:; media-src 'self' blob: data: https://stream.mux.com; frame-src 'self' challenges.cloudflare.com *.hubspot.com *.googletagmanager.com https://www.loom.com https://www.youtube.com *.default.com; object-src 'none'; base-uri 'self' 1
default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https:           data:; font-src https: data:; report-uri /csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' blob: data: https://*.artblocks.io https://res.cloudinary.com https://*.amazonaws.com https://*.walletconnect.com https://*.walletconnect.org https://ipfs.io https://*.ipfs.io https://gateway.pinata.cloud https://arweave.net https://*.arweave.net; font-src 'self'; connect-src 'self' https://*.artblocks.io https://*.hasura.app https://auth.privy.io https://*.rpc.privy.systems https://*.walletconnect.com https://*.walletconnect.org wss://*.walletconnect.com wss://*.walletconnect.org https://*.web3modal.com https://*.web3modal.org wss://www.walletlink.org https://cca-lite.coinbase.com https://*.ingest.sentry.io https://*.dataplane.rudderstack.com https://*.rudderlabs.com https://vitals.vercel-insights.com https://va.vercel-scripts.com https://api.opensea.io https://ipfs.io https://*.ipfs.io https://gateway.pinata.cloud https://arweave.net https://*.arweave.net https://cosmopolitan-magical-cherry.quiknode.pro https://eth-mainnet.g.alchemy.com https://sepolia.infura.io https://shape-mainnet.g.alchemy.com https://mainnet.shape.network; frame-src 'self' https://*.artblocks.io https://auth.privy.io https://*.walletconnect.com https://*.walletconnect.org https://challenges.cloudflare.com https://ipfs.io https://*.ipfs.io https://gateway.pinata.cloud https://arweave.net https://*.arweave.net; media-src 'self' blob: https://res.cloudinary.com https://*.artblocks.io https://artblocks-public-assets.s3.us-east-1.amazonaws.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; manifest-src 'self'; upgrade-insecure-requests 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: ; img-src 'self' data: secure.gravatar.com www.gravatar.com; report-uri https://stopkillerrobots.org?gdsih-csp-report; 1
default-src 'self'; script-src 'self' https://static.cloudflareinsights.com https://va.vercel-scripts.com https://connect.facebook.net https://analytics.tiktok.com https://payment-web-sdk.transactpay.ai; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; report-uri /api/csp-report 1
default-src 'self'; script-src 'self' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https://www.google.com https://www.gstatic.com; frame-src 'self' https://www.google.com; connect-src 'self' https://www.google-analytics.com; frame-ancestors 'self'; 1
default-src 'self' *.cookiebot.com *.google-analytics.com *.gstatic.com *.googleapis.com *.mapbox.com *.g.doubleclick.net *.doc-cirrus.com *.smarketer.de; script-src 'self' 'unsafe-inline' *.cookiebot.com *.webspaceconfig.de *.googletagmanager.com *.google-analytics.com *.doc-cirrus.com *.smarketer.de *.doubleclick.net *.googleadservices.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com *.google-analytics.com *.gstatic.com *.googleapis.com *.kununu.com *.google.com *.google.de *.googleadservices.com *.cookiebot.com *.googletagmanager.com *.heydata.eu *.doc-cirrus.com *.google.ch *.google.co.in *.google.ru *.google.nl; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com *.cookiebot.com consentcdn.cookiebot.com *.googletagmanager.com *.personio.de *.jobs.personio.de; style-src-elem 'self' 'unsafe-inline' *.googleapis.com *.mapbox.com *.webspaceconfig.de 'report-sample'; connect-src 'self' *.fast.smarketer.de *.doc-cirrus.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.cookiebot.com *.smarketer.de *.google.com *.googleadservices.com; style-src 'self' 'unsafe-inline' *.webspaceconfig.de 'report-sample'; worker-src 'self' blob:; report-uri https://www.doc-cirrus.com/@http-reporting?csp=report&requestTime=1789286204318184&requestHash=f89fd466305fba331514a320f906fee407ef0956 1
script-src 'strict-dynamic' 'nonce-eDb5YQMqlkSL3EVCaczmdw==' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * https://www.googletagmanager.com/ https://plumrocket.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https://*.usercentrics.eu *.hotjar.com *.hotjar.io http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com https://api.mapbox.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com *.usercentrics.eu *.hotjar.com *.hotjar.io http://www.googletagmanager.com/ https://www.googletagmanager.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * https://*.usercentrics.eu https://*.google-analytics.com wss://*.hotjar.com *.hotjar.com *.hotjar.io http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ autocomplete2.postdirekt.de 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.fontawesome.com *.googleapis.com google.com unpkg.com *.doubleclick.net *.googletagmanager.com *.facebook.net *.googlesyndication.com analytics.google.com *.chartbeat.com *.google-analytics.com *.adtrafficquality.google; object-src *; img-src * data: blob: about:; frame-src *; font-src * data: blob:; report-uri /report-csp-violation 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.googletagmanager.com https://www.google-analytics.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; media-src 'self' https://fsn1.your-objectstorage.com/leadingmedicineguide/ https://leadingmedicineguide.fsn1.your-objectstorage.com; font-src 'self' data:; connect-src 'self' https://consentcdn.cookiebot.com https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://challenges.cloudflare.com; frame-src https://challenges.cloudflare.com https://consentcdn.cookiebot.com https://www.youtube.com https://www.youtube-nocookie.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'nonce-RandomString123456' https://metaswitch.com https://*.metaswitch.com 'strict-dynamic' 'nonce-1PTxS8YW5QXOGfu8z/OaVA=='; style-src 'self' 'nonce-RandomString123456' https://metaswitch.com https://*.metaswitch.com; img-src 'self' data: https://metaswitch.com https://*.metaswitch.com; font-src 'self' https://metaswitch.com https://*.metaswitch.com; connect-src 'self' https://metaswitch.com https://*.metaswitch.com; frame-src 'self' https://metaswitch.com https://*.metaswitch.com; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri https://770a769bea45352cd46f7e284097b330.report-uri.com/r/d/csp/reportOnly 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://files-web.clo-set.com https://static.cloudflareinsights.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://files-web.clo-set.com; img-src 'self' data: https://files-web.clo-set.com https://storagefiles.clo-set.com https://teststoragefiles.clo-set.com https://files-web.clo-set.com https://support.clo-set.com https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.google.com; font-src 'self' https://files-web.clo-set.com; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://td.doubleclick.net; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.google.com; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /csp-report 1
default-src 'self'; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com 'unsafe-inline'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; img-src 'self' data:; report-uri /csp-report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://fundingchoicesmessages.google.com https://a.teads.tv https://scripts.clarity.ms https://www.clarity.ms https://connect.facebook.net https://analytics.tiktok.com https://cdn.requestmetrics.com https://www.googletagservices.com https://tpc.googlesyndication.com https://googleads.g.doubleclick.net https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' https: data: blob:; media-src 'self' https: blob:; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://securepubads.g.doubleclick.net https://*.clarity.ms https://cdn.requestmetrics.com https://*.requestmetrics.com https://analytics.tiktok.com https://a.teads.tv https://*.googleapis.com https://*.firebaseio.com https://securetoken.googleapis.com https://identitytoolkit.googleapis.com https://www.google.com https://ad.doubleclick.net https://analytics-ipv6.tiktokw.us; frame-src 'self' https://placar.ritspay.app https://www.youtube.com https://www.youtube-nocookie.com https://www.instagram.com https://www.facebook.com https://platform.twitter.com https://platform.x.com https://twitter.com https://x.com https://www.tiktok.com https://open.spotify.com https://embed.onefootball.com https://td.doubleclick.net https://securepubads.g.doubleclick.net https://tpc.googlesyndication.com https://googleads.g.doubleclick.net https://a.teads.tv https://fundingchoicesmessages.google.com; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /api/csp-report/ 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://*.stripe.com; script-src 'self' https://*.googletagmanager.com https://*.google-analytics.com https://js.stripe.com https://static.cloudflareinsights.com 'nonce-KymTRL5+eIJv4hQAbjWPFQ==' 'strict-dynamic'; script-src-elem 'self' https://*.googletagmanager.com https://*.google-analytics.com https://js.stripe.com https://static.cloudflareinsights.com 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://www.google.com https://stats.g.doubleclick.net https://*.stripe.com; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com; worker-src 'self' blob:; manifest-src 'self'; report-uri /api/csp-report/ 1
upgrade-insecure-requests; default-src 'none'; object-src 'self'; media-src 'self'; connect-src 'self'; frame-ancestors 'none'; frame-src https://www.youtube.com; img-src 'self' data: https://www.google-analytics.com https://maps.gstatic.com https://csi.gstatic.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; script-src 'self' 'nonce-6f2bea71d46c0d7e7b380541c11ac1d3acd3fe46' 'sha256-NeueIEO8rwnaeJW0jYHRwrarPP+KzGzhk6xBJ06ntlw=' https://www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://maps.googleapis.com; 1
default-src 'self'; connect-src 'self' https://sentry.studo.com https://www.googletagmanager.com; script-src 'nonce-RDScjd-QQlDVOeCfX52v8A0MhCJ7WSdif3xeBYp-_3g' 'strict-dynamic' 'self' https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://assets.studo.com https://www.googletagmanager.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com; frame-src 'self' https://www.googletagmanager.com; object-src 'none'; base-uri 'none'; frame-ancestors 'self'; report-uri https://sentry.studo.com/api/10/security/?sentry_key=e59cfa0a241760860dbc5658c531d0ee&sentry_environment=studo-com-website&sentry_release=d3b5208e78454acd69886d57fae20815de287c69; report-to csp-endpoint 1
object-src 'none';base-uri 'self';script-src 'nonce-y1vcY_6QAqiiZYBdr8rd5g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
media-src 'self' data: blob: https:; frame-src 'self' https://www.deutschakademie.de https://www.deutschakademie.com https://*.facebook.com https://www.google.com/recaptcha/ https://*.doubleclick.net https://*.googlesyndication.com https://*.googletagmanager.com https://*.adtrafficquality.google https://*.paypal.com https://*.livechatinc.com https://cdn.chatbot.com https://app.hubspot.com https://js.mollie.com; frame-ancestors 'self' https://www.deutschakademie.de https://www.deutschakademie.com https://*.livechatinc.com https://cdn.chatbot.com ;block-all-mixed-content;script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://*.clarity.ms https://cdnjs.cloudflare.com https://cdn-cookieyes.com https://*.googletagservices.com https://*.googlesyndication.com https://*.googleadservices.com https://*.doubleclick.net https://*.google.com https://www.gstatic.com https://api.livechatinc.com https://cdn.livechatinc.com https://googletagmanager.com https://js-eu1.hs-analytics.net https://js-eu1.hs-banner.com https://js-eu1.hs-scripts.com https://maps.google.com https://maps.googleapis.com https://ajax.googleapis.com https://tagmanager.google.com https://www.provenexpert.com https://www.googletagmanager.com https://*.google-analytics.com https://cdn.chatbot.com https://connect.facebook.net; style-src 'self' 'report-sample' 'unsafe-inline' https://cdnjs.cloudflare.com *.google.com www.provenexpert.com www.googletagmanager.com https://fonts.googleapis.com https://cdn.chatbot.com https://connect.facebook.net https://www.deutschakademie.de https://www.deutschakademie.com; style-src-elem 'self' 'unsafe-inline' https://*.doofinder.com fonts.googleapis.com cdnjs.cloudflare.com https://www.gstatic.com https://www.deutschakademie.de https://www.deutschakademie.com https://cdn.jsdelivr.net/npm/ https://www.provenexpert.com/css/widget_landing.css; object-src 'self' data: *.googlesyndication.com;child-src 'self' https://*.livechatinc.com blob: *.google.com *.doubleclick.net *.googlesyndication.com www.googletagmanager.com;base-uri 'self';form-action 'self' *.google.com *.facebook.com; worker-src 'self' blob: www.google.com; script-src-elem 'self' 'unsafe-inline' https://*.doofinder.com https://*.hsappstatic.net https://*.hubspot.com https://*.accessgo.de https://*.clarity.ms cdnjs.cloudflare.com *.google-analytics.com https://ajax.googleapis.com *.adtrafficquality.google https://cdnjs.cloudflare.com  https://cdn-cookieyes.com  https://*.googletagservices.com https://*.googlesyndication.com https://*.googleadservices.com https://*.doubleclick.net https://*.google.com https://www.gstatic.com https://*.livechatinc.com https://googletagmanager.com https://js-eu1.hs-analytics.net https://js-eu1.hs-banner.com https://js-eu1.hs-scripts.com https://js-eu1.hsforms.net https://maps.google.com https://maps.googleapis.com https://tagmanager.google.com https://*.paypal.com https://www.provenexpert.com https://www.googletagmanager.com https://*.google-analytics.com https://cdn.chatbot.com https://connect.facebook.net https://www.deutschakademie.de https://www.deutschakademie.com https://js.mollie.com https://cdn.jsdelivr.net/npm/ 1
font-src *.googleapis.com *.gstatic.com https://fonts.gstatic.com *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.twitter.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.cookiebot.com *.googletagmamanger.com https://*.google.com js.mollie.com *.sendcloud.sc *.jsdelivr.net *.twitter.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.googleapis.com https://*.gstatic.com magefan.com cm.magefan.com *.disqus.com www.magmodules.eu *.squeezely.tech i0.wp.com *.leef.nl *.linkedin.com *.varuvo.nl *.zorghulpdrogist.nl https://*.google.com https://*.googleapis.com https://*.googleusercontent.com https://img.youtube.com *.sooqr.com *.spotlersearch.com https://www.mollie.com *.amazonaws.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cloudfront.net *.gstatic.com *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.disqus.com squeezely.tech www.squeezely.tech *.squeezely.tech *.clarity.ms cognito-identity.eu-central-1.amazonaws.com/ *.converterexperiments.com *.cookiebot.com *.corewebvitals.io developer.adobe.com *.facebook.net/ firehose.eu-central-1.amazonaws.com/ http://*.googleadservers.com *.google-analytics.com *.googlesyndication.com *.googletagmamanger.com *.hotjar.com *.licdn.com magento.com *.spotlersearch.com *.spotlersearchanalytics.com *.trustpilot.com *.zdassets.com *.zopim.com https://*.google.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com *.sooqr.com spotlersearchanalytics.com js.mollie.com *.sendcloud.sc *.jsdelivr.net *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com *.sooqr.com *.spotlersearch.com *.sendcloud.sc *.jsdelivr.net *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com squeezely.tech *.squeezely.tech *.clarity.ms cognito-identity.eu-central-1.amazonaws.com firehose.eu-central-1.amazonaws.com *.linkedin.com *.zdassets.com *.zendesk.com *.zopim.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com *.sooqr.com *.spotlersearch.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://97d26445-15c1-4709-bc48-e71e0c43973e.sansec.watch; report-to report-endpoint; 1
default-src 'self' https: data: blob:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; frame-src 'self' https:; connect-src 'self' data: blob: https: wss:; media-src 'self' https: blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; report-uri https://napi.jumbomail.me/api/reports/csp-report; 1
object-src  'none'; connect-src 'self' *.clubsextury21.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.clubsextury21.com join.gammasecure.com; script-src 'self' *.clubsextury21.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.clubsextury21.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
child-src 'self' bid.g.doubleclick.net *.bitexen.com www.google.com;  connect-src 'self' *.bitexen.com firebase.googleapis.com firebaseinstallations.googleapis.com salesiq.zoho.com salesiq.zohopublic.com sdkapi.netmera.com stats.g.doubleclick.net www.google-analytics.com api.intotheblock.com desk.zoho.com vts.zohopublic.com www.tradingview.com app.adjust.com app.adjust.net.in app.adjust.world fonts.gstatic.com koinbulteni.com region1.google-analytics.com wasm.regulaforensics.com;  font-src 'self' css.zohocdn.com fonts.gstatic.com css.zohocdn.com css.zohostatic.com;  form-action 'self' *.bitexen.com;  frame-ancestors 'self';  frame-src 'self' bid.g.doubleclick.net pixel.sitescout.com s.tradingview.com *.hcaptcha.com *.geetest.com *.bitexen.com www.google.com;  img-src 'self' data: *.bitexen.com pixel.sitescout.com salesiq.zohopublic.com sdkapi.netmera.com www.facebook.com www.google.com www.google.com.tr accounts.zoho.com googleads.g.doubleclick.net koinbulteni.com s3.eu-west-1.amazonaws.com ssl.google-analytics.com web.facebook.com www.google-analytics.com region1.google-analytics.com static.geetest.com static.geevisit.com www.gstatic.com *.hcaptcha.com www.googletagmanager.com;  manifest-src 'self';  script-src-attr 'unsafe-inline';  script-src-elem 'self' 'unsafe-inline' cdn.jsdelivr.net cdn.netmera-web.com connect.facebook.net firebasestorage.googleapis.com googleads.g.doubleclick.net js.zohocdn.com salesiq.zoho.com secure.adnxs.com www.google-analytics.com www.google.com www.googleadservices.com www.googletagmanager.com www.gstatic.com app.intotheblock.com code.jquery.com js-agent.newrelic.com js.zohostatic.com ntm.netmera-web.com s3.tradingview.com ssl.google-analytics.com d17nz991552y2g.cloudfront.net *.geetest.com *.geevisit.com;  script-src 'self' 'unsafe-eval' cdn.netmera-web.com js-agent.newrelic.com g792337344.co connect.facebook.net *.hcaptcha.com app.intotheblock.com firebasestorage.googleapis.com googleads.g.doubleclick.net js.zohocdn.com js.zohostatic.com ntm.netmera-web.com s3.tradingview.com salesiq.zoho.com secure.adnxs.com www.google-analytics.com www.google.com www.googleadservices.com www.googletagmanager.com www.gstatic.com *.geetest.com *.hcaptcha.com;  style-src-attr 'unsafe-inline';  style-src-elem 'self' 'unsafe-inline' data: cdn.datatables.net cdn.jsdelivr.net cdnjs.cloudflare.com css.zohocdn.com fonts.googleapis.com use.fontawesome.com css.zohostatic.com *.geetest.com *.hcaptcha.com;  style-src 'unsafe-eval' data: cdnjs.cloudflare.com css.zohocdn.com css.zohostatic.com fonts.googleapis.com *.hcaptcha.com *.geetest.com *.bitexen.com;  worker-src *.bitexen.com;  object-src 'none';  report-uri https://reporturi.bitexen.com/r/d/csp/wizard 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cdn.jsdelivr.net cdn.almapay.com https://fonts.gstatic.com https://ws.colissimo.fr *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud https://cdnjs.cloudflare.com 'self' data: static.sensefuel.live data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.sips-services.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com https://www.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.getalma.eu *.almapay.com/ *.stripe.com/ *.checkout.com/ *.adyen.com/ *.truefitcorp.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com *.weltpixel.com https://form.typeform.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net *.afd.co.uk t.powerreviews.com assets-manager.abtasty.com https://maps.googleapis.com https://maps.gstatic.com https://ws.colissimo.fr https://*.tile.openstreetmap.fr https://*.onyourmap.com https://google.fr https://www.magezon.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud ebizmarts-website.s3.amazonaws.com *.openstreetmap.org www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com maps.googleapis.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.afd.co.uk cdn.jsdelivr.net js-agent.newrelic.com party.spockee.io app.ekoo.co ui.powerreviews.com *.truefitcorp.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com widget.proximis.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com maps.googleapis.com *.gstatic.com https://www.googletagmanager.com tagmanager.google.com  tag.search.sensefuel.live pdata.damart.fr try.abtasty.com                  'self' 'unsafe-eval' 'nonce-MTdpOWt2NDNoY3dvcDlyMGpuemtnOHFqb3kwZThrM3Y=' 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY/CkTMBhjNhwPvglpYumjx31B4fjkY8='; style-src *.adobe.com fonts.googleapis.com cdn.jsdelivr.net ui.powerreviews.com cdn-mobile.actito.com https://fonts.googleapis.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud https://cdnjs.cloudflare.com assets.braintreegateway.com *.googleapis.com *.gstatic.com tagmanager.google.com tag.search.sensefuel.live 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net vimeo.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.afd.co.uk *.getalma.eu *.almapay.com api.spockee.io backoffice-api.spockee.io ui.powerreviews.com display.powerreviews.com app.ekoo.co maps.googleapis.com cdn-mobile.actito.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com https://ws.colissimo.fr https://maps.googleapis.com https://nominatim.openstreetmap.org https://*.onyourmap.com https://*.mapbox.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.openstreetmap.org api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com c.search.sensefuel.live 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src blob:; font-src *.googleapis.com *.gstatic.com fonts.gstatic.com *.kxcdn.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com scontent.cdninstagram.com *.kxcdn.com *.twitter.com *.google.com *.cdninstagram.com *.fbcdn.net https://firebasestorage.googleapis.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com *.google.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com 'unsafe-inline' *.addthis.com *.addthisedge.com *.moatads.com static.cloudflareinsights.com s7.addthis.com *.avada.io *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com ekr.zdassets.com/ https://get.geojs.io *.avada.io *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.audioprivet.ru https://cdn.grattis.ru https://cdn-static.grattis.ru https://sc.grattis.ru https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://code.jivosite.com https://*.jivosite.com https://jivo.grattis.ru https://image.sendsay.ru https://*.sendsay.ru https://cse.google.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.audioprivet.ru https://cdn.grattis.ru https://cdn-static.grattis.ru https://*.jivosite.com https://www.google.com; font-src 'self' data: https://fonts.gstatic.com https://cdn.audioprivet.ru https://cdn.grattis.ru https://cdn-static.grattis.ru; img-src 'self' data: blob: https:; media-src 'self' blob: https://cdn.audioprivet.ru https://cdn.grattis.ru https://cdn-static.grattis.ru; connect-src 'self' https://geo.grattis.ru https://cdn-geo.grattis.ru https://sc.grattis.ru https://sentry.grattis.ru https://payment.audioprivet.ru https://anketa.hitprivet.ru https://mc.yandex.ru https://mc.yandex.com https://*.jivosite.com wss://*.jivosite.com https://jivo.grattis.ru https://*.sendsay.ru https://cdn.audioprivet.ru https://cdn.grattis.ru https://cdn-static.grattis.ru; worker-src 'self' blob:; manifest-src 'self'; frame-src 'self' https://*.jivosite.com https://mc.yandex.ru https://yandex.ru https://cse.google.com https://www.google.com; form-action 'self' https://payment.audioprivet.ru https://id-psi.sber.ru; frame-ancestors 'self'; report-uri /csp-report; 1
default-src 'self'; script-src 'self' 'nonce-KfQDgcdr7yoQu1b7ICa9Iw==' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://cdnjs.cloudflare.com https://s7.addthis.com https://ct.addthis.com https://m.addthis.com https://cdn.cookielaw.org https://px.ads.linkedin.com https://static.ads-linkedin.com https://snap.licdn.com https://s.saleswingsapp.com 'strict-dynamic'; script-src-elem 'self' 'nonce-KfQDgcdr7yoQu1b7ICa9Iw==' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://cdnjs.cloudflare.com https://s7.addthis.com https://cdn.cookielaw.org 'strict-dynamic'; style-src 'self' 'nonce-KfQDgcdr7yoQu1b7ICa9Iw==' https://fonts.googleapis.com https://cdn.cookielaw.org 'unsafe-hashes'; style-src-elem 'self' 'nonce-KfQDgcdr7yoQu1b7ICa9Iw==' https://fonts.googleapis.com https://cdn.cookielaw.org 'strict-dynamic'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob: https: http:; font-src 'self' data: https://fonts.gstatic.com https://cdn.cookielaw.org; connect-src 'self' https://www.google.com/recaptcha/ https://www.google-analytics.com https://ssl.google-analytics.com https://analytics.google.com https://*.google.com https://px.ads.linkedin.com https://to.go.saleswingsapp.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://boards-api.greenhouse.io https://im.williamblair.com https://preprod.im.williamblair.com https://geolocation.onetrust.com https://privacyportal.onetrust.com https://cdn.cookielaw.org; frame-src 'self' https://player.vimeo.com https://www.rdocs.com https://www.google.com https://player.resonaterecordings.com https://cloud.mc.williamblair.com https://www.youtube.com https://recaptcha.google.com https://www.googletagmanager.com https://job-boards.greenhouse.io; frame-ancestors https://client-uat.envestnet.com https://client.envestnet.com https://portal.tamaracinc.com https://uatportal.tamaracinc.com; object-src 'none'; base-uri 'self'; form-action 'self'; worker-src 'self' blob:; manifest-src 'self'; media-src 'self' data: blob:; child-src 'self' blob:; upgrade-insecure-requests; block-all-mixed-content; report-uri /api/csp/report 1
default-src 'self'; base-uri 'self'; frame-ancestors 'self'; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://use.typekit.net https://p.typekit.net; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://ajax.googleapis.com https://use.typekit.net https://d3e54v103j8qbb.cloudfront.net https://js.hsforms.net https://js.usemessages.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.typekit.net; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://stats.g.doubleclick.net https://forms.hsforms.com https://api.hubapi.com https://js.usemessages.com https://app.hubspot.com https://meetings.hubspot.com; frame-src 'self' https://www.googletagmanager.com https://app.hubspot.com https://meetings.hubspot.com; 1
font-src fonts.googleapis.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.googletagmanager.com www.google.com h.online-metrix.net eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * c.sharethis.mgr.consensu.org 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io maps.googleapis.com maps.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com platform-api.sharethis.com platform-cdn.sharethis.com l.sharethis.com *.google-analytics.com www.googletagmanager.com *.doubleclick.net www.google.com www.google.com.mx data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ maps.googleapis.com maps.gstatic.com fonts.googleapis.com cdn.conekta.io conektaapi.s3.amazonaws.com h.online-metrix.net eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com static.zdassets.com buttons-config.sharethis.com platform-cdn.sharethis.com platform-api.sharethis.com connect.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.conekta.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com ekr.zdassets.com l.sharethis.com *.zendesk.com wss://widget-mediator.zopim.com *.google-analytics.com www.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://*.lifepharmacy.com; script-src 'self' https://*.lifepharmacy.com https://www.googletagmanager.com https://www.google-analytics.com https://direct.lc.chat https://static.cloudflareinsights.com https://connect.facebook.net https://googleads.g.doubleclick.net https://www.googleadservices.com 'unsafe-inline'; script-src-elem 'self' https://*.lifepharmacy.com https://www.googletagmanager.com https://www.google-analytics.com https://direct.lc.chat https://static.cloudflareinsights.com https://connect.facebook.net https://googleads.g.doubleclick.net https://www.googleadservices.com 'unsafe-inline'; style-src 'self' https://*.lifepharmacy.com 'unsafe-inline'; img-src 'self' https: data:; font-src 'self' https://*.lifepharmacy.com data:; connect-src 'self' https: wss:; frame-src 'self' https://*.lifepharmacy.com https://www.googletagmanager.com https://direct.lc.chat https://*.doubleclick.net https://www.facebook.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self' https://*.lifepharmacy.com; form-action 'self' https://*.lifepharmacy.com; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report; 1
frame-ancestors 'self' etickets.infomaniak.com manager.infomaniak.com; report-uri /csp-reports; 1
default-src https:;script-src https: 'self' 'strict-dynamic' 'nonce-ad4a39dbac9591e81878920424f099d0e8718bda9b4b003063cb9babf0b83573' 'unsafe-inline' 'unsafe-eval' 'report-sample';style-src https: 'unsafe-inline';img-src https: data:;connect-src https: wss:;font-src https: data:;object-src 'none';media-src https: blob: data:;frame-src https: data: blob:;child-src 'self' https:;form-action 'self';frame-ancestors https://my.firespring.com;base-uri 'self' https://insights.sitesearch360.com;worker-src 'self' blob:;manifest-src 'self' https://cdn.firespring.com;report-uri /csp_log?n=1 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com https://plugin-magento-ui.glopalservice.com maxcdn.bootstrapcdn.com *.salesfire.co.uk *.brooktaverner.us *.cloudflare.com *.jsdelivr.net *.klaviyo.com pouch-global-font-assets.s3.eu-central-1.amazonaws.com *.slant.co *.smassets.net data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com *.facebook.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors *.certcapture.com *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com *.bugherd.com *.livechatinc.com *.livechat.com *.stripe.com *.stripe.network klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com account.fetchify.com js.mollie.com *.salesfire.co.uk calendly.com *.convert.com *.doubleclick.net *.evri.com *.facebook.com *.gnatta.com *.googletagmanager.com *.surveymonkey.com *.termly.io *.trustpilot.com *.vimeo.com vimeo.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com *.sweetanalytics.com *.brooktaverner.us *.visualwebsiteoptimizer.com *.bing.com *.clarity.ms *.google.co.uk *.livechatinc.com *.livechat.com *.stripe.com *.stripe.network *.google.com ebizmarts-website.s3.amazonaws.com brippo.s3.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klarna.com *.klarnaevt.com *.klarnacdn.net magefan.com cm.magefan.com mageside.com https://maps.googleapis.com https://maps.gstatic.com https://www.mollie.com *.salesfire.co.uk *.adalyser.com *.adroll.com *.bing.net *.brooktaverner.com.au *.brooktaverner.co.uk *.cloudflare.com *.convertexperiments.com d3k81ch9hvuctc.cloudfront.net *.doubleclick.net ebizmartsextensions.s3.amazonaws.com *.facebook.com *.facebook.net gnattawatchtower.blob.core.windows.net *.googleadservices.com *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.by www.google.ca www.google.cd www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gg www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sn www.google.so www.google.sr www.google.st www.google.tg www.google.tn www.google.tt www.google.vu google.com *.googlesyndication.com *.googletagmanager.com *.ometria.com *.omguk.com *.smassets.net t.co *.twitter.com *.vimeo.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com *.trustpilot.com *.glopal.com *.sweetanalytics.com *.ads-twitter.com *.twitter.com *.googletagmanager.com *.visualwebsiteoptimizer.com *.zdassets.com *.bing.com *.clarity.ms *.adroll.com *.bugherd.com *.livechatinc.com *.livechat.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.sagepay.com *.opayo.eu.elavon.com cc-cdn.com https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com cdn-renderer.glopalstore.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ x.klarnacdn.net *.klarnaservices.com js.mollie.com pay.google.com applepay.cdn-apple.com *.salesfire.co.uk *.33across.com *.adalyser.com *.brooktaverner.co.uk brooktaverner.us *.brooktaverner.us *.calendly.com *.cloudflare.com *.cloudflareinsights.com *.convert.com *.convertexperiments.com *.doubleclick.net *.evri.com *.facebook.net *.getelevar.com *.gnatta.com *.googleapis.com *.googlesyndication.com *.gstatic.com *.jquery.com *.klaviyo.com *.ometria.com *.omguk.com *.paypal.com *.surveymonkey.com *.termly.io *.webgains.io 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src fonts.googleapis.com https://fonts.googleapis.com *.certcapture.com *.glopal.com *.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com *.sagepay.com *.opayo.eu.elavon.com cc-cdn.com https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com https://static.klaviyo.com maxcdn.bootstrapcdn.com *.klarnacdn.net *.salesfire.co.uk *.typekit.net *.brooktaverner.co.uk *.brooktaverner.us *.gnatta.com *.googletagmanager.com *.gstatic.com *.klaviyo.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com *.sweetanalytics.com *.zopim.com *.clarity.ms brooktaverner.zendesk.com *.zdassets.com *.livechatinc.com *.livechat.com *.stripe.com *.stripe.network klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com fonts.googleapis.com fonts.gstatic.com *.sagepay.com *.opayo.eu.elavon.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com https://api-plugin-facade.glopalservice.com https://cognito-idp.eu-west-1.amazonaws.com api.glopaltranslator.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ x.klarnacdn.net *.klarnaservices.com *.salesfire.co.uk *.smartmetrics.co.uk *.adroll.com *.bing.com *.bing.net *.brooktaverner.co.uk *.brooktaverner.us *.convertexperiments.com *.datadome.co *.doubleclick.net *.facebook.com *.getelevar.com *.gnatta.com *.googleadservices.com *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bi www.google.bj www.google.bs www.google.by www.google.ca www.google.cd www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gg www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kz www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.mv www.google.mw www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sn www.google.so www.google.tg www.google.tn www.google.tt www.google.vu *.googlesyndication.com *.googletagmanager.com *.ikhnaie.link *.jquery.com *.klaviyo.com *.ometria.com *.samsung.com t.co *.termly.io *.trustpilot.com *.twitter.com *.visualwebsiteoptimizer.com *.webgains.io 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; report-uri https://c07a795d-56fb-4453-8188-078c928ca0fb.sansec.watch/; report-to report-endpoint; 1
font-src *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.fontawesome.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com *.stripe.network *.google.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.google.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.sagepay.com *.opayo.eu.elavon.com widget.freshworks.com m2epro.freshdesk.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.trustpilot.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com downloads.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com unsafe-inline assets.braintreegateway.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com widget.freshworks.com m2epro.freshdesk.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' data: 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://www.google-analytics.com https://stats.g.doubleclick.net https://dc.services.visualstudio.com; script-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://www.google-analytics.com https://www.googletagmanager.com https://ajax.googleapis.com https://*.msecnd.net; object-src 'none'; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; sandbox allow-forms allow-same-origin allow-scripts; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://us.i.posthog.com https://app.posthog.com https://cdn.taboola.com https://widget.trustpilot.com https://customerioforms.com https://js.hs-scripts.com https://js.usemessages.com https://js.hsforms.net https://app.referralhero.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.googleadservices.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://widget.trustpilot.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://us.i.posthog.com https://app.posthog.com https://www.google-analytics.com https://customerioforms.com https://assets.customer.io https://api.hubspot.com https://forms.hubspot.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://js.hs-scripts.com https://app.hubspot.com https://widget.trustpilot.com https://td.doubleclick.net; object-src 'none'; base-uri 'self'; form-action 'self' https://customerioforms.com https://forms.hubspot.com 1
frame-src https://player.vimeo.com https://vercel.live https://js-eu1.hsforms.net;  default-src 'self';  connect-src 'self' https://vod-adaptive-ak.vimeocdn.com https://player.vimeo.com https://cdn.onesignal.com https://api.onesignal.com https://www.google-analytics.com https://2omuot5pszatw52g6hqgt2e5ke0rptfb.lambda-url.us-east-1.on.aws/ https://px.ads.linkedin.com https://l.clarity.ms https://static.hsappstatic.net https://api-eu1.hubapi.com https://track-eu1.hubspot.com https://forms-eu1.hsforms.com https://js-eu1.hsforms.net https://forms-eu1.hscollectedforms.net https://pro.ip-api.com https://9xgnrndqve.execute-api.us-west-2.amazonaws.com https://cdn.weglot.com https://api.weglot.com https://cdn-api-weglot.com https://cdn.cookielaw.org https://geolocation.onetrust.com;  worker-src 'self' blob:;  script-src 'self' 'unsafe-eval' 'unsafe-inline' https://px.ads.linkedin.com https://cdn.onesignal.com https://api.onesignal.com https://www.googletagmanager.com https://vercel.live/_next-live/feedback/feedback.js https://www.google-analytics.com/analytics.js https://snap.licdn.com https://js.hs-scripts.com https://www.clarity.ms https://scripts.clarity.ms https://s3-us-west-2.amazonaws.com/b2bjsstore/b/VN080H4X276J/reb2b.js.gz https://js-eu1.hs-scripts.com https://js-eu1.hs-banner.com https://js-eu1.hs-analytics.net https://js-eu1.hscollectedforms.net https://js-eu1.hsadspixel.net https://js-eu1.hsforms.net https://static.hsappstatic.net https://cdn.weglot.com https://cdn.cookielaw.org;  style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://static.hsappstatic.net https://js-eu1.hsforms.net https://cdn.weglot.com;  img-src 'self' https://placeimg.dev https://getronics-cms-assets.s3.us-east-1.amazonaws.com https://metajive-7-assets.s3.us-east-1.amazonaws.com https://gtnwebsitestagingstorage.blob.core.windows.net https://px.ads.linkedin.com https://track-eu1.hubspot.com https://forms-eu1.hsforms.com https://www.linkedin.com https://c.clarity.ms https://www.googletagmanager.com https://c.bing.com https://cdn.weglot.com https://cdn.cookielaw.org blob: data:;  media-src 'self' https://getronics-cms-assets.s3.us-east-1.amazonaws.com https://i.vimeocdn.com https://player.vimeo.com https://metajive-7-assets.s3.us-east-1.amazonaws.com https://gtnwebsitestagingstorage.blob.core.windows.net blob: data:;  font-src 'self' https://fonts.gstatic.com https://cdn1.hubspotusercontent-eu1.net data:;  object-src 'none';  base-uri 'self';  form-action 'self';  frame-ancestors 'self' https://cmsstaging.getronics.com;  upgrade-insecure-requests; 1
font-src *.fontawesome.com *.paypal.com *.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.sandbox.paypal.com *.google.com *.twitter.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io https://info.dibs.se *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.sandbox.paypal.com *.gstatic.com 'self' data: *.trust-provider.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.googletagmanager.com www.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://*.dibspayment.eu *.disqus.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.sandbox.paypal.com *.paypalobjects.com *.google.com *.cdn-apple.com 'self' *.googleapis.com *.gstatic.com *.google-analytics.com *.googletagmanager.com *.trust-provider.com *.cloudflare.com *.twitter.com *.twimg.com *.usercentrics.eu *.fontawesome.com 'unsafe-inline' tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://*.dibspayment.eu *.fontawesome.com unsafe-inline assets.braintreegateway.com 'self' *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu vimeo.com *.braintreegateway.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://*.dibspayment.eu api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com *.sandbox.paypal.com *.cloudflare.com *.twitter.com *.twimg.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
style-src-elem use.typekit.net p.typekit.net *.adobe.com fonts.googleapis.com *.fontawesome.com fonts.bunny.net *.gstatic.com *.shopify.com *.avada.io raw.githubusercontent.com cdn.ampproject.org *.cdn-apple.com www.apptape.co.uk m2.dev.apptape.co.uk.cfstack.com m2.staging.apptape.co.uk.cfstack.com; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net 'self' data: www.apptape.co.uk data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://payments.epdq.co.uk www.apptape.co.uk 'self' 'unsafe-inline'; frame-ancestors www.apptape.co.uk 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com live.opayo.eu.elavon.com *.opayo.co.uk *.elavon.com secure7.arcot.com *.arcot.com www.googletagmanager.com www.apptape.co.uk 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com www.apptape.co.uk d3k81ch9hvuctc.cloudfront.net *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.avada.io *.shopify.com cdnjs.cloudflare.com cdn.jsdelivr.net eu1-config.doofinder.com trackcmp.net www.gstatic.com m2.dev.apptape.co.uk.cfstack.com *.hsforms.net *.hsforms.com *.gstatic.com www.apptape.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net cdnjs.cloudflare.com cdn.jsdelivr.net use.typekit.net p.typekit.net static-tracking.klaviyo.com m2.dev.apptape.co.uk.cfstack.com *.googleapis.com *.gstatic.com www.apptape.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptape.co.uk 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://get.geojs.io *.avada.io api-js.datadome.co t.elasticsuite.io *.hsforms.net *.hsforms.com www.apptape.co.uk 'self' 'unsafe-inline'; child-src www.apptape.co.uk http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com www.apptape.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-NQ9I5pOf6tFfyE5KQIxLvw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://ka-f.fontawesome.com https://*.googleapis.com https://fonts.gstatic.com https://fast.wistia.com *.fontawesome.com *.googleapis.com *.yotpo.com blog.avery.ca data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://dpotest.print.avery.ca https://*.avery.ca self *.canadapost-postescanada.ca *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com blog.avery.ca 'self' 'unsafe-inline'; frame-ancestors blog.avery.ca 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com accounts.google.com *.yotpo.com blog.avery.ca 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io maps.gstatic.com *.googleapis.com https://www.facebook.com https://www.google.ca/ads/ga-audiences https://*.doubleclick.net https://assets.avery.ca https://*.wistia.com https://bat.bing.com https://c.bing.com/ https://c.clarity.ms/ https://dpotest.print.avery.ca https://*.avery.ca https://*.avery.com self https://s3.amazonaws.com https://averycamedia.blob.core.windows.net https://d3fr11die0a4t8.cloudfront.net/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.trackedlink.net *.ddlnk.net *.yotpo.com blog.avery.ca data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com https://fast.wistia.net https://fast.wistia.com https://*.glancecdn.net https://bat.bing.com https://*.clarity.ms https://*.facebook.net https://*.pingdom.net https://*.livechatinc.com https://api.ipstack.com https://*.jquery.com/* https://*.avery.ca https://static.cloudflareinsights.com/beacon.min.js https://ws1.postescanada-canadapost.ca/js/addresscomplete-2.50.min.js https://pulse.clickguard.com/s/acckzZHxHmJmO/astNWLAlQk0ke https://*.osano.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com accounts.google.com *.fontawesome.com *.gstatic.com *.sharethis.com *.yotpo.com blog.avery.ca https://www.avery.ca 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://*.wistia.com https://*.googleapis.com https://ws1.postescanada-canadapost.ca/css/addresscomplete-2.50.min.css https://kit.fontawesome.com https://ka-f.fontawesome.com assets.braintreegateway.com *.fontawesome.com webchat.dotdigital.com webchat.staging.dotdigital.com accounts.google.com *.yotpo.com *.googleapis.com blog.avery.ca 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://*.avery.ca https://*.facebook.com blog.avery.ca 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com www.googleapis.com https://ka-f.fontawesome.com https://*.doubleclick.net https://fast.wistia.net https://*.wistia.com https://fg8vvsvnieiv3ej16jby.litix.io/ https://pipedream.wistia.com https://distillery.wistia.com https://*.avery.ca https://*.glance.net https://*.clarity.ms/collect https://*.facebook.net https://www.facebook.com/tr/ https://rum-collector-2.pingdom.net https://*.livechatinc.com https://pulse.clickguard.com https://bat.bing.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com accounts.google.com *.sharethis.com *.yotpo.com blog.avery.ca 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com blog.avery.ca http: https: blob: 'self' 'unsafe-inline'; default-src blog.avery.ca 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self' https://checkout.razorpay.com https://api.razorpay.com https://*.razorpay.com; img-src 'self' data: blob: https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://connect.facebook.net https://www.facebook.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://www.google.com https://www.google.co.in https://www.google.ae https://www.google.com.sa https://www.google.com.qa https://www.youtube-nocookie.com https://i.ytimg.com; font-src 'self' data:; media-src 'self'; script-src 'self' 'unsafe-inline' https://checkout.razorpay.com https://api.razorpay.com https://*.razorpay.com https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://connect.facebook.net https://www.facebook.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://www.google.com https://www.google.co.in https://www.google.ae https://www.google.com.sa https://www.google.com.qa https://www.clarity.ms https://scripts.clarity.ms https://*.clarity.ms; style-src 'self' 'unsafe-inline'; connect-src 'self' https://www.bhartiyaaviation.in https://checkout.razorpay.com https://api.razorpay.com https://*.razorpay.com https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://connect.facebook.net https://www.facebook.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://www.google.com https://www.google.co.in https://www.google.ae https://www.google.com.sa https://www.google.com.qa https://www.clarity.ms https://scripts.clarity.ms https://*.clarity.ms; frame-src https://checkout.razorpay.com https://api.razorpay.com https://*.razorpay.com https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://connect.facebook.net https://www.facebook.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://www.google.com https://www.google.co.in https://www.google.ae https://www.google.com.sa https://www.google.com.qa https://www.youtube-nocookie.com https://i.ytimg.com 1
default-src 'self'; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://static.cloudflareinsights.com; style-src 'self'; img-src 'self' data: https://www.google-analytics.com https://www.googletagmanager.com; connect-src 'self' https://www.google-analytics.com; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; form-action 'self'; 1
script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://clients2.google.com/gr/gr_full_2.0.6.js https://clients2.google.com/gr/gr_sync.js https://payments.google.com/payments/v4/js/integrator.js https://payments.sandbox.google.com/payments/v4/js/integrator.js https://ssl.gstatic.com/external_hosted/lottie/lottie.js https://translate.google.com/translate_a/element.js https://www.google-analytics.com/analytics.js https://www.google.com/recaptcha/api.js https://www.googletagmanager.com/gtag/js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.google.com/js/bg/ https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.hi.XJoIWZVPl7Y.2021.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/ https://payments.youtube.com/payments/v4/js/integrator.js https://payments.cloud.google/payments/v4/js/integrator.js;report-uri /_/PlayStoreUi/cspreport/fine-allowlist 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://adservice.google.com https://www.googletagservices.com https://*.adtrafficquality.google; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; frame-src https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://www.google.com https://*.adtrafficquality.google; connect-src 'self' https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://adservice.google.com https://*.adtrafficquality.google https://csi.gstatic.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests 1
default-src 'self'; script-src 'nonce-epLDS6VoYYI84r1JlHrOPw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-HyM0J0romSaxMEmhhU05Pg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
object-src 'none';base-uri 'self';script-src 'nonce-B_hSKRl73ounSJw2lSwOYg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'nonce-xKRjzr4XSIICMVZcYx9UPA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
style-src https://indigitall-cdn.com *.force.com 'self' https://stats.g.doubleclick.net https://lapolartarjeta.my.salesforce.com https://www.lapolar.cl https://checkoutshopper-test.adyen.com/ https://eu2.device-api.indigitall.com https://srvsw.lapolar.cl:9051 *.documentforce.com https://lapolartarjeta--botonpago--c.visualforce.com https://www.gstatic.com http://placehold.it https://lapolar.qservus.com https://www.google.com https://certif.upago.cl https://fonts.googleapis.com/css2 blob: https://fonts.googleapis.com/css http://via.placeholder.com *.redcalidad.com https://abc.cl https://service.force.com/embeddedservice/ https://cdn.wallpaperhub.app https://5cap.dec.cl 'unsafe-inline' https://qa-lapolartarjeta.cs123.force.com https://lapolartarjeta.builder.salesforce-communities.com https://inbox-api.indigitall.com https://cdn-qservus.redcalidad.com https://fingerprint.api.vusecurity.com http://source.unsplash.com https://webfly-p4.abcd.envs.veritran.com https://checkoutshopper-live.adyen.com/ https://micuenta.tarjetalapolar.cl https://source.unsplash.com https://tarjetalapolar.force.com https://lapolartarjeta--dev.livepreview.salesforce-communities.com https://indigitall.com https://fonts.googleapis.com https://inapp-api.indigitall.com https://lapolartarjeta--c.visualforce.com https://qs28.qservus.com validacionidentidad.tarjetaabc.cl https://dev-lapolartarjeta.cs2.force.com https://webfly-p4.abcq.veritran.com https://www.abc.cl https://device-api.indigitall.com https://qa-lapolartarjeta.cs197.force.com *.tarjetalapolar.cl https://www.googletagmanager.com https://eu2.indigitall-cdn.com https://use.fontawesome.com *.salesforce.com https://www.google-analytics.com *.visualforce.com:* https://www.tarjetalapolar.cl; report-to sfdc-csp-ep; report-uri https://lapolartarjeta.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D3k000000tOhd&networkId=0DM3k000000kdPK&type=communities 1
default-src 'self'; script-src 'self' 'nonce-5cMQdCMJ7kGxSJc3grfuID9h6B04e/FiZthQ7gkeYYI=' 'unsafe-eval' https://insight.adsrvr.org https://aaa-life-staging.convincely.io https://aaa-life-develop.convincely.io https://aaa-life-cdn.convincely.io https://aaa-life.convincely.io https://res.cloudinary.com 'sha256-ELKW0GB2Mmq5yuDRmJbOq4g0NT4en07oEJbN3NexMDs=' 'sha256-KY5SifleBVl+Oqaz3bZrNdgqtOsboiBe9H6BcodZR+w=' 'sha256-2e1h3Z0zyBE9N198HppJJA3WL4drYDqLtF1+/QLe1MA=' 'sha256-gu5HXmJq2SSw/rrkSoJ391fYKbMDBV3YTJSLozpOJ/E=' 'sha256-MJClRY2kMfarCeIaL1ZJROMiUzbxj+HAzM0gedmDsD8=' 'sha256-1hKH0vqnrOLZNtYyWhSBJs2pC8/CNZkhgFYCMMFDohc=' 'sha256-D6qmPappLq44HkTPDqoPNt4xbq6tey0/OMw+ES98kOA=' https://r.turn.com https://www.consumersadvocate.org 'sha256-ybGOhw0ptqEoEtsSRyQ1n39K40RJXTCVhciYX8GfmtE=' 'sha256-6IlTJmwjx2i2kt2GqHBx9SUoyvuuRJac9lLJaaG6gVY=' 'sha256-jilxzDAwoMHnI/sYPunbSF4PSFxa66I2MHS9tIiCrfg=' 'sha256-bPNC2UYZnsqF48WT2uvK3nwpsShkbHpESFH7CN22A2A=' 'sha256-CcAuTXsLFhPG8+bvXGEFTNqwgTP+gOp/1xzrE6+ml84=' 'sha256-2uhomdmXBdGGhi4cZWcrOSYYZE9FsTPOKmMGgHryLvM=' 'sha256-ttY1wyqGZTaUeC1w8cHnVp0l51uQCV36NFWV0wZQf34=' 'sha256-Ec4W03JbrjcKZLKC4NKIhW+WFtweeOtsvFwitQa+bdg=' 'sha256-QWVHgV7/NKVvW7NOTevf+CXpSCEf1BLqRrpOWxiNejE=' 'sha256-tQP6EDVF7j88gqhwx5PUtZaSLhLp+h/WaljmRHsVfeE=' 'sha256-VGFSrUo2w2StxJIf4omo6zNORYnJAhvpYN+/lAIyvWI=' 'sha256-QMBL/+k2zFo1vUBu90Mzzc7kIy1hGJt8iqrldTBeLGI=' 'sha256-G9MqehnTpAR+N1ZmC08TBi1mgxGhFZ652b8fxLeDgI8=' 'sha256-VSteLxW5hBO4uuaVuud54qESHNhWrnExM9YdV672YEc=' https://ssl.google-analytics.com/ https://static.cloudflareinsights.com https://widget.trustpilot.com https://www.fullstory.com https://bat.bing.com https://bat.bing.net https://cdn.optimizely.com https://cdnjs.cloudflare.com https://connect.facebook.net https://ct.pinterest.com https://fullstory.com https://edge.fullstory.com https://googleads.g.doubleclick.net https://invitejs.trustpilot.com https://js.adsrvr.org https://lpcdn.lpsnmedia.net https://lptag.liveperson.net https://maps.googleapis.com https://rum-static.pingdom.net https://s.pinimg.com https://s.swiftypecdn.com https://siteintercept.qualtrics.com https://va.v.liveperson.net https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.youtube.com https://zn6x5e1z85ygpkxoy-aaalife.siteintercept.qualtrics.com/SIE/; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://s.swiftypecdn.com https://www.gstatic.com https://www.googletagmanager.com; object-src 'self'; base-uri 'self'; connect-src 'self' https://s.pinimg.com https://eservices.aaalife.com https://aaa-life-cdn.convincely.io https://datadoghq.com https://www.googleadservices.com https://api.picked.convincely.io https://aaa-life.convincely.io https://evnts.pckd.dev https://api.picked.app https://apipub.aaalife.com https://cdnjs.cloudflare.com https://accdn.lpsnmedia.net https://ad.doubleclick.net https://stats.g.doubleclick.net https://www.facebook.com https://analytics.google.com https://rum.optimizely.com https://www.google-analytics.com https://bat.bing.com https://bat.bing.net https://ct.pinterest.com https://widget.trustpilot.com https://demo-1.conversionsapigateway.com https://edge.fullstory.com https://globalip.melissadata.net https://insight.adsrvr.org https://ip-tracker.aaalife.com https://logx.optimizely.com https://maps.googleapis.com https://mpc-prod-16-s6uit34pua-uk.a.run.app https://rs.fullstory.com https://rum-collector-2.pingdom.net https://s.swiftypecdn.com https://search-api.swiftype.com https://siteintercept.qualtrics.com https://va.idp.liveperson.net https://www.google.com https://www.googletagmanager.com wss://va.msg.liveperson.net; font-src 'self' https://acqcdn.s3.amazonaws.com https://cdnjs.cloudflare.com https://fonts.gstatic.com; frame-src 'self' https://match.adsrvr.org https://track.clickbooth.com https://va.shiftstatus.liveperson.net https://va.msghist.liveperson.net https://www.facebook.com https://13230076.fls.doubleclick.net https://8882006.fls.doubleclick.net https://a17908878585.cdn.optimizely.com https://aaalife.qualtrics.com https://ct.pinterest.com https://insight.adsrvr.org https://lpcdn.lpsnmedia.net https://widget.trustpilot.com https://www.google.com https://www.googletagmanager.com https://www.youtube.com; img-src 'self' https://image.ibb.co https://acqcdn.s3.amazonaws.com https://simage2.pubmatic.com https://ib.adnxs.com https://x.bidswitch.net https://ssl.google-analytics.com https://pixel.rubiconproject.com https://match.adsrvr.org data: https://dsum-sec.casalemedia.com https://googleads.g.doubleclick.net https://rtb.excelimpact.com https://img.convincely.io https://i.ibb.co https://r.turn.com https://www.trcknow.com https://www.aaalife.com https://fonts.gstatic.com https://connect.facebook.net https://www.gstatic.com https://ct.pinterest.com https://www.shmktpl.com https://res.cloudinary.com https://www.quotelab.com https://insuranceclicks.com https://bat.bing.com https://bat.bing.net https://ad.doubleclick.net https://cc.swiftype.com https://iad1.qualtrics.com https://insight.adsrvr.org https://insurance.mediaalpha.com https://rtb-test.excelimpact.com https://lpcdn.lpsnmedia.net https://maps.gstatic.com https://seal.entrust.net https://siteintercept.qualtrics.com https://www.facebook.com https://maps.googleapis.com https://www.google.com https://www.googletagmanager.com; manifest-src 'self'; media-src 'self' https://res.cloudinary.com https://media.convincely.io https://lpcdn.lpsnmedia.net; frame-ancestors 'self' https://app.optimizely.com https://aaalife.com https://www.aaalife.com https://loyalty.aaalife.com https://directterm.aaalife.com https://submityourclaims.aaalife.com; worker-src 'self';  report-uri https://aaalifetest.report-uri.com/r/t/csp/reportOnly; 1
default-src 'self' data: 'unsafe-eval' 'unsafe-inline' https://*.baidu.com http://*.baidu.com https://*.baidustatic.com http://*.baidustatic.com https://*.hao123.com http://*.hao123.com https://*.bdstatic.com http://*.bdstatic.com https://*.hao123img.com http://*.hao123img.com https://*.hao222.com http://*.hao222.com https://*.baidu.cn http://*.baidu.cn https://*.shifen.com http://*.shifen.com https://*.bdimg.com http://*.bdimg.com https://*.bcebos.com http://*.bcebos.com https://dwz.cn http://dwz.cn; img-src * data:; media-src * data:; report-uri /hao123_api/csp/report 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: *.fontawesome.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com *.hipay-tpp.com *.hipay.com https://www.googletagmanager.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.hipay-tpp.com *.hipay.com mpsnare.iesnare.com *.paypal.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://cdnjs.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.hipay.com *.fontawesome.com https://fonts.googleapis.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com data: mpsnare.iesnare.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.hipay-tpp.com *.hipay.com wss://mpsnare.iesnare.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://www.google.com https://www.gstatic.com https://*.posthog.com https://transcend-cdn.com https://*.sanity.io https://assets.revenuehero.io https://*.hsforms.net https://js.hsforms.net https://*.unifygtm.com https://*.unifyintent.com https://*.intercom.io https://*.intercomcdn.com https://munchkin.marketo.net https://*.mktoresp.com https://*.marketo.com; style-src 'self' 'unsafe-inline' https://*.sanity.io https://fonts.googleapis.com https://transcend-cdn.com https://*.marketo.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://*.sanity.io https://jump.imgix.net https://*.intercomcdn.com; connect-src 'self' https://*.posthog.com https://*.sanity.io wss://*.sanity.io https://my.jumpapp.com https://staging.jumpapp.dev https://*.unifygtm.com https://*.unifyintent.com https://www.google.com https://www.googletagmanager.com https://transcend-cdn.com https://telemetry.us.transcend.io https://*.hsforms.com https://api.hsforms.com https://*.mktoresp.com https://*.marketo.com https://*.revenuehero.io https://*.intercom.io wss://*.intercom.io https://*.intercomcdn.com https://*.intercomusercontent.com https://*.intercom-messenger.com wss://*.intercom-messenger.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://*.sanity.io https://www.google.com https://*.revenuehero.io https://*.hsforms.net https://*.marketo.com https://intercom-sheets.com https://www.intercom-reporting.com; media-src 'self' https://jump.imgix.net https://storage.googleapis.com https://*.sanity.io https://*.intercomcdn.com; frame-ancestors 'self' https://*.sanity.io; object-src 'none'; base-uri 'self'; form-action 'self' https://my.jumpapp.com https://staging.jumpapp.dev https://*.marketo.com 1
'img-src' 'blob' 'default-src' 'self' 'unsafe-inline' 'unsafe-eval' 'blob' blob: http://blog-cms.weddingz.in https://stats.g.doubleclick.net https://securesentry.oyorooms.io https://code.getmdl.io https://assets.pinterest.com https://graph.facebook.com *.s3.amazonaws.com https://api.instagram.com https://api.pinterest.com https://connect.facebook.net *.cloudfront.net https://ds-aksb-a.akamaihd.net *.googleapis.com *.gstatic.com *.criteo.com *.criteo.net https://www.facebook.com https://www.google-analytics.com https://www.google.co.in https://www.google.com https://www.googletagmanager.com https://www.googleadservices.com https://m.weddingz.in https://media.weddingz.in https://js-agent.newrelic.com https://assets.oyoroomscdn.com https://maxcdn.bootstrapcdn.com https://weddingz.in https://www.youtube.com https://tagmanager.google.com *.instagram.com https://instagram *.tile.openstreetmap.org; report-uri /private_apis/content-security-violation/ 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self'; style-src 'self'; img-src 'self' data: blob:; font-src 'self' data:; connect-src 'self'; frame-src 'self'; media-src 'self'; worker-src 'self' blob:; manifest-src 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' www.googletagmanager.com www.google-analytics.com stats.g.doubleclick.net www.gstatic.com widget.freshworks.com; style-src 'self' 'unsafe-inline' www.gstatic.com fonts.googleapis.com use.fontawesome.com widget.freshworks.com; img-src 'self' data: *.climateinteractive.org www.googletagmanager.com www.gstatic.com widget.freshworks.com; font-src 'self' data: fonts.gstatic.com use.fontawesome.com; connect-src 'self' www.google-analytics.com widget.freshworks.com climateinteractive.freshdesk.com; child-src www.google.com www.youtube.com app.mapline.com; report-to /csp-reports 1
font-src https://www.googletagmanager.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com *.gstatic.com magefan.com cm.magefan.com https://hendi.xcdn.nl/ data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page tagmanager.google.com https://www.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://www.googletagmanager.com tagmanager.google.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src vimeo.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.adyen.com *.snapchat.com *.rsa3dsauth.co.uk 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.adyen.com *.facebook.com *.sharethis.com *.youtube-nocookie.com *.rsa3dsauth.co.uk googletagmanager.com td.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.adyen.com *.sharethis.com *.firebacks.net *.plaque-de-cheminee.fr *.kaminplatte.de *.piastredelcamino.com *.placa-de-chimenea.es *.haardplaat.com *.google.nl *.google.com *.google-analytics.com *.hzcdn.com https://images.unsplash.com *.disqus.com *.hsforms.net *.hsforms.com 'self' data: *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com *.feedbackcompany.com *.google-analytics.com *.googleadservices.com *.sharethis.com chimpstatic.com unpkg.com *.disqus.com *.hsforms.net *.hsforms.com *.gstatic.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.sharethis.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.adyen.com *.feedbackcompany.com *.google-analytics.com stats.g.doubleclick.net *.sharethis.com noembed.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; img-src 'self' data: https:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://pagead2.googlesyndication.com https://www.googletagmanager.com https://www.clarity.ms https://scripts.clarity.ms https://www.ezojs.com https://ezoicanalytics.com; frame-src 'self' https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://fundingchoicesmessages.google.com https://ep2.adtrafficquality.google https://www.google.com; font-src 'self' data:; connect-src 'self' https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://*.clarity.ms https://fundingchoicesmessages.google.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://ezoicanalytics.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://ssl.google-analytics.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com; font-src 'self' data: https://maxcdn.bootstrapcdn.com; img-src 'self' data: https:; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://cloudflareinsights.com; frame-src 'self' https://www.google.com; worker-src 'self' blob: https://www.google.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self'; connect-src 'self' assets-cdn.kodomo-booster.com www.google-analytics.com am.yahoo.co.jp analytics.google.com stats.g.doubleclick.net; font-src 'self' fonts.gstatic.com assets-cdn.kodomo-booster.com data:; frame-src 'self' www.googletagmanager.com bid.g.doubleclick.net youtube.com www.youtube.com www.facebook.com td.doubleclick.net; img-src 'self' image2.kodomo-booster.com assets-cdn.kodomo-booster.com www.googletagmanager.com ssl.gstatic.com www.gstatic.com www.google-analytics.com googleads.g.doubleclick.net www.google.com maps.gstatic.com *.googleapis.com *.ggpht ad.as.amanad.adtdp.com ade.clmbtech.com adgen.socdm.com adx.dable.io b99.yahoo.co.jp beacon.krxd.net c.bing.com cm.g.doubleclick.net contextual.media.net cs.adingo.jp dev.visualwebsiteoptimizer.com eb2.3lift.com hb.yahoo.net ib.adnxs.com idsync.rlcdn.com pixel.rubiconproject.com r.casalemedia.com rtb-csync.smartadserver.com s.ad.smaato.net simage2.pubmatic.com sync-t1.taboola.com sync.outbrain.com tags.bluekai.com tg.socdm.com tr.line.me www.facebook.com www.google.co.jp x.bidswitch.net data:; script-src 'self' assets-cdn.kodomo-booster.com tagmanager.google.com www.google-analytics.com ssl.google-analytics.com www.googleadservices.com www.google.com googleads.g.doubleclick.net maps.googleapis.com www.itokuro.jp b99.yahoo.co.jp connect.facebook.net d.line-scdn.net dev.visualwebsiteoptimizer.com 'unsafe-inline' 'unsafe-eval' 'nonce-xaFSX6mrFpP37yFDbYt2whjwLqQF/SMEY6PASRvTG4w='; style-src 'self' tagmanager.google.com fonts.googleapis.com assets-cdn.kodomo-booster.com 'unsafe-inline' 'nonce-xaFSX6mrFpP37yFDbYt2whjwLqQF/SMEY6PASRvTG4w='; report-uri https://o240875.ingest.sentry.io/api/5769216/security/?sentry_key=bf03e8125dc74d988001801b90a625db&sentry_environment=production 1
object-src  'none'; connect-src 'self' *.dogfartnetwork.com *.dfxtra.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.dogfartnetwork.com *.dfxtra.com join.gammasecure.com; script-src 'self' *.dogfartnetwork.com *.dfxtra.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.dogfartnetwork.com *.dfxtra.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
base-uri 'none'; object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-dGwVBRDisqaZXgWffIc4Rw==' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.fontawesome.com *.googleapis.com *.bootstrapcdn.com *.klaviyo.com *.zip.co https://fonts.bunny.net https://fonts.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.auspost.zone 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.auspost.zone zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app * www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.facebook.com https://firebasestorage.googleapis.com t.zip.co static.zip.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://api.addressfinder.io *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app * *.fontawesome.com *.googleapis.com *.gstatic.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.auspost.zone https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.googletagmanager.com *.facebook.net www.termsfeed.com https://cdn.jsdelivr.net *.avada.io *.shopify.com static.zip.co zip.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://api.addressfinder.io *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.fontawesome.com assets.braintreegateway.com *.bootstrapcdn.com *.typekit.net onesignal.com *.klaviyo.com *.zip.co https://static.klaviyo.com https://fonts.bunny.net *.googleapis.com *.addtoany.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://api.addressfinder.io *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com https://maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.auspost.zone *.googleapis.com *.livechatinc.com *.cloudfront.net *.doubleclick.net *.zip.co *.zipmoney.com.au *.jsdelivr.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io http://dpm.demdex.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.stripe.com *.google.com *.opayo.eu.elavon.com *.globalpay.com https://fonts.gstatic.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.fontawesome.com *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.stripe.com *.google.com *.opayo.eu.elavon.com *.gpwebpay.com *.gpe.cz *.globalpay-ecommerce.com https://*.securesuite.co.uk https://securesuite.co.uk *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.stripe.com *.opayo.eu.elavon.com *.americanexpress.com *.globalpay.com *.mastercard.com *.visa.com *.gpwebpay.com *.gpe.cz *.globalpay-ecommerce.com https://*.securesuite.co.uk https://securesuite.co.uk pay.google.com https://payments.google.com *.youtube.com/ https://scontent-ams4-1.cdninstagram.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.stripe.com *.google.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.opayo.eu.elavon.com *.globalpay.com https://www.gstatic.com/instantbuy/svg/dark/pay/en.svg https://www.gstatic.com/instantbuy/svg/light/pay/en.svg https://www.gstatic.com/instantbuy/svg/dark/en.svg https://www.gstatic.com/instantbuy/svg/light/en.svg https://platform-api.sharethis.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.maps.gstatic.com maps.gstatic.com maps.googleapis.com https://clauem2.arrowtheme.com https://scontent.cdninstagram.com/ https://scontent-ams4-1.cdninstagram.com *.alothemes.com *.magepow.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.googleapis.com www.xtento.com cdn.xtento.com staging.quba.com www.google.co.in www.facebook.com *.clarity.ms c.bing.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.stripe.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.opayo.eu.elavon.com *.aexp-static.com https://ajax.aspnetcdn.com *.globalpay.com *.gpapiservices.com https://pay.google.com https://*.securesuite.co.uk https://securesuite.co.uk https://payments.google.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.maps.googleapis.com *.trackedlink.net *.maps.gstatic.com maps.googleapis.com *.googletagmanager.com *.googleadservices.com https://buttons-config.sharethis.com/ https://connect.facebook.net https://platform-api.sharethis.com https://scontent-ams4-1.cdninstagram.com *.alothemes.com *.magepow.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com *.googleapis.com www.xtento.com cdn.xtento.com static.hotjar.com www.clarity.ms cdnjs.cloudflare.com script.hotjar.com connect.facebook.net https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.stripe.com *.google.com downloads.mailchimp.com *.opayo.eu.elavon.com https://fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com *.google-analytics.com https://platform-api.sharethis.com *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.stripe.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.opayo.eu.elavon.com https://google.com/pay https://pay.google.com *.globalpay.com https://js.globalpay.com https://js-cert.globalpay.com https://*.securesuite.co.uk https://securesuite.co.uk https://payments.google.com *.cloudflare.com *.twitter.com *.twimg.com *.googleadservices.com *.google-analytics.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org *.google.co.in *.maps.gstatic.com *.maps.googleapis.com maps.googleapis.com https://scontent-ams4-1.cdninstagram.com *.alothemes.com *.magepow.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com *.googleapis.com stats.g.doubleclick.net u.clarity.ms p.clarity.ms ws.hotjar.com content.hotjar.io n.clarity.ms 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com https://secure.euplatesc.ro/tdsprocess/tranzactd.php 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.googletagmanager.com https://www.google.com/maps/ *.facebook.com *.google.com js.mollie.com https://td.doubleclick.net https://googleads.g.doubleclick.net/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https://images.unsplash.com *.google.ro *.facebook.com *.hsforms.net *.hsforms.com https://www.mollie.com *.tomybaby.ro *.temanovelart.ro https://www.google.com c.clarity.ms c.bing.com https://firebasestorage.googleapis.com 'self' data: *.tile.openstreetmap.org https://tile.openstreetmap.org https://media.cargus.ro data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com static.cloudflareinsights.com connect.facebook.net *.hsforms.net *.hsforms.com js.mollie.com pay.google.com applepay.cdn-apple.com *.clarity.ms *.avada.io *.shopify.com *.google.com *.gstatic.com https://tile.openstreetmap.org 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.analytics.google.com www.googleadservices.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://maps.googleapis.com https://player.vimeo.com https://www.google.com/recaptcha/ *.sentry.io *.ingest.de.sentry.io static.cloudflareinsights.com *.facebook.com *.facebook.net t.elasticsuite.io *.hsforms.net *.hsforms.com *.clarity.ms *.googlesyndication.com www.google.com *.doubleclick.net ampcid.google.com ampcid.google.com.vn *.cloudfunctions.net *.analytics-debugger.com https://get.geojs.io *.avada.io *.google-analytics.com https://tile.openstreetmap.org 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.tomybaby.ro/; report-to report-endpoint; 1
connect-src  'unsafe-inline' https: https://chat.tendertech.ru  wss://chat.tendertech.ru:7272 https://blacklist.tendertech.ru https://storage.tendertech.ru 1
default-src 'self'; script-src 'self' 'unsafe-inline' *.gstatic.com cdnjs.cloudflare.com cdn.jsdelivr.net github.com *.staticflickr.com nominatim.openstreetmap.org matomo1.telmedia.fr; style-src 'unsafe-inline' *.pasdecalais.fr; img-src 'self' data: map.telmedia.fr; frame-src *.youtube.com *.youtube.fr; report-uri /report-csp-violation 1
font-src fonts.gstatic.com use.typekit.net *.klarnacdn.net maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ *.klarna.com *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io blueskytechmage.com mageblueskytech.com placehold.jp *.klarna.com *.klarnaevt.com *.klarnacdn.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.klarnacdn.net maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.stripe.com klarna.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-uTcT3L68WhCpwyz96BuFcg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none'; script-src 'self' cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.google.com localhost:35729 yui.yahooapis.com; script-src-attr 'self'; style-src 'self' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; style-src-attr 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://www.google-analytics.com https://fundingchoicesmessages.google.com https://connect.facebook.net https://www.clarity.ms https://cdn.pagesense.io https://cdn.onesignal.com https://onesignal.com https://challenges.cloudflare.com https://accounts.google.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://*.patiotuerca.com https://*.seminuevos.com https://www.googletagmanager.com https://www.google-analytics.com https://*.analytics.google.com https://onesignal.com https://cdn.onesignal.com wss://*.onesignal.com; frame-src 'self' https://td.doubleclick.net https://securepubads.g.doubleclick.net https://cm.g.doubleclick.net https://www.googletagmanager.com https://challenges.cloudflare.com https://accounts.google.com https://staticxx.facebook.com 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com *.googleapis.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.canadapost.ca https://sso.epost.ca *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com platform.twitter.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com webservices.purolator.com devwebservices.purolator.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io mageside.com *.canadapost.ca *.canadapost-postescanada.ca *.googleapis.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com *.authorize.net assets.secure.checkout.visa.com sandbox.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.avada.io *.googleapis.com *.gstatic.com connect.facebook.net twitter.com platform.twitter.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.googleapis.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://get.geojs.io *.avada.io *.googleapis.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com webservices.purolator.com devwebservices.purolator.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src blob: *.osano.com; font-src 'self' data: *.gstatic.com; style-src 'self' data: fonts.googleapis.com *.leadoo.com 'unsafe-inline' *.osano.com; default-src 'self' 'unsafe-eval' data: media.hachettelearning.com; frame-src passport.hoddereducation.co.uk *.trustpayments.com *.securetrading.net *.secure.checkout.visa.com secure.checkout.visa.com *.cardinalcommerce.com pay.google.com thm.visa.com *.datadoghq-browser-agent.com *.browser-intake-datadoghq.eu *.trustpilot.com *.youtube.com *.vimeo.com *.osano.com td.doubleclick.net verify.monzo.com; connect-src *.algolia.net *.algolianet.com 'self' *.algolia.io *.sentry.io *.browser-intake-datadoghq.eu *.sentry.io google.com/pay *.cardinalcommerce.com *.fontawesome.com vimeo.com *.osano.com *.ads.linkedin.com analytics.tiktok.com *.analytics.google.com *.google-analytics.com *.googlesyndication.com *.hotjar.io www.google.com googleads.g.doubleclick.net ws.hotjar.com adservice.google.com analytics.google.com stats.g.doubleclick.net; frame-ancestors admin.hachettelearning.com 'self' admin.hachettelearning.com; script-src cdn.eu.trustpayments.com 'self' *.securetrading.net *.secure.checkout.visa.com secure.checkout.visa.com *.cardinalcommerce.com *.datadoghq-browser-agent.com *.browser-intake-datadoghq.eu pay.google.com *.fontawesome.com *.trustpilot.com *.youtube.com *.vimeo.com *.cloudflare.com *.osano.com www.googletagmanager.com 'unsafe-inline' snap.licdn.com static.hotjar.com connect.facebook.net static.ads-twitter.com analytics.tiktok.com *.analytics.google.com script.hotjar.com googleads.g.doubleclick.net; img-src secure.checkout.visa.com *.secure.checkout.visa.com *.vims.visa.com 'self' data: resourcehub-resource-api.hodder.education analytics.twitter.com *.ads.linkedin.com www.facebook.com/tr www.facebook.com www.googletagmanager.com www.google.com t.co www.google.co.uk googleads.g.doubleclick.net media.hachettelearning.com; form-action 'self' *.cardinalcommerce.com *.securetrading.net verify.monzo.com; base-uri 'self'; report-to csp-endpoint; report-uri https://www.hachettelearning.com/csp-report 1
default-src * data: blob: ; script-src 'nonce-ef630272b187aac089b96f622b881b34' 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.realmusic.ru https://www.realrocks.ru https://*.realmusic.ru https://*.realrocks.ru https://s.ytimg.com https://*.google-analytics.com https://*.youtube.com https://maps.googleapis.com https://translate.googleapis.com https://*.google.com https://google.com https://*.gstatic.com https://*.google.ru https://www.googletagmanager.com https://googletagmanager.com https://fonts.googleapis.com/ https://cdnjs.cloudflare.com/ https://yastatic.net https://mc.yandex.ru https://mc.yandex.com https://unpkg.com/ https://cdn.jsdelivr.net https://code.jquery.com ; script-src-attr 'self' 'unsafe-inline' ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/ https://cdnjs.cloudflare.com/ https://unpkg.com/ https://cdn.jsdelivr.net ; media-src 'self' about: https://*.realrocks.ru https://*.realmusic.ru ; frame-ancestors 'self' https://vk.com https://*.vk.com https://away.vk.com https://www.vk.com ; report-uri /report-to.php ; report-to csp 1
font-src *.gstatic.com https://maxcdn.bootstrapcdn.com https://dskz7wuac5max.cloudfront.net https://cdn.miromi.com.br *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.google.com data: 'self' 'unsafe-inline'; form-action *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.pagar.me *.netsgroup.com *.sibs.pt *.seglan.com *.secureacs.com *.rsa3dsauth.com *.apata.io *.cardinalcommerce.com *.santander.com.br *.bradesco.com.br *.bradesco *.stone.com.br *.nubank.com.br *.itau.com.br *.bb.com.br *.caixa.gov.br *.inter.co *.bancointer.com.br *.c6bank.com.br *.bancobmg.com.br *.safra.com.br *.sicoob.com.br *.banrisul.com.br *.banrisul.b.br *.banorte.com *.xpi.com.br *.btgpactual.com *.btgpactualdigital.com *.picpay.com *.amedigital.com *.neon.tech *.neon.com.br *.wise.com *.revolut.com *.sandbox.3dsecure.io *.google.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.instagram.com www.instagram.com *.pagar.me *.netsgroup.com *.sibs.pt *.seglan.com *.secureacs.com *.rsa3dsauth.com *.apata.io *.cardinalcommerce.com *.santander.com.br *.bradesco.com.br *.bradesco *.stone.com.br *.nubank.com.br *.itau.com.br *.bb.com.br *.caixa.gov.br *.inter.co *.bancointer.com.br *.c6bank.com.br *.bancobmg.com.br *.safra.com.br *.sicoob.com.br *.banrisul.com.br *.banrisul.b.br *.banorte.com *.xpi.com.br *.btgpactual.com *.btgpactualdigital.com *.picpay.com *.amedigital.com *.neon.tech *.neon.com.br *.wise.com *.revolut.com *.sandbox.3dsecure.io *.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com *.adobedtm.com *.cloudflare.com *.googleadservices.com https://dskz7wuac5max.cloudfront.net https://cdn.miromi.com.br https://images.unsplash.com https://firebasestorage.googleapis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com flagpedia.net *.cdninstagram.com *.instagram.com cdn.mundipagg.com api.pagar.me *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ apis.google.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://dskz7wuac5max.cloudfront.net http://cdnjs.cloudflare.com 'report-sample' 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *.adobedtm.com *.avada.io amcglobal.sc.omtrdc.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com *.cardinalcommerce.com songbirdstag.cardinalcommerce.com *.commerce-payment-services.com *.cloudflare.com pay.google.com *.google-analytics.com googletagmanager.com *.googletagmanager.com *.googleapis.com *.googleadservices.com *.gstatic.com https://www.gstatic.com/recaptcha https://www.google.com/recaptcha google.com *.google.com *.google.com/ https://maps.googleapis.com/maps/api/js includestest.ccdc02.com *.instagram.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.magento-ds.com *.newrelic.com *.nr-data.net www.paypal.com www.paypalobjects.com *.paypalobjects.com t.paypal.com c.paypal.com *.paypal.com www.sandbox.paypal.com sandbox.paypal.com *.sandbox.paypal.com https://js.stripe.com/v3/ *.stripe.com *.link.com *.typekit.net use.typekit.net https://cdn.miromi.com.br https://maps.googleapis.com https://player.vimeo.com *.shopify.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maps.googleapis.com *.cdninstagram.com 3ds2.pagar.me 3ds2-sdx.pagar.me 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com 'report-sample' 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com *.bootstrapcdn.com *.cloudflare.com *.fontawesome.com *.gstatic.com https://dskz7wuac5max.cloudfront.net https://cdn.miromi.com.br https://fonts.bunny.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com *.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com https://viacep.com.br https://dskz7wuac5max.cloudfront.net https://cdn.miromi.com.br https://cep.widenet.host https://proxier.now.sh https://apps.correios.com.br https://maps.googleapis.com https://player.vimeo.com https://get.geojs.io *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.gstatic.com maps.googleapis.com *.instagram.com https://proxier.vercel.app api.mundipagg.com api.pagar.me brasilapi.com.br viacep.com.br servicodados.ibge.gov.br *.google.com google.com pay.sandbox.google.com ingress.flareapp.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net fonts.googleapis.com *.googleapis.com *.gstatic.com data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com www.google.com pay.google.com sandbox.secure.checkout.visa.com secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net https://images.unsplash.com *.userway.org js.hsforms.net forms.hsforms.com forms-na1.hsforms.com maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com www.gstatic.com sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.facebook.com *.reddit.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com *.googletagmanager.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com https://maps.googleapis.com https://player.vimeo.com *.livechatinc.com *.crazyegg.com *.userway.org workforcenow.adp.com js.hsforms.net maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ pay.google.com x.klarnacdn.net sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://unpkg.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net *.redditstatic.com *.reddit.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.googletagmanager.com *.userway.org unsafe-inline assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com *.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io https://maps.googleapis.com https://player.vimeo.com *.livechatinc.com *.hubspot.com *.userway.org *.crazyegg.com workforcenow.adp.com js.hsforms.net forms.hsforms.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com thm.visa.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.google-analytics.com *.facebook.net *.redditstatic.com *.reddit.com *.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.githubusercontent.com *.yotpo.com *.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com www.paypal.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.meetanshi.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ https://static.addtoany.com/ www.google.com *.meetanshi.com *.doubleclick.net *.googletagmanager.com *.yotpo.com https://meetanshi.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com *.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com *.swagger.io *.adobedtm.com *.demdex.net *.magentocommerce.com *.doubleclick.net *.google.com *.paypal.com *.ytimg.com *.meetanshi.com *.yotpo.com *.bing.com *.gstatic.com *.googleapis.com *.solutionsstores.com https://firebasestorage.googleapis.com https://meetanshi.com/media/logo.png https://meetanshi.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://static.addtoany.com/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.bing.com *.googleapis.com *.yotpo.com widget.freshworks.com m2epro.freshdesk.com *.avada.io *.shopify.com player.vimeo.com *.meetanshi.com https://meetanshi.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.yotpo.com *.googleapis.com maxcdn.bootstrapcdn.com *.fontawesome.com widget.freshworks.com m2epro.freshdesk.com https://fonts.bunny.net *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net *.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://stats.addtoany.com/menu *.googleapis.com *.demdex.net *.google.com *.cardinalcommerce.com *.paypal.com *.meetanshi.com *.yotpo.com *.freshworks.com *.freshdesk.com *.avada.io *.stripe.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.bing.com google.com widget.freshworks.com m2epro.freshdesk.com https://get.geojs.io https://meetanshi.com klarna.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' solutionreach.okta.com login.solutionreach.com *.oktacdn.com; connect-src 'self' solutionreach.okta.com solutionreach-admin.okta.com login.solutionreach.com *.oktacdn.com *.mixpanel.com *.mapbox.com solutionreach.kerberos.okta.com solutionreach.mtls.okta.com https://oinmanager.okta.com data:; script-src 'unsafe-inline' 'unsafe-eval' 'self' 'report-sample' solutionreach.okta.com login.solutionreach.com *.oktacdn.com; style-src 'unsafe-inline' 'self' 'report-sample' solutionreach.okta.com login.solutionreach.com *.oktacdn.com; frame-src 'self' solutionreach.okta.com solutionreach-admin.okta.com login.solutionreach.com login.okta.com; img-src 'self' solutionreach.okta.com login.solutionreach.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com data: blob:; font-src 'self' solutionreach.okta.com login.solutionreach.com data: *.oktacdn.com fonts.gstatic.com; frame-ancestors 'self' https://fuse.pattersondental.com https://test-fuse-web.practicemgmt-test.pattersondevops.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.google.com https://*.googletagmanager.com https://*.bing.com https://*.googlesyndication.com https://*.gstatic.com https://*.visualwebsiteoptimizer.com https://d2iiunr5ws5ch1.cloudfront.net https://*.bugherd.com https://*.google-analytics.com https://*.doubleclick.net https://*.youtube.com https://*.hsforms.net https://*.hsforms.com https://*.zoominfo.com https://*.6sc.co https://*.6sense.com https://*.bizible.com https://*.hs-scripts.com https://app.jazz.co https://www.clickcease.com https://*.googleapis.com https://*.hubspot.com https://*.hscollectedforms.net https://*.hs-analytics.net https://*.hs-banner.com https://*.hsadspixel.net https://www.snapengage.com https://*.hsappstatic.net https://*.cookiebot.com https://snap.licdn.com https://*.clarity.ms https://*.ahrefs.com https://*.adroll.com https://connect.facebook.net https://js.stripe.com https://cdn.bizible.io https://*.convertexperiments.com; style-src 'self' 'unsafe-inline' data: blob: https://*.googleapis.com https://*.gstatic.com https://*.iconscout.com https://*.jsdelivr.net https://*.cookiebot.com https://cdnjs.cloudflare.com; img-src 'self' data: https://i.ytimg.com https://*.google.com https://*.googletagmanager.com https://*.bing.com https://d2iiunr5ws5ch1.cloudfront.net https://*.bugherd.com https://*.linkedin.com https://*.hsforms.com https://*.hsforms.net https://*.jazz.co https://avoxiprod.wpenginepowered.com https://*.bizibly.com https://*.googleapis.com https://*.bizible.com https://*.hubspot.com https://plugin-updates.wpengine.com https://s.w.org https://wpe-plugin-updates.wpengine.com https://*.cookiebot.com https://*.clarity.ms https://*.facebook.com https://*.adroll.com https://*.tapad.com https://*.adsrvr.org https://*.stripe.com https://*.convertexperiments.com; connect-src 'self' https://d2iiunr5ws5ch1.cloudfront.net https://*.bugherd.com https://*.hsforms.net https://*.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com https://*.google-analytics.com https://*.bing.com https://*.6sc.co https://*.6sense.com https://*.googlesyndication.com https://*.hsappstatic.net https://*.hubspot.com https://*.googletagmanager.com https://*.hscollectedforms.net https://*.zoominfo.com https://*.cookiebot.com https://connect.facebook.net https://*.google.com https://*.hubapi.com https://*.doubleclick.net https://*.ahrefs.com https://*.linkedin.com https://*.facebook.com https://*.clarity.ms https://*.adroll.com https://api.stripe.com https://*.convertexperiments.com; font-src 'self' data: https://*.googleapis.com https://*.gstatic.com https://*.jsdelivr.net https://*.iconscout.com https://cdnjs.cloudflare.com; object-src 'none'; media-src 'self'; frame-src 'self' blob: https://watch.getcontrast.io https://player.vimeo.com https://*.youtube-nocookie.com https://*.google.com https://*.youtube.com https://*.googletagmanager.com https://*.hsforms.net https://*.hsforms.com https://*.bugherd.com https://*.avoxi.com https://*.cookiebot.com https://js.stripe.com; child-src 'self' blob: https://*.avoxi.com; base-uri 'self'; form-action 'self' https://*.avoxi.com; upgrade-insecure-requests; block-all-mixed-content; frame-ancestors 'self' https://*.avoxi.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.newspark.ca https://*.newspark.io https://*.projects.fm https://*.fm01.net https://cdn.jsdelivr.net https://code.jquery.com https://maps.googleapis.com https://maps.google.com; style-src 'self' 'unsafe-inline' https://*.newspark.ca https://*.newspark.io https://*.projects.fm https://*.fm01.net https://cdn.jsdelivr.net https://fonts.googleapis.com https://stackpath.bootstrapcdn.com; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net; img-src 'self' data: blob: https:; media-src 'self' https: blob:; connect-src 'self' https://*.newspark.ca https://*.newspark.io https://*.projects.fm https://*.fm01.net; frame-src 'self' https://*.newspark.ca https://*.newspark.io https://*.projects.fm https://*.fm01.net https://www.google.com; report-uri /csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://fonts.gstatic.com *.forms.app *.googleusercontent.com *.hsappstatic.net *.klaviyo.com *.shopify.com *.slant.co unpkg.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ bid.g.doubleclick.net *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com https://app-wallee.com www.xtento.com *.googletagmanager.com *.addtoany.com *.bing.com *.cookiebot.com *.doubleclick.net *.forms.app forms.app *.opendns.com *.sg.ch 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maps.gstatic.com *.googleapis.com *.ggpht.com magefan.com cm.magefan.com *.disqus.com cdn.magmodules.eu https://www.mollie.com https://app-wallee.com https://img.youtube.com https://redchamps.com www.xtento.com cdn.xtento.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com *.bing.com *.bing.net *.clarity.ms *.cookiebot.com d3k81ch9hvuctc.cloudfront.net *.doubleclick.net www.google.ad www.google.ae www.google.al www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bj www.google.bt www.google.by www.google.ca www.google.cd www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.af www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bo www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.kh www.google.com.lb www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.za www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gl www.google.gr www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.iq www.google.is www.google.it www.google.je www.google.kg www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mu www.google.mv www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.si www.google.sk www.google.sn www.google.td www.google.tg www.google.tm www.google.tn *.google.com google.com *.googlesyndication.com *.googleusercontent.com *.kreando.ch *.researchsolutions.com s3.amazonaws.com *.shopify.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maps.googleapis.com *.disqus.com https://cdn.jsdelivr.net js.mollie.com https://app-wallee.com https://gmtech.mfgroup.ch https://assets.secure.checkout.visa.com www.xtento.com cdn.xtento.com *.googletagmanager.com tagmanager.google.com *.addtoany.com app-wallee.com *.bing.com *.clarity.ms *.cloudflare.com *.cookiebot.com *.doubleclick.net *.facebook.net forms.app *.googleapis.com *.googlesyndication.com *.klaviyo.com *.opendns.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com https://static.klaviyo.com https://cdn.jsdelivr.net https://app-wallee.com tagmanager.google.com fonts.google.com *.forms.app *.googleapis.com *.googletagmanager.com *.gstatic.com *.klaviyo.com *.typekit.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline';, connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.gstatic.com data: api.friendlycaptcha.com eu-api.friendlycaptcha.eu https://app-wallee.com https://assets.secure.checkout.visa.com *.googletagmanager.com app-wallee.com *.bing.com *.bing.net *.clarity.ms *.cookiebot.com *.doubleclick.net *.googleapis.com www.google.ae www.google.al www.google.at www.google.ba www.google.be www.google.bf www.google.bg www.google.bj www.google.by www.google.ca www.google.cd www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.bw www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.af www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bo www.google.com.br www.google.com.co www.google.com.cy www.google.com.eg www.google.com.hk www.google.com.kh www.google.com.lb www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.py www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.za www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.gr www.google.hr www.google.ht www.google.hu www.google.ie www.google.is www.google.it www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mu www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.si www.google.sk www.google.sn www.google.td www.google.tg www.google.tm www.google.tn *.googlesyndication.com *.typekit.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://a6e15cd5-e9b8-4f46-a176-3fcce39765e1.sansec.watch/; report-to report-endpoint; 1
base-uri 'none'; img-src 'self' blog.mozilla.org data: images.ctfassets.net www.google-analytics.com www.googletagmanager.com www.mozilla.org; style-src 'self' 'unsafe-inline' cdn.transcend.io transcend-cdn.com www.mozilla.org; frame-ancestors 'none'; upgrade-insecure-requests; default-src 'self' *.mozilla.org; connect-src 'self' *.analytics.google.com *.google-analytics.com *.googletagmanager.com analytics.google.com cdn.transcend.io google-analytics.com googletagmanager.com gtm.mozilla.org https://abdri3ttkb.execute-api.us-east-2.amazonaws.com https://accounts.firefox.com/ https://basket.mozilla.org o1069899.ingest.sentry.io o1069899.sentry.io region1.google-analytics.com telemetry.transcend.io telemetry.us.transcend.io transcend-cdn.com www.mozilla.org/submit/bedrock/; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.google-analytics.com *.googletagmanager.com cdn.transcend.io google-analytics.com googletagmanager.com js.stripe.com s.ytimg.com tagmanager.google.com transcend-cdn.com www.mozilla.org www.youtube.com; font-src 'self' www.mozilla.org; media-src 'self' assets.mozilla.net videos.cdn.mozilla.net www.mozilla.org; frame-src 'self' accounts.firefox.com gtm.mozilla.org js.stripe.com www.google-analytics.com www.googletagmanager.com www.youtube.com; form-action 'self' https://abdri3ttkb.execute-api.us-east-2.amazonaws.com https://accounts.firefox.com/ https://basket.mozilla.org; object-src 'none' 1
base-uri 'self';connect-src 'self' adservice.google.com identitytoolkit.googleapis.com securetoken.googleapis.com https://stats.g.doubleclick.net wss://orbx-orbs.firebaseio.com wss://*.firebaseio.com www.facebook.com www.google-analytics.com www.google.com consentcdn.cookiebot.com;default-src 'self';form-action 'self' www.facebook.com;img-src 'self' data: *.orbxdirect.com https://orbxdirect.com doubleclick.net i.ytimg.com *.stripe.com *.orbxsystems.com web.goog.cdn.orbxdirect.com www.facebook.com www.google-analytics.com www.gravatar.com imgsct.cookiebot.com orbx-cms.test;media-src 'self';object-src 'none';script-src 'self' cdnjs.cloudflare.com connect.facebook.net wasm-eval www.google-analytics.com www.googletagmanager.com challenges.cloudflare.com 'nonce-kn6VpNEzklA7sTtKqx55YVAXpou7AteI';script-src-elem 'self' apis.google.com cdnjs.cloudflare.com checkout.stripe.com connect.facebook.net doubleclick.net *.firebaseio.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com consent.cookiebot.com consentcdn.cookiebot.com 'nonce-kn6VpNEzklA7sTtKqx55YVAXpou7AteI';style-src 'self' fonts.googleapis.com p.typekit.net use.typekit.net;style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com p.typekit.net use.typekit.net;style-src-attr 'self' 'unsafe-inline';font-src 'self' fonts.gstatic.com use.typekit.net orbx-cms.test;frame-src checkout.stripe.com orbx-orbs.firebaseapp.com *.firebaseio.com doubleclick.net www.facebook.com facebook.com youtube.com challenges.cloudflare.com consentcdn.cookiebot.com;frame-ancestors 'none';script-src-attr 'nonce-kn6VpNEzklA7sTtKqx55YVAXpou7AteI' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com *.fontawesome.com *.stape.io data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com sandbox.przelewy24.pl secure.przelewy24.pl https://seo.mageplaza.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com pay.google.com apm.przelewy24.pl *.stape.io js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com static.przelewy24.pl www.gstatic.com gstatic.com *.stape.io https://img.youtube.com flagpedia.net https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://maps.googleapis.com *.disqus.com https://cdn.jsdelivr.net *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net sandbox.przelewy24.pl secure.przelewy24.pl pay.google.com apm.przelewy24.pl *.stape.io maps.googleapis.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://cdn.jsdelivr.net maxcdn.bootstrapcdn.com *.googleapis.com *.googletagmanager.com *.fontawesome.com *.stape.io *.gstatic.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://maps.googleapis.com https://player.vimeo.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog sandbox.przelewy24.pl secure.przelewy24.pl wss://ws.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com *.stape.io www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=iI3xkmK1i5cBZOpSSXcOYRaz3DJrOIQAu2KmnAlnBCg-1789272206.4622893-1.0.1.1-NxUzPMOxGtlehOh054dIPyV2FXHu9DCm2MbRjvSAlPWWhF5DvhxhGZPlqyiPI7dgxbKgUVrm.I8IG0DyuZ4tpOhW9G7KaQQIdEmEUqPvtpdYCLmtPJ0xjZQAHcNpv.U_MJWjXTd9qlyClqWS1n8Vwz.FMMxm6Mg.fD8l3jynGgeT6qmKYQyOM_Hv7Hlw4lc_; report-to cf-csp-endpoint 1
script-src 'self' 'nonce-pF3OqmA47EJs34Ez1zHTRgZIuAoIBUFr/gHccLJ8pc4=' 'strict-dynamic' 'wasm-unsafe-eval' www.youtube.com  az416426.vo.msecnd.net cdn.cookielaw.org www.google-analytics.com maps.googleapis.com www.googletagmanager.com  dl.episerver.net www.youtube.com www.google.com www.gstatic.com snap.licdn.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.com.ai https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.ms https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.vg https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat  https://connect.facebook.net/ https://munchkin.marketo.net/ static.hotjar.com script.hotjar.com https://cdn.jsdelivr.net/ https://cdn.cookielaw.org/;object-src 'none';base-uri 'self';report-uri https://o4507537122852864.ingest.de.sentry.io/api/4507764299726928/security/?sentry_key=2e67b3fa9c193f38db8ea33933d09ffa&sentry_environment=production&sentry_release=sprint24; 1
default-src 'self'; script-src 'self' 'nonce-ZveYUkZt1pq+CQTRMWkoNQ==' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'nonce-ZveYUkZt1pq+CQTRMWkoNQ==' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com; img-src 'self' data: https:; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com data:; connect-src 'self' https://www.google-analytics.com https://bat.bing.com https://connect.facebook.net https://hcaptcha.com https://www.googletagmanager.com; frame-src https://www.google.com https://challenges.cloudflare.com https://hcaptcha.com https://js.hcaptcha.com https://www.youtube.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests; block-all-mixed-content 1
default-src 'self' data: https://static.zdassets.com; img-src * data: https://*.google-analytics.com https://*.googletagmanager.com https://*.hotjar.com; font-src 'self' data: https://fonts.gstatic.com https://*.hotjar.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.googletagmanager.com https://cdn.segment.com https://widget.trustpilot.com https://diffuser-cdn.app-us1.com https://prism.app-us1.com https://static.zdassets.com https://assets.zendesk.com https://*.smartlook.com https://*.smartlook.cloud https://connect.facebook.net https://*.hotjar.com https://*.bloomreach.com https://*.exponea.com https://*.clarity.ms https://*.doubleclick.net https://www.googleadservices.com https://www.google.com https://*.fxstreet.com https://*.fxsstatic.com https://*.trackcmp.net https://trackcmp.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://*.hotjar.com; style-src-attr 'unsafe-inline'; connect-src 'self' ws: wss: https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://api.segment.io https://cdn.segment.com https://axiorysupport.zendesk.com https://ekr.zdassets.com https://api2.amplitude.com https://*.smartlook.com https://*.smartlook.cloud https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.bloomreach.com https://*.clarity.ms https://*.doubleclick.net https://www.google.com; frame-src 'self' https://*.doubleclick.net https://widget.trustpilot.com; 1
default-src https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.playlostark.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://sentry.amazongames.com https://d3irh93dd5ckql.cloudfront.net; script-src 'nonce-d00e62dcfa724c68b9effd5e6fdf01fc'  https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.playlostark.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://sentry.amazongames.com https://d3irh93dd5ckql.cloudfront.net; style-src 'self' 'nonce-d00e62dcfa724c68b9effd5e6fdf01fc'  https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.playlostark.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://sentry.amazongames.com https://d3irh93dd5ckql.cloudfront.net; img-src 'self' data:  https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.playlostark.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://sentry.amazongames.com https://d3irh93dd5ckql.cloudfront.net https://*.twimg.com https://player.twitch.tv/ https://*.ytimg.com; media-src 'self' data:  https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.playlostark.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://sentry.amazongames.com https://d3irh93dd5ckql.cloudfront.net https://*.twimg.com https://player.twitch.tv/ https://www.youtube.com https://youtube.com https://*.googlevideo.com; frame-src https://www.youtube.com https://youtube.com https://*.googlevideo.com https://*.twimg.com https://player.twitch.tv/  https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.playlostark.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://sentry.amazongames.com https://d3irh93dd5ckql.cloudfront.net; report-uri https://www.amazon.com/1/batch/2/OE/mid=ATVPDKIKX0DER:sid=139-0260203-5788176:rid=46C162385E4F43CAB2E7:sn=www.playlostark.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://www.google.com https://www.gstatic.com https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://stats.g.doubleclick.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: https:; connect-src 'self' https: https://www.google-analytics.com https://region1.google-analytics.com https://stats.g.doubleclick.net; frame-src 'self' https:; object-src 'none'; base-uri 'self' 1
style-src *.force.com https://ask.hotjar.io 'self' https://stats.g.doubleclick.net https://script.hotjar.com *.microchip.file.force.com https://checkoutshopper-test.adyen.com/ https://931-ude-464.mktoresp.com https://github.com https://cdn.cookielaw.org https://surveystats.hotjar.io https://upload.wikimedia.org https://cdn.ckeditor.com https://www.avrfreaks.net https://assets.adobedtm.com https://microchip.data.adobedc.net https://www.google.com https://analytics.google.com https://www.google.com.mx https://vc.hotjar.io https://dpm.demdex.net https://fonts.googleapis.com/css2 https://eservices2.microchip.com blob: https://conversions-config.reddit.com https://fonts.googleapis.com/css https://content.metrics-nds.docgen.nintex.io https://stageapps.microchip.com https://microchip.tt.omtrdc.net https://service.force.com/embeddedservice/ https://content.hotjar.io http://www.microchip.com 'unsafe-inline' https://cm.everesttech.net https://microchip.secure.force.com http://localhost:5173 https://googleads.g.doubleclick.net https://metrics.hotjar.io https://checkoutshopper-live.adyen.com/ https://microchip.my.salesforce-sites.com https://metrics-nds.docgen.nintex.io https://microchip.demdex.net https://pixel-config.reddit.com https://geolocation.onetrust.com https://raw.githubusercontent.com https://td.doubleclick.net https://hm.baidu.com https://app.getbeamer.com https://www.redditstatic.com https://data.metrics-nds.docgen.nintex.io https://backend.getbeamer.com https://in.hotjar.com https://px.ads.linkedin.com https://*.microchip.com wss://ws.hotjar.com https://privacyportal.onetrust.com https://www.googletagmanager.com https://alb.reddit.com https://www.google-analytics.com *.salesforce.com *.visualforce.com:*; report-to sfdc-csp-ep; report-uri https://microchip.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00Do0000000KAkK&networkId=0DM3l000000TRuT&type=communities 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self' data:; connect-src 'self'; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; 1
default-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=cn.EPnpagGgf24vRFjgM6fRe3v8oLHWYS_ckQ2xKozA-1789276798.6455235-1.0.1.1-TmXs71hAtSc8jyRdcx.zk4d4qM7GyDYl.V5SYXPUd7y0TulJsRYxpMQNeNY6gtKREt8Aza9RgtbAgPH36XEgM29TOZCaX8aZDnturM_XNe8KOnzPQ81Q8EWisqfw7.cJwspIgHSQSI0Y25NoV3vFS5SjV4XCPNB7HZ6vGUPHgylsv3geMu5T9coZFmf_yyd.OqmQu_umY426jC6nstiTZQ; report-to cf-zykhwqjdefuyyqpk 1
default-src 'self'; base-uri 'self'; object-src 'none'; worker-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://hireez.com https://apis.google.com https://www.recaptcha.net https://consent.cookiebot.com https://explore.hireez.com https://static.addtoany.com https://www.googletagmanager.com https://consentcdn.cookiebot.com https://hireez.my.site.com https://j.6sc.co https://www.printfriendly.com https://cdn.printfriendly.com https://snap.licdn.com https://connect.facebook.net https://www.youtube.com https://hireez.my.salesforce-scrt.com https://dev.visualwebsiteoptimizer.com https://static.hotjar.com https://script.hotjar.com https://googleads.g.doubleclick.net https://www.google.com https://www.gstatic.com https://*.hubspot.com https://*.hs-scripts.com https://*.hs-analytics.net https://*.hscollectedforms.net https://*.hsforms.net https://*.hs-banner.com https://*.leandata.com https://*.hsadspixel.net https://*.usemessages.com; style-src 'self' 'unsafe-inline' https://hireez.com https://fonts.googleapis.com https://hireez.my.site.com https://js.hsforms.net; font-src 'self' https://hireez.com https://fonts.googleapis.com https://fonts.gstatic.com data:; img-src 'self' https://hireez.com https://explore.hireez.com https://app.hireez.com https://hireezfile.kinsta.cloud https://b.6sc.co https://imgsct.cookiebot.com https://www.facebook.com https://px.ads.linkedin.com https://dev.visualwebsiteoptimizer.com https://www.googletagmanager.com https://www.google.com https://*.hubspot.com https://*.hsforms.com https://*.hubspotusercontent-na1.net https://www.google.ca https://www.google.co.uk https://www.google.co.in https://www.google.com.sg https://www.google.com.ng https://www.google.nl https://www.google.it https://www.google.com.au https://www.google.de https://www.google.fr https://www.google.es https://www.google.com.br https://www.google.com.mx https://www.google.co.jp https://www.google.ie https://www.google.com.ph https://www.google.co.za https://www.google.com.tr https://www.google.ae https://www.google.bg https://www.google.se https://www.google.com.ua https://www.google.com.ar https://www.google.com.sa https://www.google.be https://www.google.co.il https://www.google.kg https://www.google.com.bd https://www.google.gr https://googleads.g.doubleclick.net https://www.googleadservices.com https://*.hubspotusercontent-na2.net https://i.ytimg.com https://s.w.org https://connect.facebook.net https://pagead2.googlesyndication.com blob: data:; connect-src 'self' https://test.hireez.com https://consentcdn.cookiebot.com https://dev.visualwebsiteoptimizer.com https://staging-mobilehireez.kinsta.cloud https://webchatbot.hireez.com https://webchatbot.test2.hireez.info https://*.hubspot.com https://*.hubapi.com https://*.hs-scripts.com https://*.hscollectedforms.net https://*.hsforms.com https://*.hsforms.net https://*.google-analytics.com https://*.analytics.google.com https://www.google.com https://secure.adnxs.com https://px.ads.linkedin.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://epsilon.6sense.com https://c.6sc.co https://ipv6.6sc.co https://ws.hotjar.com wss://ws.hotjar.com https://*.leandata.com https://*.hsadspixel.net https://*.usemessages.com wss://*.usemessages.com https://*.hotjar.io https://www.googleadservices.com https://www.googletagmanager.com https://www.facebook.com https://pagead2.googlesyndication.com https://www.google.ca https://www.google.co.uk https://www.google.co.in https://www.google.com.sg https://www.google.com.ng https://www.google.nl https://www.google.it https://www.google.com.au https://www.google.de https://www.google.fr https://www.google.es https://www.google.com.br https://www.google.com.mx https://www.google.co.jp https://www.google.ie https://www.google.com.ph https://www.google.co.za https://www.google.com.tr https://www.google.ae https://www.google.bg https://www.google.se https://www.google.com.ua https://www.google.com.ar https://www.google.com.sa https://www.google.be https://www.google.co.il https://www.google.kg https://www.google.com.bd https://www.google.gr https://consent.cookiebot.com https://hubspot-forms-static-embed.s3.amazonaws.com https://static.hsappstatic.net https://pagead2.googlesyndication.com; frame-src 'self' https://hireez.com https://www.recaptcha.net https://toolytics.pa.clients6.google.com https://www.google.com https://www.facebook.com https://*.hsforms.com https://www.googletagmanager.com https://www.youtube.com https://explore.hireez.com https://static.addtoany.com https://consentcdn.cookiebot.com https://hireez.my.site.com https://td.doubleclick.net https://js.hsforms.net; frame-ancestors 'self' https://hireez.com https://www.googletagmanager.com https://www.youtube.com https://explore.hireez.com https://consentcdn.cookiebot.com https://hireez.my.site.com; form-action 'self' https://www.facebook.com https://explore.hireez.com https://*.hsforms.com https://*.hscollectedforms.net; report-uri https://5b53dda169b4175e255f1d0f7721f949.report-uri.com/r/d/csp/reportOnly; report-to default 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' wss:; script-src 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline' *.%2A.civiccomputing.com *.civiccomputing.com *.clarity.ms *.cloudflare.com *.googletagmanager.com *.jsdelivr.net *.library.wales; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://*.youtube.com https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.googleusercontent.com https://*.ggpht.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net *.googletagmanager.com *.library.wales *.llgc.org.uk *.staticflickr.com *.ticketsource.co.uk fonts.gstatic.com play.google.com syndication.twitter.com translate.google.com; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com *.google.com *.libanswers.com *.library.wales *.llyfrgell.cymru *.lyfrgell.cymru *.twitter.com div.show hwb.gov.wales sketchfab.com www.canva.com; style-src-elem 'report-sample' 'self' 'unsafe-inline' *.clarity.ms *.fontawesome.com *.libanswers.com *.library.wales connect.facebook.net fonts.googleapis.com; connect-src 'self' https://*.googleapis.com https://*.google.com https://*.gstatic.com data: blob: https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net; font-src 'self' https://fonts.gstatic.com; worker-src 'self' 'nonce-ayzsYdoubEbKx5uaoleldASEdlxk18KN25fP9PVuaOVL2zZrDTj95w' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.ggpht.com https://*.googleusercontent.com blob:; style-src 'self' 'unsafe-eval' 'unsafe-inline' wss: 'inline' 'report-sample'; script-src-elem 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline' *.%2A.civiccomputing.com *.civiccomputing.com *.clarity.ms *.cloudflare.com *.googletagmanager.com *.jsdelivr.net *.library.wales *.%2A.v2.scr.kaspersky-labs.com *.flickr.com *.libanswers.com adblockers.opera-mini.net connect.facebook.net s3.amazonaws.com wusote.hirizasune.com; report-uri https://www.library.wales/@http-reporting?csp=report&requestTime=1789279747415069&requestHash=b718e5536eedf62348fc253f3baefd89693cf63c 1
object-src 'none';base-uri 'self';script-src 'nonce-r9AL1tDvHiQeHYAR_0V20A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.fontawesome.com https://fonts.bunny.net d1cwup7r903a1d.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.affirm.com *.affirm.ca www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.authorize.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.affirm.com *.affirm.ca https://maps.googleapis.com https://maps.gstatic.com https://matomo.floorstoyourhome.com https://widget-v4.tidiochat.com https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.affirm.com *.affirm.ca https://maps.googleapis.com https://maps.gstatic.com https://matomo.floorstoyourhome.com https://cdn.callrail.com https://code.tidio.co https://widget-v4.tidiochat.com https://static.cloudflareinsights.com https://cdn.roomvo.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net cdn.routeapp.io fonts.googleapis.com *.amplitude.com cdn.jsdelivr.net protect-quote-q.route.com protection-widget.route.com stage-protection-widget.route.com protect-lightning-bolt-widget.route.com d3od5si8vgcekb.cloudfront.net ddbmicszvqxcg.cloudfront.net unpkg.com wobs.route.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net d1cwup7r903a1d.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.affirm.com *.affirm.ca https://maps.googleapis.com https://places.googleapis.com https://addressvalidation.googleapis.com https://cdn.callrail.com https://api.callrail.com https://matomo.floorstoyourhome.com https://www.google.com https://google.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://widget-v4.tidiochat.com wss://widget-v4.tidiochat.com https://socket.tidio.co wss://socket.tidio.co https://analytics.google.com https://*.analytics.google.com https://stats.g.doubleclick.net https://www.roomvo.com https://cloudflareinsights.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net api.route.com *.amplitude.com cdn.jsdelivr.net protect-quote-q.route.com protection-widget.route.com stage-protection-widget.route.com d3od5si8vgcekb.cloudfront.net protect-lightning-bolt-widget.route.com ddbmicszvqxcg.cloudfront.net unpkg.com wobs.route.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https:; script-src 'unsafe-inline' https:; style-src 'unsafe-inline' https:; object-src 'none'; img-src 'self' data: https:; font-src data: https:; frame-ancestors 'none'; block-all-mixed-content; report-uri https://lingvist.report-uri.com/r/d/csp/reportOnly 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; connect-src 'self' https://*.supabase.co wss://*.supabase.co https://api-supa.dropventure.com wss://api-supa.dropventure.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://pagead2.googlesyndication.com https://*.googlesyndication.com https://googleads.g.doubleclick.net https://*.g.doubleclick.net https://www.google.com https://ipapi.co https://api.ipify.org; script-src 'self' 'nonce-UbX1XWfLvFhc19uBWlInQQ==' https://www.googletagmanager.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://*.googlesyndication.com https://partner.googleadservices.com https://tpc.googlesyndication.com https://googleads.g.doubleclick.net https://adservice.google.com; frame-src https://*.google.com https://*.googlesyndication.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://www.youtube-nocookie.com https://www.youtube.com https://player.vimeo.com https://www.loom.com; form-action 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-UoKsBDc_usGmyltG6FgGfw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net https://applepay.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://plumrocket.com *.nosto.com *.nos.to *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.dotdigital-pages.com *.dotdigital.com https://plumrocket.com *.nosto.com *.nos.to *.payplug.com *.dalenys.com https://applepay.cdn-apple.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.wesupply.xyz 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io blob: www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.bird.eu *.trackedlink.net *.ddlnk.net *.openstreetmap.org maps.googleapis.com maps.gstatic.com https://images.unsplash.com https://firebasestorage.googleapis.com *.nosto.com *.nos.to https://secure-magenta.dalenys.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.google.com *.google.fr *.google.ie data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal maps.googleapis.com maps.gstatic.com fonts.googleapis.com https://maps.googleapis.com *.googletagmanager.com *.avada.io *.shopify.com *.nosto.com *.nos.to https://secure-magenta.dalenys.com https://applepay.cdn-apple.com api.payplug.com cdn.payplug.com www.gstatic.com www.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cloudflare.com *.google.fr *.google.ie *.googleadservices.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.nosto.com *.nos.to https://secure-magenta.dalenys.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com maps.googleapis.com https://maps.googleapis.com https://player.vimeo.com https://get.geojs.io *.avada.io *.nosto.com *.nos.to api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; default-src 'self' data: https: wss:; frame-ancestors https://www.codepen.io/ 'self'; frame-src https://www.googletagmanager.com https://bid.g.doubleclick.net https://td.doubleclick.net https://ct.pinterest.com https://*.stripe.com https://stripe.com https://*.youtube.com https://youtube.com https://www.facebook.com https://player.vimeo.com https://ss.preplounge.com https://consentcdn.cookiebot.com https://preplounge.clients.bbbapi.cloud 'self'; form-action 'self' https://*.facebook.com https://*.google.com https://*.apple.com https://*.linkedin.com; block-all-mixed-content true; script-src 'nonce-V3VTOVdjJWEpcUMqM29PeFh0Yk15U01pT2tDZnNJKHM=' https://www.preplounge.com https://ss.preplounge.com https://consent.cookiebot.com 'strict-dynamic' https: 'unsafe-inline' 'unsafe-eval' 'self'; style-src 'self' data: https: wss: 'unsafe-inline'; img-src * data: blob:; connect-src 'self' https: wss: blob:; worker-src 'self' blob:; report-uri /en/misc/csp-report 1
default-src 'self' https:; script-src 'unsafe-inline' 'unsafe-eval' assets.adobedtm.com *.belong.com.au *.belongtest.com.au telstra.demdex.net teamtelstra.demdex.net *.newrelic.com bam.nr-data.com *.hotjar.com www.google-analytics.com www.googletagmanager.com *.taboola.com *.adalyser.com connect.facebook.net pixel.byspotify.com verifi.podscribe.com ct.pinterest.com s.pinimg.com; style-src https: 'unsafe-inline'; connect-src https: wss: 'unsafe-inline'; media-src 'self' data: *.ctfassets.net; worker-src 'self' blob:; child-src 'self' blob:; font-src 'self' data: fonts.gstatic.com simpleui-au.vixverify.com *.hotjar.com; manifest-src 'self'; img-src 'self' data: android-webview-video-poster: *.contentful.com fonts.gstatic.com *.paypal.com www.paypalobjects.com *.ctfassets.net *.doubleclick.net *.analytics.google.com *.adalyser.com cm.everesttech.net *.google-analytics.com www.googletagmanager.com sp.analytics.yahoo.com *.taboola.com www.facebook.com *.cloudfunctions.net dpm.demdex.net *.adsrvr.org verifi.podscribe.com; frame-src 'self' belong://* *.kaptcha.com *.paypal.com www.paypalobjects.com mobilemaps.net.au *.cdn.optimizely.com www.youtube.com assets.braintreegateway.com *.telstra.com.au telstra.demdex.net teamtelstra.demdex.net *.adsrvr.org tsdtocl.com *.doubleclick.net *.hotjar.com lpcdn.lpsnmedia.net ct.pinterest.com; frame-ancestors 'self' *.belong-services.com.au; object-src 'self'; report-uri https://belong.report-uri.com/r/t/csp/reportOnly; report-to default; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com https://*.tawk.to/ *.fontawesome.com fonts.googleapis.com maxcdn.bootstrapcdn.com http://cdnjs.cloudflare.com/ajax/libs/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.google.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.youtube.com/ https://platform-api.sharethis.com https://buttons-config.sharethis.com https://l.sharethis.com https://scontent-ams4-1.cdninstagram.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * api.razorpay.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://platform-api.sharethis.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com https://clauem2.arrowtheme.com https://scontent.cdninstagram.com/ https://buttons-config.sharethis.com https://l.sharethis.com https://platform-cdn.sharethis.com https://scontent-ams4-1.cdninstagram.com https://s3.ap-south-1.amazonaws.com/* https://s3.ap-south-1.amazonaws.com https://*.tawk.to flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com cdn.razorpay.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io */walletsystem/index/applypaymentamount www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com maps.googleapis.com *.trackedlink.net *.maps.gstatic.com *.googletagmanager.com *.googleadservices.com https://connect.facebook.net https://platform-api.sharethis.com https://buttons-config.sharethis.com https://l.sharethis.com https://scontent-ams4-1.cdninstagram.com https://*.tawk.to https://adtarbo.eywamedia.com/scripts/adtarbo.min.js https://static.getbutton.io/widget-send-button/js/init.js https://adtarbo.eywamedia.com/scripts/adtarbo-core.min.js?v=66.68988515157149 player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com checkout.razorpay.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com *.google-analytics.com https://platform-api.sharethis.com https://buttons-config.sharethis.com https://l.sharethis.com https://*.tawk.to/ https://s3.ap-south-1.amazonaws.com/* https://s3.ap-south-1.amazonaws.com maxcdn.bootstrapcdn.com assets.braintreegateway.com unsafe-inline http://cdnjs.cloudflare.com/ajax/libs/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.cloudflare.com *.twitter.com *.twimg.com *.googleadservices.com *.google-analytics.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org *.google.co.in *.maps.gstatic.com maps.googleapis.com https://platform-api.sharethis.com https://buttons-config.sharethis.com https://l.sharethis.com https://scontent-ams4-1.cdninstagram.com https://*.tawk.to/ wss://*.tawk.to https://adtarbo.eywamedia.com/ www.gstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com lumberjack.razorpay.com lumberjack-metrics.razorpay.com *.gstatic.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' aims.okta.com *.pantheonsite.io cdnjs.cloudflare.com cdn.jsdelivr.net connect.facebook.net tag.simpli.fi scripts.clarity.ms analytics.tiktok.com www.googletagmanager.com aims.shell.451.io www.aims.edu events.aims.edu global.localizecdn.com script.crazyegg.com www.redditstatic.com www.google-analytics.com snap.licdn.com www.clarity.ms i.simpli.fi www.google.com www.gstatic.com; object-src 'none'; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com; img-src 'self' data: https:; media-src 'self'; frame-src 'self' aims.okta.com online.aims.edu aims.messenger.451.io aims.discoveredu.ai www.google.com www.gstatic.com; frame-ancestors 'self'; child-src 'self'; font-src 'self' fonts.gstatic.com data:; connect-src 'self' aims.okta.com *.aims.edu schedule.aims.edu events.aims.edu analytics.google.com *.clarity.ms analytics.api.451.io t.451.io analytics.tiktok.com www.googletagmanager.com global.localizecdn.com pixel-config.reddit.com www.google-analytics.com sites-management-api.451.io px.ads.linkedin.com stats.g.doubleclick.net analytics-ipv6.tiktokw.us bam.nr-data.net; report-uri /report-csp-violation 1
object-src 'none';base-uri 'self';script-src 'nonce-NMqJquvbFi9-o1sinJGDBA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.googleapis.com *.fontawesome.com fonts.gstatic.com fonts.cdnfonts.com https://fonts.bunny.net *.alothemes.com *.magepow.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.googleapis.com maps.gstatic.com https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.googleapis.com *.avada.io *.shopify.com *.alothemes.com *.magepow.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com *.googleapis.com *.fontawesome.com fonts.cdnfonts.com https://fonts.bunny.net *.alothemes.com *.magepow.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.googleapis.com https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
connect-src 'self' www.google.com analytics.google.com stats.g.doubleclick.net www.google-analytics.com adservice.google.com https://ekr.zdassets.com https://string.zendesk.com wss://api.smooch.io; default-src 'none'; font-src 'report-sample' 'self' https://fonts.gstatic.com; form-action 'report-sample' 'self'; frame-ancestors 'self'; frame-src 'self'; img-src 'report-sample' 'self' data: www.google.ca https://static.zdassets.com https://string.zendesk.com; report-to default; report-uri https://www.tierra.net/special/report/csp; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' https://api.smooch.io https://code.jquery.com https://static.zdassets.com https://www.clearhello.com https://www.google-analytics.com https://www.googletagmanager.com; style-src 'report-sample' 'self' 'unsafe-inline' https://fonts.googleapis.com 1
object-src 'none';base-uri 'self';script-src 'nonce-BePZwerDEWJuRUbAFg8a5w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-3q4GpzITnZ4TiOWrCPU8zA' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' 'unsafe-inline'; font-src 'self'; form-action 'self; base-uri 'self';default-src 'self' 1
default-src 'self'; script-src 'nonce-+dut2ShFwaiDZ5wNuuReRQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'none'; base-uri 'self'; object-src 'none'; script-src 'self' https://web.cmp.usercentrics.eu https://js-eu1.hsforms.net https://www.googletagmanager.com; script-src-attr 'none'; style-src 'self'; style-src-attr 'none'; img-src 'self' data:; font-src 'self'; connect-src 'self'; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com; media-src 'self'; form-action 'self'; frame-ancestors 'self'; manifest-src 'self'; worker-src 'self'; 1
object-src 'none'; script-src 'self' adform.net *.adform.net *.taboola.com *.kameleoon.io *.ads-twitter.com *.google-analytics.com *.jsdelivr.net *.kwai.net *.greencolumnart.com *.adalyser.com *.performgroup.com *.scoutgg.net *.sportradarserving.com *.pa4r.com res-odx.op-mobile.opera.com *.bannerflow.net *.facebook.com *.cloudfront.net *.maze.co *.app.delivery *.betano.ca *.betano.com *.betgenius.com *.bing.com *.clarity.ms *.cloudflare.com *.cloudflareinsights.com *.cookielaw.org *.creativecdn.com *.facebook.net *.fullstory.com *.geocomply.com *.gmlinteractive.com *.googletagmanager.com *.kaizengaming.com *.kameleoon.eu *.lgrckt-in.com *.optimove.net *.sportradar.com *.tostarsbuilding.com d32tdr35c4icxo.cloudfront.net *.experimentation.dev; worker-src 'self' blob:; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=LYTpaV8QC5aNc5nFhpOsxFxd9kAdoahgUNca94fsFds-1789289653.6642427-1.0.1.1-HM15uw6RZOp5XV5MdNpcWbHoUzI6mqSkRZXh1A9bvhx4NaBlMbsofWd6Sons9w1m0CoXNtP0Sbs3Ls8li5ZfLtyZYz70PXsXN09xTIqlE8IkF80I71uVejCi4xu6PyC9nNGucoxDGi5olojXvRCQg_v61ZdcHEM31xNCF2MbPWPvrVFYofJJwbw0ff9sc6UC; report-to cf-hbvrrvnamkyiimyn 1
script-src 'strict-dynamic' 'self' 'nonce-wnn0oR8zdGBX8F9rMiwYAw==' 'report-sample'; report-uri /gdhvb2c.onmicrosoft.com/B2C_1_signup_signin/client/cspreport?p=B2C_1_signup_signin 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://fonts.gstatic.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.certcapture.com sgtm.goodfellow.com consentcdn.cookiebot.com app-eu1.hubspot.com *.hs-sites-eu1.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.certcapture.com *.goodfellow.local *.goodfellow.com mcprod.goodfellow.com mcstaging.goodfellow.com *.feefo.com *.hubspot.com *.linkedin.com *.socialintents.com *.vimeo.com *.cookiebot.com *.bing.com *.businessintuition247.com *.clarity.ms *.google.co.uk *.google.com *.doubleclick.net *.hscollectedforms.net *.hs-analytics.net *.hsadspixel.net *.hs-banner.com *.hs-scripts.com *.licdn.com *.iweb.co.uk *.mida.so *.hsforms.com goodfellow.com openfpcdn.io *.hubapi.com https://maps.googleapis.com https://maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.certcapture.com *.goodfellow.local *.feefo.com *.hubspot.com *.linkedin.com *.socialintents.com *.vimeo.com *.cookiebot.com *.bing.com *.businessintuition247.com *.clarity.ms *.google.co.uk *.doubleclick.net *.hscollectedforms.net *.hs-analytics.net *.hsadspixel.net *.hs-banner.com *.hs-scripts.com *.licdn.com *.iweb.co.uk *.mida.so *.hsforms.com *.goodfellow.com goodfellow.com openfpcdn.io *.hubapi.com bam.nr-data.net js-eu1.usemessages.com https://maps.googleapis.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.goodfellow.local *.feefo.com *.hubspot.com *.linkedin.com *.socialintents.com *.vimeo.com *.cookiebot.com *.bing.com *.businessintuition247.com *.clarity.ms *.google.co.uk *.doubleclick.net *.hscollectedforms.net *.hs-analytics.net *.hsadspixel.net *.hs-banner.com *.hs-scripts.com *.licdn.com *.iweb.co.uk *.mida.so *.hsforms.com *.goodfellow.com goodfellow.com openfpcdn.io *.hubapi.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.certcapture.com *.goodfellow.local *.feefo.com *.hubspot.com *.linkedin.com *.socialintents.com *.vimeo.com *.cookiebot.com *.bing.com *.businessintuition247.com *.clarity.ms *.google.co.uk *.google-analytics.com *.doubleclick.net *.hscollectedforms.net *.hs-analytics.net *.hsadspixel.net *.hs-banner.com *.hs-scripts.com *.licdn.com *.iweb.co.uk *.mida.so *.hsforms.com *.goodfellow.com goodfellow.com openfpcdn.io *.hubapi.com static.hsappstatic.net https://maps.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.goodfellow.com/csp-report; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' https://www.googletagmanager.com https://js.stripe.com https://widget.intercom.io https://*.clarity.ms https://static.hj.contentsquare.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://pagead2.googlesyndication.com https://challenges.cloudflare.com https://www.youtube.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; img-src 'self' data: blob: https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://*.stripe.com https://*.clarity.ms https://c.bing.com https://widget.intercom.io https://static.hj.contentsquare.net https://www.youtube.com https://i.ytimg.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://api-iam.intercom.io https://widget.intercom.io https://*.clarity.ms https://c.bing.com https://js.stripe.com https://r.stripe.com https://static-na.payments-amazon.com https://challenges.cloudflare.com https://www.youtube.com; frame-src 'self' https://www.googletagmanager.com https://js.stripe.com https://hooks.stripe.com https://static-na.payments-amazon.com https://widget.intercom.io https://www.youtube.com https://www.youtube-nocookie.com https://challenges.cloudflare.com; media-src 'self' blob:; worker-src 'self' blob:; 1
default-src 'self';       base-uri 'self';       script-src 'self' 'unsafe-inline' 'unsafe-eval'           https://cdn.jsdelivr.net           https://api-data-www.jeanneau.com           https://tag.aticdn.net           https://cdn.cookielaw.org           https://connect.facebook.net           https://stonly.com           https://player.vimeo.com           https://www.googletagmanager.com           https://forms.beneteau-group.com           https://maps.googleapis.com;       style-src 'self' 'unsafe-inline'           https://cdnjs.cloudflare.com           https://forms.beneteau-group.com           https://fonts.googleapis.com;       img-src 'self' data:           https://app.jeanneau.com           https://www.googletagmanager.com           https://googleads.g.doubleclick.net           https://www.google.com           https://www.google.fr           https://www.facebook.com           https://cdn.cookielaw.org           https://www.prestige-yachts.com           https://www.beneteau-group.com           https://img.youtube.com           https://maps.googleapis.com           https://maps.gstatic.com           https://forms.beneteau-group.com;       font-src 'self'            https://cdnjs.cloudflare.com           https://fonts.gstatic.com;       connect-src 'self'           data:           https://api.ipify.org           https://ipinfo.io           https://logs1412.xiti.com           https://cdn.cookielaw.org           https://api-data-www.jeanneau.com           https://stonly.com           https://api.stonly.com           https://www.google.com           https://www.facebook.com           https://api.mapbox.com           https://events.mapbox.com           https://beneteau-group-privacy.my.onetrust.com           https://geolocation.onetrust.com           https://forms.beneteau-group.com           https://maps.googleapis.com           https://www.gstatic.com           https://maps.gstatic.com           https://www.cartopro.fr;       worker-src 'self' blob:;       media-src 'self'           https://app.jeanneau.com;       object-src 'self'           https://app.jeanneau.com;       frame-src 'self'           https://api-data-www.jeanneau.com           https://s.stonly.com           https://global.frcapi.com           https://player.vimeo.com           https://app.jeanneau.com           https://www.youtube.com           https://forms.beneteau-group.com           https://www.imacis.fr           https://www.bandofboats.com           https://www.facebook.com;       frame-ancestors 'self' 1
default-src 'none'; script-src 'nonce-pwQM3SaahD' 'strict-dynamic'; script-src-elem 'nonce-pwQM3SaahD' 'strict-dynamic'; script-src-attr 'none'; style-src 'nonce-pwQM3SaahD'; style-src-elem 'self' 'nonce-pwQM3SaahD' fonts.googleapis.com; style-src-attr 'unsafe-inline'; img-src 'self' data: blob: https://cdn.modyo.cloud https://maps.googleapis.com https://maps.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google.com https://www.google.com.pe https://www.google.cl; media-src 'self' https://cdn.modyo.cloud; font-src 'self' data: https://cdn.modyo.cloud https://fonts.gstatic.com; connect-src 'self' data: blob: https://integraciones.mibanco.com.pe https://consentcdn.cookiebot.com https://consent.cookiebot.com https://maps.googleapis.com https://www.google.com https://analytics.google.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://www.google-analytics.com https://region1.google-analytics.com https://static.hotjar.com/c/hotjar-; frame-src 'self' https://www.google.com https://consentcdn.cookiebot.com https://www.youtube.com https://www.googletagmanager.com; worker-src 'self'; manifest-src 'self'; object-src 'none'; base-uri 'none'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://pagead2.googlesyndication.com https://cdn.jsdelivr.net https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https:; connect-src 'self' https://www.google-analytics.com https://pagead2.googlesyndication.com https://www.googletagmanager.com https://cloudflareinsights.com wss://oneshop.co.za https://oneshop.co.za https://adtrafficquality.google https://*.adtrafficquality.google https://*.ingest.sentry.io https://*.ingest.de.sentry.io https://o4507412280442880.ingest.de.sentry.io; frame-src https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://www.google.com https://adtrafficquality.google https://*.adtrafficquality.google https://fundingchoicesmessages.google.com 1
default-src 'self';                 script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval'                     https://acsbapp.com                     https://browser.sentry-cdn.com                     https://cdn.cookielaw.org                     https://code.jquery.com                     https://cdn.jsdelivr.net                     https://fast.wistia.com                     https://fast.wistia.net                     https://js.monitor.azure.com                     https://kit.fontawesome.com                     https://www.google.com                     https://www.google.com/recaptcha                     https://www.googletagmanager.com                     https://www.gstatic.com                     https://connect.facebook.net                     https://static.xx.fbcdn.net                     https://polyfill.io                     https://ajax.googleapis.com                     https://developers.google.com                     https://maps.googleapis.com                     https://maps.gstatic.com;                 script-src-elem 'self' 'unsafe-inline' 'unsafe-eval'                     https://acsbapp.com                     https://browser.sentry-cdn.com                     https://cdn.cookielaw.org                     https://code.jquery.com                     https://cdn.jsdelivr.net                     https://fast.wistia.com                     https://fast.wistia.net                     https://js.monitor.azure.com                     https://kit.fontawesome.com                     https://www.google.com                     https://www.google.com/recaptcha                     https://www.googletagmanager.com                     https://www.gstatic.com                     https://connect.facebook.net                     https://static.xx.fbcdn.net                     https://polyfill.io                     https://ajax.googleapis.com                     https://developers.google.com                     https://maps.googleapis.com                     https://maps.gstatic.com;                 style-src 'report-sample' 'self' 'unsafe-inline'                     https://cdnjs.cloudflare.com                     https://cdn.jsdelivr.net                     https://code.jquery.com                     https://fonts.googleapis.com;                 style-src-elem 'self' 'unsafe-inline'                     https://cdnjs.cloudflare.com                     https://cdn.jsdelivr.net                     https://code.jquery.com                     https://fonts.googleapis.com;                 object-src 'none';                 base-uri 'self';                 connect-src 'self'                     https://acsbapp.com                     https://backend.acsbapp.com                     https://cdn.acsbapp.com                     https://cdn.cookielaw.org                     https://dc.services.visualstudio.com                     https://distillery.wistia.com                     https://embed-cloudfront.wistia.com                     https://fast.wistia.com                     https://fast.wistia.net                     https://fg8vvsvnieiv3ej16jby.litix.io                     https://geolocation.onetrust.com                     https://ka-p.fontawesome.com                     https://kit.fontawesome.com                     https://pipedream.wistia.com                     https://privacyportal.onetrust.com                     https://www.google-analytics.com                     https://www.googletagmanager.com                     https://analytics.google.com                     https://*.analytics.google.com                     https://www.google.com                     https://connect.facebook.net                     https://maps.googleapis.com                     https://maps.gstatic.com                     https://stats.g.doubleclick.net                     http://localhost:53767                     http://localhost:53749;                 font-src 'self'                     https://cdnjs.cloudflare.com                     https://fast.wistia.com                     https://fast.wistia.net                     https://ka-p.fontawesome.com                     https://fonts.gstatic.com                     data:;                 frame-src 'self'                     https://www.google.com                     https://www.googletagmanager.com                     https://www.facebook.com                     https://static.xx.fbcdn.net                     https://assets.braintreegateway.com/                     https://checkout.paypal.com/;                 img-src 'self' data:                     https://cdn.cookielaw.org                     https://fast.wistia.com                     https://embed-ssl.wistia.com                     https://www.globalmedicalresponse.com                     https://app-gmr-corpweb-amr.azurewebsites.net                     https://www.googletagmanager.com                     https://maps.gstatic.com                     https://maps.googleapis.com                     https://www.google.com                     https://www.google.com.ph                     https://www.google.co.in                     https://www.facebook.com                     https://facebook.com                     https://m.facebook.com                     https://amr.net                     https://www.amr.net;                 manifest-src 'self';                 media-src 'self' blob:                     https://embed-cloudfront.wistia.com                     https://fast.wistia.com;                 worker-src 'none';                 report-uri https://68654f9f841f0014a4c0d103.endpoint.csper.io?v=0; 1
font-src https://fonts.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.authorize.net *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ landofcoder.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://www.google.co.in/  https://www.google.com/ mageside.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page https://maps.googleapis.com landofcoder.com https://static.addtoany.com/ *.pinterest.com/ *.facebook.com/ https://www.google.co.in/  https://www.google.com/ *.livechatinc.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.fontawesome.com *.addtoany.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com landofcoder.com *.doubleclick.net https://www.google.co.in/  https://www.google.com/ http://dpm.demdex.net *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' 'unsafe-inline' *.neso.energy *.coveo.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.neso.energy *.coveo.com *.google-analytics.com *.hotjar.com *.clarity.ms bing.com *.bing.com *.coveo.com players.brightcove.net www.googletagmanager.com assets.juicer.io js.createsend1.com www.smartsurvey.co.uk assets.smartsurvey.io snap.licdn.com unpkg.com js-agent.newrelic.com *.cookieyes.com cdn-cookieyes.com my.visme.co; style-src 'self' 'unsafe-inline' *.neso.energy *.coveo.com assets.juicer.io unpkg.com fonts.googleapis.com search-assets.neso.energy; img-src 'self' data: *.neso.energy *.coveo.com *.clarity.ms www.googletagmanager.com *.google.co.uk c.bing.com www.juicer.io assets.juicer.io www.smartsurvey.co.uk *.cartocdn.com datanationalgrideso.files.wordpress.com *.tile.openstreetmap.org *.linkedin.com *.cookieyes.com cdn-cookieyes.com; frame-src 'self' *.neso.energy reports.nationalgrideso.com *.coveo.com players.brightcove.net www.youtube.com app.powerbi.com my.visme.co *.arcgis.com fuzzy-project-419729.framer.app; font-src 'self' *.neso.energy *.coveo.com themes.googleusercontent.com static.juicer.io fonts.googleapis.com fonts.gstatic.com; connect-src 'self' *.neso.energy api.neso.energy *.coveo.com *.clarity.ms *.hotjar.io *.hotjar.com *.google-analytics.com *.analytics.google.com fonts.googleapis.com storage.googleapis.com www.googletagmanager.com www.juicer.io *.staging.datopian.com bam.nr-data.net *.cookieyes.com cdn-cookieyes.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://www.googletagmanager.com https://*.visualwebsiteoptimizer.com https://connect.facebook.net https://www.google-analytics.com https://*.qualtrics.com https://static.cloudflareinsights.com https://consent.trustarc.com; object-src 'none'; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com; img-src 'self' data: blob: https://cdn.okya.co https://ucarecdn.com https://www.googletagmanager.com https://www.google-analytics.com https://*.visualwebsiteoptimizer.com https://www.facebook.com https://stats.g.doubleclick.net https://*.tile.openstreetmap.org https://*.qualtrics.com https://consent.trustarc.com https://www.google.com https://www.google.com.ph; media-src 'self' https://cdn.okya.co; frame-src 'self' https://www.googletagmanager.com https://www.facebook.com; frame-ancestors 'self'; child-src 'self' blob:; font-src 'self' data: https://fonts.gstatic.com https://consent.trustarc.com; connect-src 'self' https://*.visualwebsiteoptimizer.com https://www.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://photon.komoot.io https://*.qualtrics.com https://consent.trustarc.com https://*.nr-data.net https://www.google.com https://www.google.com.ph 1
object-src 'none';base-uri 'self';script-src 'nonce-JY_v8AKflbYKg2iDSFoGAw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self';         script-src 'self' 'unsafe-inline' 'unsafe-eval'       *.icl-group.com       ajax.googleapis.com       *.google.com *.googletagmanager.com *.google-analytics.com       *.gstatic.com www.gstatic.com       *.facebook.com *.facebook.net       *.licdn.com       *.allyable.com       cdn.jsdelivr.net       cdnjs.cloudflare.com       widget.tagembed.com       cloud.tagbox.com       player.vimeo.com       icl2021ir.q4web.com       maps.googleapis.com       www.tiktok.com       sf16-website-login.neutral.ttwstatic.com       *.clarity.ms       widget.intercom.io       js.intercomcdn.com;         connect-src 'self'       *.icl-group.com       *.google.com *.google-analytics.com *.googletagmanager.com       *.facebook.com *.facebook.net       *.ads.linkedin.com       *.allyable.com       icl2021ir.q4web.com       api.taggbox.com       widget.tagembed.com       cloud.tagbox.com       ipapi.co       maps.googleapis.com       *.clarity.ms       api-iam.intercom.io;         style-src 'self' 'unsafe-inline'       *.icl-group.com       cdn.jsdelivr.net       widget.tagembed.com       cloud.tagbox.com       fonts.googleapis.com       sf16-website-login.neutral.ttwstatic.com;         font-src 'self' data: 	  cloud.taggbox.com       *.gstatic.com       *.icl-group.com       cloud.tagbox.com;         img-src 'self' data: blob:       *.googletagmanager.com       px.ads.linkedin.com       portal.allyable.com       s.w.org       *.tile.openstreetmap.org       *.icl-group.com       *.allyable.com       *.facebook.com *.facebook.net       cdn.taggbox.com       cloud.tagbox.com       *.w.org       *.elementor.com       *.tagembed.com;         media-src 'self'       *.icl-group.com       cdn.tagbox.com;         frame-src 'self'       portal.allyable.com       player.vimeo.com       www.google.com       www.gstatic.com       leap13.github.io       www.youtube.com;     	worker-src 'self' blob: 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net https://www.googletagmanager.com *.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com https://www.gstatic.com https://fonts.gstatic.com *.hotjar.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://hpp.worldpay.com/app/hpp-iframe/integration/wpg/corporate https://secure-test.worldpay.com/shopper/3ds/ddc.html https://secure.worldpay.com/shopper/3ds/ddc.html https://payments-test.worldpay.com/app/hpp-iframe/integration/wpg/corporate https://payments-live.hpp.apps.eu-west-1-7z55k.dev.msp.worldpay.io/app/hpp-iframe/integration/wpg/corporate https://payments.worldpay.com/app/hpp-iframe/integration/wpg/corporate www.facebook.com *.worldpay.com *.nosto.com *.nos.to *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors https://pay.google.com/ 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com https://payments-test.worldpay.com/app/hpp-iframe/integration/wpg/corporate https://payments.worldpay.com/app/hpp-iframe/integration/wpg/corporate https://payments-live.hpp.apps.eu-west-1-7z55k.dev.msp.worldpay.io/app/hpp-iframe/integration/wpg/corporate https://pay.google.com https://secure-test.worldpay.com https://hpp.worldpay.com/ https://www.paypal.com/sdk/js lpcdn.lpsnmedia.net www.facebook.com cdn.knightlab.com *.worldpay.com www.youtube-nocookie.com www.youtube.com *.nosto.com *.nos.to c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.dotdigital-pages.com *.dotdigital.com landofcoder.com *.trustpilot.com https://www.google.com *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.ftcdn.net *.behance.net *.afd.co.uk *.cloudflare.com *.gstatic.com www.google-analytics.com *.bing.com www.facebook.com www.google.co.in *.clarity.ms cdn-ukwest.onetrust.com *.nosto.com *.nos.to www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.trackedlink.net *.ddlnk.net d21m4dsqdd3b9h.cloudfront.net *.doubleclick.net *.facebook.com *.facebook.net www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bj www.google.bs www.google.by www.google.ca www.google.cd www.google.cg www.google.ch www.google.cl www.google.cm www.google.co.bw www.google.co.id www.google.co.il www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.mv www.google.mw www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sn www.google.so www.google.tn www.google.tt www.google.vu google.com *.google.com *.hotjar.com *.klevu.com *.onetrust.com s3.amazonaws.com *.trackedweb.net *.trustpilot.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://rum.hlx.page https://www.google.com *.afd.co.uk *.jsdelivr.net https://www.google.com/recaptcha/api.js https://www.gstatic.com *.cloudflare.com https://pay.google.com/gp/p/js/pay.js https://applepay.cdn-apple.com/jsapi/v1/apple-pay-sdk.js https://payments.worldpay.com/resources/cse/js/worldpay-cse-1.0.2.min.js https://payments.worldpay.com/resources/hpp/integrations/embedded/js/hpp-embedded-integration-library.js https://d35p4vvdul393k.cloudfront.net/sdk_library/us/stg/ops/pc_gsmpi_web_sdk.js https://d16i99j5zwwv51.cloudfront.net/sdk_library/us/prd/ops/pc_gsmpi_web_sdk.js https://www.paypal.com/sdk/js *.lpsnmedia.net bat.bing.com cdn-ukwest.onetrust.com *.googleapis.com *.liveperson.net survey.g.doubleclick.net *.google.co.in *.google.com *.clarity.ms analytics.webgains.io connect.facebook.net *.worldpay.com *.varify.io tagmanager.google.com *.nosto.com *.nos.to js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal landofcoder.com widget.freshworks.com m2epro.freshdesk.com *.trustpilot.com https://www.alexandra.co.uk *.bing.com d21m4dsqdd3b9h.cloudfront.net *.doubleclick.net *.facebook.com *.facebook.net *.hotjar.com *.klevu.com *.onetrust.com *.webgains.io 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com https://fonts.googleapis.com/css *.nosto.com *.nos.to assets.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com widget.freshworks.com m2epro.freshdesk.com maxcdn.bootstrapcdn.com *.trustpilot.com d21m4dsqdd3b9h.cloudfront.net *.klevu.com *.onetrust.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com d21m4dsqdd3b9h.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.afd.co.uk https://www.google.com/pay https://pay.google.com/gp/p/web_manifest.json https://pay.google.com/gp/p/payment_method_manifest.json https://pay.google.com/ https://google.com/pay *.worldpay.com https://hpp.worldpay.com/app/hpp/135-0/telemetry https://hpp.worldpay.com/app/hpp/135-0/payment/paypalsmartbutton/continue https://www.paypal.com/sdk/js https://payments.worldpay.com/app/hpp/135-0/telemetry/iframe *.onetrust.com stats.g.doubleclick.net *.clarity.ms widget.trustpilot.com www.google-analytics.com analytics.google.com region1.google-analytics.com *.nosto.com *.nos.to api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://www.google-analytics.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com landofcoder.com widget.freshworks.com m2epro.freshdesk.com *.bing.com *.contentsquare.net *.doubleclick.net *.facebook.com *.facebook.net *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bj www.google.by www.google.ca www.google.ch www.google.cl www.google.cm www.google.co.bw www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.eg www.google.com.et www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ng www.google.com.np www.google.com.om www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.ki www.google.kz www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.mw www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.tn www.google.tt *.hotjar.com *.hotjar.io *.trustpilot.com *.webgains.io 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://708f9030-f3a8-4d71-9a62-c459d3d729dd.sansec.watch/; report-to report-endpoint; 1
font-src 'self' data:; img-src 'self' data: https://www.google-analytics.com https://www.googletagmanager.com; object-src 'none'; script-src 'self' 'report-sample' https://plausible.io 'sha256-/6SBPqW+GW+//4nlXX6Y1nR9dWlh0gsQJ6KK71djH6A=' https://cdnjs.cloudflare.com https://www.google.com; style-src 'self' 'report-sample' 'unsafe-hashes' 'sha256-3juv2Ft1FaY3xWYNGXExi9oTqA3RQ4gtgCqyf3mxGhU=' https://cdnjs.cloudflare.com; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'report-sample' 'self' https://app-script.monsido.com/v2/monsido-script.js https://apps.usw2.pure.cloud/genesys-bootstrap/genesys.min.js https://connect.facebook.net/en_US/fbevents.js https://js.adsrvr.org/up_loader.1.1.0.js https://s.swiftypecdn.com/install/v2/st.js https://sc-static.net/scevent.min.js https://ssl.google-analytics.com/ga.js https://static.ads-twitter.com/uwt.js https://tr.snapchat.com/config/com/f46d0350-ae7f-4886-b620-b497a4d93c9f.js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtm.js; style-src 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self' https://capidashboard.ialottery.com https://tr.snapchat.com https://tr6.snapchat.com https://www.google-analytics.com; font-src 'self'; frame-src 'self' https://10921257.fls.doubleclick.net https://apps.usw2.pure.cloud https://insight.adsrvr.org https://pixel-sync.sitescout.com https://tr.snapchat.com https://www.youtube.com; img-src 'self' https://analytics.twitter.com https://ssl.google-analytics.com https://t.co https://tracking.monsido.com https://www.facebook.com https://www.google.com; manifest-src 'self'; media-src 'self'; report-uri https://668597ef014602b312931fd2.endpoint.csper.io/?v=0; worker-src 'none'; 1
script-src 'nonce-7xbyrw9W_Us8uAWro9zqIg' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/static-on-bigtable; base-uri 'none' 1
default-src 'self'; frame-ancestors 'self'; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; connect-src 'self' https:; font-src 'self' data: https:; media-src 'self' data: https:; frame-src https:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.eismann.de https://*.eismann.it https://*.eismann.nl https://cookie-cdn.cookiepro.com https://cdn.jsdelivr.net https://*.googletagmanager.com https://analytics.eismann.digital https://*.google-analytics.com https://*.google.com https://*.google.de https://*.google.it https://*.google.nl https://*.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net https://*.g.doubleclick.net https://connect.facebook.net https://*.facebook.com https://analytics.tiktok.com https://*.tiktokw.us https://bat.bing.com https://*.clarity.ms https://*.outbrain.com https://www.dwin1.com https://www.awin1.com https://the.sciencebehindecommerce.com https://www.usemaxserver.de https://static.cloudflareinsights.com https://cdn.by.wonderpush.com https://analytics.eismann.digital https://sentry.eismann.digital https://browser.sentry-cdn.com https://cdn.ablyft.com https://widget.feedaty.com https://api.friendlycaptcha.com https://api.batteryincluded.io https://system.promio-connect.com https://lantern.roeyecdn.com https://in-automate.brevo.com https://sibautomation.com https://*.sibforms.com https://geolocation.onetrust.com https://privacyportal.cookiepro.com; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com https://www.googletagmanager.com https://widget.feedaty.com; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' https://*.eismann.de https://*.eismann.it https://*.eismann.nl https://*.ingest.de.sentry.io https://sentry.eismann.digital https://cookie-cdn.cookiepro.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.google.com https://*.google.de https://*.google.it https://*.google.nl https://*.google.es https://*.google.fr https://*.googleadservices.com https://*.doubleclick.net https://*.g.doubleclick.net https://*.googlesyndication.com https://in-automate.brevo.com https://sibautomation.com https://*.sibforms.com https://*.facebook.com https://connect.facebook.net https://analytics.eismann.digital https://log.ablyft.com https://app.ablyft.com https://cdn.jsdelivr.net https://gtm.eismann.digital https://eu-api.friendlycaptcha.eu https://*.frcapi.com https://bat.bing.net https://analytics.tiktok.com https://*.tiktokw.us https://bat.bing.com https://*.clarity.ms https://*.outbrain.com https://www.dwin1.com https://www.awin1.com https://the.sciencebehindecommerce.com https://www.wepowerconnections.com https://www.zenaps.com https://cdn.by.wonderpush.com https://widget.feedaty.com https://api.friendlycaptcha.com https://api.batteryincluded.io https://geolocation.onetrust.com https://privacyportal.cookiepro.com https://translate.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://*.cdn.office.net; frame-src 'self' https://*.eismann.de https://*.eismann.it https://*.eismann.nl https://*.doubleclick.net https://*.cloudflarestream.com https://*.videodelivery.net https://eismann.de https://www.gl-eismann.de https://*.facebook.com https://www.usemaxserver.de https://*.google.com https://*.sibforms.com https://system.promio-connect.com https://www.awin1.com; manifest-src 'self' https://cdn.by.wonderpush.com; object-src 'none'; base-uri 'none'; frame-ancestors 'self' https://*.eismann.de https://*.eismann.it https://*.eismann.nl; report-uri https://sentry.eismann.digital/api/12/security/?sentry_key=a0fd8a19cf2069447cddb6cc4ad9cc59&sentry_environment=production-report-only 1
font-src fonts.gstatic.com use.typekit.net *.klevu.com *.ksearchnet.com *.cloudflare.com *.googleapis.com *.zopim.com *.gstatic.com *.tawk.to *.jsdelivr.net media.flixfacts.com 'unsafe-inline' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com *.facebook.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; frame-ancestors *.hana.ondemand.com 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com maps.googleapis.com chart.googleapis.com oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com *.google.com *.nosto.com *.issuu.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.criteo.net *.criteo.com *.addthis.com *.facebook.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com 'unsafe-inline' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.klevu.com *.ksearchnet.com oppwa.com *.oppwa.com *.peachpayments.com *.eu-west-1.amazonaws.com *.cloudflare.com *.google.com *.google.lv *.google.co.za *.google.com.na *.google.na *.gstatic.com *.zopim.com *.nosto.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.zopim.io *.sfdr.co sfdr.co *.tawk.to tawk.link *.tawk.link *.addthis.com *.jsdelivr.net *.facebook.com *.azurewebsites.net maps.googleapis.com app.mobicredwidget.co.za amcglobal.sc.omtrdc.net media.flixcar.com rt.flix360.com assets.secure.checkout.visa.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com chimpstatic.com downloads.mailchimp.com *.list-manage.com https://browser.sentry-cdn.com *.klevu.com *.ksearchnet.com maps.googleapis.com chart.googleapis.com *.oppwa.com oppwa.com *.peachpayments.com *.zopim.com *.videoly.co sfdr.co *.cnetcontent.com *.cloudfront.net *.google.com *.google.lv *.google.co.za *.google.com.na *.google.na *.cloudflare.com *.cloudflareinsights.com *.nosto.com *.hotjar.com *.googletagmanager.com *.criteo.net *.criteo.com *.sfdr.co *.tawk.to *.tawk.link *.jsdelivr.net *.addthis.com *.addthisedge.com *.moatads.com *.mouseflow.com *.facebook.com *.what3words.com static.zdassets.com app.mobicredwidget.co.za www.gstatic.com connect.facebook.net bam.nr-data.net js.testfreaks.com media.flixfacts.com media.flixcar.com security-hub.vaimo.network https://js.klevu.com https://www.chamberlains.co.za https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com downloads.mailchimp.com *.klevu.com *.ksearchnet.com oppwa.com *.oppwa.com *.peachpayments.com *.cloudflare.com *.googleapis.com *.jsdelivr.net www.gstatic.com media.flixcar.com 'unsafe-inline' data: https://js.klevu.com 'self' 'unsafe-inline'; object-src maps.googleapis.com chart.googleapis.com 'self' 'unsafe-inline'; media-src *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io https://*.ingest.sentry.io *.klevu.com *.ksearchnet.com maps.googleapis.com chart.googleapis.com oppwa.com *.oppwa.com *.peachpayments.com *.gstatic.com places.googleapis.com *.testfreaks.com *.google.com *.nosto.com *.hotjar.io *.hotjar.com *.doubleclick.net *.zendesk.com *.paypal.com *.tawk.to wss://*.tawk.to *.tawk.link *.addthis.com *.addthisedge.com *.what3words.com *.googleapis.com vsb111.tawk.to ekr.zdassets.com app.mobicredwidget.co.za wss://widget-mediator.zopim.com bam.nr-data.net *.googletagmanager.com security-hub.vaimo.network 'unsafe-eval' data: 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com *.fonts.googleapis.com data: *.cloudflare.com data: 'self' 'unsafe-inline'; form-action *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.addthis.com *.pinterest.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com https://www.magezon.com *.google.com *.googleadservices.com *.googletagmanager.com https://redchamps.com *.cloudflare.com https://cdn.klarna.com https://s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.addthis.com *.pinterest.com *.cdninstagram.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google.com/ cdn.jsdelivr.net connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googletagmanager.com stats.g.doubleclick.net *.cloudflare.com *.googleapis.com *.addthis.com *.cardinalcommerce.com https://graph.instagram.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.cloudfront.net *.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com *.narvar.com *.narvar.qa *.auryc.com *.klaviyo.com use.fontawesome.com *.yotpo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.cenpos.net *.cenpos.com *.google.com *.gstatic.com *.yotpo.com swellrewards.com *.swellrewards.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.awin1.com *.zenaps.com *.fls.doubleclick.net *.cenpos.net *.cenpos.com *.google.com *.gstatic.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com checkout.sezzle.com sandbox.checkout.sezzle.com tracking.sezzle.com *.auryc.com *.klaviyo.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com *.awin1.com *.zenaps.com *.wepowerconnections.com *.cenpos.net *.cenpos.com *.trackedlink.net *.ddlnk.net *.dycdn.net https://images.unsplash.com *.facebook.com magefan.com cm.magefan.com *.narvar.com *.narvar.qa media.sezzle.com *.clarity.ms *.pontiac.media *.adnxs.com *.adelixir.com *.smartrecognition.com *.b1img.com *.bing.com *.bidr.io *.adsrvr.org *.equalweb.com pix.pontiac.media *.prod.bidr.io shareasale.com *.yotpo.com swellrewards.com *.swellrewards.com *.reddit.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net shop.pe *.cloudfront.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com *.cenpos.com *.cenpos.net *.google.com *.cardinalcommerce.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.dycdn.net dn1i8v75r669j.cloudfront.net dkpklk99llpj0.cloudfront.net ds9p2a60lh6fp.cloudfront.net d1y9qtn9cuc3xw.cloudfront.net d81mfvml8p5ml.cloudfront.net *.freshrelevance.com *.dotdigital.com https://maps.googleapis.com s7.addthis.com checkout-sdk.sezzle.com sandbox.checkout-sdk.sezzle.com widget.sezzle.com *.unbxd.io *.unbxdapi.com *.clarity.ms *.gorgias.chat *.adelixir.com *.attn.tv *.equalweb.com *.adsrvr.org *.b1js.com *.bing.com *.b1img.com *.aidemsrv.com *.adnxs.com *.auryc.com *.facebook.com *.convertexperiments.com secure.adnxs.com stream.aidemsrv.com *.yotpo.com swellrewards.com *.swellrewards.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com https://www.dwin1.com https://cdn-4.convertexperiments.com https://www.propper.com https://libraries.unbxdapi.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.cloudfront.net *.addshoppers.com assets.braintreegateway.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.dycdn.net maxcdn.bootstrapcdn.com fonts.cdnfonts.com *.unbxd.io *.unbxdapi.com *.equalweb.com *.yotpo.com swellrewards.com *.swellrewards.com tagmanager.google.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.narvar.com *.narvar.qa 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com *.wepowerconnections.com https://the.sciencebehindecommerce.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.dycdn.net *.freshrelevance.com wss://*.freshrelevance.com wss://*.dycdn.net dn1i8v75r669j.cloudfront.net *.dotdigital.com https://maps.googleapis.com https://player.vimeo.com ekr.zdassets.com/ gateway.sezzle.com sandbox.gateway.sezzle.com media.sezzle.com widget.sezzle.com *.unbxd.io *.unbxdapi.com *.clarity.ms *.attentivemobile.com *.attn.tv *.equalweb.com *.gorgias.chat *.adsrvr.org *.aidemsrv.com *.facebook.com *.adnxs.com *.bing.com *.auryc.com stream.aidemsrv.com *.yotpo.com swellrewards.com *.swellrewards.com *.google-analytics.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-oW-NcruGo2IAoY8QXYv4Bg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-src 'self' https://www.worldtimebuddy.com; frame-ancestors 'self'; img-src 'self' https://*.mfo.de data:; font-src 'self' data: blob:; style-src 'self' 'unsafe-inline'; script-src 'self' https://*.mfo.de https://www.worldtimebuddy.com 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https://stat.mfo.de; media-src 'self'; form-action 'self'; 1
default-src 'self' blob: https: data:;script-src 'report-sample' 'self' https: 'unsafe-inline';style-src 'self' https: 'unsafe-inline';connect-src https: wss:;object-src 'none';child-src 'self' blob:;base-uri 'none';frame-ancestors 'self';report-uri https://dot.fordeal.com/api/csp-reports?who=client_customer&app=fordeal;report-to csp-endpoint 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; media-src 'self' https:; worker-src 'self'; object-src 'none'; frame-src 'self' https:; frame-ancestors 'self' https://clientportal.medcor.com https://clientportalstaging.medcor.com; base-uri 'self'; form-action 'self' https: 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com maxcdn.bootstrapcdn.com *.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com tinyblessings.com tinyblessings.com/media https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.xtento.com cdn.xtento.com *.tinyblessings.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com cdn.ampproject.org raw.githubusercontent.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ s7.addthis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.googletagmanager.com tagmanager.google.com www.xtento.com cdn.xtento.com *.zendesk.com *.zdassets.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com unsafe-inline assets.braintreegateway.com https://static.klaviyo.com maxcdn.bootstrapcdn.com tagmanager.google.com *.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com cdn.ampproject.org api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ ekr.zdassets.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.google-analytics.com *.zendesk.com *.zopim.com wss://*.zopim.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-pRR4v7o9VDGqJqKDXXBS7Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.powerbi.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://maps.googleapis.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com chimpstatic.com downloads.mailchimp.com *.list-manage.com https://maps.googleapis.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.googleapis.com *.gstatic.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://maps.googleapis.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com data: https://maxcdn.bootstrapcdn.com https://use.typekit.net *.stockinstore.net *.freshworks.com *.cloudflare.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net https://*.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.facebook.com *.stockinstore.net *.freshworks.com *.cloudflare.com https://www.googletagmanager.com *.dotdigital-pages.com *.dotdigital.com https://api.payway.com.au webchat.dotdigital.com webchat.staging.dotdigital.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com https://img.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://*.cloudfront.net https://www.whitworths.com.au https://mcstaging.whitworths.com.au https://novarnish.wmm2.whitworths.com.au https://*.paypal.com https://*.zipmoney.com.au www.facebook.com *.data-dynamic.net *.stockinstore.net *.freshworks.com *.cloudflare.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.com.au *.trackedlink.net *.ddlnk.net *.googleapis.com https://firebasestorage.googleapis.com mageside.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.ecomm-nav.com https://*.zipmoney.com.au www.facebook.com *.zdassets.com *.barilliance.com *.barilliance.net chimpstatic.com *.stockinstore.net *.freshworks.com *.cloudflare.com *.whitworths.com.au https://*.googletagmanager.com https://data.stats.tools *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.payway.com.au *.googleapis.com *.gstatic.com https://rum.hlx.page webchat.dotdigital.com webchat.staging.dotdigital.com *.avada.io *.shopify.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com https://www.whitworths.com.au 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com data: https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://use.typekit.net https://p.typekit.net *.stockinstore.net *.freshworks.com *.cloudflare.com webchat.dotdigital.com webchat.staging.dotdigital.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com dewb2o4n4daau.cloudfront.net 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://*.cloudfront.net https://*.zip.co https://maps.googleapis.com stockinstore.net *.stockinstore.net *.freshworks.com *.cloudflare.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.com.au *.freshdesk.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.googleapis.com webchat.dotdigital.com webchat.staging.dotdigital.com https://get.geojs.io *.avada.io https://api.payway.com.au www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com maps.googleapis.com places.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'nonce-LgfWIQaKmfAZLGghIkw5jw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-a8uXvp2C7bsz7a8u7TBNKg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' https://gc.zgo.at; style-src 'self' 'unsafe-inline'; img-src 'self' https: data:; connect-src 'self' https://iranvictims2026.goatcounter.com; font-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'nonce-PYBHKDjVhJofM+7nfkFWQA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://accounts.google.com https://apis.google.com; connect-src 'self' https://*.googleapis.com https://*.google-analytics.com https://*.googletagmanager.com wss: https:; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline'; font-src 'self'; frame-src https://accounts.google.com https://*.firebaseapp.com; object-src 'none'; base-uri 'self' 1
default-src 'self'; base-uri 'self'; form-action 'self' https://www.facebook.com; frame-ancestors 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://*.googleapis.com https://connect.facebook.net https://analytics.tiktok.com https://sc-static.net https://tr.snapchat.com https://www.redditstatic.com https://www.gstatic.com https://recaptcha.net https://www.recaptcha.net https://maps.googleapis.com https://js.stripe.com https://plugins.nowbookit.com https://obee.com.au https://embed.typeform.com 'sha256-3bzWVxQE32IZQKH9eh8KzyHuhXOlMrboDVVBRd0fWTU=' 'nonce-dc69a01577ae41509f527584baa0b6a1' https://analytics.digital.grilld.com.au; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://embed.typeform.com; img-src 'self' data: blob: https://*.digital.grilld.com.au https://images.ctfassets.net https://grilldburgerbosssa.blob.core.windows.net https://www.facebook.com https://www.google.com.au https://www.google-analytics.com https://stats.g.doubleclick.net https://cnv.event.prod.bidr.io https://pixel.zprk.io https://analytics.tiktok.com https://tr.snapchat.com https://alb.reddit.com https://analytics.digital.grilld.com.au; font-src 'self' data:; connect-src 'self' https://*.google-analytics.com https://*.google.com https://www.googletagmanager.com https://maps.googleapis.com https://*.gstatic.com https://stats.g.doubleclick.net https://recaptcha.net https://www.recaptcha.net https://*.tiktok.com https://analytics-ipv6.tiktokw.us https://*.snapchat.com https://*.reddit.com https://*.digital.grilld.com.au https://*.ingest.sentry.io https://api.typeform.com https://analytics.digital.grilld.com.au; frame-src 'self' https://*.digital.grilld.com.au https://bookings.nowbookit.com https://*.chope.co https://obee.com.au https://recaptcha.net https://js.stripe.com https://www.youtube.com https://www.facebook.com https://www.google.com https://www.recaptcha.net https://form.typeform.com https://analytics.digital.grilld.com.au; worker-src 'self' blob:; manifest-src 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com https://fonts.bunny.net *.cloudflare.com *.google.com *.google.nl *.google.at *.google.de *.google.be *.google.it *.google.fr *.dhlparcel.nl *.klaviyo.com *.bing.com *.bootstrapcdn.com *.thuiswinkel-cdn.org https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://exch.mtools.nl https://exch.mtools.be https://*.zdassets.com https://*.zendesk.com https://*.zopim.com *.google.nl *.google.at *.google.de *.google.be *.google.fr *.google.it www.googletagmanager.com *.trustpilot.com *.pinterest.com *.criteo.com *.criteo.net *.cookiebot.com https://squeezely.tech www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.sharethis.com https://images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://firebasestorage.googleapis.com https://www.mollie.com maps.gstatic.com maps.google.com *.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://v2assets.zopim.io https://static.zdassets.com *.mailcampaigns.nl/ *.linkedin.com *.pinterest.com *.google.com.ua *.google.de *.google.nl *.google.at *.google.be *.google.fr *.google.it *.twitter.com *.yahoo.com *.webwinkelkeur.nl *.cookiebot.com *.criteo.com *.criteo.net *.bing.com *.cloudflare.com *.jmango360.com *.thuiswinkel-cdn.org www.magmodules.eu *.squeezely.tech https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sharethis.com https://maps.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.crwdcntrl.net *.avada.io *.shopify.com js.mollie.com pay.google.com applepay.cdn-apple.com *.googleapis.com maps.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://*.zdassets.com https://*.zendesk.com https://*.zopim.com *.google.nl *.google.at *.google.de *.google.be *.google.it *.google.fr chimpstatic.com *.cloudflare.com *.criteo.net *.robinhq.com *.mailcampaigns.nl *.cloudflareinsights.com *.hotjar.com *.trustpilot.com *.dhlparcel.nl *.criteo.com *.cookiebot.com *.bing.com *.msecnd.net *.pinterest.com *.clarity.ms *.pinimg.com *.licdn.com *.sooqr.com squeezely.tech *.billygrace.com *.thuiswinkel.org *.trackify.info *.thuiswinkel-cdn.org *.funnelytics.io www.squeezely.tech *.squeezely.tech https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.cloudflare.com *.mailcampaigns.nl *.google.com *.google.nl *.google.at *.google.de *.google.be *.google.it *.google.fr *.dhlparcel.nl *.typekit.net *.klaviyo.com *.bing.com *.sooqr.com https://unpkg.com *.bootstrapcdn.com *.thuiswinkel.org *.thuiswinkel-cdn.org https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://static.zdassets.com *.google.com *.google.nl *.google.at *.google.de *.google.be *.google.it *.google.fr 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.crwdcntrl.net https://get.geojs.io *.avada.io maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://exch.mtools.nl https://exch.mtools.be https://*.zdassets.com https://*.zendesk.com https://*.zopim.com wss://*.zendesk.com wss://*.zopim.com *.mailcampaigns.nl *.visualstudio.com *.pinterest.com *.google.nl *.google.at *.google.de *.google.be *.google.it *.google.fr *.bing.com *.linkedin.com *.hotjar.com *.hotjar.io *.trustpilot.com googleads.g.doubleclick.net *.googletagmanager.com wss://ws.hotjar.com/ *.criteo.com *.criteo.net *.cookiebot.com *.clarity.ms *.amazonaws.com https://squeezely.tech *.jsdelivr.net *.billypx.com *.thuiswinkel.org *.trackify.info *.thuiswinkel-cdn.org *.funnelytics.io *.funnelytics.workers.dev *.mistermadame.nl squeezely.tech *.squeezely.tech *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' 'report-sample' 'unsafe-eval' https://*.mtt.xyz https://*.mtt.cool https://challenges.cloudflare.com https://*.alicdn.com https://www.googletagmanager.com https://connect.facebook.net https://analytics.tiktok.com https://static.ads-twitter.com https://websdk.appsflyer.com https://s1.kwai.net https://*.ap4r.com https://static.bitmediacdn.com https://maps.googleapis.com https://*.anjouangaming.org https://access.gaminglabs.com; img-src 'self' data: blob: https://*.mtt.xyz https://*.mtt.cool https://*.mtt.club https://*.mtt.games https://*.mtt.net https://mttsports.com https://*.aliyuncs.com https://*.amazonaws.com https://www.facebook.com https://www.google-analytics.com https://analytics.tiktok.com https://*.anjouangaming.org; connect-src 'self' https://*.mtt.xyz wss://*.mtt.xyz https://*.mtt.cool https://*.mtt.club https://*.mtt.games https://*.mtt.net https://mttsports.com https://*.aliyuncs.com https://*.amazonaws.com https://www.google-analytics.com https://analytics.tiktok.com https://*.appsflyer.com 1
default-src 'self'; img-src 'self' data: https://mc.yandex.ru; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://mc.yandex.ru; connect-src 'self' https://mc.yandex.ru; font-src 'self'; frame-src https://mc.yandex.ru; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; form-action 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
style-src-elem fonts.googleapis.com tags.srv.stackadapt.com *.dibspayment.eu 'self' 'unsafe-inline'; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com static.klaviyo.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.ingrid.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.mczbf.com *.emjcd.com *.dibspayment.eu 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com magefan.com cm.magefan.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com *.disqus.com https://img.youtube.com https://firebasestorage.googleapis.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.googleusercontent.com cdn.cookielaw.org *.adzerk.net bat.bing.net s.zkcdn.net https://cdn-int.safecharge.com https://cdn.safecharge.com https://devmobile.sccdev-qa.com https://secure.safecharge.com/ *.klarnaevt.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.klevu.com *.ksearchnet.com *.disqus.com *.avada.io *.shopify.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.spinnaker-js.com cdn.cookielaw.org *.googleapis.com *.gstatic.com widget.trustpilot.com static.fbot.me campaign.fbot.me tags.srv.stackadapt.com acsbapp.com bat.bing.com www.clarity.ms scripts.clarity.ms *.ingrid.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com js-agent.newrelic.com  https://magento.com https://cdn.safecharge.com https://devmobile.sccdev-qa.com https://cdn-int.safecharge.com https://play.google.com www.gstatic.com *.klaviyo.com *.mczbf.com *.emjcd.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com https://cdn.safecharge.com https://devmobile.sccdev-qa.com  https://fonts.googleapis.com *.dibspayment.eu 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://get.geojs.io *.avada.io *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com cdn.cookielaw.org *.onetrust.com *.googleapis.com *.gstatic.com cdn.acsbapp.com tags.srv.stackadapt.com bat.bing.net l.clarity.ms eu-tracks.trackingplan.com *.ingrid.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com  https://sdkmon.safecharge.com https://ppp-test.safecharge.com https://ppp-test.nuvei.com https://secure.safecharge.com https://play.google.com *.mczbf.com *.emjcd.com *.dibspayment.eu 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce--1K6OtE3g1zppbI4mdJVaQ' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: blob: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https:; frame-src 'self' https:; media-src 'self' https: blob:; worker-src 'self' blob:; form-action 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.tawk.to cdnjs.cloudflare.com cdn.jsdelivr.net voidlabs.containers.piwik.pro dl.frontapp.com hcaptcha.com; connect-src 'self' wss://*.tawk.to *.tawk.to newassets.hcaptcha.com; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com fonts.googleapis.com embed.tawk.to; frame-src 'self' demo.voxmail.it www.youtube-nocookie.com newassets.hcaptcha.com; font-src 'self' cdnjs.cloudflare.com fonts.gstatic.com embed.tawk.to; media-src 'self' embed.tawk.to; report-uri https://catbzhkx.uriports.com/reports/report 1
font-src fonts.gstatic.com use.typekit.net cash-f.squarecdn.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.eands.com.au *.alicdn.com *.flaticon.com *.fontawesome.com *.slant.co *.bazaarvoice.com https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.facebook.com *.googlesyndication.com *.tiktok.com api.bazaarvoice.com stg.api.bazaarvoice.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors *.eands.com.au 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ * *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app https://*.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com *.dotdigital-pages.com *.dotdigital.com *.eands.com.au *.criteo.com *.googletagmanager.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com *.paypal.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.ftcdn.net *.behance.net * *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app 'self' data: https://*.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com www.gstatic.com *.trackedlink.net *.ddlnk.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.agkn.com *.360yield.com *.3lift.com *.adnxs.com *.baidu.com *.bazaarvoice.com *.bidswitch.net *.bing.com *.bing.net *.casalemedia.com *.clarity.ms *.criteo.com *.criteo.net *.google.com *.googleadservices.com *.jobadder.com *.mediawallahscript.com *.pinterest.com *.prreqcroab.icu *.quantserve.com *.smartadserver.com *.subzero-wolf.com *.taboola.com *.turn.com *.wisepops.com google.com prreqcroab.icu s3.amazonaws.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bs www.google.by www.google.ca www.google.cd www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zm www.google.co.zw www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gm www.google.gr www.google.gy www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.nl www.google.no www.google.nr www.google.nu www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.se www.google.si www.google.sk www.google.sn www.google.so www.google.sr www.google.tg www.google.tl www.google.tn www.google.to www.google.vu www.google.ws *.1rx.io *.adingo.jp *.adsrvr.org *.afterpay.com *.cdninstagram.com *.clmbtech.com *.crwdcntrl.net *.dmxleo.com *.google-analytics.com *.gumgum.com *.imrworldwide.com *.liadm.com *.lijit.com *.media.net *.mediavine.com *.openx.net *.outbrain.com *.paypalobjects.com *.postrelease.com *.pubmatic.com *.revcontent.com *.rezync.com *.rfihub.com *.rlcdn.com *.rubiconproject.com *.socdm.com *.sonobi.com *.stickyadstv.com *.tapad.com *.teads.tv *.tpmn.co.kr *.tpmn.io *.tremorhub.com *.twiago.com *.unrulymedia.com *.where-to-buy.co *.yahoo.com *.ytimg.com id5-sync.com pippio.com thrtle.com www.google.bj www.google.cn www.google.co.ck www.google.co.vi www.google.com.pr www.google.fm www.google.gg www.google.ki www.google.mw www.google.tm www.google.tt https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.hsforms.net *.hsforms.com *.fbcdn.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.eands.com.au *.newrelic.com *.nr-data.net *.googleapis.com *.criteo.net *.criteo.com *.adnxs.com *.bazaarvoice.com *.bing.com *.clarity.ms *.googleadservices.com *.hotjar.com *.jobadder.com *.pinimg.com *.pinterest.com *.quantcount.com *.quantserve.com *.wisepops.com *.zdassets.com googletagmanager.com wisepops.net polyfill-fastly.io https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.instagram.com https://chimpstatic.com https://www.eands.com.au 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.cash.app *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com display.ugc.bazaarvoice.com downloads.mailchimp.com *.eands.com.au *.typography.com *.fontawesome.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src *.eands.com.au 'self' 'unsafe-inline'; media-src *.adobe.com *.eands.com.au *.zdassets.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src *.eands.com.au 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io * *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.google-analytics.com *.facebook.com *.facebook.net https://*.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.eands.com.au *.nr-data.net *.newrelic.com *.googleapis.com *.bazaarvoice.com *.bing.com *.bing.net *.clarity.ms *.criteo.com *.criteo.net *.google.com *.googleadservices.com *.hotjar.com *.hotjar.io *.pinterest.com *.quantcount.com *.wisepops.com *.zdassets.com google.com localhost wisepops.net www.google.ad www.google.ae www.google.al www.google.at www.google.ba www.google.be www.google.bg www.google.bs www.google.by www.google.ca www.google.cd www.google.ch www.google.ci www.google.cl www.google.cn www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.za www.google.co.zm www.google.co.zw www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.fj www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ng www.google.com.np www.google.com.om www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.cz www.google.de www.google.dk www.google.dz www.google.es www.google.fi www.google.fr www.google.ge www.google.gr www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.jo www.google.kz www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.nl www.google.no www.google.nr www.google.nu www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.se www.google.si www.google.sk www.google.sn www.google.sr www.google.tl www.google.to www.google.vu www.google.ws *.geoedge.com *.prreqcroab.icu *.quantserve.com *.typography.com *.zdassets-backup.com prreqcroab.icu www.google.cm www.google.co.ao www.google.co.ck www.google.co.vi www.google.com.bz www.google.com.na www.google.com.pr www.google.fm www.google.gg www.google.gy www.google.je www.google.kg www.google.la www.google.tg www.google.tm www.google.tn https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.instagram.com *.googleusercontent.com 'self' 'unsafe-inline'; child-src *.eands.com.au assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.eands.com.au *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://def893e4-f6e2-42b0-83af-ead3f58ab21a.sansec.watch/; report-to report-endpoint; 1
script-src 'nonce-nTnXkU2ywZ+pjL1Vz4bWoA==' 'strict-dynamic' 'unsafe-eval' 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; report-uri /_/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://www.google.com https://www.gstatic.com https://cdn.userecho.com https://yandex.ru/ https://*.yandex.ru https://*.maps.yandex.net https://yastatic.net; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com; img-src 'self' data: https://*.starline.ru https://*.maps.yandex.net https://*.google.com https://enterprise.api-maps.yandex.ru https://cdn.userecho.com https://*.openstreetmap.org http://yandex.st/ https://yandex.st/ https://mc.yandex.ru https://yastatic.net; connect-src 'self' ws://*.starline.ru wss://rpl.starline-online.ru https://mc.yandex.ru https://geocode.starline.ru; frame-src 'self' https://*.google.com https://mc.yandex.ru/ https://arkan.ru; 1
default-src 'self' https: blob: wss: 'unsafe-eval' 'unsafe-inline'; img-src 'self' https: data: blob:; script-src 'self' https: blob: 'unsafe-eval' 'unsafe-inline' 'nonce-Ha5FFe2FEO8II3GBdsWQyVM95maekCWFGDRSHx1fZpA='; style-src 'self' https: data: 'unsafe-inline' 'nonce-Ha5FFe2FEO8II3GBdsWQyVM95maekCWFGDRSHx1fZpA=' 'sha256-26Rc/Fct2OQ3tL3NW2RwPa5lyE5cf7w9mQlOc5RmB5A=' 'report-sample'; style-src-attr 'unsafe-hashes' 'sha256-biLFinpqYMtWHmXfkA1BPeCY0/fNt46SAZ+BBk5YUog=' 'sha256-aqNNdDLnnrDOnTNdkJpYlAxKVJtLt9CtFLklmInuUAE=' 'report-sample'; font-src 'self' https: data:; media-src 'self' https: data:; object-src 'none'; worker-src 'self' https: blob:; report-uri https://api.npt.gov.uk/csp/report; report-to csp-report 1
object-src  'none'; connect-src 'self' *.wicked.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.wicked.com join.gammasecure.com; script-src 'self' *.wicked.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.wicked.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://www.facebook.com/tr/ 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * js.stripe.com *.doubleclick.net policy.app.cookieinformation.com *.facebook.com widgets.sociablekit.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://ratinglogo.bisnode.com/280179-329370607693593922.svg *.facebook.com *.sleeknote.com *.google.com *.clarity.ms *.bing.com *.cookiebot.com *.linkedin.com *.risskovrejser.dk *.doubleclick.net *.google.ro data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com accounts.google.com *.cloudflare.com https://challenges.cloudflare.com https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 *.clarity.ms https://policy.app.cookieinformation.com/ js.stripe.com fonts.googleapis.com *.twitter.com *.google-analytics.com googletagmanager.com *.gstatic.com *.trustedshops.com *.fontawesome.com *.addthis.com s7.addthis.com m.addthis.com z.moatads.com *.addthisedge.com apis.google.com graph.facebook.com widgets.pinterest.com sleeknotecustomerscripts.sleeknote.com sleeknotestaticcontent.sleeknote.com connect.facebook.net *.doubleclick.net *.googlesyndication.com *.googletagservices.com 'self' 'unsafe-inline' business.facebook.com *.avada.io *.trustpilot.com *.cookiebot.com *.licdn.com *.bing.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com assets.braintreegateway.com *.cloudflare.com *.googleapis.com *.twitter.com *.gstatic.com *.typekit.net *.bootstrapcdn.com *.coi-prod.azureedge.net tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com api.purechat.com *.clarity.ms https://z.clarity.ms/collect *.cookieinformation.com *.doubleclick.net *.googlesyndication.com *.risskovrejser.dk *.bing.com *.linkedin.com *.sleeknote.com *.cookiebot.com *.trustpilot.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.sandbox.paypal.com https://*.braintreegateway.com https://*.braintree-api.com https://*.worldline-solutions.com https://*.worldline.com https://*.sips.worldline.com https://*.sips-atos.com https://*.ingenico.com https://*.saferpay.com https://*.six-payment-services.com https://secure.ogone.com https://*.oney.io https://*.wlp-acs.com https://*.arcot.com https://*.modirum.com https://*.nexigroup.com https://*.netcetera.com https://*.gpayments.com https://*.entersekt.com https://*.entersekt.eu https://*.aciworldwide.com https://*.onespan.com https://*.firstdata.de https://*.asseco-see.hr https://*.creditmutuel.fr https://*.cm-cic.com https://*.cic.fr https://*.secure.lcl.fr https://*.e-transactions.fr https://*.acs.credit-agricole.fr https://*.banquepopulaire.fr https://*.caisse-epargne.fr https://*.labanquepostale.fr https://*.monext.fr https://*.milleis.fr https://*.acs.3ds.bnpparibas.com https://particuliers.sg.fr https://*.3ds.societegenerale.com https://*.neuflizeobc.net https://*.bnpparibasfortis.be https://*.kbc.be https://*.europabank.be https://*.abnamro.nl https://*.rabobank.nl https://*.deutsche-bank.de https://*.comdirect.de https://*.hanseaticbank.de https://*.s-id-check-sparkassen.de https://*.sparkassen-kreditkarten.de https://*.3dsecure-atruvia.de https://*.dkb.de https://*.qards.de https://3dsecure-vrp.de https://*.consorsbank.de https://*.consorsfinanz.de https://*.n26.com https://*.targobank.de https://*.psa.at https://*.sparkasse.at https://*.easybank.at https://*.paylife.at https://*.cardcomplete.com https://*.rpc-raiffeisen.com https://*.cartasi.it https://*.sia.eu https://*.redsys.es https://*.abanca.com https://*.vinea.es https://*.mbank.pl https://*.pkobp.pl https://*.bankmillennium.pl https://*.centrum24.pl https://*.pekao24.pl https://*.itcardpaymentservice.pl https://3ds.ing.pl https://3ds.pl.ing.com https://*.btrl.ro https://*.bcr.ro https://*.brd.ro https://www.secure2gw.ro https://www.secure22gw.ro https://*.sibs.ro https://3dsecure.ing.ro https://*.sebkort.com https://*.swedbank.se https://acs2.3dsecure.no https://*.danskebank.com https://www.rsa3dsauth.co.uk https://www.rsa3dsauth.com https://*.lloydsbankinggroup.com https://verify.monzo.com https://*.starlingbank.com https://*.smartsecure.tsys.co.uk https://3dsec.cardcenter.ch https://acs.swisscard.ch https://acs1.viseca.ch https://secure.3ds.cornercard.ch https://secure.3ds.cornercard.eu https://*.postfinance.ch https://*.six-group.com https://*.bonuscard.ch https://*.bkm.com.tr https://*.akbank.com.tr https://3ds.bov.com https://*.icbc.com.cn https://ecomacs.alataucitybank.kz https://*.icici.bank.in https://*.upc.ua https://*.privatbank.ua https://*.piraeusbank.gr https://*.nbg.gr https://acssv.dskbank.bg https://*.icard.com https://*.s2m.net.ma https://valtuutus.op.fi https://acs.stripeauthentications.com https://acs.revolut.com https://methodurl.psp-solutions.com https://*.acdcproc.com https://*.infinitium.com https://*.gpesecure.com https://3ds.emlpayments.com https://*.sumup.com https://acs-challenge.apata.io https://authentication.3ds.treezor.com https://*.marqeta.eu https://*.marqeta.com https://api.id.mastercard.bunq.com https://identify.nordea.com https://acs1.edb.com https://acs2.edb.com https://acs.sibs.pt https://acs.api.alignet.io https://*.cardinalcommerce.com https://*.mastercard.com https://acs.capitalone.com https://pay.eewosecure.com https://foriseu-vbv.mycardplace.com https://*.placetopay.com https://*.netsgroup.com https://*.selects2m.com https://*.selects2m.com:9443 https://*.crisp.help https://www.google.com https://toolytics.pa.clients6.google.com https://player.vimeo.com https://vimeo.com https://www.youtube.com https://www.youtube-nocookie.com https://*.criteo.com https://*.trustpilot.com https://edenly.com https://*.edenly.com; form-action 'self' https://secure.ogone.com https://*.worldline-solutions.com https://*.worldline.com https://*.sips.worldline.com https://*.sips-atos.com https://*.ingenico.com https://*.saferpay.com https://www.paypal.com https://*.paypal.com https://*.wlp-acs.com https://*.arcot.com https://*.modirum.com https://*.nexigroup.com https://3ds.redsys.es https://*.netcetera.com https://*.gpayments.com https://*.entersekt.com https://*.entersekt.eu https://*.aciworldwide.com https://*.onespan.com https://*.cardinalcommerce.com https://*.mastercard.com https://*.cardcomplete.com https://*.rpc-raiffeisen.com https://*.smartsecure.tsys.co.uk https://*.placetopay.com https://*.firstdata.de https://*.asseco-see.hr https://*.acdcproc.com https://*.privatbank.ua https://*.piraeusbank.gr https://acssv.dskbank.bg https://*.icard.com https://*.danskebank.com https://*.infinitium.com https://*.gpesecure.com https://ecomacs.alataucitybank.kz https://*.edenly.com https://edenly.com; report-uri /csp-report.php 1
default-src 'self' *.googleapis.com; base-uri 'self'; frame-ancestors 'self' www.gstatic.com; form-action 'self' *.paypal.com pilot-payflowlink.paypal.com *.twitter.com; frame-src 'self' youtube.com *.youtube.com *.youtube-nocookie.com *.paypal.com *.checkout.com www.google.com *.doubleclick.net *.googletagmanager.com *.cookiebot.com cdn.smooch.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.luigisbox.com scripts.luigisbox.com assets.adobedtm.com *.adobe.com *.cloudflare.com cdnjs.cloudflare.com https://cdnjs.cloudflare.com *.googletagmanager.com *.google-analytics.com *.doubleclick.net *.google.com *.gstatic.com *.googleapis.com *.fontawesome.com *.zopim.com *.zdassets.com *.checkout.com *.cookiebot.com *.cookiefirst.com consent.cookiefirst.com *.bing.com *.clarity.ms s.ytimg.com www.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://*.checkout.com https://*.ggpht.com https://*.googleusercontent.com *.pcapredict.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.googleapis.com *.fontawesome.com *.cloudflare.com *.checkout.com *.cookiefirst.com cdn.luigisbox.com; font-src 'self' data: fonts.gstatic.com *.gstatic.com *.cloudflare.com *.twitter.com *.trustedshops.com *.googleapis.com cdn.checkout.com https://www.gstatic.com *.twimg.com; img-src 'self' data: *.luigisbox.com *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com www.google.co.uk *.google.co.uk *.google-analytics.com analytics.google.com *.googletagmanager.com *.paypal.com t.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.youtube.com *.gstatic.com *.cloudflare.com *.lsengineers.co.uk *.twitter.com *.twimg.com *.doubleclick.net *.bing.com *.bing.net bat.bing.net *.zdassets.com *.googleapis.com https://*.google.com https://*.googleapis.com https://*.googleusercontent.com consent.cookiefirst.com *.cookiefirst.com; connect-src 'self' wss: *.luigisbox.com *.google-analytics.com analytics.google.com *.doubleclick.net *.googletagmanager.com *.newrelic.com *.nr-data.net *.adobe.io *.paypal.com *.checkout.com *.clarity.ms *.cookiefirst.com *.bing.com *.bing.net *.googleapis.com *.googlesyndication.com https://js.checkout.com https://*.google.com https://*.gstatic.com https://*.googleapis.com *.zendesk.com *.zdassets.com ekr.zdassets.com lsengineers.zendesk.com; object-src 'self'; media-src 'self' *.adobe.com *.zdassets.com; manifest-src 'self'; child-src 'self' https: http: 1
script-src *.aspnetcdn.com *.azure.com *.civiccomputing.com *.ytimg.com cdnjs.cloudflare.com connect.facebook.net googleads.g.doubleclick.net px.ads.linkedin.com region1.analytics.google.com region1.google-analytics.com 'self' 'sha256-8I9lYH3RZwaYQVTy5WkRtQqk9GGGTfdInCMAeUt6U9Q=' 'sha256-cFDK7zS/LnRy9jW0Rgec+b8qX8vt7+S5Mvb0bcNktHQ=' 'sha256-G98Ynwi2gQAL7+NptQ9lUatzGKCyPfV4i5g0jpVsClU=' 'sha384-JPbtLYL10d/Z1crlc6GGGGM3PavCzzoUJ1UxH0bXHOfguWHQ6XAWrIzW+MBGGXe5' snap.licdn.com ssl.google-analytics.com stats.g.doubleclick.net www.facebook.com www.google.co.uk www.googleadservices.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.region1.google-analytics.com www.youtube.com www.youtube-nocookie.com;connect-src *.azure.com *.civiccomputing.com *.googleapis.com *.gov.uk googleads.g.doubleclick.net region1.analytics.google.com region1.google-analytics.com 'self' snap.licdn.com ssl.google-analytics.com stats.g.doubleclick.net www.google.co.uk www.googleadservices.com www.google-analytics.com www.googletagmanager.com www.region1.google-analytics.com;style-src *.civiccomputing.com *.fontawesome.com *.googleapis.com connect.facebook.net googleads.g.doubleclick.net 'nonce-k2svo49hkrmbs5s3g4t4awmg' px.ads.linkedin.com 'self' snap.licdn.com www.facebook.com www.googleadservices.com www.gstatic.com;font-src *.fontawesome.com *.googleapis.com *.gstatic.com 'self';style-src-elem *.fontawesome.com *.googleapis.com connect.facebook.net googleads.g.doubleclick.net px.ads.linkedin.com 'self' snap.licdn.com 'unsafe-inline' www.facebook.com www.googleadservices.com;frame-ancestors *.gov.uk 'self';frame-src *.gov.uk connect.facebook.net googleads.g.doubleclick.net px.ads.linkedin.com 'self' snap.licdn.com www.googleadservices.com www.youtube.com www.youtube-nocookie.com;img-src *.gov.uk *.ytimg.com connect.facebook.net googleads.g.doubleclick.net https://img.youtube.com px.ads.linkedin.com region1.analytics.google.com region1.google-analytics.com 'self' snap.licdn.com ssl.google-analytics.com stats.g.doubleclick.net www.facebook.com www.google.co.uk www.googleadservices.com www.google-analytics.com www.googletagmanager.com www.region1.google-analytics.com;script-src-attr connect.facebook.net googleads.g.doubleclick.net px.ads.linkedin.com snap.licdn.com www.facebook.com www.googleadservices.com;style-src-attr connect.facebook.net googleads.g.doubleclick.net px.ads.linkedin.com 'self' snap.licdn.com 'unsafe-inline' www.facebook.com www.googleadservices.com;base-uri 'none';object-src 'none';default-src 'self' 1
font-src *.fontawesome.com *.gstatic.com/ *.bootstrapcdn.com/ https://analytics.google.com/ https://www.googletagmanager.com/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.googleapis.com/ *.gstatic.com/ https://analytics.google.com/ https://www.googletagmanager.com/ 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.criteo.com/ *.criteo.net/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://maps.gstatic.com/ *.googleapis.com/ *.w3.org/ https://analytics.google.com/ *.cdn.place1seo.com/ https://cdn.beedash.com/ https://www.google.com/ https://www.googletagmanager.com/ https://cm.g.doubleclick.net/ https://x.bidswitch.net/ https://ib.adnxs.com/ https://contextual.media.net/ https://pixel.rubiconproject.com/ https://rtb-csync.smartadserver.com/ https://sync-t1.taboola.com/ https://criteo-sync.teads.tv/ https://eb2.3lift.com/ *.yahoo.com *.socdm.com/ *.criteo.com/ https://r.casalemedia.com/ https://adx.dable.io/ https://cs.adingo.jp/ https://ads.stickyadstv.com/ *.360yield.com/ https://idsync.rlcdn.com/ https://exchange.mediavine.com/ https://c.bing.com/ https://sync.outbrain.com/ https://simage2.pubmatic.com/ https://s.ad.smaato.net/ https://ade.clmbtech.com/ https://sync.aralego.com/ https://sync-criteo.ads.yieldmo.com/ https://tags.bluekai.com/ *.yahoo.net/ https://beacon.krxd.net/ https://cdn.aralego.net/ https://sync.1rx.io/ https://cm.adgrx.com/ https://sync.targeting.unrulymedia.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ s7.addthis.com *.avada.io *.googleapis.com/ https://analytics.google.com/ https://googleads.g.doubleclick.net/ https://www.googletagmanager.com/ *.criteo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com *.googleapis.com/ https://analytics.google.com/ *.bootstrapcdn.com/ https://www.googletagmanager.com/ unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com ekr.zdassets.com/ https://get.geojs.io *.avada.io https://analytics.google.com/ https://googleads.g.doubleclick.net/ https://stats.g.doubleclick.net/ *.criteo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src blob:; font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com fonts.gstatic.com *.kxcdn.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ https://secure.asxgw.com *.google.com/ *.doubleclick.net *.facebook.com *.googlesyndication.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.fbcdn.net blob: ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com maps.gstatic.com *.ggpht https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://asxgw.com https://asxgw.paymentsandbox.cloud https://secure.asxgw.com *.google.com/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.googleapis.com *.google.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com chimpstatic.com downloads.mailchimp.com *.list-manage.com https://maps.googleapis.com https://cdnjs.cloudflare.com s7.addthis.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.google.com *.kxcdn.com downloads.mailchimp.com *.fontawesome.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://asxgw.com https://asxgw.paymentsandbox.cloud https://www.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com *.google-analytics.com ekr.zdassets.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io magefan.com cm.magefan.com https://img.youtube.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.avada.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net fonts.googleapis.com *.googleapis.com *.gstatic.com data: cdn.hub-box.com/assets/fonts/ *.nxedge.io/cdn/static/ fonts.intercomcdn.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de app.remarkety.com/public/ 'self' 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com https://api.clerk.io https://cdn.clerk.io 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de td.doubleclick.net googleads.g.doubleclick.net www.google.by www.google.co.uk mozbar.moz.com www.rsa3dsauth.co.uk tpc.googlesyndication.com safekey-3.americanexpress.com *.trustpilot.com www.commercepartnerhub.com js.mollie.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://cdn.clerk.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com cdn.hub-box.com/assets/ *.nxedge.io/cdn/static/ www.dentalsky.com/media/ *.nxedge.io/cdn/media/ cdn.clerk.io *.googletagmanager.com *.analytics.google.com *.g.doubleclick.net *.google.com www.google.com/ads/ www.google.by/ads/ www.google.co.uk/ads/ www.google.co.ma/ads/ www.google.com.qa/ads/ www.google.com.cy/ads/ www.google.im/ads/ www.google.fr/ads/ www.google.com.sg/ads/ www.google.com.bd/ads/ www.google.co.in/ads/ www.google.com.tw/ads/ www.google.ch/ads/ static.intercomassets.com js.intercomcdn.com downloads.intercomcdn.com services.postcodeanywhere.co.uk/images/ retailer.commerce-connector.com https://www.mollie.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://api.clerk.io https://cdn.clerk.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.dentalsky.com/ cdn.hub-box.com services.hub-box.com cdn.hub-box.com/assets/ *.nxedge.io/cdn/static/ *.googletagmanager.com cdn.clerk.io api.clerk.io custom.clerk.io d3ryumxhbd2uw7.cloudfront.net/webtracking/ *.pcapredict.com services.postcodeanywhere.co.uk/js/ cdn.nmgassets.com cdn.480app.com widget.intercom.io/widget/ js.intercomcdn.com www.youtube.com/iframe_api www.youtube.com/s/player/ static.cloudflareinsights.com ajax.cloudflare.com tpc.googlesyndication.com/sodar/ *.trustpilot.com player.vimeo.com js.mollie.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://api.clerk.io https://cdn.clerk.io unsafe-inline assets.braintreegateway.com cdn.hub-box.com/assets/ *.nxedge.io/cdn/static/ services.postcodeanywhere.co.uk/css/ *.trustpilot.com https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com js.intercomcdn.com/audio/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de www.dentalsky.com/ *.hub-box.com *.nxedge.io/cdn/static/ www.google.com/ads/ www.google.by/ads/ www.google.co.uk/ads/ www.google.co.ma/ads/ www.google.com.qa/ads/ www.google.com.cy/ads/ www.google.im/ads/ www.google.fr/ads/ www.google.com.sg/ads/ www.google.com.bd/ads/ www.google.co.in/ads/ www.google.com.tw/ads/ www.google.ch/ads/ cdn.nmgassets.com jdl.nmgplatform.com colrep.sitelabweb.com/jdldata/ *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.doubleclick.net *.googlesyndication.com webhooks.remarkety.com s3.amazonaws.com/remarkety-app/ api-iam.intercom.io wss://nexus-websocket-a.intercom.io services.postcodeanywhere.co.uk invitejs.trustpilot.com/api/ widget.trustpilot.com/data/ ascpqnj-oam.global.ssl.fastly.net writer.cardinalcommerce.com/prod/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://*.supabase.co https://www.google-analytics.com https://*.google-analytics.com https://*.ingest.sentry.io; frame-src 'self' https://challenges.cloudflare.com https://js.stripe.com; worker-src 'self' blob:; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://googleads.g.doubleclick.net https://static.cloudflareinsights.com https://hm.baidu.com https://*.geetest.com https://*.microsoft.com https://*.dynamics.com https://*.powerapps.com https://*.azureedge.net https://www.youtube.com https://s.ytimg.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.clarity.ms https://scripts.clarity.ms https://snap.licdn.com https://static.ads-twitter.com https://connect.facebook.net https://js.zi-scripts.com https://tags.srv.stackadapt.com https://www.gartner.com https://cdnjs.cloudflare.com https://*.wp.com https://app.fastbots.ai https://yoast.com https://apis.google.com https://js-eu1.hsforms.net https://cdn-eu.clickdimensions.com https://analytics-eu.clickdimensions.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.wp.com https://tags.srv.stackadapt.com https://www.gartner.com https://www.gstatic.com https://use.typekit.net https://cdn-eu.clickdimensions.com https://*.geetest.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://www.gartner.com https://*.wp.com https://res-1.cdn.office.net https://use.typekit.net; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://pagead2.googlesyndication.com https://www.googletagmanager.com https://translate.googleapis.com https://apis.google.com https://hm.baidu.com https://tags.srv.stackadapt.com https://px.ads.linkedin.com https://www.facebook.com https://ws.zoominfo.com https://js.zi-scripts.com https://*.clarity.ms https://consent.cookiebot.com https://consentcdn.cookiebot.com https://*.microsoft.com https://*.dynamics.com https://*.powerapps.com https://*.azureedge.net https://analytics.twitter.com https://t.co https://app.fastbots.ai https://yoast.com https://my.yoast.com https://forms-eu1.hsforms.com https://*.wp.com; frame-src 'self' blob: https://www.youtube.com https://www.youtube-nocookie.com https://*.dynamics.com https://*.powerapps.com https://consentcdn.cookiebot.com https://www.gartner.com https://accounts.google.com https://myaccount.google.com https://*.wp.com https://wordpress.com https://www.facebook.com https://player.vimeo.com https://vimeo.com https://app.fastbots.ai https://outlook.office365.com https://bookings.cloud.microsoft; object-src 'none'; base-uri 'self'; form-action 'self' https://*.dynamics.com; frame-ancestors 'self'; report-uri https://www.criticalmanufacturing.com/csp-report.php; 1
connect-src 'self' https://*.seamly-app.com https://connect.facebook.net https://www.facebook.com https://px.ads.linkedin.com https://googleads.g.doubleclick.net https://www.google.com https://www.googletagmanager.com https://*.cookiebot.com https://consentcdn.cookiebot.com https://*.infomedics.nl wss://*.seamly-app.com https://*.doubleclick.net https://www.google-analytics.com https://matomo.infomedics.nl/; img-src 'self' data: https://www.facebook.com https://px.ads.linkedin.com https://googleads.g.doubleclick.net https://www.google.com https://*.infomedics.nl https://www.google.nl https://*.seamly-app.com https://www.google-analytics.com https://www.googletagmanager.com; manifest-src 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.seamly-app.com https://*.cookiebot.com https://*.umbrella.com https://*.srcspot.com https://*.infomedics.nl https://connect.facebook.net https://www.googletagmanager.com https://snap.licdn.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://service.mtcaptcha.com https://static.srcspot.com https://unpkg.com https://matomo.infomedics.nl/; script-src-elem 'self' 'unsafe-inline' https://connect.facebook.net https://www.googletagmanager.com https://snap.licdn.com https://*.cookiebot.com https://*.infomedics.nl https://*.seamly-app.com https://*.umbrella.com https://*.srcspot.com https://googleads.g.doubleclick.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://service.mtcaptcha.com https://static.srcspot.com https://unpkg.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com themes; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
report-to novy_csp;report-uri https://novy.report-uri.com/r/d/csp/reportOnly;default-src 'self';base-uri 'self';frame-ancestors 'none';frame-src https://*.youtube.com https://www.youtube-nocookie.com https://*.cookiebot.com https://*.googletagmanager.com https://td.doubleclick.net https://*.fls.doubleclick.net https://ct.pinterest.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://*.hs-sites-eu1.com;script-src 'nonce-M5L0aSqgeEq5O0Iiq63HlQ==' 'strict-dynamic' https://*.googletagmanager.com https://tagmanager.google.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.googleadservices.com https://*.cookiebot.com https://www.youtube.com https://*.facebook.net https://*.hotjar.com https://*.bing.com https://*.pinimg.com https://*.hs-banner.com https://*.hs-analytics.net https://js.hsadspixel.net https://js.hsleadflows.net https://js.hscollectedforms.net https://*.hubspot.com https://ct.pinterest.com https://*.usemessages.com 'report-sample' 'unsafe-eval';style-src 'self' 'report-sample' https://fonts.googleapis.com https://googletagmanager.com https://tagmanager.google.com 'unsafe-inline';style-src-elem 'self' 'report-sample' https://fonts.googleapis.com https://cdnjs.cloudflare.com 'unsafe-inline';img-src 'self' data: https://middleby-cdn.com https://i.ytimg.com https://imgsct.cookiebot.com https://maps.googleapis.com https://*.gstatic.com https://www.facebook.com https://connect.facebook.net https://bat.bing.com https://www.google.com https://www.google.be https://www.google.de https://www.google.nl https://www.google.lu https://www.google.fr https://www.google.es https://www.google.it https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.cz https://www.google.co.uk https://www.google.co.il https://www.google.ie https://www.google.at https://www.google.ee https://www.google.se https://www.google.si https://www.google.sk https://www.google.sn https://www.google.py https://www.google.ca https://www.google.ch https://www.google.com.mt https://www.google.com.py https://*.hsforms.com https://*.g.doubleclick.net https://ad.doubleclick.net https://*.hubspot.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googlesyndication.com https://exceptions.hs-embed-reporting.com;font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.3/webfonts/;connect-src 'self' https://capig.novy.com https://*.cookiebot.com https://*.googletagmanager.com https://www.google.com https://www.google.be https://www.google.de https://www.google.nl https://www.google.lu https://www.google.fr https://www.google.es https://www.google.it https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.cz https://www.google.co.uk https://www.google.co.il https://www.google.ie https://www.google.at https://www.google.ee https://www.google.se https://www.google.si https://www.google.sk https://www.google.sn https://www.google.py https://www.google.ca https://www.google.ch https://www.google.com.mt https://www.google.com.py https://*.hubapi.com https://analytics.google.com https://*.analytics.google.com https://*.google-analytics.com https://www.googleadservices.com/ https://*.g.doubleclick.net https://ad.doubleclick.net https://maps.googleapis.com https://ct.pinterest.com https://*.hubspot.com https://*.hsforms.com/embed/ https://forms.hscollectedforms.net wss://ws.hotjar.com https://*.hotjar.io https://bat.bing.com https://*.googlesyndication.com https://www.facebook.com;object-src 'none';worker-src 'none';form-action 'self';manifest-src 'self';media-src 'self'; 1
script-src 'self' 'unsafe-eval' https://use.fontawesome.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://static.ctctcdn.com https://translate.googleapis.com https://cdnjs.cloudflare.com https://www.weps.org; script-src-elem 'self' 'unsafe-inline' translate.google.com www.google.com www.gstatic.com static.ctctcdn.com www.googletagmanager.com cdn.jsdelivr.net www.google-analytics.com translate.googleapis.com bam.nr-data.net js-agent.newrelic.com cdn.gtranslate.net https://cdnjs.cloudflare.com https://www.weps.org; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://use.fontawesome.com https://www.weps.org; style-src-elem 'self' 'unsafe-inline' cdn.jsdelivr.net translate.googleapis.com static.ctctcdn.com www.gstatic.com https://cdn.jsdelivr.net https://use.fontawesome.com https://www.weps.org; frame-ancestors 'self' 1
default-src 'self' westwoodone.com www.westwoodone.com 'report-sample'; base-uri 'self'; script-src 'nonce-8YsGRWsI5XX/hcG5dGS69HCi' 'self' 'inline-speculation-rules' westwoodone.com www.westwoodone.com *.googletagmanager.com *.google-analytics.com stats.wp.com cdn.cookielaw.org *.onetrust.com connect.facebook.net form.jotform.com cdn.jotfor.ms 'sha256-GxV10O3xrTuweqSjE3k8/UGb7irvsFYdUK711POFvzc=' 'sha256-c+CYEhgKdflkS7NkNF38sTDK0VLLrFYlfv+1CMgSpI4=' 'unsafe-inline' 'unsafe-eval' 'report-sample'; style-src 'self' 'unsafe-inline' westwoodone.com www.westwoodone.com fonts.googleapis.com cdn.jotfor.ms 'report-sample'; img-src 'self' data: westwoodone.com www.westwoodone.com *.wp.com cdn.cookielaw.org *.googletagmanager.com *.google-analytics.com https://www.linkedin.com/favicon.ico https://twitter.com/favicon.ico https://facebook.com/favicon.ico https://syndication.twitter.com/i/jot/embeds i.vimeocdn.com; font-src 'self' data: westwoodone.com www.westwoodone.com fonts.gstatic.com; connect-src 'self' *.google-analytics.com https://www.google.com/g/collect www.googletagmanager.com stats.g.doubleclick.net player.cumulusmedia.com cdn.cookielaw.org *.onetrust.com submit.jotform.com; media-src 'self' westwoodone.com www.westwoodone.com dl.dropbox.com dl.dropboxusercontent.com; object-src 'none'; frame-src 'self' westwoodone.com www.westwoodone.com insights.westwoodone.com *.jotform.com *.vimeo.com *.youtube.com *.youtube-nocookie.com *.megaphone.fm *.soundcloud.com platform.twitter.com www.facebook.com embeds.audioboom.com; report-uri https://www.westwoodone.com/wp-admin/admin-ajax.php?action=wpshr 1
default-src 'self'; script-src 'self' 'nonce-mcGtWS30lB6ExUJRYopPjg==' https://www.googletagmanager.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://securepubads.g.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com https://www.gstatic.com https://bh.contextweb.com https://aim-tag.hcn.health https://plausible.io https://js.stripe.com https://cdn.jsdelivr.net https://dzs87nh68qwo2.cloudfront.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://dzs87nh68qwo2.cloudfront.net; img-src 'self' data: blob: https:; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://aim-tag.hcn.health https://plausible.io https://api.stripe.com; frame-src 'self' https://www.google.com https://www.recaptcha.net https://js.stripe.com https://www.youtube.com https://youtube.com; media-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com https://www.gstatic.com *.klevu.com *.ksearchnet.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.awin1.com *.zenaps.com *.fls.doubleclick.net platform.twitter.com *.cookiebot.com *.pixlee.co assets.braintreegateway.com *.dotdigital-pages.com *.dotdigital.com https://www.googletagmanager.com/ photos.pixlee.co webchat.dotdigital.com webchat.staging.dotdigital.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com c.paypal.com checkout.paypal.com pay.google.com *.cardinalcommerce.com * www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com https://*.gstatic.com *.awin1.com *.zenaps.com *.wepowerconnections.com imgsct.cookiebot.com *.pinterest.com *.paypalobjects.com *.trackedlink.net http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ wac.edgecastcdn.net *.pixlee.com *.klevu.com *.ksearchnet.com https://*.google.com https://*.googleapis.com https://*.googleusercontent.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.googleapis.com https://*.gstatic.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com js.klevu.com assets.pinterest.com platform.twitter.com connect.facebook.net *.googletagmanager.com consent.cookiebot.com unpkg.com consentcdn.cookiebot.com js-agent.newrelic.com assets.pixlee.com r1-t.trackedlink.net www.gstatic.com f.vimeocdn.com *.turnto.com *.paypal.com *.paypalobjects.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.pixlee.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.ksearchnet.com https://*.google.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.pxlecdn.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com www.xtento.com cdn.xtento.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.gstatic.com f.vimeocdn.com widgets.turnto.com *.turnto.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.klevu.com *.ksearchnet.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com assets.braintreegateway.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.wepowerconnections.com https://the.sciencebehindecommerce.com *.klevu.com syndication.twitter.com consentcdn.cookiebot.com bam.nr-data.net vod-adaptive-ak.vimeocdn.com cdn-ws.turnto.com we.turnto.com *.google-analytics.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.turnto.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.ksearchnet.com api.addressy.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://inbound-analytics.pixlee.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src bam.nr-data.net commerce.adobedc.net *.paypal.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://f11810e5-a37d-4a04-bc29-8ffba24771db.sansec.watch/; report-to report-endpoint; 1
script-src 'nonce-c9+f6n1ioRSB7tiqFOTDnw==' 'strict-dynamic' 'unsafe-inline' https:; default-src 'self'; style-src 'self' 'unsafe-inline' data: https://unpkg.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://uicdn.toast.com https://code.ionicframework.com; img-src 'self' data: blob: https://www.lqd.cz https://*.twitter.com https://*.twimg.com https://px.ads.linkedin.com https://media.licdn.com https://*.cdninstagram.com https://t.co https://t.leady.com https://www.googletagmanager.com https://www.google-analytics.com https://i.ytimg.com https://img.youtube.com https://maps.googleapis.com https://maps.gstatic.com https://toplist.cz https://*.s3.eu-west-1.amazonaws.com https://uicdn.toast.com; connect-src 'self' https://www.googletagmanager.com https://*.google-analytics.com https://t.leady.com https://px.ads.linkedin.com https://maps.googleapis.com https://d70shl7vidtft.cloudfront.net https://*.execute-api.eu-west-1.amazonaws.com https://*.ecomailapp.cz https://cdnjs.cloudflare.com; font-src 'self' data: https://fonts.gstatic.com https://code.ionicframework.com; frame-src 'self' https://www.youtube.com https://www.instagram.com https://challenges.cloudflare.com; worker-src 'self' blob:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /csp-report.php 1
object-src 'none';base-uri 'self';script-src 'nonce-yH86gb2USF7f6acoFVaNBg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' *.ib.de *.internationaler-bund.de ib-redaktion-staging.rmsdev.de; script-src 'self' blob: 'unsafe-eval' 'unsafe-inline' ib-staging.rmsdev.de *.internationaler-bund.de www.googleadservices.com *.ib.de *.raisenow.io *.raisenow.com *.raisenow.net *.stripe.com *.datatrans.com *.spreedly.com *.paypal.com *.jsdelivr.net ib-redaktion-staging.rmsdev.de *.cookiebot.com googleads.g.doubleclick.net www.google.de www.googletagmanager.com www.google-analytics.com connect.facebook.net *.cookiebot.eu altruja.de *.altruja.de *.freiwillig24.de *.emailsys1c.net *.unpkg.com unpkg.com flockler.com *.flockler.com flocklr.com *.flocklr.com *.fundraisingbox.com *.emailsys1a.net *.eye-able.com 'report-sample'; img-src 'self' data: *.ib-online-akademie.de *.ytimg.com media.licdn.com *.emailsys1c.net ib-redaktion-2.rmsdev.de *.internationaler-bund.de www.google.de *.raisenow.io *.raisenow.com *.raisenow.net www.google.com *.jsdelivr.net www.googletagmanager.com *.google-analytics.com *.ib.de ib-redaktion-staging.rmsdev.de www.facebook.com *.cookiebot.com *.cookiebot.eu *.usercentrics.eu www.entwicklungsdienst.de *.altruja.de *.openstreetmap.org *.twimg.com flockler.com *.flockler.com flocklr.com *.flocklr.com *.cdninstagram.com *.fbcdn.net *.fundraisingbox.com *.emailsys1a.net *.eye-able.com https://translate.google.com; base-uri 'self'; frame-src 'self' *.cookiebot.com *.cookiebot.eu www.facebook.com www.googletagmanager.com *.youtube-nocookie.com *.raisenow.io *.raisenow.com *.raisenow.net *.stripe.com *.datatrans.com *.spreedly.com *.paypal.com td.doubleclick.net fonts.gstatic.com googleapis.com www.google.com *.emailsys1c.net freiwillig24.de *.freiwillig24.de *.emailsys1a.net *.altruja.de flockler.com *.flockler.com flocklr.com *.flocklr.com *.cloudflarestream.com *.fundraisingbox.com; worker-src blob:; style-src 'self' 'unsafe-inline' use.fontawesome.com *.freiwillig24.de *.emailsys1c.net *.jsdelivr.net *.raisenow.io *.raisenow.com *.raisenow.net *.eye-able.com 'report-sample'; font-src 'self' data: use.fontawesome.com *.raisenow.io *.raisenow.com *.raisenow.net *.emailsys1a.net; media-src 'self' *.flockler.com *.flocklr.com *.twimg.com; object-src 'self' data:; connect-src 'self' *.internationaler-bund.de *.ib.de *.altruja.de stats.g.doubleclick.net *.raisenow.io *.raisenow.com *.raisenow.net *.stripe.com *.datatrans.com *.spreedly.com *.paypal.com www.facebook.com googleads.g.doubleclick.net region1.analytics.google.com www.google.com *.cookiebot.com *.cookiebot.eu *.friendlycaptcha.eu *.friendlycaptcha.com *.openstreetmap.org formbuilder.online *.flockler.com *.flockler.app flocklr.com *.flocklr.com *.emailsys1c.net *.emailsys1a.net *.rm-solutions.de www.googletagmanager.com *.google-analytics.com *.googleadservices.com *.google.com *.eye-able.com; frame-ancestors 'self' https://ibiks.ibrz.de *.internationaler-bund.de *.rmsdev.de; report-uri https://www.internationaler-bund.de/@http-reporting?csp=report&requestTime=1789266523777247&requestHash=404085a59f39d86bb0df3fac313bc9e1a890053b 1
object-src 'none';base-uri 'self';script-src 'nonce-xXI6dnx4gZSG3WHB-omshg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: mercadolibre.com.ar *.mercadolibre.com.ar mercadolibre.com.mx *.mercadolibre.com.mx mercadolivre.com.br *.mercadolivre.com.br mercadolibre.cl *.mercadolibre.cl mercadolibre.com.co *.mercadolibre.com.co credithub.com.br *.credithub.com.br gstatic.com *.gstatic.com js-agent.newrelic.com *.js-agent.newrelic.com http2.mlstatic.com *.http2.mlstatic.com google-analytics.com *.google-analytics.com facebook.net *.facebook.net googletagmanager.com *.googletagmanager.com googleapis.com *.googleapis.com cloudflare.com *.cloudflare.com mercadolibre.com.ve *.mercadolibre.com.ve mercadolibre.com.pe *.mercadolibre.com.pe mercadolibre.com.uy *.mercadolibre.com.uy jsdelivr.net *.jsdelivr.net tiktok.com *.tiktok.com mercadopago.com *.mercadopago.com recaptcha.net *.recaptcha.net googlesyndication.com *.googlesyndication.com gstatic.cn *.gstatic.cn mercadolibre.com *.mercadolibre.com google.com *.google.com doubleclick.net *.doubleclick.net hotjar.com *.hotjar.com newrelic.com *.newrelic.com mercadolivre.com *.mercadolivre.com; report-uri https://events.mercadolibre.com/csp/reports?identifier=VLzYRkQq_c9JDN0rgeqNBHWXLdiZqw2_qxFsrcXEy-kqgH10y4emFIu-FQ3FzhnRLz2EdQyXLw0A&policy_id=29443&user_id=&request_id=6378e906-7fc8-4b37-a5f0-88ac7e909761; report-to csp-endpoint-vlzyrkqqcjdnrgeqnbhwxldizqwqxfsrcxeykqghyemfiufqfzhnrlzedqyxlwa 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://home.broadly.com https://app.broadly.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://*.hotjar.com https://cdnjs.cloudflare.com https://unpkg.com https://www.youtube.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://storage.googleapis.com https://*.googleapis.com https://img.youtube.com https://i.ytimg.com https://www.google-analytics.com https://*.hotjar.com https://www.googletagmanager.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.hotjar.com wss://*.hotjar.com https://www.googletagmanager.com https://*.googleapis.com; frame-src 'self' https://www.youtube.com https://www.googletagmanager.com https://vars.hotjar.com; media-src 'self' https://storage.googleapis.com 1
default-src 'self'; connect-src 'self' https://sentry.studo.com https://www.googletagmanager.com; script-src 'nonce-xU_imZJ5AtNEBbmcLhZLHk2ezk2d3P14DYWkqGw1SB4' 'strict-dynamic' 'self' https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://assets.studo.com https://www.googletagmanager.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com; frame-src 'self' https://www.googletagmanager.com; object-src 'none'; base-uri 'none'; frame-ancestors 'self'; report-uri https://sentry.studo.com/api/10/security/?sentry_key=e59cfa0a241760860dbc5658c531d0ee&sentry_environment=studo-com-website&sentry_release=d3b5208e78454acd69886d57fae20815de287c69; report-to csp-endpoint 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.gstatic.com https://s3-eu-west-1.amazonaws.com/globale-prod/Images/Help-Center/fonts/TitilliumWeb-Regular.ttf https://s3.global-e.com d1dwsi2ysdg1so.cloudfront.net d15ll0qrusyhmh.cloudfront.net fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.snapchat.com https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.gomoxie.solutions *.snapchat.com *.doubleclick.net *.paypalobjects.com *.kaptcha.com *.adsrvr.org https://plumrocket.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com *.sprinklr.com *.global-e.com *.bglobale.com *.ietf.org *.cookielaw.org *.google.ca *.doubleclick.net d1dwsi2ysdg1so.cloudfront.net us.coca-cola.com cocacola.scene7.com ct.pinterest.com *.facebook.com *.userway.org *.agkn.com *.google.com *.snapchat.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com beacon-qa.magento-datasolutions.com beacon-stage.magento-ds.com beacon.magento-ds.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com *.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com maps.googleapis.com https://static.queue-it.net https://assets.queue-it.net https://edge.adobedc.net *.global-e.com *.bglobale.com https://analytics.tiktok.com https://queue.cokestore.com https://ct.pinterest.com d1dwsi2ysdg1so.cloudfront.net d15ll0qrusyhmh.cloudfront.net rpxnow.com *.rpxnow.com forty11115.pcapredict.com *.gomoxie.solutions js-agent.newrelic.com *.gstatic.com bam.nr-data.net *.coca-cola.com *.pricespider.com *.googletagmanager.com sc-static.net *.sc-static.net *.pinimg.com cdn.kxrd.net *.userway.org *.doubleclick.net connect.facebook.net cdn.krxd.net cdn.cookielaw.org api.addressy.com *.ccnag.com *.sprinklr.com *.adsrvr.org *.snapchat.com *.googleoptimize.com *.coke.com *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com assets.braintreegateway.com *.global-e.com *.bglobale.com https://cdn.userway.org d1dwsi2ysdg1so.cloudfront.net d15ll0qrusyhmh.cloudfront.net *.gomoxie.solutions p.typekit.net *.pricespider.com api.addressy.com cdn.cookielaw.org *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.sprinklr.com *.global-e.com *.bglobale.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.snplow.net commerce.adobedc.net p13n.adobe.io *.adobedc.net *.demdex.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com maps.googleapis.com https://edge.adobedc.net *.sprinklr.com https://analytics.tiktok.com https://privacyportal.onetrust.com https://smetrics.coca-colastore.com https://gem-storefront-service-stg.bglobale.com https://webservices.global-e.com/ https://stgepi.bglobale.com https://gepi.global-e.com d1dwsi2ysdg1so.cloudfront.net d15ll0qrusyhmh.cloudfront.net *.shareacoke.com *.gomoxie.solutions bam.nr-data.net *.doubleclick.net *.coca-cola.com *.coke.com *.b2clogin.com *.facebook.com ct.pinterest.com *.userway.org api.addressy.com *.ccnag.com *.paypalobjects.com *.snapchat.com *.googleapis.com *.cookielaw.org https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com d1dwsi2ysdg1so.cloudfront.net d15ll0qrusyhmh.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://cokestore.report-uri.com/r/d/csp/reportOnly; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com fonts.googleapis.com https://applepay.cdn-apple.com *.fontawesome.com applepay.cdn-apple.com 'self' data: 'unsafe-inline' https://admin.dev3.gh-stores.com https://dev3.gh-stores.com https://admin.gh-stores.com https://gh-stores.com https://www.gh-stores.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://www.paypal.com *.stripe.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.dalenys.com 'self' *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.googletagmanager.com/ mirakl.m2e.cloud *.stripe.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.payplug.com *.dalenys.com https://applepay.cdn-apple.com *.cookiebot.com *.facebook.com *.google.it *.doubleclick.net https://www.paypal.com https://www.sandbox.paypal.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ quickchart.io img.youtube.com flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://secure-magenta.dalenys.com *.dalenys.com *.googleapis.com 'self' *.fontawesome.com *.google.pl *.google.it *.google.com *.google.nl *.gh-stores.com gh-stores.com *.facebook.com *.facebook.net *.atdmt.com *.adobedtm.com *.cookiebot.com https://dev3.gh-stores.com https://gh-stores.com https://www.gh-stores.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com https://maps.googleapis.com https://player.vimeo.com widget.freshworks.com m2epro.freshdesk.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ pay.google.com *.gstatic.com maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://secure-magenta.dalenys.com https://applepay.cdn-apple.com api.payplug.com cdn.payplug.com js.dalenys.com *.googleapis.com 'sha256-g/qbQ8sW5eJ9JO8sQzRJ1OvARbUyKpJXFeof9SLw1eI=' 'self' 'unsafe-inline' *.cookiebot.com *.stripe.com *.facebook.net *.googleads.g.doubleclick.net *.cloudflare.com *.ajax.cloudflare.com *.payplug.com https://dev3.gh-stores.com https://admin.dev3.gh-stores.com/backadmin https://www.gh-stores.com https://gh-stores.com https://www.admin.gh-stores.com/backadmin https://admin.gh-stores.com/backadmin *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.freshdesk.com *.freshworks.com *.braintreegateway.com *.cardinalcommerce.com *.ccdc02.com *.sandbox.paypal.com *.paypalobjects.com *.ytimg.com *.scalapay.com *.jsdelivr.net *.dalenys.com *.omtrdc.net *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com https://fonts.googleapis.com maxcdn.bootstrapcdn.com fonts.gstatic.com *.gstatic.com unsafe-inline assets.braintreegateway.com https://secure-magenta.dalenys.com *.googleapis.com *.googletagmanager.com https://dev3.gh-stores.com https://gh-stores.com https://www.gh-stores.com https://fonts.gstatic.com 'self' 'unsafe-inline' *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://maps.googleapis.com https://player.vimeo.com widget.freshworks.com m2epro.freshdesk.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.stripe.com www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.googleapis.com *.google.pl *.google.it *.google.nl *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.googlesyndication.com *.cookiebot.com *.facebook.com *.scalapay.com *.stape.cloud https://dev3.gh-stores.com https://gh-stores.com https://www.gh-stores.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.gstatic.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.googleapis.com fonts.gstatic.com *.googleapis.com *.gstatic.com data: cdnjs.cloudflare.com 'self' data: https://static.klaviyo.com/  *.livehelpnow.net *.clearbags.com *.google.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.certcapture.com *.trustpilot.com js.driftt.com vars.hotjar.com photos.pixlee.co c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * js.mollie.com https://www.google.com https://recaptcha.google.com clearbags.sjv.io https://static.klaviyo.com https://www.klaviyo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com *.certcapture.com *.cloudfront.net *.edgecastcdn.net wac.edgecastcdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://www.mollie.com *.hsforms.net *.hsforms.com 'self' data: seal-memphis.bbb.org *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com https://staging.clearbags.cloud/ *.brandlock.io *.bing.com *.trkn.us trkn.us *.adsrvr.org *.tvsquared.com *.linkedin.com *.rlcdn.com *.clearbags.com *.facebook.com *.google.pl *.livehelpnow.net *.bizrate.com *.xg4ken.com *.pixlee.com *.simpleanalyticscdn.com *.sansec.io *.itstarsbuilding.com editor-upload-cdn.optimonk.com *.google.com *.bbb.org *.visualwebsiteoptimizer.com *.ojrq.net *.facebook.net *.venus.clearbags.cloud bam.nr-data.net clearbags.sjv.io *.logs-01.loggly.com https://www.klaviyo.com https://trk.klaviyo.com https://www.google-analytics.com https://static.klaviyo.com https://*.klaviyo.com *.google.com.mx *.google.com.jm *.google.ca *.google.co.in *.google.co.uk *.google.com.sg *.loopanalytics.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.attn.tv events.attentivemobile.com *.certcapture.com *.trustpilot.com *.hotjar.com chimpstatic.com *.mailchimp.com *.list-manage.com js.driftt.com cdn.searchspring.net *.turnto.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com js.mollie.com *.hsforms.net *.hsforms.com *.google.com https://cdn.searchspring.net https://cdn.prod.us.five9.net *.thoughtmetric.io *.impactcdn.com https://applepay.cdn-apple.com *.googletagmanager.com tagmanager.google.com *.pinimg.com *.amazonawx.com *.pixlee.com *.rakuten.com *.cnnx.link *.licdn.com *.bing.com *.cloudfront.net *.tvsquared.com *.clarity.ms *.taboola.com *.facebook.com *.livehelpnow.net *.amazonaws.com *.facebook.net *.noibu.com *.xg4ken.com *.linksynergy.com *.liadm.com *.pxlecdn.com *.clearbags.com *.osano.com *.pinterest.com *.itstarsbuilding.com https://www.ssa.gov/accessibility/andi/andi.js front.optimonk.com gs-cdn.optimonk.com cdn-asset.optimonk.com 'unsafe-inline' 'unsafe-eval' 'sha256-be3gDU3Bgvxyz6aPEVAafrrXZP6snvriog08Cj9IgK0=' 'sha256-cBV2B+1pc853590KqjR87W41InutkyD/TBMHBMUFjQI=' 'sha256-f7EXcs0hOO9ROJo/VAJjWKWc95wpKN633rmMcFF+3J8=' 'sha256-B9SJKFx7vy60+sayY1/6y6g+PUqjUTRdFQwVb6Wdy1I=' 'sha256-maykMM26RvjkcOo4mhZWFNHiuu2B7zF4jXXWh6bzHZE=' 'sha256-av9dQdAFBRGgtiiG6ANHS+DzoE2TDKbYKcfW9YdS1do=' *.visualwebsiteoptimizer.com js-agent.newrelic.com js-agent.nr-data.net https://www.google.com https://www.gstatic.com 'sha256-5KwepQNyStLFSYq6mlDLiyCQ9Caaun+feyZ0nCpH90M=' clearbags.sjv.io *.static.klaviyo.com *.klaviyo.com 'sha256-JJHnACSRNfzJl5OE9iEB7y3E+b+8COlBOLbY3jyvb7Y=' 'sha256-5FqwCpOd6dDfJPpAIxZNrfBPbmwtp1zrNkSfHVcNQz4=' https://s3-us-west-2.amazonaws.com/jsstore/a/ https://s3-us-west-2.amazonaws.com/jsstore/b/ https://api.retention.com/api/v1/script_beacon *.liadm.com/ https://b-code.liadm.com/ https://da1bbbz2bvais.cloudfront.net/a/ZRKHE3XK/ge.js *.google.com.mx *.google.com.jm *.google.ca *.google.co.in *.google.co.uk *.google.com.sg 'sha256-QZxWoI3ZILqdahzXUL48PQCfoSYfjkTqpX2gGAi/BnI=' 'sha-256-MqoSqF8W3awtiD5pVA5r0tYLhp08yRY3s5aLw9yJhFA=' 'sha-256-FzX3kIognvrIMia97XtktN5B7N0hYLy8zLKpx+u+nPU=' 'sha-256-RbiN1xDLW8KgF8t5bb0zSHv5AFFV9jiqFEhtRWZlmcw=' 'sha-256-4//G3jcQH6KKt7h/q6jHpg0mryKfoWpoHqvrjptuwsM=' 'sha-256-2274iER4g3OzwT1stK0jYY1Kju4WUgVm0e3PGXctc04=' 'sha-256-jSUKPHnMirYimF1gh+QrjrhbiUYVnNEBULlI1e5YHic=' *.loopanalytics.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com cdnjs.cloudflare.com cdn.searchspring.net *.turnto.com https://static.klaviyo.com unsafe-inline assets.braintreegateway.com *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com https://static-tracking.klaviyo.com/ https://static.klaviyo.com 'unsafe-inline' *.noibu.com *.livehelpnow.net *.clearbags.com https://www.ssa.gov/accessibility/andi/andi.css cdn-asset.optimonk.com front.optimonk.com 'unsafe-inline' 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.attn.tv events.attentivemobile.com *.certcapture.com in.hotjar.com *.hotjar.io *.turnto.com *.searchspring.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.visualwebsiteoptimizer.com *.thoughtmetric.io *.itstarsbuilding.com https://cdn.prod.us.five9.net *.osano.com *.optimonk.com *.analytics.google.com *.googletagmanager.com *.livehelpnow.net *.clarity.ms *.noibu.com *.demdex.net *.pinterest.com *.linkedin.com *.facebook.com *.taboola.com wss://input.noibu.com *.liadm.com wss://app.livehelpnow.net *.doubleclick.net *.pixlee.com *.userway.org *.brandlock.io bat.bing.com *.sjv.io *.ip-api.com *.usbrowserspeed.com *.alocdn.com *.amazonaws.com bam.nr-data.net bam-cell.nr-data.net collector.newrelic.com https://www.google.com https://recaptcha.google.com clearbags.sjv.io https://a.klaviyo.com https://b.klaviyo.com https://trk.klaviyo.com https://analytics.klaviyo.com https://api.retention.com/  *.execute-api.us-west-2.amazonaws.com/ https://alocdn.com/ https://a.usbrowserspeed.com/ *.liadm.com/ https://pro.ip-api.com/json/ https://s3shglasfi.execute-api.us-west-2.amazonaws.com/ev https://vxdq9yx2sd.execute-api.us-west-2.amazonaws.com/so https://ckjjzdn8vk.execute-api.us-west-2.amazonaws.com/li https://uqmscnlvii.execute-api.us-west-2.amazonaws.com/suppression *.google.com.mx *.google.com.jm *.google.ca *.google.co.in *.google.co.uk *.google.com.sg *.openai.com *.loopanalytics.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-1LK0xhk3Jm23VQDVXgcwFQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.tawk.to www.scommerce-mage.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.tawk.to www.scommerce-mage.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com www.scommerce-mage.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.tawk.to *.google.co.uk www.scommerce-mage.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io camo.githubusercontent.com *.stripe.com *.stripe.network *.google.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.tawk.to tawk.link cdn.jsdelivr.net s3.amazonaws.com/ https://platform-cdn.sharethis.com https://bat.bing.com https://l.sharethis.com https://www.google.ru https://*.clarity.ms https://www.google.co.uk https://www.google.com  https://*.facebook.com  https://*.bing.com sync.sharethis.com https://www.google.co.in  https://www.google.co.uk https://bat.bing.net www.google.com.ar www.google.com.au www.google.com.sg www.google.gr www.google.nl www.google.de www.google.fr www.google.ca www.google.com.vn www.google.hu www.google.it stats.g.doubleclick.net www.scommerce-mage.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.sagepay.com *.opayo.eu.elavon.com https://maps.googleapis.com https://player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.tawk.to cdn.jsdelivr.net platform-api.sharethis.com https://buttons-config.sharethis.com https://s.pinimg.com https://bat.bing.com https://connect.facebook.net https://ct.pinterest.com https://www.clarity.ms https://*.sharethis.com bat.bing.com https://sc-static.net/scevent.min.js www.scommerce-mage.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com downloads.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com assets.braintreegateway.com *.tawk.to cdn.jsdelivr.net www.googletagmanager.com www.scommerce-mage.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tawk.to tawk.link www.scommerce-mage.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.tawk.to wss://*.tawk.to https://l.sharethis.com https://googleads.g.doubleclick.net https://ct.pinterest.com https://stats.g.doubleclick.net https://u.clarity.ms https://bat.bing.com https://*.clarity.ms  https://*.sharethis.com  https://data.stbuttons.click https://c.ltmsphrcl.net https://*.google-analytics.com  https://www.google.co.uk https://bat.bing.net https://www.pinterest.com www.google.gr www.google.de pagead2.googlesyndication.com www.google.co.in www.google.ca www.facebook.com www.google.com.tw www.google.nl www.google.es https://ad.doubleclick.net/ https://shqchobz.euv.stape.io https://ct.pinterest.com/ https://bat.bing.com/ https://s.pinimg.com/ https://sc-static.net/scevent.min.js www.scommerce-mage.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com www.scommerce-mage.com http: https: blob: 'self' 'unsafe-inline'; default-src www.scommerce-mage.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.scommerce-mage.com/scommercereporturi/report/storefront; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; upgrade-insecure-requests; block-all-mixed-content; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://www.google.com https://googleads.g.doubleclick.net https://a.clarity.ms https://scripts.clarity.ms https://www.clarity.ms https://connect.facebook.net https://snap.licdn.com https://static.hotjar.com https://script.hotjar.com https://static.privally.io https://app.privally.global https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://d335luupugsy2.cloudfront.net https://cdn.botframework.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://app.privally.global; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net data:; img-src 'self' data: https:; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com https://*.clarity.ms https://www.clarity.ms https://api.privally.global https://static.privally.io https://px.ads.linkedin.com https://www.facebook.com https://cdn.botframework.com https://forms.rdstation.com.br; frame-src 'self' https://forms.rdstation.com.br https://cdn.botframework.com https://www.googletagmanager.com; worker-src 'self' blob:; manifest-src 'self'; report-uri https://2485f2b0cdba1a938adefc959ac3c8ce.report-uri.com/r/d/csp/reportOnly; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://maps.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://tagmanager.google.com; style-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com; img-src 'self' data: https://res.cloudinary.com https://maps.googleapis.com https://maps.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.gstatic.com https://www.gstatic.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://res.cloudinary.com https://maps.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com; media-src 'self'; frame-src https://www.googletagmanager.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none' 1
object-src 'none';base-uri 'self';script-src 'nonce-E0vC9kMldv9b-r8sGMUqLA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com https://fonts.bunny.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.google.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.youtube.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.mollie.com assets.myparcel.nl *.openstreetmap.fr www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.maps.googleapis.com *.trackedlink.net *.maps.gstatic.com maps.googleapis.com *.avada.io *.shopify.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.mollie.com cdnjs.cloudflare.com cdn.jsdelivr.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com downloads.mailchimp.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com *.google-analytics.com https://fonts.bunny.net cdn.jsdelivr.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.cloudflare.com *.twitter.com *.twimg.com *.googleadservices.com *.google-analytics.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org *.google.co.in *.maps.gstatic.com *.maps.googleapis.com maps.googleapis.com https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.myparcel.nl cdn.jsdelivr.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; default-src 'self' https://cdn.sanity.io https://widget.trustpilot.com https://www.youtube.com 'self' https://cdn.shopify.com https://shopify.com; frame-ancestors 'self' https://*.jonesbootmaker.com https://cms.jonesbootmaker.com/jones-uk; style-src 'self' 'unsafe-inline' https://cdn.shopify.com https://fonts.googleapis.com https://fonts.gstatic.com 'self' 'unsafe-inline' https://cdn.shopify.com; connect-src https://sv3k3p3d.api.sanity.io wss://sv3k3p3d.api.sanity.io 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googleapis.com https://*.myshopify.dev https://widget.trustpilot.com https://cdn.shopify.com https://shopifycloud.com https://chat.system.gnatta.com https://metrics.pavers.co.uk https://metrics.jonesbootmaker.com https://pagead2.googlesyndication.com https://www.google.com https://bat.bing.net https://bat.bing.com https://cdn.sanity.io https://log.cookieyes.com https://ct.pinterest.com https://try.abtasty.com https://s.pinimg.com https://cdn.jsdelivr.net https://pixels.spotify.com https://cdn-cookieyes.com https://dcinfos-cache.abtasty.com https://routes.soreto.com https://checkout.pavers.co.uk https://pavers.co.uk https://*.pavers.co.uk https://*.jonesbootmaker.com https://r1.trackedweb.net https://api-r4.tagalys.com https://ariane.abtasty.com/ https://c4.dycdn.net https://click.prod.mplat-ppcprotect.com wss://r1-am.dycdn.net/ https://ad.doubleclick.net https://checkout.jonesbootmaker.com https://q.clarity.ms https://r1-am.dycdn.net wss://ws.hotjar.com/ https://content.hotjar.io https://metrics.hotjar.io https://directory.cookieyes.com/ https://content.hotjar.io/ 'self' https://cdn.shopify.com/ https://monorail-edge.shopifysvc.com https://jonesbootmaker.myshopify.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdn.shopify.com https://*.googletagmanager.com https://maps.googleapis.com https://maps.google.com https://www.gstatic.com https://widget.trustpilot.com https://chat.system.gnatta.com https://metrics.pavers.co.uk https://metrics.jonesbootmaker.com https://bat.bing.com https://s.pinimg.com https://connect.facebook.net https://assets.soreto.com https://lantern.roeyecdn.com https://script.hotjar.com https://www.clarity.ms https://s.tribalfusion.com https://c0.adalyser.com https://client.prod.mplat-ppcprotect.com https://pixel.byspotify.com/ https://cdn-cookieyes.com https://try.abtasty.com https://static.trackedweb.net https://d81mfvml8p5ml.cloudfront.net https://r1-am.dycdn.net https://cfg.dycdn.net/ https://ct.pinterest.com https://scripts.clarity.ms https://tagalys-assets.s3.ap-southeast-1.amazonaws.com ; img-src 'self' https://cdn.sanity.io https://cdn.shopify.com https://*.google-analytics.com https://*.googletagmanager.com https://www.google.com https://www.google.co.uk https://www.google.ie https://www.google.cz https://maps.googleapis.com https://maps.gstatic.com https://www.gstatic.com https://bat.bing.net https://ade.googlesyndication.com data: https://bat.bing.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://a.mktgcdn.com https://s.tribalfusion.com https://lantern.roeye.com https://metrics.pavers.co.uk https://metrics.jonesbootmaker.com https://ib.adnxs.com https://cdn-cookieyes.com https://www.facebook.com https://c0.adalyser.com; frame-src https://www.youtube.com https://widget.trustpilot.com https://www.google.com https://*.frcapi.com https://secure.gocertify.me https://www.mainadv.com https://metrics.pavers.co.uk https://metrics.jonesbootmaker.com https://www.facebook.com/ https://ct.pinterest.com/ https://10333593.fls.doubleclick.net/; font-src 'self' https://cdn.shopify.com https://fonts.googleapis.com https://fonts.gstatic.com;; trusted-types app-default goog#html lit-html google-maps-api-loader google-maps-api#html facebook.com/signals/iwl connect.facebook.net/fbevents 'allow-duplicates'; 1
default-src 'self' blob:  https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; frame-src 'self' https://*.noxiaohao.com https://telegram.org https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://accounts.google.com https://oauth.telegram.org https://sgtm.btsgtm.com  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; script-src 'self' 'nonce-JqpWxUvRXdc/HKHxORhuHg==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh/v3RIRuG3kMikr5iha+7P/0TN/GNA=' https://*.noxiaohao.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://accounts.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://play.google.com https://analytics.google.com https://fonts.gstatic.com https://telegram.org https://oauth.telegram.org https://*.geetest.com https://*.geevisit.com https://sgtm.btsgtm.com https://static.wangsustatic.xyz https://static.wangsustatic.vip ; connect-src 'self' https://stats.g.doubleclick.net https://analytics.google.com https://*.noxiaohao.com wss://*.noxiaohao.com wss: https://www.turingfraud.net https://play.google.com https://accounts.google.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://telegram.org https://oauth.telegram.org https://static.geetest.com https://static.geevisit.com wss://stream.bitget.cloud https://www.google.com https://sgtm.btsgtm.com  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; worker-src 'self' blob:; img-src 'self' data: blob: https://img.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://img.bitgetimg.com https://img.gurenla.com https://*.bgbstatic.com https://lh3.googleusercontent.com https://static.geetest.com https://static.geevisit.com https://static-web.jjdsn.vip https://cdn.bitkeep.vip https://www.google.co.jp https://bin.wangsustatic.com https://sgtm.btsgtm.com https://analytics.google.com https://stats.g.doubleclick.net  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; style-src 'self' 'unsafe-inline' https://static.geetest.com https://static.geevisit.com https://accounts.google.com https://fonts.googleapis.com https://static.bgbstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; font-src 'self' data: https://static.geetest.com https://static.geevisit.com https://fonts.gstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri /v1/buried/log/cspSecurity /v1/monitor/csp?appId=d4b6df7d; 1
frame-src 'self' youtube.com; object-src 'none'; script-src 'self' cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://console.accessibleweb.com https://maxcdn.bootstrapcdn.com https://polyfill-fastly.io https://static.addtoany.com https://unpkg.com https://www.google.com mdbootstrap.com; script-src-attr 'self'; style-src 'self' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://unpkg.com https://use.fontawesome.com mdbootstrap.com use.fontawesome.com; style-src-attr 'self'; frame-ancestors 'self' 1
form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://*.svea.com https://*.vipps.no https://*.trustly.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de widget.trustpilot.com tr.snapchat.com *.playground.klarna.com cdn.klarna.com www.google.com js.klarna.com youtube.com www.youtube.com *.cookiebot.com *.klarna.com *.kustom.co *.criteo.com *.hotjar.com *.doubleclick.net https://*.svea.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.trustpilot.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com *.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com polyfill.io *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.clerk.io widget-mediator.zopim.com dev.visualwebsiteoptimizer.com static.lipscore.com widget.trustpilot.com invitejs.trustpilot.com eu-library.klarnaservices.com sleeknotecustomerscripts.sleeknote.com static.zdassets.com tr.snapchat.com sc-static.net *.algolia.net *.algolianet.com cdn.klarna.com x.klarnacdn.net *.playground.klarna.com tagmanager.google.com www.googletagmanager.com ssl.google-analytics.com www.google.com www.gstatic.com *.cookiebot.com *.googlesyndication.com s.sparmax.no googletagmanager.com *.lipscore.com frankanddick.dev s.kk-resources.com *.criteo.com *.criteo.net *.hotjar.com *.bing.com *.de17a.com *.facebook.net google-analytics.com *.adform.net *.sleeknote.com *.zdassets.com google.com gstatic.com *.trustpilot.com *.klarnaservices.com *.clarity.ms *.klarnacdn.net *.klarna.com *.kustom.co *.doubleclick.net *.sparmax.se *.sparmax.dk *.maxkjop.no *.skjaraard.no s.skjargaard.no partner.googleadservices.com www.tryggehandel.no *.zopim.com vjs.zencdn.net player.vimeo.com https://*.svea.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com *.youtube.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cloudflare.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' 'unsafe-inline'; media-src static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.algolia.net *.algolia.com *.algolianet.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de widget-mediator.zopim.com wss://widget-mediator.zopim.com static.zdassets.com *.klarnauserservices.com *.klarnaservices.com wapi.lipscore.com *.zdassets.com sparmax.zendesk.com *.snapchat.com *.google.com *.google-analytics.com *.googlesyndication.com *.visualwebsiteoptimizer.com *.hotjar.io *.playground.klarnaevt.com www.googletagmanager.com www.google-analytics.com *.cookiebot.com *.criteo.com vars.hotjar.com *.de17a.com *.trustpilot.com dnacdn.net *.getsentry.com s.sparmax.no tryggehandel.no google.com gtm.sparmax.no *.clarity.ms bat.bing.com google-analytics.com google.com/recaptcha *.klarnacdn.net *.doubleclick.net *.klarnaevt.com *.klarna.com *.kustom.co s.sparmax.se s.sparmax.dk s.maxkjop.no *.skjaraard.no s.skjargaard.no www.facebook.com/tr *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; font-src https://pim.sparmax.no/ static.lipscore.com x.klarnacdn.net fonts.gstatic.com *.fontawesome.com fonts.gstatic.com/s s.sparmax.no s.sparmax.dk s.sparmax.se s.maxkjop.no s.skjargaard.no *.zopim.com data: *.gstatic.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; style-src https://pim.sparmax.no/ getfirebug.com sparmax.wpcloud.trollweb.no x.klarnacdn.net static.lipscore.com tagmanager.google.com fonts.googleapis.com https://*.sparmax.no *.trollweb.no *.lipscore.com *.klarnacdn.net https://*.sparmax.se https://*.sparmax.dk https://*.maxkjop.no https://*.skjargaard.no unsafe-inline vjs.zencdn.net cdn.dnky.co webchat.dotdigital.com *.fontawesome.com *.trustpilot.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; img-src https://pim.sparmax.no/ assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com camo.githubusercontent.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.clerk.io x.klarnacdn.net sparmax.wpcloud.trollweb.no tr.snapchat.com *.google.com *.google.pl *.google.no cdn.klarna.com *.playground.klarnaevt.com www.googletagmanager.com ssl.gstatic.com www.gstatic.com googleads.g.doubleclick.net www.google.com *.cookiebot.com s.sparmax.no www.tryggehandel.no *.trollweb.no google-analytics.com dev.visualwebsiteoptimizer.com google.com/ads www.facebook.com *.bing.com *.criteo.com *.criteo.net *.zdassets.com *.clarity.ms *.doubleclick.net raw.githubusercontent.com/vippsas *.sparmax.se *.sparmax.dk *.maxkjop.no *.skjaraard.no s.skjargaard.no googleadservices.com v2assets.zopim.io www.google.no/ads www.google.se/ads www.google.dk/ads www.google.fr/ads www.google.co.uk/ads www.google.uk/ads www.google.com/ads www.google.de/ads www.google.pl/ads www.google.lt/ads www.google.es/ads www.google.lv/ads www.google.ee/ads www.google.th/ads www.google.no/pagead www.google.se/pagead www.google.dk/pagead www.google.fr/pagead www.google.co.uk/pagead www.google.uk/pagead www.google.com/pagead www.google.de/pagead www.google.pl/pagead www.google.lt/pagead www.google.es/pagead www.google.lv/pagead www.google.ee/pagead www.google.th/pagead gtm.sparmax.no *.klarnaevt.com https:/at19.net https://bdt9.net https://ds1.nl https://dt51.net https://dt61.net https://fr135.net https://glp8.net https://jdt8.net https://jf79.net https://hs82.net https://lt45.net https://mt74.net https://ndt5.net https://rkn3.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com 'self' 'unsafe-inline'; 1
frame-src *.force.com https://player.vimeo.com 'self' https://stats.g.doubleclick.net *.youtube.co.uk https://sfdc-link-preview.hk.salesforce.com https://checkoutshopper-test.adyen.com/ https://www.qrcargo.com https://pal-test.adyen.com *.cybersource.com *.youtube.es https://gbr78.sfdc-5pakla.salesforce.com *.adis.ws *.youtube.ie https://www.youtube.com *.cloudinary.com https://www.google.com https://pay.google.com https://api.ipify.org *.vimeo.com *.youtube.jp bcove.video https://app.arcade.software *.youtube.fr https://*.a.forceusercontent.com https://player.cloudinary.com https://sfdc-link-preview-staging.sfdc.sh https://s1.adis.ws *.forceusercontent.com *.brightcove.net *.youtube.com *.youtube.nl https://service.force.com/embeddedservice/ https://fast.wistia.net *.quip.com *.arkoselabs.com *.youtube-nocookie.com https://www.paypal.com https://appiniummastertrial.secure.force.com https://play.vidyard.com *.youtube.com.br https://qrcargo.my.site.com *.salesforce-experience.com *.salesforceliveagent.com https://scormanywhere.secure.force.com https://demo.arcade.software https://checkoutshopper-live.adyen.com/ *.sfdcfc.net https://maps.a.forceusercontent.com *.youtube.ca https://location.force.com *.vidyard.com https://www.gstatic.com/recaptcha/ https://players.brightcove.net https://cdn.embedly.com https://www.google.com/recaptcha/ https://js.stripe.com/ https://www.sandbox.paypal.com https://qrcargo.file.force.com https://*.a.forceusercontent.com/lightningmaps/ https://www.googletagmanager.com *.wistia.net https://www.google-analytics.com *.salesforce.com https://qrcargo.my.salesforce-scrt.com *.youtube.pl; report-to sfdc-csp-ep; report-uri https://qrcargo.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D4K000000Cwhy&networkId=0DM4K000000gVJm&type=communities 1
default-src 'self'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://device.maxmind.com https://*.firebaseio.com https://www.gstatic.com https://cdnjs.cloudflare.com https://analytics.tiktok.com https://maps.googleapis.com https://connect.facebook.net https://static.cloudflareinsights.com https://tags.creativecdn.com https://googleads.g.doubleclick.net https://static.ads-twitter.com https://cdn-cookieyes.com https://nope.bobshop.co.za https://cdn.jsdelivr.net https://ep2.adtraffiquality.google; style-src 'self' 'report-sample' 'unsafe-inline' https://fonts.googleapis.com https://cdn-cookieyes.com; img-src 'self' data: https: blob:; font-src 'self' data: https://fonts.gstatic.com https://ka-p.fontawesome.com https://cdn.ochat.io; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://*.firebaseio.com https://firebase.googleapis.com https://firebaseinstallations.googleapis.com https://analytics.tiktok.com https://analytics-ipv6.tiktok.us https://www.google.com https://www.google.co.za https://maps.googleapis.com https://ad.doubleclick.net https://stats.g.doubleclick.net https://www.googleadservices.com https://mobicred.co.za https://cdn-cookieyes.com https://log.cookieyes.com https://directory.cookieyes.com https://ams.creativecdn.com https://nope.bobshop.co.za https://analytics.twitter.com https://region1.analytics.google.com https://ep2.adtraffiquality.google; frame-src https://www.facebook.com https://www.youtube.com https://ep2.adtraffiquality.google; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com; report-to csp-endpoint 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https: data:; frame-src https:; connect-src 'self' https:; frame-ancestors 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com instantcredit.net test.instantcredit.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.paycomet.com api.paycomet.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com vimeo.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.paycomet.com api.paycomet.com instantcredit.net test.instantcredit.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io i.vimeocdn.com f.vimeocdn.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com instantcredit.net test.instantcredit.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.paycomet.com api.paycomet.com instantcredit.net test.instantcredit.net code.jquery.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com instantcredit.net test.instantcredit.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.vimeocdn.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com instantcredit.net *.instantcredit.net 'self' 'unsafe-inline'; child-src player.vimeo.com vimeo.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud https://maxcdn.bootstrapcdn.com/ *.fontawesome.com *.revolut.com *.google.com google.com *.cdn-apple.com pay.google.com www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com *.yotpo.com *.googleapis.com www.fullofbeans.ie data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.searchanise.com *.searchserverapi.com *.searchserverapi1.com *.twitter.com *.yotpo.com www.fullofbeans.ie 'self' 'unsafe-inline'; frame-ancestors *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com *.gstatic.com www.fullofbeans.ie 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.revolut.com *.cdn-apple.com *.gstatic.com www.searchanise.com *.searchserverapi.com *.searchserverapi1.com *.twitter.com *.yotpo.com www.fullofbeans.ie 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.trackedlink.net *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud ebizmarts-website.s3.amazonaws.com https://www.fullofbeans.ie/ https://www.google.co.in/ https://www.google.co.uk/ magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com *.twitter.com *.twimg.com www.google.ru www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com s3.amazonaws.com *.googleapis.com *.yotpo.com www.fullofbeans.ie data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud https://maps.googleapis.com/ https://searchserverapi.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.revolut.com *.gstatic.com searchanise-ef84.kxcdn.com s3.amazonaws.com ajax.aspnetcdn.com www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com *.searchanise.com api.amplitude.com *.twitter.com *.twimg.com *.googleapis.com *.yotpo.com www.fullofbeans.ie 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com webchat.dotdigital.com webchat.staging.dotdigital.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud https://fonts.googleapis.com/ https://maxcdn.bootstrapcdn.com/ *.fontawesome.com assets.braintreegateway.com www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com searchanise-ef84.kxcdn.com s3.amazonaws.com *.twitter.com ton.twimg.com *.yotpo.com *.googleapis.com www.fullofbeans.ie 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.fullofbeans.ie 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud https://maps.googleapis.com/ https://stats.g.doubleclick.net/ https://magento-1523399-6016761.cloudwaysapps.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.revolut.com *.cdn-apple.com pay.google.com *.gstatic.com api.amplitude.com stats.g.doubleclick.net www.google-analytics.com *.googleapis.com *.yotpo.com www.fullofbeans.ie 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com www.fullofbeans.ie http: https: blob: 'self' 'unsafe-inline'; default-src www.fullofbeans.ie 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: logger.scot.nhs.uk *.fontawesome.com use.typekit.net *.google.com *.google.co.uk *.googleapis.com themes.googleusercontent.com *.gstatic.com code.jquery.com yui.yahooapis.com *.bootstrapcdn.com cdnjs.cloudflare.com cdn.jsdelivr.net unpkg.com *.twitter.com *.twimg.com *.youtube.com youtu.be *.ytimg.com www.youtube-nocookie.com player.vimeo.com i.vimeocdn.com cdn.jwplayer.com content.jwplatform.com prd.jwpltx.com *.jwpcdn.com *.jwpsrv.com *.civiccomputing.com cc.cdn.civiccomputing.com secure.gravatar.com public.tableau.com www.openstreetmap.org browser-update.org s.w.org www.geoplugin.net *.wp.com hcaptcha.com *.hcaptcha.com www.careopinion.org.uk www.patientopinion.org.uk assets.nhs.uk www.travelinescotland.com api.mapbox.com; worker-src 'self' www.google.com; frame-ancestors 'self'; base-uri 'self'; report-to csp-endpoint; report-uri https://web-reports.scot.nhs.uk/api/v1/csp-report 1
object-src 'none'; script-src 'self' https://app.unpkg.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com 'unsafe-inline' https://analytics.aefe.fr/; script-src-attr 'self' 'unsafe-hashes' 'sha256-JJxA0PyadZDcrQKKG8EycTletPRRzPtP1xCqZUkVPMk=' 'sha256-3Wg5Uz+NdC6XgYtydbRUBmLBT5xi+wbyW/hDyNvL/aE=' 'sha256-sVizWJpUAeNv0gj7EUIkE9sKqZSA+ePK787TljbOTqU=' 'sha256-5pYFebXuxSAyboe764a6psHR6Y/dUS51mVk/upelm6U='; script-src-elem 'self' 'sha256-cwottXNRyyGfLWxUBoHf7ye2c+eUdHtcrcPXy+lwHjk=' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src 'self' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src-attr 'self' 'unsafe-hashes' 'sha256-32t0bJPIyxns/QqsW8RE3JGUERKnHL5RygHBgJvEanc=' 'sha256-Op9GyXghjYEIBx81elyjP5Li3BOznY1HCi7uz0+k5zg=' 'sha256-JJxA0PyadZDcrQKKG8EycTletPRRzPtP1xCqZUkVPMk=' 'sha256-aqNNdDLnnrDOnTNdkJpYlAxKVJtLt9CtFLklmInuUAE=' 'sha256-3juv2Ft1FaY3xWYNGXExi9oTqA3RQ4gtgCqyf3mxGhU='; style-src-elem 'self' 'sha256-1VTAHS0X+0lgrfu7iW/2ikIZ/VIANi00phY6Pqavxdg=' 'sha256-N/DHgbwZ4+wfILRoriY6MOUIIjcR6I742uFBIgpelmc=' 'sha256-ks2QZ4xE6UawHIre9Unzyrrf62aAZcNZUX9lrzSZ0PU=' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' https://js.verygoodvault.com https://client.px-cloud.net https://public.flourish.studio https://cdnjs.cloudflare.com https://code.highcharts.com https://use.typekit.net https://www.google-analytics.com https://analytics.google.com https://ssl.google-analytics.com https://platform.twitter.com https://www.googletagmanager.com https://default.salsalabs.org https://*.salsalabs.org https://code.jquery.com https://device.maxmind.com https://*.dwcdn.net https://datawrapper.dwcdn.net https://*.googleapis.com; connect-src 'self' https://analytics.google.com https://*.google-analytics.com https://*.doubleclick.net https://*.mmapiws.com https://device.maxmind.com https://*.salsalabs.org; img-src 'self' data: https://*.google-analytics.com https://*.googletagmanager.com https://nycfuture.org https://*.nycfuture.org https://www.google.co.kr https://syndication.twitter.com https://p.typekit.net https://*.google.com https://default.salsalabs.org https://*.salsalabs.org; style-src 'self' https://doublethedonation.com https://use.typekit.net https://p.typekit.net https://code.jquery.com https://fonts.googleapis.com https://default.salsalabs.org; font-src 'self' https://use.typekit.net https://fonts.gstatic.com https://default.salsalabs.org data:; frame-src 'self' https://secure.verygoodsecurity.com https://sandbox.verygoodsecurity.com https://js.verygoodvault.com https://www.youtube.com https://platform.twitter.com https://datawrapper.dwcdn.net https://flo.uri.sh https://www.canva.com; form-action 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; upgrade-insecure-requests; block-all-mixed-content; report-uri /csp-report.php 1
font-src *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com *.cloudflare.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * https://www.shopperapproved.com https://plumrocket.com *.facebook.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://*.hotjar.com https://plumrocket.com *.googleapis.com *.google.com *.weltpixel.com *.cloudflare.com *.doubleclick.net *.facebook.com google.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://www.shopperapproved.com https://*.hotjar.com *.klevu.com *.ksearchnet.com *.googleapis.com maps.googleapis.com maps.gstatic.com *.gstatic.com *.adsrvr.org *.amplifieddigitalagency.com *.bing.com *.bing.net *.doubleclick.net *.facebook.com *.facebook.net *.googleadservices.com *.google-analytics.com *.google.com google.com *.googletagmanager.com tvspix.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://www.shopperapproved.com https://direct.shopperapproved.com https://*.hotjar.com https://connect.facebook.net https://bat.bing.com js.klevu.com *.ksearchnet.com *.googleapis.com *.google.com *.gstatic.com assets.shipperhq.com https://www.googletagmanager.com tagmanager.google.com *.amplifieddigitalagency.com *.bing.com *.cloudflare.com cxppusa1formui01cdnsa01-endpoint.azureedge.net *.doubleclick.net *.facebook.net *.google-analytics.com *.googletagmanager.com *.hotjar.com *.klevu.com *.paypal.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com assets.shipperhq.com tagmanager.google.com *.cloudflare.com *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.gstatic.com *.paypal.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com *.klevu.com *.ksearchnet.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com rms.shipperhq.com https://rms.shipperhq.com wss://rms.shipperhq.com *.googleapis.com ovs.shipperhq.com https://www.google-analytics.com *.bing.com *.bing.net *.cloudflare.com *.doubleclick.net *.facebook.com *.facebook.net *.googleadservices.com *.google-analytics.com *.google.com google.com *.gstatic.com *.hotjar.com *.hotjar.io *.paypal.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleadservices.com *.google-analytics.com *.paypal.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; base-uri 'self' 'unsafe-inline'; report-uri https://14050275-8828-4f9f-b9b6-e1d4d98e6996.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; report-uri https://o4507352690196480.ingest.us.sentry.io/api/4508638776393728/security/?sentry_key=417f30792e6d9704c1a0f487e1e965d6; report-to csp-endpoint 1
default-src 'self' https: data:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data:; font-src 'self' https: data:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; require-trusted-types-for 'script'; trusted-types default; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.paypal.com https://*.paypal.com https://js.recurly.com https://maps.googleapis.com https://www.googletagmanager.com https://*.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https: http:; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https://*.paypal.com https://api.recurly.com https://*.recurly.com https://*.google-analytics.com https://www.google-analytics.com https://maps.googleapis.com https://*.public.blob.vercel-storage.com https://vitals.vercel-insights.com; frame-src 'self' https://*.paypal.com https://*.recurly.com https://www.google.com https://platform.twitter.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self' https://*.paypal.com; object-src 'none' 1
font-src 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com cdn-scripts.signifyd.com www.youtube.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; child-src 'none'; object-src 'none'; script-src http: https: 'nonce-jiLqyLjWbkqEEKPXCojhgaOsCQMymdASX1UNi4pq9cI='; connect-src 'self'; worker-src blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cover.sponet.de https://bilder.sponet.de; font-src 'self' https://fonts.gstatic.com; base-uri 'self'; 1
default-src 'self';script-src 'self' 'nonce-8uTJEnt/PhEO7C7e1DJYA8FH2u5bmKmNPa1fgpPpcCQ=' 'strict-dynamic' www.google.com www.gstatic.com cc.cdn.civiccomputing.com maps.googleapis.com www.googletagmanager.com googletagmanager.com www.google-analytics.com www.youtube.com player.vimeo.com;style-src 'self' fonts.googleapis.com;object-src 'none';connect-src 'self' maps.googleapis.com *.google-analytics.com google-analytics.com apikeys.civiccomputing.com stats.g.doubleclick.net *.analytics.google.com https://cdn.plyr.io/ https://clapi.civiccomputing.com/;font-src 'self' fonts.gstatic.com;frame-src 'self' m.youtube.com www.google.com youtube.com www.youtube.com youtu.be player.vimeo.com td.doubleclick.net otp.tools.investis.com go.hitachirail.com ir.q4europe.com marketing.hitachirail.com;img-src 'self' data: *.googleusercontent.com www.googletagmanager.com www.google.co www.google.co.uk i.ytimg.com www.google-analytics.com accounts.google.co.uk ad.doubleclick.net i.vimeocdn.com *.bugherd.com data: maps.gstatic.com maps.googleapis.com;upgrade-insecure-requests;block-all-mixed-content; report-uri /api/csp-report; report-to csp-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com data: *.fontawesome.com 'self' data: https://surveys-static.survicate.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com cdn.dnky.co amc.demdex.net www.google.com www.facebook.com youtube.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com maps.gstatic.com maps.googleapis.com accounts.google.com www.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com connect.facebook.net graph.facebook.com business.facebook.com 'self' data: https://agentcore.s3.amazonaws.com https://www.google.com.ar https://c.clarity.ms https://c.bing.com https://www.mercadolivre.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com cdn.dnky.co r1-t.trackedlink.net www.gstatic.com js-agent.newrelic.com bam.nr-data.net maps.googleapis.com connect.facebook.net player.vimeo.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com graph.facebook.com business.facebook.com https://www.google.com.ar *.gstatic.com https://maps.googleapis.com https://cdn.agentbot.net https://agentcore.s3.amazonaws.com https://www.googleoptimize.com https://www.clarity.ms https://survey.survicate.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com downloads.mailchimp.com cdn.dnky.co *.fontawesome.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.cookielaw.org https://cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://agentcore.s3.amazonaws.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com maps.googleapis.com api.comapi.com bam.nr-data.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google-analytics.com *.cookielaw.org https://stats.g.doubleclick.net https://adapter.aivo.co https://i.clarity.ms https://f.clarity.ms https://www.mercadopago.com.mx https://maps.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-katgK-oE7Hh4kHYQdWEAoQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://analytics.triviar.de https://www.googletagmanager.com https://accounts.google.com https://js.stripe.com https://*.js.stripe.com https://maps.googleapis.com https://*.hs-scripts.com https://*.hsforms.net https://*.hs-analytics.net https://*.hs-banner.com https://*.hscollectedforms.net https://www.google.com https://google.com https://www.gstatic.com https://recaptcha.net https://www.recaptcha.net https://connect.facebook.net https://*.usemessages.com https://*.hubspot.com https://*.hsappstatic.net https://consent.cookiebot.com https://consentcdn.cookiebot.com https://bat.bing.com; style-src 'self' 'unsafe-inline' https://accounts.google.com https://fonts.googleapis.com https://www.gstatic.com; font-src 'self' data: https://fonts.gstatic.com https://*.hsappstatic.net; img-src 'self' data: blob: https:; connect-src 'self' https://analytics.triviar.de https://api.stripe.com https://maps.googleapis.com https://accounts.google.com https://places.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.facebook.com https://*.hsforms.com https://*.hubapi.com https://*.hubspot.com https://*.hscollectedforms.net https://*.hs-banner.com https://*.sentry.io https://*.ingest.sentry.io https://*.ingest.de.sentry.io https://*.amazonaws.com https://*.cloudfront.net https://consentcdn.cookiebot.com https://bat.bing.com https://bat.bing.net https://www.google.com https://google.com https://cms.triviar.de; frame-src 'self' https://js.stripe.com https://*.js.stripe.com https://hooks.stripe.com https://accounts.google.com https://analytics.triviar.de https://*.hsforms.net https://*.hsforms.com https://www.google.com https://google.com https://consentcdn.cookiebot.com https://recaptcha.net https://www.recaptcha.net https://www.paypalobjects.com; media-src 'self' data: blob: https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri https://o365099.ingest.us.sentry.io/api/4954070/security/?sentry_key=3e27d0cb1b1848b08c25278797ccf71c; report-to csp-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.datadoghq.com https://*.launchdarkly.com https://cdn.segment.com https://*.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https: ; connect-src 'self' data: blob: https://*.clipboard.health https://*.clipboardhealth.org https://*.clipboardhealth.com https://cognito-idp.us-west-2.amazonaws.com https://clipboard-production.auth.us-west-2.amazoncognito.com https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com https://*.launchdarkly.com https://api.segment.io https://cdn.segment.com https://*.sendbird.com wss://*.sendbird.com https://api.knock.app wss://api.knock.app https://*.googleapis.com https://d2mrk78pcuj70j.cloudfront.net https://*.s3.us-west-2.amazonaws.com; frame-src 'self' blob: https://clipboard.health https://*.clipboard.health https://989425.apps.zdusercontent.com https://clipboardhealth.zendesk.com https://*.s3.us-west-2.amazonaws.com; frame-ancestors 'self' https://clipboard.health https://www.clipboard.health https://admin.clipboard.health https://*.admin.clipboard.health https://989425.apps.zdusercontent.com https://clipboardhealth.zendesk.com; object-src 'none'; base-uri 'self'; form-action 'self'; worker-src 'self' blob:; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub550ceee6de46fd2a203c537caff66ac9&dd-evp-origin=content-security-policy&ddsource=csp-report-observation&ddtags=env%3Aproduction%2Cservice%3Aadmin-frontend; report-to csp-endpoint-observation 1
default-src 'self'; script-src 'self' 'sha256-7ed4f4026de91a7ddc7ca6f985ac9f745511ccf2f664ed282bf58f8160bb2a62' https://www.googletagmanager.com https://*.cookiebot.com; script-src-attr 'report-sample'; img-src 'self' data: www.buschvacuum.com www.pfeiffervacuum.com www.buschvacuum.cn www.pfeiffervacuum.cn; connect-src 'self' https://*.cookiebot.com https://*.google-analytics.com https://*.googlesyndication.com; frame-src https://*.cookiebot.com; style-src 'self' 'unsafe-inline'; upgrade-insecure-requests 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' https://cdn.cookielaw.org; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data: https://cdn.migros.ch; connect-src 'self' https://cdn.cookielaw.org https://geolocation.onetrust.com; upgrade-insecure-requests; report-uri /.rest/csp-reports/v1; report-to csp; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com https://maxcdn.bootstrapcdn.com https://applepay.cdn-apple.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com secure.authorize.net test.authorize.net *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ secure.authorize.net test.authorize.net *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.lpsnmedia.net *.liveperson.net *.hotjar.com *.bragard.ca https://applepay.cdn-apple.com https://plumrocket.com *.dotdigital-pages.com *.dotdigital.com www.facebook.com platform.twitter.com blob: webchat.dotdigital.com webchat.staging.dotdigital.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.weltpixel.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.linkedin.com bat.bing.com *.powerreviews.com dev.visualwebsiteoptimizer.com seal.digicert.com https://www.google.com/pagead/1p-user-list/ https://www.google.co.jp/pagead/1p-user-list/ https://www.google.com/ads/ https://www.google.co.jp/ads/ https://*.adsymptotic.com/d/px/ *.liquifire.com *.weglot.com *.bragard.ca *.chefworks.com e.postpilot.com aa.trkn.us *.trackedlink.net *.ddlnk.net www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com connect.facebook.net graph.facebook.com business.facebook.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com beacon-qa.magento-datasolutions.com beacon-stage.magento-ds.com beacon.magento-ds.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ secure.authorize.net test.authorize.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com seal.digicert.com dev.visualwebsiteoptimizer.com js-agent.newrelic.com bam.nr-data.net code.jquery.com *.lpsnmedia.net *.liveperson.net *.hotjar.com *.resultspage.com *.resultsdemo.com *.powerreviews.com *.g.doubleclick.net https://snap.licdn.com/li.lms-analytics/ bat.bing.com *.weglot.com *.bragard.ca https://d2s9x5slbvr0vu.cloudfront.net https://www.clarity.ms https://snap.licdn.com https://bat.bing.com https://maps.googleapis.com cdn.jsdelivr.net d22mbxk3w9mny2.cloudfront.net s.pinimg.com tags.srv.stackadapt.com scripts.clarity.ms ct.pinterest.com email.chefworks.com chefworks-us.resultsstage.com https://applepay.cdn-apple.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal www.facebook.com twitter.com platform.twitter.com player.vimeo.com unpkg.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com connect.facebook.net graph.facebook.com business.facebook.com https://www.googletagmanager.com tagmanager.google.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com assets.braintreegateway.com use.fontawesome.com *.resultspage.com *.resultsdemo.com *.powerreviews.com *.weglot.com *.bragard.ca https://maxcdn.bootstrapcdn.com public.codepenassets.com cdnjs.cloudflare.com cdn.jsdelivr.net p.typekit.net use.typekit.net tags.srv.stackadapt.com chefworks-us.resultsstage.com https://applepay.cdn-apple.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net p13n-mr.adobe.io *.adobedc.net *.demdex.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.powerreviews.com bam.nr-data.net *.g.doubleclick.net wss://*.hotjar.com https://*.hotjar.com *.hotjar.io bat.bing.com *.weglot.com *.bragard.ca https://dc.ads.linkedin.com https://px.ads.linkedin.com https://www.clarity.ms https://d.clarity.ms https://snap.licdn.com https://bat.bing.com https://www.google-analytics.com https://dev.visualwebsiteoptimizer.com tags.srv.stackadapt.com sp.chefworks.com ct.pinterest.com k.clarity.ms e.postpilot.com aa.trkn.us dp.signifyd.com maps.googleapis.com https://applepay.cdn-apple.com https://apple.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com data: webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' https://*.soundcloud.com 'nonce-gsDc5yuUbPVYDP2AOS34OA=='; style-src 'self'; img-src 'self' data: 'unsafe-eval' https://*.staticflickr.com https://*.soundcloud.com https://i.vimeocdn.com; default-src 'none' https://vimeo.com; frame-src https://*.soundcloud.com https://player.vimeo.com https://www.youtube.com; font-src 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.hotjar.com *.tidiochat.com *.cookiebot.com *.pcapredict.com *.postcodeanywhere.co.uk maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.superpayments.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.pcapredict.com *.postcodeanywhere.co.uk *.superpayments.com *.stripe.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com *.superpayments.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.hotjar.com *.cookiebot.com *.electrical2go.co.uk maps.googleapis.com td.doubleclick.net *.pcapredict.com *.dotdigital-pages.com *.dotdigital.com *.addthis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.superpayments.com *.js.stripe.com *.trustpilot.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://images.unsplash.com *.google.co.uk *.hotjar.com *.mailchimp.com *.cloudflare.com *.electrical2go.co.uk electrical2go.co.uk *.google.co.in maps.googleapis.com *.cookiebot.com *.facebook.com *.bing.com *.pcapredict.com *.postcodeanywhere.co.uk *.increasingly.co *.trackedlink.net *.ddlnk.net magefan.com cm.magefan.com *.disqus.com maps.gstatic.com bzrcdn.openai.com bzr.openai.com *.superpayments.com *.stripe.com a.storyblok.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://maps.googleapis.com *.hotjar.com *.cookiebot.com *.tidio.co *.tidiochat.com *.electrical2go.co.uk *.clarity.ms *.bing.com *.facebook.net maps.googleapis.com *.increasingly.co *.pcapredict.com *.postcodeanywhere.co.uk *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net https://cdn.searchspring.net/intellisuggest/is.min.js bzrcdn.openai.com bzr.openai.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.superpayments.com b.stripecdn.com m.stripe.network segment.com *.segment.com *.segmentapis.com q4g4k4pw47biltffyqrfab7q7m0jaagm.lambda-url.ap-south-1.on.aws cdn.seondf.com *.trustpilot.com *.googletagmanager.com tagmanager.google.com https://cdn.superpayments.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.hotjar.com maps.googleapis.com *.cookiebot.com *.increasingly.co *.pcapredict.com *.postcodeanywhere.co.uk maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net *.stripe.network *.stripecdn.com *.amazon.com *.superpayments.com *.stripe.com *.trustpilot.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.tidiochat.com *.electrical2go.co.uk electrical2go.co.uk maps.googleapis.com *.cookiebot.com *.pcapredict.com *.postcodeanywhere.co.uk 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://maps.googleapis.com https://player.vimeo.com *.hotjar.com *.cookiebot.com *.tidio.co wss://socket.tidio.co googleads.g.doubleclick.net *.clarity.ms maps.googleapis.com *.trustpilot.com *.increasingly.co *.pcapredict.com *.postcodeanywhere.co.uk *.increasingly.com *.bing.com *.google.co.uk *.searchspring.io *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https://beacon.searchspring.io/beacon bzrcdn.openai.com bzr.openai.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.superpayments.com stripe.com cognito-idp.eu-west-2.amazonaws.com segment.com *.segment.com *.segmentapis.com q4g4k4pw47biltffyqrfab7q7m0jaagm.lambda-url.ap-south-1.on.aws cdn.seondf.com *.seondnsresolve.com *.seondfresolver.com *.deviceinfresolver.com *.seonintelligence.com api.storyblok.com web-sdk.smartlook.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp.deploy.co.uk/99aaa83e-4a88-4ed6-893b-2d02806828b8; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:; 1
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/datacenters_google 1
default-src 'self'; script-src 'self' 'nonce-fc887883-9c83-4c9c-b8ad-4fee81ba4947' 'strict-dynamic' https: http: https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://accounts.google.com https://googletagmanager.com https://tagmanager.google.com https://www.googletagmanager.com https://www.gstatic.com; font-src 'self' https://fonts.gstatic.com data: https://fonts.googleapis.com https://js.intercomcdn.com https://fonts.intercomcdn.com; frame-src 'self' 'nonce-fc887883-9c83-4c9c-b8ad-4fee81ba4947' https://www.google.com https://www.googletagmanager.com https://c.sandbox.paypal.com https://c.paypal.com https://accounts.google.com https://api.recurly.com https://www.youtube.com https://www.youtube-nocookie.com https://www.facebook.com https://*.doubleclick.net https://intercom-sheets.com https://www.intercom-reporting.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net; connect-src 'self' 'nonce-fc887883-9c83-4c9c-b8ad-4fee81ba4947' https://*.analytics.google.com https://bat.bing.com https://api.rollbar.com https://*.ads.linkedin.com https://api.recurly.com https://*.google-analytics.com http://rum-collector-2.pingdom.net https://www-data.neat.com https://www.googleadservices.com https://www.facebook.com https://accounts.google.com https://m1.openfpcdn.io https://docs.google.com https://*.googletagmanager.com https://pagead2.googlesyndication.com https://google.com https://analytics.google.com https://bat.bing.net https://cx.neat.com https://edge.fullstory.com https://rs.fullstory.com https://manager.eu.smartlook.cloud https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat https://pixel-config.reddit.com https://forms.hscollectedforms.net https://api.hubapi.com https://*.quora.com https://*.doubleclick.net https://via.intercom.io https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://*.intercom-messenger.com wss://*.intercom-messenger.com https://nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-b.intercom.io https://uploads.intercomcdn.com https://uploads.intercomusercontent.com; img-src 'self' 'nonce-fc887883-9c83-4c9c-b8ad-4fee81ba4947' https://*.google-analytics.com https://www.facebook.com https://bat.bing.com https://*.ads.linkedin.com https://seal-dc-easternpa.bbb.org https://*.googletagmanager.com data: https://www-data.neat.com https://ct.capterra.com https://i.ytimg.com https://neat-cms-staging.s3.amazonaws.com https://neat-cms-prod.s3.amazonaws.com https://connect.facebook.net https://www.linkedin.com https://ssl.gstatic.com https://www.gstatic.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://google.com https://fonts.gstatic.com https://googletagmanager.com https://bat.bing.net https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat https://*.paypal.com https://track.hubspot.com https://alb.reddit.com https://forms.hsforms.com https://*.quora.com https://*.doubleclick.net blob: https://js.intercomcdn.com https://static.intercomassets.com https://downloads.intercomcdn.com https://uploads.intercomusercontent.com https://gifs.intercomcdn.com https://video-messages.intercomcdn.com https://messenger-apps.intercom.io https://*.intercom-attachments-1.com https://*.intercom-attachments-2.com https://*.intercom-attachments-3.com https://*.intercom-attachments-4.com https://*.intercom-attachments-5.com https://*.intercom-attachments-6.com https://*.intercom-attachments-7.com https://*.intercom-attachments-8.com https://*.intercom-attachments-9.com; object-src 'none'; base-uri 'self'; media-src 'self' data: https://js.intercomcdn.com https://downloads.intercomcdn.com; report-uri https://www.neat.com/api/csp/report; report-to csp-report-endpoint 1
base-uri 'none'; font-src 'self' https: data:; form-action https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://www.facebook.com; frame-ancestors 'self'; img-src https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://ads-twitter.com https://ads-api.twitter.com https://analytics.twitter.com https://mautic.netcup.news https://px.ads.linkedin.com 'self' blob: data: https: https://www.captcha.eu; object-src 'none'; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://www.captcha.eu; script-src https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://chat.netcup.com https://chat-dev-ui.netcup.net https://chat-ui.netcup.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com https://*.onetrust.com https://measure.netcup.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://widget.trustpilot.com https://cdn.brevo.com/js/sdk-loader.js https://www.captcha.eu 'self' 'wasm-unsafe-eval' 'nonce-0U+VxIWs6bVlyEmbzaktJvnw'; child-src blob: https://td.doubleclick.net; connect-src https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://chat.netcup.com https://chat-dev-ui.netcup.net https://chat-ui.netcup.com https://ads-twitter.com https://ads-api.twitter.com https://analytics.twitter.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com https://*.onetrust.com https://www.google.com https://in-automate.brevo.com https://measure.netcup.com https://google.com https://px.ads.linkedin.com https://*.clarity.ms/ 'self' https://*.analytics.google.com https://*.google-analytics.com https://stats.g.doubleclick.net https://www.captcha.eu https://googleads.g.doubleclick.net https://www.googleadservices.com https://cdn.cookielaw.org https://adservice.google.com https://pagead2.googlesyndication.com https://www.redditstatic.com https://pixel-config.reddit.com https://analytics.tiktok.com https://ads.tiktok.com https://bat.bing.com https://widget.trustpilot.com; frame-src https://td.doubleclick.net https://www.facebook.com https://www.googletagmanager.com https://measure.netcup.com https://www.youtube.com https://www.youtube-nocookie.com/ https://widget.trustpilot.com https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://chat.netcup.com https://chat-dev-ui.netcup.net https://chat-ui.netcup.com; script-src-elem https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://chat.netcup.com https://chat-dev-ui.netcup.net https://chat-ui.netcup.com https://cdn.brevo.com/js/sdk-loader.js https://sibautomation.com/sa.js https://sibforms.com/ https://www.googleadservices.com https://www.redditstatic.com 'self' 'unsafe-inline' https://*.googletagmanager.com https://static.ads-twitter.com https://snap.licdn.com https://bat.bing.com https://connect.facebook.net https://*.clarity.ms https://googleads.g.doubleclick.net https://cdn.cookielaw.org https://analytics.tiktok.com https://ads.tiktok.com https://measure.netcup.com https://www.youtube.com https://pagead2.googlesyndication.com https://widget.trustpilot.com; worker-src blob:; report-to csp-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com data: *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com www.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.sharethis.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.google.com.ua *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com https://sst.hatchbag.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sharethis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net https://sst.hatchbag.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app https://sst.hatchbag.co.uk 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://*.ems-dolorclast.com https://*.ems-dolorclast-usa.com https://*.ems-urology.com https://www.googletagmanager.com https://cache.consentframework.com https://choices.consentframework.com https://static.addtoany.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.ems-dolorclast.com https://*.ems-dolorclast-usa.com https://*.ems-urology.com https://www.googletagmanager.com https://*.consentframework.com https://maps.googleapis.com https://*.google-analytics.com https://*.analytics.google.com; frame-src 'self' https://*.ems-dolorclast.com https://*.ems-dolorclast-usa.com https://*.ems-urology.com https://www.youtube.com https://www.youtube-nocookie.com https://*.consentframework.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.google.com/ *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.google-analytics.com https://www.magezon.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com https://www.gstatic.com *.googletagmanager.com *.google-analytics.com cloudfront.barilliance.com kit.fontawesome.com *.google.com/ https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com tagmanager.google.com https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.google-analytics.com https://www.google-analytics.com *.pay.nl 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://localhost/paynl/csp/report; report-to report-endpoint; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob: *; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: techport.ru *.techport.ru https://*.yandex.net https://techport.api.useinsider.com https://vk.com https://*.vk.com https://www.odnoklassniki.ru https://odnoklassniki.ru https://ok.ru https://connect.ok.ru https://yandex.ru https://*.yandex.ru https://ya.ru https://yandex.st https://yastatic.net https://*.yadro.ru https://webvisor.com https://mc.webwisor.org https://google.com https://*.google.com https://google.ru https://*.google.ru https://translate.google.cn https://*.googleapis.com https://*.googleadservices.com https://googletagservices.com https://*.googletagservices.com https://google-analytics.com https://*.google-analytics.com https://gstatic.com https://*.gstatic.com https://*.googlesyndication.com https://*.mail.ru https://top-fwz1.mail.ru https://youtube.ru https://*.youtube.ru https://youtube.com https://*.youtube.com https://s.ytimg.com https://9khj7ltnoi.a.trbcdn.net https://techpont.ru https://*.flixfacts.com https://*.flixcar.com https://*.flix360.com https://*.flix360.io https://logo.flixfacts.co.uk https://media.flixsyndication.net https://*.doubleclick.net https://www.alexa.com https://*.alexa.com https://ssp.rambler.ru https://profile.ssp.rambler.ru https://*.paymentgate.ru https://*.robokassa.ru https://*.sandbox.paypal.com https://*.paypal.com https://paypal.com https://www.paypal.com https://*.mkb.ru https://*.rbsuat.com https://*.begun.ru https://newrelic.com https://*.newrelic.com https://bam.nr-data.net https://techport.api.sociaplus.com https://flv.isitetv.com https://rum.ngenix.net https://*.cdnvideo.ru https://app.clicker.one https://*.24ttl.stream https://goodmod.ru https://p95bxv.ru https://x.cnt.my/ https://dmrtx.com/ https://*.searchbooster.io https://*.searchbooster.net https://cdn.diginetica.net https://getrcmx.com https://ga.segmel.com https://api.b2pos.ru/shop/v2/connect.js https://dpartaptm.com/ https://widget.yourgood.app https://cdn1.imshop.io https://do.price-port.ru; report-uri //www.techport.ru/csp; report-to //www.techport.ru/csp; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.googletagmanager.com https://*.klaviyo.com https://*.hotjar.com https://pagead2.googlesyndication.com https://connect.facebook.net https://applepay.cdn-apple.com https://*.signifyd.com https://cdn.mgln.ai https://js.zi-scripts.com https://*.online-metrix.net https://www.paypal.com https://static-na.payments-amazon.com https://pay.google.com https://js.authorize.net https://dj0000001tonueae.my.site.com https://bat.bing.com https://*.clarity.ms; style-src 'self' 'unsafe-inline' https://*.typekit.net https://fonts.googleapis.com https://*.klaviyo.com https://www.gstatic.com https://dj0000001tonueae.my.site.com; img-src 'self' data: blob: https://www.googletagmanager.com https://www.google-analytics.com https://m.media-amazon.com https://static-na.payments-amazon.com https://t.vibe.co https://mgln.ai https://*.mgln.ai https://www.facebook.com https://*.signifyd.com https://pagead2.googlesyndication.com https://www.paypalobjects.com https://pixel.tapad.com https://*.online-metrix.net https://www.google.com https://i.ytimg.com https://d3k81ch9hvuctc.cloudfront.net https://www.gstatic.com https://connect.facebook.net https://fonts.gstatic.com https://www.googleadservices.com https://stats.g.doubleclick.net https://bat.bing.com; font-src 'self' data: https://fonts.gstatic.com https://*.typekit.net https://applepay.cdn-apple.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://region1.analytics.google.com https://www.googleadservices.com https://www.google.com https://google.com https://pagead2.googlesyndication.com https://ad.doubleclick.net https://stats.g.doubleclick.net https://apay-us.amazon.com https://www.paypal.com https://www.facebook.com https://*.klaviyo.com https://content.hotjar.io wss://ws.hotjar.com https://mgln.ai https://*.mgln.ai https://ws.zoominfo.com https://js.zi-scripts.com https://*.signifyd.com https://pay.google.com https://play.google.com https://us-autocomplete-pro.api.smarty.com https://*.hotjar.io wss://*.hotjar.com https://www.googletagmanager.com https://js.authorize.net https://api2.authorize.net https://googleads.g.doubleclick.net https://api-js.datadome.co https://spay.samsung.com https://*.clarity.ms https://bat.bing.com https://*.salesforce-scrt.com https://*.my.salesforce-sites.com https://dj0000001tonueae.my.site.com https://*.salesforceliveagent.com; frame-src 'self' https://s.amazon-adsystem.com https://www.facebook.com https://www.paypal.com https://pay.google.com https://imgs.signifyd.com https://*.online-metrix.net https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://dj0000001tonueae.my.site.com; form-action 'self' https://www.facebook.com https://apay-us.amazon.com https://www.paypal.com; worker-src 'self' blob:; base-uri 'self'; object-src 'self'; frame-ancestors 'self'; report-uri /_csp-report 1
default-src 'self';      script-src 'self' *.hubspot.com *.hs-analytics.net *.hs-scripts.com;      connect-src 'self' *.hubspot.com *.hubapi.com;      img-src 'self' *.hs-analytics.net *.hubspotusercontent##.net;      frame-src 'self' *.hubspotvideo.com *.hscollectedforms.net;     style-src 'self' *.hubspotusercontent##.net; 1
default-src 'self' https: data: blob:;          script-src 'self' 'unsafe-inline' 'unsafe-eval' https:;          style-src 'self' 'unsafe-inline' https:;          img-src 'self' data: https:;          font-src 'self' data: https:;          connect-src 'self' https:;          frame-src 'self' https:;          object-src 'none';          base-uri 'self';          form-action 'self' https:;          report-uri /csp-report 1
font-src *.force.com https://player.vimeo.com https://mzmoment-test.app https://www.vevromerike.no 'self' https://stats.g.doubleclick.net https://vevromerike.no https://vev.my.site.com https://e360-tracking-service-cdp1.sfdc-yzvdd4.svc.sfdcfc.net https://vev.my.salesforce.com lightning.force.com https://assets.mapquestapi.com https://www.youtube-nocookie.com *.vevromerike.no https://www.googleoptimize.com https://fonts.gstatic.com/ https://romerikebb.sharepoint.com https://region1.google-analytics.com blob: https://vev.lightning.force.com https://monitoringpublic.solaredge.com *.facebook.com https://d.la1-core1.sfdc-urlt2q.salesforceliveagent.com https://www.telia.no https://c.tiles.mapbox.com https://tileproxy.cloud.mapquest.com https://mzmoment.app https://vev.my.salesforce-scrt.com https://vev--c.visualforce.com https://a.tiles.mapbox.com https://d.la11-core1.sfdc-urlt2q.salesforceliveagent.com *.doubleclick.net https://www.mapquestapi.com https://commonapi-gw.get.no https://d.tiles.mapbox.com https://artikler.get.no https://mapconfig.mqcdn.com https://m83tkyrsgfqwkylcgqzgkzlbgy.c360a.salesforce.com https://partner.icx.telia.no *.vev.lightning.force.com https://www.arrowcommunications.co.uk https://www.googletagmanager.com https://d.la3-c2-fra.salesforceliveagent.com https://www.google-analytics.com https://b.tiles.mapbox.com *.salesforce.com https://vev--c.vf.force.com https://service.force.com https://vev.live-preview.salesforce-experience.com data:; report-to sfdc-csp-ep; report-uri https://vev.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D24000000Zs0w&networkId=0DM08000000sXzv&type=communities 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'wasm-unsafe-eval' https://js-agent.newrelic.com; script-src-attr 'none'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://images.ctfassets.net https://assets.ctfassets.net https://placehold.co https://atlas-common-assets.s3.us-east-2.amazonaws.com https://atlas-cdn.changecompanies.app; font-src 'self' data:; connect-src 'self' data: https://api.changecompanies.app wss://api.changecompanies.app https://auth.changecompanies.app https://bam.nr-data.net https://bam-cell.nr-data.net https://images.ctfassets.net https://assets.ctfassets.net https://downloads.ctfassets.net https://videos.ctfassets.net https://tcc-atlas-video-assets-production.s3.amazonaws.com https://tcc-atlas-video-assets-production.s3.us-east-2.amazonaws.com https://atlas-cdn.changecompanies.app; media-src 'self' blob: https://downloads.ctfassets.net https://videos.ctfassets.net https://tcc-atlas-video-assets-production.s3.amazonaws.com https://tcc-atlas-video-assets-production.s3.us-east-2.amazonaws.com https://atlas-cdn.changecompanies.app; worker-src 'self' blob:; frame-src 'self' https://auth.changecompanies.app; frame-ancestors 'self' https://corecivicsb.unhosting.site https://www.gofurtherdiscovery.com; form-action 'self'; manifest-src 'self'; 1
font-src 'self' data: moz-extension: at.alicdn.com cdn.scite.ai fonts.gstatic.com r2cdn.perplexity.ai; img-src 'self' data: *.aeprague.cz *.cerge-ei.cz *.cuni.cz *.facebook.com *.facebook.net *.google.com *.google.cz *.googleadservices.com *.googletagmanager.com *.gstatic.com *.linkedin.com cerge-ei.cz googleads.g.doubleclick.net i.ytimg.com pagead2.googlesyndication.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' connect.facebook.net googleads.g.doubleclick.net snap.licdn.com www.googletagmanager.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; report-to csp-endpoint; report-uri https://www.cerge-ei.cz/assets/csp-endpoint.php; frame-ancestors 'self' 1
connect-src 'self' https://api.stripe.com https://cdn.dreamdata.cloud https://sentry.io https://analytics.google.com https://www.google-analytics.com https://*.g.doubleclick.net https://bat.bing.com wss://ws.qualified.com https://c.6sc.co https://ipv6.6sc.co https://b.6sc.co; block-all-mixed-content ; child-src https://console.aiven.io https://www.youtube.com https://player.vimeo.com; font-src 'self' data: https:; form-action 'self' https://console.aiven.io https://accounts.google.com https://login.microsoftonline.com https://*.okta.com https://*.pardot.com https://go.aiven.io; frame-src https://js.stripe.com https://hooks.stripe.com https://*.pardot.com https://go.aiven.io https://app.qualified.com; frame-ancestors https://aiven.io; media-src https://js.stripe.com https://hooks.stripe.com; img-src https: blob: data:; script-src 'sha256-UdE0WD2oJmHne2ePVg2RSOzwWhCzfErmS4CVRUSWoCQ=' 'sha256-QwK6WoCnA18jrFISzeU4WlQp8xUbxpGQ7aw7aXa6cGw=' 'sha256-i8WhMJWgfUWpyXAE2zACa6m6xcXzo0PW/fMLWtlsk3w=' 'sha256-mHoHUCWP8ZAG12jlWEqYN81tf7R9V0mzIBi03GUvwNA=' 'sha256-+KfI5ooL7xRc7xdGNCiC98m1B0lPCbixusInjH9Gw9g=' 'sha256-LQBoVe5GEd6JbcwUBkTPeawvqlFhiVFjvKd/9d9Xbso=' 'sha256-UWgeEk/pydrs+7JfDa4Q7XUKuXWmzUW8i8wnPouFa+Q=' 'sha256-vcuqlfTeqT8SdKqn6c+XP06Nh7EWidsbiu1yg2R+8gM=' 'self' https://console.aiven.io https://www.googletagmanager.com https://code.jquery.com https://cdn.cookielaw.org https://cdnjs.cloudflare.com https://js.stripe.com https://js.qualified.com https://j.6sc.co 'unsafe-inline' 'unsafe-eval'; style-src 'self' blob fonts.googleapis.com cdnjs.cloudflare.com optanon.blob.core.windows.net 'unsafe-inline'; base-uri 'self'; object-src 'none'; default-src 'none' 1
default-src 'self' 'unsafe-inline' cdnjs.cloudflare.com cdn.jsdelivr.net *.zdassets.com cdn.brcdn.com *.googleapis.com *.google-analytics.com *.google.com *.newrelic.com bam.nr-data.net *.amazonaws.com *.jquery.com fonts.fontawesome.com fonts.gstatic.com use.fontawesome.com sarnova-dev.s3.amazonaws.com *.akstat.io *.klaviyo.com *.nice-incontact.com *.boundtree.com *.brsrvr.com *.stackadapt.com *.hotjar.io *.hotjar.com *.go-mpulse.net *.googletagmanager.com *.doubleclick.net player.vimeo.com www.youtube.com; script-src 'self' *.klaviyo.com cdn.brcdn.com sarnova.s3.amazonaws.com *.nice-incontact.com *.google-analytics.com *.newrelic.com *.hotjar.com *.go-mpulse.net *.stackadapt.com *.googleadservices.com cdn.acsbapp.com www.youtube.com 'unsafe-inline' *.googletagmanager.com *.acsbapp.com acsbapp.com 'unsafe-eval'; connect-src 'self' cdn.acsbapp.com *.acsbapp.com acsbapp.com tags.srv.stackadapt.com *.klaviyo.com www.google-analytics.com www.google.com www.googleadservices.com *.hotjar.com bam.nr-data.net api-js.datadome.co c.go-mpulse.net analytics.google.com; worker-src 'self' blob: 1
default-src 'self' 'unsafe-inline' data: cdn.jsdelivr.net *.paypal.com *.placetopay.com *.youtube.com *.gstatic.com *.google.com *.google-analytics.com *.googletagmanager.com *.cloudflare.com; report-uri /report-csp-violation; upgrade-insecure-requests 1
default-src 'none'; base-uri 'self'; connect-src 'self' https://region1.google-analytics.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://consentcdn.cookiebot.com https://consent.cookiebot.com https://www.googletagmanager.com; script-src 'nonce-ffpyAR/vL269mD5q1Ia28Q==' https://consentcdn.cookiebot.com https://consent.cookiebot.com https://www.google.com https://chatwidget-prod.web.app https://www.googletagmanager.com https://cdn.reyez.nl https://ajax.googleapis.com; script-src-elem 'nonce-ffpyAR/vL269mD5q1Ia28Q==' https://consentcdn.cookiebot.com https://consent.cookiebot.com https://www.google.com https://chatwidget-prod.web.app https://www.googletagmanager.com https://cdn.reyez.nl https://ajax.googleapis.com; script-src-attr 'unsafe-hashes' 'sha256-47mKTaMaEn1L3m5DAz9muidMqw636xxw7EFAK/YnPdg=' https://ajax.googleapis.com; style-src 'self' 'nonce-ffpyAR/vL269mD5q1Ia28Q==' 'unsafe-inline'; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://chatwidget-css.web.app https://ajax.googleapis.com https://cdn.reyez.nl https://kit.fontawesome.com https://ka-p.fontawesome.com; img-src 'self' data: https://imgsct.cookiebot.com https://www.googletagmanager.com https://*.googleapis.com https://picsum.photos https://*.picsum.photos https://placehold.co; frame-src 'self' https://www.google.com https://consentcdn.cookiebot.com https://www.youtube-nocookie.com https://chatwidget-prod.web.app; font-src 'self' https://ka-p.fontawesome.com; object-src 'none'; manifest-src 'self'; frame-ancestors 'self'; upgrade-insecure-requests; block-all-mixed-content; report-uri https://www.vektis.nl/csp-report 1
script-src 'self' 'report-sample' https://frontend.leon.aero https://leon-frontend.s3.eu-west-1.amazonaws.com https://ajax.googleapis.com/ajax/libs/webfont/1/webfont.js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://cdn.tiny.cloud blob:; img-src 'self' 'report-sample' https://leon-downloads.s3.eu-west-1.amazonaws.com https://leon-downloads.s3-eu-west-1.amazonaws.com https://api.maptiler.com https://frontend.leon.aero https://leon-frontend.s3.eu-west-1.amazonaws.com https://lsotest2.s3.eu-west-1.amazonaws.com https://leonfiles.s3.eu-west-1.amazonaws.com https://leon-passporteye-production.s3.eu-west-1.amazonaws.com https://leon-passporteye-dev.s3.eu-west-1.amazonaws.com https://leon-marketplace-prod.s3.eu-west-1.amazonaws.com https://charts.leon.aero data: blob:; style-src 'self' 'unsafe-inline' https://leon-downloads.s3.eu-west-1.amazonaws.com https://leon-downloads.s3-eu-west-1.amazonaws.com 'report-sample' https://frontend.leon.aero https://leon-frontend.s3.eu-west-1.amazonaws.com https://fonts.googleapis.com https://cdn.tiny.cloud https://lsotest2.s3.eu-west-1.amazonaws.com https://leonfiles.s3.eu-west-1.amazonaws.com; font-src * data: blob: 'unsafe-inline'; frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://leon-passporteye-production.s3.eu-west-1.amazonaws.com https://leon-passporteye-dev.s3.eu-west-1.amazonaws.com blob: https://secure.payu.com https://merch-prod.snd.payu.com https://*.3ds.modirum.com https://www.youtube.com/; object-src 'none'; report-uri https://europe-1.leon.aero/webservices/NewrelicLogger/new_relic_logger.php 1
default-src 'self'; script-src 'self' 'unsafe-inline' www.googletagmanager.com www.google-analytics.com www.googleoptimize.com connect.facebook.net analytics.ahrefs.com d3rse9xjbp8270.cloudfront.net static.everyaction.com static.cloudflareinsights.com static.hotjar.com script.hotjar.com loader.wisepops.com wisepops.net js.verygoodvault.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com d3rse9xjbp8270.cloudfront.net static.everyaction.com; font-src 'self' fonts.gstatic.com d3rse9xjbp8270.cloudfront.net static.everyaction.com; frame-src secure.everyaction.com d3rse9xjbp8270.cloudfront.net www.youtube.com js.verygoodvault.com; img-src 'self' data: https:; connect-src 'self' *.google.com *.google.it *.googleapis.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.google-analytics.com analytics.ahrefs.com activity.wisepops.com wisepops.net www.facebook.com advocator.ngpvan.com fastaction.ngpvan.com secure.everyaction.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://anymind360.com https://*.anymind360.com https://www.googletagmanager.com https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://*.googlesyndication.com https://imasdk.googleapis.com https://c.amazon-adsystem.com https://cdn.browsiprod.com https://player.gliacloud.com https://ced.sascdn.com https://www18.smartadserver.com https://prebid.adnxs.com https://prebid-server.pbstck.com https://ats.rlcdn.com https://cdn.pubcid.org https://ads.pubmatic.com https://launchpad.privacymanager.io https://p.adlooxtracking.com https://cdn.jsdelivr.net https://storage.googleapis.com https://www.youtube.com https://s.ytimg.com https://apis.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; media-src 'self' blob: https:; connect-src 'self' https: wss:; frame-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://www.paypal.com https://www.sandbox.paypal.com; object-src 'none'; upgrade-insecure-requests 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self' https://royal-osteoporosis-society.uksouth01.umbraco.io https://dev-royal-osteoporosis-society.uksouth01.umbraco.io https://stage-royal-osteoporosis-society.uksouth01.umbraco.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.gstatic.com https://*.googleadservices.com https://*.doubleclick.net https://www.youtube.com https://static.ads-twitter.com https://bat.bing.com https://api.mapbox.com https://*.livechatinc.com data: https://connect.facebook.net https://consent.cookiebot.com https://consent.cookiebot.eu https://consentcdn.cookiebot.eu https://js.stripe.com https://r1.dotdigital-pages.com https://script.hotjar.com https://static.hotjar.com https://bat.bing.net https://www.google.be https://www.google.ca https://www.google.ch https://www.google.co.il https://www.google.co.in https://www.google.co.nz https://www.google.co.th https://www.google.co.uk https://www.google.co.ve https://www.google.co.za https://www.google.co.zw https://www.google.com.ar https://www.google.com.au https://www.google.com.br https://www.google.com.cy https://www.google.com.mt https://www.google.com.mx https://www.google.com.my https://www.google.com.ph https://www.google.com.pk https://www.google.com.sg https://www.google.com.tw https://www.google.de https://www.google.dk https://www.google.es https://www.google.fr https://www.google.gr https://www.google.ie https://www.google.im https://www.google.it https://www.google.je https://www.google.nl https://www.google.ro https://www.google.rs https://www.google.se; style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net https://api.mapbox.com https://*.livechatinc.com https://fonts.googleapis.com https://www.gstatic.com; font-src 'self' data: https://use.typekit.net https://p.typekit.net https://*.livechatinc.com https://fonts.gstatic.com https://script.hotjar.com https://cdn.scite.ai; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' blob: https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.google.com https://*.doubleclick.net https://analytics.twitter.com https://bat.bing.com https://bat.bing.net https://api.mapbox.com https://events.mapbox.com https://*.tiles.mapbox.com https://use.typekit.net https://p.typekit.net https://*.livechatinc.com wss://*.livechatinc.com https://*.ingest.us.sentry.io https://consentcdn.cookiebot.eu https://in.hotjar.com https://*.hotjar.io wss://ws.hotjar.com https://google.com https://www.google.be https://www.google.ca https://www.google.ch https://www.google.co.il https://www.google.co.in https://www.google.co.nz https://www.google.co.th https://www.google.co.uk https://www.google.co.ve https://www.google.co.za https://www.google.co.zw https://www.google.com.ar https://www.google.com.au https://www.google.com.br https://www.google.com.cy https://www.google.com.mt https://www.google.com.mx https://www.google.com.my https://www.google.com.ph https://www.google.com.pk https://www.google.com.sg https://www.google.com.tw https://www.google.de https://www.google.dk https://www.google.es https://www.google.fr https://www.google.gr https://www.google.ie https://www.google.im https://www.google.it https://www.google.je https://www.google.nl https://www.google.ro https://www.google.rs https://www.google.se https://www.googleadservices.com https://pagead2.googlesyndication.com https://t.co https://www.google.lv https://translate.googleapis.com https://translate-pa.googleapis.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://*.googletagmanager.com https://*.doubleclick.net https://bat.bing.com https://*.ads-twitter.com https://*.livechatinc.com https://consentcdn.cookiebot.eu https://js.stripe.com https://r1.dotdigital-pages.com https://consentcdn.cookiebot.com https://support.google.com https://toolytics.pa.clients6.google.com https://app.netlify.com; worker-src 'self' blob:; manifest-src 'self' https://theros.org.uk; form-action 'self'; upgrade-insecure-requests; report-uri /_csp-report 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://connect.facebook.net https://www.gstatic.com https://www.google.com https://maps.google.com https://maps.googleapis.com https://mapa.apaczka.pl https://ssl.ceneo.pl https://cdn.consentmanager.net https://*.consentmanager.net https://googleads.g.doubleclick.net https://www.googleadservices.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.consentmanager.net https://mapa.apaczka.pl; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://mapa.apaczka.pl https://www.facebook.com https://www.instagram.com https://ssl.ceneo.pl; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://*.doubleclick.net https://connect.facebook.net https://www.facebook.com https://maps.googleapis.com https://*.apaczka.pl https://ssl.ceneo.pl https://cdn.consentmanager.net https://*.consentmanager.net https://www.google.com https://pagead2.googlesyndication.com https://www.googleadservices.com 1
font-src *.googleapis.com *.gstatic.com data: https://use.fontawesome.com https://fonts.gstatic.com 'self' data: *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com *.yotpo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://static.addtoany.com/ www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * google.com gstatic.com *.twitter.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de static-eu.payments-amazon.com *.trackedlink.net https://scontent-bom1-1.cdninstagram.com/ https://scontent-bom1-2.cdninstagram.com https://scontent-bom1-2.xx.fbcdn.net https://scontent-bom1-1.xx.fbcdn.net magefan.com cm.magefan.com *.disqus.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.google.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://static.addtoany.com/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.disqus.com https://player.vimeo.com https://www.youtube.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com google.com gstatic.com *.cloudflare.com *.google.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.fontawesome.com https://fonts.googleapis.com http://fonts.googleapis.com *.googleapis.com unsafe-inline assets.braintreegateway.com *.cloudflare.com *.google.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://scontent-bom1-2.cdninstagram.com/ https://scontent-bom1-1.cdninstagram.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://stats.addtoany.com/menu *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io https://olegnax.com https://api.instagram.com https://graph.instagram.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com gstatic.com *.cloudflare.com *.twitter.com *.twimg.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://cdn.trackdesk.com https://cdn.privacy-mgmt.com https://www.nextinsure.com https://utt.impactcdn.com https://collect.phalanxapi.com https://connect.facebook.net https://cdn.intergient.com https://cdn.intergi.com https://js.stripe.com; connect-src 'self' https://*.pointsyeah.com https://*.amazonaws.com https://*.amazoncognito.com https://us.i.posthog.com https://us-assets.i.posthog.com https://cdn.privacy-mgmt.com https://api.mapbox.com https://events.mapbox.com https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://api.stripe.com; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; frame-src 'self' https:; worker-src 'self' blob:; 1
object-src 'none';base-uri 'self';script-src 'nonce-L0ADdR3VVSt4Rfqw6a9BKA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdn.ckeditor.com https://code.jquery.com https://cdnjs.cloudflare.com https://challenges.cloudflare.com https://static.cloudflareinsights.com https://unpkg.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://challenges.cloudflare.com; font-src 'self' data: https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; img-src 'self' data: blob: https:; connect-src 'self' https:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://challenges.cloudflare.com; object-src 'none'; base-uri 'self'; form-action 'self' 1
script-src 'nonce-nqB4/k82HNy+01Ur35HUiA==' 'strict-dynamic' 'unsafe-eval' 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; report-uri /_/csp-report 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com fonts.googleapis.com *.googleapis.com data: https://fonts.gstatic.com *.klarnacdn.net https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.youtube-nocookie.com www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.googletagmanager.com *.doubleclick.net *.cdn-apple.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.usercentrics.eu *.cdn-apple.com *.google.com *.google.de *.klarna.com *.klarnaevt.com *.klarnacdn.net https://api.mapbox.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.usercentrics.eu *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com https://fonts.googleapis.com *.klarnacdn.net assets.braintreegateway.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com vimeo.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.usercentrics.eu *.cdn-apple.com *.google.de *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com autocomplete2.postdirekt.de *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.storepoint.co https://widget.storepoint.co *.googleapis.com *.google.co.uk https://square-fonts-production-f.squarecdn.com/ https://d1g145x70srn7h.cloudfront.net/ https://cash-f.squarecdn.com/ https://fonts.gstatic.com/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.googleapis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com https://pci-connect.squareup.com https://connect.squareup.com https://pci-connect.squareupsandbox.com https://connect.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net data: www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.google.co.in *.storepoint.co https://widget.storepoint.co *.googleapis.com *.google.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.xtento.com cdn.xtento.com https://www.gstatic.com/ https://sandbox.api.cash.app/ https://site-assets.afterpay.com/ https://sandbox.web.squarecdn.com/ https://api.cash.app/ https://web.squarecdn.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://franklin-assets.s3.amazonaws.com/ https://static.sandbox.afterpay.com/ https://static.afterpay.com/ https://static.sandbox.afterpay.com/logo/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.zdassets.com *.cloudflare.com *.amazonaws.com *.mouseflow.com *.smooch.io *.googleapis.com www.gstatic.com www.google.com static.klaviyo.com static-forms.klaviyo.com fast.a.klaviyo.com static-tracking.klaviyo.com a.klaviyo.com telemetrics.klaviyo.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com www.xtento.com cdn.xtento.com js.squareup.com js.afterpay.com nd.squarecdn.com js.squareupsandbox.com sandbox.web.squarecdn.com web.squarecdn.com portal.sandbox.afterpay.com portal.afterpay.com cdn.plaid.com sandbox.kit.cash.app kit.cash.app *.storepoint.co *.gdoubleclick.net *.google.co.uk https://widget.storepoint.co https://hosted.mastersoftgroup.com/harmony/rest/au/generateID https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ songbirdstag.cardinalcommerce.com https://js-sandbox.squarecdn.com https://js.squareup.com https://js.afterpay.com/ https://nd.squarecdn.com https://js.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://portal.sandbox.afterpay.com/ https://portal.afterpay.com/ https://cdn.plaid.com/ https://sandbox.kit.cash.app/ https://kit.cash.app/ https://js-sandbox.squarecdn.com/ https://js.squarecdn.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.typekit.net *.cash.app *.squarecdn.com *.storepoint.co https://widget.storepoint.co *.googleapis.com *.google.co.uk https://static.klaviyo.com assets.braintreegateway.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://fonts.googleapis.com/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.googlesyndication.com *.zdassets.com *.zendesk.com wss://api.smooch.io/faye *.storepoint.co https://widget.storepoint.co *.googleapis.com *.google.co.uk https://hosted.mastersoftgroup.com/harmony/rest/au/generateID https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://pci-connect.squareup.com https://pci-connect.squareupsandbox.com https://api.amplitude.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://o160250.ingest.sentry.io/ https://api.lab.amplitude.com/sdk/vardata https://sandbox.plaid.com/ https://production.plaid.com/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-BIjnAfP-p0vql89S_XRt2w' cdn.jsdelivr.net; style-src-elem 'self' 'nonce-BIjnAfP-p0vql89S_XRt2w' cdn.jsdelivr.net; style-src-attr 'unsafe-inline'; font-src 'self' cdn.jsdelivr.net; img-src 'self' data:; frame-ancestors 'self'; form-action 'self' 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com *.onetrust.com *.lively.li *.vyumi.ai *.webengage.com *.webengage.co *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://www.facebook.com/tr/ *.webengage.com *.webengage.co 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.certcapture.com *.freshchat.com https://www.facebook.com *.trustpilot.com https://caratlane.demdex.net *.criteo.com/ *.rudderstack.com *.rudderlabs.com *.webengage.com *.webengage.co *.lively.li *.vyumi.ai wss://253ul4moik.execute-api.ap-south-1.amazonaws.com *.execute-api.ap-south-1.amazonaws.com *.webflow.com *.gumlet.io *.zego.im *.coolzcloud.com *.pinterest.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com speedsize.com *.speedsize.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.certcapture.com *.caratlane.us *.caratlane.com *.webengage.com *.webengage.co *.google.co.in *.google.com *.bing.com *.adsrvr.org *.pinterest.com wss://253ul4moik.execute-api.ap-south-1.amazonaws.com *.cloudfront.net *.aralego.net *.bidswitch.net *.criteo.com *.media.net *.rubiconproject.com *.smartadserver.com *.taboola.com *.teads.tv *.3lift.com *.yahoo.net *.socdm.com *.casalemedia.com *.dable.io *.adingo.jp *.adgrx.com *.adnxs.com *.yieldmo.com *.clmbtech.com *.smaato.net *.pubmatic.com *.outbrain.com *.rlcdn.com *.360yield.com *.doubleclick.net *.stickyadstv.com *.aralego.com *.lively.li *.vyumi.ai *.execute-api.ap-south-1.amazonaws.com *.webflow.com *.gumlet.io *.s3.ap-south-1.amazonaws.com *.adform.net *.zego.im *.coolzcloud.com *.klarnacdn.net *.klarna.com *.steelhousemedia.com *.1rx.io *.clarity.ms *.mediawallahscript.com *.omnitagjs.com *.dmxleo.com *.liadm.com *.mediavine.com *.postrelease.com *.revcontent.com *.sharethrough.com *.tapad.com *.tremorhub.com *.bluekai.com *.agkn.com *.tpmn.co.kr *.emxdgt.com *.unrulymedia.com *.krxd.net *.stackadapt.com *.cookielaw.org *.crwdcntrl.net *.googlesyndication.com *.facebook.com speedsize.com *.speedsize.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.certcapture.com *.freshchat.com *.gstatic.com *.facebook.com *.trustpilot.com *.criteo.com *.criteo.net https://bam.nr-data.net https://maps.googleapis.com https://maps.googleapis.com/maps-api-v3/api/js/46/8/intl/en_gb/common.js https://maps.googleapis.com/maps-api-v3/api/js/46/8/intl/en_gb/util.js https://www.google.com/recaptcha/api2/webworker.js *.newrelic.com *.caratlane.com *.rudderstack.com *.rudderlabs.com *.webengage.com *.webengage.co *.mountain.com *.bing.com *.clarity.ms *.lively.li *.vyumi.ai video-call.vyumi.ai *.pinimg.com *.stackadapt.com https://qvdt3feo.com *.klarnaservices.com *.klarna.com wss://253ul4moik.execute-api.ap-south-1.amazonaws.com *.execute-api.ap-south-1.amazonaws.com *.webflow.com *.gumlet.io *.zego.im *.coolzcloud.com *.attn.tv *.hotjar.com https://static.hotjar.com http://ipinfo.io *.googleapis.com *.pinterest.com *.onetrust.com *.cookielaw.org *.googletagmanager.com *.facebook.net *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com speedsize.com *.speedsize.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com *.fontawesome.com *.freshchat.com *.webengage.com *.webengage.co *.stackadapt.com *.lively.li *.vyumi.ai *.klarnacdn.net wss://253ul4moik.execute-api.ap-south-1.amazonaws.com *.execute-api.ap-south-1.amazonaws.com *.webflow.com *.gumlet.io *.zego.im *.coolzcloud.com *.amazonaws.com *.onetrust.com *.google.com speedsize.com *.speedsize.com *.trustpilot.com 'self' 'unsafe-inline'; object-src *.caratlane.us 'self' 'unsafe-inline'; media-src *.adobe.com *.caratlane.us *.lively.li *.vyumi.ai wss://253ul4moik.execute-api.ap-south-1.amazonaws.com *.execute-api.ap-south-1.amazonaws.com *.webflow.com *.gumlet.io *.zego.im *.coolzcloud.com speedsize.com *.speedsize.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com *.freshchat.com *.doubleclick.net https://www.facebook.com https://bam.nr-data.net https://sslwidget.criteo.com/event https://widget.us.criteo.com/event *.caratlane.com *.rudderstack.com *.rudderlabs.com *.webengage.com *.webengage.co *.caratlane.us *.stackadapt.com *.clarity.ms *.googleapis.com *.criteo.com *.mountain.com *.pinterest.com *.facebook.net wss://253ul4moik.execute-api.ap-south-1.amazonaws.com *.klarnaevt.com *.klarna.com *.lively.li *.vyumi.ai video-call.vyumi.ai *.execute-api.ap-south-1.amazonaws.com *.webflow.com *.gumlet.io *.coolzcloud.com wss://accesshub-wss.coolzcloud.com *.zego.im wss://accesshub-wss.zego.im *.zegocloud.com wss://accesshub-wss.zegocloud.com wss://weblogger1793642705-api.coolzcloud.com *.amazonaws.com *.us-global-uscl.s3.us-east-2.amazonaws.com *.us-global-uscl.s3.amazonaws.com *.attn.tv *.attentivemobile.com *.hotjar.com *.hotjar.io wss://ws.hotjar.com *.klarnaservices.com *.trustpilot.com *.onetrust.com cdn.cookielaw.org *.googlesyndication.com *.stripe.com klarna.com *.klarnacdn.net *.device.stripe-terminal-local-reader.net:4443/protojsonservice/JackRabbitService speedsize.com *.speedsize.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src speedsize.com *.speedsize.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src sdiapi.com sdiapi.net; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com js.klevu.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com sdiapi.com sdiapi.net *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com sdiapi.com sdiapi.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * web.notcutts.co.uk consentcdn.cookiebot.com js.stripe.com m.stripe.network *.googletagmanager.com *.doubleclick.net *.typeform.com www.xtento.com *.facebook.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com www.apptrian.com *.stripe.com *.stripe.network *.google.com ebizmarts-website.s3.amazonaws.com brippo.s3.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.dycdn.net *.klarna.com *.klarnaevt.com *.klarnacdn.net *.klevu.com *.ksearchnet.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com js.klevu.com www.gstatic.com imgsct.cookiebot.com www.facebook.com 'self' data: *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net www.xtento.com cdn.xtento.com *.clickdimensions.com *.facebook.net data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com sdiapi.com sdiapi.net *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.dycdn.net dn1i8v75r669j.cloudfront.net dkpklk99llpj0.cloudfront.net ds9p2a60lh6fp.cloudfront.net d1y9qtn9cuc3xw.cloudfront.net d81mfvml8p5ml.cloudfront.net *.freshrelevance.com *.dotdigital.com x.klarnacdn.net *.klarnaservices.com js.klevu.com *.ksearchnet.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com js.stripe.com ls.dycdn.net consent.cookiebot.com analytics-eu.clickdimensions.com consentcdn.cookiebot.com web.notcutts.co.uk cdn-eu.clickdimensions.com www.google.com www.gstatic.com connect.facebook.net m.stripe.network *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com www.xtento.com cdn.xtento.com *.clickdimensions.com *.google-analytics.com *.jsdelivr.net *.klevu.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.dycdn.net *.klarnacdn.net *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com cdn.jsdelivr.net js.klevu.com www.gstatic.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com *.googleapis.com *.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline';, connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com www.apptrian.com sdiapi.com sdiapi.net api.addressy.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com fonts.googleapis.com fonts.gstatic.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.dycdn.net *.freshrelevance.com wss://*.freshrelevance.com wss://*.dycdn.net dn1i8v75r669j.cloudfront.net *.dotdigital.com x.klarnacdn.net *.klarnaservices.com *.klevu.com *.ksearchnet.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com c12.dycdn.net consentcdn.cookiebot.com www.google-analytics.com m.stripe.com region1.google-analytics.com ws.hotjar.com metrics.hotjar.io wss://am.freshrelevance.com am.freshrelevance.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com *.facebook.com *.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; base-uri *.ksearchnet.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; report-uri https://a38f0e6f-db4f-4be7-b6ed-0fa8d1ee7830.sansec.watch/; report-to report-endpoint; 1
script-src 'self' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://static.addtoany.com https://unpkg.com https://www.google.com 'unsafe-inline' https://citia.matomo.cloud/; script-src-attr 'self'; script-src-elem 'self' 'unsafe-inline' https://citia.matomo.cloud https://static.axept.io https://www.youtube.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://static.addtoany.com https://unpkg.com https://www.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src-attr 'self' 'unsafe-inline'; frame-ancestors 'self' 1
default-src 'self'; base-uri 'self'; form-action 'self' https://portal.hostingturkiye.com.tr https://hostingturkiye.com.tr; frame-ancestors 'self'; object-src 'none'; img-src 'self' data: https:; font-src 'self' data:; style-src 'self' 'unsafe-inline' https://embed.tawk.to; script-src 'self' 'unsafe-inline' https://embed.tawk.to https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com; connect-src 'self' https://embed.tawk.to https://*.tawk.to wss://*.tawk.to https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com; frame-src https://embed.tawk.to https://www.googletagmanager.com 1
upgrade-insecure-requests ; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com *.fontawesome.com *.mountain.com *.cloudfront.net *.reviews.io *.reviews.co.uk wordpress.mosherco.biz data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com https://seo.mageplaza.com *.google.com *.mountain.com *.reviews.io *.reviews.co.uk *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * wordpress.mosherco.biz 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com wordpress.mosherco.biz 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com sandbox.secure.checkout.visa.com secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com *.brsrvr.com cdn.brcdn.com bsapi-w.brsrvr.com *.powerreviews.com *.typekit.net *.calendly.com js.stripe.com www.recaptcha.net accounts.google.com *.datadome.co nbf2021.my.site.com *.my.salesforce-scrt.com *.reviews.io *.reviews.co.uk *.visualwebsiteoptimizer.com app.vwo.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * wordpress.mosherco.biz 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com *.certcapture.com *.brsrvr.com *.bloomreach.cloud www.gstatic.com sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com https://www.magezon.com *.adswizz.com *.tapad.com 3.21.189.22 *.wordpress.mosherco.biz *.scene7.com *.mountain.com *.nationalbusinessfurniture.com *.bbb.org *.google.hu *.igodigital.com *.powerreviews.com *.calendly.com *.facebook.com pagead2.googlesyndication.com px.ads.linkedin.com bat.bing.com verifi.pdscrb.com *.datadome.co 172.31.16.67 *.cloudfront.net *.reviews.io *.reviews.co.uk *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com wordpress.mosherco.biz data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com *.gstatic.com *.certcapture.com cdn.brcdn.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.kaptcha.com *.goadopt.io *.dxpapi.com *.brsrvr.com bsapi-w.brsrvr.com *.powerreviews.com *.calendly.com pixel.byspotify.com bzrcdn.openai.com snap.licdn.com monitor.fraudblocker.com rbwmv81d.nationalbusinessfurniture.com d34r8q7sht0t9k.cloudfront.net s.pinimg.com bat.bing.com *.adobedtm.com *.cardinalcommerce.com *.paypal.com *.paypalobjects.com js.stripe.com *.google-analytics.com *.googletagmanager.com www.recaptcha.net accounts.google.com script.google.com script.googleusercontent.com *.clarity.ms cdn.segment.io *.pendo.io *.pcapredict.com *.yottaa.com *.brcdn.com cdn.ywxi.net *.hlx.page *.igodigital.com *.my.salesforce-scrt.com nbf2021.my.site.com *.invocacdn.com pnapi.invoca.net *.mountain.com connect.facebook.net cdn.sprig.com js.appboycdn.com unsafe-inline data: *.datadome.co *.wordpress.mosherco.biz s7d9.scene7.com *.reviews.io *.reviews.co.uk *.visualwebsiteoptimizer.com app.vwo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com wordpress.mosherco.biz https://js.datadome.co https://cdn.brcdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.fontawesome.com *.typekit.net *.powerreviews.com *.mountain.com *.calendly.com unsafe-inline *.wordpress.mosherco.biz *.cloudfront.net *.reviews.io *.reviews.co.uk *.visualwebsiteoptimizer.com app.vwo.com assets.braintreegateway.com wordpress.mosherco.biz 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.scene7.com wordpress.mosherco.biz 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.certcapture.com *.dxpapi.com thm.visa.com *.kaptcha.com api.addressy.com *.goadopt.io *.brsrvr.com cdn.brcdn.com *.bsapi-w.brsrvr.com *.powerreviews.com *.calendly.com *.typekit.net pixels.spotify.com bzr.openai.com *.mountain.com *.clarity.ms *.yottaa.net *.openstreetmap.org cdn.segment.io *.pendo.io *.facebook.net script.google.com script.googleusercontent.com *.doubleclick.net pagead2.googlesyndication.com px.ads.linkedin.com ct.pinterest.com www.facebook.com pnapi.invoca.net bat.bing.com monitor.fraudblocker.com ipv4.pdscrb.com verifi.pdscrb.com d34r8q7sht0t9k.cloudfront.net 18.210.229.244 *.cloudfront.net *.datadome.co api-js.datadome.co *.reviews.io *.reviews.co.uk *.visualwebsiteoptimizer.com app.vwo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com wordpress.mosherco.biz 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com wordpress.mosherco.biz http: https: blob: 'self' 'unsafe-inline'; default-src *.powerreviews.com *.scene7.com *.mountain.com *.invocacdn.com *.pcapredict.com *.yottaa.com *.hlx.page *.igodigital.com *.google.com *.calendly.com *.datadome.co *.visualwebsiteoptimizer.com app.vwo.com wordpress.mosherco.biz 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
connect-src https://bat.bing.com https://bat.bing.net https://snap.licdn.com https://px.ads.linkedin.com https://tags.srv.stackadapt.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://*.analytics.google.com https://www.google-analytics.com https://*.google-analytics.com https://www.google.com https://via.intercom.io https://api.intercom.io https://api.au.intercom.io https://api.eu.intercom.io https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io https://api-ping.intercom.io wss://primary-realtime.intercom-messenger.com https://nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-b.intercom.io https://nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io https://nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io https://internet-up-realtime.intercom-messenger.com wss://ws-up-realtime.intercom-messenger.com wss://a-realtime.intercom-messenger.com wss://b-realtime.intercom-messenger.com wss://c-realtime.intercom-messenger.com wss://d-realtime.intercom-messenger.com wss://e-realtime.intercom-messenger.com https://uploads.intercomcdn.com https://uploads.intercomcdn.eu https://uploads.au.intercomcdn.com https://uploads.eu.intercomcdn.com https://uploads.intercomusercontent.com 'self' https://api.ipstack.com https://geoip-js.com https://*.launchdarkly.com https://*.aptrinsic.com https://sentry.pub.jamf.build https://sentry.jamf.com https://app.jamfnow.com https://api.services.jamfnow.com https://services-api.services.jamfnow.com https://jamfsw.okta.com/.well-known/openid-configuration https://jamfsw.okta.com/oauth2/v1/token; img-src https://*.ads.linkedin.com https://*.bing.com https://bat.bing.net https://tags.srv.stackadapt.com https://*.google-analytics.com https://ssl.google-analytics.com https://www.googletagmanager.com https://www.google.com blob: data: https://js.intercomcdn.com https://static.intercomassets.com https://downloads.intercomcdn.com https://downloads.intercomcdn.eu https://downloads.au.intercomcdn.com https://uploads.intercomusercontent.com https://gifs.intercomcdn.com https://video-messages.intercomcdn.com https://messenger-apps.intercom.io https://messenger-apps.eu.intercom.io https://messenger-apps.au.intercom.io https://*.intercom-attachments-1.com https://*.intercom-attachments.eu https://*.au.intercom-attachments.com https://*.intercom-attachments-2.com https://*.intercom-attachments-3.com https://*.intercom-attachments-4.com https://*.intercom-attachments-5.com https://*.intercom-attachments-6.com https://*.intercom-attachments-7.com https://*.intercom-attachments-8.com https://*.intercom-attachments-9.com https://static.intercomassets.eu https://static.au.intercomassets.com https://appinstallers-packages.services.jamfcloud.com 'self' https://*.aptrinsic.com https://storage.googleapis.com https://*.jamfnow.com https://*.services.jamfnow.com https://jamfnow-static-content.s3.amazonaws.com https://jamfnow-customapps.s3.amazonaws.com; frame-src https://www.googletagmanager.com; script-src https://www.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com 'self' https://geoip-js.com/js/apis/geoip2/v2.1/geoip2.js https://*.aptrinsic.com https://www.youtube.com; script-src-elem https://www.googletagmanager.com https://bat.bing.com https://snap.licdn.com https://tags.srv.stackadapt.com 'sha256-Zp4qhASzVSZkl7fWN6NpSE/tfWi9z0+FNrvlfR6lB4E=' https://widget.intercom.io https://js.intercomcdn.com https://*.aptrinsic.com https://*.jamfnow.com 'sha256-QuF44RN0R/Z+glsCBlozOv2ZOcUCzQmcx0jIpBspKXQ='; style-src-elem https://tags.srv.stackadapt.com https://*.aptrinsic.com https://web-sdk.aptrinsic.com https://fonts.googleapis.com 'unsafe-inline' https://*.jamfnow.com; child-src https://intercom-sheets.com https://www.intercom-reporting.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net; font-src https://js.intercomcdn.com https://fonts.intercomcdn.com 'self' https://fonts.gstatic.com data:; form-action https://intercom.help https://messenger-apps.intercom.io https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io; media-src https://js.intercomcdn.com https://downloads.intercomcdn.com https://downloads.intercomcdn.eu https://downloads.au.intercomcdn.com https://app.jamfnow.com; style-src 'unsafe-inline' 'self' https://*.aptrinsic.com https://fonts.googleapis.com; base-uri 'self'; default-src 'self' https:; worker-src https://*.jamfnow.com blob:; report-uri https://sentry.jamf.com/api/11/security/?sentry_key=85194cbf03b7401ade1ab2a23567ae71&sentry_environment=production; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com https://cdn.jsdelivr.net *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.googleapis.com *.addtoany.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com http://dpm.demdex.net *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://widgets.trustedshops.com www.vedder-vedder.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com www.vedder-vedder.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com *.cookiebot.com *.weltpixel.com *.doubleclick.net *.pinterest.com *.facebook.com www.googletagmanager.com sst.vedder-vedder.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com https://www.mollie.com www.magmodules.eu *.squeezely.tech https://widgets.trustedshops.com https://widgets-qa.trustedshops.com www.vedder-vedder.com dev.visualwebsiteoptimizer.com interface.mailcampaigns.nl *.cloudfront.net www.google.nl www.facebook.com integrations.etrusted.com robincontentdesktop.blob.core.windows.net imgsct.cookiebot.com t.squeezely.tech api.taggrs.io data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.mollie.com https://widget-acc.paazl.com https://widget.paazl.com https://api-acc.paazl.com https://api.paazl.com squeezely.tech www.squeezely.tech *.squeezely.tech https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com widget.paazl.com connect.facebook.net integrations.etrusted.com vedderveddernl.api.useinsider.com dev.visualwebsiteoptimizer.com interface.mailcampaigns.nl consentcdn.cookiebot.com az416426.vo.msecnd.net selfservice.robinhq.com www.vedder-vedder.com ct.pinterest.com js-agent.newrelic.com snapppt.com app.addsauce.com s.pinimg.com robincontentdesktop.blob.core.windows.net static.hotjar.com www.gstatic.com script.hotjar.com widgets.trustedshops.com consent.cookiebot.com www.google.com analytics.tiktok.com admin.revenuehunt.com *.cloudfront.net *.webpages.one https://www.googletagmanager.com tagmanager.google.com sst.vedder-vedder.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://widget-acc.paazl.com https://widget.paazl.com https://api-acc.paazl.com https://api.paazl.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com widget.paazl.com www.gstatic.com www.vedder-vedder.com interface.mailcampaigns.nl integrations.etrusted.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.vedder-vedder.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://widget-acc.paazl.com https://widget.paazl.com https://api-acc.paazl.com https://api.paazl.com squeezely.tech *.squeezely.tech *.trustedshops.com *.etrusted.com https://integrations.etrusted.site api.paazl.com *.tiktok.com *.googlesyndication.com *.visualstudio.com *.google-analytics.com https://www.google-analytics.com *.doubleclick.net *.pinterest.com *.cookiebot.com *.facebook.com interface.mailcampaigns.nl sst.vedder-vedder.com widget.paazl.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src td.doubleclick.net region1.google-analytics.com googleads.g.doubleclick.net bam.eu01.nr-data.net google.com ct.pinterest.com region1.analytics.google.com consentcdn.cookiebot.com api.paazl.com www.google.com dc.services.visualstudio.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; connect-src 'self' https://*.hotjar.com:* https://aggregator.service.usercentrics.eu https://analytics.tiktok.com https://api.omappapi.com https://api.trustpilot.com https://api.usercentrics.eu https://bat.bing.com https://ct.pinterest.com https://graphql.usercentrics.eu https://pagead2.googlesyndication.com https://services.ottonova.de https://ssl.google-analytics.com https://sst.ottonova.de https://stats.g.doubleclick.net https://*.hotjar.io https://trc-events.taboola.com https://www.google-analytics.com wss://*.hotjar.com; font-src 'self' data: https://fonts.gstatic.com https://script.hotjar.com; frame-src 'self' https://gum.criteo.com https://hal9000.redintelligence.net https://static.criteo.net https://tr.snapchat.com https://www.awin1.com https://vars.hotjar.com https://www.youtube.com; img-src 'self' data: https:; script-src 'self' 'nonce-aba68e3b9cac69454ff9f30a251de9cb' 'unsafe-eval' 'report-sample' 'strict-dynamic'; style-src 'self' 'unsafe-inline' 'report-sample' https://fonts.googleapis.com; base-uri 'none'; report-uri https://ottonova.report-uri.com/r/d/csp/reportOnly 1
object-src 'none';base-uri 'self';script-src 'nonce-yUCIs8LqkTMF6h-Q8XYSpw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; img-src 'self' data: blob: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https://challenges.cloudflare.com https://www.google.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com *.hotjar.io wss://*.niceincontact.com analytics.google.com *.bing.com *.cookiebot.com *.doubleclick.net ekr.zdassets.com *.facebook.com *.facebook.net *.feefo.com *.google.com region1.analytics.google.com fonts.googleapis.com *.newrelic.com *.nr-data.net *.pcapredict.com *.pinimg.com *.pinterest.com *.postcodeanywhere.co.uk *.salesfire.co.uk browser-update.org *.browser-update.org *.smartmetrics.co.uk stats.g.doubleclick.net tritonshowerscx.zendesk.com *.trustpilot.com www.clarity.ms *.youtube.com *.zdassets.com ekr.zendesk.com *.zopim.com widget-mediator.zopim.com *.tritonshowers.co.uk *.adobedtm.com *.aptrinsic.com *.demdex.net porjs.com wss://*.zopim.com *.niceincontact.com *.hub-box.com *.hotjar.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com *.hotjar.io wss://*.niceincontact.com analytics.google.com *.bing.com *.cookiebot.com *.doubleclick.net ekr.zdassets.com *.facebook.com *.facebook.net *.feefo.com *.google.com region1.analytics.google.com fonts.gstatic.com fonts.googleapis.com *.gstatic.com *.newrelic.com *.nr-data.net *.pcapredict.com *.pinimg.com *.pinterest.com *.postcodeanywhere.co.uk *.salesfire.co.uk browser-update.org *.browser-update.org *.smartmetrics.co.uk stats.g.doubleclick.net tritonshowerscx.zendesk.com *.trustpilot.com www.clarity.ms *.youtube.com *.zdassets.com ekr.zendesk.com *.zopim.com widget-mediator.zopim.com *.tritonshowers.co.uk *.adobedtm.com *.aptrinsic.com *.demdex.net porjs.com wss://*.zopim.com *.hub-box.com *.stripe.com *.stripe.network *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.hotjar.io wss://*.niceincontact.com analytics.google.com *.bing.com *.cookiebot.com *.doubleclick.net ekr.zdassets.com *.facebook.com *.facebook.net *.feefo.com *.google.com region1.analytics.google.com fonts.gstatic.com fonts.googleapis.com *.gstatic.com *.newrelic.com *.nr-data.net *.pcapredict.com *.pinimg.com *.pinterest.com *.postcodeanywhere.co.uk *.salesfire.co.uk browser-update.org *.browser-update.org *.smartmetrics.co.uk stats.g.doubleclick.net tritonshowerscx.zendesk.com *.trustpilot.com www.clarity.ms *.youtube.com *.zdassets.com ekr.zendesk.com *.zopim.com widget-mediator.zopim.com *.tritonshowers.co.uk *.adobedtm.com *.aptrinsic.com *.demdex.net porjs.com wss://*.zopim.com *.hub-box.com *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com *.hotjar.io wss://*.niceincontact.com analytics.google.com *.bing.com *.cookiebot.com *.doubleclick.net ekr.zdassets.com *.facebook.com *.facebook.net *.feefo.com *.google.com/ region1.analytics.google.com fonts.gstatic.com fonts.googleapis.com *.gstatic.com *.newrelic.com *.nr-data.net *.pcapredict.com *.pinimg.com *.pinterest.com *.postcodeanywhere.co.uk *.salesfire.co.uk browser-update.org *.browser-update.org *.smartmetrics.co.uk stats.g.doubleclick.net tritonshowerscx.zendesk.com *.trustpilot.com www.clarity.ms *.zdassets.com ekr.zendesk.com *.zopim.com widget-mediator.zopim.com *.tritonshowers.co.uk *.adobedtm.com *.aptrinsic.com *.demdex.net porjs.com wss://*.zopim.com *.hub-box.com *.niceincontact.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.com *.stripe.network klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com https://www.magezon.com magefan.com cm.magefan.com *.hotjar.io wss://*.niceincontact.com www.google.co.in analytics.google.com *.bing.com *.cookiebot.com *.doubleclick.net ekr.zdassets.com *.facebook.com *.facebook.net *.feefo.com *.google.com *.google.co.uk region1.analytics.google.com fonts.gstatic.com fonts.googleapis.com *.newrelic.com *.nr-data.net *.pcapredict.com *.pinimg.com *.pinterest.com *.postcodeanywhere.co.uk *.salesfire.co.uk browser-update.org *.browser-update.org *.smartmetrics.co.uk stats.g.doubleclick.net tritonshowerscx.zendesk.com *.trustpilot.com www.clarity.ms *.zdassets.com ekr.zendesk.com *.zopim.com widget-mediator.zopim.com *.tritonshowers.co.uk *.aptrinsic.com *.demdex.net porjs.com wss://*.zopim.com *.hub-box.com *.googlesyndication.com *.linkedin.com *.pixriot.com *.storeimaging.com *.disqus.com *.trackedlink.net *.ddlnk.net *.stripe.com *.stripe.network ebizmarts-website.s3.amazonaws.com brippo.s3.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.klarna.com *.klarnaevt.com *.klarnacdn.net https://img.youtube.com *.hsforms.net *.hsforms.com 'self' data: *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com *.gstatic.com www.apptrian.com pinterest.com www.pinterest.com s.pinimg.com *.hotjar.io wss://*.niceincontact.com *.porjs.com *.bing.com *.cookiebot.com *.doubleclick.net ekr.zdassets.com *.facebook.com *.facebook.net *.feefo.com region1.analytics.google.com fonts.gstatic.com fonts.googleapis.com *.pcapredict.com *.pinimg.com *.pinterest.com *.postcodeanywhere.co.uk *.salesfire.co.uk browser-update.org *.browser-update.org *.smartmetrics.co.uk stats.g.doubleclick.net tritonshowerscx.zendesk.com *.trustpilot.com www.clarity.ms *.zdassets.com ekr.zendesk.com *.zopim.com widget-mediator.zopim.com *.tritonshowers.co.uk *.aptrinsic.com *.demdex.net porjs.com *.hotjar.com wss://*.zopim.com *.niceincontact.com *.hub-box.com *.licdn.com *.disqus.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud widget.freshworks.com m2epro.freshdesk.com x.klarnacdn.net *.klarnaservices.com *.hsforms.net *.hsforms.com *.googletagmanager.com tagmanager.google.com https://www.tritonshowers.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.hotjar.io wss://*.niceincontact.com analytics.google.com *.bing.com *.cookiebot.com *.doubleclick.net ekr.zdassets.com *.facebook.com *.facebook.net *.feefo.com *.google.com region1.analytics.google.com fonts.gstatic.com *.gstatic.com *.newrelic.com *.nr-data.net *.pcapredict.com *.pinimg.com *.pinterest.com *.postcodeanywhere.co.uk *.salesfire.co.uk browser-update.org *.browser-update.org *.smartmetrics.co.uk stats.g.doubleclick.net tritonshowerscx.zendesk.com *.trustpilot.com www.clarity.ms *.youtube.com *.zdassets.com ekr.zendesk.com *.zopim.com widget-mediator.zopim.com *.tritonshowers.co.uk *.adobedtm.com *.aptrinsic.com *.demdex.net porjs.com wss://*.zopim.com *.niceincontact.com *.hub-box.com webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.network *.stripecdn.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud widget.freshworks.com m2epro.freshdesk.com *.klarnacdn.net *.googleapis.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com *.hotjar.io wss://*.niceincontact.com static.zdassets.com analytics.google.com *.bing.com *.cookiebot.com *.doubleclick.net ekr.zdassets.com *.facebook.com *.facebook.net *.feefo.com *.google.com region1.analytics.google.com fonts.gstatic.com fonts.googleapis.com *.gstatic.com *.newrelic.com *.nr-data.net *.pcapredict.com *.pinimg.com *.pinterest.com *.postcodeanywhere.co.uk *.salesfire.co.uk browser-update.org *.browser-update.org *.smartmetrics.co.uk stats.g.doubleclick.net tritonshowerscx.zendesk.com *.trustpilot.com www.clarity.ms *.youtube.com *.zdassets.com ekr.zendesk.com *.zopim.com widget-mediator.zopim.com *.tritonshowers.co.uk *.adobedtm.com *.aptrinsic.com *.demdex.net porjs.com wss://*.zopim.com *.hub-box.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com *.hotjar.io wss://*.niceincontact.com wss://*.zopim.com analytics.google.com *.bing.com *.cookiebot.com *.doubleclick.net ekr.zdassets.com *.facebook.com *.facebook.net *.feefo.com region1.analytics.google.com fonts.gstatic.com fonts.googleapis.com *.gstatic.com *.pcapredict.com *.pinimg.com *.pinterest.com *.postcodeanywhere.co.uk *.salesfire.co.uk browser-update.org *.browser-update.org *.smartmetrics.co.uk stats.g.doubleclick.net tritonshowerscx.zendesk.com *.trustpilot.com www.clarity.ms *.youtube.com *.zdassets.com ekr.zendesk.com *.zopim.com widget-mediator.zopim.com *.tritonshowers.co.uk *.adobedtm.com *.aptrinsic.com *.demdex.net porjs.com *.niceincontact.com *.hub-box.com *.linkedin.com *.pixriot.com *.storeimaging.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.com *.stripe.network klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud widget.freshworks.com m2epro.freshdesk.com x.klarnacdn.net *.klarnaservices.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.hotjar.io wss://*.niceincontact.com analytics.google.com *.bing.com *.cookiebot.com *.doubleclick.net ekr.zdassets.com *.facebook.com *.facebook.net *.feefo.com *.google.com *.google.co.uk region1.analytics.google.com fonts.gstatic.com fonts.googleapis.com *.gstatic.com *.newrelic.com *.nr-data.net *.pcapredict.com *.pinimg.com *.pinterest.com *.postcodeanywhere.co.uk *.salesfire.co.uk browser-update.org *.browser-update.org *.smartmetrics.co.uk stats.g.doubleclick.net tritonshowerscx.zendesk.com *.trustpilot.com www.clarity.ms *.youtube.com *.zdassets.com ekr.zendesk.com *.zopim.com widget-mediator.zopim.com *.tritonshowers.co.uk *.adobedtm.com *.aptrinsic.com *.demdex.net porjs.com wss://*.zopim.com *.hub-box.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp.deploy.co.uk/99aaa83e-494f-4d0c-9af4-63a6d5c1b38a; report-to report-endpoint; 1
script-src 'strict-dynamic' 'nonce-yigN2tVsaFHjcbyby1ofvmWpumT2tld9YI6kqUC0m1I='; base-uri 'none'; connect-src 'self' https://*.fontawesome.com https://*.googleapis.com https://*.googlesyndication.com https://consentcdn.cookiebot.com https://analytics.tiktok.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net; img-src data: 'self' https://*.googleapis.com https://*.gstatic.com https://*.google-analytics.com https://cdn.startpeople.be https://img.youtube.com https://i.ytimg.com https://imgsct.cookiebot.com https://vumbnail.com/ https://i.vimeocdn.com; object-src 'none'; style-src 'self' https://cdn.jsdelivr.net/npm/@fancyapps/ui/dist/fancybox.css https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datepicker/1.9.0/css/bootstrap-datepicker3.min.css https://cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/css/bootstrap.min.css https://cdn.jsdelivr.net/npm/select2@4.0.13/dist/css/select2.min.css https://cdn.jsdelivr.net/npm/select2-bootstrap-5-theme@1.3.0/dist/select2-bootstrap-5-theme.min.css https://cdn.jsdelivr.net/npm/bootstrap-icons@1.10.3/font/bootstrap-icons.css https://fonts.googleapis.com; frame-src 'strict-dynamic' 'self' https://consentcdn.cookiebot.com https://www.google.com/recaptcha/ https://www.youtube-nocookie.com/ https://player.vimeo.com/; report-to csp-endpoint; report-uri https://csp-dxp.rgfstaffing.be/csp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com *.globalpay.com https://fonts.gstatic.com *.klarnacdn.net *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net static.klaviyo.com *.feefo.com agechecked.verifico.io unity.agechecked.com www.kitchenknives.co.uk data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.gpwebpay.com *.gpe.cz *.globalpay-ecommerce.com https://*.securesuite.co.uk https://securesuite.co.uk *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.kitchenknives.co.uk 'self' 'unsafe-inline'; frame-ancestors 'self' agechecked.verifico.io unity.agechecked.com www.kitchenknives.co.uk 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.americanexpress.com *.globalpay.com *.mastercard.com *.visa.com *.gpwebpay.com *.gpe.cz *.globalpay-ecommerce.com https://*.securesuite.co.uk https://securesuite.co.uk pay.google.com https://payments.google.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * www.feefo.com *.feefo.com at.kitchenknives.co.uk pagead2.googlesyndication.com *.googlesyndication.com www.clarity.ms agechecked.verifico.io unity.agechecked.com www.kitchenknives.co.uk 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.globalpay.com https://www.gstatic.com/instantbuy/svg/dark/pay/en.svg https://www.gstatic.com/instantbuy/svg/light/pay/en.svg https://www.gstatic.com/instantbuy/svg/dark/en.svg https://www.gstatic.com/instantbuy/svg/light/en.svg *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com api.feefo.com *.feefo.com www.feefo.com at.kitchenknives.co.uk bat.bing.com bat.bing.net flex.msn.com c.bing.com www.clarity.ms *.clarity.ms pagead2.googlesyndication.com *.googlesyndication.com stats.g.doubleclick.net www.google.co.uk www.clickcease.com monitor.clickcease.com *.clickcease.com d3k81ch9hvuctc.cloudfront.net agechecked.verifico.io unity.agechecked.com www.kitchenknives.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com tagmanager.google.com https://www.googletagmanager.com *.aexp-static.com https://ajax.aspnetcdn.com *.globalpay.com *.gpapiservices.com https://pay.google.com https://*.securesuite.co.uk https://securesuite.co.uk https://payments.google.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com api.feefo.com *.feefo.com www.feefo.com at.kitchenknives.co.uk cdn.adt328.com bat.bing.com bat.bing.net www.clarity.ms scripts.clarity.ms *.clarity.ms pagead2.googlesyndication.com *.googlesyndication.com stats.g.doubleclick.net www.clickcease.com *.clickcease.com public.app.priceshape.io agechecked.verifico.io unity.agechecked.com www.kitchenknives.co.uk https://js.klevu.com https://at.kitchenknives.co.uk https://api.feefo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://fonts.googleapis.com *.klarnacdn.net https://static.klaviyo.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com api.feefo.com *.feefo.com static.klaviyo.com agechecked.verifico.io unity.agechecked.com www.kitchenknives.co.uk https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.kitchenknives.co.uk 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://google.com/pay https://pay.google.com *.globalpay.com https://js.globalpay.com https://js-cert.globalpay.com https://*.securesuite.co.uk https://securesuite.co.uk https://payments.google.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com api.feefo.com *.feefo.com at.kitchenknives.co.uk cdn.adt328.com bat.bing.com bat.bing.net www.clarity.ms scripts.clarity.ms *.clarity.ms pagead2.googlesyndication.com *.googlesyndication.com stats.g.doubleclick.net ad.doubleclick.net www.clickcease.com *.clickcease.com public.app.priceshape.io d3k81ch9hvuctc.cloudfront.net agechecked.verifico.io unity.agechecked.com www.kitchenknives.co.uk 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com www.kitchenknives.co.uk http: https: blob: 'self' 'unsafe-inline'; default-src www.kitchenknives.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.googleapis.com data: fonts.googleapis.com *.oney.io *.staging.oney.io https://cdnjs.cloudflare.com https://*.swaven.com/ data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' https://*.facebook.com/ connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com *.hipay-tpp.com *.hipay.com *.googleapis.com https://www.googletagmanager.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com https://*.doubleclick.net/ https://*.swaven.com/ https://app.trustt.io 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com *.hipay.com *.oney.io *.staging.oney.io http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://*.adnxs.com/ https://axeptio.imgix.net/ https://*.bing.com/ https://*.clarity.ms/ https://*.google.fr/pagead/ https://*.leanature.com/media/ https://mcstaging2.leanature.fr/media/ https://*.cloudfront.net/ https://*.swaven.com/ https://app.trustt.io data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.hipay-tpp.com *.hipay.com mpsnare.iesnare.com *.paypal.com *.oney.io *.staging.oney.io http://www.googletagmanager.com/ https://www.googletagmanager.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://cdnjs.cloudflare.com https://*.adnxs.com/ https://*.amazon-adsystem.com/ https://*.axept.io/ https://*.bing.com/ https://*.clarity.ms/ https://*.leanature.com/ https://*.newrelic.com/ https://*.mikmak.ai/ https://static-sb.com/js/ https://*.swaven.com/ https://*.tiktok.com https://*.iadvize.com https://app.trustt.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.hipay.com *.googleapis.com https://fonts.googleapis.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com data: mpsnare.iesnare.com *.googleapis.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://*.googleapis.com/gtv-videos-bucket https://app.trustt.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com maps.googleapis.com *.hipay-tpp.com *.hipay.com wss://mpsnare.iesnare.com *.oney.io *.staging.oney.io http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://*.adnxs.com/ https://*.amazon-adsystem.com/ https://*.bing.com/ https://*.leanatureboutique.com/ https://*.swaven.com/ https://*.axept.io/ https://*.clarity.ms/ https://*.google-analytics.com/ https://*.google.com/pagead/ https://googleads.g.doubleclick.net/ https://*.nr-data.net/ https://*.paa-reporting-advertising.amazon/ https://social-sb.com/ https://*.tiktok.com https://*.iadvize.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://static.ads-twitter.com https://www.google.com https://www.gstatic.com https://recaptcha.net https://maps.googleapis.com https://maps.gstatic.com https://cdn-js.foxy.io https://cdn.foxycart.com https://mhf.foxycart.com https://platform-api.sharethis.com https://ws.sharethis.com https://buttons-config.sharethis.com https://cdn.evgnet.com https://unpkg.com https://*.disqus.com https://analytics.tiktok.com https://snap.licdn.com https://*.bugherd.com https://*.doubleclick.net https://staticcdn.co.nz https://js.monitor.azure.com https://form.jotform.com https://cdn.jotfor.ms https://*.flippingbook.com https://cdn.raisely.com https://t.sharethis.com https://www.googleadservices.com https://www.mentalhealth.org.nz; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.foxycart.com https://www.mentalhealth.org.nz; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://www.mentalhealth.org.nz; connect-src 'self' https://*.foxycart.com https://api.foxy.io https://cdn-js.foxy.io https://www.google-analytics.com https://region1.google-analytics.com https://www.googleapis.com https://vimeo.com https://maps.googleapis.com https://*.sharethis.com https://www.facebook.com https://*.evergage.com https://www.google.com https://*.doubleclick.net https://analytics.tiktok.com https://px.ads.linkedin.com https://*.bugherd.com https://staticcdn.co.nz https://js.monitor.azure.com https://australiaeast-1.in.applicationinsights.azure.com https://analytics.google.com https://www.googletagmanager.com https://www.google.co.nz https://www.gstatic.com https://translate.googleapis.com https://fonts.googleapis.com https://fonts.gstatic.com https://*.flippingbook.com https://data.stbuttons.click https://cdn.evgnet.com https://shielded.co.nz https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.tiktokw.us; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.googletagmanager.com https://mhf.foxycart.com https://www.google.com https://recaptcha.net https://*.bugherd.com https://*.doubleclick.net https://staticcdn.co.nz https://form.jotform.com https://submit.jotform.com https://*.flippingbook.com https://donate.mentalhealth.org.nz https://mentalhealthfoundation-donate.raisely.com https://t.sharethis.com; object-src 'none'; base-uri 'self'; form-action 'self' https://mhf.foxycart.com https://www.mentalhealth.org.nz; frame-ancestors 'self'; report-uri /csp-report; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com cash-f.squarecdn.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.googleapis.com *.google.com *.newrelic.com *.nr-data.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.cookiebot.com consentcdn.cookiebot.eu js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.googleapis.com *.newrelic.com *.facebook.com *.nr-data.net 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https://images.unsplash.com imgsct.cookiebot.com imgsct.cookiebot.eu *.google.com *.googleadservices.com *.googletagmanager.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page https://maps.googleapis.com https://player.vimeo.com *.cookiebot.com consentcdn.cookiebot.com consent.cookiebot.eu consentcdn.cookiebot.eu connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.avada.io *.shopify.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.soundcloud.com *.hotjar.com *.cookiepro.com *.doubleclick.net *.facebook.com *.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.magento-datasolutions.com *.magento-ds.com *.cash.app *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.facebook.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com * https://maps.googleapis.com https://player.vimeo.com consentcdn.cookiebot.com consentcdn.cookiebot.eu *.cookiebot.com consent.cookiebot.eu *.googletagmanager.com stats.g.doubleclick.net https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googlesyndication.com *.hotjar.com *.cookiepro.com *.doubleclick.net *.facebook.com *.facebook.net *.hsforms.net *.unpkg.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src-elem 'self' 'unsafe-inline' https://consent.cookiefirst.com https://script.hotjar.com https://static.hotjar.com https://s.pinimg.com https://www.googletagmanager.com https://robincontentdesktop.blob.core.windows.net https://*.msecnd.net https://bat.bing.com https://surfly.com https://selfservice.robinhq.com https://robin-widget.com https://connect.facebook.net https://googleads.g.doubleclick.net; style-src-elem 'self' 'unsafe-inline' *.fontawesome.com https://consent.cookiefirst.com https://robin-widget.com; font-src https://www.gstatic.com https://fonts.gstatic.com 'self' 'unsafe-inline' data: *.fontawesome.com *.webwinkelkeur.nl data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.googletagmanager.com https://www.youtube.com *.youtube-nocookie.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com 'self' 'unsafe-inline' https://www.google.com https://www.youtube-nocookie.com https://us4.campaign-archive.com/ https://js.driftt.com *.webwinkelkeur.nl https://td.doubleclick.net https://ct.pinterest.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com magefan.com cm.magefan.com *.disqus.com https://*.google.nl https://*.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net https://*.g.doubleclick.net https://*.fls.doubleclick.net https://*.adservice.google.com https://www.mollie.com 'self' 'unsafe-inline' *.magentocommerce.com https://www.google.nl/ https://www.google.com/ https://www.google-analytics.com/ https://maps.googleapis.com/ https://maps.gstatic.com/ https://robincontentdesktop.blob.core.windows.net https://bat.bing.net https://bat.bing.com https://www.facebook.com https://connect.facebook.net/ https://s.ytimg.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com https://*.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com https://vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.disqus.com js.mollie.com 'self' 'unsafe-inline' https://stats.g.doubleclick.net https://www.googleadservices.com https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com https://*.vimeocdn.com https://*.youtube.com https://*.doubleclick.net *.cloudflare.com https://*.disqus.com https://www.facebook.com https://connect.facebook.net https://*.fontawesome.com/ https://js.driftt.com https://*.webwinkelkeur.nl *.bootstrapcdn.com https://dpm.demdex.net https://amcglobal.sc.omtrdc.net https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://ipinfo.io https://robincontentdesktop.blob.core.windows.net https://selfservice.robinhq.com https://bat.bing.com https://*.msecnd.net https://script.hotjar.com https://static.hotjar.com https://cdn.leadinfo.net https://s.pinimg.com https://consent.cookiefirst.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com 'self' 'unsafe-inline' https://robin-widget.com *.fontawesome.com https://consent.cookiefirst.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'self' 'unsafe-inline'; manifest-src 'self' 'self' 'unsafe-inline'; connect-src dpm.demdex.net https://amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net https://vimeo.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://stream.getmetrion.com https://*.googleadservices.com https://*.googletagmanager.com https://*.googletagservices.com https://*.googlesyndication.com https://*.doubleclick.net https://*.google.nl https://*.googlevideo.com https://*.googleusercontent.com https://*.googledomains.com https://*.g.doubleclick.net https://*.fls.doubleclick.net https://*.adservice.google.com 'self' 'unsafe-inline' https://stats.g.doubleclick.net googleads.g.doubleclick.net https://www.googleadservices.com https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com s.ytimg.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://*.ggpht.com https://*.cloudflare.com *.disqus.com https://www.facebook.com https://connect.facebook.net https://*.fontawesome.com/ https://js.driftt.com https://*.webwinkelkeur.nl *.bootstrapcdn.com *.adobe.com assets.adobedtm.com https://dpm.demdex.net https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://bat.bing.net https://bat.bing.com https://vc.hotjar.io https://ct.pinterest.com https://consent.cookiefirst.com https://edge.cookiefirst.com https://dc.services.visualstudio.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'self' 'unsafe-inline'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.intercom.io https://*.intercomcdn.com https://payments-lib.cdn.s7s.ai https://telegram.org https://639eb6ba-ab2a-450e-a305-4f3b4715c80e.snippet.anjouangaming.org https://insights.rtgio.co https://s.logstracker.com https://analytics.ahrefs.com https://static.cloudflareinsights.com https://my.rtmark.net https://*.onesignal.com https://scripts.mediamathrdrt.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://challenges.cloudflare.com https://sports.wild.io https://www.wild.io; base-uri 'self'; object-src 'none'; worker-src 'self'; frame-src 'self' https://*.intercom.io https://intercom-sheets.com https://oauth.telegram.org https://x.wldrdr.online https://wildpartners.app https://www.googletagmanager.com https://challenges.cloudflare.com https://www.wild.io https://sports.wild.io; report-uri https://o1054028.ingest.sentry.io/api/6690311/security/?sentry_key=531115f419264fe69d2c2a4923e02b21; report-to csp-endpoint 1
worker-src blob:; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.kxcdn.com *.fontawesome.com https://fonts.bunny.net https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.addthis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.fbcdn.net blob: https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com *.fbcdn.net platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com *.cloudflareinsights.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.pay.nl 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.kibanitools.com/paynl/csp/report; report-to report-endpoint; 1
default-src https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.amazongamestudios.com https://*.amazongames.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://chat.amazon.eu https://chat.amazon.co.jp https://sentry.amazongames.com https://d13pe3bn1jpqwf.cloudfront.net; script-src 'nonce-e015772b0b5041b2a9b6f586e47ca4cc'  https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.amazongamestudios.com https://*.amazongames.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://chat.amazon.eu https://chat.amazon.co.jp https://sentry.amazongames.com https://d13pe3bn1jpqwf.cloudfront.net; style-src 'self' 'nonce-e015772b0b5041b2a9b6f586e47ca4cc'  https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.amazongamestudios.com https://*.amazongames.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://chat.amazon.eu https://chat.amazon.co.jp https://sentry.amazongames.com https://d13pe3bn1jpqwf.cloudfront.net; img-src 'self' data:  https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.amazongamestudios.com https://*.amazongames.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://chat.amazon.eu https://chat.amazon.co.jp https://sentry.amazongames.com https://d13pe3bn1jpqwf.cloudfront.net https://*.twimg.com https://player.twitch.tv/ https://*.ytimg.com; media-src 'self' data:  https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.amazongamestudios.com https://*.amazongames.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://chat.amazon.eu https://chat.amazon.co.jp https://sentry.amazongames.com https://d13pe3bn1jpqwf.cloudfront.net https://*.twimg.com https://player.twitch.tv/ https://www.youtube.com https://youtube.com https://*.googlevideo.com; frame-src https://www.youtube.com https://youtube.com https://*.googlevideo.com https://*.twimg.com https://player.twitch.tv/  https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.amazongamestudios.com https://*.amazongames.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://chat.amazon.eu https://chat.amazon.co.jp https://sentry.amazongames.com https://d13pe3bn1jpqwf.cloudfront.net; report-uri https://www.amazon.com/1/batch/2/OE/mid=ATVPDKIKX0DER:sid=143-0200624-5821741:rid=C5DF6630EB894A18B90A:sn=www.amazongamestudios.com 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.gstatic.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.certcapture.com static.addtoany.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.authorize.net *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.certcapture.com mcstaging.trainworld.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://maps.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.gstatic.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.certcapture.com static.addtoany.com connect.facebook.net widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://maps.googleapis.com https://cdn.jsdelivr.net www.facebook.com graph.facebook.com business.facebook.com *.authorize.net maps.googleapis.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com *.fontawesome.com *.googleapis.com *.addtoany.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.magento.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com *.doubleclick.net widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://maps.googleapis.com http://dpm.demdex.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net maps.googleapis.com *.yotpo.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.bglobale.com *.global-e.com *.klevu.com *.ksearchnet.com https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.clearpay.co.uk *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.com *.stripe.network klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.bglobale.com *.global-e.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://www.googletagmanager.com/ *.mention-me.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://aheadworks.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.afterpay.com *.clearpay.co.uk www.gstatic.com *.trackedlink.net *.ddlnk.net *.stripe.com *.stripe.network https://*.google.com ebizmarts-website.s3.amazonaws.com brippo.s3.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.bglobale.com *.global-e.com *.klevu.com *.ksearchnet.com services.postcodeanywhere.co.uk https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.afterpay.com *.clearpay.co.uk *.squarecdn.com https://hbiq.net *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://*.google.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.bglobale.com *.global-e.com js.klevu.com *.ksearchnet.com api.addressy.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.mention-me.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.cosyfeet.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.afterpay.com/ *.squarecdn.com webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.network *.stripecdn.com *.amazon.com https://fonts.googleapis.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.bglobale.com *.global-e.com *.klevu.com *.ksearchnet.com api.addressy.com https://hcaptcha.com https://*.hcaptcha.com assets.braintreegateway.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.clearpay.co.uk *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.com *.stripe.network klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com fonts.googleapis.com fonts.gstatic.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.klevu.com *.ksearchnet.com api.addressy.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.mention-me.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://df16bd48-035c-4a04-ac98-181ff830dad0.sansec.watch/; report-to report-endpoint; 1
script-src 'self' https://www.dblibraries.de https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://www.dblibraries.de 'unsafe-inline' https:; img-src 'self' https://www.dblibraries.de data: https:; font-src 'self' https://www.dblibraries.de data: https:; connect-src 'self'; form-action 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; upgrade-insecure-requests 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com fonts.googleapis.com *.googleapis.com data: https://fonts.gstatic.com *.stape.io *.fontawesome.com cdn.green-it.shop *.loopingo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com accounts.google.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.stape.io js.mollie.com js.klarna.com td.doubleclick.net gtm.green-it.shop https://*.billiger.de https://billiger.de *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleusercontent.com *.ggpht.com magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com *.stape.io https://www.mollie.com ts.tradetracker.net www.magmodules.eu cdn.magmodules.eu *.haendlerbund.de *.shopauskunft.de *.tradetracker.net *.loopingo.com tree-nation.com cdn.green-it.shop https://*.billiger.de https://billiger.de https://cmodul.solutenetwork.com https://bat.bing.com www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.bg www.google.by www.google.ca www.google.ch www.google.ci www.google.cl www.google.co.ao www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bo www.google.com.br www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.eg www.google.com.et www.google.com.gh www.google.com.hk www.google.com.jm www.google.com.lb www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.np www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.sa www.google.com.sg www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.vn www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uz www.google.co.za www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gl www.google.gr www.google.hr www.google.hu www.google.ie www.google.iq www.google.is www.google.it www.google.jo www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mu www.google.mv www.google.ne www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.sc www.google.se www.google.si www.google.sk www.google.sn www.google.tn google.com *.googlesyndication.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com apis.google.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ widget.freshworks.com m2epro.freshdesk.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.doubleclick.net *.stape.io js.mollie.com pay.google.com applepay.cdn-apple.com tm.tradetracker.net https://analytics.ahrefs.com integration.loopingo.com awmonitor.com ts.tradetracker.net tree-nation.com *.shopauskunft.de https://cdn.green-it.shop gtm.green-it.shop https://bat.bing.com *.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com https://fonts.googleapis.com *.googleapis.com *.googletagmanager.com *.stape.io *.fontawesome.com cdn.green-it.shop *.loopingo.com *.shopauskunft.de 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src data: 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com widget.freshworks.com m2epro.freshdesk.com *.gstatic.com data: *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog *.stape.io https://analytics.ahrefs.com core.loopingo.com *.userwerk.com eu.klarnaevt.com tree-nation.com stats.g.doubleclick.net gtm.green-it.shop https://cmodul.solutenetwork.com https://bat.bing.com www.google.ae www.google.al www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.ca www.google.ch www.google.ci www.google.cl www.google.co.ao www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.br www.google.com.eg www.google.com.gh www.google.com.hk www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.np www.google.com.ph www.google.com.pk www.google.com.sa www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.co.nz www.google.co.th www.google.co.ug www.google.co.uk www.google.co.uz www.google.cz www.google.de www.google.dk www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gr www.google.hr www.google.hu www.google.ie www.google.it www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.mg www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.sc www.google.se www.google.si www.google.sk *.shopauskunft.de 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://9656870a-0f24-4a24-848b-91facff41950.sansec.watch/; report-to report-endpoint; 1
font-src *.fontawesome.com *.googleapis.com *.gstatic.com https://fonts.gstatic.com 'self' data: *.packlink.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://seo.mageplaza.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com *.packlink.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.fontawesome.com *.googleapis.com *.gstatic.com https://player.vimeo.com https://www.youtube.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com https://fonts.googleapis.com http://fonts.googleapis.com *.packlink.com *.googleapis.com unsafe-inline *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com https://fonts.gstatic.com *.fontawesome.com www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com https://seo.mageplaza.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net www.searchanise.com *.searchserverapi.com *.searchserverapi1.com *.twitter.com *.syfpos.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.awin1.com *.zenaps.com *.fls.doubleclick.net *.weltpixel.com consentcdn.cookiebot.com consentcdn.cookiebot.eu *.iubenda.com landofcoder.com maps.googleapis.com chart.googleapis.com accounts.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.authorize.net *.pinterest.com *.pinterdev.com commerce-app.pintergration.com www.searchanise.com *.searchserverapi.com *.searchserverapi1.com *.twitter.com syf.demdex.net *.syfpos.com *.syf.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.awin1.com *.zenaps.com *.wepowerconnections.com *.facebook.com imgsct.cookiebot.com imgsct.cookiebot.eu shipping-offers-static-images-bucket-platformsandbox.s3.amazonaws.com shipping-offers-static-images-bucket-stage.s3.amazonaws.com shipping-offers-static-images-bucket-prod.s3.amazonaws.com shipping-offers-static-images-bucket-dev.s3.amazonaws.com shipping-offers-static-images-bucket-demo.s3.amazonaws.com helloextend-static-assets.s3.amazonaws.com https://s3.amazonaws.com/ccspersistenceprod-contentstaticassets04b201d4-1apqb8dyegznm/offers/learnMoreModal-default-1654273334107-learnMoreModal.backgroundImageUrl_Generic_WomanwithBox2.jpg https://s3.amazonaws.com/ccspersistenceprod-contentstaticassets04b201d4-1apqb8dyegznm/offers/shippingProtectionCartOffer-default-1720746621507-extend_svg_cart.svg https://helloextend-static-assets.s3.amazonaws.com https://extendcoreoffersdemo-offersthemelogobucketeb21afa-19jnurg0a0o17.s3.amazonaws.com https://s3.amazonaws.com https://extendcoreoffersprod-offersthemelogobucketeb21afa-1lr7le13dvgtp.s3.amazonaws.com *.iubenda.com magefan.com cm.magefan.com *.disqus.com https://meetanshi.com/media/logo.png www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com *.twitter.com *.twimg.com www.google.ru www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com s3.amazonaws.com *.syfpos.com *.syf.com analytics.synchrony.com *.d1.sc.omtrdc.net *.mysynchrony.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com consent.cookiebot.com consent.cookiebot.eu https://sdk.helloextend.com/ https://*.helloextend.com *.iubenda.com landofcoder.com maps.googleapis.com chart.googleapis.com *.disqus.com accounts.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com searchanise-ef84.kxcdn.com s3.amazonaws.com ajax.aspnetcdn.com www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com *.searchanise.com api.amplitude.com *.twitter.com *.twimg.com *.syfpos.com analytics.synchrony.com *.mysynchrony.com *.syf.com *.tiqcdn.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com tagmanager.google.com https://fonts.googleapis.com *.fontawesome.com accounts.google.com www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com searchanise-ef84.kxcdn.com s3.amazonaws.com *.twitter.com ton.twimg.com *.syfpos.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; object-src landofcoder.com maps.googleapis.com chart.googleapis.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.wepowerconnections.com https://the.sciencebehindecommerce.com *.google-analytics.com *.facebook.net consentcdn.cookiebot.com consentcdn.cookiebot.eu consent.cookiebot.com consent.cookiebot.eu https://*.helloextend.com/ https://*.extend.com/ https://*.helloextend.com *.iubenda.com landofcoder.com maps.googleapis.com chart.googleapis.com accounts.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net *.pinterest.com *.pinterdev.com commerce-app.pintergration.com api.amplitude.com stats.g.doubleclick.net *.syfpos.com *.syf.com *.d1.sc.omtrdc.net *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-ancestors 'self' https:; default-src 'self' https://static.badgr.io; media-src 'self'; object-src 'none'; style-src www.gstatic.com *.googleapis.com *.pendo.io 'unsafe-inline' *.eesysoft.com 'self' ; script-src www.gstatic.com *.pendo.io translate.google.com *.googleapis.com *.eesysoft.com 'self' 'sha256-6wRdeNJzEHNIsDAMAdKbdVLWIqu8b6+Bs+xVNZqplQw=' 'strict-dynamic'  'nonce-QMnUef0ATgKlf7CBMx7Kjgw4SQoThUrk' 'sha256-MhtPZXr7+LpJUY5qtMutB+qWfQtMaPccfe7QXtCcEYc=' 'unsafe-hashes'; font-src *.eesysoft.com *.pendo.io fonts.gstatic.com 'self'; img-src * data: blob:; connect-src 'self' https://badges.parchment.com https://www.gravatar.com *.pendo.io *.eesysoft.com *.instructure.com *.googleapis.com translate.google.com data:; frame-src 'self'; worker-src 'self' blob: *.pendo.io; base-uri 'self'; require-trusted-types-for 'script'; trusted-types angular angular#bundler dompurify webpack default goog#html highcharts 'allow-duplicates'; report-uri /api/csp-report; 1
object-src 'none';base-uri 'self';script-src 'nonce-ja8d_2jP0sU9oLj2JBC2SA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
connect-src 'self' https://www.google.com/ https://www.gstatic.com/ https://patientnotebook.com/; default-src 'none'; font-src 'self' https://fonts.googleapis.com/ https://fonts.gstatic.com/ *.zirmed.com/ https://patientnotebook.com/ data:; form-action 'self'; frame-ancestors 'self'; frame-src https://www.google.com/ 'self'; img-src blob: 'self' data: https://patientnotebook.com/; script-src 'unsafe-inline' 'unsafe-eval'; script-src-elem https://www.google.com/recaptcha/enterprise.js https://ajax.aspnetcdn.com/ajax/jquery.validate/1.11.1/jquery.validate.min.js *.zirmed.com/Static/WebControls/2.0/Javascript/WebControls.js 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/recaptcha__en.js https://ajax.aspnetcdn.com/ajax/mvc/4.0/jquery.validate.unobtrusive.min.js https://www.gstatic.com/recaptcha/releases/BnqMGSY_YP4cCmbNINHpJPkd/recaptcha__en.js https://patientnotebook.com/ https://seal.thawte.com/; style-src 'unsafe-inline' 'self' https://ajax.googleapis.com/ajax/libs/jqueryui/1.9.2/themes/smoothness/jquery-ui.css https://fonts.googleapis.com/ *.zirmed.com/ https://patientnotebook.com/; report-uri https://csp-reports.security.fastly-edge.com/r?id=nu3M0Krk275K3afB4sQOyz&inv=0 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://consent.cookiebot.com https://js.hsforms.net https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https: blob:; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://consent.cookiebot.com https://js.hsforms.net; frame-src 'self' https://www.googletagmanager.com https://consent.cookiebot.com; object-src 'none'; base-uri 'self'; form-action 'self' https://js.hsforms.net; frame-ancestors 'self'; upgrade-insecure-requests; block-all-mixed-content 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.checkout.com *.cdn-apple.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net https://fonts.gstatic.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.sagepay.com *.nosto.com *.nos.to *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.checkout.com *.klarna.com *.clearpay.co.uk *.sagepay.com *.nosto.com *.nos.to www.youtube-nocookie.com www.googletagmanager.com pay.google.com www.facebook.com *.awin1.com *.zenaps.com *.fls.doubleclick.net *.weltpixel.com *.trustpilot.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.checkout.com *.afterpay.com *.clearpay.co.uk *.klarna.com *.klarnaevt.com *.klarnacdn.net https://firebasestorage.googleapis.com *.nosto.com *.nos.to https://seal.godaddy.com osm.klarnaservices.com *.bing.com *.clarity.ms *.flockr.co *.facebook.net www.awinblackfriday.com www.google.co.uk *.awin1.com *.zenaps.com *.segmentify.com *.gstatic.com *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.checkout.com *.klarnacdn.net *.cdn-apple.com *.afterpay.com *.clearpay.co.uk *.squarecdn.com https://hbiq.net widget.freshworks.com m2epro.freshdesk.com *.klarna.com x.klarnacdn.net *.klarnaservices.com house11167.pcapredict.com *.sagepay.com *.eu.elavon.com *.opayo.cloud *.avada.io *.shopify.com *.nosto.com *.nos.to nosto.stackla.com d21m4dsqdd3b9h.cloudfront.net cdn.jsdelivr.net *.flockr.co static.cloudflareinsights.com bat.bing.com *.clarity.ms pay.google.com *.awin1.com www.dwin1.com *.zenaps.com the.sciencebehindecommerce.com cdn.segmentify.com cdn.sgmntfy.com *.trustpilot.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com https://www.hobbies.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.checkout.com *.afterpay.com/ *.squarecdn.com widget.freshworks.com m2epro.freshdesk.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net *.nosto.com *.nos.to https://fonts.googleapis.com d21m4dsqdd3b9h.cloudfront.net *.flockr.co x.klarnacdn.net cdn.segmentify.com *.trustpilot.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.checkout.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.browser-intake-datadoghq.com *.clearpay.co.uk *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com widget.freshworks.com m2epro.freshdesk.com x.klarnacdn.net *.klarnaservices.com services.postcodeanywhere.co.uk *.sagepay.com *.eu.elavon.com https://get.geojs.io *.avada.io *.nosto.com *.nos.to d21m4dsqdd3b9h.cloudfront.net www.awinblackfriday.com google.com pay.google.com *.facebook.com *.clarity.ms js.klarna.com bat.bing.net eu.klarnaevt.com static.afterpay.com *.flockr.co ad.doubleclick.net bat.bing.com the.sciencebehindecommerce.com gandalf-eu.segmentify.com analytics.google.com *.facebook.net 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://56af8117-de87-453a-a137-2c362a1094a9.sansec.watch/; report-to report-endpoint; 1
default-src * 'unsafe-inline' 'unsafe-eval' data: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/, https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' data: https://beta.idabot.net/webchat/v4-1/comp-pro/Comp-Pro/css/*; img-src 'self' data: s.w.org ps.w.org ts.w.org; font-src 'self' data: ; block-all-mixed-content; report-uri https://www.comp-pro.de?gdsih-csp-report; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self'; connect-src 'self' https://tmdb.filmnoir.app http://127.0.0.1:4311 https://auth.filmnoir.app https://trakt.filmnoir.app https://trakt.tv http://localhost:8787 http://127.0.0.1:8787 https://api.filmnoir.app https://api-staging.filmnoir.app http://127.0.0.1:4313 https://static.cloudflareinsights.com https://cloudflareinsights.com; frame-src https://www.youtube.com https://youtube.com; worker-src 'self' blob:; form-action 'self' https://app.us16.list-manage.com; base-uri 'self'; object-src 'none'; report-uri /csp-report; report-to csp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://maps.googleapis.com https://maps.gstatic.com https://cloud.ccm19.de https://www.google-analytics.com https://snap.licdn.com https://connect.facebook.net https://cdn.mouseflow.com https://www.youtube.com https://googleads.g.doubleclick.net https://www.etermin.net https://capi-automation.s3.us-east-2.amazonaws.com https://www.niedax.com https://js-eu1.hsforms.net 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://*.googleapis.com https://*.gstatic.com https://cloud.ccm19.de https://px.ads.linkedin.com https://www.facebook.com https://www.googleadservices.com https://products.niedax.de https://seal.website-check.de https://www.google.com https://www.google.de https://www.google.ae https://www.google.at https://www.google.ca https://www.google.ch https://www.google.com.br https://www.google.it https://www.google.fr https://www.google.nl https://www.google.be https://www.google.lu https://www.google.co.uk https://www.google.ie https://www.google.se https://www.google.dk https://www.google.pl https://www.google.cz https://www.google.sk https://www.google.ro https://www.google.bg https://www.google.co.il https://www.google.co.in https://www.google.co.kr https://www.google.dz https://www.google.hu; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://www.googletagmanager.com https://www.google.com https://cloud.ccm19.de https://www.facebook.com https://www.etermin.net https://bimobject.com https://*.bimobject.com https://js-eu1.hsforms.net; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://cloud.ccm19.de https://www.niedax.com 'report-sample'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com 'report-sample'; worker-src 'self' blob:; font-src 'self' data: https://fonts.gstatic.com https://www.niedax.com; connect-src 'self' https://cloud.ccm19.de https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://maps.googleapis.com https://analytics.google.com https://*.analytics.google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://ad.doubleclick.net https://www.googleadservices.com https://px.ads.linkedin.com https://www.facebook.com https://*.rec.mouseflow.com https://snippet.legal-cdn.com https://www.google.com https://www.google.de https://www.google.ae https://www.google.at https://www.google.ca https://www.google.ch https://www.google.com.br https://www.google.it https://www.google.fr https://www.google.nl https://www.google.be https://www.google.lu https://www.google.co.uk https://www.google.ie https://www.google.se https://www.google.dk https://www.google.pl https://www.google.cz https://www.google.sk https://www.google.ro https://www.google.bg https://www.google.co.il https://www.google.co.in https://www.google.co.kr https://www.google.dz https://www.google.hu; media-src 'self' data:; object-src 'none'; frame-ancestors 'self'; report-uri https://www.niedax.com/de-de/@http-reporting?csp=report&requestTime=1789280590107844&requestHash=40344b109b585a2f5560af41a9fe3ad747c82e97 1
font-src *.fontawesome.com maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.yotpo.com https://www.google.com/ https://s7.addthis.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com https://www.google-analytics.com https://stats.g.doubleclick.net 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.yotpo.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googletagmanager.com https://www.google.com static.ctctcdn.com https://cdnjs.cloudflare.com https://www.gstatic.com s7.addthis.com https://m.addthis.com https://z.moatads.com https://v1.addthisedge.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline *.yotpo.com *.googleapis.com static.ctctcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com www.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.yotpo.com https://www.google-analytics.com https://www.googletagmanager.com https://listgrowth.ctctcdn.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; img-src 'self' data: cdn.cookielaw.org cdn.sanity.io https://www.google-analytics.com https://www.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://www.google.com https://www.google.co.uk https://google.com https://ssl.gstatic.com https://www.gstatic.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://static.hotjar.com www.zego.com; connect-src 'self' app.launchdarkly.com b79fd5h4.api.sanity.io cdn.cookielaw.org clientstream.launchdarkly.com events.launchdarkly.com geolocation.onetrust.com jscloud.net privacyportal-de.onetrust.com https://api.amplitude.com https://api.lab.amplitude.com https://sr-client-cfg.amplitude.com https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://googletagmanager.com https://www.google.com https://www.google.co.uk https://google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://sdk.fra-02.braze.eu wss://ws.hotjar.com https://vc.hotjar.io https://vars.hotjar.com https://script.hotjar.com https://surveystats.hotjar.io browser-intake-datadoghq.com browser-intake-datadoghq.eu session-replay-datadoghq.com session-replay-datadoghq.eu rum-http-intake.logs.datadoghq.com rum-http-intake.logs.datadoghq.eu www.zego.com; script-src 'self' 'unsafe-inline' cdn.cookielaw.org d.la1-c2-lo2.salesforceliveagent.com d.la1-core1.sfdc-5pakla.salesforceliveagent.com jscloud.net service.force.com widget.trustpilot.com www.youtube.com https://www.google.com https://www.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://js.appboycdn.com https://static.hotjar.com https://script.hotjar.com www.zego.com; style-src 'self' 'unsafe-inline' service.force.com https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com www.zego.com; frame-src 'self' service.force.com widget.trustpilot.com www.youtube.com https://www.googletagmanager.com https://vars.hotjar.com; font-src 'self' data: https://fonts.gstatic.com www.zego.com; frame-ancestors 'none'; report-uri https://o53180.ingest.us.sentry.io/api/4507583918637056/security/?sentry_key=3a1e5c7ad4a38458d3a2ba8757c90d2f&sentry_release=zego-website-cms&sentry_environment=production; report-to csp-endpoint; 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' https://mlb.com https://*.mlb.com https://milb.com https://*.milb.com https://appyleague.com https://*.appyleague.com https://mlbdraftleague.com https://*.mlbdraftleague.com https://usabaseball.com https://*.usabaseball.com https://capecodleague.com https://*.capecodleague.com https://acdn.adnxs.com https://assets.adobedtm.com https://builds.mlbstatic.com https://cdn.bff.mlbinfra.com https://platform.twitter.com https://pubads.g.doubleclick.net https://securepubads.g.doubleclick.net https://static.tagboard.com https://widgets.media.sportradar.com https://www.googletagmanager.com https://www.instagram.com https://www.mlbstatic.com https://cdn.commerce.mlb.com https://mktg.mlbstatic.com; style-src 'self' 'unsafe-inline' https://builds.mlbstatic.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://css.mlbstatic.com https://www.mlbstatic.com; font-src 'self' data: https://builds.mlbstatic.com https://cdnjs.cloudflare.com https://fonts.gstatic.com https://www.mlbstatic.com; img-src 'self' blob: data: https://acdn.adnxs.com https://assets.adobedtm.com https://builds.mlbstatic.com https://images.ctfassets.net https://img.mlbstatic.com https://platform.twitter.com https://pubads.g.doubleclick.net https://static.tagboard.com https://www.google.com https://www.googletagmanager.com https://www.instagram.com https://midfield.mlbstatic.com https://www.mlbstatic.com; connect-src 'self' https://api.frgapi.com https://api.sportradar.com https://assets.adobedtm.com https://cdn.bff.mlbinfra.com https://dpm.demdex.net https://fastball-gateway.mlb.com https://milb-cuts-diamond.mlb.com https://mlb-cuts-diamond.mlb.com https://pubads.g.doubleclick.net https://www.google.com https://www.googletagmanager.com https://bdfed.stitch.mlbinfra.com https://content-service.mlb.com https://content.mlb.com https://dapi.cms.mlbinfra.com https://dapi.cms.opprops.mlbinfra.com https://data-graph.mlb.com https://forms.mlbam.net https://graphql.cms.mlbinfra.com https://mlb.okta.com https://mut-services-prod.best-gcp.mlbinfra.com https://routing-api.cms.mlbinfra.com https://search-api.mlb.com https://statsapi.mlb.com; frame-src 'self' https://platform.twitter.com https://embed.tagboard.com https://static.tagboard.com https://www.facebook.com https://www.google.com https://www.googletagmanager.com https://www.instagram.com https://www.youtube.com https://mlb.com https://*.mlb.com https://milb.com https://*.milb.com https://appyleague.com https://*.appyleague.com https://mlbdraftleague.com https://*.mlbdraftleague.com https://usabaseball.com https://*.usabaseball.com https://capecodleague.com https://*.capecodleague.com; media-src 'self' blob: https://milb-cuts-diamond.mlb.com https://mlb-cuts-diamond.mlb.com; worker-src 'self' blob:; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: fonts.gstatic.com data: *.raab-verlag.de *.raab-verlag.at *.raabverlag.ch https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com https://www.googletagmanager.com/ *.google.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com consentcdn.cookiebot.com/ ct.pinterest.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.magezon.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com ssl.gstatic.com www.gstatic.com pci.usd.de/compliance/ *.raab-verlag.de data: *.raab-verlag.at data: *.raabverlag.ch data: www.google.com/pagead/ www.google.de/pagead/ *.pinterest.com bat.bing.com c.bing.com c.clarity.ms/ www.google.de/ads/ imgsct.cookiebot.com/ https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.google.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com tagmanager.google.com widgets.trustedshops.com/ *.raab-verlag.de *.raab-verlag.at *.raabverlag.ch googleads.g.doubleclick.net/ www.google.com/pagead/ www.google.de/pagead/ s.pinimg.com bat.bing.com consent.cookiebot.com/ consentcdn.cookiebot.com/ www.clarity.ms/ https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com tagmanager.google.com *.raab-verlag.de *.raab-verlag.at *.raabverlag.ch https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com *.raab-verlag.de *.raab-verlag.at *.raabverlag.ch stats.g.doubleclick.net/j/collect *.pinterest.com consentcdn.cookiebot.com/ i.clarity.ms/ region1.google-analytics.com www.facebook.com/tr/ googleads.g.doubleclick.net *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'none'; script-src 'strict-dynamic' 'unsafe-inline' http: https: 'nonce-SihtlKR3jPY25jtTZnTXuJqPTiVGZnR6ewazBAjBMQk='; connect-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self'; font-src 'self'; base-uri 'self'; 1
default-src 'self'; base-uri 'none'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://*.facebook.com; script-src 'self' blob: https://*.ads-twitter.com https://*.ahrefs.com https://*.bing.com https://*.cast.ai https://cdn-cookieyes.com https://cdn.jsdelivr.net https://*.clarity.ms https://*.cloudflare.com https://*.cloudflareinsights.com https://*.cloudfront.net https://*.cr-relay.com https://*.default.com https://*.doubleclick.net https://*.dreamdata.cloud https://*.facebook.net https://*.g2crowd.com https://*.googletagmanager.com https://*.greenhouse.io https://*.hs-analytics.net https://*.hs-banner.com https://*.hs-scripts.com https://*.hsadspixel.net https://*.hubspot.com https://*.influ2.com https://*.licdn.com https://*.lijit.com https://*.mdb.tools https://*.midbound.net https://*.mxpnl.com https://*.opensend.com https://*.posthog.com https://*.redditstatic.com https://*.taboola.com https://*.usbrowserspeed.com https://*.zi-scripts.com https://*.zoominfo.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://*.cast.ai https://cdn.jsdelivr.net https://*.cloudflare.com https://*.googleapis.com 'unsafe-inline'; img-src 'self' https://*.bing.com https://*.cast.ai https://cdn-cookieyes.com https://*.clarity.ms https://*.facebook.com https://*.google.com https://*.google.lt https://*.googleusercontent.com https://*.hsforms.com https://*.hubspot.com https://*.influ2.com https://*.liadm.com https://*.lijit.com https://*.linkedin.com https://*.reddit.com https://*.sitelytics.tech https://t.co https://*.twitter.com https://*.w.org https://*.ytimg.com data: blob:; font-src 'self' https://*.gstatic.com data:; connect-src 'self' wss://*.webless.ai https://*.aggle.net https://*.ahrefs.com https://*.bing.com https://*.cast.ai https://cdn-cookieyes.com https://*.clarity.ms https://*.cloudflareinsights.com https://*.cloudfront.net https://*.cookieyes.com https://*.default.com https://*.doubleclick.net https://*.dreamdata.cloud https://*.g2.com https://*.google-analytics.com https://*.google.com https://*.hsappstatic.net https://*.hubapi.com https://*.hubspot.com https://*.influ2.com https://*.jsdelivr.net https://*.lijit.com https://*.linkedin.com https://*.midbound.net https://*.mixpanel.com https://*.posthog.com https://*.reddit.com https://*.sitelytics.tech https://*.taboola.com https://*.webless.ai https://*.zi-scripts.com https://*.zoominfo.com; media-src 'self' blob:; worker-src 'self' blob:; manifest-src 'self'; frame-src 'self' blob: https://*.default.com https://*.facebook.com https://*.google.com https://*.greenhouse.io https://*.lijit.com https://*.youtube.com; upgrade-insecure-requests; report-uri https://7y9pzd2u.uriports.com/reports/report; report-to default 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com data: *.lesandpit.org *.lowes-menswear.com.au *.lowes.com.au *.lowesleavers.com.au data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.addressfinder.io *.adsrvr.org *.creativecdn.com gum.criteo.com *.doubleclick.net *.ezy-way.online *.facebook.com *.flowpaper.com *.freshchat.com *.google-analytics.com *.googleapis.com *.google.com.au *.googletagmanager.com *.gstatic.com *.impactcdn.com *.kaspersky-labs.com *.lesandpit.org *.lowes-menswear.com.au *.lowes.com.au *.lowesleavers.com.au *.newrelic.com *.paypalobjects.com *.pxf.io *.statsigapi.net *.stripe.com *.trackedweb.net *.typekit.net lowes.api.useinsider.com *.vimeo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.trackedlink.net *.ddlnk.net www.feedoptimise.com cdn.feedoptimise.com *.dycdn.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.addressfinder.io *.bing.com *.braintreegateway.com *.creativecdn.com *.dotdigital.com *.doubleclick.net *.ezy-way.online *.facebook.com *.freshchat.com *.google.com.au *.google.co.nz *.googletagmanager.com *.google.com *.impactcdn.com *.kaspersky-labs.com *.lesandpit.org *.lowes-menswear.com.au *.lowes.com.au *.lowesleavers.com.au *.newrelic.com *.paypalobjects.com *.pxf.io *.reddit.com *.statsigapi.net *.stripe.com *.trackedweb.net *.vimeo.com *.gammaplatform.com *.ojrq.net *.casalemedia.com *.taboola.com *.cdninstagram.com *.ad-stir.com *.adnxs.com *.3lift.com *.yahoo.com *.google.lk *.smartadserver.com *.dmxleo.com *.bidswitch.net *.criteo.com *.fwmrm.net *.pubmatic.com *.openx.net *.media.net *.seedtag.com *.socdm.com *.360yield.com *.inmobi.com *.rlcdn.com *.outbrain.com *.rubiconproject.com *.teads.tv *.clmbtech.com *.1rx.io *.agkn.com *.adtech.ink *.missena.io *.contextweb.com *.admixer.net *.adingo.jp *.gumgum.com *.yieldmo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://api.addressfinder.io https://rum.hlx.page *.googleapis.com *.gstatic.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com www.feedoptimise.com cdn.feedoptimise.com *.dycdn.net dn1i8v75r669j.cloudfront.net dkpklk99llpj0.cloudfront.net ds9p2a60lh6fp.cloudfront.net d1y9qtn9cuc3xw.cloudfront.net d81mfvml8p5ml.cloudfront.net *.freshrelevance.com *.dotdigital.com https://cdn.searchspring.net/intellisuggest/is.min.js js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.addressfinder.io *.adsrvr.org *.amazonaws.com *.bing.com *.creativecdn.com *.criteo.com *.ezy-way.online *.facebook.net *.freshchat.com *.freshworksapi.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.hotjar.com *.impactcdn.com *.kaspersky-labs.com *.lesandpit.org *.lowes-menswear.com.au *.lowes.com.au *.lowesleavers.com.au *.redditstatic.com *.searchspring.io *.tiktok.com *.useinsider.com *.yimg.com *.gammaplatform.com *.ahrefs.com *.insightech.com *.criteo.net *.jsdelivr.net https://www.lowes.com.au 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://api.addressfinder.io webchat.dotdigital.com webchat.staging.dotdigital.com *.dycdn.net assets.braintreegateway.com *.addressfinder.io *.braintreegateway.com *.creativecdn.com *.dotdigital.com *.doubleclick.net *.ezy-way.online *.facebook.com *.freshchat.com *.google-analytics.com *.googleapis.com *.google.com.au *.googletagmanager.com *.google.com *.gstatic.com *.impactcdn.com *.kaspersky-labs.com *.lesandpit.org *.lowes-menswear.com.au *.lowes.com.au *.lowesleavers.com.au *.newrelic.com *.paypal.com *.paypalobjects.com *.pxf.io *.statsigapi.net *.stripe.com *.trackedweb.net *.typekit.net *.useinsider.com *.vimeo.com *.youtube.com *.jsdelivr.net *.insightech.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.addressfinder.io *.braintreegateway.com *.creativecdn.com *.dotdigital.com *.doubleclick.net *.ezy-way.online *.facebook.com *.freshchat.com *.google-analytics.com *.googleapis.com *.google.com.au *.googletagmanager.com *.google.com *.gstatic.com *.impactcdn.com *.kaspersky-labs.com *.lesandpit.org *.lowes-menswear.com.au *.lowes.com.au *.lowesleavers.com.au *.newrelic.com *.paypal.com *.paypalobjects.com *.pxf.io *.statsigapi.net *.stripe.com *.trackedweb.net *.typekit.net *.vimeo.com *.youtube.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://api.addressfinder.io *.googleapis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.dycdn.net *.freshrelevance.com wss://*.freshrelevance.com wss://*.dycdn.net dn1i8v75r669j.cloudfront.net *.dotdigital.com https://beacon.searchspring.io/beacon api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.addressfinder.io *.aimtell.io *.creativecdn.com *.criteo.com *.doubleclick.net *.ezy-way.online *.facebook.com *.flowpaper.com *.freshchat.com *.google.com.au *.google.co.nz *.googletagmanager.com *.gstatic.com *.impactcdn.com *.kaspersky-labs.com *.lesandpit.org *.lowes-menswear.com.au *.lowes.com.au *.lowesleavers.com.au *.paypalobjects.com *.pxf.io *.reddit.com *.redditstatic.com *.statsigapi.net *.stripe.com *.typekit.net *.useinsider.com *.vimeo.com *.youtube.com *.yimg.com *.ahrefs.com *.adsrvr.org *.tiktok.com *.insightech.com *.google.lk *.aimtell.com *.searchspring.io *.searchspring.net *.tiktokw.us 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com maxcdn.bootstrapcdn.com *.salesfire.co.uk *.klarnacdn.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.facebook.com *.googlesyndication.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.doubleclick.net *.facebook.com *.googlesyndication.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.salesfire.co.uk *.googleapis.com *.trustpilot.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.trackedlink.net *.ddlnk.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com * www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.salesfire.co.uk maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com * js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.salesfire.co.uk *.googleapis.com *.trustpilot.com https://www.lawsons.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com webchat.dotdigital.com webchat.staging.dotdigital.com downloads.mailchimp.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.salesfire.co.uk *.typekit.net *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://bam.nr-data.net/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.salesfire.co.uk *.smartmetrics.co.uk *.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'unsafe-inline' *.tulotero.es *.es.tulotero.net tulotero.es es.tulotero.net tulotero.net *.redsys.es api.fpjs.io static.tulotero.net tulotero-prod-es-public-files.s3.eu-west-3.amazonaws.com wa.appsflyer.com websdk.appsflyer.com wa.onelink.me wa.appsflyer.com websdk.appsflyer.com wa.onelink.me *.hotjar.com *.hotjar.io *.googleusercontent.com *.google.es *.google.com *.google-analytics.com *.googleapis.com www.googletagmanager.com www.googleadservices.com tpc.googlesyndication.com *.g.doubleclick.net td.doubleclick.net *.gstatic.com *.twitter.com t.co static.ads-twitter.com platform.twitter.com *.facebook.com connect.facebook.net fpnpmcdn.net graph.facebook.com bat.bing.com *.tiktok.com t.resfu.com data: blob: 'self'; frame-src 'self' sis.redsys.es td.doubleclick.net data: blob:; frame-ancestors *.tulotero.es *.es.tulotero.net tulotero.es es.tulotero.net tulotero.net *.redsys.es api.fpjs.io static.tulotero.net tulotero-prod-es-public-files.s3.eu-west-3.amazonaws.com wa.appsflyer.com websdk.appsflyer.com wa.onelink.me wa.appsflyer.com websdk.appsflyer.com wa.onelink.me *.hotjar.com *.hotjar.io 'self'; manifest-src 'self';  report-uri https://csp-reports.tulotero.net; block-all-mixed-content; 1
default-src https: data: 'unsafe-inline' 'unsafe-eval' blob: wss:; report-uri https://7ee2a4f517b54c13812e54076aefcb7d.myssl-uri.com/api/csp-report 1
font-src https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com magefan.com cm.magefan.com *.disqus.com *.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://static.hotjar.com https://v2.zopim.com https://static.zdassets.com https://configusa.veinteractive.com *.disqus.com *.googletagmanager.com *.facebook.net www.termsfeed.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com *.fontawesome.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://static.hotjar.com https://*.zendesk.com https://*.zdassets.com wss://widget-mediator.zopim.com *.google-analytics.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' 'unsafe-inline' https://cdn.cookielaw.org https://www.googletagmanager.com https://geolocation.onetrust.com https://maps.googleapis.com/ https://js.monitor.azure.com azure.com https://www.google-analytics.com https://www.google.com https://amrest.containers.piwik.pro https://amrest.piwik.pro/ppms.js https://cdnjs.cloudflare.com https://unpkg.com https://www.gstatic.com https://amrest.containers.piwik.pro/containers/; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://maps.googleapis.com/ https://js.monitor.azure.com azure.com https://www.google.com https://amrest.containers.piwik.pro https://amrest.piwik.pro/ppms.js https://cdnjs.cloudflare.com https://unpkg.com https://www.gstatic.com https://amrest.containers.piwik.pro/containers/; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://unpkg.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com blob: https://www.gstatic.com https://www.google.com https://cdnjs.cloudflare.com https://unpkg.com; base-uri 'self'; frame-ancestors 'self' 1
style-src 'self' 'unsafe-inline' https://fonts.gstatic.com; default-src 'self' 'nonce-m3Jmb8571vAYQJS9sqcBxg==' https://equityzen.com https://accounts.google.com/gsi/ http://js.hs-analytics.net http://platform.twitter.com http://static.ads-twitter.com http://widget.intercom.io http://widget.trustpilot.co http://widget.trustpilot.com https://*.bing.com https://*.clarity.ms https://*.clickcease.com https://*.cloudfront.net https://*.facebook.com https://*.google.com https://google.com https://*.hsforms.com https://*.ingest.sentry.io https://*.intercomcdn.com https://*.jsdelivr.net https://*.linkedin.com https://*.reddit.com https://*.redditstatic.com https://*.salesloft.com https://*.sentry.io https://*.stripe.com https://accounts.google.com https://ajax.googleapis.com https://analytics.google.com https://analytics.twitter.com https://api-iam.intercom.io https://api-js.mixpanel.com https://api.hubapi.com https://api.mixpanel.com https://api.sealionproxy.com https://app.hellosign.com https://app.hubspot.com https://cdnjs.cloudflare.com https://ci5.googleusercontent.com https://connect.facebook.net https://cta-service-cms2.hubspot.com https://files.readme.io https://fonts.googleapis.com https://fonts.gstatic.com https://forms.hscollectedforms.net https://js.hs-banner.com https://js.hsadspixel.net https://js.hscollectedforms.net https://js.hubspotfeedback.com https://kemcho-dev.s3.amazonaws.com https://kemcho-staging.s3.amazonaws.com https://kemcho.s3.amazonaws.com https://maxcdn.bootstrapcdn.com https://myip.duoduodev.com https://oss.maxcdn.com https://perf-na1.hsforms.com https://scout-cdn.salesloft.com https://stats.g.doubleclick.net https://t.co https://td.doubleclick.net https://track.hubspot.com https://www.finra.org https://www.google-analytics.com https://www.googleapis.com https://www.googletagmanager.com wss://nexus-websocket-a.intercom.io http://fonts.googleapis.com http://maxcdn.bootstrapcdn.com https://assets.calendly.com/ https://js.hubspot.com https://js.intercomcdn.com https://accounts.google.com/gsi/style 'unsafe-eval'; style-src-elem 'self' 'unsafe-inline' http://fonts.googleapis.com http://maxcdn.bootstrapcdn.com https://assets.calendly.com/ https://js.hubspot.com https://js.intercomcdn.com https://accounts.google.com/gsi/style 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: *.bettermarks.com stetic.com bettermarks.com; report-uri https://csp-report-pro00.bettermarks.com/csp/report-only 1
default-src 'self';   script-src 'self' 'unsafe-inline' https://cdn.usefathom.com https://maps.googleapis.com https://www.youtube.com https://resc.deskline.net;   style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://resc.deskline.net;   font-src 'self' https://fonts.gstatic.com;   img-src 'self' data: https://cdn.usefathom.com https://maps.googleapis.com https://maps.gstatic.com https://*.ytimg.com https://resc.deskline.net;   frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com;   connect-src 'self' https://cdn.usefathom.com https://webapi.deskline.net https://resc.deskline.net https://pmaps.feratel.com;   worker-src 'self' blob:;   object-src 'none';   base-uri 'self';   form-action 'self';  report-uri https://www.goerlitz.de/csp-report.php; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com data: cdn-prod.toolweb.com cdn.toolweb.ca *.fontawesome.com https://fonts.bunny.net 'self' data: maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com cdn-prod.toolweb.com cdn.toolweb.ca 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.hotjar.com *.doubleclick.net td.doubleclick.net cdn-prod.toolweb.com cdn.toolweb.ca https://*.moneris.com/ www.facebook.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com track.hubspot.com servedbyadbutler.com img.youtube.com www.facebook.com www.google.co.in twin-iq.kickfire.com ad.doubleclick.net *.clarity.ms c.bing.com maps.googleapis.com cdn-prod.toolweb.com cdn.toolweb.ca https://firebasestorage.googleapis.com *.hsforms.net *.hsforms.com 'self' data: *.pixriot.com *.storeimaging.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.hotjar.com js.hs-banner.com js.hs-scripts.com js.hs-analytics.net servedbyadbutler.com js.hscollectedforms.net js.hubspot.com js.hsadspixel.net tracker.gaconnector.com *.clarity.ms tag.simpli.fi twin-iq.kickfire.com js.usemessages.com static.hsappstatic.net cdn-prod.toolweb.com cdn.toolweb.ca https://*.moneris.com/ *.avada.io *.shopify.com *.hsforms.net *.hsforms.com *.gstatic.com maps.googleapis.com connect.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn-prod.toolweb.com cdn.toolweb.ca https://*.moneris.com/ *.fontawesome.com https://fonts.bunny.net *.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.doubleclick.net www.google-analytics.com maps.googleapis.com www.google.com *.hotjar.com cta-service-cms2.hubspot.com forms.hscollectedforms.net api.hubapi.com api.hubspot.com wss://ws.hotjar.com *.hotjar.io *.clarity.ms www.facebook.com static.hsappstatic.net cdn-prod.toolweb.com cdn.toolweb.ca https://get.geojs.io *.avada.io t.elasticsuite.io *.hsforms.net *.hsforms.com places.googleapis.com www.googleapis.com *.pixriot.com *.storeimaging.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src maxcdn.bootstrapcdn.com fonts.googleapis.com fonts.gstatic.com *.paypal.com *.paypalobjects.com *.typekit.net *.gstatic.com applepay.cdn-apple.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.facebook.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.youtube-nocookie.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de cdn.chatbot.com ct.pinterest.com *.criteo.com *.criteo.net www.facebook.com shop4runners.cr.rlvs.co.uk www.awin1.com d.c.cdnsrv.de mea.shop4runners.com mea.shop4runners.eu mea.shop4runners.at mea.shop4runners.ch mea.shop4runners.fr mea.runnershub.de mea.runnershub.bg mea.runnershub.eu mea.barfuss-shop.de mea.barefoot-shop.com *.attrxs.de *.getblue.io *.sovendus.com *.sovendus-connect.com bid.g.doubleclick.net td.doubleclick.net www.googletagmanager.com *.ad-srv.net js.mollie.com *.paypal.com *.sandbox.paypal.com *.google.com google.com https://c.paypal.com *.loadbee.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com magefan.com cm.magefan.com https: www.googleadservices.com *.g.doubleclick.net *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.gstatic.com *.google.com *.google.de *.google.at *.google.ch *.google.eu *.google.fr https://images.unsplash.com https://www.mollie.com *.paypal.com *.sandbox.paypal.com https://api.mapbox.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ img.metaffiliation.com action.metaffiliation.com https://c.paypal.com https://b.stats.paypal.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.onefid.com maps.googleapis.com api.recova.ai assets.revlifter.io bat.bing.com cdn.chatbot.com *.consentmanager.net connect.facebook.net ct.pinterest.com s.pinimg.com *.criteo.com www.awin1.com www.dwin1.com the.sciencebehindecommerce.com www.ladenzeile.de tracking.s24.com d.c.cdnsrv.de smct.co s.uicdn.com *.attrxs.de *.gsitrix.com *.corporate-benefits.eu *.getblue.io *.wewomedia.com googleads.g.doubleclick.net www.google.com www.googleadservices.com www.google-analytics.com analytics.google.com *.googletagmanager.com tagmanager.google.com *.ad-srv.net js.mollie.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.google.com *.cdn-apple.com s7.addthis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ action.metaffiliation.com img.metaffiliation.com google.com https://c.paypal.com *.loadbee.com awi.shop4runners.fr https://awi.shop4runners.fr 'self' 'unsafe-inline' 'unsafe-eval'; style-src maxcdn.bootstrapcdn.com fonts.googleapis.com *.googletagmanager.com tagmanager.google.com https://static.klaviyo.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https://api.batteryincluded.io api.paypal.com maps.googleapis.com api.recova.ai devt.revlifter.com bat.bing.com bat.bing.net cdn.chatbot.com *.consentmanager.net www.facebook.com connect.facebook.net ct.pinterest.com www.pinterest.com *.criteo.com the.sciencebehindecommerce.com www.wepowerconnections.com tracking.s24.com mea.shop4runners.com mea.shop4runners.eu mea.shop4runners.at mea.shop4runners.ch mea.shop4runners.fr mea.runnershub.de mea.runnershub.bg mea.runnershub.eu mea.barfuss-shop.de mea.barefoot-shop.com r.nunami.ai *.gsitrix.com *.wewomedia.com *.sovendus.com *.sovendus-connect.com www.googleadservices.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.de *.google.at *.google.ch *.google.eu *.google.fr *.googlesyndication.com *.paypal.com *.sandbox.paypal.com ekr.zdassets.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ action.metaffiliation.com img.metaffiliation.com google.com *.loadbee.com awi.shop4runners.fr 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.usefathom.com; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self' https://media.4dayweek.io https://cdn.4dayweek.io https://4dayweek.io https://fourdayweek.nyc3.cdn.digitaloceanspaces.com https://images.unsplash.com https://flagcdn.com https://cdn.usefathom.com data:; connect-src 'self' https://*.usefathom.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self' https://accounts.google.com 1
object-src 'none';base-uri 'self';script-src 'nonce-N1DYkLfG3nN3hjEDzyettw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.googleapis.com *.gstatic.com https://static.lyra.com/static/ *.fontawesome.com https://cdnjs.cloudflare.com https://applepay.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://secure.lyra.com/vads-payment/ https://api.lyra.com/api-payment/ https://static.lyra.com/static/ *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * js.stripe.com https://secure.lyra.com/vads-payment/ https://static.lyra.com/static/ *.payplug.com *.dalenys.com https://applepay.cdn-apple.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com https://js.stripe.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com https://secure.lyra.com/static/latest/images/type-carte/ https://static.lyra.com/static/ https://secure.lyra.com/vads-payment/ https://secure-magenta.dalenys.com https://redchamps.com *.authorize.net assets.secure.checkout.visa.com sandbox.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com js.stripe.com https://api.lyra.com/api-payment/ https://static.lyra.com/static/ https://cdnjs.cloudflare.com https://secure-magenta.dalenys.com https://applepay.cdn-apple.com api-qa.payplug.com cdn-qa.payplug.com api.payplug.com cdn.payplug.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com https://checkout.stripe.com/checkout.js https://js.stripe.com/v3/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com https://static.lyra.com/static/ *.fontawesome.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://secure-magenta.dalenys.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com https://secure.lyra.com/vads-payment/ https://api.lyra.com/api-payment/ *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src https://secure.lyra.com/vads-payment/ https://api.lyra.com/api-payment/ https://static.lyra.com/static/ 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://*.googlesyndication.com https://*.doubleclick.net https://stats.wp.com https://platform.twitter.com https://www.youtube.com https://www.google.com https://www.gstatic.com https://cdnjs.cloudflare.com https://cdn.onesignal.com https://api.onesignal.com https://s0.wp.com https://c0.wp.com https://widgets.wp.com https://*.eomail1.com https://maps.googleapis.com data:; style-src 'self' 'unsafe-inline' https: data:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https://www.youtube.com https://platform.twitter.com https://*.doubleclick.net https://www.google.com https://www.gstatic.com https://recaptcha.google.com; media-src 'self' https: data:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://js.hsforms.net https://js-na2.hsforms.net https://js.hsforms.com https://www.google.com https://www.gstatic.com https://*.chilipiper.com https://*.iubenda.com https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://connect.facebook.net https://bat.bing.net https://bat.bing.com https://analytics.ahrefs.com https://pf.biscred.com https://script.getswan.com https://*.getswan.com https://js-na2.hs-scripts.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hsadspixel.net https://*.hscollectedforms.net https://*.usemessages.com; style-src 'self' 'unsafe-inline' https://*.iubenda.com; img-src 'self' data: https:; font-src 'self'; connect-src 'self' https://pro.ip-api.com https://*.api.sanity.io https://*.apicdn.sanity.io wss://*.api.sanity.io https://forms.hsforms.com https://forms-na2.hsforms.com https://api.hsforms.com https://forms.hubspot.com https://*.chilipiper.com https://*.iubenda.com https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.facebook.com https://bat.bing.com https://bat.bing.net https://analytics.ahrefs.com https://pf.biscred.com https://*.getswan.com https://track.hubspot.com https://*.hs-analytics.net https://*.hscollectedforms.net; frame-src https://*.hsforms.net https://*.hsforms.com https://www.google.com https://*.chilipiper.com https://www.googletagmanager.com https://td.doubleclick.net https://*.iubenda.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self' https://forms-na2.hsforms.com; object-src 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.clarity.ms https://connect.podium.com https://s.adroll.com https://d.adroll.com https://flask.nextdoor.com https://js.appboycdn.com https://c.hrzn-nxt.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://use.fontawesome.com https://connect.podium.com https://tags.srv.stackadapt.com; img-src 'self' data: https: blob:; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com https://use.fontawesome.com https://cdn.jsdelivr.net; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://analytics.google.com https://mind-flayer.podium.com https://connect.podium.com https://app.launchdarkly.com https://events.launchdarkly.com https://d.adroll.com https://s.adroll.com https://flask.nextdoor.com https://www.clarity.ms https://apexchat.azurewebsites.net; frame-src 'self' https://www.google.com https://www.youtube.com https://www.googletagmanager.com https://player.vimeo.com; media-src 'self' https://assets.podium.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self' 1
font-src *.gstatic.com fonts.googleapis.com fonts.gstatic.com *.fontawesome.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.monetico-services.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.monetico-services.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://dam.meublesflahaut.adexos.cooking https://dam.meubles-flahaut.fr *.google.com *.gstatic.com *.doubleclick.net *.imgix.net a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org cdn.doofinder.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com *.meubles-flahaut.com *.meublesflahaut.adexos.cooking data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.facebook.net *.facebook.com *.imgix.net *.axept.io *.googletagmanager.com *.google.com *.gstatic.com *.doubleclick.net cdn.doofinder.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com http://cdn.doofinder.com https://browser.sentry-cdn.com *.avada.io https://cdnjs.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.googletagmanager.com *.doofinder.com fonts.googleapis.com *.fontawesome.com https://fonts.googleapis.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.meubles-flahaut.com *.meublesflahaut.adexos.cooking 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.facebook.com *.axept.io *.google-analytics.com *.google.com *.doubleclick.net *.monetico-services.com *.doofinder.com wss://*.doofinder.com maps.googleapis.com  http://eu1-search.doofinder.com *.googletagmanager.com https://*.ingest.sentry.io https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.klarnacdn.net maxcdn.bootstrapcdn.com *.cookiebot.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com *.cookiebot.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.googletagmanager.com *.awin1.com *.zenaps.com *.fls.doubleclick.net *.klarna.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://plumrocket.com *.cookiebot.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.vimeocdn.com i.ytimg.com validator.swagger.io *.awin1.com *.zenaps.com *.wepowerconnections.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.klarna.com *.klarnaevt.com *.klarnacdn.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.cookiebot.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com www.sandbox.paypal.com t.paypal.com amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com www.googletagmanager.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com chimpstatic.com downloads.mailchimp.com *.list-manage.com widget.freshworks.com m2epro.freshdesk.com *.klarna.com *.klarnacdn.net *.klarnaservices.com player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cookiebot.com *.yotpo.com https://chimpstatic.com https://www.dwin1.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com downloads.mailchimp.com widget.freshworks.com m2epro.freshdesk.com *.klarnacdn.net maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com *.cookiebot.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com *.snplow.net commerce.adobedc.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io *.wepowerconnections.com https://the.sciencebehindecommerce.com widget.freshworks.com m2epro.freshdesk.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.cookiebot.com *.yotpo.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' ; script-src 'unsafe-eval' 'unsafe-inline' 'self' player.vimeo.com youtube-nocookie.com youtube.com google-analytics.com googletagmanager.com connect.facebook.net https:;; object-src 'none'; style-src 'unsafe-inline' 'self' googletagmanager.com https:;; img-src 'self' data: https:;; media-src 'self' player.vimeo.com youtube-nocookie.com https:;; frame-src 'self' player.vimeo.com youtube-nocookie.com https:;; frame-ancestors 'self'; child-src 'self' player.vimeo.com youtube-nocookie.com https:;; font-src 'self' data: https:;; connect-src 'self' player.vimeo.com youtube-nocookie.com https:;; report-uri /report-csp-violation 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com fontawesome.com *.fontawesome.com klaviyo.com *.klaviyo.com *.cloudflare.com *.userway.org *.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com kaptcha.com *.kaptcha.com klaviyo.com *.klaviyo.com *.cloudfront.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.adobedtm.com  *.zdassets.com blob: klaviyo.com *.klaviyo.com magecomp.com *.magecomp.com *.cloudfront.net bing.com *.bing.com *.bat.bing.com *.google.co.in *.userway.org www.facebook.com connect.facebook.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page 'self' *.googleapis.com *.gstatic.com *.google.co.in *.googletagmanager.com *.google-analytics.com *.paypal.com *.facebook.net connect.facebook.net *.cloudfront.net *.stripe.com *.klarna.com *.klarnacdn.net unpkg.com cdn.jsdelivr.net newrelic.com *.userway.org nr-data.net kaptcha.com *.kaptcha.com *.zdassets.com klaviyo.com *.klaviyo.com *.hotjar.com *.zuko.io *.cardinalcommerce.com *.sentry.io https://*.embedsocial.com https://*.zdassets.com bing.com *.bing.com *.bat.bing.com https://*.hotjar.com https://*.crazyegg.com https://*.zopim.com *.hotjar.io *.grammarly.com *.helpscout.net *.fullstory.com rum.hlx.page chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.trustpilot.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.gstatic.com *.google.com *.klaviyo.com *.cloudfront.net *.typekit.net *.google.co.in *.userway.org downloads.mailchimp.com assets.braintreegateway.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com klaviyo.com *.klaviyo.com wss://*.hotjar.com *.google.co.in *.helpscout.net *.cloudfront.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io nr-data.net kaptcha.com *.kaptcha.com *.browser-intake-datadoghq.com klaviyo.com *.klaviyo.com wss://*.zopim.com *.zuko.io *.google-analytics.com *.stripe.com *.klarna.com *.klarnacdn.net *.facebook.com connect.facebook.net *.hotjar.com https://*.hotjar.com wss://*.hotjar.com *.hotjar.io *.zdassets.com *.google.co.in *.stats.g.doubleclick.net bing.com *.bing.com *.bat.bing.com *.dpm.demdex.net *.amcglobal.sc.omtrdc.net *.googleadservices.com *.googletagmanager.com newrelic.com *.paypalobjects.com *.cardinalcommerce.com *.splitit.com *.amazonaws.com *.userway.org *.trustpilot.com *.fullstory.com *.helpscout.net www.merchant-center-analytics.goog *.cloudfront.net https://byi-ai.printxpand.com form-assets.mailchimp.com *.intuit.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-5GQe6VKSD-rlA-m41su13g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
base-uri 'self';connect-src https://*.go-mpulse.net https://*.akstat.io 'self' https: *.sentry.io *.amplitude.com *.care.com *.carezen.net *.signalfx.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net font.google.com analytics.google.com tagmanager.google.com www.google.com https://*.hotjar.com https://vc.hotjar.io https://content.hotjar.io https://events.hotjar.io https://surveystats.hotjar.io wss://*.hotjar.com https://geolocation.onetrust.com jsv3.recruitics.com accounts.google.com;default-src 'self' wss://*.care.com *.care.com *.careapis.com *.carezen.net *.cdn-care.com care.com cdn-care.com www.gstatic.com www.google.com *.googlesyndication.com tags.tiqcdn.com tags-eu.tiqcdn.com tk.getwork.com tr.snapchat.com shareasale.com *.doubleclick.net apps.rokt.com bid.g.doubleclick.net tags.w55c.net *.linkedin.com www.pinterest.com carecom.sjv.io staging-pt.ispot.tv ct.pinterest.com;font-src 'self' data: https://www.care.com https://www.dev.carezen.net https://www.stg.carezen.net fonts.gstatic.com https://script.hotjar.com;frame-ancestors 'self';img-src data: blob: *;object-src 'none';script-src https://*.go-mpulse.net 'nonce-d8d37572e9f8b26d9f3d87e1dc77efd9' 'self' *.akamaihd.net *.care.com *.careapis.com *.carezen.net *.cdn-care.com *.cloudfront.net *.googlesyndication.com *.sift.com *.monetate.net acsbapp.com analytics.tiktok.com apps.rokt.com bat.bing.com care.com cdn-care.com cdn.pdst.fm connect.facebook.net d.impactradius-event.com googleads.g.doubleclick.net securepubads.g.doubleclick.net maps.googleapis.com s.pinimg.com ssl.google-analytics.com tags-eu.tiqcdn.com tags.tiqcdn.com wss://*.care.com www.emjcd.com www.google-analytics.com www.google.com www.googleadservices.com *.googletagmanager.com www.gstatic.com tr.outbrain.com tags.w55c.net clarity.ms staging-pt.ispot.tv tracker.mnixdata.com *.mountain.com tagmanager.google.com s.go-mpulse.net collector-12308.tvsquared.com js.adsrvr.org https://static.hotjar.com https://script.hotjar.com https://cdn.cookielaw.org assets.calendly.com jsv3.recruitics.com accounts.google.com 'nonce-b5dce33ecbe10ae585e52229dd305009' 'strict-dynamic';frame-src 'self' alchemy.veriff.com www.google.com recaptcha.google.com bid.g.doubleclick.net 12355078.fls.doubleclick.net s.go-mpulse.net carecom.sjv.io apps.rokt.com tr.snapchat.com 3239339.fls.doubleclick.net https://vars.hotjar.com insight.adsrvr.org match.adsrvr.org https://www.youtube.com/ https://ots2-qa.learningcaregroup.com/ScheduleATour/ https://ots2.learningcaregroup.com/ScheduleATour/ td.doubleclick.net https://calendly.com securepubads.g.doubleclick.net *.googlesyndication.com ep2.adtrafficquality.google tagging.care.com accounts.google.com;style-src 'self' 'unsafe-inline' tagmanager.google.com fonts.google.com fonts.googleapis.com https://static.hotjar.com https://script.hotjar.com https://cdn.cookielaw.org 'nonce-b5dce33ecbe10ae585e52229dd305009';style-src-attr 'self' 'unsafe-inline' tags.tiqcdn.com tags-eu.tiqcdn.com bat.bing.com;upgrade-insecure-requests;report-uri https://o466311.ingest.sentry.io/api/6004104/security/?sentry_key=2c284ff228ac4d0e8b8ad9ea17497eee&sentry_release=hp-vhp-mfe%401.377.3&sentry_environment=prod 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com upstream.heidipay.com sbx-upstream.heidipay.io *.fontawesome.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com storage.googleapis.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com cdn.klarna.com magefan.com cm.magefan.com *.disqus.com *.cookiebot.com https://*.googleusercontent.com https://api.newvisibility.it www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com bat.bing.com www.google.it www.facebook.com https://maps.googleapis.com https://maps.gstatic.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com upstream.heidipay.com sbx-upstream.heidipay.io int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com www.google.com www.gstatic.com *.disqus.com gdpr.newvisibility.it *.cookiebot.com *.localhost:* js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com bat.bing.com *.clarity.ms connect.facebook.net https://maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com gdpr.newvisibility.it assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com upstream.heidipay.com sbx-upstream.heidipay.io int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com *.cookiebot.com ws://*.localhost:*/livereload api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com bat.bing.com *.clarity.ms connect.facebook.net https://maps.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *.fontawesome.com  *.googleapis.com *.googletagmanager.com fonts.gstatic.com youtube.com *.google-analytics.com *.cloudflare.com www.youtube.com analytics.google.com *.facebook.com *.facebook.net *.cloudflareinsights.com *.stripe.com *.google.com google.com *.hotjar.io *.hotjar.com fast.fonts.net cdn.jsdelivr.net googleads.g.doubleclick.net capi-automation.s3.us-east-2.amazonaws.com wss://ws.hotjar.com *.unpkg.com unpkg.com stats.g.doubleclick.net *.google.com.br *.googleadservices.com *.doubleclick.net *.google.ca google.ca *.tiktok.com *.tiktokcdn-us.com *.ttwstatic.com *.votervoice.net *.google.cd google.cd *.rsvpify.com *.google.com.* www.google.com .google.co.*; object-src *; img-src * data: blob:; frame-src *; font-src * data: blob:; report-uri /report-csp-violation 1
default-src 'self' media1.jpc.de lesen.de; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; script-src 'self' media1.jpc.de lesen.de 'nonce-2Xt6j70Be4s+xOqbR2IUKEkMaCdZEfOX/cAaWwbA0SI87PN6PT3mUMPU/VqFi8cPhLYXUhap3+haByAfuZtaYw==' 'report-sample'; style-src 'self' media1.jpc.de lesen.de 'report-sample' 'unsafe-inline'; font-src 'self' media1.jpc.de lesen.de; img-src 'self' media1.jpc.de lesen.de data:; connect-src 'self' media1.jpc.de lesen.de https://use.jpc.de; report-uri /csp/; report-to csp-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://*.jeux.ca https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://app.termly.io https://www.googletagmanager.com https://www.google-analytics.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.sportradar.com https://cdn.jsdelivr.net; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https: https://www.google-analytics.com https://www.googletagmanager.com https://static.cloudflareinsights.com; media-src 'self' blob:; frame-src * blob:; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; 1
font-src fonts.gstatic.com use.typekit.net *.googleapis.com *.gstatic.com data: *.typekit.net *.klarnacdn.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com https://*.klaviyo.com consentcdn.cookiebot.com consentcdn.cookiebot.eu *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com https://*.doubleclick.net https://*.google.com https://*.hotjar.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.trustpilot.com *.twitter.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com https://*.klaviyo.com imgsct.cookiebot.com imgsct.cookiebot.eu *.trackedlink.net https://*.doubleclick.net https://*.google.com https://*.google.co.uk *.cloudfront.net *.klarna.com *.klarnaevt.com *.klarnacdn.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.cloudflare.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://static.klaviyo.com consent.cookiebot.com consentcdn.cookiebot.com consent.cookiebot.eu consentcdn.cookiebot.eu *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com https://*.pcapredict.com/js/sensor.js https://www.googletagmanager.com https://www.google.com https://*.hotjar.com https://*.doubleclick.net https://secure.leadforensics.com https://*.googleapis.com *.klarna.com *.klarnacdn.net *.klarnaservices.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com *.trustpilot.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https://static.klaviyo.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com https://*.googleapis.com *.typekit.net *.klarnacdn.net unsafe-inline assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io *.googleapis.com https://*.klaviyo.com consentcdn.cookiebot.com consentcdn.cookiebot.eu consent.cookiebot.com consent.cookiebot.eu *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com https://*.hotjar.com https://*.adobedc.net https://*.nr-data.net *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.stripe.com klarna.com *.link.com *.amazon.com *.cloudflare.com *.twitter.com *.twimg.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://233a377d-1420-456f-9376-009a10f60e15.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.google-analytics.com https://www.googletagmanager.com https://analytics.tiktok.com https://script.crazyegg.com https://cdn.snigelweb.com https://connect.facebook.net https://app1.campus-site.com https://www.dubcdn.com https://s.pinimg.com https://cdn.onesignal.com https://*.doubleclick.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com; connect-src 'self' https://analytics.tiktok.com https://*.tiktok.com https://*.analytics.google.com https://www.google.com https://*.snapchat.com https://script.crazyegg.com https://tags.srv.stackadapt.com https://*.anonymised.io https://pagead2.googlesyndication.com https://*.doubleclick.net https://*.id5-sync.com https://ct.pinterest.com; frame-src 'self' https://hub.universitycompare.com https://www.google.com; worker-src 'self' blob:; 1
object-src 'none';base-uri 'self';script-src 'nonce-UTA_qYfQFes1XxYqj7Uyzg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://media.flixcar.com/ *.fontawesome.com use.typekit.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.facebook.com *.googlesyndication.com *.tiktok.com https://form.payway.com.hr https://formtest.payway.com.hr https://ipgtest.monri.com/ https://ipg.monri.com/ https://formtest.wspay.biz/ https://form.wspay.biz/ 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.googletagmanager.com https://ipgtest.monri.com/ https://ipg.monri.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com rt.flix360.com https://media.flixfacts.com/ https://media.flixcar.com/ *.hsforms.net *.hsforms.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com https://cdn.jsdelivr.net *.tiktok.com https://media.flixfacts.com/ https://media.flixcar.com/ https://ipgtest.monri.com/ https://ipg.monri.com/ *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com https://media.flixfacts.com/ https://media.flixcar.com/ *.fontawesome.com use.typekit.net p.typekit.net https://ipgtest.monri.com/ https://ipg.monri.com/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://eb131b7a-da99-45cd-9ef2-83eecc3cc0db.sansec.watch/; report-to report-endpoint; 1
child-src blob:; connect-src *.cookielaw.org *.onetrust.com www.google-analytics.com stats.g.doubleclick.net analytics.google.com https://metrics.hotjar.io/ https://gid-requests.my.onetrust.com/ *.bing.com *.mapbox.com https://bam.nr-data.net/ noembed.com https://cdn.plyr.io/ *.hotjar.io https://www.google.co.in/  wss://ws.hotjar.com/ https://nestiolistings.com/  https://adservice.google.com/ https://www.windsorcommunities.com/ api.nelioabtesting.com www.google.com googleads.g.doubleclick.net pagead2.googlesyndication.com *.taggbox.com www.googleadservices.com *.meetelise.com https://meetelise.pubnubapi.com/ *.tour24.io https://connect.facebook.net/ https://region1.google-analytics.com/ https://www.facebook.com/ https://api.rentgrata.com/ https://google.com/ https://notify.bugsnag.com/ https://cdnjs.cloudflare.com/ https://unpkg.com/ *.rentgrata.com https://www.youtube.com/ https://youtube.com/ https://windsorcommunities.expenseguide.com/; default-src 'self'; font-src https://fonts.gstatic.com/ https://stackpath.bootstrapcdn.com/ data: https://www.windsorcommunities.com/ https://cdn.tagbox.com/ https://cloud.tagbox.com/ ; frame-src www.google.com/ www.youtube.com *.matterport.com www.vpix.net *.invisionstudio.com *.panoskin.com *.doubleclick.net https://www.windsorcommunities.com/ https://youtu.be/ sightmap.com realync.com *.realync.com *.taggbox.com *.twitter.com www.googletagmanager.com/ *.panoskin.com *.player.vimeo.com *.vimeo.com *.youtu.be.com *.youtube.com https://widget.rentgrata.com/ https://www.facebook.com/ *.tourbuilder.com https://www.youtube-nocookie.com/; img-src *.cookielaw.org/ www.googletagmanager.com/ bat.bing.com/ www.google.co.in/ www.google-analytics.com/ www.google.com/ data: https://i.ytimg.com/ cdngeneralcf.rentcafe.com/ https://pp.walk.sc/  blob: https://www.windsorcommunities.com/ *.nelioabtesting.com/ *.exactdn.com/ googleads.g.doubleclick.net/ sp-ao.shortpixel.ai/ *.taggbox.com  ui-avatars.com/ cloud.tagbox.com/  https://www.facebook.com/ https://fonts.gstatic.com/ https://www.googleadservices.com/  https://i.vimeocdn.com/ https://spcdn.shortpixel.ai/ https://cdn.sightmap.com/ https://connect.facebook.net/ https://cdn.rentcafe.com https://d1uty3jitgnf7i.cloudfront.net/; media-src https://cloud.tagbox.com/ https://www.windsorcommunities.com/ https://images.taggbox.com/; object-src 'none'; script-src 'unsafe-eval' 'unsafe-inline' code.jquery.com www.googletagmanager.com cdn.cookielaw.org ajax.googleapis.com unpkg.com  *.funnelleasing.com www.google.com www.gstatic.com www.googleoptimize.com www.google-analytics.com bat.bing.com *.hotjar.com https://cdn.callrail.com/ www.youtube.com blob: https://www.windsorcommunities.com/ sightmap.com googleads.g.doubleclick.net api.mapbox.com www.googleadservices.com *.cloudflare.com cloud.tagbox.com *.taggbox.com *.twitter.com *.newrelic.com *.cachefly.net data: cdn.skypack.dev https://connect.facebook.net/  https://region1.google-analytics.com/ https://widget.rentgrata.com/ https://cdn.eliseai.com/ https://windsorcommunities.expenseguide.com/; style-src 'unsafe-inline' https://fonts.googleapis.com/  https://stackpath.bootstrapcdn.com/ https://api.mapbox.com/ https://www.windsorcommunities.com/ https://unpkg.com/ https://cdnjs.cloudflare.com/ https://cdn.tagbox.com/ *.taggbox.com https://cdn.jsdelivr.net/; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.google-analytics.com https://*.posthog.com https://*.i.posthog.com https://app.cal.com https://*.cal.com https://consent.cookiebot.com https://consentcdn.cookiebot.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.posthog.com https://*.i.posthog.com https://app.cal.com https://*.cal.com https://consentcdn.cookiebot.com; frame-src 'self' https://app.cal.com https://*.cal.com https://*.googletagmanager.com https://consentcdn.cookiebot.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
script-src-elem *.therascience.com *.googletagmanager.com *.clarity.ms *.criteo.com *.dwin1.com *.cawita.com *.doubleclick.net *.cookiebot.com *.hotjar.com *.skeepers.io *.avis-verifies.com; font-src cdn.jsdelivr.net fonts.gstatic.com cdn.almapay.com https://cdn.checkout.com static.runconverge.com *.facebook.net *.facebook.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.google.com *.pinimg.com ssl.gstatic.com www.gstatic.com https://fonts.gstatic.com https://ws.colissimo.fr *.fontawesome.com *.googleapis.com *.gstatic.com https://cdnjs.cloudflare.com 'self' data: *.checkout.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.runconverge.com *.facebook.net *.facebook.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.google.com *.pinimg.com ssl.gstatic.com www.gstatic.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.getalma.eu *.almapay.com/ *.stripe.com/ *.checkout.com/ *.adyen.com/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://js.checkout.com *.klarna.com *.runconverge.com *.facebook.net *.facebook.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.google.com *.pinimg.com ssl.gstatic.com www.gstatic.com https://www.youtube.com https://www.googletagmanager.com/ *.addthis.com *.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.xtento.com *.checkout.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com maps.gstatic.com maps.googleapis.com a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org static.runconverge.com *.facebook.net *.facebook.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.google.com *.pinimg.com ssl.gstatic.com www.gstatic.com https://maps.googleapis.com https://maps.gstatic.com https://ws.colissimo.fr https://*.tile.openstreetmap.fr http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com *.disqus.com https://img.youtube.com *.addthisedge.com *.twitter.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com 'self' data: www.xtento.com cdn.xtento.com *.therascience.com *.dmxleo.com *.openstreetmap.org *.hotjar.com *.hotjar.io *.cookiebot.com *.google.fr *.googleapis.com *.googlesyndication.com *.gstatic.com *.skeepers.io *.avis-verifies.com *.bidswitch.net *.doubleclick.net *.media.net *.casalmedia.com *.criteo.com *.postrelease.com *.id5-sync.com *.360yield.com *.pubmatic.com *.outbrain.com blob: *.checkout.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.jsdelivr.net www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com maps.googleapis.com https://*.checkout.com *.klarnacdn.net *.runconverge.com *.facebook.net *.facebook.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.google.com *.pinimg.com ssl.gstatic.com www.gstatic.com *.plugins.emarsys.net *.scarabresearch.com https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://ws.colissimo.fr https://api.mapbox.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.disqus.com *.fontawesome.com *.googleapis.com *.gstatic.com *.addthis.com *.moatads.com *.addthisedge.com *.twitter.com *.avada.io https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.xtento.com cdn.xtento.com *.therascience.com *.colissimo.fr *.clarity.ms *.openstreetmap.org *.cookiebot.com *.hotjar.com *.hotjar.io *.googlesyndication.com *.skeepers.io *.avis-verifies.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.jsdelivr.net fonts.googleapis.com https://cdn.checkout.com static.runconverge.com *.facebook.net *.facebook.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.google.com *.pinimg.com ssl.gstatic.com www.gstatic.com https://fonts.googleapis.com https://ws.colissimo.fr https://api.mapbox.com *.fontawesome.com https://cdnjs.cloudflare.com unsafe-inline assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.getalma.eu *.almapay.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://js.checkout.com *.klarnaevt.com *.runconverge.com *.facebook.net *.facebook.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.google.com *.pinimg.com ssl.gstatic.com www.gstatic.com *.scarabresearch.com *.eservice.emarsys.net https://nominatim.openstreetmap.org http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com t.elasticsuite.io *.checkout.com *.browser-intake-datadoghq.com *.colissimo.fr *.mapbox.com *.clarity.ms *.openstreetmap.org *.hotjar.com *.hotjar.io *.therascience.com *.cookiebot.com *.googleapis.com *.googlesyndication.com *.skeepers.io *.avis-verifies.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self'; frame-src 'self'; media-src 'self'; form-action 'self'; report-uri /.netlify/functions/csp-report; report-to csp-endpoint 1
default-src 'self'; frame-ancestors 'self'; base-uri 'self'; upgrade-insecure-requests; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.paypal.com/sdk/js https://widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js https://integrations.etrusted.com/applications/widget.js/v2 https://attachments.etrusted.com/customer-reviews/ https://www.youtube.com/iframe_api https://app.usercentrics.eu/browser-ui/ https://api.usercentrics.eu/settings/ https://privacy.cookiebox.pro/privacy https://widgets.trustedshops.com/js/ https://analytics.casando.de/ https://static.trbo.com/plugin/ https://www.dwin1.com https://widgets.trustedshops.com/assets/trustbadge.esm.js https://widgets.trustedshops.com/assets/; style-src 'self' 'unsafe-inline' https://integrations.etrusted.com/applications/testimonial-service-widget/1.6.4/index.css; img-src 'self' data: https://cdn.casando.de/assets/ https://integrations.etrusted.com/applications/testimonial-service-widget/ https://attachments.etrusted.com/customer-reviews/ https://www.awin1.com https://cdn-staging-shop.apps.qa.holz-richter.de/assets/ https://widgets.trustedshops.com/assets/; font-src 'self'; connect-src 'self' wss: https://www.casando.de/chatRest/ https://analytics.casando.de/ https://api.usercentrics.eu/settings/CyAPjMDdG/ https://integrations.etrusted.com/configurations/v1/ https://integrations.etrusted.com/manifests/v1/ https://integrations.etrusted.com/feeds/testimonial-service/v1/; frame-src https://www.youtube.com/embed/ https://www.google.com/maps/embed/v1/place https://casando.mptp.parkside.at/; child-src https://www.youtube.com/embed/ https://www.google.com/maps/embed/v1/place https://casando.mptp.parkside.at/; media-src 'self'; object-src 'none'; worker-src 'none'; manifest-src 'none'; form-action 'self' https://terrassenplaner.casando.de; report-to csp-endpoint; report-uri /csp-report 1
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/health_google 1
default-src 'self' bcbolt-uktv.akamaized.net uktv.brightcovecdn.com *.brightcove.net; script-src 'self' 'nonce-NzExNTFjN2QtZjRiYS00ZGZhLTgyNTktNjZmOWE0NDMxNzFk' 'sha256-PGOSsZtvDKqZ+myXb5DE395jRSa3aOFSIEbmfmin1yc=' 'sha256-f1m9UGZ2ljCQQQ1wMdfXdMrRTWacFIRtepSeAClkohI=' *.2cnt.net *.adalyser.com *.boltdns.net uktv.brightcovecdn.com *.brightcove.com *.brightcove.net cdn-ukwest.onetrust.com client.rum.us-east-1.amazonaws.com *.doubleclick.net *.fwmrm.net connect.facebook.net js.appboycdn.com *.googletagmanager.com mp.simplestream.com tag.aticdn.net tags.tiqcdn.com uktvltd.hb.omtrdc.net vjs.zencdn.net; style-src 'self' 'unsafe-inline' use.fontawesome.com; img-src 'self' data: https: *.2cnt.net *.adalyser.com *.ati-host.net *.brightcove.com uktv.brightcovecdn.com *.fwmrm.net *.doubleclick.net appboy-images.com braze-images.com c4-ads-creative-prod.s3.eu-west-1.amazonaws.com cdn-ukwest.onetrust.com cdn.braze.eu https://uktv-res.cloudinary.com uktv-static.s3.eu-west-1.amazonaws.com; font-src 'self' data: https: https://use.typekit.net appboy-images.com braze-images.com cdn.braze.eu use.fontawesome.com; connect-src 'self' *.2cnt.net *.ati-host.net bcbolt-uktv.akamaized.net uktv.brightcovecdn.com *.boltdns.net *.brightcove.com *.brightcove.net dataplane.rum.eu-west-1.amazonaws.com cognito-identity.eu-west-1.amazonaws.com sts.eu-west-1.amazonaws.com *.doubleclick.net *.google.com www.googleadservices.com *.fwmrm.net *.litix.io *.mppglobal.com *.onetrust.com sdk.fra-02.braze.eu *.sentry.io *.uktvapi.co.uk *.uktv.co.uk; frame-src 'self' *.doubleclick.net; worker-src 'self' blob: https:; media-src 'self' blob: https: *.boltdns.net uktv.brightcovecdn.com; report-uri https://o59029.ingest.us.sentry.io/api/4510029393428480/security/?sentry_key=8a2537262166e290fbc1a00cd2a20fa3; report-to csp-reporting-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.scite.ai https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com www.xtento.com https://*.online-metrix.net https://imgs.signifyd.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.doubleclick.net *.facebook.com *.googletagmanager.com www.google.ae www.google.at www.google.be www.google.bg www.google.ca www.google.ch www.google.cl www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.co.nz www.google.co.th www.google.co.uk www.google.co.ve www.google.co.za www.google.com.ar www.google.com.au www.google.com.br www.google.com.co www.google.com.ec www.google.com.hk www.google.com.ly www.google.com.mx www.google.com.my www.google.com.ng www.google.com.pa www.google.com.pe www.google.com.pk www.google.com.pr www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.cz www.google.de www.google.dk www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ge www.google.gr www.google.hr www.google.ht www.google.hu www.google.ie www.google.it www.google.kz www.google.lt www.google.lv www.google.nl www.google.pl www.google.pt www.google.se www.google.si www.google.sk https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: www.xtento.com cdn.xtento.com https://imgs.signifyd.com https://*.online-metrix.net *.google-analytics.com *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.doubleclick.net *.facebook.net *.googletagmanager.com *.hotjar.com *.online-metrix.net *.zdassets.com https://browser.sentry-cdn.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com *.cloudflare.com www.xtento.com cdn.xtento.com https://cdn-scripts.signifyd.com https://imgs.signifyd.com https://h64.online-metrix.net https://chimpstatic.com *.googleadservices.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.fonts.net *.googletagmanager.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.googleapis.com *.gstatic.com *.tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.bamboohr.com *.doubleclick.net *.facebook.com *.hotjar.com *.hotjar.io *.zdassets.com www.google.ae www.google.at www.google.be www.google.bg www.google.ca www.google.ch www.google.cl www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.co.nz www.google.co.th www.google.co.uk www.google.co.ve www.google.co.za www.google.com.au www.google.com.br www.google.com.co www.google.com.mx www.google.com.my www.google.com.pk www.google.com.pr www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.cz www.google.de www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ge www.google.gr www.google.ht www.google.it www.google.lv www.google.nl www.google.pl www.google.pt www.google.se www.google.sk https://*.ingest.sentry.io https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com https://imgs.signifyd.com *.facebook.net *.analytics.google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://2a23ab1b-97ea-4c5d-acc0-9b094bdc7879.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' https://*.googletagmanager.com https://www.googleadservices.com https://www.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://www.google.com https://google.com https://www.google.ch data: https://i.vimeocdn.com; base-uri 'self'; frame-src https://www.googletagmanager.com https://player.vimeo.com; object-src 'none'; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://google.com https://vimeo.com https://player.vimeo.com; style-src 'self' 'report-sample'; report-uri https://axc.biz/@http-reporting?csp=report&requestTime=1789284656831973&requestHash=ba424c3576c0a96a5da77d4d21aed294122b49b4 1
script-src 'self' 'unsafe-inline' 'unsafe-eval'; script-src-elem 'self' 'unsafe-inline' *.google-analytics.com go.trustpayments.com *.onetrust.com *.fontawesome.com *.gstatic.com *.googleapis.com *.cloudflareinsights.com *.trustpilot.com *.zdassets.com *.google.com *.omniconvert.com *.googletagmanager.com *.licdn.com *.facebook.net *.hotjar.com *.cloudflare.com *.yoast.com  *.dropbox.com *.live.net ; style-src 'self' 'unsafe-inline' *.onetrust.com *.fontawesome.com *.gstatic.com *.googleapis.com; style-src-elem * 'self' 'unsafe-inline'; img-src 'self' data: 'unsafe-inline' *.linkedin.com *.google.com *.google.co.uk *.onetrust.com *.gstatic.com *.gravatar.com *.trustpayments.com *.zdassets.com *.facebook.com *.google-analytics.com *.google.com.mt; font-src 'self' data: 'unsafe-inline' *.gstatic.com *.trustpayments.com *.fontawesome.com; connect-src 'self' 'unsafe-inline' *.onetrust.com *.google.com *.zendesk.com *.clarity.ms *.omniconvert.com *.fontawesome.com *.cloudflareinsights.com *.zdassets.com *.yoast.com *.linkedin.com *.doubleclick.net *.hotjar.io *.google-analytics.com; media-src 'self' 'unsafe-inline' data:; object-src 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; frame-src 'self' 'unsafe-inline' *.trustpilot.com *.google.com; worker-src 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; base-uri 'self'; manifest-src 'self' 'unsafe-inline'; report-uri https://www.trustpayments.com/csp-violation-report/ 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'nonce-9085fd9c41348591747b86bd501a7a03' 'strict-dynamic' https://www.googletagmanager.com https://public.tableau.com; worker-src 'self' blob:; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://www.google.com https://devpolicy.idrys.org; frame-src 'self' https://datawrapper.dwcdn.net https://public.tableau.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://platform.twitter.com; form-action 'self' https://devpolicy.us2.list-manage.com; report-uri https://devpolicy.idrys.org/api/csp-report?site=devpolicy; report-to csp-endpoint 1
default-src 'self' litium.revolutionrace.com fbcdn.revolutionrace.com wss://fbcdn.revolutionrace.com *.edb.com *.cdn-apple.com *.klarnaservices.com *.klarnauserservices.com *.klarnacdn.net *.klarna.com *.klarnaevt.com *.kustom.co *.adyen.com www.paypal.com js.stripe.com *.google.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.gstatic.com ajax.googleapis.com fonts.googleapis.com maps.googleapis.com *.apptus.cloud *.storyblok.com *.symplify.com cdn-sitegainer.com *.cdn-sitegainer.com sitegainer.com wss://recording.sitegainer.com *.criteo.net *.criteo.com *.doubleclick.net *.emarsys.net *.mention-me.com *.imedia.cz *.scarabresearch.com *.spinnaker-js.com bat.bing.com www.seznam.cz tags.creativecdn.com *.kindlycdn.com *.kindly.ai wss://sage.kindly.ai revolutionrace.customerfirst.ai *.facebook.net *.tiktok.com *.snapchat.com *.pinterest.com *.bambuser.com *.facebook.com www.pinterest.se *.cloudflare.com *.digitaloceanspaces.com *.distancify.workers.dev cdn.jsdelivr.net maxcdn.bootstrapcdn.com player.vimeo.com pro.ip-api.com recommender.scarabresearch.com s.pinimg.com sc-static.net vimeo.com ws-eu.pusher.com wss://ws-eu.pusher.com 'unsafe-inline' 'unsafe-eval'; img-src data: blob: https://* 'self'; media-src https://*; worker-src 'self' blob:; frame-src analytics.revolutionrace.com *.mention-me.com mention-me.com *.google.com *.adyen.com *.paypal.com *.kustom.co *.sitegainer.com *.criteo.com revolutionrace.customerfirst.ai; frame-ancestors https://app.storyblok.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; connect-src data: *; report-uri /api/csp-report; report-to csp-endpoint; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; frame-src 'none'; form-action 'self'; script-src 'self' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https:; media-src 'self'; manifest-src 'self'; worker-src 'self' blob: 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com fonts.googleapis.com *.googleapis.com data: *.fontawesome.com *.cloudflare.com *.twitter.com *.trustedshops.com *.eichholtz.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * www.google.com *.googletagmanager.com *.appspot.com *.cookiebot.com *.eichholtz.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com * maps.googleapis.com maps.gstatic.com *.googleapis.com https://images.unsplash.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://scontent.cdninstagram.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com *.elfsight.com *.cloudflare.com *.googleadservices.com *.twitter.com *.pingdom.net *.appspot.com *.cookiebot.com *.facebook.com *.eichholtz.com *.jsdelivr.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com https://maps.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.googletagmanager.com tagmanager.google.com *.sharethis.com *.elfsight.com *.cloudflare.com *.twitter.com *.google-analytics.com *.fontawesome.com chimpstatic.com *.pingdom.net *.appspot.com *.cookiebot.com *.eichholtz.com *.hotjar.com *.clarity.ms *.mxpnl.com *.mixpanel.com *.facebook.net *.cookieconsent.io *.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app downloads.mailchimp.com *.typekit.net tagmanager.google.com fonts.google.com *.elfsight.com *.cloudflare.com *.googleapis.com *.twitter.com *.gstatic.com *.eichholtz.com *.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com https://graph.instagram.com *.googletagmanager.com *.sharethis.com *.elfsight.com *.cloudflare.com *.twitter.com *.appspot.com *.cookiebot.com *.pingdom.net *.eichholtz.com *.hotjar.com *.hotjar.io *.clarity.ms *.mixpanel.com *.cookieconsent.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.sitevibes.com sitevibes.com maxcdn.bootstrapcdn.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.net *.facebook.com *.sitevibes.com sitevibes.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.clarity.ms *.doubleclick.net *.acsbapp.com *.googletagmanager.com news.adamshorsesupplies.com *.facebook.net *.facebook.com moonshot-ai.com *.moonshot-ai.com *.sitevibes.com sitevibes.com https://maps.google.com/ magento-cloudflare.jetrails.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.clarity.ms c.clarity.ms c.bing.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.facebook.net *.facebook.com moonshot-ai.com *.moonshot-ai.com *.sitevibes.com sitevibes.com *.ytimg.com *.hsforms.net *.hsforms.com 'self' data: www.xtento.com cdn.xtento.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.clarity.ms *.acsbapp.com acsbapp.com news.adamshorsesupplies.com *.facebook.net *.facebook.com moonshot-ai.com *.moonshot-ai.com *.sitevibes.com sitevibes.com *.impactcdn.com *.impct.site *.ssqt.io *.hsforms.net *.hsforms.com *.gstatic.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com www.xtento.com cdn.xtento.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sitevibes.com sitevibes.com maxcdn.bootstrapcdn.com *.googleapis.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.clarity.ms *.acsbapp.com acsbapp.com stats.g.doubleclick.net googleads.g.doubleclick.net *.facebook.net *.facebook.com moonshot-ai.com *.moonshot-ai.com ad.doubleclick.net/ adamshorsesupply.sjv.io *.sitevibes.com sitevibes.com *.impct.site *.impactcdn.com *.ssqt.io t.elasticsuite.io *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=Ok.muC3FQhVnB8zl7S6KXjRgsrdzF9ttX2ShS7d9bZU-1789290065.4831152-1.0.1.1-DuJoseCNxc.7x.pQmBylykxsQIc28lcx9SlK5Pkl1z.91h7Glsi9TZumhzv0aSM6qsxGZ9i4mk5NYG3ovGWxXDaj34Xlqjn7hEK2C8vBwNsrm5GZAaMlLhO2qIBAykgDI2oSQpZc6QKiI19Ae.8MXVbmDyJSM3fBqAiOAnSuTTM; report-to cf-csp-endpoint 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.facebook.com facebook.com cdn.katraouras.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.piraeusbank.gr 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.facebook.com facebook.com *.boxnow.gr boxnow.gr cdn.katraouras.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.bitmyjob.gr bitmyjob.gr *.clarity.ms www.google.gr *.facebook.com facebook.com *.adobedtm.com cdn.katraouras.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.clarity.ms www.clarity.ms https://www.clarity.ms *.facebook.com facebook.com *.googleadservices.com googleadservices.com *.google-analytics.com google-analytics.com *.google.gr google.gr *.adobedtm.com *.boxnow.gr boxnow.gr cdn.katraouras.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.gstatic.com *.piraeusbank.gr 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.facebook.com facebook.com cdn.katraouras.com *.fontawesome.com assets.braintreegateway.com www.gstatic.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.clarity.ms www.clarity.ms *.facebook.com facebook.com *.googleadservices.com googleadservices.com *.google-analytics.com google-analytics.com *.google.gr google.gr *.adobedtm.com assets.adobedtm.com *.boxnow.gr boxnow.gr *.doubleclick.net cdn.katraouras.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com www.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com fonts.googleapis.com *.googleapis.com data: *.livechatinc.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.livechatinc.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com *.certcapture.com *.livechatinc.com *.trustpilot.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net maps.googleapis.com maps.gstatic.com *.googleapis.com https://images.unsplash.com *.certcapture.com *.livechatinc.com *.webdamdb.com *.files-text.com *.espssl.com *.adsrvr.org *.facebook.com *.ywxi.net *.blockboardtech.com magefan.com cm.magefan.com *.listrakbi.com *.livechat-files.com *.livechat-static.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.certcapture.com *.livechatinc.com 'unsafe-eval' *.digiaccess.org *.ywxi.net *.trustpilot.com *.hlx.page *.trustedsite.com *.adsrvr.org *.resonate.com *.facebook.net connect.facebook.net *.facebook.com *.id5-sync.com *.criteo.com *.pepperjam.com *.kaptcha.com *.listrakbi.com *.livechat-static.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.googletagmanager.com *.googleadservices.com *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.livechatinc.com *.listrakbi.com assets.braintreegateway.com *.googleapis.com *.gstatic.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src *.livechatinc.com 'self' 'unsafe-inline'; media-src *.adobe.com *.livechatinc.com *.livechat-static.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com *.certcapture.com *.livechatinc.com *.digiaccess.org *.amazonaws.com *.adsrvr.org *.facebook.net connect.facebook.net *.facebook.com *.id5-sync.com *.kaptcha.com *.listrak.com *.listrakbi.com *.text.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.analytics.google.com *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src *.certcapture.com *.livechatinc.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://www.googletagmanager.com *.googleapis.com widgets.trustedshops.com maxcdn.bootstrapcdn.com data: *.fontawesome.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cleverreach.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://cdn.consentmanager.net https://delivery.consentmanager.net *.facebook.com secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cloudfront.net https://cdn.consentmanager.net https://delivery.consentmanager.net https://d.delivery.consentmanager.net *.google.de *.google.com *.facebook.com https://widgets.trustedshops.com https://b.delivery.consentmanager.net https://bat.bing.com cdn.pay1.de x.klarnacdn.net m.media-amazon.com static-eu.payments-amazon.com *.doofinder.com magefan.com cm.magefan.com *.sooqr.com *.spotlersearch.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com https://cdn.consentmanager.net https://delivery.consentmanager.net https://d.delivery.consentmanager.net https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://connect.facebook.net https://widgets.trustedshops.com https://cognito-identity.eu-central-1.amazonaws.com https://b.delivery.consentmanager.net https://bat.bing.com https://www.clarity.ms sha256-vKvokXulPX7K/24B4fzvgb/B0L7COramHCMB2OzbGRQ= secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com *.doofinder.com *.sooqr.com *.spotlersearch.com spotlersearchanalytics.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com widgets.trustedshops.com maxcdn.bootstrapcdn.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com *.doofinder.com *.fontawesome.com *.sooqr.com *.spotlersearch.com assets.braintreegateway.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src https://cdn.consentmanager.net https://delivery.consentmanager.net 'self' 'unsafe-inline'; media-src *.adobe.com https://cdn.consentmanager.net https://delivery.consentmanager.net https://d.delivery.consentmanager.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net https://www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://*.google-analytics.com https://*.analytics.google.com https://cdn.consentmanager.net https://delivery.consentmanager.net https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://region1.google-analytics.com https://cognito-identity.eu-central-1.amazonaws.com https://cdn1.api.trustedshops.com https://y.clarity.ms https://firehose.eu-central-1.amazonaws.com/ payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com *.doofinder.com wss://*.doofinder.com *.sooqr.com *.spotlersearch.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src https://cdn.consentmanager.net https://delivery.consentmanager.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-3p_5JsnKpK-RhctHBf1Cew' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.fontawesome.com *.hotjar.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.facebook.com *.sandbox.paypal.com *.paypal.com *.paypalobjects.com *.googleadservices.com *.google-analytics.com *.google.com *.google.com.my *.google.com.vn *.twitter.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.googletagmanager.com *.facebook.net *.avada.io *.gstatic.com/recaptcha/ *.paypal.com *.googleapis.com *.sandbox.paypal.com *.google-analytics.com *.paypalobjects.com *.connect.facebook.net/* analytics.tiktok.com dpm.demdex.net et.geojs.io avn.innity.com apptrian.com *.useinsider.com *.doubleclick.net *.hotjar.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.sandbox.paypal.com *.paypal.com *.paypalobjects.com *.google-analytics.com *.googleadservices.com *.hotjar.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.google-analytics.com et.geojs.io *.avada.io *.sandbox.paypal.com *.paypalobjects.com *.paypal.com *.google.com *.gstatic.com *.xcode.mn analytics.tiktok.com avn.innity.com apptrian.com *.hotjar.com *.hotjar.io *.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-veIL-mdgTG5bdnuQWcBZ3A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://assets.calendly.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://assets.calendly.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https:; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com https://calendly.com https://assets.calendly.com; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://calendly.com https://assets.calendly.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; 1
media-src https://cpaacademy.s3.us-west-2.amazonaws.com https://player.vimeo.com https://www.vimeo.com 'self' https://stats.g.doubleclick.net https://api.mixpanel.com https://script.hotjar.com https://cpaacademy.na100.my.salesforce.com https://api-preview.luckyorange.com https://static.hj.contentsquare.net https://googleads.g.doubleclick.net https://webinar.cpaacademy.org https://embedded-conferences.lovable.app https://pubsub.googleapis.com https://hmproxy.luckyorange.com https://settings.luckyorange.com https://cpaacademy.org https://cpaacademy.my.salesforce.com https://s3.amazonaws.com https://www.google.com https://cpaacademy.s3.amazonaws.com https://cpaacademy.s3-us-west-2.amazonaws.com https://www.interamark.com https://beta.cpaacademy.org https://www.cpaacademy.org blob: https://www.google.co.in https://cpaacademy--livepreview.na100.force.com http://click.edu.cpaacademy.org https://staging.cpaacademy.org https://vimeo.com https://*.hotjar.com https://cpaacademy--c.na100.visual.force.com https://t.contentsquare.net https://www.googletagmanager.com https://use.fontawesome.com https://cpaacademy.my.site.com *.salesforce.com https://*.contentsquare.net https://storage.googleapis.com; report-to sfdc-csp-ep; report-uri https://cpaacademy.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00DC0000000PiAN&networkId=0DMQh0000000DQI&type=communities 1
font-src i.icomoon.io fonts.gstatic.com *.typekit.net data: 'self' 'unsafe-inline'; form-action www.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net www.googletagmanager.com ct.pinterest.com www.facebook.com *.adobedtm.com *.omniture.com *.matomo.org *.hotjar.com *.crazyegg.com tags.tiqcdn.com *.facebook.net snap.licdn.com platform.linkedin.com *.twitter.com cdn.taboola.com trc.taboola.com cdn.optimizely.com cdn.visualwebsiteoptimizer.com dev.visualwebsiteoptimizer.com *.salesforce.com *.exacttarget.com chimpstatic.com mc.us1.list-manage.com *.sendgrid.com hubspot.com hsforms.com hs-analytics.net assets.pinterest.com *.instagram.com static.zdassets.com static.zendesk.com widget.intercom.io api.intercom.io js.driftt.com js-agent.newrelic.com cdn.cookielaw.org cdn.onetrust.com *.cookiebot.com *.tiktok.com *.klaviyo.com *.bing.com *.multisafepay.com https://pay.google.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com analytics.google.com www.googletagmanager.com maps.gstatic.com maps.googleapis.com www.facebook.com *.omniture.com *.mxpnl.com *.matomo.org *.hotjar.com *.crazyegg.com snap.licdn.com platform.linkedin.com *.twitter.com cdn.taboola.com trc.taboola.com cdn.optimizely.com cdn.visualwebsiteoptimizer.com dev.visualwebsiteoptimizer.com *.salesforce.com *.exacttarget.com chimpstatic.com mc.us1.list-manage.com *.sendgrid.com hubspot.com hsforms.com hs-analytics.net assets.pinterest.com *.instagram.com static.zdassets.com static.zendesk.com widget.intercom.io api.intercom.io cdn.cookielaw.org cdn.onetrust.com *.cookiebot.com *.tiktok.com *.klaviyo.com *.bing.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ moogento.com *.moogento.com *.multisafepay.com https://redchamps.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com *.google-analytics.com analytics.google.com www.googletagmanager.com maps.googleapis.com *.hotjar.com *.facebook.net s.pinimg.com ct.pinterest.com *.omniture.com *.adobedtm.com *.mxpnl.com *.matomo.org *.crazyegg.com tags.tiqcdn.com snap.licdn.com platform.linkedin.com *.twitter.com cdn.taboola.com trc.taboola.com cdn.optimizely.com cdn.visualwebsiteoptimizer.com dev.visualwebsiteoptimizer.com *.salesforce.com *.exacttarget.com chimpstatic.com mc.us1.list-manage.com *.sendgrid.com hubspot.com hsforms.com hs-analytics.net assets.pinterest.com *.instagram.com static.zdassets.com static.zendesk.com widget.intercom.io api.intercom.io js.driftt.com js-agent.newrelic.com cdn.cookielaw.org cdn.onetrust.com *.cookiebot.com *.tiktok.com *.klaviyo.com *.bing.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ l2.moogento.com *.multisafepay.com https://pay.google.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src i.icomoon.io fonts.googleapis.com *.typekit.net *.google-analytics.com analytics.google.com *.omniture.com *.adobedtm.com *.mxpnl.com *.matomo.org *.hotjar.com *.crazyegg.com tags.tiqcdn.com *.facebook.net snap.licdn.com platform.linkedin.com *.twitter.com cdn.taboola.com trc.taboola.com cdn.optimizely.com cdn.visualwebsiteoptimizer.com dev.visualwebsiteoptimizer.com *.salesforce.com *.exacttarget.com chimpstatic.com mc.us1.list-manage.com *.sendgrid.com hubspot.com hsforms.com hs-analytics.net assets.pinterest.com *.instagram.com static.zdassets.com static.zendesk.com widget.intercom.io api.intercom.io js.driftt.com js-agent.newrelic.com cdn.cookielaw.org cdn.onetrust.com *.cookiebot.com *.tiktok.com *.klaviyo.com *.bing.com https://static.klaviyo.com *.multisafepay.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com analytics.google.com www.googletagmanager.com stats.g.doubleclick.net maps.googleapis.com ct.pinterest.com www.facebook.com *.hotjar.io *.google.com *.googleadservices.com pagead2.googlesyndication.com *.omniture.com *.mxpnl.com *.matomo.org *.hotjar.com *.crazyegg.com *.facebook.net snap.licdn.com platform.linkedin.com *.twitter.com trc.taboola.com dev.visualwebsiteoptimizer.com *.salesforce.com *.exacttarget.com chimpstatic.com mc.us1.list-manage.com *.sendgrid.com hubspot.com hsforms.com hs-analytics.net *.pinterest.com *.instagram.com static.zdassets.com static.zendesk.com widget.intercom.io api.intercom.io js.driftt.com bam.nr-data.net rum-static.pingdom.net *.cookiebot.com *.tiktok.com *.klaviyo.com *.bing.com api-js.datadome.co https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.multisafepay.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' https: 'unsafe-eval' 'unsafe-inline'; frame-src 'self' https:; report-uri https://f4c37aabed4c3b2ba170384e4d35db74.report-uri.com/r/d/csp/reportOnly 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://roc.curtis.edu https://curtisarchives.libraryhost.com https://libguides.curtis.edu; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://static.elfsight.com https://player.vimeo.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://use.typekit.net https://cdnjs.cloudflare.com; img-src 'self' data: blob: https:; font-src 'self' data: https://use.typekit.net; connect-src 'self' https: wss:; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://player.pbs.org https://calendar.google.com https://archive.org https://host.nxt.blackbaud.com https://rudo.video https://w.soundcloud.com https://w3.mp.lura.live https://www.cbsnews.com https://www.google.com https://www.npr.org; media-src 'self' blob: https:; worker-src 'self' blob:; manifest-src 'self'; report-uri https://o55436.ingest.us.sentry.io/api/4504634968244224/csp-report/?sentry_key=075dfc18559b4098b9a5e11bff06348c 1
base-uri 'self'; block-all-mixed-content; child-src 'self' blob:; default-src 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; report-to csp-endpoint; report-uri https://sentry.nadapada.net/api/136/security/?sentry_key=7d3cea7bc0a6a8fb9a3fc5fe14a1ee02&sentry_environment=production; worker-src 'self' blob:; connect-src 'self' blob: data: https://*.werkenbijdefensie.nl https://analytics.google.com https://*.talentbrew.io https://*.hotjar.io https://google-analytics.com https://maps.googleapis.com https://*.werkenbijdefensie.nl https://p.typekit.net https://*.googlesyndication.com https://*.analytics.google.com https://*.google-analytics.com https://sentry.nadapada.net/api/136/ https://*.doubleclick.net https://use.typekit.net https://www.google-analytics.com https://www.google.ad https://www.google.ae https://www.google.al https://www.google.am https://www.google.as https://www.google.at https://www.google.az https://www.google.ba https://www.google.be https://www.google.bf https://www.google.bg https://www.google.bi https://www.google.bj https://www.google.bs https://www.google.bt https://www.google.by https://www.google.ca https://www.google.cat https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.co.ao https://www.google.co.bw https://www.google.co.ck https://www.google.co.cr https://www.google.co.id https://www.google.co.il https://www.google.co.in https://www.google.co.jp https://www.google.co.ke https://www.google.co.kr https://www.google.co.ls https://www.google.co.ma https://www.google.co.mz https://www.google.co.nz https://www.google.co.th https://www.google.co.tz https://www.google.co.ug https://www.google.co.uk https://www.google.co.uz https://www.google.co.ve https://www.google.co.vi https://www.google.co.za https://www.google.co.zm https://www.google.co.zq https://www.google.co.zw https://www.google.com https://www.google.com.af https://www.google.com.ag https://www.google.com.ar https://www.google.com.au https://www.google.com.bd https://www.google.com.bh https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.com.bz https://www.google.com.co https://www.google.com.cu https://www.google.com.cy https://www.google.com.do https://www.google.com.ec https://www.google.com.eg https://www.google.com.et https://www.google.com.fj https://www.google.com.gh https://www.google.com.gi https://www.google.com.gt https://www.google.com.hk https://www.google.com.jm https://www.google.com.kh https://www.google.com.kw https://www.google.com.lb https://www.google.com.ly https://www.google.com.mm https://www.google.com.mt https://www.google.com.mx https://www.google.com.my https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.com.np https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.com.pr https://www.google.com.py https://www.google.com.qa https://www.google.com.sa https://www.google.com.sb https://www.google.com.sg https://www.google.com.sl https://www.google.com.sv https://www.google.com.tj https://www.google.com.tr https://www.google.com.tw https://www.google.com.ua https://www.google.com.uy https://www.google.com.vc https://www.google.com.vn https://www.google.cv https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.dz https://www.google.ee https://www.google.es https://www.google.fi https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.gh https://www.google.gr https://www.google.gy https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.ie https://www.google.im https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.jo https://www.google.kg https://www.google.ki https://www.google.kz https://www.google.la https://www.google.li https://www.google.lk https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.mn https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.ne https://www.google.nl https://www.google.no https://www.google.nr https://www.google.nu https://www.google.ph https://www.google.pl https://www.google.pn https://www.google.ps https://www.google.pt https://www.google.ro https://www.google.rs https://www.google.ru https://www.google.rw https://www.google.sc https://www.google.se https://www.google.sh https://www.google.si https://www.google.sk https://www.google.sm https://www.google.sn https://www.google.so https://www.google.sr https://www.google.st https://www.google.td https://www.google.tg https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.tt https://www.google.vu https://www.google.ws https://www.googleadservices.com wss://ws.hotjar.com https://www.googletagmanager.com https://*.adform.net https://*.ctz-content.com ; font-src 'self' data: https://fonts.gstatic.com https://use.typekit.net https://fonts.bunny.net ; frame-src 'self' https://*.werkenbijdefensie.nl https://links.intractive.app https://*.adform.net https://web.intractive.app https://www.google.com https://www.googletagmanager.com https://www.youtube.com https://*.sse.cisco-secure.com  https://*.id.opendns.com https://*.doubleclick.net https://*.zscloud.net https://*.clients6.google.com ; img-src 'self' data: blob: https://*.werkenbijdefensie.nl https://analytics.talentbrew.io https://i.ytimg.com https://maps.googleapis.com https://*.gstatic.com https://pagead2.googlesyndication.com https://stats.g.doubleclick.net https://translate.google.com https://www.google-analytics.com https://www.google.ad/ads/ https://www.google.ae/ads/ https://www.google.al/ads/ https://www.google.am/ads/ https://www.google.as/ads/ https://www.google.at/ads/ https://www.google.az/ads/ https://www.google.ba/ads/ https://www.google.be/ads/ https://www.google.bf/ads/ https://www.google.bg/ads/ https://www.google.bi/ads/ https://www.google.bj/ads/ https://www.google.bs/ads/ https://www.google.bt/ads/ https://www.google.by/ads/ https://www.google.ca/ads/ https://www.google.cat/ads/ https://www.google.cd/ads/ https://www.google.cf/ads/ https://www.google.cg/ads/ https://www.google.ch/ads/ https://www.google.ci/ads/ https://www.google.cl/ads/ https://www.google.cm/ads/ https://www.google.cn/ads/ https://www.google.co.ao/ads/ https://www.google.co.bw/ads/ https://www.google.co.ck/ads/ https://www.google.co.cr/ads/ https://www.google.co.id/ads/ https://www.google.co.il/ads/ https://www.google.co.in/ads/ https://www.google.co.jp/ads/ https://www.google.co.ke/ads/ https://www.google.co.kr/ads/ https://www.google.co.ls/ads/ https://www.google.co.ma/ads/ https://www.google.co.mz/ads/ https://www.google.co.nz/ads/ https://www.google.co.th/ads/ https://www.google.co.tz/ads/ https://www.google.co.ug/ads/ https://www.google.co.uk/ads/ https://www.google.co.uz/ads/ https://www.google.co.ve/ads/ https://www.google.co.vi/ads/ https://www.google.co.za/ads/ https://www.google.co.zm/ads/ https://www.google.co.zw/ads/ https://www.google.com/ads/ https://www.google.com.af/ads/ https://www.google.com.ag/ads/ https://www.google.com.ar/ads/ https://www.google.com.au/ads/ https://www.google.com.bd/ads/ https://www.google.com.bh/ads/ https://www.google.com.bn/ads/ https://www.google.com.bo/ads/ https://www.google.com.br/ads/ https://www.google.com.bz/ads/ https://www.google.com.co/ads/ https://www.google.com.cu/ads/ https://www.google.com.cy/ads/ https://www.google.com.do/ads/ https://www.google.com.ec/ads/ https://www.google.com.eg/ads/ https://www.google.com.et/ads/ https://www.google.com.fj/ads/ https://www.google.com.gh/ads/ https://www.google.com.gi/ads/ https://www.google.com.gt/ads/ https://www.google.com.hk/ads/ https://www.google.com.jm/ads/ https://www.google.com.kh/ads/ https://www.google.com.kw/ads/ https://www.google.com.lb/ads/ https://www.google.com.ly/ads/ https://www.google.com.mm/ads/ https://www.google.com.mt/ads/ https://www.google.com.mx/ads/ https://www.google.com.my/ads/ https://www.google.com.na/ads/ https://www.google.com.ng/ads/ https://www.google.com.ni/ads/ https://www.google.com.np/ads/ https://www.google.com.om/ads/ https://www.google.com.pa/ads/ https://www.google.com.pe/ads/ https://www.google.com.pg/ads/ https://www.google.com.ph/ads/ https://www.google.com.pk/ads/ https://www.google.com.pr/ads/ https://www.google.com.py/ads/ https://www.google.com.qa/ads/ https://www.google.com.sa/ads/ https://www.google.com.sb/ads/ https://www.google.com.sg/ads/ https://www.google.com.sl/ads/ https://www.google.com.sv/ads/ https://www.google.com.tj/ads/ https://www.google.com.tr/ads/ https://www.google.com.tw/ads/ https://www.google.com.ua/ads/ https://www.google.com.uy/ads/ https://www.google.com.vc/ads/ https://www.google.com.vn/ads/ https://www.google.com/ads/ https://www.google.com/ccm/collect https://www.google.com/pagead/ https://www.google.cv/ads/ https://www.google.cz/ads/ https://www.google.de/ads/ https://www.google.dj/ads/ https://www.google.dk/ads/ https://www.google.dm/ads/ https://www.google.dz/ads/ https://www.google.ee/ads/ https://www.google.es/ads/ https://www.google.fi/ads/ https://www.google.fm/ads/ https://www.google.fr/ads/ https://www.google.ga/ads/ https://www.google.ge/ads/ https://www.google.gg/ads/ https://www.google.gh/ads/ https://www.google.gl/ads/ https://www.google.gm/ads/ https://www.google.gr/ads/ https://www.google.gy/ads/ https://www.google.hn/ads/ https://www.google.hr/ads/ https://www.google.ht/ads/ https://www.google.hu/ads/ https://www.google.ie/ads/ https://www.google.im/ads/ https://www.google.iq/ads/ https://www.google.is/ads/ https://www.google.it/ads/ https://www.google.je/ads/ https://www.google.jo/ads/ https://www.google.kg/ads/ https://www.google.ki/ads/ https://www.google.kz/ads/ https://www.google.la/ads/ https://www.google.li/ads/ https://www.google.lk/ads/ https://www.google.lt/ads/ https://www.google.lu/ads/ https://www.google.lv/ads/ https://www.google.md/ads/ https://www.google.me/ads/ https://www.google.mg/ads/ https://www.google.mk/ads/ https://www.google.ml/ads/ https://www.google.mn/ads/ https://www.google.mu/ads/ https://www.google.mv/ads/ https://www.google.mw/ads/ https://www.google.ne/ads/ https://www.google.nl/ads/ https://www.google.no/ads/ https://www.google.nr/ads/ https://www.google.nu/ads/ https://www.google.ph/ads/ https://www.google.pl/ads/ https://www.google.pn/ads/ https://www.google.ps/ads/ https://www.google.pt/ads/ https://www.google.ro/ads/ https://www.google.rs/ads/ https://www.google.ru/ads/ https://www.google.rw/ads/ https://www.google.sc/ads/ https://www.google.se/ads/ https://www.google.sh/ads/ https://www.google.si/ads/ https://www.google.sk/ads/ https://www.google.sm/ads/ https://www.google.sn/ads/ https://www.google.so/ads/ https://www.google.sr/ads/ https://www.google.st/ads/ https://www.google.td/ads/ https://www.google.tg/ads/ https://www.google.tl/ads/ https://www.google.tm/ads/ https://www.google.tn/ads/ https://www.google.to/ads/ https://www.google.tt/ads/ https://www.google.vu/ads/ https://www.google.ws/ads/ https://www.googleadservices.com https://www.googletagmanager.com https://*.doubleclick.net https://*.seadform.net ; media-src 'self' data: blob: https://*.werkenbijdefensie.nl ; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://ajax.googleapis.com/ajax/libs/jquery/3.7.1/jquery.min.js https://apply.talentbrew.io https://cdn.jsdelivr.net/npm/sockjs-client@1.4.0/dist/sockjs.min.js https://connect.facebook.net https://embed.intractive.app https://maps.googleapis.com https://*.adform.net https://sc-static.net/webview-autofill.min.js https://script.hotjar.com https://sentry.nadapada.net https://static.hotjar.com https://use.typekit.net https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.googletagmanager.com https://www.gstatic.com/recaptcha/ https://www.youtube.com https://cdn.matomo.cloud https://apply.talentbrew.io https://apis.google.com https://*.ctz-content.com ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://p.typekit.net/p.css https://use.typekit.net/rmg6mik.css https://www.googletagmanager.com https://www.gstatic.com https://fonts.bunny.net ; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://applepay.cdn-apple.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net cdnjs.cloudflare.com *.flixfacts.com *.flixcar.com *.googleapis.com *.electroworld.nl *.dewitgoedspecialist.nl *.witgoedspecialist.nl *.clarity.ms *.bing.com *.doubleclick.net *.criteo.com *.criteo.net *.facebook.com *.id5-sync.com *.yahoo.com *.facebook.net *.channelsight.com *.extreme-ip-lookup.com *.googletagmanager.com *.survicate.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com *.loadbee.com *.flixfacts.com *.flixgvid.com *.flixcar.com *.flix360.io *.cookiebot.com *.doubleclick.net *.googletagmanager.com *.gstatic.com *.hotjar.com *.newrelic.com *.nr-data.net *.adobedtm.com *.adobe.com *.authorize.net *.braintreegateway.com *.paypalobjects.com *.ytimg.com *.googleapis.com *.vimeo.com *.vimeocdn.com *.google.com *.cardinalcommerce.com *.bazaarvoice.com *.iesnare.com *.buckaroo.nl *.dotdigital.com *.dotdigital-pages.com *.trackedlink.net *.trackedweb.net *.ccdc02.com *.googleoptimize.com *.hs-scripts.com *.hsforms.net *.hubspot.com *.hscollectedforms.net *.hs-banner.net *.hs-analytics.net *.hsadspixel.net *.hscollectedforms.com *.hs-banner.com *.hs-analytics.com *.hsadspixel.com *.amazonaws.com *.hsforms.com hubspot-forms-static-embed-eu1.s3.amazonaws.com track-eu1.hubspot.com forms-eu1.hsforms.com *.facebook.com *.electroworld.nl *.dewitgoedspecialist.nl *.witgoedspecialist.nl *.tweakwise.com *.clarity.ms *.bing.com *.criteo.com *.criteo.net *.id5-sync.com *.yahoo.com *.facebook.net *.channelsight.com *.extreme-ip-lookup.com *.visualwebsiteoptimizer.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://applepay.cdn-apple.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.loadbee.com *.flixcar.com *.publitas.com *.cookiebot.com *.hotjar.com *.electroworld.nl *.dewitgoedspecialist.nl *.witgoedspecialist.nl *.clarity.ms *.bing.com *.doubleclick.net *.criteo.com *.criteo.net *.facebook.com *.id5-sync.com *.yahoo.com *.facebook.net *.channelsight.com *.extreme-ip-lookup.com *.googletagmanager.com *.hsforms.com *.hubspot.com *.hs-sites-eu1.com *.visualwebsiteoptimizer.com *.aiden.cx 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com https://static.buckaroo.nl https://www.buckaroo.nl https://www.paypalobjects.com https://pay.google.com https://developers.google.com https://applepay.cdn-apple.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://firebasestorage.googleapis.com *.loadbee.com *.flixfacts.com *.flixgvid.com *.flixcar.com *.flix360.io *.google.com *.google.nl *.electroworld.nl *.dewitgoedspecialist.nl *.adobedtm.com *.demdex.net *.omtrdc.net *.everesttech.net *.magentocommerce.com *.googleadservices.com *.paypalobjects.com *.vimeo.com *.ytimg.com *.swagger.io *.bazaarvoice.com *.buckaroo.nl *.braintreegateway.com *.googleapis.com *.hubspot.com *.hscollectedforms.net *.hs-banner.net *.hs-analytics.net *.hsadspixel.net *.hscollectedforms.com *.hs-banner.com *.hs-analytics.com *.hsadspixel.com *.amazonaws.com *.hsforms.com hubspot-forms-static-embed-eu1.s3.amazonaws.com track-eu1.hubspot.com forms-eu1.hsforms.com *.360yield.com *.smartclip.net *.yieldlab.net *.bing.com *.krxd.net *.adform.net *.doubleclick.net *.media.net *.adscale.de *.tremorhub.com *.teads.tv *.criteo.com *.criteo.net *.3lift.com *.mediavine.com *.liadm.com *.adnxs.com *.id5-sync.com *.rlcdn.com *.sharethrough.com *.rubiconproject.com *.casalemedia.com *.smartadserver.com *.thebrighttag.com *.pubmatic.com *.yieldmo.com *.taboola.com *.outbrain.com *.omnitagjs.com *.facebook.com *.bidswitch.net *.witgoedspecialist.nl *.tweakwise.com *.clarity.ms *.yahoo.com *.facebook.net *.channelsight.com *.extreme-ip-lookup.com *.googletagmanager.com id5-sync.com *.ivitrack.com *.jwpsrv.com *.jwplayer.com *.squeezely.tech *.hsappstatic.net *.visualwebsiteoptimizer.com *.cdninstagram.com *.fbcdn.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com *.googletagmanager.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com https://www.sandbox.paypal.com https://applepay.cdn-apple.com https://pay.google.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.avada.io *.shopify.com *.loadbee.com *.flixfacts.com *.flixgvid.com *.flixcar.com *.flix360.io *.omnistock.nl *.publitas.com *.cookiebot.com *.doubleclick.net *.gstatic.com *.hotjar.com *.adobedtm.com *.authorize.net *.paypal.com *.paypalobjects.com *.ytimg.com *.googleapis.com *.vimeo.com *.cardinalcommerce.com *.bazaarvoice.com *.iesnare.com *.buckaroo.nl *.dotdigital.com *.dotdigital-pages.com *.trackedlink.net *.trackedweb.net *.ccdc02.com *.googleoptimize.com *.hs-scripts.com *.hsforms.net *.hubspot.com *.hscollectedforms.net *.hs-banner.net *.hs-analytics.net *.hsadspixel.net *.hscollectedforms.com *.hs-banner.com *.hs-analytics.com *.hsadspixel.com *.amazonaws.com *.hsforms.com hubspot-forms-static-embed-eu1.s3.amazonaws.com track-eu1.hubspot.com forms-eu1.hsforms.com *.facebook.com *.electroworld.nl *.dewitgoedspecialist.nl *.witgoedspecialist.nl *.tweakwise.com *.clarity.ms *.bing.com *.criteo.com *.criteo.net *.id5-sync.com *.yahoo.com *.facebook.net *.channelsight.com *.extreme-ip-lookup.com https://extreme-ip-lookup.com *.hubspotfeedback.com *.beslist.nl *.convertexperiments.com *.survicate.com squeezely.tech *.squeezely.tech *.funnelytics.io *.mouseflow.com *.visualwebsiteoptimizer.com unpkg.com *.aiden.cx *.kieskeurig.nl *.adnxs.com *.uxcam.com *.heap-api.com *.cloudfront.net ur-sle-widgets.omnistock.nl *.ur-sle-widgets.omnistock.nl 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com display.ugc.bazaarvoice.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com https://fonts.bunny.net cdnjs.cloudflare.com *.flixcar.com *.googleapis.com *.gstatic.com *.electroworld.nl *.dewitgoedspecialist.nl *.witgoedspecialist.nl *.clarity.ms *.bing.com *.doubleclick.net *.criteo.com *.criteo.net *.facebook.com *.id5-sync.com *.yahoo.com *.facebook.net *.channelsight.com *.extreme-ip-lookup.com *.googletagmanager.com *.ditiseentest.nl *.survicate.com *.visualwebsiteoptimizer.com ur-sle-widgets.omnistock.nl *.ur-sle-widgets.omnistock.nl 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.flixcar.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://applepay.buckaroo.io https://smp-paymentservices.apple.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com *.pro6pp.nl https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://get.geojs.io *.avada.io *.loadbee.com *.flixfacts.com *.flixgvid.com *.flixcar.com *.flix360.io *.hotjar.com *.doubleclick.net *.demdex.net *.omtrdc.net *.paypalobjects.com *.cardinalcommerce.com *.bazaarvoice.com *.buckaroo.nl *.trackedlink.net *.trackedweb.net *.dotdigital.com *.dotdigital-pages.com *.googleapis.com *.hubspot.com *.hscollectedforms.net *.hs-banner.net *.hs-analytics.net *.hsadspixel.net *.hscollectedforms.com *.hs-banner.com *.hs-analytics.com *.hsadspixel.com *.amazonaws.com *.hsforms.com hubspot-forms-static-embed-eu1.s3.amazonaws.com track-eu1.hubspot.com forms-eu1.hsforms.com *.facebook.com *.electroworld.nl *.dewitgoedspecialist.nl *.witgoedspecialist.nl *.tweakwise.com *.clarity.ms *.bing.com *.criteo.com *.criteo.net *.id5-sync.com *.yahoo.com *.facebook.net *.channelsight.com *.extreme-ip-lookup.com *.hubapi.com *.googletagmanager.com *.hotjar.io *.beslist.nl *.googlesyndication.com *.funnelytics.workers.dev *.funnelytics.io *.visualwebsiteoptimizer.com *.aiden.cx *.uxcam.com *.convertexperiments.com *.heap-api.com wss://ws.hotjar.com *.kieskeurig.nl *.google.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://salesiq.zoho.com https://js.zohocdn.com https://css.zohocdn.com https://static.zohocdn.com https://static.openreplay.com https://www.clarity.ms https://scripts.clarity.ms https://*.clarity.ms https://static.examroom.ai https://embed.typeform.com https://renderer-assets.typeform.com https://*.typeform.com https://cookiekit.io/api/consents http://localhost:5173 http://127.0.0.1:5173 ws://localhost:5173 ws://127.0.0.1:5173; style-src 'self' 'unsafe-inline' https://css.zohocdn.com https://js.zohocdn.com https://static.zohocdn.com https://renderer-assets.typeform.com https://*.typeform.com http://localhost:5173 http://127.0.0.1:5173; img-src 'self' data: blob: https:; font-src 'self' data: https://css.zohocdn.com https://js.zohocdn.com https://static.zohocdn.com https://fonts.gstatic.com; connect-src 'self' https://www.google.com https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://salesiq.zoho.com https://salesiq.zohopublic.com https://*.zohopublic.com https://js.zohocdn.com https://css.zohocdn.com https://static.zohocdn.com https://static.openreplay.com https://*.openreplay.com https://www.clarity.ms https://scripts.clarity.ms https://*.clarity.ms https://api.hsforms.com https://static.examroom.ai https://credentiauatapi.examroom.ai https://*.examroom.ai https://raw.githack.com https://raw.githubusercontent.com https://api.typeform.com https://*.typeform.com https://renderer-assets.typeform.com https://ad.doubleclick.net https://my.productfruits.com https://cookiekit.io/api/consents http://localhost:5173 http://127.0.0.1:5173 ws://localhost:5173 ws://127.0.0.1:5173; frame-src 'self' https://salesiq.zoho.com https://salesiq.zohopublic.com https://*.zohopublic.com https://js.zohocdn.com https://www.googletagmanager.com https://www.google.com https://googleads.g.doubleclick.net https://form.typeform.com https://*.typeform.com; worker-src 'self' blob:; form-action 'self' https://api.hsforms.com 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' data: 'self' blob: *.cloudmaestro.com backend.yoogiscloset.com frontend.yoogiscloset.com js-agent.newrelic.com *.nr-data.net backend.yoogiscloset.com frontend.yoogiscloset.com www.yoogiscloset.com xdymhcopnh.execute-api.us-east-1.amazonaws.com knrpc.olark.com www.googletagmanager.com www.googleadservices.com ajax.googleapis.com apis.google.com connect.facebook.net static.olark.com *.google-analytics.com *.listrakbi.com *.static.olark.com *.affirm.com *.firebaseapp.com *.lightwidget.com *.adroll.com *.bing.com *.doubleclick.net *.trustpilot.com storage.googleapis.com api.olark.com *.googleapis.com *.sharethis.com *.clarity.ms www.clarity.ms *.api.olark.com www.google.com connect.facebook.com www.facebook.com *.paypal.com *.paypalobjects.com www.recaptcha.net www.gstatic.com accounts.google.com *.adobedtm.com; report-uri /.webscale/csp-report 1
default-src 'none'; manifest-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' *.canopytax.com *.clientportal.com https://www.getcanopy.com https://us-central1-metal-appliance-191920.cloudfunctions.net https://beanstalk-production.s3.amazonaws.com https://beanstalk-production.s3-us-west-2.amazonaws.com https://beanstalk-production.s3.us-west-2.amazonaws.com https://s3-us-west-2.amazonaws.com https://canopy-cme-migrations.s3.amazonaws.com *.pusher.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://ssl.gstatic.com https://accounts.google.com https://apis.google.com https://www.gstatic.com https://www.google.com https://static.zuora.com https://static.userguiding.com/ https://cdn.jsdelivr.net https://cdn.pendo.io https://pendo-static-4789186942795776.storage.googleapis.com https://content-4789186942795776.static.pendo.io https://data.pendo.io https://content.product.canopytax.com https://data.product.canopytax.com https://app.pendo.io https://*.pusher.com https://unpkg.com https://esm.sh https://www.google-analytics.com https://js.sentry-cdn.com https://browser.sentry-cdn.com https://static.userguiding.com https://static.zdassets.com https://cdn.jsdelivr.net/npm/react@18.3.1/umd/react.production.min.js https://cdn.jsdelivr.net/npm/react-dom@18.3.1/umd/react-dom.production.min.js https://cdn.jsdelivr.net/npm/react-dom@18.3.1/umd/react-dom-server.browser.production.min.js https://cdn.jsdelivr.net/npm/react-router-dom@6.30.2/dist/umd/react-router-dom.production.min.js https://cdn.jsdelivr.net/npm/react-hook-form@7.53.0/dist/index.umd.min.js https://cdn.jsdelivr.net/npm/lodash@4.17.15/lodash.min.js https://cdn.jsdelivr.net/npm/moment@2.24.0/moment.min.js https://cdn.jsdelivr.net/npm/luxon@3.4.3/build/amd/luxon.min.js https://cdn.jsdelivr.net/npm/prop-types@15.7.2/prop-types.min.js https://cdn.jsdelivr.net/npm/@esm-bundle/rxjs/system/rxjs.min.js https://cdn.jsdelivr.net/npm/@esm-bundle/rxjs/system/rxjs-operators.min.js https://cdn.jsdelivr.net/npm/single-spa@5.9.5/lib/system/single-spa.min.js https://cdn.jsdelivr.net/npm/single-spa-canopy@3.1.0/lib/system/single-spa-canopy.min.js https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/system.min.js https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/extras/amd.min.js https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/extras/named-exports.min.js https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/extras/named-register.min.js https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/extras/use-default.min.js https://cdn.jsdelivr.net/npm/@esm-bundle/rxjs/system/rxjs-shared.min.js; script-src-elem 'unsafe-inline' *.canopytax.com *.clientportal.com https://www.getcanopy.com https://us-central1-metal-appliance-191920.cloudfunctions.net https://beanstalk-production.s3.amazonaws.com https://beanstalk-production.s3-us-west-2.amazonaws.com https://beanstalk-production.s3.us-west-2.amazonaws.com https://s3-us-west-2.amazonaws.com https://canopy-cme-migrations.s3.amazonaws.com *.pusher.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://ssl.gstatic.com https://accounts.google.com https://apis.google.com https://www.gstatic.com https://www.google.com https://static.zuora.com https://static.userguiding.com/ https://cdn.jsdelivr.net https://cdn.pendo.io https://pendo-static-4789186942795776.storage.googleapis.com https://content-4789186942795776.static.pendo.io https://data.pendo.io https://content.product.canopytax.com https://data.product.canopytax.com https://app.pendo.io https://*.pusher.com https://unpkg.com https://esm.sh https://www.google-analytics.com https://js.sentry-cdn.com https://browser.sentry-cdn.com https://static.userguiding.com https://static.zdassets.com https://cdn.jsdelivr.net/npm/react@18.3.1/umd/react.production.min.js https://cdn.jsdelivr.net/npm/react-dom@18.3.1/umd/react-dom.production.min.js https://cdn.jsdelivr.net/npm/react-dom@18.3.1/umd/react-dom-server.browser.production.min.js https://cdn.jsdelivr.net/npm/react-router-dom@6.30.2/dist/umd/react-router-dom.production.min.js https://cdn.jsdelivr.net/npm/react-hook-form@7.53.0/dist/index.umd.min.js https://cdn.jsdelivr.net/npm/lodash@4.17.15/lodash.min.js https://cdn.jsdelivr.net/npm/moment@2.24.0/moment.min.js https://cdn.jsdelivr.net/npm/luxon@3.4.3/build/amd/luxon.min.js https://cdn.jsdelivr.net/npm/prop-types@15.7.2/prop-types.min.js https://cdn.jsdelivr.net/npm/@esm-bundle/rxjs/system/rxjs.min.js https://cdn.jsdelivr.net/npm/@esm-bundle/rxjs/system/rxjs-operators.min.js https://cdn.jsdelivr.net/npm/single-spa@5.9.5/lib/system/single-spa.min.js https://cdn.jsdelivr.net/npm/single-spa-canopy@3.1.0/lib/system/single-spa-canopy.min.js https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/system.min.js https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/extras/amd.min.js https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/extras/named-exports.min.js https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/extras/named-register.min.js https://cdn.jsdelivr.net/npm/systemjs@6.15.1/dist/extras/use-default.min.js https://cdn.jsdelivr.net/npm/@esm-bundle/rxjs/system/rxjs-shared.min.js; connect-src *.canopytax.com *.clientportal.com https://www.getcanopy.com https://us-central1-metal-appliance-191920.cloudfunctions.net https://beanstalk-production.s3.amazonaws.com https://beanstalk-production.s3-us-west-2.amazonaws.com https://beanstalk-production.s3.us-west-2.amazonaws.com https://s3-us-west-2.amazonaws.com https://canopy-cme-migrations.s3.amazonaws.com https://api.intercom.io https://api-iam.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://nexus-long-poller-a.intercom.io https://nexus-long-poller-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://uploads.intercomcdn.com https://uploads.intercomusercontent.com wss://*.pusher.com wss://*.pusherapp.com https://*.pusher.com https://*.pusherapp.com wss://socket.canopytax.com https://stat.userguiding.com/ https://api.userguiding.com/ https://user.userguiding.com/ https://metrics.userguiding.com/ https://static.userguiding.com/ https://sdk.userguiding.com https://rum-http-intake.logs.datadoghq.com https://rum.browser-intake-datadoghq.com/api/v2/rum https://localhost:* http://localhost:* wss://localhost:* https://ielocal:* https://static.zdassets.com https://ekr.zdassets.com https://ekr.zendesk.com https://canopytax.zendesk.com https://*.zopim.com https://zendesk-eu.my.sentry.io wss://canopytax.zendesk.com wss://*.zopim.com https://o4504080391733248.ingest.sentry.io/ https://api-js.mixpanel.com https://canopy.thoughtspot.cloud https://checkoutshopper-live-us.adyen.com https://checkoutshopper-live.adyen.com https://data.pendo.io https://pendo-static-4789186942795776.storage.googleapis.com https://content-4789186942795776.static.pendo.io https://data.product.canopytax.com https://content.product.canopytax.com https://app.pendo.io; form-action *.canopytax.com *.clientportal.com https://www.getcanopy.com https://us-central1-metal-appliance-191920.cloudfunctions.net https://beanstalk-production.s3.amazonaws.com https://beanstalk-production.s3-us-west-2.amazonaws.com https://beanstalk-production.s3.us-west-2.amazonaws.com https://s3-us-west-2.amazonaws.com https://canopy-cme-migrations.s3.amazonaws.com https://intercom.help https://api-iam.intercom.io; media-src https://js.intercomcdn.com https://v2assets.zopim.io https://static.zdassets.com; child-src blob: *.canopytax.com *.clientportal.com https://www.getcanopy.com https://us-central1-metal-appliance-191920.cloudfunctions.net https://beanstalk-production.s3.amazonaws.com https://beanstalk-production.s3-us-west-2.amazonaws.com https://beanstalk-production.s3.us-west-2.amazonaws.com https://s3-us-west-2.amazonaws.com https://canopy-cme-migrations.s3.amazonaws.com https://share.intercom.io https://intercom-sheets.com https://www.intercom-reporting.com  https://www.youtube.com https://player.vimeo.com https://fast.wistia.net https://checkoutshopper-live.adyen.com https://checkoutshopper-live-us.adyen.com; frame-src *.canopytax.com *.clientportal.com https://www.getcanopy.com https://us-central1-metal-appliance-191920.cloudfunctions.net https://beanstalk-production.s3.amazonaws.com https://beanstalk-production.s3-us-west-2.amazonaws.com https://beanstalk-production.s3.us-west-2.amazonaws.com https://s3-us-west-2.amazonaws.com https://canopy-cme-migrations.s3.amazonaws.com https://accounts.google.com https://www.google.com https://www.zuora.com https://apisandbox.zuora.com https://canopy.page.link https://ls.userguiding.com https://canopy.thoughtspot.cloud/ https://checkoutshopper-live-us.adyen.com https://checkoutshopper-live.adyen.com https://app.pendo.io https://portal.pendo.io; style-src 'unsafe-inline' https://ssl.gstatic.com https://fonts.googleapis.com https://fonts.google.com/ https://cdn.canopytax.com https://pendo-io-static.storage.googleapis.com https://pendo-static-4789186942795776.storage.googleapis.com https://content-4789186942795776.static.pendo.io https://content.product.canopytax.com https://app.pendo.io; style-src-elem 'unsafe-inline' https://ssl.gstatic.com https://fonts.googleapis.com https://fonts.google.com/ https://content.product.canopytax.com https://cdn.canopytax.com; img-src data: blob: *.canopytax.com *.clientportal.com https://www.getcanopy.com https://us-central1-metal-appliance-191920.cloudfunctions.net https://beanstalk-production.s3.amazonaws.com https://beanstalk-production.s3-us-west-2.amazonaws.com https://beanstalk-production.s3.us-west-2.amazonaws.com https://s3-us-west-2.amazonaws.com https://canopy-cme-migrations.s3.amazonaws.com https://js.intercomcdn.com https://static.intercomassets.com https://downloads.intercomcdn.com https://uploads.intercomusercontent.com https://gifs.intercomcdn.com  https://messenger-apps.intercom.io https://*.intercom-attachments.com https://la.www4.irs.gov https://csi.gstatic.com https://static.userguiding.com/ https://v2assets.zopim.io https://canopytax.zendesk.com https://checkoutshopper-live.adyen.com https://checkoutshopper-live.cdn.adyen.com https://f.hubspotusercontent40.net https://cdn.pendo.io https://data.pendo.io https://pendo-static-4789186942795776.storage.googleapis.com https://content-4789186942795776.static.pendo.io https://content.product.canopytax.com https://data.product.canopytax.com https://app.pendo.io; font-src data: *.canopytax.com *.clientportal.com https://www.getcanopy.com https://us-central1-metal-appliance-191920.cloudfunctions.net https://beanstalk-production.s3.amazonaws.com https://beanstalk-production.s3-us-west-2.amazonaws.com https://beanstalk-production.s3.us-west-2.amazonaws.com https://s3-us-west-2.amazonaws.com https://canopy-cme-migrations.s3.amazonaws.com https://js.intercomcdn.com https://fonts.intercomcdn.com https://fonts.googleapis.com https://fonts.gstatic.com http://fonts.gstatic.com https://static.userguiding.com https://cdn.pendo.io; worker-src blob: *.canopytax.com *.clientportal.com https://www.getcanopy.com https://us-central1-metal-appliance-191920.cloudfunctions.net https://beanstalk-production.s3.amazonaws.com https://beanstalk-production.s3-us-west-2.amazonaws.com https://beanstalk-production.s3.us-west-2.amazonaws.com https://s3-us-west-2.amazonaws.com https://canopy-cme-migrations.s3.amazonaws.com; frame-ancestors 'self' https://app.canopytax.com https://*.clientportal.com https://app.pendo.io; upgrade-insecure-requests; report-uri https://app.canopytax.com/_/csp-reports 1
base-uri 'none'; object-src 'none'; script-src 'strict-dynamic' 'report-sample' https: 'unsafe-inline' 'nonce-7977bd89a68538757bd4905a463d1b3b'; report-uri https://o109800.ingest.sentry.io/api/1323222/security/?sentry_key=23c48c605cea4da7b42d295927d29b7a 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net *.yotpo.com *.googleapis.com www.mobilityshop.co.uk data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.sagepay.com live.opayo.eu.elavon.com *.yotpo.com www.mobilityshop.co.uk 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com www.mobilityshop.co.uk 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com p.yotpoapi.com www.youtube.com www.youtube-nocookie.com *.sagepay.com live.opayo.eu.elavon.com *.addthis.com *.meetanshi.com *.yotpo.com www.mobilityshop.co.uk 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io p.yotpoapi.com cdn-yotpo-images-production.yotpo.com blob: *.meetanshi.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com https://meetanshi.com/media/logo.png *.yotpo.com www.mobilityshop.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com p.yotpoapi.com cdn-widgetsrepository.yotpo.com https://www.clarity.ms https://www.smartsuppchat.com https://widget-v3.smartsuppcdn.com https://bootstrap.smartsuppchat.com https://q.clarity.ms https://translations.smartsuppcdn.com wss://websocket-visitors.smartsupp.com *.sagepay.com *.eu.elavon.com *.opayo.cloud *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.avada.io *.shopify.com *.meetanshi.com *.yotpo.com www.mobilityshop.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://widget-v3.smartsuppcdn.com *.fontawesome.com https://fonts.bunny.net cdn.jsdelivr.net *.yotpo.com *.googleapis.com www.mobilityshop.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.mobilityshop.co.uk 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.ideal-postcodes.co.uk p.yotpoapi.com cdn-yotpo-images-production.yotpo.com https://bootstrap.smartsuppchat.com https://q.clarity.ms https://widget-v3.smartsuppcdn.com https://translations.smartsuppcdn.com wss://websocket-visitors.smartsupp.com *.sagepay.com *.eu.elavon.com *.addthis.com https://get.geojs.io *.avada.io *.meetanshi.com *.yotpo.com www.mobilityshop.co.uk 'self' 'unsafe-inline'; child-src www.mobilityshop.co.uk http: https: blob: 'self' 'unsafe-inline'; default-src www.mobilityshop.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com fonts.gstatic.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com stagescycling.com *.stagescycling.com *.cloudflare.com data: *.google.co.uk *.google.com google.com *.googleapis.com *.googleusercontent.com *.facebook.net *.reviews.co.uk *.reviews.io www.googletagmanager.com googletagmanager.com tagmanager.google.com *.pinterest.com *.pinimg.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com stagescycling.com *.stagescycling.com *.affirm.com data: *.facebook.net www.googletagmanager.com googletagmanager.com tagmanager.google.com *.sharethis.com *.sleeknote.com *.pinterest.com *.pinimg.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.sharethis.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.affirm.com *.affirm.ca *.certcapture.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com platform.twitter.com www.xtento.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com stagescycling.com *.stagescycling.com *.cloudflare.com *.google.co.uk google.com *.gstatic.com *.googleapis.com *.googleusercontent.com *.facebook.net data: *.reviews.co.uk *.reviews.io *.braintreegateway.com *.kaptcha.com *.paypal.com *.paypalobjects.com *.geoplugin.net *.tagserve.com www.googletagmanager.com googletagmanager.com tagmanager.google.com *.bugherd.com *.hotjar.com *.arcot.com *.pinterest.com *.pinimg.com *.sleeknote.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.sharethis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com *.affirm.com *.affirm.ca *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.googleapis.com https://*.googleusercontent.com magefan.com cm.magefan.com pinterest.com assets.pinterest.com syndication.twitter.com flagpedia.net www.xtento.com cdn.xtento.com stagescycling.com *.stagescycling.com *.bluesnap.com *.cloudflare.com *.google.co.uk google.com *.googleapis.com *.googleusercontent.com *.google-analytics.com *.googleadservices.com *.ytimg.com *.paypal.com *.paypalobjects.com blob: *.reviews.co.uk *.reviews.io *.geoplugin.net *.tagserve.com *.klarnaevt.com *.klarnacdn.net *.klarna.com googletagmanager.com tagmanager.google.com *.sleeknote.com *.bing.com *.magentocommerce.com *.hotjar.com *.arcot.com *.pinterest.com *.pinimg.com maps.googleapis.com *.amazonaws.com www.google.it www.google.fr data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.sharethis.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.affirm.com *.affirm.ca *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com player.vimeo.com twitter.com platform.twitter.com static.addtoany.com maps.googleapis.com www.xtento.com cdn.xtento.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com stagescycling.com *.stagescycling.com *.avmws.com *.cloudflare.com *.cloudflareinsights.com *.clarity.ms *.freshworks.com *.google.co.uk google.com *.googleapis.com 'unsafe-eval' *.googleadservices.com *.googletagservices.com googletagmanager.com tagmanager.google.com *.klaviyo.com *.paypal.com *.paypalobjects.com data: *.pinterest.com *.pinimg.com *.segment.com *.sleeknote.com *.xtento.com *.sciencebehindecommerce.com *.dwin1.com *.awin1.com *.zenaps.com *.termly.io ajax.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.sharethis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.certcapture.com https://static.klaviyo.com *.google.com https://hcaptcha.com https://*.hcaptcha.com maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com stagescycling.com *.stagescycling.com *.affirm.com *.cloudflare.com *.cloudfront.net *.freshworks.com *.google.co.uk google.com *.googleusercontent.com *.facebook.net data: 'unsafe-inline' *.paypal.com *.reviews.co.uk *.reviews.io *.klaviyo.com *.pinterest.com *.pinimg.com www.googletagmanager.com tagmanager.google.com *.sciencebehindecommerce.com *.dwin1.com *.awin1.com *.zenaps.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src stagescycling.com *.stagescycling.com *.cloudflare.com *.google.co.uk *.google.com google.com *.gstatic.com *.googleapis.com *.googleusercontent.com *.googletagmanager.com *.doubleclick.net *.googleadservices.com *.googlesyndication.com *.googletagservices.com *.arcot.com *.pinterest.com *.pinimg.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.sharethis.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com *.affirm.com *.affirm.ca *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://ipinfo.io *.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com stats.addtoany.com www.gstatic.com maps.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com stagescycling.com *.stagescycling.com *.bing.com *.clarity.ms *.cloudflare.com data: *.freshworks.com *.google.co.uk google.com *.googleapis.com *.googleusercontent.com googletagmanager.com tagmanager.google.com about: *.klaviyo.com *.sleeknote.com *.googleadservices.com *.pinterest.com *.pinimg.com *.termly.io www.google.it 'self' 'unsafe-inline'; child-src *.certcapture.com stagescycling.com *.stagescycling.com *.cloudflare.com *.youtube.com *.google.co.uk *.google.com google.com *.gstatic.com *.googleapis.com *.googleusercontent.com *.doubleclick.net *.googlesyndication.com www.googletagmanager.com googletagmanager.com tagmanager.google.com data: blob: *.arcot.com *.pinterest.com *.pinimg.com http: https: blob: 'self' 'unsafe-inline'; default-src stagescycling.com *.stagescycling.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://stagescycling.com/en_us/csp_report_watch; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://*.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://www.jablonet.net https://connect.facebook.net https://requestor.bezpecnostnicentrum.cz https://logbook.jablonet.net https://logbook-dev.jablonet.net https://logbook-stg.jablonet.net https://logbook-val.jablonet.net; report-uri https://files.jablonet.net/security-policy/csp.php; 1
object-src 'none';base-uri 'self';script-src 'nonce-tE762Vry28JET2t87QKpDA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'self' 'nonce-meEIxA2eyEfv6fnMAXFjmu/ioq0aAwoIbFp+V+H7w8o=' 'strict-dynamic' 'wasm-unsafe-eval' www.youtube.com  az416426.vo.msecnd.net cdn.cookielaw.org www.google-analytics.com maps.googleapis.com www.googletagmanager.com  dl.episerver.net www.youtube.com www.google.com www.gstatic.com snap.licdn.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.com.ai https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.ms https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.vg https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat  https://connect.facebook.net/ https://munchkin.marketo.net/ static.hotjar.com script.hotjar.com https://cdn.jsdelivr.net/ https://cdn.cookielaw.org/;object-src 'none';base-uri 'self';report-uri https://o4507537122852864.ingest.de.sentry.io/api/4507764299726928/security/?sentry_key=2e67b3fa9c193f38db8ea33933d09ffa&sentry_environment=production&sentry_release=sprint24; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://account.samsung.com https://applepay.cdn-apple.com https://centinelapi.cardinalcommerce.com https://ddc.worldpay.com https://h.online-metrix.net https://h64.online-metrix.net https://connect.tosspayments.com *.tosspayments.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https: http://*.cloudfront.net; font-src 'self' https: data:; connect-src 'self' https://centinelapi.cardinalcommerce.com https://ddc.worldpay.com https://connect.tosspayments.com *.tosspayments.com; frame-src 'self' https://applepay.cdn-apple.com https://centinelapi.cardinalcommerce.com https://ddc.worldpay.com https://connect.tosspayments.com *.tosspayments.com; object-src 'none'; base-uri 'self'; form-action 'self' https://account.samsung.com https://centinelapi.cardinalcommerce.com; frame-ancestors 'self'; report-uri /portal/csp-report.api 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://challenges.cloudflare.com https://*.hsforms.net https://*.hubspot.com https://*.hs-scripts.com https://*.hs-analytics.net https://b3953882.smushcdn.com; img-src 'self' data: https: blob:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-eval' https: http: 'nonce-YjkxODgwNGMtYTkzOC00MzIxLWIxYWEtMDJlMTUxNDdjZjk1' 'strict-dynamic'; script-src-elem 'self' 'unsafe-inline' https://yamap.com https://www.googletagmanager.com https://js.stripe.com https://apis.google.com connect.facebook.net d.line-cdn.net d.line-scdn.net https://www.clarity.ms https://scripts.clarity.ms; style-src 'self' 'unsafe-inline' https://use.fontawesome.com https://accounts.google.com/gsi/style https://www.gstatic.com; font-src 'self' data: https://use.fontawesome.com https://fonts.gstatic.com; img-src 'self' https: blob: data:; object-src 'none'; form-action 'self'; connect-src 'self' https://*; worker-src 'self' blob:; child-src 'self' blob:; report-uri https://twsl4dsz5v3oknxl3hwsjkphty0gioei.lambda-url.ap-northeast-1.on.aws/; frame-src 'self' https://docs.google.com https://accounts.google.com https://labo.yamap.com https://js.stripe.com https://www.youtube-nocookie.com https://www.youtube.com blob:; 1
font-src fonts.gstatic.com use.typekit.net *.paddypallin.com.au data: *.gstatic.com https://maxcdn.bootstrapcdn.com https://use.typekit.net *.paypal.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.klaviyo.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net https://*.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.paddypallin.com.au https://*.facebook.com https://*.google.com *.braintree-api.com *.braintreegateway.com *.dotdigital-pages.com *.dotdigital.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app www.google.com *.cardinaltrusted.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.twitter.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com https://img.youtube.com p.typekit.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.paddypallin.com.au *.nextopia.net https://*.zipmoney.com.au https://*.facebook.com *.data-dynamic.net https://api.feefo.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.gstatic.com *.google.com *.google.com.au *.google.co.in *.zip.co https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cloudfront.net t.zip.co static.zipmoney.com.au static.zip.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://cdn.searchspring.net/intellisuggest/is.min.js https://*.zip.com.au *.paddypallin.com.au *.nextopia.net *.ecomm-nav.com https://*.zipmoney.com.au *.nextopiasoftware.com connect.facebook.net https://*.safelinks.protection.outlook.com/ *.zdassets.com *.barilliance.com *.barilliance.net *.newrelic.com *.nr-data.net *.google.com https://*.cloudfront.net *.zopim.com *.afterpay.com *.braintree-api.com *.braintreegateway.com https://api.feefo.com https://register.feefo.com https://snapui.searchspring.io https://*.searchspring.io *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.afterpaycdn.com *.squarecdn.com *.cash.app www.google.com/recaptcha/ www.gstatic.com/recaptcha/ cdn.nextopia.net *.googleapis.com *.gstatic.com static.client.cardinaltrusted.com *.cardinalcommerce.com *.hotjar.com *.jsdelivr.net app.anyroad.com static.hotjar.com static.klaviyo.com stats.g.doubleclick.net *.google.co.in cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://www.googletagmanager.com tagmanager.google.com static.zipmoney.com.au static.zip.co zip.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com unsafe-inline assets.braintreegateway.com *.paddypallin.com.au data: https://fonts.googleapis.com *.gstatic.com https://maxcdn.bootstrapcdn.com https://use.typekit.net https://p.typekit.net *.nextopia.net *.cloudfront.net *.afterpay.com *.paypal.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app cdn.nextopia.net *.zip.co cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.paddypallin.com.au *.zdassets.com *.paypal.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintreegateway.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://beacon.searchspring.io/beacon *.zopim.com *.google-analytics.com *.googleapis.com https://*.zipmoney.com.au *.paddypallin.com.au https://*.cloudfront.net https://*.zip.co https://*.zip.com.au *.nr-data.net *.zendesk.com *.zdassets.com *.afterpay.com *.braintree-api.com https://api.feefo.com https://snapui.searchspring.io https://*.searchspring.io https://analytics.searchspring.net *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com *.nextopia.net *.cardinaltrusted.com *.execute-api.us-east-1.amazonaws.com *.barilliance.net www.barilliance.net api.barilliance.net stats.g.doubleclick.net *.hotjar.io static.hotjar.com ws15.hotjar.com capig.stape.gl static.klaviyo.com widget-mediator.zopim.com *.google.co.in webchat.dotdigital.com webchat.staging.dotdigital.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io *.cloudflare.com *.twitter.com *.twimg.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' www.googletagmanager.com www.google-analytics.com www.google.com maps.googleapis.com *.api.useinsider.com api.useinsider.com platform.getqonfi.com cdn.mindbehind.com app.storyblok.com consent.cookiebot.com eu.fw-cdn.com *.clarity.ms s.pinimg.com ct.pinterest.com connect.facebook.net vercel.live 'unsafe-inline' 'unsafe-eval' www.gstatic.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: *.hst.fietsenwijk.nl *.rsc.cdn77.org http://*.rsc.cdn77.org *.hypernode.io a.storyblok.com *.tile.openstreetmap.org *.googleapis.com maps.gstatic.com www.googletagmanager.com www.google-analytics.com analytics.google.com www.google.com www.google.rs btms.biketotaal.nl connect.facebook.net; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io insights.algolia.io api.storyblok.com gapi.storyblok.com www.google.com maps.googleapis.com www.google-analytics.com www.googletagmanager.com api.pro6pp.nl api.trustpilot.com invitations-api.trustpilot.com api.useinsider.com *.api.useinsider.com platform.getqonfi.com *.hypernode.io app.mindbehind.com consentcdn.cookiebot.com *.clarity.ms ct.pinterest.com connect.facebook.net pagead2.googlesyndication.com btms.biketotaal.nl; frame-src 'self' www.google.com www.googletagmanager.com consentcdn.cookiebot.com btms.biketotaal.nl ct.pinterest.com vercel.live; font-src 'self'; worker-src 'self' api.useinsider.com blob:; media-src 'self' *.hst.fietsenwijk.nl *.rsc.cdn77.org a.storyblok.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://challenges.cloudflare.com https://platform.x.com https://platform.twitter.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://www.wbtc.network https://wbtc.network https://wbtc-web-ssr-staging.wteam.allsandlab.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://challenges.cloudflare.com https://syndication.twitter.com https://cdn.syndication.twimg.com https://sentry.wbtc.network; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://cdn.embedly.com https://challenges.cloudflare.com https://platform.x.com https://platform.twitter.com; media-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://cdn.checkout.com *.careem-pay.com *.klevu.com *.ksearchnet.com *.stape.io *.fontawesome.com https://fonts.bunny.net maps.googleapis.com fonts.intercomcdn.com maxcdn.bootstrapcdn.com data: checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.tabby.ai cdn.tabby.sa fonts.googleapis.com storage.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://accounts.google.com https://appleid.apple.com maps.googleapis.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com https://js.checkout.com *.klarna.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.b-cdn.net *.tap.company *.careem-pay.com platform.twitter.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.stape.io maps.googleapis.com *.decibelinsight.net https://accounts.google.com https://appleid.apple.com checkout.tabby.ai checkout.tabby.sa 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.b-cdn.net pinterest.com assets.pinterest.com syndication.twitter.com *.klevu.com *.ksearchnet.com magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com *.stape.io https://firebasestorage.googleapis.com maps.googleapis.com livecdn.petzone.com storage.inhabitad.com petzone.com www.google.co.in downloads.intercomcdn.com js.intercomcdn.com statsjs.klevu.com analytics.tiktok.com *.decibelinsight.net flagpedia.net checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.tabby.ai cdn.tabby.sa fonts.googleapis.com storage.googleapis.com *.tamara.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://*.checkout.com *.klarnacdn.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.b-cdn.net *.careem-pay.com *.cloudflare.com twitter.com platform.twitter.com *.klevu.com *.ksearchnet.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.stape.io *.avada.io maps.googleapis.com polyfill.io  googleapis.com delivery.inhabitad.com static.cloudflareinsights.com widget.intercom.io js.intercomcdn.com statsjs.klevu.com https://statsjs.klevu.com stape.petzone.com www.clarity.ms scripts.clarity.ms analytics.tiktok.com cdn.decibelinsight.net widget.decibelinsight.net *.decibelinsight.net https://cdn.logrocket.io https://cdn.lr-ingest.io https://cdn.lr-in.com https://cdn.lr-in-prod.com https://cdn.lr-ingest.com https://cdn.ingest-lr.com https://cdn.lr-intake.com https://cdn.intake-lr.com https://cdn.logr-ingest.com https://cdn.lrkt-in.com https://cdn.lgrckt-in.com https://cdn.logr-in.com checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.segment.com www.google.com cdn.sift.com score.jcsc.online seondf.com deviceinf.com getdeviceinf.com *.tamara.co https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://cdn.checkout.com *.b-cdn.net *.klevu.com *.ksearchnet.com *.googleapis.com *.googletagmanager.com *.stape.io *.fontawesome.com https://fonts.bunny.net maps.googleapis.com storage.inhabitad.com *.decibelinsight.net maxcdn.bootstrapcdn.com *.gstatic.com *.tamara.co https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tamara.co 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://js.checkout.com *.klarnaevt.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.dev.tap.company *.tap.company *.klevu.com *.ksearchnet.com *.google-analytics.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog *.stape.io https://get.geojs.io *.avada.io wss://nexus-websocket-a.intercom.io maps.googleapis.com places.googleapis.com 'self' https://api.petzone.com delivery.inhabitad.com static.cloudflareinsights.com cloudflareinsights.com api-iam.intercom.io nexus-websocket-a.intercom.io *.intercom.io f.clarity.ms www.clarity.ms analytics.tiktok.com collection.decibelinsight.net wss://collection.decibelinsight.net *.decibelinsight.net capig.stape.cloud https://accounts.google.com https://appleid.apple.com https://*.logrocket.io https://*.lr-ingest.io https://*.logrocket.com https://*.lr-in.com https://*.lr-in-prod.com https://*.lr-ingest.com https://*.ingest-lr.com https://*.lr-intake.com https://*.intake-lr.com https://*.logr-ingest.com https://*.lrkt-in.com https://*.lgrckt-in.com https://*.logr-in.com www.gstatic.com checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.segment.com api.segment.com api.segment.io api.amplitude.com *.seondfresolver.com *.deviceinfresolver.com *.getdeviceinfresolver.com *.tamara.co 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.seondnsresolve.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://maps.googleapis.com/; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://shopstatic.magflags.de https://static.car-flags.eu https://static.car-flag.co.uk https://static.auto-fahnen.net https://static.auto-flaggen.at https://static.car-flags.net https://static.magflags.net https://static.autofahne.ch data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://api.mapbox.com https://shopstatic.magflags.de https://static.car-flags.eu https://static.car-flag.co.uk https://static.auto-fahnen.net https://static.auto-flaggen.at https://static.car-flags.net https://static.magflags.net https://static.autofahne.ch https://media.magflags.de https://media.car-flags.eu https://media.car-flag.co.uk https://media.auto-fahnen.net https://media.auto-flaggen.at https://media.car-flags.net https://media.magflags.net https://media.autofahne.ch data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com widget.freshworks.com m2epro.freshdesk.com *.stripe.com *.stripe.network https://*.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://assets.adobedtm.com https://www.google-analytics.com https://static.hotjar.com https://script.hotjar.com https://m.stripe.network https://*.stripecdn.com https://*.hcaptcha.com https://track.magflags.de https://shopstatic.magflags.de https://static.car-flags.eu https://static.car-flag.co.uk https://static.auto-fahnen.net https://static.auto-flaggen.at https://static.car-flags.net https://static.magflags.net https://static.autofahne.ch 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com *.stripe.network *.stripecdn.com *.amazon.com assets.braintreegateway.com https://shopstatic.magflags.de https://static.car-flags.eu https://static.car-flag.co.uk https://static.auto-fahnen.net https://static.auto-flaggen.at https://static.car-flags.net https://static.magflags.net https://static.autofahne.ch https://www.magflags.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com widget.freshworks.com m2epro.freshdesk.com autocomplete2.postdirekt.de *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com wss://ws.hotjar.com https://content.hotjar.io https://*.stripe.com https://www.google-analytics.com https://www.google.com https://api.braintreegateway.com https://track.magflags.de https://shopstatic.magflags.de https://static.car-flags.eu https://static.car-flag.co.uk https://static.auto-fahnen.net https://static.auto-flaggen.at https://static.car-flags.net https://static.magflags.net https://static.autofahne.ch 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://actionnetwork.org https://*.everyaction.com https://*.ngpvan.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.everyaction.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https://www.google-analytics.com https://www.googletagmanager.com https://*.everyaction.com https://*.ngpvan.com https://i.ytimg.com; frame-src https://*.everyaction.com https://*.ngpvan.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://*.everyaction.com; report-uri https://compassionandchoices.report-uri.com/r/d/csp/enforce 1
default-src 'self'; img-src * data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' https://*.googlesyndication.com https://*.doubleclick.net https://www.googletagservices.com https://fundingchoicesmessages.google.com https://*.adtrafficquality.google; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://*.googlesyndication.com https://*.doubleclick.net https://fundingchoicesmessages.google.com https://*.adtrafficquality.google; connect-src 'self' https://*.googlesyndication.com https://*.doubleclick.net https://fundingchoicesmessages.google.com https://csi.gstatic.com https://*.adtrafficquality.google; font-src 'self' https://fonts.gstatic.com data:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com https://maps.googleapis.com https://*.cloudfront.net https://use.typekit.net https://static.hotjar.com https://script.hotjar.com https://www.clarity.ms https://scripts.clarity.ms https://cookie-cdn.cookiepro.com https://cdn.bc0a.com https://contact-api.inguest.com https://cdn.noibu.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com https://*.cloudfront.net https://use.typekit.net https://p.typekit.net; img-src 'self' data: https: blob:; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net https://*.cloudfront.net https://use.typekit.net https://p.typekit.net data:; frame-src 'self' https://www.google.com https://maps.googleapis.com https://streamable.com; frame-ancestors 'self'; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://maps.googleapis.com https://*.cloudfront.net https://pagead2.googlesyndication.com https://cookie-cdn.cookiepro.com https://geolocation.onetrust.com https://z.clarity.ms https://c.clarity.ms https://ixfd2-api.bc0a.com; base-uri 'self' 1
default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; frame-ancestors 'none' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cleverreach.com 'self' 'unsafe-inline'; frame-ancestors *.storyblok.com 'self'; frame-src bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://analytics.google.com https://*.usercentrics.eu https://vimeo.com https://*.vimeocdn.com https://*.youtube.com https://*.youtube-nocookie.com https://*.googleapis.com https://*.googletagmanager.com https://tagmanager.google.com js.mollie.com https://app.storyblok.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://*.googleapis.com *.cloudfront.net https://*.usercentrics.eu https://googleads.g.doubleclick.net https://www.googleadservices.com https://analytics.google.com https://*.vimeocdn.com https://www.google.de https://www.facebook.com https://www.mollie.com https://api.mapbox.com *.storyblok.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.gstatic.com https://googleads.g.doubleclick.net https://analytics.google.com https://*.usercentrics.eu https://*.youtube.com https://vimeo.com https://*.googleapis.com *.googletagmanager.com tagmanager.google.com https://*.storyblok.com https://connect.facebook.net https://*.clarity.ms https://svrdntfctn.com js.mollie.com *.storyblok.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.storyblok.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://*.googleapis.com https://*.usercentrics.eu https://www.googleadservices.com https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://*.clarity.ms autocomplete2.postdirekt.de *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://translate.google.com https://translate.googleapis.com https://translate-pa.googleapis.com https://www.gstatic.com https://maps.googleapis.com https://www.paytr.com https://*.paytr.com https://www.clarity.ms https://*.clarity.ms; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.gstatic.com https://translate.googleapis.com; img-src 'self' data: https: blob:; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com data:; connect-src 'self' https://fonts.googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://www.google.com https://www.googletagmanager.com https://*.googletagmanager.com https://translate.googleapis.com https://translate-pa.googleapis.com https://translate.google.com https://maps.googleapis.com https://nominatim.openstreetmap.org https://www.paytr.com https://*.paytr.com https://*.clarity.ms https://c.clarity.ms https://c.bing.com https://stats.g.doubleclick.net https://*.g.doubleclick.net https://www.google.com.tr; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; report-uri /public/csp-report.php; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://*.google-analytics.com https://*.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com https://us.i.posthog.com https://us-assets.i.posthog.com https://n.twcm.dev https://n.terrywhitechemmartonline.com.au https://n.terrywhitechemmart.com.au https://*.doubleclick.net https://*.facebook.net https://*.clarity.ms https://*.crazyegg.com https://*.bkrtx.com https://bat.bing.com https://s.yimg.com https://extend.vimeocdn.com https://static.cloudflareinsights.com https://challenges.cloudflare.com https://secure.ewaypayments.com https://portal.afterpay.com https://portal.sandbox.afterpay.com https://js.afterpay.com https://js.squarecdn.com https://*.squarecdn.com; img-src 'self' data: blob: https://*.terrywhitechemmart.com.au https://terrywhitechemmart.com.au https://*.twcm.dev https://*.cloudinary.com https://*.skulibrary.com https://images.prismic.io https://prismic-io.s3.amazonaws.com https://*.googletagmanager.com https://*.google.com https://*.google.com.au https://maps.googleapis.com https://maps.gstatic.com https://*.doubleclick.net https://*.facebook.com https://*.bing.com https://*.clarity.ms https://*.afterpay.com https://*.zitcha.tech https://*.zitcha.app https://sp.analytics.yahoo.com; frame-src 'self' https://*.youtube.com https://*.youtube-nocookie.com https://player.vimeo.com https://*.skulibrary.com https://*.terrywhitechemmart.com.au https://terrywhitechemmart.com.au https://challenges.cloudflare.com https://secure.ewaypayments.com https://secure-au.sandbox.ewaypayments.com https://web.squarecdn.com; connect-src 'self' data: https://*.terrywhitechemmart.com.au https://terrywhitechemmart.com.au https://*.twcm.dev https://*.google-analytics.com https://*.googletagmanager.com https://*.google.com https://*.googleapis.com https://us.i.posthog.com https://us-assets.i.posthog.com https://n.twcm.dev https://n.terrywhitechemmartonline.com.au https://n.terrywhitechemmart.com.au https://*.doubleclick.net https://*.facebook.com https://connect.facebook.net https://*.clarity.ms https://*.bing.com https://bat.bing.com https://s.yimg.com https://*.crazyegg.com https://*.braze.com https://*.braze.eu https://cloudflareinsights.com https://*.squareup.com https://secure.ewaypayments.com https://secure-au.sandbox.ewaypayments.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; form-action 'self' https://secure.ewaypayments.com https://secure-au.sandbox.ewaypayments.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-dRsrl3pukJ7JEGlFAQTGnw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'none'; base-uri 'self'; child-src 'self'; connect-src 'self' https://webpush.ii.nl/; font-src 'self'; form-action 'self'; frame-ancestors 'self'; frame-src 'self'; img-src 'self' data: *.ii.nl blob:; manifest-src 'self'; media-src 'none'; object-src 'none'; report-uri /csp-report; script-src 'self'; style-src 'unsafe-inline' 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-cnJOlcHe8krfFdBzzjYCcQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https://www.google-analytics.com; frame-src 'self'; frame-ancestors 'self' 1
default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self' https:; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://*.google-analytics.com https://*.googletagmanager.com https://js.braintreegateway.com https://*.braintree-api.com https://cdn.auth0.com https://cdn.au.auth0.com https://*.auth0.com https://js.monitor.azure.com https://cdn.trustyou.com https://*.mews.com https://*.mews.li; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https://www.google.com https://www.googletagmanager.com https://js.braintreegateway.com https://*.auth0.com https://auth.yha.com.au https://auth-dev.yha.com.au https://www.youtube.com https://www.youtube-nocookie.com https://*.mews.com https://*.mews.li https://td.doubleclick.net; worker-src 'self' blob:; report-uri /api/cspReport/post 1
font-src *.force.com https://content.instrumentation.getconga.com 'self' https://stats.g.doubleclick.net https://use.typekit.net https://iib7p.gslb.internal.closebrothers.com:7945 https://cdn.skuid.net https://www.iconspng.com https://flyclipart.com https://www.gstatic.com https://*.qualified-preview.com https://composer.congamerge.com https://ict.infinity-tracking.net https://www.google.com https://fonts.gstatic.com/ www.skynettechnologies.com https://ada.skynettechnologies.us https://irs.tools.investis.com https://closebrothers-crm01.live-preview.salesforce-experience.com https://*.qualified.com blob: https://go.pardot.com https://go.demo.pardot.com https://www.closebrothers.com https://cdn-ukwest.onetrust.com https://data.instrumentation.getconga.com code.highcharts.com https://secure.enterpriseforesight247.com https://pagead2.googlesyndication.com https://infogram.com skynettechnologies.com https://googleads.g.doubleclick.net https://app.calconic.com https://r1.dotdigital-pages.com https://d2oh4tlt9mrke9.cloudfront.net https://maps.a.forceusercontent.com https://www2.closeassetfinanceandleasing.co.uk https://fonts.googleapis.com https://e.infogram.com wss://*.qualified.com https://privacyportal-uk.onetrust.com https://tagmanager.google.com https://geolocation.onetrust.com https://www.closeassetfinance.co.uk https://web.lon.infinity-tracking.com https://script.crazyegg.com https://closebrothers-crm01.my.salesforce.com assets.investisdigital.com https://nas.lon.infinity-tracking.com https://www.googletagmanager.com https://www.google-analytics.com *.salesforce.com qualified.com data:; report-to sfdc-csp-ep; report-uri https://closebrothers-crm01.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D58000000pVfO&networkId=0DMPy0000000K3a&type=communities 1
upgrade-insecure-requests; report-to https://www.algosolutions.com/csp-report.php;; report-uri https://www.algosolutions.com/csp-report.php;; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com fonts.googleapis.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * www.gstatic.com www.google.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org *.openstreetmap.org maps.googleapis.com maps.gstatic.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com 'self' data: data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com chimpstatic.com downloads.mailchimp.com *.list-manage.com cdn.scalapay.com *.gstatic.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.cash.app downloads.mailchimp.com fast.fonts.net *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * maps.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';script-src 'self' 'nonce-RHFTfgcdCkmoNMSsV5OkyCM5' 'unsafe-eval' https://cdn.cookielaw.org https://www.googletagmanager.com https://*.googletagmanager.com https://*.cdn-net.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.googletagmanager.com https://www.gstatic.com;img-src 'self' http://tsys.d2.sc.omtrdc.net https://fonts.gstatic.com https://content.ethoca.com https://www.truist.com https://sandbox.content.ethoca.com https://*.google-analytics.com https://*.googletagmanager.com blob: data:;frame-src 'self' https://*.googletagmanager.com;font-src 'self' https://fonts.gstatic.com data:;connect-src 'self' https://cdn.cookielaw.org https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://geolocation.onetrust.com https://privacyportal.onetrust.com https://www.google.com;child-src 'self' https://*.googletagmanager.com;report-uri /Centre/Public/CspReporter/Report 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net https://assets.baysupply.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.getbalance.com *.blnce.io 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com https://www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.certcapture.com *.getbalance.com *.blnce.io https://app.hubspot.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.certcapture.com *.getbalance.com *.blnce.io https://firebasestorage.googleapis.com https://media.baysupply.com https://assets.baysupply.com https://www.paypalobjects.com https://www.google.co.in https://heapanalytics.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.certcapture.com *.getbalance.com *.blnce.io *.avada.io *.shopify.com https://assets.baysupply.com https://cdn.heapanalytics.com https://cdn.logr-in.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.getbalance.com *.blnce.io *.fontawesome.com https://fonts.bunny.net https://assets.baysupply.com https://media.baysupply.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.certcapture.com *.getbalance.com *.blnce.io https://get.geojs.io *.avada.io *.google-analytics.com https://assets.baysupply.com https://ad.doubleclick.net https://r.logr-in.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-QkPpM2Qn-nmYZIxbFDWZqRTvWC5FrHOb1EVBlSd0PXzGGad93BLmVg' 'unsafe-eval' data: https://*.openstreetmap.org 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com *.hfmt-hamburg.de https://*.openstreetmap.org; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com *.hfmt-hamburg.de; style-src-elem 'self' 'nonce-QkPpM2Qn-nmYZIxbFDWZqRTvWC5FrHOb1EVBlSd0PXzGGad93BLmVg' data: 'report-sample'; font-src 'self' data:; script-src-elem 'self' 'nonce-QkPpM2Qn-nmYZIxbFDWZqRTvWC5FrHOb1EVBlSd0PXzGGad93BLmVg' 'strict-dynamic' https: 'unsafe-eval' 'report-sample'; connect-src 'self' *.hfmt-hamburg.de https://jobs.b-ite.com blob: data: https://*.openstreetmap.org; report-uri https://intranet.hfmt-hamburg.de/@http-reporting?csp=report&requestTime=1789273495730396&requestHash=e330125f4186bc87034e94bebf702828633e24a3 1
font-src https://www.gstatic.com *.dhlparcel.nl https://widgetcontent.thuiswinkel-cdn.org https://widget.thuiswinkel-cdn.org https://fonts.gstatic.com *.fontawesome.com *.gstatic.com 'self' data: https://widgets.trustedshops.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net *.googletagmanager.com *.doubleclick.net *.voegenshop.nl https://widgets.trustedshops.com www.xtento.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://belco-prod.s3-eu-central-1.amazonaws.com https://images.unsplash.com *.google.com *.google.nl *.mailcampaigns.nl *.cloudflare.com *.voegenshop.nl *.etrusted.com https://widgetcontent.thuiswinkel-cdn.org https://widget.thuiswinkel-cdn.org *.doubleclick.net www.xtento.com cdn.xtento.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://img.youtube.com https://www.mollie.com *.amazonaws.com *.hsforms.net *.hsforms.com 'self' data: www.google.com.ua https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com https://dlyyzort.jointcarrelage.fr data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://cdn.belco.io https://maps.googleapis.com *.dhlparcel.nl *.google-analytics.com *.mailcampaigns.nl *.cookiecode.nl *.clarity.ms *.cloudflare.com https://consent.studio https://widget.thuiswinkel.org https://widget.thuiswinkel-cdn.org https://cloud.umami.is www.xtento.com cdn.xtento.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com https://cdn.jsdelivr.net *.belco.io https://browser.sentry-cdn.com *.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com *.sendcloud.sc *.jsdelivr.net *.hsforms.net *.hsforms.com *.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.googletagmanager.com tagmanager.google.com https://dlyyzort.jointcarrelage.fr 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://*.googleapis.com *.dhlparcel.nl *.cloudflare.com *.etrusted.com https://widgetcontent.thuiswinkel-cdn.org https://widget.thuiswinkel-cdn.org https://static.klaviyo.com https://cdn.jsdelivr.net https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com *.sendcloud.sc *.jsdelivr.net *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com wss://chat.belco.io https://cdn.belco.io https://maps.googleapis.com https://player.vimeo.com *.doubleclick.net *.cookiecode.nl *.google.com *.voegenshop.nl https://consent.studio https://widgetcontent.thuiswinkel-cdn.org https://gateway.umami.is https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.belco.io https://*.ingest.sentry.io https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.analytics.google.com *.googletagmanager.com https://dlyyzort.jointcarrelage.fr 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://geowidget.easypack24.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * sandbox.przelewy24.pl secure.przelewy24.pl 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * apm.przelewy24.pl https://geowidget-app.inpost.pl/ https://sandbox-easy-geowidget.easypack24.net/ *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://konsola.apress24.pl https://www.czater.pl www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com static.przelewy24.pl www.gstatic.com gstatic.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com https://www.czater.pl s7.addthis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com sandbox.przelewy24.pl secure.przelewy24.pl apm.przelewy24.pl https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.czater.pl *.fontawesome.com unsafe-inline assets.braintreegateway.com https://geowidget.easypack24.net https://geowidget.inpost.pl 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com wss://s3.czater.pl https://www.czater.pl ekr.zdassets.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com sandbox.przelewy24.pl secure.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl *.easypack24.net *.inpost.pl *.openstreetmap.org 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-Hi5x2Xn2-USuCBzv60wFZQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://static.dhlecommerce.nl https://fonts.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com fonts.googleapis.com *.googleapis.com data: https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com www.google.com *.addthis.com *.twitter.com js.mollie.com *.multisafepay.com https://pay.google.com *.trustpilot.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://maps.googleapis.com https://maps.gstatic.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com maps.googleapis.com maps.gstatic.com *.googleapis.com cdn.deventrade.com *.addthisedge.com *.twitter.com https://firebasestorage.googleapis.com https://www.mollie.com *.multisafepay.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com https://static.dhlecommerce.nl *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ integrations.etrusted.com gateway.tweakwisenavigator.net popup.projects.webpages.one invitejs.trustpilot.com widget.trustpilot.com *.addthis.com *.moatads.com *.addthisedge.com *.twitter.com *.avada.io *.shopify.com js.mollie.com pay.google.com applepay.cdn-apple.com *.multisafepay.com https://pay.google.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.dhlecommerce.nl https://maps.googleapis.com https://fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.fontawesome.com https://fonts.bunny.net *.multisafepay.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://api-gw.dhlparcel.nl https://static.dhlecommerce.nl *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com widget.trustpilot.com https://get.geojs.io *.avada.io *.multisafepay.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; img-src 'self' data:; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://stackpath.bootstrapcdn.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://stackpath.bootstrapcdn.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://apis.google.com https://static.site24x7rum.com https://cdn.jsdelivr.net https://maxcdn.bootstrapcdn.com https://stackpath.bootstrapcdn.com; connect-src 'self' https://www.google-analytics.com https://col.site24x7rum.com; require-trusted-types-for 'script'; 1
default-src 'none'; manifest-src 'self'; script-src 'self' 'nonce-FBt5GHr9MLi1gRE7fXRK5A==' 'unsafe-eval' 'report-sample' data: act-on.ioactive.com info.ioactive.com yoast.com snap.licdn.com jobs.jobvite.com static-assets.ripplingcdn.com ats.rippling.com code.tidio.co www.tidio.co socket.tidio.co consent.cookiebot.com consentcdn.cookiebot.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com js-agent.newrelic.com ajax.googleapis.com apis.google.com www.google.com www.googletagmanager.com www.google-analytics.com googleads.g.doubleclick.net static.doubleclick.net googletagservices.com www.gstatic.com linkedin.com facebook.com twitter.com player.vimeo.com; script-src-attr 'self' 'unsafe-inline' 'report-sample'; worker-src 'self' blob: data: https:; style-src-elem 'self' 'unsafe-inline' 'report-sample' fonts.googleapis.com maxcdn.bootstrapcdn.com info.ioactive.com www.ioactive.com; style-src-attr 'self' 'unsafe-inline' 'report-sample'; font-src 'self' data: code.tidio.co www.tidio.co socket.tidio.co fonts.gstatic.com maxcdn.bootstrapcdn.com www.ioactive.com; img-src 'self' data: www.ioactive.com info.ioactive.com imgsct.cookiebot.com snap.licdn.com cdnjs.cloudflare.com www.google.com www.wpo365.com www.linkedin.com platform.linkedin.com facebook.com twitter.com www.youtube.com youtube.com www.youtube-nocookie.com player.vimeo.com vimeo.com px.ads.linkedin.com pagead2.googlesyndication.com www.googletagmanager.com www.googleadservices.com i.ytimg.com fonts.gstatic.com tidio-files-prod.s3.eu-west-1.amazonaws.com *.blogspot.com blogger.googleusercontent.com translate.google.com ioactive.eu; media-src 'self' data: blob: code.tidio.co www.tidio.co socket.tidio.co www.youtube.com youtube.com www.youtube-nocookie.com player.vimeo.com vimeo.com; frame-src 'self' data: blob: static.doubleclick.net td.doubleclick.net consentcdn.cookiebot.com jobs.jobvite.com static-assets.ripplingcdn.com ats.rippling.com www.google.com docs.google.com duckduckgo.com www.youtube.com youtube.com www.youtube-nocookie.com player.vimeo.com vimeo.com www.linkedin.com platform.linkedin.com facebook.com twitter.com code.tidio.co www.tidio.co socket.tidio.co www.blogger.com; connect-src 'self' blob: info.ioactive.com act-on.ioactive.com consent.cookiebot.com consentcdn.cookiebot.com js-agent.newrelic.com bam.nr-data.net code.tidio.co www.tidio.co socket.tidio.co wss://socket.tidio.co www.google-analytics.com region1.google-analytics.com www.google.com googletagmanager.com google.com www.linkedin.com platform.linkedin.com px.ads.linkedin.com twitter.com analytics.google.com stats.g.doubleclick.net ad.doubleclick.net pagead2.googlesyndication.com www.googleadservices.com www.googletagmanager.com metrics-collector.tidio.co; object-src 'none'; base-uri 'self'; form-action 'self' data: blob: static-assets.ripplingcdn.com ats.rippling.com jobs.jobvite.com act-on.ioactive.com info.ioactive.com www.google.com www.google-analytics.com www.gstatic.com; frame-ancestors 'self'; trusted-types default goog#html dompurify 'allow-duplicates'; report-uri https://www.ioactive.com/wp-json/ioactive/v1/csp-report 1
block-all-mixed-content; default-src 'none'; base-uri 'self'; child-src mc.yandex.ru mc.yandex.com blob:; connect-src 'self' tomesto.ru api.tomesto.ru wss://api.tomesto.ru https://scdn.tomesto.ru https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.ru *.bugsnag.com mc.yandex.ru mc.yandex.by mc.yandex.com mc.yandex.md mc.yandex.kz wss://mc.yandex.ru wss://mc.yandex.by wss://mc.yandex.com wss://mc.yandex.kz suggestions.dadata.ru *.nr-data.net https://*.tiles.mapbox.com https://api.mapbox.com https://events.mapbox.com; font-src 'self' fonts.gstatic.com data:; form-action 'self'; img-src 'self' https: data: blob:; manifest-src 'self'; media-src 'self' tomesto.ru *.tomesto.ru; object-src 'none'; script-src 'self' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' tomesto.ru *.tomesto.ru https://*.googletagmanager.com d2wy8f7a9ursnm.cloudfront.net mc.yandex.ru mc.yandex.com https://js-agent.newrelic.com *.nr-data.net 'nonce-5jEFULriTDNB+nWwKyWaXw=='; style-src 'self' 'unsafe-inline' tomesto.ru *.tomesto.ru fonts.googleapis.com; worker-src blob:; report-uri https://api.tomesto.ru/csp_report 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; frame-src https:; connect-src 'self' https:; 1
object-src  'none'; connect-src 'self' *.playboyplus.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.playboyplus.com join.gammasecure.com; script-src 'self' *.playboyplus.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.playboyplus.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
default-src 'self'; connect-src 'self' https://cloudflareinsights.com *.appmaster.io https://analytics.google.com https://*.analytics.google.com https://www.google-analytics.com  https://forms.hsforms.com https://maps.googleapis.com https://stats.g.doubleclick.net www.google.com; font-src 'self' data: https: ; img-src 'self' data: blob: https: ; media-src 'self' data: blob: https: ; object-src 'none'; frame-src 'self' *.appmaster.io *.recaptcha.net *.youtube.com widget.canny.io; base-uri 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'report-sample' *.appmaster.io *.hsforms.net https://maps.googleapis.com/maps/api/js https://www.googletagmanager.com/gtag/js https://www.gstatic.com/recaptcha/ *.recaptcha.net *.canny.io; manifest-src 'self'; script-src-elem 'self' https://static.cloudflareinsights.com 'unsafe-inline' *.appmaster.io *.hs-scripts.com *.hs-analytics.net *.hs-banner.com www.googletagmanager.com chat.appmaster.io;  style-src 'self' 'unsafe-inline' 'report-sample' *.appmaster.io https://fonts.googleapis.com; worker-src data: blob: studio.appmaster.io; report-uri https://s.appmaster.io/api/3/security/?sentry_key=f3a1f5e566804120856802b6ba1adda8; report-to apms; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.googletagmanager.com https://*.google-analytics.com https://www.google.com https://www.googleadservices.com https://*.doubleclick.net https://pagead2.googlesyndication.com https://connect.facebook.net https://snap.licdn.com https://s.pinimg.com https://*.pinterest.com https://www.redditstatic.com https://*.reddit.com https://bat.bing.com https://*.hotjar.com https://use.typekit.net https://p.typekit.net https://*.sentry-cdn.com https://static.cloudflareinsights.com https://capi-automation.s3.us-east-2.amazonaws.com; style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://use.typekit.net https://p.typekit.net https://fonts.gstatic.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://www.google.com https://*.googletagmanager.com https://*.doubleclick.net https://connect.facebook.net https://*.facebook.com https://px.ads.linkedin.com https://*.licdn.com https://*.pinterest.com https://*.reddit.com https://bat.bing.com https://*.hotjar.com https://static.cloudflareinsights.com https://cloudflareinsights.com https://*.sentry.io https://*.ingest.sentry.io https://account-staging.pointhacks.com.au https://pointhacks63196.api-us1.com; frame-src 'self' https://www.googletagmanager.com https://*.doubleclick.net https://*.facebook.com https://www.youtube.com https://www.youtube-nocookie.com https://pointhacks-spa-tools.fly.dev https://pointhacks-spa-tools-staging.fly.dev; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
font-src *.fontawesome.com fonts.gstatic.com kavat.com *.gstatic.com *.googleapis.com data: *.yotpo.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com assets.braintreegateway.com player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de cdn.dnky.co webchat.dotdigital.com *.klarna.com *.kustom.co https://www.tradera.com www.google.com www.googletagmanager.com *.trustpilot.com *.hotjar.com https://*.google.com/recaptcha/ checkout-uat.collector.se checkout.uat.walleydev.com *.weltpixel.com www.xtento.com *.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.klarna.com *.klarnaevt.com *.kustom.co editor-upload-cdn.optimonk.com kavat.com www.facebook.com www.googletagmanager.com *.googleadservices.com *.google-analytics.com https://googleads.g.doubleclick.net https://www.google.com https://www.google.se *.paypal.com *.paypalobjects.com *.ytimg.com https://www.facebook.com https://mcusercontent.com https://js.klevu.com https://*.mgr.consensu.org https://cdn.consentmanager.net https://d1pna5l3xsntoj.cloudfront.net https://cx.atdmt.com *.gstatic.com www.xtento.com cdn.xtento.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com js.authorize.net jstest.authorize.net www.googleadservices.com www.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com js.braintreegateway.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com cdn-scripts.signifyd.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net cdn.dnky.co api.comapi.com webchat.dotdigital.com *.klarna.com *.kustom.co apis.google.com cdn-asset.optimonk.com cdn.fibbl.com chimpstatic.com connect.facebook.net consent.cookiefirst.com core.helloretail.com d1pna5l3xsntoj.cloudfront.net gs-cdn.optimonk.com kavat.com onsite.optimonk.com pagead2.googlesyndication.com script.hotjar.com static.hotjar.com static.zdassets.com https://www.tradera.com widget-mediator.zopim.com www.googletagmanager.com *.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://maps.googleapis.com *.google.com *.gstatic.com https://connect.facebook.net/ *.trustpilot.com https://chimpstatic.com *.klarnacdn.net *.adyen.com https://js.klevu.com https://d1pna5l3xsntoj.cloudfront.net https://downloads.mailchimp.com *.list-manage.com *.hotjar.com *.hotjar.io *.gtm.adt313.net https://checkoutshopper-test.adyen.com https://*.mgr.consensu.org https://*.cloudflareinsights.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ checkout-uat.collector.se checkout.uat.walleydev.com https://www.googletagmanager.com tagmanager.google.com www.xtento.com cdn.xtento.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com cdn-asset.optimonk.com consent.cookiefirst.com d1pna5l3xsntoj.cloudfront.net fonts.googleapis.com kavat.com *.fonts.googleapis.com *.googleapis.com *.gstatic.com https://downloads.mailchimp.com https://js.klevu.com https://*.mgr.consensu.org https://d1pna5l3xsntoj.cloudfront.net tagmanager.google.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com payments.sandbox.braintree-api.com origin-analytics-sand.sandbox.braintree-api.com assets.braintreegateway.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net api.comapi.com webchat.dotdigital.com *.klarnaevt.com *.kustom.co api.fibbl.com cdn-account.optimonk.com cdn-limit.optimonk.com cdn-renderer.optimonk.com consent.cookiefirst.com core.helloretail.com edge.cookiefirst.com ekr.zdassets.com *.amazonaws.com front.optimonk.com jfapiprod.optimonk.com kavat.com kavat.zendesk.com pagead2.googlesyndication.com region1.google-analytics.com wss://*.zopim.com wss://widget-mediator.zopim.com www.google-analytics.com *.paypal.com *.cardinalcommerce.com *.stripe.com *.klarna.com *.klarnacdn.net *.google-analytics.com *.addwish.com *.doubleclick.net *.facebook.com *.hotjar.com https://*.mgr.consensu.org https://core.helloretail.com api.checkout.uat.walleydev.com https://www.google-analytics.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src core.helloretail.com kavat.com pagead2.googlesyndication.com arclight.vimeo.com lensflare.vimeo.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';connect-src 'self' https://api.aviata.kz wss://api.aviata.kz https://api.freedom-travel.kz/ wss://api.freedom-travel.kz/ https://*.aviata.kz https://sentry.aviata.kz https://mc.yandex.ru https://mc.yandex.com https://uaas.yandex.ru https://*.mindbox.ru https://csi.gstatic.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.googletagmanager.com https://www.google.kz https://www.googletraveladservices.com https://firebaseremoteconfig.googleapis.com https://firebaseinstallations.googleapis.com https://*.amplitude.com https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://*.g.doubleclick.net https://maps.googleapis.com https://amoconnect.ru https://api-cis.exponea.com https://*.cookieyes.com https://cdn-cookieyes.com;worker-src 'self';script-src 'self' 'strict-dynamic' https://*.mindbox.ru 'unsafe-eval' https://pagead2.googlesyndication.com https://api-cis.exponea.com https://challenges.cloudflare.com https://cdn-cookieyes.com https://cdn.cookieyes.com 'nonce-da2d6b17418c285ec1c421e3197a790b';style-src 'self' https://*.aviata.kz https://*.freedom-travel.kz 'unsafe-inline' https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com 'nonce-4201dc189737a92d75053c4361325db7';style-src-elem 'self' 'unsafe-inline' https://*.aviata.kz https://*.freedom-travel.kz https://fonts.googleapis.com;style-src-attr 'self' 'unsafe-inline';img-src 'self' data: https://aviata.kz https://aviata-dict.s3.eu-central-1.amazonaws.com https://freedom-travel.kz https://*.aviata.kz https://*.freedom-travel.kz https://mc.yandex.ru https://mc.yandex.com https://googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://fonts.gstatic.com https://*.google-analytics.com https://*.googletagmanager.com https://www.google.kz https://www.googletraveladservices.com https://securepubads.g.doubleclick.net https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://www.google.com https://maps.gstatic.com https://maps.googleapis.com https://cdn-cookieyes.com;font-src 'self' https://*.aviata.kz https://*.freedom-travel.kz https://fonts.gstatic.com data:;base-uri 'self';object-src 'none';form-action 'self' https://epay-kkb-proxy.platform.aviataproject.com https://api.freedompay.kz https://payments.ioka.kz/;upgrade-insecure-requests;child-src blob: https://mc.yandex.ru https://mc.yandex.com;frame-src blob: https://mc.yandex.ru https://mc.yandex.com https://tpc.googlesyndication.com https://www.google.com https://www.googletagservices.com/ https://securepubads.g.doubleclick.net https://*.safeframe.googlesyndication.com https://challenges.cloudflare.com https://cdn-cookieyes.com 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com *.cloudflare.com *.bootstrapcdn.com *.googleapis.com *.twitter.com nitropack.io *.nitrocdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.weltpixel.com challenges.cloudflare.com *.addthis.com *.trustpilot.com *.twitter.com *.vimeo.com *.doubleclick.net nitropack.io *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com *.disqus.com *.cloudflare.com *.google-analytics.com *.twitter.com *.contentsquare.net nitropack.io *.nitrocdn.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com ajax.cloudflare.com *.google-analytics.com apis.google.com static.affiliatly.com www.affiliatly.com affiliatly.com challenges.cloudflare.com *.disqus.com *.addthis.com *.googleapis.com *.cloudflare.com *.fontawesome.com googletagmanager.com graph.facebook.com *.gstatic.com *.moatads.com *.trustpilot.com widgets.pinterest.com *.contentsquare.com *.contentsquare.net cdn.tailwindcss.com cdn.jsdelivr.net *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.cloudflare.com *.googleapis.com *.gstatic.com *.twitter.com cdn.tailwindcss.com nitropack.io cdnjs.cloudflare.com *.nitrocdn.com cdn.jsdelivr.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com static.affiliatly.com www.affiliatly.com affiliatly.com *.cloudflare.com *.twitter.com *.contentsquare.net *.google-analytics.com *.nitrocdn.com nitropack.io *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://capitolarmory.com/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' load.gtm.synthesys.io; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: lh3.googleusercontent.com images.unsplash.com hel1.your-objectstorage.com; media-src 'self' hel1.your-objectstorage.com; frame-src load.gtm.synthesys.io; connect-src 'self' load.gtm.synthesys.io; font-src 'self' 1
font-src *.klarnacdn.net *.zip.co *.iyzipay.com *.gstatic.com *.cloudfront.net *.checkout.com data: 'self' 'unsafe-inline';frame-ancestors 'self';frame-src  *.demdex.net *.adyen.com *.criteo.net *.euw2.pure.cloud *.criteo.com *.salecycle.com *.tradedoubler.com *.pure.cloud *.bambuser.com 'self' 'unsafe-inline';img-src *.googleadservices.com *.ipredictive.com *.mdhv.io *.dmxleo.com *.bazaarvoice.com *.1rx.io *.brightcove.com  *.demdex.net *.dysoncanada.ca *.google.com *.adgrx.com *.dyson.hr *.boltdns.net  *.dyson.vn *.everesttech.net *.google.co.in *.yahoo.net *.afterpay.com *.yahoo.net *.zip.co *.contextweb.com *.adyen.com *.boldchat.com *.googletagmanager.com *.omtrdc.net *.euw2.pure.cloud *.assetsadobe2.com *.amazonaws.com *.adobe.com *.google-analytics.com *.riskified.com *.facebook.com *.doubleclick.net *.bidswitch.net *.adnxs.com *.media.net *.rubiconproject.com *.smartadserver.com *.taboola.com *.teads.tv *.3lift.com *.yahoo.com *.yahoo.net *.socdm.com *.casalemedia.com *.dable.io *.adingo.jp *.stickyadstv.com *.360yield.com *.rlcdn.com *.bing.com *.outbrain.com *.pubmatic.com *.smaato.net *.clmbtech.com *.aralego.com *.yieldmo.com *.dyson.com.ro *.yahoo.com *.criteo.com *.sc-trc.com *.aralego.net *.yahoo.net *.dyson.co.uk data: 'self' 'unsafe-inline';script-src https://mt.adobe.launch.script.test.js/ *.zencdn.net *.klarnaservices.com *.klarna.com *.afterpay.com *.queue-it.net *.dyson.com.ro *.cloudfront.net *.zipmoney.com.au *.zip.co *.boldchat.com *.dyson.com *.newrelic.com *.googleapis.com *.google-analytics.com *.adobedtm.com *.bazaarvoice.com *.optimizely.com *.nr-data.net *.newrelic.com *.euw2.pure.cloud *.go-mpulse.net *.googletagmanager.com *.criteo.com *.channeladvisor.com *.facebook.net *.brightcove.net *.tradedoubler.com *.amazonaws.com *.salecycle.com *.optimalpeople.fr *.pure.cloud *.riskified.com *.bambuser.com blob: 'self' 'unsafe-inline' 'unsafe-eval';style-src *.klarnacdn.net *.zip.co *.googleapis.com *.optimizely.com *.checkout.com 'self' 'unsafe-inline';object-src *.euw2.pure.cloud 'self' 'unsafe-inline';child-src *.euw2.pure.cloud blob: 'self' 'unsafe-inline';media-src *.dyson.com *.cloudfront.net *.s3.amazonaws.com *.assetsadobe.com *.euw2.pure.cloud blob: 'self' 'unsafe-inline';manifest-src 'self' 'unsafe-inline';connect-src *.klarnaservices.com *.klarnaevt.com *.klarna.com *.cloudfront.net *.bazaarvoice.com wss://websocket.bold360.com *.google.com *.boldchat.com *.akstat.io *.googleadservices.com *.brightcove.com *.demdex.net *.googleapis.com *.zipmoney.com.au *.akamaihd.net *.boltdns.net *.zip.co *.adyen.com *.nr-data.net *.amazonaws.com *.newrelic.com wss://webmessaging.euw2.pure.cloud *.omtrdc.net *.go-mpulse.net *.dyson.com.ro *.google-analytics.com *.doubleclick.net *.optimalpeople.fr *.salecycle.com *.criteo.com *.pure.cloud *.riskified.com *.bambuser.com 'self' 'unsafe-inline';base-uri 'self' 'unsafe-inline'; 1
default-src *.facebook.com *.fbcdn.net *.instagram.com blob:;script-src *.instagram.com static.cdninstagram.com z-p42-static.cdninstagram.com https://instagram.com https://*.www.instagram.com https://*.cdninstagram.com wss://www.instagram.com blob: *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'nonce-94tbU6Xl' 'self' 'wasm-unsafe-eval';style-src *.instagram.com static.cdninstagram.com z-p42-static.cdninstagram.com https://*.www.instagram.com data: blob: 'unsafe-inline' *.fbcdn.net *.facebook.com;connect-src *.instagram.com wss://edge-chat.instagram.com connect.facebook.net https://instagram.com https://*.www.instagram.com https://*.graph.instagram.com https://*.i.instagram.com https://*.od.instagram.com https://i.threads.net https://i.threads.com https://*.od.threads.net https://*.od.threads.com wss://www.instagram.com blob: *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* ws://localhost:* *.cdninstagram.com wss://*.instagram.com:* 'self';font-src *.instagram.com static.cdninstagram.com z-p42-static.cdninstagram.com data: *.fbcdn.net *.intern.facebook.com *.facebook.com https://*.cdninstagram.com;img-src *.instagram.com *.facebook.com *.fbcdn.net data: *.cdninstagram.com *.whatsapp.net blob: https://*.threads.net https://*.threads.com *.fbsbx.com android-webview-video-poster: *.oculuscdn.com;media-src *.facebook.com *.fbcdn.net *.instagram.com *.cdninstagram.com *.fbsbx.com data: blob:;child-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;frame-src https://instagram.com https://connect.facebook.net *.instagram.com *.facebook.com *.fbsbx.com fbsbx.com data:;manifest-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;object-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=tr_exp&minimize=0; 1
font-src *.fontawesome.com *.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com *.yotpo.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de https://www.mollie.com assets.myparcel.nl www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com *.fontawesome.com *.googleapis.com *.gstatic.com js.mollie.com cdnjs.cloudflare.com cdn.jsdelivr.net assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net unsafe-inline *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com api.myparcel.nl cdn.jsdelivr.net www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-OKlzaI8kJjJg4VRtJmGoNQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com  *.hotjar.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.globalpay.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.hotjar.com *.facebook.net *.facebook.com *.nosto.com *.nos.to *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com *.gpwebpay.com *.gpe.cz *.globalpay-ecommerce.com https://*.securesuite.co.uk https://securesuite.co.uk *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.google.com/  *.hotjar.com  *.youtube.com *.addthis.com *.trustpilot.com *.facebook.net *.facebook.com *.dotdigital-pages.com *.dotdigital.com *.nosto.com *.nos.to webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com account.fetchify.com *.americanexpress.com *.globalpay.com *.mastercard.com *.visa.com *.gpwebpay.com *.gpe.cz *.globalpay-ecommerce.com https://*.securesuite.co.uk https://securesuite.co.uk pay.google.com https://payments.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.doubleclick.net *.bing.com *.google.com *.google.co.uk *.cutwel.co.uk https://images.unsplash.com *.trackedlink.net *.nosto.com *.nos.to *.stripe.com *.stripe.network ebizmarts-website.s3.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com *.globalpay.com https://www.gstatic.com/instantbuy/svg/dark/pay/en.svg https://www.gstatic.com/instantbuy/svg/light/pay/en.svg https://www.gstatic.com/instantbuy/svg/dark/en.svg https://www.gstatic.com/instantbuy/svg/light/en.svg *.googleadservices.com *.googletagmanager.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.gstatic.com *.googletagmanager.com  *.hotjar.com *.zdassets.com *.trackedlink.net *.addthis.com *.trustpilot.com *.moatads.com *.addthisedge.com *.googleadservices.com *.doubleclick.net *.tctm.co *.bing.com https://maps.googleapis.com https://player.vimeo.com *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal www.dynamicnumbers.mediahawk.co.uk *.nosto.com *.nos.to webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.sagepay.com *.opayo.eu.elavon.com cc-cdn.com *.aexp-static.com https://ajax.aspnetcdn.com *.globalpay.com *.gpapiservices.com https://pay.google.com https://*.securesuite.co.uk https://securesuite.co.uk https://payments.google.com *.google-analytics.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.cutwel.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.myfonts.net *.typekit.net *.googleapis.com *.nosto.com *.nos.to webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com *.sagepay.com *.opayo.eu.elavon.com cc-cdn.com https://fonts.googleapis.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.hotjar.com *.hotjar.io *.zdassets.com *.zopim.com *.doubleclick.net *.tctm.co https://maps.googleapis.com https://player.vimeo.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com dn.mediahawk.co.uk *.nosto.com *.nos.to webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com https://google.com/pay https://pay.google.com *.globalpay.com https://js.globalpay.com https://js-cert.globalpay.com https://*.securesuite.co.uk https://securesuite.co.uk https://payments.google.com *.googletagmanager.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://127a7be8-dabe-43cf-ac5b-05045433d417.sansec.watch/; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com use.fontawesome.com wsv3cdn.audioeye.com *.klevu.com *.ksearchnet.com cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com https://plumrocket.com *.punchout2go.com *.tradecentric.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com https://www.google.com googleads.g.doubleclick.net home-c36.nice-incontact.com td.doubleclick.net wsv3cdn.audioeye.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.dotdigital-pages.com *.dotdigital.com www.xtento.com webchat.dotdigital.com webchat.staging.dotdigital.com *.trustpilot.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://plumrocket.com *.paymetric.com *.punchout2go.com *.tradecentric.com gum.criteo.com static.criteo.net ssl.kaptcha.com xiecomm.worldpay.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.sharethis.com www.bosspetedge.com cdn.jsdelivr.net fonts.gstatic.com aa.agkn.com c.clarity.ms www.zenaps.com cm.adgrx.com *.google.com bat.bing.com *.lightboxcdn.com imgsct.cookiebot.com trk.ometria.com api.soreto.com criteo-partners.tremorhub.com x.bidswitch.net visitor.omnitagjs.com r.casalemedia.com *.sync.com matching.ivitrack.com contextual.media.net exchange.mediavine.com jadserve.postrelease.com simage2.pubmatic.com pixel.rubiconproject.com match.sharethrough.com criteo-sync.teads.tv eb2.3lift.com ad.yieldlab.net sync-criteo.ads.yieldmo.com e1.emxdgt.com sync.targeting.unrulymedia.com mention-me.com *.soreto.com id5-sync.com c1.adform.net dis.criteo.com cm.adform.net ade.clmbtech.com ade.googlesyndication.com *.ometria.com c.bing.com sync.aralego.com sync.outbrain.com tags.bluekai.com widget.eu.criteo.com cdn.aralego.net s.ad.smaato.net ads.stickyadstv.com idsync.rlcdn.com cs.adingo.jp adx.dable.io gum.criteo.com tg.socdm.com *.googletagmanager.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.trackedlink.net *.ddlnk.net www.xtento.com cdn.xtento.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.paymetric.com *.klevu.com *.ksearchnet.com bat.bing.net cm.g.doubleclick.net ib.adnxs.com ad.360yield.com rtb-csync.smartadserver.com sync-t1.taboola.com sync.1rx.io dpm.demdex.net public-prod-dspcookiematching.dmxleo.com www.catchmarketingservices.com preview.frankroweandson.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.sharethis.com *.google-analytics.com *.googletagmanager.com s7.addthis.com home-c36.nice-incontact.com wsmcdn.audioeye.com wsv3cdn.audioeye.com bam.nr-data.net *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal www.xtento.com cdn.xtento.com webchat.dotdigital.com webchat.staging.dotdigital.com *.trustpilot.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.paymetric.com js.klevu.com *.ksearchnet.com https://apis.google.com *.punchout2go.com *.tradecentric.com kit.fontawesome.com js-agent.newrelic.com static.hotjar.com rum-static.pingdom.net bat.bing.com cdn.attn.tv static.criteo.net sslwidget.criteo.com widget.us.criteo.com https://scripts.clarity.ms www.clarity.ms ssl.kaptcha.com https://js.klevu.com https://www.petedge.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.sharethis.com *.googleapis.com www.googletagmanager.com use.typekit.net p.typekit.net use.fontawesome.com wsv3cdn.audioeye.com cdn.taggstar.com webchat.dotdigital.com webchat.staging.dotdigital.com *.trustpilot.com *.paymetric.com *.klevu.com *.ksearchnet.com *.punchout2go.com *.tradecentric.com cdnjs.cloudflare.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.sharethis.com www.google.com report-prod.audioeye.com analytics.audioeye.com wsv3cdn.audioeye.com invitejs.trustpilot.com stats.g.doubleclick.net *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.paymetric.com *.klevu.com *.ksearchnet.com bam.nr-data.net region1.google-analytics.com rum-collector-2.pingdom.net bat.bing.net petedge.attn.tv events.attentivemobile.com https://region1.analytics.google.com y.clarity.ms bat.bing.com ssl.kaptcha.com bosspetedge.attn.tv frankroweandson.attn.tv 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' https://static.cloudflareinsights.com 'sha256-ZkXgnJTYmCkSSsmxm3kZGwnQDkH2JsRCUMKzZbPBvf8=' 'sha256-fCHaPg0Bi8fuk3x0RmgJR/EhRGk0Kc1ZkX8WJkIvSY0=' 'sha256-HO6dPOPf8iKkJJuibtJVL0np31PIiHXube3a/Ays0YY=' 'sha256-FEkn9pm35JP/MKs8WV+q77V6AynlCt3BuPj17BTEoSg='; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https: https://api.dicebear.com; connect-src 'self' https://lmcomments.com https://api.lmcomments.com https://cloudflareinsights.com; media-src 'self' https: data:; form-action 'self'; base-uri 'none'; frame-ancestors 'self'; object-src 'none'; report-uri /api/csp-report 1
connect-src 'self' *.giveffect.com *.googleapis.com doublethedonation.com *.paypal.com *.google.com *.google.ca *.linkedin.com *.google-analytics.com *.g2crowd.com *.doubleclick.net *.hscollectedforms.net *.hubspot.com *.facebook.com *.facebook.net *.adroll.com *.googleadservices.com *.gstatic.com *.calendly.com calendly.com wss://widget-mediator.zopim.com vimeo.com *.hsforms.com; default-src 'none'; font-src * data:; frame-src 'self' *.giveffect.com h.online-metrix.net *.google.com *.stripe.com *.paypal.com *.youtube.com *.doubleclick.net *.paypalobjects.com *.vimeo.com *.adroll.com *.facebook.com *.calendly.com calendly.com; img-src * blob: data:; media-src * blob: data:; object-src 'self'; script-src 'self' *.giveffect.com 'unsafe-inline' 'unsafe-eval' giveffect-assets.s3.amazonaws.com cdnjs.cloudflare.com connect.facebook.net *.googleapis.com *.google.com cdn.jsdelivr.net doublethedonation.com/api/js/ *.paypal.com *.stripe.com www.gstatic.com *.bootstrapcdn.com *.calendly.com calendly.com code.jquery.com d3js.org h64.online-metrix.net js.hscollectedforms.net cdn.datatables.net *.twitter.com *.hs-scripts.com *.hs-banner.com www.googletagmanager.com *.google-analytics.com snap.licdn.com *.g2crowd.com *.hubspot.com *.paypalobjects.com *.hs-analytics.net *.adroll.com *.vimeo.com; style-src 'self' 'unsafe-inline' giveffect-assets.s3.amazonaws.com *.googleapis.com cdnjs.cloudflare.com doublethedonation.com *.calendly.com cdn.jsdelivr.net *.bootstrapcdn.com fonts.googleapis.com *.googletagmanager.com; report-uri https://www.giveffect.com/csp_reports 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.googletagmanager.com www.facebook.com *.saferpay.com notifpush.com *.laiye.com *.destygo.com *.mindsay.com *.googleapis.com *.gstatic.com *.piwik.pro pay.sandbox.datatrans.com pay.datatrans.com *.connectif.cloud 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.braintreegateway.com *.paypal.com google.com *.google.com *.googletagmanager.com api.devatics.io *.doubleclick.net gjigle.com *.saferpay.com www.facebook.com notifpush.com *.laiye.com *.destygo.com *.mindsay.com *.googleapis.com *.gstatic.com *.piwik.pro insight.adsrvr.org hub.cgn.ch pay.sandbox.datatrans.com pay.datatrans.com https://www.googletagmanager.com/ *.connectif.cloud 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io gjigle.com *.googleapis.com *.googletagmanager.com *.doubleclick.net *.linkedin.com www.facebook.com *.adnxs.com *.google.com www.google.com.ua cdn.devatics.io *.saferpay.com notifpush.com *.laiye.com *.destygo.com *.mindsay.com *.piwik.pro connect.facebook.net cdn.cookielaw.org pay.sandbox.datatrans.com pay.datatrans.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com cdn.cookielaw.org *.googletagmanager.com connect.facebook.net secure.adnxs.com targetemsecure.blob.core.windows.net cgn.slgnt.eu notifpush.com userlike-cdn-widgets.s3-eu-west-1 dmc.devatics.io try.abtasty.com acdn.adnxs.com snap.licdn.com widget.destygo.com *.cloudfront.net *.amazonaws.com *.saferpay.com http://trk.adbutter.net *.laiye.com *.destygo.com *.mindsay.com *.googleapis.com *.gstatic.com *.piwik.pro js.adsrvr.org *.google-analytics.com ssl.google-analytics.com pay.sandbox.datatrans.com pay.datatrans.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.connectif.cloud *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googletagmanager.com cdn.cookielaw.org analytics.google.com www.google.com.ua *.amazonaws.com api.userlike.com notifpush.com *.googleapis.com *.doubleclick.net *.saferpay.com www.facebook.com connect.facebook.net *.abtasty.com *.laiye.com *.destygo.com *.mindsay.com *.gstatic.com *.piwik.pro pagead2.googlesyndication.com gjigle.com cdn.linkedin.oribi.io secure-apis.notifadz.com px.ads.linkedin.com *.adnxs.com hub.cgn.ch api.sandbox.datatrans.com api.datatrans.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.connectif.cloud t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src px.ads.linkedin.com pay.sandbox.datatrans.com pay.datatrans.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' 1003891.track.convertexperiments.com app.hubspot.com cdn-3.convertexperiments.com cdn-4.convertexperiments.com *.metrics.convertexperiments.com *.signals.convertexperiments.com logs.convertexperiments.com *.convertexperiments.com cdn.pdst.fm connect.facebook.net js.hs-analytics.net js.hs-banner.com js.hsforms.net js.hsleadflows.net js.hubspotfeedback.com js.usemessages.com organizer.bizzabo.com play.vidyard.com script.hotjar.com snap.licdn.com static.hotjar.com static.hsappstatic.net www.google-analytics.com www.googletagmanager.com www.recaptcha.net code.highcharts.com www.youtube.com js.hubspot.com www.dropbox.com widget.altrulabs.com www.google.com maps.googleapis.com wt-assets.hubteam.com cdn2.hubspot.net www.redditstatic.com cdn.veritonic.com gosniply.com d.impactradius-event.com js.hubspot.com 50339659.hs-sites.com analytics.tiktok.com api.s10h.io sgtm-amer.hubspot.com js.hsadspixel.net cdn.intellimize.co static.cloudflareinsights.com ob.greencolumnart.com tags.pw.adn.cloud cdn.jsdelivr.net js.storylane.io 'strict-dynamic' 'nonce-4bckhztRKIOtTCjTiyznww=='; report-uri https://send.hsbrowserreports.com/csp/report 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.klarnacdn.net *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors self www.google.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.klarna.com www.google.com www.gstatic.com apis.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.klarna.com *.klarnaevt.com *.klarnacdn.net magefan.com cm.magefan.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cdninstagram.com *.fbcdn.net maps.googleapis.com *.amazonaws.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com widget.freshworks.com m2epro.freshdesk.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.googleapis.com *.gstatic.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com ajax.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.instagram.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.klarnacdn.net *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com https://fonts.bunny.net assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com widget.freshworks.com m2epro.freshdesk.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.link.com *.amazon.com https://www.google-analytics.com *.instagram.com *.googleusercontent.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https: wss:; img-src 'self' data: https:; media-src 'self' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' https: data:; frame-src 'self' https:; worker-src 'self' blob:; report-uri https://tutorful.co.uk/api/v2/csp-violations; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.etrusted.com tracking.paqato.com *.paqato.com stage1-test.hauptstadtkoffer.de *.fontawesome.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com stage1-test.hauptstadtkoffer.de https://plumrocket.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors stage1-test.hauptstadtkoffer.de *.meetanshi.com meetanshi.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.awin1.com *.zenaps.com *.fls.doubleclick.net *.vimeo.com stage1-test.hauptstadtkoffer.de *.weltpixel.com *.meetanshi.com meetanshi.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://plumrocket.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.awin1.com *.zenaps.com *.wepowerconnections.com www.pixi.eu *.pixi.eu *.clarity.ms c.clarity.ms c.bing.com *.roeyecdn.com *.roeye.com *.nunami.ai *.ad4m.at as.ad4m.at app.usercentrics.eu *.usercentrics.eu connect.facebook.net *.fbcdn.net *.adfarm1.adition.com imagesrv.adition.com *.adition.com ih.adscale.de *.adscale.de *.smartadserver.com *.pubmatic.com *.casalemedia.com *.twiago.com www.google.al *.google.al *.paqato.com stage1-test.hauptstadtkoffer.de magefan.com cm.magefan.com *.disqus.com *.meetanshi.com meetanshi.com https://meetanshi.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com app.usercentrics.eu *.usercentrics.eu www.clarity.ms scripts.clarity.ms *.clarity.ms www.dwin1.com *.roeyecdn.com *.roeye.com ad4m.at *.ad4m.at as.ad4m.at t.nunami.ai *.nunami.ai fast-static.smarketer.de fast.smarketer.de *.smarketer.de tracking.paqato.com *.paqato.com *.vimeo.com stage1-test.hauptstadtkoffer.de ajax.googleapis.com *.disqus.com *.meetanshi.com meetanshi.com *.googletagmanager.com https://www.googletagmanager.com tagmanager.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com integrations.etrusted.com *.etrusted.com tracking.paqato.com *.paqato.com stage1-test.hauptstadtkoffer.de *.fontawesome.com *.stripe.network *.stripecdn.com *.amazon.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com tagmanager.google.com 'self' 'unsafe-inline'; object-src stage1-test.hauptstadtkoffer.de 'self' 'unsafe-inline'; media-src *.adobe.com stage1-test.hauptstadtkoffer.de 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.wepowerconnections.com https://the.sciencebehindecommerce.com api.usercentrics.eu *.usercentrics.eu *.clarity.ms c.bing.com fast.smarketer.de *.smarketer.de *.nunami.ai *.roeyecdn.com *.roeye.com *.ad4m.at *.trustedshops.com *.etrusted.com connect.facebook.net *.facebook.net www.facebook.com *.adscale.de *.smartadserver.com *.pubmatic.com *.casalemedia.com *.twiago.com *.paqato.com *.wepowerconnections.com *.vimeo.com stage1-test.hauptstadtkoffer.de *.meetanshi.com meetanshi.com https://www.google-analytics.com graph.facebook.com business.facebook.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://integrations.etrusted.site *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src stage1-test.hauptstadtkoffer.de 'self' 'unsafe-inline' 'unsafe-eval'; base-uri stage1-test.hauptstadtkoffer.de 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.google.com use.fontawesome.com mktgen.com.br data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.pagar.me *.netsgroup.com *.sibs.pt *.seglan.com *.secureacs.com *.rsa3dsauth.com *.apata.io *.cardinalcommerce.com *.santander.com.br *.bradesco.com.br *.bradesco *.stone.com.br *.nubank.com.br *.itau.com.br *.bb.com.br *.caixa.gov.br *.inter.co *.bancointer.com.br *.c6bank.com.br *.bancobmg.com.br *.safra.com.br *.sicoob.com.br *.banrisul.com.br *.banrisul.b.br *.banorte.com *.xpi.com.br *.btgpactual.com *.btgpactualdigital.com *.mercadopago.com.br *.mercadopago.com *.picpay.com *.amedigital.com *.neon.tech *.neon.com.br *.wise.com *.revolut.com *.sandbox.3dsecure.io *.google.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com webto.salesforce.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https://www.googletagmanager.com/ *.pagar.me *.netsgroup.com *.sibs.pt *.seglan.com *.secureacs.com *.rsa3dsauth.com *.apata.io *.cardinalcommerce.com *.santander.com.br *.bradesco.com.br *.bradesco *.stone.com.br *.nubank.com.br *.itau.com.br *.bb.com.br *.caixa.gov.br *.inter.co *.bancointer.com.br *.c6bank.com.br *.bancobmg.com.br *.safra.com.br *.sicoob.com.br *.banrisul.com.br *.banrisul.b.br *.banorte.com *.xpi.com.br *.btgpactual.com *.btgpactualdigital.com *.mercadopago.com.br *.mercadopago.com *.picpay.com *.amedigital.com *.neon.tech *.neon.com.br *.wise.com *.revolut.com *.sandbox.3dsecure.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.weltpixel.com targeting.voxus.tv editoradireito.api.useinsider.com gum.criteo.com fledge.us.criteo.com td.doubleclick.net static.criteo.net fast.player.liquidplatform.com mktgen.com.br anchor.fm podcasters.spotify.com w.soundcloud.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ cdn.mundipagg.com api.pagar.me www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com newimgebit-a.akamaihd.net sync.srv.stackadapt.com sync-tm.everesttech.net dsp.adfarm1.adition.com ad.turn.com sync.aralego.com bat.bing.com log.api.useinsider.com px.ads.linkedin.com ad.360yield.com ib.adnxs.com www.google.com.br tags.bluekai.com sync.targeting.unrulymedia.com cm.adgrx.com r.casalemedia.com visitor.omnitagjs.com ads.yieldmo.com sync-t1.taboola.com rtb-csync.smartadserver.com x.bidswitch.net cm.g.doubleclick.net sync.1rx.io ads.stickyadstv.com www.ebitempresa.com.br cdn.pagarme.com s3.amazonaws.com i.liadm.com contextual.media.net exchange.mediavine.com c.bing.com jadserve.postrelease.com sync.outbrain.com simage2.pubmatic.com trends.revcontent.com pixel.rubiconproject.com match.sharethrough.com gum.criteo.com s.ad.smaato.net dis.criteo.com criteo-sync.teads.tv criteo-partners.tremorhub.com sync-criteo.ads.yieldmo.com ade.clmbtech.com eb2.3lift.com e1.emxdgt.com fonts.gstatic.com public-prod-dspcookiematching.dmxleo.co creativecdn.com empresa.ebit.com.br mktgen.com.br cdn-loja.cursoforum.com.br match.adsrvr.org pixel-sync.sitescout.com cdn.aralego.net *.grupogen.com.br *.editoradodireito.com.br *.academiademedicina.com.br jelly.mdhv.io sync.ipredictive.com secure.adnxs.com sync.crwdcntrl.net pixel.tapad.com 1f2e7.v.fwmrm.net www.linkedin.com *.clarity.ms data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page polyfill.io http://www.googletagmanager.com/ https://www.googletagmanager.com/ 3ds2.pagar.me 3ds2-sdx.pagar.me www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com c.usebeon.io cdn.targeting.voxus.com.br www.googleoptimize.com a.omappapi.com analytics.tiktok.com targeting.voxus.com.br editoradireito.api.useinsider.com static.hotjar.com bat.bing.co tag.rmp.rakuten.com www.clarity.ms script.hotjar.com collect.vendavalida.com.br snap.licdn.com static.criteo.net sslwidget.criteo.com js-agent.newrelic.com imgs.ebit.com.br s3.amazonaws.com dynamic.criteo.com mktgen.com.br bat.bing.com cdn.siteblindado.com *.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.google.com c.usebeon.io a.omappapi.com use.fontawesome.com s3.amazonaws.com mktgen.com.br *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ mktgen.com.br 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ api.mundipagg.com api.pagar.me brasilapi.com.br viacep.com.br servicodados.ibge.gov.br pay.sandbox.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com webfront-api.production.usebeon.io api.omappapi.com analytics.tiktok.com targeting.voxus.com.br api.voxus.tv logs-01.loggly.com api.reclameaqui.com.br newimgebit-a.akamaihd.net www.google.com.br bat.bing.com q.clarity.ms hit.api.useinsider.com collect.vendavalida.com.br px.ads.linkedin.com bam.nr-data.net measurement-api.criteo.com seal.siteblindado.com api.ipify.org content.hotjar.io *.hotjar.com z.clarity.ms *.clarity.ms 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src secure.adnxs.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'nonce-4cLocb5VNQntvBZUvxIvuQ' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl; base-uri 'none' 1
base-uri 'self' www.google-analytics.com;connect-src 'self';default-src 'self';form-action 'self' murze.be murze.be.test sendy.murze.be platform.twitter.com syndication.twitter.com;img-src 'self' * 'unsafe-inline' data:;media-src 'self';object-src 'none';script-src 'self' 'nonce-4ASG7N2YD9YxsOcKfR2k9fvofYfCL4Rs' murze.be murze.be.test www.google.com www.gstatic.com cdn.jsdelivr.net avd.innity.net unpkg.com cdnjs.cloudflare.com *.googlesyndication.com 'unsafe-eval' *.bootstrapcdn.com srv.carbonads.net script.carbonads.com cdn.carbonads.com fonts.googleapis.com *.google-analytics.com www.google-analytics.com *.googletagmanager.com platform.twitter.com *.twimg.com;style-src 'self' 'nonce-4ASG7N2YD9YxsOcKfR2k9fvofYfCL4Rs' murze.be murze.be.test 'unsafe-inline' www.google.com www.gstatic.com cdn.jsdelivr.net use.fontawesome.com cdnjs.cloudflare.com avd.innity.net *.googlesyndication.com *.bootstrapcdn.com fonts.googleapis.com platform.twitter.com;font-src * 'unsafe-inline' *.bootstrapcdn.com fonts.gstatic.com;frame-src platform.twitter.com syndication.twitter.com *.youtube.com www.google.com www.gstatic.com googleads.g.doubleclick.net *.googlesyndication.com 1
frame-ancestors 'self'; block-all-mixed-content; default-src 'self'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://api.talkdeskapp.eu https://talkdeskchatsdk.talkdeskapp.com https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://tagmanager.google.com https://maps-api-ssl.google.com https://www.youtube.com https://*.matomo.cloud https://letscast.fm https://cdn.weglot.com https://download.digiaccess.org https://recaptcha.net https://stats.g.doubleclick.net https://userlike-cdn-umm.b-cdn.net https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com https://www.gstatic.com/recaptcha/ https://www.recaptcha.net https://assets.familienservice.de https://*.eye-able.com https://googleusercontent.com https://player.vimeo.com https://maps.googleapis.com; script-src-elem 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://userlike-cdn-umm.b-cdn.net/ https://*.eye-able-cdn.com https://*.eye-able.com https://*.letscast.fm https://letscast.fm https://www.recaptcha.net https://www.gstatic.com https://cdn.weglot.com https://cdn.matomo.cloud https://*.digiaccess.org https://familienservice.matomo.cloud www.google.com; style-src-elem 'self' 'unsafe-inline' https://api.talkdeskapp.eu https://talkdeskchatsdk.talkdeskapp.com https://*.eye-able-cdn.com https://*.eye-able.com https://*.letscast.fm https://letscast.fm https://cdn.weglot.com assets.familienservice.de www.googletagmanager.com https://unpkg.com; style-src 'self' 'report-sample' 'unsafe-inline' https://googletagmanager.com https://tagmanager.google.com https://letscast.fm cdn.weglot.com https://*.eye-able-cdn.com https://*.eye-able.com https://assets.familienservice.de https://fonts.googleapis.com; object-src 'none'; frame-src 'self' https://api.talkdeskapp.eu https://talkdeskchatsdk.talkdeskapp.com https://www.googletagmanager.com https://www.yumpu.com https://www.youtube.com *.recaptcha.net *.google.com recaptcha.net https://*.vimeo.com/ https://letscast.fm; child-src 'self'; img-src 'self' https://api.talkdeskapp.eu https://talkdeskchatsdk.talkdeskapp.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://google.com https://www.google.de https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.de https://googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://*.eye-able-cdn.com https://*.eye-able.com https://familienservice.matomo.cloud https://maps-api-ssl.google.com https://www.google.ie https://www.google.it https://www.google.at data: www.familienservice.de https://*.letscast.fm www.gstatic.com/recaptcha https://userlike-cdn-operators.userlike.com/ https://maps.gstatic.com; font-src 'self' https://pagead2.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://www.google.de https://fonts.gstatic.com https://userlike-cdn-umm.b-cdn.net; connect-src 'self' https://api.talkdeskapp.eu https://talkdeskchatsdk.talkdeskapp.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.de www.google.com www.googletagmanager.com wss://umd.userlike.com/ https://cdn-api-weglot.com https://assets.familienservice.de/ https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://api.userlike.com https://*.matomo.cloud https://stats.g.doubleclick.net https://*.analytics.google.com https://letscast.fm *.weglot.com api.digiaccess.org https://maps.googleapis.com; manifest-src 'self'; base-uri 'self'; form-action 'self' https://*.cleverreach.com; media-src 'self' data: www.familienservice.de; prefetch-src 'self'; worker-src 'self' www.recaptcha.net; report-uri https://csplog-www-production.familienservice.de/log; report-to reporter 1
object-src 'none';base-uri 'self';script-src 'nonce-qFxUwMEJSkEyG9EAkpDDEA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://www.gstatic.com https://maps.googleapis.com https://translate.google.com https://translate.googleapis.com https://pay.google.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://connect.facebook.net https://bat.bing.com https://cdn.taboola.com https://s.yimg.com https://cdn.attn.tv https://cdn.zinrelo.com https://static.zdassets.com https://ekr.zdassets.com https://tag.getdrip.com https://www.dwin1.com https://js.braintreegateway.com https://www.paypalobjects.com https://www.paypal.com https://js.authorize.net https://code.jquery.com https://maxcdn.bootstrapcdn.com https://use.fontawesome.com https://cdn.fontawesome.com https://cdnjs.cloudflare.com https://static.cloudflareinsights.com https://*.skeepers.io https://accounts.onlineada.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://use.fontawesome.com https://www.gstatic.com https://translate.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://use.fontawesome.com https://cdnjs.cloudflare.com; img-src 'self' data: blob: https:; connect-src 'self' https://metrics.walkinlab.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://www.google.com https://maps.googleapis.com https://translate.googleapis.com https://consentcdn.cookiebot.com https://api.braintreegateway.com https://client-analytics.braintreegateway.com https://*.braintree-api.com https://www.paypal.com https://api.authorize.net https://api2.authorize.net https://cdn.attn.tv https://events.attentivemobile.com https://app.zinrelo.com https://*.zendesk.com wss://*.zendesk.com https://*.zopim.com wss://*.zopim.com https://ekr.zdassets.com https://*.skeepers.io https://bat.bing.com https://trc.taboola.com https://connect.facebook.net https://www.facebook.com https://tag.getdrip.com https://www.dwin1.com; frame-src 'self' https://accept.authorize.net https://www.youtube.com https://www.youtube-nocookie.com https://www.googletagmanager.com https://td.doubleclick.net https://bid.g.doubleclick.net https://tpc.googlesyndication.com https://app.zinrelo.com https://www.paypal.com https://pay.google.com https://www.google.com https://consentcdn.cookiebot.com; media-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://www.paypal.com; report-uri /csp-report 1
font-src https://www.gstatic.com *.dhlparcel.nl https://widgetcontent.thuiswinkel-cdn.org https://widget.thuiswinkel-cdn.org https://fonts.gstatic.com *.fontawesome.com *.gstatic.com 'self' data: https://widgets.trustedshops.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net *.googletagmanager.com *.doubleclick.net *.voegenshop.nl https://widgets.trustedshops.com www.xtento.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://belco-prod.s3-eu-central-1.amazonaws.com https://images.unsplash.com *.google.com *.google.nl *.mailcampaigns.nl *.cloudflare.com *.voegenshop.nl *.etrusted.com https://widgetcontent.thuiswinkel-cdn.org https://widget.thuiswinkel-cdn.org *.doubleclick.net www.xtento.com cdn.xtento.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://img.youtube.com https://www.mollie.com *.amazonaws.com *.hsforms.net *.hsforms.com 'self' data: www.google.com.ua https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com https://dlyyzort.fugen-shop.de data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://cdn.belco.io https://maps.googleapis.com *.dhlparcel.nl *.google-analytics.com *.mailcampaigns.nl *.cookiecode.nl *.clarity.ms *.cloudflare.com https://consent.studio https://widget.thuiswinkel.org https://widget.thuiswinkel-cdn.org https://cloud.umami.is www.xtento.com cdn.xtento.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com https://cdn.jsdelivr.net *.belco.io https://browser.sentry-cdn.com *.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com *.sendcloud.sc *.jsdelivr.net *.hsforms.net *.hsforms.com *.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.googletagmanager.com tagmanager.google.com https://dlyyzort.fugen-shop.de 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://*.googleapis.com *.dhlparcel.nl *.cloudflare.com *.etrusted.com https://widgetcontent.thuiswinkel-cdn.org https://widget.thuiswinkel-cdn.org https://static.klaviyo.com https://cdn.jsdelivr.net https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com *.sendcloud.sc *.jsdelivr.net *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com wss://chat.belco.io https://cdn.belco.io https://maps.googleapis.com https://player.vimeo.com *.doubleclick.net *.cookiecode.nl *.google.com *.voegenshop.nl https://consent.studio https://widgetcontent.thuiswinkel-cdn.org https://gateway.umami.is https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.belco.io https://*.ingest.sentry.io https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.analytics.google.com *.googletagmanager.com https://dlyyzort.fugen-shop.de 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-l6kytMQ9fQRKomUjy9D8gg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://stock.limz.com https://limz.org; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://stock.limz.com https://limz.org; font-src 'self' data:; frame-src 'self'; media-src 'self' blob: https://stock.limz.com https://limz.org; worker-src 'self' blob:; connect-src 'self' https: wss: https://stock.limz.com https://limz.org; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'; manifest-src 'self'; report-uri /de/limz-core-cspReport 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://connect.facebook.net https://snap.licdn.com https://*.licdn.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://*.doubleclick.net https://connect.facebook.net https://www.facebook.com https://px.ads.linkedin.com https://*.linkedin.com https://www.google.com https://*.google.com https://cloudflareinsights.com https://*.cloudflareinsights.com; frame-src https://www.googletagmanager.com https://*.doubleclick.net https://*.facebook.com; frame-ancestors 'self'; base-uri 'self' 1
font-src data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com www.googletagmanager.com *.veritas.at *.consentmanager.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com https://www.magezon.com https://*.consentmanager.net data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://rum.hlx.page s7.addthis.com https://*.consentmanager.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com api.friendlycaptcha.com eu-api.friendlycaptcha.eu ekr.zdassets.com/ https://identity.veritas.at/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://emaptest.7-11.com.tw https://emap.pcsc.com.tw 'self' 'unsafe-inline'; frame-ancestors *.tappaysdk.com google.com *.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.tappaysdk.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://mas.astralweb.com.tw www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.tappaysdk.com *.plugins.emarsys.net *.scarabresearch.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.tappaysdk.com google.com *.google.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src *.tappaysdk.com google.com *.google.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://emaptest.7-11.com.tw https://emap.pcsc.com.tw *.tappaysdk.com *.scarabresearch.com *.eservice.emarsys.net https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src *; script-src *; style-src *; img-src *; 1
object-src 'none';base-uri 'self';script-src 'nonce-J3wxr_Gi1aKZ0nOt-T7dZQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none'; script-src 'self' 'unsafe-eval' fonts.googleapis translate.google.com translate.googleapis.com translate-pa.googleapis.com *.gstatic.com siteimproveanalytics.com *.siteimprove.com svc.webspellchecker.net js-agent.newrelic.com bam.nr-data.net assets.pinterest.com cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://rebilly.github.io https://unpkg.com maps.googleapis.com platform.instagram.com platform.twitter.com; script-src-attr 'self'; script-src-elem 'self' fonts.googleapis translate.google.com translate.googleapis.com translate-pa.googleapis.com *.gstatic.com siteimproveanalytics.com *.siteimprove.com svc.webspellchecker.net js-agent.newrelic.com bam.nr-data.net assets.pinterest.com cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://rebilly.github.io https://unpkg.com maps.googleapis.com platform.instagram.com platform.twitter.com; style-src 'self' fonts.googleapis translate.google.com translate.googleapis.com translate-pa.googleapis.com *.gstatic.com siteimproveanalytics.com *.siteimprove.com svc.webspellchecker.net js-agent.newrelic.com bam.nr-data.net cdn.jsdelivr.net fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src-attr 'self'; frame-ancestors 'self' 1
font-src *.fontawesome.com https://v2.zopim.com/ *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://seo.mageplaza.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors https://v2.zopim.com/ 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com *.addthis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de https://v2.zopim.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.avada.io https://v2.zopim.com/ https://static.zdassets.com/ assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com unsafe-inline *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com *.addthis.com https://get.geojs.io *.avada.io wss://widget-mediator.zopim.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://js.stripe.com https://apis.google.com blob:; worker-src 'self' blob:; child-src 'self' blob:; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://api.mapbox.com https://*.mapbox.com https://*.tiles.mapbox.com https://www.googletagmanager.com https://www.google-analytics.com https://res.cloudinary.com; media-src 'self' data: blob: https://res.cloudinary.com; font-src 'self' data:; connect-src 'self' wss: https://api.mapbox.com https://events.mapbox.com https://*.mapbox.com https://api.protomaps.com https://securetoken.googleapis.com https://identitytoolkit.googleapis.com https://*.googleapis.com https://www.google-analytics.com https://api.stripe.com https://*.livekit.cloud https://res.cloudinary.com; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://*.firebaseapp.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none' 1
object-src 'none';base-uri 'self';script-src 'nonce-w7FZvxn3gfpMib88UrMaVQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; img-src 'self' data:; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; connect-src 'self' 1
font-src fonts.gstatic.com use.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com maxcdn.bootstrapcdn.com https://static.unzer.com https://applepay.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.com *.doubleclick.net *.facebook.com https://*.cookiebot.com https://*.cookiebot.eu *.trustpilot.com www.facebook.com https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://h.online-metrix.net https://google.com/pay https://pay.google.com/ https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net https://stats.g.doubleclick.net *.googletagmanager.com *.gstatic.com https://www.google.de https://services.postcodeanywhere.co.uk https://*.cookiebot.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://dildoking.de https://*.dildoking.de https://*.cloudfront.net *.hsforms.net *.hsforms.com https://static.unzer.com *.online-metrix.net https://www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com https://rum.hlx.page *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.com *.google.bg https://www.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com https://*.cookiebot.com https://*.cookiebot.eu https://rec.smartlook.com https://click11202.pcapredict.com https://services.postcodeanywhere.co.uk https://*.trbo.com *.trustpilot.com jsd-widget.atlassian.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://js-agent.newrelic.com https://*.channeladvisor.com https://*.payments-amazon.com https://bam.nr-data.net *.hsforms.net *.hsforms.com www.gstatic.com connect.facebook.net https://static.unzer.com https://applepay.cdn-apple.com https://pay.google.com https://code.jquery.com https://h.online-metrix.net https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com https://services.postcodeanywhere.co.uk https://*.trbo.com *.trustpilot.com https://static.klaviyo.com www.gstatic.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.google-analytics.com *.facebook.com *.facebook.net *.google.com https://clickpool.tt.omtrdc.net https://*.cookiebot.com https://*.cookiebot.eu https://*.smartlook.cloud https://googleads.g.doubleclick.net https://services.postcodeanywhere.co.uk https://pagead2.googlesyndication.com jsd-widget.atlassian.com api-private.atlassian.com api.friendlycaptcha.com eu-api.friendlycaptcha.eu https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.paypal.com https://*.amazon.com https://bam.nr-data.net t.elasticsuite.io *.hsforms.net *.hsforms.com www.googleapis.com https://api.unzer.com https://api.heidelpay.com https://sbx-api.heidelpay.com https://sbx-api.unzer.com https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://h.online-metrix.net https://h64.online-metrix.net https://google.com/pay https://www.google.com/pay https://pay.google.com https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.hivissupply.com *.google.com *.fontawesome.com *.yotpo.com *.arqspin.com *.klaviyo.com *.googletagmanager.com *.bing.com *.facebook.net *.crazyegg.net *.doubleclick.net *.googleadservices.com *.google-analytics.com *.crazyegg.com *.facebook.com *.listrakbi.com *.wufoo.com *.delighted.com *.sharethis.com *.livechatinc.com *.sharethis.mgr.consensu.org *.xtento.com *.kaltura.com *.clarity.ms *.licdn.com *.linkedin.com *.adsymptotic.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.wufoo.com *.delighted.com *.sharethis.com *.livechatinc.com *.sharethis.mgr.consensu.org *.xtento.com *.kaltura.com *.clarity.ms *.licdn.com *.linkedin.com *.adsymptotic.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.sharethis.com *.certcapture.com *.facebook.net connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.hivissupply.com *.livechatinc.com *.yotpo.com *.arqspin.com *.klaviyo.com *.googletagmanager.com *.bing.com *.crazyegg.net *.doubleclick.net *.googleadservices.com *.google-analytics.com *.crazyegg.com *.facebook.com *.listrakbi.com *.wufoo.com *.delighted.com *.sharethis.mgr.consensu.org *.xtento.com *.kaltura.com *.clarity.ms *.licdn.com *.linkedin.com *.adsymptotic.com *.wesupply.xyz https://wesupplylabs.com guarantee-cdn.com *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.sharethis.com *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.facebook.net connect.facebook.net graph.facebook.com business.facebook.com store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com *.hivissupply.com *.yotpo.com *.livechatinc.com *.arqspin.com *.klaviyo.com *.googletagmanager.com *.bing.com *.crazyegg.net *.doubleclick.net *.googleadservices.com *.google-analytics.com *.google.com *.crazyegg.com *.facebook.com *.listrakbi.com *.cloudfront.net *.wufoo.com *.delighted.com *.sharethis.mgr.consensu.org www.xtento.com *.kaltura.com *.clarity.ms *.licdn.com *.linkedin.com *.adsymptotic.com a.ads.rmbl.ws www.redditstatic.com pixel-config.reddit.com alb.reddit.com guarantee-cdn.com *.reddit.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.sharethis.com *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.kaptcha.com *.facebook.net connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com *.hivissupply.com *.fontawesome.com *.googleapis.com *.cloudflare.com *.cloudfront.net *.livechatinc.com *.listrakbi.com *.gstatic.com *.yotpo.com *.arqspin.com *.klaviyo.com *.googletagmanager.com *.bing.com *.crazyegg.net *.doubleclick.net *.googleadservices.com *.google-analytics.com *.crazyegg.com *.facebook.com *.wufoo.com *.delighted.com *.sharethis.mgr.consensu.org *.xtento.com *.kaltura.com *.clarity.ms *.licdn.com *.linkedin.com *.adsymptotic.com a.ads.rmbl.ws www.redditstatic.com pixel-config.reddit.com alb.reddit.com guarantee-cdn.com *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com *.certcapture.com https://static.klaviyo.com assets.braintreegateway.com *.hivissupply.com *.fontawesome.com *.googleapis.com *.google.com *.cloudflare.com *.cloudfront.net *.livechatinc.com *.listrakbi.com *.paypal.com *.yotpo.com *.arqspin.com *.klaviyo.com *.googletagmanager.com *.bing.com *.facebook.net *.crazyegg.net *.doubleclick.net *.googleadservices.com *.google-analytics.com *.crazyegg.com *.facebook.com *.wufoo.com *.delighted.com *.sharethis.mgr.consensu.org *.xtento.com *.kaltura.com *.clarity.ms *.licdn.com *.linkedin.com *.adsymptotic.com *.tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.hivissupply.com *.yotpo.com *.livechatinc.com *.arqspin.com *.klaviyo.com *.googletagmanager.com *.bing.com *.facebook.net *.crazyegg.net *.doubleclick.net *.googleadservices.com *.google-analytics.com *.google.com *.crazyegg.com *.facebook.com *.listrakbi.com *.wufoo.com *.delighted.com *.sharethis.com *.sharethis.mgr.consensu.org *.xtento.com *.kaltura.com *.clarity.ms *.licdn.com *.linkedin.com *.adsymptotic.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.kaptcha.com *.facebook.net connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com maps.googleapis.com *.hivissupply.com *.yotpo.com *.arqspin.com *.klaviyo.com *.googletagmanager.com *.bing.com *.crazyegg.net *.doubleclick.net *.googleadservices.com *.google-analytics.com *.crazyegg.com *.facebook.com *.listrakbi.com *.wufoo.com *.delighted.com *.livechatinc.com *.sharethis.mgr.consensu.org *.xtento.com *.kaltura.com *.clarity.ms *.licdn.com *.linkedin.com *.adsymptotic.com a.ads.rmbl.ws www.redditstatic.com pixel-config.reddit.com alb.reddit.com *.analytics.google.com *.redditstatic.com *.reddit.com *.tiktok.com *.run.app 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.klaviyo.com *.delighted.com *.sharethis.com *.livechatinc.com *.redploy.com *.sharethis.mgr.consensu.org *.xtento.com *.kaltura.com *.clarity.ms *.licdn.com *.linkedin.com *.adsymptotic.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com https://*.gstatic.com *.klarnacdn.net *.stackla.com *.googleapis.com cdn.honey.io account.affilitizer.com at.alicdn.com https://vax.co.uk/ https://applepay.cdn-apple.com data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.adyen.com api.bazaarvoice.com stg.api.bazaarvoice.com unpkg.com *.unpkg.com imagekit.io *.imagekit.io *.securesuite.co.uk *.facebook.com *.arcot.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com *.monzo.com *.wlp-acs.com *.rsa3dsauth.co.uk *.rsa3dsauth.com *.lloydsbankinggroup.com *.salesforce.com 3dsecure.starlingbank.com 'self' 'unsafe-inline'; frame-ancestors *.google.com *.facebook.net *.vax.co.uk 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.adyen.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com unpkg.com *.unpkg.com cdnjs.cloudflare.com imagekit.io *.imagekit.io *.klarna.com *.stackla.com *.authorize.net *.pinterest.com *.doubleclick.net *.snapchat.com *.trustpilot.com *.securesuite.co.uk *.arcot.com *.salesforceliveagent.com tti-fc.my.salesforce-sites.com *.vax.co.uk *.googletagmanager.com *.awin1.com/ *.awinblackfriday.com/ spay.samsung.com *.google.it *.rsa3dsauth.co.uk *.rsa3dsauth.com *.klarnaservices.com *.lloydsbankinggroup.com *.googleusercontent.com *.salesforce.com *.wepowerconnections.com *.monzo.com 3dsecure.starlingbank.com *.cardinalcommerce.com *.site.com *.techsee.me www.facebook.com https://service.force.com https://tti-fc-emea.force.com https://d.la1-c1cs-cdg.salesforceliveagent.com https://cdn.cookielaw.org 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https://*.gstatic.com *.adyen.com https://images.unsplash.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com unpkg.com *.unpkg.com imagekit.io *.imagekit.io *.klarna.com *.klarnaevt.com *.klarnacdn.net *.simpli.fi *.google.com *.google.co.uk *.bazaarvoice.com *.adscience.com *.rackcdn.com *.magentocommerce.com *.pinimg.com *.snapchat.com *.bing.com *.trustpilot.com *.vaxstaffsale.co.uk *.roeye.com www.awin1.com *.awinblackfriday.com/ *.clarity.ms *.doubleclick.net *.googlesyndication.com *.vax.co.uk https://vax.co.uk/ https://vax.co.uk:443/ *.wepowerconnections.com spay.samsung.com *.googleapis.com *.tiktok.com *.google.ie *.google.je *.google.gg *.zenaps.com *.googleusercontent.com *.facebook.com *.cloudinary.com *.facebook.net *.cloudflareinsights.com *.force.com *.techsee.me edge.curalate.com bat.bing.net res.cloudinary.com www.facebook.com vax.co.uk *.abtasty.com *.googleadservices.com *.postcodeanywhere.co.uk https://service.force.com https://tti-fc-emea.force.com https://d.la1-c1cs-cdg.salesforceliveagent.com https://cdn.cookielaw.org data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://maps.googleapis.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com unpkg.com *.unpkg.com cdnjs.cloudflare.com imagekit.io *.imagekit.io *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.stackla.com *.authorize.net *.zencdn.net *.googleoptimize.com *.postcodeanywhere.co.uk *.force.com d.la1-c1cs-cdg.salesforceliveagent.com cdn.cookielaw.org *.googletagmanager.com *.google.it *.google.ie *.google.je sc-static.net *.bing.com *.pinterest.com *.pinimg.com *.snapchat.com *.tiktok.com *.abtasty.com *.trustpilot.com *.dwin1.com *.salesforceliveagent.com *.clarity.ms *.roeyecdn.com *.securesuite.co.uk *.vaxstaffsale.co.uk tti-fc--dtn.sandbox.my.site.com *.site.com *.vax.co.uk *.stapecdn.com stapecdn.com *.awin1.com *.awinblackfriday.com/ *.sciencebehindecommerce.com *.cloudflareinsights.com spay.samsung.com *.googleapis.com *.zenaps.com cdn.honey.io *.googleusercontent.com *.doubleclick.net *.salesforce.com *.facebook.net *.cookielaw.org cdn.evgnet.com edge.curalate.com connect.facebook.net tti-fc.my.site.com *.adalyser.com *.bazaarvoice.com *.gstatic.com https://service.force.com https://tti-fc-emea.force.com https://d.la1-c1cs-cdg.salesforceliveagent.com https://cdn.cookielaw.org 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.cash.app https://fonts.googleapis.com/ display.ugc.bazaarvoice.com unpkg.com *.unpkg.com imagekit.io *.imagekit.io *.klarnacdn.net *.googleapis.com *.stackla.com *.zencdn.net *.force.com *.postcodeanywhere.co.uk crm.vax.co.uk cdn.honey.io *.doubleclick.net *.site.com https://service.force.com https://tti-fc-emea.force.com https://d.la1-c1cs-cdg.salesforceliveagent.com https://cdn.cookielaw.org 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src imagekit.io *.imagekit.io *.techsee.me *.vax.co.uk edge.curalate.com connect.facebook.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.adyen.com https://maps.googleapis.com https://player.vimeo.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com unpkg.com *.unpkg.com imagekit.io *.imagekit.io *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.onetrust.com *.cardinalcommerce.com *.pinterest.com *.snapchat.com *.tiktok.com *.doubleclick.net *.postcodeanywhere.co.uk *.abtasty.com *.googlesyndication.com *.vaxstaffsale.co.uk *.securesuite.co.uk *.clarity.ms *.dynatrace.com *.vax.co.uk https://google.com/pay *.sciencebehindecommerce.com spay.samsung.com *.googleapis.com *.google.ie *.google.je *.google.gg cdn.honey.io account.affilitizer.com *.googleusercontent.com *.bing.com https://www.wepowerconnections.com:443 *.facebook.com edge.curalate.com bat.bing.net tti-fc.my.salesforce-scrt.com tti-fc--devdigital.sandbox.my.salesforce-scrt.com n55685555553z63h3bc3n3n3a2759464.germany-2.evergage.com www.gstatic.com https://service.force.com https://tti-fc-emea.force.com https://d.la1-c1cs-cdg.salesforceliveagent.com https://cdn.cookielaw.org 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri pay.google.com 'self' 'unsafe-inline'; report-uri https://csp.vax.co.uk/csp-report; report-to report-endpoint; 1
default-src 'self' www.google-analytics.com ajax.googleapis.com www.google.com google.com gstatic.com www.gstatic.com connect.facebook.net facebook.com; frame-src https://*.dotmetrics.rocks/ https://*.dotmetrics.net/; script-src 'self' 'unsafe-inline' https://*.google.com/ https://www.googletagmanager.com/ https://www.gstatic.com/ https://ced.sascdn.com/ https://script.dotmetrics.net/ https://script.dotmetrics.rocks/ https://cdn-cookieyes.com/ https://iprom.net/ https://cdn.iprom.net/ https://si.adocean.pl/; connect-src 'self' https://log.cookieyes.com/ https://cdn-cookieyes.com/ https://iprom.net/ https://script.dotmetrics.net/ https://region1.analytics.google.com/ https://script.dotmetrics.rocks/; style-src 'self' 'unsafe-inline' https://www.google.com/; img-src 'self' data: https://script.dotmetrics.net/ https://script.dotmetrics.rocks/ https://iprom.net/ https://*.iprom.net/ https://cdn-cookieyes.com/ https://www.google.si/  1
img-src https://higherlogicdownload.s3.amazonaws.com/PTG/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/PTG/ https://img.youtube.com/vi/ https://static.filestackapi.com/picker/ https://d2x5ku95bkycr3.cloudfront.net https://higherlogiclongterm.s3.amazonaws.com/PTG/ blob: https://d132x6oi8ychic.cloudfront.net 'self'; style-src https://d132x6oi8ychic.cloudfront.net 'unsafe-inline' https://higherlogiccloudfront.s3.amazonaws.com https://cdn.jsdelivr.net/jquery.slick/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://d2x5ku95bkycr3.cloudfront.net/ https://ajax.googleapis.com/ajax/libs/jqueryui/ https://use.fortawesome.com/ https://cdn.higherlogic.com/ai-assistant https://static.filestackapi.com/picker/ https://fonts.googleapis.com/ https://d3uf7shreuzboy.cloudfront.net/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/PTG/ https://higherlogicdownload.s3.amazonaws.com/PTG/ https://higherlogiclongterm.s3.amazonaws.com/PTG/ 'self'; font-src https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogiccloudfront.s3.amazonaws.com https://higherlogicdownload.s3.amazonaws.com/PTG/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/PTG/ 'self' https://higherlogiclongterm.s3.amazonaws.com/PTG/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://d2x5ku95bkycr3.cloudfront.net https://d132x6oi8ychic.cloudfront.net data:; script-src-elem https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d3uf7shreuzboy.cloudfront.net/ https://static.filestackapi.com/picker/ https://cdn.higherlogic.com/ai-assistant https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d2x5ku95bkycr3.cloudfront.net/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://www.gstatic.com/recaptcha/ https://static.filestackapi.com/filestack-js/ 'self' https://ajax.aspnetcdn.com/ajax/ 'unsafe-eval' 'unsafe-inline'; media-src https://higherlogiclongterm.s3.amazonaws.com/PTG/ https://higherlogicdownload.s3.amazonaws.com/PTG/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/PTG/ https://higherlogicstream.s3.amazonaws.com/PTG/ 'self' https://d132x6oi8ychic.cloudfront.net; script-src https://higherlogiclongterm.s3.amazonaws.com/PTG/ https://higherlogicdownload.s3.amazonaws.com/PTG/ https://ajax.aspnetcdn.com/ajax/ https://cdn.jsdelivr.net/jquery.slick/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d132x6oi8ychic.cloudfront.net https://cdn.informz.net 'unsafe-eval' https://use.fortawesome.com/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/PTG/ https://cdnjs.cloudflare.com/ajax/libs/prism/ 'unsafe-inline' https://d2x5ku95bkycr3.cloudfront.net/ https://higherlogiccloudfront.s3.amazonaws.com https://static.filestackapi.com https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d3uf7shreuzboy.cloudfront.net/ 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://api.connectedcommunity.org/ 'self' https://www.youtube.com/embed/ https://*.kb.us.higherlogic.com; connect-src https://upload.filestackapi.com https://static.filestackapi.com https://cloud.filestackapi.com/folder/list/ 'self' https://hl-managedservices.informz.net https://d3uf7shreuzboy.cloudfront.net/ blob:; worker-src 'self'; default-src 'self'; base-uri 'self'; frame-ancestors https://*.connectedcommunity.org/ 'self'; object-src 'none'; manifest-src 'self'; 1
default-src * data: ; script-src * 'unsafe-inline' 'unsafe-eval' cdn.matomo.cloud diateam.matomo.cloud; style-src * 'unsafe-inline' data: ; frame-ancestors 'self' ; frame-src 'self' www.google.com platform.twitter.com syndication.twitter.com www.youtube.com; block-all-mixed-content; report-uri https://www.diateam.net/.csp/report 1
base-uri 'self'; default-src 'none'; child-src; connect-src 'self' https://myaccount.sure.com http://myaccount.sure.com myaccount.sure.com https://myaccounttest.sure.com:2087 http://myaccounttest.sure.com:2087 myaccounttest.sure.com:2087 https://rec.smartlook.com http://rec.smartlook.com rec.smartlook.com https://ekr.zdassets.com http://ekr.zdassets.com ekr.zdassets.com https://*.zopim.com http://*.zopim.com *.zopim.com wss://widget-mediator.zopim.com https://*.searchiq.co http://*.searchiq.co *.searchiq.co https://*.cookiepro.com http://*.cookiepro.com *.cookiepro.com https://*.google.com http://*.google.com *.google.com https://*.podscribe.com http://*.podscribe.com *.podscribe.com https://www.google-analytics.com http://www.google-analytics.com www.google-analytics.com https://pixel-config.reddit.com http://pixel-config.reddit.com pixel-config.reddit.com https://www.redditstatic.com http://www.redditstatic.com www.redditstatic.com https://www.facebook.com http://www.facebook.com www.facebook.com https://sessions.bugsnag.com http://sessions.bugsnag.com sessions.bugsnag.com wss://ws-mt1.pusher.com https://*.postcodeanywhere.co.uk http://*.postcodeanywhere.co.uk *.postcodeanywhere.co.uk https://*.zendesk.com http://*.zendesk.com *.zendesk.com https://*.googlesyndication.com http://*.googlesyndication.com *.googlesyndication.com; font-src 'self' https://fonts.gstatic.com http://fonts.gstatic.com fonts.gstatic.com https://use.typekit.net http://use.typekit.net use.typekit.net https://*.zopim.com http://*.zopim.com *.zopim.com https://*.searchiq.co http://*.searchiq.co *.searchiq.co https://*.youtube.com http://*.youtube.com *.youtube.com data:; form-action 'self' https://*.twitter.com http://*.twitter.com *.twitter.com https://*.facebook.com http://*.facebook.com *.facebook.com; frame-ancestors 'none'; frame-src https://youtube.com http://youtube.com youtube.com https://*.twitter.com http://*.twitter.com *.twitter.com https://*.doubleclick.net http://*.doubleclick.net *.doubleclick.net https://*.bugherd.com http://*.bugherd.com *.bugherd.com https://www.googletagmanager.com http://www.googletagmanager.com www.googletagmanager.com https://www.facebook.com http://www.facebook.com www.facebook.com; img-src 'self' https://www.google-analytics.com http://www.google-analytics.com www.google-analytics.com https://www.google.com http://www.google.com www.google.com https://www.google.co.uk http://www.google.co.uk www.google.co.uk https://t.co http://t.co t.co https://www.facebook.com http://www.facebook.com www.facebook.com https://v2.zopim.com http://v2.zopim.com v2.zopim.com https://*.doubleclick.net http://*.doubleclick.net *.doubleclick.net https://*.twitter.com http://*.twitter.com *.twitter.com https://*.twimg.com http://*.twimg.com *.twimg.com https://*.searchiq.co http://*.searchiq.co *.searchiq.co https://alb.reddit.com http://alb.reddit.com alb.reddit.com https://bat.bing.com http://bat.bing.com bat.bing.com https://*.cookiepro.com http://*.cookiepro.com *.cookiepro.com https://verifi.podscribe.com http://verifi.podscribe.com verifi.podscribe.com https://d2iiunr5ws5ch1.cloudfront.net http://d2iiunr5ws5ch1.cloudfront.net d2iiunr5ws5ch1.cloudfront.net https://*.postcodeanywhere.co.uk http://*.postcodeanywhere.co.uk *.postcodeanywhere.co.uk https://placehold.co http://placehold.co placehold.co https://*.googlesyndication.com http://*.googlesyndication.com *.googlesyndication.com blob: data:; media-src https://youtube.com http://youtube.com youtube.com https://static.zdassets.com http://static.zdassets.com static.zdassets.com; object-src 'none'; manifest-src 'self'; script-src 'self' https://myaccount.sure.com http://myaccount.sure.com myaccount.sure.com https://myaccounttest.sure.com:2087 http://myaccounttest.sure.com:2087 myaccounttest.sure.com:2087 https://www.googletagmanager.com http://www.googletagmanager.com www.googletagmanager.com https://www.google-analytics.com http://www.google-analytics.com www.google-analytics.com https://www.googleadservices.com http://www.googleadservices.com www.googleadservices.com https://*.googleapis.com http://*.googleapis.com *.googleapis.com https://*.doubleclick.net http://*.doubleclick.net *.doubleclick.net https://v2.zopim.com http://v2.zopim.com v2.zopim.com https://static.zdassets.com http://static.zdassets.com static.zdassets.com https://*.twitter.com http://*.twitter.com *.twitter.com https://static.ads-twitter.com http://static.ads-twitter.com static.ads-twitter.com https://*.facebook.net http://*.facebook.net *.facebook.net https://rec.smartlook.com http://rec.smartlook.com rec.smartlook.com https://*.twimg.com http://*.twimg.com *.twimg.com https://*.searchiq.co http://*.searchiq.co *.searchiq.co https://cdn.co-buying.com http://cdn.co-buying.com cdn.co-buying.com https://*.bugherd.com http://*.bugherd.com *.bugherd.com https://*.postcodeanywhere.co.uk http://*.postcodeanywhere.co.uk *.postcodeanywhere.co.uk https://*.pcapredict.com http://*.pcapredict.com *.pcapredict.com https://*.cookiepro.com http://*.cookiepro.com *.cookiepro.com https://*.cloudfront.net http://*.cloudfront.net *.cloudfront.net https://*.bing.com http://*.bing.com *.bing.com https://*.redditstatic.com http://*.redditstatic.com *.redditstatic.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://*.typekit.net http://*.typekit.net *.typekit.net https://*.googleapis.com http://*.googleapis.com *.googleapis.com https://*.twitter.com http://*.twitter.com *.twitter.com https://*.twimg.com http://*.twimg.com *.twimg.com https://*.searchiq.co http://*.searchiq.co *.searchiq.co https://*.postcodeanywhere.co.uk http://*.postcodeanywhere.co.uk *.postcodeanywhere.co.uk 'unsafe-inline' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.cookielaw.org cdn.segment.com sdk.split.io maps.googleapis.com www.googletagmanager.com s.pinimg.com ct.pinterest.com connect.facebook.net analytics.tiktok.com bat.bing.com js.adsrvr.org sc-static.net static.ads-twitter.com pixel.byspotify.com secure.quantserve.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data: blob: media.alle.com res.cloudinary.com maps.gstatic.com maps.googleapis.com *.cloudinary.com cdn.cookielaw.org www.googletagmanager.com www.facebook.com c.clarity.ms di.rlcdn.com bat.bing.com pixel.quantserve.com tr.snapchat.com; font-src 'self' fonts.gstatic.com media.alle.com; connect-src 'self' api.segment.io cdn.segment.com *.split.io *.datadoghq.com browser-intake-datadoghq.com www.google-analytics.com ct.pinterest.com geolocation.onetrust.com api.alle.com api.dev.alle.com api.stage.alle.com api.demo.alle.com maps.googleapis.com cdn.cookielaw.org *.clarity.ms www.facebook.com analytics.tiktok.com *.snapchat.com pixels.spotify.com pixel.quantserve.com insight.adsrvr.org match.adsrvr.org bat.bing.com ad.doubleclick.net *.fls.doubleclick.net stats.g.doubleclick.net googleads.g.doubleclick.net cm.g.doubleclick.net analytics.twitter.com pixel.tapad.com ib.adnxs.com pixel.rubiconproject.com www.googleadservices.com; frame-ancestors 'self'; frame-src 'self' cdn.cookielaw.org ct.pinterest.com *.fls.doubleclick.net insight.adsrvr.org bid.g.doubleclick.net 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com www.raambekledingnederland.nl 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com *.google.com/ *.multisafepay.com https://pay.google.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com *.weltpixel.com *.trustpilot.com *.googletagmanager.com *.doubleclick.net *.freshchat.com https://consentcdn.cookiebot.com *.issuu.com cdn.by.wonderpush.com *.raambekledingnederland.nl 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://banners.helloretailcdn.com *.sharethis.com *.googleapis.com https://www.magezon.com imgsct.cookiebot.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.multisafepay.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com https://redchamps.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com *.cookiebot.com trello-attachments.s3.amazonaws.com *.mailplus.nl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://core.helloretail.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com *.sharethis.com *.googleapis.com *.gstatic.com consent.cookiebot.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.postcode-checkout.nl/api/international/v1/autocomplete/* *.google.com/ *.multisafepay.com https://pay.google.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com *.trustpilot.com https://www.googletagmanager.com tagmanager.google.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net *.freshchat.com *.brevo.com https://sibautomation.com *.cookiebot.com cdn.by.wonderpush.com https://www.google-analytics.com https://your-custom-script-source.com https://assets.calendly.com https://polyfill.io *.mailplus.nl *.omappapi.com *.hotjar.com bat.bing.com *.issuu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com *.sharethis.com *.fontawesome.com https://static.klaviyo.com *.googleapis.com maxcdn.bootstrapcdn.com *.multisafepay.com *.trustpilot.com tagmanager.google.com *.tagmanager.google.com *.googletagmanager.com https://fonts.googleapis.com https://assets.calendly.com *.freshchat.com *.omappapi.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://core.helloretail.com https://helloretailcdn.com *.sharethis.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.postcode-checkout.nl/api/international/v1/autocomplete/* *.multisafepay.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com https://www.google-analytics.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app *.cookiebot.com *.omappapi.com googleads.g.doubleclick.net *.googlesyndication.com *.brevo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://cse.google.com https://cdnjs.cloudflare.com https://connect.facebook.net https://platform.twitter.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://www.google.com; font-src 'self' data: https://cdnjs.cloudflare.com; img-src 'self' data: blob: https:; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://www.googletagmanager.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google; frame-src 'self' https://www.google.com https://recaptcha.google.com https://platform.twitter.com https://www.facebook.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests; frame-ancestors 'self' https://www2.igepn.edu.ec; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com *.googleapis.com *.cloudflare.com https://test-media.dsc-cricket.com maxcdn.bootstrapcdn.com *.twitter.com *.twimg.com *.trustedshops.com *.tawk.to 'self' data: *.dsc-cricket.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.payu.in *.twitter.com *.dsc-cricket.com 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com 'self' data: *.payu.in *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.meetanshi.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.payu.in api.razorpay.com *.twitter.com *.addthis.com *.doubleclick.net *.embedly.com *.rvvup.com *.dsc-cricket.com https://accounts.google.com/gsi/ *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com landofcoder.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.doubleclick.net https://meetanshi.com/media/logo.png *.meetanshi.com https://amcglobal.sc.omtrdc.net/ *.cloudflare.com http://localhost/1bdbd64a-7c1f-4fb6-aa86-17b870cb05ac https://test-media.dsc-cricket.com/media www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com cdn.razorpay.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.co.in *.jsdelivr.net *.ccavenue.com www.logicrays.com www.magecomp.com *.amazonaws.com *.securitymetrics.com *.postcodeanywhere.co.uk *.dsc-cricket.com *.cdnmedia.dsc-cricket.com https://cdnmedia.dsc-cricket.com *.facebook.net *.facebook.com blob: https://cdnmedia.dsc-cricket.com/media/catalog/product *.test-media.dsc-cricket.com https://test-media.dsc-cricket.com/media/catalog https://cdnstatic.dsc-cricket.com/static/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.gstatic.com *.googletagmanager.com *.doubleclick.net *.avada.io *.fontawesome.com *.googleapis.com *.meetanshi.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.payu.in checkout.razorpay.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu embed.tawk.to https://googleads.g.doubleclick.net/pagead/id cdn.jsdelivr.net *.razorpay.com indep11146.pcapredict.com *.postcodeanywhere.co.uk *.feefo.com *.dsc-cricket.com *.facebook.net *.lightwidget.com *.googleadservices.com *.adobedtm.com *.checkout.razorpay.com https://accounts.google.com/gsi/client *.cdnmedia.dsc-cricket.com https://cdnmedia.dsc-cricket.com *.test-media.dsc-cricket.com https://test-media.dsc-cricket.com/media/catalog https://cdnstatic.dsc-cricket.com/static/ *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com landofcoder.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.googletagmanager.com *.fontawesome.com *.cloudflare.com https://test-media.dsc-cricket.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.jsdelivr.net *.google.com *.postcodeanywhere.co.uk *.dsc-cricket.com *.unpkg.com https://unpkg.com/swiper@11.1.14/swiper-bundle.min.css https://unpkg.com/swiper/swiper-bundle.min.css https://accounts.google.com/gsi/style *.cdnmedia.dsc-cricket.com https://cdnmedia.dsc-cricket.com https://cdnstatic.dsc-cricket.com/static/ *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com *.granberg.se *.cdnmedia.dsc-cricket.com https://cdnmedia.dsc-cricket.com https://test-media.dsc-cricket.com https://test-media.dsc-cricket.com/media https://cdnstatic.dsc-cricket.com/static/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net https://amcglobal.sc.omtrdc.net/ www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.google-analytics.com *.doubleclick.net *.googlesyndication.com https://get.geojs.io *.avada.io *.meetanshi.com https://dpm.demdex.net/id api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.payu.in lumberjack.razorpay.com lumberjack-metrics.razorpay.com *.cloudflare.com *.twitter.com *.twimg.com *.tawk.to *.amazonaws.com *.securitymetrics.com *.embedly.com *.rvvup.com *.postcodeanywhere.co.uk *.googleapis.com *.dsc-cricket.com *.cdnmedia.dsc-cricket.com *.facebook.net *.facebook.com https://accounts.google.com/gsi/ https://cdnmedia.dsc-cricket.com https://cdnstatic.dsc-cricket.com/static/ *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com landofcoder.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com *.dsc-cricket.com *.facebook.net http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com cash-f.squarecdn.com fonts.googleapis.com x.klarnacdn.net cdn.elev.io maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ * ct.pinterest.com td.doubleclick.net *.snapchat.com messenger-edge.dixa.io messenger.dixa.io www.googletagmanager.com facebook.com *.facebook.com *.dialogintelligens.dk js.mollie.com *.klarna.com *.trustpilot.com www.ditur.dk *.www.ditur.dk 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com *.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io * https://images.unsplash.com *.google.com *.google.dk *.facebook.com bat.bing.com bat.bing.net stats.g.doubleclick.net *.sleeknote.com parametre.online *.snapchat.com *.etrusted.com *.trustedshops.com *.reddit.com raw.githubusercontent.com bzr.openai.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com https://www.magezon.com https://www.mollie.com https://redchamps.com *.klarna.com *.klarnaevt.com *.klarnacdn.net www.ditur.dk *.www.ditur.dk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com *.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://maps.googleapis.com https://player.vimeo.com *.facebook.net script.parametre.online ct.pinterest.com s.pinimg.com bat.bing.com *.tiktok.com *.sleeknote.com *.cloudfront.net *.fontawesome.com messenger.dixa.io sc-static.net tr.snapchat.com cdn.elev.io *.clarity.ms checkout.reepay.com static.cloudflareinsights.com *.trustedshops.com *.etrusted.com *.posthog.com *.impactcdn.com www.redditstatic.com dialogintelligens.github.io bzrcdn.openai.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com js.mollie.com *.reepay.com *.klarnacdn.net *.klarna.com *.profitmetrics.io *.trustpilot.com www.ditur.dk *.www.ditur.dk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cash.app x.klarnacdn.net fonts.googleapis.com *.etrusted.com https://static.klaviyo.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com * https://maps.googleapis.com https://player.vimeo.com google.com *.google.com googleads.g.doubleclick.net *.pinterest.com *.tiktok.com *.fontawesome.com bat.bing.com bat.bing.net invitejs.trustpilot.com *.snapchat.com messenger-edge.dixa.io region1.google-analytics.com *.elev.io *.clarity.ms pagead2.googlesyndication.com *.etrusted.com analytics.sleeknote.com/ *.posthog.com *.impactcdn.com *.config-security.com *.reddit.com *.dialogintelligens.dk bzr.openai.com bzrcdn.openai.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io *.klarnacdn.net *.klarna.com *.klarnaevt.com *.profitmetrics.io www.ditur.dk *.www.ditur.dk 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
style-src-elem 'self' 'unsafe-inline' *.maestra-static.io 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' *.googletagmanager.com *.cookiebot.eu *.maestra.io *.maestra-static.io *.pay1.de *.klarnacdn.net maps.googleapis.com *.dwin1.com *.facebook.net *.roeyecdn.com https://browser.sentry-cdn.com 'unsafe-inline'; font-src *.fontawesome.com *.facebook.com *.braintreegateway.com *.google.com *.paypal.com *.vimeo.com *.vimeocdn.com *.payments-amazon.co.uk *.payments-amazon.com *.payments-amazon.co.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de  *.facebook.net *.google-analytics.com *.doubleclick.net *.googletagmanager.com *.bing.com *.paypalobjects.com *.sandbox.paypal.com *.pinimg.com *.pinterest.com *.youtube.com *.cloudflare.com *.cookiebot.com *.adobe.io *.googlesyndication.com *.googletagservices.com *.gstatic.com 'self' data: *.hsappstatic.net *.popmechanic.io data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.doubleclick.net *.googletagmanager.com *.bing.com *.vimeo.com *.paypalobjects.com *.sandbox.paypal.com *.pinimg.com *.pinterest.com *.cloudflare.com documentcloud.adobe.com *.cookiebot.com *.adobe.io *.googlesyndication.com *.googletagservices.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io *.maestra-static.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com *.facebook.com *.braintreegateway.com *.google.com *.vimeo.com *.payments-amazon.co.uk *.payments-amazon.com *.payments-amazon.co.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de  *.facebook.net *.google-analytics.com *.doubleclick.net *.googletagmanager.com *.bing.com *.paypalobjects.com *.sandbox.paypal.com *.pinimg.com *.pinterest.com *.youtube.com *.cloudflare.com *.cookiebot.com *.adobe.io *.googlesyndication.com *.googletagservices.com *.hsforms.net *.hsforms.com 'self' data: maps.gstatic.com *.awin1.com *.ggpht.com *.googleadservices.com *.googleapis.com google.com *.googleusercontent.com *.gstatic.com hoegl.com *.klarnaevt.com *.maestra.io *.mindbox.cloud *.roeye.com *.usercentrics.eu yastatic.net data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.googletagmanager.com 'unsafe-inline' 'unsafe-eval' *.maestra-static.io assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.facebook.com *.braintreegateway.com *.google.com *.payments-amazon.co.uk *.payments-amazon.com *.payments-amazon.co.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de  *.facebook.net *.google-analytics.com *.doubleclick.net *.googletagmanager.com *.bing.com *.paypalobjects.com *.sandbox.paypal.com *.pinimg.com *.youtube.com *.cloudflare.com documentcloud.adobe.com *.cookiebot.com *.adobe.io *.googlesyndication.com *.googletagservices.com *.hsforms.net *.hsforms.com *.gstatic.com maps.googleapis.com 'self' *.awin1.com *.cookiebot.eu *.dwin1.com *.googleadservices.com *.googleapis.com *.klarnacdn.net *.maestra.io *.mindbox.cloud *.pay1.de *.pinterest.com *.roeyecdn.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src 'unsafe-inline' *.maestra-static.io *.fontawesome.com unsafe-inline assets.braintreegateway.com d.ratepay.com d.payla.io dr.payla.io *.facebook.com *.braintreegateway.com *.google.com *.paypal.com *.vimeo.com *.vimeocdn.com *.payments-amazon.co.uk *.payments-amazon.com *.payments-amazon.co.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de  *.facebook.net *.google-analytics.com *.doubleclick.net *.googletagmanager.com *.bing.com *.paypalobjects.com *.sandbox.paypal.com *.pinimg.com *.pinterest.com *.youtube.com *.cloudflare.com documentcloud.adobe.com *.cookiebot.com *.adobe.io *.googlesyndication.com *.googletagservices.com *.googleapis.com *.gstatic.com 'self' *.maestra.io *.mindbox.cloud 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.gstatic.com hoegl.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.maestra-static.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.facebook.com *.braintreegateway.com *.vimeo.com *.vimeocdn.com *.payments-amazon.co.uk *.payments-amazon.com *.payments-amazon.co.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de  *.facebook.net *.google-analytics.com *.doubleclick.net *.googletagmanager.com *.bing.com *.paypalobjects.com *.sandbox.paypal.com *.pinimg.com *.pinterest.com *.youtube.com *.cloudflare.com *.cookiebot.com *.adobe.io *.googlesyndication.com *.googletagservices.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.cookiebot.eu *.googleadservices.com *.googleapis.com *.klarnacdn.net *.klarna.com *.klarnaevt.com *.maestra.io *.mindbox.cloud 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';, report-uri https://3ef0dfbf-4946-43cf-b582-5322b3d2eb53.sansec.watch/; report-to report-endpoint; 1
default-src 'self' *.itrustcapital.com;  script-src *.itrustcapital.com https://www.googletagmanager.com 'unsafe-inline' 'self' ;  style-src 'self' *.itrustcapital.com use.fontawesome.com 'unsafe-inline' https://www.google-analytics.com;  font-src 'self' *.itrustcapital.com use.fontawesome.com 'unsafe-inline';  connect-src sdk.iad-05.braze.com api.amplitude.com dataschemasprodstorage.blob.core.windows.net *.alloy.co https://rum.browser-intake-us3-datadoghq.com https://www.googletagmanager.com 'self' *.itrustcapital.com https://www.google-analytics.com www.google-analytics.com https://stats.g.doubleclick.net wss:;  img-src 'self' *.itrustcapital.com https://www.google-analytics.com www.google-analytics.com https://stats.g.doubleclick.net blob:;  object-src 'none'; frame-src https://www.googletagmanager.com; report-uri https://csp-report.browser-intake-us3-datadoghq.com/api/v2/logs?dd-api-key=pubb464f8903d11bb4c37d5cbb555ed196a&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=csp-report;  report-to default 1
script-src 'self' 'unsafe-inline' 'unsafe-eval'  *.interactivebrokers.com  *.interactivebrokers.ca  *.interactivebrokers.com.hk  *.interactivebrokers.hk  *.interactivebrokers.ch  *.interactivebrokers.eu  *.interactivebrokers.ie  *.interactivebrokers.lu  *.interactivebrokers.hu  *.interactivebrokers.com.sg  *.interactivebrokers.co.uk  *.interactivebrokers.com.au  *.interactivebrokers.co.jp  *.interactivebrokers.co.in  *.ibkr.com  *.ibkr.com.cn  *.ibkrcampus.com  *.ibkrguides.com  *.clientam.com  *.interactiveadvisors.com  *.portfolioanalyst.com  *.go-mpulse.net  *.akstat.io  *.tradingview.com  bat.bing.com  *.taboola.com  googleads.g.doubleclick.net  www.googletagmanager.com  *.tiktok.com  *.quora.com  *.facebook.net  *.amazon-adsystem.com  *.ads-twitter.com  *.redditstatic.com  *.getlimy.ai  *.googleapis.com  *.google-analytics.com  *.gstatic.com  *.googleadservices.com  *.plaid.com  ; report-to csp-endpoint; report-uri /response_handlers/csplogger/index.php 1
default-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://unpkg.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://unpkg.com https://cdn.jsdelivr.net https://connect.facebook.net; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com data:; connect-src 'self' https:; report-uri /report-csp-violation 1
base-uri 'self'; form-action 'self'; default-src 'self'; connect-src 'self' data: https://stats.nederhost.nl/ https://zammad.nederhost.nl/ wss://zammad.nederhost.nl/; frame-ancestors 'none'; frame-src 'self'; img-src 'self' data:; report-to csp-endpoint; report-uri /_/report_csp_violation; script-src 'self' 'nonce-wPCQFBjr8suj5QV2' 'unsafe-eval' https://stats.nederhost.nl/ https://cdn.matomo.cloud/stats.nederhost.nl/ https://zammad.nederhost.nl/; style-src 'self' data: 'nonce-wPCQFBjr8suj5QV2' https://zammad.nederhost.nl/; style-src-attr 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.facebook.com *.googlesyndication.com *.tiktok.com 'self' connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net www.facebook.com *.googlesyndication.com *.tiktok.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com consentcdn.cookiebot.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io 'self' data: *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com *.openstreetmap.org magefan.com cm.magefan.com *.disqus.com connect.facebook.net graph.facebook.com business.facebook.com verbum.hr *.google.hr imgsct.cookiebot.com https://www.googletagmanager.com https://www.google-analytics.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://sibautomation.com in-automate.brevo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.google.com *.google.bg *.googletagmanager.com www.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com map.gls-croatia.com map.gls-czech.com map.gls-hungary.com map.gls-romania.com map.gls-slovenia.com map.gls-slovakia.com map.gls-serbia.com *.openstreetmap.org *.disqus.com connect.facebook.net graph.facebook.com business.facebook.com consent.cookiebot.com consentcdn.cookiebot.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.gstatic.com https://sibautomation.com in-automate.brevo.com https://cdn.brevo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io www.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com map.gls-croatia.com map.gls-czech.com map.gls-hungary.com map.gls-romania.com map.gls-slovenia.com map.gls-slovakia.com map.gls-serbia.com *.openstreetmap.org connect.facebook.net graph.facebook.com business.facebook.com consentcdn.cookiebot.com consent.cookiebot.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.gstatic.com https://sibautomation.com in-automate.brevo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' *.tawk.to *.jsdelivr.net/emojione/ *.jsdelivr.net/ghost/ cors.bridged.cc *.segment.com *.tiktok.com *.googleapis.com *.google.com *.googletagmanager.com *.youtube.com *.gstatic.com *.segment.io vercel.live va.vercel-scripts.com *.hotjar.com *.google-analytics.com *.adroll.com *.bing.com *.bing.net *.facebook.net googleads.g.doubleclick.net widget.trustpilot.com www.googleadservices.com https://unpkg.com/pdfjs-dist@2.12.313/legacy/build/pdf.worker.min.js join.com *.join.com *.licdn.com *.clarity.ms *.locationiq.com 'wasm-unsafe-eval' *.posthog.com eu.i.posthog.com 'nonce-ZGViY2Q1NTAtNzYyYS00Mzc3LThhMGQtMDk2ODIzOGU1MmU2' 'sha256-uX+XoKJ05/+HuYuDFIJWtfn5cpqNRoOz2kXq7ObarMs=' 'sha256-4LlEhJn74jj+GqYX/Oi7MTy3C+KHEtfnbEWfeqgMgZg=' 'sha256-/Z6+Dk2ZTVo1CBDYPQcWgzgsjU6hM6J0WRF4PdAOT84=' 'sha256-mnvsF5SZMx1z2VfaUJ/O5Rqs+i01Wv7mPwqYFHSj6K4='; style-src 'self' 'unsafe-inline' *.googleapis.com *.tawk.to/ cdn.join.com app-static.eu.posthog.com; connect-src 'self' https://*.tawk.to wss://*.tawk.to https://api.pflegia.de/graphql wss://api.pflegia.de/graphql *.vercel-insights.com *.datadoghq.eu browser-intake-datadoghq.eu *.segment.com *.googleapis.com *.segment.io *.tiktok.com *.tiktokw.us *.lottiefiles.com cdn.jsdelivr.net *.microsoftonline.com *.s3.eu-west-1.amazonaws.com analytics.google.com *.analytics.google.com stats.g.doubleclick.net bat.bing.com *.hotjar.com *.hotjar.io *.google-analytics.com *.googlesyndication.com ws.hotjar.com wss://ws.hotjar.com analytics.pangle-ads.com adservice.google.com vercel.live join.com cdn.join.com facebook.com *.facebook.com *.facebook.net google.com *.google.com googleads.g.doubleclick.net cors.bridged.cc *.linkedin.com *.clarity.ms *.posthog.com eu.i.posthog.com; media-src *.tawk.to; font-src 'self' data: *.gstatic.com cdn.join.com use.typekit.net *.tawk.to; img-src 'self' blob: data: *.tawk.to cdn.jsdelivr.net chaos-prod.s3.eu-west-1.amazonaws.com static.ghost.org storage.ghost.io pflegia.ghost.io images.unsplash.com www.pflegia.de www.google.at www.google.ba www.google.be www.google.bg www.google.ca www.google.ch www.google.co.in www.google.co.uk www.google.com www.google.cz www.google.de www.google.dk www.google.es www.google.fi www.google.fr www.google.gr www.google.hu www.google.in www.google.it www.google.lu www.google.ma www.google.nl www.google.pl www.google.ro www.google.ru www.google.si www.google.sk www.google.tn www.google.tr www.google.com.br *.s3.eu-west-1.amazonaws.com maps.googleapis.com *.github.io *.slack-edge.com *.gravatar.com *.wp.com *.gstatic.com bat.bing.com www.facebook.com d.adroll.com www.google-analytics.com www.googletagmanager.com dsum-sec.casalemedia.com x.bidswitch.net pixel.rubiconproject.com us-u.openx.net sync.outbrain.com image2.pubmatic.com ups.analytics.yahoo.com sync.taboola.com eb2.3lift.com ib.adnxs.com i.ytimg.com googleads.g.doubleclick.net cm.g.doubleclick.net idsync.rlcdn.com pippio.com tags.rd.linksynergy.com segments.company-target.com cdn.join.com *.linkedin.com *.adroll.com *.bing.com *.bing.net *.clarity.ms; worker-src 'self' blob:; frame-ancestors 'self'; form-action 'self' www.facebook.com; frame-src 'self' *.youtube.com *.google.com *.microsoftonline.com td.doubleclick.net www.facebook.com view.officeapps.live.com widget.trustpilot.com *.adroll.com *.bing.com *.bing.net *.clarity.ms *.googletagmanager.com vercel.live datawrapper.dwcdn.net 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://plugin-magento-ui.glopalservice.com *.fontawesome.com 'self' 1eafapi.cardinalcommerce.com 1eafstag.cardinalcommerce.com *.1eafapi.cardinalcommerce.com *.1eafstag.cardinalcommerce.com *.addthis.com *.addthisedge.com *.adobe.com *.adobedtm.com *.amcglobal.sc.omtrdc.net *.analytics.google.com *.assets.adobedtm.com *.authorize.net *.avada.io *.breadpayments.com *.brillianteers.com *.cdn-redirector.glopal.com *.cdn-sandbox.ca-dev.co *.cdn.chargeafter.com *.client.crisp.chat *.cloudflare.com *.cm.everesttech.net *.commerce-payment-services.com *.d2tcgmnynuc7pr.cloudfront.net *.dpm.demdex.net *.facebook.com *.facebook.net *.geoapi.cardinalcommerce.com *.geostag.cardinalcommerce.com *.getbread.com *.google-analytics.com *.google.com *.googleads.g.doubleclick.net *.googleadservices.com *.googleapis.com *.googletagmanager.com *.includestest.ccdc02.com *.instagram.com *.magento-ds.com use.typekit.net *.magento-ds.com *.meetanshi.com *.moatads.com *.newrelic.com *.nr-data.net *.pay.google.com *.paypal.com *.paypalobjects.com *.pinterest.com *.plugin-magento-ui.glopalservice.com *.rbcpayplan.com *.s.ytimg.com *.sandbox.paypal.com *.songbird.cardinalcommerce.com *.splitit.com *.t.paypal.com *.vimeo.com *.vimeocdn.com *.widgets.magentocommerce.com *.youtube.com accounts.google.com analytics.google.com api.braintreegateway.com api.sandbox.braintreegateway.com assets.adobedtm.com assets.braintreegateway.com business.facebook.com c.paypal.com cdn1.stamped.io cdn-renderer.glopalstore.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com connect.facebook.net fonts.googleapis.com geoapi.cardinalcommerce.com geostag.cardinalcommerce.com google.com googleads.g.doubleclick.net graph.facebook.com https://api-plugin-facade.glopalservice.com https://cdn-redirector.glopal.com https://cdn.chargeafter.com https://client.crisp.chat/l.js https://cognito-idp.eu-west-1.amazonaws.com https://d3ryumxhbd2uw7.cloudfront.net/webtracking/track.js https://logging-proxy-ca-production-170512-af60esna.uc.gateway.dev https://www.brillianteers.com.au https://www.brillianteers.com.uk https://www.brillianteers.com https://www.googletagmanager.com includestest.ccdc02.com js.braintreegateway.com pay.google.com s.ytimg.com songbird.cardinalcommerce.com songbirdstag.cardinalcommerce.com stamped.io t.paypal.com www.googleadservices.com www.paypal.com www.paypalobjects.com www.sandbox.paypal.com https://tally.so/widgets/embed.js https://client.crisp.chat client.relay.crisp.chat https://bat.bing.com https://get.geojs.io https://cdn.jst.ai https://my.jst.ai https://aly.jst.ai maxcdn.bootstrapcdn.com *.fonts.googleapis.com data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.splitit.com 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.affirm.com *.affirm.ca *.ca-dev.co *.chargeafter.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 1eafapi.cardinalcommerce.com *.1eafapi.cardinalcommerce.com *.1eafstag.cardinalcommerce.com *.addthis.com *.addthisedge.com *.adobedtm.com *.amcglobal.sc.omtrdc.net *.analytics.google.com *.assets.adobedtm.com *.authorize.net *.avada.io *.breadpayments.com *.brillianteers.com *.cdn-redirector.glopal.com *.cdn-sandbox.ca-dev.co *.cdn.chargeafter.com *.client.crisp.chat *.cloudflare.com *.cm.everesttech.net *.commerce-payment-services.com *.d2tcgmnynuc7pr.cloudfront.net *.dpm.demdex.net *.facebook.com *.facebook.net *.fontawesome.com *.geoapi.cardinalcommerce.com *.geostag.cardinalcommerce.com *.getbread.com *.google-analytics.com *.googleads.g.doubleclick.net *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.includestest.ccdc02.com *.instagram.com *.magento-ds.com use.typekit.net *.magento-ds.com *.meetanshi.com *.moatads.com *.newrelic.com *.nr-data.net *.pay.google.com *.paypalobjects.com *.pinterest.com *.plugin-magento-ui.glopalservice.com *.rbcpayplan.com *.s.ytimg.com *.sandbox.paypal.com *.songbird.cardinalcommerce.com *.splitit.com *.t.paypal.com *.typekit.net *.vimeo.com *.vimeocdn.com *.widgets.magentocommerce.com accounts.google.com analytics.google.com api.braintreegateway.com api.sandbox.braintreegateway.com assets.adobedtm.com assets.braintreegateway.com c.paypal.com cdn1.stamped.io cdn-renderer.glopalstore.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com fonts.googleapis.com geoapi.cardinalcommerce.com googleads.g.doubleclick.net https://api-plugin-facade.glopalservice.com https://cdn-redirector.glopal.com https://cdn.chargeafter.com https://client.crisp.chat/l.js https://cognito-idp.eu-west-1.amazonaws.com https://d3ryumxhbd2uw7.cloudfront.net/webtracking/track.js https://logging-proxy-ca-production-170512-af60esna.uc.gateway.dev https://plugin-magento-ui.glopalservice.com https://www.brillianteers.com.au https://www.brillianteers.com.uk https://www.brillianteers.com https://www.googletagmanager.com includestest.ccdc02.com js.braintreegateway.com pay.google.com s.ytimg.com songbird.cardinalcommerce.com songbirdstag.cardinalcommerce.com stamped.io t.paypal.com use.typekit.net www.googleadservices.com www.paypalobjects.com https://tally.so/widgets/embed.js https://client.crisp.chat client.relay.crisp.chat https://bat.bing.com https://get.geojs.io https://cdn.jst.ai https://my.jst.ai https://aly.jst.ai checkout.paypal.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.affirm.com *.affirm.ca https://cdn-sandbox.ca-dev.co https://cdn.chargeafter.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com *.facebook.com 'self' 1eafapi.cardinalcommerce.com 1eafstag.cardinalcommerce.com *.1eafapi.cardinalcommerce.com *.1eafstag.cardinalcommerce.com *.addthis.com *.addthisedge.com *.adobedtm.com *.amcglobal.sc.omtrdc.net *.analytics.google.com *.assets.adobedtm.com *.authorize.net *.avada.io *.breadpayments.com *.brillianteers.com *.cdn-redirector.glopal.com *.cdn-sandbox.ca-dev.co *.cdn.chargeafter.com *.client.crisp.chat *.cloudflare.com *.cm.everesttech.net *.commerce-payment-services.com *.d2tcgmnynuc7pr.cloudfront.net *.dpm.demdex.net *.facebook.net *.fontawesome.com *.geoapi.cardinalcommerce.com *.geostag.cardinalcommerce.com *.getbread.com *.google-analytics.com *.google.com *.googleads.g.doubleclick.net *.googleadservices.com *.googleapis.com *.googletagmanager.com *.includestest.ccdc02.com *.instagram.com *.magento-ds.com use.typekit.net *.magento-ds.com *.meetanshi.com *.moatads.com *.newrelic.com *.nr-data.net *.pay.google.com *.paypalobjects.com *.pinterest.com *.plugin-magento-ui.glopalservice.com *.rbcpayplan.com *.s.ytimg.com *.sandbox.paypal.com *.songbird.cardinalcommerce.com *.splitit.com *.t.paypal.com *.vimeo.com *.widgets.magentocommerce.com accounts.google.com api.braintreegateway.com api.sandbox.braintreegateway.com assets.braintreegateway.com c.paypal.com cdn1.stamped.io cdn-renderer.glopalstore.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com fonts.googleapis.com geoapi.cardinalcommerce.com geostag.cardinalcommerce.com google.com https://api-plugin-facade.glopalservice.com https://client.crisp.chat/l.js https://cognito-idp.eu-west-1.amazonaws.com https://d3ryumxhbd2uw7.cloudfront.net/webtracking/track.js https://logging-proxy-ca-production-170512-af60esna.uc.gateway.dev https://www.brillianteers.com.au https://www.brillianteers.com.uk https://www.brillianteers.com https://www.googletagmanager.com includestest.ccdc02.com js.braintreegateway.com pay.google.com s.ytimg.com songbird.cardinalcommerce.com songbirdstag.cardinalcommerce.com stamped.io use.typekit.net www.sandbox.paypal.com https://tally.so/widgets/embed.js https://client.crisp.chat client.relay.crisp.chat https://bat.bing.com https://get.geojs.io https://d2tcgmnynuc7pr.cloudfront.net https://image.crisp.chat https://cdn.jst.ai https://my.jst.ai https://aly.jst.ai b.stats.paypal.com dub.stats.paypal.com checkout.paypal.com *.cdn.klarna.com *.fpdbs.paypal.com *.fpdbs.sandbox.paypal.com *.cdninstagram.com *.amazonaws.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.affirm.com *.affirm.ca https://cdn-sandbox.ca-dev.co https://cdn.chargeafter.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com cdn-renderer.glopalstore.com *.googletagmanager.com *.facebook.net *.avada.io 'self' https://tryon.vto.jewelry *.1eafapi.cardinalcommerce.com *.1eafstag.cardinalcommerce.com *.addthis.com *.addthisedge.com *.adobedtm.com *.amcglobal.sc.omtrdc.net *.analytics.google.com *.assets.adobedtm.com *.authorize.net *.breadpayments.com *.brillianteers.com *.cdn-redirector.glopal.com *.cdn-sandbox.ca-dev.co *.cdn.chargeafter.com *.client.crisp.chat *.cloudflare.com *.cm.everesttech.net *.d2tcgmnynuc7pr.cloudfront.net *.dpm.demdex.net *.fontawesome.com *.geoapi.cardinalcommerce.com *.geostag.cardinalcommerce.com *.getbread.com *.google-analytics.com *.googleads.g.doubleclick.net *.googleadservices.com *.googleapis.com *.gstatic.com *.includestest.ccdc02.com *.instagram.com *.magento-ds.com use.typekit.net *.meetanshi.com *.moatads.com *.pay.google.com *.paypal.com *.paypalobjects.com *.pinterest.com *.plugin-magento-ui.glopalservice.com *.rbcpayplan.com *.s.ytimg.com *.sandbox.paypal.com *.songbird.cardinalcommerce.com *.splitit.com *.t.paypal.com *.vimeo.com *.widgets.magentocommerce.com accounts.google.com api.braintreegateway.com api.sandbox.braintreegateway.com assets.braintreegateway.com c.paypal.com cdn1.stamped.io client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com fonts.googleapis.com https://api-plugin-facade.glopalservice.com https://client.crisp.chat/l.js https://cognito-idp.eu-west-1.amazonaws.com https://d3ryumxhbd2uw7.cloudfront.net/webtracking/track.js https://logging-proxy-ca-production-170512-af60esna.uc.gateway.dev https://www.brillianteers.com.au https://www.brillianteers.com.uk https://www.brillianteers.com https://www.googletagmanager.com js.braintreegateway.com pay.google.com songbirdstag.cardinalcommerce.com stamped.io https://tally.so https://client.crisp.chat client.relay.crisp.chat https://bat.bing.com https://get.geojs.io https://analytics.tiktok.com wss://client.relay.crisp.chat https://cdn.jst.ai https://my.jst.ai https://aly.jst.ai https://snapppt.com/conversion-tracker.js https://embed.typeform.com/next/embed.js *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com *.fontawesome.com 'self' 1eafapi.cardinalcommerce.com 1eafstag.cardinalcommerce.com *.1eafapi.cardinalcommerce.com *.1eafstag.cardinalcommerce.com *.addthis.com *.addthisedge.com *.adobedtm.com *.amcglobal.sc.omtrdc.net *.analytics.google.com *.assets.adobedtm.com *.authorize.net *.avada.io *.breadpayments.com *.brillianteers.com *.cdn-redirector.glopal.com *.cdn-sandbox.ca-dev.co *.cdn.chargeafter.com *.client.crisp.chat *.cloudflare.com *.cm.everesttech.net *.commerce-payment-services.com *.d2tcgmnynuc7pr.cloudfront.net *.dpm.demdex.net *.facebook.com *.facebook.net *.geoapi.cardinalcommerce.com *.geostag.cardinalcommerce.com *.getbread.com *.google-analytics.com *.google.com *.googleads.g.doubleclick.net *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.includestest.ccdc02.com *.instagram.com *.magento-ds.com use.typekit.net *.magento-ds.com *.meetanshi.com *.moatads.com *.newrelic.com *.nr-data.net *.pay.google.com *.paypal.com *.paypalobjects.com *.pinterest.com *.plugin-magento-ui.glopalservice.com *.rbcpayplan.com *.s.ytimg.com *.sandbox.paypal.com *.songbird.cardinalcommerce.com *.splitit.com *.t.paypal.com *.typekit.net *.vimeo.com *.vimeocdn.com *.widgets.magentocommerce.com *.youtube.com accounts.google.com analytics.google.com api.braintreegateway.com api.sandbox.braintreegateway.com assets.adobedtm.com assets.braintreegateway.com business.facebook.com c.paypal.com cdn1.stamped.io cdn-renderer.glopalstore.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com connect.facebook.net geoapi.cardinalcommerce.com geostag.cardinalcommerce.com google.com googleads.g.doubleclick.net graph.facebook.com https://api-plugin-facade.glopalservice.com https://cdn.chargeafter.com https://client.crisp.chat/l.js https://cognito-idp.eu-west-1.amazonaws.com https://d3ryumxhbd2uw7.cloudfront.net/webtracking/track.js https://logging-proxy-ca-production-170512-af60esna.uc.gateway.dev https://www.brillianteers.com.au https://www.brillianteers.com.uk https://www.brillianteers.com https://www.googletagmanager.com includestest.ccdc02.com js.braintreegateway.com pay.google.com s.ytimg.com songbird.cardinalcommerce.com songbirdstag.cardinalcommerce.com stamped.io t.paypal.com use.typekit.net www.googleadservices.com www.paypal.com www.paypalobjects.com www.sandbox.paypal.com https://tally.so/widgets/embed.js https://client.crisp.chat client.relay.crisp.chat https://bat.bing.com https://get.geojs.io https://image.crisp.chat https://cdn.jst.ai https://my.jst.ai https://aly.jst.ai maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com cdn1.stamped.io stamped.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.affirm.com *.affirm.ca *.ca-dev.co *.chargeafter.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://api-plugin-facade.glopalservice.com https://cognito-idp.eu-west-1.amazonaws.com api.glopaltranslator.com *.google-analytics.com https://get.geojs.io *.avada.io 'self' 1eafapi.cardinalcommerce.com *.1eafapi.cardinalcommerce.com *.1eafstag.cardinalcommerce.com *.addthis.com *.addthisedge.com *.adobe.com *.adobedtm.com *.amcglobal.sc.omtrdc.net *.analytics.google.com *.assets.adobedtm.com *.authorize.net *.breadpayments.com *.brillianteers.com *.cdn-redirector.glopal.com *.cdn-sandbox.ca-dev.co *.cdn.chargeafter.com *.client.crisp.chat *.cloudflare.com *.cm.everesttech.net *.commerce-payment-services.com *.d2tcgmnynuc7pr.cloudfront.net *.dpm.demdex.net *.facebook.com *.facebook.net *.fontawesome.com *.geoapi.cardinalcommerce.com *.geostag.cardinalcommerce.com *.getbread.com *.googleads.g.doubleclick.net *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.includestest.ccdc02.com *.instagram.com *.magento-ds.com use.typekit.net *.magento-ds.com *.meetanshi.com *.moatads.com *.pay.google.com *.paypalobjects.com *.pinterest.com *.plugin-magento-ui.glopalservice.com *.rbcpayplan.com *.s.ytimg.com *.sandbox.paypal.com *.songbird.cardinalcommerce.com *.splitit.com *.t.paypal.com *.typekit.net *.vimeo.com *.vimeocdn.com *.widgets.magentocommerce.com *.youtube.com accounts.google.com api.braintreegateway.com api.sandbox.braintreegateway.com assets.adobedtm.com assets.braintreegateway.com c.paypal.com cdn1.stamped.io cdn-renderer.glopalstore.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com fonts.googleapis.com geoapi.cardinalcommerce.com googleads.g.doubleclick.net https://cdn-redirector.glopal.com https://cdn.chargeafter.com https://client.crisp.chat/l.js https://d3ryumxhbd2uw7.cloudfront.net/webtracking/track.js https://logging-proxy-ca-production-170512-af60esna.uc.gateway.dev https://plugin-magento-ui.glopalservice.com https://www.brillianteers.com.au https://www.brillianteers.com.uk https://www.brillianteers.com https://www.googletagmanager.com includestest.ccdc02.com js.braintreegateway.com pay.google.com s.ytimg.com songbird.cardinalcommerce.com songbirdstag.cardinalcommerce.com stamped.io t.paypal.com use.typekit.net https://tally.so/widgets/embed.js https://client.crisp.chat client.relay.crisp.chat https://bat.bing.com *.client.relay.crisp.chat wss://client.relay.crisp.chat https://cdn.jst.ai https://my.jst.ai https://aly.jst.ai https://webhooks.remarkety.com *.braintree-api.com *.cardinalcommerce.com *.graph.instagram.com *.amazonaws.com logs.browser-intake-datadoghq.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'self' 'unsafe-inline'; 1
frame-ancestors 'self'; default-src https: 'unsafe-inline' 'unsafe-eval' data: blob: 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com maxcdn.bootstrapcdn.com fonts.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de js.mollie.com https://my.sendinblue.com https://www.facebook.com https://platform.twitter.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.facebook.com quickchart.io img.youtube.com https://www.mollie.com https://api.mapbox.com https://app.usercentrics.eu *.usercentrics.eu https://www.google.de https://syndication.twitter.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.googletagmanager.com *.facebook.net www.termsfeed.com js.mollie.com https://app.usercentrics.eu *.usercentrics.eu https://platform.twitter.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com fonts.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https://api.usercentrics.eu https://aggregator.service.usercentrics.eu *.usercentrics.eu https://region1.analytics.google.com https://stats.g.doubleclick.net autocomplete2.postdirekt.de 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app maxcdn.bootstrapcdn.com *.zip.co data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * api.bazaarvoice.com stg.api.bazaarvoice.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com business.facebook.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com magefan.com cm.magefan.com *.trackedlink.net business.facebook.com https://img.youtube.com t.zip.co static.zipmoney.com.au static.zip.co https://imgs.signifyd.com https://*.online-metrix.net back3nd-zc8erm2098.camerahouse.com.au camerahouse.staging.overdose.digital *.camerahouse.com.au https://www.google.com.vn/ https://www.google.com.au/ x.bidswitch.net cm.g.doubleclick.net ib.adnxs.com tg.socdm.com r.casalemedia.com cs.adingo.jp ads.stickyadstv.com ad.360yield.com idsync.rlcdn.com contextual.media.net c.bing.com sync.outbrain.com simage2.pubmatic.com pixel.rubiconproject.com s.ad.smaato.net rtb-csync.smartadserver.com sync-t1.taboola.com criteo-sync.teads.tv ade.clmbtech.com eb2.3lift.com sync-criteo.ads.yieldmo.com sync.1rx.io dis.criteo.com sync.targeting.unrulymedia.com image8.pubmatic.com ups.analytics.yahoo.com image4.pubmatic.com ad.doubleclick.net sync.aralego.com rtb.openx.net cdn.aralego.net um.simpli.fi public-prod-dspcookiematching.dmxleo.com vc.hotjar.io cdn.livechat-files.com bpi.zip.co zip.co maps.gstatic.com maps.google.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com *.newrelic.com *.nr-data.net assets.adobedtm.com commerce.adobe.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-ds.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com business.facebook.com s7.addthis.com https://cdn.searchspring.net/intellisuggest/is.min.js static.zipmoney.com.au static.zip.co zip.co https://cdn-scripts.signifyd.com https://imgs.signifyd.com back3nd-zc8erm2098.camerahouse.com.au *.camerahouse.com.au *.jst.ai *.livechatinc.com *.studio19.com *.crazyegg.com *.hotjar.com *.criteo.com *.criteo.net *.studio19.com.au *.zip.co h64.online-metrix.net *.pcapredict.com *.searchspring.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app unsafe-inline assets.braintreegateway.com display.ugc.bazaarvoice.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com maxcdn.bootstrapcdn.com *.zip.co 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.net *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com qa-api.magedevteam.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com business.facebook.com ekr.zdassets.com/ https://beacon.searchspring.io/beacon https://imgs.signifyd.com back3nd-zc8erm2098.camerahouse.com.au *.camerahouse.com.au *.googleapis.com *.jst.ai *.doubleclick.net *.criteo.com *.crazyegg.com *.studio19.com.au *.zipmoney.com.au *.zip.co *.searchspring.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://careers.dev.chubbfs.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googleadservices.com https://www.googleadservices.com https://*.doubleclick.net https://*.gstatic.com https://*.google.com https://*.google.co.uk https://www.google.com/recaptcha/ https://www.recaptcha.net https://cdn-ukwest.onetrust.com https://cht-srvc.net https://cdn.livechatinc.com https://acsbapp.com https://widget.trustpilot.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn-cookieyes.com https://cdn.datatables.net https://unpkg.com https://kit.fontawesome.com https://stackpath.bootstrapcdn.com https://maps.googleapis.com https://js.hs-analytics.net https://static.hotjar.com https://bat.bing.com https://connect.facebook.net https://s.adroll.com https://secure.venture-enterprising.com https://d1b3llzbo1rqxo.cloudfront.net https://d3e54v103j8qbb.cloudfront.net https://snap.licdn.com https://chubbsf.vedero.nl https://sc.lfeeder.com https://www.youtube.com https://www.youtube-nocookie.com; worker-src 'self' blob:; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googleadservices.com https://www.googleadservices.com https://*.doubleclick.net https://*.google.com https://*.google.co.uk https://www.recaptcha.net https://maps.googleapis.com https://js.hs-analytics.net https://cdn-ukwest.onetrust.com https://geolocation.onetrust.com https://privacyportal-uk.onetrust.com https://d1ae0zx28z2bae.cloudfront.net https://ka-f.fontawesome.com https://cdn-cookieyes.com https://log.cookieyes.com; img-src 'self' data: blob: https://chubbfs.com https://*.chubbfs.com https://smc-monitoring.com https://*.smc-monitoring.com https://dev.smc-monitoring.com https://staging.smc-monitoring.com https://chubbsomatisystems.be https://*.chubbsomatisystems.be https://dev.chubbsomatisystems.be https://staging.chubbsomatisystems.be https://mentorbs.com https://*.mentorbs.com https://dev.mentorbs.com https://staging.mentorbs.com https://acsl.com.hk https://*.acsl.com.hk https://dev.acsl.com.hk https://staging.acsl.com.hk https://smc-telesurveillance.fr https://*.smc-telesurveillance.fr https://dev.smc-telesurveillance.fr https://staging.smc-telesurveillance.fr https://cemis.fr https://*.cemis.fr https://dev.cemis.fr https://staging.cemis.fr https://chubbsafes.ie https://*.chubbsafes.ie https://dev.chubbsafes.ie https://staging.chubbsafes.ie https://frontlinefs.com https://*.frontlinefs.com https://dev.frontlinefs.com https://staging.frontlinefs.com http://frontlinefs.com http://*.frontlinefs.com http://dev.frontlinefs.com http://staging.frontlinefs.com https://vipondfire.co.uk https://*.vipondfire.co.uk https://dev.vipondfire.co.uk https://staging.vipondfire.co.uk https://vitalcall.com.au https://*.vitalcall.com.au https://dev.vitalcall.com.au https://staging.vitalcall.com.au https://vitalcall.co.nz https://*.vitalcall.co.nz https://dev.vitalcall.co.nz https://staging.vitalcall.co.nz https://webapp-chb-paris-homesecweb-ext-nonprod-01.azurewebsites.net https://tile.openstreetmap.org https://maps.googleapis.com https://cdn-cookieyes.com https://api.productreview.com.au https://tr-rc.lfeeder.com https://*.google.com https://*.google.co.uk https://*.doubleclick.net https://*.googleadservices.com https://www.googleadservices.com https://*.gstatic.com https://*.googletagmanager.com https://px.ads.linkedin.com https://px4.ads.linkedin.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://code.jquery.com https://cdn.datatables.net https://unpkg.com https://use.fontawesome.com https://hello.myfonts.net; font-src 'self' data: https://fonts.gstatic.com https://use.fontawesome.com https://ka-f.fontawesome.com; frame-src 'self' https://*.google.com https://*.google.co.uk https://www.recaptcha.net https://www.youtube.com https://www.youtube-nocookie.com; object-src 'self'; base-uri 'self'; form-action 'self'; 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; connect-src 'self' *.fontawesome.com *.spur.us *.mcl.io *.livesession.io *.ctctcdn.com *.givecloud.co *.raisedonors.com *.stripe.com *.stripe.network www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.doubleclick.net *.googleapis.com maps.googleapis.com a.omappapi.com *.omappapi.com *.virtuoussoftware.com acsbapp.com *.acsbapp.com *.cloudflareinsights.com use.typekit.net p.typekit.net ka-f.fontawesome.com;; font-src 'self' https: data:; media-src 'self' https: blob:; form-action 'self' https:; frame-ancestors 'self'; object-src 'none'; frame-src 'self' *.givecloud.co *.raisedonors.com *.stripe.com www.google.com www.recaptcha.net www.youtube.com www.youtube-nocookie.com accounts.google.com;; worker-src 'self' blob:; base-uri 'self'; upgrade-insecure-requests 1
style-src-elem https://*.mindbox.ru *.yclients.com *.googleapis.com 'unsafe-inline' 'self'; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://*.salonsecret.ru/ https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://www.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors https://*.salonsecret.ru/ https://*.matrix.ru https://matrix.ru 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://*.salonsecret.ru/ https://kerastaseru.push.world https://*.google.com https://*.doubleclick.net/ https://*.googletagmanager.com https://www.facebook.com/ *.doubleclick.net/ https://helpdeskeddy.loreal.com.ru https://loreal.helpdeskeddy.com https://beautyid.pro https://*.weborama.fr https://e-academie.ru https://vk.com https://ru.spotscan.com https://loreal-webconsultation.modiface.com  https://*.criteo.com https://*.criteo.net https://*.yclients.com https://*.yandex.ru/ https://*.yandex.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://*.salonsecret.ru/ https://wf-ru-frontend.weborama-tech.ru https://wcm.weborama-tech.ru https://cstatic-ru-cv.weborama-tech.ru https://vk.com https://api-maps.yandex.ru https://www.google.com https://www.google.ru https://www.google.by https://cdn.retailrocket.net w1.yclients.com https://*.maps.yandex.net http://ad.doubleclick.net https://adservice.google.com https://www.facebook.com https://*.mail.ru https://*.flocktory.com https://*.mindbox.ru https://*.leadplan.ru/ https://adservice.google.ru/ https://storage.cloud.croc.ru/ https://*.yandex.ru/ https://*.yandex.com *.doubleclick.net/ https://*.weborama.fr www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com http://www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://*.salonsecret.ru/ https://cstatic.weborama-tech.ru https://cstatic.weborama.fr https://vk.com https://api-maps.yandex.ru https://yastatic.net http://cdn.retailrocket.ru https://www.google.com https://www.gstatic.com https://www.artfut.com https://cstatic-ru-cv.weborama-tech.ru http://*.yandex.ru https://*.facebook.net https://*.mindbox.ru https://loreal-luxe-services.directcrm.ru https://aprtx.com https://aprtn.com https://*.mail.ru https://*.lenmit.com https://top-fwz1.mail.ru http://*.lenmit.com https://*.flocktory.com https://kerastaseru.push.world https://cdn.leadplan.ru/ https://cdn.helpdeskeddy.com https://*.weborama.fr https://*.nr-data.net https://www.google-analytics.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://*.salonsecret.ru/ https://fonts.googleapis.com https://cdn.retailrocket.net https://w1.yclients.com https://*.mindbox.ru assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net https://analytics.google.com/ www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://*.salonsecret.ru/ https://mc.yandex.md https://tracking.retailrocket.net https://cdn.retailrocket.net https://api.retailrocket.net https://stats.g.doubleclick.net https://google-analytics.com https://geocode-maps.yandex.ru https://e-academie.ru https://mc.yandex.ru https://*.mindbox.ru https://*.mail.ru https://aprtx.com https://app.leadplan.ru/ https://www.google-analytics.com https://*.analytics.google.com/ https://*.nr-data.net https://suggestions.dadata.ru https://*.yandex.ru https://*.yandex.com *.doubleclick.net/ https://*.weborama.fr api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.matrix.ru/csp/collect; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; img-src 'self' data: https://s3.amazonaws.com https://*.s3.amazonaws.com https://www.googletagmanager.com https://www.google-analytics.com https://i.ytimg.com; media-src 'self' https://s3.amazonaws.com https://*.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://s3.amazonaws.com https://*.s3.amazonaws.com https://cdn.knightlab.com https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://www.google.com; style-src 'self' 'unsafe-inline' https://s3.amazonaws.com https://*.s3.amazonaws.com https://cdn.knightlab.com https://cdn.jsdelivr.net https://fonts.googleapis.com; font-src 'self' data: https://s3.amazonaws.com https://*.s3.amazonaws.com https://cdn.knightlab.com https://fonts.gstatic.com https://cdn.jsdelivr.net; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://hcaptcha.com https://*.hcaptcha.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://s3.amazonaws.com https://*.s3.amazonaws.com 1
script-src 'nonce-IjY12uw3G43Me_wsgItMSg' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/static-on-bigtable; base-uri 'none' 1
default-src 'none'; base-uri 'none'; form-action 'self'; frame-ancestors 'none'; report-to csp; connect-src 'self' kit.fontawesome.com ka-p.fontawesome.com data.stbuttons.com data.stbuttons.click l.sharethis.com analytics.google.com www.googleadservices.com www.googletagmanager.com www.google.com ssl.google-analytics.com www.google-analytics.com ad.doubleclick.net googleads.g.doubleclick.net stats.g.doubleclick.net; img-src 'self' data: www.ambitenergy.com cdn.ambitenergy.com cdn.ambitenergy.io l.sharethis.com platform-cdn.sharethis.com www.google.com www.googletagmanager.com googleads.g.doubleclick.net ssl.google-analytics.com; font-src 'self' cdn.ambitenergy.com cdn.ambitenergy.io ka-p.fontawesome.com; frame-src 'self' player.vimeo.com www.youtube.com docs.google.com; object-src 'none'; script-src 'self' 'report-sample' 'nonce-65ea33446ea460776ceb12c1d8f7cfdd' cdn.ambitenergy.com cdn.ambitenergy.io code.jquery.com kit.fontawesome.com platform-api.sharethis.com count-server.sharethis.com buttons-config.sharethis.com www.googletagmanager.com googleads.g.doubleclick.net ssl.google-analytics.com www.google-analytics.com; style-src 'self' 'unsafe-inline' cdn.ambitenergy.com cdn.ambitenergy.io; 1
default-src 'self'; script-src 'self' *.hsadspixel.net *.hs-analytics.net *.hs-scripts.com *.hubspot.com static.hsappstatic.net *.usemessages.com *.hs-banner.com *.hscollectedforms.net *.hsleadflows.net *.hsforms.net *.hsforms.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspot.net js.hscta.net *.hubspotfeedback.com feedback.hubapi.com 'strict-dynamic' 'nonce-uKQk4mD0vw2zMS4Bzz9YUw=='; img-src 'self' data: *.hubspot.com no-cache.hubspot.com js.hscta.net *.hsforms.net *.hsforms.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspot.net *.hubspotusercontent-eu1.net cdn2.hubspot.net static.hsappstatic.net www.google.se www.google.com www.facebook.com region1.analytics.google.com stats.g.doubleclick.net googleads.g.doubleclick.net pagead2.googlesyndication.com sdk.privacy-center.org www.googletagmanager.com mnd-assets.mynewsdesk.com; connect-src 'self' *.hubapi.com *.hubspot.com js.hscta.net *.hs-banner.com *.hscollectedforms.net *.hsforms.net *.hsforms.com *.hs-analytics.net www.google.com ad.doubleclick.net plausible.io data.advania.se analytics.google.com api.privacy-center.org m.clarity.ms pagead2.googlesyndication.com; frame-src 'self' data.advania.se *.hubspot.com *.hs-sites.com advania-25168988.hs-sites-eu1.com *.hsforms.net *.hsforms.com *.hubspot.net play.hubspotvideo.com recognition.ecovadis.com; style-src 'self' 'unsafe-inline' static.hsappstatic.net use.typekit.net p.typekit.net cdn.jsdelivr.net *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net cdn2.hubspot.net; font-src 'self' use.typekit.net fonts.gstatic.com *.hubspotusercontent-eu1.net static.hsappstatic.net 1
default-src 'self'; script-src 'report-sample' 'self' https://cdn.leadinfo.net/ping.js https://cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.6.0/slick.js https://d10zminp1cyta8.cloudfront.net/widget.js https://googleads.g.doubleclick.net/pagead/viewthroughconversion/716925886/ https://koi-3r7iktsm1g.marketingautomation.services/koi https://snap.licdn.com/li.lms-analytics/insight.min.js https://tagging.cape.nl/user-data-minified.js; style-src 'report-sample' 'self' https://fonts.googleapis.com; object-src 'none'; base-uri 'self'; connect-src 'self' https://api.leadinfo.com https://collector.leadinfo.net https://collector4.leadinfo.net https://px.ads.linkedin.com https://tagging.cape.nl https://www.google.com https://www.googleadservices.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://app-3r7iktsm1g.marketingautomation.services https://tagging.cape.nl; img-src 'self' data: https://googleads.g.doubleclick.net https://px.ads.linkedin.com https://region1.google-analytics.com https://scontent-fra3-1.cdninstagram.com https://scontent-fra5-1.cdninstagram.com https://scontent-fra5-2.cdninstagram.com https://www.google.com https://www.google.nl; manifest-src 'self'; media-src 'self'; worker-src 'none'; 1
object-src 'none'; script-src 'self' cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://checkout.culqi.com https://connect.facebook.net https://maps.googleapis.com https://platform.twitter.com https://static-content.vnforapps.com https://unpkg.com https://www.google.com https://www.instagram.com; script-src-attr 'self'; style-src 'self' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://ojo-publico.com; style-src-attr 'self'; frame-ancestors * 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.youtube-nocookie.com https://youtu.be *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://connect.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com *.googleapis.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.google.com *.youtube.com maps.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com uat.pinepg.in https://uat.pinepg.in/api/PG/V2 secure.pinepg.in https://secure.pinepg.in/payment *.twitter.com *.google.com *.youtube.com maps.googleapis.com 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com meetanshi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com.ua *.google.co.uk *.meetanshi.com meetanshi.com api.razorpay.com *.twitter.com *.facebook.com maps.googleapis.com lightwidget.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.doubleclick.net https://firebasestorage.googleapis.com *.meetanshi.com meetanshi.com www.pinelabs.com https://www.pinelabs.com/img/logo.png cdn.razorpay.com *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu maps.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google.com.ua *.google.co.uk *.gstatic.com *.googletagmanager.com *.doubleclick.net *.fontawesome.com *.googleapis.com *.avada.io *.shopify.com *.meetanshi.com meetanshi.com checkout.razorpay.com cdn.razorpay.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu maps.googleapis.com *.facebook.net cdn.lightwidget.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.googletagmanager.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.google.com *.youtube.com maps.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://get.geojs.io *.avada.io *.meetanshi.com meetanshi.com lumberjack.razorpay.com lumberjack-metrics.razorpay.com *.cloudflare.com *.twitter.com *.twimg.com *.youtube.com maps.googleapis.com facebook.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-ancestors 'none'; report-uri https://vault.gostatera.com/collect/csp 1
default-src 'self' 'unsafe-inline' https://px.ads.linkedin.com/ https://alleima.maps.arcgis.com/ https://*.alleima.com/ https://vimeo.com/ https://*.googlesyndication.com/ https://mb.cision.com/ https://*.doubleclick.net/ https://dl.episerver.net https://player.vimeo.com https://*.cookielaw.org/ https://alleima.matomo.cloud/ https://dc.services.visualstudio.com/ https://www.google.com/ https://www.googletagmanager.com/ https://*.google-analytics.com/ https://snap.licdn.com/ https://googleads.g.doubleclick.net/ https://static.ads-twitter.com/ https://*.hotjar.com/ https://connect.facebook.net/ https://*.outbrain.com/ https://tr.outbrain.com/ https://*.onetrust.com/ https://cdn.linkedin.oribi.io/ wss://ws.hotjar.com https://*.hotjar.io/ https://*.datablocks.se https://*.zdassets.com/ https://*.zendesk.com/ https://*.zopim.com/ wss://*.zopim.com/ https://pui.episerver.net/ https://*.highcharts.com https://www.facebook.com/;  img-src 'self' https://*.baidu.com/ https://*.zopim.io/ https://static.zdassets.com/ https://cdn.cookielaw.org/ https://mb.cision.com/ https://px.ads.linkedin.com/ https://www.google.com/ https://www.google.se/ https://t.co/ https://analytics.twitter.com/ https://*.outbrain.com/ https://www.facebook.com/ https://www.googletagmanager.com/ https://px4.ads.linkedin.com/ https://*.vimeocdn.com/ https://*.hotjar.com/ https://cdn.matomo.cloud/ https://maps.googleapis.com/ data:;  script-src 'self'  'unsafe-inline'   'unsafe-eval';  frame-ancestors 'self' https://www.googletagmanager.com/ https://cdn.cookielaw.org/;  script-src-elem  'self'  'unsafe-inline'  https://assets.alleima.com/ https://webassets.azurewebsites.net/ https://*.baidu.com/ https://*.monitor.azure.com/ https://*.vimeo.com/ https://code.highcharts.com/ https://dl.episerver.net/ https://*.cookielaw.org/ https://cdn.matomo.cloud/ https://alleima.matomo.cloud/ https://az416426.vo.msecnd.net/ https://www.google.com/ https://www.gstatic.com/ https://www.googletagmanager.com/ https://*.google-analytics.com/ https://snap.licdn.com/ https://googleads.g.doubleclick.net/ https://static.ads-twitter.com/ https://*.hotjar.com/ https://connect.facebook.net/ https://*.outbrain.com/ https://*.onetrust.com/ https://cdn.linkedin.oribi.io/ wss://ws.hotjar.com https://*.hotjar.io/ https://*.datablocks.se https://*.zdassets.com/ https://*.zendesk.com/ wss://*.zopim.com https://*.zopim.com https://code.jquery.com/jquery-3.7.1.min.js;  style-src 'self'  'unsafe-inline' https://cdn.jsdelivr.net/ https://stackpath.bootstrapcdn.com/ https://alleima.matomo.cloud/ https://*.datablocks.se/;  media-src  'self' https://static.zdassets.com/ https://mb.cision.com/ https://player.vimeo.com https://download-video.akamaized.net/ report-to csp-endpoint 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' https://cdn.appifycommerce.com https://www.googletagmanager.com https://chatwoot.appifycommerce.com https://static.cloudflareinsights.com; connect-src 'self' https://cdn.appifycommerce.com https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://chatwoot.appifycommerce.com wss://chatwoot.appifycommerce.com https://cloudflareinsights.com; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; frame-src https://www.youtube.com https://www.facebook.com https://chatwoot.appifycommerce.com; worker-src 'self' blob: 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net https://use.typekit.net *.gstatic.com *.googleapis.com data: https://fonts.gstatic.com https://www.tuinmeubelshop.nl https://widget.thuiswinkel-cdn.org https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' https://www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.awin1.com *.zenaps.com *.fls.doubleclick.net https://*.dpdconnect.nl https://gum.criteo.com https://secure.livechatinc.com https://widgetcontent.thuiswinkel-cdn.org https://www.facebook.com https://hal9000.redintelligence.net https://www.mainadv.com https://ss.tuinmeubelshop.nl https://www.googletagmanager.com/ www.xtento.com 'self' 'unsafe-inline'; img-src cdn.tuinmeubelshop.nl data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.googleapis.com *.awin1.com *.zenaps.com *.wepowerconnections.com https://maps.gstatic.com http://maps.gstatic.com https://maps.googleapis.com http://maps.googleapis.com https://cdn.tuinmeubelshop.nl https://cdn-staging.tuinmeubelshop.nl https://squeezely.tech https://t.squeezely.tech https://www.google.com https://ct.pinterest.com https://www.facebook.com https://www.google.nl https://bat.bing.com https://www.tuinmeubelshop.nl cdn.flbx.io *.cloudfront.net maps.gstatic.com *.ggpht.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com www.xtento.com cdn.xtento.com data: https: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com https://www.gstatic.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com https://*.dpdconnect.nl 'unsafe-eval' https://www.google.com https://ssl.google-analytics.com https://www.google-analytics.com https://ecookie.nl https://www.ecookie.nl https://connect.getflowbox.com https://chimpstatic.com https://www.googletagmanager.com http://www.googletagmanager.com https://www.googleadservices.com http://www.googleadservices.com https://bat.bing.com https://s.pinimg.com https://ct.pinterest.com https://connect.facebook.com https://connect.facebook.net https://www.facebook.com https://squeezely.tech https://t.squeezely.tech https://googleads.g.doubleclick.net https://static.criteo.net https://sslwidget.criteo.com https://static.hotjar.com https://script.hotjar.com https://*.hotjar.com https://www.googleoptimize.com https://ss.tuinmeubelshop.nl https://unpkg.com https://widget.thuiswinkel-cdn.org https://widget.thuiswinkel.org https://cdn.video-dns.com https://app.aiden.cx https://cdn.livechatinc.com https://api.livechatinc.com https://ar-view-zieny.com https://app.varify.io https://ingest.promptwatch.com https://tags.creativecdn.com https://static.cloudflareinsights.com *.getflowbox.com maps.googleapis.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.disqus.com https://cdn.jsdelivr.net https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com 'unsafe-inline' https://fonts.googleapis.com http://fonts.googleapis.com https://www.tuinmeubelshop.nl https://use.typekit.net https://p.typekit.net https://fonts.adobe.com https://widget.thuiswinkel-cdn.org https://cdn.jsdelivr.net https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: * *.video-dns.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.wepowerconnections.com https://the.sciencebehindecommerce.com https://www.google.com https://pagead2.googlesyndication.com https://www.google-analytics.com https://squeezely.tech https://t.squeezely.tech https://ct.pinterest.com https://widgetcontent.thuiswinkel-cdn.org https://mave.io *.video-dns.com wss://metrics.video-dns.com https://ar-view-zieny.com https://api.ar-view-zieny.com https://app.varify.io https://ingest.promptwatch.com https://*.hotjar.com https://tags.creativecdn.com https://ams.creativecdn.com https://bat.bing.com *.getflowbox.com *.gstatic.com data: http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://127.0.0.1/; report-to report-endpoint; 1
font-src *.fontawesome.com https://fonts.gstatic.com *.gstatic.com data: https://www.google.com https://www.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com https://www.google.co.in www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com fonts.googleapis.com *.googleapis.com *.google.com *.gstatic.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com https://stats.g.doubleclick.net http://dpm.demdex.net https://www.google.com https://www.gstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-icCKm5RpI19JE7WwfzTVAw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'nonce-Evs8F49AMib8cj5m/H0+5A==' 'strict-dynamic' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https: https://media.club.com https://js.intercomcdn.com https://static.intercomassets.com https://downloads.intercomcdn.com https://downloads.intercomcdn.eu https://downloads.au.intercomcdn.com https://uploads.intercomusercontent.com https://gifs.intercomcdn.com https://video-messages.intercomcdn.com https://messenger-apps.intercom.io https://messenger-apps.eu.intercom.io https://messenger-apps.au.intercom.io https://*.intercom-attachments-1.com https://*.intercom-attachments.eu https://*.au.intercom-attachments.com https://*.intercom-attachments-2.com https://*.intercom-attachments-3.com https://*.intercom-attachments-4.com https://*.intercom-attachments-5.com https://*.intercom-attachments-6.com https://*.intercom-attachments-7.com https://*.intercom-attachments-8.com https://*.intercom-attachments-9.com https://static.intercomassets.eu https://static.au.intercomassets.com https://media.giphy.com https://media0.giphy.com https://media1.giphy.com https://media2.giphy.com https://media3.giphy.com https://media4.giphy.com https://i.giphy.com; font-src 'self' data: https://applepay.cdn-apple.com https://fonts.gstatic.com https://js.intercomcdn.com https://fonts.intercomcdn.com; connect-src 'self' blob: data: https://media.club.com https://club-public-media-prod.b8daa655fa5e83b78f39105dc43ac930.r2.cloudflarestorage.com https://club-private-media-prod.b8daa655fa5e83b78f39105dc43ac930.r2.cloudflarestorage.com https://vs.club.com wss://vs.club.com https://*.amplitude.com https://api.basistheory.com https://metrics-us.cometchat.io https://*.apiclient-us.cometchat.io wss://*.websocket-us.cometchat.io https://upload.cloudflarestream.com https://videodelivery.net https://imagedelivery.net https://upload.imagedelivery.net https://challenges.cloudflare.com https://*.seondnsresolve.com https://*.seondfresolver.com https://*.deviceinfresolver.com https://google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://googletagmanager.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://www.google.com https://via.intercom.io https://api.intercom.io https://api.au.intercom.io https://api.eu.intercom.io https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io https://api-ping.intercom.io https://*.intercom-messenger.com wss://*.intercom-messenger.com https://nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-b.intercom.io https://nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io https://nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io https://uploads.intercomcdn.com https://uploads.intercomcdn.eu https://uploads.au.intercomcdn.com https://uploads.eu.intercomcdn.com https://uploads.intercomusercontent.com https://*.giphy.com https://files.kick.com https://images.kick.com https://cdn.jsdelivr.net https://*.ingest.us.sentry.io https://staticimgly.com wss://*.verisoul.ai https://*.verisoul.ai; frame-src 'self' embed.music.apple.com https://applepay.cdn-apple.com/ https://js.basistheory.com https://*.checkout.com https://challenges.cloudflare.com https://player.kick.com https://withpersona.com https://app.withpersona.com https://inquiry.withpersona.com https://w.soundcloud.com https://open.spotify.com https://*.taxbandits.io https://embed.tidal.com https://player.twitch.tv https://clips.twitch.tv https://youtube.com https://www.youtube.com; media-src 'self' blob: https://media.club.com https://club-private-media-prod.b8daa655fa5e83b78f39105dc43ac930.r2.cloudflarestorage.com https://files-us.cometchat.io https://data-us.cometchat.io https://media-us.cometchat.io https://videodelivery.net https://js.intercomcdn.com https://downloads.intercomcdn.com https://downloads.intercomcdn.eu https://downloads.au.intercomcdn.com; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'none'; form-action 'self'; frame-ancestors 'none'; report-uri https://o4509679037317120.ingest.us.sentry.io/api/4509679038038016/security/?sentry_key=5619c78097e49cae1f9c6e8e8437c70c&sentry_environment=prod; report-to csp-endpoint 1
object-src 'none'; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline' 'unsafe-eval'; base-uri 'none'; frame-ancestors 'self' 1
default-src 'self' *.juntadeandalucia.es juntadeandalucia.es; img-src 'self' data: *.juntadeandalucia.es juntadeandalucia.es cdn.juntadeandalucia.es *.googletagmanager.com; script-src 'self' *.juntadeandalucia.es juntadeandalucia.es *.googletagmanager.com *.google-analytics.com dub01.online.tableau.com 'unsafe-inline' 'unsafe-eval' blob:; connect-src 'self' *.google-analytics.com region1.google-analytics.com cdn.juntadeandalucia.es datos.juntadeandalucia.es; style-src 'self' *.juntadeandalucia.es juntadeandalucia.es fonts.googleapis.com 'unsafe-inline'; style-src-elem 'self' *.juntadeandalucia.es juntadeandalucia.es fonts.googleapis.com 'unsafe-inline'; font-src 'self' *.juntadeandalucia.es fonts.gstatic.com; object-src 'none'; frame-src 'self' https://www.youtube.com https://tableaupublico.juntadeandalucia.es https://storagecdnvlc.codev8.net; media-src 'self' https://storagecdnvlc.codev8.net; 1
script-src 'nonce-vA9GwCS4Py5naCbkLF-OfQ' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/static-on-bigtable; base-uri 'none' 1
object-src 'none';base-uri 'self';script-src 'nonce-keOMdw1wb_wBxrxVZE9MCA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src https://naturfotografen-forum.de/site/ https://naturfotografen-forum.de/modules/ https://naturfotografen-forum.de/types/ https://naturfotografen-forum.de/cache/ https://naturfotografen-forum.de/js/ 'nonce-AXwJk4EVu0k=' 'report-sample'; object-src 'none' 'report-sample'; base-uri 'none' 'report-sample'; report-to csp-endpoint ; report-uri https://naturfotografen-forum.de/api.php/uf/securitypolicyreport/save?o=3 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com cash-f.squarecdn.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com fonts.googleapis.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.cloudflare.com *.googleapis.com *.adyen.com *.surveysparrow.com data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.facebook.com *.googlesyndication.com *.arcot.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.doubleclick.net *.facebook.com *.googlesyndication.com magento-cloudflare.jetrails.com www.youtube.com *.zenaps.com *.arcot.com *.googletagmanager.com *.adyen.com *.klarna.com *.kustom.co *.surveysparrow.com *.pinterest.com *.echatsoft.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.adyen.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.ytimg.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com flagpedia.net *.awin1.com *.zenaps.com *.cloudflare.com *.klarna.com *.kustom.co *.klarnaevt.com *.googleadservices.com *.google-analytics.com *.zdassets.com *.zendesk.com *.zopim.com *.naver.com *.pinterest.com *.surveysparrow.com *.baidu.com *.bdimg.com *.rainbowred.com *.twitter.com *.yahoo.co.jp https://t.co https://yotpo-editor-production.s3.amazonaws.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.disqus.com *.avada.io *.shopify.com maps.googleapis.com *.pstatic.net *.zenaps.com *.cloudflare.com *.cloudflareinsights.com https://chimpstatic.com https://s3.amazonaws.com/downloads.mailchimp.com/ *.googleoptimize.com *.googleapis.com *.twimg.com *.fontawesome.com *.zdassets.com *.zendesk.com *.zopim.com *.klarna.com *.kustom.co *.surveysparrow.com *.naver.net *.naver.com *.tiktok.com *.pinimg.com *.baidu.com *.bdimg.com *.echatsoft.com *.dwin1.com *.ads-twitter.com *.fibbl.com *.yahoo.co.jp addrevenue.io *.addrevenue.io *.pinterest.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com downloads.mailchimp.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.cloudflare.com *.zdassets.com *.zendesk.com *.zopim.com *.adyen.com *.echatsoft.com *.typekit.net *.baidu.com *.yahoo.co.jp 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com *.zendesk.com *.zopim.com *.adyen.com data: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.adyen.com google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com *.tiktokw.us capig.gastonluga.com capig.sudio.com capig.stape.at *.cloudflare.com cloudflareinsights.com *.cloudflareinsights.com *.googleapis.com *.google-analytics.com *.analytics.google.com *.zendesk.com *.klarna.com *.kustom.co *.klarnaevt.com *.surveysparrow.com *.naver.com *.pinterest.com *.tiktok.com *.twitter.com *.echatsoft.com *.typekit.net https://static.zdassets.com https://ekr.zdassets.com *.gstatic.com https://*.zopim.com wss://*.zopim.com wss://*.echatsoft.com *.baidu.com *.bdimg.com *.yahoo.co.jp addrevenue.io *.addrevenue.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp.gastonluga.com/; report-to report-endpoint; 1
font-src www.paypalobjects.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ js.stripe.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://blog.extendware.com https://www.google.de https://m.extendware.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.stripe.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://maps.googleapis.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://cdn.ldnfrpl.com https://cdn.leadinfo.eu https://pm.web-vision.de https://rc.web-vision.de https://code.jquery.com https://matomo.extendware.com https://servicedesk.extendware.com https://m.extendware.com https://cdn.jsdelivr.net www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com assets.braintreegateway.com 'self' data: servicedesk.extendware.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://maps.googleapis.com https://player.vimeo.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://collector.leadinfo.net https://collector4.leadinfo.net https://api.leadinfo.com https://api.ldnfrpl.com https://stats.g.doubleclick.net/ https://matomo.extendware.com wss://servicedesk.extendware.com https://li-replay.s3-accelerate.amazonaws.com https://m.extendware.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; connect-src 'self' https://www.googletagmanager.com https://go.kuppingercole.com; frame-src https://challenges.cloudflare.com https://www.googletagmanager.com; frame-ancestors 'self'; report-to default; report-uri https://kuppingercole.uriports.com/reports 1
base-uri 'self'; default-src 'self' 'nonce-5d3ffc68bec59b4e950959398d45bc5a' https://cdn.shopify.com https://shopify.com; frame-ancestors https://studio.sanity.io https://app.convert.com https://shopify-kachava.sanity.studio http://localhost:3333; style-src https://fonts.googleapis.com https://static.klaviyo.com https://static-tracking.klaviyo.com https://cdn-swell-assets.yotpo.com https://maxcdn.bootstrapcdn.com https://use.typekit.net 'self' 'unsafe-inline' https://cdn.shopify.com; connect-src 'self' data: https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.googletagmanager.com https://www.google.com https://www.googleadservices.com https://api-cdn.yotpo.com https://*.intelligems.io https://hits.getelevar.com https://shopify-gtm-suite.getelevar.com https://shdid.me https://*.klaviyo.com https://api.config-security.com https://conf.config-security.com https://*.clarity.ms https://*.dwin1.com https://backend.alia-prod.com https://ekr.zdassets.com https://kachava.zendesk.com wss://kachava.zendesk.com https://tattle.api.osano.com https://consent.api.osano.com https://*.googleapis.com https://common-app.kctesting.info https://bam.nr-data.net https://api.beamimpact.com https://production.beamimpactlogs.com https://featuregates.org https://events.statsigapi.net https://statsigapi.net https://*.i.posthog.com https://*.amazon-adsystem.com https://ara.paa-reporting-advertising.amazon https://*.podscribe.com https://rp.liadm.com https://ct.pinterest.com https://events.api.boomtrain.com https://people.api.zetaglobal.net https://i.kachava.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://portal.brandlock.io https://analytics-ipv6.tiktokw.us https://ad.doubleclick.net https://stats.g.doubleclick.net https://d2pupanw9x802c.cloudfront.net https://api.whaledb.io/keep-alive 'self' https://cdn.shopify.com/ https://monorail-edge.shopifysvc.com https://kachava.myshopify.com; script-src 'self' 'strict-dynamic' https://cdn.shopify.com https://*.googletagmanager.com https://shopify-gtm-suite.getelevar.com 'unsafe-hashes' 'sha256-RFWPLDbv2BY+rCkDzsE+0fr8ylGr2R2faWMhq4lfEQc=' https://cdn.jsdelivr.net 'nonce-5d3ffc68bec59b4e950959398d45bc5a'; img-src 'self' data: https://cdn.shopify.com https://shop.kachava.com https://*.google-analytics.com https://*.googletagmanager.com https://www.google.com https://www.google.de https://www.google.com.ua https://www.googleadservices.com https://cdn.sanity.io https://*.clarity.ms https://*.klaviyo.com https://*.yotpo.com https://www.gravatar.com https://kachava.zendesk.com https://www.facebook.com https://connect.facebook.net https://*.bing.com https://bat.bing.net https://cdnjs.cloudflare.com https://maps.gstatic.com https://maps.googleapis.com https://youtube.com https://www.youtube.com https://i.ytimg.com https://static.truemed.com https://api.truemed.com https://*.podscribe.com https://rp.liadm.com https://portal.brandlock.io https://s.pinimg.com https://aa.trkn.us https://d3k81ch9hvuctc.cloudfront.net https://live.rezync.com https://e.postpilot.com; media-src 'self' https://cdn.shopify.com https://shop.kachava.com; font-src 'self' data: https://fonts.gstatic.com https://cdn.shopify.com https://static.klaviyo.com https://use.fontawesome.com https://maxcdn.bootstrapcdn.com https://use.typekit.net; frame-src https://cmp.osano.com https://s.amazon-adsystem.com https://platform.twitter.com https://ad.ipredictive.com https://danv01ao0kdr2.cloudfront.net https://www.youtube.com https://ct.pinterest.com https://app.truemed.com https://*.rfihub.com https://www.facebook.com https://verifypass.com https://mention-me.com; object-src 'none'; block-all-mixed-content 1
img-src https://higherlogicdownload.s3.amazonaws.com/AAPOS/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/AAPOS/ https://img.youtube.com/vi/ https://static.filestackapi.com/picker/ https://d2x5ku95bkycr3.cloudfront.net https://higherlogiclongterm.s3.amazonaws.com/AAPOS/ blob: https://d132x6oi8ychic.cloudfront.net 'self'; style-src https://d132x6oi8ychic.cloudfront.net 'unsafe-inline' https://higherlogiccloudfront.s3.amazonaws.com https://cdn.jsdelivr.net/jquery.slick/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://d2x5ku95bkycr3.cloudfront.net/ https://ajax.googleapis.com/ajax/libs/jqueryui/ https://use.fortawesome.com/ https://cdn.higherlogic.com/ai-assistant https://static.filestackapi.com/picker/ https://fonts.googleapis.com/ https://d3uf7shreuzboy.cloudfront.net/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/AAPOS/ https://higherlogicdownload.s3.amazonaws.com/AAPOS/ https://higherlogiclongterm.s3.amazonaws.com/AAPOS/ 'self'; font-src https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogiccloudfront.s3.amazonaws.com https://higherlogicdownload.s3.amazonaws.com/AAPOS/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/AAPOS/ 'self' https://higherlogiclongterm.s3.amazonaws.com/AAPOS/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://d2x5ku95bkycr3.cloudfront.net https://d132x6oi8ychic.cloudfront.net data:; script-src-elem https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d3uf7shreuzboy.cloudfront.net/ https://static.filestackapi.com/picker/ https://cdn.higherlogic.com/ai-assistant https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d2x5ku95bkycr3.cloudfront.net/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://www.gstatic.com/recaptcha/ https://static.filestackapi.com/filestack-js/ 'self' https://ajax.aspnetcdn.com/ajax/ 'unsafe-eval' 'unsafe-inline' https://*.elfsight.com https://*.elfsightcdn.com https://elfsight.com https://elfsightcdn.com; media-src https://higherlogiclongterm.s3.amazonaws.com/AAPOS/ https://higherlogicdownload.s3.amazonaws.com/AAPOS/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/AAPOS/ https://higherlogicstream.s3.amazonaws.com/AAPOS/ 'self' https://d132x6oi8ychic.cloudfront.net; script-src https://higherlogiclongterm.s3.amazonaws.com/AAPOS/ https://higherlogicdownload.s3.amazonaws.com/AAPOS/ https://ajax.aspnetcdn.com/ajax/ https://cdn.jsdelivr.net/jquery.slick/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d132x6oi8ychic.cloudfront.net https://cdn.informz.net 'unsafe-eval' https://use.fortawesome.com/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/AAPOS/ https://cdnjs.cloudflare.com/ajax/libs/prism/ 'unsafe-inline' https://d2x5ku95bkycr3.cloudfront.net/ https://higherlogiccloudfront.s3.amazonaws.com https://static.filestackapi.com https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d3uf7shreuzboy.cloudfront.net/ 'self' https://*.elfsightcdn.com https://*.elfsight.com https://elfsight.com https://elfsightcdn.com; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://api.connectedcommunity.org/ 'self' https://www.youtube.com/embed/ https://*.kb.us.higherlogic.com; connect-src https://upload.filestackapi.com https://static.filestackapi.com https://cloud.filestackapi.com/folder/list/ 'self' https://hl-managedservices.informz.net https://d3uf7shreuzboy.cloudfront.net/ blob: https://*.elfsightcdn.com https://*.elfsight.com https://elfsight.com https://elfsightcdn.com; worker-src 'self'; default-src 'self'; base-uri 'self'; frame-ancestors https://*.connectedcommunity.org/ 'self'; object-src 'none'; manifest-src 'self'; 1
font-src *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com *.cloudflare.com *.gstatic.com *.iconscout.com *.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.facebook.net pay.ozow.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.facebook.com *.facebook.net https://www.google.com/ secure.authorize.net test.authorize.net www.googletagmanager.com *.dotdigital-pages.com *.dotdigital.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es cdn.dnky.co webchat.dotdigital.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com https://vars.hotjar.com/ www.youtube.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.klevu.com *.ksearchnet.com magefan.com cm.magefan.com *.facebook.com *.facebook.net https://www.magezon.com ozow-live-cdn.s3.eu-west-1.amazonaws.com *.cloudflare.com https://stats.g.doubleclick.net/ *.cloudfront.net s.ytimg.com *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.yotpo.com *.linkedin.com t.co *.google.com *.google.co.za *.adsymptotic.com *.adroll.com *.adobedtm.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ chimpstatic.com downloads.mailchimp.com *.list-manage.com https://browser.sentry-cdn.com js.klevu.com *.ksearchnet.com *.facebook.com *.facebook.net *.googleapis.com *.google.com *.gstatic.com *.avada.io *.google.com/ *.cloudflare.com *.fontawesome.com *.bootstrapcdn.com *.twitter.com secure.authorize.net test.authorize.net js.braintreegateway.com *.cardinalcommerce.com video.google.com *.payments-amazon.com *.payments-amazon.de *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com *.yotpo.com https://www.gstatic.com/ *.paypal.com www.youtube.com sibforms.com *.addtoany.com *.googleoptimize.com static.zdassets.com *.hotjar.com *.roomvo.com *.trustpilot.com connect.facebook.net snap.licdn.com static.ads-twitter.com *.adroll.com d.adroll.mgr.consensu.org player.vimeo.com https://js.klevu.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com *.addtoany.com *.cloudflare.com *.iconscout.com *.bootstrapcdn.com cdn.dnky.co webchat.dotdigital.com *.yotpo.com sibforms.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com *.amazonaws.com *.googleapis.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://*.ingest.sentry.io *.klevu.com *.ksearchnet.com *.facebook.com *.facebook.net http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io *.cloudflare.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com *.yotpo.com *.zdassets.com *.zendesk.com roomvo.com wss://widget-mediator.zopim.com/ *.google-analytics.com stats.g.doubleclick.net cdn.plyr.io noembed.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cdn.jsdelivr.net cdn.almapay.com *.fontawesome.com maxcdn.bootstrapcdn.com payment.payline.com payment-2.payline.com homologation-payment.payline.com homologation-payment-2.payline.com payment.cdn.payline.com homologation-payment.cdn.payline.com https://www.gstatic.com https://fonts.gstatic.com https://fonts.bunny.net https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.getalma.eu *.almapay.com/ payment.payline.com payment-2.payline.com homologation-payment.payline.com homologation-payment-2.payline.com payment.cdn.payline.com homologation-payment.cdn.payline.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com www.facebook.com platform.twitter.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.facebook.com payment.payline.com payment-2.payline.com homologation-payment.payline.com homologation-payment-2.payline.com payment.cdn.payline.com homologation-payment.cdn.payline.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com cdn.jsdelivr.net *.almapay.com https://maps.googleapis.com *.googletagmanager.com *.facebook.net payment.payline.com payment-2.payline.com homologation-payment.payline.com homologation-payment-2.payline.com payment.cdn.payline.com homologation-payment.cdn.payline.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com connect.facebook.net twitter.com platform.twitter.com *.avada.io js.mollie.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://bo.weebii.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.jsdelivr.net *.almapay.com *.fontawesome.com maxcdn.bootstrapcdn.com payment.payline.com payment-2.payline.com homologation-payment.payline.com homologation-payment-2.payline.com payment.cdn.payline.com homologation-payment.cdn.payline.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://fonts.bunny.net https://cdnjs.cloudflare.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.getalma.eu *.almapay.com https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com payment.payline.com payment-2.payline.com homologation-payment.payline.com homologation-payment-2.payline.com payment.cdn.payline.com homologation-payment.cdn.payline.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.thuis.nl *.camcammer.com *.sensemakers.com *.test.paysafe.com *.cloudflare.com *.exoclick.com cdn.pushcrew.com *.ingest.sentry.io *.paysafe.com *.google.com *.google.nl *.google.sr *.google.be *.google.gr *.google.fr *.google-analytics.com stats.g.doubleclick.net *.doubleclick.net *.slack-edge.com *.googletagmanager.com analytics.sensemakers.nl *.hotjar.com *.hotjar.io;media-src 'self' https://senpweb05.senp.local https://*.thuis.nl blob:; connect-src 'self' wss://*.thuis.nl wss://*.sensemakers.com wss://ws.hotjar.com *.sensemakers.com stats.g.doubleclick.net *.ingest.sentry.io analytics.sensemakers.nl *.google.com *.google.nl *.google.be *.analytics.google.com *.hotjar.io *.hotjar.com *.paysafe.com; img-src 'self' data: https: blob:;font-src 'self' data:;report-uri https://analytics.sensemakers.nl/csp/ 1
frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' company.modyo.cloud cdn-cookieyes.com js.intercomcdn.com static.cloudflareinsights.com platform.twitter.com www.googletagmanager.com sc.lfeeder.com googleads.g.doubleclick.net snap.licdn.com ajax.cloudflare.com script.crazyeggs.com cdn.jsdelivr.net cdn.outfunnel.com cdn.dynamicframework.dev www.google.com www.gstatic.com www.youtube.com; style-src 'self' 'unsafe-inline' company.modyo.cloud fonts.googleapis.com cdn.dynamicframework.dev www.googletagmanager.com cdn.jsdelivr.net; img-src 'self' data: blob: company.modyo.cloud cdn.modyo.cloud downloads.intercomcdn.com px.ads.linkedin.com px4.ads.linkedin.com i.ytimg.com yt3.ggpht.com www.googleadservices.com static.intercomassets.com lh4.googleusercontent.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat tr.lfeeder.com www.googletagmanager.com cdn-cookieyes.com tr-rc.lfeeder.com wt.outfunnel.com; report-uri https://modyo-reports.uriports.com/reports/report, report-to default 1
default-src 'self' *.contractorcommerce.com 1
object-src 'none';base-uri 'self';script-src 'nonce-_w45jvCP2WPYGEaOSbbxZg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://cgtforms.com https://www.cgtforms.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://consentcdn.cookiebot.com; img-src 'self' data: blob: https:; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://googleads.g.doubleclick.net https://www.google.com https://challenges.cloudflare.com; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-hAt0kU0p0h3C0TrcLyDmnA' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
font-src *.googleapis.com *.gstatic.com *.getbutton.io *.baidu.com *.cloudflare.com *.bootstrapcdn.com *.fontawesome.com *.ionicframework.com *.google-analytics.com *.doubleclick.net ipinfo.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com *.cloudflare.com *.getbutton.io *.google.com *.baidu.com *.fontawesome.com *.bootstrapcdn.com *.ionicframework.com *.google-analytics.com *.doubleclick.net ipinfo.io data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com *.gstatic.com *.getbutton.io *.baidu.com *.google.com *.cloudflare.com *.twitter.com *.fontawesome.com *.ionicframework.com *.google-analytics.com *.doubleclick.net ipinfo.io s7.addthis.com *.avada.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.getbutton.io *.baidu.com *.google.com *.cloudflare.com *.fontawesome.com *.bootstrapcdn.com *.ionicframework.com *.google-analytics.com *.doubleclick.net ipinfo.io 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com *.getbutton.io *.baidu.com *.cloudflare.com *.fontawesome.com *.bootstrapcdn.com *.ionicframework.com *.google-analytics.com *.doubleclick.net ipinfo.io ekr.zdassets.com/ *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; frame-ancestors 'self'; script-src 'self' 'nonce-wWYrBoAkXnnM53anrbjvWg==' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.trustindex.io https://js.hs-scripts.com https://js.hsforms.net https://kit.fontawesome.com; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com img-src 'self' data: blob: https: https://www.google-analytics.com https://stats.g.doubleclick.net; style-src 'self' 'unsafe-inline' https://kit.fontawesome.com https://ka-f.fontawesome.com; font-src 'self' data: https://ka-f.fontawesome.com; frame-src 'self' https://forms.hsforms.com https://*.trustindex.io https://www.youtube.com https://www.google.com https://*.doubleclick.net; worker-src 'self' blob:; media-src 'self' https:; object-src 'none'; manifest-src 'self'; upgrade-insecure-requests; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net; img-src 'self' data: https: blob:; frame-src https://www.youtube.com https://www.youtube-nocookie.com; connect-src 'self'; form-action 'self' https://www.releasemyad.com; base-uri 'self'; frame-ancestors 'self' 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data: blob:; object-src 'none'; script-src 'self' https: 'nonce-tCaBZlWdqFcK2uc3m5pjCA=='; style-src 'self' https: 'unsafe-inline'; connect-src 'self' https: wss:; base-uri 'self'; frame-ancestors 'self'; report-uri /csp-reports 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com *.googleapis.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com https://elements.sandbox.fortis.tech https://elements.fortis.tech 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.everesttech.net *.demdex.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com *.certcapture.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.adobedtm.com *.sentry.io *.sentry-cdn.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.certcapture.com https://developer.adobe.com https://magento.com https://js.sandbox.fortis.tech https://js.fortis.tech https://elements.sandbox.fortis.tech https://elements.fortis.tech *.fontawesome.com *.googleapis.com *.gstatic.com *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.magento-datasolutions.com *.magento-ds.com *.certcapture.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io amcglobal.sc.omtrdc.net p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.certcapture.com https://developer.adobe.com https://elements.sandbox.fortis.tech https://elements.fortis.tech https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.klaviyo.com fonts.feefo.com *.isitetv.com media.flixcar.com media.flixfacts.com unpkg.com *.salesfire.co.uk *.smartmetrics.co.uk storage.googleapis.com static.cloudflareinsights.com *.openai.com *.fontawesome.com https://fonts.bunny.net *.cloudfront.net *.reviews.io *.reviews.co.uk *.snapfinance.co.uk *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.superpayments.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.reviews.io *.reviews.co.uk *.superpayments.com *.stripe.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com *.superpayments.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.com *.doubleclick.net *.facebook.com account.fetchify.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.reviews.io *.reviews.co.uk *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.superpayments.com *.js.stripe.com *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com imgsct.cookiebot.com donaghybros.co.uk *.donaghybros.co.uk google.co.in bat.bing.com media.flixcar.com rt.flix360.com *.klaviyo.com pay.google.com images.prismic.io *.isitetv.com media.flixfacts.com unpkg.com *.salesfire.co.uk *.smartmetrics.co.uk storage.googleapis.com static.cloudflareinsights.com https://donaghy-bros-media.s3.amazonaws.com *.openai.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.snapfinance.co.uk *.superpayments.com *.stripe.com a.storyblok.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com consent.cookiebot.com bat.bing.com s.pinimg.com/ct/ *.livechatinc.com *.hotjar.com/ ct.pinterest.com/static/ct/token_create.js widgets.reevoo.com static.youreko.com/js/partners/gb/donaghy-bros/youreko.energy-review.donaghy-bros.all.min.js media.flixfacts.com prod.flixgvid.flix360.io/ media.flixcar.com api.reviews.co.uk api.feefo.com instore.pricespy.co.uk/in.js cdn.loadbee.com/js/loadbee_integration.js static.cloudflareinsights.com cdn-cookieyes.com/client_data/f903097f3ec531c15a2be696/script.js cdn-cookieyes.com/client_data/f903097f3ec531c15a2be696/banner.js *.salesfire.co.uk s.kk-resources.com/leadtag.js *.klaviyo.com *.trustpilot.com *.isitetv.com unpkg.com *.smartmetrics.co.uk storage.googleapis.com *.openai.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.reviews.io *.reviews.co.uk *.snapfinance.co.uk https://connect.consents-dev.online https://connect.consents.online *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.superpayments.com b.stripecdn.com m.stripe.network segment.com *.segment.com *.segmentapis.com q4g4k4pw47biltffyqrfab7q7m0jaagm.lambda-url.ap-south-1.on.aws cdn.seondf.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.typekit.net *.salesfire.co.uk *.klaviyo.com *.isitetv.com media.flixcar.com media.flixfacts.com unpkg.com *.smartmetrics.co.uk storage.googleapis.com static.cloudflareinsights.com *.openai.com https://static.klaviyo.com cc-cdn.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.snapfinance.co.uk *.stripe.network *.stripecdn.com *.amazon.com *.superpayments.com *.stripe.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.google-analytics.com *.facebook.com *.facebook.net *.google.com ct.pinterest.com bat.bing.com *.hotjar.com/c/ stats.g.doubleclick.net widgets.reevoo.com availability.loadbee.com media.flixcar.com *.klaviyo.com pay.google.com api.reviews.co.uk api-js.datadome.co nominatim.openstreetmap.org *.trustpilot.com *.isitetv.com media.flixfacts.com unpkg.com *.salesfire.co.uk *.smartmetrics.co.uk storage.googleapis.com static.cloudflareinsights.com *.openai.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.craftyclicks.co.uk pcls1.craftyclicks.co.uk https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.snapfinance.co.uk https://signup.consents-dev.online https://signup.consents.online https://connect.consents-dev.online https://connect.consents.online https://api.mistho.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.superpayments.com stripe.com cognito-idp.eu-west-2.amazonaws.com segment.com *.segment.com *.segmentapis.com q4g4k4pw47biltffyqrfab7q7m0jaagm.lambda-url.ap-south-1.on.aws cdn.seondf.com *.seondnsresolve.com *.seondfresolver.com *.deviceinfresolver.com *.seonintelligence.com api.storyblok.com maps.googleapis.com web-sdk.smartlook.com *.sentry.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-xvABEjmGA660MEdknLFLKg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://widget.intercom.io https://js.intercomcdn.com https://analytics.ahrefs.com https://utt.impactcdn.com https://j.fieldy.ai https://googleads.g.doubleclick.net https://*.applovin.com https://s.axon.ai; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; media-src 'self' https: blob:; font-src 'self' data: https://fonts.intercomcdn.com; connect-src 'self' https: wss:; frame-src 'self' https://www.googletagmanager.com https://intercom-sheets.com https://www.youtube.com https://td.doubleclick.net https://www.facebook.com; worker-src 'self' blob:; form-action 'self' https:; report-uri /api/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://*.gstatic.com https://*.doubleclick.net https://*.googletagmanager.com https://login.miele.com.au https://login.miele.co.nz https://api-crm.miele.com https://*.facebook.com https://*.facebook.net https://*.pinimg.com https://*.pinterest.com https://*.gigya.com https://*.appointedd.com https://*.cookieyes.com https://*.cookielaw.org https://*.onetrust.com https://*.hotjar.com https://*.hotjar.io https://*.livechatinc.com https://*.salecycle.com https://s.salecycle.com https://*.yimg.com https://*.turn.com https://*.amazon-adsystem.com https://*.adnxs.com https://*.adsrvr.org https://*.bing.com https://*.bing.net https://*.akamaihd.net; script-src-elem 'self' 'unsafe-inline' https://*.google.com https://*.gstatic.com https://*.doubleclick.net https://*.googletagmanager.com https://login.miele.com.au https://login.miele.co.nz https://api-crm.miele.com https://*.facebook.com https://*.facebook.net https://*.pinimg.com https://*.pinterest.com https://*.gigya.com https://*.appointedd.com https://*.cookieyes.com https://*.cookielaw.org https://*.onetrust.com https://*.hotjar.com https://*.hotjar.io https://*.livechatinc.com https://*.salecycle.com https://s.salecycle.com https://*.yimg.com https://*.turn.com https://*.amazon-adsystem.com https://*.adnxs.com https://*.adsrvr.org https://*.bing.com https://*.bing.net https://*.akamaihd.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://eu-images.contentstack.com https://*.google.com https://*.google.com.au https://*.google.co.nz https://*.googleadservices.com https://*.googletagmanager.com https://*.doubleclick.net https://*.pinterest.com https://*.facebook.com https://*.facebook.net https://*.gigya.com https://*.yimg.com https://*.turn.com https://*.adnxs.com https://*.adsrvr.org https://*.cookieyes.com https://*.cookielaw.org https://*.onetrust.com https://*.bing.com https://*.bing.net https://*.akamaihd.net https://*.ytimg.com; font-src 'self' data: https://fonts.gstatic.com https://www.miele.com.au; connect-src 'self' https://eu-cdn.contentstack.com https://*.google.com https://*.google-analytics.com https://*.doubleclick.net https://*.googletagmanager.com https://login.miele.com.au http://login.miele.com.au https://login.miele.co.nz http://login.miele.co.nz https://api-crm.miele.com https://*.gigya.com http://*.gigya.com https://*.facebook.com https://*.pinterest.com https://*.amazon-adsystem.com https://*.amazon https://*.adsrvr.org https://*.adnxs.com https://*.yimg.com https://*.turn.com https://*.cookieyes.com https://*.cookielaw.org https://*.onetrust.com https://*.livechatinc.com https://*.hotjar.com https://*.hotjar.io https://*.bing.com https://*.bing.net https://*.appointedd.com https://*.akamaihd.net wss://login.miele.com.au wss://login.miele.co.nz wss://*.hotjar.com; frame-src 'self' https://*.google.com https://*.googletagmanager.com https://*.gstatic.com https://*.doubleclick.net https://*.youtube.com https://stylesourcebook.com.au https://*.gigya.com https://login.miele.com.au https://login.miele.co.nz https://*.pinterest.com https://*.amazon-adsystem.com https://*.adsrvr.org https://*.appointedd.com https://*.facebook.com https://*.bing.com; media-src 'self' https://www.miele.com.au https://www.miele.co.nz; object-src 'none'; worker-src 'self' blob:; manifest-src 'self'; form-action 'self' https://www.facebook.com/tr/; frame-ancestors 'none'; base-uri 'self'; report-uri /experiences/api/csp-report 1
font-src https://pro.fontawesome.com *.fontawesome.com fonts.gstatic.com https://fonts.bunny.net https://fonts.googleapis.com https://www.googletagmanager.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: data: 'self' 'unsafe-inline'; form-action www.facebook.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.googletagmanager.com https://smartforms.ekomi.com www.facebook.com fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.weltpixel.com 'self' 'unsafe-inline'; img-src blob: *.ekomiapps.de *.google.rs https://www.googletagmanager.com www.facebook.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://firebasestorage.googleapis.com *.facebook.com data: 'self' 'unsafe-inline'; script-src https://consent.cookiebot.com https://consentcdn.cookiebot.com *.clarity.ms https://www.googletagmanager.com *.ekomiapps.de connect.facebook.net assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com tagmanager.google.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://fonts.bunny.net https://www.googletagmanager.com *.adobe.com fonts.googleapis.com tagmanager.google.com *.ekomiapps.de 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src https://consent.cookiebot.com https://consentcdn.cookiebot.com *.omniconvert.com https://www.googletagmanager.com *.ekomiapps.de connect.facebook.net www.facebook.com dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.clarity.ms https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'strict-dynamic' 'nonce-DsAE/0ntvSG6aYzguNa3TA==' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://maps.googleapis.com https://maps.gstatic.com https://analytics.tiktok.com https://googleads.g.doubleclick.net https://s3.amazonaws.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://maps.googleapis.com https://cdn-images.mailchimp.com; font-src 'self' data: https://fonts.gstatic.com https://maps.gstatic.com; img-src 'self' data: blob: https://www.facebook.com https://connect.facebook.net https://www.google-analytics.com https://www.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com https://www.google.com https://www.google.com.mx https://www.googleadservices.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://www.googletagmanager.com https://www.facebook.com https://connect.facebook.net https://maps.googleapis.com https://maps.gstatic.com https://www.google.com https://google.com https://www.google.com.mx https://www.googleadservices.com https://ad.doubleclick.net https://googleads.g.doubleclick.net https://analytics.tiktok.com https://analytics-ipv6.tiktok.com; frame-src 'self' https:; media-src 'self' blob: data:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; 1
worker-src *.google.com *.zzz-worker-src.com blob:; font-src fonts.gstatic.com use.typekit.net *.klevu.com *.ksearchnet.com *.klaviyo.com *.zzz-font-src.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.boatoutfitters.com *.outdoornativitysets.com *.buildasurface.com *.osano.com *.bazaarvoice.com *.list-manage.com *.zzz-form-action.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.google.com *.zzz-frame-ancestors.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.googletagmanager.com *.demdex.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com https://api.boldcommerce.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * photos.pixlee.co js.mollie.com *.boatoutfitters.com *.outdoornativitysets.com *.buildasurface.com *.osano.com *.smartsheet.com *.wufoo.com *.doubleclick.net *.google.com ct.pinterest.com *.paylocity.com paypalobjects.com www.paypalobjects.com vimeo.com www.vimeo.com www.youtube.com *.zzz-frame-src.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io widgets.automizely.com widgets.automizely.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com https://static.boldcommerce.com https://static.xx.fbcdn.net https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com maps.gstatic.com wac.edgecastcdn.net *.klevu.com *.ksearchnet.com https://www.mollie.com *.googletagmanager.com *.google-analytics.com www.googletagmanager.com ssl.gstatic.com www.gstatic.com *.boatoutfitters.com *.outdoornativitysets.com *.buildasurface.com boatoutfitters.com outdoornativitysets.com buildasurface.com *.osano.com *.bazaarvoice.com *.bing.com bat.bing.com cdn.cookielaw.org optanon.blob.core.windows.net *.azurewebsites.net *.pointmediatracker.com *.linkedin.com *.ads.linkedin.com *.reddit.com *.bidswitch.net *.adnxs.com *.mediawallahscript.com *.casalemedia.com *.criteo.com *.stickyadstv.com *.360yield.com *.media.net *.mediavine.com *.postrelease.com *.outbrain.com *.pubmatic.com *.revcontent.com *.rubiconproject.com *.smartadserver.com *.taboola.com *.tapad.com *.teads.tv *.tremorhub.com *.clmbtech.com *.tpmn.co.kr *.3lift.com *.1rx.io *.agkn.com *.crwdcntrl.net *.adsrvr.org *.tpmn.io *.gorgias.chat *.redinuid.imrworldwide.com *.targeting.unrulymedia.com *.lijit.com *.mathtag.com *.prod.bidr.io *.mrtnsvr.com *.liadm.com *.turnto.com *.userway.org *.nrich.ai *.dmxleo.com *.cloudfront.net *.rezync.com *.turn.com *.rfihub.com pippio.com *.pippio.com *.blisspointmedia.com *.simpli.fi *.googleapis.com *.gstatic.com *.google.com *.googleusercontent.com *.clarity.ms *.zzz-img-src.com *.zebco.com *.criteo.net *.doubleclick.net data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com www.paypalobjects.com js.braintreegateway.com www.paypal.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com *.magento-datasolutions.com *.magento-ds.com ajax.googleapis.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.attn.tv events.attentivemobile.com *.certcapture.com https://api.boldcommerce.com https://static.xx.fbcdn.net https://connect.facebook.net https://cdnjs.cloudflare.com https://cashier.boldcommerce.com/assets/experience/flow_sdk.js https://maps.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com *.turnto.com *.klevu.com *.ksearchnet.com js.mollie.com *.googletagmanager.com tagmanager.google.com *.boatoutfitters.com *.outdoornativitysets.com *.buildasurface.com *.osano.com *.wufoo.com wufoo.com cdn.cookielaw.org *.hotjar.com bat.bing.com *.azurewebsites.net *.newrelic.com *.zdassets.com s.pinimg.com analytics.tiktok.com ct.pinterest.com utt.impactcdn.com *.gorgias.chat *.licdn.com *.redditstatic.com *.jst.ai *.criteo.com *.pixeltracker.co *.invocacdn.com *.cloudfront.net *.upfluence.co *.spn.so *.userway.org *.123formbuilder.com *.123contactform.com *.amplitude.com *.tctm.co *.googleapis.com *.gstatic.com *.google.com google.com *.ggpht.com *.googleusercontent.com video.google.com www.youtube.com www.google.com/recaptcha www.gstatic.com/recaptcha static.hotjar.com *.clarity.ms googleads.g.doubleclick.net js-agent.newrelic.com analytics.google.com payments.braintree-api.com business.facebook.com pixel-config.reddit.com cdn-ws.turnto.com js.klevu.com statsjs.klevu.com vpsy1npuua.execute-api.us-east-1.amazonaws.com we.turnto.com eucs30v2.ksearchnet.com rr4---sn-5uaezny6.googlevideo.com stats.ksearchnet.com photos.pixlee.co unpkg.com zdticketintegration.boatoutfitters.com *.agkn.com *.zzz-script-src.com spn.so *.id5-sync.com js.zi-scripts.com upf.ai *.doubleclick.net blob: data: unsafe-eval https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.magento-datasolutions.com *.magento-ds.com widgets.automizely.com widgets.automizely.io *.certcapture.com https://static.klaviyo.com unsafe-inline assets.braintreegateway.com *.turnto.com *.klevu.com *.ksearchnet.com tagmanager.google.com fonts.google.com *.userway.org *.cloudflare.com *.zzz-style-src.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.secureserver.net *.zzz-media-src.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com *.snplow.net commerce.adobedc.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com commerce.adobe.io performance.typekit.net *.magento-datasolutions.com *.magento-ds.com *.adobe.io api.automizely.com api.automizely.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.attn.tv events.attentivemobile.com *.certcapture.com https://api.boldcommerce.com https://api.staging.boldcommerce.com https://cashier.boldcommerce.com https://graph.facebook.com https://secure.boldcommerce.com https://secure.staging.boldcommerce.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com maps.googleapis.com *.turnto.com *.klevu.com *.ksearchnet.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.boatoutfitters.com *.outdoornativitysets.com *.buildasurface.com *.osano.com cdn.cookielaw.org stats.g.doubleclick.net *.hotjar.io bat.bing.com geolocation.onetrust.com *.azurewebsites.net bam.nr-data.net *.zdassets.com analytics.tiktok.com ct.pinterest.com *.gorgias.chat *.ads.linkedin.com *.reddit.com *.redditstatic.com *.pixeltracker.co *.invoca.net *.criteo.com *.jst.ai *.userway.org *.amazonaws.com *.amplitude.com *.googleapis.com *.gstatic.com assets.adobedtm.com www.googleadservices.com js.braintreegateway.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com www.googletagmanager.com www.google.com/recaptcha www.gstatic.com/recaptcha static.hotjar.com *.clarity.ms googleads.g.doubleclick.net js-agent.newrelic.com analytics.google.com payments.braintree-api.com business.facebook.com ipv6check.ksearchnet.com stats.ksearchnet.com zdticketintegration.boatoutfitters.com *.zzz-connect-src.com *.tiktokw.us *.datadome.co *.zi-scripts.com *.tinuiti.com *.zoominfo.com wss://ws.hotjar.com/api/v2/client/ws wss://*.gorgias.chat data: blob: wss://zdticketintegration.boatoutfitters.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://challenges.cloudflare.com https://apis.google.com https://*.gstatic.com https://*.hotjar.com https://*.hotjar.io https://connect.facebook.net https://static.ads-twitter.com https://s.pinimg.com; style-src 'self' 'unsafe-inline' https://*.hotjar.com; img-src 'self' data: blob: https:; font-src 'self' data: https://*.hotjar.com; connect-src 'self' https://api.namestation.com https://www.google-analytics.com https://analytics.google.com https://*.google-analytics.com https://*.analytics.google.com https://*.googleapis.com https://*.firebaseapp.com https://challenges.cloudflare.com https://stats.g.doubleclick.net https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://www.facebook.com https://connect.facebook.net https://analytics.twitter.com https://static.ads-twitter.com https://t.co https://ads-api.twitter.com https://ct.pinterest.com; frame-src 'self' https://challenges.cloudflare.com https://js.stripe.com https://*.firebaseapp.com https://accounts.google.com https://apis.google.com https://vars.hotjar.com; object-src 'none'; base-uri 'self' 1
default-src 'self' 'unsafe-inline' *.bazaarvoice.com; connect-src 'self' 'unsafe-inline' maps.googleapis.com www.google.com www.gstatic.com analytics.google.com *.google-analytics.com *.googletagmanager.com www.google-analytics.com bam.nr-data.net *.afterpay.com *.afterpaycdn.com *.squarecdn.com static.afterpay.com *.paypal.com *.bazaarvoice.com edge.fullstory.com rs.fullstory.com ekr.zdassets.com; font-src 'self' 'unsafe-inline' data: fonts.gstatic.com use.typekit.net *.afterpay.com *.afterpaycdn.com *.squarecdn.com; frame-src 'self' 'unsafe-inline' www.google.com www.youtube.com player.vimeo.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com assets.braintreegateway.com *.paypal.com; img-src 'self' 'unsafe-inline' data: maps.googleapis.com maps.gstatic.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com fonts.gstatic.com i.vimeocdn.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com site-assets.afterpay.com www.paypalobjects.com *.bazaarvoice.com rs.fullstory.com insight.adsrvr.org theathletesfootcustomercarenz.zendesk.com accentgroupsupport.zendesk.com www.facebook.com; script-src 'self' 'unsafe-inline' blob: maps.googleapis.com www.google.com www.gstatic.com *.googletagmanager.com *.google-analytics.com tagmanager.google.com js-agent.newrelic.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com tagmanager.google.com www.googletagmanager.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com; child-src blob:; media-src 'self' blob: data:; worker-src 'self' blob:; report-uri https://36eddd1e-785d-4d1e-a6e1-6809b1003cef.sansec.watch/ 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.hotjar.com *.fontawesome.com *.klarnacdn.net *.klevu.com *.ksearchnet.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.salesfire.co.uk *.yotpo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.hotjar.com *.klarna.com js.mollie.com *.trustpilot.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.salesfire.co.uk *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.hotjar.com www.dpd.co.uk *.klarna.com *.klarnaevt.com *.klarnacdn.net https://www.mollie.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.salesfire.co.uk *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.googleapis.com *.gstatic.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com widget.freshworks.com m2epro.freshdesk.com *.hotjar.com *.cloudflareinsights.com www.dpd.co.uk api.dpdgroup.co.uk *.klarna.com *.klarnacdn.net x.klarnacdn.net *.pcapredict.com services.postcodeanywhere.co.uk js.mollie.com *.trustpilot.com *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.klevu.com *.ksearchnet.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.salesfire.co.uk *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com widget.freshworks.com m2epro.freshdesk.com www.dpd.co.uk services.postcodeanywhere.co.uk *.fontawesome.com *.trustpilot.com *.klarnacdn.net https://static.klaviyo.com *.klevu.com *.ksearchnet.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.salesfire.co.uk *.typekit.net *.yotpo.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com widget.freshworks.com m2epro.freshdesk.com *.hotjar.com *.hotjar.io wss://*.hotjar.com/api/v2/client/ws *.cloudflareinsights.com www.dpd.co.uk api.dpdgroup.co.uk *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.pcapredict.com services.postcodeanywhere.co.uk *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.salesfire.co.uk *.smartmetrics.co.uk *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://www.paypal.com https://*.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://universalpay.transactiongateway.com https://www.paypal.com https://*.paypal.com https://pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://universalpay.transactiongateway.com https://*.paypalobjects.com https://*.paypal.com https://pay.google.com https://*.gstatic.com https://fonts.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://universalpay.transactiongateway.com https://www.paypal.com https://www.paypalobjects.com https://*.paypal.com https://applepay.cdn-apple.com https://pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com https://universalpay.transactiongateway.com https://*.paypalobjects.com https://www.gstatic.com https://fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://universalpay.transactiongateway.com https://api-m.paypal.com https://www.paypal.com https://*.paypal.com https://*.paypalobjects.com https://pay.google.com https://www.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src https://www.paypal.com https://*.paypal.com https://pay.google.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'none'; base-uri 'none'; report-uri /browser-report; report-to default; frame-ancestors 'none'; script-src https: 'unsafe-inline'; connect-src https:; style-src 'self' https://*.escapio.com 'unsafe-inline'; media-src data:; img-src https: data:; frame-src https:; font-src 'self' https://*.escapio.com https://fonts.gstatic.com data: 1
default-src blob: data: 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' https://*.adtrafficquality.google https://*.analytics.google.com https://*.doubleclick.net https://*.google-analytics.com https://*.googlesyndication.com https://pagead2.googlesyndication.com https://secure.gravatar.com https://securepubads.g.doubleclick.net https://www.ess-news.com https://www.google.co.uk https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.googletagservices.com https://www.youtube.com; script-src blob: data: 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' https://*.adtrafficquality.google https://*.doubleclick.net https://*.google-analytics.com https://*.googlesyndication.com https://*.wp.com https://pagead2.googlesyndication.com https://secure.gravatar.com https://securepubads.g.doubleclick.net https://www.ess-news.com https://www.google.com https://www.googletagmanager.com https://www.googletagservices.com https://www.youtube.com 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.cloudflare.com *.candid-io.site44.com data: https://fonts.googleapis.com *.hotjar.com *.digitalgenius.com *.userway.org https://fonts.bunny.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com https://ct.pinterest.com 'self' javascript: www.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors https://www.youtube.com https://www.google.com/maps https://www.google.com/ https://insight.adsrvr.org/ https://analytics.google.com https://vimeo.com https://includestest.ccdc02.com/cardinalcruise/ 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com https://songbird.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://*.cardinalcommerce.com https://*.centinelapi.cardinalcommerce.com https://insight.adsrvr.org/ https://analytics.google.com https://vimeo.com https://includestest.ccdc02.com/cardinalcruise/ magento-cloudflare.jetrails.com *.getcandid.com *.zohopublic.com *.candid-io.site44.com *.googleapis.com *.hotjar.com *.pinterest.com https://connect.chargelogic.com https://www.google.com https://eazyform.app https://www.getcandid.com *.facebook.com www.facebook.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com https://images.unsplash.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.ytimg.com *.klevu.com *.ksearchnet.com *.hubspotusercontent-na1.net *.cloudflare.com *.klarna.com *.googleadservices.com *.twimg.com *.getcandid.com *.azureedge.net *.blob.core.windows.net *.arteriorshome.com *.cdninstagram.com *.candid.io https://forms.hsforms.com https://forms-na1.hsforms.com https://candid-io.site44.com https://bam.nr-data.net https://track.hubspot.com https://lite-vimeo-embed.now.sh https://lite-vimeo-embed.vercel.app *.userway.org *.google.com *.google.co.in *.googletagmanager.com *.licdn.com *.onetimepim.com https://s3-us-west-2.amazonaws.com *.google.ca *.google.co.uk *.google.com.mx https://assets.filepicker.io *.clarity.ms *.simpli.fi *.facebook.com www.facebook.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https://vimeo.com/ www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com https://maps.googleapis.com www.apptrian.com pinterest.com ct.pinterest.com www.pinterest.com s.pinimg.com https://cdn1.ebizcharge.net https://songbird.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://cdnjs.cloudflare.com https://insight.adsrvr.org/ https://dpm.demdex.net https://amcglobal.sc.omtrdc.net https://geostag.cardinalcommerce.com https://geo.cardinalcommerce.com https://centinelapistag.cardinalcommerce.com https://centinelapi.cardinalcommerce.com/ https://analytics.google.com/ https://includestest.ccdc02.com/cardinalcruise/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://static.cloudflareinsights.com chat-assets.digitalgenius.com *.cloudflare.com *.fontawesome.com *.hsforms.net *.hsforms.com *.getcandid.com *.netdna-ssl.com *.jquery.com *.candid-io.site44.com *.hotjar.com https://maxcdn.bootstrapcdn.com *.digitalgenius.com https://cdn.jsdelivr.net https://eazyform.app https://js.hs-scripts.com *.hscollectedforms.net *.noibu.com *.pingdom.net https://js.hs-analytics.net https://js.hs-banner.com https://rum-static.pingdom.net https://cdn.noibu.com/collect.js https://arteriors.atlassian.net http://unpkg.com *.userway.org *.pinterest.com *.hsadspixel.net https://googleads.g.doubleclick.net *.googletagmanager.com *.clarity.ms *.simpli.fi https://go.aws https://shiphawk-assets.s3-us-west-1.amazonaws.com https://shiphawk.com https://api.filepicker.io *.facebook.net connect.facebook.net *.avada.io *.shopify.com js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com *.fontawesome.com assets.braintreegateway.com *.hotjar.com *.cloudflare.com *.googleapis.com *.twimg.com *.gstatic.com *.typekit.net *.getcandid.com *.candid-io.site44.com data: *.userway.org https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com https://www.arteriorshome.com *.getcandid.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net https://vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com s.pinimg.com 3dsapi.ebizcharge.net kg668dbov0.execute-api.us-east-1.amazonaws.com ebizcharge3ds-staging1.azurewebsites.net https://includestest.ccdc02.com *.ebizcharge.net https://songbird.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://cdnjs.cloudflare.com https://insight.adsrvr.org/ https://dpm.demdex.net https://amcglobal.sc.omtrdc.net https://geostag.cardinalcommerce.com https://geo.cardinalcommerce.com https://centinelapistag.cardinalcommerce.com https://analytics.google.com https://includestest.ccdc02.com/cardinalcruise/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://static.cloudflareinsights.com https://cloudflareinsights.com chat-assets.digitalgenius.com flow-server.us.dgdeepai.com https://api.hsforms.com *.cloudflare.com *.candid-io.site44.com *.hsforms.net *.hsforms.com *.azureedge.net *.getcandid.com *.hotjar.com *.clarity.ms *.simpli.fi *.js.hs-banner.com *.noibu.com *.pingdom.net *.hscollectedforms.net wss://input.noibu.com *.dgdeepai.com *.userway.org *.hubspot.com *.hubapi.com *.ingest.sentry.io https://shiphawk.com https://js.hs-banner.com https://www.googleadservices.com https://www.google.co.in https://www.filepicker.io *.hsappstatic.net https://hubspot-forms-static-embed.s3.amazonaws.com https://go.aws *.pinimg.com *.facebook.com www.facebook.com graph.facebook.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' 'unsafe-inline' 'report-sample' 'nonce-mftD7MUjK5uSD+0eYW9kgw=='; object-src 'none'; base-uri 'none'; worker-src 'none'; img-src blob: data: *; default-src 'none'; frame-ancestors 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io; font-src 'self' data:; media-src *; style-src 'unsafe-inline' * 1
object-src 'none';base-uri 'self';script-src 'nonce--i8L1DmdrdBHG4qWVxJ-vQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self'; frame-src 'self'; object-src 'none'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com maxcdn.bootstrapcdn.com *.stripe.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline' static.klaviyo.com bat.bing.com giantmicrobes.com *.giantmicrobes.com *.stripecdn.com klarna.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com js.stripe.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.tiktok.com *.certcapture.com js.stripe.com *.google.ca *.google.com.eg analytics.google.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline' *.attn.tv portal.brandlock.io giantmicrobes.attn.tv t.co *.t.co analytics.twitter.com facebook.com *.facebook.com bat.bing.com giantmicrobes.com *.giantmicrobes.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com *.authorize.net assets.secure.checkout.visa.com sandbox.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.tiktok.com *.certcapture.com s.pinimg.com cdn.ywxi.net seal.godaddy.com *.jst.ai aly.jst.ai my.jst.ai connect.facebook.net static.cloudflareinsights.com *.dwin1.com *.bing.com *.fontawesome.com cdn.attn.tv static.ads-twitter.com static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com https://a.klaviyo.com https://telemetrics.klaviyo.com/ portal.brandlock.io d3uz7fhqos37j7.cloudfront.net ct.pinterest.com *.google.com.eg giantmicrobes.attn.tv bat.bing.com 'self' 'unsafe-inline' giantmicrobes.com *.giantmicrobes.com api.goaffpro.com static.goaffpro.com https://static.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ widget.freshworks.com m2epro.freshdesk.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.googleapis.com https://static.klaviyo.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.yotpo.com dhv2ziothpgrr.cloudfront.net 'self' widget.freshworks.com m2epro.freshdesk.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.tiktok.com *.tiktokw.us *.certcapture.com aly.jst.ai s3-us-west-2.amazonaws.com connect.facebook.net *.pinterest.com *.cloudflareinsights.com www.google-analytics.com analytics.google.com *.google.com.eg static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com https://a.klaviyo.com https://telemetrics.klaviyo.com/ ekr.zdassets.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.authorize.net *.cardinalcommerce.com *.stripe.com klarna.com *.klarnacdn.net *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net portal.brandlock.io bat.bing.com events.attentivemobile.com stats.g.doubleclick.net *.attn.tv giantmicrobes.attn.tv 'self' 'unsafe-inline' giantmicrobes.com *.giantmicrobes.com https://static.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ widget.freshworks.com m2epro.freshdesk.com api.braintreegateway.com assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; frame-ancestors 'self'; base-uri 'none'; script-src 'nonce-0b512af01b6fdeecc152f559204ed312' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'report-sample'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' ssl.google-analytics.com www.google-analytics.com www.googletagservices.com maxcdn.bootstrapcdn.com bypass.ad-stir.com bid.g.doubleclick.net; style-src 'self' 'unsafe-inline' maxcdn.bootstrapcdn.com; connect-src 'self' ssl.google-analytics.com; img-src 'self' data: blob: ssl.google-analytics.com duramente.bypass.jp wise-video-cdn.bypass.jp halo.bypass.jp bypass.ad-stir.com mt.united.jp img.bypass.jp ok14static.oktacdn.com; font-src 'self' data: maxcdn.bootstrapcdn.com; media-src 'self' duramente.bypass.jp wise-video-cdn.bypass.jp halo.bypass.jp media.relaido.jp cdn.ad-stir.com; frame-src 'self' ad.doubleclick.net penta.a.one.impact-ad.jp; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /csp_report; report-to csp-endpoint 1
default-src 'self' https://*.lekker.de; base-uri 'self'; block-all-mixed-content; child-src 'self' blob:; connect-src 'self' https://*.lekker.de https://*.usercentrics.eu https://portal.reonic.de https://*.dvinci-hr.com https://*.contentsquare.net https://*.contentsquare.com https://heapanalytics.com https://*.clarity.ms https://*.adsrvr.org https://insight.adsrvr.org https://*.bing.com https://bat.bing.net https://*.facebook.com https://*.trustedshops.com https://*.etrusted.com https://*.trustbadge.com https://*.google-analytics.com https://maps.googleapis.com https://www.googletagmanager.com https://*.googletagmanager.com https://*.analytics.google.com https://*.g.doubleclick.net https://ad.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com https://google.com https://www.google.de; font-src 'self' data: https://*.lekker.de https://*.trustedshops.com https://portal.reonic.de https://static.dvinci-easy.com https://fonts.gstatic.com https://heapanalytics.com; form-action 'self' https://*.lekker.de https://*.facebook.com; frame-ancestors 'self' https://*.lekker.de; frame-src 'self' https://*.lekker.de https://*.usercentrics.eu https://*.adsrvr.org https://insight.adsrvr.org https://match.adsrvr.org https://*.facebook.com https://www.youtube.com https://player.vimeo.com https://portal.reonic.de https://feedback.etrusted.com https://csxd.lekker.de https://*.contentsquare.com https://www.googletagmanager.com; img-src 'self' data: blob: https://*.lekker.de https://*.usercentrics.eu https://*.trustedshops.com https://*.facebook.com https://*.facebook.net https://*.contentsquare.net https://heapanalytics.com https://*.clarity.ms https://*.bing.com https://bat.bing.net https://o.adtriba.com https://insight.adsrvr.org https://stats.g.doubleclick.net https://www.googletagmanager.com https://*.googletagmanager.com https://googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://ssl.gstatic.com https://www.gstatic.com https://*.g.doubleclick.net https://ad.doubleclick.net https://ade.googlesyndication.com https://adservice.google.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://www.google.com https://google.com https://www.google.de; media-src 'self' https://*.lekker.de blob: data:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://*.lekker.de https://*.usercentrics.eu https://portal.reonic.de https://apps.reonic.de https://ga.jspm.io https://*.trustedshops.com https://widgets.etrusted.com https://connect.facebook.net https://*.facebook.com https://*.clarity.ms https://*.bing.com https://cdn.adtriba.com https://js.adsrvr.org https://*.contentsquare.net https://app.contentsquare.com https://*.contentsquare.com https://cdn.heapanalytics.com https://heapanalytics.com https://static.dvinci-easy.com https://www.googletagmanager.com https://*.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://www.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' https://*.lekker.de https://portal.reonic.de https://*.usercentrics.eu https://static.dvinci-easy.com https://heapanalytics.com https://www.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com; report-uri /csp-report; worker-src 'self' blob: data:; report-to csp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com maxcdn.bootstrapcdn.com *.fontawesome.com https://widgets.trustedshops.com https://integrations.etrusted.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.awin1.com *.zenaps.com *.fls.doubleclick.net js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.awin1.com *.zenaps.com *.wepowerconnections.com flagpedia.net https://www.mollie.com www.bunzlaucastle.nl www.bunzlaucastle.com www.bunzlaucastle.de www.bunzlaucastle.fr www.returntosender.nl returntosender.content.clipbv.com bunzlaucastle.content.clipbv.com bat.bing.com www.google.nl b2b.content.clipbv.com b2b.clipbv.com www.thetable.store thetable.content.clipbv.com viavel.content.clipbv.com www.viavel.nl www.facebook.com d15k2d11r6t6rl.cloudfront.net api.mapbox.com pins.stockist.co stockist.co c.bing.com c.clarity.ms https://widgets.trustedshops.com https://integrations.etrusted.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.amazonaws.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.fontawesome.com *.gstatic.com stockist.co https://widgets.trustedshops.com https://integrations.etrusted.com assets.braintreegateway.com *.sendcloud.sc *.jsdelivr.net tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src b2b.content.clipbv.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; connect-src https://tagging.bunzlaucastle.com dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.wepowerconnections.com https://the.sciencebehindecommerce.com www.gstatic.com maps.googleapis.com bat.bing.com app.reloadify.com region1.google-analytics.com ct.pinterest.com www.google.nl stockist.co us-central1-stockist-prod.cloudfunctions.net gap.stockist.workers.dev pro.ip-api.com www.pinterest.com widget-portal.givacard.nl tagging.bunzlaucastle.nl tagging.bunzlaucastle.com tagging.bunzlaucastle.de tagging.thetable.store pagead2.googlesyndication.com tagging.returntosender.nl www.facebook.com *.trustedshops.com *.etrusted.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com https: 'self' 'unsafe-inline'; script-src https://tagging.bunzlaucastle.com assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com *.gstatic.com maps.googleapis.com js.mollie.com bat.bing.com cdn-eu.pagesense.io app.reloadify.com s.pinimg.com connect.facebook.net ct.pinterest.com stockist.co cdnjs.cloudflare.com widget-portal.givacard.nl tagging.bunzlaucastle.nl pagead2.googlesyndication.com tagging.bunzlaucastle.com tagging.bunzlaucastle.de tagging.thetable.store tagging.returntosender.nl https://widgets.trustedshops.com https://integrations.etrusted.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.sendcloud.sc *.jsdelivr.net *.googletagmanager.com tagmanager.google.com https: 'self' 'unsafe-inline' 'unsafe-eval'; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com *.bootstrapcdn.com *.fontawesome.com maxcdn.bootstrapcdn.com 'unsafe-inline' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.vimeo.com *.lightwidget.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://www.youtube.com https://c.paypal.com/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.magentocommerce.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com *.google.com *.googleadservices.com *.googletagmanager.com https://b.stats.paypal.com/ https://slc.stats.paypal.com/ https://c.paypal.com/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.lightwidget.com https://ipinfo.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.fontawesome.com https://bam.nr-data.net https://bam-cell.nr-data.net https://c.paypal.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.bootstrapcdn.com https://use.typekit.net https://p.typekit.net assets.braintreegateway.com https://static.klaviyo.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.googletagmanager.com stats.g.doubleclick.net https://bam.nr-data.net https://bam-cell.nr-data.net https://payments.sandbox.braintree-api.com/ https://origin-analytics-sand.sandbox.braintree-api.com/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://smartsolutions.report-uri.com/r/d/csp/reportOnly; report-to report-endpoint; 1
default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; media-src https: data:; object-src https: data:; img-src https: data:; font-src https: data:; report-uri /csp-report 1
script-src 'nonce-53DFNfzhOPM8zirnmYx4Fw==' 'strict-dynamic' 'unsafe-eval' 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; report-uri /_/csp-report 1
default-src 'self'; font-src 'self' *.gstatic.com use.fontawesome.com cdnjs.cloudflare.com cdn.jsdelivr.net; img-src 'self' data: *.eventdata.co.uk *.eventdata.uk eventdata.uk *.google-analytics.com px.ads.linkedin.com connect.facebook.com connect.facebook.net syndication.twitter.com; script-src-elem 'self' 'unsafe-hashes' 'unsafe-inline' *.eventdata.co.uk *.eventdata.uk eventdata.uk pay.dnapayments.com *.googletagmanager.com *.google-analytics.com cdnjs.cloudflare.com cdn.jsdelivr.net cdn.tiny.cloud app.webreg.me snap.licdn.com connect.facebook.net use.fontawesome.com platform.linkedin.com platform.twitter.com; script-src 'self' 'unsafe-hashes' 'unsafe-inline' connect.facebook.net; style-src 'self' *.googleapis.com cdnjs.cloudflare.com cdn.jsdelivr.net *.eventdata.co.uk *.eventdata.uk eventdata.uk connect.facebook.net; style-src-elem 'self' 'unsafe-inline' *.googleapis.com cdnjs.cloudflare.com cdn.jsdelivr.net *.eventdata.co.uk *.eventdata.uk eventdata.uk connect.facebook.net; style-src-attr 'unsafe-hashes' 'unsafe-inline'; worker-src 'self' blob:; frame-ancestors 'self'; connect-src 'self' *.google-analytics.com stats.g.doubleclick.net app.gleanin.com connect.facebook.com www.gov.uk; frame-src www.booking.com platform.twitter.com pay.dnapayments.com; report-uri https://qtq417pr.uriports.com/reports/report; report-to default 1
default-src 'self'; script-src 'self' 'unsafe-inline' www.googletagmanager.com www.google-analytics.com consent.cookiebot.com consentcdn.cookiebot.com static.cloudflareinsights.com js.klarna.com www.paypal.com; connect-src 'self' www.google-analytics.com region1.google-analytics.com connect.ekomi.de consentcdn.cookiebot.com; frame-src 'self' www.paypal.com *.klarna.com; img-src 'self' data: consentcdn.cookiebot.com; style-src 'self' 'unsafe-inline'; font-src 'self' data:; report-uri /csp-report 1
default-src 'self' refline.io *.refline.io refline.ch *.refline.ch reflinejobs.io *.reflinejobs.io; script-src 'self' 'unsafe-inline' 'wasm-eval' 'unsafe-eval' refline.io *.refline.io refline.ch *.refline.ch reflinejobs.io *.reflinejobs.io gstatic.com *.gstatic.com google.com *.google.com googleapis.com *.googleapis.com googletagmanager.com *.googletagmanager.com google-analytics.com *.google-analytics.com doubleclick.net *.doubleclick.net facebook.net *.facebook.net jquery.com *.jquery.com cloudflare.com *.cloudflare.com matomo.netgen.host cdn-cookieyes.com *.cdn-cookieyes.com indeed.com *.indeed.com siteimproveanalytics.com *.siteimproveanalytics.com googleadservices.com *.googleadservices.com adform.net *.adform.net licdn.com *.licdn.com tiktok.com *.tiktok.com dropbox.com *.dropbox.com live.net *.live.net blob: jobcloud.ai *.jobcloud.ai activehosted.com *.activehosted.com googlesyndication.com *.googlesyndication.com infird.com *.infird.com; style-src 'self' 'unsafe-inline' refline.io *.refline.io refline.ch *.refline.ch reflinejobs.io *.reflinejobs.io googleapis.com *.googleapis.com google.com *.google.com gstatic.com *.gstatic.com fontawesome.com *.fontawesome.com bunny.net *.bunny.net; font-src 'self' data: refline.io *.refline.io refline.ch *.refline.ch reflinejobs.io *.reflinejobs.io gstatic.com *.gstatic.com fontawesome.com *.fontawesome.com bunny.net *.bunny.net faircado.com *.faircado.com; img-src 'self' data: blob: refline.io *.refline.io refline.ch *.refline.ch reflinejobs.io *.reflinejobs.io gstatic.com *.gstatic.com google.com *.google.com googleapis.com *.googleapis.com googletagmanager.com *.googletagmanager.com google-analytics.com *.google-analytics.com vimeocdn.com *.vimeocdn.com kununu.com *.kununu.com glassdoor.ch *.glassdoor.ch sfx.ms *.sfx.ms jobcloud.ai *.jobcloud.ai linkedin.com *.linkedin.com indeed.com *.indeed.com dropbox.com *.dropbox.com ytimg.com *.ytimg.com google.ch *.google.ch adnxs.com *.adnxs.com seadform.net *.seadform.net facebook.com *.facebook.com doubleclick.net *.doubleclick.net googleadservices.com *.googleadservices.com; connect-src 'self' blob: data: refline.io *.refline.io refline.ch *.refline.ch reflinejobs.io *.reflinejobs.io gstatic.com *.gstatic.com google.com *.google.com googleapis.com *.googleapis.com firebaseio.com *.firebaseio.com vimeo.com *.vimeo.com kununu.com *.kununu.com pdfjs.express *.pdfjs.express googlesyndication.com *.googlesyndication.com tiktok.com *.tiktok.com tiktokw.us *.tiktokw.us linkedin.com *.linkedin.com matomo.netgen.host doubleclick.net *.doubleclick.net google-analytics.com *.google-analytics.com overbridgenet.com googleadservices.com *.googleadservices.com; worker-src 'self' blob:; media-src 'self' blob: data:; frame-src 'self' refline.io *.refline.io refline.ch *.refline.ch reflinejobs.io *.reflinejobs.io gstatic.com *.gstatic.com google.com *.google.com youtube.com *.youtube.com youtube-nocookie.com *.youtube-nocookie.com vimeo.com *.vimeo.com kununu.com *.kununu.com hug-familie.ch *.hug-familie.ch indeed.com *.indeed.com jobcloud.ai *.jobcloud.ai amazonaws.com *.amazonaws.com adform.net *.adform.net; object-src 'none'; report-to uriports; 1
script-src 'nonce-NlkgiwQQ7MQa/P5Ex5nW/URc6EqULz/Z' 'unsafe-eval' 'strict-dynamic' 'unsafe-inline' 'self' https: http:; report-uri /.netlify/functions/__csp-violations 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.fontawesome.com https://fonts.bunny.net *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.doubleclick.net *.yotpo.com *.hotjar.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.stripe.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud https://seo.mageplaza.com *.twitter.com *.doubleclick.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.stripe.com *.stripe.network *.link.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.twitter.com *.doubleclick.net *.google.co.uk *.livechatinc.com/ *.hotjar.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.stripe.com ebizmarts-website.s3.amazonaws.com brippo.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud https://firebasestorage.googleapis.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.co.uk *.google.com google.com *.doubleclick.net *.facebook.com *.pinterest.com *.afterpay.com *.placeholder.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.stripe.com *.link.com *.chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.avada.io *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.googletagmanager.com *.doubleclick.net *.pinimg.com *.facebook.net *.livechatinc.com *.pinterest.com *.afterpay.com *.clearpay.co.uk *.hotjar.com 'self' chimpstatic.com *.hiss3lark.com *.bing.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.fontawesome.com https://fonts.bunny.net *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.doubleclick.net *.bing.com maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.stripe.com *.stripe.network *.link.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud https://get.geojs.io *.avada.io *.cloudflare.com *.twitter.com *.twimg.com *.doubleclick.net *.google-analytics.com *.googleapis.com *.bing.com *.facebook.com *.pinterest.com/ *.hotjar.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'self' 'unsafe-inline'; report-uri https://41ed9086-98ad-4ccd-b9f3-a1234acd25c2.sansec.watch/; report-to report-endpoint; 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-GP24DRVWL/A+rHVPJFC+W03vvkM=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-dOWTN83MP5kfoSVJ_9aV2g' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://fonts.gstatic.com data: *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://seo.mageplaza.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com www.apptrian.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.pixriot.com *.storeimaging.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com *.avada.io *.shopify.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net *.googleapis.com *.addtoany.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com www.apptrian.com https://get.geojs.io *.avada.io http://dpm.demdex.net *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.pixriot.com *.storeimaging.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; base-uri 'self'; report-uri https://zenpark.com/csp-violation-report-endpoint 1
default-src 'self' https:; font-src 'self' https: data: https://fonts.googleapis.com; img-src 'self' https: data:; object-src 'none'; script-src 'self' https: https://d2wy8f7a9ursnm.cloudfront.net https://cdnjs.cloudfront.com https://cdn.pendo.io 'nonce-6Zfr3+/cnnPjtmkkOe3FFA=='; style-src 'self' https: https://fonts.googlconsole.com 'nonce-6Zfr3+/cnnPjtmkkOe3FFA==' 1
default-src 'none'; script-src https: 'unsafe-inline' 'unsafe-eval'; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com; media-src https:; style-src 'self' https://fonts.googleapis.com 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob: 'self'; img-src https:; connect-src 'self' https://maps.googleapis.com https://www.google-analytics.com; frame-src 'self' https: 1
worker-src blob: *.pinterest.com *.facebook.com *.google.com *.google.com.hk *.bing.com *.stripe.com; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.kxcdn.com *.pinterest.com *.fontawesome.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.stripe.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.addthis.com *.googleapis.com *.bing.com *.googleadservices.com *.google-analytics.com *.pinterest.com *.googletagmanager.com *.webgains.io *.doubleclick.net *.stripe.com *.cookiebot.com www.awin1.com *.facebook.com *.twitter.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.fbcdn.net *.pinterest.com *.adobedtm.com www.google.co.uk www.awin1.com blob: *.stripe.com *.facebook.com *.google.com.hk *.bing.com cdn.trustpilot.net *.cookiebot.com *.shareasale.com *.sc-static.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.addthisedge.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com *.gstatic.com cdn.ampproject.org connect.facebook.net *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com *.ads-twitter.com *.bing.com *.pinimg.com *.googleadservices.com *.google-analytics.com *.pinterest.com *.googletagmanager.com *.webgains.io *.facebook.com td.doubleclick.net *.stripe.com *.cookiebot.com *.adobedtm.com *.snapchat.com *.sc-static.net www.dwin1.com www.google.co.uk www.awin1.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com s7.addthis.com *.facebook.net *.twitter.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.trustpilot.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com *.pinterest.com downloads.mailchimp.com *.fontawesome.com *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com *.pinterest.com *.facebook.com *.google.com.hk *.bing.com *.stripe.com *.cookiebot.com *.doubleclick.net *.snapchat.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com ekr.zdassets.com/ klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self'; font-src data: https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud; script-src 'self' https://*.bazaarvoice.com https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://exc.mm.dm.si https://mpsnare.iesnare.com https://omt.dm.si https://tags.tiqcdn.com https://web.cmp.usercentrics.eu https://www.dm.si https://www.google.com https://www.google.com/recaptcha/ https://www.gstatic.com https://www.gstatic.com/recaptcha/; worker-src 'self' blob:; connect-src 'self' https://*.bazaarvoice.com https://aggregator.service.usercentrics.eu https://api.mapbox.com https://api.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://browser-intake-datadoghq.eu https://cart-recos.services.dmtech.com https://cdcs.usercentrics.eu https://collect.tealiumiq.com https://consent-api.service.consent.usercentrics.eu https://consent-rt-ret.service.consent.usercentrics.eu https://consents.usercentrics.eu https://content-preview.apps.prod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://direct-collect.dy-api.eu https://direct.dy-api.eu https://dmpay-gateway.services.dmtech.com https://dy-api.eu https://editorial-content.dm-static.com https://events.mapbox.com https://exc.mm.dm.si https://frontend-tracking-infra-service.services.dmtech.com https://graphql.usercentrics.eu https://insights.algolia.io https://logs.browser-intake-datadoghq.eu https://maut-prod.services.dmtech.com https://maut-rls.nonprod.services.dmtech.com https://mpsnare.iesnare.com https://my-products-api.services.dmtech.com https://omacs.services.dmtech.com https://omc.dm.si https://predictive-shopping-service.services.dmtech.com https://product-based-recos.services.dmtech.com https://product-search.services.dmtech.com https://product-semantic-search.services.dmtech.com https://rcom-eu.dynamicyield.com https://recos-as-a-service.services.dmtech.com https://region1.google-analytics.com https://retail-media.services.dmtech.com https://rum.browser-intake-datadoghq.eu https://s2s.adjust.com https://signin.dm.si https://sos-prod.availability.services.dmtech.com https://staedtetour.dm-fb2.de https://stars.services.dmtech.com https://storage.googleapis.com/gift-card-builder-emergency-disabled-bucket/ https://store-data-service.services.dmtech.com https://store-order-service.services.dmtech.com https://v1.api.service.cmp.usercentrics.eu https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://zoe-shop-proxy-prod.services.dmtech.com https://kuba-prod.services.dmtech.com https://zoe-shop-proxy-prod.services.dmtech.com https://cartnext.services.dmtech.com https://dmcsm-proxy.prod.services.dmtech.com https://zoe-shop-proxy-prod.services.dmtech.com https://customer-helpcenter-prod.services.dmtech.com https://paint-prod.services.dmtech.com https://content.services.dmtech.com https://content-search-service-preview.apps.prod.gcp.dmtech.cloud https://content-search-service.services.dmtech.com https://products.dm.de https://pds-import-prod.apps.prod.gcp.dmtech.cloud https://shopping-list-prod.services.dmtech.com; media-src 'self'; style-src 'self' 'unsafe-inline' https://*.bazaarvoice.com https://api.tiles.mapbox.com https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud; form-action 'self' https://*.bazaarvoice.com https://apps.bazaarvoice.com https://checkout.dm.si https://giftcard-checkout.dm.de/api/checkout https://signin.dm.si; img-src 'self' blob: data: https://*.bazaarvoice.com https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://cdn-eu.dynamicyield.com https://composer.apps.nonprod.cf.dmtech.cloud https://content-preview.apps.prod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://editorial-content.dm-static.com https://exc.mm.dm.si https://i.ytimg.com https://images.podigee-cdn.net https://img.usercentrics.eu https://img.youtube.com/ https://media.dm-static.com https://photos-eu.bazaarvoice.com https://products.dm-static.com https://uct.service.usercentrics.eu https://content.services.dmtech.com; frame-ancestors 'self' https://account.dm.si https://app.datadoghq.eu https://checkout.dm.si https://content-preview.apps.prod.gcp.dmtech.cloud https://mobileapp.dm.si https://studio.dm-drogeriemarkt.com; frame-src 'self' https://*.bazaarvoice.com https://account.dm.si https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://cdn.podigee.com https://checkout.dm.si https://configurator.nuk.de https://gastfamilie.podigee.io https://geburtskanal-dm.podigee.io https://hey-familie.podigee.io https://kinderwunschsprechstunde.podigee.io https://mobileapp.dm.si https://player.podigee-cdn.net https://recaptcha.google.com/recaptcha/ https://sandbox.om.dm.si https://signin.dm.si https://web.cmp.usercentrics.eu https://www.google.com https://www.google.com/recaptcha/ https://www.youtube-nocookie.com; base-uri 'self' https://exc.mm.dm.si; child-src 'self' blob:; manifest-src 'self'; report-to csp-endpoint; report-uri /__csp-reports__ 1
object-src 'none';base-uri 'self';script-src 'nonce-6s14ZFNK_6jS1JmApb0qqQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com fortcdn.com *.meshulam.co.il *.googleapis.com *.bootstrapcdn.com *.maxcdn.com https://fonts.gstatic.com/ https://fonts.bunny.net data: 'self'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.facebook.com *.facebook.net *.yotpo.com 'self'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.pelecard.biz *.queue-it.net *.facebook.com *.facebook.net *.vimeo.com *.doubleclick.net *.hotjar.com fortcdn.com *.yotpo.com *.xtento.com *.googletagmanager.com *.tranzila.com *.creditguard.co.il *.opticanaup.betanetqa.me *.weltpixel.com meshulam.co.il *.meshulam.co.il paybox.grow.security *.grow.security buyme.co.il calmark.co.il *.outbrain.com *.glassix.com https://maps.google.com/ *.wesupply.xyz https://wesupplylabs.com guarantee-cdn.com 'self'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.magentocommerce.com *.entrust.net *.google.com *.google.com.vn *.doubleclick.net *.cloudfront.net *.googleapis.com *.facebook.com *.facebook.net *.mltp.co.il *.ftlv5-1.fna.fbcdn.net *.outbrain.com *.taboola.com *.barilliance.com fortcdn.com *.google.co.il *.paypalobjects.com *.adscale.com *.googleadservices.com *.googletagmanager.com *.zoomengage.com *.intentiq.com *.amazonaws.com *.meshulam.co.il *.opticana.co.il *.cdninstagram.com *.data-dynamic.net *.xtento.com *.web-view.net *.google.com.sg *.cloudflareinsights.com *.maxcdn.com *.fbcdn.net *.jsdelivr.net https://firebasestorage.googleapis.com guarantee-cdn.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms data: 'self'; script-src  analytics.google.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com *.vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net pay.google.com/gp/p/js/pay.js *.cdn-apple.com *.braintreegateway.com www.apptrian.com facebook.com connect.facebook.net *.tranzila.com *.authorize.net *.entrust.net *.trackedweb.net *.adyen.com *.queue-it.net *.cardinalcommerce.com *.ccdc02.com *.signifyd.com *.nowdialogue.com *.xtento.com *.facebook.net *.nagich.co.il *.rawgit.com *.barilliance.com *.barilliance.net d5nhc6q3o19l2.cloudfront.net *.taboola.com *.hotjar.com *.outbrain.com *.tiktok.com *.zoomanalytics.co *.fortcdn.com fortcdn.com *.crwdcntrl.net tags.crwdcntrl.net bcp.crwdcntrl.net *.zoomengage.com *.wesell.co.il *.meshulam.co.il *.fontawesome.com *.analytics.com *.paypal.com *.paypalobjects.com *.glassix.com *.web-view.net *.jquery.com *.cloudflareinsights.com *.humanz.com *.pangle-ads.com cdnjs.cloudflare.com/ajax/libs/vimeo-player/2.13.0/ *.avada.io tagmanager.google.com *.redditstatic.com *.reddit.com unpkg.com *.creditguard.co.il paybox.grow.security *.grow.security meshulam.co.il guarantee-cdn.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com www.googletagmanager.com/gtm.js www.googletagmanager.com/gtag/js www.googletagmanager.com/gtag/destination www.google-analytics.com/analytics.js googleads.g.doubleclick.net/pagead/viewthroughconversion/ www.youtube.com/iframe_api www.youtube.com/s/player/ js-agent.newrelic.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.googleapis.com *.nowdialogue.com fortcdn.com *.bootstrapcdn.com *.adscale.com *.amazonaws.com *.meshulam.co.il *.nagich.co.il *.web-view.net *.maxcdn.com https://fonts.googleapis.com https://fonts.bunny.net *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'none'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.amazonaws.com 'self'; manifest-src 'self'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.entrust.net *.trackedweb.net *.nowdialogue.com nowdialogue.com *.nagich.co.il *.doubleclick.net *.vimeo.com *.taboola.com *.hotjar.com *.outbrain.com *.tiktok.com *.zoomanalytics.co *.fortvision.com *.amazonaws.com *.crwdcntrl.net fortcdn.com tags.crwdcntrl.net bcp.crwdcntrl.net luxdeepblue.github.io vmcore.luxottica.com https://get.geojs.io *.barilliance.com *.barilliance.net *.zoomengage.com *.intentiq.com *.meshulam.co.il paybox.grow.security *.grow.security *.googleapis.com *.glassix.com *.analytics.com *.facebook.com *.facebook.net *.cloudflareinsights.com *.pangle-ads.com *.avada.io *.redditstatic.com *.reddit.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.run.app *.instagram.com 'self'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self'; base-uri 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://core.sanity-cdn.com https://geo.cookie-script.com https://cdn.cookie-script.com https://www.googletagmanager.com https://www.google-analytics.com https://cdn.us.posthog.com https://us-assets.i.posthog.com https://snap.licdn.com https://connect.facebook.net https://www.googleadservices.com https://www.gstatic.com https://www.youtube.com https://open.spotify.com https://embed-cdn.spotifycdn.com https://embed.lu.ma https://static.cloudflareinsights.com https://challenges.cloudflare.com https://assets.customer.io https://vercel.live https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.typekit.net https://p.typekit.net https://cdn.jsdelivr.net; img-src 'self' data: https://cdn.sanity.io https://img.youtube.com https://sessionize.com https://img.fullcontact.com https://www.google.com https://www.google.co.uk https://www.google-analytics.com https://www.googletagmanager.com https://track.customer.io https://px.ads.linkedin.com; font-src 'self' https://fonts.gstatic.com https://use.typekit.net https://p.typekit.net; media-src 'self' https://cdn.sanity.io https://player.vimeo.com https://download-video-ak.vimeocdn.com; connect-src 'self' https://core.sanity-cdn.com https://ojuglg5y.api.sanity.io https://cdn.sanity.io https://geo.cookie-script.com https://consent.cookie-script.com https://us.i.posthog.com https://app.posthog.com https://o4510340697882624.ingest.us.sentry.io https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://www.google.com https://www.googleadservices.com https://ad.doubleclick.net https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://px.ads.linkedin.com https://cloudflareinsights.com https://track.customer.io; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://embed.podcasts.apple.com https://open.spotify.com https://player.vimeo.com https://lu.ma https://luma.com https://challenges.cloudflare.com https://vercel.live; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 1
font-src *.googleapis.com *.gstatic.com data: *.cloudinary.com https://staticw2.yotpo.com https://fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com cloudinary.com *.cloudinary.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com cloudinary.com *.cloudinary.com cdnjs.cloudflare.com *.dotdigital-pages.com *.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.hotjar.com *.google.com *.vimeo.com *.livechatinc.com https://cloudinary.com shell.davidsonsinc.com https://www.youtube.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com cloudinary.com *.cloudinary.com *.trackedlink.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.cloudfront.net *.cloudflare.com https://p.yotpo.com https://cdn-yotpo-images-production.yotpo.com *.facebook.com *.pinterest.com *.google.com https://bat.bing.com https://cdn.livechat-files.com https://online.flippingbook.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ cloudinary.com *.cloudinary.com cdnjs.cloudflare.com *.vimeo.com unpkg.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://chimpstatic.com https://assets.pinterest.com https://ct.pinterest.com https://staticw2.yotpo.com https://static.hotjar.com https://connect.facebook.net https://static-tracking.klaviyo.com https://js-agent.newrelic.com https://bam.nr-data.net https://bam-cell.nr-data.net https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://s.pinimg.com https://bat.bing.com https://r2-t.trackedlink.net https://script.hotjar.com https://cdn.livechatinc.com https://api.livechatinc.com https://davcc.disqus.com https://vc.hotjar.io/ https://in.hotjar.com https://online.flippingbook.com https://d33i2vgywgme2s.cloudfront.net *.hsforms.net *.hsforms.com *.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cloudinary.com *.cloudinary.com *.googleapis.com unpkg.com unsafe-inline assets.braintreegateway.com https://staticw2.yotpo.com https://static.klaviyo.com https://fonts.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com cloudinary.com *.cloudinary.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com cloudinary.com *.cloudinary.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://staticw2.yotpo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://telemetrics.klaviyo.com https://bam.nr-data.net https://bam-cell.nr-data.net https://stats.g.doubleclick.net https://ct.pinterest.com https://api.livechatinc.com *.hotjar.com *.hotjar.io *.google-analytics.com https://fbo-b.flippingbook.com/ t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.davidsonsinc.com; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.stape.io *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.stape.io c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com *.trackedlink.net *.ddlnk.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com *.stape.io https://firebasestorage.googleapis.com flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.stape.io *.avada.io *.shopify.com https://code.iconify.design maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://www.rookebooks.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com webchat.dotdigital.com webchat.staging.dotdigital.com downloads.mailchimp.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com *.googleapis.com *.googletagmanager.com *.stape.io *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog *.stape.io https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'nonce-VrQfuCYIq3ouhBSfzGcSGg==' https://www.google.com https://kit.fontawesome.com https://ka-p.fontawesome.com https://mpsnare.iesnare.com https://widget.trustpilot.com https://kit-pro.fontawesome.com https://www.googletagmanager.com https://bat.bing.com https://www.dwin1.com https://www.googleadservices.com https://www.google-analytics.com https://region1.google-analytics.com https://region2.google-analytics.com https://region3.google-analytics.com https://analytics.google.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://region1.analytics.google.com https://region2.analytics.google.com https://region3.analytics.google.com https://www.paypal.com https://www.paypalobjects.com https://www.sandbox.paypal.com https://b.sbox.stats.paypal.com https://sdk.privacy-center.org https://api.privacy-center.org https://sibautomation.com https://in-automate.brevo.com https://pagead2.googlesyndication.com https://widget.botmind.io https://api.widget.botmind.ai https://matomo.123roulement.com https://matomojs.trackify.info https://checkoutshopper-live.adyen.com https://checkoutshopper-live.cdn.adyen.com https://checkoutanalytics-live.adyen.com https://applepay.cdn-apple.com https://x.klarnacdn.net https://pay.google.com https://insights.algolia.io https://cdn.jsdelivr.net https://cdn.jsdelivr.net/npm/search-insights https://tag.123kogellager.nl https://tag.123cuscinetti.it https://tag.123rodamiento.es https://tag.123bearing.ca https://tag.123bearing.co.uk https://tag.123bearing.ie https://tag.123roulement.ch https://tag.123cuscinetti.ch https://tag.123kugellager.ch https://tag.123kogellager.be https://tag.123kugellager.at https://tag.123lozysko.pl https://tag.123rodamiento.mx https://tag.123roulement.be https://tag.123roulement.ca https://apis.google.com https://www.gstatic.com; connect-src 'self' https://*.algolia.net https://*.algolianet.com https://insights.algolia.io https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://region2.google-analytics.com https://region3.google-analytics.com https://region1.analytics.google.com https://region2.analytics.google.com https://region3.analytics.google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com https://pay.google.com https://checkoutshopper-live.adyen.com https://checkoutshopper-live.cdn.adyen.com https://checkoutanalytics-live.adyen.com https://www.paypal.com https://www.sandbox.paypal.com https://b.sbox.stats.paypal.com https://sdk.privacy-center.org https://api.privacy-center.org https://sibautomation.com https://in-automate.brevo.com https://widget.botmind.io https://api.widget.botmind.ai https://matomo.123roulement.com https://matomojs.trackify.info https://widget.trustpilot.com https://kit.fontawesome.com https://ka-p.fontawesome.com https://kit-pro.fontawesome.com https://bat.bing.com https://www.dwin1.com https://mpsnare.iesnare.com https://tag.123kogellager.nl https://tag.123cuscinetti.it https://tag.123rodamiento.es https://tag.123bearing.ca https://tag.123bearing.co.uk https://tag.123bearing.ie https://tag.123roulement.ch https://tag.123cuscinetti.ch https://tag.123kugellager.ch https://tag.123kogellager.be https://tag.123kugellager.at https://tag.123lozysko.pl https://tag.123rodamiento.mx https://tag.123roulement.be https://tag.123roulement.ca; default-src 'self'; img-src 'self' data: https://cdn.123roulement.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://bat.bing.com https://www.dwin1.com https://matomo.123roulement.com https://matomojs.trackify.info https://widget.trustpilot.com https://www.gstatic.com https://apis.google.com https://checkoutshopper-live.adyen.com https://checkoutshopper-live.cdn.adyen.com https://www.paypalobjects.com https://x.klarnacdn.net https://applepay.cdn-apple.com https://pay.google.com; style-src 'self' 'unsafe-inline' https://widget.trustpilot.com https://sdk.privacy-center.org https://widget.botmind.io https://www.gstatic.com; font-src 'self' data:; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://www.google.com https://checkoutshopper-live.adyen.com https://checkoutshopper-live.cdn.adyen.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://x.klarnacdn.net https://sdk.privacy-center.org https://api.privacy-center.org https://widget.botmind.io https://widget.trustpilot.com https://apis.google.com https://www.gstatic.com; media-src 'self'; form-action 'self' https://checkoutshopper-live.adyen.com https://checkoutshopper-live.cdn.adyen.com https://www.paypal.com https://www.sandbox.paypal.com; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests; report-uri /_csp-report; report-to csp-endpoint 1
font-src *.fontawesome.com edwineurope.app.baqend.com *.googleapis.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.adyen.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com *.adyen.com pay.google.com *.weltpixel.com consentcdn.cookiebot.com ct.pinterest.com www.googletagmanager.com td.doubleclick.net www.xtento.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.adyen.com bat.bing.com ct.pinterest.com www.google.co.ma cdn.edwin-europe.com www.google.de imgsct.cookiebot.com www.xtento.com cdn.xtento.com *.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com checkoutshopper-test.adyen.com edwineurope.app.baqend.com consent.cookiebot.com bat.bing.com cdn.scarabresearch.com script.hotjar.com static.hotjar.com s.pinimg.com a.opumo.net consentcdn.cookiebot.com ct.pinterest.com analytics.tiktok.com www.xtento.com cdn.xtento.com https://www.googletagmanager.com tagmanager.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com s7.addthis.com *.fontawesome.com *.googleapis.com *.gstatic.com *.avada.io secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.hsforms.net *.hsforms.com *.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com blob: tagmanager.google.com d.ratepay.com d.payla.io dr.payla.io *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.youtube.com mcprod.edwin-europe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adyen.com pay.google.com google.com www.google.com https://*.nlservice.edwin-europe.com:8443/subscribe edwineurope.app.baqend.com ipapi.co a.opumo.net ct.pinterest.com consentcdn.cookiebot.com stats.g.doubleclick.net region1.google-analytics.com region1.analytics.google.com recommender.scarabresearch.com https://www.google-analytics.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com ekr.zdassets.com/ https://get.geojs.io *.avada.io payments.amazon.de d.ratepay.com jsctool.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.kz https://informer.yandex.ru https://static.cloudflareinsights.com https://connect.facebook.net https://www.instagram.com https://cdn.onesignal.com https://epay.homebank.kz https://test-epay.homebank.kz; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://mc.yandex.kz https://mc.yandex.md https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://analytics.google.com https://region1.analytics.google.com https://www.google.com https://static.cloudflareinsights.com https://connect.facebook.net https://cdn.onesignal.com https://epay.homebank.kz https://test-epay.homebank.kz; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://mc.yandex.ru https://www.googletagmanager.com https://www.instagram.com https://www.facebook.com https://epay.homebank.kz https://test-epay.homebank.kz; object-src 'none'; base-uri 'self'; form-action 'self' https://epay.homebank.kz https://test-epay.homebank.kz; report-uri /api/csp-reports 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.fontawesome.com *.accesstrade.in *.accesstrade.in.th https://static.klaviyo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.accesstrade.in *.accesstrade.in.th https://*.2c2p.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com www.google.com *.accesstrade.in *.accesstrade.in.th *.weltpixel.com https://vars.hotjar.com https://bid.g.doubleclick.net *.facebook.com *.doubleclick.net ppgroup-ecom-cf64a44014af72017690455.freshchat.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.accesstrade.in *.accesstrade.in.th https://i.ibb.co https://googleads.g.doubleclick.net https://www.google.com https://www.google.co.th https://www.facebook.com https://www.google.com.vn *.cloudfront.net *.gstatic.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com *.cdninstagram.com *.fbcdn.net maps.googleapis.com *.amazonaws.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.accesstrade.in *.accesstrade.in.th https://js-agent.newrelic.com https://bam.nr-data.net https://connect.facebook.net *.hotjar.com https://www.google.com https://www.google.com.vn https://www.google.co.th https://googleads.g.doubleclick.net *.clarity.ms *.cardinalcommerce.com *.adobetm.com https://www.googleadservices.com ppgroup-ecom-cf64a44014af72017690455.freshchat.com fw-cdn.com ajax.googleapis.com *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com https://www.googletagmanager.com tagmanager.google.com *.instagram.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com *.accesstrade.in *.accesstrade.in.th https://www.googletagmanager.com ppgroup-ecom-cf64a44014af72017690455.freshchat.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.accesstrade.in *.accesstrade.in.th *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.accesstrade.in *.accesstrade.in.th https://stats.g.doubleclick.net https://bam.nr-data.net https://in.hotjar.com https://www.facebook.com *.clarity.ms *.ap.stape.info ap.stape.info analytics.pangle-ads.com analytics-ipv6.tiktokw.us *.hotjar.io *.google.com *.google.co.th *.google.com.vn *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com https://www.google-analytics.com *.instagram.com *.googleusercontent.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ landofcoder.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.google.com *.gstatic.com hooks.stripe.com *.braintreegateway.com *.kaptcha.com *.analytics.google.com *.googletagmanager.com https://js.stripe.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com www.facebook.com bat.bing.com cdn.jsdelivr.net *.google.com *.google.de *.bitpay.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ landofcoder.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com static.cloudflareinsights.com bat.bing.com connect.facebook.net google.co.in  widget.trustpilot.com *.google.com *.gstatic.com *.analytics.google.com *.googletagmanager.com https://js.stripe.com/v3/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.bootstrapcdn.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com landofcoder.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com www.facebook.com *.google-analytics.com *.doubleclick.net *.analytics.google.com *.googletagmanager.com *.youtube.com *.youtu.be 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self'  https://cdn.suitableshop.net/ https://bat.bing.com https://d5yoctgpv4cpx.cloudfront.net https://tggng.suitableshop.nl/ 'unsafe-inline' ; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com self cdn.icomoon.io *.tawk.to static.klaviyo.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com self *.tjomahony.ie www.facebook.com https://seo.mageplaza.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com *.braintreegateway.com *.paypal.com google.com *.google.com self *.cookiebot.com www.facebook.com *.bugherd.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.google.com/ *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.paypal.com *.typekit.net *.gstatic.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com self tjomahony.ie *.tjomahony.ie maps.googleapis.com google.com imgsct.cookiebot.com www.facebook.com *.documentforce.com *.cloudfront.net *.bugherd.com *.s3.amazonaws.com embed.tawk.to hummuk.file.force.com *.chimpstatic.com px.ads.linkedin.com bat.bing.com mageside.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com https://firebasestorage.googleapis.com *.mageside.com https://www.magezon.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com self *.tjomahony.ie tjomahony.test *.cookiebot.com *.bugherd.com *.pusher.com *.tawk.to *.googleapis.com *.cloudfront.net cdn.jsdelivr.net *.chimpstatic.com snap.licdn.com bat.bing.com analytics.tiktok.com connect.facebook.net static.hotjar.com u.heatmap.it script.hotjar.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.avada.io *.shopify.com *.google.com/ *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com self *.tjomahony.ie tjomahony.test cdn.icomoon.io *.typekit.net *.tawk.to https://static.klaviyo.com *.googleapis.com *.googletagmanager.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com self *.tjomahony.ie maps.googleapis.com www.google.co.uk *.tawk.to wss://*.tawk.to *.cookiebot.com wss://ws-mt1.pusher.com *.bugsnag.com *.bugherd.com widget.trustpilot.com px.ads.linkedin.com bat.bing.com bat.bing.net analytics.tiktok.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google-analytics.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog https://get.geojs.io *.avada.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src self cdn.icomoon.io *.tjomahony.ie tjomahony.test *.tawk.to 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; connect-src 'self' https://sentry.blc.am https://ecosapi.link https://api.blockchain.info https://api.coingecko.com https://www.googletagmanager.com https://accounts.google.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://google.com https://www.google.com https://adservice.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://ad.doubleclick.net https://*.fls.doubleclick.net https://ade.googlesyndication.com https://pagead2.googlesyndication.com https://cct.google https://mc.yandex.ru https://mc.yandex.com https://adstat.yandex.ru https://api.carrotquest.app https://api1.carrotquest.app https://api.carrottrack.app https://api1.carrottrack.app https://stats-web-collector.carrotquest.io wss://*.carrotquest.app wss://mc.yandex.ru wss://mc.yandex.com https://cp.ecos.am; font-src 'self' data: https://fonts.gstatic.com https://cdn.carrotquest.app https://files.carrotquest.app; form-action 'self'; frame-ancestors 'self'; frame-src 'self' https://www.googletagmanager.com https://accounts.google.com https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://www.google.ru https://ad.doubleclick.net https://*.fls.doubleclick.net https://mc.yandex.ru https://mc.yandex.com; img-src 'self' data: blob: https://ecosapi.link https://files.ecos.am https://s3.ecos.am https://s3.eu-central-1.amazonaws.com https://assets.coingecko.com https://i.ytimg.com https://www.googletagmanager.com https://accounts.google.com https://*.google-analytics.com https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://pagead2.googlesyndication.com https://mc.yandex.ru https://mc.yandex.com https://cdn.carrotquest.app https://files.carrotquest.app; manifest-src 'self'; media-src 'self' blob: https://s3.ecos.am https://files.carrotquest.app; object-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample' https://www.googletagmanager.com https://accounts.google.com https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://cdn.carrotquest.app https://mc.yandex.ru; script-src-attr 'none'; style-src 'self' 'unsafe-inline' 'report-sample' https://fonts.googleapis.com https://accounts.google.com https://cdn.carrotquest.app; style-src-attr 'unsafe-inline'; worker-src 'self' blob:; report-uri /api/csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://cdn.riverty.design/ data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com uc8.tv *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com uc8.tv https://documents.riverty.com/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.zenaps.com *.fls.doubleclick.net secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://cdn.myafterpay.com/ uc8.tv https://cdn.riverty.design/ d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.awin1.com *.zenaps.com *.wepowerconnections.com https://images.unsplash.com https://eprel.ec.europa.eu cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com uc8.tv https://cdn.myafterpay.com/ https://cdn.bnpl.riverty.io/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com https://maps.googleapis.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tweakwise.com *.tweakwisenavigator.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com d.ratepay.com d.payla.io dr.payla.io 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com uc8.tv https://cdn.myafterpay.com/ https://documents.myafterpay.com/ https://documents.riverty.com/ https://www.afterpay.nl/ https://cdn.bnpl.riverty.io/ https://trace-api.newrelic.com/ https://distributions.crowdin.net/ https://api.crowdin.com/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.wepowerconnections.com https://the.sciencebehindecommerce.com https://maps.googleapis.com https://player.vimeo.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tweakwise.com *.tweakwisenavigator.net 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com *.thron.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.iubenda.com *.thron.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io maps.gstatic.com maps.googleapis.com cdn.rawgit.com/googlemaps/ cdn.jsdelivr.net/gh/googlemaps/ *.iubenda.com *.thron.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ maps.googleapis.com *.iubenda.com *.thron.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.thron.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.thron.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com https://configure-staging.arper.com maps.googleapis.com *.iubenda.com *.thron.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src https://configure-staging.arper.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'none'; connect-src https://stripe.com; default-src 'none'; font-src 'self'; form-action 'none'; frame-ancestors 'none'; img-src 'self' data: https://images.ctfassets.net; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; report-uri https://q.stripe.com/csp-report 1
base-uri 'self'; font-src 'self' data:; form-action 'self'; frame-ancestors 'self'; img-src 'self' data: blob: https://image.hinterland.camp https://api.hinterland.camp https://*.tile.openstreetmap.org https://*.basemaps.cartocdn.com https://tiles.openfreemap.org https://cdn.giftup.app; object-src 'none'; script-src-attr 'none'; style-src 'self' 'unsafe-inline'; script-src 'self' 'strict-dynamic' 'nonce-ySCrkULfM5eFyMQK+3yL+g5K' https://rybbit.hinterland.camp https://plausible.hinterland.camp https://js.stripe.com https://www.googletagmanager.com https://www.recaptcha.net https://www.gstatic.com https://cdn.giftup.app; upgrade-insecure-requests; default-src 'self'; connect-src 'self' https://api.hinterland.camp https://ai.hinterland.camp https://image.hinterland.camp https://support.hinterland.camp https://screenshots.hinterland.camp https://rybbit.hinterland.camp https://plausible.hinterland.camp https://strapi.hinterland.camp https://api.mapbox.com wss://api.hinterland.camp https://tiles.openfreemap.org https://www.recaptcha.net https://www.gstatic.com https://cdn.giftup.app https://inbound.giftup.app; frame-src 'self' https://js.stripe.com https://www.recaptcha.net https://cdn.giftup.app; media-src 'self' https://image.hinterland.camp; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com fonts.axept.io *.userway.org *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.sharethis.com *.certcapture.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.youtube.com *.weltpixel.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.sharethis.com *.certcapture.com *.userway.org www.google.fr *.join-stories.com *.stories.studio lexon-design.com musart.com store-legacy.com *.lexon-design.com *.musart.com *.store-legacy.com *.imgix.net *.clarity.ms *.pinterest.com *.bing.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://meetanshi.com/media/logo.png www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.google.com.ua *.adobedtm.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com https://load.sst.lexon-design.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.sharethis.com *.certcapture.com *.userway.org *.queue-it.net queue.musart.com www.facebook.com js-agent.newrelic.com *.axept.io *.join-stories.com *.stories.studio lexon-design.com musart.com store-legacy.com *.lexon-design.com *.musart.com *.store-legacy.com *.tiktok.com *.clarity.ms *.bing.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://maps.googleapis.com/maps/api/mapsjs https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.youtube.com player.vimeo.com *.googletagmanager.com tagmanager.google.com https://load.sst.lexon-design.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com *.fontawesome.com *.certcapture.com *.userway.org *.axept.io *.stripe.network *.stripecdn.com *.amazon.com https://static.klaviyo.com assets.braintreegateway.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com video-previews.elements.envatousercontent.com *.join-stories.com *.stories.studio blob: lexon-design.com musart.com store-legacy.com *.lexon-design.com *.musart.com *.store-legacy.com *.amazonaws.com *.googleapis.com *.google.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com *.certcapture.com *.userway.org *.axept.io bam.nr-data.net *.join-stories.com *.stories.studio *.bing.com *.tiktok.com *.clarity.ms lexon-design.com musart.com store-legacy.com *.lexon-design.com *.musart.com *.store-legacy.com *.googlesyndication.com *.doubleclick.net *.google.fr *.tiktokw.us *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://maps.googleapis.com/maps/api/mapsjs https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com cdn.plyr.io noembed.com *.googletagmanager.com https://load.sst.lexon-design.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://cuatro.sim-cdn.nl; img-src * data: blob:; style-src * 'unsafe-inline' blob: https://fonts.bunny.net; font-src 'self' data: https://fonts.bunny.net https://fonts.gstatic.com https://cuatro.sim-cdn.nl https://cuatro.sim-cdn-acceptatie.nl https://cuatro.sim-cdn-test.nl; script-src 'nonce-MGI3OTNkYzAtMDA4Zi00ZGNmLWFmY2YtOGI5Zjc3OWQzODA4' 'strict-dynamic' 'report-sample'; connect-src *; form-action 'self'; media-src https://*.readspeaker.com https://*.streamlock.net https://storage.googleapis.com https://scribit-pro-hosting.storage.googleapis.com https://scribit-pro.storage.googleapis.com https://app.talkjs.com 'self' blob:; frame-src *; frame-ancestors 'self' https://*.polly.help; worker-src * 'unsafe-inline' blob:; report-uri /api/csp-report 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com cash-f.squarecdn.com *.fontawesome.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.pinterest.com *.sendcloud.sc *.jsdelivr.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * *.trustedshops.com cdn.cookielaw.org res.cloudinary.com www.b2c-nfinity.com t.squeezely.tech cdn-icons-png.flaticon.com docker.creative-serving.com trkr.shoppingminds.net bam.nr-data.net *.googleapis.com *.etrusted.com *.pinterest.com bat.bing.com *.adyen.com *.facebook.com img.youtube.com a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org cdn.doofinder.com *.google.com *.google.co.uk *.google.ca b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com ts.tradetracker.net *.amazonaws.com blob: www.google.ge magefan.com cm.magefan.com *.disqus.com https://img.youtube.com www.sandbox.paypal.com www.magmodules.eu cdn.magmodules.eu data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page *.trustedshops.com squeezely.tech bat.bing.com *.etrusted.com *.kk-resources.com *.googleoptimize.com cdn.cookielaw.org l.getsitecontrol.com script.shoppingminds.com script.shoppingminds.net js-agent.newrelic.com bam.nr-data.net static.hotjar.com script.hotjar.com s2.getsitecontrol.com *.pinterest.com s.pinimg.com analytics.topdrinks.nl analytics.topdrinks.fr analytics.topdrinks.dk analytics.topdrinks.de analytics.topdrinks.at analytics.topdrinks.be unpkg.com cdn.jsdelivr.net commerce.adobe.net *.googletagmanager.com cdn.doofinder.com analytics.tiktok.com *.google.co.uk *.google.ca s7.addthis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com songbirdstag.cardinalcommerce.com tm.tradetracker.net *.trustpilot.com *.sendcloud.sc *.jsdelivr.net https://connect.facebook.net *.google.fr *.disqus.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com clarity.ms stats.pusher.com sockjs-eu.pusher.com static.widget.trengo.eu 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.cash.app *.etrusted.com *.pinterest.com *.sendcloud.sc *.jsdelivr.net *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.youtube.com youtu.be www.youtube-nocookie.com static.widget.trengo.eu 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com * *.google.lk analytics.topdrinks.nl ws.hotjar.com wss://ws.hotjar.com content.hotjar.io analytics.topdrinks.fr analytics.topdrinks.dk analytics.topdrinks.de analytics.topdrinks.at analytics.topdrinks.be cdn.cookielaw.org geolocation.onetrust.com *.g.doubleclick.net l.getsitecontrol.com *.shoppingminds.net *.googleapis.com bam.nr-data.net cdn1.api.trustedshops.com pay.google.com privacyportal-de.onetrust.com vc.hotjar.io events.getsitectrl.com *.etrusted.com *.pinterest.com *.adyen.com maps.googleapis.com nominatim.openstreetmap.org *.onyourmap.com *.mapbox.com *.doofinder.com wss://*.doofinder.com analytics.tiktok.com ekr.zdassets.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.sendcloud.sc *.cdn.jsdelivr.net https://analytics.tiktok.com *.google.fr *.google.co.uk *.google.ca bat.bing.net bat.bing.com stats.pusher.com sockjs-eu.pusher.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://*.jobrad-loop.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.jobrad-loop.com https://plausible.io https://consent.cookiebot.com https://consentcdn.cookiebot.com https://*.hotjar.com https://*.bing.com https://*.clarity.ms https://connect.facebook.net https://cdn.ablyft.com https://www.googleadservices.com https://www.google.com https://*.googletagmanager.com https://tagmanager.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://*.trustedshops.com https://integrations.etrusted.com https://*.excentos.com https://ratenkauf.easycredit.de https://lantern.roeyecdn.com https://chimpstatic.com https://www.dwin1.com https://form-assets.mailchimp.com https://www.paypal.com https://www.paypalobjects.com https://www.sandbox.paypal.com; connect-src 'self' https://*.jobrad-loop.com https://res.cloudinary.com https://images.cdn.europe-west1.gcp.commercetools.com https://plausible.io https://*.cookiebot.com https://*.trustedshops.com https://*.etrusted.com https://*.trustbadge.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.bing.com https://*.clarity.ms https://connect.facebook.net https://www.google.com https://google.com https://www.google.de https://*.analytics.google.com https://*.google-analytics.com https://*.googletagmanager.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.facebook.com https://cdn.ablyft.com https://www.mollie.com https://appsignal-endpoint.net https://revelo-bravobike.frontastic.live https://revelo-bravobike.frontastic.io https://revelo-bravobike.frontastic.rocks https://*.europe-west1.gcp.4.commercetools.app https://*.europe-west1.gcp.4.sandbox.commercetools.app https://ratenkauf.easycredit.de https://cmodul.solutenetwork.com https://dwin1.com https://awin1.com https://*.excentos.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://eventcollector.mcf-prod.a.intuit.com https://log.ablyft.com https://form-assets.mailchimp.com https://analytics.google.com https://www.paypal.com https://www.paypalobjects.com https://www.sandbox.paypal.com https://ingesteer.services-prod.nsvcs.net; img-src 'self' data: https://res.cloudinary.com https://images.cdn.europe-west1.gcp.commercetools.com https://*.trustedshops.com https://*.etrusted.com https://imgsct.cookiebot.com https://*.hotjar.com https://www.google.com https://google.com https://www.google.de https://*.google-analytics.com https://*.googletagmanager.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://ssl.gstatic.com https://www.gstatic.com https://www.facebook.com https://www.mollie.com https://*.excentos.com https://ratenkauf.easycredit.de https://bat.bing.com https://c.clarity.ms https://region1.analytics.google.com https://stats.g.doubleclick.net https://lantern.roeye.com https://*.jobrad-loop.com https://www.google.nl https://www.google.at https://www.google.hr https://www.google.cz https://www.google.hu https://www.google.be https://www.google.ch https://www.google.si https://www.google.it https://www.google.fi https://analytics.google.com https://www.paypal.com https://www.paypalobjects.com https://www.sandbox.paypal.com; style-src 'self' 'unsafe-inline' https://*.etrusted.com https://*.hotjar.com https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com https://*.excentos.com; font-src 'self' https://*.trustedshops.com https://*.hotjar.com https://fonts.gstatic.com https://*.excentos.com data:; frame-src 'self' https://consentcdn.cookiebot.com https://www.googletagmanager.com https://fwd-mtg.jobrad-loop.com https://www.facebook.com https://ratenkauf.easycredit.de https://*.jobrad-loop.com https://www.paypal.com https://www.sandbox.paypal.com; object-src 'none'; base-uri 'self'; report-uri /.netlify/functions/csp-violation 1
font-src fonts.gstatic.com use.typekit.net *.googleapis.com *.fontawesome.com *.gstatic.com maxcdn.bootstrapcdn.com static.klaviyo.com acsbapp.com cloud.productimize.com v2.zopim.com data: *.yotpo.com unpkg.com netdna.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.authorize.net 'self' *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com globalshopex.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net *.meetanshi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ https://api.boldcommerce.com landofcoder.com *.authorize.net *.meetanshi.com https://accounts.google.com https://amc.demdex.net/ *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.hotjar.com h.online-metrix.net imgs.signifyd.com disqus.com platform.twitter.com www.google.com globalshopex.com email.blauer.com acsbapp.com w3.cdn.anvato.net imgs.cdn-btsg.com td.doubleclick.net/ *.weltpixel.com *.yotpo.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.googleapis.com *.gstatic.com https://static.boldcommerce.com https://static.xx.fbcdn.net *.disqus.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ store.paradoxlabs.com *.meetanshi.com https://meetanshi.com/media/logo.png 'self' data: www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com *.google.com *.googleadservices.com *.googletagmanager.com *.rfksrv.com p.yotpo.com i.imgur.com region1.analytics.google.com *.online-metrix.net v2.zopim.com * *.yotpo.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.google-analytics.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com f.vimeocdn.com www.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-ds.com *.googleapis.com www.gstatic.com https://api.boldcommerce.com https://static.xx.fbcdn.net https://connect.facebook.net cdnjs.cloudflare.com https://cashier.boldcommerce.com/assets/experience/flow_sdk.js *.disqus.com landofcoder.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.authorize.net *.meetanshi.com *.google.com connect.facebook.net graph.facebook.com business.facebook.com *.googletagmanager.com *.googleadservices.com *.tiktok.com *.klaviyo.com *.hotjar.com script.crazyegg.com seal.digicert.com imgs.signifyd.com region1.analytics.google.com fresnel.vimeocdn.com triggeredmail.appspot.com *.rfksrv.com cdn.scarabresearch.com *.cloudfront.net *.crazyegg.com *.bing.com static.zdassets.com v2.zopim.com seal.websecurity.norton.com *.yotpo.com bam.nr-data.net bam-cell.nr-data.net *.disquscdn.com platform.twitter.com acsbapp.com z.moatads.com v1.addthisedge.com widget-mediator.zopim.com *.clarity.ms www.bluecore.com wickedreports.com widget.wickedreports.com globalshopex.com *.getattribution.net measure.getattribution.net *.wickedreports.com track.wickedreports.com snap.licdn.com *.zendesk.com *.smooch.io *.cdn-btsg.com/ imgs.cdn-btsg.com px.ads.linkedin.com *.gstatic.com https://cdn-scripts.signifyd.com https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://static.klaviyo.com https://accounts.google.com/gsi/style https://fonts.googleapis.com/css maxcdn.bootstrapcdn.com *.klaviyo.com netdna.bootstrapcdn.com f.vimeocdn.com c.disquscdn.com/ *.cloudfront.net *.yotpo.com unpkg.com rfk-staticfiles-prod.s3.amazonaws.com *.googletagmanager.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io commerce.adobe.net qa-api.magedevteam.com *.sentry.io *.googleapis.com https://api.boldcommerce.com https://api.staging.boldcommerce.com https://cashier.boldcommerce.com https://graph.facebook.com https://secure.boldcommerce.com https://secure.staging.boldcommerce.com landofcoder.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.authorize.net *.meetanshi.com https://accounts.google.com/gsi/status https://accounts.google.com/gsi/log https://oauth2.googleapis.com/tokeninfo *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net *.clarity.ms *.tiktok.com *.klaviyo.com *.hotjar.com *.hotjar.io wss://*.hotjar.com syndication.twitter.com google.com www.google.com 21vod-adaptive.akamaized.net player-telemetry.vimeo.com fiddler.brontops.com recommender.scarabresearch.com ekr.zdassets.com wss://widget-mediator.zopim.com imgs.signifyd.com bam.nr-data.net *.crazyegg.com *.yotpo.com *.disqus.com *.bing.com region1.analytics.google.com *.doubleclick.net *.paypal.com cdn.acsbapp.com bt.signifyd.com bt.signifyd.com:11103 bam-cell.nr-data.net wickedreports.com widget.wickedreports.com *.getattribution.net measure.getattribution.net *.wickedreports.com track.wickedreports.com *.zendesk.com wss://*.zendesk.com *.smooch.io cdn.linkedin.oribi.io imgs.cdn-btsg.com px.ads.linkedin.com t.elasticsuite.io https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src www.blauer.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' 'unsafe-inline' www.googletagmanager.com; connect-src 'self' stats.g.doubleclick.net www.google-analytics.com www.facebook.com; font-src 'self' fonts.gstatic.com; form-action 'self' *.facebook.com; frame-src 'self' https://mozbar.moz.com *.twitter.com *.facebook.com *.youtube.com; img-src 'self' blob: *.twitter.com *.facebook.com *.google-analytics.com www.googletagmanager.com data:; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'sha256-t7PRulDBsBN40urjjgytSFhjqGMYT5Kl3fdRE2ubvSE='  'sha256-vL/UzBZz8IbbPTmdNOgTwTx9iMwsGVM+gcN65JsVkDs=' 'sha256-S0XUzHZoDoB9/hx7r05o2BA44KqBY0GRS7uUeOn7m6w=' 'sha256-HKRD3wb0LE1gQr+YGmAPtJeS7e6cc/VmvLqzykg7RC4=' 'sha256-uFV0NPG/pWXptUbx5XcwBHbhPGDxz/9Y++GGxxJ9COg=' 'sha256-Hx522ue/2keAMYU+UzkDxVexE9HoQ154EbuSno7RyXo=' 'sha256-2NqnatcPqy5jjBXalTpZyJMO/0fUaYUb3ePlviUP4II=' 'sha256-3HKyJTHCclaNd/c73eY3lARVMZ5HhgL//Z4Y9iyZwS0=' 'sha256-tz5dYCqMXXIUZgYND7s9k+WMYO0xLf1k1ao2qJ4SfIg=' 'sha256-LPfty6rGPdwB3t78TnFfkcK5f0bAtVn45Lio4LNK3NI=' 'sha256-UTCVm60QfQFHVOpQI3OLoctvejHNx0+HULCqezCINhY=' 'sha256-UITiqbXyaWS7NpwiFrMIbdXAZy5EXLRUHkpylF4504k=' 'sha256-Vqqy1EC4o2NeucB3SDVgIye7XvqKdlrCBRF2Y8vEbQo=' 'sha256-KjPEOuxv7NuVC7z0lYu6dL4wI0jzM3ITmXypoty3jSw=' 'sha256-VKAaJ2oQNivaQjh0ZN2vS9EPAmX80LShK/wQBqviYk4=' 'sha256-LPfty6rGPdwB3t78TnFfkcK5f0bAtVn45Lio4LNK3NI='  'sha256-UTCVm60QfQFHVOpQI3OLoctvejHNx0+HULCqezCINhY=' 'sha256-Xj7O0zUcSSSgumEShX6kqyjYSm510v2xE+EL2bbKW9E=' 'sha256-sSOWNIawm+pckUcq4r55z6eSntM9zhX789Fk1No4c80=' 'sha256-JOWRgjcky15TFNId0Eriikp+RUe5xMIjiBWFj28khRI=' 'sha256-KjPEOuxv7NuVC7z0lYu6dL4wI0jzM3ITmXypoty3jSw=' 'sha256-Hx522ue/2keAMYU+UzkDxVexE9HoQ154EbuSno7RyXo=' 'sha256-Afstol4nLODtvjRLyF6XmhANHJHIQi+roPlGB9DC8Ho=' *.facebook.net *.twitter.com *.norton.com *.google-analytics.com *.googletagmanager.com; style-src-attr 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'sha256-VKAaJ2oQNivaQjh0ZN2vS9EPAmX80LShK/wQBqviYk4=' 'sha256-LPfty6rGPdwB3t78TnFfkcK5f0bAtVn45Lio4LNK3NI=' 'sha256-UTCVm60QfQFHVOpQI3OLoctvejHNx0+HULCqezCINhY=' 'sha256-Xj7O0zUcSSSgumEShX6kqyjYSm510v2xE+EL2bbKW9E=' 'sha256-sSOWNIawm+pckUcq4r55z6eSntM9zhX789Fk1No4c80=' 'sha256-JOWRgjcky15TFNId0Eriikp+RUe5xMIjiBWFj28khRI=' 'sha256-KjPEOuxv7NuVC7z0lYu6dL4wI0jzM3ITmXypoty3jSw=' 'sha256-VKAaJ2oQNivaQjh0ZN2vS9EPAmX80LShK/wQBqviYk4=' 'sha256-LPfty6rGPdwB3t78TnFfkcK5f0bAtVn45Lio4LNK3NI=' 'unsafe-eval'; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com http://fonts.googleapis.com; object-src 'none'; base-uri 'self'; upgrade-insecure-requests; report-uri https://csp.isecurenet.in/_csp_exim 1
font-src *.googleapis.com *.gstatic.com 'self' data: *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com *.zopim.com cdn.checkout.com *.global-e.com *.bglobale.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.twitter.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.twitter.com *.google.com *.trustpilot.com *.checkout.com *.bglobale.com *.global-e.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.google.com *.google.co.uk *.zopim.com *.doubleclick.net d23yuld0pofhhw.cloudfront.net *.googletagmanager.com *.global-e.com *.newrelic.com *.bglobale.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.google.com *.googletagmanager.com *.googlecommerce.com *.doubleclick.net *.trustpilot.com *.zopim.com *.zdassets.com *.payments-amazon.com *.amazon.com *.local.com maps.googleapis.com *.checkout.com *.paypal.com *.bglobale.com *.global-e.com https://cdnjs.cloudflare.com cdnjs.cloudflare.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.googletagmanager.com tagmanager.google.com *.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.fontawesome.com *.checkout.com *.bglobale.com *.global-e.com https://cdnjs.cloudflare.com cdnjs.cloudflare.com https://static.klaviyo.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.zdassets.com *.zopim.com *.amazon.com 'self' wss: *.checkout.com *.google-analytics.com *.doubleclick.net *.paypalobjects.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.facebook.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' *.googletagmanager.com *.google-analytics.com *.google.com *.gstatic.com connect.facebook.net *.paypal.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.gstatic.com data:; img-src 'self' data: *.google-analytics.com *.facebook.com *.paypal.com; frame-src *.youtube.com *.google.com *.paypal.com; connect-src 'self' *.google-analytics.com *.analytics.google.com *.facebook.com; base-uri 'self'; form-action 'self' *.paypal.com; object-src 'none' 1
font-src *.gstatic.com data: *.stamped.io maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.worldpay.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com assets.braintreegateway.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.com *.google.com.ua *.google.co.uk *.meetanshi.com www.youtube.com *.livechatinc.com *.paypal.com pay.google.com *.braintreegateway.com *.kaptcha.com www.paypalobjects.com *.affirm.com www.facebook.com *.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.google.com *.google.com.ua *.google.co.uk *.gstatic.com *.doubleclick.net *.meetanshi.com maps.googleapis.com maps.gstatic.com www.facebook.com www.gstatic.com *.cloudfront.net www.google.pl *.stamped.io *.paypal.com *.amazonaws.com *.userway.org verify.authorize.net scontent.cdninstagram.com *.affirm.com *.routeapp.io *.bing.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com f.vimeocdn.com www.vimeo.com *.vimeocdn.com js.authorize.net jstest.authorize.net js.braintreegateway.com cdn-scripts.signifyd.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.com *.google.com.ua *.google.co.uk *.gstatic.com *.googletagmanager.com *.doubleclick.net *.meetanshi.com maps.googleapis.com maps.gstatic.com connect.facebook.net www.google.com http://translate.google.com translate.googleapis.com www.gstatic.com includes.ccdc02.com static.zdassets.com cdn.inspectlet.com *.stamped.io *.livechatinc.com *.userway.org *.paypal.com pay.google.com www.klarnapayments.com *.affirm.com *.routeapp.io *.bing.com cdn.ampproject.org *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.googleapis.com *.googletagmanager.com *.stamped.io www.klarnapayments.com www.gstatic.com maxcdn.bootstrapcdn.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com payments.sandbox.braintree-api.com origin-analytics-sand.sandbox.braintree-api.com assets.braintreegateway.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.google-analytics.com *.google.com *.meetanshi.com *.paypal.com *.authorize.net ekr.zdassets.com *.zendesk.com wss://widget-mediator.zopim.com hn.inspectlet.com stamped.io *.braintree-api.com *.braintreegateway.com www.paypalobjects.com *.livechatinc.com *.userway.org graph.instagram.com *.affirm.com *.route.com *.bing.com cdn.ampproject.org *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://maps.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://analytics.tiktok.com https://appleid.cdn-apple.com https://www.gstatic.com https://www.google.com https://accounts.google.com https://fundingchoicesmessages.google.com https://static.hotjar.com https://static.klaviyo.com https://cdnjs.cloudflare.com https://compare-static.roomertravel.com https://app.link; connect-src 'self' https://dobby.roomertravel.com https://d2dfh9cwu2d4sd.cloudfront.net https://api.rollbar.com https://*.google-analytics.com https://www.googletagmanager.com https://maps.googleapis.com https://firebaseappcheck.googleapis.com https://content-firebaseappcheck.googleapis.com https://api.stripe.com https://*.tiktok.com https://connect.facebook.net https://www.google.com https://a.klaviyo.com https://static.klaviyo.com https://api2.branch.io https://app.link https://ad.doubleclick.net https://www.clicktripz.com; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://appleid.apple.com https://www.google.com; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline'; font-src 'self' data: https://fonts.gstatic.com; worker-src 'self' blob: 1
default-src 'self'; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'self'; 1
require-trusted-types-for 'script'; report-uri https://cspreports.skiff.com 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://*.clarity.ms https://static.cloudflareinsights.com https://analytics.ahrefs.com https://r.rconfig.com https://*.posthog.com; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://*.clarity.ms https://static.cloudflareinsights.com https://analytics.ahrefs.com https://r.rconfig.com https://*.posthog.com; img-src 'self' data: blob: https://www.googletagmanager.com https://www.google-analytics.com https://*.clarity.ms https://images.ctfassets.net https://images.unsplash.com https://plus.unsplash.com https://img.shields.io; frame-src 'self' https://customer-htr0575wlpdjwirn.cloudflarestream.com https://academy.rconfig.com; style-src 'self' 'unsafe-inline' https://r.rconfig.com https://*.posthog.com; style-src-elem 'self' 'unsafe-inline' https://r.rconfig.com https://*.posthog.com; worker-src 'self' blob: 1
object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' unpkg.com; script-src-attr 'self'; script-src-elem 'self' 'unsafe-inline' https://static.hotjar.com https://script.hotjar.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.googletagmanager.com https://snap.licdn.com https://googleads.g.doubleclick.net https://maps.googleapis.com unpkg.com; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com; frame-ancestors 'self'; report-uri https://www.vopak.com/cspreport 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://js.stripe.com https://www.googletagmanager.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; frame-src https://js.stripe.com https://challenges.cloudflare.com; img-src 'self' https: data:; connect-src 'self' https: wss:; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action https://commerciovirtuoso.it https://www.commerciovirtuoso.it https://*.stripe.com 1
font-src *.klarnacdn.net *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.klarna.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.klarna.com *.klarnaevt.com *.klarnacdn.net www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.klarna.com *.klarnacdn.net *.klarnaservices.com *.googleapis.com *.google.com *.gstatic.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.klarnacdn.net *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; 		script-src 'self' 'wasm-unsafe-eval' 'unsafe-eval' *.epichosted.com *.smilegenerationmychart.com *.gstatic.com *.vimeo.com *.onetrust.com *.my.site.com *.salesforce-scrt.com adobedc.demdex.net assets.adobedtm.com cdn.cookielaw.org service.force.com www.datadoghq-browser-agent.com *.salesforceliveagent.com maps.googleapis.com static.cloud.coveo.com js.web-2-tel.com www.youtube.com e.issuu.com cdnjs.cloudflare.com cdn.userway.org gallery-prod8.sprinklr.com platform.twitter.com 'unsafe-inline'; 		connect-src 'self' 'wasm-unsafe-eval' *.onetrust.io *.userway.org *.gstatic.com *.onetrust.com adobedc.demdex.net cdn.plot.ly *.vimeo.com *.my.site.com *.salesforce-scrt.com *.coveo.com api.geoapify.com *.googleapis.com edge.adobedc.net js.web-2-tel.com cdn.cookielaw.org rum.browser-intake-datadoghq.com data:; 		img-src 'self' *.day.com *.userway.org *.smilegeneration.com i.ytimg.com i.vimeocdn.com s7d9.scene7.com cdn.cookielaw.org maps.googleapis.com maps.gstatic.com 1.smilegeneration.com image.isu.pub thumb.sprinklr.com data: blob: 'unsafe-inline'; 		frame-src 'self'  cloud.mail.smilegeneration.com *.google.com *.epichosted.com *.smilegenerationmychart.com *.my.site.com e.issuu.com player.vimeo.com www.youtube.com service.force.com; 		style-src 'self' *.epichosted.com *.smilegenerationmychart.com service.force.com e.issuu.com *.userway.org *.my.site.com *.salesforce-scrt.com gallery-prod8.sprinklr.com static.cloud.coveo.com fonts.googleapis.com 'unsafe-inline'; 		font-src 'self' *.userway.org fonts.gstatic.com static.isu.pub platform.twitter.com storage.googleapis.com *.coveo.com *.sfdcstatic.com data:; 		worker-src blob:; 		frame-ancestors 'self' https://www.smilegenerationmychart.com https://mychart-np.et1079.epichosted.com https://pdshealth.my.site.com https://pdshealth--uat1.sandbox.my.site.com; 1
default-src 'self'; font-src 'self' data:; img-src 'self' data:; script-src 'self'; style-src 'self'; report-uri https://teratorium.uriports.com/reports/report; report-to default 1
font-src *.googleapis.com *.gstatic.com 'self' data: fonts.gstatic.com *.cloudmaestro.com *.punchout2go.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.authorize.net *.punchout2go.com 'self' data: *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com *.punchout2go.com 'self' data: 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com www.google.com *.certcapture.com *.doubleclick.net *.facebook.com events.blackthorn.io *.punchout2go.com *.weltpixel.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net data: *.gstatic.com *.googleapis.com *.certcapture.com maps.googleapis.com www.googletagmanager.com www.google.com *.cloudmaestro.com *.doubleclick.net *.scene7.com *.bakerdist.com bam.nr-data.net *.punchout2go.com https://firebasestorage.googleapis.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.googletagmanager.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.certcapture.com cdnjs.cloudflare.com cdn.jsdelivr.net static.cloudflareinsights.com unpkg.com *.onetrust.com cdn.cookielaw.org maps.googleapis.com *.punchout2go.com *.tradecentric.com *.cloudmaestro.com js-agent.newrelic.com bam.nr-data.net *.authorize.net *.bakerdist.com static.zdassets.com cdn.rudderlabs.com events.blackthorn.io *.avada.io *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com cdnjs.cloudflare.com *.cloudmaestro.com *.punchout2go.com *.tradecentric.com *.bakerdist.com *.fontawesome.com https://fonts.bunny.net *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src *.punchout2go.com *.tradecentric.com *.buyerquest.net bam.nr-data.net 'self' 'unsafe-inline'; media-src *.adobe.com static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com *.googleapis.com *.certcapture.com *.bakerdist.com bam.nr-data.net *.authorize.net cdn.cookielaw.org *.scene7.com lkx760tcl7.execute-api.us-east-1.amazonaws.com www.facebook.com wss://widget-mediator.zopim.com static.cloudflareinsights.com bakerdist.zendesk.com ekr.zdassets.com bkuatdmbogssdi.dataplane.rudderstack.com bkprodukgnhabu.dataplane.rudderstack.com api.rudderstack.com geolocation.onetrust.com privacyportal.onetrust.com boltgw-uat.cardconnect.com:* boltgw.cardconnect.com:* *.punchout2go.com https://get.geojs.io *.avada.io *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.clarity.ms *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fonts.net *.annefontaine.com mediacdn.espssl.com cash-f.squarecdn.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.annefontaine.com * *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.meetanshi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.hotjar.com *.vimeo.com vimeo.com secure.livechatinc.com *.pinterest.com *.criteo.com *.annefontaine.com *.weltpixel.com * *.sendcloud.sc *.jsdelivr.net *.wesupply.xyz https://wesupplylabs.com guarantee-cdn.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.certcapture.com *.meetanshi.com *.pinterdev.com commerce-app.pintergration.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.pinterest.com *.annefontaine.com *.listrakbi.com bat.bing.net *.zonos.com *.ubiconproject.com *.doubleclick.net *.gorgias.chat *.gorgias.io cdn.cookielaw.org cdn.files-text.com cdn.livechat-static.com id5-sync.com x.bidswitch.net ib.adnxs.com rtb-csync.smartadserver.com sync-t1.taboola.com visitor.omnitagjs.com r.casalemedia.com gum.criteo.com ad.360yield.com matching.ivitrack.com contextual.media.net exchange.mediavine.com jadserve.postrelease.com sync.outbrain.com simage2.pubmatic.com criteo-partners.tremorhub.com eb2.3lift.com ad.yieldlab.net sync-criteo.ads.yieldmo.com e1.emxdgt.com sync.1rx.io pixel.rubiconproject.com match.sharethrough.com criteo-sync.teads.tv sync.targeting.unrulymedia.com dis.criteo.com aa.agkn.com * *.bing.com *.bing.net *.bird.eu *.amazonaws.com guarantee-cdn.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com *.certcapture.com *.meetanshi.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com maps.gstatic.com *.cdninstagram.com *.fbcdn.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com f.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://na-library.klarnaservices.com *.fonts.net *.listrakbi.com *.listrak.com g792337341.co *.hotjar.com *.facebook.com js-agent.newrelic.com bam.nr-data.net https://cdn.cookielaw.org *.appspot.com *.zonos.com vimeo.com *.bing.com https://bat.bing.com *.pinimg.com *.gorgias.chat *.criteo.com *.clarity.ms https://www.clarity.ms *.akamaized.net *.adscale.de *.casalemedia.com https://static.criteo.net https://dynamic.criteo.com https://sslwidget.criteo.com/ https://acsbapp.com *.annefontaine.com cdn.weglot.com cdn.livechatinc.com api.livechatinc.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page *.sendcloud.sc *.jsdelivr.net *.cloudflare.com guarantee-cdn.com *.google.bg *.googletagmanager.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.tiktok.com *.certcapture.com *.meetanshi.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com maps.googleapis.com ajax.googleapis.com *.instagram.com https://hello.zonos.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fonts.net *.listrakbi.com cdn.listrakbi.com *.annefontaine.com *.cash.app *.sendcloud.sc *.jsdelivr.net *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.certcapture.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.listrakbi.com *.pinterest.com bam.nr-data.net *.doubleclick.net stats.g.doubleclick.net *.zonos.com *.acsbapp.com acsbapp.com *.clarity.ms https://fonts.googleapis.com https://cdn.cookielaw.org *.criteo.com *.annefontaine.com cdn.weglot.com https://na-library.klarnaservices.com eu.klarnaevt.com *.gorgias.chat wss://us-east1-898b.gorgias.chat api.livechatinc.com cdn.livechatinc.com bat.bing.net *.onetrust.com * *.bing.com *.bing.net *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.facebook.com *.facebook.net *.googlesyndication.com *.tiktok.com *.certcapture.com *.meetanshi.com *.pinterdev.com commerce-app.pintergration.com *.instagram.com *.googleusercontent.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src *.gorgias.chat *.annefontaine.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
connect-src 'self' https://translate.googleapis.com https://stats.espace-sciences.org https://embedr.flickr.com https://widgets.flickr.com https://stats.addtoany.com data: https://www.google-analytics.com https://*.google-analytics.com https://*.espace-sciences.org https://e.issuu.com https://fonts.googleapis.com https://apis.google.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' https://www.gstatic.com https://*.gstatic.com https://translate.google.com https://tile.openstreetmap.org data: https://i.ytimg.com https://img.youtube.com https://stats.espace-sciences.org https://*.s3.eu-west-1.amazonaws.com https://www.stelvision.com blob: https://em-content.zobj.net https://*.flickr.com https://*.staticflickr.com https://static-cdn.jtvnw.net https://*.dmcdn.net https://upload.wikimedia.org https://www.espace-sciences.org https://*.espace-sciences.org; object-src 'self' https://static.issuu.com http://static.issuu.com https://www.flickr.com http://www.flickr.com https://wikiradio.ueb.eu http://wikiradio.ueb.eu https://noop.style; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://app.mailjet.com https://stats.espace-sciences.org https://widgets.flickr.com https://embedr.flickr.com https://translate.googleapis.com https://translate.google.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://static.addtoany.com https://unpkg.com; script-src-elem * 'report-sample' 'unsafe-inline' blob:; style-src 'self' 'report-sample' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src-attr 'self' 'report-sample' 'unsafe-inline'; style-src-elem 'self' 'report-sample' 'unsafe-inline' https://www.gstatic.com https://kit.fontawesome.com https://ka-p.fontawesome.com https://fonts.googleapis.com https://www.opoint.no https://*.gstatic.com https://translate.googleapis.com https://translate.google.com blob: https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; worker-src 'self' https://www.google.com blob:; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://digipad.app; report-uri https://www.espace-sciences.org/system/reporting/csp_endpoint; report-to csp_endpoint 1
object-src 'none';base-uri 'self';script-src 'nonce-OW-W_yUcKckLXH-GgKzA-Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
worker-src blob:; font-src *.accelasearch.io *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com fonts.gstatic.com *.kxcdn.com *.fontawesome.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com google.com *.addthis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.accelasearch.io https://images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com scontent.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com google.com *.google.it media.prezzemoloevitale.it magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.hsforms.net *.hsforms.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.accelasearch.io https://maps.googleapis.com https://player.vimeo.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com https://cdn.jsdelivr.net *.tiktok.com *.googleapis.com google.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com load.sgtm.prezzemoloevitale.it sgtm.prezzemoloevitale.it *.prezzemoloevitale.it *.prezzemoloevitale.co.uk *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.accelasearch.io *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com google.com *.kxcdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net unsafe-inline assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.accelasearch.io https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com load.sgtm.prezzemoloevitale.it sgtm.prezzemoloevitale.it *.prezzemoloevitale.it *.prezzemoloevitale.co.uk https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
connect-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.bing.net *.bounce-commerce.de *.clarity.ms *.cookiefirst.com d5yoctgpv4cpx.cloudfront.net *.doubleclick.net *.facebook.com *.facebook.net *.googleadservices.com *.google-analytics.com *.googleapis.com www.google.be www.google.com.br www.google.co.uk www.google.de www.google.es www.google.fr www.google.nl www.google.pl *.google.com google.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.mailplus.nl *.marker.io *.multisafepay.com p2iqhncxyh.execute-api.eu-central-1.amazonaws.com *.pinimg.com *.pinterest.com s3.eu-west-1.amazonaws.com squeezely.tech *.squeezely.tech *.thuiswinkel-cdn.org *.thuiswinkel.org *.tiktok.com *.tiktokw.us *.trustpilot.com api.marker.io ssr.marker.io s3.eu-west-1.amazonaws.com/marker.sessions.prod; default-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.bing.net *.bounce-commerce.de *.clarity.ms *.cookiefirst.com *.doubleclick.net *.facebook.com *.facebook.net *.googleadservices.com *.google-analytics.com www.google.be www.google.de www.google.dk www.google.nl www.google.pt *.google.com google.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.mailplus.nl *.pinterest.com *.squeezely.tech *.thuiswinkel-cdn.org *.tiktok.com *.tiktokw.us; frame-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.bounce-commerce.de *.doubleclick.net *.facebook.com *.google.com google.com *.googletagmanager.com *.pinterest.com *.thuiswinkel-cdn.org *.thuiswinkel.org *.trustpilot.com vercel.live app.marker.io; img-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.bing.net bucket-ip-website.s3.eu-central-1.amazonaws.com *.clarity.ms *.cookiefirst.com *.doubleclick.net *.facebook.com *.facebook.net *.googleadservices.com *.googleapis.com www.google.at www.google.be www.google.ch www.google.com.af www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bo www.google.com.br www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.uk www.google.cz www.google.de www.google.dk www.google.es www.google.fr www.google.it www.google.nl www.google.pl www.google.pt www.google.ru google.com *.google.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.mailplus.nl *.pinterest.com s3.amazonaws.com *.squeezely.tech *.storyblok.com *.thuiswinkel-cdn.org *.tiktok.com *.tiktokw.us blob: data: media.marker.io app.marker.io edge.marker.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.bounce-commerce.de *.clarity.ms *.cookiefirst.com d5yoctgpv4cpx.cloudfront.net *.doubleclick.net *.facebook.com *.facebook.net *.googleadservices.com *.googleapis.com *.google.com *.googlesyndication.com *.googletagmanager.com *.hotjar.com *.mailplus.nl *.marker.io *.multisafepay.com *.pinimg.com *.pinterest.com squeezely.tech *.storyblok.com *.thuiswinkel-cdn.org *.thuiswinkel.org *.tiktok.com *.trustpilot.com vercel.live edge.marker.io app.marker.io; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.cookiefirst.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.multisafepay.com *.thuiswinkel-cdn.org; form-action 'self' 'unsafe-inline' 'unsafe-eval' *.facebook.com app.marker.io api.marker.io; font-src 'self' 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.thuiswinkel-cdn.org app.marker.io edge.marker.io; child-src 'self' 'unsafe-inline' 'unsafe-eval'  app.marker.io; media-src 'self' 'unsafe-inline' 'unsafe-eval' media.marker.io app.marker.io edge.marker.io; report-uri https://4c3df516-da08-401d-9e6c-648b320e74ec.sansec.watch/; report-to report-endpoint; 1
base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.csidetm.com *.csidefd.com 7482936037306332160.csidefd.com 7482936037306332160.csidetm.com a.usbrowserspeed.com accounts.google.com acsbapp.com api.clerk.io app.posthog.com backend.alia-prod.com c.albss.com cdn-scripts.signifyd.com cdn.agechecker.net cdn.funnelytics.io cdn.jsdelivr.net cdn.userway.org challenges.cloudflare.com checkout-sdk.sezzle.com connect.facebook.net custom.clerk.io d-code.liadm.com d34r8q7sht0t9k.cloudfront.net get.geojs.io *.online-metrix.net idaqf.indacloud.co imgs.signifyd.com indacloud.co indacloud.ladesk.com js.authorize.net maps.googleapis.com nutrifunc.com res4.applovin.com s.axon.ai searchanise-ef84.kxcdn.com searchserverapi1.com snippets.buildwithtoki.com srzmf.indacloud.co stapecdn.com static-tracking.klaviyo.com static.klaviyo.com static.mobilemonkey.com subscriber-portal.qpilot.cloud unpkg.com us-assets.i.posthog.com www.google-analytics.com www.googletagmanager.com; script-src-elem 'self' 'unsafe-inline' blob: *.csidetm.com *.csidefd.com 7482936037306332160.csidefd.com 7482936037306332160.csidetm.com a.usbrowserspeed.com accounts.google.com acsbapp.com api.clerk.io app.posthog.com backend.alia-prod.com c.albss.com cdn-scripts.signifyd.com cdn.agechecker.net cdn.funnelytics.io cdn.jsdelivr.net cdn.userway.org challenges.cloudflare.com checkout-sdk.sezzle.com connect.facebook.net custom.clerk.io d-code.liadm.com d34r8q7sht0t9k.cloudfront.net get.geojs.io *.online-metrix.net idaqf.indacloud.co imgs.signifyd.com indacloud.co indacloud.ladesk.com js.authorize.net maps.googleapis.com nutrifunc.com res4.applovin.com s.axon.ai searchanise-ef84.kxcdn.com searchserverapi1.com snippets.buildwithtoki.com srzmf.indacloud.co stapecdn.com static-tracking.klaviyo.com static.klaviyo.com static.mobilemonkey.com subscriber-portal.qpilot.cloud unpkg.com us-assets.i.posthog.com www.google-analytics.com www.googletagmanager.com www.knocdn.com; connect-src 'self' api.qpilot.cloud *.csidetm.com *.csidefd.com 5lcadbj7za.execute-api.eu-west-1.amazonaws.com a.aisiteanalytics.com a.klaviyo.com accounts.google.com analytics.google.com api-js.datadome.co api-js.mixpanel.com api.agechecker.net api.buildwithtoki.com api.config-security.com api.userway.org api2.authorize.net api.knocommerce.com b.applovin.com backend.alia-prod.com cdn.acsbapp.com cdn.userway.org cognito-idp.us-east-2.amazonaws.com conf.config-security.com connect.facebook.net dp.signifyd.com edge.csidetm.com fast.a.klaviyo.com files.alia-prod.com fine.indacloud.co fonts.cdnfonts.com fonts.googleapis.com googleads.g.doubleclick.net h2.aisiteanalytics.com idaqf.indacloud.co idx.liadm.com imgs.signifyd.com indacloud.co ipv4.podscribe.com js.authorize.net maps.googleapis.com maps.gstatic.com media.sezzle.com motramby.com p.typekit.net prod-static-content.fetch.com prod-website-gateway.fetch.com prod-website-gateway.fetchrewards.com re.applovin.com region1.analytics.google.com region1.google-analytics.com rp.liadm.com s3.buildwithtoki.com snippets.buildwithtoki.com sr-client-cfg.amplitude.com srzmf.indacloud.co static-forms.klaviyo.com static.klaviyo.com stats.g.doubleclick.net subscriber-portal.qpilot.cloud track-v3.funnelytics.io tracker-shield.funnelytics.workers.dev translate-pa.googleapis.com translate.googleapis.com tstats.online us-assets.i.posthog.com us.i.posthog.com use.typekit.net www.google-analytics.com www.google.com www.googletagmanager.com www.gstatic.com; img-src 'self' data: acsbapp.com api.agechecker.net api.config-security.com cdn.buildwithtoki.com cdn.userway.org cm.g.doubleclick.net d34uoa9py2cgca.cloudfront.net files.alia-cloudflare.com files.alia-prod.com fine.indacloud.co fonts.gstatic.com img.agechecker.net imgs.signifyd.com indacloud.co indacloud.ladesk.com js.authorize.net maps.gstatic.com media.sezzle.com rp.liadm.com snippets.buildwithtoki.com stats.g.doubleclick.net storage.googleapis.com translate.google.com verifi.podscribe.com *.online-metrix.net www.google.al www.google.bs www.google.ca www.google.co.id www.google.co.in www.google.co.jp www.google.co.ma www.google.co.uk www.google.com.au www.google.com.bd www.google.com.br www.google.com.eg www.google.com.kw www.google.com.mx www.google.com.my www.google.com.np www.google.com.pk www.google.com.qa www.google.com.tr www.google.cz www.google.de www.google.dk www.google.ee www.google.ge www.google.hu www.google.ie www.google.it www.google.nl www.google.pt www.google.ru www.googletagmanager.com; style-src 'self' 'unsafe-inline' accounts.google.com cdn.userway.org fonts.googleapis.com indacloud.co searchanise-ef84.kxcdn.com snippets.buildwithtoki.com static.klaviyo.com subscriber-portal.qpilot.cloud use.typekit.net www.gstatic.com; style-src-elem 'self' 'unsafe-inline' accounts.google.com cdn.jsdelivr.net cdn.userway.org fonts.googleapis.com indacloud.co p.typekit.net searchanise-ef84.kxcdn.com snippets.buildwithtoki.com static.klaviyo.com subscriber-portal.qpilot.cloud use.typekit.net www.gstatic.com; frame-src 'self' 1.ue1.vbus.apps.ladesk.com 2.ue1.vbus.apps.ladesk.com 3.ue1.vbus.apps.ladesk.com 4.ue1.vbus.apps.ladesk.com 5.ue1.vbus.apps.ladesk.com 6.ue1.vbus.apps.ladesk.com accounts.google.com apps.rokt.com cdn.userway.org challenges.cloudflare.com *.online-metrix.net i.liadm.com imgs.signifyd.com indacloud.ladesk.com safeframe.googlesyndication.com; font-src 'self' data: cdn.agechecker.net cdn.jsdelivr.net files.alia-prod.com fonts.gstatic.com indacloud.co static.klaviyo.com use.typekit.net; worker-src 'self' blob:; media-src 'self' api.agechecker.net cdn.buildwithtoki.com cdn.userway.org cm.g.doubleclick.net d34uoa9py2cgca.cloudfront.net files.alia-cloudflare.com fine.indacloud.co fonts.gstatic.com ic-media.b-cdn.net img.agechecker.net imgs.signifyd.com indacloud.co maps.gstatic.com rp.liadm.com snippets.buildwithtoki.com stats.g.doubleclick.net translate.google.com verifi.podscribe.com *.online-metrix.net www.facebook.com www.google.bs www.google.ca www.google.co.in www.google.co.jp www.google.co.ma www.google.co.nz www.google.co.uk www.google.com.au www.google.com.bd www.google.com.br www.google.com.eg www.google.com.mx www.google.com.np www.google.com.pa www.google.com.ph www.google.com.pk www.google.com.qa www.google.com.tr www.google.cz www.google.de www.google.dk www.google.ee www.google.ge www.google.ie www.google.it www.google.nl www.google.pt www.google.ru www.googletagmanager.com; report-uri https://csp.csidetm.com/csp; report-to csp-endpoint 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: logger.scot.nhs.uk *.fontawesome.com use.typekit.net *.google.com *.google.co.uk *.googleapis.com themes.googleusercontent.com *.gstatic.com code.jquery.com yui.yahooapis.com *.bootstrapcdn.com cdnjs.cloudflare.com cdn.jsdelivr.net unpkg.com *.twitter.com *.twimg.com *.youtube.com youtu.be *.ytimg.com www.youtube-nocookie.com player.vimeo.com i.vimeocdn.com cdn.jwplayer.com content.jwplatform.com prd.jwpltx.com *.jwpcdn.com *.jwpsrv.com *.civiccomputing.com cc.cdn.civiccomputing.com secure.gravatar.com public.tableau.com www.openstreetmap.org browser-update.org s.w.org www.geoplugin.net *.wp.com hcaptcha.com *.hcaptcha.com www.careopinion.org.uk www.patientopinion.org.uk assets.nhs.uk www.travelinescotland.com *.nhslothian.scot *.nhslothian.scot.nhs.uk secure.worldpay.com www.dermatology.nhs.scot noop.style; worker-src 'self' www.google.com; frame-ancestors 'self'; base-uri 'self'; report-to csp-endpoint; report-uri https://web-reports.scot.nhs.uk/api/v1/csp-report 1
font-src data: *.gstatic.com oct8necdneu.azureedge.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.fontawesome.com *.ladesk.com *.nr-data.net *.newrelic.com *.payments-amazon.com *.connectif.cloud *.google.com *.bing.com *.botsrv2.com cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com sis-t.redsys.es:* sis.redsys.es sis-t.sermepa.es:* sis.sermepa.es *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com *.ladesk.com *.nr-data.net *.newrelic.com *.payments-amazon.com *.connectif.cloud *.google.com *.bing.com *.botsrv2.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com www.google.com *.vimeo.com *.oct8ne.com *.weltpixel.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://plumrocket.com *.ladesk.com *.nr-data.net *.newrelic.com *.payments-amazon.com *.connectif.cloud *.google.com *.bing.com botsrv2.com *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.googleapis.com *.google.com *.google.es *.google.com.br *.gstatic.com *.googletagmanager.com *.google-analytics.com *.g.doubleclick.net oct8necdneu.azureedge.net *.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.ladesk.com *.nr-data.net *.newrelic.com *.payments-amazon.com *.connectif.cloud *.bing.com *.botsrv2.com https://static.linguise.com https://forms-eu1.hsforms.com https://perf-eu1.hsforms.com https://imgsct.cookiebot.com https://track-eu1.hubspot.com https://pagead2.googlesyndication.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ polyfill.io *.googleapis.com *.google.com *.google.es *.google.com.br *.gstatic.com *.googletagmanager.com *.google-analytics.com *.g.doubleclick.net *.cookiebot.com *.oct8ne.com *.adyen.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.facebook.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.ladesk.com *.payments-amazon.com *.connectif.cloud *.bing.com *.botsrv2.com *.sealmetrics.com https://static.linguise.com https://js-eu1.hsforms.net https://js.hs-scripts.com https://js-eu1.hs-scripts.com https://js-eu1.hsadspixel.net https://js-eu1.usemessages.com https://js-eu1.hs-banner.com https://js-eu1.hs-analytics.net https://js-eu1.hscollectedforms.net https://js-eu1.hubspot.com https://pagead2.googlesyndication.com *.trustpilot.com https://www.googletagmanager.com tagmanager.google.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.fontawesome.com unsafe-inline assets.braintreegateway.com *.ladesk.com *.nr-data.net *.newrelic.com *.payments-amazon.com *.connectif.cloud *.google.com *.bing.com *.botsrv2.com cdnjs.cloudflare.com *.trustpilot.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'none' 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google.com *.google.es *.google.com.br *.googletagmanager.com *.google-analytics.com *.g.doubleclick.net *.oct8ne.com *.adyen.com *.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com *.ladesk.com *.payments-amazon.com *.connectif.cloud *.bing.com botsrv2.com https://forms-eu1.hsforms.com https://api.linguise.com https://api-eu1.hubspot.com https://forms-eu1.hscollectedforms.net https://cta-eu1.hubspot.com https://api-eu1.hubapi.com https://pagead2.googlesyndication.com https://invitejs.trustpilot.com *.facebook.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.measureup.com/pr-csp/report/add/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'nonce-UoIiH0bPHVPtKRNass7wSuW2hiMrrc-hv2Drw0L8IDotiB9as1LpJQ' data: https://*.openstreetmap.org 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://*.openstreetmap.org https://*.typo3.org https://*.tile.openstreetmap.org https://secure.fundraisingbox.com; base-uri 'self'; frame-src 'self' https://www.youtube-nocookie.com https://player.vimeo.com https://secure.fundraisingbox.com; connect-src 'self' data: https://*.openstreetmap.org; worker-src blob: 'report-sample'; style-src 'self' 'unsafe-inline' 'report-sample'; script-src-elem 'self' 'nonce-UoIiH0bPHVPtKRNass7wSuW2hiMrrc-hv2Drw0L8IDotiB9as1LpJQ' data: https://*.openstreetmap.org https://secure.fundraisingbox.com https://cdn.jsdelivr.net/npm/apexcharts 'report-sample'; report-uri https://www.dgkj.de/@http-reporting?csp=report&requestTime=1789289825451287&requestHash=1a93125597b900e32089b07819810d770bddeb20 1
worker-src blob:; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.kxcdn.com https://static.universal-akb.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io scontent.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com google.com magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://static.universal-akb.com https://media.universal-akb.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://static.universal-akb.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com google.com *.kxcdn.com *.gstatic.com assets.braintreegateway.com https://static.universal-akb.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://static.universal-akb.com https://media.universal-akb.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
font-src *.fontawesome.com 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es https://www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es https://redchamps.com maps.gstatic.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com js.authorize.net jstest.authorize.net cdn-scripts.signifyd.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es maps.googleapis.com www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.fontawesome.com www.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri https://www.paypalobjects.com 'self' 'unsafe-inline'; 1
script-src 'self' blob: https://prod-bk-web.gb.rbi.tools/en/static/js/vendor.5dc447bb.js https://prod-bk-web.gb.rbi.tools/en/static/js/main.6603cf2a.js https://prod-bk-web.gb.rbi.tools/en/static/js/runtime.daffd1f7.js https://*.mparticle.com https://cdn.cookielaw.org https://www.googletagmanager.com https://*.onetrust.com https://static.ads-twitter.com https://platform.twitter.com https://www.google-analytics.com https://connect.facebook.net https://secure.quantserve.com https://dynamic.criteo.com https://rules.quantcount.com https://cdn.branch.io https://app.link https://*.cdn4.forter.com https://dlthst9q2beh8.cloudfront.net https://sslwidget.criteo.com https://widget.eu.criteo.com https://pagead2.googlesyndication.com https://cdn.amplitude.com https://accounts.google.com https://appleid.cdn-apple.com https://analytics.tiktok.com https://c.amazon-adsystem.com https://js.adsrvr.org https://maps.googleapis.com https://googleads.g.doubleclick.net https://static.zdassets.com https://bat.bing.com https://cdn-st.adsmurai.com https://www.youtube.com https://player.vimeo.com https://prod-bk-web.gb.rbi.tools/en/static/js/main.93fa05b0.js https://prod-bk-web.gb.rbi.tools/en/static/js/runtime.55a69437.js; object-src 'none'; base-uri 'none'; worker-src 'self' blob:; report-uri https://intl-csp-service.rbictg.com/report 1
require-trusted-types-for 'script'; trusted-types default dompurify 'allow-duplicates' 1
font-src *.gstatic.com  enervitstaging.kleecks-cdn.com *.kleecks-stats.com 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data:  enervitstaging.kleecks-cdn.com *.kleecks-stats.com 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com *  enervitstaging.kleecks-cdn.com *.kleecks-stats.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com  enervitstaging.kleecks-cdn.com *.kleecks-stats.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.googletagmanager.com *.google.com *.fls.doubleclick.net *.facebook.com *.awin1.com *.zenaps.com consentcdn.cookiebot.com *.consentcdn.cookiebot.com gum.criteo.com *.gum.criteo.com servedby.flashtalking.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com  enervitstaging.kleecks-cdn.com *.kleecks-stats.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io  enervitstaging.kleecks-cdn.com *.kleecks-stats.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.awin1.com *.zenaps.com *.wepowerconnections.com *.bird.eu www.google.it *.google.it secure.adnxs.com *.secure.adnxs.com *.adnxs.com x.bidswitch.net *.x.bidswitch.net *.bidswitch.net ib.adnxs.com *.ib.adnxs.com ad.360yield.com *.ad.360yield.com *.360yield.com contextual.media.net *.contextual.media.net sync.outbrain.com *.sync.outbrain.com *.outbrain.com pixel.rubiconproject.com *.pixel.rubiconproject.com *.rubiconproject.com match.sharethrough.com *.match.sharethrough.com *.sharethrough.com rtb-csync.smartadserver.com *.rtb-csync.smartadserver.com *.smartadserver.com sync-t1.taboola.com *.sync-t1.taboola.com *.taboola.com criteo-sync.teads.tv *.criteo-sync.teads.tv *.teads.tv eb2.3lift.com *.eb2.3lift.com *.3lift.com ups.analytics.yahoo.com *.ups.analytics.yahoo.com *.analytics.yahoo.com e1.emxdgt.com *.e1.emxdgt.com *.emxdgt.com cm.adform.net *.cm.adform.net *.adform.net visitor.omnitagjs.com *.visitor.omnitagjs.com *.omnitagjs.com r.casalemedia.com *.r.casalemedia.com *.casalemedia.com gum.criteo.com *.gum.criteo.com *.criteo.com matching.ivitrack.com *.matching.ivitrack.com *.ivitrack.com exchange.mediavine.com *.exchange.mediavine.com *.mediavine.com simage2.pubmatic.com *.simage2.pubmatic.com *.pubmatic.com criteo-partners.tremorhub.com *.criteo-partners.tremorhub.com *.tremorhub.com ad.yieldlab.net *.ad.yieldlab.net *.yieldlab.net sync-criteo.ads.yieldmo.com *.sync-criteo.ads.yieldmo.com *.ads.yieldmo.com beacon.krxd.net *.beacon.krxd.net *.krxd.net s.thebrighttag.com *.s.thebrighttag.com *.thebrighttag.com *.igodigital.com id5-sync.com *.id5-sync.com trk.datnova.com *.trk.datnova.com *.datnova.com *.enervit.com *.kleecks-cdn.com https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data:  enervitstaging.kleecks-cdn.com *.kleecks-stats.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.awin1.com www.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com consent.cookiebot.com *.consent.cookiebot.com consentcdn.cookiebot.com *.consentcdn.cookiebot.com *.cookiebot.com *.dwin1.com static.criteo.net *.static.criteo.net enervit.mailmnsa.com *.enervit.mailmnsa.com sslwidget.criteo.com *.sslwidget.criteo.com *.criteo.com js.cookieless-data.com *.js.cookieless-data.com *.cookieless-data.com smct.co *.smct.co js.sddan.com *.js.sddan.com trk.datnova.com *.trk.datnova.com *.datnova.com js-agent.newrelic.com *.js-agent.newrelic.com *.bam.nr-data.net 510004521.collect.igodigital.com *.collect.igodigital.com *.teads.tv *.iubenda.com maps.googleapis.com *.amazon-adsystem.com js-tag.zemanta.com acdn.adnxs.com *.equalweb.com *.kleecks-cdn.com *.kleecks-stats.com cdn.jsdelivr.net *.avada.io *.shopify.com *.alothemes.com *.magepow.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://www.dwin1.com  enervitstaging.kleecks-cdn.com *.kleecks-stats.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.fontawesome.com *.kleecks-cdn.com https://fonts.bunny.net *.alothemes.com *.magepow.com unsafe-inline assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com  enervitstaging.kleecks-cdn.com *.kleecks-stats.com 'self' 'unsafe-inline'; object-src  enervitstaging.kleecks-cdn.com *.kleecks-stats.com 'self' 'unsafe-inline'; media-src *.adobe.com *.enervit.com *.kleecks-cdn.com  enervitstaging.kleecks-cdn.com *.kleecks-stats.com 'self' 'unsafe-inline'; manifest-src  enervitstaging.kleecks-cdn.com *.kleecks-stats.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.google-analytics.com *.facebook.com *.facebook.net google.com *.wepowerconnections.com https://the.sciencebehindecommerce.com *.google.com googleads.g.doubleclick.net *.googleads.g.doubleclick.net stats.g.doubleclick.net *.stats.g.doubleclick.net region1.analytics.google.com *.region1.analytics.google.com enervit.mailmnsa.com *.enervit.mailmnsa.com consentcdn.cookiebot.com *.consentcdn.cookiebot.com *.bam.nr-data.net *.iubenda.com maps.googleapis.com *.equalweb.com *.kleecks-stats.com *.algolia.io https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com places.googleapis.com  enervitstaging.kleecks-cdn.com *.kleecks-stats.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob:  enervitstaging.kleecks-cdn.com *.kleecks-stats.com 'self' 'unsafe-inline'; default-src  enervitstaging.kleecks-cdn.com *.kleecks-stats.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri  enervitstaging.kleecks-cdn.com *.kleecks-stats.com 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://mc.yandex.ru; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: https://mc.yandex.ru; connect-src 'self' https://mc.yandex.ru; frame-ancestors 'self'; form-action 'self'; base-uri 'self'; object-src 'none' 1
font-src *.fontawesome.com https://fonts.gstatic.com 'self' data: https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com sandbox.secure.checkout.visa.com secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io blueskytechmage.com mageblueskytech.com placehold.jp www.gstatic.com sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com chimpstatic.com downloads.mailchimp.com *.list-manage.com s7.addthis.com *.avada.io https://player.vimeo.com https://www.youtube.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com *.fontawesome.com https://fonts.googleapis.com http://fonts.googleapis.com unsafe-inline assets.braintreegateway.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com thm.visa.com ekr.zdassets.com/ https://get.geojs.io *.avada.io https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' *.cloudflare.com *.googleapis.com *.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.centrosturisticos.com *.googletagmanager.com *.google-analytics.com; style-src 'self' 'unsafe-inline' *.googleapis.com; frame-src 'self' *.youtube-nocookie.com *.youtube.com; img-src 'self' data: *.googleapis.com *.gstatic.com 1
font-src fonts.gstatic.com use.typekit.net *.googleapis.com *.gstatic.com 'self' data: *.fontawesome.com *.bootstrapcdn.com *.punchout2go.com *.tradecentric.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.cenpos.net *.cenpos.com *.google.com *.gstatic.com *.cardinalcommerce.com *.salesforce.com *.punchout2go.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.schoolhealth.com mcstaging2.schoolhealth.com/ portal.punchout2go.com qa-portal.punchout2go.com dev-portal.punchout2go.com sapportal.ocps.net sapportalqap.ocps.net shop.equallevel.com *.punchout2go.com *.tradecentric.com *.ariba.com *.nps.k12.nj.us *.zoom.us 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.sharethis.com https://static.addtoany.com/ *.certcapture.com *.cenpos.net *.cenpos.com *.google.com *.gstatic.com *.cardinalcommerce.com *.schoolhealth.com *.punchout2go.com *.tradecentric.com *.zoom.us 'self' 'unsafe-inline'; img-src 'self' data: blob: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.sharethis.com *.gstatic.com *.googleapis.com *.certcapture.com *.b0e8.com *.cenpos.net *.cenpos.com https://images.unsplash.com https://*.asknice.ly *.schoolhealth.com  *.chartbeat.com *.chartbeat.net *.pages03.net *.unbxdapi.com *.punchout2go.com *.tradecentric.com openbadges.blob.core.windows.net *.zoom.us *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com https://rum.hlx.page *.sharethis.com https://static.addtoany.com/ *.googleapis.com *.gstatic.com *.certcapture.com *.b0e8.com *.bc0a.com *.cenpos.com *.cenpos.net *.google.com *.cardinalcommerce.com https://maps.googleapis.com https://player.vimeo.com https://static.asknice.ly ssl.google-analytics.com *.cloudfront.net *.cloudflare.com *.pages03.net *.addtoany.com *.chartbeat.com *.punchout2go.com *.tradecentric.com *.unbxdapi.com *.unbxd.com *.unbxd.io data: *.bing.com *.clarity.ms *.zoom.us *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.sharethis.com *.certcapture.com *.fontawesome.com https://static.asknice.ly *.bootstrapcdn.com *.punchout2go.com *.tradecentric.com *.googleapis.com *.unbxdapi.com *.unbxd.com *.unbxd.io tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.magento-datasolutions.com *.magento-ds.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.sharethis.com https://stats.addtoany.com/menu *.googleapis.com *.certcapture.com https://maps.googleapis.com https://player.vimeo.com https://*.asknice.ly *.doubleclick.net www.google-analytics.com *.google.com bam.nr-data.net *.demdex.net *.punchout2go.com *.tradecentric.com *.zoom.us *.clarity.ms *.googletagmanager.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.googleapis.com *.gstatic.com data: script.hotjar.com *.trustedshops.com maxcdn.bootstrapcdn.com 'self' data: *.tawk.to https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.googletagmanager.com *.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.tawk.to 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com kantkonfigurator.feld-eitorf.de *.storyblok.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com www.google.com consentcdn.cookiebot.com consent.cookiefirst.com google.com/recaptcha/api2 www.gstatic.com/recaptcha/ *.doubleclick.net *.clarity.ms *.visualwebsiteoptimizer.com app.vwo.com *.klarna.com *.facebook.com www.googletagmanager.com *.pinterest.com kantkonfigurator.feld-eitorf.de *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tawk.to 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.gstatic.com *.googleapis.com https://images.unsplash.com www.google.de *.g.doubleclick.net *.facebook.net *.facebook.com *.clarity.ms chart.googleapis.com *.visualwebsiteoptimizer.com app.vwo.com *.trustedshops.com bat.bing.com *.bing.net *.cookiefirst.com *.doubleclick.net *.storyblok.com www.google.at www.google.ba www.google.be www.google.bg www.google.ca www.google.ch www.google.co.ao www.google.co.in www.google.co.ke www.google.co.th www.google.co.uk www.google.com.co www.google.com.do www.google.com.eg www.google.com.tr www.google.com.tw www.google.com.ua www.google.cz www.google.dk www.google.ee www.google.es www.google.fr www.google.ge www.google.gr www.google.hr www.google.hu www.google.ie www.google.it www.google.li www.google.lk www.google.lu www.google.mk www.google.nl www.google.no www.google.pl www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk bat.bing.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com *.hsforms.net *.hsforms.com 'self' data: *.tawk.to tawk.link cdn.jsdelivr.net s3.amazonaws.com/ https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://maps.googleapis.com js-agent.newrelic.com bam.nr-data.net google-analytics.com googletagmanager.com consentcdn.cookiebot.com consent.cookiebot.com h.online-metrix.net gstatic.com www.gstatic.com www.google.com *.bing.com *.hotjar.com *.g.doubleclick.net *.clarity.ms commerce-chat.com *.visualwebsiteoptimizer.com app.vwo.com *.trustedshops.com *.etrusted.com *.cookiefirst.com data: 'self' data: connect.facebook.net *.analytics.google.com *.doubleclick.net *.facebook.net *.googletagmanager.com *.pinimg.com *.pinterest.com *.scriptcdn.net secure.pay1.de cdn.brevo.com *.storyblok.com https://www.googletagmanager.com tagmanager.google.com unpkg.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.hsforms.net *.hsforms.com *.google.com *.tawk.to cdn.jsdelivr.net https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 127.0.0.1:35729 https://browser.sentry-cdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.visualwebsiteoptimizer.com app.vwo.com *.cookiefirst.com *.trustedshops.com *.storyblok.com tagmanager.google.com maxcdn.bootstrapcdn.com assets.braintreegateway.com d.ratepay.com d.payla.io dr.payla.io *.googleapis.com *.gstatic.com *.tawk.to cdn.jsdelivr.net https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tawk.to tawk.link 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.googleapis.com https://maps.googleapis.com https://player.vimeo.com bat.bing.com *.hotjar.com *.aiaibot.com *.g.doubleclick.net bam.nr-data.net bam.nr-data.net/events/ consent.cookiebot.com www.facebook.com *.google-analytics.com *.visualwebsiteoptimizer.com app.vwo.com *.klarnaevt.com *.klarnacdn.com *.klarnacdn.net *.klarna.com *.cookiefirst.com *.google.com *.analytics.google.com *.clarity.ms *.hotjar.io wss://ws.hotjar.com api.trustedshops.com shops-si.trustedshops.com api.trustbadge.etrusted.com trustbadge.api.etrusted.com *.google.de *.bing.net *.doubleclick.net *.facebook.com *.pinterest.com *.trustedshops.com www.google.at www.google.be www.google.bg www.google.ca www.google.ch www.google.co.in www.google.co.uk www.google.com.co www.google.com.do www.google.com.tr www.google.com.ua www.google.cz www.google.dk www.google.es www.google.fr www.google.ge www.google.hr www.google.hu www.google.it www.google.lk www.google.lu www.google.nl www.google.no www.google.pl www.google.ro www.google.ru www.google.si bat.bing.net pagead2.googlesyndication.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.tawk.to wss://*.tawk.to *.etrusted.com https://integrations.etrusted.site 127.0.0.1:35729 ws://127.0.0.1:35729 o319887.ingest.us.sentry.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://906d42bb-492d-4824-b48a-f928e7d30432.sansec.watch/; report-to report-endpoint; 1
worker-src blob:; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: *.kxcdn.com https://consent.cookiefirst.com https://static.cookiefirst.com *.weglot.com maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.weglot.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.addthis.com https://secure.pay1.de https://d.ratepay.com https://www.jsctool.com https://consent.cookiefirst.com https://static.cookiefirst.com *.doubleclick.net *.clarity.ms *.weglot.com *.googletagmanager.com *.trustpilot.com https://maps.google.com https://maps.googleapis.com js.mollie.com *.mondu.ai/ *.mondu.local localhost:*/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com https://i.ytimg.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com scontent.cdninstagram.com *.kxcdn.com *.twitter.com *.google.com *.cdninstagram.com *.fbcdn.net https://mageside.com https://consent.cookiefirst.com https://static.cookiefirst.com *.facebook.com *.facebook.net *.google.de *.google.at *.google.ch *.google.nl *.google.ie *.google.pl *.google.dk *.google.no *.google.se *.google.fi https://cx.atdmt.com https://img.idealo.com https://www.googletagmanager.com https://widgets.trustedshops.com *.doubleclick.net *.shopvote.de *.bing.com *.clarity.ms *.amazonaws.com *.meetanshi.com *.weglot.com blob: *.googlesyndication.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com https://www.mollie.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com 'unsafe-inline' *.addthis.com *.addthisedge.com *.moatads.com static.cloudflareinsights.com https://secure.pay1.de https://d.ratepay.com https://consent.cookiefirst.com https://static.cookiefirst.com data: *.shopvote.de *.doubleclick.net *.s24.com *.bing.com *.clarity.ms *.weglot.com *.trustpilot.com matomo.baushop-express.com *.avada.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://maps.google.com https://maps.googleapis.com js.mollie.com pay.google.com applepay.cdn-apple.com *.mondu.ai/widget.js *.mondu.local/widget.js localhost:*/dist/widget.js https://cdnjs.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com https://consent.cookiefirst.com https://static.cookiefirst.com *.shopvote.de *.weglot.com *.klaviyo.com https://static.klaviyo.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://www.baushop-express.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.googleapis.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com https://secure.pay1.de https://d.ratepay.com https://analytics.google.com https://consent.cookiefirst.com *.cookiefirst.com https://api.cookiefirst.com https://stats.g.doubleclick.net *.google.de *.google.at *.google.ch *.google.nl *.google.ie *.google.pl *.google.dk *.google.no *.google.se *.google.fi data: *.shopvote.de *.facebook.com *.doubleclick.net https://googleads.g.doubleclick.net *.bing.com *.clarity.ms *.weglot.com https://www.google-analytics.com *.googlesyndication.com https://google.com matomo.baushop-express.com *.us-east-2.on.aws *.us-west-1.on.aws https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://maps.google.com https://maps.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri /tools/report/index; report-to report-endpoint; 1
default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; report-uri /csp-report/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.google.com *.googleapis.com *.gstatic.com *.facebook.com *.facebook.net *.googletagmanager.com code.jquery.com cdn.cookie-script.com *.sogecommerce.com *.sogecommerce.societegenerale.eu *.sogenactif.com *.sogenactif.fr *.transfermate.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com; img-src 'self' data: blob: *.gravatar.com *.wp.com *.googleusercontent.com *.google.com *.facebook.com *.fbcdn.net *.sogecommerce.com *.transfermate.com; font-src 'self' *.gstatic.com *.googleapis.com data:; frame-src 'self' *.google.com *.youtube.com *.facebook.com *.sogecommerce.com *.sogecommerce.societegenerale.eu *.sogenactif.com *.transfermate.com; connect-src 'self' *.googleapis.com *.google-analytics.com *.facebook.com *.sogecommerce.com *.sogecommerce.societegenerale.eu *.sogenactif.com *.transfermate.com; media-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self' *.sogecommerce.com *.sogecommerce.societegenerale.eu *.sogenactif.com *.transfermate.com; 1
script-src 'self' 'nonce-09eb3SMFYZcCvUqDlT83Qg==' 'unsafe-eval' https://j4l.com https://g.j4l.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://bat.bing.com https://static.ads-twitter.com https://gtm-pwg9xl7-mtrlz.uc.r.appspot.com https://accounts.google.com https://*.clarity.ms; style-src 'self' 'unsafe-inline' http://ada-dating-footer.internal:10000; default-src 'self'; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' data: https://fonts.gstatic.com https://j4l.com; connect-src 'self' http://ada-dating-footer.internal:10000 https://g.j4l.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://googleads.g.doubleclick.net https://analytics.google.com https://www.googleadservices.com https://www.googletagmanager.com https://connect.facebook.net https://client-logger.j4l.com https://www.facebook.com https://bat.bing.com https://gtm-pwg9xl7-mtrlz.uc.r.appspot.com https://accounts.google.com https://www.google.com https://static.ads-twitter.com https://*.clarity.ms https://www.google.com.au https://www.google.co.uk https://www.google.co.za https://my.j4l.com; frame-src https://g.j4l.com https://www.googletagmanager.com https://www.google.com https://accounts.google.com https://g.j4l.com https://www.facebook.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com 1
default-src 'self'; script-src 'self' 'unsafe-eval'; script-src-elem 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; style-src-attr 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data:; object-src 'none'; frame-ancestors 'none'; report-to csp-endpoint; report-uri https://www.llb.li/rest/weak/logs/csp-reports 1
font-src *.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com seal.digicert.com assurance.sysnetgs.com mylivechat.com *.mylivechat.com flagpedia.net *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com seal.digicert.com assurance.sysnetgs.com mylivechat.com a5.mylivechat.com libs.na.bambora.com cdn.jsdelivr.net maps.googleapis.com *.googletagmanager.com *.googleadservices.com *.google.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com a5.mylivechat.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com *.gstatic.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com seal.digicert.com assurance.sysnetgs.com mylivechat.com a5.mylivechat.com libs.na.bambora.com www.gstatic.com maps.googleapis.com *.google-analytics.com *.analytics.google.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.googletagmanager.com https://*.google-analytics.com https://cc.cdn.civiccomputing.com https://js.jotform.com https://webform.vlerick.com https://www.eventbrite.co.uk https://maps.googleapis.com https://connect.facebook.net https://fast.wistia.com http://fast.wistia.com https://*.kontent.ai https://snap.licdn.com https://*.youtube.com https://www.redditstatic.com https://bat.bing.com https://p.teads.tv https://www.clickcease.com https://analytics.tiktok.com https://tags.srv.stackadapt.com https://plausible.io https://googleads.g.doubleclick.net https://*.hotjar.com https://vercel.live; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://tags.srv.stackadapt.com https://*.hotjar.com; img-src 'self' data: blob: https://*.cloudfront.net https://*.vlerick.com https://profile-images.xing.com http://lh4.ggpht.com https://www.google-analytics.com https://www.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com https://i.ytimg.com https://*.facebook.com https://*.linkedin.com https://expertphotography.com https://alb.reddit.com https://bat.bing.net https://bat.bing.com https://www.google.com https://www.google.be https://*.analytics.google.com https://t.teads.tv https://*.g.doubleclick.net https://*.hotjar.com https://analytics.tiktok.com; font-src 'self' data: https://fonts.gstatic.com https://*.hotjar.com; connect-src 'self' https://*.algolia.net https://*.algolianet.com https://*.kontent.ai https://*.vlerick.com https://maps.googleapis.com https://vimeo.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.sentry.io https://cc.cdn.civiccomputing.com https://js.jotform.com https://fast.wistia.com https://connect.facebook.net https://apikeys.civiccomputing.com https://pixel-config.reddit.com https://*.doubleclick.net https://*.googlesyndication.com https://www.google.com https://px.ads.linkedin.com https://bat.bing.com https://bat.bing.net https://tags.srv.stackadapt.com https://analytics.tiktok.com https://*.teads.tv https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://plausible.io https://analytics.tiktok.com https://*.tiktokw.us https://business-api.tiktok.com https://analytics-sg.tiktok.com; frame-src 'self' https://app.kontent.ai https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://fast.wistia.com https://player.simplecast.com https://www.google.com https://maps.google.com https://www.eventbrite.co.uk https://calendly.com https://*.calendly.com https://js.jotform.com https://form.jotform.com https://webform.vlerick.com https://ssgtm.vlerick.com https://vercel.live https://www.facebook.com; media-src 'self' blob: https://www.youtube.com https://player.vimeo.com https://fast.wistia.com; object-src 'none'; base-uri 'self'; form-action 'self' https://js.jotform.com https://form.jotform.com https://webform.vlerick.com https://*.vlerick.com https://www.facebook.com; frame-ancestors 'self' https://*.vlerick.com https://app.kontent.ai; worker-src 'self' blob:; manifest-src 'self'; report-uri https://758ebe35b3baf27e471a441ecaa56532.report-uri.com/r/d/csp/reportOnly 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://*.googlesyndication.com https://www.googletagmanager.com https://*.googletagservices.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com; font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com; img-src 'self' data: blob: https://nbg1.your-objectstorage.com https://core.thresholdx.net https://*.googlesyndication.com https://*.doubleclick.net https://img.youtube.com; connect-src 'self' https://core.thresholdx.net wss://core.thresholdx.net https://forum.thresholdx.net https://*.googlesyndication.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://*.googlesyndication.com https://googleads.g.doubleclick.net; media-src 'self' blob: https://nbg1.your-objectstorage.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://forum.thresholdx.net; frame-ancestors 'self'; report-uri https://core.thresholdx.net/csp-report 1
object-src 'none';base-uri 'self';script-src 'nonce-BEWLlwLbmHGAKSI07f4G5w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com www.eqwep.com data: checkout.tabby.ai widgets.tabby.ai cdn.tabby.ai fonts.googleapis.com storage.googleapis.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com js.stripe.com secure.livechatinc.com b.stripecdn.com newassets.hcaptcha.com m.stripe.network checkout.tabby.ai https://www.googletagmanager.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.eqwep.com www.facebook.com cdn-cookieyes.com checkout.tabby.ai widgets.tabby.ai cdn.tabby.ai fonts.googleapis.com storage.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.disqus.com *.klevu.com *.ksearchnet.com https://meetanshi.com/media/logo.png connect.facebook.net graph.facebook.com business.facebook.com https://redchamps.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js https://maps.googleapis.com www.eqwep.com js.klevu.com static.klaviyo.com static-tracking.klaviyo.com static.cloudflareinsights.com static.hotjar.com connect.facebook.net cdn.livechatinc.com script.hotjar.com cdn-cookieyes.com api.livechatinc.com js.stripe.com b.stripecdn.com applepay.cdn-apple.com hcaptcha.com m.stripe.network checkout.tabby.ai widgets.tabby.ai cdn.segment.com cdn.sift.com score.jcsc.online seondf.com deviceinf.com getdeviceinf.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.disqus.com *.ksearchnet.com https://z.moatads.com https://cdn.jsdelivr.net *.avada.io www.facebook.com graph.facebook.com business.facebook.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com www.eqwep.com b.stripecdn.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com https://cdn.jsdelivr.net *.fontawesome.com *.stripe.network *.stripecdn.com *.amazon.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com statsjs.klevu.com www.eqwep.com pagead2.googlesyndication.com cdn-cookieyes.com content.hotjar.io js.stripe.com a.klaviyo.com merchant-ui-api.stripe.com api.stripe.com api.hcaptcha.com m.stripe.com checkout.tabby.ai widgets.tabby.ai cdn.segment.com api.segment.com api.segment.io api.amplitude.com *.seondfresolver.com *.deviceinfresolver.com *.getdeviceinfresolver.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.klevu.com *.ksearchnet.com https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src www.eqwep.com pagead2.googlesyndication.com log.cookieyes.com ws.hotjar.com api.livechatinc.com *.seondnsresolve.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-ancestors 'none';block-all-mixed-content;default-src 'none';script-src 'none';style-src 'none';object-src 'none';frame-src 'none';child-src 'none';img-src 'none';font-src 'none';connect-src 'none';manifest-src 'none';base-uri 'none';form-action 'none';media-src 'none';prefetch-src 'none';worker-src 'none';report-uri https://sentec.report-uri.com/r/d/csp/reportOnly; 1
default-src 'self'; script-src 'nonce-REX3L6atf8ValZMbpoeayw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
font-src *.cloudflare.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com https://fonts.gstatic.com *.bootstrapcdn.com data: *.fontawesome.com https://www.google.com https://www.gstatic.com https://cdnjs.cloudflare.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com *.twitter.com *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com assets.braintreegateway.com cdn.dnky.co webchat.dotdigital.com *.twitter.com https://www.google.com https://www.google.co.in https://www.facebook.com *.youtube.com *.trustpilot.com *.yotpo.com *.addthis.com https://connect.facebook.net 'self'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com validator.swagger.io *.cloudflare.com https://static.pay.nl *.gstatic.com *.google.com *.google.nl *.google.co.in https://www.facebook.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.connect.facebook.net https://stats.g.doubleclick.net *.youtube.com https://d.adroll.com https://pixel.advertising.com https://pixel.rubiconproject.com https://simage2.pubmatic.com https://dsum-sec.casalemedia.com https://ads.yahoo.com https://eb2.3lift.com https://sync.outbrain.com https://trc.taboola.com https://x.bidswitch.net/sync https://ib.adnxs.com https://idsync.rlcdn.com https://us-u.openx.net https://ups.analytics.yahoo.com https://segments.company-target.com https://sync.tidaltv.com *.pay.nl *.yotpo.com solwininfotech.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com js.braintreegateway.com cdn-scripts.signifyd.com www.youtube.com r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net cdn.dnky.co api.comapi.com webchat.dotdigital.com *.cloudflare.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.googleadservices.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://connect.facebook.net *.paypalobjects.com *.paypal.com https://chimpstatic.com *.googletagmanager.com *.youtube.com https://s.adroll.com https://d.adroll.com https://d.adroll.mgr.consensu.org *.bootstrapcdn.com *.trustpilot.com googleads.g.doubleclick.net s7.addthis.com *.googleapis.com https://cdnjs.cloudflare.com *.yotpo.com https://z.moatads.com https://v1.addthisedge.com *.addthis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.cloudflare.com *.googleapis.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.youtube.com *.bootstrapcdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com payments.sandbox.braintree-api.com origin-analytics-sand.sandbox.braintree-api.com assets.braintreegateway.com r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net api.comapi.com webchat.dotdigital.com *.google-analytics.com https://stats.g.doubleclick.net *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.google.com *.google.co.in *.facebook.com stats.g.doubleclick.net translations.piggy.eu maps.googleapis.com ekr.zdassets.com/ http://dpm.demdex.net https://www.google.com https://www.gstatic.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.e-tailors.nl/; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; frame-ancestors 'none'; object-src 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' https://mc.yandex.ru https://mc.webvisor.org https://mc.webvisor.com; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: blob: https://images.unsplash.com https://mc.yandex.ru https://mc.webvisor.org https://mc.webvisor.com https://admin-site.botica.pro; connect-src 'self' https://mc.yandex.ru https://mc.webvisor.org https://mc.webvisor.com https://admin-site.botica.pro; frame-src 'self' https://mc.yandex.ru https://mc.webvisor.org https://mc.webvisor.com; media-src 'self'; worker-src 'self' blob:; manifest-src 'self' 1
font-src *.paypalobjects.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.clearpay.co.uk *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.cookiebot.com *.doubleclick.net *.pinterest.com *.pinterest.co.uk *.bat.bing.com *.paypalobjects.com *.reviews.io *.reviews.co.uk *.pinterdev.com commerce-app.pintergration.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.afterpay.com *.clearpay.co.uk *.trackedlink.net www.feedoptimise.com cdn.feedoptimise.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.bing.com *.doubleclick.net *.ometria.com *.pinterest.com *.pinterest.co.uk *.bat.bing.com *.connect.facebook.net *.clarity.ms *.google.com *.google.co.uk *.googletagmanager.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.pinterdev.com *.pinimg.com commerce-app.pintergration.com *.gstatic.com *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.afterpay.com *.clearpay.co.uk *.squarecdn.com https://hbiq.net *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com www.feedoptimise.com cdn.feedoptimise.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.bing.com *.cookiebot.com *.dwin1.com *.googleoptimize.com *.ometria.com *.pinimg.com *.trustpilot.com *.connect.facebook.net *.bat.bing.com *.d.impactradius-event.com *.zdassets.com *.clarity.ms *.pinterest.com *.pinterest.co.uk *.impactcdn.com *.grahamandgreen.pxf.io grahamandgreen.pxf.io cdn.jsdelivr.net *.reviews.io *.reviews.co.uk *.pinterdev.com commerce-app.pintergration.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.afterpay.com/ *.squarecdn.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com unsafe-inline assets.braintreegateway.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.fontawesome.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.clearpay.co.uk *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.cookiebot.com *.doubleclick.net *.ometria.com *.pinterest.com *.pinterest.co.uk *.trustpilot.com *.clarity.ms *.grahamandgreen.pxf.io grahamandgreen.pxf.io *.bing.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.pinterdev.com commerce-app.pintergration.com *.google-analytics.com *.facebook.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com static.rayher.com https://static.unzer.com https://applepay.cdn-apple.com https://widgets.trustedshops.com https://static-v2.unzer.com data: 'self' 'unsafe-inline'; form-action *.cardinalcommerce.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com *.cardinalcommerce.com *.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de assets.braintreegateway.com pay.google.com * *.pinterest.com *.googletagmanager.com https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://static-cc.test.unzer.com https://h.online-metrix.net https://google.com/pay https://pay.google.com/ https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ https://sandbox.clicktopay.auth.visa.com https://clicktopay.visa.com https://sandbox.secure.checkout.visa.com https://secure.checkout.visa.com *.weltpixel.com https://src.mastercard.com https://sandbox.src.mastercard.com https://static-cc.unzer.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net www.paypalobjects.com *.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.bird.eu ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com assets.braintreegateway.com *.clarity.ms *.rayher.com *.bing.com https://*.bing.net *.pinterest.com *.facebook.com https://www.google.com https://www.google.de https://lantern.roeye.com https://static.unzer.com *.online-metrix.net https://www.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com https://src.mastercard.com https://sandbox.src.mastercard.com https://static-v2.unzer.com https://pay.google.com *.gstatic.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypalobjects.com *.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com js.braintreegateway.com assets.braintreegateway.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com static.rayher.com *.clarity.ms *.bing.com connect.facebook.net *.pinimg.com www.dwin1.com *.taboola.com https://lantern.roeyecdn.com https://matomo.rayher.com https://widerrufbutton.net https://static.unzer.com https://applepay.cdn-apple.com https://pay.google.com https://code.jquery.com https://h.online-metrix.net https://h64.online-metrix.net https://static-v2.unzer.com/v2/ui-components/ https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://src.mastercard.com https://sandbox.src.mastercard.com https://www.googletagmanager.com tagmanager.google.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com *.fontawesome.com assets.braintreegateway.com static.rayher.com https://sandbox.src.mastercard.com https://static-v2.unzer.com/v2/ui-components/ https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://src.mastercard.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.cardinalcommerce.com www.paypalobjects.com *.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.google.com google.com *.rayher.com *.clarity.ms https://*.googlesyndication.com *.pinterest.com *.taboola.com https://*.g.doubleclick.net *.bing.com https://*.bing.net https://*.facebook.com https://widerrufbutton.net https://*.googleapis.com https://*.mapbox.com https://api.unzer.com https://api.heidelpay.com https://sbx-api.heidelpay.com https://sbx-api.unzer.com https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://h.online-metrix.net https://h64.online-metrix.net https://google.com/pay https://www.google.com/pay https://pay.google.com https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ https://static-cc.test.unzer.com https://static-v2.unzer.com/v2/ui-components/ *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://src.mastercard.com https://sandbox.src.mastercard.com https://static-cc.unzer.com https://*.ingest.de.sentry.io https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-Xb-38ORGvFT9dKtElqz4KQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' *.salesforce.com 'report-sample'; style-src *.force.com 'unsafe-inline' 'self' *.salesforce.com *.visualforce.com:*; img-src *.force.com slack-imgs-mil-dev.com a.static.lightning.force.com *.slack.com 'self' *.slack-imgs.com slack-imgs-gov.com *.salesforce-experience.com *.slack-edge-gov.com *.my-salesforce.com slack-imgs-gov-dev.com *.slack-edge.com *.cloudinary.com slack-mil-dev.com static.lightning.force.com *.slack-gov.com *.slack-gov-dev.com blob: *.slack-edge.mil b.static.lightning.force.com slack-imgs.com static.sandbox.lightning.force.com *.sfdcstatic.com *.salesforce.com *.twimg.com slack-imgs.mil data:; media-src 'self' *.salesforce.com; frame-src *.force.com *.quip.com *.arkoselabs.com 'self' *.youtube-nocookie.com *.youtube.co.uk *.cybersource.com *.youtube.com.br *.youtube.es *.salesforce-experience.com *.salesforceliveagent.com *.adis.ws *.sfdcfc.net *.youtube.ca *.youtube.ie *.cloudinary.com *.vidyard.com *.vimeo.com *.youtube.jp bcove.video *.youtube.fr *.forceusercontent.com *.brightcove.net *.youtube.com *.wistia.net *.salesforce.com *.youtube.nl *.youtube.pl; font-src *.force.com 'self' *.salesforce.com blob: data:; connect-src 'self' *.amazonaws.com *.salesforce.com https://cdn.cbweb.code-builder.platform.salesforce.com api.salesforce.com wss://*.slack-gov-dev.com wss://*.api.salesforce.com *.api.salesforce.com wss://*.slack.com wss://*.slack-gov.com wss://api.salesforce.com; report-to sfdc-csp-ep; report-uri https://csp-report.force.com/_/ContentDomainCSPNoAuth?type=mydomain 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://connect.facebook.net https://js.stripe.com https://www.paypal.com https://cdn1.affirm.com https://cdn1-sandbox.affirm.com https://maps.googleapis.com; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://m.stripe.network https://www.paypal.com https://*.affirm.com https://pay.google.com https://www.google.com/shopping/merchantverse/; connect-src 'self' https://api.stripe.com https://m.stripe.network https://r.stripe.com https://www.paypal.com https://*.affirm.com https://www.google-analytics.com https://maps.googleapis.com https://dev-skaraudio.ngrok.io wss: ws:; img-src 'self' data: blob: https://www.google-analytics.com https://www.googletagmanager.com https://www.facebook.com https://skaraudio.com https://www.skaraudio.com https://dev-skaraudio.ngrok.io https://skar-audio-review-images.s3.amazonaws.com https://skar-audio-review-images.s3.us-east-1.amazonaws.com https://skar-audio-product-images.s3.amazonaws.com https://skar-audio-product-images.s3.us-east-1.amazonaws.com https://skar-audio-channel-product-images.s3.amazonaws.com https://user-submitted-media.s3.amazonaws.com https://user-submitted-media.s3.us-east-1.amazonaws.com https://skar-audio-dealer-docs.s3.amazonaws.com https://emailstaticimages.s3.amazonaws.com https://email-asset-images.s3.amazonaws.com https://d3d71ba2asa5oz.cloudfront.net https://caraudiodistributors.com https://www.caraudiodistributors.com https://cdn.shopify.com https://judgeme.imgix.net; style-src 'self' 'unsafe-inline'; font-src 'self' data:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.lpsnmedia.net https://*.clarity.ms https://c.bing.com https://pennongroup.tfaforms.net; connect-src https://cdn.cookielaw.org https://privacyportal-de.onetrust.com https://geolocation.onetrust.com https://*.southwestwater.co.uk https://*.bournemouthwater.co.uk https://*.seswater.co.uk https://*.eastsurreyholdings.co.uk https://*.pennon-group.co.uk https://*.clarity.ms https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.googletagmanager.com https://*.google.com https://*.google.co.uk https://*.g.doubleclick.net https://pagead2.googlesyndication.com wss://*.liveperson.net https://*.liveperson.net https://*.lpsnmedia.net https://*.tiles.mapbox.com https://api.mapbox.com https://events.mapbox.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://www.facebook.com https://connect.facebook.net https://*.reciteme.com https://*.aptrinsic.com https://d1igp3oop3iho5.cloudfront.net/v2/ https://api.eu1.odp.optimizely.com https://*.optimizely.com https://cdn.segment.com https://api.segment.io https://js.userflow.com https://cdn.userflow.com https://e.userflow.com https://e.eu.userflow.com wss://e.userflow.com wss://e.eu.userflow.com https://stats.g.doubleclick.net/ https://api.addressy.com https://*.getwaterfit.co.uk https://*.getwaterfit.com https://api.what3words.com https://pennongroup.tfaforms.net https://services.postcodeanywhere.co.uk/ https://js.monitor.azure.com https://*.applicationinsights.azure.com https://dc.services.visualstudio.com/v2/track https://api.ideal-postcodes.co.uk https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/ https://cdn.jsdelivr.net/npm/feather-icons/dist/ https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/ https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/; frame-src 'self' https://www.googletagmanager.com https://*.lpsnmedia.net https://*.liveperson.net https://player.vimeo.com/ https://www.youtube-nocookie.com/ https://www.facebook.com/ https://www.bing.com/ https://experience.arcgis.com/ https://survey123.arcgis.com/ https://environment.data.gov.uk/ https://app.powerbi.com/ https://api.mapbox.com/ https://dashboard.find.episerver.net/ https://cdn.userflow.com https://challenges.cloudflare.com https://app.actionfunder.org/; media-src https://*.reciteme.com blob: 'self' https://*.lpsnmedia.net https://*.southwestwater.co.uk https://blob.userflow.com https://cdn.userflow.com https://storage.googleapis.com/studio1-prod-blob/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.hotjar.com https://connect.facebook.net https://*.googletagmanager.com https://googletagmanager.com https://www.google.com https://tagmanager.google.com https://*.clarity.ms https://www.youtube.com https://cdn.cookielaw.org https://*.aptrinsic.com https://d1igp3oop3iho5.cloudfront.net/v2/ https://*.optimizely.com https://cdn.segment.com https://js.userflow.com https://cdn.userflow.com https://api.useberry.com https://*.lpsnmedia.net https://*.liveperson.net https://*.reciteme.com/ https://*.getwaterfit.co.uk https://*.getwaterfit.com https://api.mapbox.com https://pennongroup.tfaforms.net https://services.postcodeanywhere.co.uk/js/ https://BOURN11128.pcapredict.com https://js.monitor.azure.com https://challenges.cloudflare.com https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/; style-src https://cdn.cookielaw.org 'unsafe-inline' https://*.hotjar.com 'self' https://*.reciteme.com https://*.aptrinsic.com fonts.googleapis.com https://js.userflow.com https://cdn.userflow.com https://*.lpsnmedia.net https://*.liveperson.net https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com https://api.mapbox.com https://pennongroup.tfaforms.net https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.4.0/css/ https://services.postcodeanywhere.co.uk/css/ https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/ https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/ https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/; img-src 'self' https://cdn.cookielaw.org https://www.facebook.com https://*.clarity.ms https://c.bing.com data: https://i.ytimg.com blob: https://*.googletagmanager.com https://googletagmanager.com https://*.google-analytics.com https://ssl.gstatic.com https://www.gstatic.com https://www.google.co.uk/ads/ga-audiences https://*.g.doubleclick.net https://*.google.com https://*.google.co.uk https://*.hotjar.com https://*.reciteme.com https://*.aptrinsic.com storage.googleapis.com https://api.eu1.odp.optimizely.com https://*.optimizely.com https://js.userflow.com https://cdn.userflow.com https://blob.userflow.com https://storage.googleapis.com/studio1-prod-blob/ https://*.lpsnmedia.net https://*.liveperson.net https://*.southwestwater.co.uk https://*.bournemouthwater.co.uk https://*.seswater.co.uk https://*.eastsurreyholdings.co.uk https://pennongroup.tfaforms.net https://services.postcodeanywhere.co.uk/ https://*.getwaterfit.co.uk https://*.getwaterfit.com; font-src 'self' data: https://*.hotjar.com https://*.reciteme.com https://*.cloudfront.net fonts.gstatic.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.4.0/; worker-src blob: 'self'; child-src blob:; form-action 'self' https://payments.securetrading.net/process/payments/details https://pennongroup.tfaforms.net https://www.facebook.com/tr/; frame-ancestors 'self' https://app.useberry.com; base-uri 'self'; object-src 'none'; report-uri https://report.centralcsp.com/6a2ab6e261eb01ab5326ac3f; report-to csp-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-1FFN4EQjh7BccGEbfmif_w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
prefetch-src *.bing.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.tiktok.com tiktok.com maxcdn.bootstrapcdn.com *.afterpay.com *.cloudflare.com *.espssl.com *.fontshare.com *.jsdelivr.net *.migaku.com *.minnetonkamoccasin.com *.qantas.com *.rakuten.com sc-static.net *.slant.co unpkg.com *.userway.org data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com https://plumrocket.com 'self' connect.facebook.net graph.facebook.com business.facebook.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.sharethis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com bytedance: sslocal: *.certcapture.com https://plumrocket.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com landofcoder.com *.tiktok.com https://*.online-metrix.net https://imgs.signifyd.com *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.sharethis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com *.certcapture.com *.cudasvc.com *.blockboardtech.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klevu.com *.ksearchnet.com *.tiktok.com flagpedia.net https://imgs.signifyd.com https://*.online-metrix.net *.cluepixel.com *.6g2d4pn2yqc42.ent.platform.sh *.adnxs.com *.adsrvr.org *.afterpay.com *.bidswitch.net *.bing.com *.casalemedia.com *.clarity.ms *.cookielaw.org *.criteo.com *.criteo.net *.curalate.com *.doubleclick.net *.espssl.com *.facebook.com *.facebook.net *.ggpht.com *.googleadservices.com www.google.ad www.google.ae www.google.al www.google.am www.google.as www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cd www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.cn www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.st www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu *.google.com google.com *.googlesyndication.com *.googletagmanager.com id5-sync.com *.listrakbi.com *.minnetonkamoccasin.com *.online-metrix.net *.pinterest.com *.rlcdn.com *.rubiconproject.com *.snapchat.com *.userway.org *.yotpo.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.sharethis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com *.certcapture.com *.cudasvc.com *.blockboardtech.com *.moonshot-ai.com *.googletagmanager.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.klevu.com *.ksearchnet.com landofcoder.com https://cdn.jsdelivr.net *.tiktok.com maps.googleapis.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net https://js.klevu.com *.cluepixel.com *.adobedtm.com *.adobe.net *.bing.com *.blackfire.io *.clarity.ms *.cloudflare.com *.cookielaw.org *.criteo.com *.criteo.net *.curalate.com d10lpsik1i8c69.cloudfront.net *.doubleclick.net *.facebook.net *.googleadservices.com *.google-analytics.com *.googlesyndication.com googletagmanager.com *.id5-sync.com *.jsdelivr.net *.klevu.com *.listrakbi.com *.listrak.com localhost *.mczbf.com *.minnetonkamoccasin.com *.nimblecapture.com *.online-metrix.net *.pinimg.com *.pinterest.com sc-static.net *.snapchat.com unpkg.com *.userway.org *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.sharethis.com assets.braintreegateway.com *.certcapture.com *.cudasvc.com *.blockboardtech.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.tiktok.com tiktok.com maxcdn.bootstrapcdn.com *.gstatic.com https://statsjs.klevu.com https://js.klevu.com *.afterpay.com *.cloudflare.com *.googleapis.com *.googletagmanager.com *.listrakbi.com *.minnetonkamoccasin.com *.typekit.net *.userway.org *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com *.bing.com *.curalate.com *.googleapis.com *.google.com *.gstatic.com *.paypal.com *.userway.org *.youtube.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src *.tiktok.com tiktok.com *.minnetonkamoccasin.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com *.sharethis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com *.certcapture.com *.cudasvc.com *.blockboardtech.com *.moonshot-ai.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klevu.com *.ksearchnet.com landofcoder.com *.tiktok.com www.gstatic.com maps.googleapis.com https://imgs.signifyd.com *.cluepixel.com *.adobedc.net *.adobedtm.com *.adobe.net *.adsrvr.org *.amplitude.com *.bing.com *.blackfire.io *.clarity.ms *.cookielaw.org *.criteo.com *.criteo.net *.curalate.com *.doubleclick.net *.espssl.com *.facebook.com *.googleadservices.com www.google.ca www.google.co.jp www.google.co.kr www.google.com.pk www.google.com.vn www.google.co.uk www.google.de *.googlesyndication.com *.gstatic.com *.listrakbi.com *.listrak.com localhost *.luckyorange.net *.mczbf.com *.minnetonkamoccasin.com *.nimblecapture.com *.onetrust.com *.pinimg.com *.pinterest.com *.rlcdn.com *.samsung.com sc-static.net *.snapchat.com unpkg.com *.userway.org 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src *.afterpay.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; base-uri *.criteo.com *.doubleclick.net *.google.com *.klevu.com *.onetrust.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; report-uri https://2d02ba86-f55d-42ab-9b05-087fb2c163a0.sansec.watch/; report-to report-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-EGd3YGCifE7MRM4heA3pTg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src cash-f.squarecdn.com 'self' data: *.gstatic.com *.jsdelivr.net *.zopim.com *.fontawesome.com maxcdn.bootstrapcdn.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * betalen.rabobank.nl bobmail.nl *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ * *.addthis.com *.demdex.net *.google.com/ https://*.dpdconnect.nl *.weltpixel.com https://www.googletagmanager.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io * *.amazonaws.com bat.bing.net *.google.nl *.googlesyndication.com imgsct.cookiebot.com *.magmodules.eu https://snm-portal.com *.zopim.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com *.addthis.com *.addthisedge.com bat.bing.com *.clarity.ms consent.cookiebot.com consentcdn.cookiebot.com *.jsdelivr.net *.moatads.com *.varify.io *.zdassets.com *.zopim.com https://*.dpdconnect.nl http://www.googletagmanager.com/ https://www.googletagmanager.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.sendcloud.sc https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cash.app *.googleapis.com *.jsdelivr.net *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com *.sendcloud.sc tagmanager.google.com https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.zdassets.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com * *.addthis.com bat.bing.com bat.bing.net consentcdn.cookiebot.com *.google-analytics.com *.googlesyndication.com cdn.jsdelivr.net *.zdassets.com dutchexpatshop.zendesk.com wss://widget-mediator.zopim.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com https://www.google-analytics.com *.pay.nl 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.dutchbabyshop.com/paynl/csp/report; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: maxcdn.bootstrapcdn.com https://*.hotjar.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://www.facebook.com https://payflowlink.paypal.com https://www.mollie.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com js.mollie.com https://ec114.nrcwebwinkel.nl c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.nrcwebwinkel.nl https://www.facebook.com https://web.facebook.com https://bid.g.doubleclick.net https://payflowlink.paypal.com https://consentcdn.cookiebot.com https://consentcdn.cookiebot.eu https://www.googletagmanager.com https://td.doubleclick.net https://pagead2.googlesyndication.com https://www.mollie.com https://*.varify.io https://csxd.contentsquare.net 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: maps.googleapis.com maps.gstatic.com *.googleapis.com https://images.unsplash.com flagpedia.net https://www.mollie.com www.google.com.ua https://ec114.nrcwebwinkel.nl www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://imgsct.cookiebot.com https://imgsct.cookiebot.eu https://static-na.payments-amazon.com https://www.paypalobjects.com https://m.media-amazon.com https://bat.bing.com https://www.facebook.com https://www.google.com https://google.com https://www.google.co.in https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com *.fastcloudnetwork.com https://*.hotjar.com https://dev.visualwebsiteoptimizer.com https://load.sst.nrcwebwinkel.nl https://*.varify.io https://*.contentsquare.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ js.mollie.com https://ec114.nrcwebwinkel.nl js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com consent.cookiebot.com consentcdn.cookiebot.com consent.cookiebot.eu consentcdn.cookiebot.eu https://bat.bing.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com/ https://*.voyado.com https://*.hotjar.com https://*.redeal.se https://*.privacy-center.org/ https://www.mollie.com https://dev.visualwebsiteoptimizer.com https://js-agent.newrelic.com https://app.varify.io https://load.sst.nrcwebwinkel.nl https://*.varify.io https://*.billygrace.com https://bgmin.cdn.billygrace.com https://*.contentsquare.net https://t.contentsquare.net https://app.contentsquare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.gstatic.com assets.braintreegateway.com https://*.hotjar.com https://*.voyado.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com www.gstatic.com https://ec114.nrcwebwinkel.nl api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.googleadservices.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://consentcdn.cookiebot.com https://consent.cookiebot.com https://consentcdn.cookiebot.eu https://consent.cookiebot.eu https://*.voyado.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://dev.visualwebsiteoptimizer.com https://www.mollie.com https://*.privacy-center.org https://bam.eu01.nr-data.net https://bam.nr-data.net https://*.nr-data.net https://sst.nrcwebwinkel.nl https://load.sst.nrcwebwinkel.nl https://*.varify.io https://*.billypx.com https://b.billypx.com https://*.redeal.se https://*.contentsquare.net https://*.contentsquare.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src blob:; font-src *.fontawesome.com maxcdn.bootstrapcdn.com fonts.gstatic.com *.kxcdn.com *.yotpo.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://plumrocket.com *.facebook.com *.google.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com https://plumrocket.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de www.facebook.com www.google.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://redchamps.com *.cdninstagram.com *.googleadservices.com www.googletagmanager.com *.doubleclick.net *.facebook.com *.google-analytics.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.gstatic.com *.fbcdn.net *.google.pl script.googleusercontent.com googleads.g.doubleclick.net *.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com *.avada.io connect.facebook.net www.googletagmanager.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.googleapis.com *.google.com furgonetka.pl *.gstatic.com cdn.ampproject.org googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com googleads.g.doubleclick.net *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com secure.przelewy24.pl google-analytics.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com www.google-analytics.com stats.g.doubleclick.net www.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com https://www.paypal.com/xoplatform/logger/api/logger *.google.com *.google-analytics.com *.analytics.google.com *.googleadservices.com *.doubleclick.net *.facebook.com cdn.ampproject.org *.kxcdn.com *.instagram.com www.googleadservices.com script.google.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self'; report-uri https://pointsbet.com.au/_report/csp; script-src 'nonce-NjgxZTYyODQ4Mg/OTMzNTMzMzZmZDI3NDU=' 'self' 'unsafe-eval' 'unsafe-inline' 'strict-dynamic' http:; style-src 'self' 'unsafe-inline' https://*.hotjar.com https://use.fontawesome.com https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com https://heapanalytics.com https://*.googletagmanager.com https://paywithmybank.com https://*.sportradar.com https://*.pointsbet.com https://*.pointsbet.com.au https://pointsbet.com https://www.gstatic.com https://pointsbet.com.au:*; object-src 'none'; base-uri 'self'; connect-src 'self' https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.braze.com https://api.segment.io https://bat.bing.com/actionp/0 https://bpoint.linkly.com.au https://cdn.segment.com https://dc.services.visualstudio.com https://heapanalytics.com https://obs.cheqzone.com/ct https://*.g.doubleclick.net https://us-central1-adaptive-growth.cloudfunctions.net https://*.google-analytics.com https://*.googletagmanager.com https://ekr.zdassets.com https://*.zendesk.com https://api.smooch.io https://media.smooch.io https://zendesk-eu.my.sentry.io wss://api.smooch.io https://*.zopim.com wss://*.zopim.com wss://*.zendesk.com https://*.jwpsrv.com https://*.jwplayer.com https://*.jwpltx.com https://www.facebook.com https://www.redditstatic.com https://*.reddit.com https://prompts.maze.co *.braintree-api.com api.braintreegateway.com client-analytics.braintreegateway.com *.cardinalcommerce.com https://*.akamaized.net https://*.sportradar.com https://*.snapchat.com https://*.paypal.com https://clientresauprodyol0stntm.blob.core.windows.net https://*.pointsbet.com https://*.pointsbet.com.au wss://*.pointsbet.com wss://*.pointsbet.com.au https://pointsbet.com https://analytics.twitter.com https://t.co https://www.googleadservices.com https://gateway.pmnts.io https://pixels.spotify.com ws://localhost https://*.googleapis.com:* https://insight.adsrvr.org:* https://analytics.tiktok.com:* cloudflareinsights.com https://ad.doubleclick.net:* https://*.google.com:* https://*.google.co.us:* https://*.google.com.us:* https://*.google.us:* https://pointsbet.com.au:* https://*.tiktokw.us:* wss://*.sportradar.com http://localhost:* https://js.monitor.azure.com https://px.adentifi.com; font-src 'self' https://applepay.cdn-apple.com https://*.hotjar.com https://use.fontawesome.com https://heapanalytics.com https://fonts.gstatic.com data: chrome-extension: ms-browser-extension https://cdn-uicons.flaticon.com https://cdnjs.cloudflare.com moz-extension; frame-src 'self' * https://pointsbet.com.au:*; img-src 'self' blob: data: https://*.hotjar.com https://*.g.doubleclick.net https://*.fls.doubleclick.net https://ad.doubleclick.net https://analytics.twitter.com https://bat.bing.com https://heapanalytics.com https://t.co https://tr.snapchat.com https://google.com https://*.google-analytics.com https://googletagmanager.com https://*.googletagmanager.com https://ade.googlesyndication.com https://ssl.gstatic.com https://www.gstatic.com https://static.zdassets.com https://*.zendesk.com https://media.smooch.io https://*.zdusercontent.com https://v2assets.zopim.io https://*.adentifi.com https://*.jwplayer.com https://*.jwpltx.com https://www.facebook.com https://alb.reddit.com assets.braintreegateway.com *.paypal.com https://*.sportradar.com https://fonts.gstatic.com www.paypalobjects.com https://*.jwpsrv.com appboy-images.com braze-images.com cdn.braze.eu https://*.pointsbet.com.au https://pointsbet.com http://*.pointsbet.com https://analytics.tiktok.com https://i.ytimg.com https://www.gravatar.com https://*.google.com:* https://*.google.co.us:* https://*.google.com.us:* https://*.google.us:* https://pointsbet.com.au:* https://f.performlt.com https://clientresauprodyol0stntm.blob.core.windows.net https://www.googleadservices.com https://*.adsrvr.org:* https://*.tiktokw.us:* https://*.bidswitch.net:* https://play-lh.googleusercontent.com https://img1.niftyimages.com:*; manifest-src 'self'; media-src 'self' blob: https://*.jwpsrv.com https://*.akamaized.net https://static.zdassets.com https://*.jwplayer.com https://*.jwpltx.com https://ssl.gstatic.com data:; worker-src 'self' blob:; child-src 'self' *.paypal.com assets.braintreegateway.com; form-action *; report-to csp-report; 1
object-src  'none'; connect-src 'self' *.devilsfilm.com *.famedigital.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.devilsfilm.com *.famedigital.com join.gammasecure.com; script-src 'self' *.devilsfilm.com *.famedigital.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.devilsfilm.com *.famedigital.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
object-src 'none';base-uri 'self';script-src 'nonce-zm7YgOs3uIgWsCF8v8RZLg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https://*.cointr.com https://cointr.com ;script-src 'self' 'unsafe-eval' 'report-sample' https://static.ads-twitter.com https://www.gstatic.com https://accounts.google.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.googletagmanager.com https://static.zdassets.com https://static.geetest.com https://*.zendesk.com https://static.geevisit.com https://dn-staticdown.qbox.me 'nonce-45b50bccf8aab80d82cf6a8b3d227ebd' ; style-src 'self' 'unsafe-inline' https://*.cointr.com https://cointr.com https://fonts.googleapis.com https://accounts.google.com https://static.geetest.com; connect-src 'self' 'report-sample' blob: https://riskct.geetest.com https://event.clientgear.com https://region1.google-analytics.com https://wa.appsflyer.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://ekr.zdassets.com https://*.zendesk.com https://*.clarity.ms https://www.gstatic.com https://accounts.google.com https://firebase.googleapis.com https://firebaseinstallations.googleapis.com https://testimg.cointr.com wss://*.zendesk.com wss://api.smooch.io wss://stream.cointr.com wss://stream.cointr.com; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://img.cointr.com https://static.cointr.com https://at.alicdn.com ; frame-src 'self' 'report-sample' blob: data: https://www.youtube.com https://verify.amani.ai https://api.sumsub.com https://www.gstatic.com https://accounts.google.com; frame-ancestors 'self'; img-src 'self' 'report-sample' data: blob: https://img.cointr.com https://static.cointr.com https://www.cointr.com https://cointr.com https://www.google-analytics.com https://www.googletagmanager.com https://t.co https://analytics.twitter.com https://testimg.cointr.com https://testimg.bitgetapp.com http://testimg.bitgetapp.com https://*.zendesk.com https://static.zdassets.com https://*.zdusercontent.com https://media.smooch.io https://static.geetest.com ;worker-src 'self' blob: ; object-src 'none';base-uri 'self';form-action 'self';require-trusted-types-for 'script'; trusted-types default dompurify vue lit-html goog#html 'allow-duplicates';upgrade-insecure-requests; report-uri /v1/buried/log/cspSecurity; 1
default-src 'self' https://cdn.toontownrewritten.com; img-src 'self' data: https://*.google-analytics.com https://*.googletagmanager.com https://cdn.toontownrewritten.com; base-uri 'none'; style-src 'self' 'unsafe-inline' 'report-sample' https://cdn.toontownrewritten.com; script-src 'self' 'nonce-GErEuGOhSziu3MQhiTg3Bw' 'report-sample' 'unsafe-eval' https://cdn.toontownrewritten.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ static.cloudflareinsights.com; frame-src 'self' https://www.youtube.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; connect-src 'self' www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com www.google.com https://www.google.com/recaptcha/ cloudflareinsights.com; report-uri https://o4505066600398848.ingest.us.sentry.io/api/4505080130830336/security/?sentry_key=f8392665f42844aa8fef3d5d9ec40768 1
default-src 'none'; base-uri 'self'; connect-src 'self' https://n8n.gingermedia.biz https://plausible.gingermedia.biz https://umami.gingermedia.biz https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' data:; form-action 'self'; frame-ancestors 'self'; frame-src 'self' https://player.vimeo.com https://www.youtube-nocookie.com https://www.youtube.com; img-src 'self' data: blob: https://m.media-amazon.com; manifest-src 'self'; media-src 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' https://ads.adthrive.com https://btloader.com https://cafemedia-com.videoplayerhub.com https://plausible.gingermedia.biz https://umami.gingermedia.biz https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; worker-src 'self' blob: 1
default-src 'self'; object-src 'none'; script-src 'self' *.hubspot.com *.hubspotusercontent-na1.net cdn.jsdelivr.net adsplay.com.br www.chatbase.co platform.twitter.com static.addtoany.com cdn.socket.io cdn.datatables.net *.cloudfront.net *.airtable.com www.googleadservices.com bat.bing.com *.albacross.com www.youtube.com snap.licdn.com static.hotjar.com cdn.privacytools.com.br plugin.handtalk.me unpkg.com *.hubspot.net cdnjs.cloudflare.com www.gstatic.com script.hotjar.com www.google.com *.storylane.io try.abtasty.com code.jquery.com googleads.g.doubleclick.net www.google-analytics.com www.clarity.ms ajax.googleapis.com cdn.cookielaw.org *.facebook.net js.hs-analytics.net js.hs-banner.com js.hsadspixel.net js.hscollectedforms.net js.hsforms.net js.hsleadflows.net js.hubspot.com app.hubspot.com js.usemessages.com *.linkedin.com static.hsappstatic.net www.googletagmanager.com www.gupy.io sibforms.com 'strict-dynamic' 'nonce-4xJeoBDyb5QA1vQz4WZO6w=='; style-src 'self' 'unsafe-inline' *.gupy.io *.hubspot.com *.hsappstatic.net *.hubspot.net cdn-uicons.flaticon.com kit.fontawesome.com cdn.jsdelivr.net cdnjs.cloudflare.com cdn.datatable.net cdn.datatables.net stackpath.bootstrapcdn.com cdn.cookielaw.org *.hubspotusercontent-na1.net *.hubspotusercontent40.net fonts.googleapis.com cdn.privacytools.com.br www.gupy.io sibforms.com; img-src 'self' blob: 3299491.fs1.hubspotusercontent-na1.net perf-na1.hsforms.com track.hubspot.com www.gupy.io data: *; font-src 'self' fonts.gstatic.com fonts.googleapis.com *.hubspotusercontent-na1.net *.hubspotusercontent40.net www.gupy.io assets.sendinblue.com static.hsappstatic.net; connect-src 'self' blob: fs1.hubspotusercontent-na1.net cdn.cookielaw.org *.gupy.io data: gap: *; media-src 'self' *.hubspot.com *.hubspotusercontent-na1.net www.gupy.io; frame-src gupy.com.br *.gupy.com.br gupy.com.br/ gupy.io *.hs-sites.com *.hubspot.com js.hsforms.net www.googletagmanager.com www.chatbase.co lottie.host platform.twitter.com www.figma.com marine-bebop-445118-a6.uc.r.appspot.com w.soundcloud.com *.sibforms.com static.addtoany.com www.youtube.com app.hubspot.com *.hubspotvideo.com td.doubleclick.net *.facebook.com forms.hsforms.com *.storylane.io airtable.com *.spotify.com gupy.chat.blip.ai gupy673.outgrow.us *.google.com anchor.fm; frame-ancestors 'self' gupy.com.br gupy.io 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' https://*.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://*.doubleclick.net; script-src-elem 'self' https://*.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://*.doubleclick.net; style-src 'self' 'unsafe-inline' https:; style-src-elem 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; 1
default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com https://embed.reddit.com https://onelinksmartscript.appsflyer.com https://cdn.livechat-files.com https://cdn.livechat-static.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https: wss:; media-src 'self' data: blob: https:; frame-src 'self' https://www.youtube-nocookie.com https://www.reddit.com https://embed.reddit.com; worker-src 'self' blob:; manifest-src 'self' 1
font-src *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' business.facebook.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com landofcoder.com business.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com api.razorpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com cdn.razorpay.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com chimpstatic.com downloads.mailchimp.com *.list-manage.com landofcoder.com s7.addthis.com *.googleapis.com *.google.com *.gstatic.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com checkout.razorpay.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com unsafe-inline 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com landofcoder.com ekr.zdassets.com/ http://dpm.demdex.net https://www.google.com https://www.gstatic.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com lumberjack.razorpay.com lumberjack-metrics.razorpay.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss://*.intercom.io https://*.intercom-messenger.com wss://*.intercom-messenger.com; worker-src 'self' blob: https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; report-uri /api/csp-report; 1
script-src 'self' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://polyfill.io https://unpkg.com; script-src-attr 'self'; style-src 'self' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; style-src-attr 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.omnix.co.id https://www.google.com https://www.gstatic.com https://storage.googleapis.com https://*.cloudflare.com https://cdn.flexmonster.com; script-src-elem 'self' https://cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval' https://*.omnix.co.id https://www.google.com https://storage.googleapis.com https://www.gstatic.com https://*.cloudflare.com https://cdn.flexmonster.com https://*.tiktok.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://storage.googleapis.com https://*.cloudflare.com https://cdn.flexmonster.com https://stackpath.bootstrapcdn.com; font-src 'self' data: https://fonts.gstatic.com https://*.cloudfront.net https://storage.googleapis.com https://*.cloudflare.com; img-src 'self' data: blob: https://*.omnix.co.id https://*.onx.co.id https://storage.googleapis.com https://*.cloudflare.com https://storage.onx.co.id https://cdn.flexmonster.com https://*.storyblok.com https://*.banksinarmas.com https://cdn.jsdelivr.net https://static.xx.fbcdn.net https://scontent-atl3-3.xx.fbcdn.net https://www.facebook.com http://*.google.com https://*.googleusercontent.com https://p16-common-sign.tiktokcdn.com https://imgur.com https://play-lh.googleusercontent.com https://ci3.googleusercontent.com https://ssl.gstatic.com https://www.dbs.id http://commondatastorage.googleapis.com https://static-src.com https://links.blibli.com https://192.168.81.28 https://products.office.com https://*.atlassian.net https://digiserve.co.id https://lintasarta.net https://files.mailtarget.co https://*.cdninstagram.com https://*.imgur.com https://bki.co.id https://*.tiktokcdn.com https://*.sendgrid.net https://*.s3.amazonaws.com https://*.amazonaws.com https://*.traveloka.com https://*.flaticon.com https://*.ct.sendgrid.net https://*.gstatic.com https://*.global.fortinet.com; connect-src 'self' data: https://*.omnix.co.id wss://sip2.onx.co.id:8443 wss://*.omnix.co.id https://www.google.com https://recaptcha.google.com https://*.cloudfront.net https://storage.googleapis.com https://*.cloudflare.com https://cdn.flexmonster.com https://*.ingest.us.sentry.io https://*.ingest.sentry.io https://*.sentry.io https://grafana.com https://*.grafana.com https://*.yeastar.com https://*.sgycm.yeastarcloud.com wss://*.yeastar.com https://*.ras.yeastar.com wss://*.ras.yeastar.com https://*.opentok.com wss://*.opentok.com https://*.tokbox.com wss://*.tokbox.com wss://ami.onx.co.id https://www.tiktok.com; frame-src 'self' https://www.google.com https://recaptcha.google.com https://*.cloudflare.com https://form-builder-staging.omnix.co.id https://html-builder-staging.omnix.co.id https://*.omnix.co.id https://playrec.onx.co.id https://www.tiktok.com https://serina.infomedia.co.id https://maps.google.com; frame-ancestors 'self' https://omnix.co.id https://*.omnix.co.id https://*.cloudflare.com https://rte.omnix.co.id; form-action 'self'; base-uri 'self'; object-src 'none'; media-src 'self' blob: data: https://storage.googleapis.com https://*.onx.co.id https://*.omnix.co.id; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests; report-uri https://log-temp.omnix.co.id/csp-report-prod; 1
default-src *.agechecked.com *.awin1.com *.awinblackfriday.com *.bing.com *.braintree-api.com *.braintreegateway.com *.cardinalcommerce.com *.cloudflare.com *.cookiebot.eu *.cookiepro.com d21m4dsqdd3b9h.cloudfront.net *.ddlnk.net delight-custom-plugins.fly.dev *.delightglobal.io delight-s3-bucket.s3.eu-west-2.amazonaws.com *.disquscdn.com disqus.com *.disqus.com *.dotdigital-pages.com *.doubleclick.net *.dwin1.com *.facebook.com *.facebook.net *.gnatta.com gnattawatchtower.blob.core.windows.net *.googleadservices.com *.google-analytics.com *.googleapis.com *.google.com *.googleoptimize.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.kelkoogroup.net *.kk-resources.com *.liadm.com *.newrelic.com *.noibu.com *.nosto.com *.nr-data.net *.paypal.com *.paypalobjects.com *.pcapredict.com *.pinimg.com *.pinterest.com *.postcodeanywhere.co.uk *.pricerunner.com *.rewardsbag.com *.roeyecdn.com *.roeye.com *.sciencebehindecommerce.com *.stripe.com *.studentbeans.com *.superpayments.com *.tiktok.com *.tiktokw.us *.trackedlink.net *.trackedweb.net *.trustpilot.com *.viglink.com *.wepowerconnections.com *.youtube.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; base-uri *.cookiepro.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; report-uri https://e10203ef-faa6-4c8d-93a7-55d820287a84.sansec.watch/; report-to report-endpoint; 1
default-src static.hsappstatic.net;  media-src greenpeace.org.au *.greenpeace.org.au; script-src * 'unsafe-inline' 'unsafe-eval';  style-src *  'unsafe-inline';  img-src * data:;  base-uri   'self'; form-action 'self' https://www.facebook.com https://forms.hsforms.com *.hubspot.com; font-src greenpeace.org.au *.greenpeace.org.au www.greenpeace.org fonts.gstatic.com maxcdn.bootstrapcdn.com use.fontawesome.com https://*.hubspotusercontent30.net https://8586633.fs1.hubspotusercontent-na1.net https://script.hotjar.com https://vc.hotjar.io https://cdn-custom.optimonk.com data:;  frame-src *;  connect-src 'self' https://analytics.greenpeace.org.au *.hubspot.com *.doubleclick.net js.hs-banner.com https://adservice.google.com analytics.google.com https://*.analytics.google.com *.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com *.hotjar.com https://metrics.hotjar.io https://stripe-payments-dot-gpap-engineering.appspot.com https://bat.bing.com https://www.facebook.com https://www.greenpeace.org.au https://*.hotjar.com https://vc.hotjar.io https://content.hotjar.io https://events.hotjar.io https://surveystats.hotjar.io wss://*.hotjar.com https://forms.hsforms.com https://api.hubspot.com https://cta-service-cms2.hubspot.com https://forms.hubspot.com https://cp.hubspot.com https://ec.instapagemetrics.com https://heatmap-events-collector.instapage.com https://www.google.com https://www.google.com.au/ads/ga-audiences https://pagead2.googlesyndication.com https://api.omappapi.com https://sentry.io https://pixels.spotify.com https://api.stripe.com https://analytics.tiktok.com https://cds.taboola.com https://trc.taboola.com https://trc-events.taboola.com https://psb.taboola.com https://pips.taboola.com https://*.convertexperiments.com https://px.ads.linkedin.com https://*.optimonk.com *.metrics.convertexperiments.com logs.convertexperiments.com *.convertexperiments.com; report-uri https://o196544.ingest.sentry.io/api/6683985/security/?sentry_key=223a0fdbcdce4e2aadda1caa22c16eab 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.google.com https://www.google.co.uk https://www.google.de https://www.gstatic.com https://www.tfaforms.com https://websites.cdn.getfeedback.com https://*.js.ubembed.com https://*.pages.ubembed.com https://assets.ubembed.com https://cdn.cookielaw.org https://widgets.trustedshops.com https://ws.sharethis.com https://l.sharethis.com https://t.sharethis.com https://platform-api.sharethis.com https://service.force.com https://*.salesforceliveagent.com https://code.jquery.com https://maps.google.com https://maps.googleapis.com https://www.googleapis.com https://cdn.jsdelivr.net https://surepetcare.my.site.com https://c1.sfdcstatic.com https://count-server.sharethis.com https://secure.quantserve.com https://rules.quantcount.com https://pixel.quantserve.com https://static.hotjar.com https://script.hotjar.com https://snap.licdn.com https://s.yimg.com https://s.pinimg.com https://platform.twitter.com https://static.ads-twitter.com https://t.co https://js.adsrvr.org https://bat.bing.com https://bat.bing.net https://ads.nextdoor.com https://connect.facebook.net https://www.facebook.com https://*.fbcdn.net https://graph.facebook.com https://ct.pinterest.com https://scripts.clarity.ms https://www.clarity.ms https://*.clarity.ms https://*.opayo.eu.elavon.com https://*.elavon.com https://live.sagepay.com https://test.sagepay.com https://pi-live.sagepay.com https://pi-test.sagepay.com; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://fonts.googleapis.com https://www.tfaforms.com https://cdn.cookielaw.org https://use.fontawesome.com https://use.typekit.net https://service.force.com https://ws.sharethis.com https://l.sharethis.com https://ajax.googleapis.com https://surepetcare.my.site.com https://*.opayo.eu.elavon.com https://*.elavon.com https://live.sagepay.com https://test.sagepay.com; font-src 'self' https://fonts.gstatic.com https://use.fontawesome.com https://use.typekit.net https://c1.sfdcstatic.com data:; img-src 'self' data: blob: https: http:; media-src 'self' https://media.surepetcare.com; connect-src 'self' https://*.s3.eu-west-1.amazonaws.com https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://region1.analytics.google.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://www.google.com https://www.google.co.uk https://www.google.de https://www.googleapis.com https://www.googletagmanager.com https://maps.googleapis.com https://count-server.sharethis.com https://l.sharethis.com https://ws.sharethis.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://surepetcare.my.salesforce-scrt.com https://*.salesforceliveagent.com https://stats.g.doubleclick.net https://px.ads.linkedin.com https://insight.adsrvr.org https://match.adsrvr.org https://ct.pinterest.com https://bat.bing.com https://connect.facebook.net https://www.facebook.com https://*.fbcdn.net https://graph.facebook.com https://script.hotjar.com https://static.shopback.com https://ad.doubleclick.net https://s.yimg.com https://analytics.twitter.com https://t.co https://platform.twitter.com https://static.ads-twitter.com https://bat.bing.net https://ads.nextdoor.com https://flask.nextdoor.com https://metrics.hotjar.io https://vars.hotjar.com https://vc.hotjar.io https://in.hotjar.com https://pixel.quantserve.com https://pixel.quantcount.com https://translate.googleapis.com https://code.jquery.com https://*.clarity.ms https://*.events.ubembed.com https://*.ecs.us-east-2.on.aws https://*.ecs.us-west-1.on.aws https://*.ecs.us-east-1.on.aws https://*.a.run.app https://www.google.ae https://www.google.am https://www.google.at https://www.google.be https://www.google.ca https://www.google.ch https://www.google.co.id https://www.google.co.il https://www.google.co.kr https://www.google.co.nz https://www.google.co.za https://www.google.com.au https://www.google.com.bd https://www.google.com.br https://www.google.com.co https://www.google.com.cy https://www.google.com.hk https://www.google.com.kw https://www.google.com.mx https://www.google.com.my https://www.google.com.sg https://www.google.com.tr https://www.google.com.tw https://www.google.com.vn https://www.google.dk https://www.google.ee https://www.google.es https://www.google.fi https://www.google.fr https://www.google.ge https://www.google.gg https://www.google.ie https://www.google.im https://www.google.is https://www.google.it https://www.google.je https://www.google.kz https://www.google.li https://www.google.lu https://www.google.lv https://www.google.mk https://www.google.nl https://www.google.no https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.ru https://www.google.se https://www.google.si https://*.opayo.eu.elavon.com https://*.elavon.com https://live.sagepay.com https://test.sagepay.com https://pi-live.sagepay.com https://pi-test.sagepay.com; frame-src 'self' https://www.google.com https://www.google.co.uk https://www.googletagmanager.com https://googleads.g.doubleclick.net https://platform.twitter.com https://www.getfeedback.com https://www.tfaforms.com https://www.youtube.com https://www.youtube-nocookie.com https://widgets.trustedshops.com https://surepetcare.my.site.com https://*.pages.ubembed.com https://vars.hotjar.com https://ws.sharethis.com https://t.sharethis.com https://service.force.com https://www.paypalobjects.com https://ct.pinterest.com https://insight.adsrvr.org https://match.adsrvr.org https://www.facebook.com https://*.fbcdn.net https://*.opayo.eu.elavon.com https://*.elavon.com https://live.sagepay.com https://test.sagepay.com https://pi-live.sagepay.com https://pi-test.sagepay.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://www.tfaforms.com https://www.salesforce.com https://www.facebook.com https://*.opayo.eu.elavon.com https://*.elavon.com https://live.sagepay.com https://test.sagepay.com; report-uri /csp-report; 1
default-src 'unsafe-eval' 'unsafe-inline' blob blob: data: https: wss:; block-all-mixed-content; report-uri /csp.php?h=f743080d&v=4 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; 1
object-src 'none';base-uri 'self';script-src 'nonce-RrpSREFX_Fb4NX646zFUQg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
base-uri 'self'; default-src 'none'; child-src 'self'; connect-src 'self' https://*.google-analytics.com https://sentry.io https://stats.g.doubleclick.net https://www.facebook.com; font-src 'self' https://fonts.gstatic.com https://hello.myfonts.net data:; form-action 'self'; frame-ancestors 'self'; frame-src 'self'; img-src 'self' https://*.google-analytics.com https://*.googletagmanager.com blob: data:; media-src 'none'; object-src 'self' blob:; manifest-src 'self'; script-src 'self' https://*.google-analytics.com https://*.googletagmanager.com https://browser.sentry-cdn.com https://www.youtube.com https://s.ytimg.com https://connect.facebook.net 'unsafe-inline'; style-src 'self' https://fonts.googleapis.com https://hello.myfonts.net 'unsafe-inline'; report-uri https://o115950.ingest.sentry.io/api/5442953/security/?sentry_key=2d010088d19e4231bfaafcd8c84034a0&sentry_release=&sentry_environment=live; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https:; connect-src 'self' https:; media-src 'self' https:; object-src 'none'; frame-src 'self' https:; report-uri /csp-report-endpoint 1
default-src https: data: 'self' 'unsafe-inline' 'unsafe-eval'             *.googleapis.com fonts.gstatic.com *.fontawesome.com *.aspnetcdn.com *.jsdelivr.net *.googletagmanager.com              *.googleadservices.com s.adroll.com wss://*.hotjar.com/api/v2/client/ws *.jquery.com;              img-src data: *;              frame-ancestors 'self';              object-src 'none';              form-action 'self';              base-uri 'self';              media-src s3.amazonaws.com;              report-uri /csp/; 1
font-src  data: *.gstatic.com 'self' *.abtasty.com *.mews.li *.mews.com;  img-src 'self' *.smartadserver.com *.loopme.me *.dotomi.com conversio.s3.eu-west-2.amazonaws.com lpcdn.lpsnmedia.net *.googlesyndication.com sync.targeting.unrulymedia.com ups.analytics.yahoo.com us-east.ads.audio.thisisdax.com ads.stickyadstv.com match.sharethrough.com sync.1rx.io ps.eyeota.net contextual.media.net bh.contextweb.com *.pubmatic.com *.smaato.net *.linkedin.com *.teads.tv *.googleapis.com *.gstatic.com *.mews.li *.mews.com *.bing.com *.duettoresearch.com *.onetrust.com cx.atdmt.com data: *.doubleclick.net *.googleusercontent.com *.quantserve.com *.lockeliving.com *.windows.net *.facebook.com *.google-analytics.com www.google.co.uk www.google.com *.google.nl www.googletagmanager.com www.gstatic.com www.google.ie *.googleapis.com *.ggpht.com; script-src data: blob: 'wasm-unsafe-eval' 'self' 'unsafe-eval' 'unsafe-inline' web-sdk-eu.aptrinsic.com login-ds.dotomi.com https://cdn.jsdelivr.net https://cdn.jsdelivr.net/npm/vue@2 https://unpkg.com/web-vitals@3.5.2/dist/web-vitals.attribution.iife.js https://unpkg.com/web-vitals@3/dist/web-vitals.attribution.iife.js *.googlesyndication.com js.appboycdn.com snap.licdn.com *.treasuredata.com analytics.tiktok.com eu01.in.treasuredata.com p.relay-t.io js.zi-scripts.com ws.zoominfo.com tags.clickagy.com *.mews.com https://pay.datatrans.com/upp/payment/js/secure-fields-1.0.0.js https://www.recaptcha.net https://recaptcha.google.com/recaptcha cdn-ukwest.onetrust.com *.abtasty.com *.onetrust.com *.rollbar.com *.mczbf.com *.msecnd.net cdn.jsdelivr.net/npm/flatpickr *.googleoptimize.com *.teads.tv *.lpsnmedia.net *.triptease.io *.liveperson.net *.googleapis.com *.mews.li *.mews.com *.bing.com *.duettoresearch.com *.onetrust.com *.facebook.net *.doubleclick.net *.quantcount.com *.quantserve.com *.google-analytics.com *.google.com *.googleadservices.com *.googletagmanager.com *.gstatic.com fareharbor.com *.lockeliving.com *.instagram.com *.datatrans.com; style-src *.googleapis.com 'self' 'unsafe-eval' 'unsafe-inline' *.lockeliving.com *.mews.com web-sdk-eu.aptrinsic.com; connect-src https://google.com aorta.clickagy.com *.zoominfo.com *.liveperson.net wss://va.msg.liveperson.net js.zi-scripts.com *.ingest.sentry.io log-api.eu.newrelic.com *.aptrinsic.com *.launchdarkly.com *.googlesyndication.com hemsync.clickagy.com *.treasuredata.com *.googleapis.com *.braze.eu *.rollbar.com *.abtasty.com *.tiktok.com *.linkedin.com *.relay-t.io *.google.com *.sjwoe.com *.mczbf.com *.teads.tv *.triptease.io *.onetrust.com 'self' *.mews.li *.mews.com bat.bing.com *.duettoresearch.com *.visualstudio.com *.doubleclick.net *.facebook.com *.google-analytics.com *.instagram.com;  frame-src hemsync.clickagy.com *.teads.tv *.triptease.io *.lpsnmedia.net *.liveperson.net *.google.com *.recaptcha.net *.doubleclick.net *.facebook.com *.googletagmanager.com 'self' fareharbor.com gifer.com pay.datatrans.com *.onetrust.com *.instagram.com *.youtube.com *.clickdimensions.com *.lockeliving.com *.findingedyn.com;  media-src *.vimeo.com *.akamaized.net *.lpsnmedia.net; worker-src blob:; child-src blob; default-src 'self' 'unsafe-eval' 'unsafe-inline' data: *.googleapis.com *.gstatic.com *.google.com *.mews.li *.mews.com *.onetrust.com;  report-uri https://lockeliving.report-uri.com/r/d/csp/wizard 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://www.youtube.com https://www.google.com https://www.gstatic.com https://analytics.silktide.com https://www.googletagmanager.com https://www.google-analytics.com https://js.monitor.azure.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; connect-src 'self' https://a.eu.silktide.com http://localhost:44326 http://localhost:52155 ws://localhost:44326 ws://localhost:52155 wss://localhost:44326 wss://localhost:44337 https://localhost:44326; object-src 'none'; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; base-uri 'self'; frame-ancestors 'self'; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com; img-src 'self' data: https://dashboard.umbraco.com https://www.googletagmanager.com; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'nonce-OFBhSVeSrD0g37MpdE4T1LAnSNMHdAJ/Gxpv4tR0U8o=' 'strict-dynamic' https://www.googletagmanager.com https://mc.yandex.ru https://accounts.google.com/gsi/client https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://yastatic.net; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://accounts.google.com/gsi/style; img-src 'self' data: blob: https://sempai.animeon.cloud https://nya.animeon.cloud https://meow.animeon.cloud https://mochi.animeon.cloud https://tora.animeon.cloud https://*.animeon.su https://animeon.su https://*.kodikplayer.com https://kodikplayer.com https://*.shikimori.one https://shikimori.one https://api.dicebear.com https://*.googleusercontent.com https://img.youtube.com https://placehold.co https://mc.yandex.ru https://mc.yandex.com https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com https://ab18cf62-4b99-4613-a8c1-c801eda74545.selcdn.net; font-src 'self'; connect-src 'self' https://nya.animeon.cloud https://meow.animeon.cloud https://mochi.animeon.cloud https://tora.animeon.cloud https://cloud.solodcdn.com https://pe.cloud.solodcdn.com https://strontium.cloud.solodcdn.com https://mc.yandex.ru https://mc.yandex.com https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://www.googletagmanager.com https://accounts.google.com/gsi/ https://www.google.com/recaptcha/; media-src 'self' blob: data: https://nya.animeon.cloud https://meow.animeon.cloud https://mochi.animeon.cloud https://tora.animeon.cloud https://cloud.solodcdn.com https://pe.cloud.solodcdn.com https://strontium.cloud.solodcdn.com; frame-src https://*.kodikplayer.com https://kodikplayer.com https://www.youtube-nocookie.com https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; child-src https://*.kodikplayer.com https://kodikplayer.com https://www.youtube-nocookie.com https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; worker-src 'self' blob:; manifest-src 'self'; report-uri /api/csp-report; report-to csp 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://js.stripe.com https://challenges.cloudflare.com https://app.koah.ai https://cdn.apple-mapkit.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https: wss:; frame-src 'self' data: blob: https://js.stripe.com https://hooks.stripe.com https://challenges.cloudflare.com; media-src 'self' data: blob: https:; worker-src 'self' blob:; manifest-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none' 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://pagead2.googlesyndication.com https://*.googlesyndication.com https://*.google.com https://*.googletagservices.com https://*.google-analytics.com https://*.googletagmanager.com https://*.doubleclick.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.google-analytics.com https://*.googletagmanager.com https://*.doubleclick.net; frame-src 'self' https://*.googlesyndication.com https://*.doubleclick.net https://*.youtube.com https://www.youtube-nocookie.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none'; upgrade-insecure-requests 1
object-src 'none';base-uri 'self';script-src 'nonce-ylpsk9yUhucZbKVb5tNctA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-IwzXFHE3twU4nCxnWYU5wg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self'; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 1
default-src 'self' https://confident-amusement-ac2e0d3346.media.strapiapp.com https://great-spirit-cf5ed85826.strapiapp.com https://cdn-4.convertexperiments.com https://logs.convertexperiments.com https://static.hsappstatic.net *.metrics.convertexperiments.com *.wse-abtesting-components.pages.dev https://mktmedia.wallstreetenglish.com https://mktmediadev.wallstreetenglish.com https://no-cdn.convertexperiments.com https://www.googleanalytics.com *.cookiebot.com *.hotjar.io *.reviews.io data: *.amazonaws.com *.cloudflare.com *.googleapis.com *.gstatic.com *.google.com *.google-analytics.com *.typekit.net *.hsforms.com *.hs-sites.com *.wsemktapp.com *.reviews.co.uk *.cloudfront.net *.hs-banner.com *.doubleclick.net *.hubspot.com *.hotjar.com *.hubapi.com *.facebook.com *.linkedin.com *.adsymptotic.com *.crwdcntrl.net *.bing.com *.clarity.ms *.cpmktg.com *.mathtag.com *.youtube.com *.slideshare.net *.googletagmanager.com *.fna.fbcdn.net *.cdninstagram.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com https://js.usemessages.com https://cdn-4.convertexperiments.com https://logs.convertexperiments.com *.metrics.convertexperiments.com *.wse-abtesting-components.pages.dev https://no-cdn.convertexperiments.com https://www.googleanalytics.com *.cookiebot.com *.hubspot.com *.googletagmanager.com *.googleapis.com *.hsforms.net *.reviews.io *.hsforms.com js.hscta.com *.wsemktapp.com *.google-analytics.com *.gstatic.com *.cloudfront.net *.hs-scripts.com *.hs-analytics.net *.hs-banner.com *.hsadspixel.net *.hscollectedforms.net *.hsleadflows.net f.hubspotusercontent20.net *.hotjar.com *.facebook.net www.googleadservices.com snap.licdn.com *.doubleclick.net *.bing.com *.cpmktg.com *.aimage.it:3000 *.clarity.ms *.crwdcntrl.net *.youtube.com *.google.com https://js.storylane.io; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com *.googletagmanager.com *.cookiebot.com *.typekit.net *.googleapis.com *.reviews.io data: *.wsemktapp.com *.cloudfront.net *.fna.fbcdn.net *.hubspot.com *.cdninstagram.com; object-src 'none'; frame-src 'self' https://app.storylane.io https://js.hsforms.net *.hsforms.com *.hs-sites.com https://consentcdn.cookiebot.com https://widget.reviews.io https://www.googletagmanager.com https://www.google.com; 1
script-src 'nonce-PlhPYKwyjyQkExZRDCIeQg' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/static-on-bigtable; base-uri 'none' 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://consent.cookiebot.eu https://consentcdn.cookiebot.eu https://www.google.com https://www.gstatic.com https://oss.maxcdn.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://code.jquery.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://oss.maxcdn.com https://cdnjs.cloudflare.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://consent.cookiebot.com https://consentcdn.cookiebot.com https://consent.cookiebot.eu https://consentcdn.cookiebot.eu https://www.google.com https://www.gstatic.com; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.google.com https://recaptcha.google.com https://consentcdn.cookiebot.com https://consentcdn.cookiebot.eu https://td.doubleclick.net; media-src 'self' data: blob: https:; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests 1
default-src 'self' https://*.myhealth1st.com.au; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://snap.licdn.com/li.lms-analytics/insight.min.js https://snap.licdn.com/li.lms-analytics/insight.old.min.js https://tr.outbrain.com/cachedClickId https://amplify.outbrain.com/cp/obtp.js https://connect.facebook.net/en_US/fbevents.js https://connect.facebook.net https://wave.outbrain.com/mtWavesBundler/handler/00d37644637179e79c1002bdb62e1e289e https://js.sentry-cdn.com https://browser.sentry-cdn.com https://www.google-analytics.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://api.mapbox.com; connect-src 'self' https://api.mapbox.com https://amplify.outbrain.com/topics https://tr.outbrain.com/unifiedPixel https://www.google.com/ccm/collect https://px.ads.linkedin.com https://events.mapbox.com https://analytics.google.com https://www.google-analytics.com https://stats.g.doubleclick.net https://*.myhealth1st.com.au; font-src 'self' https://fonts.gstatic.com; img-src 'self' https://images.ctfassets.net/h3fal7pd5dgs/4dKiJe3tZrGjwKtTh5UajX/* https://assets.myhealth1st.com.au/* https://www.google.com.au/ads/ga-audiences https://www.googletagmanager.com/td https://px.ads.linkedin.com/collect https://www.facebook.com https://*.myhealth1st.com.au https://www.google-analytics.com https://www.google.com.au/ads/* data:; worker-src 'self' blob:; frame-src 'self' https://www.googletagmanager.com https://td.doubleclick.net; report-uri /contentSecurityPolicy/report 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'report-sample' 'self' 'unsafe-inline' https://*.googleapis.com https://*.hubspot.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hs-scripts.com https://*.hscta.net https://*.usemessages.com https://*.sharethis.com https://*.wistia.com https://*.google-analytics.com https://www.googletagmanager.com; style-src 'report-sample' 'self' 'unsafe-inline' https://*.googleapis.com https://*.sharethis.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.hubspot.com https://*.hs-banner.com https://*.sharethis.com https://*.crwdcntrl.net https://*.ltmsphrcl.net https://*.wistia.com https://*.google-analytics.com https://www.googletagmanager.com https://www.google.com; frame-src 'self' https://*.wistia.com https://*.sharethis.com https://www.google.com; img-src 'self' data: https://*.hubspotusercontent-na1.net https://*.hsforms.com https://*.gravatar.com https://*.sharethis.com https://*.hubspot.com https://wpengine.com https://www.googletagmanager.com; manifest-src 'self'; media-src 'self'; worker-src 'self' blob:; report-uri https://6915f6be6969e21dc176bf00.endpoint.csper.io?v=3; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://transcend-cdn.com https://secure.hall3hook.com https://app.cadmoremedia.com https://platform.twitter.com  https://js.hsforms.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://platform.twitter.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https: wss://notifications.biotechniques.com; frame-src 'self' https://www.google.com https://www.googletagmanager.com https://app.cadmoremedia.com https://platform.twitter.com https://syndication.twitter.com  https://js.hsforms.net; object-src 'none'; base-uri 'self' 1
default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https://cdnapisec.kaltura.com/ https://epicproxy.et1052.epichosted.com https://pay.instamed.com/ https://recaptcha.google.com/recaptcha/ https://www.google.com https://www.google.com/recaptcha/;script-src 'nonce-eb7fabeafb794dc0aabd426412e6082d' https://www.mypremisehealth.com 'self' https://pay.instamed.com/ https://us-api.experian.com/ https://www.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/;img-src https://* 'self' blob: data:;connect-src 'self' epichttp: https://*.app.st-1052.epiccloud.io https://*.kaltura.com https://mychart-mychart-chat-mediator.app.st-1052.epiccloud.io https://us-api.experian.com/ wss://*.webpubsub.azure.com;style-src https://www.mypremisehealth.com 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self' https://us-api.experian.com/;media-src https://* 'self' blob:; 1
worker-src blob: 'self'  https://www.google.com https://www.gstatic.com https://tracking.crazyegg.com; 1
font-src *.googleapis.com https://www.gstatic.com *.typekit.net https://fonts.gstatic.com *.fontawesome.com *.fonts.googleapis.com *.gstatic.com data: *.cloudflare.com *.alicdn.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.authorize.net *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.google.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.addthis.com *.pinterest.com *.weltpixel.com *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.googleapis.com https://*.gstatic.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com store.paradoxlabs.com *.twitter.com t.co https://*.google.com https://*.googleapis.com https://*.googleusercontent.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.cloudflare.com https://cdn.klarna.com https://s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.gstatic.com *.addthis.com *.pinterest.com *.cdninstagram.com www.google.com.cy www.google.co.id www.google.com.qa www.google.com.co www.google.com.bh *.googletagmanager.com www.google.com.tw www.google.com.om www.google.cv www.google.tt www.google.com.sg www.google.nl www.google.co.in *.media-amazon.com www.google.gg www.google.ge www.google.lk www.google.by www.google.gl www.google.com.lb yastatic.net www.google.ad www.google.at www.google.al www.google.ro www.google.no www.google.rs www.google.com.sv www.google.ie www.google.co.ke www.google.hr www.google.cm www.google.com.pa www.google.co.ve www.google.ae www.google.com.pg www.google.pl www.google.com.fj www.google.com.tr www.google.com.kw www.google.dk www.google.com.uy www.google.com.np www.google.pt www.google.se www.google.mg www.google.com.pe www.google.be www.google.co.il www.google.com.mx www.google.mu www.google.hn www.google.ru www.google.com.bn www.google.jo www.google.co.cr www.google.it www.google.co.zm www.google.com.et www.google.ch www.google.ee www.google.com.py *.paradoxlabs.com www.google.hu www.google.co.ao www.google.sm www.google.com.pr www.google.iq www.google.ca www.google.com.na www.google.li www.google.gy www.google.sn www.google.com.mm www.google.md www.google.co.jp www.google.sr www.google.am www.google.de www.google.cl www.google.to www.google.com.vc www.google.im www.google.com.ni www.google.es www.google.co.za www.google.td www.google.lt paradoxlabs.com www.google.is www.google.com.bo www.google.co.nz www.google.lu www.google.com.bz www.google.co.uk www.google.com.do www.google.co.zw *.orionplatform.com www.google.com.eg www.google.com.gt www.google.co.ma www.google.la www.google.com.br www.google.com.jm www.google.com.bd www.google.ht www.google.fi www.google.sk www.google.dm www.google.kz www.google.co.ug www.google.com.ph www.google.je www.google.co.tz www.google.com.au www.google.si www.google.tg www.google.mn www.google.bs www.google.lv www.google.com.ec www.google.com.mt www.google.ba www.google.mk www.google.me www.google.com.kh www.google.com.sa www.google.kg www.google.so www.google.bj www.google.cz www.google.dj www.google.co.th www.google.co.kr www.google.dz www.google.ci www.google.com.vn www.google.ps www.google.com.hk www.google.fm www.google.co.vi www.google.co.bw www.google.com.ua www.google.com.af www.google.co.mz www.google.com.ar *.doubleclick.net www.google.com.tj www.google.com.gh www.google.com.sl www.google.az www.google.com.ly www.google.bg www.google.co.uz www.google.com.my www.google.com.pk www.google.gr www.google.com.gi www.google.fr www.google.com.ng data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com https://*.gstatic.com chimpstatic.com downloads.mailchimp.com *.list-manage.com https://ajax.cloudflare.com *.ads-twitter.com https://*.google.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com https://www.googletagmanager.com tagmanager.google.com unpkg.com https://chimpstatic.com *.luckyorange.com *.orionplatform.com *.rfihub.net *.google.com *.marketo.net *.googletagmanager.com *.rfihub.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.typekit.net https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com unsafe-inline assets.braintreegateway.com *.googleapis.com tagmanager.google.com *.gstatic.com *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.cloudflare.com *.addthis.com https://graph.instagram.com *.google-analytics.com www.google.cz www.google.com.pr www.google.com.bd www.google.ee www.google.co.ao www.google.lv www.google.com.gt www.google.tt www.google.fm www.google.com.ar www.google.co.uz www.google.co.zw www.google.ae www.google.gr www.google.com.py www.google.ro www.google.com.ni www.google.ci www.google.co.tz www.google.es www.google.com.np www.google.lu www.google.com.lb www.google.com.jm www.google.at www.google.com.pk www.google.bs www.google.cm www.google.gl www.google.ge www.google.sr www.google.se www.google.md www.google.pl www.google.so www.google.com.hk www.google.ie www.google.com.vn www.google.de www.google.co.ve www.google.sn www.google.co.za *.twitter.com www.google.co.kr www.google.fi www.google.kz www.google.com.sv www.google.cl www.google.be www.google.im www.google.com.pa www.google.com.ec www.google.dz www.google.co.cr www.google.co.ke www.google.com.uy *.doubleclick.net www.google.ba www.google.co.nz www.google.dj www.google.jo www.google.com.pg www.google.nl www.google.ch www.google.com.bz www.google.az www.google.bg www.google.gg www.google.hn www.google.pt www.google.rs www.google.hu www.google.com.mx www.google.com.kh www.google.com.ua www.google.co.il www.google.co.uk www.google.fr www.google.co.in www.google.gy www.google.am www.google.iq www.google.co.jp www.google.co.bw www.google.com.br www.google.no www.google.kg www.google.com.om www.google.com.tw www.google.je www.google.com.pe www.google.lt www.google.com.kw www.google.dk www.google.com.tr www.google.hr www.google.co.ug www.google.com.au www.google.ru www.google.com.et www.google.li www.google.sk www.google.com.sa www.google.by www.google.ca www.google.com.qa www.google.com.sg www.google.com.eg *.luckyorange.com www.google.co.id www.google.me www.google.it www.google.al www.google.com.af www.google.com.bh www.google.mg www.google.co.vi www.google.is www.google.com.mm www.google.com.do www.google.co.th www.google.com.ng www.google.ad www.google.com.ph www.google.com.bo www.google.com.na www.google.co.ma www.google.com.cy www.google.com.co www.google.ht www.google.com.mt www.google.com.my www.google.si www.google.mk 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://cd502fbf-1da4-4546-8d33-9ec4da26110c.sansec.watch/; report-to report-endpoint; 1
default-src https: data: blob:; script-src https: blob: 'unsafe-inline' 'unsafe-eval' https://cmp.osano.com; style-src https: 'unsafe-inline'; connect-src https: wss:; form-action 'self' www.facebook.com forms.hsforms.com; object-src 'self'; base-uri 'self'; 1
object-src 'none';base-uri 'self';script-src 'nonce-AjNmOUZ5xnaT8pwnsQHf8Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://dap.digitalgov.gov https://static.cloudflareinsights.com https://script.crazyegg.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com; 1
object-src 'none';base-uri 'self';script-src 'nonce-150x44_ObDr0N9Ozrp7ftQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://app.cal.com https://va.vercel-scripts.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://cdn.sanity.io https://cdn.prod.website-files.com https://uploads-ssl.webflow.com https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://vitals.vercel-insights.com https://va.vercel-scripts.com https://vercel.live; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://app.cal.com https://cal.com https://vercel.live; media-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests 1
font-src *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.google.com/ js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io axeptio.imgix.net https://www.magezon.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://www.gstatic.com https://translate.googleapis.com https://fonts.gstatic.com http://translate.google.com *.facebook.com https://meetanshi.com/media/logo.png https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.axept.io *.google.com/ chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://translate.googleapis.com http://translate.google.com https://translate-pa.googleapis.com *.googletagmanager.com *.facebook.net js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com www.gstatic.com *.fontawesome.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.axept.io client.axept.io form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://translate.googleapis.com *.google-analytics.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.squarecdn.com *.googleapis.com *.narvar.com *.narvar.qa *.yotpo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cybersource.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com widgets.sandbox.afterpay.com *.cash.app www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com bytedance: sslocal: *.certcapture.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cybersource.com landofcoder.com *.buywithprime.amazon.com *.pinterest.com *.livechatinc.com *.afterpay.com *.googletagmanager.com www.googletagmanager.com *.vimeo.com *.cardinalcommerce.com *.doubleclick.net *.adtrafficquality.google https://*.exacttarget.com *.herokuapp.com *.weltpixel.com www.xtento.com *.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.afterpay.com/ *.cash.app *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com *.certcapture.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.narvar.com *.narvar.qa *.online-metrix.net getrockerbox.com *.googletagmanager.com tagmanager.google.com *.google.com ssl.gstatic.com *.cardinalcommerce.com *.google.rs ep1.adtrafficquality.google https://pagead2.googlesyndication.com *.herokuapp.com *.virtuelabs.com *.virtueflourish.com *.virtueprofessional.com www.xtento.com cdn.xtento.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com https://portal.sandbox.afterpay.com https://portal.afterpay.com https://static.afterpay.com *.squarecdn.com https://hbiq.net *.cash.app *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com *.certcapture.com *.exponea.com utt.impactcdn.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.online-metrix.net *.authorize.net landofcoder.com *.buywithprime.amazon.com *.bloomreach.com getrockerbox.com *.googletagmanager.com tagmanager.google.com *.livechatinc.com *.evgnet.com *.tiktok.com *.bing.com *.facebook.net *.upsellit.com *.cdn-apple.com *.cloudfront.net *.iesnare.com *.cloudflare.com *.evergage.com https://utt.impactcdn.com https://cdn.impactcdn.com *.collect.igodigital.com https://7295774.collect.igodigital.com https://script.hotjar.com https://*.exacttarget.com https://*.shopmy.us *.herokuapp.com *.virtuelabs.com *.virtueflourish.com *.virtueprofessional.com https://www.googletagmanager.com www.xtento.com cdn.xtento.com *.yotpo.com 'self' 'unsafe-eval' 'nonce-YXo2aXFzZHBxbHM1N3J1Mmt6ZW1rdnh6ejhleWh1aTA=' 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY/CkTMBhjNhwPvglpYumjx31B4fjkY8=' 'sha256-F9ZjdH6KZZ/OQYCXuVrhU9s4UhLIRpF8vfMBhSoSXFE=' 'sha256-xBBj7y2m2odaO1eEHhqtWa5krtIC4XwfNI7nxM/at+Y=' 'sha256-XtBpUSZu52CP7zsoqr85SHz2B8lKfNjFwxDWepGFWqk=' 'sha256-yUMYwnLESbaXoS7OTnNOz4jRL/etTRlzd9EXBxAJ8uU=' 'sha256-Umf4XdDT2jU+W6kBElYNVCfHdypDvQ+hP0N25TF8spw=' 'sha256-fxIIiV/UkD1qBH84xOcYKL2Udw95xiIuZ8dCqyBgqkw=' 'sha256-sCNgwSOg1ilvVplXvgrvrmp0pEugiAg6BLdsMXn3EVE=' 'sha256-QwDPTOv7DnssR14XIEwQveE176ZTtI+2O9ODcXlA6No=' 'sha256-x+21YgSzPwcXB65O7nXIpUsWFLsVdoPUSdOEolX00Lk='; style-src fonts.googleapis.com static.afterpay.com/ *.squarecdn.com *.cash.app *.certcapture.com tagmanager.google.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com *.narvar.com *.narvar.qa *.iesnare.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.afterpay.com *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com *.cash.app api.lab.amplitude.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com *.certcapture.com *.exponea.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.online-metrix.net *.authorize.net landofcoder.com *.bloomreach.com *.google-analytics.com *.doubleclick.net *.tiktok.net *.googletagmanager.com *.iesnare.com *.cloudflare.com *.evergage.com *.virtuelabs.com ep1.adtrafficquality.google t.getletterpress.com *.hotjar.com *.hotjar.io wss://ws.hotjar.com https://aa.agkn.com https://*.shopmy.us *.herokuapp.com https://www.google-analytics.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' 'nonce-OXKKP/WC8Gf0yJfe8zg34fjMLWlp6FKUOxfLsqyXa6M='; script-src 'self' 'nonce-OXKKP/WC8Gf0yJfe8zg34fjMLWlp6FKUOxfLsqyXa6M='; font-src 'self' https://fonts.gstatic.com ; connect-src 'self' 'nonce-OXKKP/WC8Gf0yJfe8zg34fjMLWlp6FKUOxfLsqyXa6M='; img-src 'self' data:; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'nonce-OXKKP/WC8Gf0yJfe8zg34fjMLWlp6FKUOxfLsqyXa6M='; base-uri 'self'; form-action 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-WR29CuAfNwn5USqgoRqAig' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com https://ebizcharge3ds-new1-dev1-guebbzfmbwdggkcp.westus3-01.azurewebsites.net https://cas.static.client.cardinaltrusted.com https://cas.client.cardinaltrusted.com https://www.youtube.com https://www.google.com/maps https://www.google.com/ https://insight.adsrvr.org/ https://analytics.google.com https://vimeo.com https://static.addtoany.com https://cdn.livechatinc.com https://api.livechatinc.com https://includestest.ccdc02.com/cardinalcruise/ https://centinelapi.cardinalcommerce.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com https://songbird.cardinalcommerce.com https://songbirdstag.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://ebizcharge3ds-new1-dev1-guebbzfmbwdggkcp.westus3-01.azurewebsites.net https://*.cardinalcommerce.com https://cas.static.client.cardinaltrusted.com https://cas.client.cardinaltrusted.com https://*.centinelapi.cardinalcommerce.com https://insight.adsrvr.org/ https://analytics.google.com https://vimeo.com https://static.addtoany.com https://cdn.livechatinc.com https://api.livechatinc.com https://includestest.ccdc02.com/cardinalcruise/ *.weltpixel.com *.paytrace.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com https://firebasestorage.googleapis.com https://meetanshi.com/media/logo.png *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https://vimeo.com/ www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://assets.adobedtm.com https://*.adobe.com https://cdn1.ebizcharge.net https://songbird.cardinalcommerce.com https://songbirdstag.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://ebizcharge3ds-new1-dev1-guebbzfmbwdggkcp.westus3-01.azurewebsites.net https://cdnjs.cloudflare.com https://insight.adsrvr.org/ https://dpm.demdex.net https://amcglobal.sc.omtrdc.net https://geostag.cardinalcommerce.com https://geo.cardinalcommerce.com https://centinelapistag.cardinalcommerce.com https://centinelapi.cardinalcommerce.com/ https://analytics.google.com/ https://static.addtoany.com https://cdn.livechatinc.com https://api.livechatinc.com https://includestest.ccdc02.com/cardinalcruise/ widget.freshworks.com m2epro.freshdesk.com *.avada.io *.shopify.com *.paytrace.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com https://cas.static.client.cardinaltrusted.com https://cas.client.cardinaltrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com https://fonts.bunny.net *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net https://vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com 3dsapi.ebizcharge.net kg668dbov0.execute-api.us-east-1.amazonaws.com ebizcharge3ds-staging1.azurewebsites.net https://includestest.ccdc02.com https://ebizcharge3ds-new1-dev1-guebbzfmbwdggkcp.westus3-01.azurewebsites.net *.ebizcharge.net https://songbird.cardinalcommerce.com https://cas.static.client.cardinaltrusted.com https://cas.client.cardinaltrusted.com https://songbirdstag.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://cdnjs.cloudflare.com https://insight.adsrvr.org/ https://dpm.demdex.net https://amcglobal.sc.omtrdc.net https://geostag.cardinalcommerce.com https://geo.cardinalcommerce.com https://centinelapistag.cardinalcommerce.com https://analytics.google.com https://static.addtoany.com https://cdn.livechatinc.com https://api.livechatinc.com https://includestest.ccdc02.com/cardinalcruise/ widget.freshworks.com m2epro.freshdesk.com https://get.geojs.io *.avada.io *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com https://*.cloudfront.net https://www.googletagmanager.com https://connect.facebook.net/ https://s7.addthis.com https://s.adroll.com blob:; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://netdna.bootstrapcdn.com https://www.gstatic.com; media-src https:; style-src 'self' https://fonts.googleapis.com https://netdna.bootstrapcdn.com https://www.gstatic.com 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob: 'self'; img-src 'self' https://*.googleapis.com https://*.gstatic.com *.google.com  *.googleusercontent.com data:; connect-src 'self' https://*.googleapis.com *.google.com https://*.gstatic.com https://*.google-analytics.com https://script.crazyegg.com https://d2dq2ahtl5zl1z.cloudfront.net data: blob:; frame-src 'self' *.google.com; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.apptrian.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://firebasestorage.googleapis.com https://www.mollie.com 'self' *.signifyd.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com www.xtento.com cdn.xtento.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com www.apptrian.com chimpstatic.com downloads.mailchimp.com *.list-manage.com widget.freshworks.com m2epro.freshdesk.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.avada.io *.shopify.com js.mollie.com pay.google.com applepay.cdn-apple.com 'self' *.signifyd.com 'self' *.online-metrix.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com maps.googleapis.com www.xtento.com cdn.xtento.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com widget.freshworks.com m2epro.freshdesk.com maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com www.apptrian.com widget.freshworks.com m2epro.freshdesk.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-ebJrMCKU2RxmE9kd37KX-Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com maxcdn.bootstrapcdn.com *.klaviyo.com widget.solvemate.com *.dixa.io cdn.mouseflow.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.weltpixel.com *.dixa.io 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com *.googleapis.com https://images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ blob: ratinglogo.bisnode.com widget.solvemate.com westpack.b-cdn.net d3k81ch9hvuctc.cloudfront.net bat.bing.com ss.westpack.com res.cloudinary.com px.ads.linkedin.com pysfnvrg.westpack.com *.hsforms.com *.hubspot.com westpack.com www.google.dk www.google.de www.google.bg www.google.fr www.google.be data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://core.helloretail.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.sleeknote.com g10696554090.co g1980843351.co widget.solvemate.com policy.app.cookieinformation.com westpack.b-cdn.net *.klaviyo.com pysfnvrg.westpack.com helloretailcdn.com cdn.mouseflow.com *.dixa.io bat.bing.com s.pinimg.com ct.pinterest.com analytics.ahrefs.com snap.licdn.com *.hs-scripts.com *.hs-analytics.net *.hs-banner.com *.hscollectedforms.net *.cloudflareinsights.com *.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com https://static.klaviyo.com *.fontawesome.com maxcdn.bootstrapcdn.com widget.solvemate.com *.klaviyo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.dixa.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://core.helloretail.com https://helloretailcdn.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ widget.solvemate.com *.sleeknote.com api.solvemate.com policy.app.cookieinformation.com ss.westpack.com ct.pinterest.com *.dixa.io eu01.rec.mouseflow.com sentry.io wss://sockets.dixa.io consent.app.cookieinformation.com analytics.ahrefs.com pysfnvrg.westpack.com px.ads.linkedin.com *.hscollectedforms.net *.clarity.ms bat.bing.com bat.bing.net *.cloudflareinsights.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src blob: *.klaviyo.com ratinglogo.bisnode.com fonts.googleapis.com data: fonts.gstatic.com www.gstatic.com g10696554090.co g1980843351.co policy.app.cookieinformation.com westpack.b-cdn.net *.sleeknote.com widget.solvemate.com helloretailcdn.com *.helloretail.com ss.westpack.com pysfnvrg.westpack.com *.cloudfront.net api.solvemate.com cdn.mouseflow.com connect.facebook.net www.facebook.com bat.bing.com bat.bing.net s.pinimg.com ct.pinterest.com region1.analytics.google.com www.google.be *.dixa.io googleads.g.doubleclick.net www.google.com www.google.dk www.googleadservices.com ajax.cloudflare.com res.cloudinary.com stats.g.doubleclick.net analytics.ahrefs.com *.hs-scripts.com snap.licdn.com *.hs-analytics.net *.hs-banner.com *.hscollectedforms.net px.ads.linkedin.com *.googlesyndication.com www.googletagmanager.com *.hsforms.com *.hubspot.com *.clarity.ms *.cloudflareinsights.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri widget.sleeknote.com widget.solvemate.com 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net https://fonts.gstatic.com https://www.google.com https://www.gstatic.com *.fontawesome.com https://fonts.bunny.net *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.cardinaltrusted.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.tawk.to 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ cdn.cardknox.com *.cardinalcommerce.com *.cardinaltrusted.com pay.google.com *.solapayments.com *.cardknox.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.paypal.com * *.tawk.to 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.gstatic.com *.solapayments.com *.cardknox.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.tawk.to cdn.jsdelivr.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com https://rum.hlx.page https://cdn.cardknox.com/ifields/3.5.2607.1401/ifields.min.js https://cdn.cardknox.com/sdk-3ds/1.2.2606.2901/cardknox-3ds.min.js *.googleapis.com *.google.com *.gstatic.com cdn.cardknox.com *.cardinalcommerce.com *.cardinaltrusted.com www.gstatic.com *.solapayments.com *.cardknox.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.google.com *.gstatic.com cdn.cardknox.com/ *.fontawesome.com https://fonts.bunny.net unsafe-inline assets.braintreegateway.com *.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io http://dpm.demdex.net https://api.cardknox.com/threeds/v1/jwt/staging https://kg668dbov0.execute-api.us-east-1.amazonaws.com/stag/log https://www.google.com https://www.gstatic.com api.cardknox.com *.cardinalcommerce.com *.cardinaltrusted.com kg668dbov0.execute-api.us-east-1.amazonaws.com pay.google.com play.google.com cdn.cardknox.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.google.com google.com *.tawk.to wss://*.tawk.to 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-src *.bighand.com *.qualified.com https://alkaps.audioacrobat.com https://bighand.outgrow.us https://content.libsyn.com https://e.issuu.com https://html5-player.libsyn.com https://legaltalknetwork.com https://open.spotify.com https://player.vimeo.com https://www.google.com/ https://www.tickcounter.com/ https://www.youtube.com/;media-src *.bighand.com *.qualified.com cantarusbighand.s3.amazonaws.com 'self';frame-ancestors *.bighand.com https://www.google.com/;font-src *.typekit.net data: https:;style-src *.typekit.net 'self' 'unsafe-inline';img-src data: https:;connect-src https: wss:;script-src 'nonce-GPgJR14Ng1kT4op4UvADFqNe' 'strict-dynamic' 'unsafe-eval' 'nonce-nLHNEFayoznuUd2/5beQ/Csq';default-src 'none';manifest-src 'self';report-to csp-endpoint 1
base-uri 'self'; block-all-mixed-content; default-src 'self'; form-action 'self'; frame-ancestors 'self'; plugin-types 'none'; script-src 'self' 'report-sample' 'unsafe-inline'; style-src 'self' 'report-sample' 'unsafe-inline'; object-src 'none'; worker-src 'none'; report-uri https://prod.ap.batic.cudasvc.com/xenios/api/v1/error/report??paid=151&spid=26912&v=v1.0&payload=FSAHmqSHa6wuUd0r-QkGsQbnInCrsPZHNsKp9EHURP1ORrd86qwWi99RA4vtlyXd5k4deyTZStNplpTbY91Fyh3hGXpXwy09N97NpbdTyBYL2GsjpBwz6wnJkvHor0C_gLYYhhQRJTwjuPc4G5B9_lwxxXgYjLADnS_ebP9UVes=; 1
default-src 'self'; report-uri https://csp.threatview.app/report; report-to threatview 1
default-src 'self' https://ajax.googleapis.com https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.gstatic.com; script-src 'self' 'nonce-MjY5NmQyOTVkYjY2ODBlNTdjZDcwNmEyNTBiYjQ2Y2I5NGY3NmZiN2U5ZjQzYjE0Mzc3MjAyMDAzMWQ2NDRhZWM1Nzg5NjEzN2NlMzc1NzAzNGRhMzJkZjJhM2QxY2Y0ZTRmNDZhMDMyMjc5ZWExYjI0YTJhOWQ5NWMxMzAxZjE=' 'strict-dynamic' https://ajax.googleapis.com https://apis.google.com https://cdn.cookie-script.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://chatbot.altea-service.it https://connect.facebook.net https://m.gooux.com https://www.altea.it https://www.google.com https://www.googletagmanager.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://www.gstatic.com; img-src 'self' data: https://bat.bing.com https://c.clarity.ms https://fonts.gstatic.com https://m.gooux.com https://translate.google.com https://www.facebook.com https://www.google.at https://www.google.com.pk https://www.google.com.tr https://www.google.de https://www.google.es https://www.google.fr https://www.google.it https://www.google.nl https://www.google.ro https://www.googletagmanager.com https://www.gstatic.com; font-src 'self' data: https://altea.it https://fonts.gstatic.com https://frontend-cdn.perplexity.ai; connect-src 'self' https://ad.doubleclick.net https://ajax.googleapis.com https://analytics.google.com https://apis.google.com https://cdnjs.cloudflare.com https://chatbot.altea-service.it https://consent.cookie-script.com https://l.clarity.ms https://m.gooux.com https://overbridgenet.com https://pagead2.googlesyndication.com https://region1.analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://www.google-analytics.com https://www.google.com https://www.google.de https://www.google.it https://www.googletagmanager.com; frame-src 'self' https://toolytics.pa.clients6.google.com https://www.google.com https://www.googletagmanager.com; media-src 'self' https://cdn1.altea-service.it; report-uri https://csp.altea-service.it/collect/kf35XkfJA5oGDeepDNhP4WYMYtg4e2BoA7BN04MezL0XmwbH 1
default-src 'self'; script-src 'self' 'nonce-M4kUl1in9uPyk+UKFmDAhg==' 'strict-dynamic' https://metrics.gereedschapcentrum.nl https://*.hotjar.com https://*.mypurecloud.de https://*.kindlycdn.com https://*.exponea.com https://www.youtube.com https://s.ytimg.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https:; frame-src 'self' https://*.adyen.com https://*.paypal.com https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://*.adyen.com https://*.paypal.com; frame-ancestors 'none'; report-uri /api/csp-report; report-to csp-endpoint 1
default-src 'self' 'report-sample' https://*.hvcgroep.nl https://*.cloudflare.com https://script.hotjar.com https://vars.hotjar.com; child-src 'self' https://*.hvcgroep.nl https://vars.hotjar.com; connect-src 'self' https://*.hvcgroep.nl https://*.siteimprove.com https://*.hotjar.com wss://*.hotjar.com https://vc.hotjar.io https://944-zxb-764.mktoresp.com https://944-zxb-764.mktoutil.com https://api.parley.nu https://fcm.googleapis.com https://stats.g.doubleclick.net https://www.facebook.com https://www.google-analytics.com https://region1.analytics.google.com https://region1.google-analytics.com https://*.clarity.ms https://www.google.com https://eu-mobile.events.data.microsoft.com https://www.google.nl https://www.googletagmanager.com https://pagead2.googlesyndication.com https://sentry.uncinc.nl https://www.googleadservices.com https://*.arcgis.com https://services.arcgisonline.nl https://mpc-prod-16-s6uit34pua-uk.a.run.app; font-src 'self' https://*.hvcgroep.nl data: https://cdnjs.cloudflare.com https://script.hotjar.com https://fonts.gstatic.com; frame-src 'self' https://*.hvcgroep.nl https://vars.hotjar.com https://www.facebook.com https://www.googletagmanager.com https://oc-cdn-public-eur.azureedge.net blob:; img-src 'self' https://*.hvcgroep.nl data: https://maps2.opzet.nl https://api.mapbox.com https://api.tiles.mapbox.com https://connect.facebook.net https://www.facebook.com https://www.google-analytics.com https://www.google.com https://www.google.nl https://www.googletagmanager.com https://www.gstatic.com https://6147880.global.siteimproveanalytics.io blob: https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://stats.g.doubleclick.net https://www.googleadservices.com https://translate.google.com https://www.google.at https://www.google.de https://www.google.dk https://www.google.pl https://www.google.sk https://fonts.gstatic.com; manifest-src 'self'; media-src 'self' data:; object-src 'self'; script-src 'self' 'report-sample' 'unsafe-eval' https://*.hvcgroep.nl https://connect.facebook.net https://munchkin.marketo.net https://script.hotjar.com https://siteimproveanalytics.com https://static.hotjar.com https://www.google-analytics.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.clarity.ms https://oc-cdn-public-eur.azureedge.net https://scripts.clarity.ms cdn.jsdelivr.net connect.hvcgroep.nl https://cdn.jsdelivr.net https://cdn.siteimprove.net https://cdnjs.cloudflare.com https://inzamelkalender.hvcgroep.nl https://unpkg.com https://www.gstatic.com js.arcgis.com maps.google.com platform.instagram.com platform.twitter.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'report-sample' 'unsafe-inline' https://*.hvcgroep.nl https://script.hotjar.com https://static.hotjar.com https://www.google-analytics.com https://www.googletagmanager.com https://munchkin.marketo.net https://connect.facebook.net https://siteimproveanalytics.com 'sha256-tG42vzHFMqwh/DkZBsIyZwpCMLWFOH9okZgvK40OgMs=' 'sha256-g9eJvogbhH3hbR9PWy22s6MpQgCUPGQEU9QdImubPFk=' 'sha256-9CNyNvRJ2Yw/MKwT7evUJsdoc4RPEpJaW7MfUFVClDo=' 'sha256-wptA1bz5PS91ox7AKK0pfeVLOIKgkprjrmnCs5zMgqY=' 'sha256-3+ks5XzX1B7b1xWnUeyRI9aUstrudNNKOhjq11XQl48=' 'sha256-lmcjjO8daPS1bNJ5EjCKUgN29fqwEUYnhbiF7JEUuUc=' 'sha256-fKEfLONzF8oS0QBvI3NlX17OnSQ9sSBr+HwKNkEU/jI=' 'sha256-25Q9OlbEKG01Nk1jXpq/FDam3F4X47Ay36rc9EpkYeY=' 'sha256-nsGHFc5u5Q/xNw68icWu+uMUfbK5TNyJWow+tpuxTWg=' 'sha256-L+HbZGytyDmawreZQyAzdQS+0MahHSJU/2TW7bFnvuc=' https://googleads.g.doubleclick.net https://oc-cdn-public-eur.azureedge.net https://www.clarity.ms https://scripts.clarity.ms cdn.jsdelivr.net connect.hvcgroep.nl https://cdn.jsdelivr.net https://cdn.siteimprove.net https://cdnjs.cloudflare.com https://inzamelkalender.hvcgroep.nl https://unpkg.com https://www.gstatic.com js.arcgis.com maps.google.com platform.instagram.com platform.twitter.com; style-src 'self' 'report-sample' 'unsafe-inline' https://*.hvcgroep.nl https://cdnjs.cloudflare.com https://oc-cdn-public-eur.azureedge.net https://cdn.jsdelivr.net; style-src-attr 'self' 'report-sample' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://*.hvcgroep.nl https://oc-cdn-public-eur.azureedge.net https://js.arcgis.com https://www.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; worker-src 'self' blob:; base-uri 'self'; form-action 'self' https://www.facebook.com; frame-ancestors 'self' 1
frame-ancestors 'self'; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubc84894f8561e82477e13b6c01d853bc2&dd-evp-origin=content-security-policy&ddsource=csp-report 1
object-src 'none';base-uri 'self';script-src 'nonce-4TY_Bjcr8eDz8iWlR5ei9A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com data: checkout.tabby.ai widgets.tabby.ai cdn.tabby.ai fonts.googleapis.com storage.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.instagram.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com checkout.tabby.ai *.facebook.com *.instagram.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.tamara.co https://maps.googleapis.com *.googletagmanager.com https://www.google.co.in https://meetanshi.com/media/logo.png flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com checkout.tabby.ai widgets.tabby.ai cdn.tabby.ai fonts.googleapis.com storage.googleapis.com *.facebook.com https://x.adroll.com https://px.ads.linkedin.com https://tr.snapchat.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.plugins.emarsys.net *.scarabresearch.com business.facebook.com *.avada.io https://www.googletagmanager.com tagmanager.google.com https://www.googleadservices.com *.tamara.co https://maps.googleapis.com *.googletagmanager.com https://analytics.google.com s7.addthis.com *.googleapis.com *.gstatic.com maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com checkout.tabby.ai widgets.tabby.ai cdn.segment.com www.google.com cdn.sift.com score.jcsc.online seondf.com deviceinf.com getdeviceinf.com *.instagram.com *.facebook.com *.facebook.net https://static.addtoany.com *.hotjar.com *.adroll.com https://snap.licdn.com https://sc-static.net *.snapchat.com https://client-version.cf.emarsys.net *.emarsys.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.tamara.co *.googleapis.com *.google.com *.gstatic.com *.addtoany.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.stripe.network *.stripecdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.tamara.co 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.scarabresearch.com *.eservice.emarsys.net business.facebook.com https://get.geojs.io *.avada.io *.tamara.co https://maps.googleapis.com https://analytics.google.com https://stats.g.doubleclick.net ekr.zdassets.com/ http://dpm.demdex.net https://www.google.com https://www.gstatic.com www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com checkout.tabby.ai widgets.tabby.ai cdn.segment.com api.segment.com api.segment.io api.amplitude.com *.seondfresolver.com *.deviceinfresolver.com *.getdeviceinfresolver.com *.instagram.com *.analytics.google.com *.facebook.com https://px.ads.linkedin.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.seondnsresolve.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; media-src 'self' blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:; object-src 'none'; report-uri /api/csp-report; report-to csp-endpoint 1
img-src https://higherlogicdownload.s3.amazonaws.com/CSIRESOURCES/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/CSIRESOURCES/ https://img.youtube.com/vi/ https://static.filestackapi.com/picker/ https://d2x5ku95bkycr3.cloudfront.net https://higherlogiclongterm.s3.amazonaws.com/CSIRESOURCES/ blob: https://d132x6oi8ychic.cloudfront.net 'self'; style-src https://d132x6oi8ychic.cloudfront.net 'unsafe-inline' https://higherlogiccloudfront.s3.amazonaws.com https://cdn.jsdelivr.net/jquery.slick/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://d2x5ku95bkycr3.cloudfront.net/ https://ajax.googleapis.com/ajax/libs/jqueryui/ https://use.fortawesome.com/ https://cdn.higherlogic.com/ai-assistant https://static.filestackapi.com/picker/ https://fonts.googleapis.com/ https://d3uf7shreuzboy.cloudfront.net/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/CSIRESOURCES/ https://higherlogicdownload.s3.amazonaws.com/CSIRESOURCES/ https://higherlogiclongterm.s3.amazonaws.com/CSIRESOURCES/ 'self'; font-src https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogiccloudfront.s3.amazonaws.com https://higherlogicdownload.s3.amazonaws.com/CSIRESOURCES/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/CSIRESOURCES/ 'self' https://higherlogiclongterm.s3.amazonaws.com/CSIRESOURCES/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://d2x5ku95bkycr3.cloudfront.net https://d132x6oi8ychic.cloudfront.net data:; script-src-elem https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d3uf7shreuzboy.cloudfront.net/ https://static.filestackapi.com/picker/ https://cdn.higherlogic.com/ai-assistant https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d2x5ku95bkycr3.cloudfront.net/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://www.gstatic.com/recaptcha/ https://static.filestackapi.com/filestack-js/ 'self' https://ajax.aspnetcdn.com/ajax/ 'unsafe-eval' 'unsafe-inline'; media-src https://higherlogiclongterm.s3.amazonaws.com/CSIRESOURCES/ https://higherlogicdownload.s3.amazonaws.com/CSIRESOURCES/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/CSIRESOURCES/ https://higherlogicstream.s3.amazonaws.com/CSIRESOURCES/ 'self' https://d132x6oi8ychic.cloudfront.net; script-src https://higherlogiclongterm.s3.amazonaws.com/CSIRESOURCES/ https://higherlogicdownload.s3.amazonaws.com/CSIRESOURCES/ https://ajax.aspnetcdn.com/ajax/ https://cdn.jsdelivr.net/jquery.slick/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d132x6oi8ychic.cloudfront.net https://cdn.informz.net 'unsafe-eval' https://use.fortawesome.com/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/CSIRESOURCES/ https://cdnjs.cloudflare.com/ajax/libs/prism/ 'unsafe-inline' https://d2x5ku95bkycr3.cloudfront.net/ https://higherlogiccloudfront.s3.amazonaws.com https://static.filestackapi.com https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d3uf7shreuzboy.cloudfront.net/ 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://api.connectedcommunity.org/ 'self' https://www.youtube.com/embed/ https://*.kb.us.higherlogic.com; connect-src https://upload.filestackapi.com https://static.filestackapi.com https://cloud.filestackapi.com/folder/list/ 'self' https://hl-managedservices.informz.net https://d3uf7shreuzboy.cloudfront.net/ blob:; worker-src 'self'; default-src 'self'; base-uri 'self'; frame-ancestors https://*.connectedcommunity.org/ 'self'; object-src 'none'; manifest-src 'self'; 1
font-src maxcdn.bootstrapcdn.com *.klarnacdn.net *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net *.gstatic.com https://smct.co https://smct.io *.smct.co *.smct.io *.amazonaws.com *.typekit.net data: 'self' 'unsafe-inline'; form-action 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.facebook.com https://plumrocket.com 'self' 'unsafe-inline' *.cardinalcommerce.com *.paypal.com *.bazaarvoice.com; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ pay.google.com * *.klarna.com *.clearpay.co.uk *.klarnaservices.com *.authorize.net *.cloudfront.net https://smct.co https://smct.io *.smct.co *.smct.io *.amazonaws.com www.googletagmanager.com https://plumrocket.com 'self' 'unsafe-inline' *.cardinalcommerce.com *.paypal.com *.braintreegateway.com *.bazaarvoice.com; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net www.paypalobjects.com *.vimeocdn.com i.ytimg.com *.youtube.com img.youtube.com assets.braintreegateway.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://images.unsplash.com *.afterpay.com *.clearpay.co.uk *.postcodeanywhere.co.uk *.klevu.com *.ksearchnet.com *.gstatic.com *.googleapis.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com *.cloudflare.com *.cloudfront.net *.dycdn.net http://im.dycdn.net *.bing.com *.google.com *.google.co.uk *.cookiebot.com *.doubleclick.net *.dormeo.co.uk https://smct.co https://smct.io *.smct.co *.smct.io *.amazonaws.com *.google.com.vn *.visualwebsiteoptimizer.com *.clarity.ms *.google.co.in bat.bing.net bat.bing.com https://analytics.tiktok.com *.googlesyndication.com *.cookieyes.com cdn-cookieyes.com *.facebook.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com https://prf.hn data: 'self' 'unsafe-inline' *.cardinalcommerce.com *.paypal.com *.klaviyo.com *.bazaarvoice.com; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net includestest.ccdc02.com www.paypalobjects.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ *.google.com mpsnare.iesnare.com pay.google.com *.klarna.com *.klarnacdn.net x.klarnacdn.net https://maps.googleapis.com https://player.vimeo.com *.afterpay.com *.clearpay.co.uk *.squarecdn.com https://hbiq.net dorme11116.pcapredict.com *.postcodeanywhere.co.uk *.klarnaservices.com js.klevu.com *.ksearchnet.com *.googleapis.com *.gstatic.com *.avada.io *.cloudflare.com *.twitter.com *.google.co.uk *.feefo.com *.cloudfront.net *.bing.com *.hotjar.com wss://*.noibu.com https://*.noibu.com *.tag4arm.com *.freshrelevance.com *.luigisbox.com *.debugbear.com *.cloudflareinsights.com *.dycdn.net *.datalabsgroup.com *.cookiefirst.com *.cookie-script.com *.cookiebot.com https://cdn.jsdelivr.net https://smct.co https://smct.io *.smct.co *.smct.io *.amazonaws.com *.google.com.vn smct.co data: self unsafe-inline pagead2.googlesyndication.com *.googlesyndication.com track.webgains.com analytics.webgains.io dev.visualwebsiteoptimizer.com *.clarity.ms *.typekit.net cdn-cookieyes.com *.trustpilot.com https://analytics.tiktok.com https://assets.gocertify.me https://secure.gocertify.me https://analytics-ipv6.tiktokw.us https://placement-api.clearpay.co.uk connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com https://prf.hn https://pzapi-nb.com https://pzapi-kg.com https://pzapi-ij.com/ https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval' *.cardinalcommerce.com *.paypal.com *.braintreegateway.com *.klaviyo.com *.bazaarvoice.com; style-src *.adobe.com display.ugc.bazaarvoice.com unsafe-inline assets.braintreegateway.com maxcdn.bootstrapcdn.com *.afterpay.com/ *.squarecdn.com *.postcodeanywhere.co.uk https://static.klaviyo.com *.klarnacdn.net *.klevu.com *.ksearchnet.com *.gstatic.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net *.cloudflare.com *.luigisbox.com *.jsdelivr.net *.visualwebsiteoptimizer.com *.typekit.net *.klaviyo.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zopim.com *.clarity.ms 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.paypalobjects.com *.braintree-api.com *.google.com google.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net https://maps.googleapis.com https://player.vimeo.com *.clearpay.co.uk *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com services.postcodeanywhere.co.uk *.klarnaservices.com *.klarna.com *.klevu.com *.ksearchnet.com maps.googleapis.com https://get.geojs.io *.avada.io wss://*.freshrelevance.com *.freshrelevance.com *.cloudfront.net *.dycdn.net *.luigisbox.com *.tag4arm.com *.debugbear.com *.facebook.com wss://*.noibu.com https://*.noibu.com *.google.co.uk *.googleapis.com *.googlesyndication.com *.hotjar.io *.hotjar.com wss://*.hotjar.com *.cookie-script.com *.doubleclick.net https://smct.co https://smct.io *.smct.co *.smct.io *.amazonaws.com *.google.com.vn smct.co track.webgains.com api.webgains.io *.visualwebsiteoptimizer.com cdn-cookieyes.com *.cookieyes.com *.clarity.ms *.bing.com *.google.co.in bat.bing.net bat.bing.com https://analytics.tiktok.com https://secure.gocertify.me https://analytics-ipv6.tiktokw.us *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net 'self' 'unsafe-inline' *.cardinalcommerce.com *.paypal.com *.braintreegateway.com *.klaviyo.com *.bazaarvoice.com; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.dormeo.co.uk/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://stats.wp.com https://snap.licdn.com https://*.licdn.com https://connect.facebook.net https://*.list-manage.com https://s3-eu-west-1.amazonaws.com https://embed.typeform.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.typekit.net https://p.typekit.net https://www.gstatic.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://use.typekit.net; frame-src 'self' https://www.youtube.com https://player.vimeo.com https://w.soundcloud.com https://www.facebook.com https://www.googletagmanager.com https://form.typeform.com; connect-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; upgrade-insecure-requests 1
object-src 'none'; script-src 'self' 'unsafe-inline' https://*.googletagmanager.com/gtm.js https://*.purechat.com https://prod.purechatcdn.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; script-src-attr 'self'; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src-attr 'self' 'unsafe-inline'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://*.googletagmanager.com https://*.google-analytics.com https://ssl.google-analytics.com https://www.googleoptimize.com https://*.hotjar.com https://maps.googleapis.com https://accounts.google.com https://cdn.segment.com https://cdn.segment.io https://*.clarity.ms https://analytics.tiktok.com https://*.tiktokw.us https://*.taboola.com https://bat.bing.com https://connect.facebook.net https://snap.licdn.com https://*.amplitude.com https://s.go-mpulse.net https://*.creativecdn.com https://*.cloudfront.net https://bzrcdn.openai.com; connect-src 'self' https://apiv2.habi.co https://strapi-v2.habi.co https://*.google-analytics.com https://ampcid.google.com https://ampcid.google.com.co https://analytics.tiktok.com https://*.tiktokw.us https://*.taboola.com https://api.segment.io https://cdn.segment.io https://bat.bing.com https://connect.facebook.net https://www.facebook.com https://px.ads.linkedin.com https://*.ingest.sentry.io https://*.ingest.us.sentry.io https://*.amplitude.com https://*.clarity.ms https://*.hotjar.com wss://*.hotjar.com https://s.go-mpulse.net https://c.go-mpulse.net https://event.getblue.io https://*.appspot.com https://*.cloudfront.net; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' https://accounts.google.com https://*.googletagmanager.com https://td.doubleclick.net https://www.facebook.com; worker-src 'self' blob:; frame-ancestors 'self'; report-uri https://csp-report.habi.co/csp-report 1
default-src https://www.oreilly.com/7EjQWM/weIx-q/j7Ge6t/AoPGthOs/I/fSp7hpu3iw/JjQXMCkYAQ/cz5rdW/MbDkYd https://www.oreilly.com/7EjQWM/weIx-q/j7Ge6t/AoPGthOs/I/fSp7hpu3iw/JjQXMCkYAQ/cz5rdW/MbDkYd https://www.oreilly.com/7EjQWM/weIx-q/j7Ge6t/AoPGthOs/I/fSp7hpu3iw/JjQXMCkYAQ/cz5rdW/MbDkYd  https://www.oreilly.com/7EjQWM/weIx-q/j7Ge6t/AoPGthOs/I/fup7hp6kDwG2GLuS/HwsSMCkYAQ/aT9Ram/cvTSM  https://www.oreilly.com https://www.oreilly.com  * 'unsafe-inline' 'unsafe-eval' data: blob: android-webview-video-poster: moz-extension: ms-browser-extension: chrome-extension: ios-log:; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubb898c25826db9d251f99fdcece943792&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service:wordpress-prod-cluster; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://challenges.cloudflare.com https://analytics.google.com https://cmp.inmobi.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://pagead2.googlesyndication.com https://secure.statcounter.com https://static.cloudflareinsights.com https://tpc.googlesyndication.com https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://www.googletagservices.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com https://cm.g.doubleclick.net https://cmp.inmobi.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://www.google.com; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: blob: https:; connect-src 'self' wss: https://analytics.google.com https://cmp.inmobi.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://secure.statcounter.com https://static.cloudflareinsights.com https://www.google-analytics.com https://www.googletagmanager.com; media-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none' 1
base-uri 'self'; style-src 'self' 'unsafe-inline' https://*.paypal.com https://assets.learn.groklearning-cdn.com https://vendor.learn.groklearning-cdn.com https://wc.grokacademy.org https://groklearning-cdn.com https://fonts.googleapis.com https://d33v4339jhl8k0.cloudfront.net https://d3hb14vkzrxvla.cloudfront.net https://djtflbt20bdde.cloudfront.net https://d12wqas9hcki3z.cloudfront.net https://beaconapi.helpscout.net https://beacon-v2.helpscout.net https://assets.learn.groklearning-cdn.com https://*.gstatic.com/; worker-src 'self' blob:; connect-src 'self' https://jspreadsheet.com data: https://*.paypal.com https://assets.learn.groklearning-cdn.com https://vendor.learn.groklearning-cdn.com https://wc.grokacademy.org https://groklearning-cdn.com https://fonts.googleapis.com https://d33v4339jhl8k0.cloudfront.net https://d3hb14vkzrxvla.cloudfront.net https://djtflbt20bdde.cloudfront.net https://d12wqas9hcki3z.cloudfront.net https://beaconapi.helpscout.net https://beacon-v2.helpscout.net https://assets.learn.groklearning-cdn.com https://*.gstatic.com/ https:// https://beacon-v2.helpscout.net wss://realtime.groklearning.com wss://dualsite-terminal.comp.gl wss://terminal.problemrunner.grokacademy.org wss://sandbox.comp.gl dualsite-cybersecurity.comp.gl dualsite-scratch.comp.gl dualsite-pxtmicrobit.comp.gl https://systemsareeverywhere.grokacademy.org https://dualsite-preview.comp.gl https://*.dualsite-preview.comp.gl https://sandbox.comp.gl https://*.sandbox.comp.gl; font-src 'self' data: https://assets.learn.groklearning-cdn.com https://vendor.learn.groklearning-cdn.com https://wc.grokacademy.org https://groklearning-cdn.com https://fonts.googleapis.com https://d33v4339jhl8k0.cloudfront.net https://d3hb14vkzrxvla.cloudfront.net https://djtflbt20bdde.cloudfront.net https://d12wqas9hcki3z.cloudfront.net https://beaconapi.helpscout.net https://beacon-v2.helpscout.net https://assets.learn.groklearning-cdn.com https://*.gstatic.com/; img-src 'self' https://www.gravatar.com data: blob: https://*.paypal.com https://*.paypalobjects.com https://code.org https://assets.learn.groklearning-cdn.com https://vendor.learn.groklearning-cdn.com https://wc.grokacademy.org https://groklearning-cdn.com https://fonts.googleapis.com https://d33v4339jhl8k0.cloudfront.net https://d3hb14vkzrxvla.cloudfront.net https://djtflbt20bdde.cloudfront.net https://d12wqas9hcki3z.cloudfront.net https://beaconapi.helpscout.net https://beacon-v2.helpscout.net https://assets.learn.groklearning-cdn.com https://*.gstatic.com/ https:// https://beacon-v2.helpscout.net; style-src-attr 'self' 'unsafe-inline'; form-action 'self' https://*.paypal.com; default-src 'self'; media-src 'self' https://*.paypal.com https://assets.learn.groklearning-cdn.com https://vendor.learn.groklearning-cdn.com https://wc.grokacademy.org https://groklearning-cdn.com https://fonts.googleapis.com https://d33v4339jhl8k0.cloudfront.net https://d3hb14vkzrxvla.cloudfront.net https://djtflbt20bdde.cloudfront.net https://d12wqas9hcki3z.cloudfront.net https://beaconapi.helpscout.net https://beacon-v2.helpscout.net https://assets.learn.groklearning-cdn.com https://*.gstatic.com/; frame-src 'self' https://www.youtube.com https://dualsite-author-assets.dev.comp.gl/ dualsite-cybersecurity.comp.gl dualsite-scratch.comp.gl dualsite-pxtmicrobit.comp.gl https://systemsareeverywhere.grokacademy.org https://dualsite-preview.comp.gl https://*.dualsite-preview.comp.gl https://sandbox.comp.gl https://*.sandbox.comp.gl https://assets.learn.groklearning-cdn.com https://vendor.learn.groklearning-cdn.com https://wc.grokacademy.org https://groklearning-cdn.com https://fonts.googleapis.com https://d33v4339jhl8k0.cloudfront.net https://d3hb14vkzrxvla.cloudfront.net https://djtflbt20bdde.cloudfront.net https://d12wqas9hcki3z.cloudfront.net https://beaconapi.helpscout.net https://beacon-v2.helpscout.net https://assets.learn.groklearning-cdn.com https://*.gstatic.com/; script-src 'self' https://*.paypal.com https://*.paypalobjects.com https://assets.learn.groklearning-cdn.com https://vendor.learn.groklearning-cdn.com https://wc.grokacademy.org https://groklearning-cdn.com https://fonts.googleapis.com https://d33v4339jhl8k0.cloudfront.net https://d3hb14vkzrxvla.cloudfront.net https://djtflbt20bdde.cloudfront.net https://d12wqas9hcki3z.cloudfront.net https://beaconapi.helpscout.net https://beacon-v2.helpscout.net https://assets.learn.groklearning-cdn.com https://*.gstatic.com/ https:// https://beacon-v2.helpscout.net dualsite-cybersecurity.comp.gl dualsite-scratch.comp.gl dualsite-pxtmicrobit.comp.gl https://systemsareeverywhere.grokacademy.org https://dualsite-preview.comp.gl https://*.dualsite-preview.comp.gl https://sandbox.comp.gl https://*.sandbox.comp.gl 'nonce-mnt5QNfH1GZ1UE3nfFlG9g=='; report-uri https://sentry.grokacademy.org/api/4/security/?sentry_key=c762995966bb5918c06995c9f19e851d&sentry_environment=prod 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net *.fonts.googleapis.com data: *.cloudflare.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com magento2-typesense data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * magento2-typesense 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com magento2-typesense 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.addthis.com *.pinterest.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com magento2-typesense 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://cdn.arducam.com https://uctronics.com https://www.uctronics.com https://blog.arducam.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.addthis.com *.pinterest.com *.cdninstagram.com magento2-typesense data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.instagram.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com mysyscloud.com/ magento2-typesense 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com magento2-typesense 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com magento2-typesense 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com http://search.arducam.com https://search.arducam.com https://cdn.arducam.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.cloudflare.com *.googleapis.com *.addthis.com *.graph.instagram.com *.google-analytics.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com mysyscloud.com/ magento2-typesense 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com magento2-typesense http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com *.googleapis.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://seo.mageplaza.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de accounts.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.facebook.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://api.goaffpro.com https://static.goaffpro.com *.googletagmanager.com *.facebook.net accounts.google.com *.fontawesome.com *.googleapis.com *.gstatic.com *.avada.io *.shopify.com *.sharethis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com accounts.google.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https://api.goaffpro.com https://static.goaffpro.com *.google-analytics.com accounts.google.com https://get.geojs.io *.avada.io *.sharethis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com widgets.shopvote.de data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com widget.freshworks.com m2epro.freshdesk.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com stats.anethum.de 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com widget.freshworks.com m2epro.freshdesk.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
upgrade-insecure-requests;  script-src 'self' googleads.g.doubleclick.net stats.g.doubleclick.net ws-na.assoc-amazon.com www.amazon.com rcm.amazon.com www.google.com apis.google.com cse.google.com www.google-analytics.com www.googletagmanager.com partner.googleadservices.com pagead2.googlesyndication.com www.googleadservices.com tpc.googlesyndication.com; frame-src googleads.g.doubleclick.net stats.g.doubleclick.net ws-na.assoc-amazon.com www.amazon.com rcm.amazon.com www.google.com apis.google.com cse.google.com www.google-analytics.com www.googletagmanager.com partner.googleadservices.com pagead2.googlesyndication.com www.googleadservices.com tpc.googlesyndication.com;   object-src 'self'; form-action 'none'; frame-ancestors 'none'; report-uri https://c408453ef55b803114646d679c50ef77.report-uri.com/r/d/csp/reportOnly; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cash-f.squarecdn.com *.fontawesome.com https://fonts.bunny.net *.klarnacdn.net *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.acsbapp.com data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com https://api.clerk.io https://cdn.clerk.io 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.certcapture.com *.klarna.com *.playground.klarna.com *.hotjar.com *.facebook.com *.criteo.com calendly.com *.doubleclick.net *.cookiebot.com *.dacast.com *.nextingcompany.com *.2trk.info www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.certcapture.com https://cdn.clerk.io https://firebasestorage.googleapis.com *.klarnacdn.net *.klarnaservices.com *.playground.klarnaservices.com *.klarnaevt.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.googletagmanager.com *.amazonaws.com pixel.quantserve.com *.google.com *.facebook.com *.cloudfront.net cx.atdmt.com *.clerk.io *.1rx.io *.adsymptotic.com *.bing.com *.google.it *.doubleclick.net *.clarity.ms *.calendly.com *.bidswitch.net *.adnxs.com *.adscale.de *.omnitagjs.com *.casalemedia.com *.360yield.com *.yieldlab.net *.media.net *.mediavine.com *.pubmatic.com *.outbrain.com *.rubiconproject.com *.sharethrough.com *.smartclip.net *.tremorhub.net *.tremorhub.com *.3lift.com *.acsbapp.com *.equalweb.com *.smartadserver.com *.taboola.com *.teads.tv *.yahoo.com *.emxdgt.com *.adform.net id5-sync.com *.ivitrack.com *.yieldmo.com *.krxd.net *.thebrighttag.com *.cookiebot.com blob: *.unrulymedia.com *.sizebay.technology *.userway.org www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.certcapture.com https://api.clerk.io https://cdn.clerk.io https://custom.clerk.io *.avada.io *.shopify.com *.klarnacdn.net *.klarnaservices.com *.playground.klarnaservices.com utt.impactcdn.com *.klarna.com x.klarnacdn.net *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.clerk.io *.googletagmanager.com *.google-analytics.com *.doubleclick.net/ *.quantserve.com rules.quantcount.com *.adform.net snap.licdn.com 127.0.0.1 *.hotjar.com *.jsdelivr.net commerce.adobedc.net *.aptrinsic.com *.iubenda.com *.cloudfront.net *.tremorhub.com *.criteo.com acsbapp.com *.acsbapp.com *.equalweb.com *.calendly.com *.myfeelback.com *.facebook.net *.bing.com *.clarity.ms clarity.ad *.clarity.ad *.cookiebot.com *.sizebay.technology *.preciso.net *.userway.org www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.certcapture.com https://api.clerk.io https://cdn.clerk.io *.fontawesome.com https://fonts.bunny.net *.klarnacdn.net *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.calendly.com *.equalweb.com *.userway.org 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://corneliani.eu-central-1.linodeobjects.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.certcapture.com https://get.geojs.io *.avada.io *.klarnaevt.com *.playground.klarnaevt.com *.klarnaservices.com *.playground.klarnaservices.com *.klarnacdn.net x.klarnacdn.net *.klarna.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.google-analytics.com *.doubleclick.net commerce.adobedc.net *.iubenda.com acsbapp.com *.acsbapp.com *.equalweb.com *.myfeelback.com *.googlesyndication.com *.criteo.com *.bing.com *.cookiebot.com *.sizebay.technology *.userway.org 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' ; frame-src 'self' https://app.netlify.com https://*.hubspot.com https://*.hsforms.com https://*.hsforms.net https://*.cookiebot.com https://*.cookiebot.eu https://www.googletagmanager.com https://www.youtube-nocookie.com https://static.twizzit.com https://*.homerun.co ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://js-eu1.hs-scripts.com https://js.hs-scripts.com https://*.hsforms.net https://js.hsforms.net https://js.hscollectedforms.net https://js.hs-analytics.net https://js-eu1.hs-analytics.net https://js.hs-banner.com https://js-eu1.hs-banner.com https://js.usemessages.com https://js-eu1.usemessages.com https://js-eu1.hsadspixel.net https://*.hubspot.com https://*.hsforms.com https://*.cookiebot.com https://*.cookiebot.eu https://*.g.doubleclick.net https://*.homerun.co https://connect.facebook.net ; style-src 'self' 'unsafe-inline' https://*.cookiebot.com https://*.cookiebot.eu https://*.homerun.co ; img-src 'self' data: https://cdn.sanity.io https://www.twizzit.com https://sst.twizzit.com https://*.hubspot.com https://*.hsforms.com https://*.hsforms.net https://track.hubspot.com https://*.cookiebot.com https://*.cookiebot.eu https://*.g.doubleclick.net https://www.google.com https://*.google.com https://*.homerun.co https://*.googlesyndication.com https://www.facebook.com https://*.facebook.com https://*.fbcdn.net ; font-src 'self' https://*.cookiebot.com https://*.cookiebot.eu ; connect-src 'self' https://*.google-analytics.com https://*.googletagmanager.com https://sst.twizzit.com https://*.hubspot.com https://*.hsforms.com https://*.hsforms.net https://*.hubapi.com https://*.cookiebot.com https://*.cookiebot.eu https://www.google.com https://*.google.com https://*.g.doubleclick.net https://*.homerun.co https://app.twizzit.com https://*.googlesyndication.com https://www.facebook.com https://*.facebook.com ; media-src 'self' https://cdn.sanity.io ; object-src 'none' ; base-uri 'self' ; 1
worker-src blob:; font-src fonts.gstatic.com use.typekit.net *.outdoorcap.com outdoorcap.my.salesforce.com data: *.gstatic.com holbal.formstack.com *.hsforms.net *.hsforms.com *.zoomcats.com *.kbmax.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com holbal.formstack.com *.hsforms.net *.hsforms.com *.kbmax.com *.hotjar.com *.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.sharethis.com *.outdoorcap.com outdoorcap.my.salesforce.com *.paypal.com *.duosecurity.com *.gstatic.com *.google.com holbal.formstack.com *.hsforms.net *.hsforms.com *.zoomcats.com *.kbmax.com *.hotjar.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.ftcdn.net *.behance.net *.sharethis.com *.outdoorcap.com outdoorcap.my.salesforce.com *.facebook.com *.facebook.net *.pinterest.com *.google.com *.googleapis.com *.gstatic.com *.googletagmanager.com holbal.formstack.com *.hsforms.net *.hsforms.com *.zoomcats.com *.kbmax.com *.hotjar.com track.hubspot.com cardjs.co.uk www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://rum.hlx.page *.sharethis.com *.googleapis.com player.vimeo.com *.outdoorcap.com outdoorcap.my.salesforce.com service.force.com *.salesforceliveagent.com *.googletagmanager.com *.google.com *.gstatic.com holbal.formstack.com *.hsforms.net *.hsforms.com *.zoomcats.com *.kbmax.com dh98j2ed63lww.cloudfront.net *.hotjar.com *.hsadspixel.net js.hs-scripts.com js.hs-analytics.net js.hs-banner.com *.facebook.net api.paytrace.com api.sandbox.paytrace.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com *.outdoorcap.com outdoorcap.my.salesforce.com *.googleapis.com *.gstatic.com holbal.formstack.com *.hsforms.net *.hsforms.com *.zoomcats.com *.kbmax.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.sharethis.com *.googleapis.com *.outdoorcap.com outdoorcap.my.salesforce.com *.google-analytics.com https://stats.g.doubleclick.net holbal.formstack.com *.hsforms.net *.hsforms.com *.zoomcats.com *.kbmax.com *.hotjar.com api.hubapi.com *.facebook.com api.paytrace.com api.sandbox.paytrace.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://quickquack.com https://*.quickquack.com https://dontdrivedirty.com https://*.dontdrivedirty.com *.qqcw.us; connect-src 'self' https://*.ecs.us-east-1.on.aws https://*.us-central1.run.app https://global.ketchcdn.com https://*.ads.linkedin.com https://www.googleadservices.com https://analytics-ipv6.tiktokw.us https://analytics.tiktok.com https://sdk.iad-07.braze.com https://js.appboycdn.com https://quickquack.com https://*.quickquack.com https://dontdrivedirty.com https://*.dontdrivedirty.com https://*.qqcw.us https://js.stripe.com https://m.stripe.network https://m.stripe.com https://api.stripe.com https://*.googleapis.com https://cdn.sanity.io https://*.google.com https://*.gstatic.com https://unpkg.com https://*.mouseflow.com https://api.segment.io/v1/m https://connect.facebook.net/en_US/fbevents.js https://*.facebook.net https://*.facebook.com https://qqcw.report-uri.com/r/t/csp/reportOnly https://www.googletagmanager.com https://tagmanager.google.com https://*.fbot.me https://cdn.feathery.io https://api.feathery.io https://cdn.jsdelivr.net https://www.google-analytics.com https://google.com https://*.doubleclick.net https://*.adroll.com https://*.adsrvr.org data: blob:; font-src 'self' https://use.fontawesome.com https://fonts.gstatic.com https://js.stripe.com https://m.stripe.network https://m.stripe.com https://*.fbot.me https://use.typekit.net; img-src 'self' https: data: blob:; media-src 'self' https://quickquack.com https://*.quickquack.com https://dontdrivedirty.com https://*.dontdrivedirty.com https://*.qqcw.us https://*.fbot.me; script-src 'nonce-2876479ca351babbd1849198d984a29e' 'strict-dynamic' https: 'unsafe-eval' blob:; style-src 'self' 'unsafe-inline' https://*.googletagmanager.com https://quickquack.com https://*.quickquack.com https://dontdrivedirty.com https://*.dontdrivedirty.com https://use.fontawesome.com https://fonts.googleapis.com https://tagmanager.google.com/ https://fonts.googleapis.com/ https://*.fbot.me data: blob:; frame-src 'self' https://www.facebook.com https://js.stripe.com https://m.stripe.network https://m.stripe.com *.google.com https://www.googletagmanager.com https://tagmanager.google.com/ https://*.fbot.me https://cdn.feathery.io https://cdn.jsdelivr.net https://*.doubleclick.net https://www.youtube-nocookie.com/ https://keycloak.dev.qqcw.us https://auth.dontdrivedirty.com https://adsrvr.org https://*.adsrvr.org https://*.insight.adsrvr.org; frame-ancestors 'self' https://keycloak.dev.qqcw.us https://auth.dontdrivedirty.com; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com; worker-src 'self' blob:; report-uri https://qqcwstg.report-uri.com/r/d/csp/reportOnly; 1
object-src 'none'; base-uri 'self'; report-uri https://www.yespark.fr/csp-violation-report-endpoint 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://*.google-analytics.com https://www.googleadservices.com https://*.doubleclick.net https://snap.licdn.com https://*.posthog.com https://*.hs-scripts.com https://*.hsforms.net https://*.hs-analytics.net https://*.hs-banner.com https://*.hscollectedforms.net; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: blob: https:; media-src 'self' blob: https://cdn.sanity.io; connect-src 'self' https://*.sanity.io https://cdn.sanity.io https://*.posthog.com https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.doubleclick.net https://px.ads.linkedin.com https://*.licdn.com https://api.hsforms.com https://*.hsforms.com https://*.hubspot.com https://*.hubapi.com; frame-src 'self' https://app.speckle.systems https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.googletagmanager.com https://*.doubleclick.net https://*.hsforms.com; worker-src 'self' blob:; form-action 'self' https://*.hsforms.com; manifest-src 'self' 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; frame-src https:; connect-src 'self' https: wss:; object-src 'none'; base-uri 'self'; form-action 'self' https:; report-uri /csp-report.php; 1
default-src 'self'; script-src 'self' 'nonce-e_M4fSE9t_tLZlN9q2B_qJC4WNhtmc1VNTJyYQcpPs6BiPWZ0ntanw' data: https://*.openstreetmap.org https://*.readspeaker.com https://*.locaboo.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://*.openstreetmap.org blob: https://www.youtube.com https://api.service-digitale-verwaltung.de https://*.readspeaker.com https://translate.google.com https://fonts.gstatic.com https://freiwilligendatenbank.aktion-mensch.de; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://karten.freising.de https://*.locaboo.com https://tempus-termine.com https://www.facebook.com; connect-src 'self' data: https://*.openstreetmap.org https://api.service-digitale-verwaltung.de https://service.aktion-mensch.de https://api.pre-service-digitale-verwaltung.de https://*.readspeaker.com; script-src-elem 'self' 'nonce-e_M4fSE9t_tLZlN9q2B_qJC4WNhtmc1VNTJyYQcpPs6BiPWZ0ntanw' data: https://*.openstreetmap.org https://*.readspeaker.com https://*.locaboo.com blob: https://*.freising-v13.ddev.site https://api.service-digitale-verwaltung.de https://freiwilligendatenbank.aktion-mensch.de https://api.pre-service-digitale-verwaltung.de https://connect.facebook.net 'report-sample'; style-src 'self' https://*.readspeaker.com 'report-sample'; style-src-elem 'self' https://*.readspeaker.com 'nonce-e_M4fSE9t_tLZlN9q2B_qJC4WNhtmc1VNTJyYQcpPs6BiPWZ0ntanw' https://api.service-digitale-verwaltung.de https://freiwilligendatenbank.aktion-mensch.de https://api.pre-service-digitale-verwaltung.de https://www.gstatic.com 'report-sample'; font-src 'self' data: https://freiwilligendatenbank.aktion-mensch.de https://fonts.gstatic.com; media-src 'self' data:; frame-ancestors 'self'; form-action 'self' https://tempus-termine.com; worker-src 'self' 'nonce-e_M4fSE9t_tLZlN9q2B_qJC4WNhtmc1VNTJyYQcpPs6BiPWZ0ntanw' data: https://*.openstreetmap.org https://*.readspeaker.com https://*.locaboo.com blob: 'report-sample'; upgrade-insecure-requests; report-uri https://www.freising.de/@http-reporting?csp=report&requestTime=1789261768122471&requestHash=53ac158f17a463ddf283744314399ffbbd5eb0e9 1
default-src 'self'; script-src 'self' https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
default-src 'self'; object-src 'none'; manifest-src 'self'; media-src 'self'; worker-src blob:; frame-ancestors 'self' https://sms.hollandsnieuwe.nl https://vodafoneziggo.portal.mobilewater.nl https://act.ziggo.nl https://act.vodafone.nl; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.google-analytics.com https://*.googletagmanager.com https://www.googleadservices.com https://www.google.com https://www.gstatic.com https://cdn.conversationalsdevelopment.nl https://api.seamly-app.com https://static.cloudflareinsights.com https://www.dwin1.com https://lantern.roeyecdn.com https://www.awin1.com https://bat.bing.com https://embed.binkies3d.com https://az589851.vo.msecnd.net https://cdn.blueconic.net https://vodafoneziggo.blueconic.net https://ct.contentsquare.net https://t.contentsquare.net https://connect.facebook.net https://platform.linkedin.com https://nebula-cdn.kampyle.com https://cdn.cookielaw.org https://d5yoctgpv4cpx.cloudfront.net https://sc-static.net https://www.sc.pages03.net https://tr.snapchat.com https://static.customersaas.com https://static-accept.customersaas.com https://cloud.51degrees.com https://the.sciencebehindecommerce.com https://cdn.amplitude.com https://cdn.seamly-app.com https://googleads.g.doubleclick.net https://*.redditstatic.com https://*.tiktok.com https://capi-automation.s3.us-east-2.amazonaws.com https://*.qualtrics.com; connect-src 'self' https://login.hollandsnieuwe.nl https://nebula-cdn.kampyle.com https://www.google.com https://googleads.g.doubleclick.net https://srm.ba.contentsquare.net https://k-aeu1.contentsquare.net https://q-aeu1.contentsquare.net https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googleapis.com https://stats.g.doubleclick.net https://*.googlesyndication.com https://cdn.conversationalsdevelopment.nl https://api.seamly-app.com wss://api.seamly-app.com https://api.digitalcx.com https://embed.binkies3d.com https://az589851.vo.msecnd.net https://binkiesproductionweu.servicebus.windows.net https://vodafoneziggo.blueconic.net https://c.contentsquare.net https://udc-neb.kampyle.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal-de.onetrust.com https://p2iqhncxyh.execute-api.eu-central-1.amazonaws.com https://o245079.ingest.sentry.io https://tr.snapchat.com https://tr6.snapchat.com https://tms.data.hollandsnieuwe.nl https://api.prod.dcat.ziggo.io https://www.vodafone.nl https://hollandsnieuwe.billing.nl https://api-accept.customersaas.com https://static-accept.customersaas.com https://cloud.51degrees.com https://the.sciencebehindecommerce.com https://cdn.amplitude.com https://api.eu.amplitude.com https://*.doubleclick.net https://*.reddit.com https://*.google.com https://bat.bing.com; img-src 'self' blob: data: https://www.tracebuzz.com https://az589851.vo.msecnd.net https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://www.google.nl https://googleads.g.doubleclick.net https://api.seamly-app.com https://lantern.roeye.com https://www.awin1.com https://bat.bing.com https://c.contentsquare.net https://www.facebook.com https://udc-neb.kampyle.com https://cdn.cookielaw.org https://www.pages03.net https://is-accept.customersaas.com https://static.customersaas.com https://d35v9wsdymy32b.cloudfront.net https://www.wepowerconnections.com https://tr.snapchat.com https://*.reddit.com; frame-src 'self' https://*.fls.doubleclick.net https://*.doubleclick.net https://www.awin1.com https://nebula-cdn.kampyle.com https://tr.snapchat.com https://*.googletagmanager.com https://tms.data.hollandsnieuwe.nl; font-src 'self' data: https://cdn.conversationalsdevelopment.nl https://static.customersaas.com; style-src 'self' 'unsafe-inline' https://api.seamly-app.com https://static.customersaas.com https://d1r5etm691cejh.cloudfront.net; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=0TzDC8mxxZ2YB20_taMv1LptI8K97AJkb4YP9tccDPk-1707906598-1-Afy3yZhc08_yVv_Cfhfz1rf1gOMzf_NyAb8jiOVdfjNmh68AlIM8LFk5Sli-2KoYZkNCAoCRN7M2HfDwTk_nHT-LO7kSkEvGVfwlWOW4ACpo_1objwrdvoAdJw_ttEWBp9pXdVeLyjeP0kbKj-rZHN4IZ4_RVSBe3cL1GJld-B5D; report-to cf-csp-endpoint; 1
default-src 'self'; font-src 'self' https://fonts.gstatic.com; img-src 'self' https://*.googleapis.com https://*.gstatic.com *.google.com  *.googleusercontent.com data: https://www.gravatar.com/avatar/ https://*.google-analytics.com https://*.googletagmanager.com blob:; script-src 'self' https://*.googletagmanager.com 'nonce-4803edcbbdb63571e69b87faa9972a43' https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com blob:; style-src 'self' 'nonce-4803edcbbdb63571e69b87faa9972a43' https://fonts.googleapis.com; worker-src 'self' blob:; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googleapis.com *.google.com https://*.gstatic.com  data: blob:; frame-ancestors 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob: https://www.googletagmanager.com https://cdn.cookielaw.org https://cdn-app.pathfactory.com https://fast.wistia.com https://assets.rampmetrics.com https://connect.facebook.net https://snap.licdn.com https://munchkin.marketo.net https://tag.demandbase.com; worker-src 'self' blob:; connect-src 'self' https: wss: data: https://region1.analytics.google.com https://carrotfertility-privacy.my.onetrust.com https://www.google-analytics.com https://www.google.com https://stats.g.doubleclick.net https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.onetrust.com wss://project-hummingbird-hummingbird-websocket-nodejs-de-112831.cloud.adobe.io https://project-hummingbird-hummingbird-websocket-nodejs-de-112831.cloud.adobe.io; child-src 'self' blob:; style-src 'self' 'unsafe-inline' https:; script-src-elem 'self' 'unsafe-inline' https: blob: https://www.googletagmanager.com https://cdn.cookielaw.org https://cdn-app.pathfactory.com https://fast.wistia.com https://assets.rampmetrics.com https://connect.facebook.net https://snap.licdn.com https://munchkin.marketo.net https://tag.demandbase.com; font-src 'self' data: https:; img-src 'self' data: https: blob: https://cdn.heapanalytics.com https://heapanalytics.com; media-src 'self' blob: https: data:; frame-src 'self' https: blob:; object-src 'none'; base-uri 'self'; report-uri https://endpoint4.collection.sumologic.com/receiver/v1/http/ZaVnC4dhaV21hVEVZajDbg0Ny6DGuhlZwgREhqPubL0JuMkEPxF6CUVMjd6NvN-PaeE5lKT_nGGFc9ltjvf7fbhVJIGsFfDI8FC4xKqz7SFAOR8N-1knHQ==; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de canadapost.ca ct.soa-gw.canadapost.ca soa-gw.canadapost.ca https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com b.stats.paypal.com dub.stats.paypal.com paypal.com flagpedia.net https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://882irs0u.cdn.imgeng.in https://882irs0u.cdn.imgeng.in/pub/media chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.gstatic.com maps.googleapis.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com downloads.mailchimp.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://maps.googleapis.com https://player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com www.gstatic.com maps.googleapis.com canadapost.ca ct.soa-gw.canadapost.ca soa-gw.canadapost.ca https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' https: data:; frame-ancestors 'self'; 1
default-src 'none'; connect-src 'self' https: policy.app.cookieinformation.com; font-src https:; frame-src https:; img-src 'self' data: https:; manifest-src 'self' https:; media-src 'self' https: blob:; script-src 'unsafe-inline' https: maps.google.com; style-src 'unsafe-inline' https: mi; worker-src https:; base-uri https:; form-action https:; frame-ancestors 'self' https:; report-uri https://www.version2.dk/log-report-uri/reportOnly 1
frame-ancestors 'self'; script-src assets.adobedtm.com *.adobe.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://maps.googleapis.com https://player.vimeo.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com *.googleapis.com *.gstatic.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ portal.combeenation.com *.sandbox.paypal.com *.paypalobjects.com widget.freshworks.com m2epro.freshdesk.com *.trustedshops.com *.google-analytics.com *.googleadservices.com *.bing.com *.bing.net *.hotjar.com *.hotjar.io *.taboola.com *.facebook.net *.doubleclick.net *.online-metrix.net *.elfsight.com *.cloudflare.com *.visualwebsiteoptimizer.com *.vwo.com *.pushcrew.com *.cookieyes.com cdn-cookieyes.com js.mollie.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://static.unzer.com https://applepay.cdn-apple.com https://pay.google.com https://code.jquery.com https://h.online-metrix.net https://h64.online-metrix.net https://static-v2.unzer.com/v2/ui-components/ 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; default-src *.adobe.com fonts.googleapis.com cash-f.squarecdn.com widget.freshworks.com m2epro.freshdesk.com *.typekit.net *.visualwebsiteoptimizer.com *.vwo.com *.pushcrew.com wingify-assets.s3.amazonaws.com *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://sandbox.src.mastercard.com https://static-v2.unzer.com/v2/ui-components/ assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net data: widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com https://www.youtube.com p.typekit.net *.paypal.com * https://images.unsplash.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.awin1.com *.zenaps.com *.wepowerconnections.com *.cloudfront.net http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.googletagmanager.com *.combeenation.com combeespecs.blob.core.windows.net *.sandbox.paypal.com *.bing.com *.facebook.com *.google.com *.google.at *.google.de *.google.ch *.google.it *.google.nl *.elfsight.com *.elfsightcdn.com *.cookieyes.com cdn-cookieyes.com https://www.magezon.com magefan.com cm.magefan.com https://www.mollie.com 'self' data: https://widgets-qa.trustedshops.com https://static.unzer.com https://h.online-metrix.net https://www.gstatic.com www.sandbox.paypal.com pilot-payflowlink.paypal.com *.adobe.io use.typekit.net *.sentry.io *.braintreegateway.com *.braintree-api.com vimeo.com https://maps.googleapis.com https://player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https://the.sciencebehindecommerce.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ *.analytics.google.com *.appspot.com *.taboola.com *.hotjar.com *.hotjar.io *.google-analytics.com *.trustedshops.com https://integrations.etrusted.site https://api.unzer.com https://api.heidelpay.com https://sbx-api.heidelpay.com https://sbx-api.unzer.com https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://h64.online-metrix.net https://google.com/pay https://pay.google.com/ https://pay.google.com https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ https://static-cc.test.unzer.com fast.amc.demdex.net player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.youtube-nocookie.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.doubleclick.net https://www.googletagmanager.com/ portal.combeenation.com *.mollie.com *.google.com/ js.mollie.com https://sandbox.clicktopay.auth.visa.com https://clicktopay.visa.com https://sandbox.secure.checkout.visa.com https://secure.checkout.visa.com fonts.gstatic.com *.paypalobjects.com *.cdn-apple.com https://applepay.cdn-apple.com *.cleverreach.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; img-src data: blob: *; script-src-elem 'self' 'strict-dynamic' assets.ubuntu.com www.google-analytics.com www.googletagmanager.com www.youtube.com asciinema.org player.vimeo.com script.crazyegg.com www.googleadservices.com js.zi-scripts.com *.g.doubleclick.net www.google.com www.gstatic.com www.brighttalk.com snap.licdn.com connect.facebook.net maps.googleapis.com www.redditstatic.com munchkin.marketo.net *.googlesyndication.com cdn.jsdelivr.net https://esm.sh https://cdn.jsdelivr.net buttons.github.io cdn.livechatinc.com api.livechatinc.com secure.livechatinc.com www.tfaforms.com 'nonce-2H5LqZmtLPHkUMSZPhWI9g'; font-src 'self' assets.ubuntu.com fonts.google.com cdn.livechatinc.com secure.livechatinc.com; script-src 'self' blob: 'wasm-unsafe-eval' 'nonce-2H5LqZmtLPHkUMSZPhWI9g'; connect-src 'self' ubuntu.com analytics.google.com www.googletagmanager.com o4510662863749120.ingest.de.sentry.io www.google-analytics.com *.crazyegg.com *.g.doubleclick.net ad.doubleclick.net *.clarity.ms bat.bing.com bat.bing.net www.googleadservices.com js.zi-scripts.com *.google-analytics.com px.ads.linkedin.com ws.zoominfo.com youtube.com google.com www.google.ad www.google.ae www.google.al www.google.am www.google.as www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cat www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.cn www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.com www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.nr www.google.nu www.google.pl www.google.pn www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.st www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu www.google.ws fonts.google.com maps.googleapis.com pixel-config.reddit.com www.redditstatic.com conversions-config.reddit.com https://esm.sh https://lottie.host https://cdn.jsdelivr.net *.analytics.google.com www.facebook.com *.googlesyndication.com *.mktoresp.com assets.ubuntu.com api.github.com raw.githubusercontent.com api.livechatinc.com cdn.livechatinc.com secure.livechatinc.com web.facebook.com www.tfaforms.com unpkg.com; frame-src 'self' assets.ubuntu.com *.doubleclick.net *.crazyegg.com www.youtube.com/ asciinema.org player.vimeo.com www.googletagmanager.com www.google.com www.brighttalk.com cdn.livechatinc.com secure.livechatinc.com cdn.livechat-static.com; style-src 'self' cdn.jsdelivr.net www.tfaforms.com 'unsafe-inline'; media-src 'self' res.cloudinary.com assets.ubuntu.com; child-src 'self' blob: youtube.com google.com fonts.google.com api.livechatinc.com cdn.livechatinc.com secure.livechatinc.com; form-action 'self' https://pages.ubuntu.com https://ubuntu.com https://www.tfaforms.com; object-src 'none'; base-uri 'self'; worker-src 'self' blob:; report-uri /csp-report; 1
font-src https://static.dhlecommerce.nl https://fonts.gstatic.com *.fontawesome.com https://*.klaviyo.com https://*.typekit.net data: 'self' 'unsafe-inline'; form-action https://www.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net https://*.dpdconnect.nl *.addthis.com *.multisafepay.com https://pay.google.com https://www.googletagmanager.com https://td.doubleclick.net https://*.doubleclick.net https://measurements.bowork.nl https://www.facebook.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com https://images.unsplash.com https://maps.googleapis.com https://maps.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://img.youtube.com *.multisafepay.com https://www.google.com https://www.google.nl https://www.google.be https://www.google.ie https://www.googleadservices.com https://*.doubleclick.net https://*.googlesyndication.com https://measurements.bowork.nl https://www.facebook.com https://*.bing.com https://*.clarity.ms https://www.bowork.nl https://www.bowork.be https://imgproxy.vendic.dev data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://maps.googleapis.com https://static.dhlecommerce.nl https://*.dpdconnect.nl https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.multisafepay.com https://pay.google.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://static.dhlecommerce.nl https://maps.googleapis.com https://fonts.googleapis.com https://static.klaviyo.com https://cdn.jsdelivr.net *.fontawesome.com *.multisafepay.com https://cdnjs.cloudflare.com https://*.typekit.net https://*.klaviyo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com https://api-gw.dhlparcel.nl https://static.dhlecommerce.nl https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.multisafepay.com https://www.google.com https://www.google-analytics.com https://analytics.google.com https://*.doubleclick.net https://*.googlesyndication.com https://www.googleadservices.com https://p2iqhncxyh.execute-api.eu-central-1.amazonaws.com https://*.klaviyo.com https://assets.cookieconfirm.com https://measurements.bowork.nl https://ingest.promptwatch.com https://*.bing.com https://*.bing.net https://*.clarity.ms https://www.facebook.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data: blob:; media-src https: data: blob:; child-src https: blob:; font-src https: data:; connect-src https: wss:; report-uri /report-csp-violation 1
script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.googletagmanager.com/gtag/destination https://www.googletagmanager.com/gtag/js https://www.googletagmanager.com/gtm.js https://www.gstatic.com/glue/cookienotificationbar/cookienotificationbar.min.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-labs-ai-sandbox/_/js/k=boq-labs-ai-sandbox.AiSandboxAngularFrontend.en_US.4VUdhqiXTI4.2018.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /_/AiSandboxAngularFrontend/cspreport/fine-allowlist 1
img-src https://higherlogicdownload.s3.amazonaws.com/NASN/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/NASN/ https://img.youtube.com/vi/ https://static.filestackapi.com/picker/ https://d2x5ku95bkycr3.cloudfront.net https://higherlogiclongterm.s3.amazonaws.com/NASN/ blob: https://d132x6oi8ychic.cloudfront.net 'self'; style-src https://d132x6oi8ychic.cloudfront.net 'unsafe-inline' https://higherlogiccloudfront.s3.amazonaws.com https://cdn.jsdelivr.net/jquery.slick/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://d2x5ku95bkycr3.cloudfront.net/ https://ajax.googleapis.com/ajax/libs/jqueryui/ https://use.fortawesome.com/ https://cdn.higherlogic.com/ai-assistant https://static.filestackapi.com/picker/ https://fonts.googleapis.com/ https://d3uf7shreuzboy.cloudfront.net/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/NASN/ https://higherlogicdownload.s3.amazonaws.com/NASN/ https://higherlogiclongterm.s3.amazonaws.com/NASN/ 'self'; font-src https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogiccloudfront.s3.amazonaws.com https://higherlogicdownload.s3.amazonaws.com/NASN/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/NASN/ 'self' https://higherlogiclongterm.s3.amazonaws.com/NASN/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://d2x5ku95bkycr3.cloudfront.net https://d132x6oi8ychic.cloudfront.net data:; script-src-elem https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d3uf7shreuzboy.cloudfront.net/ https://static.filestackapi.com/picker/ https://cdn.higherlogic.com/ai-assistant https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d2x5ku95bkycr3.cloudfront.net/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://www.gstatic.com/recaptcha/ https://static.filestackapi.com/filestack-js/ 'self' https://ajax.aspnetcdn.com/ajax/ 'unsafe-eval' 'unsafe-inline'; media-src https://higherlogiclongterm.s3.amazonaws.com/NASN/ https://higherlogicdownload.s3.amazonaws.com/NASN/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/NASN/ https://higherlogicstream.s3.amazonaws.com/NASN/ 'self' https://d132x6oi8ychic.cloudfront.net; script-src https://higherlogiclongterm.s3.amazonaws.com/NASN/ https://higherlogicdownload.s3.amazonaws.com/NASN/ https://ajax.aspnetcdn.com/ajax/ https://cdn.jsdelivr.net/jquery.slick/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d132x6oi8ychic.cloudfront.net https://cdn.informz.net 'unsafe-eval' https://use.fortawesome.com/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/NASN/ https://cdnjs.cloudflare.com/ajax/libs/prism/ 'unsafe-inline' https://d2x5ku95bkycr3.cloudfront.net/ https://higherlogiccloudfront.s3.amazonaws.com https://static.filestackapi.com https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d3uf7shreuzboy.cloudfront.net/ 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://api.connectedcommunity.org/ 'self' https://www.youtube.com/embed/ https://*.kb.us.higherlogic.com https://*.facebook.com https://*.facebook.com/ https://cdn.openwidget.com/ https://insight.adsrvr.org/ https://d1eoo1tco6rr5e.cloudfront.net/; connect-src https://upload.filestackapi.com https://static.filestackapi.com https://cloud.filestackapi.com/folder/list/ 'self' https://hl-managedservices.informz.net https://d3uf7shreuzboy.cloudfront.net/ blob:; worker-src 'self'; default-src 'self'; base-uri 'self'; frame-ancestors https://*.connectedcommunity.org/ 'self' https://*.facebook.com; object-src 'none'; manifest-src 'self'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com data: 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cleverreach.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.trustedshops.com *.etrusted.com https://www.googletagmanager.com/ www.proaurum.de *.facebook.com *.podigee.io *.podigee-cdn.net *.awin1.com *.dwin1.com *.yumpu.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.trustedshops.com *.etrusted.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.proaurum.de *.cdninstagram.com *.cookiefirst.com *.roeye.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.trustedshops.com *.etrusted.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ player.vimeo.com connect.facebook.net *.cookiefirst.com *.dwin1.com *.roeyecdn.com d5yoctgpv4cpx.cloudfront.net cdnjs.cloudflare.com *.hsforms.net *.hsforms.com https://consent.cookiefirst.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.trustedshops.com *.etrusted.com *.cookiefirst.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.trustedshops.com *.etrusted.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ www.proaurum.de *.cookiefirst.com p2iqhncxyh.execute-api.eu-central-1.amazonaws.com ad.doubleclick.net googleads.g.doubleclick.net www.google.pl www.google.de www.google.at www.google.ch t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.clarity.ms https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.jquery.com https://cdn.datatables.net https://editor.datatables.net https://unpkg.com https://code.ionicframework.com https://stackpath.bootstrapcdn.com https://challenges.cloudflare.com https://www.gstatic.com https://t0.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cdn.datatables.net https://editor.datatables.net https://unpkg.com https://stackpath.bootstrapcdn.com; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com https://code.ionicframework.com; img-src 'self' data: https:; connect-src 'self' https://www.clarity.ms https://www.googletagmanager.com https://hunter.jobify360.co.il; frame-src 'self' https://challenges.cloudflare.com https://www.googletagmanager.com; form-action 'self' https://accounts.google.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self' 1
default-src 'self' blob:  https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; frame-src 'self' https://*.noxiaohao.com https://telegram.org https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://accounts.google.com https://oauth.telegram.org https://sgtm.btsgtm.com  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; script-src 'self' 'nonce-Vs9Q2fUjCe21V+r7SHAEKg==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh/v3RIRuG3kMikr5iha+7P/0TN/GNA=' https://*.noxiaohao.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://accounts.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://play.google.com https://analytics.google.com https://fonts.gstatic.com https://telegram.org https://oauth.telegram.org https://*.geetest.com https://*.geevisit.com https://sgtm.btsgtm.com https://static.wangsustatic.xyz https://static.wangsustatic.vip ; connect-src 'self' https://stats.g.doubleclick.net https://analytics.google.com https://*.noxiaohao.com wss://*.noxiaohao.com wss: https://www.turingfraud.net https://play.google.com https://accounts.google.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://telegram.org https://oauth.telegram.org https://static.geetest.com https://static.geevisit.com wss://stream.bitget.cloud https://www.google.com https://sgtm.btsgtm.com  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; worker-src 'self' blob:; img-src 'self' data: blob: https://img.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://img.bitgetimg.com https://img.gurenla.com https://*.bgbstatic.com https://lh3.googleusercontent.com https://static.geetest.com https://static.geevisit.com https://static-web.jjdsn.vip https://cdn.bitkeep.vip https://www.google.co.jp https://bin.wangsustatic.com https://sgtm.btsgtm.com https://analytics.google.com https://stats.g.doubleclick.net  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; style-src 'self' 'unsafe-inline' https://static.geetest.com https://static.geevisit.com https://accounts.google.com https://fonts.googleapis.com https://static.bgbstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; font-src 'self' data: https://static.geetest.com https://static.geevisit.com https://fonts.gstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri /v1/buried/log/cspSecurity /v1/monitor/csp?appId=d4b6df7d; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://*.gstatic.com *.yotpo.com *.googleapis.com *.fontawesome.com dhv2ziothpgrr.cloudfront.net *.klevu.com *.ksearchnet.com static.lipscore.com *.stape.io fonts.googleapis.com maxcdn.bootstrapcdn.com *.klarnaservices.com *.klarnaevt.com *.klarna.com *.klarnacdn.net *.google.com *.doubleclick.net *.pinterest.com *.tiktok.com *.nr-data.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.adyen.com *.yotpo.com *.facebook.com *.facebook.net *.amazon.co.uk 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.google.com *.braintreegateway.com *.paypal.com google.com *.adyen.com *.yotpo.com *.rvvuptech.com *.clearpay.co.uk *.sandbox.paypal.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.stape.io www.facebook.com platform.twitter.com *.doubleclick.net *.hotjar.com *.facebook.com *.facebook.net *.vimeo.com *.pinterest.com *.newrelic.com *.zdassets.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com *.gstatic.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net validator.swagger.io *.adyen.com https://*.gstatic.com *.yotpo.com *.afterpay.com *.sandbox.paypal.com *.stats.paypal.com dhv2ziothpgrr.cloudfront.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com static.lipscore.com blob: img.youtube.com magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com *.stape.io www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com *.facebook.com *.facebook.net *.klarnaservices.com *.klarnaevt.com *.klarna.com *.klarnacdn.net *.pinterest.com *.tiktok.com *.nr-data.net *.bing.com *.newrelic.com *.media-amazon.com *.payments-amazon.com *.amazon.com *.zdassets.com *.clarity.ms yotpo-editor-production.s3.amazonaws.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ *.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com *.yotpo.com *.afterpay.com *.paypal.com *.sandbox.paypal.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com static.lipscore.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.stape.io connect.facebook.net twitter.com platform.twitter.com *.googleapis.com *.klarnaservices.com *.klarnaevt.com *.klarna.com *.klarnacdn.net *.pinterest.com *.tiktok.com *.bing.com *.facebook.com *.facebook.net *.visualwebsiteoptimizer.com *.pinimg.com *.matomo.cloud *.adt313.net *.adt356.net *.adt356.com *.payments-amazon.com *.amazon.com *.zdassets.com *.clarity.ms https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com/ *.yotpo.com *.googleapis.com *.fontawesome.com dhv2ziothpgrr.cloudfront.net https://static.klaviyo.com *.klevu.com *.ksearchnet.com static.lipscore.com *.googletagmanager.com *.stape.io maxcdn.bootstrapcdn.com *.klarnaservices.com *.klarnaevt.com *.klarna.com *.klarnacdn.net *.google.com *.doubleclick.net *.pinterest.com *.tiktok.com *.nr-data.net *.bing.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.adyen.com *.yotpo.com *.sandbox.paypal.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com wapi.lipscore.com users.lipscore.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog *.stape.io *.google.co.uk *.klarnaservices.com *.klarnaevt.com *.klarna.com *.klarnacdn.net *.pinterest.com *.tiktok.com *.facebook.com *.facebook.net bat.bing.com *.bing.com *.postcodeanywhere.co.uk *.payments-amazon.com *.amazon.com *.zdassets.com *.clarity.ms *.merchant-center-analytics.goog 'self' 'unsafe-inline'; child-src *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://592944fc-ced2-48d3-a0ef-ebc9d01e03fd.sansec.watch/; report-to report-endpoint; 1
script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.googletagmanager.com/gtm.js https://www.googleadservices.com/pagead/conversion/ https://www.youtube.com/iframe_api https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ https://www.google-analytics.com/analytics.js https://www.google-analytics.com/gtm/js https://youtube.googleapis.com/s/player/ https://translate.google.com/translate_a/element.js https://ssl.gstatic.com/support/realtime/operator/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://maps.googleapis.com/maps/api/js https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.googletagmanager.com/gtag/js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-nova-atlas/_/js/k=boq-nova-atlas.AbydosUI.en_US.9VcNVf-7NN8.2018.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://maps.googleapis.com/maps-api-v3/api/js/ https://maps.googleapis.com/maps/vt https://maps.googleapis.com/maps/api/js/ https://maps.googleapis.com/maps/api/place/js/ https://www.youtube.com/s/player/ https://translate.googleapis.com/_/translate_http/_/js/;report-uri /_/AbydosUI/cspreport/fine-allowlist 1
frame-src 'self' *.loadbee.com *.youtube.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com js-agent.newrelic.com www.youtube.com www.google-analytics.com bam.nr-data.net static.dvinci-easy.com maps.googleapis.com bat.bing.com www.gstatic.com connect.facebook.net widget.msgp.pl services.gastronovi.com www.googleadservices.com blob: cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.kiprotect.com https://cdnjs.cloudflare.com unpkg.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' www.googletagmanager.com static.dvinci-easy.com unpkg.com js-agent.newrelic.com www.google-analytics.com maps.googleapis.com bam.nr-data.net connect.facebook.net bat.bing.com www.gstatic.com www.youtube.com widget.msgp.pl services.gastronovi.com www.google.com googleads.g.doubleclick.net www.recaptcha.net www.googleadservices.com content.syndigo.com js.monitor.azure.com static.hotjar.com script.hotjar.com *.dvinci-easy.com *.clarity.ms *.loadbee.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.kiprotect.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' static.dvinci-easy.com fonts.googleapis.com www.googletagmanager.com www.googleadservices.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com unpkg.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' static.dvinci-easy.com fonts.googleapis.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com unpkg.com; base-uri 'self'; frame-ancestors 'self' lpda9f27a988.hana.ondemand.com 1
default-src 'self';  script-src * 'unsafe-inline' 'unsafe-eval';  style-src * 'unsafe-inline';  img-src * data: blob:;  font-src 'self' data: https://fonts.gstatic.com https://*.century21-goodwin.com;  connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.google.com https://*.google.com.hk https://*.googleapis.com https://*.sharethis.com https://*.segment.com https://*.segment.io https://*.hotjar.com wss://*.hotjar.com https://*.hotjar.io https://*.clarity.ms https://*.doubleclick.net;  frame-src 'self' https://*.century21-goodwin.com https://www.google.com https://www.youtube.com https://*.facebook.com https://*.sharethis.com https://*.house730.com https://c21-vr.com/;  frame-ancestors 'self' https://www.google.com https://www.c21.hk https://c21.hk https://www.century21saikungproperty.com https://prod.century21saikungproperty.com; 1
font-src *.googleapis.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.iubenda.com *.criteo.com *.klaviyo.com applepay.cdn-apple.com *.klarnacdn.net maxcdn.bootstrapcdn.com *.thron.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it 'self' 'unsafe-inline'; frame-ancestors https://api.clerk.io https://cdn.clerk.io 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.iubenda.com *.klaviyo.com *.criteo.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com pay.google.com applepay.cdn-apple.com *.klarna.com *.thron.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.googleapis.com *.gstatic.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com *.iubenda.com *.criteo.com *.google.it *.klarnaservices.com *.klaviyo.com *.thron.com *.cloudfront.net https://cdn.clerk.io int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com cdn.klarna.com www.gstatic.com pay.google.com applepay.cdn-apple.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page *.googleapis.com *.gstatic.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.chervo.com *.clerk.io *.iubenda.com *.criteo.com *.klaviyo.com *.igodigital.com *.thron.com *.zdassets.com *.zendesk.com *.hotjar.com https://api.clerk.io https://cdn.clerk.io int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com www.google.com www.gstatic.com pay.google.com applepay.cdn-apple.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.chervo.com *.clerk.io *.iubenda.com *.criteo.com *.klaviyo.com https://api.clerk.io https://cdn.clerk.io *.klarnacdn.net https://static.klaviyo.com maxcdn.bootstrapcdn.com *.thron.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.thron.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com *.iubenda.com *.clerk.io *.criteo.com *.hotjar.io *.klaviyo.com *.sentry.io *.thron.com *.zdassets.com *.zendesk.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com pay.google.com applepay.cdn-apple.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.chervo.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src * data:; media-src *; 1
font-src fonts.gstatic.com d3dc1lgancj6l0.cloudfront.net *.fontawesome.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com https://www.googletagmanager.com/ *.google.com/ https://www.youtube.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com app-wallee.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de userlike-cdn-operators.s3-eu-west-1.amazonaws.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.googletagmanager.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com app-wallee.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.ampproject.org raw.githubusercontent.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de userlike-cdn-widgets.s3-eu-west-1.amazonaws.com d3dc1lgancj6l0.cloudfront.net *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io *.google.com/ assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com app-wallee.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn-images.mailchimp.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com unsafe-inline *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com cdn.ampproject.org *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de userlike-cdn-widgets.s3-eu-west-1.amazonaws.com api.userlike.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-eval'; script-src-elem 'self'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.youtube-nocookie.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.instagram.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com www.xtento.com www.facebook.com h.online-metrix.net vars.hotjar.com www.google.com checkoutshopper-test.adyen.com https://h.online-metrix.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * *.cdninstagram.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.trackedlink.net *.ddlnk.net content.staging.b2c.hirsch.sneakpeek.cc content.develop.b2c.hirsch.sneakpeek.cc magefan.com cm.magefan.com *.trustedshops.com www.xtento.com cdn.xtento.com www.facebook.com www.google.at h.online-metrix.net maps.googleapis.com maps.gstatic.com content.hirschthebracelet.com cx.atdmt.com *.outbrain.com *.ccm19.de https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com *.instagram.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.googleapis.com analytics.tiktok.com *.trustedshops.com www.xtento.com cdn.xtento.com connect.facebook.net www.google.com geoip-js.com h.online-metrix.net cdnjs.cloudflare.com js.authorize.net jstest.authorize.net www.gstatic.com static.hotjar.com script.hotjar.com maps.googleapis.com checkoutshopper-test.adyen.com *.outbrain.com *.ccm19.de https://h.online-metrix.net https://www.hirschthebracelet.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app webchat.dotdigital.com webchat.staging.dotdigital.com *.fontawesome.com *.ccm19.de 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.googleapis.com analytics.tiktok.com content.staging.b2c.hirsch.sneakpeek.cc content.develop.b2c.hirsch.sneakpeek.cc geoip-js.com stats.g.doubleclick.net h.online-metrix.net *.hotjar.com *.hirschthebracelet.com vc.hotjar.io checkoutshopper-test.adyen.com maps.googleapis.com *.ccm19.de https://h.online-metrix.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.ccm19.de 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https: data: wss: 'unsafe-inline' 'unsafe-eval' ; report-uri https://fr.tuto.com/a_reportcsp/log 1
font-src *.fontawesome.com fonts.gstatic.com 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src *.vimeo.com *.texdecor.test *.texdecor.com www.google.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com *.vimeocdn.com s.ytimg.com data *.cdninstagram.com 'self' 'unsafe-inline'; script-src *.sbc29.com *.sbc30.net *.sbc33.com *.sbc35.com www.vimeo.com cdn-scripts.signifyd.com www.youtube.com *.texdecor.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.fontawesome.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src api.sarbacane.com *.texdecor.test *.texdecor.com *.fact-finder.fr www.google-analytics.com 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' https: 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://cdn.riverty.design/ use.fontawesome.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com uc8.tv 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com uc8.tv https://documents.riverty.com/ *.weltpixel.com *.multisafepay.com https://pay.google.com *.addthis.com *.google.com/ self *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://cdn.myafterpay.com/ uc8.tv https://cdn.riverty.design/ *.multisafepay.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://www.magezon.com cdn.magmodules.eu *.hsforms.net *.hsforms.com 'self' data: www.google.com.ua self secure.adnxs.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com https://data.tuinmeubelland.nl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com uc8.tv https://cdn.myafterpay.com/ https://cdn.bnpl.riverty.io/ *.multisafepay.com https://pay.google.com https://www.googletagmanager.com tagmanager.google.com *.disqus.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.hsforms.net *.hsforms.com *.gstatic.com app.aiden.cx ar.configwise.io *.criteo.com *.criteo.net *.google-analytics.com *.googletagmanager.com static.widget.trengo.eu *.googleapis.com https://data.tuinmeubelland.nl 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.multisafepay.com tagmanager.google.com *.fontawesome.com *.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com fonts.google.com 'self' 'unsafe-inline'; object-src none 'self' 'unsafe-inline'; media-src *.adobe.com self 'self' 'unsafe-inline'; manifest-src self 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com uc8.tv https://cdn.myafterpay.com/ https://documents.myafterpay.com/ https://documents.riverty.com/ https://www.afterpay.nl/ https://cdn.bnpl.riverty.io/ https://trace-api.newrelic.com/ https://distributions.crowdin.net/ https://api.crowdin.com/ *.multisafepay.com https://www.google-analytics.com *.addthis.com t.elasticsuite.io *.hsforms.net *.hsforms.com ar.configwise.io *.googleapis.com api.widget.trengo.eu *.googletagmanager.com https://data.tuinmeubelland.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com self 'self' 'unsafe-inline' 'unsafe-eval'; base-uri self 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.gstatic.com www.paypalobjects.com maxcdn.bootstrapcdn.com *.typekit.net https://geowidget.easypack24.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com sandbox.przelewy24.pl secure.przelewy24.pl *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com pay.google.com apm.przelewy24.pl *.przelewy24.pl *.espago.com js.mollie.com maps.google.com www.youtube.com www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * https://geowidget-app.inpost.pl/ https://sandbox-easy-geowidget.easypack24.net/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com *.disqus.com static.przelewy24.pl www.gstatic.com gstatic.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com tile.openstreetmap.org mapa.orlenpaczka.pl ruch-osm.sysadvisors.pl flagpedia.net https://www.mollie.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.ggpht.com khms0.googleapis.com khms1.googleapis.com img.youtube.com *.googletagmanager.com *.google-analytics.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org www.google.com.ua data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.disqus.com sandbox.przelewy24.pl secure.przelewy24.pl pay.google.com apm.przelewy24.pl *.salesmanago.pl *.salesmanago.es *.salesmanago.com mapa.orlenpaczka.pl *.gstatic.com maps.googleapis.com js.mollie.com *.google-analytics.com *.analytics.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.gstatic.com use.typekit.net p.typekit.net assets.braintreegateway.com *.typekit.net https://geowidget.easypack24.net https://geowidget.inpost.pl 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com sandbox.przelewy24.pl secure.przelewy24.pl wss://ws.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com nominatim.openstreetmap.org www.gstatic.com maps.googleapis.com sentry.advox.pl *.googletagmanager.com *.google-analytics.com *.analytics.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com ws: *.easypack24.net *.inpost.pl *.openstreetmap.org 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * test.saferpay.com www.saferpay.com saferpay.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com www.xtento.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; style-src www.vitadrogerie.ch *.adobe.com unsafe-inline assets.braintreegateway.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; connect-src translate.googleapis.com translate-pa.googleapis.com www.google.co.th www.google.fi www.google.com.ph www.google.com.mt www.google.co.il www.google.no www.google.co.uz www.google.tn www.google.com.cy www.google.co.nz www.google.co.id www.google.com.eg www.google.lk www.google.sk www.google.kz www.google.com.vn www.google.mg www.google.com.bh www.google.dk gb-api.web-vision.de www.google.com dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com test.saferpay.com www.saferpay.com saferpay.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; font-src assets.tailwindapp.com cdn.scite.ai fonts.gstatic.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googletagmanager.com infird.com connect.facebook.net translate.google.com sc-static.net payment.preprod.direct.worldline-solutions.com www.google.com assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com analytics.google.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.facebook.com graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com test.saferpay.com www.saferpay.com saferpay.com payment.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com www.xtento.com cdn.xtento.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; img-src encrypted-tbn2.gstatic.com encrypted-tbn0.gstatic.com encrypted-tbn3.gstatic.com encrypted-tbn1.gstatic.com google.com lh3.google.com www.google.com.om www.google.com.do www.vitadrogerie.ch www.google.com.mt www.google.com.eg www.google.com.tw www.google.co.id www.google.lt www.google.com.cy www.google.co.uz www.google.bi www.google.com.co www.google.com.ar lh3.googleusercontent.com www.google.com.et www.google.mn www.google.kz www.google.dz www.google.je www.google.com.gt h2tcbox.baidu.com www.google.mv www.google.me www.google.co.ls www.google.com.au www.google.az www.google.so www.google.co.cr www.google.com.pk www.google.cm www.google.com.gh www.google.com.bh www.google.ad www.google.com.ec www.google.ee www.google.li www.google.com www.google.pl assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com test.saferpay.com www.saferpay.com saferpay.com www.xtento.com cdn.xtento.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline';report-uri https://www.vitadrogerie.ch/de/fl32csp/report/; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com *.luigisbox.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com vub.eway2pay.com *.smartsuppcdn.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.packeta.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * creativecdn.com *.facebook.com *.stripe.com *.googletagmanager.com gum.criteo.com mtgs.secretavenue.hu 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.topankovo.sk *.saxana.sk *.babytrend.sk *.botovo.cz *.cipofalva.hu *.secretavenue.cz *.secretavenue.hu *.pushalert.co *.glami.sk *.glami.cz *.glami.hu *.pinterest.com *.facebook.com *.google.com *.google.sk *.googleapis.com *.gls-hungary.com *.doubleclick.net *.yahoo.com *.bannerflow.net glamipixel.com *.bing.com *.rubiconproject.com *.adnxs.com *.casalemedia.com *.pubmatic.com *.taboola.com *.smartadserver.com *.360yield.com *.adform.net *.outbrain.com *.teads.tv *.3lift.com *.omnitagjs.com *.bidswitch.net *.adscale.de *.ivitrack.com *.media.net *.yieldlab.net *.twiago.com *.packeta.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.avada.io *.packeta.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.facebook.net *.pushalert.co *.luigisbox.com *.sentry-cdn.com *.googletagmanager.com *.exponea.com *.doubleclick.net *.glami.sk *.glami.cz *.glami.hu *.pinimg.com *.cloudfront.net *.newrelic.com *.freshmarketer.com *.stripe.com *.jquery.com *.nr-data.net *.bannerflow.net *.instyle.ai *.codeblocks.sk *.hotjar.com *.topankovo.sk *.saxana.sk *.babytrend.sk *.botovo.cz *.cipofalva.hu *.secretavenue.cz *.secretavenue.hu *.googlesyndication.com *.cloudflareinsights.com *.api-analytics.com *.bing.com *.smartsuppchat.com *.smartsuppcdn.com *.tiktok.com *.imedia.cz *.api-analytics.topankovo.sk *.api-analytics.saxana.sk *.api-analytics.babytrend.sk *.api-analytics.botovo.cz *.api-analytics.cipofalva.hu *.api-analytics.secretavenue.cz *.api-analytics.secretavenue.hu *.iperceptions.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.fontawesome.com *.googleapis.com assets.braintreegateway.com *.luigisbox.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://get.geojs.io *.avada.io *.packeta.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.topankovo.sk *.saxana.sk *.babytrend.sk *.botovo.cz *.cipofalva.hu *.secretavenue.cz *.secretavenue.hu *.luigisbox.com *.google-analytics.com *.googleapis.com *.pinterest.com sentry.io *.doubleclick.net *.gls-slovakia.sk *.gls-czech.com *.gls-hungary.com *.nr-data.net *.bannerflow.net *.googlesyndication.com *.codeblocks.sk *.cloudflareinsights.com wss://ws.hotjar.com content.hotjar.io *.facebook.com maps.gls-czech.cz *.api-analytics.topankovo.sk *.api-analytics.saxana.sk *.api-analytics.babytrend.sk *.api-analytics.botovo.cz *.api-analytics.cipofalva.hu *.api-analytics.secretavenue.cz *.api-analytics.secretavenue.hu 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.googleapis.com fonts.gstatic.com data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.sharethis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com vars.hotjar.com consentcdn.cookiebot.com js.mollie.com *.multisafepay.com https://pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.sharethis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://images.unsplash.com maps.googleapis.com maps.gstatic.com www.google.it www.google.de px.ads.linkedin.com *.omappapi.com *.gstatic.com *.cookiebot.com https://www.mollie.com *.multisafepay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page *.sharethis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com unpkg.com *.doofinder.com *.hotjar.com consent.cookiebot.com *.omappapi.com static.zdassets.com snap.licdn.com consentcdn.cookiebot.com js-agent.newrelic.com bam.nr-data.net *.clarity.ms *.adiacent.space *.activehosted.com js.mollie.com *.multisafepay.com https://pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.sharethis.com fonts.googleapis.com unpkg.com *.omappapi.com *.doofinder.com *.multisafepay.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.sharethis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com https://player.vimeo.com *.doofinder.com www.google.com googleads.g.doubleclick.net *.google-analytics.com ekr.zdassets.com *.omappapi.com erreahelp.zendesk.com wss://widget-mediator.zopim.com consentcdn.cookiebot.com bam.nr-data.net *.googlesyndication.com *.clarity.ms *.linkedin.com *.multisafepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'nonce-YknkIAvofnPsMeB2jwMbZQ==' 'strict-dynamic' 'unsafe-eval' 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; report-uri /_/csp-report 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.katapult.com *.klevu.com *.ksearchnet.com data: v2.zopim.com js.klevu.com static.klaviyo.com *.wistia.com maxcdn.bootstrapcdn.com fonts.yieldify-production.com acsbapp.com *.hotjar.com *.nudgify.com fonts.googleapis.com d1cwup7r903a1d.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.rainforestpay.com *.cardinalcommerce.com *.authorize.net 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com *.katapult.com d.agkn.com *.vibe.co vimeo.com *.doubleclick.net *.trustpilot.com *.paypalobjects.com *.wistia.com *.wistia.net *.sharethis.com *.zendesk.com *.zdassets.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.adroll.com *.attn.tv *.yieldify.com *.kaptcha.com *.sirv.com *.nudgify.com *.gstatic.com https://ct.pinterest.com https://gum.criteo.com *.stripe.com *.rainforestpay.com *.cardinalcommerce.com *.authorize.net *.tctm.co cdn.userway.org 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net https://images.unsplash.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com *.katapult.com *.klevu.com *.ksearchnet.com https://* vimeo.com bat.bing.com bat.bing.net js.klevu.com *.klaviyo.com v2.zopim.com maps.googleapis.com *.doubleclick.net *.wistia.com *.attn.tv *.nudgify.com cdn.userway.org *.trustpilot.com cdn.trustpilot.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page https://maps.googleapis.com https://player.vimeo.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.jsdelivr.net *.katapult.com js.klevu.com *.ksearchnet.com *.visualwebsiteoptimizer.com *.mida.so *.omniconvert.com *.convertexperiments.com *.metrics.convertexperiments.com *.vibe.co *.cometlytrack.com *.alhena.ai *.cookiehub.eu *.redditstatic.com *.wisernotify.com *.liadm.com *.getgobot.com v2.zopim.com static.zdassets.com ekr.zdassets.com widget-mediator.zopim.com widget.trustpilot.com bat.bing.com bat.bing.net *.klevu.com *.klaviyo.com *.attn.tv *.doubleclick.net acsbapp.com *.wistia.com *.wistia.net *.steelhousemedia.com *.mouseflow.com *.sharethis.com newrelic.com *.zendesk.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.adroll.com *.yieldify.com *.noibu.com *.lordoftheentertainingostriches.com *.kaptcha.com *.getbread.com *.sirv.com *.howuku.com *.usbrowserspeed.com *.clarity.ms *.nudgify.com *.gstatic.com api.wisernotify.com *.userway.org *.dotomi.com *.lab.amplitude.com *.googleapis.com *.parados.ai *.criteo.com rum.hlx.page adobedtm.com *.cardinalcommerce.com *.ccdc02.com *.googleadservices.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com unpkg.com *.omtrdc.com adobe.io *.paypal.com *.paypalobjects.com *.adobe.net apptrian.com *.facebook.com *.facebook.net *.breadpayments.com *.route.com *.stripe.com *.authorize.com *.splitit.com *.hyros.com *.taboola.com *.pinterest.com *.pinimg.com *.id5-sync.com *.tiktok.com *.rokt.com *.rokt-api.com *.iesnare.com static.cloudflareinsights.com www.googleoptimize.com cdn.routeapp.io fonts.googleapis.com *.amplitude.com cdn.jsdelivr.net protect-quote-q.route.com protection-widget.route.com stage-protection-widget.route.com protect-lightning-bolt-widget.route.com d3od5si8vgcekb.cloudfront.net ddbmicszvqxcg.cloudfront.net wobs.route.com elements.sika.health *.rainforestpay.com *.authorize.net maps.googleapis.com *.tctm.co cdn.userway.org invitejs.trustpilot.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com https://static.klaviyo.com https://cdn.jsdelivr.net *.katapult.com *.klevu.com *.ksearchnet.com *.mida.so *.omniconvert.com *.convertexperiments.com *.metrics.convertexperiments.com *.cookiehub.eu *.wisernotify.com js.klevu.com *.klaviyo.com *.sharethis.com maxcdn.bootstrapcdn.com wss://*.hotjar.com *.nudgify.com *.gstatic.com *.userway.org *.lab.amplitude.com d1cwup7r903a1d.cloudfront.net *.trustpilot.com cdn.userway.org https://statsjs.klevu.com https://js.klevu.com https://560658.tctm.co 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.alhena.ai blob: embedwistia-a.akamaihd.net *.zendesk.com *.zdassets.com *.gstatic.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://maps.googleapis.com https://player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de *.amazonservices.com *.amazonservices.co.uk *.amazonservices.co.jp *.amazonservices.jp *.amazonservices.it *.amazonservices.fr *.amazonservices.es *.amazonservices.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com *.mida.so *.omniconvert.com *.convertexperiments.com *.metrics.convertexperiments.com *.vibe.co *.cometlytrack.com *.alhena.ai *.bugsnag.com *.cookiehub.net *.cookiehub.eu *.redditstatic.com *.reddit.com *.azurewebsites.net *.wisermapp.com *.ip-api.com *.liadm.com *.getgobot.com *.googlesyndication.com *.attentivemobile.com *.klarnacdn.net *.yieldify.com *.dc.yieldify.com *.yieldify-production.com *.zopim.com wss://widget-mediator.zopim.com static.zdassets.com ekr.zdassets.com *.acsbapp.com *.doubleclick.net *.klaviyo.com https://bt.signifyd.com:11103/ *.signifyd.com:11103 *.paypalobjects.com *.wistia.com *.litix.io *.akamaihd.net bat.bing.com bat.bing.net *.trustpilot.com *.sharethis.com *.mouseflow.com *.attn.tv maps.googleapis.com *.zendesk.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.adroll.com *.lordoftheentertainingostriches.com *.noibu.com wss://*.noibu.com *.kaptcha.com zendesk-eu.my.sentry.io fonts.googleapis.com *.breadgateway.net *.breadpayments.com *.howuku.com *.clarity.ms *.nudgify.com *.gstatic.com api.wisernotify.com dp70uvwpivouv.cloudfront.net *.userway.org *.api.userway.org *.lab.amplitude.com *.parados.ai *.route.com *.amplitude.com *.criteo.com *.cardinalcommerce.com *.googleadservices.com *.analytics.google.com *.googletagmanager.com *.adobedc.net *.magento.com adobe.io *.typekit.net apptrian.com *.facebook.com *.facebook.net *.taboola.com *.pinterest.com id5-sync.com *.id5-sync.com *.eu-1-id5-sync.com *.tiktok.com *.tiktokw.us *.rokt.com *.rokt-api.com *.iesnare.com *.transmitsecurity.io featureassets.org prodregistryv2.org api.route.com cdn.jsdelivr.net protect-quote-q.route.com protection-widget.route.com stage-protection-widget.route.com d3od5si8vgcekb.cloudfront.net protect-lightning-bolt-widget.route.com ddbmicszvqxcg.cloudfront.net unpkg.com wobs.route.com *.sikahealth.com *.stripe.com *.rainforestpay.com *.authorize.net places.googleapis.com *.tctm.co api.userway.org 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src vimeo.com *.vimeocdn.com *.getbread.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://www.youtube.com; connect-src 'self' https://metrics.hotjar.io https://www.google.com https://content.hotjar.io wss://ws.hotjar.com https://vc.hotjar.io https://stats.g.doubleclick.net https://www.google-analytics.com https://analytics.google.com https://www.googleadservices.com https://load.collect.chat https://www.google.co.in https://api.collect.chat https://secure.ccavenue.com https://googleads.g.doubleclick.net https://jnn-pa.googleapis.com https://play.google.com https://onesignal.com https://*.googlevideo.com https://securegw.paytm.in; img-src 'self' http://myamcat.com https://googleads.g.doubleclick.net https://ssl.google-analytics.com https://connect.facebook.net https://www.google-analytics.com https://www.googletagmanager.com https://www.google.co.in https://www.google.com https://www.facebook.com https://d1igbv7ujk9jkv.cloudfront.net https://d13dtqinv406lk.cloudfront.net https://dujk9xa5fr1wz.cloudfront.net https://s3.amazonaws.com https://www.gstatic.com https://ssl.gstatic.com https://i.ytimg.com https://yt3.ggpht.com https://avatars.collectcdn.com https://collectcdn.com https://dashboard.ccavenue.com https://secure.ccavenue.com https://www.edx.org https://www.udemy.com data:; font-src 'self' https://collectcdn.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://stackpath.bootstrapcdn.com data:; style-src 'self' 'unsafe-inline' https://code.jquery.com https://www.gstatic.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://stackpath.bootstrapcdn.com https://onesignal.com https://secure.ccavenue.com; media-src 'self' https://collectcdn.com https://www.youtube-nocookie.com https://*.googlevideo.com blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://onesignal.com https://ssl.google-analytics.com https://storage.googleapis.com https://widgets.getsitecontrol.com https://www.google-analytics.com https://diffuser-cdn.app-us1.com https://www.googletagmanager.com https://www.gstatic.com https://static.hotjar.com https://s3.amazonaws.com https://collectcdn.com https://script.hotjar.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://code.jquery.com https://connect.facebook.net https://survey.survicate.com https://prism.app-us1.com https://www.google.com https://maxcdn.bootstrapcdn.com https://www.s.ytimg.com https://static.doubleclick.net https://cdn.onesignal.com https://secure.ccavenue.com/scripts/ https://securegw.paytm.in; object-src 'self' http://www.vimeo.com; base-uri 'self'; form-action 'self' 'unsafe-inline' https://www.facebook.com https://www.google.com https://secure.ccavenue.com https://securegw.paytm.in; frame-ancestors 'self'; frame-src 'self' https://bid.g.doubleclick.net https://td.doubleclick.net https://www.facebook.com https://www.google.com https://player.youku.com https://content.googleapis.com https://accounts.google.com 1
base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; report-uri /api/security/csp-report 1
frame-src 'self' https://www.google.com https://www.recaptcha.net https://go.crisp.chat https://client.crisp.chat; manifest-src 'self'; style-src 'self' 'unsafe-inline' https://client.crisp.chat https://fonts.googleapis.com https://assets.letso.live https://media.letso.live; worker-src 'self' blob:; img-src 'self' data: blob: https:; frame-ancestors 'self'; connect-src 'self' https://*.nr-data.net https://*.ably.io https://*.ably.net wss://*.ably.io wss://*.ably.net https://*.ably-realtime.com wss://*.ably-realtime.com https://client.crisp.chat https://storage.crisp.chat wss://client.relay.crisp.chat https://www.google.com https://www.recaptcha.net https://*.lovense-api.com https://*.lovense.com wss://*.lovense-api.com wss://*.lovense.com https://assets.letso.live https://media.letso.live https://hls-cdn.letso.live https://cdn.letso.live https://gateway.generflow-prod-mesa.generflow.com wss://gateway.generflow-prod-mesa.generflow.com; font-src 'self' data: https://fonts.gstatic.com https://client.crisp.chat https://assets.letso.live https://media.letso.live; object-src 'none'; media-src 'self' blob: data: https: https://assets.letso.live https://media.letso.live https://hls-cdn.letso.live https://cdn.letso.live; base-uri 'self'; script-src 'self' 'unsafe-inline' https://*.newrelic.com https://*.nr-data.net https://client.crisp.chat https://go.crisp.chat https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://*.lovense-api.com https://*.lovense.com wss://*.lovense-api.com wss://*.lovense.com https://assets.letso.live https://media.letso.live; default-src 'self'; report-uri /csp-report 1
default-src 'self';  script-src 'self' 'unsafe-inline' 'unsafe-eval' https://* http://*;  script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://* http://* blob:;  style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://*;  style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://*;  font-src 'self' data: https://fonts.gstatic.com https://*;  img-src 'self' data: blob: https://*;  connect-src 'self' https://* http://* wss://*;  frame-src 'self' https://*; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://fonts.gstatic.com *.klevu.com *.ksearchnet.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.googletagmanager.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klevu.com *.ksearchnet.com magefan.com cm.magefan.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com resources-webcomponents.klevu.com https://browser.sentry-cdn.com js.klevu.com *.ksearchnet.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.trustpilot.com https://js.klevu.com https://resources-webcomponents.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com resources-webcomponents.klevu.com https://fonts.googleapis.com *.klevu.com *.ksearchnet.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.trustpilot.com https://statsjs.klevu.com https://js.klevu.com https://resources-webcomponents.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://*.ingest.sentry.io *.klevu.com *.ksearchnet.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://code.jquery.com https://cdn.onesignal.com https://*.onesignal.com https://challenges.cloudflare.com https://embed.tawk.to https://*.tawk.to https://www.googletagmanager.com https://www.google-analytics.com https://static.cloudflareinsights.com https://*.googlesyndication.com https://*.doubleclick.net https://www.googletagservices.com https://adservice.google.com https://*.adtrafficquality.google; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; connect-src 'self' https://*.onesignal.com https://cdn.onesignal.com https://*.tawk.to https://embed.tawk.to https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com https://cloudflareinsights.com https://*.doubleclick.net https://*.googlesyndication.com https://*.adtrafficquality.google https://pagead2.googlesyndication.com https://www.google.com; frame-src 'self' https://challenges.cloudflare.com https://*.tawk.to https://*.doubleclick.net https://*.googlesyndication.com https://*.adtrafficquality.google https://www.google.com; frame-ancestors 'self'; base-uri 'self'; object-src 'none' 1
object-src 'none'; frame-ancestors 'self'; base-uri 'none'; script-src 'nonce-af679ab7e7857361bf6c274f8f5030ee' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'report-sample'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.google.com www.google-analytics.com www.googleadservices.com *.googleapis.com map.googleapis.com maps.googleapis.com *.googletagmanager.com *.google.com.ua 'self' data: data: *.magentocommerce.com *.zonos.com *.yotpo.com yotpo.com www.yotpo.com *.fontawesome.com *.authorize.net *.facebook.net *.facebook.com *.bootstrapcdn.com *.hubspot.com *.mailchimp.com *.tinymce.com *.tiny.cloud cdn.iglobalstores.com *.licdn.com *.bing.com *.dwin1.com www.dwin1.com *.bounceexchange.com linkedin.com *.adsymptotic.com p.adsymptotic.com *.cdnbasket.net *.cdnwidget.com *.iglobalstores.com xtento.com *.xtento.com *.cloudmaestro.com *.unpkg.com wss://widget-mediator.zopim.com *.widget-mediator.zopim.com *.sandbox.paypal.com *.paypal.com *.paypalobjects.com *.youtube.com *.apptrian.com www.apptrian.com *.vimeo.com *.use.typekit.net *.fls.doubleclick.net 11158761.fls.doubleclick.net js.authorize.net ssl.kaptcha.com *.kaptcha.com *.bouncex.net ciqtracking.com 'self' * data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.reviews.io *.reviews.co.uk *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com *.reviews.io *.reviews.co.uk c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * checkout.sezzle.com sandbox.checkout.sezzle.com tracking.sezzle.com www.google-analytics.com www.googleadservices.com *.googleapis.com map.googleapis.com maps.googleapis.com *.googletagmanager.com *.google.com.ua *.iglobalstores.com *.authorize.net *.spreedly.com *.hubspot.com *.getbread.com paypal.com *.braintree-api.com *.addthis.com www.youtube.com *.online-metrix.net *.signifyd.com *.demdex.net *.tinymce.com *.tiny.cloud cdn.iglobalstores.com *.licdn.com *.bing.com dwin1.com www.dwin1.com *.bounceexchange.com linkedin.com *.adsymptotic.com p.adsymptotic.com *.cdnbasket.net *.cdnwidget.com *.yotpo.com yotpo.com www.yotpo.com xtento.com *.xtento.com *.g.doubleclick.net *.cloudmaestro.com vimeo.com *.fls.doubleclick.net 11158761.fls.doubleclick.net js.authorize.net ssl.kaptcha.com *.kaptcha.com *.bouncex.net ciqtracking.com 'self' www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com *.b0e8.com https://images.unsplash.com *.cloudfront.net *.reviews.io *.reviews.co.uk magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://img.youtube.com media.sezzle.com *.google.com www.google-analytics.com *.googleapis.com map.googleapis.com maps.googleapis.com *.googletagmanager.com *.google.com.ua 'self' data: *.magentocommerce.com *.zonos.com *.yotpo.com yotpo.com www.yotpo.com *.ytimg.com *.s3.amazonaws.com *.amazonaws.com *.klaviyo.com *.g.doubleclick.net *.hubspot.com *.authorize.net *.bazaarvoice.org *.bazaarvoice.com display.ugc.bazaarvoice.com *.getbread.com *.signifyd.com *.e.aa.online-metrix.net *.bbb.org *.facebook.net *.facebook.com *.addthis.com *.collect.igodigital.com *.salesforceliveagent.com *.moatads.com *.addthisedge.com *.la1-c2-iad.salesforceliveagent.com *.la1-c2-ord.salesforceliveagent.com *.secure.force.com *.mailchimp.com *.demdex.net *.tinymce.com *.tiny.cloud cdn.iglobalstores.com *.licdn.com *.bing.com dwin1.com www.dwin1.com *.bounceexchange.com linkedin.com *.adsymptotic.com p.adsymptotic.com *.cdnbasket.net *.cdnwidget.com *.iglobalstores.com www.xtento.com cdn.xtento.com px.ads.linkedin.com bat.bing.com bat.bing.net pippio.com *.cloudmaestro.com *.events.bouncex.net *.fls.doubleclick.net 11158761.fls.doubleclick.net tr2.smarterhq.io *.smarterhq.io js.authorize.net ssl.kaptcha.com *.kaptcha.com www.shareasale.com *.shareasale.com *.bouncex.net ciqtracking.com *.doubleclick.net widget.reviews.io jsstore.s3-us-west-2.amazonaws.com *.s3-us-west-2.amazonaws.com 'self' * *.hsforms.net *.hsforms.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com *.b0e8.com *.bc0a.com https://maps.googleapis.com https://player.vimeo.com *.reviews.io *.reviews.co.uk *.disqus.com *.jsdelivr.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com checkout-sdk.sezzle.com sandbox.checkout-sdk.sezzle.com widget.sezzle.com *.googleapis.com map.googleapis.com maps.googleapis.com *.googletagmanager.com *.google.com.ua *.gstatic.com *.cloudflare.com acsbapp.com *.impactcdn.com *.trustedshops.com *.usercentrics.eu *.cardinalcommerce.com *.ccdc02.com *.authorize.net *.spreedly.com *.zonos.com *.yotpo.com *.bootstrapcdn.com bam.nr-data.net *.zopim.com *.facebook.net *.facebook.com *.zdassets.com *.klaviyo.com *.zendesk.com *.hs-scripts.com *.hs-analytics.net *.hs-banner.com fast.a.klaviyo.com *.hubspot.com wss://widget-mediator.zopim.com *.widget-mediator.zopim.com *.cookielaw.org *.bazaarvoice.org *.bazaarvoice.com display.ugc.bazaarvoice.com *.getbread.com *.onetrust.com paypal.com *.signifyd.com *.g.doubleclick.net *.addthis.com *.collect.igodigital.com *.salesforceliveagent.com *.moatads.com *.addthisedge.com *.la1-c2-iad.salesforceliveagent.com *.la1-c2-ord.salesforceliveagent.com *.braintree-api.com chimpstatic.com *.mailchimp.com mc.us18.list-manage.com *.tinymce.com *.tiny.cloud cdn.iglobalstores.com *.licdn.com *.bing.com *.bing.net dwin1.com www.dwin1.com *.bounceexchange.com linkedin.com *.adsymptotic.com p.adsymptotic.com *.cdnbasket.net *.cdnwidget.com *.iglobalstores.com yotpo.com www.yotpo.com xtento.com *.xtento.com *.cloudmaestro.com undefined/api/v2/sites/74088/recordings/content unpkg.com *.unpkg.com *.cloudfront.net d1n00d49gkbray.cloudfront.net/wknd/wknd_cartridge.js tr2.smarterhq.io *.apptrian.com hello.zonos.com staticw2.yotpo.com brainmd.com stats.g.doubleclick.net js.authorize.net ssl.kaptcha.com *.kaptcha.com *.go2sdk.com ciqtracking.com *.doubleclick.net script.crazyegg.com *.crazyegg.com js.adsrvr.org cdn.attn.tv container.pepperjam.com forms.hscollectedforms.net js.hscollectedforms.net salsify-ecdn.com fs19.formsite.com *.s3.amazonaws.com *.amazonaws.com s3.amazonaws.com s3-us-west-2.amazonaws.com *.execute-api.us-west-2.amazonaws.com alocdn.com b-code.liadm.com *.liadm.com api.retention.com cdn.oribi.io www.snapengage.com www.mnpa6gtrk.com shop.pe *.shop.pe static.cloudflareinsights.com cdn.cookie.pii.ai widget.reviews.io *.upsellit.com 'self' *.equalweb.com *.pii.ai *.hsforms.net *.hsforms.com www.xtento.com cdn.xtento.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.cloudfront.net *.reviews.io *.reviews.co.uk https://cdn.jsdelivr.net assets.braintreegateway.com fonts.cdnfonts.com *.google.com www.google-analytics.com www.googleadservices.com *.googleapis.com map.googleapis.com maps.googleapis.com *.googletagmanager.com *.google.com.ua *.gstatic.com *.magentocommerce.com *.zonos.com *.yotpo.com *.fontawesome.com getfirebug.com *.klaviyo.com *.bootstrapcdn.com *.authorize.net display.ugc.bazaarvoice.com *.signifyd.com *.facebook.net *.facebook.com *.mailchimp.com *.tinymce.com *.tiny.cloud cdn.iglobalstores.com *.licdn.com *.bing.com dwin1.com www.dwin1.com *.bounceexchange.com linkedin.com *.adsymptotic.com p.adsymptotic.com *.cdnbasket.net *.cdnwidget.com *.iglobalstores.com yotpo.com www.yotpo.com xtento.com *.xtento.com *.cloudmaestro.com www.sandbox.paypal.com *.fls.doubleclick.net 11158761.fls.doubleclick.net tr2.smarterhq.io *.smarterhq.io js.authorize.net ssl.kaptcha.com *.kaptcha.com *.bouncex.net ciqtracking.com widget.reviews.io 'self' * data: tagmanager.google.com fonts.google.com 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.google.com www.google-analytics.com www.googleadservices.com *.googleapis.com map.googleapis.com maps.googleapis.com *.googletagmanager.com *.google.com.ua *.zdassets.com *.tinymce.com *.tiny.cloud cdn.iglobalstores.com *.licdn.com *.bing.com dwin1.com www.dwin1.com *.bounceexchange.com linkedin.com *.adsymptotic.com p.adsymptotic.com *.cdnbasket.net *.cdnwidget.com *.iglobalstores.com *.yotpo.com yotpo.com www.yotpo.com xtento.com *.xtento.com *.cloudmaestro.com *.fls.doubleclick.net 11158761.fls.doubleclick.net js.authorize.net *.authorize.net ssl.kaptcha.com *.kaptcha.com *.bouncex.net ciqtracking.com 'self' * 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com https://maps.googleapis.com https://player.vimeo.com *.cloudfront.net *.reviews.io *.reviews.co.uk api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com gateway.sezzle.com sandbox.gateway.sezzle.com media.sezzle.com widget.sezzle.com *.googleapis.com map.googleapis.com maps.googleapis.com *.googletagmanager.com *.google.com.ua *.gstatic.com *.adobedtm.com *.acsbapp.com *.impactcdn.com *.ccdc02.com *.authorize.net *.zonos.com *.yotpo.com *.cloudflare.com *.jsdelivr.net *.trustedshops.com *.usercentrics.eu *.facebook.net *.facebook.com bam.nr-data.net *.zopim.com *.zdassets.com *.klaviyo.com *.zendesk.com *.hs-scripts.com *.hs-analytics.net *.hs-banner.com fast.a.klaviyo.com *.hubspot.com wss://widget-mediator.zopim.com *.widget-mediator.zopim.com *.cookielaw.org *.bazaarvoice.org *.bazaarvoice.com display.ugc.bazaarvoice.com *.getbread.com *.onetrust.com paypal.com *.signifyd.com *.g.doubleclick.net *.addthis.com *.collect.igodigital.com *.salesforceliveagent.com *.moatads.com *.addthisedge.com *.la1-c2-iad.salesforceliveagent.com *.la1-c2-ord.salesforceliveagent.com chimpstatic.com *.mailchimp.com *.demdex.net *.tinymce.com cdn.iglobalstores.com *.licdn.com *.bing.com *.bing.net dwin1.com www.dwin1.com *.bounceexchange.com linkedin.com *.adsymptotic.com p.adsymptotic.com *.cdnbasket.net *.cdnwidget.com *.iglobalstores.com yotpo.com www.yotpo.com xtento.com *.xtento.com *.cloudmaestro.com undefined/api/v2/sites/74088/recordings/content unpkg.com *.unpkg.com d1n00d49gkbray.cloudfront.net/wknd/wknd_cartridge.js tr2.smarterhq.io *.apptrian.com hello.zonos.com staticw2.yotpo.com brainmd.com stats.g.doubleclick.net js.authorize.net ssl.kaptcha.com *.kaptcha.com *.bouncex.net *.go2sdk.com ciqtracking.com *.doubleclick.net retail-client-events-service.internal.salsify.com script.crazyegg.com salsify-ecdn.com forms.hscollectedforms.net js.hscollectedforms.net events.attentivemobile.com *.attentivemobile.com shelterlogic-us.attn.tv *.attn.tv shelterlogic.sjv.io *.sjv.io tracking.crazyegg.com assets-tracking.crazyegg.com *.crazyegg.com api.retention.com b-code.liadm.com *.liadm.com *.execute-api.us-west-2.amazonaws.com manage.safeopt.com app.shop.pe alocdn.com shopper.shop.pe cdn.cookie.pii.ai geo.pii.ai consent-api.pii.ai api.reviews.io *.bc0a.com insight.adsrvr.org googlesyndication.com *.googlesyndication.com *.usbrowserspeed.com 'self' *.equalweb.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'nonce-M8mi-Iz8DE-iiLk68fsyoA' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/static-on-bigtable; base-uri 'none' 1
default-src 'self'; img-src 'self' data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self'; frame-ancestors 'none'; base-uri 'self'; object-src 'none' 1
object-src 'none'; script-src * 'report-sample' 'unsafe-inline'; style-src 'self' 'report-sample' 'unsafe-inline' cdnjs.cloudflare.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self' *.google-analytics.com *.google.com *.bing.com *.facebook.com *.clarity.ms data: *.cloudflare.com *.jsdelivr.net https://unpkg.com *.fontawesome.com *.youtube.com *.cdn.jsdelivr.net *.atbnd.com *.tiktok.com *.analytics.tiktok.com *.bat.bing.net *.analytics-ipv6.tiktokw.us *.mpc-prod-18-s6uit34pua-uc.a.run.app *.abtasty.com; connect-src 'self' *.google.com *.cookielaw.org *.doubleclick.net cdn.cookielaw.org *.clarity.ms *.hotjar.com *.google-analytics.com *.nr-data.net *.onetrust.com *.bing.com *.hotjar.io *.taboola.com *.googlesyndication.com *.googletagmanager.com *.analytics.google.com *.g.doubleclick.net *.empathy.co *.cloudflare.com *.jsdelivr.net https://unpkg.com *.fontawesome.com *.cdn.jsdelivr.net *.atbnd.com *.linkedin.com *.licdn.com *.visualwebsiteoptimizer.com *.tiktok.com *.analytics.tiktok.com *.bat.bing.net *.analytics-ipv6.tiktokw.us *.mpc-prod-18-s6uit34pua-uc.a.run.app *.abtasty.com https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' *.gstatic.com *.cloudflare.com *.jsdelivr.net https://unpkg.com *.fontawesome.com *.cdn.jsdelivr.net *.atbnd.com *.tiktok.com *.analytics.tiktok.com *.facebook.com *.abtasty.com; frame-src 'self' *.hotjar.com *.addtoany.com *.doubleclick.net *.cookielaw.org *.facebook.com *.totalenergies.es *.cloudflare.com *.jsdelivr.net https://unpkg.com *.fontawesome.com *.youtube.com *.cdn.jsdelivr.net *.atbnd.com *.googletagmanager.com *.tiktok.com *.analytics.tiktok.com *.bat.bing.net *.analytics-ipv6.tiktokw.us *.mpc-prod-18-s6uit34pua-uc.a.run.app *.abtasty.com; img-src 'self' *.google-analytics.com *.google.com *.bing.com *.facebook.com *.clarity.ms data: *.b26net.com *.invibes.com *.acquia-sites.com *.quantserve.com *.mookie1.com *.cookielaw.org *.adnxs.com *.google.es *.googletagmanager.com *.doubleclick.net *.analytics.google.com *.g.doubleclick.net *.googlesyndication.com *.empathy.co https://totalenergies.com *.cloudflare.com *.jsdelivr.net https://unpkg.com *.fontawesome.com *.google.com.uy *.cdn.jsdelivr.net *.atbnd.com *.linkedin.com *.licdn.com *.visualwebsiteoptimizer.com *.totalenergies.es *.tiktok.com *.analytics.tiktok.com *.bat.bing.net *.analytics-ipv6.tiktokw.us *.mpc-prod-18-s6uit34pua-uc.a.run.app *.abtasty.com about: https://www.google-analytics.com https://www.googletagmanager.com; object-src 'none'; script-src 'self' 'unsafe-eval' *.cloudflare.com *.addtoany.com *.unpkg.com *.fontwesome.com *.quantserve.com *.taboola.com *.jsdelivr.net https://unpkg.com *.fontawesome.com *.cdn.jsdelivr.net *.atbnd.com https://totalenergies.com *.tiktok.com *.analytics.tiktok.com *.bat.bing.net *.analytics-ipv6.tiktokw.us *.mpc-prod-18-s6uit34pua-uc.a.run.app *.abtasty.com cdn.jsdelivr.net cdnjs.cloudflare.com https://ajax.googleapis.com https://cdn.botframework.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://maxcdn.bootstrapcdn.com https://static.addtoany.com https://www.google.com; script-src-attr 'self'; script-src-elem 'self' 'unsafe-inline' *.googletagmanager.com *.newrelic.com *.facebook.net *.bing.com *.unpkg.com *.cookielaw.org *.google-analytics.com *.doubleclick.net *.mookie1.com *.hotjar.com *.nr-data.net *.clarity.ms *.quantcount.com *.quantserve.com *.kaspersky-labs.com *.empathy.co *.taboola.com trc-events.taboola.com *.googlesyndication.com *.totalenergies.es *.cloudflare.com *.jsdelivr.net https://unpkg.com *.fontawesome.com *.youtube.com *.cdn.jsdelivr.net *.atbnd.com *.linkedin.com *.licdn.com *.gstatic.com *.google.com *.tiktok.com *.visualwebsiteoptimizer.com *.analytics.tiktok.com *.bat.bing.net *.analytics-ipv6.tiktokw.us *.mpc-prod-18-s6uit34pua-uc.a.run.app *.abtasty.com cdn.jsdelivr.net cdnjs.cloudflare.com https://ajax.googleapis.com https://cdn.botframework.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://maxcdn.bootstrapcdn.com https://static.addtoany.com https://www.google.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.cloudflare.com *.jsdelivr.net https://unpkg.com *.fontawesome.com *.cdn.jsdelivr.net *.atbnd.com *.tiktok.com *.analytics.tiktok.com *.facebook.com *.abtasty.com cdn.jsdelivr.net fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://use.fontawesome.com; style-src-attr 'self' 'unsafe-hashes' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' *.googleapis.com *.cloudflare.com *.jsdelivr.net *.fontawesome.com *.cdn.jsdelivr.net *.atbnd.com *.licdn.com *.tiktok.com *.analytics.tiktok.com *.facebook.com *.abtasty.com cdn.jsdelivr.net fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://unpkg.com https://use.fontawesome.com; frame-ancestors 'self' 1
default-src 'self' ; style-src 'self' 'unsafe-inline' optimize.google.com www.googletagmanager.com fonts.googleapis.com *.typekit.net *.yotpo.com *.myfonts.net *.cloudfront.net; font-src 'self' data: optimize.google.com fonts.gstatic.com *.abtasty.com *.dwin1.com *.typekit.net *.livechatinc.com snap.licdn.com *.tiktok.com static.ads-twitter.com ct.pinterest.com *.yotpo.com *.addthis.com *.moatads.com *.curalate.com *.cloudflare.com *.cloudfront.net; img-src 'self' data: *; base-uri 'self' ;  form-action *; frame-ancestors 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.zdassets.com optimize.google.com www.googletagmanager.com www.googleanalytics.com www.google-analytics.com www.googleoptimize.com www.googleadservices.com maps.googleapis.com polyfill.io player.vimeo.com connect.facebook.net *.cardinaltrusted.com *.klevu.com api.exponea.com s.pinimg.com intljs.rmtag.com assistjs.skimresources.com googleads.g.doubleclick.net bat.bing.com t.contentsquare.net track.sweetanalytics.com *.yotpo.com snap.licdn.com static.ads-twitter.com *.tiktok.com *.abtasty.com *.adobedc.net *.dwin1.com *.livechatinc.com *.voyado.com *.ksearchnet.com *.hotjar.com *.veinteractive.com *.mouseflow.com *.sleeknote.com *.stripe.com *.zdassets.com *.trustpilot.com *.clarity.ms *.addthis.com *.addthisedge.com *.moatads.com *.clearpay.co.uk *.amplitude.com *.sagepay.com snapppt.com *.snapppt.com; connect-src 'self' mage.barkerandstonehouse.co.uk wss://*.zendesk.com *.google-analytics.com *.klevu.com api.exponea.com ct.pinterest.com *.abtasty.com *.adobedc.net *.tiktok.com *.yotpo.com maps.googleapis.com vimeo.com *.addthis.com *.moatads.com *.dwin1.com *.54proxy.com *.ksearchnet.com *.hotjar.com *.hotjar.io *.zdassets.com *.clarity.ms *.amplitude.com *.sweetanalytics.com snapppt.com *.snapppt.com *.zendesk.com *.cardinaltrusted.com; frame-src 'self' *.cybersource.com *.cardinalcommerce.com ct.pinterest.com vimeo.com secure.livechatinc.com *.addthis.com *.curalate.com *.54proxy.com *.hotjar.com *.stripe.com *.trustpilot.com *.paypal.com *.zendesk.com *.zdassets.com *.cardinaltrusted.com; worker-src 'self' ; media-src 'self' data: ; 1
font-src www.paypalobjects.com *.fontawesome.com *.bootstrapcdn.com *.gstatic.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com *.facebook.com *.facebook.net *.doubleclick.net *.google.com.vn *.google-analytics.com *.paypal.com *.googletagmanager.com *.bootstrapcdn.com *.googleadservices.com *.googleapis.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.azurewebsites.net https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.facebook.com *.facebook.net *.doubleclick.net *.google.com *.google.com.vn *.google-analytics.com *.paypal.com *.googletagmanager.com *.gstatic.com *.bootstrapcdn.com *.googleadservices.com *.googleapis.com *.azurewebsites.net *.avada.io *.shopify.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com *.fontawesome.com *.facebook.com *.facebook.net *.doubleclick.net *.google.com.vn *.google-analytics.com *.paypal.com *.googletagmanager.com *.bootstrapcdn.com *.googleadservices.com *.googleapis.com https://fonts.bunny.net cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.azurewebsites.net https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com https://*.gstatic.com *.googleapis.com *.fontawesome.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.adyen.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.adyen.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * https://*.gstatic.com *.adyen.com https://images.unsplash.com *.googleapis.com www.apptrian.com collect.igodigital.com *.collect.igodigital.com www.facebook.com px.ads.linkedin.com magefan.com cm.magefan.com *.disqus.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.gstatic.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.apptrian.com collect.igodigital.com *.collect.igodigital.com connect.facebook.net snap.licdn.com *.disqus.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app https://fonts.googleapis.com/ *.fontawesome.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com artcomputer.ch *.artcomputer.ch artcomputer.es *.artcomputer.es 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.adyen.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com www.apptrian.com collect.igodigital.com *.collect.igodigital.com connect.facebook.net www.facebook.com px.ads.linkedin.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com maxcdn.bootstrapcdn.com https://fonts.gstatic.com *.livechatinc.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.twitter.com *.authorize.net *.payfabric.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com *.salesforce.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com *.authorize.net *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.dotdigital-pages.com *.dotdigital.com www.google.com *.google.com *.doubleclick.net www.facebook.com *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com webchat.dotdigital.com webchat.staging.dotdigital.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com chart.googleapis.com *.youtube.com/ *.authorize.net *.payfabric.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://plumrocket.com *.livechatinc.com *.artifi.net gum.criteo.com *.criteo.net *.pepperjam.com *.pepperjamnetwork.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.yotpo.com *.salesforce.com *.paypalobjects.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.trackedlink.net 'self' data: *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.certcapture.com connect.bolt.com connect-sandbox.bolt.com s3-us-west-1.amazonaws.com connect.facebook.net graph.facebook.com business.facebook.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.payfabric.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com ezup.nl ezup.fr ezup.eu ezup.de *.cookiepro.com ezup.com *.ezup.com *.inspectlet.com *.google.com.sg *.bing.com *.linkedin.com *.stickyadstv.com *.smartadserver.com *.bidswitch.net *.adnxs.com *.media.net *.rubiconproject.com *.sharethrough.com *.taboola.com *.teads.tv *.3lift.com *.yahoo.com *.socdm.com *.criteo.com *.casalemedia.com *.dable.io *.adingo.jp *.360yield.com *.rlcdn.com *.mediavine.com *.outbrain.com *.pubmatic.com *.clmbtech.com *.yieldmo.com *.bluekai.com *.aralego.com *.adhaven.com *.sitescout.com *.tapad.com *.deepintent.com *.smaato.net *.everesttech.net *.krxd.net *.aralego.net *.crwdcntrl.net *.1rx.io *.artifi.net *.searchspring.io *.cloudfront.net *.ivitrack.com *.liadm.com *.postrelease.com *.revcontent.com *.tremorhub.com *.mediawallahscript.com *.omnitagjs.com *.agkn.com *.tpmn.co.kr *.hsforms.net *.hsforms.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.rqtrk.eu *.adsrvr.org *.addthis.com *.nr-data.net *.pippio.com *.emxdgt.com *.livechat-files.com pippio.com *.lightboxcdn.com google.com *.clarity.ms data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net use.typekit.net *.magento-datasolutions.com *.magento-ds.com https://rum.hlx.page *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com www.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com webchat.dotdigital.com webchat.staging.dotdigital.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com chart.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.nr-data.net *.newrelic.com *.authorize.net *.payfabric.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://cdn.searchspring.net/intellisuggest/is.min.js *.searchspring.io *.cookiepro.com *.livechatinc.com *.artifi.net *.maxmind.com *.bing.com *.pepperjam.com *.licdn.com *.criteo.com *.inspectlet.com *.ezup.com *.pardot.com *.envolvetech.com *.zoominfo.com *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net *.leadinfo.net www.lightboxcdn.com secure.smart24astute.com www.clarity.ms r2.trackedweb.net www.google.nl google.com *.lightboxcdn.com *.adobedtm.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.certcapture.com webchat.dotdigital.com webchat.staging.dotdigital.com *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com https://fonts.googleapis.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.lightboxcdn.com 'self' 'unsafe-inline'; object-src connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com maps.googleapis.com chart.googleapis.com *.bolt.com 'self' 'unsafe-inline'; media-src *.adobe.com *.ezup.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com commerce.adobe.io performance.typekit.net *.magento-datasolutions.com *.magento-ds.com *.adobe.io *.sentry.io *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.google-analytics.com www.facebook.com *.facebook.net *.google.com *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com sessions.bugsnag.com webchat.dotdigital.com webchat.staging.dotdigital.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com chart.googleapis.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.googleadservices.com *.sandbox.paypal.com *.paypalobjects.com *.nr-data.net *.newrelic.com *.ampproject.org *.authorize.net *.payfabric.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com google.com https://beacon.searchspring.io/beacon *.cookiepro.com *.searchspring.io geoip-js.com *.inspectlet.com *.doubleclick.net *.livechatinc.com *.oribi.io *.trustpilot.com *.criteo.com *.appspot.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com *.zoominfo.com *.leadinfo.net *.leadinfo.com *.googlesyndication.com *.clarity.ms 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://*.keva.fi https://disqus.com https://*.disquscdn.com https://static.aim.front.ai https://905keva.boost.ai; style-src 'self' 'unsafe-inline' *.tinymce.com *.tiny.cloud https://*.googleapis.com https://*.episerver.net https://*.disquscdn.com https://cdn.datatables.net https://cdnjs.cloudflare.com https://ton.twimg.com https://platform.twitter.com https://hello.myfonts.net https://fonts.googleapis.com https://cdn.reactandshare.com https://static.aim.front.ai; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.tinymce.com *.tiny.cloud https://*.reactandshare.com https://*.keva.fi https://disqus.com https://keva-fi.disqus.com https://*.disquscdn.com https://cdn.syndication.twimg.com https://api.twitter.com https://platform.twitter.com https://*.snoobi.com https://insight.fonecta.fi https://netdna.bootstrapcdn.com https://*.episerver.net https://code.jquery.com https://ajax.aspnetcdn.com https://cdn.datatables.net https://cdnjs.cloudflare.com https://*.vo.msecnd.net https://connect.facebook.net https://*.krxd.net https://survey.taloustutkimus.fi https://www.googleadservices.com https://snap.licdn.com https://unpkg.com https://js.monitor.azure.com https://static.aim.front.ai/ https://905keva.boost.ai; img-src 'self' data: blob: kevadevstorage.blob.core.windows.net *.tinymce.com *.tiny.cloud https://*.reactandshare.com https://*.adsymptotic.com/ https://*.gstatic.com https://*.keva.fi https://*.episerver.net https://*.twitter.com https://*.twimg.com https://insight.fonecta.fi https://cdn.shopify.com https://nuget.episerver.com https://raw.githubusercontent.com https://www.facebook.com https://referrer.disqus.com https://*.disquscdn.com https://beacon.krxd.net https://*.snoobi.com https://www.linkedin.com https://*.ads.linkedin.com https://static.aim.front.ai https://boost-files-general-eu-west-1-prod.s3-eu-west-1.amazonaws.com; connect-src wss: https: ws: https://dc.services.visualstudio.com https://static.aim.front.ai https://905keva.boost.ai; font-src 'self' *.tinymce.com *.tiny.cloud https://*.cloudflare.com https://*.keva.fi https://netdna.bootstrapcdn.com https://fonts.gstatic.com https://cdn.reactandshare.com https://static.aim.front.ai https://*.cloudfront.net; frame-src 'self' *.tinymce.com *.tiny.cloud https://*.keva.fi https://*.twitter.com https://www.youtube.com https://disqus.com https://staticxx.facebook.com https://cdn.krxd.net https://survey.taloustutkimus.fi https://player.vimeo.com https://www.riddle.com https://*.soundcloud.com https://app.powerbi.com https://dashboard.find.episerver.net/; object-src 'self'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://shopify.com https://*.shopify.com https://*.myshopify.com https://checkout.shopify.com https://checkout.yippypouches.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://*.g.doubleclick.net https://www.googleadservices.com https://connect.facebook.net https://static.klaviyo.com https://static-tracking.klaviyo.com https://*.klaviyo.com https://static.ads-twitter.com https://analytics.twitter.com https://www.redditstatic.com https://loox.io https://*.loox.io https://cdn.shopify.com https://*.myshopify.com https://vercel.live; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://static.klaviyo.com https://*.klaviyo.com https://loox.io https://*.loox.io; img-src 'self' data: blob: https://cdn.shopify.com https://www.facebook.com https://connect.facebook.net https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://static.klaviyo.com https://*.klaviyo.com https://loox.io https://*.loox.io https://www.redditstatic.com https://alb.reddit.com https://analytics.twitter.com https://t.co; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://*.g.doubleclick.net https://www.googletagmanager.com https://www.googleadservices.com https://connect.facebook.net https://www.facebook.com https://graph.facebook.com https://a.klaviyo.com https://static.klaviyo.com https://static-tracking.klaviyo.com https://*.klaviyo.com https://analytics.twitter.com https://ads-api.twitter.com https://www.redditstatic.com https://alb.reddit.com https://ads-api.reddit.com https://loox.io https://*.loox.io https://*.myshopify.com https://shopify.com https://cdn.shopify.com https://vitals.vercel-insights.com https://*.vercel-insights.com; media-src 'self' blob: data: https://cdn.shopify.com https://loox.io https://*.loox.io; model-src 'self' https://cdn.shopify.com; frame-src 'self' https://shopify.com https://*.shopify.com https://*.myshopify.com https://checkout.shopify.com https://checkout.yippypouches.com https://loox.io https://*.loox.io; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests 1
frame-src 'self' *.youtube.com *.amazonaws.com *.googletagmanager.com *.scanova.io; style-src-elem 'self' 'unsafe-inline' *.googleapis.com qcg-media.s3.amazonaws.com qcg-media.scanova.io qcg-media.s3.us-west-2.amazonaws.com *.diageohorizon.com *.diageoagegate.com *.googletagmanager.com *.bootstrapcdn.com *.amazonaws.com *.flaticon.com d3w59vk119vao7.cloudfront.net dls9myz2twfto.cloudfront.net cdn.scnv.io; base-uri 'self'; media-src 'self' *.amazonaws.com *.scanova.io; form-action 'self'; connect-src 'self' *.google.com *.amazonaws.com *.cloudfare.com *.linkedin.com *.scanova.io *.doubleclick.net; style-src 'self' 'unsafe-inline' *.googleapis.com *.amazonaws.com *.scanova.io; frame-ancestors 'self' https://*; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.cloudflare.com static.cloudflareinsights.com qcg-media.s3.us-west-2.amazonaws.com qcg-media.scanova.io qcg-media.s3.amazonaws.com *.diageohorizon.com *.diageoagegate.com *.googletagmanager.com *.youtube.com *.bootstrapcdn.com *.amazonaws.com d3w59vk119vao7.cloudfront.net dls9myz2twfto.cloudfront.net *.jsdelivr.net *.facebook.net googleads.g.doubleclick.net *.licdn.com cdn.scnv.io *.bing.com *.clarity.ms; default-src 'self' *.amazonaws.com d3w59vk119vao7.cloudfront.net dls9myz2twfto.cloudfront.net cdn.scnv.io; font-src 'self' data: https://fonts.gstatic.com *.bootstrapcdn.com *.amazonaws.com *.scanova.io *.flaticon.com d3w59vk119vao7.cloudfront.net dls9myz2twfto.cloudfront.net cdn.scnv.io; img-src 'self' data: https://* *.amazonaws.com *.scanova.io 1
default-src 'self'; script-src 'self' https://cdn.rudderlabs.com https://*.helpscout.net https://www.googletagmanager.com https://connect.facebook.net https://a.optnmstr.com https://googleads.g.doubleclick.net https://analytics.ahrefs.com https://*.cdn.prismic.io https://app.termly.io https://*.firstpromoter.com https://cdn.mxpnl.com https://*.chargebee.com; style-src 'self' https://fonts.googleapis.com https://*.omappapi.com; img-src 'self' data: blob: https://*.prismic.io https://*.cdn.prismic.io https://www.facebook.com https://www.google.com https://www.googletagmanager.com https://*.omappapi.com https://alb.reddit.com https://analytics.twitter.com https://t.co; font-src 'self' https://fonts.gstatic.com; media-src 'self' https://*.cdn.prismic.io; connect-src 'self' https://api.pixellu.com https://sentry.ops.px-dev.com https://api-es-1.pixellu.com https://api.rudderstack.com https://api-js.mixpanel.com https://app.termly.io https://us.consent.api.termly.io https://analytics.ahrefs.com https://www.facebook.com https://*.smartalbums.com https://d3hb14vkzrxvla.cloudfront.net https://*.omappapi.com https://analytics.google.com https://*.analytics.google.com https://*.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://ad.doubleclick.net https://www.googleadservices.com https://pixel-config.reddit.com; frame-src https://*.prismic.io https://www.googletagmanager.com https://*.chargebee.com https://www.youtube.com https://*.smartalbums.com https://pixellu-slideshows.smartslides.com; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri https://sentry.ops.px-dev.com/api/77/security/?sentry_key=aebeff312386310b0c71112783cd8996&sentry_environment=prod; 1
object-src  'none'; connect-src 'self' *.girlsway.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.girlsway.com join.gammasecure.com; script-src 'self' *.girlsway.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.girlsway.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
font-src *.typekit.net *.gstatic.com fonts.gstatic.com use.typekit.net *.fontawesome.com *.tawk.to https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.tawk.to 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.tawk.to 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com p.typekit.net validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.tawk.to tawk.link cdn.jsdelivr.net s3.amazonaws.com/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.commerce-payment-services.com *.typekit.net google.com *.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com assets.braintreegateway.com *.tawk.to cdn.jsdelivr.net https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tawk.to tawk.link 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.adobe.io performance.typekit.net *.sentry.io https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.tawk.to wss://*.tawk.to 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'report-sample' https://consortiumtrade.com https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://www.googletagmanager.com https://consortium365innovative.com https://tag.demandbase.com https://a.usbrowserspeed.com https://snap.licdn.com https://static.hotjar.com https://static.ads-twitter.com https://www.redditstatic.com https://bat.bing.com https://www.clarity.ms https://connect.facebook.net https://secure.ingenuity-acute-insight.com https://scripts.claspo.io https://script.hotjar.com https://cxppgbr1rdrect01sa02cdn.blob.core.windows.net https://googleads.g.doubleclick.net https://scripts.clarity.ms; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' data: blob: https://t.co https://analytics.twitter.com https://alb.reddit.com https://www.google.co.uk https://px.ads.linkedin.com https://www.google.com https://bat.bing.net https://www.facebook.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://idx.liadm.com https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://assets-gbr.mkt.dynamics.com https://api.company-target.com https://ad.doubleclick.net https://www.google.com https://public-gbr.mkt.dynamics.com https://pixel-config.reddit.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://px.ads.linkedin.com https://mobile.events.data.microsoft.com https://bat.bing.net https://script.claspo.io https://z.clarity.ms; frame-src 'self'; media-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri https://o4510778452672512.ingest.de.sentry.io/api/4511750538461264/security/?sentry_key=58c0a6f194ceff7ba9a42208eb300cd7; report-to csp-endpoint 1
font-src *.googleapis.com *.gstatic.com 'self' data: *.cloudflare.com *.bootstrapcdn.com *.hotjar.com *.typekit.net cdn.curator.io static.klaviyo.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.multisafepay.com https://pay.google.com 'self'; frame-src player.vimeo.com *.youtube.com *.youtube-nocookie.com www.google.com *.chatra.io *.hotjar.com *.facebook.com *.trustpilot.com *.kiyoh.com *.pinterest.com *.criteo.com *.cookiefirst.com *.multisafepay.com https://pay.google.com www.xtento.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: *.vimeocdn.com i.ytimg.com *.youtube.com *.gstatic.com *.googleapis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com * scontent.fzty3-2.fna.fbcdn.net magefan.com cm.magefan.com *.multisafepay.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.cloudflare.com *.twitter.com *.fontawesome.com *.elfsight.com *.chatra.io *.jsdelivr.net chimpstatic.com *.facebook.com *.doubleclick.net *.trustpilot.com s.pinimg.com *.zdassets.com *.google-analytics.com *.feedbackcompany.com *.facebook.net *.hotjar.com *.mailchimp.com *.curator.io *.typekit.net *.clarity.ms *.leadinfo.net *.criteo.com *.googleadservices.com *.cookiefirst.com www.datadoghq-browser-agent.com bat.bing.com *.tidio.co *.tidiochat.com *.iubenda.com js-agent.newrelic.com s7.addthis.com *.multisafepay.com https://pay.google.com www.xtento.com cdn.xtento.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com downloads.mailchimp.com *.cloudflare.com *.fontawesome.com *.bootstrapcdn.com *.mailchimp.com *.jsdelivr.net *.googleapis.com *.curator.io *.cookiefirst.com *.typekit.net maxcdn.bootstrapcdn.com *.multisafepay.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src curatorio.s3.amazonaws.com curator-assets.b-cdn.net video-lga3-2.cdninstagram.com video-iad3-1.xx.fbcdn.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src vimeo.com *.googleapis.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com *.cloudflare.com *.elfsight.com *.instacloud.io *.google-analytics.com *.google.com *.doubleclick.net *.hotjar.com *.hotjar.io ct.pinterest.com *.paypal.com *.zdassets.com *.zendesk.com *.feedbackcompany.com *.curator.io *.clarity.ms *.leadinfo.net *.cookiefirst.com gtm-mm85h6s-nzi2m.uc.r.appspot.com www.google-analytics.com www.google.com maps.googleapis.com *.livechatinc.com www.paypalobjects.com dev.visualwebsiteoptimizer.com www.googletagmanager.com pagead2.googlesyndication.com googleadservices.com rum.ewings.cloud ekr.zdassets.com/ *.multisafepay.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com maxcdn.bootstrapcdn.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com platform.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.facebook.com connect.facebook.net https://images.unsplash.com pinterest.com assets.pinterest.com syndication.twitter.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com connect.facebook.net https://maps.googleapis.com https://player.vimeo.com twitter.com platform.twitter.com https://widgets.binotel.com https://cdn.jsdelivr.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.fontawesome.com assets.braintreegateway.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com googleads.g.doubleclick.net connect.facebook.net https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.cloudflare.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.bootstrapcdn.com data: 'self' data: 'unsafe-inline' data: *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.twitter.com *.facebook.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cleverreach.com *.paypal.com *.authorize.net 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.twitter.com https://www.google.com https://www.google.co.in https://www.facebook.com www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.com *.hotjar.com *.facebook.com *.jsctool.com *.online-metrix.net js.mollie.com *.authorize.net *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.ytimg.com *.cloudflare.com *.gstatic.com *.google.com *.googlesyndication.com *.google.co.in https://www.facebook.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.lightemporium.com *.usercentrics.eu *.connect.facebook.net https://stats.g.doubleclick.net *.youtube.com https://d.adroll.com https://pixel.advertising.com https://pixel.rubiconproject.com https://simage2.pubmatic.com https://dsum-sec.casalemedia.com https://ads.yahoo.com https://eb2.3lift.com https://sync.outbrain.com https://trc.taboola.com https://x.bidswitch.net/sync https://ib.adnxs.com https://idsync.rlcdn.com https://us-u.openx.net https://ups.analytics.yahoo.com https://segments.company-target.com https://sync.tidaltv.com *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de static-eu.payments-amazon.com *.cloudfront.net 'unsafe-inline' data: *.bing.com *.imgur.com *.trustedshops.com *.facebook.com *.online-metrix.net *.google.de https://www.mollie.com *.hsforms.net *.hsforms.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.cloudflare.com *.twitter.com *.google.com *.google.com.bd *.google.co.in *.facebook.com *.googleadservices.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://connect.facebook.net *.paypalobjects.com *.paypal.com https://chimpstatic.com *.googletagmanager.com https://s.adroll.com https://d.adroll.com https://d.adroll.mgr.consensu.org *.bootstrapcdn.com *.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.bing.com *.hotjar.com *.facebook.net *.s24.com *.googlecommerce.com *.doubleclick.net *.ratepay.com *.pay1.de *.online-metrix.net *.shopgate.com *.avada.io js.mollie.com pay.google.com applepay.cdn-apple.com *.authorize.net *.hsforms.net *.hsforms.com https://www.googletagmanager.com tagmanager.google.com unpkg.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cloudflare.com *.googleapis.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.youtube.com *.bootstrapcdn.com fonts.googleapis.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.google.com *.google.co.in *.facebook.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.google-analytics.com *.payments-amazon.com *.trustedshops.com *.ratepay.com *.online-metrix.net *.bing.com *.doubleclick.net https://get.geojs.io *.avada.io *.authorize.net t.elasticsuite.io *.hsforms.net *.hsforms.com *.facebook.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://example.com/; report-to report-endpoint; 1
object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: https://*.paypal.com https://*.paypalobjects.com 'nonce-LZV0ZhXdgD1AXS04sLK6hzobAmOLB6WI'; base-uri 'none'; report-uri https://data.sanitino.eu/csp-report 1
default-src 'self' https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com 'unsafe-inline';   img-src 'self' https://images.medaviebc.ca https://images.protectionplusbenefits.ca https://dev.visualwebsiteoptimizer.com https://r2.visualwebsiteoptimizer.com https://forms.hsforms.com https://track.hubspot.com https://media.msg.dotomi.com https://docs.medaviebc.ca https://docs.protectionplusbenefits.ca https://login.dotomi.com https://perf-na1.hsforms.com https://www.google.com https://www.google.ca https://px.ads.linkedin.com https://www.facebook.com https://www.google-analytics.com https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://i.vimeocdn.com https://maps.gstatic.com https://raw.githubusercontent.com https://maps.googleapis.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.ca https://googleads.g.doubleclick.net https://google.com googleads.g.doubleclick.net www.google.com google.com https://ad.doubleclick.net https://ade.googlesyndication.com https://r3.visualwebsiteoptimizer.com https://qc.croixbleue.ca https://sdk.privacy-center.org https://r1.visualwebsiteoptimizer.com https://pluginicons.craft-cdn.com https://s3.us-east-1.amazonaws.com https://www.linkedin.com https://pluginscreenshots.craft-cdn.com https://s3.ca-central-1.amazonaws.com https://forms-na1.hsforms.com data:;   style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://pro.fontawesome.com https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com;   font-src 'self' https://fonts.gstatic.com https://pro.fontawesome.com data:;   script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://tagmanager.google.com https://fonts.googleapis.com https://cdn.appdynamics.com https://js.hs-scripts.com https://static.hotjar.com https://dev.visualwebsiteoptimizer.com https://js.stripe.com https://code.jquery.com https://cdn.jsdelivr.net https://stackpath.bootstrapcdn.com https://cdnjs.cloudflare.com https://js.hsbanner.com https://js.hscollectedforms.net https://js.hs-analytics.net https://js.hs-banner.com https://js.hubspot.com https://js.hsleadflows.net https://js.hsadspixel.net https://script.hotjar.com https://s.pinimg.com https://js.adsrvr.org https://www.google-analytics.com https://extend.vimeocdn.com https://googleads.g.doubleclick.net https://ct.pinterest.com https://connect.facebook.net https://snap.licdn.com https://www.vimeo.com https://vimeo.com https://maps.googleapis.com https://maps.googleapis.com https://cdn.datatables.net https://*.googletagmanager.com https://www.googleadservices.com www.googleadservices.com www.google.com google.com www.googletagmanager.com https://www.google.com www.googleadservices.com googleads.g.doubleclick.net https://f.vimeocdn.com https://sdk.privacy-center.org https://api.privacy-center.org https://urldefense.com https://js.hsforms.net blob:;   connect-src 'self' https://dev.visualwebsiteoptimizer.com https://www.google-analytics.com https://pdx-col.eum-appdynamics.com https://r2.visualwebsiteoptimizer.com https://forms.hscollectedforms.net https://api.hubapi.com https://cta-service-cms2.hubspot.com https://stats.g.doubleclick.net https://ct.pinterest.com https://forms.hubspot.com https://px.ads.linkedin.com https://resource-navigator-mbc.herokuapp.com https://google.com https://maps.googleapis.com https://api.medavie.bluecross.ca https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.ca https://r3.visualwebsiteoptimizer.com https://pagead2.googlesyndication.com https://api.privacy-center.org https://r1.visualwebsiteoptimizer.com https://feed-proxy.craftcms.com https://api.craftcms.com https://forms.hsforms.com;   frame-src 'self' https://*.medaviebc.ca https://js.stripe.com https://td.doubleclick.net https://insight.adsrvr.org https://ct.pinterest.com https://player.vimeo.com https://www.googletagmanager.com https://bid.g.doubleclick.net bid.g.doubleclick.net td.doubleclick.net https://match.adsrvr.org;   object-src 'none';   report-uri https://staging.medaviebc.ca/csp-report-endpoint.php 1
default-src 'none'; script-src 'report-sample' 'unsafe-inline' 'self' https://js.stripe.com/ https://www.googletagmanager.com/ https://bat.bing.com/ https://www.dwin1.com/16164.js https://analytics.tiktok.com/i18n/ https://connect.facebook.net/ https://cdn.cookielaw.org/scripttemplates/otSDKStub.js https://googleads.g.doubleclick.net/pagead/viewthroughconversion/850511572/; style-src 'report-sample' 'unsafe-inline' 'self'; form-action 'self'; object-src 'none'; base-uri 'self'; connect-src 'self' https://cdn.cookielaw.org/ https://region1.google-analytics.com/ https://www.google-analytics.com/ https://www.google.com/ https://zunl7r6b5x-dsn.algolia.net/ https://testingu72jz6o2va-dsn.algolia.net/ https://pagead2.googlesyndication.com/ https://privacyportal-de.onetrust.com/ https://region1.analytics.google.com/ https://stats.g.doubleclick.net/ https://analytics.tiktok.com/; font-src 'self' data:; frame-src 'self' https://js.stripe.com/ https://www.googletagmanager.com/ https://td.doubleclick.net/; frame-ancestors 'self'; child-src 'none'; img-src 'self' https://cdn.cookielaw.org/ https://eu-images.contentstack.com/ https://bat.bing.com/ https://www.google.co.uk/ https://www.googletagmanager.com/ https://www.facebook.com/; manifest-src 'self'; media-src 'self'; worker-src 'none'; upgrade-insecure-requests; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://ajax.googleapis.com https://www.googletagmanager.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://maps.googleapis.com https://connect.facebook.net https://*.tawk.to; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://maps.googleapis.com https://*.tawk.to wss://*.tawk.to; frame-src 'self' https:; media-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://nidh.maillist-manage.com; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-MWcFlLdTGVTV9e5RWtK9AA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https://buurtje.nl https://*.buurtje.nl; script-src 'self' 'unsafe-inline' https://buurtje.nl https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://*.googleapis.com https://*.firebaseio.com https://apis.google.com https://unpkg.com https://pagead2.googlesyndication.com https://*.googlesyndication.com https://*.adtrafficquality.google https://*.googletagservices.com https://*.google.com https://*.doubleclick.net https://connect.facebook.net; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https://buurtje.nl https://fonts.googleapis.com https://unpkg.com; style-src-elem 'self' 'unsafe-inline' https://buurtje.nl https://fonts.googleapis.com https://unpkg.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://buurtje.nl; connect-src 'self' https://api.buurtje.nl https://buurtje.nl https://*.googleapis.com https://*.firebaseio.com wss://*.firebaseio.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://identitytoolkit.googleapis.com https://securetoken.googleapis.com https://*.googlesyndication.com https://*.adtrafficquality.google https://*.google.com https://*.doubleclick.net https://tiles.openfreemap.org https://*.tile.openstreetmap.org https://connect.facebook.net https://www.facebook.com; frame-src 'self' https://buurtje-app.firebaseapp.com https://accounts.google.com https://apis.google.com https://*.googlesyndication.com https://*.doubleclick.net https://*.google.com https://*.adtrafficquality.google; base-uri 'self'; form-action 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://client.crisp.chat https://cdn.ywxi.net https://js.stripe.com https://www.paypal.com https://static-na.payments-amazon.com https://code.jquery.com https://maxcdn.bootstrapcdn.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com data:; img-src 'self' data: blob: https://www.ilrg.com https://hostedseal.trustarc.com https://www.googletagmanager.com https://cdn.ywxi.net https://image.crisp.chat https://client.crisp.chat https://storage.crisp.chat https://www.paypalobjects.com; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://client.crisp.chat wss://client.relay.crisp.chat https://js.stripe.com https://api.stripe.com https://www.paypal.com https://static-na.payments-amazon.com; frame-src https://js.stripe.com https://hooks.stripe.com https://www.paypal.com https://static-na.payments-amazon.com https://game.crisp.chat https://go.crisp.chat; object-src 'none'; base-uri 'self'; form-action 'self' https://www.ilrg.com 1
font-src maxcdn.bootstrapcdn.com https://fonts.gstatic.com 'unsafe-inline' data: *.optimonk.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ https://www.googletagmanager.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com td.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.optimonk.com www.google.com.vn px.ads.linkedin.com *.linkedin.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io connect.facebook.net graph.facebook.com business.facebook.com *.hotjar.io *.hotjar.com maps.googleapis.com *.googleoptimize.com *.optimonk.com snap.licdn.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com maxcdn.bootstrapcdn.com https://static.klaviyo.com https://fonts.googleapis.com/ *.optimonk.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.hotjar.io *.hotjar.com *.facebook.com *.facebook.net *.optimonk.com px.ads.linkedin.com *.google.com.vn *.google-analytics.com *.googletagmanager.com *.googleadservices.com wss://*.hotjar.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.hotjar.io *.hotjar.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://*.googleapis.com https://www.google-analytics.com https://www.googleanalytics.com https://www.googleoptimize.com https://optimize.google.com *.google.com https://*.google.com https://*.googleusercontent.com https://*.ggpht.com https://googleads.g.doubleclick.net https://www.googletagmanager.com https://*.gstatic.com https://*.googleadservices.com http://s3.amazonaws.com https://snap.licdn.com https://connect.facebook.net https://www.facebook.com https://static.hotjar.com https://script.hotjar.com http://*.tiqcdn.com https://pageimprove.io https://*.linkedin.com https://partenamut.activehosted.com https://*.tealiumiq.com https://*.youtube.com https://*.decibelinsight.net https://wurfl.io https://bat.bing.com https://*.googlesyndication.com https://*.teads.tv https://*.clarity.ms/ https://dev.visualwebsiteoptimizer.com https://tags.partenamut.be/partenamut-site/prod/utag.sync.js https://tags.partenamut.be/partenamut-site/prod/utag.js https://tags.partenamut.be https://analytics.tiktok.com https://analytics.tiktok.com/i18n/pixel/events.js https://collect.partenamut.be; style-src 'unsafe-inline' 'self' https://*.googleapis.com https://fonts.googleapis.com https://optimize.google.com https://unpkg.com https://script.hotjar.com https://static.hotjar.com https://*.gstatic.com https://fonts.bunny.net; img-src 'self' https://*.googleapis.com https://*.gstatic.com https://*.google.com *.googleusercontent.com https://*.google.be https://*.google-analytics.com https://googleads.g.doubleclick.net https://*.linkedin.com https://*.partenamut.be https://*.facebook.com https://dummyimage.com https://placehold.co https://www.googletagmanager.com http://www.w3.org/2000/svg https://*.tealiumiq.com https://s535jira.mutworld.be https://flagcdn.com https://script.hotjar.com https://static.hotjar.com https://bat.bing.com https://ad.doubleclick.net https://*.teads.tv https://dev.visualwebsiteoptimizer.com https://tags.partenamut.be/partenamut-site/prod/utag.js https://*.clarity.ms https://c.bing.com https://www.google.com/pagead/form-data https://survey-images.hotjar.com data:; frame-src 'self' https://*.google.com https://optimize.google.com https://vars.hotjar.com/ https://*.youtube.com https://*.partenamut.be https://cloud.cavai.com/ www.facebook.com https://idp.iamfas.belgium.be/ https://td.doubleclick.net/ https://*.teads.tv/ https://td.doubleclick.net.x.ccf80dde0e0820444b0b8f9038e392127391.d045232a.id.opendns.com https://10649093.fls.doubleclick.net https://maternity-leave---partena.bubbleapps.io; font-src 'self' https://fonts.gstatic.com https://script.hotjar.com https://fonts.bunny.net; object-src 'self' data: 'unsafe-eval'; media-src 'self'; child-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'; navigate-to *; connect-src 'self' https://*.cloud.es.io https://*.googleapis.com *.google.com https://*.google.com https://*.google.com https://*.gstatic.com  https://*.google-analytics.com https://*.facebook.com https://*.linkedin.oribi.io https://*.hotjar.io https://*.hotjar.com https://pageimprove.io https://*.tealiumiq.com https://*.decibelinsight.net wss://*.hotjar.com https://*.cloud.es.io https://bat.bing.com https://*.linkedin.com https://*.googlesyndication.com wss://*.decibelinsight.net https://wurfl.io https://*.g.doubleclick.net https://*.teads.tv https://*.clarity.ms/ https://dev.visualwebsiteoptimizer.com https://adservice.google.com https://www.google.com/pagead/form-data https://google.com/ccm/form-data/1035243604 https://google.com:433/ccm/form-data/1035243604 https://*.adservice.google.com https://adservice.google.com https://analytics.tiktok.com https://*.partenamut.be data: blob:; worker-src 'self' blob:; https://t.contentsquare.net/uxa/b8b4149d47658.js;report-uri https://mutualit.uriports.com/reports; report-to default 1
font-src *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.fontawesome.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com *.stripe.network *.google.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.google.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.sagepay.com *.opayo.eu.elavon.com widget.freshworks.com m2epro.freshdesk.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com downloads.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com unsafe-inline assets.braintreegateway.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com widget.freshworks.com m2epro.freshdesk.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://www.googletagmanager.com *.googleapis.com *.bootstrapcdn.com cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.yotpo.com dhv2ziothpgrr.cloudfront.net www.034motorsport.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com www.034motorsport.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com www.034motorsport.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.affirm.com *.affirm.ca *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.yotpo.com www.034motorsport.com 'self' 'unsafe-inline'; img-src data: adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.affirm.com *.affirm.ca *.certcapture.com connect.bolt.com connect-sandbox.bolt.com s3-us-west-1.amazonaws.com maps.gstatic.com *.calcurates.com *.googleapis.com https://cdn.klarna.com *.googleadservices.com *.google.com cdn.jsdelivr.net 'self' data: validate.fishpig.co.uk https://firebasestorage.googleapis.com * flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com dhv2ziothpgrr.cloudfront.net www.034motorsport.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com tagmanager.google.com https://www.googletagmanager.com *.affirm.com *.affirm.ca *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com *.googleapis.com *.www.paypal.com cdn.jsdelivr.net *.avada.io *.shopify.com * *.gstatic.com maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net www.034motorsport.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.certcapture.com *.google.com *.bootstrapcdn.com cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com assets.braintreegateway.com *.yotpo.com dhv2ziothpgrr.cloudfront.net www.034motorsport.com 'self' 'unsafe-inline'; object-src connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' data: www.034motorsport.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.affirm.com *.affirm.ca *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com sessions.bugsnag.com *.googleapis.com *.aexp-static.com *.aexp.com *.americanexpress.com https://cdn.klarna.com *.googleadservices.com *.gstatic.com *.google.am adobedtm.com widgets.magentocommerce.com *.calconic.com https://app.calconic.com/api/v1/calculator/5f89e7715bf5d8001e498f68 stats.g.doubleclick.net *.clarity.ms https://tags.srv.stackadapt.com https://static.parastorage.com mpc-prod-17-s6uit34pua-wl.a.run.app demo-1.conversionsapigateway.com *.jsdelivr.net https://get.geojs.io *.avada.io https://maps.googleapis.com www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com www.034motorsport.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com www.034motorsport.com http: https: blob: 'self' 'unsafe-inline'; default-src www.034motorsport.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src self 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' *.clarity.ms  *.popt.in *.infolijn-online.nl *.licdn.com cdnjs.cloudflare.com *.readspeaker.com; object-src 'self'; style-src 'self' 'unsafe-inline' *.readspeaker.com *.infolijn-online.nl fonts.googleapis.com cdnjs.cloudflare.com; img-src * data:; media-src 'self'; frame-src 'self' player.vimeo.com; frame-ancestors 'self'; child-src 'self'; font-src 'self' data: fonts.gstatic.com cdnjs.cloudflare.com; connect-src 'self' *.linkedin.com *.clarity.ms *.licdn.com *.popt.in sensechat.infolijn-online.nl; report-uri /report-csp-violation; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://googleads.g.doubleclick.net https://www.google.com https://*.histats.com https://static.cloudflareinsights.com https://pagead2.googlesyndication.com; connect-src 'self' https://pagead2.googlesyndication.com https://cloudflareinsights.com https://static.cloudflareinsights.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.google.com https://*.doubleclick.net https://*.histats.com; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; frame-src https://td.doubleclick.net https://googleads.g.doubleclick.net https://*.google.com; base-uri 'self'; form-action 'self'; object-src 'none'; report-uri /csp-report 1
default-src 'self'; object-src 'none'; base-uri 'none'; script-src 'nonce-79090f98b969e08eb45f9b9b5a5643c0' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://at.alicdn.com; img-src 'self' data: https: http: blob:; connect-src 'self' https: wss:; frame-src 'self' https: http:; media-src 'self' data: https: http: blob:; worker-src 'self' blob: 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https://images.unsplash.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de widget.freshworks.com m2epro.freshdesk.com https://maps.googleapis.com https://player.vimeo.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de widget.freshworks.com m2epro.freshdesk.com https://maps.googleapis.com https://player.vimeo.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'none'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; img-src 'self' data: blob: https://api-visitor-us-east.velaro.com https://maps.googleapis.com https://maps.gstatic.com https://shg.factory73.com https://appnhs24wp222b8656a3.blob.core.windows.net https://appnhs24wpf44fd4a27a.blob.core.windows.net; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com https://use.typekit.net; script-src 'self' 'unsafe-inline' https://cc.cdn.civiccomputing.com https://cdnjs.cloudflare.com https://maps.googleapis.com https://maps.gstatic.com https://nhs24-shgapi-live.azurewebsites.net https://nhs24-shgapi-staging.azurewebsites.net; connect-src 'self' https://api.postcodes.io; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com; media-src 'self' blob:; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests; block-all-mixed-content 1
default-src 'self'; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self' https://api.iconify.design 1
default-src 'self' https: chrome-extension: file: gap: data: *.facebook.com *.short-edition.com:8009; object-src 'self' https:; script-src 'self' https: 'unsafe-eval' 'unsafe-inline' chrome-extension: file: gap: data: *.facebook.net *.twitter.com *.short-edition.com *.google-analytics.com *.jquery.com *.short-edition.com:8009; connect-src *; style-src 'self' https: 'unsafe-inline' chrome-extension: file: gap: data: *.short-edition.com *.short-edition.com:8009; img-src 'self' https: chrome-extension: file: gap: data: *.short-edition.com *.short-edition.com:8009 *.google-analytics.com; font-src 'self' https: *.short-edition.com *.short-edition.com:8009; media-src 'self' https: *.short-edition.com *.short-edition.com:8009 data: blob: filesystem:; report-uri https://short-edition.com/csp-violation-report 1
default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self'; 1
object-src  'none'; connect-src 'self' *.girlfriendsfilms.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.girlfriendsfilms.com join.gammasecure.com; script-src 'self' *.girlfriendsfilms.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.girlfriendsfilms.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
default-src 'self'; img-src data: blob: *; media-src * blob:; font-src 'self' data: fonts.gstatic.com framerusercontent.com app.framerstatic.com use.typekit.net widget.usepylon.com; script-src 'self' 'unsafe-eval' *.amazonaws.com www.googletagmanager.com events.framer.com; script-src-elem 'unsafe-inline' 'self' *.liadm.com vercel.live www.googletagmanager.com *.amazonaws.com framerusercontent.com events.framer.com widget.usepylon.com connect.facebook.net challenges.cloudflare.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com vercel.live widget.usepylon.com; connect-src 'self' * wss://api.assemblyai.com wss://streaming.assemblyai.com wss://api.listenlabs.ai; worker-src 'self' blob:; frame-src 'self' https:; report-uri /api/reporting/content-security 1
default-src 'self'; script-src 'self'; script-src-elem 'self' https://www.googletagmanager.com; script-src-attr 'none'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: blob: https://till.tech https://www.till.tech https://storage.googleapis.com https://*.storage.googleapis.com https://www.google-analytics.com https://region1.google-analytics.com; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://www.googletagmanager.com; frame-src 'self' https://www.youtube-nocookie.com; worker-src 'self' blob:; child-src 'self' blob:; manifest-src 'self'; media-src 'self' data: blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; report-uri /api/csp-report; report-to csp-endpoint; upgrade-insecure-requests; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.finance-calculator.co.uk *.s3.eu-west-2.amazonaws.com *.dekopay.org *.deko-uat.com *.blackhorseflexpay.co.uk *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com *.sirv.com *.boldr.dev d1azc1qln24ryf.cloudfront.net/40686/revsglobal-pr-mod/ d19ayerf5ehaab.cloudfront.net/css/product-widget/fonts/ media.flixcar.com/delivery/ media.flixfacts.com/ data: *.fontshare.com/ *.icomoon.io/ static.klaviyo.com www.smarthomesounds.co.uk data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com/tr/ connect.facebook.net graph.facebook.com business.facebook.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.reviews.io *.reviews.co.uk syndication.twitter.com/ platform.twitter.com/ www.smarthomesounds.co.uk 'self' 'unsafe-inline'; frame-ancestors www.smarthomesounds.co.uk 'self'; frame-src bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.youtube.com/embed/ *.youtube-nocookie.com *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://www.googletagmanager.com/ platform.twitter.com *.reviews.io *.reviews.co.uk *.finance-calculator.co.uk *.deko.finance *.dekopay.org *.deko-uat.com *.blackhorseflexpay.co.uk js.mollie.com www.paypalobjects.com www.google.com/recaptcha/ platform.twitter.com/ syndication.twitter.com/ media.flixcar.com/ td.doubleclick.net player.gotolstoy.com www.smarthomesounds.co.uk 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com i.ytimg.com/ p.typekit.net *.paypal.com *.typekit.net *.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://images.unsplash.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ pinterest.com assets.pinterest.com syndication.twitter.com *.cloudfront.net assets.reviews.io/img/ *.reviews.co.uk *.finance-calculator.co.uk *.dekopay.com *.dekopay.org *.deko-uat.com s3.eu-west-1.amazonaws.com 'self' data: *.blackhorseflexpay.co.uk https://firebasestorage.googleapis.com https://www.mollie.com *.sirv.com *.youtube.com https://dashboard.feedbucket.app stats.g.doubleclick.net www.google.com/ads/ga-audiences www.google.co.uk/ads/ga-audiences www.google.co.uk/pagead/ www.google.nl/ads/ga-audiences www.google.nl/pagead/ s.ytimg.com data: *.smarthomesounds.co.uk data: *.sozowebdesign.com www.gravatar.com/ media.reviews.co.uk/ files.jivosite.com/ d23yuld0pofhhw.cloudfront.net/default/uk/ d23yuld0pofhhw.cloudfront.net/uk/live/en_gb/ platform.twitter.com/ syndication.twitter.com/ abs.twimg.com/ pbs.twimg.com/ ton.twimg.com/ c.bing.com bat.bing.com smarthomesounds.co.uk api.ecologi.com/badges/ d3np41mctoibfu.cloudfront.net/p/images/ https://rt.flix360.com/ media.flixcar.com/ assets-jpcust.jwpsrv.com/ media.flixfacts.com/ *.clarity.ms via.placeholder.com/ logo.flix360.io/ static.elfsight.com phosphor.utils.elfsightcdn.com cdn.jwplayer.com/ bat.bing.net cdn-cookieyes.com www.smarthomesounds.co.uk data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com/ https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ twitter.com platform.twitter.com *.reviews.io widget.reviews.co.uk/ *.finance-calculator.co.uk *.dekopay.com *.dekopay.org *.deko-uat.com dekowallet-feature-assets.s3.eu-west-2.amazonaws.com *.blackhorseflexpay.co.uk/ *.avada.io *.shopify.com js.mollie.com https://cdnjs.cloudflare.com *.sirv.com player.vimeo.com cdn.feedbucket.app chatapi.helpscout.net *.klaviyo.com js.datadome.co *.google-analytics.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ googleads.g.doubleclick.net/pagead/viewthroughconversion/ google.com/pagead/ *.usersnap.com chimpstatic.com downloads.mailchimp.com mc.us7.list-manage.com code.jivosite.com/ smart11249.pcapredict.com/js/sensor.js services.postcodeanywhere.co.uk platform.twitter.com/ cdn.syndication.twimg.com bat.bing.com qeryz.com/survey/ script.crazyegg.com js-agent.newrelic.com bam.nr-data.net beacon-v2.helpscout.net media.flixcar.com media.flixfacts.com/js/ prod.flixgvid.flix360.io/ media.flixfacts.com/ *.clarity.ms analytics.webgains.io api.webgains.io cdn.jsdelivr.net/npm/@alpinejs/ widget.gotolstoy.com/script.js widget.wickedreports.com static.elfsight.com cdn-cookieyes.com log.cookieyes.com directory.cookieyes.com bat.bing.net bat.bing-int.com www.smarthomesounds.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com https://static.klaviyo.com *.cloudfront.net *.reviews.io widget.reviews.co.uk/ *.finance-calculator.co.uk *.dekopay.com *.dekopay.org *.deko-uat.com *.blackhorseflexpay.co.uk *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com *.sirv.com https://cdn.feedbucket.app *.klaviyo.com *.typekit.net d19ayerf5ehaab.cloudfront.net/css/product-widget/ d1azc1qln24ryf.cloudfront.net/40686/revsglobal-pr-mod/ code.jivosite.com/ data: widget.reviews.co.uk/ services.postcodeanywhere.co.uk platform.twitter.com/ ton.twimg.com/ cdn-images.mailchimp.com/embedcode/ k3v2w4q6.stackpathcdn.com/survey/ media.flixcar.com/ media.flixfacts.com/ *.fontshare.com/ *.icomoon.io/ angus.finance-calculator.co.uk/ www.smarthomesounds.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.sirv.com blob: code.jivosite.com/ beacon-v2.helpscout.net/ media.flixcar.com/ www.smarthomesounds.co.uk 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com https://player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.cloudfront.net *.reviews.io *.reviews.co.uk *.finance-calculator.co.uk *.dekopay.com *.dekopay.org *.deko-uat.com *.blackhorseflexpay.co.uk https://get.geojs.io *.avada.io *.sirv.com *.youtube.com blob: dashboard.feedbucket.app cdn.feedbucket.app chatapi.helpscout.net *.klaviyo.com api-js.datadome.co *.google-analytics.com *.analytics.google.com stats.g.doubleclick.net *.googlesyndication.com https://www.google.com/ccm/ google.com/pagead/ bat.bing.com/actionp/ widget.reviews.co.uk/ api-cache.reviews.co.uk/ api.reviews.co.uk/ *.jivosite.com/ services.postcodeanywhere.co.uk qeryz.com/survey/ script.crazyegg.com/ tracking.crazyegg.com/ d3hb14vkzrxvla.cloudfront.net/v1/ beaconapi.helpscout.net/v1/ bam.nr-data.net/events/ *.clarity.ms endpoint1.collection.us2.sumologic.com api.webgains.io media.flixcar.com/ track.wickedreports.com storage.elfsight.com core.service.elfsight.com cdn-cookieyes.com log.cookieyes.com directory.cookieyes.com bat.bing.net bat.bing.com bat.bing-int.com www.smarthomesounds.co.uk 'self' 'unsafe-inline'; child-src www.smarthomesounds.co.uk http: https: blob: 'self' 'unsafe-inline'; default-src www.smarthomesounds.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:; script-src 'self' 'nonce-Veg8kfJP+y63DPj0+gAkow==' 'strict-dynamic' 'sha256-B1YGL8U2BC9w9vUsCzy1W3rlYhna8ETSZa5HShu3ujo=' 'sha256-l9dvShNuqsrOBe2rQw1PcQAPrvV/fEwLwTm9+aUIhn4=' 'sha256-ocj2+sjvu504gEOB3gg9ytpVcT2aKzdx5Sy012QM2qM=' 'sha256-qOaY0qj9aWsDpXPrUp2FuCuh5vJoFxZo0t73E8NguHc=' 'sha256-ibvZ4YOZvmLFxT0barJr97U+RUcCXzON7AyeRUTYV/Y=' 'sha256-hMNyPYIbSUGFOEdGhmb79MYxqPRLwkZappEamabMeuc=' 'sha256-3+jZmiX7kFaJn4ydrSbH9NRXQ380scRL2CTXXlR4BPA=' 'sha256-nJmwoVd1oxfCyRqAZ/XaTy3ZBIsrEIzt9s3J6RuUjRw=' 'sha256-CvCa91rHolihpIIyj4xpD2SPMGuvRAnigrtgDqvGSDE=' 'sha256-zjkQCpkHW4ZguZHW16j9oj8riAoUiV2VygJV60wCKeI=' 'sha256-+yhvHh2VkjQk2kG/x2CZFlo8xxGVGTpGIC71O/G/9RY=' 'sha256-sYq5KWgaq5qvu1BuLkDEfDxxvqFKI14NxI2tUB9Z7fQ=' 'sha256-/5FvV9Vy9L+4DwjcuiL0tQ8i33gdJ9sHKsxBoqqJ/EE=' 'sha256-uQ14xz9MfP77CFLAHa/RqdOFRRUf44Ceu3ENXhf6V0w=' 'sha256-tTDHel5JBjUAqCdz5EC4kcwGebIOmBZYVD8QCRiUt6I=' 'sha256-FBRR+9zqKijY1xbLZ10Em1SKgCQa3rsJtFutFDTvH6c=' 'sha256-isXs+tx5hEIuFNcm5JCSZf2yDZH49CKSrBhWIR+KCp0=' 'sha256-3bOPF+Z3I0wIMkfFMWDuD81ziRJQWJ8EvM5MKNOItQo=' 'sha256-Ac4cMqFZsLbsd/8O6ncHdn1+AMTZWY2lnWWpRUzp+e8=' 'sha256-+YCBVW5p0p8DoNOdFNrgiLvNUHyBGQ6ayJothQgfiSo=' 'sha256-aNvtBWSbfA+crAqEsNIxzz8WVC/gR0lRZXe9EGd1aIk=' 'sha256-FflK/sicuCogMLZvjLLpBYWKbHqfthsLw0fLF/7oRnE=' 'sha256-8xZGcA/Lgr14KSXILQ8gD3g5RSOrtcB5t5O1q4UuDTs=' 'sha256-JDkDPjSSzaZ4xNSfvVGhRMPzOpiv1mXimcJT/p5IAYU=' 'sha256-V2akaYSZnbP5xnUR/pyE7GFt31F1gS644fR0awHqiKY=' 'sha256-82MQl8Emi6uLOLoWiGxPjWVLHU1wwYREi155NtbQNak=' 'sha256-rPse37myN5GhoQnuJFklccUAmk80HSjZbIYFV1LpchQ=' 'sha256-PofRsArI8JQGzLSfLre+RZV4Cl7QvAZAPDvYAGKTPB0=' 'sha256-wv9t8ovqnH4ayVaS46LraLM76HAxxF+W6+UxmHbZ6oI=' 'sha256-gdhdqM69jxIiWDwxR3QbmhKNs6bd5CDK/1SdrhoGfkA=' 'sha256-jO5cYDjZai0DjpX6h7/GJudtzXN5LICQsVWlyhPFrZo=' 'sha256-gRdmZPyRvWLRdbnkY3je0QOgMx1lN3EtaaWdhmSI5zc=' 'sha256-c5b/dao4mq2vG+VG+Gvi9rZPebW9fw49aCxOGdJG9g4=' 'sha256-k5xrFkHiUXRjgDcyVVY5fydVmpb7eumpjqiI29HaFy0=' 'sha256-TzpI3FsoYT5TKuEhTC3nruIlrIbA10rIzozW8aKTzzY=' 'sha256-wAD74aWXHm7ft7VrD5M+vPMgSVivjOELMBYEKLavxBE=' 'sha256-vLBrOYTg90ENKFMhiourVBJp4I5yLKbQsVa4NTEz8vs=' 'sha256-0KWd3WDWRTj3JWZwQesYDsCgFBpDk9i/t1NFiOzBdv8=' 'sha256-kAayjPDlsFLQux0zjuFilyfKGzcamrT1Ks7MF4jrHfM=' 'sha256-kPm+W+T2fM8FgkIhsPeQpjCZpHmuwrrJKZUP2K7Zk1g=' 'sha256-FR8bw71kCtl7PAIKCMfAF001oOvbzONXZ/JN8qLdrpk=' 'sha256-C0LODbIBDjY3aivn46mWMkiG0/9b+eCMB6JVC2OO0HE=' 'sha256-qZiMwrbROqIp9H466bvGT38iIF3JnyFq8skjoUZUoBM=' 'sha256-ODVHkn51CgyBYyLwh0p+jYs59cPPYkQqqi3rNS2wwng=' 'sha256-C3fk0opsSaUe0Jgddtg0NpqB6nFddaKFWv8H4KG0ZUk=' 'sha256-D3d8LdcVwhCaEyQbWrkt5pmbWL8yaLT0TcqWPsRVWiI=' 'sha256-y1utSVnW7Ab4W2oP635UDgw+zJIKb7Ds2vCPOscaAnI=' 'sha256-u26qfE8JJmoQx6QEhCsqryHfwOqyb56pZAzdGUg2Ep4=' 'sha256-JjrqaVg9nYDHVn6UDtlJjvFHWZcgeXJnEdXr83miFko=' 'sha256-dtJ2uS/Un6K3yNYPVENw+7WZClE62rKuj3dK+nRosGg=' 'unsafe-hashes' 'sha256-duboBi/SoOQl17pPM9MhHbYvs5314TIuUZWKa7Dabm4=' 'unsafe-inline' data: https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; frame-src 'self' https:; media-src 'self' https:; worker-src 'self' blob:; upgrade-insecure-requests; report-uri https://www.cbia.com/wp-json/3mw-security/v1/csp-report 1
default-src 'self';script-src 'self' 'unsafe-inline' https://js.qualified.com https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://www.googleadservices.com https://js.hsforms.net https://js-eu1.hsforms.net https://*.claydar.com https://boards.greenhouse.io https://dyv6f9ner1ir9.cloudfront.net https://snap.licdn.com https://*.hotjar.com https://bat.bing.com https://*.crazyegg.com https://*.hs-scripts.com https://js.hs-analytics.net https://js.hsadspixel.net https://js.hs-banner.com https://js.hscollectedforms.net https://*.clarity.ms https://*.doubleclick.net https://s3-us-west-2.amazonaws.com/b2bjsstore/b/ZQO92DH858N7/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://tagmanager.google.com;font-src 'self' https://fonts.gstatic.com data:;img-src 'self' data: https:;connect-src 'self' https://*.qualified.com wss://*.qualified.com https://*.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://www.google.com https://*.doubleclick.net https://www.googleadservices.com https://px.ads.linkedin.com https://secure.adnxs.com https://bat.bing.com https://*.hotjar.io wss://*.hotjar.com https://*.clarity.ms https://*.hsforms.com https://*.hscollectedforms.net https://js.hs-banner.com https://api.hubapi.com https://*.crazyegg.com https://*.claydar.com https://medallion.outgrow.us;frame-src https://player.vimeo.com https://www.youtube.com https://try.medallion.co https://www.googletagmanager.com https://*.hsforms.net https://*.hsforms.com https://app.qualified.com https://medallion.outgrow.us https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://*.crazyegg.com https://job-boards.greenhouse.io;worker-src 'self' blob:;media-src https://app.qualified.com;object-src 'none';base-uri 'self';frame-ancestors 'self';report-to datadog 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com/gtm.js https://cdn-cookieyes.com/client_data/94a4f13a0cb959b98cc4a48f/script.js https://cdn-cookieyes.com/client_data/94a4f13a0cb959b98cc4a48f/banner.js https://www.googletagmanager.com/gtag/js https://player.vimeo.com/api/player.js https://www.google.com/recaptcha/api.js https://www.gstatic.com:* https://*.googlesyndication.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net/npm/@glidejs/glide@3.6.0/dist/css/glide.core.min.css https://fonts.googleapis.com/css2 https://use.typekit.net/wtm0jxv.css https://p.typekit.net/p.css; img-src 'self' data: image/svg+xml https://cdn-cookieyes.com/assets/images/revisit.svg https://cdn-cookieyes.com/assets/images/close.svg https://cdn-cookieyes.com/assets/images/poweredbtcky.svg https://www.googletagmanager.com:* https://*.googlesyndication.com; font-src 'self' data: https://fonts.gstatic.com:* https://use.typekit.net:* application/x-font-woff; connect-src https://www.google.com/ccm/collect https://log.cookieyes.com/api/v1/log https://www.google-analytics.com/g/collect https://cdn-cookieyes.com/client_data/94a4f13a0cb959b98cc4a48f/rFE9TVe8.json https://www.google-analytics.com/privacy-sandbox/register-conversion https://cdn-cookieyes.com/client_data/94a4f13a0cb959b98cc4a48f/config/wC2wr8GQ.json https://cdn-cookieyes.com/client_data/94a4f13a0cb959b98cc4a48f/translations/m3Rl7gng.json https://cdn-cookieyes.com/client_data/94a4f13a0cb959b98cc4a48f/audit-table/k_7S_mH5.json https://pagead2.googlesyndication.com/ccm/collect; frame-src https://www.googletagmanager.com/ https://player.vimeo.com/ https://cloud.fully.holmesmurphy.com/ https://www.google.com/ https://*.googlesyndication.com; worker-src blob: https://www.holmesmurphy.com/5efe1b50-d93c-47e3-86b9-cab1697897e7 1
frame-src 'self'; report-uri https://secure.acsevents.org/site/XFrameViolation 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cash-f.squarecdn.com *.fontawesome.com https://fonts.bunny.net *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.certcapture.com *.getbread.com *.breadpayments.com *.rbcpayplan.com *.weltpixel.com js.mollie.com *.wesupply.xyz https://wesupplylabs.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.googletagmanager.com *.doubleclick.net www.xtento.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * *.certcapture.com *.getbread.com *.breadpayments.com *.rbcpayplan.com https://images.unsplash.com magefan.com cm.magefan.com maps.googleapis.com *.disqus.com https://img.youtube.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com *.cdninstagram.com *.fbcdn.net *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com www.xtento.com cdn.xtento.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page *.certcapture.com *.getbread.com *.breadpayments.com *.rbcpayplan.com https://maps.googleapis.com https://player.vimeo.com ajax.googleapis.com maps.googleapis.com *.disqus.com *.avada.io *.shopify.com js.mollie.com *.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.instagram.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net https://www.googletagmanager.com tagmanager.google.com www.xtento.com cdn.xtento.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.cash.app *.certcapture.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com tagmanager.google.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; object-src 'none'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com * *.certcapture.com *.getbread.com *.breadpayments.com *.rbcpayplan.com https://maps.googleapis.com https://player.vimeo.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com maps.googleapis.com *.instagram.com *.googleusercontent.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app https://www.google-analytics.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://north40outfitters.report-uri.com/r/t/csp/reportOnly; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'nonce-cZb0PTyDRkOzgCCVg1G+bA==' https://www.googletagmanager.com https://*.divcom.com https://munchkin.marketo.net https://static.cloudflareinsights.com https://www.google.com https://www.gstatic.com https://*.authorize.net https://*.brella.io https://www.youtube.com https://s.ytimg.com https://player.vimeo.com https://f.vimeocdn.com; style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net https://*.fontawesome.com https://cdn.jsdelivr.net https://cdn.cookielaw.org https://fonts.googleapis.com https://*.divcom.com; img-src 'self' data: blob: https:; font-src 'self' data: https://use.typekit.net https://*.fontawesome.com https://fonts.gstatic.com https://*.divcom.com; connect-src 'self' https://divcomplatform.s3.amazonaws.com https://assets.divcomstaging.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://*.ingest.us.sentry.io https://*.authorize.net https://*.divcom.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://*.fontawesome.com https://use.typekit.net https://*.brella.io https://munchkin.marketo.net https://*.algolia.net https://*.algolianet.com https://www.google.com https://www.youtube.com https://player.vimeo.com; frame-src 'self' https:; media-src 'self' https: data: blob:; form-action 'self' https://accept.authorize.net https://test.authorize.net; object-src 'none'; base-uri 'self'; report-uri https://o123887.ingest.us.sentry.io/api/272694/security/?sentry_key=a55321bf52d44c5fa7ada94d915f8609 1
default-src 'self'; script-src 'self' 'sha256-YX4iJw93x5SU0ple+RI+95HNdNBZSA60gR8a5v7HfOA=' 'sha256-WR8o4UdzkfQd/B9prWMMzvA2VlbX7/I/y8EFPevJOXw=' 'sha256-Kkwk4ZUUW3qZNbj58dkRearCDt4CWSotgAtEuHdNd6g=' 'sha256-R0cVcQ1UfQTWnLUINrj4MfHMoBD0RKwK7ZYK/rfQBHM=' 'sha256-Ro5i8olCkIPmIG76rAWygcfc9HVzWjxOXXARUTL8YsQ=' 'sha256-yof2HSumBjSLwi3m+5rTlVgGCBpEo3Eugd2GT5lEe7w=' 'sha256-IaWkPkOxjlXUPoVDL/dzn/TfKwbSUzl2qgnrqCPX9Gw=' 'sha256-egpbluqkD8NT0bY3bWy7raM9tRIMkfUWboq0Y8KqsFk=' 'sha256-DF6hZvQLSUjLzU0QI/g098kUMN7kq9eR7gHybjLOVHI=' 'sha256-LeJHLwdOrId4BI1YUY0xRe8UH62rM3qPmeggRd2E30c=' 'sha256-v1oYH69RcooFs6F5XhMTzHiWlftYwnuQHDxIz0suNeo=' app.termly.io cdn.firstpromoter.com www.googletagmanager.com ajax.cloudflare.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data:; font-src 'self' fonts.gstatic.com; connect-src 'self' app.termly.io us.consent.api.termly.io; object-src 'self'; prefetch-src 'self'; frame-src 'self'; frame-ancestors 'self'; form-action 'self'; upgrade-insecure-requests; disown-opener; base-uri 'self' 1
font-src *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com *.bootstrapcdn.com *.fonts.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com *.authorize.net *.facebook.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.authorize.net *.facebook.com *.google.com *.doubleclick.net *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io magefan.com cm.magefan.com *.disqus.com *.disquscdn.com aokocc.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.magentocommerce.com *.www.google-analytics.com *.google.co.in *.google.com *.placeholder.com *.occoutdoors.com *.gstatic.com *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.disqus.com *.googleapis.com *.google.com *.gstatic.com *.moatads.com *.addthisedge.com *.addthis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.adobedtm.com *.authorize.net *.braintreegateway.com *.signifyd.com 'self' data: *.googleadservices.com *.googletagmanager.com *.doubleclick.net *.cloudflare.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com *.disquscdn.com unsafe-inline assets.braintreegateway.com *.bootstrapcdn.com *.fonts.googleapis.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.getfirebug.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io http://dpm.demdex.net https://www.google.com https://www.gstatic.com *.addthis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.doubleclick.net *.facebook.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://cdn-ilenmfm.nitrocdn.com https://cdn.supademo.com https://script.supademo.com https://cdn.weglot.com https://cdn.jsdelivr.net https://assets.revenuehero.io https://diffuser-cdn.app-us1.com https://dev.visualwebsiteoptimizer.com https://okt.to https://prism.app-us1.com https://scripts.clarity.ms https://static.axept.io https://static.oktopost.com https://tracking-api.g2.com https://upslide.com https://us-assets.i.posthog.com https://www.clarity.ms https://www.google.com https://www.googletagmanager.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://cdn-ilenmfm.nitrocdn.com https://cdn.supademo.com https://cdn.jsdelivr.net https://fonts.axept.io https://fonts.googleapis.com https://www.gstatic.com; img-src 'self' data: blob: https://app.supademo.com https://axeptio.imgix.net https://cdn-ilenmfm.nitrocdn.com https://cdn.jsdelivr.net https://cdn.weglot.com https://media.supademo.com https://secure.gravatar.com https://upslide.com https://www.gstatic.com; font-src 'self' data: https://cdn-ilenmfm.nitrocdn.com https://cdn.supademo.com https://fonts.axept.io https://fonts.gstatic.com https://media.supademo.com; connect-src 'self' https://api.axept.io https://api.weglot.com https://app.supademo.com https://cdn-ilenmfm.nitrocdn.com https://client.axept.io https://dev.visualwebsiteoptimizer.com https://ipinfo.io https://o4511780364943360.ingest.de.sentry.io https://ad.doubleclick.net https://to.getnitropack.com https://tracking-api.g2.com https://www.google.com; frame-src 'self' https://app.supademo.com https://www.google.com https://www.googletagmanager.com; media-src 'self' https://cdn.supademo.com https://media.supademo.com; worker-src 'self' blob: data:; 1
default-src 'self' data: mediastream: blob: filesystem: about: ws: wss: unsafe-eval 'wasm-unsafe-eval' 'unsafe-inline'; script-src 'self' 'nonce-cUfRmcBJpbIzfRKSn5k9_Wf020w2CyOhGrEBAqczL_NcFyZm955mTQ' * data: blob: 'unsafe-inline' 'unsafe-eval' 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com * blob:; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com * blob: data:; script-src-elem 'self' * data: blob: 'unsafe-inline' 'unsafe-eval' 'report-sample'; connect-src 'self' data: mediastream: blob: filesystem: about: ws: wss: unsafe-eval 'wasm-unsafe-eval' 'unsafe-inline' *; frame-ancestors * blob: data:; media-src 'self' data: mediastream: blob: filesystem: about: ws: wss: unsafe-eval 'wasm-unsafe-eval' 'unsafe-inline' *; style-src 'self' data: mediastream: blob: filesystem: about: ws: wss: unsafe-eval 'wasm-unsafe-eval' 'unsafe-inline' * 'report-sample'; style-src-elem 'self' data: mediastream: blob: filesystem: about: ws: wss: unsafe-eval 'wasm-unsafe-eval' 'unsafe-inline' * https://cdntrf.com https://fonts.googleapis.com https://fonts.gstatic.com 'report-sample'; font-src 'self' data: mediastream: blob: filesystem: about: ws: wss: unsafe-eval 'wasm-unsafe-eval' 'unsafe-inline' * https://fonts.gstatic.com; worker-src 'self' 'nonce-cUfRmcBJpbIzfRKSn5k9_Wf020w2CyOhGrEBAqczL_NcFyZm955mTQ' * data: blob: 'report-sample'; script-src-attr 'self' * data: blob: 'unsafe-inline' 'report-sample'; report-uri https://www.derpatriot.de/@http-reporting?csp=report&requestTime=1789282586536066&requestHash=fbfa36e91f969ef958b4a4a5cdad90697bfc4071 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com consent.cookiefirst.com userlike-cdn-umm.b-cdn.net maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.facebook.com tpc.googlesyndication.com ad.ad-srv.net td.doubleclick.net translate.google.com secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com app.usercentrics.eu uct.service.usercentrics.eu consent.cookiefirst.com versandhandel.dimdi.de/ www.eye-able-cdn.com cdn.eye-able.com userlike-cdn-operators.userlike.com maps.googleapis.com bat.bing.com c.bing.com www.facebook.com www.google.com www.google.de googleads.g.doubleclick.net www.googletagmanager.com y.clarity.ms pubads.g.doubleclick.net ad.doubleclick.net adservice.google.com translate.google.com translate.googleapis.com https://x.klarnacdn.net https://firebasestorage.googleapis.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com maps.googleapis.com https://player.vimeo.com app.usercentrics.eu consent.cookiefirst.com www.eye-able-cdn.com userlike-cdn-umm.b-cdn.net cdn.brevo.com sibautomation.com www.googletagmanager.com connect.facebook.net bat.bing.com googleads.g.doubleclick.net tpc.googlesyndication.com cdn.matomo.cloud www.clarity.ms pagead2.googlesyndication.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com translate.google.com translate.googleapis.com translate-pa.google.com translate-pa.googleapis.com https://secure.pay1.de https://x.klarnacdn.net *.avada.io *.shopify.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com consent.cookiefirst.com www.eye-able-cdn.com cdn.eye-able.com maxcdn.bootstrapcdn.com *.fontawesome.com www.gstatic.com https://fonts.bunny.net d.ratepay.com d.payla.io dr.payla.io src.mastercard.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com api.usercentrics.eu graphql.usercentrics.eu aggregator.service.usercentrics.eu consent-api.service.consent.usercentrics.eu consent.cookiefirst.com edge.cookiefirst.com api.cookiefirst.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com api.userlike.com sibautomation.com in-automate.brevo.com region1.google-analytics.com pagead2.googlesyndication.com cdn.matomo.cloud y.clarity.ms q.clarity.ms www.google.com googleads.g.doubleclick.net bat.bing.com translate.googleapis.com translate-pa.googleapis.com https://get.geojs.io *.avada.io payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ js.mollie.com www.google.com www.googletagmanager.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net https://www.mollie.com www.google-analytics.com *.doubleclick.net *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net js.mollie.com www.google.com www.gstatic.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.fontawesome.com cdn.jsdelivr.net tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io www.google-analytics.com analytics.google.com *.google.com cdn.jsdelivr.net *.googletagmanager.com stats.g.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src blob: https://lenart.cloud.arlity.com https://v2.cloud.arlity.com; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.kxcdn.com https://lenart.cloud.arlity.com https://v2.cloud.arlity.com *.stape.io *.fontawesome.com https://fonts.bunny.net *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://ewniosek.credit-agricole.pl *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com pay.google.com play.google.com *.autopay.eu facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.addthis.com https://lenart.cloud.arlity.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.stape.io c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com platnosci.bm.pl platnosci-accept.bm.pl www.gstatic.com *.autopay.eu *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.fbcdn.net blob: https://ewniosek.credit-agricole.pl https://furniture24.cz https://lenart.cloud.arlity.com https://v2.cloud.arlity.com magefan.com cm.magefan.com *.disqus.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com *.stape.io https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com *.autopay.eu pay.google.com *.google-analytics.com *.googletagmanager.com *.googleapis.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com *.fbcdn.net platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com *.cloudflareinsights.com https://lenart.cloud.arlity.com *.disqus.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.stape.io *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.autopay.eu *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com https://lenart.cloud.arlity.com *.googletagmanager.com *.stape.io *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com https://lenart.cloud.arlity.com https://v2.cloud.arlity.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com https://maps.googleapis.com https://lenart.cloud.arlity.com https://v2.cloud.arlity.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog *.stape.io https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com maxcdn.bootstrapcdn.com *.stape.io data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.staging.flexint.net *.dynamicyield.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.staging.flexint.net *.dynamicyield.com *.kameleoon.io *.kameleoon.eu *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.googletagmanager.com *.stape.io c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://images.unsplash.com *.flexshopper.com *.dynamicyield.com *.kameleoon.io *.kameleoon.eu magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.doubleclick.net *.googletagmanager.com *.stape.io mcstaging.flex.store *.flexshopper.xyz images.flexshopper.xyz http://images.flexshopper.xyz *.adxcel-ec2.com *.bing.com *.360yield.com *.liadm.com *.media.net *.mediavine.com *.postrelease.com *.criteo.com *.outbrain.com *.pubmatic.com *.revcontent.com *.rubiconproject.com *.sharethrough.com *.smaato.net *.tapad.com *.teads.tv *.tremorhub.com *.clmbtech.com *.tpmn.co.kr *.3lift.com *.yieldmo.com *.emxdgt.com *.1rx.io *.bidswitch.net *.adnxs.com *.mediawallahscript.com *.smartadserver.com *.taboola.com *.omnitagjs.com *.casalemedia.com *.agkn.com *.unrulymedia.com *.crwdcntrl.net *.adsrvr.org *.stickyadstv.com *.imrworldwide.com *.lijit.com *.mathtag.com *.bidr.io *.facebook.net *.facebook.com *.dmxleo.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js *.exponea.com cdn.amplitude.com *.osano.com *.staging.flexint.net *.flexshopper.com *.flexshopper.xyz *.dynamicyield.com *.kameleoon.io *.kameleoon.eu *.bloomreach.com/ *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.gstatic.com *.googletagmanager.com *.doubleclick.net *.stape.io edge.fullstory.com cdn.segment.com api.segment.io *.steelhousemedia.com *.criteo.com *.listrakbi.com *.ipredictive.com *.liadm.com *.bing.com *.facebook.net *.taboola.com *.impactradius-event.com *.pinimg.com *.googleapis.com *.pinterest.com *.maxmind.com device.maxmind.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.flexshopper.com *.listrakbi.com *.dynamicyield.com *.kameleoon.io *.kameleoon.eu maxcdn.bootstrapcdn.com *.googleapis.com *.googletagmanager.com *.stape.io assets.braintreegateway.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.exponea.com api2.amplitude.com api.eu.amplitude.com api-sr.amplitude.com sr-client-cfg.amplitude.com api-secure.amplitude.com *.osano.com *.flexshopper.com *.flexshopper.xyz *.dynamicyield.com *.kameleoon.io *.kameleoon.eu *.bloomreach.com/ *.google-analytics.com *.doubleclick.net *.googlesyndication.com *.stape.io *.fullstory.com cdn.segment.com api.segment.io *.taboola.com *.pinterest.com *.listrakbi.com *.mmapiws.com d-ipv6.mmapiws.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; frame-ancestors 'none'; script-src 'nonce-a5Jw+8pH1xW3k2Z5pJSpkQ==' 'strict-dynamic' https: 'unsafe-inline' 'report-sample'; style-src * 'unsafe-inline' data:; img-src * data: blob:; font-src * data:; connect-src * data:; frame-src *; media-src * data: blob:; report-uri /csp-report 1
default-src 'self'; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; script-src 'self' 'unsafe-inline'; connect-src 'self'; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://cdn.delve.co https://us-assets.i.posthog.com https://va.vercel-scripts.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://cdn.sanity.io https://*.supabase.co https://auth.verahealth.ai https://figuresguidelines.blob.core.windows.net https://upload.wikimedia.org https://cdn.prod.website-files.com https://encrypted-tbn0.gstatic.com https://via.placeholder.com https://www.googletagmanager.com https://www.google-analytics.com; font-src 'self' data:; connect-src 'self' https://us.i.posthog.com https://us-assets.i.posthog.com https://*.supabase.co wss://*.supabase.co https://*.sentry.io https://*.ingest.sentry.io https://vitals.vercel-insights.com https://va.vercel-scripts.com https://auth.verahealth.ai https://www.google-analytics.com https://*.google-analytics.com; frame-src 'self' https://www.googletagmanager.com; worker-src 'self' blob:; manifest-src 'self' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' https://www.clarity.ms https://scripts.clarity.ms https://static.altery.com https://js-eu1.hsforms.net https://google.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://*.hsforms.com https://*.hubspot.com; img-src 'self' data: blob: https://www.clarity.ms https://*.clarity.ms https://*.hsforms.com https://*.hubspot.com; font-src 'self' data: https://*.hsforms.com https://*.hubspot.com; connect-src 'self' https://www.clarity.ms https://*.clarity.ms https://scripts.clarity.ms https://a.clarity.ms https://forms-eu1.hsforms.com https://api-eu1.hubapi.com https://*.hsforms.com https://*.hubspot.com; media-src 'self' blob:; frame-src 'self' https://app.altery.com https://www.google.com https://js-eu1.hsforms.net https://forms-eu1.hsforms.com https://*.hsforms.com https://google.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' api.enlyft.com www.googletagmanager.com googleads.g.doubleclick.net www.googleadservices.com *.google.com *.hubspot.com *.hs-scripts.com *.hsforms.com; connect-src 'self' api.enlyft.com www.google.com www.googletagmanager.com www.google-analytics.com stats.g.doubleclick.net www.googleadservices.com *.hubspot.com *.hsforms.com *.hubspot.com; img-src 'self' data: *.google.com *.googletagmanager.com *.doubleclick.net *.hubspot.com; font-src 'self' fonts.gstatic.com fonts.googleapis.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; frame-src 'self' *.google.com googleads.g.doubleclick.net; 1
script-src 'strict-dynamic' 'nonce-y5cv+1t3NphPjNg0ta0L5A==' 1
script-src * 'self' 'unsafe-inline' 1
worker-src blob:; font-src www.paypalobjects.com fonts.gstatic.com *.kxcdn.com *.fontawesome.com maxcdn.bootstrapcdn.com https://fonts.gstatic.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ api.boldcommerce.com api.staging.boldcommerce.com *.paypal.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com https://plumrocket.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io static.boldcommerce.com *.paypal.com *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.gstatic.com *.fbcdn.net magefan.com cm.magefan.com *.disqus.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ api.boldcommerce.com api.staging.boldcommerce.com cashier.boldcommerce.com *.paypal.com *.googleapis.com *.google.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com widget.freshworks.com m2epro.freshdesk.com *.disqus.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com maps.googleapis.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src api.boldcommerce.com api.staging.boldcommerce.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.boldcommerce.com api.staging.boldcommerce.com cashier.boldcommerce.com *.sandbox.braintree-api.com *.braintree-api.com *.paypal.com *.braintreegateway.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com widget.freshworks.com m2epro.freshdesk.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com places.googleapis.com 'self' 'unsafe-inline'; child-src api.boldcommerce.com api.staging.boldcommerce.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com cash-f.squarecdn.com https://*.gstatic.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.adyen.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.adyen.com widget.trustpilot.com *.facebook.com *.criteo.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https://*.gstatic.com *.adyen.com https://images.unsplash.com *.googleapis.com maps.gstatic.com *.ggpht.com magefan.com cm.magefan.com *.uber.com *.ubereats.com *.disqus.com *.cookiefirst.com *.facebook.com *.criteo.com *.criteo.net smct.co *.storyblok.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com pay.google.com *.paypalobjects.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com player.vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.gstatic.com maps.googleapis.com *.disqus.com widget.trustpilot.com youtu.be *.cookiefirst.com connect.facebook.net *.criteo.com *.criteo.net smct.co js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.paypalobjects.com cdn.segment.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app https://fonts.googleapis.com/ assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com player.vimeo.com www.youtube.com youtu.be 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.adyen.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.gstatic.com data: *.cookiefirst.com connect.facebook.net *.facebook.com *.criteo.com *.criteo.net smct.co api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com pay.google.com cdn.segment.com api.segment.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; connect-src 'self' https://cdn-ilecmmd.nitrocdn.com https://amp.azure.net https://www.google.com https://to.getnitropack.com https://ka-f.fontawesome.com; script-src 'strict-dynamic' 'nonce-{VALUE}'; 1
worker-src blob:; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.kxcdn.com https://cdn.example.com https://d3rxjg2kjkvovi.cloudfront.net https://d2raye211e9z2r.cloudfront.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.facebook.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.snapmint.com *.snapmint.com/v1/public 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.addthis.com *.facebook.com *.facebook.net *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.snapmint.com *.snapmint.com/v1/public 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.fbcdn.net blob: https://d2raye211e9z2r.cloudfront.net https://d3rxjg2kjkvovi.cloudfront.net magefan.com cm.magefan.com *.facebook.com *.facebook.net *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.snapmint.com *.snapmint.com/v1/public data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com *.fbcdn.net platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com *.cloudflareinsights.com https://d3rxjg2kjkvovi.cloudfront.net https://d2raye211e9z2r.cloudfront.net s7.addthis.com *.facebook.com *.facebook.net *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.doubleclick.net *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.snapmint.com *.snapmint.com/v1/public 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com https://d3rxjg2kjkvovi.cloudfront.net https://d2raye211e9z2r.cloudfront.net *.googletagmanager.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.snapmint.com *.snapmint.com/v1/public 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com https://d2raye211e9z2r.cloudfront.net https://d3rxjg2kjkvovi.cloudfront.net ekr.zdassets.com/ *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.snapmint.com *.snapmint.com/v1/public 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self'; font-src 'self' fonts.bunny.net; img-src 'self' fraisa.cdn.celum.cloud *.tile.openstreetmap.org px.ads.linkedin.com data:; media-src 'self' 'unsafe-inline'; connect-src 'self' stat.fraisa.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' stat.fraisa.com; script-src-attr 'self' 'unsafe-inline'; worker-src 'self' blob:; report-uri https://fraisa.uriports.com/reports/report; report-to default 1
font-src https://fonts.gstatic.com *.gstatic.com data: *.fontawesome.com https://www.google.com https://www.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.stripe.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.certcapture.com https://maps.google.com/ ipinfo.io *.stripe.com https://js.stripe.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * landofcoder.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com *.certcapture.com flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.certcapture.com ipinfo.io *.stripe.com https://js.stripe.com/v2/ https://js.stripe.com/v3/ *.google.com maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com landofcoder.com 'sha256-g/qbQ8sW5eJ9JO8sQzRJ1OvARbUyKpJXFeof9SLw1eI=' 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src ipinfo.io landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com *.ipinfo.io *.certcapture.com ipinfo.io *.stripe.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com landofcoder.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src 'self' https://assets.andimprove.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://assets.andimprove.com https://cdnjs.cloudflare.com https://connect.facebook.net https://googleads.g.doubleclick.net https://includes.ccdc02.com/cardinalcruise/ https://js.braintreegateway.com https://songbird.cardinalcommerce.com https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://assets.andimprove.com https://cdn.jsdelivr.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com; child-src 'self' https://staticxx.facebook.com https://bid.g.doubleclick.net; img-src 'self' data: https:; report-uri /api/v0.1.0/security-report/csp; connect-src 'self' https:; object-src 'self' https://assets.andimprove.com; default-src 'self'; frame-src 'self' https://*.cardinalcommerce.com https://assets.andimprove.com https://assets.braintreegateway.com https://bid.g.doubleclick.net https://checkout.paypal.com https://connect.facebook.net https://staticxx.facebook.com https://www.facebook.com 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com data: https://www.googletagmanager.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.gorgias.chat google.com *.google.com *.amplitude.com bat.bing.com https://firebasestorage.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.gorgias.chat bat.bing.com *.amplitude.com *.avada.io *.shopify.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.fontawesome.com *.gstatic.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.google-analytics.com *.gorgias.chat stats.g.doubleclick.net *.amplitude.com https://get.geojs.io *.avada.io widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://js.braintreegateway.com https://c.paypal.com https://www.paypal.com ; child-src 'self'; img-src 'self' data: https://www.paypalobjects.com https://b.stats.paypal.com https://c.paypal.com https://c6.paypal.com https://slc.stats.paypal.com ; style-src 'self' 'unsafe-inline'; frame-src 'self' https://www.paypal.com https://checkout.paypal.com https://c.paypal.com ; connect-src 'self' https://api.braintreegateway.com https://payments.braintree-api.com https://client-analytics.braintreegateway.com https://www.paypal.com ; report-uri /csp-report.php?reportonly=1; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://s3.amazonaws.com https://request.purview.net https://chimpstatic.com https://js.hs-scripts.com https://player.vimeo.com https://scripts.mediavine.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn-images.mailchimp.com https://cdn2.editmysite.com https://static.hsappstatic.net; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https://cdn-images.mailchimp.com https://horosproject.us21.list-manage.com https://secure.gravatar.com https://cdn2.editmysite.com https://track.hubspot.com; frame-src https://horosproject.us21.list-manage.com https://player.vimeo.com; connect-src 'self' https://request.purview.net https://www.google-analytics.com https://track.hubspot.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://horosproject.us21.list-manage.com; frame-ancestors 'self'; upgrade-insecure-requests; report-uri /csp-violation-report-endpoint/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: blob: https:; frame-src 'self' https://www.google.com; connect-src 'self' https://www.google.com; object-src 'none'; base-uri 'self' 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-h6rMc+3qkLg+tODxLC9uMkRUacU=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
base-uri 'none'; object-src 'none'; script-src 'report-sample' https: 'nonce-MzEyNTA0MzQ3OCwzOTE0Mjc0MTg2' 'unsafe-eval' 'strict-dynamic'; report-uri https://csp.canva.com/_cspreport?ro=true&requestId=a3a4103c3a24ef28&app=devdocs; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' static.cloudflareinsights.com *.googletagmanager.com *.googlesyndication.com *.google-analytics.com onesignal.com cdn.onesignal.com widget.spreaker.com gravatar.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' data: fonts.gstatic.com; img-src 'self' data: https: gravatar.com *.googlesyndication.com *.google.com; frame-src www.youtube.com *.spreaker.com onesignal.com *.google.com; connect-src 'self' onesignal.com *.onesignal.com static.cloudflareinsights.com *.google-analytics.com; worker-src blob: onesignal.com 1
script-src 'self' 'unsafe-eval' 'unsafe-inline' https://bat.bing.com https://www.google-analytics.com https://www.googletagmanager.com https://*.healthroundprince.com https://cdn.privacy-mgmt.com https://cdn.ablyft.com https://static.cloudflareinsights.com https://connect.facebook.net https://service.force.com https://googleads.g.doubleclick.net https://d.la1-core1.sfdc-yzvdd4.salesforceliveagent.com; frame-ancestors 'none'; report-uri https://oapi.oskar.de/api/v3/tenant/1/language/1/shared/log/csp-violation; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com *.googleapis.com https://analytics.tiktok.com https://graph.tiktok.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://fonts.googleapis.com *.fonts.googleapis.com data: *.cloudflare.com static.olark.com *.zohocdn.com *.userway.org data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.tiktok.com *.tiktok.net https://analytics.tiktok.com https://graph.tiktok.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com self www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.certcapture.com *.tiktok.com *.tiktok.net https://analytics.tiktok.com https://graph.tiktok.com www.google.com www.gstatic.com apis.google.com www.facebook.com platform.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://plumrocket.com https://accounts.google.com *.addthis.com *.pinterest.com googleads.g.doubleclick.net www.google.co.in https://salesiq.zoho.com https://*.zohopublic.com https://*.zohopublic.in *.trustpilot.com *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.certcapture.com *.bayengage.com *.b0e8.com *.tiktok.com *.tiktok.net https://analytics.tiktok.com https://graph.tiktok.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com www.facebook.com *.pinterest.com assets.pinterest.com syndication.twitter.com *.facebook.com https://maps.gstatic.com https://maps.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.addthis.com *.cdninstagram.com insight.adsrvr.org bat.bing.com www.google.co.in log.olark.com static.olark.com img-msg.tb-list.com pixel.rubiconproject.com match.adsrvr.org *.doubleclick.net *.meetanshi.com *.authorize.net *.zonos.com *.reddit.com *.userway.org primera.com *.primera.com marvel-b1-cdn.bc0a.com https://*.zohopublic.com https://*.zohopublic.in https://css.zohocdn.com http://translate.google.com *.linkedin.com *.outbrain.com *.mgid.com t.vibe.co *.vibe.co zonos-store-assets.s3.amazonaws.com *.affirm.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.certcapture.com *.bayengage.com https://wh.bayengage.com/magento *.b0e8.com *.bc0a.com unpkg.com *.kaptcha.com https://www.googletagmanager.com tagmanager.google.com https://www.googleadservices.com *.tiktok.com *.tiktok.net https://analytics.tiktok.com https://graph.tiktok.com *.disqus.com *.googleapis.com *.gstatic.com *.avada.io *.shopify.com *.facebook.com twitter.com platform.twitter.com static.addtoany.com https://maps.googleapis.com https://maps.gstatic.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://accounts.google.com https://www.gstatic.com maps.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.instagram.com d10lpsik1i8c69.cloudfront.net js.adsrvr.org cdn-in.pagesense.io sf.bayengage.com bat.bing.com app.targetbay.com static.olark.com knrpc.olark.com www.gstatic.com verify.authorize.net *.userway.org sc-static.net *.redditstatic.com *.reddit.com *.pinimg.com *.snapchat.com *.googleoptimize.com *.zohopublic.in *.zohocdn.com *.zonos.com *.unpkg.com https://salesiq.zoho.com https://*.zohocdn.com https://*.zohopublic.in https://*.zohopublic.com *.facebook.net *.zoho.com *.linkedin.com *.licdn.com *.clarity.ms *.mgid.com *.outbrain.com *.taboola.com *.clickguard.com *.conversionbox.io cdn.jsdelivr.net *.thoughtmetric.io js.stripe.com *.trustpilot.com www.xtento.com cdn.xtento.com https://hello.zonos.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com https://accounts.google.com https://www.gstatic.com static.olark.com *.userway.org *.zohocdn.com cdn.jsdelivr.net *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.olark.com static.zohocdn.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.certcapture.com *.bayengage.com https://wh.bayengage.com/magento *.kaptcha.com *.tiktok.com *.tiktok.net https://analytics.tiktok.com https://graph.tiktok.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io stats.addtoany.com https://maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://accounts.google.com maps.googleapis.com *.cloudflare.com *.googleapis.com *.addthis.com *.graph.instagram.com *.google-analytics.com settings.luckyorange.net pagesense.zoho.in locationapi.cdn-in.pagesense.io pagesense-collect.zoho.in app.targetbay.com knrpc.olark.com bat.bing.com sfc-api.bayengage.com www.google.co.in cart2quote.zendesk.com *.zonos.com *.snapchat.com *.reddit.com *.redditstatic.com *.userway.org *.pinterest.com *.zohopublic.in *.g.doubleclick.net trustpilot.com *.trustpilot.com https://salesiq.zohopublic.com https://*.zohopublic.in https://*.zohopublic.com wss://*.zohopublic.com ws://*.zohopublic.com *.typesense.net vts.zohopublic.com *.demdex.net *.linkedin.com *.outbrain.com *.clarity.ms *.taboola.com *.clickguard.com *.conversionbox.io *.thoughtmetric.io ad.doubleclick.net dv-c3e594c6d429469e90b54478358619c3.ecs.us-east-1.on.aws *.cloudfront.net 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com youtube.com vimeo.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.creditguard.co.il vimeo.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com youtube.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com vimeo.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.creditguard.co.il *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.fontawesome.com youtube.com vimeo.com *.addtoany.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com youtube.com https://get.geojs.io *.avada.io http://dpm.demdex.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src *.useinsider.com *.api.useinsider.com; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.fontawesome.com *.useinsider.com *.api.useinsider.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.sharethis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com https://plumrocket.com *.useinsider.com *.api.useinsider.com landofcoder.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.sharethis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.trackedlink.net *.ddlnk.net *.useinsider.com *.api.useinsider.com t.zip.co static.zipmoney.com.au static.zip.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.sharethis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.useinsider.com *.api.useinsider.com landofcoder.com static.zipmoney.com.au static.zip.co zip.co https://www.horseland.com.au 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.sharethis.com assets.braintreegateway.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com *.googleapis.com *.useinsider.com *.api.useinsider.com 'self' 'unsafe-inline'; object-src *.useinsider.com *.api.useinsider.com landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com *.sharethis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com https://*.useinsider.com https://*.api.useinsider.com wss://*.useinsider.com landofcoder.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
child-src 'self' https://*.qualified.com; default-src 'self'; frame-src 'self' https://9628652.fls.doubleclick.net https://td.doubleclick.net https://js.driftt.com https://*.qualified.com https://a8447815042.cdn-pci.optimizely.com https://ct.pinterest.com https://tealium-f.squarecdn.com; worker-src 'self' blob:; connect-src 'self' https://assets.ctfassets.net https://api.broadway.squareup.com https://campaign-hub-production-f.squarecdn.com https://api.squareup.com/v1/cdp/batch https://api.squarestagingexternal.com/v1/cdp/batch https://api.squarestagingexternal.com https://api.squareup.com https://api.squareupstaging.com *.contentsquare.net https://capi.squareup.com https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com https://stats.g.doubleclick.net https://facebook.com https://www.facebook.com https://googleads.g.doubleclick.net http://www.google-analytics.com https://www.google-analytics.com https://google.com https://www.google.com https://us-central1-sq-sgtm-prod.cloudfunctions.net https://www.googletagmanager.com http://images.ctfassets.net https://images.ctfassets.net http://424-iab-218.mktoresp.com https://424-iab-218.mktoresp.com https://xms2-marketo.beta.stage.sqprod.co https://424-iab-218.mktoutil.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://logx.optimizely.com https://ct.pinterest.com https://conversions-config.reddit.com https://pixel-config.reddit.com https://www.redditstatic.com *.ingest.us.sentry.io *.6sc.co https://api.sprig.com https://squareupstaging.com https://visitor-scoring-new.marketlinc.com https://api.chilipiper.com https://squareinc-sandbox.chilipiper.com https://squareinc.chilipiper.com https://www.workwithsquare.com wss://*.qualified.com https://*.qualified.com https://pw-renderer-production-c.squarecdn.com localhost:*; font-src 'self' https://cash-f.squarecdn.com https://square-fonts-production-f.squarecdn.com; img-src 'self' data: blob: https://ib.adnxs.com https://assets.ctfassets.net https://cdn.blisspointmedia.com https://campaign-hub-production-f.squarecdn.com *.contentsquare.net https://ad.doubleclick.net https://facebook.com https://www.facebook.com https://google.com https://www.google.com https://adservice.google.com https://googleads.g.doubleclick.net http://www.google-analytics.com https://www.google-analytics.com https://*.g.doubleclick.net https://www.googletagmanager.com http://images.ctfassets.net https://images.ctfassets.net https://px.ads.linkedin.com https://cdn.cookielaw.org https://pixel.pointmediatracker.com https://alb.reddit.com *.6sc.co https://api.squareup.com https://api.squareupstaging.com https://insight.adsrvr.org https://match.adsrvr.org https://*.qualified.com https://pw-renderer-production-c.squarecdn.com; manifest-src 'self' https://pw-renderer-production-c.squarecdn.com; media-src 'self' mediastream: https://assets.ctfassets.net https://js.driftt.com http://videos.ctfassets.net https://videos.ctfassets.net https://*.qualified.com; script-src 'self' *.contentsquare.net https://www.datadoghq-browser-agent.com https://js.driftt.com https://*.qualified.com https://connect.facebook.net https://www.googleadservices.com https://googleads.g.doubleclick.net http://www.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com https://campaign-hub-production-f.squarecdn.com https://lift-ai-js.marketlinc.com https://martech-development-c.squarecdn.com https://martech-production-c.squarecdn.com https://martech-staging-c.squarecdn.com http://munchkin.marketo.net https://munchkin.marketo.net https://cdn.cookielaw.org https://a8447815042.cdn-pci.optimizely.com https://s.pinimg.com https://ct.pinterest.com https://pw-renderer-production-c.squarecdn.com https://pw-renderer-staging-c.squarecdn.com https://pwt-production-c.squarecdn.com https://pwt-staging-c.squarecdn.com https://sales-bridge-production-c.squarecdn.com https://sales-bridge-staging-c.squarecdn.com https://squareinc-sandbox.chilipiper.com https://squareinc.chilipiper.com https://www.workwithsquare.com https://www.redditstatic.com *.6sc.co https://cdn.sprig.com https://xms-production-f.squarecdn.com https://www.youtube.com https://pw-renderer-production-c.squarecdn.com 'nonce-PWBXTqfBJ7Z+qWejyXV2Kw=='; style-src 'self' https://square-fonts-production-f.squarecdn.com https://sales-bridge-production-c.squarecdn.com https://sales-bridge-staging-c.squarecdn.com 'unsafe-inline' https://*.qualified.com https://pw-renderer-production-c.squarecdn.com; frame-ancestors 'self' https://app.contentful.com; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubd9af00759e65a48ba7ee3ff1dfa4260b&dd-evp-origin=content-security-policy&ddsource=csp-report; report-to browser-intake-datadoghq 1
object-src 'none';base-uri 'self';script-src 'nonce-wbs-4FVXWTDtY3eM5zFCVw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.klarnacdn.net *.fontawesome.com https://widgets.trustedshops.com 'self' data: https://static.unzer.com https://applepay.cdn-apple.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com www.google.com *.klarna.com *.google.com/ *.bausep.de vars.hotjar.com ssl.hurra.com cdn.consentmanager.net googletagmanager.com www.paypalobjects.com googleads.g.doubleclick.net payment.unzer.com *.phoenix-media.cloud https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://static-cc.test.unzer.com https://h.online-metrix.net https://google.com/pay https://pay.google.com/ https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ https://sandbox.clicktopay.auth.visa.com https://clicktopay.visa.com https://sandbox.secure.checkout.visa.com https://secure.checkout.visa.com https://static-cc.unzer.com https://applepay.cdn-apple.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.sharethis.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://www.magezon.com googleadservices.com *.consentmanager.net widgets.trustedshops.com static.unzer.com google.com www.google.de paypal.com *.bausep.de bs-magento2-master.phoenix-media.cloud *.bing.com *.bing.net *.phoenix-media.cloud www.facebook.com *.hsforms.net *.hsforms.com 'self' data: https://static.unzer.com *.online-metrix.net https://www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sharethis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com ssl.hurra.com googletagmanager.com *.consentmanager.net widgets.trustedshops.com *.hotjar.com *.g.doubleclick.net payment.unzer.com *.bausep.de *.bing.com *.phoenix-media.cloud connect.facebook.net *.hsforms.net *.hsforms.com *.gstatic.com https://static.unzer.com https://applepay.cdn-apple.com https://pay.google.com https://code.jquery.com https://h.online-metrix.net https://h64.online-metrix.net https://static-v2.unzer.com/v2/ui-components/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com *.klarnacdn.net *.fontawesome.com *.googleapis.com *.gstatic.com https://sandbox.src.mastercard.com https://static-v2.unzer.com/v2/ui-components/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.bausep.de ssl.hurra.com *.hotjar.com googletagmanager.com google.de www.google.de www.google.com *.g.doubleclick.net payment.unzer.com *.bing.com *.bing.net *.phoenix-media.cloud connect.facebook.net www.facebook.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com https://api.unzer.com https://api.heidelpay.com https://sbx-api.heidelpay.com https://sbx-api.unzer.com https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://h.online-metrix.net https://h64.online-metrix.net https://google.com/pay https://www.google.com/pay https://pay.google.com https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ https://static-cc.test.unzer.com https://static-v2.unzer.com/v2/ui-components/ https://static-cc.unzer.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src  'none'; connect-src 'self' *.hardx.com *.xempire.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.hardx.com *.xempire.com join.gammasecure.com; script-src 'self' *.hardx.com *.xempire.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.hardx.com *.xempire.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.credaily.com https://www.googletagmanager.com https://securepubads.g.doubleclick.net https://challenges.cloudflare.com https://www.google.com https://www.gstatic.com https://maps.googleapis.com https://use.typekit.net https://assets.customer.io https://js.stripe.com https://getsponsy.com https://cdn.mxpnl.com https://*.adtrafficquality.google https://connect.facebook.net https://static.cloudflareinsights.com data:; style-src 'self' 'unsafe-inline' https://cdn.credaily.com https://use.typekit.net https://p.typekit.net https://fonts.googleapis.com; img-src 'self' data: blob: https://cdn.credaily.com https://secure.gravatar.com https://s.w.org https://media.beehiiv.com https://lh7-rt.googleusercontent.com https://www.google-analytics.com https://www.googletagmanager.com https://securepubads.g.doubleclick.net https://stats.g.doubleclick.net https://*.googlesyndication.com https://*.google.com https://maps.gstatic.com https://maps.googleapis.com https://track.customer.io https://*.adtrafficquality.google https://p.typekit.net https://*.facebook.com https://*.twitter.com https://*.instagram.com https://pbs.twimg.com; font-src 'self' data: https://cdn.credaily.com https://use.typekit.net https://p.typekit.net https://fonts.gstatic.com; frame-src 'self' https://credaily.com https://www.googletagmanager.com https://www.google.com https://recaptcha.google.com https://*.doubleclick.net https://*.googlesyndication.com https://challenges.cloudflare.com https://js.stripe.com https://merch.credaily.com https://getsponsy.com https://www.youtube.com https://*.adtrafficquality.google; connect-src 'self' https://cdn.credaily.com https://www.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://*.analytics.google.com https://stats.g.doubleclick.net https://assets.customer.io https://track.customer.io https://api.stripe.com https://*.googlesyndication.com https://securepubads.g.doubleclick.net https://api-js.mixpanel.com https://*.adtrafficquality.google https://www.facebook.com https://www.google.com https://maps.googleapis.com; media-src 'self' https://cdn.credaily.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri https://www.credaily.com/?csp-report=1; 1
default-src 'self'; script-src 'self' 'unsafe-eval' https://*.bistum-eichstaett.de https://*.bistum-eichstaett.info 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: https://*.bistum-eichstaett.de https://cms.ai-gelb.de; base-uri 'self'; frame-src 'self' https://player.vimeo.com https://www.youtube-nocookie.com; connect-src 'self' https://*.bistum-eichstaett.de https://*.bistum-eichstaett.info https://cms.ai-gelb.de https://streaming.ai-gelb.de https://sentry2.in2code.de/api/65/security/; style-src 'self' 'unsafe-inline' 'report-sample'; script-src-elem 'self' 'unsafe-inline' https://*.bistum-eichstaett.de https://*.bistum-eichstaett.info 'report-sample'; font-src 'self' https://*.bistum-eichstaett.de; report-uri https://sentry2.in2code.de/api/65/security/?sentry_key=3f69c8194ff9168d1db803c1b6fd2f50 1
base-uri 'self'; report-uri https://www.mangelot-hosting.nl/cspro-report.php; frame-src 'self' https://www.google.com https://maps.google.com; connect-src 'self' https://www.google.com https://stats.mangelot-hosting.nl https://*.ipify.org https://*.speedtest.clouvider.net https://translate.googleapis.com https://translate-pa.googleapis.com;; font-src 'self' data: https://cdn.mangelot-hosting.nl https://fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.mangelot-hosting.nl https://www.google.com https://www.gstatic.com https://stats.mangelot-hosting.nl https://translate.google.com https://translate.googleapis.com https://translate-pa.googleapis.com; style-src 'self' 'unsafe-inline' https://cdn.mangelot-hosting.nl https://fonts.googleapis.com https://www.gstatic.com;; img-src 'self' data: https:; media-src 'self' data: https://cdn.mangelot-hosting.nl; object-src 'none'; form-action 'self' https://*.paypal.com https://pay.ideal.nl https://pay.buckaroo.nl/; frame-ancestors 'self'; default-src 'self' https://cdn.mangelot-hosting.nl 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce--9CnihioZr5YMYmu1s9kuw' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.siammakro.cloud https://*.makro.pro https://*.lotuss.com.my https://*.googletagmanager.com https://*.google-analytics.com https://*.segment.io https://cdn.segment.com https://connect.facebook.net https://websdk.appsflyer.com https://*.cloudflare.com https://dashboard.flashanalytics.app https://*.flashanalytics.app; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com https://*.siammakro.cloud https://*.makro.pro https://*.lotuss.com.my; img-src 'self' data: blob: https://*.siammakro.cloud https://*.mirakl.net https://*.lotuss.com.my https://*.adobeaemcloud.com https://picsum.photos https://*.cloudfront.net https://*.google-analytics.com https://*.googletagmanager.com https://googleads.g.doubleclick.net https://*.makro.pro https://dashboard.flashanalytics.app https://*.flashanalytics.app https:; media-src 'self' data: blob: https: http:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.siammakro.cloud https://*.makro.pro https://*.adobeaemcloud.com https://*.omni.cpaxtra.com https://analytics.google.com https://www.google.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://www.googleadservices.com https://*.lotuss.com.my https://*.segment.io https://cdn.segment.com https://connect.facebook.net https://d.line-cdn.net https://*.appsflyer.com https://*.datadoghq.com https://*.firebaseio.com https://*.googleapis.com https://*.cpaxtra.com https://rdws.rd.go.th https://wa.onelink.me https://wa.appsflyersdk.com https://dashboard.flashanalytics.app https://*.flashanalytics.app https: http:; frame-src 'self' https://*.lotuss.com.my https://*.siammakro.cloud https://*.makro.pro https://*.firebaseapp.com https://*.cloudflare.com https://www.googletagmanager.com https://www.makro.co.mm https://www.makro.co.kh https://td.doubleclick.net https://www.facebook.com; form-action 'self' https://www.facebook.com; frame-ancestors http://localhost:3000 https://*.lotuss.com.my https://*.makro.pro https://*.siammakro.cloud; worker-src 'self' blob: 1
base-uri 'none'; style-src 'report-sample' 'self' 'unsafe-inline' ; object-src 'none'; img-src 'self' *.regenwald.org data: ; connect-src 'self' ; block-all-mixed-content; report-uri /csp-violation-report/8b598674-255 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.cookiefirst.com *.marketo.com *.marketo.net *.mktoresp.com *.bizible.com *.salesforce.com *.my.site.com *.salesforce-scrt.com tcpsoftware.my.site.com *.clarity.ms *.linkedin.com *.facebook.net *.youtube.com *.company-target.com snap.licdn.com bat.bing.com googleads.g.doubleclick.net www.googleadservices.com www.redditstatic.com tr.capterra.com tag.demandbase.com *.claydar.com d34r8q7sht0t9k.cloudfront.net *.leandata.com *.tcpsoftware.com go.tcpsoftware.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.marketo.com https:; font-src 'self' fonts.gstatic.com data:; img-src 'self' data: blob: https:; connect-src 'self' *.google-analytics.com *.analytics.google.com *.cookiefirst.com consent.cookiefirst.com *.marketo.com *.mktoresp.com *.bizible.com *.salesforce.com *.salesforce-scrt.com tcpsoftware.my.salesforce-scrt.com *.clarity.ms *.company-target.com px.ads.linkedin.com bat.bing.com www.google.com *.doubleclick.net *.reddit.com tr.capterra.com tag-logger.demandbase.com api.claydar.com *.podscribe.com *.leandata.com wss://*.salesforce.com wss://*.salesforce-scrt.com chloe.tcpsoftware.net *.tcpsoftware.com go.tcpsoftware.com; frame-src *.youtube.com *.marketo.com *.my.site.com *.company-target.com *.hubspot.com *.hsforms.com chloe.tcpsoftware.net *.tcpsoftware.com; base-uri 'self'; form-action 'self' *.marketo.com *.salesforce.com *.hubspot.com *.hsforms.com; worker-src blob: 'self'; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com *.googleapis.com *.static.klaviyo.com static.klaviyo.com *.certcapture.com *.klevu.com *.ksearchnet.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.curalate.com js-agent.newrelic.com bam.nr-data.net *.googletagmanager.com *.googleanalytics.com *.certcapture.com https://www.merchante-solutions.com https://hostedpayments.merchante.com https://merchantacsstag.cardinalcommerce.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com https://elements.sandbox.fortis.tech https://elements.fortis.tech www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.curalate.com js-agent.newrelic.com bam.nr-data.net *.googletagmanager.com *.googleanalytics.com *.doubleclick.net www.activemerchandiser.com my.matterport.com ct.pinterest.com *.cdn-lg.accentdecor.com *.fortis.tech *.cardinalcommerce.com https://www.googletagmanager.com/ magento-cloudflare.jetrails.com *.google.com/ https://merchantacsstag.cardinalcommerce.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.certcapture.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com maps.gstatic.com https://www.magezon.com mageside.com *.curalate.com js-agent.newrelic.com bam.nr-data.net *.googletagmanager.com *.googleanalytics.com developers.google.com maps.googleapis.com *.accentdecor.com *.doubleclick.net ct.pinterest.com *.fortis.tech galleryuseastprod.blob.core.windows.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.ytimg.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.certcapture.com https://developer.adobe.com https://magento.com https://js.sandbox.fortis.tech *.fortis.tech https://elements.sandbox.fortis.tech elements.fortis.tech https://rum.hlx.page www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com *.gstatic.com https://cdn.appifycommerce.com *.curalate.com *.mailchimp.com *.paypal.com *.googletagmanager.com *.googleanalytics.com *.merchante-solutions.com *.adobetm.com *.yotpo.com js-agent.newrelic.com bam.nr-data.net chimpstatic.com eastprodcdn.azureedge.net mc.us1.list-manage.com *.accentdecor.com  maps.googleapis.com *.fullstory.com s.pinimg.com *.cloudfront.net *.static.cloudflareinsights.com static.cloudflareinsights.com *.googleads.g.doubleclick.net *.ajax.cloudflare.com ct.pinterest.com cdn.appifycommerce.com appifycommerce.com *.merchant-solutions.com *.cardinalcommerce.com challenges.cloudflare.com *.cloudflare.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.klevu.com *.ksearchnet.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://api.merchante-solutions.com https://cert.merchante-solutions.com https://testapi.merchante-solutions.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com *.fontawesome.com https://cdn.appifycommerce.com *.curalate.com js-agent.newrelic.com bam.nr-data.net *.googletagmanager.com *.googleanalytics.com *.accentdecor.com *.static-tracking.klaviyo.com static-tracking.klaviyo.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com assets.braintreegateway.com *.googleapis.com *.gstatic.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com https://developer.adobe.com https://elements.sandbox.fortis.tech https://elements.fortis.tech www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com *.curalate.com *.amazonpay.com *.amazon.com js-agent.newrelic.com bam.nr-data.net *.googletagmanager.com *.googleanalytics.com *.accentdecor.com  maps.googleapis.com *.fullstory.com *.velaro.com ct.pinterest.com https://analytics.google.com *.cloudflareinsights.com cdn.appifycommerce.com appifycommerce.com *.fortis.tech api.merchant-solutions.com *.cardinalcommerce.com eastprodcdn.azureedge.net challenges.cloudflare.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://api.merchante-solutions.com https://cert.merchante-solutions.com https://testapi.merchante-solutions.com https://writer.cardinalcommerce.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; script-src 'unsafe-inline' 'self' 'unsafe-eval'  blob: localhost host.docker.internal:59000 unpkg.com cdn.jsdelivr.net *.githubusercontent.com *.hellobar.com *.googletagmanager.com *.google-analytics.com *.totalenergies.be *.force.com *.salesforce.com *.salesforce-sites.com *.my.site.com *.my.salesforce-scrt.com *.bing.com *.google.com *.googleapis.com *.doubleclick.net *.trustcommander.net *.youtube.com maps.gstatic.com *.lampiris.be *.optimizely.com *.amazonaws.com *.contentsquare.net *.pinimg.com *.sentry-cdn.com *.trustcommander.net *.pingdom.net *.facebook.net *.pinterest.com *.agconsult.com *.alchemer.eu *.teads.tv *.outbrain.com *.adlooxtracking.com *.licdn.com *.aticdn.net 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' https:; connect-src 'self' https:; frame-src 'self' https://js.stripe.com; frame-ancestors 'none'; base-uri 'self'; object-src 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://www.googletagmanager.com https://www.google-analytics.com https://degreeeruptionpredator.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https://image.tmdb.org https://www.google-analytics.com https://www.googletagmanager.com; connect-src 'self' https://www.google-analytics.com; frame-src 'self' https://player.videasy.to https://vidcore.io https://player.unlimitedfiles.xyz https://myvidplay.com https://hqq.ac https://azmovies.seekplayer.vip https://www.youtube-nocookie.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com googleapis.com data: https://www.googletagmanager.com *.googleapis.com n1ed.com cloud.n1ed.com o.n1ed.com fm.n1ed.com stackpath.bootstrapcdn.com localhost code.jquery.com noembed.com fonts.googleapis.com suggestqueries.google.com translate.yandex.net flmngr.com cloud.flmngr.com fm.flmngr.com cdn.jsdelivr.net *.fontawesome.com maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com www.youtube.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.book2look.com static.addtoany.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.openstreetmap.org https://maps.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: *.tile.openstreetmap.org connect.ekomi.de google.com google.at www.google.at www.book2look.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com googleapis.com *.gstatic.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ jquery.sellxed.com n1ed.com cloud.n1ed.com o.n1ed.com fm.n1ed.com stackpath.bootstrapcdn.com localhost code.jquery.com noembed.com fonts.googleapis.com suggestqueries.google.com translate.yandex.net flmngr.com cloud.flmngr.com fm.flmngr.com fonts.gstatic.com cdn.jsdelivr.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com www.google.com www.gstatic.com static.addtoany.com connect.ekomi.de cdn.public.n1ed.com appjs.blickinsbuch.de www.blickinsbuch.de 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com n1ed.com cloud.n1ed.com o.n1ed.com fm.n1ed.com stackpath.bootstrapcdn.com localhost code.jquery.com noembed.com googleapis.com suggestqueries.google.com translate.yandex.net flmngr.com cloud.flmngr.com fm.flmngr.com fonts.gstatic.com cdn.jsdelivr.net *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.gstatic.com www.book2look.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com www.googleapis.com n1ed.com cloud.n1ed.com o.n1ed.com fm.n1ed.com stackpath.bootstrapcdn.com localhost code.jquery.com noembed.com fonts.googleapis.com suggestqueries.google.com translate.yandex.net flmngr.com cloud.flmngr.com fm.flmngr.com fonts.gstatic.com cdn.jsdelivr.net *.openstreetmap.org https://maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com google-analytics.com doubleclick.net stats.g.doubleclick.net www.book2look.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: https:; font-src 'self' data: https:; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline'; connect-src 'self' https:; frame-src 'self' https: 1
object-src 'none';base-uri 'self';script-src 'nonce-eBLy35spmXxqOeN_oayYjA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-t4y3-CxmmBR8dML68bQtGw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-3YQ4/tAUXTX4jpdMZlrd' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'report-sample';report-uri https://csp.withgoogle.com/csp/scfe 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://call.chatra.io https://static.zdassets.com https://widget.intercom.io https://js.intercomcdn.com https://*.zoho.com https://*.zoho.eu https://cdn.livechatinc.com https://*.freshchat.com https://*.freshworks.com https://widgets.sir.sportradar.com https://www.datadoghq-browser-agent.com https://cdn.onesignal.com https://*.seals.dlagglobal.com https://*.snippet.anjouangaming.org https://*.snippet.antillephone.com https://cdn.jsdelivr.net https://play.boomerang.bet; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: https://cdn.betspace.tech https://*.googletagmanager.com; connect-src 'self' https://boomerang.bet wss://boomerang.bet https://sentry-sportsbook.s7s.ai https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://rum.browser-intake-datadoghq.eu https://call.chatra.io https://*.freshchat.com https://*.freshworks.com https://*.zopim.com https://*.zendesk.com https://ekr.zdassets.com https://api-iam.intercom.io wss://*.intercom.io https://*.intercom.io https://*.zoho.com https://*.zoho.eu https://api.livechatinc.com https://*.livechat.com https://cdp-eu.customer.io; frame-src 'self' https://widget-iframe.awidua.io https://widget-iframe.wadua.io https://play.boomerang.bet; frame-ancestors 'self' https://play.boomerang.bet; object-src 'none'; worker-src 'self' blob:; form-action 'self'; base-uri 'none'; report-uri https://csp-ingest.sec.s7s.ai/csp-report; report-to csp-endpoint 1
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com maxcdn.bootstrapcdn.com *.cloudflare.com *.jsdelivr.net *.meeting8sync.nl *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com https://www.googletagmanager.com/ *.multisafepay.com https://pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://images.unsplash.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.widget.trengo.eu *.amazonaws.com *.meeting8sync.nl https://firebasestorage.googleapis.com https://www.magezon.com *.multisafepay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com chimpstatic.com downloads.mailchimp.com *.list-manage.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.widget.trengo.eu *.meeting8sync.nl *.avada.io *.multisafepay.com https://pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com downloads.mailchimp.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.multisafepay.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.widget.trengo.eu *.meeting8sync.nl 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.widget.trengo.eu *.meeting8sync.nl https://get.geojs.io *.avada.io *.multisafepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://cdn.cookielaw.org https://www.bnpparibas.de https://brasil.bnpparibas; script-src 'self' 'unsafe-eval' https://fast.wistia.com https://beacon-v2 https://analyticsgroupcom.bnpparibas.com https://cdn-group.bnpparibas.com https://cdn.cookielaw.org https://cdn.territories.bnpparibas ajax.googleapis.com www.googletagmanager.com googletagmanager.com tagmanager.google.com 'sha256-F+QMJISS2IIkRUd2a+c+u1owMqMSoidCaHFDAmzUgOo=' 'sha256-iqOPaRlwwgtNy7J3vh/+LSW9/QVdN+Fl+YfMS8+GcPo=' 'sha256-yZHeusBmoqYSsqdm5ylf993dfqVyosFaYa5gueKZDsA=' 'sha256-rjfSUjIA2A20p4lATAefLLG7Fy7VJssnkJ+SnJ2TXNo=' 'sha256-tYfO42nmjgLnGFpnKZhoGOgw7wYzBfiiMQiHjx6Nrb8=' 'sha256-RWn1w3BKiDlDNbD6vM1kYLpeWCwwWPkob0LMWJ2gKJk=' 'sha256-PWGG1Z6ufsQIjjxMMoeCERE+AYaLopB4JawXa7EUH7E=' 'sha256-fPXetwWx4258jL256OrNtQQyvFVR4/BotkeZKtfk54Q=' 'sha256-yElBEKucE35qwHf8qWcAvqD25zOJ7TqTptcHyzGhOxw=' 'sha256-n1mhU8dmPJrwvRiPgHP/YQB7tK6Kx4rupnPq6FBFios=' 'sha256-qcT/R0HkWUs2DMxvtvcMobUms6Z5/fPtfgUe2hN67gE='; style-src 'self' 'unsafe-inline' data: https://fonts.googleapis.com https://www.gstatic.com https://cdn-group.bnpparibas.com https://cdn.cookielaw.org https://cdn.territories.bnpparibas fonts.googleapis.com www.googletagmanager.com tagmanager.google.com; img-src 'self' data: https://s.w.org https://wp-rocket.me https://c.tile.openstreetmap.org https://a.tile.openstreetmap.org https://b.tile.openstreetmap.org blob: https://www.google.com/pagead/landing https://ade.googlesyndication.com https://pagead2.googlesyndication.com https://ad.doubleclick.net https://contrib.territories.bnpparibas https://cdn-group.bnpparibas.com https://cdn.cookielaw.org https://cdn.territories.bnpparibas secure.gravatar.com www.gravatar.com i.ytimg.com data: www.googletagmanager.com; connect-src 'self' https://bnp-privacy.my.onetrust.com https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location https://yoast.com https://cdn.cookielaw.org https://o173685.ingest.sentry.io https://analyticsgroupcom.bnpparibas.com https://contrib.territories.bnpparibas https://www.google.com/pagead/landing https://pagead2.googlesyndication.com https://adservice.google.com https://sourcemap.devowl.io https://sourcemap.devowl.io/real-media-library/4.22.47/adb9a2f4ef22d5d85978840bd322bf76/index.js.map www.googletagmanager.com; font-src 'self' data: https://fonts.gstatic.com https://fast.wistia.com https://github.com/google/fonts https://cdn-group.bnpparibas.com https://cdn.cookielaw.org https://cdn.territories.bnpparibas fonts.gstatic.com fonts.googleapis.com data:; media-src 'self' https://asset.mediahub.bnpparibas https://upload.wikimedia.org https://broadcast.mediahub.bnpparibas data: https://mediahub.group.echonet https://my.mediahub.bnpparibas https://my.mediahub.bnpparibas/AssetLink/1cwfu8n4ki414p6d240ff18r41ver00j.mp4 https://cdn-group.bnpparibas.com https://cdn.cookielaw.org https://cdn.territories.bnpparibas; frame-src 'self' https://www.youtube.com https://wp-rocket.me https://open.spotify.com https://www.youtube-nocookie.com https://centric.bnpparibas.com https://13179764.fls.doubleclick.net https://td.doubleclick.net https://gateway.zscalertwo.net https://remove.video https://mozbar.moz.com blob: https://fxplus.bnpparibas.com www.youtube.com www.googletagmanager.com; child-src 'self' www.youtube.com www.googletagmanager.com; worker-src 'self' blob:; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net https://samirandaly.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.twitter.com *.google.com https://banquemisr.gateway.mastercard.com https://qnbalahli.gateway.mastercard.com https://qnbalahli.test.gateway.mastercard.com https://mtf.gateway.mastercard.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.googletagmanager.com/ *.youtube.com/ *.google.com https://scontent-ams4-1.cdninstagram.com https://banquemisr.gateway.mastercard.com https://qnbalahli.gateway.mastercard.com https://qnbalahli.test.gateway.mastercard.com https://mtf.gateway.mastercard.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net https://samir-and-aly-stationaries.fra1.cdn.digitaloceanspaces.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.gstatic.com *.googleapis.com www.apptrian.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://platform-api.sharethis.com *.cloudflare.com *.klarna.com *.googleadservices.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com https://clauem2.arrowtheme.com https://scontent.cdninstagram.com/ https://scontent-ams4-1.cdninstagram.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com tagmanager.google.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com www.apptrian.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.maps.googleapis.com *.trackedlink.net *.google.com *.maps.gstatic.com maps.googleapis.com *.googletagmanager.com *.googleadservices.com https://buttons-config.sharethis.com/ https://connect.facebook.net https://platform-api.sharethis.com https://scontent-ams4-1.cdninstagram.com *.avada.io *.shopify.com https://banquemisr.gateway.mastercard.com https://qnbalahli.gateway.mastercard.com https://qnbalahli.test.gateway.mastercard.com https://mtf.gateway.mastercard.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://samir-and-aly-stationaries.fra1.cdn.digitaloceanspaces.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com *.google-analytics.com https://platform-api.sharethis.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com www.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.googleapis.com www.apptrian.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.googleadservices.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org *.google.com *.google.co.in *.maps.gstatic.com *.maps.googleapis.com maps.googleapis.com https://scontent-ams4-1.cdninstagram.com https://get.geojs.io *.avada.io https://banquemisr.gateway.mastercard.com https://qnbalahli.gateway.mastercard.com https://qnbalahli.test.gateway.mastercard.com https://mtf.gateway.mastercard.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src https: 'unsafe-inline' 'unsafe-eval' data: about: blob: wss://*.tawk.to; report-uri /_resources/php/csp-report.php 1
object-src 'none';base-uri 'self';script-src 'nonce-vfvPtLI9H0lkx6aSdJtkYw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.amazonaws.com unpkg.com *.bing.com *.doubleclick.net *.google.com *.cloudflare.com www.feedbackcompany.com extreme-ip-lookup.com *.zdassets.com *.facebook.net *.zendesk.com *.zopim.com wss://widget-mediator.zopim.com/ data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src bid.g.doubleclick.net player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com *.youtube-nocookie.com https://www.googletagmanager.com/ *.multisafepay.com https://pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com https://images.unsplash.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://firebasestorage.googleapis.com *.multisafepay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.amazonaws.com unpkg.com *.bing.com *.doubleclick.net *.google.com *.cloudflare.com www.feedbackcompany.com extreme-ip-lookup.com *.zdassets.com *.facebook.net *.zendesk.com *.zopim.com wss://widget-mediator.zopim.com/ data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io *.multisafepay.com https://pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.amazonaws.com unpkg.com *.bing.com *.doubleclick.net *.google.com *.cloudflare.com www.feedbackcompany.com extreme-ip-lookup.com *.zdassets.com *.facebook.net *.zendesk.com *.zopim.com wss://widget-mediator.zopim.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.multisafepay.com assets.braintreegateway.com *.amazonaws.com unpkg.com *.bing.com *.doubleclick.net *.google.com *.cloudflare.com www.feedbackcompany.com extreme-ip-lookup.com *.zdassets.com *.facebook.net *.zendesk.com *.zopim.com wss://widget-mediator.zopim.com/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.amazonaws.com unpkg.com *.bing.com *.doubleclick.net *.google.com *.cloudflare.com www.feedbackcompany.com extreme-ip-lookup.com *.zdassets.com *.facebook.net *.zendesk.com *.zopim.com wss://widget-mediator.zopim.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com vimeo.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io *.multisafepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.amazonaws.com unpkg.com *.bing.com *.doubleclick.net *.cloudflare.com www.feedbackcompany.com extreme-ip-lookup.com *.zdassets.com *.facebook.net *.zendesk.com *.zopim.com wss://widget-mediator.zopim.com/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com https://www.gstatic.com *.cloudfront.net *.reviews.io *.reviews.co.uk maxcdn.bootstrapcdn.com *.klarnacdn.net https://fonts.gstatic.com *.fontawesome.com 'self' data: https://cdnjs.cloudflare.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com *.klaviyo.com *.getfastr.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.reviews.io *.reviews.co.uk *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self' https://*.alpinawatches.co.uk https://*.bulova.com https://*.citizenwatch.ie https://*.bulova.com https://*.citizenwatch.co.uk https://*.citizenwatch.ie https://*.frederiqueconstant.co.uk https://*.bulovawatch.co.uk 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.awin1.com *.zenaps.com *.fls.doubleclick.net https://www.googletagmanager.com/ js.mollie.com *.reviews.io *.reviews.co.uk c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.clearpay.co.uk https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://player.vimeo.com https://www.youtube-nocookie.com www.xtento.com *.sendcloud.sc *.jsdelivr.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com blob: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: https://images.unsplash.com *.googleapis.com https://*.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.awin1.com *.zenaps.com *.wepowerconnections.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.mollie.com *.cloudfront.net *.reviews.io *.reviews.co.uk www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.afterpay.com *.clearpay.co.uk https://*.google.com https://*.googleapis.com https://*.googleusercontent.com magefan.com cm.magefan.com https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.xtento.com cdn.xtento.com https://widgets.dev.optty.com https://widgets.optty.com widgets.qa.optty.com https://redchamps.com *.amazonaws.com *.roeye.com *.clarity.ms *.bing.com *.tangiblee.com *.azurewebsites.net *.postcodeanywhere.co.uk *.bulova.com *.getfastr.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://maps.googleapis.com *.googleapis.com https://*.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ js.mollie.com pay.google.com applepay.cdn-apple.com *.reviews.io *.reviews.co.uk *.klarnaservices.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.afterpay.com *.clearpay.co.uk *.squarecdn.com https://hbiq.net https://*.google.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://player.vimeo.com https://www.youtube.com www.xtento.com cdn.xtento.com https://widgets.dev.optty.com https://widgets.optty.com widgets.qa.optty.com *.sendcloud.sc *.jsdelivr.net *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.hlx.page *.omniconvert.com *.adsrvr.org *.zdassets.com *.hotjar.com *.cloudfront.net *.clarity.ms *.tangiblee.com *.pcapredict.com *.postcodeanywhere.co.uk *.tiktok.com *.zma.gs *.osano.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https://static.klaviyo.com *.cloudfront.net *.reviews.io *.reviews.co.uk maxcdn.bootstrapcdn.com *.klarnacdn.net assets.braintreegateway.com *.afterpay.com/ *.squarecdn.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com http://fonts.googleapis.com https://cdnjs.cloudflare.com *.sendcloud.sc *.jsdelivr.net *.stripe.network *.stripecdn.com *.amazon.com *.typekit.net *.klaviyo.com data: *.postcodeanywhere.co.uk *.tangiblee.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ blob: *.widen.net *.widencdn.net *.frederiqueconstant.com frederiqueconstant.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.wepowerconnections.com https://the.sciencebehindecommerce.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ api.addressy.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.klarnaservices.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.clearpay.co.uk *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io https://api.dev.optty.com https://api.optty.com api.qa.optty.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.googlesyndication.com *.omniconvert.com *.hotjar.io *.zdassets.com *.clarity.ms *.amazonaws.com *.adsrvr.org *.zendesk.com *.tangiblee.com *.azurewebsites.net *.postcodeanywhere.co.uk *.tiktok.com *.google-analytics.com *.zma.gs *.tiktokw.us *.osano.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com assets.braintreegateway.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de cdn.dnky.co webchat.dotdigital.com *.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de maps.gstatic.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com js.authorize.net jstest.authorize.net js.braintreegateway.com cdn-scripts.signifyd.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.googleapis.com r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net cdn.dnky.co api.comapi.com webchat.dotdigital.com *.avada.io *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com payments.sandbox.braintree-api.com origin-analytics-sand.sandbox.braintree-api.com assets.braintreegateway.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.googleapis.com r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net api.comapi.com webchat.dotdigital.com https://get.geojs.io *.avada.io *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'nonce-8vHUiZzqdcTrJjR88pA7CA==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https://events.mercadolibre.com/csp/reports?identifier=hKHOeIiGYUxNhoHNKhLS8KljRIv-YHyAocNLtub0odUzEgOn7hrwieFys3cjfAIn9DgDnDHrLFc=&policy_id=30057&user_id=&request_id=bb5f8c74-879b-4dce-9df3-e340917d2306; report-to csp-endpoint-hkhoeiigyuxnhohnkhlskljrivyhyaocnltuboduzegonhrwiefyscjfaindgdndhrlfc; object-src https://http2.mlstatic.com/ https://mlstaticquic-a.akamaihd.net/; frame-ancestors 'self' https://*.mercadolibre.cl:* https://*.mercadolibre.com:* https://*.mercadolibre.com.ve:* https://*.mercadolibre.com.ar:* https://*.mercadolivre.com.br:* https://*.mercadolibre.com.co:* https://*.mercadolibre.com.ec:* https://*.mercadolibre.com.mx:* https://*.mercadolibre.com.pe:* https://*.mercadolibre.com.uy:* https://*.mercadopago.cl:* https://*.mercadopago.com.ar:* https://*.mercadopago.com.br:* https://*.mercadopago.com.co:* https://*.mercadopago.com.mx:* https://*.mercadopago.com.pe:* https://*.mercadopago.com.uy:* https://*.mercadopago.com.ve:* https://*.mercadopago.com:* https://*.adminml.com:* https://*.mercadolibre.co.cr:* https://*.mercadolibre.com.pa:* https://*.mercadolibre.com.do:* https://*.mercadolibre.com.bo:* https://*.mercadolibre.com.py:* https://*.mercadolibre.com.gt:* https://*.mercadolibre.com.hn:* https://*.mercadolibre.com.ni:* https://*.mercadolibre.com.sv:* https://*.mercadopago.com.ec:* https://*.portalinmobiliario.com:* https://*.mercadolivre.com:*; require-trusted-types-for 'script' 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://d3gurpvil0se70.cloudfront.net https://websdk.appsflyer.com https://script.tapfiliate.com https://static.zdassets.com https://cdn.channel.io https://t1.kakaocdn.net https://js.tosspayments.com https://www.youtube.com https://s.ytimg.com https://www.googletagmanager.com https://connect.facebook.net https://t1.daumcdn.net https://www.clarity.ms https://scripts.clarity.ms https://wcs.naver.net https://ssl.pstatic.net https://analytics.ahrefs.com https://www.googleadservices.com https://pagead2.googlesyndication.com; connect-src 'self' https://api.yeoshin.co.kr https://d3gurpvil0se70.cloudfront.net https://sdk.iad-05.braze.com https://o4507495975026688.ingest.us.sentry.io https://*.amplitude.com https://*.appsflyer.com https://*.appsflyersdk.com https://*.channel.io wss://*.channel.io https://*.zendesk.com https://*.zdassets.com https://*.tapfiliate.com https://www.google.com https://analytics.google.com https://*.google-analytics.com https://*.clarity.ms https://wcs.naver.com https://bc.ad.daum.net https://*.doubleclick.net https://*.googlesyndication.com https://www.googleadservices.com https://cct.google; frame-src 'self' https://inquiry.withpersona.com https://www.youtube.com https://*.tosspayments.com https://t1.kakaocdn.net https://t1.daumcdn.net https://*.doubleclick.net https://*.googlesyndication.com; report-uri https://o4507495975026688.ingest.us.sentry.io/api/4507495978303488/security/?sentry_key=693376b17b8b1f1952a3c0ea10683461 1
connect-src 'self' *.autopay.io *.googleapis.com *.google-analytics.com *.europe-west1.firebasedatabase.app wss://*.europe-west1.firebasedatabase.app sentry.io https://vimeo.com api.pwnedpasswords.com stonly.com *.stonly.com https://plausible.io https://*.adyen.com; default-src 'none'; font-src data: autopay.io qa.autopay.io test.autopay.io; frame-ancestors 'self'; frame-src 'self' https://*.autopay.io https://stonly.com https://*.stonly.com https://player.vimeo.com *.europe-west1.firebasedatabase.app https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://*.adyen.com; img-src 'self' https://storage.googleapis.com/autopay-test-api.appspot.com/ https://storage.googleapis.com/autopay-qa-api.appspot.com/ https://storage.googleapis.com/autopay-prod-api.appspot.com/ https://*.autopay.io/ *.tile.osm.org www.google-analytics.com https://*.vimeocdn.com https://www.gstatic.com https://*.adyen.com data:; manifest-src 'self'; media-src 'self'; script-src 'self' *.europe-west1.firebasedatabase.app cdn.ravenjs.com www.google-analytics.com apis.google.com stonly.com https://player.vimeo.com https://plausible.io 'sha256-fwc0mpDa8OHTVGvj46tzJTK/4veec5TxZJQNTFjzBw0=' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'unsafe-eval'; style-src 'unsafe-inline' 'self' 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com fonts.googleapis.com *.googleapis.com *.gstatic.com data: http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io d3dc1lgancj6l0.cloudfront.net *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com http://*.facebook.com https://*.facebook.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com https://zapf.ddev.site https://mam.ddev.site 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com www.google.com https://cdn.consentmanager.net https://delivery.consentmanager.net https://www.googletagmanager.com/ https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://www.google.com/ http://*.facebook.com https://*.facebook.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com https://ct.pinterest.com https://mam.ddev.site js.mollie.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com https://cdn.consentmanager.net https://delivery.consentmanager.net https://a.delivery.consentmanager.net https://b.delivery.consentmanager.net https://c.delivery.consentmanager.net https://d.delivery.consentmanager.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.consentmanager.net http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io http://*.linkedin.com https://*.linkedin.com http://*.facebook.com https://*.facebook.com http://www.google.com/ http://www.google.de/ https://www.google.de/ https://www.googletagmanager.com http://www.googletagmanager.com userlike-cdn-operators.s3-eu-west-1.amazonaws.com https://widgets.trustedshops.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.mollie.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://cdn.consentmanager.net https://delivery.consentmanager.net https://a.delivery.consentmanager.net https://b.delivery.consentmanager.net https://c.delivery.consentmanager.net https://d.delivery.consentmanager.net chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://connect.facebook.net/ https://snap.licdn.com/li.lms-analytics/insight.min.js http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io unsafe-inline userlike-cdn-widgets.s3-eu-west-1.amazonaws.com d3dc1lgancj6l0.cloudfront.net api.userlike.com http://www.google.com/recaptcha/ https://widgets.trustedshops.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com consentmanager.net *.googleadservices.com https://cdn.nagich.com https://s.pinimg.com https://analytics.tiktok.com https://ct.pinterest.com js.mollie.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com downloads.mailchimp.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src https://cdn.consentmanager.net https://delivery.consentmanager.net 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https://cdn.consentmanager.net https://delivery.consentmanager.net https://a.delivery.consentmanager.net https://b.delivery.consentmanager.net https://c.delivery.consentmanager.net https://d.delivery.consentmanager.net http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.baby-born.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.magento-datasolutions.com *.magento-ds.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://cdn.consentmanager.net https://delivery.consentmanager.net form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.addressy.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com http://salesviewer.org/ userlike-cdn-widgets.s3-eu-west-1.amazonaws.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.google.com/ccm/collect https://ct.pinterest.com https://analytics.tiktok.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https://cdn.consentmanager.net https://delivery.consentmanager.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-yY-R90iv7Q7iQ9ko3aJRMw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-WXl14SifIt9-P-CaLMOitg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
connect-src 'self' https://*.nr-data.net https://bam.eu01.nr-data.net; 1
script-src 'self' https://www.googletagmanager.com; report-uri https://www.ncbar.org/wp-json/csp-report-only/v1/violation 1
object-src 'none';base-uri 'self';script-src 'nonce-pCdGQR3z_-CVYcu0Ie8tSw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-Pa7f7TL__VqmysqYe66Fpw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; 	script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: 		consent.cookiefirst.com 		*.hubspot.com 		*.hs-analytics.net 		*.hs-banner.com 		*.hsforms.net 		*.hs-scripts.com 		*.hsadspixel.net 		*.usemessages.com 		static.hsappstatic.net 		googleads.g.doubleclick.net 		tagmanager.google.com 		www.google.com 		www.googletagmanager.com 		www.googleoptimize.com 		www.gstatic.com 		*.clarity.ms 		*.hotjar.com 		track.gaconnector.com 		connect.facebook.net 		snap.licdn.com 		bat.bing.com 		www.redditstatic.com 		a.quora.com 		leadbooster-chat.pipedrive.com 		calendly.com 		assets.calendly.com 		cdn.jsdelivr.net 		cdn.demio.com 		cdn.dreamdata.cloud; 	connect-src 'self' data: wss://ws.hotjar.com 		*.cookiefirst.com 		*.hubspot.com 		api-eu1.hubapi.com 		forms-eu1.hsforms.com 		track.gaconnector.com 		region1.analytics.google.com 		region1.google-analytics.com 		stats.g.doubleclick.net 		pagead2.googlesyndication.com 		googleads.g.doubleclick.net 		*.google.com 		*.google.ee 		*.hotjar.com 		*.clarity.ms 		leadbooster-chat.pipedrive.com 		api.mapbox.com 		events.mapbox.com 		pixel-config.reddit.com 		bat.bing.com 		px.ads.linkedin.com 		www.facebook.com 		my.demio.com 		*.dreamdata.cloud; 	img-src 'self' data: 		googleads.g.doubleclick.net 		*.google.com 		*.google.ee 		*.googletagmanager.com 		*.gstatic.com 		*.hubspot.com 		*.hsforms.com 		secure.gravatar.com 		s.w.org 		ps.w.org 		www.admincolumns.com 		www.facebook.com 		q.quora.com 		alb.reddit.com 		*.ads.linkedin.com 		bat.bing.com 		ct.capterra.com; 	style-src 'self' 'unsafe-inline' 		api.fontshare.com 		fonts.googleapis.com 		fonts.gstatic.com 		*.googletagmanager.com 		tagmanager.google.com 		consent.cookiefirst.com 		calendly.com 		assets.calendly.com 		cdn.demio.com; 	font-src 'self' data: 		fonts.gstatic.com 		cdn.fontshare.com 		leadbooster-chat.pipedrive.com; 	frame-src 'self' 		*.google.com 		*.googletagmanager.com 		*.hubspot.com 		*.hsforms.com 		meet.evocon.com 		*.youtube.com 		*.youtube-nocookie.com; 	report-uri /csp-report.php; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.carbonads.com https://srv.carbonads.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://*.githubusercontent.com https://lh3.googleusercontent.com https://srv.carbonads.net https://ad.doubleclick.net; font-src 'self' data:; connect-src 'self' https://srv.carbonads.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'; manifest-src 'self'; worker-src 'self' blob: 1
object-src 'none';base-uri 'self';script-src 'nonce-VykckjCmWCHWUAcXnMKPbQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com *.googletagmanager.com *.google-analytics.com; style-src 'self' 'unsafe-inline' *.googleapis.com; img-src 'self' data: https:; font-src 'self' data: *.googleapis.com *.gstatic.com; connect-src 'self' https:; frame-src 'self' *.youtube.com *.vimeo.com; 1
script-src 'self' 'unsafe-inline' 'report-sample' 'nonce-Kfh+GE9ar0PA6O+VFQJqdQ=='; base-uri 'none'; img-src blob: data: *; frame-ancestors 'none'; font-src 'self' data:; default-src 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io; worker-src 'none'; object-src 'none'; media-src *; style-src 'unsafe-inline' * 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src https:; object-src 'none'; base-uri 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-NtCmuCKo0n818l9i9TwuoA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
upgrade-insecure-requests; report-to https://vimeo.com; report-uri https://vimeo.com; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://*.hs-scripts.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hscollectedforms.net https://*.usemessages.com https://*.hsforms.net https://*.hsadspixel.net https://*.hubspot.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://api.ipify.org https://api.hsforms.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://*.hubspot.com https://*.hs-analytics.net https://*.hscollectedforms.net https://*.hubapi.com; frame-src https://www.google.com https://*.hubspot.com https://www.youtube.com https://www.youtube-nocookie.com; form-action 'self' https://api.hsforms.com 1
script-src 'self' 'unsafe-inline'; report-to csp-endpoint; report-uri /csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net *.googleusercontent.com pouch-global-font-assets.s3.eu-central-1.amazonaws.com *.wistia.com yotpo-stool.s3.amazonaws.com *.zohocdn.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.nosto.com *.nos.to c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.pinterest.com *.pinterdev.com commerce-app.pintergration.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com www.xtento.com *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com *.b0e8.com *.klevu.com *.ksearchnet.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com *.mageside.com mageside.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to *.ometria.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com https://cdn-ukwest.onetrust.com https://via.placeholder.com *.facebook.com www.xtento.com cdn.xtento.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.attentivemobile.com *.attn.tv *.bing.com *.bing.net *.clarity.ms *.doubleclick.net *.facebook.net *.ggpht.com *.googleadservices.com *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.st www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu www.google.ws google.com *.google.com *.googlesyndication.com *.googletagmanager.com *.googleusercontent.com *.kaltura.com *.linksynergy.com *.listrakbi.com *.onetrust.com *.portmeirion.com *.portmeirion.co.uk *.postcodeanywhere.co.uk *.spode.com *.spode.co.uk *.wistia.com yastatic.net *.yotpoapi.com yotpo-editor-production.s3.amazonaws.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.attn.tv events.attentivemobile.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com *.b0e8.com *.bc0a.com js.klevu.com *.ksearchnet.com *.disqus.com *.avada.io *.shopify.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://cdn-ukwest.onetrust.com https://js.klevu.com https://tag.rmp.rakuten.com https://portm11116.pcapredict.com https://cdn-widgetsrepository.yotpo.com https://maps.googleapis.com https://kebos.portmeirion.co.uk *.hotjar.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net www.xtento.com cdn.xtento.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net *.ometria.com https://cdn.attn.tv https://www.portmeirion.co.uk *.bing.com *.clarity.ms d21m4dsqdd3b9h.cloudfront.net *.doubleclick.net *.google-analytics.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.kaltura.com *.klevu.com *.listrakbi.com *.livechatinc.com *.onetrust.com *.pcapredict.com *.portmeirion.co.uk *.postcodeanywhere.co.uk *.rakuten.com *.sentry-cdn.com *.wistia.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com display.ugc.bazaarvoice.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net *.nosto.com *.nos.to assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com tagmanager.google.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net https://statsjs.klevu.com https://js.klevu.com d21m4dsqdd3b9h.cloudfront.net *.googletagmanager.com *.gstatic.com *.listrakbi.com *.postcodeanywhere.co.uk *.typekit.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.googleapis.com *.gstatic.com *.kaltura.com video-s3-bucket.s3.eu-west-2.amazonaws.com *.wistia.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.attn.tv events.attentivemobile.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.hub-box.com *.klevu.com *.ksearchnet.com https://get.geojs.io *.avada.io connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://cdn-ukwest.onetrust.com *.hotjar.com ws.hotjar.com wss://ws.hotjar.com analytics.google.com *.facebook.net *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com *.ometria.com *.attentivemobile.com *.bc0a.com *.bing.com *.bing.net *.clarity.ms *.doubleclick.net *.facebook.com *.googleadservices.com *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bt www.google.by www.google.ca www.google.cd www.google.ch www.google.ci www.google.cm www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.br www.google.com.co www.google.com.cy www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.hk www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.np www.google.com.om www.google.com.pa www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gg www.google.gm www.google.gr www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.mv www.google.mw www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.tg www.google.tl www.google.tn www.google.vu www.google.ws *.googlesyndication.com *.hotjar.io *.kaltura.com *.listrakbi.com *.livechatinc.com *.onetrust.com *.portmeirion.com *.portmeirion.co.uk *.postcodeanywhere.co.uk *.samsung.com *.spode.com *.spode.co.uk *.wistia.com *.yotpoapi.com yotpo-stool.s3.amazonaws.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.ometria.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; base-uri *.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; report-uri https://32ede476-ded8-4814-88cb-f8ecfa864227.sansec.watch/; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com trustpilot.com widget.trustpilot.com www.xtento.com account.fetchify.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io typekit.net www.google.co.uk google.co.uk google.com via.placeholder.com agrilineproducts.com facebook.com www.facebook.com connect.facebook.net www.facebook.com/privacy_sandbox www.google-analytics.com assets.braintreegateway.com checkout.paypal.com b.stats.paypal.com dub.stats.paypal.com www.sandbox.paypal.com cdn.xtento.com www.xtento.com c.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page widget.trustpilot.com js-agent.newrelic.com bam.nr-data.net unpkg.com secure.authorize.net test.authorize.net js.braintreegateway.com video.google.com cdn.xtento.com payments-amazon.com payments-amazon.co.uk payments-amazon.co.jp payments-amazon.jp payments-amazon.it payments-amazon.fr payments-amazon.es trackedlink.net trackedweb.net webchat.dotdigital.com cdn.dnky.co api.comapi.com avada.i yotpo.com staticw2.yotpo.com w2.yotpo.com connect.facebook.net facebook.com www.xtento.com cc-cdn.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com fontawesome.com getfirebug.com cdn.dnky.co webchat.dotdigital.com yotpo.com staticw2.yotpo.com w2.yotpo.com use.typekit.net typekit.net p.typekit.net cc-cdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com paypal.com bam.nr-data.net google-analytics.com stats.g.doubleclick.net google.co.uk api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' *.cloudflare.com *.jquery.com *.bootstrapcdn.com *.pcdn.co *.hsforms.net *.googletagmanager.com *.jsdelivr.net *.googleadservices.com; style-src 'self' 'unsafe-inline' *.bootstrapcdn.com *.cloudflare.com; img-src 'self' data: https:; font-src 'self' data: *.cloudflare.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 1
font-src *.gstatic.com 'self' data: *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://plumrocket.com *.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.google.com *.gstatic.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.google-analytics.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com googleapis.com data: n1ed.com cloud.n1ed.com o.n1ed.com fm.n1ed.com stackpath.bootstrapcdn.com localhost code.jquery.com noembed.com fonts.googleapis.com suggestqueries.google.com translate.yandex.net flmngr.com cloud.flmngr.com fm.flmngr.com cdn.jsdelivr.net *.fontawesome.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com www.youtube.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com www.book2look.com static.addtoany.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.openstreetmap.org https://maps.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: *.tile.openstreetmap.org connect.ekomi.de google.com google.at www.google.at www.book2look.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ jquery.sellxed.com n1ed.com cloud.n1ed.com o.n1ed.com fm.n1ed.com stackpath.bootstrapcdn.com localhost code.jquery.com noembed.com fonts.googleapis.com suggestqueries.google.com translate.yandex.net flmngr.com cloud.flmngr.com fm.flmngr.com fonts.gstatic.com cdn.jsdelivr.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com www.google.com www.gstatic.com https://www.googletagmanager.com tagmanager.google.com unpkg.com static.addtoany.com connect.ekomi.de cdn.public.n1ed.com appjs.blickinsbuch.de www.blickinsbuch.de 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com n1ed.com cloud.n1ed.com o.n1ed.com fm.n1ed.com stackpath.bootstrapcdn.com localhost code.jquery.com noembed.com googleapis.com suggestqueries.google.com translate.yandex.net flmngr.com cloud.flmngr.com fm.flmngr.com fonts.gstatic.com cdn.jsdelivr.net *.fontawesome.com assets.braintreegateway.com *.googleapis.com *.gstatic.com tagmanager.google.com www.book2look.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com googleapis.com www.googleapis.com n1ed.com cloud.n1ed.com o.n1ed.com fm.n1ed.com stackpath.bootstrapcdn.com localhost code.jquery.com noembed.com fonts.googleapis.com suggestqueries.google.com translate.yandex.net flmngr.com cloud.flmngr.com fm.flmngr.com fonts.gstatic.com cdn.jsdelivr.net *.openstreetmap.org https://maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.doubleclick.net google-analytics.com doubleclick.net stats.g.doubleclick.net www.book2look.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://*.duosecurity.com; font-src 'self' https://ka-p.fontawesome.com https://fonts.gstatic.com https://recollect.a.ssl.fastly.net data:; script-src 'self' 'unsafe-inline' https://events.cityofwinterpark.org https://player.vimeo.com https://f.vimeocdn.com https://kit.fontawesome.com https://www.google-analytics.com https://www.googletagmanager.com https://maps.googleapis.com https://recollect.net https://api.recollect.net https://recollect-images.global.ssl.fastly.net https://apps.remembermyjourney.com https://static.elfsight.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://recollect.a.ssl.fastly.net; img-src 'self' https://i.ytimg.com https://i.vimeocdn.com https://www.googletagmanager.com https://maps.gstatic.com https://api.recollect.net https://recollect-images.global.ssl.fastly.net https://recollect.a.ssl.fastly.net data:; connect-src 'self' https://player.vimeo.com https://vimeo.com https://f.vimeocdn.com https://ka-p.fontawesome.com https://kit.fontawesome.com https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://maps.googleapis.com https://core.service.elfsight.com; worker-src 'self' blob:; frame-src 'self' https://events.cityofwinterpark.org https://www.youtube.com https://player.vimeo.com https://api.recollect.net https://g1.ipcamlive.com; 1
font-src fonts.gstatic.com use.typekit.net *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.doubleclick.net *.onetrust.com js.mollie.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://images.unsplash.com *.ctfassets.net *.arvesta.eu *.google.be *.adnxs.com *.bing.com *.gstatic.com *.googleapis.com *.cookielaw.org *.facebook.com *.clarity.ms *.onetrust.com https://www.mollie.com 'self' data: *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com https://core.helloretail.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://maps.googleapis.com *.hotjar.com *.googleoptimize.com *.bing.com *.facebook.net *.adnxs.com gtmadapter-node-cbjg5cz5hq-ew.a.run.app *.clarity.ms *.googleapis.com *.npmcdn.com *.convertexperiments.com *.cookielaw.org *.onetrust.com *.voyado.com js.mollie.com *.google.com *.gstatic.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com *.typekit.net *.npmcdn.com *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io https://core.helloretail.com https://helloretailcdn.com https://maps.googleapis.com https://player.vimeo.com *.cookielaw.org *.doubleclick.net *.clarity.ms gtmadapter-node-cbjg5cz5hq-ew.a.run.app *.googleapis.com *.npmcdn.com *.hotjar.com *.onetrust.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' syndication.twitter.com; script-src js.trentino.com 'unsafe-inline' 'unsafe-eval' player.peer.tv stats.peer.biz platform.twitter.com apis.google.com; connect-src 'self' stats.peer.biz; img-src 'self' data: images2.trentino.com css.trentino.com  www.hotel-guide.it player.peer.tv stats.peer.biz carto.peer.biz www.gravatar.com syndication.twitter.com api.trustyou.com; style-src 'self' 'unsafe-inline' css.trentino.com js.trentino.com; font-src css.trentino.com; frame-src 'self' player.peer.tv www.facebook.com platform.twitter.com apis.google.com accounts.google.com www.youtube.com; child-src 'self' player.peer.tv www.facebook.com platform.twitter.com apis.google.com accounts.google.com www.youtube.com; report-uri https://csp-report.peer.biz/reportOnly/index 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss:; media-src 'self' https: data: blob:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https: 1
img-src 'self' data: https://track.hubspot.com  https://www.googletagmanager.com  about  https://forms.hsforms.com  https://forms-na1.hsforms.com  https://p.typekit.net  https://www.seopress.org  https://cdn.userway.org  https://px.ads.linkedin.com  https://really-simple-ssl.com  https://perf-na1.hsforms.com  https://8095717.fs1.hubspotusercontent-na1.net  https://i.ytimg.com  https://googleads.g.doubleclick.net  https://img.youtube.com  https://cmsimg.clarionledger.com  https://www.google.com.sg  https://www.google.com.my  https://www.google.sr  https://assets.bizjournals.com  https://decanter.media.ipcdigital.co.uk  https://static2.businessinsider.com  https://cdn.datatables.net  https://www.parkstreet.com  https://static.guim.co.uk  https://www.thespiritsbusiness.com  https://i.telegraph.co.uk  https://www.thedrinksbusiness.com  https://healthyalcoholmarket.com  https://images.bidnessetc.com  https://media.komonews.com  https://investor.beamglobal.com  https://static6.businessinsider.com  https://resources2.news.com.au  https://www.winefashionista.com  https://i.cbc.ca  https://triblive.com  https://cdn.gretawire.foxnewsinsider.com  https://global.fncstatic.com  https://www.google.com.pr  https://www.google.nl  https://imgick.lehighvalleylive.com  https://www.google.com.br  https://www.google.co.jp  https://www.google.com.hk  https://stgwp.parkstreet.com  https://www.google.com.ph  https://images.smh.com.au  https://www.google.co.uk  https://www.google.co.in  https://photos.washingtonexaminer.biz  https://www.thegreenhead.com  https://www.browndailyherald.com  https://www.beveragemedia.com  https://media.skynews.com  https://imgick.pennlive.com  https://www.google.com.kh  https://www.google.com.vn  https://www.northbaybusinessjournal.com  https://www.google.de  https://www.google.com.mx  https://www.winespectator.com  https://c.o0bg.com  https://www.google.es  https://www.trbimg.com  https://bloximages.chicago2.vip.townnews.com  https://encrypted-tbn3.gstatic.com  https://cmsimg.stargazette.com  https://www.azcentral.com  https://blog.breckenridge.com  https://d1ynl4hb5mx7r8.cloudfront.net  https://www.bluff.com  https://pagead2.googlesyndication.com  https://www.google.co.kr  https://encrypted-tbn2.gstatic.com  https://extras.mnginteractive.com  https://www.google.com.co  https://www.google.it  https://www.google.ru  https://www.google.fr  https://www.google.ae  https://stats.g.doubleclick.net  https://www.google.com.ua  https://www.google.pl  https://www.google.cl  https://www.google.gr  https://www.google.sk  https://www.google.ca  https://www.google.co.id  https://www.google.co.th  https://www.google.ie  https://i.aroq.com  https://www.google.com.do  https://www.google.bg  https://www.google.com.ar  https://www.google.com.pk  https://www.google.be  https://www.google.co.il  https://www.google.com.au  https://www.google.com.bd  https://www.google.co.ke  https://www.google.se  https://svcs.tql.com  https://www.google.com.pe  https://www.google.com.ng  https://pbs.twimg.com  https://www.google.fi  https://www.google.com.pa  https://www.google.co.ve  https://www.googleadservices.com  https://fonts.gstatic.com  https://www.google.com.uy  https://www.google.dj  https://www.google.ch  https://storage.googleapis.com  https://secure.gravatar.com https://ts.w.org https://s.w.org https://ps.w.org; default-src 'self'; script-src 'self' 'unsafe-inline' data:  https://cdnjs.cloudflare.com  https://cdn.datatables.net  https://www.google.com  https://www.googletagmanager.com  https://www.gstatic.com  https://static.hotjar.com  https://js.hsforms.net  https://cdn.userway.org  https://js.hscollectedforms.net  https://use.typekit.net  https://js.hs-scripts.com  https://js.hs-banner.com  https://googleads.g.doubleclick.net  https://js.hs-analytics.net  https://js.hsadspixel.net  https://script.hotjar.com  https://snap.licdn.com  https://maps.googleapis.com  https://www.buzzsprout.com  https://js.hubspot.com  https://static.hsappstatic.net  https://us-assets.i.posthog.com  https://s.ytimg.com  https://www.youtube.com  https://www.parkstreet.com  https://connect.facebook.net  https://l.getsitecontrol.com  https://www.clarity.ms  https://bat.bing.com  https://cdn.cookielaw.org  https://www.google-analytics.com  https://consent.cookiebot.com  https://adriano-au.avanser.com  https://js.adsrvr.org  https://widget.prod.equally.ai  https://apis.google.com  'unsafe-eval'; script-src-elem 'self' 'unsafe-inline' https://cdnjs.cloudflare.com  https://cdn.datatables.net  https://www.google.com  https://www.googletagmanager.com  https://www.gstatic.com  https://static.hotjar.com  https://js.hsforms.net  https://cdn.userway.org  https://js.hscollectedforms.net  https://use.typekit.net  https://js.hs-scripts.com  https://js.hs-banner.com  https://googleads.g.doubleclick.net  https://js.hs-analytics.net  https://js.hsadspixel.net  https://script.hotjar.com  https://snap.licdn.com  https://maps.googleapis.com  https://www.buzzsprout.com  https://js.hubspot.com  https://static.hsappstatic.net  https://us-assets.i.posthog.com  https://www.youtube.com  https://www.parkstreet.com  https://connect.facebook.net  https://l.getsitecontrol.com  https://www.clarity.ms  https://bat.bing.com  https://cdn.cookielaw.org  https://www.google-analytics.com  https://consent.cookiebot.com  https://adriano-au.avanser.com  https://js.adsrvr.org  https://widget.prod.equally.ai  https://apis.google.com ; style-src 'self' 'unsafe-inline' https://cdn.datatables.net  https://www.gstatic.com  https://fonts.googleapis.com  https://cdn.userway.org  https://www.parkstreet.com ; style-src-elem 'self' 'unsafe-inline' https://cdn.datatables.net  https://www.gstatic.com  https://fonts.googleapis.com  https://cdn.userway.org  https://www.parkstreet.com ; font-src 'self' https://use.typekit.net  https://fonts.gstatic.com  https://cdn.userway.org  https://stgwp.parkstreet.com  https://www.parkstreet.com  https://svcs.tql.com  https://stylesheets.pixiebrix.com  data:; frame-src 'self' https://forms.hsforms.com  https://static.hsappstatic.net  https://www.google.com  https://app.hubspot.com  https://www.youtube.com  https://open.spotify.com  https://td.doubleclick.net  https://www.googletagmanager.com  https://www.youtube-nocookie.com  https://cdn.userway.org  https://embed.podcasts.apple.com  https://view.vzaar.com  https://www.buzzsprout.com  https://www.thedrinksbusiness.com  https://iframe.dacast.cn  https://insight.adsrvr.org  https://consentcdn.cookiebot.com  https://toolytics.pa.clients6.google.com  blob:; connect-src 'self' https://api.userway.org  https://analytics.google.com  https://forms.hsforms.com  https://api.hubapi.com  https://www.googleadservices.com  https://www.google-analytics.com  https://stats.g.doubleclick.net  https://forms.hscollectedforms.net  https://cdn.userway.org  https://cdn.linkedin.oribi.io  https://maps.googleapis.com  https://ai.elegantthemes.com  https://vc.hotjar.io  https://content.hotjar.io  https://cta-service-cms2.hubspot.com  https://api.rankmath.com  https://ad.doubleclick.net  https://us.i.posthog.com  https://px.ads.linkedin.com  https://www.youtube.com  https://www.googletagmanager.com  https://hubspot-forms-static-embed.s3.amazonaws.com  https://metrics.hotjar.io  https://us-assets.i.posthog.com  wss://ws.hotjar.com  https://region1.analytics.google.com  https://cdn77.api.userway.org  https://www.google.co.uk  https://www.google.co.in  https://www.google.com.ar  https://perf-na1.hsforms.com  https://pagead2.googlesyndication.com  https://region1.google-analytics.com  https://www.google.com.ph  https://www.google.co.kr  https://bat.bing.net  https://cdn.cookielaw.org  https://lb.prod.equally.ai  https://consentcdn.cookiebot.com  about  https://www.google.fr  https://static.hsappstatic.net  https://cdnjs.cloudflare.com;  worker-src 'self' blob:;  report-uri https://www.parkstreet.com/wp-json/rsssl/v1/csp?rsssl_apitoken=831554005; 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://bat.bing.com https://cdn.jsdelivr.net https://connect.facebook.net https://dntfctn.com https://*.doubleclick.net https://maps.googleapis.com https://*.hotjar.com https://*.clarity.ms https://snap.licdn.com https://www.google-analytics.com https://www.googletagmanager.com https://analytics.synaxon.com https://stackpath.bootstrapcdn.com https://*.gstatic.com https://*.adform.net https://*.google.com https://www.youtube.com https://*.googlesyndication.com https://*.twitter.com https://pixel.mathtag.com https://widget.tabnav.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.gstatic.com https://stackpath.bootstrapcdn.com; img-src 'self' data: 'self' data: https: https://bat.bing.com https://bat.bing.net https://maps.googleapis.com https://*.gstatic.com https://px.ads.linkedin.com https://www.facebook.com https://*.google.com https://www.google.de https://www.googletagmanager.com; font-src 'self' data: https://*.gstatic.com https://static2.sharepointonline.com https://*.wp.com; connect-src 'self' https://bat.bing.com https://bat.bing.net https://maps.googleapis.com https://px.ads.linkedin.com https://region1.google-analytics.com https://*.google.com https://www.googletagmanager.com https://www.youtube-nocookie.com https://*.clarity.ms https://analytics.synaxon.com https://web-api.synaxon.de https://www.facebook.com https://www.google-analytics.com https://region1.analytics.google.com https://*.adform.net https://*.doubleclick.net https://www.googleadservices.com https://*.hotjar.io wss://*.hotjar.com https://analytics.google.com https://*.googlesyndication.com https://widget-config.tabnav.com; media-src 'self'; frame-src https://www.youtube-nocookie.com https://player.vimeo.com https://*.google.com https://www.googletagmanager.com https://www.youtube.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; report-uri /csp-report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://challenges.cloudflare.com https://*.vercel-insights.com https://va.vercel-scripts.com https://www.googletagmanager.com https://www.clarity.ms https://*.clarity.ms; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://cdn.sanity.io https://*.google-analytics.com https://www.googletagmanager.com https://*.clarity.ms https://c.bing.com; font-src 'self' data:; media-src 'self' https://*.b-cdn.net; connect-src 'self' https://challenges.cloudflare.com https://*.vercel-insights.com https://va.vercel-scripts.com https://*.api.sanity.io https://*.apicdn.sanity.io https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://*.clarity.ms https://c.bing.com; frame-src 'self' https://challenges.cloudflare.com; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; form-action 'self'; worker-src 'self' blob: 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://static.cloudflareinsights.com https://img.gamemarket.gg; style-src 'self' 'unsafe-inline' https://img.gamemarket.gg; img-src 'self' data: blob: https://*.gamemarket.gg https://www.googletagmanager.com https://*.faspay.co.id https://ui-avatars.com https://*.amazonaws.com https://lh3.googleusercontent.com; media-src 'self' https://*.gamemarket.gg; font-src 'self'; worker-src 'self' blob:; connect-src 'self' https://*.gamemarket.gg wss://*.gamemarket.gg https://*.ingest.sentry.io https://*.ingest.us.sentry.io https://*.google-analytics.com https://www.googletagmanager.com https://*.faspay.co.id https://www.google.com; frame-ancestors 'none'; report-uri https://o4509647511027712.ingest.us.sentry.io/api/4509704012496897/security/?sentry_key=37ce267064aedb21b14a96e261886e57 1
default-src 'self'; script-src 'self' 'unsafe-inline' *.hs-scripts.com *.hsadspixel.net *.hs-analytics.net *.hs-banner.com *.hscollectedforms.net *.hsleadflows.net *.hsforms.net *.hsforms.com *.usemessages.com *.hubspot.com *.hubspot.net *.hubspotusercontent-na1.net *.hubspotfeedback.com static.hsappstatic.net js.hscta.net feedback.hubapi.com www.googletagmanager.com www.google.com www.gstatic.com www.googleadservices.com googleads.g.doubleclick.net www.clarity.ms scripts.clarity.ms snap.licdn.com connect.facebook.net www.redditstatic.com tracking.g2crowd.com cdn.claydar.com static.claydar.com u.heatmap.it cdn.jsdelivr.net script.hotjar.com static.hotjar.com static.ads-twitter.com tag.clearbitscripts.com tag.unifyintent.com ws.zoominfo.com js.storylane.io platform.linkedin.com platform.twitter.com unpkg.com www.buzzsprout.com www.recaptcha.net www.gstatic.cn www.youtube.com www.re-leased.com; style-src 'self' 'unsafe-inline' *.hubspotusercontent-na1.net cdn2.hubspot.net fonts.googleapis.com fonts.cdnfonts.com static.hsappstatic.net cdnjs.cloudflare.com cdn.jsdelivr.net www.googletagmanager.com www.re-leased.com www.gstatic.com; img-src 'self' data: blob: www.re-leased.com *.hubspot.com *.hubspot.net *.hubspotusercontent-na1.net js.hscta.net *.hsforms.net *.hsforms.com www.googletagmanager.com *.google-analytics.com www.google.com www.google.co.nz www.google.co.uk www.google.com.au www.google.ca www.google.com.ph www.google.co.in www.google.co.za www.google.co.zw www.google.com.bd www.google.com.mm www.google.com.na www.google.com.pe www.google.com.pg www.google.com.pk www.google.com.sa www.google.com.sg www.google.es www.google.fr www.google.ie www.google.im www.google.je www.google.pt px.ads.linkedin.com px4.ads.linkedin.com www.facebook.com alb.reddit.com *.clarity.ms c.bing.com analytics.twitter.com t.co i.ytimg.com stats.g.doubleclick.net dc.ads.linkedin.com li.protechts.net www.linkedin.com ct.capterra.com *.hs-embed-reporting.com googleads.g.doubleclick.net pagead2.googlesyndication.com www.googleadservices.com static.hsappstatic.net fonts.gstatic.com www.gstatic.com www.buzzsprout.com; connect-src 'self' *.hubapi.com *.hubspot.com static.hsappstatic.net *.hubspotusercontent-na1.net *.hs-banner.com *.hscollectedforms.net *.hsforms.net *.hsforms.com js.hscta.net www.googletagmanager.com *.google-analytics.com *.analytics.google.com analytics.google.com googleads.g.doubleclick.net ad.doubleclick.net stats.g.doubleclick.net pagead2.googlesyndication.com www.google.com www.google.co.nz www.google.co.uk www.google.com.au www.google.ca www.google.co.in www.google.com.bd www.google.com.pg www.google.com.pk www.google.ie www.google.je www.google.pt www.googleadservices.com www.facebook.com *.clarity.ms c.bing.com px.ads.linkedin.com px4.ads.linkedin.com pixel-config.reddit.com api.claydar.com csp.withgoogle.com api.unifyintent.com hubspot-forms-static-embed.s3.amazonaws.com tracking-api.g2.com vc.hotjar.io metrics.hotjar.io ws.zoominfo.com analytics.twitter.com t.co api.storylane.io u.heatmap.it re-leased-propertymanager-month-2026.replit.app; frame-src 'self' *.hubspot.com *.hs-sites.com *.hubspot.net play.hubspotvideo.com *.hsforms.net *.hsforms.com www.googletagmanager.com www.google.com td.doubleclick.net www.youtube.com www.recaptcha.net app.storylane.io platform.twitter.com www.buzzsprout.com www.facebook.com app.karumi.ai *.replit.app re-leased-commercial-lease-generator.vercel.app; font-src 'self' data: *.hubspotusercontent-na1.net fonts.gstatic.com static.hsappstatic.net cdnjs.cloudflare.com; worker-src 'self' blob:; media-src 'self' data:; object-src 'none'; base-uri 'self'; report-uri https://report-to-api.raygun.com/reports-csp?apikey=LgRXZbeaq13QgVqR87LzjA 1
default-src 'self' 'unsafe-inline' *.asahiglassplaza.net cdn.jsdelivr.net fonts.gstatic.com code.jquery.com cdnjs.cloudflare.com www.googletagmanager.com www.google-analytics.com www.youtube.com webto.salesforce.com *.googleapis.com agc-gp.sitesearch.jp chromestatus.com; report-uri /csp_reports/ 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: *.sagepay.com *.opayo.eu.elavon.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.facebook.com *.stripe.com *.sagepay.com *.opayo.eu.elavon.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com https://api.clerk.io https://cdn.clerk.io 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.facebook.com cedcommerce.com *.demdex.net *.paypalobjects.com *.clearpay.co.uk *.stripe.com *.stripe.network *.link.com *.sagepay.com *.opayo.eu.elavon.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.trustpilot.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com www.apptrian.com www.facebook.com *.bing.com *.google.co.uk *.google.co.in *.google.com blob: *.directvacuums.co.uk blob: *.ayko.com *.edesk.com *.cloudfront.net *.afterpay.com *.clearpay.co.uk https://cdn.clerk.io *.stripe.com ebizmarts-website.s3.amazonaws.com brippo.s3.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com www.facebook.com connect.facebook.net graph.facebook.com *.clerk.io *.googleoptimize.com *.bing.com *.doubleclick.net widget.freshworks.com m2epro.freshdesk.com *.afterpay.com *.clearpay.co.uk *.squarecdn.com https://hbiq.net https://api.clerk.io https://cdn.clerk.io *.stripe.com *.link.com *.sagepay.com *.opayo.eu.elavon.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.trustpilot.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.typeform.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.afterpay.com/ *.squarecdn.com https://api.clerk.io https://cdn.clerk.io *.sagepay.com *.opayo.eu.elavon.com https://static.klaviyo.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.trustpilot.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com www.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de www.apptrian.com connect.facebook.net graph.facebook.com *.google-analytics.com *.doubleclick.net *.trustpilot.com *.bing.com widget.freshworks.com m2epro.freshdesk.com *.clearpay.co.uk *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com cdn.jsdelivr.net *.stripe.com *.stripe.network *.link.com *.sagepay.com *.opayo.eu.elavon.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-sNUiF9bMbL_QA8WUwiL23Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.gstatic.com 'self' data: api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.google.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.google.com *.gstatic.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.dnky.co webchat.dotdigital.com unsafe-inline *.googleapis.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.google-analytics.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; form-action 'self' https://forms.hsforms.com/; frame-ancestors 'self' https://form.texarkanacollege.edu; connect-src https://api.hubapi.com https://stats.g.doubleclick.net https://forms.hubspot.com https://api.hubspot.com https://www.google-analytics.com https://hubspot-forms-static-embed.s3.amazonaws.com https://maps.googleapis.com https://td.doubleclick.net/ https://www.collegevine.com/; default-src 'none'; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://app.hubspot.com https://js.hsforms.net https://www.google.com https://bid.g.doubleclick.net https://td.doubleclick.net/  https://player.vimeo.com https://www.googletagmanager.com/ https://www.collegevine.com/; img-src 'self' https://track.hubspot.com https://www.google.com https://www.google-analytics.com https://www.youtube.com https://perf.hsforms.com https://www.collegevine.com/; media-src 'self' https://www.youtube.com https://vimeo.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com https://www.google-analytics.com https://www.gstatic.com https://www.google.com https://js.hsforms.net https://js.hs-analytics.net https://js-na1.hs-scripts.com https://js.hsleadflows.net https://js.hsadspixel.net https://js.hs-banner.com https://js.usemessages.com/ https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://forms.hsforms.com https://www.collegevine.com/ https://player.vimeo.com ; script-src-elem 'self' 'unsafe-inline' https://www.gstatic.com https://www.google.com https://www.google-analytics.com https://js.hsforms.net https://js.hs-analytics.net https://js-na1.hs-scripts.com https://js.hsleadflows.net https://js.hsadspixel.net https://js.hs-banner.com https://js.usemessages.com/ https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://forms.hsforms.com https://player.vimeo.com ; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com ; 1
default-src 'self'; media-src 'self' https://*.livechatinc.com https://*.reciteme.com; script-src 'nonce-TUl6kwKEnn2XjrTbz8c06QND+BrVTsih' 'unsafe-eval' 'strict-dynamic' 'unsafe-inline' 'self' https: http: 'self' 'unsafe-inline' 'unsafe-eval' https: http:; style-src 'self' 'unsafe-inline' https://*.typekit.net https://*.livechatinc.com https://*.gstatic.com https://safespaces.azurewebsites.net https://*.reciteme.com https://fonts.googleapis.com; object-src 'self' https://*.livechatinc.com; font-src 'self' data: blob: https://*.typekit.net https://safespaces.azurewebsites.net https://*.gstatic.com https://*.reciteme.com https://fonts.googleapis.com; img-src 'self' data: blob: https://cdn.sanity.io https://*.livechatinc.com https://cdn.southeastwater.co.uk https://*.usercentrics.eu https://safespaces.azurewebsites.net https://*.gstatic.com https://*.reciteme.com https://*.google.com https://*.googleapis.com https://translate.google.com https://www.googletagmanager.com https://i.vimeocdn.com; connect-src 'self' data: blob: https://cdn.sanity.io https://*.pure.cloud https://*.livechatinc.com https://*.google-analytics.com https://*.cloudfunctions.net https://*.typekit.net https://safespaces.azurewebsites.net https://*.usercentrics.eu https://aggregator.service.usercentrics.eu wss://*.hotjar.com https://*.hotjar.io https://*.reciteme.com https://*.algolia.net https://*.algolianet.com https://*.googleapis.com https://*.google.com https://vimeo.com https://*.vimeo.com https://*.vimeocdn.com https://api.addressy.com https://www.googletagmanager.com https://cdn.southeastwater.co.uk https://*.americanexpress.com https://*.cardinalcommerce.com https://*.visa.com https://*.visaeurope.com https://*.mastercard.com https://spay.samsung.com https://csp.withgoogle.com https://*.stripe.com; frame-src 'self' tel: mailto: https://*.pure.cloud https://*.livechatinc.com https://js.stripe.com https://www.google.com https://*.vimeo.com https://safespaces.azurewebsites.net https://dt-dsp-prd.firebaseapp.com https://security-eu.mimecast.com; frame-ancestors 'self'; child-src 'self' https://*.livechatinc.com; report-uri https://o4511071092539392.ingest.de.sentry.io/api/4511071392956496/security/?sentry_key=3d8d4dc97789da1eb528a73bfb351541&sentry_environment=production&csp_version=1.0.5&deployed_at=02-07-2026 1
default-src https: data: 'unsafe-inline' 'unsafe-eval'; child-src https: data: blob:; connect-src https: data: blob:; font-src https: data:; img-src https: data:; media-src blob: data: https:; object-src https:; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; block-all-mixed-content; frame-ancestors 'self'; report-uri https://leafgroup.report-uri.com/r/d/csp/wizard 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:; style-src 'self' 'unsafe-inline' https: data:; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https: 1
frame-ancestors 'self'; report-uri https://www.klik.de/api/csp-reports; report-to csp-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cloudflare.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net fonts.googleapis.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://seo.mageplaza.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://calendly.com *.meetanshi.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com magefan.com cm.magefan.com *.rakerock.ml *.elfsight.com https://elfsight.com *.googleusercontent.com https://rakerock.ml *.clarity.ms *.jivosite.com *.g.doubleclick.net https://*.google.com *.bing.com https://consent.cookiefirst.com https://widget.reusely.com *.cloudfront.net blob: https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.facebook.com https://firebasestorage.googleapis.com https://meetanshi.com/media/logo.png *.meetanshi.com quickchart.io img.youtube.com store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.elfsight.com https://player.vimeo.com/api/player.js https://assets.calendly.com https://universe-static.elfsightcdn.com *.clarity.ms *.jivosite.com https://consent.cookiefirst.com https://consent.cookiebot.com https://widget.reusely.com https://api.cookiefirst.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ s7.addthis.com *.googletagmanager.com *.facebook.net *.avada.io *.meetanshi.com cdn.jsdelivr.net *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.cloudflare.com *.googleadservices.com *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.cloudflare.com https://assets.calendly.com/ *.jivosite.com https://consent.cookiefirst.com maxcdn.bootstrapcdn.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net cdn.jsdelivr.net fonts.gstatic.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.jivosite.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.elfsight.com https://player.vimeo.com/api/player.js *.clarity.ms *.jivosite.com wss://*.jivosite.com *.g.doubleclick.net https://analytics.google.com https://consent.cookiefirst.com https://api.reusely.com https://api.cookiefirst.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ ekr.zdassets.com/ *.google-analytics.com https://get.geojs.io *.avada.io *.meetanshi.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-g2juz7YqlKxzSuFIL1DnsJneM9JpqUVkEY1q0T97E0a5PLGNXIr63A' 'unsafe-eval' https://xima.matomo.cloud https://api-oa.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://*.deutscheweine.de https://tiles.mapz.com https://tile.openstreetmap.org https://picsum.photos https://*.picsum.photos https://*.oastatic.com https://*.outdooractive.com; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com; frame-ancestors 'self'; style-src-elem 'self' https://www.outdooractive.com 'unsafe-hashes' 'sha256-j0G7/p6b2cogAfAA1rVddScfUB6uJ+IJ06SyhTpwMAY=' 'sha256-48BT1UO/5S65CnJ2XBYGMDc6jFXsDCbibK8tGVC4lOA=' 'sha256-k4AJRR/5Kmv9dTSyGeYgCzvT0/+EvghAoZT01+kl9pU=' 'sha256-ss6GRC3tKlHS8Hi+CdqsNp7ji8uOR+7YN5ZjUK5iHs8=' 'report-sample'; script-src-elem 'self' 'unsafe-inline' https://xima.matomo.cloud https://www.outdooractive.com https://api-oa.com 'report-sample'; connect-src 'self' https://xima.matomo.cloud https://api-oa.com https://www.outdooractive.com https://*.oastatic.com https://www.mapz.com; script-src-attr 'self' 'nonce-g2juz7YqlKxzSuFIL1DnsJneM9JpqUVkEY1q0T97E0a5PLGNXIr63A' 'unsafe-hashes' 'sha256-5+CMwwNpAFYnRGR4ycXcTOWsNL0gYzShNZmYn+2fhfs=' 'sha256-DEcQfVBYaTJQ+4Eu2pvA1BvxvlcSVgERJn4wW6GO22M=' 'sha256-P1MsgUmL6SZQlkOYJuanyuTQQHqA2uVOzleT4JX+Z4U=' 'sha256-lCRzMLzp+CASn95cnd+uSTVusDDxocICJw+Bmu9NtNo=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'report-sample'; media-src 'self' https://*.deutscheweine.de; report-uri https://www.deutscheweine.de/@http-reporting?csp=report&requestTime=1789272741041251&requestHash=87c60df07de7791297c23ac74d04c2351f158651 1
font-src fonts.gstatic.com use.typekit.net https://www.gstatic.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: assets.quadpay.com static.klaviyo.com *.cloudflare.com *.intelligencebank.com *.slant.co *.fonts.net *.zip.co *.alicdn.com *.tql.com unpkg.com *.smassets.net s3.amazonaws.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.adyen.com *.facebook.com *.arcot.com *.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.adyen.com *.sharethis.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com ws.sharethis.com t.sharethis.com livetour.istaging.com *.facebook.com calculator.redarc.com.au cdn.intelligencebank.com e.issuu.com issuu.com *.doubleclick.net *.moz.com *.paypalobjects.com localhost *.googletagmanager.com *.bing.com *.cloudflare.com *.google.com *.pinterest.com google.com *.zscaler.net *.zscalerthree.net *.zscalertwo.net *.locally.com *.arcot.com *.captcha-delivery.com *.cardinalcommerce.com www.xtento.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.ftcdn.net *.behance.net *.adyen.com *.sharethis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com flagpedia.net 'self' data: site-assets.afterpay.com mcprod.redarcelectronics.com maps.google.com maps.gstatic.com maps.googleapis.com l.sharethis.com p.adsymptotic.com assets.quadpay.com calculator.redarc.com.au linkedin.com *.linkedin.com cdn.jsdelivr.net d3k81ch9hvuctc.cloudfront.net logs-01.loggly.com *.bing.net https://*.bing.com *.clarity.ms *.facebook.com *.intelligencebank.com *.kaltura.com www.google.com.au www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bt www.google.bj www.google.by www.google.ca www.google.cd www.google.cg www.google.ch www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.com.af www.google.com.ar www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gg www.google.gr www.google.gy www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kz www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.mw www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.se www.google.si www.google.sk www.google.so www.google.sr www.google.tg www.google.tl www.google.tn www.google.tt www.google.vu www.google.cv www.google.hn www.google.md www.google.ml *.googletagmanager.com *.typekit.net www.google.ad www.google.bs www.google.ci www.google.co.ls www.google.com.ag www.google.com.bo www.google.com.sl www.google.com.sv www.google.com.tj www.google.dj www.google.dm www.google.ki www.google.la www.google.mv www.google.nr www.google.sc www.google.sn www.google.tm *.tql.com www.google.gm www.google.ne www.google.ws www.google.gl www.google.kg *.doubleclick.net meetanshi.com retail.mcprod.redarcelectronics.com trade.mcprod.redarcelectronics.com trade.redarcelectronics.com retail.mcstaging.redarcelectronics.com trade.mcstaging.redarcelectronics.com *.bing.com *.cloudflare.com *.facebook.net *.shopify.com *.smassets.net *.yotpo.com www.google.fm www.google.sh *.afterpay.com *.google.com *.googleadservices.com *.pinterest.com *.quadpay.com *.ytimg.com google.com www.google.td www.google.to *.commoninja.com *.yotpoapi.com s3.amazonaws.com www.google.bi www.google.nu www.google.sm www.google.as www.google.cf www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-ds.com *.adyen.com https://rum.hlx.page *.sharethis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google.com *.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com maps.googleapis.com js.afterpay.com ws.sharethis.com t.sharethis.com staticw2.yotpo.com snap.licdn.com d10lpsik1i8c69.cloudfront.net *.facebook.net https://*.bing.com clarity.microsoft.com *.clarity.ms calculator.redarc.com.au *.zip.co api.emailjs.com dashboard.emailjs.com *.issuu.com *.quantcount.com *.quantserve.com *.klaviyo.com cdn.jsdelivr.net *.impactcdn.com *.adobedtm.com *.doubleclick.net *.hotjar.com *.intelligencebank.com *.kaltura.com *.googletagmanager.com *.yottaa.com *.paypalobjects.com bam.nr-data.net rapid-cdn.yottaa.com *.rapid-cdn.yottaa.com *.adobe.net *.afterpay.com *.bing.com *.yotpo.com *.googleadservices.com *.pinterest.com unpkg.com *.commoninja.com *.googleapis.com rum.hlx.page *.locally.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com https://static.klaviyo.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com maxcdn.bootstrapcdn.com *.gstatic.com *.googleapis.com *.typekit.net *.intelligencebank.com ws.sharethis.com static-tracking.klaviyo.com static-forms.klaviyo.com calculator.redarc.com.au cdn.jsdelivr.net static.klaviyo.com *.fonts.net *.googletagmanager.com *.yotpo.com *.commoninja.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com res.cloudinary.com cdn.intelligencebank.com *.kaltura.com *.youtube.com *.intelligencebank.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io commerce.adobe.net qa-api.magedevteam.com *.sentry.io *.adyen.com *.sharethis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com www.gstatic.com maps.googleapis.com t.elasticsuite.io *.google-analytics.com l.sharethis.com firebase.googleapis.com firestore.googleapis.com firebaseinstallations.googleapis.com *.afterpay.com *.doubleclick.net settings.luckyorange.net cdn.linkedin.oribi.io google.com frstre.com *.facebook.com *.facebook.net bat.bing.com *.us.zip.co *.googletagmanager.com timezone.abstractapi.com cdn.intelligencebank.com api.emailjs.com dashboard.emailjs.com *.issuu.com static-forms.klaviyo.com cdn.optimizely.com api.quadpay.com data.stbuttons.click api-js.datadome.co redarcelectronics.pxf.io redarcelectronicscreator.pxf.io *.bing.net *.clarity.ms *.crwdcntrl.net *.hotjar.com *.hotjar.io wss://*.hotjar.com *.linkedin.com localhost www.google.ae www.google.at www.google.ba www.google.be www.google.bg www.google.by www.google.ca www.google.cg www.google.ch www.google.cl www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.com.af www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.br www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.fj www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kw www.google.com.lb www.google.com.mm www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.gg www.google.gr www.google.gy www.google.hr www.google.hu www.google.ie www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.lk www.google.lt www.google.lu www.google.mw www.google.mk www.google.mu www.google.mn www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.se www.google.si www.google.sk www.google.sr www.google.tl www.google.tg www.google.tt www.google.ge www.google.ht www.google.lv www.google.ml *.typekit.net *.yottaa.net www.google.ad www.google.al www.google.am www.google.cd www.google.ci www.google.cm www.google.co.uz www.google.com.ag www.google.com.bo www.google.com.bz www.google.com.et www.google.com.gi www.google.com.kh www.google.com.ly www.google.com.mt www.google.com.sb www.google.com.sl www.google.com.sv www.google.com.tj www.google.dm www.google.hn www.google.im www.google.ki www.google.kz www.google.la www.google.me www.google.mg www.google.nr www.google.sn www.google.so www.google.tn www.google.vu www.google.az www.google.bj www.google.bs www.google.gm www.google.li www.google.md www.google.ws bam.nr-data.net *.yottaa.com *.yotpo.com www.google.bf www.google.bt www.google.co.ls www.google.fm www.google.ga www.google.kg *.adobe.net *.bing.com *.google.com *.googleadservices.com *.klaviyo.com www.google.cv www.google.td www.google.to *.commoninja.com *.samsung.com *.yotpoapi.com *.youtube.com rum.hlx.page www.google.bi www.google.dj www.google.ne www.google.sc www.google.sm ipinfo.io www.google.as www.google.mv 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.sharethis.com *.clarity.ms 'self' 'unsafe-inline'; report-uri https://ae1dd06c-57cf-4693-8c31-6e29ccc59bf2.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; font-src 'self' https: data:; img-src 'self' data: https:; object-src 'none'; style-src 'self' https: 'unsafe-inline'; connect-src 'self' https:; frame-src 'self'; frame-ancestors 'self'; media-src 'self'; script-src 'self' https: 'unsafe-inline' http://connect.facebook.net/en_US/sdk.js https://connect.facebook.net/en_US/sdk.js; report-uri https://o466311.ingest.sentry.io/api/6004104/security/?sentry_key=2c284ff228ac4d0e8b8ad9ea17497eee&sentry_release=trusted-mfe@v1.1&sentry_environment=prod 1
font-src fonts.googleapis.com fonts.gstatic.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com maps.googleapis.com maps.gstatic.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com searchanise-ef84.kxcdn.com s3.amazonaws.com ajax.aspnetcdn.com www.searchanise.com static.searchanise.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com fonts.googleapis.com cdn.dnky.co webchat.dotdigital.com searchanise-ef84.kxcdn.com s3.amazonaws.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.wp.com *.wordpress.com *.googletagmanager.com *.google.com *.gstatic.com *.ketchcdn.com *.ketchjs.com *.evgnet.com *.parsely.com *.googleapis.com *.google-analytics.com *.peoplesbancorp.com *.formstack.com *.clarity.ms *.evergage.com; style-src 'self' 'unsafe-inline' *.wp.com *.typekit.net *.peoplesbancorp.com *.googleapis.com *.evergage.com; img-src 'self' data: *.wp.com *.wordpress.com *.parsely.com *.googleapis.com *.gstatic.com *.google.com *.doubleclick.net *.ggpht.com *.peoplesbancorp.com *.evergage.com; font-src 'self' data: *.wp.com *.typekit.net *.gstatic.com *.googleapis.com *.formstack.com; connect-src 'self' *.wp.com *.wordpress.com *.parsely.com *.googletagmanager.com *.ketchcdn.com *.evergage.com *.google-analytics.com *.google.com *.doubleclick.net *.googleapis.com *.peoplesbancorp.com *.clarity.ms *.formstack.com; frame-src 'self' *.youtube.com *.youtube-nocookie.com *.google.com *.gstatic.com *.formstack.com; worker-src 'self' blob:; frame-ancestors 'self'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net * data: *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://seo.mageplaza.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.tawk.to 'self' 'unsafe-inline'; frame-ancestors self www.google.com *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.instagram.com www.google.com www.gstatic.com apis.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.tawk.to 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cdninstagram.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com * www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.tawk.to cdn.jsdelivr.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.instagram.com *.googleapis.com *.gstatic.com *.avada.io *.shopify.com * data: js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com https://fonts.bunny.net * data: assets.braintreegateway.com cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.tawk.to wss://*.tawk.to 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com fonts.cdnfonts.com *.cloudflare.com *.bootstrapcdn.com 'unsafe-inline' data: *.fontawesome.com https://fonts.bunny.net *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net www.wwhardware.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com www.wwhardware.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com www.wwhardware.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com *.certcapture.com platform.twitter.com *.hotjar.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * checkout.sezzle.com sandbox.checkout.sezzle.com tracking.sezzle.com *.yotpo.com www.wwhardware.com; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com *.certcapture.com *.wwhardware.com pixel.tapad.com ml314.com *.cloudflare.com *.bing.com *.zonos.com *.marchex.io *.google.com *.pinterest.com *.adroll.com ads.yahoo.com *.bidswitch.net *.adnxs.com *.rlcdn.com *.openx.net *.company-target.com *.instinctiveads.com *.dca0.com *.cloudfront.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com moogento.com *.moogento.com quickchart.io store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com media.sezzle.com *.yotpo.com dhv2ziothpgrr.cloudfront.net www.wwhardware.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.facebook.net connect.facebook.net graph.facebook.com business.facebook.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com pinterest.com www.pinterest.com s.pinimg.com *.certcapture.com *.cloudflare.com *.twitter.com *.fontawesome.com *.marchex.io *.hotjar.com *.bing.com *.googletagmanager.com *.pinterest.com http://chimpstatic.com *.zonos.com *.adroll.com *.dca0.com *.attn.tv https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://cdn.jsdelivr.net *.avada.io *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com checkout-sdk.sezzle.com sandbox.checkout-sdk.sezzle.com widget.sezzle.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net www.wwhardware.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.cloudflare.com *.fontawesome.com *.bootstrapcdn.com https://static.klaviyo.com https://fonts.bunny.net assets.braintreegateway.com fonts.cdnfonts.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net www.wwhardware.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com *.wwhardware.com www.wwhardware.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.io *.algolianet.com *.insights.algolia.io insights.algolia.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com *.certcapture.com a.klaviyo.com *.cloudflare.com *.hotjar.com *.zonos.com *.google-analytics.com *.doubleclick.net *.adroll.com *.dca0.com *.attentivemobile.com *.attn.tv https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com gateway.sezzle.com sandbox.gateway.sezzle.com media.sezzle.com widget.sezzle.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com www.wwhardware.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com www.wwhardware.com http: https: blob: 'self' 'unsafe-inline'; default-src www.wwhardware.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.wwhardware.com/; report-to report-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-7H9vhvVrYobjt7nZh4oAog' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.adobe.com *.googleapis.com data: *.fontawesome.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.klaviyo.com https://embedsocial.com *.zdassets.com *.bing.com *.cloudfront.net *.orthomed.ca *.hotjar.com *.crazyegg.com *.zendesk.com *.zopim.com *.adobedtm.com hcaptcha.com *.hcaptcha.com www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.weltpixel.com 'self' 'unsafe-inline'; img-src *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.google.com https://www.google.co.in *.klaviyo.com https://embedsocial.com *.zdassets.com *.bing.com *.cloudfront.net *.orthomed.ca *.hotjar.com *.crazyegg.com *.zendesk.com *.zopim.com https://script.crazyegg.com https://bat.bing.com https://www.facebook.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page http://www.googleadservices.com http://www.google-analytics.com *.klaviyo.com https://embedsocial.com *.zdassets.com *.bing.com *.cloudfront.net *.orthomed.ca *.hotjar.com *.crazyegg.com *.zendesk.com *.zopim.com https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://static.hotjar.com https://script.crazyegg.com http://script.crazyegg.com/ hcaptcha.com *.hcaptcha.com js.hcaptcha.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com tagmanager.google.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.google.com *.klaviyo.com https://embedsocial.com *.zdassets.com *.bing.com *.cloudfront.net *.orthomed.ca *.hotjar.com *.crazyegg.com *.zendesk.com *.zopim.com https://script.crazyegg.com hcaptcha.com *.hcaptcha.com https://static.klaviyo.com *.fontawesome.com assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.google.com *.klaviyo.com https://embedsocial.com *.zdassets.com *.bing.com *.cloudfront.net *.orthomed.ca *.hotjar.com *.crazyegg.com *.zendesk.com *.zopim.com https://script.crazyegg.com https://static.zdassets.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com wss://widget-mediator.zopim.com https://metrics.hotjar.io/ *.klaviyo.com https://embedsocial.com *.zdassets.com *.bing.com *.cloudfront.net *.orthomed.ca *.hotjar.com *.crazyegg.com *.zendesk.com *.zopim.com https://script.crazyegg.com wss://ws.hotjar.com https://content.hotjar.io *.adobe.com hcaptcha.com *.hcaptcha.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.google-analytics.com *.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com fonts.googleapis.com 'unsafe-inline' data: 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.cloudflare.com leadbooster-chat.pipedrive.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.addthis.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.googletagmanager.com widget.trustpilot.com lpcdn.lpsnmedia.net js.hsleadflows.net app.hubspot.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io maps.googleapis.com maps.gstatic.com *.googleapis.com https://images.unsplash.com magefan.com cm.magefan.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: *.googletagmanager.com ssl.gstatic.com www.gstatic.com *.cloudflare.com *.mdoq.io *.ibottles.co.uk *.google.com *.google.co.uk googletagmanager.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com https://eu.i.posthog.com https://eu-assets.i.posthog.com s7.addthis.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.googletagmanager.com tagmanager.google.com *.cloudflare.com *.twitter.com *.fontawesome.com *.liveperson.net *.trustpilot.com *.lpsnmedia.net js.hsleadflows.net x.clearbitjs.com leadbooster-chat.pipedrive.com tag.clearbitscripts.com snap.licdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://cdn.jsdelivr.net assets.braintreegateway.com *.googleapis.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com tagmanager.google.com fonts.google.com *.cloudflare.com *.fontawesome.com *.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com https://eu.i.posthog.com ekr.zdassets.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.googletagmanager.com *.cloudflare.com stats.g.doubleclick.net forms.hscollectedforms.net region1.analytics.google.com cdn.linkedin.oribi.io leadbooster-chat.pipedrive.com app.clearbit.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com static.klaviyo.com *.newrelic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.sharethis.com www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * js.mollie.com *.newrelic.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.sharethis.com https://images.unsplash.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.klevu.com *.ksearchnet.com https://www.mollie.com bat.bing.com *.newrelic.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sharethis.com https://maps.googleapis.com https://player.vimeo.com apis.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com js.braintreegateway.com assets.braintreegateway.com widget.freshworks.com m2epro.freshdesk.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.crwdcntrl.net js.klevu.com *.ksearchnet.com *.kaptcha.com js.mollie.com fonts.googleapis.com bat.bing.com www.xtento.com cdn.xtento.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com *.certcapture.com widget.freshworks.com m2epro.freshdesk.com assets.braintreegateway.com *.klevu.com *.ksearchnet.com *.fontawesome.com maxcdn.bootstrapcdn.com *.newrelic.com *.google.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com https://maps.googleapis.com https://player.vimeo.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com api.braintreegateway.com client-analytics.braintreegateway.com widget.freshworks.com m2epro.freshdesk.com api.sandbox.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.crwdcntrl.net *.klevu.com *.ksearchnet.com *.kaptcha.com *.doubleclick.net 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com *.newrelic.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';  script-src    'self'    'unsafe-eval'    'unsafe-inline'    https://*.google.com    https://*.googleadservices.com    https://*.googlesyndication.com    https://*.googletagmanager.com    https://*.gstatic.com    https://*.doubleclick.net    https://maps.googleapis.com    https://connect.facebook.net    https://*.facebook.com    https://cdn.brevo.com    https://sibautomation.com    https://conversations-widget.sendinblue.com    https://in-automate.brevo.com    https://js.stripe.com    https://*.js.stripe.com    https://connect-js.stripe.com    https://checkout.stripe.com    https://cdn.amplitude.com    https://conversations-widget.brevo.com    https://analytics.amplitude.com    https://cdn.jsdelivr.net    https://cdnjs.cloudflare.com    https://*.go-mpulse.net    https://analytics.tiktok.com    https://bat.bing.com    https://bat.bing.net    https://static.ads-twitter.com    https://platform.twitter.com    https://analytics.twitter.com    https://challenges.cloudflare.com    https://accounts.google.com    https://www.linkedin.com    https://*.licdn.com;  style-src    'self'    'unsafe-inline'    https://cdnjs.cloudflare.com    https://fonts.googleapis.com    https://connect-js.stripe.com    https://cdn.amplitude.com    https://cdn.amplitude.com    https://js.stripe.com    https://www.googletagmanager.com    https://accounts.google.com    https://www.linkedin.com    https://*.licdn.com    sha256-0hAheEzaMe6uXIKV4EehS9pu1am1lj/KnnzrOYqckXk=;  img-src    'self'    https://flagcdn.com    blob: data:    https://*.googleadservices.com    https://*.googlesyndication.com    https://*.googletagmanager.com    https://*.google.fr    https://*.google.com    https://*.doubleclick.net    https://gtm.groupe-reussite.fr    https://*.facebook.com    https://*.facebook.net    https://*.fbcdn.net    https://cdnjs.cloudflare.com    https://fonts.gstatic.com    https://maps.gstatic.com    https://maps.googleapis.com    https://in-automate.brevo.com    https://*.stripe.com    https://cdn.brevo.com    https://cdn.amplitude.com    https://*.akstat.io    https://analytics.tiktok.com    https://*.tiktok.com    https://bat.bing.com    https://bat.bing.net    https://static.ads-twitter.com    https://platform.twitter.com    https://analytics.twitter.com    https://*.twitter.com    https://*.x.com    https://t.co    https://www.linkedin.com    https://*.licdn.com    https://static.licdn.com    https://media.licdn.com;  font-src 'self' https://cdnjs.cloudflare.com https://fonts.gstatic.com;  object-src 'none';  base-uri 'self';  form-action    'self'    https://*.facebook.net    https://*.facebook.com;  frame-ancestors https://www.google.com;  worker-src    'self'    blob:;  connect-src    'self'    blob:    https://*.gstatic.com    https://*.google.com    https://*.googletagmanager.com    https://*.google.fr    https://*.g.doubleclick.net    https://*.googleadservices.com    https://*.googlesyndication.com    https://*.google-analytics.com    https://*.facebook.net    https://*.facebook.com    https://cdn.brevo.com    https://sibautomation.com    https://conversations-widget.sendinblue.com    https://conversations-widget.brevo.com    https://in-automate.brevo.com    https://api.stripe.com    https://js.stripe.com    https://uploads.stripe.com    https://checkout.stripe.com    https://cdnjs.cloudflare.com    https://maps.googleapis.com    https://maps.gstatic.com    https://fonts.googleapis.com    https://fonts.gstatic.com    https://cdn.amplitude.com    https://api.amplitude.com    https://analytics.amplitude.com    https://api2.amplitude.com    https://sr-client-cfg.amplitude.com    https://region1.analytics.google.com    https://region1.google-analytics.com    https://chat.googleapis.com    https://flagcdn.com    https://*.go-mpulse.net    https://*.akstat.io    https://*.doubleclick.net    https://analytics.tiktok.com    https://business-api.tiktok.com    https://bat.bing.com    https://bat.bing.net    https://static.ads-twitter.com    https://platform.twitter.com    https://analytics.twitter.com    https://*.twitter.com    https://*.x.com    https://t.co    https://accounts.google.com    https://www.linkedin.com    https://*.licdn.com    https://analytics-ipv6.tiktokw.us    https://*.amazonaws.com    https://challenges.cloudflare.com    https://gtm.groupe-reussite.fr;  frame-src    'self'    https://*.googletagmanager.com    https://*.googlesyndication.com    https://*.google.com    https://*.doubleclick.net    https://gtm.groupe-reussite.fr    https://*.facebook.com    https://*.facebook.net    https://js.stripe.com    https://*.js.stripe.com    https://hooks.stripe.com    https://connect-js.stripe.com    https://checkout.stripe.com    https://www.youtube.com    https://conversations-widget.sendinblue.com    https://conversations-widget.brevo.com    https://platform.twitter.com    https://syndication.twitter.com    https://*.twitter.com    https://*.x.com    https://challenges.cloudflare.com    https://accounts.google.com    https://www.linkedin.com    https://*.licdn.com;  media-src    'self'    blob:    https://*.amazonaws.com 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data:; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; connect-src 'self'; frame-src 'self'; form-action 'self' https://support.ezoshosting.com 1
font-src https://geowidget.easypack24.net https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: https://widgets.trustedshops.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ pay.google.com play.google.com *.autopay.eu https://geowidget-app.inpost.pl/ https://sandbox-easy-geowidget.easypack24.net/ https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com *.trefl.com *.pinterest.com *.doubleclick.net *.facebook.com *.google.com *.issuu.com *.salesmanago.pl *.wedare.pl www.google.co.uk www.google.pl youtube.com www.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https://images.unsplash.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com platnosci.bm.pl platnosci-accept.bm.pl www.gstatic.com *.autopay.eu https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org tile.openstreetmap.org mapa.orlenpaczka.pl ruch-osm.sysadvisors.pl https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com https://firebasestorage.googleapis.com 'self' data: https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.trefl.com *.amazonaws.com *.usercentrics.eu *.doubleclick.net *.facebook.com *.fbcdn.net *.googleapis.com *.googlesyndication.com *.gstatic.com *.ibb.co *.wedare.pl *.yandex.ru www.google.ae www.google.al www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.ca www.google.ch www.google.cl www.google.co.in www.google.co.jp www.google.co.kr www.google.co.nz www.google.co.uk www.google.co.za www.google.com.au www.google.com.bd www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.hk www.google.com.lb www.google.com.mx www.google.com.my www.google.com.ng www.google.com.ph www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.cz www.google.de www.google.dk www.google.dz www.google.es www.google.fi www.google.fr www.google.ge www.google.gr www.google.hr www.google.hu www.google.ie www.google.it www.google.lt www.google.lv www.google.md www.google.me www.google.mg www.google.nl www.google.no www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk www.google.tn www.google.pl yastatic.net *.googletagmanager.com *.google-analytics.com ssl.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.autopay.eu pay.google.com *.google-analytics.com *.googletagmanager.com https://cdn.polyfill.io https://browser.sentry-cdn.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org mapa.orlenpaczka.pl https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com *.avada.io *.google.com *.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.analyticharbor.com/ *.trefl.com *.usercentrics.eu *.googleapis.com *.pinimg.com *.pinterest.com *.addthis.com *.bing.com *.doubleclick.net *.facebook.net *.googlesyndication.com *.wedare.pl tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.autopay.eu *.googleapis.com https://geowidget.easypack24.net https://geowidget.inpost.pl https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com sandbox-easy-geowidget-sdk.easypack24.net *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.trefl.com *.googletagmanager.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.google-analytics.com https://*.ingest.sentry.io *.easypack24.net *.inpost.pl *.openstreetmap.org nominatim.openstreetmap.org https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com https://get.geojs.io *.avada.io *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.analyticharbor.com/ *.pinterest.com *.trefl.com https://www.sentry.macopedia-dev.pl *.amazonaws.com https://js-agent.newrelic.com *.doubleclick.net *.googleapis.com *.facebook.com *.google.com *.googlesyndication.com *.saleago.com *.usercentrics.eu google.com www.google.ae www.google.at www.google.ba www.google.be www.google.bg www.google.ca www.google.ch www.google.cl www.google.co.in www.google.co.kr www.google.co.nz www.google.co.uk www.google.com.do www.google.com.ec www.google.com.hk www.google.com.lb www.google.com.mx www.google.com.my www.google.com.tr www.google.com.tw www.google.com.ua www.google.cz www.google.de www.google.dk www.google.es www.google.fi www.google.fr www.google.ge www.google.gr www.google.hr www.google.hu www.google.ie www.google.it www.google.lt www.google.mg www.google.nl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.tn www.google.pl *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://e784be6e-bb2f-4390-bb3c-a4e377629b11.sansec.watch/; report-to report-endpoint; 1
object-src 'none'; script-src 'self' cdn.jsdelivr.net https://api-maps.yandex.ru https://cdn.ampproject.org https://cdnjs.cloudflare.com https://smartcaptcha.yandexcloud.net mdbootstrap.com 'unsafe-inline'; script-src-attr 'self'; style-src 'self' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https://cdnjs.cloudflare.com mdbootstrap.com use.fontawesome.com 'unsafe-inline'; style-src-attr 'self'; frame-ancestors * 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.klarnacdn.net *.fontawesome.com maxcdn.bootstrapcdn.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://js.mollie.com account.fetchify.com *.klarna.com *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.reviews.io *.reviews.co.uk *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io cdn.doofinder.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://s3.amazonaws.com https://aggregate-imgs.s3.eu-north-1.amazonaws.com https://fsc-images.s3.eu-north-1.amazonaws.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.google.com.ua https://www.googleadservices.com https://bat.bing.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.cdninstagram.com *.fbcdn.net maps.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com cdn.doofinder.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://js.mollie.com https://*.ngrok.app cc-cdn.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://widget.reviews.co.uk https://porjs.com https://cdn-cookieyes.com https://log.cookieyes.com https://www.google.com.ua newrelic.com nr-data.net https://bat.bing.com https://www.clarity.ms https://static.addtoany.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.reviews.io *.reviews.co.uk *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com *.trustpilot.com https://www.googletagmanager.com tagmanager.google.com unpkg.com *.instagram.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.doofinder.com cc-cdn.com *.klarnacdn.net https://static.klaviyo.com *.fontawesome.com www.googletagmanager.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.doofinder.com wss://*.doofinder.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://*.fero.com https://*.ngrok.app wss://*.ngrok.app wss://fero.ngrok.app:3000/ws api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://k.clarity.ms api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.stripe.com klarna.com *.link.com *.amazon.com *.google-analytics.com *.doubleclick.net https://www.google-analytics.com *.instagram.com *.googleusercontent.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self' https://slumber.supercast.com; img-src 'self' data: https:; font-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'sha256-2MqxEti6kUE9Uo5EprP1Fns40cusahkpJvnKy0RAnAU=' 'sha256-4Iq5caGia/dRgZSjb74izZkgYdD2j1+PeRDx5LjUwnE=' 'sha256-BB3ik1a1QawREWUzVtIjB/KVIyey8b2Ac3qkwHkpX1s=' 'sha256-HTCvyl8uDn6mXO1V2ADr6s9dZMhx6bpPWIioSaJnK6Y=' 'sha256-J8hBNjWz+2RGMBOwTT6/KHsXD9Lr868TTDEkJHB+/M4=' 'sha256-O+dX1XkQDRb4AGVcmETNsJqzMQ4hwIqxoUjJdjyyWPY=' 'sha256-TXUv9B5UhW/juvGQvEXRGZYSiKH/hXi8rpk9ZbPcUjY=' 'sha256-WisoyBUgprElr7YPtFPb8eApHPIlUKoNnpoVtAc+a1s=' 'sha256-i4KBxK7GydezdY4N1Wc2RjL96C59hbuHr96GxkVTbGA=' 'sha256-lVklro1V/okFUBfMchZbLv9qGpEaklLv+4mlUYF2Qas=' 'sha256-s5fgBBRYqdLjgPuJKlWwWD3epiSOk4S8VNYOjzdziLA=' 'sha256-t/4WU1XRnW7ubUO/Ko5EMx5fw+5q/uZQqwX53zBIFok=' 'sha256-vQYHAzSPRpXbG4bx6VJctpQw/UQN/EDf8L4pYRXD81w=' https://challenges.cloudflare.com https://unpkg.com https://static.cloudflareinsights.com; frame-src https://challenges.cloudflare.com; connect-src 'self' https://notify.bugsnag.com https://sessions.bugsnag.com https://api.github.com https://sveltia-cms-auth.slumber-group.workers.dev; report-uri /api/csp-report; report-to csp-endpoint 1
default-src 'self' siteminder.okta.com *.oktacdn.com; connect-src 'self' siteminder.okta.com siteminder-admin.okta.com *.oktacdn.com *.mixpanel.com *.mapbox.com siteminder.kerberos.okta.com siteminder.mtls.okta.com *.authenticatorlocalprod.com:8769 http://localhost:8769 http://127.0.0.1:8769 *.authenticatorlocalprod.com:65111 http://localhost:65111 http://127.0.0.1:65111 *.authenticatorlocalprod.com:65121 http://localhost:65121 http://127.0.0.1:65121 *.authenticatorlocalprod.com:65131 http://localhost:65131 http://127.0.0.1:65131 *.authenticatorlocalprod.com:65141 http://localhost:65141 http://127.0.0.1:65141 *.authenticatorlocalprod.com:65151 http://localhost:65151 http://127.0.0.1:65151 https://oinmanager.okta.com data: *.ingest.sentry.io; script-src 'unsafe-inline' 'nonce-0CZXs3ir_CdkGTe4JpBoTw' 'self' 'report-sample' siteminder.okta.com *.oktacdn.com; style-src 'unsafe-inline' 'nonce-0CZXs3ir_CdkGTe4JpBoTw' 'self' 'report-sample' siteminder.okta.com *.oktacdn.com; frame-src 'self' siteminder.okta.com siteminder-admin.okta.com login.okta.com *.vidyard.com com-okta-authenticator:; img-src 'self' siteminder.okta.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: blob:; font-src 'self' siteminder.okta.com data: *.oktacdn.com fonts.gstatic.com; frame-ancestors 'self' https://tools.siteminder.systems https://siteminder--uat--c.sandbox.vf.force.com https://siteminder.vf.force.com https://siteminder.lightning.force.com https://siteminder--uat.sandbox.lightning.force.com https://tableau.siteminder.com 1
default-src 'self'; script-src 'self' https://widget.rss.app https://static.cloudflareinsights.com https://www.googletagmanager.com https://*.google-analytics.com https://js-agent.newrelic.com https://op3static2.oktacdn.com https://analytics.imirwin.com https://code.jquery.com https://assets.adobedtm.com 'unsafe-eval' 'unsafe-inline' https://api.ipstack.com https://assets.adoberesources.net https://*.cludo.com https://munchkin.marketo.net https://*.vidyard.com https://*.marketo.com https://snap.licdn.com https://static.addtoany.com https://*.google.com https://*.adtrafficquality.google https://*.googleadservices.com https://*.awswaf.com https://*.nr-data.net https://*.enactmi.com https://*.fullstory.com https://enactmi.com; style-src 'self' https://op3static2.oktacdn.com https://fonts.googleapis.com https://use.typekit.net https://p.typekit.net 'unsafe-inline' https://*.cludo.com https://netdna.bootstrapcdn.com https://*.marketo.com https://*.google.com https://*.awswaf.com https://*.fontawesome.com https://enactmi.com; img-src 'self' https://www.googletagmanager.com https://op3static2.oktacdn.com https://op3static.oktacdn.com https://api.nasdaqomx.wallst.com https://thomsonreuterscorporategroupweb.sc.omtrdc.net https://assets.adoberesources.net data: blob: https://*.marketo.com https://*.google.com https://*.doubleclick.net https://*.enactmi.com https://*.cludo.com https://*.vidyard.com https://*.linkedin.com https://*.licdn.com https://syndicatedsearch.goog https://*.adtrafficquality.google https://*.googleadservices.com https://new-content.mortgageinsurance.genworth.com https://enactmi.com; font-src 'self' https://op3static2.oktacdn.com https://fonts.gstatic.com https://use.typekit.net https://*.enactmi.com data: https://netdna.bootstrapcdn.com https://*.fontawesome.com; connect-src 'self' https://*.google-analytics.com https://project-hummingbird-hummingbird-websocket-nodejs-de-112831.cloud.adobe.io https://px.ads.linkedin.com https://www.googletagmanager.com https://dpm.demdex.net https://analytics.imirwin.com https://*.enactmi.com https://*.marketo.com https://*.cludo.com https://assets.adoberesources.net https://703-nww-341.mktoresp.com https://*.mktoutil.com https://lib-us-2.brilliantcollector.com https://*.vidyard.com https://*.google.com https://*.adtrafficquality.google https://*.googleadservices.com https://syndicatedsearch.goog https://*.awswaf.com https://*.nr-data.net https://*.doubleclick.net wss://*.cloud.adobe.io https://*.fullstory.com https://enactmi.com; frame-src 'self' https://login.okta.com https://*.vidyard.com https://rss.app https://static.addtoany.com https://*.google.com https://*.doubleclick.net https://syndicatedsearch.goog https://*.adtrafficquality.google; child-src 'self'; media-src 'self' https://*.vidyard.com; manifest-src 'self'; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://enactmi.com https://rss.app https://static.addtoany.com; report-uri https://csp-reports.enactmi.com/r/misite; 1
report-to kmstools.com; font-src *.fontawesome.com maxcdn.bootstrapcdn.com data: *.postescanada-canadapost.ca https://fonts.bunny.net *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.shift4.com *.shift4test.com *.i4go.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ data: *.google.com *.gstatic.com *.facebook.com *.postescanada-canadapost.ca c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.shift4.com *.shift4test.com *.i4go.com *.weltpixel.com https://*.online-metrix.net https://imgs.signifyd.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com *.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com *.gstatic.com *.googleapis.com *.signifyd.com *.online-metrix.net *.google.com *.paypal.com *.googletagmanager.com *.analytics.yahoo.com s.ytimg.com *.postescanada-canadapost.ca kmstools.com *.kmstools.com *.cloudfront.net *.bing.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://firebasestorage.googleapis.com *.shift4.com *.shift4test.com *.i4go.com https://imgs.signifyd.com https://*.online-metrix.net *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.eigendev.com *.googleapis.com *.gstatic.com *.facebook.net *.googleapis.net *.googletagmanager.com *.google.com data: *.postescanada-canadapost.ca *.newrelic.com *.nr-data.net *.searchspring.net *.trustpilot.com *.3cx.com *.my3cx.ca:5001 *.tctm.co *.bing.com *.clickcease.com *.validate.audio *.kmstools.com snapui.searchspring.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.avada.io *.shopify.com *.shift4.com *.shift4test.com *.i4go.com https://cdn-scripts.signifyd.com https://imgs.signifyd.com https://h64.online-metrix.net *.googleadservices.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com *.gstatic.com *.googleapis.com *.postescanada-canadapost.ca *.searchspring.net unsafe-inline assets.braintreegateway.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com maps.googleapis.com *.googleapis.com *.google-analytics.com *.nr-data.net *.doubleclick.net *.signifyd.com *.searchspring.io *.postescanada-canadapost.ca *.3cx.com *.my3cx.ca:5001 *.validate.audio *.kmstools.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://get.geojs.io *.avada.io *.shift4.com *.shift4test.com *.i4go.com https://imgs.signifyd.com *.analytics.google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-TAVbTNIZnpIPWMIBbtgYCw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://www.gstatic.com https://maps.googleapis.com https://js.authorize.net https://jstest.authorize.net https://sdk.privacy-center.org https://*.didomi.io https://connect.facebook.net https://bat.bing.com https://*.clarity.ms https://js.hs-scripts.com https://*.hs-scripts.com https://js.hsforms.net https://*.hsforms.com https://*.hubspot.com https://*.hs-analytics.net https://*.hsadspixel.net https://*.hscollectedforms.net https://*.hs-banner.com https://*.usemessages.com https://*.hsappstatic.net https://js.callrail.com https://cdn.callrail.com https://google.com https://apis.google.com https://recaptcha.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https://d1ai2uriddn4sw.cloudfront.net https://*.s3.us-east-1.amazonaws.com https://*.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://*.gstatic.com https://maps.googleapis.com https://www.facebook.com https://bat.bing.com https://bat.bing.net https://c.bing.com https://*.clarity.ms https://*.hubspot.com https://*.hs-analytics.net https://*.hsforms.com https://*.didomi.io https://*.hubspotusercontent-na2.net https://*.hubspotusercontent.com https://*.googlesyndication.com https://www.googletagmanager.com https://sdk.privacy-center.org https://connect.facebook.net https://stats.g.doubleclick.net; connect-src 'self' https://*.execute-api.us-east-1.amazonaws.com https://cognito-idp.us-east-1.amazonaws.com https://*.auth.us-east-1.amazoncognito.com https://*.algolia.net https://*.algolianet.com https://*.google-analytics.com https://*.analytics.google.com https://api.authorize.net https://api2.authorize.net https://apitest.authorize.net https://sdk.privacy-center.org https://api.privacy-center.org https://*.didomi.io https://*.clarity.ms https://*.hubspot.com https://*.hs-analytics.net https://maps.googleapis.com https://places.googleapis.com https://*.googlesyndication.com https://*.hscollectedforms.net https://*.hubapi.com https://bat.bing.com https://bat.bing.net https://analytics.google.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://www.googleadservices.com https://googleads.g.doubleclick.net https://js.authorize.net https://d1ai2uriddn4sw.cloudfront.net https://www.google.com https://www.googletagmanager.com https://*.hsforms.com https://*.s3.us-east-1.amazonaws.com https://www.facebook.com https://js.callrail.com https://cdn.callrail.com https://google.com https://js-na2.hs-scripts.com https://hubspot-forms-static-embed.s3.amazonaws.com; frame-src 'self' https://js.authorize.net https://jstest.authorize.net https://*.didomi.io https://td.doubleclick.net https://www.googletagmanager.com https://*.hubspot.com https://www.google.com https://js.hsforms.net https://www.facebook.com https://google.com https://recaptcha.net; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com; frame-ancestors 'none'; report-uri https://tt3ohjunae.execute-api.us-east-1.amazonaws.com/csp-report; report-to csp-endpoint 1
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' https://plausible.io https://tracker.metricool.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https://cdn.sanity.io; media-src 'self' https://cdn.sanity.io; connect-src 'self' https://plausible.io https://tracker.metricool.com https://*.ingest.sentry.io https://*.api.sanity.io https://*.apicdn.sanity.io; frame-src https://www.youtube.com https://youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.dailymotion.com https://link.brightcove.com https://players.brightcove.net https://www.kaltura.com https://rudo.video https://videos.domainepublic.net https://www.wat.tv https://static01.nyt.com https://w.soundcloud.com https://html5-player.libsyn.com https://open.spotify.com https://anchor.fm https://castbox.fm https://embed.acast.com https://embeds.audioboom.com https://embed.podcasts.apple.com https://www.ivoox.com https://emp.bbc.co.uk https://www.cbc.ca https://www.rts.ch https://tp.srgssr.ch https://www.franceculture.fr https://player.canalplus.fr https://docs.google.com https://www.slideshare.net https://embed-ssl.ted.com https://www.flickr.com https://magic.piktochart.com https://embed.readymag.com https://www.surveymonkey.com https://www.un.org https://www.facebook.com 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self' https://the-mom-project.myhelcim.com https://work.themomproject.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.themomproject.com https://us.posthog.com https://www.googletagmanager.com https://www.google-analytics.com https://js.hs-scripts.com https://*.hs-scripts.com https://*.hubspot.com https://*.hs-analytics.net https://*.hscollectedforms.net https://*.hsforms.net https://snap.licdn.com https://cdn.cookielaw.org https://*.onetrust.com https://jsd-widget.atlassian.com https://www.google.com https://www.gstatic.com https://www.recaptcha.net; style-src 'self' 'unsafe-inline' https://*.themomproject.com https://*.onetrust.com; img-src 'self' data: blob: https:; font-src 'self' data: https://*.themomproject.com; connect-src 'self' https://*.themomproject.com https://us.posthog.com https://us.i.posthog.com https://api.honeybadger.io https://faro-collector-prod-us-east-0.grafana.net https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://*.hubspot.com https://*.hs-analytics.net https://px.ads.linkedin.com https://*.onetrust.com https://geolocation.onetrust.com https://www.google.com https://www.recaptcha.net; frame-src 'self' https://www.google.com https://recaptcha.google.com https://www.recaptcha.net https://jsd-widget.atlassian.com https://*.onetrust.com https://js.stripe.com https://hooks.stripe.com; worker-src 'self' blob:; manifest-src 'self'; report-uri /api/csp/report; report-to csp-endpoint 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com maxcdn.bootstrapcdn.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.monetico-services.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.monetico-services.com *.google.com/ https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://firebasestorage.googleapis.com https://www.magezon.com https://www.mollie.com https://pprod.snowbeach.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.google.com/ https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.avada.io *.shopify.com js.mollie.com pay.google.com applepay.cdn-apple.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com https://fonts.bunny.net https://cdnjs.cloudflare.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.monetico-services.com https://maps.googleapis.com https://player.vimeo.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-_7KuvAmewo5pOu341qrHlg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; base-uri 'self'; frame-ancestors 'self'; object-src 'none'; img-src 'self' data: blob: https:; media-src 'self' blob: https:; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' data: https://challenges.cloudflare.com; frame-src https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; form-action 'self' https://bill.ccbill.com 1
default-src 'self';   base-uri 'self';   object-src 'none';   frame-ancestors 'self';    script-src     'self'     'unsafe-inline'     https://consent.cookiebot.com     https://consentcdn.cookiebot.com     https://www.googletagmanager.com     https://scripts.clarity.ms     https://www.clarity.ms     https://bat.bing.com     https://ajax.googleapis.com     https://js.monitor.azure.com     https://use.typekit.net;    style-src     'self'     'unsafe-inline'     https://www.googletagmanager.com     https://fonts.googleapis.com     https://use.typekit.net;    img-src     'self'     data:     blob:     https://shop.lesjofors.com     https://p.typekit.net     https://www.googletagmanager.com     https://pagead2.googlesyndication.com     https://fonts.gstatic.com     https://bat.bing.com;    font-src     'self'     data:     https://use.typekit.net     https://fonts.gstatic.com;    connect-src     'self'     https://region1.google-analytics.com     https://www.google.com     https://www.googletagmanager.com     https://*.clarity.ms     https://bat.bing.net     https://bat.bing.com     https://*.applicationinsights.azure.com     https://js.monitor.azure.com     https://ad.doubleclick.net     https://googleads.g.doubleclick.net     https://pagead2.googlesyndication.com     https://www.googleadservices.com     https://consent.cookiebot.com     https://consentcdn.cookiebot.com;    frame-src     'self'     https://consentcdn.cookiebot.com;    manifest-src 'self';   worker-src 'self' blob:; report-uri https://www.lesjofors.com/api/csp/report 1
font-src *.gstatic.com *.typekit.net https://*klaviyo.com *.jaguarlandroverclassic.com *.jaguar.co.uk *.landrover.co.uk https://*.klevu.com https://static.klaviyo.com https://modules.jaguarlandrover.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.klevu.com *.ksearchnet.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.twitter.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com https://*.doubleclick.net https://www.google.com https://*.hotjar.com https://*.freshchat.com *.visualwebsiteoptimizer.com *.jaguarlandroverclassic.com *.jaguar.co.uk *.landrover.co.uk https://*.onetrust.com *.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://plumrocket.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://*.doubleclick.net https://www.google.com https://www.google.co.uk *.cloudfront.net *.landrover.co.uk *.jaguar.co.uk https://*.postcodeanywhere.co.uk https://*.clarity.ms https://*.bing.com *.visualwebsiteoptimizer.com *.jaguarlandroverclassic.com https://*.klaviyo.com https://*.facebook.net https://*.facebook.com https://*.thunderhead.com https://proof3.co https://cdn.cookielaw.org https://ade.googlesyndication.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://*.postcodeanywhere.co.uk https://www.googletagmanager.com https://www.google.com *.gstatic.com https://*.hotjar.com https://*.doubleclick.net https://secure.leadforensics.com https://*.googleapis.com https://www.gstatic.com https://googleads.g.doubleclick.net https://script.crazyegg.com https://*.freshchat.com https://*.cookiebot.com https://*.coremetrics.com https://*.bing.com https://*.clarity.ms https://*.landrover.co.uk https://*.jaguar.co.uk *.visualwebsiteoptimizer.com https://*.cdn.thunderhead.com https://*.thunderhead.com https://cdn.mida.so https://openfpcdn.io https://unpkg.com https://cdn.cookielaw.org https://*.onetrust.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.klevu.com *.ksearchnet.com player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://*.googleapis.com *.typekit.net https://*.postcodeanywhere.co.uk https://*.freshchat.com *.jaguarlandroverclassic.com *.jaguar.co.uk *.landrover.co.uk https://cdn.cookielaw.org https://*.onetrust.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com unsafe-inline assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://*.hotjar.com https://*.adobedc.net https://*.nr-data.net https://*.hotjar.io https://*.doubleclick.net https://*.google-analytics.com https://script.crazyegg.com https://*.postcodeanywhere.co.uk https://*.clarity.ms https://*.cookiebot.com *.visualwebsiteoptimizer.com *.jaguarlandroverclassic.com *.jaguar.co.uk *.landrover.co.uk https://*.mida.so https://*.thunderhead.com https://cdn.cookielaw.org https://pagead2.googlesyndication.com https://*.onetrust.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google.com google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; script-src 'self' 'report-sample' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://static.addtoany.com https://unpkg.com https://www.google.com https://www.recaptcha.net; script-src-elem * 'unsafe-inline'; style-src 'self' 'report-sample' 'unsafe-inline' cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src-elem * 'unsafe-inline'; webrtc 'allow'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com data: fonts.googleapis.com *.stape.io *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.dotdigital-pages.com *.dotdigital.com www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cookiebot.com *.cookiebot.eu business.facebook.com libs.hipay.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.stape.io c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com *.trackedlink.net www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com www.google.it *.cookiebot.com *.cookiebot.eu ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com business.facebook.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.doubleclick.net *.stape.io flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com *.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com *.gstatic.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cookiebot.com *.cookiebot.eu *.tiktok.com *.matomo.cloud *.paypal.com https://payments-sdk.live.commerce-payment-services.com chimpstatic.com downloads.mailchimp.com *.list-manage.com business.facebook.com cdn.lordicon.com js-agent.newrelic.com bam.nr-data.net secure-gateway.hipay-tpp.com mpsnare.iesnare.com libs.hipay.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.googletagmanager.com *.doubleclick.net *.stape.io maps.googleapis.com www.paypalobjects.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com libs.hipay.com *.googleapis.com *.googletagmanager.com *.stape.io *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com stats.g.doubleclick.net googleads.g.doubleclick.net *.google-analytics.com *.googlesyndication.com *.cookiebot.com *.cookiebot.eu *.analytics.tiktok.com *.stape.net business.facebook.com cdn.lordicon.com stage-data.hipay.com bam.nr-data.net *.doubleclick.net *.stape.io www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; img-src 'self' data: blob: https://res.cloudinary.com https://images.ctfassets.net https://assets.ctfassets.net https://downloads.ctfassets.net https://*.basemaps.cartocdn.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.cdnfonts.com; font-src 'self' https://fonts.gstatic.com https://fonts.cdnfonts.com; script-src 'self' 'unsafe-inline' https://www.google.com https://www.gstatic.com; connect-src 'self' https://*.algolia.net https://*.algolianet.com https://portail.support.snuipp.fr https://api.snuipp.fr https://apis-snuipp-gateway-9j1ixd8s.ew.gateway.dev; frame-src https://www.google.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-EtnX9I0rSUwwO3NGtJ8-Mg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.dnky.co webchat.dotdigital.com maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-BxlUp8nVBq-HEk9wVLLpbg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-bQzyNeKIIFtBwTr6qN33Cg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net fonts.googleapis.com https://static.payzen.eu/static/ *.kampyle.com *.medallia.com *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://secure.payzen.eu/vads-payment/ https://api.payzen.eu/api-payment/ https://static.payzen.eu/static/ www.facebook.com *.google.be connect.facebook.net *.youtube.com *.salesforce.com 'self' 'unsafe-inline'; frame-ancestors self www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com https://secure.payzen.eu/vads-payment/ https://static.payzen.eu/static/ www.google.com service.force.com *.google.be decathlonpro.my.salesforce.com decathlonpro.my.site.com *.kampyle.com *.medallia.com *.sandbox.my.site.com www.gstatic.com apis.google.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io magefan.com cm.magefan.com *.hsforms.net *.hsforms.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com https://secure.payzen.eu/static/latest/images/type-carte/ https://static.payzen.eu/static/ https://secure.payzen.eu/vads-payment/ *.decapro.com contents.mediadecathlon.com *.decathlonpro.fr *.facebook.com www.google.fr *.contentsquare.net pixel.advertising.com/ups/55980/ *.thank-you.io *.atinternet-solutions.com *.atinternet.io *.atinternet.com *.aticdn.net *.ati-host.net *.xiti.com status.piano.io *.zdassets.com *.getbeamer.com *.beyable.com *.doubleclick.net *.google.be *.google.ch *.google.ca *.google.it *.google.co.ma bat.bing.com *.privacy-center.org *.y-track.com *.googletagmanager.com *.kampyle.com *.medallia.com media.decathlonpro.fr *.facebook.net *.disqus.com flagpedia.net 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://rum.hlx.page *.hsforms.net *.hsforms.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https://api.payzen.eu/api-payment/ https://static.payzen.eu/static/ *.force.com *.salesforceliveagent.com *.privacy-center.org *.cloudfront.net *.facebook.net *.contentsquare.net decathlonpro.my.salesforce.com beyableprod.blob.core.windows.net *.beyable.com *.thank-you.io *.atinternet-solutions.com *.atinternet.io *.atinternet.com *.aticdn.net *.ati-host.net *.xiti.com status.piano.io *.zdassets.com *.getbeamer.com *.cloudflare.com browser-intake-datadoghq.eu *.datadoghq-browser-agent.com *.my.site.com *.my.salesforce-scrt.com *.sandbox.my.site.com *.sandbox.my.salesforce-scrt.com *.sandbox.my.salesforce.com *.kameleoon.eu *.kameleoon.io *.kameleoon.com *.y-track.com *.googletagmanager.com *.kampyle.com *.medallia.com *.amplitude.com rum.hlx.page *.booxi.eu *.disqus.com *.googleapis.com *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.payzen.eu/static/ *.my.site.com *.sandbox.my.site.com decathlonpro.my.salesforce.com *.force.com decathlonpro--uat.sandbox.my.salesforce.com *.googletagmanager.com *.kampyle.com *.medallia.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io t.elasticsuite.io *.hsforms.net *.hsforms.com maps.googleapis.com https://secure.payzen.eu/vads-payment/ https://api.payzen.eu/api-payment/ *.blob.core.windows.net front.lytics.beyable.com *.doubleclick.net *.contentsquare.net *.thank-you.io *.atinternet-solutions.com *.atinternet.io *.atinternet.com *.aticdn.net *.ati-host.net *.xiti.com status.piano.io *.zdassets.com *.getbeamer.com browser-intake-datadoghq.eu *.datadoghq-browser-agent.com *.privacy-center.org *.my.site.com *.my.salesforce-scrt.com *.sandbox.my.site.com *.sandbox.my.salesforce-scrt.com decathlonpro.force.com *.kameleoon.eu *.kameleoon.io *.kameleoon.com *.y-track.com *.kampyle.com *.medallia.com *.googlesyndication.com *.amplitude.com www.facebook.com wfltqdt.pa-cd.com rum.hlx.page http://dpm.demdex.net https://www.google.com https://www.gstatic.com www.gstatic.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src https://secure.payzen.eu/vads-payment/ https://api.payzen.eu/api-payment/ https://static.payzen.eu/static/ *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; media-src 'self' https:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.facebook.com; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * api.razorpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://cdn.eleczo.com blob: www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com cdn.razorpay.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com checkout.razorpay.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://cdnjs.cloudflare.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://cdn.eleczo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com lumberjack.razorpay.com lumberjack-metrics.razorpay.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' https://www.googletagmanager.com https://wsmcdn.audioeye.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; font-src 'self' https://fonts.gstatic.com/ https://wsv3cdn.audioeye.com https://cdnjs.cloudflare.com data:; img-src 'self' data: https:; connect-src 'self' https://analytics.google.com https://www.google-analytics.com; report-uri https://cspreport.ecampusontario.ca 1
script-src 'nonce-86b5/e77nynE5apKpBlnDQ==' 'strict-dynamic'; object-src 'none'; base-uri 'none'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' blob: https:; worker-src 'self' blob:; 1
font-src https://fonts.gstatic.com *.kueskipay.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.kueskipay.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.kueskipay.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe *.sandbox.paypal.com *.paypalobjects.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://troquer.zendesk.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.kueskipay.com *.google.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe *.sandbox.paypal.com *.paypalobjects.com *.gstatic.com *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://sealserver.trustwave.com *.zdassets.com https://diffuser-cdn.app-us1.com https://prism.app-us1.com https://api.smooch.io *.signifyd.com https://h64.online-metrix.net https://embed.typeform.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.kueskipay.com *.googletagmanager.com *.mxpnl.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe *.sandbox.paypal.com *.paypalobjects.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://fonts.googleapis.com *.typeform.com unsafe-inline assets.braintreegateway.com *.kueskipay.com *.googletagmanager.com *.mxpnl.com *.fontawesome.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://troquer.zendesk.com *.zdassets.com wss://api.smooch.io *.signifyd.com *.typeform.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.kueskipay.com *.doubleclick.net *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe *.sandbox.paypal.com *.paypalobjects.com *.google-analytics.com *.facebook.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.creativecdn.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-ZEdGXFKBD4GcmFY4Gy8K6w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-sgtJx9Rhjwk1logKjRNMbg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'self'; script-src 'self' 'unsafe-inline' https://statistiek.rijksoverheid.nl/; script-src-attr 'self'; script-src-elem 'self' 'unsafe-inline' https://statistiek.rijksoverheid.nl/matomo.js; style-src 'self'; style-src-elem 'self' 'unsafe-inline'; frame-ancestors 'self'; report-uri https://www.examenblad.nl/log-report-uri/reportOnly 1
font-src use.fontawesome.com maxcdn.bootstrapcdn.com fonts.gstatic.com *.fontawesome.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.weltpixel.com *.yotpo.com swellrewards.com *.swellrewards.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.wesupply.xyz https://wesupplylabs.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.yotpo.com swellrewards.com *.swellrewards.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ polyfill.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.yotpo.com swellrewards.com *.swellrewards.com s7.addthis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.cloudflare.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://static.klaviyo.com *.yotpo.com swellrewards.com *.swellrewards.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.fontawesome.com *.nosto.com *.nos.to unsafe-inline assets.braintreegateway.com tagmanager.google.com *.stripe.network *.stripecdn.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.yotpo.com swellrewards.com *.swellrewards.com *.ipinfo.io ekr.zdassets.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://www.google-analytics.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.yektanet.com https://van.najva.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; media-src 'self' blob: https:; connect-src 'self' https: wss:; frame-src 'self' https:; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-yZbsb7/w3VOU4anXH1g+' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'report-sample';report-uri https://csp.withgoogle.com/csp/scfe 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://formspree.io https://apicloudflarewndml.dentistrybrandsllc.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://challenges.cloudflare.com https://c.pubguru.net https://*.pubguru.net https://cdn.iubenda.com https://www.iubenda.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.iubenda.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https:; connect-src 'self' https://formspree.io https://apicloudflarewndml.dentistrybrandsllc.com https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://*.pubguru.net https://www.iubenda.com https://cdn.iubenda.com; frame-src 'self' https://challenges.cloudflare.com https://www.googletagmanager.com https://www.iubenda.com; child-src 'self' https://challenges.cloudflare.com https://www.iubenda.com 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cash-f.squarecdn.com https://*.gstatic.com *.googleapis.com *.klevu.com *.ksearchnet.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.adyen.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.adyen.com *.luckyorange.com *.visualwebsiteoptimizer.com *.googletagmanager.com *.google.com/ js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * https://images.unsplash.com https://*.gstatic.com *.adyen.com *.googleapis.com dev.visualwebsiteoptimizer.com *.luckyorange.com *.googletagmanager.com *.google-analytics.com *.ksearchnet.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.feedoptimise.com cdn.feedoptimise.com *.klevu.com magefan.com cm.magefan.com *.mageside.com mageside.com https://www.magezon.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.xtento.com cdn.xtento.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://maps.googleapis.com *.googleapis.com *.gstatic.com gtm.bamford.com *.googletagmanager.com *.google-analytics.com dev.visualwebsiteoptimizer.com tools.luckyorange.com loader.usehero.com cdn.usehero.com *.cookiebot.com static.shopmy.us *.azurewebsites.net assets-horizon-online.azurewebsites.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.feedoptimise.com cdn.feedoptimise.com *.klevu.com *.ksearchnet.com *.google.com/ js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com www.xtento.com cdn.xtento.com tagmanager.google.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app https://fonts.googleapis.com/ tools.luckyorange.com dev.visualwebsiteoptimizer.com *.ksearchnet.com tagmanager.google.com *.adyen.com https://static.klaviyo.com *.klevu.com assets.braintreegateway.com fonts.google.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * https://maps.googleapis.com https://player.vimeo.com *.adyen.com *.googleapis.com api.addressy.com *.googletagmanager.com *.google-analytics.com *.luckyorange.com dev.visualwebsiteoptimizer.com api.usehero.com apiv3.shopmy.us *.azurewebsites.net *.horizoncdp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.analytics.google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://e7666a6e-696e-4f26-8104-f8e2e545cfd6.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://donwv77yvwvdu.cloudfront.net https://*.googletagmanager.com https://*.google-analytics.com https://www.google.com https://www.googleadservices.com https://cdn.moengage.com https://*.moengage.com https://accounts.google.com https://apis.google.com https://connect.facebook.net https://*.facebook.com https://static.cloudflareinsights.com https://maps.googleapis.com https://translate.google.com https://translate.googleapis.com https://translate-pa.googleapis.com https://googleads.g.doubleclick.net https://pay.google.com; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https://www.google.com https://*.facebook.com https://*.googletagmanager.com https://accounts.google.com; media-src 'self' https://res.cloudinary.com; report-uri /csp-report 1
font-src *.dickson-constant.com *.gstatic.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action *.dickson-constant.com *.facebook.com *.sips-services.com *.sogenactif.com sogecommerce.societegenerale.eu 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com www.googletagmanager.com *.dickson-constant.com *.facebook.com *.criteo.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com *.dickson-constant.com *.facebook.net *.facebook.com *.google.fr *.google.com *.sharethis.com maps.googleapis.com maps.google.com maps.gstatic.com ad.doubleclick.net magefan.com cm.magefan.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.dickson-constant.com *.facebook.net *.clarity.ms *.google.com *.criteo.com *.sharethis.com maps.googleapis.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.dickson-constant.com https://fonts.googleapis.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.dickson-constant.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com vimeo.com *.dickson-constant.com region1.google-analytics.com stats.g.doubleclick.net google.com *.google.com *.criteo.com *.clarity.ms *.sharethis.com maps.googleapis.com *.facebook.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' jhnet.okta.com sso.jhnet.com *.oktacdn.com; connect-src 'self' jhnet.okta.com jhnet-admin.okta.com sso.jhnet.com *.oktacdn.com *.mixpanel.com *.mapbox.com jhnet.kerberos.okta.com jhnet.mtls.okta.com *.authenticatorlocalprod.com:8769 http://localhost:8769 http://127.0.0.1:8769 *.authenticatorlocalprod.com:65111 http://localhost:65111 http://127.0.0.1:65111 *.authenticatorlocalprod.com:65121 http://localhost:65121 http://127.0.0.1:65121 *.authenticatorlocalprod.com:65131 http://localhost:65131 http://127.0.0.1:65131 *.authenticatorlocalprod.com:65141 http://localhost:65141 http://127.0.0.1:65141 *.authenticatorlocalprod.com:65151 http://localhost:65151 http://127.0.0.1:65151 https://oinmanager.okta.com data: *.ingest.sentry.io; script-src 'unsafe-inline' 'unsafe-eval' 'self' 'report-sample' jhnet.okta.com sso.jhnet.com *.oktacdn.com; style-src 'unsafe-inline' 'self' 'report-sample' jhnet.okta.com sso.jhnet.com *.oktacdn.com; frame-src 'self' jhnet.okta.com jhnet-admin.okta.com sso.jhnet.com login.okta.com *.vidyard.com com-okta-authenticator:; img-src 'self' jhnet.okta.com sso.jhnet.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: blob:; font-src 'self' jhnet.okta.com sso.jhnet.com data: *.oktacdn.com fonts.gstatic.com; frame-ancestors 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.agechecker.net *.userway.org use.fontawesome.com maxcdn.bootstrapcdn.com d1cwup7r903a1d.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com checkout.sezzle.com sandbox.checkout.sezzle.com tracking.sezzle.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com js.mollie.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.agechecker.net *.userway.org blob: *.certcapture.com https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.simpli.fi media.sezzle.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.agechecker.net cdn.userway.org *.certcapture.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.fraudlabspro.com www.clarity.ms *.clarity.ms tag.simpli.fi *.simpli.fi checkout-sdk.sezzle.com sandbox.checkout-sdk.sezzle.com widget.sezzle.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com js.mollie.com pay.google.com applepay.cdn-apple.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com cdn.routeapp.io fonts.googleapis.com *.amplitude.com cdn.jsdelivr.net protect-quote-q.route.com protection-widget.route.com stage-protection-widget.route.com protect-lightning-bolt-widget.route.com d3od5si8vgcekb.cloudfront.net ddbmicszvqxcg.cloudfront.net unpkg.com wobs.route.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.agechecker.net cdn.userway.org *.certcapture.com https://static.klaviyo.com fonts.cdnfonts.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com maxcdn.bootstrapcdn.com assets.braintreegateway.com d1cwup7r903a1d.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.agechecker.net *.userway.org *.certcapture.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.clarity.ms *.simpli.fi gateway.sezzle.com sandbox.gateway.sezzle.com media.sezzle.com widget.sezzle.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com api.route.com *.amplitude.com cdn.jsdelivr.net protect-quote-q.route.com protection-widget.route.com stage-protection-widget.route.com d3od5si8vgcekb.cloudfront.net protect-lightning-bolt-widget.route.com ddbmicszvqxcg.cloudfront.net unpkg.com wobs.route.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-RdWMNtejIR57gL09Rs0IAQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src-elem https://*freeprivacypolicy.com; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com cash-f.squarecdn.com *.googleapis.com data: https://*.gstatic.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * www.google.com https://*.doubleclick.net https://*.google.com https://*.hotjar.com https://*.braintreegateway.com https://*.paypal.com https://*.trustpilot.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.twitter.com *.weltpixel.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * *.googleapis.com https://*.doubleclick.net https://*.google.com https://*.google.co.uk *.cloudfront.net https://*.paypal.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://*.pcapredict.com/js/sensor.js https://www.googletagmanager.com https://www.google.com https://*.hotjar.com https://*.doubleclick.net https://secure.leadforensics.com https://*.googleapis.com https://*.cloudfront.net https://*.google-analytics.com https://*.paypal.com https://*.trustpilot.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com tagmanager.google.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app https://*.googleapis.com *.typekit.net https://*.cloudfront.net assets.braintreegateway.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://*.cloudfront.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.googleapis.com https://*.hotjar.com https://*.adobedc.net https://*.nr-data.net https://*.freshdesk.com wss://*.hotjar.com https://*.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cloudflare.com *.twitter.com *.twimg.com analytics.google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' *.onetrust.com cdn.cookielaw.org cookie-cdn.cookiepro.com cdn.parsely.com maps.googleapis.com stats.wp.com *.google.com www.googletagmanager.com www.gstatic.com www.google-analytics.com googleads.g.doubleclick.net https://cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js; style-src 'self' 'unsafe-inline' fonts.googleapis.com; object-src 'self'; base-uri 'self'; connect-src 'self' *.onetrust.com cdn.cookielaw.org cookie-cdn.cookiepro.com pagead2.googlesyndication.com maps.googleapis.com mapsresources-pa.googleapis.com *.google.com www.google-analytics.com api.parsely.com; font-src 'self' data: fonts.gstatic.com; frame-src 'self' heyzine.com www.google.com player.vimeo.com; img-src 'self' data: pagead2.googlesyndication.com drive-thirdparty.googleusercontent.com maps.gstatic.com mapsresources-pa.googleapis.com cdn.cookielaw.org cdn.weglot.com p1.parsely.com pixel.wp.com googleads.g.doubleclick.net; manifest-src 'self'; media-src 'self'; worker-src 'none' 1
object-src 'none';base-uri 'self';script-src 'nonce-QZSnNwXGFwv7GqvWIluQVg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-UDPIdaGHt3IabYDM9csHYQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/  https://widget.trustpilot.com;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://appleid.cdn-apple.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com *.myheritage.lu https://www.myheritage.lu  'unsafe-eval' 'nonce-dcc6b8efa4728d6dc5028beec6c8ff98' 'strict-dynamic' https://widget.trustpilot.com https://invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style  https://widget.trustpilot.com;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io https://www.google.com/recaptcha/enterprise/* https://www.google.com/recaptcha/enterprise/ https://www.google.com/recaptcha/enterprise/clr https://www.google.com/recaptcha/ https://maps.googleapis.com https://people.googleapis.com https://translate-pa.googleapis.com *.myheritage.lu https://widget.trustpilot.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:  https://widget.trustpilot.com https://*.trustpilot.com;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=report&canonical_page_id=/company/home/ 1
object-src 'none';base-uri 'self';script-src 'nonce-hKcsmQJJRAPwf-deD0morA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' www.zikg.eu; img-src *; style-src 'unsafe-inline' www.zikg.eu fonts.googleapis.com cdnjs.cloudflare.com; script-src 'unsafe-inline' 'unsafe-eval' www.zikg.eu; font-src 'self' data: www.zikg.eu fonts.gstatic.com fonts.googleapis.com cdnjs.cloudflare.com; 1
default-src 'self'; script-src 'self' https://widget.intercom.io https://js.intercomcdn.com https://assets.skalin.io https://eu-assets.i.posthog.com https://www.googletagmanager.com https://maps.googleapis.com https://cdn.platform.openai.com 'unsafe-eval' 'nonce-gfTDJKmbDiWRdHyYPq6AcA=='; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net; img-src 'self' data: https://storage.googleapis.com https://lh3.googleusercontent.com https://maps.gstatic.com https://www.googletagmanager.com https://collect.skalin.io; connect-src 'self' https://api.intercom.io https://api-iam.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://eu.i.posthog.com https://www.googletagmanager.com https://maps.googleapis.com https://tracking.skalin.io https://storage.googleapis.com; frame-src https://www.googletagmanager.com; object-src 'none'; worker-src blob: 1
default-src 'self'; script-src 'self'; style-src 'self'; report-uri /csp-report; 1
default-src https: data: wss: 'unsafe-inline' 'unsafe-eval'; 1
default-src 'self'; font-src 'self' https://fonts.gstatic.com; img-src 'self' https://*.googleapis.com https://*.gstatic.com *.google.com  *.googleusercontent.com data: https://www.gravatar.com/avatar/ https://*.google-analytics.com https://*.googletagmanager.com blob:; script-src 'self' https://*.googletagmanager.com 'nonce-679ba67a319c829283c0c72773db6322' https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com blob:; style-src 'self' 'nonce-679ba67a319c829283c0c72773db6322' https://fonts.googleapis.com; worker-src 'self' blob:; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googleapis.com *.google.com https://*.gstatic.com  data: blob:; frame-ancestors 'self'; 1
default-src 'self';                     script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.moengage.com https://cdn.jsdelivr.net 'unsafe-inline' 'unsafe-eval';                     style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com;                     img-src 'self' https: data:;                     font-src 'self' https: data:;                     connect-src 'self' https:;                     frame-ancestors 'self' https://www.geojit.com/;                     object-src 'none';                     base-uri 'self';                     form-action 'self';                     upgrade-insecure-requests;                     report-to csp-endpoint;   1
object-src 'none';base-uri 'self';script-src 'nonce-v9mgdIj7UHAhVYpowAQG_A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-lnHmrfeMdR6Dt3LnK6Qm-Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com 'self'; frame-src bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com *.youtube.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com *.authorize.net assets.secure.checkout.visa.com sandbox.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://code.responsivevoice.org *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; font-src data: https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud; script-src 'self' https://*.bazaarvoice.com https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://exc.mm.dm-drogeriemarkt.bg https://mpsnare.iesnare.com https://omt.dm-drogeriemarkt.bg https://tags.tiqcdn.com https://web.cmp.usercentrics.eu https://www.dm-drogeriemarkt.bg https://www.google.com https://www.google.com/recaptcha/ https://www.gstatic.com https://www.gstatic.com/recaptcha/; worker-src 'self' blob:; connect-src 'self' https://*.bazaarvoice.com https://aggregator.service.usercentrics.eu https://api.mapbox.com https://api.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://browser-intake-datadoghq.eu https://cart-recos.services.dmtech.com https://cdcs.usercentrics.eu https://collect.tealiumiq.com https://consent-api.service.consent.usercentrics.eu https://consent-rt-ret.service.consent.usercentrics.eu https://consents.usercentrics.eu https://content-preview.apps.prod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://direct-collect.dy-api.eu https://direct.dy-api.eu https://dmpay-gateway.services.dmtech.com https://dy-api.eu https://editorial-content.dm-static.com https://events.mapbox.com https://exc.mm.dm-drogeriemarkt.bg https://frontend-tracking-infra-service.services.dmtech.com https://graphql.usercentrics.eu https://insights.algolia.io https://logs.browser-intake-datadoghq.eu https://maut-prod.services.dmtech.com https://maut-rls.nonprod.services.dmtech.com https://mpsnare.iesnare.com https://my-products-api.services.dmtech.com https://omacs.services.dmtech.com https://omc.dm-drogeriemarkt.bg https://predictive-shopping-service.services.dmtech.com https://product-based-recos.services.dmtech.com https://product-search.services.dmtech.com https://product-semantic-search.services.dmtech.com https://rcom-eu.dynamicyield.com https://recos-as-a-service.services.dmtech.com https://region1.google-analytics.com https://retail-media.services.dmtech.com https://rum.browser-intake-datadoghq.eu https://s2s.adjust.com https://signin.dm-drogeriemarkt.bg https://sos-prod.availability.services.dmtech.com https://staedtetour.dm-fb2.de https://stars.services.dmtech.com https://storage.googleapis.com/gift-card-builder-emergency-disabled-bucket/ https://store-data-service.services.dmtech.com https://store-order-service.services.dmtech.com https://v1.api.service.cmp.usercentrics.eu https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://zoe-shop-proxy-prod.services.dmtech.com https://kuba-prod.services.dmtech.com https://zoe-shop-proxy-prod.services.dmtech.com https://cartnext.services.dmtech.com https://dmcsm-proxy.prod.services.dmtech.com https://zoe-shop-proxy-prod.services.dmtech.com https://customer-helpcenter-prod.services.dmtech.com https://paint-prod.services.dmtech.com https://content.services.dmtech.com https://content-search-service-preview.apps.prod.gcp.dmtech.cloud https://content-search-service.services.dmtech.com https://products.dm.de https://pds-import-prod.apps.prod.gcp.dmtech.cloud https://shopping-list-prod.services.dmtech.com; media-src 'self'; style-src 'self' 'unsafe-inline' https://*.bazaarvoice.com https://api.tiles.mapbox.com https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud; form-action 'self' https://*.bazaarvoice.com https://apps.bazaarvoice.com https://checkout.dm-drogeriemarkt.bg https://giftcard-checkout.dm.de/api/checkout https://signin.dm-drogeriemarkt.bg; img-src 'self' blob: data: https://*.bazaarvoice.com https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://cdn-eu.dynamicyield.com https://composer.apps.nonprod.cf.dmtech.cloud https://content-preview.apps.prod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://editorial-content.dm-static.com https://exc.mm.dm-drogeriemarkt.bg https://i.ytimg.com https://images.podigee-cdn.net https://img.usercentrics.eu https://img.youtube.com/ https://media.dm-static.com https://photos-eu.bazaarvoice.com https://products.dm-static.com https://uct.service.usercentrics.eu https://content.services.dmtech.com; frame-ancestors 'self' https://account.dm-drogeriemarkt.bg https://app.datadoghq.eu https://checkout.dm-drogeriemarkt.bg https://content-preview.apps.prod.gcp.dmtech.cloud https://mobileapp.dm-drogeriemarkt.bg https://studio.dm-drogeriemarkt.com; frame-src 'self' https://*.bazaarvoice.com https://account.dm-drogeriemarkt.bg https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://cdn.podigee.com https://checkout.dm-drogeriemarkt.bg https://configurator.nuk.de https://gastfamilie.podigee.io https://geburtskanal-dm.podigee.io https://hey-familie.podigee.io https://kinderwunschsprechstunde.podigee.io https://mobileapp.dm-drogeriemarkt.bg https://player.podigee-cdn.net https://recaptcha.google.com/recaptcha/ https://sandbox.om.dm-drogeriemarkt.bg https://signin.dm-drogeriemarkt.bg https://web.cmp.usercentrics.eu https://www.google.com https://www.google.com/recaptcha/ https://www.youtube-nocookie.com; base-uri 'self' https://exc.mm.dm-drogeriemarkt.bg; child-src 'self' blob:; manifest-src 'self'; report-to csp-endpoint; report-uri /__csp-reports__ 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com www.apptrian.com facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://www.googletagmanager.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.trustpilot.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com *.trustpilot.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.googleapis.com *.gstatic.com *.trustpilot.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' https://challenges.cloudflare.com https://d318g7p3azvr44.cloudfront.net; object-src 'none'; base-uri 'none'; frame-src https://embed.settlar.io https://megaplay.buzz https://challenges.cloudflare.com; frame-ancestors 'none'; form-action 'self' https://appleid.apple.com https://accounts.google.com https://discord.com 1
font-src data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com self https://kreativhaus.s3.eu-central-1.amazonaws.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline' api.addressfinder.io consent.cookiebot.com consentcdn.cookiebot.com connect.facebook.net googleads.g.doubleclick.net snap.licdn.com *.clarity.ms *.google.com.au *.google.co.nz *.google.co.in *.google.com.fj *.google.co.th *.google.com.sg *.google.com.ph *.google-analytics.com *.googletagmanager.com *.ytimg.com *.youtube.com; script-src-elem 'self' 'unsafe-inline' api.addressfinder.io consent.cookiebot.com consentcdn.cookiebot.com connect.facebook.net googleads.g.doubleclick.net snap.licdn.com *.clarity.ms *.google.com.au *.google.co.nz *.google.co.in *.google.com.fj *.google.co.th *.google.com.sg *.google.com.ph *.gstatic.com *.google-analytics.com *.googletagmanager.com *.google.com; style-src 'report-sample' 'self' www.lawsociety.org.nz 'unsafe-inline' api.addressfinder.io *.googleapis.com; object-src 'none'; base-uri 'self'; connect-src 'self' www.lawsociety.org.nz consent.cookiebot.com consentcdn.cookiebot.com px.ads.linkedin.com www.facebook.com www.googleadservices.com pagead2.googlesyndication.com *.clarity.ms *.google.com *.google.com.au *.google.co.nz *.google.co.in *.google.com.fj *.google.co.th *.google.com.sg *.google.com.ph *.doubleclick.net *.googletagmanager.com *.google-analytics.com translate.googleapis.com; font-src 'self' fonts.gstatic.com; child-src 'self' *.lawsociety.org.nz *.googletagmanager.com youtube.com *.youtube.com player.vimeo.com staticcdn.co.nz; frame-ancestors 'self'; frame-src 'self' consentcdn.cookiebot.com www.facebook.com *.googletagmanager.com *.youtube.com w.soundcloud.com www.google.com maps.google.co.nz; img-src 'self' www.lawsociety.org.nz imgsct.cookiebot.com px.ads.linkedin.com googleads.g.doubleclick.net www.facebook.com *.clarity.ms c.bing.com *.google.com *.google.co.nz *.google.com.au *.google.co.in *.google.com.fj *.google.co.th *.google.com.sg *.google.com.ph *.ggpht.com data: *.google-analytics.com *.google.com *.google.com.au *.googletagmanager.com *.gstatic.com *.ytimg.com *.vimeocdn.com staticcdn.co.nz; manifest-src 'self'; media-src 'self'; report-uri https://report-to-api.raygun.com/reports-csp?apikey=GMMydwcssVrny9itMp4jA; worker-src 'none'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com maxcdn.bootstrapcdn.com *.salesfire.co.uk *.klarnacdn.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.facebook.com *.googlesyndication.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.doubleclick.net *.facebook.com *.googlesyndication.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.salesfire.co.uk *.googleapis.com *.trustpilot.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.trackedlink.net *.ddlnk.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com * www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.salesfire.co.uk maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com * js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.salesfire.co.uk *.googleapis.com *.trustpilot.com https://www.avsfencing.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com webchat.dotdigital.com webchat.staging.dotdigital.com downloads.mailchimp.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.salesfire.co.uk *.typekit.net *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://bam.nr-data.net/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.salesfire.co.uk *.smartmetrics.co.uk *.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' litium.revolutionrace.de fbcdn.revolutionrace.de wss://fbcdn.revolutionrace.de *.edb.com *.cdn-apple.com *.klarnaservices.com *.klarnauserservices.com *.klarnacdn.net *.klarna.com *.klarnaevt.com *.kustom.co *.adyen.com www.paypal.com js.stripe.com *.google.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.gstatic.com ajax.googleapis.com fonts.googleapis.com maps.googleapis.com *.apptus.cloud *.storyblok.com *.symplify.com cdn-sitegainer.com *.cdn-sitegainer.com sitegainer.com wss://recording.sitegainer.com *.criteo.net *.criteo.com *.doubleclick.net *.emarsys.net *.mention-me.com *.imedia.cz *.scarabresearch.com *.spinnaker-js.com bat.bing.com www.seznam.cz tags.creativecdn.com *.kindlycdn.com *.kindly.ai wss://sage.kindly.ai revolutionrace.customerfirst.ai *.facebook.net *.tiktok.com *.snapchat.com *.pinterest.com *.bambuser.com *.facebook.com www.pinterest.se *.cloudflare.com *.digitaloceanspaces.com *.distancify.workers.dev cdn.jsdelivr.net maxcdn.bootstrapcdn.com player.vimeo.com pro.ip-api.com recommender.scarabresearch.com s.pinimg.com sc-static.net vimeo.com ws-eu.pusher.com wss://ws-eu.pusher.com 'unsafe-inline' 'unsafe-eval'; img-src data: blob: https://* 'self'; media-src https://*; worker-src 'self' blob:; frame-src analytics.revolutionrace.de *.mention-me.com mention-me.com *.google.com *.adyen.com *.paypal.com *.kustom.co *.sitegainer.com *.criteo.com revolutionrace.customerfirst.ai; frame-ancestors https://app.storyblok.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; connect-src data: *; report-uri /api/csp-report; report-to csp-endpoint; 1
font-src *.cloudflare.com *.bootstrapcdn.com *.googleapis.com *.gstatic.com *.fontawesome.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.youtube.com *.g.doubleclick.net *.facebook.com *.facebook.net https://payment-stage.ecpay.com.tw/ https://payment.ecpay.com.tw/ 'self' 'unsafe-inline'; frame-ancestors *.tappaysdk.com google.com *.google.com *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.tappaysdk.com google.com *.google.com *.facebook.com *.g.doubleclick.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://live-chat-console.no8.io https://*.useinsider.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.cloudflare.com *.ytimg.com *.googletagmanager.com *.google-analytics.com *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.tappaysdk.com google.com *.google.com *.cloudflare.com *.twitter.com *.fontawesome.com *.google-analytics.com *.googletagmanager.com *.gstatic.com *.zdassets.com *.facebook.net *.g.doubleclick.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://live-chat-console.no8.io https://js-agent.newrelic.com https://bam.nr-data.net https://*.useinsider.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.tappaysdk.com google.com *.google.com *.cloudflare.com *.fontawesome.com *.bootstrapcdn.com *.googleapis.com *.gstatic.com https://live-chat-console.no8.io tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src *.tappaysdk.com google.com *.google.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.tappaysdk.com google.com *.google.com *.cloudflare.com *.google-analytics.com *.googletagmanager.com *.zendesk.com *.zopim.com *.zdassets.com *.gstatic.com *.google.com.tw *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://api-next.no8.io https://js-agent.newrelic.com https://bam.nr-data.net https://*.useinsider.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.bootstrapcdn.com *.kleecks-cdn.com *.es.borgione.allblue.dnalab.online *.borgione.es *.oct8ne.com https://blogborgione.blog *.fontawesome.com maxcdn.bootstrapcdn.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com *.googlesyndication.com https://blogborgione.blog 'self' connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.borgione.allblue.dnalab.online *.es.borgione.allblue.dnalab.online *.borgione.es 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.doubleclick.net www.facebook.com *.googlesyndication.com *.criteo.com *.salesmanago.pl *.es.borgione.allblue.dnalab.online *.borgione.es landofcoder.com *.oct8ne.com *.trustpilot.com https://blogborgione.blog connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net 'self' data: *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.googleads/ *.amazonaws.com *.kleecks-cdn.com *.es.borgione.allblue.dnalab.online *.borgione.es *.feedaty.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.oct8ne.com https://blogborgione.blog connect.facebook.net graph.facebook.com business.facebook.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.googleapis.com www.gstatic.com pay.google.com google.com/pay ecomms2s.sella.it sandbox.gestpay.net img.riskified.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com www.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.google.de *.googleads/ *.zdassets.com *.adobe.net *.authorize.net *.unpkg.net *.omtrdc.net *.paypal.com *.ytimg.com *.cardinalcommerce.com *.ccdc02.com polyfill.io *.payments-amazon.com *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.iubenda.com *.hotjar.com *.magnewsemail.com *.criteo.com *.criteo.net *.zoorate.com *.kleecks-cdn.com *.kleecks-stats.com *.es.borgione.allblue.dnalab.online *.borgione.es *.feedaty.com landofcoder.com *.oct8ne.com *.trustpilot.com https://blogborgione.blog widget.freshworks.com m2epro.freshdesk.com connect.facebook.net graph.facebook.com business.facebook.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.googleapis.com www.google.com www.gstatic.com pay.google.com beacon.riskified.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.feedaty.com *.iubenda.com *.kleecks-cdn.com *.es.borgione.allblue.dnalab.online *.borgione.es *.trustpilot.com https://blogborgione.blog widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com maxcdn.bootstrapcdn.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.zdassets.com *.es.borgione.allblue.dnalab.online *.borgione.es 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net *.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io amcglobal.sc.omtrdc.net p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.magento.com *.magento-datasolutions.com *.magento-ds.com *.google-analytics.com www.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.zdassets.com *.zendesk.com *.magento.com *.adobedtm.com *.adobedc.io *.typekit.net *.magedevteam.com *.cardinalcommerce.com *.algolia.net *.algolia.com *.algolianet.com *.amazon.com *.amazon.co.uk *.payments-amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de *.iubenda.com *.magnewsemail.com *.kleecks-cdn.com *.kleecks-stats.com *.es.borgione.allblue.dnalab.online *.borgione.es *.feedaty.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com landofcoder.com *.oct8ne.com https://blogborgione.blog widget.freshworks.com m2epro.freshdesk.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com www.gstatic.com pay.google.com google.com/pay ecomms2s.sella.it sandbox.gestpay.net c.riskified.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.gstatic.com data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com www.google.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com *.googleapis.com store.paradoxlabs.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com *.googleapis.com maps.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.authorize.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline *.googleapis.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.authorize.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://connect.facebook.net https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.clarity.ms https://www.youtube.com https://s.ytimg.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data: https:; media-src 'self' https://stream.adilo.com https://*.adilo.com; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://td.doubleclick.net https://consentcdn.cookiebot.com https://consent.cookiebot.com https://exch.knrm.nl; connect-src 'self' https: 1
default-src 'self' https://*.wistia.com https://fast.wistia.net https://www.google.com https://www.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.googletagmanager.com https://*.google-analytics.com https://*.hs-scripts.com https://*.hubspot.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hsforms.net https://*.hsadspixel.net https://*.adroll.com https://*.clarity.ms https://*.facebook.net https://*.linkedin.com https://*.snap.licdn.com https://*.apollo.io https://fast.wistia.com https://fast.wistia.net https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fast.wistia.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.hs-scripts.com https://*.hs-banner.com https://*.hsforms.com https://*.hubapi.com https://*.hubspot.com https://*.wistia.com https://*.adroll.com https://*.clarity.ms https://*.linkedin.com https://*.google.com https://*.aplo-evnt.com https://aplo-evnt.com https://leanpath.bamboohr.com; img-src 'self' data: https://*.googletagmanager.com https://*.google-analytics.com https://*.hs-scripts.com https://*.hsforms.com https://*.hubspot.com https://*.adroll.com https://*.facebook.com https://*.linkedin.com https://*.doubleclick.net https://*.google.com https://*.pubmatic.com https://*.bidswitch.net https://*.casalemedia.com https://*.rubiconproject.com https://*.3lift.com https://*.taboola.com https://*.bing.com https://*.clarity.ms https://secure.gravatar.com https://sp-ao.shortpixel.ai https://resources.bamboohr.com https://www.google.ca https://pixel.tapad.com https://match.adsrvr.org; frame-src 'self' https://fast.wistia.net https://www.google.com https://*.hubspot.com https://*.hs-sites.com https://*.facebook.com; worker-src 'self' blob:; script-src-elem 'self' 'unsafe-inline' https://snap.licdn.com https://googleads.g.doubleclick.net https://leanpath.bamboohr.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://*.adroll.com https://js.hsforms.net https://*.hs-scripts.com https://*.hs-banner.com https://*.hsadspixel.net https://*.hs-analytics.net https://js.hubspot.com https://connect.facebook.net https://scripts.clarity.ms https://www.clarity.ms https://assets.apollo.io; report-uri https://csp-report.browser-intake-us5-datadoghq.com/api/v2/logs?dd-api-key=pub5f5a295d8e3a764ae6d68c349407c34c&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env%3Awww; 1
1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com commerce.adobedc.net api.comapi.com stats.g.doubleclick.net *.zdassets.com *.hotjar.com *.hotjar.io *.zopim.com wss://*.zopim.com *.feedbackcompany.com *.zendesk.com *.clarity.ms *.facebook.com *.datatrics.com *.analytics.google.com *.googletagmanager.com https://hits-banner-cloud-function.azurewebsites.net *.mercadopago.com maps.googleapis.com *.mercadolibre.com api.mundipagg.com api.pagar.me brasilapi.com.br viacep.com.br servicodados.ibge.gov.br pay.sandbox.google.com trustvox.com.br certificate.trustvox.com.br static.trustvox.com.br colt.trustvox.com.br wss://ct-socket.huggy.app widget.huggy.io https://get.geojs.io *.avada.io t.elasticsuite.io *.hsforms.net *.hsforms.com www.dufrio.com.br *.reclameaqui.com.br *.voxus.tv *.voxus.com.br *.loggly.com *.ipify.org *.google.com.br *.criteo.com *.bing.com *.us-east-2.on.aws *.sciencebehindecommerce.com *.wepowerconnections.com *.akamaihd.net *.konduto.com *.mailbiz.one *.cloudfront.net *.tiktok.com *.pangle-ads.com *.yandex.ru *.tiktokw.us *.datalivemarketing.com.br wss://mc.yandex.ru/solid.ws wss://socket.live.sma.ia.br/ws wss://socket.live.sma.ia.br/ws/ *.syndigo.com receiver.posclick.dinamize.com socket-node.staging.datalive.ai receiver.emkt.dinamize.com 'self' 'unsafe-inline'; child-src www.dufrio.com.br http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com www.dufrio.com.br *.google.com.br 'self' 'unsafe-inline' 'unsafe-eval'; base-uri www.dufrio.com.br 'self' 'unsafe-inline'; 1
script-src 'report-sample' 'nonce-3sUhmfmU0u1W' 'strict-dynamic' https: http: 'unsafe-eval'; base-uri 'self'; report-to endpoint-report; report-uri https://membre.carenity.com/csp/report/public; font-src https://www.carenity.com/ data: https://appleid.cdn-apple.com/ https://fonts.gstatic.com; frame-src https://*.doubleclick.net https://*.youtube.com https://myaccount.google.com https://accounts.google.com/ https://www.googletagmanager.com/ https://www.carenity.com/ https://drive.google.com/ https://www.google.com/recaptcha/ https://acrobatservices.adobe.com https://*.adtrafficquality.google https://*.doubleclick.net https://*.googlesyndication.com; object-src https://*.youtube.com/ https://membre.carenity.com/static/docs/; style-src 'unsafe-inline' https://www.carenity.com/ https://www.amcharts.com/ https://ajax.googleapis.com/ https://accounts.google.com/gsi/style https://fonts.googleapis.com https://www.googletagmanager.com https://www.gstatic.com; form-action https://www.carenity.com/ https://membre.carenity.com/; 1
font-src fonts.gstatic.com use.typekit.net *.googleapis.com *.gstatic.com data: 'self' data: *.doubleclick.net *.facebook.com assets-uk1-cloud.deskpro.com wdsmedia.wdscomponents.com wdscomponents.deskpro.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.adyen.com *.facebook.com esecure.sia.eu geoissuer.cardinalcommerce.com *.cardinalcommerce.com *.arcot.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.demdex.net *.adyen.com www.google.com *.google.com *.doubleclick.net *.facebook.com js.stripe.com *.hotjar.com *.paypalobjects.com esecure.sia.eu geoissuer.cardinalcommerce.com *.cardinalcommerce.com *.arcot.com *.wdscomponents.com wdsmedia.wdscomponents.com wdscomponents.deskpro.com www.xtento.com *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net validator.swagger.io *.adyen.com *.gstatic.com *.googleapis.com 'self' data: *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com c.bing.com *.google.co.uk *.googleadservices.com *.google-analytics.com *.magentocommerce.com *.widgets.magentocommerce.com *.paypalobjects.com *.postcodeanywhere.co.uk https://assets-uk1-cloud.deskpro.com via.placeholder.com *.wdscomponents.com wdsmedia.wdscomponents.com wdscomponents.deskpro.com c.clarity.ms assets-uk1-cloud.deskpro.com  attachments-uk1-cloud-deskpro-com.s3.amazonaws.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net * assets.adobedtm.com *.magento-ds.com *.adyen.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.net *.doubleclick.net *.google-analytics.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com widget.freshworks.com m2epro.freshdesk.com *.newrelic.com *.nr-data.net *.pcapredict.com *.hotjar.com *.trustpilot.com *.canddi.com *.wdscomponents.com wdsmedia.wdscomponents.com wdscomponents.deskpro.com c.bing.com c.clarity.ms assets-uk1-cloud.deskpro.com www.xtento.com cdn.xtento.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com downloads.mailchimp.com widget.freshworks.com m2epro.freshdesk.com services.postcodeanywhere.co.uk *.typekit.net assets-uk1-cloud.deskpro.com *.wdscomponents.com wdsmedia.wdscomponents.com wdscomponents.deskpro.com https://cdnjs.cloudflare.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net assets-uk1-cloud.deskpro.com wdsmedia.wdscomponents.com wdscomponents.deskpro.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io p13n.adobe.io p13n-mr.adobe.io * *.adobe.io performance.typekit.net *.sentry.io *.adyen.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com widget.freshworks.com m2epro.freshdesk.com assets-uk1-cloud.deskpro.com *.zdassets.com ws: *.newrelic.com *.nr-data.net *.doubleclick.net *.hotjar.com *.wdscomponents.com wdsmedia.wdscomponents.com wdscomponents.deskpro.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-CxXRTwZrfW8niuv16jM0oA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https: data: blob:; img-src 'self' https: data: blob:; font-src 'self' https: data:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; 1
object-src 'none';base-uri 'self';script-src 'nonce-86hLcLPKIE8PMksenbvVqA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com 'self' data: *.gstatic.com *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ chimpstatic.com downloads.mailchimp.com *.list-manage.com s7.addthis.com *.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.gstatic.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com unsafe-inline assets.braintreegateway.com *.googleapis.com *.gstatic.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.youtube.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com ekr.zdassets.com/ https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com t.elasticsuite.io *.google-analytics.com *.facebook.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.gstatic.com 'self' data: https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net *.sendcloud.sc *.jsdelivr.net https://www.googletagmanager.com https://td.doubleclick.net 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com https://at19.net https://bdt9.net https://ds1.nl https://dt51.net https://dt61.net https://fr135.net https://glp8.net https://jdt8.net https://jf79.net https://hs82.net https://lt45.net https://mt74.net https://ndt5.net https://rkn3.net https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://img.youtube.com *.amazonaws.com *.hsforms.net *.hsforms.com 'self' data: https://www.google.com https://www.google.nl https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://track.hubspot.com https://www.google.ie https://www.google.pl https://www.google.ro https://shogun.nl https://shogun.shop https://bluerooster.eu https://bluerooster.nl https://bintac.shop https://imgproxy.vendic.dev https://d2dglb1590sxlb.cloudfront.net data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://maps.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com https://cdn.jsdelivr.net *.sendcloud.sc *.jsdelivr.net https://servicepoints.sendcloud.sc https://embed.sendcloud.sc *.hsforms.net *.hsforms.com *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://static.klaviyo.com https://cdn.jsdelivr.net *.sendcloud.sc *.jsdelivr.net *.googleapis.com *.gstatic.com https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com t.elasticsuite.io *.hsforms.net *.hsforms.com https://www.google.com https://www.google.nl https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.clarity.ms https://analytics.ahrefs.com https://p2iqhncxyh.execute-api.eu-central-1.amazonaws.com https://*.leadinfo.net https://api.leadinfo.com https://region1.analytics.google.com https://region1.google-analytics.com *.pay.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.shogun.nl/paynl/csp/report; report-to report-endpoint; 1
default-src 'self'; script-src 'self' https://hawksford.com https://www.hawksford.com https://7052064.fs1.hubspotusercontent-na1.net https://platform.linkedin.com https://snap.licdn.com https://px.ads.linkedin.com https://*.clarity.ms https://c.bing.com https://www.googletagmanager.com https://tagmanager.google.com https://www.googleadservices.com https://www.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net https://www.youtube.com *.hsadspixel.net *.hs-analytics.net js.hscta.net js-eu1.hscta.net *.hubspot.com static.hsappstatic.net *.usemessages.com *.hs-banner.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspot.net *.hscollectedforms.net *.hsleadflows.net *.hsforms.net *.hsforms.com *.hs-scripts.com *.hubspotfeedback.com feedback.hubapi.com feedback-eu1.hubapi.com 'strict-dynamic' 'nonce-m+G87FBs0ouBk5Tj6Juocw=='; style-src 'self' 'unsafe-inline' https://www.hawksford.com https://*.hubspotusercontent00.net https://*.hubspotusercontent10.net https://*.hubspotusercontent20.net https://*.hubspotusercontent30.net https://*.hubspotusercontent40.net https://static.hsappstatic.net https://fonts.googleapis.com; font-src 'self' data: https://7052064.fs1.hubspotusercontent-na1.net https://5215934.fs1.hubspotusercontent-na1.net https://fonts.gstatic.com https://static.hsappstatic.net https://*.hubspotusercontent00.net https://*.hubspotusercontent10.net https://*.hubspotusercontent20.net https://*.hubspotusercontent30.net https://*.hubspotusercontent40.net; img-src 'self' data: blob: https://hawksford.com https://www.hawksford.com https://*.hubspot.com https://*.hubspotusercontent00.net https://*.hubspotusercontent10.net https://*.hubspotusercontent20.net https://*.hubspotusercontent30.net https://*.hubspotusercontent40.net https://static.hsappstatic.net https://www.google.com https://www.google.com.sg https://*.google-analytics.com https://*.g.doubleclick.net https://pagead2.googlesyndication.com https://px.ads.linkedin.com https://*.licdn.com https://*.linkedin.com; connect-src 'self' *.hubapi.com js.hscta.net js-eu1.hscta.net *.hubspot.com *.hs-banner.com *.hscollectedforms.net *.hsforms.com https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://google.g.doubleclick.net https://www.google.com https://*.clarity.ms https://c.bing.com https://px.ads.linkedin.com https://*.linkedin.com https://*.licdn.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://*.hubspot.com https://*.hsforms.com https://www.google.com https://*.linkedin.com; object-src 'none'; base-uri 'self'; form-action 'self' https://*.hsforms.com https://*.hubspot.com; worker-src 'self' blob: 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://www.googleadservices.com https://*.googleadservices.com https://www.google.com https://*.google.com https://accounts.google.com https://apis.google.com https://*.gstatic.com https://*.clarity.ms https://www.clarity.ms https://securepubads.g.doubleclick.net https://*.doubleclick.net https://pagead2.googlesyndication.com https://*.googlesyndication.com https://tpc.googlesyndication.com https://*.adtrafficquality.google https://snap.licdn.com https://*.licdn.com https://cdn.jsdelivr.net https://mto.groupevelanmedia.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com https://accounts.google.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.google.com https://*.google.ca https://accounts.google.com https://*.googleapis.com https://*.gstatic.com https://*.googleadservices.com https://*.clarity.ms https://*.doubleclick.net https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://*.googlesyndication.com https://*.adtrafficquality.google https://px.ads.linkedin.com https://*.linkedin.com https://*.licdn.com https://mto.groupevelanmedia.com https://gvm.nyc3.cdn.digitaloceanspaces.com; frame-src 'self' https://*.doubleclick.net https://*.googlesyndication.com https://*.google.com https://www.google.com https://*.googleadservices.com https://accounts.google.com https://*.adtrafficquality.google https://www.youtube.com https://*.youtube-nocookie.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://*.google.com https://accounts.google.com; object-src 'none' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.iris.dias.com.gr *.test-iris.dias.com.gr 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://*.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.addthis.com *.intuit.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: https://*.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.google.gr ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://www.gstatic.com https://translate.googleapis.com https://fonts.gstatic.com http://translate.google.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://*.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.addthis.com *.addthisedge.com *.moatads.com s3.amazonaws.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://translate.googleapis.com http://translate.google.com https://translate-pa.googleapis.com *.disqus.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com downloads.mailchimp.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com www.gstatic.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.facebook.com *.facebook.net https://*.google.com *.doubleclick.net *.googlesyndication.com *.addthis.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://translate.googleapis.com *.googleapis.com *.googleadservices.com *.googletagmanager.com  *.sandbox.paypal.com *.paypalobjects.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-BBXismOoaSG3GwEcmJLo9g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'nonce-wAc8HVb9PeBg35wltOEE4w' 'strict-dynamic'; script-src-elem 'self' 'nonce-wAc8HVb9PeBg35wltOEE4w' 'strict-dynamic' https://challenges.cloudflare.com https://www.googletagmanager.com https://js.hsforms.net; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://static.designer.ddt.cimpress.io; img-src 'self' data: blob: https: http://ib.adnxs.com; font-src 'self' https://cdnjs.cloudflare.com https://script.hotjar.com https://fonts.documents.cimpress.io; media-src 'self' https:; connect-src *; frame-src *; object-src 'none'; form-action 'self' https://www.facebook.com https://forms.hsforms.com; base-uri 'self' 1
font-src *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ accounts.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ accounts.google.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cloudflare.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com accounts.google.com downloads.mailchimp.com *.fontawesome.com https://fonts.bunny.net unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com accounts.google.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'unsafe-inline' data: cdn.icomoon.io *.fontawesome.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.klarnacdn.net *.sirv.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.reviews.io *.reviews.co.uk https://www.facebook.com https://widget.reviews.io 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com account.fetchify.com js.mollie.com https://www.googletagmanager.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.reviews.io *.reviews.co.uk *.salesfire.co.uk www.xtento.com *.criteo.com *.consensu.org https://www.facebook.com https://widget.reviews.io https://www.youtube.com *.pinterest.com *.pinterest.co.uk 'self' 'unsafe-inline'; img-src 'unsafe-inline' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.google.com *.google.co.uk https://www.mollie.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.sirv.com *.hsforms.net *.hsforms.com 'self' data: www.xtento.com cdn.xtento.com *.pinterest.com *.co *.bing.com *.linkedin.com *.advertising.com *.rubiconproject.com *.addthis.com *.doubleclick.net *.mgid.com *.ssp.rambler.ru *.outbrain.com *.taboola.com *.smartadserver.com *.yahoo.com *.e-planning.net *.ads.yieldmo.com *.adnxs.com *.yieldmo.com *.criteo.com *.pubmatic.com *.bidswitch.net *.omnitagjs.com *.tremorhub.com *.smartclip.net *.stickyadstv.com *.smaato.net *.clmbtech.com *.adform.net *.liadm.com *.tribalfusion.com *.360yield.com *.3lift.com *.casalemedia.com *.teads.tv *.media.net *.openx.net *.sharethrough.com *.postrelease.com *.tapad.com *.thebrighttag.com *.bluekai.com *.adscale.de *.ivitrack.com *.yieldlab.net *.socdm.com *.rlcdn.com *.twiago.com *.facebook.net *.gravatar.com *.sharethis.com https://um.simpli.fi https://i.ytimg.com *.gasproducts.co.uk gasproducts.co.uk *.calorgas.ie *.calor.co.uk c.clarity.ms/c.gif *.kelkoogroup.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google-analytics.com *.analytics.google.com widget.freshworks.com m2epro.freshdesk.com cc-cdn.com js.mollie.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.sirv.com player.vimeo.com *.hsforms.net *.hsforms.com *.gstatic.com www.xtento.com cdn.xtento.com *.geo-targetly.com *.criteo.net *.googleadservices.com *.bing.com *.licdn.com *.ads-twitter.com *.pinimg.com *.aweber.com fastbase.com *.zdassets.com *.trustpilot.com *.twitter.com *.doubleclick.net *.criteo.com *.zopim.com https://geo-targetly.com https://www.googletagmanager.com *.googletagmanager.com https://www.google.com/pagead/conversion_async.js *.sharethis.com *.kk-resources.com *.googleapis.com g1782759016.co *.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.icomoon.io widget.freshworks.com m2epro.freshdesk.com cc-cdn.com https://static.klaviyo.com *.fontawesome.com assets.braintreegateway.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.typekit.net *.sirv.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.sirv.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://stats.g.doubleclick.net widget.freshworks.com m2epro.freshdesk.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.smartmetrics.co.uk *.sirv.com *.youtube.com blob: t.elasticsuite.io *.hsforms.net *.hsforms.com fastbase.com *.zdassets.com *.pinterest.com *.zendesk.com *.zopim.com wss://widget-mediator.zopim.com *.sharethis.com *.clarity.ms *.kelkoogroup.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://1fea361e-4c97-413c-bdda-003a88c89215.sansec.watch/; report-to report-endpoint; 1
default-src https:;                                                 script-src https: 'unsafe-inline' 'unsafe-eval';                                                 style-src https: 'unsafe-inline';                                                 font-src https: data:;                                                 img-src https: data: about: ;                                                 connect-src https: wss: 'self';                                                 worker-src https: blob: 'self'; 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; 1
object-src 'none';base-uri 'self';script-src 'nonce-KLEjTwADUyqhPE-z24ANig' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://hm.baidu.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://www.google-analytics.com https://www.googletagmanager.com https://hm.baidu.com https://i.ytimg.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://region1.analytics.google.com https://hm.baidu.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com; media-src 'self' https://www.youtube.com https://www.youtube-nocookie.com; child-src 'self' https://www.youtube.com https://www.youtube-nocookie.com; frame-ancestors 'self' https://showroom.aco-haustechnik.de; base-uri 'self'; form-action 'self'; report-uri /csp-report; report-to 'csp-endpoint' 1
object-src 'none';base-uri 'self';script-src 'nonce-jSliXnPwZtLje_v1EgJqgQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.fontawesome.com https://fonts.bunny.net *.cloudfront.net *.reviews.io *.reviews.co.uk data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.reviews.io *.reviews.co.uk *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com *.weltpixel.com https://*.ewaypayments.com https://*.sandbox.ewaypayments.com *.google.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.reviews.io *.reviews.co.uk zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com https://www.magezon.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cloudfront.net *.reviews.io *.reviews.co.uk maps.gstatic.com assets-novo-com-au.s3.ap-southeast-2.amazonaws.com *.novoshoes.co.nz *.novoshoes.com.au *.igodigital.com *.searchspring.io t.zip.co static.zip.co *.facebook.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app www.apptrian.com pinterest.com www.pinterest.com s.pinimg.com *.searchspring.net *.athoscommerce.net https://*.ewaypayments.com https://*.sandbox.ewaypayments.com *.disqus.com *.avada.io *.shopify.com *.google.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.reviews.io *.reviews.co.uk https://cdn.searchspring.net/intellisuggest/is.min.js maps.googleapis.com https://cnstrc.com *.igodigital.com *.searchspring.io static.zip.co zip.co *.facebook.net *.googletagmanager.com *.googleadservices.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.searchspring.net *.athoscommerce.net *.fontawesome.com https://fonts.bunny.net *.cloudfront.net *.reviews.io *.reviews.co.uk data: *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com assets-novo-com-au.s3.ap-southeast-2.amazonaws.com *.novoshoes.co.nz *.novoshoes.com.au *.igodigital.com *.reviews.io *.searchspring.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com fcmregistrations.googleapis.com firebaseinstallations.googleapis.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com *.searchspring.net *.athoscommerce.net https://www.sandbox.paypal.com https://www.paypal.com https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cloudfront.net *.reviews.io *.reviews.co.uk https://beacon.searchspring.io/beacon maps.googleapis.com places.googleapis.com https://ac.cnstrc.com https://pcs.cnstrc.com *.igodigital.com *.searchspring.io *.facebook.net *.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.trbo.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.adyen.com pay.google.com payments-eu.amazon.com *.amazon.de 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.braintreegateway.com *.paypal.com google.com *.google.com *.adyen.com pay.google.com *.awin1.com *.zenaps.com *.fls.doubleclick.net www.mainadv.com opt.kuponacdn.de ad4m.at *.redintelligence.net *.doubleclick.net *.ad-srv.net d.c.cdnsrv.de ban.tangooserver.com *.trbo.com https://www.googletagmanager.com/ js.mollie.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.adyen.com pay.google.com *.payments-amazon.com *.media-amazon.com *.paypalobjects.com https://images.unsplash.com *.awin1.com *.zenaps.com *.wepowerconnections.com www.jeans-fritz.de www.facebook.com lantern.roeye.com insight.adsrvr.org adservice.google.com as.ad4m.at imagesrv.adition.com track.adform.net secure.adnxs.com t.uimserv.net widgets.trustedshops.com dsum-sec.casalemedia.com maps.gstatic.com www.google.de rtb-csync.smartadserver.com *.adfarm1.adition.com *.doubleclick.net *.twiago.com *.pubmatic.com *.adscale.de *.trbo.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.mollie.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline';, script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com https://maps.googleapis.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com www.jeans-fritz.de www.dwin1.com s.uicdn.com retrack-kupona.kuponacdn.de cdn.taboola.com amplify.outbrain.com widgets.trustedshops.com *.cloudfront.net connect.facebook.net opt.kuponacdn.de ad4m.at *.gsitrix.com *.ad-srv.net analytics.fatmedia.io trc.taboola.com *.adfarm1.adition.com analytics.tiktok.com *.adform.net pixel.mathtag.com mastertag.kpcustomer.de d.c.cdnsrv.de maps.googleapis.com ban.solocpm.com cdn.tangooserver.com eu-assets.i.posthog.com *.trbo.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ js.mollie.com applepay.cdn-apple.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.trbo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline';, connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.adyen.com payments-eu.amazon.com https://maps.googleapis.com https://player.vimeo.com *.wepowerconnections.com https://the.sciencebehindecommerce.com p2iqhncxyh.execute-api.eu-central-1.amazonaws.com psb.taboola.com www.jeans-fritz.de *.gsitrix.com analytics.fatmedia.io trc-events.taboola.com retrack-kupona.kuponacdn.de maps.googleapis.com eu.i.posthog.com analytics.tiktok.com *.trbo.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ api.friendlycaptcha.com eu-api.friendlycaptcha.eu 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com www.jeans-fritz.de www.google.com analytics.tiktok.com commerce.adobedc.net www.wepowerconnections.com *.posthog.com *.trbo.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://9f59f850-840a-442b-b604-22d85b9ebc07.sansec.watch/; report-to report-endpoint; 1
base-uri 'self'; default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' *.public.atl-paas.net https://www.google.com.au/ads/ga-audiences; font-src 'self' *.public.atl-paas.net; frame-ancestors 'none'; form-action 'self'; report-uri https://web-security-reports.services.atlassian.com/csp-report/design-system-docs-bifrost; report-to csp-default-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://va.vercel-scripts.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://va.vercel-scripts.com https://vitals.vercel-insights.com; frame-src 'self' https://*.typeform.com https://devlin.ai; frame-ancestors 'self' https://os.devlinpeck.com; base-uri 'self'; form-action 'self'; object-src 'none' 1
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.klarnacdn.net *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.instagram.com *.google.com *.doubleclick.net *.facebook.com URL *.cookiebot.com *.nexi.it int-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.facebook.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.cdninstagram.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com URL *.algoritma.it *.cookiebot.com *.feedaty.com *.nexi.it ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com int-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com cdn.klarna.com *.klarna.com *.klarnaevt.com *.klarnacdn.net magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.instagram.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com URL *.cookiebot.com *.cookiefirst.com *.googlesyndication.com *.feedaty.com *.nexi.it *.getflowbox.com *.zdassets.com centrosedia.zendesk.com chimpstatic.com downloads.mailchimp.com *.list-manage.com int-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com www.google.com www.gstatic.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com cdn.ampproject.org connect.facebook.net https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com URL *.cookiebot.com *.feedaty.com *.nexi.it downloads.mailchimp.com *.klarnacdn.net *.fontawesome.com unsafe-inline assets.braintreegateway.com www.gstatic.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com URL *.cookiebot.com *.cookiefirst.com *.googlesyndication.com *.feedaty.com *.nexi.it *.getflowbox.com *.zdassets.com centrosedia.zendesk.com int-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com cdn.ampproject.org www.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com data: *.googleapis.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.google.com/ www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com chimpstatic.com *.gstatic.com https://www.google.com/ https://tag.simpli.fi *.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com 'unsafe-inline' data: downloads.mailchimp.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com *.googleapis.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' https://www.google.com https://script.crazyegg.com/ https://static.hotjar.com/ https://www.google-analytics.com/ https://www.googletagmanager.com/ https://cdn.cookielaw.org/ https://cc.cdn.civiccomputing.com/ https://www.gstatic.com 'unsafe-eval' 'unsafe-inline'; style-src 'self' https://fonts.googleapis.com/ 'unsafe-inline'; img-src * data: ; frame-src 'self' https://www.youtube.com/; font-src 'self' data: https://fonts.gstatic.com/; connect-src 'self' https://cdn.cookielaw.org/ https://region1.google-analytics.com/ https://geolocation.onetrust.com/ https://script.crazyegg.com/ https://www.google-analytics.com/ https://stats.g.doubleclick.net/ https://region1.analytics.google.com/ https://metrics.hotjar.io/ https://cc.cdn.civiccomputing.com/ https://apikeys.civiccomputing.com; 1
object-src 'none';base-uri 'self';script-src 'nonce-1C9yeiFUVZc7zqPP0bFK1A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com *.drankgigant.nl *.drankgigant.de 'self'; frame-src https://www.google.com/recaptcha/ *.multisafepay.com https://pay.google.com js.mollie.com www.googletagmanager.com 'self' 'unsafe-inline'; img-src data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypalobjects.com *.multisafepay.com https://www.mollie.com www.google.nl www.google.be www.google.de data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypalobjects.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.multisafepay.com https://pay.google.com js.mollie.com static.buckaroo.nl checkout.buckaroo.nl d5yoctgpv4cpx.cloudfront.net cdn.optimizely.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.multisafepay.com checkout.buckaroo.nl 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com www.paypalobjects.com *.multisafepay.com google.com p2iqhncxyh.execute-api.eu-central-1.amazonaws.com stats.g.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://monitor.bigbridgedev.nl/csp; report-to report-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-c5Og5ltoknzTMIAU2sx_8g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://ajax.googleapis.com https://connect.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://connect.facebook.net; form-action 'self' https://marketingoops.us20.list-manage.com; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; report-uri /csp-report.php 1
object-src 'none';base-uri 'self';script-src 'nonce-L4E-otSG3C4tpWc-80Fz0g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
base-uri 'self'; block-all-mixed-content; default-src 'self'; form-action 'self'; frame-ancestors 'self'; plugin-types 'none'; script-src 'self' 'report-sample' 'unsafe-inline'; style-src 'self' 'report-sample' 'unsafe-inline'; object-src 'none'; worker-src 'none'; report-uri https://prod.ap.batic.cudasvc.com/xenios/api/v1/error/report??paid=151&spid=25657&v=v1.0&payload=ArFBRLoHxOoGu3d8FIyIjKV84BV7-M2TZb2PBPB9JKZTIi79AlPcmIzBDjJ0LikB6S80pVjaHu2pOWrf4FlnuHgNWzi2cm7CDo7EOKwa6F24kYri7mtM1YudlPv6STGvobi-AZcknzgQqX00eR_sTRsEWHC3Oe_L4lFYQFPI1-k=; 1
default-src 'self' experian-nor-b2b.okta.com auth.nor.secure.experian.com *.oktacdn.com; connect-src 'self' experian-nor-b2b.okta.com experian-nor-b2b-admin.okta.com auth.nor.secure.experian.com *.oktacdn.com *.mixpanel.com *.mapbox.com experian-nor-b2b.kerberos.okta.com experian-nor-b2b.mtls.okta.com https://oinmanager.okta.com data: *.ingest.sentry.io; script-src 'unsafe-inline' 'unsafe-eval' 'self' 'report-sample' experian-nor-b2b.okta.com auth.nor.secure.experian.com *.oktacdn.com; style-src 'unsafe-inline' 'self' 'report-sample' experian-nor-b2b.okta.com auth.nor.secure.experian.com *.oktacdn.com; frame-src 'self' experian-nor-b2b.okta.com experian-nor-b2b-admin.okta.com auth.nor.secure.experian.com login.okta.com; img-src 'self' experian-nor-b2b.okta.com auth.nor.secure.experian.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com data: blob:; font-src 'self' experian-nor-b2b.okta.com auth.nor.secure.experian.com data: *.oktacdn.com fonts.gstatic.com; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com https://static.unzer.com https://applepay.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://plumrocket.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https://plumrocket.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://accounts.google.com https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://static-cc.test.unzer.com https://h.online-metrix.net https://google.com/pay https://pay.google.com/ https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ https://sandbox.clicktopay.auth.visa.com https://clicktopay.visa.com https://sandbox.secure.checkout.visa.com https://secure.checkout.visa.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://images.unsplash.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com web.steinbach-group.com web.stage-m-steinbach.ecxdev.io https://static.unzer.com *.online-metrix.net https://www.gstatic.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page tagmanager.google.com https://www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://accounts.google.com https://www.gstatic.com web.steinbach-group.com web.stage-m-steinbach.ecxdev.io https://static.unzer.com https://applepay.cdn-apple.com https://pay.google.com https://code.jquery.com https://h.online-metrix.net https://h64.online-metrix.net https://static-v2.unzer.com/v2/ui-components/ www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com assets.braintreegateway.com https://accounts.google.com https://www.gstatic.com web.steinbach-group.com web.stage-m-steinbach.ecxdev.io https://sandbox.src.mastercard.com https://static-v2.unzer.com/v2/ui-components/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://accounts.google.com web.steinbach-group.com web.stage-m-steinbach.ecxdev.io https://api.unzer.com https://api.heidelpay.com https://sbx-api.heidelpay.com https://sbx-api.unzer.com https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://h.online-metrix.net https://h64.online-metrix.net https://google.com/pay https://www.google.com/pay https://pay.google.com https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ https://static-cc.test.unzer.com https://static-v2.unzer.com/v2/ui-components/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src data: 'unsafe-inline' 'unsafe-eval' https: blob: http://*.files.wordpress.com wss://www.theflowspace.com; report-uri https://pmcuri.report-uri.com/r/d/csp/reportOnly 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://cdn.userway.org *.fontawesome.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com https://td.doubleclick.net www.google.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com *.googleapis.com *.certcapture.com https://seal.godaddy.com https://cdn.userway.org https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com *.certcapture.com https://cdn.userway.org https://www.gstatic.com https://s7.addthis.com https://seal.godaddy.com *.avada.io *.shopify.com www.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com https://maxcdn.bootstrapcdn.com https://ajax.googleapis.com https://fonts.googleapis.com https://cdn.userway.org *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.certcapture.com https://api.userway.org https://cdn.userway.org https://stats.g.doubleclick.net http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; img-src * data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/  https://www.gstatic.com/recaptcha/ https://gateway.zscloud.net gateway.zscalerthree.net zscaler.net https://*.pcipal.cloud https://*.stripe.com/ blob:; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' https://*.pcipal.cloud https://www.google.com  accounts.google.com https://www.google.com/recaptcha/  www.gstatic.com/recaptcha/ https://fonts.googleapis.com/css2 *.walkme.com https://gateway.zscloud.net gateway.zscalerthree.net zscaler.net https://*.cardinalcommerce.com/ https://*.cardinaltrusted.com https://*.stripe.com/ https://pay.google.com/ https://*.paysafe.com https://api.test.paysafe.com https://applepay.cdn-apple.com/ https://*.braintreegateway.com/ https://www.datadoghq-browser-agent.com/ blob:; frame-src * data: 'report-sample'; style-src 'self' 'unsafe-inline' *.walkme.com https://fonts.googleapis.com/css; report-uri https://pcipal.report-uri.com/r/d/csp/reportOnly; connect-src 'self' wss://pcipal.cloud wss://*.pcipal.cloud https://*.pcipal.cloud:* *.walkme.com https://kg668dbov0.execute-api.us-east-1.amazonaws.com/stag/log https://*.apm.eu-west-1.aws.found.io:* https://*.cardinalcommerce.com/ https://*.cardinaltrusted.com https://pcipal.report-uri.com/ https://*.stripe.com/ https://google.com/pay https://www.google.com/pay https://pay.google.com/ https://www.google.com/recaptcha/ https://*.paysafe.com https://api.test.paysafe.com https://*.braintree-api.com/ https://*.braintreegateway.com/ https://www.paypal.com/ https://browser-intake-datadoghq.eu/; font-src * data:; object-src 'none'; 1
default-src https: 'unsafe-inline' 'unsafe-eval' data:; media-src https: blob: data:; child-src https: blob:; report-uri https://sentry.io/api/72071/csp-report/?sentry_key=4fb747b409644084ba393c5ab7399d16; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' https:; connect-src 'self' https:; upgrade-insecure-requests; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://status.my-job-shop.com https://euc-widget.freshworks.com https://canny.io https://www.usetiful.com https://elements.hapi.vonq.com https://elements-sandbox.hapi.vonq.com; style-src 'self' 'unsafe-inline' https://cdn.job-shop.com https://www.usetiful.com https://*.freshworks.com; img-src 'self' data: blob: https://cdn.job-shop.com https://tc-media.job-shop.com https://images.ctfassets.net https://cdn.usetiful.com https://*.freshworks.com https://pkb-channel-logos-prod.s3.eu-central-1.amazonaws.com https://placehold.co https://tc-keycdn-prod.s3.eu-central-1.amazonaws.com; media-src 'self' blob: https://cdn.job-shop.com https://tc-media.job-shop.com https://cdn.usetiful.com; font-src 'self' data: https://cdn.job-shop.com https://*.freshworks.com; connect-src 'self' https://iam.my-job-shop.com https://*.eu.amplitude.com https://cdn.contentful.com https://sentry02.int.jobshop.services https://status.my-job-shop.com https://cdn-eu.configcat.com https://cognito-identity.eu-central-1.amazonaws.com https://sts.eu-central-1.amazonaws.com https://verifiedpermissions.eu-central-1.amazonaws.com https://api.iconify.design https://api.simplesvg.com https://api.unisvg.com https://*.freshworks.com https://canny.io https://*.canny.io https://www.usetiful.com https://semaphor.cloud https://elements.hapi.vonq.com https://elements-sandbox.hapi.vonq.com https://marketplace.api.vonq.com https://marketplace-sandbox.api.vonq.com https://marketplace-sandbox.vonq.com; frame-src 'self' https://iam.my-job-shop.com https://canny.io https://*.canny.io https://673t22cvjl2k.statuspage.io https://semaphor.cloud https://www.youtube.com https://www.youtube-nocookie.com https://elements.hapi.vonq.com https://elements-sandbox.hapi.vonq.com https://marketplace.api.vonq.com https://marketplace-sandbox.api.vonq.com https://marketplace-sandbox.vonq.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; report-uri /_/csp-report 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; worker-src 'self' blob:; upgrade-insecure-requests 1
font-src https://static.payzen.eu/static/ i.icomoon.io fonts.gstatic.com *.typekit.net *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action *.facebook.com *.list-manage.com *.payzen.eu https://secure.payzen.eu/vads-payment/ https://api.payzen.eu/api-payment/ https://static.payzen.eu/static/ 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ bid.g.doubleclick.net *.facebook.com *.jotform.com *.matterport.com *.multisafepay.com https://pay.google.com https://secure.payzen.eu/vads-payment/ https://static.payzen.eu/static/ www.googletagmanager.com https://*.dpdconnect.nl *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.google-analytics.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.analytics.google.com www.googletagmanager.com https://images.unsplash.com *.clarity.ms *.doubleclick.net *.facebook.com *.facebook.net *.getsitecontrol.com *.google.com *.smartsuppcdn.com maps.gstatic.com maps.googleapis.com *.multisafepay.com https://secure.payzen.eu/static/latest/images/type-carte/ https://static.payzen.eu/static/ https://secure.payzen.eu/vads-payment/ ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://redchamps.com *.hsforms.net *.hsforms.com 'self' data: *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src www.google-analytics.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com analytics.google.com www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com *.clarity.ms *.facebook.net *.getsitecontrol.com *.smartsuppcdn.com *.smartsuppchat.com *.tiktok.com plausible.io maps.googleapis.com *.multisafepay.com https://pay.google.com https://api.payzen.eu/api-payment/ https://static.payzen.eu/static/ https://*.dpdconnect.nl https://sibautomation.com chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com *.googletagmanager.com tagmanager.google.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.smartsuppcdn.com *.multisafepay.com https://static.payzen.eu/static/ i.icomoon.io fonts.googleapis.com *.typekit.net downloads.mailchimp.com *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com vimeo.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.clarity.ms *.facebook.com *.getsitecontrol.com *.getsitectrl.com *.google.com *.googlesyndication.com *.smartsuppcdn.com *.smartsuppchat.com *.tiktok.com *.tiktokw.us plausible.io wss://*.smartsupp.com maps.googleapis.com *.multisafepay.com https://secure.payzen.eu/vads-payment/ https://api.payzen.eu/api-payment/ stats.g.doubleclick.net https://www.google.com/recaptcha/ https://in-automate.brevo.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src https://secure.payzen.eu/vads-payment/ https://api.payzen.eu/api-payment/ https://static.payzen.eu/static/ *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://eeb5ff6a-297d-4ded-b00f-5a95f1c081a7.sansec.watch/; report-to report-endpoint; 1
default-src 'self' data: ws: wss: http://view.publitas.com  http://connect.de-heus.nl  https://www.facebook.com https://www.youtube.com *.google-analytics.com https://www.google.com https://www.gstatic.com https://mkt.deheus.com.br *.mktoweb.com https://open.spotify.com https://td.doubleclick.net/ https://www.googletagmanager.com https://curatorio.s3.amazonaws.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://view.publitas.com http://connect.de-heus.nl https://maps.googleapis.com https://s.ytimg.com https://www.youtube.com https://dc.services.visualstudio.com https://az416426.vo.msecnd.net https://code.jquery.com *.google-analytics.com *.licdn.com https://www.googletagmanager.com http://tagmanager.google.com https://www.googleadservices.com https://maxcdn.bootstrapcdn.com https://www.facebook.com https://connect.facebook.net https://dl.episerver.net https://www.google.com https://www.gstatic.com http://ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js *.marketo.net https://mkt.deheus.com.br *.episerver.net *.adoberesources.net https://googleads.g.doubleclick.net https://cdnjs.cloudflare.com *.mktoweb.com maps.googleapis.com https://unpkg.com *.aptrinsic.com *.monitor.azure.com *.clarity.ms https://cdn.curator.io https://optimizely-cmp-analytics.com/; style-src 'self' 'unsafe-inline' http://connect.de-heus.nl *.typekit.net *.mktoweb.com *.episerver.net https://fonts.googleapis.com https://cloud.typography.com *.google-analytics.com *.googletagmanager.com https://tagmanager.google.com https://mkt.deheus.com.br https://web-sdk-eu.aptrinsic.com https://cdn.curator.io; img-src 'self' http: data: https://ssl.gstatic.com *.google-analytics.com *.analytics.google.com https://www.gstatic.com https://lh3.googleusercontent.com; connect-src 'self' ws: wss: https://dc.services.visualstudio.com *.google-analytics.com *.analytics.google.com https://stats.g.doubleclick.net *.cloud.adobe.io *.episerver.net *.mktoresp.com *.clarity.ms maps.googleapis.com *.linkedin.com *.google.nl *.google.com https://esp-eu.aptrinsic.com https://pagead2.googlesyndication.com https://api.curator.io https://www.facebook.com/; font-src 'self' data: https://fonts.gstatic.com *.typekit.net *.cloudfront.net; frame-ancestors 'self' https://cmp.optimizely.com/;  report-uri https://www.deheus.com.vn/api/reporting/;  report-to csp-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-RFc1YAZAq8SLa2N6JtQ5YA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self';         script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://www.googletagmanager.com https://ssl.google-analytics.com https://www.clarity.ms https://scripts.clarity.ms https://apis.google.com https://www.gstatic.com https://cdn.jsdelivr.net https://connect.facebook.net https://app.optinmonster.com https://a.optnmnstr.com;         style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com;         font-src 'self' data: https://fonts.gstatic.com;         img-src 'self' data: blob: https://www.google-analytics.com https://www.clarity.ms https://*.googleusercontent.com https://*.wp.com https://www.facebook.com;         connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://www.clarity.ms https://c.clarity.ms https://connect.facebook.net;         frame-src 'self' https://www.youtube.com https://www.facebook.com https://td.doubleclick.net;         object-src 'none';         base-uri 'self';         form-action 'self';         frame-ancestors 'self';         upgrade-insecure-requests; 1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https:; frame-ancestors 'none'; base-uri 'self'; object-src 'none' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com static.zdassets.com sc-pixel-helper.min.js sc-static.net *.sc-static.net cdn.userway.org data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.powerbi.com *.tipalti.com *.azurewebsites.net airtable.com *.userway.org 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.pierrefabreconnect.com *.avenederm.com *.rfsalon.com *.userway.org www.google.com.pk *.googleapis.com *.googleusercontent.com *.aveneusa.com *.renefurtererusa.com aveneusa.com renefurtererusa.com https://cdn.cookielaw.org data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.attn.tv events.attentivemobile.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.zdassets.com *.userway.org sc-static.net *.accessibilityserver.org accessibilityserver.org *.zopim.com *.googleapis.com mcstaging.avenederm.com *.klaviyo.com https://cdn.cookielaw.org 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.googleapis.com *.userway.org 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.attn.tv events.attentivemobile.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ googletagmanager.com *.klaviyo.com *.adobe.com */zdassets.com *.zdassets.com *.userway.org *.zendesk.com bam.nr-data.net *.azurewebsites.net widget-mediator.zopim.com wss://widget-mediator.zopim.com/s/W/ws/qXel2+pNbN65wv3Z/c/1720435109301 *.zopim.com *.googleapis.com *.doubleclick.net wss://widget-mediator.zopim.com/s/W/ws/-IckJGMQv5jEuQYK/c/1722611474793 https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://pierrefabre-privacy.my.onetrust.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-a2LvOa3YntyPJE79-lN6Ww' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.pwc.com https://assets.adobedtm.com https://*.akamaihd.net https://platform.twitter.com https://*.demdex.net https://*.twing.com https://www.googletagmanager.com https://cm.everesttech.net https://optanon.blob.core.windows.net https://pwc.sc.omtrdc.net https://syndication.twitter.com https://www.googleoptimize.com https://cdn.cookielaw.org https://www.google-analytics.com https://stats.g.doubleclick.net https://script.crazyegg.com https://pbs.twimg.com https://cdn.syndication.twimg.com https://www.google.com https://www.google.ca https://accounts.google.com https://www.youtube.com https://i.ytimg.com https://jwpltx.com https://ssl.gstatic.com https://ton.twimg.com https://www.google.com.tr https://www.pwc.nl https://www.pwc.co.uk http://download.pwc.com https://apis.google.com https://ssl.p.jwpcdn.com https://www.gstatic.com https://ton.twimg.com data:; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net *.klarnacdn.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com https://www.google.com *.googletagmanager.com *.klarna.com *.klarnaservices.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.googleapis.com https://firebasestorage.googleapis.com https://www.mollie.com *.google.co.uk *.klarna.com *.klarnacdn.net *.klarnaevt.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.gstatic.com widget.freshworks.com m2epro.freshdesk.com *.avada.io *.shopify.com js.mollie.com pay.google.com applepay.cdn-apple.com https://static.cloudflareinsights.com https://www.google.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com https://fonts.bunny.net *.klarnacdn.net *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com widget.freshworks.com m2epro.freshdesk.com https://get.geojs.io *.avada.io *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarnaevt.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.perfumist.net *.perfumist.fr *.klarnacdn.net *.fontawesome.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com *.perfumist.net *.perfumist.fr https://consenttool.haendlerbund.de *.haendlerbund.de *.cookiebot.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://api.mapbox.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com *.perfumist.net *.perfumist.fr https://consenttool.haendlerbund.de *.facebook.net *.cookiebot.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.perfumist.net *.perfumist.fr https://consenttool.haendlerbund.de *.cookiebot.com *.klarnacdn.net *.fontawesome.com assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com *.perfumist.net *.perfumist.fr https://consenttool.haendlerbund.de *.cookiebot.com *.googleapis.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com autocomplete2.postdirekt.de t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net cdn.jsdelivr.net cdn.almapay.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.getalma.eu *.almapay.com/ *.hipay-tpp.com *.hipay.com *.paypal.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.ftcdn.net *.behance.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com https://rum.hlx.page cdn.jsdelivr.net *.almapay.com *.hipay-tpp.com *.hipay.com mpsnare.iesnare.com *.paypal.com https://widgets.rr.skeepers.io/ https://api-product-reviews.rr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cdnjs.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com cdn.jsdelivr.net *.almapay.com *.hipay.com https://fonts.googleapis.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com data: mpsnare.iesnare.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.getalma.eu *.almapay.com *.hipay-tpp.com *.hipay.com wss://mpsnare.iesnare.com https://widgets.rr.skeepers.io/ https://api-product-reviews.rr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
report-uri https://abgtr7ca.uriports.com/reports/report; report-to default; connect-src 'self' https://p-weddybird-website.b-cdn.net/ https://vz-865b183f-ef4.b-cdn.net https://analytics.weddybird.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://www.google.com https://google.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat https://consentcdn.cookiebot.com https://consent.cookiebot.com https://consentcdn.cookiebot.eu https://consent.cookiebot.eu https://beaconapi.helpscout.net https://chatapi.helpscout.net https://d3hb14vkzrxvla.cloudfront.net wss://*.pusher.com https://s.pinimg.com https://ct.pinterest.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://ads.tiktok.com https://bat.bing.com https://www.facebook.com https://www.facebook.net https://connect.facebook.net https://api.refiner.io https://api.rollbar.com https://*.paypal.com https://*.paypalobjects.com https://*.venmo.com; font-src 'self' https://p-weddybird-website.b-cdn.net/ https://cdn.wbsrv.de https://fonts.bunny.net data: https://fonts.gstatic.com https://beacon-v2.helpscout.net; frame-src 'self' https://preview.weddybird.com/ https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.googletagmanager.com https://td.doubleclick.net https://www.facebook.com https://www.facebook.net https://connect.facebook.net https://consentcdn.cookiebot.com https://consentcdn.cookiebot.eu https://beacon-v2.helpscout.net https://s.pinimg.com https://ct.pinterest.com https://js.refiner.io https://*.paypal.com https://*.paypalobjects.com https://*.venmo.com https://sibforms.com/ https://*.sibforms.com/ bytedance: sslocal: https://www.instagram.com; manifest-src 'self' https://weddybird.com/; media-src 'self' blob: https://vz-865b183f-ef4.b-cdn.net https://beacon-v2.helpscout.net; style-src 'self' https://p-weddybird-website.b-cdn.net/ 'unsafe-inline' https://cdn.wbsrv.de https://fonts.bunny.net https://www.googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com https://beacon-v2.helpscout.net https://js.refiner.io https://storage.refiner.io https://*.paypal.com https://*.paypalobjects.com https://*.venmo.com; form-action 'self' https://www.facebook.com https://www.mollie.com 1
script-src 'nonce-i44SptrDgTU40RA03J2/Rg==' 'self' 'unsafe-eval' cdn.orsted.com *.googletagmanager.com *.app.cookieinformation.com cdn.appdynamics.com *.googletagmanager.com *.gstatic.com *.googleoptimize.com www.googleadservices.com *.googleapis.com *.bing.com *.doubleclick.net *.t.co *.pardot.com *.youtube.com *.linkedin.com *.twitter.com *.globenewswire.com *.23video.com delivery.twentythree.com orsted.containers.piwik.pro orsted.piwik.pro *.crazyegg.com unpkg.com cs.lf-discover.com *.puzzel.com *.arcgis.com code.jquery.com *.lfeeder.com orsted-global-graduate-programme.simplecast.com omny.fm cdnjs.cloudflare.com *.bootstrapcdn.com *.defgo.com *.defgo.net *.vimeo.com presscloud.com *.ritzau.dk *.simplecast.com *.elnet.danskenergi.dk *.sli.do *.audioboom.com *.licdn.com *.adsrvr.org *.soundcloud.com *.google.com *.google.com.my *.google.nl *.google.dk *.facebook.net;       style-src 'nonce-i44SptrDgTU40RA03J2/Rg==' 'self' cdn.orsted.com fonts.googleapis.com;       style-src-attr 'unsafe-inline' cdn.orsted.com;       img-src 'self' data: cdn.orsted.com *.azureedge.net *.youtube.com *.23video.com delivery.twentythree.com www.googletagmanager.com *.lfeeder.com *.linkedin.com *.doubleclick.net *.pardot.com;       media-src 'self' blob: cdn.orsted.com *.youtube.com *.23video.com delivery.twentythree.com;       font-src 'self' data: fonts.gstatic.com cdn.orsted.com;       frame-src 'self' *.app.cookieinformation.com *.youtube.com *.23video.com delivery.twentythree.com *.google.com *.google.nl *.googletagmanager.com *.doubleclick.net *.pardot.com;       connect-src 'self' *.app.cookieinformation.com *.euroland.com *.eum-appdynamics.com *.googletagmanager.com *.google.com *.doubleclick.net *.googleadservices.com *.crazyegg.com *.linkedin.com orsted.piwik.pro *.pardot.com *.signalfx.com;       worker-src 'self'; 1
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/  https://widget.trustpilot.com;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://appleid.cdn-apple.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com myheritage-partners.com  'unsafe-eval' 'nonce-abb09c072a100cf676cccd6f1b2e4e5c' 'strict-dynamic' https://widget.trustpilot.com https://invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style  https://widget.trustpilot.com;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io https://www.google.com/recaptcha/enterprise/* https://www.google.com/recaptcha/enterprise/ https://www.google.com/recaptcha/enterprise/clr https://www.google.com/recaptcha/ https://maps.googleapis.com https://people.googleapis.com https://translate-pa.googleapis.com myheritage-partners.com https://widget.trustpilot.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:  https://widget.trustpilot.com https://*.trustpilot.com;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=report&canonical_page_id=/company/home/ 1
object-src 'none';base-uri 'self';script-src 'nonce-t2GdZi-tds3dAQ5pTpdlWw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.fontawesome.com maxcdn.bootstrapcdn.com geowidget.easypack24.net fonts.gstatic.com *.tophifi.pl data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.googlesyndication.com 'self'; frame-src bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.youtube-nocookie.com *.google.com/ pay.google.com play.google.com *.autopay.eu *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com *.paypal.com * *.cookiebot.com *.cookiebot.eu creativecdn.com *.criteo.com td.doubleclick.net www.googletagmanager.com *.tophifi.pl tbs.tradedoubler.com www.youtube.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://www.magezon.com platnosci.bm.pl platnosci-accept.bm.pl www.gstatic.com *.autopay.eu https://*.openstreetmap.org tile.openstreetmap.org mapa.orlenpaczka.pl ruch-osm.sysadvisors.pl magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.google-analytics.com *.bing.com *.clarity.ms *.cookiebot.com *.usercentrics.eu *.g.doubleclick.net geowidget.easypack24.net www.facebook.com www.google.pl *.google.com *.googleapis.com pagead2.googlesyndication.com *.googletagmanager.com *.gstatic.com ssl.ceneo.pl *.tophifi.pl *.user.com *.facebook.com *.reddit.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com/ *.autopay.eu pay.google.com *.google-analytics.com *.googletagmanager.com mapa.orlenpaczka.pl cdn.jsdelivr.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com analytics.ahrefs.com *.bing.com ssl.ceneo.pl *.clarity.ms static.cloudflareinsights.com *.cookiebot.com *.cookiebot.eu *.criteo.com dc.cux.io geowidget.easypack24.net connect.facebook.net *.google.com maps.googleapis.com www.gstatic.com ec.monplat-cdn.com *.tophifi.pl wrap.tradedoubler.com *.user.com wss://tophifi.user.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.fontawesome.com *.autopay.eu *.googleapis.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net assets.braintreegateway.com geowidget.easypack24.net tagmanager.google.com fonts.googleapis.com googletagmanager.com *.tophifi.pl *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src video.cdninstagram.com *.user.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com vimeo.com *.google-analytics.com https://*.openstreetmap.org nominatim.openstreetmap.org api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com analytics.ahrefs.com *.clarity.ms *.cookiebot.com *.cookiebot.eu *.criteo.com *.g.doubleclick.net api-shipx-pl.easypack24.net www.facebook.com *.googleapis.com pagead2.googlesyndication.com *.googletagmanager.com csr.onet.pl *.tophifi.pl tophifi.user.com wss://tophifi.user.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.bing.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com https://www.google.fr https://api.mapbox.com *.tile.openstreetmap.org data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net https://cdnjs.cloudflare.com https://maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.googleapis.com *.googletagmanager.com *.fontawesome.com https://fonts.googleapis.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog https://maps.googleapis.com https://nominatim.openstreetmap.org 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-m6ygxQdBlksXeUL-f2KB4Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';font-src 'self' data: https://fonts.gstatic.com/s/;img-src 'self' http://imgsct.cookiebot.eu https://img.sct.eu1.usercentrics.eu data: https://px.ads.linkedin.com https://px4.ads.linkedin.com https://pagead2.googlesyndication.com;connect-src 'self' https://consentcdn.cookiebot.eu https://consent.cookiebot.eu https://defensie.matomo.cloud https://pagead2.googlesyndication.com https://px.ads.linkedin.com;script-src 'self' 'strict-dynamic' https://consentcdn.cookiebot.eu/consentconfig/ https://defensie.matomo.cloud 'nonce-8K/sesXRMEFtzp1OPS25YM13';style-src 'self' 'unsafe-inline' 1
default-src 'self'; worker-src 'self' https://unpkg.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://ep2.adtrafficquality.google https://fundingchoicesmessages.google.com https://cdn.taboola.com https://cdn.taboola-display.com https://*.taboola.com https://static.cloudflareinsights.com https://*.rubiconproject.com https://*.criteo.com; img-src 'self' https: data: blob: https://fundingchoicesmessages.google.com; style-src 'self' 'unsafe-inline' https:; font-src 'self' https: data:; connect-src 'self' https: http://localhost:* http://127.0.0.1:* data: blob: https://fundingchoicesmessages.google.com https://static.cloudflareinsights.com https://cdn.taboola-display.com https://*.taboola.com https://*.rubiconproject.com https://*.criteo.com; media-src 'self' https: data: blob:; frame-src 'self' https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://ep2.adtrafficquality.google https://fundingchoicesmessages.google.com https://www.google.com https://*.taboola.com https://cdn.taboola.com https://cdn.taboola-display.com https://*.rubiconproject.com; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-UKomu5hCFS5HJPanS_fiGQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; connect-src *; frame-src *; img-src * data:; object-src 'none'; script-src * 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; frame-src 'self' https://www.youtube.com; connect-src 'self' https://www.google-analytics.com; frame-ancestors 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://mc.yandex.ru https://www.google-analytics.com https://accounts.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; connect-src 'self' https://www.googletagmanager.com https://mc.yandex.ru https://www.google-analytics.com https://region1.google-analytics.com; frame-src https://datalens.yandex https://www.googletagmanager.com https://www.youtube.com https://accounts.google.com; object-src 'none'; base-uri 'self' 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https:; frame-src https:; worker-src 'self' blob: 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cash-f.squarecdn.com https://cdn.riverty.design/ use.fontawesome.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com static.dhlparcel.nl fonts.googleapis.com kit-pro.fontawesome.com fonts.bunny.net cdn.jsdelivr.net zinzi.nl www.zinzi.nl data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * uc8.tv www.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * uc8.tv https://documents.riverty.com/ *.sharethis.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com marcvanwilligen.nl www.marcvanwilligen.nl *.trustpilot.com *.fls.doubleclick.net view.publitas.com zinzi.prepaidpoint.nl checkoutshopper-test.adyen.com www.facebook.com ct.pinterest.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https://cdn.myafterpay.com/ uc8.tv https://cdn.riverty.design/ *.sharethis.com www.facebook.com *.fls.doubleclick.net www.zinzi.nl *.datatrics.com *.pinterest.com static.sooqr.com maps.googleapis.com maps.gstatic.com checkoutshopper-test.adyen.com ssl.google-analytics.com *.ggpht.com trengo.s3.eu-central-1.amazonaws.com *.sooqr.com cdn.magmodules.eu www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.magmodules.eu *.squeezely.tech ade.googlesyndication.com uat-secure.pointspay.com secure.pointspay.com *.pointspay.com imgsct.cookiebot.com zinzi.nl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com checkoutshopper-test.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com uc8.tv https://cdn.myafterpay.com/ https://cdn.bnpl.riverty.io/ *.sharethis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com widget.trustpilot.com marcvanwilligen.nl www.marcvanwilligen.nl *.googletagmanager.com *.widget.trengo.eu connect.facebook.net *.pinterest.com *.datatrics.com static.sooqr.com view.publitas.com maps.googleapis.com ssl.google-analytics.com www.zinzi.nl s.pinimg.com static.dhlparcel.nl https://widget-acc.paazl.com https://widget.paazl.com https://api-acc.paazl.com https://api.paazl.com *.sooqr.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com squeezely.tech www.squeezely.tech *.squeezely.tech *.marcvanwilligen.nl loylfy.test consent.cookiebot.com app.varify.io varify.io widget.paazl.com api.paazl.com widget-acc.paazl.com api-acc.paazl.com consentcdn.cookiebot.com js-agent.newrelic.com zinzi.nl analytics.tiktok.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.sharethis.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com marcvanwilligen.nl www.marcvanwilligen.nl *.fontawesome.com static.sooqr.com static.dhlparcel.nl https://widget-acc.paazl.com https://widget.paazl.com https://api-acc.paazl.com https://api.paazl.com *.sooqr.com assets.braintreegateway.com *.marcvanwilligen.nl fonts.bunny.net *.widget.trengo.eu ct.pinterest.com widget-acc.paazl.com api-acc.paazl.com widget.paazl.com api.paazl.com zinzi.nl www.zinzi.nl 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.widget.trengo.eu 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * https://cdn.myafterpay.com/ https://documents.myafterpay.com/ https://documents.riverty.com/ https://www.afterpay.nl/ https://cdn.bnpl.riverty.io/ https://trace-api.newrelic.com/ https://distributions.crowdin.net/ https://api.crowdin.com/ *.sharethis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.widget.trengo.eu *.trengohelp.com stats.g.doubleclick.net *.datatrics.com api-acc.paazl.com *.amazonaws.com maps.googleapis.com ct.pinterest.com https://widget-acc.paazl.com https://widget.paazl.com https://api-acc.paazl.com https://api.paazl.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com squeezely.tech *.squeezely.tech pagead2.googlesyndication.com region1.google-analytics.com app.varify.io varify.io widget.paazl.com widget-acc.paazl.com consentcdn.cookiebot.com googleads.g.doubleclick.net/ sst.zinzi.nl api.paazl.com zinzi.nl www.zinzi.nl 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' *.hsadspixel.net *.hs-analytics.net *.hs-scripts.com *.hubspot.com static.hsappstatic.net *.usemessages.com *.hs-banner.com *.hscollectedforms.net *.hsleadflows.net *.hsforms.net *.hsforms.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspot.net js.hscta.net *.hubspotfeedback.com feedback.hubapi.com 'strict-dynamic' 'nonce-Swlp1j743zUn9fbnhs4PPg=='; img-src 'self' data: *.hubspot.com no-cache.hubspot.com js.hscta.net *.hsforms.net *.hsforms.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspot.net *.hubspotusercontent-eu1.net cdn2.hubspot.net static.hsappstatic.net www.google.se www.google.com www.facebook.com region1.analytics.google.com stats.g.doubleclick.net googleads.g.doubleclick.net pagead2.googlesyndication.com sdk.privacy-center.org www.googletagmanager.com mnd-assets.mynewsdesk.com; connect-src 'self' *.hubapi.com *.hubspot.com js.hscta.net *.hs-banner.com *.hscollectedforms.net *.hsforms.net *.hsforms.com *.hs-analytics.net www.google.com ad.doubleclick.net plausible.io data.advania.se analytics.google.com api.privacy-center.org m.clarity.ms pagead2.googlesyndication.com; frame-src 'self' data.advania.se *.hubspot.com *.hs-sites.com advania-25168988.hs-sites-eu1.com *.hsforms.net *.hsforms.com *.hubspot.net play.hubspotvideo.com recognition.ecovadis.com; style-src 'self' 'unsafe-inline' static.hsappstatic.net use.typekit.net p.typekit.net cdn.jsdelivr.net *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net cdn2.hubspot.net; font-src 'self' use.typekit.net fonts.gstatic.com *.hubspotusercontent-eu1.net static.hsappstatic.net 1
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/startup_google_com 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.affirm.com *.affirm.ca *.authorize.net https://www.youtube.com https://s7.addthis.com *.addthis.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.affirm.com *.affirm.ca store.paradoxlabs.com https://secure.trust-provider.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.affirm.com *.affirm.ca widget.freshworks.com m2epro.freshdesk.com *.authorize.net https://seal.digicert.com https://www.googletagmanager.com https://www.google-analytics.com https://server2.countercentral.com https://s7.addthis.com *.addthis.com *.addthisedge.com https://z.moatads.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.affirm.com *.affirm.ca widget.freshworks.com m2epro.freshdesk.com *.authorize.net https://www.google-analytics.com https://server2.countercentral.com *.addthis.com https://s7.addthis.com https://www.youtube.com *.addthisedge.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' https:; connect-src 'self' https:; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; frame-src 'self' https:; report-uri https://fea288dc3a293a645b8e665215b90747.report-uri.com/r/d/csp/reportOnly; 1
default-src 'self' https: 'unsafe-inline' data: 'unsafe-eval'; report-uri https://servix.idnes.cz/log/csp-report.aspx?w=arome 1
default-src 'self'; script-src 'self' 'nonce-3E5jixin8SqhBkRy63TAnA==' 'strict-dynamic' https: 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn-images.mailchimp.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.facebook.com https://platform.twitter.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://*.googlesyndication.com https://tpc.googlesyndication.com https://*.adtrafficquality.google https://www.google.com; connect-src 'self' https://*.google-analytics.com https://*.googlesyndication.com https://*.doubleclick.net https://*.adtrafficquality.google https://www.google.com https://fundingchoicesmessages.google.com; object-src 'none'; base-uri 'none'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.googlesyndication.com *.googleadservices.com *.doubleclick.net *.google-analytics.com www.googletagmanager.com va.vercel-scripts.com vitals.vercel-insights.com challenges.cloudflare.com tags.srv.stackadapt.com *.tiktok.com *.tiktokw.us *.attn.tv *.attentivemobile.com *.crispnow.com *.honeybook.com *.facebook.com connect.facebook.net *.cloudfront.net *.userway.org *.audioeye.com *.audioeye-services.com *.formstack.com *.hsforms.net *.hsforms.com *.hubspot.com *.clarity.ms; style-src 'self' 'unsafe-inline' use.typekit.net p.typekit.net tags.srv.stackadapt.com *.googleapis.com *.tiktok.com *.tiktokw.us *.attn.tv *.attentivemobile.com *.crispnow.com *.userway.org *.audioeye.com *.audioeye-services.com *.formstack.com *.hsforms.net *.hsforms.com *.hubspot.com; img-src 'self' data: blob: *.clarity.ms cdn.shopify.com picsum.photos *.placehold.co api.mapbox.com events.mapbox.com *.tiles.mapbox.com *.tile.openstreetmap.org *.google.com *.googlesyndication.com *.googleadservices.com *.doubleclick.net *.google-analytics.com www.googletagmanager.com tags.srv.stackadapt.com *.tiktok.com *.tiktokw.us *.attn.tv *.attentivemobile.com *.crispnow.com *.facebook.com connect.facebook.net *.honeybook.com *.userway.org *.audioeye.com *.audioeye-services.com *.formstack.com *.hsforms.net *.hsforms.com *.hubspot.com cdn.sanity.io *.sanity.io *.apicdn.sanity.io; media-src 'self' cdn.shopify.com; font-src 'self' use.typekit.net p.typekit.net data: *.googleapis.com *.gstatic.com swig.franconnect.net *.formstack.com; connect-src 'self' *.google.com *.googlesyndication.com *.googleadservices.com *.doubleclick.net *.google-analytics.com www.googletagmanager.com va.vercel-scripts.com vitals.vercel-insights.com api.mapbox.com events.mapbox.com *.tiles.mapbox.com challenges.cloudflare.com tags.srv.stackadapt.com *.tiktok.com *.tiktokw.us *.attn.tv *.attentivemobile.com *.crispnow.com *.facebook.com connect.facebook.net *.honeybook.com *.cloudfront.net *.userway.org *.audioeye.com *.audioeye-services.com *.salesforce-sites.com *.formstack.com *.hsforms.net *.hsforms.com *.hubspot.com *.clarity.ms cdn.sanity.io *.sanity.io *.apicdn.sanity.io; frame-src 'self' challenges.cloudflare.com www.googletagmanager.com *.google.com *.googlesyndication.com *.doubleclick.net *.tiktok.com *.tiktokw.us *.attn.tv *.attentivemobile.com *.crispnow.com *.honeybook.com *.facebook.com connect.facebook.net swig.franconnect.net *.swig.franconnect.net *.formstack.com *.hsforms.net *.hsforms.com *.hubspot.com 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' *.clockwisemd.com *.amazonaws.com *.livehelpnow.net wss://app.livehelpnow.net *.polyfill.io *.googleapis.com *.jsdelivr.net code.jquery.com *.gstatic.com *.google.com *.bootstrapcdn.com healthsparq.com *.healthsparq.com *.googletagmanager.com *.typekit.net *.bing.com *.clarity.ms *.doubleclick.net *.googleoptimize.com *.google-analytics.com *.callrail.com unpkg.com *.facebook.net *.googlesyndication.com *.spinutech.com *.sitescout.com addsearch.com *.addsearch.com *.cloudfront.net *.searchcdn.com *.browserstack.com wss://*.browserstack.com *.linkedin.oribi.io; img-src * 'self' data:; media-src 'self' s3.amazonaws.com; frame-ancestors 'self'; object-src 'none'; form-action 'self' *.spinutech.com accounts.google.com *.facebook.com; base-uri 'self'; report-uri https://services.spinudev.com/csp/cspreport; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.klevu.com *.ksearchnet.com https://www.gstatic.com https://fonts.gstatic.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.paytrace.com www.tiktok.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://meetanshi.com/media/logo.png fmgaggi.com images.simpletire.com rs.fullstory.com https://www.google-analytics.com https://www.googletagmanager.com https://bat.bing.com https://t.co https://analytics.twitter.com https://www.facebook.com https://px.ads.linkedin.com https://analytics.tiktok.com www.tiktok.com *.tiktokcdn.com *.tiktokcdn-us.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.klevu.com *.ksearchnet.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.disqus.com *.paytrace.com hotjar.com fmgaggi.com simpletire.com edge.fullstory.com rs.fullstory.com cdn.rudderlabs.com https://www.googletagmanager.com https://www.google-analytics.com https://bat.bing.com https://static.ads-twitter.com https://connect.facebook.net https://snap.licdn.com https://analytics.tiktok.com https://us-assets.i.posthog.com https://eu-assets.i.posthog.com www.tiktok.com *.tiktokcdn.com *.tiktokcdn-us.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com simpletire.com assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com api.addressy.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com fmgaggi.com static.hotjar.com simpletire.com affiliate.simpletire.com edge.fullstory.com rs.fullstory.com api.rudderstack.com https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com https://bat.bing.com https://analytics.twitter.com https://www.facebook.com https://px.ads.linkedin.com https://analytics.tiktok.com https://us.i.posthog.com https://eu.i.posthog.com www.tiktok.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://wc.alomone-prod.signatureit.app https://app-pim.alomone.com https://pim.alomone.com https://alomone-stage.signatureit.app https://wc.alomone-stage.signatureit.app https://alomone-stage-2.signatureit.app https://wc.alomone-stage-2.signatureit.app https://cdnjs.cloudflare.com https://wc-pim.alomone.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://www.googletagmanager.com https://td.doubleclick.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://images.unsplash.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://www.bioz.com https://wc-pim.alomone.com https://*.google-analytics.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google.com https://www.google.co.il https://px.ads.linkedin.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page https://www.googletagmanager.com https://maps.googleapis.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://wc.alomone-prod.signatureit.app https://app-pim.alomone.com https://pim.alomone.com/ https://alomone-stage.signatureit.app https://wc.alomone-stage.signatureit.app https://alomone-stage-2.signatureit.app https://wc.alomone-stage-2.signatureit.app https://wc-pim.alomone.com https://consentcdn.cookiebot.com https://www.bioz.com 'self' https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google-analytics.com https://snap.licdn.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com https://wc.alomone-prod.signatureit.app https://app-pim.alomone.com https://pim.alomone.com https://app.alomone-stage.signatureit.app https://alomone-stage.signatureit.app https://wc.alomone-stage.signatureit.app https://app.alomone-stage-2.signatureit.app https://alomone-stage-2.signatureit.app https://wc.alomone-stage-2.signatureit.app https://cdnjs.cloudflare.com https://wc-pim.alomone.com 'self' *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://wc.alomone-prod.signatureit.app https://app-pim.alomone.com https://pim.alomone.com https://app.alomone-stage.signatureit.app https://app.alomone-stage-2.signatureit.app https://wc-pim.alomone.com https://consentcdn.cookiebot.com https://www.bioz.com https://*.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com https://ad.doubleclick.net https://px.ads.linkedin.com rum.hlx.page/ t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' https://fonts.gstatic.com; connect-src 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.bootstrapcdn.com *.braintreegateway.com *.cloudflare.com *.cloudmaestro.com *.doubleclick.net *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.livechatinc.com *.paypal.com *.tealiumiq.com *.twpinc.com bam.nr-data.net chimpstatic.com connect.facebook.net ct.pinterest.com js-agent.newrelic.com payments.braintree-api.com *.sitescout.com s.pinimg.com script.crazyegg.com tags.tiqcdn.com www.facebook.com www.google-analytics.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://seo.mageplaza.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.google.com *.dotdigital-pages.com *.dotdigital.com *.braintreegateway.com *.doubleclick.net *.googletagmanager.com *.gstatic.com *.hotjar.com *.livechatinc.com *.paypal.com *.tealiumiq.com *.twpinc.com bam.nr-data.net chimpstatic.com connect.facebook.net ct.pinterest.com js-agent.newrelic.com payments.braintree-api.com *.sitescout.com s.pinimg.com script.crazyegg.com tags.tiqcdn.com www.facebook.com www.google-analytics.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com landofcoder.com *.weltpixel.com graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.pinterest.com *.pinterdev.com commerce-app.pintergration.com https://plumrocket.com *.wesupply.xyz https://wesupplylabs.com guarantee-cdn.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.trackedlink.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.bootstrapcdn.com *.braintreegateway.com *.cloudmaestro.com *.doubleclick.net *.godaddy.com *.google.com *.gstatic.com *.hotjar.com *.livechatinc.com *.paypal.com *.tealiumiq.com *.twpinc.com bam.nr-data.net chimpstatic.com connect.facebook.net ct.pinterest.com d10lpsik1i8c69.cloudfront.net js-agent.newrelic.com payments.braintree-api.com *.sitescout.com s.pinimg.com script.crazyegg.com tags.tiqcdn.com www.facebook.com www.google-analytics.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com magefan.com cm.magefan.com graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com guarantee-cdn.com *.facebook.com *.reddit.com *.googletagmanager.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.gstatic.com *.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.cookie-script.com *.addtoany.com *.bootstrapcdn.com *.braintreegateway.com *.cloudflare.com *.cloudmaestro.com *.crazyegg.com *.ctctcdn.com *.doubleclick.net *.facebook.com *.fontawesome.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.hotjar.com *.ipdata.co *.kaptcha.com *.klaviyo.com *.livechatinc.com *.paypal.com *.paypalobjects.com *.pinimg.com *.pinterest.com *.tealiumiq.com *.twpinc.com connect.facebook.net d10lpsik1i8c69.cloudfront.net payments.braintree-api.com *.sitescout.com seal.godaddy.com tags.tiqcdn.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com landofcoder.com www.facebook.com graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.pinterdev.com commerce-app.pintergration.com guarantee-cdn.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.bootstrapcdn.com *.braintreegateway.com *.cloudflare.com *.cloudmaestro.com *.ctctcdn.com *.doubleclick.net *.fontawesome.com *.google.com *.googleapis.com *.gstatic.com *.hotjar.com *.livechatinc.com *.paypal.com *.tealiumiq.com *.twpinc.com *.youtube.com bam.nr-data.net chimpstatic.com connect.facebook.net ct.pinterest.com d10lpsik1i8c69.cloudfront.net js-agent.newrelic.com payments.braintree-api.com *.sitescout.com s.pinimg.com script.crazyegg.com tags.tiqcdn.com www.facebook.com www.google-analytics.com www.googletagmanager.com www.paypalobjects.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com *.braintreegateway.com *.doubleclick.net *.google.com *.gstatic.com *.hotjar.com *.livechatinc.com *.paypal.com *.tealiumiq.com *.twpinc.com bam.nr-data.net chimpstatic.com connect.facebook.net ct.pinterest.com d10lpsik1i8c69.cloudfront.net js-agent.newrelic.com payments.braintree-api.com *.sitescout.com s.pinimg.com script.crazyegg.com tags.tiqcdn.com www.facebook.com www.google-analytics.com www.googletagmanager.com www.paypalobjects.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline';, connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.addthis.com *.braintreegateway.com *.cloudflare.com *.crazyegg.com *.doubleclick.net *.google.com *.googletagmanager.com *.gstatic.com *.hotjar.io *.hotjar.com *.kaptcha.com *.livechatinc.com *.luckyorange.net *.paypal.com *.pinimg.com *.pinterest.com *.tealiumiq.com *.twpinc.com *.visitors.live chimpstatic.com connect.facebook.net js-agent.newrelic.com payments.braintree-api.com *.sitescout.com tags.tiqcdn.com www.facebook.com www.google-analytics.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com landofcoder.com graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com google.com *.pinterdev.com commerce-app.pintergration.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app 'self' 'unsafe-inline'; child-src *.googletagmanager.com d10lpsik1i8c69.cloudfront.net blob: assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.cookie-script.com *.addtoany.com *.bootstrapcdn.com *.braintreegateway.com chimpstatic.com *.cloudflare.com *.cloudmaestro.com *.crazyegg.com *.ctctcdn.com *.doubleclick.net *.facebook.com *.fontawesome.com *.google-analytics.com *.google.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.ipdata.co *.kaptcha.com *.klaviyo.com *.livechatinc.com *.newrelic.com *.nr-data.net *.paypal.com *.paypalobjects.com *.pinimg.com *.pinterest.com *.tealiumiq.com *.twpinc.com connect.facebook.net d10lpsik1i8c69.cloudfront.net payments.braintree-api.com *.sitescout.com seal.godaddy.com tags.tiqcdn.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://a1d80435-4e21-470f-aed0-a54f39d4d350.sansec.watch/; report-to report-endpoint; 1
default-src 'self';   script-src 'self' 'unsafe-inline' 'report-sample' https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://www.gstatic.com https://www.google.com https://maxcdn.bootstrapcdn.com https://blueprint.sirv.com;   script-src-elem 'self' 'unsafe-inline' 'report-sample' https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://www.gstatic.com https://www.google.com https://cdn.cookielaw.org https://code.jquery.com https://ajax.aspnetcdn.com https://blueprint.sirv.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://acsbap.com https://acsbapp.com/  https://fast.wistia.net https://browser.sentry-cdn.com https://ca.netcheckin.com https://connect.facebook.net https://capi-automation.s3.us-east-2.amazonaws.com https://googleads.g.doubleclick.net;   style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maps.googleapis.com https://www.gstatic.com https://cdn.jsdelivr.net https://use.typekit.net https://p.typekit.net https://maxcdn.bootstrapcdn.com https://blueprint.sirv.com https://cdnjs.cloudflare.com;   font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net https://use.typekit.net https://maxcdn.bootstrapcdn.com https://blueprint.sirv.com https://ca.netcheckin.com;   img-src 'self' data: blob: https://*.googleapis.com https://maps.gstatic.com https://*.ggpht.com https://*.google.com https://www.google-analytics.com https://www.googletagmanager.com https://i.ytimg.com https://blueprint.sirv.com https://www.facebook.com https://dynacareonline.com;   connect-src 'self' https://www.google.com https://www.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://maps.googleapis.com https://www.googletagmanager.com https://cdn.cookielaw.org https://blueprint.sirv.com https://cdn.acsbapp.com https://acsbap.com https://acsbapp.com;   frame-src 'self' https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://td.doubleclick.net https://blueprint.sirv.com https://map.waitwell.ca https://*.cloudflarestream.com/;   media-src 'self' data: blob:;   worker-src 'self' blob:;   object-src 'none';   base-uri 'self';   frame-ancestors 'self';   form-action 'self' https: 1
font-src fonts.googleapis.com fonts.gstatic.com *.googleapis.com https://*.gstatic.com data: https://www.googletagmanager.com *.gstatic.com *.doubleclick.net *.facebook.com *.googlesyndication.com https://v2.zopim.com https://fonts.gstatic.com *.fontawesome.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.googlesyndication.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self' https://trustedpartner.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.google.com *.google.com/ *.doubleclick.net *.facebook.com *.googlesyndication.com https://widget.trustpilot.com js.mollie.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com 'self' data: https://www.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com https://belco-prod.s3-eu-central-1.amazonaws.com https://v2assets.zopim.io https://v2.zopim.com https://www.google.rs https://www.google.nl https://www.google.pl https://www.google.uk https://www.google.de https://*.fbtest.io https://www.zandri.nl https://*.cookiebot.com *.etrusted.com https://c.bing.com https://c.clarity.ms https://squeezely.tech https://static.zandri.nl *.bing.com *.google.hr *.squeezely.tech *.sooqr.com *.spotlersearch.com https://www.magezon.com https://www.mollie.com assets.myparcel.nl *.google-analytics.com ssl.gstatic.com www.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com data: 'self' 'unsafe-inline'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com https://*.googleapis.com https://*.etrusted.com *.sooqr.com *.spotlersearch.com https://fonts.googleapis.com *.fontawesome.com cdn.jsdelivr.net fonts.google.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; connect-src https://tagging.zandri.nl dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.google-analytics.com *.facebook.com *.facebook.net https://stats.g.doubleclick.net *.googlesyndication.com wss://chat.belco.io https://cdn.belco.io https://ekr.zendesk.com https://devdocs.magento.com wss://widget-mediator.zopim.com https://ekr.zdassets.com https://*.clerk.io https://bat.bing.com https://a.clarity.ms https://consentcdn.cookiebot.com https://squeezely.tech *.amazonaws.com *.clarity.ms *.sooqr.com *.spotlersearch.com api.myparcel.nl cdn.jsdelivr.net *.analytics.google.com *.googletagmanager.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https: 'self' 'unsafe-inline'; script-src https://tagging.zandri.nl assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net https://cdn.belco.io https://devdocs.magento.com https://magento.com https://v2.zopim.com https://static.zdassets.com https://amcglobal.sc.omtrdc.net https://static.hotjar.com http://custom.clerk.io http://widgets.trustedshops.com https://widgets.trustedshops.com http://widgets-qa.trustedshops.com https://widgets-qa.trustedshops.com http://static-app.connect.trustedshops.com https://static-app.connect.trustedshops.com http://static-app.connect-qa.trustedshops.com https://static-app.connect-qa.trustedshops.com http://integrations.etrusted.com https://integrations.etrusted.com https://*.clerk.io https://*.cookiebot.com https://*.cloudfront.net https://bat.bing.com https://squeezely.tech https://www.clarity.ms https://scripts.clarity.ms *.spotlersearchanalytics.com https://js.mollie.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://integrations.etrusted.site https://unpkg.com *.sooqr.com *.spotlersearch.com spotlersearchanalytics.com js.mollie.com cdnjs.cloudflare.com cdn.jsdelivr.net *.etrusted.com https: 'self' 'unsafe-inline' 'unsafe-eval'; 1
font-src *.googleapis.com *.gstatic.com 'self' data: https://widgets.trustedshops.com https://integrations.etrusted.com fonts.gstatic.com *.directplant.nl *.googleusercontent.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action www.routexl.com *.facebook.com *.directplant.nl 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ https://www.paypal.com *.trustpilot.com *.newrelic.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.aiden.cx *.bing.com *.cookiebot.com *.facebook.com *.google.com google.com *.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.googleapis.com *.gstatic.com https://portal.payconiq.com https://static.buckaroo.nl https://www.paypalobjects.com bat.bing.com magefan.com cm.magefan.com https://redchamps.com *.hsforms.net *.hsforms.com 'self' data: https://widgets.trustedshops.com https://integrations.etrusted.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com *.baidu.com *.cookiebot.com directplant.nl *.directplant.nl *.facebook.net *.ggpht.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.by www.google.ca www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zm www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.hn www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mu www.google.mv www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk www.google.sn www.google.sr www.google.td www.google.tg www.google.tn www.google.tt google.com *.googlesyndication.com *.googleusercontent.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com bat.bing.com api.ipify.org *.trustpilot.com *.hsforms.net *.hsforms.com *.google.com https://widgets.trustedshops.com https://integrations.etrusted.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net *.aiden.cx *.cookiebot.com *.directplant.nl *.google-analytics.com *.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://integrations.etrusted.com *.trustpilot.com *.tagmanager.google.com *.googletagmanager.com *.directplant.nl 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.googleapis.com wss://websocketservice-externalapi.prod.buckaroo.io https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://applepay.buckaroo.io https://www.paypal.com bat.bing.com www.feedbackcompany.com www.routexl.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.trustedshops.com *.etrusted.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app *.aiden.cx *.cookiebot.com *.directplant.nl *.facebook.com www.google.al www.google.at www.google.be www.google.bg www.google.ca www.google.ch www.google.cl www.google.co.cr www.google.co.in www.google.co.jp www.google.co.ma www.google.com.au www.google.com.br www.google.com.eg www.google.com.lb www.google.com.mt www.google.com.om www.google.com.ph www.google.com.pk www.google.com.py www.google.com.sa www.google.com.tr www.google.com.tw www.google.com.ua www.google.co.nz www.google.co.th www.google.co.uk www.google.co.uz www.google.co.za www.google.cz www.google.de www.google.dk www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gm www.google.gr www.google.hr www.google.hu www.google.ie www.google.im www.google.it www.google.je www.google.la www.google.lt www.google.lu www.google.lv www.google.md www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.se www.google.si www.google.sk www.google.sr *.google.com google.com *.googlesyndication.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; report-uri https://159deafb-d168-41e7-a7b8-8d8b5d09888c.sansec.watch/; report-to report-endpoint; 1
default-src 'none';script-src 'self' 'strict-dynamic' 'unsafe-eval' https://app.eu.pendo.io 'nonce-51odH8K4LYgDid5ubPc2HPZiQL32Qh24moBgvIfo';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://app.eu.pendo.io;img-src 'self' data: https://cdn.ecoonline.com https://app.eu.pendo.io https://data.analytics.eu.ecoonline.net;font-src 'self' https://fonts.gstatic.com;connect-src 'self' https://browser-intake-datadoghq.eu https://*.browser-intake-datadoghq.eu https://app.eu.pendo.io https://data.analytics.eu.ecoonline.net https://cdn.ecoonline.com;frame-src 'self' https://app.eu.pendo.io;form-action 'self';frame-ancestors 'self';base-uri 'self';object-src 'none';report-uri https://csp-report.browser-intake-datadoghq.eu/api/v2/logs?dd-api-key=puba63002829682517c5807eb8f1d779e7a&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service:identity 1
default-src 'self' http: https: data: blob: 'unsafe-eval' 'unsafe-inline'; frame-ancestors 'self' https://*.test.voxteneo.com; 1
default-src 'self' https://d8a2ynxbg3poq.cloudfront.net; script-src 'self' 'unsafe-inline'  https://d8a2ynxbg3poq.cloudfront.net https://js.stripe.com https://m.stripe.com https://m.stripe.network https://cdn.segment.com https://www.googletagmanager.com https://kit.fontawesome.com https://scripts.clarity.ms https://www.clarity.ms https://*.zdassets.com; style-src 'self' 'unsafe-inline' https://d8a2ynxbg3poq.cloudfront.net https://ka-p.fontawesome.com; img-src 'self' data: blob: https://d8a2ynxbg3poq.cloudfront.net https://dx7dafuy8g98k.cloudfront.net https://d2kcd4y6vw7b6c.cloudfront.net https://d38mo25iqqfq0c.cloudfront.net https://bs-cms.s3.amazonaws.com https://dbzi37b773ors.cloudfront.net https://d8a2ynxbg3poq.cloudfront.net https://d2xom1ma4288ob.cloudfront.net https://voicebunny.s3.amazonaws.com https://lh3.googleusercontent.com https://dr4n1xxej5iaj.cloudfront.net https://d1cn040x5qo4s.cloudfront.net https://dev-static-content-bf.s3.us-west-2.amazonaws.com https://bunny-ui-static-content.s3.amazonaws.com https://file.audiostack.ai https://*.stripe.com https://*.clarity.ms; font-src 'self' data: https://d8a2ynxbg3poq.cloudfront.net https://ka-p.fontawesome.com; media-src 'self' https://d8a2ynxbg3poq.cloudfront.net https://dx7dafuy8g98k.cloudfront.net https://d2kcd4y6vw7b6c.cloudfront.net https://d38mo25iqqfq0c.cloudfront.net https://bs-cms.s3.amazonaws.com https://dbzi37b773ors.cloudfront.net https://d8a2ynxbg3poq.cloudfront.net https://d2xom1ma4288ob.cloudfront.net https://voicebunny.s3.amazonaws.com https://lh3.googleusercontent.com https://dr4n1xxej5iaj.cloudfront.net https://d1cn040x5qo4s.cloudfront.net https://dev-static-content-bf.s3.us-west-2.amazonaws.com https://bunny-ui-static-content.s3.amazonaws.com https://file.audiostack.ai; connect-src 'self' wss: https://d8a2ynxbg3poq.cloudfront.net https://api.stripe.com https://m.stripe.com https://m.stripe.network https://cdn.segment.com https://api.segment.io https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://scripts.clarity.ms https://*.clarity.ms https://ka-p.fontawesome.com https://*.zdassets.com https://*.zendesk.com https://cdn.jsdelivr.net; frame-src https://js.stripe.com https://*.zdassets.com https://*.zendesk.com; object-src 'none' 1
script-src 'nonce-c554209ee1862cae03f628210ae7b0af7284b3d537aefaeadb438ce3ac4ce70a' assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.autopay.eu pay.google.com *.google-analytics.com *.googletagmanager.com www.xtento.com cdn.xtento.com secure.payu.com secure.snd.payu.com https://cdnjs.cloudflare.com *.inpost.pl *.packeta.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com sandbox.przelewy24.pl secure.przelewy24.pl apm.przelewy24.pl *.facebook.net *.allekurier.pl *.hsforms.net *.hsforms.com 'self' *.trustpilot.com 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY/CkTMBhjNhwPvglpYumjx31B4fjkY8=' 'sha256-F20iqiqGicuuiFlhCPv0sBKJFT9sCplzelbf57o8GsI=' 'sha256-syV/eNOnvdKZkC4mI0Qgl6a+j1+UDhVcxAdH9K2eMUw='; style-src *.adobe.com fonts.googleapis.com *.autopay.eu *.googleapis.com https://fonts.googleapis.com https://cdnjs.cloudflare.com *.inpost.pl *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.typekit.net *.gstatic.com 'self' 'unsafe-inline' *.trustpilot.com; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com platnosci.bm.pl platnosci-accept.bm.pl www.gstatic.com *.autopay.eu www.xtento.com cdn.xtento.com static.payu.com *.inpost.pl magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com static.przelewy24.pl gstatic.com puccini.pl *.puccini.pl puccini.cz *.puccini.cz puccini.hu *.puccini.hu puccini.ro *.puccini.ro puccini.sk *.puccini.sk puccini.ua *.puccini.ua *.allekurier.pl *.wittchen.com *.hsforms.net *.hsforms.com 'self' data: 'self'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.google-analytics.com secure.payu.com merch-prod.snd.payu.com *.inpost.pl *.packeta.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com sandbox.przelewy24.pl secure.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self'; media-src *.adobe.com *.inpost.pl 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com pay.google.com play.google.com *.autopay.eu www.xtento.com secure.payu.com merch-prod.snd.payu.com *.inpost.pl *.dhl.pl *.dhl24.com.pl *.packeta.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * apm.przelewy24.pl *.googletagmanager.com 'self' *.trustpilot.com; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * sandbox.przelewy24.pl secure.przelewy24.pl 'self'; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: https://cdnjs.cloudflare.com *.inpost.pl *.fontawesome.com maxcdn.bootstrapcdn.com 'self' data: 'self'; frame-ancestors www.gstatic.com pay.google.com; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googleapis.com 'self'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com 'self'; object-src 'self'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com data: https://fonts.googleapis.com https://fonts.gstatic.com *.walmartimages.com *.amazonaws.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com www.xtento.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.avril.ca *.flippenterprise.net *.wishabi.net *.wishabi.com *.google.ca *.google.com *.bing.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.xtento.com cdn.xtento.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com blob: *.webpushr.com *.flippenterprise.net https://www.google-analytics.com *.stripe.com *.jsdelivr.net *.privacy-center.org *.zdassets.com *.zendesk.com https://*.privacy-center.org *.newrelic.com *.cloudflareinsights.com *.bing.com *.clarity.ms js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com www.xtento.com cdn.xtento.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.flippenterprise.net assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://developer.adobe.com *.flippenterprise.net *.launchdarkly.com *.flippback.com *.flipp.com *.doubleclick.net *.webpushr.com *.googlesyndication.com *.privacy-center.org *.zdassets.com *.zendesk.com *.nr-data.net *.clarity.ms https://*.privacy-center.org api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src https://*.privacy-center.org 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.zenaps.com *.fls.doubleclick.net https://www.googletagmanager.com/ js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.awin1.com *.zenaps.com *.wepowerconnections.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.google.com.ua maps.gstatic.com 1rx.io *.1rx.io 360yield.com *.360yield.com 3lift.com *.3lift.com adnxs.com *.adnxs.com billiger.de *.billiger.de bing.com *.bing.com criteo.com *.criteo.com doubleclick.net *.doubleclick.net facebook.com *.facebook.com google.de *.google.de idealo.com *.idealo.com media.net *.media.net omnitagjs.com *.omnitagjs.com roeye.com *.roeye.com roeyecdn.com *.roeyecdn.com sharethrough.com *.sharethrough.com smartadserver.com *.smartadserver.com taboola.com *.taboola.com teads.tv *.teads.tv tremorhub.com *.tremorhub.com twiago.com *.twiago.com uimserv.net *.uimserv.net usd.de *.usd.de usercentrics.eu *.usercentrics.eu yieldlab.net *.yieldlab.net https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com www.xtento.com cdn.xtento.com https://a.timeshop24.de data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io *.shopify.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com bing.com *.bing.com criteo.com *.criteo.com cdnsrv.de *.cdnsrv.de clickcease.com *.clickcease.com df-srv.de *.df-srv.de fatmedia.io *.fatmedia.io facebook.net *.facebook.net id5-sync.com *.id5-sync.com kuponacdn.de *.kuponacdn.de livechatinc.com *.livechatinc.com pinimg.com *.pinimg.com roeyecdn.com *.roeyecdn.com shopgate.com *.shopgate.com uicdn.com *.uicdn.com usercentrics.eu *.usercentrics.eu googletagmanager.com *.googletagmanager.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com www.xtento.com cdn.xtento.com https://www.dwin1.com https://a.timeshop24.de 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com googletagmanager.com *.googletagmanager.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de wepowerconnections.com https://the.sciencebehindecommerce.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com criteo.com *.criteo.com doubleclick.net *.doubleclick.net facebook.com *.facebook.com livechatinc.com *.livechatinc.com pinterest.com *.pinterest.com usercentrics.eu *.usercentrics.eu *.wepowerconnections.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://a.timeshop24.de 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net https://cdnjs.cloudflare.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors https://*.synchro-diffusion.com https://synchro-diffusion.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com https://*.synchro-diffusion.com https://synchro-diffusion.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://*.synchro-diffusion.com https://synchro-diffusion.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com beacon-qa.magento-datasolutions.com beacon-stage.magento-ds.com beacon.magento-ds.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ unpkg.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://cdnjs.cloudflare.com js-agent.newrelic.com use.fontawesome.com https://unpkg.com https://*.adobedtm.com https://*.jsdelivr.net https://*.newrelic.com https://*.synchro-diffusion.com https://synchro-diffusion.com https://resources.hellocustomer.com https://synchro-diffusion.survey.hellocustomer.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com https://fonts.googleapis.com https://cdnjs.cloudflare.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.snplow.net commerce.adobedc.net p13n-mr.adobe.io www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobedtm.com *.adobedc.net *.demdex.net *.adobe.io performance.typekit.net *.sentry.io form-assets.mailchimp.com *.intuit.com *.amazonaws.com bam.nr-data.net https://*.trustcommander.net https://*.commander1.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src blob:; font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br *.fontawesome.com *.yotpo.com *.googleapis.com https://fonts.bunny.net https: data: blob: https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.maskfitar.com https://plumrocket.com *.yotpo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.facebook.com medchatapp.com tr.snapchat.com/cm/i *.aeroflowdirect.com *.aeroflowbreastpumps.com *.aeroflowurology.com *.aeroflowsleep.com *.cpapsupplies.com *.cheapcpapsupplies.com *.motifmedical.com *.pumpingessentials.com *.lactationlink.com *.aeroflowdiabetes.com *.authorize.net 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com lootly.io *.aeroflowdirect.com *.aeroflowbreastpumps.com *.aeroflowurology.com *.aeroflowsleep.com *.cpapsupplies.com *.cheapcpapsupplies.com *.motifmedical.com *.pumpingessentials.com *.lactationlink.com *.aeroflowdiabetes.com shop.aeroflowinc.com *.aeroflow.dev *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.affirm.com *.affirm.ca t.sharethis.com *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com *.meetanshi.com https://plumrocket.com *.yotpo.com urology.nxfe2.aeroflow.ninja *.nxfe.aeroflow.ninja *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de lootly.io www.affirm.com cmp.osano.com ct.pinterest.com *.five9.net graph.instagram.com *.googlesyndication.com *.healthline.com medchatapp.com mozbar.moz.com tr.snapchat.com ws.sharethis.com www.facebook.com www.youtube.com www.youtube-nocookie.com aeroflow-breastpumps.gorgias.help help-center.gorgias.help www.instagram.com players.brightcove.net www.tiktok.com *.aeroflowdirect.com *.aeroflowbreastpumps.com *.aeroflowurology.com *.aeroflowsleep.com *.cpapsupplies.com *.cheapcpapsupplies.com *.motifmedical.com *.pumpingessentials.com *.lactationlink.com *.aeroflowdiabetes.com shop.aeroflowinc.com www.nbcnews.com/news/embedded-video/ ep2.adtrafficquality.google *.authorize.net https://*.online-metrix.net https://imgs.signifyd.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://aeroflow-experiments.com https://*.aeroflow-experiments.com upload-widget.cloudinary.com https://gtm.aeroflowurology.com https: 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.affirm.com *.affirm.ca *.sharethis.com *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com *.meetanshi.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com https://meetanshi.com/media/logo.png *.disqus.com *.yotpo.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https://img.youtube.com https://firebasestorage.googleapis.com https: blob: https://imgs.signifyd.com https://*.online-metrix.net https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://aeroflow-experiments.com https://*.aeroflow-experiments.com data: https: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.affirm.com *.affirm.ca *.sharethis.com https://ajax.googleapis.com https://cdn.jsdelivr.net *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com https://www.datadoghq-browser-agent.com *.meetanshi.com https://s3.amazonaws.com/idme/developer/idme-buttons/assets/* https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.yotpo.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de lootly.io cdn.rangetouch.com *.avada.io *.shopify.com https://static.kameleoon.com https://*.kameleoon.io https://js.appboycdn.com https://cdn.noibu.com https://staticw2.yotpo.com https://acds-events.adobe.io https://static.cloudflareinsights.com https://cmp.osano.com https://us01ccistatic.zoom.us https://bat.bing.com https://snippet.maze.com https://widget.gotolstoy.com https://lootly.io https://www.clarity.ms https://scripts.clarity.ms *.authorize.net https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net https://h6v3nfr72o.aeroflow-experiments.com https://*.kameleoon.com https://*.kameleoon.eu https://*.kameleoon.net https://aeroflow-experiments.com https://*.aeroflow-experiments.com widget.cloudinary.com/v2.0/global/all.js https://gtm.aeroflowurology.com https: 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.sharethis.com https://cdn.jsdelivr.net *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br *.tagmanager.google.com *.googletagmanager.com *.typeform.com https://static.klaviyo.com *.fontawesome.com *.yotpo.com *.googleapis.com https://fonts.bunny.net https: data: blob: https://fonts.googleapis.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://aeroflow-experiments.com https://*.aeroflow-experiments.com https: 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https: data: blob: 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.affirm.com *.affirm.ca *.sharethis.com https://ipapi.co https://ajax.googleapis.com *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com *.meetanshi.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.yotpo.com https://resupply.aeroflowurology.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de www.mczbf.com pipedream.wistia.com us-autocomplete-pro.api.smarty.com lootly.io https://get.geojs.io *.avada.io self wss://input.noibu.com *.authorize.net https://imgs.signifyd.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://aeroflow-experiments.com https://*.aeroflow-experiments.com portal.aeroflow.online https: 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://aeroflow-experiments.com https://*.aeroflow-experiments.com portal.aeroflow.online https: 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'unsafe-hashes' http://127.0.0.1:* http://localhost:* docker:* dockerhost:* *.ad.questel.com:* *.kube-dev.qal.questel.fr:* *.kube-poc.qal.questel.fr:* *.orbit.com orbit.com *.orbit-intelligence.cn orbit-intelligence.cn *.questel.fr *.questel.com *.freshworks.com *.trychameleon.com *.statuspage.io *.google.com *.google.com.hk *.googleapis.com https://*.contentsquare.net https://static.cloudflareinsights.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https:; connect-src 'self' https: wss: *.ad.questel.com *.questel.com *.orbit.com *.orbit-intelligence.cn *.contentsquare.net wss://*.contentsquare.net; frame-src 'self' *.orbit.com *.questel.com *.orbit-intelligence.cn orbit-intelligence.cn *.trychameleon.com *.statuspage.io cloudflare.com https://challenges.cloudflare.com; worker-src 'self' blob: https://*.contentsquare.net; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none';report-uri /csp-report; 1
default-src 'self'; script-src 'self' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'self' 1
script-src 'self' https://mc.yandex.ru https://yastatic.net 'nonce-3224c6ff310d716a42b2efa13aa30198'; connect-src 'self' https://mc.yandex.ru wss://mc.yandex.ru; img-src 'self' data: https://mc.yandex.ru; frame-src 'self' blob: https://mc.yandex.ru; child-src 'self' blob: https://mc.yandex.ru; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self' https://clerk.parse.gl https://*.clerk.accounts.dev; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://clerk.parse.gl https://*.clerk.accounts.dev https://js.stripe.com https://challenges.cloudflare.com https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://us.i.posthog.com https://us-assets.i.posthog.com; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: blob: https://images.parse.gl https://blog-publisher.soar-c00.workers.dev https://img.icons8.com https://www.google.com https://img.clerk.com https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.stripe.com; connect-src 'self' https://clerk.parse.gl https://*.clerk.accounts.dev https://us.i.posthog.com https://us-assets.i.posthog.com https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://api.stripe.com https://challenges.cloudflare.com https://*.sentry.io; frame-src 'self' https://clerk.parse.gl https://*.clerk.accounts.dev https://js.stripe.com https://hooks.stripe.com https://challenges.cloudflare.com https://www.googletagmanager.com; worker-src 'self' blob:; manifest-src 'self'; media-src 'self'; report-uri /api/public/csp-report; report-to csp-endpoint 1
object-src  'none'; connect-src 'self' *.vivid.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.vivid.com join.gammasecure.com; script-src 'self' *.vivid.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.vivid.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
default-src 'self' https://www.pantit.se https://pantit.se;base-uri 'self' https://www.pantit.se https://pantit.se;font-src 'self' https://www.pantit.se https://pantit.se data: fonts.gstatic.com http://fonts.gstatic.com maxcdn.bootstrapcdn.com https://maxcdn.bootstrapcdn.com ka-f.fontawesome.com https://js.intercomcdn.com https://fonts.intercomcdn.com;form-action 'self' https://www.pantit.se https://pantit.se www.facebook.com;frame-ancestors 'self' https://www.pantit.se https://pantit.se;img-src 'self' https://www.pantit.se https://pantit.se https://*.google.se https://google.se https://www.google.se *.google.se https://*.google.de https://google.de https://www.google.de *.google.de https://*.google.com https://google.com https://www.google.com *.google.com https://*.google.co.uk https://google.co.uk https://www.google.co.uk *.google.co.uk https://*.google.com.tr https://google.com.tr https://www.google.com.tr *.google.com.tr https://*.google.com.pk https://google.com.pk https://www.google.com.pk *.google.com.pk https://*.google.com.ua https://google.com.ua https://www.google.com.ua *.google.com.ua https://*.google.com.cy https://google.com.cy https://www.google.com.cy *.google.com.cy https://*.google.ch https://google.ch https://www.google.ch *.google.ch https://*.google.dk https://google.dk https://www.google.dk *.google.dk https://*.google.nl https://google.nl https://www.google.nl *.google.nl https://*.google.fr https://google.fr https://www.google.fr *.google.fr https://*.google.ie https://google.ie https://www.google.ie *.google.ie https://*.google.no https://google.no https://www.google.no *.google.no https://*.google.es https://google.es https://www.google.es *.google.es https://*.google.fi https://google.fi https://www.google.fi *.google.fi https://*.google.ge https://google.ge https://www.google.ge *.google.ge https://*.google.rs https://google.rs https://www.google.rs *.google.rs https://*.google.pt https://google.pt https://www.google.pt *.google.pt https://*.google.at https://google.at https://www.google.at *.google.at https://*.google.be https://google.be https://www.google.be *.google.be https://*.google.it https://google.it https://www.google.it *.google.it https://*.google.pl https://google.pl https://www.google.pl *.google.pl https://*.google.ru https://google.ru https://www.google.ru *.google.ru https://*.google.co.jp https://google.co.jp https://www.google.co.jp *.google.co.jp https://*.google.gr https://google.gr https://www.google.gr *.google.gr https://*.google.com.br https://google.com.br https://www.google.com.br *.google.com.br https://*.google.ca https://google.ca https://www.google.ca *.google.ca https://*.google.si https://google.si https://www.google.si *.google.si https://*.google.sk https://google.sk https://www.google.sk *.google.sk https://*.google.ro https://google.ro https://www.google.ro *.google.ro https://*.google.mt https://google.mt https://www.google.mt *.google.mt https://*.google.lu https://google.lu https://www.google.lu *.google.lu https://*.google.lt https://google.lt https://www.google.lt *.google.lt https://*.google.lv https://google.lv https://www.google.lv *.google.lv https://*.google.hu https://google.hu https://www.google.hu *.google.hu https://*.google.hr https://google.hr https://www.google.hr *.google.hr https://*.google.ee https://google.ee https://www.google.ee *.google.ee https://*.google.cz https://google.cz https://www.google.cz *.google.cz https://*.google.bg https://google.bg https://www.google.bg *.google.bg https: data: blob: pantit-images.s3.amazonaws.com pantit-images.s3.eu-west-1.amazonaws.com pantit-receipt.s3.amazonaws.com imgsct.cookiebot.com *.facebook.com *.facebook.net *.googletagmanager.com test-gateway.zignsec.com gateway.zignsec.com *.googleadservices.com consentcdn.cookiebot.com marknad.pantit.se https://*.intercomcdn.com https://*.intercomassets.com https://static.intercomassets.com *.gstatic.com *.doubleclick.net https://*.doubleclick.net https://googleads.g.doubleclick.net https://stats.g.doubleclick.net *.googlesyndication.com https://pagead2.googlesyndication.com;object-src 'none';script-src 'self' https://www.pantit.se https://pantit.se 'unsafe-eval' 'unsafe-inline' cdn.jsdelivr.net cdnjs.cloudflare.com code.jquery.com maxcdn.bootstrapcdn.com https://maxcdn.bootstrapcdn.com kit.fontawesome.com ajax.googleapis.com www.googletagmanager.com https://*.googletagmanager.com widget.trustpilot.com consent.cookiebot.com connect.facebook.net https://connect.facebook.net app.intercom.io https://app.intercom.io widget.intercom.io https://widget.intercom.io js.intercomcdn.com https://js.intercomcdn.com googleads.g.doubleclick.net www.googleadservices.com consentcdn.cookiebot.com https://*.fullstory.com client.britepaymentgroup.com https://client.britepaymentgroup.com static.cloudflareinsights.com https://static.cloudflareinsights.com;script-src-attr 'self' https://www.pantit.se https://pantit.se 'unsafe-inline';style-src 'self' https://www.pantit.se https://pantit.se 'unsafe-inline' fonts.googleapis.com maxcdn.bootstrapcdn.com https://maxcdn.bootstrapcdn.com ka-f.fontawesome.com *.gstatic.com;upgrade-insecure-requests;script-src-elem 'self' https://www.pantit.se https://pantit.se 'unsafe-eval' 'unsafe-inline' cdn.jsdelivr.net cdnjs.cloudflare.com code.jquery.com maxcdn.bootstrapcdn.com https://maxcdn.bootstrapcdn.com kit.fontawesome.com ajax.googleapis.com www.googletagmanager.com https://*.googletagmanager.com widget.trustpilot.com consent.cookiebot.com connect.facebook.net https://connect.facebook.net app.intercom.io https://app.intercom.io widget.intercom.io https://widget.intercom.io js.intercomcdn.com https://js.intercomcdn.com googleads.g.doubleclick.net www.googleadservices.com consentcdn.cookiebot.com https://*.fullstory.com client.britepaymentgroup.com https://client.britepaymentgroup.com static.cloudflareinsights.com https://static.cloudflareinsights.com;frame-src 'self' https://www.pantit.se https://pantit.se https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://api.intercom.io https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io https://api-ping.intercom.io https://via.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io https://nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io https://uploads.intercomcdn.com https://uploads.eu.intercomcdn.com https://uploads.au.intercomcdn.com https://uploads.intercomusercontent.com https://*.intercomcdn.com https://*.intercom.io https://*.intercomassets.com https://*.intercom-messenger.com wss://*.intercom-messenger.com https://intercom-sheets.com https://www.intercom-reporting.com widget.trustpilot.com consentcdn.cookiebot.com www.googletagmanager.com https://*.checkout.bambora.com *.checkout.bambora.com checkout.test.trustly.com checkout.trustly.com http://localhost:4200 td.doubleclick.net www.facebook.com production.britepaymentgroup.com https://production.britepaymentgroup.com;media-src 'self' https://www.pantit.se https://pantit.se data: https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://api.intercom.io https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io https://api-ping.intercom.io https://via.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io https://nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io https://uploads.intercomcdn.com https://uploads.eu.intercomcdn.com https://uploads.au.intercomcdn.com https://uploads.intercomusercontent.com https://*.intercomcdn.com https://*.intercom.io https://*.intercomassets.com https://*.intercom-messenger.com wss://*.intercom-messenger.com https://intercom-sheets.com https://www.intercom-reporting.com https://downloads.intercomcdn.com https://downloads.intercomcdn.eu https://downloads.au.intercomcdn.com;connect-src 'self' https://www.pantit.se https://pantit.se https: http: ws: wss: properties: data: blob: https://*.google.se https://google.se https://www.google.se *.google.se https://*.google.de https://google.de https://www.google.de *.google.de https://*.google.com https://google.com https://www.google.com *.google.com https://*.google.co.uk https://google.co.uk https://www.google.co.uk *.google.co.uk https://*.google.com.tr https://google.com.tr https://www.google.com.tr *.google.com.tr https://*.google.com.pk https://google.com.pk https://www.google.com.pk *.google.com.pk https://*.google.com.ua https://google.com.ua https://www.google.com.ua *.google.com.ua https://*.google.com.cy https://google.com.cy https://www.google.com.cy *.google.com.cy https://*.google.ch https://google.ch https://www.google.ch *.google.ch https://*.google.dk https://google.dk https://www.google.dk *.google.dk https://*.google.nl https://google.nl https://www.google.nl *.google.nl https://*.google.fr https://google.fr https://www.google.fr *.google.fr https://*.google.ie https://google.ie https://www.google.ie *.google.ie https://*.google.no https://google.no https://www.google.no *.google.no https://*.google.es https://google.es https://www.google.es *.google.es https://*.google.fi https://google.fi https://www.google.fi *.google.fi https://*.google.ge https://google.ge https://www.google.ge *.google.ge https://*.google.rs https://google.rs https://www.google.rs *.google.rs https://*.google.pt https://google.pt https://www.google.pt *.google.pt https://*.google.at https://google.at https://www.google.at *.google.at https://*.google.be https://google.be https://www.google.be *.google.be https://*.google.it https://google.it https://www.google.it *.google.it https://*.google.pl https://google.pl https://www.google.pl *.google.pl https://*.google.ru https://google.ru https://www.google.ru *.google.ru https://*.google.co.jp https://google.co.jp https://www.google.co.jp *.google.co.jp https://*.google.gr https://google.gr https://www.google.gr *.google.gr https://*.google.com.br https://google.com.br https://www.google.com.br *.google.com.br https://*.google.ca https://google.ca https://www.google.ca *.google.ca https://*.google.si https://google.si https://www.google.si *.google.si https://*.google.sk https://google.sk https://www.google.sk *.google.sk https://*.google.ro https://google.ro https://www.google.ro *.google.ro https://*.google.mt https://google.mt https://www.google.mt *.google.mt https://*.google.lu https://google.lu https://www.google.lu *.google.lu https://*.google.lt https://google.lt https://www.google.lt *.google.lt https://*.google.lv https://google.lv https://www.google.lv *.google.lv https://*.google.hu https://google.hu https://www.google.hu *.google.hu https://*.google.hr https://google.hr https://www.google.hr *.google.hr https://*.google.ee https://google.ee https://www.google.ee *.google.ee https://*.google.cz https://google.cz https://www.google.cz *.google.cz https://*.google.bg https://google.bg https://www.google.bg *.google.bg https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com https://api.intercom.io https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io https://api-ping.intercom.io https://via.intercom.io https://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-a.intercom.io wss://nexus-websocket-b.intercom.io https://nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io https://nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io https://uploads.intercomcdn.com https://uploads.eu.intercomcdn.com https://uploads.au.intercomcdn.com https://uploads.intercomusercontent.com https://*.intercomcdn.com https://*.intercom.io https://*.intercomassets.com https://*.intercom-messenger.com wss://*.intercom-messenger.com https://intercom-sheets.com https://www.intercom-reporting.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.doubleclick.net https://stats.g.doubleclick.net https://googleads.g.doubleclick.net *.googlesyndication.com https://*.googlesyndication.com pagead2.googlesyndication.com https://*.googleadservices.com https://consentcdn.cookiebot.com https://pagead2.googlesyndication.com https://*.facebook.com https://connect.facebook.net https://www.facebook.com client.britepaymentgroup.com https://client.britepaymentgroup.com https://*.checkout.bambora.com *.checkout.bambora.com;worker-src 'self' https://www.pantit.se https://pantit.se blob:;report-uri /callbacks/csp-violation-report-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.astera.com https://www.googletagmanager.com https://*.google-analytics.com https://js.hsforms.net https://*.hsforms.com https://*.hsforms.net https://*.hsappstatic.net https://*.hs-scripts.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hsadspixel.net https://*.hubspot.com https://code.jquery.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://support-communication.cloudastera.com https://translate.google.com https://translate.googleapis.com https://www.gstatic.com https://*.clarity.ms https://*.bing.com https://*.bing.net https://connect.facebook.net https://www.facebook.com https://snap.licdn.com https://*.doubleclick.net https://www.googleadservices.com https://www.google.com https://*.reddit.com https://*.redditstatic.com https://*.zoominfo.com https://*.zi-scripts.com https://*.marketo.net https://*.clickagy.com https://www.youtube.com https://www.gartner.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.astera.com https://cdnjs.cloudflare.com; img-src 'self' data: blob: https://*.astera.com https://images.ctfassets.net https://*.contentful.com https://i.ytimg.com https://img.youtube.com https://*.unsplash.com https://*.nitrocdn.com https://*.kindpng.com https://www.googletagmanager.com https://*.google-analytics.com https://*.doubleclick.net https://www.google.com https://www.googleadservices.com https://translate.google.com https://translate.googleapis.com https://www.gstatic.com https://cdn.jsdelivr.net https://*.clarity.ms https://*.bing.com https://*.bing.net https://*.hubspot.com https://*.hsforms.com https://*.linkedin.com https://*.reddit.com https://www.facebook.com https://www.trustradius.com https://www.gartner.com https://*.clickagy.com; font-src 'self' data: https://fonts.gstatic.com https://*.astera.com https://cdnjs.cloudflare.com https://www.gartner.com; connect-src 'self' https://cdn.contentful.com https://*.contentful.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://www.googletagmanager.com https://*.hsforms.com https://forms.hsforms.com https://*.hubspot.com https://*.hubapi.com https://support-communication.cloudastera.com wss://support-communication.cloudastera.com https://translate.googleapis.com https://*.astera.com https://www.google.com https://www.googleadservices.com https://*.doubleclick.net https://*.clarity.ms https://*.bing.com https://*.bing.net https://*.linkedin.com https://*.zoominfo.com https://*.zi-scripts.com https://*.datah04.com https://*.mktoresp.com https://*.clickagy.com https://*.reddit.com https://www.facebook.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://js.hsforms.net https://*.hsforms.com https://www.googletagmanager.com https://www.facebook.com https://translate.google.com https://www.gartner.com https://www.google.com https://www.recaptcha.net https://*.doubleclick.net; media-src 'self' data: blob: https://*.astera.com https://*.youtube.com; worker-src 'self' blob:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://*.hsforms.com https://forms.hsforms.com https://www.facebook.com; report-to csp-endpoint; report-uri /api/csp-report 1
default-src 'none'; report-uri https://5099a208989c63eea54e3c3ff8151524.report-uri.com/r/t/csp/wizard 1
object-src 'self'; script-src 'self' 'strict-dynamic' cdn.rawgit.com https://cdn.jsdelivr.net; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://consent.cookiebot.com/uc.js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/js https://ajax.googleapis.com https://consentcdn.cookiebot.com https://consent.cookiebot.com/0c7d1786-9e20-4305-9309-7678dc1c935c/cc.js https://eurazeo.actusnews.com/site/cotation_json.php https://consent.cookiebot.com/logconsent.ashx https://go.eurazeo.com/l/436982/2022-04-12/8jjb23 https://consent.cookiebot.com/316c68ee-7904-432f-af9e-89cde666d7ae/cc.js https://consent.cookiebot.com/88ce59b3-59dd-4b97-b3d2-ed7beda8f537/cc.js https://www.googletagmanager.com/gtm.js https://go.eurazeo.com/l/436982/2023-02-06/8kbwn2 https://go.eurazeo.com/l/436982/2023-02-06/8kbwnc cdn.rawgit.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline'; base-uri 'self'; form-action 'self' https://go.eurazeo.com/l/436982/2022-04-12/8jjb23 https://go.eurazeo.com/l/436982/2023-02-06/8kbwn2 https://go.eurazeo.com/l/436982/2023-02-06/8kbwnc; frame-ancestors 'self'; block-all-mixed-content 1
default-src 'self'; script-src 'self' https://exclusiverh.innocraft.cloud; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' *.newstank.fr data:; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://ipapi.co/json https://exclusiverh.innocraft.cloud https://fonts.googleapis.com; media-src 'self'; object-src 'none'; frame-src 'self'; 1
font-src data: 'self';connect-src https://connect.facebook.net https://consent.cookiebot.com https://consentcdn.cookiebot.com https://pagead2.googlesyndication.com https://region1.analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://www.facebook.com https://www.google.com https://www.googleadservices.com https://www.google-analytics.com https://www.googletagmanager.com 'self';frame-src https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.googletagmanager.com https://www.youtube-nocookie.com;script-src https://consent.cookiebot.com 'strict-dynamic' 'unsafe-eval' 'nonce-R4uwLpbcg3XR3TdZ6FZDuWjk';img-src https://www.facebook.com https://www.google.com https://www.google.nl https://www.googleadservices.com https://www.google-analytics.com https://www.googletagmanager.com 'self' data:;base-uri 'none';default-src 'self';form-action 'self';frame-ancestors 'self';style-src 'self' 'unsafe-inline' 1
default-src 'self' blob: data: 'unsafe-inline' 'unsafe-eval' https://mr-proxy.digital-analytics.lllapi.com https://static.zdassets.com https://*.adyen.com https://*.analytics.google.com https://*.medallia.com wss://lululemoninternational.quantummetric.com https://*.quantummetric.com https://mr-proxy.digital-analytics.lllapi.vision https://pagead2.googlesyndication.com https://*.bazaarvoice.com https://*.browser-intake-datadoghq.com https://*.btttag.com https://*.criteo.com https://*.doubleclick.net https://*.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://*.kampyle.com https://*.paypal.com https://*.truefitcorp.com https://adservice.google.com https://alb.reddit.com https://analytics.google.com https://analytics.tiktok.com https://api-env.cartfulsolutions.com https://api.cartfulsolutions.com https://apis.google.com https://apps.storystream.ai https://assets.adobedtm.com https://bat.bing.com https://careers.lululemon.com https://cdn.cquotient.com https://cdn.honey.io https://cdnjs.cloudflare.com https://challenges.cloudflare.com https://cm.g.doubleclick.net https://connect.facebook.net https://content.storystream.ai https://ct.pinterest.com https://d29qb9vav0xwuc.cloudfront.net https://d38d4ysphgm9dz.cloudfront.net https://d3g5d7323c2i6m.cloudfront.net https://d7c4jjeuqag9w.cloudfront.net https://dpm.demdex.net https://e.cquotient.com https://embed-env.cartfulsolutions.com https://embed.cartfulsolutions.com https://globalstaticassets.lululemon.com https://google.com https://googleads.g.doubleclick.net https://images.lululemon.com https://lantern.roeyecdn.com https://ln-rules.rewardstyle.com https://lululemon.quiq-api.com https://lululemonathleticacanadainc.demdex.net https://media.storystream.ai https://mpsnare.iesnare.com https://p.cquotient.com https://pay.google.com https://pixel-config.reddit.com https://r.cquotient.com https://s.pinimg.com https://s7mbrstream.scene7.com https://sc-static.net https://shop.lululemon.com https://static.cloudflareinsights.com https://static.criteo.net https://stats.g.doubleclick.net https://storyboard.storystream.ai https://tez.google.com https://tpc.googlesyndication.com https://tr.snapchat.com https://tr6.snapchat.com https://translate.google.com https://wf.cartfulsolutions.com https://www.bing.com https://www.cloudflare.com https://www.datadoghq-browser-agent.com https://www.facebook.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.lululemon.co.uk https://www.paypalobjects.com https://www.redditstatic.com wss://mpsnare.iesnare.com https://cdn.cookielaw.org https://stage.lululemon.com https://mx-staging.nonprod-lululemon.com https://privacyportal.onetrust.com https://geolocation.onetrust.com https://sourcemaps.quiq.sh https://ekr.zdassets.com https://o4507427284123728.ingest.de.sentry.io https://lululemons.zendesk.com https://staging-eu01-lululemon.demandware.net; base-uri 'self'; frame-ancestors 'self' https://staging-eu01-lululemon.demandware.net; object-src 'none'; img-src * data:; font-src * data:; block-all-mixed-content; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://www.youtube.com https://www.google.com https://www.gstatic.com https://analytics.silktide.com https://www.googletagmanager.com https://www.google-analytics.com https://js.monitor.azure.com https://cc.cdn.civiccomputing.com https://messenger.ebiai.app; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; connect-src 'self' https://a.eu.silktide.com https://apikeys.civiccomputing.com https://api.ebiai.app http://localhost:52647 ws://localhost:52647 wss://localhost:44394 wss: ws:; object-src 'none'; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; base-uri 'self'; frame-ancestors 'self'; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com; img-src 'self' data: https://dashboard.umbraco.com https://www.googletagmanager.com https://i.ytimg.com https://lobster-static-upload-uk-production.s3.eu-west-2.amazonaws.com; 1
font-src *.googleapis.com *.gstatic.com *.fontawesome.com *.abtasty.com *.peppermoneytest.es *.peppermoney.es 'self' data: widget.pepperfinance.es static-eu.oct8ne.com *.generaloptica.es *.maisoptica.pt data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.adyen.com pay.google.com payments-eu.amazon.com *.amazon.de *.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.adyen.com pay.google.com *.paypal.com www.google.com *.cookiebot.com *.pinterest.com *.hotjar.com *.hotjar.io *.facebook.com *.facebook.net *.bing.com *.peppermoneytest.es *.peppermoney.es *.pepperfinance.es fledge-eu.creativecdn.com ams.creativecdn.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net *.adyen.com pay.google.com *.payments-amazon.com *.media-amazon.com *.paypalobjects.com *.googleapis.com gstatic.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com www.google.es stats.g.doubleclick.net *.pinterest.com *.facebook.com *.facebook.net *.bing.com *.clarity.ms tracker.metricool.com *.abtasty.com *.amazonaws.com *.peppermoneytest.es www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.hsforms.net *.hsforms.com 'self' data: imgsct.cookiebot.com widget.pepperfinance.es *.teads.tv *.generaloptica.es *.maisoptica.pt data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.googleapis.com *.gstatic.com *.plugins.emarsys.net *.scarabresearch.com *.disqus.com *.cookiebot.com *.google.com www.google.es www.gstatic.com sl.google-analytics.com s.pinimg.com *.pinterest.com *.hotjar.com *.hotjar.io *.facebook.com *.facebook.net *.bing.com *.fittingbox.com js-agent.newrelic.com bam.nr-data.net *.clarity.ms tracker.metricool.com *.abtasty.com *.peppermoneytest.es *.peppermoney.es js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.trustpilot.com widget.pepperfinance.es *.outbrain.com p.teads.tv tags.creativecdn.com *.taboola.com s.kk-resources.com wave.outbrain.com *.generaloptica.es *.maisoptica.pt https://storage.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.abtasty.com *.googleapis.com *.gstatic.com *.peppermoneytest.es *.peppermoney.es *.pepperfinance.es tags.creativecdn.com assets.braintreegateway.com *.trustpilot.com *.generaloptica.es *.maisoptica.pt https://storage.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adyen.com *.google.com www.google.com payments-eu.amazon.com *.paypal.com *.googleapis.com *.scarabresearch.com *.eservice.emarsys.net *.cookiebot.com www.google.es www.gstatic.com sl.google-analytics.com *.g.doubleclick.net s.pinimg.com *.pinterest.com *.hotjar.com *.hotjar.io *.facebook.com *.facebook.net *.bing.com *.fittingbox.com js-agent.newrelic.com bam.nr-data.net *.clarity.ms *.abtasty.com *.peppermoneytest.es *.peppermoney.es ams.creativecdn.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com google.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com bam.eu01.nr-data.net *.taboola.com *.outbrain.com *.teads.tv *.generaloptica.es *.maisoptica.pt 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com *.generaloptica.es *.maisoptica.pt 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com *.googleapis.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://seo.mageplaza.com *.psigate.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com meetanshi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com widget.trustpilot.com *.meetanshi.com meetanshi.com api.razorpay.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com *.googleapis.com *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com *.meetanshi.com meetanshi.com cdn.razorpay.com https://cdnjs.cloudflare.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com *.googleapis.com *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com widget.trustpilot.com *.cloudflareinsights.com s7.addthis.com *.avada.io *.shopify.com *.alothemes.com *.magepow.com player.vimeo.com *.meetanshi.com meetanshi.com checkout.razorpay.com http://cdnjs.cloudflare.com *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com https://cdnjs.cloudflare.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com ekr.zdassets.com/ https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com *.meetanshi.com meetanshi.com lumberjack.razorpay.com lumberjack-metrics.razorpay.com tfhub.dev storage.googleapis.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com use.fontawesome.com *.bootstrapcdn.com cdnjs.cloudflare.com *.mapbox.com *.centuryarms.com *.canikusa.com *.uspalm.com https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com c3sbx.net c3plp.net 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com stockist.co *.doubleclick.net td.doubleclick.net https://*.google.com *.centuryarms.com *.canikusa.com *.uspalm.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.meetanshi.com c3sbx.net c3plp.net www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io phosphor.utils.elfsightcdn.com stockist.co *.mapbox.com https://*.google.com *.centuryarms.com *.canikusa.com *.uspalm.com magefan.com cm.magefan.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com *.meetanshi.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.cloudmaestro.com *.googletagmanager.com *.klaviyo.com *.optimizely.com *.stockist.co apps.elfsight.com cdn.jsdelivr.net cdn.usebootstrap.com cdnjs.cloudflare.com googletagmanager.com kit.fontawesome.com static.cloudflareinsights.com static.elfsight.com stockist.co tags.clickagy.com https://*.google.com https://*.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://www.gstatic.com/recaptcha https://www.google.com/recaptcha cloudflare.com *.cloudfunctions.net *.mapbox.com *.centuryarms.com *.canikusa.com *.uspalm.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.doubleclick.net *.meetanshi.com c3sbx.net c3plp.net www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com use.fontawesome.com stackpath.bootstrapcdn.com *.typekit.net cdn.jsdelivr.net *.bootstrapcdn.com stockist.co cdnjs.cloudflare.com *.mapbox.com *.centuryarms.com *.canikusa.com *.uspalm.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://static.klaviyo.com *.googleapis.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com fast.a.klaviyo.com static-forms.klaviyo.com core.service.elfsight.com storage.elfsight.com cdnjs.cloudflare.com *.cloudfunctions.net stockist.co *.mapbox.com *.ipredictive.com *.doubleclick.net stats.g.doubleclick.net https://*.google.com *.centuryarms.com *.canikusa.com *.uspalm.com https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.googlesyndication.com https://www.merchant-center-analytics.goog *.meetanshi.com c3sbx.net c3plp.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net https://dev--americasbest--national-vision.aem.live https://www.paypalobjects.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://commercehub-secure-data-capture.fiservapps.com https://prod.api.fiservapps.com https://cert.api.fiservapps.com https://assets.adobedtm.com https://vto-advanced.fittingbox.com https://a25621540041.cdn.optimizely.com a25621540041.cdn.optimizely.com https://www.paypal.com https://www.sandbox.paypal.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com *.adobeaemcloud.com  data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net data: https://assets.adobedtm.com https://images.unsplash.com https://dev--americasbest--national-vision.aem.live https://www.googletagmanager.com https://*.google-analytics.com https://rtg.discountcontacts.com  blob:  'self'   *  data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com https://experience.adobe.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com beacon-qa.magento-datasolutions.com beacon-stage.magento-ds.com beacon.magento-ds.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com https://rum.hlx.page https://commercehub-secure-data-capture.fiservapps.com https://prod.api.fiservapps.com https://cert.api.fiservapps.com https://assets.adobedtm.com https://maps.googleapis.com https://vto-advanced-integration-api.fittingbox.com https://dev--americasbest--national-vision.aem.live https://www.googletagmanager.com https://rtg.discountcontacts.com https://*.forter.com https://d1qmrxg9gbf226.cloudfront.net https://d2nww8zpyj5pk0.cloudfront.net https://d2w2nqfk3z9hdt.cloudfront.net https://d229oaghhl3bjt.cloudfront.net https://d1141abz4ln14s.cloudfront.net https://d1w9sasay4s756v.cloudfront.net https://d3bejklh892qn.cloudfront.net https://rum.hlx.page/.rum/@adobe/helix-rum-js@%5E2/dist/rum-standalone.js https://www.paypal.com https://www.paypalobjects.com https://www.sandbox.paypal.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com https://assets.adobedtm.com https://dev--americasbest--national-vision.aem.live https://www.paypalobjects.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com  blob:  data:  'self'   *  'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net p13n.adobe.io *.adobedc.net *.demdex.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.magento-datasolutions.com *.magento-ds.com https://assets.adobedtm.com https://maps.googleapis.com https://player.vimeo.com https://dev--americasbest--national-vision.aem.live https://*.google-analytics.com https://*.googletagmanager.com https://rtg.discountcontacts.com https://*.forter.com wss://cdn0.forter.com https://d2o5idwacg3gyw.cloudfront.net https://dz8rit8v72mig.cloudfront.net https://d2fw3s7rfepszt.cloudfront.net https://1.1.1.1 https://d27623md02evp.cloudfront.net https://d37l98t2r94go6.cloudfront.net https://wtp.siteperformancetest.net https://siteperformancetest.net https://www.paypal.com https://www.paypalobjects.com https://www.sandbox.paypal.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com maxcdn.bootstrapcdn.com *.salesfire.co.uk *.klarnacdn.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.facebook.com *.googlesyndication.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.doubleclick.net *.facebook.com *.googlesyndication.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.salesfire.co.uk *.googleapis.com *.trustpilot.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.trackedlink.net *.ddlnk.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com * www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.salesfire.co.uk maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com * js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.salesfire.co.uk *.googleapis.com *.trustpilot.com https://the-landscape-centre.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com webchat.dotdigital.com webchat.staging.dotdigital.com downloads.mailchimp.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.salesfire.co.uk *.typekit.net *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://bam.nr-data.net/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.salesfire.co.uk *.smartmetrics.co.uk *.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.sagepay.com *.opayo.eu.elavon.com maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.fontawesome.com *.contentsquare.net *.googleusercontent.com *.gstatic.com pouch-global-font-assets.s3.eu-central-1.amazonaws.com *.taggbox.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.sagepay.com *.opayo.eu.elavon.com *.stripe.com *.stripe.network *.google.com *.apata.io *.arcot.com *.facebook.com *.lloydsbankinggroup.com *.monzo.com *.rsa3dsauth.co.uk *.starlingbank.com *.tribepayments.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors https://api.clerk.io https://cdn.clerk.io *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.sagepay.com *.opayo.eu.elavon.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.apata.io *.arcot.com *.facebook.com *.google.com *.lloydsbankinggroup.com *.monzo.com *.mycardplace.com *.ortery.com *.revolut.com *.rsa3dsauth.co.uk saasphoto.com *.starlingbank.com *.sumup.com *.tagembed.com *.termly.io *.tribepayments.com *.twitter.com vimeo.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com https://cdn.clerk.io *.stripe.com *.stripe.network *.google.com brippo.s3.amazonaws.com *.dycdn.net aldridgeaccess.co.uk aldridgeauto.co.uk *.aldridgesecurity.co.uk *.aldridgesecurity.london *.bamboohr.com *.bing.com *.clarity.ms *.contentsquare.net *.facebook.com *.facebook.net *.getsitecontrol.com *.google-analytics.com *.googleapis.com *.googleusercontent.com *.gstatic.com *.ibb.co *.postcodeanywhere.co.uk *.taggbox.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com https://api.clerk.io https://cdn.clerk.io https://custom.clerk.io *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.google.com *.dycdn.net dn1i8v75r669j.cloudfront.net dkpklk99llpj0.cloudfront.net ds9p2a60lh6fp.cloudfront.net d1y9qtn9cuc3xw.cloudfront.net d81mfvml8p5ml.cloudfront.net *.freshrelevance.com *.dotdigital.com *.aldridgesecurity.co.uk *.bamboohr.com *.clarity.ms *.clerk.io *.cloudflareinsights.com *.contentsquare.net *.facebook.com *.facebook.net *.getsitecontrol.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.jsdelivr.net *.pcapredict.com *.postcodeanywhere.co.uk *.tagbox.com *.tagembed.com *.termly.io *.twitter.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src fonts.googleapis.com downloads.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com maxcdn.bootstrapcdn.com https://api.clerk.io https://cdn.clerk.io *.stripe.network *.stripecdn.com *.amazon.com *.google.com *.dycdn.net *.fontawesome.com *.aldridgesecurity.co.uk *.googleapis.com *.gstatic.com *.jsdelivr.net *.postcodeanywhere.co.uk *.tagembed.com *.taggbox.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.aldridgesecurity.london *.caveo-lock.co.uk *.tagbox.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com fonts.googleapis.com fonts.gstatic.com *.dycdn.net *.freshrelevance.com wss://*.freshrelevance.com wss://*.dycdn.net dn1i8v75r669j.cloudfront.net *.dotdigital.com aldridgeauto.co.uk *.aldridgesecurity.co.uk *.bamboohr.com *.clarity.ms *.clerk.io *.contentsquare.net *.facebook.com *.facebook.net *.getsitecontrol.com *.getsitectrl.com *.google-analytics.com *.googleapis.com *.google.com *.gstatic.com *.on.aws *.postcodeanywhere.co.uk *.samsung.com *.scandit.com *.tagembed.com *.taggbox.com *.termly.io 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://af2eed9b-04d0-48be-8ccc-10c0c170fcfc.sansec.watch/; report-to report-endpoint; 1
font-src https://www.googletagmanager.com *.googleapis.com *.gstatic.com https://geowidget.easypack24.net https://fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com consentcdn.cookiebot.com consentcdn.cookiebot.eu *.doubleclick.net https://geowidget-app.inpost.pl/ https://sandbox-easy-geowidget.easypack24.net/ https://sandbox-easy-geowidget-sdk.easypack24.net/ secure.payu.com merch-prod.snd.payu.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com https://images.unsplash.com www.facebook.com connect.facebook.net img.sct.eu1.usercentrics.eu imgsct.cookiebot.com *.clarity.ms *.bing.com www.google.pl pixel.wp.pl https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org static.payu.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.hsforms.net *.hsforms.com 'self' data: https://media.azan-cdn.pl/media/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ tagmanager.google.com https://www.googletagmanager.com https://maps.googleapis.com *.cookiebot.com *.cookiebot.eu connect.facebook.net www.google.pl www.google.com google.com analytics.tiktok.com *.clarity.ms pixel.wp.pl *.bing.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org secure.payu.com secure.snd.payu.com https://www.datadoghq-browser-agent.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.hsforms.net *.hsforms.com *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://geowidget.easypack24.net https://geowidget.inpost.pl https://fonts.googleapis.com https://static.klaviyo.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://maps.googleapis.com https://player.vimeo.com region1.google-analytics.com consentcdn.cookiebot.com consentcdn.cookiebot.eu *.clarity.ms www.facebook.com www.google.pl www.google.com google.com stats.g.doubleclick.net analytics.tiktok.com analytics-ie.tiktokw.eu analytics-ttp2.tiktokw.eu analytics-ipv6.tiktokw.us *.bing.com pixel.wp.pl *.easypack24.net *.inpost.pl *.openstreetmap.org secure.payu.com merch-prod.snd.payu.com https://browser-intake-datadoghq.eu https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com https://media.azan-cdn.pl/media/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; script-src 'self' cdn.jsdelivr.net https://api-maps.yandex.ru https://cdn.ampproject.org https://cdn.jsdelivr.net https://cdnjs.cloudflare.com mdbootstrap.com widget.cloudpayments.ru; script-src-attr 'self'; style-src 'self' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https://cdn.jsdelivr.net mdbootstrap.com use.fontawesome.com; style-src-attr 'self'; frame-ancestors * 1
object-src 'none';base-uri 'self';script-src 'nonce-aXn-Z7d5kuwSCHnt6liC1A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.paypal.com https://www.sandbox.paypal.com https://*.paypalobjects.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://*.trustpilot.com https://connect.facebook.net https://www.googleadservices.com https://googleads.g.doubleclick.net https://td.doubleclick.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.trustpilot.com; font-src 'self' data: https://fonts.gstatic.com https://*.trustpilot.com; img-src 'self' data: blob: https:; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.paypal.com https://maps.googleapis.com https://www.googletagmanager.com https://*.trustpilot.com https://*.doubleclick.net https://*.g.doubleclick.net https://connect.facebook.net https://www.facebook.com https://*.facebook.com; frame-src 'self' https://www.paypal.com https://www.sandbox.paypal.com https://www.google.com https://*.trustpilot.com https://td.doubleclick.net https://*.doubleclick.net https://www.facebook.com; frame-ancestors 'self'; base-uri 'self'; object-src 'none' 1
default-src https://app.thatch.com 'self'; style-src https://vercel.live *.wistia.com 'self' 'unsafe-inline' blob:; script-src https://vercel.live https://snap.licdn.com https://connect.facebook.net www.googletagmanager.com thatch.chilipiper.com ph.thatch.com *.posthog.com analytics.ahrefs.com *.wistia.com *.wistia.net src.litix.io *.sentry-cdn.com https://s3-us-west-2.amazonaws.com/b2bjsstore/b/1VN080HGQP6J/reb2b.js.gz https://www.redditstatic.com/ads/pixel.js bat.bing.com/bat.js https://bat.bing.com/p/action/187118839.js https://assets.apollo.io/micro/website-tracker/tracker.iife.js https://r2.leadsy.ai/tag.js https://osai-cdn.onescreen.ai/pscript/1.0.0.js https://www.clarity.ms/tag/uet/187118839 https://www.clarity.ms/tag/qiqp2ius59 scripts.clarity.ms https://app.factors.ai/assets/factors.js https://googleads.g.doubleclick.net https://consent.trustarc.com https://consent-st.trustarc.com https://choices.trustarc.com *.truste.com 'self' 'sha256-PIWffdGzM66heRBliv6r8Z3n4xuS0tlmVLmbHNtXZbQ=' 'sha256-wJ/VhlfH39kSu+BUOiDUF8St0im8Yyu43jwgH3bfluo=' 'sha256-fVrJk5820gphjtu2OG1kC0pGiAuuOAK2oghX6PpsMyI=' 'sha256-oG3Fn/tGTpQ/GcjXypTuo192B1DGBmpHBP/EuJXwuQY=' 'sha256-4hQMq+57pHvvtFqx7i7nK0Yj/qrvGo31do+4MmRlUww=' 'sha256-LD5yWBHPH+mLhLmpE2nTh5jN7y4rhg0406jYv27vW3c=' 'sha256-ZC4Ihfl+1sv3E25DQh090ITQKwffxiocyA9C1vaePKU=' 'sha256-3ysDLISzfUIj58bDUZ3nH6ErxjderWtuqrQ/CX52TuU=' 'sha256-+D/CR2/CQ5n0dKPpamksUsyC4m5yV5aXru8p/RxJdo4=' 'sha256-YH6lXFd8SPXN/DjHgv87DGLf7njsA33a8u5cO+c4Hd8=' 'sha256-dvTQ39/ECXPYCCGmYqrXr4yg7tCKMncKnRjrhwlNNSo=' 'sha256-BVGUSjXrZL/I+KpDKk0pUWyNrkkcIaPwc688klYIz7Q=' 'sha256-6EYJpdI3md0VgPal7hThdhzRNUvA4+c6aiV6P4+emhk=' 'sha256-+68LmvqcfJwKjTwqzlGgsOkt6xw3crETeYBU0JtXjoU='; script-src-attr 'unsafe-hashes' 'sha256-DFFLwIcztss+sv3K4A7eR4/LomZ63ZtfLANbnojNCOc='; img-src https://vercel.live https://vercel.com https://snap.licdn.com https://www.linkedin.com https://www.facebook.com www.google.com www.googletagmanager.com *.wistia.com *.wistia.net alb.reddit.com trkn.us t.vibe.co px.ads.linkedin.com px4.ads.linkedin.com bat.bing.com c.clarity.ms c.bing.com https://consent.trustarc.com 'self' blob: data:; connect-src https://app.thatch.com https://vercel.live wss://ws-us3.pusher.com api.mapbox.com https://px.ads.linkedin.com https://www.facebook.com www.googletagmanager.com www.google.com www.google-analytics.com thatch.chilipiper.com https://ph.thatch.com https://*.posthog.com api.segment.io cdn.segment.com sgmt-api.thatch.com sgmt-cdn.thatch.com analytics.ahrefs.com *.wistia.com *.wistia.net *.algolia.net *.litix.io https://pixel-config.reddit.com https://api.factors.ai/sdk/get_info https://mpc-prod-24-s6uit34pua-uw.a.run.app/events https://t.onescreen.ai/in/4747422467096576 https://aplo-evnt.com/api/v1/intent_pixel/ https://v.clarity.ms/collect https://api.factors.ai/sdk/ https://bat.bing.com/actionp/0 https://consent.trustarc.com 'self'; font-src https://vercel.live fast.wistia.com https://consent.trustarc.com 'self' data:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; frame-src https://vercel.live youtube.com www.youtube.com thatch.chilipiper.com fast.wistia.com fast.wistia.net www.googletagmanager.com 'self'; media-src *.wistia.com *.wistia.net 'self' blob: data:; worker-src 'self' blob: data:; 1
base-uri 'self'; default-src data: *.youtube.com *.youtu.be *.vimeo.com *.google.com *.google-analytics.com *.googletagmanager.com *.matomo.cloud cdn.matomo.cloud *.piwik.pro *.containers.piwik.pro *.luckyorange.com tools.luckyorange.com shop.pe *.addshoppers.com cdn.addshoppers.com *.rakutenadvertising.io ecom-app.rakutenadvertising.io tag.rmp.rakuten.com *.rmp.rakuten.com s1.rbrun.com *.rbrun.com cdn.alireviews.io cdn.judge.me *.judge.me *.judgeme.com cdn.jsdelivr.net *.alicdn.com *.klaviyo.com static.klaviyo.com cdn.idpixel.app collector.idpixel.app growthelevators.online *.growthelevators.online *.paypal.com *.paypalobjects.com accounts.google.com apis.google.com *.firebaseapp.com maps.googleapis.com *.gstatic.com *.weaverse.io *.shopify.com *.myshopify.com api.getredo.com 'self' https://cdn.shopify.com https://shopify.com 'nonce-8cee21e1d840b2937a84c5a796e19047'; frame-ancestors 'none'; style-src *.weaverse.io *.shopify.com *.myshopify.com cdn.judge.me *.judge.me *.klaviyo.com maps.googleapis.com fonts.googleapis.com 'self' 'unsafe-inline' https://cdn.shopify.com; connect-src vimeo.com cdn.judge.me *.judge.me *.google-analytics.com *.matomo.cloud *.piwik.pro *.containers.piwik.pro *.luckyorange.com shop.pe *.addshoppers.com cdn.addshoppers.com *.rakutenadvertising.io *.rmp.rakuten.com s1.rbrun.com *.rbrun.com *.klaviyo.com collector.idpixel.app growthelevators.online *.growthelevators.online *.paypal.com *.paypalobjects.com localhost:4003 *.ondigitalocean.app *.googleapis.com identitytoolkit.googleapis.com securetoken.googleapis.com *.firebaseio.com *.firebaseapp.com maps.googleapis.com *.weaverse.io *.shopify.com *.myshopify.com api.getredo.com 'self' https://cdn.shopify.com/ https://monorail-edge.shopifysvc.com https://checkout.coutr.com https://0w6e1v-7d.myshopify.com 1
font-src *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.alothemes.com *.magepow.com http://fonts.googleapis.com https://fonts.googleapis.com https://fonts.gstatic.com *.hotjar.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.googletagmanager.com *.weltpixel.com landofcoder.com maps.googleapis.com chart.googleapis.com https://amc.demdex.net https://portal.zakeke.com *.hotjar.com https://www.google.com https://www.google.it *.vimeo.com *.tradedoubler.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.alothemes.com *.magepow.com https://www.facebook.com https://www.google.com https://www.google.it http://maps.googleapis.com https://maps.googleapis.com *.cookielaw.org https://barcode.tec-it.com *.nau.it *.hotjar.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com https://www.gstatic.com landofcoder.com maps.googleapis.com chart.googleapis.com *.alothemes.com *.magepow.com *.google.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://connect.facebook.net https://js-agent.newrelic.com https://bam-cell.nr-data.net https://static.zdassets.com https://chimpstatic.com *.hotjar.com *.tradedoubler.com *.cookielaw.org *.optimalpeople.fr js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com tagmanager.google.com *.facebook.net unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.alothemes.com *.magepow.com https://fonts.googleapis.com *.hotjar.com unsafe-inline assets.braintreegateway.com *.stripe.network *.stripecdn.com tagmanager.google.com 'self' 'unsafe-inline'; object-src landofcoder.com maps.googleapis.com chart.googleapis.com 'self' 'unsafe-inline'; media-src *.adobe.com https://nau.it *.vimeo.com *.akamaized.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com landofcoder.com maps.googleapis.com chart.googleapis.com *.alothemes.com *.magepow.com https://dpm.demdex.net https://api.instagram.com https://instagram.com https://naucare.zendesk.com https://ekr.zdassets.com https://bam-cell.nr-data.net https://stats.g.doubleclick.net *.hotjar.com *.hotjar.io wss://*.hotjar.com *.cookielaw.org *.facebook.com *.onetrust.com *.optimalpeople.fr api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.google-analytics.com *.facebook.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-y295lnDENtUEnO2EVOfc0g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.cookiebot.com https://*.googletagmanager.com https://www.googletagmanager.com https://www.recaptcha.net https://google.com https://*.google.com https://*.google.nl https://*.google.be https://*.google.de https://*.google-analytics.com https://*.g.doubleclick.net https://*.doubleclick.net https://4425188.fls.doubleclick.net https://ad.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://*.gstatic.com https://*.gstatic.cn https://*.googlesyndication.com https://www.instagram.com https://graph.instagram.com https://platform.instagram.com https://static.cdninstagram.com https://www.facebook.com https://*.fbcdn.net https://*.facebook.net https://*.tiktok.com https://lf16-gecko-source.tiktokcdn.com https://sc-static.net https://cf-st.sc-cdn.net https://snap.licdn.com https://*.snapchat.com https://www.youtube.com https://vimeo.com https://player.vimeo.com https://vimeocdn.com https://visualwebsiteoptimizer.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://*.azureedge.net https://watermelon.ai https://chatwidget-prod.web.app https://fonts.googleapis.com https://*.aanmelder.nl https://connexys.nl https://cdnjs.cloudflare.com https://*.hotjar.com https://secured-pixel.com https://*.secured-pixel.com https://*.mkt.dynamics.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://js.hsadspixel.net https://intractive.app https://*.intractive.app https://*.clarity.ms https://*.aspnetcdn.com https://*.promptwatch.com https://*.typeform.com https://capi-automation.s3.us-east-2.amazonaws.com; style-src 'self' https: 'unsafe-inline'; script-src-attr 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; media-src 'self' data: blob:; child-src 'self' blob: https://www.youtube.com https://vimeo.com https://player.vimeo.com https://vimeocdn.com https://*.cookiebot.com https://*.googletagmanager.com https://www.googletagmanager.com https://www.recaptcha.net https://google.com https://*.google.com https://*.google.nl https://*.google.be https://*.google.de https://*.google-analytics.com https://*.g.doubleclick.net https://*.doubleclick.net https://4425188.fls.doubleclick.net https://ad.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://*.gstatic.com https://*.gstatic.cn https://*.googlesyndication.com https://www.facebook.com https://*.snapchat.com https://4d2d523eed054a9996835fa59349b2ae.svc.dynamics.com https://chatwidget-prod.web.app https://connexys.nl https://bookings.zenchef.com https://fw-dmz-01.prd.duo.nl https://forms.office.com https://forms.cloud.microsoft https://intractive.app https://*.intractive.app https://zadkine.mediafiler.net https://*.typeform.com; worker-src 'self' blob:; connect-src 'self' data: https://*.cookiebot.com https://*.googletagmanager.com https://www.googletagmanager.com https://www.recaptcha.net https://google.com https://*.google.com https://*.google.nl https://*.google.be https://*.google.de https://*.google-analytics.com https://*.g.doubleclick.net https://*.doubleclick.net https://4425188.fls.doubleclick.net https://ad.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://*.gstatic.com https://*.gstatic.cn https://*.googlesyndication.com https://www.instagram.com https://graph.instagram.com https://platform.instagram.com https://static.cdninstagram.com https://www.facebook.com https://*.fbcdn.net https://*.facebook.net https://*.tiktok.com https://lf16-gecko-source.tiktokcdn.com https://sc-static.net https://cf-st.sc-cdn.net https://snap.licdn.com https://www.youtube.com https://vimeo.com https://player.vimeo.com https://vimeocdn.com https://d3-36c34dc0877246a0b32c4f4e24be6ce8.ecs.us-east-1.on.aws https://*.ads.linkedin.com https://*.snapchat.com https://analytics-ipv6.tiktokw.us https://api.ipify.org https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://visualwebsiteoptimizer.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://watermelon.ai https://mktdplp102cdn.azureedge.net https://chatwidget-prod.web.app https://fonts.googleapis.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com wss://*.aanmelder.nl https://js.hs-analytics.net https://js.hs-scripts.com https://*.mkt.dynamics.com https://ingest.promptwatch.com https://*.clarity.ms https://*.typeform.com; frame-src 'self' https://www.youtube.com https://vimeo.com https://player.vimeo.com https://vimeocdn.com https://*.cookiebot.com https://*.googletagmanager.com https://www.googletagmanager.com https://www.recaptcha.net https://google.com https://*.google.com https://*.google.nl https://*.google.be https://*.google.de https://*.google-analytics.com https://*.g.doubleclick.net https://*.doubleclick.net https://4425188.fls.doubleclick.net https://ad.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://*.gstatic.com https://*.gstatic.cn https://*.googlesyndication.com https://www.facebook.com https://*.snapchat.com https://4d2d523eed054a9996835fa59349b2ae.svc.dynamics.com https://chatwidget-prod.web.app https://connexys.nl https://bookings.zenchef.com https://fw-dmz-01.prd.duo.nl https://forms.office.com https://forms.cloud.microsoft https://intractive.app https://*.intractive.app https://zadkine.mediafiler.net https://*.typeform.com; object-src 'none'; frame-ancestors 'self'; form-action 'self' https:; base-uri 'self'; report-uri /csp-reports 1
object-src 'none';base-uri 'self';script-src 'nonce-wJMuhz6QRmoSf9cKBDjJyQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
form-action 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net google.co.uk *.google.co.uk *.google.com *.facebook.com *.google-analytics.com *.analytics.google.com  *.cookiebot.com *.hotjar.com *.paypalobjects.com *.paypal.com *.googletagmanager.com *.youtube.com *.twitter.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.optimonk.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * google.co.uk *.google.co.uk *.google.com *.facebook.com *.google-analytics.com *.analytics.google.com  *.cookiebot.com *.hotjar.com *.paypalobjects.com *.googletagmanager.com *.youtube.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com www.facebook.com platform.twitter.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.addthis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * google.co.uk *.google.co.uk *.facebook.com *.google-analytics.com *.analytics.google.com  *.cookiebot.com *.hotjar.com *.paypalobjects.com *.googletagmanager.com *.twitter.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.trustpilot.com *.weltpixel.com *.doubleclick.net www.xtento.com *.hcaptcha.com *.stripecdn.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.trackedlink.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com *.disqus.com https://firebasestorage.googleapis.com flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com google.co.uk *.google.co.uk *.google.com *.facebook.com *.analytics.google.com  *.cookiebot.com *.hotjar.com *.paypalobjects.com *.googletagmanager.com *.twitter.com *.reddit.com *.doubleclick.net www.xtento.com cdn.xtento.com *.zendesk.com *.optimonk.com *.bing.net *.elfsightcdn.com *.hcaptcha.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com chimpstatic.com downloads.mailchimp.com *.list-manage.com connect.facebook.net twitter.com platform.twitter.com static.addtoany.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.google.com *.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.avada.io *.shopify.com maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com google.co.uk *.google.co.uk *.facebook.com *.google-analytics.com *.analytics.google.com  *.cookiebot.com *.hotjar.com *.paypalobjects.com *.googletagmanager.com *.twitter.com *.trustpilot.com unsafe-inline *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net www.xtento.com cdn.xtento.com *.iubenda.com *.zendesk.com *.addtoany.com *.optimonk.com *.tinyboxcompany.co.uk *.elfsightcdn.com elfsightcdn.com *.hcaptcha.com js.stripe.com *.impactcdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com webchat.dotdigital.com webchat.staging.dotdigital.com downloads.mailchimp.com https://static.klaviyo.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com assets.braintreegateway.com google.co.uk *.google.co.uk *.google.com *.facebook.com *.google-analytics.com *.analytics.google.com  *.cookiebot.com *.hotjar.com *.paypalobjects.com *.paypal.com *.googletagmanager.com *.youtube.com *.twitter.com *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com *.tagmanager.google.com *.optimonk.com *.hcaptcha.com *.typekit.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.youtube.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com stats.addtoany.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com google.co.uk *.google.co.uk *.facebook.com *.analytics.google.com  *.cookiebot.com *.hotjar.com *.paypalobjects.com *.googletagmanager.com *.youtube.com *.twitter.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.googlesyndication.com *.iubenda.com *.zendesk.com *.tinyboxcompany.co.uk *.optimonk.com *.trustpilot.com *.bing.net *.elfsight.com *.elfsightcdn.com pay.google.com *.hcaptcha.com *.pxf.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src google.co.uk *.google.co.uk *.google.com *.facebook.com *.google-analytics.com *.analytics.google.com  *.cookiebot.com *.hotjar.com *.paypalobjects.com *.paypal.com *.googletagmanager.com *.youtube.com *.twitter.com *.iubenda.com *.doubleclick.net *.elavon.com *.zendesk.com pay.google.com js.stripe.com *.typekit.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.amazonaws.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.sendcloud.sc *.jsdelivr.net maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.klarnacdn.net *.klevu.com *.ksearchnet.com https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.nosto.com *.nos.to 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.zenaps.com *.fls.doubleclick.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.nosto.com *.nos.to *.klarna.com https://www.googletagmanager.com/ js.mollie.com https://www.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.awin1.com *.zenaps.com *.wepowerconnections.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.nosto.com *.nos.to *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.mollie.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.nosto.com *.nos.to *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.klevu.com *.ksearchnet.com widget.freshworks.com m2epro.freshdesk.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ js.mollie.com https://www.google.com https://www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.nosto.com *.nos.to *.klarnacdn.net https://static.klaviyo.com *.klevu.com *.ksearchnet.com widget.freshworks.com m2epro.freshdesk.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.wepowerconnections.com https://the.sciencebehindecommerce.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.nosto.com *.nos.to *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com widget.freshworks.com m2epro.freshdesk.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://20a27546-5165-4716-8e1c-c91dee6f68ae.sansec.watch/; report-to report-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-trZP_T9660r_vJFBrmScGA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://connect.facebook.net https://www.googletagmanager.com https://analytics.tiktok.com https://www.clarity.ms; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; connect-src 'self' https://www.google-analytics.com https://analytics.tiktok.com https://*.clarity.ms; 1
script-src 'nonce-4auO6uxM5DbvJ8KfaTwSsw' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/static-on-bigtable; base-uri 'none' 1
default-src 'self'; img-src data: blob: *; script-src-elem 'self' 'strict-dynamic' assets.ubuntu.com www.google-analytics.com www.googletagmanager.com www.youtube.com asciinema.org player.vimeo.com script.crazyegg.com www.googleadservices.com js.zi-scripts.com *.g.doubleclick.net www.google.com www.gstatic.com www.brighttalk.com snap.licdn.com connect.facebook.net maps.googleapis.com www.redditstatic.com munchkin.marketo.net *.googlesyndication.com cdn.jsdelivr.net https://esm.sh https://cdn.jsdelivr.net buttons.github.io cdn.livechatinc.com api.livechatinc.com secure.livechatinc.com www.tfaforms.com 'nonce--ttMQkvEql5BgUzwlQ5pdg'; font-src 'self' assets.ubuntu.com fonts.google.com cdn.livechatinc.com secure.livechatinc.com; script-src 'self' blob: 'wasm-unsafe-eval' 'nonce--ttMQkvEql5BgUzwlQ5pdg'; connect-src 'self' ubuntu.com analytics.google.com www.googletagmanager.com o4510662863749120.ingest.de.sentry.io www.google-analytics.com *.crazyegg.com *.g.doubleclick.net ad.doubleclick.net *.clarity.ms bat.bing.com bat.bing.net www.googleadservices.com js.zi-scripts.com *.google-analytics.com px.ads.linkedin.com ws.zoominfo.com youtube.com google.com www.google.ad www.google.ae www.google.al www.google.am www.google.as www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cat www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.cn www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.com www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.nr www.google.nu www.google.pl www.google.pn www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.st www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu www.google.ws fonts.google.com maps.googleapis.com pixel-config.reddit.com www.redditstatic.com conversions-config.reddit.com https://esm.sh https://lottie.host https://cdn.jsdelivr.net *.analytics.google.com www.facebook.com *.googlesyndication.com *.mktoresp.com assets.ubuntu.com api.github.com raw.githubusercontent.com api.livechatinc.com cdn.livechatinc.com secure.livechatinc.com web.facebook.com www.tfaforms.com unpkg.com; frame-src 'self' assets.ubuntu.com *.doubleclick.net *.crazyegg.com www.youtube.com/ asciinema.org player.vimeo.com www.googletagmanager.com www.google.com www.brighttalk.com cdn.livechatinc.com secure.livechatinc.com cdn.livechat-static.com; style-src 'self' cdn.jsdelivr.net www.tfaforms.com 'unsafe-inline'; media-src 'self' res.cloudinary.com assets.ubuntu.com; child-src 'self' blob: youtube.com google.com fonts.google.com api.livechatinc.com cdn.livechatinc.com secure.livechatinc.com; form-action 'self' https://pages.ubuntu.com https://ubuntu.com https://www.tfaforms.com; object-src 'none'; base-uri 'self'; worker-src 'self' blob:; report-uri /csp-report; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
default-src 'self'; base-uri 'self'; form-action 'self' https://www.facture.net https://facture.net https://devis.pro https://api.superpdp.tech https://www.superpdp.tech https://checkout.stripe.com; frame-ancestors 'self'; object-src 'none'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' blob: https://challenges.cloudflare.com; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: https://challenges.cloudflare.com; frame-src 'self' https: blob: https://challenges.cloudflare.com; media-src 'self' https: data:; worker-src 'self' blob:; report-uri /csp-violation-report 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cloudflare.com *.fontawesome.com https://fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://player.vimeo.com https://www.youtube-nocookie.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io blueskytechmage.com mageblueskytech.com placehold.jp *.googleapis.com 'self' data: *.onesignal.com onesignal.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.onesignal.com onesignal.com https://cdnjs.cloudflare.com s7.addthis.com https://player.vimeo.com https://www.youtube.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.googleapis.com *.cloudflare.com *.onesignal.com onesignal.com https://cdnjs.cloudflare.com https://fonts.googleapis.com http://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.onesignal.com onesignal.com ekr.zdassets.com/ https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://media.taxtim.com https://www.taxtim.com; script-src 'self' https://*.sentry.io https://elfsightcdn.com https://*.elfsight.com https://www.youtube.com https://paystack.com https://*.paystack.co https://*.clarity.ms; connect-src 'self' https://*.taxtim.com https://*.ai.taxtim.com https://*.sentry.io https://*.elfsight.com https://*.clarity.ms https://c.bing.com; img-src 'self' data: blob: https://*.taxtim.com https://media.taxtim.com https://i.ytimg.com https://*.elfsight.com https://via.placeholder.com https://c.bing.com; frame-src 'self' https://www.youtube.com https://paystack.com https://*.paystack.co https://*.elfsight.com https://www.sarsefiling.co.za; object-src 'none'; base-uri 'self'; form-action 'self' https://*.taxtim.com https://paystack.com https://*.paystack.co; frame-ancestors 'self' 1
default-src 'self'; child-src 'self'; connect-src 'self' *.cookielaw.org *.dhl.com *.onetrust.com *.obi4wan.com *.obi4wan.ai matomo.dhlexpress.nl dhl-routing.prosodie.com *.clarity.ms collector.leadinfo.net api.leadinfo.com collector4.leadinfo.net region1.analytics.google.com www.google-analytics.com google-analytics.com www.google.com www.googletagmanager.com stats.g.doubleclick.net region1.google-analytics.com googleads.g.doubleclick.net www.googleadservices.com https://matomo.dhlexpress.nl/; font-src 'self' fonts.gstatic.com; frame-src 'self' *.googletagmanager.com *.dhl.com feedback.usabilla.com *.cookielaw.org *.onetrust.com about: data: *.youtube-nocookie.com *.youtube.com https://www.google.com; img-src 'self' data: *.cookielaw.org matomo.dhlexpress.nl *.googletagmanager.com googleads.g.doubleclick.net www.google.nl fonts.gstatic.com unpkg.com cdn.jsdelivr.net cdnjs.cloudflare.com polyfill-fastly.io vawidget-eu.dhl.com express-resource.dhl.com cdn.leadinfo.net cdn.delivr.net www.googleadservices.com www.google.com; media-src 'self' *.youtube.com; object-src 'none'; script-src 'self' 'report-sample' *.googletagmanager.com https://vawidget-eu.dhl.com *.cookielaw.org *.onetrust.com *.mopinion.com deploy.mopinion.com matomo.dhlexpress.nl https://unpkg.com *.clarity.ms www.googletagmanager.com unpkg.com matomo.js vawidget-eu.dhl.com cdn.leadinfo.net cdn.delivr.net cdn.cookielaw.org express-resource.dhl.com cdn.jsdelivr.net cdnjs.cloudflare.com polyfill-fastly.io googleads.g.doubleclick.net https://cdn.cookielaw.org https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://polyfill-fastly.io 'unsafe-inline' https://matomo.dhlexpress.nl/; script-src-elem 'self' 'unsafe-inline' *.clarity.ms https://www.googletagmanager.com https://unpkg.com https://matomo.dhlexpress.nl/matomo.js https://vawidget-eu.dhl.com www.googletagmanager.com unpkg.com matomo.dhlexpress.nl matomo.js vawidget-eu.dhl.com cdn.leadinfo.net cdn.delivr.net cdn.cookielaw.org express-resource.dhl.com cdn.jsdelivr.net cdnjs.cloudflare.com polyfill-fastly.io *.cookielaw.org *.onetrust.com *.mopinion.com deploy.mopinion.com https://cdn.cookielaw.org https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://polyfill-fastly.io; style-src 'self' 'report-sample' 'unsafe-inline' *.clarity.ms www.googletagmanager.com unpkg.com matomo.dhlexpress.nl matomo.js vawidget-eu.dhl.com cdn.leadinfo.net cdn.delivr.net cdn.cookielaw.org express-resource.dhl.com cdn.jsdelivr.net cdnjs.cloudflare.com polyfill-fastly.io *.cookielaw.org *.onetrust.com *.mopinion.com deploy.mopinion.com fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss: blob:; frame-src 'self' https:; media-src 'self' https: blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests 1
object-src 'none';base-uri 'self';script-src 'nonce-drj77aqA7wPxdJZwJ1AuLQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https://*.wix.com https://*.wixstatic.com https://*.parastorage.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.wix.com https://*.wixstatic.com https://*.parastorage.com; style-src 'self' 'unsafe-inline' https://*.wixstatic.com; img-src * data:; frame-ancestors 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net *.tawk.to www.stravers.nl www.bedrukken.nl www.logomokken.nl www.logomutsen.nl www.logonotitieboekjes.nl www.shirtsbedrukken.nl usb.bedrukken.nl usb.stravers.nl data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.googletagmanager.com/ https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://images.unsplash.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com *.disqus.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://www.mollie.com flagpedia.net https://img.youtube.com https://firebasestorage.googleapis.com maps.gstatic.com www.google.nl tawk.link *.tawk.to s3.amazonaws.com dev.visualwebsiteoptimizer.com www.google.com.bd www.google.be www.google.fr www.google.ch www.google.pl www.google.com.pk pagead2.googlesyndication.com stats.g.doubleclick.net www.google.es www.google.pt mageside.com www.stravers.nl www.bedrukken.nl www.logomokken.nl www.logomutsen.nl www.logonotitieboekjes.nl www.shirtsbedrukken.nl usb.bedrukken.nl usb.stravers.nl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://maps.googleapis.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.disqus.com https://cdn.jsdelivr.net https://*.google.com *.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com maps.googleapis.com *.avada.io *.shopify.com *.tawk.to static.cloudflareinsights.com static.hotjar.com script.hotjar.com d3niuqph2rteir.cloudfront.net dev.visualwebsiteoptimizer.com sc-static.net www.stravers.nl www.bedrukken.nl www.logomokken.nl www.logomutsen.nl www.logonotitieboekjes.nl www.shirtsbedrukken.nl usb.bedrukken.nl usb.stravers.nl 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com https://cdn.jsdelivr.net maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net *.tawk.to embed.tawk.to www.stravers.nl www.bedrukken.nl www.logomokken.nl www.logomutsen.nl www.logonotitieboekjes.nl www.shirtsbedrukken.nl usb.bedrukken.nl usb.stravers.nl 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.tawk.to www.stravers.nl www.bedrukken.nl www.logomokken.nl www.logomutsen.nl www.logonotitieboekjes.nl www.shirtsbedrukken.nl usb.bedrukken.nl usb.stravers.nl 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://maps.googleapis.com https://player.vimeo.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com www.gstatic.com maps.googleapis.com https://get.geojs.io *.avada.io dev.visualwebsiteoptimizer.com www.google.nl pagead2.googlesyndication.com *.tawk.to vc.hotjar.io freeipapi.com api.gostellar.app wss://*.tawk.to www.google.com.bd www.google.be www.google.es www.google.com.pk www.google.hr www.google.pl metrics.hotjar.io stats.g.doubleclick.net www.google.ch www.google.pt www.google.fr www.stravers.nl www.bedrukken.nl www.logomokken.nl www.logomutsen.nl www.logonotitieboekjes.nl www.shirtsbedrukken.nl usb.bedrukken.nl usb.stravers.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src www.stravers.nl www.bedrukken.nl www.logomokken.nl www.logomutsen.nl www.logonotitieboekjes.nl www.shirtsbedrukken.nl usb.bedrukken.nl usb.stravers.nl 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; object-src 'none'; script-src 'nonce-cTMI69NOJs8s7cTBfC3uYCxHV' 'strict-dynamic' 'wasm-unsafe-eval'; worker-src 'self' blob:; frame-ancestors 'self' https://new.automodeler.com https://armorama.com https://railroadmodeling.net https://aeroscale.net https://modelshipwrights.com https://automodeler.com https://modelgeek.com; manifest-src 'self' 1
script-src 'self' 'nonce-eQOEREV8lWzRLB/cvWDQ2KUZ' https://www.googletagmanager.com https://connect.facebook.net https://cdn-cookieyes.com 'strict-dynamic' 1
default-src 'self'; script-src 'self' 'unsafe-hashes' 'sha256-u7q4c5i0dFA4WdZcdX0lItFS7Plw7BvMpWADeKlLVUs=' 'sha256-MhtPZXr7+LpJUY5qtMutB+qWfQtMaPccfe7QXtCcEYc=' https://www.googletagmanager.com https://www.google-analytics.com https://accounts.google.com https://cdn-4.convertexperiments.com https://static.hotjar.com https://script.hotjar.com https://bat.bing.com https://tags.creativecdn.com https://connect.facebook.net https://analytics.tiktok.com https://googleads.g.doubleclick.net https://cdn.onesignal.com https://chimpstatic.com https://maps.googleapis.com https://maps.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://accounts.google.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.google.cl https://www.googleadservices.com https://accounts.google.com https://static-cdn-prod.cocha.cloud https://gcp-production-cdn.cocha.cloud https://bat.bing.com https://connect.facebook.net https://analytics.tiktok.com https://googleads.g.doubleclick.net https://maps.googleapis.com https://maps.gstatic.com; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://accounts.google.com https://static-cdn-prod.cocha.cloud https://gcp-production-cdn.cocha.cloud https://apis-prod.cocha.cloud https://region1.google-analytics.com https://bat.bing.com https://analytics.tiktok.com https://onesignal.com https://cdn.onesignal.com https://api.hotjar.com https://content.hotjar.io wss://ws.hotjar.com https://cdn-4.convertexperiments.com https://us.creativecdn.com https://metrics.hotjar.io https://maps.googleapis.com https://maps.gstatic.com; media-src 'self' https://static-cdn-prod.cocha.cloud; frame-src 'self' https://www.googletagmanager.com https://accounts.google.com https://bid.g.doubleclick.net; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests; 1
default-src 'self';       script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://stapecdn.com https://gds.axkid.com https://js.stripe.com https://connect-js.stripe.com https://x.klarnacdn.net https://js.klarna.com https://applepay.cdn-apple.com https://*.hs-scripts.com https://js.hsforms.net https://js.usemessages.com https://js.hs-analytics.net https://js.hscollectedforms.net https://js.hs-banner.com https://js.hubspot.com https://static.hsappstatic.net https://cdn.sift.com https://www.google.com https://google.com https://www.gstatic.com https://www.gstatic.cn https://maps.googleapis.com https://apis.google.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://static.lipscore.com https://static.hotjar.com https://script.hotjar.com https://cdn.mouseflow.com https://*.clarity.ms https://sleeknotecustomerscripts.sleeknote.com https://connect.facebook.net https://bat.bing.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.paypal.com https://c.paypal.com https://www.paypalobjects.com https://recaptcha.net https://www.recaptcha.net https://cdn.jsdelivr.net https://unpkg.com https://*.wp.com https://addrevenue.io https://cdn.refersion.com https://www.mczbf.com https://*.qliro.com data:;       style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://static.lipscore.com https://code.jquery.com https://www.gstatic.com https://ams.wpml.org https://*.wp.com https://cdnjs.cloudflare.com https://fonts.bunny.net https://p.typekit.net;       font-src 'self' data: https://fonts.gstatic.com https://applepay.cdn-apple.com https://static.lipscore.com https://*.wp.com https://*.qliro.com https://script.hotjar.com https://fonts.bunny.net https://cdnjs.cloudflare.com https://account.affilitizer.com https://use.typekit.net https://cdn.goin.cloud https://cdn.jsdelivr.net;       img-src 'self' data: https: blob:;       media-src 'self' data: https://ssl.gstatic.com;       frame-src 'self' blob: https://gds.axkid.com https://go.axkid.com https://js.stripe.com https://checkout.stripe.com https://connect-js.stripe.com https://x.klarnacdn.net https://credit.klarnacdn.net https://js.klarna.com https://www.youtube.com https://www.youtube-nocookie.com https://m.youtube.com https://youtu.be https://www.google.com https://google.com https://recaptcha.net https://www.recaptcha.net https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.paypal.com https://c.paypal.com https://www.facebook.com https://bid.g.doubleclick.net https://pay.google.com https://app.hubspot.com https://meetings.hubspot.com https://*.hs-sites.com https://forms.hsforms.com https://js.hsforms.net https://*.tracking.refersion.com https://*.qliro.com https://*.wp.com https://wordpress.com https://www.babylist.com https://ee.econt.com;       child-src 'self' blob:;       manifest-src 'self';       connect-src 'self' https://gds.axkid.com https://api.stripe.com https://checkout.stripe.com https://api.klarna.com https://js.klarna.com https://x.klarnacdn.net https://eu.klarnaevt.com https://api.hubapi.com https://api.hubspot.com https://forms.hscollectedforms.net https://forms.hsforms.com https://cta-service-cms2.hubspot.com https://perf-na1.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com https://stapecdn.com https://apple-pay-gateway.apple.com https://cdn.sift.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://static.lipscore.com https://api.lipscore.com https://wapi.lipscore.com https://users.lipscore.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://cdn.mouseflow.com https://*.mouseflow.com https://*.clarity.ms https://connect.facebook.net https://www.facebook.com https://bat.bing.com https://bat.bing.net https://googleads.g.doubleclick.net https://ad.doubleclick.net https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://www.googletagmanager.com https://analytics.google.com https://region1.analytics.google.com https://*.google-analytics.com https://maps.googleapis.com https://places.googleapis.com https://storage.googleapis.com https://apis.google.com https://api.paypal.com https://c.paypal.com https://www.paypal.com https://pay.google.com https://addrevenue.io https://tracking.refersion.com https://www.mczbf.com https://*.wp.com https://public-api.wordpress.com https://woocommerce.com https://www.babylist.com https://cdn.jsdelivr.net         https://google.com https://www.google.com https://www.google.se https://www.google.no https://www.google.dk https://www.google.fi https://www.google.de https://www.google.fr https://www.google.nl https://www.google.es https://www.google.pt https://www.google.pl https://www.google.cz https://www.google.bg https://www.google.hr https://www.google.si https://www.google.ie https://www.google.co.uk https://www.google.ca;       worker-src 'self' blob:;       form-action 'self' https://www.facebook.com https://forms.hsforms.com https://sis.redsys.es https://*.klarna.com https://*.qliro.com https://*.paypal.com https://checkout.stripe.com;       frame-ancestors 'self';       object-src 'none';       base-uri 'self';       report-uri https://axkid.com/csp-report.php;       report-to csp-endpoint 1
default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; report-uri /?f2_csp_report=1 1
font-src *.googleapis.com *.gstatic.com https://applepay.cdn-apple.com https://widgets.trustedshops.com fonts.gstatic.com https://x.klarnacdn.net *.getflowbox.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://applepay.cdn-apple.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io *.trustpilot.com widget.trustpilot.com creativecdn.com www.googletagmanager.com consentcdn.cookiebot.com td.doubleclick.net sts.buddhatobuddha.com ct.pinterest.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https://images.unsplash.com *.googleapis.com *.gstatic.com https://static.buckaroo.nl https://www.buckaroo.nl https://www.paypalobjects.com https://pay.google.com https://developers.google.com https://applepay.cdn-apple.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com inv-nets.admixer.net us.ck-ie.com www.facebook.com www.google.nl bat.bing.com t.squeezely.tech imgsct.cookiebot.com sync.e-planning.net sync.console.adtarget.com.tr onetag-sys.com cm.mgid.com s-cs.rmp.rakuten.com region1.analytics.google.com region1.google-analytics.com sync.connectad.io data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js *.googleapis.com *.gstatic.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com https://www.sandbox.paypal.com https://applepay.cdn-apple.com https://pay.google.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.trustpilot.com *.googletagmanager.com tagmanager.google.com https://js.klarna.com https://js.playground.klarna.com *.getflowbox.com widget.trustpilot.com integrations.etrusted.com connect.getflowbox.com v1.widget.futy.io invitejs.trustpilot.com consent.cookiebot.com connect.facebook.net static.hotjar.com s.pinimg.com www.dwin1.com squeezely.tech creativecdn.com bat.bing.com consentcdn.cookiebot.com ct.pinterest.com static.buckaroo.nl 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.trustpilot.com tagmanager.google.com fonts.google.com https://x.klarnacdn.net *.getflowbox.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://applepay.buckaroo.io https://smp-paymentservices.apple.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.google-analytics.com *.analytics.google.com *.googletagmanager.com https://js.playground.klarna.com https://*.klarnaevt.com https://*.playground.klarnaevt.com *.getflowbox.com region1.analytics.google.com api.widget.futy.io widget.trustpilot.com consentcdn.cookiebot.com ct.pinterest.com sts.buddhatobuddha.com www.google.com pagead2.googlesyndication.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src www.buddhatobuddha.com *.buddhatobuddha.com bat.bing.com bat.bing.net www.google.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cloudflare.com fonts.googleapis.com *.hotjar.com *.zopim.com cdn.rawgit.com cdn.jsdelivr.net data: *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cloudflare.com cdn.dnky.co *.hotjar.com *.facebook.com *.trustpilot.com *.criteo.com *.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.bird.eu ebizmarts-website.s3.amazonaws.com *.cloudflare.com *.google.com.hk *.google.com.sg *.googleadservices.com www.google.nl connect.onlinesucces.nl px.ads.linkedin.com stats.g.doubleclick.net *.googleapis.com www.linkedin.com linkedin.com googletagmanager.com gallery.mailchimp.com *.trustedshops.com *.facebook.com *.zopim.com cdn.jsdelivr.net keewah.com *.keewah.com p.teads.tv www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com chimpstatic.com *.plugins.emarsys.net *.scarabresearch.com *.cloudflare.com www.google.com gstatic.com www.gstatic.com *.googletagmanager.com *.googleapis.com *.googleadservices.com cdn.dnky.co api.comapi.com *.trackedlink.net snap.licdn.com checkout.buckaroo.nl *.adyen.com *.zopim.com *.hotjar.com *.zdassets.com *.sendcloud.sc *.mailchimp.com *.trustedshops.com *.fontawesome.com *.facebook.net *.feedbackcompany.com *.google-analytics.com *.trustpilot.com cdn.jsdelivr.net www.googleoptimize.com www.clarity.ms *.datatrics.com *.criteo.net *.criteo.com cdn.mouseflow.com appleid.cdn-apple.com assets.emarsys.net p.teads.tv s7.addthis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com cdn.dnky.co checkout.buckaroo.nl *.fontawesome.com *.mailchimp.com *.trustpilot.com cdn.jsdelivr.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zopim.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net analytics.google.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.facebook.com *.facebook.com graph.facebook.com business.facebook.com *.scarabresearch.com *.eservice.emarsys.net *.cloudflare.com commerce.adobedc.net api.comapi.com www.google-analytics.com maps.googleapis.com stats.g.doubleclick.net *.zdassets.com *.hotjar.com *.hotjar.io *.zopim.com wss://*.zopim.com *.feedbackcompany.com *.zendesk.com www.clarity.ms *.datatrics.com api.ipify.org api.hashify.net vmp.eftpay.com.cn ekr.zdassets.com/ *.google-analytics.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.keewah.com/; report-to report-endpoint; 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-WKpTYpO//oOwaAiXDV1SGKWoy0Q=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://www.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://www.google.com https://www.gstatic.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://adservice.google.com https://pagead2.googlesyndication.com https://ade.googlesyndication.com https://connect.facebook.net https://capi-automation.s3.us-east-2.amazonaws.com https://www.redditstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://dioz1ui4b5kys.cloudfront.net https://d24uh17y1jmkp0.cloudfront.net https://cms2026.powercor.com.au https://media.powercor.com.au https://*.googleapis.com https://*.gstatic.com https://*.ggpht.com https://www.googletagmanager.com https://*.google-analytics.com https://www.google.com https://www.google.com.au https://google.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://*.fls.doubleclick.net https://www.facebook.com https://alb.reddit.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://adservice.google.com https://pagead2.googlesyndication.com https://ade.googlesyndication.com https://connect.facebook.net https://capi-automation.s3.us-east-2.amazonaws.com https://www.redditstatic.com https://i.ytimg.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.powercor.com.au https://powercor.com.au https://www.citipower.com.au https://citipower.com.au https://prod2026.powercor.com.au https://cppc2026-production-forms-attachments.s3.ap-southeast-2.amazonaws.com https://s3-ap-southeast-2.amazonaws.com https://cppc-outage.s3.ap-southeast-2.amazonaws.com https://maps.googleapis.com https://places.googleapis.com https://www.googletagmanager.com https://*.google-analytics.com https://google-analytics.com https://*.analytics.google.com https://analytics.google.com https://stats.g.doubleclick.net https://td.doubleclick.net https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://ad.doubleclick.net https://*.fls.doubleclick.net https://www.facebook.com https://alb.reddit.com https://connect.facebook.net https://fh-118116076e9a4c2a96a99fbb70bea2a0.ecs.us-west-2.on.aws https://bded8a3c6ae-1-1053047382554.us-central1.run.app https://www.google.com https://www.google.com.au https://google.com https://dioz1ui4b5kys.cloudfront.net https://d24uh17y1jmkp0.cloudfront.net https://cms2026.powercor.com.au https://media.powercor.com.au; frame-src 'self' https://www.googletagmanager.com https://*.fls.doubleclick.net https://td.doubleclick.net https://www.facebook.com https://www.youtube.com https://m.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.google.com; media-src 'self' https://dioz1ui4b5kys.cloudfront.net https://d24uh17y1jmkp0.cloudfront.net https://cms2026.powercor.com.au https://media.powercor.com.au; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests; report-uri https://o311586.ingest.us.sentry.io/api/1779592/security/?sentry_key=112ec2e7ecfd402db66fbb05ab1c7d41&sentry_environment=production; report-to csp-endpoint 1
frame-ancestors 'self'; report-uri https://www.kidsnews.com.au/csp-reports 1
object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-GIxateFOqf7dpAUAI_hycEG9pgmk5B1d'; base-uri 'none'; report-uri https://data.sanitino.eu/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://client.crisp.chat https://*.crisp.chat https://js.hsforms.net https://js.hs-scripts.com https://meetings.hubspot.com https://assets.mailerlite.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://api.getgreenspark.com https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://client.crisp.chat https://*.crisp.chat https://js.hsforms.net https://js.hs-scripts.com https://meetings.hubspot.com https://assets.mailerlite.com; media-src 'self'; frame-src https://www.google.com https://docs.google.com https://www.googletagmanager.com https://meetings.hubspot.com 1
font-src fonts.gstatic.com use.typekit.net *.fontawesome.com https://fonts.bunny.net code.ionicframework.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeocdn.com www.vimeo.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.google-analytics.com www.google.com www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com code.ionicframework.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src maxcdn.bootstrapcdn.com data: https://*.cloudflare.com *.typekit.net *.googleapis.com https://*.authorize.net https://*.cardinalcommerce.com https://*.trustedshops.com https://*.tawk.to https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://embed.productlead.me https://*.stage.xpertbeauty.bg https://xpertbeauty.local https://*.xpertbeauty.ro 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net https://www.facebook.com/ https://ct.pinterest.com/ https://*.stage.xpertbeauty.bg https://xpertbeauty.local https://*.xpertbeauty.ro 'self' 'unsafe-inline'; frame-ancestors data: 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net js.stripe.com www.google.com https://www.youtube.com https://www.google.com https://www.google.ro https://www.google.bg https://www.facebook.com/ https://*.cardinalcommerce.com https://*.authorize.net https://*.paypal.com https://*.sandbox.paypal.com https://*.hotjar.com https://*.pinterest.com https://*.googlesyndication.com https://googleads.g.doubleclick.net https://*.stage.xpertbeauty.bg https://xpertbeauty.local https://*.xpertbeauty.ro https://*.tawk.to https://s7.addthis.com *.xpertbeauty.ro *.xpertbeauty.bg *.xpertbeauty.hu *.xpertbeauty.com *.datareshape.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.vimeocdn.com s.ytimg.com www.apptrian.com www.facebook.com ct.pinterest.com data: https://*.cloudflare.com https://cdn.klarna.com https://www.magecomp.com https://*.paypal.com www.paypalobjects.com https://*.sandbox.paypal.com https://*.g.doubleclick.net https://*.vimeocdn.com https://s.ytimg.com https://*.usercentrics.eu https://*.magentocommerce.com https://www.google.ro https://www.google.com https://*.tawk.to https://cdn.jsdelivr.net https://*.cdninstagram.com  https://*.xx.fbcdn.net www.instagram.com https://instagram.fcnd1-1.fna.fbcdn.net http://seal.alphassl.com/ https://secure.trust-provider.com https://ssl.comodo.com https://feedback.trusted.ro https://*.stage.xpertbeauty.bg https://xpertbeauty.local https://*.xpertbeauty.ro https://ct.pinterest.com maps.gstatic.com maps.google.com https://*.themarketer.com *.xpertbeauty.ro *.xpertbeauty.bg *.xpertbeauty.hu *.xpertbeauty.com *.datareshape.net https://*.google.com https://sslseal.certum.pl/ *.collect.igodigital.com flagpedia.net 'self' 'unsafe-inline'; script-src https://*.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net s.ytimg.com video.google.com https://*.vimeo.com www.vimeo.com js.authorize.net jstest.authorize.net cdn-scripts.signifyd.com www.youtube.com js.stripe.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com www.facebook.com connect.facebook.net graph.facebook.com www.pinterest.com s.pinimg.com https://*.cloudflare.com https://*.google.com *.gstatic.com https://www.googletagmanager.com https://*.googlesyndication.com maps.googleapis.com https://*.trustedshops.com https://*.usercentrics.eu https://*.cardinalcommerce.com https://*.googleadservices.com https://googleadservices.com https://*.authorize.net https://*.paypalobjects.com https://*.ytimg.com *.braintreegateway.com *.signifyd.com https://connect.facebook.net https://embed.productlead.me https://chimpstatic.com https://*.tawk.to https://*.hotjar.com https://*.getsitecontrol.com https://*.g.doubleclick.net https://js-agent.newrelic.com/ https://bam.eu01.nr-data.net/ http://seal.alphassl.com/ https://secure.trust-provider.com https://cdn.jsdelivr.net https://s.pinimg.com https://*.pinterest.com https://*.paypal.com https://*.sandbox.paypal.com https://*.stage.xpertbeauty.bg https://xpertbeauty.local https://*.xpertbeauty.ro https://*.themarketer.com https://*.tiktok.com *.xpertbeauty.ro *.xpertbeauty.bg *.xpertbeauty.hu *.xpertbeauty.com *.datareshape.net *.collect.igodigital.com *.avada.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com maxcdn.bootstrapcdn.com https://*.cloudflare.com https://*.trustedshops.com https://*.usercentrics.eu https://maxcdn.bootstrapcdn.com https://embed.productlead.me https://*.tawk.to https://cdn.jsdelivr.net https://*.googleapis.com https://*.stage.xpertbeauty.bg https://xpertbeauty.local https://*.xpertbeauty.ro https://static.xpertbeauty.ro https://*.themarketer.com *.xpertbeauty.ro *.xpertbeauty.bg *.xpertbeauty.hu *.xpertbeauty.com *.datareshape.net *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com www.facebook.com ct.pinterest.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.apptrian.com connect.facebook.net graph.facebook.com ct.pinterest.com https://*.cloudflare.com https://*.paypal.com https://*.cardinalcommerce.com www.facebook.com *.google-analytics.com https://*.tawk.to wss://*.tawk.to https://*.productlead.me wss://*.productlead.me www.instagram.com https://instagram.fcnd1-1.fna.fbcdn.net https://stats.g.doubleclick.net https://bam.eu01.nr-data.net https://*.stage.xpertbeauty.bg https://xpertbeauty.local https://*.xpertbeauty.ro https://ct.pinterest.com https://s7.addthis.com https://api-public.addthis.com https://in.hotjar.com https://vc.hotjar.io maps.googleapis.com https://*.themarketer.com https://*.tiktok.com *.xpertbeauty.ro *.xpertbeauty.bg *.xpertbeauty.hu *.xpertbeauty.com *.datareshape.net https://www.google.com www.gstatic.com 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://*.xpertbeauty.ro/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://apps.bazaarvoice.com https://*.bazaarvoice.com https://cdn.cookielaw.org https://*.onetrust.com https://cdn.pricespider.com https://*.pricespider.com https://acsbapp.com https://*.clarity.ms; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.pricespider.com; img-src 'self' data: blob: https:; media-src 'self' https://kenmore-interim-image-store.s3.us-east-2.amazonaws.com https://*.bynder.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.kenmore.com https://api64.ipify.org https://www.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://*.bazaarvoice.com https://*.pricespider.com https://geolocation.onetrust.com https://*.onetrust.com https://cdn.cookielaw.org https://*.clarity.ms https://cdn.acsbapp.com; frame-src 'self' https://www.googletagmanager.com https://*.bazaarvoice.com https://*.pricespider.com; frame-ancestors 'self'; form-action 'self'; base-uri 'self'; object-src 'none'; report-uri /csp-report; report-to csp-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https://sentry.buywholefoodsonline.co.uk; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; frame-src 'self'; object-src 'none'; report-uri https://sentry.buywholefoodsonline.co.uk/api/5/security/?sentry_key=ddb768d6c09c906d092e2e1ecdbba996; report-to sentry-csp; 1
default-src blob: *;script-src blob: 'self' 'nonce-GQz7NYFJ' *.facebook.com *.facebook.net *.fbcdn.net;style-src data: blob: 'unsafe-inline' *;connect-src blob: data: 'self' *.facebook.com *.fbcdn.net *.facebook.net *.metaenterprise.com wss://*.facebook.com:* wss://*.facebookenterprise.com:* wss://*.metaenterprise.com:* wss://edge-chat.facebook.com gateway.metaenterprise.com gateway.facebookenterprise.com rupload.metaenterprise.com rupload.facebookenterprise.com;font-src data: blob: *;img-src data: blob: *;media-src data: blob: *;child-src data: blob: *;frame-src data: blob: *;manifest-src data: blob: *;object-src data: blob: *;worker-src data: blob: *;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=tr_exp&minimize=0; 1
default-src * 'unsafe-inline' 'unsafe-eval';    style-src-elem * 'unsafe-inline';    frame-ancestors *;    form-action 'self';    script-src-elem * 'unsafe-inline';    connect-src * 'self';    img-src * data:; 1
font-src fonts.googleapis.com fonts.gstatic.com *.googleapis.com *.gstatic.com data: https://fonts.gstatic.com *.fontawesome.com https://maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com www.google.com *.dotdigital-pages.com *.dotdigital.com https://www.trustedsite.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.trustpilot.com *.weltpixel.com lpcdn.lpsnmedia.net https://*.liveperson.net https://*.lpsnmedia.net https://va-s.c.liveperson.net https://lpcdn.lpsnmedia.net https://static.addtoany.com/menu/sm.23.html https://amc.demdex.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com *.trackedlink.net https://cdn.ywxi.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://redchamps.com lpcdn.lpsnmedia.net *.worthingtondirect.com *.adentifi.com *.linkedin.com *.bing.com *.google.pl *.google.com *.facebook.com *.doubleclick.net https://*.liveperson.net https://*.lpsnmedia.net https://worthingtondirect.com https://www.worthingtondirect.com https://lpcdn.lpsnmedia.net https://d1zloi9myumgkb.cloudfront.net https://static-1.worthingtondirect.com https://s3.amazonaws.com https://amcglobal.sc.omtrdc.net https://amc.demdex.net https://dpm.demdex.net https://cm.everesttech.net https://cdnjs.cloudflare.com/ajax/libs/galleriffic/2.0.1/css/loader.gif data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://unpkg.com/react@18/umd/react.production.min.js https://unpkg.com/react-dom@18/umd/react-dom.production.min.js *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal https://cdn.ywxi.net https://www.trustedsite.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com assets.shipperhq.com *.trustpilot.com https://www.googletagmanager.com tagmanager.google.com *.liveperson.net *.lpsnmedia.net cdn.ywxi.net https://cdn.jsdelivr.net/npm/swiper@11/ *.licdn.com *.bing.com *.invocacdn.com *.facebook.net https://*.liveperson.net https://*.lpsnmedia.net https://va-s.c.liveperson.net https://lptag.liveperson.net https://va.v.liveperson.net https://static.addtoany.com/menu/page.js https://lpcdn.lpsnmedia.net https://js-agent.newrelic.com/nr-1208.min.js https://accdn.lpsnmedia.net https://bam.nr-data.net https://js-agent.newrelic.com/nr-1209.min.js https://js-agent.newrelic.com/nr-1210.min.js https://assets.shipperhq.com/shq-checkout_0.1.85.js https://www.gstatic.com/recaptcha/releases/tftmXwdbgCvrXiHxr5HGbIaL/recaptcha__uk.js https://js-agent.newrelic.com https://web-sdk.aptrinsic.com/api/aptrinsic.js 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com *.fontawesome.com assets.braintreegateway.com assets.shipperhq.com *.trustpilot.com tagmanager.google.com https://cdn.jsdelivr.net/npm/swiper@11/ https://maxcdn.bootstrapcdn.com https://assets.shipperhq.com https://web-sdk.aptrinsic.com/style.css 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://*.liveperson.net https://*.lpsnmedia.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https://s3-us-west-2.amazonaws.com/mfesecure-public/ https://www.trustedsite.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com rms.shipperhq.com wss://rms.shipperhq.com/ ovs.shipperhq.com https://www.google-analytics.com *.amazonaws.com *.linkedin.com lpcdn.lpsnmedia.net *.adentifi.com *.google-analytics.com *.doubleclick.net *.bing.com *.google.pl https://*.liveperson.net https://*.lpsnmedia.net https://bam.nr-data.net https://amcglobal.sc.omtrdc.net wss://rms.shipperhq.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.es mws.amazonservices.fr api.comapi.com webchat.dotdigital.com *.authorize.net yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com  w2.yotpo.com https://dpm.demdex.net https://esp-m.aptrinsic.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src https://*.hotjar.com/ *.googleapis.com *.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self' *.maksekeskus.ee *.test.maksekeskus.ee 'self'; frame-src bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ 'self' *.maksekeskus.ee *.test.maksekeskus.ee c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://www.google.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.maksekeskus.ee *.test.maksekeskus.ee https://www.google.ee/ https://*.hotjar.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ 'self' *.maksekeskus.ee *.test.maksekeskus.ee data: https://www.google.com/ https://*.hotjar.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.googleapis.com *.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.google.com https://www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://*.hotjar.com/ unsafe-inline assets.braintreegateway.com fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com 'self' *.maksekeskus.ee *.test.maksekeskus.ee https://*.google-analytics.com/ https://www.google.ee/ https://*.hotjar.com/ https://*.hotjar.io/ wss://*.hotjar.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ 'self' 'unsafe-inline'; child-src 'self' *.maksekeskus.ee *.test.maksekeskus.ee assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src-elem  https://data.forgeadour.com https://static.affilae.com https://bat.bing.com https://www.googletagmanager.com https://static.hotjar.com https://script.hotjar.com https://cdn.by.wonderpush.com https://www.clarity.ms https://www.google.com https://ct.pinterest.com https://s.pinimg.com https://connect.facebook.net https://checkoutshopper-live.adyen.com https://assets.oney.io https://scripts.clarity.ms https://maps.googleapis.com https://widgets.rr.skeepers.io https://capi-automation.s3.us-east-2.amazonaws.com https://www.paypal.com https://www.gstatic.com https://cdn.pimster.app https://www.paperturn-view.com https://sibautomation.com https://cdn.brevo.com https://creativeslider.webshopworks.com/* https://cdn.brevo.com/ https://sibautomation.com/ https://maps.googleapis.com/ https://www.gstatic.com/  'unsafe-inline' 'self'; style-src-elem  https://fonts.googleapis.com https://stackpath.bootstrapcdn.com https://checkoutshopper-live.adyen.com  'unsafe-inline' 'self'; style-src-attr   'unsafe-inline' 'self'; connect-src https://pagead2.googlesyndication.com https://data.forgeadour.com https://bat.bing.net https://www.google.com https://ct.pinterest.com https://bat.bing.com *.clarity.ms https://www.googletagmanager.com *.analytics.google.com doubleclick.net *.doubleclick.net https://vc.hotjar.io https://api-product-reviews.cxr.skeepers.io https://www.googleadservices.com https://cdn.by.wonderpush.com https://maps.googleapis.com https://metrics.hotjar.io https://cl-pbr.cxr.skeepers.io https://cl-ppr.rr.skeepers.io https://www.facebook.com https://content.hotjar.io wss://ws.hotjar.com https://checkoutshopper-live.adyen.com https://www.paypal.com https://api.data.pimster.app https://lb.affilae.com/ https://creativeslider.webshopworks.com/* https://creativepopup.webshopworks.com/* https://checkoutanalytics-live.adyen.com/ https://cdn.brevo.com/ https://in-automate.brevo.com/ https://maps.googleapis.com/ https://www.gstatic.com/  'self'; img-src https://bat.bing.net https://www.google.fr https://data.forgeadour.com data: blob: https://www.facebook.com https://bat.bing.com https://maps.gstatic.com https://www.googletagmanager.com https://region1.analytics.google.com *.doubleclick.net https://checkoutshopper-live.adyen.com https://www.google.co.uk https://www.google.com https://analytics.google.com https://pagead2.googlesyndication.com https://www.google.es https://checkoutshopper-test.adyen.com https://connect.facebook.net https://lh3.google.com https://*.gstatic.com https://www.google.be https://www.google.it https://www.google.ch https://www.googleadservices.com https://www.google.de https://c.clarity.ms https://www.google.com.mt https://www.google.se https://www.google.nl https://maps.googleapis.com https://lb.affilae.com/ https://maps.googleapis.com/ https://www.gstatic.com/  'self'; frame-src https://www.forgeadour.shop https://www.google.com https://checkoutshopper-live.adyen.com https://ct.pinterest.com https://www.facebook.com https://data.forgeadour.com https://embed.pimster.app https://barbecueplace.paperturn-view.com *.wlp-acs.com gateway.zscalertwo.net *.secure.lcl.fr *.cic.fr *.creditmutuel.fr *.cm-cic.fr acs.revolut.com *.modirum.com *.cyris.com https://sibautomation.com www.youtube.com  'self'; manifest-src https://cdn.by.wonderpush.com  'self'; font-src https://fonts.gstatic.com https://stackpath.bootstrapcdn.com https://maxcdn.bootstrapcdn.com data:  'self'; script-src  https://data.forgeadour.com https://assets.oney.io https://bat.bing.com https://script.hotjar.com https://static.affilae.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://sibautomation.com https://cdn.brevo.com  'unsafe-inline' 'unsafe-eval' 'self'; script-src-attr   'unsafe-inline' 'self'; media-src data:  'self'; default-src https://forge-adour.pimster.app  'self'; style-src https://fonts.googleapis.com https://stackpath.bootstrapcdn.com   'unsafe-inline' 'self'; report-uri /module/prestafence/cspviolation; report-to csp-endpoint; 1
frame-src 'self'; report-uri https://support.ironphi.org/site/XFrameViolation 1
form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.facebook.net webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; frame-ancestors *.hana.ondemand.com 'self'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'unsafe-inline' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.klevu.com *.ksearchnet.com magefan.com cm.magefan.com *.facebook.com *.facebook.net https://www.magezon.com ozow-live-cdn.s3.eu-west-1.amazonaws.com *.cloudflare.com https://cdn.klarna.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com *.cdninstagram.com *.google.com *.google.lv *.google.co.za *.google.com.na *.google.na *.zopim.com *.nosto.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.zopim.io *.sfdr.co sfdr.co *.tawk.to tawk.link *.tawk.link *.jsdelivr.net *.azurewebsites.net maps.googleapis.com app.mobicredwidget.co.za media.flixcar.com rt.flix360.com assets.secure.checkout.visa.com *.adobedtm.com data: 'self' 'unsafe-inline'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.googleapis.com *.cloudflare.com *.jsdelivr.net www.gstatic.com media.flixcar.com 'unsafe-inline' data: https://js.klevu.com http://www.ctm.co.tz 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com *.amazonaws.com *.googleapis.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; font-src https://www.roomvo.com fonts.gstatic.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.fonts.googleapis.com *.gstatic.com 'unsafe-inline' data: *.cloudflare.com *.googleapis.com *.zopim.com *.tawk.to *.jsdelivr.net media.flixfacts.com data: 'self' 'unsafe-inline'; connect-src https://agents.engati.ai wt.omnisendlink.com dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com cdn.ampproject.org https://*.ingest.sentry.io *.klevu.com *.ksearchnet.com ekr.zdassets.com/ *.facebook.com *.facebook.net https://get.geojs.io *.avada.io embed.payjustnow.com *.payjustnow.com *.cloudflare.com *.paypal.com *.googleapis.com *.addthis.com *.cardinalcommerce.com https://graph.instagram.com *.testfreaks.com *.google.com *.nosto.com *.hotjar.io *.hotjar.com *.doubleclick.net *.zendesk.com *.tawk.to wss://*.tawk.to *.tawk.link *.addthisedge.com *.what3words.com vsb111.tawk.to ekr.zdassets.com api.magento.com commerce.adobedc.net app.mobicredwidget.co.za wss://widget-mediator.zopim.com bam.nr-data.net *.googletagmanager.com security-hub.vaimo.network 'unsafe-eval' data: cdn.plyr.io noembed.com 'self' 'unsafe-inline'; frame-src https://unicons.iconscout.com https://youtube.com fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.facebook.com *.facebook.net *.google.com embed.payjustnow.com *.payjustnow.com *.addthis.com *.pinterest.com *.nosto.com *.issuu.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.criteo.net *.criteo.com webchat.jdg.co.za *.jdg.co.za www.youtube.com 'self' 'unsafe-inline'; script-src https://unicons.iconscout.com https://agents.engati.ai https://bb.branding-element.com *.convertexperiments.com www.roomvo.com omnisnippet1.com bat.bing.com *.omnisnippet1.com static.ads-twitter.com analytics.tiktok.com https://s.pinterest.com https://scripts.clarity.ms assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.ampproject.org raw.githubusercontent.com chimpstatic.com downloads.mailchimp.com *.list-manage.com https://polyfill-fastly.io https://browser.sentry-cdn.com js.klevu.com *.ksearchnet.com s7.addthis.com *.facebook.com *.facebook.net *.avada.io *.google.com embed.payjustnow.com *.payjustnow.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.zopim.com *.videoly.co sfdr.co *.cnetcontent.com *.cloudfront.net *.klevu.com *.google.lv *.google.co.za *.google.com.na *.google.na *.cloudflare.com *.cloudflareinsights.com *.nosto.com *.hotjar.com *.googletagmanager.com *.criteo.net *.criteo.com *.sfdr.co *.tawk.to *.tawk.link *.jsdelivr.net *.mouseflow.com *.what3words.com maps.googleapis.com commerce.adobedtm.com magento-recs-sdk.adobe.net static.zdassets.com app.mobicredwidget.co.za www.gstatic.com connect.facebook.net bam.nr-data.net js.testfreaks.com media.flixfacts.com media.flixcar.com security-hub.vaimo.network www.youtube.com player.vimeo.com https://js.klevu.com http://www.ctm.co.tz 'self' 'unsafe-inline' 'unsafe-eval'; 1
font-src 'self' fonts.googleapis.com fonts.gstatic.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.monsido.com *.google-analytics.com *.google.com *.gstatic.com *.hotjar.com www.googletagmanager.com; style-src-elem 'self' 'unsafe-inline' https://*.gstatic.com fonts.googleapis.com blob:; style-src 'self' 'unsafe-inline'; frame-src 'self' *.google.com *.youtube.com networkmap.metroinfo.co.nz ecanwebbies.wufoo.com; connect-src 'self' *.google-analytics.com stats.g.doubleclick.net analytics.google.com; img-src 'self' data: *.googletagmanager.com *.gstatic.com *.google.co.nz *.google.com *.google.com.au *.monsido.com; default-src 'self'; 1
font-src *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com magefan.com cm.magefan.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.hsforms.net *.hsforms.com *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com data: https://widgets.trustedshops.com *.fontawesome.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.cookiebot.com https://widget.trustpilot.com *.criteo.com *.pinterest.com *.addthis.com *.facebook.com *.twitter.com js.mollie.com *.multisafepay.com https://pay.google.com *.trustpilot.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.placeholder.com *.linkedin.com *.cookiebot.com https://images.unsplash.com *.hypernode.io *.bing.com *.google.com *.google.nl *.google.de *.google.be https://belco-prod.s3-eu-central-1.amazonaws.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com *.disqus.com *.addthisedge.com *.twitter.com https://www.mollie.com *.multisafepay.com *.hsforms.net *.hsforms.com 'self' data: *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com bam-cell.nr-data.net bam.nr-data.net *.cookiebot.com https://maps.googleapis.com https://player.vimeo.com https://widget.trustpilot.com https://invitejs.trustpilot.com *.criteo.com *.pinimg.com *.pinterest.com *.bing.com https://cdn.belco.io *.belco.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.moatads.com *.addthisedge.com *.facebook.net *.twitter.com js.mollie.com *.multisafepay.com https://pay.google.com *.hsforms.net *.hsforms.com *.gstatic.com *.trustpilot.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cookiebot.com https://*.googleapis.com https://static.klaviyo.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://cdn.jsdelivr.net *.fontawesome.com *.multisafepay.com *.googleapis.com *.gstatic.com *.trustpilot.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com bam-cell.nr-data.net *.cookiebot.com https://maps.googleapis.com https://player.vimeo.com https://pagead2.googlesyndication.com *.doubleclick.net *.pinterest.com *.pinimg.com *.trustpilot.com wss://chat.belco.io https://cdn.belco.io *.belco.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.multisafepay.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://sentry.accentinteractive.nl/api/26/security&sentry_key=0fcffbf58ea50f7962fd33fc05fb3ea9&sentry_release=1789130094&sentry_environment=production; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com x.klarnacdn.net *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardlink.gr *.alphaecommerce.gr *.eurocommerce.gr *.vivapayments.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com static.addtoany.com www.google.com widget-v5.boxnow.gr consentcdn.cookiebot.com www.googletagmanager.com *.contactpigeon.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io maps.gstatic.com *.googleapis.com *.google.com *.acscourier.net https://images.unsplash.com https://www.crocs.gr https://crocs.gr widget-v5.boxnow.gr tile.openstreetmap.org www.google.gr https://www.facebook.com https://connect.facebook.net https://imgsct.cookiebot.com *.contactpigeon.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com maps.googleapis.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js https://maps.googleapis.com *.vivapayments.com static.addtoany.com www.google.com www.gstatic.com widget-v5.boxnow.gr cdnjs.cloudflare.com unpkg.com ajax.googleapis.com api.ipstack.com crocs.overguess.com js.klarna.com *.cookiebot.com *.googlesyndication.com *.google-analytics.com *.googletagmanager.com https://connect.facebook.net https://cdnjs.cloudflare.com *.contactpigeon.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com www.gstatic.com widget-v5.boxnow.gr cdnjs.cloudflare.com unpkg.com crocs.overguess.com x.klarnacdn.net https://ping.contactpigeon.com *.googletagmanager.com https://cdnjs.cloudflare.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com maps.googleapis.com https://maps.googleapis.com https://player.vimeo.com boxlockersloadfiles.blob.core.windows.net widgettranslations.blob.core.windows.net region1.analytics.google.com widget-v5.boxnow.gr crocs.overguess.com *.googlesyndication.com https://consentcdn.cookiebot.com *.contactpigeon.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google-analytics.com *.doubleclick.net 'self' 'unsafe-inline'; child-src *.contactpigeon.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src stats.g.doubleclick.net pagead2.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.contactpigeon.com 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-_9R8XLE7CcVDlfnmg7l2sw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com static.lipscore.com *.klarnacdn.net *.klevu.com *.ksearchnet.com *.bootstrapcdn.com *.kindlycdn.com *.cookieinformation.com *.app.cookieinformation.com *.doubleclick.net *.td.doubleclick.net *.googletagmanager.com *.cevoid.com *.gallery.cevoid.com *.embed.cevoid.com *.api.cevoid.com *.granit.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.klarna.com js.mollie.com *.hotjar.com *.cookieinformation.com *.app.cookieinformation.com *.doubleclick.net *.td.doubleclick.net *.googletagmanager.com *.cevoid.com *.gallery.cevoid.com *.embed.cevoid.com *.api.cevoid.com *.granit.com *.playground.kustom.co *.kustom.co 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://images.unsplash.com *.klarna.com *.klarnaevt.com *.klarnacdn.net static.lipscore.com blob: img.youtube.com magefan.com cm.magefan.com *.klevu.com *.ksearchnet.com https://www.mollie.com *.facebook.com *.cookieinformation.com *.app.cookieinformation.com *.doubleclick.net *.td.doubleclick.net *.googletagmanager.com *.cevoid.com *.gallery.cevoid.com *.embed.cevoid.com *.api.cevoid.com *.granit.com *.cevoidcontent.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com player.vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://maps.googleapis.com https://player.vimeo.com *.klarna.com *.klarnacdn.net x.klarnacdn.net static.lipscore.com *.klarnaservices.com js.klevu.com *.ksearchnet.com js.mollie.com *.hotjar.com *.getflowbox.com *.spinnaker-js.com *.facebook.com *.facebook.net *.kindlycdn.com *.cookieinformation.com *.app.cookieinformation.com *.doubleclick.net *.td.doubleclick.net *.googletagmanager.com *.cevoid.com *.gallery.cevoid.com *.embed.cevoid.com *.api.cevoid.com *.granit.com *.playground.kustom.co *.kustom.co *.kuvio.io *.redeal.se *.onsite.voyado.com youtu.be tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com static.lipscore.com *.klarnacdn.net *.klevu.com *.ksearchnet.com *.bootstrapcdn.com *.cookieinformation.com *.app.cookieinformation.com *.doubleclick.net *.td.doubleclick.net *.googletagmanager.com *.cevoid.com *.gallery.cevoid.com *.embed.cevoid.com *.api.cevoid.com *.granit.com *.onsite.voyado.com tagmanager.google.com fonts.google.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com player.vimeo.com www.youtube.com youtu.be 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://maps.googleapis.com https://player.vimeo.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net wapi.lipscore.com users.lipscore.com *.klarnaservices.com *.klarna.com *.klevu.com *.ksearchnet.com *.hotjar.com *.g.doubleclick.net *.spinnaker-js.com *.kindlycdn.com *.cookieinformation.com *.app.cookieinformation.com *.doubleclick.net *.td.doubleclick.net *.googletagmanager.com *.cevoid.com *.gallery.cevoid.com *.embed.cevoid.com *.api.cevoid.com *.granit.com *.playground.kustom.co *.kustom.co *.hotjar.io capig.stape.org *.onsite.voyado.com *.google-analytics.com *.analytics.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src https://fonts.gstatic.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors localhost:* *.motive.co 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://www.googletagmanager.com/ *.google.com/ *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com js.monei.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com https://www.magezon.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.connectif.cloud http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://firebasestorage.googleapis.com *.motive.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com *.aplazame.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.connectif.cloud http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io *.google.com/ *.motive.co *.cloudflare.com js.monei.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com downloads.mailchimp.com *.fontawesome.com https://fonts.bunny.net *.googleapis.com *.addtoany.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com *.aplazame.com *.connectif.cloud http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io http://dpm.demdex.net *.motive.co api.monei.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-o2khOUevc1lDz-gS0acfDA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; connect-src 'self' https://ndax.my.site.com https://ndax.my.salesforce-scrt.com https://imagedelivery.net https://*.apm.westus2.azure.elastic-cloud.com https://challenges.cloudflare.com https://www.youtube.com; frame-src 'self' https://ndax.my.site.com https://www.google.com https://www.gstatic.com https://challenges.cloudflare.com https://www.youtube.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.youtube.com; object-src 'none'; base-uri 'self' 1
base-uri 'self' *.smartenergygb.org; connect-src 'self' *.smartenergygb.org *.clarity.ms *.doubleclick.net *.google.co.uk *.google.com *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.googletagmanager.com *.hotjar.com *.hotjar.io *.linkedin.com *.reciteme.com *.snapchat.com *.teads.tv *.webtrends-optimize.com *.webtrends-optimize.workers.dev analytics.tiktok.com api.getaddress.io capig.tandpgroup.com cdn-ukwest.onetrust.com ct.pinterest.com geolocation.onetrust.com google.com pixel-config.reddit.com privacyportal-uk.onetrust.com s.yimg.com www.redditstatic.com tr.blismedia.com i0lne9atrk.execute-api.eu-west-2.amazonaws.com o4506903028891648.ingest.us.sentry.io; default-src 'self' *.smartenergygb.org *.clarity.ms marketplace.umbraco.com our.umbraco.com; font-src 'self' data: *.smartenergygb.org *.clarity.ms *.hotjar.com *.reciteme.com fonts.gstatic.com; frame-ancestors 'self' *.smartenergygb.org *.vimeo.com *.youtube.com vimeo.com youtube.com; frame-src 'self' *.smartenergygb.org *.clarity.ms *.doubleclick.net *.googletagmanager.com *.teads.tv *.youtube.com ct.pinterest.com form.typeform.com insight.adsrvr.org smartenergygb.viznav.liquona.com tr.snapchat.com youtube.com; form-action 'self' *.smartenergygb.org; img-src 'self' data: *.smartenergygb.org *.adalyser.com *.adswizz.com *.clarity.ms *.doubleclick.net *.facebook.com *.facebook.net *.google.co.uk *.google.com *.google-analytics.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.linkedin.com *.nextdoor.com *.reciteme.com *.teads.tv *.webtrends-optimize.com ads-twitter.com ads-api.twitter.com alb.reddit.com analytics.twitter.com cdn-ukwest.onetrust.com dashboard.umbraco.com google.com googletagmanager.com i.ytimg.com our.umbraco.com sp.analytics.yahoo.com t.co tr.blismedia.com; media-src 'self' *.smartenergygb.org *.clarity.ms *.reciteme.com; object-src 'self' *.smartenergygb.org *.clarity.ms; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.smartenergygb.org *.adalyser.com *.clarity.ms *.doubleclick.net *.google.co.uk *.google.com *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.googletagmanager.com *.hotjar.com *.nextdoor.com *.reciteme.com *.teads.tv *.webtrends-optimize.com *.webtrends-optimize.workers.dev *.youtube.com ads-twitter.com ads-api.twitter.com analytics.tiktok.com analytics.twitter.com cdn.jsdelivr.net cdn-ukwest.onetrust.com cdnjs.cloudflare.com code.jquery.com connect.facebook.net ct.pinterest.com googletagmanager.com js.adsrvr.org platform.twitter.com s.pinimg.com s.yimg.com sc-static.net sitepixel.blis.com snap.licdn.com static.ads-twitter.com static.cloudflareinsights.com tr.snapchat.com translations.signapsesolutions.com unpkg.com www.redditstatic.com youtube.com; style-src 'self' 'unsafe-inline' *.smartenergygb.org *.clarity.ms *.google.co.uk *.google.com *.googletagmanager.com *.hotjar.com *.reciteme.com *.webtrends-optimize.com *.webtrends-optimize.workers.dev fonts.googleapis.com googletagmanager.com 1
style-src-elem preprod-cdn.otter.ro cdn.otter.ro dev.otter247.local stage2.otter.ro stage2.tezyo.ro stage2.gryxx.ro stage2.aldoshoes.ro data: https://static.klaviyo.com https://cdn.jsdelivr.net https://*.adobe.com https://fonts.googleapis.com https://*.doubleclick.net https://*.facebook.com https://fonts.gstatic.com https://*.googletagmanager.com https://*.googlesyndication.com https://*.fontawesome.com https://maxcdn.bootstrapcdn.com https://fonts.bunny.net https://fonts.static.com https://*.nosto.com https://*.nos.to https://assets.braintreegateaway.com https://*.cloudfront.net https://*.reviews.io https://*.reviews.co.uk https://preprod-cdn.otter.ro https://cdn.otter.ro 'unsafe-inline' https://www.googletagmanager.com https://www.googlesyndication.com https://use.fontawesome.com https://assets.braintreegateway.com https://d2c7ipcroan06u2.cloudfront.net; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com maxcdn.bootstrapcdn.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.googleapis.com https://fonts.bunny.net fonts.googleapis.com preprod-cdn.otter.ro cdn.otter.ro static.klaviyo.com cdn.jsdelivr.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.nosto.com *.nos.to *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors https://www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ https://www.google.com/ *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.innoship.ro *.nosto.com *.nos.to *.reviews.io *.reviews.co.uk preprod-cdn.otter.ro cdn.otter.ro static.klaviyo.com cdn.jsdelivr.net https://www.googletagmanager.com https://consentcdn.cookiebot.eu https://event.2performant.com https://ams.creativecdn.com https://www.gstatic.com/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com *.tile.openstreetmap.org *.openstreetmap.org https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ * https://www.magezon.com *.nosto.com *.nos.to *.cloudfront.net *.reviews.io *.reviews.co.uk https://firebasestorage.googleapis.com quickchart.io img.youtube.com www.google.com.ua preprod-cdn.otter.ro cdn.otter.ro static.klaviyo.com cdn.jsdelivr.net https://ss.tezyo.ro data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://www.google.com/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com cdn.jsdelivr.net *.tiktok.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ * *.nosto.com *.nos.to *.reviews.io *.reviews.co.uk *.fontawesome.com *.googleapis.com https://www.gstatic.com/ *.avada.io *.shopify.com maps.googleapis.com preprod-cdn.otter.ro cdn.otter.ro static.klaviyo.com https://cdn.otter.ro https://ss.tezyo.ro 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://*.adobe.com fonts.googleapis.com *.googleapis.com https://*.doubleclick.net https://*.facebook.com *.gstatic.com https://*.googletagmanager.com https://*.googlesyndication.com *.tiktok.com https://*.fontawesome.com maxcdn.bootstrapcdn.com https://static.klaviyo.com https://*.nosto.com *.nos.to https://*.cloudfront.net *.reviews.io *.reviews.co.uk https://fonts.bunny.net fonts.gstatic.com preprod-cdn.otter.ro cdn.otter.ro dev.otter247.local stage2.otter.ro stage2.tezyo.ro stage2.gryxx.ro stage2.aldoshoes.ro data: https://cdn.jsdelivr.net https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://fonts.static.com https://*.nos.to https://assets.braintreegateaway.com https://*.reviews.io https://*.reviews.co.uk https://preprod-cdn.otter.ro https://cdn.otter.ro 'unsafe-inline' https://www.googletagmanager.com https://www.googlesyndication.com https://use.fontawesome.com https://assets.braintreegateway.com https://d2c7ipcroan06u2.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com preprod-cdn.otter.ro cdn.otter.ro static.klaviyo.com cdn.jsdelivr.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.facebook.com *.facebook.net https://www.google.com/ *.doubleclick.net *.googlesyndication.com *.tiktok.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.nosto.com *.nos.to *.cloudfront.net *.reviews.io *.reviews.co.uk https://get.geojs.io *.avada.io maps.googleapis.com preprod-cdn.otter.ro cdn.otter.ro stage2.otter.ro stage2.tezyo.ro stage2.gryxx.ro stage2.aldoshoes.ro static.klaviyo.com cdn.jsdelivr.net https://tezyo.zendesk.com https://ekr.zdassets.com https://*.zendesk.com https://*.zdassets.com https://event.2performant.com https://tidytracking.com https://ss.tezyo.ro 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' http: https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; report-uri /csp-report 1
script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=axNx8Gaza2zJfcLDXmDhYaTugCLz1K4nFZKxO.lSvrg-1789270905.6826572-1.0.1.1-ObU93JImCor1f1iFC2Fw2e5yL47YwvrphXTHROV8IaTIwrfBIaEDZqa6vTJMmHR2obkRTKpDJNgItnQSC632D8LPy9G5VmNif99kKIOREUdyRJ9Qkea5klh8YpBjOphWxocA1L9S9ztfpvgX2uyW3hAKwUvqQ1iIEsd_5nJ2bEc; report-to cf-csp-endpoint 1
default-src https:;script-src https: 'self' 'strict-dynamic' 'nonce-fee59a2e4ba5592ce72dbfc3b35a8019d05a7fba7c243c02c2c640a874480543' 'unsafe-inline' 'unsafe-eval' 'report-sample';style-src https: 'unsafe-inline';img-src https: data:;connect-src https: wss:;font-src https: data:;object-src 'none';media-src https: blob: data:;frame-src https: data: blob:;child-src 'self' https:;form-action 'self';frame-ancestors https://my.firespring.com;base-uri 'self' https://insights.sitesearch360.com;worker-src 'self' blob:;manifest-src 'self' https://cdn.firespring.com;report-uri /csp_log?n=1 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * test.saferpay.com www.saferpay.com saferpay.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://consentcdn.cookiebot.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * test.saferpay.com www.saferpay.com saferpay.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io github.blog *.bird.eu https://firebasestorage.googleapis.com https://consent.cookiebot.com https://imgsct.cookiebot.com https://cdn.cookielaw.org www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com test.saferpay.com www.saferpay.com saferpay.com *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com jquery.sellxed.com *.avada.io https://consent.cookiebot.com https://consentcdn.cookiebot.com https://cdn.cookielaw.org js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com test.saferpay.com www.saferpay.com saferpay.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net https://hello.myfonts.net assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://get.geojs.io *.avada.io https://consent.cookiebot.com https://consentcdn.cookiebot.com https://cdn.cookielaw.org api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com test.saferpay.com www.saferpay.com saferpay.com *.google-analytics.com *.facebook.net https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com api.securedvisit.com content.securedvisit.com images.securedvisit.com track.sv.rkdms.com track.securedvisit.com safevisit.online ghs4.safevisit.online d-code.liadm.com *.zmags.com *.zma.gs *.force.com *.userway.org *.fatwin.com *.salesforceliveagent.com *.klaviyo.com *.powerreviews.com *.scene7.com *.cloudflare.com script.crazyegg.com images.getfastr.com js.adsrvr.org stats.g.doubleclick.net googleads.g.doubleclick.net google.co.in *.cloudfront.net *.jquery.com *.cloudinary.com *.magentosite.cloud *.starfurniture.com *.videohub.tv *.bing.com *.google.ro *.bootstrapcdn.com *.onetrust.com blog.starfurniture.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com blog.starfurniture.com 'self' 'unsafe-inline'; frame-ancestors blog.starfurniture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.affirm.com *.affirm.ca *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * https://plumrocket.com blog.starfurniture.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com *.affirm.com *.affirm.ca www.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.liadm.com *.five9.com api.securedvisit.com content.securedvisit.com images.securedvisit.com track.sv.rkdms.com track.securedvisit.com safevisit.online ghs4.safevisit.online d-code.liadm.com *.connatix.com *.simpli.fi *.pro-market.net *.zmags.com *.zma.gs *.force.com *.userway.org *.fatwin.com *.salesforceliveagent.com *.klaviyo.com *.powerreviews.com *.scene7.com *.cloudflare.com script.crazyegg.com images.getfastr.com js.adsrvr.org stats.g.doubleclick.net *.google.co.in *.cloudfront.net *.jquery.com *.cloudinary.com *.adobetm.com *.magentosite.cloud *.starfurniture.com *.videohub.tv *.bing.com *.google.ro turn.com r.turn.com *.facebook.com *.facebook.net facebook.com facebook.net *.turn.com *.cookielaw.org *.wixmp.com *.onetrust.com *.unbxdapi.com *.clarity.ms blog.starfurniture.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com *.affirm.com *.affirm.ca *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.posthog.com *.fastroptimize.io *.simpli.fi *.five9.com api.securedvisit.com content.securedvisit.com images.securedvisit.com track.sv.rkdms.com track.securedvisit.com safevisit.online ghs4.safevisit.online d-code.liadm.com *.vimeo.com aa.agkn.com *.rkdms.com *.liadm.com *.zmags.com o.clarity.ms *.clarity.ms clarity.ms *.zma.gs *.force.com *.userway.org *.fatwin.com *.salesforceliveagent.com *.klaviyo.com *.powerreviews.com *.scene7.com *.cloudflare.com script.crazyegg.com images.getfastr.com js.adsrvr.org stats.g.doubleclick.net google.co.in *.cloudfront.net *.jquery.com *.cloudinary.com *.adobetm.com adobetm.com assets.adobetm.com *.magentosite.cloud *.starfurniture.com *.videohub.tv *.bing.com facebook.com *.facebook.com *.visiblevisitor.net cdn.visiblevisitor.net overflowworks.com *.overflowworks.com turn.com r.turn.com *.turn.com visiblevisitor.net connect.facebook.com *.facebook.net connect.facebook.net salesforce.com *.salesforce.com my.salesforce.com starfurniture.my.salesforce.com salesforce-sites.com *.salesforce-sites.com my.salesforce-sites.com starfurniture.my.salesforce-sites.com *.google.ro *.cookielaw.org *.unbxdapi.com *.onetrust.com *.safevisit.online *.unbxd.io blog.starfurniture.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com assets.braintreegateway.com *.five9.com api.securedvisit.com content.securedvisit.com images.securedvisit.com track.sv.rkdms.com track.securedvisit.com safevisit.online ghs4.safevisit.online d-code.liadm.com *.zmags.com *.zma.gs *.force.com *.userway.org *.fatwin.com *.salesforceliveagent.com *.klaviyo.com *.powerreviews.com *.scene7.com *.cloudflare.com *.googleapis.com script.crazyegg.com images.getfastr.com js.adsrvr.org stats.g.doubleclick.net googleads.g.doubleclick.net google.co.in *.cloudfront.net *.jquery.com *.cloudinary.com *.magentosite.cloud *.starfurniture.com *.videohub.tv *.bing.com *.google.ro typekit.net *.typekit.net p.typekit.net salesforce.com *.salesforce.com my.salesforce.com starfurniture.my.salesforce.com salesforce-sites.com *.salesforce-sites.com my.salesforce-sites.com starfurniture.my.salesforce-sites.com use.typekit.net *.cookielaw.org *.bootstrapcdn.com *.onetrust.com *.safevisit.online *.unbxdapi.com blog.starfurniture.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blog.starfurniture.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.affirm.com *.affirm.ca https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.doubleclick.net *.posthog.com insight.adsrvr.org api.securedvisit.com content.securedvisit.com images.securedvisit.com track.sv.rkdms.com track.securedvisit.com safevisit.online ghs4.safevisit.online d-code.liadm.com *.zmags.com *.zma.gs *.force.com *.userway.org *.fatwin.com *.salesforceliveagent.com *.klaviyo.com *.powerreviews.com *.scene7.com *.cloudflare.com script.crazyegg.com images.getfastr.com js.adsrvr.org stats.g.doubleclick.net googleads.g.doubleclick.net google.co.in *.cloudfront.net *.jquery.com *.cloudinary.com o.clarity.ms *.clarity.ms clarity.ms *.demdex.net *.omtrdc.net *.magentosite.cloud *.starfurniture.com *.videohub.tv *.bing.com *.google.ro *.visiblevisitor.net cdn.visiblevisitor.net google-analytics.com *.google-analytics.com salesforce.com *.salesforce.com my.salesforce.com starfurniture.my.salesforce.com salesforce-sites.com *.salesforce-sites.com my.salesforce-sites.com starfurniture.my.salesforce-sites.com region1.google-analytics.com *.cookielaw.org *.onetrust.com *.unbxdapi.com *.safevisit.online *.unbxd.io *.liadm.com blog.starfurniture.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com blog.starfurniture.com http: https: blob: 'self' 'unsafe-inline'; default-src blog.starfurniture.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://*.gstatic.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://*.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://*.doubleclick.net https://*.facebook.com https://*.googlesyndication.com *.tiktok.com https://*.youtube-nocookie.com https://embed.pakketdienstqls.nl https://*.braintreegateway.com https://*.paypal.com *.multisafepay.com https://player.vimeo.com https://pay.google.com https://www.googletagmanager.com https://*.googleapis.com https://www.kiyoh.com/ www.facebook.com platform.twitter.com js.mollie.com 'self' 'unsafe-inline'; img-src https://assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net https://*.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net https://www.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com https://www.googleadservices.com https://www.google-analytics.com https://googleads.g.doubleclick.net *.multisafepay.com https://nagelfabriekhyva.hypernode.io https://www.google.nl https://*.thuiswinkel-cdn.org https://belco-prod.s3-eu-central-1.amazonaws.com cdn.doofinder.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com https://firebasestorage.googleapis.com https://www.mollie.com assets.myparcel.nl data: 'self' 'unsafe-inline'; script-src https://assets.adobedtm.com https://*.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com *.google.bg https://www.googletagmanager.com *.facebook.com *.facebook.net https://*.doubleclick.net https://www.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com https://www.googleadservices.com https://googleads.g.doubleclick.net *.multisafepay.com https://embed.pakketdienstqls.nl https://*.typekit.net https://*.googleapis.com https://*.thuiswinkel.org https://*.thuiswinkel-cdn.org https://*.reloadify.com https://*.fontawesome.com https://cdn.belco.io *.belco.io cdn.doofinder.com connect.facebook.net twitter.com platform.twitter.com *.avada.io *.shopify.com js.mollie.com https://pay.google.com cdnjs.cloudflare.com cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com https://*.thuiswinkel-cdn.org https://*.googleapis.com *.doofinder.com https://fonts.googleapis.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.multisafepay.com cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com https://*.thuiswinkel-cdn.org https://*.reloadify.com https://*.fontawesome.com wss://chat.belco.io https://cdn.belco.io *.belco.io *.doofinder.com wss://*.doofinder.com https://get.geojs.io *.avada.io *.multisafepay.com api.myparcel.nl cdn.jsdelivr.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' *.icpl.org search.icpl.org icpl.ladesk.com www.googletagmanager.com www.google-analytics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' icpl.org search.icpl.org icpl.ladesk.com cdnjs.cloudflare.com cdn.jsdelivr.net use.fontawesome.com static.addtoany.com www.googletagmanager.com maps.googleapis.com; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com translate.googleapis.com; img-src 'self' data: icpl.org search.icpl.org icpl.ladesk.com icplcdn-catalog.azureedge.net icplcdn-webvb.azureedge.net www.googletagmanager.com www.google-analytics.com maps.googleapis.com maps.gstatic.com translate.google.com www.gstatic.com i.ytimg.com amplitude-cdn.serversideup.net; media-src icplcdn-webvb.azureedge.net; frame-src 'self' icpl.ladesk.com www.google.com www.youtube.com www.googletagmanager.com www.youtube-nocookie.com static.addtoany.com 5.ue1.vbus.apps.ladesk.com; frame-ancestors www.icpl.org intranet.icpl.org; font-src 'self' cdn.jsdelivr.net fonts.gstatic.com data:; connect-src 'self' search.icpl.org api.nytimes.com icplcdn-webvb.azureedge.net icplcdn-webapi.azureedge.net www.googletagmanager.com www.google-analytics.com maps.googleapis.com region1.google-analytics.com *.google-analytics.com www.google.com; report-uri /report-csp-violation 1
default-src 'self' static.addtoany.com secure.gravatar.com fonts.gstatic.com fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com ssl.google-analytics.com script.addtoany.com static.addtoany.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data: jigsaw.w3.org www.w3.org www.google-analytics.com ssl.google-analytics.com www.linkedin.com static.addtoany.com s.w.org secure.gravatar.com; font-src 'self' data: fonts.gstatic.com; frame-src 'self' static.addtoany.com; report-uri https://bishnet.report-uri.io/r/default/csp/reportOnly; 1
font-src *.fontawesome.com https://fonts.bunny.net http://fonts.gstatic.com https://online.feliubadalo.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://consentcdn.cookiebot.com https://www.salesmanago.pl https://app3.salesmanago.pl https://www.salesmanago.com https://online.feliubadalo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://www.google.com https://www.google.es https://online.feliubadalo.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://cdn.doofinder.com https://eu1-search.doofinder.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.google-analytics.com https://www.google.com https://online.feliubadalo.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com https://fonts.bunny.net unsafe-inline assets.braintreegateway.com http://fonts.googleapis.com https://online.feliubadalo.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net https://vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://eu1-search.doofinder.com https://consentcdn.cookiebot.com https://www.google-analytics.com https://www.youtube.com https://youtu.be http://77.224.171.53:7047 http://77.224.171.49:7047 https://online.feliubadalo.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' ; img-src 'self' ; object-src 'none'; base-uri 'none'; frame-ancestors 'self'; report-uri https://api.giftofchoice.ca/api/csp-report/GOC 1
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' https://telegram.org; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://api.telegram.org wss://wildcard.ru https://wildcard.ru; frame-src https://oauth.telegram.org; worker-src 'self' blob:; report-uri /csp-report 1
worker-src blob:; font-src fonts.gstatic.com *.kxcdn.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io scontent.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com google.com *.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com google.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com google.com *.kxcdn.com *.gstatic.com *.fontawesome.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self' bwia.okta.com bwlogin.iaproducers.com *.oktacdn.com; connect-src 'self' bwia.okta.com bwia-admin.okta.com bwlogin.iaproducers.com *.oktacdn.com *.mixpanel.com *.mapbox.com bwia.kerberos.okta.com bwia.mtls.okta.com *.authenticatorlocalprod.com:8769 http://localhost:8769 http://127.0.0.1:8769 *.authenticatorlocalprod.com:65111 http://localhost:65111 http://127.0.0.1:65111 *.authenticatorlocalprod.com:65121 http://localhost:65121 http://127.0.0.1:65121 *.authenticatorlocalprod.com:65131 http://localhost:65131 http://127.0.0.1:65131 *.authenticatorlocalprod.com:65141 http://localhost:65141 http://127.0.0.1:65141 *.authenticatorlocalprod.com:65151 http://localhost:65151 http://127.0.0.1:65151 https://oinmanager.okta.com data: *.ingest.sentry.io; script-src 'unsafe-inline' 'unsafe-eval' 'self' 'report-sample' bwia.okta.com bwlogin.iaproducers.com *.oktacdn.com; style-src 'unsafe-inline' 'self' 'report-sample' bwia.okta.com bwlogin.iaproducers.com *.oktacdn.com; frame-src 'self' bwia.okta.com bwia-admin.okta.com bwlogin.iaproducers.com login.okta.com *.vidyard.com com-okta-authenticator:; img-src 'self' bwia.okta.com bwlogin.iaproducers.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: blob:; font-src 'self' bwia.okta.com bwlogin.iaproducers.com data: *.oktacdn.com fonts.gstatic.com; frame-ancestors 'self' https://www.iaproducers.com 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com *.alothemes.com *.magepow.com *.cloudflare.com *.bootstrapcdn.com 'unsafe-inline' data: *.aptrinsic.com amcglobal.sc.omtrdc.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.doubleclick.net *.aptrinsic.com amcglobal.sc.omtrdc.net *.sdiapi.com *.sdiapi.net zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com magefan.com cm.magefan.com *.alothemes.com *.magepow.com *.cloudflare.com *.selby.com.au *.facebook.com *.hifishow.com *.stereonet.show *.aptrinsic.com t.zip.co static.zip.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com tagmanager.google.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com widget.freshworks.com m2epro.freshdesk.com s7.addthis.com *.alothemes.com *.magepow.com *.cloudflare.com *.twitter.com *.fontawesome.com *.zipmoney.com.au *.googletagmanager.com *.facebook.net *.trackedweb.net *.trackedlink.net *.aptrinsic.com *.zip.co *.sdiapi.com *.sdiapi.net static.zip.co zip.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com *.alothemes.com *.magepow.com *.cloudflare.com *.bootstrapcdn.com *.aptrinsic.com amcglobal.sc.omtrdc.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.googleapis.com widget.freshworks.com m2epro.freshdesk.com ekr.zdassets.com/ *.alothemes.com *.magepow.com *.cloudflare.com *.doubleclick.net *.zipmoney.com.au *.trackedweb.net *.zip.co *.aptrinsic.com *.sdiapi.com *.sdiapi.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com maxcdn.bootstrapcdn.com *.fontawesome.com *.googleapis.com cdn.jsdelivr.net *.tawk.to data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.multisafepay.com https://pay.google.com *.google.com/recaptcha/ *.hotjar.com/ https://player.vimeo.com/ 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.multisafepay.com *.google-analytics.com *.google.nl cdn.jsdelivr.net *.tawk.to bat.bing.com/ https://futy-io.s3.eu-west-2.amazonaws.com/media/ data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https://vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.avada.io *.multisafepay.com https://pay.google.com player.vimeo.com http://player.vimeo.com/api/player.js *.googleapis.com *.google.com/recaptcha/ cdn.jsdelivr.net *.tawk.to *.hotjar.com/ bat.bing.com/ https://www.clarity.ms/ https://v1.widget.futy.io https://log.cookieyes.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com downloads.mailchimp.com maxcdn.bootstrapcdn.com *.fontawesome.com *.multisafepay.com cdn.jsdelivr.net *.tawk.to 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net https://vimeo.com/api/ www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com https://get.geojs.io *.avada.io *.multisafepay.com *.tawk.to 'self' ws: 'self' wss: *.hotjar.com/ https://api.widget.futy.io https://pagead2.googlesyndication.com/pagead/buyside_topics/set/ https://*.clarity.ms https://log.cookieyes.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'none'; font-src 'self' data: https://fonts.gstatic.com https://fonts.axept.io https://script.hotjar.com; form-action 'self' https://docraptor.com; frame-ancestors 'self' https://*.amplitude.com; img-src 'self' data: blob: https:; object-src 'none'; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://unpkg.com https://accounts.google.com https://fonts.googleapis.com https://fonts.axept.io; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' 'sha256-hpOGkld6JJcR+jWdMbgrigsIDaW1n3eDTUjY9Xme4fM=' 'sha256-1+M5Cy4aogIXXchf9KVAslHCqu2IbmPXqCePKfyWcSY=' 'sha256-pOWJYivEBhNkZmW1AlulZSsuLu45F4hBPURhW4/YBKA=' 'sha256-Ar5X49l6P+wVPiAHifHAWLvYzUkcpIx0eJP8ewQZq0Q=' 'sha256-CIG2dJLtb949UuPa3NwdRwg4azzjNj84XHP4LPwaFYg=' 'sha256-NiM9Do7BfKSGtilZCEhPlGpXEiHiUW40HFNvJgPOdMc=' 'sha256-qFgIMBo3ddimaCR/Saby6g/PmtO0Xr7wxKtHkRsEZww=' 'sha384-gCC/npQpIWhbxhsmrrbMcZ+BsIhJ+lRIO2mSjM8SXJ+YF6taPtTYuu8Ag/h3gAFT'; upgrade-insecure-requests; default-src 'self'; connect-src 'self' data: blob: https://prod-michelangelo.herokuapp.com wss://api.lecollectionist.com https://prod-admin-cms.herokuapp.com https://api.mindee.net https://api.sharegroop.com https://*.algolia.net https://*.algolianet.com https://*.bugsnag.com https://*.amplitude.com https://load.conversion.lecollectionist.com https://conversion.lecollectionist.com https://*.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://*.doubleclick.net https://www.google.com https://*.googleadservices.com https://*.googlesyndication.com https://connect.facebook.net https://www.facebook.com https://ct.pinterest.com https://bat.bing.com https://bat.bing.net https://s.pinimg.com https://widget.trustpilot.com https://api.stripe.com https://m.stripe.com https://m.stripe.network https://r.stripe.com https://js.stripe.com https://maps.googleapis.com https://accounts.google.com https://*.hubspot.com https://*.hscollectedforms.net https://api.ipregistry.co https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://ip2c.org https://api.mapbox.com https://events.mapbox.com https://*.matterport.com wss://*.matterport.com https://*.axept.io; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://m.stripe.network https://my.matterport.com https://form.typeform.com https://widget.trustpilot.com https://accounts.google.com https://*.doubleclick.net https://ct.pinterest.com https://*.sharegroop.com; media-src 'self' blob: https://cdn.lecollectionist.com https://collectionist.s3.eu-west-1.amazonaws.com https://*.matterport.com; worker-src 'self' blob:; manifest-src 'self'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; media-src 'self' blob: https:; frame-src 'self' https:; worker-src 'self' blob: 1
script-src 'nonce-g9AmrKNCbOdpmo5NSPWBmQ' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl; base-uri 'none' 1
frame-ancestors www.youtube.com; report-uri /report-csp-violation 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net *.tawk.to *.onglesdor.com onglesdor.com *.klaviyo.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.facebook.net *.tawk.to *.onglesdor.com onglesdor.com 'self' 'unsafe-inline'; frame-ancestors https://www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://static.addtoany.com/ landofcoder.com *.facebook.com *.facebook.net *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com https://*.moneris.com/ *.addthis.com *.tawk.to *.sezzle.com *.doubleclick.net *.pinterest.com checkout.sezzle.com sandbox.checkout.sezzle.com checkout.eu.sezzle.com sandbox.checkout.eu.sezzle.com tracking.sezzle.com tracking.eu.sezzle.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com camo.githubusercontent.com https://www.magezon.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.facebook.com *.facebook.net *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com https://firebasestorage.googleapis.com *.onglesdor.com onglesdor.com cdn.jsdelivr.net *.google.ca *.google.co.th *.sezzle.com *.cloudfront.net *.githubusercontent.com media.sezzle.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://static.addtoany.com/ chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ landofcoder.com *.facebook.com *.facebook.net *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net https://*.moneris.com/ *.avada.io *.shopify.com 'unsafe-inline' *.tawk.to *.agilecrm.com *.tiktok.com *.sezzle.com *.amazonaws.com cdn.jsdelivr.net *.addthis.com *.addthisedge.com *.moatads.com *.onglesdor.com onglesdor.com *.instagram.com *.pinimg.com *.pinterest.com checkout-sdk.sezzle.com sandbox.checkout-sdk.sezzle.com checkout-sdk.eu.sezzle.com sandbox.checkout-sdk.eu.sezzle.com widget.sezzle.com widget.eu.sezzle.com widget.sezzle.in maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com *.googleapis.com *.googletagmanager.com https://*.moneris.com/ *.fontawesome.com https://fonts.bunny.net cdn.jsdelivr.net *.sezzle.com *.tawk.to *.onglesdor.com onglesdor.com *.cloudfront.net 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://stats.addtoany.com/menu form-assets.mailchimp.com *.intuit.com *.amazonaws.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ landofcoder.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog https://get.geojs.io *.avada.io *.tawk.to wss://*.tawk.to *.addthis.com *.tiktok.com *.sezzle.com *.onglesdor.com onglesdor.com *.pinterest.com places.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.tawk.to 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' mc.yandex.ru mc.yandex.com smartcaptcha.yandexcloud.net top-fwz1.mail.ru *.mail.ru vk.com cloud.roistat.com www.googletagmanager.com ajax.googleapis.com cdnjs.cloudflare.com cdn.jsdelivr.net static.addtoany.com; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob: mc.yandex.ru; connect-src 'self' https: mc.yandex.ru cloud.roistat.com; frame-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:; report-uri /api/csp-report/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://ajax.googleapis.com https://code.jquery.com https://openfpcdn.io https://cdn.jsdelivr.net https://unpkg.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://quantcast.mgr.consensu.org https://*.consensu.org; style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://unpkg.com https://cdn.jsdelivr.net https://*.consensu.org; font-src 'self' data: https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com; img-src 'self' data: blob: https:; frame-src 'self' https:; frame-ancestors 'self' https://*.entrecoquins.com; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://hello.entrecoquins.com https://hello-dev.entrecoquins.com https://quantcast.mgr.consensu.org https://*.consensu.org https://api.quantcast.com; media-src 'self' blob: https:; object-src 'none'; base-uri 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com https://geowidget.easypack24.net *.paypal.com *.paypalobjects.com *.cdn-apple.com *.inpost.pl *.fontawesome.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com fonts.googleapis.com cdnjs.cloudflare.com *.cepd.tech *.fera.pl static.fera.pl https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com sandbox.przelewy24.pl secure.przelewy24.pl *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com pay.google.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com https://ssl.ceneo.pl https://geowidget-app.inpost.pl/ https://sandbox-easy-geowidget.easypack24.net/ pay.google.com apm.przelewy24.pl *.sandbox.paypal.com https://parcelshop.dhl.pl/ *.inpost.pl js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://ssl.ceneo.pl *.googletagmanager.com ssl.gstatic.com www.gstatic.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org static.przelewy24.pl gstatic.com magefan.com cm.magefan.com *.sandbox.paypal.com *.disqus.com https://img.youtube.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: *.google.com *.google.pl *.cepd.tech media.fera.pl static.fera.pl widgets.trustedshops.com upload.snrcdn.net https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://ssl.ceneo.pl *.googletagmanager.com https://geowidget.easypack24.net *.easypack24.net https://geowidget.inpost.pl *.openstreetmap.org sandbox.przelewy24.pl secure.przelewy24.pl pay.google.com apm.przelewy24.pl *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.disqus.com https://cdn.jsdelivr.net *.inpost.pl widget.freshworks.com m2epro.freshdesk.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com sandbox-global-geowidget-sdk.easypack24.net geowidget.inpost-group.com https://sandbox-easy-geowidget-sdk.easypack24.net *.hsforms.net *.hsforms.com *.gstatic.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.snrbox.com connect.facebook.net static.fera.pl *.cepd.tech static.cloudflareinsights.com widgets.trustedshops.com *.clarity.ms *.hotjar.com *.hotjar.io https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com fonts.google.com https://geowidget.easypack24.net https://geowidget.inpost.pl https://cdn.jsdelivr.net *.inpost.pl widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com assets.braintreegateway.com sandbox-global-geowidget-sdk.easypack24.net geowidget.inpost-group.com https://sandbox-easy-geowidget-sdk.easypack24.net *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com *.snrcdn.net cdnjs.cloudflare.com *.google.com *.cepd.tech static.fera.pl https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://geowidget.easypack24.net *.inpost.pl *.cepd.tech *.fera.pl media.fera.pl static.fera.pl 'self' 'unsafe-inline'; manifest-src *.cepd.tech *.fera.pl 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.googletagmanager.com *.easypack24.net *.inpost.pl *.openstreetmap.org sandbox.przelewy24.pl secure.przelewy24.pl wss://ws.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com *.sandbox.paypal.com widget.freshworks.com m2epro.freshdesk.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.snrbox.com *.doubleclick.net *.googlesyndication.com *.cepd.tech *.fera.pl *.clarity.ms *.hotjar.com *.hotjar.io https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com use.typekit.net staticw2.yotpo.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.yotpo.com *.googleapis.com *.gstatic.com https://fonts.bunny.net *.alothemes.com *.magepow.com https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.facebook.com https://seo.mageplaza.com *.yotpo.com 'self' connect.facebook.net graph.facebook.com business.facebook.com https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors widget.trustpilot.com front.optimonk.com cdn.cookielaw.org *.stripe.com stripe.com; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.sharethis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.zenaps.com *.fls.doubleclick.net account.fetchify.com widget.trustpilot.com config1.veinteractive.com www.facebook.com www.youtube.com https://app.payguard.co *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://www.googletagmanager.com/ *.yotpo.com connect.facebook.net graph.facebook.com business.facebook.com https://plumrocket.com *.trustpilot.com https://www.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io *.sharethis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.awin1.com *.zenaps.com *.wepowerconnections.com reporting.gtech.co.uk secure.adnxs.com bat.bing.com pixel.mediaiqdigital.com www.facebook.com www.google.co.uk ct.pinterest.com adservice.google.com x.bidswitch.net widget.trustpilot.com fonts.googleapis.com staticw2.yotpo.com ad.doubleclick.net cookiee1.veinteractive.com www.gtech.co.uk 9032256.fls.doubleclick.net www.pinterest.com img.youtube.com connect.facebook.net www.googletagmanager.com veads.veinteractive.com *.teads.tv *.smartadserver.com *.casalemedia.com *.seedtag.com *.emxdgt.com *.pubmine.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com *.yotpo.com https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com graph.facebook.com business.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.sharethis.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com https://pixel.nudgify.com widget.freshworks.com m2epro.freshdesk.com widget.trustpilot.com eu-west.app.koopid.ai config1.veinteractive.com bat.bing.com cdn.mouseflow.com front.optimonk.com connect.facebook.net c5.adalyser.com cdn.cookielaw.org resources.xg4ken.com pxl.jivox.com p.teads.tv s.pinimg.com www.googletagservices.com pagead2.googlesyndication.com gs-cdn.optimonk.com px.veinteractive.com a.volvelle.tech ad.doubleclick.net 8282528.fls.doubleclick.net *.mention-me.com js-agent.newrelic.com bam-cell.nr-data.net consent.cookiefirst.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.yotpo.com *.avada.io *.shopify.com *.alothemes.com *.magepow.com www.facebook.com graph.facebook.com business.facebook.com *.trustpilot.com https://www.google.com https://www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.sharethis.com widget.freshworks.com m2epro.freshdesk.com cc-cdn.com *.fontawesome.com p.typekit.net use.typekit.net eu-west.app.koopid.ai widget.trustpilot.com fonts.googleapis.com consent.cookiefirst.com https://static.klaviyo.com *.yotpo.com *.googleapis.com https://fonts.bunny.net *.alothemes.com *.magepow.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://static.nudgify.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.sharethis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.wepowerconnections.com https://the.sciencebehindecommerce.com https://data.nudgify.com widget.freshworks.com m2epro.freshdesk.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cdn.cookielaw.org o2.mouseflow.com googleads4.g.doubleclick.net front.optimonk.com jfapiprod.optimonk.com ct.pinterest.com cookiee1.veinteractive.com sessionapi.veinteractive.com dtrc.veinteractive.com bam-cell.nr-data.net *.teads.tv consent.cookiefirst.com edge.cookiefirst.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.yotpo.com https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com https://app.payguard.co http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com widget.trustpilot.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.stripe.com *.stripe.network *.google.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com assets.emailmeform.com files.emailmeform.com images.dmca.com dev.mastershoe.co.uk www.mastershoe.co.uk *.sooqr.com cdn-cookieyes.com www.google.pl meetanshi.com services.postcodeanywhere.co.uk itfa.org www.googletagmanager.com www.google.co.uk www.google-analytics.com *.google-analytics.com *.googletagmanager.com *.analytics.google.com *.g.doubleclick.net *.google.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.sagepay.com *.opayo.eu.elavon.com player.vimeo.com assets.emailmeform.com www.emailmeform.com images.dmca.com static.sooqr.com giles11128.pcapredict.com analytics.webgains.io rum-static.pingdom.net cdn-cookieyes.com dynamic.sooqr.com services.postcodeanywhere.co.uk ajax.cloudflare.com static.cloudflareinsights.com cdn.mouseflow.com dev.mastershoe.co.uk www.mastershoe.co.uk www.googletagmanager.com googleads.g.doubleclick.net widget.trustpilot.com www.google-analytics.com *.google-analytics.com *.googletagmanager.com https://www.googletagmanager.com tagmanager.google.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com downloads.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com *.fontawesome.com static.sooqr.com assets.emailmeform.com app.emailmeform.com services.postcodeanywhere.co.uk dev.mastershoe.co.uk www.mastershoe.co.uk tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com cognito-identity.eu-central-1.amazonaws.com firehose.eu-central-1.amazonaws.com cdn-cookieyes.com log.cookieyes.com rum-collector-2.pingdom.net stats.g.doubleclick.net directory.cookieyes.com region1.google-analytics.com services.postcodeanywhere.co.uk dev.mastershoe.co.uk www.mastershoe.co.uk ad.doubleclick.net widget.trustpilot.com www.google-analytics.com *.google-analytics.com *.googletagmanager.com *.analytics.google.com *.g.doubleclick.net www.google.co.uk *.google.co.uk https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https: ; 1
object-src 'none';base-uri 'self';script-src 'nonce-_3VGUdjyYIbAv6Culsj1IA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com data: *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com *.twitter.com secure.authorize.net test.authorize.net js.stripe.com hooks.stripe.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://firebasestorage.googleapis.com store.paradoxlabs.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.disqus.com *.avada.io *.shopify.com js.stripe.com https://cdn.searchspring.net/intellisuggest/is.min.js *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net https://cdn-scripts.signifyd.com https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com downloads.mailchimp.com https://fonts.bunny.net *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://get.geojs.io *.avada.io *.stripe.com https://beacon.searchspring.io/beacon *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://challenges.cloudflare.com; frame-src 'self' https://www.googletagmanager.com https://www.youtube-nocookie.com https://challenges.cloudflare.com; form-action 'self' https://www.valuehost.com.br 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://js.stripe.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://api.stripe.com https://sockjs.pusher.com wss: ws:; frame-src https://js.stripe.com https://hooks.stripe.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net data:; img-src 'self' data: blob: https:; media-src 'self' blob: data:; worker-src 'self' blob: https://cdn.jsdelivr.net; connect-src 'self' https: wss:; frame-src 'self' https: 1
font-src *.fontawesome.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.meetanshi.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.meetanshi.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ player.vimeo.com *.meetanshi.com *.googletagmanager.com https://www.googletagmanager.com tagmanager.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.meetanshi.com *.google-analytics.com https://www.google-analytics.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.googleapis.com fonts.gstatic.com *.googleapis.com *.gstatic.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net https://googleads.g.doubleclick.net *.iubenda.com https://hits-i.iubenda.com https://cdn.iubenda.com https://paypal-eu-cdn.cloudiq.com https://paypal-eu-arh.cloudiq.com https://www.paypalobjects.com https://ww2.feefo.com *.feefo.com https://eu1-search.doofinder.com *.purechatcdn.com https://secure.gravatar.com https://r1.trackedweb.net *.doofinder.com *.purechat.com *.google-analytics.com *.googleadservices.com *.yotpo.com *.cloudflare.com *.twitter.com https://www.google.co.uk *.google.com *.google.co.in https://www.google.gr *.typekit.net *.twimg.com *.trustedshops.com *.bootstrapcdn.com *.sharethis.com fonts.salesfire.co.uk *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.googlesyndication.com https://eu1-search.doofinder.com *.purechatcdn.com https://secure.gravatar.com https://r1.trackedweb.net *.doofinder.com *.purechat.com *.google-analytics.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com js.stripe.com *.hotjar.com *.iubenda.com https://hits-i.iubenda.com https://cdn.iubenda.com https://ajax.googleapis.com https://paypal-eu-cdn.cloudiq.com https://paypal-eu-arh.cloudiq.com https://www.paypalobjects.com https://ww2.feefo.com *.feefo.com https://eu1-search.doofinder.com *.purechatcdn.com https://secure.gravatar.com https://r1.trackedweb.net *.doofinder.com *.purechat.com *.google-analytics.com *.twitter.com https://www.google.com https://www.google.co.uk https://www.google.co.in https://www.facebook.com https://www.google.gr *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com https://ajax.googleapis.com *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com https://firebasestorage.googleapis.com bat.bing.com *.google.co.uk *.googleadservices.com *.google-analytics.com *.magentocommerce.com *.widgets.magentocommerce.com https://www.paypalobjects.com *.postcodeanywhere.co.uk https://googleads.g.doubleclick.net *.iubenda.com https://hits-i.iubenda.com https://cdn.iubenda.com https://paypal-eu-cdn.cloudiq.com https://paypal-eu-arh.cloudiq.com https://ww2.feefo.com *.feefo.com https://eu1-search.doofinder.com *.purechatcdn.com https://secure.gravatar.com https://r1.trackedweb.net *.doofinder.com *.purechat.com *.yotpo.com *.cloudflare.com https://www.google.co.uk *.google.co.in https://www.facebook.com *.klarna.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.connect.facebook.net https://stats.g.doubleclick.net https://d.adroll.com https://pixel.advertising.com https://pixel.rubiconproject.com https://simage2.pubmatic.com https://dsum-sec.casalemedia.com https://ads.yahoo.com https://eb2.3lift.com https://sync.outbrain.com https://trc.taboola.com https://x.bidswitch.net/sync https://ib.adnxs.com https://idsync.rlcdn.com https://us-u.openx.net https://ups.analytics.yahoo.com https://segments.company-target.com https://www.google.gr *.typekit.net *.sharethis.com *.bing.com *.bing.net *.clarity.ms cdn.salesfire.co.uk www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https://ajax.googleapis.com *.gstatic.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com connect.facebook.net *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.googleapis.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.avada.io js-agent.newrelic.com bam.nr-data.net googletagmanager.com googleadservices.com https://googleads.g.doubleclick.net *.iubenda.com https://hits-i.iubenda.com https://cdn.iubenda.com https://paypal-eu-cdn.cloudiq.com https://paypal-eu-arh.cloudiq.com *.paypalobjects.com https://ww2.feefo.com *.feefo.com https://eu1-search.doofinder.com *.purechatcdn.com https://secure.gravatar.com https://r1.trackedweb.net *.doofinder.com *.purechat.com *.googleadservices.com *.yotpo.com *.cloudflare.com *.twitter.com https://www.google.co.uk *.google.co.in *.facebook.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://connect.facebook.net https://chimpstatic.com https://s.adroll.com https://d.adroll.com https://d.adroll.mgr.consensu.org *.bootstrapcdn.com *.authorize.net https://www.google.gr *.sharethis.com *.typekit.net *.onexpand.co.uk cdn.salesfire.co.uk live.smartmetrics.co.uk bat.bing.com *.clarity.ms *.osano.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com https://fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net services.postcodeanywhere.co.uk *.typekit.net https://googleads.g.doubleclick.net *.iubenda.com https://hits-i.iubenda.com https://cdn.iubenda.com https://paypal-eu-cdn.cloudiq.com https://paypal-eu-arh.cloudiq.com https://www.paypalobjects.com https://ww2.feefo.com *.feefo.com https://eu1-search.doofinder.com *.purechatcdn.com https://secure.gravatar.com https://r1.trackedweb.net *.doofinder.com *.purechat.com *.googleadservices.com *.google-analytics.com *.yotpo.com *.cloudflare.com *.twitter.com https://www.google.co.uk *.google.com *.google.co.in *.twimg.com *.trustedshops.com *.usercentrics.eu *.youtube.com *.bootstrapcdn.com https://www.google.gr *.onexpand.co.uk *.salesfire.co.uk *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https://ajax.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net stats.g.doubleclick.net *.googlesyndication.com *.googleapis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com https://get.geojs.io *.avada.io https://googleads.g.doubleclick.net *.iubenda.com https://hits-i.iubenda.com https://cdn.iubenda.com https://paypal-eu-cdn.cloudiq.com https://paypal-eu-arh.cloudiq.com https://www.paypalobjects.com https://ww2.feefo.com *.feefo.com https://eu1-search.doofinder.com *.purechatcdn.com https://secure.gravatar.com https://r1.trackedweb.net *.doofinder.com *.purechat.com *.googleadservices.com *.yotpo.com *.cloudflare.com *.twitter.com *.twimg.com https://www.google.co.uk *.google.co.in https://www.google.gr *.typekit.net *.sharethis.com *.salesfire.co.uk live.smartmetrics.co.uk *.clarity.ms *.osano.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.feedaty.com *.zopim.com data: static.criteo.net *.fontawesome.com https://fonts.bunny.net https://cdnjs.cloudflare.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com  *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors https://api.clerk.io https://cdn.clerk.io *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.feedaty.com *.criteo.com *.criteo.net *.hotjar.com capig.kvstore.it *.weltpixel.com  c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://cdn.clerk.io *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.feedaty.com placehold.co *.google.com *.google.it *.zopim.com *.clerk.io *.advertising.com *.doubleclick.net *.openx.net *.rubiconproject.com *.yahoo.com *.smaato.net *.yieldmo.com *.tapad.com *.addthis.com *.outbrain.com *.criteo.com *.criteo.net *.adnxs.com *.adtpd.com *.tpmn.co.kr *.socdm.com *.adingo.jp *.revcontent.com *.kargo.com *.3lift.com *.media.net *.rlcdn.com *.turn.com *.smartadserver.com *.mediawallahscript.com *.360yield.com *.pubmatic.com *.casalemedia.com *.taboola.com *.adform.net *.teads.tv *.bidswitch.net *.dable.io *.sharethrough.com *.liadm.com *.postrelease.com *.mgid.com *.nate.com *.yandex.ru *.rambler.ru *.meba.kr *.admixer.co.kr id5-sync.com *.mail.ru *.adscale.de *.aralego.com *.tremorhub.com *.omnitagjs.com trusted.ro *.kvstore.it *.googletagmanager.com *.hotjar.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.reddit.com *.google-analytics.com *.cdninstagram.com *.fbcdn.net maps.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://api.clerk.io https://cdn.clerk.io https://custom.clerk.io *.facebook.net connect.facebook.net graph.facebook.com business.facebook.com *.feedaty.com *.zoorate.com *.iubenda.com *.soisy.it *.criteo.com static.criteo.net *.doubleclick.net *.hotjar.com *.zopim.com *.zdassets.com *.clerk.io partner-events.favicdn.net *.gstatic.com cdnjs.cloudflare.com capig.kvstore.it *.avada.io *.shopify.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://www.googletagmanager.com tagmanager.google.com ajax.googleapis.com *.googletagmanager.com *.googleadservices.com *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.instagram.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://api.clerk.io https://cdn.clerk.io *.feedaty.com cdnjs.cloudflare.com *.fontawesome.com https://fonts.bunny.net https://fonts.googleapis.com https://cdnjs.cloudflare.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com tagmanager.google.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.criteo.net *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.feedaty.com *.soisy.it *.google-analytics.com *.hotjar.com *.hotjar.io/ *.zdassets.com *.zopim.com *.iubenda.com *.doubleclick.net *.criteo.com *.criteo.net wss://*.zopim.com/ wss://*.hotjar.com/ partner-events.favicdn.net partner-events.favi.sk partner-events.favi.cz partner-events.favi.ro *.googlesyndication.com *.zendesk.com cdnjs.cloudflare.com *.google.it capig.kvstore.it https://get.geojs.io *.avada.io  api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://www.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app *.instagram.com *.googleusercontent.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' data: 'unsafe-inline' c.bongo4u.com; script-src 'self' data: 'unsafe-inline' c.bongo4u.com blob: 'unsafe-eval' bongo4u.com *.bongo4u.com *.emerge2.com *.google.com *.gstatic.com *.google-analytics.com *.googleapis.com *.googleusercontent.com *.googleadservices.com *.googletagmanager.com *.facebook.net *.twitter.com *.twimg.com *.youtube.com youtu.be *.ytimg.com *.yahooapis.com *.mailchimp.com *.list-manage.com chimpstatic.com *.ipify.org jsonip.com *.amazonaws.com/downloads.mailchimp.com/ *.jquery.com *.hotjar.com acsbapp.com *.bootstrapcdn.com googleads.g.doubleclick.net *.elfsight.com *.createsend1.com *.roomvo.com; connect-src 'self' data: 'unsafe-inline' c.bongo4u.com comments.emerge2.com util.emerge2.com bongo4u.com *.emerge2.com *.google-analytics.com *.googletagmanager.com *.google.com *.google.ca *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.doubleclick.net *.facebook.com *.hotjar.io *.hotjar.com acsbapp.com *.acsbapp.com *.elfsight.com createsend.com *.ipify.org *.mailchimp.com *.catalog-display.com *.roomvo.com *.opencagedata.com *.googleusercontent.com; frame-src 'self' data: 'unsafe-inline' c.bongo4u.com bongo4u.com *.google.com *.google.ca *.googleapis.com *.googletagmanager.com *.youtube.com *.youtu.be *.facebook.com *.twitter.com *.twimg.com *.instagram.com *.yahoo.com *.catalog-display.com *.shortstack.com *.pgtb.me *.formstack.com *.list-manage.com *.doubleclick.net *.orgill.com *.orgill.ca *.adobe.com *.hotjar.com *.storefrontcloud.io *.roomvo.com *.loom.com; object-src 'self' data: 'unsafe-inline' c.bongo4u.com  blob: *.apple.com *.macromedia.com; img-src 'self' https: data: blob: c.bongo4u.com *.bongo4u.com *.ytimg.com *.orgill.com android-webview-video-poster; media-src 'self' https: data: c.bongo4u.com; style-src 'self' data: 'unsafe-inline' c.bongo4u.com bongo4u.com *.bongo4u.com *.googletagmanager.com *.google.com *.google-analytics.com *.googleapis.com *.googleusercontent.com *.bootstrapcdn.com *.twitter.com *.twimg.com *.mailchimp.com *.cloudflare.com/ajax/libs/; font-src 'self' data: 'unsafe-inline' c.bongo4u.com *.googleapis.com fonts.gstatic.com *.bootstrapcdn.com fonts.cdnfonts.com *.googleusercontent.com *.cloudflare.com/ajax/libs/ *.hotjar.com *.acsbapp.com;  report-uri https://util.emerge2.com/csp_violations_tracker.php; 1
default-src 'self'; report-uri https://pyp4saltn2.execute-api.us-east-1.amazonaws.com/prod/csp-reports 1
font-src applepay.cdn-apple.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com api.payplug.com secure.payplug.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'unsafe-inline' data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io cdn.doofinder.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.doofinder.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com api.payplug.com applepay.cdn-apple.com https://cdn.payplug.com/js/integrated-payment/ *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.doofinder.com unsafe-inline *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.doofinder.com wss://*.doofinder.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com t.elasticsuite.io *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src https://*.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com *.klaviyo.com *.typekit.net fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.adyen.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://tr.snapchat.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.adyen.com *.instagram.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.zenaps.com *.fls.doubleclick.net account.fetchify.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://widget.trustpilot.com https://tr.snapchat.com https://ad4mat.net https://ad4m.at https://s7.addthis.com *.google.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.google.com *.googletagmanager.com *.doubleclick.net *.redintelligence.net *.trustpilot.com *.googlesyndication.com *.dwin1.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.adyen.com https://*.gstatic.com *.cdninstagram.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.awin1.com *.zenaps.com *.wepowerconnections.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com magefan.com cm.magefan.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://scontent.cdninstagram.com https://tr.outbrain.com https://bat.bing.com https://x.klarnacdn.net https://www.zenaps.com https://www.awin1.com https://lh4.googleusercontent.com https://r.adserver01.de https://secure.adnxs.com https://adservice.google.co.uk https://ads.creative-serving.com https://aa.agkn.com https://adadvisor.net https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.com.ai https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.ms https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.vg https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat *.disqus.com https://firebasestorage.googleapis.com https://www.magezon.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com flagpedia.net blob: *.google.com *.google.co.uk *.gstatic.com *.googlesyndication.com *.bing.com *.bing.net *.cloudflare.com *.cloudfront.net *.roeye.com *.freshchat.com *.clarity.ms *.wisepops.com wisepops.net *.soreto.com *.tiktok.com *.squeezely.tech *.doubleclick.net ts.tradetracker.net www.magmodules.eu *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.adyen.com polyfill.io *.instagram.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com cc-cdn.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://amplify.outbrain.com https://tr.outbrain.com https://static.zdassets.com https://widget.trustpilot.com https://bat.bing.com https://www.dwin1.com https://sc-static.net https://ad4m.at https://z.moatads.com https://s7.addthis.com https://v1.addthisedge.com https://m.addthis.com https://bam.eu01.nr-data.net *.disqus.com *.avada.io *.shopify.com *.google.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.gstatic.com maps.googleapis.com google.com *.google.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.bing.com *.bing.net *.tiktok.com *.taboola.com *.seersco.com *.soreto.com *.clarity.ms *.wisepops.com wisepops.net *.withcubed.com *.roeyecdn.com *.klaviyo.com *.trustpilot.com *.visualwebsiteoptimizer.com fw-cdn.com cdn-sitegainer.com *.ip-api.com *.cloudflare.com *.cloudfront.net *.adobedtm.com *.cardinalcommerce.com *.ccdc02.com *.braintreegateway.com *.ytimg.com *.googleapis.com *.vimeo.com *.freshchat.com *.hotjar.com *.varify.io *.pinimg.com *.tag4arm.com *.squeezely.tech squeezely.tech *.getflowbox.com *.pinterest.com *.feedbackcompany.com *.123jaloezie.nl tm.tradetracker.net tagmanager.google.com https://app.varify.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://fonts.googleapis.com/ cc-cdn.com unsafe-inline assets.braintreegateway.com https://static.klaviyo.com https://fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com data: *.googleapis.com *.googlesyndication.com *.typekit.net *.seersco.com *.klaviyo.com *.freshchat.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com https://static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adyen.com *.algolia.net *.algolia.com *.algolianet.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.wepowerconnections.com https://the.sciencebehindecommerce.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.zopim.com wss://widget-mediator.zopim.com https://makemyblinds.zendesk.com https://ekr.zdassets.com https://telemetrics.klaviyo.com https://bat.bing.com https://m.addthis.com https://ipinfo.io/json https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.gstatic.com maps.googleapis.com *.googlesyndication.com *.doubleclick.net *.bing.com *.bing.net *.taboola.com *.tiktok.com *.tiktokw.us *.seersco.com *.soreto.com *.clarity.ms *.wisepops.com wisepops.net *.awinblackfriday.com *.freshchat.com *.amazonaws.com *.googletagmanager.com *.dwin1.com *.trustpilot.com *.varify.io *.tag4arm.com *.pinterest.com *.hotjar.io *.hotjar.com *.squeezely.tech squeezely.tech *.workers.dev *.feedbackcompany.com *.123jaloezie.nl *.google-analytics.com *.analytics.google.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src https://js.playground.klarna.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' *.clarity.ms *.bing.com; connect-src 'self' *.katalogmarzen.pl *.bing.com *.clarity.ms *.cookiebot.com *.doubleclick.net *.getresponse.com *.google-analytics.com *.google.com *.google.pl *.googletagmanager.com *.googlesyndication.com *.googleadservices.com *.stape.tech *.tiktok.com *.tiktokw.us *.hotjar.com wss://ws.hotjar.com *.facebook.com https://katalogmarzen.user.com wss://katalogmarzen.user.com *.posthog.com https://eu.i.posthog.com; frame-src 'self' *.cookiebot.com *.doubleclick.net *.googletagmanager.com *.google.com *.inpost.pl *.youtube.com *.facebook.com *.criteo.com https://gum.criteo.com; img-src 'self' *.katalogmarzen.pl data: *.bing.com *.clarity.ms *.cookiebot.com *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.google.pl *.googletagmanager.com *.googleadservices.com *.youtube.com *.openstreetmap.org *.doubleclick.net https://eu.user.com https://media.user.com https://media.tenor.com https://static.user.com *.criteo.com *.bidswitch.net *.pubmatic.com *.media.net *.casalemedia.com *.id5-sync.com id5-sync.com *.360yield.com *.postrelease.com *.outbrain.com *.smartadserver.com *.taboola.com *.teads.tv *.tremorhub.com *.3lift.com *.yieldlab.net *.1rx.io *.demdex.net *.unrulymedia.com *.agkn.com agkn.com *.dmxleo.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.clarity.ms *.cookiebot.com *.doubleclick.net *.facebook.net *.google-analytics.com *.google.com *.googletagmanager.com *.gr-cdn-e.eu *.gr-cdn.com *.gr-wcon.com *.gstatic.com *.getresponse.com *.hotjar.com *.inpost.pl *.katalogmarzen.pl *.tiktok.com wss://katalogmarzen.user.com https://media.user.com https://katalogmarzen.user.com https://widget.user.com *.posthog.com https://eu-assets.i.posthog.com *.criteo.com https://dynamic.criteo.com https://sslwidget.criteo.com; style-src 'self' 'unsafe-inline' *.bootstrapcdn.com *.googleapis.com *.inpost.pl; font-src 'self' data: *.gstatic.com; media-src 'self' https://eu.user.com *.katalogmarzen.pl; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://www.googletagmanager.com *.googleapis.com maxcdn.bootstrapcdn.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://images.unsplash.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://maps.googleapis.com https://player.vimeo.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com maps.googleapis.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com places.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://woven.blob.core.windows.net https://wovenversioned.blob.core.windows.net https://wovendevversioned.blob.core.windows.net https://content.woven.team https://kit.fontawesome.com https://ka-p.fontawesome.com https://ka-f.fontawesome.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.weglot.com https://cdn.lgrckt-in.com https://vault.pactsafe.io https://www.googletagmanager.com https://woven.featureos.app https://widgets-v3.featureos.app; style-src 'self' 'unsafe-inline' https://woven.blob.core.windows.net https://wovenversioned.blob.core.windows.net https://wovendevversioned.blob.core.windows.net https://content.woven.team https://kit.fontawesome.com https://ka-p.fontawesome.com https://ka-f.fontawesome.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; font-src 'self' data: https://woven.blob.core.windows.net https://wovenversioned.blob.core.windows.net https://wovendevversioned.blob.core.windows.net https://content.woven.team https://kit.fontawesome.com https://ka-p.fontawesome.com https://ka-f.fontawesome.com https://fonts.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: blob: https:; connect-src 'self' https://woven.blob.core.windows.net https://wovenversioned.blob.core.windows.net https://wovendevversioned.blob.core.windows.net https://content.woven.team https://kit.fontawesome.com https://ka-p.fontawesome.com https://ka-f.fontawesome.com https://function.woven.team https://function-dev.woven.team https://*.service.signalr.net wss://*.service.signalr.net https://*.in.applicationinsights.azure.com https://dc.services.visualstudio.com https://fcm.googleapis.com https://api.weglot.com https://r.lgrckt-in.com https://woven.featureos.app https://vault.pactsafe.io; frame-src 'self' https://woven.featureos.app https://widgets-v3.featureos.app https://wovenbrands.zendesk.com https://help.woven.team https://www.figma.com https://www.google.com https://universalbackground.com https://www.hrotoday.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; report-uri /csp-report 1
font-src cdn.jsdelivr.net fonts.gstatic.com cdn.almapay.com https://fonts.gstatic.com https://ws.colissimo.fr *.fontawesome.com maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com *.yotpo.com *.googleapis.com *.gstatic.com *.typekit.net dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.ogone.com *.ingenico.com *.v-psp.com *.epdq.co.uk *.postfinance.ch *.paypage.be *.payengine.de *.eupayglobe.com *.tpvecommerce.es *.yotpo.com test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.getalma.eu *.almapay.com/ *.stripe.com/ *.checkout.com/ *.adyen.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.ogone.com *.ingenico.com *.v-psp.com *.epdq.co.uk *.postfinance.ch *.paypage.be *.payengine.de *.eupayglobe.com *.tpvecommerce.es *.yotpo.com test.saferpay.com www.saferpay.com saferpay.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com *.trustpilot.com https://app.trustt.io 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com https://maps.gstatic.com https://ws.colissimo.fr https://*.tile.openstreetmap.fr maps.googleapis.com maps.gstatic.com *.yotpo.com test.saferpay.com www.saferpay.com saferpay.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com https://app.trustt.io dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.jsdelivr.net jquery.sellxed.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://ws.colissimo.fr https://api.mapbox.com *.avada.io maps.googleapis.com www.gstatic.com www.google.com https://cdnjs.cloudflare.com *.yotpo.com test.saferpay.com www.saferpay.com saferpay.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com *.trustpilot.com https://app.trustt.io dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.jsdelivr.net fonts.googleapis.com https://fonts.googleapis.com https://ws.colissimo.fr https://api.mapbox.com *.fontawesome.com maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com *.yotpo.com *.googleapis.com *.typekit.net *.trustpilot.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://app.trustt.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.getalma.eu *.almapay.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.ogone.com *.ingenico.com *.v-psp.com *.epdq.co.uk *.postfinance.ch *.paypage.be *.payengine.de *.eupayglobe.com *.tpvecommerce.es https://nominatim.openstreetmap.org https://get.geojs.io *.avada.io maps.googleapis.com *.yotpo.com test.saferpay.com www.saferpay.com saferpay.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com ws: * dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://cdn.tivly.com https://*.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com https://fraudguard.tivly.com https://www.googletagmanager.com https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://analytics.google.com https://region1.analytics.google.com https://bat.bing.com https://create.leadid.com https://deviceid.trueleadid.com https://create.lidstatic.com https://js.zi-scripts.com https://ws.zoominfo.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://us.app.unleash-hosted.com https://*.cloudfront.net https://d2ydlkypr5z8li.cloudfront.net https://solutions.invocacdn.com https://maps.googleapis.com https://bzrcdn.openai.com https://connect.facebook.net https://www.nextinsure.com https://*.atlassian.net https://js-agent.newrelic.com https://www.gstatic.com https://cdnjs.cloudflare.com https://app.jazz.co https://sdk.privacy-center.org; connect-src 'self' https://*.optimizely.com wss://*.optimizely.com https://fraudguard.tivly.com https://us.app.unleash-hosted.com https://js.zi-scripts.com https://ws.zoominfo.com https://analytics.google.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://create.leadid.com https://info.leadid.com https://bam.nr-data.net https://bat.bing.com https://bat.bing.net https://*.twilio.com wss://*.twilio.com https://www.google.com https://bzrcdn.openai.com https://bzr.openai.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://*.cloudfront.net  https://www.google-analytics.com https://pnapi.invoca.net https://*.invoca.net https://www.nextinsure.com https://maps.googleapis.com https://google.com https://d2ydlkypr5z8li.cloudfront.net https://api.privacy-center.org; font-src 'self' data: https://*.optimizely.com https://fonts.gstatic.com https://fonts.googleapis.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://*.optimizely.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.honey.io https://www.gstatic.com; img-src 'self' data: blob: https://app.optimizely.com https://cdn.optimizely.com https://*.tivly.com https://*.cloudfront.net https://d2ydlkypr5z8li.cloudfront.net https://bzr.openai.com https://*.thehartford.com https://bat.bing.com https://bat.bing.net https://googleads.g.doubleclick.net https://www.google.com https://www.google.ca https://www.google.co.uk https://www.google.de https://www.google.it https://www.google.ie https://www.google.mx https://www.google.com.pr https://www.google.com.bd https://www.google.com.ph https://www.google.com.pk https://www.google.nl https://www.google.hn https://www.google.co.in https://www.google.co.jp https://www.google.gr https://www.googleadservices.com https://maps.googleapis.com https://maps.gstatic.com https://cdn.nextinsure.com https://create.leadid.com https://cdn.honey.io https://translate.google.com https://fonts.gstatic.com https://www.googletagmanager.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://www.facebook.com https://sdk.privacy-center.org; frame-src 'self' https://*.optimizely.com https://deviceid.trueleadid.com https://*.cloudfront.net https://www.googletagmanager.com https://create.leadid.com https://info.leadid.com https://recruiting.paylocity.com https://www.google.com https://public.domo.com; form-action 'self' https://create.leadid.com https://info.leadid.com https://tivly.com https://www.tivly.com https://tivly.okta.com https://commercialinsurance.okta.com https://www.nextinsure.com https://public.domo.com; object-src 'none'; frame-ancestors 'self'; base-uri 'self'; report-uri https://fwfuik6zl2.execute-api.us-east-2.amazonaws.com/default/csp-report-collector 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.jquery.com https://unpkg.com https://pagead2.googlesyndication.com https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: https: blob:; connect-src 'self' https://www.google-analytics.com; frame-src https://googleads.g.doubleclick.net https://www.google.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.cloudflare.com fonts.googleapis.com *.bootstrapcdn.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.criteo.com *.criteo.net *.hotjar.com *.google.co.in *.github.io c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * landofcoder.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cloudflare.com https://cdn.klarna.com https://s.ytimg.com *.google.com *.google.co.in magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.cloudflare.com *.google-analytics.com *.google.co.in *.googletagmanager.com *.gstatic.com *.hotjar.com *.criteo.com *.criteo.net *.github.io *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com landofcoder.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com fast.fonts.net *.bootstrapcdn.com *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googletagmanager.com *.cloudflare.com *.doubleclick.net *.hotjar.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com landofcoder.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://www.clarity.ms https://scripts.clarity.ms https://app.termly.io https://fonts.googleapis.com https://www.ideal-investisseur.fr https://cdn.jsdelivr.net https://cdn.brevo.com https://cdn.by.wonderpush.com https://sibforms.com https://sibautomation.com https://code.jquery.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.typekit.net; img-src 'self' https: data:; font-src 'self' https://fonts.gstatic.com https://use.typekit.net https://p.typekit.net; frame-src https://www.google.com https://app.termly.io https://*.sibforms.com; connect-src 'self' https:; report-uri /csp-report.php 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.trackedlink.net https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com magefan.com cm.magefan.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page https://maps.googleapis.com https://player.vimeo.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com pay.google.com applepay.cdn-apple.com 'unsafe-eval' js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com webchat.dotdigital.com webchat.staging.dotdigital.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https:;   connect-src https: ws://10.1.13.34;  script-src 'self' 'unsafe-inline' 'unsafe-eval' https:;   font-src https: 'self' data:;   img-src 'self' data: https: https://zradio.org;   style-src 'self' https: 'unsafe-inline';   object-src 'none';   frame-src 'self' blob:;   report-uri https://csp.zradio.org/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' https: 'report-sample'; script-src-elem 'self' 'unsafe-inline' https: 'report-sample'; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data:; font-src 'self' https: data:; connect-src 'self' https:; frame-src 'self' https:; media-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self' https://www.officebusters.com https://www.officebusters.co.jp; block-all-mixed-content; report-uri https://csp-report-receiver.azurewebsites.net/api/report?v=0.51; 1
script-src 'self' 'nonce-c61rJE+bEVzaPyPGbvpYlKo+LlDobSC7lSm1b4PCPig=' 'strict-dynamic' 'wasm-unsafe-eval' www.youtube.com  az416426.vo.msecnd.net cdn.cookielaw.org www.google-analytics.com maps.googleapis.com www.googletagmanager.com  dl.episerver.net www.youtube.com www.google.com www.gstatic.com snap.licdn.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.com.ai https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.ms https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.vg https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat  https://connect.facebook.net/ https://munchkin.marketo.net/ static.hotjar.com script.hotjar.com https://cdn.jsdelivr.net/ https://cdn.cookielaw.org/;object-src 'none';base-uri 'self';report-uri https://o4507537122852864.ingest.de.sentry.io/api/4507764299726928/security/?sentry_key=2e67b3fa9c193f38db8ea33933d09ffa&sentry_environment=production&sentry_release=sprint24; 1
object-src 'none';base-uri 'self';script-src 'nonce-P70PxCoqbAm3tH_5X_IFeg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none'; connect-src 'self' *.analytics.google.com *.google-analytics.com *.googletagmanager.com analytics.google.com cdn.transcend.io google-analytics.com googletagmanager.com gtm.mozilla.org https://abdri3ttkb.execute-api.us-east-2.amazonaws.com https://accounts.firefox.com/ https://basket.mozilla.org o1069899.ingest.sentry.io o1069899.sentry.io region1.google-analytics.com telemetry.transcend.io telemetry.us.transcend.io transcend-cdn.com www.mozilla.org/submit/bedrock/; img-src 'self' blog.mozilla.org data: images.ctfassets.net www.google-analytics.com www.googletagmanager.com www.mozilla.org; style-src 'self' 'unsafe-inline' cdn.transcend.io transcend-cdn.com www.mozilla.org; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.google-analytics.com *.googletagmanager.com cdn.transcend.io google-analytics.com googletagmanager.com js.stripe.com s.ytimg.com tagmanager.google.com transcend-cdn.com www.mozilla.org www.youtube.com; form-action 'self' https://abdri3ttkb.execute-api.us-east-2.amazonaws.com https://accounts.firefox.com/ https://basket.mozilla.org; default-src 'self' *.mozilla.org; media-src 'self' assets.mozilla.net videos.cdn.mozilla.net www.mozilla.org; base-uri 'none'; frame-ancestors 'none'; frame-src 'self' accounts.firefox.com gtm.mozilla.org js.stripe.com www.google-analytics.com www.googletagmanager.com www.youtube.com; upgrade-insecure-requests; font-src 'self' www.mozilla.org 1
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/brotli 1
object-src 'none';base-uri 'self';script-src 'nonce-tdrbzZdqv7ugB_0i1Hy61Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'self' 'unsafe-inline' https://connect.facebook.net https://www.facebook.com https://capi-automation.s3.us-east-2.amazonaws.com https://bat.bing.com https://googleads.g.doubleclick.net https://www.google.com https://www.googleadservices.com https://www.gstatic.com https://*.zjptg.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com 1
default-src 'self';         script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com connect.facebook.net chimpstatic.com platform.twitter.com *.twitter.com apis.google.com *.google.com cdn.jsdelivr.net;         style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.jsdelivr.net;         font-src 'self' fonts.gstatic.com;         img-src 'self' data: https:;         connect-src 'self' *.google-analytics.com *.analytics.google.com *.google.com *.googletagmanager.com *.googlesyndication.com *.doubleclick.net *.googleadservices.com connect.facebook.net www.facebook.com;         frame-src 'self' *.systempay.fr *.google.com *.doubleclick.net *.facebook.com platform.twitter.com *.youtube.com;         form-action 'self' *.systempay.fr 1
object-src 'none';base-uri 'self';script-src 'nonce-CE-QrinEsj2G3g4qI2wHkA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src https: 'unsafe-inline' 1
default-src 'self' https: 'unsafe-inline'; font-src 'self' https: data: moz-extension ms-browser-extension; img-src 'self' http: data: s3.amazonaws.com; object-src 'none'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com/ajax/libs/axe-core https://www.google.com/recaptcha/api.js https://ssl.google-analytics.com/ga.js https://js-agent.newrelic.com; script-src-elem 'self' https: 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com/ajax/libs/axe-core https://www.google.com/recaptcha/api.js https://ssl.google-analytics.com/ga.js https://js-agent.newrelic.com; style-src 'self' https: 'unsafe-inline'; frame-src 'self' https:; media-src 'self' data:; worker-src 'self' blob:; connect-src 'self' https://*.clarity.ms/collect https://bam.nr-data.net wss://127.0.0.1:* wss://localhost:* https://rum.browser-intake-us5-datadoghq.com; report-uri /csp_violations/report 1
default-src 'self'; img-src 'self' data: http: https: *.gravatar.com; script-src 'self' https://statistics.region-stuttgart.de/ 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; connect-src 'self' https://statistics.region-stuttgart.de/; frame-src 'self' https://www.youtube-nocookie.com/; report-uri https://csp-log.d-mind.de/report.php; 1
default-src * 'unsafe-inline' 'unsafe-eval'; img-src * data: blob: 'unsafe-inline' 1
object-src 'none'; script-src 'self' 'report-sample' addtocalendar.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://static.addtoany.com https://storage.googleapis.com https://unpkg.com https://www.google.com; style-src 'self' 'report-sample' addtocalendar.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
base-uri 'self'; form-action 'self'; default-src 'self'; connect-src 'self' data: https://stats.nederhost.nl/ https://zammad.nederhost.nl/ wss://zammad.nederhost.nl/; frame-ancestors 'none'; frame-src 'self'; img-src 'self' data:; report-to csp-endpoint; report-uri /_/report_csp_violation; script-src 'self' 'nonce-gLxoTdCZztyCM5hb' 'unsafe-eval' https://stats.nederhost.nl/ https://cdn.matomo.cloud/stats.nederhost.nl/ https://zammad.nederhost.nl/; style-src 'self' data: 'nonce-gLxoTdCZztyCM5hb' https://zammad.nederhost.nl/; style-src-attr 'unsafe-inline'; 1
base-uri 'self'; connect-src 'self' https://accesswidget-log-receiver.acsbapp.com https://acsbapp.com https://ad.doubleclick.net https://analytics.google.com https://cdn.acsbapp.com https://csi.gstatic.com https://datalake.ascent360.com https://ep1.adtrafficquality.google https://pagead2.googlesyndication.com https://region1.analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://to.getnitropack.com https://www.google-analytics.com https://www.google.ca https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com; default-src 'self' https://estore.soldiermountain.com; font-src 'self' data: https://cdn-ileoild.nitrocdn.com https://fonts.gstatic.com; form-action 'self'; frame-ancestors 'self'; frame-src 'self' https://challenges.cloudflare.com https://ep2.adtrafficquality.google https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.google.com https://www.googletagmanager.com https://www.youtube.com; img-src 'self' data: https://a.tile.openstreetmap.org https://b.tile.openstreetmap.org https://c.tile.openstreetmap.org https://cdn-ileoild.nitrocdn.com https://ep1.adtrafficquality.google https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://s.w.org https://scontent-sea1-1.cdninstagram.com https://scontent-sea5-1.cdninstagram.com https://secure.gravatar.com https://source.unsplash.com https://www.google-analytics.com https://www.google.ca https://www.google.co.in https://www.google.co.jp https://www.google.com https://www.google.com.pe https://www.google.com.pk https://www.google.de https://www.googletagmanager.com; object-src 'none'; report-uri https://dashboard.whitewhaleweb.com/csp-report/274bfe522012b1b4/; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://acsbapp.com https://cdn-ileoild.nitrocdn.com https://challenges.cloudflare.com https://ep2.adtrafficquality.google https://files.ascent360.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://cdn-ileoild.nitrocdn.com https://fonts.googleapis.com; worker-src 'self' blob: 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.fontawesome.com https://fonts.bunny.net *.bootstrapcdn.com *.cloudflare.com *.googleusercontent.com *.jsdelivr.net *.slant.co unpkg.com data: 'self' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.2c2p.com *.americanexpress.com *.arcot.com *.cardinalcommerce.com *.citibank.com *.ctbcbank.com *.dnp-cdms.jp *.inicis.com *.ipay88.com.my *.unionpay.com *.uobgroup.com 'self' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.weltpixel.com *.americanexpress.com *.arcot.com *.cardinalcommerce.com *.citibank.com *.ctbcbank.com *.dnp-cdms.jp *.inicis.com *.unionpay.com *.uobgroup.com 'self' 'unsafe-eval' 'unsafe-hashes'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com k.kakaocdn.net https://firebasestorage.googleapis.com *.inicis.com *.afterpay.com *.doubleclick.net *.elcompanies.com www.google.ad www.google.at www.google.co.id www.google.co.in www.google.co.jp www.google.co.kr www.google.com.au www.google.com.bd www.google.com.co www.google.com.hk www.google.com.mt www.google.com.my www.google.com.ph www.google.com.sg www.google.com.tw www.google.com.vn www.google.co.th www.google.co.uk www.google.co.za www.google.de www.google.dk www.google.es www.google.fr www.google.ie www.google.it www.google.nl www.google.se *.google.com *.googletagmanager.com *.googleusercontent.com *.hstatic.net *.naver.com *.thecompanystore.com.sg data: 'self' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://api.addressfinder.io *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.googleapis.com *.gstatic.com developers.kakao.com *.kakaocdn.net *.avada.io *.shopify.com *.inicis.com *.facebook.net *.google-analytics.com *.googletagmanager.com 'self' 'unsafe-eval' 'unsafe-hashes' 'nonce-MzluMjltanhyOTRrdWFjYXRta3l5dnY5eGhvNmF0OTg=' 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY/CkTMBhjNhwPvglpYumjx31B4fjkY8=' 'sha256-XGfPSYcBWPq7sx/ucAvvEcAKkiSRS2GeZReWO0f5vXQ='; style-src *.adobe.com fonts.googleapis.com https://api.addressfinder.io *.cash.app *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.fontawesome.com https://fonts.bunny.net *.inicis.com *.googleapis.com *.gstatic.com *.jsdelivr.net 'self' 'unsafe-eval' 'unsafe-hashes'; object-src 'self'; media-src *.adobe.com *.gstatic.com 'self' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://api.addressfinder.io * *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com *.googleapis.com kauth.kakao.com https://get.geojs.io *.avada.io *.inicis.com *.doubleclick.net www.google.ad www.google.at www.google.co.id www.google.co.in www.google.co.jp www.google.co.kr www.google.com.au www.google.com.bd www.google.com.hk www.google.com.mt www.google.com.my www.google.com.ph www.google.com.sg www.google.com.tw www.google.com.vn www.google.co.th www.google.co.za www.google.de www.google.dk www.google.es www.google.fr www.google.ie www.google.it www.google.nl *.googletagmanager.com 'self' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self'; default-src 'self'; base-uri 'self'; report-uri https://32b97dac-2dc9-426f-bbe7-fbeb1b35a245.sansec.watch/; report-to report-endpoint; 1
default-src 'self' https://ssa.datafactory.la; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com www.google-analytics.com static.cloudflareinsights.com ssa.datafactory.la; connect-src 'self' www.google-analytics.com www.googletagmanager.com 1287719000.rsc.cdn77.org; img-src 'self' data: locademia.racingclub.com.ar 1287719000.rsc.cdn77.org; style-src 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com; frame-src 'self'; object-src 'none' 1
base-uri 'self';form-action 'self' https://www.facebook.com;object-src 'none';child-src blob:;connect-src 'self' d2xg8ju40huerl.cloudfront.net cdnmain.guidefitter.com guidefitterconfidential.s3.amazonaws.com s3.amazonaws.com/upload.guidefitter.com/ game.guidefitter.com osc-collector.xyz.guidefitter.com https://*.facebook.com https://*.zendesk.com https://*.zdassets.com wss://*.zopim.com https://*.zopim.com https://*.authorize.net https://*.bing.com https://*.bing.net https://vimeo.com https://*.vimeo.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://www.google.com https://*.doubleclick.net https://us-street.api.smartystreets.com https://*.klaviyo.com https://*.mapbox.com https://lending-api.credova.com https://api.ipify.org https://*.token.awswaf.com https://*.captcha.awswaf.com https://*.masterffl.com https://maps.googleapis.com https://*.googleadservices.com https://api.publicsquare.com guidefitterconfidential.s3.us-east-1.amazonaws.com s3.us-east-1.amazonaws.com/upload.guidefitter.com/;default-src 'self' d2xg8ju40huerl.cloudfront.net cdnmain.guidefitter.com cdnmedia.guidefitter.com;font-src 'self' https://*.typekit.net https://fonts.gstatic.com data:;frame-src 'self' https://*.facebook.com https://*.facebook.net https://*.vimeo.com https://*.googletagmanager.com https://*.google-analytics.com https://*.doubleclick.net https://*.youtube.com https://widget-prime.rafflecopter.com https://challenges.cloudflare.com https://publicsquarepay-iframe.private.fin.ag https://portal.publicsquare.com;img-src 'self' https: data: blob:;media-src 'self' https:;script-src 'self' d2xg8ju40huerl.cloudfront.net cdnmain.guidefitter.com game.guidefitter.com https://*.zdassets.com https://*.zopim.com https://*.authorize.net https://*.bing.com https://*.bing.net https://*.cdn-apple.com https://*.facebook.net https://*.vimeo.com https://www.google.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://*.googleadservices.com https://maps.googleapis.com https://*.klaviyo.com 'unsafe-inline' 'unsafe-eval' blob: https://*.mapbox.com https://*.consensu.org https://*.rafflecopter.com https://*.captcha-sdk.awswaf.com https://*.captcha.awswaf.com https://*.token.awswaf.com https://*.masterffl.com https://challenges.cloudflare.com;style-src 'self' https://*.typekit.net d2xg8ju40huerl.cloudfront.net cdnmain.guidefitter.com 'unsafe-inline';report-to default;report-uri https://guidefitter.report-uri.com/r/d/csp/reportOnly 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; img-src 'self' https: data:; font-src 'self' https: data:; style-src 'self' 'unsafe-inline' https:; script-src 'self' https: 'unsafe-inline'; connect-src 'self' https:; upgrade-insecure-requests 1
font-src fonts.gstatic.com use.typekit.net *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://shopline.itau.com.br *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://www.magezon.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com maps.gstatic.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.pagar.me *.avada.io *.shopify.com *.google.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.fontawesome.com https://fonts.bunny.net unsafe-inline assets.braintreegateway.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.pagar.me https://viacep.com.br https://www.viacep.com.br https://get.geojs.io *.avada.io http://api.itaushopline.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net script.hotjar.com *.gstatic.com *.livechatinc.com use.fontawesome.com maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com www.facebook.com 'self' connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com esqa.moneris.com www3.moneris.com *.sharethis.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com *.livechatinc.com *.hotjar.com *.doubleclick.net *.moneris.io *.pinterest.com vgdelivery.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net maps.googleapis.com magefan.com cm.magefan.com *.sharethis.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com 'self' blob: bat.bing.com *.bing.net *.analytics.yahoo.com www.facebook.com maps.gstatic.com www.gstatic.com script.hotjar.com *.doubleclick.net *.everythingwine.ca ws1.postescanada-canadapost.ca *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ connect.facebook.net graph.facebook.com business.facebook.com flagpedia.net *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net esqa.moneris.com www3.moneris.com maps.googleapis.com developers.google.com https://rum.hlx.page *.sharethis.com www.apptrian.com pinterest.com www.pinterest.com s.pinimg.com null *.livechatinc.com *.hotjar.com script.crazyegg.com www.facebook.com *.yimg.com cdn.livesession.io *.doubleclick.net *.bing.com *.clarity.ms cdn.livechatinc.com ws1.postescanada-canadapost.ca unpkg.com *.gorgias.chat *.dyn-rev.app *.pinimg.com *.pinterest.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ connect.facebook.net graph.facebook.com business.facebook.com *.gstatic.com *.hsforms.net *.hsforms.com *.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com ws1.postescanada-canadapost.ca *.googleapis.com *.gstatic.com use.fontawesome.com https://static.klaviyo.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.sharethis.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com *.yimg.com script.crazyegg.com *.clarity.ms *.livesession.io google.com www.google.com pay.google.com *.analytics.google.com maps.googleapis.com *.hotjar.io *.hotjar.com wss://ws.hotjar.com *.livechatinc.com *.everythingwine.ca *.doubleclick.net unpkg.com *.gorgias.chat gorgias.win gorgias-convert.com *.dyn-rev.app *.pinterest.com *.bing.com *.bing.net ws1.postescanada-canadapost.ca https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.gstatic.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.yotpo.com *.googleapis.com *.livechatinc.com *.acsbap.com *.acsbapp.com https://acsbapp.com/apps/app/dist/fonts/ *.stripecdn.com *.link.com *.amazon.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com www.facebook.com www.googletagmanager.com www.google-analytics.com *.icims.eu www.youtube.com cookiepedia.co.uk www.linkedin.com www.google.co.uk www.instagram.com onlinelibrary.wiley.com www.alzheimer-europe.org *.livechatinc.com *.trustpilot.com *.trustpilot.net *.apetito.integration-5ojmyuq-lhjhdamkykkd6.eu-3.magentosite.cloud *.wiltshirefarmfoods.com https://seo.mageplaza.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com vars.hotjar.com www.facebook.com www.linkedin.com www.google.co.uk www.instagram.com onlinelibrary.wiley.com www.alzheimer-europe.org *.livechatinc.com *.trustpilot.com *.trustpilot.net *.apetito.integration-5ojmyuq-lhjhdamkykkd6.eu-3.magentosite.cloud *.wiltshirefarmfoods.com td.doubleclick.net pagead2.googlesyndication.com analytics.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com www.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.amplience.net fpdbs.paypal.com fpdbs.sandbox.paypal.com *.yotpo.com p.adsymptotic.com bat.bing.com www.facebook.com cdn-ukwest.onetrust.com *.livechatinc.com cookiesuksouth.blob.core.windows.net www.google.co.in www.google-analytics.com px.ads.linkedin.com cookiepedia.co.uk www.linkedin.com www.google.co.uk www.instagram.com onlinelibrary.wiley.com www.alzheimer-europe.org *.wiltshirefarmfoods.com *.trustpilot.com *.trustpilot.net *.apetito.integration-5ojmyuq-lhjhdamkykkd6.eu-3.magentosite.cloud *.postcodeanywhere.co.uk acsbap.com acsbapp.com *.acsbap.com *.acsbapp.com https://cdn.acsbapp.com/apps/app/dist/media/ cdn.cookielaw.org data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.youtube.com *.vimeo.com secure.authorize.net test.authorize.net www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com *.cardinalcommerce.com geo.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.onetrust.com *.livechatinc.com static.hotjar.com www.gstatic.com *.trackedlink.net *.stripe.com *.trustpilot.com maps.googleapis.com *.pcapredict.com snap.licdn.com connect.facebook.net bat.bing.com secure.leadforensics.com js-agent.newrelic.com script.hotjar.com ict.infinity-tracking.net cookiepedia.co.uk www.linkedin.com www.google.co.uk www.instagram.com onlinelibrary.wiley.com www.alzheimer-europe.org *.trustpilot.net *.bam.nr-data.net *.apetito.integration-5ojmyuq-lhjhdamkykkd6.eu-3.magentosite.cloud *.wiltshirefarmfoods.com *.dwin1.com acsbap.com acsbapp.com *.acsbap.com *.acsbapp.com https://acsbapp.com/apps/app/dist/ https://acsbapp.com/apps/app/assets/js/ td.doubleclick.net pagead2.googlesyndication.com *.conoret.com cdn.cookielaw.org rum.hlx.page *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.postcodeanywhere.co.uk cdn.cookielaw.org *.stripe.network *.stripecdn.com *.amazon.com *.fontawesome.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com *.ideal-postcodes.co.uk *.stripe.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.yotpo.com maps.googleapis.com *.onetrust.com *.livechatinc.com bam.nr-data.net in.hotjar.com ict.infinity-tracking.net stats.g.doubleclick.net bat.bing.com www.youtube.com cookiepedia.co.uk www.linkedin.com www.google.co.uk www.instagram.com onlinelibrary.wiley.com www.alzheimer-europe.org *.trustpilot.com *.trustpilot.net *.apetito.integration-5ojmyuq-lhjhdamkykkd6.eu-3.magentosite.cloud *.wiltshirefarmfoods.com acsbap.com acsbapp.com *.acsbap.com *.acsbapp.com *.wikipedia.org/w/api.php https://process.acsbapp.com/apps/app/ https://cdn.acsbapp.com/resources/ https://cdn.acsbapp.com/cache/app/ https://cdn.acsbapp.com/config/ https://acsbapp.com/apps/app/assets/js/ td.doubleclick.net pagead2.googlesyndication.com analytics.google.com cdn.cookielaw.org klarna.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.nosto.com *.nos.to *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.doubleclick.net *.googletagmanager.com *.g.doubleclick.net *.nosto.com *.nos.to c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.ftcdn.net *.behance.net *.googleadservices.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.doubleclick.net *.gstatic.com cdn.cookielaw.org *.linkedin.com *.google.com *.facebook.com *.postcodeanywhere.co.uk *.googlesyndication.com *.google.co.in bat.bing.com googletagmanager.com google.com *.nosto.com *.nos.to www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.googleadservices.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.gstatic.com cdn.cookielaw.org connect.facebook.net googleapis.com *.pcapredict.com *.postcodeanywhere.co.uk *.cloudfront.net bat.bing.com *.cloudflareinsights.com *.licdn.com *.mouseflow.com googletagmanager.com *.google.com *.googlesyndication.com *.g.doubleclick.net *.nosto.com *.nos.to js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.postcodeanywhere.co.uk googletagmanager.com *.gstatic.com maxcdn.bootstrapcdn.com *.nosto.com *.nos.to assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.analytics.google.com *.google.com api.addressy.com *.braintree-api.com cdn.cookielaw.org *.pcapredict.com *.postcodeanywhere.co.uk *.googlesyndication.com *.onetrust.com *.licdn.com *.linkedin.com *.google.co.in *.nosto.com *.nos.to *.doubleclick.net *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.g.doubleclick.net google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-M1m5G1pzEStoCJlUCjt1Sw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com fonts.googleapis.com newrelic.com www.google.com v2.zopim.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com accounts.google.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com www.apptrian.com facebook.com *.google.com sbcheckout.payfort.com paymentservices.payfort.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com www.apptrian.com facebook.com social-plugins.line.me newrelic.com vault.omise.co www.youtube.com youtu.be cdn.moengage.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com maps.gstatic.com *.visa.com www.apptrian.com facebook.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com gourmetegypt.com maps.googleapis.com www.w3.org newrelic.com s.ytimg.com www.google.co.in api.omise.co omise-gateway-production.s3.ap-southeast-1.amazonaws.com v2.zopim.com via.placeholder.com *.gourmetegypt.com moe-email-campaigns.s3.amazonaws.com image.moengage.com www.moengage.com app-cdn.moengage.com *.gourmetlms.com/ image-eu.moengage.com/ cdn.gourmetegypt.com gourmetegyptcdn.s3.eu-west-1.amazonaws.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.visa.com *.mastercard.com www.apptrian.com facebook.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com omise.co cdn.omise.co maps.googleapis.com d.line-scdn.net js-agent.newrelic.com bam-cell.nr-data.net www.google.com www.gstatic.com newrelic.com www.google.co.in f.vimeocdn.com v2.zopim.com static.zdassets.com bam.nr-data.net cdn.moengage.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com downloads.mailchimp.com newrelic.com www.google.com use.typekit.net p.typekit.net maxcdn.bootstrapcdn.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com www.apptrian.com facebook.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com bam-cell.nr-data.net newrelic.com www.google.com youtube.com googletagmanager.com paypal.com bam.nr-data.net stats.g.doubleclick.net maps.googleapis.com wss://widget-mediator.zopim.com ekr.zdassets.com integration.richrelevance.com http://integration.richrelevance.com sdk-01.moengage.com sdk-02.moengage.com sdk-03.moengage.com gateway.richrelevance.com qa-gateway.richrelevance.com staging-gateway.richrelevance.com recs.richrelevance.com loadtest-eu.richrelevance.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' 'unsafe-eval' 'strict-dynamic' 'nonce-73441696-28ee-45b4-abf0-d54d255b9bf6' http: https: ; object-src 'none' ; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://open.spotify.com https://*.trustpilot.com https://www.facebook.com https://sst.sunlife.co.uk https://a25673930331.cdn.optimizely.com/ https://aax-eu.amazon-adsystem.com/; frame-ancestors 'self' ; base-uri 'self' ;  report-uri https://www.sunlife.co.uk/api/reporting/;  report-to csp-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://eu.i.posthog.com https://eu-assets.i.posthog.com https://eu.posthog.com https://maps.googleapis.com https://www.google.com https://connect.facebook.net https://analytics.tiktok.com https://www.googletagmanager.com https://widget.trustpilot.com https://analytics.ahrefs.com https://bzrcdn.openai.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://*.supabase.co https://*.workers.dev https://dogcare24-images.a-caspar.workers.dev https://*.googleusercontent.com https://*.ggpht.com https://maps.googleapis.com https://maps.gstatic.com https://*.gstatic.com https://*.trustpilot.com https://www.facebook.com https://analytics.tiktok.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://googleads.g.doubleclick.net; font-src 'self' data:; connect-src 'self' https://eu.i.posthog.com https://eu-assets.i.posthog.com https://eu.posthog.com https://*.supabase.co wss://*.supabase.co https://maps.googleapis.com https://*.sentry.io https://*.ingest.sentry.io https://*.ingest.de.sentry.io https://www.facebook.com https://analytics.tiktok.com https://www.google-analytics.com https://www.googletagmanager.com https://region1.google-analytics.com https://td.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com https://analytics.ahrefs.com https://bzr.openai.com; frame-src 'self' https://player.vimeo.com https://www.youtube-nocookie.com https://www.youtube.com https://www.google.com https://*.trustpilot.com; media-src 'self' https://*.supabase.co; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'sha256-kL27s1ysL5JXj79xgOKGkDxkiwL42EGhhdTMkTuDwz4=' 'sha256-72yes55WPKCZdJubjWGRyYrUmFRJJJTAs5+VBz4vJkU=' 'sha256-ms+edL1i0MiOEHyPV9Jndrt6T7Acs5117ATNe5qWsvo=' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://ajax.googleapis.com https://code.jquery.com https://ajax.aspnetcdn.com https://maps.googleapis.com https://doxfy73wugunk.cloudfront.net; style-src 'self' 'unsafe-inline' https://use.typekit.net https://fonts.googleapis.com https://cdn.jsdelivr.net; font-src 'self' https://use.typekit.net https://fonts.gstatic.com; img-src 'self' data: https:; frame-src https://www.google.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://doxfy73wugunk.cloudfront.net; frame-ancestors 'self'; base-uri 'self'; object-src 'none' 1
font-src fonts.gstatic.com use.typekit.net https://*.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ js.mollie.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.ftcdn.net *.behance.net https://belco-prod.s3-eu-central-1.amazonaws.com https://cdn.flbx.io https://firebasestorage.googleapis.com https://www.mollie.com data: 'self' 'unsafe-inline'; script-src unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com https://cdn.belco.io https://cdn.flbx.io https://connect.getflowbox.com http://connect.getflowbox.com *.avada.io *.shopify.com js.mollie.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https://*.googleapis.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com wss://chat.belco.io https://cdn.belco.io https://*.amazonaws.com https://cdn.flbx.io https://connect.getflowbox.com http://connect.getflowbox.com https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com https://tagmanager.google.com https://*.bamboohr.com https://*.clarity.ms https://snap.licdn.com https://*.hs-scripts.com https://*.hs-banner.com https://*.hs-analytics.net https://*.hsadspixel.net https://*.hsforms.net https://js.hubspot.com https://*.6sc.co https://*.crazyegg.com https://*.chilipiper.com https://*.g2crowd.com https://*.g2.com https://*.callrail.com https://*.rackcdn.com https://cdnjs.cloudflare.com https://static.cloudflareinsights.com https://*.zi-scripts.com https://unpkg.com https://cdn.tailwindcss.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://tagmanager.google.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.clarity.ms https://*.hubspot.com https://*.hubapi.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hsadspixel.net https://*.hsforms.com https://*.linkedin.com https://px.ads.linkedin.com https://*.6sc.co https://*.crazyegg.com https://*.chilipiper.com https://*.g2.com https://*.g2crowd.com https://*.callrail.com https://*.gonorth.io https://*.zi-scripts.com https://*.zoominfo.com https://*.bamboohr.com https://cloudflareinsights.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://*.doubleclick.net https://*.hubspot.com https://*.hsforms.com https://*.bamboohr.com https://*.clarity.ms https://*.chilipiper.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.addthis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com maps.gstatic.com *.calcurates.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://www.google.co.in/ https://bat.bing.com/ https://alb.reddit.com/ https://www.facebook.com/ https://cdn.routeapp.io/ https://c.clarity.ms/ *.clarity.ms/ https://c.bing.com/ https://admin.titanrig.com:10790/ https://admin.titanrig.com/ *.cloudflareinsights.com https://www.ekwb.com *.ekwb.com www.google.ca data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com *.googleapis.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js *.disqus.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hotjar.com www.redditstatic.com www.googleoptimize.com https://bat.bing.com/ https://www.clarity.ms/ https://scripts.clarity.ms/ https://connect.facebook.net/ *.newrelic.com https://www.google.co.in/  https://www.google.com/ https://c.bing.com/ *.cloudflareinsights.com https://paypal.adtag.where.com/ *.nofraud.com sibautomation.com *.adobedtm.com www.google.ca 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com https://cdn.jsdelivr.net *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://maps.googleapis.com https://player.vimeo.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.clarity.ms/ *.hotjar.io *.algolia.io https://bam.nr-data.net/ *.googlesyndication.com https://pagead2.googlesyndication.com/ *.facebook.com *.mmapiws.com *.doubleclick.net *.reddit.com *.brevo.com https://www.redditstatic.com/ wss://ws.hotjar.com/ *.nofraud.com https://bat.bing.com *.bing.com https://www.google.co.in *.google.co.in bat.bing.com www.google.ca 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com *.tufano.store *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.tufano.store *.icecat.biz *.xrex.it www.gstatic.com pay.google.com google.com/pay ecomms2s.sella.it sandbox.gestpay.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.tufano.store *.jsdelivr.net www.google.com www.gstatic.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.tufano.store *.jsdelivr.net *.fontawesome.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.tufano.store *.google-analytics.com *.googletagmanager.com *.xrex.it www.google.com www.gstatic.com pay.google.com google.com/pay ecomms2s.sella.it sandbox.gestpay.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.googletagmanager.com https://js.stripe.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://cdn-supertext.azureedge.net https://cdn-dev-supertext.azureedge.net https://cms-prd.supertext.com https://cms-tst.supertext.com https://*.strapiapp.com https://www.googletagmanager.com https://*.supertext.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.supertext.com https://supertext.jobs.personio.com https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://api.stripe.com; frame-src https://js.stripe.com https://hooks.stripe.com https://www.youtube.com https://www.youtube-nocookie.com https://*.supertext.com; frame-ancestors 'self' https://*.supertext.com; base-uri 'self'; form-action 'self' https://*.supertext.com; manifest-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; object-src 'none'; report-uri /client-api/csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.fontawesome.com *.klaviyo.com *.hotjar.com *.paypalobjects.com https://*.aws.dev https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.google.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://plumrocket.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com js.mollie.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://images.unsplash.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.bing.com *.brandlock.io c.clarity.ms a.omappapi.com *.hotjar.com *.comboink.com *.compandsave.com *.tomatoink.com *.amazonaws.com *.cloudfront.net *.cloudflare.com https://shareasale.com https://shareasales.com et.resellerratings.com cdn-assets.affirm.com lantern.roeyecdn.com lantern.roeye.com *.google.com stats.g.doubleclick.net cdn.elements.amazon amazon-omni-cdn.com https://firebasestorage.googleapis.com magefan.com cm.magefan.com https://www.mollie.com www.google.com.ua https://load.yqxg4.compandsave.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com https://maps.googleapis.com https://player.vimeo.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.zdassets.com *.gstatic.com *.clarity.ms *.bing.com *.hotjar.com *.compandsave.com *.pinimg.com *.omappapi.com *.klaviyo.com *.rudderlabs.com *.zendesk.com *.googleapis.com *.pinterest.com https://portal.afterpay.com *.rudderstack.com *.resellerratings.com *.brevo.com https://sibautomation.com https://www.dwin1.com https://www.awin1.com lantern.roeyecdn.com *.openai.com *.amazon.com https://cdn.elements.amazon https://*.aws.dev the.sciencebehindecommerce.com *.avada.io *.shopify.com *.googletagmanager.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com js.mollie.com https://load.yqxg4.compandsave.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app assets.braintreegateway.com *.fontawesome.com *.omappapi.com *.typekit.net *.klaviyo.com cdn.jsdelivr.net https://*.aws.dev cdn.elements.amazon https://fonts.bunny.net *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com https://maps.googleapis.com https://player.vimeo.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.pinterest.com *.clarity.ms *.zdassets.com *.rudderstack.com *.zendesk.com *.omappapi.com *.doubleclick.net *.zopim.com wss://widget-mediator.zopim.com *.googleapis.com *.hotjar.com *.hotjar.io wss://ws.hotjar.com wss://pod-13.zendesk.com https://portal.afterpay.com *.brandlock.io *.algolia.io *.gstatic.com *.resellerratings.com dp70uvwpivouv.cloudfront.net https://in-automate.brevo.com *.klaviyo.com yqxg4.compandsave.com *.openai.com https://cdn.elements.amazon https://*.aws.dev the.sciencebehindecommerce.com https://get.geojs.io *.avada.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com https://load.yqxg4.compandsave.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.googleapis.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com * *.googleapis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com flagpedia.net assets.myparcel.nl *.openstreetmap.fr www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com *.googleapis.com *.gstatic.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com maps.googleapis.com cdnjs.cloudflare.com cdn.jsdelivr.net www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.googleapis.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com www.gstatic.com maps.googleapis.com api.myparcel.nl cdn.jsdelivr.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.voordeelhelmen.nl/; report-to report-endpoint; 1
font-src www.paypalobjects.com assets.reviews.io https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net *.cloudfront.net *.reviews.io *.reviews.co.uk *.gstatic.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ consentcdn.cookiebot.com td.doubleclick.net https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.reviews.io *.reviews.co.uk *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com www.xtento.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https://images.unsplash.com assets.reviews.io imgsct.cookiebot.com www.google.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://firebasestorage.googleapis.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.hsforms.net *.hsforms.com 'self' data: www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com consent.cookiebot.com widget.reviews.co.uk static.klaviyo.com www.googletagmanager.com static-tracking.klaviyo.com consentcdn.cookiebot.com www.google-analytics.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.avada.io *.shopify.com *.reviews.io *.reviews.co.uk *.hsforms.net *.hsforms.com *.gstatic.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src assets.reviews.io data: https://static.klaviyo.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com https://fonts.bunny.net *.cloudfront.net *.reviews.io *.reviews.co.uk *.googleapis.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com region1.analytics.google.com api.reviews.co.uk consentcdn.cookiebot.com www.google-analytics.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://get.geojs.io *.avada.io *.cloudfront.net *.reviews.io *.reviews.co.uk t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.klaviyo.com https://*.klaviyo.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.ahrefs.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://*.klaviyo.com https://www.google-analytics.com https://www.googletagmanager.com https://flagcdn.com https://analytics.ahrefs.com; frame-src 'self' https://*.pay.nl 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.clarity.ms; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://cms.renata.edu.co https://tiles.maps.eox.at https://basemaps.cartocdn.com https://www.googletagmanager.com https://www.google-analytics.com; font-src 'self' data:; connect-src 'self' https://cms.renata.edu.co https://tiles.maps.eox.at https://basemaps.cartocdn.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://www.clarity.ms https://*.clarity.ms https://vitals.vercel-insights.com; media-src 'self' https://cms.renata.edu.co; frame-src https://www.youtube.com https://player.vimeo.com; worker-src 'self' blob:; child-src 'self' blob:; form-action 'self' https://checkout.wompi.co; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; report-uri /api/csp-report 1
script-src 'nonce-KJJ6vPSwGSdzEb8Lgb1tzg' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/static-on-bigtable; base-uri 'none' 1
font-src https://fonts.gstatic.com https://cdn.almapay.com https://maxcdn.bootstrapcdn.com/ *.fontawesome.com https://jap-one.eu/ fonts.gstatic.com fonts.googleapis.com 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net https://seo.mageplaza.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src https://js.stripe.com https://platform.twitter.com/ https://www.facebook.com/ https://www.google.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: https://platform.twitter.com/ https://syndication.twitter.com/ https://www.facebook.com/ https://jap-one.com/ www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com s.ytimg.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com https://app.proofo.io https://www.google.com https://www.gstatic.com inline: https://www.stripe.com https://connect.facebook.net https://platform.twitter.com https://www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com secure.authorize.net test.authorize.net t.paypal.com s.ytimg.com video.google.com vimeo.com  js.authorize.net jstest.authorize.net cdn-scripts.signifyd.com *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com js.braintreegateway.com *.avada.io https://static.cloudflareinsights.com data: www.googleadservices.com www.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com vimeo.com www.vimeo.com channels.magento.com www.youtube.com cdn.jsdelivr.net maps.googleapis.com maps.gstatic.com fonts.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://fonts.googleapis.com https://www.stripe.com https://maxcdn.bootstrapcdn.com/ https://www.stripe.com/ *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com getfirebug.com *.fontawesome.com cdn.jsdelivr.net fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src data: *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com 'self' 'unsafe-inline'; manifest-src *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com 'self' 'unsafe-inline'; connect-src https://app.proofo.io https://region1.google-analytics.com https://www.stripe.com https://salespop.apps.avada.io https://www.google-analytics.com/ geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com *.getalma.eu maps.googleapis.com 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src media.evapo.co.uk static.evapo.co.uk; font-src unity.agechecked.com *.fontawesome.com maxcdn.bootstrapcdn.com *.salesfire.co.uk *.typekit.net *.klarnacdn.net fonts.gstatic.com *.hotjar.com *.hotjar.io lantern.roeyecdn.com lantern.roeye.com *.feefo.com player.vimeo.com bcp.crwdcntrl.net *.google.com *.google.lv *.google.com.uk cdn.cleanhub.io www.cleanhub.com static.dwcdn.net *.yotpo.com *.googleapis.com *.gstatic.com evapo.co.uk media.evapo.co.uk static.evapo.co.uk data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.feefo.com maps.gstatic.com maps.googleapis.com storage.googleapis.com s3.eu-west-2.amazonaws.com *.zdassets.com *.sharethis.com cdn.subscribers.com evapo.zendesk.com widget-mediator.zopim.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net lantern.roeyecdn.com lantern.roeye.com player.vimeo.com bcp.crwdcntrl.net *.google.com *.google.lv *.google.com.uk cdn.cleanhub.io www.cleanhub.com prtpe.com test.prtpe.com evapo.us10.list-manage.com *.psp-solutions.com *.yotpo.com evapo.co.uk 'self' 'unsafe-inline'; frame-ancestors evapo.co.uk 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.zenaps.com *.fls.doubleclick.net https://*.wepowerconnections.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.salesfire.co.uk *.feefo.com maps.gstatic.com maps.googleapis.com storage.googleapis.com s3.eu-west-2.amazonaws.com *.zdassets.com *.sharethis.com cdn.subscribers.com evapo.zendesk.com widget-mediator.zopim.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net lantern.roeyecdn.com lantern.roeye.com bcp.crwdcntrl.net *.google.com *.google.lv *.google.com.uk cdn.cleanhub.io www.cleanhub.com prtpe.com test.prtpe.com oppwa.com test.oppwa.com unity.agechecked.com *.google.com/ https://www.youtube.com www.facebook.com platform.twitter.com *.weltpixel.com *.yotpo.com evapo.co.uk media.evapo.co.uk static.evapo.co.uk 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io unity.agechecked.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.awin1.com *.zenaps.com https://*.wepowerconnections.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com magefan.com cm.magefan.com https://www.magezon.com *.salesfire.co.uk *.feefo.com maps.gstatic.com maps.googleapis.com storage.googleapis.com s3.eu-west-2.amazonaws.com *.zdassets.com *.sharethis.com cdn.subscribers.com evapo.zendesk.com widget-mediator.zopim.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net lantern.roeyecdn.com lantern.roeye.com player.vimeo.com bcp.crwdcntrl.net *.google.com *.google.lv *.google.com.uk cdn.cleanhub.io www.cleanhub.com prtpe.com test.prtpe.com www.googletagmanager.com datawrapper.dwcdn.net www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com *.gstatic.com *.yotpo.com evapo.co.uk media.evapo.co.uk static.evapo.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ unity.agechecked.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com www.dwin1.com *.zenaps.com https://the.sciencebehindecommerce.com https://*.wepowerconnections.com jquery.sellxed.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com chimpstatic.com downloads.mailchimp.com *.list-manage.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.salesfire.co.uk *.feefo.com maps.gstatic.com maps.googleapis.com storage.googleapis.com s3.eu-west-2.amazonaws.com *.zdassets.com *.sharethis.com cdn.subscribers.com evapo.zendesk.com widget-mediator.zopim.com stats.g.doubleclick.net *.hotjar.com *.hotjar.io *.google-analytics.com lantern.roeyecdn.com lantern.roeye.com player.vimeo.com bcp.crwdcntrl.net *.google.com *.google.lv *.google.com.uk cdn.cleanhub.io www.cleanhub.com paypal-eu-cdn.cloudiq.com eu-test.oppwa.com eu-prod.oppwa.com prtpe.com test.prtpe.com script.crazyegg.com datawrapper.dwcdn.net *.smartmetrics.co.uk *.google.com/ connect.facebook.net twitter.com platform.twitter.com https://www.googletagmanager.com tagmanager.google.com *.yotpo.com evapo.co.uk https://chimpstatic.com media.evapo.co.uk static.evapo.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unity.agechecked.com *.fontawesome.com cdn.dnky.co webchat.dotdigital.com downloads.mailchimp.com unsafe-inline maxcdn.bootstrapcdn.com *.salesfire.co.uk *.typekit.net fonts.googleapis.com *.hotjar.com *.hotjar.io lantern.roeyecdn.com lantern.roeye.com *.feefo.com player.vimeo.com bcp.crwdcntrl.net *.google.com *.google.lv *.google.com.uk cdn.cleanhub.io www.cleanhub.com prtpe.com test.prtpe.com pt.dwcdn.net static.dwcdn.net tagmanager.google.com *.yotpo.com *.googleapis.com evapo.co.uk media.evapo.co.uk static.evapo.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com *.sharethis.com cdn.subscribers.com evapo.zendesk.com widget-mediator.zopim.com *.hotjar.com *.hotjar.io stats.g.doubleclick.net lantern.roeyecdn.com lantern.roeye.com *.feefo.com player.vimeo.com bcp.crwdcntrl.net *.google.com *.google.lv *.google.com.uk cdn.cleanhub.io www.cleanhub.com evapo.co.uk media.evapo.co.uk static.evapo.co.uk 'self' 'unsafe-inline'; manifest-src media.evapo.co.uk static.evapo.co.uk 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com unity.agechecked.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https://the.sciencebehindecommerce.com https://*.wepowerconnections.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.salesfire.co.uk *.smartmetrics.co.uk *.feefo.com maps.gstatic.com maps.googleapis.com storage.googleapis.com s3.eu-west-2.amazonaws.com *.zdassets.com *.sharethis.com cdn.subscribers.com evapo.zendesk.com wss://widget-mediator.zopim.com stats.g.doubleclick.net *.hotjar.com *.hotjar.io *.google-analytics.com lantern.roeyecdn.com lantern.roeye.com player.vimeo.com bcp.crwdcntrl.net *.google.com *.google.lv *.google.com.uk cdn.cleanhub.io www.cleanhub.com script.crazyegg.com datawrapper.dwcdn.net https://www.google-analytics.com *.yotpo.com evapo.co.uk media.evapo.co.uk static.evapo.co.uk 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com https://*.wepowerconnections.com assets.braintreegateway.com c.paypal.com evapo.co.uk media.evapo.co.uk static.evapo.co.uk http: https: blob: 'self' 'unsafe-inline'; default-src evapo.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.maxcdn.bootstrapcdn.com/ *.fontawesome.com maxcdn.bootstrapcdn.com https://fonts.bunny.net *.googleapis.com *.cloudfront.net *.reviews.io *.reviews.co.uk 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.facebook.com/ *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.braintreepayments.com https://www.facebook.com/ https://www.googletagmanager.com/ *.google.com/ *.addthis.com *.meetanshi.com js.mollie.com *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://images.unsplash.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.twitter.com *.imagekit.io *.meetanshi.com https://www.google.co.in/ads/ga-audiences https://bat.bing.com/action/0 https://c.clarity.ms/c.gif http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.magezon.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com https://www.mollie.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.hsforms.net *.hsforms.com https://api.ecologi.com/badges/cpw/60d46293cd31d04278477d6a data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.googletagmanager.com *.clarity.ms http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ s7.addthis.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.avada.io *.shopify.com *.fontawesome.com *.googleapis.com *.gstatic.com *.meetanshi.com js.mollie.com *.reviews.io *.reviews.co.uk *.hsforms.net *.hsforms.com https://cdn.jsdelivr.net/npm/@alpinejs/intersect@3.x.x/dist/cdn.min.js https://unpkg.com/smoothscroll-polyfill@0.4.4/dist/smoothscroll.js https://ajax.cloudflare.com/cdn-cgi/scripts/04b3eb47/cloudflare-static/mirage2.min.js https://www.googletagmanager.com/gtm.js https://www.googletagmanager.com/gtag/js 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com downloads.mailchimp.com *.fontawesome.com maxcdn.bootstrapcdn.com https://static.klaviyo.com https://cdn.jsdelivr.net https://fonts.bunny.net *.cloudfront.net *.reviews.io *.reviews.co.uk *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://r.clarity.ms/collect *.googleadservices.com *.googleapis.com *.sandbox.paypal.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ ekr.zdassets.com/ https://get.geojs.io *.avada.io *.meetanshi.com *.cloudfront.net *.reviews.io *.reviews.co.uk t.elasticsuite.io *.hsforms.net *.hsforms.com https://www.googletagmanager.com/gtag/js 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.bootstrapcdn.com *.geotrust.com https://www.youtube.com https://vimeo.com *.googletagmanager.com https://www.googletagmanager.com *.g.doubleclick.net *.googleadservices.com *.jivosite.com *.pingdom.net *.google.co.in *.google.com *.bing.com *.quickspark.com *.chimpstatic.com https://chimpstatic.com *.roirevolution.com *.youtube.com *.vimeo.com *.paypalobjects.com https://app.cpscentral.com/ *.openai.com/ *.facebook.net/ *.socialintents.com/ maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com https://www.youtube.com https://vimeo.com *.googletagmanager.com https://www.googletagmanager.com *.g.doubleclick.net *.jivosite.com *.pingdom.net *.bing.com *.quickspark.com *.chimpstatic.com https://chimpstatic.com *.roirevolution.com *.youtube.com *.vimeo.com *.paypalobjects.com https://app.cpscentral.com/ *.openai.com/ www.facebook.com *.socialintents.com/ 'self' connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com *.twitter.com *.geotrust.com *.googletagmanager.com https://www.googletagmanager.com *.g.doubleclick.net *.googleadservices.com https://vimeo.com *.jivosite.com *.pingdom.net *.google.co.in *.bing.com *.quickspark.com *.chimpstatic.com https://chimpstatic.com *.roirevolution.com *.vimeo.com *.paypalobjects.com https://app.cpscentral.com/ *.openai.com/ www.facebook.com *.socialintents.com/ *.weltpixel.com tokenization.sandbox.accept.blue tokenization.accept.blue api.3dsintegrator.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com https://www.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.sharethis.com *.cloudflare.com *.klarna.com *.googleadservices.com *.g.doubleclick.net *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu https://vimeo.com *.googletagmanager.com https://www.googletagmanager.com *.jivosite.com *.pingdom.net *.googleapis.com *.google.co.in *.google.com *.bing.com *.quickspark.com *.chimpstatic.com https://chimpstatic.com *.roirevolution.com *.youtube.com *.vimeo.com *.paypalobjects.com *.rapidscansecure.com/ *.clarity.ms *.lfeeder.com *.userway.org https://rapidswholesale.com/ https://app.cpscentral.com/ *.termly.io/ *.openai.com/ www.facebook.com *.facebook.com/ *.socialintents.com/ https://rapidscansecure.com/ ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https://vimeo.com www.vimeo.com *.vimeocdn.com https://www.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sharethis.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bootstrapcdn.com *.geotrust.com *.googletagmanager.com https://www.googletagmanager.com *.g.doubleclick.net *.jivosite.com *.pingdom.net *.googleapis.com *.google.co.in *.bing.com *.quickspark.com *.chimpstatic.com https://chimpstatic.com *.roirevolution.com *.youtube.com *.vimeo.com *.paypalobjects.com *.googleadservices.com *.disqus.com https://www.rapidscansecure.com/ https://www.clarity.ms/ https://sc.lfeeder.com/ https://cdn.userway.org/ https://static.cloudflareinsights.com/ https://cpscentral.ngrok.io/ https://app.cpscentral.com/ https://scripts.clarity.ms/ https://munchkin.marketo.net/ *.termly.io/ *.openai.com/ www.facebook.com *.socialintents.com/ https://assets.apollo.io/ chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com tokenization.sandbox.accept.blue tokenization.accept.blue api.3dsintegrator.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com *.maxmind.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bootstrapcdn.com *.geotrust.com https://www.youtube.com https://vimeo.com *.googletagmanager.com https://www.googletagmanager.com/ *.g.doubleclick.net *.googleadservices.com *.jivosite.com *.pingdom.net *.google.co.in *.google.com *.bing.com *.quickspark.com *.chimpstatic.com https://chimpstatic.com *.roirevolution.com *.youtube.com *.vimeo.com *.paypalobjects.com https://app.cpscentral.com/ https://cdn.userway.org/ *.termly.io/ *.openai.com/ *.facebook.net/ *.socialintents.com/ downloads.mailchimp.com tokenization.sandbox.accept.blue tokenization.accept.blue api.3dsintegrator.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://code.jivosite.com/ https://app.cpscentral.com/ *.openai.com/ *.facebook.net/ *.socialintents.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net https://vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com *.cloudflare.com *.twitter.com *.twimg.com *.geotrust.com https://www.youtube.com *.youtube.com *.vimeo.com *.paypalobjects.com *.googletagmanager.com https://www.googletagmanager.com *.g.doubleclick.net *.googleadservices.com *.jivosite.com *.pingdom.net *.googleapis.com *.google.co.in *.bing.com *.quickspark.com *.chimpstatic.com https://chimpstatic.com *.roirevolution.com *.clarity.ms *.userway.org wss://vi-ya-3.jivosite.com/ https://app.cpscentral.com/ *.mktoresp.com/ *.termly.io/ *.openai.com/ www.facebook.com *.socialintents.com/ https://ad.doubleclick.net/ https://md-eecad2978f7a43f5b7838c919258e6de.ecs.us-east-2.on.aws/ https://bded8a3c6ae-1-1053047382554.us-central1.run.app/ https://aplo-evnt.com/ form-assets.mailchimp.com *.intuit.com *.amazonaws.com tokenization.sandbox.accept.blue tokenization.accept.blue api.3dsintegrator.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com maps.googleapis.com *.mmapiws.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://rapidswholesale.com/; report-to report-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-4urV_MCvBm0OHBK4YcksDA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src-elem *.afterpay.com *.googletagmanager.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bing.com *.zopim.com *.zdassets.com *.google.com *.adobe.com *.braintree-api.com *.openpay.com.au *.amplitude.com *.dpm.demdex.net *.nr-data.net *.cardinalcommerce.com *.ccdc02.com *.doubleclick.net *.paypal.com *.braintreegateway.com *.googleapis.com *.instagram.com *.unpkg.com *.trustpilot.com *.scarabresearch.com *.zipmoney.com.au *.emarsys.net *.useinsider.com *.zendesk.com cdn.jsdelivr.net *.facebook.net *.squarecdn.com *.hotjar.com 'self' 'unsafe-inline'; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com data: https://www.googletagmanager.com dc89tf1ynkwmh.cloudfront.net font.static.useinsider.com *.cloudfront.net *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.iequalchange.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com wss://pod-15.zendesk.com/sc/faye *.afterpay.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.instagram.com www.google.com *.trustpilot.com *.kaptcha.com e.issuu.com nationaltiles.api.useinsider.com nationaltiles-ardemo-eau.azurewebsites.net *.prontoavenue.biz *.hotjar.com data: *.useinsider.com www.youtube-nocookie.com *.iequalchange.com http://www.sandbox.paypal.com *.twitter.com *.dpm.demdex.net *.openpay.com.au 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.cdninstagram.com www.nationaltiles.com.au hnd.stats.paypal.com v2assets.zopim.io scontent-syd2-1.cdninstagram.com static.openpay.com.au log.api.useinsider.com site-assets.afterpay.com nationaltiles-ardemo-eau.azurewebsites.net *.google.com.au *.google.com.vn *.google.com.ph image.useinsider.com *.google.com *.facebook.com *.useinsider.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com tagmanager.google.com https://www.googletagmanager.com *.instagram.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ unpkg.com widget.trustpilot.com cdn.scarabresearch.com static.zipmoney.com.au widgets.staging.openpay.com.au recommender.scarabresearch.com webchannel-content.eservice.emarsys.net payments.sandbox.braintree-api.com origin-analytics-sand.sandbox.braintree-api.com nt.api.useinsider.com *.scarabresearch.com *.zdassets.com *.zendesk.com *.zopim.com nationaltiles.api.useinsider.com hit.api.useinsider.com js-agent.newrelic.com bam-cell.nr-data.net iec.3dcstaging.com.au secure.ewaypayments.com connect.facebook.net *.hotjar.com eitri.api.useinsider.com *.openpay.com.au *.google.com.au *.google.com.vn *.google.com.ph data: *.useinsider.com *.iequalchange.com apps.jobadder.com static.zdassets.com wss://pod-15.zendesk.com/sc/faye *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bing.com *.braintree-api.com *.amplitude.com *.dpm.demdex.net *.cardinalcommerce.com *.ccdc02.com *.doubleclick.net *.unpkg.com *.trustpilot.com *.zipmoney.com.au *.emarsys.net cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app assets.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com assets.api.useinsider.com *.useinsider.com *.cloudflare.com *.braintree-api.com *.gstatic.com *.typekit.net *.trustedshops.com *.fontawesome.com 'self' 'unsafe-inline'; object-src nationaltiles-ardemo-eau.azurewebsites.net 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com *.zdassets.com nationaltiles-ardemo-eau.azurewebsites.net data: *.useinsider.com *.zopim.com *.zopim.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com unpkg.com widget.trustpilot.com cdn.scarabresearch.com static.zipmoney.com.au widgets.staging.openpay.com.au recommender.scarabresearch.com webchannel-content.eservice.emarsys.net payments.sandbox.braintree-api.com origin-analytics-sand.sandbox.braintree-api.com nt.api.useinsider.com *.scarabresearch.com *.zdassets.com *.zendesk.com *.zopim.com wss://widget-mediator.zopim.com nationaltiles.api.useinsider.com hit.api.useinsider.com js-agent.newrelic.com bam-cell.nr-data.net iec.3dcstaging.com.au secure.ewaypayments.com socialproof.api.useinsider.com nationaltiles-ardemo-eau.azurewebsites.net api.zipmoney.com.au *.zip.co location.api.useinsider.com carrier.useinsider.com segment.api.useinsider.com stats.g.doubleclick.net *.hotjar.com wss://*.hotjar.com *.hotjar.io abacus.api.useinsider.com data: *.useinsider.com wss://pod-15.zendesk.com/sc/faye www.google-analytics.com *.cloudflare.com *.twitter.com *.twimg.com *.zopim.io https://stats.g.doubleclick.net *.openpay.com.au *.amplitude.com *.dpm.demdex.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.example.com/; report-to report-endpoint; 1
default-src 'self'; 		base-uri 'self'; 		object-src 'none'; 		script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: 		https://www.googletagmanager.com 		https://*.googletagmanager.com 		https://*.google-analytics.com 		https://www.google.com 		https://*.google.com 		https://www.gstatic.com 		https://*.gstatic.com 		https://maps.googleapis.com 		https://*.googleadservices.com 		https://googleads.g.doubleclick.net 		https://cdn.cookielaw.org 		https://*.my.site.com 		https://ajax.googleapis.com 		https://code.jquery.com 		https://cdnjs.cloudflare.com 		https://s.pinimg.com 		https://*.siteintercept.qualtrics.com 		https://siteintercept.qualtrics.com 		https://apps.bazaarvoice.com 		https://analytics-static.ugc.bazaarvoice.com 		https://network.bazaarvoice.com 		https://display.ugc.bazaarvoice.com 		https://api.bazaarvoice.com 		https://apps.nexus.bazaarvoice.com 		https://cscoreproweustor.blob.core.windows.net 		https://cdn.channelsight.com 		https://js.monitor.azure.com 		https://fast.wistia.com 		https://browser.sentry-cdn.com 		https://connect.facebook.net 		https://appds8093.blob.core.windows.net 		https://js.hs-analytics.net; 		script-src-attr 'unsafe-inline'; 		style-src 'self' 'unsafe-inline' 		https://use.typekit.net 		https://p.typekit.net 		https://fonts.googleapis.com 		https://*.my.site.com 		https://cdn.cookielaw.org 		https://siteintercept.qualtrics.com 		https://privacyportal-cdn.onetrust.com 		https://display.ugc.bazaarvoice.com; 		font-src 'self' data: 		https://use.typekit.net 		https://*.typekit.net 		https://privacyportal-cdn.onetrust.com 		https://fonts.gstatic.com; 		img-src 'self' data: blob: 		https://cdn.cookielaw.org 		https://*.cookielaw.org 		https://www.google.com 		https://*.google.com 		https://*.googleadservices.com 		https://*.gstatic.com 		https://maps.googleapis.com 		https://googleads.g.doubleclick.net 		https://*.doubleclick.net 		https://ct.pinterest.com 		https://*.pinterest.com 		https://siteintercept.qualtrics.com 		https://*.qualtrics.com 		https://network.bazaarvoice.com 		https://*.bazaarvoice.com 		https://fast.wistia.com 		https://embed-ssl.wistia.com 		https://track.hubspot.com; 		connect-src 'self' 		https://cdn.cookielaw.org 		https://*.cookielaw.org 		https://geolocation.onetrust.com 		https://privacyportal.onetrust.com 		https://*.my.site.com 		https://*.salesforce-scrt.com 		https://*.google-analytics.com 		https://analytics.google.com 		https://*.googletagmanager.com 		https://google.com 		https://www.google.com 		https://*.google.com 		https://maps.googleapis.com 		https://*.googleadservices.com 		https://googleads.g.doubleclick.net 		https://ad.doubleclick.net 		https://stats.g.doubleclick.net 		https://ct.pinterest.com 		https://*.pinterest.com 		https://siteintercept.qualtrics.com 		https://*.siteintercept.qualtrics.com 		https://*.qualtrics.com 		https://*.bazaarvoice.com 		https://network.bazaarvoice.com 		https://display.ugc.bazaarvoice.com 		https://api.bazaarvoice.com 		https://apps.nexus.bazaarvoice.com 		https://cdn.channelsight.com 		https://*.channelsight.com 		https://fast.wistia.com 		https://pipedream.wistia.com 		https://embed-cloudfront.wistia.com 		https://distillery.wistia.com 		https://appds8093.blob.core.windows.net 		https://js.monitor.azure.com 		https://*.monitor.azure.com; 		frame-src 'self' 		https://*.my.site.com 		https://*.salesforce-scrt.com 		https://www.google.com 		https://*.google.com 		https://www.recaptcha.net 		https://ct.pinterest.com 		https://player.vimeo.com 		https://*.qualtrics.com; 		frame-ancestors 'self'; 1
child-src id.quicklaunch.io 'self'; connect-src 'self' lcas-dev.lakelandcc.edu lcas.lakelandcc.edu www.lakelandcc.edu myportal-new-dev.lakelandcc.edu myportal.lakelandcc.edu: report-uri https://lakeland.report-uri.com/r/t/csp/wizard 1
default-src 'self' https: data: blob:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' https: blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://connect.facebook.net https://analytics.tiktok.com https://googleads.g.doubleclick.net https://www.google.com https://cdn.jotfor.ms https://form.jotform.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://connect.facebook.net https://analytics.tiktok.com https://*.tiktok.com https://analytics-ipv6.tiktokw.us https://googleads.g.doubleclick.net https://ad.doubleclick.net https://www.google.com https://www.googleadservices.com https://form.jotform.com https://api.jotform.com; img-src 'self' data: https:; frame-src 'self' https://www.youtube-nocookie.com https://td.doubleclick.net https://www.google.com https://www.facebook.com https://form.jotform.com; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; 1
default-src 'self'; base-uri 'self'; object-src 'none'; img-src 'self'; connect-src 'self' https://reporting.qlued.com https://*.ingest.de.sentry.io; font-src 'self' data: https://assets.gumroad.com; script-src 'nonce-90682761e9f03232bdd98ecc739169ed' 'strict-dynamic' 'report-sha256' 'report-sample' 'unsafe-inline' https: http:; style-src 'report-sample' 'self' 'unsafe-inline' https://assets.gumroad.com; upgrade-insecure-requests; frame-src https://www.tickettailor.com; frame-ancestors 'none'; report-to default; report-uri https://reporting.qlued.com/inbox?publicSessionId=af0b896b3bf722cc82293e837ba4f89e&requestId=90682761e9f03232bdd98ecc739169ed&userId= 1
default-src 'self' 'unsafe-inline' https://connect.facebook.net https://www.google-analytics.com https://www.googletagmanager.com;             img-src 'self' data: https://*.albion.co.jp https://*.clarity.ms https://*.g.doubleclick.net https://ad.doubleclick.net https://ajax.googleapis.com https://albion.co.jp https://analytics.twitter.com https://b98.yahoo.co.jp https://bs.nakanohito.jp https://c.bing.com https://cdn.shopify.com https://cdnjs.cloudflare.com https://cnt.fout.jp https://connect.facebook.net https://en.wikipedia.org https://fonts.gstatic.com https://i.vimeocdn.com https://i.ytimg.com https://img.macromill.com https://img.youtube.com https://log-papago.naver.com https://m.media-amazon.com https://placehold.jp https://review-yfd.vendetech.com https://s.yimg.jp https://s3.amazonaws.com https://scdn.line-apps.com https://sdk.hellouniweb.com https://t.co https://tr.line.me https://ws1.sinclo.jp https://www.facebook.com https://www.google.ae https://www.google.at https://www.google.be https://www.google.bt https://www.google.ca https://www.google.cd https://www.google.ch https://www.google.cl https://www.google.cm https://www.google.co.ao https://www.google.co.id https://www.google.co.il https://www.google.co.in https://www.google.co.jp https://www.google.co.ke https://www.google.co.kr https://www.google.co.ma https://www.google.co.nz https://www.google.co.th https://www.google.co.uk https://www.google.co.uz https://www.google.co.ve https://www.google.co.za https://www.google.com https://www.google.com.ar https://www.google.com.au https://www.google.com.bd https://www.google.com.br https://www.google.com.co https://www.google.com.cy https://www.google.com.ec https://www.google.com.eg https://www.google.com.et https://www.google.com.gt https://www.google.com.hk https://www.google.com.jm https://www.google.com.lb https://www.google.com.ly https://www.google.com.mx https://www.google.com.my https://www.google.com.ni https://www.google.com.np https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.ph https://www.google.com.pk https://www.google.com.sa https://www.google.com.sg https://www.google.com.tr https://www.google.com.tw https://www.google.com.ua https://www.google.com.vn https://www.google.cz https://www.google.de https://www.google.dz https://www.google.ee https://www.google.es https://www.google.fr https://www.google.gr https://www.google.hr https://www.google.ie https://www.google.iq https://www.google.it https://www.google.jo https://www.google.kg https://www.google.kz https://www.google.la https://www.google.lt https://www.google.mg https://www.google.nl https://www.google.no https://www.google.ps https://www.google.ro https://www.google.ru https://www.google.sc https://www.google.se https://www.google.tn https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com;             media-src 'self' https://sdk.hellouniweb.com https://ws1.sinclo.jp;             font-src 'self' data: https://*.albion.co.jp https://at.alicdn.com https://cdn.jsdelivr.net https://cdn.yiban.io https://cdnjs.cloudflare.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://use.typekit.net https://ws1.sinclo.jp https://www.elegance-cosmetics.com;             connect-src 'self' https://*.clarity.ms https://*.g.doubleclick.net https://ad.doubleclick.net https://albion.co.jp https://analytics.google.com https://analytics.twitter.com https://apac.account.amazon.com https://apis.google.com https://apm.yahoo.co.jp https://bs.nakanohito.jp https://dm.slim02.jp https://dp.navitime.biz https://exceptcollect.ptengine.com https://googleads.g.doubleclick.net https://lightning-recommend.io https://o4506773005533184.ingest.sentry.io https://p.typekit.net https://payments-fe.amazon.com https://payments.amazon.co.jp https://region1.analytics.google.com https://region1.google-analytics.com https://sdk.hellouniweb.com https://stats.ptengine.jp https://t.co https://use.typekit.net https://ws1.sinclo.jp https://www.facebook.com https://www.google-analytics.com https://www.google.be https://www.google.ca https://www.google.ch https://www.google.cl https://www.google.co.id https://www.google.co.in https://www.google.co.jp https://www.google.co.kr https://www.google.co.th https://www.google.co.uk https://www.google.com https://www.google.com.au https://www.google.com.cy https://www.google.com.hk https://www.google.com.mx https://www.google.com.my https://www.google.com.pa https://www.google.com.pe https://www.google.com.ph https://www.google.com.pk https://www.google.com.sg https://www.google.com.tw https://www.google.com.ua https://www.google.com.vn https://www.google.cz https://www.google.de https://www.google.ee https://www.google.es https://www.google.fr https://www.google.gr https://www.google.hr https://www.google.ie https://www.google.it https://www.google.lt https://www.google.nl https://www.google.no https://www.google.ru https://www.googleadservices.com https://www.googletagmanager.com https://www.ignis.jp;             frame-src 'self' https://*.fls.doubleclick.net https://dsp.fout.jp https://js.fout.jp https://login.kose-albion-jp.prismatix.net https://myaccount.google.com https://platform.twitter.com https://player.vimeo.com https://shop.albion.co.jp https://tg.socdm.com https://toolytics.pa.clients6.google.com https://www.facebook.com https://www.google.com https://www.googletagmanager.com https://www.youtube.com;             worker-src 'self' blob:;             script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval';             script-src-elem 'self' 'unsafe-inline' https://*.clarity.ms https://*.g.doubleclick.net https://3001.scriptcdn.net https://ajax.googleapis.com https://apis.google.com https://albion.co.jp https://b98.yahoo.co.jp https://bs.nakanohito.jp https://cdn.credit.gmo-ab.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.jquery.com https://connect.facebook.net https://cs.nakanohito.jp https://d.line-scdn.net https://d.rcmd.jp https://dp.navitime.biz https://f.vimeocdn.com https://i.socdm.com https://img.macromill.com https://js.fout.jp https://js.ptengine.jp https://lightning-recommend.io https://p01.mul-pay.jp https://platform.twitter.com https://player.vimeo.com https://s.yimg.jp https://s.yjtag.jp https://sdk.hellouniweb.com https://static-fe.payments-amazon.com https://static.ads-twitter.com https://static.mul-pay.jp https://tg.socdm.com https://typesquare.com https://unpkg.com https://use.typekit.net https://ws1.sinclo.jp https://www.google-analytics.com https://www.googletagmanager.com https://www.youtube.com;             style-src-elem 'self' 'unsafe-inline' https://ajax.googleapis.com https://albion.co.jp https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://f.vimeocdn.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://unpkg.com https://use.typekit.net https://www.gstatic.com;             frame-ancestors 'self' https://player.vimeo.com https://vimeo.com https://www.youtube.com https://youtu.be;             report-to csp-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://cdn.riverty.design/ * 'self' data: robincontentdesktop.blob.core.windows.net data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com uc8.tv * 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com uc8.tv https://documents.riverty.com/ * *.multisafepay.com https://pay.google.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com https://cdn.myafterpay.com/ uc8.tv https://cdn.riverty.design/ ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://images.unsplash.com *.prism.app-us1.com *.prismic.io * *.multisafepay.com *.hsforms.net *.hsforms.com 'self' data: *.googletagmanager.com ssl.gstatic.com www.gstatic.com *.googlesyndication.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com uc8.tv https://cdn.myafterpay.com/ https://cdn.bnpl.riverty.io/ chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://maps.googleapis.com https://player.vimeo.com *.prism.app-us1.com *.prismic.io * https://widget-acc.paazl.com https://widget.paazl.com https://api-acc.paazl.com https://api.paazl.com *.multisafepay.com https://pay.google.com *.hsforms.net *.hsforms.com *.gstatic.com *.googletagmanager.com tagmanager.google.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com * https://widget-acc.paazl.com https://widget.paazl.com https://api-acc.paazl.com https://api.paazl.com *.multisafepay.com *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com * 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com uc8.tv https://cdn.myafterpay.com/ https://documents.myafterpay.com/ https://documents.riverty.com/ https://www.afterpay.nl/ https://cdn.bnpl.riverty.io/ https://trace-api.newrelic.com/ https://distributions.crowdin.net/ https://api.crowdin.com/ form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com https://maps.googleapis.com https://player.vimeo.com *.prism.app-us1.com *.prismic.io * https://widget-acc.paazl.com https://widget.paazl.com https://api-acc.paazl.com https://api.paazl.com *.multisafepay.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.googletagmanager.com *.doubleclick.net *.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://4c701c01-85ba-408b-96cc-0fd2ab244242.sansec.watch/; report-to report-endpoint; 1
font-src *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.certcapture.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://plumrocket.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.certcapture.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.doubleclick.net *.googletagmanager.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://unpkg.com *.certcapture.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://unpkg.com *.typekit.net *.certcapture.com downloads.mailchimp.com *.googleapis.com *.googletagmanager.com *.fontawesome.com https://fonts.bunny.net unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.certcapture.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.google-analytics.com *.google.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.googleapis.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.weltpixel.com *.wesupply.xyz https://wesupplylabs.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com https://*.gstatic.com https://*.google.com *.hubspot.com *.facebook.com https://*.googleapis.com https://*.googleusercontent.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com https://*.gstatic.com *.hs-scripts.com *.hs-analytics.net *.hsadspixel.net *.hs-banner.com *.facebook.net https://*.google.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.avada.io *.shopify.com *.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src unsafe-inline assets.braintreegateway.com fonts.googleapis.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com *.hubapi.com *.facebook.com static.hsappstatic.net https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-src 'self'; report-uri https://www2.defeatdepression.ca/site/XFrameViolation 1
default-src 'self' https: http: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; 1
object-src  'none'; connect-src 'self' *.falconstudios.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.falconstudios.com join.gammasecure.com; script-src 'self' *.falconstudios.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.falconstudios.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
font-src cash-f.squarecdn.com *.cdn-apple.com fonts.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action * belgium-3ds-bxl.wlp-acs.com belgium-3ds-vdm.wlp-acs.com acs1.3dsecure.no tsys.arcot.com sicher-bezahlen.sparkasse.at acs1-3dsecure.targobank.de 'self' 'unsafe-inline'; frame-ancestors https://partner.eqology.com 'self'; frame-src bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ * belgium-3ds-bxl.wlp-acs.com belgium-3ds-vdm.wlp-acs.com acs1.3dsecure.no tsys.arcot.com sicher-bezahlen.sparkasse.at acs1-3dsecure.targobank.de https://eqology.com widget.trustpilot.com *.google.com/ 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com * *.gstatic.com https://eqology.com https://www.magezon.com blob: magefan.com cm.magefan.com *.google.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com *.cdn-apple.com https://eqology.com cdn.scarabresearch.com widget.trustpilot.com *.google.com/ *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.cash.app *.adyen.com *.cdn-apple.com fonts.googleapis.com www.googletagmanager.com *.fontawesome.com *.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com vimeo.com * google.com *.google.com www.googleapis.com https://eqology.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com maxcdn.bootstrapcdn.com *.fonts.googleapis.com *.gstatic.com data: *.cloudflare.com *.jkalachand.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.mips.mu *.cardinalcommerce.com *.mastercard.com *.visa.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.addthis.com *.pinterest.com *.googletagmanager.com *.mips.mu *.facebook.com *.cardinalcommerce.com *.mastercard.com *.visa.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.cloudflare.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com *.cdninstagram.com *.jkalachand.com *.facebook.com *.clarity.ms *.mips.mu data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.avada.io *.googleapis.com *.addthis.com *.addthisedge.com *.facebook.com *.pinterest.com *.instagram.com *.facebook.net *.clarity.ms *.google.com *.googletagmanager.com *.jkalachand.com *.mips.mu 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.fontawesome.com maxcdn.bootstrapcdn.com *.googleapis.com *.jkalachand.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://get.geojs.io *.avada.io *.cloudflare.com *.paypal.com *.googleapis.com *.addthis.com *.graph.instagram.com *.google-analytics.com *.google.com *.clarity.ms *.doubleclick.net *.jkalachand.com *.mips.mu *.facebook.com *.cardinalcommerce.com *.mastercard.com *.visa.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https: 'self'; img-src https: data:; script-src 'self' 'unsafe-inline' widget.clutch.co; object-src 'none'; connect-src 'self' https: wss://*.intercom.io; frame-src www.appradar.com appradar.com start.appradar.com widget.clutch.co youtube.com www.youtube.com www.youtube-nocookie.com youtube-nocookie.com *.tiktok.com *.twitter.com *.instagram.com www.google.com www.facebok.com *.facebook.com calendly.com scribehow.com *.hubspot.com hubspot.com js.hscta.net no-cache.hubspot.com *.hs-sites.com forms.hsforms.com googletagmanager.com *.googletagmanager.com app.supademo.com demoagent.naoma.app clearout.io 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:; frame-ancestors 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app-me.readspeaker.com https://cdn-me.readspeaker.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://ajax.googleapis.com https://code.jquery.com https://hamadchat.moe.edu.kw https://js.monitor.azure.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn-me.readspeaker.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://hamadchat.moe.edu.kw; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: blob: https:; media-src 'self' https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; media-src 'self' blob: https:; font-src 'self' https:; connect-src 'self' https:; worker-src 'self' blob:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests 1
worker-src ; font-src *.fontawesome.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com www.facebook.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com *.avada.io cdn.ampproject.org www.gstatic.com connect.facebook.net yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com www.gstatic.com maxcdn.bootstrapcdn.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com https://get.geojs.io *.avada.io cdn.ampproject.org www.googleapis.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval'    https://www.googletagmanager.com    https://www.google-analytics.com    https://googleads.g.doubleclick.net    https://www.googleadservices.com    https://www.clarity.ms    https://d1wi3p9y2i20go.cloudfront.net    https://assets.orangehealth.in    https://n.clarity.ms    https://connect.facebook.net    https://api-js.mixpanel.com    https://assets.loginwithamazon.com;  img-src 'self' 'unsafe-inline'    https://d1wi3p9y2i20go.cloudfront.net    https://oh-prod-assets.s3.ap-south-1.amazonaws.com    https://assets.orangehealth.in    https://www.facebook.com    https://googleads.g.doubleclick.net    https://www.google.com    https://www.google.co.in    https://www.googleadservices.com    https://www.googletagmanager.com    https://c.clarity.ms    https://c.bing.com;  style-src 'self' 'unsafe-inline' 'unsafe-eval'    https://assets.orangehealth.in    https://d1wi3p9y2i20go.cloudfront.net    https://oh-prod-assets.s3.ap-south-1.amazonaws.com;  frame-src 'self' https://citrus.orangehealth.in; 1
child-src 'self'; connect-src 'self'; default-src 'self'; font-src 'self' https://*.cloudfront.net/graphik/ https://*.cloudfront.net/lato/; frame-src 'self'; img-src 'self' data:; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; report-to stott-security-endpoint; 1
script-src 'nonce-zoFgoFg5W8XYATWY1B_VLA' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/static-on-bigtable; base-uri 'none' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com maxcdn.bootstrapcdn.com fonts.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com quickchart.io img.youtube.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com fonts.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.jaloucity.de https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://www.google.com https://www.gstatic.com https://maps.googleapis.com https://bat.bing.com https://*.hotjar.com https://*.klaviyo.com https://*.trustedshops.com https://connect.facebook.net https://*.paypal.com https://www.youtube-nocookie.com https://ct.pinterest.com https://s.pinimg.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.klaviyo.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.jaloucity.de https://*.google-analytics.com https://analytics.google.com https://www.google.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com wss://*.hotjar.io https://*.klaviyo.com https://bat.bing.com https://*.trustedshops.com https://*.paypal.com https://ct.pinterest.com; frame-src 'self' https://*.jaloucity.de https://www.youtube-nocookie.com https://*.paypal.com https://www.google.com https://*.trustedshops.com https://ct.pinterest.com https://www.facebook.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https://*.paypal.com https://www.facebook.com 1
default-src 'self' https: data: blob:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; frame-src 'self' https:; connect-src 'self' https: wss:; object-src 'none'; base-uri 'self'; form-action 'self' https: 1
font-src fonts.gstatic.com use.typekit.net *.fontawesome.com https://fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ https://player.vimeo.com https://www.youtube-nocookie.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.facebook.com *.openstreetmap.org https://maps.googleapis.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com *.hsforms.net *.hsforms.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net chimpstatic.com downloads.mailchimp.com *.list-manage.com *.googletagmanager.com *.facebook.net https://player.vimeo.com https://www.youtube.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.fontawesome.com https://fonts.googleapis.com http://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.google-analytics.com *.openstreetmap.org https://maps.googleapis.com https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cloudflare.com *.trustedshops.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https://www.facebook.com/ www.google.com youtu.be *.vimeo.com *.addthis.com www.paypal.com www.sandbox.paypal.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net gateway.apaylater.com gateway.atome.sg *.cloudflare.com https://cdn.klarna.com https://s.ytimg.com *.usercentrics.eu blob: https://www.magezon.com www.paypal.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com *.magento-ds.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com gateway.apaylater.com gateway.atome.sg https://connect.facebook.net/ *.cloudflare.com *.google-analytics.com *.gstatic.com *.googleadservices.com *.googleapis.com *.trustedshops.com *.usercentrics.eu *.addthis.com *.addthisedge.com *.moatads.com www.paypal.com www.paypalobjects.com www.sandbox.paypal.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com gateway.apaylater.com gateway.atome.sg *.cloudflare.com *.typekit.net *.trustedshops.com *.usercentrics.eu assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://socialplugin.facebook.net/ https://www.facebook.com/ *.cloudflare.com *.googleapis.com www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' https://cloud.umami.is https://assets.calendly.com; style-src 'self' 'unsafe-inline' https://assets.calendly.com; img-src 'self' data: https://www.sults.com.br https://i.ytimg.com https://assets.calendly.com; font-src 'self'; connect-src 'self' https://cloud.umami.is https://noembed.com; frame-src https://calendly.com https://www.youtube-nocookie.com https://www.youtube.com https://player.vimeo.com; media-src 'self'; worker-src 'self'; manifest-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; report-uri /api/csp-relatorio 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://www.gstatic.cn https://www.recaptcha.net https://googleads.g.doubleclick.net https://maps.googleapis.com https://apis.google.com https://accounts.google.com https://zapier.com https://cdn.zapier.com https://challenges.cloudflare.com https://static.cloudflareinsights.com https://js.hcaptcha.com https://hcaptcha.com https://cdn.jsdelivr.net https://cdn.form.io https://unpkg.com https://cdnjs.cloudflare.com https://r.wdfl.co https://consent.cookiebot.com https://consentcdn.cookiebot.com https://assets.calendly.com https://api.trustedform.com https://js.usebasin.com https://ch.usebasin.com https://ch-beta.usebasin.com https://hf.usebasin.com https://hf-beta.usebasin.com https://cdn.tailwindcss.com https://embed.integrately.com https://testimonial.to http://basin.local; script-src-elem 'self' 'unsafe-inline' https://js.stripe.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://www.gstatic.cn https://www.recaptcha.net https://googleads.g.doubleclick.net https://maps.googleapis.com https://apis.google.com https://accounts.google.com https://zapier.com https://cdn.zapier.com https://challenges.cloudflare.com https://static.cloudflareinsights.com https://js.hcaptcha.com https://hcaptcha.com https://cdn.jsdelivr.net https://cdn.form.io https://unpkg.com https://cdnjs.cloudflare.com https://r.wdfl.co https://consent.cookiebot.com https://consentcdn.cookiebot.com https://assets.calendly.com https://api.trustedform.com https://js.usebasin.com https://ch.usebasin.com https://ch-beta.usebasin.com https://hf.usebasin.com https://hf-beta.usebasin.com https://embed.integrately.com https://testimonial.to http://basin.local; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://cdn.zapier.com https://assets.calendly.com https://embed.integrately.com https://cdn.tailwindcss.com http://basin.local; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net https://unpkg.com data:; media-src 'self' https: data:; img-src 'self' https: data: blob:; connect-src 'self' wss: https://js.stripe.com https://api.stripe.com https://checkout.stripe.com https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://www.google.com https://zapier.com https://api.zapier.com https://www.gstatic.com https://maps.googleapis.com https://apis.google.com https://accounts.google.com https://challenges.cloudflare.com https://static.cloudflareinsights.com https://cloudflareinsights.com https://hcaptcha.com https://js.hcaptcha.com https://www.recaptcha.net https://r.wdfl.co https://api.getrewardful.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://assets.calendly.com https://calendly.com https://cdn.jsdelivr.net https://tile.openstreetmap.org https://nominatim.openstreetmap.org https://api.geoapify.com https://api.mapbox.com https://api.trustedform.com https://ch.usebasin.com https://ch-beta.usebasin.com https://usebasin.com https://js.usebasin.com https://embed.integrately.com http://basin.local; frame-src 'self' https://js.stripe.com https://www.google.com https://www.recaptcha.net https://challenges.cloudflare.com https://hcaptcha.com https://newassets.hcaptcha.com https://www.googletagmanager.com https://connect.cookiebot.com https://consentcdn.cookiebot.com https://assets.calendly.com https://calendly.com https://docs.google.com https://content.googleapis.com https://www.youtube-nocookie.com https://www.youtube.com https://codesandbox.io https://embed-v2.testimonial.to http://basin.local; frame-ancestors 'self' https://usebasin.com; worker-src 'self' blob: data: https://cdn.jsdelivr.net; object-src 'none'; base-uri 'self'; report-uri https://usebasin.com/csp-violation-report 1
default-src 'self' *.alkompis.se;
								script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagservices.com *.alkompis.se *.google.com *.twitter.com *.cloudflarestream.com *.vimeo.com *.youtube.com *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.youtube.com *.termly.io *.googletagmanager.com *.facebook.net *.google *.ampproject.org *.cookiebot.com *.holid.io *.gstatic.com;
								style-src 'self' 'unsafe-inline' *.alkompis.se *.googleapis.com;
								connect-src 'self' *.facebook.com *.googleadservices.com *.google.se *.facebook.net *.alkompis.se *.termly.io *.cookiebot.com *.google-analytics.com *.googlesyndication.com *.google.com *.doubleclick.net *.google *.adform.net *.holid.io;
								font-src 'self' data: *.alkompis.se *.gstatic.com;
								media-src 'self' data: *.alkompis.se;
								frame-src 'self' *.googletagservices.com *.twitter.com *.soundcloud.com *.youtube.com *.googletagmanager.com *.facebook.com *.adtrafficquality.google *.cloudflarestream.com *.vimeo.com *.zendesk.com *.googlesyndication.com *.doubleclick.net *.google.com *.holid.io *.rubiconproject.com *.cookiebot.com;
								img-src 'self' data: *.alkompis.se *.vimeocdn.com *.adtrafficquality.google *.ytimg.com *.facebook.com *.googlesyndication.com *.google.com *.google.se *.doubleclick.net *.googletagmanager.com *.cookiebot.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.jquery.com https://static.cloudflareinsights.com https://challenges.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://www.gstatic.com https://www.google.com https://apis.google.com https://accounts.google.com https://pagead2.googlesyndication.com https://*.googlesyndication.com https://googleads.g.doubleclick.net https://www.googleadservices.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https://challenges.cloudflare.com https://www.google.com https://accounts.google.com https://*.doubleclick.net https://*.googlesyndication.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.googleapis.com *.gstatic.com data: *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com *.zopim.com *.zopim.io https://use.fontawesome.com/ https://bam.nr-data.net/ *.sharethis.com *.elfsight.com *.nr-data.net *.addthis.com *.hsforms.net *.hsforms.com *.youtube.com *.office.net *.cdninstagram.com *.elfsightcdn.com *.tiktokcdn-us.com *.fontawesome.com *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com *.yotpo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.twitter.com *.addthis.com *.hsforms.net *.hsforms.com *.youtube.com *.office.net *.cdninstagram.com *.elfsightcdn.com *.tiktokcdn-us.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com http://www.sandbox.paypal.com *.twitter.com *.zendesk.com http://www.w3.org/2000/svg https://bam.nr-data.net/ *.sharethis.com *.elfsight.com *.nr-data.net *.addthis.com *.hsforms.net *.hsforms.com *.office.net *.cdninstagram.com *.elfsightcdn.com *.tiktokcdn-us.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net *.gstatic.com *.googleapis.com *.cloudflare.com *.addthis.com *.googleadservices.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.bing.com *.zopim.com *.zopim.io *.doubleclick.net *.google.com *.google.co.in *.mastercard.com http://www.w3.org/2000/svg https://bam.nr-data.net/ *.sharethis.com *.cvoptical.com *.ggpht.com *.elfsight.com *.nr-data.net *.hsforms.net *.hsforms.com *.office.net *.cdninstagram.com *.elfsightcdn.com *.tiktokcdn-us.com *.alothemes.com *.magepow.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bing.com *.zopim.com *.zdassets.com *.google.com *.zendesk.com http://www.w3.org/2000/svg https://js-agent.newrelic.com/ https://bam.nr-data.net/ *.sharethis.com *.elfsight.com https://static.elfsight.com/ *.addthis.com *.moatads.com *.addthisedge.com *.hsforms.net *.hsforms.com *.office.net *.cdninstagram.com *.elfsightcdn.com *.tiktokcdn-us.com acsbapp.com *.alothemes.com *.magepow.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.fontawesome.com *.bing.com https://use.fontawesome.com/ https://bam.nr-data.net/ *.sharethis.com *.elfsight.com *.nr-data.net *.addthis.com *.hsforms.net *.hsforms.com *.youtube.com *.office.net *.cdninstagram.com *.elfsightcdn.com *.tiktokcdn-us.com *.embedsocial.com *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zopim.com *.zopim.io https://static.zdassets.com/ https://bam.nr-data.net/ *.sharethis.com *.nr-data.net *.addthis.com *.hsforms.net *.hsforms.com *.youtube.com *.office.net *.cdninstagram.com *.elfsightcdn.com *.tiktokcdn-us.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.sentry.io *.magento-datasolutions.com *.magento-ds.com *.googleapis.com www.google-analytics.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.zdassets.com *.zopim.com *.zopim.io wss://widget-mediator.zopim.com https://stats.g.doubleclick.net *.zendesk.com http://www.w3.org/2000/svg https://bam.nr-data.net/ *.sharethis.com *.elfsight.com *.addthis.com *.hsforms.net *.hsforms.com *.youtube.com *.office.net *.cdninstagram.com *.elfsightcdn.com *.tiktokcdn-us.com cdn.acsbapp.com *.alothemes.com *.magepow.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google.com google.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.bootstrapcdn.com *.cloudflare.com cdnjs.cloudflare.com *.thuiswinkel-cdn.org *.feedbackcompany.com *.googleapis.com *.fontawesome.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.feedbackcompany.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.facebook.com *.doubleclick.net *.googletagmanager.com *.cookiebot.com *.trustpilot.com js.mollie.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com https://belco-prod.s3-eu-central-1.amazonaws.com *.google.nl *.ytimg.com *.cookiebot.com *.visualwebsiteoptimizer.com *.thuiswinkel-cdn.org *.googlesyndication.com *.bing.net *.feedbackcompany.com 'self' data: https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://www.mollie.com https://redchamps.com *.hsforms.net *.hsforms.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com https://cdn.belco.io *.belco.io *.google-analytics.com *.googleadservices.com *.doubleclick.net js-agent.newrelic.com bam-cell.nr-data.net *.hotjar.com *.googlesyndication.com *.beslist.nl *.trustpilot.com *.ahrefs.com *.cookiebot.com *.thuiswinkel.org *.thuiswinkel-cdn.org *.convertexperiments.com *.getqonfi.com *.bing.com *.feedbackcompany.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com https://cdn.jsdelivr.net js.mollie.com *.hsforms.net *.hsforms.com *.gstatic.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com https://*.googleapis.com *.bootstrapcdn.com *.cloudflare.com cdnjs.cloudflare.com *.thuiswinkel-cdn.org *.googleapis.com https://static.klaviyo.com https://cdn.jsdelivr.net *.fontawesome.com *.gstatic.com *.trustpilot.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.lustytoys.nl lustytoys.nl *.sextoyland.nl *.mistermitch.nl *.poppers-online.nl *.lingerie-heaven.nl 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com wss://chat.belco.io https://cdn.belco.io *.belco.io bam-cell.nr-data.net *.googlesyndication.com *.cookiebot.com *.doubleclick.net *.ahrefs.com *.beslist.nl *.visualwebsiteoptimizer.com *.thuiswinkel-cdn.org *.hotjar.io *.bing.net *.feedbackcompany.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ t.elasticsuite.io *.hsforms.net *.hsforms.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.google-analytics.com *.feedbackcompany.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-ancestors 'self' https://*.intimatemerger.com https://*.im-apps.net; 1
default-src 'self' https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://c.seznam.cz https://*.heureka.cz https://www.heureka.sk https://*.heureka.group https://im9.cz https://bat.bing.com https://tracking.srovname.cz https://googleads.g.doubleclick.net https://www.googleadservices.com https://widget.packeta.com https://backup.widget.packeta.com https://www.ppl.cz https://ai.solar-station.cz https://*.clarity.ms https://www.zbozi.cz; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; worker-src 'self' blob:; frame-src 'self' data: https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://connect.facebook.net https://www.facebook.com https://www.googletagmanager.com https://c.seznam.cz https://*.heureka.cz https://widget.packeta.com https://backup.widget.packeta.com https://www.ppl.cz https://b2c.cpost.cz https://www.openstreetmap.org https://myaccount.google.com; connect-src 'self' data: https://google.com https://www.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net https://www.facebook.com https://c.seznam.cz https://www.gstatic.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://bat.bing.com https://tracking.srovname.cz https://*.heureka.cz https://www.heureka.sk https://im9.cz https://*.heureka.group https://*.clarity.ms https://*.analytics.google.com https://*.google-analytics.com https://bat.bing.net https://ai.solar-station.cz https://h.seznam.cz https://pagead2.googlesyndication.com https://ad.doubleclick.net https://widget.packeta.com https://backup.widget.packeta.com https://www.ppl.cz https://api.dhl.com https://analytics.google.com https://translate.googleapis.com https://translate-pa.googleapis.com https://www.google.cz https://www.google.sk https://www.google.de https://www.google.pl https://www.google.at https://www.google.hu https://www.google.com https://www.google.co.uk https://www.google.ie https://www.google.nl https://www.google.be https://www.google.fr https://www.google.es https://www.google.pt https://www.google.it https://www.google.ch https://www.google.dk https://www.google.se https://www.google.no https://www.google.fi https://www.google.ee https://www.google.lv https://www.google.lt https://www.google.is https://www.google.hr https://www.google.si https://www.google.rs https://www.google.ro https://www.google.bg https://www.google.gr https://www.google.com.tr https://www.google.com.ua https://www.google.lu https://www.google.ru https://www.google.tn; report-uri /csp-report.php; report-to csp-endpoint 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com fonts.googleapis.com *.googleapis.com data: https://fonts.gstatic.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.cloudfront.net *.reviews.io *.reviews.co.uk *.charlesbentley.com *.bam.nr-data.net *.klarnacdn.net *.cloudflare.com *.twitter.com *.bootstrapcdn.com *.trustpilot.com *.paypal.com *.xtento.com *.klaviyo.com *.photoslurp.com pouch-global-font-assets.s3.eu-central-1.amazonaws.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.reviews.io *.reviews.co.uk *.facebook.com *.charlesbentley.com *.bam.nr-data.net *.webchat.dotdigital.com *.trustpilot.com *.xtento.com *.apata.io *.bibd.com.bn *.cardcenter.ch *.danskebank.com *.enfuce.com *.marqeta.com *.visa.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.instagram.com www.google.com *.weltpixel.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.reviews.io *.reviews.co.uk *.wesupply.xyz https://wesupplylabs.com *.googletagmanager.com *.doubleclick.net *.typeform.com *.charlesbentley.com *.bam.nr-data.net *.adyen.com *.sandbox.paypal.com api.sandbox.braintreegateway.com *.klarna.com *.g.doubleclick.net/ *.amazon.com *.trustpilot.com *.addthis.com *.sharethis.com *.demdex.net *.facebook.com *.pinterest.com *.clarity.ms *.hotjar.com *.xtento.com www.xtento.com *.apata.io *.bibd.com.bn *.cardcenter.ch *.danskebank.com *.enfuce.com *.visa.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.cdninstagram.com *.fbcdn.net/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ mageside.com https://scontent-bom1-1.cdninstagram.com/ https://scontent-bom2-2.xx.fbcdn.net https://scontent-bom1-2.cdninstagram.com https://scontent-bom1-2 ftcdn.net https://scontent-bom1-2.xx.fbcdn.net/ https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudfront.net *.reviews.io *.reviews.co.uk www.google.com.ua *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com *.charlesbentley.com *.bam.nr-data.net *.quora.com *.bing.com *.linkedin.com t.co *.quantserve.com *.google.co.in *.google.co.uk *.cloudflare.com *.googleadservices.com *.twitter.com *.postcodeanywhere.co.uk *.pcapredict.com *.sharethis.com *.cookiepro.com *.amazonaws.com *.pinterest.com *.trustpilot.com *.clarity.ms www.xtento.com *.pallex.com *.prfct.co *.adnxs.com *.rubiconproject.com *.openx.net *.addthis.com *.yahoo.com *.omtrdc.net cdn.xtento.com *.bing.net *.fbcdn.net *.flbx.io www.google.ad www.google.al www.google.at www.google.az www.google.ba www.google.bg www.google.bs www.google.by www.google.cd www.google.ch www.google.ci www.google.cl www.google.co.ao www.google.co.bw www.google.co.cr www.google.co.ke www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ag www.google.com.ar www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.co www.google.com.cy www.google.com.do www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.pk www.google.com.pr www.google.com.qa www.google.com.sa www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.uy www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.dk www.google.dz www.google.ee www.google.fi www.google.ge www.google.gg www.google.im www.google.iq www.google.is www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lu www.google.md www.google.me www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.no www.google.ps www.google.ro www.google.rw www.google.sc www.google.si www.google.sn www.google.sr www.google.tn www.google.tt google.com *.googlesyndication.com *.instagram.com media *.photoslurp.com *.tiktok.com *.tiktokw.us data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com *.instagram.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.reviews.io *.reviews.co.uk *.cloudflare.com 'self' data: https://ajax.googleapis.com/ *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com *.charlesbentley.com *.bam.nr-data.net *.windows.net *.jquery.com *.klarnaservices.com *.klarnacdn.net *.sandbox.paypal.com *.postcodeanywhere.co.uk *.pcapredict.com *.sharethis.com *.cloudfront.net porjs.com *.chat.freshdesk.com *.trustpilot.com *.cookiepro.com xtento.com *.bing.com *.hotjar.com *.pinimg.com *.perk0mean.com *.clarity.ms *.aptrinsic.com *.paypalobjects.com *.google-analytics.com *.salesfire.co.uk *.addtoany.com *.freshworks.com *.freshmarketer.com *.marketingautomation.services *.perfectaudience.com *.prfct.co *.pinterest.com *.tumblr.com *.facebook.com *.pingdom.net www.xtento.com cdn.xtento.com *.bing-int.com *.getflowbox.com *.googlesyndication.com *.photoslurp.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com https://static.klaviyo.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.googleapis.com *.addtoany.com assets.braintreegateway.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.tagmanager.google.com *.googletagmanager.com *.typeform.com *.charlesbentley.com *.bam.nr-data.net *.klarnacdn.net *.trustpilot.com *.yotpo.com *.twitter.com *.bootstrapcdn.com *.gstatic.com *.typekit.net *.postcodeanywhere.co.uk *.pcapredict.com *.chat.freshdesk.com *.cookiepro.com *.paypal.com *.xtento.com *.widget.freshworks.com *.freshworks.com *.aptrinsic.com *.klaviyo.com *.photoslurp.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com https://scontent-bom1-2.cdninstagram.com/ *.flbx.io 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.salesfire.co.uk api.addressy.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io http://dpm.demdex.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cloudfront.net *.reviews.io *.reviews.co.uk 'unsafe-inline' data: 'unsafe-inline' blob: *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com *.charlesbentley.com *.bam.nr-data.net *.klarnaservices.com *.klarnaevt.com *.sandbox.paypal.com *.g.doubleclick.net/ *.facebook.com *.postcodeanywhere.co.uk *.cookiepro.com *.sharethis.com *.chat.freshdesk.com *.trustpilot.com geolocation.onetrust.com *.pinterest.com *.clarity.ms *.hotjar.com *.aptrinsic.com *.xtento.com *.widget.freshworks.com *.freshworks.com *.googletagmanager.com *.googleadservices.com *.dpm.demdex.net *.live.smartmetrics.co.uk *.smartmetrics.co.uk *.hit.salesfire.co.uk *.stbuttons.click *.gstatic.com *.addtoany.com *.bing.com *.bing-int.com *.bing.net www.google.ad www.google.al www.google.at www.google.az www.google.bg www.google.bs www.google.by www.google.ch www.google.ci www.google.cl www.google.co.ao www.google.co.cr www.google.co.ke www.google.co.ma www.google.com.af www.google.com.ag www.google.com.ar www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.co www.google.com.cy www.google.com.do www.google.com.eg www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.mt www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.pk www.google.com.pr www.google.com.qa www.google.com.sa www.google.com.tr www.google.com.tw www.google.com.uy www.google.co.ug www.google.co.zm www.google.co.zw www.google.cz www.google.dk www.google.dz www.google.ee www.google.fi www.google.ge www.google.gg www.google.im www.google.iq www.google.is www.google.je www.google.jo www.google.kg www.google.kz www.google.lu www.google.md www.google.mu www.google.mv www.google.no www.google.ps www.google.ro www.google.rw www.google.sc www.google.si www.google.sn www.google.tn www.google.tt *.googlesyndication.com *.photoslurp.com *.tiktokw.us 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://cuatro.sim-cdn.nl; img-src * data: blob:; style-src * 'unsafe-inline' blob: https://cuatro.sim-cdn.nl; font-src 'self' data: https://fonts.bunny.net https://fonts.gstatic.com https://cuatro.sim-cdn.nl https://cuatro.sim-cdn-acceptatie.nl https://cuatro.sim-cdn-test.nl; script-src 'nonce-OTcxMzFkY2MtOTJkNi00MjViLWE3NzctYmM0ZmFiYzk4NDRm' 'strict-dynamic' 'report-sample'; connect-src *; form-action 'self'; media-src https://*.readspeaker.com https://*.streamlock.net https://storage.googleapis.com https://scribit-pro-hosting.storage.googleapis.com https://scribit-pro.storage.googleapis.com https://app.talkjs.com 'self' blob:; frame-src *; frame-ancestors 'self' https://*.polly.help; worker-src * 'unsafe-inline' blob:; report-uri /api/csp-report 1
font-src fonts.gstatic.com use.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com maxcdn.bootstrapcdn.com https://fonts.gstatic.com *.livechatinc.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.lightboxcdn.com ezup.com *.ezup.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.twitter.com *.authorize.net *.payfabric.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com *.salesforce.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com *.authorize.net *.stripe.com stripe.com *.bolt.com connect.bolt.com *.transifex.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.dotdigital-pages.com *.dotdigital.com www.google.com *.google.com *.doubleclick.net www.facebook.com *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com webchat.dotdigital.com webchat.staging.dotdigital.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com chart.googleapis.com *.youtube.com/ *.authorize.net *.payfabric.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://plumrocket.com *.livechatinc.com *.artifi.net gum.criteo.com *.criteo.net *.pepperjam.com *.pepperjamnetwork.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.yotpo.com *.salesforce.com *.bolt.com *.criteo.com *.transifex.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.trackedlink.net 'self' data: *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.certcapture.com connect.bolt.com connect-sandbox.bolt.com s3-us-west-1.amazonaws.com connect.facebook.net graph.facebook.com business.facebook.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.payfabric.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com ezup.nl ezup.fr ezup.eu ezup.de *.cookiepro.com ezup.com *.ezup.com *.inspectlet.com *.google.com.sg *.bing.com *.linkedin.com *.stickyadstv.com *.smartadserver.com *.bidswitch.net *.adnxs.com *.media.net *.rubiconproject.com *.sharethrough.com *.taboola.com *.teads.tv *.3lift.com *.yahoo.com *.socdm.com *.criteo.com *.casalemedia.com *.dable.io *.adingo.jp *.360yield.com *.rlcdn.com *.mediavine.com *.outbrain.com *.pubmatic.com *.clmbtech.com *.yieldmo.com *.bluekai.com *.aralego.com *.adhaven.com *.sitescout.com *.tapad.com *.deepintent.com *.smaato.net *.everesttech.net *.krxd.net *.aralego.net *.crwdcntrl.net *.1rx.io *.artifi.net *.searchspring.io *.cloudfront.net *.ivitrack.com *.liadm.com *.postrelease.com *.revcontent.com *.tremorhub.com *.mediawallahscript.com *.omnitagjs.com *.agkn.com *.tpmn.co.kr *.hsforms.net *.hsforms.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.nr-data.net *.boast.io *.amazonaws.com blob: *.bolt.com *.googlesyndication.com *.lightboxcdn.com *.googleusercontent.com google.com *.reddit.com *.clarity.ms data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net use.typekit.net *.magento-datasolutions.com *.magento-ds.com https://rum.hlx.page *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com www.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com webchat.dotdigital.com webchat.staging.dotdigital.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com chart.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.nr-data.net *.newrelic.com *.authorize.net *.payfabric.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://cdn.searchspring.net/intellisuggest/is.min.js *.searchspring.io *.cookiepro.com *.livechatinc.com *.artifi.net *.maxmind.com *.bing.com *.pepperjam.com *.licdn.com *.criteo.com *.inspectlet.com *.ezup.com *.pardot.com *.envolvetech.com *.zoominfo.com *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net *.boast.io *.bolt.com *.lightboxcdn.com *.jquery.com *.posthog.com *.transifex.net *.transifex.com *.reddit.com *.redditstatic.com *.impactcdn.com *.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.certcapture.com webchat.dotdigital.com webchat.staging.dotdigital.com *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com https://fonts.googleapis.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.lightboxcdn.com *.ezup.com 'self' 'unsafe-inline'; object-src connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com maps.googleapis.com chart.googleapis.com *.bolt.com 'self' 'unsafe-inline'; media-src *.adobe.com *.ezup.com blob: *.bolt.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com commerce.adobe.io performance.typekit.net *.magento-datasolutions.com *.magento-ds.com *.adobe.io *.sentry.io *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.google-analytics.com www.facebook.com *.facebook.net *.google.com *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com sessions.bugsnag.com webchat.dotdigital.com webchat.staging.dotdigital.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com chart.googleapis.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.googleadservices.com *.sandbox.paypal.com *.paypalobjects.com *.nr-data.net *.newrelic.com *.ampproject.org *.authorize.net *.payfabric.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com google.com https://beacon.searchspring.io/beacon *.cookiepro.com *.searchspring.io geoip-js.com *.inspectlet.com *.doubleclick.net *.livechatinc.com *.oribi.io *.trustpilot.com *.criteo.com *.appspot.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com *.zoominfo.com *.boast.io *.amazonaws.com *.bolt.com *.googlesyndication.com *.googleusercontent.com *.lightboxcdn.com *.linkedin.com *.transifex.net *.posthog.com *.reddit.com *.clarity.ms 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com *.bolt.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
img-src 'self' 127.0.0.1:10000 trygno22dev-main.azurewebsites.net trygno22uat.azurewebsites.net trygno22webprod01.azurewebsites.net trygno22dev.blob.core.windows.net trygno22uat.blob.core.windows.net trygno22prod.blob.core.windows.net cdnjs.cloudflare.com trygvesta.d1.sc.omtrdc.net px.ads.linkedin.com adform.net bellmetric.net boost.ai doubleclick.net optimizely.com siteintercept.qualtrics.com tealiumiq.com telemetric.dk adservice.google.com connect.facebook.net facebook.com google.com google.dk googletagmanager.com policy.app.cookieinformation.com snap.licdn.com sso-idptrygno-test3.ujasiri.net cm.everesttech.net www.google.com www.facebook.com dpm.demdex.net www.google.no www.google.dk www.google.sk px4.ads.linkedin.com www.googletagmanager.com web.telemetric.dk trygno-media.ujasiri.net media.tryg.no maps.gstatic.com maps.googleapis.com *.zscloud.net gateway.zscloud.net www.google.nl data:; object-src 'none'; script-src * 'report-sample' 'unsafe-inline' 'unsafe-eval'; style-src * 'report-sample' 'unsafe-inline'; style-src-attr 'self' 'unsafe-inline'; worker-src 'self' blob:; base-uri 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://*.doubleclick.net https://challenges.cloudflare.com https://*.mul-pay.jp https://*.payments-amazon.com https://pay.google.com https://www.gstatic.com https://applepay.cdn-apple.com https://static.paypay.ne.jp https://js.stripe.com https://maps.googleapis.com https://maps.gstatic.com https://*.sitecorecloud.io https://sdk.form.run https://s.yimg.jp https://c.amazon-adsystem.com https://analytics.tiktok.com https://bat.bing.com https://cdn.taboola.com https://cdn.smartnews-ads.com https://d.line-scdn.net https://apps.rokt.com https://tag.eisa.mercari.com https://static.ads-twitter.com https://www.clarity.ms https://scripts.clarity.ms https://b99.yahoo.co.jp https://trc.taboola.com https://apps.rokt-api.com https://pi.pardot.com https://info.japanforunhcr.org; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.sitecorecloud.io https://cdn.jsdelivr.net; font-src 'self' data: https://fonts.gstatic.com https://applepay.cdn-apple.com https://form.run https://*.form.run; img-src 'self' data: blob: https:; media-src 'self' https:; worker-src 'self' blob:; connect-src 'self' https:; frame-src 'self' https://www.googletagmanager.com https://challenges.cloudflare.com https://js.stripe.com https://hooks.stripe.com https://*.payments-amazon.com https://pay.google.com https://*.paypay.ne.jp https://www.google.com https://td.doubleclick.net https://www.youtube.com https://www.youtube-nocookie.com https://info.japanforunhcr.org https://form.run https://*.form.run https://www.facebook.com; object-src 'none'; base-uri 'self'; report-uri /api/csp-report 1
font-src use.typekit.net fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.iubenda.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.iubenda.com https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.googletagmanager.com cdn.iubenda.com secure.metricsglobalgateway.com *.iubenda.com *.avada.io *.alothemes.com *.magepow.com player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com use.typekit.net fonts.googleapis.com *.google-analytics.com https://p.typekit.net https://use.typekit.net secure.metricsglobalgateway.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google-analytics.com secure.metricsglobalgateway.com *.iubenda.com https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com maps.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; script-src 'self' 'nonce-{RANDOM}' 'strict-dynamic' https://www.googletagmanager.com https://www.google-analytics.com https://js.hubspot.com https://*.hubspot.com https://*.hubspotusercontent-na1.net 'nonce-lWQdufhlZ2TLlB9bq6cnuA=='; connect-src 'self' https://*.google-analytics.com https://region1.analytics.google.com https://*.googletagmanager.com https://*.hubspot.com https://*.hubspotusercontent-na1.net; style-src 'self' 'unsafe-inline' https://*.hubspotusercontent-na1.net; img-src 'self' data: https://*.google-analytics.com https://*.googletagmanager.com https://*.hubspot.com https://*.hubspotusercontent-na1.net; font-src 'self' https://*.hubspotusercontent-na1.net; frame-src https://*.hubspot.com https://*.googletagmanager.com; object-src 'none'; frame-ancestors 'self'; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://*.googlesyndication.com https://*.doubleclick.net https://*.adtrafficquality.google https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://cse.google.com https://fundingchoicesmessages.google.com https://csi.gstatic.com https://unpkg.com; style-src 'self' 'unsafe-inline' https://unpkg.com https://www.google.com https://www.gstatic.com https://fonts.googleapis.com https://fundingchoicesmessages.google.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com https://fundingchoicesmessages.google.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googlesyndication.com https://*.doubleclick.net https://*.adtrafficquality.google https://nominatim.openstreetmap.org https://cse.google.com https://www.google.com https://fundingchoicesmessages.google.com https://csi.gstatic.com; frame-src 'self' blob: https://*.googlesyndication.com https://*.doubleclick.net https://*.adtrafficquality.google https://www.google.com https://fundingchoicesmessages.google.com; manifest-src 'self'; object-src 'none'; base-uri 'self'; report-uri /csp-report/ 1
default-src 'self';base-uri 'self';font-src 'self' https: http: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data: blob: https: http:;object-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http:;script-src-attr 'none';style-src 'self' 'unsafe-inline' https: http:;upgrade-insecure-requests;media-src 'self' https: http: blob:;frame-src 'self' https: http:;connect-src 'self' https: http: ws: wss: 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com https://www.googletagmanager.com https://*.googlesyndication.com https://*.doubleclick.net https://*.googleadservices.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.googlesyndication.com https://*.doubleclick.net; frame-src 'self' https://*.googlesyndication.com https://*.doubleclick.net; media-src 'self' blob: https:; worker-src 'self' blob:; manifest-src 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://stats.schwabach.de https://static.b-ite.com https://cs-assets.b-ite.com https://cdn.eye-able.com https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net https://code.jquery.com; style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://cdn.eye-able.com; img-src 'self' data: https:; font-src 'self' data: https://maxcdn.bootstrapcdn.com; connect-src 'self' https://stats.schwabach.de https://jobs.b-ite.com; object-src 'self' https://geoportal.schwabach.de; frame-src 'self' https://www.google.com https://geoportal.schwabach.de https://parking.daven.online; frame-ancestors 'self'; report-uri /csp-report.php 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:; style-src 'self' 'unsafe-inline' https:; img-src * data: blob:; font-src 'self' data: https:; media-src 'self' data: blob:; worker-src 'self' blob:; connect-src 'self' https://*.google-analytics.com https://*.doubleclick.net https://*.googletagmanager.com https://*.googlesyndication.com https://*.clarity.ms https://*.stripe.com https://m.stripe.network https://stats.wp.com https://*.paypal.com https://*.paypalobjects.com; frame-src 'self' https://widgets.wp.com https://wordpress.com https://*.stripe.com https://m.stripe.network https://*.paypal.com https://*.youtube.com https://*.youtube-nocookie.com https://*.lemonsqueezy.com https://checkout.freemius.com https://platform.twitter.com; object-src 'none'; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://www.getpagespeed.com https://www.paypal.com https://checkout.stripe.com 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com *.alothemes.com *.magepow.com *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.affirm.com *.affirm.ca www.facebook.com platform.twitter.com *.tawk.to *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.apptrian.com *.affirm.com *.affirm.ca https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com *.alothemes.com *.magepow.com *.tawk.to *.clarity.ms blob: store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com https://maps.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com *.affirm.com *.affirm.ca https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ connect.facebook.net twitter.com platform.twitter.com *.alothemes.com *.magepow.com cdn.jsdelivr.net www.clarity.ms *.tawk.to wss://*.tawk.to player.vimeo.com *.adobedtm.com *.cardinalcommerce.com *.ccdc02.com *.paypal.com *.ytimg.com vimeocdn.com *.aptrinsic.com *.braintreegateway.com *.gstatic.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com maxcdn.bootstrapcdn.com *.alothemes.com *.magepow.com *.tawk.to cdn.jsdelivr.net *.aptrinsic.com assets.braintreegateway.com *.gstatic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://maps.googleapis.com https://player.vimeo.com www.apptrian.com *.affirm.com *.affirm.ca https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.alothemes.com *.magepow.com *.tawk.to wss://*.tawk.to *.clarity.ms *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.googleapis.com *.gstatic.com data: *.fontawesome.com *.cloudflare.com *.matcha.wine *.avis-verifies.com *.doofinder.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.avis-verifies.com *.cookiebot.com *.dwin1.com *.awin1.com *.zenaps.com *.sciencebehindecommerce.com *.doofinder.com *.mainadv.com *.redintelligence.net *.pinterest.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com www.googletagmanager.com *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.ftcdn.net *.behance.net *.gstatic.com *.googleapis.com a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org *.doofinder.com *.cloudflare.com *.matcha.wine *.avis-verifies.com bat.bing.com lantern.roeye.com imgsct.cookiebot.com www.zenaps.com www.awin1.com trc.taboola.com *.google.fr *.googlesyndication.com *.facebook.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.doofinder.com *.cloudflare.com *.matcha.wine *.avis-verifies.com *.cookiebot.com *.dwin1.com *.awin1.com *.zenaps.com *.sciencebehindecommerce.com *.bing.com *.roeyecdn.com *.advcredirect.com *.clarity.ms *.pinimg.com *.pinterest.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.doofinder.com *.fontawesome.com *.cloudflare.com *.matcha.wine *.avis-verifies.com https://static.klaviyo.com maxcdn.bootstrapcdn.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.googleapis.com *.doofinder.com wss://*.doofinder.com *.cloudflare.com *.matcha.wine *.avis-verifies.com *.cookiebot.com *.dwin1.com *.awin1.com *.zenaps.com *.sciencebehindecommerce.com psb.taboola.com pips.taboola.com cds.taboola.com bat.bing.com lantern.roeye.com lantern.roeyecdn.com mainadv.com widget.trustpilot.com region1.analytics.google.com sb.advcredirect.com *.redintelligence.net mpc-prod-18-s6uit34pua-uc.a.run.app demo-1.conversionsapigateway.com www.google.com www.google.fr *.clarity.ms *.googlesyndication.com *.pinterest.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';         script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.datadoghq-browser-agent.com https://assets.juicer.io blob:;         script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.datadoghq-browser-agent.com https://assets.juicer.io https://cdn.cookielaw.org;         style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net https://assets.juicer.io https://cdn.jsdelivr.net;         font-src 'self' https://use.typekit.net https://p.typekit.net https://static.juicer.io https://cdnjs.cloudflare.com;             frame-src 'self' https://www.youtube.com https://player.vimeo.com https://www.googletagmanager.com;             connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://*.datadoghq.com https://www.juicer.io https://pagead2.googlesyndication.com https://browser-intake-datadoghq.com;         img-src * 'self' data: https://www.googletagmanager.com;             sandbox allow-same-origin allow-scripts allow-forms allow-downloads allow-popups;             report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub8e097a5df101cb2d59c04c3029e9a75b%26dd-evp-origin=content-security-policy%26ddsource=csp-report; 1
font-src maxcdn.bootstrapcdn.com https://use.fontawesome.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.googletagmanager.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com magefan.com cm.magefan.com *.disqus.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://widgets.binotel.com *.disqus.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src maxcdn.bootstrapcdn.com https://widgets.binotel.com https://use.fontawesome.com https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net https://olegnax.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src *.noibu.com; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.fontawesome.com *.googleapis.com www.google.com www.gstatic.com *.bootstrapcdn.com *.paypalobjects.com *.gladly.com *.cookielaw.org data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://plumrocket.com *.cardinalcommerce.com *.cardinaltrusted.com *.facebook.com *.facebook.net *.yotpo.com *.listrakbi.com *.cookielaw.org *.tilebar-vis.com *.byondxr.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app www.google.com *.affirm.com *.affirm.ca https://plumrocket.com *.weltpixel.com cdn.cardknox.com *.cardinalcommerce.com *.cardinaltrusted.com pay.google.com *.solapayments.com *.cardknox.com photos.pixlee.co *.facebook.com *.paypalobjects.com *.yotpo.com *.vimeo.com vimeo.com *.googletagmanager.com *.xtento.com *.doubleclick.net *.gladly.com *.optimizely.com *.creativecdn.com *.pinterest.com *.listrakbi.com *.cookielaw.org *.noibu.com *.tilebar-vis.com *.byondxr.com sketchfab.com c.paypal.com checkout.paypal.com assets.braintreegateway.com * speedsize.com *.speedsize.com www.xtento.com 'self' 'unsafe-inline'; img-src *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app www.apptrian.com *.affirm.com *.affirm.ca www.gstatic.com *.solapayments.com *.cardknox.com wac.edgecastcdn.net *.googleadservices.com *.facebook.com *.yotpo.com *.cdninstagram.com *.google-analytics.com *.google.com *.google.com.vn *.google.co.il *.google.com.sg *.google.co.uk *.google.de *.magentocommerce.com *.paypalobjects.com *.ytimg.com *.web-view.net *.googleapis.com *.nagich.co.il vimeo.com *.vimeo.com *.tilebar.com *.zdassets.com *.pxlecdn.com *.cloudfront.net *.roomvo.com *.tilebar-vis.com *.byondxr.com *.searchspring.net *.gladly.com *.edgecastcdn.net *.doubleclick.net *.bing.com *.pinterest.com *.optimizely.com *.adnxs.com *.pubmatic.com *.adingo.jp *.adingo.com *.creativecdn.com *.yahoo.com *.yahoo.net *.33across.com *.mobon.net *.seedtag.com *.clarity.ms *.brcdn.com *.brsrvr.com *.listrakbi.com *.cookielaw.org www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://redchamps.com speedsize.com *.speedsize.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com *.affirm.com *.affirm.ca https://cdn.cardknox.com/ifields/3.3.2601.2901/ifields.min.js https://cdn.cardknox.com/sdk-3ds/1.1.2601.0701/cardknox-3ds.min.js *.googleapis.com *.gstatic.com cdn.cardknox.com *.cardinalcommerce.com *.cardinaltrusted.com www.gstatic.com *.solapayments.com *.cardknox.com *.turnto.com *.fontawesome.com *.google-analytics.com apis.google.com *.googleadservices.com *.googletagmanager.com *.facebook.net *.doubleclick.net *.analytics.com *.rawgit.com *.nagich.co.il *.luckyorange.com *.xtento.com *.paypal.com *.paypalobjects.com *.forsixty.com *.criteo.com *.searchspring.io *.searchspring.net *.roomvo.io *.roomvo.com *.cloudflareinsights.com *.optimizely.com *.pixlee.com *.pxlecdn.com *.tilebar-vis.com *.byondxr.com *.cloudflare.com *.gladly.com *.smooch.io *.bing.com *.creativecdn.com *.pinimg.com *.particularaudience.com *.googletagservices.com *.googlesyndication.com cnstrc.com getrockerbox.com/ *.adnxs.com *.adingo.jp *.adingo.com *.cnstrc.com *.tilebar.com *.pinterest.com *.callrail.com *.clarity.ms *.algoliaradar.com *.brcdn.com *.listrakbi.com *.cloudfront.net *.cookielaw.org *.noibu.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com speedsize.com *.speedsize.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com cdn.cardknox.com/ *.turnto.com *.bootstrapcdn.com *.cloudflare.com *.gladly.com *.brcdn.com *.listrakbi.com *.cookielaw.org *.typekit.net assets.braintreegateway.com speedsize.com *.speedsize.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com speedsize.com *.speedsize.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com www.apptrian.com *.affirm.com *.affirm.ca http://dpm.demdex.net https://api.cardknox.com/threeds/v1/jwt/staging https://kg668dbov0.execute-api.us-east-1.amazonaws.com/stag/log https://www.google.com https://www.gstatic.com api.cardknox.com *.cardinalcommerce.com *.cardinaltrusted.com kg668dbov0.execute-api.us-east-1.amazonaws.com pay.google.com play.google.com cdn.cardknox.com/ *.turnto.com *.doubleclick.net *.analytics.com *.facebook.com *.google-analytics.com *.nagich.co.il player.vimeo.com *.luckyorange.com *.googleapis.com *.visitors.live *.zdassets.com *.searchspring.io *.searchspring.net *.roomvo.io *.roomvo.com cloudflareinsights.com *.cloudflareinsights.com *.optimizely.com *.tilebar-vis.com *.byondxr.com unpkg.com *.unpkg.com *.gladly.com *.smooch.io *.creativecdn.com *.pinimg.com *.particularaudience.com *.googletagservices.com *.googlesyndication.com *.pinterest.com *.cnstrc.com *.cardknox.com *.clarity.ms *.pixlee.com *.algolia.io *.listrakbi.com *.betanetqa.me *.cloudflare.com *.cookielaw.org https://*.noibu.com wss://*.noibu.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com speedsize.com *.speedsize.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src speedsize.com *.speedsize.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri /bnews/csp/report; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.googleapis.com *.livechatinc.com email.filmtools.com *.contivio.com use.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://www.shopperapproved.com email.filmtools.com 'self' connect.facebook.net graph.facebook.com business.facebook.com *.punchout2go.com *.tradecentric.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://static.addtoany.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.affirm.com *.affirm.ca *.certcapture.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com www.facebook.com *.eventbrite.com docs.google.com *.livechatinc.com email.filmtools.com *.weltpixel.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.punchout2go.com *.tradecentric.com *.googletagmanager.com *.doubleclick.net https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.affirm.com *.affirm.ca *.certcapture.com *.trackedlink.net https://www.shopperapproved.com *.amazon-adsystem.com *.filmtools.com *.facebook.net *.facebook.com maps.googleapis.com maps.gstatic.com *.zmags.com bam.nr-data.net email.filmtools.com *.contivio.com *.shopperapproved.com *.answerbase.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.reddit.com *.bing.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page https://static.addtoany.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.affirm.com *.affirm.ca *.certcapture.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com https://www.shopperapproved.com https://direct.shopperapproved.com *.livechatinc.com www.facebook.com *.eventbrite.com *.zmags.com bam.nr-data.net email.filmtools.com *.contivio.com *.shopperapproved.com *.answerbase.com https://cdnjs.cloudflare.com cdnjs.cloudflare.com connect.facebook.net graph.facebook.com business.facebook.com *.punchout2go.com *.tradecentric.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.bing.com *.clarity.ms unpkg.com *.doubleclick.net https://cdn-scripts.signifyd.com https://imgs.signifyd.com https://h64.online-metrix.net https://maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com assets.braintreegateway.com *.certcapture.com webchat.dotdigital.com webchat.staging.dotdigital.com *.zmags.com email.filmtools.com *.contivio.com *.shopperapproved.com *.answerbase.com use.fontawesome.com https://cdnjs.cloudflare.com cdnjs.cloudflare.com *.punchout2go.com *.tradecentric.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.livechatinc.com email.filmtools.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://stats.addtoany.com/menu api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.affirm.com *.affirm.ca *.certcapture.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.doubleclick.net maps.googleapis.com *.zmags.com bam.nr-data.net *.livechatinc.com email.filmtools.com *.googlesyndication.com www.facebook.com *.shopperapproved.com *.answerbase.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.bing.com *.clarity.ms *.run.app https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google.com https://api.glia.com https://cdn.timetrade.com https://www04.timetrade.com https://integration.silvercloudinc.com https://js.hs-scripts.com https://js.hsforms.net https://www.timevaluecalculators.com; style-src 'self' 'unsafe-inline' https://integration.silvercloudinc.com; img-src 'self' data: https://api.glia.com https://cdn.timetrade.com https://www.facebook.com https://www.google.com https://www.googletagmanager.com https://24155691.fs1.hubspotusercontent-na1.net; font-src 'self' data:; frame-src 'self' https://www.googletagmanager.com https://www.google.com https://www.youtube.com https://maps.googleapis.com https://autobooks.hubs.vidyard.com https://share.vidyard.com; connect-src 'self' https://online.communitychoicecu.com https://ipn4.paymentus.com https://app.loanspq.com https://communitychoice.pos.firstclose.com https://cu.memberfirst.com https://memberfirstmortgage.com https://communitychoice.ourreferralengine.com https://info.communitychoicecu.com https://echat.communitychoicecu.info https://maps.googleapis.com https://*.gstatic.com https://www.googletagmanager.com https://api.glia.com https://www04.timetrade.com; frame-ancestors 'self' 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' 'unsafe-hashes' 'strict-dynamic' 'report-sample' https://cdnjs.cloudflare.com https://challenges.cloudflare.com https://static.addtoany.com https://use.fontawesome.com platform.instagram.com platform.twitter.com; script-src-attr 'self'; script-src-elem 'self' 'unsafe-inline' 'report-sample' https://www.googletagmanager.com https://www.google-analytics.com https://script.crazyegg.com https://snap.licdn.com https://static.hotjar.com https://googleads.g.doubleclick.net https://browser-update.org https://script.hotjar.com https://vidassets.terminus.services https://extend.vimeocdn.com https://cdnjs.cloudflare.com https://challenges.cloudflare.com https://static.addtoany.com https://use.fontawesome.com platform.instagram.com platform.twitter.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' 'report-sample' https://fonts.googleapis.com cdnjs.cloudflare.com https://cdnjs.cloudflare.com; style-src-attr 'self' 'unsafe-inline' 'unsafe-hashes' 'report-sample'; style-src-elem 'self' 'unsafe-inline' 'report-sample' https://fonts.googleapis.com https://use.fontawesome.com cdnjs.cloudflare.com https://cdnjs.cloudflare.com; frame-ancestors 'self' 1
font-src *.fontawesome.com *.fonts.googleapis.com *.gstatic.com data: *.cloudflare.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.google.com *.addthis.com *.pinterest.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.files-text.com *.livechatinc.com *.livechat-files.com *.livechat-static.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com *.cdninstagram.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinimg.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.livechatinc.com *.livechat-static.com *.mgt.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.instagram.com *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com *.maxmind.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.livechatinc.com *.fontawesome.com unsafe-inline assets.braintreegateway.com *.googleapis.com *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com *.typeform.com 'self' 'unsafe-inline'; object-src *.livechatinc.com 'self' 'unsafe-inline'; media-src *.adobe.com *.livechatinc.com *.livechat-static.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.livechatinc.com *.text.com https://get.geojs.io *.mgt.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.cloudflare.com *.googleapis.com *.addthis.com *.graph.instagram.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com *.mmapiws.com 'self' 'unsafe-inline'; child-src *.livechatinc.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-TdcbfYmEW8UCLQWeFgi6Ng' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://*.google.be https://www.googletagmanager.com https://*.gstatic.com https://*.google-analytics.com https://*.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://polyfill.io https://unpkg.com https://nap.licdn.com https://cookie-cdn.cookiepro.com https://fast.wistia.com https://pi.pardot.com https://*.fujirebio.com https://js.driftt.com https://snap.licdn.com https://code.jquery.com https://js.sentry-cdn.com https://browser.sentry-cdn.com https://*.bioz.com; object-src 'none' https://www.bioz.com; style-src 'unsafe-inline' 'self' https://fonts.googleapis.com https://cdn.cookielaw.org cdn.jsdelivr.net fonts.googleapis.com https://cdn.bioz.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://fast.wistia.com; img-src 'self' data: https://*.wistia.com https://px.ads.linkedin.com https://www.google.be https://www.google.com https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://region1.analytics.google.com https://www.google.fr https://cookie-cdn.cookiepro.com https://*.fujirebio.com https://cdn.bioz.com https://www.google.nl https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.google.hu https://px.ads.linkedin.com https://www.google.se https://www.google.es https://maps.gstatic.com https://maps.googleapis.com https://www.google.ch https://www.google.com.br https://analytics.google.com https://www.google.lu www.google.it; media-src 'self' blob: https://js.driftt.com https://*.wistia.com https://*.fujirebio.com; frame-src 'self' https://js.driftt.com https://*.google.com https://*.fujirebio.com https://*.bioz.com https://*.wistia.com; frame-ancestors 'self'; font-src 'self' data: https://use.typekit.net https://fonts.gstatic.com https://fonts.googleapis.com https://*.fontawesome.com https://fast.wistia.com https://cdn.bioz.com; connect-src 'self' https://geolocation.onetrust.com https://cookie-cdn.cookiepro.com https://*.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://fast.wistia.com https://embed-cloudfront.wistia.com https://distillery.wistia.com https://pipedream.wistia.com https://stats.g.doubleclick.net https://*.litix.io https://*.analytics.google.com https://analytics.google.com https://cdn.linkedin.oribi.io https://*.fujirebio.com https://px.ads.linkedin.com https://www.bioz.com https://privacyportal.cookiepro.com https://app.wistia.com https://www.google.com; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://lp.centralsquare.com https://munchkin.marketo.net https://code.jquery.com https://play.vidyard.com https://cdn.vidyard.com https://centralsquare.involve.me https://www.google-analytics.com https://connect.facebook.net https://scripts.clarity.ms https://www.clarity.ms https://bat.bing.com https://snap.licdn.com https://tag.demandbase.com; connect-src 'self' https://media.centralsquare.com https://lp.centralsquare.com https://*.mktoresp.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://o.clarity.ms https://b.clarity.ms https://bat.bing.com https://px.ads.linkedin.com https://api.company-target.com https://tag-logger.demandbase.com https://www.facebook.com https://www.google.com https://play.vidyard.com https://api.vidyard.com https://cdn.vidyard.com https://centralsquare.involve.me; img-src 'self' data: blob: https://media.centralsquare.com https://*.wpengine.com https://*.wpenginepowered.com https://d23goiqrzwakl9.cloudfront.net https://dcusr7imqcanq.cloudfront.net https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://www.facebook.com https://px.ads.linkedin.com https://id.rlcdn.com https://bat.bing.com https://www.google.com https://*.vidyard.com; media-src 'self' https://play.vidyard.com https://cdn.vidyard.com https://*.vidyard.com; frame-src 'self' https://www.googletagmanager.com https://play.vidyard.com https://centralsquare.involve.me https://*.involve.me; style-src 'self' 'unsafe-inline' https://lp.centralsquare.com; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://lp.centralsquare.com; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint 1
script-src 'self' 'nonce-KaG8fQEKnUjBeQfkLe8gIvF2XWLZFwDI' 'strict-dynamic' *.googletagmanager.com *.cookiebot.com *.googleapis.com *.google.com *.gstatic.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' res.cloudinary.com rimibaltic-web-res.cloudinary.com rimibaltic-res.cloudinary.com *.cookiebot.com *.googletagmanager.com *.googleapis.com *.gstatic.com *.google.com *.google.lv *.google.lt *.google.ee *.googleusercontent.com *.doubleclick.net *.googleadservices.com *.googlesyndication.com *.onrimi.net data: *.rimi.lv *.rimi.lt *.rimi.ee; form-action 'self'; base-uri 'self'; object-src 'none'; report-uri https://sentry.onrimi.net/api/25/security/?sentry_key=8e496e045aea8c4c78851b26c67ab67a&sentry_environment=production-azure-web&sentry_release=v1623-5bc59850563276ab520fc7e35fcb30602468a73a 1
default-src 'self' wss: *.gravatar.com *.civicplus.com *.civicplus.pro *.civic.place *.civicclerk.com engage6.azureedge.net *.audioeye.com *.pendo.io *.zdassets.com *.zendesk.com *.zopim.com *.arcgis.com *.arcgisonline.com *.services.visualstudio.com *.monitor.azure.com *.googleapis.com *.googletagmanager.com *.google-analytics.com use.fontawesome.com *.google.com *.gstatic.com gstatic.com cdnjs.cloudflare.com static.cloudflareinsights.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.publicstuff.com *.googletagmanager.com *.civicplus.com *.civicplus.pro *.civicclerk.com engage6.azureedge.net *.audioeye.com *.pendo.io *.zdassets.com *.zendesk.com *.zopim.com *.arcgis.com *.arcgisonline.com *.services.visualstudio.com *.monitor.azure.com *.googleapis.com *.googletagmanager.com *.google-analytics.com use.fontawesome.com *.google.com *.gstatic.com gstatic.com cdnjs.cloudflare.com static.cloudflareinsights.com connect.facebook.net static.addtoany.com https://widgets.nrel.gov *.openstreetmap.org cdn-images.mailchimp.com platform.twitter.com blob:; object-src 'self' 'unsafe-inline' 'unsafe-eval' translate.googleapis.com iframe.publicstuff.com; style-src 'self' 'unsafe-inline' iframe.publicstuff.com  *.civicplus.com *.civicplus.pro *.civicclerk.com *.civic.place engage6.azureedge.net *.audioeye.com *.pendo.io *.zdassets.com *.zendesk.com *.zopim.com *.arcgis.com *.arcgisonline.com *.services.visualstudio.com *.monitor.azure.com *.googleapis.com *.googletagmanager.com *.google-analytics.com use.fontawesome.com *.google.com *.gstatic.com gstatic.com cdnjs.cloudflare.com static.cloudflareinsights.com *.ctctcdn.com cdn-images.mailchimp.com data: *.typekit.net; img-src 'self' 'unsafe-inline' iframe.publicstuff.com *.civicplus.com *.civicplus.pro *.civicclerk.com *.civic.place engage6.azureedge.net *.audioeye.com *.pendo.io *.zdassets.com *.zendesk.com *.zopim.com *.arcgis.com *.arcgisonline.com *.services.visualstudio.com *.monitor.azure.com *.googleapis.com *.googletagmanager.com *.google-analytics.com use.fontawesome.com *.google.com *.gstatic.com gstatic.com cdnjs.cloudflare.com static.cloudflareinsights.com www.facebook.com https://widgets.nrel.gov www.facebook.com *.openstreetmap.org cdn-images.mailchimp.com i.ytimg.com data:; media-src 'self' translate.googleapis.com iframe.publicstuff.com data:; frame-src 'self' 'unsafe-inline' iframe.publicstuff.com *.youtube.com *.airtable.com *.swagit.com *.google.com *.civicplus.com *.novusagenda.com *.publicstuff.com *.audioeye.com acg.is *.maps.arcgis.com https://www.google.com/maps/embed *.googletagmanager.com https://www.youtube.com/embed https://www.youtube-nocookie.com/embed static.addtoany.com www.facebook.com m.facebook.com my.matterport.com ltfl.librarything.com player.vimeo.com *.granicus.com data:; frame-ancestors 'self' *.civicplus.com *.civicplus.pro *.civic.place *.civicclerk.com; child-src 'self' 'unsafe-inline' iframe.publicstuff.com *.youtube.com *.airtable.com *.swagit.com *.google.com *.civicplus.com *.novusagenda.com *.publicstuff.com *.audioeye.com acg.is *.maps.arcgis.com https://www.google.com/maps/embed *.googletagmanager.com https://www.youtube.com/embed https://www.youtube-nocookie.com/embed static.addtoany.com www.facebook.com m.facebook.com my.matterport.com ltfl.librarything.com player.vimeo.com *.granicus.com data:; font-src 'self' 'unsafe-inline' 'unsafe-eval' *.civicplus.com *.civicplus.pro *.civicclerk.com engage6.azureedge.net *.audioeye.com *.pendo.io *.zdassets.com *.zendesk.com *.zopim.com *.arcgis.com *.arcgisonline.com *.services.visualstudio.com *.monitor.azure.com *.googleapis.com *.googletagmanager.com *.google-analytics.com use.fontawesome.com *.google.com *.gstatic.com gstatic.com cdnjs.cloudflare.com static.cloudflareinsights.com user.govoutreach.com syndication.twitter.com data: *.typekit.net; connect-src 'self' 'unsafe-inline' iframe.publicstuff.com  *.civicplus.com *.civicplus.pro *.civic.place *.civicclerk.com engage6.azureedge.net *.audioeye.com *.pendo.io *.zdassets.com *.zendesk.com *.zopim.com *.arcgis.com *.arcgisonline.com *.services.visualstudio.com *.monitor.azure.com *.googleapis.com *.googletagmanager.com *.google-analytics.com use.fontawesome.com *.google.com *.gstatic.com gstatic.com cdnjs.cloudflare.com static.cloudflareinsights.com stats.g.doubleclick.net; report-uri /report-csp-violation 1
worker-src *.gemaire.com; font-src *.fontawesome.com use.typekit.net fonts.gstatic.com www.cvent-assets.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.certcapture.com *.weltpixel.com www.paypal.com www.sandbox.paypal.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com *.certcapture.com www.paypal.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gemaire.com www.google.pl cdn.cookielaw.org *.scene7.com/ maps.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.certcapture.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.avada.io *.gemaire.com cdnjs.cloudflare.com cdn.jsdelivr.net cdn.cookielaw.org cdn.rudderlabs.com js-agent.newrelic.com survey.survicate.com service.force.com gemaire.my.salesforce.com gemaire--develop.sandbox.my.site.com gemaire.my.site.com *.salesforceliveagent.com www.cvent.com www.cvent-assets.com maps.googleapis.com *.google-analytics.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.certcapture.com unsafe-inline assets.braintreegateway.com *.fontawesome.com *.gemaire.com use.typekit.net p.typekit.net fonts.googleapis.com fonts.gstatic.com www.cvent-assets.com service.force.com gemaire.secure.force.com gemaire.my.site.com gemaire--develop.sandbox.my.site.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.certcapture.com www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.gemaire.com browser-intake-datadoghq.com cdn.cookielaw.org *.google-analytics.com *.algolia.net *.algolianet.com stats.g.doubleclick.net api.rudderstack.com bam.nr-data.net js-agent.newrelic.com *.dataplane.rudderstack.com maps.googleapis.com www.cvent.com *.scene7.com *.onetrust.com gemaire.my.salesforce-scrt.com gemaire--develop.sandbox.my.salesforce-scrt.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
require-trusted-types-for 'script'; report-uri /api/report; report-to csp-endpoint 1
object-src 'none';base-uri 'self';script-src 'nonce-0zcI0v_VYzRCzYajVUPi5Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'self' 'unsafe-inline' https://js.stripe.com https://*.js.stripe.com https://applepay.cdn-apple.com https://core.spreedly.com https://js.authorize.net https://jstest.authorize.net https://api.convergepay.com https://api.demo.convergepay.com https://qpqs4phvrq5d.statuspage.io https://us-assets.i.posthog.com https://cdn.jsdelivr.net/npm/promise-polyfill@8/dist/polyfill.min.js; frame-src 'self' https://js.stripe.com https://*.js.stripe.com https://applepay.cdn-apple.com https://core.spreedly.com https://js.authorize.net https://jstest.authorize.net https://api.convergepay.com https://api.demo.convergepay.com https://hooks.stripe.com https://pay.google.com https://joinoffstreet.com https://offstreet.com https://www.offstreet.com https://qpqs4phvrq5d.statuspage.io; connect-src 'self' https://media.offstreet.io https://stripe.com https://*.stripe.com https://*.stripe.network https://core.spreedly.com https://plugins.spreedly.com https://js.authorize.net https://jstest.authorize.net https://api.authorize.net https://apitest.authorize.net https://api.convergepay.com https://api.demo.convergepay.com https://smp-paymentservices.apple.com https://qpqs4phvrq5d.statuspage.io https://browser-intake-us5-datadoghq.com https://*.datadoghq.com https://us-assets.i.posthog.com https://ogr-api.offstreet.io https://us.i.posthog.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; report-uri https://browser-intake-us5-datadoghq.com/api/v2/logs?dd-api-key=pub9050a6915f87edebe09fba137516bd22&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Aportal-v3%2Cenv%3Aproduction 1
worker-src blob:; font-src fonts.gstatic.com *.kxcdn.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://sandbox.cashfree.com https://api.cashfree.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com sandbox.cashfree.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com https://sandbox.cashfree.com https://www.cashfree.com https://payments.cashfree.com https://cdn.cashfree.com https://sdk.cashfree.com https://api.cashfree.com api.razorpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io cashfreelogo.cashfree.com *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.gstatic.com *.fbcdn.net blob: https://firebasestorage.googleapis.com cdn.razorpay.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com sdk.cashfree.com *.googleapis.com *.google.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com https://sdk.cashfree.com https://www.cashfree.com *.avada.io checkout.razorpay.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com https://sandbox.cashfree.com https://api.cashfree.com https://payments.cashfree.com https://get.geojs.io *.avada.io lumberjack.razorpay.com lumberjack-metrics.razorpay.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com *.cloudflare.com *.twitter.com *.certcapture.com *.twimg.com *.trustedshops.com *.zopim.com *.zopim.io https://use.fontawesome.com/ https://bam.nr-data.net/ *.sharethis.com https://applepay.cdn-apple.com/jsapi/v1/assets/1.0.0/fonts/en-US.woff https://applepay.cdn-apple.com/jsapi/v1/assets/1.0.0/fonts/en-US.woff2 https://maps.google.com *.livechatinc.com *.crwdcntrl.net *.bc0a.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.certcapture.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com https://www.youtube.com http://www.sandbox.paypal.com *.twitter.com *.certcapture.com *.amazonaws.com *.zendesk.com http://www.w3.org/2000/svg https://bam.nr-data.net/ *.sharethis.com https://maps.google.com *.livechatinc.com *.crwdcntrl.net *.bc0a.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.googleapis.com *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.certcapture.com *.amazonaws.com *.twimg.com *.vimeocdn.com  *.ytimg.com *.bing.com *.zopim.com *.zopim.io *.doubleclick.net *.google.com *.google.co.in *.mastercard.com http://www.w3.org/2000/svg https://bam.nr-data.net/ *.sharethis.com *.applepay.cdn-apple.com https://maps.google.com *.livechatinc.com *.crwdcntrl.net analytics.google.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com b.stats.paypal.com data.adxcel-ec2.com www.lionsden.com pixel.sitescout.com pixel.tapad.com secure.adnxs.com insight.adsrvr.org bob.dmpxs.com segment.prod.bid segment.prod.bidr.io su.addthis.com match.adsrvr.org ads.scorecardresearch.com eb2.3lift.com match.sync.ad.cpe.dotomi.com tags.rd.linksynergy.com dmp.truoptik.com i.liadm.com *.bc0a.com www.yextstatic.com us.yextevents.com tags.srv.stackadapt.com https://www.mollie.com www.sandbox.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page https://maps.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com *.gstatic.com *.cloudflare.com *.twitter.com *.certcapture.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bing.com *.zopim.com *.zdassets.com *.zendesk.com http://www.w3.org/2000/svg https://js-agent.newrelic.com/ https://bam.nr-data.net/ *.sharethis.com https://d35p4vvdul393k.cloudfront.net/sdk_library/us/stg/ops/pc_gsmpi_web_sdk.js https://maps.google.com *.livechatinc.com *.crwdcntrl.net *.basis.net *.cdn.bc0a.com *.secure.wufoo.com *.wufoo.com *.consents-cf.bc0a.com *.bc0a.com acsbapp.com *.acsbapp.com tags.srv.stackadapt.com js.adsrvr.org sites.yext.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.certcapture.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.fontawesome.com *.bing.com https://use.fontawesome.com/ https://bam.nr-data.net/ *.sharethis.com *.applepay.cdn-apple.com https://maps.google.com *.livechatinc.com *.crwdcntrl.net *.bc0a.com tags.srv.stackadapt.com https://fonts.googleapis.com maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.certcapture.com *.amazonaws.com *.zopim.com *.zopim.io https://static.zdassets.com/ https://bam.nr-data.net/ *.sharethis.com https://maps.google.com *.livechatinc.com *.crwdcntrl.net *.bc0a.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com www.google-analytics.com *.cloudflare.com *.twitter.com *.certcapture.com *.amazonaws.com *.twimg.com *.zdassets.com *.zopim.com *.zopim.io wss://widget-mediator.zopim.com https://stats.g.doubleclick.net *.zendesk.com http://www.w3.org/2000/svg https://bam.nr-data.net/ *.sharethis.com *.applepay.cdn-apple.com https://maps.google.com *.livechatinc.com *.crwdcntrl.net *.bc0a.com acsbapp.com *.acsbapp.com tags.srv.stackadapt.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://*.google-analytics.com https://maps.googleapis.com https://*.tebex.io; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://api.mcmodels.net https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://maps.googleapis.com https://*.observ.app https://*.tebex.io https://rybbit.danielvdspoel.com https://rybbit.danielvdspoel.com/api; frame-src https://*.tebex.io https://www.youtube.com https://www.youtube-nocookie.com https://sketchfab.com; worker-src 'self' blob:; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; report-uri https://o4506260115423232.ingest.observ.app/api/295/security/?sentry_key=915fd0f9eaa8ef324c478d5eda69f7a6 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.cloudfront.net *.reviews.io *.reviews.co.uk data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com unpkg.com *.unpkg.com imagekit.io *.imagekit.io *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com account.fetchify.com unpkg.com *.unpkg.com cdnjs.cloudflare.com imagekit.io *.imagekit.io https://*.brevo.com https://*.sibforms.com *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net unpkg.com *.unpkg.com imagekit.io *.imagekit.io https://s3bucketagri.s3.eu-west-2.amazonaws.com https://www.facebook.com https://hn.inspectlet.com https://www.google.co.uk https://brevo.com https://*.brevo.com https://*.sibforms.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com https://www.magezon.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudfront.net *.reviews.io *.reviews.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.magento-datasolutions.com widget.freshworks.com m2epro.freshdesk.com unpkg.com *.unpkg.com cdnjs.cloudflare.com imagekit.io *.imagekit.io https://www.gstatic.com https://static.hotjar.com https://cdn.inspectlet.com https://wisepops.net https://script.hotjar.com https://js-agent.newrelic.com https://cdn.brevo.com https://sibforms.com https://www.sibforms.com https://sibautomation.com *.disqus.com *.avada.io *.shopify.com *.google.com/ connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.reviews.io *.reviews.co.uk *.what3words.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com widget.freshworks.com m2epro.freshdesk.com cc-cdn.com unpkg.com *.unpkg.com imagekit.io *.imagekit.io https://*.brevo.com https://*.sibforms.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.cloudfront.net *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.magento-datasolutions.com *.magento-ds.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io widget.freshworks.com m2epro.freshdesk.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk unpkg.com *.unpkg.com imagekit.io *.imagekit.io https://hn.inspectlet.com wss://ws.inspectlet.com https://wisepops.net https://activity.wisepops.com https://bam.nr-data.net https://www.google.co.uk https://in-automate.brevo.com https://api.brevo.com https://cdn.brevo.com https://*.brevo.com https://*.sibforms.com https://sibautomation.com https://get.geojs.io *.avada.io *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.what3words.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://smeders.nl https://*.smeders.nl https://*.googletagmanager.com https://*.google-analytics.com https://*.mouseflow.com https://cdn.jsdelivr.net https://chimpstatic.com https://challenges.cloudflare.com https://*.facebook.net https://kit.fontawesome.com https://yoast.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://smeders.nl https://*.smeders.nl https://*.googletagmanager.com https://*.google-analytics.com https://*.mouseflow.com https://cdn.jsdelivr.net https://chimpstatic.com https://challenges.cloudflare.com https://*.facebook.net https://kit.fontawesome.com https://yoast.com https://*.jquery.com *.twitter.com; style-src 'self' 'unsafe-inline' https://smeders.nl https://*.smeders.nl https://cdn.jsdelivr.net https://fonts.googleapis.com https://ka-p.fontawesome.com https://fonts.bunny.net *.bootstrapcdn.com *.cloudflare.com; style-src-elem 'self' 'unsafe-inline' https://smeders.nl https://*.smeders.nl https://cdn.jsdelivr.net https://fonts.googleapis.com https://ka-p.fontawesome.com https://fonts.bunny.net *.cloudflare.com; img-src 'self' data: https: https://smeders.nl https://*.smeders.nl https://*.facebook.com https://facebook.com https://*.googletagmanager.com https://*.google-analytics.com https://*.gravatar.com; font-src 'self' data: https://fonts.gstatic.com https://ka-p.fontawesome.com https://fonts.bunny.net *.cloudflare.com; connect-src 'self' https://smeders.nl https://*.smeders.nl https://*.google-analytics.com https://*.googletagmanager.com https://*.mouseflow.com https://*.facebook.com https://*.yoast.com https://yoast.com https://ka-p.fontawesome.com https://kit.fontawesome.com https://*.ipify.org *.google.com; media-src 'self' https://smeders.nl https://*.smeders.nl; child-src 'self' blob: https://challenges.cloudflare.com; worker-src 'self' blob:; frame-src 'self' https://smeders.nl https://*.smeders.nl https://www.youtube.com https://challenges.cloudflare.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; report-uri https://smeders.uriports.com/reports 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://widget.reviews.io; connect-src 'self' https://api.lighterusa.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://api.reviews.io; img-src 'self' data: blob: https://*.cloudfront.net https://www.googletagmanager.com https://*.google-analytics.com https://assets.reviews.io https://media.reviews.co.uk; style-src 'self' 'unsafe-inline' data: https://assets.reviews.io; font-src 'self' data: https://assets.reviews.io; media-src 'self' https://s3-us-west-1.amazonaws.com/reviews-us-assets/; frame-src 'self'; form-action 'self'; base-uri 'none'; frame-ancestors 'none'; object-src 'none'; report-uri /api/csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.fonts.googleapis.com data: *.cloudflare.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://plumrocket.com *.authorize.net *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com meetanshi.com *.authorize.net *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://plumrocket.com https://tube.rvree.com *.meetanshi.com meetanshi.com *.authorize.net *.addthis.com *.pinterest.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.wesupply.xyz https://wesupplylabs.com guarantee-cdn.com *.weltpixel.com *.yotpo.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://tube.rvree.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com *.meetanshi.com meetanshi.com store.paradoxlabs.com *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.addthis.com *.pinterest.com *.cdninstagram.com guarantee-cdn.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://tube.rvree.com *.avada.io *.shopify.com *.meetanshi.com meetanshi.com cdn.jsdelivr.net *.authorize.net https://apis.google.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.instagram.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.cloudflare.com guarantee-cdn.com https://www.googletagmanager.com tagmanager.google.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com https://tube.rvree.com *.fontawesome.com https://fonts.bunny.net cdn.jsdelivr.net maxcdn.bootstrapcdn.com *.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com tagmanager.google.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://get.geojs.io *.avada.io *.meetanshi.com meetanshi.com *.authorize.net *.cloudflare.com *.googleapis.com *.addthis.com *.cardinalcommerce.com *.graph.instagram.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://www.google-analytics.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-4OW3c81A8+gUsPIzXc4b8Q==' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://pendo-content.factsmgtadmin.com; style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net; img-src 'self' data: https:; font-src 'self' data: https://use.typekit.net; connect-src 'self' https://*.browser-intake-datadoghq.com https://pendo-content.factsmgtadmin.com https://pendo-data.factsmgtadmin.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-src 'self' https://www.google.com/recaptcha/; frame-ancestors 'self'; report-uri /csp-report 1
font-src fonts.gstatic.com use.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com *.fontawesome.com *.inpost.pl https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com pay.google.com play.google.com testpay.autopay.eu pay.autopay.eu testcards.autopay.eu cards.autopay.eu secure.payu.com merch-prod.snd.payu.com *.inpost.pl 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com platnosci.bm.pl platnosci-accept.bm.pl www.gstatic.com magefan.com cm.magefan.com static.payu.com *.disqus.com *.inpost.pl https://img.youtube.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com testcards.autopay.eu cards.autopay.eu pay.google.com https://cdnjs.cloudflare.com secure.payu.com secure.snd.payu.com *.disqus.com *.inpost.pl https://player.vimeo.com https://www.youtube.com *.snrbox.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com testpay.autopay.eu pay.autopay.eu testcards.autopay.eu cards.autopay.eu maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com *.fontawesome.com *.inpost.pl http://fonts.googleapis.com *.snrcdn.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.inpost.pl 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.google-analytics.com *.facebook.com *.facebook.net *.google.com secure.payu.com merch-prod.snd.payu.com *.inpost.pl http://dpm.demdex.net https://fonts.googleapis.com https://fonts.gstatic.com t.elasticsuite.io *.snrbox.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src  'none'; connect-src 'self' *.famedigital.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.famedigital.com join.gammasecure.com; script-src 'self' *.famedigital.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.famedigital.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
default-src 'self'; style-src 'self' 'unsafe-inline' https://*.posthog.com https://fonts.googleapis.com; script-src 'self' 'nonce-5xe4EGFYwbmZCYrUUlIjdH' https://*.posthog.com https://*.i.posthog.com; font-src 'self' https://*.posthog.com https://app-static.eu.posthog.com https://app-static-prod.posthog.com https://d1sdjtjk6xzm7.cloudfront.net https://fonts.gstatic.com https://cdn.jsdelivr.net https://assets.faircado.com https://use.typekit.net; worker-src 'self'; child-src 'none'; object-src 'none'; media-src https://res.cloudinary.com; img-src 'self' data: https://*.posthog.com https://posthog.com https://www.gravatar.com https://res.cloudinary.com https://platform.slack-edge.com https://raw.githubusercontent.com; frame-ancestors https://posthog.com https://preview.posthog.com; connect-src 'self' https://status.posthog.com https://*.posthog.com  https://raw.githubusercontent.com https://api.github.com; frame-src https:; manifest-src 'self'; base-uri 'self'; report-uri https://us.i.posthog.com/report/?token=sTMFPsFhdP1Ssg&sample_rate=0.1&v=2; report-to posthog 1
default-src https: wss: data: blob:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data: blob:; font-src https: data:; worker-src blob:; report-uri /csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.versapay.com *.paynup.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.versapay.com *.paynup.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.twitter.com *.paynup.com *.versapay.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.doubleclick.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.versapay.com *.paynup.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.gstatic.com *.googletagmanager.com *.doubleclick.net *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.versapay.com *.paynup.com *.datadoghq.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.googletagmanager.com *.fontawesome.com assets.braintreegateway.com *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.versapay.com *.paynup.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.doubleclick.net *.googlesyndication.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cloudflare.com *.twitter.com *.twimg.com *.versapay.com *.paynup.com *.datadoghq.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-SwTEUYELpCIk8qL3vMU2xQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' https://pvapins.com 'unsafe-inline' 'unsafe-eval' https://*.trustpilot.com https://challenges.cloudflare.com https://static.cloudflareinsights.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://mc.yandex.ru https://code.jquery.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://code.jivosite.com https://www.google.com https://www.gstatic.com https://translate.google.com https://translate.googleapis.com https://translate-pa.googleapis.com https://*.googleapis.com https://www.clarity.ms https://scripts.clarity.ms https://pagead2.googlesyndication.com https://ajax.googleapis.com https://js.nicedit.com https://client.crisp.chat https://*.crisp.chat https://cdn.gtranslate.net https://*.gtranslate.net https://cdn.ampproject.org https://supplo.io; media-src 'self' data:; worker-src 'self' blob: data:; style-src 'self' https://pvapins.com 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://code.jivosite.com https://client.crisp.chat https://*.crisp.chat https://cdn.gtranslate.net https://*.gtranslate.net https://www.gstatic.com; font-src 'self' data: https://pvapins.com https://fonts.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://client.clarity.ms https://client.crisp.chat https://*.crisp.chat; img-src 'self' data: https: http://js.nicedit.com https://pvapins.us-lax-1.linodeobjects.com; connect-src 'self' https://pvapins.com wss://pvapins.com https://*.trustpilot.com https://challenges.cloudflare.com https://static.cloudflareinsights.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://mc.yandex.ru https://www.google.com https://code.jivosite.com https://cdn.jsdelivr.net https://www.clarity.ms https://scripts.clarity.ms https://j.clarity.ms https://h.clarity.ms https://l.clarity.ms https://*.clarity.ms https://pagead2.googlesyndication.com https://node-ya-7.jivosite.com https://vi-ya-3.jivosite.com https://telemetry.jivosite.com https://api.jivosite.com https://media-ya.jivosite.com https://q.clarity.ms https://i.clarity.ms wss://node-ya-7.jivosite.com wss://vi-ya-3.jivosite.com https://client.crisp.chat https://*.crisp.chat wss://*.crisp.chat https://cdn.gtranslate.net https://*.gtranslate.net https://translate.google.com https://translate.googleusercontent.com https://translate.googleapis.com https://translate-pa.googleapis.com https://*.googleapis.com https://cdn.ampproject.org https://www.googletagmanager.com https://supplo.io wss://supplo.io; frame-src 'self' https://*.trustpilot.com https://challenges.cloudflare.com https://*.cloudflare.com blob: https://www.googletagmanager.com https://mc.yandex.ru https://www.google.com https://client.crisp.chat https://*.crisp.chat https://translate.google.com https://*.gtranslate.net https://pay.0xprocessing.com https://googleads.g.doubleclick.net; frame-ancestors 'none'; 1
font-src fonts.gstatic.com use.typekit.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com fonts.googleapis.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com www.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://firebasestorage.googleapis.com quickchart.io img.youtube.com blob: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.avada.io *.shopify.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com maps.googleapis.com www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com fonts.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com www.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://get.geojs.io *.avada.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com places.googleapis.com www.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src https:; object-src 'none'; base-uri 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com static.klaviyo.com cdn1.stamped.io stamped.io *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://seo.mageplaza.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com www.googletagmanager.com https://placement-api.afterpay.com https://portal.afterpay.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google.com *.googleadservices.com *.googletagmanager.com flagpedia.net *.google.com.vn a.klaviyo.com cdn1.stamped.io stamped.io www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://api.addressfinder.io https://placement-api.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.gstatic.com maps.googleapis.com static.klaviyo.com fast.a.klaviyo.com cdn1.stamped.io stamped.io *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://www.googletagmanager.com tagmanager.google.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com https://api.addressfinder.io *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com static.klaviyo.com cdn1.stamped.io stamped.io *.stripe.network *.stripecdn.com *.amazon.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src cdn1.stamped.io stamped.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://api.addressfinder.io *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googletagmanager.com stats.g.doubleclick.net www.gstatic.com maps.googleapis.com fast.a.klaviyo.com cdn1.stamped.io stamped.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp.threatview.app/report; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.feedbackcompany.com *.googleapis.com maxcdn.bootstrapcdn.com *.fontawesome.com *.webwinkelkeur.nl *.tawk.to *.crisp.chat data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.feedbackcompany.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.facebook.com platform.twitter.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.sendcloud.sc *.jsdelivr.net *.webwinkelkeur.nl youtube.com *.doubleclick.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com *.feedbackcompany.com 'self' data: https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com https://img.youtube.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.amazonaws.com maps.gstatic.com *.facebook.com *.facebook.net *.google.lv *.tawk.to snowboards.eu *.crisp.chat *.bing.com *.shopify.com *.cloudfront.net cdn.webshopapp.com tailwindui.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.feedbackcompany.com https://maps.googleapis.com https://player.vimeo.com *.disqus.com https://cdn.jsdelivr.net connect.facebook.net twitter.com platform.twitter.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net cdn.jsdelivr.net js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.sendcloud.sc *.jsdelivr.net maps.googleapis.com *.webwinkelkeur.nl *.facebook.com *.facebook.net *.tawk.to *.clarity.ms clarity.ms *.crisp.chat *.bing.com *.profitmetrics.io *.klaviyo.com *.pingdom.net *.strut.fit *.tiktok.com *.clickcease.com 'unsafe-eval' 'unsafe-inline' *.cloudfront.net *.rumvision.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com https://cdn.jsdelivr.net maxcdn.bootstrapcdn.com https://static.klaviyo.com *.googletagmanager.com *.fontawesome.com cdn.jsdelivr.net assets.braintreegateway.com *.sendcloud.sc *.jsdelivr.net *.tawk.to *.crisp.chat 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.feedbackcompany.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com maps.googleapis.com places.googleapis.com *.clarity.ms *.tawk.to *.facebook.com *.google.lv wss://*.tawk.to/ wss://client.relay.crisp.chat/ *.crisp.chat *.bing.com *.profitmetrics.io *.klaviyo.com *.pingdom.net *.strut.fit *.tiktok.com *.clickcease.com *.execute-api.eu-central-1.amazonaws.com *.amazonaws.com *.cloudfront.net *.rumvision.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.i4go.com *.mcmunnandyates.com *.typekit.net https://maps.googleapis.com https://maps.gstatic.com https://fonts.gstatic.com https://fonts.googleapis.com *.google.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.i4go.com *.mcmunnandyates.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.google.com tag.validate.audio www.facebook.com *.i4go.com *.pinimg.com *.pinterest.com *.mcmunnandyates.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io tag.validate.audio *.i4go.com *.facebook.com *.pinimg.com *.pinterest.com *.mcmunnandyates.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat https://maps.googleapis.com https://maps.gstatic.com https://fonts.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://rum.hlx.page tag.validate.audio static.hotjar.com script.hotjar.com omnisnippet1.com *.i4go.com widget-mediator.zopim.com connect.facebook.net *.pinimg.com *.pinterest.com *.mcmunnandyates.com *.zdassets.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.googleapis.com https://maps.googleapis.com https://maps.gstatic.com https://fonts.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com tag.validate.audio *.i4go.com *.typekit.net *.mcmunnandyates.com https://maps.googleapis.com https://maps.gstatic.com https://fonts.googleapis.com *.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com tag.validate.audio *.i4go.com *.mcmunnandyates.com static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io tag.validate.audio ws.hotjar.com content.hotjar.io *.doubleclick.net forms.soundestlink.com wt.omnisendlink.com *.i4go.com googleads.g.doubleclick.net connect.facebook.net *.facebook.com *.pinimg.com *.pinterest.com wss://widget-mediator.zopim.com *.zendesk.com *.mcmunnandyates.com *.zdassets.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://connect.facebook.net https://appleid.cdn-apple.com 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https: blob:; connect-src 'self' https://*.amazonaws.com https://*.cloudfront.net https://www.google-analytics.com https://maps.googleapis.com https://www.equator.com; frame-src 'self' https://www.google.com https://appleid.apple.com; media-src 'self' https:; object-src 'none'; frame-ancestors 'self'; upgrade-insecure-requests 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.posthog.com https://cdn.firstpromoter.com https://cdn.trackdesk.com; connect-src 'self' https: wss:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https: 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cloudflare.com *.twitter.com *.googleapis.com *.fontawesome.com *.bootstrapcdn.com *.popt.in *.cloudfront.net *.stripecdn.com *.paypal.com *.paypalobjects.com maxcdn.bootstrapcdn.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.facebook.com *.paypalobjects.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.twitter.com *.addthis.com *.doubleclick.net *.facebook.com *.paypalobjects.com connect.facebook.net *.disqus.com disqus.com www.facebook.com graph.facebook.com business.facebook.com www.commercepartnerhub.com https://plumrocket.com https://www.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudflare.com *.googleadservices.com *.google-analytics.com *.google.co.in *.twitter.com *.doubleclick.net *.ytimg.com connect.facebook.net *.facebook.com *.fbcdn.net *.disqus.com *.disquscdn.com https://www.magezon.com www.facebook.com graph.facebook.com business.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cloudflare.com *.twitter.com *.google-analytics.com googletagmanager.com apis.google.com *.googleapis.com *.gstatic.com *.trustedshops.com *.fontawesome.com *.addthis.com s7.addthis.com m.addthis.com z.moatads.com *.addthisedge.com graph.facebook.com widgets.pinterest.com *.zipmoney.com.au *.zip.co *.doubleclick.net *.popt.in *.paypalobjects.com *.vimeo.com *.elfsightcdn.com connect.facebook.net *.disqus.com *.disquscdn.com https://maps.googleapis.com https://connect.facebook.net www.facebook.com business.facebook.com https://apis.google.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.cloudflare.com *.googleapis.com *.paypal.com *.paypalobjects.com *.twitter.com *.gstatic.com *.typekit.net *.fontawesome.com *.bootstrapcdn.com *.popt.in *.lambda-url.us-west-2.on.aws *.disquscdn.com maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.cloudflare.com *.twitter.com *.google-analytics.com *.googletagmanager.com *.googlesyndication.com *.googleadservices.com *.zipmoney.com.au *.google.co.in *.paypalobjects.com *.cloudfront.net *.popt.in connect.facebook.net *.facebook.com *.disqus.com disqus.com *.disquscdn.com www.facebook.com graph.facebook.com business.facebook.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.klarnacdn.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.staging-pbffinancecalculator.info *.pbffinancecalculator.info *.paybyfinance.co.uk *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.staging-pbffinancecalculator.info *.pbffinancecalculator.info *.paybyfinance.co.uk *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.dotdigital-pages.com *.dotdigital.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.klarna.com *.staging-pbffinancecalculator.info *.pbffinancecalculator.info *.paybyfinance.co.uk webchat.dotdigital.com webchat.staging.dotdigital.com *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.trustpilot.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.everesttech.net *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.trackedlink.net *.ddlnk.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com magefan.com cm.magefan.com *.klarna.com *.sargarme.com *.awd-it.co.uk *.google.com *.google.co.uk *.facebook.com *.klarnaevt.com *.klarnacdn.net https://www.magezon.com *.pbffinancecalculator.info cdn.shopify.com *.dycdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.adobedtm.com *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.facebook.net *.klarna.com *.klarnaservices.com *.webgains.io instant.page *.klarnacdn.net x.klarnacdn.net *.staging-pbffinancecalculator.info *.pbffinancecalculator.info *.paybyfinance.co.uk webchat.dotdigital.com webchat.staging.dotdigital.com *.dycdn.net dn1i8v75r669j.cloudfront.net dkpklk99llpj0.cloudfront.net ds9p2a60lh6fp.cloudfront.net d1y9qtn9cuc3xw.cloudfront.net d81mfvml8p5ml.cloudfront.net *.freshrelevance.com *.dotdigital.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.google.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com *.trustpilot.com *.googletagmanager.com tagmanager.google.com https://www.awd-it.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.klarnacdn.net webchat.dotdigital.com webchat.staging.dotdigital.com *.dycdn.net https://static.klaviyo.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.imgur.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io amcglobal.sc.omtrdc.net p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.klarna.com *.klarnaservices.com *.doubleclick.net *.smartmetrics.co.uk *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.staging-pbffinancecalculator.info *.pbffinancecalculator.info wss://*.staging-pbffinancecalculator.info wss://*.pbffinancecalculator.info *.paybyfinance.co.uk webchat.dotdigital.com webchat.staging.dotdigital.com *.dycdn.net *.freshrelevance.com wss://*.freshrelevance.com wss://*.dycdn.net dn1i8v75r669j.cloudfront.net *.dotdigital.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.addressy.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.link.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://e123f666-3955-4cf2-a104-3830ab3a94ec.sansec.watch/; report-to report-endpoint; 1
media-src https://s.yimg.com https://*.docusign.net 'self' https://api.mixpanel.com https://stats.g.doubleclick.net https://cdn.cookielaw.org https://*.springcm.com https://alpixtrack.com https://www.gstatic.com https://*.clm.docusign.mil *.doubleclick.net https://maps.a.forceusercontent.com *.krxd.net https://*.docusign.com https://connect.facebook.net *.onetrust.com https://tags.tiqcdn.com blob: https://bat.bing.com https://insight.adsrvr.org https://sp.analytics.yahoo.com https://*.clmfed.docusign.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.gstatic.com https://pixel.sitescout.com *.salesforce.com *.google.com https://deltadentalwi.my.site.com; report-to sfdc-csp-ep; report-uri https://deltadentalwi.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00DA0000000IEY9&networkId=0DM0H000000Cie4&type=communities 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://static.klaviyo.com https://static-tracking.klaviyo.com https://static.zdassets.com https://static.addtoany.com https://cdnjs.cloudflare.com https://js.stripe.com https://js.mollie.com https://connect.facebook.net https://readymag.com https://embedsocial.com; style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net https://api.mapbox.com https://cdnjs.cloudflare.com https://static.addtoany.com; font-src 'self' data: https://use.typekit.net; img-src 'self' data: blob: https:; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://a.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com https://api.mapbox.com https://events.mapbox.com https://performance.typekit.net https://*.zdassets.com https://*.zendesk.com wss://*.zendesk.com https://api.stripe.com https://api.mollie.com https://hooks.zapier.com; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://www.mollie.com https://www.youtube.com https://www.youtube-nocookie.com https://www.instagram.com https://www.googletagmanager.com https://static.addtoany.com https://www.facebook.com https://open.spotify.com https://readymag.com https://*.readymag.com; media-src 'self' blob: https://medias.apidura.com; worker-src 'self' blob:; child-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-7vcsn73jaVJXm_DZ20IsWg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.googleapis.com *.gstatic.com https://fonts.gstatic.com *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.twitter.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.cookiebot.com *.googletagmamanger.com https://*.google.com js.mollie.com *.sendcloud.sc *.jsdelivr.net *.twitter.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.googleapis.com https://*.gstatic.com magefan.com cm.magefan.com *.disqus.com www.magmodules.eu *.squeezely.tech i0.wp.com *.leef.nl *.linkedin.com *.varuvo.nl *.zorghulpdrogist.nl https://*.google.com https://*.googleapis.com https://*.googleusercontent.com https://img.youtube.com *.sooqr.com *.spotlersearch.com https://www.mollie.com *.amazonaws.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cloudfront.net *.gstatic.com *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.disqus.com squeezely.tech www.squeezely.tech *.squeezely.tech *.clarity.ms cognito-identity.eu-central-1.amazonaws.com/ *.converterexperiments.com *.cookiebot.com *.corewebvitals.io developer.adobe.com *.facebook.net/ firehose.eu-central-1.amazonaws.com/ http://*.googleadservers.com *.google-analytics.com *.googlesyndication.com *.googletagmamanger.com *.hotjar.com *.licdn.com magento.com *.spotlersearch.com *.spotlersearchanalytics.com *.trustpilot.com *.zdassets.com *.zopim.com https://*.google.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com *.sooqr.com spotlersearchanalytics.com js.mollie.com *.sendcloud.sc *.jsdelivr.net *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com *.sooqr.com *.spotlersearch.com *.sendcloud.sc *.jsdelivr.net *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com squeezely.tech *.squeezely.tech *.clarity.ms cognito-identity.eu-central-1.amazonaws.com firehose.eu-central-1.amazonaws.com *.linkedin.com *.zdassets.com *.zendesk.com *.zopim.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com *.sooqr.com *.spotlersearch.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://3adac9fa-e067-4112-86fb-a8b949bec21a.sansec.watch; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'nonce-ALx99h3YSPr1X_KU8ox9DPGuvOwS3Yg2FgrZU7YbvA8GwMzgLjjAUg'; style-src-attr 'unsafe-inline'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://www.googletagmanager.com https://www.google.ch https://www.google.de https://www.google.fr https://www.google.it https://www.google.at https://pl01.owen.prolitteris.ch https://pl02.owen.prolitteris.ch https://epviewer.bonasavoir.ch blob:; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://challenges.cloudflare.com https://checkout.postfinance.ch https://epviewer.bonasavoir.ch https://img.ktipp.ch https://img.saldo.ch https://img.bonasavoir.ch https://img.kultur-tipp.ch https://www1.123-pensionierung.ch https://www.123-pensionierung.ch; script-src-elem 'self' 'nonce-ALx99h3YSPr1X_KU8ox9DPGuvOwS3Yg2FgrZU7YbvA8GwMzgLjjAUg' https://challenges.cloudflare.com https://checkout.postfinance.ch https://www.googletagmanager.com https://epviewer.bonasavoir.ch 'sha256-tuEfK40U67Z5Vl5skYSl/ihE+WFRMlZBTgeVJD9GdgI='; connect-src 'self' https://checkout.postfinance.ch https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://*.analytics.google.com https://*.google-analytics.com https://epviewer.bonasavoir.ch; style-src-elem 'self' https://epviewer.bonasavoir.ch https://fonts.googleapis.com 'nonce-ALx99h3YSPr1X_KU8ox9DPGuvOwS3Yg2FgrZU7YbvA8GwMzgLjjAUg'; font-src 'self' https://fonts.gstatic.com data:; worker-src 'self' 'nonce-ALx99h3YSPr1X_KU8ox9DPGuvOwS3Yg2FgrZU7YbvA8GwMzgLjjAUg' blob: 1
script-src-elem ; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.bglobale.com *.global-e.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.stripe.com *.stripe.network *.google.com 'self' 'unsafe-inline'; frame-ancestors https://api.clerk.io https://cdn.clerk.io *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.bglobale.com *.global-e.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com https://cdn.clerk.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud imgsct.cookiebot.com *.stripe.com *.stripe.network *.google.com brippo.s3.amazonaws.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.bglobale.com *.global-e.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://api.clerk.io https://cdn.clerk.io https://custom.clerk.io *.cloudflare.com graph.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud player.vimeo.com consent.cookiebot.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com www.facebook.com connect.facebook.net business.facebook.com *.bglobale.com *.global-e.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://api.clerk.io https://cdn.clerk.io https://static.klaviyo.com downloads.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.stripe.network *.stripecdn.com *.amazon.com *.google.com *.bglobale.com *.global-e.com *.fontawesome.com maxcdn.bootstrapcdn.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud cbsignal-1.in-endp.profitmetrics.io googleads.g.doubleclick.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com fonts.googleapis.com fonts.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-toUPtonwqpEZfdwiHdYVIQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-inc7q7YZmUga40RHzZrBmA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com static.lipscore.com *.fontawesome.com *.googleapis.com *.richpanel.com www.lochfynewhiskies.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.adyen.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.facebook.com *.scarabresearch.com *.emarsys.net *.luigisbox.com *.luigisbox.tech *.freshrelevance.com *.termly.io www.lochfynewhiskies.com 'self' 'unsafe-inline'; frame-ancestors www.lochfynewhiskies.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.adyen.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.com *.doubleclick.net *.facebook.com *.scarabresearch.com *.emarsys.net *.luigisbox.com *.luigisbox.tech *.freshrelevance.com https://*.klarna.com *.termly.io *.mention-me.com www.lochfynewhiskies.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.adyen.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de static-eu.payments-amazon.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com maps.googleapis.com www.whiskyshop.com www.lochfynewhiskies.com *.google.co.uk *.teads.tv link.whiskyshop.com link.lochfynewhiskies.com *.snapengage.com storage.googleapis.com *.scarabresearch.com *.emarsys.net *.luigisbox.com *.luigisbox.tech *.freshrelevance.com https://*.klarna.com *.termly.io static.lipscore.com blob: img.youtube.com *.amazonaws.com *.richpanel.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.adyen.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com maps.googleapis.com static.cloudflareinsights.com to.whiskyshop.com tags.affiliatefuture.com *.teads.tv unpkg.com d81mfvml8p5ml.cloudfront.net dkpklk99llpj0.cloudfront.net dn1i8v75r669j.cloudfront.net *.snapengage.com storage.googleapis.com to.lochfynewhiskies.com *.shopbox.ai wisepops.net *.datadoghq-browser-agent.com *.browser-intake-datadoghq.eu browser-intake-datadoghq.eu *.scarabresearch.com *.emarsys.net *.luigisbox.com *.luigisbox.tech *.freshrelevance.com https://js.klarna.com https://*.klarna.com *.termly.io static.lipscore.com s7.addthis.com *.avada.io *.mention-me.com *.richpanel.com www.lochfynewhiskies.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com cdn.jsdelivr.net fast.fonts.net *.luigisbox.com *.luigisbox.tech *.freshrelevance.com https://*.klarna.com static.lipscore.com *.fontawesome.com *.richpanel.com www.lochfynewhiskies.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.amazonaws.com *.richpanel.com www.lochfynewhiskies.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adyen.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.google-analytics.com *.facebook.com *.facebook.net *.google.com maps.googleapis.com pagead2.googlesyndication.com ad.doubleclick.net *.teads.tv c2.dycdn.net dn1i8v75r669j.cloudfront.net *.run.app storage.googleapis.com *.shopbox.ai *.scarabresearch.com *.emarsys.net *.luigisbox.com *.luigisbox.tech *.freshrelevance.com wss://am.freshrelevance.com https://*.klarna.com *.termly.io wapi.lipscore.com users.lipscore.com ekr.zdassets.com/ *.mention-me.com *.richpanel.com wss://*.richpanel.com t.elasticsuite.io www.lochfynewhiskies.com 'self' 'unsafe-inline'; child-src www.lochfynewhiskies.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com www.lochfynewhiskies.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src blob:; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com data: https://ws.colissimo.fr https://static.lyra.com/static/ *.stape.io *.fontawesome.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://fonts.googleapis.com fonts.googleapis.com fonts.axept.io *.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://secure.lyra.com/vads-payment/ https://api.lyra.com/api-payment/ https://static.lyra.com/static/ 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com self www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.instagram.com www.google.com https://www.youtube.com https://form.typeform.com https://secure.lyra.com/vads-payment/ https://static.lyra.com/static/ *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.stape.io www.gstatic.com apis.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * sibautomation.com api.socloz.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.cdninstagram.com a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org *.doofinder.com https://maps.googleapis.com https://maps.gstatic.com https://ws.colissimo.fr https://*.tile.openstreetmap.fr https://*.onyourmap.com https://google.fr https://secure.lyra.com/static/latest/images/type-carte/ https://static.lyra.com/static/ https://secure.lyra.com/vads-payment/ magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com *.stape.io https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com placehold.co axeptio.imgix.net *.bing.com pagead2.googlesyndication.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com *.instagram.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.doofinder.com https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com https://api.lyra.com/api-payment/ https://static.lyra.com/static/ *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.doubleclick.net *.stape.io https://static.addtoany.com *.avada.io *.shopify.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.gstatic.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com analytics.ahrefs.com *.axept.io *.bing.com *.brevo.com sibautomation.com *.socloz.com analytics.passionbeaute.fr passionbeauteconnect.fr *.wonderpush.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.doofinder.com https://fonts.googleapis.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com https://static.lyra.com/static/ *.googleapis.com *.googletagmanager.com *.stape.io *.fontawesome.com *.google.com *.gstatic.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com fonts.axept.io passionbeauteconnect.fr 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline';, connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.doofinder.com wss://*.doofinder.com https://ws.colissimo.fr https://maps.googleapis.com https://nominatim.openstreetmap.org https://*.onyourmap.com https://*.mapbox.com https://secure.lyra.com/vads-payment/ https://api.lyra.com/api-payment/ *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog *.stape.io http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com analytics.ahrefs.com *.axept.io *.bing.com *.brevo.com analytics.passionbeaute.fr 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src https://secure.lyra.com/vads-payment/ https://api.lyra.com/api-payment/ https://static.lyra.com/static/ *.axept.io fonts.axept.io axeptio.imgix.net *.stape.io analytics.ahrefs.com analytics.passionbeaute.fr *.google-analytics.com *.analytics.google.com *.googleapis.com apis.google.com *.gstatic.com *.googlesyndication.com *.doubleclick.net *.googletagmanager.com www.googleadservices.com *.google.com www.google.com *.google.fr *.google.de *.google.co.uk *.google.be *.google.nl *.google.it *.google.com.ua https://www.merchant-center-analytics.goog https://firebasestorage.googleapis.com connect.facebook.net www.facebook.com graph.facebook.com business.facebook.com *.instagram.com *.cdninstagram.com api.braintreegateway.com api.sandbox.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com www.paypalobjects.com b.stats.paypal.com dub.stats.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com pay.google.com *.cardinalcommerce.com *.arcot.com 3ds-secure.cardcomplete.com acs.sia.eu rsa3dsauth.com *.wirecard.com *.wlp-acs.com www.clicksafe.lloydstsb.com www.securesuite.co.uk *.touchtechpayments.com www.commercepartnerhub.com pay.activa-card.com *.youtube.com *.youtube-nocookie.com i.ytimg.com s.ytimg.com vimeo.com www.vimeo.com player.vimeo.com *.vimeocdn.com https://api.mapbox.com https://*.mapbox.com *.openstreetmap.org https://*.tile.openstreetmap.fr https://nominatim.openstreetmap.org https://*.onyourmap.com https://get.geojs.io *.bing.com *.brevo.com sibautomation.com *.socloz.com api.socloz.com *.wonderpush.com passionbeauteconnect.fr *.cdn-apple.com https://ws.colissimo.fr magefan.com cm.magefan.com https://fonts.bunny.net *.fontawesome.com maxcdn.bootstrapcdn.com *.monzo.com *.shopify.com placehold.co *.avada.io http://dpm.demdex.net https://*.typeform.com https://secure.lyra.com/static/latest/images/type-carte/ data: blob: 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-kAeOaMJ54D19phspYZ-UAQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; base-uri 'self'; form-action 'self' https://challenges.cloudflare.com; frame-ancestors 'none'; object-src 'none'; img-src 'self' data: blob: https://*.monitorindonesia.com https://*.monitordev.space https://i.ytimg.com https://*.googleusercontent.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.google.co.id https://www.google.com https://www.googletagmanager.com https://*.gliacloud.com https://*.gliastudios.com https://*.googlesyndication.com https://*.adtrafficquality.google; media-src 'self' https://*.monitorindonesia.com https://*.monitordev.space blob: https://cdn.plyr.io https://gnetwork.gliastudios.com https://*.googlevideo.com; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://onesignal.com https://player.gliacloud.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://news.google.com https://challenges.cloudflare.com https://static.cloudflareinsights.com https://cdn.gliacloud.com https://player.gliacloud.com https://cdn.onesignal.com https://onesignal.com https://api.onesignal.com https://partner.googleadservices.com https://imasdk.googleapis.com https://s0.2mdn.net https://*.adtrafficquality.google https://*.googlesyndication.com; connect-src 'self' https://*.monitorindonesia.com https://www.google-analytics.com https://analytics.google.com https://onesignal.com https://*.onesignal.com https://challenges.cloudflare.com https://www.google.com https://news.google.com https://stats.g.doubleclick.net https://*.gliacloud.com https://*.gliastudios.com https://cdn.plyr.io https://csi.gstatic.com https://*.adtrafficquality.google https://*.googlesyndication.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.gliacloud.com https://challenges.cloudflare.com https://googleads.g.doubleclick.net https://imasdk.googleapis.com https://*.adtrafficquality.google https://www.google.com https://news.google.com https://*.googlesyndication.com; worker-src 'self' blob: https://cdn.onesignal.com 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.klarnacdn.net *.alothemes.com *.magepow.com *.zopim.com *.zdassets.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com https://*.ewaypayments.com https://*.sandbox.ewaypayments.com *.klarna.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com *.weltpixel.com *.wesupply.xyz https://wesupplylabs.com guarantee-cdn.com *.googletagmanager.com *.doubleclick.net *.typeform.com *.zendesk.com *.zopim.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.trackedlink.net www.apptrian.com *.klarna.com *.klarnaevt.com *.klarnacdn.net t.zip.co static.zip.co *.alothemes.com *.magepow.com *.koongo.com guarantee-cdn.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com *.zopim.com *.zendesk.com *.zdassets.com bpi.zip.co data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.adobe.io magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal www.apptrian.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com https://*.ewaypayments.com https://*.sandbox.ewaypayments.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com static.zip.co zip.co *.alothemes.com *.magepow.com cdnjs.cloudflare.com/ajax/libs/highlight.js/9.3.0/highlight.min.js *.cloudflare.com guarantee-cdn.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com *.zopim.com *.zendesk.com *.zdassets.com https: 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app assets.braintreegateway.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.klarnacdn.net *.alothemes.com *.magepow.com cdnjs.cloudflare.com/ajax/libs/highlight.js/9.3.0/styles/darkula.min.css *.tagmanager.google.com *.googletagmanager.com *.typeform.com *.zopim.com *.zendesk.com *.zdassets.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com www.apptrian.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.alothemes.com *.magepow.com *.koongo.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com wss://widget-mediator.zopim.com *.zopim.com *.zendesk.com *.zdassets.com *.zopim.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; script-src 'self' 'unsafe-inline' ajax.googleapis.com apis.google.com b.st-hatena.com cd.ladsp.com cdn.jsdelivr.net connect.facebook.net d.line-scdn.net dmp.im-apps.net l.logly.co.jp maps.googleapis.com platform.twitter.com px.ladsp.com static.quant.jp www.googletagmanager.com www.google-analytics.com *.clarity.ms *.adsafeprotected.com d.line-scdn.net; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net fonts.googleapis.com; img-src 'self' data: blob: v-storage.jp v-storage.bnarts.co.jp label-api.bnarts.jp b.logly.co.jp b.st-hatena.com cdn.logly.co.jp img.youtube.com i.ytimg.com px.ladsp.jp syndication.twitter.com secure.gravatar.com stats.g.doubleclick.net www.facebook.com www.google.co.jp www.googletagmanager.com *.clarity.ms *.adsafeprotected.com; font-src 'self' data: fonts.gstatic.com cdnjs.cloudflare.com; connect-src 'self' v-storage.jp analytics.google.com www.google-analytics.com region1.analytics.google.com audiencedata.im-apps.net maps.googleapis.com stats.g.doubleclick.net www.facebook.com www.googletagmanager.com www.google.co.jp www.google.com *.clarity.ms *.adsafeprotected.com; frame-src 'self' b.hatena.ne.jp eus.rubiconproject.com platform.twitter.com secure-assets.rubiconproject.com social-plugins.line.me sync.logly.co.jp syndication.twitter.com um.ladsp.com www.facebook.com m.facebook.com www.youtube.com; object-src 'none'; report-uri /csp-report; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cdn.datatables.net https://code.jquery.com https://www.googletagmanager.com https://static.cloudflareinsights.com https://challenges.cloudflare.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://ep2.adtrafficquality.google https://fundingchoicesmessages.google.com https://counter-strike-boost.com https://cdn.counter-strike-boost.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cdn.datatables.net https://fonts.googleapis.com https://counter-strike-boost.com https://cdn.counter-strike-boost.com; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: https:; connect-src 'self' https://counter-strike-boost.com https://api.counter-strike-boost.com https://cdn.counter-strike-boost.com https://www.google-analytics.com https://cloudflareinsights.com https://region1.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://csi.gstatic.com https://challenges.cloudflare.com https://pagead2.googlesyndication.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://fundingchoicesmessages.google.com; frame-src 'self' https://challenges.cloudflare.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://ep2.adtrafficquality.google https://www.google.com https://fundingchoicesmessages.google.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; report-uri /csp-report 1
worker-src blob:; font-src fonts.gstatic.com use.typekit.net *.kxcdn.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com *.gstatic.com *.fontawesome.com 'self' data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com *.sameday.ro *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de https://*.sameday.ro www.googletagmanager.com *.paypal.com https://www.google.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.gstatic.com *.fbcdn.net bat.bing.com *.google.ro *.sameday.ro *.mapbox.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.doubleclick.net https://cdn.tbibank.support https://www.magezon.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com 'self' assets.braintreegateway.com *.paypal.com *.vimeo.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.googleapis.com https://www.google.com/ *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com cdnjs.cloudflare.com *.zopim.com static.zdassets.com lockerplugin.sameday.ro *.sameday.ro *.mapbox.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.googletagmanager.com *.doubleclick.net https://*.sameday.ro s7.addthis.com *.googleadservices.com *.google-analytics.com twitter.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com *.cardinalcommerce.com songbirdstag.cardinalcommerce.com *.cloudflare.com pay.google.com c.paypal.com *.paypal.com *.typekit.net bat.bing.com maps.googleapis.com *.aptrinsic.com 'self' https://t.profitshare.ro https://profitshare.ro/tgt/js 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com *.mapbox.com *.sameday.ro *.googletagmanager.com https://*.sameday.ro *.fontawesome.com 'self' 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com multiplanelectronics.zendesk.com *.zopim.com wss://*.zopim.com bat.bing.com *.sameday.ro *.mapbox.com *.google-analytics.com *.google.com *.doubleclick.net *.googlesyndication.com https://ro.tbibank.support ekr.zdassets.com/ *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net 'self' api.braintreegateway.com *.paypal.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.gstatic.com 'self' data: *.googleapis.com *.coastalbusiness.com *.twitter.com *.yotpo.com *.fontawesome.com *.zohocdn.com *.pagesense.io *.zohostatic.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com use.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.coastalbusiness.com *.yotpo.com *.facebook.com yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com https://static.addtoany.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.dotdigital-pages.com *.dotdigital.com www.google.com *.affirm.com *.affirm.ca *.coastalbusiness.com *.twitter.com *.addthis.com *.google.com *.facebook.com *.ubembed.com *.leasestation.com *.doubleclick.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com yotpo.com *.wesupply.xyz https://wesupplylabs.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: *.paypal.com *.gstatic.com *.googleapis.com *.trackedlink.net *.ddlnk.net *.affirm.com *.affirm.ca *.coastalbusiness.com *.googleadservices.com *.google-analytics.com *.zaius.com *.twitter.com *.adelixir.com t.co 'self' blob: *.bing.com *.pinterest.com *.google.com *.facebook.com *.amazonaws.com *.quickspark.com salesiq.zohopublic.com *.zoho.com *.zohocdn.com *.campaign-image.com *.maillist-manage.com *.pagesense.io *.zohostatic.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com polyfill.io https://static.addtoany.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.affirm.com *.affirm.ca *.twitter.com *.google-analytics.com *.google.com *.googletagmanager.com *.addthis.com *.zdassets.com *.mouseflow.com *.hiss3lark.com d1igp3oop3iho5.cloudfront.net z.moatads.com v1.addthisedge.com *.facebook.com *.facebook.net *.googleadservices.com *.pinimg.com *.bing.com *.ads-twitter.com *.quickspark.com *.ubembed.com *.adelixir.com *.doubleclick.net *.linkedin.com *.cloudflareinsights.com *.pinterest.com *.newrelic.com *.nr-data.net *.zoho.com *.zohocdn.com *.zohopublic.com *.maillist-manage.com *.pagesense.io *.avada.io *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com yotpo.com *.cloudflare.com *.yotpo.com swellrewards.com *.swellrewards.com https://www.coastalbusiness.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com unsafe-inline assets.braintreegateway.com *.coastalbusiness.com *.googleapis.com *.twitter.com *.quickspark.com *.fontawesome.com css.zohocdn.com *.pagesense.io *.zohostatic.com *.stripe.network *.stripecdn.com *.amazon.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.coastalbusiness.com *.zaius.com *.zdassets.com *.zohostatic.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net vimeo.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io commerce.adobe.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com qa-api.magedevteam.com *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io https://stats.addtoany.com/menu api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.googleapis.com *.affirm.com *.affirm.ca *.coastalbusiness.com *.twitter.com *.zdassets.com *.addthis.com *.amazonaws.com coastalbusiness.zendesk.com wss://widget-mediator.zopim.com *.google-analytics.com *.doubleclick.net *.pinterest.com *.ubembed.com *.yotpo.com *.nr-data.net salesiq.zohopublic.com wss://vts.zohopublic.com *.zohopublic.com https://get.geojs.io *.avada.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://*.gstatic.com 'self' data: https://widgets.trustedshops.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.storyblok.com *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com consentcdn.cookiebot.com https://*.dpdconnect.nl www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.multisafepay.com https://pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://belco-prod.s3-eu-central-1.amazonaws.com imgsct.cookiebot.com s.w.org bat.bing.com www.google.nl www.datona.be ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.storyblok.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.multisafepay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://cdn.belco.io consent.cookiebot.com consentcdn.cookiebot.com js-agent.newrelic.com ct.beslist.nl www.gstatic.com/recaptcha/ www.google.com/recaptcha/ cdn.belco.io *.dpdconnect.nl chimpstatic.com downloads.mailchimp.com *.list-manage.com static.klaviyo.com https://static-forms.klaviyo.com fast.a.klaviyo.com static-tracking.klaviyo.com/ a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.storyblok.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.multisafepay.com pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com integrations.etrusted.com integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.googletagmanager.com tagmanager.google.com analytics.tiktok.com www.clarity.ms cdn.leadinfo.net www.clickcease.com bat.bing.com https://*.dpdconnect.nl https://static.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://pay.google.com https://integrations.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://*.googleapis.com downloads.mailchimp.com https://static.klaviyo.com *.storyblok.com *.multisafepay.com assets.braintreegateway.com *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com tagmanager.google.com fonts.google.com https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com wss://chat.belco.io https://cdn.belco.io consentcdn.cookiebot.com 1.1.1.1/ *.leadinfo.net api.leadinfo.com bat.bing.net bat.bing.com analytics.tiktok.com s.clarity.ms https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.multisafepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.analytics.google.com *.googletagmanager.com *.pay.nl 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://localhost/paynl/csp/report; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; object-src 'self' data: https://*.mollie.com https://js.mollie.com; frame-ancestors 'self'; form-action *; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.usercentrics.eu https://*.usercentrics.eu https://privacy-proxy.usercentrics.eu https://widgets.trustedshops.com https://*.trustedshops.com https://integrations.etrusted.com https://*.doofinder.com https://js.mollie.com https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://ssl.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.recaptcha.net https://*.loopingo.com https://www.paypal.com https://*.paypal.com https://www.paypalobjects.com https://*.paypalobjects.com https://*.braintreegateway.com https://*.braintree-api.com https://*.userwerk.com https://connect.facebook.net https://pay.google.com https://applepay.cdn-apple.com; style-src 'self' 'unsafe-inline' https://*.usercentrics.eu https://*.trustedshops.com https://*.doofinder.com https://js.mollie.com https://fonts.googleapis.com https://*.loopingo.com https://*.paypal.com https://*.paypalobjects.com https://www.gstatic.com; img-src 'self' data: blob: https://*.usercentrics.eu https://*.trustedshops.com https://*.etrusted.com https://*.doofinder.com https://cdn.alterspruefung365.de https://*.mollie.com https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net https://www.google.com https://www.google.de https://*.loopingo.com https://www.paypal.com https://*.paypal.com https://www.paypalobjects.com https://*.paypalobjects.com https://t.paypal.com https://eu1-doofinderuser.s3.amazonaws.com https://sbp-plugin-images.s3.eu-west-1.amazonaws.com https://*.userwerk.com https://login-image.shopware.com https://fonts.gstatic.com https://analytics.google.com https://www.google.ch https://www.google.at https://www.google.nl https://www.google.be https://translate.google.com https://www.gstatic.com; font-src 'self' data: https://*.usercentrics.eu https://*.trustedshops.com https://fonts.gstatic.com https://*.loopingo.com https://*.paypalobjects.com https://*.userwerk.com https://static.shopback.com; connect-src 'self' https://*.usercentrics.eu https://privacy-proxy.usercentrics.eu https://*.trustedshops.com https://integrations.etrusted.com https://*.doofinder.com wss://*.doofinder.com https://api.mollie.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.recaptcha.net https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://*.g.doubleclick.net https://*.loopingo.com https://www.paypal.com https://*.paypal.com https://api.paypal.com https://api-m.paypal.com https://api.sandbox.paypal.com https://api-m.sandbox.paypal.com https://*.braintreegateway.com https://*.braintree-api.com https://*.userwerk.com https://analytics.google.com https://www.google.de https://www.google.ch https://www.google.at https://www.google.nl https://www.google.be https://www.google.com https://pay.google.com https://google.com; frame-src 'self' https://*.trustedshops.com https://*.mollie.com https://js.mollie.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://www.recaptcha.net https://*.loopingo.com https://www.paypal.com https://*.paypal.com https://*.paypalobjects.com https://*.braintreegateway.com https://*.userwerk.com https://www.googletagmanager.com https://pay.google.com; child-src 'self' https://www.google.com/recaptcha/ https://www.recaptcha.net https://*.loopingo.com https://www.paypal.com https://*.paypal.com; media-src 'self' data: blob:; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests; report-uri /csp-report 1
font-src *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com landofcoder.com *.trustpilot.com maps.googleapis.com chart.googleapis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://plumrocket.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.disqus.com store.paradoxlabs.com https://img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.disqus.com *.authorize.net landofcoder.com *.trustpilot.com maps.googleapis.com chart.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.trustpilot.com unsafe-inline assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src landofcoder.com maps.googleapis.com chart.googleapis.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.authorize.net landofcoder.com maps.googleapis.com chart.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'sha256-Du+OJKJSbdUgz5nrHeWWINvez6XKDDU/tyj/5c2uvwo=' 'sha256-TNzpqajVlbY9tPaRfkgRqbWTC+vvRZogIWfLKYgxHeo=' 'unsafe-hashes' 'sha256-NXgJIJJYQbjLZDdAmJyEXQ0ldk+Rf0iQY7WdZ1mQrZ4=' https://cdn.consentmanager.net https://static.cleverpush.com https://t.vital.de https://www.googletagmanager.com https://a.bf-ad.net https://*.googlesyndication.com https://*.doubleclick.net https://*.googletagservices.com https://widgets.outbrain.com https://*.outbrainimg.com https://player.glomex.com https://syndication.target-video.com 'sha256-5tOXwhhVpzjUPqBgbQLLzMC8PqBIstl3iECx6Gk7p+Q=' 'sha256-WZRJfWvsnNCPcxzZwvyhovnZGqhZaC+8gPGPRbx6wTk='; img-src 'self' data: https:; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; font-src 'self'; frame-src https:; worker-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/v1/csp-report 1
object-src 'none';base-uri 'self';script-src 'nonce-beqLGKGOFi0JCKBlzVr9Jg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.kcare.com.au data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.trackedlink.net *.googleapis.com *.kcare.com.au data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.aligent.dev:5173 webchat.dotdigital.com webchat.staging.dotdigital.com https://www.googletagmanager.com tagmanager.google.com https://www.googleadservices.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.cloudflare.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.aligent.dev:5173 webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.network *.stripecdn.com *.amazon.com *.googleapis.com *.kcare.com.au 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.kcare.com.au peggs.com.au 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.aligent.dev:5173 wss://*.aligent.dev:5173 https://maps.googleapis.com/maps/api/ webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://5e1eb541-9ce3-4111-8f88-16f9b1c99bf5.sansec.watch/; report-to report-endpoint; 1
default-src 'self' https: ; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' ; script-src-elem 'self' https: 'unsafe-inline' 'unsafe-eval' ; style-src 'self' https: 'unsafe-inline' 'unsafe-eval'; img-src 'self' https: data: ; form-action 'self' https: 'unsafe-inline' 'unsafe-eval'; 1
default-src 'self' https://sjny.edu https://*.sjny.edu; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' https://sjny.edu https://*.sjny.edu https://www.googletagmanager.com https://maps.googleapis.com https://*.gstatic.com https://wsmcdn.audioeye.com https://ws.audioeye.com https://wsv3cdn.audioeye.com https://use.typekit.net https://cse.google.com https://www.google.com https://www.googleapis.com https://clients1.google.com https://code.jquery.com https://maxcdn.bootstrapcdn.com https://connect.facebook.net https://snap.licdn.com https://s.yimg.com https://ssl.google-analytics.com https://www.google-analytics.com https://85484.tctm.co https://cdn.callrail.com https://www.clickcease.com https://sc-static.net https://analytics.tiktok.com https://tr.snapchat.com https://static.cloudflareinsights.com https://googleads.g.doubleclick.net https://tag.simpli.fi https://sjny.libcal.com https://sjny.libanswers.com https://bkadmissions-sjny-edu.cdn.technolutions.net https://liadmissions-sjny-edu.cdn.technolutions.net https://fw.cdn.technolutions.net https://slate-technolutions-net.cdn.technolutions.net https://partner.googleadservices.com https://*.adtrafficquality.google; style-src 'self' 'unsafe-inline' 'report-sample' https://sjny.edu https://*.sjny.edu https://use.typekit.net https://fonts.googleapis.com https://cse.google.com https://www.google.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://wsv3cdn.audioeye.com https://fw.cdn.technolutions.net https://slate-technolutions-net.cdn.technolutions.net; img-src 'self' data: blob: https://sjny.edu https://*.sjny.edu https://*.gstatic.com https://*.googleapis.com https://www.google.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://clients1.google.com https://wsmcdn.audioeye.com https://ws.audioeye.com https://wsv3cdn.audioeye.com https://p.typekit.net https://sp.analytics.yahoo.com https://px.ads.linkedin.com https://www.facebook.com https://ad.doubleclick.net https://*.adtrafficquality.google; font-src 'self' data: https://sjny.edu https://*.sjny.edu https://use.typekit.net https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://wsv3cdn.audioeye.com; connect-src 'self' https://sjny.edu https://*.sjny.edu https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://www.google.com https://maps.google.com https://*.googleapis.com https://wsmcdn.audioeye.com https://ws.audioeye.com https://wsv3cdn.audioeye.com https://analytics.audioeye.com https://clients1.google.com https://ad.doubleclick.net https://googleads.g.doubleclick.net https://s.yimg.com https://px.ads.linkedin.com https://analytics.tiktok.com https://tr.snapchat.com https://tr6.snapchat.com https://cloudflareinsights.com https://sjny.libcal.com https://sjny.libanswers.com https://bkadmissions-sjny-edu.cdn.technolutions.net https://liadmissions-sjny-edu.cdn.technolutions.net https://syndicatedsearch.goog https://*.adtrafficquality.google; frame-src 'self' https://sjny.edu https://*.sjny.edu https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://cse.google.com https://www.google.com https://td.doubleclick.net https://14834595.fls.doubleclick.net https://sjny.libanswers.com https://syndicatedsearch.goog https://*.adtrafficquality.google; form-action 'self' https://sjny.edu https://*.sjny.edu https://sjcmcentegart.on.worldcat.org https://sjccallahan.on.worldcat.org; frame-ancestors 'self'; manifest-src 'self' https://sjny.edu https://*.sjny.edu; worker-src 'self' blob: https://sjny.edu https://*.sjny.edu; media-src 'self' https://sjny.edu https://*.sjny.edu 1
font-src *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com *.fonts.googleapis.com *.gstatic.com data: *.cloudflare.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.sagepay.com https://plumrocket.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com *.sagepay.com *.google.com https://plumrocket.com *.addthis.com *.pinterest.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de https://www.magezon.com *.cloudflare.com https://cdn.klarna.com https://s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com *.cdninstagram.com www.xtento.com cdn.xtento.com *.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com *.sagepay.com *.googleapis.com *.google.com *.gstatic.com *.google.com/ *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com www.xtento.com cdn.xtento.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com *.sagepay.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com *.cloudflare.com *.paypal.com *.googleapis.com *.addthis.com *.cardinalcommerce.com https://graph.instagram.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'nonce-PFPIQm2CfOlcjaWGTwO0wjUcY4qXpaHLJLIaFhtV' https://www.googletagmanager.com https://*.clarity.ms https://c.bing.com https://challenges.cloudflare.com; style-src 'self' 'nonce-PFPIQm2CfOlcjaWGTwO0wjUcY4qXpaHLJLIaFhtV' https://fonts.bunny.net; font-src 'self' https://fonts.bunny.net data:; img-src 'self' data: https://pic.gayfurrycomics.com https://cdn.gayfurrycomics.com https://cdn1.gayfurrycomics.com https://cdnl.gayfurrycomics.com https://cdne.gayfurrycomics.com https://gayfurrycomics.com https://*.google-analytics.com https://*.googletagmanager.com https://*.clarity.ms https://c.bing.com https://challenges.cloudflare.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.clarity.ms https://c.bing.com https://challenges.cloudflare.com; media-src 'self' https://pic.gayfurrycomics.com https://cdn.gayfurrycomics.com https://cdn1.gayfurrycomics.com https://cdnl.gayfurrycomics.com https://cdne.gayfurrycomics.com https://gayfurrycomics.com; frame-src https://challenges.cloudflare.com; report-uri /csp-report 1
style-src *.force.com https://content.instrumentation.getconga.com https://cdn.managed-protection.com 'unsafe-inline' 'self' https://api.mixpanel.com https://checkoutshopper-test.adyen.com/ http://i2.ytimg.com https://*.acronis.com https://*.do.acronis.fun https://acronis.my.site.com https://checkoutshopper-live.adyen.com/ https://composer.congamerge.com https://*.force.com https://acronis.file.force.com https://care.acronis.com https://analytics.google.com https://fonts.googleapis.com/css2 https://td.doubleclick.net blob: https://staging.partners.acronis.com https://*.my.salesforce.com https://fonts.googleapis.com/css https://acronis.secure.force.com https://vimeo.com https://data.instrumentation.getconga.com https://acronis.my.salesforce.com https://d.la13-core1.sfdc-8tgtt5.salesforceliveagent.com *.salesforce.com *.visualforce.com:* https://service.force.com https://service.force.com/embeddedservice/; report-to sfdc-csp-ep; report-uri https://acronis.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D300000000Zcb&networkId=0DM1T0000004FEZ&type=communities 1
worker-src *.printess.com; font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cloudflare.com *.googleapis.com https://www.gstatic.com *.trustedshops.com *.twimg.com *.twitter.com pouch-global-font-assets.s3.eu-central-1.amazonaws.com cdn.honey.io *.timpson.com a.omappapi.com z.omappapi.com maxcdn.bootstrapcdn.com isnaps-builder.maxphoto.co.uk isnaps-builder-staging.maxphoto.co.uk *.fontawesome.com *.printess.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com https://fonts.gstatic.com https://cdnjs.cloudflare.com *.cloudfront.net *.reviews.io *.reviews.co.uk data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.sandbox.paypal.com *.paypalobjects.com *.timpson-group.co.uk paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.googlesyndication.com https://seo.mageplaza.com *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.awin1.com *.zenaps.com *.doubleclick.net *.bing.com *.twitter.com https://*.google.com *.googleapis.com *.static.com *.googleadservices.com *.googletagmanager.com *.googleusercontent.com *.google-analytics.com *.cloudflare.com *.gstatic.com *.sandbox.paypal.com *.paypalobjects.com *.newrelic.com *.nr-data.net *.csp-reporting-service.com *.trustist.com trustist.blob.core.windows.net vimeo.com *.ggpht.com *.xtento.com *.timpson-group.co.uk paypal.com *.termly.io *.hotjar.com *.hotjar.io *.dwin1.com *.popupsmart.com birdeye.com *.birdeye.com *.dotdigital-pages.com *.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.printess.com *.facebook.com *.googlesyndication.com account.fetchify.com g3d-app.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.reviews.io *.reviews.co.uk www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.awin1.com *.zenaps.com *.wepowerconnections.com *.maxphoto.co.uk *.tescophoto.com *.snappysnaps.co.uk photo.asda.com ap.affinity-dev.co.uk *.cloudfront.net *.googleadservices.com *.klarna.com *.lightemporium.com *.twimg.com *.twitter.com *.usercentrics.eu *.ytimg.com https://*.google.com google.com *.googleapis.com *.static.com *.googletagmanager.com *.googleusercontent.com *.cloudflare.com https://*.gstatic.com *.sandbox.paypal.com *.paypalobjects.com *.newrelic.com *.nr-data.net *.csp-reporting-service.com *.trustist.com trustist.blob.core.windows.net vimeo.com *.ggpht.com www.xtento.com *.timpson-group.co.uk *.timpson.com paypal.com *.bing.com *.bing.net *.termly.io *.hotjar.com *.hotjar.io *.dwin1.com *.popupsmart.com *.doubleclick.net *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt  *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat analytics.tiktok.com images.timpson.co.uk *.timpsonlocksmiths.co.uk *.timpsonsecurity.co.uk lantern.roeye.com a.omappapi.com z.omappapi.com *.magentocommerce.com birdeye.com *.birdeye.com *.supabase.co *.trackedlink.net *.ddlnk.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com isnaps-builder.maxphoto.co.uk isnaps-builder-staging.maxphoto.co.uk *.printess.com 'self' data: *.facebook.com *.facebook.net *.googlesyndication.com *.soreto.com g3d-app.com https://*.googleapis.com https://*.googleusercontent.com magefan.com cm.magefan.com *.disqus.com *.reviews.io *.reviews.co.uk cdn.xtento.com data: blob: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com *.fontawesome.com *.trustedshops.com *.twimg.com *.twitter.com *.usercentrics.eu https://*.google.com *.googleapis.com *.static.com *.googleadservices.com *.googletagmanager.com *.googleusercontent.com *.google-analytics.com *.cloudflare.com https://*.gstatic.com *.sandbox.paypal.com *.paypalobjects.com *.csp-reporting-service.com *.trustist.com trustist.blob.core.windows.net *.ggpht.com *.xtento.com *.timpson-group.co.uk *.timpson.com *.paypal.com paypal.com *.bing.com *.termly.io *.hotjar.com *.hotjar.io *.popupsmart.com *.doubleclick.net cdn.mouseflow.com analytics.tiktok.com a.omappapi.com cdn.studentbeans.com connect.facebook.net birdeye.com *.birdeye.com *.trysoro.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com isnaps-builder.maxphoto.co.uk isnaps-builder-staging.maxphoto.co.uk *.printess.com *.google.bg *.facebook.com *.facebook.net *.gstatic.com *.googlesyndication.com *.soreto.com cc-cdn.com g3d-app.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.disqus.com https://cdnjs.cloudflare.com *.reviews.io *.reviews.co.uk www.xtento.com cdn.xtento.com https://www.snappysnaps.co.uk https://widget.reviews.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.fontawesome.com *.trustedshops.com *.twimg.com *.twitter.com *.typekit.net *.usercentrics.eu https://fonts.googleapis.com google.com *.googleapis.com *.static.com *.googleadservices.com *.googletagmanager.com *.googleusercontent.com *.google-analytics.com *.cloudflare.com *.gstatic.com *.sandbox.paypal.com *.paypalobjects.com *.newrelic.com *.nr-data.net *.csp-reporting-service.com *.trustist.com trustist.blob.core.windows.net vimeo.com *.ggpht.com *.xtento.com *.timpson-group.co.uk *.paypal.com paypal.com *.bing.com *.termly.io *.hotjar.com *.hotjar.io *.dwin1.com *.popupsmart.com *.doubleclick.net a.omappapi.com *.timpson.com birdeye.com *.birdeye.com maxcdn.bootstrapcdn.com assets.braintreegateway.com isnaps-builder.maxphoto.co.uk isnaps-builder-staging.maxphoto.co.uk *.facebook.com *.googlesyndication.com cc-cdn.com g3d-app.com https://hcaptcha.com https://*.hcaptcha.com https://cdnjs.cloudflare.com *.cloudfront.net *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; object-src 'none'; media-src *.adobe.com data: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.wepowerconnections.com https://the.sciencebehindecommerce.com *.twitter.com *.twimg.com https://*.google.com *.google.co.uk *.google.ie *.google.fr *.google.de *.google.se *.google.nl *.google.dk *.google.it *.google.ca *.google.es google.co.uk *.googleapis.com *.static.com *.googleadservices.com *.googletagmanager.com *.googleusercontent.com *.cloudflare.com https://*.gstatic.com *.sandbox.paypal.com *.paypalobjects.com *.csp-reporting-service.com *.trustist.com trustist.blob.core.windows.net *.ggpht.com *.xtento.com *.timpson-group.co.uk *.timpson.com paypal.com *.bing.com *.bing.net *.termly.io *.hotjar.com *.hotjar.io *.dwin1.com *.popupsmart.com *.doubleclick.net api.omappapi.com analytics.tiktok.com analytics-ipv6.tiktokw.us eu01.rec.mouseflow.com *.omappapi.com a.omappapi.com z.omappapi.com kg668dbov0.execute-api.us-east-1.amazonaws.com birdeye.com *.birdeye.com rum.hlx.page *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com isnaps-builder.maxphoto.co.uk isnaps-builder-staging.maxphoto.co.uk *.printess.com printess-prod.s3.eu-central-1.amazonaws.com printess-upload.s3-accelerate.amazonaws.com *.facebook.com *.facebook.net *.googlesyndication.com *.soreto.com *.awinblackfriday.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com g3d-app.com https://ipinfo.io https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.cloudfront.net *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://report.centralcsp.com/6a315ff7cf325cf9275ea44f; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.clarity.ms https://js.stripe.com https://embed.tawk.to https://va.tawk.to https://widget.trustpilot.com https://api.websouls.com https://api.global.fvsols.com https://api.fvsols.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://widget.trustpilot.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https: http:; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://www.youtube.com https://player.vimeo.com https://widget.trustpilot.com https://embed.tawk.to; connect-src 'self' https://api.websouls.com https://api.global.fvsols.com https://api.fvsols.com https://www.google-analytics.com https://www.clarity.ms https://api.stripe.com https://va.tawk.to wss://ws.tawk.to; worker-src blob: 1
script-src 'nonce-000ee71d-0532-451c-9b0f-cf7cc3063482' 'self' 'sha256-Z5we4+MWtdDkWs67HhZwjrbqNxc9ymzHYfHGNEF7JoM=' 'wasm-unsafe-eval' chatgpt.com/ces https://*.chatgpt.com https://*.chatgpt.com/ https://*.js.stripe.com https://*.oaistatic.com https://accounts.google.com/gsi/client https://cdn.plaid.com/link/v2/stable/link-initialize.js https://chat.openai.com https://chatgpt.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/backend/se https://chatgpt.com/public-api https://js.stripe.com https://oaistatic.com https://snc.apps.openai.com wss://*.chatgpt.com wss://*.chatgpt.com/; script-src-elem 'nonce-000ee71d-0532-451c-9b0f-cf7cc3063482' 'self' 'sha256-Z5we4+MWtdDkWs67HhZwjrbqNxc9ymzHYfHGNEF7JoM=' 'sha256-eMuh8xiwcX72rRYNAGENurQBAcH7kLlAUQcoOri3BIo=' 'sha384-Sr5xwyR0H5rcDXa7/iDJDM3qBBvtHuR97A8ELbd+DFBDi32Caf72to9UVqvI8R95' auth0.openai.com blob: challenges.cloudflare.com chatgpt.com/ces https://*.chatgpt.com https://*.chatgpt.com/ https://*.js.stripe.com https://*.oaistatic.com https://analytics.tiktok.com https://apis.google.com https://bat.bing.com https://cdn.openaimerge.com/initialize.js https://cdn.plaid.com/link/v2/stable/link-initialize.js https://cdn.platform.openai.com https://chat.openai.com https://chatgpt.com https://chatgpt.com/ https://chatgpt.com/backend-anon https://chatgpt.com/backend-api https://chatgpt.com/backend/se https://chatgpt.com/public-api https://connect.facebook.net https://docs.google.com https://js.stripe.com https://oaistatic.com https://pixel-config.reddit.com https://snap.licdn.com https://snc.apps.openai.com https://www.redditstatic.com https://www.youtube.com wss://*.chatgpt.com wss://*.chatgpt.com/; worker-src 'self' blob:; report-to chatgpt-csp; report-uri https://chatgpt.com/ces/v1/telemetry/intake?ddsource=csp-report&dd-api-key=dummy-token 1
font-src *.fontawesome.com https://fonts.bunny.net https://fonts.gstatic.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://seo.mageplaza.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://*.sameday.ro *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://a.tile.openstreetmap.org https://b.tile.openstreetmap.org https://c.tile.openstreetmap.org https://www.selfawb.ro *.disqus.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com 'self' data: *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.disqus.com *.avada.io *.shopify.com cdn.jsdelivr.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://*.sameday.ro *.google.com *.gstatic.com https://www.googletagmanager.com tagmanager.google.com https://pa.7w.ro http://pa.7w.ro 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com https://fonts.bunny.net *.googleapis.com *.addtoany.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com https://*.sameday.ro tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://ecommerce.fancourier.ro https://nominatim.openstreetmap.org https://get.geojs.io *.avada.io http://dpm.demdex.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.google-analytics.com https://www.google-analytics.com https://pa.7w.ro http://pa.7w.ro 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
script-src-elem *.lursoft.lv cookiehub.net *.googleapis.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.hotjar.com *.cloudflareinsights.com *.doubleclick.net *.facebook.net *.mxapis.com *.klaviyo.com *.unpkg.com/* *.googlesyndication.com *.creativecdn.com *.videoly.co *.youtube.com *.maksekeskus.ee *.cdn-apple.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src-elem *.cookiehub.net *.cookiehub.eu cookiehub.net *.googleapis.com assets.mxapis.com *.klaviyo.com 'self' 'unsafe-inline'; font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.cloudflare.com *.typekit.net *.trustedshops.com *.fontawesome.com fonts.gstatic.com maxcdn.bootstrapcdn.com *.twitter.com *.twimg.com *.googleapis.com data: *.bootstrapcdn.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.twitter.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self' *.maksekeskus.ee *.test.maksekeskus.ee 'self'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com www.google.com *.google.com *.doubleclick.net *.facebook.com *.dotdigital-pages.com *.dotdigital.com *.youtube.com youtu.be *.vimeo.com 'self' *.maksekeskus.ee *.test.maksekeskus.ee *.twitter.com *.youtube-nocookie.com *.hotjar.com forms.office.com *.creativecdn.com *.googlesyndication.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.cloudflare.com *.klarna.com *.paypal.com *.ytimg.com *.usercentrics.eu *.maksekeskus.ee *.test.maksekeskus.ee https://maps.omnivasiunta.lt *.googleadservices.com *.google.lv *.googleapis.com *.twitter.com *.twimg.com *.lightemporium.com *.every-pay.com *.prof.lv *.omnivasiunta.lt *.klix.app *.googletagmanager.com api.mapbox.com *.cartocdn.com *.magecomp.com *.kevin.eu *.gstatic.com *.cloudfront.net *.videoly.co https://redchamps.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.cloudflare.com *.google-analytics.com www.google.com www.gstatic.com *.trustedshops.com *.usercentrics.eu *.avada.io 'self' *.maksekeskus.ee *.test.maksekeskus.ee data: https://unpkg.com *.twitter.com *.googleapis.com *.twimg.com *.gstatic.com *.fontawesome.com *.cloudflareinsights.com gatete.luminorgroup.com *.newrelic.com *.nr-data.net *.lursoft.lv cookiehub.net *.yandex.ru *.hotjar.com *.klaviyo.com *.unpkg.com/* 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.googleapis.com *.doubleclick.net *.facebook.com https://static.klaviyo.com *.cloudflare.com *.typekit.net *.trustedshops.com *.usercentrics.eu fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com *.twitter.com *.twimg.com *.gstatic.com *.bootstrapcdn.com cookiehub.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com *.google-analytics.com *.facebook.com *.facebook.net *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.cloudflare.com *.paypal.com *.googleapis.com 'self' *.maksekeskus.ee *.test.maksekeskus.ee https://geocode.arcgis.com *.twitter.com *.twimg.com *.fontawesome.com *.nr-data.net *.arcgis.com stats.g.doubleclick.net *.lursoft.lv *.yandex.ru *.hotjar.com *.hotjar.io *.google.com *.klaviyo.com *.creativecdn.com 'self' 'unsafe-inline'; child-src 'self' *.maksekeskus.ee *.test.maksekeskus.ee http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://*.cloudflare.com https://static.cloudflareinsights.com https://ajax.googleapis.com https://cdn.prod.website-files.com https://d3e54v103j8qbb.cloudfront.net https://cdn.schema-flow.com https://hapi-utm.s3.us-east-1.amazonaws.com https://*.googletagmanager.com https://googleads.g.doubleclick.net https://connect.facebook.net https://*.clarity.ms https://tracker.metricool.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.prod.website-files.com; font-src 'self' data: https://fonts.gstatic.com https://cdn.prod.website-files.com; img-src 'self' data: https:; connect-src 'self' https://api.hapi.trade wss://*.hapi.trade https://*.clarity.ms https://*.google-analytics.com https://analytics.google.com https://*.googletagmanager.com https://*.doubleclick.net https://www.google.com https://cdn.schema-flow.com https://tracker.metricool.com https://*.facebook.com https://webflow.com; frame-src https://*.lovable.app https://cdn.embedly.com https://www.youtube.com https://www.youtube-nocookie.com https://td.doubleclick.net https://www.googletagmanager.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: array.io https://*.array.io https://payitoff-cdn.io https://maps.googleapis.com https://*.google.com https://yoast.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://monitor.clickcease.com https://www.clickcease.com https://*.bootstrapcdn.com https://rum.uptime.com https://rumcollector.uptime.com https://dev.visualwebsiteoptimizer.com https://tracker.gaconnector.com https://cdnjs.cloudflare.com https://widget.clutch.co https://connect.facebook.net https://bat.bing.com https://www.redditstatic.com https://snap.licdn.com https://*.zoho.com https://analytics.ahrefs.com https://app.800.com https://widget.trustpilot.com https://js.zi-scripts.com https://*.quora.com https://*.amazonaws.com https://*.doubleclick.net https://*.clarity.ms https://*.liadm.com https://challenges.cloudflare.com https://ws.zoominfo.com https://*.zohocdn.com https://*.zohostatic.com https://unpkg.com https://www.gstatic.com https://www.youtube.com https://www.youtube-nocookie.com https://*.zohopublic.com https://cdn.callrail.com https://embedsocial.com https://*.sentry-cdn.com https://assets.calendly.com https://tools.luckyorange.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.bootstrapcdn.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://*.zohocdn.com https://*.zohostatic.com https://embedsocial.com https://fonts.cdnfonts.com https://assets.calendly.com; img-src 'self' data: https:; font-src 'self' data: https://storage.googleapis.com https://cdn-web-assets.array.io https://fonts.gstatic.com https://fonts.googleapis.com https://*.bootstrapcdn.com https://s0.wp.com https://*.zohocdn.com https://fonts.cdnfonts.com https://*.zohostatic.com; connect-src 'self' array.io https://*.netreputation.com https://*.array.io https://maps.googleapis.com https://events.launchdarkly.com https://app.launchdarkly.com https://us-central1-data-products-337817.cloudfunctions.net https://storage.googleapis.com https://settings.luckyorange.com https://translate.googleapis.com https://o411001.ingest.sentry.io https://my.yoast.com https://www.googletagmanager.com https://rum.uptime.com https://tracker.gaconnector.com https://dev.visualwebsiteoptimizer.com https://monitor.clickcease.com https://*.zoho.com https://*.zohopublic.com https://analytics.ahrefs.com https://*.analytics.google.com https://*.google-analytics.com https://cdn.jsdelivr.net https://api.800.com https://app.800.com https://widget.trustpilot.com https://px.ads.linkedin.com https://pro.ip-api.com https://a.usbrowserspeed.com https://js.zi-scripts.com https://challenges.cloudflare.com https://ws.zoominfo.com https://yoast.com https://*.amazonaws.com https://ckjzdn8vk.execute-api.us-west-2.amazonaws.com https://*.liadm.com https://pixel-config.reddit.com https://*.quora.com https://bat.bing.com https://bat.bing.net https://*.doubleclick.net https://snap.licdn.com https://*.zohocdn.com https://www.redditstatic.com wss://vts.zohopublic.com https://*.zohostatic.com https://*.clarity.ms https://rumcollector.uptime.com https://ipinfo.io https://www.googleadservices.com https://o4510874724663296.ingest.de.sentry.io https://*.sentry-cdn.com https://alocdn.com https://*.google.com https://widget.clutch.co https://www.facebook.com; frame-src 'self' https://widget.clutch.co https://*.zoho.com https://widget.trustpilot.com https://www.googletagmanager.com https://challenges.cloudflare.com https://www.youtube.com https://www.youtube-nocookie.com https://*.doubleclick.net https://snap.licdn.com https://www.facebook.com https://embedsocial.com; media-src 'self' https://*.zohocdn.com; worker-src 'self' blob:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://www.facebook.com; report-uri https://o4510874724663296.ingest.de.sentry.io/api/4510876651225168/security/?sentry_key=0a8582afe0e93e71215c90c6e7ae1829; 1
default-src 'self'; font-src data: https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud; script-src 'self' https://*.bazaarvoice.com https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://exc.mm.dm.pl https://mpsnare.iesnare.com https://omt.dm.pl https://tags.tiqcdn.com https://web.cmp.usercentrics.eu https://www.dm.pl https://www.google.com https://www.google.com/recaptcha/ https://www.gstatic.com https://www.gstatic.com/recaptcha/; worker-src 'self' blob:; connect-src 'self' https://*.bazaarvoice.com https://aggregator.service.usercentrics.eu https://api.mapbox.com https://api.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://browser-intake-datadoghq.eu https://cart-recos.services.dmtech.com https://cdcs.usercentrics.eu https://collect.tealiumiq.com https://consent-api.service.consent.usercentrics.eu https://consent-rt-ret.service.consent.usercentrics.eu https://consents.usercentrics.eu https://content-preview.apps.prod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://direct-collect.dy-api.eu https://direct.dy-api.eu https://dmpay-gateway.services.dmtech.com https://dy-api.eu https://editorial-content.dm-static.com https://events.mapbox.com https://exc.mm.dm.pl https://frontend-tracking-infra-service.services.dmtech.com https://graphql.usercentrics.eu https://insights.algolia.io https://logs.browser-intake-datadoghq.eu https://maut-prod.services.dmtech.com https://maut-rls.nonprod.services.dmtech.com https://mpsnare.iesnare.com https://my-products-api.services.dmtech.com https://omacs.services.dmtech.com https://omc.dm.pl https://predictive-shopping-service.services.dmtech.com https://product-based-recos.services.dmtech.com https://product-search.services.dmtech.com https://product-semantic-search.services.dmtech.com https://rcom-eu.dynamicyield.com https://recos-as-a-service.services.dmtech.com https://region1.google-analytics.com https://retail-media.services.dmtech.com https://rum.browser-intake-datadoghq.eu https://s2s.adjust.com https://signin.dm.pl https://sos-prod.availability.services.dmtech.com https://staedtetour.dm-fb2.de https://stars.services.dmtech.com https://storage.googleapis.com/gift-card-builder-emergency-disabled-bucket/ https://store-data-service.services.dmtech.com https://store-order-service.services.dmtech.com https://v1.api.service.cmp.usercentrics.eu https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://zoe-shop-proxy-prod.services.dmtech.com https://kuba-prod.services.dmtech.com https://zoe-shop-proxy-prod.services.dmtech.com https://cartnext.services.dmtech.com https://dmcsm-proxy.prod.services.dmtech.com https://zoe-shop-proxy-prod.services.dmtech.com https://customer-helpcenter-prod.services.dmtech.com https://paint-prod.services.dmtech.com https://content.services.dmtech.com https://content-search-service-preview.apps.prod.gcp.dmtech.cloud https://content-search-service.services.dmtech.com https://products.dm.de https://pds-import-prod.apps.prod.gcp.dmtech.cloud https://shopping-list-prod.services.dmtech.com; media-src 'self'; style-src 'self' 'unsafe-inline' https://*.bazaarvoice.com https://api.tiles.mapbox.com https://apps.bazaarvoice.com https://assets.dm.de https://composer.apps.nonprod.cf.dmtech.cloud; form-action 'self' https://*.bazaarvoice.com https://apps.bazaarvoice.com https://checkout.dm.pl https://giftcard-checkout.dm.de/api/checkout https://signin.dm.pl; img-src 'self' blob: data: https://*.bazaarvoice.com https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://cdn-eu.dynamicyield.com https://composer.apps.nonprod.cf.dmtech.cloud https://content-preview.apps.prod.gcp.dmtech.cloud https://d2pqvatijh75rn.cloudfront.net https://editorial-content.dm-static.com https://exc.mm.dm.pl https://i.ytimg.com https://images.podigee-cdn.net https://img.usercentrics.eu https://img.youtube.com/ https://media.dm-static.com https://photos-eu.bazaarvoice.com https://products.dm-static.com https://uct.service.usercentrics.eu https://content.services.dmtech.com; frame-ancestors 'self' https://account.dm.pl https://app.datadoghq.eu https://checkout.dm.pl https://content-preview.apps.prod.gcp.dmtech.cloud https://mobileapp.dm.pl https://studio.dm-drogeriemarkt.com; frame-src 'self' https://*.bazaarvoice.com https://account.dm.pl https://app.usercentrics.eu https://apps.bazaarvoice.com https://assets.dm.de https://cdn.podigee.com https://checkout.dm.pl https://configurator.nuk.de https://gastfamilie.podigee.io https://geburtskanal-dm.podigee.io https://hey-familie.podigee.io https://kinderwunschsprechstunde.podigee.io https://mobileapp.dm.pl https://player.podigee-cdn.net https://recaptcha.google.com/recaptcha/ https://sandbox.om.dm.pl https://signin.dm.pl https://web.cmp.usercentrics.eu https://www.google.com https://www.google.com/recaptcha/ https://www.youtube-nocookie.com; base-uri 'self' https://exc.mm.dm.pl; child-src 'self' blob:; manifest-src 'self'; report-to csp-endpoint; report-uri /__csp-reports__ 1
font-src *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com https://fonts.gstatic.com *.bootstrapcdn.com *.youtube.com *.crwdcntrl.net *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.google.com https://cdn.livehelpnow.net/ https://www.google.com https://www.gstatic.com *.alothemes.com *.magepow.com fonts.gstatic.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.twitter.com *.bootstrapcdn.com *.youtube.com *.crwdcntrl.net *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.google.com *.payfabric.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.sharethis.com *.twitter.com *.bootstrapcdn.com *.crwdcntrl.net *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.google.com *.payfabric.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io *.sharethis.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.bootstrapcdn.com *.youtube.com *.crwdcntrl.net *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.google.com *.outbrain.com *.casalemedia.com *.rubiconproject.com *.advertising.com *.pubmatic.com *.yahoo.com *.taboola.com *.3lift.com *.google.co.in *.adroll.com *.magentocommerce.com *.livehelpnow.net *.inspectlet.com https://c.clarity.ms https://c.bing.com *.alothemes.com *.magepow.com *.payfabric.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googletagmanager.com www.googletagmanager.com ssl.gstatic.com www.gstatic.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.sharethis.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bootstrapcdn.com *.youtube.com *.crwdcntrl.net *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.google.com *.cloudfront.net *.springbot.com *.pinterest.com *.adroll.com *.facebook.net *.consensu.org *.reviewability.com *.ampproject.org *.adobedtm.com *.authorize.net *.braintreegateway.com *.cardinalcommerce.com *.ubembed.com *.marketo.net *.livehelpnow.net *.inspectlet.com https://capturly.com/ https://www.clarity.ms https://js-agent.newrelic.com/ https://7000858.collect.igodigital.com/ https://s.pinimg.com/ https://js.hs-scripts.com/ https://assets.pcrl.co/ https://googleads.g.doubleclick.net http://7000858.collect.igodigital.com https://luckkystar.shop/ *.googleapis.com *.alothemes.com *.magepow.com *.payfabric.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com tagmanager.google.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.sharethis.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bootstrapcdn.com *.youtube.com *.crwdcntrl.net *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.google.com *.getfirebug.com *.dnky.co https://developer.livehelpnow.net/ *.alothemes.com *.magepow.com unsafe-inline assets.braintreegateway.com tagmanager.google.com fonts.google.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.sharethis.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.bootstrapcdn.com *.youtube.com *.crwdcntrl.net *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.google.com *.google-analytics.com *.doubleclick.net *.adroll.com *.gatherup.com *.ampproject.org *.google.co.in *.inspectlet.com *.mktoresp.com https://collector.capturly.com/ https://l.clarity.ms/ https://developer.livehelpnow.net/ wss://app.livehelpnow.net/ https://bam.nr-data.net/ https://capturly.com/ https://ct.pinterest.com/ http://dpm.demdex.net https://www.google.com https://www.gstatic.com *.alothemes.com *.magepow.com *.payfabric.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com google.com *.analytics.google.com *.googletagmanager.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self' ; 1
base-uri 'none'; font-src 'self' https: data: https://lightning.dcuniverseinfinite.com https://fonts.gstatic.com https://use.fontawesome.com data:; form-action 'self'; frame-ancestors 'self' https://multiverse.dc.com https://multiverse.qa.wbdnmv.net https://local.qa.wbdndc.net:444; img-src 'self' data: blob: https://lightning.dcuniverseinfinite.com https://reader.dcuniverseinfinite.com https://www.dcuniverseinfinite.com https://imgix-media.wbdndc.net https://cdn.cookielaw.org https://www.google.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.paypalobjects.com https://*.stats.paypal.com *.paypal.com *.paypalobjects.com *.venmo.com data: https://dc-qa-reader.drama9.com https://dc-qa-www.drama9.com https://imgix-media-qa.wbdndc.net https://imgix-media-dev.wbdndc.net https://c.sandbox.paypal.com; object-src 'none'; script-src-attr 'unsafe-inline'; style-src 'self' https://lightning.dcuniverseinfinite.com https://fonts.googleapis.com https://use.fontawesome.com https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com *.paypal.com *.paypalobjects.com *.venmo.com unsafe-inline 'unsafe-inline'; script-src 'self' https: https://googleads.g.doubleclick.net https://*.doubleclick.net https://cdn.cookielaw.org https://cdn.optimizely.com https://cdn.segment.com https://client-api.arkoselabs.com https://lightning.dcuniverseinfinite.com https://pg.feroot.com https://ssl.kaptcha.com https://www.google-analytics.com https://*.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://*.ingest.sentry.io *.paypal.com *.paypalobjects.com *.venmo.com unsafe-inline https://tst.kaptcha.com 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' 'nonce-xiQfKO2dDoQf+1Skev1yBHVd'; upgrade-insecure-requests; connect-src 'self' https://reader.dcuniverseinfinite.com https://search.dcuniverseinfinite.com https://api.segment.io https://cdn.cookielaw.org https://cdn.segment.com https://www.googleadservices.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.doubleclick.net https://*.google.com https://pagead2.googlesyndication.com https://ssl.kaptcha.com https://d.agkn.com https://pg.feroot.com https://client-api.arkoselabs.com https://lightning.dcuniverseinfinite.com https://privacyportal.onetrust.com https://geolocation.onetrust.com https://api.braintreegateway.com https://receive.wmcdp.io https://wmff.warnermediacdn.com https://*.optimizely.com https://sdk.iad-03.braze.com https://atlas.ngtv.io https://*.ingest.sentry.io https://payments.braintreegateway.com https://gateway.braintreegateway.com *.paypal.com *.paypalobjects.com *.venmo.com https://dc-qa-reader.drama9.com https://dc-qa-search.drama9.com https://dc-qa-www.drama9.com https://stats.g.doubleclick.net https://api.sandbox.braintreegateway.com https://payments.sandbox.braintree-api.com https://gateway-sand.sandbox.braintree-api.com https://test.receive.wmcdp.io https://tst.kaptcha.com https://sourcemaps-wsdk.roktinternal.com https://browser-intake-us5-datadoghq.com https://browser-intake-datadoghq.com; frame-src 'self' https://lightning.dcuniverseinfinite.com https://lightning.warnermediacdn.com https://d.agkn.com https://www.googletagmanager.com https://checkout.paypal.com https://assets.braintreegateway.com https://a1464009.cdn.optimizely.com https://client-api.arkoselabs.com https://apps.rokt.com https://*.cdn.optimizely.com https://*.kaptcha.com https://*.paypal.com *.paypalobjects.com *.venmo.com https://c.sandbox.paypal.com https://tst.kaptcha.com; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub4f016f96ffe92caf11f87dc365619a51&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3AdcuiWebApp%2Cenv%3Aprod; 1
default-src 'self' https: data: blob:; base-uri 'self'; object-src 'none'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data:; font-src 'self' https: data:; connect-src 'self' https:; frame-src 'self' https:; form-action 'self' https://sci.interkassa.com 1
font-src fonts.gstatic.com use.typekit.net https://cdnjs.cloudflare.com *.klaviyo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.hipay-tpp.com *.hipay.com *.paypal.com *.googleapis.com *.pinterest.com/ widget.trustpilot.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net https://images.unsplash.com *.hipay.com *.google.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.doubleclick.net *.google.fr *.googleapis.com cdn-cookieyes.com *.cdn-cookieyes.com *.r202.fr *.abtasty.com *.clarity.ms *.pinimg.com *.facebook.net *.bing.com *.facebook.com *.pinterest.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://rum.hlx.page https://maps.googleapis.com/maps/api/mapsjs https://maps.googleapis.com *.hipay-tpp.com *.hipay.com mpsnare.iesnare.com *.paypal.com *.google.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://cdnjs.cloudflare.com *.doubleclick.net *.google.fr *.googleapis.com cdn-cookieyes.com *.cdn-cookieyes.com *.r202.fr *.abtasty.com *.clarity.ms *.pinimg.com *.facebook.net *.bing.com *.facebook.com *.pinterest.com widget.trustpilot.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.hipay.com *.googleapis.com https://static.klaviyo.com https://fonts.googleapis.com https://cdnjs.cloudflare.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src data: mpsnare.iesnare.com *.googleapis.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://maps.googleapis.com/maps/api/mapsjs https://maps.googleapis.com https://player.vimeo.com *.hipay-tpp.com *.hipay.com wss://mpsnare.iesnare.com *.google.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.doubleclick.net *.google.fr *.googleapis.com cdn-cookieyes.com *.cdn-cookieyes.com *.r202.fr *.abtasty.com *.clarity.ms *.pinimg.com *.facebook.net *.bing.com *.facebook.com *.pinterest.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://cdn.jsdelivr.net https://unpkg.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://fonts.googleapis.com https://ajax.googleapis.com https://use.fontawesome.com https://www.gstatic.com; img-src 'self' data: blob: https: http:; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://use.fontawesome.com https://assets.alicdn.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://js-eu1.hsforms.net https://forms-eu1.hsforms.com https://api-eu1.hubapi.com https://*.hubspot.com https://forms-eu1.hscollectedforms.net https://*.hsforms.com https://cloudflareinsights.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://www.google.com https://region1.analytics.google.com https://region1.google-analytics.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://www.googleadservices.com https://bat.bing.com https://bat.bing.net https://*.clarity.ms https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.facebook.com https://paralela45.bot.coworkers.ai wss://paralela45.bot.coworkers.ai https://www.google.ro https://analytics.google.com https://router.project-osrm.org https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://unpkg.com https://fonts.googleapis.com https://connect.facebook.net https://translate.googleapis.com https://translate-pa.googleapis.com https://graph.facebook.com https://photos.hotelbeds.com https://backoffice.onetourismo.com https://knossostravel-mediaapi.cyberlogic.cloud https://www.google.at https://www.google.de https://www.google.fr https://www.google.co.uk https://www.google.it https://www.google.es https://www.google.nl https://www.google.pl https://www.google.ch https://www.google.bg https://www.google.gr https://www.google.ie https://www.google.com.tr https://www.google.hu https://www.google.dk https://www.google.be https://www.google.md https://www.google.am https://google.com; media-src 'self' data: blob: https://paralela45.bot.coworkers.ai; frame-src 'self' https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.facebook.com https://www.instagram.com https://www.tiktok.com https://secure.mobilpay.ro https://secure.euplatesc.ro https://consentcdn.cookiebot.com https://www.googletagmanager.com https://accounts.google.com https://forms-eu1.hsforms.com https://*.hs-sites-eu1.com; frame-ancestors 'self'; form-action 'self' https://secure.mobilpay.ro https://secure.euplatesc.ro https://www.facebook.com https://forms-eu1.hsforms.com; manifest-src 'self'; base-uri 'self'; object-src 'none'; script-src 'strict-dynamic' 'self' 'report-sample' 'wasm-unsafe-eval' https://cdn.jsdelivr.net https://code.jquery.com https://cdnjs.cloudflare.com https://unpkg.com https://ajax.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://js-eu1.hsforms.net https://static.cloudflareinsights.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://analytics.tiktok.com https://bat.bing.com https://googleads.g.doubleclick.net https://*.clarity.ms https://paralela45.bot.coworkers.ai https://cdn-cookieyes.com 'nonce-o/FuaJE6BpqSEkXFGCrRaw=='; report-uri /csp-report 1
font-src *.googleapis.com *.gstatic.com data: *.fontawesome.com *.oct8ne.com https://static.oct8ne.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.vimeo.com *.afip.gob.ar *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://mobbex.com *.oct8ne.com https://static.oct8ne.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://live.decidir.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.vimeo.com *.afip.gob.ar *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mobbex.com *.oct8ne.com https://static.oct8ne.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.afip.gob.ar *.avada.io *.googletagmanager.com https://www.googletagmanager.com tagmanager.google.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mobbex.com *.oct8ne.com https://static.oct8ne.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://live.decidir.com https://developers.decidir.com/ https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com unsafe-inline assets.braintreegateway.com https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.afip.gob.ar https://get.geojs.io *.avada.io *.google-analytics.com https://www.google-analytics.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mobbex.com *.oct8ne.com https://static.oct8ne.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://live.decidir.com https://developers.decidir.com/ https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: *.fontawesome.com *.bootstrapcdn.com 'self' data: *.threatview.app data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.threatview.app 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.authorize.net *.threatview.app 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https://static.addtoany.com/ *.dotdigital-pages.com *.dotdigital.com www.google.com *.certcapture.com https://www.googletagmanager.com/ *.authorize.net *.doubleclick.net *.weltpixel.com paypalobjects.com *.paypalobjects.com *.adroll.com *.threatview.app 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net *.googleapis.com *.trackedlink.net *.certcapture.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.facebook.com *.google.co.in ups.analytics.yahoo.com *.bidswitch.net *.openx.net *.adnxs.com *.bing.com *.listrakbi.com *.clarity.ms 'self' data: *.ads.linkedin.com *.linkedin.com *.adroll.com *.yahoo.com *.analytics.yahoo.com lhasaoms.com listrakbi.com *.tapad.com *.threatview.app data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://static.addtoany.com/ *.googleapis.com *.gstatic.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.certcapture.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io *.authorize.net *.lhasaoms.com *.facebook.net *.bing.com *.clarity.ms *.listrakbi.com https://www.googletagmanager.com tagmanager.google.com *.adroll.com *.licdn.com wisepops.net *.wisepops.com lhasaoms.com *.threatview.app *.cloudflareinsights.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.fontawesome.com *.bootstrapcdn.com *.listrakbi.com *.trackedweb.net *.googleapis.com *.gstatic.com tagmanager.google.com *.threatview.app 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.threatview.app 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://stats.addtoany.com/menu *.googleapis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.certcapture.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io *.authorize.net *.clarity.ms *.bing.com *.google-analytics.com https://www.google-analytics.com *.adroll.com *.linkedin.com *.threatview.app *.listrakbi.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com *.threatview.app 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; frame-ancestors 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://telegram.org; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://cdn.orbiter.finance https://dealer.orbiter.finance https://orbiter-bridge.s3.ap-northeast-1.amazonaws.com https://www.google-analytics.com; font-src 'self' data:; connect-src 'self' https://api.orbiter.finance https://testnet-api.orbiter.finance https://openapi.orbiter.finance https://cdn.orbiter.finance https://testnet-cdn.orbiter.finance https://market-exchange.orbk8s.com https://api.hyperliquid.xyz https://rpc.hyperliquid.xyz https://api.x.immutable.com https://api.sandbox.x.immutable.com https://link.x.immutable.com https://link.sandbox.x.immutable.com https://api3.loopring.io https://uat2.loopring.io https://tonapi.io https://toncenter.com https://api.joeyzhou.xyz https://www.google-analytics.com https://region1.google-analytics.com https://*.ingest.sentry.io 1
default-src 'self'; script-src 'self' 'unsafe-inline' blob: https://www.googletagmanager.com https://*.cloudfront.net https://static.hotjar.com https://bat.bing.com/bat.js https://js.hs-scripts.com https://*.fs1.hubspotusercontent-na1.net https://script.hotjar.com https://static.hsappstatic.net https://tracking.g2crowd.com https://js.hs-banner.com https://js.hs-analytics.net https://js.hsadspixel.net https://js.hsleadflows.net https://js.hubspot.com https://bat.bing.com https://www.google-analytics.com https://snap.licdn.com https://cdn2.hubspot.net https://code.jquery.com https://js.zi-scripts.com 'strict-dynamic' 'nonce-QIjurk49sRzOcPXtKfaPJw=='; style-src 'self' 'unsafe-inline' https://cdn2.hubspot.net/ https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://273774.fs1.hubspotusercontent-na1.net https://cdnjs.cloudflare.com https://7052064.fs1.hubspotusercontent-na1.net; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn2.hubspot.net https://maxcdn.bootstrapcdn.com https://info.juicetactics.com; img-src 'self' https://no-cache.hubspot.com https://cdn2.hubspot.net https://cdnjs.cloudflare.com https://info.juicetactics.com https://bat.bing.com https://px.ads.linkedin.com https://forms-na1.hsforms.com https://perf.hsforms.com https://forms-na1.hsforms.com https://www.google-analytics.com https://perf-na1.hsforms.com https://track.hubspot.com https://www.google.com https://assets.capterra.com https://*.fs1.hubspotusercontent-na1.net https://fs.hubspotusercontent00.net https://f.hubspotusercontent00.net https://www.googletagmanager.com https://forms.hubspot.com; frame-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn2.hubspot.net https://maxcdn.bootstrapcdn.com https://td.doubleclick.net/ https://platform.twitter.com/ https://meetings.hubspot.com/ https://play.hubspotvideo.com/ https://www.g2.com/ https://www.youtube.com/ https://forms.hsforms.com https://forms.hubspot.com; child-src; connect-src 'self' blob: https://settings.luckyorange.net https://app.hubspot.com https://cta-service-cms2.hubspot.com https://px.ads.linkedin.com wss://ws.hotjar.com https://content.hotjar.io https://cta-service-cms2.hubspot.com https://js.hs-banner.com https://px.ads.linkedin.com https://pagead2.googlesyndication.com https://www.google-analytics.com https://forms.hubspot.com https://api.hubapi.com https://analytics.google.com https://www.google.com https://googleads.g.doubleclick.net https://forms-na1.hubspot.com https://metrics.hotjar.io https://bat.bing.com https://tracking.g2crowd.com https://stats.g.doubleclick.net https://forms.hsforms.com https://js.zi-scripts.com https://ws.zoominfo.com https://cp.hubspot.com; object-src 'none'; manifest-src 'none'; media-src 'self'; form-action 'self' https://forms.hsforms.com https://forms.hubspot.com; frame-ancestors 'none'; worker-src 'self'; upgrade-insecure-requests; block-all-mixed-content 1
font-src cash-f.squarecdn.com fonts.googleapis.com fonts.gstatic.com zenloop-assets.s3.eu-west-1.amazonaws.com assets.zenloop.com *.fontawesome.com maxcdn.bootstrapcdn.com https://widgets.trustedshops.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com www.zenaps.com *.fls.doubleclick.net amc.demdex.net *.hotjar.com *.facebook.com *.trustpilot.com *.criteo.com *.criteo.net *.cleverpush.com *.justspices.de *.justspices.es *.justspices.co.uk *.sovendus.com www.facebook.com platform.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io * https://images.unsplash.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de static-eu.payments-amazon.com *.awin1.com *.zenaps.com *.wepowerconnections.com maps.gstatic.com *.googletagmanager.com *.trustedshops.com *.facebook.com *.justspices.de *.justspices.es *.justspices.co.uk *.justspices.com *.criteo.com a.twiago.com ad.360yield.com ad.sxp.smartclip.net ad.yieldlab.net ads.stickyadstv.com cdn.stickyadstv.com cm.adform.net contextual.media.net criteo-partners.tremorhub.com criteo-sync.teads.tv exchange.mediavine.com i.liadm.com ih.adscale.de cotads.adscale.de match.sharethrough.com matching.ivitrack.com pixel.rubiconproject.com public-prod-dspcookiematching.dmxleo.com s.ad.smaato.net secure.adnxs.com ib.adnxs.com visitor.omnitagjs.com x.bidswitch.net *.analytics.yahoo.com ads.yahoo.com *.doubleclick.net eb2.3lift.com r.casalemedia.com rtb-csync.smartadserver.com simage2.pubmatic.com sync.outbrain.com *.bing.com *.clarity.ms i.geistm.com *.taboola.com *.google.com *.google.de d3k81ch9hvuctc.cloudfront.net www.awin1.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.dwin1.com www.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com s7.addthis.com *.google.com cdnjs.cloudflare.com	 *.googletagmanager.com *.googleadservices.com *.hotjar.com *.trustedshops.com *.facebook.net *.google-analytics.com *.trustpilot.com cdn.jsdelivr.net *.googleoptimize.com *.criteo.net *.criteo.com *.datatables.net *.shopgate.com *.bing.com cdn.cookielaw.org *.onetrust.com *.pinterest.com s.pinimg.com analytics.tiktok.com *.clarity.ms static.cleverpush.com *.taboola.com www.dwin1.com ssl.geoplugin.net sleeknotecustomerscripts.sleeknote.com static.spott.ai *.sovendus.com the.sciencebehindecommerce.com zenloop-website-overlay-production.s3.amazonaws.com website-overlay.zenloop.com *.fullstory.com *.justspices.de https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ connect.facebook.net twitter.com platform.twitter.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cash.app *.googleapis.com *.trustpilot.com cdn.jsdelivr.net *.klaviyo.com *.adyen.com https://static.klaviyo.com *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.facebook.com *.justspices.de *.justspices.es *.justspices.co.uk *.justspices.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com * *.algolia.net *.algolia.io *.algolianet.com *.insights.algolia.io insights.algolia.io *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.wepowerconnections.com https://the.sciencebehindecommerce.com ekr.zdassets.com/ maps.googleapis.com maps.gstatic.com *.hotjar.com *.hotjar.io *.zendesk.com *.clarity.ms bat.bing.com cdn.cookielaw.org *.noibu.com wss://input.noibu.com justspices-privacy.my.onetrust.com *.onetrust.com *.criteo.com stats.g.doubleclick.net *.taboola.com *.facebook.com static-forms.klaviyo.com *.cleverpush.com *.sovendus.com *.trustpilot.com *.trustedshops.com *.zenloop.com zenloop-website-overlay-production.s3.amazonaws.com *.sciencebehindecommerce.com trustbadge.api.etrusted.com	 *.fullstory.com *.justspices.de *.google-analytics.com *.pinterest.com analytics.tiktok.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src https://www.gstatic.com *.dhlparcel.nl https://widgetcontent.thuiswinkel-cdn.org https://widget.thuiswinkel-cdn.org https://fonts.gstatic.com *.fontawesome.com *.gstatic.com 'self' data: https://widgets.trustedshops.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net *.googletagmanager.com *.doubleclick.net *.voegenshop.nl https://widgets.trustedshops.com www.xtento.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://belco-prod.s3-eu-central-1.amazonaws.com https://images.unsplash.com *.google.com *.google.nl *.mailcampaigns.nl *.cloudflare.com *.voegenshop.nl *.etrusted.com https://widgetcontent.thuiswinkel-cdn.org https://widget.thuiswinkel-cdn.org *.doubleclick.net www.xtento.com cdn.xtento.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://img.youtube.com https://www.mollie.com *.amazonaws.com *.hsforms.net *.hsforms.com 'self' data: www.google.com.ua https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com https://dlyyzort.voegenshop.be data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://cdn.belco.io https://maps.googleapis.com *.dhlparcel.nl *.google-analytics.com *.mailcampaigns.nl *.cookiecode.nl *.clarity.ms *.cloudflare.com https://consent.studio https://widget.thuiswinkel.org https://widget.thuiswinkel-cdn.org https://cloud.umami.is www.xtento.com cdn.xtento.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com https://cdn.jsdelivr.net *.belco.io https://browser.sentry-cdn.com *.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com *.sendcloud.sc *.jsdelivr.net *.hsforms.net *.hsforms.com *.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.googletagmanager.com tagmanager.google.com https://dlyyzort.voegenshop.be 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://*.googleapis.com *.dhlparcel.nl *.cloudflare.com *.etrusted.com https://widgetcontent.thuiswinkel-cdn.org https://widget.thuiswinkel-cdn.org https://static.klaviyo.com https://cdn.jsdelivr.net https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com *.sendcloud.sc *.jsdelivr.net *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com wss://chat.belco.io https://cdn.belco.io https://maps.googleapis.com https://player.vimeo.com *.doubleclick.net *.cookiecode.nl *.google.com *.voegenshop.nl https://consent.studio https://widgetcontent.thuiswinkel-cdn.org https://gateway.umami.is https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.belco.io https://*.ingest.sentry.io https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.analytics.google.com *.googletagmanager.com https://dlyyzort.voegenshop.be 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; object-src 'none'; frame-ancestors 'self'; 1
object-src 'none';base-uri 'self';script-src 'nonce-n1walgLDnTX_eb-YsEHcVw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https://www.google.com https://apikeys.civiccomputing.com; font-src 'self' https://fonts.gstatic.com https://script.hotjar.com; img-src 'self' data: https://www.hostellingscotland.org.uk https://hostellingscotland.org.uk https://static.hotjar.com https://maps.gstatic.com https://maps.googleapis.com https://developers.google.com https://ssl.google-analytics.com https://stats.g.doubleclick.net https://www.google.co.uk https://www.facebook.com https://t.co https://analytics.twitter.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://hostelbookings.net https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://maps.googleapis.com https://www.google-analytics.com https://ssl.google-analytics.com https://cc.cdn.civiccomputing.com https://static.ctctcdn.com https://www.youtube.com https://e.issuu.com https://cdnjs.cloudflare.com https://script.crazyegg.com https://static.hotjar.com https://script.hotjar.com https://connect.facebook.net https://static.ads-twitter.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://static.ctctcdn.com; connect-src 'self' https://listgrowth.ctctcdn.com https://script.crazyegg.com https://in.hotjar.com https://stats.g.doubleclick.net https://apikeys.civiccomputing.com https://surveystats.hotjar.io; object-src 'none'; frame-ancestors 'self'; frame-src https://www.youtube.com https://e.issuu.com https://www.google.com https://www.gstatic.com; 1
default-src 'none'; script-src 'nonce-E5l5n74bw6PNag0+goTvFch83GnJCh3Fmw6wQrnJCHk=' 'report-sample' 'self' https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://otp.investis.com/; style-src 'self' 'nonce-E5l5n74bw6PNag0+goTvFch83GnJCh3Fmw6wQrnJCHk=' 'report-sample' https://fonts.googleapis.com 'unsafe-hashes' 'sha256-/3kWSXHts8LrwfemLzY9W0tOv5I4eLIhrf0pT8cU0WI=' 'sha256-eoYD4hfur7D0HOrMqB4CkHyEt5D60RDqeQeIwl70Yn0='; img-src 'self' data: https://*.cdninstagram.com blob: https://*.googleapis.com https://*.gstatic.com https://*.google-analytics.com https://*.googletagmanager.com https://i.ytimg.com https://*.ggpht.com; object-src 'none'; media-src 'self'; manifest-src 'self'; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https://*.google-analytics.com https://*.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com; frame-src 'self' https://www.youtube-nocookie.com https://www.youtube.com https://*.gstatic.com https://www.google.com/recaptcha/ https://otp.investis.com/ https://otp.tools.investis.com/ https://ir2.flife.de/ https://ir.tools.investis.com/; frame-ancestors 'none'; worker-src 'self' blob:; form-action 'self'; base-uri 'self'; upgrade-insecure-requests; report-uri /api/csp-report/log; report-to csp-endpoint 1
font-src https://jsappcdn.hikeorders.com jsappcdn.hikeorders.com https://css.zohocdn.com css.zohocdn.com https://searchserverapi.com searchserverapi.com searchserverapi1.com https://unpkg.com unpkg.com *.cloudflare.com *.typekit.net *.trustedshops.com *.fontawesome.com fonts.gstatic.com https://fonts.bunny.net maxcdn.bootstrapcdn.com www.searchanise.com *.searchserverapi.com static.zohocdn.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://searchserverapi.com searchserverapi.com searchserverapi1.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.searchanise.com *.searchserverapi.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://tag.marketingcartel.com tag.marketingcartel.com https://searchserverapi.com searchserverapi.com searchserverapi1.com https://td.doubleclick.net td.doubleclick.net https://checkout.sandbox.dev.clover.com checkout.sandbox.dev.clover.com https://googleads.g.doubleclick.net googleads.g.doubleclick.net https://jsappcdn.hikeorders.com jsappcdn.hikeorders.com https://salesiq.zohopublic.com salesiq.zohopublic.com https://checkout.clover.com checkout.clover.com youtu.be *.vimeo.com *.addthis.com https://www.googletagmanager.com/ *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.searchanise.com *.searchserverapi.com *.twitter.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https://www.shopperapproved.com www.shopperapproved.com https://bat.bing.com bat.bing.com https://cdn.ywxi.net cdn.ywxi.net https://searchserverapi.com searchserverapi.com searchserverapi1.com https://checkout.sandbox.dev.clover.com checkout.sandbox.dev.clover.com https://googleads.g.doubleclick.net googleads.g.doubleclick.net https://css.zohocdn.com css.zohocdn.com https://checkout.clover.com checkout.clover.com https://mail.google.com mail.google.com https://www.clarity.ms *.clarity.ms https://pixel.visitiq.io pixel.visitiq.io https://a.usbrowserspeed.com *.usbrowserspeed.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.cloudflare.com https://cdn.klarna.com *.paypal.com https://s.ytimg.com *.usercentrics.eu blob: http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.googletagmanager.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.twitter.com *.twimg.com www.google.com www.google.ru www.searchanise.com *.searchserverapi.com s3.amazonaws.com static.zohocdn.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://pixel.visitiq.io pixel.visitiq.io https://chimpstatic.com chimpstatic.com https://www.shopperapproved.com www.shopperapproved.com https://www.clickcease.com www.clickcease.com https://googleads.g.doubleclick.net googleads.g.doubleclick.net https://searchserverapi.com searchserverapi.com searchserverapi1.com https://bat.bing.com bat.bing.com https://jsappcdn.hikeorders.com jsappcdn.hikeorders.com https://salesiq.zohopublic.com salesiq.zohopublic.com https://h64.online-metrix.net h64.online-metrix.net https://js.zohocdn.com js.zohocdn.com https://js.zohostatic.com js.zohostatic.com https://static.zohocdn.com static.zohocdn.com https://cdn.amplitude.com cdn.amplitude.com https://checkout.sandbox.dev.clover.com checkout.sandbox.dev.clover.com https://static.cloudflareinsights.com static.cloudflareinsights.com https://checkout.clover.com checkout.clover.com https://js-agent.newrelic.com js-agent.newrelic.com https://www.clarity.ms *.clarity.ms downloads.mailchimp.com *.list-manage.com *.cloudflare.com *.google-analytics.com *.google.com *.gstatic.com *.googleadservices.com *.googleapis.com *.trustedshops.com *.usercentrics.eu *.addthis.com *.addthisedge.com *.moatads.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ http://www.google-analytics.com/ https://www.google-analytics.com/ http://www.google.com/ https://www.google.com/ www.googletagmanager.com *.avada.io *.google.com/ assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com searchanise-ef84.kxcdn.com s3.amazonaws.com ajax.aspnetcdn.com www.searchanise.com *.searchserverapi.com *.searchanise.com api.amplitude.com *.twitter.com *.twimg.com https://cdn-scripts.signifyd.com https://imgs.signifyd.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://www.shopperapproved.com www.shopperapproved.com https://cdn.ywxi.net cdn.ywxi.net https://css.zohocdn.com css.zohocdn.com https://css.zohostatic.com css.zohostatic.com https://searchserverapi.com searchserverapi.com searchserverapi1.com https://www.gstatic.com www.gstatic.com https://unpkg.com unpkg.com downloads.mailchimp.com *.cloudflare.com *.typekit.net *.trustedshops.com *.usercentrics.eu fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com www.searchanise.com *.searchserverapi.com searchanise-ef84.kxcdn.com s3.amazonaws.com *.twitter.com ton.twimg.com static.zohocdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https://www.merchant-center-analytics.goog www.merchant-center-analytics.goog api2.amplitude.com https://bat.bing.com bat.bing.com https://analytics.google.com analytics.google.com https://a11yenablerapi.hikeorders.com a11yenablerapi.hikeorders.com https://salesiq.zohopublic.com salesiq.zohopublic.com wss://vts.zohopublic.com vts.zohopublic.com https://searchserverapi.com searchserverapi.com searchserverapi1.com https://google.com *.google.com https://www.googleadservices.com *.googleadservices.com https://bam.nr-data.net bam.nr-data.net https://www.clarity.ms *.clarity.ms https://checkout.clover.com checkout.clover.com https://checkout.sandbox.dev.clover.com checkout.sandbox.dev.clover.com https://*.clover.com https://*.cloverpayments.com https://ipinfo.io *.cloudflare.com *.paypal.com *.googleapis.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com google.com api.amplitude.com stats.g.doubleclick.net https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://googletagmanager.com/ https://*.googletagmanager.com/ https://cookielaw.org/ https://*.cookielaw.org/ https://acsbapp.com/ https://googleapis.com/ https://fontawesome.com/ https://*.fontawesome.com/ https://youtube.com/ https://*.youtube.com/ https://*.googleadservices.com/ https://*.doubleclick.net/ https://*.google.com/; style-src 'self' 'unsafe-inline' https://googleapis.com/ https://*.googleapis.com/; img-src 'self' https://cdn.cookielaw.org/ https://*.cookielaw.org/ https://*.googleadservices.com/ https://*.google.com/ https://*.ytimg/; font-src 'self' data: https://fontawesome.com/ https://*.fontawesome.com/ https://gstatic.com/ https://*.gstatic.com/; form-action 'self'; frame-src 'self' https://youtube.com/ https://*.youtube.com/; connect-src 'self' https://*.googlesyndication.com/ https://*.fontawesome.com/ https://*.cookielaw.org/ https://*.google-analytics.com/ https://*.acsbapp.com/ https://*.google.com/ https://*.doubleclick.net/ https://*.googleadservices.com/ https://*.onetrust.com/; 1
default-src 'self'; script-src 'self' 'unsafe-eval' https://tjenester.husbanken.no https://apps.husbanken.no https://cse.google.com https://www.google.com https://www.gstatic.com https://analytics.husbanken.no; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://fonts.googleapis.com https://www.google.com https://apps.husbanken.no https://tjenester.husbanken.no; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https://analytics.husbanken.no https://www.google.com https://www.gstatic.com https://clients1.google.com; connect-src 'self' https://tjenester.husbanken.no https://apps.husbanken.no https://analytics.husbanken.no https://cse.google.com https://syndicatedsearch.goog; frame-src https://tjenester.husbanken.no https://kundeforhold-bostotte.husbanken.no https://cse.google.com https://www.google.com; object-src 'none'; base-uri 'self'; form-action 'self' https://kundeforhold-bostotte.husbanken.no; upgrade-insecure-requests;; report-uri /api/csp/report 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; img-src 'self' https: data: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://telegram.org https://*.telegram.org https://platform.twitter.com https://connect.facebook.net https://www.instagram.com https://static.cloudflareinsights.com https://mc.yandex.ru; connect-src 'self' https: wss://mc.yandex.ru; media-src 'self' https: blob:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://t.me https://*.telegram.org https://platform.twitter.com https://twitter.com https://*.twitter.com https://platform.x.com https://mc.yandex.ru 1
default-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' data: blob: *.googlesyndication.com *.doubleclick.net *.facebook.com www.google-analytics.com vc.hotjar.io *.facebook.net *.hotjar.com *.hotjar.io tag.perfectaudience.com pixel-geo.prfct.co ekr.zdassets.com *.zendesk.com www.google.com wss://widget-mediator.zopim.com shielded.co.nz ampcid.google.co.nz fonts.gstatic.com v2assets.zopim.io www.googletagmanager.com koi-3qn7bghifk.marketingautomation.services static.zdassets.com secure.adnxs.com adservice.google.com analytics.google.com www.google.co.nz cdnjs.cloudflare.com ampcid.google.com www.google.com.au www.googletagservices.com; form-action  *.facebook.com; frame-ancestors 'self' ; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.googletagmanager.com stats.g.doubleclick.net apis.google.com connect.facebook.net googleads.g.doubleclick.net www.googleadservices.com scripts.clarity.ms static.cloudflareinsights.com www.clarity.ms integration-hub.mailclick.me challenges.cloudflare.com i.k-analytix.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data: www.google-analytics.com stats.g.doubleclick.net connect.facebook.net www.googletagmanager.com www.google.com www.google.com.br *.clarity.ms c.clarity.ms; connect-src 'self' www.google-analytics.com stats.g.doubleclick.net www.googleadservices.com *.clarity.ms *.cloudfront.net i.konduto.com www.google.com c.clarity.ms v.clarity.ms; font-src 'self' fonts.gstatic.com; frame-src 'self' www.youtube.com www.googletagmanager.com challenges.cloudflare.com www.google.com; object-src 'none'; media-src 'self' data:; form-action 'self' 1
default-src * 'unsafe-inline' 'unsafe-eval'; style-src 'unsafe-inline'; script-src 'none' 'report-sample'; connect-src 'none'; form-action 'none'; frame-src 'none'; worker-src 'none'; frame-ancestors 'none'; report-uri https://csp.threatview.app/report; report-to threatview 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://unpkg.com https://www.googletagmanager.com https://challenges.cloudflare.com https://js.tebex.io https://js.whop.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; connect-src 'self' https:; frame-src 'self' https://challenges.cloudflare.com https://discord.com; object-src 'none'; base-uri 'self' 1
font-src *.googleapis.com *.gstatic.com *.fontawesome.com *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com *.iris.dias.com.gr *.test-iris.dias.com.gr *.twitter.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.instagram.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com bytedance: sslocal: https://www.googletagmanager.com/ *.twitter.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com *.cdninstagram.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.google-analytics.com *.googleadservices.com *.cookiebot.com mcusercontent.com *.lightemporium.com *.usercentrics.eu *.cloudflare.com *.twitter.com *.klarna.com *.ytimg.com *.twimg.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com *.instagram.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.googletagmanager.com tagmanager.google.com *.cloudflare.com *.twitter.com *.google-analytics.com *.google.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com chimpstatic.com *.mailchimp.com *.list-manage.com *.cookiebot.com https://www.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.fontawesome.com *.googletagmanager.com tagmanager.google.com *.mailchimp.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.google-analytics.com *.googlesyndication.com *.cookiebot.com *.cloudflare.com *.twitter.com *.twimg.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; frame-src https:; report-uri /csp-report 1
script-src 'unsafe-inline' 'unsafe-eval' cdn2.hubspot.net *.hubspot.com *.hubspotusercontent10.net js.hscollectedforms.net js.hsleadflows.net js.hs-scripts.com js.hsadspixel.net js.hs-analytics.net js.hs-banner.com js.hs-banner.net *.hsforms.net *.hsforms.com static.hsappstatic.net js.hubspotfeedback.com feedback.hubapi.com js.usemessages.com *.vidyard.com cdnjs.cloudflare.com cdnjs.cloudflare.com 10921146.fls.doubleclick.net plausible.io *.hotjar.com *.hotjar.io *.qualified.com bttrack.com *.googletagmanager.com *.force.com *.thycotic.com *.centrify.com *.bidr.io *.rlcdn.cm t.co *.twitter.com burly.io *.clickagy.com *.doubleclck.net *.zoominfo.com lltrck.com facebook.com *.facebook.net *.redditstatic.com *.linkedin.com *.licdn.com *.demandbase.com *.zoominfo.com 'strict-dynamic' 'nonce-qlL2WH/7zVrsoK0Nb/qGIQ==' 1
font-src https://www.googletagmanager.com *.googleapis.com *.gstatic.com cdnjs.cloudflare.com use.typekit.net https://fonts.gstatic.com *.klarnacdn.net *.fontawesome.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors localhost:* *.motive.co *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * ls.smct.io d2d7do8qaecbru.cloudfront.net ad4m.at ban.2trk.info td.doubleclick.net my.lcmark.net *.klarna.com *.multisafepay.com https://pay.google.com *.sendcloud.sc *.jsdelivr.net app.pulsantereso.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com *.googleapis.com *.cookiebot.com farmaciaospedale.com widget.feedaty.com www.facebook.com d3k81ch9hvuctc.cloudfront.net lantern.roeye.com as.ad4m.at track.adform.net cdn.iubenda.com www.google.it test.briconow.it *.feedaty.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klarna.com *.klarnaevt.com *.klarnacdn.net *.motive.co *.multisafepay.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.amazonaws.com ts.tradetracker.net www.magmodules.eu www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com tagmanager.google.com https://www.googletagmanager.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js *.googleapis.com *.gstatic.com *.trovaprezzi.it *.cookiebot.com farmaciaospedale.com static.klaviyo.com cdn.doofinder.com widget.feedaty.com cdn.jsdelivr.net static-tracking.klaviyo.com www.dwin1.com cdn.iubenda.com connect.facebook.net lantern.roeyecdn.com cdn.preciso.net api.bounce-commerce.de assets.brandswap.com cdn.iintf.co widget.envolvetech.com smct.co www.upsellit.com assets.soreto.com awinscripts.tyviso.com js.smct.io cs.iubenda.com ad4m.at api.contester.net d16fk4ms6rqz1v.cloudfront.net api.recova.ai awin.etagdigital.com cdn.scalapay.com integrations.etrusted.com static.cloudflareinsights.com test.briconow.it code.jquery.com *.feedaty.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.motive.co *.multisafepay.com https://pay.google.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.sendcloud.sc *.jsdelivr.net tm.tradetracker.net tracking.trovaprezzi.it www.trovaprezzi.it app.pulsantereso.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com fonts.googleapis.com *.klaviyo.com farmaciaospedale.com cdn.jsdelivr.net widget.feedaty.com cdn.doofinder.com static.klaviyo.com cdn.iubenda.com p.typekit.net use.typekit.net *.feedaty.com https://fonts.googleapis.com https://static.klaviyo.com *.klarnacdn.net *.fontawesome.com *.multisafepay.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.gstatic.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://www.google-analytics.com *.googleapis.com *.cookiebot.com region1.analytics.google.com widget.feedaty.com fast.a.klaviyo.com static-forms.klaviyo.com routes.soreto.com eu1-layer.doofinder.com api.bounce-commerce.de tagapi.brandswap.com analytics.helpmechoose.services api.recova.ai cognito-identity.eu-west-1.amazonaws.com idb.iubenda.com envolve-chatbot-api-dot-envolvetech-001.nw.r.appspot.com firehose.eu-west-1.amazonaws.com bot-dot-envolvetech-001.appspot.com farmaciaospedale.com *.feedaty.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.motive.co *.multisafepay.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com app.pulsantereso.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com app.pulsantereso.com http: https: blob: 'self' 'unsafe-inline'; default-src farmaciaospedale.com googleads.g.doubleclick.net ban.2trk.info www.wepowerconnections.com my.lcmark.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-QC7qDwN20Npk_OSwrI5yZHdBIl6qmg3o1GngeJeGjDSnq0N6d1Xtsg' https://matomo.landkreis-ludwigsburg.de 'sha256-5Y5GVIqDpgdk8+ghDgsVTHc1x4w2tOetGgfk3X0u6FY=' https://privacy-policy-sync.comply-app.com 'sha256-WLFbKPXMgbWm1RpkHViywMOSMTg35NZ1nSeS0dhQJic=' https://app.dxgvo-scan.de/static/js/exkulpa_ds.js 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://chat-lu.komm.one https://www.google.com; style-src 'self' https://vrweb15.linguatec.org 'sha256-1gGkeRi9lXAuhTuwy8haIrmBIYZz107E8A/W3CxjeP0=' 'sha256-d7rFBVhb3n/Drrf+EpNWYdITkos3kQRFpB0oSOycXg4=' 'report-sample'; connect-src 'self' https://matomo.landkreis-ludwigsburg.de https://privacy-policy-sync.comply-app.com https://app.dxgvo-scan.de; report-uri https://www.landkreis-ludwigsburg.de/@http-reporting?csp=report&requestTime=1789266856094466&requestHash=d113b64f7c724c80b439188872207d71fd5644e8 1
font-src *.fontawesome.com 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de cdn.dnky.co webchat.dotdigital.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com js.authorize.net jstest.authorize.net js.braintreegateway.com cdn-scripts.signifyd.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net cdn.dnky.co api.comapi.com webchat.dotdigital.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net api.comapi.com webchat.dotdigital.com 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://zz.aftermath.finance https://*.posthog.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; worker-src 'self' blob:; connect-src 'self' https: wss:; frame-src 'self' https:; upgrade-insecure-requests 1
default-src 'self'; connect-src 'self' https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://www.googletagmanager.com https://www.google-analytics.com; font-src 'self' data:; frame-src 'self' https://www.google.com https://www.googletagmanager.com https://www.youtube.com; img-src 'self' data: blob: https://*.google-analytics.com https://*.analytics.google.com https://*.fbcdn.net https://www.gcis.gov.za https://www.google.com https://www.google.co.za https://www.googletagmanager.com https://*.ytimg.com https://www.google-analytics.com; object-src 'none'; script-src 'self' 'report-sample' blob: https://*.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com; style-src 'self' 'report-sample' 'unsafe-inline'; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; webrtc 'block'; worker-src 'self' blob:; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /system/reporting/default; report-to default 1
font-src *.fontawesome.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de maps.gstatic.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com *.avada.io maps.googleapis.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com https://get.geojs.io *.avada.io *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' https: blob:; worker-src 'self' blob: 1
object-src 'none'; script-src 'self' cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com mdbootstrap.com; script-src-attr 'self'; style-src 'self' cdnjs.cloudflare.com fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com mdbootstrap.com use.fontawesome.com; style-src-attr 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://challenges.cloudflare.com https://cdn.jsdelivr.net https://platform.twitter.com https://js.stripe.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com; img-src 'self' https: data:; font-src 'self' https://fonts.gstatic.com; frame-src https://js.stripe.com https://challenges.cloudflare.com; connect-src 'self' https://api.stripe.com; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cloudflare.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.trustedshops.com *.googleapis.com *.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.twitter.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.twitter.com https://www.google.com https://www.google.co.in https://www.facebook.com ipinfo.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com landofcoder.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.uimdc.b2b.unileverservices.com epbooh.b2b.unileverservices.com ebooh.b2b.unileverservices.com *.unilever.ca *.unilever.ch *.unilever.com *.unilever.co.th *.cloudflare.com *.google.com *.google.co.in https://www.facebook.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.connect.facebook.net https://stats.g.doubleclick.net https://d.adroll.com https://pixel.advertising.com https://pixel.rubiconproject.com https://simage2.pubmatic.com https://dsum-sec.casalemedia.com https://ads.yahoo.com https://eb2.3lift.com https://sync.outbrain.com https://trc.taboola.com https://x.bidswitch.net/sync https://ib.adnxs.com https://idsync.rlcdn.com https://us-u.openx.net https://ups.analytics.yahoo.com https://segments.company-target.com https://sync.tidaltv.com *.ssl-images-amazon.it *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.es *.ssl-images-amazon.fr *.cookielaw.org *.unileverservices.com *.googletagmanager.com t.paypal.com *.googleapis.com http://orderstreets.com.au http://www.orderstreets.com.au http://ulmarketdirect.com http://www.ulmarketdirect.com http://teloencargo.com.mx http://www.teloencargo.com.mx http://icmarketdirect.com http://www.icmarketdirect.com www.google-analytics.com www.paypalobjects.com *.aptrinsic.com storage.googleapis.com blob: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.cloudflare.com *.twitter.com *.google.co.in *.facebook.com *.googleadservices.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://connect.facebook.net *.paypalobjects.com *.paypal.com https://chimpstatic.com *.googletagmanager.com https://s.adroll.com https://d.adroll.com https://d.adroll.mgr.consensu.org *.bootstrapcdn.com https://js-agent.newrelic.com https://bam.nr-data.net http://uk.switzerland.local/static/ *.cookielaw.org t.paypal.com magento-recs-sdk.adobe.net ipinfo.io *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com landofcoder.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.cloudflare.com *.googleapis.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.youtube.com *.bootstrapcdn.com *.cookielaw.org *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src ipinfo.io landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.youtube.com *.cloudflare.com *.twitter.com *.twimg.com *.google.co.in *.facebook.com https://js-agent.newrelic.com https://bam.nr-data.net http://uk.switzerland.local/static *.onetrust.com *.cookielaw.org ipinfo.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com landofcoder.com *.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://ebooh.b2b.unileverservices.com; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com data: https://www.googletagmanager.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.oct8ne.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com pay.realexpayments.com pay.sandbox.realexpayments.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com pay.realexpayments.com pay.sandbox.realexpayments.com *.oct8ne.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.connectif.cloud https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.oct8ne.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.connectif.cloud *.avada.io *.shopify.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com pay.realexpayments.com pay.sandbox.realexpayments.com *.oct8ne.com www.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net *.addtoany.com maxcdn.bootstrapcdn.com www.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.connectif.cloud https://get.geojs.io *.avada.io http://dpm.demdex.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com pay.realexpayments.com pay.sandbox.realexpayments.com api.realexpayments.com api.sandbox.realexpayments.com *.oct8ne.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src blob:; font-src fonts.gstatic.com *.kxcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.gstatic.com https://fonts.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io scontent.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.gstatic.com *.cdninstagram.com *.fbcdn.net *.stripe.com *.stripe.network https://*.google.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com magefan.com cm.magefan.com *.disqus.com www.facebook.com px.ads.linkedin.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.google.com *.gstatic.com cdn.ampproject.org connect.facebook.net www.googletagmanager.com googletagmanager.com *.kxcdn.com platform.twitter.com 'unsafe-inline' *.addthis.com *.addthisedge.com *.moatads.com static.cloudflareinsights.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://*.google.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com sce.toogoerp.net sce.toogo.io sce-test.toogoerp.net x.klarnacdn.net *.klarnaservices.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.disqus.com *.trustpilot.com snap.licdn.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com https://fonts.googleapis.com downloads.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com assets.braintreegateway.com *.klarnacdn.net https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google.com google.com x.klarnacdn.net *.klarnaservices.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.google-analytics.com px.ads.linkedin.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://widget.clutch.co https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net https://*.google.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://widget.clutch.co https://challenges.cloudflare.com; frame-ancestors 'self'; base-uri 'self'; report-uri https://litslink.com/_csp-report; report-to csp-endpoint 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.searchanise.com *.searchserverapi.com *.searchserverapi1.com *.twitter.com searchserverapi.com searchserverapi1.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://mobbex.com www.searchanise.com *.searchserverapi.com *.searchserverapi1.com *.twitter.com https://mercadopago.com.ar *.mercadopago.com.ar https://www.facebook.com *.facebook.com searchserverapi.com searchserverapi1.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io google.com google.com.ar https://firebasestorage.googleapis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mobbex.com *.twitter.com *.twimg.com www.google.ru www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com s3.amazonaws.com https://giliycia.com.ar *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://maps.gstatic.com *.avada.io *.shopify.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mobbex.com searchanise-ef84.kxcdn.com s3.amazonaws.com ajax.aspnetcdn.com www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com *.searchanise.com api.amplitude.com *.twitter.com *.twimg.com *.hotjar.com https://www.clarity.ms *.clarity.ms static.cloudflareinsights.com *.cloudflareinsights.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com searchanise-ef84.kxcdn.com s3.amazonaws.com *.twitter.com ton.twimg.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://get.geojs.io *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mobbex.com api.amplitude.com stats.g.doubleclick.net www.google-analytics.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://cdnjs.cloudflare.com https://cdn.fonts.net https://*.hubspot.com https://*.hsappstatic.net https://*.hubspotusercontent-na1.net https://*.hscollectedforms.net https://*.hs-analytics.net https://*.hs-banner.com https://*.hsforms.net https://platform.linkedin.com https://connect.facebook.net https://platform.twitter.com https://syndication.twitter.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://cdn.fonts.net https://cdnjs.cloudflare.com https://*.hsappstatic.net https://*.hubspotusercontent-na1.net https://cdn.jsdelivr.net; font-src 'self' data: https://cdn.fonts.net https://static.hsappstatic.net; img-src 'self' data: https://*.hubspotusercontent-na1.net https://*.hsforms.com https://*.hsappstatic.net https://*.hubspot.com https://www.google.ca https://www.google.com https://www.googletagmanager.com; media-src 'self'; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://*.hubspot.com https://*.hsappstatic.net https://*.hscollectedforms.net https://*.hs-analytics.net https://*.hs-banner.com https://*.hsforms.net https://*.hsforms.com https://connect.facebook.net https://platform.twitter.com https://syndication.twitter.com https://www.linkedin.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; frame-src 'self' https://*.hubspotvideo.com https://app.hubspot.com https://*.hsforms.com https://platform.twitter.com https://syndication.twitter.com https://www.facebook.com https://www.linkedin.com https://www.youtube.com https://www.youtube-nocookie.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-to csp-endpoint 1
default-src 'self' data: amplify.outbrain.com analytics.google.com api.glia.com api.intentiq.com api.salemove.com autolink.io cdn.inpwrd.net cdn.taboola.com cds.taboola.com client-logger.salemove.com content.inpwrd.net efraudprevention.net empowerfculocator.wave2.io fonts.googleapis.com fonts.gstatic.com libs.salemove.com pips.taboola.com pubsub.salemove.com region1.google-analytics.com stats.g.doubleclick.net sync.intentiq.com syncv4.intentiq.com tags.srv.stackadapt.com tr.outbrain.com trc.taboola.com trc-events.taboola.com wave.outbrain.com www.google-analytics.com www.googletagmanager.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' api.glia.com autolink.io cdn.cookielaw.org cdn.inpwrd.net connect.facebook.net empowerfculocator.wave2.io libs.salemove.com tags.srv.stackadapt.com www.google-analytics.com www.googletagmanager.com 'report-sha256'; script-src-attr 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' blob: data: api.glia.com apis.google.com app.link ajax.cloudflare.com autolink.io bat.bing.com cdn.cookielaw.org cdn.equalweb.com cdn.inpwrd.net cdnjs.cloudflare.com cdns.brsrvr.com connect.facebook.net content.inpwrd.net d.la2-c1cs-fra.salesforceliveagent.com empowerfculocator.wave2.io libs.salemove.com service.force.com tags.creativecdn.com tags.srv.stackadapt.com www.bloomberg.com www.google-analytics.com www.googletagmanager.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com libs.salemove.com tags.srv.stackadapt.com www.gstatic.com; style-src-attr  'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' data: fonts.googleapis.com libs.salemove.com tags.srv.stackadapt.com use.fontawesome.com; img-src 'self' blob: data: assets.orb.alkamitech.com bat.bing.com bat.bing.net c.bing.com cdn.cookielaw.org cdn.exchmapdata.com connect.facebook.net contextual.media.net exchange.mediavine.com *.g.doubleclick.net i.ytimg.com ib.adnxs.com l.facebook.com mobile.apply.empowerfcu.com mortgage.empowerfcu.com r.casalemedia.com rest.exchmapdata.com static.xx.fbcdn.net storage.googleapis.com sync.outbrain.com sync-t1.taboola.com translate.google.com ui.autolink.io uploads.salemove.com www.facebook.com www.google.ca www.googletagmanager.com www.livenation.com; font-src 'self' data: assets.alicdn.com at.alicdn.com cdn.fontshare.com cdn.scite.ai cdn-uicons.flaticon.com fonts.gstatic.com use.fontawesome.com; connect-src 'self' data: analytics.google.com api.glia.com api2.branch.io autolink.io bat.bing.net cdn.cookielaw.org cdn.equalweb.com cdn.shopimgs.com connect.facebook.net eventgw.us1.twilio.com geolocation.onetrust.com localhost:* my.empowerfcu.com pagead2.googlesyndication.com privacyportal.onetrust.com psb.taboola.com readaloud.googleapis.com region1.google-analytics.com *.salemove.com sdk.twilio.com stats.g.doubleclick.net tags.srv.stackadapt.com translate.googleapis.com translate-pa.googleapis.com us.creativecdn.com websocket.localhost:* ws://websocket.localhost:* wss://127.0.0.1:* wss://*.salemove.com wss://localhost:* wss://voice- js.roaming.twilio.com www.google.com www.google-analytics.com www.googletagmanager.com; media-src 'self' data: libs.salemove.com; object-src 'self'; child-src www.culookup.com www.youtube.com; frame-src 14541718.fls.doubleclick.net cdn.exchmapdata.com efraudprevention.net *.empowerfcu.com empowerfculocator.wave2.io www.culookup.com www.youtube.com td.doubleclick.net tel www.optoutprescreen.com; worker-src blob:; frame-ancestors 'self' *.empowerfcu.com *.zagclients.net; form-action 'self' my.empowerfcu.com webto.salesforce.com; manifest-src 'self'; report-uri https://empower.report-uri.com/r/t/csp/wizard; report-to https://empower.report-uri.com/r/t/csp/wizard 1
object-src 'none';base-uri 'self';script-src 'nonce-pm7qeiCbGcq3-ib-UaWG7w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src  'none'; connect-src 'self' *.21naturals.com *.21members.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.21naturals.com *.21members.com join.gammasecure.com; script-src 'self' *.21naturals.com *.21members.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.21naturals.com *.21members.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.klaviyo.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net cash-f.squarecdn.com https://client.crisp.chat https://plugin-magento-ui.glopalservice.com *.fontawesome.com https://fonts.bunny.net *.cloudflare.com fonts.gstatic.com/ maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://applepay.cdn-apple.com applepay.cdn-apple.com www.promessedefleurs.ie data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com p.monetico-services.com www.promessedefleurs.ie 'self' 'unsafe-inline'; frame-ancestors www.promessedefleurs.ie 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ * ct.pinterest.com *.payplug.com *.dalenys.com https://applepay.cdn-apple.com api-qa.payplug.com secure-qa.payplug.com www.promessedefleurs.ie 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io * https://images.unsplash.com https://image.crisp.chat *.google.com *.google.fr *.google.ie *.jardindupicvert.com *.jardindupicvert.com.localhost *.promessedefleurs.com *.promessedefleurs.com.localhost cl.avis-verifies.com ct.pinterest.com bat.bing.com www.google.com.vn https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com https://firebasestorage.googleapis.com https://secure-magenta.dalenys.com bzr.openai.com https://redchamps.com *.openstreetmap.fr *.openstreetmap.org unpkg.com www.promessedefleurs.ie data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://maps.googleapis.com https://player.vimeo.com https://client.crisp.chat *.google.com *.google.fr *.google.ie *.googletagmanager.com *.googleadservices.com cl.avis-verifies.com bat.bing.com s.pinimg.com https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com cdn-renderer.glopalstore.com *.avada.io *.shopify.com https://cdnjs.cloudflare.com https://secure-magenta.dalenys.com https://applepay.cdn-apple.com api-qa.payplug.com cdn.payplug.com https://cdn.payplug.com cdn-qa.payplug.com https://cdn-qa.payplug.com *.clarity.ms bzrcdn.openai.com https://unpkg.com/pwacompat www.promessedefleurs.ie 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app https://client.crisp.chat https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://secure-magenta.dalenys.com unpkg.com www.promessedefleurs.ie 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.promessedefleurs.ie 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io * https://maps.googleapis.com https://player.vimeo.com https://client.crisp.chat wss://client.relay.crisp.chat https://plugins.crisp.chat *.doubleclick.net *.jardindupicvert.com *.jardindupicvert.com.localhost *.promessedefleurs.com *.promessedefleurs.com.localhost ct.pinterest.com https://api-plugin-facade.glopalservice.com https://cognito-idp.eu-west-1.amazonaws.com api.glopaltranslator.com https://get.geojs.io *.avada.io *.clarity.ms c.bing.com bzr.openai.com bzrcdn.openai.com *.openstreetmap.org *.arcgis.com www.promessedefleurs.ie 'self' 'unsafe-inline'; child-src www.promessedefleurs.ie http: https: blob: 'self' 'unsafe-inline'; default-src cl.avis-verifies.com www.promessedefleurs.ie 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-bPhyvs-cSOJMpzk2nYssCw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https: data:; frame-src 'self' https:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; 1
object-src 'none';base-uri 'self';script-src 'nonce-QmpxcinV6TklH7kCE6QCSw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-QNgRwGzcMdye-C7fMf_rZg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com/friendly-challenge@0.9.8/widget.module.min.js https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.youtube.com https://www.youtube-nocookie.com https://cdn.matomo.cloud https://juwi.matomo.cloud https://connect.facebook.net/en_US/fbevents.js https://connect.facebook.net/signals/config/ https://snap.licdn.com/li.lms-analytics/insight.min.js 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' https://juwi.matomo.cloud https://imgsct.cookiebot.com/ https://tile.openstreetmap.org https://www.facebook.com/tr/ https://www.facebook.com/privacy_sandbox/pixel/register/trigger/ https://px.ads.linkedin.com/collect https://px4.ads.linkedin.com/collect data:; base-uri 'self'; frame-src 'self' https://consentcdn.cookiebot.com https://www.youtube-nocookie.com https://www.facebook.com; media-src 'self'; style-src 'self' 'unsafe-inline' https://juwi.matomo.cloud https://unpkg.com 'report-sample'; font-src 'self'; worker-src 'self' blob: 'report-sample'; connect-src 'self' https://consentcdn.cookiebot.com https://consent.cookiebot.com https://juwi.matomo.cloud https://api.friendlycaptcha.com https://api.friendlycaptcha.com/api/v1/puzzle https://www.facebook.com/privacy_sandbox/topics/registration/ https://px.ads.linkedin.com/attribution_trigger https://px.ads.linkedin.com/wa/; report-uri https://www.juwi.de/@http-reporting?csp=report&requestTime=1789284363561888&requestHash=dd5106591c8652e70dcb3eb6c9b0b0eb5070d153 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https:; frame-src https:; connect-src 'self' https:; media-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; 1
font-src *.fontawesome.com maxcdn.bootstrapcdn.com https://fonts.gstatic.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.vivapayments.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com *.google.com/ https://www.youtube.com js.mollie.com *.trustpilot.com *.weltpixel.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: *.vimeocdn.com s.ytimg.com www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com magefan.com cm.magefan.com https://www.magezon.com flagpedia.net https://www.mollie.com mc.yandex.ru https://redchamps.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypalobjects.com js.braintreegateway.com www.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com www.sandbox.paypal.com t.paypal.com *.vivapayments.com jquery.sellxed.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com aia.gomage.com s7.addthis.com *.avada.com *.google.com/ *.gstatic.com maps.googleapis.com js.mollie.com *.trustpilot.com *.cardinalcommerce.com *.paypal.com *.ytimg.com *.google.com *.google-analytics.com *.googletagmanager.com *.cloud-brains.net *.analytics-manager.com *.doubleclick.net *.cdninstagram.com *.instagram.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.dotdigital.com *.addthis.com yotpo.com chimpstatic.com mc.yandex.ru www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://fonts.googleapis.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com aia.gomage.com ekr.zdassets.com/ https://get.geojs.io *.avada.com www.gstatic.com maps.googleapis.com *.trustpilot.com https://widget.trustpilot.com https://graph.instagram.com assets.adobedtm.com secure.authorize.net test.authorize.net js.braintreegateway.com *.cardinalcommerce.com includestest.ccdc02.com *.paypal.com *.ytimg.com *.google.com *.google-analytics.com *.googletagmanager.com *.cloud-brains.net *.analytics-manager.com *.doubleclick.net *.cdninstagram.com *.instagram.com vimeo.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.vivapayments.com *.dotdigital.com cdn.dnky.co *.addthis.com yotpo.com chimpstatic.com mc.yandex.ru www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://accounts.google.com https://platform.twitter.com https://platform.x.com; style-src 'self' 'unsafe-inline' https://accounts.google.com https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.runtimewire.com; img-src 'self' data: blob: https:; media-src 'self' blob: https:; connect-src 'self' https://accounts.google.com https://t.co; frame-src https://accounts.google.com https://www.youtube.com https://www.youtube-nocookie.com https://platform.twitter.com https://platform.x.com https://syndication.twitter.com https://embed.podcasts.apple.com https://open.spotify.com https://player.twitch.tv https://www.dropbox.com https://dl.dropboxusercontent.com https://*.dl.dropboxusercontent.com https://drive.google.com; object-src 'none'; base-uri 'self'; form-action 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cookiebot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.friendlycaptcha.com eu-api.friendlycaptcha.eu https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self' https://avo.africa https://ad.doubleclick.net;frame-ancestors https://*.tt.omtrdc.net https://*.adobe.com https://*.onecart.co.za https://*.nedbank.co.za https://*.nedsecure.co.za https://*.numetro.co.za https://*.avo.africa  https://*.wakago.net https://avo.africa/ https://*.cloudflare.com https://*.cleverwebserver.com https://*.payflex.co.za https://*.pgcoza.biz https://*.demdex.net https://google.com/ https://*.google.com  https://*.doubleclick.net;font-src 'self' data: https://*.avo.africa https://*.gstatic.com https://*.appsflyer.com https://cdn.scite.ai https://use.typekit.net https://cdn.megabonus.com https://*.dynatrace.com https://*.tvst.travel https://static.zohocdn.com/;style-src 'self' 'unsafe-inline'  https://*.google.com https://*.googleapis.com https://*.google.com https://*.breezyx.space;style-src-elem 'self' 'unsafe-inline' data: https://*.avo.africa https://*.googleapis.com https://*.cloudflare.com https://*.opera-mini.net https://*.kaspersky-labs.com https://*.gstatic.com https://cdn.honey.io https://*.google.com https://*.breezyx.space https://*.bugsnag.com https://*.it4profit.com https://*.google-analytics.com https://breezy.band https://embed.helpcrunch.com https://*.google.com;connect-src 'self' properties: wss://*.avo.africa https://avo.africa/ https://*.avo.africa https://*.doubleclick.net https://edge.adobedc.net https://play-lh.googleusercontent.com https://*.googletagmanager.com https://appleid.cdn-apple.com https://*.facebook.net https://*.facebook.com https://*.google.com https://*.adobedc.net https://*.adobedtm.com https://*.gstatic.com https://*.browser-intake-datadoghq.eu https://analytics.tiktok.com https://*.demdex.net https://*.google.co.uk https://nedbank.d3.sc.omtrdc.net https://*.cleverwebserver.com https://*.googleapis.com https://*.twitter.com https://*.ads-twitter.com https://*.google.co.za https://*.google.co.in https://*.google.sk https://*.cloudflare.com https://*.googleadservices.com https://*.pgcoza.biz https://*.payflex.co.za https://*.onelink.me https://*.opendns.com https://security.it.nednet.co.za ws://localhost:12387 https://*.google-analytics.com https://www.makro.co.za https://service.gstatic-cache.com https://*.googleapis.com https://cr-input.mxpnl.net wss://localhost:9888 https://metrics-dra.dt.dbankcloud.cn https://gjtrack.ucweb.com https://overbridgenet.com https://t.co https://*.breezyx.space https://*.bugsnag.com https://*.it4profit.com https://breezy.band https://embed.helpcrunch.com https://*.googleadservices.com https://bf31087tmv.bf.dynatrace.com https://*.nedbank.co.za https://*.dynatrace.com https://mpc-prod-2-1053047382554.us-central1.run.app/events/ https://*.tvst.travel wss://trvlitsanuatcentralservicesignalr.service.signalr.net https://trvlitsanuatcentralservicesignalr.service.signalr.net https://gateway.zscloud.net https://cdn.taboola.com/scripts/  https://*.demo-1.conversionsapigateway.com https://*.g.doubleclick.net https://*.tt.omtrdc.net https://*.appsflyer.com https://mpc-prod-15-s6uit34pua-uw.a.run.app  https://trvlitsanprodcentralservicesignalr.service.signalr.net wss://trvlitsanprodcentralservicesignalr.service.signalr.net https://mpc2-prod-24-is5qnl632q-uw.a.run.app https://demo-1.conversionsapigateway.com https://banner.appsflyersdk.com https://creatives-cdn.appsflyersdk.com https://googleads.g.doubleclick.net;child-src 'self'https://*.avo.africa https://*.breezyx.space https://*.bugsnag.com https://*.it4profit.com https://*.google-analytics.com https://breezy.band https://embed.helpcrunch.com;manifest-src 'self' https://*.avo.africa;media-src 'self' https://*.avo.africa;script-src-attr 'self' 'unsafe-inline'https://*.avo.africa https://*.dynatrace.com https://mpc2-prod-24-is5qnl632q-uw.a.run.app/events https://banner.appsflyersdk.com https://creatives-cdn.appsflyersdk.com https://*.google.com/ https://*.g.doubleclick.net https://googleads.g.doubleclick.net https://connect.facebook.net;object-src 'self' https://*.avo.africa;worker-src 'self' https://*.avo.africa;frame-src 'self' https://*.cardinalcommerce.com https://*.nedbank.co.za https://mozbar.moz.com https://google.com/ https://*.doubleclick.net https://*.demdex.net https://*.paygate.co.za https://*.avo.africa https://*.cleverwebserver.com https://*.payflex.co.za https://*.pgcoza.biz https://*.adobe.com https://*.facebook.com https://*.tt.omtrdc.net https://*.googletagmanager.com https://*.nedsecure.co.za https://*.dpopayments.io https://*.opendns.com https://3dsbrowser.capitecbank.co.za https://*.standardbank.co.za https://foriseu-vbv.mycardplace.com https://*.bankserv.co.za https://verify.monzo.com https://apm-rum-sgp.inf.miui.com https://*.zscalertwo.net https://*.tymedigital.com https://acs-challenge.apata.io https://safekey-1.americanexpress.com https://eu.3ds.acssecure.com https://secure2.arcot.com https://*.google.com https://*.breezyx.space https://*.bugsnag.com https://*.it4profit.com https://*.google-analytics.com https://breezy.band https://embed.helpcrunch.com https://*.facebook.net https://*.appsflyer.com https://blockedpage.visa.com https://*.zscaler.net https://*.dynatrace.com https://security.it.nednet.co.za https://*.za1.3ds.entersekt.com https://*.g.doubleclick.net https://gateway.zscloud.net https://emv3dsauth.secureacs.com https://secure-acs2ui-bk2-indmum-mumrdc.wibmo.com https://acs.capitalone.com https://acs2.3ds.modirum.com https://*.googleapis.com https://client.cardinaltrusted.com https://*.g.doubleclick.net https://googleads.g.doubleclick.net;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.avo.africa https://*.google.com https://*.appsflyer.com https://analytics.tiktok.com https://appleid.cdn-apple.com https://*.facebook.net https://*.doubleclick.net https://nedbank.d3.sc.omtrdc.net https://*.ads-twitter.com https://*.googleadservices.com https://*.googletagmanager.com https://*.cleverwebserver.com https://*.payflex.co.za https://secure.pgcoza.biz https://*.googleapis.com  https://*.adobedtm.com;img-src 'self' 'unsafe-inline' blob: data: *;script-src-elem 'self' 'unsafe-inline' blob: https://*.gstatic.com https://*.cleverwebserver.com https://appleid.cdn-apple.com https://google.com/ https://*.google.com.na https://*.ads-twitter.com https://nedbank.d3.sc.omtrdc.net https://*.googletagmanager.com https://analytics.tiktok.com https://*.doubleclick.net https://*.facebook.net https://*.googleapis.com https://*.googleads.com https://*.googleadservices.com https://*.payflex.co.za https://*.pgcoza.biz https://*.appsflyer.com https://*.cloudflare.com https://*.adobe.com https://cdn.jsdelivr.net https://unpkg.com https://security.it.nednet.co.za https://*.g.doubleclick.ne https://*.kaspersky-labs.com https://*.avo.africa https://www.datadoghq-browser-agent.com  https://*.appsflyer.com https://mainf.global-cache.online https://infird.com http://*.clarity.ms https://cdn.segment.com https://cdn.alsgp0.fds.api.mi-img.com https://*.google.com https://*.breezyx.space https://*.bugsnag.com https://*.it4profit.com https://*.google-analytics.com https://breezy.band https://embed.helpcrunch.com https://*.adobedtm.com https://*.zscaler.net https://secured-pixel.com https://*.google.com  https://*.dynatrace.com https://*.g.doubleclick.net https://*.facebook.net https://gateway.zscloud.net https://cdn.taboola.com/scripts/ https://*.dynatrace.com https://*.g.doubleclick.net https://*.googletagmanager.com https://*.tt.omtrdc.net https://*.ads-twitter.com https://creatives-cdn.appsflyersdk.com https://googleads.g.doubleclick.net https://connect.facebook.net; 1
object-src 'none'; script-src 'self' 'unsafe-inline' https://statistiques.neuillysurseine.fr http://code.highcharts.com https://cdn.cookielaw.org cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.highcharts.com https://unpkg.com https://www.google.com mdbootstrap.com; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.highcharts.com https://fonts.googleapis.com https://unpkg.com mdbootstrap.com use.fontawesome.com 1
default-src https: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; report-uri https://monitoring.hrlab.de/api/12/security/?sentry_key=b0fe31b323670a1a79ddf95bd89ae3c9 1
font-src fonts.gstatic.com use.typekit.net cdn.jsdelivr.net cdn.almapay.com fonts.axept.io https://applepay.cdn-apple.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.getalma.eu *.almapay.com/ *.stripe.com/ *.checkout.com/ *.adyen.com/ *.axept.io *.payplug.com *.dalenys.com https://applepay.cdn-apple.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io maps.googleapis.com maps.gstatic.com streetviewpixels-pa.googleapis.com https://secure-magenta.dalenys.com https://www.google.fr https://api.mapbox.com *.tile.openstreetmap.org https://maps.googleapis.com https://maps.gstatic.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com assets.adobedtm.com *.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com https://rum.hlx.page cdn.jsdelivr.net maps.googleapis.com maps.gstatic.com static.axept.io https://maps.googleapis.com/maps/api/mapsjs https://secure-magenta.dalenys.com https://applepay.cdn-apple.com api-qa.payplug.com cdn-qa.payplug.com api.payplug.com cdn.payplug.com https://cdnjs.cloudflare.com https://maps.googleapis.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com cdn.jsdelivr.net https://secure-magenta.dalenys.com https://fonts.googleapis.com https://cdnjs.cloudflare.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.magento-datasolutions.com *.magento-ds.com *.getalma.eu *.almapay.com bam.nr-data.net bam-cell.nr-data.net maps.googleapis.com api.axept.io static.axept.io client.axept.io https://maps.googleapis.com/maps/api/mapsjs https://nominatim.openstreetmap.org *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.playthroneandliberty.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://sentry.amazongames.com https://dl1f6y24yx1ap.cloudfront.net; script-src 'nonce-b2af634c20bf45509ea0d6823d05a31d'  https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.playthroneandliberty.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://sentry.amazongames.com https://dl1f6y24yx1ap.cloudfront.net; style-src 'self' 'nonce-b2af634c20bf45509ea0d6823d05a31d'  https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.playthroneandliberty.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://sentry.amazongames.com https://dl1f6y24yx1ap.cloudfront.net; img-src 'self' data:  https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.playthroneandliberty.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://sentry.amazongames.com https://dl1f6y24yx1ap.cloudfront.net https://*.twimg.com https://player.twitch.tv/ https://*.ytimg.com; media-src 'self' data:  https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.playthroneandliberty.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://sentry.amazongames.com https://dl1f6y24yx1ap.cloudfront.net https://*.twimg.com https://player.twitch.tv/ https://www.youtube.com https://youtube.com https://*.googlevideo.com; frame-src https://www.youtube.com https://youtube.com https://*.googlevideo.com https://*.twimg.com https://player.twitch.tv/  https://*.amazon.com https://*.media-amazon.com https://*.ssl-images-amazon.com https://*.amazon-adsystem.com https://*.paa-reporting-advertising.amazon https://*.twitch.tv https://*.playthroneandliberty.com https://*.awsstatic.com https://amazonwebservices.d2.sc.omtrdc.net https://amazongamestudios.d2.sc.omtrdc.net https://*.viddler.com https://*.ctfassets.net https://sentry.amazongames.com https://dl1f6y24yx1ap.cloudfront.net; report-uri https://www.amazon.com/1/batch/2/OE/mid=ATVPDKIKX0DER:sid=133-3853031-3164469:rid=B86F9A9D61394F0D8C0D:sn=www.playthroneandliberty.com 1
object-src 'none';base-uri 'self';script-src 'nonce-jd0SBGChneBgb25Z281VoA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https://*.dkh.ch https://*.d-a.ch https://*.dkg.ch; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.dkh.ch https://*.d-a.ch https://*.metallservice.ch https://*.fo-zuerisee.net https://*.q-digital.dev https://*.dkg.ch https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://region1.analytics.google.com https://tagmanager.google.com https://www.google.com https://www.gstatic.com https://maps.googleapis.com https://www.youtube.com https://s.ytimg.com https://player.vimeo.com https://*.saferpay.com https://*.hotjar.com https://ssl.siteimprove.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://stackpath.bootstrapcdn.com https://maxcdn.bootstrapcdn.com https://code.jquery.com https://siteimproveanalytics.com https://*.clarity.ms https://snap.licdn.com https://secure.adnxs.com https://*.usersnap.com https://*.doubleclick.net https://www.googleadservices.com; style-src 'self' 'unsafe-inline' https://*.dkh.ch https://*.d-a.ch https://*.metallservice.ch https://*.fo-zuerisee.net https://*.q-digital.dev https://*.dkg.ch https://fonts.googleapis.com https://tagmanager.google.com https://www.googletagmanager.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://stackpath.bootstrapcdn.com https://maxcdn.bootstrapcdn.com; img-src 'self' data: blob: https://*.dkh.ch https://*.d-a.ch https://*.metallservice.ch https://*.fo-zuerisee.net https://*.q-digital.dev https://*.dkg.ch https://px4.ads.linkedin.com https://www.google-analytics.com https://ssl.google-analytics.com https://region1.analytics.google.com https://www.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com https://*.ggpht.com https://*.google.com https://*.google.de https://*.ytimg.com https://vumbnail.com https://*.saferpay.com https://*.hotjar.com https://*.siteimprove.com https://*.siteimproveanalytics.io https://*.ads.linkedin.com https://*.clarity.ms https://secure.adnxs.com https://*.doubleclick.net https://www.googleadservices.com https://www.google.ch; font-src 'self' data: https://*.dkh.ch https://*.d-a.ch https://*.metallservice.ch https://*.fo-zuerisee.net https://*.q-digital.dev https://*.dkg.ch https://fonts.gstatic.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://stackpath.bootstrapcdn.com https://maxcdn.bootstrapcdn.com https://*.hotjar.com; connect-src 'self' https://*.dkh.ch https://*.d-a.ch https://*.metallservice.ch https://*.fo-zuerisee.net https://*.q-digital.dev https://*.dkg.ch https://www.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://*.doubleclick.net https://region1.google-analytics.com https://maps.googleapis.com https://*.saferpay.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.siteimprove.com https://*.clarity.ms https://snap.licdn.com https://*.usersnap.com https://www.google.com https://*.ads.linkedin.com https://www.googleadservices.com https://www.googletagmanager.com; frame-src 'self' https://*.dkh.ch https://*.d-a.ch https://*.metallservice.ch https://*.fo-zuerisee.net https://*.q-digital.dev https://*.dkg.ch https://www.google.com https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://maps.google.com https://*.saferpay.com https://*.hotjar.com https://*.doubleclick.net https://*.usersnap.com; media-src 'self' https://*.dkh.ch https://*.d-a.ch https://*.metallservice.ch https://*.fo-zuerisee.net https://*.q-digital.dev https://*.dkg.ch https://www.youtube.com https://player.vimeo.com; object-src 'none'; base-uri 'self'; form-action 'self' https://*.saferpay.com https://*.kci.rocks; frame-ancestors *; report-uri /csp-report.cfm 1
object-src 'none';base-uri 'self';script-src 'nonce-udCRPU2uOV4HmbYeCJgTyg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' *.insuit.es *.insuit.eu *.insuit.net *.insuit.dev insuit.es insuit.eu insuit.net insuit.dev; script-src 'self' *.insuit.es *.insuit.eu *.insuit.net *.insuit.dev insuit.es insuit.eu insuit.net insuit.dev; 1
default-src 'none'; connect-src 'self' https://*.cepal.org https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com; font-src 'self' https://fonts.gstatic.com data: https://use.fontawesome.com https://*.cepal.org; frame-src 'self' https://*.cepal.org https://www.youtube.com https://www.googletagmanager.com; img-src 'self' data:; media-src 'self' https://*.cepal.org; script-src 'self' 'report-sample' 'unsafe-inline' https://*.googletagmanager.com cdn.jsdelivr.net cdnjs.cloudflare.com eclacstrap.ddev.site https://challenges.cloudflare.com https://use.fontawesome.com https://www.google.com styles.cepal.org; script-src-attr 'self' 'report-sample' 'unsafe-inline'; script-src-elem 'self' 'report-sample' 'unsafe-inline' https://*.cepal.org https://www.googletagmanager.com https://www.google-analytics.com cdn.jsdelivr.net cdnjs.cloudflare.com eclacstrap.ddev.site https://challenges.cloudflare.com https://use.fontawesome.com https://www.google.com styles.cepal.org; style-src 'self' 'report-sample' 'unsafe-inline' cdn.jsdelivr.net cdnjs.cloudflare.com eclacstrap.ddev.site fonts.googleapis.com styles.cepal.org; style-src-attr 'self' 'report-sample' 'unsafe-inline'; style-src-elem 'self' 'report-sample' 'unsafe-inline' https://*.cepal.org https://use.fontawesome.com cdn.jsdelivr.net cdnjs.cloudflare.com eclacstrap.ddev.site fonts.googleapis.com styles.cepal.org; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://*.cepal.org; report-uri https://agenda2030lac.org/es/log-report-uri/reportOnly; block-all-mixed-content 1
font-src www.paypalobjects.com https://static.lyra.com/static/ https://widgets.trustedshops.com fonts.gstatic.com *.bootstrapcdn.com *.cdn-apple.com *.gstatic.com *.hsappstatic.net data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://secure.lyra.com/vads-payment/ https://api.lyra.com/api-payment/ https://static.lyra.com/static/ *.facebook.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ consentcdn.cookiebot.com consentcdn.cookiebot.eu https://secure.lyra.com/vads-payment/ https://static.lyra.com/static/ www.xtento.com *.cdn-apple.com *.cookiebot.com *.doubleclick.net *.facebook.com *.google.com *.googletagmanager.com *.lyra.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com imgsct.cookiebot.com imgsct.cookiebot.eu ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://secure.lyra.com/static/latest/images/type-carte/ https://static.lyra.com/static/ https://secure.lyra.com/vads-payment/ magefan.com cm.magefan.com *.disqus.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com www.xtento.com cdn.xtento.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com *.cookiebot.com *.doubleclick.net *.facebook.com *.facebook.net www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.by www.google.ca www.google.cd www.google.cg www.google.ch www.google.ci www.google.cl www.google.co.ao www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ma www.google.com.af www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bo www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.gh www.google.com.hk www.google.com.kh www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.np www.google.com.ph www.google.com.pk www.google.com.py www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.nz www.google.co.th www.google.co.tz www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zm www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gr www.google.hr www.google.hu www.google.ie www.google.iq www.google.is www.google.it www.google.je www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.me www.google.ml www.google.ne www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk www.google.so www.google.td www.google.tn *.google.com *.googleusercontent.com *.gstatic.com *.lyra.com *.paypalobjects.com *.trustedshops.com *.usercentrics.eu data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ consent.cookiebot.com consentcdn.cookiebot.com consent.cookiebot.eu consentcdn.cookiebot.eu chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://api.lyra.com/api-payment/ https://static.lyra.com/static/ *.disqus.com player.vimeo.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com www.xtento.com cdn.xtento.com *.googletagmanager.com tagmanager.google.com https://chimpstatic.com *.cdn-apple.com *.cloudflare.com *.cookiebot.com *.cookiebot.eu *.etrusted.com *.facebook.net *.google.com *.lyra.com *.notolytix.com *.trustedshops.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com downloads.mailchimp.com https://static.lyra.com/static/ https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com tagmanager.google.com fonts.google.com *.bootstrapcdn.com *.googleapis.com *.gstatic.com *.lyra.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline';, connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com consentcdn.cookiebot.com consentcdn.cookiebot.eu consent.cookiebot.com consent.cookiebot.eu form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.friendlycaptcha.com eu-api.friendlycaptcha.eu https://secure.lyra.com/vads-payment/ https://api.lyra.com/api-payment/ *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.google-analytics.com *.googletagmanager.com *.cookiebot.com *.doubleclick.net *.facebook.com *.friendlycaptcha.eu www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.ca www.google.ch www.google.cl www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.com.au www.google.com.bd www.google.com.br www.google.com.eg www.google.com.gh www.google.com.hk www.google.com.my www.google.com.na www.google.com.ph www.google.com.pk www.google.com.sa www.google.com.tr www.google.com.ua www.google.co.nz www.google.co.th www.google.co.tz www.google.co.uk www.google.co.za www.google.cv www.google.cz www.google.de www.google.dk www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gr www.google.hr www.google.hu www.google.ie www.google.is www.google.it www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk www.google.tn *.google.com *.lyra.com *.notolytix.com *.sentry.io 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src https://secure.lyra.com/vads-payment/ https://api.lyra.com/api-payment/ https://static.lyra.com/static/ *.bootstrapcdn.com *.cdn-apple.com chimpstatic.com *.cloudflare.com *.cookiebot.com *.doubleclick.net *.etrusted.com *.facebook.com *.facebook.net *.friendlycaptcha.eu *.googleapis.com www.google.at www.google.ch www.google.com.ua www.google.co.nz www.google.de www.google.dk www.google.es www.google.lu www.google.rs *.google.com *.googletagmanager.com *.gstatic.com *.lyra.com *.notolytix.com *.paypalobjects.com *.trustedshops.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; base-uri 'self' 'unsafe-inline'; report-uri https://baf298e4-7b53-4a10-8dea-69bbb4f16584.sansec.watch/; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com blob: * www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://img.youtube.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com https://cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.yotpo.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://maps.gstatic.com/ *.yotpo.com t.zip.co static.zipmoney.com.au static.zip.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com https://maps.googleapis.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.yotpo.com static.zipmoney.com.au static.zip.co zip.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.dnky.co webchat.dotdigital.com unsafe-inline *.stripe.network *.stripecdn.com *.amazon.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com https://maps.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: https://use.typekit.net/mqc0mfr.css cdn.scite.ai https://applepay.cdn-apple.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://applepay.cdn-apple.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com dirckiii.nl *.dirckiii.nl *.googleadservices.com *.google.nl *.google.com *.google.at www.google.at dashboard.webwinkelkeur.nl *.cookiebot.com *.unsplash.com api.taggrs.io connect.facebook.net www.facebook.com *.facebook.com region1.google-analytics.com *.googlesyndication.com *.doubleclick.net bat.bing.com *.clarity.ms c.clarity.ms images.pexels.com d323g1xugy1rkz.cloudfront.net www.hubrechtduijker.com https://static.buckaroo.nl https://www.buckaroo.nl https://www.paypalobjects.com https://pay.google.com https://developers.google.com https://applepay.cdn-apple.com https://maps.googleapis.com magefan.com cm.magefan.com *.taggrs.io www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleadservices.com *.google.nl connect.facebook.net cdn.jsdelivr.net https://use.typekit.net/mqc0mfr.css dashboard.webwinkelkeur.nl *.cookiebot.com sst.dirckiii.dev-ativse.nl sst.dirckiii.nl *.leadinfo.net *.leadinfo.com *.dpdconnect.nl *.vimeo.com bat.bing.com www.clarity.ms scripts.clarity.ms view.publitas.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com https://www.sandbox.paypal.com https://applepay.cdn-apple.com https://pay.google.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://maps.googleapis.com *.taggrs.io www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.googleapis.com *.gstatic.com cdn.jsdelivr.net use.typekit.net https://use.typekit.net/mqc0mfr.css *.typekit.net https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.googlesyndication.com *.doubleclick.net *.google.nl *.cookiebot.com dashboard.webwinkelkeur.nl *.leadinfo.net *.leadinfo.com sst.dirckiii.dev-atvise.nl sst.dirckiii.nl api.taggrs.io www.facebook.com *.facebook.com cdn.jsdelivr.net bat.bing.com *.clarity.ms https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://applepay.buckaroo.io https://smp-paymentservices.apple.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://maps.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://nova.atvise.ai/csp-report?site=45cfb3c86c95dea7d27c; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: blob: https:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://*.hcaptcha.com https://hcaptcha.com; connect-src 'self' https://*.hcaptcha.com https://hcaptcha.com https://id.dev.docqtech.com https://id.uat.docqtech.com https://id.test.docquity.com https://id.docquity.com; frame-src 'self' https://*.hcaptcha.com https://hcaptcha.com; form-action 'self' https://app.joindx.ai https://app.docquity.com; upgrade-insecure-requests; report-uri /next/csp-report 1
default-src www.askmid.com; script-src  www.askmid.com  'unsafe-inline' 'unsafe-eval'; style-src www.askmid.com 'unsafe-inline' 1
worker-src blob:; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.kxcdn.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.addthis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.fbcdn.net blob: https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com *.googleapis.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com s7.addthis.com *.avada.io *.shopify.com *.pagseguro.com.br *.pagseguro.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com ekr.zdassets.com/ https://get.geojs.io *.avada.io *.pagseguro.com.br *.pagseguro.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' https://cdnjicoo.com https://jicoo.imgix.net https://www.googletagmanager.com https://connect.facebook.net https://pagead2.googlesyndication.com https://apis.google.com https://www.google.com https://www.gstatic.com https://js.hsforms.net https://js.stripe.com https://widget.intercom.io https://js.intercomcdn.com https://js-agent.newrelic.com https://dmp.im-apps.net; style-src 'self' 'unsafe-inline' https://cdnjicoo.com https://jicoo.imgix.net https://fonts.googleapis.com; font-src 'self' data: https://cdnjicoo.com https://jicoo.imgix.net https://fonts.gstatic.com; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; frame-src 'self' https:; form-action 'self' https:; worker-src 'self' blob:; manifest-src 'self'; connect-src 'self' https://www.jicoo.com https://api.jicoo.com https://cdnjicoo.com https://jicoo.imgix.net https://*.nr-data.net https://*.ingest.us.sentry.io https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://identitytoolkit.googleapis.com https://securetoken.googleapis.com https://*.googleapis.com https://*.firebaseio.com wss://*.firebaseio.com https://api-eu.mixpanel.com https://api2.amplitude.com https://api.eu.amplitude.com https://*.amplitude.com https://*.algolia.net https://*.algolianet.com https://*.pusher.com wss://*.pusher.com https://*.intercom.io wss://*.intercom.io https://*.stripe.com https://*.stripe.network https://www.google.com https://www.recaptcha.net https://*.hubspot.com https://*.hsforms.com 1
object-src 'none';base-uri 'self';script-src 'nonce-jMpOuX4Wl36pUJl56pGyAA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.segment.com https://*.clarity.ms https://static.cloudflareinsights.com https://widget.intercom.io https://js.intercomcdn.com https://r.wdfl.co https://fast.wistia.com https://fast.wistia.net https://assets.calendly.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://www.redditstatic.com https://analytics.tiktok.com https://bat.bing.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://assets.calendly.com https://fast.wistia.com; img-src 'self' data: blob: https://strapi.creatorhero.com https://*.vimeocdn.com https://i.ytimg.com https://*.amazonaws.com https://*.intercomcdn.com https://static.intercomassets.com https://www.google-analytics.com https://www.googletagmanager.com https://*.clarity.ms https://embedwistia-a.akamaihd.net https://embed-ssl.wistia.com https://fast.wistia.com https://*.bing.com https://*.bing.net https://*.facebook.com https://*.reddit.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://www.google.de https://www.google.co.uk https://www.google.fr https://www.google.ca https://www.google.com.au https://www.google.com.br https://www.google.es https://www.google.it https://www.google.pl https://www.google.ru https://www.google.nl https://www.google.com.mx https://www.google.co.jp; font-src 'self' data: https://fonts.gstatic.com https://js.intercomcdn.com; connect-src 'self' https://api.segment.io https://*.segment.io https://cdn.segment.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://cloudflareinsights.com https://*.cloudflareinsights.com https://www.google.com https://www.google.de https://www.google.co.uk https://www.google.fr https://www.google.ca https://www.google.com.au https://www.google.com.br https://www.google.es https://www.google.it https://www.google.pl https://www.google.ru https://www.google.nl https://www.google.com.mx https://www.google.co.jp https://api-iam.intercom.io https://*.intercom.io wss://*.intercom.io https://*.clarity.ms https://strapi.creatorhero.com https://*.bing.com https://*.bing.net https://*.facebook.com https://connect.facebook.net https://*.reddit.com https://*.tiktok.com https://*.tiktokw.us; frame-src 'self' https://calendly.com https://*.calendly.com https://fast.wistia.com https://fast.wistia.net https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.google.com https://intercom-sheets.com https://*.intercom.io; media-src 'self' blob: https://*.wistia.com https://*.wistia.net https://embed-ssl.wistia.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint 1
object-src 'none';base-uri 'self';script-src 'nonce-a4W6JrqUkgfuEYCGumsyKQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com https://claspreedterribly.com https://www.videosprofitnetwork.com https://pagead2.googlesyndication.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; media-src 'self' blob: https:; connect-src 'self' https:; frame-src 'self' https:; worker-src 'self' blob:; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; form-action 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-G-m3CbyMhrf2aAu89cdeHA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'unsafe-inline' 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'unsafe-inline' *;script-src-elem 'unsafe-inline' 'self'; style-src 'unsafe-inline' 'self'; style-src-elem 'unsafe-inline' 'self'; font-src 'self' data: ; 1
object-src 'none';base-uri 'self';script-src 'nonce-gkGKyVFTSBKEwijNE_nS3Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com static.payu.com *.prosto.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.clarity.ms geowidget.easypack24.net media.user.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com pay.google.com play.google.com *.autopay.eu secure.payu.com merch-prod.snd.payu.com static.payu.com credit-widget-config.payu.com/ *.prosto.com *.twitter.com *.pay.google.com *.cards-accept.bm.pl *.googletagmanager.com *.savecart.pl *.hotjar.com *.facebook.net *.clarity.ms *.pinterest.com *.wp.pl www.facebook.com paypo.pl popup.paypo.pl start.paypo.pl *.packeta.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io platnosci.bm.pl platnosci-accept.bm.pl www.gstatic.com *.autopay.eu static.payu.com credit-widget-config.payu.com/ *.prosto.com *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.googletagmanager.com *.savecart.pl pixel.wp.pl *.hotjar.com *.facebook.net *.facebook.com *.clarity.ms *.wp.pl *.gdpsystem.eu *.pinimg.com *.tiktok.com *.google.pl geowidget.easypack24.net *.googleapis.com *.user.com https://firebasestorage.googleapis.com *.hsforms.net *.hsforms.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.autopay.eu pay.google.com *.google-analytics.com *.googletagmanager.com cards-accept.bm.pl paypal.com secure.payu.com secure.snd.payu.com static.payu.com credit-widget-config.payu.com/ *.prosto.com *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.savecart.pl pixel.wp.pl *.hotjar.com *.facebook.net *.clarity.ms *.wp.pl *.gdpsystem.eu *.pinimg.com *.tiktok.com *.google.pl *.googleapis.com *.inis360.com geowidget.easypack24.net *.rzetelnagrupa.pl *.user.com *.pinterest.com *.jsdelivr.net *.cloudflareinsights.com *.avada.io *.shopify.com *.packeta.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.autopay.eu *.googleapis.com *.prosto.com *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.wp.pl *.gdpsystem.eu *.pinimg.com *.tiktok.com *.google.pl geowidget.easypack24.net *.rzetelnagrupa.pl *.jsdelivr.net https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.gstatic.com secure.payu.com merch-prod.snd.payu.com static.payu.com credit-widget-config.payu.com/ *.prosto.com *.cloudflare.com *.twitter.com *.twimg.com *.savecart.pl *.pinterest.com *.hotjar.com *.clarity.ms *.wp.pl *.gdpsystem.eu *.pinimg.com *.tiktok.com *.tiktokw.us *.google.pl *.googleapis.com api-shipx-pl.easypack24.net *.rzetelnagrupa.pl *.user.com ad.doubleclick.net wss://*.user.com wss://prosto.user.com wss://*.hotjar.com *.hotjar.io https://get.geojs.io *.avada.io *.packeta.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://prosto.com/; report-to report-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-ZAOBKF_-8guc7UWrjcOy0Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://widget.mava.app https://cdn.weglot.com https://*.vercel-scripts.com https://vercel.live https://www.youtube-nocookie.com; connect-src 'self' https://api.moveposition.xyz https://api.weglot.com https://*.ingest.sentry.io https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.vercel-insights.com https://vercel.live wss://*.pusher.com; img-src 'self' data: blob: https://*.ctfassets.net https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.googleusercontent.com; font-src 'self' data:; style-src 'self' 'unsafe-inline'; frame-src 'self' https://www.googletagmanager.com https://widget.mava.app https://www.youtube-nocookie.com https://vercel.live; worker-src 'self' blob:; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; form-action 'self' 1
script-src 'self' 'unsafe-hashes' 'unsafe-inline' *.discoverearly.com d.la3-c1-ia2.salesforceliveagent.com invitejs.trustpilot.com js.stripe.com service.force.com widget.trustpilot.com www.google.com www.gstatic.com www.avivasysbio.com www.genwaybio.com static.avivasysbio.com admin.avivasysbio.com 'unsafe-eval' static.avivasysbio.com static.hotjar.com www.googletagmanager.com snippets.freshchat.com wchat.freshchat.com www.google-analytics.com script.hotjar.com js-agent.newrelic.com; report-uri /.webscale/csp-report 1
font-src forms.syncrony.com lapaforms.syncrony.com *.fontawesome.com maxcdn.bootstrapcdn.com https://fonts.gstatic.com 'self' data: *.fonts.googleapis.com *.gstatic.com data: *.cloudflare.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net secure.paygate.co.za geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://sandbox.payfast.co.za https://www.payfast.co.za/eng/process *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.googletagmanager.com https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.google.com *.addthis.com *.pinterest.com penguinrandomhouse.everlytic.net *.wesupply.xyz *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com lapa.co.za www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://redchamps.com *.cloudflare.com https://cdn.klarna.com https://s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com *.cdninstagram.com www.google.co.za *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net forms.syncrony.com lapaforms.syncrony.com www.googleadservices.com www.google-analytics.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com https://player.vimeo.com https://www.youtube.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.cloudflare.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com forms.syncrony.com lapaforms.syncrony.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com http://fonts.googleapis.com unsafe-inline *.googleapis.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cloudflare.com *.paypal.com *.googleapis.com *.addthis.com *.cardinalcommerce.com https://graph.instagram.com analytics.google.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: *.fontawesome.com *.webwinkelkeur.nl https://dashboard.webwinkelkeur.nl https://data.expivi.net https://admin.expivi.net https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com accounts.google.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com data.barnwoodweb.nl *.googletagmanager.com https://dashboard.webwinkelkeur.nl consentcdn.cookiebot.com consentcdn.cookiebot.eu *.multisafepay.com https://pay.google.com *.sendcloud.sc *.jsdelivr.net *.weltpixel.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com *.webwinkelkeur.nl *.taggrs.io *.google.nl *.google.be *.doubleclick.net *.clarity.ms *.barnwoodweb.nl *.googlesyndication.com *.bing.com *.bing.net https://expivi.net https://data.expivi.net https://assets.expivi.net https://cache.expivi.net https://admin.expivi.net https://www.gstatic.com imgsct.cookiebot.com imgsct.cookiebot.eu *.doofinder.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.ggpht.com magefan.com cm.magefan.com *.multisafepay.com *.amazonaws.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.klaviyo.com *.pinterest.com *.pinimg.com *.googletagmanager.com *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://www.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com pinterest.com ct.pinterest.com www.pinterest.com s.pinimg.com *.adobedtm.com *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.gstatic.com *.jsdelivr.net kit.fontawesome.com data.barnwoodweb.nl *.cookiebot.com *.taggrs.io *.bing.com *.clarity.ms *.doofinder.com *.trengo.eu *.hotjar.com *.pinterest.com dashboard.webwinkelkeur.nl *.vimeo.com https://dashboard.webwinkelkeur.nl https://expivi.net https://data.expivi.net https://assets.expivi.net https://cache.expivi.net https://admin.expivi.net consent.cookiebot.com consentcdn.cookiebot.com consent.cookiebot.eu consentcdn.cookiebot.eu chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.multisafepay.com https://pay.google.com *.sendcloud.sc *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.klaviyo.com sc-static.net *.snapchat.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.jsdelivr.net *.typekit.net *.fontawesome.com *.doofinder.com downloads.mailchimp.com https://fonts.googleapis.com *.multisafepay.com *.sendcloud.sc *.jsdelivr.net *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com *.cdn.jsdelivr.net cdn.jsdelivr.net *.webwinkelkeur.nl data.barnwoodweb.nl *.postcode-checkout.nl dashboard.postcode-checkout.nl *.taggrs.io *.bing.com *.bing.net *.clarity.ms *.trengo.eu *.googlesyndication.com *.hotjar.io https://expivi.net https://data.expivi.net https://assets.expivi.net https://cache.expivi.net https://admin.expivi.net https://www.gstatic.com consentcdn.cookiebot.com consentcdn.cookiebot.eu consent.cookiebot.com consent.cookiebot.eu cbsignal-1.in-endp.profitmetrics.io googleads.g.doubleclick.net *.doofinder.com wss://*.doofinder.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.gstatic.com data: *.multisafepay.com *.sendcloud.sc *.mapbox.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.klaviyo.com *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://nova.atvise.ai/csp-report?site=55d6618d1c97a5436430; 1
default-src 'self'; script-src 'nonce-MDExNGM5NjYtZmEwOC00YTU1LWJmOWQtNzE1MGY1MDBjMzA0' 'strict-dynamic' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.typekit.net https://p.typekit.net; font-src 'self' data: https://fonts.gstatic.com https://use.typekit.net https://p.typekit.net; img-src 'self' data: blob: https: https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://*.googleapis.com https://*.gstatic.com https://static.klaviyo.com https://a.klaviyo.com https://edge.marker.io https://*.marker.io https://s3.eu-west-1.amazonaws.com; connect-src 'self' https://beta-api.wilsonsauctions.com wss://beta-api.wilsonsauctions.com https://dqb2uiblhfa4lcs6wtrnzub5nq.appsync-api.eu-west-2.amazonaws.com wss://dqb2uiblhfa4lcs6wtrnzub5nq.appsync-realtime-api.eu-west-2.amazonaws.com https://www.wilsonsauctions.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://*.googleapis.com https://*.gstatic.com https://static.klaviyo.com https://a.klaviyo.com https://edge.marker.io https://*.marker.io https://s3.eu-west-1.amazonaws.com https://cdn.cookie-script.com https://report.cookie-script.com https://director.millicast.com https://*.millicast.com wss://*.millicast.com https://cognito-idp.*.amazonaws.com https://cognito-identity.*.amazonaws.com; frame-src 'self' https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.ipg-online.com; media-src 'self' blob: https: https://director.millicast.com https://*.millicast.com wss://*.millicast.com; form-action 'self' https://www.ipg-online.com https://beta-api.wilsonsauctions.com; frame-ancestors 'none'; base-uri 'none'; object-src 'none'; worker-src 'self' blob:; manifest-src 'self'; report-uri /api/csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com meshulam.co.il *.meshulam.co.il *.googleapis.com *.bootstrapcdn.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.facebook.com *.facebook.net *.yotpo.com *.flashyapp.com api.flashy.app *.flashy.dev 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.weltpixel.com meshulam.co.il *.meshulam.co.il paybox.grow.security *.grow.security www.xtento.com *.facebook.com *.yotpo.com *.creditguard.co.il *.vimeo.com *.googletagmanager.com *.xtento.com *.doubleclick.net *.flashyapp.com api.flashy.app *.flashy.dev https://analytics.tiktok.com *.typeform.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com meshulam.co.il *.meshulam.co.il www.xtento.com cdn.xtento.com *.googleadservices.com *.facebook.com *.yotpo.com *.cdninstagram.com *.google.com *.google.com.vn *.google.co.il https://www.google *.magentocommerce.com *.paypalobjects.com *.ytimg.com *.web-view.net *.googleapis.com *.nagich.co.il *.vimeo.com https://firebasestorage.googleapis.com analytics.tiktok.com analytics-ipv6.tiktokw.us ads.tiktok.com *.reddit.com *.googletagmanager.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com meshulam.co.il *.meshulam.co.il paybox.grow.security *.grow.security www.xtento.com cdn.xtento.com *.google-analytics.com *.googleapis.com *.fontawesome.com *.googleadservices.com *.googletagmanager.com *.facebook.net *.doubleclick.net *.analytics.com *.rawgit.com *.nagich.co.il *.luckyorange.com *.xtento.com *.paypal.com *.paypalobjects.com *.flashyapp.com api.flashy.app *.flashy.dev *.gstatic.com *.avada.io *.shopify.com analytics.tiktok.com analytics-ipv6.tiktokw.us ads.tiktok.com *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com meshulam.co.il *.meshulam.co.il *.googleapis.com *.bootstrapcdn.com *.cloudflare.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com meshulam.co.il *.meshulam.co.il paybox.grow.security *.grow.security *.doubleclick.net *.analytics.com *.facebook.com *.nagich.co.il player.vimeo.com *.luckyorange.com *.googleapis.com wss://realtime.luckyorange.com wss://in.visitors.live/socket.io wss://in.visitors.live/socket.io/ *.flashyapp.com api.flashy.app *.flashy.dev https://get.geojs.io *.avada.io analytics.tiktok.com analytics-ipv6.tiktokw.us ads.tiktok.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src blob:; font-src *.googleapis.com *.gstatic.com data: https://www.googletagmanager.com fonts.gstatic.com *.kxcdn.com *.zohopublic.com *.zohocdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://static.addtoany.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com scontent.cdninstagram.com *.kxcdn.com *.twitter.com google.com *.zohopublic.com *.zohocdn.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://static.addtoany.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com tagmanager.google.com https://www.googletagmanager.com apis.google.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ google.com cdn.ampproject.org googletagmanager.com *.kxcdn.com platform.twitter.com *.zohopublic.com *.zohocdn.com web.facebook.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com google.com *.kxcdn.com *.gstatic.com *.zohocdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://stats.addtoany.com/menu api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.zohopublic.com wss://vts.zohopublic.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; media-src 'self' data: blob: https:; connect-src 'self' https: ws: wss:; frame-src 'self' https: blob:; worker-src 'self' blob: https:; manifest-src 'self'; report-uri /api/csp-report; report-to csp-endpoint 1
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://wpimgscdn.apptoto.com https://accounts.google.com https://app.termly.io https://widget.intercom.io https://js.intercomcdn.com https://fast.wistia.com https://fast.wistia.net https://browser.sentry-cdn.com https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://snap.licdn.com https://ct.capterra.com https://*.podscribe.com https://s3.amazonaws.com;style-src 'self' 'unsafe-inline' https://wpimgscdn.apptoto.com https://fonts.googleapis.com https://accounts.google.com https://use.typekit.net https://p.typekit.net;img-src 'self' https: data: blob:;font-src 'self' data: https://wpimgscdn.apptoto.com https://fonts.gstatic.com https://fast.wistia.com https://fast.wistia.net https://fonts.intercomcdn.com https://use.typekit.net;connect-src 'self' https://api-iam.intercom.io https://api-ping.intercom.io wss://nexus-websocket-a.intercom.io wss://primary-realtime.intercom-messenger.com https://app.termly.io https://us.consent.api.termly.io https://accounts.google.com https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://*.podscribe.com https://fast.wistia.com https://fast.wistia.net https://pipedream.wistia.com https://distillery.wistia.com https://embed-cloudfront.wistia.com https://embedwistia-a.akamaihd.net;frame-src 'self' https://accounts.google.com https://fast.wistia.net https://fast.wistia.com https://www.youtube.com https://app.termly.io;media-src https: data: blob:;worker-src 'self' blob:;object-src 'none';base-uri 'self';frame-ancestors 'self';report-uri /csp_reports 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com webpay3g.transbank.cl webpay3gint.transbank.cl *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io maps.gstatic.com maps.googleapis.com cdn.rawgit.com/googlemaps/ cdn.jsdelivr.net/gh/googlemaps/ https://firebasestorage.googleapis.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page maps.googleapis.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com maps.googleapis.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self', img-src 'self' data: https://*.usercentrics.eu https://*.gstatic.com https://*.shetani.de https://*.lfeeder.com https://*.googleapis.com https://secure.gravatar.com https://*.googletagmanager.com, script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.usercentrics.eu https://*.cloudflareinsights.com https://*.cloudflare.com https://*.google.com https://*.google-analytics.com https://*.googletagmanager.com https://*.gstatic.com https://*.lfeeder.com https://*.googleapis.com https://maps.googleapis.com https://*.shetani.de, connect-src 'self' https://*.usercentrics.eu https://*.google.com https://*.shetani.de https://*.lfeeder.com https://*.googleapis.com https://*.googletagmanager.com, frame-src 'self' data: https://*.usercentrics.eu https://*.google.com https://*.gstatic.com https://*.cloudflare.com https://maps.google.com https://gel-express-logistik.jobs.personio.de, style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.fontawesome.com, font-src 'self' data: https://fonts.gstatic.com https://r2cdn.perplexity.ai, media-src 'self', object-src 'none', base-uri 'self', form-action 'self', manifest-src 'self', worker-src 'self' blob:, report-uri https://www.gel-express.de/csp-report-a73tvs43_3967/csp-report.php 1
script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' * data: blob:; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com cash-f.squarecdn.com *.googleapis.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.awin1.com *.zenaps.com *.fls.doubleclick.net *.trustpilot.com landofcoder.com https://pay.google.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * *.googleapis.com *.awin1.com *.zenaps.com *.wepowerconnections.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://www.facebook.com https://lantern.roeyecdn.com https://lantern.roeye.com https://network-eu-stg-a.bazaarvoice.com https://apps.bazaarvoice.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page *.googleapis.com *.gstatic.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.trustpilot.com landofcoder.com https://api.bluecore.com https://connect.facebook.net https://siteassets.bluecore.com https://www.facebook.com https://lantern.roeyecdn.com https://apps.bazaarvoice.com *.bazaarvoice.com https://pay.google.com 'self' 'unsafe-inline' 'unsafe-eval' * data: blob: 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.fontawesome.com https://static.klaviyo.com *.trustpilot.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.googleapis.com *.ipinfo.io *.wepowerconnections.com https://the.sciencebehindecommerce.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ landofcoder.com https://siteassets.bluecore.com https://onsitestats.bluecore.com https://pay.google.com https://google.com/pay 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.fontawesome.com *.googleapis.com *.olark.com *.optimonk.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.facebook.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com *.weltpixel.com *.facebook.com *.facebook.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://plumrocket.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app connect.bolt.com connect-sandbox.bolt.com s3-us-west-1.amazonaws.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.searchspring.net *.cookielaw.org magefan.com cm.magefan.com *.disqus.com *.facebook.com *.facebook.net *.nextopia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com *.insightexpressai.com *.m1314.com *.semasio.net *.3lift.com *.rkdms.com *.pubmatic.com *.adsrvr.org *.basis.net *.bing.com *.bing.net *.bolt.com d3cgm8py10hi0z.cloudfront.net flippingbook.com *.flippingbook.com *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.as www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cd www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.si www.google.sk www.google.sn www.google.so www.google.sr www.google.tg www.google.tl www.google.tm www.google.tn www.google.tt www.google.ws google.com *.googlesyndication.com *.nobleoutfitters.com *.olark.com *.optimonk.com *.pixel.ad s3.amazonaws.com *.schleich-s.com *.searchspring.io *.sitescout.com *.tvsquared.com *.vibe.co *.videoly.co data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.cookielaw.org *.onetrust.com widget.freshworks.com m2epro.freshdesk.com *.disqus.com *.facebook.com *.facebook.net cdn.nextopia.net *.ecomm-nav.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://cdn.searchspring.net/intellisuggest/is.min.js *.googletagmanager.com *.googleadservices.com *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com *.adoric-om.com *.basis.net *.bing.com *.bolt.com *.brandcdn.com *.crazyegg.com d10lpsik1i8c69.cloudfront.net *.flippingbook.com *.googleapis.com *.googlesyndication.com *.hotjar.com *.livesession.io localhost *.nextopiasoftware.com *.olark.com *.openwidget.com *.optimonk.com *.ravm.tv recruitingbypaycor.com *.ryzeo.com s3.amazonaws.com *.screenpopper.com *.searchspring.io *.searchspring.net *.statstrk01.com *.tvsquared.com *.vibe.co *.videoly.co 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app downloads.mailchimp.com *.fontawesome.com widget.freshworks.com m2epro.freshdesk.com cdn.nextopia.net assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com *.adoric.com *.googleapis.com *.olark.com *.optimonk.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com 'self' 'unsafe-inline'; media-src *.adobe.com *.bing.com *.olark.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com sessions.bugsnag.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.fbcdn.net *.cookielaw.org *.onetrust.com widget.freshworks.com m2epro.freshdesk.com *.facebook.com *.facebook.net *.nextopia.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://beacon.searchspring.io/beacon *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com *.adoric.com *.adoric-om.com *.bing.com *.bing.net browser-intake-datadoghq.com *.crazyegg.com *.flippingbook.com *.googleapis.com www.google.ae www.google.as www.google.bg www.google.bj www.google.bs www.google.ca www.google.ch www.google.cl www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bo www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.eg www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ng www.google.com.ni www.google.com.np www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vc www.google.com.vn www.google.co.nz www.google.co.th www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.hu www.google.ie www.google.iq www.google.it www.google.kz www.google.lk www.google.lt www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mv www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.sk www.google.sr www.google.tt *.googlesyndication.com *.hotjar.com *.hotjar.io *.livesession.io localhost *.luckyorange.net *.olark.com *.openwidget.com *.optimonk.com *.ravm.tv *.ryzeo.com *.screenpopper.com *.searchspring.io *.searchspring.net *.statstrk01.com *.vibe.co *.videoly.co *.w55c.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.searchspring.io *.w55c.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; report-uri https://dd0d288c-1057-4eb0-bc5a-6dfdc4b3109b.sansec.watch/; report-to report-endpoint; 1
default-src *.al-bank.dk 'self';connect-src *.al-bank.dk *.bing.com *.cookieinformation.com *.dreamdata.cloud *.facebook.com *.google.com *.google-analytics.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.linkedin.com *.raffle.ai *.readspeaker.com *.ritzau.dk *.totalkredit.dk ad.doubleclick.net al-as-cd-prod-slot.azurewebsites.net al-as-cm-prod.azurewebsites.net bat.bing.net energy-calculator-web-client.cdn.nykredit.it gateway.api.nykredit.it gateway-test.api-nonprd.nykredit.it leaddoubler.s3.eu-west-1.amazonaws.com netbank.al-bank.dk;img-src *.al-bank.dk *.bing.com *.doubleclick.net *.facebook.com *.google.co.uk *.google.com *.google.dk *.google.pl *.google-analytics.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.imgix.net *.linkedin.com *.readpeak.com *.totalkredit.dk al-cdn-gve6b7amfjhxaybu.a02.azurefd.net bat.bing.net data: s3-eu-west-1.amazonaws.com 'self' www.google.com;style-src *.al-bank.dk *.googleapis.com *.readspeaker.com *.typekit.net al-cdn-gve6b7amfjhxaybu.a02.azurefd.net data: leaddoubler.s3.eu-west-1.amazonaws.com nonce 'unsafe-inline';base-uri *.al-bank.dk;style-src-elem *.al-bank.dk *.googleapis.com *.readspeaker.com *.typekit.net al-cdn-gve6b7amfjhxaybu.a02.azurefd.net 'self' 'unsafe-inline';script-src *.al-bank.dk *.bing.com *.cdn.nykredit.it *.cookieinformation.com *.doubleclick.net *.dreamdata.cloud *.facebook.com *.facebook.net *.google-analytics.com *.googleapis.com *.googletagmanager.com *.licdn.com *.raffle.ai *.readpeak.com *.readspeaker.com *.ritzau.dk *.totalkredit.dk *.youtube.com al-as-cd-prod-slot.azurewebsites.net al-as-cm-prod.azurewebsites.net al-cdn-gve6b7amfjhxaybu.a02.azurefd.net bat.bing.net data: energy-calculator-web-client.cdn.nykredit.it leaddoubler.s3.eu-west-1.amazonaws.com s3-eu-west-1.amazonaws.com 'unsafe-eval' 'unsafe-inline' www.google.com www.gstatic.com;font-src *.al-bank.dk *.cdn.nykredit.it *.typekit.net al-cdn-gve6b7amfjhxaybu.a02.azurefd.net data: energy-calculator-web-client.cdn.nykredit.it fonts.gstatic.com 'self';frame-ancestors *.al-bank.dk *.cookieinformation.com *.doubleclick.net *.google.com *.ritzau.dk al-as-cd-prod-slot.azurewebsites.net al-as-cm-prod.azurewebsites.net localhost netbank.al-bank.dk 'self' www.google.com;frame-src *.al-bank.dk *.cookiebot.com *.cookieinformation.com *.doubleclick.net *.google.com *.googletagmanager.com *.raffle.ai *.readspeaker.com *.ritzau.dk *.youtube.com *.youtube-nocookie.com al-as-cd-prod-slot.azurewebsites.net al-as-cm-prod.azurewebsites.net app.leaddoubler.com leaddoubler.s3.eu-west-1.amazonaws.com localhost netbank.al-bank.dk 'self';media-src *.al-bank.dk *.imgix.net data: 'self' www.google.com 1
connect-src 'self' http://px.ads.linkedin.com http://www.befrank.nl https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.vimeocdn.com https://ad.doubleclick.net https://befrank.bbvms.com https://befrank.data.adobedc.net https://cdn.bluebillywig.com https://consent.cookiebot.com https://consent.cookiebot.eu https://consentcdn.cookiebot.com https://consentcdn.cookiebot.eu https://dh066sknapjvd.cloudfront.net https://googleads.g.doubleclick.net https://nationalebefrankportaalacc.112.2o7.net https://player.vimeo.com https://px.ads.linkedin.com https://stats.g.doubleclick.net https://vimeo.com https://www.facebook.com https://www.google.de https://www.googleadservices.com https://www.vimeo.com; frame-src 'self' https://*.doubleclick.net https://*.google.com https://*.quintrics.nl https://befrank.bbvms.com https://consentcdn.cookiebot.com https://consentcdn.cookiebot.eu https://player.vimeo.com https://www.youtube.com; img-src 'self' blob: data: http://px.ads.linkedin.com https://*.bluebillywig.com https://*.ggpht.com https://*.google.ad https://*.google.ae https://*.google.al https://*.google.am https://*.google.as https://*.google.at https://*.google.az https://*.google.ba https://*.google.be https://*.google.bf https://*.google.bg https://*.google.bi https://*.google.bj https://*.google.bs https://*.google.bt https://*.google.by https://*.google.ca https://*.google.cat https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.co.ao https://*.google.co.bw https://*.google.co.ck https://*.google.co.cr https://*.google.co.id https://*.google.co.il https://*.google.co.in https://*.google.co.jp https://*.google.co.ke https://*.google.co.kr https://*.google.co.ls https://*.google.co.ma https://*.google.co.mz https://*.google.co.nz https://*.google.co.th https://*.google.co.tz https://*.google.co.ug https://*.google.co.uk https://*.google.co.uz https://*.google.co.ve https://*.google.co.vi https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.com https://*.google.com.af https://*.google.com.ag https://*.google.com.ar https://*.google.com.au https://*.google.com.bd https://*.google.com.bh https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.com.bz https://*.google.com.co https://*.google.com.cu https://*.google.com.cy https://*.google.com.do https://*.google.com.ec https://*.google.com.eg https://*.google.com.et https://*.google.com.fj https://*.google.com.gh https://*.google.com.gi https://*.google.com.gt https://*.google.com.hk https://*.google.com.jm https://*.google.com.kh https://*.google.com.kw https://*.google.com.lb https://*.google.com.ly https://*.google.com.mm https://*.google.com.mt https://*.google.com.mx https://*.google.com.my https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.com.np https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.com.pr https://*.google.com.py https://*.google.com.qa https://*.google.com.sa https://*.google.com.sb https://*.google.com.sg https://*.google.com.sl https://*.google.com.sv https://*.google.com.tj https://*.google.com.tr https://*.google.com.tw https://*.google.com.ua https://*.google.com.uy https://*.google.com.vc https://*.google.com.vn https://*.google.cv https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.dz https://*.google.ee https://*.google.es https://*.google.fi https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.gy https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.ie https://*.google.im https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.jo https://*.google.kg https://*.google.ki https://*.google.kz https://*.google.la https://*.google.li https://*.google.lk https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.mn https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.ne https://*.google.nl https://*.google.no https://*.google.nr https://*.google.nu https://*.google.pl https://*.google.pn https://*.google.ps https://*.google.pt https://*.google.ro https://*.google.rs https://*.google.ru https://*.google.rw https://*.google.sc https://*.google.se https://*.google.sh https://*.google.si https://*.google.sk https://*.google.sm https://*.google.sn https://*.google.so https://*.google.sr https://*.google.st https://*.google.td https://*.google.tg https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.tt https://*.google.vu https://*.google.ws https://*.googleapis.com https://*.googleusercontent.com https://*.gstatic.com https://ad.doubleclick.net https://befrank.bbvms.com https://befrank.data.adobedc.net https://dh066sknapjvd.cloudfront.net https://googleads.g.doubleclick.net https://i.ytimg.com https://imgsct.cookiebot.com https://imgsct.cookiebot.eu https://nationalebefrankportaal.112.2o7.net https://nationalebefrankportaalacc.112.2o7.net https://px.ads.linkedin.com https://s.ytimg.com https://secure.gravatar.com https://stats.g.doubleclick.net https://www.facebook.com https://www.googleadservices.com https://yt3.ggpht.com; media-src blob: data: https://befrank.bbvms.com https://cdn.bluebillywig.com https://dh066sknapjvd.cloudfront.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.vimeocdn.com https://assets.adobedtm.com https://befrank.bbvms.com https://cdn.bluebillywig.com https://cdnjs.cloudflare.com https://connect.facebook.net https://consent.cookiebot.com https://consent.cookiebot.eu https://consentcdn.cookiebot.com https://consentcdn.cookiebot.eu https://pagead2.googlesyndication.com https://player.vimeo.com https://sf16-website-login.neutral.ttwstatic.com https://snap.licdn.com https://vimeo.com https://www.vimeo.com https://www.youtube.com; style-src-elem 'self' 'unsafe-inline'; report-to https://o1174708.ingest.us.sentry.io/api/4510680573018112/security/?sentry_key=9a8462251dffe22502856519c24d8d4f; report-uri https://o1174708.ingest.us.sentry.io/api/4510680573018112/security/?sentry_key=9a8462251dffe22502856519c24d8d4f; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://c3se4i.ru https://bonuscake.ru https://eventtrace.ru https://trpixs.com https://ru.fulltrack.org https://webecyzo.com https://cdn.webecyzo.com https://qntm.it.com https://rer4.com https://zodalt.com https://xn--c-6mc.zodalt.com https://gdeslon.ru https://clicks.gdeslon.ru https://tektep.com https://ndt.tektep.com https://vk.com yastatic.net *.yandex.ru *.adfox.ru yandex.ru yandex.com verify.yandex.ru https://top-fwz1.mail.ru https://privacy-cs.mail.ru https://mytopf.com; connect-src 'self' blob: https://hitcrypt.c3se4i.ru https://api.ekacvda.com https://ru.fulltrack.org https://*.k8s.subscx-dev-4.salt.x5.ru https://sentry.x5.ru https://gw-cmdm.x5.ru https://id.x5.ru wss://gw-x5p.x5.ru https://gw-x5p.x5.ru https://vk.com yastatic.net *.yandex.net *.adfox.ru *.yandex.ru yandex.ru yandex.com https://mc.yandex.ru https://top-fwz1.mail.ru https://privacy-cs.mail.ru https://mytopf.com; img-src 'self' data: blob: https://hit.c3se4i.ru https://bonuscake.ru https://eventtrace.ru https://trpixs.com https://cms-2.s3-endpoint.sss2-msk2.x5.ru https://cms.s3-endpoint.sss-spb1.x5.ru https://gw-x5p.x5.ru https://vk.com *.yandex.net *.adfox.ru *.yandex.ru yandex.ru yandex.com https://mc.yandex.ru https://top-fwz1.mail.ru https://privacy-cs.mail.ru https://mytopf.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' yastatic.net *.adfox.ru; font-src 'self' data: yastatic.net; media-src 'self' blob: data: https://gw-x5p.x5.ru yastatic.net *.yandex.net *.yandex.ru *.adfox.ru yandex.ru yandex.com; child-src 'self' blob: https://mc.yandex.ru; frame-src 'self' blob: https://vk.com yandexadexchange.net *.yandexadexchange.net yastatic.net *.yandex.ru *.adfox.ru https://mc.yandex.ru https://top-fwz1.mail.ru https://privacy-cs.mail.ru https://mytopf.com; frame-ancestors 'self' https://master-cms.k8s.subscx-dev-4.salt.x5.ru https://cms.subscx.k8s.x5.ru https://metrika.yandex.ru; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests; report-uri https://sentry.x5.ru/api/278/security/?sentry_key=1238c1db905544618e9fe223f755cf93; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://static.cloudflareinsights.com https://code.jquery.com https://cdnjs.cloudflare.com https://analytics.lexiconthai.com https://maps.googleapis.com https://www.google.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' blob: https://www.google-analytics.com https://region1.google-analytics.com https://analytics.lexiconthai.com https://maps.googleapis.com https://www.google.com https://ipinfo.io https://www.googletagmanager.com https://yoast.com https://s3.amazonaws.com https://cdn-images.mailchimp.com https://tilleke.us7.list-manage.com; worker-src 'self' blob:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://open.spotify.com https://www.google.com; object-src 'none'; base-uri 'self'; form-action 'self' https://tilleke.us7.list-manage.com; frame-ancestors 'self'; report-uri /csp-report.php 1
font-src fonts.googleapis.com fonts.gstatic.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com maxcdn.bootstrapcdn.com *.typekit.net *.adabra.com *.adbr.io *.streamwise.it *.fontawesome.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.streamwise.it 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.com *.doubleclick.net *.facebook.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com lightwidget.com *.adabra.com *.adbr.io *.streamwise.it *.addthis.com *.hotjar.com *.cookiebot.com www.facebook.com platform.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com maps.googleapis.com maps.gstatic.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.adabra.com *.adbr.io *.streamwise.it *.google.it fonts.gstatic.com *.zemanta.com *.clarity.ms *.bing.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.lightwidget.com code.jquery.com lightwidget.com *.adabra.com *.adbr.io *.streamwise.it cdn.jsdelivr.net *.addthis.com *.addthisedge.com *.moatads.com *.hotjar.com *.fullstory.com fullstory.com *.clarity.ms *.cookiebot.com connect.facebook.net twitter.com platform.twitter.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com cdn.dnky.co webchat.dotdigital.com widget.freshworks.com m2epro.freshdesk.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com *.typekit.net *.adabra.com *.adbr.io *.streamwise.it *.fontawesome.com unsafe-inline *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.adabra.com *.adbr.io *.streamwise.it *.addthis.com *.g.doubleclick.net *.clarity.ms *.hotjar.com *.cookiebot.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com api.stripe.com js.stripe.com m.stripe.com x.klarnacdn.net klarna.com na.playground.klarnaevt.com eu.playground.klarnaevt.com klarna-payments-eu.playground.klarna.com klarna-payments-na.playground.klarna.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-ancestors 'self' https://kiosk.stqry.com http://localhost:3000 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com data: *.klarnacdn.net *.fontawesome.com maxcdn.bootstrapcdn.com *.cloudflare.com *.popt.in *.amazonaws.com *.on.aws *.cloudfront.net cdnjs.cloudflare.com cdn.popt.in fonts.salesfire.co.uk data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com *.awin1.com *.zenaps.com *.fls.doubleclick.net *.dotdigital-pages.com *.dotdigital.com *.addthis.com *.google.com/ *.weltpixel.com *.klarna.com js.mollie.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.trustpilot.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com *.googleapis.com *.awin1.com *.zenaps.com *.wepowerconnections.com https://www.magezon.com *.doofinder.com *.trackedlink.net magefan.com cm.magefan.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://img.youtube.com https://www.mollie.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com flagpedia.net *.popt.in *.cloudfront.net https://redchamps.com https://maps.gstatic.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com api.feefo.com services.postcodeanywhere.co.uk cdn-ukwest.onetrust.com analytics.twitter.com www.google.co.in bat.bing.com c.bing.com c.clarity.ms lantern.roeye.com admin.hedgesdirect.co.uk register.feefo.com www.admin.hedgesdirect.co.uk octave-7902-adswizz.attribution.adswizz.com pixel.tapad.com cdn.salesfire.co.uk dev.visualwebsiteoptimizer.com stats.g.doubleclick.net image.salesfire.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com *.doofinder.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal s7.addthis.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.google.com/ *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com js.mollie.com pay.google.com applepay.cdn-apple.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com *.popt.in *.cloudflare.com *.jsdelivr.net *.trustpilot.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net api.feefo.com ruler.nyltx.com willi11165.pcapredict.com register.feefo.com js-agent.newrelic.com code.jquery.com services.postcodeanywhere.co.uk hedge11123.pcapredict.com cdn-ukwest.onetrust.com cdn.popt.in eu1-config.doofinder.com analytics.nyltx.com cdnjs.cloudflare.com bat.bing.com static.ads-twitter.com www.clarity.ms cdn.requestmetrics.com cdn.mouseflow.com static.cloudflareinsights.com script.crazyegg.com s.pinimg.com cdn.salesfire.co.uk ct.pinterest.com www.best4hedging.co.uk dev.visualwebsiteoptimizer.com cdn.noibu.com app.answerai.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.doofinder.com https://cdn.jsdelivr.net *.klarnacdn.net *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com *.popt.in *.cloudflare.com *.jsdelivr.net *.on.aws *.amazonaws.com *.trustpilot.com *.tagmanager.google.com *.googletagmanager.com register.feefo.com services.postcodeanywhere.co.uk fonts.popt.in cdn.popt.in cdnjs.cloudflare.com tctguyhimcwcyexxgullu3seem0fkhrh.lambda-url.us-west-2.on.aws fonts.salesfire.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.wepowerconnections.com https://the.sciencebehindecommerce.com *.doofinder.com wss://*.doofinder.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com ekr.zdassets.com/ *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.gstatic.com maps.googleapis.com *.cloudfront.net *.cloudflare.com *.popt.in www.googleapis.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app bam.nr-data.net api.feefo.com collect.feefo.com services.postcodeanywhere.co.uk px.ads.linkedin.com analytics.nyltx.com cdn-ukwest.onetrust.com display.popt.in geolocation.onetrust.com n.clarity.ms w.clarity.ms in.requestmetrics.com l.clarity.ms ct.pinterest.com live.smartmetrics.co.uk hit.salesfire.co.uk dev.visualwebsiteoptimizer.com ss.hedgesdirect.co.uk input.noibu.com cdn.noibu.com ss.best4hedging.co.uk wss://input.noibu.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src https://www.googletagmanager.com *.googleapis.com *.gstatic.com fonts.gstatic.com *.nagich.co.il *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.bolt.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.bolt.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * gateway21.pelecard.biz 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'unsafe-inline' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.gstatic.com *.google.com *.facebook.com *.googleapis.com  *.cloudfront.net paypal.com paypalobjects.com *.paypal.com s.ytimg.com  *.ssl-images-amazon.com  *.ssl-images-amazon.co.uk  *.ssl-images-amazon.jp  *.ssl-images-amazon.co.jp  *.ssl-images-amazon.it  *.ssl-images-amazon.fr  *.ssl-images-amazon.es  *.media-amazon.com  *.media-amazon.co.uk  *.media-amazon.co.jp  *.media-amazon.jp  *.media-amazon.it  *.media-amazon.fr  *.media-amazon.es *.nagich.co.il www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com gateway21.pelecard.biz data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com youtube.com *.bolt.com *.commerce-quick-checkout.com http://localhost:8082 https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ tagmanager.google.com https://www.googletagmanager.com *.googleapis.com  *.cloudfront.net paypal.com paypalobjects.com widgets.magentocommerce.com *.paypal.com fpdbs.sandbox.paypal.com  *.ssl-images-amazon.com  *.ssl-images-amazon.co.uk  *.ssl-images-amazon.jp  *.ssl-images-amazon.co.jp  *.ssl-images-amazon.it  *.ssl-images-amazon.fr  *.ssl-images-amazon.es  *.media-amazon.com  *.media-amazon.co.uk  *.media-amazon.co.jp  *.media-amazon.jp  *.media-amazon.it  *.media-amazon.fr  *.media-amazon.es *.gstatic.com jquery.sellxed.com *.vimeo.com video.google.com js.braintreegateway.com *.nagich.co.il *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es www.google.com 'unsafe-eval' data: connect.facebook.net *.doubleclick.net system.user-a.co.il assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com gateway21.pelecard.biz 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com fonts.googleapis.com/ *.nagich.co.il *.fontawesome.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.bolt.com https://www.google-analytics.com *.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google.com https://www.google-analytics.com https://analytics.google.com https://static.hotjar.com https://assets.cookieseal.com https://challenges.cloudflare.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://static.hotjar.com https://assets.cookieseal.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.typekit.net https://p.typekit.net https://assets.cookieseal.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.typekit.net https://p.typekit.net https://assets.cookieseal.com; img-src 'self' data: https: blob:; font-src 'self' https://fonts.gstatic.com https://use.typekit.net https://p.typekit.net; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://www.google.com https://stats.g.doubleclick.net https://px.ads.linkedin.com https://assets.cookieseal.com https://apinode.cookieseal.com; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com/ https://challenges.cloudflare.com; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; form-action 'self'; upgrade-insecure-requests; 1
form-action 'self'; report-to csp-report; report-uri https://csp-report-receiver.atoka.io/report/atoka-production/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://assets.mailerlite.com https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://api.riabiz.com https://*.riabiz.com https://www.google-analytics.com https://www.googletagmanager.com https://api.paperform.co https://*.ingest.us.sentry.io; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://*.doubleclick.net https://*.googlesyndication.com https://challenges.cloudflare.com https://*.paperform.co https://accounts.google.com https://www.facebook.com https://www.linkedin.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-_Em_ZP0VkrwdXYnorMbC-A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.sagepay.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com *.sagepay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com flagpedia.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.sagepay.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.sagepay.com www.gstatic.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-_O5WmNyFutMkStaEHu_QWw' https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.googlesyndication.com https://*.googleadservices.com https://*.doubleclick.net https://*.adtrafficquality.google https://fundingchoicesmessages.google.com https://js.stripe.com https://accounts.google.com 'unsafe-inline'; script-src-elem 'self' 'nonce-_O5WmNyFutMkStaEHu_QWw' https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.googlesyndication.com https://*.googleadservices.com https://*.doubleclick.net https://*.adtrafficquality.google https://fundingchoicesmessages.google.com https://js.stripe.com https://accounts.google.com; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https://*.googlesyndication.com https://*.googleadservices.com https://*.doubleclick.net https://*.adtrafficquality.google https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.google.com https://*.gstatic.com https://*.googleusercontent.com https://tile.openstreetmap.org https://*.tile.openstreetmap.org https://hst.tradedoubler.com https://imp.tradedoubler.com https://vht.tradedoubler.com https://visit.profrakt.no; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://*.googlesyndication.com https://*.googleadservices.com https://*.doubleclick.net https://*.adtrafficquality.google https://fundingchoicesmessages.google.com https://nominatim.openstreetmap.org https://api.stripe.com; frame-src 'self' https://js.stripe.com https://www.googletagmanager.com https://*.googlesyndication.com https://*.googleadservices.com https://*.doubleclick.net https://*.adtrafficquality.google https://fundingchoicesmessages.google.com https://accounts.google.com https://www.google.com https://maps.google.com; form-action 'self' https://checkout.stripe.com; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; report-uri /csp-rapport 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com *.fontawesome.com *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com apis.google.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.fontawesome.com *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.multisafepay.com https://pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.multisafepay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com *.facebook.com *.reddit.com *.bing.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ chimpstatic.com downloads.mailchimp.com *.list-manage.com *.multisafepay.com https://pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.bing.com *.clarity.ms unpkg.com *.doubleclick.net https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com *.fontawesome.com *.multisafepay.com unsafe-inline assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.multisafepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.bing.com *.clarity.ms *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://e72367b9-6e86-4604-bbda-cd4860d727c6.sansec.watch/; report-to report-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-GPYGyZEe_tzNMgBe4rW8ZQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src  'none'; connect-src 'self' *.playboytv.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.playboytv.com join.gammasecure.com; script-src 'self' *.playboytv.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.playboytv.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://banks.kg https://www.googletagmanager.com https://maps.googleapis.com https://bdn.intelliants.com https://static.cloudflareinsights.com; connect-src 'self' https://api.banks.kg https://ms.banks.kg wss://ws.banks.kg https://www.googletagmanager.com https://www.google-analytics.com https://stats.g.doubleclick.net https://bdn.intelliants.com https://*.ingest.sentry.io; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; frame-src https://maps.googleapis.com https://policy.insurancebakai.kg; worker-src 'self'; frame-ancestors 'self'; object-src 'none'; base-uri 'self' 1
default-src 'self' data:; connect-src 'self' https://plausible.io *.webanalytics.italia.it *.sentry.io *.sentry-cdn.com *.opencontent.io *.opencontent.it *.opencityitalia.it *.stanzadelcittadino.it wss://*.opencityitalia.it https://nominatim.openstreetmap.org *.meilisearch.io https://apimeteoras.biddaweb.it *.comuni-chiamo.com https://m1.openfpcdn.io https://translate-pa.googleapis.com https://translate.yandex.net https://s3.eu-west-1.amazonaws.com https://servizi.comune.verona.it; font-src 'self' data: *.opencontent.io *.opencontent.it *.opencityitalia.it *.comuni-chiamo.com; frame-src 'self' *.youtube.com https://www.youtube-nocookie.com https://youtu.be *.vimeo.com https://api.webanalytics.italia.it https://ufficiostampa.comune.verona.it; img-src 'self' data: blob: https://flyimg.opencityitalia.it https://flyimg-qa.opencityitalia.it *.openstreetmap.org *.ytimg.com https://s3-eu-west-1.amazonaws.com *.webanalytics.italia.it https://img.youtube.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://plausible.io https://www.googletagmanager.com *.sentry-cdn.com *.webanalytics.italia.it *.opencontent.io *.opencontent.it *.opencityitalia.it https://nominatim.openstreetmap.org https://apimeteoras.biddaweb.it https://www.youtube.com *.comuni-chiamo.com https://servizi.comune.verona.it *.js.sentry-cdn.com; style-src 'self' 'unsafe-inline' https:; report-uri https://csp-collector.opencontent.it/csp?env=production&app=cms; worker-src 'self' blob: 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * secure.oceanpayment.com test-secure.oceanpayment.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com secure.oceanpayment.com test-secure.oceanpayment.com https://*.17track.net https://www.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com https://firebasestorage.googleapis.com https://www.googletagmanager.com https://*.google-analytics.com https://www.googleadservices.com https://www.google.com https://google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com secure.oceanpayment.com https://www.17track.net *.avada.io *.shopify.com https://www.googletagmanager.com https://www.googleadservices.com https://www.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.fontawesome.com https://*.17track.net https://fonts.bunny.net *.googleapis.com *.addtoany.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com secure.oceanpayment.com test-secure.oceanpayment.com https://*.17track.net https://get.geojs.io *.avada.io http://dpm.demdex.net https://www.googletagmanager.com https://*.google-analytics.com https://www.googleadservices.com https://www.google.com https://google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://ad.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: *.fontawesome.com https://static.hotjar.com *.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://www.facebook.com/tr/ https://seo.mageplaza.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com https://asistenciawebv2.grupokonecta.co https://api.retargetly.com https://cookieless-campaign.prd-00.retargetly.com/ https://asistenciawebv2-dev.grupokonecta.co:5005 c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net *.googleapis.com *.cdninstagram.com *.fbcdn.net https://asistenciawebv2.grupokonecta.co https://bucket-poa-images-prod.s3.amazonaws.com https://poaimages.cognitivedevgrupokonectacloud.com https://poa-images.cognitivedevgrupokonectacloud.com https://static.hotjar.com https://alpina.com https://mcprod.alpina.com https://patleeman.github.io http://patricklee.nyc https://www.google.com.co https://www.pages02.net https://poa-images.cognitivegrupokonectacloud.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.instagram.com https://developer.adobe.com https://magento.com https://asistenciawebv2.grupokonecta.co https://poa.cognitivegrupokonectacloud.com:7072/assets/Bridge.js https://poav2.cognitivedevgrupokonectacloud.com https://code.jquery.com/ https://asistenciawebv2-dev.grupokonecta.co:5005/CustomerAlpina/EbChatAlpina/js/iframe-poa.js https://asistenciawebv2-dev.grupokonecta.co:5005/CustomerAlpina/EbClickToCallAlpina/js/iframe-poa.js https://static.hotjar.com https://js-agent.newrelic.com https://www.sc.pages02.net https://asistenciawebv2.grupokonecta.co:8443/EbChatAlpina/js/iframe-poa.min.js https://asistenciawebv2.grupokonecta.co:8443/EbClickToCallAlpina/js/iframe-poa.min.js https://connect.facebook.net https://static.ads-twitter.com https://poa-bridge-api.cognitivegrupokonectacloud.com https://asistenciawebv2-dev.grupokonecta.co:5005/CustomerAlpina/EbClicktoCallAlpinaGC/js/call-app.js https://asistenciawebv2-dev.grupokonecta.co:5005/CustomerAlpina/EbChatAlpinaOm/js/chat-app.js https://poav2.cognitivegrupokonectacloud.com https://serviciosvirtuales.grupokonecta.co:7443 js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://static.hotjar.com https://asistenciawebv2-dev.grupokonecta.co:5005/CustomerAlpina/EbChatAlpina/css/iframe-poa.css https://asistenciawebv2-dev.grupokonecta.co:5005/CustomerAlpina/EbClickToCallAlpina/css/iframe-poa.css https://asistenciawebv2.grupokonecta.co https://asistenciawebv2.grupokonecta.co:8443/EbChatAlpina/css/iframe-poa.min.css https://asistenciawebv2.grupokonecta.co:8443/EbClickToCallAlpina/css/iframe-poa.min.css https://asistenciawebv2-dev.grupokonecta.co:5005/CustomerAlpina/EbClicktoCallAlpinaGC/css/index.css https://asistenciawebv2-dev.grupokonecta.co:5005/CustomerAlpina/EbChatAlpinaOm/css/index.css assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.instagram.com *.googleusercontent.com https://developer.adobe.com http://stats.g.doubleclick.net http://www.google-analytics.com/ https://poa.cognitivegrupokonectacloud.com:7072 https://poa-bridge-api.cognitivedevgrupokonectacloud.com https://json.geoiplookup.io https://static.hotjar.com https://api.ipify.org https://bam.nr-data.net https://edge.adobedc.net https://pdp-service.retargetly.com https://analytics.google.com wss://ws.hotjar.com https://analytics.tiktok.com https://poa-bridge-api.cognitivegrupokonectacloud.com https://asistenciawebv2-dev.grupokonecta.co:5005 https://poav2.cognitivegrupokonectacloud.com https://serviciosvirtuales.grupokonecta.co:7443 api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src https://static.hotjar.com https://static.hotjar.io wss://*.hotjar.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://connect.facebook.net https://consent.cookiebot.com/uc.js https://consentcdn.cookiebot.com/consentconfig/ https://dev.visualwebsiteoptimizer.com https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ https://js.intercomcdn.com https://platform.twitter.com/widgets.js https://script.hotjar.com https://static.hotjar.com https://stats.wp.com https://widget.intercom.io/widget/ https://widget.trustpilot.com/bootstrap/v5/ https://www.google.com/recaptcha/api.js https://www.googletagmanager.com https://www.gstatic.com https://www.youtube.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://p.typekit.net https://use.typekit.net; font-src 'self' data: https://fonts.gstatic.com https://fonts.intercomcdn.com https://use.typekit.net; img-src 'self' data: https://cdn.visualwebsiteoptimizer.com https://dev.visualwebsiteoptimizer.com https://downloads.intercomcdn.eu https://i.ytimg.com https://js.intercomcdn.com https://pixel.wp.com https://secure.gravatar.com https://static.intercomassets.eu https://www.google.co.uk https://www.googletagmanager.com; connect-src 'self' https://ad.doubleclick.net https://api-iam.eu.intercom.io https://consentcdn.cookiebot.com https://dev.visualwebsiteoptimizer.com https://region1.analytics.google.com https://www.google.co.uk https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com wss://nexus-europe-websocket.intercom.io wss://primary-realtime-eu.intercom-messenger.com https://eooxait9dnepzro.m.pipedream.net; frame-src 'self' https://consentcdn.cookiebot.com https://platform.twitter.com https://widget.trustpilot.com https://www.google.com https://www.youtube.com; object-src 'none'; base-uri 'self'; manifest-src 'self'; media-src 'self'; worker-src blob:; form-action 'self' https://www.trustpilot.co.uk/evaluate/www.payplan.com https://eooxait9dnepzro.m.pipedream.net; upgrade-insecure-requests; block-all-mixed-content; report-uri https://www.payplan.com/csp-report.php 1
default-src 'self'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; object-src 'none'; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.clarity.ms https://*.clarity.ms https://utt.impactcdn.com https://pagead2.googlesyndication.com https://fundingchoicesmessages.google.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://www.google-analytics.com https://*.google-analytics.com https://*.clarity.ms https://c.bing.com https://pagead2.googlesyndication.com https://*.googlesyndication.com https://*.doubleclick.net https://a.impactradius-go.com https://imp.pxf.io; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.clarity.ms https://c.bing.com https://utt.impactcdn.com https://*.impactcdn.com https://pagead2.googlesyndication.com https://*.doubleclick.net; frame-src 'self' https://fundingchoicesmessages.google.com https://*.google.com https://*.doubleclick.net https://*.googlesyndication.com; worker-src 'self' blob:; frame-ancestors 'none'; base-uri 'self'; object-src 'none' 1
object-src 'none';base-uri 'self';script-src 'nonce-ewpuJqj1dcl4WKVxoiZU0A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://plumrocket.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.avada.io *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-aF1tARA1y14rQ01yBqN_yQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src https://a.bff.fm https://platform.twitter.com https://www.google-analytics.com; object-src 'none'; style-src data: https://a.bff.fm; img-src data: https://a.bff.fm https://www.google-analytics.com; connect-src 'self' https://www.google-analytics.com; font-src data:; media-src https://*.bff.fm; frame-src *; block-all-mixed-content; upgrade-insecure-requests; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com/ https://fonts.gstatic.com/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com https://cdn.jsdelivr.net/ https://secure.golp4elik.com/ https://data.whizeo.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com tagmanager.google.com https://cdn.jsdelivr.net/ https://fonts.googleapis.com/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.googleapis.com *.gstatic.com data: 'self' data: *.doubleclick.net *.facebook.com *.hotjar.com *.typekit.net https://static.klaviyo.com *.tawk.to https://nibble.website https://*.nibble.website https://*.preprod.nibble.website https://fonts.gstatic.com https://fonts.googleapis.com *.salesfire.co.uk *.klarnacdn.net fonts.gstatic.com *.stripe.com klarna.com *.klarna.com *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.punchout2go.com *.tradecentric.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com publications.mscdirect.co.uk *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com *.google.com *.doubleclick.net *.facebook.com js.stripe.com *.hotjar.com *.trustpilot.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.punchout2go.com *.tradecentric.com *.salesfire.co.uk *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com 'self' data: *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com maps.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ bat.bing.com *.ads.linkedin.com *.linkedin.com *.google.co.uk *.googleadservices.com *.google-analytics.com *.magentocommerce.com *.widgets.magentocommerce.com *.paypalobjects.com *.postcodeanywhere.co.uk embed.tawk.to https://nibble.website https://*.nibble.website https://*.preprod.nibble.website www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.commerce-connector.com *.salesfire.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com connect.facebook.net *.facebook.net *.doubleclick.net *.google-analytics.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.linkedin.com *.smartmetrics.co.uk *.salesfire.co.uk *.bing.com *.hotjar.com js-agent.newrelic.com bam.nr-data.net d5yoctgpv4cpx.cloudfront.net *.trustpilot.com *.tawk.to https://nibble.website https://*.nibble.website https://*.preprod.nibble.website js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.punchout2go.com *.tradecentric.com *.pcapredict.com https://www.commerce-connector.com *.commerce-connector.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com https://static.klaviyo.com *.typekit.net services.postcodeanywhere.co.uk *.trustpilot.com *.tawk.to https://nibble.website https://*.nibble.website https://*.preprod.nibble.website https://fonts.gstatic.com https://fonts.googleapis.com unsafe-inline assets.braintreegateway.com *.punchout2go.com *.tradecentric.com *.salesfire.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://nibble.website https://*.nibble.website https://*.preprod.nibble.website 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ bat.bing.com *.salesfire.co.uk *.hotjar.io *.smartmetrics.co.uk *.linkedin.com *.pingdom.net p2iqhncxyh.execute-api.eu-central-1.amazonaws.com *.tawk.to wss://*.tawk.to https://nibble.website https://*.nibble.website https://*.preprod.nibble.website api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.bing.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' data:; connect-src 'self' https://plausible.io *.webanalytics.italia.it *.sentry.io *.sentry-cdn.com *.opencontent.io *.opencontent.it *.opencityitalia.it *.stanzadelcittadino.it wss://*.opencityitalia.it https://nominatim.openstreetmap.org *.meilisearch.io https://apimeteoras.biddaweb.it *.comuni-chiamo.com https://m1.openfpcdn.io https://translate-pa.googleapis.com https://translate.yandex.net https://s3.eu-west-1.amazonaws.com https://servizidigitali.provincia.tn.it; font-src 'self' data: *.opencontent.io *.opencontent.it *.opencityitalia.it *.comuni-chiamo.com; frame-src 'self' *.youtube.com https://www.youtube-nocookie.com https://youtu.be *.vimeo.com https://api.webanalytics.italia.it *.arcgis.com https://arcgis.com https://opencoesione.gov.it https://www.raiplaysound.it https://docs.google.com; img-src 'self' data: blob: https://flyimg.opencityitalia.it https://flyimg-qa.opencityitalia.it *.openstreetmap.org *.ytimg.com https://s3-eu-west-1.amazonaws.com *.webanalytics.italia.it https://img.youtube.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://plausible.io https://www.googletagmanager.com *.sentry-cdn.com *.webanalytics.italia.it *.opencontent.io *.opencontent.it *.opencityitalia.it https://nominatim.openstreetmap.org https://apimeteoras.biddaweb.it https://www.youtube.com *.comuni-chiamo.com https://www.ufficiostampa.provincia.tn.it https://www.appa.provincia.tn.it https://servizidigitali.provincia.tn.it; style-src 'self' 'unsafe-inline' https:; report-uri https://csp-collector.opencontent.it/csp?env=production&app=cms; worker-src 'self' blob: 1
font-src *.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com fonts.googleapis.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://belco-prod.s3-eu-central-1.amazonaws.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://images.unsplash.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://cdn.belco.io chimpstatic.com downloads.mailchimp.com *.list-manage.com *.fontawesome.com *.googleapis.com *.gstatic.com *.avada.io js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://*.googleapis.com downloads.mailchimp.com *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com wss://chat.belco.io https://cdn.belco.io https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'self' data:; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://plugins.flockler.com https://connect.facebook.net https://*.googleapis.com assets.adobedtm.com chat.aiaibot.com terminvereinbarung.bekb.ch https://*.youtube.com https://*.ytimg.com https://platform.twitter.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com; img-src 'self' data: blob: https://*.ytimg.com https://*.112.2o7.net https://cm.everesttech.net https://*.everesttech.net https://*.googleapis.com https://*.googleusercontent.com https://*.gstatic.com maps.googleapis.com maps.gstatic.com https://terminvereinbarung.bekb.ch https://*.demdex.net https://media-api.flockler.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://banking.bekb.ch banking.bekb.ch api.aiaibot.com trading.money-net.ch terminvereinbarung.bekb.ch https://*.demdex.net https://dpm.demdex.net https://bekb.demdex.net https://*.adobedtm.com https://*.everesttech.net https://*.2o7.net https://*.omtrdc.net https://*.googleapis.com https://*.gstatic.com maps.googleapis.com https://www.google-analytics.com; frame-src 'self' player.vimeo.com www.youtube.com https://www.youtube.com *.yourmoney.ch https://platform.twitter.com https://*.demdex.net *.logismata.ch *.prospective.ch chat.aiaibot.com www.linkedin.com *.linkedin.com https://levante.dcs.comitas.com; media-src 'self' data: blob: https://www.youtube.com https://youtube.com https://*.youtube.com https://youtu.be https://player.vimeo.com https://vimeo.com https://www.linkedin.com https://media.licdn.com https://video.twimg.com https://www.twitter.com; frame-ancestors 'self' *.bekb.ch *.bcbe.ch *.hpbsc.ch e.issuu.com bekb-web.jls.digital; report-to default; report-uri https://ba3fc8575b14269926ddb1b884d1775b.report-uri.com/r/d/csp/reportOnly 1
object-src 'none';base-uri 'self';script-src 'nonce-NiD-3D3eAf_6YkSZIigGog' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src-attr 'unsafe-inline' 'unsafe-hashes' 1
default-src 'self'; script-src 'nonce-j4fRezZbjJehMsaucJ6pDA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://*.gstatic.com https://*.googleapis.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com https://widgets.trustedshops.com https://integrations.etrusted.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.facebook.com https://ct.pinterest.com https://*.cookiebot.com *.sendcloud.sc *.jsdelivr.net *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://banners.helloretailcdn.com https://images.unsplash.com https://dailystyle.nl https://*.bing.com https://facebook.com https://www.facebook.com https://ct.pinterest.com https://*.googletagmanager.com https://*.clarity.ms https://at19.net https:/at19.net https://www.google.nl https://www.google.com https://*.googleapis.com https://*.gstatic.com https://*.cookiebot.com https://bdt9.net https://ds1.nl https://dt51.net https://dt61.net https://fr135.net https://glp8.net https://jdt8.net https://jf79.net https://hs82.net https://lt45.net https://mt74.net https://ndt5.net https://rkn3.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com flagpedia.net https://redchamps.com *.amazonaws.com https://widgets.trustedshops.com https://integrations.etrusted.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://core.helloretail.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://maps.googleapis.com https://jdt8.net https://tdep.dailystyle.nl https://chimpstatic.com https://diffuser-cdn.app-us1.com https://js-agent.newrelic.com https://bat.bing.com https://s.pinimg.com https://connect.facebook.net https://prism.app-us1.com https://www.clarity.ms https://*.google.com https://*.googleapis.com *.gstatic.com https://*.nr-data.net https://trackcmp.net https://*.cookiebot.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://browser.sentry-cdn.com maps.googleapis.com *.sendcloud.sc *.jsdelivr.net https://widgets.trustedshops.com https://integrations.etrusted.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com *.gstatic.com https://*.googleapis.com https://fonts.googleapis.com https://static.klaviyo.com maxcdn.bootstrapcdn.com *.sendcloud.sc *.jsdelivr.net https://widgets.trustedshops.com https://integrations.etrusted.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://core.helloretail.com https://helloretailcdn.com https://maps.googleapis.com https://player.vimeo.com https://tdep.dailystyle.nl https://ct.pinterest.com https://*.clarity.ms https://*.google-analytics.com https://*.nr-data.net https://*.googleapis.com https://*.cookiebot.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.ingest.sentry.io www.gstatic.com maps.googleapis.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.trustedshops.com *.etrusted.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.pay.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://localhost/paynl/csp/report; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cdn-static.symfonieyarns.com cdn-media.symfonieyarns.com *.fontawesome.com maxcdn.bootstrapcdn.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.knitpro.eu *.lightwidget.com cdn.lightwidget.com *.facebook.net *.google.co.in *.facebook.com cdn-static.knitpro.eu cdn-media.knitpro.eu *.doubleclick.net *.localhost:12387 *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.paypal.com *.paypalobjects.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.facebook.net *.google.co.in *.facebook.com cdn-static.knitpro.eu cdn-media.knitpro.eu *.knitpro.eu *.doubleclick.net *.localhost:12387 *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.paypalobjects.com cdn.lightwidget.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com cdn-static.symfonieyarns.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.twitter.com *.facebook.net *.google.co.in *.facebook.com cdn-static.knitpro.eu cdn-media.knitpro.eu *.knitpro.eu *.doubleclick.net *.localhost:12387 *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.paypalobjects.com cdn.lightwidget.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io cdn-static.symfonieyarns.com cdn-media.symfonieyarns.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.knitpro.eu *.lightwidget.com cdn.lightwidget.com *.facebook.net *.google.co.in *.facebook.com cdn-static.knitpro.eu cdn-media.knitpro.eu *.doubleclick.net *.localhost:12387 *.googletagmanager.com *.paypalobjects.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com cdn-static.symfonieyarns.com cdn-media.symfonieyarns.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cloudflare.com *.twitter.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.paypalobjects.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.knitpro.eu cdn-static.knitpro.eu cdn-media.knitpro.eu *.lightwidget.com cdn.lightwidget.com *.facebook.net *.google.co.in *.facebook.com *.doubleclick.net *.localhost:12387 *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn-static.symfonieyarns.com cdn-media.symfonieyarns.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.knitpro.eu cdn-static.knitpro.eu cdn-media.knitpro.eu *.lightwidget.com cdn.lightwidget.com *.facebook.net *.google.co.in *.facebook.com *.doubleclick.net *.localhost:12387 *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.paypal.com *.paypalobjects.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com cdn-media.symfonieyarns.com *.knitpro.eu *.facebook.net *.google.co.in *.facebook.com cdn-static.knitpro.eu cdn-media.knitpro.eu *.doubleclick.net *.localhost:12387 *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.paypal.com *.paypalobjects.com cdn.lightwidget.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com cdn-static.symfonieyarns.com cdn-media.symfonieyarns.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cloudflare.com *.twitter.com *.twimg.com *.knitpro.eu *.lightwidget.com cdn.lightwidget.com *.facebook.net *.google.co.in *.facebook.com cdn-static.knitpro.eu cdn-media.knitpro.eu *.doubleclick.net *.localhost:12387 *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.paypalobjects.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
style-src-elem 'self' 'unsafe-inline' cdn.jsdelivr.net fonts.googleapis.com *.bootstrapcdn.com www.kettner.com test.kettner.com *.typekit.net *.datareporter.eu cdn.eye-able.com 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' cdn.jsdelivr.net www.google.com www.googleadservices.com googleads.g.doubleclick.net *.googletagmanager.com *.gstatic.com *.google-analytics.com cdn.usersnap.com api.usersnap.com *.facebook.net www.kettner.com test.kettner.com *.typekit.net *.saferpay.com *.datareporter.eu *.piwik.pro chimpstatic.com cdn.eye-able.com 'unsafe-inline'; font-src fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com *.fontawesome.com data: online.swagger.io *.typekit.net *.bootstrapcdn.com *.gstatic.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors https://api.clerk.io https://cdn.clerk.io 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.google.com https://www.youtube.com *.facebook.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com maps.googleapis.com maps.gstatic.com https://cdn.clerk.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://www.magezon.com online.swagger.io img.youtube.com cdn.usersnap.com cdn.jsdelivr.net www.facebook.com www.google.com www.google.at *.googletagmanager.com www.kettner.com test.kettner.com *.googlesyndication.com googleads.g.doubleclick.net cdn.eye-able.com https://redchamps.com *.clerk.io *.doubleclick.net *.ggpht.com *.googleadservices.com *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.az www.google.ba www.google.be www.google.bg www.google.bj www.google.bs www.google.by www.google.ca www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bo www.google.com.br www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.fj www.google.com.gt www.google.com.hk www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gr www.google.hn www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.sc www.google.se www.google.si www.google.sk www.google.sm www.google.tg www.google.tm www.google.tn google.com *.google.com *.gstatic.com yastatic.net *.youtube.com *.ytimg.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https://api.clerk.io https://cdn.clerk.io https://custom.clerk.io jquery.sellxed.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.google.com *.fontawesome.com polyfill.io *.usersnap.com *.gstatic.com *.payments-amazon.com *.facebook.net 'self' 'unsafe-inline' 'unsafe-eval' *.clerk.io *.datareporter.eu *.doubleclick.net *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.jquery.com *.youtube.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com https://api.clerk.io https://cdn.clerk.io downloads.mailchimp.com maxcdn.bootstrapcdn.com *.fontawesome.com 'self' 'unsafe-inline' *.bootstrapcdn.com *.datareporter.eu *.googleapis.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline';, connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com api.usersnap.com *.algolianet.com *.algolia.net *.amazon.com *.google-analytics.com *.loadbee.com *.datareporter.eu *.googlesyndication.com www.googleadservices.com cdn.eye-able.com *.bootstrapcdn.com *.clerk.io *.doubleclick.net *.googleadservices.com *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.ba www.google.be www.google.bg www.google.bs www.google.by www.google.ca www.google.cg www.google.ch www.google.cl www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bo www.google.com.br www.google.com.cy www.google.com.eg www.google.com.gt www.google.com.hk www.google.com.kw www.google.com.lb www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.np www.google.com.ph www.google.com.pk www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zw www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gr www.google.hr www.google.hu www.google.ie www.google.iq www.google.is www.google.it www.google.je www.google.kz www.google.li www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.sc www.google.se www.google.si www.google.sk www.google.tg www.google.tn *.googletagmanager.com *.gstatic.com *.jquery.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src cdn.eye-able.com *.bootstrapcdn.com chimpstatic.com *.clerk.io *.datareporter.eu *.doubleclick.net *.googleadservices.com *.googleapis.com www.google.at www.google.be www.google.ch www.google.co.nz www.google.cz www.google.de www.google.fr www.google.hr www.google.hu www.google.lu www.google.rs www.google.ru www.google.sk *.google.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; base-uri www.kettner.com test.kettner.com 'self' 'unsafe-inline'; report-uri https://76318ee7-75b4-4009-9e9d-005a2eb38171.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; frame-ancestors 'self'; object-src 'none'; form-action 'self'; img-src 'self' data: blob: https:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self'; media-src 'self'; worker-src 'self' blob: 1
default-src https://www.oreilly.com/7EjQWM/weIx-q/j7Ge6t/AoPGthOs/I/fSp7hpu3iw/JjQXMCkYAQ/DW99a1/wzQmAd https://www.oreilly.com/7EjQWM/weIx-q/j7Ge6t/AoPGthOs/I/fSp7hpu3iw/JjQXMCkYAQ/DW99a1/wzQmAd  https://www.oreilly.com/7EjQWM/weIx-q/j7Ge6t/AoPGthOs/I/fup7hp6kDwG2GLuS/HwsSMCkYAQ/aT9Ram/cvTSM  https://www.oreilly.com  * 'unsafe-inline' 'unsafe-eval' data: blob: android-webview-video-poster: moz-extension: ms-browser-extension: chrome-extension: ios-log:; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubb898c25826db9d251f99fdcece943792&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service:wordpress-prod-cluster; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.facebook.com https://*.dpdconnect.nl *.multisafepay.com https://pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com https://firebasestorage.googleapis.com *.multisafepay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com https://*.dpdconnect.nl https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com *.multisafepay.com https://pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net *.multisafepay.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.google-analytics.com *.facebook.com *.facebook.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io *.multisafepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cloudflare.com *.google.com *.googletagmanager.com *.googleapis.com *.hsforms.net *.hubspot.com *.hs-scripts.com *.hs-analytics.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data: *.wp.com *.gravatar.com *.hubspot.com *.google-analytics.com *.googletagmanager.com; font-src 'self' fonts.gstatic.com; connect-src 'self' *.google-analytics.com *.googletagmanager.com *.hubspot.com *.hsforms.com; frame-src 'self' *.youtube.com *.youtu.be *.vimeo.com *.hubspot.com; frame-ancestors 'self' 1
default-src 'self'; connect-src 'self' consentcdn.cookiebot.com px.ads.linkedin.com api.leadinfo.com collector.leadinfo.net collector4.leadinfo.net https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com; frame-src 'self' consentcdn.cookiebot.com c.spotler.com player.springcast.app www.youtube.com www.googletagmanager.com player.hihaho.com; img-src 'self' data: *.google.com imgsct.cookiebot.com px.ads.linkedin.com collector.leadinfo.net www.meijburg.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com; object-src 'none'; script-src 'self' snap.licdn.com www.linkedin.com static.mailplus.nl consentcdn.cookiebot.com consent.cookiebot.com tagmanager.google.com www.googletagmanager.com www.google-analytics.com api.mapbox.com unpkg.com px.ads.linkedin.com cdn.leadinfo.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com 'nonce-3zb8exkktCkZ53qqzNeIew'; script-src-attr 'self' 'unsafe-inline'; style-src 'self' cdnjs.cloudflare.com https://cdnjs.cloudflare.com; style-src-attr 'self'; style-src-elem 'self' 'unsafe-inline' cdnjs.cloudflare.com https://cdnjs.cloudflare.com; base-uri 'self'; form-action 'self' www.meijburg.nl www.meijburg.com; frame-ancestors 'none'; report-uri https://swx4xmap.uriports.com/reports/report; report-to default 1
default-src 'self' ; script-src 'self' https://www.youtube.com https://www.google.com https://static.cloudflareinsights.com; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src  'self' data: ; frame-src 'self' https://www.youtube.com https://www.google.com; connect-src 'self'; form-action 'self' ; report-uri https://390dbc80d5d8728c05f6a082bf794586.report-uri.com/r/d/csp/reportOnly 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.commercers-solutions.de *.commercers-services.de https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.twitter.com *.commercers-solutions.de *.commercers-services.de 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.twitter.com *.commercers-solutions.de *.commercers-services.de js.mollie.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.commercers-solutions.de *.commercers-services.de https://info.dibs.se https://www.mollie.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cloudflare.com *.googletagmanager.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.commercers-solutions.de *.commercers-services.de https://*.dibspayment.eu js.mollie.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.commercers-solutions.de *.commercers-services.de https://*.dibspayment.eu https://fonts.googleapis.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.google-analytics.com *.cloudflare.com *.twitter.com *.twimg.com *.commercers-solutions.de *.commercers-services.de https://*.dibspayment.eu 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.bf-shop.de/; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com *.google.com *.fontawesome.com udraw-app.racadtech.com udraw-app-v6.racadtech.com udraw-staging.racadtech.com *.b-cdn.net https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.badb5refl.com *.doubleclick.net *.hellobar.com *.liadm.com *.hotjar.com idcband.com *.idcband.com *.intercomcdn.com data: www.idcband.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.searchserverapi.com *.hsforms.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.searchanise.com *.searchserverapi1.com *.twitter.com www.idcband.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.google.com self www.google.com *.stripe.com stripe.com *.link.com *.amazon.com www.idcband.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.google.com *.braintreegateway.com *.paypal.com google.com *.certcapture.com https://*.hubspot.com https://*.usemessages.com https://tracking.eu-central-1-0.sendcloud.sc udraw-app.racadtech.com udraw-app-v6.racadtech.com udraw-staging.racadtech.com *.gosendex.com *.b-cdn.net mailto: tel: *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com account.fetchify.com https://www.googletagmanager.com/ www.google.com www.gstatic.com apis.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.searchanise.com *.searchserverapi.com *.searchserverapi1.com *.twitter.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.trustpilot.com *.weltpixel.com *.badb5refl.com *.cookiebot.com *.doubleclick.net *.google.co.uk *.gstatic.com *.hellobar.com *.liadm.com *.hotjar.com idcband.com *.idcband.com *.sandbox.paypal.com https://js.playground.klarna.com data: *.sharethis.com *.vimeo.com *.paypalobjects.com *.kaptcha.com www.idcband.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.certcapture.com *.analytics.google.com *.bing.com blob: *.facebook.com *.google.co.uk *.google-analystics.com *.hsforms.com *.hubspot.com *.ads.linkedin.com https://*.hubspotusercontent.net https://*.hubspot.com udraw-app.racadtech.com udraw-app-v6.racadtech.com udraw-staging.racadtech.com *.b-cdn.net *.wikimedia.org *.trackedlink.net http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.googletagmanager.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.twitter.com *.twimg.com www.google.com www.google.ru www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com s3.amazonaws.com maps.googleapis.com *.amazonaws.com *.badb5refl.com *.callrail.com *.doubleclick.net *.google-analytics.com *.google.com *.googletagmanager.com *.hellobar.com *.liadm.com *.hotjar.com idcband.com *.idcband.com *.intercom.io *.intercomassets.com *.intercomcdn.com wss://nexus-websocket-a.intercom.io *.klarnacdn.net *.sandbox.paypal.com *.postcodeanywhere.co.uk *.trustpilot.com *.vimeo.com *.sharethis.com *.idcband.dev *.clarity.ms *.racadtech.com www.idcband.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.certcapture.com *.air360tracker.net *.bing.com js.braintreegateway.com *.callrail.com *.cloudflareinsights.com googleads.g.doubleclick.net idcband.com *.enzuzo.com *.facebook.com *.facebook.net *.googleadservices.com *.googletagmanager.com *.gstatic.com *.hellobar.com *.hotjar.com *.hsadspixel.net *.hsforms.net *.hscollectedforms.net *.hs-analytics.net *.hs-banner.com *.hs-scripts.com *.hubspot.com *.licdn.com https://*.osano.com searchanise-ef84.kxcdn.com *.searchserverapi.com *.stripe.com *.trackedlink.net *.trustpilot.com *.usemessages.com *.zoominfo.com https://js.hs-scripts.com https://js.usemessages.com udraw-app.racadtech.com udraw-app-v6.racadtech.com udraw-staging.racadtech.com *.gosendex.com cdnjs.cloudflare.com *.b-cdn.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com cc-cdn.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.googleapis.com *.avada.io *.shopify.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com s3.amazonaws.com ajax.aspnetcdn.com www.searchanise.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com *.searchanise.com api.amplitude.com *.twitter.com *.twimg.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com maps.googleapis.com https://cdn.ingest-lr.com https://cdn.lr-ingest.com https://cdn.lr-in-prod.com https://cdn.lr-in.com https://cdn.lr-ingest.io https://cdn.logrocket.io https://cdn.lrkt-in.com https://cdn.lrkt-in.com/LogRocket.min.js https://cdn.lrkt-in.com/logger-1.min.js pay.activa-card.com *.amplitude.com *.arcot.com *.badb5refl.com 3ds-secure.cardcomplete.com *.cardinalcommerce.com *.clarity.ms *.cloudflare.com *.cookiebot.com data: *.demdex.net cdn.dnky.co *.dotdigital.com *.doubleclick.net *.fetchify.com *.githubusercontent.com *.google.co.uk *.google-analytics.com *.gstatic.com/recaptcha *.idcband.com *.intercom.io *.intercomcdn.com *.ip-api.com *.jquery.com *.liadm.com *.lijit.com *.lloydstsb.com *.monzo.com *.paypalobjects.com idand11112.pcapredict.com *.postcodeanywhere.co.uk *.racadtech.com rsa3dsauth.com www.securesuite.co.uk *.sharethis.com acs.sia.eu *.touchtechpayments.com *.wirecard.com *.wlp-acs.com *.ytimg.com www.idcband.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com *.google.co.uk *.fontawesome.com udraw-app.racadtech.com udraw-app-v6.racadtech.com udraw-staging.racadtech.com *.b-cdn.net *.vultrcdn.com webchat.dotdigital.com webchat.staging.dotdigital.com cc-cdn.com *.googleapis.com *.google.com *.gstatic.com https://fonts.bunny.net assets.braintreegateway.com www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com searchanise-ef84.kxcdn.com s3.amazonaws.com *.twitter.com ton.twimg.com *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com *.badb5refl.com *.callrail.com *.doubleclick.net *.google-analystics.com *.google-analytics.com *.googletagmanager.com *.hellobar.com *.liadm.com *.hotjar.com idcband.com *.idcband.com *.intercom.io *.intercomassets.com *.intercomcdn.com wss://nexus-websocket-a.intercom.io *.klarnacdn.net *.paypal.com *.sandbox.paypal.com *.postcodeanywhere.co.uk https://searchserverapi.com data: *.vimeo.com *.sharethis.com www.idcband.com 'self' 'unsafe-inline'; object-src *.trustpilot.com 'self' 'unsafe-inline'; media-src *.adobe.com *.google.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.badb5refl.com *.doubleclick.net *.hellobar.com *.liadm.com *.hotjar.com idcband.com *.idcband.com *.intercomcdn.com *.youtube-nocookie.com *.vimeo.com *.sharethis.com www.idcband.com 'self' 'unsafe-inline'; manifest-src *.google.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net *.vimeo.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.magento.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.certcapture.com *.air360tracker.net *.air360.io *.bing.com *.doubleclick.net *.enzuzo.com *.google.co.uk *.googleadservices.com *.googlesyndication.com *.hotjar.com *.hotjar.io region1.google-analytics.com *.hsforms.com *.hscollectedforms.net *.hubapi.com *.hubspot.com idcband.com *.idcgo.es *.idcgo.fr *.ads.linkedin.com https://*.osano.com *.merchant-center-analytics.goog *.searchserverapi1.com *.ip-api.com *.trustpilot.com *.zoominfo.com https://api.usemessages.com https://*.hubspot.com udraw-app.racadtech.com udraw-app-v6.racadtech.com udraw-staging.racadtech.com pricematrix.racadtech.com *.b-cdn.net *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com api.amplitude.com stats.g.doubleclick.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com places.googleapis.com *.badb5refl.com *.callrail.com *.cookiebot.com *.google-analytics.com *.google-analystics.com *.hellobar.com *.liadm.com *.idcband.com *.intercom.io *.intercomcdn.com wss://nexus-websocket-a.intercom.io *.sandbox.paypal.com *.postcodeanywhere.co.uk *.sharethis.com *.clarity.ms https://*.logrocket.io https://*.lr-ingest.io https://*.logrocket.com https://*.lr-in.com https://*.lr-in-prod.com https://*.lr-ingest.com https://*.ingest-lr.com https://r.lrkt-in.com www.idcband.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com www.idcband.com http: https: blob: 'self' 'unsafe-inline'; default-src udraw-app.racadtech.com udraw-app-v6.racadtech.com udraw-staging.racadtech.com *.b-cdn.net www.idcband.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://apis.google.com https://yastatic.net https://mc.yandex.ru; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://mc.yandex.ru https://metrika.yandex.ru; frame-src 'self' https://apis.google.com https://yastatic.net; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self'; script-src 'self' https://challenges.cloudflare.com; frame-src https://challenges.cloudflare.com; img-src 'self' data: https:; style-src 'self' 'unsafe-inline'; connect-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-K0_xF_3CSuXLdJRpy79MQQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klarnacdn.net maxcdn.bootstrapcdn.com *.stripe.com klarna.com *.klarna.com *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.klarna.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.sendcloud.sc *.jsdelivr.net *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.trustpilot.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.klarna.com *.klarnaevt.com *.klarnacdn.net *.google.com *.googleadservices.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.amazonaws.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ widget.freshworks.com m2epro.freshdesk.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.sendcloud.sc *.jsdelivr.net *.stripe.com klarna.com *.klarnaevt.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.klarnacdn.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.sendcloud.sc *.jsdelivr.net *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com widget.freshworks.com m2epro.freshdesk.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.googletagmanager.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.stripe.com klarna.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.google-analytics.com https://*.klaviyo.com https://*.datadome.co https://connect.facebook.net https://*.facebook.net https://www.redditstatic.com https://j.northbeam.io https://bzrcdn.openai.com https://va.vercel-scripts.com https://cdn.shopify.com https://challenges.cloudflare.com https://maps.googleapis.com https://maps.gstatic.com https://eu.i.posthog.com https://eu-assets.i.posthog.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.shopify.com https://*.klaviyo.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://cdn.shopify.com https://*.klaviyo.com; connect-src 'self' https://api.organised.co https://api.organised.dev https://routing.organised.co https://*.klaviyo.com https://api-js.datadome.co https://*.datadome.co https://geo.captcha-delivery.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.facebook.com https://*.facebook.net https://www.googletagmanager.com https://*.reddit.com https://j.northbeam.io https://bzrcdn.openai.com https://bzr.openai.com https://va.vercel-scripts.com https://cdn.shopify.com https://*.myshopify.com https://maps.googleapis.com https://api.mapbox.com https://events.mapbox.com https://eu.i.posthog.com https://eu-assets.i.posthog.com; frame-src 'self' https://challenges.cloudflare.com https://geo.captcha-delivery.com https://www.googletagmanager.com https://www.youtube-nocookie.com https://www.youtube.com https://*.facebook.com https://cdn.shopify.com; media-src 'self' data: blob: https://cdn.shopify.com https://*.cdninstagram.com https://*.fbcdn.net; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://*.organised.co https://*.myshopify.com; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-fZihxpk3UgViFkFYgGLpvg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.googleapis.com https://fonts.gstatic.com https://cdnjs.cloudflare.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.cepd.tech *.dozapotek.se static.lipscore.com maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.googletagmanager.com *.kustom.co *.dozapotek.se *.klarna.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com https://cdn.cookiesaur.com https://www.fass.se https://cert.tryggehandel.net *.google.se *.google.com *.google.pl *.cepd.tech *.dozapotek.se *.kustom.co *.klarna.com *.klarnaevt.com *.klarnacdn.net static.lipscore.com blob: img.youtube.com *.googletagmanager.com *.google-analytics.com www.googletagmanager.com ssl.gstatic.com www.gstatic.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com https://static.lipscore.com https://cert.tryggehandel.net https://tryggehandel.net https://cdn.cookiesaur.com https://app.cookiesaur.com https://static.redeal.se https://connect.facebook.net https://www.googletagmanager.com *.kustom.co *.funktionstjanster.se *.klarnacdn.net *.google.se *.cepd.tech *.dozapotek.se *.klarna.com x.klarnacdn.net static.lipscore.com *.googletagmanager.com tagmanager.google.com *.posthog.com *.klarnaservices.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com https://static.lipscore.com https://cdnjs.cloudflare.com *.klarnacdn.net *.google.se *.google.com *.cepd.tech *.dozapotek.se static.lipscore.com tagmanager.google.com fonts.google.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src *.cepd.tech *.dozapotek.se 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://cdn.cookiesaur.com https://app.cookiesaur.com https://cert.tryggehandel.net *.kustom.co *.doubleclick.net *.googlesyndication.com *.cepd.tech *.dozapotek.se *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net wapi.lipscore.com users.lipscore.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.posthog.com *.klarnaservices.com *.klarna.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' 'unsafe-inline' upload.bazar.at asset.bazar.at static.kurier.at *.googletagservices.com *.googletagmanager.com *.googlesyndication.com *.google-analytics.com *.googleapis.com *.gstatic.com *.google.com *.google.at *.google.de *.google.sk *.privacy-center.org *.hotjar.com *.doubleclick.net *.openstreetmap.fr *.addthis.com cdn.ampproject.org; connect-src 'self' upload.bazar.at asset.bazar.at static.kurier.at *.googletagservices.com *.googletagmanager.com *.googlesyndication.com *.google-analytics.com *.googleapis.com *.gstatic.com *.google.com *.google.at *.google.de *.google.sk *.privacy-center.org *.hotjar.com *.doubleclick.net *.openstreetmap.fr *.addthis.com cdn.ampproject.org; base-uri 'self'; form-action 'self'; img-src 'self' data: upload.bazar.at asset.bazar.at static.kurier.at *.googletagservices.com *.googletagmanager.com *.googlesyndication.com *.google-analytics.com *.googleapis.com *.gstatic.com *.google.com *.google.at *.google.de *.google.sk *.privacy-center.org *.hotjar.com *.doubleclick.net *.openstreetmap.fr *.addthis.com cdn.ampproject.org; script-src 'self' 'unsafe-inline' upload.bazar.at asset.bazar.at static.kurier.at *.googletagservices.com *.googletagmanager.com *.googlesyndication.com *.google-analytics.com *.googleapis.com *.gstatic.com *.google.com *.google.at *.google.de *.google.sk *.privacy-center.org *.hotjar.com *.doubleclick.net *.openstreetmap.fr *.addthis.com cdn.ampproject.org; 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data: blob:; object-src 'none'; script-src 'self' 'nonce-'; style-src 'self' https: 'unsafe-inline'; connect-src 'self' https: *.bugsnag.com; report-uri /csp-violation-report-endpoint 1
object-src 'none';base-uri 'self';script-src 'nonce-Up1QBsRqVkJ2voI1wZ7LYQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src *.bazaarvoice.com *.doubleclick.net *.gstatic.com *.hs-scripts.com *.bazaarvoice.com *.doubleclick.net *.gstatic.com *.hs-scripts.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com *.noibu.com *.noibu.com *.authorize.net *.bazaarvoice.com *.bing.com *.clarity.ms *.cloudflare.com *.compliancesigns.com *.doubleclick.net *.facebook.net *.googleadservices.com *.google-analytics.com *.googleapis.com *.google.com *.googlecommerce.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hsadspixel.net *.hs-analytics.net *.hs-banner.com *.hscollectedforms.net *.hsforms.net *.hs-scripts.com *.hubspot.com *.licdn.com *.noibu.com *.payments-amazon.com *.searchspring.io *.searchspring.net *.shopperapproved.com *.tctm.co *.trustpilot.com *.turnto.com *.usemessages.com *.userway.org *.youtube.com *.authorize.net *.bazaarvoice.com *.bing.com *.clarity.ms *.cloudflare.com *.compliancesigns.com *.doubleclick.net *.facebook.net *.googleadservices.com *.google-analytics.com *.googleapis.com *.google.com *.googlecommerce.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hsadspixel.net *.hs-analytics.net *.hs-banner.com *.hscollectedforms.net *.hsforms.net *.hs-scripts.com *.hubspot.com *.licdn.com *.noibu.com *.payments-amazon.com *.searchspring.io *.searchspring.net *.shopperapproved.com *.tctm.co *.trustpilot.com *.turnto.com *.usemessages.com *.userway.org *.youtube.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.visualwebsiteoptimizer.com app.vwo.com *.cloudflare.com *.compliancesigns.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.media-amazon.com *.turnto.com *.userway.org *.cloudflare.com *.compliancesigns.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.media-amazon.com *.turnto.com *.userway.org 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src *.compliancesigns.com compliancesigns.com *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io jsgibuild.com *.amazon.com *.bazaarvoice.com *.bing.com *.clarity.ms *.cloudflare.com *.doubleclick.net *.facebook.com *.facebook.net *.googleadservices.com *.google-analytics.com *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.as www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.nr www.google.nu www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu www.google.ws google.com *.google.com *.googletagmanager.com *.gstatic.com *.hscollectedforms.net *.hsforms.com *.hs-sites.com *.hubspot.com *.linkedin.com *.media-amazon.com *.payments-amazon.com *.searchspring.io *.searchspring.net *.shopperapproved.com *.turnto.com *.userway.org *.amazon.com *.bazaarvoice.com *.bing.com *.clarity.ms *.cloudflare.com *.doubleclick.net *.facebook.com *.facebook.net *.googleadservices.com *.google-analytics.com *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.as www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.nr www.google.nu www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu www.google.ws google.com *.google.com *.googletagmanager.com *.gstatic.com *.hscollectedforms.net *.hsforms.com *.hs-sites.com *.hubspot.com *.linkedin.com *.media-amazon.com *.payments-amazon.com *.searchspring.io *.searchspring.net *.shopperapproved.com *.turnto.com *.userway.org 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; connect-src *.visualwebsiteoptimizer.com app.vwo.com *.noibu.com *.noibu.com *.amazon.com *.authorize.net *.bazaarvoice.com *.bing.com *.clarity.ms *.cloudflare.com *.compliancesigns.com *.doubleclick.net *.facebook.com *.facebook.net *.googleadservices.com *.google-analytics.com *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.as www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.cn www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.nl www.google.no www.google.nr www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sn www.google.so www.google.sr www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu www.google.ws *.google.com google.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.hs-banner.com *.hscollectedforms.net *.hsforms.com *.hsforms.net *.hs-scripts.com *.hubapi.com *.hubspot.com *.licdn.com *.linkedin.com *.noibu.com *.payments-amazon.com *.searchspring.io *.searchspring.net *.turnto.com *.userway.org *.amazon.com *.authorize.net *.bazaarvoice.com *.bing.com *.clarity.ms *.cloudflare.com *.compliancesigns.com *.doubleclick.net *.facebook.com *.facebook.net *.googleadservices.com *.google-analytics.com *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.as www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.cn www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.nl www.google.no www.google.nr www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sn www.google.so www.google.sr www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu www.google.ws *.google.com google.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.hs-banner.com *.hscollectedforms.net *.hsforms.com *.hsforms.net *.hs-scripts.com *.hubapi.com *.hubspot.com *.licdn.com *.linkedin.com *.noibu.com *.payments-amazon.com *.searchspring.io *.searchspring.net *.turnto.com *.userway.org 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; font-src *.authorize.net *.bazaarvoice.com *.cloudflare.com *.compliancesigns.com *.googleapis.com *.gstatic.com *.hotjar.com *.userway.org *.authorize.net *.bazaarvoice.com *.cloudflare.com *.compliancesigns.com *.googleapis.com *.gstatic.com *.hotjar.com *.userway.org 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src self 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; media-src *.bing.com *.gstatic.com *.userway.org *.youtube.com *.bing.com *.gstatic.com *.userway.org *.youtube.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; frame-src *.authorize.net *.visualwebsiteoptimizer.com app.vwo.com *.authorize.net *.bing.com *.cloudflare.com *.doubleclick.net *.facebook.com *.google.com google.com *.googletagmanager.com *.hotjar.com *.hsforms.com *.hsforms.net *.hs-sites.com *.hubspot.com *.linkedin.com *.trustpilot.com *.userway.org userway.org *.youtube.com *.authorize.net *.bing.com *.cloudflare.com *.doubleclick.net *.facebook.com *.google.com google.com *.googletagmanager.com *.hotjar.com *.hsforms.com *.hsforms.net *.hs-sites.com *.hubspot.com *.linkedin.com *.trustpilot.com *.userway.org userway.org *.youtube.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes';report-uri https://9d5bcf97-219a-452a-a7ad-f99e63b52def.sansec.watch/ 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.avis-verifies.com https://api.systempay.fr/static/ *.fontawesome.com https://fonts.bunny.net https://cdnjs.cloudflare.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.google.com *.facebook.com *.facebook.net https://paiement.systempay.fr/vads-payment/ https://api.systempay.fr/api-payment/ https://api.systempay.fr/static/ *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.googlesyndication.com storage.googleapis.com *.facebook.com *.facebook.net *.avis-verifies.com api.systempay.fr sibautomation.com https://paiement.systempay.fr/vads-payment/ https://api.systempay.fr/static/ connect.facebook.net *.disqus.com disqus.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.google.com *.googleapis.com *.google.fr pagead2.googlesyndication.com media.physiotherapie.com *.facebook.com *.facebook.net axeptio.imgix.net *.avis-verifies.com https://paiement.systempay.fr/static/latest/images/type-carte/ https://api.systempay.fr/static/ https://paiement.systempay.fr/vads-payment/ connect.facebook.net *.fbcdn.net *.disqus.com *.disquscdn.com https://firebasestorage.googleapis.com https://www.google.fr https://api.mapbox.com *.tile.openstreetmap.org https://maps.googleapis.com https://maps.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: *.taggrs.io data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com sibautomation.com *.g.doubleclick.net pagead2.googlesyndication.com connect.facebook.net *.facebook.com *.axept.io *.avis-verifies.com api.systempay.fr *.brevo.com cdn.jsdelivr.net eu.posthog.com https://api.systempay.fr/api-payment/ https://api.systempay.fr/static/ *.disqus.com *.disquscdn.com *.avada.io *.shopify.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ https://cdnjs.cloudflare.com https://maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.taggrs.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com fonts.gstatic.com www.googletagmanager.com *.avis-verifies.com api.systempay.fr cdn.jsdelivr.net https://api.systempay.fr/static/ *.fontawesome.com *.disquscdn.com https://fonts.bunny.net https://fonts.googleapis.com https://cdnjs.cloudflare.com assets.braintreegateway.com *.googleapis.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com media.physiotherapie.com googleads.g.doubleclick.net storage.googleapis.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io www.google.fr *.analytics.google.com *.googlesyndication.com *.googleapis.com adservice.google.com *.doubleclick.net www.google.com *.facebook.net *.facebook.com *.axept.io *.avis-verifies.com *.netreviews.eu in-automate.sendinblue.com *.skeepers.io cdn.jsdelivr.net *.posthog.com eu.posthog.com eu.i.posthog.com https://paiement.systempay.fr/vads-payment/ https://api.systempay.fr/api-payment/ connect.facebook.net *.disqus.com disqus.com *.disquscdn.com https://get.geojs.io *.avada.io https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ https://nominatim.openstreetmap.org https://maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src https://paiement.systempay.fr/vads-payment/ https://api.systempay.fr/api-payment/ https://api.systempay.fr/static/ *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; font-src 'self' data: https://fonts.gstatic.com https://*.gpwebpay.com; form-action 'self' https://www.facebook.com; frame-ancestors 'self'; img-src 'self' data: blob: https:; object-src 'none'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://www.youtube.com https://www.gstatic.com; script-src 'nonce-P115E00e5cKCyoVaTP1WQedV' 'strict-dynamic' https:; default-src 'self'; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://o504096.ingest.us.sentry.io https://*.pusher.com wss://*.pusher.com https://connect.facebook.net https://www.facebook.com https://*.clarity.ms https://*.mux.com https://*.r2.cloudflarestorage.com https://*.litix.io https://*.doubleclick.net https://*.google.com https://*.google.cz https://*.google.sk https://*.google.de https://*.google.ch https://*.google.co.uk https://*.google.at https://*.google.it https://*.google.fr https://*.google.pl https://*.google.mk https://*.google.nl https://*.google.com.mx https://www.googleadservices.com https://www.gstatic.com https://www.youtube.com https://jnn-pa.googleapis.com https://storage.googleapis.com https://pagead2.googlesyndication.com https://pickey-prod.fra1.digitaloceanspaces.com https://lux.speedcurve.com https://beacon.speedcurve.com https://*.cookie-script.com https://api.forendors.cz https://assets.forendors.cz; media-src 'self' blob: data: https://*.mux.com https://api.forendors.cz https://assets.forendors.cz; frame-src 'self' https://challenges.cloudflare.com https://accounts.google.com https://appleid.apple.com https://www.facebook.com https://calendar.google.com https://www.youtube.com https://www.youtube-nocookie.com https://www.instagram.com https://player.vimeo.com https://platform.twitter.com https://airtable.com https://gw.gopay.com https://gate.gopay.com https://pay.google.com https://secure.checkout.visa.com https://src.mastercard.com https://*.gpwebpay.com https://www.googletagmanager.com; worker-src 'self' blob:; child-src 'self' blob:;; report-uri https://o504096.ingest.us.sentry.io/api/5772164/security/?sentry_key=12463de238b24ff5a9db0b820939feac&sentry_environment=production; report-to csp-endpoint 1
img-src data: https://*.vimeocdn.com https://i.vimeocdn.com https://pagead2.googlesyndication.com https://www.google.nl/ https://www.googletagmanager.com/ 'self';connect-src https://*.algolia.com/ https://*.algolia.net/ https://*.vimeo.com https://ad.doubleclick.net/ https://consent.cookiebot.com https://consentcdn.cookiebot.com/ https://pagead2.googlesyndication.com https://region1.google-analytics.com https://www.google.com/ 'self';media-src https://*.vimeocdn.com https://download-video-ak.vimeocdn.com https://player.vimeo.com 'self';script-src-elem https://consent.cookiebot.com https://consentcdn.cookiebot.com/ https://www.google.com/ https://www.googletagmanager.com/ https://www.gstatic.com/ 'self' 'unsafe-inline';frame-src https://consent.cookiebot.com https://consentcdn.cookiebot.com/ https://player.vimeo.com https://www.google.com/ 'self';frame-ancestors https://www.google.com/;style-src 'self' 'unsafe-inline';default-src 'self';manifest-src 'self';font-src 'self';script-src 'self';base-uri 'self';upgrade-insecure-requests 1
default-src 'self'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; img-src 'self' data: blob: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https:; frame-src 'self' https: 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.redditstatic.com www.gstatic.com www.google.com *.klaviyo.com *.shopify.com cdn.attn.tv connect.facebook.net *.google-analytics.com *.googletagmanager.com www.googleadservices.com; style-src 'self' 'unsafe-inline' cdn.shopify.com www.gstatic.com; object-src 'none'; base-uri 'self'; connect-src 'self' pixel-config.reddit.com www.googletagmanager.com www.redditstatic.com *.klaviyo.com *.analytics.google.com analytics.google.com www.google-analytics.com www.googleadservices.com adservice.google.com www.google.com *.googleapis.com *.doubleclick.net *.instagram.com *.shopify.com images.prismic.io events.attentivemobile.com rogallery.attn.tv rogallery-us.attn.tv; font-src 'self' data: rogallery.cdn.prismic.io fonts.gstatic.com cdn.shopify.com static.klaviyo.com; frame-src 'self' td.doubleclick.net submit.jotform.com form.jotform.com creatives.attn.tv www.facebook.com www.googletagmanager.com; img-src 'self' data: blob: alb.reddit.com fonts.gstatic.com cdn.shopify.com events.attentivemobile.com prismic-io.s3.amazonaws.com images.prismic.io www.facebook.com *.google-analytics.com *.g.doubleclick.net *.googletagmanager.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat; manifest-src 'self'; media-src 'self'; worker-src 'self' blob: ; report-uri https://csp.hullforge.com/d64a3; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://va.vercel-scripts.com https://accounts.google.com https://vercel.live https://connect.facebook.net https://bzrcdn.openai.com https://cdn.tolt.io https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://vercel.live https://accounts.google.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' https://vivideocdn.com https://images.unsplash.com https://img.youtube.com https://www.facebook.com https://www.google.com https://googleads.g.doubleclick.net https://www.googletagmanager.com data: blob:; connect-src 'self' https://api.vivideo.ai https://va.vercel-scripts.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.google.com https://googleads.g.doubleclick.net https://connect.facebook.net https://www.facebook.com https://sr-client-cfg.amplitude.com https://api2.amplitude.com https://*.ecs.us-east-1.on.aws https://bzr.openai.com https://bzrcdn.openai.com https://accounts.google.com https://vercel.live wss://ws-us3.pusher.com; worker-src 'self' blob:; child-src blob:; frame-src https://accounts.google.com https://vercel.live https://td.doubleclick.net https://www.googletagmanager.com https://ad.doubleclick.net; media-src 'self' https://vivideocdn.com blob: 1
object-src 'none'; script-src 'self' 'report-sample' js.adsrvr.org connect.facebook.net js-agent.newrelic.com app.pendo.io cdn.pendo.io c.amazon-adsystem.com data.pendo.io pendo-static-5713592751095808.storage.googleapis.com apps.cac1.pure.cloud tarion.breezy.hr www.googletagmanager.com www.google-analytics.com googleads.g.doubleclick.net https://www.gstatic.com/recaptcha/ https://cdn.jsdelivr.net/npm cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com 'nonce-S8q_s7G5P92-XIh8nZ6OTQ'; script-src-elem 'self' 'report-sample' js.adsrvr.org connect.facebook.net js-agent.newrelic.com app.pendo.io cdn.pendo.io c.amazon-adsystem.com data.pendo.io pendo-static-5713592751095808.storage.googleapis.com apps.cac1.pure.cloud tarion.breezy.hr www.googletagmanager.com www.google-analytics.com googleads.g.doubleclick.net https://www.gstatic.com/recaptcha/ https://cdn.jsdelivr.net/npm cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com 'nonce-S8q_s7G5P92-XIh8nZ6OTQ'; style-src 'self' fonts.googleapis.com www.googletagmanager.com cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; base-uri 'self'; frame-ancestors 'self'; report-uri https://app.csplog.com/api/v1/report/tarion-com 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' 1003891.track.convertexperiments.com app.hubspot.com cdn-3.convertexperiments.com cdn-4.convertexperiments.com *.metrics.convertexperiments.com *.signals.convertexperiments.com logs.convertexperiments.com *.convertexperiments.com cdn.pdst.fm connect.facebook.net js.hs-analytics.net js.hs-banner.com js.hsforms.net js.hsleadflows.net js.hubspotfeedback.com js.usemessages.com organizer.bizzabo.com play.vidyard.com script.hotjar.com snap.licdn.com static.hotjar.com static.hsappstatic.net www.google-analytics.com www.googletagmanager.com www.recaptcha.net code.highcharts.com www.youtube.com js.hubspot.com www.dropbox.com widget.altrulabs.com www.google.com maps.googleapis.com wt-assets.hubteam.com cdn2.hubspot.net www.redditstatic.com cdn.veritonic.com gosniply.com d.impactradius-event.com js.hubspot.com 50339659.hs-sites.com analytics.tiktok.com api.s10h.io sgtm-amer.hubspot.com js.hsadspixel.net cdn.intellimize.co static.cloudflareinsights.com ob.greencolumnart.com tags.pw.adn.cloud cdn.jsdelivr.net js.storylane.io 'strict-dynamic' 'nonce-IAlINZ6FgI+X+CMo6Nu5zA=='; report-uri https://send.hsbrowserreports.com/csp/report 1
default-src 'self'; font-src 'self' https://fonts.gstatic.com; img-src 'self' https://*.googleapis.com https://*.gstatic.com *.google.com  *.googleusercontent.com data: https://www.gravatar.com/avatar/ https://*.google-analytics.com https://*.googletagmanager.com blob:; script-src 'self' https://*.googletagmanager.com 'nonce-c7c64eec6c4062bbc3c54863109b149d' https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com blob:; style-src 'self' 'nonce-c7c64eec6c4062bbc3c54863109b149d' https://fonts.googleapis.com; worker-src 'self' blob:; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googleapis.com *.google.com https://*.gstatic.com  data: blob:; frame-ancestors 'self'; 1
default-src 'self'; img-src 'self' data: https://www.datocms-assets.com https://image.mux.com https://www.googletagmanager.com https://*.googlesyndication.com https://*.usercentrics.eu https://app.usercentrics.eu https://*.myshopify.com https://cdn.shopify.com; script-src 'self' https://www.googletagmanager.com https://web.cmp.usercentrics.eu http://privacy-proxy.usercentrics.eu 'unsafe-inline' https://*.usercentrics.eu https://app.usercentrics.eu https://www.google.com https://app.cituro.com https://wtb-tag.mikmak.ai https://www.gstatic.com; style-src 'self' 'unsafe-inline'; font-src 'self' https: data:; connect-src 'self' https://www.googletagmanager.com https://stream.mux.com http://privacy-proxy.usercentrics.eu https://privacy-proxy.usercentrics.eu https://v1.api.service.cmp.usercentrics.eu https://*.usercentrics.eu https://app.usercentrics.eu https://app.cituro.com https://www.google.com https://www.google.com/* https://ricolagroupag--devservice.sandbox.my.salesforce.com https://*.mux.com https://*.myshopify.com https://*.googlesyndication.com; frame-src https://www.googletagmanager.com https://web.cmp.usercentrics.eu https://*.usercentrics.eu https://app.usercentrics.eu https://app.cituro.com https://www.google.com https://www.google.com/* https://*.myshopify.com; media-src 'self' blob: https://stream.mux.com https://*.mux.com https://*.usercentrics.eu https://app.usercentrics.eu https://*.myshopify.com; report-uri /.netlify/functions/csp-reporting-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-yjgTWIjKI3UyNJKoOR4DBA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
style-src-elem *.adobe.com fonts.googleapis.com *.yotpo.com *.googleapis.com *.googletagmanager.com *.stape.io maxcdn.bootstrapcdn.com assets.braintreegateway.com *.pricespider.com 'self' 'unsafe-inline'; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.yotpo.com *.googleapis.com *.stape.io maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.yotpo.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.yotpo.com maps.googleapis.com chart.googleapis.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.stape.io c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://plumrocket.com landofcoder.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net maps.gstatic.com *.yotpo.com magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com *.stape.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.usablenet.com https://mcloud.suncast.com https://www.facebook.com https://www.suncast.com blob: cdn.pricespider.com embeddedcloud.pricespider.com wwwassets.pricespider.com *.udev1a.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com maps.googleapis.com *.yotpo.com chart.googleapis.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.stape.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com landofcoder.com *.pricespider.com https://vc.hotjar.io https://www.facebook.com api.mapbox.com events.mapbox.com wtbevents.pricespider.com wss://wtbstream.pricespider.com *.udev1a.net https://omni.pricespider.com https://wtbevents.pricespider.com static.hotjar.com script.hotjar.com connect.facebook.net api.tiles.mapbox.com *.usablenet.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.yotpo.com *.googleapis.com *.googletagmanager.com *.stape.io maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src maps.googleapis.com chart.googleapis.com landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.yotpo.com maps.googleapis.com chart.googleapis.com *.google-analytics.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog *.stape.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com landofcoder.com https://ekr.zdassets.com https://suncast.zendesk.com https://vc.hotjar.io https://www.facebook.com api.mapbox.com events.mapbox.com wtbevents.pricespider.com wss://wtbstream.pricespider.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.pricespider.com *.udev1a.net *.usablenet.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://suncast.com/csp-report; report-to report-endpoint; 1
default-src 'self'; script-src 'self' https: 'unsafe-inline' 'report-sample'; style-src  'self' https: 'unsafe-inline' 'report-sample'; img-src    'self' https: data: blob:; font-src   'self' https: data:; connect-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none'; upgrade-insecure-requests 1
default-src  'self'  'unsafe-inline'  'unsafe-eval'  https://www.google-analytics.com  https://www.googletagmanager.com  https://connect.facebook.net;                                             img-src  'self'  https://dv3tko0boseyz.cloudfront.net  https://video.visumo.jp  https://www.visumo.jp  https://assets.sprocket.bz  https://image.visumo.io  https://wwwetvoscom.ecbeing.biz  https://cdn.jsdelivr.net  https://www.google.co.jp  https://www.google.com  https://analytics.tiktok.com  https://analytics.twitter.com  https://nova.collect.igodigital.com  https://pixel-service.awoo.org  https://px.ladsp.jp  https://t.co  https://ws.mediatalk.io  https://www.facebook.com  https://www.googletagmanager.com  https://b99.yahoo.co.jp  https://m.media-amazon.com  https://meas.hera.d2c.ne.jp  https://ad.as.amanad.adtdp.com  https://ade.clmbtech.com  https://a-mpd.com  https://atb.im-apps.net  https://atm.im-apps.net  https://b6.im-apps.net  https://c.bing.com  https://cm.g.doubleclick.net  https://criteo-sync.teads.tv  https://cs.media.net  https://eb2.3lift.com  https://gum.criteo.com  https://i.smartnews-ads.com  https://i6.smartnews-ads.com  https://ib.adnxs.com  https://idsync.rlcdn.com  https://pixel.rubiconproject.com  https://r.casalemedia.com  https://rtb-csync.smartadserver.com  https://*.pubmatic.com  https://sync.1rx.io  https://sync.outbrain.com  https://sync-t1.taboola.com  https://tg.socdm.com  https://tr.line.me  https://x.bidswitch.net  https://ad.doubleclick.net  https://*.googleapis.com  https://b.im-apps.net  https://cdnjs.cloudflare.com  https://client-side-metrics.jp2.as.criteo.net  https://connect.facebook.net  https://etvos.com  https://etvos.jp  https://fonts.gstatic.com  https://googleads.g.doubleclick.net  https://i.ytimg.com  https://inviewv6.ladsp.com  https://maps.gstatic.com  https://npstaticprod.ptengine.jp  https://promolayer-images.b-cdn.net  https://s3-ap-northeast-1.amazonaws.com  https://stats.g.doubleclick.net  https://stg.etvos.com  https://syndication.twitter.com  https://tr.outbrain.com  https://visumojp-www.s3-ap-northeast-1.amazonaws.com  https://www.google.ca  https://www.google.co.kr  https://www.google.com.sg  https://www.google.com.tw  https://www.google.mg  https://www.googleadservices.com  https://cm-12956.csolution.jp  https://notify.bugsnag.com  https://px.a8.net  https://www.google.co.in  https://www.google.co.th  https://www.google.co.uk  https://www.google.es  https://www.google.gr  https://www.google.ie  https://www.google.it  https://www.google.nl  https://www.google.com.co  https://www.google.co.za  https://www.rakuten.ne.jp  https://b98.yahoo.co.jp  https://click.s11.exacttarget.com  https://log-papago.naver.com  https://suhadaomoi.net  https://www.google.co.id  https://www.google.com.hk  https://www.google.com.my  https://www.google.se  https://dis.criteo.com  https://aa.agkn.com  https://sync.targeting.unrulymedia.com  https://s.yimg.jp  https://analytics-ipv6.tiktokw.us  https://tkx.csolution.jp  https://www.google.com.au  https://www.google.com.ph  https://www.google.com.tr  https://www.google.fr  https://www.google.com.mt  https://www.google.de  https://www.google.ch  https://www.google.com.sa   https://www.google.lv  https://www.google.ru  https://www.google.at  https://www.google.co.ug  https://www.google.com.vn  https://cs.adingo.jp  https://*.ggpht.com  *.googleusercontent.com  s-cs.send.microad.jp  https://public-prod-dspcookiematching.dmxleo.com  https://i1.ytimg.com  https://www.google.co.nz  https://www.google.com.eg  https://www.google.fi  data:;                                             font-src  'self'  https://fonts.gstatic.com  https://maxcdn.bootstrapcdn.com  https://use.typekit.net  https://assets.v2.sprocket.bz  https://cdn.jsdelivr.net  https://ws.mediatalk.io  https://cdnjs.cloudflare.com  https://dv3tko0boseyz.cloudfront.net  https://at.alicdn.com  https://cdn.scite.ai  data:;                                             media-src   'self'  https://ws.mediatalk.io  https://video.visumo.jp  https://etvos.com  https://fonts.ninja  blob:;                                             connect-src  'self'  https://etvos.com  https://api.v2.sprocket.bz  https://stats.ptengine.jp  https://assets.sprocket.bz  https://b.shutto-translation.com  https://contents.visumo.io  https://sprocket-ping.s3.amazonaws.com  https://autoline.link  https://dc.services.visualstudio.com  https://track.api.visumo.io  https://tracking.staff-start.com  https://video.visumo.io  https://www.visumo.jp  https://d341j04libduye.cloudfront.net  https://act.hera.d2c.ne.jp  https://pixel-service.awoo.org  https://*.google.com  https://a.promolayer.io  https://ad.doubleclick.net  https://analytics.google.com  https://analytics.tiktok.com  https://analytics-ipv6.tiktokw.us  https://audiencedata.im-apps.net  https://cloud.shop-etvos.com  https://js.api.nidan.d2c.ne.jp  https://secure1.adcent.jp  https://stats.g.doubleclick.net  https://tr.outbrain.com  https://ws.mediatalk.io  https://www.facebook.com  https://www.google.co.jp  https://www.google-analytics.com  https://www.googletagmanager.com  https://cdn.hera.d2c.ne.jp  https://payments.amazon.co.jp  https://payments-fe.amazon.com  https://amplify.outbrain.com  https://apm.yahoo.co.jp  https://b.im-apps.net  https://b6.im-apps.net  https://sync6.im-apps.net  https://ups.im-apps.net  https://api.awoo.org  https://cssc-cdn.contx.net  https://demo-1.conversionsapigateway.com   https://displayscdn.promolayer.io  https://dm.slim02.jp  https://geoip.peakdigital.cloud  https://googleads.g.doubleclick.net  https://log.sprocket.bz  https://*.googleapis.com  https://mpc-prod-15-s6uit34pua-uw.a.run.app  https://*.analytics.google.com   https://score.im-apps.net  https://tag.conel-revival.jp  https://www.contx.net  https://www.google.co.kr  https://www.google.com.tw  https://www.googleadservices.com  https://analytics.twitter.com  https://crrc.impact-ad.jp  https://exceptcollect.ptengine.com  https://m.media-amazon.com  https://region1.analytics.google.com  https://sslwidget.criteo.com  https://t.co  https://www.facebook.com  https://www.google.ca  https://ac.fanp.me  https://connect.facebook.net  https://promolayer-images.b-cdn.net  https://www.google.co.id  https://www.google.co.in  https://www.google.co.th  https://www.google.co.uk  https://www.google.com.hk  https://www.google.com.my  https://www.google.com.ph  https://www.google.com.qa  https://www.google.com.vn  https://www.google.com.mx  https://www.google.com.co  https://www.google.co.ug  https://www.google.se  https://www.google.nl  https://www.google.co.za  https://www.google.fr  https://www.google.es  https://www.google.it  https://www.google.mn  https://www.google.co.nz  https://graph.facebook.com  https://log.letro.jp  https://overbridgenet.com  https://www.google.com.mt  https://tag.ladsp.jp  https://www.google.com.au  https://www.google.com.sg  wss://*.mediatalk.io  wss://*.iesnare.com  wss://ws.sprocket.bz  https://cloud.shop-etevos.live  https://cloud.shop-ra-ulrikeklein.info  https://region1.google-analytics.com  http://*.ap-northeast-1.amazonaws.com  https://redirect.jp.zeals.ai  https://xbackend.ptengine.jp  https://ad.resultplus2.jp  https://insight.adsrvr.org  ;                                            frame-src  'self'  https://assets.v2.sprocket.bz  https://www.youtube.com  https://maps.google.com  https://www.facebook.com  https://www.google.com  https://*.fls.doubleclick.net  https://aax-fe.amazon-adsystem.com  https://gum.criteo.com  https://8941176.fls.doubleclick.net  https://9206877.fls.doubleclick.net  https://app.botchan.chat  https://bid.g.doubleclick.net  https://checkout-v2.paidy.com  https://platform.twitter.com  https://static.criteo.net  https://um.ladsp.com  https://web.facebook.com  https://gumi.criteo.com  https://suhadaomoi.net  https://www.googletagmanager.com  http://*.id.opendns.com  https://block.opendns.com  https://myaccount.google.com  https://s.amazon-adsystem.com  https://insight.adsrvr.org  ;                                            script-src  'self'  'unsafe-inline'  'unsafe-eval'  https://*.googleapis.com  https://assets.ext.sprocket.bz  https://assets.sprocket.bz  https://assets.v2.sprocket.bz  https://cdnjs.cloudflare.com  https://d.shutto-translation.com  https://event.lib.visumo.io  https://tagdelivery.visumo.io  https://*.ebis.ne.jp  https://*.googletagmanager.com  https://www.visumo.jp  https://www.youtube.com  https://autoline.link  https://connect.facebook.net  https://etvos-test.silveregg.net  https://js.ptengine.jp  https://static.staff-start.com  https://cdn.jsdelivr.net  https://code.jquery.com  https://ebis-ns.etvos.com  https://api.etm-service.com  https://googleads.g.doubleclick.net  https://analytics.tiktok.com  https://api.awoo.org  https://dmp.im-apps.net  https://etvos.silveregg.net  https://gntm.geeen.co.jp  https://letro.jp  https://px.ladsp.com  https://secure1.adcent.jp  https://static-fe.payments-amazon.com  https://statics.a8.net  https://tag.ez-cx.com  https://ws.mediatalk.io  https://www.google-analytics.com  https://api.letro.jp  https://p01.owned.letro.jp  https://s.yimg.jp  https://s.yjtag.jp  https://www.google.com  https://www.googleadservices.com  https://110005603.collect.igodigital.com  https://ac.fanp.me  https://amplify.outbrain.com  https://b99.yahoo.co.jp  https://cd.valis-cpx.jp  https://cdn.adnwif.smt.docomo.ne.jp  https://cdn.hera.d2c.ne.jp  https://cdn.smartnews-ads.com  https://d.adlpo.com  https://d.line-scdn.net  https://js.api.nidan.d2c.ne.jp  https://nidan.addlv.smt.docomo.ne.jp  https://*.criteo.com  https://static.ads-twitter.com  https://static.jp.zeals.ai  https://tk.csolution.jp  https://wave.outbrain.com  https://app2.blob.core.windows.net  https://apps.paidy.com  https://b92.yahoo.co.jp  https://botchan-scripts.botchan-apps.com  https://cdn.contx.net  https://cdn.credit.gmo-ab.com  https://modules.promolayer.io  https://mpsnare.iesnare.com  https://platform.twitter.com  https://pv.amanad.adtdp.com  https://static.mul-pay.jp  https://tag.conel-revival.jp  https://tags.tiqcdn.com  https://tgdfm.adtdp.com  https://tr.outbrain.com  https://www.contx.net  https://www.gstatic.com  https://www.lpomax.net  https://dv3tko0boseyz.cloudfront.net  https://b90.yahoo.co.jp  https://cd.ladsp.com  https://cm-12956.csolution.jp  https://meas.hera.d2c.ne.jp  https://measurement-tag.ailp.cyberagent.ai  https://p01.mul-pay.jp  https://tag.ladsp.com  https://api.botchan.chat  https://b98.yahoo.co.jp  https://infird.com  https://tag.ez-cx.com  https://apis.google.com  https://static.cloudflareinsights.com  https://*.ggpht.com  *.googleusercontent.com  https://*.amazonaws.com  https://3001.scriptcdn.net  https://ad.resultplus2.jp  https://js.adsrvr.org  https://tag.flvcdn.net  https://token.mul-pay.jp  ;                                             style-src  'self'  'unsafe-inline'  https://assets.sprocket.bz  https://fonts.googleapis.com  https://maxcdn.bootstrapcdn.com  https://p.typekit.net  https://use.typekit.net  https://www.visumo.jp  https://ajax.googleapis.com  https://cdn.jsdelivr.net  https://cdnjs.cloudflare.com  https://adblockers.opera-mini.net  https://app2.blob.core.windows.net  https://etvos.jp  https://dv3tko0boseyz.cloudfront.net  https://etvos.com;                                             worker-src  'self'  blob:;                                             report-to                                                 csp-endpoint; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.alicdn.com *.cdn-apple.com *.hotjar.com *.tql.com dokumfe7mps0i.cloudfront.net *.fontawesome.com https://fonts.bunny.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com https://chase.hostedpaymentservice.net https://chase-var.hostedpaymentservice.net *.kaptcha.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com app-sj39.marketo.com *.mktoweb.com *.avis-verifies.com *.tricorbraun.com *.facebook.com *.paypalobjects.com *.doubleclick.net *.issuu.com *.nomura.com *.opendns.com oc-cdn-ocprod.azureedge.net https://elements.sandbox.fortis.tech https://elements.fortis.tech *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com https://chase.hostedpaymentservice.net https://chase-var.hostedpaymentservice.net *.kaptcha.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.facebook.com *.facebook.net *.bing.com *.bing.net *.linkedin.com *.postcodeanywhere.co.uk *.google.com *.google.com.ua *.bidswitch.net *.rlcdn.com *.casalemedia.com *.openx.net *.outbrain.com *.pubmatic.com *.yahoo.com *.taboola.com *.3lift.com *.adnxs.com *.adroll.com *.rubiconproject.com *.addthis.com *.b-cdn.net *.clarity.ms *.googleapis.com *.googlesyndication.com *.ipredictive.com *.company-target.com https://cdn.cookielaw.org *.cookielaw.org *.bizible.com *.bizibly.com *.doubleclick.net *.contentsquare.net *.packagingoptionsdirect.com *.paradox.ai *.tql.com *.hellobar.com d3k81ch9hvuctc.cloudfront.net dokumfe7mps0i.cloudfront.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ services.postcodeanywhere.co.uk magefan.com cm.magefan.com https://firebasestorage.googleapis.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.app-sj39.marketo.com *.marketo.com *.marketo.net *.mktoweb.com *.cookie-script.com *.avis-verifies.com *.licdn.com *.gstatic.com *.tricorbraun.com *.postcodeanywhere.co.uk *.pcapredict.com *.facebook.net *.facebook.com *.bing.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.callrail.com gleam.io *.gleam.io *.zopim.com *.bizible.com *.hotjar.io *.hotjar.com *.adroll.com *.zdassets.com *.curator.io *.clarity.ms *.googleapis.com *.hellobar.com *.snapengage.com *.skeepers.io *.cardinalcommerce.com https://includestest.ccdc02.com https://googleads.g.doubleclick.net *.doubleclick.net *.paypal.com *.paypalobjects.com https://cdn.cookielaw.org *.cookielaw.org *.adobedtm.com *.contentsquare.net *.convertexperiments.com *.klaviyo.com *.zi-scripts.com *.zoominfo.com rum.hlx.page dokumfe7mps0i.cloudfront.net lottingem.com oc-cdn-ocprod.azureedge.net ocprodocprodnamgs.blob.core.windows.net unpkg.com https://developer.adobe.com https://magento.com https://js.sandbox.fortis.tech https://js.fortis.tech https://elements.sandbox.fortis.tech https://elements.fortis.tech https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.addressy.com *.avada.io *.shopify.com *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com https://chase.hostedpaymentservice.net https://chase-var.hostedpaymentservice.net *.kaptcha.com *.hsforms.net *.hsforms.com https://cdn-4.convertexperiments.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.marketo.com *.mktoweb.com *.postcodeanywhere.co.uk *.tricorbraun.com *.gleam.io *.curator.io *.googletagmanager.com *.klaviyo.com oc-cdn-ocprod.azureedge.net *.fontawesome.com https://static.klaviyo.com api.addressy.com https://fonts.bunny.net *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com *.b-cdn.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.mktoresp.com *.mktoutil.com *.oribi.io *.doubleclick.net *.callrail.com *.zdassets.com *.zendesk.com wss://*.zopim.com https://*.zopim.com *.adroll.com *.bing.com *.bing.net *.curator.io *.clarity.ms *.ip-api.com *.google.com.ua *.googlesyndication.com *.googleadservices.com *.postcodeanywhere.co.uk https://cdn.cookielaw.org https://px.ads.linkedin.com *.linkedin.com *.hotjar.io *.hotjar.com wss://*.hotjar.com *.onetrust.com *.facebook.com *.skeepers.io *.paradox.ai *.microsoft.com *.datadome.co *.klaviyo.com *.contentsquare.net *.convertexperiments.com *.zi-scripts.com *.zoominfo.com dokumfe7mps0i.cloudfront.net gadstat.com rum.hlx.page singleview.site statsdata.online https://developer.adobe.com https://elements.sandbox.fortis.tech https://elements.fortis.tech https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.addressy.com https://get.geojs.io *.avada.io *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com https://chase.hostedpaymentservice.net https://chase-var.hostedpaymentservice.net *.kaptcha.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://875ea867-a088-474b-83c3-048d760dbb40.sansec.watch/; report-to report-endpoint; 1
default-src 'none' ; manifest-src 'self' ; object-src 'none'; worker-src blob: ; media-src blob: house-fastly-signed-us-east-1-prod.brightcovecdn.com edge.api.brightcove.com manifest.prod.boltdns.net; style-src 'self' 'nonce-f1ac461872f2498b983896049a0b9678' use.fontawesome.com fonts.googleapis.com; img-src 'self' data:  www.googletagmanager.com pagead2.googlesyndication.com  googleads.g.doubleclick.net www.google.com www.google.be ad.doubleclick.net sstats.hellobank.be c.contentsquare.net bnpparibasfortis.com www.bnpparibasfortis.com sstats.bnpparibasfortis.be px.ads.linkedin.com alb.reddit.com cf-images.us-east-1.prod.boltdns.net metrics.brightcove.com udc-neb.kampyle.com bnpparibasfortis.sc.omtrdc.net bnpbebnppffactorwebdev.112.2o7.net cdn.cookielaw.org; font-src 'self' data: use.fontawesome.com fonts.gstatic.com; script-src 'self' 'nonce-f1ac461872f2498b983896049a0b9678' assets.adobedtm.com www.googletagmanager.com www.qahellobank.be tags.bkrtx.com cdnssl.clicktale.net secure-ds.serving-sys.com tags.bluekai.com cdnjs.cloudflare.com www.bkrtx.com udc-neb.kampyle.com bnpparibasfortis.sc.omtrdc.net www.clicktale.net www.serving-sys.com www.bnpparibas.com house-fastly-signed-us-east-1 prod.brightcovecdn.com edge.api.brightcove.com www.brightcove.com www.bnpparibasfortis.com resources.digital-cloud.medallia.eu players.brightcove.net vjs.zencdn.net www.facebook.com connect.facebook.net snap.licdn.com www.redditstatic.com addevent.com www.addevent.com cdn.addevent.com assets.adobedtm.com googleads.g.doubleclick.net www.youtube.com www.bnpparibasfortis.be easybanking.qabnpparibasfortis.be cdn.cookielaw.org ajax.googleapis.com t.contentsquare.net app.contentsquare.com; child-src 'self' www.bnpparibas.com www.bnpparibasfortis.com house-fastly-signed-us-east-1-prod.brightcovecdn.com www.twitter.com bcove.video 'self'; frame-src 'self' 9887012.fls.doubleclick.net players.brightcove.net player.vimeo.com  www.googletagmanager.com www.youtube.com googleads.g.doubleclick.net; connect-src 'self'  pagead2.googlesyndication.com sstats.hellobank.be www.googletagmanager.com www.hellobank.be ad.doubleclick.net google.com www.google.com www.google.be google.be bnpparibasfortis.tt.omtrdc.net dpm.demdex.net ajax.googleapis.com analytics-fe.digital-cloud.medallia.eu t.contentsquare.net connect.facebook.net k-aeu1.contentsquare.net q-aeu1.contentsquare.net c.contentsquare.net conversions-config.reddit.com www.googletagmanager.com www.redditstatic.com pixel-config.reddit.com px.ads.linkedin.com sstats.bnpparibasfortis.be www.youtube.com googleads.g.doubleclick.net dpm.demdex.net tools.api.bnpparibasfortis.be manifest.prod.boltdns.net house-fastly-signed-us-east-1-prod.brightcovecdn.com edge.api.brightcove.com cdn.cookielaw.org geolocation.onetrust.com bnp-privacy.my.onetrust.com udc-neb.kampyle.com resources.digital-cloud.medallia.eu  bnpparibasfortis.sc.omtrdc.net assets.adobedtm.com www.akamaihd.net  ad.doubleclick.net www.kampyle.com www.prod.boltdns.net www.medallia.eu www.brightcove.com www.clicktale.net www.demdex.net www.serving-sys.com www.bnpparibas.com www.googleapis.com www.bnpparibasfortis.com www.bnpparibasfortis.be www.contentsquare.net; frame-ancestors 'none'; form-action 'self'; report-to /report-violation-csp; 1
default-src 'self'; script-src 'self' https://www.googletagmanager.com 'sha256-MwO+otHtGeJOJJW6W1c2I8TtSGCgHuHOwIGZPmGiPLE=' 'sha256-6x/jZ4pdVAFFI/RMPY4/1yQikEUMLuKkOEJrTK9hKxw=' 'sha256-64tZwH2LqBj9MxJp5aCZyOHKJ+2AhtsNJX4FmNtswMs=' 'sha256-QUopWHxF+mMnxTBTOwmpNyx9RiXJMFnLEo8QtYEkG4Q=' 'sha256-w8upjScZQRdOAWKysHE64CUOvpZTgwXAQ4+7in4lH3g=' 'sha256-0QS6B3TxeUyFHCVxUvzyrLT7U2+FffOOD5S59mBw3ok='; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self'; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none' 1
frame-ancestors 'self' https://demo.docusign.net https://demo-d.docusign.net https://apps.docusign.com https://apps-d.docusign.com https://account-d.docusign.com https://account.docusign.com https://docusign.net https://staging.clarifycapital.com https://clarifycapital.com https://www.clarifycapital.com https://data.clarifycapital.com; frame-src 'self' https://api.frac.tl https://public.flourish.studio https://www.facebook.com https://www.googletagmanager.com https://apps.docusign.com https://apps-d.docusign.com https://sign.clarifycapital.com https://widget.trustpilot.com https://td.doubleclick.net https://calendly.com *.calendly.com *.frac.tl *.flourish.studio *.facebook.com *.googletagmanager.com *.docusign.com *.trustpilot.com *.doubleclick.net *.cloudflareinsights.com *.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.facebook.net *.bizconnectads.com *.docusign.net *.idocusign.net *.clarifycapital.com *.stape.biz *.leadcapture.io; script-src 'self' https://js.docusign.com https://js-d.docusign.com https://docucdn-a.akamaihd.net https://www.googletagmanager.com https://maps.googleapis.com https://googleads.g.doubleclick.net https://td.doubleclick.net ws://localhost:12387 https://www.googleadservices.com https://www.google.com https://www.google.com/ads https://plausible.clickolo.com https://cdn.plot.ly https://connect.facebook.net https://widget.trustpilot.com info.clarifycapital.com https://static.cloudflareinsights.com https://snap.licdn.com *.clarifycapital.com *.pardot.com *.frac.tl *.flourish.studio *.facebook.com *.googletagmanager.com *.docusign.com *.trustpilot.com *.doubleclick.net *.cloudflareinsights.com *.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.facebook.net *.bizconnectads.com *.docusign.net *.idocusign.net *.clarifycapital.com *.stape.biz *.leadcapture.io *.lc-images.com https://cdn.jsdelivr.net/npm/posthog-js@1.207.9/+esm https://assets.calendly.com https://calendly.com *.calendly.com blob: 'unsafe-inline' 'unsafe-eval'; img-src 'self' https://secure.gravatar.com https://www.facebook.com https://www.google-analytics.com data: https: 'unsafe-inline'; connect-src 'self' *.clarifycapital.com https://demo.docusign.net https://demo-d.docusign.net https://apps.docusign.com https://apps-d.docusign.com https://www.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://www.google.com https://stats.g.doubleclick.net https://px.ads.linkedin.com https://plausible.clickolo.com https://api.frac.tl https://maps.googleapis.com https://maps.gstatic.com https://www.facebook.com https://capi.bizconnectads.com https://capig.stape.biz *.pardot.com *.frac.tl *.flourish.studio *.facebook.com *.googletagmanager.com *.docusign.com *.trustpilot.com *.doubleclick.net *.cloudflareinsights.com *.google-analytics.com *.google.com *.googleapis.com *.gstatic.com *.facebook.net *.bizconnectads.com *.docusign.net *.idocusign.net *.clarifycapital.com *.stape.biz *.leadcapture.io blob:; style-src 'self' *.googleapis.com 'unsafe-inline' 1
font-src www.paypalobjects.com *.typekit.net *.gstatic.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.modiface.com *.loreal.io *.fontawesome.com fonts.gstatic.com *.livechatinc.com cdn.cookie-script.com api.amplitude.com maxcdn.bootstrapcdn.com https://fonts.gstatic.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.yotpo.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com cdn.cookie-script.com api.amplitude.com 'self' connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app https://static.addtoany.com/ www.google.com *.affirm.com *.affirm.ca *.weltpixel.com vars.hotjar.com secure.livechatinc.com www.facebook.com socialplugin.facebook.net 'unsafe-inline' duosecurity.com api-37884245.duosecurity.com *.attn.tv *.doubleclick.net cdn.cookie-script.com api.amplitude.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com https://player.vimeo.com https://www.youtube-nocookie.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.googletagmanager.com *.typeform.com *.yotpo.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.affirm.com *.affirm.ca blueskytechmage.com mageblueskytech.com placehold.jp https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.files-text.com *.livechatinc.com *.livechat-files.com *.livechat-static.com magefan.com cm.magefan.com *.modiface.com *.loreal.io *.laroche-posay.us *.vichyusa.com scontent-atl3-2.cdninstagram.com/ visualwebsiteoptimizer.com dev.visualwebsiteoptimizer.com www.facebook.com pushcrew.com cdn.pushcrew.com tracking.pushcrew.com bat.bing.com *.cloudfront.net www.google.ca www.google.co.uz amcglobal.sc.omtrdc.net cdn.cookie-script.com api.amplitude.com *.disqus.com connect.facebook.net graph.facebook.com business.facebook.com flagpedia.net blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com *.cdninstagram.com *.fbcdn.net *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com *.yotpo.com *.yotpoapi.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app https://static.addtoany.com/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.affirm.com *.affirm.ca *.attn.tv events.attentivemobile.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.livechatinc.com *.livechat-static.com *.modiface.com *.loreal.io cdn.livechatinc.com api.livechatinc.com secure.livechatinc.com pushcrew.com cdn.pushcrew.com connect.facebook.net static.hotjar.com script.hotjar.com www.clickcease.com visualwebsiteoptimizer.com dev.visualwebsiteoptimizer.com *.cloudfront.net waves.retentionscience.com bat.bing.com www.youtube.com 'unsafe-inline' cdn.cookie-script.com js-agent.newrelic.com api.amplitude.com placement-api.us.afterpay.com *.disqus.com www.facebook.com graph.facebook.com business.facebook.com maps.googleapis.com https://player.vimeo.com https://www.youtube.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.instagram.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com *.yotpo.com *.yotpoapi.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app fonts.googleapis.com https://static.klaviyo.com *.livechatinc.com *.fontawesome.com pushcrew.com cdn.pushcrew.com www.googletagmanager.com cdn.cookie-script.com api.amplitude.com maxcdn.bootstrapcdn.com *.gstatic.com https://fonts.googleapis.com http://fonts.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src *.livechatinc.com 'self' 'unsafe-inline'; media-src *.livechatinc.com *.livechat-static.com *.modiface.com *.loreal.io blob: *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com https://stats.addtoany.com/menu *.googleapis.com *.affirm.com *.affirm.ca *.attn.tv events.attentivemobile.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.livechatinc.com *.text.com *.modiface.com *.loreal.io dc.services.visualstudio.com api.livechatinc.com monitor.clickcease.com visualwebsiteoptimizer.com dev.visualwebsiteoptimizer.com in.hotjar.com *.hotjar.io www.google-analytics.com stats.g.doubleclick.net analytics.google.com *.hotjar.com wss://*.hotjar.com www.facebook.com *.attentivemobile.com *.googlesyndication.com cdn.cookie-script.com consent.cookie-script.com googleads.g.doubleclick.net api.amplitude.com cdn.jsdelivr.net connect.facebook.net graph.facebook.com business.facebook.com www.gstatic.com maps.googleapis.com https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.instagram.com *.googleusercontent.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com *.yotpo.com *.yotpoapi.com 'self' 'unsafe-inline'; child-src *.livechatinc.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://google.com; report-to report-endpoint; 1
script-src 'self' 'unsafe-inline' chrome-extension: https://mc.yandex.ru 'unsafe-eval' https://yastatic.net https://enterprise.api-maps.yandex.ru https://mc.yandex.com 127.0.0.1:8182 127.0.0.1:8888 127.0.0.1:5005; frame-src 'self' https://mc.yandex.ru chrome-extension: https://mc.yandex.md https://mc.yandex.com; object-src 'self'; report-uri /cspreportonly; 1
report-uri https://www.adis-assurances.com/csp-report.php; default-src 'self' https://www.adis-assurances.com/; connect-src 'self' https://www.adis-assurances.com/ https://api-gateway.app.smart-tribune.com https://bat.bing.com https://bat.bing.net https://google.com https://*.google.com https://*.google-analytics.com https://www.googleadservices.com https://translate.googleapis.com https://yoast.com https://my.yoast.com https://*.openstreetmap.org https://privacy.commander1.com https://privacy.trustcommander.net https://wpspectra.com https://www.facebook.com https://*.tarteaucitron.io https://*.matomo.cloud https://matomo.cloud; style-src 'self' 'unsafe-inline' https://www.adis-assurances.com/ https://fonts.googleapis.com https://assets.app.smart-tribune.com https://cdnjs.cloudflare.com https://unpkg.com https://cdn.tarteaucitron.io https://*.tarteaucitron.io https://*.matomo.cloud https://matomo.cloud; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.adis-assurances.com/ https://*.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://assets.app.smart-tribune.com https://bat.bing.com https://cdn.tagcommander.com https://cdn.trustcommander.net https://connect.facebook.net https://googleads.g.doubleclick.net https://polyfill-fastly.io https://unpkg.com https://yoast.com https://tarteaucitron.io https://cdn.tarteaucitron.io https://*.tarteaucitron.io https://*.matomo.cloud https://matomo.cloud https://adisassurances.matomo.cloud; font-src 'self' data: https://www.adis-assurances.com/ https://assets.app.smart-tribune.com https://cdnjs.cloudflare.com https://fonts.gstatic.com; img-src 'self' blob: data: https://www.adis-assurances.com/ https://*.google.com https://www.google.fr https://www.google.be https://www.googleadservices.com https://www.googletagmanager.com https://www.google-analytics.com https://assets.app.smart-tribune.com https://bat.bing.com https://bat.bing.net https://*.openstreetmap.org https://*.tile.openstreetmap.org https://cdnjs.cloudflare.com https://manager.tagcommander.com https://secure.gravatar.com https://uploads.app.smart-tribune.com https://www.facebook.com https://i.ytimg.com https://*.tarteaucitron.io https://tarteaucitron.io https://*.matomo.cloud; manifest-src 'self' https://www.adis-assurances.com/; object-src 'self' https://www.adis-assurances.com/; frame-src 'self' blob: https://www.adis-assurances.com/ https://*.google.com https://www.googletagmanager.com https://cdn.trustcommander.net https://embed.acast.com https://*.doubleclick.net https://*.calameo.com https://www.youtube.com; frame-ancestors 'self' https://www.adis-assurances.com/; form-action 'self' https://www.adis-assurances.com/; worker-src 'self' blob: https://www.adis-assurances.com/; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com https://dashboard.webwinkelkeur.nl https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action *.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com consentcdn.cookiebot.com *.googletagmanager.com blob: landofcoder.com https://dashboard.webwinkelkeur.nl 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com imgsct.cookiebot.com www.facebook.com www.google.nl cdn.doofinder.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com ts.tradetracker.net www.magmodules.eu *.googletagmanager.com ssl.gstatic.com www.gstatic.com https://*.cookieconfirm.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.feedbackcompany.com static.elfsight.com consent.cookiebot.com eu1-config.doofinder.com connect.facebook.net consentcdn.cookiebot.com ct.beslist.nl *.webwinkelkeur.nl cdn.doofinder.com *.disqus.com *.avada.io *.shopify.com *.alothemes.com *.magepow.com tm.tradetracker.net landofcoder.com https://dashboard.webwinkelkeur.nl *.googletagmanager.com tagmanager.google.com https://*.cookieconfirm.com https://*.adsmurai.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.doofinder.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com tagmanager.google.com fonts.google.com https://fonts.googleapis.com https://*.googletagmanager.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com region1.google-analytics.com www.google-analytics.com www.feedbackcompany.com core.service.elfsight.com service-reviews-ultimate.elfsight.com pagead2.googlesyndication.com www.youtube.com www.facebook.com connect.facebook.net consentcdn.cookiebot.com ct.beslist.nl www.google.com region1.analytics.google.com stats.g.doubleclick.net *.doofinder.com wss://*.doofinder.com https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com landofcoder.com *.googletagmanager.com *.pay.nl https://*.cookieconfirm.com https://*.doubleclick.net https://*.lambda-url.eu-central-1.on.aws 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src pagead2.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://snarenshop.nl/paynl/csp/report; report-to report-endpoint; 1
report-uri https://csp.withgoogle.com/csp/forms/prod;frame-ancestors 'none' 1
font-src cdn.jsdelivr.net fonts.gstatic.com cdn.almapay.com fonts.googleapis.com https://applepay.cdn-apple.com https://widgets.trustedshops.com *.gstatic.com 'self' data: client.crisp.chat data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com js.mollie.com *.dalenys.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.getalma.eu *.almapay.com/ *.stripe.com/ *.checkout.com/ *.adyen.com/ js.mollie.com *.payplug.com *.dalenys.com https://applepay.cdn-apple.com *.googleapis.com game.crisp.chat *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.openstreetmap.org maps.googleapis.com maps.gstatic.com https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com https://secure-magenta.dalenys.com *.dalenys.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com *.hsforms.net *.hsforms.com *.googleapis.com *.gstatic.com *.google.com https://www.mollie.com 'self' data: *.crisp.chat integrations.etrusted.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.jsdelivr.net maps.googleapis.com maps.gstatic.com fonts.googleapis.com https://maps.googleapis.com https://player.vimeo.com js.mollie.com https://browser.sentry-cdn.com *.disqus.com https://secure-magenta.dalenys.com https://applepay.cdn-apple.com api.payplug.com cdn.payplug.com js.dalenys.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.hsforms.net *.hsforms.com *.googleapis.com *.google.com *.gstatic.com smartarget.online client.crisp.chat widgets.trustedshops.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.jsdelivr.net fonts.googleapis.com https://secure-magenta.dalenys.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.googleapis.com *.gstatic.com client.crisp.chat integrations.etrusted.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com client.crisp.chat 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.getalma.eu *.almapay.com maps.googleapis.com https://maps.googleapis.com https://player.vimeo.com js.mollie.com api-adresse.data.gouv.fr https://*.ingest.sentry.io *.trustedshops.com *.etrusted.com https://integrations.etrusted.site t.elasticsuite.io *.hsforms.net *.hsforms.com *.googleapis.com *.google.com *.google-analytics.com api.smartarget.online *.crisp.chat *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-OOToGRXBTG8MRyv_1dt7iw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.alicdn.com *.cdn-apple.com *.hotjar.com *.tql.com dokumfe7mps0i.cloudfront.net *.fontawesome.com https://fonts.bunny.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com https://chase.hostedpaymentservice.net https://chase-var.hostedpaymentservice.net *.kaptcha.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com app-sj39.marketo.com *.mktoweb.com *.avis-verifies.com *.tricorbraun.com *.facebook.com *.paypalobjects.com *.doubleclick.net *.issuu.com *.nomura.com *.opendns.com oc-cdn-ocprod.azureedge.net https://elements.sandbox.fortis.tech https://elements.fortis.tech *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com https://chase.hostedpaymentservice.net https://chase-var.hostedpaymentservice.net *.kaptcha.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.facebook.com *.facebook.net *.bing.com *.bing.net *.linkedin.com *.postcodeanywhere.co.uk *.google.com *.google.com.ua *.bidswitch.net *.rlcdn.com *.casalemedia.com *.openx.net *.outbrain.com *.pubmatic.com *.yahoo.com *.taboola.com *.3lift.com *.adnxs.com *.adroll.com *.rubiconproject.com *.addthis.com *.b-cdn.net *.clarity.ms *.googleapis.com *.googlesyndication.com *.ipredictive.com *.company-target.com https://cdn.cookielaw.org *.cookielaw.org *.bizible.com *.bizibly.com *.doubleclick.net *.contentsquare.net *.packagingoptionsdirect.com *.paradox.ai *.tql.com *.hellobar.com d3k81ch9hvuctc.cloudfront.net dokumfe7mps0i.cloudfront.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ services.postcodeanywhere.co.uk magefan.com cm.magefan.com https://firebasestorage.googleapis.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.app-sj39.marketo.com *.marketo.com *.marketo.net *.mktoweb.com *.cookie-script.com *.avis-verifies.com *.licdn.com *.gstatic.com *.tricorbraun.com *.postcodeanywhere.co.uk *.pcapredict.com *.facebook.net *.facebook.com *.bing.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.callrail.com gleam.io *.gleam.io *.zopim.com *.bizible.com *.hotjar.io *.hotjar.com *.adroll.com *.zdassets.com *.curator.io *.clarity.ms *.googleapis.com *.hellobar.com *.snapengage.com *.skeepers.io *.cardinalcommerce.com https://includestest.ccdc02.com https://googleads.g.doubleclick.net *.doubleclick.net *.paypal.com *.paypalobjects.com https://cdn.cookielaw.org *.cookielaw.org *.adobedtm.com *.contentsquare.net *.convertexperiments.com *.klaviyo.com *.zi-scripts.com *.zoominfo.com rum.hlx.page dokumfe7mps0i.cloudfront.net lottingem.com oc-cdn-ocprod.azureedge.net ocprodocprodnamgs.blob.core.windows.net unpkg.com https://developer.adobe.com https://magento.com https://js.sandbox.fortis.tech https://js.fortis.tech https://elements.sandbox.fortis.tech https://elements.fortis.tech https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.addressy.com *.avada.io *.shopify.com *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com https://chase.hostedpaymentservice.net https://chase-var.hostedpaymentservice.net *.kaptcha.com *.hsforms.net *.hsforms.com https://cdn-4.convertexperiments.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.marketo.com *.mktoweb.com *.postcodeanywhere.co.uk *.tricorbraun.com *.gleam.io *.curator.io *.googletagmanager.com *.klaviyo.com oc-cdn-ocprod.azureedge.net *.fontawesome.com https://static.klaviyo.com api.addressy.com https://fonts.bunny.net *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com *.b-cdn.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.mktoresp.com *.mktoutil.com *.oribi.io *.doubleclick.net *.callrail.com *.zdassets.com *.zendesk.com wss://*.zopim.com https://*.zopim.com *.adroll.com *.bing.com *.bing.net *.curator.io *.clarity.ms *.ip-api.com *.google.com.ua *.googlesyndication.com *.googleadservices.com *.postcodeanywhere.co.uk https://cdn.cookielaw.org https://px.ads.linkedin.com *.linkedin.com *.hotjar.io *.hotjar.com wss://*.hotjar.com *.onetrust.com *.facebook.com *.skeepers.io *.paradox.ai *.microsoft.com *.datadome.co *.klaviyo.com *.contentsquare.net *.convertexperiments.com *.zi-scripts.com *.zoominfo.com dokumfe7mps0i.cloudfront.net gadstat.com rum.hlx.page singleview.site statsdata.online https://developer.adobe.com https://elements.sandbox.fortis.tech https://elements.fortis.tech https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.addressy.com https://get.geojs.io *.avada.io *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com https://chase.hostedpaymentservice.net https://chase-var.hostedpaymentservice.net *.kaptcha.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://0ca37bcb-c173-49f7-941c-31756618bf49.sansec.watch/; report-to report-endpoint; 1
default-src 'self' https://21531211.fs1.hubspotusercontent-na1.net; script-src 'self' blob: 'wasm-unsafe-eval' 'unsafe-inline' https://ajax.googleapis.com https://js.hs-scripts.com https://platform.linkedin.com https://js.hsleadflows.net https://js.hscollectedforms.net https://js.hsadspixel.net https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-banner.net https://js.usemessages.com https://js.hubspotfeedback.com https://js.hscta.net https://static.hsappstatic.net https://www.googletagmanager.com https://*.google-analytics.com https://www.clarity.ms https://scripts.clarity.ms https://connect.facebook.net https://www.youtube.com https://s.ytimg.com https://www.google.com https://www.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://*.hubspot.com https://*.hubspot.net https://*.hubspotusercontent-na1.net https://*.hubspotusercontent00.net https://*.hubspotusercontent10.net https://*.hubspotusercontent20.net https://*.hubspotusercontent30.net https://*.hubspotusercontent40.net https://*.hsforms.net https://*.hsforms.com https://*.vidyard.com https://*.metrodemedellin.gov.co; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://static.hsappstatic.net https://cdn2.hubspot.net https://cdn.jsdelivr.net https://*.hubspot.com https://*.hubspotusercontent-na1.net https://*.hubspotusercontent00.net https://*.hubspotusercontent10.net https://*.hubspotusercontent20.net https://*.hubspotusercontent30.net https://*.hubspotusercontent40.net https://*.metrodemedellin.gov.co; img-src 'self' data: blob: https://static.hsappstatic.net https://www.googletagmanager.com https://c.clarity.ms https://static.hubspot.com https://cdn2.hubspot.net https://no-cache.hubspot.com https://js.hscta.net https://img.youtube.com https://i.ytimg.com https://*.hubspot.com https://*.hubspot.net https://*.hubspotusercontent-na1.net https://*.hubspotusercontent00.net https://*.hubspotusercontent10.net https://*.hubspotusercontent20.net https://*.hubspotusercontent30.net https://*.hubspotusercontent40.net https://*.hsforms.com https://*.hsforms.net https://*.metrodemedellin.gov.co https://*.vidyard.com https://*.google-analytics.com https://www.facebook.com; font-src 'self' https://fonts.gstatic.com https://21531211.fs1.hubspotusercontent-na1.net https://static.hsappstatic.net https://*.hubspot.com; connect-src 'self' https://www.facebook.com https://j.clarity.ms https://c.clarity.ms https://21531211.fs1.hubspotusercontent-na1.net https://*.hubspot.com https://*.hubspot.net https://js.hsforms.net https://*.hubapi.com https://forms.hscollectedforms.net https://js.hs-banner.com https://js.hscta.net https://static.hsappstatic.net https://metrodemedellin.creatio.com https://pre-metrodemedellin.creatio.com https://integrador.metrodemedellin.gov.co https://*.google-analytics.com https://www.clarity.ms https://a.clarity.ms https://f.clarity.ms https://y.clarity.ms https://j.clarity.ms https://cdnjs.cloudflare.com; frame-src 'self' https://*.hubspot.com https://*.medellin.gov.co https://online.fliphtml5.com https://*.hs-sites.com https://*.hsforms.net https://*.hsforms.com https://play.hubspotvideo.com https://*.vidyard.com https://www.youtube.com https://www.youtube-nocookie.com https://metrogis.metrodemedellin.gov.co https://www.google.com https://innovacionabierta.estratek.com.co; media-src 'self' blob: https://*.cdnstream.com https://streaming.live365.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self' https://*.medellin.gov.co; 1
script-src *; script-src-attr 'self'; script-src-elem 'self' addtocalendar.com cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.knightlab.com https://cdnjs.cloudflare.com https://fd.cleantalk.org https://platform.twitter.com https://static.addtoany.com https://unpkg.com https://www.google.com https://www.recaptcha.net; style-src *; style-src-attr 'self'; style-src-elem 'self' addtocalendar.com https://cdn.jsdelivr.net https://cdn.knightlab.com https://cdnjs.cloudflare.com https://unpkg.com; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net https://www.gstatic.com https://fonts.gstatic.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com https://applepay.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com klantenvertellen.nl www.klantenvertellen.nl consentcdn.cookiebot.com consentcdn.cookiebot.eu sgtm.medicura.nl https://www.googletagmanager.com/ js.mollie.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://applepay.cdn-apple.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com px.ads.linkedin.com www.google.nl medicura.nl bat.bing.com imgsct.cookiebot.com bat.bing.net img.sct.eu1.usercentrics.eu pagead2.googlesyndication.com sgtm.medicura.nl files.smartsuppcdn.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.mollie.com https://static.buckaroo.nl https://www.buckaroo.nl https://www.paypalobjects.com https://pay.google.com https://developers.google.com https://applepay.cdn-apple.com www.google.com.ua data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com cdn.mouseflow.com bat.bing.com diffuser-cdn.app-us1.com prism.app-us1.com *.cookiebot.com *.cookiebot.eu *.leadinfo.net www.smartsuppchat.com snap.licdn.com klantenvertellen.nl www.klantenvertellen.nl widget-v3.smartsuppcdn.com websocket-visitors.smartsupp.com trackcmp.net http://www.googletagmanager.com/ https://www.googletagmanager.com/ js.mollie.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com https://www.sandbox.paypal.com https://applepay.cdn-apple.com https://pay.google.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com cdnjs.cloudflare.com widget-v3.smartsuppcdn.com maxcdn.bootstrapcdn.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com widget-v3.smartsuppcdn.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com stats.g.doubleclick.net *.mouseflow.com consentcdn.cookiebot.com sgtm.medicura.nl dt.medicura.nl *.smartsuppcdn.com *.smartsuppchat.com wss://websocket-visitors.smartsupp.com bat.bing.net bat.bing.com px.ads.linkedin.com *.usercentrics.eu consentcdn.cookiebot.eu pagead2.googlesyndication.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://applepay.buckaroo.io https://smp-paymentservices.apple.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-9lqm3Aco69Imhn9JzYIAag' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-s9FQ_brm1nHtHZQ9i-rVuQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.googleapis.com *.gstatic.com fonts.googleapis.com fonts.gstatic.com *.hotjar.com *.zopim.com *.fontawesome.com data: https://fonts.bunny.net maxcdn.bootstrapcdn.com renabielizna.pl data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com renabielizna.pl 'self' 'unsafe-inline'; frame-ancestors renabielizna.pl 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ cdn.dnky.co *.hotjar.com *.google.com *.facebook.com *.trustpilot.com *.criteo.com landofcoder.com renabielizna.pl 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.googleapis.com *.gstatic.com *.google.com *.google.nl connect.onlinesucces.nl px.ads.linkedin.com stats.g.doubleclick.net *.linkedin.com *.googletagmanager.com gallery.mailchimp.com *.trustedshops.com *.facebook.com *.zopim.com cdn.jsdelivr.net *.jmango360.com *.datatrics.com *.smaato.net https://firebasestorage.googleapis.com renabielizna.pl cookiefirst.com *.cookiefirst.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com *.paypal.com *.google.com *.googletagmanager.com *.googleadservices.com cdn.dnky.co api.comapi.com *.trackedlink.net snap.licdn.com chimpstatic.com checkout.buckaroo.nl *.adyen.com *.zopim.com *.hotjar.com *.zdassets.com *.sendcloud.sc *.mailchimp.com *.trustedshops.com *.fontawesome.com *.facebook.net *.feedbackcompany.com *.google-analytics.com *.trustpilot.com *.newrelic.com *.nr-data.net cdn.jsdelivr.net *.googleoptimize.com *.clarity.ms *.datatrics.com *.criteo.net *.criteo.com cdn.mouseflow.com *.avada.io *.shopify.com landofcoder.com renabielizna.pl cookiefirst.com *.cookiefirst.com www.gstatic.com/recaptcha/ www.google.com/recaptcha/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com cdn.dnky.co checkout.buckaroo.nl *.fontawesome.com *.mailchimp.com *.trustpilot.com cdn.jsdelivr.net https://fonts.bunny.net maxcdn.bootstrapcdn.com renabielizna.pl cookiefirst.com *.cookiefirst.com 'self' 'unsafe-inline'; object-src landofcoder.com renabielizna.pl 'self' 'unsafe-inline'; media-src *.adobe.com *.zopim.com renabielizna.pl 'self' 'unsafe-inline'; manifest-src renabielizna.pl 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com *.paypal.com commerce.adobedc.net api.comapi.com stats.g.doubleclick.net *.zdassets.com *.hotjar.com *.hotjar.io *.zopim.com wss://*.zopim.com *.feedbackcompany.com *.zendesk.com *.nr-data.net *.clarity.ms *.facebook.com *.datatrics.com https://get.geojs.io *.avada.io landofcoder.com renabielizna.pl cookiefirst.com *.cookiefirst.com 'self' 'unsafe-inline'; child-src renabielizna.pl http: https: blob: 'self' 'unsafe-inline'; default-src renabielizna.pl cookiefirst.com *.cookiefirst.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri renabielizna.pl 'self' 'unsafe-inline'; report-uri /csp_reporter.php; 1
font-src maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com c.statcounter.com googleads.g.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com cdn.ampproject.org www.gstatic.com www.statcounter.com embed.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com www.gstatic.com embed.tawk.to 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com cdn.ampproject.org www.googleapis.com www.statcounter.com c.statcounter.com embed.tawk.to www.gstatic.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https: data: 'unsafe-inline';report-uri https://agrian.com/global/csp_report/ 1
default-src 'self' https://www.google.com https://www.gstatic.com https://bat.bing.com https://consentcdn.cookiebot.com https://ct.pinterest.com https://gum.criteo.com https://popups1-s.getresponse.com https://stats.g.doubleclick.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://maps.googleapis.com https://code.jquery.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://connect.facebook.net https://script.hotjar.com https://static.hotjar.com https://bat.bing.com https://dynamic.criteo.com https://sslwidget.criteo.com https://s.pinimg.com https://www.clickcease.com https://an.gr-wcon.com https://m.gr-cdn-e.eu https://us-an.gr-cdn.com https://us-wbe.gr-cdn.com https://newsletter.paradyz.com.pl; style-src 'self' 'unsafe-inline' https://fonts.bunny.net https://fonts.googleapis.com https://www.gstatic.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.bunny.net https://fonts.gstatic.com https://script.hotjar.com; connect-src 'self' https://region1.analytics.google.com https://region1.google-analytics.com https://www.google.com https://maps.googleapis.com https://pagead2.googlesyndication.com https://consentcdn.cookiebot.com https://ct.pinterest.com https://gum.criteo.com https://mug.criteo.com https://surveystats.hotjar.io https://ga2.getresponse.com https://popups1-show.getresponse.com https://popups1-s.getresponse.com https://ts.getresponse.pl https://secure.przelewy24.pl; frame-src 'self' https://consentcdn.cookiebot.com https://gum.criteo.com https://www.google.com https://secure.przelewy24.pl; object-src 'none'; base-uri 'self'; form-action 'self' https://secure.przelewy24.pl; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.klevu.com *.ksearchnet.com *.fontawesome.com maxcdn.bootstrapcdn.com *.sleeknote.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.adyen.com pay.google.com payments-eu.amazon.com *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.adyen.com pay.google.com landofcoder.com maps.googleapis.com chart.googleapis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * checkoutshopper-test.adyen.com www.youtube.com consentcdn.cookiebot.com vars.hotjar.com s.acquire.io 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.adyen.com pay.google.com *.payments-amazon.com *.media-amazon.com *.paypalobjects.com js.klevu.com *.ksearchnet.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com maps.googleapis.com checkoutshopper-test.adyen.com www.w3.org s.acquire.io admin.expivi.net d33o7r96pw821t.cloudfront.net *.clarity.ms analytics.sleeknote.com *.commerce-connector.com staging-lecot.vaimo.net *.cookiebot.com *.facebook.com *.bing.com *.google.com.ua *.lecot.be data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com checkoutshopper-live.adyen.com/ pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com js.klevu.com *.ksearchnet.com landofcoder.com maps.googleapis.com chart.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com ajax.googleapis.com r1-t.trackedlink.net js-agent.newrelic.com admin.expivi.net consent.cookiebot.com security-hub.vaimo.network static.hotjar.com rum-static.pingdom.net script.hotjar.com consentcdn.cookiebot.com bam-cell.nr-data.net s.acquire.io sleeknote.com sleeknotestaticcontent.sleeknote.com sleeknotecustomerscripts.sleeknote.com connect.facebook.net *.lecot.be *.clarity.ms https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.klevu.com *.ksearchnet.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com script.hotjar.com https://js.klevu.com 'self' 'unsafe-inline'; object-src landofcoder.com maps.googleapis.com chart.googleapis.com 'self' 'unsafe-inline'; media-src *.adobe.com data: sleeknote.com sleeknotestaticcontent.sleeknote.com lecot.be 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.adyen.com payments-eu.amazon.com *.klevu.com *.ksearchnet.com landofcoder.com maps.googleapis.com chart.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com bam-cell.nr-data.net eucs23.ksearchnet.com stats.klevu.com app.acquire.io www.expivi.net security-hub.vaimo.network static.hotjar.com rum-static.pingdom.net script.hotjar.com rum-collector-2.pingdom.net in.hotjar.com stats.g.doubleclick.net consentcdn.cookiebot.com *.facebook.com s.acquire.io sleeknote.com sleeknotestaticcontent.sleeknote.com googleads.g.doubleclick.net *.cloudfront.net *.expivi.net wss://s.acquire.io *.clarity.ms 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'
  https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googleadservices.com
  https://googleads.g.doubleclick.net https://www.google.com https://www.gstatic.com https://connect.facebook.net https://bat.bing.com https://static.klaviyo.com
  https://*.klaviyo.com https://widget.trustpilot.com https://a.adroll.com https://s.adroll.com https://container.pepperjam.com https://t.pepperjamnetwork.com
  https://track.linksynergy.com https://www.live2support.com https://api.reciteme.com https://use.typekit.net https://www.recaptcha.net; connect-src 'self'
  https://*.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://*.klaviyo.com
  https://bat.bing.com https://connect.facebook.net https://www.facebook.com https://*.adroll.com https://api.reciteme.com https://widget.trustpilot.com; img-src
  'self' data: https:; style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net; font-src 'self' data: https://use.typekit.net
  https://p.typekit.net; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://www.facebook.com https://td.doubleclick.net
  https://bid.g.doubleclick.net https://www.google.com https://www.recaptcha.net; report-uri /csp-report 1
default-src 'self'; script-src 'self' ajax.cloudflare.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.sift.com www.googletagmanager.com analytics.tiktok.com bat.bing.com connect.facebook.net googleads.g.doubleclick.net us1.clevertap-prod.com cdnjs.cloudflare.com/ajax/libs/jqueryui-touch-punch/ sc-static.net www.google-analytics.com s.axon.ai static.ads-twitter.com cdn-public.liftoffintl.io tr.snapchat.com *.applovin.com static.opentok.com d2r1yp2w7bby2u.cloudfront.net www.google.com www.gstatic.com unpkg.com/web-vitals@5.0.1/ cdnjs.cloudflare.com/ajax/libs/intl-tel-input/ cdn.debugbear.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com www.gstatic.com; img-src * 'self' data: ph-profile-photo.s3.amazonaws.com hexagon-analytics.com; font-src 'self' data: fonts.gstatic.com; connect-src 'self' *.pubnub.com *.snapchat.com analytics.google.com analytics.tiktok.com www.facebook.com b.applovin.com analytics-ipv6.tiktokw.us analytics.liftoff.io bat.bing.com hlg.tokbox.com www.google-analytics.com www.google.com stats.g.doubleclick.net re.applovin.com api-standard.opentok.com config.opentok.com graph.facebook.com *.analytics.google.com *.prod.tokbox.com www.googletagmanager.com api.airbrake.io bat.bing.net wss://*.media.prod.tokbox.com ph-profile-photo.s3.amazonaws.com analytics.twitter.com t.co *.doubleclick.net *.quantarelay.net data.debugbear.com www.googleadservices.com; media-src * 'self'; child-src blob:; frame-src tr.snapchat.com www.facebook.com www.google.com www.googletagmanager.com www.youtube.com open.spotify.com; worker-src 'self' blob:; report-uri https://siteuri.report-uri.com/r/t/csp/reportOnly 1
object-src 'none'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://sp.randallreilly.com https://www.youtube.com https://munchkin.marketo.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://polyfill-fastly.io https://unpkg.com pages.petersoncat.com; script-src-attr 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src-attr 'self' 'unsafe-inline'; frame-ancestors 'self' 1
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://pagead2.googlesyndication.com https://fundingchoicesmessages.google.com https://ep2.adtrafficquality.google https://*.google.com https://*.gstatic.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https:; frame-src 'self' https://pagead2.googlesyndication.com https://fundingchoicesmessages.google.com https://ep2.adtrafficquality.google https://*.google.com https://www.paypal.com https://www.sandbox.paypal.com; worker-src 'self' blob:; upgrade-insecure-requests; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.aarstiderne.com https://aarstiderne.com https://*.arstiderna.com https://arstiderna.com https://*.aarsdev.dk https://aarsdev.dk https://*.vercel.app https://vercel.app https://*.puzzel.com https://puzzel.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://www.google.com https://*.google.dk https://www.gstatic.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.googlesyndication.com https://pagead2.googlesyndication.com https://adservice.google.com https://*.cookieinformation.com https://*.app.cookieinformation.com https://connect.facebook.net https://aarstidernekassechat.subsero.dk https://cdnjs.cloudflare.com https://s3.amazonaws.com https://bat.bing.com https://*.pinimg.com https://*.sleeknote.com https://chimpstatic.com https://*.s3.us-east-2.amazonaws.com https://*.europe-west1.run.app https://analytics.tiktok.com; style-src 'self' 'unsafe-inline' https://*.aarstiderne.com https://aarstiderne.com https://*.arstiderna.com https://arstiderna.com https://*.aarsdev.dk https://aarsdev.dk https://*.vercel.app https://vercel.app https://*.puzzel.com https://puzzel.com https://*.typography.com https://*.mailchimp.com https://*.cookieinformation.com https://*.app.cookieinformation.com; img-src 'self' data: https://*.aarstiderne.com https://aarstiderne.com https://*.arstiderna.com https://arstiderna.com https://*.aarsdev.dk https://aarsdev.dk https://*.vercel.app https://vercel.app https://*.puzzel.com https://puzzel.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://www.google.com https://*.google.dk https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://pagead2.googlesyndication.com https://www.gstatic.com https://www.facebook.com https://connect.facebook.net https://*.cookieinformation.com https://*.app.cookieinformation.com https://bat.bing.com https://*.pinimg.com https://analytics.tiktok.com https://*.europe-west1.run.app https://*.analytics.google.com https://*.google.be; font-src 'self' data: https://*.aarstiderne.com https://aarstiderne.com https://*.arstiderna.com https://arstiderna.com https://*.aarsdev.dk https://aarsdev.dk https://*.vercel.app https://vercel.app https://*.puzzel.com https://puzzel.com https://*.typography.com; media-src 'self' https://*.aarstiderne.com https://aarstiderne.com https://*.arstiderna.com https://arstiderna.com https://*.aarsdev.dk https://aarsdev.dk; connect-src 'self' https://*.aarstiderne.com https://aarstiderne.com https://*.arstiderna.com https://arstiderna.com https://*.aarsdev.dk https://aarsdev.dk https://*.vercel.app https://vercel.app https://*.puzzel.com https://puzzel.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://www.google.com https://*.google.dk https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://*.googlesyndication.com https://pagead2.googlesyndication.com https://adservice.google.com https://*.cookieinformation.com https://*.app.cookieinformation.com https://connect.facebook.net https://www.facebook.com https://aarstidernekassechat.subsero.dk https://bat.bing.com https://bat.bing.net https://*.sleeknote.com https://*.europe-west1.run.app https://analytics.tiktok.com; frame-src 'self' https://*.aarstiderne.com https://aarstiderne.com https://*.arstiderna.com https://arstiderna.com https://*.aarsdev.dk https://aarsdev.dk https://*.vercel.app https://vercel.app https://*.puzzel.com https://puzzel.com https://www.googletagmanager.com https://*.doubleclick.net https://www.youtube.com https://www.youtube-nocookie.com https://www.facebook.com https://*.cookieinformation.com https://*.app.cookieinformation.com https://aarstidernekassechat.subsero.dk https://*.europe-west1.run.app; form-action 'self' https://*.list-manage.com https://www.facebook.com; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; 1
default-src https:; script-src 'self' *.catalyst-analytics.nz 'unsafe-inline' 'unsafe-eval'; font-src https: data:; style-src https: 'unsafe-inline'; img-src https: data:; report-uri https://banchile.capacitacionfinanciera.cl/local/csp/collector.php?uid=0&cid=1 1
default-src 'none'; frame-src 'self'; img-src 'self' https://storage.googleapis.com/ https://assets.cantook.net/ https://assets.entrepotnumerique.com/ https://assets.edenlivres.fr/ https://assets-libr.cantook.net/ https://assets-edgt.cantook.net/; style-src 'self' 'unsafe-inline'; connect-src 'self' https://storage.googleapis.com/ https://o37564.ingest.sentry.io https://eu.i.cantook.com; script-src 'self' https://eu.i.cantook.com; report-uri https://o37564.ingest.sentry.io/api/84541/security/?sentry_key=0b6a319c2af64d94839478210ee88f6c&sentry_environment=prod-northamerica 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net *.adobe.com *.facebook.com *.facebook.net *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com widget.clutch.co 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io goodfirms.s3.amazonaws.com c.clarity.ms c.bing.com https://s3-us-west-2.amazonaws.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com *.facebook.com *.facebook.net *.fontawesome.com *.googleapis.com https://www.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com 'unsafe-inline' https://www.mconnectmedia.com/ static.zdassets.com scripts.clarity.ms assets.zendesk.com widget.clutch.co www.clarity.ms *.avada.io *.shopify.com *.facebook.com *.facebook.net *.fontawesome.com *.googleapis.com *.gstatic.com *.clarity.ms https://connect.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net *.facebook.com *.facebook.net *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com ekr.zdassets.com e.clarity.ms mconnectmediahelp.zendesk.com widget-mediator.zopim.com stats.g.doubleclick.net wss://widget-mediator.zopim.com/ *.zopim.com https://get.geojs.io *.avada.io *.adobe.com *.facebook.com *.facebook.net *.fontawesome.com *.googleapis.com *.gstatic.com y.clarity.ms 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com https://www.gstatic.com 'self' data: https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com *.certcapture.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com *.dotdigital-pages.com *.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.pinterest.com *.pinterdev.com commerce-app.pintergration.com https://www.google.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.sharethis.com *.googleapis.com *.certcapture.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com *.trackedlink.net blob: https://*.ximasoftware.com/ https://*.hubspot.com/ https://*.linkedin.com/ magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com *.hsforms.net *.hsforms.com 'self' data: *.facebook.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.sharethis.com *.googleapis.com https://www.gstatic.com *.certcapture.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal https://*.hs-scripts.com/ https://*.hs-banner.com/ https://*.hs-analytics.net/ https://*.hsadspixel.net/ https://*.hscollectedforms.net/ https://*.ximasoftware.com/ https://*.gstatic.com/ https://*.google.com/ https://*.fontawesome.com/ https://*.clarity.ms/ https://*.stackadapt.com/ https://*.licdn.com/ https://*.jsdelivr.net/ https://*.pinimg.com/ https://*.amazonaws.com/ https://*.newrelic.com/ https://*.pinterest.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com *.hsforms.net *.hsforms.com https://www.google.com *.gstatic.com *.cloudflare.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.sharethis.com *.certcapture.com display.ugc.bazaarvoice.com https://*.ximasoftware.com/ https://*.stackadapt.com/ assets.braintreegateway.com *.googleapis.com *.gstatic.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https://*.ximasoftware.com/ 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.sharethis.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.googleapis.com *.certcapture.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https://*.hs-scripts.com/ https://*.hs-banner.com/ https://*.hs-analytics.net/ https://*.hsadspixel.net/ https://*.hscollectedforms.net/ https://*.hubapi.com/ https://*.linkedin.com/ https://*.ximasoftware.com/ https://*.gstatic.com/ https://*.google.com/ https://*.fontawesome.com/ https://*.clarity.ms/ https://*.stackadapt.com/ https://*.licdn.com/ https://*.jsdelivr.net/ https://*.pinimg.com/ https://*.newrelic.com/ https://*.pinterest.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com t.elasticsuite.io *.hsforms.net *.hsforms.com analytics.google.com *.facebook.net 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://plumrocket.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com https://plumrocket.com *.addthis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; media-src https://hummingbirdbakery.com *.adobe.com 'self' 'unsafe-inline'; font-src *.klaviyo.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://www.hummingbirdbakery.com *.fontawesome.com https://fonts.bunny.net 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; style-src *.typekit.net *.klaviyo.com *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.gstatic.com *.googleapis.com *.fontawesome.com https://cdn.jsdelivr.net https://fonts.bunny.net assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; connect-src *.zendesk.com wss://widget-mediator.zopim.com *.instagram.com https://mgibtoec.eul.stape.io *.cookiebot.com dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com https://api.smooch.io wss://api.smooch.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maps.googleapis.com ekr.zdassets.com/ *.ideal-postcodes.co.uk https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src *.cdninstagram.com *.hummingbirdbakery.com https://hummingbirdbakery.com *.cookiebot.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.googleapis.com maps.gstatic.com https://www.facebook.com https://hummingbirdbakery.zendesk.com https://www.googleadservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: data: 'self' 'unsafe-inline'; script-src *.zdassets.com https://mgibtoec.eul.stape.io *.cookiebot.com assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js https://maps.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com https://static.hotjar.com https://script.hotjar.com connect.facebook.net https://api.smooch.io https://www.googleadservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maps.googleapis.com s7.addthis.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.avada.io www.facebook.com graph.facebook.com business.facebook.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.gstatic.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; 1
object-src 'none';base-uri 'self';script-src 'nonce-5lBmkMmm0BiZrKxkvdBm_w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
base-uri 'self'; connect-src 'self' wss: *.google-analytics.com *.googletagmanager.com https://region1.analytics.google.com https://stats.g.doubleclick.net *.hs-analytics.net *.hotjar.com *.cloudflareinsights.com *.hubspot.com *.cookiebot.com collector.leadinfo.net api.leadinfo.com collector4.leadinfo.net https://*.ldnfrpl.com https://li-replay.s3-accelerate.amazonaws.com; default-src 'self'; font-src 'self' data: fonts.gstatic.com; form-action 'self'; frame-src https://www.google.com/recaptcha/ *.youtube.com *.vimeo.com *.cookiebot.com; img-src 'self' data: blob: https://ifra-943946991.imgix.net https://imgsct.cookiebot.com; media-src 'self' player.vimeo.com download-video.akamaized.net *.vimeocdn.com https://d3t14p1xronwr0.cloudfront.net; script-src 'self' blob: 'unsafe-eval' 'unsafe-inline' 'unsafe-hashes' https://www.recaptcha.net *.googletagmanager.com *.hs-scripts.com *.hscollectedforms.net *.hs-banner.com *.hs-analytics.net *.usemessages.com *.hsadspixels.net *.hsadspixel.net *.hotjar.com *.googleadservices.com *.facebook.net trackcmp.net *.licdn.com *.googlesyndication.com *.hsforms.net *.cloudflareinsights.com *.hsforms.com *.s3.amazonaws.com *.hubspot.com *.google.com *.gstatic.com *.atlassian.net *.hs-sites.com *.cookie-script.com googleads.g.doubleclick.net cdn.leadinfo.net *.cookiebot.com https://unpkg.com https://*.ldnfrpl.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.googletagmanager.com https://unpkg.com https://cdn.leadinfo.net; 1
default-src 'self'; child-src vars.hotjar.com; connect-src 'self' cdnwebgroup.foyer.lu api.foyer.lu api-b.foyer.lu www.foyer.lu analytics.foyer.lu saf-api.foyer.lu datadog-proxy.foyer.lu ssowebauth-b.foyer.lu *.g.doubleclick.net *.doubleclick.net www.googletagmanager.com *.google.com *.google-analytics.com *.analytics.google.com *.gstatic.com *.googleapis.com ssl.google-analytics.com www.googleadservices.com maps.googleapis.com pagead2.googlesyndication.com api.iadvize.com halc.iadvize.com static.iadvize.com www.facebook.com consentcdn.cookiebot.com *.hotjar.com:* vc.hotjar.io:* *.hotjar.io wss://*.hotjar.com px.ads.linkedin.com *.snapchat.com ct.pinterest.com pixel-config.reddit.com *.googlesyndication.com cdn.jsdelivr.net overbridgenet.com s.pinimg.com www.icmlife.com www.generali.lu www.life.groupebpce.com; font-src 'self' data: static.foyer.lu fonts.gstatic.com use.fontawesome.com fonts.bunny.net cdn.scite.ai cdn.jsdelivr.net use.typekit.net assets.faircado.com r2cdn.perplexity.ai cdn.megabonus.com; frame-src 'self' halc.iadvize.com *.google.com www.googletagmanager.com www.facebook.com www.youtube.com vars.hotjar.com consentcdn.cookiebot.com ct.pinterest.com *.snapchat.com 15155307.fls.doubleclick.net gateway.zscaler.net platform.twitter.com redirect.isolation.zscaler.com syndication.twitter.com player.vidata.io usercheck.hublux.internal; img-src 'self' 'unsafe-inline' data: blob: foyer.lu *.foyer.lu *.g.doubleclick.net *.googletagmanager.com *.googleadservices.com *.google.com *.googlesyndication.com *.g.doubleclick.net *.doubleclick.net *.gstatic.com alb.reddit.com tr.snapchat.com d9hhrg4mnvzow.cloudfront.net secure.gravatar.com s.w.org *.cookiebot.com connect.facebook.net i.ytimg.com *.ads.linkedin.com alb.reddit.com alb.reddit.comm s.w.orgm; manifest-src 'self'; media-src 'self' data: *.foyer.lu; object-src www.foyer.lu www.cmpli.lu; script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' data: api.foyer.lu analytics.foyer.lu groupe.foyer.lu www.datadoghq-browser-agent.com *.google-analytics.com *.googletagmanager.com *.gstatic.com *.google.com *.googleapis.com www.googleoptimize.com *.doubleclick.net *.g.doubleclick.net translate.googleapis.com sc-static.net opt-out.ferank.eu code.jquery.com tarteaucitron.io static.hotjar.com halc.iadvize.com static.iadvize.com npmcdn.com cdn.jsdelivr.net static.cdn.prismic.io tarteaucitron.io track.adform.net connect.facebook.net snap.licdn.com s2.adform.net actorssl-5637.kxcdn.com halc.iadvize.com consent.cookiebot.com consentcdn.cookiebot.com *.hotjar.com platform.twitter.com cdnjs.cloudflare.com ajax.googleapis.com s.pinimg.com ct.pinterest.com *.snapchat.com *.cookiebot.com www.redditstatic.com cdn.datatables.net unpkg.com npmcdn.com cdnjs.cloudflare.com static.hotjar.com platform.twitter.com s.pinimg.com sc-static.net www.redditstatic.com capi-automation.s3.us-east-2.amazonaws.com cdn.svgator.com; style-src 'unsafe-inline' 'self' *.foyer.lu fonts.googleapis.com translate.googleapis.com cdn.jsdelivr.net opt-out.ferank.eu tarteaucitron.io cdn.jsdelivr.net platform.twitter.com fonts.bunny.net cdn.datatables.net code.jquery.com capi-automation.s3.us-east-2.amazonaws.com; worker-src 'self' blob:; report-uri https://api.foyer.lu/sentry/api/237/security/?sentry_key=29cea24f640d436fa4430bc6d0195cb9&sentry_environment=ir-CSP-php-p&sentry_release=1.0.39; 1
default-src 'self'; script-src 'self' *.csidetm.com https://*.optimizely.com; connect-src 'self' *.csidetm.com https://*.optimizely.com wss://*.optimizely.com; img-src 'self' https://cdn.optimizely.com; style-src 'self' 'unsafe-inline' https://*.optimizely.com; font-src 'self' https://*.optimizely.com; report-uri https://proxy.csidetm.com/csp; report-to csp-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-VgoPSp9A2UQ0-dEYMyu55A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-UMhWr5WKxULwuT8CfmwGLQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' 'unsafe-eval' 'nonce-Mxcs5IHEkY5HCpeWoFiaYl6vh4sE61qYbywfqhoQxdA='; base-uri 'none'; connect-src 'self' https://*.fontawesome.com https://*.googleapis.com https://*.googlesyndication.com https://consentcdn.cookiebot.com https://analytics.tiktok.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net; img-src data: 'self' https://*.googleapis.com https://*.gstatic.com https://*.google-analytics.com https://cdn.startpeople.be https://img.youtube.com https://i.ytimg.com https://imgsct.cookiebot.com https://vumbnail.com/ https://i.vimeocdn.com; object-src 'none'; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net/npm/@fancyapps/ui/dist/fancybox.css https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datepicker/1.9.0/css/bootstrap-datepicker3.min.css https://cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/css/bootstrap.min.css https://cdn.jsdelivr.net/npm/select2@4.0.13/dist/css/select2.min.css https://cdn.jsdelivr.net/npm/select2-bootstrap-5-theme@1.3.0/dist/select2-bootstrap-5-theme.min.css https://cdn.jsdelivr.net/npm/bootstrap-icons@1.10.3/font/bootstrap-icons.css https://fonts.googleapis.com; frame-src 'strict-dynamic' 'self' https://consentcdn.cookiebot.com https://www.google.com/recaptcha/ https://www.youtube-nocookie.com/ https://player.vimeo.com/; report-to csp-endpoint; report-uri https://csp-dxp.rgfstaffing.be/csp 1
font-src cash-f.squarecdn.com https://*.gstatic.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com *.bootstrapcdn.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.adyen.com www.facebook.com 'self' connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ * *.adyen.com *.googleapis.com https://h.online-metrix.net www.facebook.com https://bid.g.doubleclick.net https://*.tradedoubler.com *.google.com/ connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net https://sync-tm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io * https://images.unsplash.com https://*.gstatic.com *.adyen.com *.gstatic.com magefan.com cm.magefan.com *.disqus.com https://www.magezon.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://imgsct.cookiebot.com https://www.gstatic.com *.google.com *.google.co.in *.googleadservices.com *.google-analytics.com *.lightemporium.com *.usercentrics.eu https://stats.g.doubleclick.net https://d.adroll.com https://pixel.advertising.com https://pixel.rubiconproject.com https://simage2.pubmatic.com https://dsum-sec.casalemedia.com https://ads.yahoo.com https://eb2.3lift.com https://sync.outbrain.com https://trc.taboola.com https://x.bidswitch.net/sync https://ib.adnxs.com https://idsync.rlcdn.com https://us-u.openx.net https://ups.analytics.yahoo.com https://segments.company-target.com https://sync.tidaltv.com https://h.online-metrix.net *.online-metrix.net www.facebook.com https://ads.stickyadstv.com https://sync.search.spotxchange.com https://ad.sxp.smartclip.net https://cm.adform.net https://wt.rqtrk.eu https://ad.360yield.com https://cm.g.doubleclick.net https://match.adsrvr.org https://match.adsby.bidtheatre.com https://1f2e7.v.fwmrm.net https://pr-bh.ybp.yahoo.com https://meetanshi.com/media/logo.png https://www.google.se https://rtb-csync.smartadserver.com https://synchroscript.deliveryengine.adswizz.com https://match.prod.bidr.io https://c1.adform.net https://pm.w55c.net https://pixel.onaudience.com https://sync.crwdcntrl.net/ https://ps.eyeota.net https://*.tradedoubler.com https://*.adform.net https://img-statics.com https://*.google.com https://ssl.gstatic.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net https://www.googletagmanager.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://ade.googlesyndication.com https://imgstatic.eu https://mw-minio.inkclub.com:9000 http://files.coordi.net/ https://firebasestorage.googleapis.com connect.facebook.net graph.facebook.com business.facebook.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://maps.googleapis.com https://player.vimeo.com tagmanager.google.com https://www.googletagmanager.com *.disqus.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.fontawesome.com *.bootstrapcdn.com *.googleapis.com *.adobedtm.com *.magento.com *.ccdc02.com https://www.googleapis.com https://www.googleoptimize.com https://www.gstatic.com https://www.googleadservices.com https://tagmanager.google.com https://*.googletagmanager.com https://googleads.g.doubleclick.net https://bam.nr-data.net https://consent.cookiebot.com *.cookiebot.com https://h.online-metrix.net https://adsby.bidtheatre.com connect.facebook.net https://*.tradedoubler.com https://*.adform.net https://img-statics.com https://config.gorgias.chat *.google.com/ https://cdn.jsdelivr.net *.avada.io *.shopify.com www.facebook.com graph.facebook.com business.facebook.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://widget.trustpilot.com/ https://www.clarity.ms/ https://consentcdn.cookiebot.com https://www.clarity.ms *.gorgias.chat *.cloudflareinsights.com https://scripts.clarity.ms/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cash.app https://fonts.googleapis.com/ https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://static.klaviyo.com *.fontawesome.com *.bootstrapcdn.com https://*.googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com https://cdn.jsdelivr.net https://fonts.bunny.net maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src self 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com * https://maps.googleapis.com https://player.vimeo.com *.adyen.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.adobedtm.com *.magento.com assets.adobedtm.com *.adobe.com *.ccdc02.com *.google-analytics.com https://www.googleapis.com https://www.googleadservices.com ttps://www.googletagmanager.com https://www.googleoptimize.com https://www.gstaic.com *.usercentrics.eu https://bam.nr-data.net https://h.online-metrix.net https://stats.g.doubleclick.net https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://config.gorgias.chat https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://f.clarity.ms/ https://b.clarity.ms/collect 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-_yT6CorYS0QySiJhG29T5A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-Pz_vO9Ws9YFfibLgWKBzXA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; report-uri https://13fdb20b4d99daba15f18769204d48be.report-uri.com/r/d/csp/reportOnly 1
font-src *.fontawesome.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action https://seo.mageplaza.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ js.mollie.com *.multisafepay.com https://pay.google.com https://www.googletagmanager.com https://td.doubleclick.net 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.vimeocdn.com i.ytimg.com *.youtube.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://banners.helloretailcdn.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://images.unsplash.com magefan.com cm.magefan.com https://www.mollie.com *.multisafepay.com *.hsforms.net *.hsforms.com 'self' data: ts.tradetracker.net www.magmodules.eu https://imgproxy.vendic.dev data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://core.helloretail.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://maps.googleapis.com js.mollie.com *.multisafepay.com https://pay.google.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com tm.tradetracker.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com downloads.mailchimp.com *.fontawesome.com *.multisafepay.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net https://core.helloretail.com https://helloretailcdn.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://maps.googleapis.com https://player.vimeo.com *.multisafepay.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com https://www.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';base-uri 'self';object-src 'none';frame-ancestors 'none';form-action 'self' https://script.google.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://pagead2.googlesyndication.com https://cdn.jsdelivr.net https://unpkg.com https://script.google.com https://billing-ui.preview.emergentagent.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://unpkg.com https://billing-ui.preview.emergentagent.com;img-src 'self' data: blob: https://busy.in https://busy-client.busy.in https://download.busy.in https://download2.busy.in https://img.youtube.com https://i.ytimg.com https://secure.gravatar.com https://images.unsplash.com https://www.googletagmanager.com https://www.google-analytics.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://pagead2.googlesyndication.com https://www.google.co.in https://www.google.com https://www.facebook.com;font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net https://unpkg.com;connect-src 'self' https://hi.busy.in https://crm.busy.in https://busy-client.busy.in https://script.google.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://td.doubleclick.net https://*.g.doubleclick.net https://www.googleadservices.com https://pagead2.googlesyndication.com https://www.google.com;frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://youtube.com https://script.google.com https://*.googleusercontent.com https://billing-ui.preview.emergentagent.com https://hi.busy.in https://hiqa1.pooraa.net https://hiqa2.pooraa.net https://histaging1.pooraa.net https://histaging2.pooraa.net;media-src 'self' https://busy-client.busy.in;manifest-src 'self';worker-src 'self' blob:;report-uri /csp-report 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://cdn.amplitude.com https://connect.facebook.net https://analytics.tiktok.com https://*.hotjar.com https://*.usercentrics.eu https://onelinksmartscript.appsflyersdk.com https://websdk.appsflyersdk.com https://cdn.paddle.com https://public.profitwell.com https://*.stripe.com https://www.google.com https://apis.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.paddle.com; font-src 'self' data: https://fonts.gstatic.com https://cdn.appsflyer.com; img-src 'self' data: blob: https://media.graphassets.com https://media.graphcms.com https://us-east-1.graphassets.com https://www.facebook.com https://analytics.tiktok.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://*.doubleclick.net https://*.googlesyndication.com https://*.hotjar.com https://*.usercentrics.eu https://*.appsflyersdk.com https://impressions.onelink.me https://*.google.com https://*.google.co.uk https://*.google.ie https://*.google.ca https://*.google.com.au https://*.google.co.nz https://*.google.de https://*.google.fr https://*.google.es https://*.google.it https://*.google.nl https://*.google.be https://*.google.pt https://*.google.se https://*.google.dk https://*.google.no https://*.google.fi https://*.google.ch https://*.google.at https://*.google.pl https://*.google.co.in https://*.google.co.id https://*.google.com.br https://*.google.com.mx https://*.google.co.za https://*.google.com.sg https://*.google.com.ph https://*.google.ae; connect-src 'self' https://api-us-east-1.graphcms.com https://*.hygraph.com https://proxy.paired.run https://*.amplitude.com https://cdn.paddle.com https://api.paddle.com https://sandbox-api.paddle.com https://*.stripe.com https://www.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://www.googleadservices.com https://*.doubleclick.net https://*.googlesyndication.com https://*.hotjar.com wss://*.hotjar.com https://*.hotjar.io wss://*.hotjar.io https://*.firebaseapp.com https://identitytoolkit.googleapis.com https://securetoken.googleapis.com https://www.googleapis.com https://www.google.com https://*.usercentrics.eu https://analytics.tiktok.com https://*.tiktokw.us https://*.appsflyersdk.com https://*.onelink.me https://unpkg.com; frame-src 'self' https://*.paddle.com https://*.stripe.com https://*.stripe.network https://www.youtube.com https://youtube.com https://*.firebaseapp.com https://www.google.com https://www.facebook.com https://td.doubleclick.net; worker-src 'self' blob:; manifest-src 'self'; report-uri /api/csp-report; report-to csp-endpoint 1
default-src 'self';         script-src 'self' 'unsafe-inline' https://www.googletagmanager.com                 https://i2l.pressebox.de https://assets.calendly.com;         style-src 'self' 'unsafe-inline' https://assets.calendly.com;         img-src 'self' data: blob: https:;         font-src 'self' data:;         connect-src 'self' https://www.google-analytics.com https://calendly.com;         frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com                 https://player.vimeo.com https://calendly.com https://www.loom.com                 https://scnem.com https://www.google.com;         media-src 'self' https:;         object-src 'none';         worker-src 'self' blob:;         base-uri 'self';         form-action 'self';         frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://accessibilityserver.org https://analytics.tiktok.com https://api.fouanalytics.com/api/ https://api.mapbox.com https://api.tiles.mapbox.com https://cdn.userway.org https://cdn77.api.userway.org https://cdnjs.cloudflare.com https://challenges.cloudflare.com https://connect.facebook.net/ https://connect.facebook.net//log/ https://linker.aidemsrv.com https://maps.googleapis.com https://stackpath.bootstrapcdn.com https://stream.aidemsrv.com https://tr.snapchat.com https://www.google-analytics.com https://www.googletagmanager.com https://snap.licdn.com/ https://sc-static.net/ https://js.adsrvr.org/ https://googleads.g.doubleclick.net/; script-src-elem 'self' 'unsafe-inline' https://player.vimeo.com/api/ https://api.fouanalytics.com/api/ https://cdnjs.cloudflare.com/ajax/libs/popper.js/ https://stackpath.bootstrapcdn.com/bootstrap/ https://cdnjs.cloudflare.com/ajax/libs/Swiper/ https://www.googletagmanager.com/ https://connect.facebook.net/ https://analytics.tiktok.com/i18n/pixel/ https://stream.aidemsrv.com/lib/ https://5523443.fls.doubleclick.net/ https://snap.licdn.com/ https://sc-static.net/ https://js.adsrvr.org https://googleads.g.doubleclick.net/ https://linker.aidemsrv.com https://tr.snapchat.com https://challenges.cloudflare.com/ https://accessibilityserver.org/ https://maps.googleapis.com/; style-src 'self' 'unsafe-inline' https://api.mapbox.com https://api.tiles.mapbox.com https://cdn.userway.org https://cdnjs.cloudflare.com https://fonts.googleapis.com https://p.typekit.net https://stackpath.bootstrapcdn.com https://use.fontawesome.com https://use.typekit.net; img-src 'self' data: blob: https://*.mapbox.com https://i.vimeocdn.com/video/ https://ad.doubleclick.net https://cdn.userway.org https://cnv.event.prod.bidr.io https://googleads.g.doubleclick.net/ https://larosasweb295.blob.core.windows.net https://maps.gstatic.com https://px.ads.linkedin.com/collect https://segment.prod.bidr.io https://tr.snapchat.com https://www.facebook.com https://www.google.co.cr https://www.google.com https://www.googletagmanager.com https://px.ads.linkedin.com/collect https://www.googleadservices.com/pagead/set_partitioned_cookie https://px4.ads.linkedin.com/; font-src 'self' data: https://cdn.userway.org https://fonts.gstatic.com https://p.typekit.net https://use.fontawesome.com https://use.typekit.net; connect-src 'self' properties https://ad.doubleclick.net https://cdn.jsdelivr.net/npm/@vime/ https://analytics.google.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://*.mapbox.com https://api.fouanalytics.com/api/ https://api.userway.org https://apix.b2c.com https://capig.stape.do https://cdn.userway.org https://cdn77.api.userway.org https://cdnjs.cloudflare.com https://challenges.cloudflare.com https://googleads.g.doubleclick.net/ https://insight.adsrvr.org https://maps.googleapis.com https://px.ads.linkedin.com/collect https://px.ads.linkedin.com/ https://stackpath.bootstrapcdn.com https://stats.g.doubleclick.net https://stream.aidemsrv.com https://tr.snapchat.com https://tr6.snapchat.com https://www.facebook.com https://www.google.com https://www.google-analytics.com https://www.googleadbuilder.Services.com https://www.googletagmanager.com wss://api.fouanalytics.com https://www.googleadservices.com https://vimeo.com https://connect.facebook.net/ https://region1.analytics.google.com/g/collect; frame-src https://5523443.fls.doubleclick.net https://cdn.userway.org https://challenges.cloudflare.com https://insight.adsrvr.org https://match.adsrvr.org https://tr.snapchat.com https://www.facebook.com https://www.googletagmanager.com https://player.vimeo.com; frame-ancestors 'self' https://larosafamilyfoundation.org; worker-src 'self' blob:; report-uri /api/cspreport 1
block-all-mixed-content; default-src 'self'; base-uri 'self'; object-src 'none'; manifest-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; script-src 'self' 'unsafe-inline' https://maps.googleapis.com https://www.googletagmanager.com https://*.cookiebot.com https://assets.sitescdn.net https://cdn.segmint.net https://cdn.bankingbridge.com https://cdn-4.convertexperiments.com https://www.onelink-edge.com https://talkdeskchatsdk.talkdeskapp.com https://app-script.monsido.com https://use.typekit.net https://www.recaptcha.net https://recaptcha.google.com https://*.roguecu.org; style-src 'self' 'unsafe-inline' https://assets.sitescdn.net https://use.typekit.net https://p.typekit.net https://fonts.googleapis.com https://www.recaptcha.net https://recaptcha.google.com https://*.roguecu.org; font-src 'self' data: https://*.typekit.net https://fonts.gstatic.com https://www.recaptcha.net https://recaptcha.google.com; img-src 'self' data: https://maps.googleapis.com https://maps.gstatic.com https://www.googletagmanager.com https://*.google-analytics.com https://p.typekit.net https://consent.cookiebot.com https://*.monsido.com https://*.talkdeskapp.com https://*.segmint.net https://auctionworx.blob.core.windows.net https://www.recaptcha.net https://recaptcha.google.com https://*.roguecu.org; connect-src 'self' https://*.googleapis.com https://*.gstatic.com https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.convertexperiments.com https://*.sitescdn.net https://*.yext.com https://*.yextapis.com https://*.segmint.net https://*.onelink-edge.com https://*.monsido.com https://*.cookiebot.com https://*.talkdeskapp.com wss://*.talkdeskapp.com https://pagead2.googlesyndication.com https://cdn.bankingbridge.com https://www.recaptcha.net https://recaptcha.google.com https://wyv31614.live.dynatrace.com; frame-src 'self' https://www.googletagmanager.com https://*.cookiebot.com https://*.talkdeskapp.com https://connect.segmint.net https://stage-rogue-credit-union.useast01.umbraco.io https://answers-embed.roguecu.com.pagescdn.com https://expert.leadfusion.com https://app.bankingbridge.com https://www.recaptcha.net https://recaptcha.google.com https://*.roguecu.org; frame-ancestors 'self' https://calc.tsbc.com https://content.tsbc.com https://www.recaptcha.net https://recaptcha.google.com https://*.roguecu.org; form-action 'self' https://psa.digitalinsight.com https://www.roguecuonline.org https://www.recaptcha.net https://recaptcha.google.com https://*.roguecu.org 1
img-src https://higherlogicdownload.s3.amazonaws.com/AHEAD/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/AHEAD/ https://img.youtube.com/vi/ https://static.filestackapi.com/picker/ https://d2x5ku95bkycr3.cloudfront.net https://higherlogiclongterm.s3.amazonaws.com/AHEAD/ blob: https://d132x6oi8ychic.cloudfront.net 'self'; style-src https://d132x6oi8ychic.cloudfront.net 'unsafe-inline' https://higherlogiccloudfront.s3.amazonaws.com https://cdn.jsdelivr.net/jquery.slick/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://d2x5ku95bkycr3.cloudfront.net/ https://ajax.googleapis.com/ajax/libs/jqueryui/ https://use.fortawesome.com/ https://cdn.higherlogic.com/ai-assistant https://static.filestackapi.com/picker/ https://fonts.googleapis.com/ https://d3uf7shreuzboy.cloudfront.net/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/AHEAD/ https://higherlogicdownload.s3.amazonaws.com/AHEAD/ https://higherlogiclongterm.s3.amazonaws.com/AHEAD/ 'self'; font-src https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogiccloudfront.s3.amazonaws.com https://higherlogicdownload.s3.amazonaws.com/AHEAD/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/AHEAD/ 'self' https://higherlogiclongterm.s3.amazonaws.com/AHEAD/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://d2x5ku95bkycr3.cloudfront.net https://d132x6oi8ychic.cloudfront.net data:; script-src-elem https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d3uf7shreuzboy.cloudfront.net/ https://static.filestackapi.com/picker/ https://cdn.higherlogic.com/ai-assistant https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d2x5ku95bkycr3.cloudfront.net/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://www.gstatic.com/recaptcha/ https://static.filestackapi.com/filestack-js/ 'self' https://ajax.aspnetcdn.com/ajax/ 'unsafe-eval' 'unsafe-inline'; media-src https://higherlogiclongterm.s3.amazonaws.com/AHEAD/ https://higherlogicdownload.s3.amazonaws.com/AHEAD/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/AHEAD/ https://higherlogicstream.s3.amazonaws.com/AHEAD/ 'self' https://d132x6oi8ychic.cloudfront.net; script-src https://higherlogiclongterm.s3.amazonaws.com/AHEAD/ https://higherlogicdownload.s3.amazonaws.com/AHEAD/ https://ajax.aspnetcdn.com/ajax/ https://cdn.jsdelivr.net/jquery.slick/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d132x6oi8ychic.cloudfront.net https://cdn.informz.net 'unsafe-eval' https://use.fortawesome.com/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/AHEAD/ https://cdnjs.cloudflare.com/ajax/libs/prism/ 'unsafe-inline' https://d2x5ku95bkycr3.cloudfront.net/ https://higherlogiccloudfront.s3.amazonaws.com https://static.filestackapi.com https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d3uf7shreuzboy.cloudfront.net/ 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://api.connectedcommunity.org/ 'self' https://www.youtube.com/embed/ https://*.kb.us.higherlogic.com; connect-src https://upload.filestackapi.com https://static.filestackapi.com https://cloud.filestackapi.com/folder/list/ 'self' https://hl-managedservices.informz.net https://d3uf7shreuzboy.cloudfront.net/ blob:; worker-src 'self'; default-src 'self'; base-uri 'self'; frame-ancestors https://*.connectedcommunity.org/ 'self'; object-src 'none'; manifest-src 'self'; 1
default-src 'self'; script-src 'self'; script-src-attr 'none'; style-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self' https://cms.siliconvalleyinvestclub.com https://platform.siliconvalleyinvestclub.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://api.freecustomer.in https://www.googletagmanager.com https://www.google-analytics.com https://static.hotjar.com https://www.clarity.ms https://ajax.googleapis.com https://code.jquery.com https://pay.billdesk.com https://mmdconnect.appspot.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.fontawesome.com https://cdnjs.cloudflare.com https://pay.billdesk.com; font-src 'self' data: https://fonts.gstatic.com https://use.fontawesome.com https://cdnjs.cloudflare.com; frame-src 'self' https://www.youtube.com https://www.google.com https://*.billdesk.com; connect-src 'self' https://api.freecustomer.in https://rest.qikberry.ai https://www.google-analytics.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://www.clarity.ms https://*.billdesk.com; img-src 'self' data: https:; 1
worker-src none:; font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net *.tawk.to *.sirv.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com none: 'self' 'unsafe-inline'; frame-ancestors none: 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com none: 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://www.gstatic.com https://translate.googleapis.com https://fonts.gstatic.com http://translate.google.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com *.sirv.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://translate.googleapis.com http://translate.google.com https://translate-pa.googleapis.com *.disqus.com *.avada.io *.shopify.com cdn.maptiler.com *.tawk.to none: report-sample: *.sirv.com player.vimeo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com downloads.mailchimp.com www.gstatic.com *.fontawesome.com https://fonts.bunny.net cdn.maptiler.com *.tawk.to unsafe-inline: *.sirv.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.sirv.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://translate.googleapis.com *.googleapis.com *.googleadservices.com *.googletagmanager.com  *.sandbox.paypal.com *.paypalobjects.com https://get.geojs.io *.avada.io *.tawk.to wss://*.tawk.to none: *.sirv.com *.youtube.com blob: 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com * unsafe-inline: unsafe-eval: block-all-mixed-content: 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp.threatview.app/report;; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.cloudflare.com *.twitter.com *.fontawesome.com *.bootstrapcdn.com maxcdn.bootstrapcdn.com *.klarnacdn.net https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.instagram.com www.google.com *.google.com/ *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.twitter.com *.addthis.com *.klarna.com *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.trustpilot.com *.weltpixel.com 'self' 'unsafe-inline'; img-src 'self' data: *.adobedtm.com *.omtrdc.com dpm.demdex.net *.everesttech.com *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.swagger.io *.googleapis.com *.cdninstagram.com data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com *.cloudflare.com *.googleadservices.com *.twitter.com *.cloudfront.net google.com google.ro *.google.ro *.coriolan.ro *.demdex.com *.magentocommerce.com *.paypalobjects.com *.ytimg.com *.braintreegateway.com *.fbcdn.net *.amazonaws.com *.mailchimp.com https://www.magezon.com *.meetanshi.com *.pinterest.com *.mapbox.com *.webgi.xyz *.ijewel3d.com *.nivodaapi.net magefan.com cm.magefan.com *.clarity.ms *.bing.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://nivoda-images.s3.eu-west-2.amazonaws.com https://nivoda-images.s3.amazonaws.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.klarnaservices.com https://firebasestorage.googleapis.com https://api.mapbox.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com *.instagram.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.vimeo.com *.google.com/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.cloudflare.com *.twitter.com googletagmanager.com *.trustedshops.com *.fontawesome.com *.addthis.com s7.addthis.com m.addthis.com z.moatads.com *.addthisedge.com graph.facebook.com widgets.pinterest.com chimpstatic.com www.googleadsservices.com *.cardinalcommerce.com *.paypal.com *.zdassets.com *.coriolan.ro *.ijewel3d.com https://unpkg.com/ *.googleadservices.com *.ccdc02.com *.adobe.io *.clarity.ms *.klarna.com *.klarnacdn.net x.klarnacdn.net *.meetanshi.com self downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.klarnaservices.com *.avada.io *.shopify.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com *.trustpilot.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.cloudflare.com *.twitter.com *.typekit.net *.fontawesome.com *.bootstrapcdn.com *.coriolan.ro maxcdn.bootstrapcdn.com downloads.mailchimp.com *.klarnacdn.net https://fonts.bunny.net *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com *.cloudflare.com *.twitter.com *.cardinalcommerce.com *.amazon.com *.yotpo.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonservices.com *.amazonservices.co.uk *.amazonservices.co.jp *.amazonservices.jp *.amazonservices.it *.amazonservices.fr *.amazonservices.es *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com *.stripe.com x.klarnacdn.net *.klarna.com *.klarnaevt.com *.playground.klarna.com *.coriolan.ro odoo.coriolan.ro:8443 profile.coriolan.ro *.googletagmanager.com *.zdassets.com *.zendesk.com *.zopim.com wss://widget-mediator.zopim.com *.trustpilot.com *.jsdelivr.net *.ijewel3d.com *.clarity.ms *.klarnacdn.net form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.klarnaservices.com https://get.geojs.io *.avada.io klarna.com *.link.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://*.stripe.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://www.youtube.com https://s.ytimg.com https://analytics.ahrefs.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; media-src 'self' blob: https:; worker-src 'self'; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https://*.stripe.com https://www.youtube.com https://www.youtube-nocookie.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
font-src *.fontawesome.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.sagepay.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com *.sagepay.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com maps.gstatic.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com *.sagepay.com maps.googleapis.com www.gstatic.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.fontawesome.com www.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.sagepay.com www.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-ASsc8Wp4pzf_zC5434ug5w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com secure.nmi.com secure.networkmerchants.com collectcheckout.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com secure.nmi.com secure.networkmerchants.com collectcheckout.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.weltpixel.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * https://*.online-metrix.net https://imgs.signifyd.com secure.nmi.com secure.networkmerchants.com collectcheckout.com https://www.youtube.com https://ct.pinterest.com https://pixel-sync.sitescout.com *.pitai.io 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https://helloextend-static-assets.s3.amazonaws.com https://extendcoreoffersdemo-offersthemelogobucketeb21afa-19jnurg0a0o17.s3.amazonaws.com https://s3.amazonaws.com https://extendcoreoffersprod-offersthemelogobucketeb21afa-1lr7le13dvgtp.s3.amazonaws.com magefan.com cm.magefan.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net assets.secure.checkout.visa.com sandbox.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: *.facebook.com https://imgs.signifyd.com https://*.online-metrix.net www.mypillow.com https://www.mypillow.com https://trkn.us https://bat.bing.com https://obs.segreencolumn.com https://pixel.sitescout.com *.riskified.com *.pitai.io *.listrakbi.com https://mediacdn.espssl.com *.google.com *.google.pl https://static-na.payments-amazon.com https://t.co/ https://analytics.twitter.com/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://*.helloextend.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net secure.nmi.com secure.networkmerchants.com collectcheckout.com data: *.mypillow.com *.listrakbi.com https://bat.bing.com https://analytics.tiktok.com *.zdassets.com https://www.youtube.com https://sdk.helloextend.com https://static.cloudflareinsights.com https://script.hotjar.com *.listrak.com https://s.pinimg.com https://www.google-analytics.com/analytics.js https://obs.segreencolumn.com https://franktpin.pitai.io https://beacon.riskified.com https://tags.srv.stackadapt.com *.basis.net https://ct.pinterest.com https://pixel-sync.sitescout.com https://a.ads.rmbl.ws https://sandbox-api.epicpay.com *.hotjar.com *.noibu.com *.segreencolumn.com https://static.ads-twitter.com/ https://api.epicpay.com/ https://maps.googleapis.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com assets.braintreegateway.com *.googleapis.com *.gstatic.com tagmanager.google.com secure.nmi.com https://tags.srv.stackadapt.com *.listrakbi.com https://kit.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https://*.helloextend.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.facebook.net https://imgs.signifyd.com secure.nmi.com secure.networkmerchants.com collectcheckout.com https://input.noibu.com https://obs.segreencolumn.com wss://input.noibu.com *.zdassets.com *.analytics.google.com https://ct.pinterest.com *.pitai.io *.listrak.com *.listrakbi.com https://tags.srv.stackadapt.com *.riskified.com *.breadgateway.net *.doubleclick.net *.hotjar.io https://bat.bing.com wss://ws.hotjar.com/ https://mystorellc.zendesk.com/ https://maps.googleapis.com/ https://cdn.noibu.com/collect-worker.js 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://challenges.cloudflare.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com https://challenges.cloudflare.com https://www.googletagmanager.com https://static.zdassets.com https://cdn.eu.trustpayments.com https://adscool.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https:; form-action 'self' https:; frame-ancestors 'none'; base-uri 'self'; object-src 'none'; worker-src 'self' blob:; report-uri https://log.bamio.com/api/6/security/?sentry_key=7cfd2d13d2d1d58a4438469c10880036&sentry_environment=production 1
object-src 'none';base-uri 'self';script-src 'nonce-CmgYpwpoe1PvGMsfPKgumA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; img-src 'self' https://s1749.t.eloqua.com data: 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://img.en25.com/i/elqCfg.min.js https://img.en25.com/i/elqCfg.min.js https://www.googletagmanager.com/gtm.js https://www.google-analytics.com/analytics.js ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; connect-src https://www.google-analytics.com; font-src 'self' https://fonts.gstatic.com; 1
font-src *.fontawesome.com *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.authorize.net *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.authorize.net *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io magefan.com cm.magefan.com *.alothemes.com *.magepow.com *.gstatic.com *.facebook.com *.reddit.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ widget.freshworks.com m2epro.freshdesk.com *.alothemes.com *.magepow.com *.authorize.net *.cloudflare.com https://www.googletagmanager.com tagmanager.google.com analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com widget.freshworks.com m2epro.freshdesk.com *.alothemes.com *.magepow.com *.authorize.net *.google-analytics.com analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; child-src 'self' https://www.google.com https://consentcdn.cookiebot.com; connect-src 'self' https://maps.googleapis.com https://consentcdn.cookiebot.com https://region1.google-analytics.com https://app.mapsemble.com https://tiles.mapsemble.com https://protomaps.github.io https://sst.bijzonderplekje.nl https://sst.besonderefleckchen.de https://api.mapbox.com https://*.tiles.mapbox.com https://translate.googleapis.com; font-src 'self' data: blob: https://cdn.jsdelivr.net https://*.gstatic.com; form-action 'self'; frame-ancestors 'self'; frame-src 'self' https://www.google.com https://consentcdn.cookiebot.com https://challenges.cloudflare.com https://sst.bijzonderplekje.nl https://sst.besonderefleckchen.de; img-src 'self' data: https://maps.googleapis.com https://s3.eu-west-1.amazonaws.com https://log.pinterest.com https://imgsct.cookiebot.com https://www.googletagmanager.com https://protomaps.github.io https://tile.openstreetmap.org https://secure.gravatar.com https://api.mapbox.com https://*.gstatic.com; media-src 'self'; object-src 'self'; script-src 'self' https://www.googletagmanager.com https://www.google.com https://maps.googleapis.com https://assets.pinterest.com https://*.gstatic.com https://consent.cookiebot.com https://www.google-analytics.com https://consentcdn.cookiebot.com https://js.createsend1.com https://app.mapsemble.com https://sst.bijzonderplekje.nl https://sst.besonderefleckchen.de https://translate.google.com https://translate.googleapis.com https://challenges.cloudflare.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://app.mapsemble.com https://cdn.jsdelivr.net https://*.gstatic.com; style-src-attr 'unsafe-inline'; worker-src 'self' 1
font-src cdn.jsdelivr.net https://fonts.gstatic.com cdn.almapay.com fonts.googleapis.com fonts.gstatic.com *.fontawesome.com applepay.cdn-apple.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://connect-v2.fintecture.com https://connect-v2-sbx.fintecture.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.getalma.eu www.google.com *.avis-verifies.com https://www.googletagmanager.com/ secure-gateway.hipay-tpp.com *.hipay.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.payplug.com *.dalenys.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com lumao.eu *.google.fr *.google.com *.myspectro.io axeptio.imgix.net favicons.axept.io bat.bing.com cdn.wisepops.net *.avis-verifies.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ cdn.doofinder.com openstreetmap.org maps.googleapis.com maps.gstatic.com https://assets.fintecture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://secure-magenta.dalenys.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.jsdelivr.net www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com *.doofinder.com *.myspectro.io static.axept.io bat.bing.com www.clarity.ms cdn.segment.com wisepops.net cdn.wisepops.net cdn.wisepops.com *.avis-verifies.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ cdn.doofinder.com secure-gateway.hipay-tpp.com *.hipay.com mpsnare.iesnare.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ widgets.rr.skeepers.io https://api-product-reviews.rr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ www.gstatic.com www.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://secure-magenta.dalenys.com applepay.cdn-apple.com api-qa.payplug.com cdn-qa.payplug.com api.payplug.com cdn.payplug.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.jsdelivr.net https://fonts.googleapis.com *.doofinder.com *.hipay.com fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com unsafe-inline assets.braintreegateway.com https://secure-magenta.dalenys.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ data: mpsnare.iesnare.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.getalma.eu *.doofinder.com  *.google-analytics.com *.doubleclick.net pagead2.googlesyndication.com tracking.myspectro.io client.axept.io api.axept.io cdn.segment.com api.segment.io *.clarity.ms wisepops.net activity.wisepops.net tracking.wisepops.net wisepops.com activity.wisepops.com tracking.wisepops.com *.hipay-tpp.com bat.bing.com *.avis-verifies.com *.cloudflare.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ wss://*.doofinder.com *.hipay.com wss://mpsnare.iesnare.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ widgets.rr.skeepers.io/ https://api-product-reviews.rr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com t.elasticsuite.io *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; img-src 'self' data:; media-src 'self'; style-src 'self'; font-src 'self'; script-src 'self'; object-src 'none'; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://www.gstatic.com https://accounts.google.com https://apis.google.com https://*.google.com https://*.googleusercontent.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://www.gstatic.com https://accounts.google.com https://apis.google.com https://*.google.com https://*.googleusercontent.com; frame-src 'self' https://accounts.google.com https://content.googleapis.com https://*.google.com https://*.googleusercontent.com https://drive.google.com; connect-src 'self' https://accounts.google.com https://www.googleapis.com https://content.googleapis.com https://*.google.com https://*.googleapis.com https://*.googleusercontent.com; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; 1
script-src https://higherlogiccloudfront.s3.amazonaws.com https://hl-prod-ca-oc-long-term.s3.amazonaws.com/CNA/ https://hl-prod-ca-oc-download.s3.amazonaws.com/CNA/ https://d1u9edeg3iwvk4.cloudfront.net https://cdn.jsdelivr.net/jquery.slick/ 'unsafe-inline' https://d2x5ku95bkycr3.cloudfront.net/ https://ajax.aspnetcdn.com/ajax/ https://use.fortawesome.com/ https://cdn.informz.net https://d3uf7shreuzboy.cloudfront.net/ https://static.filestackapi.com 'self' https://hl-prod-ca-oc-holding-pen.s3.amazonaws.com/CNA/ 'unsafe-eval' https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://cdnjs.cloudflare.com/ajax/libs/prism/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js; font-src https://hl-prod-ca-oc-long-term.s3.amazonaws.com/CNA/ https://d2x5ku95bkycr3.cloudfront.net https://fonts.googleapis.com/ https://higherlogiccloudfront.s3.amazonaws.com https://maxcdn.bootstrapcdn.com/font-awesome/ https://hl-prod-ca-oc-download.s3.amazonaws.com/CNA/ https://hl-prod-ca-oc-holding-pen.s3.amazonaws.com/CNA/ 'self' https://fonts.gstatic.com/ https://d1u9edeg3iwvk4.cloudfront.net data: https://cdn.jsdelivr.net/jquery.slick/; script-src-elem https://static.filestackapi.com/filestack-js/ https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://ajax.aspnetcdn.com/ajax/ https://static.filestackapi.com/picker/ 'unsafe-eval' 'unsafe-inline' https://cdn.higherlogic.com/ai-assistant https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d2x5ku95bkycr3.cloudfront.net/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d3uf7shreuzboy.cloudfront.net/ https://www.gstatic.com/recaptcha/ https://cdnjs.cloudflare.com/ajax/libs/prism/ 'self' https://securepubads.g.doubleclick.net/; media-src https://hl-prod-ca-oc-long-term.s3.amazonaws.com/CNA/ https://hl-prod-ca-oc-download.s3.amazonaws.com/CNA/ https://hl-prod-ca-oc-stream.s3.amazonaws.com/CNA/ https://d1u9edeg3iwvk4.cloudfront.net https://hl-prod-ca-oc-holding-pen.s3.amazonaws.com/CNA/ 'self'; style-src https://cdnjs.cloudflare.com/ajax/libs/prism/ https://use.fortawesome.com/ 'unsafe-inline' https://cdn.jsdelivr.net/jquery.slick/ https://d3uf7shreuzboy.cloudfront.net/ https://hl-prod-ca-oc-download.s3.amazonaws.com/CNA/ 'self' https://ajax.googleapis.com/ajax/libs/jqueryui/ https://hl-prod-ca-oc-holding-pen.s3.amazonaws.com/CNA/ https://higherlogiccloudfront.s3.amazonaws.com https://static.filestackapi.com/picker/ https://d2x5ku95bkycr3.cloudfront.net/ https://hl-prod-ca-oc-long-term.s3.amazonaws.com/CNA/ https://fonts.googleapis.com/ https://cdn.higherlogic.com/ai-assistant https://d1u9edeg3iwvk4.cloudfront.net; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://www.youtube.com/embed/ https://api.connectedcommunity.org/ 'self' https://*.kb.ca.higherlogic.com https://securepubads.g.doubleclick.net/ https://cm.g.doubleclick.net/ https://*.googlesyndication.com/ https://ep2.adtrafficquality.google/ https://api.onlinecommunity.ca/ https://t.sharethis.com/; connect-src https://upload.filestackapi.com https://static.filestackapi.com https://cloud.filestackapi.com/folder/list/ 'self' https://hl-managedservices.informz.net https://d3uf7shreuzboy.cloudfront.net/ blob: https://securepubads.g.doubleclick.net/ https://pagead2.googlesyndication.com/ https://cm.g.doubleclick.net/; manifest-src 'self'; img-src https://cdn.jsdelivr.net/jquery.slick/ https://hl-prod-ca-oc-long-term.s3.amazonaws.com/CNA/ https://d1u9edeg3iwvk4.cloudfront.net https://hl-prod-ca-oc-download.s3.amazonaws.com/CNA/ https://static.filestackapi.com/picker/ https://img.youtube.com/vi/ blob: 'self' https://d2x5ku95bkycr3.cloudfront.net https://hl-prod-ca-oc-holding-pen.s3.amazonaws.com/CNA/; object-src 'none'; worker-src 'self'; default-src 'self'; base-uri 'self'; frame-ancestors 'self' https://*.connectedcommunity.org/; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; media-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self' 1
font-src *.googleapis.com *.gstatic.com data: maxcdn.bootstrapcdn.com 'self' data: https://maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://accounts.google.com https://www.facebook.com https://login.live.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com *.google.com/ *.weltpixel.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://sync.smartadserver.com https://tracking.i-goal.com.br 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ storage.googleapis.com *.google.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com https://static.i-goal.com.br https://static.sizebay.technology https://vfr-v3-production.sizebay.technology https://storage.googleapis.com https://js.dito.com.br 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com *.gstatic.com unsafe-inline assets.braintreegateway.com *.googleapis.com tagmanager.google.com https://unpkg.com https://static.sizebay.technology 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com https://login.plataformasocial.com.br *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app https://vfr-v3-production.sizebay.technology 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; img-src https://cdn2.mixed.com.br assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com https://www.magezon.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.hsforms.net *.hsforms.com 'self' data: *.facebook.com *.reddit.com https://static.sizebay.technology https: data: 'self' 'unsafe-inline'; 1
default-src 'self' https://accesswidget-log-receiver.acsbapp.com https://cdn.acsbapp.com https://eu-cdn.acsbapp.com https://eu.acsbapp.com https://syndication.teleborsa.it https://ka-f.fontawesome.com/ https://*.animasgr.it https://funds.previnet.it https://www.epheso.com/ https://funds.previnet.it https://www.google.com/ https://*.iubenda.com/ data:; connect-src 'self' https://ad.doubleclick.net https://pagead2.googlesyndication.com https://www.googletagmanager.com https://px.ads.linkedin.com/ https://www.google.it/ https://www.google.com/ https://www.googleadservices.com/ https://pagead2.googlesyndication.com https://cdn.acsbapp.com/ https://cdn.linkedin.oribi.io https://eu.acsbapp.com https://eu-process.acsbapp.com https://eu-cdn.acsbapp.com https://process.acsbapp.com https://cdn.acsbapp.com https://www.google-analytics.com https://*.iubenda.com https://ka-f.fontawesome.com/ https://stats.g.doubleclick.net https://plausible.io https://vimeo.com https://www.google.com/recaptcha/ https://anima-forms-api.apps.animasgr.it/ https://googleads.g.doubleclick.net/; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://snap.licdn.com https://eu.acsbapp.com https://acsbapp.com https://kit.fontawesome.com https://www.epheso.com/ https://funds.previnet.it https://www.gstatic.com/ https://*.iubenda.com/ https://www.google.com/ https://assets.contactlab.it https://chatbot-prod.animasgr.it https://www.googletagmanager.com https://www.google-analytics.com https://ssl.p.jwpcdn.com/ https://*.animasgr.it https://plausible.io https://player.vimeo.com/; script-src-elem 'self' 'unsafe-inline' data: https://googleads.g.doubleclick.net/ https://www.googletagmanager.com/ https://player.vimeo.com/ https://www.google.com/ https://www.gstatic.com/ https://*.iubenda.com/ https://plausible.io/ https://eu.acsbapp.com/ https://snap.licdn.com/; img-src 'self' data: https://www.googletagmanager.com https://www.linkedin.com/ https://googleads.g.doubleclick.net/ https://px.ads.linkedin.com https://eu-cdn.acsbapp.com https://cdn.acsbapp.com https://www.google.com/ https://www.google.it/ https://www.google-analytics.com/ https://prd.jwpltx.com/ https://www.googletagmanager.com/ https://*.vimeocdn.com/; media-src 'self' data: blob: https://eu-web1.acsbapp.com https://web1.acsbapp.com https://*.animasgr.it; frame-src 'self' https://funds.previnet.it/ https://widget.spreaker.com/ https://player.vimeo.com/ https://www.google.com/recaptcha/ https://syndication.teleborsa.it; 1
font-src www.paypalobjects.com *.cloudflare.com *.bootstrapcdn.com *.gstatic.com *.googleapis.com 'unsafe-inline' data: *.zesso.com fonts.googleapis.com fonts.gstatic.com https://widgets.trustedshops.com https://integrations.etrusted.com *.typekit.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.cardinalcommerce.com  *.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ https://*.dpdconnect.nl *.demdex.net *.googletagmanager.com *.doubleclick.net/ *.zesso.com *.weltpixel.com *.multisafepay.com https://pay.google.com *.doubleclick.net *.typeform.com *.pinterest.com *.cookiebot.com *.google.com *.adobe.com  *.paypal.com *.dpdconnect.nl *.cardinalcommerce.com  *.facebook.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com *.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com *.trustedshops.com *.clarity.ms *.roeye.com *.zesso.com imgsct.cookiebot.com cdn.cookiepal.io cookiepal-assets.s3.amazonaws.com google.fr zenaps.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com *.multisafepay.com https://widgets.trustedshops.com https://integrations.etrusted.com *.gstatic.com *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com *.bing.com www.google.be *.pinterest.com *.googleadservices.com *.paypal.com *.google.be data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com https://*.dpdconnect.nl *.cloudflare.com *.twitter.com *.fontawesome.com *.trustedshops.com chimpstatic.com *.google.com *.gstatic.com *.clarity.ms *.hotjar.com *.stape.io *.zesso.com lantern.roeyecdn.com ct.pinterest.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.multisafepay.com https://pay.google.com https://widgets.trustedshops.com https://integrations.etrusted.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com *.cookiebot.com www.dwin1.com *.pinimg.com *.bing.com *.google-analytics.com *.paypal.com *.googleapis.com *.dpdconnect.nl  'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.cloudflare.com *.fontawesome.com *.bootstrapcdn.com *.mailchimp.com *.jsdelivr.net 'unsafe-inline' data: *.googletagmanager.com *.zesso.com fonts.googleapis.com *.multisafepay.com https://widgets.trustedshops.com https://integrations.etrusted.com *.tagmanager.google.com *.typeform.com *.typekit.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://maps.googleapis.com https://player.vimeo.com *.cloudflare.com *.demdex.net *.clarity.ms *.zesso.com bat.bing.net cdn.cookiepal.io google.com maps.googleapis.com *.multisafepay.com *.trustedshops.com *.etrusted.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com www.google.com *.pinterest.com *.bing.com *.cookiebot.com *.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://cdn-cookieyes.com https://us-assets.i.posthog.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https://www.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://cdn-cookieyes.com https://*.cookieyes.com https://us.i.posthog.com https://us-assets.i.posthog.com; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; report-uri /csp-report; report-to csp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: *.cloudfront.net *.fontawesome.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.fls.doubleclick.net www.facebook.com consentcdn.cookiebot.eu td.doubleclick.net secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com js.mollie.com https://plumrocket.com https://t.pepperjamnetwork.com https://*.dwin1.com https://*.awin1.com https://*.zenaps.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://images.unsplash.com magefan.com cm.magefan.com stats.g.doubleclick.net *.doubleclick.net *.g.doubleclick.net www.facebook.com *.google.com *.google.de *.googletagmanager.com *.googleusercontent.com bat.bing.com c.clarity.ms c.bing.com *.trustedshops.com *.cookiebot.com integrations.etrusted.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com *.disqus.com https://img.youtube.com https://www.mollie.com https://shareasale.com/sale.cfm https://track.linksynergy.com https://www.bizrate.com https://*.dwin1.com https://*.awin1.com https://*.zenaps.com https://track.webgains.com https://prf.hn https://track.flexlinks.com https://scripts.affiliatefuture.com https://t.powerreviews.com https://match.sharethrough.com https://cm.g.doubleclick.net https://x.bidswitch.net https://ib.adnxs.com https://rtb-csync.smartadserver.com https://sync-t1.taboola.com https://visitor.omnitagjs.com https://r.casalemedia.com https://gum.criteo.com https://jadserve.postrelease.com https://id5-sync.com https://ad.360yield.com https://matching.ivitrack.com https://contextual.media.net https://exchange.mediavine.com https://sync.outbrain.com https://simage2.pubmatic.com https://pixel.rubiconproject.com https://criteo-sync.teads.tv https://criteo-partners.tremorhub.com https://eb2.3lift.com https://ad.yieldlab.net https://sync-criteo.ads.yieldmo.com https://e1.emxdgt.com https://sync.1rx.io https://dis.criteo.com https://dpm.demdex.net https://ps.eyeota.net https://public-prod-dspcookiematching.dmxleo.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com *.gstatic.com https://maps.googleapis.com https://player.vimeo.com connect.facebook.net *.googletagmanager.com *.google-analytics.com www.gstatic.com bam.nr-data.net bam.eu01.nr-data.net js-agent.newrelic.com tagmanager.google.com consent.cookiebot.com consentcdn.cookiebot.com bat.bing.com www.clarity.ms *.trustedshops.com integrations.etrusted.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com *.disqus.com https://cdn.jsdelivr.net js.mollie.com https://*.dwin1.com https://intljs.rmtag.com https://cdn.avmws.com https://images.bizrate.com https://*.awin1.com https://*.zenaps.com https://the.sciencebehindecommerce.com https://swrap.tradedoubler.com https://analytics.optimalpeople.fr https://www.linkconnector.com https://d3v27wwd40f0xu.cloudfront.net https://static.criteo.net https://sslwidget.criteo.com https://*.affiliatefuture.com https://static.powerreviews.com https://analytics.webgains.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com tagmanager.google.com integrations.etrusted.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com https://cdn.jsdelivr.net *.fontawesome.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com www.google-analytics.com stats.g.doubleclick.net bam.nr-data.net bam.eu01.nr-data.net *.googletagmanager.com *.maps.googleapis.com *.google.de *.gstatic.com consentcdn.cookiebot.com googleads.g.doubleclick.net www.facebook.com bat.bing.com *.clarity.ms integrations.etrusted.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com https://shareasale.com/sale.cfm https://analytics.optimalpeople.fr https://measurement-api.criteo.com https://api.webgains.io https://the.sciencebehindecommerce.com https://*.wepowerconnections.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.nosto.com *.nos.to *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net www.facebook.com platform.twitter.com *.nosto.com *.nos.to landofcoder.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.google.co.uk *.google.com *.google.co.in *.googletagmanager.com www.gstatic.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com *.nosto.com *.nos.to https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com ssl.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.cloudflareinsights.com *.googletagmanager.com *.google-analytics.com *.g.doubleclick.net *.gstatic.com *.line-scdn.net cookiecdn.com s7.addthis.com connect.facebook.net twitter.com platform.twitter.com *.nosto.com *.nos.to landofcoder.com *.googleapis.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com *.nosto.com *.nos.to *.googleapis.com *.google.com https://fonts.bunny.net assets.braintreegateway.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.cloudflareinsights.com *.googletagmanager.com *.g.doubleclick.net *.gstatic.com *.cookiewow.com ekr.zdassets.com/ *.nosto.com *.nos.to landofcoder.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.gstatic.com 'self' data: v2.zopim.com *.zopim.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://seo.mageplaza.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.storyblok.com *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.weltpixel.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.facebook.com *.hotjar.com *.doubleclick.net https://e.issuu.com v2assets.zopim.io *.pinterest.com *.wesupply.xyz https://wesupplylabs.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com www.feedoptimise.com cdn.feedoptimise.com https://firebasestorage.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.storyblok.com *.hsforms.net *.hsforms.com 'self' data: *.monsoonconsulting.dev *.cloudwaysapps.com *.facebook.com api.feefo.com *.google.com *.google.ie *.google.pt *.google.fr *.google.com.br *.zopim.com *.zopim.io *.pinterest.com *.cookiepro.com *.getamigo.io *.goodgrowth.tech *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.feedoptimise.com cdn.feedoptimise.com *.avada.io *.shopify.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.autoaddress.ie *.storyblok.com *.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com *.cloudwaysapps.com *.hotjar.com connect.facebook.net api.feefo.com register.feefo.com v2.zopim.com *.klaviyo.com widget-mediator.zopim.com browser-update.org static.zdassets.com *.doubleclick.net *.googletagmanager.com *.cookiepro.com *.pinimg.com *.pinterest.com *.getamigo.io *.goodgrowth.tech *.cloudflare.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net https://static.klaviyo.com *.storyblok.com *.googleapis.com *.gstatic.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://get.geojs.io *.avada.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.autoaddress.ie *.googleapis.com *.gstatic.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.analytics.google.com *.feefo.com ekr.zdassets.com wss://widget-mediator.zopim.com/ *.doubleclick.net *.klaviyo.com *.cookiepro.com *.google.com *.getamigo.io *.cloudwaysapps.com *.hotjar.io *.facebook.com *.zopim.com *.paypal.com *.pinterest.com *.goodgrowth.tech https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; media-src 'self' https: blob:; connect-src 'self' https: wss:; frame-src 'self' https:; upgrade-insecure-requests 1
worker-src 'self' blob: 'self' https://*.oppwa.com; font-src cash-f.squarecdn.com https://*.gstatic.com *.klarnacdn.net *.fontawesome.com *.gstatic.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://*.bootstrapcdn.com https://*.typekit.net https://prilla.com *.fonts.googleapis.com data: *.cloudflare.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.adyen.com https://*.qliro.com https://*.vipps.no https://*.trustly.com https://*.ideal.nl https://*.apple.com https://*.unzer.com https://*.heidelpay.com 'self' https://www.facebook.com https://*.techlab-cdn.com *.yotpo.com https://*.qit.nu 'self' 'unsafe-inline'; frame-ancestors 'self' 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com https://www.google.com/recaptcha/ * *.adyen.com *.klarna.com https://*.qliro.com *.trustpilot.com 'self' *.google.com https://*.gstatic.com https://*.g.doubleclick.net https://www.facebook.com https://policy.app.cookieinformation.com https://*.online-metrix.net https://*.paypal.com https://*.paypalobjects.com https://applepay.cdn-apple.com https://pay.google.com https://*.techlab-cdn.com www.xtento.com *.addthis.com *.pinterest.com www.facebook.com platform.twitter.com *.yotpo.com https://*.qit.nu https://*.cookiebot.eu https://*.tradedoubler.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com validator.swagger.io * https://*.gstatic.com *.adyen.com cembrapay.ch https://info.dibs.se https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.agechecked.com https://firebasestorage.googleapis.com 'self' https://*.google.com https://*.google-analytics.com https://*.googletagmanager.com https://*.doubleclick.net https://*.googlesyndication.com *.paypal.com https://*.paypalobjects.com https://*.trustpilot.com https://*.facebook.com https://*.nr-data.net https://*.hotjar.io https://*.adform.net https://*.amazon-adsystem.com https://*.rubiconproject.com https://*.pubmatic.com https://*.openx.net https://*.adroll.com https://*.outbrain.com https://*.taboola.com https://*.usercentrics.eu https://policy.app.cookieinformation.com https://*.typekit.net https://*.bootstrapcdn.com https://*.fontawesome.com https://*.kargo.com https://*.zeotap.com https://*.rfihub.com https://*.imgstatics.com https://*.techlab-cdn.com www.xtento.com cdn.xtento.com *.cloudflare.com https://cdn.klarna.com *.vimeocdn.com https://s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com *.cdninstagram.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com *.yotpo.com https://*.qliro.com https://*.qit.nu https://*.cookiebot.eu https://*.tradedoubler.com https://ml314.com/ data: 'self' 'unsafe-inline'; script-src https://*.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.adyen.com pay.google.com *.payments-amazon.com https://*.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://*.dibspayment.eu https://maps.googleapis.com https://player.vimeo.com *.disqus.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.agechecked.com https://*.qliro.com https://*.trustpilot.com https://cdn.jsdelivr.net *.avada.io *.shopify.com 'self' https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.gstatic.com https://*.magento.com https://*.nr-data.net https://*.newrelic.com https://policy.app.cookieinformation.com https://connect.facebook.net https://www.snapengage.com https://*.pingdom.net blob: https://*.clarity.ms www.xtento.com cdn.xtento.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com connect.facebook.net twitter.com platform.twitter.com *.yotpo.com https://applepay.cdn-apple.com/jsapi/v1/apple-pay-sdk.js https://consent.cookiebot.com https://p11.techlab-cdn.com/* https://www.facebook.com/ https://capi-automation.s3.us-east-2.amazonaws.com/ https://*.qit.nu https://*.cookiebot.eu https://*.tradedoubler.com https://madhat.customerfirst.ai https://*.bidtheatre.com https://*.techlab-cdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cash.app https://fonts.googleapis.com/ https://*.dibspayment.eu *.klarnacdn.net https://static.klaviyo.com *.agechecked.com https://*.fontawesome.com *.trustpilot.com https://cdn.jsdelivr.net https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' https://*.bootstrapcdn.com https://fonts.googleapis.com https://fonts.gstatic.com https://*.googletagmanager.com https://*.typekit.net *.googleapis.com *.yotpo.com https://*.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' https://*.snapengage.com https://*.inkclub.com:9000 https://*.qliro.com https://*.qit.nu 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com * *.adyen.com https://*.dibspayment.eu https://maps.googleapis.com https://player.vimeo.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io 'self' https://*.google.com *.googleapis.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.googleadservices.com https://*.adobedtm.com https://*.adobe.com https://*.magento.com https://*.demdex.net https://*.nr-data.net https://*.clarity.ms https://*.pingdom.net https://*.hotjar.com https://*.hotjar.io https://*.usercentrics.eu https://policy.app.cookieinformation.com https://id5-sync.com https://*.adform.net https://*.online-metrix.net https://*.rfihub.com https://*.zeotap.com https://*.gstatic.com https://*.imgstatics.com https://*.techlab-cdn.com https://madhat.customerfirst.ai *.cloudflare.com *.paypal.com *.addthis.com *.cardinalcommerce.com https://graph.instagram.com *.yotpo.com https://*.qliro.com https://*.cookiebot.eu 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.snushof.ch/; report-to report-endpoint; 1
report-to slardar-endpoint; report-uri https://mon.zijieapi.com/monitor_browser/collect/batch/security/?bid=oceanengine_pc; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' 'report-sample' data: blob: https: 'strict-dynamic' 'nonce-f6b9c3d272fb849c8a03f25e1aeb7824-argus'; 1
frame-src 'self' https://www.youtube-nocookie.com/ https://player.vimeo.com/ https://tally.so/ https://app.cal.com/; font-src 'self'; object-src 'none'; script-src 'strict-dynamic' https://internet-up.ably-realtime.com/ 'nonce-cxFWbfdbiqBwVcz1VEzt/Q=='; style-src 'self' 'unsafe-inline'; base-uri 'none'; form-action 'self'; frame-ancestors 'none'; report-uri https://www.bilateralstimulation.io/api/csp-violation; report-to csp-endpoint 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.google-analytics.com https://js.stripe.com https://connect.facebook.net https://code.tidio.co https://*.tidio.co https://www.getmulberry.com https://partner.getmulberry.com https://*.googleadservices.com https://www.google.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://*.tidio.co; font-src 'self' data: https://*.tidio.co https://fonts.gstatic.com; img-src 'self' data: blob: https:; media-src 'self' data: blob: https://cdn.bestbuy-furniture.com https://player.vimeo.com; connect-src 'self' https://bbf-commerce-production.up.railway.app https://api.bestbuy-furniture.com https://ms-aac38c91f168-49311.nyc.meilisearch.io https://*.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://*.googleadservices.com https://*.doubleclick.net https://www.google.com https://*.facebook.com https://connect.facebook.net https://api.stripe.com https://m.stripe.network https://*.stripe.com https://*.ingest.sentry.io https://*.ingest.us.sentry.io https://*.sentry.io https://*.getmulberry.com https://*.tidio.co https://*.tidio.io wss://*.tidio.co wss://*.tidio.io https://maps.googleapis.com https://places.googleapis.com https://api.zippopotam.us https://*.statsig.com https://featureassets.org; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://*.stripe.com https://*.tidio.co https://*.getmulberry.com https://player.vimeo.com https://view.publitas.com https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://www.facebook.com https://publuu.com https://*.publuu.com; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; report-uri /api/csp-report; report-to csp-endpoint 1
font-src *.watch.de fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action *.watch.de geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.watch.de *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.watch.de bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://plumrocket.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: *.watch.de www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com *.watch.de www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com widget.freshworks.com m2epro.freshdesk.com *.avada.io *.shopify.com *.alothemes.com *.magepow.com player.vimeo.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.watch.de fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.watch.de 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.watch.de www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com widget.freshworks.com m2epro.freshdesk.com https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://challenges.cloudflare.com https://www.googletagmanager.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src * data: blob:; connect-src 'self' https://challenges.cloudflare.com https://*.sentry.io https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://maps.googleapis.com https://places.googleapis.com; frame-src https://challenges.cloudflare.com https://*.peachpayments.com https://www.googletagmanager.com https://www.google.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://*.peachpayments.com; object-src 'none' 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src * data: blob:; font-src 'self' https: data:; connect-src 'self' https:; frame-src https: data:; media-src 'self' https: data: blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https: 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com https://*.crisp.chat *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.facebook.com www.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com *.facebook.com www.facebook.com *.hotjar.com https://*.crisp.chat https://www.googletagmanager.com td.doubleclick.net consentcdn.cookiebot.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io unpkg.com www.selfawb.ro *.openstreetmap.org https://images.unsplash.com https://www.mollie.com *.hotjar.com *.hotjar.io https://*.crisp.chat https://www.google-analytics.com https://www.facebook.com https://static.xx.fbcdn.net https://scontent.xx.fbcdn.net https://lookaside.facebook.com imgsct.cookiebot.com https://www.google.ro *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com unpkg.com www.selfawb.ro https://maps.googleapis.com https://player.vimeo.com js.mollie.com pay.google.com applepay.cdn-apple.com pagead2.googlesyndication.com *.facebook.com www.facebook.com script.hotjar.com static.hotjar.com *.hotjar.com https://client.crisp.chat https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://pay.google.com https://www.google.com https://stats.g.doubleclick.net https://connect.facebook.net https://static.cloudflareinsights.com consent.cookiebot.com consentcdn.cookiebot.com sentry.profuse.ro https://browser.sentry-cdn.com *.hsforms.net *.hsforms.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com unpkg.com *.fontawesome.com https://*.crisp.chat https://fonts.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://*.crisp.chat 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.fancourier.ro www.selfawb.ro https://maps.googleapis.com https://player.vimeo.com ws.hotjar.com wss://ws.hotjar.com content.hotjar.io *.hotjar.com *.hotjar.io https://*.crisp.chat wss://*.relay.crisp.chat wss://*.relay.rescue.crisp.chat https://www.google-analytics.com https://pay.google.com https://www.google.com https://stats.g.doubleclick.net consentcdn.cookiebot.com https://www.facebook.com sentry.profuse.ro https://browser.sentry-cdn.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src https://*.crisp.chat http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.googleapis.com *.gstatic.com data: *.fontawesome.com *.revolut.com *.google.com google.com *.cdn-apple.com pay.google.com 'self' data: *.tawk.to fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com sandbox.payu.ro secure.payu.ro sandboxsecure.mobilpay.ro secure.mobilpay.ro netopia-payments.com *.netopia-payments.com *.mobilpay.ro *.tawk.to *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com *.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.innoship.ro https://www.googletagmanager.com/ *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com *.gstatic.com *.wesupply.xyz https://wesupplylabs.com s.pinimg.com ct.pinterest.com consentcdn.cookiebot.com *.weltpixel.com *.tawk.to *.googletagmanager.com *.doubleclick.net *.typeform.com https://b2d.springfarma.com/ https://consentcdn.cookiebot.eu/ *.creativecdn.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.gstatic.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.tbicp.com *.tile.openstreetmap.org *.openstreetmap.org http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ t.themarketer.com cdn1.themarketer.com *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com *.hsforms.net *.hsforms.com 'self' data: www.google.ro/ads www.facebook.com/tr analytics.tiktok.com *.google-analytics.com *.analytics.google.com s.pinimg.com ct.pinterest.com www.google.com.ua *.tawk.to cdn.jsdelivr.net *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.omnitagjs.com *.google.ro https://b2d.springfarma.com *.adnxs.com *.mktr2.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.tbicp.com https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io t.themarketer.com cdn1.themarketer.com *.revolut.com *.google.com *.cdn-apple.com www.google.ro pay.google.com *.hsforms.net *.hsforms.com attr-2p.com cdnjs.cloudflare.com analytics.tiktok.com https://connect.facebook.net s.pinimg.com ct.pinterest.com consent.cookiebot.com *.tawk.to cdn.jsdelivr.net *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com *.cloudflareinsights.com *.newrelic.com *.cookiebot.eu *.creativecdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech t.themarketer.com cdn1.themarketer.com *.googleapis.com *.gstatic.com *.tawk.to cdn.jsdelivr.net *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.mktr2.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io t.themarketer.com cdn1.themarketer.com c1api.themarketer.com c2api.themarketer.com c3api.themarketer.com *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com *.gstatic.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com https://connect.facebook.net analytics.tiktok.com *.analytics.google.com s.pinimg.com ct.pinterest.com *.tawk.to wss://*.tawk.to *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com https://www.google.com https://ams.creativecdn.com https://bam.eu01.nr-data.net *.nr-data.net *.cookiebot.eu *.googlesyndication.com *.tiktokw.us 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src * 'self' 'unsafe-inline' 'unsafe-eval' data: blob:; report-uri /csp-report-endpoint.php 1
frame-ancestors 'none'; object-src 'none'; base-uri 'none'; frame-src https://www.ilmarinen.fi/public-appointment-web/ https://cr.dm.ilmarinen.fi https://tapahtuma.ilmarinen.fi https://*.pinterest.com https://*.googletagmanager.com https://*.facebook.com https://*.google.com https://*.googlesyndication.com https://*.vimeo.com https://*.doubleclick.net https://*.surveypal.com https://*.youtube.com https://*.powerbi.com ; default-src 'unsafe-eval' 'unsafe-inline' 'self' data: https: blob:; worker-src 'self' blob:; script-src 'unsafe-eval' 'unsafe-inline' 'self' https://*.ilmarinen.fi https://*.googletagmanager.com https://*.leadoo.com https://*.episerver.net https://*.cookielaw.org https://*.visualwebsiteoptimizer.com https://*.licdn.com https://*.facebook.net https://*.facebook.com https://siteimproveanalytics.com https://*.siteimproveanalytics.com https://*.vimeocdn.com https://*.pinimg.com https://*.pinterest.com https://*.tiktok.com https://*.bing.com https://*.bing.net https://*.doubleclick.net https://*.google.com https://*.gstatic.com https://*.reactandshare.com https://*.askem.com https://*.microsoft.com https://*.linkedin.com https://cxppeur1rdrect01sa02cdn-endpoint.azureedge.net https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://srvpleu1data1.blob.core.windows.net https://*.onetrust.com https://*.tiktokv.us https://*.mkt.dynamics.com https://*.vimeo.com https://*.zscalertwo.net https://*.soundcloud.com https://*.google.fi https://*.googleadservices.com https://*.tiktokw.us https://*.elisa.fi https://*.googleapis.com https://cdn.duetds.com https://*.openai.com; connect-src 'self' https://*.ilmarinen.fi https://*.googletagmanager.com https://*.leadoo.com https://*.episerver.net https://*.cookielaw.org https://*.visualwebsiteoptimizer.com https://*.licdn.com https://*.facebook.net https://*.facebook.com https://siteimproveanalytics.com https://*.siteimproveanalytics.com https://*.vimeocdn.com https://*.pinimg.com https://*.pinterest.com https://*.tiktok.com https://*.bing.com https://*.bing.net https://*.doubleclick.net https://*.google.com https://*.gstatic.com https://*.reactandshare.com https://*.askem.com https://*.microsoft.com https://*.linkedin.com https://cxppeur1rdrect01sa02cdn-endpoint.azureedge.net https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://srvpleu1data1.blob.core.windows.net https://*.onetrust.com https://*.tiktokv.us https://*.mkt.dynamics.com https://*.vimeo.com https://*.zscalertwo.net https://*.soundcloud.com https://*.google.fi https://*.googleadservices.com https://*.tiktokw.us https://*.elisa.fi https://*.googleapis.com wss://*.elisa.fi https://cdn.duetds.com https://*.openai.com 1
font-src fonts.gstatic.com use.typekit.net https://www.googletagmanager.com *.googleapis.com *.gstatic.com https://userlike-cdn-umm.b-cdn.net https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ secure.novalnet.de seamless.novalnet.de customers.barzahlen.de customers-sandbox.barzahlen.de c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com https://api.mapbox.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://userlike-cdn-operators.userlike.com https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://userlike-cdn-umm.b-cdn.net https://app.usercentrics.eu https://www.google.de https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com *.facebook.com uct.service.usercentrics.eu data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-ds.com https://rum.hlx.page tagmanager.google.com https://www.googletagmanager.com cdn.novalnet.de cdn.barzahlen.de js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://ajax.googleapis.com https://userlike-cdn-umm.b-cdn.net https://app.usercentrics.eu https://connect.facebook.net https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://sgtm.agrar-direct.de *.usercentrics.eu *.facebook.com capi-automation.s3.us-east-2.amazonaws.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com unsafe-inline assets.braintreegateway.com https://integrations.etrusted.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io commerce.adobe.net qa-api.magedevteam.com *.sentry.io *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://www.google-analytics.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com autocomplete2.postdirekt.de https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://api.userlike.com https://edge.adobedc.net https://api.usercentrics.eu https://sgtm.agrar-direct.de *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.usercentrics.eu *.a.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com fonts.googleapis.com *.googleapis.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.cleverreach.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com js.mollie.com consentcdn.cookiebot.com *.hotjar.com vars.hotjar.com *.schuback-parfuemerien.de *.ad-srv.net smct.co *.smct.io ad4m.at *.ad4m.at *.cloudfront.net hal9000.redintelligence.net *.awin1.com *.treatwell.de *.treatwell.net www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com *.cloudfront.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com https://www.mollie.com www.google.com.ua https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com consent.cookiebot.com consentcdn.cookiebot.com *.hotjar.com *.hotjar.io *.ad-srv.net *.gsitrix.com *.schuback-parfuemerien.de *.clarity.ms c.bing.com *.stapecdn.com stapecdn.com smct.co *.smct.io ad4m.at *.ad4m.at api.bounce-commerce.de pix.hyj.mobi lantern.roeyecdn.com analytics.fatmedia.io *.google.de *.bidswitch.net *.casalemedia.com *.adition.com *.awin1.com www.xtento.com cdn.xtento.com https://s.schuback-parfuemerien.de data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com https://cdn.jsdelivr.net *.tiktok.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com js.mollie.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com consent.cookiebot.com consentcdn.cookiebot.com *.hotjar.com *.hotjar.io *.dwin1.com *.ad-srv.net *.gsitrix.com *.schuback-parfuemerien.de *.clarity.ms *.stapecdn.com stapecdn.com smct.co *.smct.io ad4m.at *.ad4m.at api.bounce-commerce.de pix.hyj.mobi *.roeyecdn.com analytics.fatmedia.io *.google.de *.awin1.com *.treatwell.de *.treatwell.net www.xtento.com cdn.xtento.com https://s.schuback-parfuemerien.de 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com consentcdn.cookiebot.com *.treatwell.de *.treatwell.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io *.trustedshops.com *.etrusted.com https://integrations.etrusted.site consent.cookiebot.com consentcdn.cookiebot.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.ad-srv.net *.gsitrix.com *.schuback-parfuemerien.de *.clarity.ms c.bing.com *.stapecdn.com stapecdn.com smct.co *.smct.io ad4m.at *.ad4m.at api.bounce-commerce.de pix.hyj.mobi lantern.roeyecdn.com analytics.fatmedia.io *.google.de *.a.run.app firehose.eu-west-1.amazonaws.com *.awin1.com *.treatwell.de *.treatwell.net https://s.schuback-parfuemerien.de 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://514aa2df-d407-454b-bb36-fc8303bf6bc8.sansec.watch/; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://developer.adobe.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.worldpay.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleadservices.com *.ytimg.com *.bing.com *.google.com *.mastercard.com *.visa.com *.worldpay.com magefan.com cm.magefan.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.gstatic.com *.fontawesome.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.gstatic.com *.fontawesome.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.worldpay.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://developer.adobe.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://public.montonio.com public.montonio.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://www.google.com https://www.gstatic.com public.montonio.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.facebook.net https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; script-src 'self' 'report-sample' https://code.jquery.com; style-src 'self' 'report-sample' fonts.googleapis.com https://fonts.googleapis.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
worker-src blob:; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.ecoflow.no *.ihytta.no *.sparelys.no *.trioweb.net *.trioweb.dev data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.snapchat.com *.vipps.no *.bambora.com *.checkout.bambora.com *.api-e.checkout.bambora.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ https://checkout.dintero.com https://api.vipps.no https://apitest.vipps.no blob: https://www.googletagmanager.com/ *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.ecoflow.no *.ihytta.no *.sparelys.no *.snapchat.com checkout.dintero.com *.vipps.no *.bambora.com *.checkout.bambora.com *.api-e.checkout.bambora.com *.trustpilot.com apis.google.com *.google.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io magefan.com cm.magefan.com https://checkout.dintero.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.disqus.com flagpedia.net *.hsforms.net *.hsforms.com 'self' data: *.ecoflow.no *.ihytta.no *.sparelys.no *.trioweb.net *.trioweb.dev *.google.no *.google.se *.g.doubleclick.net *.bing.com *.clarity.ms *.snapchat.com *.europa.eu *.victronenergy.com *.kamafritid.no *.google.com checkout.dintero.com *.apple.com apis.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://checkout.dintero.com https://unpkg.com https://api.vipps.no https://apitest.vipps.no unpkg.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.disqus.com *.gstatic.com maps.googleapis.com *.hsforms.net *.hsforms.com *.google.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.ecoflow.no *.ihytta.no *.sparelys.no *.trioweb.net *.trioweb.dev *.g.doubleclick.net *.bing.com *.clarity.ms sc-static.net checkout.dintero.com https://unpkg.com/@dintero/ *.vipps.no apis.google.com invitejs.trustpilot.com https://browser.sentry-cdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.gstatic.com *.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com www.googletagmanager.com *.ecoflow.no *.ihytta.no *.sparelys.no *.trioweb.net *.trioweb.dev 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io https://checkout.dintero.com https://api.vipps.no https://apitest.vipps.no www.pdf995.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ www.gstatic.com maps.googleapis.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.ecoflow.no *.ihytta.no *.sparelys.no *.trioweb.net *.trioweb.dev wss://*.trioweb.dev www.google-analytics.com *.g.doubleclick.net *.bing.com *.clarity.ms *.snapchat.com checkout.dintero.com https://unpkg.com/@dintero/ *.vipps.no *.bambora.com *.checkout.bambora.com *.api-e.checkout.bambora.com apis.google.com *.google.com report.trioweb.dev 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://dev.sparelys.no/api/1/security/?glitchtip_key=64a87582f77a45308667362dbc2d4347; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com cash-f.squarecdn.com https://www.gstatic.com https://fonts.gstatic.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net * data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.certcapture.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.googletagmanager.com *.yotpo.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com * https://images.unsplash.com *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.prism.app-us1.com *.prismic.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com magefan.com cm.magefan.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://maps.googleapis.com https://player.vimeo.com *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.prism.app-us1.com *.prismic.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.googletagmanager.com tagmanager.google.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net * https://browser.sentry-cdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.cash.app *.certcapture.com https://static.klaviyo.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com tagmanager.google.com fonts.google.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net * 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * https://maps.googleapis.com https://player.vimeo.com *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.prism.app-us1.com *.prismic.io https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.googletagmanager.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com sentry.elgentos.nl 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://b311375c-e003-480d-a33d-a95fcc34078f.sansec.watch/; report-to report-endpoint; 1
font-src *.fontawesome.com maxcdn.bootstrapcdn.com *.typekit.net *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ analytics.ahrefs.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com *.disqus.com *.avada.io flipboxapp.net assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.googletagmanager.com app.promotron.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline *.typekit.net *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com ws: *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.doubleclick.net *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.googleapis.com *.weltpixel.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.googleapis.com maps.gstatic.com *.google.com *.biaw.com magefan.com cm.magefan.com *.mageside.com mageside.com *.disqus.com *.trackedlink.net https://img.youtube.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ maps.googleapis.com s7.addthis.com freegeoip.app api.ipbase.com *.disqus.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com webchat.dotdigital.com webchat.staging.dotdigital.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.googleapis.com maps.googleapis.com *.doubleclick.net *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.run.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
upgrade-insecure-requests; media-src https: blob:; child-src https: blob:; default-src https: wss: 'unsafe-inline' 'unsafe-eval' data:; font-src https: data:; img-src https: data:; 1
font-src fonts.gstatic.com use.typekit.net https://*.ravecapture.com https://trustspot-app-assets.s3.amazonaws.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://www.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com https://chase.hostedpaymentservice.net https://chase-var.hostedpaymentservice.net *.kaptcha.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.google.com *.googletagmanager.com *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com https://chase.hostedpaymentservice.net https://chase-var.hostedpaymentservice.net *.kaptcha.com https://www.circularhub.com https://flyers.canex.ca https://td.doubleclick.net https://www.facebook.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.googleapis.com *.gstatic.com *.google.com *.googleusercontent.com maps.googleapis.com https://services.postcodeanywhere.co.uk https://ws1.postescanada-canadapost.ca https://www.google.ca https://www.facebook.com https://*.ravecapture.com https://ravecapture-app-assets.s3.amazonaws.com https://*.canex.ca https://*.flippenterprise.net https://*.wishabi.net https://*.wishabi.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com imgs.signifyd.com *.hsforms.net *.hsforms.com 'self' data: https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.gstatic.com *.google.com *.ggpht.com *.googleusercontent.com *.googletagmanager.com maps.googleapis.com developers.google.com https://s7.addthis.com *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com https://chase.hostedpaymentservice.net https://chase-var.hostedpaymentservice.net *.kaptcha.com https://trustspot.io https://*.ravecapture.com https://www.circularhub.com https://acsbap.com https://acsbapp.com https://cdn.acsbapp.com https://ws1.postescanada-canadapost.ca https://cdn.jsdelivr.net https://commerce.adobedtm.com https://unpkg.com https://connect.facebook.net https://*.hotjar.com https://h64.online-metrix.net https://*.flippenterprise.net chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com cdn-scripts.signifyd.com imgs.signifyd.com *.hsforms.net *.hsforms.com https://cdn-scripts.signifyd.com https://imgs.signifyd.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https://trustspot.io https://ws1.postescanada-canadapost.ca https://*.flippenterprise.net https://*.ravecapture.com downloads.mailchimp.com maxcdn.bootstrapcdn.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io *.googleapis.com *.gstatic.com *.google.com *.chasepaymentechhostedpay.com *.chasepaymentechhostedpay-var.com https://chase.hostedpaymentservice.net https://chase-var.hostedpaymentservice.net *.kaptcha.com https://acsbap.com https://cdn.acsbapp.com https://ws1.postescanada-canadapost.ca https://stats.g.doubleclick.net https://*.hotjar.io https://connect.facebook.net https://*.facebook.com https://*.flippenterprise.net https://*.flippback.com https://*.flipp.com https://*.ravecapture.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://db82ede2-bcf0-414d-936f-71c652e4bd68.sansec.watch; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.yotpo.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com account.fetchify.com https://www.googletagmanager.com/ *.facebook.com *.paypalobjects.com storage.googleapis.com *.livechatinc.com *.kaptcha.com *.doubleclick.net *.instagram.com sibautomation.com *.brevo.com *.sibforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com cutlistevo.com *.trustpilot.com *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.facebook.com *.google.com *.google.co.uk paypal-eu-arh.cloudiq.com *.bing.com *.googletagmanager.com *.cloudfront.net *.yotpo.com *.clarity.ms *.luckyorange.com *.convertexperiments.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com cc-cdn.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.gstatic.com *.googletagmanager.com *.googleoptimize.com *.livechatinc.com *.facebook.net *.bing.com paypal-eu-cdn.cloudiq.com *.paypal.com *.cloudfront.net *.craftyclicks.co.uk *.luckyorange.com *.clarity.ms *.qeryz.net *.instagram.com *.debugbear.com *.sendinblue.com sibautomation.com *.brevo.com https://cdn.jsdelivr.net/npm/@growthbook/growthbook/dist/bundles/index.js *.convertexperiments.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.trustpilot.com *.yotpo.com https://www.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cc-cdn.com https://static.klaviyo.com *.googleapis.com *.cloudfront.net *.luckyorange.com *.myfonts.net *.stackpathcdn.com *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.cloudfront.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ www.google-analytics.com stats.g.doubleclick.net *.luckyorange.com settings.luckyorange.net wss://realtime.luckyorange.com wss://visitors.live wss://in.visitors.live *.facebook.com *.clarity.ms qeryz.com *.googleapis.com *.googlesyndication.com *.brevo.com *.debugbear.com *.growthbook.io *.convertexperiments.com *.convert.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.trustpilot.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://staticw2.yotpo.com data: *.webtrends-optimize.com *.azurewebsites.net https://use.typekit.net *.fontawesome.com maxcdn.bootstrapcdn.com use.fontawesome.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://www.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; frame-ancestors *.certcapture.com 'self'; frame-src bid.g.doubleclick.net *.demdex.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.googletagmanager.com https://checkout-sandbox.getbread.com https://checkout.getbread.com *.google.com https://vars.hotjar.com https://www.facebook.com https://www.youtube.com *.stackadapt.com https://www.paypal.com https://gum.criteo.com/ *.affirm.com *.webtrends-optimize.com *.azurewebsites.net *.affirm.ca *.certcapture.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.facebook.com *.yotpo.com swellrewards.com *.swellrewards.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.everesttech.net *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net https://cdn.searchspring.net https://dev.visualwebsiteoptimizer.com https://cdn.cookielaw.org https://d.impactradius-event.com https://checkout-sandbox.getbread.com https://checkout.getbread.com https://a-60239872.cdn.ns8ds.com https://commerce.adobedtm.com https://www.facebook.com https://p.yotpo.com *.ns8ds.com *.loggly.com *.bing.com https://www.google.com *.google.com *.stackadapt.com *.webtrends-optimize.com *.azurewebsites.net *.affirm.com *.affirm.ca *.certcapture.com https://helloextend-static-assets.s3.amazonaws.com https://extendcoreoffersdemo-offersthemelogobucketeb21afa-19jnurg0a0o17.s3.amazonaws.com https://s3.amazonaws.com https://extendcoreoffersprod-offersthemelogobucketeb21afa-1lr7le13dvgtp.s3.amazonaws.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.yotpo.com swellrewards.com *.swellrewards.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.adobedtm.com *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.affirm.com https://static.scarabresearch.com https://static.addtoany.com https://geolocation.onetrust.com https://cdn.searchspring.net https://dev.visualwebsiteoptimizer.com https://cdn.cookielaw.org https://d.impactradius-event.com https://checkout-sandbox.getbread.com https://checkout.getbread.com https://a-60239872.cdn.ns8ds.com https://commerce.adobedtm.com https://a-42369024.cdn.ns8ds.com https://cdn.scarabresearch.com https://d22q3dafggn5rg.cloudfront.net https://a-42369024.nscontrol.com https://staticw2.yotpo.com https://www.googletagmanager.com *.loggly.com *.bing.com *.adobe.net *.facebook.net *.hotjar.com *.criteo.net *.criteo.com *.google.com https://resources.xg4ken.com https://www.googlecommerce.com https://www.paypal.com *.stackadapt.com *.webtrends-optimize.com *.azurewebsites.net *.convertexperiments.com *.zdassets.com https://z.clarity.ms https://web-modules-de-na1.niceincontact.com *.subscribepro.com *.affirm.ca *.certcapture.com https://*.helloextend.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com www.gstatic.com connect.facebook.net *.yotpo.com swellrewards.com *.swellrewards.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com https://tags.srv.stackadapt.com https://cdn.searchspring.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://staticw2.yotpo.com *.stackadapt.com *.webtrends-optimize.com *.azurewebsites.net https://use.typekit.net https://web-modules-de-na1.niceincontact.com *.subscribepro.com *.certcapture.com https://static.klaviyo.com *.fontawesome.com *.googleapis.com *.addtoany.com assets.braintreegateway.com www.gstatic.com maxcdn.bootstrapcdn.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; object-src 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; media-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io amcglobal.sc.omtrdc.net p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.magento-datasolutions.com *.magento-ds.com https://bam-cell.nr-data.net https://tracker.affirm.com https://sandbox.affirm.com https://recommender-eu.scarabresearch.com https://webchannel-content.eservice.emarsys.net *.searchspring.net https://dev.visualwebsiteoptimizer.com https://cdn.cookielaw.org https://d.impactradius-event.com https://checkout-sandbox.getbread.com https://checkout.getbread.com https://a-60239872.cdn.ns8ds.com https://commerce.adobedtm.com https://www.facebook.com https://staticw2.yotpo.com https://commerce.adobedc.net https://www.google-analytics.com https://stats.g.doubleclick.net https://recommender.scarabresearch.com https://in.hotjar.com https://w2.yotpo.com *.searchspring.io *.google.com *.affirm.com *.stackadapt.com *.webtrends-optimize.com *.azurewebsites.net *.zendesk.com https://ekr.zdassets.com https://bam.nr-data.net https://z.clarity.ms https://web-modules-de-na1.niceincontact.com https://app-de-na1.niceincontact.com *.subscribepro.com *.affirm.ca *.certcapture.com https://*.helloextend.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://dpm.demdex.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com *.yotpo.com swellrewards.com *.swellrewards.com https://imgs.signifyd.com 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; base-uri 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; 1
base-uri 'self'; connect-src 'self' https://ka-f.fontawesome.com https://plausible.io; default-src 'none'; font-src 'self' https://ka-f.fontawesome.com; form-action 'self'; frame-ancestors 'none'; frame-src 'self'; img-src 'self' data: https:; media-src 'self'; object-src 'none'; script-src 'nonce-rWpks8HT3v7KkcuJT3+dQM3gV9dG8pVb' 'self'; script-src-elem 'nonce-rWpks8HT3v7KkcuJT3+dQM3gV9dG8pVb' https://kit.fontawesome.com https://plausible.io; style-src 'nonce-rWpks8HT3v7KkcuJT3+dQM3gV9dG8pVb' 'self'; style-src-attr 'nonce-rWpks8HT3v7KkcuJT3+dQM3gV9dG8pVb'; style-src-elem 'nonce-rWpks8HT3v7KkcuJT3+dQM3gV9dG8pVb'; upgrade-insecure-requests; report-uri https://richardlouv.com/?ACT=57 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com https://fonts.gstatic.com data: *.klarnacdn.net *.zohocdn.com *.cloudmaestro.com *.flaticon.com https://muau.ch *.fontawesome.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.klarna.com *.googletagmanager.com *.doubleclick.net js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://plumrocket.com checkout.postfinance.ch *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io maps.googleapis.com maps.gstatic.com *.googleapis.com https://images.unsplash.com cdn.doofinder.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klarna.com *.klarnaevt.com *.klarnacdn.net * https://muau.ch https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com checkout.postfinance.ch data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://maps.googleapis.com cdn.doofinder.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.facebook.com *.zohopublic.com *.godaddy.com *.addthis.com *.zohocdn.com *.twitter.com *.ads-twitter.com *.ctctcdn.com https://muau.ch *.clickcease.com *.trustedshops.com *.jollyoutdoorjogger.com *.doofinder.com *.hotjar.com *.avada.io *.shopify.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com checkout.postfinance.ch 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.doofinder.com https://static.klaviyo.com *.klarnacdn.net *.facebook.com *.zohocdn.com *.flaticon.com https://muau.ch *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com *.doofinder.com wss://*.doofinder.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.zohopublic.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com fonts.googleapis.com *.googleapis.com data: *.fontawesome.com https://cdnjs.cloudflare.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com https://www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://youtube.com/ *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com https://www.googletagmanager.com/ sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com https://vimeo.com/ https://player.vimeo.com/ https://www.google.com/ https://analytics.google.com https://googleads.g.doubleclick.net https://connect.facebook.net http://www.brildor.com https://*.cookiebot.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src https://flagcdn.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io maps.googleapis.com maps.gstatic.com *.googleapis.com https://images.unsplash.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com https://www.brildor.com/ https://cdn.trust.reviews https://*.cookiebot.com https://*.google.com https://*.google.es https://lh3.googleusercontent.com http://stats.g.doubleclick.net/ https://*.googlesyndication.com www.facebook.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com https://www.google-analytics.com/ googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com https://www.gstatic.com/ https://js-agent.newrelic.com https://bam-cell.nr-data.net http://www.sandbox.paypal.com http://www.paypal.com https://analytics.google.com https://ssl.google-analytics.com http://stats.g.doubleclick.net/ https://googleads.g.doubleclick.net https://cdn.connectif.cloud https://connect.facebook.net http://www.brildor.com https://app.trust.reviews https://*.cookiebot.com https://browser.sentry-cdn.com analytics.tiktok.com https://cdnjs.cloudflare.com cdnjs.cloudflare.com js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://cdn.trust.reviews https://www.googletagmanager.com https://cdnjs.cloudflare.com cdnjs.cloudflare.com *.fontawesome.com https://fonts.googleapis.com assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net https://www.google-analytics.com/ www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com https://*.google.com/ https://*.google.es https://www.gstatic.com/ https://analytics.google.com https://*.googlesyndication.com https://*.googleapis.com https://js-agent.newrelic.com https://bam-cell.nr-data.net http://www.sandbox.paypal.com http://www.paypal.com https://googleads.g.doubleclick.net https://eu3-api.connectif.cloud https://connect.facebook.net http://*.brildor.com https://*.brildor.com https://sentry.brildor.es https://browser.sentry-cdn.com https://*.cookiebot.com https://*.stape.io www.facebook.com *.tiktokw.us analytics.tiktok.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com sentry.brildor.es 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src analytics.tiktok.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://sentry.brildor.es/api/5/security&sentry_key=1e4059825f3826e1bf3adc421484e51b&sentry_release=20260910101332&sentry_environment=production; report-to report-endpoint; 1
default-src 'self';script-src 'self' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://unpkg.com https://login.microsoftonline.com https://js.authorize.net https://bat.bing.com/bat.js https://s.pinimg.com/ct/core.js https://googleads.g.doubleclick.net https://www.clarity.ms https://www.google-analytics.com https://static.ads-twitter.com https://connect.facebook.net https://maxcdn.bootstrapcdn.com https://bat.bing.com https://s.pinimg.com https://*.clarity.ms;object-src 'none';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://unpkg.com;img-src 'self' https://www.aimclub.org https://bat.bing.net https://i.ytimg.com https://www.google.com https://connect.facebook.com https://www.google.ca https://www.google-analytics.com https://www.googletagmanager.com https://c.clarity.ms https://t.co https://www.facebook.com https://analytics.twitter.com https://www.google.co.uk;media-src 'self';frame-src 'self' https://www.google.com https://www.youtube.com https://www.facebook.com https://my.matterport.com https://td.doubleclick.net https://m.facebook.com https://www.googletagmanager.com https://bpb.opendns.com;font-src 'self' https://fonts.gstatic.com;connect-src 'self' https://js.authorize.net https://www.google.com https://adservice.google.com https://www.googleadservices.com https://stats.g.doubleclick.net https://analytics.google.com https://www.googletagmanager.com https://region1.analytics.google.com https://www.google.ca https://api2.authorize.net https://ct.pinterest.com https://www.google-analytics.com https://www.facebook.com https://get663.com https://*.clarity.ms https://bat.bing.com https://www.facebook.com https://w88p9x.com http://localhost:5030 https://eventapibeta.nirvc.com https://eventapi.nirvc.com;frame-ancestors 'self' https://www.nirvc.com https://www.nirvc.com/Sales/Pannellum360?photoUrl;report-uri /WebResource.axd?cspReport=true 1
default-src 'self'; base-uri 'self'; form-action 'self'; object-src 'none'; frame-src https://challenges.cloudflare.com; img-src 'self' data: https://telegram.org; connect-src 'self' https://*.google-analytics.com; font-src 'self'; script-src 'self' 'unsafe-inline' https://telegram.org https://oauth.telegram.org https://www.googletagmanager.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; style-src-attr 'unsafe-inline'; report-uri /api/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://pagead2.googlesyndication.com https://adservice.google.com https://fundingchoicesmessages.google.com https://www.googletagmanager.com https://www.google-analytics.com https://tpc.googlesyndication.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://*.adtrafficquality.google https://js.stripe.com https://*.firebaseio.com https://*.googleapis.com https://apis.google.com https://static.cloudflareinsights.com https://static.hotjar.com https://script.hotjar.com; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://*.google.com https://*.googleusercontent.com https://*.gstatic.com https://pagead2.googlesyndication.com https://www.google-analytics.com https://lh3.googleusercontent.com https://*.stripe.com https://media.spinxo.com https://*.adtrafficquality.google https://*.hotjar.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://*.google.com https://*.googleapis.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://*.doubleclick.net https://*.adtrafficquality.google https://api.stripe.com https://*.firebaseio.com https://*.firebase.googleapis.com https://*.ingest.sentry.io https://*.ingest.us.sentry.io wss://*.firebaseio.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com; frame-src 'self' https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://googleads.g.doubleclick.net https://www.google.com https://js.stripe.com https://hooks.stripe.com https://*.firebaseapp.com https://*.adtrafficquality.google; frame-ancestors 'self'; object-src 'none'; form-action 'self'; base-uri 'self' 1
default-src 'self'; base-uri 'self'; frame-ancestors 'none'; form-action 'self'; object-src 'none'; img-src 'self' data: https: https://www.google.com https://googleads.g.doubleclick.net https://www.google-analytics.com; font-src 'self' https://fonts.bunny.net data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.bunny.net; script-src 'self' 'nonce-BR4+ZQk6rp8X21gI7eDzvg==' 'sha256-iOMM6uEzetL+cixMNZ2yeJQeNR9evsaG7JfpsFsONnU=' https://js.stripe.com https://billings.systems https://www.googletagmanager.com https://www.googleadservices.com https://www.google.com https://static.opinly.ai; script-src-elem 'self' 'nonce-BR4+ZQk6rp8X21gI7eDzvg==' 'sha256-iOMM6uEzetL+cixMNZ2yeJQeNR9evsaG7JfpsFsONnU=' https://js.stripe.com https://billings.systems https://www.googletagmanager.com https://www.googleadservices.com https://www.google.com https://static.opinly.ai https://www.paypal.com https://*.paypal.com; connect-src 'self' https://api.stripe.com https://r.stripe.com https://billings.systems https://www.paypal.com https://*.paypal.com https://www.google-analytics.com https://*.google-analytics.com https://*.googletagmanager.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://static.opinly.ai; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://m.stripe.com https://billings.systems https://www.paypal.com https://*.paypal.com; worker-src 'self' 1
default-src 'self'; script-src 'self' 'unsafe-eval' *.cloudfront.net *.civiccomputing.com *.contentsquare.net *.doubleclick.net *.evergage.com *.feefo.com *.flippingbook.com *.googleapis.com *.nr-data.net cdn.evgnet.com cdn.mouseflow.com js-agent.newrelic.com snap.licdn.com widget.trustpilot.com www.googletagmanager.com; script-src-attr 'self' 'unsafe-inline' *.cloudfront.net *.civiccomputing.com *.contentsquare.net *.doubleclick.net *.evergage.com *.feefo.com *.flippingbook.com *.googleapis.com *.nr-data.net cdn.evgnet.com cdn.mouseflow.com js-agent.newrelic.com snap.licdn.com widget.trustpilot.com www.googletagmanager.com; script-src-elem 'self' 'unsafe-inline' *.cloudfront.net *.civiccomputing.com *.contentsquare.net *.doubleclick.net *.evergage.com *.feefo.com *.flippingbook.com *.googleapis.com *.nr-data.net cdn.evgnet.com cdn.mouseflow.com js-agent.newrelic.com snap.licdn.com widget.trustpilot.com www.googletagmanager.com; style-src 'self' 'unsafe-inline' *.cloudfront.net *.googleapis.com *.typekit.net; style-src-elem 'self' 'unsafe-inline' *.cloudfront.net *.googleapis.com *.typekit.net; img-src 'self' data: *.cloudfront.net *.contentsquare.net *.facebook.com *.flippingbook.com *.googleapis.com *.googleusercontent.com *.linkedin.com *.tuskercars.com *.tuskerdirect.com *.youtube.com docs.inrix.com reba.global secure.gravatar.com www.googletagmanager.com *.google.com *.google.co.uk *.google.im *.google.ie *.google.gb; font-src 'self' data: *.cloudfront.net *.typekit.net fonts.gstatic.com; connect-src 'self' *.cloudfront.net *.civiccomputing.com *.contentsquare.net *.doubleclick.net *.evergage.com *.feefo.com *.flippingbook.com *.googleapis.com *.nr-data.net cdn.evgnet.com cdn.mouseflow.com js-agent.newrelic.com snap.licdn.com widget.trustpilot.com www.googletagmanager.com *.contentsquare.net *.facebook.com *.flippingbook.com *.googleapis.com *.googleusercontent.com *.linkedin.com *.tuskercars.com *.tuskerdirect.com *.youtube.com docs.inrix.com reba.global secure.gravatar.com www.googletagmanager.com *.google.com *.google.co.uk *.google.im *.google.ie *.google.gb; worker-src 'self' blob:; media-src 'self'; child-src 'self'; frame-src 'self' *.tuskercars.com *.zap-map.com *.zapmap.com cloud.email.tusker-cars.com player.vimeo.com  widget.trustpilot.com www.googletagmanager.com www.youtube.com; manifest-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors https:; object-src 'none'; report-uri https://62a6f7cc9bc141b6c536feda.endpoint.csper.io?v=4 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://menatplay.com https://ajax.googleapis.com https://cdn.jsdelivr.net https://vjs.zencdn.net https://challenges.cloudflare.com https://www.google-analytics.com https://load.sumome.com https://static.cloudflareinsights.com https://www.googletagmanager.com https://cdn.bitmovin.com https://app.getbeamer.com https://static.getbeamer.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://menatplay.com https://cdn.jsdelivr.net https://vjs.zencdn.net https://maxst.icons8.com https://fonts.googleapis.com https://cdn.bitmovin.com https://app.getbeamer.com https://cdnjs.cloudflare.com https://use.typekit.net https://p.typekit.net; img-src 'self' data: blob: https://menatplay.com https://*.mjedge.net https://app.getbeamer.com https://thebronetwork.com; font-src 'self' data: https://fonts.gstatic.com https://maxst.icons8.com https://cdnjs.cloudflare.com https://use.typekit.net; connect-src 'self' https://www.google-analytics.com https://sumome.com https://backend.getbeamer.com https://licensing.bitmovin.com https://*.mjedge.net; frame-src 'self' https://challenges.cloudflare.com https://app.getbeamer.com; media-src 'self' blob: https://*.mjedge.net; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net cdnjs.cloudflare.com unpkg.com uri.amap.com; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net cdnjs.cloudflare.com unpkg.com; img-src 'self' data: blob: server.arcgisonline.com *.amap.com; font-src 'self' data: cdn.jsdelivr.net cdnjs.cloudflare.com; connect-src 'self' uri.amap.com *.amap.com sctapi.ftqq.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; 1
default-src 'none'; script-src 'self' cdn.jsdelivr.net cdnjs.cloudflare.com unpkg.com code.jquery.com ajax.googleapis.com www.gstatic.com ajax.aspnetcdn.com stackpath.bootstrapcdn.com use.typekit.net p.typekit.net cdn.sheetjs.com js.storylane.io d.bablic.com maps.googleapis.com bat.bing.com www.youtube.com tags.srv.stackadapt.com assets.flostack.io https://assets-us11.flostack.io/js/flo.min.js app.factors.ai snap.licdn.com px.ads.linkedin.com www.googletagmanager.com www.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net bzrcdn.openai.com clearout.io static.ads-twitter.com *.contentsquare.net *.clarity.ms tr.capterra.com tracking-api.g2.com sc.lfeeder.com b2synctagtrackingapi.bamboobox.ai ads.kwanzoo.com s3-us-west-2.amazonaws.com ml314.com hpshortner-559903420586.us-central1.run.app g1584674684.co *.hubspot.com *.hscollectedforms.net *.hs-banner.com *.hs-analytics.net *.hsadspixel.net *.hs-scripts.com *.hsforms.com *.hsforms.net; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com fonts.googleapis.com stackpath.bootstrapcdn.com use.typekit.net; img-src 'self' data: blob: www.google-analytics.com www.facebook.com stats.g.doubleclick.net www.google.com www.google.co.in www.linkedin.com px.ads.linkedin.com ct.capterra.com images.g2crowd.com gtlyimg.co www.loginextsolutions.com t.co analytics.twitter.com clearout.io *.clarity.ms c.bing.com tr.lfeeder.com *.hubspot.com *.hsforms.com *.hsforms.net *.hsappstatic.net; font-src 'self' data: fonts.gstatic.com fonts.googleapis.com use.typekit.net; connect-src 'self' api.locus.sh https://clearout.io px.ads.linkedin.com analytics.google.com www.google.com ad.doubleclick.net stats.g.doubleclick.net api.factors.ai app.storylane.io *.bablic.com bzr.openai.com bzrcdn.openai.com *.contentsquare.net *.clarity.ms api.ipify.org tracking-api.g2.com tr.capterra.com ads-api.kwanzoo.com hpshortner-559903420586.us-central1.run.app *.hubspot.com *.hscollectedforms.net *.hs-banner.com *.hsforms.com *.hubapi.com *.hsappstatic.net *.flostack.io; media-src 'self'; frame-src www.youtube-nocookie.com www.youtube.com www.googletagmanager.com app.storylane.io *.hubspot.com *.hsforms.com *.hsforms.net *.hs-sites.com; worker-src 'self' blob: ; report-uri https://locus.report-uri.com/r/d/csp/reportonly; 1
object-src 'none';base-uri 'self';script-src 'nonce-jm6GPWM92qs3NE_tPTmKEw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/  https://widget.trustpilot.com;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://appleid.cdn-apple.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com myheritage-container.com  'unsafe-eval' 'nonce-785176e8031837368f4c2566d9acaa40' 'strict-dynamic' https://widget.trustpilot.com https://invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style  https://widget.trustpilot.com;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io https://www.google.com/recaptcha/enterprise/* https://www.google.com/recaptcha/enterprise/ https://www.google.com/recaptcha/enterprise/clr https://www.google.com/recaptcha/ https://maps.googleapis.com https://people.googleapis.com https://translate-pa.googleapis.com myheritage-container.com https://widget.trustpilot.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:  https://widget.trustpilot.com https://*.trustpilot.com;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=report&canonical_page_id=/company/home/ 1
default-src 'self'; script-src 'self' https://sta.poptavej.cz 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.gstatic.com https://www.googleadservices.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://connect.facebook.net https://c.seznam.cz https://c.imedia.cz https://www.youtube.com; style-src 'self' https://sta.poptavej.cz 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com; font-src 'self' https://sta.poptavej.cz data: https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https://sta.poptavej.cz https://www.youtube.com https://www.google.com https://www.facebook.com; object-src 'self' https://sta.poptavej.cz; base-uri 'self'; report-uri /api/csp/report; frame-ancestors 'self' 1
font-src *.fontawesome.com https://geowidget.easypack24.net *.gstatic.com *.stape.io *.googleapis.com maxcdn.bootstrapcdn.com *.yotpo.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://plumrocket.com *.yotpo.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com *.weltpixel.com secure.payu.com merch-prod.snd.payu.com *.biano.cz *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.stape.io https://plumrocket.com www.xtento.com *.yotpo.com *.criteo.com *.pinterest.com *.facebook.com *.salesmanago.pl *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net *.vimeocdn.com s.ytimg.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com magefan.com cm.magefan.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.gstatic.com static.payu.com *.biano.cz *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com *.stape.io flagpedia.net ts.tradetracker.net www.magmodules.eu www.xtento.com cdn.xtento.com *.yotpo.com www.co2neutralwebsite.com pixel.wp.pl *.google.pl *.bing.com *.facebook.com yourhomestory.com.pl *.pinterest.com *.clarity.ms restilo.pl 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https://cdn.polyfill.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org https://www.googletagmanager.com tagmanager.google.com *.avada.io s7.addthis.com secure.payu.com secure.snd.payu.com *.biano.cz https://browser.sentry-cdn.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.stape.io *.fontawesome.com *.googleapis.com maps.googleapis.com tm.tradetracker.net www.xtento.com cdn.xtento.com *.yotpo.com *.pinimg.com pixel.wp.pl *.criteo.com *.facebook.net *.bing.com *.yandex.ru www.clarity.ms polyfill.io sentry.dev.x-coding.pl *.cloudflare.com *.contentsquare.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com https://geowidget.easypack24.net tagmanager.google.com *.biano.cz *.googleapis.com *.googletagmanager.com *.stape.io maxcdn.bootstrapcdn.com *.gstatic.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.algolia.net *.algolia.com *.algolianet.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com *.easypack24.net *.inpost.pl *.openstreetmap.org https://www.google-analytics.com https://get.geojs.io *.avada.io ekr.zdassets.com/ secure.payu.com merch-prod.snd.payu.com *.biano.cz https://*.ingest.sentry.io *.google-analytics.com *.google.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog *.stape.io www.gstatic.com maps.googleapis.com *.yotpo.com *.yandex.ru *.clarity.ms *.pinterest.com sentry.dev.x-coding.pl *.saleago.com *.googletagmanager.com *.contentsquare.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; frame-src 'self' *; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://files1.vinci-immobilier.com https://files6.vinci-immobilier.com https://www.vinci-immobilier.com https://files3.vinci-immobilier.com https://files2.vinci-immobilier.com; style-src 'self' 'unsafe-inline' *; img-src 'self' data: *; font-src 'self' *; connect-src 'self' https://files1.vinci-immobilier.com https://files6.vinci-immobilier.com https://files3.vinci-immobilier.com https://files2.vinci-immobilier.com https://www.vinci-immobilier.com https://www.vinci-immobilier.com/api/offres https://www.vinci-immobilier.com/api/v4 https://www.vinci-immobilier.com/api/profils https://www.vinci-immobilier.com/api/geo https://www.vinci-immobilier.com/api/marketing https://www.vinci-immobilier.com/api/simulateur 1
font-src *.fontawesome.com *.googleapis.com *.klarnacdn.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.cashpresso.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://www.facebook.com *.cookiebot.com *.trustedshops.com *.googletagmanager.com https://www.google.com https://www.google.at *.aos.cc https://aos.cc *.google.com *.google.de *.google.si *.google.at *.google.it *.google.fr *.google.ch *.google.hu *.klarna.com *.klarnaevt.com *.klarnacdn.net magefan.com cm.magefan.com *.disqus.com https://img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com *.facebook.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.chimpstatic.com downloads.mailchimp.com *.list-manage.com *.facebook.net *.googletagmanager.com *.cookiefirst.com *.cashpresso.com *.mailchimp.com *.jsdelivr.net *.gstatic.com *.google.com *.google.de *.google.si *.google.at *.google.it *.google.fr *.google.ch *.google.hu *.trackedlink.net *.klarna.com *.klarnacdn.net *.klarnaservices.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com unpkg.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src downloads.mailchimp.com *.googletagmanager.com *.cashpresso.com *.klarnacdn.net *.fontawesome.com unsafe-inline assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.google-analytics.com *.cookiefirst.com *.cashpresso.com *.chimpstatic.com *.intuit.com *.mailchimp.com *.amazonaws.com *.doubleclick.net *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.facebook.net payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-bZtIaaOFbL_TXX0uNlBSUg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://pagead2.googlesyndication.com https://www.statcounter.com https://fundingchoicesmessages.google.com; style-src 'self' 'unsafe-inline'; img-src 'self' https: data:; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://c.statcounter.com; frame-src https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://fundingchoicesmessages.google.com; frame-ancestors 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https://spotify.com https://*.spotify.com https://byspotify.com https://*.byspotify.com https://googleusercontent.com https://*.googleusercontent.com https://*.azureedge.net https://*.cookieyes.com https://*.cdn-cookieyes.com https://*.aplazame.com https://*.azurewebsites.net https://*.cetelem.es https://*.clarity.ms https://*.connectif.cloud https://*.cookiebot.com https://*.cube.eu https://*.doofinder.com https://*.doubleclick.net https://*.ettrusted.com https://*.ggpht.com https://*.google.es https://*.google.com https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.mxpnl.com https://*.oct8ne.com https://*.openweathermap.org https://joyeriasanchez.com https://*.joyeriasanchez.com https://*.redsys.es https://*.sentry.io https://*.sequrapi.com https://*.sequracdn.com https://*.tiktok.com https://*.tiktokw.us https://*.trevenque.es https://*.trustedshops.com https://*.trustpilot.com https://*.typography.com https://*.youtube.com https://*.youtube-nocookie.com https://*.ytimg.com https://*.facebook.com https://*.facebook.net https://*.twitter.com https://*.instagram.com https://*.jsdelivr.net https://*.cloudflare.com https://*.stripe.com https://*.paypal.com https://*.paypalobjects.com https://*.bootstrapcdn.com https://*.datatables.net https://*.highcharts.com https://code.highcharts.com https://cdn.tailwindcss.com https://unpkg.com https://code.jquery.com https://openweathermap.org https://cartstack.com https://*.cartstack.com https://metricool.com https://*.metricool.com https://motive.co https://*.motive.co https://klarnaservices.com https://*.klarnaservices.com https://hotjar.com https://*.hotjar.com https://klarnacdn.net https://*.klarnacdn.net https://googlesyndication.com https://*.googlesyndication.com https://google-analytics.com https://*.google-analytics.com https://clippingmagic.com https://*.clippingmagic.com https://intercom.io https://*.intercom.io https://intercomcdn.com https://*.intercomcdn.com https://revi.io https://*.revi.io https://bing.com https://*.bing.com https://cookielaw.org https://*.cookielaw.org https://pinterest.com https://*.pinterest.com https://pinimg.com https://*.pinimg.com https://prestashop3.com https://*.prestashop3.com https://cdn.ampproject.org https://*.cdn.ampproject.org; style-src 'self' 'unsafe-inline' https://*.aplazame.com https://*.azurewebsites.net https://*.cetelem.es https://*.clarity.ms https://*.connectif.cloud https://*.cookiebot.com https://*.cube.eu https://*.doofinder.com https://*.doubleclick.net https://*.ettrusted.com https://*.ggpht.com https://*.google.es https://*.google.com https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.mxpnl.com https://*.oct8ne.com https://*.openweathermap.org https://joyeriasanchez.com https://*.joyeriasanchez.com https://*.redsys.es https://*.sentry.io https://sequracdn.com https://*.sequracdn.com https://*.sequrapi.com https://*.tiktok.com https://*.tiktokw.us https://*.trevenque.es https://*.trustedshops.com https://*.trustpilot.com https://*.typography.com https://*.youtube.com https://*.youtube-nocookie.com https://*.ytimg.com https://*.facebook.com https://*.facebook.net https://*.twitter.com https://*.instagram.com https://*.jsdelivr.net https://*.cloudflare.com https://*.stripe.com https://*.paypal.com https://*.paypalobjects.com https://*.bootstrapcdn.com https://*.datatables.net https://*.highcharts.com https://code.highcharts.com https://cdn.tailwindcss.com https://unpkg.com https://code.jquery.com https://openweathermap.org https://fontawesome.com https://*.fontawesome.com https://klarnacdn.net https://*.klarnacdn.net https://revi.io https://*.revi.io https://emoji-css.afeld.me https://*.afeld.me; img-src 'self' data: blob: https:; font-src 'self' data: https://*.cdn.office.net https://*.aplazame.com https://*.azurewebsites.net https://*.clarity.ms https://*.connectif.cloud https://*.cookiebot.com https://*.cube.eu https://*.doofinder.com https://*.doubleclick.net https://*.ettrusted.com https://*.ggpht.com https://*.google.es https://*.google.com https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.mxpnl.com https://*.oct8ne.com https://*.openweathermap.org https://joyeriasanchez.com https://*.joyeriasanchez.com https://*.redsys.es https://*.sentry.io https://sequracdn.com https://*.sequracdn.com https://*.sequrapi.com https://*.tiktok.com https://*.tiktokw.us https://*.trevenque.es https://*.trustedshops.com https://*.trustpilot.com https://*.typography.com https://*.youtube.com https://*.youtube-nocookie.com https://*.ytimg.com https://*.facebook.com https://*.facebook.net https://*.twitter.com https://*.instagram.com https://*.jsdelivr.net https://*.cloudflare.com https://*.stripe.com https://*.paypal.com https://*.paypalobjects.com https://*.bootstrapcdn.com https://unpkg.com https://code.jquery.com https://openweathermap.org https://gstatic.com https://*.gstatic.com https://fontawesome.com https://*.fontawesome.com https://klarnacdn.net https://*.klarnacdn.net https://account.affilitizer.com https://*.affilitizer.com https://perplexity.ai https://*.perplexity.ai https://goin.cloud https://*.goin.cloud https://wp.com https://*.wp.com; connect-src 'self' data: https://*.fna.fbcdn.net https://instagram.fsvq4-1.fna.fbcdn.net https://iona.nacex.com:8000 https://spotify.com https://*.spotify.com https://byspotify.com https://*.byspotify.com https://googleusercontent.com https://*.googleusercontent.com https://wsg127.com https://*.wsg127.com https://googlesyndication.com https://*.googlesyndication.com https://*.aplazame.com https://*.azurewebsites.net https://*.cetelem.es https://*.clarity.ms https://*.connectif.cloud https://*.cookiebot.com https://*.cube.eu https://*.datatables.net https://*.doofinder.com https://*.doubleclick.net https://*.ettrusted.com https://*.ggpht.com https://*.google.es https://*.google.com https://*.google.* https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.mxpnl.com https://*.oct8ne.com https://*.openweathermap.org https://joyeriasanchez.com https://*.joyeriasanchez.com https://*.redsys.es https://*.sentry.io https://*.sequrapi.com https://*.sequracdn.com https://*.tiktok.com https://*.tiktokw.us https://*.trevenque.es https://*.trustedshops.com https://*.trustpilot.com https://*.typography.com https://*.youtube.com https://*.youtube-nocookie.com https://*.ytimg.com https://*.facebook.com https://*.facebook.net https://*.twitter.com https://*.instagram.com https://*.jsdelivr.net https://*.cloudflare.com https://*.stripe.com https://*.paypal.com https://*.paypalobjects.com https://*.bootstrapcdn.com https://*.highcharts.com https://code.highcharts.com https://cdn.tailwindcss.com https://unpkg.com https://code.jquery.com https://*.mkt.dynamics.com https://*.azureedge.net wss://*.doofinder.com wss://*.oct8ne.com https://motive.co https://*.motive.co https://google-analytics.com https://*.google-analytics.com https://klarnaservices.com https://*.klarnaservices.com https://klarnaevt.com https://*.klarnaevt.com https://klarna.com https://*.klarna.com https://googleadservices.com https://*.googleadservices.com https://hotjar.io https://*.hotjar.io wss://*.hotjar.com wss://*.hotjar.io https://empathy.co https://*.empathy.co https://intercom.io https://*.intercom.io wss://*.intercom.io https://google.kz https://*.google.kz https://google.be https://*.google.be https://google.com.ar https://*.google.com.ar https://google.com.co https://*.google.com.co https://google.pt https://*.google.pt https://google.cl https://*.google.cl https://google.co.uk https://*.google.co.uk https://klarnacdn.net https://*.klarnacdn.net https://revi.io https://*.revi.io https://bing.com https://*.bing.com https://cookielaw.org https://*.cookielaw.org https://onetrust.com https://*.onetrust.com https://pinterest.com https://*.pinterest.com https://bing.net https://*.bing.net https://amplitude.com https://*.amplitude.com https://yoast.com https://*.yoast.com https://cloudfunctions.net https://*.cloudfunctions.net https://blocksly.org https://*.blocksly.org; frame-src 'self' blob: https://motive.co https://*.motive.co https://*.aplazame.com https://*.azurewebsites.net https://*.clarity.ms https://*.connectif.cloud https://cookiebot.com https://*.cookiebot.com https://*.cube.eu https://*.doofinder.com https://*.doubleclick.net https://*.ettrusted.com https://*.ggpht.com https://*.google.es https://*.google.com https://*.googleapis.com https://googletagmanager.com https://*.googletagmanager.com https://*.gstatic.com https://*.mxpnl.com https://*.oct8ne.com https://*.openweathermap.org https://joyeriasanchez.com https://*.joyeriasanchez.com https://*.redsys.es https://*.sentry.io https://*.sequracdn.com https://*.sequrapi.com https://*.tiktok.com https://*.tiktokw.us https://*.trevenque.es https://*.trustedshops.com https://*.trustpilot.com https://*.typography.com https://*.youtube.com https://*.youtube-nocookie.com https://*.ytimg.com https://*.facebook.com https://*.facebook.net https://*.twitter.com https://*.instagram.com https://*.jsdelivr.net https://*.cloudflare.com https://*.stripe.com https://*.paypal.com https://*.paypalobjects.com https://*.bootstrapcdn.com https://unpkg.com https://code.jquery.com https://klarna.com https://*.klarna.com https://klarnaservices.com https://*.klarnaservices.com https://prestashop.com https://*.prestashop.com https://revi.io https://*.revi.io https://pinterest.com https://*.pinterest.com https://nacex.es https://*.nacex.es https://div.show https://*.div.show; media-src 'self' data: https://*.cdninstagram.com https://*.fna.fbcdn.net https://*.aplazame.com https://*.azurewebsites.net https://*.clarity.ms https://*.connectif.cloud https://*.cookiebot.com https://*.cube.eu https://*.doofinder.com https://*.doubleclick.net https://*.ettrusted.com https://*.ggpht.com https://*.google.es https://*.google.com https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.mxpnl.com https://*.oct8ne.com https://*.openweathermap.org https://joyeriasanchez.com https://*.joyeriasanchez.com https://*.redsys.es https://*.sentry.io https://*.sequracdn.com https://*.sequrapi.com https://*.tiktok.com https://*.tiktokw.us https://*.trevenque.es https://*.trustedshops.com https://*.trustpilot.com https://*.typography.com https://*.youtube.com https://*.youtube-nocookie.com https://*.ytimg.com https://*.facebook.com https://*.facebook.net https://*.twitter.com https://*.instagram.com https://*.jsdelivr.net https://*.cloudflare.com https://*.stripe.com https://*.paypal.com https://*.paypalobjects.com https://*.bootstrapcdn.com https://unpkg.com https://code.jquery.com https://*.googlevideo.com https://fbcdn.net https://*.fbcdn.net; worker-src 'self' blob:; child-src 'self' blob: https://*.oct8ne.com; base-uri 'self'; frame-ancestors 'self' https://playboard.motive.co https://*.motive.co; upgrade-insecure-requests; report-uri https://cspreports.desarrollotrevenque.com/api/csp-report/e50efd4f-695f-4b3e-bd4f-3db3912214c0; 1
font-src *.fontawesome.com fonts.gstatic.com https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://www.merchante-solutions.com https://hostedpayments.merchante.com https://merchantacsstag.cardinalcommerce.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com https://elements.sandbox.fortis.tech https://elements.fortis.tech https://merchantacsstag.cardinalcommerce.com *.weltpixel.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com js-agent.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page widget.freshworks.com m2epro.freshdesk.com https://developer.adobe.com https://magento.com https://js.sandbox.fortis.tech https://js.fortis.tech https://elements.sandbox.fortis.tech https://elements.fortis.tech https://api.merchante-solutions.com https://cert.merchante-solutions.com https://testapi.merchante-solutions.com bam.nr-data.net https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com fonts.googleapis.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com bam.nr-data.net *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com widget.freshworks.com m2epro.freshdesk.com https://developer.adobe.com https://elements.sandbox.fortis.tech https://elements.fortis.tech https://api.merchante-solutions.com https://cert.merchante-solutions.com https://testapi.merchante-solutions.com https://writer.cardinalcommerce.com rs.fullstory.com edge.fullstory.com stats.g.doubleclick.net https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src blob:; form-action *.cardinalcommerce.com *.paypal.com www.sandbox.paypal.com *.amazon.com *.facebook.com *.googlesyndication.com *.tiktok.com connect.facebook.net 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src *.googletagmanager.com *.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com *.paypal.com www.sandbox.paypal.com www.paypalobjects.com player.vimeo.com *.google.com *.braintreegateway.com google.com *.klarna.com js.stripe.com *.amazon.com *.payments-amazon.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com connect.facebook.net www.commercepartnerhub.com assets.braintreegateway.com plumrocket.com *.authorize.net *.artifi.net www.googleadservices.com assets.pinterest.com ct.pinterest.com i.liadm.com *.securly.com gateway.zscalerthree.net ep2.adtrafficquality.google 'self' 'unsafe-inline'; script-src *.googletagmanager.com *.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net *.google.com *.newrelic.com *.nr-data.net *.authorize.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.paypal.com www.sandbox.paypal.com www.paypalobjects.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.gstatic.com assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com *.typekit.net google.com *.cdn-apple.com *.braintreegateway.com *.klarna.com *.klarnacdn.net x.klarnacdn.net js.stripe.com *.payments-amazon.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.searchspring.net *.athoscommerce.net *.klarnaservices.com *.klaviyo.com fast.a.klaviyo.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.shopify.com *.sandbox.braintreegateway.com *.popt.in *.cloudflare.com *.artifi.net maps.googleapis.com www.googletagservices.com *.visualwebsiteoptimizer.com https://cdn.searchspring.net/intellisuggest/is.min.js *.searchspring.io *.cloudfront.net s.pinimg.com bat.bing.com tag.rmp.rakuten.com ut.rd.linksynergy.com *.pinterest.com cdn.noibu.com *.hotjar.com b-code.liadm.com secure.merchantadvantage.com *.celebros.com ep2.adtrafficquality.google static.lillianvernon.com 'self' 'unsafe-inline' 'unsafe-eval'; report-uri https://www.lillianvernon.com/pr-csp/report/add/; report-to report-endpoint; 1
font-src *.fontawesome.com maxcdn.bootstrapcdn.com *.cloudflare.com *.gstatic.com *.typekit.net *.trustedshops.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com *.nosto.com *.nos.to *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com *.dotdigital-pages.com *.dotdigital.com *.nosto.com *.nos.to *.sharethis.com *.addthis.com *.moatads.com *.mastercard.com *.paypal.com *.livechatinc.com *.vimeo.com *.pinterest.com/ *.doubleclick.net *.adsrvr.org c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com *.disqus.com https://img.youtube.com *.nosto.com *.nos.to *.zipmoney.com.au *.gstatic.com *.googleapis.com beaumont-tiles.com.au *.beaumont-tiles.com.au *.google.com *.adnxs.com *.pinterest.com *.ggpht.com *.sharethis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://api.addressfinder.io https://rum.hlx.page polyfill.io www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com s.pinimg.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.disqus.com *.nosto.com *.nos.to *.sharethis.com *.addthis.com *.moatads.com *.addthisedge.com *.googleapis.com *.newrelic.com *.nr-data.net *.mastercard.com *.zipmoney.com.au *.livechatinc.com *.roomvo.com *.pinimg.com *.serving-sys.com *.adsrvr.org *.adnxs.com *.zip.co js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://api.addressfinder.io *.fontawesome.com maxcdn.bootstrapcdn.com *.nosto.com *.nos.to *.bootstrapcdn.com *.cloudflare.com *.typekit.net *.googleapis.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://api.addressfinder.io *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.nosto.com *.nos.to *.demdex.net *.sharethis.com *.addthis.com *.nr-data.net *.zipmoney.com.au *.zip.co *.paypal.com *.livechatinc.com *.google-analytics.com *.serving-sys.com *.pinterest.com maps.googleapis.com *.doubleclick.net *.roomvo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-EAAa10ecSpTYGqgbt5-B_w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' http: https:; font-src 'self' https: data:; img-src 'self' http: https: data: blob:; object-src 'none'; connect-src 'self' wss: http: https:; script-src 'self' https: http: 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' https: http: 'unsafe-inline'; worker-src blob:; report-uri https://hlidacky.report-uri.com/r/d/csp/reportOnly 1
script-src 'self' 'nonce-871HkZGh/FjVs4wqGUW4LT1OsHmvGvm+B4V/rvXuwdU=' 'strict-dynamic' 'wasm-unsafe-eval' www.youtube.com  az416426.vo.msecnd.net cdn.cookielaw.org www.google-analytics.com maps.googleapis.com www.googletagmanager.com  dl.episerver.net www.youtube.com www.google.com www.gstatic.com snap.licdn.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.com.ai https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.ms https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.vg https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat  https://connect.facebook.net/ https://munchkin.marketo.net/ static.hotjar.com script.hotjar.com https://cdn.jsdelivr.net/ https://cdn.cookielaw.org/;object-src 'none';base-uri 'self';report-uri https://o4507537122852864.ingest.de.sentry.io/api/4507764299726928/security/?sentry_key=2e67b3fa9c193f38db8ea33933d09ffa&sentry_environment=production&sentry_release=sprint24; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.cloudflare.com *.clarity.ms *.bing.com fonts.googleapis.com *.bootstrapcdn.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline' 'unsafe-eval'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.facebook.com *.googlesyndication.com  *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline' 'unsafe-eval'; frame-ancestors www.gstatic.com *.googleapis.com *.newsmanapp.com *.clarity.ms *.bing.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com www.googletagmanager.com googletagmanager.com *.clarity.ms *.bing.com *.weltpixel.com  c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.doofinder.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com unpkg.com www.selfawb.ro *.openstreetmap.org *.img2run.com *.cloudflare.com s.ytimg.com *.mailchimp.com *.mcusercontent.com *.google.ro trusted.ro *.whiteimage.biz *.cookiebot.com *.clarity.ms *.bing.com *.google-analytics.com  *.files-text.com *.livechatinc.com *.livechat-files.com *.livechat-static.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.reddit.com maps.googleapis.com https://c.clarity.ms https://c.bing.com data: 'self' 'unsafe-inline' 'unsafe-eval'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.doofinder.com chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com unpkg.com www.selfawb.ro *.cloudflare.com *.fontawesome.com *.attr-2p.com *.2performant.com *.newsmanapp.com attr-2p.com *.mailchimp.com *.chimpstatic.com googletagmanager.com tagmanager.google.com *.whiteimage.biz *.cookiebot.com *.criteo.com *.clarity.ms *.bing.com *.addtoany.com *.livechatinc.com *.livechat-static.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com ajax.googleapis.com *.googleadservices.com *.redditstatic.com *.reddit.com *.tiktok.com https://www.googletagmanager.com maps.googleapis.com https://www.clarity.ms https://scripts.clarity.ms https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.doofinder.com downloads.mailchimp.com unpkg.com *.cloudflare.com *.mailchimp.com *.clarity.ms *.bing.com googletagmanager.com tagmanager.google.com *.bootstrapcdn.com *.livechatinc.com *.fontawesome.com https://fonts.bunny.net *.addtoany.com assets.braintreegateway.com *.tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; object-src *.livechatinc.com 'self' 'unsafe-inline' 'unsafe-eval'; media-src *.adobe.com *.img2run.com *.livechatinc.com *.livechat-static.com 'self' 'unsafe-inline' 'unsafe-eval'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.doofinder.com wss://*.doofinder.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com api.fancourier.ro www.selfawb.ro *.cloudflare.com *.googleapis.com *.googletagmanager.com *.clarity.ms *.bing.com  *.livechatinc.com *.text.com https://get.geojs.io *.avada.io http://dpm.demdex.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.redditstatic.com *.reddit.com *.tiktok.com *.run.app https://www.google-analytics.com https://www.google.ro 'self' 'unsafe-inline' 'unsafe-eval'; child-src *.livechatinc.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline' 'unsafe-eval'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.googleapis.com *.gstatic.com *.alothemes.com *.magepow.com 'self' data: *.yotpo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com api.bazaarvoice.com stg.api.bazaarvoice.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.google-analytics.com *.google.com *.gstatic.com *.cybersource.com *.online-metrix.net *.paypal.com *.force.com *.salesforceliveagent.com *.salesforce.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com player.vimeo.com https://www.google.com/recaptcha/ js.stripe.com *.certcapture.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com *.fillrite.com *.doubleclick.net *.google-analytics.com *.google.com *.gstatic.com *.cybersource.com *.paypal.com *.force.com *.salesforceliveagent.com *.salesforce.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.googleapis.com *.gstatic.com *.certcapture.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com www.gstatic.com *.five9.com *.facebook.com *.fillrite.com *.usercentrics.eu *.cmp.usercentrics.eu *.alothemes.com *.magepow.com *.hsforms.net *.hsforms.com 'self' data: *.linkedin.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page *.googleapis.com *.gstatic.com js.stripe.com *.certcapture.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon-adsystem.com *.five9.com *.facebook.com *.facebook.net *.onelink-edge.com *.hotjar.com *.usercentrics.eu *.cmp.usercentrics.eu *.alothemes.com *.magepow.com player.vimeo.com *.hsforms.net *.hsforms.com *.google.com *.google-analytics.com *.cybersource.com *.paypal.com *.force.com *.salesforceliveagent.com *.salesforce.com *.datatables.net https://cdn.jsdelivr.net/npm/daterangepicker/daterangepicker.min.js *.fullstory.com *.licdn.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com display.ugc.bazaarvoice.com *.five9.com *.facebook.com *.alothemes.com *.magepow.com *.googleapis.com *.gstatic.com *.force.com *.salesforceliveagent.com *.salesforce.com https://cdn.jsdelivr.net/npm/daterangepicker/daterangepicker.css *.datatables.net *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.googleapis.com *.certcapture.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.amazon-adsystem.com *.paa-reporting-advertising.amazon *.facebook.com *.five9.com *.doubleclick.net *.onelink-edge.com *.hotjar.com wss://ws.hotjar.com *.hotjar.io *.usercentrics.eu *.cmp.usercentrics.eu *.alothemes.com *.magepow.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.google.com *.gstatic.com *.cybersource.com *.online-metrix.net *.paypal.com *.force.com *.salesforceliveagent.com *.salesforce.com *.fullstory.com *.linkedin.com *.yotpo.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com *.unbxdapi.com *.unbxd.io *.coupahost.com *.instapunchout.com *.microsoftazuread-sso.com *.microsoftonline.com *.productreview.com.au *.bootstrapcdn.com *.clickcease.com *.clarity.ms *.bing.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.unbxdapi.com *.unbxd.io *.coupahost.com app.instapunchout.com *.microsoftazuread-sso.com *.microsoftonline.com *.clickcease.com *.clarity.ms *.productreview.com.au *.bing.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.ariba.com *.t1cloud.com https://seo.mageplaza.com *.tawk.to 'self' 'unsafe-inline'; frame-ancestors *.ariba.com *.coupahost.com *.t1cloud.com app.instapunchout.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.unbxdapi.com *.unbxd.io *.coupahost.com *.instapunchout.com *.microsoftazuread-sso.com *.microsoftonline.com *.clickcease.com *.clarity.ms *.productreview.com.au *.bing.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * hcaptcha.com *.hcaptcha.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.tawk.to landofcoder.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.unbxdapi.com *.unbxd.io *.coupahost.com *.instapunchout.com *.microsoftazuread-sso.com *.microsoftonline.com *.bing.com *.googleadservices.com *.google-analytics.com *.google.com *.googletagmanager.com *.magezon.com *.productreview.com.au *.paypalobjects.com *.google.co.in *.googleapis.com *.clickcease.com *.clarity.ms www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com magefan.com cm.magefan.com *.disqus.com instant-imgs.s3.ap-southeast-2.amazonaws.com southland.com.au *.southland.com.au https://firebasestorage.googleapis.com *.tawk.to tawk.link cdn.jsdelivr.net s3.amazonaws.com/ data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://api.addressfinder.io https://rum.hlx.page *.unbxdapi.com *.unbxd.io *.klevu.com *.googleapis.com *.cloudfront.net *.coupahost.com *.instapunchout.com *.microsoftazuread-sso.com *.microsoftonline.com *.clickcease.com *.clarity.ms *.productreview.com.au *.bing.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'nonce-punchout' *.disqus.com *.instant.one *.instant-dpryor.ngrok.dev instant-dpryor.ngrok.dev *.instant-tschipke.ngrok.dev instant-tschipke.ngrok.dev hcaptcha.com *.hcaptcha.com *.avada.io connect.facebook.net *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.tawk.to cdn.jsdelivr.net landofcoder.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com https://api.addressfinder.io *.fontawesome.com *.unbxdapi.com *.unbxd.io *.klevu.com *.googleapis.com *.fontawsome.com *.coupahost.com *.instapunchout.com *.microsoftazuread-sso.com *.microsoftonline.com *.bootstrapcdn.com *.clickcease.com *.clarity.ms *.productreview.com.au *.bing.com assets.braintreegateway.com hcaptcha.com *.hcaptcha.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com *.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.unbxdapi.com *.unbxd.io *.coupahost.com *.instapunchout.com *.microsoftazuread-sso.com *.microsoftonline.com *.clickcease.com *.clarity.ms *.productreview.com.au *.bing.com *.tawk.to tawk.link 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.magento.com *.magento-datasolutions.com *.magento-ds.com https://api.addressfinder.io *.unbxdapi.com *.unbxd.io *.coupahost.com *.instapunchout.com *.microsoftazuread-sso.com *.microsoftonline.com *.clarity.ms *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.paypalobjects.com https://get.geojs.io *.tawk.to *.productreview.com.au *.clickcease.com *.bing.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.api.instant.one *.instant.one instant-imgs.s3.ap-southeast-2.amazonaws.com unbxd-console-platform.s3.amazonaws.com hcaptcha.com *.hcaptcha.com *.avada.io *.analytics.google.com stats.g.doubleclick.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com wss://*.tawk.to landofcoder.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.amplitude.com https://*.amplitude.com https://connect.facebook.net https://api2.branch.io https://cdn.branch.io https://maps.googleapis.com https://browser.sentry-cdn.com https://*.sentry.io; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://dgo9uctxwg500.cloudfront.net https://d1gpbxqmt7wq2i.cloudfront.net https://www.facebook.com https://www.google-analytics.com https://www.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.eztable.com https://*.amplitude.com https://api2.branch.io https://*.sentry.io https://*.ingest.sentry.io https://www.google-analytics.com https://www.googletagmanager.com https://maps.googleapis.com; frame-src 'self' https://*.jkopay.com https://*.jko.com.tw https://pay.line.me https://www.facebook.com https://www.google.com https://*.eztable.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; report-uri https://api-evo.eztable.com/csp-report 1
block-all-mixed-content ; script-src 'self' 'unsafe-eval' 'strict-dynamic' 'nonce-cjB6bWdtOTF4ZnJqanE0M21uczVjeHU1NWRvZ2k5ZTQ='; object-src 'none'; base-uri 'none'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cytoplan.co.uk *.cloudfront.net https://www.gstatic.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors builder.io cdn.builder.io 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://static.addtoany.com/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com js.mollie.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com account.fetchify.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://www.googletagmanager.com/ *.mention-me.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.pinterest.com *.pinterdev.com commerce-app.pintergration.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com store.paradoxlabs.com https://www.mollie.com cdn.builder.io *.bing.com *.feefo.com *.cytoplan.co.uk *.livechat-files.com *.visualwebsiteoptimizer.com *.sharethis.com *.cloudfront.net *.trackedlink.net *.dycdn.net https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com commerce.adobe.net *.commerce-payment-services.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.magento-datasolutions.com https://static.addtoany.com/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com js.mollie.com cdn.builder.io *.livechatinc.com unpkg.com *.clarity.ms *.cytoplan.co.uk ipinfo.io *.google-analytics.com *.trackedweb.net *.feefo.com *.bing.com *.cookiefirst.com *.adroll.com *.visualwebsiteoptimizer.com *.cardinalcommerce.com *.adobe.net *.googletagmanager.com https://www.gstatic.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com cdn.jsdelivr.net/npm/@adobe *.paypal.com *.paypalobjects.com pay.google.com *.braintreegateway.com *.facebook.com *.facebook.net *.trackedlink.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com static.trackedweb.net *.webgains.io *.googlesyndication.com *.sharethis.com *.cloudfront.net *.tangoo.it *.ddlnk.net debug-tracking.dotdigital.internal *.dycdn.net dn1i8v75r669j.cloudfront.net dkpklk99llpj0.cloudfront.net ds9p2a60lh6fp.cloudfront.net am.freshrelevance.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.mention-me.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com register.feefo.com *.cytoplan.co.uk *.visualwebsiteoptimizer.com *.cloudfront.net webchat.dotdigital.com webchat.staging.dotdigital.com cc-cdn.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.magento-datasolutions.com *.magento-ds.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://stats.addtoany.com/menu *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com cdn.builder.io *.feefo.com *.cookiefirst.com *.demdex.net *.clarity.ms *.livechatinc.com *.visualwebsiteoptimizer.com *.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.sharethis.com *.googlesyndication.com *.cloudfront.net *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk *.dycdn.net am.freshrelevance.com wss://am.freshrelevance.com wss://am.dycdn.net dn1i8v75r669j.cloudfront.net https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.mention-me.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com r1.trackedweb.net collect.feefo.com *.cytoplan.co.uk x.clarity.ms secure.livechatinc.com commerce.adobe.io commerce.adobedc.net *.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; font-src 'self' https://fonts.gstatic.com; img-src 'self' https://*.googleapis.com https://s3.ap-southeast-2.amazonaws.com https://maps.gstatic.com data:; script-src 'self' https://*.googleapis.com https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://unpkg.com; frame-src 'self' blob: data:; connect-src 'self' https://*.googleapis.com; 1
object-src 'none';base-uri 'self';script-src 'nonce-NbF5_h34FcDr1nBo5OkSOQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com *.cloudflare.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net apis.google.com https://meetanshi.com/media/logo.png magefan.com cm.magefan.com *.disqus.com *.cloudflare.com *.twitter.com *.google-analytics.com *.googletagmanager.com *.google.com *.trustedshops.com *.fontawesome.com *.addthis.com s7.addthis.com m.addthis.com z.moatads.com *.addthisedge.com *.facebook.com *.facebook.net *.adobedc.net *.googleadservices.com *.paypalobjects.com *.geojs.io *.google.co.in widgets.pinterest.com https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.magento-datasolutions.com *.googleapis.com *.gstatic.com/recaptcha/ *.disqus.com *.cloudflare.com *.twitter.com *.google-analytics.com *.googletagmanager.com *.google.com/recaptcha/ *.trustedshops.com *.fontawesome.com *.addthis.com s7.addthis.com m.addthis.com z.moatads.com *.addthisedge.com apis.google.com *.facebook.com *.facebook.net widgets.pinterest.com *.popupsmart.com *.googleadservices.com *.paypal.com *.paypalobjects.com energy-java-2540.my.site.com/ *.picreel.com *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.cloudflare.com energy-java-2540.my.site.com/ *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.magento-datasolutions.com *.magento-ds.com apis.google.com *.cloudflare.com *.twitter.com *.google-analytics.com googletagmanager.com *.gstatic.com *.trustedshops.com *.fontawesome.com *.addthis.com s7.addthis.com m.addthis.com z.moatads.com *.addthisedge.com *.facebook.com *.facebook.net *.adobedc.net *.googleadservices.com *.paypalobjects.com *.geojs.io widgets.pinterest.com https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.googletagmanager.com *.picreel.com *.popupsmart.com *.salesforce-scrt.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src maxcdn.bootstrapcdn.com data: https://www.gstatic.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://widgets.trustedshops.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com *.google.com *.google.de *.usercentrics.eu *.bing.com *.bing.net https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://maps.googleapis.com https://player.vimeo.com *.disqus.com *.usercentrics.eu https://*.google.com https://*.gstatic.com *.bing.com *.bing.net https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com fcmregistrations.googleapis.com firebaseinstallations.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https://maps.googleapis.com https://player.vimeo.com *.usercentrics.eu *.doubleclick.net *.google-analytics.com *.google.com *.bing.com *.bing.net https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri https://www.paypalobjects.com 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' https://dashboard.tinyanalytics.io https://dash.tinyanalytics.io https://news.google.com https://s.seomator.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://dashboard.tinyanalytics.io https://dash.tinyanalytics.io https://s.seomator.com https://seomator-geo-audit.emreelbeyoglu.workers.dev; frame-src 'self' https://*.seomator.com https://www.youtube.com https://www.youtube-nocookie.com https://news.google.com; frame-ancestors 'self'; form-action 'self' https://*.seomator.com; upgrade-insecure-requests 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob: https://cdn-imagenes.theempire.tech https://www.googletagmanager.com; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'wasm-unsafe-eval' https://www.googletagmanager.com https://challenges.cloudflare.com https://cdn.jsdelivr.net https://js.stripe.com; connect-src 'self' https://desaparecidos-terremoto-api.theempire.tech https://cdn-imagenes.theempire.tech https://cdn.jsdelivr.net https://storage.googleapis.com https://www.google-analytics.com https://region1.google-analytics.com https://challenges.cloudflare.com https://api.stripe.com; frame-src https://challenges.cloudflare.com https://js.stripe.com https://hooks.stripe.com; worker-src 'self' blob:; upgrade-insecure-requests 1
default-src 'self' https://*.liadm.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.google.com https://www.gstatic.com https://*.hsforms.net https://*.marker.io https://www.youtube.com/s/player/010fbc8d/www-widgetapi.vflset/www-widgetapi.js https://www.youtube.com/iframe_api https://*.hsadspixel.net https://*.hs-analytics.net https://*.hscollectedforms.net https://*.hubspot.com https://*.hsleadflows.net https://*.hs-banner.com https://*.usemessages.com https://*.clarity.ms https://*.jsdelivr.net https://cdnjs.cloudflare.com https://js.zi-scripts.com https://googleads.g.doubleclick.net https://*.pixel.ad https://*.hs-scripts.com https://unpkg.com https://code.jquery.com https://*.spinutech.com https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://analytics.tiktok.com https://bat.bing.com https://cdn.mxpnl.com https://snap.licdn.com https://px.ads.linkedin.com https://cdn.taboola.com https://ddwl4m2hdecbv.cloudfront.net/b/ https://*.liadm.com https://b2bjsstore.s3.us-west-2.amazonaws.com https://*.stackadapt.com https://www.redditstatic.com; connect-src 'self' https://www.googleadservices.com https://www.googletagmanager.com https://*.zoominfo.com https://*.hsforms.com https://*.marker.io https://*.linkedin.com https://*.bing.com https://*.bing.net https://*.stape.biz https://*.facebook.net https://*.facebook.com https://*.clarity.ms https://*.hscollectedforms.net https://*.hubspot.com https://*.hubapi.com https://js.zi-scripts.com https://*.spinutech.com https://google.com https://www.google.com https://*.google.com https://*.g.doubleclick.net https://www.google-analytics.com https://analytics.tiktok.com https://px.ads.linkedin.com https://cdn.mxpnl.com https://pro.ip-api.com https://alocdn.com/c/vn3d8u2u/a/xtarget/p.json https://*.liadm.com https://9xgnrndqve.execute-api.us-west-2.amazonaws.com https://a.usbrowserspeed.com https://*.stackadapt.com https://pixel-config.reddit.com; img-src * 'self' data: android-webview-video-poster https://*.stackadapt.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.typekit.net https://cdn.jsdelivr.net https://*.stackadapt.com; font-src 'self' data: https://fonts.gstatic.com https://*.typekit.net; manifest-src 'self' https://www.spinutech.com; frame-src 'self' https://*.hsforms.com https://www.google.com https://www.youtube.com https://*.sitescout.com https://www.googletagmanager.com https://mozbar.moz.com https://block.opendns.com https://*.doubleclick.net https://*.spinutech.com; worker-src 'self' blob:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://*.hsforms.com; report-uri https://services.spinudev.com/csp/cspreport; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://www.clarity.ms https://static.cloudflareinsights.com https://pagead2.googlesyndication.com https://fundingchoicesmessages.google.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com; img-src 'self' data: https:; font-src 'self' https://cdnjs.cloudflare.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://www.clarity.ms https://cloudflareinsights.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://fundingchoicesmessages.google.com; frame-src https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://fundingchoicesmessages.google.com; require-trusted-types-for 'script'; trusted-types default; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://*.googlesyndication.com https://*.gstatic.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://connect.facebook.net https://*.facebook.com https://*.cookiebot.com https://consentcdn.cookiebot.com https://cdn.userway.org https://*.userway.org https://cdn.yellowmessenger.com https://*.yellowmessenger.com https://r1.cloud.yellow.ai https://cloud.yellow.ai https://use.typekit.net https://p.typekit.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.cloudflare.com https://*.cookiebot.com https://use.typekit.net https://p.typekit.net https://cdn.userway.org https://cdn.yellowmessenger.com; img-src 'self' data: blob: https://mbank.ae https://www.mbank.ae https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://*.googlesyndication.com https://*.gstatic.com https://*.facebook.com https://*.cookiebot.com https://cdn.userway.org https://*.userway.org https://cdn-icons-png.flaticon.com https://cdn.yellowmessenger.com https://*.yellowmessenger.com; font-src 'self' data: https://fonts.gstatic.com https://use.typekit.net https://p.typekit.net https://cdn.userway.org https://*.userway.org https://cdn.yellowmessenger.com https://*.yellowmessenger.com; connect-src 'self' https://www.google.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://*.googlesyndication.com https://connect.facebook.net https://*.facebook.com https://*.cookiebot.com https://consentcdn.cookiebot.com https://api.userway.org https://cdn.userway.org https://*.userway.org https://cdn.yellowmessenger.com https://*.yellowmessenger.com https://cloud.yellow.ai https://r1.cloud.yellow.ai wss://r1.cloud.yellow.ai; frame-src 'self' https://www.google.com https://www.gstatic.com https://www.youtube.com https://*.youtube.com https://player.vimeo.com https://*.facebook.com https://www.googletagmanager.com https://*.cookiebot.com https://cdn.userway.org https://*.userway.org; child-src 'self' blob:; worker-src 'self' blob: https://cdn.userway.org https://cdn.yellowmessenger.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests; report-uri https://www.mbank.ae/csp-report-endpoint.php 1
default-src 'self'; script-src 'self' 'unsafe-eval' https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://js.stripe.com https://ajax.googleapis.com https://code.jquery.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://stackpath.bootstrapcdn.com https://pagead2.googlesyndication.com https://*.adtrafficquality.google https://platform.twitter.com https://b.st-hatena.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.jquery.com https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net data:; img-src 'self' data: https:; connect-src 'self' https://api.bugsnag.com https://pagead2.googlesyndication.com https://*.adtrafficquality.google; frame-src 'self' https://www.google.com https://js.stripe.com https://www.youtube.com https://googleads.g.doubleclick.net https://*.adtrafficquality.google https://platform.twitter.com https://b.hatena.ne.jp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.braintreegateway.com https://*.google.com https://*.cdn-apple.com https://*.reviews.io https://*.reviews.co.uk https://grwapi.net https://*.cloudflare.com https://*.jquery.com https://*.jsdelivr.net https://*.termly.io https://*.gstatic.com https://*.facebook.net https://*.googletagmanager.com https://*.google-analytics.com https://*.gumlet.com https://*.cardinalcommerce.com https://*.doubleclick.net https://*.googleadservices.com https://*.paypal.com https://*.paypalobjects.com https://*.pcapredict.com https://*.postcodeanywhere.co.uk https://where-to-buy.co https://*.where-to-buy.co https://*.pricespider.com; style-src 'self' 'unsafe-inline' data: https://grwapi.net https://*.reviews.io https://*.braintreegateway.com https://*.cloudflare.com https://*.jsdelivr.net https://*.googleapis.com https://*.google.com https://*.gstatic.com https://*.mytoolshed.co.uk https://*.postcodeanywhere.co.uk; img-src 'self' data: blob: https://grwapi.net https://*.mytoolshed.co.uk https://*.gumlet.com https://*.paypal.com https://*.paypalobjects.com https://*.facebook.com https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.google.co.uk https://*.googlesyndication.com https://*.doubleclick.net https://*.googleadservices.com https://*.reviews.io https://*.gstatic.com https://*.postcodeanywhere.co.uk https://*.ytimg.com https://*.where-to-buy.co https://where-to-buy.co; frame-src 'self' https://*.reviews.io https://*.youtube.com https://*.braintreegateway.com https://*.googletagmanager.com https://*.google.co.uk https://*.google.com https://*.termly.io https://*.doubleclick.net https://*.facebook.com https://*.cardinalcommerce.com https://*.paypal.com https://*.reviews.co.uk https://*.youtube-nocookie.com https://*.americanexpress.com https://*.rsa3dsauth.co.uk https://*.pricespider.com https://*.channelsight.com https://challenges.cloudflare.com; connect-src 'self' https: wss:; font-src 'self' data: https://*.reviews.io https://*.cloudflare.com https://*.jsdelivr.net https://*.gstatic.com; report-uri https://www.mytoolshed.co.uk/api/csp-report; report-to csp-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.google-analytics.fr *.facebook.com *.linkedin.com https://axeptio.imgix.net *.disqus.com https://img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.facebook.net *.licdn.com *.axept.io *.hotjar.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.google-analytics.fr *.google-analytics.com *.facebook.com *.doubleclick.net *.oribi.io *.axept.io *.linkedin.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self'; img-src 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com fonts.bunny.net cdnjs.cloudflare.com cdn.jsdelivr.net *.widget.trengo.eu https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action *.paypal.com www.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.cookiebot.eu consentcdn.cookiebot.eu *.cookiebot.com consentcdn.cookiebot.com tagging.voordeelvanger.nl *.widget.trengo.eu www.facebook.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io imgsct.cookiebot.com https://images.unsplash.com https://firebasestorage.googleapis.com flagpedia.net www.magmodules.eu *.squeezely.tech *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com www.voordeelvanger.nl tagging.voordeelvanger.nl vova-videos.b-cdn.net *.b-cdn.net c.clarity.ms sqly.voordeelvanger.nl *.analytics.google.com www.google.nl www.google.be www.facebook.com pimarketingcloud.blob.core.windows.net *.widget.trengo.eu *.trengo.eu maps.gstatic.com maps.googleapis.com data: 'self' 'unsafe-inline'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com tagmanager.google.com fonts.google.com fonts.bunny.net *.widget.trengo.eu https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.voordeelvanger.nl vova-videos.b-cdn.net *.b-cdn.net *.widget.trengo.eu 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; connect-src https://tagging.voordeelvanger.nl dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.google-analytics.com *.analytics.google.com cbsignal-1.in-endp.profitmetrics.io googleads.g.doubleclick.net https://maps.googleapis.com https://player.vimeo.com https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com squeezely.tech *.squeezely.tech *.googletagmanager.com www.voordeelvanger.nl www.kiyoh.com api.squeezely.tech cdn.squeezely.tech sqly.voordeelvanger.nl tagging.voordeelvanger.nl sdk.copernica.com wss://sdk.copernica.com app.trengo.com *.widget.trengo.eu *.trengo.eu wss://*.pusher.com places.googleapis.com www.facebook.com connect.facebook.net *.pay.nl https: 'self' 'unsafe-inline'; script-src https://tagging.voordeelvanger.nl assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ consent.cookiebot.com https://maps.googleapis.com https://player.vimeo.com *.avada.io *.shopify.com *.gstatic.com maps.googleapis.com squeezely.tech www.squeezely.tech *.squeezely.tech *.googletagmanager.com tagmanager.google.com tagging.voordeelvanger.nl sdk.copernica.com static.widget.trengo.eu maps.gstatic.com connect.facebook.net consentcdn.cookiebot.com https: 'self' 'unsafe-inline' 'unsafe-eval'; report-uri https://www.voordeelvanger.nl/paynl/csp/report; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self';  script-src 'self' 'unsafe-inline' 'unsafe-eval'   https://googletagmanager.com   https://www.googletagmanager.com   https://www.google-analytics.com   https://googleads.g.doubleclick.net   https://www.google.com   https://www.gstatic.com   https://analytics.tiktok.com   https://analytics-ipv6.tiktokw.us   https://sc-static.net   https://tr.snapchat.com   https://tr6.snapchat.com   https://connect.facebook.net   https://s.pinimg.com   https://js.adsrvr.org   https://c1.rfihub.net   https://live.rezync.com   https://chimpstatic.com   https://cdn.mouseflow.com   https://cdn.pricespider.com   https://locate.pricespider.com   https://omni.pricespider.com   https://wtbevents.pricespider.com   https://a.omappapi.com   https://cdn.cookielaw.org   https://tracker.pixeltracker.co   https://ipv6-pixelconnector.pixeltracker.co   https://apps.bazaarvoice.com   https://display.ugc.bazaarvoice.com   https://api.bazaarvoice.com   https://network.bazaarvoice.com   https://analytics-static.ugc.bazaarvoice.com   https://player.vimeo.com   https://api.tiles.mapbox.com   https://cdnjs.cloudflare.com;  style-src 'self' 'unsafe-inline'   https://use.typekit.net   https://p.typekit.net   https://a.omappapi.com   https://cdn.cookielaw.org   https://fonts.googleapis.com   https://www.gstatic.com   https://display.ugc.bazaarvoice.com   https://cdn.pricespider.com   https://api.tiles.mapbox.com;  font-src 'self' data:   https://use.typekit.net   https://p.typekit.net   https://fonts.gstatic.com;  img-src 'self' data: blob:   https://trkn.us   https://cdn.cookielaw.org   https://ct.pinterest.com   https://log.pinterest.com   https://ad.doubleclick.net   https://googleads.g.doubleclick.net   https://stats.g.doubleclick.net   https://analytics.google.com   https://adservice.google.com   https://www.google.com   https://*.google.com   https://*.google.*   https://www.gstatic.com   https://www.googletagmanager.com   https://connect.facebook.net   https://www.facebook.com   https://live.rezync.com   https://cm.g.doubleclick.net   https://ib.adnxs.com   https://dpm.demdex.net   https://image2.pubmatic.com   https://us-u.openx.net   https://p.rfihub.com   https://contextual.media.net   https://wt.rqtrk.eu   https://i.liadm.com   https://dsum-sec.casalemedia.com   https://idsync.rlcdn.com   https://partners.tremorhub.com   https://aa.agkn.com   https://x.bidswitch.net   https://sync-tm.everesttech.net   https://r.turn.com   https://network-a.bazaarvoice.com   https://network.bazaarvoice.com   https://display.ugc.bazaarvoice.com   https://photos-us.bazaarvoice.com   https://contentorigin.bazaarvoice.com   https://a.omappapi.com   https://cdn.pricespider.com   https://embeddedcloud.pricespider.com   https://wwwassets.pricespider.com   https://scontent-*.cdninstagram.com;  connect-src 'self'   https://www.google-analytics.com   https://analytics.google.com   https://ad.doubleclick.net   https://googleads.g.doubleclick.net   https://stats.g.doubleclick.net   https://capi.chickenofthesea.com   https://gtm.chickenofthesea.com   https://www.googletagmanager.com   https://insight.adsrvr.org   https://tr.snapchat.com   https://tr6.snapchat.com   https://analytics.tiktok.com   https://analytics-ipv6.tiktokw.us   https://live.rezync.com   https://cdn.mouseflow.com   https://cdn.cookielaw.org   https://api.omappapi.com   https://dual-pixelconnector.pixeltracker.co   https://ipv4-pixelconnector.pixeltracker.co   https://ipv6-pixelconnector.pixeltracker.co   https://ct.pinterest.com   https://apps.bazaarvoice.com   https://api.bazaarvoice.com   https://network.bazaarvoice.com   https://geolocation.onetrust.com   https://privacyportal-eu.onetrust.com   https://z.omappapi.com   https://a.omappapi.com   https://omni.pricespider.com   https://wtbevents.pricespider.com   https://wtbstream.pricespider.com   wss://wtbstream.pricespider.com   https://www.facebook.com   https://www.google.com   https://www.googleadservices.com   https://api.mapbox.com   https://events.mapbox.com;  frame-src 'self'   https://www.googletagmanager.com   https://gtm.chickenofthesea.com   https://9828219.fls.doubleclick.net   https://20848051p.rfihub.com   https://a.rfihub.com   https://insight.adsrvr.org   https://ct.pinterest.com   https://player.vimeo.com   https://match.adsrvr.org   https://tr.snapchat.com   https://display.ugc.bazaarvoice.com   https://api.bazaarvoice.com;  worker-src 'self' blob:; media-src 'self' data: blob:;  report-uri https://5u9h19we.uriports.com/reports/report; report-to default; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net 'self' data: https://*.sovendus.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.googletagmanager.com/ *.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://*.sovendus.com https://www.sovendus-benefits.com https://www.sovendus-campaign.com https://www.sovendus-connect.com https://www.sovendus-network.com https://app-wallee.com https://paymentshub.weareplanet.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com *.disqus.com *.cookiebot.com maps.googleapis.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.cdninstagram.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: https://*.sovendus.com www.google.com.ua https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com https://app-wallee.com https://paymentshub.weareplanet.com www.facebook.com www.google.pl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.disqus.com tracking.moevenpick-wein.com *.cookiebot.com maps.googleapis.com newsletter.moevenpick-wein.de http://www.googletagmanager.com/ https://www.googletagmanager.com/ player.vimeo.com connect.facebook.net cdnjs.cloudflare.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com https://*.sovendus.com https://www.sovopt.com https://static.sovopt.com https://www.getback.ch https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://app-wallee.com https://paymentshub.weareplanet.com https://gmtech.mfgroup.ch https://assets.secure.checkout.visa.com https://www.moevenpick-wein.de consent.cookiebot.com www.r8xnst.com gtm.adt313.net tally.so d5yoctgpv4cpx.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.googleapis.com *.gstatic.com https://static.getback.ch https://*.sovendus.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://app-wallee.com https://paymentshub.weareplanet.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com tracking.moevenpick-wein.com *.cookiebot.com maps.googleapis.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com https://*.sovendus.com https://www.sovendus-benefits.com https://www.sovendus-campaign.com https://www.sovendus-connect.com https://www.sovendus-network.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://app-wallee.com https://paymentshub.weareplanet.com https://assets.secure.checkout.visa.com p2iqhncxyh.execute-api.eu-central-1.amazonaws.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-AZ_7t42i6FeAVgnG7wp_LA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src tpc.googlesyndication.com *.safeframe.googlesyndication.com; script-src 'strict-dynamic' 'nonce-L95pBuAJk2T0odQNHd4nCiPrK6ObKKsUIi8HnWC4mTBuO5oZ+S' 'self' 'report-sample' 'unsafe-inline' cdn.syndication.twimg.com connect.facebook.net c.files.bbci.co.uk emp.bbci.co.uk mybbc-analytics.files.bbci.co.uk nav.files.bbci.co.uk news.files.bbci.co.uk platform.twitter.com public.flourish.studio static.bbc.co.uk static.bbci.co.uk static.chartbeat.com static2.chartbeat.com www.bbc.co.uk www.instagram.com www.ons.gov.uk gn-web-assets.api.bbc.com www.google-analytics.com adservice.google.co.uk adservice.google.com *.g.doubleclick.net www.googletagservices.com cdn.ampproject.org tpc.googlesyndication.com *.adsafeprotected.com *.effectivemeasure.net *.3lift.com cdn.permutive.com sb.scorecardresearch.com bbc.gscontxt.net bitesize.files.bbci.co.uk www.tiktok.com lf16-tiktok-web.ttwstatic.com static.files.bbci.co.uk; img-src 'self' https: data:; font-src c.files.bbci.co.uk gel.files.bbci.co.uk static.files.bbci.co.uk static.bbci.co.uk news.files.bbci.co.uk ws-downloads.files.bbci.co.uk bitesize.files.bbci.co.uk; style-src branding.files.bbci.co.uk cdn.riddle.com flo.uri.sh news.files.bbci.co.uk platform.twitter.com static.bbc.co.uk static.bbci.co.uk static.files.bbci.co.uk ton.twimg.com www.riddle.com 'unsafe-inline' lf16-tiktok-web.ttwstatic.com; frame-src 'self' bbc001.carto.com bbc003.carto.com bbc-maps.carto.com *.cdn.optimizely.com cdn.riddle.com chartbeat.com emp.bbc.co.uk emp.bbc.com flo.uri.sh graphics.reuters.com www.reuters.com graphics.thomsonreuters.com dynamic.mc-cdn.io vapi.mc-cdn.io vapi.beta.mc-cdn.io elections.mapcreator.io elections.beta.mapcreator.io cdn.mapcreator.io m.facebook.com news.files.bbci.co.uk personaltaxcalculator2.deloittecloud.co.uk platform.twitter.com public.flourish.studio static2.chartbeat.com syndication.twitter.com web.facebook.com www.bbc.co.uk www.facebook.com www.instagram.com www.tiktok.com www.ons.gov.uk www.riddle.com www.youtube.com www.youtube-nocookie.com uk-script.dotmetrics.net ssp-app-uk.votenow.tv ssp-app-uktest.votenow.tv ssp-app-ukbench.votenow.tv session.test.bbc.co.uk session.bbc.co.uk session.stage.bbc.co.uk bitesize.files.bbci.co.uk *.googlesyndication.com *.doubleclick.net edigitalsurvey.com eb2.3lift.com cdn-gl.imrworldwide.com *.teads.tv bitesize.files.bbci.co.uk; object-src 'none'; manifest-src static.files.bbci.co.uk bitesize.files.bbci.co.uk; media-src 'self' blob: https:; connect-src 'self' https:; child-src blob:; base-uri 'none'; form-action 'self' platform.twitter.com syndication.twitter.com uk-script.dotmetrics.net/DeviceInfo.dotmetrics account.bbc.com/auth/identifier/landing; frame-ancestors 'none'; upgrade-insecure-requests; 1
default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:; object-src 'none' 1
default-src 'self';base-uri 'self';object-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.portaldoseller.com.br https://portaldoseller.com.br https://*.google.com https://*.google.com.br https://*.googleapis.com https://*.gstatic.com https://*.google-analytics.com https://*.googletagmanager.com https://*.googletagservices.com https://*.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net https://www.googletagmanager.com https://www.google-analytics.com https://www.googletagservices.com https://pagead2.googlesyndication.com https://*.adopt.com.br https://*.goadopt.io https://connect.facebook.net https://static.hotjar.com https://script.hotjar.com https://www.clarity.ms https://*.clarity.ms https://bat.bing.com https://*.usebeon.io https://*.konfidency.com.br https://*.hablla.com https://imgs.ebit.com.br https://*.cloudfront.net http://*.cloudfront.net https://s3.amazonaws.com https://*.s3.amazonaws.com https://*.s3.us-east-1.amazonaws.com https://cdnjs.cloudflare.com https://*.reclameaqui.com.br https://cdn.jsdelivr.net https://device.clearsale.com.br https://*.clearsale.com.br https://www.googleadservices.com https://api.pagseguro.com https://*.pagseguro.com https://assets.pagseguro.com.br https://*.cieloecommerce.cielo.com.br https://*.cielo.com.br https://*.userede.com.br https://*.rede.com.br https://*.erede.com.br https://sdk.mercadopago.com https://www.mercadopago.com https://*.mercadopago.com https://*.mercadolibre.com https://*.mercadolivre.com https://*.mercadolivre.com.br https://*.k-analytix.com https://i.k-analytix.com https://awscdn.portaldoseller.com.br https://*.www.lojaoriodopeixe.com.br https://www.lojaoriodopeixe.com.br;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https://*.portaldoseller.com.br https://portaldoseller.com.br https://s3.amazonaws.com https://*.s3.amazonaws.com https://s3.us-east-1.amazonaws.com https://*.s3.us-east-1.amazonaws.com https://imgur.com https://*.imgur.com https://api.pagseguro.com https://*.pagseguro.com https://*.cloudfront.net http://*.cloudfront.net https://*.usebeon.io https://*.konfidency.com.br https://*.hablla.com https://*.googleapis.com https://*.gstatic.com https://fonts.googleapis.com https://*.adopt.com.br https://*.goadopt.io https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://*.clearsale.com.br https://awscdn.portaldoseller.com.br https://*.www.lojaoriodopeixe.com.br https://www.lojaoriodopeixe.com.br;img-src 'self' data: blob: https://*.portaldoseller.com.br https://portaldoseller.com.br https://s3.amazonaws.com https://*.s3.amazonaws.com https://s3.us-east-1.amazonaws.com https://*.s3.us-east-1.amazonaws.com https://imgur.com https://*.imgur.com https://api.pagseguro.com https://*.pagseguro.com https://assets.pagseguro.com.br https://api.pagar.me https://*.pagar.me https://*.cieloecommerce.cielo.com.br https://*.cielo.com.br https://*.userede.com.br https://*.rede.com.br https://*.erede.com.br https://img.youtube.com https://*.ytimg.com https://newimgebit-a.akamaihd.net https://connect.facebook.net https://*.google.com https://*.google.com.br https://*.googleusercontent.com https://*.gstatic.com https://*.google-analytics.com https://*.googletagmanager.com https://*.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net https://*.adopt.com.br https://*.goadopt.io https://www.facebook.com https://*.fbcdn.net https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://bat.bing.com https://c.bing.com https://*.hotjar.com https://*.hotjar.io https://*.usebeon.io https://*.konfidency.com.br https://*.hablla.com https://*.hablla.io https://imgs.ebit.com.br https://*.reclameaqui.com.br https://pdl-sandbox-prod.s3.us-east-1.amazonaws.com https://*.cloudfront.net https://upload.wikimedia.org https://i.ibb.co https://*.ibb.co https://*.clearsale.com.br https://api.iconify.design https://www.clarity.ms https://*.clarity.ms https://www.mercadopago.com https://*.mercadopago.com https://*.mlstatic.com https://www.mercadolivre.com https://*.mercadolivre.com https://*.mercadolivre.com.br https://www.mercadolibre.com https://*.mercadolibre.com https://awscdn.portaldoseller.com.br https://*.www.lojaoriodopeixe.com.br https://www.lojaoriodopeixe.com.br;connect-src 'self' https://*.portaldoseller.com.br https://portaldoseller.com.br https://*.pagseguro.com https://api.pagseguro.com https://api.edrone.me https://api.intercom.io https://api.usebeon.io https://api.konfidency.com.br https://api.habla.com https://*.hablla.com https://*.intercom.com https://*.intercom.io https://*.edrone.me https://*.usebeon.io https://*.konfidency.com.br https://newimgebit-a.akamaihd.net https://*.google.com https://*.google.com.br https://*.googleapis.com https://*.google-analytics.com https://*.googletagmanager.com https://*.googletagservices.com https://*.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net https://*.adopt.com.br wss://*.adopt.com.br https://*.goadopt.io wss://*.goadopt.io https://www.facebook.com https://connect.facebook.net https://www.google-analytics.com https://region1.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://bat.bing.com https://c.bing.com https://www.bing.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com wss://*.hotjar.io https://www.clarity.ms https://*.clarity.ms wss://*.hablla.com https://api.reclameaqui.com.br https://*.reclameaqui.com.br https://*.cloudfront.net https://s3.amazonaws.com https://*.s3.amazonaws.com https://*.s3.us-east-1.amazonaws.com https://*.ebit.com.br https://imgs.ebit.com.br https://*.modernamobilia.com.br https://www.modernamobilia.com.br https://modernamobilia.com.br https://doc-0s-5g-sheets.googleusercontent.com https://viacep.com.br https://api.pagar.me https://*.pagar.me https://assets.pagseguro.com.br https://*.cieloecommerce.cielo.com.br https://*.cielo.com.br https://*.userede.com.br https://*.rede.com.br https://*.erede.com.br https://*.clearsale.com.br https://api.iconify.design https://api.mercadopago.com https://*.mercadopago.com https://*.mercadolibre.com https://*.mercadolivre.com https://*.mercadolivre.com.br https://*.k-analytix.com https://i.k-analytix.com https://awscdn.portaldoseller.com.br https://*.www.lojaoriodopeixe.com.br https://www.lojaoriodopeixe.com.br;font-src 'self' data: https://*.portaldoseller.com.br https://portaldoseller.com.br https://*.gstatic.com https://fonts.gstatic.com https://*.adopt.com.br https://*.goadopt.io https://cdnjs.cloudflare.com https://c.usebeon.io https://awscdn.portaldoseller.com.br https://*.clearsale.com.br;frame-src 'self' https://api.pagseguro.com https://*.pagseguro.com https://www.youtube.com https://*.youtube.com https://www.youtube-nocookie.com https://*.youtube-nocookie.com https://*.google.com https://*.google.com.br https://*.googletagmanager.com https://*.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net https://*.adopt.com.br https://*.goadopt.io https://www.googletagmanager.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://td.doubleclick.net https://*.usebeon.io https://*.konfidency.com.br https://*.hablla.com https://www.facebook.com https://connect.facebook.net https://assets.pagseguro.com.br https://*.cieloecommerce.cielo.com.br https://*.cielo.com.br https://*.userede.com.br https://*.rede.com.br https://*.erede.com.br https://*.clearsale.com.br https://www.mercadopago.com https://*.mercadopago.com https://*.mercadolibre.com https://*.mercadolivre.com https://*.mercadolivre.com.br https://*.www.lojaoriodopeixe.com.br https://www.lojaoriodopeixe.com.br;form-action 'self' https://*.pagseguro.com https://api.pagseguro.com https://assets.pagseguro.com.br https://*.pagar.me https://*.cieloecommerce.cielo.com.br https://*.cielo.com.br https://*.userede.com.br https://*.rede.com.br https://*.erede.com.br https://*.clearsale.com.br https://www.mercadopago.com https://*.mercadopago.com https://*.mercadolibre.com https://*.mercadolivre.com https://*.mercadolivre.com.br https://*.bb.com.br https://*.bancobrasil.com.br https://*.itau.com.br https://*.itaubanco.com.br https://*.itau.com https://*.www.lojaoriodopeixe.com.br https://www.lojaoriodopeixe.com.br;frame-ancestors 'self' https://*.portaldoseller.com.br https://portaldoseller.com.br;worker-src 'self' blob:;manifest-src 'self';upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'strict-dynamic' 'nonce-w5topqLQAAkATroeJ++1tmAv'; style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net https://dev.visualwebsiteoptimizer.com https://*.visualwebsiteoptimizer.com https://www.gstatic.com; font-src 'self' data: blob: https://use.typekit.net https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' wss: https://api.segment.io https://cdn.segment.com https://*.segment.com https://*.segment.io https://*.google-analytics.com https://www.google.com https://www.gstatic.com https://dev.visualwebsiteoptimizer.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://scout-cdn.salesloft.com https://*.salesloft.com https://edge.fullstory.com https://rs.fullstory.com https://*.fullstory.com https://access.oshihealth.com https://sdk.iad-02.braze.com https://rest.iad-02.braze.com https://js.appboycdn.com https://*.vimeo.com https://*.vimeocdn.com https://services-api.wyng.com https://*.wyng.com https://*.linkedin.com https://*.facebook.com https://*.tiktok.com; frame-src 'self' https://www.google.com https://player.vimeo.com https://www.youtube.com https://www.youtube-nocookie.com https://vocalvideo.com https://*.vocalvideo.com https://*.visualwebsiteoptimizer.com https://app.vwo.com https://*.facebook.com https://*.linkedin.com; worker-src 'self' blob:; child-src 'self' blob:; media-src 'self' blob: data: https://player.vimeo.com https://*.vimeocdn.com; frame-ancestors 'self'; form-action 'self'; base-uri 'none' 1
font-src https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://www.google.fr https://api.mapbox.com *.tile.openstreetmap.org https://maps.googleapis.com https://maps.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com test.saferpay.com www.saferpay.com saferpay.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://cdnjs.cloudflare.com https://maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://fonts.googleapis.com https://cdnjs.cloudflare.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://nominatim.openstreetmap.org api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://plausible.io https://sc.lfeeder.com https://unpkg.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://*.intercom.io https://*.intercomcdn.com https://*.posthog.com https://*.i.posthog.com https://www.gstatic.com https://www.google.com https://js-agent.newrelic.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://connect.facebook.net https://js.sentry-cdn.com https://s3.amazonaws.com https://cdn.solidarity.tech; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://s3.amazonaws.com/solidarity.tech/ https://irdu.s3.amazonaws.com https://cdn.tiny.cloud https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://unpkg.com https://*.intercomcdn.com https://api.mapbox.com https://cdn.jsdelivr.net https://cdn.solidarity.tech; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://s3.amazonaws.com/solidarity.tech/ https://irdu.s3.amazonaws.com https://cdnjs.cloudflare.com https://*.intercomcdn.com https://maxcdn.bootstrapcdn.com https://cdn.solidarity.tech; connect-src 'self' https://*.google-analytics.com https://www.googletagmanager.com https://plausible.io https://sc.lfeeder.com https://*.posthog.com https://*.i.posthog.com https://*.intercom.io wss://*.intercom.io wss://*.intercom-messenger.com https://*.intercom-messenger.com https://*.intercomcdn.com https://*.intercomusercontent.com https://*.ingest.us.sentry.io https://*.nr-data.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://google.com https://pagead2.googlesyndication.com https://analytics.google.com https://ad.doubleclick.net https://cdn.solidarity.tech; frame-src 'self' https://intercom-sheets.com https://www.recaptcha.net https://www.google.com https://www.gstatic.com https://www.loom.com; media-src 'self' data: https://api.twilio.com https://sdk.twilio.com https://mms.twiliocdn.com https://s3-external-1.amazonaws.com/media.twiliocdn.com/ https://s3.amazonaws.com/solidarity.tech/ https://*.intercomcdn.com; worker-src 'self' blob:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; report-uri /csp-violation-reports 1
font-src *.klarnacdn.net *.typekit.net *.fonts.smct.io *.akamaihd.net *.gstatic.com *.google.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com *.dotdigital-pages.com *.dotdigital.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.liveperson.net *.pinterest.com *.vimeo.com *.lpsnmedia.net *.formstack.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com www.apptrian.com ct.pinterest.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com www.facebook.com *.silentnightbrands-gb.attn.tv *.bazaarvoice.com *.collector-20390.tvsquared.com *.bat.bing.com *.onetrust.com *.google.com *.cdn.smct.io *.cdn.smct.co *.ctfassets.net *.placeholder.com *.photorank.me *.quantserve.com *.ometria.com *.data-8.co.uk *.gstatic.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.apptrian.com www.pinterest.com s.pinimg.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.klarna.com *.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com *.smct.co *.js.smct.io *.bat.bing.com *.rules.quantcount.com *.script.hotjar.com *.lantern.roeyecdn.com *.cdn.attn.tv *.cdn.sub2tech.com *.collector-20390.tvsquared.com *.static.hotjar.com *.dwin1.com *.google.com *.sharethis.com *.google-analytics.com *.googletagmanager.com *.gstatic.com *.googleapis.com *.bazaarvoice.com *.onetrust.com *.trustpilot.com *.ometria.com *.liveperson.net *.quantserve.com *.doubleclick.net *.lpsnmedia.net *.akamaihd.net *.data-8.co.uk *.pinterest.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com display.ugc.bazaarvoice.com *.klarnacdn.net https://static.klaviyo.com unsafe-inline assets.braintreegateway.com *.fonts.smct.io *.akamaihd.net *.data-8.co.uk *.gstatic.com *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com ct.pinterest.com www.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.apptrian.com ct.pinterest.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com connect.facebook.net graph.facebook.com *.ws.hotjar.com *.data-8.co.uk *.content.hotjar.io *.ipl.smct.io *.firehose.eu-west-1.amazonaws.com *.silentnightbrands-gb.attn.tv *.googleads.g.doubleclick.net *.events.attentivemobile.com *.onetrust.com *.akamaihd.net *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; font-src 'self' data: https: https://sleepworldbe.freshdesk.com; form-action 'self'; frame-ancestors 'self'; frame-src 'self' https://www.googletagmanager.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://*.mollie.com https://*.mollie.nl https://*.expivi.net https://*.trustpilot.com https://player.vimeo.com https://www.google.com https://sleepworldbe.freshdesk.com https://view.publitas.com https://*.publitas.com https://platform.getqonfi.com https://data.sleepworld.be; img-src 'self' data: blob: https: https://sleepworldbe.freshdesk.com https://view.publitas.com https://*.publitas.com https://platform.getqonfi.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: https://sleepworldbe.freshdesk.com https://platform.getqonfi.com https://navigator-analytics.tweakwise.com; script-src-elem 'self' 'unsafe-inline' https: https://sleepworldbe.freshdesk.com https://platform.getqonfi.com https://navigator-analytics.tweakwise.com; style-src 'self' 'unsafe-inline' https: https://sleepworldbe.freshdesk.com; connect-src 'self' https: wss: https://sleepworldbe.freshdesk.com https://platform.getqonfi.com https://navigator-analytics.tweakwise.com; media-src 'self' data: https: https://sleepworldbe.freshdesk.com; object-src 'none'; worker-src 'self' blob:; manifest-src 'self' 1
default-src 'self' https://*.google.com https://*.googleapis.com https://*.zencdn.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'report-sample' https://*.equideclic.com https://*.hsforms.net https://*.google.com https://*.gstatic.com https://*.google-analytics.com https://*.hs-scripts.com https://*.youtube.com https://*.facebook.net https://*.hs-banner.com https://*.hsadspixel.net https://*.hubspot.com https://*.hs-analytics.net https://*.usemessages.com https://*.googletagmanager.com https://*.fontawesome.com https://*.adtrafficquality.google https://*.googleapis.com https://*.piwik.pro https://*.zencdn.net https://*.jsdelivr.net https://unpkg.com https://*.jquery.com https://*.googleadservices.com https://*.orcrets.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.googleapis.com https://*.honey.io https://*.zencdn.net https://*.google.com https://*.jquery.com https://*.bootstrapcdn.com https://*.equideclic.com https://*.gstatic.com https://unpkg.com https://*.fontawesome.com https://*.jsdelivr.net; object-src 'none'; base-uri 'self' http://*.shf.eu https://*.equideclic.com; connect-src 'self' https://*.piwik.pro https://*.hsforms.com https://*.google-analytics.com https://*.doubleclick.net https://*.hubspot.com https://*.hubapi.com https://*.google.com https://*.facebook.com https://*.googletagmanager.com https://*.hsappstatic.net https://syndicatedsearch.goog https://*.adtrafficquality.google https://*.fontawesome.com https://*.googleapis.com https://*.equideclic.com https://*.zencdn.net https://*.gstatic.com https://*.jsdelivr.net https://safesearchinc.com https://*.shf.eu wss://*.amazonaws.com https://*.amazonaws.com; manifest-src 'self'; media-src 'self' https://*.amazonaws.com https://*.equideclic.com; worker-src data: blob:; img-src https://*.equideclic.com data: https://*.hsforms.com https://*.google.fr https://*.facebook.com https://*.hubspot.com https://*.googletagmanager.com https://*.google.td https://*.honey.io https://*.google.ca https://*.amazonaws.com https://*.google.be https://*.facebook.net https://*.shf.eu https://*.adtrafficquality.google https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.openstreetmap.org https://*.google-analytics.com http://shf-market.com https://*.piwik.pro http://*.equideclic.com https://shf-market.com blob: https://*.googleusercontent.com http://*.shf.eu https://*.youtube.com https://*.fbcdn.net https://*.shf-market.com https://*.unilim.fr https://*.telemat.org; frame-src https://*.google.com https://*.hubspot.com https://*.hsforms.com https://*.youtube.com https://*.canva.com https://syndicatedsearch.goog https://*.adtrafficquality.google https://*.zscalerthree.net https://*.opendns.com https://*.shf.eu; font-src data: https://*.equideclic.com https://*.gstatic.com https://*.shf.eu https://*.fontawesome.com https://*.bootstrapcdn.com; report-uri https://cron.alpha-beta.crealibs.com/csp_report.php 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-oMkJoHR1UobLd15JZGVvTg' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.salemove.com https://*.glia.com https://js-cdn.dynatrace.com https://*.dynatrace.com https://*.qualtrics.com https://*.siteintercept.qualtrics.com https://zn3kgxd684eecokvc-highmark.siteintercept.qualtrics.com https://zn7zzih38uhatzpaa-highmark.siteintercept.qualtrics.com https://cdn.segment.com https://*.firebase.com https://*.firebaseapp.com https://asset.sapphirecareselect.com https://*.sapphirecareselect.com https://*.ymca.org https://*.livongo.com https://*.mybenefitshome.com https://*.amwell.com https://*.springhealth.com https://*.amazonaws.com https://app.local.league.dev:*; style-src 'self' 'unsafe-inline' https://*.salemove.com https://*.glia.com https://*.qualtrics.com https://*.siteintercept.qualtrics.com https://asset.sapphirecareselect.com https://*.sapphirecareselect.com https://*.ymca.org https://*.livongo.com https://*.mybenefitshome.com https://*.amwell.com https://*.springhealth.com https://*.amazonaws.com; img-src 'self' data: https: blob:; font-src 'self' data: blob: https://asset.sapphirecareselect.com https://*.sapphirecareselect.com https://*.ymca.org https://*.livongo.com https://*.mybenefitshome.com https://*.amwell.com https://*.springhealth.com https://*.amazonaws.com; connect-src 'self' wss: ws: https://*.salemove.com https://*.glia.com https://*.twilio.com wss://*.twilio.com https://*.league.dev https://*.league.com https://*.highmark.com https://*.hmhs.com https://accounts.iel-dev.league.dev https://accounts.myhighmark.com https://js-cdn.dynatrace.com https://*.dynatrace.com https://*.qualtrics.com https://*.siteintercept.qualtrics.com https://cdn.segment.com https://api.segment.io https://*.firebase.com https://*.firebaseapp.com https://firebaseinstallations.googleapis.com https://firebaseremoteconfig.googleapis.com https://identitytoolkit.googleapis.com https://securetoken.googleapis.com https://api.hm-test.league.dev https://*.sentry.io https://asset.sapphirecareselect.com https://*.sapphirecareselect.com https://*.ymca.org https://*.livongo.com https://*.mybenefitshome.com https://*.amwell.com https://*.springhealth.com https://*.amazonaws.com https://*.ytimg.com; media-src 'self' https://*.salemove.com https://*.glia.com; frame-src 'self' https://*.glia.com https://*.qualtrics.com https://*.siteintercept.qualtrics.com https://*.league.dev https://*.myhighmark.com https://*.highmark.com https://*.sapphirecareselect.com https://*.ymca.org https://*.livongo.com https://*.mybenefitshome.com https://*.amwell.com https://*.springhealth.com https://*.amazonaws.com; frame-ancestors https://*.glia.com; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri https://o4504039554088960.ingest.us.sentry.io/api/4504300342149120/security/?sentry_key=6d8283a6b6014e7685f30f81569e386d 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.bolt.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.bolt.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.bolt.com *.commerce-quick-checkout.com http://localhost:8082 https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://api.addressfinder.io https://rum.hlx.page apis.google.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com https://api.addressfinder.io https://static.klaviyo.com *.fontawesome.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.bolt.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://api.addressfinder.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://rum.hlx.page/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' https: data:; font-src 'self' data:; connect-src 'self' https://go.stockfilm.com https://partners-api.stockfilm.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://ad.doubleclick.net https://www.google.com https://www.googleadservices.com https://challenges.cloudflare.com; frame-src https://challenges.cloudflare.com https://www.youtube.com https://player.vimeo.com; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /api/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.hubspot.com *.hsforms.com *.hsforms.net *.hscollectedforms.net *.hscollect.net *.hsappstatic.net *.usemessages.com *.hs-analytics.net *.hsadspixel.net *.hs-banner.com *.hsleadflows.net *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.gstatic.com www.google.com www.google.es www.google.nl www.google.co.uk www.google.de www.google.fr *.youtube.com *.youtube-nocookie.com *.company-target.com *.demandbase.com tag.demandbase.com api.company-target.com tag-logger.demandbase.com cdn.banner.com googleads.g.doubleclick.net *.doubleclick.net code.jquery.com 'strict-dynamic' 'nonce-CcYedE90WqNCM81fAw9r3g=='; script-src-elem 'self' 'unsafe-inline' *.hubspot.com *.hsforms.com *.hsforms.net *.hscollectedforms.net *.hsappstatic.net *.usemessages.com *.hs-analytics.net *.hsadspixel.net *.hs-banner.com *.googletagmanager.com *.google-analytics.com *.gstatic.com www.google.com www.google.es www.google.nl *.youtube.com googleads.g.doubleclick.net cdn.banner.com *.company-target.com *.demandbase.com; style-src 'self' 'unsafe-inline' *.hsappstatic.net *.cloudflare.com cdnjs.cloudflare.com *.googleapis.com fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' *.hsappstatic.net *.cloudflare.com cdnjs.cloudflare.com *.googleapis.com fonts.googleapis.com; font-src 'self' data: *.hsappstatic.net *.hubspotusercontent-eu1.net *.hubspotusercontent.net *.cloudflare.com cdnjs.cloudflare.com *.googleapis.com *.gstatic.com fonts.gstatic.com; frame-src 'self' *.hubspot.com *.hsforms.com *.vimeo.com *.youtube.com www.youtube.com *.youtube-nocookie.com *.google.com www.google.com www.google.es www.google.nl *.googletagmanager.com *.company-target.com *.demandbase.com; connect-src 'self' *.hsforms.net *.hscollectedforms.net *.hsappstatic.net *.hs-analytics.net *.hs-banner.com static.hsappstatic.net *.hubapi.com *.hubspot.com forms.hubspot.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.doubleclick.net googleads.g.doubleclick.net *.google.com www.google.es www.google.nl *.company-target.com *.demandbase.com tag.demandbase.com api.company-target.com tag-logger.demandbase.com; img-src 'self' data: *.hsforms.com *.hsappstatic.net *.hubspot.com *.hubspotusercontent.net *.hubspotusercontent-eu1.net *.fs1.hubspotusercontent-eu1.net forms.hubspot.com track.hubspot.com track-eu1.hubspot.com *.googletagmanager.com *.google-analytics.com *.google.com www.google.es www.google.nl googleads.g.doubleclick.net id.rlcdn.com *.company-target.com *.demandbase.com; object-src 'none'; base-uri 'self'; form-action 'self' *.hubspot.com *.hsforms.com 1
object-src 'none'; script-src 'self' cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://use.fontawesome.com https://www.google.com mdbootstrap.com; script-src-attr 'self'; style-src 'self' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://unpkg.com mdbootstrap.com use.fontawesome.com; style-src-attr 'self'; frame-ancestors 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.gstatic.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.cybersource.com *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.cybersource.com *.googletagmanager.com *.doubleclick.net *.typeform.com *.yotpo.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com *.online-metrix.net *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com *.yotpo.com dhv2ziothpgrr.cloudfront.net https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://fmgaggi.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.disqus.com *.cardinalcommerce.com *.cardinaltrusted.com *.online-metrix.net *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com maxcdn.bootstrapcdn.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://fmgaggi.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.cardinaltrusted.com *.online-metrix.net *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; object-src 'none'; connect-src 'self' api.exponea.com *.bloomreach.com *.eng.bloomreach.com brxcdn.com an.fintokei.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.intercom.io wss://*.intercom.io *.intercomcdn.com *.intercomusercontent.com analytics.twitter.com t.co media.fintokei-web.purple-lab.dev; script-src 'self' 'report-sample' 'unsafe-inline' api.exponea.com *.bloomreach.com an.fintokei.com *.googletagmanager.com widget.trustpilot.com app.intercom.io widget.intercom.io js.intercomcdn.com static.ads-twitter.com; style-src 'self' 'report-sample' 'unsafe-inline' use.typekit.net p.typekit.net; img-src 'self' brxcdn.com *.googletagmanager.com *.google-analytics.com flagsapi.com *.intercom.io *.intercomcdn.com *.intercomassets.com *.intercomusercontent.com analytics.twitter.com t.co data: blob: media.fintokei-web.purple-lab.dev; media-src 'self' brxcdn.com *.intercomcdn.com blob: media.fintokei-web.purple-lab.dev; font-src 'self' use.typekit.net p.typekit.net *.intercomcdn.com; frame-src 'self' www.youtube.com www.googletagmanager.com widget.trustpilot.com *.intercom.io intercom-sheets.com www.intercom-reign.com www.intercom-reporting.com; report-to csp-endpoint; report-uri https://browser-intake-datadoghq.eu/api/v2/logs?dd-api-key=pub9f36bdd521ff9c21024466afd188c833&dd-evp-origin=content-security-policy&ddsource=csp-report 1
default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; report-to csp-endpoint 1
connect-src 'self' https://pagead2.googlesyndication.com/ccm/collect https://content.hotjar.io/ https://app.shop.pe/app/identity/email/1c27d2a0e4244178b049b760ce9a9359 https://app.shop.pe/app/identity/status/1c27d2a0e4244178b049b760ce9a9359 https://app.shop.pe/app/datapartners/status wss://ws.hotjar.com/api/v2/client/ws https://mpc2-prod-25-is5qnl632q-wl.a.run.app/events https://telemetry.us.transcend.io/collect https://ad.doubleclick.net https://analytics.google.com/g/collect https://api.ceros.com/a https://ara.paa-reporting-advertising.amazon/aat https://bat.bing.com https://c.amazon-adsystem.com/aat/ https://cdn-4.convertexperiments.com/api/v1/project-optional-settings/10007679/10043000 https://ct.pinterest.com https://endpoint-app-us.cognigy.ai/14ebb570374a43d035893b667aeab937764578a4a352bb37331c48af46616563 https://ep1.adtrafficquality.google/getconfig/sodar https://googleads.g.doubleclick.net/pagead/id https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT https://lib-us-1.brilliantcollector.com/collector/ https://media.ceros.com/generali/images/ https://p.ksrndkehqnwntyxlhgto.com/session/ https://process.iconnode.com/google-ads/ https://s.amazon-adsystem.com/iu3 https://stats.g.doubleclick.net/g/collect https://transcend-cdn.com/cm/42fd39b9-774f-4a12-8202-15e7a5a1c44f/uiV2/translations/gti/en.json https://www.generalitravelinsurance.com https://www.google-analytics.com https://www.google.com https://www.youtube.com/youtubei/v1/log_event https://y.clarity.ms/collect; default-src 'self'; font-src 'self' data: https://fonts.gstatic.com/s/ https://media-s3-us-east-1.ceros.com/generali/fonts/2021/04/21/ https://view.ceros.com https://www.generalitravelinsurance.com/etc/clientlibs/gga/; frame-src https://9200216.fls.doubleclick.net/ https://ct.pinterest.com/ https://ep2.adtrafficquality.google/ https://s.amazon-adsystem.com https://view.ceros.com/ https://www.google.com/ https://www.youtube.com/; img-src 'self' https://pagead2.googlesyndication.com/ccm/collect https://ade.googlesyndication.com/ddm/activity/src=9200216 https://www.facebook.com/tr/ https://aa.agkn.com/adscores/g.pixel https://ads.samba.tv/cookie_sync https://adservice.google.com/ddm/fls/z/ https://bat.bing.com/action/0 https://c.clarity.ms/c.gif https://cdn-3.convertexperiments.com/uf/10007679/10043000/ https://clients1.google.com/generate_204 https://cm.g.doubleclick.net/pixel https://connect.facebook.net//log/error https://cookie-matching.mediarithmics.com/v1/get_user_agent_id https://d27c6j8064skg9.cloudfront.net/ConversionRateExpert/Generali+Global/test-8/ data: https://dpm.demdex.net https://ep1.adtrafficquality.google/pagead/sodar https://ep2.adtrafficquality.google/generate_204 https://i.ytimg.com/vi/t_FX6YKJDao/maxresdefault.jpg https://ib.adnxs.com/getuid https://lantern.roeye.com/track.php https://lciapi.ninthdecimal.com/v1/lci/sync/adv-amzn/c-23445/ https://loadus.exelator.com/load/ https://media.ceros.com/generali/images/2022/08/19/7a6a31058d62aa93511ab2b46a0ca51f/airplane-2-2.png https://odr.mookie1.com/t/v2 https://pi.ispot.tv/v2/TC-3673-1.gif https://sb.scorecardresearch.com/p https://seal.digicert.com/seals/cascade/ https://spl.zeotap.com/ https://sync.taboola.com/sg/amazon-a9-network/1/rtb https://uipglob.semasio.net/amazon/1/get https://us-u.openx.net/w/1.0/cm https://user-sync.fwmrm.net/ad/u https://usersync.samplicio.us/amazon/pixel.gif https://view.ceros.com/generali/favicon-empty.ico https://www.generalitravelinsurance.com https://www.google.com/pagead/1p-user-list/1070558358/ https://www.googletagmanager.com/a https://www.gstatic.com/recaptcha/api2/logo_48.png https://www.imdb.com/ads/idsync https://www.pages04.net/WTS/event.jpeg https://www.shopperapproved.com https://www.upsellit.com/w:1520/format:webp/d/11943/Generali-Travel-Insurance-TT-09-2023-Testimonials-DV2-slide-1-3X.webp https://www.youtube.com/generate_204 https://x.bidswitch.net/sync_a9/https%3A%2F%2Fs.amazon-adsystem.com%2Fecm3%3Fex%3Dbidswitch.com%26id%3D%24%7BUUID%7D; media-src data:; script-src-attr 'self' 'sha256-WTJgIhbdA/Lg7EHo/tbuWDh+stZXVZjauFU3sgGLWck=' 'sha256-zYF8lubp3wDFtaIVaRdJ6DcpJlu4b1OEIDxKX7it9pI=' 'unsafe-hashes'; script-src-elem 'self' 'sha256-///UcUxSliAr0blLikpvg2lo0rcrRm0FxizPfjgm/rk=' 'sha256-xmElUUOAjxBVvCxpyy14FdwpJ0Y98iiZMkNiuDwaZX4=' 'sha256-DHKEfIniwLW3TuCDMf8xXOw3hzy0Kb7HeOIr9zB4o2c=' 'sha256-D2/o6QTc4rHlHsO3Z8x3p7AiuG8F1gfvrFPNXH20PjM=' 'sha256-0ZzKPxG/TxVf/G8lmgu8VdRVI41pHyeVMISnFghyK6Q=' 'sha256-0kfr6V24+jE3zMT1upJ0nAFPt6bXV+1Gm4+1s3clwsY=' 'sha256-1FM3UzUkqQMCZYVytIvnBxbx5OEg3NaggXuxiQh6ejU=' 'sha256-1Qxikdc/LFumstxJTgn+Bw6gpsDEzjs8a8QVarlE3XI=' 'sha256-1uBDRqjz/Q78Y2xDzNc2yIW6IVjOzVkn/glth+wHNIE=' 'sha256-3Mzo8cIvn6Z6YdJqCOf8wFNhN8Doelp9SeM6d0G3BNM=' 'sha256-4t5W4i1Am7cHIuT6NXwB9A43K+GWRMW4vbhOF8KCox4=' 'sha256-5/08mp2k30cTgy7z+8/J9LhiZku9W+DYF0VTvo7pBaA=' 'sha256-5nZbGIXi4+EF6r1kYbWXtc0M8G7OmezH8pwdinHH+d8=' 'sha256-6cC7GyCf1fALMII7+7LdUlGaGwpsEizimlFHk5TB7M4=' 'sha256-7JmPmFR+LOVvpu6joOqTPjuspOdGg6JFB/oRUwfX/Uw=' 'sha256-AIZyhGUWRqSu/PkaQz2CiqMvsvKFeIH/uwvVJTYyK+M=' 'sha256-AWjdKrykBB9UDl+wkZuzrWbtCdZBKharkFJlV/yXsBc=' 'sha256-Aan1Is4Q7op4CPfC581kjAOEFIxqXTvQaZAwNxELqw4=' 'sha256-AsD/CbBoO4hTvqx44d1qOvmo4QaREw9uH/mWR3VuVB8=' 'sha256-B1WkIIiBe70PM6z/s47zQCFLKHO5cwAFpI5krleWijc=' 'sha256-Blrdt2GifPk/dNkLqjMPN3MKZUzpC7+vP45+xKpxCsI=' 'sha256-BuENMpQAHz2lhSw2hztl5o4PJlclWxmR3uEv4n69VPQ=' 'sha256-CMeSXIsWUOPvyboxngneaqxmjYHYZ02XEdddL9xIpdI=' 'sha256-D7bZqB7lDv3Ew8u1KuoMsG5ncja33nQCcXolaQtIz+Q=' 'sha256-E+y+/Gr+ScmeXQjvb/uW8eWDb8zmMOLEdZ1gafgaNjE=' 'sha256-HITNLZ+JIlwEDAjEZtRaUdZEr5dNX7kn23KsPY+qmCk=' 'sha256-ILdGbe3akxR76A5iAbxK2ozO+VBEKKMcVv/siHirwnk=' 'sha256-Jj/h+TAkfHcdc8YJesapfi5I6SGlx73bhycIBq2emE4=' 'sha256-Jx5jaGeaIcNBbioDJdsz1rxEXWAccqSZFAgbXv0M3z8=' 'sha256-L9duKEk3yG38wGfVwULQQFOEfugRpSsk9K2wm7UM5Cc=' 'sha256-LPbAxAB2jzU9hSbhjJIZBANPZZd4lkTqDIGuHp1BBb8=' 'sha256-LZaP6jdYB3t4OPF0aOPlHXuh9T43DwjaeamMrAkKKZw=' 'sha256-NAvj+elA26gqj+NFeQrD2Lj9qD1SFSUFN1xS89fkJAw=' 'sha256-PWjbK4XVopFXQzmfCdxDiWPwxQ9osC3wXUejcmYWA+g=' 'sha256-Ql5lLkLNknUiGlQ/WKPicPkCA5ij47ZnK8FUcYhNyVs=' 'sha256-RTo/XmJz79vFg1UAamV7/DOUNBTiaIHBcV+aJWQjpfE=' 'sha256-UWt8pMxN4CXgNVErUa9O3iL0MRScmx8QD0No0kjfJU8=' 'sha256-UZGaO+wdlpvckazvhAuMWWrQdSZfIx8csRECStQxQgk=' 'sha256-Uw1oEYZLbQpuRMhuZU4tKrIT09w7eov7VkblpmtFuCk=' 'sha256-V7tmDC/fQ2n/jjf5myaWPbqHwSC4DEQ/89MeAwqzoPU=' 'sha256-VcgTjqFl16Kdd6drWAPc/T6EDJc30+7fcGh+xRv/TqA=' 'sha256-VyB5GfgriXENArRrMa+/oVrpSqJywD9V+egRc3MzQkQ=' 'sha256-WJDiaUfggXr/ipyjOP37JnWudkyIrq4qk82JFoavVwQ=' 'sha256-WtS19Ei10tqjYny6rv6cLLlKLuSK/clZR918mf3RkYg=' 'sha256-XzEnxZGbHTw/yYlYNILzhw4nh2vAiTSndqL3c8AZrx8=' 'sha256-YJBufybyrc6v9Q2sXu7bY3UdJgwPK18TSnHNlJMyhfQ=' 'sha256-Ym7SeRMX6W/Uc9n9WloqUp79fZd+4fcq1Jp+MtZIm+M=' 'sha256-Zj+hCqGakLLpEBUkEZrQc72NHLL5Vmw4fwL5tRMPwj8=' 'sha256-ZvcS/uXjVDGRZF62QGwvKjSmjpRRbzoK6q7JIsrOb0k=' 'sha256-aUnDXWaXNVjXPwdq0Y5oKS7AwlIMSWT55zZQqax8KBk=' 'sha256-bJQ2KeCEbCgGMeOhjgnH7PNcaCBGGG8J/vqvg6+vytI=' 'sha256-bN3s2ypxj5QvdDmUD7LaqDa95HUnFpDaTJqVh1kXxx4=' 'sha256-bYsPoScf7B5SoyFTAC4QG4EG6GvbU/rWJaGtN8cSea0=' 'sha256-crmmBXOKqh/XceOaWyRbVfbYFLs7HxFsSnsWmTmKh64=' 'sha256-dXGi34f0R1kS/pouPFt1xRV060Zd7UsN5/qH4ZIRYnE=' 'sha256-dYZ+dbIJiVmVAUtDw9cRR240N0geX77JGk2mdDAlWL8=' 'sha256-e43GTI5II2uEy/GPrVuA/Q/NDiFxp8L/DzTJPh2trSM=' 'sha256-f2oDUIGlcSAu81aEdizllqjizUFoWwVOg+3JLqTTE0E=' 'sha256-gFDbI+IZyUU50Mm5vZk40ZTuOLLq0Al1KyFbdaUs5Y4=' 'sha256-izrEdSzUBPw7MZO1bGdnGOj42UIWlQzq/AX/nESa8K4=' 'sha256-lustC1PXBtNXfx71NoWfWA1Zm0K2dmUZkkdjQYiMIUM=' 'sha256-o2YZf6Nik2WrJhlamb785RyPjskCUt8C4LTLRL1S0CA=' 'sha256-oe6jYwxw5Nds91fU/AbelZ+0rPGVMX9X8/ear9BkPz0=' 'sha256-qXlUeRVj5kM2J69m7qnkmiGCrW2T2q83xH3QV6nBUWY=' 'sha256-rAiQNEphuAiI0TPnjFOUuJcilNDmKiJUviDu71R3EfE=' 'sha256-sX+zV/TTF/oEXtbDCyAEgUY77gJhO6G/AvTXnokZxbU=' 'sha256-ssqYNpJbdoym5DUm1my69f1EGuUqmnevv0w9x18hdI0=' 'sha256-t946nTBC1tXux5cAXPg4Ex6WSP4Z/NgjWAnfXPFehjs=' 'sha256-uvZKhZw75zMFJvlf26u6fjYqq0JC3+eFznsxWmhf0UI=' 'sha256-uxjTy0756lRUJB/Qq/6WTdB6J60z7CYwDyZSHI3I7Ik=' 'sha256-wnE67d2KiOE4sB57AEb4a4EDpB6haQFtVZTBIqqpsHQ=' 'sha256-y7mrdDmiM/91xEeZgZt6feX9sY9OMPAjZDC8dRUwwhE=' 'sha256-yjoyYh3pL9kuPCyioN0Rv2COWKzD28r+Ec+eoLdShrQ=' 'sha256-Ky9ZQUftVPxNnoHJXompzhO3iu+/+tmR8deoddvhSl4=' 'sha256-q3rgWt4K0lzo8Q346XAH9bsBV2lLQr8tyGfWLJudYik=' https://script.hotjar.com/modules.75bf3488a101739acfe9.js https://release-assets.githubusercontent.com/github-production-release-asset/838377826/ https://ct.pinterest.com/static/ct/token_create.js https://addshoppers.s3.amazonaws.com/customize/672dd071d4447b639fd06e34/ https://shopper.shop.pe/input.js https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js https://app.shop.pe/app/init/params https://app.upsellit.com https://assets.ceros.com/8.14.125/view.ceros.com/default/assets/player/ https://bat.bing.com https://c.amazon-adsystem.com/aat/amzn.js https://cdn-4.convertexperiments.com/v1/js/10007679-10043000.js https://cdn.auth0.com/js/ https://connect.facebook.net https://content-us-9.content-cms.com/6d6d96be-0be5-4b28-9f9e-66eafcb31c5c/dxdam/f7/f788785f-d1de-40bc-89a5-9654770002ad/generali_aconnect.js https://creative-services.ceros.com/ceros/quiz-plugin/v1-1/main.min.js https://cse.google.com https://d2mjzob2nc713b.cloudfront.net/widget/ https://ep2.adtrafficquality.google/sodar/sodar2.js https://github.com/Cognigy/Webchat/releases/latest/download/webchat.js https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1070558358/ https://lantern.roeyecdn.com/lantern_global_49127.min.js https://media.ceros.com/generali/doc-version-json/v11/experience-version-693b35f07cc96.js https://pagead2.googlesyndication.com/bg/gc00flWitZZjz8qe1_LZ6jEKqKTgyg0GJmZtTMLaTnA.js https://s.ksrndkehqnwntyxlhgto.com/110816.js https://s.pinimg.com/ct/ https://scripts.clarity.ms/0.8.69/clarity.js https://sdk.ceros.com/standalone-player-sdk-v5.min.js https://seal.digicert.com/seals/cascade/seal.min.js https://shop.pe/widget/widget_async.js https://static.doubleclick.net/instream/ad_status.js https://static.hotjar.com/c/hotjar-3056567.js https://test-htp.tokenex.com/iframe/iframe-v3.min.js https://htp.tokenex.com/iframe/iframe-v3.min.js https://transcend-cdn.com/cm/42fd39b9-774f-4a12-8202-15e7a5a1c44f/ https://view.ceros.com https://www.clarity.ms/tag/ https://www.dwin1.com/49127.js https://www.generalitravelinsurance.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com/recaptcha/releases/ https://www.sc.pages04.net/lp/static/js/iMAWebCookie.js https://www.upsellit.com/active/generalitravelinsuranceus.jsp https://www.youtube.com/s/; style-src-attr 'self' 'unsafe-inline' 'unsafe-hashes'; style-src 'self' 'unsafe-inline' https://assets.ceros.com/8.14.125/view.ceros.com/default/assets/player/applications/html5-player/css/html5-player.css https://fonts.googleapis.com https://media.ceros.com/generali/fonts/2021/04/21/ https://transcend-cdn.com/cm/42fd39b9-774f-4a12-8202-15e7a5a1c44f/uiV2/themes/gti.css https://view.ceros.com https://www.generalitravelinsurance.com https://www.google.com/cse/static/ https://www.gstatic.com/recaptcha/releases/ https://www.youtube.com/s/; style-src-elem 'self' 'unsafe-inline' https://assets.ceros.com/8.14.125/view.ceros.com/default/assets/player/applications/html5-player/css/html5-player.css https://fonts.googleapis.com https://media.ceros.com/generali/fonts/2021/04/21/ https://transcend-cdn.com/cm/42fd39b9-774f-4a12-8202-15e7a5a1c44f/uiV2/themes/gti.css https://view.ceros.com https://www.generalitravelinsurance.com https://www.google.com/cse/static/ https://www.gstatic.com/recaptcha/releases/ https://www.youtube.com/s/; worker-src blob: https://www.google.com/recaptcha/api2/webworker.js; script-src 'unsafe-eval'; frame-ancestors 'self' *.generalitravelinsurance.com *.vacationprotection.com *.vacationrentalinsurance.com *.generalipartner.com;  frame-src 'self' https://test-htp.tokenex.com/ https://htp.tokenex.com/ https://content-us-9.content-cms.com/ *.generalitravelinsurance.com *.vacationprotection.com *.vacationrentalinsurance.com *.generalipartner.com 1
default-src 'self' * data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' * data: blob:; style-src 'self' 'unsafe-inline' *; img-src 'self' data: *; font-src 'self' * data:; connect-src 'self' *; frame-src 'self' *; frame-ancestors 'self'; report-uri https://unwomen.de 1
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.checkout-api.avarda.com *.checkout-cdn.avarda.com checkout-cdn.avarda.com *.klevu.com *.ksearchnet.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.google.com/ *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.checkout-cdn.avarda.com checkout-cdn.avarda.com card-payment-frame.production.avarda.com *.stage.avarda.com pay.google.com www.googletagmanager.com consentcdn.cookiebot.com checkout-uat.collector.se checkout.uat.walleydev.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io 'self' data: www.google.fi *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com *.core.windows.net *.checkout-api.avarda.com checkout-api.avarda.com *.checkout-cdn.avarda.com checkout-cdn.avarda.com openbanking-logos.production.avarda.com *.klevu.com *.ksearchnet.com magefan.com cm.magefan.com *.disqus.com https://www.magezon.com bat.bing.com imgsct.cookiebot.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.core.windows.net *.checkout-cdn.avarda.com checkout-cdn.avarda.com *.stage.avarda.com pay.google.com *.klevu.com *.ksearchnet.com *.disqus.com https://bot.leadoo.com https://*.cloudfront.net https://static.zdassets.com https://assets.voyado.com consent.cookiebot.com app.kuvio.io api.custobar.com a.omappapi.com static.redeal.se t.myvisitors.se static.hotjar.com bat.bing.com analytics.tiktok.com track.adform.net s2.adform.net consentcdn.cookiebot.com script.hotjar.com checkout-uat.collector.se checkout.uat.walleydev.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.klevu.com *.ksearchnet.com a.omappapi.com *.yotpo.com dhv2ziothpgrr.cloudfront.net https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com *.checkout-api.avarda.com checkout-api.avarda.com google.com www.google.com pay.google.com *.klevu.com *.ksearchnet.com wss://*.zopim.com https://*.zendesk.com/ https://bot.leadoo.com/ tracking.rajalacamera.fi ekr.zdassets.com api.omappapi.com api.onsite.voyado.com bat.bing.com analytics.tiktok.com consentcdn.cookiebot.com anl.leadoo.com t1.staging.voyado.com api.checkout.uat.walleydev.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-oz5eH5yU8EnQ8C3JobyxaA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; report-uri /csp/report 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com *.googleapis.com https://applepay.cdn-apple.com https://maxcdn.bootstrapcdn.com *.feedbackcompany.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.feedbackcompany.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://applepay.cdn-apple.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://sst.wagnershop.eu www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://static.buckaroo.nl https://www.buckaroo.nl https://www.paypalobjects.com https://pay.google.com https://developers.google.com https://applepay.cdn-apple.com https://sst.wagnershop.eu www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.feedbackcompany.com 'self' data: magefan.com cm.magefan.com https://firebasestorage.googleapis.com * *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.fontawesome.com *.googleapis.com *.gstatic.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com https://www.sandbox.paypal.com https://applepay.cdn-apple.com https://pay.google.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://sst.wagnershop.eu data: www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.feedbackcompany.com *.avada.io *.shopify.com * *.googletagmanager.com tagmanager.google.com https://*.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com assets.braintreegateway.com *.fontawesome.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://maxcdn.bootstrapcdn.com *.googleapis.com https://fonts.bunny.net tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://applepay.buckaroo.io https://smp-paymentservices.apple.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://maps.googleapis.com https://pagead2.googlesyndication.com https://sst.wagnershop.eu https://google.com https://www.googletagmanager.com https://www.google-analytics.com https://*.mida.so https://*.ahrefs.com https://*.cookieconfirm.com https://*.hotjar.io wss://*.hotjar.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.feedbackcompany.com https://get.geojs.io *.avada.io *.google-analytics.com *.analytics.google.com *.googletagmanager.com https://*.lambda-url.eu-central-1.on.aws/ https://*.g.doubleclick.net https://*.google.nl https://*.visualwebsiteoptimizer.com https://*.ecs.us-west-1.on.aws https://*.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-ow6khj0wqfNkuRMXJCJtAw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; base-uri 'self'; object-src 'none'; img-src 'self' data:; script-src 'self'; style-src 'self'; frame-src 'self'; connect-src 'self'; font-src 'self' data:; form-action 'self'; frame-ancestors 'self'; report-to csp-endpoint 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.braintreegateway.com *.paypal.com google.com *.google.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app www.xtento.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app maps.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.xtento.com cdn.xtento.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://redchamps.com 'self' data: t.zip.co static.zipmoney.com.au data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app maps.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.xtento.com cdn.xtento.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.gstatic.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com static.zipmoney.com.au zip.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app https://static.klaviyo.com unsafe-inline assets.braintreegateway.com *.googleapis.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.google-analytics.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https: 'unsafe-inline' 'unsafe-eval'; font-src https: data:; img-src https: data:; frame-src https:; connect-src https: wss: 1
default-src 'self' https://bam.nr-data.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://ajax.googleapis.com https://bam.nr-data.net https://js-agent.newrelic.com https://www.google.com https://www.gstatic.com https://s0.wp.com https://stats.wp.com https://8521731acb55e27ebaae-258a0d56dbe4104a261df14c8a0fba08.ssl.cf2.rackcdn.com https://unpkg.com https://static.tagboard.com https://cdn.parsely.com https://boards.greenhouse.io https://p1.parsely.com https://infird.com https://www.dropbox.com; script-src-elem 'self' 'unsafe-inline' https://js-agent.newrelic.com https://stats.wp.com https://cdn.parsely.com https://8521731acb55e27ebaae-258a0d56dbe4104a261df14c8a0fba08.ssl.cf2.rackcdn.com https://bam.nr-data.net https://ajax.googleapis.com https://s0.wp.com https://www.google.com https://boards.greenhouse.io https://www.gstatic.com https://static.tagboard.com/ https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://s0.wp.com https://8521731acb55e27ebaae-258a0d56dbe4104a261df14c8a0fba08.ssl.cf2.rackcdn.com; style-src-elem 'self' 'unsafe-inline' https://8521731acb55e27ebaae-258a0d56dbe4104a261df14c8a0fba08.ssl.cf2.rackcdn.com https://fonts.googleapis.com https://s0.wp.com; img-src 'self' data: https://s0.wp.com https://pixel.wp.com https://www-staging.btig.com https://secure.gravatar.com https://8521731acb55e27ebaae-258a0d56dbe4104a261df14c8a0fba08.ssl.cf2.rackcdn.com https://bam.nr-data.net https://p1.parsely.com https://i.vimeocdn.com https://www.googletagmanager.com; connect-src 'self' https://public-api.wordpress.com https://bam.nr-data.net https://stats.wp.com https://client.btig.com https://odi.btig.com https://www.google.com https://api.parsely.com https://p1.parsely.com https://rktds.net https://adtonus.com https://code.jquery.com https://www.google-analytics.com https://region1.google-analytics.com https://apis.google.com; font-src 'self' https://fonts.gstatic.com https://8521731acb55e27ebaae-258a0d56dbe4104a261df14c8a0fba08.ssl.cf2.rackcdn.com https://s0.wp.com data:; object-src 'none'; frame-src 'self' https://www.google.com https://wordpress.com https://embed.tagboard.com https://job-boards.greenhouse.io https://player.vimeo.com https://content.googleapis.com https://widgets.wp.com; child-src 'self' https://www.google.com https://wordpress.com https://embed.tagboard.com https://job-boards.greenhouse.io https://player.vimeo.com https://content.googleapis.com; form-action 'self' https://client.btig.com https://webto.salesforce.com; base-uri 'self'; worker-src 'self' blob:; manifest-src 'self';  report-uri https://www.btig.com/wp-json/ip-security-headers/v1/csp-report; 1
object-src 'none';base-uri 'self';script-src 'nonce-zg46gGmd2fKbxMVPCUniSA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.hotjar.com https://static.ads-twitter.com https://3ieinternational.my.salesforce-sites.com https://www.googletagmanager.com https://snap.licdn.com https://www.google-analytics.com https://static.ads-twitter.com/uwt.js https://script.hotjar.com https://s7.addthis.com https://www.google.com https://t.sharethis.com https://platform-api.sharethis.com https://e.infogram.com https://www.clarity.ms https://s3.amazonaws.com https://px.ads.linkedin.com https://3ieimpact.us2.list-manage.com/subscribe/post-json https://scripts.clarity.ms/0.8.69/clarity.js cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.highcharts.com https://d1bxh8uas1mnw7.cloudfront.net https://d3js.org https://kendo.cdn.telerik.com https://static.addtoany.com https://unpkg.com https://ws.sharethis.com https://www.gstatic.com mdbootstrap.com platform.instagram.com platform.twitter.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://static.hotjar.com https://static.ads-twitter.com https://3ieinternational.my.salesforce-sites.com https://www.googletagmanager.com https://snap.licdn.com https://www.google-analytics.com https://static.ads-twitter.com/uwt.js https://script.hotjar.com https://s7.addthis.com https://www.google.com https://t.sharethis.com https://platform-api.sharethis.com https://e.infogram.com https://www.clarity.ms https://s3.amazonaws.com https://px.ads.linkedin.com https://3ieimpact.us2.list-manage.com/subscribe/post-json https://scripts.clarity.ms/0.8.69/clarity.js cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.highcharts.com https://d1bxh8uas1mnw7.cloudfront.net https://d3js.org https://kendo.cdn.telerik.com https://static.addtoany.com https://unpkg.com https://ws.sharethis.com https://www.gstatic.com mdbootstrap.com platform.instagram.com platform.twitter.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://ws.sharethis.com https://cdn-images.mailchimp.com cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https://cdn.jsdelivr.net https://fonts.googleapis.com https://kendo.cdn.telerik.com https://maxcdn.bootstrapcdn.com https://www.google.com mdbootstrap.com use.fontawesome.com; style-src-elem 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://ws.sharethis.com https://cdn-images.mailchimp.com cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https://cdn.jsdelivr.net https://fonts.googleapis.com https://kendo.cdn.telerik.com https://maxcdn.bootstrapcdn.com https://www.google.com mdbootstrap.com use.fontawesome.com; form-action 'self' https://3ieimpact.us2.list-manage.com/subscribe/post-json; frame-ancestors 'self' 1
form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors https://api.clerk.io https://cdn.clerk.io 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.playground.klarna.com cdn.klarna.com www.google.com js.klarna.com youtube.com www.youtube.com *.cookiebot.com *.klarna.com *.kustom.co *.issuu.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://plumrocket.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com *.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.gstatic.com *.googlesyndication.com https://api.clerk.io https://cdn.clerk.io *.clerk.io *.algolia.net *.algolianet.com polyfill.io cdn.klarna.com x.klarnacdn.net *.playground.klarna.com tagmanager.google.com www.google-analytics.com ssl.google-analytics.com www.google.com www.gstatic.com *.cookiebot.com cdn.clerk.io api.clerk.io vjs.zencdn.net player.vimeo.com js.playground.klarna maps.googleapis.com *.klarna.com *.kustom.co *.hotjar.com *.emailplatform.com *.sleeknote.com *.klarnaservices.com s.zavanna.no bat.bing.com secure.authorize.net test.authorize.net *.googleadservices.com js.braintreegateway.com *.paypal.com 1eafapi.cardinalcommerce.com.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com widget.postenlabs.no cdn.clerk api.clerk *.paypalobjects.com *.snapchat.com sc-static.net *.klarnacdn.net songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.playground.klarnaevt.com *.cookiebot.com *.klarnaevt.com *.klarnauserservices.com *.klarnaservices.com maps.googleapis.com *.klarna.com *.kustom.co s.zavanna.no stats.g.doubleclick.net *.snapchat.com bat.bing.com *.klarnacdn.net x.klarnacdn.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; font-src https://pim.zavanna.no/ fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com x.klarnacdn.net maxcdn.bootstrapcdn.com s.zavanna.no data: *.klarnacdn.net data: 'self' 'unsafe-inline'; style-src https://pim.zavanna.no/ *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com https://api.clerk.io https://cdn.clerk.io tagmanager.google.com vjs.zencdn.net maxcdn.bootstrapcdn.com x.klarnacdn.net s.zavanna.no *.klarnacdn.net assets.braintreegateway.com 'self' 'unsafe-inline'; img-src https://pim.zavanna.no/ assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: *.google.nl *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com https://cdn.clerk.io *.clerk.io cdn.klarna.com *.playground.klarnaevt.com ssl.gstatic.com www.gstatic.com *.cookiebot.com eu.playground.klarnaevt.com maps.gstatic.com maps.googleapis.com *.klarnaservices.com *.kustom.co s.zavanna.no bat.bing.com *.google.com *.google.pl *.snapchat.com sc-static.net pim.zavanna.no *.klarna.com *.klarnaevt.com *.klarnacdn.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; report-uri /csp/report; report-to report-endpoint; 1
; worker-src 'strict-dynamic'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cdn.managed-protection.com https://www.googletagmanager.com; report-uri https://acronis.report-uri.com/r/t/csp/reportOnly 1
script-src-elem 'unsafe-inline' data: 'self' data: *.googletagmanager.com *.gstatic.com *.google.com/recaptcha/api.js *.googleapis.com *.cookiebot.com *.doubleclick.net *.google-analytics.com *.clarity.ms *.apsis.one *.licdn.com *.facebook.net trackcmp.net prism.app-us1.com diffuser-cdn.app-us1.com *.ipify.org *.cookiebot.com/uc.js *.cloudfront.net *.zdassets.com *.sendcloud.sc *.jsdelivr.net pay.google.com/gp/p/js/pay.js *.multisafepay.com *.cookiecode.nl *.hotjar.com *.bing.com consent.studio; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com maxcdn.bootstrapcdn.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.twitter.com *.multisafepay.com https://pay.google.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com *.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io maps.googleapis.com maps.gstatic.com *.googleapis.com https://images.unsplash.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.multisafepay.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.cloudflare.com *.twitter.com *.google-analytics.com *.google.com/recaptcha/api.js *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.feedbackcompany.com *.consent.studio *.multisafepay.com https://pay.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com maxcdn.bootstrapcdn.com *.multisafepay.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.cloudflare.com *.twitter.com *.twimg.com *.demdex.net *.feedbackcompany.com *.multisafepay.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://ecomwise.report-uri.com/r/d/csp/reportOnly; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://stats.wp.com https://ewi-dev.llycw.com https://ewi-qa.llycw.com https://llycw.com https://cscript-cdn-use.aparito.com https://cscript-cdn-use-uat.aparito.com https://asset-cdn-use.aparito.com https://asset-cdn-use-uat.aparito.com https://cscript-cdn-use.cassiecloud.com https://cscript-cdn-use.lilly.com; style-src 'self' 'unsafe-inline' https://ewi-dev.llycw.com https://ewi-qa.llycw.com https://llycw.com https://fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' https://ewi-dev.llycw.com https://ewi-qa.llycw.com https://llycw.com https://fonts.googleapis.com http://fonts.googleapis.com https://cscript-cdn-use.aparito.com https://cscript-cdn-use-uat.aparito.com; connect-src 'self' https://ewi-dev.api.llycw.com https://ewi-qa.api.llycw.com https://api.llycw.com https://ids-use.aparito.com https://ids-use-uat.aparito.com https://cscript-cdn-use.aparito.com https://cscript-cdn-use-uat.aparito.com https://cscript-cdn-use.cassiecloud.com https://asset-cdn-use.aparito.com https://asset-cdn-use-uat.aparito.com https://ids-use.lillytempo.com https://ids-use.lillyoncologysupport.com https://ids-use.lillyloxooncologypipeline.com https://ids-use.lrlscience.com https://ids-use.syrenis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https: http:; media-src 'self' https://20038073.fs1.hubspotusercontent-na1.net; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com 1
font-src fonts.gstatic.com *.typekit.net *.hotjar.com www.bugherd.com *.cloudfront.net *.bootstrapcdn.com *.fontawesome.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.hotjar.com www.facebook.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de www.facebook.com www.google.com www.google.co.uk stats.g.doubleclick.net bugherd-attachments.s3.amazonaws.com *.cloudfront.net *.bing.com *.t.co t.co www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.ampproject.org raw.githubusercontent.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.hotjar.com chimpstatic.com connect.facebook.net www.google.com www.gstatic.com www.googletagmanager.com googleads.g.doubleclick.net www.bugherd.com *.cloudfront.net static.ads-twitter.com *.static.ads-twitter.com *.bing.com *.postaffiliatepro.com *.twitter.com *.pcapredict.com *.postcodeanywhere.co.uk *.worldpay.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com s7.addthis.com *.avada.io assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.typekit.net *.cloudfront.net *.bootstrapcdn.com *.postcodeanywhere.co.uk cdn.dnky.co webchat.dotdigital.com *.fontawesome.com unsafe-inline *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com cdn.ampproject.org *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.hotjar.com *.hotjar.io www.bugherd.com sessions.bugsnag.com wss://ws.pusherapp.com www.googleadservices.com www.google.co.uk stats.g.doubleclick.net www.facebook.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com ekr.zdassets.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-HLpWlyaUm0IvyQ3yeP3ktBPiZgKQSEG2N3xvGWSDRuT_tF1DZKEv6Q' 'strict-dynamic' 'wasm-unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://maps.googleapis.com https://maps.gstatic.com https://player.vimeo.com https://unpkg.com https://cdnjs.cloudflare.com https://bat.bing.com https://cdn.matomo.cloud https://snap.licdn.com https://*.livechatinc.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com blob: https://www.googletagmanager.com https://www.google-analytics.com https://maps.gstatic.com https://maps.googleapis.com https://mapsresources-pa.googleapis.com https://fonts.gstatic.com https://imgsct.cookiebot.com https://i.vimeocdn.com https://f.vimeocdn.com https://i.ytimg.com https://bat.bing.com https://bat.bing.net https://px.ads.linkedin.com https://www.google.com https://www.google.de https://px4.ads.linkedin.com; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://www.googletagmanager.com https://consentcdn.cookiebot.com https://global.frcapi.com https://player.vimeo.com https://www.youtube.com https://www.youtube-nocookie.com https://*.livechatinc.com https://outlook.office365.com https://bookings.cloud.microsoft; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://www.googletagmanager.com 'report-sample'; connect-src 'self' blob: https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://maps.googleapis.com https://mapsresources-pa.googleapis.com https://www.gstatic.com https://consentcdn.cookiebot.com https://consent.cookiebot.com https://api.friendlycaptcha.com https://global.frcapi.com https://player.vimeo.com https://vimeo.com https://unpkg.com https://cdnjs.cloudflare.com https://bat.bing.com https://bat.bing.net https://knf.matomo.cloud https://www.google.com https://px.ads.linkedin.com https://ad.doubleclick.net https://*.livechatinc.com wss://*.livechatinc.com; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net; media-src 'self' blob: https://player.vimeo.com https://vimeocdn.com https://*.vimeocdn.com; worker-src 'self' 'nonce-HLpWlyaUm0IvyQ3yeP3ktBPiZgKQSEG2N3xvGWSDRuT_tF1DZKEv6Q' 'strict-dynamic' 'wasm-unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://maps.googleapis.com https://maps.gstatic.com https://player.vimeo.com https://unpkg.com https://cdnjs.cloudflare.com https://bat.bing.com https://cdn.matomo.cloud https://snap.licdn.com https://*.livechatinc.com blob: 'report-sample'; report-uri https://knf.com/en/@http-reporting?csp=report&requestTime=1789269435575997&requestHash=c63e87ba692d3b6eccc8d9c4015d6674180b388f 1
font-src www.paypalobjects.com *.googleapis.com https://fonts.gstatic.com *.yotpo.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://plumrocket.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.storyblok.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.affirm.com *.affirm.ca *.certcapture.com https://fast.amc.demdex.net https://vimeo.com *.player.vimeo.com http://consent-pref.trustarc.com https://consent-pref.trustarc.com https://plumrocket.com *.weltpixel.com *.yotpo.com https://*.online-metrix.net https://imgs.signifyd.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src data: *.assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com https://maps.gstatic.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.affirm.com *.affirm.ca *.certcapture.com *.storyblok.com https://cdn1.1800flowers.com *.googletagmanager.com *.amcglobal.sc.omtrdc.net *.portotheme.com https://images.contentstack.io https://px.ads.linkedin.com https://p.adsymptotic.com http://consent.trustarc.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.yotpo.com https://imgs.signifyd.com https://*.online-metrix.net *.gstatic.com *.google-analytics.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.gstatic.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.affirm.com *.affirm.ca *.certcapture.com *.storyblok.com https://optimize.google.com https://www.googleoptimize.com/optimize.js http://tags.tiqcdn.com https://js-agent.newrelic.com https://cdn.auth0.com https://bam.nr-data.net *.jquery.com https://assets.adobedtm.com *.auth0.com data: https://snap.licdn.com/li.lms-analytics/insight.min.js https://px.ads.linkedin.com https://www.googleoptimize.com https://edge.fullstory.com/s/fs.js *.rs.fullstory.com https://rs.fullstory.com/rec/integrations https://snap.licdn.com/ https://service.force.com/ https://cdnjs.cloudflare.com/ https://*.salesforce.com/ https://hello.zonos.com/ https://*.salesforceliveagent.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.googletagmanager.com *.yotpo.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net *.googleadservices.com *.google.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com assets.braintreegateway.com fonts.googleapis.com *.certcapture.com *.storyblok.com https://fonts.googleapis.com https://use.typekit.net https://*.salesforceliveagent.com https://*.salesforce.com/ https://static.klaviyo.com *.yotpo.com *.googleapis.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.storyblok.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.affirm.com *.affirm.ca *.certcapture.com *.google-analytics.com https://stats.g.doubleclick.net https://bam.nr-data.net *.dpm.demdex.net *.rs.fullstory.com https://rs.fullstory.com/rec/page https://rs.fullstory.com/rec/bundle *.assets.adobedtm.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.yotpo.com https://imgs.signifyd.com *.analytics.google.com *.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' cafdonate.cafonline.org assets.calendly.com *.googletagmanager.com *.google-analytics.com https://unpkg.com/htmx.org@1.7.0/dist/htmx.js https://unpkg.com/htmx.org@1.7.0/dist/htmx.min.js cdnjs.cloudflare.com/ajax/libs/gsap/3.10.2/gsap.min.js https://cdnjs.cloudflare.com/ https://www.eventbrite.co.uk/static/widgets/eb_widgets.js cdn.datatables.net; style-src 'self' 'unsafe-inline'; frame-src 'nonce-eHB2Ynl3dGdhcHVtd3d2bGdkZW94dnN6bmJqdm11dXBxb3py' *.youtube.com *.calendly.com *.cafonline.org *.eventbrite.co.uk; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' https://www.googletagmanager.com https://pagead2.googlesyndication.com https://fundingchoicesmessages.google.com; style-src 'self'; img-src 'self' data: blob: https://assets.kitploit.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://fundingchoicesmessages.google.com; frame-src 'self' https://googleads.g.doubleclick.net https://fundingchoicesmessages.google.com; worker-src 'self' blob: 1
default-src 'self'; frame-ancestors 'self' https://www.thingsmobile.com https://thingsmobile.com https://iubenda.com https://www.iubenda.com; base-uri 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.iubenda.com https://*.nexi.it https://*.nexigroup.com https://acsbapp.com https://ajax.googleapis.com https://apis.google.com https://beacon-v2.helpscout.net https://cdn.calconic.com https://cdnjs.cloudflare.com https://googleads.g.doubleclick.net https://platform.twitter.com https://unpkg.com https://use.typekit.net https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://www.gstatic.com https://www.paypal.com https://www.paypalobjects.com https://*.facebook.net ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://unpkg.com https://cdn.datatables.net https://www.gstatic.com https://cdnjs.cloudflare.com https://www.googleadservices.com; object-src 'none'; connect-src *; font-src 'self' data: https://fonts.gstatic.com https://use.typekit.net; frame-src *; img-src data: blob: *; manifest-src 'self'; media-src 'self'; worker-src 'none';report-uri https://csp.thingsmobile.com/csp-report; report-to csp-endpoint; 1
font-src www.paypalobjects.com *.googleapis.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com https://cdnjs.cloudflare.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com blog.haengemattenshop.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com blog.haengemattenshop.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com blog.haengemattenshop.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com js.mollie.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com www.xtento.com blog.haengemattenshop.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com *.googleapis.com *.gstatic.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com magefan.com cm.magefan.com quickchart.io img.youtube.com https://www.mollie.com www.xtento.com cdn.xtento.com blog.haengemattenshop.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.gstatic.com apis.google.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com widget.freshworks.com m2epro.freshdesk.com js.mollie.com https://cdnjs.cloudflare.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com www.xtento.com cdn.xtento.com blog.haengemattenshop.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com widget.freshworks.com m2epro.freshdesk.com maxcdn.bootstrapcdn.com fonts.gstatic.com https://fonts.googleapis.com https://cdnjs.cloudflare.com *.stripe.network *.stripecdn.com *.amazon.com blog.haengemattenshop.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blog.haengemattenshop.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com widget.freshworks.com m2epro.freshdesk.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com blog.haengemattenshop.com 'self' 'unsafe-inline'; child-src blog.haengemattenshop.com http: https: blob: 'self' 'unsafe-inline'; default-src blog.haengemattenshop.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' www.google-analytics.com ajax.googleapis.com www.google.com google.com gstatic.com www.gstatic.com connect.facebook.net facebook.com;; frame-src https://*.iprom.net/ https://*.dotmetrics.rocks/; script-src 'self' 'unsafe-inline' https://cdn-cookieyes.com/ https://iprom.net/ https://*.iprom.net/ https://d1xnn692s7u6t6.cloudfront.net/ https://*.google-analytics.com/ https://*.google.com/ https://www.googletagmanager.com/ https://www.gstatic.com/ https://ced.sascdn.com/ https://script.dotmetrics.net/ https://script.dotmetrics.rocks/ ; connect-src 'self' https://log.cookieyes.com/ https://cdn-cookieyes.com/ https://iprom.net/ https://script.dotmetrics.net/ https://*.google-analytics.com/ https://region1.analytics.google.com/ https://script.dotmetrics.rocks/; style-src 'self' 'unsafe-inline' https://www.google.com/; img-src 'self' data: https://script.dotmetrics.net/ https://script.dotmetrics.rocks/ https://iprom.net/ https://*.iprom.net/ https://cdn-cookieyes.com/ https://www.google.si/  1
default-src https: 'self'; img-src https: data:; style-src https: 'unsafe-inline'; script-src https: 'unsafe-inline' 'unsafe-eval'; font-src https: data:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
upgrade-insecure-requests ; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com data: fonts.googleapis.com *.hotjar.com *.zopim.com app.probefahrtenbutler.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://plumrocket.com www.facebook.com finanzieren.consorsfinanz.de checkout.consorsfinanz.de 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://static.addtoany.com/ www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.googletagmanager.com js.mollie.com https://plumrocket.com td.doubleclick.net secure.pay1.de *.klarna.com *.klarnaservices.com/ payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com cdn.dnky.co www.youtube.com *.hotjar.com *.facebook.com *.trustpilot.com *.criteo.com inoa.de *.awin1.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.klarnacdn.net *.google.com *.googleadservices.com *.googletagmanager.com https://www.mollie.com https://api.mapbox.com lantern.roeye.com widgets.trustedshops.com bat.bing.com www.gstatic.com maps.gstatic.com maps.googleapis.com www.google.com.vn *.klarna.com *.klarnaevt.com m.media-amazon.com static-eu.payments-amazon.com *.pixriot.com *.storeimaging.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net *.nova-motors.de www.google.de www.google.nl connect.onlinesucces.nl px.ads.linkedin.com stats.g.doubleclick.net www.linkedin.com linkedin.com googletagmanager.com gallery.mailchimp.com *.trustedshops.com www.facebook.com *.zopim.com cdn.jsdelivr.net *.jmango360.com *.datatrics.com *.smaato.net *.ytimg.com *.awin1.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://static.addtoany.com/ https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de widget.freshworks.com m2epro.freshdesk.com https://secure.pay1.de https://x.klarnacdn.net connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com js.mollie.com widgets.trustedshops.com www.dwin1.com static.cloudflareinsights.com lantern.roeyecdn.com bat.bing.com cdn.jsdelivr.net www.google.com www.gstatic.com maps.googleapis.com secure.pay1.de static-eu.payments-amazon.com *.tiktok.com pay.google.com d.ratepay.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com gstatic.com cdn.dnky.co api.comapi.com *.trackedlink.net snap.licdn.com chimpstatic.com checkout.buckaroo.nl *.adyen.com *.zopim.com *.hotjar.com *.zdassets.com *.sendcloud.sc *.mailchimp.com *.trustedshops.com *.fontawesome.com *.facebook.net *.feedbackcompany.com *.trustpilot.com www.googleoptimize.com www.clarity.ms *.datatrics.com *.criteo.net *.criteo.com cdn.mouseflow.com www.dwin1.com/ *.awin1.com the.sciencebehindecommerce.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com maxcdn.bootstrapcdn.com www.gstatic.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com *.googleapis.com cdn.dnky.co checkout.buckaroo.nl *.mailchimp.com *.trustpilot.com cdn.jsdelivr.net https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zopim.com static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://stats.addtoany.com/menu https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de widget.freshworks.com m2epro.freshdesk.com *.google-analytics.com *.googletagmanager.com stats.g.doubleclick.net analytics.google.com maps.googleapis.com www.google.com.vn www.google.com secure.pay1.de payments-eu.amazon.com *.tiktok.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.awinblackfriday.com bat.bing.com *.tiktokw.us *.pixriot.com *.storeimaging.com payments.amazon.de d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com commerce.adobedc.net api.comapi.com www.google-analytics.com *.zdassets.com *.hotjar.com *.hotjar.io *.zopim.com wss://*.zopim.com *.feedbackcompany.com *.zendesk.com www.clarity.ms *.facebook.com *.datatrics.com the.sciencebehindecommerce.com *.trustpilot.com autocomplete2.postdirekt.de *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src bat.bing.com www.google.com payments-eu.amazon.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com 'self' data: *.cloudflare.com *.trustedshops.com *.usercentrics.eu data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: maps.gstatic.com *.cloudfront.net https://cdn.klarna.com https://s.ytimg.com *.usercentrics.eu data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.hsforms.net *.hsforms.com www.google.com *.gstatic.com maps.googleapis.com *.cloudflare.com *.trustedshops.com *.usercentrics.eu www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com assets.braintreegateway.com *.googleapis.com *.gstatic.com *.cloudflare.com getfirebug.com *.yotpo.com *.typekit.net *.trustedshops.com *.usercentrics.eu data: 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.cloudflare.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://*.svea.com https://*.vipps.no https://*.trustly.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com https://api.clerk.io https://cdn.clerk.io 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://*.svea.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://cdn.clerk.io https://firebasestorage.googleapis.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cdninstagram.com *.fbcdn.net maps.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://api.clerk.io https://cdn.clerk.io https://custom.clerk.io *.avada.io *.shopify.com *.google.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://*.svea.com *.cloudflare.com ajax.googleapis.com https://www.googletagmanager.com tagmanager.google.com unpkg.com *.instagram.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://api.clerk.io https://cdn.clerk.io *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.googleapis.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google-analytics.com *.doubleclick.net https://www.google-analytics.com *.instagram.com *.googleusercontent.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-J2XJ-vg_VZVGLWQNy_KNGA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' http://cdn.auth0.com https://cdn.auth0.com https://cdn.eu.auth0.com;base-uri 'self';font-src 'self' data:;form-action 'self';frame-ancestors 'self';img-src 'self' https://auth0.com http://cdn.auth0.com https://cdn.auth0.com https://cdn.eu.auth0.com data: blob: *;object-src 'none';script-src 'self' blob: 'unsafe-eval' 'unsafe-inline' http://cdn.auth0.com https://cdn.auth0.com https://cdn.eu.auth0.com https://dalelane.eu.auth0.com https://secure.gravatar.com https://www.youtube.com https://www.youtube-nocookie.com https://browser.sentry-cdn.com https://scripts.withcabin.com https://esm.run https://cdn.jsdelivr.net https://machinelearningforkids.co.uk;script-src-attr 'unsafe-inline';style-src 'self' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=';upgrade-insecure-requests;script-src-elem 'self' blob: 'unsafe-eval' 'unsafe-inline' http://cdn.auth0.com https://cdn.auth0.com https://cdn.eu.auth0.com https://dalelane.eu.auth0.com https://secure.gravatar.com https://www.youtube.com https://www.youtube-nocookie.com https://browser.sentry-cdn.com https://scripts.withcabin.com https://esm.run https://cdn.jsdelivr.net https://challenges.cloudflare.com https://machinelearningforkids.co.uk;frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://challenges.cloudflare.com https://login.machinelearningforkids.co.uk;worker-src 'self' blob:;connect-src 'self' https://proxy.machinelearningforkids.co.uk https://sentry.io https://ping.withcabin.com https://huggingface.co https://cas-bridge.xethub.hf.co https://raw.githubusercontent.com https://itunes.apple.com https://audio-ssl.itunes.apple.com https://machinelearningforkids.co.uk https://challenges.cloudflare.com https://mlforkids-newnumbers.j8ahcaxwtd1.au-syd.codeengine.appdomain.cloud https://mlforkids-newnumbers.j8clybxvjr0.us-south.codeengine.appdomain.cloud https://mlforkids-newnumbers.j8ayd8ayn23.eu-de.codeengine.appdomain.cloud https://mlforkids-newnumbers.1re3wh44gzos.eu-de.codeengine.appdomain.cloud https://login.machinelearningforkids.co.uk;trusted-types dompurify challenges.cloudflare.com 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.bglobale.com *.global-e.com *.fontawesome.com https://fonts.bunny.net 'self' data: *.cloudflare.com fonts.googleapis.com 'unsafe-inline' data: static.paddockspares.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.bglobale.com *.global-e.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * widget.trustpilot.com *.googletagmanager.com lpcdn.lpsnmedia.net *.paypalobjects.com secure.livechatinc.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.bglobale.com *.global-e.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ services.postcodeanywhere.co.uk magefan.com cm.magefan.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: *.googletagmanager.com ssl.gstatic.com www.gstatic.com *.cloudflare.com *.mdoq.io *.ibottles.co.uk *.google.com *.google.co.uk media.paddockspares.com static.paddockspares.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com widget.freshworks.com m2epro.freshdesk.com *.bglobale.com *.global-e.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.addressy.com *.avada.io *.shopify.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com *.trustpilot.com *.googletagmanager.com tagmanager.google.com *.cloudflare.com *.twitter.com *.fontawesome.com *.liveperson.net *.lpsnmedia.net *.livechatinc.com bam.nr-data.net static.paddockspares.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.bglobale.com *.global-e.com https://static.klaviyo.com api.addressy.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.googleapis.com *.gstatic.com *.trustpilot.com tagmanager.google.com fonts.google.com *.cloudflare.com *.bootstrapcdn.com static.paddockspares.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.livechatinc.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.addressy.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.googletagmanager.com *.cloudflare.com stats.g.doubleclick.net bam.nr-data.net *.livechatinc.com static.paddockspares.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://zero1.report-uri.com/r/d/csp/reportOnly; report-to report-endpoint; 1
default-src 'self'; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; media-src 'self' https: blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.googlesyndication.com https://*.doubleclick.net https://*.google.com https://*.gstatic.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://*.adtrafficquality.google https://eu.i.posthog.com https://eu-assets.i.posthog.com https://cdn.overtracking.com https://connect.facebook.net https://www.instagram.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.doubleclick.net https://*.googlesyndication.com https://*.adtrafficquality.google https://*.google.com https://eu.i.posthog.com https://cdn.overtracking.com https://www.facebook.com https://planimagesstorage.blob.core.windows.net; frame-src https://*.googlesyndication.com https://*.doubleclick.net https://*.google.com https://www.youtube.com https://www.instagram.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; report-uri /api/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn-cookieyes.com https://info.fleetcor.pl https://static.zdassets.com https://ekr.zdassets.com https://*.zendesk.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://cdn-cookieyes.com https://static.zdassets.com https://ekr.zdassets.com; img-src 'self' data: blob: https://cdn-cookieyes.com https://info.fleetcor.pl https://static.zdassets.com https://ekr.zdassets.com https://*.zendesk.com; font-src 'self' data: https://static.zdassets.com https://ekr.zdassets.com; connect-src 'self' https://cdn-cookieyes.com https://log.cookieyes.com https://directory.cookieyes.com https://info.fleetcor.pl https://static.zdassets.com https://ekr.zdassets.com https://*.zendesk.com wss://*.zendesk.com https://www.google-analytics.com https://region1.google-analytics.com; form-action 'self' https://info.fleetcor.pl; frame-src 'self' blob:; worker-src 'self' blob:; frame-ancestors 'none'; base-uri 'self'; object-src 'none'; upgrade-insecure-requests 1
object-src 'none';base-uri 'self';script-src 'nonce-8d-bVV8-w1wxb0lPlI46-w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'nonce-uCcqaYlPsRDUclUPDMfkDv_PgRRqfariBfks0l2m7pwZDwzLerA27Q' piwik.f7.de 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data:; base-uri 'self'; font-src 'self' data:; style-src-elem 'self' 'nonce-uCcqaYlPsRDUclUPDMfkDv_PgRRqfariBfks0l2m7pwZDwzLerA27Q' report-sample 'report-sample'; worker-src blob: 'report-sample'; style-src 'self' 'nonce-uCcqaYlPsRDUclUPDMfkDv_PgRRqfariBfks0l2m7pwZDwzLerA27Q' 'report-sample'; connect-src 'self' piwik.f7.de; report-uri https://f7.de/@http-reporting?csp=report&requestTime=1789287428445928&requestHash=9d5d486ef351a07556d538dcc95e9a8608e5690b 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com *.klevu.com *.ksearchnet.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.punchout2go.com *.tradecentric.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.googletagmanager.com *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com landofcoder.com maps.googleapis.com chart.googleapis.com js.mollie.com *.punchout2go.com *.tradecentric.com js.stripe.com *.hotjar.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com *.trackedlink.net services.postcodeanywhere.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://www.magezon.com https://www.mollie.com www.facebook.com bat.bing.com *.google.com *.google.co.uk *.googleadservices.com *.magentocommerce.com *.widgets.magentocommerce.com *.paypalobjects.com *.postcodeanywhere.co.uk paypal.com *.doubleclick.net *.feefo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page tagmanager.google.com https://www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com api.addressy.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com landofcoder.com maps.googleapis.com chart.googleapis.com player.vimeo.com js.mollie.com *.punchout2go.com *.tradecentric.com connect.facebook.net js-agent.newrelic.com bam.nr-data.net *.google-analytics.com *.googleapis.com googletagmanager.com googleadservices.com *.googlecommerce.com *.bing.com *.pingdom.net *.hotjar.com *.feefo.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com webchat.dotdigital.com webchat.staging.dotdigital.com api.addressy.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com *.punchout2go.com *.tradecentric.com services.postcodeanywhere.co.uk *.typekit.net https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src landofcoder.com maps.googleapis.com chart.googleapis.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://maps.googleapis.com https://player.vimeo.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com api.addressy.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com landofcoder.com maps.googleapis.com chart.googleapis.com *.hotjar.com wss://ws.hotjar.com *.hotjar.io *.pingdom.net *.feefo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-oSo-bRNRONSGIDbAO-7zO88tmG4DSIZCfIMzVoYk4qjtNHU9301-fA' 'report-sample' https://ajax.googleapis.com https://consent.cookiefirst.com https://www.googletagmanager.com; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://www.googletagmanager.com https://www.google.de; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://www.googletagmanager.com; script-src-elem 'report-sample' 'self' https://ajax.googleapis.com https://consent.cookiefirst.com https://www.googletagmanager.com 'sha256-dZ++zwJe3hSdFp4rDaEjRdd0J/M2jq9tGd716AeXLrM='; style-src 'self' 'report-sample' https://consent.cookiefirst.com 'sha256-Yv2mwg+vTGLO8iQC/FmD1QAT5YshB5WjzkPYOqesNbE='; font-src 'self' https://consent.cookiefirst.com; connect-src 'self' https://consent.cookiefirst.com https://edge.cookiefirst.com https://www.google.com https://region1.google-analytics.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://api.cookiefirst.com; manifest-src 'self'; worker-src 'none' 'report-sample'; form-action 'self'; report-uri https://www.otto-brenner-stiftung.de/@http-reporting?csp=report&requestTime=1789288364252090&requestHash=8544e6f21cdb241af8298b5ed1460d2cb082fa65 1
script-src 'self' 'nonce-OTlmYTY2OGMtMTZlYS00NGUwLWJkZjktYzAzNjExNDI1Yzc4' 'strict-dynamic' 'report-sample' https://js.stripe.com https://*.js.stripe.com https://www.paypal.com https://www.sandbox.paypal.com https://js.braintreegateway.com https://pay.google.com https://www.googletagmanager.com https://api.calm.com https://*.px-cloud.net https://*.px-cdn.net https://*.doubleclick.net https://www.google-analytics.com https://apis.google.com https://www.gstatic.com https://connect.facebook.net https://bat.bing.com https://www.tiktok.com https://*.tiktokcdn-us.com https://*.ttwstatic.com https://static.ads-twitter.com https://wa.appsflyersdk.com https://websdk.appsflyer.com https://utt.impactcdn.com https://cdn-cookieyes.com https://*.squarespace.com https://*.sqspcdn.com https://*.squarespace-cdn.com https://www.instagram.com https://www.youtube.com https://truemed-public.s3.us-west-1.amazonaws.com https://cdn.amplitude.com https://addevent.com https://cdnjs.cloudflare.com https://unpkg.com; frame-src https://js.stripe.com https://*.js.stripe.com https://hooks.stripe.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://www.googletagmanager.com https://checkout.paypal.com https://accounts.google.com https://www.facebook.com https://www.youtube.com https://www.instagram.com https://www.tiktok.com https://*.px-cloud.net https://crcldu.com; connect-src 'self' https://api.stripe.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://api2.amplitude.com https://api.lab.amplitude.com https://flag.lab.amplitude.com https://browser-intake-datadoghq.com https://api.calm.com https://*.calm.com https://payments.braintree-api.com https://payments.sandbox.braintree-api.com https://api.braintreegateway.com https://*.px-cloud.net https://*.px-cdn.net https://*.pxchk.net https://*.px-client.net https://*.perimeterx.net https://www.google.com https://*.doubleclick.net https://www.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://region1.google-analytics.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://translate.googleapis.com https://www.googletagmanager.com https://connect.facebook.net https://www.facebook.com https://bat.bing.com https://wa.appsflyersdk.com https://wa.onelink.me https://wa.appsflyer.com https://websdk.appsflyer.com https://utt.impactcdn.com https://calmcom.sjv.io https://d.impct.site https://t.co https://analytics.twitter.com https://www.tiktok.com https://cdn-cookieyes.com https://log.cookieyes.com https://directory.cookieyes.com https://*.squarespace.com https://*.squarespace-cdn.com; worker-src 'self' blob:; report-uri /webapi/csp-report 1
object-src 'none';base-uri 'self';script-src 'nonce-dqcbfr14sLrtqj8jCnFcQg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-lfONrLg6MI6INdt3-pbxEQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; object-src 'none'; base-uri 'none'; script-src 'nonce-8cbee0517fdd420b83b299fc809f810a' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://at.alicdn.com; img-src 'self' data: https: http: blob:; connect-src 'self' https: wss:; frame-src 'self' https: http:; media-src 'self' data: https: http: blob:; worker-src 'self' blob: 1
style-src-elem https://*.magentosite.cloud https://purdys.local https://*.purdys.local https://purdys.com https://*.purdys.com https://*.listrakbi.com https://*.azureedge.net https://*.bootstrapcdn.com 'unsafe-inline' https://*.yotpo.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://fonts.googleapis.com/; script-src-elem https://*.magentosite.cloud https://purdys.local https://*.purdys.local https://purdys.com https://*.purdys.com https://*.hotjar.com https://*.searchspring.io https://*.searchspring.net https://*.azureedge.net https://www.googletagmanager.com https://acsbapp.com https://*.blob.core.windows.net https://*.listrakbi.com https://*.listrak.com 'self' https://*.licdn.com https://*.bing.com https://*.pinimg.com https://*.pinterest.com https://*.pepperjam.com https://*.tctm.co https://*.facebook.net https://*.youtube.com https://*.jsdelivr.net 'unsafe-inline' https://*.newrelic.com https://*.googleapis.com *.bing.com *.calendly.com *.clarity.ms *.doubleclick.net *.facebook.net *.google.com *.googleadservices.com *.googleoptimize.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.inspectlet.com *.jsdelivr.net *.kaltura.com *.licdn.com *.listrak.com *.listrakbi.com *.newrelic.com *.paypal.com *.paypalobjects.com *.pepperjam.com *.pinimg.com *.pinterest.com *.searchspring.net *.searchspring.io *.tctm.co *.tiktok.com *.twitter.com *.yotpo.com *.youtube.com acsbapp.com *.cloudfront.net *.azureedge.net *.blob.core.windows.net sc-static.net tagmanager.google.com analytics.google.com unpkg.com https://js.squareup.com https://js.afterpay.com/ https://nd.squarecdn.com https://js.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://portal.sandbox.afterpay.com/ https://portal.afterpay.com/ https://cdn.plaid.com/ https://sandbox.kit.cash.app/ https://kit.cash.app/; font-src fonts.gstatic.com use.typekit.net fonts.googleapis.com https://*.googleapis.com https://*.gstatic.com data: https://*.fontawesome.com maxcdn.bootstrapcdn.com https://*.magentosite.cloud https://purdys.local https://*.purdys.local https://purdys.com https://*.purdys.com https://*.cloudflare.com https://maxcdn.bootstrapcdn.com https://*.yotpo.com https://*.azureedge.net 'unsafe-inline' https://*.cloudfront.net *.flaticon.com sc-static.net https://square-fonts-production-f.squarecdn.com/ https://d1g145x70srn7h.cloudfront.net/ https://cash-f.squarecdn.com/ dhv2ziothpgrr.cloudfront.net *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.meetanshi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com https://*.moneris.com/ *.meetanshi.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.wesupply.xyz https://wesupplylabs.com guarantee-cdn.com *.yotpo.com https://pci-connect.squareup.com https://connect.squareup.com https://pci-connect.squareupsandbox.com https://connect.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com https://www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.meetanshi.com https://meetanshi.com/media/logo.png www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://*.magentosite.cloud purdys.local *.purdys.local *.bing.com *.clarity.ms *.doubleclick.net *.ggpht.com *.google.com *.googleusercontent.com *.inspectlet.com *.kaltura.com *.linkedin.com *.listrakbi.com *.pinterest.com *.searchspring.net *.twitter.com *.yandex.ru *.yotpo.com *.azureedge.net *.blob.core.windows.net swiperjs.com https://purdys.com https://*.purdys.com https://*.bing.com https://*.google.com 'self' https://*.google.ca https://*.linkedin.com https://*.cloudfront.net https://*.listrakbi.com https://*.searchspring.io https://*.doubleclick.net https://www.gstatic.com/ https://sandbox.api.cash.app/ https://site-assets.afterpay.com/ https://sandbox.web.squarecdn.com/ https://api.cash.app/ https://web.squarecdn.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://franklin-assets.s3.amazonaws.com/ https://static.sandbox.afterpay.com/ https://static.afterpay.com/ https://static.sandbox.afterpay.com/logo/ *.facebook.com *.reddit.com *.ads-twitter.com t.co *.bing.net *.klaviyo.com *.google-analytics.com *.googletagmanager.com dhv2ziothpgrr.cloudfront.net guarantee-cdn.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com *.magento-datasolutions.com *.magento-ds.com https://rum.hlx.page https://maps.googleapis.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https://*.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.moneris.com/ *.meetanshi.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://*.magentosite.cloud https://purdys.com https://*.purdys.com *.googletagmanager.com tagmanager.google.com *.google.com *.facebook.net unpkg.com https://*.searchspring.io https://acsbapp.com https://*.blob.core.windows.net https://*.listrakbi.com 'self' acsbapp.com *.bing.com *.calendly.com *.clarity.ms *.doubleclick.net *.googleadservices.com *.googleoptimize.com *.hotjar.com *.inspectlet.com *.jsdelivr.net *.kaltura.com *.licdn.com *.listrak.com *.listrakbi.com *.paypalobjects.com *.pepperjam.com *.pinimg.com *.pinterest.com *.searchspring.net *.searchspring.io *.tctm.co *.tiktok.com *.twitter.com *.yotpo.com *.cloudfront.net *.azureedge.net *.blob.core.windows.net sc-static.net https://purdys.local https://*.purdys.local https://*.hotjar.com https://*.azureedge.net https://*.licdn.com https://*.bing.com https://*.pinimg.com https://*.tctm.co 'unsafe-inline' https://js.squareup.com https://js.afterpay.com/ https://nd.squarecdn.com https://js.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://portal.sandbox.afterpay.com/ https://portal.afterpay.com/ https://cdn.plaid.com/ https://sandbox.kit.cash.app/ https://kit.cash.app/ *.redditstatic.com *.reddit.com *.ads-twitter.com *.klaviyo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net https://cdn.searchspring.net/intellisuggest/is.min.js *.cloudflare.com guarantee-cdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com https://static.klaviyo.com https://*.moneris.com/ *.fontawesome.com maxcdn.bootstrapcdn.com 'unsafe-inline' assets.braintreegateway.com https://*.azureedge.net https://*.listrakbi.com https://*.yotpo.com *.cloudflare.com *.googletagmanager.com *.gstatic.com *.jsdelivr.net *.listrakbi.com *.azureedge.net *.blob.core.windows.net https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://fonts.googleapis.com/ *.tagmanager.google.com dhv2ziothpgrr.cloudfront.net *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.bing.com *.gstatic.com *.kaltura.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com performance.typekit.net *.magento-datasolutions.com *.magento-ds.com *.adobe.io https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https://*.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.meetanshi.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://*.magentosite.cloud https://purdys.local https://*.purdys.local *.bing.com *.clarity.ms *.cloudflare.com *.doubleclick.net *.googleadservices.com *.googleoptimize.com *.googletagmanager.com *.hotjar.io *.inspectlet.com *.jsdelivr.net *.kaltura.com *.licdn.com *.pepperjam.com *.pinimg.com *.tctm.co acsbapp.com *.cloudfront.net *.azureedge.net *.blob.core.windows.net www.google.ae www.google.am www.google.at https://purdys.com https://*.purdys.com https://*.listrakbi.com https://*.acsbapp.com https://*.pinterest.com https://*.linkedin.com https://*.velaro.com https://*.nr-data.net https://*.searchspring.io https://*.doubleclick.net https://*.hotjar.com https://*.tiktok.com https://pci-connect.squareup.com https://pci-connect.squareupsandbox.com https://api.amplitude.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://o160250.ingest.sentry.io/ https://api.lab.amplitude.com/sdk/vardata https://sandbox.plaid.com/ https://production.plaid.com/ *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.net *.klaviyo.com *.run.app dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com https://beacon.searchspring.io/beacon *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://f0d1d91f-01e4-4d5d-a8d9-5469b5b19d14.sansec.watch/; report-to report-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-XlfEWIt6RVGbwFZK96yxzQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; font-src 'self' https://fonts.gstatic.com; img-src 'self' https://*.googleapis.com https://*.gstatic.com *.google.com  *.googleusercontent.com data: https://www.gravatar.com/avatar/ https://*.google-analytics.com https://*.googletagmanager.com blob:; script-src 'self' https://*.googletagmanager.com 'nonce-d4ddc6f44f61476692b9704bd00c143f' https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com blob:; style-src 'self' 'nonce-d4ddc6f44f61476692b9704bd00c143f' https://fonts.googleapis.com; worker-src 'self' blob:; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googleapis.com *.google.com https://*.gstatic.com  data: blob:; frame-ancestors 'self'; 1
default-src * 'unsafe-inline' 'unsafe-eval'; style-src 'unsafe-inline'; script-src 'none' 'report-sample' 'nonce-hag4ZrlfJa13jPgyNYFnEy'; connect-src 'none'; form-action 'none'; frame-src 'none'; worker-src 'none'; frame-ancestors 'none'; upgrade-insecure-requests; block-all-mixed-content; report-uri https://csp.threatview.app/report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://connect.facebook.net https://siteimproveanalytics.com https://analytics.silktide.com https://cdn.userway.org https://translate.google.com https://translate.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com https://netdna.bootstrapcdn.com https://cdn.jsdelivr.net; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com https://netdna.bootstrapcdn.com; img-src 'self' data: https:; frame-ancestors 'self' 1
default-src 'self' https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://*.google.com https://*.gstatic.com https://*.cloudflare.com https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://*.googlesyndication.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://fundingchoicesmessages.google.com https://tpc.googlesyndication.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://*.cloudflare.com https://*.okchicas.com https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://fundingchoicesmessages.google.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://*.googlesyndication.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.facebook.com https://www.instagram.com https://*.googletagmanager.com https://googleads.g.doubleclick.net https://cm.g.doubleclick.net https://*.safeframe.googlesyndication.com https://*.googlesyndication.com https://www.google.com https://ep2.adtrafficquality.google; object-src 'none'; base-uri 'self'; form-action 'self'; 1
default-src 'self'; script-src 'nonce-//NeBJOqFHh1BJTGClpH2g==' 'strict-dynamic' 'unsafe-inline' 'self' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://analytics.google.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://static.hotjar.com https://script.hotjar.com https://maps.googleapis.com https://maps.gstatic.com https://cdn.kustomerapp.com https://analytics.tiktok.com https://snap.licdn.com https://connect.facebook.net https://bat.bing.com https://cdn-st.adsmurai.com https://event.getblue.io; connect-src 'self' https://apis.houm.com https://api-ms.houm.com https://me.houm.com https://houm.com https://gtm.houm.com https://auth.houm.com https://cms.houm.com https://staging.houm.com https://cms-stg.houm.com https://houm-staging.us.auth0.com https://houm-staging-api.houm.com https://*.auth0.com https://pldbajfkd5.execute-api.us-east-1.amazonaws.com https://browser-intake-datadoghq.com https://session-replay.browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com https://*.datadoghq.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://ad.doubleclick.net https://www.googleadservices.com https://www.google.com https://www.google.cl https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.kustomerapp.com wss://*.kustomerapp.com https://tiles.openfreemap.org https://basemaps.cartocdn.com https://*.basemaps.cartocdn.com https://maps.googleapis.com https://hooks.zapier.com https://api.airtable.com https://script.google.com https://script.googleusercontent.com https://api.arriendoasegurado.com https://api.whatsapp.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://px.ads.linkedin.com https://www.facebook.com https://bat.bing.com https://bat.bing.net https://cdn-st.adsmurai.com https://event.getblue.io; img-src 'self' data: blob: https://*.s3.amazonaws.com https://s3.amazonaws.com https://*.s3.us-east-1.amazonaws.com https://firebasestorage.googleapis.com https://lh3.googleusercontent.com https://media.houm.com https://media.testhoum.com https://cms.houm.com https://cms-stg.houm.com https://blog.houm.com https://img.youtube.com https://i.ytimg.com https://maps.gstatic.com https://maps.googleapis.com https://tiles.openfreemap.org https://basemaps.cartocdn.com https://*.basemaps.cartocdn.com https://static.hotjar.com https://pldbajfkd5.execute-api.us-east-1.amazonaws.com https://www.googletagmanager.com https://px.ads.linkedin.com https://analytics.tiktok.com https://gtm.houm.com https://hatscripts.github.io https://googleads.g.doubleclick.net https://ad.doubleclick.net https://www.googleadservices.com https://www.google.com https://www.google.cl https://www.google.com.co https://www.google.com.mx https://www.google.com.ar https://www.google.com.pe https://www.google.com.ec https://www.google.com.uy https://www.google.com.bo https://www.google.com.py https://www.google.com.ve https://www.google.com.br https://www.google.com.gt https://www.google.com.do https://www.google.com.pa https://www.google.com.sv https://www.google.com.ni https://www.google.com.hn https://www.google.co.cr https://www.google.ca https://www.google.co.uk https://www.google.de https://www.google.fr https://www.google.es https://www.google.it https://www.google.nl https://www.google.be https://www.google.at https://www.google.ch https://www.google.se https://www.google.pl https://www.google.pt https://www.google.ie https://www.google.dk https://www.google.fi https://www.google.no https://www.google.co.jp https://www.google.com.au https://www.google.co.in https://www.google.com.sg https://www.google.com.hk https://www.google.co.kr https://www.google.com.tr https://www.google.ru https://www.facebook.com https://connect.facebook.net https://bat.bing.com https://bat.bing.net; style-src 'nonce-//NeBJOqFHh1BJTGClpH2g==' 'sha256-4/2nIlfwIVTJ1+JcNQ6LkeVWzNS148LKAJeL5yofdN4=' 'sha256-m+Arn04Ml9h7iZZTfe6Eaw12/PoSg9nq7o44S5nwO/c=' 'self' https://fonts.googleapis.com https://static.hotjar.com; style-src-elem 'nonce-//NeBJOqFHh1BJTGClpH2g==' 'sha256-4/2nIlfwIVTJ1+JcNQ6LkeVWzNS148LKAJeL5yofdN4=' 'sha256-m+Arn04Ml9h7iZZTfe6Eaw12/PoSg9nq7o44S5nwO/c=' 'self' https://fonts.googleapis.com https://static.hotjar.com; style-src-attr 'unsafe-inline'; font-src 'self' data: https://fonts.gstatic.com https://static.hotjar.com https://script.hotjar.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://docs.google.com https://*.kustomerapp.com https://auth.houm.com https://*.auth0.com https://www.facebook.com; worker-src 'self' blob:; media-src 'self' data: blob: https://houm.com https://*.houm.com https://*.s3.amazonaws.com https://s3.amazonaws.com https://*.s3.us-east-1.amazonaws.com https://media.houm.com https://media.testhoum.com https://cms.houm.com https://cms-stg.houm.com https://firebasestorage.googleapis.com https://*.google.com https://*.ytimg.com; object-src 'none'; base-uri 'self'; form-action 'self' https://api.whatsapp.com https://script.google.com https://www.facebook.com; frame-ancestors 'self'; report-uri /api/csp-report 1
default-src 'self' *.ultramusicfestival.com ultramusicfestival.com umfworldwide.com ultrapassport.com *.ultrapassport.net resistancemusic.com *.resistancemusic.com roadtoultra.com *.roadtoultra.com; font-src 'self' *.ultramusicfestival.com ultramusicfestival.com umfworldwide.com ultrapassport.com *.ultrapassport.net resistancemusic.com *.resistancemusic.com roadtoultra.com *.roadtoultra.com data: *.olark.com fonts.gstatic.com; script-src 'self' *.ultramusicfestival.com ultramusicfestival.com umfworldwide.com ultrapassport.com *.ultrapassport.net resistancemusic.com *.resistancemusic.com roadtoultra.com *.roadtoultra.com 'unsafe-inline' 'unsafe-eval' *.turn.com static.cloudflareinsights.com ajax.cloudflare.com *.youtube.com *.ytimg.com *.datadoghq-browser-agent.com *.getclicky.com clicky.com *.twitter.com *.ads-twitter.com *.facebook.net analytics.tiktok.com www.recaptcha.net recaptcha.net www.gstatic.com www.gstatic.cn www.google.com *.olark.com *.adroll.com *.googletagmanager.com tagmanager.google.com analytics.google.com google-analytics.com *.google-analytics.com *.g.doubleclick.net *.doubleclick.net *.googleadservices.com *.google.com *.googlesyndication.com *.googletagservices.com; style-src 'self' *.ultramusicfestival.com ultramusicfestival.com umfworldwide.com ultrapassport.com *.ultrapassport.net resistancemusic.com *.resistancemusic.com roadtoultra.com *.roadtoultra.com 'unsafe-inline' *.getclicky.com clicky.com *.olark.com *.googletagmanager.com tagmanager.google.com *.google.com fonts.googleapis.com; img-src 'self' *.ultramusicfestival.com ultramusicfestival.com umfworldwide.com ultrapassport.com *.ultrapassport.net resistancemusic.com *.resistancemusic.com roadtoultra.com *.roadtoultra.com 'unsafe-inline' data: *.turn.com secure.gravatar.com *.ytimg.com *.youtube.com *.getclicky.com *.twitter.com t.co *.facebook.com www.gstatic.com/recaptcha *.olark.com *.adroll.com d.adroll.com *.googletagmanager.com analytics.google.com *.analytics.google.com google-analytics.com *.google-analytics.com *.gstatic.com *.google.com *.doubleclick.net *.g.doubleclick.net *.googlesyndication.com www.googleadservices.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat https://umfworldwide.com https://ultrapassport.com https://umfstage.com https://ultramusicfestival.com https://resistanceibiza.com https://resistancemiami.com https://ultrasouthafrica.com https://ultrabuenosaires.com https://ultraeurope.com https://ultrataiwan.com https://ultramexico.com https://ultrajapan.com https://ultraperu.com https://ultraaustralia.com https://london.resistancemusic.com https://ultranewzealand.com https://poland.resistancemusic.com https://medellin.resistancemusic.com https://santiago.resistancemusic.com https://lima.resistancemusic.com https://guatemala.roadtoultra.com https://ecuador.roadtoultra.com https://ultrahongkong.com https://ultrakorea.com https://resistancemusic.com https://ultrabali.com https://ultrachile.com https://thailand.roadtoultra.com https://india.roadtoultra.com https://ultraabudhabi.com https://costadelsol.ultrabeach.com https://costarica.roadtoultra.com https://ultrabrasil.com https://buenosaires.resistancemusic.com https://guatemala.resistancemusic.com https://colombia.roadtoultra.com https://australia.resistancemusic.com https://mexico.resistancemusic.com https://santacruz.resistancemusic.com https://panama.resistancemusic.com https://sanjose.resistancemusic.com https://uruguay.resistancemusic.com https://ultrasingapore.com https://quito.resistancemusic.com https://ultrabeijing.com https://ultrashanghai.com https://philippines.roadtoultra.com https://paraguay.roadtoultra.com https://roadtoultra.com https://bolivia.roadtoultra.com https://*.umfworldwide.com https://*.ultrapassport.com https://*.umfstage.com https://*.ultramusicfestival.com https://*.resistanceibiza.com https://*.resistancemiami.com https://*.ultrasouthafrica.com https://*.ultrabuenosaires.com https://*.ultraeurope.com https://*.ultrataiwan.com https://*.ultramexico.com https://*.ultrajapan.com https://*.ultraperu.com https://*.ultraaustralia.com https://*.london.resistancemusic.com https://*.ultranewzealand.com https://*.poland.resistancemusic.com https://*.medellin.resistancemusic.com https://*.santiago.resistancemusic.com https://*.lima.resistancemusic.com https://*.guatemala.roadtoultra.com https://*.ecuador.roadtoultra.com https://*.ultrahongkong.com https://*.ultrakorea.com https://*.resistancemusic.com https://*.ultrabali.com https://*.ultrachile.com https://*.thailand.roadtoultra.com https://*.india.roadtoultra.com https://*.ultraabudhabi.com https://*.costadelsol.ultrabeach.com https://*.costarica.roadtoultra.com https://*.ultrabrasil.com https://*.buenosaires.resistancemusic.com https://*.guatemala.resistancemusic.com https://*.colombia.roadtoultra.com https://*.australia.resistancemusic.com https://*.mexico.resistancemusic.com https://*.santacruz.resistancemusic.com https://*.panama.resistancemusic.com https://*.sanjose.resistancemusic.com https://*.uruguay.resistancemusic.com https://*.ultrasingapore.com https://*.quito.resistancemusic.com https://*.ultrabeijing.com https://*.ultrashanghai.com https://*.philippines.roadtoultra.com https://*.paraguay.roadtoultra.com https://*.roadtoultra.com https://*.bolivia.roadtoultra.com; media-src 'self' *.ultramusicfestival.com ultramusicfestival.com umfworldwide.com ultrapassport.com *.ultrapassport.net resistancemusic.com *.resistancemusic.com roadtoultra.com *.roadtoultra.com *.olark.com; connect-src 'self' *.ultramusicfestival.com ultramusicfestival.com umfworldwide.com ultrapassport.com *.ultrapassport.net resistancemusic.com *.resistancemusic.com roadtoultra.com *.roadtoultra.com cloudflareinsights.com *.datadoghq.com *.browser-intake-datadoghq.com *.getclicky.com *.facebook.com analytics.tiktok.com analytics.pangle-ads.com *.olark.com *.googletagmanager.com *.google-analytics.com analytics.google.com *.analytics.google.com *.g.doubleclick.net *.doubleclick.net *.google.com *.googlesyndication.com www.googletagservices.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat; frame-src 'self' *.ultramusicfestival.com ultramusicfestival.com umfworldwide.com ultrapassport.com *.ultrapassport.net resistancemusic.com *.resistancemusic.com roadtoultra.com *.roadtoultra.com *.zohopublic.com *.apple.com open.spotify.com *.soundcloud.com *.youtube.com *.youtube-nocookie.com www.facebook.com *.recaptcha.net recaptcha.net www.google.com recaptcha.google.com *.olark.com *.googletagmanager.com bid.g.doubleclick.net *.google.com *.doubleclick.net *.googlesyndication.com; child-src *.youtube.com *.youtube-nocookie.com *.googletagmanager.com; worker-src www.recaptcha.net; object-src *.googlesyndication.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub7c55919a7d54d6386d0f0b19bc82e82f&dd-evp-origin=content-security-policy&ddsource=csp-report; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com analytics.ahrefs.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: *.clickrent.es *.click-rent.es dev-cms-clickrent.s3.amazonaws.com assets.clickrent.es; font-src 'self'; connect-src 'self' *.clickrent.es *.click-rent.es maps.googleapis.com; frame-src 'self' sis-t.redsys.es *.addonpayments.com; media-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com https://fonts.gstatic.com https://ws.colissimo.fr https://static.payzen.eu/static/ *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://secure.payzen.eu/vads-payment/ https://api.payzen.eu/api-payment/ https://static.payzen.eu/static/ *.twitter.com *.google.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.youtube.com https://form.typeform.com https://secure.payzen.eu/vads-payment/ https://static.payzen.eu/static/ *.youtube.com/ https://scontent-ams4-1.cdninstagram.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com https://maps.googleapis.com https://maps.gstatic.com https://ws.colissimo.fr https://*.tile.openstreetmap.fr https://*.onyourmap.com https://google.fr https://secure.payzen.eu/static/latest/images/type-carte/ https://static.payzen.eu/static/ https://secure.payzen.eu/vads-payment/ https://platform-api.sharethis.com *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.com *.maps.gstatic.com https://clauem2.arrowtheme.com https://scontent.cdninstagram.com/ https://scontent-ams4-1.cdninstagram.com *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com www.apptrian.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com https://api.payzen.eu/api-payment/ https://static.payzen.eu/static/ *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.maps.googleapis.com *.trackedlink.net *.maps.gstatic.com *.googletagmanager.com *.googleadservices.com https://buttons-config.sharethis.com/ https://connect.facebook.net https://platform-api.sharethis.com https://scontent-ams4-1.cdninstagram.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com https://static.payzen.eu/static/ *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com *.google-analytics.com https://platform-api.sharethis.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io www.apptrian.com maps.googleapis.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ https://ws.colissimo.fr https://maps.googleapis.com https://nominatim.openstreetmap.org https://*.onyourmap.com https://*.mapbox.com https://secure.payzen.eu/vads-payment/ https://api.payzen.eu/api-payment/ *.cloudflare.com *.twitter.com *.twimg.com *.googleadservices.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org *.google.co.in *.maps.gstatic.com *.maps.googleapis.com https://scontent-ams4-1.cdninstagram.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src https://secure.payzen.eu/vads-payment/ https://api.payzen.eu/api-payment/ https://static.payzen.eu/static/ 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self';connect-src 'self' https://apis.goated.com https://g3casino-default-rtdb.europe-west1.firebasedatabase.app wss://sportsbook-websocket.goated.com wss://casino-crash-websocket.goated.com https://api-iam.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-a.intercom.io wss://primary-realtime.intercom-messenger.com https://uploads.intercomcdn.com wss://www.walletlink.org wss://relay.walletconnect.com wss://relay.walletconnect.org https://rpc.walletconnect.com https://explorer-api.walletconnect.com https://www.google.com/recaptcha/ https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com/gtag/ https://widgets.sir.sportradar.com https://lmt.fn.sportradar.com wss://ws.fn.sportradar.com https://speed.cloudflare.com https://cdn.jsdelivr.net/npm/@emoji-mart/data https://cdn.jsdelivr.net/npm/@emoji-mart/data@latest/i18n/ wss://ws-us3.pusher.com/app/ https://o4507769393250304.ingest.us.sentry.io;script-src 'self' 'sha256-NVFDEH1iZXntGXkp0sAyeZpGUi9M3k/65TetEjgowD8=' 'sha256-e8VIGHkMo/G2N87UZ0LpQFkxfQeUkvxWI8ZvV9W8cnc=' 'sha256-8NpLpuFiewfIZpF0rMTII0bLPRcEMOFVBvVNwhG8jas=' 'sha256-BPFRXi0b++SuKaennInrN4bnnmJSgDQmmeYvOV21LFM=' 'sha256-SsvAqZOYeXo5GTVIZ0q3o5y3eUpNLBwmTXCCmRiU3xI=' 'sha256-epe/6V3gi5TDvn/sSqrqP42Y8Kx7UZji6iT/NySmGdQ=' 'sha256-n8QWaYYBCiJaXiTAuQojwa5rD+xGOUbC9b9iPw/QCbs=' https://widget.intercom.io https://js.intercomcdn.com https://casino.int.a8r.games https://casino.cur.a8r.games https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://vercel.live https://challenges.cloudflare.com/turnstile/ https://widgets.sir.sportradar.com 'sha256-sLZ0d1355be1Sbg3pQDKLpx6hedT9P2QSeTt2MvmMlc=' https://3574044a-fa9f-4b57-b9ba-4d61f5f070e2.snippet.anjouangaming.org;script-src-attr 'unsafe-inline';img-src 'self' blob: data: https://3574044a-fa9f-4b57-b9ba-4d61f5f070e2.snippet.anjouangaming.org https://3574044a-fa9f-4b57-b9ba-4d61f5f070e2.snippet.anjcdn.org https://static.intercomassets.com https://js.intercomcdn.com https://downloads.intercomcdn.com https://gifs.intercomcdn.com https://explorer-api.walletconnect.com https://www.googletagmanager.com https://img.sportradar.com https://widgets.sir.sportradar.com;style-src 'self' 'unsafe-inline' https://vercel.live https://widgets.sir.sportradar.com;font-src 'self' https://fonts.intercomcdn.com https://fonts.gstatic.com;media-src 'self' https://js.intercomcdn.com;object-src 'none';base-uri 'self';form-action 'self';frame-src 'self' https:;frame-ancestors 'none';report-uri https://api.goated.com/main/csp-violation;report-to report-csp 1
default-src 'self';script-src 'self' 'unsafe-hashes' 'unsafe-inline' 'unsafe-eval' https://www.digita.fi/app/themes/digita/dist/scripts/polyfills-7cba9be83f88d2e3c65e.js https://assets.juicer.io/embed-no-jquery.js https://bot.leadoo.com/bot/dynamic.js https://connect.facebook.net/en_US/fbevents.js https://consent.cookiebot.com/uc.js https://consentcdn.cookiebot.com/consentconfig/57cc69b8-8520-4aa6-ac3a-0ee5e2311b97/state.js https://eu2.snoobi.com/ https://googleads.g.doubleclick.net/pagead/viewthroughconversion/980469902/ https://mktdplp102cdn.azureedge.net/public/latest/js/ws-tracking.js https://sc.lfeeder.com/lftracker_v1_bElvO73X0YV4ZMqj.js https://script.hotjar.com/modules.8da33a8f469c3b5ffcec.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://static.hotjar.com/c/hotjar-1971876.js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/js https://consent.cookiebot.com/57cc69b8-8520-4aa6-ac3a-0ee5e2311b97/cc.js https://www.googletagmanager.com/gtm.js https://bot.leadoo.com/i/al/lanlt.js https://www.google-analytics.com/plugins/ua/linkid.js https://bot.leadoo.com/bot/chat.js https://v1.bot.leadoo.com/bot/chat.js https://consent.cookiebot.com/logconsent.ashx https://www.googletagmanager.com/gtag/destination https://connect.facebook.net/signals/config/234079757978399 https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/releases/EGbODne6buzpTnWrrBprcfAY/recaptcha__en.js;connect-src 'self' https://consent.app.cookieinformation.com/api/consent www.google-analytics.com ajax.googleapis.com www.google.com google.com gstatic.com www.gstatic.com connect.facebook.net facebook.com policy.app.cookieinformation.com https://policy.app.cookieinformation.com https://yoast.com https://anl.leadoo.com https://bot.leadoo.com https://consentcdn.cookiebot.com https://px.ads.linkedin.com https://region1.analytics.google.com https://res.leadoo.com https://v1.bot.leadoo.com https://www.google-analytics.com https://www.google.com https://www.google.de https://googleads.g.doubleclick.net/pagead/landing https://stats.g.doubleclick.net/g/collect;style-src 'self' 'unsafe-hashes' 'unsafe-inline' https://assets.juicer.io https://fonts.googleapis.com https://res.leadoo.com;object-src 'none';base-uri 'self';font-src 'self' data: https://fonts.gstatic.com https://res.leadoo.com https://static.juicer.io;frame-src 'self' https://policy.app.cookieinformation.com https://www.google.com https://consentcdn.cookiebot.com https://mapservice.digita.fi https://td.doubleclick.net https://www.youtube.com https://www.youtube-nocookie.com;img-src 'self' data: https://2bbf3fdcc12f467e83bc10c46bd1dc7a.svc.dynamics.com https://eu2.snoobi.com https://ia.leadoo.com https://imgsct.cookiebot.com https://px.ads.linkedin.com https://res.leadoo.com https://tr.lfeeder.com https://www.facebook.com https://www.google-analytics.com https://www.google.com https://www.google.de https://www.googletagmanager.com https://www.google.fi/ads/ga-audiences https://www.google.fi/pagead/1p-user-list/980469902/;manifest-src 'self';media-src 'self';worker-src 'self' blob:; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com *.googleapis.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://seo.mageplaza.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de accounts.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de accounts.google.com *.fontawesome.com *.googleapis.com *.gstatic.com *.avada.io *.shopify.com *.sharethis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com accounts.google.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de accounts.google.com https://get.geojs.io *.avada.io *.sharethis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-CIp_qlgW0udv5fh98iwg5Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com/recaptcha/ js-agent.newrelic.com bam.nr-data.net *.cookiebot.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.google-analytics.com *.google.com *.google.nl *.hypernode.io *.cookiebot.com https://images.unsplash.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.google.com/recaptcha/ js-agent.newrelic.com bam.nr-data.net *.cookiebot.com https://maps.googleapis.com https://player.vimeo.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cloudinary.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.google-analytics.com 'self' ws: 'self' wss: *.cookiebot.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-src https://*.stripe.com https://hooks.stripe.com https://assets.braintreegateway.com https://*.youtube.com https://*.google.com https://*.facebook.com https://*.tiktok.com https://*.datagrail.io https://api.consentjs.datagrail.io https://*.mathtag.com https://*.paypal.com https://*.braintreegateway.com; style-src 'self' 'unsafe-inline' https://*.weeecdn.com https://*.weeecdn.net https://*.sayweee.com; connect-src 'self' https://*.googleapis.com https://*.masgusto.com https://*.masgusto.net; img-src 'self' data: https: https://*.masgusto.com https://*.googletagmanager.com https://*.masgusto.com https://*.masgusto.net https://*.weeecdn.com https://*.weeecdn.net; report-uri https://api.masgusto.net/ec/bff/report/csp-violation; report-to csp-endpoint 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.lightboxcdn.com *.tidio.co *.tidiochat.com *.fontawesome.com *.googleapis.com https://cdnjs.cloudflare.com maxcdn.bootstrapcdn.com *.yotpo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com fast.wistia.net www.facebook.com ct.pinterest.com td.doubleclick.net *.freshchat.com 747659468831792.webpush.freshchat.com *.tidio.co *.tidiochat.com *.affirm.com *.affirm.ca *.certcapture.com *.getbread.com *.breadpayments.com *.rbcpayplan.com platform.twitter.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.pinterest.com *.pinterdev.com commerce-app.pintergration.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net bat.bing.com *.lightboxcdn.com c.bing.com c.clarity.ms www.facebook.com www.google.co.in ct.pinterest.com dev.visualwebsiteoptimizer.com seal-atlanta.bbb.org *.tidio.co *.tidiochat.com *.affirm.com *.affirm.ca *.certcapture.com *.getbread.com *.breadpayments.com *.rbcpayplan.com *.disqus.com *.paytomorrow.com pinterest.com assets.pinterest.com syndication.twitter.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ www.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com s.pinimg.com fast.wistia.net *.bing.com *.lightboxcdn.com c.bing.com c.clarity.ms connect.facebook.net *.s.pinimg.com dev.visualwebsiteoptimizer.com js-agent.newrelic.com munchkin.marketo.net www.clarity.ms tools.luckyorange.com www.google.co.in *.tidio.co  *.tidiochat.com  *.adobe.com  *.cardinalcommerce.com *.paypal.com *.bolt.com *.commerce-quick-checkout.com *.gstatic.com polyfill.io *.getbread.com *.breadpayments.com *.rbcpayplan.com *.yotpo.com *.clarity.ms tools.luckyorange.com  s7.addthis.com  *.facebook.com *.authorize.net *.braintreegateway.com *.tidio.co *.tidiochat.com *.fontawesome.com  *.braintreegateway.com  *.yotpo.com  *.googleapis.com *.pushengage.com static.hotjar.com test.popin.to static.popin.to acsbapp.com *.freshchat.com fw-cdn.com script.hotjar.com *.affirm.com *.affirm.ca *.certcapture.com *.disqus.com *.fontawesome.com *.paytomorrow.com https://storage.googleapis.com twitter.com platform.twitter.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.lightboxcdn.com *.tidio.co *.tidiochat.com *.fontawesome.com *.braintreegateway.com *.yotpo.com *.googleapis.com *.pushengage.com static.popin.to *.freshchat.com *.certcapture.com *.paytomorrow.com https://cdnjs.cloudflare.com maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com analytics.google.com www.googleadservices.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.authorize.net  www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.algolia.net *.algolianet.com *.insights.algolia.io insights.algolia.io ct.pinterest.com www.google-analytics.com bat.bing.com stats.g.doubleclick.net u.clarity.ms g.clarity.ms pagead2.googlesyndication.com settings.luckyorange.com *.tidio.co *.tidiochat.com *.bolt.com *.algolia.com *.getbread.com *.breadpayments.com *.pinterest.com *.rbcpayplan.com *.facebook.com  connect.facebook.net   *.braintreegateway.com  *.braintree-api.com  *.cardinalcommerce.com *.yotpo.com fw-cdn.com *.678-xif-269.mktoresp.com dev.visualwebsiteoptimizer.com *.hotjar.io *.acsbapp.com *.affirm.com *.affirm.ca *.certcapture.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.pinterdev.com commerce-app.pintergration.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src checkout-sandbox.getbread.com *.tidio.co *.tidiochat.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com maxcdn.bootstrapcdn.com *.byvajsnami.cz *.byvajsnami.sk *.vegadesign.cz *.vegadesign.local 'self' data: *.googleapis.com *.gstatic.com *.twitter.com *.twimg.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net *.byvajsnami.cz *.byvajsnami.sk *.vegadesign.cz *.vegadesign.local *.twitter.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net *.byvajsnami.cz *.byvajsnami.sk *.vegadesign.cz *.vegadesign.local *.google.com *.youtube.com *.twitter.com *.facebook.com *.hotjar.com *.ladesk.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.vimeocdn.com s.ytimg.com data: *.facebook.com *.byvajsnami.cz *.byvajsnami.sk *.vegadesign.cz *.vegadesign.local *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.google.com *.google.cz *.google.sk *.gstatic.com *.googlesyndication.com *.googleapis.com *.twitter.com *.twimg.com *.facebook.net *.ytimg.com *.imedia.cz *.heureka.cz *.heureka.sk *.doubleclick.net im9.cz www.xtento.com cdn.xtento.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com https://cdn.polyfill.io https://browser.sentry-cdn.com *.googletagmanager.com *.facebook.net maps.googleapis.com *.byvajsnami.cz *.byvajsnami.sk *.vegadesign.cz *.vegadesign.local *.google.com *.google.cz *.google-analytics.com *.googleadservices.com *.gstatic.com *.googleapis.com *.googlesyndication.com *.twitter.com *.twimg.com *.facebook.com *.fontawesome.com *.hotjar.com *.doubleclick.net *.imedia.cz *.sentry.io *.sentry-cdn.com *.cookiehub.com cookiehub.net *.cookiehub.eu *.ladesk.com *.biano.sk bianopixel.com *.im9.cz im9.cz *.dognet.sk *.addthis.com *.databreakers.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.fontawesome.com maxcdn.bootstrapcdn.com *.byvajsnami.cz *.byvajsnami.sk *.vegadesign.cz *.vegadesign.local *.googleapis.com *.gstatic.com *.twitter.com *.twimg.com *.cookiehub.com cookiehub.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.sentry.io *.google-analytics.com *.byvajsnami.cz *.byvajsnami.sk *.vegadesign.cz *.vegadesign.local *.google.com *.google.sk adservice.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.doubleclick.net *.googlesyndication.com *.twitter.com *.twimg.com *.biano.sk *.bianopixel.com *.bianopixel.sk *.cookiehub.net *.cookiehub.eut *.facebook.com *.databreakers.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.byvajsnami.sk *.byvajsnami.cz *.vegadesign.cz *.vegadesign.local 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
connect-src https://static.dhlecommerce.nl https://api-gw.dhlparcel.nl dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com *.cookiebot.com *.cookiebot.eu *.consentcdn.cookiebot.com *.consentcdn.cookiebot.eu *.google.nl *.usercentrics.eu bat.bing.net bat.bing.com *.clarity.ms *.pinterest.com *.criteo.com *.beslist.nl widget.tagembed.com api.taggbox.com cdn.tagbox.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.multisafepay.com 'self' 'unsafe-inline'; font-src https://static.dhlecommerce.nl *.googleapis.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.webwinkelkeur.nl *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.cookiebot.com *.cookiebot.eu *.consentcdn.cookiebot.com *.consentcdn.cookiebot.eu *.google.nl *.webwinkelkeur.nl *.usercentrics.eu *.multisafepay.com https://pay.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com *.google.nl *.webwinkelkeur.nl *.usercentrics.eu img.sct.eu1.usercentrics.eu bat.bing.net bat.bing.com *.bidswitch.net *.adnxs.com *.smartadserver.com *.taboola.com *.omnitagjs.com *.casalemedia.com *.criteo.com *.demdex.net id5-sync.com *.360yield.com *.ivitrack.com *.media.net *.mediavine.com *.postrelease.com *.outbrain.com *.pubmatic.com *.rubiconproject.com *.sharethrough.com *.teads.tv *.tremorhub.com *.3lift.com *.yieldlab.net *.yieldmo.com *.emxdgt.com *.1rx.io sync.targeting.unrulymedia.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.multisafepay.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.dhlecommerce.nl *.cookiebot.eu *.cookiebot.com *.consentcdn.cookiebot.com *.consentcdn.cookiebot.eu *.google.nl *.webwinkelkeur.nl *.usercentrics.eu bat.bing.net bat.bing.com *.clarity.ms *.calendly.com *.beslist.nl *.pinimg.com *.criteo.com *.criteo.net *.cloudflareinsights.com *.pinterest.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.multisafepay.com https://pay.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com widget.tagembed.com api.taggbox.com cdn.tagbox.com static.dhlecommerce.nl https://static.klaviyo.com *.fontawesome.com *.multisafepay.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-N-uSHi03u0Cq4WGESicNvA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://assets.theinnerhour.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.google.co.in https://www.gstatic.com https://www.google.com/recaptcha https://www.youtube.com https://i.ytimg.com https://www.youtube-nocookie.com https://cdn.growthbook.io https://cdn.heapanalytics.com https://heapanalytics.com https://api-js.mixpanel.com https://cdn.js.customerlabs.co https://io.v2.customerlabs.co https://connect.facebook.net https://embed.tawk.to https://va.tawk.to https://static.cloudflareinsights.com https://static.doubleclick.net https://googleads.g.doubleclick.net https://d.adroll.com https://s.adroll.com https://dynamic.criteo.com https://sslwidget.criteo.com https://match.adsrvr.org https://pixel.tapad.com https://snap.licdn.com https://sessions.bugsnag.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com https://www.gstatic.com; img-src 'self' data: https: blob: https://www.google-analytics.com https://www.googletagmanager.com https://static.doubleclick.net https://i.ytimg.com; connect-src 'self' https://api.theinnerhour.com https://assets.theinnerhour.com https://www.google-analytics.com https://www.googletagmanager.com https://cdn.growthbook.io https://cdn.heapanalytics.com https://heapanalytics.com https://api-js.mixpanel.com https://cdn.js.customerlabs.co https://io.v2.customerlabs.co https://sessions.bugsnag.com https://*.firebaseio.com https://firebasestorage.googleapis.com https://static.cloudflareinsights.com; frame-src 'self' https://www.youtube.com https://accounts.google.com https://play.google.com https://embed.tawk.to; frame-ancestors 'self' youmatterhealth.com thefullerlife.com wellbeingontheweb.com wellbeingontheweblite.com wellnesscatalyst.happiesthealth.com wow-staging.wellbeingontheweb.com assets.theinnerhour.com; form-action 'self'; object-src 'none'; base-uri 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://mc.yandex.ru https://yastatic.net https://cdn.usefathom.com https://connect.facebook.net https://www.facebook.com https://analytics.ahrefs.com https://api.tgtrack.ru https://www.google-analytics.com https://analytics.tiktok.com; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://mc.yandex.ru https://mc.yandex.com https://cdn.usefathom.com https://connect.facebook.net https://www.facebook.com https://analytics.ahrefs.com https://api.tgtrack.ru https://firstfund.b-cdn.net https://analytics.tiktok.com https://analytics-sg.tiktok.com; img-src 'self' data: https:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.twitch.tv https://player.twitch.tv https://www.googletagmanager.com https://td.doubleclick.net https://www.facebook.com 1
object-src 'none';base-uri 'self';script-src 'nonce-ZBkASm3iWvYHdAuvIExqkA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-eval' https://*.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://js.hubspot.com https://js.hsadspixel.net https://js.hs-scripts.com https://js.hsforms.net https://js.hscollectedforms.net https://js.hs-analytics.net https://js.hs-banner.com https://js.usemessages.com https://snap.licdn.com https://connect.facebook.net https://www.youtube.com https://player.vimeo.com https://js.stripe.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://challenges.cloudflare.com https://widget.intercom.io https://js.intercomcdn.com https://js.zi-scripts.com https://d19hui4ievcqe3.cloudfront.net/ 'nonce-evhhDUpn1vDUa1esPjuBFgfQ' 'strict-dynamic'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.bunny.net https://d19hui4ievcqe3.cloudfront.net/; style-src-attr 'self' 'unsafe-inline'; img-src 'self' data: https://*.google-analytics.com https://*.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com https://*.googleapis.com https://*.gstatic.com https://track.hubspot.com https://*.hsforms.com https://px.ads.linkedin.com https://www.facebook.com https://*.facebook.com https://i.vimeocdn.com https://*.intercomcdn.com https://js.intercomcdn.com https://prod-iteris-website-2024-4222cd.s3.us-west-1.amazonaws.com https://s3-us-west-1.amazonaws.com https://prod-iteris-website-2024-4222cd.s3-us-west-1.amazonaws.com https://d19hui4ievcqe3.cloudfront.net/; font-src 'self' data: https://fonts.gstatic.com https://fonts.bunny.net https://js.intercomcdn.com https://d19hui4ievcqe3.cloudfront.net/; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://maps.googleapis.com https://*.hubspot.com https://api.hubapi.com https://js.hs-banner.com https://px.ads.linkedin.com https://www.facebook.com https://api.stripe.com https://*.ingest.sentry.io https://*.sentry.io https://reporting.flareapp.io https://notify.bugsnag.com https://sessions.bugsnag.com https://api-iam.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://js.zi-scripts.com https://prod-iteris-website-2024-4222cd.s3-us-west-1.amazonaws.com https://d19hui4ievcqe3.cloudfront.net/; media-src 'self' https://d19hui4ievcqe3.cloudfront.net/; frame-src 'self' https://www.google.com https://forms.hsforms.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://js.stripe.com https://hooks.stripe.com https://www.google.com/recaptcha/ https://challenges.cloudflare.com https://intercom-sheets.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; report-uri /csp-report 1
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/about 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://www.googletagmanager.com https://connect.facebook.net https://cdn.mxpnl.com https://*.sentry.io; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; media-src 'self' blob: https://*.tesana.ai; font-src 'self' data:; connect-src 'self' https://api.tesana.ai https://engine.tesana.ai https://v2.engine.tesana.ai https://play.tesana.ai https://cdn.tesana.ai wss://*.tesana.ai https://*.sentry.io https://api.stripe.com https://api-js.mixpanel.com https://*.googleapis.com https://www.google-analytics.com https://connect.facebook.net https://*.facebook.com https://*.digitaloceanspaces.com https://*.r2.cloudflarestorage.com; frame-src 'self' https://engine.tesana.ai https://v2.engine.tesana.ai https://play.tesana.ai https://js.stripe.com https://hooks.stripe.com https://calendly.com; worker-src 'self' blob:; frame-ancestors 'self' 1
upgrade-insecure-requests; report-to https://f761a3114dffe4f5bac4f0780391ab.0d.environment.api.powerplatform.com:443/powerautomate/automations/direct/workflows/f07330bb13c841fa9a524497a65cba07/triggers/manual/paths/invoke?api-version=1&sp=triggersmanualrun&sv=1.0&sig=Rq_odGxsqXourHOCLMou32o_ksfuBzfv6mDKXdtCd-w;; report-uri https://f761a3114dffe4f5bac4f0780391ab.0d.environment.api.powerplatform.com:443/powerautomate/automations/direct/workflows/f07330bb13c841fa9a524497a65cba07/triggers/manual/paths/invoke?api-version=1&sp=triggersmanualrun&sv=1.0&sig=Rq_odGxsqXourHOCLMou32o_ksfuBzfv6mDKXdtCd-w;; 1
font-src *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ secure.payu.com merch-prod.snd.payu.com wniosek.eraty.pl wniosek.santanderconsumer.pl www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com static.payu.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com secure.payu.com secure.snd.payu.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com static.payu.com *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://static.klaviyo.com *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.google-analytics.com secure.payu.com merch-prod.snd.payu.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net *.googleusercontent.com pouch-global-font-assets.s3.eu-central-1.amazonaws.com *.wistia.com yotpo-stool.s3.amazonaws.com *.zohocdn.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.nosto.com *.nos.to c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.pinterest.com *.pinterdev.com commerce-app.pintergration.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com www.xtento.com *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com *.b0e8.com *.klevu.com *.ksearchnet.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com *.mageside.com mageside.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to *.ometria.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com https://cdn-ukwest.onetrust.com https://via.placeholder.com *.facebook.com www.xtento.com cdn.xtento.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.attentivemobile.com *.attn.tv *.bing.com *.bing.net *.clarity.ms *.doubleclick.net *.facebook.net *.ggpht.com *.googleadservices.com *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.st www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu www.google.ws google.com *.google.com *.googlesyndication.com *.googletagmanager.com *.googleusercontent.com *.kaltura.com *.linksynergy.com *.listrakbi.com *.onetrust.com *.portmeirion.com *.portmeirion.co.uk *.postcodeanywhere.co.uk *.spode.com *.spode.co.uk *.wistia.com yastatic.net *.yotpoapi.com yotpo-editor-production.s3.amazonaws.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.attn.tv events.attentivemobile.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com *.b0e8.com *.bc0a.com js.klevu.com *.ksearchnet.com *.disqus.com *.avada.io *.shopify.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://cdn-ukwest.onetrust.com https://js.klevu.com https://tag.rmp.rakuten.com https://portm11116.pcapredict.com https://cdn-widgetsrepository.yotpo.com https://maps.googleapis.com https://kebos.portmeirion.co.uk *.hotjar.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net www.xtento.com cdn.xtento.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net *.ometria.com https://www.spode.co.uk *.bing.com *.clarity.ms d21m4dsqdd3b9h.cloudfront.net *.doubleclick.net *.google-analytics.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.kaltura.com *.klevu.com *.listrakbi.com *.livechatinc.com *.onetrust.com *.pcapredict.com *.portmeirion.co.uk *.postcodeanywhere.co.uk *.rakuten.com *.sentry-cdn.com *.wistia.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com display.ugc.bazaarvoice.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net *.nosto.com *.nos.to assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com tagmanager.google.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net https://statsjs.klevu.com https://js.klevu.com d21m4dsqdd3b9h.cloudfront.net *.googletagmanager.com *.gstatic.com *.listrakbi.com *.postcodeanywhere.co.uk *.typekit.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.googleapis.com *.gstatic.com *.kaltura.com video-s3-bucket.s3.eu-west-2.amazonaws.com *.wistia.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.attn.tv events.attentivemobile.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.hub-box.com *.klevu.com *.ksearchnet.com https://get.geojs.io *.avada.io connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://cdn-ukwest.onetrust.com *.hotjar.com ws.hotjar.com wss://ws.hotjar.com analytics.google.com *.facebook.net *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com *.ometria.com *.attentivemobile.com *.bc0a.com *.bing.com *.bing.net *.clarity.ms *.doubleclick.net *.facebook.com *.googleadservices.com *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bt www.google.by www.google.ca www.google.cd www.google.ch www.google.ci www.google.cm www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.br www.google.com.co www.google.com.cy www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.hk www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.np www.google.com.om www.google.com.pa www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gg www.google.gm www.google.gr www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.mv www.google.mw www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.tg www.google.tl www.google.tn www.google.vu www.google.ws *.googlesyndication.com *.hotjar.io *.kaltura.com *.listrakbi.com *.livechatinc.com *.onetrust.com *.portmeirion.com *.portmeirion.co.uk *.postcodeanywhere.co.uk *.samsung.com *.spode.com *.spode.co.uk *.wistia.com *.yotpoapi.com yotpo-stool.s3.amazonaws.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.ometria.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; base-uri *.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; report-uri https://32ede476-ded8-4814-88cb-f8ecfa864227.sansec.watch/; report-to report-endpoint; 1
default-src 'self' https:; img-src 'self' data: https:; script-src 'self' https://code.jquery.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://connect.facebook.net https://snap.licdn.com https://static.ads-twitter.com https://js.hs-scripts.com https://js.hsadspixel.net https://js.hscollectedforms.net https://js.hs-analytics.net https://js.hs-banner.com https://js.hubspot.com https://app.usercentrics.eu https://static.hotjar.com https://script.hotjar.com https://cdn.mxpnl.com https://j.6sc.co https://app.mailerlite.com https://static.mailerlite.com https://googleads.g.doubleclick.net https://gx30-sticky-banner.netlify.app; style-src 'self' https://code.jquery.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com; object-src 'none'; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; report-uri https://b16fac5dt0.execute-api.us-east-1.amazonaws.com/prod/csp-report; 1
object-src  'none'; connect-src 'self' *.roccosiffredi.com *.famedigital.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.roccosiffredi.com *.famedigital.com join.gammasecure.com; script-src 'self' *.roccosiffredi.com *.famedigital.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.roccosiffredi.com *.famedigital.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
default-src 'none'; base-uri 'self'; child-src 'self' youtube.com; connect-src 'self' https://webpush.ii.nl/ region1.google-analytics.com www.caniemail.com; font-src 'self'; form-action 'self'; frame-ancestors 'self'; frame-src 'self' youtube.com; img-src 'self' data: *.ii.nl blob: www.google-analytics.com ssl.google-analytics.com googletagmanager.com www.afvalonline.nl afvalonline.nl www.afval-online.nl afval-online.nl; manifest-src 'self'; media-src 'none'; object-src 'none'; report-uri /csp-report; script-src 'self' www.google-analytics.com ssl.google-analytics.com  'sha256-cz6Kd1SDikvh4s18AxjQbsXiPyTdb4GaR1GvyEtd8qY='; style-src 'unsafe-inline' 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://challenges.cloudflare.com https://js-de.sentry-cdn.com https://browser.sentry-cdn.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https://js.intercomcdn.com; media-src 'self' https://js.intercomcdn.com; connect-src 'self' https://*.sentry.io https://*.ingest.sentry.io https://api.protomaps.com https://protomaps.github.io https://api-iam.intercom.io https://api.intercom.io https://nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://uploads.intercomcdn.com https://uploads.intercomusercontent.com; worker-src 'self' blob:; frame-src 'self' https://challenges.cloudflare.com https://www.youtube-nocookie.com https://www.youtube.com https://open.spotify.com https://w.soundcloud.com https://player.vimeo.com https://embed.acast.com https://player.podigee-cdn.net https://www.ardmediathek.de https://www.ardsounds.de https://www.arte.tv https://ngp.zdf.de https://ngp.3sat.de https://www.srf.ch https://www.rts.ch https://www.rsi.ch https://www.rtr.ch; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.googleapis.com https://fonts.gstatic.com *.googleapis.com https://www.gstatic.com https://afflelou-web.my.join-stories.com applepay.cdn-apple.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.payplug.com *.dalenys.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com api-qa.payplug.com secure-qa.payplug.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com https://*.afflelou.com https://p.sharinpix.com *.googlesyndication.com https://editor-assets.abtasty.com https://www.google.fr https://www.facebook.com https://ct.pinterest.com https://bat.bing.com *.doofinder.com *.googleapis.com https://*.gstatic.com https://mcstaging.afflelou.com *.join-stories.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://flagcdn.com https://mafranchise.afflelou.com https://cms-mafranchise.afflelou.com https://dev.visualwebsiteoptimizer.com https://secure-magenta.dalenys.com https://*.google.com https://*.googleapis.com https://*.googleusercontent.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page https://maps.googleapis.com *.disqus.com https://eu1-config.doofinder.com https://*.googlesyndication.com https://halc.iadvize.com https://static.iadvize.com https://iadvize.com https://static.livechat.iadvize.com https://api.iadvize.com https://try.abtasty.com https://msr.afflelou.com https://bat.bing.com https://analytics.tiktok.com https://vto-advanced-integration-api.fittingbox.com/ *.doofinder.com *.googleapis.com https://*.gstatic.com https://sst.afflelou.com https://sst.afflelou.es https://afflelou-web.my.join-stories.com https://js-agent.newrelic.com afflelou.containers.piwik.pro js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://dev.visualwebsiteoptimizer.com https://secure-magenta.dalenys.com applepay.cdn-apple.com api-qa.payplug.com cdn-qa.payplug.com cdn.payplug.com https://*.google.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://cdn.jsdelivr.net https://cdn.payplug.com https://cdn-qa.payplug.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://try.abtasty.com https://cdn.fonts.net *.doofinder.com assets.braintreegateway.com https://secure-magenta.dalenys.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://cdn.plyr.io https://*.googlesyndication.com https://halc.iadvize.com https://api.iadvize.com https://collector.iadvize.com wss://*.iadvize.com https://*.abtasty.com https://fonts.googleapis.com https://fonts.gstatic.com https://cdn.fonts.net https://bat.bing.com *.doofinder.com wss://*.doofinder.com *.googleapis.com https://sst.afflelou.com https://sst.afflelou.es https://afflelou-web.my.join-stories.com *.join-stories.com https://api.stories.studio https://bam.nr-data.net https://bam-cell.nr-data.net https://bam.eu01.nr-data.net afflelou.piwik.pro afflelou.containers.piwik.pro api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://dev.visualwebsiteoptimizer.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://bohds.afflelou.es https://bohds.afflelou.com https://bohds.afflelou.be https://bohds.afflelou.ch https://bohds.afflelou.pt https://bohds.afflelou.ma https://bohds.malentille.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
connect-src https://auth.sdc.dk https://api-proxy-neos.sdc.eu https://azure-sign-p1.sdc.dk data: https://*.dynamicyield.com/ https://*.dynamicyield.eu/ https://*.sdc.dk/ https://*.sdc.eu/ https://api.cludo.com https://bat.bing.com https://cdn.linkedin.oribi.io https://px.ads.linkedin.com https://cloud.lsb.dk https://consent.app.cookieinformation.com https://dc.services.visualstudio.com/ https://policy.app.cookieinformation.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://vimeo.com https://www.google.com https://www.totalkredit.dk/ 'self'; default-src https://api-shared-proxy.sdc.eu https://bundles.lsb.dk 'self'; font-src https://*.dynamicyield.com/ https://*.dynamicyield.eu/ https://fonts.gstatic.com/ 'self'; frame-src https://auth.sdc.dk https://azure-sign-p1.sdc.dk https://app.leaddoubler.com/ https://player.vimeo.com/ https://policy.app.cookieinformation.com https://td.doubleclick.net https://widget.trustpilot.com https://www.googletagmanager.com https://www.youtube.com/ 'self'; img-src *.siteimproveanalytics.io  data: https://*.dynamicyield.com/ https://*.dynamicyield.eu/ https://bat.bing.com https://bundles.lsb.dk https://customer.cludo.com https://i.ytimg.com/ https://maps.googleapis.com/ https://maps.gstatic.com/ https://px.ads.linkedin.com/ https://stm.totalkredit.dk/ https://www.google.com https://www.google.dk https://www.google-analytics.com https://www.google-analytics.dk https://www.googletagmanager.com 'self' www.facebook.com; script-src https://*.dynamicyield.com/ https://*.dynamicyield.eu/ https://bat.bing.com https://bundles.lsb.dk https://connect.facebook.net/ https://consent.cookiebot.com/ https://customer.cludo.com https://forms.lsb-kampagne.dk/ https://googleads.g.doubleclick.net https://maps.googleapis.com/ https://player.vimeo.com/ https://policy.app.cookieinformation.com https://policy.app.cookieinformation.com/ https://s.ytimg.com/ https://s2.adform.net https://s3-eu-west-1.amazonaws.com https://siteimproveanalytics.com https://snap.licdn.com https://track.adform.net https://widget.trustpilot.com https://www.google-analytics.com https://www.googleoptimize.com https://www.googletagmanager.com https://www.totalkredit.dk/ https://www.youtube.com/ 'self' 'unsafe-eval' 'unsafe-inline'; style-src https://*.dynamicyield.com/ https://*.dynamicyield.eu/ https://bundles.lsb.dk https://customer.cludo.com https://forms.lsb-kampagne.dk/ https://laanogsparneos.prod.ibn.host/ https://laanogspar-prd.neosbank-envr.com/ https://neosbank-laanogspar-prd.ibn.host/ https://policy.app.cookieinformation.com https://www.totalkredit.dk/ 'self' 'unsafe-inline'; report-uri /api/sdc/security/csp/report; report-to default 1
object-src 'none';base-uri 'self';script-src 'nonce-YMiyPHraOH3fZGiDuiA74Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.feedbackcompany.com *.googleapis.com maxcdn.bootstrapcdn.com https://*.hotjar.com https://*.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.feedbackcompany.com https://*.tawk.to https://www.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https://www.googletagmanager.com/ https://*.tawk.to https://*.doubleclick.net https://www.facebook.com https://assets.pinterest.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://stellar.givingeurope.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.feedbackcompany.com 'self' data: https://*.sirv.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://*.analytics.google.com https://*.clarity.ms https://*.google-analytics.com https://*.googletagmanager.com https://*.hotjar.com https://*.linkedin.com https://*.tawk.to https://bat.bing.com https://c.bing.com https://cdn.jsdelivr.net https://exch.vanheijster.nl https://exch.vanhelden.nl https://exch.vanhelden.be https://exch.eurogifts.be https://exch.eurogifts.fr https://googleads.g.doubleclick.net https://tawk.link https://www.google.nl https://www.facebook.com https://i.pinimg.com https://log.pinterest.com https://imgsct.cookiebot.com https://ad.doubleclick.net https://stats.g.doubleclick.net https://ade.googlesyndication.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com d2a6mddvzruxpc.cloudfront.net https://stellar.givingeurope.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page https://maps.googleapis.com https://player.vimeo.com *.feedbackcompany.com bam.nr-data.net bam-cell.nr-data.net js-agent.newrelic.com https://*.sirv.com 'unsafe-eval' https://portal.zakeke.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://*.convertexperiments.com https://*.googletagmanager.com https://*.hotjar.com https://*.tawk.to https://bat.bing.com https://connect.facebook.net https://cdn.jsdelivr.net https://googleads.g.doubleclick.net https://snap.licdn.com https://script.adcalls.nl https://www.clarity.ms https://www.google.com https://www.googleadservices.com https://www.googleoptimize.com https://assets.pinterest.com https://widgets.pinterest.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://ct.pinterest.com https://s.pinimg.com https://ct.beslist.nl https://*.optimizely.com https://cdn.leadinfo.com https://bgmin.cdn.billygrace.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://stellar.givingeurope.com https://components.givingeurope.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com maxcdn.bootstrapcdn.com https://*.sirv.com https://*.hotjar.com https://*.tawk.to https://cdn.jsdelivr.net https://fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://*.tawk.to https://v.pinimg.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.feedbackcompany.com bam.nr-data.net bam-cell.nr-data.net https://*.sirv.com https://api.zakeke.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://*.analytics.google.com https://*.clarity.ms https://*.google-analytics.com https://*.googletagmanager.com https://*.hotjar.com https://*.hotjar.io https://*.tawk.to https://api.adcalls.nl https://bat.bing.com https://cdn.linkedin.oribi.io https://fonts.gstatic.com https://www.facebook.com wss://*.hotjar.com wss://*.tawk.to https://consentcdn.cookiebot.com https://exch.vanheijster.nl https://exch.vanhelden.nl https://exch.vanhelden.be https://exch.eurogifts.be https://exch.eurogifts.fr https://ct.pinterest.com https://px.ads.linkedin.com https://googleads.g.doubleclick.net https://*.googlesyndication.com https://*.metrics.convertexperiments.com https://logs.convertexperiments.com https://*.convertexperiments.com https://ct.beslist.nl https://ad.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://stellar.givingeurope.com https://components.givingeurope.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://www.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://googleads.g.doubleclick.net https://connect.facebook.net https://static.klaviyo.com https://static-tracking.klaviyo.com https://bat.bing.com https://js.stripe.com https://challenges.cloudflare.com https://maps.googleapis.com https://g.tradetested.co.nz https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://imagedelivery.net https://storage.googleapis.com https://*.klaviyo.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://www.google.com https://www.google.co.nz https://www.googleadservices.com https://stats.g.doubleclick.net https://sst.tradetested.co.nz https://bat.bing.com https://www.facebook.com https://maps.googleapis.com https://maps.gstatic.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://ecom.tradetested.co.nz https://ecom-staging.tradetested.co.nz https://cms.tradetested.co.nz https://g.tradetested.co.nz https://us.posthog.com https://us-assets.i.posthog.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://www.google.com https://www.googleadservices.com https://ad.doubleclick.net https://sst.tradetested.co.nz https://connect.facebook.net https://www.facebook.com https://a.klaviyo.com https://fast.a.klaviyo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://api.stripe.com https://js.stripe.com https://challenges.cloudflare.com https://maps.googleapis.com https://imagedelivery.net https://storage.googleapis.com; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://challenges.cloudflare.com https://www.facebook.com https://www.instagram.com https://www.youtube.com https://www.youtube-nocookie.com https://td.doubleclick.net https://sst.tradetested.co.nz; media-src 'self' https://storage.googleapis.com https://imagedelivery.net; worker-src 'self' blob:; manifest-src 'self' 1
default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data: chrome-extension:; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; report-uri /csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://code.jquery.com https://widget.ybug.io https://challenges.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://embed.tawk.to; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://embed.tawk.to; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com https://embed.tawk.to; img-src 'self' data: blob: https: http:; connect-src 'self' https: wss:; frame-src 'self' https://challenges.cloudflare.com https://store.steampowered.com; report-uri /api/security/csp-report 1
font-src www.paypalobjects.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com fonts.gstatic.com craftelier.com *.craftelier.com hartem.com *.hartem.com *.paypal.com *.paypalobjects.com instantcredit.net test.instantcredit.net *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com esh-blog.craftelier.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com webpay3g.transbank.cl webpay3gint.transbank.cl www.facebook.com www.paycomet.com api.paycomet.com https://plumrocket.com esh-blog.craftelier.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com esh-blog.craftelier.com 'self'; frame-src fast.amc.demdex.net *.adobe.com player.vimeo.com *.youtube.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com https://www.google.com/recaptcha/ bid.g.doubleclick.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com landofcoder.com www.facebook.com platform.twitter.com ct.pinterest.com td.doubleclick.net www.paycomet.com api.paycomet.com instantcredit.net test.instantcredit.net https://plumrocket.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.googletagmanager.com esh-blog.craftelier.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com *.vimeocdn.com i.ytimg.com *.youtube.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.connectif.cloud *.stripe.com *.stripe.network *.google.com ebizmarts-website.s3.amazonaws.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com https://firebasestorage.googleapis.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com craftelier.com *.craftelier.com hartem.com *.hartem.com ct.pinterest.com s3-eu-west-1.amazonaws.com c.clarity.ms c.bing.com *.doofinder.com instantcredit.net test.instantcredit.net *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com https://redchamps.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.google.es *.googleadservices.com esh-blog.craftelier.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.connectif.cloud *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.google.com *.sagepay.com *.opayo.eu.elavon.com landofcoder.com *.avada.io *.shopify.com connect.facebook.net twitter.com platform.twitter.com static.addtoany.com craftelier.com *.craftelier.com hartem.com *.hartem.com static.zdassets.com analytics.tiktok.com cdn.stg.p-a.io cdn.scalapay.com api.instagram.com js-agent.newrelic.com bam.eu01.nr-data.net cdn.connectif.cloud cdn.particularaudience.com b2c-cdn.scalapay.com s.pinimg.com www.clarity.ms dev.visualwebsiteoptimizer.com snippet.maze.co *.doofinder.com www.paycomet.com api.paycomet.com instantcredit.net test.instantcredit.net code.jquery.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.googletagmanager.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.google-analytics.com *.googleadservices.com esh-blog.craftelier.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com craftelier.com *.craftelier.com hartem.com *.hartem.com *.doofinder.com instantcredit.net test.instantcredit.net *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.googletagmanager.com esh-blog.craftelier.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com static.zdassets.com esh-blog.craftelier.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.connectif.cloud *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com landofcoder.com https://get.geojs.io *.avada.io stats.addtoany.com craftelier.com *.craftelier.com hartem.com *.hartem.com analytics-ipv6.tiktokw.us stats.g.doubleclick.net ekr.zendesk.com ekr.zdassets.com recs-ap-e1a.stg.p-a.io craftelier.zendesk.com cdn.integration.scalapay.com wss://widget-mediator.zopim.com bam.eu01.nr-data.net eu5-api.connectif.cloud recs-us-e1a.particularaudience.com api.amplitude.com ct.pinterest.com www.facebook.com p.clarity.ms v.clarity.ms *.paypalobjects.com *.doofinder.com instantcredit.net *.instantcredit.net *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com https://analytics.tiktok.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.google.com *.googlesyndication.com *.googletagmanager.com googleads.g.doubleclick.net esh-blog.craftelier.com 'self' 'unsafe-inline'; child-src esh-blog.craftelier.com http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com craftelier.com *.craftelier.com hartem.com *.hartem.com widget-mediator.zopim.com analytics.tiktok.com esh-blog.craftelier.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cloudflare.com *.googleapis.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.authorize.net https://plumrocket.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cloudflare.com *.googleadservices.com *.googletagmanager.com *.googlesyndication.com *.google.co.in *.seal-chicago.bbb.org *.files-text.com *.livechatinc.com *.livechat-files.com *.livechat-static.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com https://rum.hlx.page 'self' *.paypal.com *.sandbox.paypal.com *.googletagmanager.com *.plumrocket.com *.googleadservices.com *.google-analytics.com *.livechatinc.com *.livechat-static.com *.authorize.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com self *.cloudflare.com *.googleapis.com *.fontawesome.com *.livechatinc.com 'self' 'unsafe-inline'; object-src *.livechatinc.com 'self' 'unsafe-inline'; media-src *.adobe.com *.livechatinc.com *.livechat-static.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com self *.cloudflare.com *.googletagmanager.com *.googleadservices.com *.livechatinc.com *.text.com *.authorize.net 'self' 'unsafe-inline'; child-src *.livechatinc.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.laminator.com/; report-to report-endpoint; 1
default-src 'self'; script-src 'report-sample' 'self' https://app.termly.io/  https://www.google.com/recaptcha/ 'unsafe-inline'; style-src 'report-sample' 'self' https://fonts.googleapis.com 'unsafe-inline'; object-src 'none'; base-uri 'self'; connect-src 'self' https://app.termly.io; font-src 'self' https://fonts.gstatic.com; frame-src 'self'; img-src 'self' https://diversityjobs.com https://lipis.github.io; manifest-src 'self'; media-src 'self'; worker-src 'self'; 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: data:; media-src https: data:; object-src 'none'; frame-src 'self' https:; worker-src blob:; frame-ancestors 'self'; form-action 'self' *.mykonicaminolta.com https:; report-uri https://0b3b4954796ea786489a35680dfb724f.report-uri.com/r/t/csp/wizard 1
default-src 'self'; script-src 'self' 'wasm-unsafe-eval' https://consent.cookiebot.com https://consentcdn.cookiebot.com https://load.sst.star.de https://sst.star.de https://maps.googleapis.com https://maps.gstatic.com https://*.licdn.com https://bat.bing.com https://s.pinimg.com https://ct.pinterest.com https://connect.facebook.net https://amplify.outbrain.com https://wave.outbrain.com https://tr.outbrain.com https://www.clarity.ms https://scripts.clarity.ms https://analytics.tiktok.com https://gcs.tp-de.net 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com blob: https://i.ytimg.com https://maps.googleapis.com https://maps.gstatic.com https://*.googleapis.com https://*.ggpht.com https://consent.cookiebot.com https://*.ads.linkedin.com https://bat.bing.com https://ct.pinterest.com; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://consentcdn.cookiebot.com https://findmy.anybill.de https://receipt.autonomo.tech https://load.sst.star.de https://sst.star.de https://www.youtube-nocookie.com https://www.youtube.com https://ct.pinterest.com https://gcs.tp-de.net; object-src 'none'; frame-ancestors 'self'; form-action 'self'; style-src 'self' 'unsafe-inline' 'report-sample'; font-src 'self' data:; connect-src 'self' https://maps.googleapis.com https://maps.gstatic.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://load.sst.star.de https://sst.star.de https://tr.outbrain.com https://px.ads.linkedin.com https://ct.pinterest.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://bat.bing.com https://*.clarity.ms; worker-src 'self' 'wasm-unsafe-eval' https://consent.cookiebot.com https://consentcdn.cookiebot.com https://load.sst.star.de https://sst.star.de https://maps.googleapis.com https://maps.gstatic.com https://*.licdn.com https://bat.bing.com https://s.pinimg.com https://ct.pinterest.com https://connect.facebook.net https://amplify.outbrain.com https://wave.outbrain.com https://tr.outbrain.com https://www.clarity.ms https://scripts.clarity.ms https://analytics.tiktok.com https://gcs.tp-de.net blob: 'report-sample'; child-src 'self' blob:; report-uri https://www.star.de/@http-reporting?csp=report&requestTime=1789288937496924&requestHash=565a38a7a98eeacd306e8465827e5a1f0d237bfc 1
font-src *.klarnacdn.net *.fontawesome.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.certcapture.com *.klarna.com https://www.trustedsite.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.wesupply.xyz https://wesupplylabs.com guarantee-cdn.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.certcapture.com *.bing.com *.avis-verifies.com *.livechat-static.com *.livechat-files.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.klarna.com *.klarnaevt.com *.klarnacdn.net magefan.com cm.magefan.com *.disqus.com flagpedia.net *.gstatic.com maps.googleapis.com *.facebook.com *.googleusercontent.com https://cdn.ywxi.net www.sandbox.paypal.com guarantee-cdn.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com *.cdninstagram.com *.fbcdn.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.certcapture.com *.salesforceliveagent.com *.bing.com *.livechatinc.com *.callrail.com *.avis-verifies.com https://www.googleadservices.com https://www.google-analytics.com https://www.googletagmanager.com tagmanager.google.com *.gstatic.com maps.googleapis.com https://cdn.jsdelivr.net https://ipinfo.io https://cdn.ywxi.net https://www.trustedsite.com *.facebook.net unpkg.com *.maxmind.com *.paypal.com c.paypal.com js.braintreegateway.com assets.braintreegateway.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.klarna.com *.klarnacdn.net *.klarnaservices.com *.disqus.com *.googleusercontent.com pay.google.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ *.cloudflare.com guarantee-cdn.com *.googletagmanager.com *.googleadservices.com *.google.com *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.clarity.ms *.klaviyo.com *.doubleclick.net *.instagram.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.certcapture.com *.klarnacdn.net *.fontawesome.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.tagmanager.google.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.certcapture.com *.callrail.com *.salesforceliveagent.com *.avis-verifies.com *.livechatinc.com *.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com https://s3-us-west-2.amazonaws.com https://www.trustedsite.com www.gstatic.com maps.googleapis.com google.com *.facebook.net *.mmapiws.com https://s3-us-west-2.amazonaws.com/mfesecure-public/ https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ *.google.com *.google-analytics.com *.analytics.google.com *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app https://www.google-analytics.com *.instagram.com *.googleusercontent.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src cdn.cookielaw.org 'unsafe-hashes' 'sha256-5lSQFTOMNNoGBLbrC6eUxpYeuyBQW52hLO9rR85ASEA=' https: http: 'nonce-0Q2S4vz1N/RFOhuNAzFghBLScYd2AoyyReWeq9v+rmg=' 'unsafe-eval' 'unsafe-inline';object-src 'none';frame-ancestors 'none';base-uri 'none';report-uri /api/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://challenges.cloudflare.com https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://googleads.g.doubleclick.net https://adservice.google.com https://www.googletagservices.com https://*.adtrafficquality.google https://www.redbubble.com https://cdn.jsdelivr.net https://code.jquery.com https://ajax.googleapis.com https://www.googleadservices.com https://www.google.com https://cdn.ampproject.org; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://www.googletagmanager.com https://challenges.cloudflare.com https://pagead2.googlesyndication.com https://*.g.doubleclick.net https://*.adtrafficquality.google https://*.google.com https://csi.gstatic.com https://www.googleadservices.com https://ad.doubleclick.net https://google.com https://www.google.ca https://www.google.co.uk https://www.google.com.au https://www.google.no; frame-src 'self' https://challenges.cloudflare.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://pagead2.googlesyndication.com https://www.google.com https://*.adtrafficquality.google https://www.redbubble.com; form-action 'self' https://www.paypal.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; report-uri /csp/report.php 1
default-src 'self' https: data: blob:; base-uri 'self'; object-src 'none'; form-action 'self' https:; frame-ancestors 'self'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com static.cloudflareinsights.com connect.facebook.net js.stripe.com www.paypalobjects.com app2.salesmanago.pl vc-service.salesmanago.pl maxcdn.bootstrapcdn.com use.fontawesome.com maps.googleapis.com; style-src 'self' https: 'unsafe-inline' maxcdn.bootstrapcdn.com use.fontawesome.com; img-src 'self' https: data: blob:; font-src 'self' https: data: maxcdn.bootstrapcdn.com use.fontawesome.com; connect-src 'self' https: wss: app2.salesmanago.pl vc-service.salesmanago.pl static.cloudflareinsights.com www.googletagmanager.com connect.facebook.net js.stripe.com; frame-src 'self' https: js.stripe.com https://*.stripe.com; report-uri /csp-report; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googlesyndication.com https://*.googletagmanager.com https://*.googletagservices.com https://*.google.com https://*.gstatic.com https://*.doubleclick.net https://www.youtube.com https://s.ytimg.com https://fundingchoicesmessages.google.com https://*.adtrafficquality.google; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.gstatic.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; media-src 'self' blob: https:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://*.doubleclick.net https://*.google.com https://*.adtrafficquality.google https://fundingchoicesmessages.google.com; connect-src 'self' https://api.themoviedb.org https://*.wikipedia.org https://*.wikimedia.org https://www.google.com https://csi.gstatic.com https://*.google-analytics.com https://*.analytics.google.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.doubleclick.net https://*.adtrafficquality.google; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none'; upgrade-insecure-requests; report-uri /csp-report 1
font-src fonts.googleapis.com fonts.gstatic.com *.googleapis.com *.gstatic.com data: *.tawk.to 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.tawk.to *.cookiebot.com *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com https://images.unsplash.com *.disqus.com *.tawk.to *.google.co.uk *.facebook.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://www.magezon.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.hsforms.net *.hsforms.com 'self' data: *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.disqus.com *.tawk.to *.cookiebot.com *.hotjar.com *.facebook.com *.facebook.net chimpstatic.com downloads.mailchimp.com *.list-manage.com https://z.moatads.com https://cdn.jsdelivr.net *.google.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.trustpilot.com *.googletagmanager.com tagmanager.google.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.tawk.to downloads.mailchimp.com https://cdn.jsdelivr.net https://static.klaviyo.com unsafe-inline assets.braintreegateway.com *.googleapis.com *.gstatic.com *.trustpilot.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tawk.to 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.tawk.to *.cookiebot.com stats.g.doubleclick.net *.google.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https: data: blob:; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https:; img-src 'self' https: data: blob:; font-src 'self' https: data:; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' https: data: blob:; worker-src 'self' blob:; upgrade-insecure-requests; report-uri https://csp.alldesign.ninja/csp-reports; report-to csp-endpoint 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.cdn.shoptireco.com cdn.shoptireco.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.gstatic.com https://firebasestorage.googleapis.com *.cdn.shoptireco.com cdn.shoptireco.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com s7.addthis.com *.avada.io *.cdn.shoptireco.com cdn.shoptireco.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.cdn.shoptireco.com cdn.shoptireco.com *.typekit.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src *.cdn.shoptireco.com cdn.shoptireco.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com ekr.zdassets.com/ https://get.geojs.io *.avada.io *.cdn.shoptireco.com cdn.shoptireco.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.cdn.shoptireco.com cdn.shoptireco.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://clerk.row.pro https://challenges.cloudflare.com https://js.stripe.com https://va.vercel-scripts.com https://cdn.aggle.net https://chat.cdn-plain.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://img.clerk.com https://*.stripe.com https://*.withpersona.com https://*.aggle.net https://prod-uk-services-workspac-workspacefilespublicbuck-vs4gjqpqjkh6.s3.amazonaws.com https://prod-uk-services-attachm-attachmentsbucket28b3ccf-uwfssb4vt2us.s3.eu-west-2.amazonaws.com https://i0.wp.com; font-src 'self' data:; connect-src 'self' https://api.row.pro https://*.api-preview.row.pro https://clerk.row.pro wss://clerk.row.pro https://api.stripe.com https://r.stripe.com https://q.stripe.com https://*.withpersona.com https://vitals.vercel-insights.com https://*.aggle.net https://chat.uk.plain.com wss://chat.uk.plain.com https://prod-uk-services-attachm-attachmentsuploadbucket2-1l2e4906o2asm.s3.eu-west-2.amazonaws.com; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://challenges.cloudflare.com https://withpersona.com https://*.withpersona.com; worker-src 'self' blob:; form-action 'self'; base-uri 'self'; frame-ancestors 'none'; object-src 'none'; upgrade-insecure-requests 1
script-src 'self' 'nonce-8O1lvou9iJ6BZqVYpsqE/zfcJmY=' https://confluence.delco.community https://www.delcoares.org; report-uri /rest/csp/latest/csp-report; 1
report-uri https://www.worki.sk/nelmio/csp/report 1
default-src 'self'; report-uri /csp-violations 1
script-src 'self' 'unsafe-eval' chrome-extension: 'unsafe-inline' https://mc.yandex.ru https://api-maps.yandex.ru https://yastatic.net https://connect.facebook.net https://bitrix.info https://top-fwz1.mail.ru https://privacy-cs.mail.ru https://mc.yandex.com 127.0.0.1:8182 127.0.0.1:8888 127.0.0.1:5005; frame-src 'self' https://www.facebook.com chrome-extension: https://mc.yandex.md https://mc.yandex.ru https://mc.yandex.com; object-src 'self'; report-uri /cspreportonly; 1
object-src 'none';base-uri 'self';script-src 'nonce-EmJhSSpn3gYhX6PZBoLjkg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-fXOye27kK5JQfWD7Mx1StQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com *.googleapis.com *.gstatic.com *.fontawesome.com *.google.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.facebook.net *.google.com *.pagar.me *.netsgroup.com *.sibs.pt *.seglan.com *.secureacs.com *.rsa3dsauth.com *.apata.io *.cardinalcommerce.com *.santander.com.br *.bradesco.com.br *.bradesco *.stone.com.br *.nubank.com.br *.itau.com.br *.bb.com.br *.caixa.gov.br *.inter.co *.bancointer.com.br *.c6bank.com.br *.bancobmg.com.br *.safra.com.br *.sicoob.com.br *.banrisul.com.br *.banrisul.b.br *.banorte.com *.xpi.com.br *.btgpactual.com *.btgpactualdigital.com *.mercadopago.com.br *.mercadopago.com *.picpay.com *.amedigital.com *.neon.tech *.neon.com.br *.wise.com *.revolut.com *.sandbox.3dsecure.io *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mlstatic.com https://shopline.itau.com.br 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.facebook.net *.pagar.me *.netsgroup.com *.sibs.pt *.seglan.com *.secureacs.com *.rsa3dsauth.com *.apata.io *.cardinalcommerce.com *.santander.com.br *.bradesco.com.br *.bradesco *.stone.com.br *.nubank.com.br *.itau.com.br *.bb.com.br *.caixa.gov.br *.inter.co *.bancointer.com.br *.c6bank.com.br *.bancobmg.com.br *.safra.com.br *.sicoob.com.br *.banrisul.com.br *.banrisul.b.br *.banorte.com *.xpi.com.br *.btgpactual.com *.btgpactualdigital.com *.mercadopago.com.br *.mercadopago.com *.picpay.com *.amedigital.com *.neon.tech *.neon.com.br *.wise.com *.revolut.com *.sandbox.3dsecure.io *.weltpixel.com *.google.com/ *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.paypalobjects.com t.paypal.com www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io *.googleapis.com *.gstatic.com *.bis2bis.com.br *.google-analytics.com *.google.com *.doubleclick.net *.googletagmanager.com *.googleusercontent.com *.facebook.com *.facebook.net cdn.mundipagg.com api.pagar.me magefan.com cm.magefan.com https://firebasestorage.googleapis.com https://www.magezon.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar data: 'self' 'unsafe-inline'; script-src secure.authorize.net test.authorize.net www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.ampproject.org raw.githubusercontent.com *.googleapis.com *.gstatic.com *.bis2bis.com.br cdn.jsdelivr.net *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.google.com *.facebook.net *.facebook.com connect.facebook.net 3ds2.pagar.me 3ds2-sdx.pagar.me *.avada.io *.google.com/ *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.pagseguro.com.br *.pagseguro.com https://www.googletagmanager.com tagmanager.google.com www.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.bis2bis.com.br *.fontawesome.com *.googleapis.com *.google.com https://fonts.bunny.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com cdn.ampproject.org *.googleapis.com *.bis2bis.com.br *.google-analytics.com *.google.com *.googleadservices.com *.doubleclick.net *.facebook.com *.facebook.net api.mundipagg.com api.pagar.me brasilapi.com.br viacep.com.br servicodados.ibge.gov.br google.com pay.sandbox.google.com https://get.geojs.io *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com http://api.itaushopline.com *.pagseguro.com.br *.pagseguro.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; default-src https://api.itau.com.br/ https://api.itau.com.br:443/ https://sts.itau.com.br/ https://sts.itau.com.br:443/ https://secure.api.itau/ https://secure.api.itau:443/ 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.googleapis.com *.fontawesome.com *.bootstrapcdn.com *.popt.in *.cloudfront.net maxcdn.bootstrapcdn.com *.amazonaws.com *.on.aws *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com *.twitter.com *.facebook.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.twitter.com *.google.com *.addthis.com *.doubleclick.net *.facebook.com connect.facebook.net *.disqus.com disqus.com www.facebook.com graph.facebook.com business.facebook.com www.commercepartnerhub.com www.googletagmanager.com https://plumrocket.com https://www.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.cloudflare.com *.googleadservices.com *.google-analytics.com *.google.co.in *.twitter.com *.doubleclick.net connect.facebook.net *.facebook.com *.fbcdn.net *.disqus.com *.disquscdn.com www.facebook.com graph.facebook.com business.facebook.com *.google.com *.googletagmanager.com *.popt.in *.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cloudflare.com *.twitter.com *.google-analytics.com googletagmanager.com *.google.com *.gstatic.com *.trustedshops.com *.fontawesome.com *.addthis.com s7.addthis.com m.addthis.com z.moatads.com *.addthisedge.com apis.google.com graph.facebook.com widgets.pinterest.com *.zipmoney.com.au *.zip.co *.doubleclick.net *.popt.in connect.facebook.net *.disqus.com *.disquscdn.com www.facebook.com business.facebook.com *.googletagmanager.com *.googleadservices.com https://apis.google.com *.jsdelivr.net *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com *.cloudflare.com *.googleapis.com *.twitter.com *.gstatic.com *.typekit.net *.fontawesome.com *.bootstrapcdn.com *.popt.in *.lambda-url.us-west-2.on.aws *.disquscdn.com maxcdn.bootstrapcdn.com *.jsdelivr.net *.on.aws *.amazonaws.com *.stripe.network *.stripecdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com https://www.sandbox.paypal.com https://www.paypal.com *.cloudflare.com *.twitter.com *.google-analytics.com *.googletagmanager.com *.googlesyndication.com *.googleadservices.com *.zipmoney.com.au *.google.co.in *.google.com *.paypalobjects.com *.cloudfront.net *.popt.in connect.facebook.net *.facebook.com *.disqus.com disqus.com *.disquscdn.com www.facebook.com graph.facebook.com business.facebook.com *.analytics.google.com stats.g.doubleclick.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.bootstrapcdn.com *.cloudflare.com *.bootstrap.com 'self' data: *.googleapis.com *.iwdagency.com *.yotpo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.yotpo.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https://www.addthis.com https://s7.addthis.com/ *.yotpo.com *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://mas.astralweb.com.tw https://www.magezon.com *.cloudflare.com *.google-analytics.com *.paypalobjects.com *.googleapis.com *.iwdagency.com *.yotpo.com https://img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.gstatic.com https://maps.googleapis.com https://www.addthis.com https://s7.addthis.com/ m.addthis.com *.addthisedge.com *.paypalobjects.com *.paypal.com z.moatads.com https://services.sheerid.com/jsapi/SheerID.js https://cdn.jsdelivr.net/npm/@sheerid/jslib@1/sheerid.js *.attn.tv *.attentivemobile.com *.iwdagency.com *.yotpo.com s7.addthis.com *.avada.io *.google.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.cloudflare.com https://www.googletagmanager.com tagmanager.google.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net https://services.sheerid.com https://cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.bootstrapcdn.com *.cloudflare.com *.fontawesome.com *.iwdagency.com *.yotpo.com *.googleapis.com assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.cloudflare.com *.cardinalcommerce.com https://maps.googleapis.com https://cdn.jsdelivr.net/npm/@sheerid/jslib@1/sheerid.js https://www.addthis.com *.attn.tv *.attentivemobile.com *.iwdagency.com *.yotpo.com ekr.zdassets.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com https://www.google-analytics.com https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.seb.ee pos.estcard.ee 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://*.every-pay.com/ https://pay.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com https://*.every-pay.com/ https://payment.lhv.ee/ magefan.com cm.magefan.com *.disqus.com https://www.terminalmappingjs.com https://osm.venipak.com http://mano.venipak.lt www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com cdn.kevin.eu pay.every-pay.eu data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com cdn-cookieyes.com https://*.every-pay.com/ https://pay.google.com/ *.disqus.com https://unpkg.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.fontawesome.com https://unpkg.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com log.cookieyes.com https://www.terminalmappingjs.com https://geocode.arcgis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp.threatview.app/report; report-to report-endpoint; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-c6Xw6FFe8CpOrsRvA8gVwg' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-VIPkvR-7ZS8SSPkVba9YLQ' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
object-src 'none';base-uri 'self';script-src 'nonce-AX4uWdLWsHWfrfcFONEHyQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-6oyFMRYqbUX_DouIiD8Fow' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-LHaWv7J7QGlJGOnMA1Caxg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.cloudflare.com *.bootstrapcdn.com data: *.voiceflow.com *.gstatic.com maxcdn.bootstrapcdn.com fonts.gstatic.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es test.saferpay.com www.saferpay.com saferpay.com *.facebook.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com test.saferpay.com www.saferpay.com saferpay.com tradingview-widget.com www.googletagmanager.com *.tradingview-widget.com www.google.com *.voiceflow.com www.facebook.com platform.twitter.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es test.saferpay.com www.saferpay.com saferpay.com img.youtube.com *.cloudflare.com www.goldvorsorge.at www.googletagmanager.com www.google.com www.google.at www.google.de *.gstatic.com *.voiceflow.com cm4-production-assets.s3.amazonaws.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com amcglobal.sc.omtrdc.net yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com s7.addthis.com https://www.google.com https://www.gstatic.com test.saferpay.com www.saferpay.com saferpay.com *.cloudflare.com *.twitter.com *.fontawesome.com www.googletagmanager.com www.google.com googleads.g.doubleclick.net stats.g.doubleclick.net pagead2.googlesyndication.com tpc.googlesyndication.com s3.tradingview.com *.voiceflow.com connect.facebook.net *.avada.io twitter.com platform.twitter.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.cloudflare.com *.fontawesome.com *.bootstrapcdn.com *.voiceflow.com maxcdn.bootstrapcdn.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es https://www.sandbox.paypal.com https://www.paypal.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com ekr.zdassets.com/ https://www.google.com https://www.gstatic.com test.saferpay.com www.saferpay.com saferpay.com *.cloudflare.com www.google.com www.googletagmanager.com region1.google-analytics.com www.google-analytics.com *.analytics.google.com *.googlesyndication.com *.doubleclick.net *.voiceflow.com connect.facebook.net *.facebook.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com *.fontawesome.com fonts.googleapis.com *.tamara.co https://fonts.bunny.net data: checkout.tabby.ai widgets.tabby.ai cdn.tabby.ai storage.googleapis.com *.panhomestores.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com *.google.com/ www.xtento.com metrics.panhomestores.com *.weltpixel.com *.addthis.com accounts.google.com https://m6.purplecloud.ai checkout.tabby.ai *.googletagmanager.com *.doubleclick.net *.panhomestores.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.visa.com magefan.com cm.magefan.com https://www.magezon.com www.xtento.com cdn.xtento.com *.facebook.com *.google.co.in *.google.com cdn.tamara.co *.snapchat.com *.googleadservices.com *.doubleclick.net *.google-analytics.com https://sbstatic.payfort.com https://static.payfort.com metrics.panhomestores.com https://secure.adnxs.com *.tamara.co *.disqus.com https://firebasestorage.googleapis.com checkout.tabby.ai widgets.tabby.ai cdn.tabby.ai fonts.googleapis.com storage.googleapis.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.googletagmanager.com *.panhomestores.com *.ctnsnet.com *.adnxs.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page https://maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.visa.com *.mastercard.com www.google.com www.xtento.com cdn.xtento.com *.googletagmanager.com cdn.stape.io s2s.panhomestores.com cdn.moengage.com *.doubleclick.net *.facebook.net *.snapchat.com unpkg.com sc-static.net checkout.tabby.ai https://m6.inapi.ai https://cdn.jsdelivr.net cdn.lr-in.com https://hm12canvas.hertzen.com *.tamara.co https://consentag.eu *.ctnsnet.com *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com *.avada.io accounts.google.com https://m6.purplecloud.ai widgets.tabby.ai cdn.segment.com connect.facebook.net cdn.sift.com score.jcsc.online seondf.com deviceinf.com getdeviceinf.com *.googleadservices.com *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com *.panhomestores.com *.inaipi.ai 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com assets.braintreegateway.com *.fontawesome.com *.googleapis.com *.addtoany.com *.tamara.co https://cdn.jsdelivr.net https://fonts.bunny.net accounts.google.com *.tagmanager.google.com *.googletagmanager.com *.panhomestores.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.tamara.co 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com checkout.tabby.ai *.google-analytics.com http://dpm.demdex.net sdk-02.moengage.com *.snapchat.com *.facebook.com https://analytics-ipv6.tiktokw.us s2s.panhomestores.com metrics.panhomestores.com cdn.stape.io *.demdex.net unpkg.com *.tamara.co https://get.geojs.io *.avada.io accounts.google.com widgets.tabby.ai cdn.segment.com api.segment.com api.segment.io api.amplitude.com *.seondfresolver.com *.deviceinfresolver.com *.getdeviceinfresolver.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app *.panhomestores.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com tr.snapchat.com tr6.snapchat.com *.seondnsresolve.com *.panhomestores.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://challenges.cloudflare.com https://static.cloudflareinsights.com https://js.stripe.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://cdn.sanity.io data: https:; font-src 'self' https://fonts.gstatic.com https://watermeloncdn.win data:; connect-src 'self' https://cdn.sanity.io https://challenges.cloudflare.com https://86svaih1.apicdn.sanity.io https://region1.analytics.google.com https://stats.g.doubleclick.net https://api.stripe.com https://merchant-ui-api.stripe.com; frame-src 'self' https://www.youtube.com https://challenges.cloudflare.com https://cutt.ly https://js.stripe.com; media-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'none'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://*.cloudflare.com https://*.google-analytics.com https://*.googletagmanager.com https://*.calendly.com https://*.bugsnag.com tag.clearbitscripts.com connect.facebook.net s3-us-west-2.amazonaws.com *.hs-scripts.com app.linkscout.com *.hsadspixel.net *.hs-banner.com *.hscollectedforms.net *.hs-analytics.net snap.licdn.com www.redditstatic.com www.clickcease.com *.clarity.ms scripts.clarity.ms scout-cdn.salesloft.com static.ads-twitter.com tracking-api.g2.com *.posthog.com svc.apideck.com vercel.live *.intercom.io *.intercomcdn.com *.doubleclick.net *.iubenda.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://*.cloudflare.com https://*.google-analytics.com https://*.googletagmanager.com https://*.calendly.com https://*.bugsnag.com tag.clearbitscripts.com connect.facebook.net s3-us-west-2.amazonaws.com *.hs-scripts.com app.linkscout.com *.hsadspixel.net *.hs-banner.com *.hscollectedforms.net *.hs-analytics.net snap.licdn.com www.redditstatic.com www.clickcease.com *.clarity.ms scripts.clarity.ms scout-cdn.salesloft.com static.ads-twitter.com tracking-api.g2.com *.posthog.com svc.apideck.com vercel.live *.intercom.io *.intercomcdn.com *.doubleclick.net *.iubenda.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.calendly.com https://cdn.iubenda.com; font-src 'self' https://fonts.gstatic.com *.intercomcdn.com; img-src 'self' data: https:; connect-src 'self' svc.apideck.com cdn.contentful.com https://*.google-analytics.com https://*.doubleclick.net pagead2.googlesyndication.com https://*.bugsnag.com https://sessions.bugsnag.com app.linkscout.com www.google.com *.hscollectedforms.net *.hs-forms.com px.ads.linkedin.com pixel-config.reddit.com www.redditstatic.com *.posthog.com tracking-api.g2.com k.clarity.ms *.intercom.io wss://*.intercom.io *.hubapi.com raw.githubusercontent.com pro.ip-api.com *.facebook.com *.clarity.ms *.iubenda.com; frame-src 'self' www.googletagmanager.com vercel.live *.intercom.io *.hs-forms.com *.apideck.com *.doubleclick.net *.iubenda.com; frame-ancestors 'none'; report-uri /api/csp-report; report-to csp-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-LBzL9BnfNtCfRETl5bSgFg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.yandex.ru *.bigland.ru *.marquiz.ru *.video.cloud.yandex.net *.google.com *.gstatic.com vk.com top-fwz1.mail.ru *.roistat.com; connect-src 'self' wss://moigektar.ru *.google.com wss://mc.yandex.ru mc.yandex.ru privacy-cs.mail.ru *.roistat.com *.bigland.ru *.bug.land *.moigektar.ru; script-src-elem 'self' 'unsafe-inline' core-renderer-tiles.maps.yandex.net script.marquiz.ru google.com www.google.com gstatic.com www.gstatic.com api-maps.yandex.ru yastatic.net; img-src 'self' data: blob: *.yandex.ru *.bigland.ru vk.com top-fwz1.mail.ru *.roistat.com storage.yandexcloud.net *.google.com yandex.ru *.maps.yandex.net qgis.bug.land yastatic.net; frame-src 'self' *.google.com *.marquiz.ru runtime.video.cloud.yandex.net *.yandex.ru *.roistat.com stonks.moigektar.ru; font-src 'self'; media-src 'self' storage.yandexcloud.net; style-src 'self' 'unsafe-inline'; report-uri /api/security/log-csp-violation; report-to csp-endpoint 1
base-uri 'self'; frame-ancestors 'self'; object-src 'none'; default-src 'self' https: data: blob:; img-src 'self' https: data: blob:; font-src 'self' https: data:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https:; frame-src https:; upgrade-insecure-requests; require-trusted-types-for 'script' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.livremoi.ma *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.epagine.fr *.cmi.co.ma www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.cloudflare.com *.twitter.com *.twimg.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; media-src 'self' blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; report-uri /csp-report 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com *.fontawesome.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.stripe.com www.googletagmanager.com td.doubleclick.net *.trbo.com app.usercentrics.eu *.cloudflarestream.com js.mollie.com accounts.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.tiktok.com cdn.newsha.com productimages.newsha.com productimages.newsha.de www.google.de perf-eu1.hsforms.com app.usercentrics.eu uct.service.usercentrics.eu track-eu1.hubspot.com widgets.trustedshops.com maps.gstatic.com collect.trbo.com maps.google.com maps.googleapis.com https://www.mollie.com https://meetanshi.com/media/logo.png https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.facebook.com https://www.magezon.com flagpedia.net https://prf.hn https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com https://maps.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.tiktok.com js.stripe.com app.usercentrics.eu pzapi-nb.com widgets.trustedshops.com js-eu1.hs-scripts.com analytics.tiktok.com js-eu1.hs-analytics.net js-eu1.hubspot.com js-eu1.hsadspixel.net js-eu1.hs-banner.com maps.google.com api-v4.trbo.com www.clarity.ms t.clarity.ms static.trbo.com js.mollie.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.googletagmanager.com *.facebook.net www.termsfeed.com accounts.google.com *.gstatic.com maps.googleapis.com https://prf.hn https://pzapi-nb.com https://pzapi-kg.com https://pzapi-ij.com/ https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com https://static.klaviyo.com *.fontawesome.com accounts.google.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://maps.googleapis.com https://player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.tiktok.com region1.google-analytics.com region1.analytics.google.com api.usercentrics.eu cta-eu1.hubspot.com api-eu1.hubapi.com maps.googleapis.com www.clarity.ms t.clarity.ms analytics.tiktok.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google-analytics.com accounts.google.com www.gstatic.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src www.google.com analytics.tiktok.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; font-src 'self' https://fonts.gstatic.com; img-src 'self' https://*.googleapis.com https://*.gstatic.com *.google.com  *.googleusercontent.com data: https://www.gravatar.com/avatar/ https://*.google-analytics.com https://*.googletagmanager.com blob:; script-src 'self' https://*.googletagmanager.com 'nonce-d9668af0aa7b43a10aa8489745049a08' https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com blob:; style-src 'self' 'nonce-d9668af0aa7b43a10aa8489745049a08' https://fonts.googleapis.com; worker-src 'self' blob:; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googleapis.com *.google.com https://*.gstatic.com  data: blob:; frame-ancestors 'self'; 1
object-src 'none';base-uri 'self';script-src 'nonce-b8KwgvQuS2Lc4EQlkHWHBA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; connect-src 'self' *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.googleapis.com bam.nr-data.net; font-src 'self' fonts.gstatic.com; frame-src 'self' https://www.google.com/recaptcha/ *.ak.facebook.com www.facebook.com https://web.facebook.com staticxx.facebook.com https://*.twitter.com https://googleads.g.doubleclick.net/ disqus.com https://sportdeutschland.tv/ https://player.sportdeutschland.tv/ https://www.youtube-nocookie.com/; img-src 'self' data: https://ssl.gstatic.com csi.gstatic.com maps.gstatic.com maps.googleapis.com googleapis.com *.google-analytics.com *.googletagmanager.com *.googlesyndication.com https://syndication.twitter.com https://*.twimg.com platform.twitter.com https://www.facebook.com https://web.facebook.com referrer.disqus.com *.disquscdn.com; object-src 'self' *.googlesyndication.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com *.googletagmanager.com connect.facebook.net platform.twitter.com https://syndication.twitter.com https://cdn.syndication.twimg.com https://apis.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ js-agent.newrelic.com *.nr-data.net *.googlesyndication.com maps.googleapis.com googleapis.com ish-deutschland-dev.disqus.com ish-deutschland.disqus.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com platform.twitter.com https://*.twimg.com fonts.googleapis.com *.disquscdn.com; report-uri /csp/report 1
object-src  'none'; connect-src 'self' *.agentredgirl.com *.adulttime.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.agentredgirl.com *.adulttime.com join.gammasecure.com; script-src 'self' *.agentredgirl.com *.adulttime.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.agentredgirl.com *.adulttime.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
report-to csp-endpoint; report-uri https://www.motoreasy.com/security/csp-violation-report; script-src * 'unsafe-inline' 'wasm-unsafe-eval' 1
base-uri 'self'; block-all-mixed-content; default-src 'self'; form-action 'self'; frame-ancestors 'self'; plugin-types 'none'; script-src 'self' 'report-sample'; style-src 'self' 'report-sample'; object-src 'none'; worker-src 'none'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://www.gstatic.com https://analytics.ahrefs.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://fast.wistia.com https://fast.wistia.net https://*.wistia.com https://*.wistia.net https://connect.facebook.net https://tracking.g2crowd.com https://www.g2.com https://tracking-api.g2.com https://tags.clickagy.com https://js.adsrvr.org https://static.hotjar.com https://script.hotjar.com https://*.hotjar.com https://content.hotjar.io https://snap.licdn.com https://px.ads.linkedin.com https://*.customgpt.ai https://cdn.customgpt.ai https://pi.pardot.com https://*.pardot.com https://go.franconnect.com https://campaign.franconnect.com https://www.youtube.com https://s.ytimg.com https://i.ytimg.com https://ws.zoominfo.com https://universal.zoominfo.com https://ws-assets.zoominfo.com https://js.zi-scripts.com https://schedule.zoominfo.com https://tr.capterra.com https://api.hubapi.com https://forms.hscollectedforms.net https://js-na1.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://js.hsadspixel.net https://js.hscollectedforms.net https://track.hubspot.com https://browser.sentry-cdn.com https://bzr.openai.com https://bzrcdn.openai.com; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://www.googletagmanager.com https://www.google.com https://analytics.ahrefs.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://distillery.wistia.com https://*.wistia.com https://*.wistia.net https://www.facebook.com https://connect.facebook.net https://tracking.g2crowd.com https://tracking-api.g2.com https://www.g2.com https://aorta.clickagy.com https://insight.adsrvr.org https://*.hotjar.com https://in.hotjar.com https://content.hotjar.io https://px.ads.linkedin.com https://*.customgpt.ai https://pi.pardot.com https://*.pardot.com https://ws.zoominfo.com https://universal.zoominfo.com https://ws-assets.zoominfo.com https://js.zi-scripts.com https://schedule.zoominfo.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://ad.doubleclick.net https://tr.capterra.com https://api.hubapi.com https://forms.hscollectedforms.net https://js-na1.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://js.hsadspixel.net https://js.hscollectedforms.net https://track.hubspot.com https://browser.sentry-cdn.com https://bzr.openai.com https://bzrcdn.openai.com; frame-src 'self' https://www.youtube.com https://*.wistia.com https://*.wistia.net https://consentcdn.cookiebot.com https://www.google.com https://go.franconnect.com https://insight.adsrvr.org; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; default-src 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.activehosted.com https://*.activecampaign.com https://*.cloudflareinsights.com https://*.cloudflare.com https://*.userway.org https://*.youtube.com https://*.ytimg.com https://*.samcart.com https://*.bing.com https://*.semrush.com https://*.doubleclick.net https://*.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.googleapis.com https://*.activehosted.com https://*.userway.org; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://*.gstatic.com https://*.userway.org https://*.activehosted.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.google.com https://*.activehosted.com https://*.activecampaign.com https://*.cloudflareinsights.com https://*.userway.org https://*.doubleclick.net https://*.facebook.com; media-src 'self' https: blob:; frame-src 'self' https://*.youtube.com https://*.youtube-nocookie.com https://*.activehosted.com https://*.samcart.com https://*.googletagmanager.com https://*.google.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://*.activehosted.com https://*.activecampaign.com; upgrade-insecure-requests 1
font-src https://www.googletagmanager.com *.googleapis.com *.gstatic.com *.inpost.pl *.fontawesome.com https://fonts.bunny.net static.payu.com https://geowidget.easypack24.net https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * accounts.google.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.google.com *.inpost.pl landofcoder.com *.google.com/ secure.payu.com merch-prod.snd.payu.com static.payu.com credit-widget-config.payu.com/ https://geowidget-app.inpost.pl/ https://sandbox-easy-geowidget.easypack24.net/ https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com *.googleapis.com *.inpost.pl https://firebasestorage.googleapis.com https://www.magezon.com static.payu.com credit-widget-config.payu.com/ https://geowidget.easypack24.net *.easypack24.net *.openstreetmap.org https://trustmate.io https://www.clarity.ms *.clarity.ms https://googletagmanager.com https://www.pagead.com *.3mk.pl https://www.facebook.com https://connect.facebook.net https://www.facebook.com/tr/ https://sherlock.ecdp.cloud https://imgsct.cookiebot.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com tagmanager.google.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.vimeo.com *.inpost.pl landofcoder.com *.avada.io *.shopify.com *.google.com/ secure.payu.com secure.snd.payu.com static.payu.com credit-widget-config.payu.com/ *.google.com *.googletagmanager.com *.snrcdn.net *.snrbox.com *.ekomiapps.de https://geowidget.easypack24.net *.easypack24.net *.openstreetmap.org https://trustmate.io https://www.clarity.ms *.clarity.ms https://googletagmanager.com https://www.pagead.com https://www.googleadservices.com/ *.3mk.pl https://connect.facebook.net https://sherlock.ecdp.cloud https://consent.cookiebot.com https://consentcdn.cookiebot.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com https://browser.sentry-cdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com fonts.googleapis.com *.inpost.pl *.fontawesome.com https://fonts.bunny.net https://geowidget.easypack24.net https://geowidget.inpost.pl https://trustmate.io https://www.clarity.ms *.clarity.ms *.3mk.pl https://googletagmanager.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com *.inpost.pl https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.facebook.com https://www.facebook.com graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.googleapis.com *.inpost.pl landofcoder.com https://get.geojs.io *.avada.io secure.payu.com merch-prod.snd.payu.com static.payu.com credit-widget-config.payu.com/ pay.google.com https://iai-bridge.paxy.pl *.easypack24.net *.openstreetmap.org https://trustmate.io https://www.clarity.ms *.clarity.ms https://googletagmanager.com https://www.pagead.com https://www.googleadservices.com/ *.3mk.pl https://connect.facebook.net https://sherlock.ecdp.cloud https://consentcdn.cookiebot.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com https://*.ingest.sentry.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors https://*.etracker.de https://*.etracker.com 'self'; frame-src *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ bid.g.doubleclick.net cdn.privacy-mgmt.com consent.bauer-plus.de www.computop-paygate.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com www.bauer-plus.de www.google-analytics.com stats.g.doubleclick.net https://*.etracker.de https://*.google.de *.captcha.eu *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com useruploads.vwo.io chart.googleapis.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com validator.swagger.io analytics.google.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com int.bauer-plus.de *.facebook.com m.media-amazon.com static-eu.payments-amazon.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://www.captcha.eu https://*.etracker.de https://*.etracker.com www.dwin1.com cdn.privacy-mgmt.com consent.bauer-plus.de i.ytimg.com *.gstatic.com/recaptcha *.captcha.eu jquery.sellxed.com *.avada.io static.zdassets.com static.zdassets.com/ekr/snippet.js static.zdassets.com/web_widget/classic/latest/web-widget-main-4a143a0.js static.zdassets.com/web_widget/classic/latest/web-widget-locales/classic/de-de-json-4a143a0.js static.zdassets.com/web_widget/classic/latest/web-widget-chat-sdk-4a143a0.js *.visualwebsiteoptimizer.com app.vwo.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com validator.swagger.io www.google.com bid.g.doubleclick.net cdn.pushcrew.com useruploads.vwo.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com chimpstatic.com *.list-manage.com app.letsconnect.at/embed.js connect.facebook.net static-eu.payments-amazon.com *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src vimeo.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com https://www.captcha.eu https://w19.captcha.at https://at.captcha.at wss://widget-mediator.zopim.com cdn.privacy-mgmt.com stats.g.doubleclick.net *.visualwebsiteoptimizer.com app.vwo.com *.vimeo.com ekr.zdassets.com con-dermedienvertrieb.zendesk.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.google-analytics.com analytics.google.com cdn.pushcrew.com useruploads.vwo.io chart.googleapis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.captcha.eu www.sandbox.paypal.com pilot-payflowlink.paypal.com https://get.geojs.i https://*.etracker.de https://*.etracker.com https://*.google-analytics.com consent.bauer-plus.de europe-west1-pathadvice-app.cloudfunctions.net pagead2.googlesyndication.com *.facebook.com www.computop-paygate.com payments-eu.amazon.com https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.bauer-plus.de/general/csp/; report-to report-endpoint; 1
default-src 'self' https://region1.analytics.google.com https://www.google-analytics.com https://region1.google-analytics.com; frame-src 'self' https://player.vimeo.com/ https://www.youtube.com/ https://ticketco.events https://virtualtourcompany.co.uk https://www.myridinglife.com https://marketplace.umbraco.com/ https://td.doubleclick.net https://www.google.com https://tr.snapchat.com https://app.geckoform.com; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://bat.bing.com https://sc-static.net https://connect.facebook.net https://cdn.akro.io https://static.hotjar.com https://analytics.tiktok.com https://tags.srv.stackadapt.com https://googleads.g.doubleclick.net https://app.geckoform.com https://script.hotjar.com https://tr.snapchat.com https://www.clarity.ms https://discoveruni.gov.uk https://widget.discoveruni.gov.uk https://cc.cdn.civiccomputing.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; connect-src 'self' https://stats.g.doubleclick.net https://region1.analytics.google.com https://sessions.bugsnag.com https://notify.bugsnag.com https://tr.snapchat.com https://analytics.tiktok.com https://e.clarity.ms https://w.clarity.ms https://x.clarity.ms https://discoveruni.gov.uk *.du-widget.com https://tr6.snapchat.com https://analytics.pangle-ads.com https://www.google.com https://content.hotjar.io https://googleads.g.doubleclick.net https://apikeys.civiccomputing.com https://region1.google-analytics.com https://pagead2.googlesyndication.com https://clapi.civiccomputing.com wss://ws.hotjar.com; font-src 'self' fonts.gstatic.com data:; img-src https: data:; media-src https: data:; 1
font-src *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com pay.elavonpaymentgateway.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.consentmanager.net pay.elavonpaymentgateway.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.consentmanager.net pay.elavonpaymentgateway.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.consentmanager.net pay.elavonpaymentgateway.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.consentmanager.net pay.elavonpaymentgateway.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com cdn.icomoon.io *.cdn-apple.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.klarnacdn.net 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.trustpilot.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ services.postcodeanywhere.co.uk media.directwatertanks.co.uk img.localhost img.kingfisherdirect.co.uk img.directwatertanks.co.uk img.gritbins.net img.bin-shop.co.uk *.google.co.uk c.bing.com bat.bing.com c.clarity.ms *.hubspot.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.posthog.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.addressy.com cdn.mouseflow.com cdn.salesfire.co.uk www.google.co.uk bat.bing.com www.clarity.ms *.hs-scripts.com *.hs-analytics.net *.usemessages.com *.hsleadflows.net *.hscollectedforms.net *.hs-banner.com *.hsadspixel.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.cardinaltrusted.com *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.hsforms.net *.hsforms.com *.gstatic.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com https://static.klaviyo.com api.addressy.com assets.braintreegateway.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.typekit.net *.googleapis.com *.gstatic.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.posthog.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.addressy.com live.smartmetrics.co.uk hit.salesfire.co.uk region1.analytics.google.com *.doubleclick.net *.hubspot.com *.hubapi.com *.hscollectedforms.net p.clarity.ms bat.bing.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.salesfire.co.uk *.smartmetrics.co.uk t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://fonts.gstatic.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://app.getcharla.com https://app.charla.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.trustpilot.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io blueskytechmage.com mageblueskytech.com placehold.jp https://app.getcharla.com https://app.charla.com https://assets.charla.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.google.com https://www.google.co.uz https://bat.bing.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://app.getcharla.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ s7.addthis.com https://player.vimeo.com https://www.youtube.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.trustpilot.com https://loopanalytics.com https://cdn.loopanalytics.com https://www.loopanalytics.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://*.googletagmanager.com https://tagmanager.google.com https://bat.bing.com 'sha256-5Y4Fw7FnmoTxs7kssePD3hmSWT1cakS9MU65gFit2tk=' 'unsafe-inline' 'sha256-n6eck1L/nuf36xN8HRWVYx8KK8Xb0swcLgfQgvchKb8=' 'sha256-GWahIXRUeRsGBCKiyBtGJKYWjXGfl/47XWdxK6AaZsY=' 'sha256-mq2gsZizflICHpKQ6s8CcunInM1pImfWY3eveTkSxcw=' 'sha256-s3i+iplrVYzF6tsDyWcpsyb6JWHZ1Zxko9BY8biushY=' 'sha256-IXhNRiJVgSZEPXV1CPcPbZyTC9znU6y3BCI+K0R2U1k=' 'sha256-eRdMoSs/Z3szg0kcWJAkq0gdYrT5lhdOBt2IajnQuig=' 'sha256-mk5ymRE2zg4O49pArbwYALlHzDkxZfg05pKI3m4zdlo=' 'sha256-rIpXjml74ZT0W82zEQCdoQ7K4m38Rx4giRcz8J56DMY=' 'sha256-HncZKh5Z0Ma9TBp4bDqLNono4VGsJbJwawnVC476w/Q=' 'sha256-zmIyK6UiKUcrz5Zxk+Xtv0KGBR10I4YsqIT1uvifUCE=' 'sha256-S9GoB+fRKaDSwkIZ/pUf2ieFnMI19mJLOkVH3J34a+g=' 'sha256-tmdgtMNFIHj8gyQsW68TZ8ECgFb3aQNUdSySaK7VYDQ=' 'sha256-P020rzAy5bhUWGSJDJR9HOkRgNG2OdVFBfdFO+KgUsY=' 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com https://fonts.googleapis.com http://fonts.googleapis.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://app.getcharla.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://app.getcharla.com wss://app.getcharla.com https://ad.doubleclick.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ ekr.zdassets.com/ https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.google.com https://loopanalytics.com https://bat.bing.com https://*.trustpilot.com https://app.charla.com wss://app.charla.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-eAAy6omcM74nLPSYLst3Mg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.gstatic.com *.authorize.net *.cardinalcommerce.com *.adobedtm.com *.yotpo.com 'self' data: *.cloudfront.net *.typekit.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.addthis.com/ *.moatads.com *.addthisedge.com m.addthis.com api-public.addthis.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.addthis.com *.moatads.com *.addthisedge.com m.addthis.com api-public.addthis.com *.google.com *.facebook.com *.facebook.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io blob: *.gstatic.com *.googleapis.com https://meetanshi.com/media/logo.png 'self' data: *.png *.jpg *.jpeg *.cloudfront.net *.yotpo.com *.cdninstagram.com *.facebook.com *.facebook.net *.google.com *.google.lk www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.addthis.com/ *.moatads.com *.addthisedge.com m.addthis.com api-public.addthis.com *.google.com *.gstatic.com *.googleapis.com *.authorize.net *.cardinalcommerce.com *.cloudfront.net *.facebook.net *.newrelic.com *.nr-data.net *.googletagmanager.com *.yotpo.com cdn.rawgit.com *.zdassets.com *.mastercard.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.cloudfront.net *.yotpo.com unsafe-inline assets.braintreegateway.com *.typekit.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.addthis.com/ *.moatads.com *.addthisedge.com m.addthis.com api-public.addthis.com *.googleapis.com *.google-analytics.com *.cardinalcommerce.com *.amazon.com *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazonpay.com *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonservices.com *.amazonservices.co.jp *.amazonservices.jp *.amazonservices.it *.amazonservices.fr *.amazonservices.es *.trackedweb.net *.nr-data.net *.instagram.com *.dotdigital.com *.comapi.com *.paypal.com *.cloudfront.net *.facebook.com *.facebook.net *.doubleclick.net *.zdassets.com *.zendesk.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.google.com google.com ws: 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://www.gstatic.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com https://maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://accounts.google.com https://*.google.com https://*.hotjar.com https://vars.hotjar.com https://www.facebook.com https://*.criteo.com https://gum.criteo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com public.montonio.com https://www.facebook.com https://www.google.com https://www.google.ee https://www.google-analytics.com rx.apotheka.ee data: http: https: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com public.montonio.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net rx.apotheka.ee http: https: 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com maxcdn.bootstrapcdn.com https://maxcdn.bootstrapcdn.com rx.apotheka.ee http: https: 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://www.google-analytics.com https://stats.g.doubleclick.net rx.apotheka.ee http: https: wss: 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com *.kueskipay.com *.fontawesome.com https://fonts.bunny.net *.zakeke.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.kueskipay.com https://plumrocket.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com *.kueskipay.com *.opencontrol.mx *.kaptcha.com *.openpay.pe *.sandbox.paypal.com *.paypalobjects.com https://plumrocket.com https://accounts.google.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.doofinder.com https://files.zakeke.com *.kueskipay.com *.google.com https://firebasestorage.googleapis.com *.sandbox.paypal.com *.paypalobjects.com *.google.com.mx *.amazonaws.com *.imgur.com *.clarity.ms *.googletagmanager.com *.g.doubleclick.net *.facebook.com *.zakeke.com blob: *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.doofinder.com *.kueskipay.com *.googletagmanager.com *.mxpnl.com *.avada.io *.shopify.com *.s3.amazonaws.com *.openpay.co *.openpay.pe *.google-analytics.com *.google.com/recaptcha/ *.gstatic.com/recaptcha/ *.sandbox.paypal.com *.paypalobjects.com https://accounts.google.com https://www.gstatic.com *.pinimg.com *.opmnstr.com *.hotjar.com *.tiktok.com *.clarity.ms *.facebook.net *.zakeke.com *.googleadservices.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.doofinder.com *.kueskipay.com *.googletagmanager.com *.mxpnl.com *.fontawesome.com https://fonts.bunny.net *.paypal.com *.sandbox.paypal.com *.paypalobjects.com https://accounts.google.com https://www.gstatic.com *.googleapis.com *.omappapi.com *.zakeke.com *.tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.doofinder.com wss://*.doofinder.com *.kueskipay.com *.doubleclick.net https://get.geojs.io *.avada.io *.openpay.mx *.openpay.co *.openpay.pe *.sandbox.paypal.com *.paypalobjects.com https://accounts.google.com *.cloudfront.net wss://*.salesmanago.com *.omappapi.com *.pinterest.com *.clarity.ms *.tiktok.com *.googletagmanager.com *.g.doubleclick.net *.facebook.com *.facebook.net *.zakeke.com *.zakeke.workers.dev 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.zakeke.com *.zakeke.workers.dev 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.example.com/; report-to report-endpoint; 1
default-src 'self' https:; base-uri 'self'; font-src 'self' https: data:; img-src 'self' https: data: https://www.googletagmanager.com; object-src 'none'; script-src 'self' https: 'strict-dynamic' 'unsafe-eval' 'nonce-0dvOw82l2HqpFh/XxYBwcg=='; style-src 'self' https: 'unsafe-inline'; worker-src 'self' https: blob:; connect-src 'self' https: wss://*.karte.io; frame-ancestors 'self'; report-uri /csp-violation-report-endpoint 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
img-src 'self' data: https://data.eu.pendo.io; script-src 'self' 'unsafe-eval'; object-src 'none'; style-src-elem 'self' 'unsafe-inline'; font-src 'self' https:; script-src-elem 'self' 'unsafe-inline' https:; manifest-src 'self' https:; connect-src 'self' https: https://ekr.zdassets.com https://*.zendesk.com wss:; frame-src http:; report-uri https://csp-report-endpoint.bms-les0501-lease-a-bike-dev.workers.dev/report; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com maxcdn.bootstrapcdn.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.flashyapp.com api.flashy.app *.flashy.dev *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.flashyapp.com api.flashy.app *.flashy.dev *.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * gateway21.pelecard.biz 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com magefan.com cm.magefan.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cloudfront.net *.disqus.com flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com gateway21.pelecard.biz data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.flashyapp.com api.flashy.app *.flashy.dev cdn.jsdelivr.net *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.googleapis.com *.disqus.com maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.clarity.ms gateway21.pelecard.biz 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com cdn.jsdelivr.net *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com *.flashyapp.com api.flashy.app *.flashy.dev *.cloudflare.com *.twitter.com *.twimg.com www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.clarity.ms 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self' https://fabric-tokyo.com https://*.fabric-tokyo.com; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://www.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https: 1
default-src 'self'; script-src 'self' 'nonce-naDsxBMKFNZtRIOGvxsKW2vgy6SPrG2oVMa8JfklT3zGs36DiaN3mg' 'strict-dynamic' blob: 'report-sample'; style-src-attr 'unsafe-inline' 'self' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com *.google.com google.com *.googleapis.com *.gstatic.com *.hofmann.info *.googlesyndication.com *.matomo.cloud https://www.metropolregionnuernberg.de *.facebook.com *.facebook.net *.appcast.io *.bing.net *.clarity.ms *.bing.com *.creditreform.at *.indeed.com *.linkedin.com *.ads.linkedin.com *.googletagmanager.com; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com *.cookiebot.com *.facebook.com *.office.com  	*.cloud.microsoft *.matomo.cloud *.sensehq.com *.sensehqchat.com; style-src-elem 'unsafe-inline' 'self' *.googleapis.com *.gstatic.com www.gstatic.com 'report-sample'; style-src 'self' 'unsafe-inline' *.googleapis.com 'report-sample'; font-src 'self' data: *.gstatic.com; connect-src 'self' *.google.com gadstat.com *.facebook.com *.facebook.net *.bing.net *.googleapis.com noembed.com *.noembed.com *.matomo.cloud *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.sensehq.com *.bing.com *.google-analytics.com *.clarity.ms *.linkedin.com *.hofmann.info; frame-ancestors *; report-uri https://www.hofmann.info/@http-reporting?csp=report&requestTime=1789276881325793&requestHash=2c0359f0f81bd08d46f9b61580c6eecca72dfda6 1
font-src fonts.gstatic.com use.typekit.net *.googleapis.com *.gstatic.com data: *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net *.gstatic.com *.googleapis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://ecomm.sella.it/ https://sandbox.gestpay.net/ chimpstatic.com downloads.mailchimp.com *.list-manage.com maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com downloads.mailchimp.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io *.googleapis.com *.google-analytics.com www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://wp.connexuscu.org https://*.connexuscu.org https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://*.qualtrics.com https://*.siteintercept.qualtrics.com https://www.clarity.ms https://*.clarity.ms https://*.siteimproveanalytics.com https://*.siteimproveanalytics.io https://tag.brandcdn.com https://*.brandcdn.com https://tag.simpli.fi https://*.simpli.fi https://js.adsrvr.org https://cdn.personyze.com https://counter.personyze.com https://*.personyze.com https://maps.googleapis.com https://maps.gstatic.com https://*.niceincontact.com https://*.my.site.com https://*.lightning.force.com https://*.force.com https://*.salesforce.com; connect-src 'self' https://wp.connexuscu.org https://*.connexuscu.org https://www.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://*.qualtrics.com https://*.clarity.ms https://c.bing.com https://*.siteimproveanalytics.com https://*.siteimproveanalytics.io https://*.brandcdn.com https://*.simpli.fi https://insight.adsrvr.org https://js.adsrvr.org https://vimeo.com https://counter.personyze.com https://*.personyze.com https://maps.googleapis.com https://*.niceincontact.com wss://*.niceincontact.com https://*.my.site.com https://*.lightning.force.com https://*.salesforce.com; media-src 'self' https://wp.connexuscu.org https://*.connexuscu.org https://*.vimeo.com https://*.vimeocdn.com https://*.niceincontact.com; img-src 'self' data: blob: https: https://wp.connexuscu.org https://*.connexuscu.org https://www.googletagmanager.com https://www.google-analytics.com https://stats.g.doubleclick.net https://*.qualtrics.com https://*.clarity.ms https://c.bing.com https://*.siteimproveanalytics.com https://*.siteimproveanalytics.io https://*.brandcdn.com https://*.simpli.fi https://insight.adsrvr.org https://*.adsrvr.org https://*.pro-market.net https://i.vimeocdn.com https://i.ytimg.com https://*.personyze.com https://maps.googleapis.com https://maps.gstatic.com https://*.googleapis.com https://*.gstatic.com https://*.ggpht.com https://*.google.com https://*.niceincontact.com https://*.salesforce.com https://*.force.com; style-src 'self' 'unsafe-inline' https://wp.connexuscu.org https://*.connexuscu.org https://fonts.googleapis.com https://*.niceincontact.com https://*.my.site.com https://*.lightning.force.com; font-src 'self' data: https://wp.connexuscu.org https://*.connexuscu.org https://fonts.gstatic.com https://*.my.site.com https://*.lightning.force.com; frame-src 'self' https://td.doubleclick.net https://insight.adsrvr.org https://*.adsrvr.org https://player.vimeo.com https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://*.niceincontact.com https://*.my.site.com https://*.lightning.force.com; frame-ancestors 'none' 1
object-src 'none';base-uri 'self';script-src 'nonce-eWr4xsMXu1kvBrd2R58woA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
img-src 'self' staccwexerius.blob.core.windows.net cdn.xerius.be consentcdn.cookiebot.com *.cookiebot.com data: *.google-analytics.com www.googletagmanager.com xerius-prd-911.azureedge.net media.xerius.be media.accdesk.be media.myfamily.be media.xerius-lei.eu *.google.* *.ads.linkedin.com *.linkedin.com connect.facebook.net www.facebook.com *.doubleclick.net *.tiktok.com dev.visualwebsiteoptimizer.com *.clarity.ms *.bing.com https://www.google-analytics.com https://www.googletagmanager.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' app.varify.io media.xerius.be media.accdesk.be media.myfamily.be media.xerius-lei.eu cxppusa1formui01cdnsa01-endpoint.azureedge.net *.google.* *.googleadservices.com googleads.g.doubleclick.net pagead2.googlesyndication.com *.google-analytics.com *.doubleclick.net fonts.gstatic.com www.googleoptimize.com www.googletagmanager.com *.cookiebot.com consentcdn.cookiebot.com connect.facebook.net www.facebook.com *.ads.linkedin.com *.linkedin.com cdn.xerius.be staccwexerius.blob.core.windows.net xerius-prd-911.azureedge.net www.youtube.com data: xerius.piwik.pro www.gstatic.com script.hotjar.com static.hotjar.com js.monitor.azure.com js.cdn.applicationinsights.io js.cdn.monitor.azure.com *.tiktok.com amazon-adsystem.com *.amazon-adsystem.com paa-reporting-advertising.amazon *.paa-reporting-advertising.amazon trk.adbutter.net *.adnxs.com *.clarity.ms *.bing.com snap.licdn.com *.bannernow.com https://cdnjs.cloudflare.com; worker-src 'none'; frame-ancestors 'self' auth.xerius.be 1
worker-src blob:; font-src fonts.gstatic.com *.kxcdn.com *.klarnacdn.net *.fontawesome.com maxcdn.bootstrapcdn.com *.stripe.com klarna.com *.klarna.com *.klarnaevt.com *.link.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.clearpay.co.uk facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com google.com *.klarna.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.afterpay.com *.clearpay.co.uk scontent.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com google.com *.gstatic.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.klarna.com *.klarnaevt.com *.klarnacdn.net magefan.com cm.magefan.com *.disqus.com https://www.magezon.com https://meetanshi.com/media/logo.png www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.afterpay.com *.clearpay.co.uk *.squarecdn.com https://hbiq.net *.googleapis.com google.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.disqus.com *.avada.io player.vimeo.com twitter.com static.addtoany.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com klarna.com *.klarnaevt.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.afterpay.com/ *.squarecdn.com *.googleapis.com google.com *.kxcdn.com *.gstatic.com downloads.mailchimp.com *.klarnacdn.net *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.clearpay.co.uk *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://get.geojs.io *.avada.io stats.addtoany.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.stripe.com klarna.com *.link.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com https://fonts.bunny.net *.gstatic.com 'self' data: *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ connect.facebook.net *.facebook.com *.disqus.com disqus.com *.twitter.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io connect.facebook.net *.facebook.com *.fbcdn.net *.disqus.com *.disquscdn.com https://firebasestorage.googleapis.com *.hsforms.net *.hsforms.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ connect.facebook.net *.disqus.com *.disquscdn.com *.avada.io *.shopify.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com *.disquscdn.com https://fonts.bunny.net *.googleapis.com *.gstatic.com *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com connect.facebook.net *.facebook.com *.disqus.com disqus.com *.disquscdn.com https://get.geojs.io *.avada.io t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
font-src fonts.googleapis.com fonts.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com *.fonts.googleapis.com *.gstatic.com 'unsafe-inline' data: *.cloudflare.com *.googleapis.com *.klevu.com *.zopim.com https://www.gstatic.com *.tawk.to *.jsdelivr.net media.flixfacts.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com *.hana.ondemand.com 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://www.google.com *.meetanshi.com *.addthis.com *.pinterest.com *.nosto.com *.issuu.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.criteo.net *.criteo.com *.facebook.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'unsafe-inline' data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com maps.googleapis.com maps.gstatic.com https://www.magezon.com *.meetanshi.com https://meetanshi.com/media/logo.png *.cloudflare.com https://cdn.klarna.com *.youtube.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com *.cdninstagram.com *.google.com *.google.lv *.google.co.za *.google.com.na *.google.na *.klevu.com *.zopim.com *.nosto.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.zopim.io *.sfdr.co sfdr.co *.tawk.to tawk.link *.tawk.link *.jsdelivr.net *.facebook.com *.azurewebsites.net app.mobicredwidget.co.za media.flixcar.com rt.flix360.com assets.secure.checkout.visa.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https://browser.sentry-cdn.com s7.addthis.com https://www.google.com *.meetanshi.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.zopim.com *.videoly.co sfdr.co *.cnetcontent.com *.cloudfront.net *.newrelic.com *.klevu.com *.google.lv *.google.co.za *.google.com.na *.google.na *.cloudflare.com *.cloudflareinsights.com *.nosto.com *.hotjar.com *.googletagmanager.com *.criteo.net *.criteo.com *.sfdr.co *.tawk.to *.tawk.link *.jsdelivr.net *.mouseflow.com *.nr-data.net www.googletagmanager.com commerce.adobedtm.com magento-recs-sdk.adobe.net static.zdassets.com app.mobicredwidget.co.za www.gstatic.com connect.facebook.net bam.nr-data.net googleads.g.doubleclick.net js.testfreaks.com media.flixfacts.com media.flixcar.com security-hub.vaimo.network https://www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com *.googleapis.com *.cloudflare.com *.klevu.com *.jsdelivr.net www.gstatic.com media.flixcar.com 'unsafe-inline' data: 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://*.ingest.sentry.io ekr.zdassets.com/ *.meetanshi.com *.cloudflare.com *.googleapis.com *.addthis.com https://graph.instagram.com *.testfreaks.com *.ksearchnet.com *.klevu.com *.nosto.com *.hotjar.io *.hotjar.com *.doubleclick.net *.zendesk.com *.tawk.to wss://*.tawk.to *.tawk.link *.addthisedge.com *.nr-data.net vsb111.tawk.to ekr.zdassets.com api.magento.com commerce.adobedc.net app.mobicredwidget.co.za wss://widget-mediator.zopim.com bam.nr-data.net *.googletagmanager.com security-hub.vaimo.network 'unsafe-eval' data: 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://use.fontawesome.com https://ka-f.fontawesome.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://use.fontawesome.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://connect.facebook.net https://pagead2.googlesyndication.com https://www.googletagmanager.com https://cdn.fundraiseup.com https://static.zdassets.com https://www.google.com https://www.gstatic.com https://ajax.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://a.omappapi.com https://app.monstercampaigns.com https://3hointernational.kit.com; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' data: blob: https:; worker-src 'self' blob:; manifest-src 'self'; form-action 'self' https://www.paypal.com https://www.sandbox.paypal.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' yastatic.net *.yandex.ru yandex.ru yandex.com verify.yandex.ru *.adfox.ru; style-src 'self' 'unsafe-inline' yastatic.net *.adfox.ru; img-src 'self' https://811417.selcdn.ru https://*.selstorage.ru https://goodsurfing.org https://ratanews.ru data: blob: *.yandex.net *.yandex.ru yandex.ru yandex.com *.adfox.ru; font-src 'self' data: yastatic.net; connect-src 'self' https: blob:; frame-src 'self' yandexadexchange.net *.yandexadexchange.net yastatic.net *.yandex.ru *.adfox.ru; media-src 'self' yastatic.net *.yandex.net *.yandex.ru yandex.ru yandex.com *.adfox.ru blob: data:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none' 1
default-src 'self' blob: https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.sjk2oahoo1.com https://*.bitget.careers ; frame-src 'self' https://*.noxiaohao.com https://telegram.org https://*.sjk2oahoo1.com https://accounts.google.com https://oauth.telegram.org https://sgtm.btsgtm.com https://*.bitget.careers ; script-src 'self' 'nonce-AdjySGpccF0BDhrr8y3DlA==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh/v3RIRuG3kMikr5iha+7P/0TN/GNA=' https://*.noxiaohao.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.sjk2oahoo1.com https://accounts.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://play.google.com https://analytics.google.com https://fonts.gstatic.com https://telegram.org https://oauth.telegram.org https://*.geetest.com https://*.geevisit.com https://*.bitget.careers https://sgtm.btsgtm.com; connect-src 'self' https://stats.g.doubleclick.net https://analytics.google.com wss://stream.bitget.cloud https://*.noxiaohao.com wss://*.noxiaohao.com wss://*.sjk2oahoo1.com https://www.turingfraud.net https://play.google.com https://accounts.google.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.sjk2oahoo1.com https://telegram.org https://oauth.telegram.org https://static.geetest.com https://static.geevisit.com https://www.google.com https://sgtm.btsgtm.com wss://*.bitget.careers wss: https://*.bitget.careers ; worker-src 'self' blob:; img-src 'self' data: blob: https://img.bgbstatic.com https://*.bgstatic.com https://img.bitgetimg.com https://img.gurenla.com https://*.bgbstatic.com https://lh3.googleusercontent.com https://static.geetest.com https://static.geevisit.com https://static-web.jjdsn.vip https://cdn.bitkeep.vip https://www.google.co.jp https://bin.wangsustatic.com https://sgtm.btsgtm.com https://*.bitget.careers https://analytics.google.com https://stats.g.doubleclick.net ; style-src 'self' 'unsafe-inline' https://static.geetest.com https://static.geevisit.com https://accounts.google.com https://fonts.googleapis.com https://static.bgbstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.sjk2oahoo1.com https://*.bitget.careers ; font-src 'self' data: https://static.geetest.com https://static.geevisit.com https://fonts.gstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://*.gurenla.com https://*.sjk2oahoo1.com https://*.bitget.careers ; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri /v1/buried/log/cspSecurity /v1/monitor/csp?appId=d4b6df7d ; 1
default-src 'self'; script-src 'self' https://songbirdstag.cardinalcommerce.com; connect-src 'self' https://writer.cardinalcommerce.com https://centinelapistag.cardinalcommerce.com; frame-src 'self' https://*.cardinalcommerce.com https://*.cardinaltrusted.com https://www.facebook.com https://*.turbogames.io; 1
object-src 'none';base-uri 'self';script-src 'nonce-lMMaKQQ_alZLKV_RlgotWQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com *.bootstrapcdn.com acsbapp.com *.klaviyo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.affirm.com *.affirm.ca *.stripe.com acsbapp.com *.accessibe.com *.cdn-btsg.com checkout.iglobalstores.com td.doubleclick.net *.googletagmanager.com *.clover.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.affirm.com *.affirm.ca checkout.sandbox.dev.clover.com checkout.clover.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.godaddy.com *.authorize.net *.magentocommerce.com *.google.com *.google.ru *.google.nl *.google.be *.google.kg *.google.de *.google.co.th *.bing.com *.acsbapp.com *.clarity.ms *.cdn-btsg.com *.google.com.eg *.zonos.com *.clover.com bat.bing.net *.google.com.mx *.google.ca *.google.com.pr *.google.hn https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.affirm.com *.affirm.ca checkout.sandbox.dev.clover.com checkout.clover.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.gstatic.com *.googletagmanager.com *.authorize.net *.godaddy.com *.melenlab.com *.stripe.com *.bing.com acsbapp.com *.signifyd.com:* *.cardinalcommerce.com *.googleadservices.com *.google-analytics.com *.paypal.com *.ytimg.com js.braintreegateway.com *.klaviyo.com *.clarity.ms *.cloudflareinsights.com *.smartsites.com *.cdn-btsg.com *.zonos.com *.online-metrix.net analytics.ahrefs.com *.clover.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net https://hello.zonos.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com cdn.jsdelivr.net *.googleapis.com *.bootstrapcdn.com *.klaviyo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com data: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.affirm.com *.affirm.ca https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.cardinalcommerce.com *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.melenlab.com *.google.ru *.google.com.eg *.google.nl *.google.be *.google.kg *.google.co.th *.klaviyo.com *.acsbapp.com *.signifyd.com:* *.signifyd.com *.clarity.ms *.smartsites.com *.cdn-btsg.com *.zonos.com analytics.ahrefs.com acsbapp.com *.bing.com bat.bing.net *.google.com.mx *.google.com.au https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri /shop/csp-report; report-to report-endpoint; 1
default-src 'self' https://protestkit.eu https://www.protestkit.eu https://protestkit.de https://protestkit.pl https://protestkit.es https://protestkit.fr https://protestkit.it https://protestkit.us https://protestkits.nl https://ua.protestkit.eu; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' blob: data: https://cdn.apple-cloudkit.com https://accounts.google.com https://apis.google.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://challenges.cloudflare.com https://www.gstatic.com https://*.klarnacdn.net https://map.alsendo.com https://form.sibsgateway.com https://api.sibsgateway.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.klarnacdn.net https://map.alsendo.com; img-src 'self' data: blob: https://*.basemaps.cartocdn.com https://*.tile.openstreetmap.org https://tile.openstreetmap.org https://www.google-analytics.com https://www.googletagmanager.com https://*.klarnacdn.net https://map.alsendo.com https://secure.dpay.pl https://www.google.com https://www.google.pl https://protestkit.eu https://www.protestkit.eu https://protestkit.de https://protestkit.pl https://protestkit.es https://protestkit.fr https://protestkit.it https://protestkit.us https://protestkits.nl https://ua.protestkit.eu; font-src 'self' data: https://fonts.gstatic.com https://*.klarnacdn.net https://protestkit.eu https://www.protestkit.eu https://protestkit.de https://protestkit.pl https://protestkit.es https://protestkit.fr https://protestkit.it https://protestkit.us https://protestkits.nl https://ua.protestkit.eu; media-src 'self' blob: https://protestkit.eu https://www.protestkit.eu https://protestkit.de https://protestkit.pl https://protestkit.es https://protestkit.fr https://protestkit.it https://protestkit.us https://protestkits.nl https://ua.protestkit.eu; connect-src 'self' blob: https://www.gstatic.com https://*.basemaps.cartocdn.com https://*.tile.openstreetmap.org https://tile.openstreetmap.org https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://region1.google-analytics.com https://www.googletagmanager.com https://api.apple-cloudkit.com https://cdn.apple-cloudkit.com https://appleid.apple.com https://accounts.google.com https://oauth2.googleapis.com https://www.googleapis.com https://api.dropboxapi.com https://content.dropboxapi.com https://www.dropbox.com https://*.klarna.com https://*.klarnacdn.net https://*.klarnaevt.com https://api.sibsgateway.com https://form.sibsgateway.com https://secure.dpay.pl https://pay.protestkit.eu https://challenges.cloudflare.com https://map.alsendo.com https://protestkit.eu https://www.protestkit.eu https://protestkit.pl https://protestkit.us https://protestkit.de https://protestkit.es https://protestkit.fr https://protestkit.it https://protestkits.nl https://ua.protestkit.eu; frame-src 'self' https://challenges.cloudflare.com https://*.klarna.com https://*.klarnacdn.net https://form.sibsgateway.com https://api.sibsgateway.com https://accounts.google.com https://www.google.com https://appleid.apple.com https://icloud.com https://www.icloud.com https://tripsit.me https://dose.wiki https://www.fda.gov https://open.fda.gov https://sin.org.pl https://psychonautwiki.org https://wikipedia.org https://*.wikipedia.org https://pubchem.ncbi.nlm.nih.gov; form-action 'self' https://*.klarna.com https://form.sibsgateway.com https://api.sibsgateway.com https://secure.dpay.pl https://pay.protestkit.eu https://accounts.google.com https://appleid.apple.com https://icloud.com https://www.dropbox.com; base-uri 'self'; object-src 'none'; frame-ancestors 'self' 1
default-src 'self'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https://www.zabihah.com https://link.zabihah.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://maps.googleapis.com https://maps.gstatic.com https://challenges.cloudflare.com https://*.apple-mapkit.com https://*.paypal.com https://*.sandbox.paypal.com https://*.paypalobjects.com https://js.stripe.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https:; connect-src 'self' https://*.supabase.co https://api.anthropic.com https://maps.googleapis.com https://places.googleapis.com https://api.mux.com https://challenges.cloudflare.com https://*.apple-mapkit.com https://*.paypal.com https://*.sandbox.paypal.com https://api.stripe.com https://www.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://www.google.com https://stats.g.doubleclick.net https://www.facebook.com https://connect.facebook.net; frame-src 'self' https://challenges.cloudflare.com https://www.youtube.com https://*.youtube-nocookie.com https://www.openstreetmap.org https://www.instagram.com https://*.instagram.com https://www.tiktok.com https://*.paypal.com https://*.sandbox.paypal.com https://js.stripe.com https://hooks.stripe.com; media-src 'self' https://stream.mux.com https://image.mux.com; worker-src 'self' blob:; object-src 'none'; upgrade-insecure-requests; report-uri /api/csp-report; report-to csp-endpoint 1
default-src 'self';base-uri 'self';font-src 'self' https://fonts.gstatic.com https://fonts.intercomcdn.com https://cdnjs.cloudflare.com;form-action 'self' https://www.facebook.com;frame-ancestors 'self';img-src 'self' data: https: blob:;object-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://analytics.tiktok.com https://s.pinimg.com https://ct.pinterest.com https://snap.licdn.com https://maps.googleapis.com https://maps.google.com https://js.intercomcdn.com https://widget.intercom.io https://cdn.amplitude.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://rdcdn.com https://www.redditstatic.com https://www.gstatic.com https://maps.gstatic.com https://www.google-analytics.com https://apis.google.com https://surveys-api.anecdoteai.com;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://storage.googleapis.com/minoan-style/ https://cdnjs.cloudflare.com https://www.gstatic.com;style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://storage.googleapis.com/minoan-style/ https://cdnjs.cloudflare.com https://www.gstatic.com;media-src 'self' https://*.ghost.io;connect-src 'self' https://api.minoan.com https://ipapi.co https://api.amplitude.com https://api2.amplitude.com https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://maps.googleapis.com https://mapsresources-pa.googleapis.com https://api-iam.intercom.io wss://nexus-websocket-a.intercom.io https://px.ads.linkedin.com https://googleads.g.doubleclick.net https://rdcdn.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://snap.licdn.com https://www.facebook.com https://connect.facebook.net https://ct.pinterest.com https://www.googleadservices.com https://googleadservices.com https://www.google.com https://google.com https://www.google.ca https://google.ca https://www.google.co.in https://google.co.in https://www.google.co.kr https://google.co.kr https://www.google.co.ke https://google.co.ke https://www.google.co.za https://google.co.za https://www.google.co.uk https://google.co.uk https://www.google.co.jp https://google.co.jp https://www.google.com.ph https://google.com.ph https://www.google.com.bd https://google.com.bd https://www.google.com.pk https://google.com.pk https://www.google.com.pr https://google.com.pr https://www.google.com.co https://google.com.co https://www.google.com.mx https://google.com.mx https://www.google.com.et https://google.com.et https://www.google.com.au https://google.com.au https://www.google.com.br https://google.com.br https://www.google.de https://google.de https://www.google.fr https://google.fr https://www.google.es https://google.es https://www.google.it https://google.it https://www.google.nl https://google.nl https://www.google.pt https://google.pt https://www.google.gr https://google.gr https://www.google.pl https://google.pl https://www.google.se https://google.se https://www.google.ie https://google.ie https://www.google.ch https://google.ch https://www.google.at https://google.at https://www.google.be https://google.be https://apis.google.com https://*.ghost.io https://capig.minoan.com https://alb.reddit.com https://minoan-pdf.s3.amazonaws.com wss://*.intercom-messenger.com https://*.intercom-messenger.com https://ad.doubleclick.net https://*.reddit.com https://analytics.google.com;frame-src 'self' https://www.google.com https://www.youtube.com https://ct.pinterest.com https://www.facebook.com https://toolytics.pa.clients6.google.com https://intercom-reporting.com https://*.intercom-reporting.com;report-uri https://csp-reporter.minoan.com/csp-report 1
default-src 'self';     script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://translate.google.com https://translate.googleapis.com https://unpkg.com;     style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://translate.googleapis.com;     img-src 'self' data: https://www.google-analytics.com https://www.facebook.com https://google.com https://translate.google.com;     connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://connect.facebook.net;     frame-src 'self' https://www.facebook.com https://web.facebook.com https://translate.google.com;     font-src 'self' https://fonts.gstatic.com; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.weltpixel.com www.xtento.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com *.facebook.com *.reddit.com www.xtento.com cdn.xtento.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.disqus.com https://cdn.jsdelivr.net *.googletagmanager.com maps.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net *.redditstatic.com *.reddit.com unpkg.com www.xtento.com cdn.xtento.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.manago.ai 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://cdn.jsdelivr.net maxcdn.bootstrapcdn.com tagmanager.google.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.doubleclick.net *.google-analytics.com maps.googleapis.com *.facebook.net *.redditstatic.com *.reddit.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.manago.ai 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.manago.ai 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googlesyndication.com https://www.googletagmanager.com https://www.google-analytics.com https://*.adtrafficquality.google; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://*.google-analytics.com https://*.googlesyndication.com https://*.adtrafficquality.google https://*.doubleclick.net; frame-src https://*.googlesyndication.com https://*.doubleclick.net https://www.google.com https://*.adtrafficquality.google; object-src 'none'; base-uri 'self' 1
font-src *.bootstrapcdn.com *.gstatic.com rsms.me *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com magefan.com cm.magefan.com *.disqus.com *.usd.de *.gstatic.com *.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.disqus.com *.googleapis.com unpkg.com *.adobedtm.com *.neocomapp.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.bootstrapcdn.com *.googleapis.com rsms.me *.stripe.network *.stripecdn.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.google-analytics.com *.googleapis.com *.neocomapp.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://cdn.onesignal.com https://onesignal.com https://apis.google.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: blob:; font-src 'self' data:; connect-src 'self' https:; frame-src 'self' https://www.jinovel.com https://www.facebook.com; report-uri /api/csp-report 1
object-src 'none';base-uri 'self';script-src 'nonce-XEXCb07Drsr44zNTh6L1Ww' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
report-uri https://fresh-tracks-canada.uriports.com/reports/report; report-to default 1
default-src 'self' ; connect-src 'self' https://eutils.ncbi.nlm.nih.gov https://*.google-analytics.com https://www.google.com https://*.googletagmanager.com https://*.analytics.google.com ; object-src 'none' ; style-src 'self' 'unsafe-inline'  ; img-src 'self' data: https://www.googletagmanager.com ; font-src 'self' data:  ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-4ac2a75c583ff123'  ; base-uri 'self' ; frame-src 'self'  ; report-uri /admin-contentSecurityPolicyReport.api ; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.google-analytics.com https://connect.facebook.net https://st.hbrd.io; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self'; connect-src 'self' https://api.mycarjunction.com https://locations.tractorjunction.com https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.facebook.com https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com; frame-src https://www.googletagmanager.com https://securepubads.g.doubleclick.net https://*.doubleclick.net https://*.googlesyndication.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /api/csp-report 1
font-src fonts.gstatic.com use.typekit.net https://www.googletagmanager.com *.googleapis.com *.gstatic.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com *.mpgs.axisbank.com *.americanexpress.com *-gateway.mastercard.com *.accertify.net *paymentsvcs.com *.amxvpos.com *.accelya.com *.commbank.com.au *.americanexpress.co.in *.areeba.com *.bbvaglobalgateway.com *.arcpay.travel *.merchantlink.com *paymentgateway.nomba.com *.nab.com.au *.unicredit.ro *paymentgateway.epay.halykbank.kz *commerce.nbg.gr *.prahsys.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com *.mpgs.axisbank.com *.americanexpress.com *-gateway.mastercard.com *.accertify.net *paymentsvcs.com *.amxvpos.com *.accelya.com *.commbank.com.au *.americanexpress.co.in *.areeba.com *.bbvaglobalgateway.com *.arcpay.travel *.merchantlink.com *paymentgateway.nomba.com *.nab.com.au *.unicredit.ro *paymentgateway.epay.halykbank.kz *commerce.nbg.gr *.prahsys.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net *.gstatic.com *.trackedlink.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com tagmanager.google.com https://www.googletagmanager.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.kaptcha.com eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com *.gateway.spring.citi.com *.mpgs.axisbank.com *.americanexpress.com *-gateway.mastercard.com *.accertify.net *paymentsvcs.com *.amxvpos.com *.accelya.com *.commbank.com.au *.americanexpress.co.in *.areeba.com *.bbvaglobalgateway.com *.arcpay.travel *.merchantlink.com *paymentgateway.nomba.com *.nab.com.au *.unicredit.ro *paymentgateway.epay.halykbank.kz *commerce.nbg.gr *.prahsys.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.cloudflare.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.magento-datasolutions.com *.magento-ds.com https://www.google-analytics.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.kaptcha.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.gstatic.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=enBji6kwBn6v4IMQ3UFWsLbII3JyerrbUL9pa2ub5wo-1789271156.5980623-1.0.1.1-Y4uGKxGyD6dzqqQSFkgY.tFkEXYNzQLVCxSzYYj_J9431IKAkB617jgDQs2o9YUlfkVIW7YOKadRjhZQvANw3UW6.cK4CV9lQfzQJhh9HwFJMvVMWUojwIJh9qOjK5sInx6f4j9tExHF_vz5DbpOzl.fAa8_CdmHTTDNoYWBdQhv.IasP6tr3Ko04cfGhmBq; report-to cf-csp-endpoint 1
default-src 'none'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://unpkg.com https://ads2.drewno.pl; style-src 'self' 'unsafe-inline' https://unpkg.com; img-src 'self' data: https://img.drewno.pl https://img.youtube.com https://i.ytimg.com https://*.tile.openstreetmap.org https://www.google.com; frame-src https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.tiktok.com; connect-src 'self' https://nominatim.openstreetmap.org; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests 1
font-src *.gstatic.com *.fontawesome.com *.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com fonts.googleapis.com *.cloudflare.com assets.livecall.io *.typekit.net *.bootstrapcdn.com *.trustedshops.com *.easypack24.net data: *.yotpo.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com * *.google.com sandbox.przelewy24.pl secure.przelewy24.pl *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.facebook.net *.google.com *.google.com.ua *.google.co.uk assets.livecall.io *.googletagmanager.com facebook.com facebook.net pay.google.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com *.facebook.com *.facebook.net *.google.com *.google.com.ua *.google.co.uk *.gstatic.com *.doubleclick.net https://www.magezon.com https://meetanshi.com/media/logo.png quickchart.io img.youtube.com *.google.pl assets.livecall.io *.cloudflare.com https://cdn.klarna.com *.magentocommerce.com *.paypal.com *.tpay.com *.payu.com https://s.ytimg.com *.usercentrics.eu translate.googleapis.com facebook.com facebook.net aktywnybaner.rzetelnafirma.pl *.googletagmanager.com www.facebook.com www.google.com pixel.homebook.pl pixel.wp.pl *.googleapis.com static.przelewy24.pl www.gstatic.com gstatic.com https://redchamps.com *.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com *.facebook.com *.facebook.net *.google.com *.google.com.ua *.google.co.uk *.gstatic.com *.googletagmanager.com *.doubleclick.net *.fontawesome.com *.googleapis.com *.cloudflare.com assets.livecall.io *.google-analytics.com translate.googleapis.com *.trustedshops.com *.usercentrics.eu *.tpay.com *.paypal.com *.payu.com *.easypack24.net *.unpkg.com *.jsdelivr.net *.mapbox.com connect.facebook.net bam.eu01.nr-data.net js-agent.newrelic.com *.edrone.me *.callback24.io pixel.homebook.pl pixel.wp.pl sandbox.przelewy24.pl secure.przelewy24.pl pay.google.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.googleapis.com *.googletagmanager.com *.fontawesome.com maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com *.cloudflare.com assets.livecall.io *.typekit.net *.bootstrapcdn.com *.trustedshops.com *.usercentrics.eu *.przelewy24.pl *.easypack24.net translate.googleapis.com fonts.googleapis.com/ secure.przelewy24.pl *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src assets.livecall.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.cloudflare.com assets.livecall.io analytics.google.com *.paypal.com bam.eu01.nr-data.net facebook.com facebook.net stats.g.doubleclick.net consent.cookiefirst.com api.edrone.me *.edrone.me signalling.livecall.io geoip.livecall.io sandbox.przelewy24.pl secure.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src *; object-src 'none'; style-src * 'unsafe-inline'; script-src * 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://app.usercentrics.eu https://googleads.g.doubleclick.net https://as.digitaldrang.de; style-src 'self' 'unsafe-inline' https://p.typekit.net; font-src 'self' https://use.typekit.net; connect-src 'self' https://api.usercentrics.eu https://use.typekit.net https://pagead2.googlesyndication.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://ad.doubleclick.net https://as.digitaldrang.de https://region1.google-analytics.com; img-src 'self' https://app.usercentrics.eu https://www.google-analytics.com https://stats.g.doubleclick.net https://as.digitaldrang.de; frame-src 'self' https://collect.trbo.com; 1
child-src ; connect-src 'self' analytics.google.com analytics.tiktok.com app.gleen.ai *.bellhop.com *.bellhops.dev api.omappapi.com api.segment.io api-js.mixpanel.com api-us-east-1.graphcms.com bat.bing.com bellhop.extole.io *.clarity.ms *.fullstory.com cdn.segment.com ct.pinterest.com *.growthbook.io *.ingest.sentry.io *.intercom.io nexus-websocket-a.intercom.io maps.googleapis.com pnapi.invoca.net *.shop.pe stats.g.doubleclick.net www.google-analytics.com *.taboola.com *.zdassets.com bellhop.zendesk.com; default-src ; font-src 'self' fonts.gstatic.com js.intercomcdn.com; form-action ct.pinterest.com www.facebook.com; frame-src bid.g.doubleclick.net td.doubleclick.net ct.pinterest.com js.stripe.com www.facebook.com; img-src 'self' ag.innovid.com analytics.twitter.com apolloprogram.io b1sync.zemanta.com bat.bing.com c.us1.dyntrk.com cm.adgrx.com cm.eyereturn.com cmi.netseer.com ct.pinterest.com d.adroll.com flask.nextdoor.com googleads.g.doubleclick.net ib.adnxs.com idsync.rlcdn.com js.intercomcdn.com *.loggly.com load.instinctiveads.com media.graphassets.com media.graphcms.com origin.xtlo.net p.truefitcorp.com pippio.com secure.insightexpressai.com segments.company-target.com static.intercomassets.com su.addthis.com sync.smartadserver.com t.co track2.securedvisit.com ups.analytics.yahoo.com us-u.openx.net vop.sundaysky.com wam.solution.weborama.fr www.facebook.com www.google.com www.google-analytics.com www.googleadservices.com www.googletagmanager.com www.storygize.net x.bidswitch.net x.skimresources.com; manifest-src 'self'; media-src app.gleen.ai; script-src 'unsafe-eval' 'unsafe-inline'; script-src-attr ; script-src-elem 'self' 'unsafe-inline' a.omappapi.com *.adroll.com addshoppers.s3.amazonaws.com ads.nextdoor.com analytics.tiktok.com app.gleen.ai bat.bing.com bellhop.extole.io cdn.segment.com connect.facebook.net d.impactradius-event.com edge.fullstory.com googleads.g.doubleclick.net js.intercomcdn.com js.stripe.com maps.googleapis.com pnapi.invoca.net s.pinimg.com shop.pe *.shop.pe solutions.invocacdn.com static.ads-twitter.com *.taboola.com widget.intercom.io www.clarity.ms www.google-analytics.com www.googleadservices.com www.googletagmanager.com *.zdassets.com; style-src ; style-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' a.omappapi.com fonts.googleapis.com origin.xtlo.net; worker-src ; 1
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.klarnacdn.net *.fontawesome.com maxcdn.bootstrapcdn.com *.oct8ne.com applepay.cdn-apple.com *.revolut.com *.google.com google.com *.cdn-apple.com pay.google.com *.stripe.com klarna.com *.klarna.com *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.facebook.com *.googlesyndication.com *.tiktok.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors localhost:* *.motive.co *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com *.gstatic.com *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.klarna.com *.oct8ne.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * api.payplug.com secure.payplug.com *.revolut.com *.google.com *.cdn-apple.com *.gstatic.com *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com 'self' data: google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com *.feedaty.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://www.magezon.com flagpedia.net *.motive.co *.oct8ne.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.revolut.com *.google.com *.cdn-apple.com pay.google.com sportnetit.com https://sportnetit.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com widget.freshworks.com m2epro.freshdesk.com *.feedaty.com upstream.heidipay.com sbx-upstream.heidipay.io *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.avada.io maps.googleapis.com *.motive.co *.oct8ne.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com api.payplug.com applepay.cdn-apple.com https://cdn.payplug.com/js/integrated-payment/ *.revolut.com *.google.com *.cdn-apple.com *.stripe.com klarna.com *.klarnaevt.com tracking.trovaprezzi.it www.trovaprezzi.it www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com widget.freshworks.com m2epro.freshdesk.com *.feedaty.com *.klarnacdn.net https://static.klaviyo.com *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.google-analytics.com *.facebook.com *.facebook.net google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com widget.freshworks.com m2epro.freshdesk.com *.feedaty.com upstream.heidipay.com sbx-upstream.heidipay.io *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com *.motive.co *.oct8ne.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com *.revolut.com *.cdn-apple.com pay.google.com *.gstatic.com *.stripe.com klarna.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://degreeeruptionpredator.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https://image.tmdb.org https://www.google-analytics.com https://www.googletagmanager.com; connect-src 'self' https://www.google-analytics.com; frame-src 'self' https://player.videasy.to https://vidcore.io https://embed.su https://player.unlimitedfiles.xyz https://myvidplay.com https://hqq.ac https://streamtape.com https://azmovies.seekplayer.vip https://www.youtube-nocookie.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' airtools-loomis.prod-mid-euw3.investis.com captcha.loomis.com cdn.cookielaw.org cdnjs.cloudflare.com code.jquery.com irs.tools.investis.com www.googletagmanager.com;               script-src 'strict-dynamic' 'self' 'nonce-q29nQKZAlbQhVlUxfQvEwCodADU='  'sha384-11cX+Naw18bPoIYxEkQI+DltxbxL5/5L0krcoW8ObmMGsC3OiLBkmZjXSWPrrjYh' snap.licdn.com captcha.loomis.com *.googleapis.com cdn.cookielaw.org cdnjs.cloudflare.com code.jquery.com loomis.jobbase.io loomis.onlyfy.jobs www.googletagmanager.com www.google.com www.gstatic.com googleads.g.doubleclick.net pagead2.googlesyndication.com connect.facebook.net snippet.capybara.lmc.cz www.googleadservices.com loomis-dk.containers.piwik.pro *.dailymotion.com *.dmcdn.net *.wistia.com *.wistia.net *.wistia.net fast.wistia.com;               style-src 'self' 'unsafe-inline' captcha.loomis.com cdn.jsdelivr.net cdnjs.cloudflare.com *.googleapis.com snippet.capybara.lmc.cz *.wistia.com;               img-src 'self' data: pagead2.googlesyndication.com captcha.loomis.com cdn.cookielaw.org cdn-endpoint-sitecorecdn-es-01.azureedge.net px.ads.linkedin.com www.facebook.com www.googleadservices.com www.googletagmanager.com img.icons8.com media.licdn.com 1.bp.blogspot.com cdn.theorg.com googleads.g.doubleclick.net maps.gstatic.com *.googleapis.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.wistia.com;               connect-src 'self' 'unsafe-inline' data: ad.doubleclick.net stats.g.doubleclick.net pagead2.googlesyndication.com loomis-privacy.my.onetrust.com airtools-loomis.prod-mid-euw3.investis.com *.google.com google.com www.googletagmanager.com px.ads.linkedin.com *.google-analytics.com captcha.loomis.com cdn.cookielaw.org privacyportal-de.onetrust.com geolocation.onetrust.com api.capybara.lmc.cz www.googleadservices.com www.google.se www.facebook.com *.googleapis.com *.wistia.com *.wistia.net;               font-src 'self' 'unsafe-inline' fonts.gstatic.com snippet.capybara.lmc.cz *.wistia.com;               frame-src 'self' airtools-loomis.prod-mid-euw3.investis.com irs.tools.investis.com loomis.onlyfy.jobs td.doubleclick.net www.youtube.com www.youtube-nocookie.com otp.investis.com otp.tools.investis.com view.genially.com *.google.com *.googletagmanager.com google.com googletagmanager.com publish.ne.cision.com *.dailymotion.com geo.dailymotion.com *.dmcdn.net *.wistia.com *.wistia.net fast.wistia.com iframe.mediadelivery.net fronto.vancastvideo.com;               worker-src 'self' blob:;               object-src 'none';               base-uri 'self'; 1
font-src *.googleapis.com *.gstatic.com data: *.fontawesome.com *.cloudflare.com *.cloudfront.net *.bootstrapcdn.com *.werksraeder24.de 'self' 'unsafe-inline'; form-action www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.apptrian.com facebook.com connect.facebook.net *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.werksraeder24.de *.werksraeder24.com *.originelevelgen24.nl 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.sandbox.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com facebook.com connect.facebook.net https://www.googletagmanager.com/ secure.novalnet.de customers.barzahlen.de customers-sandbox.barzahlen.de *.weltpixel.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.facebook.com optimize.google.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com *.ftcdn.net *.behance.net fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com www.apptrian.com facebook.com connect.facebook.net https://images.unsplash.com http://www.googleadservices.com/ https://www.googleadservices.com/ https://www.google.com/ magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com *.paypal.com tile.openstreetmap.org a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org *.trustedshops.com *.cloudflare.com *.cloudfront.net *.facebook.com *.google.de *.werksraeder24.de *.bing.com *.clarity.ms *.doubleclick.net *.billiger.de *.ytimage.com *.googleoptimize.com *.google-analytics.com *.googletagmanager.com optimize.google.com *.paypalobjects.com 'self' 'unsafe-inline'; script-src www.googleadservices.com googleads.g.doubleclick.net analytics.google.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com s.ytimg.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com facebook.com widget.freshworks.com m2epro.freshdesk.com https://player.vimeo.com cdn.novalnet.de cdn.barzahlen.de js.braintreegateway.com assets.braintreegateway.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com unpkg.com *.cloudflare.com *.cloudfront.net *.fontawesome.com *.userlike.com *.amazonaws.com *.trustedshops.com *.facebook.net *.facebook.com *.werksraeder24.de *.bing.com *.clarity.ms *.googleoptimize.com optimize.google.com *.googleanalytics.com *.google-analytics.com *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com unsafe-inline assets.braintreegateway.com unpkg.com *.cloudflare.com *.cloudfront.net *.bootstrapcdn.com *.trustedshops.com *.werksraeder24.de *.googleoptimize.com optimize.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com maps.gstatic.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de www.apptrian.com facebook.com connect.facebook.net widget.freshworks.com m2epro.freshdesk.com https://player.vimeo.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com nominatim.openstreetmap.org *.cloudflare.com *.cloudfront.net *.facebook.com *.amazonaws.com *.werksraeder24.de *.googlesyndication.com *.doubleclick.net *.bing.com *.clarity.ms *.trustedshops.com *.etrusted.com *.trustbadge.com *.google-analytics.com *.googleoptimize.com *.googletagmanager.com 'self' 'unsafe-inline'; 1
script-src 'self' ; img-src 'self' ; object-src 'none'; base-uri 'none'; frame-ancestors 'self'; report-uri https://api.pcmobile.ca/api/csp-report/PCM 1
font-src *.fontawesome.com *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.google.com *.youtube.com maps.googleapis.com scontent.cdninstagram.com cdn.lightwidget.com lightwidget.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.google.com *.youtube.com maps.googleapis.com scontent.cdninstagram.com cdn.lightwidget.com lightwidget.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.twitter.com *.google.com maps.googleapis.com scontent.cdninstagram.com cdn.lightwidget.com lightwidget.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com www.google.ca www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: *.paypal.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.com maps.googleapis.com scontent.cdninstagram.com cdn.lightwidget.com lightwidget.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ maps.app.goo.gl *.hotjar.com *.newrelic.com *.nr-data.net *.google-analytics.com https://diffuser-cdn.app-us1.com/ https://prism.app-us1.com/ www.google.ca www.google.com songbirdstag.cardinalcommerce.com c.paypal.com js.braintreegateway.com assets.braintreegateway.com api.braintreegateway.com client-analytics.braintreegateway.com *.cloudflare.com *.fontawesome.com *.twitter.com *.twimg.com *.trustedshops.com scontent.cdninstagram.com cdn.lightwidget.com pay.google.com api.sandbox.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com https://rum.hlx.page *.gstatic.com *.usercentrics.eu *.google.com maps.googleapis.com lightwidget.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com *.fontawesome.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.google.com *.youtube.com maps.googleapis.com scontent.cdninstagram.com cdn.lightwidget.com lightwidget.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com maps.app.goo.gl *.hotjar.io wss://ws.hotjar.com/ *.newrelic.com *.nr-data.net *.google-analytics.com https://diffuser-cdn.app-us1.com/ https://prism.app-us1.com/ www.google.ca www.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.cloudflare.com *.twitter.com *.twimg.com *.youtube.com maps.googleapis.com scontent.cdninstagram.com cdn.lightwidget.com lightwidget.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; media-src 'self' https://radio.saopaulo01.com.br:10827; font-src 'self' data:; frame-ancestors 'self'; upgrade-insecure-requests 1
default-src 'self'; script-src 'self'; report-to csp-endpoint; 1
style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; 1
object-src 'none';base-uri 'self';script-src 'nonce-fjpPH8yYIn_uZvCq5OLyEA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https:; connect-src 'self' https:; frame-src 'self' https:; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: *.fontawesome.com *.livechatinc.com *.plyr.io https://widgets.trustedshops.com https://integrations.etrusted.com *.klarnacdn.net https://fonts.bunny.net *.alothemes.com *.magepow.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.net *.facebook.com https://seo.mageplaza.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.iubenda.com *.googletagmanager.com *.pinterest.com *.livechatinc.com *.facebook.net *.facebook.com *.linkedin.com *.googleapis.com *.klarna.com https://www.googletagmanager.com/ secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * landofcoder.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.clarity.ms *.googletagmanager.com *.doubleclick.net cdn.livechat-files.com *.iubenda.com pixel.mathtag.com sync.mathtag.com *.trustedshops.com *.linkedin.com *.google.de *.facebook.net *.facebook.com *.livechatinc.com *.yahoo.com *.truoptik.com *.pinterest.com maps.gstatic.com *.ytimg.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://widgets.trustedshops.com *.etrusted.com *.klarna.com *.klarnaevt.com *.klarnacdn.net magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: https://widgets-qa.trustedshops.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.clarity.ms *.googletagmanager.com js.braintreegateway.com assets.braintreegateway.com api.braintreegateway.com client-analytics.braintreegateway.com *.adobedtm.com *.iubenda.com chimpstatic.com *.roomvo.com *.trustedshops.com *.livechatinc.com *.cloudflare.com *.getsitecontrol.com *.pinimg.com *.mouseflow.com *.doubleclick.net *.licdn.com *.facebook.net *.facebook.com *.yimg.com *.teads.tv *.pinterest.com *.getsitectrl.com *.klarna.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ downloads.mailchimp.com *.list-manage.com https://widgets.trustedshops.com https://integrations.etrusted.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.disqus.com *.avada.io *.shopify.com *.alothemes.com *.magepow.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com c.paypal.com pay.google.com api.sandbox.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://widgets-qa.trustedshops.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com landofcoder.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com downloads.mailchimp.com https://widgets.trustedshops.com *.etrusted.com *.klarnacdn.net https://fonts.bunny.net *.alothemes.com *.magepow.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com assets.braintreegateway.com *.googleapis.com *.gstatic.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.clarity.ms api.braintreegateway.com client-analytics.braintreegateway.com *.gstatic.com *.googletagmanager.com cdn.eye-able.com *.iubenda.com *.roomvo.com chimpstatic.com *.trustedshops.com *.livechatinc.com *.cloudflare.com *.getsitecontrol.com *.pinimg.com *.mouseflow.com *.doubleclick.net *.licdn.com *.facebook.net *.facebook.com *.yimg.com *.teads.tv *.pinterest.com *.getsitectrl.com *.linkedin.oribi.io *.linkedin.com *.klarnaevt.com *.klarna.com *.noembed.com *.plyr.io http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.etrusted.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com api.sandbox.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://integrations.etrusted.site landofcoder.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com *.cloudflare.com *.trustedshops.com *.fontawesome.com *.twitter.com *.bootstrapcdn.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.authorize.net 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.affirm.com *.affirm.ca www.google.com youtu.be *.vimeo.com *.addthis.com *.twitter.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.authorize.net *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.affirm.com *.affirm.ca *.cloudflare.com https://cdn.klarna.com https://s.ytimg.com *.usercentrics.eu blob: *.magebig.com *.googleadservices.com *.google-analytics.com *.twitter.com *.clarity.ms *.google.co.uk *.bing.com magefan.com cm.magefan.com *.disqus.com *.google.com *.google.com.ua *.google.nl *.google.be *.google.de *.doubleclick.net https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com apis.google.com *.gstatic.com *.affirm.com *.affirm.ca *.cloudflare.com *.google-analytics.com *.googleadservices.com *.googleapis.com *.trustedshops.com *.usercentrics.eu *.addthis.com *.addthisedge.com *.moatads.com *.twitter.com googletagmanager.com *.fontawesome.com s7.addthis.com m.addthis.com z.moatads.com graph.facebook.com widgets.pinterest.com *.salesfire.co.uk *.taboola.com *.bing.com *.pinimg.com *.clarity.ms *.tradedoubler.com pixel.adfyier.com *.disqus.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.googletagmanager.com *.doubleclick.net *.avada.io *.authorize.net https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.cloudflare.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.googleapis.com *.twitter.com *.gstatic.com *.fontawesome.com *.bootstrapcdn.com *.klaviyo.com *.googletagmanager.com https://fonts.bunny.net tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.googleapis.com *.affirm.com *.affirm.ca *.cloudflare.com https://ipinfo.io *.facebook.com *.twitter.com *.clarity.ms live.smartmetrics.co.uk *.pinterest.com *.bing.com *.salesfire.co.uk *.doubleclick.net *.taboola.com *.google-analytics.com *.googlesyndication.com https://get.geojs.io *.avada.io *.authorize.net https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://www.gstatic.com https://fonts.gstatic.com 'self' data: *.zohocdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://test.transafe.com https://post.live.transafe.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com https://test.transafe.com https://post.live.transafe.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.sociablekit.com *.bing.com *.doubleclick.net landofcoder.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com magefan.com cm.magefan.com *.disqus.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: *.bing.com *.clarity.ms data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.disqus.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net https://test.transafe.com https://post.live.transafe.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.clarity.ms *.zoho.com *.zohopublic.com *.zohocdn.com *.bing.com https://monetra.bravoelectro.com:8665/PaymentFrame/PaymentFrame.js landofcoder.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.googleapis.com *.googletagmanager.com assets.braintreegateway.com *.zohocdn.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.zohopublic.com *.clarity.ms *.bing.com vts.zohopublic.com landofcoder.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri /report_uri; report-to report-endpoint; 1
style-src-elem 'unsafe-inline' trustmate.pro *.trustmate.pro *.trackjs.com 'self' *.doubleclick.net *.googleadservices.com *.s121.mhost.eu *.gr-cdn.com us-an.gr-cdn.com *.consentmanager.net *.gr-wcon.com *.fontawesome.com *.adobe.com *.adobedtm.com *.google.com *.cardinalcommerce.com *.googleapis.com *.facebook.com *.gstatic.com fonts.gstatic.com *.googletagmanager.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.easypack24.net *.inpost.pl izi.inpost.pl *.trustedshops.com *.it4dev.pl *.klarnacdn.net *.klarnaservices.com *.etrusted.com *.klarnaevt.com *.paypal.com www.paypal.com *.sysadvisors.pl *.dhlparcel.nl *.stripe.com integrations.etrusted.com; script-src-elem trustmate.pro *.trustmate.pro *.trackjs.com trustmate.io *.trustmate.io *.cloudflareinsights.com 'self' *.klarna.com *.bing.com bing.com *.doubleclick.net *.googleadservices.com *.s121.mhost.eu *.hotjar.com cdnjs.cloudflare.com *.youtube.com 'unsafe-inline' *.gr-cdn.com us-an.gr-cdn.com *.consentmanager.net *.gr-wcon.com *.facebook.net *.lightwidget.com *.fontawesome.com *.adobe.com *.adobedtm.com *.google.com *.cardinalcommerce.com *.googleapis.com *.facebook.com *.gstatic.com fonts.gstatic.com *.googletagmanager.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.easypack24.net *.inpost.pl izi.inpost.pl *.trustedshops.com *.it4dev.pl *.klarnacdn.net *.klarnaservices.com *.etrusted.com *.klarnaevt.com *.paypal.com www.paypal.com *.sysadvisors.pl *.dhlparcel.nl *.stripe.com integrations.etrusted.com; script-src-attr *.s121.mhost.eu trustmate.pro *.trustmate.pro *.doubleclick.net *.googleadservices.com *.gr-cdn.com us-an.gr-cdn.com 'unsafe-inline' *.fontawesome.com *.facebook.net *.adobe.com *.adobedtm.com *.google.com *.cardinalcommerce.com *.googleapis.com *.lightwidget.com *.gstatic.com *.facebook.com *.googletagmanager.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.easypack24.net *.inpost.pl *.trustedshops.com *.it4dev.pl https://dev.martom.it4dev.pl *.klarnacdn.net *.klarnaservices.com *.etrusted.com *.klarnaevt.com *.paypal.com *.sysadvisors.pl *.dhlparcel.nl; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com *.adobe.com https://fonts.gstatic.com *.googletagmanager.com maxcdn.bootstrapcdn.com assets.braintreegateway.com geowidget.easypack24.net geowidget.inpost.pl widgets.trustedshops.com static-app.connect.trustedshops.com static-app.connect-qa.trustedshops.com *.klarnacdn.net *.klarnaevt.com *.paypal.com *.sysadvisors.pl *.dhlparcel.nl https://www.google.com https://www.gstatic.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * sandbox.przelewy24.pl secure.przelewy24.pl 'self' 'unsafe-inline'; frame-ancestors pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://cdn.consentmanager.net https://delivery.consentmanager.net *.googleadservices.com trustmate.pro *.trustmate.pro *.consentmanager.net *.fontawesome.com *.adobedtm.com *.google.pl www.google.com *.cardinalcommerce.com 'self' assets.adobedtm.com *.it4dev.pl *.klarnaevt.com *.sysadvisors.pl *.dhlparcel.nl https://dev.martom.it4dev.pl *.etrusted.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com * apm.przelewy24.pl *.weltpixel.com 'self' 'unsafe-inline'; img-src *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com https://cdn.consentmanager.net https://delivery.consentmanager.net trustmate.pro *.trustmate.pro *.trackjs.com *.bing.com bing.com gls-group.com *.questprofile.com questprofile.com questprofile.pl *.googleadservices.com markizeta.s121.mhost.eu *.consentmanager.net markizeta.info *.fontawesome.com *.google.pl *.cardinalcommerce.com assets.adobedtm.com *.it4dev.pl *.klarnaevt.com *.sysadvisors.pl *.dhlparcel.nl https://dev.martom.it4dev.pl *.etrusted.com magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com static.przelewy24.pl www.gstatic.com gstatic.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com https://cdn.consentmanager.net https://delivery.consentmanager.net 'unsafe-inline' *.googleadservices.com 'self' *.gr-cdn.com us-an.gr-cdn.com *.fontawesome.com *.cardinalcommerce.com *.googleapis.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.lightwidget.com *.easypack24.net *.inpost.pl *.trustedshops.com *.it4dev.pl *.klarnacdn.net *.klarnaservices.com *.etrusted.com *.klarnaevt.com https://dev.martom.it4dev.pl *.paypal.com *.sysadvisors.pl *.dhlparcel.nl https://cdnjs.cloudflare.com js.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com sandbox.przelewy24.pl secure.przelewy24.pl apm.przelewy24.pl 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com 'unsafe-inline' 'self' *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com geowidget.easypack24.net geowidget.inpost.pl widgets.trustedshops.com static-app.connect.trustedshops.com static-app.connect-qa.trustedshops.com *.klarnacdn.net *.klarnaevt.com *.paypal.com *.sysadvisors.pl *.dhlparcel.nl *.google.com https://fonts.googleapis.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src https://cdn.consentmanager.net https://delivery.consentmanager.net 'self' *.trackjs.com gls-group.com trustmate.pro *.trustmate.pro *.questprofile.com questprofile.com questprofile.pl *.googleadservices.com *.doubleclick.net markizeta.s121.mhost.eu *.consentmanager.net markizeta.info *.fontawesome.com *.facebook.com *.adobe.com *.adobedtm.com *.google.com *.google.pl www.google.com *.cardinalcommerce.com assets.adobedtm.com *.it4dev.pl *.klarnaevt.com *.paypal.com *.sysadvisors.pl *.dhlparcel.nl https://dev.martom.it4dev.pl *.etrusted.com 'self' 'unsafe-inline'; media-src *.adobe.com https://cdn.consentmanager.net https://delivery.consentmanager.net 'self' *.trackjs.com gls-group.com *.questprofile.com questprofile.com questprofile.pl *.googleadservices.com *.doubleclick.net markizeta.s121.mhost.eu *.consentmanager.net markizeta.info *.fontawesome.com *.facebook.com *.adobedtm.com *.google.com *.google.pl www.google.com *.cardinalcommerce.com assets.adobedtm.com *.it4dev.pl *.klarnaevt.com *.paypal.com *.sysadvisors.pl *.dhlparcel.nl https://dev.martom.it4dev.pl *.etrusted.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com https://cdn.consentmanager.net https://delivery.consentmanager.net *.trackjs.com trustmate.pro *.trustmate.pro *.googleadservices.com 'self' *.hotjar.com wss://*.hotjar.com *.hotjar.io *.consentmanager.net *.getresponse.com *.fontawesome.com *.adobe.com *.adobedtm.com *.cardinalcommerce.com *.googleapis.com *.gstatic.com *.googletagmanager.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.easypack24.net *.inpost.pl *.trustedshops.com *.it4dev.pl *.klarnacdn.net *.klarnaservices.com *.etrusted.com *.klarnaevt.com *.sysadvisors.pl *.dhlparcel.nl http://dpm.demdex.net https://www.google.com https://www.gstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com sandbox.przelewy24.pl secure.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src https://cdn.consentmanager.net https://delivery.consentmanager.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://cdn.jsdelivr.net https://analytics.aura.build https://code.iconify.design https://cdn.tailwindcss.com https://unpkg.com https://esm.sh https://cdn.promotekit.com https://cloud.umami.is https://googleads.g.doubleclick.net https://www.googleadservices.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; frame-src 'self' https://www.youtube.com https://youtube.com https://player.vimeo.com https://spline.design https://*.spline.design https://www.googletagmanager.com; media-src 'self' data: blob: https:; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; report-uri /.netlify/functions/csp-report 1
default-src 'self' www.station-one.com station-one.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.hotjar.com *.clarity.ms *.monri.com cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data: blob: spiza.tommy.hr tommy-staging.locastic.com tommy-dev.locastic.com tommy-dev-v2.locastic.com picsum.photos maps.googleapis.com *.googletagmanager.com *.google-analytics.com *.hotjar.com; font-src 'self' data: fonts.gstatic.com *.hotjar.com; connect-src 'self' spiza.tommy.hr tommy-staging.locastic.com tommy-dev.locastic.com tommy-dev-v2.locastic.com *.google-analytics.com *.googletagmanager.com *.hotjar.com *.clarity.ms *.monri.com; frame-src 'self' *.monri.com *.googletagmanager.com; frame-ancestors 'self' 1
default-src 'self' syndication.twitter.com; script-src js.meranerland.org 'unsafe-inline' 'unsafe-eval' player.peer.tv stats.peer.biz platform.twitter.com apis.google.com; connect-src 'self' stats.peer.biz; img-src 'self' data: images2.meranerland.org css.meranerland.org  www.hotel-guide.it player.peer.tv stats.peer.biz carto.peer.biz www.gravatar.com syndication.twitter.com api.trustyou.com; style-src 'self' 'unsafe-inline' css.meranerland.org js.meranerland.org; font-src css.meranerland.org; frame-src 'self' player.peer.tv www.facebook.com platform.twitter.com apis.google.com accounts.google.com www.youtube.com; child-src 'self' player.peer.tv www.facebook.com platform.twitter.com apis.google.com accounts.google.com www.youtube.com; report-uri https://csp-report.peer.biz/reportOnly/index 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; 1
object-src 'none';base-uri 'self';script-src 'nonce-nvcj2zJEl4Ewkc7bD8cNdw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
worker-src blob:; font-src fonts.gstatic.com *.fontawesome.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ assets.braintreegateway.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com cdn.dnky.co webchat.dotdigital.com *.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.cdninstagram.com *.kxcdn.com amcglobal.sc.omtrdc.net *.twitter.com *.googleapis.com *.google.com *.gstatic.com *.fbcdn.net *.paypal.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com js.authorize.net jstest.authorize.net https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com cdn-scripts.signifyd.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.googleapis.com *.google.com *.gstatic.com cdn.ampproject.org connect.facebook.net www.googletagmanager.com googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com *.youtube.com *.adobedtm.com *.cardinalcommerce.com *.tawk.to *.jsdelivr.net r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net cdn.dnky.co api.comapi.com webchat.dotdigital.com s7.addthis.com *.googleadservices.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com *.tawk.to cdn.dnky.co webchat.dotdigital.com *.fontawesome.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com payments.sandbox.braintree-api.com origin-analytics-sand.sandbox.braintree-api.com assets.braintreegateway.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com dpm.demdex.net *.instagram.com *.paypal.com *.tawk.to *.google-analytics.com r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net api.comapi.com webchat.dotdigital.com ekr.zdassets.com/ *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net fonts.googleapis.com *.klarnacdn.net *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com assets.xxlove.gr *.assets.xxlove.gr *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com *.iris.dias.com.gr *.test-iris.dias.com.gr *.twitter.com *.google.com assets.xxlove.gr *.assets.xxlove.gr *.piraeusbank.gr 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com bytedance: sslocal: https://widget-v5.boxnow.gr https://widget-v4.boxnow.gr https://widget-v4-dev.boxnow.gr https://widget-v5-dev.boxnow.gr https://widget-v4-stage.boxnow.gr https://widget-v5-stage.boxnow.gr consentcdn.cookiebot.com consentcdn.cookiebot.eu *.klarna.com *.youtube.com/ *.google.com assets.xxlove.gr *.assets.xxlove.gr *.contactpigeon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com maps.gstatic.com *.googleapis.com *.google.com *.acscourier.net imgsct.cookiebot.com imgsct.cookiebot.eu *.klarna.com *.klarnaevt.com *.klarnacdn.net *.cloudflare.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.maps.gstatic.com maps.googleapis.com assets.xxlove.gr *.assets.xxlove.gr *.js.klarna.com *.imgsct.cookiebot.com *.contactpigeon.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com maps.googleapis.com *.google-analytics.com *.google.com *.googleapis.com *.googleadservices.com *.googletagmanager.com https://www.octocom.ai https://chat.octocom.ai consent.cookiebot.com consent.cookiebot.eu *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.maps.googleapis.com *.trackedlink.net *.maps.gstatic.com *.xxlove.gr *.xxlove.trust-servers.net assets.xxlove.gr *.assets.xxlove.gr *.js.klarna.com *.consent.cookiebot.com *.consentcdn.cookiebot.com *.contactpigeon.com *.disqus.com *.avada.io *.piraeusbank.gr 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.octocom.ai https://chat.octocom.ai *.klarnacdn.net *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com *.google-analytics.com assets.xxlove.gr *.assets.xxlove.gr 'unsafe-inline' https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com artserver.gr maps.googleapis.com https://api.octocom.ai consentcdn.cookiebot.com consentcdn.cookiebot.eu consent.cookiebot.com consent.cookiebot.eu *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.googleadservices.com *.google-analytics.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org *.google.com *.google.co.in *.maps.gstatic.com *.maps.googleapis.com assets.xxlove.gr *.assets.xxlove.gr *.js.klarna.com *.consentcdn.cookiebot.com *.contactpigeon.com https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src *.contactpigeon.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.contactpigeon.com 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
worker-src blob:; font-src *.googleapis.com *.gstatic.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com fonts.gstatic.com *.kxcdn.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.oct8ne.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com google.com *.oct8ne.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com scontent.cdninstagram.com *.kxcdn.com *.twitter.com google.com *.connectif.cloud magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://firebasestorage.googleapis.com maps.googleapis.com *.oct8ne.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com google.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com *.connectif.cloud *.disqus.com *.avada.io *.shopify.com maps.googleapis.com *.oct8ne.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com google.com *.kxcdn.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com maps.googleapis.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.connectif.cloud https://get.geojs.io *.avada.io maps.googleapis.com *.oct8ne.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
font-src https://www.googletagmanager.com *.googleapis.com *.gstatic.com *.fontawesome.com fonts.axept.io fonts.googleapis.com fonts.gstatic.com maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://applepay.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com bo.maisonic.com self https: 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com *.google.com/ t.clic2buy.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.payplug.com *.dalenys.com https://applepay.cdn-apple.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com *.gstatic.com axeptio.imgix.net display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com https://www.magezon.com *.doofinder.com pim.avidsen.com network-eu-stg-a.bazaarvoice.com network-eu-a.bazaarvoice.com photos-eu.bazaarvoice.com apps.bazaarvoice.com maisonic.com *.maisonic.com www.mageworx.com www.magezon.com action.metaffiliation.com *.ad4m.at track.adform.net adservice.google.com ad.doubleclick.net img.metaffiliation.com r.adserver01.de favicons.axept.io flagpedia.net https://www.google.fr https://api.mapbox.com *.tile.openstreetmap.org https://maps.googleapis.com https://maps.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://secure-magenta.dalenys.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.axept.io apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com *.google.com/ *.doofinder.com static.axept.io sibautomation.com cdn.brevo.com static.cloudflareinsights.com cdnjs.cloudflare.com cdn.doofinder.com eu1-config.doofinder.com secure.payplug.com cdn.payplug.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ awsapis3.netreviews.eu auth.skeepers.io api.skeepers.io cl-pbr.cxr.skeepers.io znl.maisonic.com tag.beyable.com ad4m.at pixel.bsmartdata.com front.activation.beyable.com www.clarity.ms scripts.clarity.ms halc.iadvize.com *.wonderpush.com jscloud.net rs.clic2buy.com *.gstatic.com maps.googleapis.com https://cl-pbr.cxr.skeepers.io/ https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://secure-magenta.dalenys.com https://applepay.cdn-apple.com api.payplug.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com display.ugc.bazaarvoice.com *.doofinder.com *.fontawesome.com cdnjs.cloudflare.com cdn.doofinder.com fonts.axept.io fonts.googleapis.com maxcdn.bootstrapcdn.com *.gstatic.com https://fonts.googleapis.com https://cdnjs.cloudflare.com unsafe-inline assets.braintreegateway.com https://secure-magenta.dalenys.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com api.axept.io client.axept.io api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.doofinder.com wss://*.doofinder.com static.axept.io apps-stg.bazaarvoice.com in-automate.brevo.com cloudflareinsights.com cdnjs.cloudflare.com eu1-api.doofinder.com stats.g.doubleclick.net ad.doubleclick.net region1.analytics.google.com region1.google-analytics.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ awsapis3.netreviews.eu auth.skeepers.io api.skeepers.io cl-pbr.cxr.skeepers.io znl.maisonic.com tag.beyable.com ad4m.at pixel.bsmartdata.com *.clarity.ms halc.iadvize.com api.iadvize.com googlesyndication.com jscloud.net analytics.clic2buy.com www.gstatic.com maps.googleapis.com https://cl-pbr.cxr.skeepers.io/ https://nominatim.openstreetmap.org api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src api.axept.io 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src https://square-fonts-production-f.squarecdn.com/ https://d1g145x70srn7h.cloudfront.net/ *.fontawesome.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com *.cloudfront.net *.reviews.io *.reviews.co.uk data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ https://seo.mageplaza.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ https://pci-connect.squareup.com https://connect.squareup.com https://pci-connect.squareupsandbox.com https://connect.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ magento-cloudflare.jetrails.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.reviews.io *.reviews.co.uk *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https://www.gstatic.com/ https://sandbox.api.cash.app/ https://site-assets.afterpay.com/ https://sandbox.web.squarecdn.com/ https://api.cash.app/ https://web.squarecdn.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://images.unsplash.com magefan.com cm.magefan.com *.ytimg.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://track.hubspot.com https://forms.hsforms.com https://s.ytimg.com *.google.com *.google.co.in *.doubleclick.net https://www.facebook.com https://bat.bing.com https://api.shutterstock.com https://image.shutterstock.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://js.squareup.com https://js.afterpay.com/ https://nd.squarecdn.com https://js.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://portal.sandbox.afterpay.com/ https://portal.afterpay.com/ https://cdn.plaid.com/ https://sandbox.kit.cash.app/ https://kit.cash.app/ https://maps.googleapis.com https://player.vimeo.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.newrelic.com https://js.hs-scripts.com https://js.hscollectedforms.net https://js.usemessages.com https://js.hsadspixel.net https://js.hs-banner.com https://js.hs-analytics.net https://js-na1.hs-scripts.com https://pf-cdn.printfriendly.com https://cdn.printfriendly.com http://cdn.printfriendly.com https://www.printfriendly.com https://connect.facebook.net https://bat.bing.com https://383433.tctm.co https://static.cloudflareinsights.com *.reviews.io *.reviews.co.uk https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://fonts.googleapis.com/ *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com *.cloudfront.net *.reviews.io *.reviews.co.uk tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://pci-connect.squareup.com https://pci-connect.squareupsandbox.com https://api.amplitude.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://o160250.ingest.sentry.io/ https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://ad.doubleclick.net https://stats.g.doubleclick.net *.cloudflare.com https://forms.hscollectedforms.net/ *.google-analytics.com *.nr-data.net https://api.hubspot.com https://api.hubapi.com https://api.shutterstock.com *.cloudfront.net *.reviews.io *.reviews.co.uk https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' blob: https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https: 1
default-src 'self'; font-src 'self' https://fonts.gstatic.com; img-src 'self' https://*.googleapis.com https://*.gstatic.com *.google.com  *.googleusercontent.com data: https://www.gravatar.com/avatar/ https://*.google-analytics.com https://*.googletagmanager.com blob:; script-src 'self' https://*.googletagmanager.com 'nonce-9395759fbe7c9d9a8b5b0f2fc643506b' https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com blob:; style-src 'self' 'nonce-9395759fbe7c9d9a8b5b0f2fc643506b' https://fonts.googleapis.com; worker-src 'self' blob:; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googleapis.com *.google.com https://*.gstatic.com  data: blob:; frame-ancestors 'self'; 1
font-src *.klevu.com *.ksearchnet.com *.fontawesome.com *.typekit.net https://widgets.trustedshops.com integrations.etrusted.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://seo.mageplaza.com www.facebook.com *.copernica.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com player.vimeo.com https://www.paypal.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com https://*.dpdconnect.nl *.dpdconnect.nl service2.loyaltyinabox.com *.pinterest.com www.facebook.com www.youtube.com view.publitas.com www.google.com www.google.nl www.google.de *.google.com maps.google.com chat.babypark.nl *.doubleclick.net td.doubleclick.net googleads.g.doubleclick.net widget.trustpilot.com *.cookiebot.com *.cookiebot.eu chatwidget-prod.web.app www.googletagmanager.com sst.babypark.nl sst.babypark.de sst.babydeals.be sst.baby-dump.nl folders.baby-dump.nl platform.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com https://portal.payconiq.com https://static.buckaroo.nl https://www.paypalobjects.com *.klevu.com *.ksearchnet.com www.babypark.nl www.babypark.de www.babydeals.be dehoevebuitenleven.nl m2.babypark.mavendev.com m2.babypark-de.mavendev.com www.ikenik.nl m2.ikenik.mavendev.com m2.babydump.mavendev.com m2.babydump-de.mavendev.com www.google.com www.google.nl www.google.de www.google.com.ua www.facebook.com ct.pinterest.com www.googletagmanager.com www.zenaps.com www.awin1.com static.zdassets.com *.bing.com *.bing.net www.thuiswinkel.org i.ytimg.com img.youtube.com blob: lantern.roeye.com *.clarity.ms *.cookiebot.com *.cookiebot.eu integrations.etrusted.com stats.g.doubleclick.net sst.babypark.nl sst.babypark.de sst.babydeals.be sst.baby-dump.nl pinterest.com assets.pinterest.com syndication.twitter.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: maps.gstatic.com https://widgets.trustedshops.com *.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com https://*.dpdconnect.nl js.klevu.com *.ksearchnet.com *.avada.io www.googletagmanager.com checkout.buckaroo.nl *.clarity.ms lantern.roeyecdn.com widgets.trustedshops.com web-sdk.smartlook.com www.dwin1.com s.pinimg.com connect.facebook.net static.buckaroo.nl view.publitas.com api.360productviewer.com googleads.g.doubleclick.net bat.bing.com bat.bing.net static.zdassets.com js-agent.newrelic.com *.livechatinc.com bam.eu01.nr-data.net chat.babypark.nl widget.trustpilot.com *.pinterest.com *.hotjar.com *.hotjar.io *.cookiebot.com *.cookiebot.eu integrations.etrusted.com chatwidget-prod.web.app twitter.com platform.twitter.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.google.com *.gstatic.com maps.googleapis.com https://widgets.trustedshops.com *.yotpo.com sst.babydeals.be https: 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl cdn.dnky.co webchat.dotdigital.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.typekit.net checkout.buckaroo.nl integrations.etrusted.com chatwidget-css.web.app maxcdn.bootstrapcdn.com unsafe-inline *.googleapis.com *.gstatic.com https://widgets.trustedshops.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src static.zdassets.com integrations.etrusted.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com wss://websocketservice-externalapi.prod.buckaroo.io https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://applepay.buckaroo.io https://www.paypal.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com *.klevu.com *.ksearchnet.com *.clarity.ms *.pinterest.com *.doubleclick.net stats.g.doubleclick.net googleads.g.doubleclick.net manager.eu.smartlook.cloud ekr.zdassets.com wss://widget-mediator.zopim.com api.360productviewer.com www.facebook.com livechat.fabulor.eu bam.eu01.nr-data.net region1.analytics.google.com *.google.com *.hotjar.com *.hotjar.io analytics.google.com bat.bing.com bat.bing.net *.cookiebot.com *.cookiebot.eu *.copernica.com integrations.etrusted.com api.ipify.org www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.google-analytics.com *.trustedshops.com *.etrusted.com *.yotpo.com sst.babydeals.be https: 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.google.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://report-uri.com/r/d/csp/reportOnly; report-to report-endpoint; 1
upgrade-insecure-requests; base-uri 'self'; object-src 'none'; script-src 'nonce-32ae4e7fd1657e57f04602e5c9886f16' https://www.horlogeforum.nl/logs/ https://www.horlogeforum.nl/sidekiq/ https://www.horlogeforum.nl/mini-profiler-resources/ https://eu5.dh-cdn.net/assets/ https://eu5.dh-cdn.net/brotli_asset/ https://www.horlogeforum.nl/extra-locales/ https://www.horlogeforum.nl/highlight-js/ https://www.horlogeforum.nl/javascripts/ https://www.horlogeforum.nl/plugins/ https://www.horlogeforum.nl/theme-javascripts/ https://www.horlogeforum.nl/svg-sprite/ https://www.googletagmanager.com/gtm.js 'sha256-8uAKDaK4QxxCeYZl0Wxad2Nnj2tgKyA14hYBh66pnn0=' https://cdn-cookieyes.com/client_data/225aa61129eb70cff30a9eda1b8b3085/script.js https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js https://www.googletagmanager.com; worker-src 'self' https://eu5.dh-cdn.net/assets/ https://eu5.dh-cdn.net/brotli_asset/ https://www.horlogeforum.nl/javascripts/ https://www.horlogeforum.nl/plugins/; frame-ancestors 'self'; manifest-src 'self' 1
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/  https://widget.trustpilot.com;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://appleid.cdn-apple.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com *.myheritage.co.il https://www.myheritage.co.il  'unsafe-eval' 'nonce-93b547def67fb2c2ed5707eb54815d78' 'strict-dynamic' https://widget.trustpilot.com https://invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style  https://widget.trustpilot.com;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io https://www.google.com/recaptcha/enterprise/* https://www.google.com/recaptcha/enterprise/ https://www.google.com/recaptcha/enterprise/clr https://www.google.com/recaptcha/ https://maps.googleapis.com https://people.googleapis.com https://translate-pa.googleapis.com *.myheritage.co.il https://widget.trustpilot.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:  https://widget.trustpilot.com https://*.trustpilot.com;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=report&canonical_page_id=/company/home/ 1
script-src 'self'; style-src 'self'; frame-ancestors 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://*.customily.com https://*.amazonaws.com 'self' data: maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net https://*.google.com https://*.google.co.uk https://*.gstatic.com https://personalisedgiftsshop.co.uk https://*.personalisedgiftsshop.co.uk https://personalisedweddinggifts.co.uk https://*.personalisedweddinggifts.co.uk https://yookiki.com https://*.yookiki.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://*.personalisedgiftsshop.co.uk https://*.personalisedweddinggifts.co.uk https://*.yookiki.com https://*.google.com 'self' 'unsafe-inline'; frame-ancestors https://*.personalisedgiftsshop.co.uk https://*.personalisedweddinggifts.co.uk https://*.yookiki.com https://*.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com account.fetchify.com https://www.googletagmanager.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com js.mollie.com https://*.personalisedgiftsshop.co.uk https://*.personalisedweddinggifts.co.uk https://*.yookiki.com https://*.google.com https://awin1.com https://www.awin1.com https://zenaps.com https://www.zenaps.com https://lantern.roeye.com c.sandbox.paypal.com sandbox-buy.paddle.com buy.paddle.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://*.customily.com https://*.amazonaws.com 'self' data: https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.trackedlink.net *.ddlnk.net *.dycdn.net http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com flagpedia.net https://www.mollie.com https://*.google.com https://*.google.co.uk https://*.google.cat https://*.feefo.com https://*.gstatic.com https://*.elfsightcdn.com https://*.elfsight.com https://*.ggpht.com https://*.dycdn.net https://cdn-cookieyes.com https://bat.bing.com https://personalisedgiftsshop.co.uk https://*.personalisedgiftsshop.co.uk https://personalisedweddinggifts.co.uk https://*.personalisedweddinggifts.co.uk https://yookiki.com https://*.yookiki.com https://awin1.com https://www.awin1.com https://zenaps.com https://www.zenaps.com c.sandbox.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://*.customily.com https://*.amazonaws.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com cc-cdn.com *.dycdn.net dn1i8v75r669j.cloudfront.net dkpklk99llpj0.cloudfront.net ds9p2a60lh6fp.cloudfront.net d1y9qtn9cuc3xw.cloudfront.net d81mfvml8p5ml.cloudfront.net *.freshrelevance.com *.dotdigital.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ cdn.jsdelivr.net *.avada.io *.shopify.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.gstatic.com maps.googleapis.com js.mollie.com * https://personalisedgiftsshop.co.uk https://*.personalisedgiftsshop.co.uk https://personalisedweddinggifts.co.uk https://*.personalisedweddinggifts.co.uk https://yookiki.com https://*.yookiki.com https://*.google.com https://*.google.co.uk https://*.elfsight.com https://cdn-cookieyes.com https://bat.bing.com https://dwin1.com https://www.dwin1.com https://dwin3.com https://www.dwin3.com https://awin1.com https://www.awin1.com https://zenaps.com https://www.zenaps.com https://the.sciencebehindecommerce.com https://lantern.roeyecdn.com https://cdn.paddle.com/paddle/v2/paddle.js https://public.profitwell.com buy.paddle.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com https://static.klaviyo.com webchat.dotdigital.com webchat.staging.dotdigital.com cc-cdn.com *.dycdn.net cdn.jsdelivr.net maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.gstatic.com https://*.google.com https://*.google.co.uk https://*.googleapis.com https://*.feefo.com https://personalisedgiftsshop.co.uk https://*.personalisedgiftsshop.co.uk https://personalisedweddinggifts.co.uk https://*.personalisedweddinggifts.co.uk https://yookiki.com https://*.yookiki.com https://cdn-cookieyes.com https://bat.bing.com sandbox-cdn.paddle.com cdn.paddle.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://personalisedgiftsshop.co.uk https://*.personalisedgiftsshop.co.uk https://personalisedweddinggifts.co.uk https://*.personalisedweddinggifts.co.uk https://yookiki.com https://*.yookiki.com https://*.google.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://*.customily.com https://*.amazonaws.com 'self' data: https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com *.dycdn.net *.freshrelevance.com wss://*.freshrelevance.com wss://*.dycdn.net dn1i8v75r669j.cloudfront.net *.dotdigital.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.gstatic.com maps.googleapis.com * https://personalisedgiftsshop.co.uk https://*.personalisedgiftsshop.co.uk https://personalisedweddinggifts.co.uk https://*.personalisedweddinggifts.co.uk https://yookiki.com https://*.yookiki.com https://cdn-cookieyes.com https://bat.bing.com https://the.sciencebehindecommerce.com https://wepowerconnections.com https://www.wepowerconnections.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src https://*.google.com https://personalisedgiftsshop.co.uk https://*.personalisedgiftsshop.co.uk https://personalisedweddinggifts.co.uk https://*.personalisedweddinggifts.co.uk https://yookiki.com https://*.yookiki.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri /rest/V1/csp/storefront/report; report-to report-endpoint; 1
script-src-elem assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net assets.braintreegateway.com *.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://static.hotjar.com https://googleads.g.doubleclick.net https://www.clarity.ms https://www.google-analytics.com https://www.google.com https://vendor1.quickspark.com https://cdn.timepayment.com; style-src-elem *.adobe.com assets.braintreegateway.com 'self' 'unsafe-inline'; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.stape.io *.fontawesome.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.meetanshi.com meetanshi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.stape.io *.meetanshi.com meetanshi.com *.paytrace.com landofcoder.com *.weltpixel.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.certcapture.com *.trackedlink.net *.ddlnk.net magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com *.stape.io *.meetanshi.com meetanshi.com https://meetanshi.com/media/logo.png assets.braintreegateway.com https://static.klaviyo.com 'self' *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.certcapture.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.stape.io *.meetanshi.com meetanshi.com *.paytrace.com https://maxcdn.bootstrapcdn.com secure.authorize.net test.authorize.net assets.braintreegateway.com *.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval' landofcoder.com *.yotpo.com https://www.trucklightparts.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com webchat.dotdigital.com webchat.staging.dotdigital.com *.googleapis.com *.googletagmanager.com *.stape.io *.fontawesome.com https://maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline' *.yotpo.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.certcapture.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.google-analytics.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog *.stape.io *.meetanshi.com meetanshi.com landofcoder.com *.yotpo.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:; base-uri 'self'; font-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; script-src 'self' https: 'unsafe-inline' 'wasm-unsafe-eval' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; connect-src 'self' https: wss:; report-uri /csp-reports 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' 1003891.track.convertexperiments.com app.hubspot.com cdn-3.convertexperiments.com cdn-4.convertexperiments.com *.metrics.convertexperiments.com *.signals.convertexperiments.com logs.convertexperiments.com *.convertexperiments.com cdn.pdst.fm connect.facebook.net js.hs-analytics.net js.hs-banner.com js.hsforms.net js.hsleadflows.net js.hubspotfeedback.com js.usemessages.com organizer.bizzabo.com play.vidyard.com script.hotjar.com snap.licdn.com static.hotjar.com static.hsappstatic.net www.google-analytics.com www.googletagmanager.com www.recaptcha.net code.highcharts.com www.youtube.com js.hubspot.com www.dropbox.com widget.altrulabs.com www.google.com maps.googleapis.com wt-assets.hubteam.com cdn2.hubspot.net www.redditstatic.com cdn.veritonic.com gosniply.com d.impactradius-event.com js.hubspot.com 50339659.hs-sites.com analytics.tiktok.com api.s10h.io sgtm-amer.hubspot.com js.hsadspixel.net cdn.intellimize.co static.cloudflareinsights.com ob.greencolumnart.com tags.pw.adn.cloud cdn.jsdelivr.net js.storylane.io 'strict-dynamic' 'nonce-zdvWslRq6DRw1hzwLLQpAg=='; report-uri https://send.hsbrowserreports.com/csp/report 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com *.globalpay.com https://fonts.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com *.cookiebot.com *.klaviyo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.gpwebpay.com *.gpe.cz *.globalpay-ecommerce.com https://*.securesuite.co.uk https://securesuite.co.uk *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com *.cookiebot.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com account.fetchify.com *.americanexpress.com *.globalpay.com *.mastercard.com *.visa.com *.gpwebpay.com *.gpe.cz *.globalpay-ecommerce.com https://*.securesuite.co.uk https://securesuite.co.uk pay.google.com https://payments.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * https://plumrocket.com *.cookiebot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com *.globalpay.com https://www.gstatic.com/instantbuy/svg/dark/pay/en.svg https://www.gstatic.com/instantbuy/svg/light/pay/en.svg https://www.gstatic.com/instantbuy/svg/dark/en.svg https://www.gstatic.com/instantbuy/svg/light/en.svg https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cookiebot.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com *.gstatic.com cc-cdn.com *.aexp-static.com https://ajax.aspnetcdn.com *.globalpay.com *.gpapiservices.com https://pay.google.com https://*.securesuite.co.uk https://securesuite.co.uk https://payments.google.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cookiebot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cc-cdn.com https://fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.cookiebot.com *.typekit.net *.klaviyo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com https://google.com/pay https://pay.google.com *.globalpay.com https://js.globalpay.com https://js-cert.globalpay.com https://*.securesuite.co.uk https://securesuite.co.uk https://payments.google.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com www.googleapis.com *.cookiebot.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.bootstrapcdn.com *.fontawesome.com https://www.google.com https://www.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com 'self' 'unsafe-inline'; frame-ancestors self www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.twitter.com *.addthis.com *.facebook.com *.addtoany.com www.google.com www.gstatic.com apis.google.com js.mollie.com www.youtube.com *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com usercentrics.eu *.google.com *.usercentrics.eu google.de *.google.de https://www.mollie.com *.adobedtm.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com widget.freshworks.com m2epro.freshdesk.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com usercentrics.eu *.fontawesome.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.facebook.net *.jsdelivr.net *.addtoany.com *.usercentrics.eu *.consentmanager.net js.mollie.com www.youtube.com player.vimeo.com https://www.googletagmanager.com tagmanager.google.com unpkg.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com widget.freshworks.com m2epro.freshdesk.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bootstrapcdn.com *.google.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.amazonaws.com *.googleapis.com *.google.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.cloudflare.com *.twitter.com *.twimg.com *.g.doubleclick.net *.addthis.com *.pinterest.com *.addtoany.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com usercentrics.eu *.usercentrics.eu cdn.plyr.io noembed.com analytics.google.com *.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://top-fwz1.mail.ru https://vk.com https://*.vk.com https://www.youtube.com https://s.ytimg.com https://tracker.codeby.school https://wp-statistics.com https://*.codeby.school https://*.codeby.academy; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://mc.yandex.ru https://fdqmcnrsppscyxuefihh.supabase.co https://bot.codeby.school https://tracker.codeby.school https://top-fwz1.mail.ru https://vk.com https://*.vk.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://mc.yandex.ru https://vk.com; media-src 'self' https:; form-action 'self'; base-uri 'self'; object-src 'none'; report-uri /wp-json/codeby/v1/csp-report 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com fonts.googleapis.com https://*.hotjar.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.333obra.com.br *.facebook.com 'self' 'unsafe-inline'; frame-ancestors https://h.online-metrix.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https://h.online-metrix.net *.cardinalcommerce.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com * 'self' data: *.demdex.net *.online-metrix.net *.doubleclick.net *.googletagmanager.com *.facebook.com https://*.useinsider.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.online-metrix.net *.d.aa.online-metrix.net https://firebasestorage.googleapis.com quickchart.io img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://redchamps.com maps.gstatic.com *.google.com *.google.com.br *.facebook.com assets-shorts.mimo.com.br assets.mimo.com.br ad.doubleclick.net https://*.cloudfront.net https://cdn.cookielaw.org https://*.hotjar.com https://*.nr-data.net https://*.adobe.com https://*.adobedtm.com https://*.demdex.net https://cimentobomdemais.com.br *.333obra.com.br *.clarity.ms *.bing.com https://s3.amazonaws.com https://dev.visualwebsiteoptimizer.com https://s3.amazonaws.com/raichu-beta/ra-verified/assets/images/verified.svg https://s3.amazonaws.com/raichu-beta/ra-verified/assets/images/ra-logo.svg https://votorantimcimentoshelp1697804564.zendesk.com https://*.votorantimcimentoshelp.zendesk.com https://static.zdassets.com/web_widget/latest/default_avatar.png https://*.useinsider.com https://img.youtube.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://h.online-metrix.net *.cardinalcommerce.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com connect.facebook.net js-agent.newrelic.com analytics.tiktok.com bat.bing.com h64.online-metrix.net https://cdn.cookielaw.org https://*.cloudfront.net https://cdnjs.cloudflare.com/ajax/libs/select2/3.5.2/select2.min.js https://bam.nr-data.net https://*.hotjar.com 'unsafe-inline' https://cdn.jsdelivr.net/npm/choices.js@4/public/assets/scripts/choices.min.js https://cdn.popconvert.com.br/widget/popconvert.js https://cdn.popconvert.com.br/widget/dist/js/app.js https://cdn.pn.vg https://www.clarity.ms https://bat.bing.com/bat.js https://*.sentry-cdn.com https://*.zendesk.com https://static.zdassets.com https://*.s3.amazonaws.com https://dev.visualwebsiteoptimizer.com https://s3.amazonaws.com/raichu-beta/ra-verified/bundle.js https://sdk.crmback.io/connect.js https://plugins.crmback.io/helpers/tresobra.js shorts.mimo.com.br https://*.useinsider.com https://www.google-analytics.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com fonts.gstatic.com assets.braintreegateway.com https://cdnjs.cloudflare.com/ajax/libs/select2/3.5.2/select2.min.css https://*.hotjar.com 'unsafe-inline' https://s3.amazonaws.com https://s3.amazonaws.com/raichu-beta/ra-verified/styles.css cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com assets-shorts.mimo.com.br 'self' 'unsafe-inline'; manifest-src 'self' data: 'unsafe-inline' 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://h.online-metrix.net https://mpisandbox.braspag.com.br/v2/3ds/validate https://writer.cardinalcommerce.com/stag/log https://mpisandbox.braspag.com.br/v2/3ds/enroll https://centinelapistag.cardinalcommerce.com/V1/Order/JWT/Continue *.amazonaws.com *.braspag.com.br https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://viacep.com.br maps.googleapis.com *.google-analytics.com stats.g.doubleclick.net analytics.tiktok.com bat.bing.com h64.online-metrix.net https://api.reclameaqui.com.br *.cookielaw.org https://privacyportal-br.onetrust.com https://geolocation.onetrust.com https://*.cloudfront.net *.rdstation.com.br https://bam.nr-data.net https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com *.adobe.com *.adobedtm.com *.demdex.net *.magentocommerce.com *.doubleclick.net *.googleadservices.com *.vimeocdn.com *.vimeo.com *.youtube.com *.omtrdc.net *.googletagmanager.com *.adobedc.net *.magento.com *.adobe.net *.magedevteam.com *.metrix.net *.geojs.io wa.me web.whatsapp.com *.snplow.net paypal.com paypalobjects.com *.online-metrix.net viacep.com.br 'self' data: 'unsafe-inline' gyruss.rdops.systems/v2/conversions osp-assets.pn.vg *.clarity.ms https://*.ingest.sentry.io/api https://connect.facebook.net/en_US/fbevents.js https://connect.facebook.net https://dev.visualwebsiteoptimizer.com https://*.zendesk.com https://*.s3.amazonaws.com https://static.zdassets.com https://ekr.zdassets.com https://iosite.reclameaqui.com.br wss://pod-27.zendesk.com https://s3.amazonaws.com/raichu-beta/ra-verified/bundle.js https://onsite.crmback.io/collect https://x.cbstatus.net/check https://www.333obra.com.br/share_cart/action/link/ pip.mimo.com.br assets-shorts.mimo.com.br assets.mimo.com.br cms.mimo.com.br https://api.shorts.mimo.com.br https://gtw.mimo.com.br analytics.mimo.com.br fonts.gstatic.com *.firebaseio.com player.live-video.net *.us-east-1.playback.live-video.net https://*.useinsider.com https://firebaseinstallations.googleapis.com https://*.google-analytics.com https://identitytoolkit.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'sha256-EmcbVbXZxKyiNCUgh3D/8Lavlj2mz5/Ve7anaQo8ikc=' 'sha256-iwJJg7UzLpmkAsIyQmVUTNU2W8eGk0ZiLFA1mkICd2E=' 'sha256-QzF2/Z15VdurhByx7NDfl/idfN/uxnQX/YUOd/fu4cU=' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://*.google-analytics.com https://*.googletagmanager.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; 1
default-src 'self'; base-uri 'self'; frame-ancestors 'self'; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https: wss:; frame-src 'self' https://meetings.hubspot.com https://app.hubspot.com https://player.vimeo.com https://www.youtube-nocookie.com https://www.youtube.com https://demo.arcade.software https://app.arcade.software https://vercel.live https://insight.adsrvr.org https://match.adsrvr.org https://consentcdn.cookiebot.com; form-action 'self' https:; 1
default-src 'none'; base-uri 'self'; form-action 'self' https://bam.nr-data.net; frame-ancestors 'self' 'none'; frame-src 'self' https://*.gcs-web.com https://*.convergepay.com https://www.google.com https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://*.doubleclick.net https://*.smartrecruiters.com https://nationalvision.gcs-web.com https://prnewswire2-a.akamaihd.net/; connect-src 'self' https://code.jquery.com https://*.typekit.net https://fonts.googleapis.com https://fonts.gstatic.com https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://www.google-analytics.com https://*.smartrecruiters.com https://*.doubleclick.net https://www.googletagmanager.com https://extreme-ip-lookup.com https://*.extreme-ip-lookup.com https://ipmeta.io https://*.ipmeta.io https://bam.nr-data.net https://bucketeer-db2073e4-ac1a-4046-97bf-04dce765dca1.s3.amazonaws.com/public/ https://jobpal-sm.s3.amazonaws.com https://612dedf14e35cd00d7d60304.config.smooch.io https://api.smooch.io wss://api.smooch.io https://cdn.cookielaw.org/ https://cdn.linkedin.oribi.io; script-src 'self' https://code.jquery.com https://www.gstatic.com https://www.google-analytics.com https://ssl.google-analytics.com https://*.smartrecruiters.com 'unsafe-inline' https://www.googletagmanager.com https://tagmanager.google.com https://www.youtube.com http://www.youtube.com https://*.ytimg.com https://www.googleadservices.com https://www.google.com https://*.doubleclick.net 'unsafe-eval' https://tagmanager.google.com https://js-agent.newrelic.com https://bam.nr-data.net https://jobpal-sm.s3.amazonaws.com https://api.smooch.io https://unpkg.com https://cdn.cookielaw.org/ https://*.convergepay.com/ https://cdnjs.cloudflare.com/ https://cdn.jsdelivr.net/ https://connect.facebook.net/ https://snap.licdn.com/ https://www.googleoptimize.com/ https://click.appcast.io/; style-src 'self' https://*.typekit.net https://fonts.googleapis.com https://*.smartrecruiters.com https://tagmanager.google.com https://fonts.googleapis.com 'unsafe-inline' https://jobpal-sm.s3.amazonaws.com https://cdnjs.cloudflare.com/; font-src 'self' https://*.typekit.net https://fonts.gstatic.com https://fonts.gstatic.com data: https://jobpal-sm.s3.amazonaws.com 'nonce-350bda062e7a477884ede423405d4514'; img-src 'self' data: https://www.google-analytics.com https://*.smartrecruiters.com https://www.googletagmanager.com https://www.gstatic.com https://ssl.gstatic.com https://*.doubleclick.net https://www.google.com https://*.googleusercontent.com https://ssl.gstatic.com https://bucketeer-db2073e4-ac1a-4046-97bf-04dce765dca1.s3.amazonaws.com/public/ https://media.smooch.io https://i.americasbest.com https://cdn.cookielaw.org/ https://click.appcast.io/ https://px.ads.linkedin.com/ https://www.facebook.com/ https://px4.ads.linkedin.com https://www.multivu.com/national-vision-holdings/*; manifest-src 'self'; media-src 'self' https://jobpal-sm.s3.amazonaws.com; report-uri https://aclens.report-uri.com/r/d/csp/reportOnly 1
font-src *.fontawesome.com https://fonts.gstatic.com 'self' data: https://cdnjs.cloudflare.com https://embed.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com https://www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com https://www.iubenda.com https://sibautomation.com https://brevoautomation.com https://www.facebook.com https://td.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://www.google.it/ads/ga-audiences https://www.facebook.com https://embed.tawk.to data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ int-ecommerce.nexi.it ecommerce.nexi.it www.google.com www.gstatic.com *.avada.io https://player.vimeo.com https://www.youtube.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com https://cdn.iubenda.com https://cs.iubenda.com https://www.iubenda.com https://sibautomation.com https://brevoautomation.com https://embed.tawk.to https://cdn.jsdelivr.net https://connect.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com https://fonts.googleapis.com http://fonts.googleapis.com https://cdnjs.cloudflare.com unsafe-inline https://embed.tawk.to 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com int-ecommerce.nexi.it ecommerce.nexi.it https://get.geojs.io *.avada.io https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com https://hits-i.iubenda.com https://consent.iubenda.com https://in-automate.sendinblue.com https://in-automate.brevo.com https://va.tawk.to https://embed.tawk.to wss://vsb36.tawk.to wss://*.tawk.to https://stats.g.doubleclick.net https://region1.google-analytics.com https://region1.analytics.google.com https://www.facebook.com https://viewlicense.adobe.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://checkout.stripe.com; script-src 'self' 'unsafe-inline' https://js.stripe.com https://static.cloudflareinsights.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://sucmuivflqohevxjhrav.supabase.co wss://sucmuivflqohevxjhrav.supabase.co https://basemaps.cartocdn.com https://*.basemaps.cartocdn.com https://api.stripe.com https://m.stripe.network https://static.cloudflareinsights.com https://eu.posthog.com; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://challenges.cloudflare.com https://maps.google.com https://www.google.com; worker-src 'self' blob:; manifest-src 'self'; media-src 'self' https:; upgrade-insecure-requests; report-uri /api/csp-report; report-to csp 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://*.bigcommerce.com https://www.googletagmanager.com https://js.smile.io https://static.klaviyo.com https://static-tracking.klaviyo.com https://static.elfsight.com https://maps.googleapis.com https://verify.authorize.net https://www.rapidscansecure.com https://fontawesome.com https://*.cvreports.com https://www.dwin1.com https://www.awin1.com https://*.gorgias.chat https://static.cloudflareinsights.com https://analytics.ahrefs.com https://lantern.roeyecdn.com; style-src 'self' 'unsafe-inline' https://*.bigcommerce.com https://fonts.googleapis.com https://fontawesome.com https://static.elfsight.com https://static.klaviyo.com https://fonts.bunny.net; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://fontawesome.com https://*.bigcommerce.com https://fonts.bunny.net; connect-src 'self' https://*.bigcommerce.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://maps.googleapis.com https://places.googleapis.com https://fast-api.klaviyo.com https://fast.a.klaviyo.com https://a.klaviyo.com https://static-forms.klaviyo.com https://api.smile.io https://events.smile.io https://platform.smile.io https://smile.cvreports.com https://social.cvreports.com https://ageverify.cvreports.com https://qa.cvreports.com https://storefront.cvreports.com https://auth.cvreports.com https://shop-assist.cvreports.com https://customerservice.cvreports.com https://awin.cvreports.com https://core.service.elfsight.com https://service-reviews-ultimate.elfsight.com https://static.elfsight.com https://*.gorgias.chat wss://*.gorgias.chat https://gorgias-convert.com https://cloudflareinsights.com https://static.cloudflareinsights.com https://pro.ip-api.com https://dashboard.searchatlas.com https://analytics.ahrefs.com https://verify.authorize.net https://www.trustpilot.com https://fontawesome.com https://www.rapidscansecure.com https://instocknotify-dzaqfaaeb4bpezf5.z01.azurefd.net https://my-observability-project-d4cd64.apm.us-central1.gcp.elastic.cloud:443; worker-src 'self' blob: https://*.gorgias.chat; frame-src 'self' https://www.youtube.com https://player.vimeo.com https://vimeo.com https://www.instagram.com https://www.trustpilot.com https://*.gorgias.chat https://*.bigcommerce.com https://verify.authorize.net https://static.elfsight.com https://*.klaviyo.com https://*.smile.io; object-src 'none'; base-uri 'self'; form-action 'self' https://*.bigcommerce.com; frame-ancestors 'self'; upgrade-insecure-requests; report-uri https://csp.cvreports.com/report; report-to csp; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.livechatinc.com *.googlesyndication.com *.klaviyo.com *.cloudfront.net *.facebook.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com api.sensepass.com api.sandbox.sensepass.com pay.sensepass.com pay.sandbox.sensepass.com ecom.sandbox.sensepass.com ecom.sensepass.com cdn.roomvo.com *.doubleclick.net/ *.publitas.com *.livechatinc.com *.googlesyndication.com *.pinterest.com *.klaviyo.com *.cloudfront.net *.facebook.com *.paycomonline.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.convertexperiments.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ pay.sensepass.com *.visualwebsiteoptimizer.com *.livechatinc.com *.googlesyndication.com *.google.co.in *.facebook.com *.jaipurliving.com *.klaviyo.com *.cloudfront.net *.taboola.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com cdn-4.convertexperiments.com *.convertexperiments.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googletagmanager.com tagmanager.google.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klear.com klear.com js.sensepass.com sensepass.com cdn.roomvo.com *.livechatinc.com *.googlesyndication.com *.publitas.com *.visualwebsiteoptimizer.com cnstrc.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com cdn.livechatinc.com *.facebook.net *.hotjar.com *.pinimg.com *.taboola.com *.pinterest.com *.gstatic.com *.klaviyo.com *.cloudfront.net *.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.braintreegateway.com tagmanager.google.com fonts.google.com https://static.klaviyo.com *.publitas.com *.klaviyo.com *.cloudfront.net *.taboola.com *.facebook.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.convertexperiments.com logx.optimizely.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googletagmanager.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klear.com klear.com www.roomvo.com cdn.livechatinc.com *.googlesyndication.com cnstrc.com bam.nr-data.net *.doubleclick.net *.taboola.com *.pinterest.com wss://ws.hotjar.com *.hotjar.com *.hotjar.io *.gstatic.com *.klaviyo.com *.cloudfront.net *.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' https://consent.cookiebot.com; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self' data:; connect-src 'self' https://5imast4qgh.execute-api.eu-central-1.amazonaws.com https://ymg13hd0le.execute-api.eu-central-1.amazonaws.com https://consentcdn.cookiebot.com; frame-src https://www.google.com https://consentcdn.cookiebot.com; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri https://csp.carhire-solutions.com/csp-reports 1
default-src 'self' litium.revolutionrace.se fbcdn.revolutionrace.se wss://fbcdn.revolutionrace.se *.edb.com *.cdn-apple.com *.klarnaservices.com *.klarnauserservices.com *.klarnacdn.net *.klarna.com *.klarnaevt.com *.kustom.co *.adyen.com www.paypal.com js.stripe.com *.google.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.gstatic.com ajax.googleapis.com fonts.googleapis.com maps.googleapis.com *.apptus.cloud *.storyblok.com *.symplify.com cdn-sitegainer.com *.cdn-sitegainer.com sitegainer.com wss://recording.sitegainer.com *.criteo.net *.criteo.com *.doubleclick.net *.emarsys.net *.mention-me.com *.imedia.cz *.scarabresearch.com *.spinnaker-js.com bat.bing.com www.seznam.cz tags.creativecdn.com *.kindlycdn.com *.kindly.ai wss://sage.kindly.ai revolutionrace.customerfirst.ai *.facebook.net *.tiktok.com *.snapchat.com *.pinterest.com *.bambuser.com *.facebook.com www.pinterest.se *.cloudflare.com *.digitaloceanspaces.com *.distancify.workers.dev cdn.jsdelivr.net maxcdn.bootstrapcdn.com player.vimeo.com pro.ip-api.com recommender.scarabresearch.com s.pinimg.com sc-static.net vimeo.com ws-eu.pusher.com wss://ws-eu.pusher.com 'unsafe-inline' 'unsafe-eval'; img-src data: blob: https://* 'self'; media-src https://*; worker-src 'self' blob:; frame-src analytics.revolutionrace.se *.mention-me.com mention-me.com *.google.com *.adyen.com *.paypal.com *.kustom.co *.sitegainer.com *.criteo.com revolutionrace.customerfirst.ai; frame-ancestors https://app.storyblok.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; connect-src data: *; report-uri /api/csp-report; report-to csp-endpoint; 1
object-src 'none'; script-src 'self' 'report-sample' https://www.googletagmanager.com https://www.google-analytics.com https://cse.google.com https://www.google.com https://ep2.adtrafficquality.google 'sha256-kbSBue5+KI3QyDT+Y49cVpozCxbtP52DMNRotJOx+nY=' cdnjs.cloudflare.com; style-src 'self' 'report-sample' 'unsafe-inline' https://fonts.googleapis.com https://www.google.com; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'unsafe-inline' 'self' *.zoon.by zoon.by *.zoon.kz zoon.kz *.zoon.ru zoon.ru fonts.googleapis.com fonts.gstatic.com www.gstatic.com data: blob: yandex.com yandex.net *.yandex.net yandex.ru *.yandex.ru yastatic.net *.adfox.ru adfox.ru *.adriver.ru adriver.ru *.yandexadexchange.net yandexadexchange.net *.googleusercontent.com i.ytimg.com *.googlevideo.com *.gstatic.com challenges.cloudflare.com static.cloudflareinsights.com rutube.ru *.rutube.ru vk.com *.vk.com vkvideo.ru *.vkvideo.ru userapi.com *.userapi.com *.vkuser.net *.vkuserlive.net mc.webvisor.com mc.webvisor.org mc.yandex.by mc.yandex.com mc.yandex.com.tr mc.yandex.kz mc.yandex.md mc.yandex.ru mc.yandex.uz mc.yandex.az mc.yandex.tm mc.yandex.com.ge ymkvww9tj4.ru cdn.jsdelivr.net; script-src 'self' *.zoon.by zoon.by *.zoon.kz zoon.kz *.zoon.ru zoon.ru yandex.com yandex.net *.yandex.net yandex.ru *.yandex.ru yastatic.net *.adfox.ru adfox.ru *.adriver.ru adriver.ru *.yandexadexchange.net yandexadexchange.net challenges.cloudflare.com static.cloudflareinsights.com s.ytimg.com mc.webvisor.com mc.webvisor.org mc.yandex.by mc.yandex.com mc.yandex.com.tr mc.yandex.kz mc.yandex.md mc.yandex.ru mc.yandex.uz mc.yandex.az mc.yandex.tm mc.yandex.com.ge ymkvww9tj4.ru wss://mc.webvisor.com wss://mc.webvisor.org wss://mc.yandex.by wss://mc.yandex.com wss://mc.yandex.com.tr wss://mc.yandex.kz wss://mc.yandex.md wss://mc.yandex.ru wss://mc.yandex.uz wss://mc.yandex.com.ge cdn.jsdelivr.net 'nonce-Q3V2MMnEwE5G0U3d5k3pUHOp'; script-src-elem 'report-sample' 'nonce-Q3V2MMnEwE5G0U3d5k3pUHOp' 'strict-dynamic'; style-src 'unsafe-inline' 'report-sample' 'self' *.zoon.by zoon.by *.zoon.kz zoon.kz *.zoon.ru zoon.ru *.gstatic.com fonts.googleapis.com fonts.gstatic.com blob:; frame-src 'self' *.zoon.by zoon.by *.zoon.kz zoon.kz *.zoon.ru zoon.ru blob: yandex.com yandex.net *.yandex.net yandex.ru *.yandex.ru yastatic.net *.adfox.ru adfox.ru *.adriver.ru adriver.ru *.yandexadexchange.net yandexadexchange.net *.gdelu-pro.ru gdelu-pro.ru challenges.cloudflare.com static.cloudflareinsights.com rutube.ru *.rutube.ru googlevideo.com *.googlevideo.com youtube.com *.youtube.com youtube-nocookie.com *.youtube-nocookie.com *.ytimg.com ytimg.com vk.com *.vk.com vkvideo.ru *.vkvideo.ru userapi.com *.userapi.com *.vkuser.net *.vkuserlive.net mc.webvisor.com mc.webvisor.org mc.yandex.by mc.yandex.com mc.yandex.com.tr mc.yandex.kz mc.yandex.md mc.yandex.ru mc.yandex.uz mc.yandex.az mc.yandex.tm mc.yandex.com.ge ymkvww9tj4.ru wss://mc.webvisor.com wss://mc.webvisor.org wss://mc.yandex.by wss://mc.yandex.com wss://mc.yandex.com.tr wss://mc.yandex.kz wss://mc.yandex.md wss://mc.yandex.ru wss://mc.yandex.uz wss://mc.yandex.com.ge cdn.jsdelivr.net master-hauz.ru etro-mejk-ap-salon.ru inpromed-med.ru; connect-src 'self' *.zoon.by zoon.by *.zoon.kz zoon.kz *.zoon.ru zoon.ru yandex.com yandex.net *.yandex.net yandex.ru *.yandex.ru yastatic.net *.adfox.ru adfox.ru *.adriver.ru adriver.ru *.yandexadexchange.net yandexadexchange.net googlevideo.com *.googlevideo.com youtube.com *.youtube.com youtube-nocookie.com *.youtube-nocookie.com *.ytimg.com ytimg.com mc.webvisor.com mc.webvisor.org mc.yandex.by mc.yandex.com mc.yandex.com.tr mc.yandex.kz mc.yandex.md mc.yandex.ru mc.yandex.uz mc.yandex.az mc.yandex.tm mc.yandex.com.ge ymkvww9tj4.ru wss://mc.webvisor.com wss://mc.webvisor.org wss://mc.yandex.by wss://mc.yandex.com wss://mc.yandex.com.tr wss://mc.yandex.kz wss://mc.yandex.md wss://mc.yandex.ru wss://mc.yandex.uz wss://mc.yandex.com.ge cdn.jsdelivr.net wss://ws.zoon.ru:2481 wss://ws.zoon.ru:17375 https://ws.zoon.ru:17375; object-src 'none'; base-uri 'self'; form-action 'self'; report-to csp-public; report-uri /csp.php?csp_area=public&user_id=50251691&secret=eeGkeps9 1
object-src 'none';base-uri 'self';script-src 'nonce-zWlpt-lKlaMGbUS4jUO95w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.yotpo.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com unsafe-inline *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com www.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-src 'self' https://bioland.we.network/; frame-ancestors 'self' https://bioland.we.network/ https://my.dlv.de/ 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com *.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.cardinalcommerce.com *.authorize.net *.weltpixel.com *.vimeo.com *.createaclickablemap.com createaclickablemap.com *.facebook.com *.signifyd.com *.facebook.net *.avada.io *.gstatic.com *.cloudflare.com *.cloudflareinsights.com challenges.cloudflare.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.bootstrapcdn.com *.googletagmanager.com *.facebook.net *.elfsightcdn.com *.elfsight.com poshtextiles.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.avada.io *.google-analytics.com *.fontawesome.com *.bootstrapcdn.com *.googletagmanager.com *.facebook.net *.elfsightcdn.com *.elfsight.com *.signifyd.com *.gstatic.com *.cloudflare.com *.cloudflareinsights.com challenges.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.googleapis.com *.google-analytics.com *.bootstrapcdn.com *.googletagmanager.com *.facebook.net *.elfsightcdn.com *.youtube.com *.elfsight.com *.braintreegateway.com *.cloudflare.com *.cloudflareinsights.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.createaclickablemap.com *.facebook.com *.elfsightcdn.com *.youtube.com *.facebook.net *.elfsight.com *.signifyd.com *.avada.io *.gstatic.com *.cloudflare.com *.cloudflareinsights.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://poshtextiles.com/cspreport/report; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com *.bootstrapcdn.com *.cloudflare.com 'self' data: *.hotjar.com *.hotjar.io data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.facebook.com *.oppwa.com oppwa.com *.mastercard.com *.iesnare.com *.requirejs.org *.visa.com 'self' connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.doubleclick.net *.googlesyndication.com *.oppwa.com oppwa.com *.mastercard.com *.iesnare.com *.requirejs.org *.visa.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: *.googleapis.com *.openstreetmap.org *.googlesyndication.com *.google.com *.google.rs *.google.hr *.google.ba *.google.si *.google.bg *.google.me *.google.mk *.google.nl *.google.de *.google.be *.google.fr *.googleadservices.com www.facebook.com trengo.s3.eu-central-1.amazonaws.com ecom-stage.iutecredit.mk ecom.iutecredit.mk ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.oppwa.com oppwa.com *.mastercard.com *.iesnare.com *.requirejs.org *.visa.com magefan.com cm.magefan.com *.disqus.com connect.facebook.net graph.facebook.com business.facebook.com *.cmi.co.ma *.iprom.net iprom.net yandex.com yandex.md *.yandex.md *.yandex.com yandex.ru *.yandex.ru *.yads.tech yads.tech *.yango.com *.doubleclick.net t.adx.opera.com *.pandorashop.si *.pandorashop.hr *.pandorashop.ba *.pandorashop.rs *.pandorashop.mk *.pandorashop.me *.pandorashop-sa.com *.pandorashop.ma *.pandorashop.mt *.pandorashop-ks.com *.pandorashop.md *.tamara.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com tagmanager.google.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com https://widget-cdn.boxnow.hr *.googlesyndication.com *.googleadservices.com *.google.com *.google.rs *.google.hr *.google.ba *.google.si *.google.bg *.google.me *.google.mk www.facebook.com *.widget.trengo.eu map.gls-croatia.com map.gls-czech.com map.gls-hungary.com map.gls-romania.com map.gls-slovenia.com map.gls-slovakia.com map.gls-serbia.com *.openstreetmap.org ecom-stage.iutecredit.mk ecom.iutecredit.mk chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.jquery.com *.oppwa.com oppwa.com *.mastercard.com *.visa.com *.iesnare.com *.requirejs.org *.disqus.com connect.facebook.net graph.facebook.com business.facebook.com *.hotjar.com *.hotjar.io onesignal.com *.onesignal.com *.criteo.com *.adsmurai.com gateway.bankart.si yandex.com yandex.md *.yandex.md *.yandex.com yandex.ru *.yandex.ru *.yads.tech yads.tech *.yango.com *.doubleclick.net t.adx.opera.com *.iprom.net iprom.net static.cloudflareinsights.com *.tamara.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.bootstrapcdn.com ecom-stage.iutecredit.mk ecom.iutecredit.mk downloads.mailchimp.com *.oppwa.com oppwa.com *.mastercard.com *.iesnare.com *.requirejs.org *.visa.com onesignal.com *.onesignal.com *.iprom.net iprom.net *.tamara.co 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.widget.trengo.eu *.pandorashop.si *.pandorashop.hr *.pandorashop.ba *.pandorashop.rs *.pandorashop.mk *.pandorashop.me *.pandorashop-sa.com *.pandorashop.ma *.pandorashop.mt *.pandorashop-ks.com *.pandorashop.md *.tamara.co 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.googleapis.com https://widget-cdn.boxnow.hr *.openstreetmap.org *.google.com *.google.rs *.google.hr *.google.ba *.google.si *.google.bg *.google.me *.google.mk *.google.nl *.google.de *.google.be *.google.fr *.googlesyndication.com *.doubleclick.net www.facebook.com *.trengo.eu map.gls-croatia.com map.gls-czech.com map.gls-hungary.com map.gls-romania.com map.gls-slovenia.com map.gls-slovakia.com map.gls-serbia.com ecom-stage.iutecredit.mk ecom.iutecredit.mk form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.oppwa.com oppwa.com *.mastercard.com *.iesnare.com *.requirejs.org *.visa.com connect.facebook.net graph.facebook.com business.facebook.com wss://ws.hotjar.com *.hotjar.io yandex.com *.yandex.md *.yandex.com yandex.ru *.yandex.ru *.yads.tech *.yango.com cm.g.doubleclick.net t.adx.opera.com *.pandorashop.si *.pandorashop.hr *.pandorashop.ba *.pandorashop.rs *.pandorashop.mk *.pandorashop.me *.pandorashop-sa.com *.pandorashop.ma *.pandorashop.mt *.pandorashop-ks.com *.pandorashop.md *.tamara.co 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src yandex.com yandex.md *.yandex.md *.yandex.com yandex.ru *.yandex.ru *.yads.tech yads.tech *.yango.com *.doubleclick.net t.adx.opera.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/  https://widget.trustpilot.com;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://appleid.cdn-apple.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com *.myheritage.cz https://www.myheritage.cz  'unsafe-eval' 'nonce-b370ca3d375cf2110618da1744e7bc64' 'strict-dynamic' https://widget.trustpilot.com https://invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style  https://widget.trustpilot.com;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io https://www.google.com/recaptcha/enterprise/* https://www.google.com/recaptcha/enterprise/ https://www.google.com/recaptcha/enterprise/clr https://www.google.com/recaptcha/ https://maps.googleapis.com https://people.googleapis.com https://translate-pa.googleapis.com *.myheritage.cz https://widget.trustpilot.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:  https://widget.trustpilot.com https://*.trustpilot.com;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=report&canonical_page_id=/company/home/ 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.authorize.net 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://www.googletagmanager.com/ *.authorize.net www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://firebasestorage.googleapis.com 'self' data: www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io *.shopify.com *.authorize.net www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io *.authorize.net *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-qNj9PcgGzIYzXju6SXefYw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' wp-themes.com *.gravatar.com *.w.org *.wp-themes.com *.wpengine.com *.cloudflare.com *.jsdelivr.net *.zohocdn.com *.zohopublic.com *.zoho.com *.pagesense.io *.licdn.com *.facebook.net *.facebook.com *.outfunnel.com *.tiktok.com *.gstatic.com *.google.com *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.googleapis.com *.youtube.com *.bing.com *.nytsys.com *.lfeeder.com *.app-us1.com *.doubleclick.net *.clarity.ms *.adroll.com *.tapad.com *.adsrvr.org; connect-src 'self' wp-themes.com *.gravatar.com *.w.org *.wp-themes.com *.wpengine.com *.cloudflare.com *.jsdelivr.net *.zohocdn.com *.zohopublic.com *.zoho.com *.pagesense.io *.licdn.com *.facebook.net *.facebook.com *.outfunnel.com *.tiktok.com *.gstatic.com *.google.com *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.googleapis.com *.youtube.com *.bing.com *.nytsys.com *.lfeeder.com *.app-us1.com *.doubleclick.net *.clarity.ms *.adroll.com *.tapad.com *.adsrvr.org; style-src 'self' 'unsafe-inline' wp-themes.com *.gravatar.com *.w.org *.wp-themes.com *.wpengine.com *.cloudflare.com *.jsdelivr.net *.zohocdn.com *.zohopublic.com *.zoho.com *.pagesense.io *.licdn.com *.facebook.net *.facebook.com *.outfunnel.com *.tiktok.com *.gstatic.com *.google.com *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.googleapis.com *.youtube.com *.bing.com *.nytsys.com *.lfeeder.com *.app-us1.com *.doubleclick.net *.clarity.ms *.adroll.com *.tapad.com *.adsrvr.org; img-src 'self' data: wp-themes.com *.gravatar.com *.w.org *.wp-themes.com *.wpengine.com *.cloudflare.com *.jsdelivr.net *.zohocdn.com *.zohopublic.com *.zoho.com *.pagesense.io *.licdn.com *.facebook.net *.facebook.com *.outfunnel.com *.tiktok.com *.gstatic.com *.google.com *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.googleapis.com *.youtube.com *.bing.com *.nytsys.com *.lfeeder.com *.app-us1.com *.doubleclick.net *.clarity.ms *.adroll.com *.tapad.com *.adsrvr.org; font-src 'self' data: *.gstatic.com *.zohocdn.com; object-src 'none'; frame-src 'self' wp-themes.com *.gravatar.com *.w.org *.wp-themes.com *.wpengine.com *.cloudflare.com *.jsdelivr.net *.zohocdn.com *.zohopublic.com *.zoho.com *.pagesense.io *.licdn.com *.facebook.net *.facebook.com *.outfunnel.com *.tiktok.com *.gstatic.com *.google.com *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.googleapis.com *.youtube.com *.bing.com *.nytsys.com *.lfeeder.com *.app-us1.com *.doubleclick.net *.clarity.ms *.adroll.com *.tapad.com *.adsrvr.org; form-action 'self'; upgrade-insecure-requests; block-all-mixed-content; manifest-src 'self'; worker-src 'self'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' maps.googleapis.com ssl.google-analytics.com www.googletagmanager.com maps.google.com wasm-eval connect.facebook.net verify.uk.littlepay.com; frame-ancestors 'self' http://www.rslcontent.co.uk; report-uri https://tbkb01.report-uri.com/r/t/csp/reportOnly; report-to default 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: storage.googleapis.com *.googletagmanager.com www.google.com www.gstatic.com app-sj07.marketo.com munchkin.marketo.net cdnjs.cloudflare.com platform-api.sharethis.com static.srcspot.com www.google-analytics.com ssl.google-analytics.com www.googleadservices.com *.doubleclick.net connect.facebook.net snap.licdn.com; style-src 'self' 'unsafe-inline' storage.googleapis.com fonts.googleapis.com cdnjs.cloudflare.com; img-src 'self' data: blob: https:; font-src 'self' data: storage.googleapis.com fonts.gstatic.com; connect-src 'self' storage.googleapis.com www.google-analytics.com region1.google-analytics.com analytics.google.com *.doubleclick.net app-sj07.marketo.com munchkin.marketo.net platform-api.sharethis.com static.srcspot.com www.google.com px.ads.linkedin.com; frame-src 'self' www.googletagmanager.com www.google.com player.vimeo.com www.youtube.com www.youtube-nocookie.com apply.workable.com app-sj07.marketo.com; media-src 'self' data: blob: storage.googleapis.com; object-src 'none'; base-uri 'self'; form-action 'self' app-sj07.marketo.com; frame-ancestors 'self'; report-uri /csp-report; report-to csp-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://mc.yandex.ru https://mc.yandex.com https://ym5mltbu4n.ru https://connect.facebook.net https://www.googleadservices.com https://googleads.g.doubleclick.net https://static.cloudflareinsights.com https://openfpcdn.io https://*.clarity.ms https://www.gstatic.com https://analytics.tiktok.com https://api-maps.yandex.ru https://yastatic.net https://core-renderer-tiles.maps.yandex.net https://mw2.breezyx.space; style-src 'self' 'unsafe-inline' https://cdn.alser.kz https://fonts.googleapis.com https://unicons.iconscout.com https://mw2.breezyx.space; img-src 'self' data: https:; font-src 'self' data: https://s3s.alser.kz https://cdn.alser.kz https://fonts.gstatic.com https://unicons.iconscout.com; connect-src 'self' https://img.alser.kz https://s3s.alser.kz https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://region1.analytics.google.com https://mpc-prod-23-s6uit34pua-ue.a.run.app https://5z-2b6b7616f94640c2840d1841e1ac24c3.ecs.us-east-1.on.aws https://mc.yandex.ru https://mc.yandex.com https://mc.yandex.kz https://mc.yandex.md https://mc.yandex.by wss://mc.yandex.ru wss://mc.yandex.com https://geocode-maps.yandex.ru https://log.api-maps.yandex.ru https://yandex.ru https://www.google.com https://www.google.kz https://www.googleadservices.com https://www.facebook.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://firebase.googleapis.com https://firebaseinstallations.googleapis.com https://fcmregistrations.googleapis.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://*.clarity.ms https://mw2.breezyx.space https://mm.breezyx.space https://api.it4profit.com https://sessions.bugsnag.com; media-src 'self' https://s3s.alser.kz; worker-src 'self' blob:; frame-src 'self' https://td.doubleclick.net https://www.googletagmanager.com https://www.youtube.com https://youtube.com https://youtu.be https://player.vimeo.com https://vimeo.com https://s3s.alser.kz https://cdn.alser.kz https://www.facebook.com https://mc.yandex.ru https://mc.yandex.com https://mc.yandex.by; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://www.facebook.com; object-src 'none'; report-uri /api/security/csp-report; report-to csp-endpoint; 1
default-src 'self' ciuk.test ciuk.hactar.work *.careinternational.org.uk https://careinternationaluk.ams3.cdn.digitaloceanspaces.com; script-src 'self' 'nonce-673dbce4-90b2-46d6-9bbd-e0d733393cbd' 'nonce-a92edb51-a967-4845-95ae-84212c30df23' 'nonce-74d623f7-b0fa-47d7-9417-f15c244bad72' 'nonce-cabd0637-b4b1-49c4-8abd-3fa94a551e1c' 'nonce-d95029a9-6536-41ab-bd21-5eaa4b58a267' 'nonce-6ada93ef-8449-4da6-af33-fe0f9d054d6d' 'nonce-cb1e2492-b160-469b-80e6-310cfcc9d7d9' 'nonce-84e06150-a96d-48f2-a477-50338d992d39' ciuk.test ciuk.hactar.work *.careinternational.org.uk https://careinternationaluk.ams3.cdn.digitaloceanspaces.com *.checkout.visa.com *.fundraiseup.com *.paypal.com *.paypalobjects.com *.plaid.com *.src.mastercard.com *.stripe.com cdn.fundraiseup.com m.stripe.network pay.google.com *.googletagmanager.com api.olark.com cdn-ukwest.onetrust.com knrpc.olark.com s3.amazonaws.com/downloads.mailchimp.com/js/mc-validate.js static.olark.com; script-src-elem 'self' 'unsafe-inline' *.checkout.visa.com *.fundraiseup.com *.paypal.com *.paypalobjects.com *.plaid.com *.src.mastercard.com *.stripe.com cdn.fundraiseup.com m.stripe.network pay.google.com *.googletagmanager.com api.olark.com cdn-ukwest.onetrust.com knrpc.olark.com s3.amazonaws.com/downloads.mailchimp.com/js/mc-validate.js static.olark.com bat.bing.com connect.facebook.net www.google.com googleads.g.doubleclick.net c5.adalyser.com *.gstatic.com cdn-ukwest.onetrust.com; style-src 'self' ciuk.test ciuk.hactar.work *.careinternational.org.uk https://careinternationaluk.ams3.cdn.digitaloceanspaces.com 'unsafe-inline' careinternational.org.uk careinternationaluk.ams3.cdn.digitaloceanspaces.com https://careinternational.org.uk https://careinternationaluk.ams3.cdn.digitaloceanspaces.com cdn-images.mailchimp.com cdn-images.mailchimp.com/embedcode/classic-061523.css static.olark.com; style-src-attr 'self' ciuk.test ciuk.hactar.work *.careinternational.org.uk https://careinternationaluk.ams3.cdn.digitaloceanspaces.com 'unsafe-inline' static.olark.com careinternational.org.uk careinternationaluk.ams3.cdn.digitaloceanspaces.com; style-src-elem 'self' ciuk.test ciuk.hactar.work *.careinternational.org.uk https://careinternationaluk.ams3.cdn.digitaloceanspaces.com 'unsafe-inline' careinternational.org.uk careinternationaluk.ams3.cdn.digitaloceanspaces.com https://careinternational.org.uk https://careinternationaluk.ams3.cdn.digitaloceanspaces.com cdn-images.mailchimp.com static.olark.com; object-src 'none'; base-uri 'self'; connect-src 'self' ciuk.test ciuk.hactar.work *.careinternational.org.uk https://careinternationaluk.ams3.cdn.digitaloceanspaces.com *.checkout.visa.com *.fundraiseup.com *.mastercard.com *.paypal.com *.paypalobjects.com *.plaid.com *.stripe.com api.addressy.com fndrsp-checkout.net fndrsp.net google.com/pay knrpc.olark.com pay.google.com cdn-ukwest.onetrust.com geolocation.onetrust.com privacyportal-uk.onetrust.com adservice.google.com *.google.co.ug *.google.com *.analytics.google.com *.onetrust.com at.bing.com *.google.com stats.g.doubleclick.net adservice.google.com *.google.co.uk adservice.google.com www.facebook.com; font-src 'self' ciuk.test ciuk.hactar.work *.careinternational.org.uk https://careinternationaluk.ams3.cdn.digitaloceanspaces.com *.fundraiseup.com *.stripe.com static.olark.com; frame-src 'self' ciuk.test ciuk.hactar.work *.careinternational.org.uk https://careinternationaluk.ams3.cdn.digitaloceanspaces.com platform.twitter.com player.vimeo.com syndication.twitter.com w.soundcloud.com www.youtube.com www.youtube-nocookie.com/ static.olark.com *.fundraiseup.com *.stripe.com *.src.mastercard.com *.checkout.visa.com *.plaid.com *.paypal.com pay.google.com www.google.com *.doubleclick.net *.paypalobjects.com *.google.com; img-src 'self' ciuk.test ciuk.hactar.work *.careinternational.org.uk https://careinternationaluk.ams3.cdn.digitaloceanspaces.com 'unsafe-inline' abs.twimg.com pbs.twimg.com platform.twitter.com syndication.twitter.com ton.twimg.com www.facebook.com www.google.co.uk www.google.com data: *.fundraiseup.com ucarecdn.com pay.google.com *.paypalobjects.com log.olark.com t.paypal.com cdn-ukwest.onetrust.com bat.bing.com ad.doubleclick.net c5.adalyser.com *.google.es *.googletagmanager.com *.gstatic.com; manifest-src 'self' ciuk.test ciuk.hactar.work *.careinternational.org.uk https://careinternationaluk.ams3.cdn.digitaloceanspaces.com; media-src 'self'; worker-src 'self'; report-uri /csp/report/; 1
font-src *.fontawesome.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.bolt.com *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.bolt.com https://www.google.com/recaptcha/ www.googletagmanager.com *.certcapture.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.yotpo.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.certcapture.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.yotpo.com yotpo-editor-production.s3.amazonaws.com *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.bolt.com *.commerce-quick-checkout.com http://localhost:8082 https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.certcapture.com chimpstatic.com downloads.mailchimp.com *.list-manage.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.yotpo.com https://www.googletagmanager.com tagmanager.google.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.certcapture.com downloads.mailchimp.com *.fontawesome.com unsafe-inline assets.braintreegateway.com *.yotpo.com *.googleapis.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.bolt.com *.certcapture.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.yotpo.com *.google-analytics.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.fontawesome.com live.store-locator.nx.iwdfun.com platform-api.sharethis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.bolt.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.bolt.com https://www.google.com/recaptcha/ *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com stats.g.doubleclick.net api.smooch.io www.google.com.mx grupocoresa.zendesk.com store-locator.iwdagency.com live.store-locator.nx.iwdfun.com maps.googleapis.com platform-api.sharethis.com t.sharethis.com *.opencontrol.mx *.kaptcha.com *.openpay.pe *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.openpay.mx *.openpay.co *.paynet.com.mx *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.zdassets.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com grupocoresa.zendesk.com www.google.com.mx store-locator.iwdagency.com live.store-locator.nx.iwdfun.com maps.googleapis.com mcprod.grupocoresa.com/ www.grupocoresa.com platform-api.sharethis.com l.sharethis.com platform-cdn.sharethis.com sync.sharethis.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.postimg.cc *.openpay.mx *.gstatic.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com maps.gstatic.com accounts.google.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.bolt.com *.commerce-quick-checkout.com http://localhost:8082 https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com *.magento-datasolutions.com *.magento-ds.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com stats.g.doubleclick.net api.smooch.io www.google.com.mx grupocoresa.zendesk.com store-locator.iwdagency.com live.store-locator.nx.iwdfun.com maps.googleapis.com platform-api.sharethis.com buttons-config.sharethis.com t.sharethis.com *.s3.amazonaws.com *.openpay.co *.openpay.pe *.google-analytics.com *.google.com/recaptcha/ *.gstatic.com/recaptcha/ *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.cloudflare.com *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net maps.gstatic.com *.zdassets.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.fontawesome.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com live.store-locator.nx.iwdfun.com platform-api.sharethis.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.tagmanager.google.com *.googletagmanager.com fonts.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.bolt.com api.magento.com performance.typekit.net *.magento-datasolutions.com *.magento-ds.com *.adobe.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com stats.g.doubleclick.net wss://api.smooch.io www.google.com.mx grupocoresa.zendesk.com store-locator.iwdagency.com live.store-locator.nx.iwdfun.com maps.googleapis.com l.sharethis.com bcp.crwdcntrl.net *.openpay.mx *.openpay.co *.openpay.pe *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.zdassets.com *.zendesk.com *.zopim.com wss://widget-mediator.zopim.com *.widget-mediator.zopim.com *.grupocoresa.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net cdnstatic.edises.it cdn.edises.it *.cloudflare.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.googleapis.com maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://static.addtoany.com/ *.tiktok.com cdnstatic.edises.it cdn.edises.it *.clarity.ms *.criteo.net *.criteo.com stats.g.doubleclick.net *.cloudflare.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.facebook.com https://firebasestorage.googleapis.com *.tiktok.com cdnstatic.edises.it cdn.edises.it *.clarity.ms *.criteo.net *.criteo.com stats.g.doubleclick.net *.cloudflare.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.googleapis.com www.gstatic.com pay.google.com google.com/pay ecomms2s.sella.it sandbox.gestpay.net img.riskified.com flagpedia.net https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com https://static.addtoany.com/ https://maps.googleapis.com *.googletagmanager.com *.facebook.net www.termsfeed.com *.avada.io *.tiktok.com cdnstatic.edises.it cdn.edises.it *.clarity.ms *.criteo.net *.criteo.com stats.g.doubleclick.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com www.google.com www.gstatic.com pay.google.com beacon.riskified.com maps.googleapis.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net cdnstatic.edises.it cdn.edises.it *.cloudflare.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://stats.addtoany.com/menu https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com https://get.geojs.io *.avada.io *.tiktok.com cdnstatic.edises.it cdn.edises.it *.clarity.ms *.criteo.net *.criteo.com stats.g.doubleclick.net *.cloudflare.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com www.gstatic.com pay.google.com google.com/pay ecomms2s.sella.it sandbox.gestpay.net c.riskified.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.midtrans.com https://api.midtrans.com https://app.sandbox.midtrans.com https://www.google-analytics.com https://ssl.google-analytics.com https://connect.facebook.net https://www.google.com https://www.gstatic.com https://maps.googleapis.com https://cdnjs.cloudflare.com https://ajax.googleapis.com https://www.youtube.com https://s3-ap-southeast-1.amazonaws.com https://www.googletagmanager.com https://www.googleadservices.com https://analytics.tiktok.com https://*.tiktok.com https://*.tiktokw.us https://*.doubleclick.net https://*.stape.my https://*.gr-cdn.com https://*.gr-wcon.com https://*.getresponse.com https://*.magicblocks.com https://*.firebaseio.com https://*.hs-scripts.com https://*.hs-analytics.net https://*.hscollectedforms.net https://*.hs-banner.com https://*.s3-ap-southeast-1.amazonaws.com https://www.waterbom-bali.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://www.gstatic.com https://*.magicblocks.com https://*.gr-cdn.com https://*.s3-ap-southeast-1.amazonaws.com https://www.waterbom-bali.com; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com https://*.magicblocks.com https://www.waterbom-bali.com; img-src 'self' data: blob: https://www.facebook.com https://static.tacdn.com https://www.paypalobjects.com https://www.google-analytics.com https://maps.gstatic.com https://maps.googleapis.com https://www.googletagmanager.com https://analytics.google.com https://*.analytics.google.com https://*.doubleclick.net https://analytics.tiktok.com https://*.tiktok.com https://*.magicblocks.com https://*.gr-cdn.com https://www.google.com https://www.google.co.id https://www.google.com.vn https://*.hubspot.com https://*.hsforms.com https://dnlbo7fgjcc7f.cloudfront.net https://www.googleadservices.com https://www.google.com.au https://www.google.com.tw https://www.google.com.sg https://www.google.co.jp https://www.google.co.nz https://www.google.co.th https://www.google.co.in https://www.google.com.my https://www.google.com.ph https://www.google.it https://www.google.jo https://www.waterbom-bali.com; connect-src 'self' https://api.midtrans.com https://app.midtrans.com https://api.sandbox.midtrans.com https://app.sandbox.midtrans.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://connect.facebook.net https://www.facebook.com https://www.googletagmanager.com https://www.googleadservices.com https://*.doubleclick.net https://www.google.com https://www.google.co.id https://analytics.tiktok.com https://*.tiktok.com https://*.tiktokw.us https://*.stape.my https://*.gr-cdn.com https://*.gr-wcon.com https://*.getresponse.com https://*.magicblocks.com wss://*.magicblocks.com https://*.firebaseio.com wss://*.firebaseio.com https://fonts.googleapis.com https://*.qiscus.com wss://*.qiscus.com https://*.hscollectedforms.net https://*.hubspot.com https://*.hsforms.com https://www.google.com.au https://www.google.co.nz https://www.google.com.tw https://www.waterbom-bali.com; frame-src https://app.midtrans.com https://app.sandbox.midtrans.com https://www.youtube.com https://www.google.com https://*.qiscus.com https://www.paypal.com https://www.googletagmanager.com https://www.facebook.com https://*.magicblocks.com https://*.doubleclick.net https://*.firebaseio.com https://api.midtrans.com https://www.rsa3dsauth.co.uk https://authentication.cardinalcommerce.com; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; report-uri /csp/report 1
default-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'report-sample' 'self' https: 'nonce-{NONCE}'; style-src 'unsafe-inline' 'report-sample' 'self'; object-src 'none'; base-uri 'self'; connect-src 'self' https://sbauae.faulio.com https://*.kwikmotion.com; font-src 'self' data:; img-src 'self' https://sbauae.faulio.com data:; manifest-src 'self'; media-src 'self'; worker-src 'none'; 1
form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.facebook.net webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; frame-ancestors *.hana.ondemand.com 'self'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'unsafe-inline' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.klevu.com *.ksearchnet.com magefan.com cm.magefan.com *.facebook.com *.facebook.net https://www.magezon.com ozow-live-cdn.s3.eu-west-1.amazonaws.com *.cloudflare.com https://cdn.klarna.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com *.cdninstagram.com *.google.com *.google.lv *.google.co.za *.google.com.na *.google.na *.zopim.com *.nosto.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.zopim.io *.sfdr.co sfdr.co *.tawk.to tawk.link *.tawk.link *.jsdelivr.net *.azurewebsites.net maps.googleapis.com app.mobicredwidget.co.za media.flixcar.com rt.flix360.com assets.secure.checkout.visa.com *.adobedtm.com data: 'self' 'unsafe-inline'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.googleapis.com *.cloudflare.com *.jsdelivr.net www.gstatic.com media.flixcar.com 'unsafe-inline' data: https://js.klevu.com http://www.ctm.co.ke 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com *.amazonaws.com *.googleapis.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; font-src https://www.roomvo.com fonts.gstatic.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.fonts.googleapis.com *.gstatic.com 'unsafe-inline' data: *.cloudflare.com *.googleapis.com *.zopim.com *.tawk.to *.jsdelivr.net media.flixfacts.com data: 'self' 'unsafe-inline'; connect-src https://agents.engati.ai wt.omnisendlink.com dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com cdn.ampproject.org https://*.ingest.sentry.io *.klevu.com *.ksearchnet.com ekr.zdassets.com/ *.facebook.com *.facebook.net https://get.geojs.io *.avada.io embed.payjustnow.com *.payjustnow.com *.cloudflare.com *.paypal.com *.googleapis.com *.addthis.com *.cardinalcommerce.com https://graph.instagram.com *.testfreaks.com *.google.com *.nosto.com *.hotjar.io *.hotjar.com *.doubleclick.net *.zendesk.com *.tawk.to wss://*.tawk.to *.tawk.link *.addthisedge.com *.what3words.com vsb111.tawk.to ekr.zdassets.com api.magento.com commerce.adobedc.net app.mobicredwidget.co.za wss://widget-mediator.zopim.com bam.nr-data.net *.googletagmanager.com security-hub.vaimo.network 'unsafe-eval' data: cdn.plyr.io noembed.com 'self' 'unsafe-inline'; frame-src https://unicons.iconscout.com https://youtube.com fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.facebook.com *.facebook.net *.google.com embed.payjustnow.com *.payjustnow.com *.addthis.com *.pinterest.com *.nosto.com *.issuu.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.criteo.net *.criteo.com webchat.jdg.co.za *.jdg.co.za www.youtube.com 'self' 'unsafe-inline'; script-src https://unicons.iconscout.com https://agents.engati.ai https://bb.branding-element.com *.convertexperiments.com www.roomvo.com omnisnippet1.com bat.bing.com *.omnisnippet1.com static.ads-twitter.com analytics.tiktok.com https://s.pinterest.com https://scripts.clarity.ms assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.ampproject.org raw.githubusercontent.com chimpstatic.com downloads.mailchimp.com *.list-manage.com https://polyfill-fastly.io https://browser.sentry-cdn.com js.klevu.com *.ksearchnet.com s7.addthis.com *.facebook.com *.facebook.net *.avada.io *.google.com embed.payjustnow.com *.payjustnow.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.zopim.com *.videoly.co sfdr.co *.cnetcontent.com *.cloudfront.net *.klevu.com *.google.lv *.google.co.za *.google.com.na *.google.na *.cloudflare.com *.cloudflareinsights.com *.nosto.com *.hotjar.com *.googletagmanager.com *.criteo.net *.criteo.com *.sfdr.co *.tawk.to *.tawk.link *.jsdelivr.net *.mouseflow.com *.what3words.com maps.googleapis.com commerce.adobedtm.com magento-recs-sdk.adobe.net static.zdassets.com app.mobicredwidget.co.za www.gstatic.com connect.facebook.net bam.nr-data.net js.testfreaks.com media.flixfacts.com media.flixcar.com security-hub.vaimo.network www.youtube.com player.vimeo.com https://js.klevu.com http://www.ctm.co.ke https://www.roomvo.com 'self' 'unsafe-inline' 'unsafe-eval'; 1
worker-src blob:; font-src fonts.gstatic.com *.kxcdn.com *.fontawesome.com cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com cdnjs.cloudflare.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.skroutz.gr facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * cdnjs.cloudflare.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.skroutz.gr *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.gstatic.com *.fbcdn.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.skroutz.gr *.googleapis.com *.google.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com s7.addthis.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com cdnjs.cloudflare.com maps.googleapis.com skroutza.skroutz.gr www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com *.fontawesome.com unsafe-inline assets.braintreegateway.com cdnjs.cloudflare.com www.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://www.sandbox.paypal.com https://www.paypal.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com ekr.zdassets.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com cdnjs.cloudflare.com maps.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src https:; connect-src https: 'unsafe-eval' 'unsafe-inline' wss://pubsubsec.usedesk.ru; script-src https: 'unsafe-eval' 'unsafe-inline' pubsubsec.usedesk.ru; style-src https: 'unsafe-inline' pubsubsec.usedesk.ru; img-src https: data:; font-src https: data:; report-uri /csp-report 1
img-src 'self' data: blob: *.commercecloud.salesforce.com *.dev.art.com *.dev.allposters.com *.stage.art.com *.stage.allposters.com imgc.artprintimages.com imgc.allpostersimages.com *.artprintimages.com *.allpostersimages.com *.allposters.com *.art.com cache1.artprintimages.com nova.collect.igodigital.com cdn-assets.affirm.com www.google.com www.google-analytics.com *.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net www.facebook.com ct.pinterest.com bat.bing.com track.linksynergy.com tags.rd.linksynergy.com click.s13.exacttarget.com events.attentivemobile.com;script-src 'self' 'nonce-aXqVt6ApuvAq+dXa8XYHaQ==' storage.googleapis.com *.collect.igodigital.com widget.trustpilot.com cdn-4.convertexperiments.com cdn-3.convertexperiments.com www.googletagmanager.com *.googletagmanager.com www.google-analytics.com *.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net connect.facebook.net s.pinimg.com bat.bing.com tag.rmp.rakuten.com tags.rd.linksynergy.com services.xg4ken.com www.datadoghq-browser-agent.com www.clarity.ms rum-static.pingdom.net *.chat.digital.ringcentral.com consent.trustarc.com cdnjs.cloudflare.com www.paypal.com *.paypal.com *.paypalobjects.com static.cloudflareinsights.com cdn1.affirm.com cdn.id5-sync.com dynamic.criteo.com sslwidget.criteo.com cdn.attn.tv cdn.userway.org;script-src-elem 'self' 'nonce-aXqVt6ApuvAq+dXa8XYHaQ==' storage.googleapis.com *.collect.igodigital.com widget.trustpilot.com cdn-4.convertexperiments.com cdn-3.convertexperiments.com www.googletagmanager.com *.googletagmanager.com www.google-analytics.com *.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net connect.facebook.net s.pinimg.com bat.bing.com tag.rmp.rakuten.com tags.rd.linksynergy.com services.xg4ken.com www.datadoghq-browser-agent.com www.clarity.ms rum-static.pingdom.net *.chat.digital.ringcentral.com consent.trustarc.com cdnjs.cloudflare.com www.paypal.com *.paypal.com *.paypalobjects.com static.cloudflareinsights.com cdn1.affirm.com cdn.id5-sync.com dynamic.criteo.com sslwidget.criteo.com cdn.attn.tv cdn.userway.org;connect-src 'self' api.cquotient.com *.salesforce.com *.dev.art.com *.dev.allposters.com dev-bizapi.art.com dev-bizapi.allposters.com bizapi.art.com bizapi.allposters.com stg-bizapi.art.com stg-bizapi.allposters.com rel1-bizapi.art.com rel1-bizapi.allposters.com localhost:* *.affirm.com *.doubleclick.net *.googletagmanager.com *.google-analytics.com *.analytics-google.com analytics.google.com www.googleadservices.com www.facebook.com bat.bing.com track.linksynergy.com tags.rd.linksynergy.com services.xg4ken.com datadoghq.com www.clarity.ms id5-sync.com *.id5-sync.com eu-1-id5-sync.com *.eu-1-id5-sync.com events.attentivemobile.com *.attn.tv *.chat.digital.ringcentral.com consent.trustarc.com cdn-4.convertexperiments.com cdn-3.convertexperiments.com 10017911.metrics.convertexperiments.com logs.convertexperiments.com www.paypal.com *.paypal.com *.paypalobjects.com widget.trustpilot.com www.google.com rum-collector-2.pingdom.net ct.pinterest.com s.pinimg.com;frame-src 'self' *.affirm.com *.googletagmanager.com www.google.com googleads.g.doubleclick.net survey.alchemer.com www.surveygizmo.com *.chat.digital.ringcentral.com consent.trustarc.com *.attn.tv www.paypal.com *.paypal.com *.paypalobjects.com widget.trustpilot.com gum.criteo.com;default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';object-src 'none';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests 1
object-src  'none'; connect-src 'self' *.filthykings.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.filthykings.com join.gammasecure.com; script-src 'self' *.filthykings.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.filthykings.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://connect.facebook.net https://www.facebook.com https://assets.customer.io https://*.sentry.io https://cdn.segment.com https://us-assets.i.posthog.com https://widget.intercom.io https://js.intercomcdn.com https://www.gstatic.com https://cdn.jsdelivr.net https://d3e54v103j8qbb.cloudfront.net https://maps.googleapis.com https://embed.typeform.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; img-src 'self' data: blob: https://*.amazonaws.com https://*.cloudfront.net https://cdn.filestackcontent.com https://canny.io https://ui-avatars.com https://assets.pippa.io https://www.google-analytics.com https://www.google.com https://www.google.com.au https://www.googletagmanager.com https://www.facebook.com https://stats.g.doubleclick.net https://td.doubleclick.net https://assets.frankiefinancial.io https://static.intercomcdn.com https://downloads.intercomcdn.com; font-src 'self' data: https://fonts.gstatic.com https://js.intercomcdn.com https://cdn.jsdelivr.net; connect-src 'self' https://*.pearler.com https://www.google-analytics.com https://stats.g.doubleclick.net https://*.sentry.io https://www.facebook.com https://assets.customer.io https://*.frankiefinancial.io wss://*.pearler.com https://api.segment.io https://cdn.segment.com https://us.i.posthog.com https://api-iam.intercom.io https://nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://cdn.jsdelivr.net https://maps.googleapis.com https://backend-game-bgq6p.ondigitalocean.app https://backend-game-lmna.onrender.com https://sdk.onfido.com https://assets.onfido.com https://api.onfido.com https://api.eu.onfido.com https://api.us.onfido.com https://api.ca.onfido.com; frame-src 'self' https://www.google.com https://td.doubleclick.net https://*.frankiefinancial.io https://intercom-sheets.com https://embed.acast.com https://www.youtube.com https://sdk.onfido.com https://id.onfido.com; worker-src 'self' blob:; media-src 'self' blob: https://js.intercomcdn.com https://sdk.onfido.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com maxcdn.bootstrapcdn.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com www.google.com *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com *.sendcloud.sc *.jsdelivr.net *.shopreviews.com https://form.jotform.com https://mss.radiatorkopen.nl https://mss.radiatorkopen.be https://cdn.cookiepal.io www.facebook.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com *.disqus.com www.facebook.com https://*.google.com https://*.google.nl https://*.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net https://*.g.doubleclick.net https://*.fls.doubleclick.net https://*.adservice.google.com https://*.facebook.net https://*.tiktok.com https://*.bing.com https://bat.bing.com https://bat.bing.net https://bzrcdn.openai.com https://*.openai.com https://www.mollie.com *.amazonaws.com https://phosphor.utils.elfsightcdn.com https://www.google.nl https://mss.radiatorkopen.nl https://mss.radiatorkopen.be https://cdn.cookiepal.io https://widget-v3.smartsuppcdn.com https://www.google.ie https://www.google.com.ua blob: https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ www.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.disqus.com connect.facebook.net https://*.facebook.net https://*.tiktok.com https://bat.bing.com https://bzrcdn.openai.com https://*.openai.com js.mollie.com *.sendcloud.sc *.jsdelivr.net maps.googleapis.com cdn.ampproject.org https://static.elfsight.com https://universe-static.elfsightcdn.com https://www.smartsuppchat.com https://widget-v3.smartsuppcdn.com https://mss.radiatorkopen.nl https://mss.radiatorkopen.be https://cdn.cookiepal.io www.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com *.sendcloud.sc *.jsdelivr.net https://widget-v3.smartsuppcdn.com https://cdn.cookiepal.io www.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://stream.getmetrion.com https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.googleadservices.com https://*.googletagmanager.com https://*.googletagservices.com https://*.googlesyndication.com https://*.doubleclick.net https://*.google.nl https://*.googlevideo.com https://*.googleusercontent.com https://*.googledomains.com https://*.g.doubleclick.net https://*.fls.doubleclick.net https://*.adservice.google.com https://*.facebook.net https://*.tiktok.com https://*.bing.com https://bat.bing.com https://*.bingads.microsoft.com https://bat.bing.net https://bzrcdn.openai.com https://*.openai.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.shopreviews.com places.googleapis.com cdn.ampproject.org https://core.service.elfsight.com https://static.elfsight.com https://service-reviews-ultimate.elfsight.com https://bootstrap.smartsuppchat.com https://widget-v3.smartsuppcdn.com https://translations.smartsuppcdn.com wss://websocket-visitors.smartsupp.com https://mss.radiatorkopen.nl https://mss.radiatorkopen.be https://cdn.cookiepal.io https://universe-static.elfsightcdn.com www.googleapis.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src https://cdn.cookiepal.io https://static.elfsight.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' *.texasfile.com 'nonce-LT2OQ7tCrTBsD5reoJ3h2g=='; img-src 'self' media.texasfile.com www.texasfile.com https://ssl.google-analytics.com staging.texasfile.com qa.texasfile.com lb2.texasfile.com assets.texasfile.com staging-assets.texasfile.com https://stats.g.doubleclick.net https://www.google.com/ads https://i.ytimg.com cdn.pendo.io app.pendo.io pendo-static-5685311968116736.storage.googleapis.com data.pendo.io data: blob:; style-src 'self' *.texasfile.com fonts.googleapis.com app.pendo.io cdn.pendo.io pendo-static-5685311968116736.storage.googleapis.com 'unsafe-inline'; frame-src *.texasfile.com https://www.google.com https://www.youtube.com https://recaptcha.net; frame-ancestors *.texasfile.com app.pendo.io; worker-src blob:; script-src 'self' *.texasfile.com cdn.ravenjs.com *.google-analytics.com https://recaptcha.net www.google.com/recaptcha/api.js www.gstatic.com https://maps.googleapis.com https://*.googleapis.com https://maps.gstatic.com https://*.gstatic.com https://www.googletagmanager.com https://code.jquery.com/jquery-3.6.0.min.js https://cdn.jsdelivr.net/npm/foundation-sites@6.7.5/dist/js/foundation.min.js https://cdn.pydata.org/bokeh/release/bokeh-3.8.0.min.js https://cdn.pydata.org/bokeh/release/bokeh-widgets-3.8.0.min.js https://cdn.pydata.org/bokeh/release/bokeh-tables-3.8.0.min.js app.pendo.io pendo-io-static.storage.googleapis.com cdn.pendo.io pendo-static-5685311968116736.storage.googleapis.com data.pendo.io data: 'unsafe-eval' 'unsafe-inline'; connect-src localhost:* *.texasfile.com app.pendo.io data.pendo.io pendo-static-5685311968116736.storage.googleapis.com *.google-analytics.com https://maps.googleapis.com https://analytics.google.com https://places.googleapis.com https://raw.githubusercontent.com/plotly/datasets/master/geojson-counties-fips.json; font-src 'self' *.texasfile.com fonts.googleapis.com fonts.gstatic.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; 1
font-src maxcdn.bootstrapcdn.com *.fontawesome.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.addthis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com *.google.com https://www.google.fr/ magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net *.fontawesome.com unsafe-inline assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google.com https://www.google.fr/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.fontawesome.com *.alothemes.com *.magepow.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com https://h.online-metrix.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://h.online-metrix.net *.cardinalcommerce.com *.pagaleve.io *.pagaleve.com.br *.pinterest.com *.pinterdev.com commerce-app.pintergration.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://h.online-metrix.net *.d.aa.online-metrix.net *.alothemes.com *.magepow.com *.pagaleve.com.br https://cdn.mundipagg.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com assets.adobedtm.com *.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com https://rum.hlx.page www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://h.online-metrix.net *.cardinalcommerce.com *.alothemes.com *.magepow.com *.pagaleve.com.br *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.fontawesome.com *.alothemes.com *.magepow.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.magento-datasolutions.com *.magento-ds.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://h.online-metrix.net https://mpisandbox.braspag.com.br/v2/3ds/validate https://writer.cardinalcommerce.com/stag/log https://mpisandbox.braspag.com.br/v2/3ds/enroll https://centinelapistag.cardinalcommerce.com/V1/Order/JWT/Continue *.amazonaws.com *.braspag.com.br *.alothemes.com *.magepow.com https://api.mundipagg.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://widget.intercom.io https://js.intercomcdn.com https://connect.facebook.net https://links.gesvision.com https://*.google.com https://*.doubleclick.net https://www.googleadservices.com https://*.googlesyndication.com https://cdn.jsdelivr.net https://snap.licdn.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; img-src 'self' data: https:; font-src 'self' data: https:; media-src 'self' data: blob: https:; connect-src 'self' https://*.intercom.io wss://*.intercom.io https://*.intercomcdn.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.google.com https://*.doubleclick.net https://www.googleadservices.com https://*.googlesyndication.com https://links.gesvision.com https://cdn.jsdelivr.net https://ipapi.co https://snap.licdn.com https://px.ads.linkedin.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://*.intercom.io https://*.doubleclick.net https://www.googletagmanager.com https://*.googlesyndication.com https://*.google.com https://maps.google.com https://*.facebook.com; frame-ancestors 'self'; form-action 'self' https://www.facebook.com; base-uri 'self'; object-src 'none'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests; report-uri https://gesvision.com/_csp-report.php 1
img-src https://higherlogicdownload.s3.amazonaws.com/SITCANCER/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/SITCANCER/ https://img.youtube.com/vi/ https://static.filestackapi.com/picker/ https://d2x5ku95bkycr3.cloudfront.net https://higherlogiclongterm.s3.amazonaws.com/SITCANCER/ blob: https://d132x6oi8ychic.cloudfront.net 'self'; style-src https://d132x6oi8ychic.cloudfront.net 'unsafe-inline' https://higherlogiccloudfront.s3.amazonaws.com https://cdn.jsdelivr.net/jquery.slick/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://d2x5ku95bkycr3.cloudfront.net/ https://ajax.googleapis.com/ajax/libs/jqueryui/ https://use.fortawesome.com/ https://cdn.higherlogic.com/ai-assistant https://static.filestackapi.com/picker/ https://fonts.googleapis.com/ https://d3uf7shreuzboy.cloudfront.net/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/SITCANCER/ https://higherlogicdownload.s3.amazonaws.com/SITCANCER/ https://higherlogiclongterm.s3.amazonaws.com/SITCANCER/ 'self'; font-src https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogiccloudfront.s3.amazonaws.com https://higherlogicdownload.s3.amazonaws.com/SITCANCER/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/SITCANCER/ 'self' https://higherlogiclongterm.s3.amazonaws.com/SITCANCER/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://d2x5ku95bkycr3.cloudfront.net https://d132x6oi8ychic.cloudfront.net data:; script-src-elem https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d3uf7shreuzboy.cloudfront.net/ https://static.filestackapi.com/picker/ https://cdn.higherlogic.com/ai-assistant https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d2x5ku95bkycr3.cloudfront.net/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://www.gstatic.com/recaptcha/ https://static.filestackapi.com/filestack-js/ 'self' https://ajax.aspnetcdn.com/ajax/ 'unsafe-eval' 'unsafe-inline'; media-src https://higherlogiclongterm.s3.amazonaws.com/SITCANCER/ https://higherlogicdownload.s3.amazonaws.com/SITCANCER/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/SITCANCER/ https://higherlogicstream.s3.amazonaws.com/SITCANCER/ 'self' https://d132x6oi8ychic.cloudfront.net; script-src https://higherlogiclongterm.s3.amazonaws.com/SITCANCER/ https://higherlogicdownload.s3.amazonaws.com/SITCANCER/ https://ajax.aspnetcdn.com/ajax/ https://cdn.jsdelivr.net/jquery.slick/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d132x6oi8ychic.cloudfront.net https://cdn.informz.net 'unsafe-eval' https://use.fortawesome.com/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/SITCANCER/ https://cdnjs.cloudflare.com/ajax/libs/prism/ 'unsafe-inline' https://d2x5ku95bkycr3.cloudfront.net/ https://higherlogiccloudfront.s3.amazonaws.com https://static.filestackapi.com https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d3uf7shreuzboy.cloudfront.net/ 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://api.connectedcommunity.org/ 'self' https://www.youtube.com/embed/ https://*.kb.us.higherlogic.com; connect-src https://upload.filestackapi.com https://static.filestackapi.com https://cloud.filestackapi.com/folder/list/ 'self' https://hl-managedservices.informz.net https://d3uf7shreuzboy.cloudfront.net/ blob:; worker-src 'self'; default-src 'self'; base-uri 'self'; frame-ancestors https://*.connectedcommunity.org/ 'self'; object-src 'none'; manifest-src 'self'; 1
default-src https: data: wss: 'unsafe-inline' 'unsafe-eval'; form-action https:; report-uri https://pmjsulxvuv1wvuwvesziy6jt.httpschecker.net/report 1
font-src *.googleapis.com *.gstatic.com *.globalpay.com https://fonts.gstatic.com *.klarnacdn.net maxcdn.bootstrapcdn.com www.skopes.co.uk data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com www.skopes.co.uk 'self' 'unsafe-inline'; frame-ancestors www.skopes.co.uk 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.americanexpress.com *.globalpay.com *.mastercard.com *.visa.com *.klarna.com *.trustpilot.com www.youtube.com www.xtento.com www.skopes.co.uk 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com *.globalpay.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.adobedtm.com www.xtento.com cdn.xtento.com www.skopes.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com *.aexp-static.com https://ajax.aspnetcdn.com *.globalpay.com *.gpapiservices.com *.klarna.com *.klarnacdn.net *.klarnaservices.com *.trustpilot.com www.youtube.com player.vimeo.com www.xtento.com cdn.xtento.com www.skopes.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com https://fonts.googleapis.com *.klarnacdn.net maxcdn.bootstrapcdn.com *.trustpilot.com www.skopes.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.amazonaws.com *.googleapis.com www.skopes.co.uk 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.googleapis.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com cdn.plyr.io noembed.com www.skopes.co.uk 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com www.skopes.co.uk http: https: blob: 'self' 'unsafe-inline'; default-src www.skopes.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://static.addtoany.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://www.googletagmanager.com/ *.google.com/ *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://www.coinpayments.net www.amsterdamseedcenter.com amsterdamcbdcenter.com *.google-analytics.com *.googletagmanager.com *.deliverymatch.nl *.paypalobjects.com *.pay.nl *.coinpayments.net http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.googletagmanager.com https://www.magezon.com *.amazonaws.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com https://static.addtoany.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.zopim.com *.getresponse.com browser.sentry-cdn.com js-de.sentry-cdn.com static.hotjar.com script.hotjar.com static.zdassets.com static.cloudflareinsights.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.braintreeobjects.com *.pay.nl http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.google.com/ *.sendcloud.sc *.jsdelivr.net https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.sendcloud.sc *.jsdelivr.net https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.zdassets.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://stats.addtoany.com/menu api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google-analytics.com *.googletagmanager.com *.analytics.google.com ekr.zdassets.com support-wyqq9.zendesk.com wss://widget-mediator.zopim.com metrics.hotjar.com metrics.hotjar.io *.magentocommerce.com 35.204.69.213 *.sendcloud.net *.sendcloud.com *.deliverymatch.nl *.deliverymatch.net *.braintreegateway.com *.braintreedata.com *.pay.nl *.coinpayments.net *.fibonatix.com *.ingest.de.sentry.io http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://o4508284661137408.ingest.de.sentry.io https://api.stripe.com https://*.cookieyes.com https://*.chatway.app wss://*.chatway.app https://*.googlesyndication.com https://*.adtrafficquality.google https://googleads.g.doubleclick.net https://td.doubleclick.net https://stats.g.doubleclick.net https://www.googletagmanager.com https://www.facebook.com; font-src 'self' https://fonts.gstatic.com data:; form-action 'self' https://www.facebook.com; frame-ancestors 'self'; frame-src 'self' https://www.googletagmanager.com https://td.doubleclick.net https://googleads.g.doubleclick.net https://js.stripe.com https://hooks.stripe.com https://m.stripe.network https://*.googlesyndication.com https://*.adtrafficquality.google https://*.chatway.app https://www.facebook.com https://www.google.com; img-src 'self' data: https:; object-src 'none'; script-src 'self' 'unsafe-inline' https://js.stripe.com https://connect.facebook.net https://cdn-cookieyes.com https://*.chatway.app https://www.googletagmanager.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://*.googlesyndication.com https://maps.googleapis.com https://www.gstatic.com https://www.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; report-uri /csp-report 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-JG3qR4wRp5G1YBVa6eqGGA' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.paypal.com https://www.paypalobjects.com https://js.stripe.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; connect-src 'self' https://api.stripe.com https://www.paypal.com; frame-src https://www.paypal.com https://www.sandbox.paypal.com https://js.stripe.com https://hooks.stripe.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://www.paypal.com 1
default-src 'self' https://cdn-app.sberdevices.ru; script-src 'unsafe-eval' 'unsafe-inline' 'report-sample' 'self' abt.s3.yandex.net mapgl.2gis.com https://ad.adriver.ru https://cdn-app.sberdevices.ru/ https://code.jivo.ru/widget/CVgSX9az2t https://code.jivo.ru/widget/3PUKdqHYcF https://code.jivo.ru/js/bundle_ru_RU.js https://mc.yandex.ru https://top-fwz1.mail.ru/js/code.js https://vk.com/js/api/openapi.js https://www.gstatic.com https://ai.github.io/audio-recorder-polyfill/polyfill.js https://sberdevices.smcrm.sber.ru https://static.smcrm.sber.ru/formPage.min.js https://static.crm.sbc.space/formPage.min.js https://b2b-bundle.crm.sbc.space https://app.sbercrm.com https://smartcaptcha.yandexcloud.net https://captcha-api.yandex.ru; style-src 'unsafe-inline' 'report-sample' 'self' https://cdn-app.sberdevices.ru https://code.jivo.ru https://static.smcrm.sber.ru/formPage.min.css https://static.crm.sbc.space/formPage.min.css; object-src 'none'; base-uri 'self'; connect-src 'self' blob: uaas.yandex.ru *.2gis.com https://clickbeat.sberdevices.ru https://api.eye.sbdv.ru https://cbdv.dev.sberdevices.ru http://127.0.0.1:29009 http://127.0.0.1:30102 ymetrica1.com yandexmetrica.com:30103 yandexmetrica.com:29010 https://mc.yandex.md https://mc.yandex.by https://mc.yandex.kz https://sm-smart-proxy-ift.apps.sgmd.sberdevices.ru https://stats.g.doubleclick.net/j/collect https://www.google-analytics.com https://sentry-api.sberdevices.ru https://cdn-app.sberdevices.ru https://mc.yandex.ru https://metrics.prom.third-party-app.sberdevices.ru https://top-fwz1.mail.ru https://vk.com https://node-sber1-az1-1.jivosite.com https://telemetry.jivosite.com/w https://app.kizen.com https://yandexmetrica.com https://crm.sbc.space https://smcrm.sber.ru https://mc.yandex.com wss://*.jivosite.com wss://*.jivo.ru https://*.jivo.ru https://app.sbercrm.com https://smartcaptcha.yandexcloud.net https://captcha-api.yandex.ru; font-src 'self' data: https://cdn-app.sberdevices.ru https://static.smcrm.sber.ru https://static.crm.sbc.space https://fonts.gstatic.com https://app.sbercrm.com; frame-src 'self' https://giga.chat https://content.adriver.ru https://www.youtube.com https://vk.com https://player.vimeo.com https://www.google.com https://mc.yandex.ru https://mc.yandex.md https://www.youtube-nocookie.com https://*.sberdevices.ru https://smartcaptcha.yandexcloud.net https://captcha-api.yandex.ru; img-src 'self' data: https://top-fwz1.mail.ru https://favicon.yandex.net https://code.jivo.ru https://i.vimeocdn.com https://vk.com https://vk.com/rtrg https://www.googletagmanager.com https://i.ytimg.com https://www.google.md/ads/ga-audiences https://www.google.de/ads/ga-audiences https://www.google.ru/ads/ga-audiences https://cdn-app.sberdevices.ru https://vk.com https://www.google-analytics.com https://www.google.com/ads/ga-audiences https://mc.yandex.ru https://files.jivo.ru https://mc.yandex.md https://mc.yandex.com; manifest-src 'self'; media-src data: 'self' https://code.jivo.ru https://cdn-app.sberdevices.ru; frame-ancestors https://giga.chat; report-uri https://sentry-api.sberdevices.ru/api/53/security/?sentry_key=1d9e9a95a396490881ec047a092a0639; worker-src 'self' 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; frame-ancestors 'self'; object-src 'none'; base-uri 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://use.typekit.net maxcdn.bootstrapcdn.com https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https://*.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.dotdigital-pages.com *.dotdigital.com https://www.facebook.com https://tpc.googlesyndication.com https://consentcdn.cookiebot.com https://assets.braintreegateway.com https://*.paypal.com https://interfaces.zapier.com https://*.zapier.app https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: https://*.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com *.trackedlink.net *.ddlnk.net https://www.google.fi https://www.google.ee https://maps.gstatic.com https://maps.googleapis.com https://log.pinterest.com https://eckerolinechatbottest.blob.core.windows.net https://fonts.gstatic.com https://assets.braintreegateway.com https://*.paypal.com https://imgsct.cookiebot.com https://px.ads.linkedin.com https://www.paypalobjects.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page https://*.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal https://ajax.cloudflare.com https://js-agent.newrelic.com https://bam-cell.nr-data.net https://bam.eu01.nr-data.net https://bam.nr-data.net https://assets.pinterest.com https://maps.googleapis.com https://eckerolinechatbottest.blob.core.windows.net https://api.videoly.co https://www.google.fi https://www.google.ee https://www.googleadservices.com https://tpc.googlesyndication.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://js.braintreegateway.com https://assets.braintreegateway.com https://www.paypalobjects.com https://*.paypal.com https://snap.licdn.com https://interfaces.zapier.com https://dapi.videoly.co https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://www.eckeroline.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com https://fast.fonts.net https://eckerolinechatbottest.blob.core.windows.net https://use.typekit.net https://p.typekit.net https://assets.braintreegateway.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.facebook.com *.facebook.net https://*.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https://bam-cell.nr-data.net https://bam.eu01.nr-data.net https://bam.nr-data.net https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://maps.googleapis.com https://fonts.gstatic.com https://vimeo.com https://consentcdn.cookiebot.com https://api.sandbox.braintreegateway.com https://client-analytics.sandbox.braintreegateway.com https://*.braintree-api.com https://api.braintreegateway.com https://client-analytics.braintreegateway.com https://*.paypal.com https://px.ads.linkedin.com https://rum.hlx.page https://www.google.fi https://www.google.ee https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com 'self' 'unsafe-inline'; child-src https://assets.braintreegateway.com https://*.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; report-uri https://www.nt-ware.com/contentsecuritypolicyreport/index.php; 1
default-src 'self';script-src 'self' https://static.pictufy.com https://files.pictufy.com https://www.googletagmanager.com https://js.hcaptcha.com https://newassets.hcaptcha.com 'sha256-7842YWQvglJ9sPyn4pmUAjrteOoCtAEUMtsH5JtCjTU=' 'sha256-fTqvkqc2RzyZK8vZ/wRS6yHHvsD5qEVrO9nVt8YnTSw=';style-src 'self' 'unsafe-inline' https://static.pictufy.com https://files.pictufy.com https://fonts.googleapis.com;font-src 'self' https://static.pictufy.com https://files.pictufy.com https://fonts.gstatic.com https://cdnjs.cloudflare.com data:;manifest-src 'self' https://static.pictufy.com https://files.pictufy.com;img-src 'self' data: blob: https://static.pictufy.com https://files.pictufy.com https://pictufy.com https://cdn.builder.io https://images.squarespace-cdn.com https://1x.com https://seuppcdn01.1x.com https://www.googletagmanager.com https://www.google-analytics.com;connect-src 'self' https: https://static.pictufy.com https://files.pictufy.com https://pictufy.com https://www.google-analytics.com;frame-src 'self' https://hcaptcha.com https://*.hcaptcha.com;object-src 'none';base-uri 'self';form-action 'self' 1
form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.facebook.net webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; frame-ancestors *.hana.ondemand.com 'self'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'unsafe-inline' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.klevu.com *.ksearchnet.com magefan.com cm.magefan.com *.facebook.com *.facebook.net https://www.magezon.com ozow-live-cdn.s3.eu-west-1.amazonaws.com *.cloudflare.com https://cdn.klarna.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com *.cdninstagram.com *.google.com *.google.lv *.google.co.za *.google.com.na *.google.na *.zopim.com *.nosto.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.zopim.io *.sfdr.co sfdr.co *.tawk.to tawk.link *.tawk.link *.jsdelivr.net *.azurewebsites.net maps.googleapis.com app.mobicredwidget.co.za media.flixcar.com rt.flix360.com assets.secure.checkout.visa.com *.adobedtm.com data: 'self' 'unsafe-inline'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.googleapis.com *.cloudflare.com *.jsdelivr.net www.gstatic.com media.flixcar.com 'unsafe-inline' data: https://js.klevu.com https://www.ctm.co.bw 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com *.amazonaws.com *.googleapis.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; font-src https://www.roomvo.com fonts.gstatic.com *.klevu.com *.ksearchnet.com *.fontawesome.com *.fonts.googleapis.com *.gstatic.com 'unsafe-inline' data: *.cloudflare.com *.googleapis.com *.zopim.com *.tawk.to *.jsdelivr.net media.flixfacts.com data: 'self' 'unsafe-inline'; connect-src https://agents.engati.ai wt.omnisendlink.com dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com cdn.ampproject.org https://*.ingest.sentry.io *.klevu.com *.ksearchnet.com ekr.zdassets.com/ *.facebook.com *.facebook.net https://get.geojs.io *.avada.io embed.payjustnow.com *.payjustnow.com *.cloudflare.com *.paypal.com *.googleapis.com *.addthis.com *.cardinalcommerce.com https://graph.instagram.com *.testfreaks.com *.google.com *.nosto.com *.hotjar.io *.hotjar.com *.doubleclick.net *.zendesk.com *.tawk.to wss://*.tawk.to *.tawk.link *.addthisedge.com *.what3words.com vsb111.tawk.to ekr.zdassets.com api.magento.com commerce.adobedc.net app.mobicredwidget.co.za wss://widget-mediator.zopim.com bam.nr-data.net *.googletagmanager.com security-hub.vaimo.network 'unsafe-eval' data: cdn.plyr.io noembed.com 'self' 'unsafe-inline'; frame-src https://unicons.iconscout.com https://youtube.com fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.facebook.com *.facebook.net *.google.com embed.payjustnow.com *.payjustnow.com *.addthis.com *.pinterest.com *.nosto.com *.issuu.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.criteo.net *.criteo.com webchat.jdg.co.za *.jdg.co.za www.youtube.com 'self' 'unsafe-inline'; script-src https://unicons.iconscout.com https://agents.engati.ai https://bb.branding-element.com *.convertexperiments.com www.roomvo.com omnisnippet1.com bat.bing.com *.omnisnippet1.com static.ads-twitter.com analytics.tiktok.com https://s.pinterest.com https://scripts.clarity.ms assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.ampproject.org raw.githubusercontent.com chimpstatic.com downloads.mailchimp.com *.list-manage.com https://polyfill-fastly.io https://browser.sentry-cdn.com js.klevu.com *.ksearchnet.com s7.addthis.com *.facebook.com *.facebook.net *.avada.io *.google.com embed.payjustnow.com *.payjustnow.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.zopim.com *.videoly.co sfdr.co *.cnetcontent.com *.cloudfront.net *.klevu.com *.google.lv *.google.co.za *.google.com.na *.google.na *.cloudflare.com *.cloudflareinsights.com *.nosto.com *.hotjar.com *.googletagmanager.com *.criteo.net *.criteo.com *.sfdr.co *.tawk.to *.tawk.link *.jsdelivr.net *.mouseflow.com *.what3words.com maps.googleapis.com commerce.adobedtm.com magento-recs-sdk.adobe.net static.zdassets.com app.mobicredwidget.co.za www.gstatic.com connect.facebook.net bam.nr-data.net js.testfreaks.com media.flixfacts.com media.flixcar.com security-hub.vaimo.network www.youtube.com player.vimeo.com https://js.klevu.com https://www.ctm.co.bw 'self' 'unsafe-inline' 'unsafe-eval'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com cdn1.stamped.io stamped.io *.googleapis.com *.stamped.io *.shopassistant-ai.com preeziestaticcontent.blob.core.windows.net blob.core.windows.net core.windows.net windows.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com unpkg.com *.unpkg.com imagekit.io *.imagekit.io *.localhost.com *.paymentexpress.com *.windcave.com cdn1.stamped.io 'self' 'unsafe-inline'; frame-ancestors cdn1.stamped.io 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app unpkg.com *.unpkg.com cdnjs.cloudflare.com imagekit.io *.imagekit.io *.localhost.com *.paymentexpress.com *.windcave.com *.doubleclick.net *.ladesk.com *.laybuy.com *.authorize.net *.cardinalcommerce.com *.weltpixel.com www.google.com/recaptcha *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co *.nos.to * *.shopassistant-ai.com cdn1.stamped.io 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com unpkg.com *.unpkg.com imagekit.io *.imagekit.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com cdn1.stamped.io stamped.io *.ladesk.com *.googleapis.com *.laybuy.com *.trackjs.com www.google-analytics.com *.mailchimp.com *.klaviyo.com *.nos.to * *.shopassistant-ai.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com api.addressfinder.io *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com unpkg.com *.unpkg.com cdnjs.cloudflare.com imagekit.io *.imagekit.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.avada.io *.shopify.com cdn1.stamped.io stamped.io *.klaviyo.com *.ladesk.com *.googleapis.com *.trackjs.com cdn.trackjs.com script.hotjar.com static.hotjar.com www.google.com maps.googleapis.com assests.adobetm.com polyfill.io cdn-stamped-io.azureedge.net www.gstatic.com *.vimeo.com f.vimeocdn.com *.ytimg.com *.youtube.com www.youtube.com *.facebook.com *.facebook.net *.clarity.ms www.clarity.ms * *.shopassistant-ai.com https://www.googletagmanager.com tagmanager.google.com preeziecdn.azureedge.net *.azureedge.net portal.afterpay.com https://c.bing.com https://www.clarity.ms https://*.clarity.ms clarity.microsoft.com *.microsoft.com www.clarity.ms/tag data: https://www.clarity.ms/tag/ https://www.clarity.ms/tag/* www.clarity.ms/tag/* *.clarity.ms/tag/* clarity.ms/tag/* vimeocdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://api.addressfinder.io *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app downloads.mailchimp.com unpkg.com *.unpkg.com imagekit.io *.imagekit.io https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com cdn1.stamped.io stamped.io *.googleapis.com *.stamped.io *.shopassistant-ai.com tagmanager.google.com static.klaviyo.com 'self' 'unsafe-inline'; object-src cdn1.stamped.io 'self' 'unsafe-inline'; media-src *.adobe.com cdn1.stamped.io stamped.io 'self' 'unsafe-inline'; manifest-src cdn1.stamped.io 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://api.addressfinder.io *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io form-assets.mailchimp.com *.intuit.com *.amazonaws.com unpkg.com *.unpkg.com imagekit.io *.imagekit.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ get.geojs.io *.avada.io cdn1.stamped.io stamped.io *.klaviyo.com *.googleapis.com *.stamped.io *.trackjs.com *.azurewebsites.net *.shopassistant-ai.com https://www.google-analytics.com *.clarity.ms www.clarity.ms stats.g.doubleclick.net bam.nr-data.net in.hotjar.com *.hotjar.com prod-api-v1-core.azurewebsites.net azurewebsites.net 'self' 'unsafe-inline'; child-src cdn1.stamped.io http: https: blob: 'self' 'unsafe-inline'; default-src https://c.bing.com https://www.clarity.ms https://*.clarity.ms clarity.microsoft.com *.microsoft.com www.clarity.ms www.clarity.ms/tag *.clarity.ms data: https://www.clarity.ms/tag/ https://www.clarity.ms/tag/* www.clarity.ms/tag/* *.clarity.ms/tag/* clarity.ms/tag/* cdn1.stamped.io 'self' 'unsafe-inline' 'unsafe-eval'; base-uri cdn1.stamped.io 'self' 'unsafe-inline'; 1
default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; report-uri https://sentry.horace.tech/api/3/security/?sentry_key=954b57762b0f58307418ab76cbad963a 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://plausible.io https://*.googletagmanager.com https://cdn.segment.com https://js-eu1.hs-scripts.com https://challenges.cloudflare.com https://js-eu1.hs-analytics.net https://js-eu1.hscollectedforms.net https://js-eu1.hsadspixel.net https://js-eu1.hs-banner.com https://*.hotjar.com https://*.clarity.ms https://static.reo.dev https://t.reo.dev https://app.cal.com https://js.storylane.io https://buttons.github.io https://s3-us-west-2.amazonaws.com https://assets.apollo.io https://cdn.ap3c.com https://script.bullseye.so https://cdn.snitcher.com https://data.processwebsitedata.com https://a.usbrowserspeed.com https://cdn.vector.co; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://assets.zenml.io https://static.scarf.sh https://*.google-analytics.com https://*.googletagmanager.com https://*.hotjar.com https://*.clarity.ms https://*.hsforms.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://plausible.io https://*.google-analytics.com https://*.analytics.google.com https://cdn.segment.com https://api.segment.io https://*.hotjar.com https://*.hotjar.io https://*.clarity.ms https://js-eu1.hs-analytics.net https://t.reo.dev https://api.github.com https://capture-api-eu.ortto.app https://63e37fdf.sibforms.com https://api.app.bullseye.so https://radar.snitcher.com; frame-src https://app.cal.com https://js.storylane.io https://zenml.storylane.io https://challenges.cloudflare.com https://www.youtube-nocookie.com; worker-src 'self' blob:; report-uri /api/csp-report 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.tawk.to *.zopim.com *.usersnap.com *.highcharts.com *.braintreegateway.com *.cardinalcommerce.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.tawk.to *.zopim.com *.usersnap.com forms.hsforms.com prepro.adquiracloud.mx www.adquiramexico.com.mx 'self' 'unsafe-inline'; frame-ancestors *.vde.com.mx *.atlsynergy.com *.altamirawater.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.twitter.com *.consensu.org *.sharethis.com *.tawk.to *.zopim.com *.usersnap.com maps.googleapis.com static.elfsight.com core.service.elfsight.com storage.elfsight.com apps.elfsight.com ipinfo.io js.hsforms.net cdn.jsdelivr.net cdnjs.cloudflare.com html2canvas.hertzen.com *.highcharts.com prepro.adquiracloud.mx www.adquiramexico.com.mx 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.sharethis.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com *.tawk.to cdn.jsdelivr.net *.zopim.com *.usersnap.com https://www.google.co.in upload.wikimedia.org cdn-icons-png.flaticon.com www.freeimages.com findicons.com images.freeimages.com www.magentocommerce.com yt3.ggpht.com www.grupoorve.com forms.hsforms.com forms-na1.hsforms.com img.pikbest.com github.com github-production-user-asset-6210df.s3.amazonaws.com *.highcharts.com *.braintreegateway.com *.adobetm.com *.cardinalcommerce.com *.googleapis.com *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.trackedlink.net *.sharethis.com *.disqus.com *.avada.io *.tawk.to cdn.jsdelivr.net *.zopim.com *.usersnap.com maps.googleapis.com static.elfsight.com core.service.elfsight.com storage.elfsight.com apps.elfsight.com ipinfo.io js.hsforms.net cdnjs.cloudflare.com html2canvas.hertzen.com *.highcharts.com *.adobetm.com *.cardinalcommerce.com prepro.adquiracloud.mx www.adquiramexico.com.mx *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.tawk.to cdn.jsdelivr.net *.zopim.com *.usersnap.com cdnjs.cloudflare.com *.highcharts.com *.braintreegateway.com *.adobetm.com *.cardinalcommerce.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com fcmregistrations.googleapis.com firebaseinstallations.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.googleadservices.com *.google-analytics.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org *.sharethis.com https://get.geojs.io *.avada.io *.tawk.to wss://*.tawk.to *.zopim.com *.usersnap.com core.service.elfsight.com apps.elfsight.com forms.hsforms.com *.highcharts.com *.adobe.com *.adobetm.com *.cardinalcommerce.com prepro.adquiracloud.mx www.adquiramexico.com.mx *.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.adquiramexico.com.mx/clb/endpoint/villarealDivisionEquipos; report-to report-endpoint; 1
font-src *.googleapis.com fonts.gstatic.com *.fontawesome.com *.findologic.com https://fonts.bunny.net maxcdn.bootstrapcdn.com fonts.googleapis.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors https://api.clerk.io https://cdn.clerk.io 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com js.mollie.com www.youtube.com *.google.com *.google.com/ *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.googleapis.com *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://www.magezon.com https://cdn.clerk.io cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com https://www.mollie.com widgets.trustedshops.com *.google.de *.usercentrics.eu https://firebasestorage.googleapis.com quickchart.io img.youtube.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.googleapis.com *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://api.clerk.io https://cdn.clerk.io secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io widget.freshworks.com m2epro.freshdesk.com js.mollie.com pay.google.com applepay.cdn-apple.com rns.matelso.de *.google.com *.clarity.ms *.findologic.com widgets.trustedshops.com *.adform.net *.googlecommerce.com *.kk-resources.com *.usercentrics.eu *.s24.com *.avada.io *.google.com/ https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://api.clerk.io https://cdn.clerk.io d.ratepay.com d.payla.io dr.payla.io widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com *.findologic.com https://fonts.bunny.net maxcdn.bootstrapcdn.com fonts.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com widget.freshworks.com m2epro.freshdesk.com rns.matelso.de *.clarity.ms *.usercentrics.eu *.demdex.net https://get.geojs.io *.avada.io *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri https://www.paypalobjects.com 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com *.fonts.googleapis.com data: *.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.authorize.net *.addthis.com *.pinterest.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.s3.amazonaws.com https://p.alocdn.com/ region1.google-analytics.com *.cloudflare.com https://cdn.klarna.com https://s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.addthis.com *.pinterest.com *.cdninstagram.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://www.google.com/ https://www.gstatic.com/ d2z0bn1jv8xwtk.cloudfront.net/ assets.springbot.com/ *.avada.io *.authorize.net *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com region1.google-analytics.com https://get.geojs.io *.avada.io *.authorize.net *.cloudflare.com *.googleapis.com *.addthis.com *.cardinalcommerce.com https://graph.instagram.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com static.brandprint.it static-brandprint-it-20342.04.mdoq.io static-brandprint-it-25282.39.mdoq.io *.mdoq.dev *.mdoq.io *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors localhost:* *.motive.co *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com checkout.paypal.com https://www.googletagmanager.com/ *.multisafepay.com https://pay.google.com c.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.trustpilot.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com consent.cookiebot.com imgsct.cookiebot.com www.facebook.com www.google.it static.brandprint.it static-brandprint-it-20342.04.mdoq.io static-brandprint-it-25282.39.mdoq.io media.brandprint.it www.brandprint.it brandprint.it *.mdoq.dev *.mdoq.io analytics.tiktok.com www.google-analytics.com *.doubleclick.net pagead2.googlesyndication.com staticxx.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://firebasestorage.googleapis.com *.motive.co *.multisafepay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com https://maps.googleapis.com https://player.vimeo.com *.cardinalcommerce.com cdn.doofinder.com consent.cookiebot.com consentcdn.cookiebot.com connect.facebook.net pagead2.googlesyndication.com static.brandprint.it static-brandprint-it-20342.04.mdoq.io static-brandprint-it-25282.39.mdoq.io *.mdoq.dev *.mdoq.io eu1-config.doofinder.com analytics.tiktok.com www.gstatic.com *.doubleclick.net *.paypal.com checkout.paypal.com *.braintreegateway.com cdn.jsdelivr.net *.cloudfront.net http://www.googletagmanager.com/ https://www.googletagmanager.com/ chimpstatic.com downloads.mailchimp.com *.list-manage.com s7.addthis.com *.avada.io *.shopify.com *.motive.co *.multisafepay.com https://pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.trustpilot.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com static.brandprint.it static-brandprint-it-20342.04.mdoq.io static-brandprint-it-25282.39.mdoq.io *.mdoq.dev *.mdoq.io *.fontawesome.com downloads.mailchimp.com https://fonts.bunny.net *.multisafepay.com assets.braintreegateway.com *.trustpilot.com 'self' 'unsafe-inline'; object-src static.brandprint.it static-brandprint-it-20342.04.mdoq.io static-brandprint-it-25282.39.mdoq.io media.brandprint.it *.mdoq.dev *.mdoq.io 'self' 'unsafe-inline'; media-src *.adobe.com static.brandprint.it static-brandprint-it-20342.04.mdoq.io static-brandprint-it-25282.39.mdoq.io media.brandprint.it *.mdoq.dev *.mdoq.io http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://maps.googleapis.com https://player.vimeo.com region1.google-analytics.com capig.stape.org region1.analytics.google.com pagead2.googlesyndication.com consentcdn.cookiebot.com static.brandprint.it static-brandprint-it-20342.04.mdoq.io static-brandprint-it-25282.39.mdoq.io media.brandprint.it *.mdoq.dev *.mdoq.io analytics.tiktok.com widget.trustpilot.com www.google-analytics.com stats.g.doubleclick.net *.braintreegateway.com invitejs.trustpilot.com *.cardinalcommerce.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ ekr.zdassets.com/ https://get.geojs.io *.avada.io *.motive.co *.multisafepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com 'self' 'unsafe-inline'; child-src static.brandprint.it static-brandprint-it-20342.04.mdoq.io static-brandprint-it-25282.39.mdoq.io media.brandprint.it *.mdoq.dev *.mdoq.io assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src static.brandprint.it static-brandprint-it-20342.04.mdoq.io static-brandprint-it-25282.39.mdoq.io media.brandprint.it *.mdoq.dev *.mdoq.io 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; font-src 'self' data:; img-src 'self' data: https:; object-src 'none'; script-src 'self' https://umai.keyword.io 'nonce-/3dnWfnbZ+wuBJLmy5Xwfg=='; style-src 'self' 'unsafe-inline'; frame-src 'self'; connect-src 'self' https://umai.keyword.io https://glitch.keyword.io; base-uri 'self'; form-action 'self' 1
img-src *.force.com slack-imgs-mil-dev.com 'self' https://stats.g.doubleclick.net https://deltadore.my.salesforce.com https://img.youtube.com https://payments.salesforce.com/icons/ https://deltadore-api.techsee.me https://cdn.cookielaw.org https://login.salesforce.com/icons/ https://www.gstatic.com *.slack-edge-gov.com https://self1.techsee.me *.my-salesforce.com https://www.youtube-nocookie.com https://fra88.sfdc-urlt2q.salesforce.com/icons/ *.cloudinary.com https://rademacher-backend.bt.systems https://rec1.techsee.me static.lightning.force.com https://techsee.me *.slack-gov.com blob: *.slack-gov-dev.com https://media-deltadore.cdn-eu.techsee.me slack-imgs.com *.sfdcstatic.com *.twimg.com a.static.lightning.force.com *.slack.com https://www.paypal.com https://deltadore.sf-eu.techsee.me *.slack-imgs.com slack-imgs-gov.com https://i.ytimg.com https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/icons/ *.salesforce-experience.com https://sdk-us.techsee.me https://maps.a.forceusercontent.com slack-imgs-gov-dev.com *.slack-edge.com https://self.techsee.me https://cdn.content.aws-prod1-useast1.aws.sfdc.cl/icons/ https://deltadore.file.force.com https://media-subdomain.cdn.techsee.me slack-mil-dev.com https://www.gstatic.com/recaptcha/ https://deltadore.techsee.me https://www.google.com/recaptcha/ *.slack-edge.mil https://www.sandbox.paypal.com https://deltadore.sf-eu.desktop.show b.static.lightning.force.com https://i.vimeocdn.com static.sandbox.lightning.force.com https://www.googletagmanager.com https://www.google-analytics.com *.salesforce.com https://*.adyen.com slack-imgs.mil data:; report-to sfdc-csp-ep; report-uri https://deltadore.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D0Y000000ry1N&networkId=0DMbF00000003SY&type=communities 1
script-src 'unsafe-eval' 'wasm-unsafe-eval' 'report-sample' 'strict-dynamic' 'nonce-aNqrVTzjNnlPkv-WmTuwk' *.bytescm.com *.bytednsdoc.com *.ibytedapm.com *.snssdk.com *.yhgfb-cn-static.com *.bytetos.com *.byte-gslb.com *.bytegoofy.com *.bytecdn.cn *.toutiaostatic.com;style-src 'self' 'unsafe-inline' *.toutiaoimg.com *.bdxiguaimg.com *.bytescm.com *.bytegoofy.com *.douyinstatic.com *.toutiao.com *.toutiaostatic.com *.bytedance.net cdn.bootcss.com;connect-src 'self' wss: ws: data: blob: http://localhost:* toutiao.govwza.cn *.bytedance.net *.bytedance.com *.snssdk.com *.toutiaostatic.com *.bytescm.com *.toutiao.com *.bytetcc.com *.zijieapi.com *.yhgfb-cn-static.com *.toutiaovod.com *.bytednsdoc.com *.ibytedapm.com *.bytedanceapi.com *.google-analytics.com *.douyinstatic.com *.douyinvod.com *.bytegoofy.com *.bytetos.com *.toutiaoimg.com *.huoshanstatic.com *.idouyinvod.com:* *.volcsiriusbd.com:* *.volcsirius.com:*  *.tt.x.bsgslb.cn:* *.dy.zzcdnx.com:*  *.qc.bsccdn.net:* *.smtcdns.com:* *.ugslb.com:* *.livehwc3.cn:* *.smtcdns.net:* *.bytefcdnrd.com:* *.ksyungslb.com:* *.ksyungslb2.com:* *.ourdvsss.com:* *.tbcache.com:* *.jomodns.com:* *.douyincdn.com:* *.ixigua.com:* *.bdxigualive.com:* *.pstatp.com:* *.douyinliving.com:* *.picovr.com:* *.huoshanlive.com:* *.ihuoshanlive.com:* *.volccdn.com:* *.bestv.com.cn:* *.bytefcdn.com:* *.qnqcdn.net:*  *.jomoxc.com *.jomoxd.com *.a.bdycdn.cn *.hiecheimaetu.com:* *.ppio.cloud:* *.weilayun.com:* *.saxysec.com:* *.saxyit.com:* *.saxydc.com:* *.sjxysec.com:* *.sjxydc.com:* *.vegslb.com:* *.bytegecko.com;upgrade-insecure-requests;frame-ancestors 'self' *.bytedance.net *.snssdk.com shiqu.cn *.shiqu.cn zhan.vivo.com wukong.vivo.com.cn *.feishuapp.cn *.toutiao.com *.bytescm.com *.jiyunhudong.com *.bytedance.com *.feishu.cn;report-uri https://mon.zijieapi.com/log/sentry/v2/api/slardar/main/?ev_type=csp&bid=toutiao_web_pc;report-to main-endpoint 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://web-sdk.smartlook.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; media-src 'self' blob: https:; connect-src 'self' https: wss: blob:; frame-src 'self' https:; worker-src 'self' blob: 1
default-src https: data: blob: ; object-src https: data: 'unsafe-inline'; style-src https: data: 'unsafe-inline' ; script-src https: data: 'unsafe-inline' 'unsafe-eval' 1
default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; 1
font-src *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.fontawesome.com maxcdn.bootstrapcdn.com https://*.nxedge.io eadn-wc04-11639733.nxedge.io https://*.tawk.to *.tawk.to fonts.gstatic.com *.fonts.googleapis.com data: *.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.tawk.to 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.facebook.com platform.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.tawk.to *.google.com *.addthis.com *.pinterest.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.googleapis.com *.gstatic.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://*.nxedge.io eadn-wc04-11639733.nxedge.io https://www.google-analytics.com https://*.tawk.to *.tawk.to tawk.link cdn.jsdelivr.net s3.amazonaws.com/ *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.addthis.com *.pinterest.com *.cdninstagram.com *.googleusercontent.com *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com *.avada.io connect.facebook.net twitter.com platform.twitter.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://*.nxedge.io eadn-wc04-11639733.nxedge.io *.facebook.com https://www.googletagmanager.com https://www.google-analytics.com https://embed.tawk.to *.tawk.to cdn.jsdelivr.net *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.instagram.com *.optimonk.com *.elfsight.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.bootstrapcdn.com *.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com https://*.nxedge.io eadn-wc04-11639733.nxedge.io https://*.tawk.to *.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com *.tawk.to tawk.link 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com *.elfsight.com *.service-reviews-ultimate.elfsight.com *.optimonk.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://*.nxedge.io eadn-wc04-11639733.nxedge.io https://www.google-analytics.com https://region1.google-analytics.com https://www.facebook.com wss://*.tawk.to https://*.tawk.to *.tawk.to *.cloudflare.com *.addthis.com *.graph.instagram.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; img-src 'self' data: https: https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://googleads.g.doubleclick.net; script-src 'self' 'unsafe-inline' https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://www.googletagservices.com https://*.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net; style-src 'self' 'unsafe-inline'; font-src 'self' data:; connect-src 'self' https: https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://*.googlesyndication.com https://*.doubleclick.net https://*.googleadservices.com; frame-src 'self' https://www.youtube-nocookie.com https://player.vimeo.com https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://googleads.g.doubleclick.net https://*.googlesyndication.com https://*.doubleclick.net; media-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; script-src-elem https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://www.googletagservices.com https://*.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net 1
default-src 'self'; connect-src 'self' data: *.google-analytics.com *.analytics.google.com analytics.google.com www.googletagmanager.com www.google.com *.sentry.io js-de.sentry-cdn.com browser.sentry-cdn.com; font-src 'self' data: fonts.gstatic.com; frame-src 'self' www.youtube-nocookie.com www.youtube.com www.google.com; img-src 'self' data: scoutbasketball.com storage.googleapis.com www.google-analytics.com www.googletagmanager.com i.giphy.com; script-src 'self' 'unsafe-inline' data: www.googletagmanager.com js-de.sentry-cdn.com browser.sentry-cdn.com www.google.com www.gstatic.com ga.jspm.io; style-src 'self' 'unsafe-inline' fonts.googleapis.com; report-uri /_csp/report; worker-src 'self' blob: 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cash-f.squarecdn.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com *.splitit.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.splitit.com *.trustpilot.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com *.typekit.net *.commoninja.com *.coreprint.net *.livechatinc.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * *.trackedlink.net *.klarna.com *.klarnaevt.com *.klarnacdn.net magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.splitit.com *.amazonaws.com *.facebook.com *.reddit.com *.cloudfront.net *.authorize.net *.cardinalcommerce.com *.adobedtm.com *.livechatinc.com *.onetrust.com *.pcapredict.com cdn-ukwest.onetrust.com cdn.livechatinc.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com https://api.goaffpro.com https://static.goaffpro.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.disqus.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.splitit.com *.trustpilot.com *.cloudflare.com *.facebook.net https://www.googletagmanager.com tagmanager.google.com *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.commoninja.com *.authorize.net *.cardinalcommerce.com *.adobedtm.com *.livechatinc.com *.onetrust.com *.pcapredict.com cdn-ukwest.onetrust.com cdn.livechatinc.com p.typekit.net *.cloudflareinsights.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.splitit.com *.trustpilot.com *.facebook.net tagmanager.google.com *.typekit.net *.cardinalcommerce.com *.adobedtm.com *.livechatinc.com *.onetrust.com *.pcapredict.com p.typekit.net cdn-ukwest.onetrust.com cdn.livechatinc.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com https://api.goaffpro.com https://static.goaffpro.com *.ideal-postcodes.co.uk *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.splitit.com *.amazonaws.com logs.browser-intake-datadoghq.com *.facebook.com *.google-analytics.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typekit.net *.commoninja.com *.authorize.net *.adobe.com *.adobedtm.com *.livechatinc.com *.onetrust.com *.pcapredict.com cdn-ukwest.onetrust.com cdn.livechatinc.com p.typekit.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://online.flippingbook.com/; report-to report-endpoint; 1
font-src www.paypalobjects.com *.fontawesome.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com sandbox.przelewy24.pl secure.przelewy24.pl 'self' 'unsafe-inline'; frame-ancestors pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ js.mollie.com pay.google.com apm.przelewy24.pl *.przelewy24.pl *.espago.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com https://www.mollie.com static.przelewy24.pl www.gstatic.com gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com js.mollie.com pay.google.com applepay.cdn-apple.com sandbox.przelewy24.pl secure.przelewy24.pl apm.przelewy24.pl 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com sandbox.przelewy24.pl secure.przelewy24.pl wss://ws.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl google.com www.google.com pay.google.com ingress.flareapp.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://tagmanager.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https: blob:; connect-src 'self' https:; frame-src 'self'; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; 1
object-src 'none';base-uri 'self';script-src 'nonce-x422pnIGOQQMT825Ve3EEQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'nonce-7O_2jZBK-TcidA5FNvf7pQ' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/static-on-bigtable; base-uri 'none' 1
default-src 'self'; script-src 'self' 'nonce-let1dFb0RFi+eHXFmKX8qg==' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://code.jquery.com https://cdn.jsdelivr.net https://stackpath.bootstrapcdn.com https://cdnjs.cloudflare.com; style-src 'self' 'nonce-let1dFb0RFi+eHXFmKX8qg==' 'unsafe-inline' https://stackpath.bootstrapcdn.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; form-action 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
child-src 'unsafe-inline' 'self' *.facebook.com *.google.com *.gstatic.com *.bbb.org *.authorize.net *.google-analytics.com *.googleadservices.com *.googleapis.com *.doubleclick.net *.hcaptcha.com *.cloudflare.com *.klaviyo.com *.trustpilot.com *.googletagmanager.com *.bing.com *.cloudflareinsights.com *.facebook.net; frame-ancestors 'self'; img-src 'self' data: *.rightwayparking.com *.google.com *.bing.com *.facebook.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.googleapis.com *.doubleclick.net *.gstatic.com *.authorize.net *.bbb.org; default-src https: 'unsafe-inline' 'self' *.google.com *.google-analytics.com *.googleadservices.com *.googleapis.com *.g.doubleclick.net *.hcaptcha.com *.cloudflare.com *.klaviyo.com *.trustpilot.com *.googletagmanager.com *.bing.com *.cloudflareinsights.com *.facebook.net *.strip.com; 1
object-src 'none';base-uri 'self';script-src 'nonce-rJwPy1xRw55Z5fnLRl2wLQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com blog.247garden.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.authorize.net blog.247garden.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net blog.247garden.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://www.googletagmanager.com/ js.mollie.com *.authorize.net challenges.cloudflare.com blog.247garden.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.mollie.com challenges.cloudflare.com blog.247garden.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de http://www.googletagmanager.com/ https://www.googletagmanager.com/ js.mollie.com *.authorize.net challenges.cloudflare.com blog.247garden.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com challenges.cloudflare.com blog.247garden.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ blog.247garden.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.authorize.net challenges.cloudflare.com blog.247garden.com 'self' 'unsafe-inline'; child-src blog.247garden.com http: https: blob: 'self' 'unsafe-inline'; default-src blog.247garden.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://fonts.gstatic.com 'self' data: https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://cdn.consentmanager.net https://delivery.consentmanager.net js.mollie.com https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io blueskytechmage.com mageblueskytech.com placehold.jp https://cdn.consentmanager.net https://delivery.consentmanager.net https://a.delivery.consentmanager.net https://b.delivery.consentmanager.net https://c.delivery.consentmanager.net https://d.delivery.consentmanager.net magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com https://www.mollie.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com https://cdn.consentmanager.net https://delivery.consentmanager.net https://a.delivery.consentmanager.net https://b.delivery.consentmanager.net https://c.delivery.consentmanager.net https://d.delivery.consentmanager.net *.disqus.com *.avada.io js.mollie.com https://player.vimeo.com https://www.youtube.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://fonts.googleapis.com http://fonts.googleapis.com https://cdnjs.cloudflare.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src https://cdn.consentmanager.net https://delivery.consentmanager.net 'self' 'unsafe-inline'; media-src *.adobe.com https://cdn.consentmanager.net https://delivery.consentmanager.net https://a.delivery.consentmanager.net https://b.delivery.consentmanager.net https://c.delivery.consentmanager.net https://d.delivery.consentmanager.net blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://cdn.consentmanager.net https://delivery.consentmanager.net https://get.geojs.io *.avada.io https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src https://cdn.consentmanager.net https://delivery.consentmanager.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';         script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://cdn.userway.org https://www.youtube.com https://s.w.org https://widget02.wolkvox.com https://www.google-analytics.com https://cdnjs.cloudflare.com https://clients1.google.com https://connect.facebook.net;         style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.userway.org;         img-src 'self' data: https://secure.gravatar.com https://cdn.userway.org https://www.instagram.com https://www.google.com.co https://s.w.org https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://t0.gstatic.com https://ps.w.org https://connect.advancedcustomfields.com https://i.imgur.com;         font-src 'self' data: https://fonts.gstatic.com https://cdn.userway.org;         connect-src 'self' https://stats.g.doubleclick.net https://api.userway.org https://analytics.google.com https://www.google-analytics.com https://widget02.wolkvox.com https://www.google.com.co https://api.rankmath.com https://www.googletagmanager.com;         frame-src 'self' https://www.youtube.com https://widget02.wolkvox.com https://www.instagram.com https://digiturno.ugpp.gov.co https://chatbot.ugpp.gov.co https://consulteconcedula.ugpp.gov.co https://lookerstudio.google.com https://cdn.userway.org;         worker-src 'self' blob:;         report-uri /wp-json/ugpp-csp/v1/log; 1
default-src 'self' https://*.biomol.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.biomol.com https://biomol.matomo.cloud https://bat.bing.com https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://*.hs-scripts.com https://*.hsforms.net https://*.hsforms.com https://*.usemessages.com https://*.hsadspixel.net https://*.hscollectedforms.net https://*.hs-banner.com https://*.hs-analytics.net https://*.hubspot.com https://widget.citeab.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' https://*.biomol.com https://fonts.googleapis.com; img-src 'self' https://*.biomol.com data: https://www.googletagmanager.com https://www.google-analytics.com https://bat.bing.com https://*.hsforms.com https://*.hubspot.com https://www.google.com https://www.google.de https://www.googleadservices.com; font-src 'self' https://*.biomol.com https://fonts.gstatic.com data:; connect-src 'self' https://*.biomol.com https://biomol.matomo.cloud https://*.google.com/ https://www.google-analytics.com https://maps.googleapis.com https://*.googlesyndication.com https://*.g.doubleclick.net https://*.hs-scripts.com https://*.hscollectedforms.net https://*.hubspot.com https://*.hubapi.com https://*.hs-banner.com https://static.hsappstatic.net https://*.hsforms.net https://*.hsforms.com https://bat.bing.com; frame-src 'self' https://*.biomol.com https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://*.hubspot.com https://*.hsforms.com https://widget.citeab.com https://biomol.ddev.site; media-src 'self' https://*.biomol.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self' https://biomol.ddev.site https://www.biomol.com; manifest-src 'self'; worker-src 'none'; report-uri /csp-report.php; 1
object-src 'none';base-uri 'self';script-src 'nonce-OjHwqAHEW-hSZxo17QPhfA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; frame-ancestors 'self'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com https://www.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://*.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.sharethis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://images.unsplash.com *.googleapis.com https://*.gstatic.com 'self' data: https://*.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com https://www.magezon.com https://*.googleapis.com https://*.googleusercontent.com magefan.com cm.magefan.com *.stark-verlag.de *.consentmanager.net bat.bing.com cdn.eye-able.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sharethis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com https://*.gstatic.com https://*.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com jquery.sellxed.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.consentmanager.net bat.bing.com sst.stark-verlag.de cdn.eye-able.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com assets.braintreegateway.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.consentmanager.net cdn.eye-able.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.facebook.com *.facebook.net https://*.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.consentmanager.net bat.bing.com sst.stark-verlag.de *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * secure.pay1.de *.klarna.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.google.com/ *.mondu.ai/ *.mondu.local localhost:*/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com connect.facebook.net blog-m2-magezon-com.disqus.com disqus.com *.klarna.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com https://www.magezon.com cdn.doofinder.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com maps.gstatic.com maps.googleapis.com cdn.rawgit.com/googlemaps/ cdn.jsdelivr.net/gh/googlemaps/ *.mondu.ai/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net shop.rimpler.de www.drrimpler.de bat.bing.com connect.facebook.net www.facebook.com www.google.de blog-m2-magezon-com.disqus.com c.disquscdn.com checkout.mondu.ai data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js cdn.doofinder.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.google.com/ maps.googleapis.com *.avada.io *.mondu.ai/widget.js *.mondu.local/widget.js localhost:*/dist/widget.js js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io connect.facebook.net blog-m2-magezon-com.disqus.com player.vimeo.com bat.bing.com *.cloudfront.net accounts.google.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.doofinder.com downloads.mailchimp.com *.fontawesome.com fonts.googleapis.com unsafe-inline assets.braintreegateway.com d.ratepay.com d.payla.io dr.payla.io checkout.mondu.ai 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.doofinder.com wss://*.doofinder.com maps.googleapis.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com payments.amazon.de d.ratepay.com jsctool.com eu.playground.klarnaevt.com connect.facebook.net stats.g.doubleclick.net googleads.g.doubleclick.net www.google.de blog-m2-magezon-com.disqus.com disqus.com eu.klarnaevt.com bat.bing.com *.execute-api.eu-central-1.amazonaws.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.drrimpler.com/csp-report/report/index; report-to report-endpoint; 1
default-src 'self'; script-src 'self' https://matomo.partei-des-fortschritts.de; style-src 'self'; img-src 'self' data:; font-src 'self'; connect-src 'self' https://matomo.partei-des-fortschritts.de; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /api/csp-report 1
script-src-elem *.eu-6.magentosite.cloud *.lamaisonvalmont.com *.bambuser.com *.liveshopping.bambuser.com *.skeepers.io *.bglobale.com *.global-e.com *.payments-amazon.com *.cookielaw.org *.abtasty.com rum.hlx.page *.bing.com *.clarity.ms *.doubleclick.net *.facebook.net *.googletagmanager.com *.rakuten.com *.roeye.com *.roeyecdn.com static.myshlf.us *.tkrconnector.com *.dwin1.com googleapis.com *.googleapis.com 'self' 'unsafe-inline'; font-src *.bglobale.com *.global-e.com *.fontawesome.com *.gstatic.com 'self' data: *.cloudflare.com *.liveshopping.bambuser.com *.makeupar.com *.rakuten.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adyen.com *.global-e.com *.americanexpress.com *.arcot.com *.creditmutuel.fr *.mercurypaymentservices.it *.nexi.it *.nexigroup.com *.redsys.es *.rsa3dsauth.co.uk *.rsa3dsauth.com *.securesuite.co.uk *.securesuite.net *.cardinalcommerce.com facebook.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adyen.com www.google.com *.bglobale.com *.global-e.com checkout.postfinance.ch fragranceprofiler-storieveneziane.com *.bambuser.com *.liveshopping.bambuser.com *.qualifioapp.com *.sproutvideo.com *.timify.com *.webotit.ai *.3dsecure-csas.cz *.americanexpress.com *.arcot.com *.asseco-see.hr *.cardinalcommerce.com *.cic.fr *.cooppank.ee *.creditmutuel.fr *.dnp-cdms.jp *.mercurypaymentservices.it *.nexi.it *.redsys.es *.rsa3dsauth.co.uk *.rsa3dsauth.com *.secure.lcl.fr *.securesuite.net *.sparkasse.at *.criteo.com *.criteo.net doubleclick.net *.doubleclick.net facebook.com *.facebook.com *.googlesyndication.com tracead.com *.tracead.com *.trustcommander.net tk.lamaisonvalmont.com youtu.be *.youtu.be youtube-nocookie.com pay.google.com *.nexigroup.com *.securesuite.co.uk *.wlp-acs.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.adyen.com *.bglobale.com *.global-e.com https://images.unsplash.com checkout.postfinance.ch 'self' data: s3s.fr *.s3s.fr *.amazonaws.com *.liveshopping.bambuser.com *.makeupar.com *.shipup.co *.googleusercontent.com adsrvr.org *.adsrvr.org *.baidu.com bing.com *.bing.com boxclone.com *.clarity.ms *.criteo.net http://sync.commander1.com/ commander1.com *.commander1.com doubleclick.net *.doubleclick.net facebook.com *.facebook.com *.facebook.net *.fillr.com goldenbees.fr *.goldenbees.fr google-analytics.com *.google-analytics.com *.googlesyndication.com *.googletagmanager.com linksynergy.com *.linksynergy.com *.roeye.com sync.smartadserver.com tagcommander.com *.tagcommander.com *.tiktok.com *.trustcommander.net *.google.ad *.google.ae *.google.af *.google.ag *.google.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cat *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.nr-data.net abtasty.com *.abtasty.com quanta.io *.quanta.io google.com *.google.com *.googleapis.com gstatic.com *.gstatic.com lamaisonvalmont.com *.lamaisonvalmont.com *.cookielaw.org data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.adyen.com https://rum.hlx.page www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.bglobale.com *.global-e.com https://maps.googleapis.com https://widgets.rr.skeepers.io/ https://api-product-reviews.rr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ checkout.postfinance.ch *.google.com *.gstatic.com *.tagcommander.com *.trustcommander.net *.amazonaws.com *.cloudflare.com *.makeupar.com *.qualifio.com *.qualifioapp.com *.rewardstyle.com *.shipup.co *.timify.com *.webotit.ai adition.com *.adition.com adnxs.com *.adnxs.com adventori.com *.adventori.com bing.com *.bing.com boxclone.com clarity.ms *.clarity.ms commander1.com *.commander1.com criteo.com *.criteo.com doubleclick.net *.doubleclick.net facebook.net *.facebook.net *.giocdn.com googleadservices.com *.googleadservices.com *.googlesyndication.com hublosk.com jullyambery.net nxtck.com *.nxtck.com rakuten.com *.rakuten.com *.roeyecdn.com tiktok.com *.tiktok.com tracead.com *.tracead.com conoret.com newrelic.com nr-data.net *.dwin1.com *.hotjar.com *.tkrconnector.com abtasty.com *.abtasty.com quanta.io *.quanta.io googleapis.com *.googleapis.com youtube.com *.cookielaw.org 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.bglobale.com *.global-e.com *.fontawesome.com *.googleapis.com *.gstatic.com *.cloudflare.com *.shipup.co 'self' 'unsafe-inline'; object-src *.youtube.com 'self' 'unsafe-inline'; media-src lamaisonvalmont.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src vimeo.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adyen.com https://maps.googleapis.com https://player.vimeo.com https://widgets.rr.skeepers.io/ https://api-product-reviews.rr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ t.elasticsuite.io *.google-analytics.com *.trustcommander.net fondationvalmont.com *.cloudflare.com *.ipify.org *.makeupar.com *.shipup.co *.skeepers.io *.valmontcosmetics.com *.liveshopping.bambuser.com *.bglobale.com *.global-e.com *.hotjar.com wss://*.hotjar.com *.tkrconnector.com bing.com *.bing.com commander1.com *.commander1.com clarity.ms *.clarity.ms *.doubleclick.net *.facebook.com google.com *.google.com *.googlesyndication.com *.googletagmanager.com rum.hlx.page *.stape.net tiktok.com *.tiktok.com tk.lamaisonvalmont.com yandex.ru *.google.ad *.google.ae *.google.af *.google.ag *.google.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cat *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw nr-data.net abtasty.com *.abtasty.com *.hotjar.io noembed.com *.noembed.com quanta.io *.quanta.io plyr.io *.plyr.io googleapis.com *.googleapis.com *.cookielaw.org *.onetrust.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://valmont.report-uri.com/r/d/csp/reportOnly; report-to report-endpoint; 1
font-src fonts.googleapis.com fonts.gstatic.com *.googleapis.com *.gstatic.com 'self' data: *.cloudflare.com *.bootstrapcdn.com *.hotjar.com *.typekit.net cdn.curator.io static.klaviyo.com data: 'self' 'unsafe-inline'; form-action *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.youtube-nocookie.com www.google.com *.chatra.io *.hotjar.com *.facebook.com *.trustpilot.com *.kiyoh.com *.pinterest.com *.criteo.com *.cookiefirst.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: *.vimeocdn.com i.ytimg.com *.youtube.com maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com magefan.com cm.magefan.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://images.unsplash.com * scontent.fzty3-2.fna.fbcdn.net *.ggpht.com *.disqus.com *.hsforms.net *.hsforms.com 'self' data: www.google.com www.google.com.ua *.googletagmanager.com *.google-analytics.com www.googletagmanager.com ssl.gstatic.com www.gstatic.com https://sst.ewings.be data: 'self' 'unsafe-inline'; script-src s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://maps.googleapis.com *.cloudflare.com *.twitter.com *.fontawesome.com *.elfsight.com *.chatra.io *.jsdelivr.net chimpstatic.com *.facebook.com *.doubleclick.net *.trustpilot.com s.pinimg.com *.zdassets.com *.google-analytics.com *.feedbackcompany.com *.facebook.net *.hotjar.com *.mailchimp.com *.curator.io *.typekit.net *.clarity.ms *.leadinfo.net *.criteo.com *.googleadservices.com *.cookiefirst.com www.datadoghq-browser-agent.com bat.bing.com *.tidio.co *.tidiochat.com *.iubenda.com js-agent.newrelic.com *.disqus.com https://cdn.jsdelivr.net *.hsforms.net *.hsforms.com *.google.com *.googletagmanager.com tagmanager.google.com https://sst.ewings.be 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com downloads.mailchimp.com *.cloudflare.com *.fontawesome.com *.bootstrapcdn.com *.mailchimp.com https://cdn.jsdelivr.net *.googleapis.com *.curator.io *.cookiefirst.com *.typekit.net *.gstatic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src curatorio.s3.amazonaws.com curator-assets.b-cdn.net video-lga3-2.cdninstagram.com video-iad3-1.xx.fbcdn.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com https://maps.googleapis.com https://player.vimeo.com *.cloudflare.com *.elfsight.com *.instacloud.io *.google-analytics.com *.google.com *.doubleclick.net *.hotjar.com *.hotjar.io ct.pinterest.com *.paypal.com *.zdassets.com *.zendesk.com *.feedbackcompany.com *.curator.io *.clarity.ms *.leadinfo.net *.cookiefirst.com gtm-mm85h6s-nzi2m.uc.r.appspot.com www.google.com *.livechatinc.com www.paypalobjects.com dev.visualwebsiteoptimizer.com www.googletagmanager.com pagead2.googlesyndication.com googleadservices.com rum.ewings.cloud *.gstatic.com data: t.elasticsuite.io *.hsforms.net *.hsforms.com *.analytics.google.com *.googletagmanager.com https://sst.ewings.be 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://cfd872ae-ff30-44f0-be27-d9f5320ac561.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src https:; object-src 'none'; base-uri 'self'; form-action 'self'; 1
object-src 'none';base-uri 'self';script-src 'nonce-TlaGjusaTXqt66dehPGyog' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://js.hs-scripts.com https://js.hs-analytics.net https://js.hsforms.net https://js.hscta.net https://js.hscollectedforms.net https://js.hsleadflows.net https://static.hsappstatic.net https://us.i.posthog.com https://us-assets.i.posthog.com https://bat.bing.com https://snap.licdn.com https://connect.facebook.net https://www.redditstatic.com https://analytics.ahrefs.com https://assets.apollo.io https://www.clickcease.com https://cdn.clickcease.com https://www.youtube.com https://s.ytimg.com https://videos.sproutvideo.com https://www.g2.com https://va.vercel-scripts.com https://ddwl4m2hdecbv.cloudfront.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; media-src 'self' https://videos.sproutvideo.com https://c.sproutvideo.com; connect-src 'self' https://cdn.sanity.io https://*.api.sanity.io https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://us.i.posthog.com https://us-assets.i.posthog.com https://api.hubapi.com https://forms.hsforms.com https://api.hubspot.com https://bat.bing.com https://px.ads.linkedin.com https://analytics.ahrefs.com https://api.apollo.io; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://videos.sproutvideo.com https://app.hooksecurity.co https://forms.hsforms.com https://meetings.hubspot.com https://app.hubspot.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://forms.hsforms.com https://api.hsforms.com; object-src 'none'; upgrade-insecure-requests; report-uri /api/csp-report; report-to csp-endpoint 1
default-src 'self'; connect-src 'self' https://sessions.bugsnag.com/ https://notify.bugsnag.com/ https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://maps.googleapis.com https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-b.intercom.io https://nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io https://*.intercom-messenger.com wss://*.intercom-messenger.com https://uploads.intercomcdn.com https://www.google.com https://places.googleapis.com https://o4508805257101313.ingest.de.sentry.io https://static.hypotheekbond.nl https://insurance.hypotheekbond.nl https://*.hstatic.nl blob:; font-src 'self' https://fonts.gstatic.com https://js.intercomcdn.com https://fonts.intercomcdn.com https://use.typekit.net https://static.hypotheekbond.nl https://*.hstatic.nl data:; frame-src 'self' https://*.portefeuillesignalen.nl/ https://fastlane.hypotheekbond.nl https://*.tools.hypotheekbond.nl https://formulier.werkgeversverklaring.nl https://www.werkgeversverklaring.nl blob:; img-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://www.portefeuillesignalen.nl https://js.intercomcdn.com https://downloads.intercomcdn.com https://downloads.intercomcdn.eu https://uploads.intercomusercontent.com https://*.intercomcdn.com https://*.intercomusercontent.com https://*.intercomassets.com https://*.intercomassets.eu https://maps.gstatic.com https://maps.googleapis.com https://streetviewpixels-pa.googleapis.com https://lh3.googleusercontent.com https://www.woonfonds.nl https://woonfonds.nl https://p.typekit.net https://api.qrserver.com https://static.hypotheekbond.nl https://*.hstatic.nl https://www.hypotheekbond.nl data:; media-src 'self' blob: data:; script-src 'self' https://www.google-analytics.com https://ssl.google-analytics.com https://widget.intercom.io https://js.intercomcdn.com https://demo.yubico.com https://use.typekit.net https://maps.googleapis.com https://www.googletagmanager.com https://static.hypotheekbond.nl https://tools.hypotheekbond.nl https://*.hstatic.nl 'nonce-CfMVdf2VL+VINyuvCnkC4bC3' 'unsafe-inline' 'report-sample'; style-src 'self' https://fonts.googleapis.com https://stackpath.bootstrapcdn.com https://js.intercomcdn.com https://static.hypotheekbond.nl https://tools.hypotheekbond.nl https://*.hstatic.nl 'unsafe-inline'; report-uri /cspreport 1
default-src * 'unsafe-inline' 'unsafe-eval'; report-to report; report-uri /?_task=background&_action=csp_report 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.punchout2go.com *.tradecentric.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.tradecentric.com *.birchstreetsystems.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.google.com/ *.punchout2go.com *.tradecentric.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.trackedlink.net *.ddlnk.net https://www.magezon.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.google.com/ *.punchout2go.com *.tradecentric.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://acsbapp.com https://www.gfifoods.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com webchat.dotdigital.com webchat.staging.dotdigital.com *.punchout2go.com *.tradecentric.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://cdn.acsbapp.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
default-src 'self';base-uri 'self';frame-ancestors 'self' https://mychart-cc-bsh-nchmd.org/ https://mychart-cc-ewp-nchmd.org/ https://mychart-cc-ida-nchmd.org/ https://mychart-cc-ipg-nchmd.org/ https://mychart-cc-ncc-nchmd.org/ https://mychart-cc-nhw-nchmd.org/ https://mychart-cc-sghu-nchmd.org/ https://mychart-nchmd.org https://nchmd.org https://nchstaging.wpengine.com;frame-src 'self' epichttp: https://cdnapisec.kaltura.com https://epicproxy.et1233.epichosted.com https://mychart-nchmd.org https://pay.instamed.com https://www.youtube.com;script-src 'nonce-46b6c847e5cb4343b655014cde5d46e5' 'self';img-src https://* 'self' blob: data:;connect-src 'self' epichttp: https://*.app.st-1233.epiccloud.io https://*.kaltura.com https://mychart-mychart-chat-mediator.app.st-1233.epiccloud.io https://www.youtube.com/ wss://*.webpubsub.azure.com;style-src 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
font-src https://www.gstatic.com *.dhlparcel.nl https://widgetcontent.thuiswinkel-cdn.org https://widget.thuiswinkel-cdn.org https://fonts.gstatic.com *.fontawesome.com *.gstatic.com 'self' data: https://widgets.trustedshops.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net *.googletagmanager.com *.doubleclick.net *.voegenshop.nl https://widgets.trustedshops.com www.xtento.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://belco-prod.s3-eu-central-1.amazonaws.com https://images.unsplash.com *.google.com *.google.nl *.mailcampaigns.nl *.cloudflare.com *.voegenshop.nl *.etrusted.com https://widgetcontent.thuiswinkel-cdn.org https://widget.thuiswinkel-cdn.org *.doubleclick.net www.xtento.com cdn.xtento.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://img.youtube.com https://www.mollie.com *.amazonaws.com *.hsforms.net *.hsforms.com 'self' data: www.google.com.ua https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com https://dlyyzort.jointcarrelage.be data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://cdn.belco.io https://maps.googleapis.com *.dhlparcel.nl *.google-analytics.com *.mailcampaigns.nl *.cookiecode.nl *.clarity.ms *.cloudflare.com https://consent.studio https://widget.thuiswinkel.org https://widget.thuiswinkel-cdn.org https://cloud.umami.is www.xtento.com cdn.xtento.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com https://cdn.jsdelivr.net *.belco.io https://browser.sentry-cdn.com *.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com *.sendcloud.sc *.jsdelivr.net *.hsforms.net *.hsforms.com *.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.googletagmanager.com tagmanager.google.com https://dlyyzort.jointcarrelage.be 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://*.googleapis.com *.dhlparcel.nl *.cloudflare.com *.etrusted.com https://widgetcontent.thuiswinkel-cdn.org https://widget.thuiswinkel-cdn.org https://static.klaviyo.com https://cdn.jsdelivr.net https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com *.sendcloud.sc *.jsdelivr.net *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com wss://chat.belco.io https://cdn.belco.io https://maps.googleapis.com https://player.vimeo.com *.doubleclick.net *.cookiecode.nl *.google.com *.voegenshop.nl https://consent.studio https://widgetcontent.thuiswinkel-cdn.org https://gateway.umami.is https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.belco.io https://*.ingest.sentry.io https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.analytics.google.com *.googletagmanager.com https://dlyyzort.jointcarrelage.be 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' https://jaws-prod.cdn.pbs.org https://challenges.cloudflare.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://image.pbs.org https://media.njpbs.org https://*.google-analytics.com https://www.googletagmanager.com; font-src 'self'; frame-src https://player.pbs.org https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com https://report.njpbs.org https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none' 1
default-src 'self' blob:; script-src 'self' 'strict-dynamic' 'nonce-tGx5Qk2TO738aBNwQmU38Q==' https://*.vo.msecnd.net https://*.fontawesome.com; style-src 'self' 'unsafe-inline' https://*.fontawesome.com; font-src 'self' data: https://*.fontawesome.com; img-src 'self' data: blob:; worker-src 'self' blob:; connect-src 'self' https://*.mapbox.com https://dc.services.visualstudio.com https://cdn.datatables.net data: wss:; frame-src 'self' blob: data: 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://www.facebook.com; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com https://challenges.cloudflare.com https://connect.facebook.net https://www.googletagmanager.com https://www.clarity.ms https://scripts.clarity.ms https://googleads.g.doubleclick.net https://www.google.com https://js.stripe.com https://m.stripe.network https://b.stripecdn.com https://hcaptcha.com https://*.hcaptcha.com https://*.challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://js.stripe.com; img-src 'self' data: blob: https://media.arbafox.com https://www.facebook.com https://www.google.com https://www.google.ae https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://*.clarity.ms https://js.stripe.com https://c.bing.com https://challenges.cloudflare.com https://connect.facebook.net https://www.googletagmanager.com https://www.googleadservices.com; font-src 'self' data: https://js.stripe.com; connect-src 'self' https://api.arbafox.com https://*.clarity.ms https://www.google.com https://analytics.google.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://connect.facebook.net https://www.facebook.com https://challenges.cloudflare.com https://api.stripe.com https://js.stripe.com https://m.stripe.com https://merchant-ui-api.stripe.com https://r.stripe.com https://api.hcaptcha.com https://*.hcaptcha.com https://*.challenges.cloudflare.com https://googleads.g.doubleclick.net https://www.google.ae https://www.googleadservices.com; frame-src 'self' https://challenges.cloudflare.com https://www.facebook.com https://js.stripe.com https://m.stripe.network https://b.stripecdn.com https://*.hcaptcha.com; worker-src 'self' blob:; manifest-src 'self'; report-uri /api/csp-report; report-to csp-endpoint 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.addthis.com js.mollie.com *.multisafepay.com https://pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.trustpilot.com *.facebook.com *.clarity.ms *.hotjar.com *.kleeneproducties.nl kleeneproducties.nl issuu.com *.issuu.com adobe.com *.pinterest.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com magefan.com cm.magefan.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://www.mollie.com *.multisafepay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: *.doubleclick.net *.facebook.com *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.google.com *.google.nl *.guapatest.nl *.homecenter.nl *.kapenga.nl *.stoelenconcurrent.nl *.pinterest.com *.clarity.ms *.bing.com *.linkedin.com *.travyk.nl *.google.fr data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com s7.addthis.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net https://ipinfo.io js.mollie.com *.multisafepay.com https://pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.trustpilot.com *.clickcease.com *.facebook.net *.googletagmanager.com *.googleoptimize.com *.googleanalytics.com *.google-analytics.com *.gstatic.com *.hotjar.com *.clarity.ms chimpstatic.com mylivechat.com *.mylivechat.com issuu.com *.issuu.com adobe.com ipinfo.io *.ipinfo.io *.pinimg.com *.licdn.com *.homecenter.nl *.kapenga.nl *.cloudfront.net *.pinterest.com *.travyk.nl *.googlesyndication.com *.cloudflare.com data.homecenter.nl 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.jsdelivr.net *.multisafepay.com assets.braintreegateway.com *.trustpilot.com *.google.com *.googleapis.com *.homecenter.nl *.mailchimp.com *.mylivechat.com kleeneproducties.nl 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com ekr.zdassets.com/ *.multisafepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.doubleclick.net *.google-analytics.com *.homecenter.nl *.hypernode.io *.clarity.ms *.hotjar.com *.hotjar.io wss://*.hotjar.com/ *.hotjar.com/ *.pinterest.com *.googlesyndication.com *.demdex.net *.linkedin.com *.kapenga.nl *.travyk.nl *.amazonaws.com *.kleeneproducties.nl kleeneproducties.nl https://www.kapenga.info 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-fs2cMvDegeQHoO6NLkRipg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de static-eu.payments-amazon.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com 'self' www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.googleapis.com *.bootstrapcdn.com *.bazaarvoice.com *.cloudflare.com accessibilityserver.org *.userway.org *.socialintents.com s7.addthis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com 'self' unsafe-inline *.googleapis.com *.socialintents.com *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com *.klaviyo.com *.userway.org https://a.klaviyo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.xpdent.com/; report-to report-endpoint; 1
default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; connect-src https: wss://*.tawk.to https://*.tawk.to; report-uri /csp-report 1
font-src www.paypalobjects.com *.googleapis.com *.gstatic.com data: *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com www.google.com *.google.com/ https://www.youtube.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com *.bird.eu https://www.magezon.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.fontawesome.com https://fonts.gstatic.com *.gstatic.com *.tawk.to www.kitchenall.com *.stape.io *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ https://www.creditkey.com *.creditkey.com maps.google.com www.google.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.stape.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io https://images.unsplash.com magefan.com cm.magefan.com www.google.com.ua *.tawk.to cdn.jsdelivr.net/emojione/ *.amazonaws.com www.kitchenall.com www.shopperapproved.com maps.gstatic.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.doubleclick.net *.googletagmanager.com *.stape.io *.creditkey.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://maps.googleapis.com https://player.vimeo.com unpkg.com https://unpkg.com https://cdn.jsdelivr.net *.tawk.to cdn.jsdelivr.net/emojione/ *.cloudflare.com *.gstatic.com *.amazonaws.com www.kitchenall.com www.shopperapproved.com *.hotjar.com content.hotjar.io static.hotjar.com script.hotjar.com bat.bing.com *.clarity.ms *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.doubleclick.net *.stape.io *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.googleapis.com *.tawk.to www.kitchenall.com *.googleapis.com *.googletagmanager.com *.stape.io *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tawk.to www.kitchenall.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://maps.googleapis.com https://player.vimeo.com *.creditkey.com wss://*.tawk.to/s/ *.tawk.to stats.g.doubleclick.net www.kitchenall.com *.hotjar.com content.hotjar.io static.hotjar.com script.hotjar.com ws.hotjar.com bat.bing.com bat.bing.net *.clarity.ms *.google.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog *.stape.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src *.creditkey.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.langshop.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net http://ws1.postescanada-canadapost.ca/ http://stats.canadapost.ca/ https://www.google.co.in/ https://px.ads.linkedin.com/ http://canadapostcapool.112.2o7.net/ https://canadapostcaglobal.112.2o7.net/ https://*.omtrdc.net/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page http://ws1.postescanada-canadapost.ca/ https://snap.licdn.com/ *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com http://ws1.postescanada-canadapost.ca/ https://px.ads.linkedin.com/ http://canadapost.tt.omtrdc.net/ https://canadapostcaglobal.112.2o7.net/ https://*.omtrdc.net/ *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com api.userway.org cdn.userway.org https://www.gstatic.com https://fonts.gstatic.com *.stape.io *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://plumrocket.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com self https://dev-3jnwcczu.mrhankeystoys.com https://mrhankeystoys.magentoprojects.net/ 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.certcapture.com *.awin1.com *.zenaps.com *.fls.doubleclick.net https://challenges.cloudflare.com https://plumrocket.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com *.addthis.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.stape.io c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://accounts.google.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.certcapture.com *.awin1.com *.zenaps.com *.wepowerconnections.com https://images.unsplash.com magefan.com cm.magefan.com *.amazonaws.com *.mrhankeystoys.com *.google.co.in https://*.gstatic.com *.clarity.ms api.userway.org cdn.userway.org https://*.google.com https://*.googleapis.com https://*.googleusercontent.com *.disqus.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com *.stape.io https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://redchamps.com maps.gstatic.com *.hsforms.net *.hsforms.com 'self' data: www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.certcapture.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com https://challenges.cloudflare.com https://maps.googleapis.com *.amazonaws.com *.mrhankeystoys.com *.googleapis.com *.clarity.ms api.userway.org cdn.userway.org https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.stape.io *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://accounts.google.com https://www.gstatic.com maps.googleapis.com *.hsforms.net *.hsforms.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.certcapture.com *.googleapis.com api.userway.org cdn.userway.org https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.jsdelivr.net *.googletagmanager.com *.stape.io *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com https://accounts.google.com https://www.gstatic.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.amazonaws.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.certcapture.com *.wepowerconnections.com https://the.sciencebehindecommerce.com https://maps.googleapis.com https://player.vimeo.com *.mrhankeystoys.com *.googleapis.com *.clarity.ms api.userway.org https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog *.stape.io https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://accounts.google.com maps.googleapis.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src *.certcapture.com *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com maxcdn.bootstrapcdn.com https://dashboard.webwinkelkeur.nl data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.googletagmanager.com/ js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://dashboard.webwinkelkeur.nl 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://dashboard.webwinkelkeur.nl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://browser.sentry-cdn.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://dashboard.webwinkelkeur.nl 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://*.ingest.sentry.io http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://challenges.cloudflare.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://challenges.cloudflare.com https://maps.googleapis.com https://player.vimeo.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; img-src a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; connect-src nominatim.openstreetmap.org api.shiptimize.me dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://challenges.cloudflare.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; 1
object-src  'none'; connect-src 'self' *.adulttime.xxx *.adulttime.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.adulttime.xxx *.adulttime.com join.gammasecure.com; script-src 'self' *.adulttime.xxx *.adulttime.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.adulttime.xxx *.adulttime.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
object-src 'none';base-uri 'self';script-src 'nonce-CT9Cls1VMppdSqcPEpp35g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.googleapis.com fonts.gstatic.com *.googleapis.com *.gstatic.com data: https://fonts.gstatic.com *.inpost.pl *.fontawesome.com maxcdn.bootstrapcdn.com https://geowidget.easypack24.net 'self' data: https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com *.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.awin1.com *.zenaps.com *.fls.doubleclick.net *.inpost.pl c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://geowidget-app.inpost.pl/ *.weltpixel.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com facebook.com *.cookiebot.com creativecdn.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com *.awin1.com *.zenaps.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.inpost.pl magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://geowidget.easypack24.net *.easypack24.net *.openstreetmap.org *.hsforms.net *.hsforms.com 'self' data: https://maps.gstatic.com https://maps.googleapis.com *.facebook.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com *.bing.com garett.com.pl google.pl facebook.com trustmate.io www.google.pl *.clarity.ms blob: *.credit-agricole.pl lantern.roeye.com *.googlesyndication.com awin1.com google.com s3-eu-west-1.amazonaws.com salesmanago.s3-eu-west-1.amazonaws.com conversionlabs.net.pl *.cookiebot.com *.trustmate.io img.sct.eu1.usercentrics.eu data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.awin1.com www.dwin1.com *.zenaps.com https://the.sciencebehindecommerce.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech *.inpost.pl *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://geowidget.easypack24.net *.easypack24.net *.openstreetmap.org *.hsforms.net *.hsforms.com *.google.com https://maps.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com *.cookiebot.com rum.uptime.com *.buybox.click *.cloudflare.com *.hotjar.com bat.bing.com *.callpage.io trustmate.io analytics.tiktok.com *.clickonometrics.pl *.clarity.ms *.dwin1.com callpage.io *.roeyecdn.com *.googlesyndication.com awin1.com *.cookiebot.eu https://scripts.luigisbox.com https://cdn.luigisbox.com *.luigisbox.com https://scripts.luigisbox.tech https://cdn.luigisbox.tech *.luigisbox.tech *.facebook.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech https://fonts.googleapis.com *.inpost.pl *.gstatic.com *.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com https://geowidget.easypack24.net https://geowidget.inpost.pl tagmanager.google.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com *.callpage.io *.cloudfront.net trustmate.io sandbox-easy-geowidget-sdk.easypack24.net https://cdn.luigisbox.com *.luigisbox.com *.luigisbox.tech 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.inpost.pl https://geowidget.easypack24.net *.callpage.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://the.sciencebehindecommerce.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech *.inpost.pl https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.easypack24.net *.openstreetmap.org t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com https://maps.googleapis.com *.facebook.net https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com stats.g.doubleclick.net *.cookiebot.com *.googlesyndication.com stream.cloud.witbee.com *.cloudflare.com rum.uptime.com *.callpage.io vc-service.saleago.com googleads.g.doubleclick.net analytics.tiktok.com *.clarity.ms wss://*.salesmanago.com wss://*.hotjar.com *.hotjar.io delivery.clickonometrics.pl trustmate.io facebook.com *.cookiebot.eu https://api.luigisbox.com https://live.luigisbox.com https://app.luigisbox.com *.luigisbox.com analytics-ipv6.tiktokw.us https://api.luigisbox.tech https://live.luigisbox.tech https://app.luigisbox.tech *.luigisbox.tech 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googleapis.com *.google.com *.facebook.com *.cookiebot.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://*.razorpay.com https://www.googletagmanager.com https://www.google-analytics.com https://static.cloudflareinsights.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; connect-src 'self' https:; media-src 'self' https:; frame-src 'self' https://*.razorpay.com https://www.youtube.com https://www.youtube-nocookie.com https://challenges.cloudflare.com; object-src 'none'; base-uri 'self'; form-action 'self' https://*.razorpay.com; report-to csp-endpoint; report-uri http://sampada.net/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://secure.nmi.com https://applepay.cdn-apple.com; frame-src 'self' https://secure.nmi.com https://ui2.tipalti.com https://ui2.sandbox.tipalti.com; connect-src 'self' https://secure.nmi.com https://apple-pay-gateway.apple.com; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' 1
font-src fonts.googleapis.com fonts.gstatic.com data: *.wistia.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.doubleclick.net *.googletagmanager.com sketchfab.com *.wistia.net *.wistia.com *.weltpixel.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com magefan.com cm.magefan.com *.hubspot.com *.bing.com *.bing.net *.facebook.com *.elfsight.com *.elfsightcdn.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.clarity.ms tracking.monsido.com *.wistia.net *.wistia.com *.hsforms.net *.hsforms.com *.disqus.com https://img.youtube.com 'self' data: *.gstatic.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ unpkg.com *.osano.com *.hubspot.com js.hs-scripts.com js.hsadspixel.net js.hs-analytics.net js.hscollectedforms.net js.hs-banner.com *.hscollectedforms.net *.sketchfab.com *.bing.com connect.facebook.net *.elfsight.com *.sentry-cdn.com *.clarity.ms app-script.monsido.com *.wistia.net *.wistia.com *.hsforms.net *.hsforms.com *.disqus.com player.vimeo.com *.google.com *.gstatic.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net https://app-script.monsido.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.wistia.net *.wistia.com *.gstatic.com *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src blob: *.wistia.net *.wistia.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.osano.com *.google.com *.wistia.com *.elfsight.com *.bing.com *.bing.net *.doubleclick.net *.hubspot.com *.hubapi.com *.hscollectedforms.net static.hsappstatic.net *.litix.io *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.clarity.ms t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.wistia.net *.wistia.com 'self' 'unsafe-inline'; 1
frame-ancestors *.hana.ondemand.com https://oqs.google.com https://docs.google.com https://contacts.google.com https://accounts.google.com https://simplyasia.co.za https://locationbank.net 'self'; object-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; media-src https://maps.googleapis.com/ https://ufo-prod-dynamic-forms.vaimo-sa-cloud.co.za/ *.zdassets.com http://ms-dynamic-form-builder-service:8000 https://ms-dynamic-form-builder-service:8000 https://locationbank.net 'self' 'unsafe-inline'; font-src https://maps.googleapis.com/ https://ufo-prod-dynamic-forms.vaimo-sa-cloud.co.za/ www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net *.cloudflare.com *.googleapis.com *.zopim.com *.tawk.to *.jsdelivr.net media.flixfacts.com 'unsafe-inline' data: http://ms-dynamic-form-builder-service:8000 https://ms-dynamic-form-builder-service:8000 https://locationbank.net data: 'self' 'unsafe-inline'; style-src https://maps.googleapis.com/ https://ufo-prod-dynamic-forms.vaimo-sa-cloud.co.za/ fonts.googleapis.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net *.cloudflare.com *.googleapis.com *.jsdelivr.net www.gstatic.com media.flixcar.com 'unsafe-inline' data: http://ms-dynamic-form-builder-service:8000 https://ms-dynamic-form-builder-service:8000 https://locationbank.net https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; connect-src https://maps.googleapis.com/ https://ufo-prod-dynamic-forms.vaimo-sa-cloud.co.za/ www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.klevu.com *.ksearchnet.com https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com embed.payjustnow.com *.payjustnow.com *.testfreaks.com *.nosto.com *.hotjar.io *.hotjar.com *.doubleclick.net *.zendesk.com *.tawk.to wss://*.tawk.to *.tawk.link *.addthis.com *.addthisedge.com *.what3words.com *.googleapis.com vsb111.tawk.to ekr.zdassets.com api.magento.com commerce.adobedc.net app.mobicredwidget.co.za www.google-analytics.com wss://widget-mediator.zopim.com bam.nr-data.net *.googletagmanager.com security-hub.vaimo.network 'unsafe-eval' data: http://ms-dynamic-form-builder-service:8000 https://ms-dynamic-form-builder-service:8000 https://locationbank.net 'self' 'unsafe-inline'; form-action https://maps.googleapis.com/ https://ufo-prod-dynamic-forms.vaimo-sa-cloud.co.za/ pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://secure.paygate.co.za/payweb3/process.trans https://sandbox.payfast.co.za https://www.payfast.co.za/eng/process webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; frame-src https://maps.googleapis.com/ https://ufo-prod-dynamic-forms.vaimo-sa-cloud.co.za/ bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com embed.payjustnow.com *.payjustnow.com *.nosto.com *.issuu.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.criteo.net *.criteo.com *.addthis.com webchat.jdg.co.za *.jdg.co.za http://ms-dynamic-form-builder-service:8000 https://ms-dynamic-form-builder-service:8000 https://locationbank.net 'self' 'unsafe-inline'; img-src https://maps.googleapis.com/ https://ufo-prod-dynamic-forms.vaimo-sa-cloud.co.za/ 'unsafe-inline' data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com *.klevu.com *.ksearchnet.com https://firebasestorage.googleapis.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cloudflare.com *.google.com *.google.lv *.google.co.za *.google.com.na *.google.na *.zopim.com *.nosto.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.zopim.io *.sfdr.co sfdr.co *.tawk.to tawk.link *.tawk.link *.addthis.com *.jsdelivr.net *.azurewebsites.net www.google-analytics.com maps.googleapis.com app.mobicredwidget.co.za amcglobal.sc.omtrdc.net media.flixcar.com rt.flix360.com assets.secure.checkout.visa.com http://ms-dynamic-form-builder-service:8000 https://ms-dynamic-form-builder-service:8000 https://locationbank.net data: 'self' 'unsafe-inline'; script-src https://maps.googleapis.com/ https://ufo-prod-dynamic-forms.vaimo-sa-cloud.co.za/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.klevu.com *.ksearchnet.com *.avada.io *.shopify.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com embed.payjustnow.com *.payjustnow.com *.zopim.com *.videoly.co sfdr.co *.cnetcontent.com *.cloudfront.net *.klevu.com *.google.lv *.google.co.za *.google.com.na *.google.na *.cloudflare.com *.cloudflareinsights.com *.nosto.com *.hotjar.com *.googletagmanager.com *.criteo.net *.criteo.com *.sfdr.co *.tawk.to *.tawk.link *.jsdelivr.net *.addthis.com *.addthisedge.com *.moatads.com *.mouseflow.com *.facebook.com *.what3words.com maps.googleapis.com commerce.adobedtm.com magento-recs-sdk.adobe.net static.zdassets.com app.mobicredwidget.co.za www.gstatic.com bam.nr-data.net js.testfreaks.com media.flixfacts.com media.flixcar.com security-hub.vaimo.network http://ms-dynamic-form-builder-service:8000 https://ms-dynamic-form-builder-service:8000 https://locationbank.net https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https: wss:; frame-src 'self' https: 1
script-src https://www.stokesstores.com/ https://load.measure.stokesstores.com/ https://apis.google.com/ https://static.klaviyo.com/ https://api.heyday.ai/ https://static-tracking.klaviyo.com/ https://cdn.attn.tv/ https://bat.bing.com/ https://www.clarity.ms/ https://pixel.byspotify.com/ https://woobox.com/ https://input.noibu.com/ https://cdn.noibu.com/ https://js-agent.newrelic.com/; style-src 'self' blob: https: 'unsafe-inline' https://www.stokesstores.com/; img-src data: http: https:; object-src 'none'; base-uri 'none'; child-src 'self'; font-src 'self' fonts.gstatic.com static.klaviyo.com; frame-src assets.braintreegateway.com www.google.com www.youtube.com www.youtu.be www.vimeo.com https://creatives.attn.tv https://webchat.heyday.ai 1
object-src 'none';base-uri 'self';script-src 'nonce-T1eZJP4eFBJCGxOKACUYLg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.fontawesome.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://seo.mageplaza.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com https://www.magezon.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com 'self' data: *.gstatic.com maps.googleapis.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js chimpstatic.com downloads.mailchimp.com *.list-manage.com *.google.com maps.googleapis.com cdn.rawgit.com/googlemaps/js-marker-clusterer/gh-pages/src/markerclusterer.js cdn.jsdelivr.net/gh/googlemaps/js-marker-clusterer@gh-pages/src/markerclusterer.js code.jquery.com/jquery-3.6.0.min.js cdnjs.cloudflare.com/ajax/libs/knockout/3.5.1/knockout-min.js *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.gstatic.com https://www.googletagmanager.com tagmanager.google.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com *.fontawesome.com unsafe-inline assets.braintreegateway.com *.googleapis.com *.gstatic.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com maps.googleapis.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com t.elasticsuite.io *.google-analytics.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-O5Y3SSGhnHlP5jT9O0u-kQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://analytics.ulearn.dev https://apis.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https://*.googleusercontent.com https://avatars.githubusercontent.com; connect-src 'self' https://api.ulearn.dev https://analytics.ulearn.dev https://identitytoolkit.googleapis.com https://securetoken.googleapis.com https://www.googleapis.com; frame-src https://ulearn--dev.firebaseapp.com https://accounts.google.com; object-src 'none'; base-uri 'self'; form-action 'self' 1
font-src maxcdn.bootstrapcdn.com *.hotjar.com *.hotjar.io *.gstatic.com *.facebook.com *.giosg.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com paytrail.com *.facebook.com *.giosg.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * services.paytrail.com *.paytrail.com epmt.nordea.fi *.nordea.com verkkopankki.danskebank.fi online.s-pankki.fi verkkomaksu.poppankki.fi verkkomaksu.omasp.fi auth.aktia.fi verkkomaksu.handelsbanken.fi verkkomaksu.saastopankki.fi online.alandsbanken.fi maksu.pivo.fi qa-maksu.pivo.fi v1-hub-staging.sph-test-solinor.com v1.api.paymenthighway.io *.paymenthighway.io *.mobilepay.fi 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.google.com *.hotjar.com *.hotjar.io www.facebook.com *.giosg.com connect.facebook.net graph.facebook.com business.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.paytrail.com *.placeholder.com *.adnxs.com www.facebook.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.gstatic.com *.giosg.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com https://firebasestorage.googleapis.com https://www.unifaunonline.se https://*.tile.openstreetmap.org/ store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com cdn2.hubspot.net resources.paytrail.com *.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com *.gstatic.com *.googletagmanager.com *.ccdc02.com *.hotjar.com *.hotjar.io www.facebook.com *.facebook.net *.giosg.com *.custobar.com connect.facebook.net graph.facebook.com business.facebook.com www.termsfeed.com *.avada.io *.shopify.com https://api.unifaun.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com services.paytrail.com resources.paytrail.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com maxcdn.bootstrapcdn.com *.googleapis.com tagmanager.google.com *.facebook.com *.giosg.com *.fontawesome.com https://fonts.bunny.net unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.authorize.net *.hotjar.com *.hotjar.io wss://*.hotjar.com *.google-analytics.com stats.g.doubleclick.net www.facebook.com *.giosg.com connect.facebook.net graph.facebook.com business.facebook.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.paytrail.com *.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; font-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; script-src 'self' https: data:; style-src 'self' https: data:; connect-src 'self' https: data: wss:; frame-src https: 'self' 1
default-src 'self' ; connect-src 'self' s3dynamodblambdacheckurl.labkey.org distributionmodules.labkey.org tclambdacheckurl.labkey.org tctos3lambdauploadurl.labkey.org lk-binaries.s3-us-west-2.amazonaws.com https://*.google-analytics.com https://www.google.com https://*.googletagmanager.com https://*.analytics.google.com localhost ; object-src 'none' ; style-src 'self' 'unsafe-inline'  ; img-src 'self' data: www.googletagmanager.com https://www.googletagmanager.com ; font-src 'self' data:  ; script-src 'unsafe-eval' 'strict-dynamic' 'nonce-39fea8cc2aa03ccd'  ; base-uri 'self' ; frame-src 'self' www.youtube.com ; report-uri /admin-contentSecurityPolicyReport.api ;  report-to csp-report ; 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data:; media-src 'self' https: data: blob:; object-src 'none'; style-src 'self' https: 'unsafe-inline'; worker-src 'self' blob: data:; connect-src 'self' https: wss://us.magicnotes.ai wss://*.zendesk.com wss://*.elevenlabs.io wss://*.twilio.com wss://*.stt.speech.microsoft.com wss://*.speech.microsoft.com ws://localhost:28080 https://reasoning-us.magicnotes.ai; report-uri https://o4507984632348672.ingest.de.sentry.io/api/4507984634708048/security/?sentry_key=49e33a28253f676ed180de000bb78978&sentry_environment=production&sentry_release=cf8979eb97246be7bfb1ef39172475d5edb45960; script-src 'self' 'unsafe-eval' https://magicnotes.ai https://*.magicnotes.ai https://www.googletagmanager.com https://cdn.eu.amplitude.com https://cdn.eu.heap-api.com https://edge.eu1.fullstory.com https://rs.eu1.fullstory.com https://edge.fullstory.com https://t.contentsquare.net https://l.contentsquare.net https://assets.customer.io https://track.customer.io https://code.gist.build https://polyfill-fastly.io https://cdn.rudderlabs.com https://static.zdassets.com https://ga.jspm.io/npm:marked@9.1.5/ 'nonce-W5I1l6v+EqUalfSLFCnNjQ==' 1
default-src 'self' https: wss: *.binotel.com *.webpushs.com *.pushdata.sendpulse.com; font-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; script-src 'self' *.binotel.com *.webpushs.com *.pushdata.sendpulse.com https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; report-uri /csp-violation-report-endpoint 1
default-src 'self'; connect-src 'self' https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://translate.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com; font-src 'self' data:; frame-src 'self' https://connect.facebook.net https://m.facebook.com https://mobile.facebook.com https://static.addtoany.com https://web.facebook.com https://www.facebook.com https://www.google.com https://www.googletagmanager.com https://www.youtube.com; img-src 'self' data: blob: https://*.google-analytics.com https://*.analytics.google.com https://*.fbcdn.net https://translate.google.com https://translate.googleapis.com https://www.gcis.gov.za https://www.google.com https://www.google.co.za https://www.googletagmanager.com https://www.gov.za https://www.gstatic.com https://www.publicsectormanager.gov.za https://www.sanews.gov.za https://www.vukuzenzele.gov.za https://*.openstreetmap.org https://*.ytimg.com https://www.google-analytics.com; object-src 'none'; script-src 'self' 'report-sample' blob: https://*.google-analytics.com https://connect.facebook.net https://static.addtoany.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com; style-src 'self' 'report-sample' 'unsafe-inline' https://www.gstatic.com; webrtc 'block'; worker-src 'self' blob:; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /system/reporting/default; report-to default 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com *.cloudflare.com *.fontawesome.com *.klaviyo.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * webservices.securetrading.net *.trustpilot.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com https://www.magezon.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.xtento.com cdn.xtento.com *.doubleclick.net *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.by www.google.ca www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.br www.google.com.bz www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gg www.google.gl www.google.gr www.google.gy www.google.hn www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kz www.google.la www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.mk www.google.mn www.google.mu www.google.mv www.google.mw www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.tn www.google.tt *.googlesyndication.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com polyfill.io https://maps.googleapis.com chimpstatic.com downloads.mailchimp.com *.list-manage.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com www.facebook.com graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com webservices.securetrading.net *.trustpilot.com www.xtento.com cdn.xtento.com *.365syndicate-smart.com *.cloudflare.com *.doubleclick.net *.googleapis.com *.googlesyndication.com *.klaviyo.com *.sentry-cdn.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.trustpilot.com *.fontawesome.com *.googleapis.com *.klaviyo.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://maps.googleapis.com https://player.vimeo.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net api.addressy.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com o402164.ingest.sentry.io *.doubleclick.net *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.ca www.google.ch www.google.cl www.google.co.ao www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.kr www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.gh www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ng www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.ug www.google.co.uk www.google.co.za www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gg www.google.gr www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.lk www.google.lt www.google.lv www.google.md www.google.mk www.google.mu www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.sh www.google.si www.google.sm www.google.tn www.google.tt *.googlesyndication.com *.klaviyo.com *.sentry-cdn.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://0fdc1bd7-78ce-4fe5-8742-97fe7c98fd7a.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://platform.twitter.com https://www.instagram.com https://www.tiktok.com https://connect.facebook.net https://pagead2.googlesyndication.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://news.google.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; media-src 'self' blob: https://telesoldiario-videosmultimedia-fwfwcj-0d87d4-158-69-223-228.sslip.io; font-src 'self' data:; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://platform.twitter.com https://www.instagram.com https://www.tiktok.com https://www.facebook.com https://googleads.g.doubleclick.net https://www.googletagmanager.com https://news.google.com; connect-src 'self' https://api.iconify.design https://telesolweb-proxy.sapiamedios.com wss://telesolweb-proxy.sapiamedios.com https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.firstdata.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.firstdata.com *.ipg-online.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.firstdata.com https://pay.google.com https://pay.sandbox.google.com https://pay.google.co.uk https://pay.google.ie https://applepay.cdn-apple.com https://apple-pay-gateway.apple.com https://apple-pay-gateway-cert.apple.com https://apple-pay-gateway-nc-pod1.apple.com https://apple-pay-gateway-pr-pod1.apple.com *.ipg-online.com https://ci.checkout-lane.com *.zoho.com meetanshi.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.trustpilot.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.firstdata.com *.ipg-online.com https://www.gstatic.com *.zoho.com meetanshi.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.firstdata.com self unsafe-inline https://pay.google.com https://pay.sandbox.google.com https://pay.google.co.uk https://pay.google.ie https://applepay.cdn-apple.com https://apple-pay-gateway.apple.com https://apple-pay-gateway-cert.apple.com https://apple-pay-gateway-nc-pod1.apple.com https://apple-pay-gateway-pr-pod1.apple.com *.ipg-online.com https://ci.checkout-lane.com widget.freshworks.com m2epro.freshdesk.com *.zoho.com meetanshi.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.trustpilot.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com https://www.googletagmanager.com tagmanager.google.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.firstdata.com *.ipg-online.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com *.zoho.com meetanshi.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.trustpilot.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.firstdata.com *.ipg-online.com https://pay.google.com https://pay.sandbox.google.com https://pay.google.co.uk https://pay.google.ie https://payments.google.com https://applepay.cdn-apple.com https://apple-pay-gateway.apple.com https://apple-pay-gateway-cert.apple.com https://apple-pay-gateway-nc-pod1.apple.com https://apple-pay-gateway-pr-pod1.apple.com https://ci.checkout-lane.com widget.freshworks.com m2epro.freshdesk.com https://checkout.iwdagency.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'unsafe-inline' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.squarecdn.com *.googleapis.com https://static.klaviyo.com https://klaviyo.com *.fontawesome.com https://fonts.bunny.net d1cwup7r903a1d.cloudfront.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com widgets.sandbox.afterpay.com https://static.klaviyo.com https://klaviyo.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com https://applepay.cdn-apple.com gstatic.com checkout.sezzle.com sandbox.checkout.sezzle.com tracking.sezzle.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net www.xtento.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.afterpay.com/ https://images.unsplash.com *.googleapis.com https://*.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://klaviyo.com https://www.google.co.in https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://bid.g.doubleclick.net https://analytics.google.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.authorize.net assets.secure.checkout.visa.com sandbox.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com https://applepay.cdn-apple.com media.sezzle.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com www.xtento.com cdn.xtento.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page https://portal.sandbox.afterpay.com https://portal.afterpay.com https://static.afterpay.com *.squarecdn.com https://hbiq.net https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://klaviyo.com https://cdn-cookieyes.com *.avada.io *.shopify.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com https://applepay.cdn-apple.com gstatic.com cdn.routeapp.io fonts.googleapis.com *.amplitude.com cdn.jsdelivr.net protect-quote-q.route.com protection-widget.route.com stage-protection-widget.route.com protect-lightning-bolt-widget.route.com d3od5si8vgcekb.cloudfront.net ddbmicszvqxcg.cloudfront.net unpkg.com wobs.route.com checkout-sdk.sezzle.com sandbox.checkout-sdk.sezzle.com widget.sezzle.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.doubleclick.net www.xtento.com cdn.xtento.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com static.afterpay.com/ *.squarecdn.com https://static.klaviyo.com https://klaviyo.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com d1cwup7r903a1d.cloudfront.net fonts.cdnfonts.com *.stripe.network *.stripecdn.com *.amazon.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.afterpay.com *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://klaviyo.com https://log.cookieyes.com https://cdn-cookieyes.com https://api.lab.amplitude.com https://api.amplitude.com https://region1.amplitude.com https://region2.amplitude.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com gstatic.com api.route.com *.amplitude.com cdn.jsdelivr.net protect-quote-q.route.com protection-widget.route.com stage-protection-widget.route.com d3od5si8vgcekb.cloudfront.net protect-lightning-bolt-widget.route.com ddbmicszvqxcg.cloudfront.net unpkg.com wobs.route.com gateway.sezzle.com sandbox.gateway.sezzle.com media.sezzle.com widget.sezzle.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.clarity.ms *.doubleclick.net *.run.app https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.stape.io data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.google.com *.facebook.com *.facebook.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.youtube.com/ *.facebook.com *.facebook.net *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.stape.io accounts.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://www.magezon.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://firebasestorage.googleapis.com *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com magefan.com cm.magefan.com *.facebook.com *.facebook.net *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com *.stape.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://cdn.jsdelivr.net *.avada.io *.shopify.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.maps.googleapis.com *.trackedlink.net *.maps.gstatic.com maps.googleapis.com *.facebook.com *.facebook.net *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.doubleclick.net *.stape.io accounts.google.com *.googleapis.com *.sharethis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com *.google-analytics.com *.googletagmanager.com *.stape.io accounts.google.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://get.geojs.io *.avada.io *.cloudflare.com *.twitter.com *.twimg.com *.googleadservices.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org *.google.co.in *.maps.gstatic.com *.maps.googleapis.com maps.googleapis.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog *.stape.io accounts.google.com *.sharethis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; connect-src 'self' https://comments.ix5.org; img-src 'self' data: https://*.ix5.org https://ix5.org; font-src 'self' data: https://*.ix5.org https://ix5.org; script-src 'self' 'unsafe-inline' https://comments.ix5.org; style-src 'self' 'unsafe-inline' https://comments.ix5.org; report-uri https://csp-reports.ix5.org/; report-to default-csp; 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data: www.googletagmanager.com; object-src 'none'; script-src 'self' https: 'unsafe-eval' blob: https://www.googletagmanager.com 'sha256-KswlGchel47n7WTeUxBzRtxr7gctpeiJjNnPkN3IEAU=' 'sha256-kOCO9LYFL9BkGKPGI5Y833BJH1SVuyZfTY5U4TOJi4A=' 'nonce-xZjwlaz1Rar3WSkS/kUizA=='; style-src 'self' https: 'unsafe-inline'; connect-src 'self' https: *; media-src https: blob: data:; child-src blob:; report-uri /csp-report/index 1
font-src 'self' https://fonts.gstatic.com data: *.gstatic.com 'self' data: https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action 'self' 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ 'self' https://*.kiyoh.com https://*.hotjar.com https://*.google.com https://*.googletagmanager.com https://*.cookiebot.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.googletagmanager.com/ js.mollie.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.bird.eu ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com 'self' https://www.google.nl https://bat.bing.com https://www.google-analytics.com https://*.doubleclick.net https://connect.facebook.net https://www.googletagmanager.com https://images.unsplash.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.cdninstagram.com *.fbcdn.net https://www.mollie.com *.amazonaws.com *.hsforms.net *.hsforms.com 'self' data: https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com https://player.vimeo.com www.vimeo.com *.vimeocdn.com https://*.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com 'self' 'unsafe-inline' 'unsafe-eval' *.google.com https://www.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://www.googleadservices.com https://*.googleadservices.com https://www.googleoptimize.com https://*.doubleclick.net https://www.gstatic.com https://*.gstatic.com https://maps.googleapis.com https://www.googleapis.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://*.cookiebot.com https://ecookie.nl https://*.ecookie.nl https://connect.facebook.net https://bat.bing.com https://chimpstatic.com https://downloads.mailchimp.com https://*.list-manage.com https://form-assets.mailchimp.com https://static.hotjar.com https://*.vimeo.com https://*.vimeocdn.com https://s.ytimg.com https://*.aiden.cx https://*.newrelic.com https://*.nr-data.net http://www.googletagmanager.com/ https://www.googletagmanager.com/ js.mollie.com *.sendcloud.sc *.jsdelivr.net *.hsforms.net *.hsforms.com *.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src downloads.mailchimp.com 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com *.sendcloud.sc *.jsdelivr.net *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com 'self' https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://*.google.com https://*.doubleclick.net https://www.googleadservices.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://connect.facebook.net https://*.hotjar.com https://*.nr-data.net https://maps.googleapis.com https://player.vimeo.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' *.amazonaws.com *.zendesk.com;style-src 'self' 'unsafe-inline' localhost;font-src 'self' localhost blob: data:;script-src 'self' 'unsafe-inline' 'unsafe-eval' static.zdassets.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.friendlycaptcha.com *.usercentrics.eu localhost;object-src 'self'; img-src 'self' *.amazonaws.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com www.novalnet.de *.friendlycaptcha.com *.usercentrics.eu static.phoenixcontact.com localhost data: blob:;media-src 'self';connect-src localhost *.zdassets.com *.zendesk.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com t.plcnextstore.com *.friendlycaptcha.com *.usercentrics.eu 'self';worker-src 'self' *.friendlycaptcha.com blob:;frame-src localhost 'self' proficloud-dev.github.io/plcnextstore-mvp/3pc.html *.friendlycaptcha.com blob:; 1
default-src 'self'; font-src 'self'; img-src 'self'; script-src 'self'; style-src 'self'; frame-ancestors 'self'; report-uri https://b9u7tqjq.uriports.com/reports/report; report-to default 1
font-src *.googleapis.com *.gstatic.com *.fontawesome.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://assets.royalbagspa.com.au https://fonts.gstatic.com https://static.zipmoney.com.au data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ widgets.sandbox.afterpay.com widgets.sandbox.clearpay.co.uk c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://www.google.com https://pay.google.com https://assets.royalbagspa.com.au https://fonts.gstatic.com https://static.zipmoney.com.au https://static.elfsight.com/ zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://static.afterpay.com https://site-assets.afterpay.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com https://assets.royalbagspa.com.au https://site-assets.afterpay.com https://lh3.googleusercontent.com https://www.google.com https://www.google.co.in https://www.facebook.com https://www.gstatic.com https://www.google-analytics.com t.zip.co static.zipmoney.com.au data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://portal.sandbox.clearpay.co.uk https://portal.clearpay.co.uk https://portal.sandbox.afterpay.com https://portal.afterpay.com https://static.afterpay.com *.squarecdn.com https://hbiq.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com *.avada.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://assets.royalbagspa.com.au https://static.elfsight.com https://www.gstatic.com https://t.labs.au.edge.zip.co https://apps.elfsight.com https://static.zipmoney.com.au https://www.google.com https://www.googletagmanager.com https://connect.facebook.net https://js.braintreegateway.com *.google.com https://www.google-analytics.com https://static.cloudflareinsights.com *.zip.co *.zipmoney.com.au *.demdex.net *.omtrdc.net *.afterpay-beta.com static.zipmoney.com.au zip.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com static.afterpay.com/ *.squarecdn.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.fontawesome.com https://assets.royalbagspa.com.au https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com static.afterpay.com static.sandbox.afterpay.com *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com *.clearpay.co.uk api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.zipmoney.com.au https://assets.royalbagspa.com.au https://apps.elfsight.com https://service-reviews-ultimate.elfsight.com *.zip.co https://www.google-analytics.com https://stats.g.doubleclick.net https://payments.braintree-api.com https://client-analytics.braintreegateway.com *.elfsight.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https://i.ytimg.com https://*.gstatic.com https://www.google-analytics.com; connect-src 'self' https://www.google-analytics.com https://cloudflareinsights.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com; object-src 'none'; base-uri 'self'; upgrade-insecure-requests 1
base-uri 'self'; default-src 'self' app.usercentrics.eu api.usercentrics.eu consent-api.service.consent.usercentrics.eu privacy-proxy.usercentrics.eu uct.service.usercentrics.eu www.youtube-nocookie.com www.youtube.com region1.analytics.google.com stats.g.doubleclick.net; font-src 'self' maps.gstatic.com fonts.gstatic.com data:; img-src 'self' *.sdk.de *.diesued.de app.usercentrics.eu api.usercentrics.eu consent-api.service.consent.usercentrics.eu privacy-proxy.usercentrics.eu uct.service.usercentrics.eu privacy-proxy-server.usercentrics.eu i.ytimg.com yt3.ggpht.com www.youtube-nocookie.com maps.googleapis.com www.google.com www.google.de www.googletagmanager.com www.googleadservices.com region1.analytics.google.com region1.google-analytics.com maps.gstatic.com px.ads.linkedin.com px4.ads.linkedin.com www.linkedin.com www.facebook.com connect.facebook.net lh3.googleusercontent.com fonts.gstatic.com cdn.eye-able.com stats.g.doubleclick.net googleads.g.doubleclick.net bat.bing.com login.microsoftonline.com data: blob:; script-src 'self' *.sdk.de app.usercentrics.eu api.usercentrics.eu consent-api.service.consent.usercentrics.eu privacy-proxy.usercentrics.eu uct.service.usercentrics.eu www.youtube-nocookie.com maps.googleapis.com www.google.com www.googletagmanager.com www.googleadservices.com cdn.eye-able.com snap.licdn.com connect.facebook.net bat.bing.com cdn.ablyft.com 'unsafe-inline' 'unsafe-eval' 'report-sample'; worker-src * blob: 'report-sample'; script-src-elem 'self' *.sdk.de *.diesued.de app.usercentrics.eu api.usercentrics.eu consent-api.service.consent.usercentrics.eu privacy-proxy.usercentrics.eu plugins.flockler.com www.googletagmanager.com www.youtube-nocookie.com www.google-analytics.com kundenportal.sdk-neva.de www.youtube.com cdn.eye-able.com snap.licdn.com connect.facebook.net bat.bing.com cdn.ablyft.com googleads.g.doubleclick.net 'unsafe-inline' blob: 'report-sample'; connect-src 'self' *.sdk.de *.diesued.de app.usercentrics.eu api.usercentrics.eu graphql.usercentrics.eu consent-api.service.consent.usercentrics.eu privacy-proxy.usercentrics.eu uct.service.usercentrics.eu aggregator.service.usercentrics.eu www.googlesyndication.com www.googletagmanager.com googleads.g.doubleclick.net stats.g.doubleclick.net www.google.de www.facebook.com maps.googleapis.com www.google.com www.googleadservices.com ad.doubleclick.net px.ads.linkedin.com cdn.eye-able.com api.flockler.app stats-api.flockler.app region1.analytics.google.com region1.google-analytics.com pagead2.googlesyndication.com analytics.google.com kundenportal.sdk-neva.de bat.bing.com; object-src 'none'; style-src 'self' *.sdk.de www.youtube-nocookie.com www.googletagmanager.com maps.googleapis.com www.google.com www.google.de cdn.eye-able.com 'unsafe-inline' 'report-sample'; frame-src 'self' *.sdk.de *.diesued.de app.usercentrics.eu api.usercentrics.eu consent-api.service.consent.usercentrics.eu privacy-proxy.usercentrics.eu uct.service.usercentrics.eu www.youtube-nocookie.com www.youtube.com www.google.com kundenportal.sdk-neva.de www.googletagmanager.com form.virtualq.tech blob: data:; frame-ancestors 'self' *.sdk.de; media-src 'self' data:; form-action 'self' adfs.sdk.de; manifest-src 'self'; report-uri https://www.sdk.de/@http-reporting?csp=report&requestTime=1789274805941197&requestHash=6152a99f41318ed395031de7a8e6569f44997a84 1
default-src 'self'; script-src 'self' 'sha256-IgMQOOOedQeMPBl7lSreMVPmJvU62bc6l8HcsGXnbWc=' https://*.analytics.google.com https://*.google-analytics.com https://*.googletagmanager.com https://tagmanager.google.com https://www.google.com https://*.clarity.ms https://pagead2.googlesyndication.com https://google.com https://bat.bing.com https://*.g.doubleclick.net https://*.google.com https://snap.licdn.com https://static.ads-twitter.com https://cdn.cookielaw.org https://sentry.io https://*.sentry.io https://*.sprig.com https://*.youtube.com https://*.stripe.com https://*.stripe.com:443 https://*.getbeamer.com; connect-src 'self' blob: data: https://sonarqube.us https://*.sonarqube.us wss://*.sonarqube.us http://localhost:*/sonarlint/ https://*.analytics.google.com https://*.google-analytics.com https://*.googletagmanager.com https://tagmanager.google.com https://www.google.com https://google.com https://bat.bing.com https://*.g.doubleclick.net https://*.google.com https://*.clarity.ms https://pagead2.googlesyndication.com https://px.ads.linkedin.com https://cdn.cookielaw.org https://*.onetrust.com https://sentry.io https://*.sentry.io https://*.sprig.com https://*.youtube.com https://*.stripe.com https://*.stripe.com:443 https://*.getbeamer.com https://*.gravatar.com https://*.sonarsource.com https://events.sonardata.io; img-src 'self' blob: data: https://*.analytics.google.com https://*.google-analytics.com https://*.googletagmanager.com https://tagmanager.google.com https://www.google.com https://google.com https://bat.bing.com https://*.g.doubleclick.net https://*.google.com https://px.ads.linkedin.com https://analytics.twitter.com https://t.co https://cdn.cookielaw.org https://*.getbeamer.com https://*.gravatar.com https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.googletagmanager.com https://*.getbeamer.com; font-src 'self' data: https://fonts.gstatic.com https://*.getbeamer.com; worker-src 'self' blob:; frame-ancestors 'none'; frame-src 'self' https://*.sonarcloud.io https://*.sonarqube.us https://www.googletagmanager.com https://td.doubleclick.net https://*.stripe.com https://*.stripe.com:443 https://*.getbeamer.com https://*.youtube.com https://www.youtube-nocookie.com; child-src 'self' https://*.sonarcloud.io https://*.sonarqube.us https://www.googletagmanager.com https://td.doubleclick.net https://*.stripe.com https://*.stripe.com:443 https://*.getbeamer.com https://*.youtube.com https://www.youtube-nocookie.com; form-action *; object-src 'none'; media-src 'none'; report-to sentry-report-only; 1
img-src data: https://images.sociablekit.com/ https://imgsct.cookiebot.com/ https://secure.adnxs.com/ https://www.facebook.com/ https://www.google.com https://www.google.nl https://www.googletagmanager.com/ 'self';script-src-elem https://api.ajaxlife.nl/ https://connect.facebook.net/ https://consent.cookiebot.com/ https://consentcdn.cookiebot.com/ https://googleads.g.doubleclick.net https://www.googletagmanager.com/ https://www.sporcle.com/ 'self';frame-src https://consentcdn.cookiebot.com/ https://www.google.com https://www.googletagmanager.com/ https://www.sporcle.com/ https://www.youtube.com/;script-src https://consentcdn.cookiebot.com/ https://www.googletagmanager.com/ 'self';style-src-elem https://p.typekit.net/ https://use.typekit.net/ https://www.google.com 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://code.jquery.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://maxcdn.bootstrapcdn.com https://oss.maxcdn.com https://maps.googleapis.com https://www.google.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://cdn.datatables.net https://fundingchoicesmessages.google.com https://static.cloudflareinsights.com https://us-assets.i.posthog.com https://www.clarity.ms https://browser.sentry-cdn.com https://www.gstatic.com https://ep2.adtrafficquality.google https://scripts.clarity.ms; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://maxcdn.bootstrapcdn.com https://cdn.datatables.net; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com; img-src 'self' data: https: blob:; connect-src 'self' https://maps.googleapis.com https://fundingchoicesmessages.google.com https://t.clarity.ms https://www.google-analytics.com https://us.i.posthog.com https://ep1.adtrafficquality.google; frame-src 'self' https://www.googletagmanager.com https://www.google.com https://googleads.g.doubleclick.net https://ep2.adtrafficquality.google; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cloudflare.com *.bootstrapcdn.com *.googleapis.com data: *.formstack.com hscoilusa.com *.hscoilusa.com stackpathcdn.com *.stackpathcdn.com geniustoolsusa.com *.geniustoolsusa.com duratiredirect.com *.duratiredirect.com otrprodirect.com *.otrprodirect.com modinjapan.com *.modinjapan.com cdn-btsg.com *.cdn-btsg.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://punchoutcommerce.com/ https://cat-test.coupahost.com/ https://nextgen.coupahost.com/ 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.affirm.com *.affirm.ca *.certcapture.com *.formstack.com *.paypalobjects.com paypalobjects.com *.payfabric.com *.kaptcha.com kaptcha.com *.geniustoolsusa.com *.modinjapan.com affirm.com hscoilusa.com *.hscoilusa.com stackpathcdn.com *.stackpathcdn.com geniustoolsusa.com duratiredirect.com *.duratiredirect.com otrprodirect.com *.otrprodirect.com modinjapan.com cdn-btsg.com *.cdn-btsg.com trustpilot.com *.trustpilot.com signifyd.com *.signifyd.com facebook.com *.facebook.com https://www.googletagmanager.com/ https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.affirm.com *.affirm.ca *.certcapture.com *.cloudflare.com *.google.com *.elfsightcdn.com *.facebook.com facebook.com *.geniustoolsusa.com gstatic.com *.googleapis.com googleapis.com paypal.com affirm.com hscoilusa.com *.hscoilusa.com stackpathcdn.com *.stackpathcdn.com geniustoolsusa.com duratiredirect.com *.duratiredirect.com otrprodirect.com *.otrprodirect.com modinjapan.com *.modinjapan.com cdn-btsg.com *.cdn-btsg.com userway.org *.userway.org cloudfront.org *.cloudfront.org https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com *.disqus.com https://img.youtube.com maps.gstatic.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src adobedtm.org *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.affirm.com *.affirm.ca *.certcapture.com *.cloudflare.com *.twitter.com *.fontawesome.com unpkg.com *.trustpilot.com *.elfsight.com *.gstatic.com gstatic.com *.googleapis.com googleapis.com *.facebook.net facebook.net *.payfabric.com *.jsdelivr.net *.formstack.com ipinfo.io affirm.com stackpathcdn.com *.stackpathcdn.com geniustoolsusa.com *.geniustoolsusa.com duratiredirect.com *.duratiredirect.com otrprodirect.com *.otrprodirect.com modinjapan.com *.modinjapan.com hscoilusa.com *.hscoilusa.com cdn-btsg.com *.cdn-btsg.com userway.org *.userway.org *.adobedtm.org cloudflareinsights.com *.cloudflareinsights.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.disqus.com maps.googleapis.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.cloudflare.com *.fontawesome.com *.bootstrapcdn.com unpkg.com *.googleapis.com data: *.jsdelivr.net *.formstack.com hscoilusa.com *.hscoilusa.com stackpathcdn.com *.stackpathcdn.com geniustoolsusa.com *.geniustoolsusa.com duratiredirect.com *.duratiredirect.com otrprodirect.com *.otrprodirect.com modinjapan.com *.modinjapan.com cdn-btsg.com *.cdn-btsg.com userway.org *.userway.org widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.affirm.com *.affirm.ca *.certcapture.com *.cloudflare.com *.elfsight.com *.doubleclick.net *.payfabric.com googleapis.com *.googleapis.com affirm.com hscoilusa.com *.hscoilusa.com stackpathcdn.com *.stackpathcdn.com geniustoolsusa.com *.geniustoolsusa.com duratiredirect.com *.duratiredirect.com otrprodirect.com *.otrprodirect.com modinjapan.com *.modinjapan.com cdn-btsg.com *.cdn-btsg.com userway.org *.userway.org widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ maps.googleapis.com places.googleapis.com https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-_lgFhNNBaTJkv62RT7v0Vw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' https://www.youtube.com https://s.ytimg.com; style-src 'self'; img-src 'self' data: https://i.ytimg.com; font-src 'self' data:; connect-src 'self'; frame-src https://www.youtube.com https://www.youtube-nocookie.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
font-src maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.sharethis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.sharethis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page *.sharethis.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.xtento.com cdn.xtento.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.sharethis.com downloads.mailchimp.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.sharethis.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.googleapis.com *.gstatic.com data: *.typekit.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com www.google.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com sandbox.secure.checkout.visa.com secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com https://*.doubleclick.net https://*.google.com https://*.hotjar.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.twitter.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com www.gstatic.com sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com https://*.doubleclick.net https://*.google.com https://*.google.co.uk *.cloudfront.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://*.pcapredict.com/js/sensor.js https://www.googletagmanager.com https://www.google.com https://*.hotjar.com https://*.doubleclick.net https://secure.leadforensics.com https://*.googleapis.com player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://*.googleapis.com *.typekit.net unsafe-inline assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com thm.visa.com https://*.hotjar.com https://*.adobedc.net https://*.nr-data.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.cloudflare.com *.twitter.com *.twimg.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com fonts.googleapis.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.addthis.com *.facebook.com *.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com magefan.com cm.magefan.com *.disqus.com *.addthisedge.com *.twitter.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.disqus.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.net *.twitter.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com maps.googleapis.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.fontawesome.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com maxcdn.bootstrapcdn.com *.fontawesome.com *.bootstrapcdn.com *.gstatic.com https://fonts.googleapis.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com test.saferpay.com www.saferpay.com saferpay.com *.cleverreach.com www.facebook.com 'self' 'unsafe-inline'; frame-ancestors https://*.etracker.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.awin1.com *.zenaps.com *.fls.doubleclick.net *.ad-srv.net hal9000.redintelligence.net test.saferpay.com www.saferpay.com saferpay.com www.facebook.com platform.twitter.com *.doubleclick.net *.g.doubleclick.net *.google.com *.google.de *.googletagmanager.com *.podigee.com *.pinterest.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com www.strunz.com https://*.etracker.com https://*.etracker.de *.awin1.com *.zenaps.com *.wepowerconnections.com *.roeye.com *.sciencebehindecommerce.com test.saferpay.com www.saferpay.com saferpay.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com www.google.com.ua strunz.com *.strunz.com *.spoc.one *.splendid-prelive.de *.google.de *.google.com *.google.fr secure.adnxs.com *.etracker.com *.etracker.de *.gstatic.com *.googleadservices.com *.googlesyndication.com https://maps.gstatic.com https://maps.googleapis.com flagpedia.net https://tsz.strunz.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com https://*.etracker.com https://*.etracker.de *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com *.ad-srv.net *.bounce-commerce.de *.kuponacdn.de *.fatmedia.io test.saferpay.com www.saferpay.com saferpay.com connect.facebook.net twitter.com platform.twitter.com *.google.com *.gstatic.com *.podigee.com *.podigee-cdn.net *.etracker.com *.etracker.de https://unpkg.com/flowbite@1.4.0/dist/flowbite.js *.googleadservices.com *.pinterest.com *.pinimg.com https://maps.gstatic.com maps.googleapis.com https://tsz.strunz.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com maxcdn.bootstrapcdn.com *.fontawesome.com *.bootstrapcdn.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com https://*.etracker.de *.wepowerconnections.com https://the.sciencebehindecommerce.com *.bounce-commerce.de test.saferpay.com www.saferpay.com saferpay.com *.demdex.net *.sciencebehindecommerce.com *.google.com stats.g.doubleclick.net *.etracker.com *.etracker.de google.com *.google.de *.pinterest.com *.pinimg.com *.googlesyndication.com *.doubleclick.net www.facebook.com www.gstatic.com maps.googleapis.com https://tsz.strunz.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src *.dwin1.com test.saferpay.com www.saferpay.com saferpay.com strunz.com *.strunz.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.strunz.com/cspreports/report; report-to report-endpoint; 1
default-src 'self'; script-src *; script-src-elem *; script-src-attr *; style-src 'self'; style-src-elem 'self'; style-src-attr 'self'; img-src *; font-src *; connect-src *; media-src *; object-src 'none'; prefetch-src *; child-src *; frame-src *; frame-ancestors 'self'; form-action 'self'; upgrade-insecure-requests; block-all-mixed-content; base-uri https://www.styria.com https://stage.styria.com; manifest-src 'self'; report-uri https://cspreport.smd-digital.at 1
base-uri 'self'; img-src 'self'; object-src 'none'; script-src 'self'; style-src 'self' 1
default-src 'self'; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://*.newrelic.com https://*.nr-data.net https://www.googletagmanager.com; font-src 'self' https://themes.googleusercontent.com https://fonts.gstatic.com https://use.fontawesome.com https://cdn.jsdelivr.net data:; frame-src 'self' https://www.youtube.com https://www.vimeo.com; img-src 'self' https://translate.google.com https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://i.ytimg.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com data:; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com cdn.jsdelivr.net cdnjs.cloudflare.com unpkg.com https://*.newrelic.com https://*.nr-data.net https://app.feedblitz.com https://cdn.ckeditor.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://unpkg.com maps.google.com; script-src-attr 'self' 'unsafe-hashes'; script-src-elem 'self' https://www.googletagmanager.com https://www.google-analytics.com cdn.jsdelivr.net cdnjs.cloudflare.com unpkg.com https://*.newrelic.com https://*.nr-data.net https://cdn.ckeditor.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://unpkg.com maps.google.com; style-src 'self' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com unpkg.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://unpkg.com https://use.fontawesome.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com unpkg.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://unpkg.com https://use.fontawesome.com; block-all-mixed-content 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://fonts.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com https://www.google.com https://widget.trustpilot.com https://bid.g.doubleclick.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.trustpilot.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.certcapture.com https://www.google.com https://www.google.co.in magefan.com cm.magefan.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.disqus.com maps.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://maps.gstatic.com/ https://amcglobal.sc.omtrdc.net *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.certcapture.com pay.google.com *.google-analytics.com googletagmanager.com *.googletagmanager.com apis.google.com https://maps.googleapis.com *.googleapis.com *.googleadservices.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://www.gstatic.com/recaptcha https://www.google.com/recaptcha *.google.com/ https://maps.googleapis.com/maps/api/js https://widget.trustpilot.com http://widget.trustpilot.com https://invitejs.trustpilot.com chimpstatic.com *.paypalobjects.com c.paypal.com *.paypal.com sandbox.paypal.com *.sandbox.paypal.com assets.shipperhq.com downloads.mailchimp.com *.list-manage.com *.disqus.com maps.googleapis.com https://cdn.jsdelivr.net js.braintreegateway.com assets.braintreegateway.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com https://maps.googleapis.com/ https://js-agent.newrelic.com https://bam.nr-data.net *.trustpilot.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com downloads.mailchimp.com *.fontawesome.com assets.braintreegateway.com *.trustpilot.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com https://stats.g.doubleclick.net https://www.google-analytics.com ovs.shipperhq.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://bam.nr-data.net *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://marysvillemarine.com/; report-to report-endpoint; 1
default-src 'self' https://*.websenso.com;     script-src  'self' 'unsafe-inline' https://*.websenso.com https://*.marches-publics.info https://*.comarquage.fr https://www.notre-commune.fr https://*.typekit.net data:;     style-src   'self' 'unsafe-inline' https://*.websenso.com https://www.notre-commune.fr https://*.typekit.net;     img-src     'self' data: https://*.websenso.com https://images.weserv.nl https://wsrv.nl https://*.tile.openstreetmap.org https://tile.openstreetmap.org https://www.notre-commune.fr https://*.cantal.fr;     font-src    'self' https://*.typekit.net data:;     frame-src   blob: https://www.openstreetmap.org https://www.youtube.com/ https://www.youtube-nocookie.com https://*.marches-publics.info https://*.comarquage.fr https://*.notre-commune.fr;     media-src   'self' https://www.youtube.com/ https://www.youtube-nocookie.com https://youtu.be;     connect-src 'self' https://*.websenso.com https://*.comarquage.fr https://www.notre-commune.fr;     report-uri  https://csp-report.appsenso.eu/report.php; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.multisafepay.com https://pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.sendcloud.sc *.jsdelivr.net *.hotjar.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.googleapis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com https:/at19.net https://bdt9.net https://ds1.nl https://dt51.net https://dt61.net https://fr135.net https://glp8.net https://jdt8.net https://jf79.net https://hs82.net https://lt45.net https://mt74.net https://ndt5.net https://rkn3.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com *.multisafepay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.amazonaws.com www.vlaggenclub.nl vlaggenclub.dev *.cloudflare.com *.linkedin.com *.adsymptotic.com *.google.nl *.printapi.io data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com *.multisafepay.com https://pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.sendcloud.sc *.jsdelivr.net *.cloudflare.com *.twitter.com *.fontawesome.com *.pingdom.net *.trustpilot.com *.hotjar.com *.licdn.com *.chimpstatic.com *.adobetm.com *.zdassets.com polyfill.io static.zdassets.com *.zendesk.com *.zopim.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com downloads.mailchimp.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net *.multisafepay.com assets.braintreegateway.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io *.multisafepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.cloudflare.com *.pingdom.net *.hotjar.com *.usercentrics.eu *.zdassets.com *.zendesk.com *.zopim.com widget-mediator.zopim.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://vlaggenclub.dev/; report-to report-endpoint; 1
default-src https://* 'unsafe-inline';font-src 'self' https://* data:;connect-src *;style-src-elem https://* 'unsafe-inline';script-src-elem 'unsafe-inline' 'unsafe-eval' https:;img-src blob://* https://* 'self' data:;script-src 'unsafe-inline' 'unsafe-eval' blob:;frame-src https://*; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.datareporter.eu *.fontawesome.com https://static.unzer.com https://applepay.cdn-apple.com webfonts.colop.com webcache-eu.datareporter.eu data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://static-cc.test.unzer.com https://h.online-metrix.net https://google.com/pay https://pay.google.com/ https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ https://sandbox.clicktopay.auth.visa.com https://clicktopay.visa.com https://sandbox.secure.checkout.visa.com https://secure.checkout.visa.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.colop.com maps.gstatic.com maps.googleapis.com api.colop-online.com *.google-analytics.com *.g.doubleclick.net *.google.com *.googletagmanager.com *.googleadservices.com colop.matomo.cloud matomo.jajuma.de magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://static.unzer.com *.online-metrix.net https://www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com maps.googleapis.com unpkg.com *.colop.com *.datareporter.eu api.colop-online.com *.googletagmanager.com colop.matomo.cloud matomo.jajuma.de js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com https://static.unzer.com https://applepay.cdn-apple.com https://pay.google.com https://code.jquery.com https://h.online-metrix.net https://h64.online-metrix.net https://static-v2.unzer.com/v2/ui-components/ webcache-eu.datareporter.eu cdn.matomo.cloud 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maps.googleapis.com *.datareporter.eu *.fontawesome.com assets.braintreegateway.com https://src.mastercard.com https://sandbox.src.mastercard.com https://static-v2.unzer.com/v2/ui-components/ webcache-eu.datareporter.eu webcache.datareporter.eu 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.colop.com api.colop-online.com *.googleadservices.com *.google-analytics.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.matomo.cloud colop.matomo.cloud maps.googleapis.com *.colop.com *.datareporter.eu api.colop-online.com *.google-analytics.com *.g.doubleclick.net *.googletagmanager.com *.stats.g.doubleclick.net matomo.jajuma.de api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://api.unzer.com https://api.heidelpay.com https://sbx-api.heidelpay.com https://sbx-api.unzer.com https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://h.online-metrix.net https://h64.online-metrix.net https://google.com/pay https://www.google.com/pay https://pay.google.com https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ https://static-cc.test.unzer.com https://static-v2.unzer.com/v2/ui-components/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com sandbox.secure.checkout.visa.com secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.gstatic.com sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://firebasestorage.googleapis.com https://meetanshi.com/media/logo.png flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://content-eu-4.content-cms.com *.google.com *.google.co.in *.cdninstagram.com *.fbcdn.net maps.googleapis.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.avada.io *.gstatic.com maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://cdn.mouseflow.com https://kit.fontawesome.com https://us01.rec.mouseflow.com/ https://www.googletagmanager.com tagmanager.google.com ajax.googleapis.com *.instagram.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com assets.braintreegateway.com https://cdnjs.cloudflare.com https://cdn-images.mailchimp.com/ tagmanager.google.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com thm.visa.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://us01.rec.mouseflow.com/ https://www.google-analytics.com *.instagram.com *.googleusercontent.com *.google-analytics.com *.analytics.google.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-src *.force.com https://player.vimeo.com https://vars.hotjar.com 'self' https://stats.g.doubleclick.net *.youtube.co.uk https://sfdc-link-preview.hk.salesforce.com https://checkoutshopper-test.adyen.com/ https://pal-test.adyen.com *.cybersource.com *.youtube.es *.adis.ws *.youtube.ie https://www.youtube.com *.cloudinary.com https://pay.google.com *.vimeo.com https://vc.hotjar.io *.youtube.jp bcove.video https://app.arcade.software *.youtube.fr https://apsc.file.force.com https://*.a.forceusercontent.com https://player.cloudinary.com https://sfdc-link-preview-staging.sfdc.sh https://s1.adis.ws *.forceusercontent.com *.brightcove.net *.youtube.com *.youtube.nl s3-ap-southeast-2.amazonaws.com https://service.force.com/embeddedservice/ https://fast.wistia.net *.quip.com *.arkoselabs.com *.youtube-nocookie.com https://www.paypal.com https://appiniummastertrial.secure.force.com https://play.vidyard.com *.youtube.com.br *.salesforce-experience.com *.salesforceliveagent.com https://scormanywhere.secure.force.com https://demo.arcade.software https://checkoutshopper-live.adyen.com/ *.sfdcfc.net *.youtube.ca https://location.force.com *.vidyard.com https://maps.my.force-user-content.com https://www.gstatic.com/recaptcha/ https://players.brightcove.net https://cdn.embedly.com https://www.google.com/recaptcha/ https://js.stripe.com/ https://www.sandbox.paypal.com https://in.hotjar.com https://*.a.forceusercontent.com/lightningmaps/ https://www.googletagmanager.com https://aus66.sfdc-vwfla6.salesforce.com *.wistia.net https://www.google-analytics.com *.salesforce.com *.youtube.pl; report-to sfdc-csp-ep; report-uri https://apsc.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D5m0000008aOM&networkId=0DM5m000000006s&type=communities 1
default-src https:; script-src https: 'self' 'unsafe-inline'; style-src https: 'self' 'unsafe-inline'; img-src https: 'self' data:; 1
default-src 'self'; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' https://static.cloudflareinsights.com https://ajax.cloudflare.com https://ct.pinterest.com https://maps.googleapis.com https://cdn-ukwest.onetrust.com https://connect.facebook.net https://s.pinimg.com https://static-tracking.klaviyo.com https://static.klaviyo.com https://www.googletagmanager.com https://dev.visualwebsiteoptimizer.com https://googleads.g.doubleclick.net; style-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-hashes' https://fonts.googleapis.com; object-src 'none'; base-uri 'self'; connect-src 'self' https://maps.googleapis.com https://cdn-ukwest.onetrust.com https://ct.pinterest.com https://region1.analytics.google.com https://dev.visualwebsiteoptimizer.com https://www.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://dev.visualwebsiteoptimizer.com https://www.instagram.com https://www.youtube.com https://www.google.com https://ct.pinterest.com https://www.facebook.com https://www.googletagmanager.com https://td.doubleclick.net; img-src 'self' https://platform-cdn.sharethis.com https://cdn-ukwest.onetrust.com https://cdn.guides4brides.co.uk https://ct.pinterest.com https://www.facebook.com https://dev.visualwebsiteoptimizer.com https://www.google.co.uk https://www.google.com; manifest-src 'self'; media-src 'self'; report-uri https://64a4272d3723daccf205fe62.endpoint.csper.io/?v=1; worker-src 'self' blob: https://www.googletagmanager.com https://cdn-ukwest.onetrust.com; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com https://client.crisp.chat https://fonts.gstatic.com https://ws.colissimo.fr https://applepay.cdn-apple.com *.fontawesome.com https://fonts.bunny.net fonts.googleapis.com https://cdnjs.cloudflare.com applepay.cdn-apple.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://connect-v2.fintecture.com https://connect-v2-sbx.fintecture.com *.monetico-services.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.youtube.com https://form.typeform.com *.payplug.com *.dalenys.com https://applepay.cdn-apple.com *.monetico-services.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * api-qa.payplug.com secure-qa.payplug.com 'self' 'unsafe-inline'; img-src https://flagcdn.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.google.com *.doubleclick.net *.imgix.net *.twic.pics *.googleapis.com https://images.unsplash.com a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org *.connectif.cloud https://image.crisp.chat https://assets.fintecture.com https://maps.googleapis.com https://maps.gstatic.com https://ws.colissimo.fr https://*.tile.openstreetmap.fr https://*.onyourmap.com https://google.fr https://secure-magenta.dalenys.com https://firebasestorage.googleapis.com https://www.magezon.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.facebook.net *.facebook.com *.imgix.net *.axept.io *.googletagmanager.com *.gstatic.com *.doubleclick.net *.googleapis.com https://maps.googleapis.com https://player.vimeo.com *.connectif.cloud https://client.crisp.chat https://www.google.com https://www.gstatic.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com https://secure-magenta.dalenys.com https://applepay.cdn-apple.com api-qa.payplug.com cdn.payplug.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ *.avada.io *.shopify.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com applepay.cdn-apple.com https://cdn.payplug.com cdn-qa.payplug.com https://cdn-qa.payplug.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.googletagmanager.com https://client.crisp.chat https://fonts.googleapis.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com https://secure-magenta.dalenys.com *.fontawesome.com https://fonts.bunny.net https://cdnjs.cloudflare.com assets.braintreegateway.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.facebook.com *.axept.io *.doubleclick.net *.googleapis.com https://maps.googleapis.com https://player.vimeo.com https://ws.colissimo.fr *.onyourmap.com https://*.mapbox.com *.connectif.cloud https://client.crisp.chat wss://client.relay.crisp.chat https://plugins.crisp.chat https://nominatim.openstreetmap.org https://*.onyourmap.com *.monetico-services.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ https://get.geojs.io *.avada.io maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-IpKCfgdNWNtFUU1fSaHNgw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.Freightquote.com *.authorize.net *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com meetanshi.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.twitter.com *.addthis.com *.facebook.com *.mixkit.com *.meetanshi.com meetanshi.com *.Freightquote.com *.authorize.net *.yotpo.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.meetanshi.com meetanshi.com https://verify.authorize.net https://p.yotpoapi.com https://meetanshi.com/media/logo.png *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.facebook.net *.meetanshi.com meetanshi.com https://cdn.livechatinc.com https://api.livechatinc.com *.Freightquote.com *.authorize.net *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.yotpo.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.g.doubleclick.net *.addthis.com *.pinterest.com *.meetanshi.com meetanshi.com *.authorize.net *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.magebees.com/; report-to report-endpoint; 1
frame-ancestors 'self'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba63db3f96a1d5bb789394101974def5f&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:production 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://*.ewaypayments.com https://*.sandbox.ewaypayments.com https://www.google.com/maps 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://www.eway.com.au https://images.unsplash.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://*.ewaypayments.com https://*.sandbox.ewaypayments.com https://maps.googleapis.com https://player.vimeo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://*.ewaypayments.com https://*.sandbox.ewaypayments.com https://maps.googleapis.com https://player.vimeo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://*.googletagmanager.com https://kit.fontawesome.com https://d3c8r9jtp2qe8k.cloudfront.net https://www.google.com https://www.gstatic.com https://public.tableau.com https://fonts.gstatic.com https://translate.googleapis.com https://translate.google.com https://translate-pa.googleapis.com https://www.gstatic.com https://app1.banguat.gob.gt https://app2.banguat.gob.gt https://banguat.gob.gt https://www.banguat.gob.gt; object-src 'none'; style-src 'self' 'unsafe-inline' data: https://fonts.googleapis.com https://ka-f.fontawesome.com https://public.tableau.com https://www.gstatic.com https://app1.banguat.gob.gt https://app2.banguat.gob.gt https://banguat.gob.gt https://www.banguat.gob.gt https://webap.banguat.gob.gt; img-src 'self' data: blob: https://*.google-analytics.com https://*.googletagmanager.com https://public.tableau.com https://www.gstatic.com https://fonts.gstatic.com https://www.google.com https://translate.googleapis.com https://app1.banguat.gob.gt https://app2.banguat.gob.gt https://webap.banguat.gob.gt; frame-src 'self' https://banguat.gob.gt https://www.banguat.gob.gt https://www.googletagmanager.com https://flo.uri.sh https://www.google.com https://recaptcha.google.com https://public.tableau.com https://app1.banguat.gob.gt https://app2.banguat.gob.gt https://webap.banguat.gob.gt; frame-ancestors 'self' https://banguat.gob.gt https://www.banguat.gob.gt https://webap.banguat.gob.gt; font-src 'self' data: https://fonts.gstatic.com https://ka-f.fontawesome.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://ka-f.fontawesome.com https://www.google.com https://public.tableau.com https://app1.banguat.gob.gt https://app2.banguat.gob.gt https://banguat.gob.gt https://www.banguat.gob.gt https://webap.banguat.gob.gt; report-uri /report-csp-violation 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: https://widgets.in8.nopaperforms.com; style-src 'self' 'unsafe-inline' https:; img-src * data: blob:; connect-src *; font-src 'self' data:; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://widgets.in8.nopaperforms.com; 1
worker-src blob:; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com 'unsafe-inline' data: *.kxcdn.com *.fontawesome.com *.cloudflare.com *.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.facebook.net 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.addthis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.eglobal.com.mx *.newrelic.com *.hotjar.com *.facebook.net *.online-metrix.net *.ecommercebbva.com *.openpay.mx *.cardinalcommerce.com *.verifiedbyvisa.com *.arcot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'unsafe-inline' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.cdninstagram.com *.kxcdn.com *.twitter.com *.google.com *.fbcdn.net blob: *.doofinder.com *.disqus.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.google-analytics.com *.google.com.mx *.cloudflare.com *.googletagmanager.com *.hotjar.com *.facebook.net *.newrelic.com *.cardinalcommerce.com *.online-metrix.net *.fraudlabspro.com *.magecomp.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com *.doofinder.com *.disqus.com *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.comodo.com *.list-manage.com *.googletagmanager.com polyfill.io *.hotjar.com *.facebook.net *.fraudlabspro.com *.twitter.com *.fontawesome.com *.cardinalcommerce.com *.online-metrix.net *.algolianet.com *.arcot.com *.google-analytics.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com *.doofinder.com *.fontawesome.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.cloudflare.com *.bootstrapcdn.com *.newrelic.com *.cardinalcommerce.com *.online-metrix.net *.arcot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com *.doofinder.com wss://*.doofinder.com https://get.geojs.io *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.google-analytics.com *.cloudflare.com *.fraudlabspro.com *.hotjar.com *.facebook.net *.doubleclick.net *.cardinalcommerce.com *.online-metrix.net *.algolia.net chimpstatic.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://api.reclameaqui.com.br https://s3.amazonaws.com/raichu-beta/selos https://newimgebit-a.akamaihd.net/ebitBR/medal use.fontawesome.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://www.google.com https://use.typekit.net https://*.konfidency.com.br https://fonts.googleapis.com https://*.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://gyruss.rdops.systems https://www.facebook.com/ https://*.rdstation.com.br https://*.cloudfront.net 'self' 'unsafe-inline'; frame-ancestors https://h.online-metrix.net https://api.reclameaqui.com.br https://chat.directtalk.com.br https://*.konfidency.com.br unsafe-inline https://fonts.gstatic.com/ 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ https://www.googletagmanager.com/ https://h.online-metrix.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com https://td.doubleclick.net https://stape.madeiranit.com.br https://api.reclameaqui.com.br https://maps.google.com/ https://chat.directtalk.com.br unsafe-inline https://*.konfidency.com.br https://www.lojaconfiavel.com https://*.hotjar.com/ https://fonts.gstatic.com/ https://fonts.googleapis.com https://*.googleapis.com https://www.facebook.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://h.online-metrix.net https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://ssif1.globalsign.com https://www.globalsign.com https://api.reclameaqui.com.br/* https://s3.amazonaws.com https://newimgebit-a.akamaihd.net/ebitBR/medal www.google.com.br newimgebit-a.akamaihd.net https://fonts.gstatic.com https://stats.g.doubleclick.net http://www.googletagmanager.com https://staticfiles.yviews.com.br https://yv-misc.s3.amazonaws.com https://uploadedfiles.yviews.com.br https://www.google.com https://newimgebit-a.akamaihd.net https://www.ebitempresa.com.br https://empresa.ebit.com.br/ https://chat.directtalk.com.br https://singularbaby.com.br https://*.madeiranit.com.br https://*.konfidency.com.br https://www.google.com.br/ http://www.googleadservices.com http://www.google-analytics.com https://www.facebook.com/ https://*.gstatic.com https://maps.googleapis.com https://*.cloudfront.net/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://h.online-metrix.net *.avada.io *.shopify.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com https://td.doubleclick.net https://stape.madeiranit.com.br https://s3.amazonaws.com https://api.reclameaqui.com.br https://newimgebit-a.akamaihd.net/ebitBR/medal/ https://ssif1.globalsign.com https://www.globalsign.com imgs.ebit.com.br www.clarity.ms unpkg.com reviews.konfidency.com.br d335luupugsy2.cloudfront.net js-agent.newrelic.com https://www.clarity.ms https://*.konfidency.com.br https://maps.googleapis.com http://www.googletagmanager.com https://www.googletagmanager.com https://staticfiles.yviews.com.br https://cdn.siteblindado.com https://api.siteblindado.com https://seal.globalsign.com https://js-agent.newrelic.com https://bam.nr-data.net https://www.gstatic.com https://www.google.com https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtm.js https://imgs.ebit.com.br https://chat.directtalk.com.br https://*.hotjar.com/ https://*.shoptarget.com.br/ https://*.cloudfront.net/ https://*.facebook.net/ https://fonts.gstatic.com/ https://fonts.googleapis.com https://*.googleapis.com https://*.shopback.net/ https://*.shopconvert.com.br/ https://*.rdstation.com.br https://*.cloudfront.net https://cdnjs.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://api.reclameaqui.com.br https://s3.amazonaws.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://api.reclameaqui.com.br https://*.konfidency.com.br https://fonts.gstatic.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net vimeo.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io https://viacep.com.br https://www.viacep.com.br http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://h.online-metrix.net https://get.geojs.io *.avada.io www.facebook.com https://www.facebook.com/tr graph.facebook.com business.facebook.com places.googleapis.com https://td.doubleclick.net https://stape.madeiranit.com.br https://api.reclameaqui.com.br https://s3.amazonaws.com https://newimgebit-a.akamaihd.net/ebitBR/medal/81589.json bam.nr-data.net https://*.clarity.ms https://*.konfidency.com.br https://api.siteblindado.com https://seal.siteblindado.com.br https://seal.siteblindado.com https://commerce.adobedc.net https://bam.nr-data.net https://www.google.com https://chat.directtalk.com.br wss://am.freshrelevance.com https://*.shoptarget.com.br/ https://*.rdstation.com.br/ https://fonts.gstatic.com/ https://fonts.googleapis.com https://*.googleapis.com https://*.hotjar.io https://content.hotjar.io/ https://*.retargeter.com.br https://*.madeiranit.com.br/ https://ckies.net/ https://*.openfpcdn.io/ https://www.google-analytics.com https://*.rdstation.com.br https://gyruss.rdops.systems  https://gtm-kq9xxp7-mjg4y.uc.r.appspot.com/g/collect wss://ws.hotjar.com/api/v2/client/ws 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src https://newimgebit-a.akamaihd.net/ebitBR/medal/* bam.nr-data.net commerce.adobedc.net unsafe-inline https://*.konfidency.com.br https://fonts.gstatic.com/ 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.userway.org; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; frame-ancestors 'self'; connect-src 'self' https: 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com; frame-src 'self' https://www.google.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; upgrade-insecure-requests 1
font-src *.criteo.com *.vamp.gr assets.vampfashion.com static.vampfashion.com *.vampfashion.com *.googletagmanager.com *.adobe.com www.googleadservices.com www.google-analytics.com *.googleapis.com vimeo.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.contactpigeon.com *.newrelic.com *.nr-data.net fonts.googleapis.com fonts.gstatic.com *.hotjar.com *.fontawesome.com 'self' data: *.cloudflare.com *.twitter.com *.twimg.com *.usercentrics.eu *.bing.com *.zdassets.com google.com *.google.gr *.tiktok.com *.linkwi.se pinterest.com *.pinterest.com interactive-img.com *.interactive-img.com *.simplify.com *.packeta.com *.clarity.com cdn-cookieyes.com *.cookieyes.com *.clarity.ms maxcdn.bootstrapcdn.com https://fonts.bunny.net *.revolut.com *.google.com *.cdn-apple.com pay.google.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.vivapayments.com *.vamp.gr *.criteo.com c.seznam.cz *.facebook.com *.contactpigeon.com assets.vampfashion.com static.vampfashion.com *.vampfashion.com *.google.gr *.cloudflare.com *.tiktok.com pinterest.com *.pinterest.com *.linkwi.se interactive-img.com *.interactive-img.com *.simplify.com *.packeta.com *.bing.com *.clarity.com cdn-cookieyes.com *.clarity.ms 'self' 'unsafe-inline'; frame-ancestors *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com *.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com widget-v3.boxnow.gr/ widget-v5.boxnow.cy *.vamp.gr *.zopim.com *.criteo.com c.seznam.cz td.doubleclick.net *.contactpigeon.com *.hotjar.com *.facebook.com *.tiktok.com pinterest.com *.pinterest.com *.linkwi.se interactive-img.com *.interactive-img.com *.simplify.com *.packeta.com *.bing.com *.clarity.com cdn-cookieyes.com *.cookieyes.com *.clarity.ms *.googletagmanager.com js.mollie.com *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com *.gstatic.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://images.unsplash.com *.vamp.gr *.criteo.com c.seznam.cz https://trustmark.gr *.tiktok.com *.contactpigeon.com assets.vampfashion.com static.vampfashion.com *.vampfashion.com *.googleapis.com *.gstatic.com *.trustedshops.com cdn.jsdelivr.net *.cloudflare.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.bing.com *.doubleclick.net *.facebook.com *.mastercard.com google.com *.google.gr *.googletagmanager.com pinterest.com *.pinterest.com *.linkwi.se interactive-img.com *.interactive-img.com *.simplify.com *.packeta.com *.clarity.com cdn-cookieyes.com *.cookieyes.com *.clarity.ms https://maps.googleapis.com https://www.magezon.com https://firebasestorage.googleapis.com https://www.mollie.com *.revolut.com *.google.com *.cdn-apple.com pay.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://maps.googleapis.com https://player.vimeo.com *.vivapayments.com https://aqurate.ai *.aqurate.ai *.vamp.gr *.zopim.com *.zdassets.com *.criteo.com c.seznam.cz 'self' data: *.tiktok.com *.googletagmanager.com *.googleapis.com assets.vampfashion.com static.vampfashion.com *.vampfashion.com *.facebook.net *.facebook.com *.doubleclick.net td.doubleclick.net *.google-analytics.com *.gstatic.com *.contactpigeon.com *.paypal.com google.com *.hotjar.com *.fontawesome.com *.feedbackcompany.com *.trustpilot.com cdn.jsdelivr.net *.googleoptimize.com *.cloudflare.com *.google.gr https://trustmark.gr/badge/dist/index.js https://static.adman.gr/adman.js https://greca.adman.gr go.linkwi.se *.linkwi.se pinterest.com *.pinterest.com interactive-img.com *.interactive-img.com *.simplify.com *.packeta.com *.bing.com *.clarity.com cdn-cookieyes.com *.cookieyes.com *.clarity.ms https://cdn.jsdelivr.net/npm/@fancyapps/ui@5.0/dist/fancybox/fancybox.umd.js *.avada.io *.shopify.com js.mollie.com *.revolut.com *.google.com *.cdn-apple.com pay.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.vamp.gr *.criteo.com *.aqurate.ai assets.vampfashion.com static.vampfashion.com *.vampfashion.com *.googletagmanager.com www.googleadservices.com www.google-analytics.com *.googleapis.com vimeo.com *.facebook.net *.facebook.com *.doubleclick.net *.google-analytics.com *.gstatic.com *.contactpigeon.com *.newrelic.com *.nr-data.net *.fontawesome.com *.trustpilot.com cdn.jsdelivr.net *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.bing.com *.hotjar.com *.tiktok.com *.linkwi.se pinterest.com *.pinterest.com interactive-img.com *.interactive-img.com *.simplify.com *.packeta.com *.clarity.com cdn-cookieyes.com maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net/npm/@fancyapps/ui@5.0/dist/fancybox/fancybox.css https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.vamp.gr *.criteo.com 'self' data: *.contactpigeon.com assets.vampfashion.com static.vampfashion.com *.vampfashion.com *.google.gr *.cloudflare.com *.tiktok.com pinterest.com *.pinterest.com *.linkwi.se interactive-img.com *.interactive-img.com *.simplify.com *.packeta.com *.bing.com *.clarity.com cdn-cookieyes.com *.cookieyes.com *.clarity.ms 'self' 'unsafe-inline'; manifest-src *.vamp.gr *.criteo.com assets.vampfashion.com static.vampfashion.com *.vampfashion.com *.contactpigeon.com *.tiktok.com pinterest.com *.pinterest.com *.linkwi.se interactive-img.com *.interactive-img.com *.simplify.com *.packeta.com *.bing.com *.clarity.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://maps.googleapis.com https://player.vimeo.com *.aqurate.ai https://aqurate.ai *.vamp.gr *.criteo.com c.seznam.cz *.googleadservices.com *.google-analytics.com *.googleapis.com *.gstatic.com *.mastercard.com google.com *.google.gr *.googletagmanager.com *.tiktok.com *.contactpigeon.com assets.vampfashion.com static.vampfashion.com *.vampfashion.com *.paypal.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net/ *.zdassets.com *.hotjar.com *.hotjar.io *.feedbackcompany.com *.cloudflare.com https://pagead2.googlesyndication.com pinterest.com *.pinterest.com *.linkwi.se interactive-img.com *.interactive-img.com *.simplify.com *.packeta.com *.bing.com *.clarity.com cdn-cookieyes.com *.cookieyes.com *.clarity.ms https://get.geojs.io *.avada.io *.revolut.com *.google.com *.cdn-apple.com pay.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com https://use.typekit.net data: *.cloudflare.com *.twitter.com *.google.com *.google.co.in *.facebook.com https://www.gstatic.com *.twimg.com *.trustedshops.com *.googleapis.com *.bootstrapcdn.com *.klarnacdn.net *.fontawesome.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com data: 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net https://www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.affirm.com *.affirm.ca *.certcapture.com https://dpm.demdex.net data: *.twitter.com https://www.google.com https://www.google.co.in https://www.facebook.com https://gateway.woodmizer.com https://bid.g.doubleclick.net *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klarna.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * secure.payu.com merch-prod.snd.payu.com *.googleapis.com www.xtento.com *.yotpo.com 'self' 'unsafe-inline'; img-src *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net https://cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io https://amcglobal.sc.omtrdc.net *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: *.affirm.com *.affirm.ca *.certcapture.com https://res.cloudinary.com https://black.bird.eu http://dpm.demdex.net http://amc.demdex.net https://www.googletagmanager.com https://www.google.com.br https://*.google.com *.cloudflare.com https://*.gstatic.com *.google.com *.google.co.in https://www.facebook.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.connect.facebook.net https://stats.g.doubleclick.net https://d.adroll.com https://pixel.advertising.com https://pixel.rubiconproject.com https://simage2.pubmatic.com https://dsum-sec.casalemedia.com https://ads.yahoo.com https://eb2.3lift.com https://sync.outbrain.com https://trc.taboola.com https://x.bidswitch.net/sync https://ib.adnxs.com https://idsync.rlcdn.com https://us-u.openx.net https://ups.analytics.yahoo.com https://segments.company-target.com https://sync.tidaltv.com https://wcs.naver.com *.trackedlink.net https://woodmizer.ca px.ads.linkedin.com *.woodmizer.com *.fontawesome.com *.trackedweb.net *.yotpo.com beta.woodmizer.com https://uploads.commoninja.com https://insight.adsrvr.org https://bat.bing.com https://www.google.com.pk *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.googleapis.com https://*.googleusercontent.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com static.payu.com maps.gstatic.com www.xtento.com cdn.xtento.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https://vimeo.com www.vimeo.com *.vimeocdn.com https://*.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.affirm.com *.affirm.ca *.certcapture.com https://js-agent.newrelic.com https://bam.nr-data.net https://assets.adobedtm.com https://www.googletagmanager.com *.google-tag-manager.com *.google-analystics-universal.com https://googleads.g.doubleclick.net data: https://*.cloudflare.com *.twitter.com *.google.co.in *.facebook.com *.googleadservices.com https://www.google-analytics.com https://*.twimg.com https://*.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://connect.facebook.net https://www.paypalobjects.com https://www.paypal.com https://chimpstatic.com *.youtube.com https://s.adroll.com https://d.adroll.com https://d.adroll.mgr.consensu.org *.bootstrapcdn.com https://wcs.naver.com https://wcs.naver.net https://r2-t.trackedlink.net https://r2.trackedweb.net http://static.trackedweb.net *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com https://px.ads.linkedin.com snap.licdn.com px.ads.linkedin.com *.woodmizer.com graph.facebook.com *.cardinalcommerce.com *.authorize.net js.braintreegateway.com *.paypal.com *.googletagmanager.com https://*.google.com *.cloudflare.com *.yotpo.com *.cloudfront.net *.commoninja.com *.bing.com *.hotjar.com https://apps.usw2.pure.cloud https://analytics.google.com https://www.sandbox.paypal.com https://t.paypal.com https://s.ytimg.com https://*.vimeocdn.com https://*.twitter.com https://*.facebook.com https://*.hotjar.com https://js.braintreegateway.com https://assets.braintreegateway.com *.klarna.com https://*.klarnacdn.net https://*.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://*.dotdigital-pages.com https://webchat.dotdigital.com https://*.commoninja.com https://*.bootstrapcdn.com https://*.authorize.net https://*.bing.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://challenges.cloudflare.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com secure.payu.com secure.snd.payu.com *.googleapis.com www.xtento.com cdn.xtento.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com https://fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.youtube.com *.bootstrapcdn.com *.cloudinary.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klarnacdn.net https://static.klaviyo.com https://hcaptcha.com https://*.hcaptcha.com assets.braintreegateway.com *.yotpo.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com px.ads.linkedin.com *.woodmizer.com https://res.cloudinary.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.magento.com *.magento-datasolutions.com *.magento-ds.com *.affirm.com *.affirm.ca *.certcapture.com https://bam.nr-data.net https://dpm.demdex.net https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net *.cloudflare.com *.twitter.com *.twimg.com *.google.co.in *.facebook.com http://static.trackedweb.net https://r2.trackedweb.net *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com px.ads.linkedin.com *.woodmizer.com *.adobedtm.com https://*.google.com *.yotpo.com https://cdn.commoninja.com https://api-cdn.usw2.pure.cloud https://www.commoninja.com https://*.hotjar.io *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com secure.payu.com merch-prod.snd.payu.com *.googleapis.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://us-assets.i.posthog.com; worker-src 'self' blob:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: blob: https://tile.openstreetmap.org https://www.googletagmanager.com https://us.i.posthog.com; connect-src 'self' https://us.i.posthog.com https://us-assets.i.posthog.com https://www.googletagmanager.com; frame-src 'self' https://www.google.com https://www.googletagmanager.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'; report-uri /api/csp-report 1
object-src 'none';base-uri 'self';script-src 'nonce-ML_EndHIveYUm-WDObha_g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self'; connect-src 'self'; frame-src 'self'; object-src 'none'; base-uri 'self' 1
object-src 'none'; script-src 'self' 'report-sample' cdn.jsdelivr.net https://addevent.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://connect.facebook.net https://maps.googleapis.com https://unpkg.com https://www.google.com mdbootstrap.com; style-src 'self' 'report-sample' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com mdbootstrap.com stackpath.bootstrapcdn.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com; worker-src 'self' blob:; connect-src 'self' blob: https://api.proxxied.com https://img.proxxied.com https://*.koyeb.app https://api.scryfall.com https://cards.scryfall.io https://api.tcgdex.net https://db.ygoprodeck.com https://onelugltpdlxzhdvjstn.supabase.co https://ingesteer.services-prod.nsvcs.net; img-src 'self' data: blob: https://img.proxxied.com https://api.proxxied.com https://*.scryfall.io https://img.mpcautofill.com https://assets.tcgdex.net https://onelugltpdlxzhdvjstn.supabase.co/storage/v1/object/public/* https://drive.google.com https://lh3.googleusercontent.com; style-src 'self' 'unsafe-inline'; font-src 'self' data:; frame-ancestors 'none'; form-action 'self'; 1
default-src * 'unsafe-inline' 'unsafe-eval' data: ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://edge.marker.io/latest/shim.js https://www.googletagmanager.com/gtm.js https://w19.captcha.at/sdk.js https://edge.marker.io/latest/2.v2.15.0.f2fdbd0e05d6efcac7d3.js https://edge.marker.io/latest/3.v2.15.0.d94e68f6b8a22e3b32c2.js https://edge.marker.io https://www.baufi-lead.de https://www.youtube.com/iframe_api https://www.googletagmanager.com https://unpkg.com/micromodal@0.4.10/dist/micromodal.min.js https://cdn.jsdelivr.net/npm/air-datepicker@3.3.5/air-datepicker.min.js https://js-eu1.hs-analytics.net/analytics/ https://js-eu1.hs-banner.com/v2/25186610/banner.js https://js-eu1.hsleadflows.net/leadflows.js https://js-eu1.hubspot.com/web-interactives-embed.js https://js-eu1.hs-scripts.com/25186610.js https://www.youtube.com/s/player/c9dd45ed/www-widgetapi.vflset/www-widgetapi.js https://www.baufi-lead.de/baufilead/partner/9JkejpCHJ5aDn4bP2WYVb65WPDAXXj/imports.js https://www.youtube.com/s/player/ https://developer.ogulo.com/js/ https://connect.facebook.net/en_US/fbevents.js https://connect.facebook.net/signals/config/2756326424442993 https://googleads.g.doubleclick.net/ https://www.ksk-immobilien.de/wp-content/plugins/wp-sentry-integration/public/wp-sentry-init.js https://energieausweis.de/scripts/dist/reseller.min.js https://www.googleadservices.com https://www.google.com https://cdn.consentmanager.net https://c.delivery.consentmanager.net www.googletagmanager.com googletagmanager.com tagmanager.google.com; style-src 'self' 'unsafe-inline' data: https://cdn.consentmanager.net https://c.delivery.consentmanager.net www.googletagmanager.com tagmanager.google.com; img-src 'self' data: https://images.ksk-immobilien.de/www.ksk-immobilien.de/uploads/immobilie-kaufen-startseite.jpg https://images.ksk-immobilien.de https://www.captcha.eu/logo-small40.png https://www.captcha.eu https://cdn.consentmanager.net/delivery/recall/recall_shield.svg https://cdn.consentmanager.net https://c.delivery.consentmanager.net https://amazonaws.com https://track-eu1.hubspot.com https://www.facebook.com https://www.google.com/pagead/1p-user-list/755947047/ https://perf-eu1.hsforms.com/embed/v3/counters.gif https://www.google.de/pagead/1p-user-list/755947047/ https://googleleads.g.doubleclick.net https://www.google.com https://google.com s.w.org ps.w.org ts.w.org secure.gravatar.com www.gravatar.com data: www.googletagmanager.com; connect-src 'self' https://connect.facebook.net https://connect.facebook.net/en_US/fbevents.js https://o149539.ingest.sentry.io/api/5793876/envelope/ https://www.google.com/ https://analytics.ksk-immobilien.de/ https://region1.analytics.google.com/ https://stats.g.doubleclick.net/ https://js-eu1.hs-banner.com/ https://cta-eu1.hubspot.com/ https://forms-eu1.hubspot.com/ https://googleads.g.doubleclick.net/ https://api.marker.io/widget/ping https://www.baufi-lead.de www.googletagmanager.com; font-src 'self' data: https://cdn.consentmanager.net https://c.delivery.consentmanager.net data:; object-src * ; media-src 'self' https://cdn.consentmanager.net https://c.delivery.consentmanager.net; frame-src 'self' https://td.doubleclick.net/ https://tour.ogulo.com/ https://app.kyl.immo https://energieausweis.de/energieausweis2/bedarfsausweis-wohngebaeude/ https://www.ksk-immobilien.de/energieausweis2/bedarfsausweis-wohngebaeude/ www.googletagmanager.com; manifest-src 'none' ; child-src 'self' www.googletagmanager.com; worker-src 'self' https://www.ksk-immobilien.de; base-uri 'none' ; form-action 'self' ; frame-ancestors 'none' ; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://a.zwangerenportaal.nl/teller.js https://d2a9wlbgpuxddh.cloudfront.net; style-src 'self' 'unsafe-inline' https://d2a9wlbgpuxddh.cloudfront.net; img-src 'self' data: https:; font-src 'self' https://d2a9wlbgpuxddh.cloudfront.net; connect-src 'self' https://api.zwangerenportaal.nl https:; frame-ancestors 'self' https://tier1.onatal.nl https://tier2.onatal.nl; object-src 'none'; base-uri 'self'; form-action 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://*.clarity.ms https://static.cloudflareinsights.com https://accounts.google.com/gsi/client; style-src 'self' 'unsafe-inline' https://accounts.google.com/gsi/style; img-src 'self' data: blob: https: https://cdn2.nuditok.com; media-src 'self' blob: https://cdn2.nuditok.com; font-src 'self' data:; frame-src 'self' https://accounts.google.com/gsi/; worker-src 'self' blob:; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.google.com https://www.googletagmanager.com https://*.clarity.ms https://static.cloudflareinsights.com https://accounts.google.com/gsi/ https://cdn2.nuditok.com https://sentry.smclk.net; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; report-uri /api/v1/csp-report; report-to csp 1
script-src 'self' 'nonce-KPNDjMFCH2CQrn/oHxYMztCRk4KaTwt4bRLNQCnwWBk=' 'strict-dynamic' 'wasm-unsafe-eval' www.youtube.com  az416426.vo.msecnd.net cdn.cookielaw.org www.google-analytics.com maps.googleapis.com www.googletagmanager.com  dl.episerver.net www.youtube.com www.google.com www.gstatic.com snap.licdn.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.com.ai https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.ms https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.vg https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat  https://connect.facebook.net/ https://munchkin.marketo.net/ static.hotjar.com script.hotjar.com https://cdn.jsdelivr.net/ https://cdn.cookielaw.org/;object-src 'none';base-uri 'self';report-uri https://o4507537122852864.ingest.de.sentry.io/api/4507764299726928/security/?sentry_key=2e67b3fa9c193f38db8ea33933d09ffa&sentry_environment=production&sentry_release=sprint24; 1
img-src https://higherlogicdownload.s3.amazonaws.com/ILTANET/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/ILTANET/ https://img.youtube.com/vi/ https://static.filestackapi.com/picker/ https://d2x5ku95bkycr3.cloudfront.net https://higherlogiclongterm.s3.amazonaws.com/ILTANET/ blob: https://d132x6oi8ychic.cloudfront.net 'self' https://aws.predictiveresponse.net https://aws.predictiveresponse.net https://px.ads.linkedin.com https://aws.predictiveresponse.net https://px.ads.linkedin.com https://cdn.userway.org https://aws.predictiveresponse.net https://px.ads.linkedin.com https://cdn.userway.org https://d3uf7shreuzboy.cloudfront.net/ https://cdnjs.cloudflare.com https://px4.ads.linkedin.com; style-src https://d132x6oi8ychic.cloudfront.net 'unsafe-inline' https://higherlogiccloudfront.s3.amazonaws.com https://cdn.jsdelivr.net/jquery.slick/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://d2x5ku95bkycr3.cloudfront.net/ https://ajax.googleapis.com/ajax/libs/jqueryui/ https://use.fortawesome.com/ https://cdn.higherlogic.com/ai-assistant https://static.filestackapi.com/picker/ https://fonts.googleapis.com/ https://d3uf7shreuzboy.cloudfront.net/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/ILTANET/ https://higherlogicdownload.s3.amazonaws.com/ILTANET/ https://higherlogiclongterm.s3.amazonaws.com/ILTANET/ 'self' https://cdnjs.cloudflare.com; font-src https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogiccloudfront.s3.amazonaws.com https://higherlogicdownload.s3.amazonaws.com/ILTANET/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/ILTANET/ 'self' https://higherlogiclongterm.s3.amazonaws.com/ILTANET/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://d2x5ku95bkycr3.cloudfront.net https://d132x6oi8ychic.cloudfront.net data: https://ka-f.fontawesome.com/ https://ka-f.fontawesome.com/ https://ilta.legaltechnologyhub.com/ https://cdn.userway.org/; script-src-elem https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d3uf7shreuzboy.cloudfront.net/ https://static.filestackapi.com/picker/ https://cdn.higherlogic.com/ai-assistant https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d2x5ku95bkycr3.cloudfront.net/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://www.gstatic.com/recaptcha/ https://static.filestackapi.com/filestack-js/ 'self' https://ajax.aspnetcdn.com/ajax/ 'unsafe-eval' 'unsafe-inline' https://ilta.legaltechnologyhub.com/ https://cdn.userway.org/ d214eakhb4e2xn.cloudfront.net https://d214eakhb4e2xn.cloudfront.net; media-src https://higherlogiclongterm.s3.amazonaws.com/ILTANET/ https://higherlogicdownload.s3.amazonaws.com/ILTANET/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/ILTANET/ https://higherlogicstream.s3.amazonaws.com/ILTANET/ 'self' https://d132x6oi8ychic.cloudfront.net; script-src https://higherlogiclongterm.s3.amazonaws.com/ILTANET/ https://higherlogicdownload.s3.amazonaws.com/ILTANET/ https://ajax.aspnetcdn.com/ajax/ https://cdn.jsdelivr.net/jquery.slick/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d132x6oi8ychic.cloudfront.net https://cdn.informz.net 'unsafe-eval' https://use.fortawesome.com/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/ILTANET/ https://cdnjs.cloudflare.com/ajax/libs/prism/ 'unsafe-inline' https://d2x5ku95bkycr3.cloudfront.net/ https://higherlogiccloudfront.s3.amazonaws.com https://static.filestackapi.com https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d3uf7shreuzboy.cloudfront.net/ 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://api.connectedcommunity.org/ 'self' https://www.youtube.com/embed/ https://*.kb.us.higherlogic.com https://ilta.legaltechnologyhub.com/ https://cdn.userway.org/; connect-src https://upload.filestackapi.com https://static.filestackapi.com https://cloud.filestackapi.com/folder/list/ 'self' https://hl-managedservices.informz.net https://d3uf7shreuzboy.cloudfront.net/ blob: https://px.ads.linkedin.com/ https://aws.predictiveresponse.net/ https://ilta.legaltechnologyhub.com/ https://api.userway.org/; worker-src 'self'; default-src 'self'; base-uri 'self'; frame-ancestors https://*.connectedcommunity.org/ 'self'; object-src 'none'; manifest-src 'self'; style-src-elem https://d2x5ku95bkycr3.cloudfront.net/ https://maxcdn.bootstrapcdn.com/ https://cdn.userway.org/ https://d2x5ku95bkycr3.cloudfront.net/ https://maxcdn.bootstrapcdn.com/ https://cdn.userway.org/ sha256-Rab7AJLFualVC4CUBBV53un9yiys/tCLSbaVZsjd1vs= https://d2x5ku95bkycr3.cloudfront.net/ https://maxcdn.bootstrapcdn.com/ https://cdn.userway.org/ sha256-Rab7AJLFualVC4CUBBV53un9yiys/tCLSbaVZsjd1vs= sha256-2gCt3a4f6dxlUfEwTCIts7vls6yRLGu6Dc6LrwMwYhE=; 1
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.cloudfront.net data: *.typekit.net data: 'self' 'unsafe-inline'; form-action *.facebook.com *.cleverreach.com https://seu2.cleverreach.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com secure.pay1.de payments.amazon.de www.jsctool.com https://consentcdn.cookiebot.com *.hotjar.com www.paypal.com www.sandbox.paypal.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.xtento.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com cdn.pay1.de www.paypal.com www.paypalobjects.com x.klarnacdn.net *.cloudfront.net *.trustedshops.com *.sleeknote.com *.cookiebot.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com www.jsctool.com *.googleapis.com https://consent.cookiebot.com https://consentcdn.cookiebot.com *.paypalobjects.com *.paypal.com *.trustedshops.com *.sleeknote.com *.amazonaws.com *.pay1.de *.klarna.com *.authorize.net *.braintreegateway.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com d.ratepay.com *.typekit.net unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src vimeo.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com payments.amazon.de d.ratepay.com www.jsctool.com *.fact-finder.de *.fact-finder.com *.fact-finder.co.uk *.fact-finder.fr *.fact-finder.pl *.fact-finder.it *.fact-finder.at *.fact-finder.ch *.fact-finder.cloud *.googletagmanager.com *.hotjar.com https://consentcdn.cookiebot.com www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-src 'self'; report-uri https://www.the3day.org/site/XFrameViolation 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.klaviyo.com d3k81ch9hvuctc.cloudfront.net www.googletagmanager.com www.google-analytics.com www.googleadservices.com accounts.google.com *.squarecdn.com api.squareup.com pci-connect.squareup.com pci-connect.squareupsandbox.com js.sentry-cdn.com browser.sentry-cdn.com connect.facebook.net www.facebook.com fw-cdn.com *.fw-cdn.com *.freshchat.com *.freshworksapi.com *.fwusercontent.com *.mountain.com server.earthley.com analytics.tiktok.com *.tiktokw.us script.crazyegg.com *.crazyegg.com *.clarity.ms ad.doubleclick.net *.g.doubleclick.net capi-automation.s3.us-east-2.amazonaws.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.klaviyo.com d3k81ch9hvuctc.cloudfront.net fw-cdn.com *.fw-cdn.com *.freshchat.com *.freshworksapi.com *.fwusercontent.com *.squarecdn.com api.squareup.com pci-connect.squareup.com pci-connect.squareupsandbox.com; img-src 'self' data: blob: production-earthley-public-bucket.s3.us-east-1.amazonaws.com production-earthley-default-bucket.s3.amazonaws.com media.earthley.com staging-earthley-public-bucket.s3.us-east-1.amazonaws.com media.staging.earthley.com localhost earthley.com www.earthley.com connect.facebook.net www.facebook.com analytics.google.com www.google.com www.googletagmanager.com www.google-analytics.com www.googleadservices.com *.gravatar.com *.klaviyo.com d3k81ch9hvuctc.cloudfront.net fw-cdn.com *.fw-cdn.com *.freshchat.com *.freshworksapi.com *.fwusercontent.com *.mountain.com server.earthley.com analytics.tiktok.com *.tiktokw.us script.crazyegg.com *.crazyegg.com *.clarity.ms c.bing.com ad.doubleclick.net *.g.doubleclick.net *.squarecdn.com api.squareup.com pci-connect.squareup.com pci-connect.squareupsandbox.com; font-src 'self' data: fonts.gstatic.com earthley.com www.earthley.com *.squarecdn.com api.squareup.com pci-connect.squareup.com pci-connect.squareupsandbox.com d1g145x70srn7h.cloudfront.net; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io *.api.smarty.com *.klaviyo.com d3k81ch9hvuctc.cloudfront.net www.google-analytics.com analytics.google.com region1.google-analytics.com region1.analytics.google.com *.ingest.sentry.io *.ingest.us.sentry.io connect.facebook.net www.facebook.com www.google.com www.googletagmanager.com www.googleadservices.com accounts.google.com *.squarecdn.com api.squareup.com pci-connect.squareup.com pci-connect.squareupsandbox.com production-earthley-public-bucket.s3.us-east-1.amazonaws.com production-earthley-default-bucket.s3.amazonaws.com media.earthley.com staging-earthley-public-bucket.s3.us-east-1.amazonaws.com media.staging.earthley.com localhost fw-cdn.com *.fw-cdn.com *.freshchat.com *.freshworksapi.com *.fwusercontent.com *.mountain.com server.earthley.com analytics.tiktok.com *.tiktokw.us script.crazyegg.com *.crazyegg.com *.clarity.ms c.bing.com ad.doubleclick.net *.g.doubleclick.net; frame-src 'self' *.squarecdn.com api.squareup.com pci-connect.squareup.com pci-connect.squareupsandbox.com www.google.com www.googletagmanager.com www.google-analytics.com accounts.google.com connect.facebook.net www.facebook.com *.klaviyo.com d3k81ch9hvuctc.cloudfront.net fw-cdn.com *.fw-cdn.com *.freshchat.com *.freshworksapi.com *.fwusercontent.com server.earthley.com *.vcas.visa.com www.youtube.com www.youtube-nocookie.com script.crazyegg.com *.crazyegg.com; media-src 'self' production-earthley-public-bucket.s3.us-east-1.amazonaws.com production-earthley-default-bucket.s3.amazonaws.com media.earthley.com staging-earthley-public-bucket.s3.us-east-1.amazonaws.com media.staging.earthley.com localhost fw-cdn.com *.fw-cdn.com *.freshchat.com *.freshworksapi.com *.fwusercontent.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri https://o4505765615435776.ingest.us.sentry.io/api/4507572136443904/security/?sentry_key=d97b85cf9a0a7cb0858cbe7105aa495c; report-to csp-endpoint 1
base-uri 'self'; object-src 'none'; script-src 'nonce-wyAnhL2fy7gHlWBcI3wpFHOeB' 'strict-dynamic' 'wasm-unsafe-eval'; worker-src 'self' blob:; frame-ancestors 'self'; manifest-src 'self' 1
font-src use.typekit.net *.typekit.net *.fontawesome.com fonts.bunny.net static.paradies-pool.de data: 'self' 'unsafe-inline' *.gstatic.com *.trustedshops.com *.googleapis.com; form-action *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de seo.mageplaza.com 'self' 'unsafe-inline' *.cardinalcommerce.com *.paypal.com *.amazon.com; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube-nocookie.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.jsctool.com *.weltpixel.com d.paradies-pool.de 'self' 'unsafe-inline' *.doubleclick.net *.youtube.com *.cardinalcommerce.com *.paypal.com *.vimeo.com *.google.com *.braintreegateway.com *.amazon.com *.payments-amazon.com *.consentmanager.net *.googletagmanager.com; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net www.paypalobjects.com p.typekit.net *.typekit.net validator.swagger.io *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de d.ratepay.com www.trustedshops.de www.google.com.ua www.magezon.com static.paradies-pool.de media.paradies-pool.de c.bing.com app.usercentrics.eu d.paradies-pool.de www.facebook.com bat.bing.com 'self' 'unsafe-inline' *.doubleclick.net *.google.com *.googletagmanager.com *.paypal.com *.vimeocdn.com *.ytimg.com *.youtube.com *.gstatic.com *.cloudfront.net *.payments-amazon.com *.consentmanager.net *.google.de *.googleapis.com *.trustedshops.com *.etrusted.com *.clarity.ms; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net includestest.ccdc02.com *.commerce-payment-services.com www.paypalobjects.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net *.cdn-apple.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de widget.freshworks.com m2epro.freshdesk.com d.ratepay.com www.jsctool.com *.avada.io *.shopify.com integrations.etrusted.site js-agent.newrelic.com bam.eu01.nr-data.net static.paradies-pool.de app.usercentrics.eu d.paradies-pool.de connect.facebook.net bat.bing.com 'self' 'unsafe-inline' 'unsafe-eval' *.doubleclick.net *.google.com *.googletagmanager.com *.cardinalcommerce.com *.paypal.com *.ytimg.com *.googleapis.com *.vimeo.com *.vimeocdn.com *.youtube.com *.gstatic.com *.braintreegateway.com *.payments-amazon.com *.consentmanager.net *.trustedshops.com *.etrusted.com *.clarity.ms *.etracker.com; style-src *.adobe.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com d.ratepay.com fonts.bunny.net static.paradies-pool.de 'self' 'unsafe-inline' *.googleapis.com *.trustedshops.com *.etrusted.com *.google.com; object-src 'self' 'unsafe-inline' *.consentmanager.net; media-src *.adobe.com 'self' 'unsafe-inline' *.consentmanager.net; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com *.newrelic.com *.nr-data.net www.paypalobjects.com *.adobe.io performance.typekit.net *.sentry.io *.braintree-api.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de widget.freshworks.com m2epro.freshdesk.com d.ratepay.com www.jsctool.com payments.amazon.de get.geojs.io *.avada.io integrations.etrusted.site bam.eu01.nr-data.net static.paradies-pool.de app.usercentrics.eu api.usercentrics.eu aggregator.service.usercentrics.eu consent-api.service.consent.usercentrics.eu bat.bing.com d.paradies-pool.de www.facebook.com graphql.usercentrics.eu 'self' 'unsafe-inline' *.google.com *.googletagmanager.com *.vimeo.com *.cardinalcommerce.com *.paypal.com *.braintreegateway.com *.amazon.com *.consentmanager.net *.trustedshops.com *.doubleclick.net *.etrusted.com *.clarity.ms; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval' *.consentmanager.net; base-uri 'self' 'unsafe-inline' 1
frame-src 'self' https://consentcdn.cookiebot.com https://checkoutshopper-test.adyen.com/ https://checkoutshopper.adyen.com/ https://checkoutshopper-live.adyen.com https://pay.google.com https://td.doubleclick.net https://tr.snapchat.com https://ajax.cloudflare.com https://cdn.cxense.com https://scdn.cxense.com https://id.cxense.com https://www.googleadservices.com https://mainf.global-cache.online https://www.gstatic.com https://analytics.soulz.lt https://analytics.soulz.lv https://analytics.soulz.ee https://app.omnisend.com https://cdn.userway.org https://www.googletagmanager.com https://omnisnippet1.com https://www.google.com https://acs2.3ds.modirum.com https://acs.3ds.modirum.com https://acs1.3ds.modirum.com https://acs1.swedbank.se https://acs2.swedbank.se https://3ds2-visasecure2.acdcproc.com https://3dsec.cardcenter.ch https://googleads.g.doubleclick.net https://acs.revolut.com https://acs-challenge.apata.io https://pal-test.adyen.com https://assets.boomio.com https://applepay.cdn-apple.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://assets.soulz.lt https://assets.soulz.lv https://assets.soulz.ee https://assets.dev.soulz.lt https://assets.dev.soulz.lv https://assets.dev.soulz.ee https://assets.test.soulz.lt https://assets.test.soulz.lv https://assets.test.soulz.ee https://boomio-widgets.adomas.workers.dev https://widgets.boomio.com https://assets.boomio.com https://connect.facebook.net https://consentcdn.cookiebot.com https://*.cookiebot.com https://assets.pinterest.com https://omnisnippet1.com https://www.googletagmanager.com https://www.redditstatic.com https://services.digitalmatter.ai http://assets.pinterest.com https://www.primeai.co.uk https://www.google-analytics.com https://scdn.cxense.com/cx.js https://static.cloudflareinsights.com https://pay.google.com https://maps.googleapis.com https://checkoutshopper-test.adyen.com https://unpkg.com https://cdn.cxense.com https://analytics.tiktok.com https://ajax.cloudflare.com https://script.hotjar.com https://static.hotjar.com https://payment.ecommerce.sebgroup.com https://googleads.g.doubleclick.net https://instagram.com https://tr.snapchat.com https://sc-static.net https://checkoutshopper-live.adyen.com https://applepay.cdn-apple.com https://id.cxense.com https://www.googleadservices.com https://analytics.soulz.lt https://analytics.soulz.lv https://analytics.soulz.ee https://cdn.rudderlabs.com https://test.soulz.lt/cdn-cgi/challenge-platform/scripts/jsd/main.js https://soulz.lt/cdn-cgi/challenge-platform/scripts/jsd/main.js https://soulz.lv/cdn-cgi/challenge-platform/scripts/jsd/main.js https://soulz.ee/cdn-cgi/challenge-platform/scripts/jsd/main.js https://ajax.googleapis.com https://app.omnisend.com https://www.google.com https://www.gstatic.com; report-uri /nelmio/csp/report 1
object-src 'none';base-uri 'self';script-src 'nonce-CnzusEQs0uazKiRjVbC-fg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://api-maps.yandex.ru https://mc.yandex.ru; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://mc.yandex.ru; frame-src 'self' https://kinescope.io https://yandex.ru; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /local/csp-report.php; report-to csp-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' player.vimeo.com maps.googleapis.com www.youtube.com wizard.globalcamper.com www.googletagmanager.com www.clarity.ms snap.licdn.com connect.facebook.net scripts.clarity.ms googleads.g.doubleclick.net cdn.jsdelivr.net; style-src 'unsafe-inline' 'self' fonts.googleapis.com wizard.globalcamper.com; img-src data: 'self' media.globalcamper.com assets.travelhome.eu maps.gstatic.com maps.googleapis.com www.facebook.com px.ads.linkedin.com www.google.nl www.google.com wizard.globalcamper.com; form-action 'self'; media-src media.globalcamper.com; connect-src api.globalcamper.com 'self' o285262.ingest.us.sentry.io sentry.io vimeo.com www.google.com *.clarity.ms px.ads.linkedin.com region1.google-analytics.com ad.doubleclick.net; frame-src my.matterport.com player.vimeo.com specials.travelhome.nl api.globalcamper.com virtual.roadbearrv.com storage.net-fs.com view.publitas.com www.youtube.com www.youtube-nocookie.com www.google.com 8242730.fls.doubleclick.net mijn.travelhome.nl; font-src 'self' fonts.gstatic.com; base-uri 'none' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net *.fonts.googleapis.com data: *.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mercadopago.cl https://mercadopago.cl *.mercadolibre.cl webpay3g.transbank.cl webpay3gint.transbank.cl 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mercadopago.cl https://mercadopago.cl *.mercadolibre.cl *.addthis.com *.pinterest.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mercadopago.cl *.mercadolibre.cl *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.addthis.com *.pinterest.com *.cdninstagram.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.avada.io *.shopify.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mercadopago.cl *.mercadolibre.cl *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.instagram.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mercadopago.cl *.mercadolibre.cl *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://get.geojs.io *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mercadopago.cl https://mercadopago.cl *.mercadolibre.cl *.cloudflare.com *.googleapis.com *.addthis.com *.cardinalcommerce.com *.graph.instagram.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' litium.revolutionrace.fi fbcdn.revolutionrace.fi wss://fbcdn.revolutionrace.fi *.edb.com *.cdn-apple.com *.klarnaservices.com *.klarnauserservices.com *.klarnacdn.net *.klarna.com *.klarnaevt.com *.kustom.co *.adyen.com www.paypal.com js.stripe.com *.google.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.gstatic.com ajax.googleapis.com fonts.googleapis.com maps.googleapis.com *.apptus.cloud *.storyblok.com *.symplify.com cdn-sitegainer.com *.cdn-sitegainer.com sitegainer.com wss://recording.sitegainer.com *.criteo.net *.criteo.com *.doubleclick.net *.emarsys.net *.mention-me.com *.imedia.cz *.scarabresearch.com *.spinnaker-js.com bat.bing.com www.seznam.cz tags.creativecdn.com *.kindlycdn.com *.kindly.ai wss://sage.kindly.ai revolutionrace.customerfirst.ai *.facebook.net *.tiktok.com *.snapchat.com *.pinterest.com *.bambuser.com *.facebook.com www.pinterest.se *.cloudflare.com *.digitaloceanspaces.com *.distancify.workers.dev cdn.jsdelivr.net maxcdn.bootstrapcdn.com player.vimeo.com pro.ip-api.com recommender.scarabresearch.com s.pinimg.com sc-static.net vimeo.com ws-eu.pusher.com wss://ws-eu.pusher.com 'unsafe-inline' 'unsafe-eval'; img-src data: blob: https://* 'self'; media-src https://*; worker-src 'self' blob:; frame-src analytics.revolutionrace.fi *.mention-me.com mention-me.com *.google.com *.adyen.com *.paypal.com *.kustom.co *.sitegainer.com *.criteo.com revolutionrace.customerfirst.ai; frame-ancestors https://app.storyblok.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; connect-src data: *; report-uri /api/csp-report; report-to csp-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://assets.adobedtm.com https://cdn.mouseflow.com https://player.vimeo.com https://*.aviso.ca https://*.adobeaemcloud.com https://cdn.salesforce.com https://cdn.evgnet.com; style-src 'self' 'unsafe-inline' https://*.adobeaemcloud.com; img-src 'self' data: https:; connect-src 'self' https: https://cdn.evgnet.com; frame-src https://player.vimeo.com; font-src 'self' data: https://*.adobeaemcloud.com; 1
default-src 'none'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://www.googleadservices.com https://*.g.doubleclick.net https://www.google.com https://*.clarity.ms https://*.posthog.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://cdn.kilid.com https://map.kilid.com https://www.googletagmanager.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://www.googleadservices.com https://*.g.doubleclick.net https://www.google.com https://*.clarity.ms https://*.posthog.com; font-src 'self' data: https://cdn.kilid.com; media-src 'self' blob: https://cdn.kilid.com; connect-src 'self' https://cdn.kilid.com https://map.kilid.com https://sentry.kilid.com https://www.googletagmanager.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://www.googleadservices.com https://*.g.doubleclick.net https://www.google.com https://*.clarity.ms https://*.posthog.com; worker-src 'self' blob:; frame-src 'self' https://www.aparat.com https://www.googletagmanager.com https://*.googletagmanager.com; manifest-src 'self'; report-uri /api/csp-report 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.ekonsilio.io *.hotjar.com *.hotjar.io *.abtasty.com fonts.axept.io *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.googleapis.com *.credit-cgi.fr vivafi.fr js.stripe.com *.abtasty.com *.hotjar.com *.hotjar.io *.doubleclick.net *.googletagmanager.com *.diago.ai *.facebook.com data.autobernard.com tr.snapchat.com https://ui.vivafi.fr/ https://simulateur.vivafi.fr/ https://www.google.com https://www.gstatic.com js.mollie.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com blob: *.googleapis.com *.webqamapps.com *.webqam.fr *.autodisol.com *.diago.ai *.google.com *.google.fr *.ekonsilio.io *.doubleclick.net *.hotjar.com *.hotjar.io *.facebook.com *.abtasty.com *.axept.io axeptio.imgix.net googletagmanager.com *.googletagmanager.com *.googlesyndication.com *.stampyt.io *.googleadservices.com tr.snapchat.com www.autobernard.com https://server.arcgisonline.com/ magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://firebasestorage.googleapis.com https://www.mollie.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com *.googletagmanager.com googletagmanager.com *.googleadservices.com *.google-analytics.com *.credit-cgi.fr ui.vivafi.fr simulateur.vivafi.fr *.facebook.net js.stripe.com m.stripe.com *.crisp.chat *.abtasty.com *.ekonsilio.io *.hotjar.com *.hotjar.io openfpcdn.io *.axept.io *.doubleclick.net *.stampyt.io *.aticdn.net *.gstatic.com *.clarity.ms *.diago.ai *.youtube.com *.youtube-nocookie.com sc-static.net tr.snapchat.com ca-auto-financing-widget.prod.fcab.spindox.io ca-auto-financing-widget-prod.ca-autobank.com ca-auto-financing-widget.dev.fcab.spindox.io ca-auto-financing-widget-qa.ca-autobank.com apigw01-qa.ca-autobank.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com *.disqus.com https://cdn.jsdelivr.net *.avada.io *.shopify.com js.mollie.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.google.com *.ekonsilio.io *.hotjar.com *.hotjar.io *.abtasty.com googletagmanager.com *.googletagmanager.com fonts.axept.io https://cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://maps.googleapis.com https://player.vimeo.com *.bridged.cc *.doubleclick.net *.stampyt.fr *.googleapis.com *.facebook.net *.facebook.com *.abtasty.com *.ekonsilio.io ws.livechat.ekonsilio.io wss://*.ekonsilio.io cdn.simplelocalize.io *.simplelocalize.io *.hotjar.com *.hotjar.io ws.hotjar.com wss://*.hotjar.com *.mixpanel.com region1.analytics.google.com *.axept.io *.googlesyndication.com *.google.fr *.stampyt.io *.stamp.yt *.xiti.com *.pa-cd.com *.gstatic.com *.clarity.ms *.youtube.com *.youtube-nocookie.com *.ca-autobank.com *.diago.ai diago-public.s3.eu-west-3.amazonaws.com data.autobernard.com *.snapchat.com mpc-prod-28-1053047382554.us-central1.run.app https://data.geopf.fr https://nominatim.openstreetmap.org https://api-adresse.data.gouv.fr https://vivafi-webcalc.homo.credit-cgi.fr/ https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.goftino.com https://cdn.goftino.com https://static.goftino.com https://api.goftino.com https://cdn.jsdelivr.net https://js.pusher.com https://accounts.google.com https://apis.google.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://analytics.timextools.ir https://analytics.vmusic.ir; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.goftino.com https://cdn.goftino.com https://static.goftino.com https://api.goftino.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: blob: https:; media-src 'self' blob: https: data:; connect-src 'self' https: wss: https://www.goftino.com https://cdn.goftino.com https://static.goftino.com https://api.goftino.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://analytics.timextools.ir https://analytics.vmusic.ir; frame-src https://accounts.google.com https://apis.google.com https://www.goftino.com https://cdn.goftino.com https://static.goftino.com https://api.goftino.com; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://seo.mageplaza.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com https://www.googletagmanager.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.trackedlink.net *.ddlnk.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com https://firebasestorage.googleapis.com flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io *.shopify.com *.gstatic.com maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com webchat.dotdigital.com webchat.staging.dotdigital.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com assets.braintreegateway.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-v6hnTuApzR5RsEyMr47bOg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src https: 'self'; script-src https: 'self' 'unsafe-inline' 'unsafe-eval'; style-src https: 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googletagmanager.com *.adobe.com www.googleadservices.com www.google-analytics.com *.googleapis.com vimeo.com *.facebook.net *.doubleclick.net *.google-analytics.com *.newrelic.com *.nr-data.net fonts.googleapis.com *.hotjar.com *.zopim.com *.fontawesome.com 'self' data: *.skroutz.gr *.cloudflare.com *.twitter.com *.twimg.com *.usercentrics.eu *.bing.com *.zdassets.com *.google.com *.google.gr *.clarity.ms/ *.haritidis.gr *.klarnacdn.net https://fonts.bunny.net *.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.vivapayments.com *.zdassets.com *.facebook.com *.contactpigeon.com *.google.gr *.skroutz.gr https://skroutza.skroutz.gr *.zopim.com *.moosend.com *.cloudflare.com td.doubleclick.net 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * widget-v3.boxnow.gr/ widget-v5.boxnow.cy *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googletagmanager.com *.skroutz.gr https://skroutza.skroutz.gr *.contactpigeon.com *.hotjar.com td.doubleclick.net widget-v3.boxnow.gr *.clarity.ms/ *.bing.com *.google.com/ *.klarna.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.zdassets.com https://trustmark.gr *.tiktok.com *.contactpigeon.com *.googleapis.com *.trustedshops.com *.zopim.com cdn.jsdelivr.net *.skroutz.gr https://skroutza.skroutz.gr *.moosend.com *.cloudflare.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.bing.com *.zopim.io td.doubleclick.net *.mastercard.com *.google.com *.google.gr *.googletagmanager.com *.clarity.ms/ *.klarna.com *.klarnaevt.com *.klarnacdn.net https://firebasestorage.googleapis.com https://www.magezon.com *.designer-images.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.vivapayments.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.fixit.gr 'self' data: *.tiktok.com *.googletagmanager.com *.googleapis.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.contactpigeon.com *.newrelic.com *.nr-data.net *.google.com/ *.hotjar.com *.fontawesome.com *.feedbackcompany.com *.trustpilot.com cdn.jsdelivr.net *.googleoptimize.com *.skroutz.gr https://skroutza.skroutz.gr *.cloudflare.com *.google.gr https://trustmark.gr/badge/dist/index.js https://static.adman.gr/adman.js https://greca.adman.gr cdn.omnicliq.com/ss.js *.clarity.ms/ *.bing.com *.debugbear.com *.haritidis.gr *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.avada.io *.shopify.com *.stat-track.com polyfill.io *.moosend.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.googletagmanager.com www.googleadservices.com www.google-analytics.com *.googleapis.com vimeo.com *.facebook.net *.facebook.com *.doubleclick.net *.google-analytics.com *.gstatic.com *.contactpigeon.com *.newrelic.com *.nr-data.net *.fontawesome.com *.trustpilot.com cdn.jsdelivr.net *.skroutz.gr *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.bing.com *.hotjar.com *.clarity.ms/ *.haritidis.gr *.klarnacdn.net https://fonts.bunny.net *.moosend.com *.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' data: *.google.gr *.zopim.com *.skroutz.gr https://skroutza.skroutz.gr *.moosend.com *.cloudflare.com *.youtube.com *.haritidis.gr 'self' 'unsafe-inline'; manifest-src *.haritidis.gr 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.fixit.gr *.haritidis.gr *.skroutz.gr https://skroutza.skroutz.gr *.googleadservices.com *.googleapis.com *.gstatic.com *.mastercard.com *.google.gr *.googletagmanager.com *.tiktok.com *.contactpigeon.com stats.g.doubleclick.net https://googleads.g.doubleclick.net/ *.zdassets.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.zopim.com wss://*.zopim.com *.feedbackcompany.com *.cloudflare.com https://pagead2.googlesyndication.com *.bing.com *.clarity.ms/ *.debugbear.com td.doubleclick.net *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://get.geojs.io *.avada.io *.stat-track.com *.m-pages.com *.m-operations.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.google-analytics.com https://*.hubspot.com https://js.hs-scripts.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hscollectedforms.net https://*.usemessages.com https://*.contentsquare.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https:; media-src 'self' https://cdn.sanity.io; frame-src 'self' https://*.googletagmanager.com https://*.hubspot.com; worker-src 'self' blob: 1
default-src 'self';
	    script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://*.googleapis.com;
	    style-src 'self' 'unsafe-inline' https://*.googleapis.com;
	    img-src 'self' data: https: blob:;
	    font-src 'self' https://*.googleapis.com https://*.gstatic.com;
	    connect-src 'self' https://*.googleapis.com;
	    frame-src 'self' https://www.youtube.com https://www.google.com;
	    object-src 'none';
	    base-uri 'self';
	    form-action 'self';
	 1
object-src 'none';base-uri 'self';script-src 'nonce-qaEUqP8QQrWis4f9j55CUQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors https://*.etracker.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://plumrocket.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com https://*.etracker.com https://*.etracker.de https://www.mollie.com https://www.etracker.de https://firebasestorage.googleapis.com flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com https://*.etracker.com https://*.etracker.de js.mollie.com https://static.zdassets.com https://code.etracker.com https://www.etracker.de *.avada.io *.shopify.com maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com https://*.etracker.de api.friendlycaptcha.com eu-api.friendlycaptcha.eu https://ekr.zdassets.com https://max-knoblochhelp.zendesk.com wss://widget-mediator.zopim.com https://www.etracker.de https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: *.fontawesome.com *.klarnacdn.net *.builder.io *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src *.cookieinformation.com *.hubspot.com *.pinterest.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.trustpilot.com *.sprii.shop sgtm.sparevinduer.no fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.klarna.com *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.kustom.co www.xtento.com 'self' 'unsafe-inline'; img-src *.sparvinduer.dk *.stape.net *.google.com *.bing.com *.hubspot.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.google.com bid.g.doubleclick.net *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com imgsct.cookiebot.com https://images.unsplash.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.builder.io www.google.com.ua https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.kustom.co https://jabs-configurator-frontend.s3.eu-central-1.amazonaws.com www.xtento.com cdn.xtento.com https://load.sgtm.sparvinduer.dk data: 'self' 'unsafe-inline'; script-src *.cookieinformation.com *.emaerket.dk *.sleeknote.com *.sparxpres.dk *.commoninja.com *.hs-scripts.com *.usemessages.com *.hs-analytics.net *.hs-banner.com *.clarity.ms *.sprii.shop *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com beacon-qa.magento-datasolutions.com beacon-stage.magento-ds.com beacon.magento-ds.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com commerce.adobe.net magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ consent.cookiebot.com https://*.dibspayment.eu www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.builder.io *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.trustpilot.com *.kustom.co https://jabs-configurator-frontend.s3.eu-central-1.amazonaws.com www.xtento.com cdn.xtento.com https://load.sgtm.sparvinduer.dk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.sparvinduer.dk *.sleeknote.com *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.fontawesome.com *.klarnacdn.net *.stripe.network *.stripecdn.com *.amazon.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.trustpilot.com https://jabs-configurator-frontend.s3.eu-central-1.amazonaws.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src ssgtm.sparvinduer.dk *.cookieinformation.com *.sleeknote.com *.mobal.io *.commoninja.com *.hubspot.com *.clarity.ms www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com load.sgtm.sparvinduer.dk dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net p13n.adobe.io *.adobedc.net *.demdex.net *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.builder.io *.stripe.com klarna.com *.link.com *.amazon.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.kustom.co *.appsync-api.eu-central-1.amazonaws.com https://load.sgtm.sparvinduer.dk 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://static.dhlecommerce.nl https://fonts.gstatic.com https://widget.thuiswinkel-cdn.org *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://tagging.dartswarehouse.nl https://tagging.dartswarehouse.com https://tagging.dartswarehouse.de https://consentcdn.cookiebot.eu https://pay.google.com designer.printlane.com *.sendcloud.sc *.jsdelivr.net js.mollie.com *.multisafepay.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://images.unsplash.com https://maps.googleapis.com https://maps.gstatic.com https://widget.thuiswinkel-cdn.org https://widgetcontent.thuiswinkel-cdn.org https://www.google.nl https://tagging.dartswarehouse.nl https://bat.bing.com https://www.facebook.com https://region1.analytics.google.com https://tagging.dartswarehouse.de https://tagging.dartswarehouse.com https://stats.g.doubleclick.net *.google.com *.amazonaws.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com flagpedia.net https://www.mollie.com *.multisafepay.com *.koongo.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://core.helloretail.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://maps.googleapis.com https://player.vimeo.com https://static.dhlecommerce.nl https://analytics.webgains.io https://widget.thuiswinkel.org https://tagging.dartswarehouse.nl https://tagging.dartswarehouse.com https://tagging.dartswarehouse.de https://widget.thuiswinkel-cdn.org https://consent.cookiebot.eu https://a.omappapi.com https://d5yoctgpv4cpx.cloudfront.net https://tracking.dartswarehouse.nl https://connect.facebook.net https://bat.bing.com https://consentcdn.cookiebot.eu https://static.cloudflareinsights.com https://ct.beslist.nl https://pay.google.com designer.printlane.com *.sendcloud.sc *.jsdelivr.net *.disqus.com https://cdn.jsdelivr.net *.avada.io *.gstatic.com maps.googleapis.com js.mollie.com pay.google.com applepay.cdn-apple.com *.multisafepay.com cdnjs.cloudflare.com/ajax/libs/highlight.js/9.3.0/highlight.min.js https://cdnjs.cloudflare.com *.googletagmanager.com tagmanager.google.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://static.dhlecommerce.nl https://maps.googleapis.com https://fonts.googleapis.com https://widget.thuiswinkel-cdn.org https://a.omappapi.com *.sendcloud.sc *.jsdelivr.net https://cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com *.multisafepay.com cdnjs.cloudflare.com/ajax/libs/highlight.js/9.3.0/styles/darkula.min.css https://cdnjs.cloudflare.com tagmanager.google.com fonts.google.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://core.helloretail.com https://helloretailcdn.com https://maps.googleapis.com https://player.vimeo.com https://api-gw.dhlparcel.nl https://static.dhlecommerce.nl https://tagging.dartswarehouse.nl https://tagging.dartswarehouse.com https://tagging.dartswarehouse.de https://widgetcontent.thuiswinkel-cdn.org https://consentcdn.cookiebot.eu https://widget.thuiswinkel.org https://widget.thuiswinkel-cdn.org https://bat.bing.com https://api.omappapi.com https://tracking.dartswarehouse.nl https://p2iqhncxyh.execute-api.eu-central-1.amazonaws.com https://pay.google.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com *.multisafepay.com *.koongo.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com *.gstatic.com 'self' data: https://dashboard.webwinkelkeur.nl https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com js.mollie.com https://www.googletagmanager.com https://payment.pay.nl https://td.doubleclick.net https://dashboard.webwinkelkeur.nl 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.google-analytics.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com imgsct.cookiebot.com https://images.unsplash.com maps.gstatic.com *.googleapis.com *.ggpht.com magefan.com cm.magefan.com https://www.mollie.com *.hsforms.net *.hsforms.com 'self' data: https://www.myhairshop.nl https://www.google.com https://www.google.com.ua https://www.google.nl https://www.google.pl https://www.google.ro https://static.pay.nl https://imgproxy.vendic.dev data: 'self' 'unsafe-inline'; script-src www.google-analytics.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com consent.cookiebot.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com js.mollie.com pay.google.com applepay.cdn-apple.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com https://d5yoctgpv4cpx.cloudfront.net https://cdn1.profitmetrics.io https://pagead2.googlesyndication.com https://static.cloudflareinsights.com https://dashboard.webwinkelkeur.nl 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.googleapis.com *.gstatic.com https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src https://analytics.google.com *.newrelic.com *.nr-data.net www.googleadservices.com *.analytics.google.com www.googletagmanager.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google-analytics.com cbsignal-1.in-endp.profitmetrics.io googleads.g.doubleclick.net https://maps.googleapis.com https://player.vimeo.com *.gstatic.com data: t.elasticsuite.io *.hsforms.net *.hsforms.com https://www.google.com https://google.com https://www.google.com.ua https://www.google.nl https://www.google.pl https://www.google.ro https://my.profitmetrics.io https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://p2iqhncxyh.execute-api.eu-central-1.amazonaws.com https://www.merchant-center-analytics.goog https://api.mollie.com https://ad.doubleclick.net *.pay.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://localhost/paynl/csp/report; report-to report-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-E0aSdLj_17TUkv7MMxcrAw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net *.cdn-apple.com *.cloudflare.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.trustedshops.com *.googleapis.com *.bootstrapcdn.com wss://vts.zohopublic.in *.zohocdn.com *.google-analytics.com https://k8wflbhm6p-2.algolianet.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.facebook.com *.google-analytics.com wss://vts.zohopublic.in https://k8wflbhm6p-2.algolianet.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.twitter.com https://www.google.com https://www.google.co.in https://www.facebook.com *.google-analytics.com wss://vts.zohopublic.in https://k8wflbhm6p-2.algolianet.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudflare.com *.google.com *.google.co.in https://www.facebook.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.connect.facebook.net https://stats.g.doubleclick.net https://d.adroll.com https://pixel.advertising.com https://pixel.rubiconproject.com https://simage2.pubmatic.com https://dsum-sec.casalemedia.com https://ads.yahoo.com https://eb2.3lift.com https://sync.outbrain.com https://trc.taboola.com https://x.bidswitch.net/sync https://ib.adnxs.com https://idsync.rlcdn.com https://us-u.openx.net https://ups.analytics.yahoo.com https://segments.company-target.com https://sync.tidaltv.com *.zohopublic.in *.zoho.in *.zohocdn.com wss://vts.zohopublic.in https://k8wflbhm6p-2.algolianet.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.cloudflare.com *.twitter.com *.google.co.in *.facebook.com *.googleadservices.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://connect.facebook.net *.paypalobjects.com https://chimpstatic.com *.googletagmanager.com https://s.adroll.com https://d.adroll.com https://d.adroll.mgr.consensu.org *.bootstrapcdn.com *.zohopublic.in *.zoho.in wss://vts.zohopublic.in *.zohocdn.com https://k8wflbhm6p-2.algolianet.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.cloudflare.com *.googleapis.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.youtube.com *.bootstrapcdn.com *.zohocdn.com *.zohopublic.in *.zoho.in wss://vts.zohopublic.in https://k8wflbhm6p-2.algolianet.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com *.cloudflare.com *.twitter.com *.twimg.com *.google.co.in *.facebook.com *.zohopublic.in *.zoho.in wss://vts.zohopublic.in https://k8wflbhm6p-2.algolianet.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-MusSeC77LI8/HKCbfGQYZw==' 'strict-dynamic' 'unsafe-inline' https: http:; style-src 'self' 'nonce-MusSeC77LI8/HKCbfGQYZw==' 'unsafe-inline' https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://fonts.googleapis.com; img-src 'self' data: https://via-trm-prod-migrated.s3-us-west-2.amazonaws.com https://maps.gstatic.com https://maps.googleapis.com; font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com; connect-src 'self' https://api.via-trm.com https://api.via-trm-staging.com https://api.via-trm-development.com https://api.via-trm-demo.com https://via-trm-prod-migrated.s3-us-west-2.amazonaws.com https://maps.googleapis.com https://api.usercentrics.eu https://graphql.usercentrics.eu; frame-src https://www.youtube.com https://player.vimeo.com; object-src 'none'; base-uri 'self'; frame-ancestors 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://checkout.razorpay.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; connect-src 'self' https://api.razorpay.com; frame-src https://api.razorpay.com https://checkout.razorpay.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com www.google-analytics.com *.google-analytics.com tagmanager.google.com *.googletagmanager.com www.paypal.com *.paypal.com www.avis-verifies.com www.societe-des-avis-garantis.fr cl.avis-verifies.com assets.prestashop3.com ajax.googleapis.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com p.typekit.net; img-src 'self' data: blob: www.google-analytics.com www.googletagmanager.com *.google-analytics.com www.google.com www.google.fr ssl.gstatic.com www.facebook.com www.avis-verifies.com www.societe-des-avis-garantis.fr www.paypalobjects.com www.f2rjet.com; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com use.typekit.net www.societe-des-avis-garantis.fr www.f2rjet.com; connect-src 'self' www.google-analytics.com *.google-analytics.com *.analytics.google.com analytics.google.com stats.g.doubleclick.net cl.avis-verifies.com www.societe-des-avis-garantis.fr www.paypal.com ws.colissimo.fr; frame-src 'self' www.facebook.com web.facebook.com www.paypal.com *.paypal.com checkout.paypal.com www.avis-verifies.com www.societe-des-avis-garantis.fr; object-src 'none'; base-uri 'self'; form-action 'self' www.facebook.com web.facebook.com www.paypal.com *.paypal.com checkout.paypal.com www.avis-verifies.com www.societe-des-avis-garantis.fr; frame-ancestors 'self'; report-uri /csp-report.php 1
object-src 'none';base-uri 'self';script-src 'nonce-2doVlYkNInXSG_en0PBxVQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.klarna.com connect.facebook.net *.facebook.com *.disqus.com disqus.com https://plumrocket.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.klarna.com *.klarnaevt.com *.klarnacdn.net magefan.com cm.magefan.com connect.facebook.net *.facebook.com *.fbcdn.net *.disqus.com *.disquscdn.com https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com https://api.mapbox.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de widget.freshworks.com m2epro.freshdesk.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com connect.facebook.net *.disqus.com *.disquscdn.com *.avada.io *.shopify.com *.alothemes.com *.magepow.com *.googletagmanager.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com widget.freshworks.com m2epro.freshdesk.com *.klarnacdn.net *.fontawesome.com *.disquscdn.com https://fonts.bunny.net *.alothemes.com *.magepow.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de widget.freshworks.com m2epro.freshdesk.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com connect.facebook.net *.facebook.com *.disqus.com disqus.com *.disquscdn.com https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com fonts.googleapis.com *.googleapis.com data:  *.hotjar.com  *.klevu.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com *.yotpo.com *.fontawesome.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.hotjar.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.google.com/  *.hotjar.com  *.youtube.com *.addthis.com account.fetchify.com business.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.yotpo.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.klevu.com *.doubleclick.net *.google.co.uk *.cloudfront.net *.gravatar.com/ *.cookiebot.com *.doofinder.com business.facebook.com https://cc-cdn.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.googletagmanager.com  *.hotjar.com *.zdassets.com *.trackedlink.net *.addthis.com *.klevu.com *.trustpilot.com *.moatads.com *.addthisedge.com *.dotdigital-pages.com *.cloudfront.net *.cookiebot.com *.broxapgroup.com *.debugbear.com *.googleadservices.com *.doofinder.com business.facebook.com https://cc-cdn.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.yotpo.com *.avada.io *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.myfonts.net *.klevu.com *.typekit.net *.googleapis.com *.cloudfront.net cc-cdn.com *.doofinder.com https://fonts.googleapis.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.yotpo.com *.fontawesome.com https://fonts.bunny.net *.stripe.network *.stripecdn.com *.amazon.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.zdassets.com *.cloudfront.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.hotjar.com *.hotjar.io *.zdassets.com *.zopim.com *.doubleclick.net *.google-analytics.com *.luckyorange.net *.google.co.uk wss://*/socket.io/ *.cookiebot.com *.luckyorange.com *.debugbear.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk *.doofinder.com wss://*.doofinder.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.yotpo.com https://get.geojs.io *.avada.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; block-all-mixed-content; default-src 'self'; form-action 'self'; frame-ancestors 'self'; plugin-types 'none'; script-src 'self' 'report-sample' 'unsafe-inline'; style-src 'self' 'report-sample' 'unsafe-inline'; object-src 'none'; worker-src 'none'; report-uri https://prod.ap.batic.cudasvc.com/xenios/api/v1/error/report??paid=151&spid=20531&v=v1.0&payload=k-WT4gQxz0zNXsTJWjuX4KYca6kWcHawgV6KFHIHDG5P-egPZIZuedZ3KZt5wB5a4qBPxU0TEI4bqThrT80BvwPax6mxsFtg9FnVfejvlYoUT-paNz9Wz8808oQIYQMyaOwkQawzMElb1pbVS8SXMWq5P4gS-pnquF5dhhIjEYdg3GnK0-x9QeWx30o7R0j3GNiWbLnXFVP-qr8-AwTkrQ==; 1
default-src 'self' ;          base-uri 'self' ;          object-src 'none' ;          script-src 'self' 'unsafe-eval' 'nonce-XmYUDDDD5rsuaamOrg/3Fg==' *.googleapis.com *.baidu.com *.zohocdn.com *.cloudfront.net *.googletagmanager.com *.cdn.pagesense.io *.youtube.com *.seatsio.net;          connect-src 'self' *.zoho.com *.googleapis.com *.google-analytics.com *.nimbuspop.com ws: data: ;          font-src 'self' *.gstatic.com *.zohowebstatic.com *.zohostatic.com *.zohocdn.com data:  ;          style-src 'self' 'unsafe-inline' *.zoho.com *.zohocdn.com;          frame-src 'self' * ;          img-src 'self' *.ytimg.com *.zohoexternal.com *.zohocdn.com data: blob: *.nimbuspop.com *.zohopublic.com 1
default-src 'self' https:; script-src https: 'unsafe-inline' 'unsafe-eval' blob:; style-src https: 'unsafe-inline'; img-src https: data: blob:; media-src https: data: blob:; font-src https: data:; connect-src https: wss:; frame-src https:; worker-src 'self' blob:; base-uri 'self'; form-action 'self'; object-src 'none' 1
font-src *.fontawesome.com *.yotpo.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com landofcoder.com *.weltpixel.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com landofcoder.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com landofcoder.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; 1
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; child-src 'self' https://analytics.zoho.eu https://www.google.com; script-src 'self' https://*.google.com https://*.gstatic.com https://*.google-analytics.com https://*.googletagmanager.com https://sc.lfeeder.com https://cdn.amcharts.com https://cdn.jsdelivr.net https://esm.run 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https://tr-rc.lfeeder.com; connect-src 'self' https://*.google.com https://*.google-analytics.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:; object-src 'none' 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce--hoMwC35CT6ySj_GvBcIFg' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' vetoreditora.com.br *.vetoreditora.com.br wake-components.fbitsstatic.net vetoreditora.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br *.rdstation.com.br *.g.doubleclick.net *.googleadservices.com stats.g.doubleclick.net *.vetoreditora.com.br *.movidesk.com cdnjs.cloudflare.com popups.rdstation.com.br *.rdstation.com cta-redirect.rdstation.com pageview-notify.rdstation.com.br *.rd.services *.webvisor.com *.webvisor.org *.yastatic.net *.youtube.com *.fbitsstatic.net *.cityadstracking.com *.haaify.com gstatic.com d335luupugsy2.cloudfront.net d1sag09wwfbul8.cloudfront.net dk9suync0k2va.cloudfront.net .contentsquare.net .contentsquare.com t.contentsquare.net c.contentsquare.net app.contentsquare.com csxd.contentsquare.net srm.ba.contentsquare.net k.ba.contentsquare.net c.ba.contentsquare.net tcvsapi.contentsquare.com l.contentsquare.net ad.doubleclick.net www.googletagmanager.com analytics.google.com g.doubleclick.net script.hj.contentsquare.net; frame-ancestors *.vetoreditora.com.br vetoreditora.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
style-src 'self' admin.nuwebgroup.com hub.nuwebgroup.com assets.nuwebgroup.com nextgen-prod-a.s3.eu-west-1.amazonaws.com fw-cdn.com/11211636/ snap.licdn.com/li.lms-analytics/insight.min.js scripts.simpleanalyticscdn.com/latest.js *.getkoala.com s3-us-west-2.amazonaws.com/b2bjsstore/b/ *.vector.co cdn.heapanalytics.com/js/heap-1342847507.js cdn.matomo.cloud/nuwebgroup.matomo.cloud/container_uGM8ZZG6.js onsite.optimonk.com/script.js cdn.matomo.cloud/nuwebgroup.matomo.cloud/matomo.js nuwebgroup.matomo.cloud pro.ip-api.com/json/ *.googleapis.com *.gstatic.com *.google.com google.com *.google-analytics.com *.cloudflareinsights.com cloudflareinsights.com *.cloudflare.com *.googletagmanager.com *.mixpanel.com connect.facebook.net www.facebook.com/tr/ *.fbcdn.net pixel.byspotify.com pixels.spotify.com analytics.tiktok.com static.ads-twitter.com *.birdie.so cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.1.0/ cdn.tailwindcss.com goselljslib.b-cdn.net *.tap.company *.oppwa.com oppwa.com *.iovation.com/snare.js *.iesnare.com *.arcot.com *.klarnacdn.net/kp/lib/v1/api.js *.affirm.com/js/v2/affirm.js *.payments-amazon.com/checkout.js *.oney.io/build/loader.min.js *.afterpay.com/afterpay.js *.mastercard.com d.ratepay.com/*/di.js d3rpjm0wf8u2co.cloudfront.net/static/rkfl.js d35p4vvdul393k.cloudfront.net/sdk_library/us/stg/ops/pc_gsmpi_web_sdk.js d16i99j5zwwv51.cloudfront.net/sdk_library/us/prd/ops/pc_gsmpi_web_sdk.js us-cdn-gpp.mcsvc.samsung.com a.swallet.link checkout-sdk.sezzle.com/checkout.min.js yookassa.ru/checkout-widget/v1/checkout-widget.js applepay.cdn-apple.com/jsapi/v1.1.0/apple-pay-sdk.js cdn10.ebuckler.com/ebuckler.widget.js stats.ebuckler.com/js/ebuckler.widget.js *.masterpass.com/lightbox/Switch/integration/MasterPass.client.js *.stripe.com *.adyen.com *.authorize.net *.razorpay.com *.netpay.mx *.online-metrix.net *.netpaydev.com *.netpay.com.mx *.cardinalcommerce.com *.ccdc02.com/cardinalcruise/ *.safecharge.com *.onvopay.com *.paypal.com *.braintreegateway.com *.paypalobjects.com *.paytabs.com *.ryftpay.com my.emerchantpay.com *.3dsecure.io *.sumup.com cdn.optimizely.com *.cybersource.com *.barclaycard *.secure.checkout.visa.com *.aexp-static.com *.protectgroup.com www.stay22.com *.vimeocdn.com *.vimeo.com vimeo.com *.youtube.com *.3ddvapis.com *.clarity.ms *.hotjar.com wss://*.hotjar.com *.hotjar.io *.bing.com *.bing.net *.zoho.eu *.zohocdn.com *.doubleclick.net www.googleadservices.com *.googlesyndication.com www.google.co.uk/ads www.google.hu/ads www.google.rs/ads www.google.ru/ads www.google.mx/ads *.optimonk.com *.crazyegg.com *.linkedin.com *.licdn.com open.spotify.com 'unsafe-inline';frame-src 'self' admin.nuwebgroup.com hub.nuwebgroup.com assets.nuwebgroup.com nextgen-prod-a.s3.eu-west-1.amazonaws.com fw-cdn.com/11211636/ snap.licdn.com/li.lms-analytics/insight.min.js scripts.simpleanalyticscdn.com/latest.js *.getkoala.com s3-us-west-2.amazonaws.com/b2bjsstore/b/ *.vector.co cdn.heapanalytics.com/js/heap-1342847507.js cdn.matomo.cloud/nuwebgroup.matomo.cloud/container_uGM8ZZG6.js onsite.optimonk.com/script.js cdn.matomo.cloud/nuwebgroup.matomo.cloud/matomo.js nuwebgroup.matomo.cloud pro.ip-api.com/json/ *.googleapis.com *.gstatic.com *.google.com google.com *.google-analytics.com *.cloudflareinsights.com cloudflareinsights.com *.cloudflare.com *.googletagmanager.com *.mixpanel.com connect.facebook.net www.facebook.com/tr/ *.fbcdn.net pixel.byspotify.com pixels.spotify.com analytics.tiktok.com static.ads-twitter.com *.birdie.so cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.1.0/ cdn.tailwindcss.com goselljslib.b-cdn.net *.tap.company *.oppwa.com oppwa.com *.iovation.com/snare.js *.iesnare.com *.arcot.com *.klarnacdn.net/kp/lib/v1/api.js *.affirm.com/js/v2/affirm.js *.payments-amazon.com/checkout.js *.oney.io/build/loader.min.js *.afterpay.com/afterpay.js *.mastercard.com d.ratepay.com/*/di.js d3rpjm0wf8u2co.cloudfront.net/static/rkfl.js d35p4vvdul393k.cloudfront.net/sdk_library/us/stg/ops/pc_gsmpi_web_sdk.js d16i99j5zwwv51.cloudfront.net/sdk_library/us/prd/ops/pc_gsmpi_web_sdk.js us-cdn-gpp.mcsvc.samsung.com a.swallet.link checkout-sdk.sezzle.com/checkout.min.js yookassa.ru/checkout-widget/v1/checkout-widget.js applepay.cdn-apple.com/jsapi/v1.1.0/apple-pay-sdk.js cdn10.ebuckler.com/ebuckler.widget.js stats.ebuckler.com/js/ebuckler.widget.js *.masterpass.com/lightbox/Switch/integration/MasterPass.client.js *.stripe.com *.adyen.com *.authorize.net *.razorpay.com *.netpay.mx *.online-metrix.net *.netpaydev.com *.netpay.com.mx *.cardinalcommerce.com *.ccdc02.com/cardinalcruise/ *.safecharge.com *.onvopay.com *.paypal.com *.braintreegateway.com *.paypalobjects.com *.paytabs.com *.ryftpay.com my.emerchantpay.com *.3dsecure.io *.sumup.com cdn.optimizely.com *.cybersource.com *.barclaycard *.secure.checkout.visa.com *.aexp-static.com *.protectgroup.com www.stay22.com *.vimeocdn.com *.vimeo.com vimeo.com *.youtube.com *.3ddvapis.com *.clarity.ms *.hotjar.com wss://*.hotjar.com *.hotjar.io *.bing.com *.bing.net *.zoho.eu *.zohocdn.com *.doubleclick.net www.googleadservices.com *.googlesyndication.com www.google.co.uk/ads www.google.hu/ads www.google.rs/ads www.google.ru/ads www.google.mx/ads *.optimonk.com *.crazyegg.com *.linkedin.com *.licdn.com open.spotify.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' admin.nuwebgroup.com hub.nuwebgroup.com assets.nuwebgroup.com nextgen-prod-a.s3.eu-west-1.amazonaws.com fw-cdn.com/11211636/ snap.licdn.com/li.lms-analytics/insight.min.js scripts.simpleanalyticscdn.com/latest.js *.getkoala.com s3-us-west-2.amazonaws.com/b2bjsstore/b/ *.vector.co cdn.heapanalytics.com/js/heap-1342847507.js cdn.matomo.cloud/nuwebgroup.matomo.cloud/container_uGM8ZZG6.js onsite.optimonk.com/script.js cdn.matomo.cloud/nuwebgroup.matomo.cloud/matomo.js nuwebgroup.matomo.cloud pro.ip-api.com/json/ *.googleapis.com *.gstatic.com *.google.com google.com *.google-analytics.com *.cloudflareinsights.com cloudflareinsights.com *.cloudflare.com *.googletagmanager.com *.mixpanel.com connect.facebook.net www.facebook.com/tr/ *.fbcdn.net pixel.byspotify.com pixels.spotify.com analytics.tiktok.com static.ads-twitter.com *.birdie.so cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.1.0/ cdn.tailwindcss.com goselljslib.b-cdn.net *.tap.company *.oppwa.com oppwa.com *.iovation.com/snare.js *.iesnare.com *.arcot.com *.klarnacdn.net/kp/lib/v1/api.js *.affirm.com/js/v2/affirm.js *.payments-amazon.com/checkout.js *.oney.io/build/loader.min.js *.afterpay.com/afterpay.js *.mastercard.com d.ratepay.com/*/di.js d3rpjm0wf8u2co.cloudfront.net/static/rkfl.js d35p4vvdul393k.cloudfront.net/sdk_library/us/stg/ops/pc_gsmpi_web_sdk.js d16i99j5zwwv51.cloudfront.net/sdk_library/us/prd/ops/pc_gsmpi_web_sdk.js us-cdn-gpp.mcsvc.samsung.com a.swallet.link checkout-sdk.sezzle.com/checkout.min.js yookassa.ru/checkout-widget/v1/checkout-widget.js applepay.cdn-apple.com/jsapi/v1.1.0/apple-pay-sdk.js cdn10.ebuckler.com/ebuckler.widget.js stats.ebuckler.com/js/ebuckler.widget.js *.masterpass.com/lightbox/Switch/integration/MasterPass.client.js *.stripe.com *.adyen.com *.authorize.net *.razorpay.com *.netpay.mx *.online-metrix.net *.netpaydev.com *.netpay.com.mx *.cardinalcommerce.com *.ccdc02.com/cardinalcruise/ *.safecharge.com *.onvopay.com *.paypal.com *.braintreegateway.com *.paypalobjects.com *.paytabs.com *.ryftpay.com my.emerchantpay.com *.3dsecure.io *.sumup.com cdn.optimizely.com *.cybersource.com *.barclaycard *.secure.checkout.visa.com *.aexp-static.com *.protectgroup.com www.stay22.com *.vimeocdn.com *.vimeo.com vimeo.com *.youtube.com *.3ddvapis.com *.clarity.ms *.hotjar.com wss://*.hotjar.com *.hotjar.io *.bing.com *.bing.net *.zoho.eu *.zohocdn.com *.doubleclick.net www.googleadservices.com *.googlesyndication.com www.google.co.uk/ads www.google.hu/ads www.google.rs/ads www.google.ru/ads www.google.mx/ads *.optimonk.com *.crazyegg.com *.linkedin.com *.licdn.com open.spotify.com;script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' admin.nuwebgroup.com hub.nuwebgroup.com assets.nuwebgroup.com nextgen-prod-a.s3.eu-west-1.amazonaws.com fw-cdn.com/11211636/ snap.licdn.com/li.lms-analytics/insight.min.js scripts.simpleanalyticscdn.com/latest.js *.getkoala.com s3-us-west-2.amazonaws.com/b2bjsstore/b/ *.vector.co cdn.heapanalytics.com/js/heap-1342847507.js cdn.matomo.cloud/nuwebgroup.matomo.cloud/container_uGM8ZZG6.js onsite.optimonk.com/script.js cdn.matomo.cloud/nuwebgroup.matomo.cloud/matomo.js nuwebgroup.matomo.cloud pro.ip-api.com/json/ *.googleapis.com *.gstatic.com *.google.com google.com *.google-analytics.com *.cloudflareinsights.com cloudflareinsights.com *.cloudflare.com *.googletagmanager.com *.mixpanel.com connect.facebook.net www.facebook.com/tr/ *.fbcdn.net pixel.byspotify.com pixels.spotify.com analytics.tiktok.com static.ads-twitter.com *.birdie.so cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.1.0/ cdn.tailwindcss.com goselljslib.b-cdn.net *.tap.company *.oppwa.com oppwa.com *.iovation.com/snare.js *.iesnare.com *.arcot.com *.klarnacdn.net/kp/lib/v1/api.js *.affirm.com/js/v2/affirm.js *.payments-amazon.com/checkout.js *.oney.io/build/loader.min.js *.afterpay.com/afterpay.js *.mastercard.com d.ratepay.com/*/di.js d3rpjm0wf8u2co.cloudfront.net/static/rkfl.js d35p4vvdul393k.cloudfront.net/sdk_library/us/stg/ops/pc_gsmpi_web_sdk.js d16i99j5zwwv51.cloudfront.net/sdk_library/us/prd/ops/pc_gsmpi_web_sdk.js us-cdn-gpp.mcsvc.samsung.com a.swallet.link checkout-sdk.sezzle.com/checkout.min.js yookassa.ru/checkout-widget/v1/checkout-widget.js applepay.cdn-apple.com/jsapi/v1.1.0/apple-pay-sdk.js cdn10.ebuckler.com/ebuckler.widget.js stats.ebuckler.com/js/ebuckler.widget.js *.masterpass.com/lightbox/Switch/integration/MasterPass.client.js *.stripe.com *.adyen.com *.authorize.net *.razorpay.com *.netpay.mx *.online-metrix.net *.netpaydev.com *.netpay.com.mx *.cardinalcommerce.com *.ccdc02.com/cardinalcruise/ *.safecharge.com *.onvopay.com *.paypal.com *.braintreegateway.com *.paypalobjects.com *.paytabs.com *.ryftpay.com my.emerchantpay.com *.3dsecure.io *.sumup.com cdn.optimizely.com *.cybersource.com *.barclaycard *.secure.checkout.visa.com *.aexp-static.com *.protectgroup.com www.stay22.com *.vimeocdn.com *.vimeo.com vimeo.com *.youtube.com *.3ddvapis.com *.clarity.ms *.hotjar.com wss://*.hotjar.com *.hotjar.io *.bing.com *.bing.net *.zoho.eu *.zohocdn.com *.doubleclick.net www.googleadservices.com *.googlesyndication.com www.google.co.uk/ads www.google.hu/ads www.google.rs/ads www.google.ru/ads www.google.mx/ads *.optimonk.com *.crazyegg.com *.linkedin.com *.licdn.com open.spotify.com;worker-src 'self' blob: admin.nuwebgroup.com hub.nuwebgroup.com assets.nuwebgroup.com nextgen-prod-a.s3.eu-west-1.amazonaws.com fw-cdn.com/11211636/ snap.licdn.com/li.lms-analytics/insight.min.js scripts.simpleanalyticscdn.com/latest.js *.getkoala.com s3-us-west-2.amazonaws.com/b2bjsstore/b/ *.vector.co cdn.heapanalytics.com/js/heap-1342847507.js cdn.matomo.cloud/nuwebgroup.matomo.cloud/container_uGM8ZZG6.js onsite.optimonk.com/script.js cdn.matomo.cloud/nuwebgroup.matomo.cloud/matomo.js nuwebgroup.matomo.cloud pro.ip-api.com/json/ *.googleapis.com *.gstatic.com *.google.com google.com *.google-analytics.com *.cloudflareinsights.com cloudflareinsights.com *.cloudflare.com *.googletagmanager.com *.mixpanel.com connect.facebook.net www.facebook.com/tr/ *.fbcdn.net pixel.byspotify.com pixels.spotify.com analytics.tiktok.com static.ads-twitter.com *.birdie.so cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.1.0/ cdn.tailwindcss.com goselljslib.b-cdn.net *.tap.company *.oppwa.com oppwa.com *.iovation.com/snare.js *.iesnare.com *.arcot.com *.klarnacdn.net/kp/lib/v1/api.js *.affirm.com/js/v2/affirm.js *.payments-amazon.com/checkout.js *.oney.io/build/loader.min.js *.afterpay.com/afterpay.js *.mastercard.com d.ratepay.com/*/di.js d3rpjm0wf8u2co.cloudfront.net/static/rkfl.js d35p4vvdul393k.cloudfront.net/sdk_library/us/stg/ops/pc_gsmpi_web_sdk.js d16i99j5zwwv51.cloudfront.net/sdk_library/us/prd/ops/pc_gsmpi_web_sdk.js us-cdn-gpp.mcsvc.samsung.com a.swallet.link checkout-sdk.sezzle.com/checkout.min.js yookassa.ru/checkout-widget/v1/checkout-widget.js applepay.cdn-apple.com/jsapi/v1.1.0/apple-pay-sdk.js cdn10.ebuckler.com/ebuckler.widget.js stats.ebuckler.com/js/ebuckler.widget.js *.masterpass.com/lightbox/Switch/integration/MasterPass.client.js *.stripe.com *.adyen.com *.authorize.net *.razorpay.com *.netpay.mx *.online-metrix.net *.netpaydev.com *.netpay.com.mx *.cardinalcommerce.com *.ccdc02.com/cardinalcruise/ *.safecharge.com *.onvopay.com *.paypal.com *.braintreegateway.com *.paypalobjects.com *.paytabs.com *.ryftpay.com my.emerchantpay.com *.3dsecure.io *.sumup.com cdn.optimizely.com *.cybersource.com *.barclaycard *.secure.checkout.visa.com *.aexp-static.com *.protectgroup.com www.stay22.com *.vimeocdn.com *.vimeo.com vimeo.com *.youtube.com *.3ddvapis.com *.clarity.ms *.hotjar.com wss://*.hotjar.com *.hotjar.io *.bing.com *.bing.net *.zoho.eu *.zohocdn.com *.doubleclick.net www.googleadservices.com *.googlesyndication.com www.google.co.uk/ads www.google.hu/ads www.google.rs/ads www.google.ru/ads www.google.mx/ads *.optimonk.com *.crazyegg.com *.linkedin.com *.licdn.com open.spotify.com;connect-src 'self' admin.nuwebgroup.com hub.nuwebgroup.com assets.nuwebgroup.com nextgen-prod-a.s3.eu-west-1.amazonaws.com fw-cdn.com/11211636/ snap.licdn.com/li.lms-analytics/insight.min.js scripts.simpleanalyticscdn.com/latest.js *.getkoala.com s3-us-west-2.amazonaws.com/b2bjsstore/b/ *.vector.co cdn.heapanalytics.com/js/heap-1342847507.js cdn.matomo.cloud/nuwebgroup.matomo.cloud/container_uGM8ZZG6.js onsite.optimonk.com/script.js cdn.matomo.cloud/nuwebgroup.matomo.cloud/matomo.js nuwebgroup.matomo.cloud pro.ip-api.com/json/ *.googleapis.com *.gstatic.com *.google.com google.com *.google-analytics.com *.cloudflareinsights.com cloudflareinsights.com *.cloudflare.com *.googletagmanager.com *.mixpanel.com connect.facebook.net www.facebook.com/tr/ *.fbcdn.net pixel.byspotify.com pixels.spotify.com analytics.tiktok.com static.ads-twitter.com *.birdie.so cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.1.0/ cdn.tailwindcss.com goselljslib.b-cdn.net *.tap.company *.oppwa.com oppwa.com *.iovation.com/snare.js *.iesnare.com *.arcot.com *.klarnacdn.net/kp/lib/v1/api.js *.affirm.com/js/v2/affirm.js *.payments-amazon.com/checkout.js *.oney.io/build/loader.min.js *.afterpay.com/afterpay.js *.mastercard.com d.ratepay.com/*/di.js d3rpjm0wf8u2co.cloudfront.net/static/rkfl.js d35p4vvdul393k.cloudfront.net/sdk_library/us/stg/ops/pc_gsmpi_web_sdk.js d16i99j5zwwv51.cloudfront.net/sdk_library/us/prd/ops/pc_gsmpi_web_sdk.js us-cdn-gpp.mcsvc.samsung.com a.swallet.link checkout-sdk.sezzle.com/checkout.min.js yookassa.ru/checkout-widget/v1/checkout-widget.js applepay.cdn-apple.com/jsapi/v1.1.0/apple-pay-sdk.js cdn10.ebuckler.com/ebuckler.widget.js stats.ebuckler.com/js/ebuckler.widget.js *.masterpass.com/lightbox/Switch/integration/MasterPass.client.js *.stripe.com *.adyen.com *.authorize.net *.razorpay.com *.netpay.mx *.online-metrix.net *.netpaydev.com *.netpay.com.mx *.cardinalcommerce.com *.ccdc02.com/cardinalcruise/ *.safecharge.com *.onvopay.com *.paypal.com *.braintreegateway.com *.paypalobjects.com *.paytabs.com *.ryftpay.com my.emerchantpay.com *.3dsecure.io *.sumup.com cdn.optimizely.com *.cybersource.com *.barclaycard *.secure.checkout.visa.com *.aexp-static.com *.protectgroup.com www.stay22.com *.vimeocdn.com *.vimeo.com vimeo.com *.youtube.com *.3ddvapis.com *.clarity.ms *.hotjar.com wss://*.hotjar.com *.hotjar.io *.bing.com *.bing.net *.zoho.eu *.zohocdn.com *.doubleclick.net www.googleadservices.com *.googlesyndication.com www.google.co.uk/ads www.google.hu/ads www.google.rs/ads www.google.ru/ads www.google.mx/ads *.optimonk.com *.crazyegg.com *.linkedin.com *.licdn.com open.spotify.com;object-src 'self' admin.nuwebgroup.com hub.nuwebgroup.com assets.nuwebgroup.com nextgen-prod-a.s3.eu-west-1.amazonaws.com fw-cdn.com/11211636/ snap.licdn.com/li.lms-analytics/insight.min.js scripts.simpleanalyticscdn.com/latest.js *.getkoala.com s3-us-west-2.amazonaws.com/b2bjsstore/b/ *.vector.co cdn.heapanalytics.com/js/heap-1342847507.js cdn.matomo.cloud/nuwebgroup.matomo.cloud/container_uGM8ZZG6.js onsite.optimonk.com/script.js cdn.matomo.cloud/nuwebgroup.matomo.cloud/matomo.js nuwebgroup.matomo.cloud pro.ip-api.com/json/ *.googleapis.com *.gstatic.com *.google.com google.com *.google-analytics.com *.cloudflareinsights.com cloudflareinsights.com *.cloudflare.com *.googletagmanager.com *.mixpanel.com connect.facebook.net www.facebook.com/tr/ *.fbcdn.net pixel.byspotify.com pixels.spotify.com analytics.tiktok.com static.ads-twitter.com *.birdie.so cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.1.0/ cdn.tailwindcss.com goselljslib.b-cdn.net *.tap.company *.oppwa.com oppwa.com *.iovation.com/snare.js *.iesnare.com *.arcot.com *.klarnacdn.net/kp/lib/v1/api.js *.affirm.com/js/v2/affirm.js *.payments-amazon.com/checkout.js *.oney.io/build/loader.min.js *.afterpay.com/afterpay.js *.mastercard.com d.ratepay.com/*/di.js d3rpjm0wf8u2co.cloudfront.net/static/rkfl.js d35p4vvdul393k.cloudfront.net/sdk_library/us/stg/ops/pc_gsmpi_web_sdk.js d16i99j5zwwv51.cloudfront.net/sdk_library/us/prd/ops/pc_gsmpi_web_sdk.js us-cdn-gpp.mcsvc.samsung.com a.swallet.link checkout-sdk.sezzle.com/checkout.min.js yookassa.ru/checkout-widget/v1/checkout-widget.js applepay.cdn-apple.com/jsapi/v1.1.0/apple-pay-sdk.js cdn10.ebuckler.com/ebuckler.widget.js stats.ebuckler.com/js/ebuckler.widget.js *.masterpass.com/lightbox/Switch/integration/MasterPass.client.js *.stripe.com *.adyen.com *.authorize.net *.razorpay.com *.netpay.mx *.online-metrix.net *.netpaydev.com *.netpay.com.mx *.cardinalcommerce.com *.ccdc02.com/cardinalcruise/ *.safecharge.com *.onvopay.com *.paypal.com *.braintreegateway.com *.paypalobjects.com *.paytabs.com *.ryftpay.com my.emerchantpay.com *.3dsecure.io *.sumup.com cdn.optimizely.com *.cybersource.com *.barclaycard *.secure.checkout.visa.com *.aexp-static.com *.protectgroup.com www.stay22.com *.vimeocdn.com *.vimeo.com vimeo.com *.youtube.com *.3ddvapis.com *.clarity.ms *.hotjar.com wss://*.hotjar.com *.hotjar.io *.bing.com *.bing.net *.zoho.eu *.zohocdn.com *.doubleclick.net www.googleadservices.com *.googlesyndication.com www.google.co.uk/ads www.google.hu/ads www.google.rs/ads www.google.ru/ads www.google.mx/ads *.optimonk.com *.crazyegg.com *.linkedin.com *.licdn.com open.spotify.com;manifest-src 'self' admin.nuwebgroup.com hub.nuwebgroup.com assets.nuwebgroup.com nextgen-prod-a.s3.eu-west-1.amazonaws.com fw-cdn.com/11211636/ snap.licdn.com/li.lms-analytics/insight.min.js scripts.simpleanalyticscdn.com/latest.js *.getkoala.com s3-us-west-2.amazonaws.com/b2bjsstore/b/ *.vector.co cdn.heapanalytics.com/js/heap-1342847507.js cdn.matomo.cloud/nuwebgroup.matomo.cloud/container_uGM8ZZG6.js onsite.optimonk.com/script.js cdn.matomo.cloud/nuwebgroup.matomo.cloud/matomo.js nuwebgroup.matomo.cloud pro.ip-api.com/json/ *.googleapis.com *.gstatic.com *.google.com google.com *.google-analytics.com *.cloudflareinsights.com cloudflareinsights.com *.cloudflare.com *.googletagmanager.com *.mixpanel.com connect.facebook.net www.facebook.com/tr/ *.fbcdn.net pixel.byspotify.com pixels.spotify.com analytics.tiktok.com static.ads-twitter.com *.birdie.so cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.1.0/ cdn.tailwindcss.com goselljslib.b-cdn.net *.tap.company *.oppwa.com oppwa.com *.iovation.com/snare.js *.iesnare.com *.arcot.com *.klarnacdn.net/kp/lib/v1/api.js *.affirm.com/js/v2/affirm.js *.payments-amazon.com/checkout.js *.oney.io/build/loader.min.js *.afterpay.com/afterpay.js *.mastercard.com d.ratepay.com/*/di.js d3rpjm0wf8u2co.cloudfront.net/static/rkfl.js d35p4vvdul393k.cloudfront.net/sdk_library/us/stg/ops/pc_gsmpi_web_sdk.js d16i99j5zwwv51.cloudfront.net/sdk_library/us/prd/ops/pc_gsmpi_web_sdk.js us-cdn-gpp.mcsvc.samsung.com a.swallet.link checkout-sdk.sezzle.com/checkout.min.js yookassa.ru/checkout-widget/v1/checkout-widget.js applepay.cdn-apple.com/jsapi/v1.1.0/apple-pay-sdk.js cdn10.ebuckler.com/ebuckler.widget.js stats.ebuckler.com/js/ebuckler.widget.js *.masterpass.com/lightbox/Switch/integration/MasterPass.client.js *.stripe.com *.adyen.com *.authorize.net *.razorpay.com *.netpay.mx *.online-metrix.net *.netpaydev.com *.netpay.com.mx *.cardinalcommerce.com *.ccdc02.com/cardinalcruise/ *.safecharge.com *.onvopay.com *.paypal.com *.braintreegateway.com *.paypalobjects.com *.paytabs.com *.ryftpay.com my.emerchantpay.com *.3dsecure.io *.sumup.com cdn.optimizely.com *.cybersource.com *.barclaycard *.secure.checkout.visa.com *.aexp-static.com *.protectgroup.com www.stay22.com *.vimeocdn.com *.vimeo.com vimeo.com *.youtube.com *.3ddvapis.com *.clarity.ms *.hotjar.com wss://*.hotjar.com *.hotjar.io *.bing.com *.bing.net *.zoho.eu *.zohocdn.com *.doubleclick.net www.googleadservices.com *.googlesyndication.com www.google.co.uk/ads www.google.hu/ads www.google.rs/ads www.google.ru/ads www.google.mx/ads *.optimonk.com *.crazyegg.com *.linkedin.com *.licdn.com open.spotify.com;default-src * data: blob: 'unsafe-eval' 'unsafe-inline';report-uri https://nuwebgroup.report-uri.com/r/d/csp/reportOnly; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://*.googlesyndication.com https://www.freeprivacypolicy.com https://connect.facebook.net https://cdn.trackjs.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://cdn.trackjs.com https://capture.trackjs.com; media-src 'self' https://user.myownmusic.de; frame-src 'self' https://*.googlesyndication.com https://*.doubleclick.net https://www.facebook.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-sa8-zRErxerKk22pYgTj7Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' abcdaconstrucao.com.br *.abcdaconstrucao.com.br wake-components.fbitsstatic.net abcdaconstrucao.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br *.ebit.com.br *.moz.com *.googleadservices.com *.targeting.voxus.com.br cdn.targeting.voxus.com.br api.voxus.tv *.loggly.com *.voxus.com.br targeting.voxus.tv *.google.com.br *.googleapis.com storage.googleapis.com *.g.doubleclick.net *.criteo.net *.criteo.com *.plataformasocial.com.br *.lomadee.com *.googlesyndication.com *.hotjar.com *.hotjar.io *.*hotjar.com *.hotjar wss://ws4.hotjar.com wss://ws1.hotjar.com wss://ws2.hotjar.com wss://ws3.hotjar.com wss://ws5.hotjar.com wss://ws6.hotjar.com wss://ws7.hotjar.com wss://ws8.hotjar.com wss://ws9.hotjar.com wss://ws10.hotjar.com wss://ws11.hotjar.com wss://ws12.hotjar.com wss://ws13.hotjar.com wss://ws14.hotjar.com wss://ws15.hotjar.com wss://ws16.hotjar.com wss://ws17.hotjar.com wss://ws18.hotjar.com wss://ws19.hotjar.com connect.facebook.net static.fbits.net *.segment.com *.securiti.ai *.pingdom.net *.clarity.ms *.1rocket.io *.dito.com.br *.segment.io *.abcdaconstrucao.com.br produtos.abcdaconstrucao.com.br produtos.devabc.com.br *.marketingautomation.services *.getblue.io *.digitalabc.com.br gstatic.com maps.googleapis.com samuraiexpertsstorage.blob.core.windows.net ameprod.azurewebsites.net checkout.abcdaconstrucao.com.br *.tiktok.com *checkout.abcdaconstrucao.com.br *.abcevoce.com.br leadwake.br-s1.cloudhub.io cdn.jsdelivr.net viacep.com.br *.hkdk.events hkdk.events *.goadopt.io axeptio-api.goadopt.io *.unpkg.com events.mymetric.app new-checkout-comprarapida.netlify.app new-checkout-comprarapida-stg.netlify.app d2ljsozdynffuj.cloudfront.net dxz9qzef6adn1.cloudfront.net events.comprarapida.co new-checkout-comprarapida-pre-prod.netlify.app cdn.growthbook.io clarity.ms; frame-ancestors *.abcdaconstrucao.com.br abcdaconstrucao.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
default-src 'self' https:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' data: https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
default-src  'self'  'unsafe-inline'; script-src  'unsafe-eval'  'unsafe-inline'  blob:  'self'  chatbot.ecbeing.io  chatecbstgstrgoutside.blob.core.windows.net  https://lightning-recommend.io  https://stg.lightning-recommend.io  show.revico.jp  show.staging.revico.jp  https://event.lib.visumo.io  https://tagdelivery.visumo.io  https://www.visumo.jp  https://video.visumo.jp  http://ajax.googleapis.com  https://connect.facebook.net  https://static.xx.fbcdn.net  https://static-fe.payments-amazon.com  https://static-na.payments-amazon.com  https://assets.payments-amazon.com  https://*.googletagmanager.com  https://static.line-scdn.net  *.karte.io  blitz-production-action.s3.ap-northeast1.amazonaws.com  https://syndication.twitter.com  https://cdn.syndication.twimg.com  *.makip.co.jp  *.awoo.org  https://branshes-f-s.snva.jp  https://r2.snva.jp  https://d.shutto-translation.com  https://b98.yahoo.co.jp  https://b99.yahoo.co.jp  https://www.google-analytics.com  https://googleads.g.doubleclick.net  *.criteo.com  *.criteo.net  https://*.tiktok.com  *.buyee.jp  *.gdxtag.com  https://*.clarity.ms  https://cd.valis-cpx.jp  https://cdn-f.adsmoloco.com  https://cdn.activity.smart-bdash.com  https://cdn.jsdelivr.net  https://cdn.microad.jp  https://d.line-scdn.net  https://px.ladsp.com  https://s.yimg.jp  https://unpkg.com  https://yappli.io  https://app2.gorilla-efo.com  https://dmp.im-apps.net  https://fraud-buster.appspot.com  https://use.typekit.net  https://cms.handsup.shop  https://code.jquery.com  https://s.yjtag.jp  https://static.ads-twitter.com  https://tag.ladsp.com  https://cd.ladsp.com  https://cdn.smartnews-ads.com  https://fpnpmcdn.net  https://tracker.handsup.shop  https://script.crazyegg.com  https://infird.com  https://seal.globalsign.com  https://ssif1.globalsign.com  https://cdnjs.cloudflare.com  https://apis.google.com  https://secured-pixel.com; connect-src  'self'  chatbot.ecbeing.io  chatecb-stg-saruyama.azurewebsites.net  chatecb-stg-appquestionchoice.azurewebsites.net  chatecb-stg-http-trigger.azurewebsites.net  https://lightning-recommend.io  https://stg.lightning-recommend.io  show.revico.jp  mail.revico.jp  show.staging.revico.jp  mail.staging.revico.jp  https://video.visumo.io  https://video.visumo.jp  https://media.visumo.io  https://contents.visumo.io  https://track.api.visumo.io  https://dc.services.visualstudio.com  https://dpolc4ci3j.execute-api.ap-northeast-1.amazonaws.com  https://www.visumo.jp  https://js.monitor.azure.com  https://mws.amazonservices.com  https://api.amazon.com  https://payments.amazon.co.jp  https://payments-fe.amazon.com  https://api.amazon.co.jp  https://mws.amazonservices.jp  https://api.sandbox.amazon.com  https://*.google-analytics.com  https://*.analytics.google.com  https://*.googletagmanager.com  https://*.line.me  https://liffsdk.line-scdn.net  *.karte.io  https://platform.twitter.com  https://www.branshes.jp  *.makip.co.jp  hqcv1ytan9.execute-api.ap-northeast-1.amazonaws.com  3rtt272g7ybgqgalgiupivehum0dvilb.lambda-url.ap-northeast-1.on.aws  asia-northeast1-unisize-survey.cloudfunctions.net  *.awoo.org  https://r2.snva.jp  https://branshes-f-s.snva.jp  https://b.shutto-translation.com  https://apm.yahoo.co.jp  https://www.googleadservices.com  https://googleads.g.doubleclick.net  https://www.google.com  https://www.google.co.jp  *.criteo.com  https://connect.facebook.net  https://www.facebook.com  https://*.tiktok.com  *.buyee.jp  https://*.clarity.ms  https://www.google.co.id  https://www.google.co.in  https://www.google.co.kr  https://www.google.co.th  https://www.google.co.uk  https://www.google.com.ar  https://www.google.com.au  https://www.google.com.bd  https://www.google.com.hk  https://www.google.com.kh  https://www.google.com.mx  https://www.google.com.my  https://www.google.com.np  https://www.google.com.sg  https://www.google.com.tw  https://www.google.com.vn  https://www.google.ca  https://www.google.de  https://www.google.ee  https://analytics-ipv6.tiktokw.us  https://cdn.microad.jp  *.a.run.app  https://pbfnt-us-1.dsp-api.moloco.com  https://analytics.google.com  https://api.tigerfly.tw  https://app2.gorilla-efo.com  https://audiencedata.im-apps.net  https://demo-1.conversionsapigateway  https://dm.slim02.jp  https://pixelfnt-us.dsp-api.moloco.c  https://stats.g.doubleclick.net  https://api.fpjs.io  https://demo-1.conversionsapigateway.com  https://pixelfnt-us.dsp-api.moloco.com  https://tag.ladsp.jp  https://matomo.handsup.shop  https://oneseven-realtime.ably.io  https://ozasp.jp  https://status.handsup.shop  https://m.media-amazon.com  https://p.typekit.net  https://script.crazyegg.com  https://use.typekit.net  https://api.handsup.shop  https://notify.bugsnag.com  https://overbridgenet.com  https://service.handsup.shop  https://sessions.bugsnag.com  https://universe.send.microad.jp  https://apis.google.com  https://bded8a3c6ae-1-1053047382554.us-central1.run.app  https://cdn.shopimgs.com  https://*.on.aws  wss://oneseven-realtime.ably.io  https://ad.doubleclick.net; img-src  'self'  data:  chatbot.ecbeing.io  chatecbstgstrgoutside.blob.core.windows.net  show.staging.revico.jp  show.revico.jp  https://image.visumo.io  https://video.visumo.io  https://video.visumo.jp  https://media.visumo.io  https://www.visumo.jp  https://s3-ap-northeast-1.amazonaws.com  https://static.xx.fbcdn.net  https://static-fe.payments-amazon.com  https://static-na.payments-amazon.com  https://images-na.ssl-images-amazon.com  https://m.media-amazon.com  https://images-fe.ssl-images-amazon.com  https://*.google-analytics.com  https://*.googletagmanager.com  www.googletagmanager.com  https://ajax.googleapis.com  *.karte.io  img-karte-io.s3.amazonaws.com  https://syndication.twitter.com  https://abs-0.twimg.com  https://pbs.twimg.com  https://www.branshes.com  https://www.branshes.jp  *.makip.co.jp  *.awoo.org  https://r2.snva.jp  https://d.shutto-translation.com  https://b98.yahoo.co.jp  https://b99.yahoo.co.jp  https://www.googleadservices.com  https://googleads.g.doubleclick.net  https://www.google.com  https://www.google.co.jp  *.criteo.com  *.criteo.net  https://connect.facebook.net  https://www.facebook.com  https://*.tiktok.com  https://www.google.co.id  https://www.google.co.in  https://www.google.co.kr  https://www.google.co.nz  https://www.google.co.th  https://www.google.co.uk  https://www.google.com.ar  https://www.google.com.au  https://www.google.com.bd  https://www.google.com.br  https://www.google.com.co  https://www.google.com.hk  https://www.google.com.kh  https://www.google.com.mx  https://www.google.com.my  https://www.google.com.np  https://www.google.com.ph  https://www.google.com.sg  https://www.google.com.tr  https://www.google.com.tw  https://www.google.com.ua  https://www.google.com.vn  https://www.google.bg  https://www.google.ca  https://www.google.ch  https://www.google.cl  https://www.google.cz  https://www.google.de  https://www.google.ee  https://www.google.es  https://www.google.fi  https://www.google.fr  https://www.google.hu  https://www.google.ie  https://www.google.it  https://www.google.nl  https://www.google.pl  https://www.google.ro  https://www.google.se  https://pixelfnt-us.dsp-api.moloco.com  https://tr.line.me  https://universe.send.microad.jp  https://ad.as.amanad.adtdp.com  https://ade.clmbtech.com  https://c.bing.com  https://cm.g.doubleclick.net  https://criteo-sync.teads.tv  https://cs.media.net  https://eb2.3lift.com  https://ib.adnxs.com  https://idsync.rlcdn.com  https://pixel.rubiconproject.com  https://r.casalemedia.com  https://rtb-csync.smartadserver.com  https://simage2.pubmatic.com  https://simage4.pubmatic.com  https://sync-t1.taboola.com  https://sync.1rx.io  https://sync.outbrain.com  https://tg.socdm.com  https://x.bidswitch.net  https://app2.gorilla-efo.com  https://px.ladsp.jp  https://cdnjs.cloudflare.com  https://inviewv6.ladsp.com  https://sztpmc.branshes.com  https://*.clarity.ms  https://analytics.twitter.com  https://t.co  https://i.smartnews-ads.com  https://i6.smartnews-ads.com  https://fonts.gstatic.com  https://cdn.jsdelivr.net  https://lh3.googleusercontent.com  https://stats.g.doubleclick.net  https://seal.globalsign.com  https://ssif1.globalsign.com  https://analytics-ipv6.tiktokw.us; style-src  'unsafe-inline'  'self'  chatbot.ecbeing.io  chatecbstgstrgoutside.blob.core.windows.net  show.revico.jp  show.staging.revico.jp  https://www.visumo.jp  https://assets.payments-amazon.com  fonts.googleapis.com  https://ajax.googleapis.com  *.makip.co.jp  https://demo4-m-s.snva.jp  https://d.shutto-translation.com  https://maxcdn.bootstrapcdn.com  https://cdn.jsdelivr.net  https://cdnjs.cloudflare.com  https://fonts.cdnfonts.com  https://unpkg.com  https://use.fontawesome.com  https://p.typekit.net  https://use.typekit.net  https://adblockers.opera-mini.net; media-src  blob:  chatbot.ecbeing.io  chatecbstgstrgoutside.blob.core.windows.net  chatecb-stg-saruyama.azurewebsites.net  https://video.visumo.io  https://video.visumo.jp  https://media.visumo.io  https://show.revico.jp; font-src  'self'  data:  show.revico.jp  show.staging.revico.jp  https://assets.payments-amazon.com  fonts.googleapis.com  fonts.gstatic.com  *.karte.io  https://maxcdn.bootstrapcdn.com  https://cdnjs.cloudflare.com  https://fonts.cdnfonts.com  https://use.fontawesome.com  https://use.typekit.net  https://cdn.jsdelivr.net; frame-src  show.revico.jp  show.staging.revico.jp  https://www.facebook.com  https://static-fe.payments-amazon.com  https://static-na.payments-amazon.com  https://payments.amazon.co.jp  www.googletagmanager.com  www.youtube.com  https://platform.twitter.com  https://syndication.twitter.com  https://www.branshes.jp  *.makip.co.jp  *.criteo.com  *.criteo.net  *.buyee.jp  https://cache.send.microad.jp  https://um.ladsp.com  https://handsup.shop  https://pwm-image.trendmicro.jp  https://coaching.mwginternal.com  https://toolytics.pa.clients6.google.com; worker-src  'self'  blob:; report-to  csp-endpoint; 1
font-src fonts.gstatic.com use.typekit.net fonts.googleapis.com *.boxnow.gr *.boxnow.cy applepay.cdn-apple.com *.klarnacdn.net *.bootstrapcdn.com https://assets.egalaxy.gr data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it https://www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ cdn.tbibank.support *.boxnow.gr *.boxnow.cy int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com pay.google.com applepay.cdn-apple.com *.klarna.com https://widget-v5.boxnow.gr https://tbibank.gr https://www.googletagmanager.com https://www.facebook.com https://td.doubleclick.net https://youtu.be https://skroutza.skroutz.gr 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io calc.tbibank.gr *.boxnow.gr *.boxnow.cy *.findbar.io int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com cdn.klarna.com www.gstatic.com pay.google.com applepay.cdn-apple.com *.klarna.com *.klarnaevt.com *.klarnacdn.net magefan.com cm.magefan.com *.disqus.com *.designer-images.net https://new.egalaxy.gr https://assets.egalaxy.gr https://pagead2.googlesyndication.com https://www.facebook.com https://www.google.gr https://maps.googleapis.com https://maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net calc.tbibank.gr *.boxnow.gr *.boxnow.cy *.findbar.io int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com www.google.com www.gstatic.com pay.google.com applepay.cdn-apple.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.disqus.com *.stat-track.com polyfill.io *.moosend.com https://assets.egalaxy.gr https://360.bestprice.gr https://scripts.bestprice.gr https://connect.facebook.net https://www.facebook.com https://analytics.tiktok.com https://www.gstatic.com https://skroutza.skroutz.gr https://maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.findbar.io *.klarnacdn.net *.moosend.com *.bootstrapcdn.com https://assets.egalaxy.gr https://use.typekit.net https://p.typekit.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.findbar.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io calc.tbibank.gr *.boxnow.gr *.boxnow.cy *.findbar.io int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com pay.google.com applepay.cdn-apple.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.stat-track.com *.m-pages.com *.m-operations.com https://assets.egalaxy.gr https://www.bestprice.gr https://ad.doubleclick.net https://region1.google-analytics.com https://region1.analytics.google.com https://www.google.com https://analytics.tiktok.com https://stats.g.doubleclick.net https://www.google.gr https://www.facebook.com https://pagead2.googlesyndication.com https://maps.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'none'; default-src 'none'; img-src *; script-src common.equisoft.io/assets/ 'unsafe-inline' 'report-sample' common.kronos-crm.com px.ads.linkedin.com googleads.g.doubleclick.net www.google.ca www.google-analytics.com www.googletagmanager.com www.googleadservices.com www.gstatic.com www.google-analytics.net js.stripe.com js.hs-scripts.com js.usemessages.com js.hs-analytics.net js.hsadspixel.net sjs.bizographics.com connect.facebook.net www.linkedin.com; style-src common.equisoft.io/assets/ 'unsafe-inline' fonts.googleapis.com; font-src common.equisoft.io/assets/ fonts.googleapis.com fonts.gstatic.com; connect-src common.equisoft.io/ common.kronos-crm.com api.hubspot.com api.hubapi.com www.facebook.com; frame-src common.kronos-crm.com connect.facebook.net js.stripe.com bid.g.doubleclick.net; frame-ancestors 'none'; report-uri https://sentry.io/api/56211/security/?sentry_key=2a79cca27fc448d599c380685792b212; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.youtube.com maps.gstatic.com *.googleapis.com *.google-analytics.com *.googletagmanager.com googleads.g.doubleclick.net cdnjs.cloudflare.com stackpath.bootstrapcdn.com assets.zendesk.com connect.facebook.net *.cookiebot.com *.hs-scripts.com *.hs-analytics.net *.hs-banner.com *.hubspot.com *.hsforms.net *.hsappstatic.net *.usemessages.com *.clarity.ms; frame-src 'self' *.youtube.com assets.zendesk.com *.facebook.com s-static.ak.facebook.com tautt.zendesk.com *.cookiebot.com *.hubspot.com; connect-src 'self' *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.doubleclick.net *.googlesyndication.com www.google.com *.hubspot.com *.hubapi.com *.hs-analytics.net *.hs-banner.com *.hsforms.com *.usemessages.com *.cookiebot.com *.clarity.ms yoast.com; object-src 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.google.com.br https://googleads.g.doubleclick.net https://www.googleadservices.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://www.google.com.br https://googleads.g.doubleclick.net https://www.googleadservices.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://www.google.com https://www.google.com.br https://googleads.g.doubleclick.net https://www.googleadservices.com; frame-src https://www.googletagmanager.com https://td.doubleclick.net https://bid.g.doubleclick.net; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.cookiebot.com https://*.cookiebot.eu https://www.googletagmanager.com https://*.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://*.gstatic.com https://*.googleapis.com https://connect.facebook.net https://*.hotjar.com https://gng-global.my.site.com https://www.youtube.com https://*.tiktok.com https://js.adsrvr.org https://applepay.cdn-apple.com *.google.com *.adyen.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.adyen.com; style-src 'self' 'unsafe-inline' https://*.gstatic.com https://fonts.googleapis.com https://www.googletagmanager.com https://gng-global.my.site.com *.cash.app *.adyen.com; img-src * data: self; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com https://*.hotjar.com https://gng-global.my.site.com https://applepay.cdn-apple.com https://cash-f.squarecdn.com; connect-src *; frame-src https://*; media-src 'self' blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:; report-uri /csp-report 1
object-src 'none';base-uri 'self';script-src 'nonce-KADjYz8CBJ3asIpcOr3KAA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src https: 'self'; style-src https: 'self' 'sha256-uxelkF613AGxref1/rP3ZHZE+P7Ug0CyXVLR1rLSakU=' 'sha256-P+2NeKq71oAxK8zY6cOiSwpf3Aa/xXHbkXu4DioxsRQ=' 'sha256-vv9IoKo7BSLbWcUHr3tNmfNVmm5L/9Cfn2H6LMk7/ow=' 'sha256-QiN3HnNUibKmvNsuNF2t2ZEEAvhvIG0Po8FCMXDUuvo=' 'sha256-PDv7PK7p4vec7tI/1XbvDMwahytuLYN1Ul7CMcw1gHY=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-E9oHpuvJ6jOR3P7K7KizBmPB/3U+maUP840PXFjEq+A=' 'sha256-u6jtHZ4a6N0kmQve7cxZ0+3oAelZx+CiMr0HwTbRoxA=' 'sha256-2EA12+9d+s6rrc0rkdIjfmjbh6p2o0ZSXs4wbZuk/tA=' 'sha256-Lpt5CFCrGLrsjxO/wBhoSm4Lc1o5pxDZuW5/UU9ANhE='; script-src https: 'self' 'sha256-WN0hqek1jEauhlhWVVXeQPa5BD3f0rsMdmwSZtw1Cys=' 'sha256-eIXWvAmxkr251LJZkjniEK5LcPF3NkapbJepohwYRIc=' 'sha256-Jz4XDAN4f076pEj8cOt8mEdISulquB3CBdxFvEpSSyc=' https://www.googletagmanager.com https://www.clarity.m 'sha256-xJVBbz8FBogVbgagro0nHcjfwOz3sqjCtGSjihUh2m0=' 'sha256-SsAnEE7qERD9tzeNelDfWgW7Ej6bXCyaaggwM/cg0+M=' 'sha256-1ileVmLABVmb2IIWyUuP5uxf3JiJDAJhDAzM8BwWvO4=' 'sha256-gPjlli1HEdLlR0AZTY971/wQVOdSkl9mEinLnxrPpJw='; 1
font-src *.fontawesome.com *.magentocommerce.com *.iubenda.com *.zopim.com data: *.b-cdn.net fonts.gstatic.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.facebook.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com https://www.googletagmanager.com/ *.pinterest.com *.pinterdev.com commerce-app.pintergration.com *.criteo.com *.criteo.net *.iubenda.com *.youtube-nocookie.com *.youtube.com *.facebook.com cl.avis-verifies.com *.tradedoubler.com a.imgstatics.com https://assets.braintreegateway.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.googletagmanager.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com *.magentocommerce.com *.iubenda.com *.zoorate.com *.feedaty.com *.facebook.com *.google.it *.zopim.com 'self' data: blob: *.rikorda.it *.b-cdn.net maps.gstatic.com maps.googleapis.com googletagmanager.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com *.magentocommerce.com *.iubenda.com *.criteo.com *.criteo.net *.zoorate.com *.zopim.com *.facebook.com *.facebook.net *.zdassets.com *.sentry-cdn.com *.b-cdn.net *.tradedoubler.com a.imgstatics.com maps.googleapis.com cdn.clerk.io api.clerk.io yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com *.magentocommerce.com *.iubenda.com *.zoorate.com *.b-cdn.net fonts.googleapis.com https://assets.braintreegateway.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.pinterest.com *.pinterdev.com commerce-app.pintergration.com *.magentocommerce.com *.iubenda.com *.zdassets.com wss://*.zopim.com sentry.io 'self' data: blob: *.b-cdn.net *.rikordadev.it *.rikorda.it maps.googleapis.com payments.braintree-api.com client-analytics.braintreegateway.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.b-cdn.net 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.klevu.com *.ksearchnet.com *.stape.io *.fontawesome.com *.hometex.co.uk *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com maxcdn.bootstrapcdn.com fonts.googleapis.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.jsdelivr.net data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.auspost.zone https://seo.mageplaza.com *.facebook.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.auspost.zone *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.stape.io *.google.com/ *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com *.auspost.com.au *.dropbox.com *.facebook.com *.harleyheaven.com.au *.jotform.com *.lustyindustries.com *.smartsheet.com *.wufoo.com zacspeed.com *.zscalerthree.net *.zscloud.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.trackedlink.net *.ddlnk.net *.klevu.com *.ksearchnet.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.doubleclick.net *.stape.io *.hometex.co.uk *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cloudinary.com https://www.magezon.com quickchart.io img.youtube.com t.zip.co static.zipmoney.com.au static.zip.co *.adswizz.com *.arinet.com *.facebook.com *.facebook.net www.google.ca www.google.co.id www.google.co.in www.google.co.jp www.google.co.kr www.google.com.au www.google.com.pg www.google.com.ph www.google.com.sg www.google.com.vn www.google.co.nz www.google.nr google.com *.harleyheaven.com.au *.linkint.com.au meetanshi.com *.tiktok.com *.trackedweb.net *.whitesmoto.com.au *.whitespowersports.com.au data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app maps.googleapis.com *.googleapis.com *.gstatic.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.auspost.zone js.klevu.com *.ksearchnet.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.googletagmanager.com *.doubleclick.net *.stape.io *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://unpkg.com/konva@8.3.14/konva.min.js *.google.com/ *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com static.zipmoney.com.au static.zip.co zip.co comms.peterstevens.com.au 'sha256-t8+YQ8a68xqlo1CFNuvZ6hEa2lK8D3qfIUxC0pF5l9o=' 'sha256-ufaKzAUhXBQKdJPjuUWMbuacFPm549ht8Z7dpRE26XM=' 'sha256-PNMkJkCcCjYpfS6ut7QxRr/QP1GMXwrEY4Jp7c5bbEQ=' 'sha256-Aeai8hEPsncYAo037HhsleT3hm0umTVL+RGnbnqjyow=' 'sha256-aA7EYt2b5REh4/t62Ec27SdBHDpxp4+CDvqDmi3kwIU=' 'sha256-IDQQPwOtwjVjctga3hnfq2768nLqbuNLqimB7xJnjaI=' 'sha256-ArJ5AsgE5eyyFHy8hBO5OZecFe+/6RtJQFuTQz0WNg0=' 'sha256-DF7FIHDGQFGxWGPV7g7oBbBBoksB20ETrubzbkNuGmk=' 'sha256-h8gG1uNWi02S00uhnnPan+IfTOULBEi0D46e6eAw/dk=' 'sha256-+kUhn+hYODOZB9qeg14vC/j7t+Je1Kyb1n5Lw0HNNuQ=' 'sha256-277rZp0nuYHkjMM9XUlUzpRa0GI1kxTAMIwlQzKEg+s=' 'sha256-XmRQlLFP7QNSk28pMd0V2lwnOJW58FLjnKNso9oV4dc=' 'sha256-xsPpZii/gKcFKSwi3EyLGlAmvD8/BfSUwWRgysRt8Sk=' 'sha256-CDcBv2vGbX3VhOnsqmpLz1oDViOH8BZnrAeqIblPjwU=' 'sha256-tz0AxSJyQ8sfsoC5GUxd9MhPL9nAAmWLhsLU2iLKSks=' 'sha256-7f0jDs7mc731NNDkilDEVmhUVfYfKSi7y2fggnsmA0s=' 'sha256-yDdSqpioQ+WMfXD6baQmrCfMBj8fAVW16GoP9a1U3qI=' 'sha256-JQdCgOSRx1mm9rThyhEY5AOCHIuK2YDCEGStoIqcg8Q=' 'sha256-sVUxzEb0+FkE8dtC8l+D7IOPLE1rsfhKwkRJCDLmYNU=' 'sha256-6YaaTWp00NYPrQ+Epun8/dN+4Cu6VkDcj1/aVPp5wJA=' 'sha256-wde4U2cpd835Bhf19CHt9yWtezLaU24iPwRw20KDipY=' 'sha256-Uj7SWwMGDZwvpcIjjey+9yBM0J1SVOo6TVtswbKBDpY=' 'sha256-TafMzq/PynXi1Bw09I0XigZClLhkh+wUDlLZWOdLB4k=' 'sha256-rSS/ii/l7aoXKRKdP8rvouIhevTdUu20QjRpvaArWUk=' https://js.klevu.com https://www.peterstevens.com.au *.addthis.com *.arinet.com capi-automation.s3.us-east-2.amazonaws.com d3k1w8lx8mqizo.cloudfront.net *.facebook.net *.harleyheaven.com.au *.jquery.com *.klevu.com rum.hlx.page *.tiktok.com *.wufoo.com *.zip.co 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app webchat.dotdigital.com webchat.staging.dotdigital.com *.klevu.com *.ksearchnet.com *.googleapis.com *.googletagmanager.com *.stape.io *.fontawesome.com *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu maxcdn.bootstrapcdn.com fonts.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com https://statsjs.klevu.com https://js.klevu.com *.bootstrapcdn.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com *.googleapis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.auspost.zone *.klevu.com *.ksearchnet.com *.google-analytics.com *.doubleclick.net *.googlesyndication.com *.stape.io *.hometex.co.uk *.cloudflare.com *.twitter.com *.twimg.com *.googleadservices.com *.sandbox.paypal.com *.paypalobjects.com *.ampproject.org *.cloudinary.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.amplitude.com *.facebook.com *.facebook.net www.google.co.in www.google.com.au www.google.com.sg www.google.com.vn www.google.co.nz www.google.co.uk www.google.nl www.google.nr mpc2-prod-27-is5qnl632q-uk.a.run.app mpc-prod-21-1053047382554.us-central1.run.app *.on.aws rum.hlx.page *.tiktok.com *.tiktokw.us *.zip.co *.zipmoney.com.au 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://8afa6f1a-3bdc-4245-ba8a-7b82acd2006f.sansec.watch/; report-to report-endpoint; 1
base-uri 'self' https://clerk.checkthat.ai; script-src 'self' 'unsafe-inline' https://cdn.rudderlabs.com https://widget.intercom.io https://www.googletagmanager.com https://us-assets.i.posthog.com https://clerk.checkthat.ai; worker-src 'self' blob:; connect-src 'self' https://api.rudderstack.com https://*.dataplane.rudderstack.com https://clerk.checkthat.ai https://api-iam.intercom.io wss://nexus-websocket-a.intercom.io https://us.i.posthog.com https://track.customer.io https://*.ingest.us.sentry.io https://www.google-analytics.com https://px.ads.linkedin.com https://pixel-config.reddit.com https://9xgnrndqve.execute-api.us-west-2.amazonaws.com 1
default-src * 'self'; style-src * 'self' 'unsafe-inline'; img-src * 'self' data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.googletagmanager.com *.seeclickfix.com *.civicplus.com *.civicplus.pro *.civicclerk.com engage6.azureedge.net cdn-live.evolve.civicplus.io *.audioeye.com *.pendo.io *.zdassets.com *.zendesk.com *.zopim.com *.arcgis.com *.arcgisonline.com *.services.visualstudio.com *.monitor.azure.com *.googleapis.com *.googletagmanager.com *.google-analytics.com use.fontawesome.com *.google.com *.gstatic.com gstatic.com cdn.embedly.com/widgets/platform.js cdnjs.cloudflare.com static.cloudflareinsights.com http://tag.brandcdn.com/privacy tag.brandcdn.com/autoscript/cityofbakersfieldsolidwastedivisio_vgtstk1fovvvvfu9/city_of_bakersfield_solid_waste_divisio.js * 'self' about: 'unsafe-inline' 'unsafe-eval' data:; worker-src * 'self' data: blob: 'unsafe-eval' 'unsafe-inline'; frame-src * 'self'; media-src * 'self' blob:; font-src * 'self' data:; upgrade-insecure-requests; form-action 'self'; frame-ancestors 'self';report-uri /contentsecuritypolicy/report 1
object-src 'none';base-uri 'self';script-src 'nonce-NeuIv5LAIl5ZhKQ1VEdwBA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.googleapis.com *.gstatic.com data: *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com platform.twitter.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.disqus.com pinterest.com assets.pinterest.com syndication.twitter.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.disqus.com twitter.com platform.twitter.com *.winefamly.com *.google-analytics.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' 'self';script-src 'self' https: 'strict-dynamic' 'unsafe-inline' 'nonce-mNu6rUR9t4rtL5mobehUGQ==';font-src 'self' data: https://use.typekit.net https://embed.tawk.to https://fonts.gstatic.com;img-src 'self' data: https://www.googletagmanager.com https://*.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://www.facebook.com https://i.ytimg.com https://i.vimeocdn.com https://embed.tawk.to https://tawk.link https://s3.amazonaws.com https://cdn.jsdelivr.net;media-src 'self' https://embed.tawk.to;style-src 'self' https://use.typekit.net https://p.typekit.net https://fonts.googleapis.com https://embed.tawk.to 'unsafe-inline';connect-src 'self' https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://stats.g.doubleclick.net https://www.google.com https://p.typekit.net https://*.tawk.to wss://*.tawk.to https://sst.webatvantage.be https://*.facebook.com https://e1-0850197d5e074be58352ddc860645af6.ecs.us-east-1.on.aws;frame-src 'self' https://www.googletagmanager.com https://sst.webatvantage.be https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.facebook.com;object-src 'none';base-uri 'self';report-uri /api/csp-report; 1
script-src 'self' 'strict-dynamic' 'nonce-hELcEk4g52Mw58pVBgiy3g=='; report-uri https://creal.jp/csp_report; report-to default; 1
font-src fonts.gstatic.com *.bootstrapcdn.com *.closet22.com closet22.com 'self' data: *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.qcb.gov.qa *.snapchat.com *.twitter.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.modirum.com *.eurocommerce.gr 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.facebook.com *.infobip.com *.snapchat.com *.hotjar.com *.skroutz.gr *.twitter.com *.consensu.org *.sharethis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.facebook.net *.facebook.com *.twitter.com t.co *.skroutz.gr *.bestprice.gr *.google.gr *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.sharethis.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ *.google.com *.fixit.gr *.facebook.net *.facebook.com *.infobip.com *.cloudflareinsights.com *.google.gr *.twitter.com *.ads-twitter.com sc-static.net *.doubleclick.net *.iconify.design *.hotjar.com *.skroutz.gr *.bestprice.gr *.smartlook.com *.chimpstatic.com chimpstatic.com *.linkwi.se *.heatmap.it *.adman.gr *.cloudflare.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.nr-data.net *.newrelic.com *.trackedlink.net *.sharethis.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://fonts.bunny.net unsafe-inline assets.braintreegateway.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.fixit.gr *.infobip.com *.facebook.com *.facebook.net *.snapchat.com *.doubleclick.net *.hotjar.com *.google.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.googleadservices.com *.google-analytics.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.nr-data.net *.newrelic.com *.ampproject.org *.sharethis.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-_zwTpTXoqH-kSXHHfKsU9A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com *.fontawesome.com *.yotpo.com *.klarnacdn.net www.ekstralys.no data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://*.svea.com https://*.vipps.no https://*.trustly.com www.ekstralys.no 'self' 'unsafe-inline'; frame-ancestors www.ekstralys.no 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.klarna.com www.xtento.com https://*.svea.com www.ekstralys.no 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: *.googleapis.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.cloudflare.com *.googleadservices.com *.google-analytics.com *.cloudfront.net www.xtento.com cdn.xtento.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ ts.tradetracker.net www.magmodules.eu www.ekstralys.no data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com commerce.adobe.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.googleapis.com *.gstatic.com *.klarna.com *.klarnacdn.net *.criteo.net *.criteo.com *.facebook.net *.google-analytics.com *.amazon.co.uk *.amazon.com *.payments-amazon.com cookie-script.com s.kk-resources.com *.livechatinc.com bat.bing.com js.adsrvr.org sc-static.net *.hotjar.com *.snapchat.com *.sleeknote.com https://*.dibspayment.eu www.xtento.com cdn.xtento.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.svea.com *.klarnaservices.com tm.tradetracker.net www.ekstralys.no 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.gstatic.com https://static.klaviyo.com *.klarnacdn.net *.fontawesome.com www.ekstralys.no 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com www.ekstralys.no 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.klarnaevt.com *.amazon.co.uk *.amazon.com *.payments-amazon.com *.doubleclick.net *.google-analytics.com *.snapchat.com *.criteo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klarnacdn.net *.klarna.com *.klarnaservices.com www.ekstralys.no 'self' 'unsafe-inline'; child-src www.ekstralys.no http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com www.ekstralys.no 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' *.hsadspixel.net *.hs-analytics.net *.hs-scripts.com *.hubspot.com static.hsappstatic.net *.usemessages.com *.hs-banner.com *.hscollectedforms.net *.hsleadflows.net *.hsforms.net *.hsforms.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspot.net js.hscta.net *.hubspotfeedback.com feedback.hubapi.com 'strict-dynamic' 'nonce-lcPoQemue+9bc/VpppC+Vg=='; img-src 'self' data: *.hubspot.com no-cache.hubspot.com js.hscta.net *.hsforms.net *.hsforms.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspot.net *.hubspotusercontent-eu1.net cdn2.hubspot.net static.hsappstatic.net www.google.se www.google.com www.facebook.com region1.analytics.google.com stats.g.doubleclick.net googleads.g.doubleclick.net pagead2.googlesyndication.com sdk.privacy-center.org www.googletagmanager.com mnd-assets.mynewsdesk.com; connect-src 'self' *.hubapi.com *.hubspot.com js.hscta.net *.hs-banner.com *.hscollectedforms.net *.hsforms.net *.hsforms.com *.hs-analytics.net www.google.com ad.doubleclick.net plausible.io data.advania.se analytics.google.com api.privacy-center.org m.clarity.ms pagead2.googlesyndication.com; frame-src 'self' data.advania.se *.hubspot.com *.hs-sites.com advania-25168988.hs-sites-eu1.com *.hsforms.net *.hsforms.com *.hubspot.net play.hubspotvideo.com recognition.ecovadis.com; style-src 'self' 'unsafe-inline' static.hsappstatic.net use.typekit.net p.typekit.net cdn.jsdelivr.net *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net cdn2.hubspot.net; font-src 'self' use.typekit.net fonts.gstatic.com *.hubspotusercontent-eu1.net static.hsappstatic.net 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com 'self' data: *.fontawesome.com https://fonts.gstatic.com https://ws.colissimo.fr https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline' *.tawk.to *.custplace.com; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline' *.facebook.com; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.gstatic.com *.googleapis.com https://www.googletagmanager.com/ https://www.youtube.com https://form.typeform.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline' *.facebook.com *.googletagmanager.com; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://maps.googleapis.com https://maps.gstatic.com https://ws.colissimo.fr https://*.tile.openstreetmap.fr https://*.onyourmap.com https://google.fr www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: data: 'self' 'unsafe-inline' *.facebook.net *.linkedin.com *.facebook.com *.tawk.to *.custplace.com *.doubleclick.net *.google.fr *.google.com *.googleadservices.com *.ekstere.eco; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com *.googletagmanager.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval' *.facebook.net *.licdn.com *.tawk.to cdn.jsdelivr.net *.custplace.com *.doubleclick.net *.customer.io; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.gstatic.com *.fontawesome.com https://fonts.googleapis.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com https://cdnjs.cloudflare.com assets.braintreegateway.com 'self' 'unsafe-inline' *.tawk.to; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.googletagmanager.com *.google-analytics.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://ws.colissimo.fr https://maps.googleapis.com https://nominatim.openstreetmap.org https://*.onyourmap.com https://*.mapbox.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline' *.tawk.to *.custplace.com *.doubleclick.net *.google.fr *.googleapis.com *.linkedin.com *.customer.io *.googlesyndication.com; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com https://fonts.bunny.net *.fontawesome.com *.fonts.googleapis.com data: *.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.authorize.net yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.authorize.net *.addthis.com *.pinterest.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com https://firebasestorage.googleapis.com *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.addthis.com *.pinterest.com *.cdninstagram.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com cdn.ampproject.org raw.githubusercontent.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com *.avada.io *.shopify.com *.authorize.net *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.instagram.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com https://fonts.bunny.net *.googleapis.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com cdn.ampproject.org api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com https://get.geojs.io *.avada.io *.authorize.net *.cloudflare.com *.addthis.com *.graph.instagram.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-PBVbG2yYOaraIs/p24QJXg' https://accounts.google.com https://maps.googleapis.com https://analytics.ahrefs.com/analytics.js https://www.googletagmanager.com https://www.google-analytics.com https://kit.fontawesome.com https://cdn.jsdelivr.net https://connect.facebook.net https://cdnjs.cloudflare.com https://cdn.sheetjs.com https://static.cloudflareinsights.com https://resources.jetbrains.com https://unpkg.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://resources.jetbrains.com; font-src 'self' https://fonts.gstatic.com https://ka-f.fontawesome.com data:; img-src 'self' data: blob: https:; media-src 'self' https://d4zpkteeql1oc.cloudfront.net; connect-src 'self' https://accounts.google.com https://maps.googleapis.com https://www.google-analytics.com https://ka-f.fontawesome.com https://cdn.jsdelivr.net https://region1.google-analytics.com https://static.cloudflareinsights.com https://analytics.ahrefs.com https://unpkg.com https://costless-prod.s3.eu-central-1.amazonaws.com; frame-src 'self' https://www.youtube.com https://youtube.com https://d4zpkteeql1oc.cloudfront.net https://challenges.cloudflare.com; object-src 'none'; base-uri 'self'; report-uri /csp-report 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://assets.apollo.io https://embed.typeform.com https://*.typeform.com https://va.vercel-scripts.com https://*.vercel-insights.com https://vercel.live; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://vercel.live; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://vercel.live https://assets.vercel.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://*.apollo.io https://aplo-evnt.com https://*.typeform.com https://*.vercel-insights.com https://vercel.live wss://ws-us3.pusher.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com; frame-src 'self' https://embed.typeform.com https://*.typeform.com https://www.youtube.com https://youtube.com https://www.youtube-nocookie.com https://vercel.live; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: *.unpkg.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.authorize.net checkout.sezzle.com sandbox.checkout.sezzle.com tracking.sezzle.com challenges.cloudflare.com *.instagram.com *.cdninstagram.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.unpkg.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ media.sezzle.com maps.gstatic.com https://widget.freshworks.com https://www.strikeindustries.com *.instagram.com *.cdninstagram.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com mysyscloud.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://developer.adobe.com https://magento.com https://cdn.avmws.com/ http://cdn.avmws.com/ chimpstatic.com downloads.mailchimp.com *.list-manage.com *.unpkg.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.authorize.net sandbox-assets.secure.checkout.visa.com checkout-sdk.sezzle.com sandbox.checkout-sdk.sezzle.com widget.sezzle.com maps.googleapis.com challenges.cloudflare.com https://classic.avantlink.com https://www.googletagmanager.com https://maps.googleapis.com https://widget.freshworks.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.unpkg.com https://static.klaviyo.com fonts.cdnfonts.com *.gstatic.com https://widget.freshworks.com *.instagram.com *.cdninstagram.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net mysyscloud.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.googleapis.com https://developer.adobe.com https://cdn.avmws.com/ http://cdn.avmws.com/ *.unpkg.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.authorize.net gateway.sezzle.com sandbox.gateway.sezzle.com media.sezzle.com widget.sezzle.com maps.googleapis.com *.gstatic.com https://widget.freshworks.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.ggpht.com *.googleusercontent.com https://*.googleadservices.com https://*.googletagmanager.com https://*.axept.io https://cdnjs.cloudflare.com https://*.tradelab.fr https://*.goldenbees.fr https://*.facebook.com https://*.facebook.net https://*.licdn.com https://*.adnxs.com https://*.tiktok.com https://*.indeed.com blob:;; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://fonts.axept.io https://cdnjs.cloudflare.com; ; img-src 'self' https://*.googleapis.com https://*.gstatic.com https://*.google.com  https://*.googleusercontent.com https://*.google-analytics.com https://*.googletagmanager.com https://*.talent.com https://axeptio.imgix.net https://*.axept.io https://*.vimeocdn.com https://*.ytimg.com https://*.adsrvr.org https://*.facebook.com https://*.facebook.net https://*.linkedin.com https://*.adnxs.com https://*.doubleclick.net https://*.googlesyndication.com https://*.indeed.com data:;; media-src 'self'; frame-src https://*.google.com https://*.googletagmanager.com https://*.vimeo.com https://*.youtube.com https://*.youtube-nocookie.com https://*.facebook.com https://*.facebook.net;; font-src 'self' https://fonts.gstatic.com https://fonts.axept.io https://maxcdn.bootstrapcdn.com data:;; connect-src 'self' https://*.googleapis.com https://*.google.com https://*.gstatic.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googlesyndication.com https://*.googleadservices.com https://*.axept.io https://*.facebook.com https://*.facebook.net https://*.tiktok.com https://*.tiktokw.us https://*.linkedin.com data: blob:;; report-uri /report-csp-violation 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' pxl.qccerttest.com *.clarity.ms cdnjs.cloudflare.com *.googleoptimize.com formalyzer.com tracking.leadlander.com fonts.gstatic.com t.sf14g.com *.facebook.com *.facebook.net *.sentry-cdn.com *.google.com maxcdn.bootstrapcdn.com *.googleapis.com ssl.google-analytics.com *.doubleclick.net *.adnxs.com player.vimeo.com code.jquery.com *.netmng.com *.contextweb.com *.quantcount.com *.adsrvr.org *.quantserve.com api.cloudsponge.com collect.cloudsponge.com www.google-analytics.com www.googletagmanager.com use.fontawesome.com platform.twitter.com gng.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.moengage.com cdnjs.cloudflare.com *.googleoptimize.com *.facebook.com *.facebook.net *.sentry-cdn.com *.google.com *.googleapis.com ssl.google-analytics.com *.doubleclick.net *.adnxs.com code.jquery.com www.googletagmanager.com platform.twitter.com *.taboola.com *.clarity.ms *.adsrvr.org *.quantserve.com *.five9.net cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' 'unsafe-hashes' *.moengage.com fonts.bunny.net fonts.googleapis.com cdnjs.cloudflare.com use.fontawesome.com; img-src 'self' data: blob: *.moengage.com moe-email-campaigns.s3.amazonaws.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.adnxs.com *.quantcount.com *.adsrvr.org *.quantserve.com *.tvsquared.com *.taboola.com *.clarity.ms; font-src 'self' data: *.googleapis.com *.moengage.com fonts.gstatic.com fonts.bunny.net use.fontawesome.com; connect-src 'self' *.moengage.com *.facebook.com *.facebook.net *.sentry-cdn.com *.google.com *.googleapis.com ssl.google-analytics.com *.doubleclick.net api.cloudsponge.com collect.cloudsponge.com www.google-analytics.com *.taboola.com *.clarity.ms *.adsrvr.org *.quantserve.com *.five9.net; frame-src 'self' *.moengage.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net player.vimeo.com www.googletagmanager.com *.five9.net *.adsrvr.org; media-src 'self' *.moengage.com 1
default-src 'self';         img-src * data:;         font-src * data:;         style-src 'self' 'unsafe-inline' https:;         script-src 'self' 'unsafe-inline' https:;         frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://*.entertix.ro;         frame-ancestors 'self';         connect-src 'self' https:; 1
connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.magento-datasolutions.com *.magento-ds.com * *.adyen.com *.sharethis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com api.addressy.com *.google-analytics.com https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'unsafe-inline' data: 'unsafe-inline' blob: *.analytics.google.com *.facebook.com 'self' *.fullstory.com *.doubleclick.net *.googleapis.com *.googlesyndication.com *.loyaltylion.net *.loyaltylion.com *.elfsight.com forms-eu1.hscollectedforms.net *.livechatinc.com *.sjv.io *.ojrq.net *.loggly.com s.yimg.com *.paypal.cn *.paypalobjects.com browser-intake-us5-datadoghq.com *.qualtrics.com *.acsbapp.com *.storepoint.co localhost www.google.ca www.google.co.in www.google.de www.google.ie www.google.pt *.8x8.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' *.paypalobjects.com *.paypal.com *.googletagmanager.com *.trustpilot.com *.google-analytics.com *.nosto.com *.livechatinc.com cdn.cookie-script.com googleads.g.doubleclick.net sdk-static.loyaltylion.net sdk.loyaltylion.net unpkg.com commerce.adobedtm.com r1-t.trackedlink.net cdn.jsdelivr.net www.google.com livesearch-metrics.magento-ds.com connect.facebook.net edge.fullstory.com js-eu1.hs-scripts.com email-motocaddy.com *.newrelic.com magento-recs-sdk.adobe.net utt.impactcdn.com fonts.googleapis.com fonts.gstatic.com *.google.co.uk *.gstatic.com www.gstatic.com *.adyen.com *.8x8.com static.trackedweb.net pay.google.com acds-events.adobe.io acsbapp.com recommendations-sdk.adobe.io www.facebook.com accounts.google.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://9e50c508-95d2-4a1a-ad83-23f368938734.sansec.watch/; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://www.googletagmanager.com *.googleapis.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com static.klaviyo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.trustpilot.com js.stripe.com m.stripe.network 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://images.unsplash.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ hummuk.file.force.com *.documentforce.com/* *.file.force.com https://api.autoaddress.ie data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://maps.googleapis.com https://player.vimeo.com tagmanager.google.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.trustpilot.com js.stripe.com static.klaviyo.com cdnjs.cloudflare.com https://api.autoaddress.ie *.segmentify.com *.sgmntfy.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://static.klaviyo.com *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com api.autoaddress.ie static.klaviyo.com cdnjs.cloudflare.com https://api.autoaddress.ie *.segmentify.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://maps.googleapis.com https://player.vimeo.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com m.stripe.com capi.michaelmurphy.ie *.segmentify.com https://ad.doubleclick.net https://load.murphyhome.ie https://googleads.g.doubleclick.net https://www.google.ie https://ct.pinterest.com https://s.pinimg.com https://analytics.tiktok.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.gstatic.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com account.fetchify.com *.google.com/ https://challenges.cloudflare.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.trustpilot.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com cdn.doofinder.com https://www.magezon.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.google.com https://www.google.co.uk https://bat.bing.net https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src https://assets.adobedtm.com https://*.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https://vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com cdn.doofinder.com widget.freshworks.com m2epro.freshdesk.com cc-cdn.com https://browser.sentry-cdn.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.google.com https://*.authorize.net https://*.braintreegateway.com https://*.cardinalcommerce.com https://*.paypal.com https://*.doofinder.com https://widget.freshworks.com https://m2epro.freshdesk.com https://*.googletagmanager.com *.trustpilot.com https://*.vimeocdn.com https://s.ytimg.com https://cdn-cookieyes.com https://*.hotjar.com https://www.clarity.ms https://bat.bing.com https://static.zdassets.com https://googleads.g.doubleclick.net https://includestest.ccdc02.com https://widget-mediator.zopim.com https://challenges.cloudflare.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.doofinder.com widget.freshworks.com m2epro.freshdesk.com cc-cdn.com https://static.klaviyo.com https://fonts.googleapis.com unsafe-inline assets.braintreegateway.com *.trustpilot.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com *.doofinder.com wss://*.doofinder.com widget.freshworks.com m2epro.freshdesk.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com https://*.ingest.sentry.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://ekr.zdassets.com https://bat.bing.net https://h.clarity.ms https://flyingspares.zendesk.com wss://widget-mediator.zopim.com https://challenges.cloudflare.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' data:; script-src 'self' 'nonce-9d5bc154ba46fdc49de5a5fa84689a61' www.googletagmanager.com; script-src-elem 'self' 'nonce-9d5bc154ba46fdc49de5a5fa84689a61' maps.google.com maps.googleapis.com www.googletagmanager.com www.google-analytics.com cdnjs.cloudflare.com static.cloudflareinsights.com ajax.cloudflare.com cdn.jsdelivr.net d3js.org; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.jsdelivr.net; img-src 'self' data: www.gravatar.com maps.googleapis.com maps.google.com maps.gstatic.com www.google-analytics.com img.youtube.com *.panamaquaticsevents.com; font-src 'self' data: fonts.gstatic.com cdn.jsdelivr.net; connect-src * www.google-analytics.com; media-src *; object-src 'self'; frame-ancestors 'self'; form-action 'self'; frame-src 'self' www.youtube.com maps.google.com fecna.com.co; block-all-mixed-content; 1
font-src *.paqato.com *.fontawesome.com https://fonts.bunny.net *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com *.hsforms.com *.v-psp.com *.klaviyo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.youtube-nocookie.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com *.awin1.com *.zenaps.com *.fls.doubleclick.net https://www.googletagmanager.com/ js.mollie.com ad4m.at widget.trustpilot.com *.ad-srv.net *.doubleclick.net *.walls.io *.hsforms.com consentcdn.cookiebot.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com accounts.google.com *.trustpilot.com www.xtento.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https://images.unsplash.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com *.awin1.com *.zenaps.com *.wepowerconnections.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.mollie.com cdn.dogslove.com cdn.catslove.com cdn.wow.pet cdn.purenature.pet track-eu1.hubspot.com forms-eu1.hsforms.com as.ad4m.at ad.doubleclick.net track.adform.net *.adscale.de *.bing.com *.casalemedia.com *.clarity.ms *.contentsquare.net *.doubleclick.net *.facebook.com *.google.com *.googleapis.com *.linkedin.com *.paqato.com *.posthog.com *.pubmatic.com *.smartadserver.com *.twiago.com www.google.at www.google.be www.google.cl www.google.co.in www.google.co.kr www.google.co.uk www.google.co.za www.google.de www.google.es www.google.fr www.google.it www.google.nl www.google.rs www.google.tn www.google.al www.google.bg www.google.ca www.google.ch www.google.com.ar www.google.com.au www.google.com.bd www.google.com.cy www.google.com.hk www.google.com.mx www.google.com.ng www.google.com.ph www.google.com.py www.google.com.ua www.google.dk www.google.hu www.google.lu www.google.pl www.google.pt www.google.ru www.google.se www.google.si www.google.sk imgsct.cookiebot.com *.klaviyo.com https://firebasestorage.googleapis.com *.hsforms.net *.hsforms.com 'self' data: www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com s.pinimg.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com jquery.sellxed.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://cdn.ablyft.com https://tr.mediards.com http://tr.mediards.com js.mollie.com widget.trustpilot.com js-eu1.hsforms.net js-eu1.hs-scripts.com js-eu1.hs-analytics.net js-eu1.hs-banner.com js-eu1.hscollectedforms.net dogslove.com *.dogslove.com ad4m.at cdn.ablyft.com www.amcharts.com *.clarity.ms *.contentsquare.net *.googleapis.com *.licdn.com *.paqato.com *.posthog.com *.pinterest.com *.tiktok.com unpkg.com *.doubleclick.net consent.cookiebot.com consentcdn.cookiebot.com player.vimeo.com *.bing.com scripts.luigisbox.tech cdn.luigisbox.tech live.luigisbox.tech api.luigisbox.tech *.klaviyo.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech *.avada.io *.shopify.com accounts.google.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com *.trustpilot.com www.xtento.com cdn.xtento.com https://accounts.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.paqato.com scripts.luigisbox.tech cdn.luigisbox.tech live.luigisbox.tech api.luigisbox.tech https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech *.fontawesome.com https://fonts.bunny.net accounts.google.com *.googleapis.com *.gstatic.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com vimeo.com https://maps.googleapis.com https://player.vimeo.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com *.wepowerconnections.com https://the.sciencebehindecommerce.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ spc.dogslove.com spc.catslove.com spc.wow.pet http://localhost:9090 js-eu1.hsforms.net forms-eu1.hsforms.com forms-eu1.hubspot.com widget.trustpilot.com forms-eu1.hscollectedforms.net *.dogslove.com dogslove.com *.ablyft.com *.clarity.ms *.contentsquare.net *.doubleclick.net *.google.com *.googleapis.com *.linkedin.com *.paqato.com *.posthog.com *.tiktok.com consentcdn.cookiebot.com consent.cookiebot.com scripts.luigisbox.tech cdn.luigisbox.tech live.luigisbox.tech api.luigisbox.tech bat.bing.com *.klaviyo.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech https://get.geojs.io *.avada.io accounts.google.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src www.dogslove.com www.catslove.com www.wow.pet www.purenature.pet b2b.dogslove.com dogslove.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://accounts.google.com https://www.google.com https://www.gstatic.com https://script.crazyegg.com https://cdn.adfenix.com https://apps.elfsight.com https://static.elfsight.com https://static.hotjar.com https://script.hotjar.com https://googleads.g.doubleclick.net https://api.mapbox.com; style-src 'self' 'unsafe-inline' https: https://api.mapbox.com; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss: https://vars.hotjar.com https://vc.hotjar.io https://content.hotjar.io https://in.hotjar.com https://api.mapbox.com https://events.mapbox.com https://www.google-analytics.com https://region1.google-analytics.com https://graph.facebook.com; frame-src 'self' https: https://accounts.google.com https://www.facebook.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; 1
script-src-elem assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://www.google.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://connect.facebook.net https://stats.grupdzc.ro https://attr-2p.com https://apis.google.com https://www.gstatic.com https://*.sameday.ro https://cdn.jsdelivr.net *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; font-src www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://www.facebook.com  'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ https://www.googletagmanager.com https://event.2performant.com https://www.facebook.com https://ro.tbibank.support  https://www.google.com https://*.sameday.ro 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com https://www.googletagmanager.com https://*.google-analytics.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://www.google.com https://google.com https://googleads.g.doubleclick.net https://*.g.doubleclick.net https://ad.doubleclick.net https://www.google.ro https://event.2performant.com https://attr-2p.com https://www.facebook.com https://cdn.tbibank.support https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://www.google.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://connect.facebook.net https://stats.grupdzc.ro https://attr-2p.com https://apis.google.com https://www.gstatic.com https://*.sameday.ro https://cdn.jsdelivr.net *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://*.sameday.ro https://cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com data: https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://region1.google-analytics.com https://*.analytics.google.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://www.google.com https://google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://*.g.doubleclick.net https://ad.doubleclick.net https://www.google.ro https://event.2performant.com https://www.facebook.com https://stats.grupdzc.ro https://ro.tbibank.support  https://www.gstatic.com https://*.sameday.ro http://localhost:7700 https://get.geojs.io *.avada.io https://scrape.seo-factory.ro 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; frame-ancestors 'self'; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; connect-src 'self' https: 1
worker-src 'self' blob:; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com fonts.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.google.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.youtube.com/ www.googletagmanager.com checkout.stripe.com hooks.stripe.com js.stripe.com embed.sendcloud.sc 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com *.facebook.com *.googletagmanager.com quickchart.io img.youtube.com *.stripe.com *.sendcloud.sc data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.esputnik.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.maps.googleapis.com *.trackedlink.net *.maps.gstatic.com maps.googleapis.com *.googleadservices.com *.googletagmanager.com *.avada.io *.shopify.com connect.facebook.net blob: esputnik.com cdn.esputnik.com api.esputnik.com js.stripe.com hooks.stripe.com embed.sendcloud.sc cdn.jsdelivr.net ipinfo.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com *.google-analytics.com https://fonts.bunny.net maxcdn.bootstrapcdn.com fonts.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.sandbox.paypal.com https://www.paypal.com *.cloudflare.com *.twitter.com *.twimg.com *.googleadservices.com *.google-analytics.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org *.google.co.in *.maps.gstatic.com *.maps.googleapis.com maps.googleapis.com https://get.geojs.io *.avada.io *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net api.stripe.com hooks.stripe.com panel.sendcloud.sc api.sendcloud.sc ipinfo.io 'self' 'unsafe-inline'; child-src checkout.stripe.com hooks.stripe.com blob: http: https: blob: 'self' 'unsafe-inline'; default-src blob: 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.kueskipay.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' data: *.mipc.com.mx *.icecat.biz *.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.kueskipay.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.facebook.com *.googletagmanager.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com mipc.com.mx 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.kueskipay.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.sandbox.paypal.com *.paypalobjects.com www.facebook.com *.sharethis.com *.doubleclick.net *.livechatinc.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.google.com *.googleadservices.com *.googletagmanager.com *.kueskipay.com https://firebasestorage.googleapis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.sandbox.paypal.com *.paypalobjects.com *.hsforms.net *.hsforms.com 'self' data: blob: *.mipc.com.mx www.google.com.mx *.icecat.biz *.sharethis.com *.mercadopago.com.mx device.clearsale.com.br h.online-metrix.net seal.godaddy.com *.clarity.ms *.omappapi.com *.bing.com img.mlstatic.com *.elfsightcdn.com *.facebook.com storage.getbutton.io data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.kueskipay.com *.mxpnl.com *.avada.io *.shopify.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.hsforms.net *.hsforms.com *.gstatic.com cdn.ampproject.org www.gstatic.com *.mipc.com.mx cdn.mouseflow.com cdn.bitrix24.es kit.fontawesome.com *.omappapi.com *.app-us1.com trackcmp.net io.clickguard.com *.mipcapps.mx *.icecat.biz cdn.jsdelivr.net mipc.bitrix24.es *.doubleclick.net *.sharethis.com *.clarity.ms seal.godaddy.com device.clearsale.com.br h.online-metrix.net *.bing.com *.firecheckout.com cdn.clickydata.com dash.callbell.eu polyfill.io static.getbutton.io js.stripe.com *.googleapis.com *.elfsight.com *.cloudflare.com *.livechatinc.com *.hotjar.com *.callbell.eu studio.icecat.biz live-html.icecat.biz 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.kueskipay.com *.googletagmanager.com *.mxpnl.com *.fontawesome.com https://fonts.bunny.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.googleapis.com *.gstatic.com www.gstatic.com *.mipc.com.mx *.omappapi.com *.icecat.biz cdn.jsdelivr.net mipc.bitrix24.es dash.callbell.eu polyfill.io *.livechatinc.com *.callbell.eu studio.icecat.biz live-html.icecat.biz 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.icecat.biz *.callbell.eu 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googletagmanager.com stats.g.doubleclick.net *.kueskipay.com *.doubleclick.net https://get.geojs.io *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.sandbox.paypal.com *.paypalobjects.com t.elasticsuite.io *.hsforms.net *.hsforms.com cdn.ampproject.org www.googleapis.com *.mipc.com.mx io.clickguard.com *.omappapi.com *.fontawesome.com *.icecat.biz *.mipcapps.mx *.sharethis.com *.clarity.ms *.mixpanel.com dash.callbell.eu widget.getbutton.io *.googleapis.com *.bing.com *.elfsight.com https://www.googletagmanager.com/debug/badge.css facebook.com api.livechatinc.com bcp.crwdcntrl.net *.callbell.eu wss://centrifugo.callbell.eu studio.icecat.biz live-html.icecat.biz 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com *.mipc.com.mx *.mipcapps.mx api2.mipcapps.mx 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; report-uri /csp-report; 1
default-src 'self'; script-src 'unsafe-inline' 'unsafe-eval' 'self' https://aze-p-olrui-appsvc-stg.azurewebsites.net https://aze-olr-appsvc-stg.azurewebsites.net https://aze-olr-appsvc-cs-stg.azurewebsites.net https://aze-olr-appsvc-cp-stg.azurewebsites.net https://aze-olr-appsvc-prod.azurewebsites.net https://aze-olr-appsvc-cp-prod.azurewebsites.net https://www.gstatic.com https://www.google.com/recaptcha/ https://www.google-analytics.com https://www.googletagmanager.com https://maps.googleapis.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://cdnjs.cloudflare.com https://cdn.datatables.net https://cdn.jsdelivr.net https://snap.licdn.com https://connect.facebook.net https://*.hs-scripts.com https://js.hsforms.net https://js.hs-analytics.net https://js.hscollectedforms.net https://js.usemessages.com https://js.hubspot.com https://*.hs-banner.com https://*.hubspotusercontent-na1.net https://www.insightful-datavisionary.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn2.hubspot.net https://*.hubspotusercontent-na1.net https://cdnjs.cloudflare.com https://cdn.datatables.net https://cdn.jsdelivr.net https://aze-olr-appsvc-prod.azurewebsites.net https://aze-olr-appsvc-cp-prod.azurewebsites.net; img-src 'self' blob: data: https: https://www.paradigmcorp.com; font-src 'self' data: https://fonts.gstatic.com https://aze-olr-appsvc-prod.azurewebsites.net https://aze-olr-appsvc-cp-prod.azurewebsites.net; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://www.google.com https://www.googletagmanager.com https://maps.googleapis.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://*.hubapi.com https://*.hubspot.com https://*.hsforms.com https://*.hs-banner.com https://*.hscollectedforms.net https://*.hs-scripts.com https://js.hsforms.net https://js.hs-analytics.net https://px.ads.linkedin.com https://onlinereferralsapi.paradigmcorp.com https://portal.homecareconnect.com https://dc.services.visualstudio.com https://www.insightful-datavisionary.com; frame-src 'self' https://www.google.com/recaptcha/ https://consentcdn.cookiebot.com https://www.googletagmanager.com https://*.hsforms.com https://info.paradigmcorp.com https://player.vimeo.com https://www.youtube.com https://www.surveymonkey.com; frame-ancestors 'self' https://www.paradigmcorp.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; upgrade-insecure-requests; report-uri https://www.paradigmcorp.com/wp-json/csp/v1/report; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com https://fonts.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com www.apptrian.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com tagmanager.google.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://fonts.googleapis.com *.fontawesome.com *.addtoany.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.googleapis.com www.apptrian.com http://dpm.demdex.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://*.googlesyndication.com https://*.doubleclick.net https://*.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://adservice.google.com https://*.gstatic.com https://www.google.com https://*.adtrafficquality.google https://fundingchoicesmessages.google.com https://*.clarity.ms https://c.bing.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https: https://wsrv.nl https://lh3.googleusercontent.com; font-src 'self' https://fonts.gstatic.com; media-src 'self' https://esportpedia.b-cdn.net; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.googletagmanager.com https://*.googlesyndication.com https://*.doubleclick.net https://*.adtrafficquality.google https://*.gstatic.com https://www.google.com https://fundingchoicesmessages.google.com https://*.clarity.ms https://c.bing.com https://*.convex.cloud wss://*.convex.cloud https://esportpedia.b-cdn.net https://mpl.mlbbhub.com https://*.supabase.co wss://*.supabase.co https://wsrv.nl; frame-src 'self' https:; object-src 'none'; base-uri 'self'; report-uri /api/csp-report 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; frame-src 'self' www.youtube.com www.youtube-nocookie.com challenges.cloudflare.com td.doubleclick.net outlook.office365.com fast.wistia.net fast.wistia.com; worker-src 'self' blob:; child-src 'self' blob: www.youtube.com www.youtube-nocookie.com; script-src 'self' https: 'strict-dynamic' 'unsafe-inline' wasm-eval fast.wistia.net fast.wistia.com 'nonce-YbX4gzF09jj+lw6THRREvw=='; style-src 'self' https: 'unsafe-inline'; connect-src 'self' https: wss: https://browser-intake-datadoghq.com; base-uri 'none'; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub43c47d1757c13d9f6887ac3594ead3ae&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Aharvest-profit%2Cenv%3Aprod 1
default-src 'self'; script-src 'self' https://www.clarity.ms https://scripts.clarity.ms https://cdn-cookieyes.com https://maps.googleapis.com https://maps.gstatic.com https://clarityb.freshchat.com https://capitaeu.freshchat.com; connect-src 'self' https://*.claritygo.travel https://dataplane.rum.eu-west-2.amazonaws.com https://cognito-identity.eu-west-2.amazonaws.com https://sts.eu-west-2.amazonaws.com https://api.quicket.io https://*.clarity.ms https://maps.googleapis.com wss://*.claritygo.travel https://msdk.eu.freshchat.com; frame-src 'self' https://*.claritygo.travel https://www.google.com https://*.eshapay.net https://clarityb.freshchat.com https://capitaeu.freshchat.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maps.googleapis.com https://maps.gstatic.com https://clarityb.freshchat.com https://capitaeu.freshchat.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https:; frame-ancestors 'self'; base-uri 'self'; object-src 'none' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com static.klaviyo.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.awin1.com *.zenaps.com *.fls.doubleclick.net *.clearpay.co.uk *.meetanshi.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com platform.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.devdomain.io *.sessioncam.com *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.awin1.com *.zenaps.com *.wepowerconnections.com cdnjs.cloudflare.com services.postcodeanywhere.co.uk *.feefo.com snapwidget.com assets.reviews.io widget.reviews.io *.cdninstagram.com *.fbcdn.net *.afterpay.com *.clearpay.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com https://meetanshi.com/media/logo.png *.meetanshi.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.bakerdays.com *.bing.com *.t.co *.sessioncam.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com *.pcapredict.com services.postcodeanywhere.co.uk static.klaviyo.com *.feefo.com snapwidget.com https://static-forms.klaviyo.com *.bayengage.com widget.reviews.io *.afterpay.com *.clearpay.co.uk *.squarecdn.com https://hbiq.net https://static.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com *.meetanshi.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com twitter.com platform.twitter.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com https://chimpstatic.com *.pinimg.com *.ads-twitter.com *.twitter.com *.cloudfront.net *.sessioncam.com unpkg.com *.googleadservices.com *.cardinalcommerce.com *.google-analytics.com  *.dwin.com *.klaviyo.com *.googletagmanager.com *.amazon.com https://api.feefo.com https://www.dwin1.com 'self' 'unsafe-eval' 'nonce-cjZxcnY0eGZwNW9hc3J4YXI0Nno0bmV1Y25oN3NybTc=' 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY/CkTMBhjNhwPvglpYumjx31B4fjkY8=' 'sha256-nm8RubreBp99cwpZbsGqAokLaQzTX/9LKAsbACVo7w0='; style-src *.adobe.com fonts.googleapis.com services.postcodeanywhere.co.uk assets.reviews.io *.afterpay.com/ *.squarecdn.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com tagmanager.google.com *.aws.com *.youthdiscount.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.wepowerconnections.com https://the.sciencebehindecommerce.com services.postcodeanywhere.co.uk static.klaviyo.com fonts.googleapis.com fonts.gstatic.com snapwidget.com *.instagram.com graph.instagram.com *.feefo.com *.bayengage.com *.reviews.io *.clearpay.co.uk *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io *.meetanshi.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.doubleclick.net https://www.google-analytics.com *.sessioncam.com www.googleapis.com analytics.google.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'nonce-51a8c2055f8a76cc422a663797c9148bf298a6760acc4a51f6dd9fcfa8d4b44c' assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.autopay.eu pay.google.com *.google-analytics.com *.googletagmanager.com *.disqus.com https://cdnjs.cloudflare.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' *.livechatinc.com *.cookiebot.com *.hotjar.com *.bing.com 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY/CkTMBhjNhwPvglpYumjx31B4fjkY8='; style-src *.adobe.com fonts.googleapis.com *.autopay.eu *.googleapis.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com *.gstatic.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.salesmanago.pl *.salesmanago.es *.salesmanago.com platnosci.bm.pl platnosci-accept.bm.pl www.gstatic.com *.autopay.eu blob: *.disqus.com https://img.youtube.com *.hsforms.net *.hsforms.com 'self' data: 'self' *.cookiebot.com *.sm-cdn.eu; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.google-analytics.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' *.cookiebot.com *.googlesyndication.com; media-src *.adobe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com pay.google.com play.google.com *.autopay.eu 'self' *.livechatinc.com *.cookiebot.com *.googletagmanager.com *.doubleclick.net *.sensevr.pl; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self'; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com 'self' data: 'self'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googleapis.com 'self'; 1
require-trusted-types-for 'script'; trusted-types default dompurify 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.doubleclick.net *.adobedtm.com *.adobe.com *.tawk.to *.sooqr.com *.fontawesome.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com *.cookiebot.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com https://www.mollie.com *.google.com *.google.nl *.cookiebot.com *.spotlersearch.com *.googleapis.com *.sooqr.com www.magmodules.eu *.squeezely.tech *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com js.mollie.com *.doubleclick.net *.adobedtm.com *.tawk.to *.luckyorange.com *.sooqr.com *.spotlersearch.com spotlersearchanalytics.com *.jsdelivr.net *.googletagmanager.com *.googleapis.com *.cookiebot.com *.addthis.com *.hotjar.com *.hotjar.io 'unsafe-eval' squeezely.tech www.squeezely.tech *.squeezely.tech *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.tawk.to *.sooqr.com *.fontawesome.com *.tagmanager.google.com *.googleapis.com *.spotlersearch.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.doubleclick.net *.adobedtm.com *.adobe.com *.googleapis.com *.tawk.to *.luckyorange.com *.sooqr.com *.google-analytics.com wss://* *.cookiebot.com *.hotjar.com *.hotjar.io *.spotlersearch.com squeezely.tech *.squeezely.tech *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com accounts.google.com cdn.amplitude.com d3e54v103j8qbb.cloudfront.net www.googletagmanager.com www.google-analytics.com app.termly.io widget.intercom.io js.intercomcdn.com static.senja.io cdn.zapier.com www.google.com js.stripe.com cdn.firstpromoter.com static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.zapier.com; font-src 'self' fonts.gstatic.com data:; img-src 'self' data: blob: https:; connect-src 'self' https://*.sellerassistant.app wss://*.intercom.io https://*.intercom.io https://*.intercomassets.com https://www.googletagmanager.com https://www.google-analytics.com https://cdn.amplitude.com https://ajax.googleapis.com https://survey.survicate.com; frame-src 'self' www.google.com accounts.google.com www.youtube.com player.vimeo.com www.loom.com td.doubleclick.net app.termly.io; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com data: *.fontawesome.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com cdn.dnky.co amc.demdex.net www.google.com www.facebook.com youtube.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io maps.gstatic.com maps.googleapis.com accounts.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: https://static-content.vnforapps.com https://cdn.chattigo.com https://media.chattigo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page cdn.dnky.co r1-t.trackedlink.net www.gstatic.com js-agent.newrelic.com bam.nr-data.net maps.googleapis.com connect.facebook.net player.vimeo.com www.facebook.com graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://maps.googleapis.com *.gstatic.com https://static-content.vnforapps.com https://m.vnforapps.com https://h.online-metrix.net https://components.chattigo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com cdn.dnky.co *.fontawesome.com assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com maps.googleapis.com api.comapi.com bam.nr-data.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://config-global.chattigo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'wasm-unsafe-eval' https://js.stripe.com https://challenges.cloudflare.com https://*.clerk.accounts.dev https://*.clerk.com https://*.featurebase.app; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; worker-src 'self' blob:; frame-src 'self' https://js.stripe.com https://challenges.cloudflare.com https://*.clerk.accounts.dev https://*.clerk.com https://*.featurebase.app https://verify.walletconnect.com https://verify.walletconnect.org; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com cdn.jsdelivr.net www.google-analytics.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data: blob: cdn.boardinfinity.com bi-uploads-test.s3.ap-south-1.amazonaws.com bi-uploads.s3.ap-south-1.amazonaws.com t-batman.s3.ap-south-1.amazonaws.com t-musk.s3.ap-south-1.amazonaws.com t-yesmadam-604adf10.s3.ap-south-1.amazonaws.com t-board-infinity.s3.amazonaws.com t-board-infinity.s3.ap-south-1.amazonaws.com bi-app.s3.ap-south-1.amazonaws.com www.boardinfinity.com; font-src 'self' data: fonts.gstatic.com; connect-src 'self' wss: www.boardinfinity.com docykxifhkj2g3on4zt3lqctzy0mvunt.lambda-url.ap-south-1.on.aws cdn.jsdelivr.net storage.googleapis.com analytics.google.com www.google-analytics.com; frame-src 'self'; media-src 'self' blob: cdn.boardinfinity.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://www.gstatic.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com *.paypalobjects.com poolandspawarehouse.com.au data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.google.hr *.google.com.au server-side.poolandspawarehouse.com.au cdn.jst.ai 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com poolandspawarehouse.com.au www.facebook.com bat.bing.net *.feefo.com *.digicert.com *.google.com *.google.hr *.google.com.au data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com cdn.ampproject.org raw.githubusercontent.com https://maps.googleapis.com https://player.vimeo.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.maxmind.com poolandspawarehouse.com.au *.klaviyo.com *.google.hr *.google.com.au www.gstatic.com seal.digicert.com server-side.poolandspawarehouse.com.au connect.facebook.net bat.bing.com cdn.jst.ai my.jst.ai aly.jst.ai 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com poolandspawarehouse.com.au cdn.jst.ai 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com cdn.ampproject.org https://maps.googleapis.com https://player.vimeo.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.mmapiws.com poolandspawarehouse.com.au *.klaviyo.com server-side.poolandspawarehouse.com.au *.google.hr *.google.com.au *.google-analytics.com stats.g.doubleclick.net my.jst.ai bat.bing.net aly.jst.ai 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; default-src aly.jst.ai bat.bing.net poolandspawarehouse.com.au 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com fonts.googleapis.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://d1cwup7r903a1d.cloudfront.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com fonts.gstatic.com use.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://seo.mageplaza.com www.facebook.com 'self' 'unsafe-inline'; frame-ancestors self www.google.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.affirm.com *.affirm.ca www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.addthis.com *.facebook.com *.twitter.com www.google.com www.gstatic.com apis.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.affirm.com *.affirm.ca www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.addthisedge.com *.twitter.com https://firebasestorage.googleapis.com *.gstatic.com s.adroll.com d.adroll.com a.adroll.com amsducatidallas.createsend.com analytics.freespee.com beacon.krxd.net cm.g.doubleclick.net in.treasuredata.com io.narrative.io lex.33across.com ml314.com pixel.tapad.com s-cs.send.microad.jp stags.bluekai.com us-u.openx.net barracuda.com d.adroll.mgr.consensu.org dsum-sec.casalemedia.com eb2.3lift.com p.adsymptotic.com px.ads.linkedin.com px4.ads.linkedin.com pixel.advertising.com pixel.rubiconproject.com image2.pubmatic.com simage2.pubmatic.com snap.licdn.com sync.outbrain.com sync.taboola.com trc.taboola.com ads.yahoo.com ups.analytics.yahoo.com idsync.rlcdn.com ib.adnxs.com x.bidswitch.net rtb-csync.smartadserver.com www.google.ad www.google.ae www.google.com.af www.google.com.ag www.google.al www.google.am www.google.co.ao www.google.com.ar www.google.as www.google.at www.google.com.au www.google.az www.google.ba www.google.com.bd www.google.be www.google.bf www.google.bg www.google.com.bh www.google.bi www.google.bj www.google.com.bn www.google.com.bo www.google.com.br www.google.bs www.google.bt www.google.co.bw www.google.by www.google.com.bz www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.co.ck www.google.cl www.google.cm www.google.cn www.google.com.co www.google.co.cr www.google.com.cu www.google.cv www.google.com.cy www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.com.do www.google.dz www.google.com.ec www.google.ee www.google.com.eg www.google.es www.google.com.et www.google.fi www.google.com.fj www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.com.gh www.google.com.gi www.google.gl www.google.gm www.google.gr www.google.com.gt www.google.gy www.google.com.hk www.google.hn www.google.hr www.google.ht www.google.hu www.google.co.id www.google.ie www.google.co.il www.google.im www.google.co.in www.google.iq www.google.is www.google.it www.google.je www.google.com.jm www.google.jo www.google.co.jp www.google.co.ke www.google.com.kh www.google.ki www.google.kg www.google.co.kr www.google.com.kw www.google.kz www.google.la www.google.com.lb www.google.li www.google.lk www.google.co.ls www.google.lt www.google.lu www.google.lv www.google.com.ly www.google.co.ma www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.com.mm www.google.mn www.google.com.mt www.google.mu www.google.mv www.google.mw www.google.com.mx www.google.com.my www.google.co.mz www.google.com.na www.google.com.ng www.google.com.ni www.google.ne www.google.nl www.google.no www.google.com.np www.google.nr www.google.nu www.google.co.nz www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.pl www.google.pn www.google.com.pr www.google.ps www.google.pt www.google.com.py www.google.com.qa www.google.ro www.google.ru www.google.rw www.google.com.sa www.google.com.sb www.google.sc www.google.se www.google.com.sg www.google.sh www.google.si www.google.sk www.google.com.sl www.google.sn www.google.so www.google.sm www.google.sr www.google.st www.google.com.sv www.google.td www.google.tg www.google.co.th www.google.com.tj www.google.tl www.google.tm www.google.tn www.google.to www.google.com.tr www.google.tt www.google.com.tw www.google.co.tz www.google.com.ua www.google.co.ug www.google.co.uk www.google.com.uy www.google.co.uz www.google.com.vc www.google.co.ve www.google.co.vi www.google.com.vn www.google.vu www.google.ws www.google.rs www.google.co.za www.google.co.zm www.google.co.zw www.google.cat data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.affirm.com *.affirm.ca www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.net *.twitter.com *.googleapis.com *.google.com *.gstatic.com *.avada.io *.shopify.com cdn.routeapp.io https//fonts.googleapis.com https://protect-quote-q.route.com protection-widget.route.com protect-lightning-bolt-widget.route.com d3od5si8vgcekb.cloudfront.net ddbmicszvqxcg.cloudfront.net https://unpkg.com wobs.route.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://www.googletagmanager.com tagmanager.google.com cdnjs.cloudflare.com static.cloudflareinsights.com s.adroll.com d.adroll.com a.adroll.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https//fonts.googleapis.com https://d1cwup7r903a1d.cloudfront.net *.stripe.network *.stripecdn.com *.amazon.com tagmanager.google.com fonts.googleapis.com use.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.affirm.com *.affirm.ca www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io api.route.com https://protect-quote-q.route.com protection-widget.route.com d3od5si8vgcekb.cloudfront.net protect-lightning-bolt-widget.route.com ddbmicszvqxcg.cloudfront.net https://unpkg.com wobs.route.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://www.google-analytics.com cdnjs.cloudflare.com static.cloudflareinsights.com cloudflareinsights.com ad.doubleclick.net stats.g.doubleclick.net region1.analytics.google.com s.adroll.com d.adroll.com a.adroll.com analytics.freespee.com beacon.krxd.net cm.g.doubleclick.net in.treasuredata.com io.narrative.io lex.33across.com ml314.com pixel.tapad.com s-cs.send.microad.jp stags.bluekai.com us-u.openx.net barracuda.com d.adroll.mgr.consensu.org dsum-sec.casalemedia.com eb2.3lift.com p.adsymptotic.com px.ads.linkedin.com px4.ads.linkedin.com pixel.advertising.com pixel.rubiconproject.com image2.pubmatic.com simage2.pubmatic.com snap.licdn.com sync.outbrain.com sync.taboola.com trc.taboola.com ads.yahoo.com ups.analytics.yahoo.com idsync.rlcdn.com ib.adnxs.com x.bidswitch.net rtb-csync.smartadserver.com www.google.com www.google.ad www.google.ae www.google.com.af www.google.com.ag www.google.al www.google.am www.google.co.ao www.google.com.ar www.google.as www.google.at www.google.com.au www.google.az www.google.ba www.google.com.bd www.google.be www.google.bf www.google.bg www.google.com.bh www.google.bi www.google.bj www.google.com.bn www.google.com.bo www.google.com.br www.google.bs www.google.bt www.google.co.bw www.google.by www.google.com.bz www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.co.ck www.google.cl www.google.cm www.google.cn www.google.com.co www.google.co.cr www.google.com.cu www.google.cv www.google.com.cy www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.com.do www.google.dz www.google.com.ec www.google.ee www.google.com.eg www.google.es www.google.com.et www.google.fi www.google.com.fj www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.com.gh www.google.com.gi www.google.gl www.google.gm www.google.gr www.google.com.gt www.google.gy www.google.com.hk www.google.hn www.google.hr www.google.ht www.google.hu www.google.co.id www.google.ie www.google.co.il www.google.im www.google.co.in www.google.iq www.google.is www.google.it www.google.je www.google.com.jm www.google.jo www.google.co.jp www.google.co.ke www.google.com.kh www.google.ki www.google.kg www.google.co.kr www.google.com.kw www.google.kz www.google.la www.google.com.lb www.google.li www.google.lk www.google.co.ls www.google.lt www.google.lu www.google.lv www.google.com.ly www.google.co.ma www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.com.mm www.google.mn www.google.com.mt www.google.mu www.google.mv www.google.mw www.google.com.mx www.google.com.my www.google.co.mz www.google.com.na www.google.com.ng www.google.com.ni www.google.ne www.google.nl www.google.no www.google.com.np www.google.nr www.google.nu www.google.co.nz www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.pl www.google.pn www.google.com.pr www.google.ps www.google.pt www.google.com.py www.google.com.qa www.google.ro www.google.ru www.google.rw www.google.com.sa www.google.com.sb www.google.sc www.google.se www.google.com.sg www.google.sh www.google.si www.google.sk www.google.com.sl www.google.sn www.google.so www.google.sm www.google.sr www.google.st www.google.com.sv www.google.td www.google.tg www.google.co.th www.google.com.tj www.google.tl www.google.tm www.google.tn www.google.to www.google.com.tr www.google.tt www.google.com.tw www.google.co.tz www.google.com.ua www.google.co.ug www.google.co.uk www.google.com.uy www.google.co.uz www.google.com.vc www.google.co.ve www.google.co.vi www.google.com.vn www.google.vu www.google.ws www.google.rs www.google.co.za www.google.co.zm www.google.co.zw www.google.cat 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://checkout.stripe.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://www.youtube.com https://youtube.com https://player.vimeo.com https://www.google.com https://www.googletagmanager.com https://www.tiktok.com; media-src 'self' blob: https:; worker-src 'self' blob:; report-uri /api/csp_report.php 1
font-src pro.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://www.googletagmanager.com/ *.doubleclick.net *.iubenda.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com empressmills-uat.preview3.co.uk *.empressmills.co.uk www.google.co.uk *.google-analytics.com *.googletagmanager.com *.iubenda.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com www.gstatic.com *.googletagmanager.com *.hotjar.com *.iubenda.com empress.local empressmills-uat.preview3.co.uk *.empressmills.co.uk *.convertexperiments.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com empressmills-uat.preview3.co.uk *.empressmills.co.uk pro.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ form-assets.mailchimp.com *.intuit.com *.amazonaws.com googleads.g.doubleclick.net www.google.co.uk *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.hotjar.com wss://*.hotjar.com *.hotjar.io *.iubenda.com *.convertexperiments.com logs.convertexperiments.com *.metrics.convertexperiments.com *.signals.convertexperiments.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://www.googletagmanager.com *.googleapis.com d1b5rpvosb5ex9.cloudfront.net da4ehj3jkwbbp.cloudfront.net *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://sis-t.redsys.es:25443 https://sis.redsys.es *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.tawk.to 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.cookiebot.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.tawk.to 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net d1b5rpvosb5ex9.cloudfront.net da4ehj3jkwbbp.cloudfront.net lupa.com https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.tawk.to cdn.jsdelivr.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com *.cookiebot.com d1b5rpvosb5ex9.cloudfront.net da4ehj3jkwbbp.cloudfront.net *.avada.io *.shopify.com *.alothemes.com *.magepow.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com d1b5rpvosb5ex9.cloudfront.net da4ehj3jkwbbp.cloudfront.net *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com assets.braintreegateway.com *.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.cookiebot.com d1b5rpvosb5ex9.cloudfront.net da4ehj3jkwbbp.cloudfront.net *.lupa.com https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.tawk.to wss://*.tawk.to 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src https://jcibe--c.na149.visual.force.com/ https://www.google-analytics.com/analytics.js 'unsafe-inline' 'self' https://payments.salesforce.com/ https://js.monitor.azure.com https://stats.g.doubleclick.net/ https://stats.g.doubleclick.net https://checkoutshopper-test.adyen.com/ https://pal-test.adyen.com https://maps.googleapis.com https://tags.tiqcdn.com/ https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css https://collect.tealiumiq.com/ https://my.tealiumiq.com/ https://siteintercept.qualtrics.com https://tyco.widen.net https://hvacnavigator.brandmuscle.net/ https://www.gstatic.com https://checkoutshopper-live.adyen.com/ https://cdn.content.aws-prod1-useast1.aws.sfdc.cl/ https://www.selectionnavigator.com/ https://znefnyywi9pon9a8u-jcibuildings.siteintercept.qualtrics.com https://cdn.walkme.com/ https://s3.amazonaws.com https://pay.google.com https://*.trustarc.com https://www.gstatic.com/recaptcha/ https://uip.canary.lwc.dev https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/ https://res.cloudinary.com blob: https://www.google.com/recaptcha/api.js https://www.googletagmanager.com/gtag/js https://www.google.com/recaptcha/ https://js.stripe.com/ https://siteintercept.qualtrics.com/dxjsmodule/PolyfillsModule.js https://*.qualtrics.com import: https://tags.tiqcdn.com/utag/jci/solutionnavigator/prod/utag.js https://www.google-analytics.com *.salesforce.com https://www.paypal.com/sdk/js https://developers.google.com/ 'report-sample' https://service.force.com/embeddedservice/ 'unsafe-eval'; report-to sfdc-csp-ep; report-uri https://jcibe.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00DG0000000hBll&networkId=0DM4w000000GsE3&type=communities 1
font-src *.googleapis.com *.gstatic.com data: https://applepay.cdn-apple.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com *.payplug.com *.dalenys.com https://applepay.cdn-apple.com maps.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.gstatic.com *.googleapis.com a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org res.cloudinary.com images.join-stories.com https://www.magezon.com https://secure-magenta.dalenys.com *.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ cdn.payplug.com static.splio.pro dessange.my.join-stories.com https://secure-magenta.dalenys.com https://applepay.cdn-apple.com api-qa.payplug.com cdn-qa.payplug.com api.payplug.com https://browser.sentry-cdn.com *.googletagmanager.com *.facebook.net *.avada.io maps.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cloudflare.com https://www.googletagmanager.com tagmanager.google.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com static.splio.pro https://secure-magenta.dalenys.com *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com sdk-sdk-backend.apigw.splio.pro meas.join-stories.com https://*.ingest.sentry.io *.google-analytics.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.facebook.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com maxcdn.bootstrapcdn.com data: use.fontawesome.com static-dev.srag.cahosting.de static-dev.srag.codel1.de tmpsativa-static.codel1.de cdn.live.srag.cahosting.de cdn.dev.srag.cahosting.de cdn.dev.srag.codel1.de cdn.staging.srag.cahosting.de srag.dev.saatec.local *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com seu2.cleverreach.com test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com/ www.googletagmanager.com piwik.sativa-biosaatgut.de www.google.com app-wallee.com td.doubleclick.net test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com magefan.com cm.magefan.com https://www.magezon.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com static-dev.srag.cahosting.de static-dev.srag.codel1.de widgets.trustedshops.com www.google.de piwik.sativa-biosaatgut.de tmpsativa-static.codel1.de cdn.live.srag.cahosting.de cdn.dev.srag.cahosting.de cdn.dev.srag.codel1.de cdn.staging.srag.cahosting.de files.mirasvit.com www.magecomp.com srag.dev.saatec.local www.sativa.bio cdn.magmodules.eu flagpedia.net test.saferpay.com www.saferpay.com saferpay.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.google.com/ connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.contentsquare.net analytics.sativa.bio www.google.com www.gstatic.com use.fontawesome.com static-dev.srag.cahosting.de static-dev.srag.codel1.de tmpsativa-static.codel1.de cdn.live.srag.cahosting.de cdn.dev.srag.cahosting.de cdn.dev.srag.codel1.de cdn.staging.srag.cahosting.de static-staging.srag.cahosting.de widgets.trustedshops.com consent.cookiefirst.com browser-update.org piwik.sativa-biosaatgut.de app-wallee.com srag.dev.saatec.local *.gstatic.com maps.googleapis.com test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com maxcdn.bootstrapcdn.com www.googletagmanager.com *.contentsquare.net use.fontawesome.com static-dev.srag.cahosting.de static-dev.srag.codel1.de cloud.typography.com consent.cookiefirst.com sativa.bio www.sativa.bio tmpsativa-static.codel1.de cdn.live.srag.cahosting.de cdn.dev.srag.cahosting.de cdn.dev.srag.codel1.de cdn.staging.srag.cahosting.de srag.dev.saatec.local *.fontawesome.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net googleads.g.doubleclick.net *.contentsquare.net analytics.sativa.bio static-dev.srag.cahosting.de static-dev.srag.codel1.de static.cookiefirst.com edge.cookiefirst.com consent.cookiefirst.com api.cookiefirst.com tmpsativa-static.codel1.de cdn.live.srag.cahosting.de cdn.dev.srag.cahosting.de cdn.dev.srag.codel1.de cdn.staging.srag.cahosting.de pagead2.googlesyndication.com www.google.de www.google.com www.gstatic.com maps.googleapis.com test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://api-lara.sativa.bio/api/csp/report/frontend; report-to report-endpoint; 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; media-src 'self' https: blob:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self' https://*.altezzatravel.com https://altezza.travel https://*.altezza.travel; upgrade-insecure-requests; report-uri https://altezza.report-uri.com/r/d/csp/reportOnly 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.salesfire.co.uk *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.sagepay.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.salesfire.co.uk *.sagepay.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.pinterest.com *.pinterdev.com commerce-app.pintergration.com *.trustpilot.com www.xtento.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io flagpedia.net *.salesfire.co.uk https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com https://www.magezon.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com www.xtento.com cdn.xtento.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.gstatic.com maps.googleapis.com *.salesfire.co.uk https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ s7.addthis.com *.sagepay.com *.avada.io *.shopify.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com *.trustpilot.com www.xtento.com cdn.xtento.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.gstatic.com *.salesfire.co.uk *.typekit.net https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.trustpilot.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.gstatic.com maps.googleapis.com *.salesfire.co.uk *.smartmetrics.co.uk https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ ekr.zdassets.com/ *.sagepay.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; object-src 'none'; 1
font-src www.paypalobjects.com cash-f.squarecdn.com fonts.googleapis.com fonts.gstatic.com *.googleapis.com *.gstatic.com data: maxcdn.bootstrapcdn.com *.cloudflare.com *.cdnfonts.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com/ *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/ * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com https://www.googletagmanager.com/ https://googleads.g.doubleclick.net https://bid.g.doubleclick.net https://td.doubleclick.net/ https://www.google.com.ua/ https://www.google.bg/ https://ct.pinterest.com/ https://*.jam.dev 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://banners.helloretailcdn.com * maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://images.unsplash.com imgsct.cookiebot.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com *.disqus.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.cookiebot.com *.bing.com https://www.google.com.ua/ https://www.google.bg/ https://www.google.dk/ *.clarity.ms https://googleads.g.doubleclick.net *.googleadservices.com https://bid.g.doubleclick.net *.klarnacdn.net *.pinterest.com/ *.cloudinary.com/ https://www.googletagmanager.com/ https://app.usercentrics.eu/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://core.helloretail.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com *.facebook.net connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ consent.cookiebot.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.disqus.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://cdn.jsdelivr.net *.pinterest.com *.cookiebot.com *.cookieinformation.com *.heylink.com *.hotjar.com gtm.adt313.net *.bing.com https://static.cloudflareinsights.com/ bam.eu01.nr-data.net https://www.google.com https://googleads.g.doubleclick.net https://www.google.com.ua/ https://www.google.bg/ *.clarity.ms *.klarnacdn.net https://s.pinimg.com https://apis.google.com/ https://cdn.matomo.cloud/ https://widgets.trustedshops.com/ *.usercentrics.eu/ *.userlink.ai https://*.jam.dev 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com *.cash.app fonts.googleapis.com maxcdn.bootstrapcdn.com https://static.klaviyo.com https://cdn.jsdelivr.net *.cloudflare.com *.googleapis.com *.cdnfonts.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://core.helloretail.com https://helloretailcdn.com * maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com https://player.vimeo.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ places.googleapis.com *.cookiebot.com bam.eu01.nr-data.net *.clarity.ms eu.playground.klarnaevt.com *.adt611.com *.pinterest.com/ https://www.google.com https://googleads.g.doubleclick.net https://bat.bing.com/ *.analytics.google.com/ https://api.usercentrics.eu/ https://pagead2.googlesyndication.com/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'unsafe-inline' data: *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://seo.mageplaza.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.multisafepay.com https://pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.cookiebot.com *.facebook.com/ 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://firebasestorage.googleapis.com *.multisafepay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'unsafe-inline' data: *.google.com *.google.pt *.facebook.com *.googleapis.com *.juicer.io *.twitter.com https://t.co *.googletagmanager.com *.plytix.com *.google.co.in *.snapchat.com *.tawk.to data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.disqus.com *.avada.io *.shopify.com *.multisafepay.com https://pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.googletagmanager.com *.trackedweb.net *.cookiebot.com *.googleapis.com *.google-analytics.com *.juicer.io *.ads-twitter.com *.facebook.net cookiehub.net *.googleoptimize.com *.doubleclick.net *.cookiehub.eu sc-static.net *.tiktok.com *.snapchat.com *.jsdelivr.net *.tawk.to 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net *.multisafepay.com assets.braintreegateway.com *.googleapis.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com cookiehub.net *.cookiehub.eu www.kgspt.com:7291 www.kgspt.com: *.tawk.to 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.vimeo.com *.akamaized.net *.plytix.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://get.geojs.io *.avada.io *.multisafepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.google.com/ *.doubleclick.net *.cookiebot.com *.googleapis.com consent.cookiehub.net *.tiktok.com *.snapchat.com *.tawk.to 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://use.typekit.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.typekit.net; font-src 'self' data: https://fonts.gstatic.com https://use.typekit.net; img-src 'self' data: blob: https://cdn.thoth.pub https://openbookcollective.org https://books.punctumbooks.com; connect-src 'self' https://api.thoth.pub https://*.algolia.net https://*.algolianet.com https://*.algolia.io https://metrics-api.operas-eu.org; frame-ancestors 'none'; base-uri 'self'; object-src 'none'; form-action 'self' 1
default-src ajax.googleapis.com *.ajax.googleapis.com appsflyer.com *.appsflyer.com appsflyersdk.com *.appsflyersdk.com bootstrapcdn.com *.bootstrapcdn.com clarity.ms *.clarity.ms cloudflare.com *.cloudflare.com cloudflareinsights.com *.cloudflareinsights.com custom-subdomain.s3.amazonaws.com *.custom-subdomain.s3.amazonaws.com datatables.net *.datatables.net de2aqb3kqoyo2.cloudfront.net *.de2aqb3kqoyo2.cloudfront.net doubleclick.net *.doubleclick.net facebook.net *.facebook.net firebaseinstallations.googleapis.com *.firebaseinstallations.googleapis.com firebaseremoteconfig.googleapis.com *.firebaseremoteconfig.googleapis.com freshchat.com *.freshchat.com freshdesk.com *.freshdesk.com google-analytics.com *.google-analytics.com google.cl *.google.cl google.com *.google.com googleadservices.com *.googleadservices.com googletagmanager.com *.googletagmanager.com gstatic.com *.gstatic.com jquery.com *.jquery.com jsdelivr.net *.jsdelivr.net licdn.com *.licdn.com linkedin.com *.linkedin.com lottiefiles.com *.lottiefiles.com maps.googleapis.com *.maps.googleapis.com prexcard.com *.prexcard.com s3.amazonaws.com *.s3.amazonaws.com s3.us-east-1.amazonaws.com *.s3.us-east-1.amazonaws.com tiktok.com *.tiktok.com unpkg.com *.unpkg.com youtube.com *.youtube.com; upgrade-insecure-requests; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=.ZQRa7i.bC2_HyTTecN74sC7S7_ZaQEuxOEBZmxmIpo-1789265997.2767835-1.0.1.1-cCyxaMBbaCtyhNhmRgXsD2UxlvoTyzyR9pVmSx5bkM5FWTLzw_PZe_8.ykYVhrrWMqtrykQC29rLw5hAWZInZUbVy533tRoclX3ammgbUnMu80JqF75ueUWtBqokl6jRKIpVAhw5wixUvPIFxGTdda9JntTvssCGP9rpTAZbFd1LCL81hzBpm0XFTZNlIXlc4ZRDvpEnLC0cO_PHHsNZbQ; report-to cf-uurjnqflgibkoquh 1
object-src 'none'; script-src 'nonce-e019495c8dcd226705199f6eb72413f010f909f7' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https:; base-uri 'none'; report-uri https://proviso.report-uri.com/r/default/csp/reportOnly 1
object-src  'none'; connect-src 'self' *.transfixed.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.transfixed.com join.gammasecure.com; script-src 'self' *.transfixed.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.transfixed.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
font-src maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com https://use.typekit.net https://kit-pro.fontawesome.com/ *.fontawesome.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com quickchart.io img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://ssl.ditonlinebetalingssystem.dk *.googletagmanager.com *.googleadservices.com *.google-analytics.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com https://kit.fontawesome.com www.gstatic.com *.googleapis.com *.fontawesome.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com assets.braintreegateway.com https://p.typekit.net https://use.typekit.net https://kit-pro.fontawesome.com/ *.googleapis.com *.fontawesome.com *.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.fontawesome.com fonts.googleapis.com 'self' data: https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ 'self' data: static.klaviyo.com https://cdn.icomoon.io data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.reviews.io *.reviews.co.uk *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.reviews.io 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.reviews.io *.reviews.co.uk magento-cloudflare.jetrails.com https://app-wallee.com *.criteo.com *.facebook.com ct.pinterest.com int.post.ch www.post.ch/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.ytimg.com https://app-wallee.com magefan.com cm.magefan.com *.disqus.com *.360yield.com *.3lift.com *.adform.net *.adnxs.com *.angela-bruderer.ch angela-bruderer.ch *.bidswitch.net *.casalemedia.com *.criteo.com *.doubleclick.net *.facebook.com *.google.de *.id5-sync.com id5-sync.com *.ivitrack.com *.krxd.net *.media.net *.mediavine.com *.omnitagjs.com *.outbrain.com *.praktikus.ch *.pubmatic.com *.rubiconproject.com *.sharethrough.com *.smartadserver.com *.smartclip.net *.taboola.com *.tdintern.de *.teads.tv *.thebrighttag.com *.tremorhub.com *.twiago.com *.yahoo.com *.yieldlab.net *.yieldmo.com *.usercentrics.eu *.cloudflareaccess.com *.emxdgt.com *.1rx.io *.unrulymedia.com wheelioapp.azureedge.net *.wheelio-app.com dealioappstorage.blob.core.windows.net *.searchhub.io *.hsforms.net *.hsforms.com 'self' data: bat.bing.com ct.pinterest.com *.google.ch d3k81ch9hvuctc.cloudfront.net https://trck.spoteffects.net https://dev.visualwebsiteoptimizer.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.reviews.io *.reviews.co.uk *.luware.cloud https://app-wallee.com https://gmtech.mfgroup.ch https://assets.secure.checkout.visa.com *.disqus.com *.cloudflareinsights.com *.criteo.com *.datareporter.eu *.getback.ch *.getsitecontrol.com *.usersnap.com analytics.maileon.com *.usercentrics.eu *.visualwebsiteoptimizer.com wheelioapp.azureedge.net *.wheelio-app.com wheeliofuncstats.azurewebsites.net *.cloudflare.com *.profity.ch *.neocomapp.com *.kameleoon.io *.clarity.ms *.searchhub.io *.tawk.to *.hsforms.net *.hsforms.com *.gstatic.com *.plugins.emarsys.net *.scarabresearch.com connect.facebook.net *.usernap.com s.pinimg.com bat.bing.com static.profity.ch/ static.klaviyo.com https://static-tracking.klaviyo.com https://analytics.maileon.com angela-bruderer-ag.onlyfy.jobs gtm.adt313.net https://trck.spoteffects.net https://ajax.cloudflare.com https://apis.google.com/js/api.js https://production.neocomapp.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.luware.cloud https://app-wallee.com *.fontawesome.com 'self' 'unsafe-inline' data: *.datareporter.eu wheelioapp.azureedge.net *.wheelio-app.com *.klaviyo.com *.googleapis.com *.gstatic.com static.getback.ch static-tracking.klaviyo.com https://cdn.icomoon.io 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src *.cloudflareaccess.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.cloudfront.net *.reviews.io *.reviews.co.uk *.luware.cloud *.service.signalr.net https://app-wallee.com https://assets.secure.checkout.visa.com *.criteo.com *.datareporter.eu *.doubleclick.net *.getsitecontrol.com *.google.de *.bing.com *.getback.ch analytics.maileon.com *.googlesyndication.com *.usercentrics.eu *.visualwebsiteoptimizer.com *.neocomapp.com *.klaviyo.com *.kameleoon.io *.clarity.ms t.elasticsuite.io *.hsforms.net *.hsforms.com *.scarabresearch.com *.eservice.emarsys.net region1.analytics.google.com ct.pinterest.com events.getsitectrl.com https://fast.a.klaviyo.com https://static-forms.klaviyo.com https://a.klaviyo.com https://insights.algolia.io *.facebook.com https://dev.visualwebsiteoptimizer.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.luware.cloud *.adobe.com *.angela-bruderer.ch *.cloudflareaccess.com *.cloudflareinsights.com *.datareporter.eu *.facebook.com *.mediavine.com *.newrelic.com *.nr-data.net *.omnitagjs.com *.praktikus.ch *.tdintern.de *.tremorhub.com *.yieldlab.net *.googleapis.com *.getback.ch 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-P3QsVXhBwrS38pi6RyfwxQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.doubleclick.net *.yotpo.com *.hotjar.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://seo.mageplaza.com *.twitter.com *.doubleclick.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.twitter.com *.doubleclick.net *.google.co.uk *.livechatinc.com/ *.hotjar.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://firebasestorage.googleapis.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.co.uk *.google.com *.doubleclick.net *.facebook.com *.pinterest.com *.afterpay.com *.placeholder.com *.googleapis.com *.virtualearth.net https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: maps.gstatic.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.avada.io *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.googletagmanager.com *.doubleclick.net *.pinimg.com *.facebook.net *.livechatinc.com *.pinterest.com *.afterpay.com *.clearpay.co.uk *.hotjar.com *.hotjar.io *.adobedtm.com *.adobe.com 'self' *.chimpstatic.com *.hiss3lark.com *.bing.com *.virtualearth.net js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com downloads.mailchimp.com *.fontawesome.com https://fonts.bunny.net *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.doubleclick.net *.bing.com maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://get.geojs.io *.avada.io *.cloudflare.com *.twitter.com *.twimg.com *.doubleclick.net *.google-analytics.com *.googleapis.com *.bing.com *.hotjar.com/ *.hotjar.io wss://ws.hotjar.com *.facebook.com *.googlesyndication.com *.pinterest.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com maps.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'self' 'unsafe-inline'; report-uri https://56075270-e9e4-4979-9bc4-bf51506e2229.sansec.watch/; report-to report-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-x-DiH_c_bvErR1ApJNclmA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'sha256-r5If6CtH0LDn6x91YMqJMY1B9gRStoWmTlJJafijLNQ=' 'self' 'self' https://collect.impressiondigital.com https://bat.bing.com https://ads-twitter.com https://static.ads-twitter.com https://doubleclick.net https://cdn-cookieyes.com https://connect.facebook.net https://posthog.com https://eu.posthog.com https://eu-assets.i.posthog.com https://www.youtube-nocookie.com https://clarity.ms https://y.clarity.ms https://snap.licdn.com https://hsforms.net https://hs-analytics.net https://hs-banner.com https://js-eu1.hs-banner.com https://hs-scripts.com https://js-eu1.hs-scripts.com https://js-eu1.hubspot.com https://usemessages.com https://js-eu1.hs-analytics.net https://js-eu1.hsforms.net https://o377590.ingest.sentry.io https://forms-eu1.hsforms.com https://www.googleadservices.com https://www.google.co.uk https://px.ads.linkedin.com https://*.typekit.net https://t.co https://www.facebook.com https://*.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net; script-src-elem 'self' https://www.youtube.com https://*.clarity.ms https://gateway.impressiondigital.com https://collect.impressiondigital.com https://www.gstatic.com https://js-eu1.hs-banner.com https://cdn-cookieyes.com https://js-eu1.hs-scripts.com https://bat.bing.com https://snap.licdn.com https://static.ads-twitter.com https://eu.posthog.com https://eu-assets.i.posthog.com https://js-eu1.hsforms.net https://js-eu1.hubspot.com https://js-eu1.hs-analytics.net; style-src 'self' https://cdn-cookieyes.com https://fonts.googleapis.com https://*.typekit.net https://www.gstatic.com https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com; img-src 'self' https://bat.bing.com https://ads-twitter.com https://doubleclick.net https://ad.doubleclick.net https://connect.facebook.net https://posthog.com https://clarity.ms https://*.clarity.ms https://snap.licdn.com https://px.ads.linkedin.com https://t.co https://www.facebook.com https://images.impression.co.uk https://track-eu1.hubspot.com https://perf-eu1.hsforms.com https://forms-eu1.hsforms.com https://www.glassdoor.co.uk https://adservice.google.com https://cdn-cookieyes.com https://analytics.twitter.com https://px4.ads.linkedin.com https://region1.analytics.google.com https://i.ytimg.com https://stape.io https://collect.impressiondigital.com https://cdn.impression.co.uk https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.co.uk https://googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://google.com https://gateway.impressiondigital.com https://px.ads.linkedin.com; connect-src 'self' https://o377590.ingest.sentry.io https://www.google-analytics.com https://www.google.co.uk https://clarity.ms https://posthog.com https://eu.posthog.com https://hs-analytics.net https://js-eu1.hs-analytics.net https://usemessages.com https://collect.impressiondigital.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://www.youtube.com https://accounts.google.com https://cta-eu1.hubspot.com https://forms-eu1.hsforms.com https://pagead2.googlesyndication.com https://staging.admin.impressiondigital.com https://admin.impressiondigital.com https://api.teamtailor.com https://eu.i.posthog.com https://log.cookieyes.com https://directory.cookieyes.com https://cdn-cookieyes.com https://px.ads.linkedin.com https://www.googleadservices.com https://bat.bing.com https://bat.bing.net https://sitemap-tool.impression.co.uk https://gateway.impressiondigital.com https://*.clarity.ms https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.co.uk https://pagead2.googlesyndication.com https://google.com https://eu-assets.i.posthog.com; font-src 'self' https://fonts.gstatic.com https://*.typekit.net; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://forms-eu1.hsforms.com https://hsforms.net https://collect.impressiondigital.com https://www.googletagmanager.com https://consent.cookieyes.com; media-src 'self' https://www.youtube.com https://www.youtube-nocookie.com; object-src 'none'; base-uri 'none'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests ; require-trusted-types-for 'script'; report-uri https://report.centralcsp.com/68b831ea648355d9060a0089 1
font-src www.paypalobjects.com fonts.googleapis.com fonts.gstatic.com *.googleapis.com *.gstatic.com data: maxcdn.bootstrapcdn.com *.klarnacdn.net https://fonts.gstatic.com designpanels.de data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com *.facebook.com *.facebook.net designpanels.de 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com designpanels.de 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.klarna.com https://plumrocket.com sst.stickerprofis.de *.facebook.com *.facebook.net js.mollie.com *.weltpixel.com www.xtento.com designpanels.de *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.klarna.com *.klarnaevt.com *.klarnacdn.net magefan.com cm.magefan.com *.facebook.com *.facebook.net mageside.com https://www.mollie.com www.xtento.com cdn.xtento.com designpanels.de *.googletagmanager.com *.doubleclick.net *.google.com *.bing.net www.google.al www.google.at www.google.ba www.google.be www.google.bg www.google.by www.google.ca www.google.ch www.google.co.in www.google.co.jp www.google.co.ke www.google.com.af www.google.com.br www.google.com.cy www.google.com.eg www.google.com.gh www.google.com.hk www.google.com.my www.google.com.na www.google.com.ph www.google.com.pk www.google.com.tr www.google.com.ua www.google.com.vn www.google.co.th www.google.co.uk www.google.co.ve www.google.cz www.google.de www.google.dk www.google.dz www.google.es www.google.fr www.google.gr www.google.hr www.google.hu www.google.ie www.google.is www.google.it www.google.lt www.google.lu www.google.md www.google.mk www.google.mu www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk google.com *.googlesyndication.com *.gravatar.com *.usercentrics.eu data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.klarna.com *.klarnacdn.net x.klarnacdn.net https://www.stickerprofis.de/static/version\d+/frontend/Stickerprofis/hyva/de_DE/Magewirephp_Magewire/js/node_initializer.js https://www.stickerprofis.de/static/version\d+/frontend/Stickerprofis/hyva/en_US/Magewirephp_Magewire/js/node_initializer.js 'unsafe-eval' *.cmp.usercentrics.eu v1.api.service.cmp.usercentrics.eu sst.stickerprofis.de *.klarnaservices.com *.facebook.com *.facebook.net js.mollie.com https://www.gstatic.com www.xtento.com cdn.xtento.com designpanels.de *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.instagram.com *.pinimg.com *.pinterest.com *.usercentrics.eu 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com maxcdn.bootstrapcdn.com *.klarnacdn.net https://fonts.googleapis.com designpanels.de *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com designpanels.de 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net sst.stickerprofis.de *.klarnaservices.com *.klarna.com *.facebook.com *.facebook.net designpanels.de *.doubleclick.net *.bing.net *.googlesyndication.com *.pinterest.com *.usercentrics.eu 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com designpanels.de http: https: blob: 'self' 'unsafe-inline'; default-src designpanels.de 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://7d7f86a8-e3b1-47bc-9551-6de5b0b032ab.sansec.watch/; report-to report-endpoint; 1
default-src 'self' pure.okta.com *.oktacdn.com; connect-src 'self' pure.okta.com pure-admin.okta.com *.oktacdn.com *.mixpanel.com *.mapbox.com pure.kerberos.okta.com pure.mtls.okta.com *.authenticatorlocalprod.com:8769 http://localhost:8769 http://127.0.0.1:8769 *.authenticatorlocalprod.com:65111 http://localhost:65111 http://127.0.0.1:65111 *.authenticatorlocalprod.com:65121 http://localhost:65121 http://127.0.0.1:65121 *.authenticatorlocalprod.com:65131 http://localhost:65131 http://127.0.0.1:65131 *.authenticatorlocalprod.com:65141 http://localhost:65141 http://127.0.0.1:65141 *.authenticatorlocalprod.com:65151 http://localhost:65151 http://127.0.0.1:65151 https://oinmanager.okta.com data: sso.purehnw.com sso.pureinsurance.com *.ingest.sentry.io; script-src 'unsafe-inline' 'nonce-bpY-jLRWVPLO2QkUV50TEQ' 'self' 'report-sample' pure.okta.com *.oktacdn.com; style-src 'unsafe-inline' 'nonce-bpY-jLRWVPLO2QkUV50TEQ' 'self' 'report-sample' pure.okta.com *.oktacdn.com; frame-src 'self' pure.okta.com pure-admin.okta.com login.okta.com *.vidyard.com com-okta-authenticator:; img-src 'self' pure.okta.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: blob:; font-src 'self' pure.okta.com data: *.oktacdn.com fonts.gstatic.com; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://kit.fontawesome.com https://www.googletagmanager.com https://connect.facebook.net https://cdnjs.cloudflare.com https://unpkg.com https://static.elfsight.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://kit.fontawesome.com https://unpkg.com https://fonts.googleapis.com; img-src 'self' data: blob: https: https://www.facebook.com https://www.google.com https://www.gstatic.com; font-src 'self' data: https://kit.fontawesome.com https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://www.facebook.com https://static.elfsight.com wss:; frame-src 'self' https://www.google.com https://www.recaptcha.net https://static.elfsight.com https://www.youtube.com https://www.youtube-nocookie.com https://api.stockdio.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://connect.facebook.net https://www.facebook.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://*.googlesyndication.com https://tpc.googlesyndication.com https://www.google.com https://adservice.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://*.googlesyndication.com https://tpc.googlesyndication.com https://www.google.com https://adservice.google.com https://www.gstatic.com https://ssl.gstatic.com https://connect.facebook.net https://www.facebook.com https://web-sdk.smartlook.com https://*.smartlook.com wss://*.smartlook.com https://www.smartsuppchat.com https://*.smartsupp.com wss://*.smartsupp.com https://js.sentry-cdn.com https://browser.sentry-cdn.com https://*.ingest.sentry.io https://widget.getyourguide.com https://*.getyourguide.com https://cdn.onesignal.com https://*.onesignal.com https://onesignal.com https://jnpgroup.cz https://c.imedia.cz https://www.seznam.cz; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://*.googlesyndication.com https://tpc.googlesyndication.com https://www.google.com https://adservice.google.com https://www.gstatic.com https://ssl.gstatic.com https://connect.facebook.net https://www.facebook.com https://web-sdk.smartlook.com https://*.smartlook.com wss://*.smartlook.com https://www.smartsuppchat.com https://*.smartsupp.com wss://*.smartsupp.com https://js.sentry-cdn.com https://browser.sentry-cdn.com https://*.ingest.sentry.io https://widget.getyourguide.com https://*.getyourguide.com https://cdn.onesignal.com https://*.onesignal.com https://onesignal.com https://jnpgroup.cz https://c.imedia.cz https://www.seznam.cz; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://ssl.gstatic.com https://widget.getyourguide.com https://*.getyourguide.com; img-src 'self' data: blob: https:; font-src 'self' data: https://www.gstatic.com https://ssl.gstatic.com; connect-src 'self' https://backend.levnocestovani.cz https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://*.googlesyndication.com https://tpc.googlesyndication.com https://www.google.com https://adservice.google.com https://www.gstatic.com https://ssl.gstatic.com https://connect.facebook.net https://www.facebook.com https://web-sdk.smartlook.com https://*.smartlook.com wss://*.smartlook.com https://www.smartsuppchat.com https://*.smartsupp.com wss://*.smartsupp.com https://js.sentry-cdn.com https://browser.sentry-cdn.com https://*.ingest.sentry.io https://widget.getyourguide.com https://*.getyourguide.com https://cdn.onesignal.com https://*.onesignal.com https://onesignal.com https://c.imedia.cz https://www.seznam.cz; frame-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://*.googlesyndication.com https://tpc.googlesyndication.com https://www.google.com https://adservice.google.com https://td.doubleclick.net https://connect.facebook.net https://www.facebook.com https://www.smartsuppchat.com https://*.smartsupp.com wss://*.smartsupp.com https://widget.getyourguide.com https://*.getyourguide.com https://cdn.onesignal.com https://*.onesignal.com https://onesignal.com https://jnpgroup.cz; worker-src 'self' blob:; media-src 'self' data: blob: https:; manifest-src 'self'; upgrade-insecure-requests 1
object-src 'none';base-uri 'self';script-src 'nonce-7JTZ_sEptsWkhtoqyDrDCg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://www.googletagmanager.com *.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com searchserverapi.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.google.com searchserverapi.com *.facebook.com https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors https://api.clerk.io https://cdn.clerk.io *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.youtube.com/ https://scontent-ams4-1.cdninstagram.com js.mollie.com *.multisafepay.com https://pay.google.com https://plumrocket.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com https://cdn.clerk.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com https://clauem2.arrowtheme.com https://scontent-ams4-1.cdninstagram.com widgets.trustedshops.com *.etrusted.com searchserverapi.com *.facebook.com *.google.nl *.bing.com *.clarity.ms imgsct.cookiebot.com *.klaviyo.com https://www.mollie.com *.multisafepay.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com tagmanager.google.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com https://api.clerk.io https://cdn.clerk.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.maps.googleapis.com *.trackedlink.net *.maps.gstatic.com maps.googleapis.com *.googletagmanager.com *.googleadservices.com https://scontent-ams4-1.cdninstagram.com widgets.trustedshops.com searchserverapi.com cdn.amplitude.com google.nl *.facebook.net *.bing.com *.clarity.ms consent.cookiebot.com s.pinimg.com *.clerk.io *.klaviyo.com sst.kayori.nl js.mollie.com *.avada.io *.multisafepay.com https://pay.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://api.clerk.io https://cdn.clerk.io https://static.klaviyo.com *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com *.google-analytics.com widgets.trustedshops.com *.etrusted.com searchserverapi.com *.klaviyo.com *.multisafepay.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.cloudflare.com *.twitter.com *.twimg.com *.googleadservices.com *.google-analytics.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org *.google.co.in *.maps.gstatic.com *.maps.googleapis.com maps.googleapis.com https://scontent-ams4-1.cdninstagram.com searchserverapi.com *.doubleclick.net *.googlesyndication.com *.facebook.com *.clarity.ms ct.pinterest.com *.klaviyo.com https://get.geojs.io *.avada.io *.multisafepay.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://js.basistheory.com https://applepay.cdn-apple.com https://m.stripe.network https://pay.google.com https://maps.googleapis.com https://public.reduxpayments.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://apis.google.com https://static.cloudflareinsights.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://www.facebook.com https://analytics.tiktok.com https://*.tiktokw.us https://s.axon.ai https://res4.applovin.com https://*.applovin.com https://www.m8trq9trk.com https://track.claimmoney.com https://embeddables.p.mbirdcdn.net https://*.clarity.ms https://*.sc-static.net https://sc-static.net https://tr.snapchat.com https://*.bird.com https://us-assets.i.posthog.com https://cdn.mxpnl.com https://utt.impactcdn.com https://invitejs.trustpilot.com https://api.trustedform.com https://create.lidstatic.com; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; frame-src 'self' https://js.stripe.com https://js.basistheory.com https://elements.basistheory.com https://applepay.cdn-apple.com https://pay.apple.com https://hooks.stripe.com https://m.stripe.network https://pay.google.com https://www.google.com https://accounts.google.com https://appleid.apple.com https://*.firebaseapp.com https://*.bird.com https://www.googletagmanager.com https://td.doubleclick.net https://googleads.g.doubleclick.net https://www.facebook.com https://tr.snapchat.com; worker-src 'self' blob:; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com; upgrade-insecure-requests; report-uri https://api.claimmoney.com/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://bat.bing.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://static.elfsight.com https://*.elfsightcdn.com https://static-spm.com https://protect.almapay.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://*.doubleclick.net https://connect.facebook.net https://js.stripe.com https://js.mollie.com https://tss.bestmobilier.com https://eu1-config.doofinder.com https://cdn.doofinder.com https://app-spm.com https://*.clarity.ms https://cdn.jsdelivr.net https://widgets.rr.skeepers.io https://consent.cookiebot.com https://consentcdn.cookiebot.com https://bestmobilier.my.join-stories.com https://analytics.tiktok.com https://mssdk-i18n.tiktok.com https://skallup-storage.fra1.digitaloceanspaces.com https://s.pinimg.com https://bzrcdn.openai.com https://apis.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://stackpath.bootstrapcdn.com https://media.shopimind.io https://app-spm.com https://cdn.doofinder.com; font-src 'self' data: https://fonts.gstatic.com https://stackpath.bootstrapcdn.com https://media.shopimind.io https://cdn.almapay.com; img-src 'self' data: blob: https:; media-src 'self' data: blob: https://skallup-storage.fra1.cdn.digitaloceanspaces.com https://skallup-storage.fra1.digitaloceanspaces.com https://playshorts-cdn.com; connect-src 'self' https://bat.bing.com https://bat.bing.net https://cdn.doofinder.com https://media.shopimind.io https://google.com https://cdn.jsdelivr.net https://fonts.googleapis.com https://*.elfsight.com https://*.elfsightcdn.com https://protect.almapay.com https://static-spm.com https://connect.facebook.net https://www.google-analytics.com https://*.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://www.googletagmanager.com https://www.googleadservices.com https://www.google.com https://www.google.fr https://www.google.be https://www.google.lu https://www.google.ch https://www.google.de https://www.google.es https://www.google.it https://www.google.nl https://www.google.pt https://www.google.at https://www.google.ie https://www.google.co.uk https://*.doubleclick.net https://*.skeepers.io https://*.rr.skeepers.io https://*.join-stories.com https://eu1-api.doofinder.com https://eu1-search.doofinder.com https://app-spm.com https://pagead2.googlesyndication.com https://tss.bestmobilier.com https://api.getalma.eu https://consent.cookiebot.com https://consentcdn.cookiebot.com https://*.clarity.ms https://c.bing.com https://ct.pinterest.com https://www.facebook.com wss://eu1-layer.doofinder.com https://analytics.tiktok.com https://mssdk-i18n.tiktok.com https://*.tiktokw.us https://api.playshorts.io https://integration.playshorts.io https://bzrcdn.openai.com https://bzr.openai.com https://apis.google.com; frame-src 'self' https://maps.google.com https://protect.almapay.com https://js.stripe.com https://js.mollie.com https://www.google.com/recaptcha/ https://www.google.com/shopping/ https://checkout.getalma.eu https://www.youtube.com https://player.vimeo.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://widgets.rr.skeepers.io https://bestmobilier.my.join-stories.com https://tss.bestmobilier.com https://*.doubleclick.net https://v.calameo.com; object-src data:; base-uri 'self'; form-action 'self' https://*.mollie.com https://*.getalma.eu; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://geowidget.easypack24.net *.inpost.pl https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com sandbox.przelewy24.pl secure.przelewy24.pl *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.awin1.com *.zenaps.com https://td.doubleclick.net secure.payu.com merch-prod.snd.payu.com pay.google.com apm.przelewy24.pl https://static.addtoany.com https://pudofinder.dpd.com.pl *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://ct.pinterest.com https://consentcdn.cookiebot.com/ https://consent.cookiebot.com https://smart-widget-assets.ekomiapps.de https://geowidget-app.inpost.pl/ https://sandbox-easy-geowidget.easypack24.net/ *.inpost.pl c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.awin1.com *.zenaps.com *.wepowerconnections.com *.hsforms.net *.hsforms.com static.payu.com magefan.com cm.magefan.com *.disqus.com static.przelewy24.pl www.gstatic.com gstatic.com https://widget-v2.smartsuppcdn.com https://files.smartsuppcdn.com https://files.smartsupp.com https://twemoji.maxcdn.com https://www.google.com https://www.google.pl https://googleads.g.doubleclick.net https://ruch-osm.sysadvisors.pl https://geowidget.easypack24.net *.openstreetmap.org https://c.clarity.ms https://pixel.wp.pl https://lantern.roeye.com https://smart-widget-assets.ekomiapps.de https://sw-assets.ekomiapps.de https://ekomi-srr.s3.eu-central-1.amazonaws.com https://zaufane.pl https://imgsct.cookiebot.com *.easypack24.net *.inpost.pl *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com *.hsforms.net *.hsforms.com secure.payu.com secure.snd.payu.com *.disqus.com cdn.jsdelivr.net sandbox.przelewy24.pl secure.przelewy24.pl pay.google.com apm.przelewy24.pl https://www.smartsuppchat.com https://widget-v2.smartsuppcdn.com https://www.rzetelnyregulamin.pl https://googleads.g.doubleclick.net https://static.addtoany.com https://www.orlenpaczka.pl https://ruch-osm.sysadvisors.pl https://geowidget.easypack24.net https://www.clarity.ms https://pixel.wp.pl https://smart-widget-assets.ekomiapps.de https://lantern.roeyecdn.com https://s.pinimg.com https://ct.pinterest.com https://consentcdn.cookiebot.com https://sw-assets.ekomiapps.de https://consent.cookiebot.com analytics.tiktok.com *.easypack24.net *.inpost.pl *.openstreetmap.org *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.googleapis.com *.addtoany.com cdn.jsdelivr.net https://www.rzetelnyregulamin.pl https://cdnjs.cloudflare.com https://ruch-osm.sysadvisors.pl https://geowidget.easypack24.net https://sw-assets.ekomiapps.de https://smart-widget-assets.ekomiapps.de https://geowidget.inpost.pl *.inpost.pl https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.typekit.net *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://geowidget.easypack24.net *.inpost.pl 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.wepowerconnections.com https://the.sciencebehindecommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com secure.payu.com merch-prod.snd.payu.com http://dpm.demdex.net sandbox.przelewy24.pl secure.przelewy24.pl wss://ws.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com https://bootstrap.smartsuppchat.com https://widget-v2.smartsuppcdn.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://ruch-osm.sysadvisors.pl https://api-pl-points.easypack24.net https://o.clarity.ms https://pixel.wp.pl https://vc-service.saleago.com https://ct.pinterest.com https://smart-widget-assets.ekomiapps.de https://consentcdn.cookiebot.com https://sentry.advox.pl/api sw-assets.ekomiapps.de pagead2.googlesyndication.com analytics.tiktok.com server-side-tagging-ggil7flztq-uc.a.run.app *.easypack24.net *.inpost.pl *.openstreetmap.org *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com ws: 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-Xh45chcIPtci3ryozYR0ug' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
style-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://widgets.binotel.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://connect.facebook.net https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com.ua https://cdn.pulse.is https://ringostat.com https://widgets.binotel.com; font-src maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com *.gstatic.com *.fontawesome.com fonts.gstatic.com fonts.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://www.google.com.ua https://my.binotel.ua https://widgets.binotel.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://images.unsplash.com *.yotpo.com quickchart.io img.youtube.com https://redchamps.com https://yotpo-editor-production.s3.amazonaws.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval' www.facebook.com https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com.ua https://cdn.pulse.is https://ringostat.com https://widgets.binotel.com maps.googleapis.com connect.facebook.net graph.facebook.com business.facebook.com https://cdn.polyfill.io https://browser.sentry-cdn.com *.yotpo.com https://js-agent.newrelic.com https://bam.eu01.nr-data.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com 'unsafe-inline' maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com *.fontawesome.com fonts.gstatic.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' https://widgets.binotel.com https://my.binotel.ua 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' https://www.googleadservices.com https://stats.g.doubleclick.net https://widgets.binotel.com https://s3.eu-central-1.amazonaws.com wss://wschat1.binotel.com:9015 https://callback.ringostat.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://*.ingest.sentry.io *.yotpo.com https://bam.eu01.nr-data.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.googleapis.com *.gstatic.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com fonts.gstatic.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com bytedance: sslocal: accounts.google.com *.clearpay.co.uk *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com *.bird.eu *.afterpay.com *.clearpay.co.uk *.stripe.com *.stripe.network *.google.com ebizmarts-website.s3.amazonaws.com brippo.s3.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ services.postcodeanywhere.co.uk magefan.com cm.magefan.com https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com accounts.google.com *.afterpay.com *.clearpay.co.uk *.squarecdn.com https://hbiq.net *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.addressy.com s7.addthis.com https://cdn.jsdelivr.net *.avada.io *.shopify.com *.alothemes.com *.magepow.com *.cloudflare.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com accounts.google.com *.afterpay.com/ *.squarecdn.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com api.addressy.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com accounts.google.com *.clearpay.co.uk *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com fonts.googleapis.com fonts.gstatic.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.addressy.com ekr.zdassets.com/ https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com www.apptrian.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com www.apptrian.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://seo.mageplaza.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.googletagmanager.com/ *.klarna.com *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.bing.com *.googleadservices.com *.google.co.uk maps.gstatic.com *.googletagmanager.com *.expressentry.melissadata.net *.paypalobjects.com *.ometria.services *.feefo.com *.adobedtm.com *.facebook.com https://www.anglingdirect.de http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.klarna.com *.klarnaevt.com *.klarnacdn.net *.ometria.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.bing.com *.google-analytics.com *.googletagmanager.com googleadservices.com *.googleapis.com googleapis.com maps.googleapis.com expressentry.melissadata.net *.paypalobjects.com *.ometria.services *.noibu.com https://www.noibu.com https://cdn.noibu.com *.facebook.net https://cdn.jsdelivr.net https://applepay.cdn-apple.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.klarna.com *.klarnacdn.net x.klarnacdn.net *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com *.dixa.io *.klarnaservices.com *.avada.io *.shopify.com https://api.ometria.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.ometria.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.bing.com *.bing.net *.googletagmanager.com *.googlesyndication.com *.googleapis.com maps.googleapis.com places.googleapis.com *.expressentry.melissadata.net *.paypalobjects.com *.ometria.services *.advancedcommerce.services *.algolia.net https://cdn.noibu.com wss://input.noibu.com https://input.noibu.com *.noibu.com https://cdn.jsdelivr.net *.apple.com https://api.stripe.com https://ad.doubleclick.net http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.stripe.com klarna.com *.klarna.com *.link.com *.amazon.com *.dixa.io *.klarnaservices.com https://get.geojs.io *.avada.io https://api.ometria.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.ometria.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' https: data:; font-src 'self'; connect-src 'self'; frame-ancestors 'none'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com js.mollie.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com applepay.cdn-apple.com assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://www.googletagmanager.com/ js.mollie.com www.googletagmanager.com consentcdn.cookiebot.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io maps.googleapis.com maps.gstatic.com *.googleapis.com https://images.unsplash.com 'self' data: www.google.fi *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.klevu.com *.ksearchnet.com https://firebasestorage.googleapis.com https://www.unifaunonline.se https://*.tile.openstreetmap.org/ https://www.mollie.com imgsct.cookiebot.com *.maksuturva.fi http://host.docker.internal:7001 data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.klevu.com *.ksearchnet.com *.avada.io *.shopify.com https://api.unifaun.com js.mollie.com consent.cookiebot.com digitalfeedback.euro.confirmit.com api.custobar.com *.videoly.co payments.maksuturva.fi *.maksuturva.fi http://host.docker.internal:7001 https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com a.omappapi.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.klevu.com *.ksearchnet.com https://get.geojs.io *.avada.io consentcdn.cookiebot.com *.maksuturva.fi digitalfeedback.euro.confirmit.com http://host.docker.internal:7001 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; report-uri /csp-report-endpoint 1
object-src 'none';base-uri 'self';script-src 'nonce-hKUi9AIsVNae-LOKfagwAw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.finance-calculator.co.uk *.s3.eu-west-2.amazonaws.com *.dekopay.org *.deko-uat.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://*.typekit.net fonts.gstatic.com *.boldr.dev *.typekit.net www.attwoolls.co.uk data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com www.attwoolls.co.uk 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com www.attwoolls.co.uk 'self'; frame-src secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.finance-calculator.co.uk *.deko.finance *.dekopay.org *.deko-uat.com https://www.googletagmanager.com/ https://*.doubleclick.net/ www.xtento.com www.attwoolls.co.uk 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com *.stripe.network https://*.google.com ebizmarts-website.s3.amazonaws.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com *.finance-calculator.co.uk *.dekopay.com *.dekopay.org *.deko-uat.com s3.eu-west-1.amazonaws.com 'self' data: https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.googletagmanager.com https://firebasestorage.googleapis.com https://*.placeholder.com angus.finance-calculator.co.uk services.postcodeanywhere.co.uk www.google.nl www.google.co.uk/ads/ga-audiences www.google.nl/ads/ga-audiences www.google.co.uk/pagead/ https://cdn-cookieyes.com https://dashboard.feedbucket.app www.xtento.com cdn.xtento.com www.attwoolls.co.uk data: 'self' 'unsafe-inline'; script-src secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ jquery.sellxed.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.finance-calculator.co.uk *.dekopay.com *.dekopay.org *.deko-uat.com dekowallet-feature-assets.s3.eu-west-2.amazonaws.com *.blackhorseflexpay.co.uk/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io https://cdnjs.cloudflare.com https://*.crazyegg.com/ https://*.jivosite.com/ https://*.youtube.com/ https://*.doubleclick.net/ services.postcodeanywhere.co.uk johna11120.pcapredict.com https://cdn-cookieyes.com cdn.feedbucket.app *.klaviyo.com js.datadome.co www.xtento.com cdn.xtento.com www.attwoolls.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.stripe.network *.stripecdn.com *.amazon.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.finance-calculator.co.uk *.dekopay.com *.dekopay.org *.deko-uat.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://*.typekit.net https://*.jivosite.com/ angus.finance-calculator.co.uk services.postcodeanywhere.co.uk johna11120.pcapredict.com https://cdn.feedbucket.app *.klaviyo.com *.typekit.net www.attwoolls.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://*.jivosite.com/ blob: www.attwoolls.co.uk 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com *.finance-calculator.co.uk *.dekopay.com *.dekopay.org *.deko-uat.com *.blackhorseflexpay.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io https://*.jivosite.com/ https://*.crazyegg.com/ services.postcodeanywhere.co.uk region1.google-analytics.com https://log.cookieyes.com https://cdn-cookieyes.com dashboard.feedbucket.app cdn.feedbucket.app *.klaviyo.com api-js.datadome.co www.attwoolls.co.uk 'self' 'unsafe-inline'; child-src www.attwoolls.co.uk http: https: blob: 'self' 'unsafe-inline'; default-src www.attwoolls.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; media-src 'self' https: blob:; connect-src 'self' https:; frame-src https:; object-src 'none'; base-uri 'self'; form-action 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com fonts.googleapis.com 'self' data: *.klarnacdn.net *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardlink.gr *.alphaecommerce.gr *.eurocommerce.gr *.qcb.gov.qa *.snapchat.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.facebook.com *.infobip.com *.snapchat.com *.klarna.com *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io calc.tbibank.gr https://www.magezon.com *.facebook.net *.facebook.com *.twitter.com t.co *.google.gr *.cookiefirst.com *.klarna.com *.klarnaevt.com *.klarnacdn.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ *.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com calc.tbibank.gr *.facebook.net *.facebook.com *.infobip.com *.cloudflareinsights.com *.google.gr *.googlesyndication.com *.twitter.com *.ads-twitter.com sc-static.net *.doubleclick.net *.iconify.design scripts.bestprice.gr skroutza.skroutz.gr analytics.skroutz.gr 360.bestprice.gr *.clarity.ms *.cookiefirst.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.cookiefirst.com *.klarnacdn.net *.fontawesome.com assets.braintreegateway.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com calc.tbibank.gr *.infobip.com *.facebook.com *.snapchat.com *.doubleclick.net *.clarity.ms *.cookiefirst.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src blob:; font-src fonts.gstatic.com *.kxcdn.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com *.google.com/ https://www.youtube.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com *.cdninstagram.com *.kxcdn.com amcglobal.sc.omtrdc.net *.twitter.com *.googleapis.com *.google.com *.gstatic.com *.fbcdn.net https://www.magezon.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com *.googleapis.com *.google.com *.gstatic.com cdn.ampproject.org connect.facebook.net www.googletagmanager.com googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com *.google.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com dpm.demdex.net *.instagram.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
connect-src 'self' *.hotjar.com/api/v2/client/ws *.hotjar.io *.trengo.eu https://*.analytics.google.com https://*.chatservice.co/ https://*.cookiepro.com https://*.cookieyes.com https://*.google-analytics.com https://*.google.co.uk https://*.google.com https://*.googletagmanager.com https://*.livechatinc.com https://*.mapbox.com https://*.moneypennychat.appspot.com/* https://*.onetrust.com https://*.reddit.com https://*.redditstatic.com https://*.snapchat.com https://*.storage.googleapis.com/* https://*.tiktok.com https://moneypennychat.appspot.com https://moneypennychat.appspot.com/* https://stats.g.doubleclick.net https://storage.googleapis.com https://storage.googleapis.com/* https://tcs-analytics-tracker.now.sh https://tcs-analytics-tracker.vercel.app https://vitastudent-develop.go-vip.net https://www.facebook.com/tr https://www.google.co.uk wss://ws.hotjar.com/api/v2/client/ws; default-src data: 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *.cookiepro.com *.doubleclick.net *.facebook.net *.google.com *.googleapis.com *.googletagmanager.com *.gravatar.com *.gstatic.com *.livechatinc.com *.snapchat.com *.tiktok.com *.vitastudent.com *.wp.com https://cht-srvc.net https://r1-t.trackedlink.net/_dmpt.js https://sc-static.net/scevent.min.js https://vita.students; frame-ancestors 'self' https://*.mapbox.com https://www.google.com https://www.youtube.com; img-src data: 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' 'wasm-unsafe-eval' *.cookiepro.com *.gravatar.com *.snapchat.com *.wp.com https://*.bing.com https://*.brandfolder.io https://*.facebook.com https://*.reddit.com https://cdn-cookieyes.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.gstatic.com *.trengo.eu *.vitastudent.com https://*.chatservice.co https://*.hotjar.com https://*.livechatinc.com https://*.moneypennychat.appspot.com/* https://*.snapchat.com https://*.storage.googleapis.com/* https://*.wp.com https://analytics.tiktok.com https://api.mapbox.com/* https://cdn-ukwest.onetrust.com https://connect.facebook.net https://cookie-cdn.cookiepro.com https://cookie-cdn.cookiepro.com/scripttemplates/otSDKStub.js https://dist.chatservice.co/latest/customerService.js https://googleads.g.doubleclick.net https://js.chatservice.co/v0/switch.js https://moneypennychat.appspot.com https://moneypennychat.appspot.com/* https://r1-t.trackedlink.net https://s0.wp.com https://sc-static.net https://ssl.google-analytics.com https://static.ads-twitter.com https://static.srcspot.com https://storage.googleapis.com https://storage.googleapis.com/* https://www.google-analytics.com https://www.google.com https://www.googleadservices.com https://www.googleoptimize.com https://www.googletagmanager.com https://www.vitastudent.com https://www.youtube.com; script-src-elem 'self' 'unsafe-inline' *.cookiepro.com *.doubleclick.net *.facebook.net *.google.com *.googletagmanager.com *.livechatinc.com *.snapchat.com *.tiktok.com *.trackedlink.net *.wp.com https://*.bing.com https://*.redditstatic.com https://cdn-cookieyes.com https://cht-srvc.net https://sc-static.net https://vita.students; worker-src blob: 'self' 'unsafe-inline' https://vitastudent.com https://www.vitastudent.com 1
script-src 'self' blob: https://prod-bk-web.za.rbi.tools/en/static/js/vendor.5dc447bb.js https://prod-bk-web.za.rbi.tools/en/static/js/main.c4701324.js https://prod-bk-web.za.rbi.tools/en/static/js/runtime.082bc9b0.js https://*.mparticle.com https://cdn.cookielaw.org https://www.googletagmanager.com https://*.onetrust.com https://static.ads-twitter.com https://platform.twitter.com https://www.google-analytics.com https://connect.facebook.net https://secure.quantserve.com https://dynamic.criteo.com https://rules.quantcount.com https://cdn.branch.io https://app.link https://*.cdn4.forter.com https://dlthst9q2beh8.cloudfront.net https://sslwidget.criteo.com https://widget.eu.criteo.com https://pagead2.googlesyndication.com https://cdn.amplitude.com https://accounts.google.com https://appleid.cdn-apple.com https://analytics.tiktok.com https://c.amazon-adsystem.com https://js.adsrvr.org https://maps.googleapis.com https://googleads.g.doubleclick.net https://static.zdassets.com https://bat.bing.com https://cdn-st.adsmurai.com https://www.youtube.com https://player.vimeo.com https://prod-bk-web.za.rbi.tools/en/static/js/main.f55c4093.js https://prod-bk-web.za.rbi.tools/en/static/js/runtime.7766413c.js; object-src 'none'; base-uri 'none'; worker-src 'self' blob:; report-uri https://intl-csp-service.rbictg.com/report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.tawk.to 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://*.every-pay.com/ https://*.every-pay.eu/ https://*.lhv.ee/ https://pay.google.com/ *.addthis.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.facebook.com *.decta.com *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com https://api.esto.ee https://api.esto.lv https://api.estopay.lt magefan.com cm.magefan.com https://*.every-pay.com/ https://*.every-pay.eu/ https://*.lhv.ee/ *.disqus.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com https://firebasestorage.googleapis.com https://www.terminalmappingjs.com https://osm.venipak.com http://mano.venipak.lt *.facebook.com *.facebook.net *.google.lv https://maps.omnivasiunta.lt maps.gstatic.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com https://*.every-pay.com/ https://*.every-pay.eu/ https://*.lhv.ee/ https://pay.google.com/ https://static.hotjar.com *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.avada.io *.shopify.com https://unpkg.com *.facebook.com *.facebook.net infimv.com *.stripe.com *.decta.com https://calculator.aizdevums.lv maps.googleapis.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://cdn.jsdelivr.net *.googleapis.com *.googletagmanager.com *.fontawesome.com https://fonts.bunny.net https://unpkg.com maxcdn.bootstrapcdn.com *.tawk.to *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://*.hotjar.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog https://get.geojs.io *.avada.io https://www.terminalmappingjs.com https://geocode.arcgis.com *.facebook.com maps.googleapis.com places.googleapis.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.googleapis.com data: 'self' data: *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' www.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' vars.hotjar.com tst.kaptcha.com hemsync.clickagy.com seal.digicert.com https://*.moneris.com/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.visualwebsiteoptimizer.com 'self' data: js.hsforms.net track.hubspot.com cds.taboola.com *.magidglove.com maps.gstatic.com seal.digicert.com black.bird.eu cdn.klarna.com *.facebook.com connect.facebook.net *.bing.com *.googletagmanager.com code.visitor-track.com *.google.com *.google.co.in dev.visualwebsiteoptimizer.com *.hsforms.com forms-na1.hsforms.com *.jwpltx.com *.jwpsrv.com/ *.jwplatform.com *.jwplayer.com *.payu.in *.linkedin.com *.doubleclick.net *.bidswitch.net *.adnxs.com *.contextual.media.net *.rubiconproject.com *.sharethrough.com *.smartadserver.com *.taboola.com *.criteo-sync.teads.tv *.3lift.com *.yahoo.com *.socdm.com *.casalemedia.com *.dable.io *.stickyadstv.com *.360yield.com *.rlcdn.com *.mediavine.com *.outbrain.com *.pubmatic.com *.smaato.net *.clmbtech.com *.aralego.com *.emxdgt.com *.bbb.org *.unrulymedia.com *.adingo.jp *.1rx.io *.criteo.com *.adingo.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval' blob: *.cloudfront.net *.uat-rfk.magidglove.com *.rfk.magidglove.com js.hs-scripts.com js.hsforms.net forms.hsforms.com js.hs-analytics.net js.hs-banner.com *.hotjar.com *.taboola.com *.facebook.net clients-liveguide01us.netop.com maps.googleapis.com bam.nr-data.net seal.digicert.com *.facebook.com *.bing.com dev.visualwebsiteoptimizer.com cdn.jsdelivr.net *.mczbf.com *.hsleadflows.net *.jwplatform.com ssl.p.jwpcdn.com *.jwplayer.com *.bootstrapcdn.com *.progmxs.com *.upsellit.com *.noibu.com *.hsadspixel.net *.criteo.com *.adnxs.com secure.adnxs.com *.snap.licdn.com js.zi-scripts.com ws.zoominfo.com tags.clickagy.com *.datadome.co *.adingo.com *.zi-scripts.com *.magidglove.com *.hs-scripts.com edge.cofra.me https://*.moneris.com/ *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com downloads.mailchimp.com assets.braintreegateway.com 'self' 'unsafe-inline' d26opx5dl8t69i.cloudfront.net rfk-staticfiles-uat.s3.amazonaws.com rfk-staticfiles-prod.s3.amazonaws.com cdn.jsdelivr.net *.cloudfront.net *.gstatic.com *.bootstrapcdn.com *.googleapis.com https://*.moneris.com/ *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' data: blob: *.jwpplayer.com *.jwpsrv.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' *.taboola.com payments.sandbox.braintree-api.com origin-analytics-sand.sandbox.braintree-api.com *.doubleclick.net bam.nr-data.net in.hotjar.com www.google-analytics.com dev.visualwebsiteoptimizer.com *.sjwoe.com *.mczbf.com *.hsforms.com *.hubspot.com *.cloudfront.net gstatic.com settings.luckyorange.net *.jwplatform.com *.jwpsrv.com/ *.jwplayer.com *.hotjar.io *.noibu.com input.noibu.com *.criteo.com *.hubapi.com *.visualwebsiteoptimizer.com *.googlesyndication.com aorta.clickagy.com hemsync.clickagy.com js.zi-scripts.com ws.zoominfo.com *.datadome.co *.unrulymedia.com *.adingo.com *.zi-scripts.com analytics.google.com edge.cofra.me maps.googleapis.com https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; worker-src 'self' blob:; frame-src 'self' https:; media-src 'self' https:; object-src 'none'; report-uri https://csp.techprobe.org/csp-report 1
font-src *.googleapis.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net https://cdnjs.cloudflare.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ science.cem.com www.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.googleapis.com *.gstatic.com 'self' *.amazonaws.com *.svc.dynamics.com *.clarity.ms *.bing.com cem.com *.cem.com 'unsafe-inline' https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com 'self' *.clarity.ms www.clarity.ms *.marketo.net bid.g.doubleclick.net www.google.com *.avada.io *.shopify.com mktdplp102cdn.azureedge.net 'unsafe-eval' 'unsafe-hashes' code.jquery.com cdnjs.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdnjs.cloudflare.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.amazonaws.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.googleapis.com 'self' *.mktoresp.com *.google.com googleads.g.doubleclick.net *.googlesyndication.com *.avada.io *.shopify.com mktdplp102cdn.azureedge.net https://get.geojs.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.cem.com/; report-to report-endpoint; 1
default-src     'self'     'unsafe-inline'; script-src     'unsafe-inline'; script-src-elem     'self'     'unsafe-inline'     https://a.pixiv.org     https://b99.yahoo.co.jp     https://cdn.tetori.link     https://cdnjs.cloudflare.com     https://connect.facebook.net     https://connect.gdxtag.com     https://googleads.g.doubleclick.net     https://s.yimg.jp     https://sslwidget.criteo.com     https://static.ads-twitter.com     https://static.criteo.net     https://static-content.payment.global.rakuten.com     https://www.google-analytics.com     https://www.googletagmanager.com     https://b92.yahoo.co.jp     https://b98.yahoo.co.jp     https://cdn.jsdelivr.net     https://cdn.tetori.link     https://code.jquery.com     https://connect.buyee.jp     https://connect.facebook.net     https://connect.gdxtag.com     https://connect.myeeglobal.com     https://googleads.g.doubleclick.net     https://sslwidget.criteo.com     https://translate.google.com     https://translate.googleapis.com     https://unpkg.com     https://www.googleadservices.com     https://www.google-analytics.com     https://www.googletagmanager.com     https://www.youtube.com     https://ajax.googleapis.com     https://b98.yahoo.co.jp     https://infird.com     https://web.runland.co.jp     https://www.googleadservices.com; connect-src     https://analytics.google.com     https://api.tetori.link     https://api1.tetori.link     https://api2.tetori.link     https://apm.yahoo.co.jp     https://dm.slim02.jp     https://stats.g.doubleclick.net     https://www.google.com     https://www.googleadservices.com     https://www.google-analytics.com     https://analytics.google.com     https://api3.tetori.link     https://www.google.co.jp     https://analytics.twitter.com     https://dm.slim02.jp     https://googleads.g.doubleclick.net     https://onkyodirect.jp     https://open-pixon.ads-pixiv.net     https://overbridgenet.com     https://pagead2.googlesyndication.com     https://region1.analytics.google.com     https://region1.google-analytics.com     https://t.co     https://translate.googleapis.com     https://www.facebook.com     https://www.google.be     https://www.google.ca     https://www.google.cl     https://www.google.co.in     https://www.google.co.kr     https://www.google.co.th     https://www.google.co.uk     https://www.google.com     https://www.google.com.ar     https://www.google.com.au     https://www.google.com.hk     https://www.google.com.mx     https://www.google.com.pe     https://www.google.com.pk     https://www.google.com.sg     https://www.google.com.tw     https://www.google.com.vn     https://www.google.es     https://www.googletagmanager.com     https://ad.doubleclick.net     https://www.facebook.com     https://www.google.com.mt     https://www.google.fr     https://www.google.ru; img-src     'self'     data:     https://analytics.twitter.com     https://b99.yahoo.co.jp     https://onkyodirectjp.ecbeing.biz     https://t.co     https://www.facebook.com     https://www.google.co.jp     https://www.google.com     https://www.googletagmanager.com     https://ad.as.amanad.adtdp.com     https://ade.clmbtech.com     https://b98.yahoo.co.jp     https://c.bing.com     https://client-side-metrics.jp2.as.criteo.net     https://cm.g.doubleclick.net     https://connect.facebook.net     https://criteo-sync.teads.tv     https://cs.media.net     https://eb2.3lift.com     https://fonts.gstatic.com     https://googleads.g.doubleclick.net     https://gum.criteo.com     https://i.ytimg.com     https://ib.adnxs.com     https://idsync.rlcdn.com     https://log-papago.naver.com     https://pagead2.googlesyndication.com     https://pixel.rubiconproject.com     https://r.casalemedia.com     https://rtb-csync.smartadserver.com     https://simage2.pubmatic.com     https://simage4.pubmatic.com     https://stats.g.doubleclick.net     https://sync.1rx.io     https://sync.outbrain.com     https://sync-t1.taboola.com     https://tg.socdm.com     https://www.google.be     https://www.google.ca     https://www.google.cl     https://www.google.co.id     https://www.google.co.in     https://www.google.co.ke     https://www.google.co.kr     https://www.google.co.ma     https://www.google.co.mz     https://www.google.co.nz     https://www.google.co.th     https://www.google.co.uk     https://www.google.co.za     https://www.google.com     https://www.google.com.af     https://www.google.com.ar     https://www.google.com.au     https://www.google.com.br     https://www.google.com.co     https://www.google.com.ec     https://www.google.com.hk     https://www.google.com.mm     https://www.google.com.mx     https://www.google.com.my     https://www.google.com.pe     https://www.google.com.ph     https://www.google.com.pk     https://www.google.com.sa     https://www.google.com.sg     https://www.google.com.sv     https://www.google.com.tw     https://www.google.com.ua     https://www.google.com.vn     https://www.google.cz     https://www.google.de     https://www.google.dk     https://www.google.ee     https://www.google.es     https://www.google.fr     https://www.google.ie     https://www.google.it     https://www.google.kz     https://www.google.nl     https://www.google.pl     https://www.google.rs     https://www.google.ru     https://www.google.se     https://www.google.tg     https://www.google.tm     https://www.googleadservices.com     https://www.gstatic.com     https://x.bidswitch.net     https://dis.criteo.com     https://aa.agkn.com     https://sync.targeting.unrulymedia.com; font-src     'self'     data:     https://fonts.gstatic.com     https://cdnjs.cloudflare.com     https://maxst.icons8.com     https://use.fontawesome.com     https://bid.g.doubleclick.net     https://connect.myeeglobal.com     https://gateway.zscaler.net     https://onkyodirect.jp     https://www.youtube.com     https://frontend-cdn.perplexity.ai     https://use.fontawesome.com; frame-src     https://connect.buyee.jp     https://gum.criteo.com     https://static-content.payment.global.rakuten.com     https://www.facebook.com     https://bid.g.doubleclick.net     https://connect.myeeglobal.com     https://div.show     https://gateway.zscalerthree.net     https://idprotect.trendmicro.com     https://media.myeeglobal.com     https://pwm-image.trendmicro.com     https://www.myeeglobal.com     https://www.youtube.com; style-src-elem     'self'     'unsafe-inline'     https://fonts.googleapis.com     https://cdn.jsdelivr.net     https://cdnjs.cloudflare.com     https://maxst.icons8.com     https://unpkg.com     https://use.fontawesome.com     https://www.gstatic.com     https://web.runland.co.jp; report-uri     https://onkyodirect.jp/csp/reporting; report-to     csp-endpoint; 1
default-src 'self' https: data:; 1
default-src  'self';   script-src   'self' 'unsafe-inline' 'unsafe-eval'                ajax.googleapis.com                apis.google.com                cdnjs.cloudflare.com                cdn.jsdelivr.net                code.jquery.com                kit.fontawesome.com                js.hcaptcha.com                maxcdn.bootstrapcdn.com                ssl.google-analytics.com                www.google.com                www.googletagmanager.com                www.univcoop.or.jp                text.univ.coop                www.univcoop.jp                www.univ.coop                u-coop.net                www.doshisha-coop.com                www.ryukoku-coop.com;   style-src    'self' 'unsafe-inline'                cdnjs.cloudflare.com                cdn.jsdelivr.net                fonts.googleapis.com                kit.fontawesome.com                maxcdn.bootstrapcdn.com                www.univcoop.or.jp                text.univ.coop                www.univcoop.jp                www.univ.coop                u-coop.net                www.doshisha-coop.com                www.ryukoku-coop.com;   font-src     'self'                cdn.jsdelivr.net                cdnjs.cloudflare.com                fonts.googleapis.com                fonts.gstatic.com                kit.fontawesome.com                maxcdn.bootstrapcdn.com                use.fontawesome.com                www.univcoop.or.jp                text.univ.coop                www.univcoop.jp                www.univ.coop                u-coop.net                www.doshisha-coop.com                www.ryukoku-coop.com;   frame-src    'self'                accounts.google.com                apis.google.com                developers.google.com                js.hcaptcha.com                www.google.com                www.youtube.com                www.univcoop.or.jp                text.univ.coop                www.univcoop.jp                www.univ.coop                u-coop.net                www.doshisha-coop.com                www.ryukoku-coop.com;   img-src      'self' https: data:                www.univcoop.or.jp                text.univ.coop                www.univcoop.jp                www.univ.coop                u-coop.net                www.doshisha-coop.com                www.ryukoku-coop.com;   connect-src  'self'                analytics.google.com                hcaptcha.com                stats.g.doubleclick.net                www.google.co.jp                www.google.com                www.google-analytics.com                www.googletagmanager.com                www.univcoop.or.jp                text.univ.coop                www.univcoop.jp                www.univ.coop                u-coop.net                www.doshisha-coop.com                www.ryukoku-coop.com;   report-uri   /csp-report.php 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.youtube.com https://analytics.ahrefs.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https://mssb-media.xcms.io https://static01.mediaselangor.com https://mediaselangor.com https://mediaselangor.github.io; connect-src 'self' https://static01.mediaselangor.com https://www.googletagmanager.com https://ads.mssb.cloud; frame-src 'self' https://www.youtube.com https://static01.mediaselangor.com https://selangor-player.glueapi.io https://ads.mssb.cloud; media-src 'self' https://mediaselangor.com https://static01.mediaselangor.com; frame-ancestors * 1
font-src https://www.googletagmanager.com *.googleapis.com *.gstatic.com *.fontawesome.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ tagmanager.google.com https://www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.fontawesome.com *.googleapis.com *.gstatic.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.certcapture.com downloads.mailchimp.com https://static.klaviyo.com *.fontawesome.com unsafe-inline assets.braintreegateway.com *.yotpo.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://cdn.ovy.so; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.ovy.so; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://cdn.ovy.so https://fonts.googleapis.com https://fonts.bunny.net; img-src 'self' data: blob: https:; font-src 'self' data: https://cdn.ovy.so https://fonts.gstatic.com https://fonts.bunny.net; connect-src 'self'; frame-src 'self' https:; worker-src 'self' blob:; manifest-src 'self' 1
default-src 'self'; object-src 'none'; report-to csp; report-uri https://www.taskeasy.com/utility/content-security-policy/report; 1
default-src 'self'; script-src 'self' https://analytics.tiktok.com/i18n/pixel/static/main.MWZhMDU3MTU4MQ.jshttps://cdn.evgnet.com/beacon/siamcommercialbank/prod/scripts/evergage.min.jshttps://connect.facebook.net/signals/config/350129558785421https://snap.licdn.com/li.lms-analytics/insight.old.min.jshttps://www.googletagmanager.com/gtm.js 'unsafe-inline'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; object-src 'none'; base-uri 'self'; connect-src 'self' https://cdx-prod-ssc-frontend.cardx.co.thhttps://kong-prod-frontend.cardx.co.thhttps://www.google-analytics.comhttps://px.ads.linkedin.comhttps://firebase.googleapis.comhttps://firebaseinstallations.googleapis.comhttps://siamcommercialbank.australia-3.evergage.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://www.youtube.comhttps://www.google.comhttps://www.googletagmanager.com; img-src 'self' https://cdx-prod-ssc-frontend.cardx.co.thhttps://tr.line.mehttps://www.facebook.com data:; manifest-src 'self'; media-src 'self' https://cdx-prod-ssc-frontend.cardx.co.th; worker-src 'none' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://cp.adaptivewebhosting.com; script-src 'self' 'nonce-019R/0sqIXq4v2Lui9riDQ==' 'strict-dynamic' https://www.googletagmanager.com https://challenges.cloudflare.com https://www.google-analytics.com; script-src-elem 'self' 'nonce-019R/0sqIXq4v2Lui9riDQ==' 'strict-dynamic' https://www.googletagmanager.com https://challenges.cloudflare.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https:; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com https://www.googleadservices.com https://bat.bing.com https://*.clarity.ms https://challenges.cloudflare.com; frame-src 'self' https://www.googletagmanager.com https://challenges.cloudflare.com; worker-src 'self' blob:; manifest-src 'self'; report-uri /api/csp-report; report-to csp-endpoint 1
default-src 'none'; frame-src https:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; font-src 'self' https: data:; img-src 'self' https: data:; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; manifest-src 'self' https:; media-src 'self' https:; connect-src 'self' https: 1
default-src 'self' *.sitepen.com; base-uri 'self'; child-src *; connect-src 'self' stats.g.doubleclick.net www.google-analytics.com region1.google-analytics.com; font-src 'self' fonts.gstatic.com use.typekit.net; form-action 'self'; frame-ancestors 'self'; frame-src *; img-src *; media-src *; object-src 'self'; report-to default; report-uri https://sitepen.report-uri.com/r/d/csp/reportOnly; script-src 'self' 'unsafe-inline' www.google-analytics.com player.vimeo.com; script-src-elem 'self' 'unsafe-inline' www.google-analytics.com www.googletagmanager.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; worker-src 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io b.stats.paypal.com dub.stats.paypal.com paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com madefor.github.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-ejEK1z5NAaTtQJUG3Zqe3g' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
default-src 'none'; script-src 'strict-dynamic' 'nonce-dJcieQT7FFHoGx2aDugmFM3w' https://www.clarity.ms https://*.clarity.ms https://c.bing.com https://www.googletagmanager.com https://*.googletagmanager.com; style-src 'nonce-dJcieQT7FFHoGx2aDugmFM3w' 'self'; img-src 'self' https: data: https://www.clarity.ms https://*.clarity.ms https://c.bing.com https://www.googletagmanager.com https://*.googletagmanager.com https://*.google-analytics.com; connect-src 'self' 'self' https://www.clarity.ms https://*.clarity.ms https://c.bing.com https://www.googletagmanager.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com; font-src 'self' 'self' data:; object-src 'none'; manifest-src 'self'; media-src https:; child-src 'self'; worker-src 'self'; frame-ancestors 'none'; base-uri 'self' 'self'; frame-src 'none'; form-action 'self'; report-uri ../cspviolation 1
object-src 'none';base-uri 'self';script-src 'nonce-APw0dysixzb6lU6G8DDPng' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.global.skippay.eu https://www.cookie-lista.cz https://pagead2.googlesyndication.com *.google-analytics.com https://petdiscont.cz/ https://petdiscont.sk https://maps.googleapis.com/ https://www.googletagmanager.com https://widget.packeta.com/ https://widget.intime.cz/ https://ajax.googleapis.com/ https://fonts.googleapis.com/ https://cdn.myshoptet.com https://*.petdiscont.cz/ https://cdn.jsdelivr.net *.gstatic.com https://*.mapy.cz https://*.mapy.com im9.cz *.im9.cz *.youtube.com https://zoovyhodne.cz/ https://krmivazoo.cz/ https://aquazoo.cz *.seznam.cz *.google.com https://stats.g.doubleclick.net https://www.heureka.cz https://www.heureka.sk *.heureka.group https://www.zbozi.cz https://c.seznam.cz https://c.imedia.cz https://www.google-analytics.com *.facebook.net *.facebook.com https://www.facebook.com googleads.g.doubleclick.net https://www.heureka.cz https://www.google.cz *.googleadservices.com https://tracking.srovname.cz *.selltoro.com; report-uri /reportCSP.php 1
default-src 'self' https://*.mapmycustomers.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; connect-src 'self' https: wss: data:; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; frame-src 'self' https:; media-src 'self' https: blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://*.mapmycustomers.com https://*.hubspot.com; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub638323a8cbae51110d72746e0dda4896&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service:marketing-site-astro%2Cenv:production 1
font-src *.fontawesome.com *.gstatic.com 'self' data: https://widgets.trustedshops.com https://integrations.etrusted.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ js.mollie.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com https://www.mollie.com *.hsforms.net *.hsforms.com 'self' data: https://widgets.trustedshops.com https://integrations.etrusted.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.mollie.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com https://widgets.trustedshops.com https://integrations.etrusted.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://integrations.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.friendlycaptcha.com eu-api.friendlycaptcha.eu t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline';report-uri https://www.wein-konzept.de/fl32csp/report/; 1
trusted-types default html goog#html 'allow-duplicates'; require-trusted-types-for 'script' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.medewo.com *.rausch-packaging.com *.pack-verde.com 'self' data: 'unsafe-inline' data: *.paypal.com *.pay1.de *.cloudfront.net userlike-cdn-widgets.s3-eu-west-1.amazonaws.com userlike-cdn-operators.s3-eu-west-1.amazonaws.com *.etrusted.com *.b-cdn.net *.optimonk.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.medewo.com *.rausch-packaging.com *.pack-verde.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com userlike-cdn-operators.s3-eu-west-1.amazonaws.com *.etrusted.com *.facebook.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.apptrian.com *.doofinder.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com *.medewo.com *.rausch-packaging.com *.pack-verde.com *.bing.com *.bing.net *.cookiefirst.com *.facebook.net *.googlesyndication.com *.google.de *.leadlab.click *.linkedin.com *.outbrain.com *.pingdom.net *.ratepay.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com userlike-cdn-operators.s3-eu-west-1.amazonaws.com 'self' data: blob: *.etrusted.com *.userlike.com *.doubleclick.net *.google.com *.googleapis.com dashboard.trustprofile.com *.facebook.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.hsforms.net *.hsforms.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com www.apptrian.com *.doofinder.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.medewo.com *.rausch-packaging.com *.pack-verde.com *.bing.com *.cloudfront.net *.facebook.net *.google.de *.googlesyndication.com *.licdn.com *.outbrain.com *.pingdom.net *.leadlab.click *.cookiefirst.com *.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com *.yotpo.com *.matelso.de *.b-cdn.net *.clarity.ms *.getresponse.com *.gr-cdn.com *.googleapis.com *.optimonk.com *.trustedshops.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com cdnjs.cloudflare.com payment *.hsforms.net *.hsforms.com *.gstatic.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.doofinder.com downloads.mailchimp.com d.ratepay.com d.payla.io dr.payla.io *.medewo.com *.rausch-packaging.com *.pack-verde.com *.dnky.co *.dotdigital.com *.paypal.com *.ratepay.com *.pay1.de *.bing.com https://widgets.trustedshops.com *.pingdom.net *.leadlab.click *.cookiefirst.com *.youtube.com *.adobedtm.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com 'self' 'unsafe-inline' data: *.etrusted.com *.optimonk.com cdn.datatables.net https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.magento.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com www.apptrian.com *.doofinder.com wss://*.doofinder.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.medewo.com *.rausch-packaging.com *.pack-verde.com *.facebook.com *.pay1.de *.bing.com *.googlesyndication.com *.omtrcd.net *.pingdom.net *.leadlab.click *.cookiefirst.com *.doubleclick.net *.userlike.com wss://*.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com userlike-cdn-operators.s3-eu-west-1.amazonaws.com *.outbrain.com *.matelso.de *.linkedin.com *.getresponse.com mpc-prod-17-s6uit34pua-wl.a.run.app *.googleapis.com *.optimonk.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site intent://payment t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com *.fitit.ai https://cdn.fitit.ai https://us-central1-fitit-a5bde.cloudfunctions.net *.adobe.com https://fonts.googleapis.com *.fontawesome.com *.oct8ne.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.vimeo.com *.afip.gob.ar *.fitit.ai https://cdn.fitit.ai https://us-central1-fitit-a5bde.cloudfunctions.net *.mercadolibre.com https://mobbex.com *.oct8ne.com https://static.oct8ne.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://live.decidir.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com www.apptrian.com facebook.com www.facebook.com https://www.facebook.com connect.facebook.net graph.facebook.com *.vimeo.com *.afip.gob.ar *.fitit.ai https://cdn.fitit.ai https://us-central1-fitit-a5bde.cloudfunctions.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar *.mercadolivre.com *.mobbex.com *.oct8ne.com https://static.oct8ne.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net https://connect.facebook.net graph.facebook.com https://graph.facebook.com *.afip.gob.ar *.fitit.ai https://cdn.fitit.ai https://us-central1-fitit-a5bde.cloudfunctions.net https://apis.google.com *.avada.io *.googletagmanager.com https://www.googletagmanager.com tagmanager.google.com *.mlstatic.com *.mercadopago.com *.mobbex.com *.oct8ne.com https://static.oct8ne.com https://backoff.oct8ne.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://live.decidir.com https://developers.decidir.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fitit.ai https://cdn.fitit.ai https://us-central1-fitit-a5bde.cloudfunctions.net *.fontawesome.com *.oct8ne.com https://static.oct8ne.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com https://www.facebook.com connect.facebook.net https://connect.facebook.net graph.facebook.com https://graph.facebook.com *.afip.gob.ar *.fitit.ai https://cdn.fitit.ai https://us-central1-fitit-a5bde.cloudfunctions.net https://get.geojs.io *.avada.io *.google-analytics.com https://www.google-analytics.com *.mercadopago.com *.mercadolibre.com *.mobbex.com *.oct8ne.com https://static.oct8ne.com https://backoff.oct8ne.com wss://*.oct8ne.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://live.decidir.com https://developers.decidir.com/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com fonts.gstatic.com *.fonts.googleapis.com *.gstatic.com data: *.cloudflare.com *.yotpo.com *.googleapis.com wordpress.craftsman-book.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.authorize.net *.yotpo.com wordpress.craftsman-book.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net wordpress.craftsman-book.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.facebook.com platform.twitter.com static.addtoany.com *.authorize.net *.google.com *.addthis.com *.pinterest.com www.xtento.com *.yotpo.com wordpress.craftsman-book.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://firebasestorage.googleapis.com www.facebook.com *.pinterest.com assets.pinterest.com syndication.twitter.com *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.cdninstagram.com www.xtento.com cdn.xtento.com *.yotpo.com wordpress.craftsman-book.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.avada.io *.shopify.com *.facebook.com twitter.com platform.twitter.com static.addtoany.com *.authorize.net *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.instagram.com www.xtento.com cdn.xtento.com *.yotpo.com wordpress.craftsman-book.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.googleapis.com *.yotpo.com wordpress.craftsman-book.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com wordpress.craftsman-book.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://get.geojs.io *.avada.io stats.addtoany.com *.authorize.net *.cloudflare.com *.paypal.com *.googleapis.com *.addthis.com *.cardinalcommerce.com *.graph.instagram.com *.google-analytics.com *.yotpo.com wordpress.craftsman-book.com 'self' 'unsafe-inline'; child-src wordpress.craftsman-book.com http: https: blob: 'self' 'unsafe-inline'; default-src wordpress.craftsman-book.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' https://*.google-analytics.com https://tagmanager.google.com https://connect.facebook.net https://analytics.tiktok.com https://*.teads.tv https://js.adsrvr.org https://*.dr-beckmann.com https://*.global.commerce-connector.com https://*.youtube.com https://cdn.jsdelivr.net; style-src-attr 'unsafe-inline'; img-src 'self' https://www.gstatic.com https://www.googletagmanager.com https://ssl.gstatic.com https://*.google.com https://*.google.de/ads/ https://*.google.de/pagead/ https://*.google-analytics.com https://*.youtube.com/ https://*.ytimg.com https://*.facebook.com https://*.teads.tv https://googleads.g.doubleclick.net data: https://*.usercentrics.eu https://*.dr-beckmann.com https://*.global.commerce-connector.com https://shoplogos.commerce-connector.de https://storage.cxgenie.ai https://widget.cxgenie.ai https://blaze.f4-promotions.de; base-uri 'self'; frame-src 'self' blob: https://*.youtube.com/ https://*.youtube-nocookie.com https://*.snapchat.com https://insight.adsrvr.org https://match.adsrvr.org https://www.googletagmanager.com https://*.usercentrics.eu https://*.dr-beckmann.com https://dr-beckmann-quick-power-wash-2025.stag.digital.promo https://widget.cxgenie.ai https://blaze.f4-promotions.de; style-src-elem 'self' 'unsafe-inline' https://*.global.commerce-connector.com https://widget.cxgenie.ai/widget.css; media-src 'self' blob:; style-src 'self' https://fonts.googleapis.com https://www.googletagmanager.com https://tagmanager.google.com https://*.global.commerce-connector.com; font-src 'self' https://fonts.gstatic.com https://*.global.commerce-connector.com https://blaze.f4-promotions.de; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.google.com https://*.google.de https://*.gstatic.com https://stats.g.doubleclick.net https://insight.adsrvr.org https://analytics.tiktok.com https://www.facebook.com https://*.teads.tv https://*.snapchat.com https://*.api.snapchat.com https://*.sc-cdn.net https://web-frontend-dot-sc-analytics.appspot.com https://*.sc-prod.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://ad.doubleclick.net https://*.tiktokw.us https://*.clarity.ms https://c.bing.com https://*.usercentrics.eu https://*.dr-beckmann.com https://*.global.commerce-connector.com https://*.commerce-connector.com https://*.cxgenie.ai https://blaze.f4-promotions.de; script-src-elem 'self' https://*.google-analytics.com https://tagmanager.google.com https://connect.facebook.net https://analytics.tiktok.com https://*.teads.tv https://js.adsrvr.org https://*.dr-beckmann.com https://*.global.commerce-connector.com https://*.youtube.com https://cdn.jsdelivr.net 'unsafe-eval' 'unsafe-inline' https://*.googletagmanager.com https://googleads.g.doubleclick.net https://z.clarity.ms/ https://www.clarity.ms/ https://scripts.clarity.ms/ https://c.bing.com/ https://*.usercentrics.eu https://widget.cxgenie.ai/widget.js blaze.f4-promotions.de; object-src 'self' https://*.usercentrics.eu 1
object-src 'none';base-uri 'self';script-src 'nonce-yvhNGdMOYrqoUdzoI4z9ZQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'nonce-Q4wv1WIUZVfBSJnu34G_DgcQZkr8OnkfpVE4RuVd7Ug'; style-src 'self' 'nonce-Q4wv1WIUZVfBSJnu34G_DgcQZkr8OnkfpVE4RuVd7Ug'; img-src 'self' data:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; report-uri /+cspreport/log 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://adjs.media https://ajax.googleapis.com https://b.admasters.media https://cdn.ocmtag.com https://cdn.onesignal.com https://cdnjs.cloudflare.com https://cmp.inmobi.com https://connect.facebook.net https://d3u598arehftfk.cloudfront.net https://data.gblcdn.com https://embi-media.com https://ep2.adtrafficquality.google https://fundingchoicesmessages.google.com https://gum.criteo.com https://hbagency.it https://invstatic101.creativecdn.com https://news.google.com https://onesignal.com https://pagead2.googlesyndication.com https://platform.twitter.com https://sb.scorecardresearch.com https://scripts.cleverwebserver.com https://sdk.ocmthood.com https://securepubads.g.doubleclick.net https://static.criteo.net https://static.kueezrtb.com https://ui.cleverwebserver.com https://unpkg.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googletagservices.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://i.imgur.com https://maxcdn.bootstrapcdn.com https://securepubads.g.doubleclick.net; font-src 'self' data: https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; img-src 'self' https: data: blob:; connect-src 'self' https://cmp.inmobi.com https://connect.facebook.net https://ep1.adtrafficquality.google https://esp.rtbhouse.com https://fundingchoicesmessages.google.com https://gtrack.kueezrtb.com https://gum.criteo.com https://pagead2.googlesyndication.com https://securepubads.g.doubleclick.net https://server.gblcdn.com https://track.kueezrtb.com https://view.clvrads.com https://www.google-analytics.com; frame-src 'self' https://*.safeframe.googlesyndication.com https://eus.rubiconproject.com https://sync.richaudience.com https://sync.sparteo.com https://cm.g.doubleclick.net https://ep2.adtrafficquality.google https://googleads.g.doubleclick.net https://gum.criteo.com https://onesignal.com https://platform.twitter.com https://syndication.twitter.com https://verdaoweb-com.os.tc https://view.clvrads.com https://widgets.sofascore.com https://www.facebook.com https://www.google.com; media-src 'self' https: data: blob:; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:; object-src 'none'; worker-src 'self'; frame-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests; report-to csp-endpoint 1
img-src 'self' data: https://www.googletagmanager.com  https://imgsct.cookiebot.com  https://www.facebook.com  https://www.google.es  https://www.google-analytics.com  https://t.co  https://analytics.twitter.com  https://www.google.co.nz  https://www.google.co.ve  https://adservice.google.com  https://region1.google-analytics.com  https://www.google.co.uk  https://www.google.com.pe  https://i.liadm.com  https://www.google.no  https://i.ytimg.com  https://www.google.com.ph  https://www.google.com.ar  https://www.google.com.co  https://www.google.fr  https://www.google.com.bo  https://www.google.com.cu  https://www.google.hn  https://www.fcarreras.org  https://www.google.com.mx  https://www.google.com.eg  https://www.google.pl  https://www.google.ch  https://www.google.cl  https://www.google.com.sv  https://www.google.co.kr  https://www.google.com.ec  https://www.google.de  https://sync.intentiq.com  https://www.google.com.pa  https://www.google.com.do  https://www.google.pt  https://www.google.com.au  https://www.google.com.ni  https://trc.taboola.com  https://www.google.com.tr  https://analytics.google.com  https://stats.g.doubleclick.net  https://translate.google.com  blob:  https://www.google.com.pr  https://googleads.g.doubleclick.net  https://www.google.co.za  https://www.google.co.id  https://www.google.com.py  https://fcarreras.org  https://www.google.at  https://fonts.gstatic.com  https://www.google.nl  https://www.google.ad  https://www.google.co.cr  https://www.google.com.uy  https://www.google.ca  https://www.google.com.hk  https://www.google.co.ma  https://www.google.com.gt  https://www.google.com.my  https://www.google.ru  https://ad.doubleclick.net  https://www.google.al  https://www.google.com.br  https://www.google.ie  https://www.google.it  https://analytics.pangle-ads.com  https://analytics.tiktok.com  https://www.google.co.in  https://www.google.lu  https://www.google.dk  https://www.google.co.zm  https://www.google.co.ao  https://www.google.com.ua  https://live.primis.tech  https://www.google.gr  https://www.google.ro  https://www.google.com.fj  https://www.google.com.kh  https://www.google.com.lb  https://www.google.lv  https://www.google.com.ng  https://www.google.ge  https://www.google.co.il  https://www.google.se  android-webview  https://www.google.com.et  https://www.google.cz  https://www.google.com.kw  https://www.google.sn  https://www.google.co.th  https://www.google.com.gh  https://www.google.hu  https://www.google.ae  https://www.google.co.jp  https://www.google.mk  https://www.google.be  https://region1.analytics.google.com  https://www.google.com.sg  https://www.google.ml  https://www.google.com.pk  https://www.google.co.zw  https://www.google.co.ug  https://www.google.lk  https://www.google.co.ke  https://www.google.by  https://www.google.tl  https://www.google.rs  https://www.google.com.vc  https://www.google.tn  https://www.google.cm  https://www.google.com.qa  https://www.google.cv  https://www.google.co.tz  https://www.googleadservices.com  https://www.google.com.na  https://connect.facebook.net  https://www.google.ee  https://www.google.com.vn  https://tr.outbrain.com  https://cdn.honey.io  https://www.google.com.sa  https://www.google.bg  https://www.google.jo  https://www.google.ci  https://www.google.iq  https://www.google.com.ly  https://s01.europapress.net  https://www.google.ga  https://mc.yandex.ru  https://sync1.intentiq.com  https://www.google.az  https://www.google.com.gi  https://tpcs.payu.in  https://www.google.is  https://www.google.co.uz  https://www.google.cn  https://www.google.com.bd  https://www.google.cf  https://www.google.so  https://www.google.mu  https://www.google.dz  https://www.google.com.np  https://www.google.ps  https://www.google.com.sl  https://pos.baidu.com  https://www.google.com.jm  https://www.google.com.cy  https://www.rtve.es  https://www.google.com.bz  https://www.google.com.bh  https://www.google.bs  https://www.google.bj  https://www.google.kz  https://www.google.li  https://www.google.co.mz  https://www.google.sk  https://www.google.sc  https://adminmenueditor.com  https://www.gstatic.com  https://www.google.com.tw  https://www.google.bf  https://updates.themepunch-ext-c.tools  https://cdn.leanlibrary.app  https://www.google.mv  https://www.google.si  https://www.google.cd  https://www.google.rw  https://www.google.tt  https://www.google.com.mt  https://www.google.md  https://www.reprintsdesk.com  https://www.researchsolutions.com  https://s3.amazonaws.com  https://www.google.gg  https://www.google.gm  https://www.google.me  https://test.fcarreras.org  https://blocks.jupiterx.com  https://www.google.hr  https://keepupnews.org  https://www.google.ba  https://www.google.je  https://storage.googleapis.com  https://www.descubrir.com  https://library.elementor.com  https://ce.lijit.com  https://u.openx.net  https://ad.360yield.com  https://surfe.be  https://px.ads.linkedin.com  https://c.clarity.ms  https://tr.line.me  https://tr.charleskeith.co.th  https://i6.liadm.com  https://pixel.quantserve.com  https://stamp.wma.comb.es  https://www.google.lt  https://www.google.mn  https://www.google.com.ag  https://static.gamezop.com  https://secure.gravatar.com https://ts.w.org https://s.w.org https://ps.w.org; default-src 'self'; script-src 'self' 'unsafe-inline' https://consent.cookiebot.com  https://www.googletagmanager.com  https://consentcdn.cookiebot.com  https://llamamegratis.es  https://www.google-analytics.com  https://analytics.tiktok.com  https://cdn.taboola.com  https://static.addtoany.com  https://wave.outbrain.com  https://trc.taboola.com  https://tr.outbrain.com  https://connect.facebook.net  https://googleads.g.doubleclick.net  https://static.ads-twitter.com  https://static.hotjar.com  https://amplify.outbrain.com  https://script.hotjar.com  https://www.youtube.com  https://gc.kis.v2.scr.kaspersky-labs.com  https://cdn.jsdelivr.net  https://cdnjs.cloudflare.com  https://apis.google.com  https://www.googleadservices.com  https://me.kis.v2.scr.kaspersky-labs.com  https://data1.vulapo.com  https://data1.thetto.com  https://data1.griloup.com  https://negbar.ad-blocker.org  https://data1.hatolep.com  https://www.pagespeed-mod.com  https://ssl.google-analytics.com  https://savingsslider-a.akamaihd.net  https://ff.kis.v2.scr.kaspersky-labs.com  https://www.google.com  https://data1.muarrf.com  https://gc.kes.v2.scr.kaspersky-labs.com  https://data1.app-fast.com  http://amplify.outbrain.com  https://conoret.com  https://mstat.acestream.net  https://data1.gestona.com  https://fcarreras.org  https://ytskip.b-cdn.net  https://ams.wpml.org  https://data1.phistouquet.com  https://cdn.reskyt.com  https://data1.limclir.com  https://editor-static-bucket.elementor.com  https://accounts.google.com  https://translate.google.com  https://translate.googleapis.com  https://lazyload.org  https://player.vimeo.com  https://s3.amazonaws.com  https://s.pinimg.com  https://ct.pinterest.com  https://data1.blicot.com  data:  https://data1.imc-peso.com  blob:  https://infimv.com  https://pagead2.googlesyndication.com  https://sc-static.net  https://farmatodo.api.useinsider.com  https://js.appboycdn.com  https://dynamic.criteo.com  https://apps.bazaarvoice.com  https://snap.licdn.com  https://tr.charleskeith.co.th  https://www.clarity.ms  https://d.line-scdn.net  https://charleskeithth.api.useinsider.com  https://atag.adgile.media  https://websdk.appsflyer.com  https://static.zdassets.com  https://pixel.mathtag.com  https://s.zzcdn.me  https://secure.quantserve.com  https://tags.creativecdn.com  https://static.usizy.es  https://p2s.boyner.com.tr  https://vsh.visilabs.net  https://rules.quantcount.com  https://belcorpbrand.api.useinsider.com  https://cdn.treasuredata.com  https://tag.goadopt.io  https://cdn.logr-ingest.com  https://app.varify.io  https://survey.survicate.com  https://assets-cdn.woowup.com  https://cdn.embluemail.com  https://surveys-static.survicate.com  https://ipmeta.io  https://bat.bing.com  https://init.blackcrow.ai  https://www.artfut.com  https://s.yimg.com  https://static.criteo.net  https://analytics.webgains.io  https://infirc.com  https://secure-cdn.mplxtms.com  https://cdn.cookielaw.org  'unsafe-eval'; script-src-elem 'self' 'unsafe-inline' https://www.gstatic.com/recaptcha/ https://consent.cookiebot.com  https://www.googletagmanager.com  https://consentcdn.cookiebot.com  https://llamamegratis.es  https://www.google-analytics.com  https://analytics.tiktok.com  https://cdn.taboola.com  https://static.addtoany.com  https://wave.outbrain.com  https://trc.taboola.com  https://tr.outbrain.com  https://connect.facebook.net  https://googleads.g.doubleclick.net  https://static.ads-twitter.com  https://static.hotjar.com  https://amplify.outbrain.com  https://script.hotjar.com  https://www.youtube.com  https://gc.kis.v2.scr.kaspersky-labs.com  https://cdn.jsdelivr.net  https://cdnjs.cloudflare.com  https://apis.google.com  https://www.googleadservices.com  https://me.kis.v2.scr.kaspersky-labs.com  https://data1.vulapo.com  https://data1.thetto.com  https://data1.griloup.com  https://negbar.ad-blocker.org  https://data1.hatolep.com  https://www.pagespeed-mod.com  https://ssl.google-analytics.com  https://savingsslider-a.akamaihd.net  https://ff.kis.v2.scr.kaspersky-labs.com  https://www.google.com  https://data1.muarrf.com  https://gc.kes.v2.scr.kaspersky-labs.com  https://data1.app-fast.com  http://amplify.outbrain.com  https://conoret.com  https://mstat.acestream.net  https://data1.gestona.com  https://fcarreras.org  https://ytskip.b-cdn.net  https://ams.wpml.org  https://data1.phistouquet.com  https://cdn.reskyt.com  https://data1.limclir.com  https://editor-static-bucket.elementor.com  https://accounts.google.com  https://translate.google.com  https://translate.googleapis.com  https://lazyload.org  https://player.vimeo.com  https://s3.amazonaws.com  https://s.pinimg.com  https://ct.pinterest.com  https://data1.blicot.com  data:  https://data1.imc-peso.com  blob:  https://infimv.com  https://pagead2.googlesyndication.com  https://sc-static.net  https://farmatodo.api.useinsider.com  https://js.appboycdn.com  https://dynamic.criteo.com  https://apps.bazaarvoice.com  https://snap.licdn.com  https://tr.charleskeith.co.th  https://www.clarity.ms  https://d.line-scdn.net  https://charleskeithth.api.useinsider.com  https://atag.adgile.media  https://websdk.appsflyer.com  https://static.zdassets.com  https://pixel.mathtag.com  https://s.zzcdn.me  https://secure.quantserve.com  https://tags.creativecdn.com  https://static.usizy.es  https://p2s.boyner.com.tr  https://vsh.visilabs.net  https://rules.quantcount.com  https://belcorpbrand.api.useinsider.com  https://cdn.treasuredata.com  https://tag.goadopt.io  https://cdn.logr-ingest.com  https://app.varify.io  https://survey.survicate.com  https://assets-cdn.woowup.com  https://cdn.embluemail.com  https://surveys-static.survicate.com  https://ipmeta.io  https://bat.bing.com  https://init.blackcrow.ai  https://www.artfut.com  https://s.yimg.com  https://static.criteo.net  https://analytics.webgains.io  https://infirc.com  https://secure-cdn.mplxtms.com  https://cdn.cookielaw.org ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com  https://use.fontawesome.com  https://llamamegratis.es  https://me.kis.v2.scr.kaspersky-labs.com  https://gc.kis.v2.scr.kaspersky-labs.com  https://ff.kis.v2.scr.kaspersky-labs.com  http://fonts.googleapis.com  https://fcarreras.org  https://www.gstatic.com  https://cdn.honey.io  https://ams.wpml.org  https://www.googletagmanager.com  https://cdn.jsdelivr.net  https://surveys-static.survicate.com ; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com  https://use.fontawesome.com  https://llamamegratis.es  https://me.kis.v2.scr.kaspersky-labs.com  https://gc.kis.v2.scr.kaspersky-labs.com  https://ff.kis.v2.scr.kaspersky-labs.com  http://fonts.googleapis.com  https://fcarreras.org  https://www.gstatic.com  https://ams.wpml.org  https://www.googletagmanager.com  https://cdn.jsdelivr.net  https://surveys-static.survicate.com ; font-src 'self' https://fonts.gstatic.com  https://use.fontawesome.com  https://cdnjs.cloudflare.com  https://cdn.goin.cloud  https://cdn-uicons.flaticon.com  https://cdn.blerp.com  https://cdn.scite.ai  moz-extension  https://static.zohocdn.com  chrome-extension  https://fcarreras.org  https://www.slant.co  https://app.escribelo.ai  https://aceify.ai  http://themes.googleusercontent.com  https://cdn.megabonus.com  data:; frame-src 'self' https://consentcdn.cookiebot.com  https://td.doubleclick.net  https://static.addtoany.com  https://tsdtocl.com  https://cdn.taboola.com  https://www.youtube.com  https://cdn.knightlab.com  https://maps.google.com  https://www.google.com  https://www.googletagmanager.com  https://e.issuu.com  https://cdncache-a.akamaihd.net  http://notify.bluecoat.com  https://assistance.quantumadblocker.com  https://block.opendns.com  https://www.ciuvo.com  https://global.acs.prismaaccess.com  https://llamamegratis.es  https://santjosepobrer.imtlazarus.com  https://www.facebook.com  https://mozbar.moz.com  https://myaccount.google.com  https://www.carrerasresearch.org  https://gateway.zscloud.net  https://translate.googleapis.com  https://r.zozezop.com  https://emet.news  https://emet.live  https://acestream.tv  https://ct.pinterest.com  https://aldapeta.imtlazarus.com  https://feedback-pa.clients6.google.com  https://sanignacio.imtlazarus.com  mailto  https://gateway.zscalertwo.net  https://td.doubleclick.net.fvhs2nchnr2gm4lzgzfte4tfnbudamtj.redirect.b1tdc.infoblox.com  https://sase.merck.com  gsa://onpageload  https://charleskeithth.api.useinsider.com  https://gum.criteo.com  https://farmatodo.api.useinsider.com  http://192.168.128.141  http://www.youtube.com.x.987f63ec0f4dc04bf40a5500eff7ec16bc93.ccc2ef7d.id.opendns.com  blob:; connect-src 'self' https://analytics.tiktok.com  https://pips.taboola.com  https://region1.analytics.google.com  https://consentcdn.cookiebot.com  https://www.google.com  https://stats.g.doubleclick.net  https://www.facebook.com  https://region1.google-analytics.com  https://cds.taboola.com  https://tr.outbrain.com  https://www.google-analytics.com  https://analytics.pangle-ads.com  https://trc-events.taboola.com  https://analytics.google.com  https://vc.hotjar.io  https://adservice.google.com  https://googleads.g.doubleclick.net  https://api.mkmediaworks.com  https://skincareadvertsking.com  https://assistance.quantumadblocker.com  https://metrics.hotjar.io  properties  https://yoast.com  https://translate.googleapis.com  https://api.intentiq.com  https://api.verdevisionresearch.com  https://stats.addtoany.com  https://pagead2.googlesyndication.com  https://overbridgenet.com  http://uc.gre  http://pluginx.uc.local  https://psb.taboola.com  https://savingsslider-a.akamaihd.net  https://ajax.googleapis.com  https://api.solarspireconsulting.com  https://api.ultimateaderaser.com  https://stickyid-a.akamaihd.net  https://api.blocksly.org  https://api.amcreativemedia.com  https://www.googleadservices.com  https://api.ciuvo.com  https://metrics-dra.dt.dbankcloud.cn  https://api.redirects-4.com  https://translate-pa.googleapis.com  data:  https://api.global-data-lab.com  https://ams.wpml.org  https://api.freevideoguard.org  https://rktstats.reskyt.com  https://api.fbanalytics.org  https://infragrid.v.network  https://metrics-dre.dt.dbankcloud.cn  https://api.adblocking247.com  https://api.solaranalyticscorp.com  https://api.range-offer.com  https://ct.pinterest.com  https://www.googletagmanager.com  https://use.fontawesome.com  https://amplify.outbrain.com  https://analytics.twitter.com  https://t.co  https://api.aituria.com  https://fonts.googleapis.com  https://llamamegratis.es  http://ad.doubleclick.net  https://static.addtoany.com  https://get663.com  http://148.153.18.0  https://px.ads.linkedin.com  https://atag.adgile.media  https://ekr.zdassets.com  https://charleskeithth.zendesk.com  https://q.clarity.ms  https://zendesk-eu.my.sentry.io  https://x.clarity.ms  https://p.clarity.ms  https://wa.onelink.me  https://sdk.iad-06.braze.com  https://wa.appsflyer.com  https://v.clarity.ms  https://t.clarity.ms  https://api.finemob.com  https://myip.duoduodev.com  https://api.vid-adblocker.com  https://ams.creativecdn.com  https://usizy.com  https://u.clarity.ms  https://b.clarity.ms  https://api.bigdatacloud.net  https://cdp.in.treasuredata.com  https://disclaimer-api.goadopt.io  https://api.socialsolutionapp.com  https://lb.eu-1-id5-sync.com  https://fonts.gstatic.com  https://aiqua-sdk.c.appier.net  https://analyticsgroupcom.bnpparibas.com  https://id5-sync.com  https://rp.liadm.com  https://tr.snapchat.com  https://s.clarity.ms;  worker-src 'self' blob:  data:;  media-src 'self' data:  https://updates.themepunch-ext-c.tools;  object-src 'self' https://static.issuu.com  https://www.tv3.cat  http://www.irtve.es;  report-uri https://fcarreras.org/en/wp-json/rsssl/v1/csp?rsssl_apitoken=844942300; 1
font-src https://www.googletagmanager.com *.googleapis.com *.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.google.com www.xtento.com js.mollie.com *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com *.googleapis.com bat.bing.com *.google.de *.google.com *.cookiebot.com *.promostore.de *.promostore.ch *.promostore.at *.promostore.nl *.pinkcube.de *.pinkcube.at *.hubspot.com www.facebook.com www.xtento.com cdn.xtento.com https://www.mollie.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com tagmanager.google.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.matelso.de *.cloudflare.com *.cloudflareinsights.com *.bing.com *.hotjar.com *.etracker.de *.etracker.com *.doofinder.com *.doubleclick.net *.clarity.ms *.cookiefirst.com *.trustpilot.com dt.promostore.de dt.promostore.ch dt.promostore.at dt.promostore.nl dt.pinkcube.de dt.pinkcube.at *.salesviewer.com *.salesviewer.org https://salesviewer.org *.hs-scripts.com *.hs-analytics.net *.hs-banner.com facebook.net connect.facebook.net www.facebook.com www.xtento.com cdn.xtento.com js.mollie.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com fonts.googleapis.com *.cloudflare.com *.doofinder.com *.cookiefirst.com www.facebook.com *.fontawesome.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://www.google-analytics.com *.googleapis.com *.hotjar.com *.clarity.ms *.matelso.de *.google.de *.google-analytics.com *.cloudflareinsights.com *.bing.com *.bing.net *.hotjar.io *.etracker.de *.etracker.com *.doofinder.com wss://*.doofinder.com *.doubleclick.net wss://*.hotjar.com *.cookiefirst.com *.trustpilot.com dt.promostore.de dt.promostore.ch dt.promostore.at dt.promostore.nl dt.pinkcube.de dt.pinkcube.at *.salesviewer.com *.salesviewer.org https://salesviewer.org *.hs-scripts.com *.hs-analytics.net *.hs-banner.com facebook.net connect.facebook.net www.facebook.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; default-src 'self' https://cdn.shopify.com https://shopify.com 'nonce-c80769758f41f7ce466b83705b8f7036'; frame-ancestors 'self'; style-src 'self' 'unsafe-inline' https://cdn.shopify.com; connect-src 'self' https://monorail-edge.shopifysvc.com https://checkout.vpo.ca https://my-vpo.myshopify.com 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com cash-f.squarecdn.com https://fonts.bunny.net/ *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.myfonts.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.twitter.com *.ngenius-payments.com/ *.newrelic.com/ *.nr-data.net/ 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.dotdigital-pages.com *.dotdigital.com *.ngenius-payments.com https://cdn.moengage.com/ *.twitter.com *.sagepay.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * *.trackedlink.net *.ddlnk.net *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.myfonts.net/count/3bd9db *.clarity.ms data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.ngenius-payments.com *.newrelic.com/ *.nr-data.net/ https://cdn.logrocket.io https://cdn.logr-ingest.com https://cdn.lr-ingest.io https://cdn.lr-in.com https://cdn.lr-in-prod.com https://cdn.lr-ingest.com https://cdn.ingest-lr.com https://cdn.lr-intake.com https://cdn.intake-lr.com https://www.googletagmanager.com tagmanager.google.com https://www.googleadservices.com https://cdn.moengage.com/ https://app-cdn.moengage.com/ https://moe-email-campaigns.s3.amazonaws.com/ https://image.moengage.com/ *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.myfonts.net *.clarity.ms https://www.i-d-s.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.myfonts.net/count/3bd9db https://cdn.moengage.com/ https://app-cdn.moengage.com/ https://fonts.bunny.net/ *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.getfirebug.com *.sagepay.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https://*.logrocket.io https://*.lr-ingest.io https://*.logrocket.com https://*.lr-in.com https://*.lr-in-prod.com https://*.lr-ingest.com https://*.ingest-lr.com https://*.lr-intake.com https://*.intake-lr.com https://*.logr-ingest.com https://sdk-01.moengage.com/ https://sdk-02.moengage.com/ https://sdk-03.moengage.com/ https://sdk-04.moengage.com/ *.cloudflare.com *.twitter.com *.twimg.com *.clarity.ms 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.avada.io assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com *.googleapis.com *.addtoany.com unsafe-inline 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://get.geojs.io *.avada.io http://dpm.demdex.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'unsafe-inline' 'self' https://payments.salesforce.com/ https://stats.g.doubleclick.net https://checkoutshopper-test.adyen.com/ https://pal-test.adyen.com https://fseonline.preview.salesforce-experience.com/resource/1620728203000/cookiecon__clientFingerprint/clientFingerprint/client.min.js https://fseonline--cookiecon.eu30.visual.force.com https://checkoutshopper-live.adyen.com/ https://fseonline--cookiecon.visualforce.com https://d.la11-core1.sfdc-3d0u2f.salesforceliveagent.com https://cdn.content.aws-prod1-useast1.aws.sfdc.cl/ https://www.fseonline.it/ https://d.la2-c1-fra.salesforceliveagent.com/chat/rest/Visitor/Availability.jsonp https://fseonline--cookiecon.visualforce.com/resource/1620728203000/cookiecon__cookieConsent https://pay.google.com https://www.gstatic.com/recaptcha/ https://uip.canary.lwc.dev https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/ https://d.la2-c1-fra.salesforceliveagent.com/chat/rest/EmbeddedService/EmbeddedServiceConfig.jsonp https://fseonline--cookiecon.visualforce.com/ https://fseonline.my.salesforce.com blob: https://www.google.com/recaptcha/ https://js.stripe.com/ https://www.fseonline.my.salesforce.com https://d.la1-core1.sfdc-3d0u2f.salesforceliveagent.com/chat/rest/ import: https://d.la2-c1-fra.salesforceliveagent.com/chat/rest/Visitor/Settings.jsonp *.salesforce.com https://www.paypal.com/sdk/js https://bs.serving-sys.com/ https://www.fseonline.it/resource/1652688815000/AgentAvatar 'report-sample' https://service.force.com/embeddedservice/ 'unsafe-eval'; report-to sfdc-csp-ep; report-uri https://fssudest.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D1t000000xIfD&networkId=0DM3Y000000ClNx&type=communities 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com https://cdnjs.cloudflare.com https://ct.pinterest.com/ https://static.hotjar.com/ https://*.hotjar.com/ https://*.hotjar.io/ https://web-modules-de-na1.niceincontact.com/ fonts.googleapis.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors https://h.online-metrix.net *.despegar.com *.koin.com.br *.googletagmanager.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https://h.online-metrix.net *.cardinalcommerce.com *.online-metrix.net https://www.google.com/pagead/ https://www.google.com.br/pagead/ https://apps.mypurecloud.com https://td.doubleclick.net https://event.getblue.io https://app-indecx.com https://ct.pinterest.com/ https://web-modules-de-na1.niceincontact.com/ https://h.online-metrix.net/* *.niceincontact.com *.despegar.com *.koin.com.br *.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com * https://plumrocket.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://h.online-metrix.net *.d.aa.online-metrix.net https://cdnjs.cloudflare.com https://res.cloudinary.com https://vlibras.gov.br https://www.vlibras.gov.br https://lumisfera.com.br https://cdn.cookielaw.org https://cdn.jsdelivr.net https://p.afilio.com.br https://bat.bing.com https://www.facebook.com/ https://static.hotjar.com/ https://*.hotjar.com/ https://*.hotjar.io/ *.adobedtm.com *.googleadservices.com www.google-analytics.com *.google.com analytics.google.com *.googletagmanager.com facebook.com.br/* https://connect.facebook.net/en_US/fbevents.js https://c.bing.com/ *.clarity.ms/ www.google.com/* www.google.com.br/* ct.pinterest.com/* edtrftdslumisferaprod.112.2o7.net https://*.niceincontact.com/* *.despegar.com *.koin.com.br fonts.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com beacon-qa.magento-datasolutions.com beacon-stage.magento-ds.com beacon.magento-ds.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page https://h.online-metrix.net *.cardinalcommerce.com *.online-metrix.net https://cdn.cookielaw.org https://cdn.jsdelivr.net https://vlibras.gov.br https://www.vlibras.gov.br *.mypurecloud.com https://surveydynamix.com https://cdn.mouseflow.com https://bat.bing.com https://analytics.tiktok.com https://event.getblue.io https://widget.getblue.io https://www.clarity.ms https://js.braintreegateway.com https://static.hotjar.com/ https://*.hotjar.com/ https://*.hotjar.io/ https://viacep.com.br/* https://*.sc.omtrdc.net/ https://*.facebook.net/ facebook.com.br/* https://*.adobedtm.com/ www.googleadservices.com.br *.google.com.br https://www.google.com/pagead/ https://www.google.com.br/pagead/ https://connect.facebook.net/en_US/fbevents.js https://s.pinimg.com https://ct.pinterest.com/* https://web-modules-de-na1.niceincontact.com https://cdnjs.cloudflare.com/ https://h.online-metrix.net/* *.cloudflareinsights.com unpkg.com *.despegar.com *.koin.com.br *.googletagmanager.com *.pagseguro.com.br *.pagseguro.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com https://cdnjs.cloudflare.com https://cdn-prod.securiti.ai https://cdn.cookielaw.org/* https://web-modules-de-na1.niceincontact.com *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net p13n.adobe.io *.adobedc.net *.demdex.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://h.online-metrix.net https://mpisandbox.braspag.com.br/v2/3ds/validate https://writer.cardinalcommerce.com/stag/log https://mpisandbox.braspag.com.br/v2/3ds/enroll https://centinelapistag.cardinalcommerce.com/V1/Order/JWT/Continue *.amazonaws.com *.braspag.com.br https://dev.visualwebsiteoptimizer.com https://cdn.cookielaw.org https://api-cdn.mypurecloud.com https://content.hotjar.io https://analytics.tiktok.com https://t.clarity.ms https://indecx.com https://geolocation.onetrust.com *.cardinalcommerce.com www.google-analytics.com www.googleadservices.com.br *.google.com.br www.googletagmanager.com.br wss://*.hotjar.com/ https://static.hotjar.com/ https://*.hotjar.com/ https://*.hotjar.io/ facebook.com.br/* https://connect.facebook.net/en_US/fbevents.js https://viacep.com.br https://stats.g.doubleclick.net/g/* *.clarity.ms/ https://ct.pinterest.com/* stats.g.doubleclick.net ct.pinterest.com https://vlibras.gov.br https://www.vlibras.gov.br bam.nr-data.net *.niceincontact.com *.despegar.com *.googletagmanager.com *.pagseguro.com.br *.pagseguro.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' s.clarity.ms commerce.adobedc.net app-de-na1.niceincontact.com chat-gw-de-na1.niceincontact.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.cloudflare.com *.bootstrapcdn.com celebrosnlp.com *.livechatinc.com https://static.zipmoney.com.au *.zipmoney.com.au *.zip.co *.fontawesome.com maxcdn.bootstrapcdn.com *.tiktok.com *.ttcdn-row.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors sandbox.zip.co 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://*.ewaypayments.com https://*.sandbox.ewaypayments.com https://magento2.avada.io/ my.reviewr.com.au https://reviewr.app/ https://www.reviewr.app/ https://vars.hotjar.com/ https://secure.livechatinc.com/ https://bid.g.doubleclick.net/ *.mouseflow.com https://cdn.mouseflow.com https://secure.ewaypayments.com *.ewaypayments.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.doofinder.com *.cloudflare.com *.google-analytics.com static.reviewmgr.com *.google.com *.google.co.in https://static.zipmoney.com.au *.livechatinc.com https://img.icons8.com/ https://bpi.zip.co https://cdn.livechat-files.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.tiktok.com *.ttcdn-row.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.doofinder.com https://*.ewaypayments.com https://*.sandbox.ewaypayments.com *.cloudflare.com *.twitter.com *.fontawesome.com *.googletagmanager.com *.google-analytics.com *.smartlook.com https://static.zipmoney.com.au *.reviewmgr.com *.cdn.livechatinc.com *.static.hotjar.com *.g.doubleclick.net *.my.reviewr.com.au *.livechatinc.com https://script.hotjar.com/ https://static.hotjar.com/ *.api.livechatinc.com *.mouseflow.com https://cdn.mouseflow.com https://secure.ewaypayments.com *.ewaypayments.com https://data.stats.tools *.clickcease.com https://www.clickcease.com https://js-agent.newrelic.com *.newrelic.com https://secure.studio19.com.au https://www.gstatic.com https://cdn.convertcart.com https://bzr.openai.com https://bzrcdn.openai.com/ https://www.googletagmanager.com/ https://www.merchant-center-analytics.goog/ *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.tiktok.com *.ttcdn-row.com *.bytedance.com analytics.tiktok.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.doofinder.com *.cloudflare.com *.fontawesome.com *.bootstrapcdn.com https://bpi.zip.co maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com *.tiktok.com *.ttcdn-row.com 'self' 'unsafe-inline'; object-src *.tiktok.com 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.doofinder.com wss://*.doofinder.com *.cloudflare.com https://stats.g.doubleclick.net/ *.hotjar.com https://manager.eu.smartlook.cloud https://api.zipmoney.com.au/ *.zip.co *.livechatinc.com https://bam.nr-data.net/ https://www.grade.us https://secure.studio19.com.au https://www.merchant-center-analytics.* *.convertcart.com https://bzr.openai.com https://ad.doubleclick.net https://bzrcdn.openai.com/ https://www.googletagmanager.com/ https://www.merchant-center-analytics.goog/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com analytics.tiktok.com business-api.tiktok.com *.ttcdn-row.com *.bytedance.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' https:; connect-src 'self' https://www.google-analytics.com; frame-src https://www.youtube.com; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com cash-f.squarecdn.com *.googleapis.com data: https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com *.braintreegateway.com *.paypal.com google.com *.google.com * c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com www.google.com *.certcapture.com www.youtube.com *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.certcapture.com *.saint-louis.com *.ytimg.com *.google.fr *.cookielaw.org magefan.com cm.magefan.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.googleapis.com www.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.certcapture.com *.cookielaw.org *.facebook.net sibautomation.com *.pinimg.com *.clarity.ms *.brevo.com *.pinterest.com https://cdnjs.cloudflare.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app assets.braintreegateway.com *.certcapture.com https://fonts.googleapis.com https://cdnjs.cloudflare.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.certcapture.com *.cookielaw.org *.onetrust.com *.google.fr *.db-ip.com in-automate.brevo.com ct.pinterest.com i.clarity.ms www.merchant-center-analytics.goog https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; manifest-src 'self'; media-src 'self'; worker-src 'none'; form-action 'self'; img-src 'self' data: https://gldb.wpenginepowered.com http://gldb.wpenginepowered.com https://gldb.wpenginepowered.com:10058 http://gldb.wpenginepowered.com:10058 https://gldb.wpenginepowered.com https://img-sg.sobot.io https://imgsct.cookiebot.com; font-src 'self' data: https://gldb.wpenginepowered.com http://gldb.wpenginepowered.com https://gldb.wpenginepowered.com:10058 http://gldb.wpenginepowered.com:10058; style-src 'report-sample' 'self' 'unsafe-inline'; script-src 'report-sample' 'self' 'unsafe-inline' https://consent.cookiebot.com https://challenges.cloudflare.com/turnstile/v0/api.js https://sg.sobot.com/chat/frame/v6/entrance.js https://www.googletagmanager.com/gtag/js; script-src-elem 'self' 'unsafe-inline' https://consent.cookiebot.com https://consentcdn.cookiebot.com https://challenges.cloudflare.com https://sg.sobot.com https://www.googletagmanager.com; frame-src 'self' https://challenges.cloudflare.com https://sg.sobot.com https://consentcdn.cookiebot.com; connect-src 'self' https://gldb.wpenginepowered.com http://gldb.wpenginepowered.com https://gldb.wpenginepowered.com:10058 http://gldb.wpenginepowered.com:10058 https://gldb.wpenginepowered.com https://region1.google-analytics.com https://sessions.bugsnag.com https://sg.sobot.com wss://ws-mt1.pusher.com https://consentcdn.cookiebot.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https:; frame-ancestors 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; frame-src https://www.youtube-nocookie.com; connect-src 'self'; font-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; form-action 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cdn.quilljs.com https://kit.fontawesome.com https://scaleflex.cloudimg.io https://www.googletagmanager.com https://connect.facebook.net https://js.stripe.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdn.quilljs.com https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://kit.fontawesome.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net data:; img-src 'self' data: blob: https:; frame-src https://www.youtube.com https://youtube.com https://*.stripe.com; connect-src 'self' https://api.stripe.com https://www.googletagmanager.com; object-src 'none'; base-uri 'self'; frame-ancestors 'none' 1
frame-ancestors 'self'; report-uri https://www.dailytelegraph.com.au/csp-reports 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://maxcdn.bootstrapcdn.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net *.bootstrapcdn.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.twitter.com *.consensu.org *.sharethis.com *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io http://themes.magesolution.com https://moosendimages.imgix.net https://cdn.designer-images.net *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.sharethis.com https://firebasestorage.googleapis.com https://www.magezon.com *.designer-images.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://devdocs.magento.com https://unpkg.com https://static.addtoany.com https://graph.facebook.com https://widgets.pinterest.com https://api.tumblr.com *.stat-track.com https://polyfill.io *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.trackedlink.net *.google.com/ *.sharethis.com *.avada.io *.shopify.com polyfill.io *.moosend.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://maxcdn.bootstrapcdn.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://fonts.bunny.net *.moosend.com *.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://forms.m-pages.com https://form.m-pages.com https://t.stat-track.com *.cloudflare.com *.twitter.com *.twimg.com *.googleadservices.com *.google-analytics.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org *.sharethis.com https://get.geojs.io *.avada.io *.stat-track.com *.m-pages.com *.m-operations.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-v-dUuh7rar8lZkozNm04VA' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://s.w.org https://widget.cloudpayments.ru https://cdn.cloudpayments.ru https://mc.yandex.ru https://connect.facebook.net https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https://secure.gravatar.com https://storage.googleapis.com https://www.facebook.com https://mc.yandex.ru https://*.cloudpayments.ru; connect-src 'self' https://api.cloudpayments.ru https://mc.yandex.ru https://www.facebook.com; frame-src 'self' https://widget.cloudpayments.ru https://cdn.cloudpayments.ru https://play.google.com https://www.google.com; frame-ancestors 'self'; base-uri 'self'; object-src 'none' 1
font-src maxcdn.bootstrapcdn.com *.oct8ne.com fonts.gstatic.com *.azureedge.net *.doofinder.com *.typekit.net *.googleapis.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com *.storyblok.com 'self'; frame-src *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.facebook.com platform.twitter.com *.multisafepay.com https://pay.google.com *.oct8ne.com www.googletagmanager.com *.hotjar.com *.pinterest.com *.doofinder.com *.empathybroker.com *.empathy.co *.criteo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.doofinder.com cdn.flbx.io *.cloudfront.net https://images.unsplash.com *.equalweb.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com *.multisafepay.com *.oct8ne.com www.googletagmanager.com *.facebook.com *.google.com *.google.es widgets.trustedshops.com *.twitter.com t.co *.azureedge.net *.pinterest.com *.bing.com *.storyblok.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.doofinder.com *.getflowbox.com https://maps.googleapis.com *.equalweb.com connect.facebook.net twitter.com platform.twitter.com *.multisafepay.com https://pay.google.com *.oct8ne.com www.googletagmanager.com *.googleoptimize.com widgets.trustedshops.com static-eu.oct8ne.com static.zdassets.com *.facebook.net *.tradedoubler.com *.doubleclick.net *.hotjar.com *.ads-twitter.com smct.co *.bsmartdata.com *.retargeted.co *.bing.com *.clarity.ms *.smartsuppcdn.com *.smartsuppchat.com *.smartsupp.com *.connectif.cloud *.klaviyo.com *.photoslurp.com *.pinimg.com *.nosto.com *.empathybroker.com *.unpkg.com *.storyblok.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.doofinder.com maxcdn.bootstrapcdn.com *.multisafepay.com *.photoslurp.com *.nosto.com *.klaviyo.com *.typekit.net *.storyblok.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.storyblok.com *.zdassets.com *.doofinder.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.doofinder.com wss://*.doofinder.com *.getflowbox.com https://maps.googleapis.com https://player.vimeo.com *.equalweb.com *.multisafepay.com *.oct8ne.com www.googletagmanager.com *.zendesk.com *.zopim.com *.doubleclick.net *.hotjar.com *.hotjar.io *.clarity.ms *.smartsuppcdn.com *.googleapis.com *.gstatic.com *.google-analytics.com *.google.es *.connectif.cloud *.klaviyo.com *.photoslurp.com *.zdassets.com *.pinterest.com *.nosto.com *.empathybroker.com *.empathy.co 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src https://square-fonts-production-f.squarecdn.com/ https://d1g145x70srn7h.cloudfront.net/ https://cash-f.squarecdn.com/ https://fonts.gstatic.com/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://www.google.com https://www.paypal.com https://ekr.zdassets.com https://www.ups.com https://www.fedex.com https://www.dhl.com https://pci-connect.squareup.com https://connect.squareup.com https://pci-connect.squareupsandbox.com https://connect.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://www.googleadservices.com https://m.media-amazon.com https://images-na.ssl-images-amazon.com https://www.paypalobjects.com https://ekr.zdassets.com https://www.ups.com https://www.fedex.com https://www.dhl.com https://www.gstatic.com/ https://sandbox.api.cash.app/ https://site-assets.afterpay.com/ https://sandbox.web.squarecdn.com/ https://api.cash.app/ https://web.squarecdn.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://franklin-assets.s3.amazonaws.com/ https://static.sandbox.afterpay.com/ https://static.afterpay.com/ https://static.sandbox.afterpay.com/logo/ data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.paypal.com https://www.paypalobjects.com https://t.paypal.com https://static-na.payments-amazon.com https://static.zdassets.com https://ekr.zdassets.com https://js-sandbox.squarecdn.com https://js.squareup.com https://js.afterpay.com/ https://nd.squarecdn.com https://js.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://portal.sandbox.afterpay.com/ https://portal.afterpay.com/ https://cdn.plaid.com/ https://sandbox.kit.cash.app/ https://kit.cash.app/ https://js-sandbox.squarecdn.com/ https://js.squarecdn.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://www.gstatic.com https://fonts.googleapis.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://fonts.googleapis.com/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src https://static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://www.googleadservices.com https://www.paypal.com https://apay-us.amazon.com https://static-na.payments-amazon.com https://ekr.zdassets.com https://static.zdassets.com https://beaglesoft.zendesk.com https://onlinetools.ups.com https://www.ups.com https://wwwcie.ups.com https://apis.fedex.com https://apis-sandbox.fedex.com https://xmlpi-ea.dhl.com https://www.dhl.com https://pci-connect.squareup.com https://pci-connect.squareupsandbox.com https://api.amplitude.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://o160250.ingest.sentry.io/ https://api.lab.amplitude.com/sdk/vardata https://sandbox.plaid.com/ https://production.plaid.com/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; connect-src 'self' https:; frame-src https:; font-src 'self' https: 1
font-src fonts.gstatic.com use.typekit.net *.fontawesome.com https://fonts.bunny.net *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com www.chatbase.co *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.ftcdn.net *.behance.net https://firebasestorage.googleapis.com https://* www.chatbase.co analytics.tiktok.com connect.facebook.net *.doubleclick.net *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://rum.hlx.page *.avada.io *.shopify.com www.chatbase.co analytics.tiktok.com *.tiktok.com connect.facebook.net *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io https://get.geojs.io *.avada.io www.chatbase.co analytics.tiktok.com *.tiktok.com *.tiktokw.us connect.facebook.net analytics.google.com www.google.com stats.g.doubleclick.net *.doubleclick.net *.yotpo.com mpc2-prod-26-is5qnl632q-uc.a.run.app *.run.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
img-src https://higherlogicdownload.s3.amazonaws.com/AECT/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/AECT/ https://img.youtube.com/vi/ https://static.filestackapi.com/picker/ https://d2x5ku95bkycr3.cloudfront.net https://higherlogiclongterm.s3.amazonaws.com/AECT/ blob: https://d132x6oi8ychic.cloudfront.net 'self'; style-src https://d132x6oi8ychic.cloudfront.net 'unsafe-inline' https://higherlogiccloudfront.s3.amazonaws.com https://cdn.jsdelivr.net/jquery.slick/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://d2x5ku95bkycr3.cloudfront.net/ https://ajax.googleapis.com/ajax/libs/jqueryui/ https://use.fortawesome.com/ https://cdn.higherlogic.com/ai-assistant https://static.filestackapi.com/picker/ https://fonts.googleapis.com/ https://d3uf7shreuzboy.cloudfront.net/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/AECT/ https://higherlogicdownload.s3.amazonaws.com/AECT/ https://higherlogiclongterm.s3.amazonaws.com/AECT/ 'self'; font-src https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogiccloudfront.s3.amazonaws.com https://higherlogicdownload.s3.amazonaws.com/AECT/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/AECT/ 'self' https://higherlogiclongterm.s3.amazonaws.com/AECT/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://d2x5ku95bkycr3.cloudfront.net https://d132x6oi8ychic.cloudfront.net data:; script-src-elem https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d3uf7shreuzboy.cloudfront.net/ https://static.filestackapi.com/picker/ https://cdn.higherlogic.com/ai-assistant https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d2x5ku95bkycr3.cloudfront.net/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://www.gstatic.com/recaptcha/ https://static.filestackapi.com/filestack-js/ 'self' https://ajax.aspnetcdn.com/ajax/ 'unsafe-eval' 'unsafe-inline'; media-src https://higherlogiclongterm.s3.amazonaws.com/AECT/ https://higherlogicdownload.s3.amazonaws.com/AECT/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/AECT/ https://higherlogicstream.s3.amazonaws.com/AECT/ 'self' https://d132x6oi8ychic.cloudfront.net; script-src https://higherlogiclongterm.s3.amazonaws.com/AECT/ https://higherlogicdownload.s3.amazonaws.com/AECT/ https://ajax.aspnetcdn.com/ajax/ https://cdn.jsdelivr.net/jquery.slick/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d132x6oi8ychic.cloudfront.net https://cdn.informz.net 'unsafe-eval' https://use.fortawesome.com/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/AECT/ https://cdnjs.cloudflare.com/ajax/libs/prism/ 'unsafe-inline' https://d2x5ku95bkycr3.cloudfront.net/ https://higherlogiccloudfront.s3.amazonaws.com https://static.filestackapi.com https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d3uf7shreuzboy.cloudfront.net/ 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://api.connectedcommunity.org/ 'self' https://www.youtube.com/embed/ https://*.kb.us.higherlogic.com; connect-src https://upload.filestackapi.com https://static.filestackapi.com https://cloud.filestackapi.com/folder/list/ 'self' https://hl-managedservices.informz.net https://d3uf7shreuzboy.cloudfront.net/ blob:; worker-src 'self'; default-src 'self'; base-uri 'self'; frame-ancestors https://*.connectedcommunity.org/ 'self'; object-src 'none'; manifest-src 'self'; 1
object-src 'none';base-uri 'self';script-src 'nonce-AMZHZHLyHqUVG6Kx0xIzHQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-CvYwxP8s2YsKftWwCRIDgQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src  'none'; connect-src 'self' *.nurumassage.com *.fantasymassage.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.nurumassage.com *.fantasymassage.com join.gammasecure.com; script-src 'self' *.nurumassage.com *.fantasymassage.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.nurumassage.com *.fantasymassage.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
default-src 'self';      script-src 'self' 'unsafe-inline' 'unsafe-eval';      style-src 'self' 'unsafe-inline';      img-src 'self';      font-src 'self';      connect-src 'self';      frame-src 'self';      media-src 'self'; 1
style-src https://*.volunteer.gov *.force.com https://touchpoints.app.cloud.gov https://api.ipify.org 'unsafe-inline' https://*.forceusercontent.com 'self' https://fonts.googleapis.com/css2 https://checkoutshopper-test.adyen.com/ blob: https://fonts.googleapis.com/css https://*.salesforce.com https://cg-1b082c1b-3db7-477f-9ca5-bd51a786b41e.s3-us-gov-west-1.amazonaws.com https://designsystem.digital.gov https://volunteer.gov https://checkoutshopper-live.adyen.com/ *.salesforce.com https://*.force.com *.visualforce.com:* https://service.force.com/embeddedservice/; report-to sfdc-csp-ep; report-uri https://doinps-vol.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00Dt0000000CmX4&networkId=0DMt0000000Cam6&type=communities 1
report-uri /csp-report;base-uri 'self';default-src 'self';child-src blob:;connect-src 'self' https://flex-api.sharetribe.com undefined *.st-api.com maps.googleapis.com *.tiles.mapbox.com api.mapbox.com events.mapbox.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com *.googlesyndication.com googleads.g.doubleclick.net adservice.google.com plausible.io *.plausible.io fonts.googleapis.com sentry.io *.sentry.io *.stripe.com *.youtube.com www.youtube.com youtube.com *.ytimg.com *.youtube-nocookie.com www.youtube-nocookie.com youtube-nocookie.com *.googlevideo.com bowtacklemedia.s3.amazonaws.com https://d3fwer2wvuve2d.cloudfront.net d3fwer2wvuve2d.cloudfront.net intercom.io *.intercom.io intercomcdn.com *.intercomcdn.com https://nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-b.intercom.io https://nexus-europe-websocket.intercom.io  wss://nexus-europe-websocket.intercom.io  https://nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io  https://*.intercom-messenger.com wss://*.intercom-messenger.com https://uploads.intercomusercontent.com analytics.google.com;font-src 'self' data: assets-sharetribecom.sharetribe.com fonts.gstatic.com intercom.io *.intercom.io intercomcdn.com *.intercomcdn.com;form-action 'self' intercom.io *.intercom.io intercomcdn.com *.intercomcdn.com https://intercom.help;frame-src 'self' sites.bowtackle.com *.stripe.com *.youtube-nocookie.com *.youtube.com *.google.com https://mozbar.moz.com/ mozbar.moz.com intercom.io *.intercom.io intercomcdn.com *.intercomcdn.com https://intercom-sheets.com https://www.intercom-reporting.com https://player.vimeo.com https://fast.wistia.net www.googletagmanager.com *.googletagmanager.com pagead2.googlesyndication.com *.googlesyndication.com googleads.g.doubleclick.net tpc.googlesyndication.com;img-src 'self' data: blob: *.imgix.net sharetribe.imgix.net picsum.photos *.picsum.photos api.mapbox.com maps.googleapis.com *.gstatic.com *.googleapis.com *.ggpht.com *.giphy.com www.googletagmanager.com www.google.com www.google-analytics.com stats.g.doubleclick.net pagead2.googlesyndication.com *.googlesyndication.com googleads.g.doubleclick.net *.ytimg.com *.youtube.com *.youtube-nocookie.com www.youtube-nocookie.com play.google.com *.stripe.com shippo-static.s3.amazonaws.com bowtacklemedia.s3.amazonaws.com d3fwer2wvuve2d.cloudfront.net https://d3fwer2wvuve2d.cloudfront.net intercom.io *.intercom.io intercomcdn.com *.intercomcdn.com https://static.intercomassets.com https://uploads.intercomusercontent.com https://*.intercom-attachments-1.com https://*.intercom-attachments-2.com https://*.intercom-attachments-3.com https://*.intercom-attachments-4.com https://*.intercom-attachments-5.com https://*.intercom-attachments-6.com https://*.intercom-attachments-7.com https://*.intercom-attachments-8.com https://*.intercom-attachments-9.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' data: maps.googleapis.com api.mapbox.com www.googletagmanager.com *.google-analytics.com js.stripe.com plausible.io pagead2.googlesyndication.com *.googlesyndication.com adservice.google.com *.youtube.com www.youtube.com youtube.com *.ytimg.com *.youtube-nocookie.com www.youtube-nocookie.com youtube-nocookie.com *.googlevideo.com intercom.io *.intercom.io intercomcdn.com *.intercomcdn.com;style-src 'self' 'unsafe-inline' fonts.googleapis.com api.mapbox.com intercom.io *.intercom.io intercomcdn.com *.intercomcdn.com;media-src 'self' bowtacklemedia.s3.amazonaws.com d3fwer2wvuve2d.cloudfront.net https://d3fwer2wvuve2d.cloudfront.net *.youtube.com www.youtube.com *.youtube-nocookie.com www.youtube-nocookie.com *.googlevideo.com intercom.io *.intercom.io intercomcdn.com *.intercomcdn.com;frame-ancestors 'self' *.carbono.tech *.a1archery.com *.willowcreekarchery.com willowcreekarchery.com 1
default-src 'self'; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com; img-src 'self' https: data:; style-src 'self' 'unsafe-inline' https:; font-src 'self' https: data:; frame-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; upgrade-insecure-requests; report-uri https://evolutionhealth.care/csp-report.php; 1
object-src 'none';base-uri 'self';script-src 'nonce-Z0kf73dEoCk-gDAXyvu-SA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src * 'unsafe-inline' 'unsafe-eval' data: blob:; object-src 'none'; base-uri 'self'; frame-ancestors *; report-uri /csp-report 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.snapchat.com www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.demdex.net/ www.facebook.com platform.twitter.com tst.kaptcha.com c.sandbox.paypal.com *.tieks.com *.snapchat.com *.doubleclick.net *.pinterest.com ssl.kaptcha.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com * data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com https://rum.hlx.page https://*.taboola.com https://*.linkedin.com https://*.licdn.com https://*.reddit.com https://*.redditstatic.com https://*.attentivemobile.com https://*.attn.tv https://metrics.tieks.com https://*.clarity.ms https://*.quora.com https://*.bing.net *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com z.moatads.com platform.twitter.com static.zdassets.com *.zopim.com *.facebook.net *.pinimg.com *.yimg.com sc-static.net *.ads-twitter.com *.doubleclick.net *.newrelic.com *.nr-data.net *.adobedtm.com *.queue-it.net *.bing.com *.tiktok.com *.snapchat.com *.pinterest.com unpkg.com *.equalweb.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com unsafe-inline assets.braintreegateway.com unpkg.com access.equalweb.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com tieks.com *.tieks.com static.zdassets.com *.rackcdn.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://*.taboola.com https://*.linkedin.com https://*.licdn.com https://*.reddit.com https://*.redditstatic.com https://*.attentivemobile.com https://*.attn.tv https://metrics.tieks.com https://*.clarity.ms https://*.quora.com https://*.bing.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com wss://widget-mediator.zopim.com/ *.zendesk.com *.zdassets.com *.tieks.com maps.googleapis.com *.yimg.com *.pinterest.com *.snapchat.com *.doubleclick.net *.nr-data.net www.facebook.com bat.bing.com *.tiktok.com pagead2.googlesyndication.com *.google-analytics.com analytics.pangle-ads.com *.equalweb.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-lGm8aLxK8hw5JoT6OEXy/g==' 'strict-dynamic' https: 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data:; font-src 'self' https: data:; connect-src 'self' https:; frame-src https:; form-action 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /csp-report.php; report-to csp-endpoint 1
default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self' https://api.hsforms.com; script-src 'self' 'unsafe-inline' https://www.ketch.com https://global.ketchcdn.com https://clients.abmatic.ai https://js.hsforms.net https://ketch.chilipiper.com https://fast.wistia.com https://fast.wistia.net https://js.zi-scripts.com https://ws.zoominfo.com https://tags.clickagy.com https://script.getbreakout.ai https://assets.apollo.io https://*.clearbit.com https://*.clearbitscripts.com https://*.clearbitjs.com https://cdn.heapanalytics.com https://heapanalytics.com https://tracking.g2crowd.com https://js.hs-scripts.com https://js.hs-analytics.net https://js.hsadspixel.net https://static.hotjar.com https://script.hotjar.com https://connect.facebook.net https://snap.licdn.com https://bzrcdn.openai.com; style-src 'self' 'unsafe-inline' https://fast.wistia.com https://fast.wistia.net https://static.hotjar.com https://script.hotjar.com; img-src 'self' data: blob: https://cdn.sanity.io https://www.g2.com https://fast.wistia.com https://fast.wistia.net https://embed-ssl.wistia.com https://*.wistia.com https://*.wistia.net https://i.ytimg.com https://heapanalytics.com https://static.hotjar.com https://script.hotjar.com https://survey-images.hotjar.com https://www.facebook.com https://px.ads.linkedin.com https://bzr.openai.com; font-src 'self' data: https://fast.wistia.com https://fast.wistia.net https://static.hotjar.com https://script.hotjar.com; connect-src 'self' https://cdn.sanity.io https://*.api.sanity.io https://api.hsforms.com https://global.ketchcdn.com https://clients.abmatic.ai https://www.ketch.com https://ketch.chilipiper.com https://fast.wistia.com https://fast.wistia.net https://*.wistia.com https://*.wistia.net https://www.g2.com https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://capi-automation.s3.us-east-2.amazonaws.com https://aorta.clickagy.com https://hemsync.clickagy.com https://js.zi-scripts.com https://ws.zoominfo.com https://*.clearbit.com https://*.clearbitscripts.com https://*.clearbitjs.com https://heapanalytics.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://www.facebook.com https://px.ads.linkedin.com https://bzr.openai.com https://*.hubapi.com https://*.hscollectedforms.net https://*.hsleadflows.net https://*.usemessages.com https://*.hs-banner.com; frame-src 'self' https://*.navattic.com https://www.g2.com https://fast.wistia.com https://fast.wistia.net https://*.wistia.com https://*.wistia.net https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://js.hsforms.net https://forms.hsforms.com https://ketch.chilipiper.com https://hemsync.clickagy.com https://www.googletagmanager.com https://*.hotjar.com; media-src 'self' blob: https://fast.wistia.com https://fast.wistia.net https://*.wistia.com https://*.wistia.net; worker-src 'self' blob:; report-to csp-endpoint; report-uri /api/csp-report 1
font-src *.adobedtm.com *.cookiebot.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.awin1.com *.zenaps.com *.fls.doubleclick.net https://www.googletagmanager.com/ *.google.com/ *.google.com https://plumrocket.com test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.awin1.com *.zenaps.com *.adobedtm.com *.cookiebot.com cembrapay.ch ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.googletagmanager.com https://www.magezon.com test.saferpay.com www.saferpay.com saferpay.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.awin1.com www.dwin1.com *.zenaps.com https://the.sciencebehindecommerce.com *.google-analytics.com *.googletagmanager.com *.cookiebot.com upstream.heidipay.com sbx-upstream.heidipay.io chimpstatic.com downloads.mailchimp.com *.list-manage.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io *.google.com/ *.google.com * test.saferpay.com www.saferpay.com saferpay.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com *.adobedtm.com *.cookiebot.com downloads.mailchimp.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://the.sciencebehindecommerce.com *.doubleclick.net *.google-analytics.com *.cookiebot.com upstream.heidipay.com sbx-upstream.heidipay.io http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io * test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src *.adobedtm.com *.google.com *.cookiebot.com test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data: https:; media-src 'self' https:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; script-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-src https://www.youtube.com https://www.youtube-nocookie.com; upgrade-insecure-requests 1
default-src 'self' https://cdn.ampproject.org https://snap.licdn.com https://www.youtube.com *.youtube.com *.google-analytics.com https://www.googletagmanager.com https://consent.bumble.com *.typeform.com *.doubleclick.net *.taboola.com; script-src 'self' 'unsafe-inline' 'report-sample' 'nonce-qzNIOyH1dhtXua9b/pZPug==' https://cdn.ampproject.org https://snap.licdn.com https://www.youtube.com *.youtube.com *.google-analytics.com https://www.googletagmanager.com https://consent.bumble.com *.typeform.com *.doubleclick.net *.taboola.com; style-src 'self' 'unsafe-inline' *.typeform.com; connect-src 'self' https://cdn.ampproject.org https://consent.bumble.com https://www.googletagmanager.com *.google-analytics.com *.analytics.google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com/pagead *.googlesyndication.com *.typeform.com *.typeformcdn.com; child-src 'self'; font-src 'self' data:; manifest-src 'self'; base-uri 'self'; frame-src 'self' https://cdn.ampproject.org https://snap.licdn.com https://www.youtube.com *.youtube.com *.google-analytics.com https://www.googletagmanager.com https://consent.bumble.com *.typeform.com *.doubleclick.net *.taboola.com; img-src * data: blob: www.googletagmanager.com; media-src * data: blob:; report-uri /jss/csp_report.phtml?token=bumble_team_site&env=production; 1
object-src 'none';base-uri 'self';script-src 'nonce-12cp8o66CT_ZqxO4oUn8Pg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net https://square-fonts-production-f.squarecdn.com/ https://d1g145x70srn7h.cloudfront.net/ https://cash-f.squarecdn.com/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.facebook.net https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.affirm.com *.affirm.ca *.facebook.com *.facebook.net *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.googletagmanager.com https://pci-connect.squareup.com https://connect.squareup.com https://pci-connect.squareupsandbox.com https://connect.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.affirm.com *.affirm.ca magefan.com cm.magefan.com *.facebook.com *.facebook.net *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.doubleclick.net *.googletagmanager.com https://firebasestorage.googleapis.com https://www.gstatic.com/ https://sandbox.api.cash.app/ https://site-assets.afterpay.com/ https://sandbox.web.squarecdn.com/ https://api.cash.app/ https://web.squarecdn.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://franklin-assets.s3.amazonaws.com/ https://static.sandbox.afterpay.com/ https://static.afterpay.com/ https://static.sandbox.afterpay.com/logo/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com *.affirm.com *.affirm.ca *.facebook.com *.facebook.net *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.googletagmanager.com *.doubleclick.net *.avada.io https://js.squareup.com https://js.afterpay.com/ https://nd.squarecdn.com https://js.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://portal.sandbox.afterpay.com/ https://portal.afterpay.com/ https://cdn.plaid.com/ https://sandbox.kit.cash.app/ https://kit.cash.app/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.googleapis.com *.googletagmanager.com *.fontawesome.com https://fonts.bunny.net https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://fonts.googleapis.com/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.affirm.com *.affirm.ca *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com https://get.geojs.io *.avada.io https://pci-connect.squareup.com https://pci-connect.squareupsandbox.com https://api.amplitude.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://o160250.ingest.sentry.io/ https://api.lab.amplitude.com/sdk/vardata https://sandbox.plaid.com/ https://production.plaid.com/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.klaviyo.com *.heyflow.cloud *.prd.heyflow.com *.reviews.io *.fontawesome.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.storyblok.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://www.googletagmanager.com/ js.mollie.com www.youtube.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://images.unsplash.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ bat.bing.com bat.bing.net *.reviews.io *.7days.de *.storyblok.com https://*.usercentrics.eu https://userlike-cdn-operators.userlike.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com https://www.mollie.com *.hsforms.net *.hsforms.com 'self' data: *.adobedtm.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://maps.googleapis.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://*.usercentrics.eu https://js-eu1.hsforms.net/forms/embed/v2.js bat.bing.com bat.bing.net *.cloudfront.net *.prd.heyflow.com *.reviews.io *.clarity.ms *.abtasty.com *.storyblok.com https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://userlike-cdn-umm.b-cdn.net https://api.userlike.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.mollie.com pay.google.com applepay.cdn-apple.com *.hsforms.net *.hsforms.com *.gstatic.com www.youtube.com player.vimeo.com cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.typekit.net *.heyflow.cloud *.prd.heyflow.com *.reviews.io *.storyblok.com https://static.klaviyo.com *.fontawesome.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.storyblok.com *.amazonaws.com *.googleapis.com *.google.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://maps.googleapis.com https://player.vimeo.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ bat.bing.com bat.bing.net *.execute-api.eu-central-1.amazonaws.com *.clarity.ms *.abtasty.com *.reviews.io https://*.usercentrics.eu https://userlike-cdn-widgets.s3-eu-west-1.amazonaws.com https://api.userlike.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com cdn.plyr.io noembed.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://4b389dcc-7b01-4225-801a-74fac70c5da1.sansec.watch/; report-to report-endpoint; 1
font-src *.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.fontawesome.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; img-src 'self' https: data: image/*; frame-ancestors 'self' *.sunrise.ch; frame-src https: mailto:; connect-src https: wss: data:; font-src https: data:; media-src 'self' https:; worker-src blob:; report-uri https://www.sunrise.ch/csp-collector 1
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/translate_google 1
base-uri 'self'; default-src 'none'; child-src; connect-src 'self' https://rec.smartlook.com http://rec.smartlook.com rec.smartlook.com; font-src 'self' https://fonts.gstatic.com http://fonts.gstatic.com fonts.gstatic.com https://use.typekit.net http://use.typekit.net use.typekit.net data:; form-action 'self' https://*.twitter.com http://*.twitter.com *.twitter.com; frame-ancestors 'none'; frame-src https://youtube.com http://youtube.com youtube.com https://*.twitter.com http://*.twitter.com *.twitter.com https://*.doubleclick.net http://*.doubleclick.net *.doubleclick.net; img-src 'self' https://www.google-analytics.com http://www.google-analytics.com www.google-analytics.com https://www.google.com http://www.google.com www.google.com https://www.google.co.uk http://www.google.co.uk www.google.co.uk blob: data:; media-src https://youtube.com http://youtube.com youtube.com; object-src 'none'; manifest-src 'self'; script-src 'self' https://www.googletagmanager.com http://www.googletagmanager.com www.googletagmanager.com https://www.google-analytics.com http://www.google-analytics.com www.google-analytics.com https://www.googleadservices.com http://www.googleadservices.com www.googleadservices.com https://*.googleapis.com http://*.googleapis.com *.googleapis.com https://*.doubleclick.net http://*.doubleclick.net *.doubleclick.net https://static.cloudflareinsights.com http://static.cloudflareinsights.com static.cloudflareinsights.com 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://*.typekit.net http://*.typekit.net *.typekit.net https://*.googleapis.com http://*.googleapis.com *.googleapis.com 'unsafe-inline'; report-to csp-endpoint 1
font-src fonts.gstatic.com use.typekit.net *.cloudflare.com *.typekit.net *.trustedshops.com *.klarnacdn.net *.fontawesome.com maxcdn.bootstrapcdn.com *.fonts.googleapis.com *.gstatic.com data: 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.syfpos.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.affirm.com *.affirm.ca *.klarna.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.google.com *.addthis.com *.pinterest.com syf.demdex.net *.syfpos.com *.syf.com *.trustpilot.com landofcoder.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net *.affirm.com *.affirm.ca *.cloudflare.com https://cdn.klarna.com *.syfpayments.com *.paypal.com https://s.ytimg.com *.usercentrics.eu yt3.ggpht.com cdn.files-text.com raw.githubusercontent.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.gstatic.com *.googleapis.com magefan.com cm.magefan.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://redchamps.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.addthis.com *.pinterest.com *.cdninstagram.com *.hsforms.net *.hsforms.com 'self' data: *.syfpos.com *.syf.com analytics.synchrony.com *.d1.sc.omtrdc.net *.mysynchrony.com *.facebook.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com *.affirm.com *.affirm.ca *.cloudflare.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.pitbullaudio.com *.livechatinc.com *.recapture.io *.syfpayments.com *.elfsight.com stats.g.doubleclick.net *.braintree-api.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maps.googleapis.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://cdn.recapture.io *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com *.syfpos.com analytics.synchrony.com *.mysynchrony.com *.syf.com *.tiqcdn.com *.trustpilot.com landofcoder.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com https://cdn-scripts.signifyd.com https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.cloudflare.com stats.g.doubleclick.net *.typekit.net *.trustedshops.com *.usercentrics.eu *.syfpayments.com *.klarnacdn.net https://static.klaviyo.com *.gstatic.com *.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com *.syfpos.com *.trustpilot.com tagmanager.google.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io *.affirm.com *.affirm.ca *.cloudflare.com stats.g.doubleclick.net *.paypal.com *.elfsight.com *.livechatinc.com *.syfpayments.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maps.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google.com google.com https://app.recapture.io *.googleapis.com *.addthis.com https://graph.instagram.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.syfpos.com *.syf.com *.d1.sc.omtrdc.net landofcoder.com *.facebook.net https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; img-src 'self' data: blob: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https: wss:; frame-src 'self' https:; worker-src 'self' blob: 1
font-src *.fontawesome.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.yotpo.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://seo.mageplaza.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self' 'unsafe-inline'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de cdn.dnky.co webchat.dotdigital.com *.google.com/ https://www.youtube.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.facebook.com https://www.magezon.com *.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com js.authorize.net jstest.authorize.net js.braintreegateway.com cdn-scripts.signifyd.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net cdn.dnky.co api.comapi.com webchat.dotdigital.com s7.addthis.com *.googletagmanager.com *.facebook.net *.google.com/ *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net api.comapi.com webchat.dotdigital.com ekr.zdassets.com/ *.google-analytics.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.yotpo.com 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.hubspot.com https://*.hsappstatic.net https://js.hsforms.net https://*.hsforms.com https://js.hs-analytics.net https://js.hs-banner.com https://*.hubspotusercontent-na1.net https://connect.facebook.net https://platform.twitter.com https://snap.licdn.com https://script.hotjar.com https://static.hotjar.com https://d.adroll.com https://s.adroll.com https://bat.bing.com https://geotargetly-api-2.com https://unpkg.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://protechtgroup.my.salesforce.com https://service.force.com https://*.salesforceliveagent.com https://community.protechtgroup.com https://b.static.lightning.force.com https://www.google.com https://www.gstatic.com https://tracking.g2crowd.com https://googleads.g.doubleclick.net https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; connect-src 'self' https://*.hubspot.com https://*.hubapi.com https://js.hsforms.net https://*.hsforms.com https://*.googletagmanager.com https://analytics.google.com https://www.google-analytics.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://ka-p.fontawesome.com https://bat.bing.com https://vc.hotjar.io wss://ws.hotjar.com https://px.ads.linkedin.com https://tracking-api.g2.com https://protechtgroup.my.salesforce.com https://service.force.com https://*.salesforceliveagent.com https://community.protechtgroup.com https://b.static.lightning.force.com https://www.google.com/recaptcha/; img-src 'self' data: https://www.protechtgroup.com https://*.hubspot.com https://*.hubspot.net https://*.hubspotusercontent-na1.net https://no-cache.hubspot.com https://static.hsappstatic.net https://js.hscta.net https://js-eu1.hscta.net https://*.hsforms.com https://*.hsforms.net https://forms-na1.hsforms.com https://perf.hsforms.com https://perf-na1.hsforms.com https://www.google-analytics.com https://stats.g.doubleclick.net https://bat.bing.com https://px.ads.linkedin.com https://connect.facebook.net https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://static.hsappstatic.net https://cdnjs.cloudflare.com https://*.hubspot.net https://*.hubspotusercontent-na1.net https://service.force.com https://community.protechtgroup.com; font-src 'self' data: https://ka-p.fontawesome.com https://cdnjs.cloudflare.com https://*.hubspotusercontent-na1.net; frame-src 'self' https://*.hubspot.com https://*.hsforms.net https://*.hsforms.com https://*.hs-sites.com https://*.hs-sites-eu1.com https://*.hubspot.net https://play.hubspotvideo.com https://play-eu1.hubspotvideo.com https://service.force.com https://platform.twitter.com https://www.googletagmanager.com https://www.facebook.com https://www.youtube.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; form-action 'self' https://*.hubspot.com https://*.hsforms.com; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com *.fontawesome.com *.amazonaws.com *.fontplus.jp data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.fontplus.jp p01.mul-pay.jp pt01.mul-pay.jp 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com *.fontplus.jp 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de landofcoder.com *.meetanshi.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.demdex.net/ *.youtube.com/ *.fontplus.jp *.googletagmanager.com *.fontplus.js/* static.addtoany.com td.doubleclick.net ct.pinterest.com fledge.teads.tv p.teads.tv *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com *.omtrdc.net/ dpm.demdex.net *.everesttech.net/ *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.meetanshi.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.tasaki.inc/ www.google.co.jp ct.pinterest.com t.teads.tv cm.teads.tv b99.yahoo.co.jp t.co analytics.twitter.com tr.line.me www.facebook.com i.smartnews-ads.com i6.smartnews-ads.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.googleapis.com *.gstatic.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://www.googletagmanager.com https://polyfill-fastly.io landofcoder.com *.avada.io *.meetanshi.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.fontplus.jp static.addtoany.com s.pinimg.com ct.pinterest.com p.teads.tv s.yimg.jp b99.yahoo.co.jp www.clarity.ms static.ads-twitter.com d.line-scdn.net connect.facebook.net taj1.ebis.ne.jp rec.ebis.ne.jp cdn.smartnews-ads.com p01.mul-pay.jp pt01.mul-pay.jp static.mul-pay.jp stg.static.mul-pay.jp 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de madefor.github.io landofcoder.com https://get.geojs.io *.avada.io *.meetanshi.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google-analytics.com maps.googleapis.com static.addtoany.com *.fontplus.jp adservice.google.com www.google.com ct.pinterest.com cm.teads.tv t.teads.tv am.yahoo.co.jp www.clarity.ms *.clarity.ms c.bing.com stats.g.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://www.googletagmanager.com *.googleapis.com *.klarnacdn.net *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardlink.gr *.alphaecommerce.gr *.eurocommerce.gr 'self' business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.klarna.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.skroutz.gr *.scrooge.co.uk *.alve.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.facebook.com https://maps.googleapis.com magefan.com cm.magefan.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.skroutz.gr *.scrooge.co.uk *.alve.com https://www.google.co.in https://platform-cdn.sharethis.com https://l.sharethis.com https://api.postalcodecenter.com https://www.racedom.com d2brrip7w4543r.cloudfront.net https://sync.sharethis.com https://c.clarity.ms https://c.bing.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com chimpstatic.com downloads.mailchimp.com *.list-manage.com widget.freshworks.com m2epro.freshdesk.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.fontawesome.com *.googleapis.com *.gstatic.com https://maps.googleapis.com *.googletagmanager.com *.facebook.net business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.skroutz.gr *.scrooge.co.uk *.alve.com polyfill.io cdnjs.cloudflare.com https://eu.sp-trk.com https://static.zdassets.com https://buttons-config.sharethis.com https://count-server.sharethis.com https://t.sharethis.com https://platform-api.sharethis.com https://skroutza.skroutz.gr https://www.clarity.ms https://d.clarity.ms https://static.cloudflareinsights.com https://ajax.cloudflare.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com downloads.mailchimp.com widget.freshworks.com m2epro.freshdesk.com *.klarnacdn.net *.fontawesome.com *.gstatic.com maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com widget.freshworks.com m2epro.freshdesk.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://maps.googleapis.com *.google-analytics.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.skroutz.gr *.scrooge.co.uk *.alve.com https://l.sharethis.com https://eu.sp-trk.com https://static.zdassets.com https://ekr.zdassets.com https://stats.g.doubleclick.net https://bcp.crwdcntrl.net https://fcm.googleapis.com *.zendesk.com wss://widget-mediator.zopim.com https://www.clarity.ms https://d.clarity.ms https://pagead2.googlesyndication.com https://data.stbuttons.click https://c.ltmsphrcl.net https://z.clarity.ms https://q.clarity.ms 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data: blob:; media-src https: blob:; font-src https: data:; report-uri /csp-report 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://plumrocket.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.googleapis.com *.elfsightcdn.com https://meetanshi.com/media/logo.png https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.gstatic.com player.vimeo.com *.googleapis.com *.elfsight.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.gstatic.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.gstatic.com *.googleapis.com *.elfsight.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-YfrbIoZjLE365sizR9KcdQ==' 'strict-dynamic' https: 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data:; font-src 'self' https: data:; connect-src 'self' https:; frame-src https:; form-action 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /csp-report.php; report-to csp-endpoint 1
default-src 'self';script-src 'self' matomo.neanderthal-blog.de;style-src 'self' 'unsafe-inline';img-src 'self' blob: data:;connect-src 'self' matomo.neanderthal-blog.de;object-src 'none';media-serc 'self';font-src 'self';base-uri 'self';form-action 'self';frame-ancestors 'none';block-all-mixed-content;upgrade-insecure-requests;report-uri https://neanderthal.de/csp/report/;report-to default; 1
object-src 'none';base-uri 'self';script-src 'nonce-Mudh9C3sU7ROkA1czjxS3w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' data: blob: https://*.plaid.com https://*.withpersona.com; img-src 'self' data: https://wisetack-hub-public.s3-us-west-2.amazonaws.com https://www.facebook.com https://www.google-analytics.com https://www.google.com https://www.google.co.il https://storage.googleapis.com/studio1-prod-blob https://*.amplitude.com/; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: https://*.plaid.com https://*.withpersona.com https://*.iovation.com https://mozilla.github.io/pdf.js https://cdnjs.cloudflare.com https://www.google-analytics.com https://connect.facebook.net/ https://*.cybersource.com https://cdn.amplitude.com/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.bootstrapcdn.com https://*.amplitude.com/; font-src 'self' data: moz-extension: https://fonts.gstatic.com https://*.bootstrapcdn.com; connect-src 'self' https://api.wisetack.us/ https://platform.wisetack.us/ https://*.amplitude.com https://*.plaid.com https://*.withpersona.com https://www.google-analytics.com https://stats.g.doubleclick.net/ https://connect.facebook.net/ https://www.facebook.com https://*.api.smartystreets.com/ https://*.amazonaws.com https://*.amazoncognito.com/ https://*.browser-intake-datadoghq.com/; frame-src 'self' https://*.plaid.com https://*.withpersona.com https://*.cybersource.com; object-src 'self' https://*.iovation.com; manifest-src 'self'; media-src 'self' data: blob: https://storage.googleapis.com/studio1-prod-blob https://*.amplitude.com/; frame-ancestors *; 1
default-src 'self' github.com www.google.com google.com api.supertokens.com supertokens.com app.posthog.com boxyhq.com *.bootstrapcdn.com *.calendly.com calendly.com carbon.now.sh buttons.github.io cdn.segment.com cdnjs.cloudflare.com cheerio.js.org community.supertokens.com dev.api.supertokens.com fonts.googleapis.com fonts.gstatic.com gatsby.dev https://posthog.supertokens.com posthog.supertokens.com registry.npmjs.org restcountries.com segment.com test.supertokens.com www.youtube.com youtube.com api.github.com *.stripe.com cdn.jsdelivr.net *.cloudfront.net *.algolia.net js.driftt.com t.co analytics.twitter.com data: ajax.googleapis.com static.hotjar.com api.segment.io connect.facebook.net https://*.algolia.net https://*.algolianet.com https://*.algolia.io facebook.com *.facebook.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com unpkg.com viewer.typebot.io www.youtube.com player.vimeo.com fast.wistia.net blob: data: img.shields.io https://cdn.rudderlabs.com *.rudderlabs.com *.rudderstack.com supertoken.dataplane.rudderstack.com https://sessions.bugsnag.com https://static.scarf.sh static.scarf.sh https://s3-us-west-2.amazonaws.com/b2bjsstore/b/ https://pro.ip-api.com https://www.googletagmanager.com https://analytics.google.com https://*.analytics.google.com https://stats.g.doubleclick.net https://td.doubleclick.net/ https://www.google.co.in/ads/ https://s3-us-west-2.amazonaws.com/b2bjsstore/b/ https://b-code.liadm.com/lc2.js https://pro.ip-api.com https://alocdn.com/c/vn3d8u2u/a/xtarget/p.json https://*.execute-api.us-west-2.amazonaws.com https://cdn.pagesense.io/* https://cdn.pagesense.io https://static.zohocdn.com/* https://static.zohocdn.com https://*.zoho.com https://*.zoho.com/* https://js.hs-scripts.com/44440483.js *.hs-scripts.com *.hs-banner.com *.hubspot.com *.hsforms.net *.hsforms.com *.hscollectedforms.net *.usemessages.com *.hubspotusercontent-na1.net *.hscollectedforms.net *.hs-analytics.net https://*.hs-scripts.com https://*.hs-banner.com https://*.hubspot.com https://*.hsforms.net https://*.hsforms.com https://*.hscollectedforms.net https://*.usemessages.com https://*.hubspotusercontent-na1.net https://*.hs-analytics.net https://www.googleadservices.com https://*.googleadservices.com https://googleadservices.com https://googleads.g.doubleclick.net https://*.g.doubleclick.net https://cdn.amplitude.com *.amplitude.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net https://static.reo.dev *.reo.dev https://*.usepylon.com https://widget.usepylon.com https://pylon-avatars.s3.us-west-1.amazonaws.com https://d3vl36l12sfx26.cloudfront.net https://avatars.slack-edge.com https://ad.doubleclick.net https://www.google.com https://www.google.ac https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.com.ai https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.ms https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.vg https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.com.nf https://www.google.cat 'unsafe-inline' 'unsafe-eval'; script-src 'self' github.com www.google.com google.com api.supertokens.com supertokens.com app.posthog.com boxyhq.com *.bootstrapcdn.com *.calendly.com calendly.com carbon.now.sh buttons.github.io cdn.segment.com cdnjs.cloudflare.com cheerio.js.org community.supertokens.com dev.api.supertokens.com fonts.googleapis.com fonts.gstatic.com gatsby.dev https://posthog.supertokens.com posthog.supertokens.com registry.npmjs.org restcountries.com segment.com test.supertokens.com www.youtube.com youtube.com api.github.com *.stripe.com cdn.jsdelivr.net *.cloudfront.net *.algolia.net js.driftt.com t.co analytics.twitter.com data: ajax.googleapis.com static.hotjar.com api.segment.io connect.facebook.net https://*.algolia.net https://*.algolianet.com https://*.algolia.io facebook.com *.facebook.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com unpkg.com viewer.typebot.io www.youtube.com player.vimeo.com fast.wistia.net blob: data: img.shields.io https://cdn.rudderlabs.com *.rudderlabs.com *.rudderstack.com supertoken.dataplane.rudderstack.com https://sessions.bugsnag.com https://static.scarf.sh static.scarf.sh https://s3-us-west-2.amazonaws.com/b2bjsstore/b/ https://pro.ip-api.com https://www.googletagmanager.com https://analytics.google.com https://*.analytics.google.com https://stats.g.doubleclick.net https://td.doubleclick.net/ https://www.google.co.in/ads/ https://s3-us-west-2.amazonaws.com/b2bjsstore/b/ https://b-code.liadm.com/lc2.js https://pro.ip-api.com https://alocdn.com/c/vn3d8u2u/a/xtarget/p.json https://*.execute-api.us-west-2.amazonaws.com https://cdn.pagesense.io/* https://cdn.pagesense.io https://static.zohocdn.com/* https://static.zohocdn.com https://*.zoho.com https://*.zoho.com/* https://js.hs-scripts.com/44440483.js *.hs-scripts.com *.hs-banner.com *.hubspot.com *.hsforms.net *.hsforms.com *.hscollectedforms.net *.usemessages.com *.hubspotusercontent-na1.net *.hscollectedforms.net *.hs-analytics.net https://*.hs-scripts.com https://*.hs-banner.com https://*.hubspot.com https://*.hsforms.net https://*.hsforms.com https://*.hscollectedforms.net https://*.usemessages.com https://*.hubspotusercontent-na1.net https://*.hs-analytics.net https://www.googleadservices.com https://*.googleadservices.com https://googleadservices.com https://googleads.g.doubleclick.net https://*.g.doubleclick.net https://cdn.amplitude.com *.amplitude.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net https://static.reo.dev *.reo.dev https://*.usepylon.com https://widget.usepylon.com 'unsafe-inline' 'unsafe-eval'; object-src 'none'; base-uri 'self'; report-uri /api/csp-report; report-to csp-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://s0.wp.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: https://i0.wp.com; connect-src 'self'; font-src 'self' data: https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self'; report-uri https://otima.digital/wp-json/firstpage-sg-security-headers/v1/csp-report 1
object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: https://*.paypal.com https://*.paypalobjects.com 'nonce-IuYnMGgdyy3w7rcj9yfq1EC3OUgIQ-ZB'; base-uri 'none'; report-uri https://data.sanitino.eu/csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com maxcdn.bootstrapcdn.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net *.paypal.com *.paypalobjects.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://flex.cybersource.com https://testflex.cybersource.com https://www.googletagmanager.com/ https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.addthis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.sandbox.paypal.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://*.google.co.uk https://*.google-analytics.com https://*.googletagmanager.com https://bat.bing.com https://bat.bing.net https://c.bing.com https://www.facebook.com https://connect.facebook.net https://*.fbcdn.net https://www.electricpoint.com https://images.unsplash.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.sandbox.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://flex.cybersource.com https://testflex.cybersource.com https://www.googletagmanager.com https://www.google-analytics.com https://*.googletagmanager.com https://*.clarity.ms https://bat.bing.com https://c.bing.com https://www.facebook.com https://connect.facebook.net https://cdn.cookie-script.com https://www.electricpoint.com https://maps.googleapis.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com s7.addthis.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.sandbox.paypal.com *.paypalobjects.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com https://flex.cybersource.com https://testflex.cybersource.com https://www.electricpoint.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://flex.cybersource.com https://testflex.cybersource.com https://*.google.co.uk https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.clarity.ms https://bat.bing.net https://bat.bing.com https://c.bing.com https://connect.facebook.net https://*.facebook.com https://graph.facebook.com https://maps.googleapis.com https://player.vimeo.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com ekr.zdassets.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.sandbox.paypal.com 'self' 'unsafe-inline'; child-src https://flex.cybersource.com https://testflex.cybersource.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://extend.vimeocdn.com https://bam.nr-data.net https://js-agent.newrelic.com https://img.en25.com https://www.gstatic.com cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://polyfill-fastly.io https://unpkg.com https://use.fontawesome.com https://www.google.com platform.twitter.com unpkg.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com unpkg.com; worker-src 'self'; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-xmpueQM3izlq3CBpXRf1zw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://s.nitropay.com https://*.nitropay.com https://*.nitrocdn.com https://challenges.cloudflare.com https://*.cloudflare.com https://static.cloudflareinsights.com https://pagead2.googlesyndication.com https://*.googlesyndication.com https://*.googletagservices.com https://*.doubleclick.net https://*.googleadservices.com; style-src 'self' 'unsafe-inline' https://*.nitropay.com https://*.nitrocdn.com https://*.googlesyndication.com; img-src 'self' data: blob: https:; font-src 'self' data: https://*.nitrocdn.com https://*.googlesyndication.com; connect-src 'self' https://*.nitropay.com https://api.nitropay.com https://*.googlesyndication.com https://*.doubleclick.net https://*.google.com https://*.cloudflareinsights.com; frame-src 'self' https://*.nitropay.com https://*.nitrocdn.com https://challenges.cloudflare.com https://*.googlesyndication.com https://*.doubleclick.net; worker-src 'self' blob:; media-src 'self' data: blob: https://cdn.meowdb.com; upgrade-insecure-requests 1
base-uri 'self'; child-src 'self'; default-src 'self'; frame-ancestors 'self'; img-src 'self'; media-src 'self'; object-src 'none'; script-src 'self'; script-src-attr 'self'; script-src-elem 'self'; style-src 'self'; style-src-attr 'self'; style-src-elem 'self' 1
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com https://*.gstatic.com maxcdn.bootstrapcdn.com *.fontawesome.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net www.facebook.com *.googlesyndication.com connect.facebook.net graph.facebook.com business.facebook.com https://www.googletagmanager.com/ *.addthis.com js.mollie.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com https://flagcdn.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https://images.unsplash.com 'self' data: *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com data: https://belco-prod.s3-eu-central-1.amazonaws.com connect.facebook.net graph.facebook.com business.facebook.com *.faslet.net cdn.flbx.io http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ flagpedia.net https://www.mollie.com *.amazonaws.com ts.tradetracker.net www.magmodules.eu https://widgets.trustedshops.com https://widgets-qa.trustedshops.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com *.google.com *.google.bg *.googletagmanager.com www.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com https://cdn.belco.io connect.facebook.net graph.facebook.com business.facebook.com *.faslet.net https://cdn.flbx.io https://connect.getflowbox.com http://connect.getflowbox.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.getflowbox.com s7.addthis.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.avada.io maps.googleapis.com js.mollie.com pay.google.com applepay.cdn-apple.com embed.pakketdienstqls.nl *.sendcloud.sc *.jsdelivr.net tm.tradetracker.net https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com https://*.googleapis.com maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net *.fontawesome.com *.sendcloud.sc *.jsdelivr.net https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com www.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com wss://chat.belco.io https://cdn.belco.io connect.facebook.net graph.facebook.com business.facebook.com *.faslet.net https://*.amazonaws.com https://cdn.flbx.io https://connect.getflowbox.com http://connect.getflowbox.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.getflowbox.com ekr.zdassets.com/ https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.gstatic.com *.fontawesome.com https://fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io blueskytechmage.com mageblueskytech.com placehold.jp blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://api.goaffpro.com https://static.goaffpro.com s7.addthis.com *.googleadservices.com *.gstatic.com *.google.com https://player.vimeo.com https://www.youtube.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.googleapis.com http://fonts.googleapis.com assets.braintreegateway.com *.googleapis.com *.gstatic.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io https://api.goaffpro.com https://static.goaffpro.com ekr.zdassets.com/ https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src  'none'; connect-src 'self' *.blacksonblondes.com *.dfxtra.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.blacksonblondes.com *.dfxtra.com join.gammasecure.com; script-src 'self' *.blacksonblondes.com *.dfxtra.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.blacksonblondes.com *.dfxtra.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com *.bootstrapcdn.com *.cloudflare.com 'self' data: *.hotjar.com *.hotjar.io data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.facebook.com *.oppwa.com oppwa.com *.mastercard.com *.iesnare.com *.requirejs.org *.visa.com 'self' connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.doubleclick.net *.googlesyndication.com *.oppwa.com oppwa.com *.mastercard.com *.iesnare.com *.requirejs.org *.visa.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: *.googleapis.com *.openstreetmap.org *.googlesyndication.com *.google.com *.google.rs *.google.hr *.google.ba *.google.si *.google.bg *.google.me *.google.mk *.google.nl *.google.de *.google.be *.google.fr *.googleadservices.com www.facebook.com trengo.s3.eu-central-1.amazonaws.com ecom-stage.iutecredit.mk ecom.iutecredit.mk ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.oppwa.com oppwa.com *.mastercard.com *.iesnare.com *.requirejs.org *.visa.com magefan.com cm.magefan.com *.disqus.com connect.facebook.net graph.facebook.com business.facebook.com *.cmi.co.ma *.iprom.net iprom.net yandex.com yandex.md *.yandex.md *.yandex.com yandex.ru *.yandex.ru *.yads.tech yads.tech *.yango.com *.doubleclick.net t.adx.opera.com *.pandorashop.si *.pandorashop.hr *.pandorashop.ba *.pandorashop.rs *.pandorashop.mk *.pandorashop.me *.pandorashop-sa.com *.pandorashop.ma *.pandorashop.mt *.pandorashop-ks.com *.pandorashop.md *.tamara.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com tagmanager.google.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com https://widget-cdn.boxnow.hr *.googlesyndication.com *.googleadservices.com *.google.com *.google.rs *.google.hr *.google.ba *.google.si *.google.bg *.google.me *.google.mk www.facebook.com *.widget.trengo.eu ecom-stage.iutecredit.mk ecom.iutecredit.mk map.gls-croatia.com map.gls-czech.com map.gls-hungary.com map.gls-romania.com map.gls-slovenia.com map.gls-slovakia.com map.gls-serbia.com *.openstreetmap.org chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.jquery.com *.oppwa.com oppwa.com *.mastercard.com *.visa.com *.iesnare.com *.requirejs.org *.disqus.com connect.facebook.net graph.facebook.com business.facebook.com *.hotjar.com *.hotjar.io onesignal.com *.onesignal.com *.criteo.com *.adsmurai.com gateway.bankart.si yandex.com yandex.md *.yandex.md *.yandex.com yandex.ru *.yandex.ru *.yads.tech yads.tech *.yango.com *.doubleclick.net t.adx.opera.com *.iprom.net iprom.net static.cloudflareinsights.com *.tamara.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.bootstrapcdn.com ecom-stage.iutecredit.mk ecom.iutecredit.mk downloads.mailchimp.com *.oppwa.com oppwa.com *.mastercard.com *.iesnare.com *.requirejs.org *.visa.com onesignal.com *.onesignal.com *.iprom.net iprom.net *.tamara.co 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.widget.trengo.eu *.pandorashop.si *.pandorashop.hr *.pandorashop.ba *.pandorashop.rs *.pandorashop.mk *.pandorashop.me *.pandorashop-sa.com *.pandorashop.ma *.pandorashop.mt *.pandorashop-ks.com *.pandorashop.md *.tamara.co 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.googleapis.com https://widget-cdn.boxnow.hr *.openstreetmap.org *.google.com *.google.rs *.google.hr *.google.ba *.google.si *.google.bg *.google.me *.google.mk *.google.nl *.google.de *.google.be *.google.fr *.googlesyndication.com *.doubleclick.net www.facebook.com *.trengo.eu ecom-stage.iutecredit.mk ecom.iutecredit.mk map.gls-croatia.com map.gls-czech.com map.gls-hungary.com map.gls-romania.com map.gls-slovenia.com map.gls-slovakia.com map.gls-serbia.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.oppwa.com oppwa.com *.mastercard.com *.iesnare.com *.requirejs.org *.visa.com connect.facebook.net graph.facebook.com business.facebook.com wss://ws.hotjar.com *.hotjar.io yandex.com *.yandex.md *.yandex.com yandex.ru *.yandex.ru *.yads.tech *.yango.com cm.g.doubleclick.net t.adx.opera.com *.pandorashop.si *.pandorashop.hr *.pandorashop.ba *.pandorashop.rs *.pandorashop.mk *.pandorashop.me *.pandorashop-sa.com *.pandorashop.ma *.pandorashop.mt *.pandorashop-ks.com *.pandorashop.md *.tamara.co 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src yandex.com yandex.md *.yandex.md *.yandex.com yandex.ru *.yandex.ru *.yads.tech yads.tech *.yango.com *.doubleclick.net t.adx.opera.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-6EkiEpXMrFjgd44Y9o5ACw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.klevu.com *.ksearchnet.com *.fontawesome.com fonts.gstatic.com *.cloudflare.com *.googleapis.com *.zopim.com *.gstatic.com *.tawk.to *.jsdelivr.net media.flixfacts.com 'unsafe-inline' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com *.facebook.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; frame-ancestors *.hana.ondemand.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ maps.googleapis.com chart.googleapis.com oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com *.google.com *.nosto.com *.issuu.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.criteo.net *.criteo.com *.addthis.com *.facebook.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'unsafe-inline' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.klevu.com *.ksearchnet.com oppwa.com *.oppwa.com *.peachpayments.com *.eu-west-1.amazonaws.com *.cloudflare.com *.google.com *.google.lv *.google.co.za *.google.com.na *.google.na *.gstatic.com *.zopim.com *.nosto.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.zopim.io *.sfdr.co sfdr.co *.tawk.to tawk.link *.tawk.link *.addthis.com *.jsdelivr.net *.facebook.com *.azurewebsites.net maps.googleapis.com app.mobicredwidget.co.za media.flixcar.com rt.flix360.com assets.secure.checkout.visa.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://cdn.polyfill.io https://browser.sentry-cdn.com js.klevu.com *.ksearchnet.com maps.googleapis.com chart.googleapis.com *.avada.io *.oppwa.com oppwa.com *.peachpayments.com *.zopim.com *.videoly.co sfdr.co *.cnetcontent.com *.cloudfront.net *.newrelic.com *.klevu.com *.google.com *.google.lv *.google.co.za *.google.com.na *.google.na *.cloudflare.com *.cloudflareinsights.com *.nosto.com *.hotjar.com *.googletagmanager.com *.criteo.net *.criteo.com *.sfdr.co *.tawk.to *.tawk.link *.jsdelivr.net *.addthis.com *.addthisedge.com *.moatads.com *.mouseflow.com *.nr-data.net *.facebook.com *.what3words.com commerce.adobedtm.com magento-recs-sdk.adobe.net static.zdassets.com app.mobicredwidget.co.za www.gstatic.com connect.facebook.net bam.nr-data.net js.testfreaks.com media.flixfacts.com media.flixcar.com security-hub.vaimo.network 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.klevu.com *.ksearchnet.com *.fontawesome.com oppwa.com *.oppwa.com *.peachpayments.com *.cloudflare.com *.googleapis.com *.jsdelivr.net www.gstatic.com media.flixcar.com 'unsafe-inline' data: 'self' 'unsafe-inline'; object-src maps.googleapis.com chart.googleapis.com 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://*.ingest.sentry.io *.klevu.com *.ksearchnet.com maps.googleapis.com chart.googleapis.com https://get.geojs.io *.avada.io oppwa.com *.oppwa.com *.peachpayments.com *.testfreaks.com *.google.com *.nosto.com *.hotjar.io *.hotjar.com *.doubleclick.net *.zendesk.com *.paypal.com *.tawk.to wss://*.tawk.to *.tawk.link *.addthis.com *.addthisedge.com *.nr-data.net *.what3words.com *.googleapis.com vsb111.tawk.to ekr.zdassets.com api.magento.com commerce.adobedc.net app.mobicredwidget.co.za wss://widget-mediator.zopim.com bam.nr-data.net *.googletagmanager.com security-hub.vaimo.network 'unsafe-eval' data: 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'strict-dynamic' 'nonce-EH7c9iBPyBwReQXC1JeOgw=='; style-src 'self' 'unsafe-inline' *.typekit.net fonts.googleapis.com; font-src 'self' *.typekit.net fonts.gstatic.com; frame-src 'self' www.facebook.com *.cookiebot.com www.youtube.com publuu.com *.paperform.co; img-src 'self' data: www.facebook.com *.cookiebot.com www.google.co.nz www.googletagmanager.com stnzwinecrmprdaue.blob.core.windows.net px.ads.linkedin.com; connect-src 'self' wss://ws.hotjar.com *.hotjar.io www.facebook.com *.cookiebot.com www.google-analytics.com analytics.google.com insights.sitesearch360.com stats.g.doubleclick.net region1.analytics.google.com global.sitesearch360.com www.google.com www.google.co.nz px.ads.linkedin.com; report-uri https://report-to-api.raygun.com/reports?apikey=KDhGCuKYSAjT8E5x2xHTA; report-to csp-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.google.com www.googleadservices.com googleads.g.doubleclick.net www.google-analytics.com www.googletagmanager.com www.paypal.com www.paypalobjects.com *.vimeocdn.com i.ytimg.com *.youtube.com *.cloudflare.com *.klarna.com *.twitter.com *.twimg.com *.bing.com *.zopim.com *.zopim.io *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com static.klaviyo.com static-forms.klaviyo.com fast.a.klaviyo.com static-tracking.klaviyo.com a.klaviyo.com telemetrics.klaviyo.com *.disqus.com *.meetanshi.com *.google.com.ph *.google.com.sg *.usercentrics.eu *.ssl.gstatic.com *.tawk.to *.jsdelivr.net wilkepromotion.ladesk.com sumo.com *.sumo.com cdn.wpro.dk https://redchamps.com image.crisp.chat storage.crisp.chat https://client.crisp.chat *.trustedshops.com *.googleapis.com *.fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com https://www.googletagmanager.com/ *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.youtube.com http://www.sandbox.paypal.com *.twitter.com https://www.googletagmanager.com/ *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.meetanshi.com *.doubleclick.net *.trustpilot.com wilkepromotion.ladesk.com *.ladesk.com *.issuu.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.bing.com *.zopim.com *.zopim.io *.doubleclick.net *.google.com *.google.co.in *.mastercard.com *.crisp.chat/ *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com https://img.youtube.com *.meetanshi.com *.google.com.sg *.google.com.ph *.lightemporium.com *.usercentrics.eu *.ssl.gstatic.com tawk.link *.jsdelivr.net wilkepromotion.ladesk.com sumo.com *.sumo.com cdn.wpro.dk https://redchamps.com www.google.com.ua data: 'self' 'unsafe-inline'; script-src https://assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bing.com *.zopim.com *.zdassets.com www.google.com *.googleadservices.com *.doubleclick.net *.googletagmanager.com *.cardinalcommerce.com *.paypal.com www.gstatic.com *.facebook.net connect.facebook.net graph.facebook.com business.facebook.com static.klaviyo.com https://static-forms.klaviyo.com fast.a.klaviyo.com static-tracking.klaviyo.com a.klaviyo.com https://telemetrics.klaviyo.com/ *.disqus.com *.meetanshi.com *.authorize.net *.trustpilot.com *.sumo.com *.tawk.to tawk.link *.jsdelivr.net wilkepromotion.ladesk.com *.crazyegg.com *.issuu.com cdn.wpro.dk dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com https://static.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ *.assets.adobedtm.com *.ccdc02.com *.tagmanager.google.com sumo.com *.reepay.com ss.wpro.dk https: 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.fontawesome.com *.bing.com *.crisp.chat https://static.klaviyo.com *.usercentrics.eu *.tagmanager.google.com *.fonts.googleapis.com *.jsdelivr.net cdn.wpro.dk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zopim.com *.zopim.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.cloudflare.com *.twitter.com *.twimg.com *.zdassets.com *.zopim.com *.zopim.io wss://widget-mediator.zopim.com *.google-analytics.com https://stats.g.doubleclick.net https://e.clarity.ms *.wpro.dk www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.meetanshi.com *.trustpilot.com *.sumo.com *.tawk.to tawk.to *.crazyegg.com cdn.wpro.dk wss://client.relay.crisp.chat https://client.crisp.chat/ sumo.com ss.wpro.dk https: 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.wpro.dk; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://snap.licdn.com https://www.googletagmanager.com https://www.google-analytics.com https://munchkin.marketo.net https://cdn.cookielaw.org https://www.youtube.com https://player.vimeo.com https://*.numerix.com https://static.addtoany.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.google.com https://www.gstatic.com; object-src 'none'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://nx.numerix.com; img-src 'self' data: https:; media-src 'self' https://www.youtube.com https://player.vimeo.com; frame-src 'self' https://www.youtube.com https://player.vimeo.com https://www.google.com https://td.doubleclick.net https://www.googletagmanager.com https://consentcdn.cookiebot.com https://consent.cookiebot.com https://static.addtoany.com https://nx.numerix.com; frame-ancestors 'self'; child-src 'self'; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https://px.ads.linkedin.com https://www.google-analytics.com https://*.marketo.com https://*.mktoresp.com https://cdn.cookielaw.org https://pagead2.googlesyndication.com https://consentcdn.cookiebot.com https://vimeo.com; report-uri /report-csp-violation; upgrade-insecure-requests 1
object-src 'none';base-uri 'self';script-src 'nonce-ZoPFKIGi4u9YBCl1gawAvA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https://www.macheist.com; script-src 'nonce-NjhjZWIyZmUtMjA3My00ODUxLWFlNGQtYmYxMTI2MzdhYTcz' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' https: blob:; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://www.macheist.com https://*.stackcommerce.io https://*.stackcommerce.net https://*.stackcommerce.dev https://*.stackassets.com https://stack-assets.s3.amazonaws.com https://stack-support.s3.amazonaws.com https://stack-public-sale-image-embed.s3.amazonaws.com https://use.typekit.net https://p.typekit.net https://fonts.googleapis.com https://www.gstatic.com https://www.zeropartyforms.com; font-src 'self' https://www.macheist.com https://*.stackcommerce.io https://*.stackcommerce.net https://*.stackcommerce.dev https://*.stackassets.com https://stack-assets.s3.amazonaws.com https://stack-support.s3.amazonaws.com https://stack-public-sale-image-embed.s3.amazonaws.com https://use.typekit.net https://fonts.gstatic.com https://*.optimizely.com data:; img-src https: data: blob:; connect-src 'self' https://www.macheist.com https://*.stackcommerce.io https://*.stackcommerce.net https://*.stackcommerce.dev https://*.stackassets.com https://stack-assets.s3.amazonaws.com https://stack-support.s3.amazonaws.com https://stack-public-sale-image-embed.s3.amazonaws.com https://www.google.ae https://www.google.at https://www.google.be https://www.google.bg https://www.google.ca https://www.google.ch https://www.google.cl https://www.google.co.cr https://www.google.co.id https://www.google.co.il https://www.google.co.in https://www.google.co.jp https://www.google.co.kr https://www.google.co.ma https://www.google.co.nz https://www.google.co.th https://www.google.co.uk https://www.google.co.za https://www.google.com https://www.google.com.ar https://www.google.com.au https://www.google.com.bd https://www.google.com.br https://www.google.com.co https://www.google.com.do https://www.google.com.ec https://www.google.com.eg https://www.google.com.gh https://www.google.com.hk https://www.google.com.jm https://www.google.com.kw https://www.google.com.mx https://www.google.com.my https://www.google.com.ng https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.ph https://www.google.com.pk https://www.google.com.pr https://www.google.com.qa https://www.google.com.sa https://www.google.com.sg https://www.google.com.tr https://www.google.com.tw https://www.google.com.ua https://www.google.com.vn https://www.google.cz https://www.google.de https://www.google.dk https://www.google.dz https://www.google.ee https://www.google.es https://www.google.fi https://www.google.fr https://www.google.gr https://www.google.hr https://www.google.hu https://www.google.ie https://www.google.it https://www.google.jo https://www.google.lt https://www.google.lv https://www.google.nl https://www.google.no https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.rs https://www.google.ru https://www.google.se https://www.google.si https://www.google.sk https://www.google.tt https://api.stackcommerce.net https://api.stripe.com https://maps.googleapis.com https://api.segment.io https://*.sentry.io https://*.paypal.com https://imgs.signifyd.com https://dp.signifyd.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://*.taboola.com https://www.facebook.com https://google.com https://*.analytics.google.com https://analytics.google.com https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://ad.doubleclick.net https://stats.g.doubleclick.net https://analytics.twitter.com https://t.co https://*.clarity.ms https://bat.bing.com https://bat.bing.net https://px.ads.linkedin.com https://use.typekit.net https://ekr.zdassets.com https://jscloud.net https://oirt.aggle.net https://cdn.gladly.com https://analytics.gladly.com https://*.gladly.com https://*.gladly.chat https://app.enzuzo.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://k.p-n.io https://alocdn.com https://vimeo.com https://www.zeropartyforms.com https://logx.optimizely.com https://*.optimizely.com wss://*.optimizely.com; frame-src 'self' https://www.macheist.com https://js.stripe.com https://*.js.stripe.com https://hooks.stripe.com https://www.google.com https://www.googletagmanager.com https://*.paypal.com https://imgs.signifyd.com https://*.online-metrix.net https://*.optimizely.com https://www.facebook.com https://player.vimeo.com https://nytrng.com https://pxdrop.lijit.com https://www.youtube.com; media-src 'self' https://www.macheist.com https://cdn.gladly.com data: blob:; worker-src 'self' blob:; frame-ancestors 'self' https://www.macheist.com; base-uri 'self'; form-action 'self' https://www.macheist.com https://www.facebook.com; report-uri https://o76184.ingest.sentry.io/api/5453351/security/?sentry_key=eb6136c615334da89d0f03105155c5cf 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.fontawesome.com *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com https://fonts.bunny.net use.fontawesome.com maxcdn.bootstrapcdn.com *.yotpo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.google.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com widgets.sandbox.afterpay.com widgets.sandbox.clearpay.co.uk *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.youtube.com/ *.google.com https://scontent-ams4-1.cdninstagram.com https://www.googletagmanager.com/ *.meetanshi.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://static.afterpay.com https://site-assets.afterpay.com/ d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://platform-api.sharethis.com *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com https://clauem2.arrowtheme.com https://scontent.cdninstagram.com/ https://scontent-ams4-1.cdninstagram.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://firebasestorage.googleapis.com *.meetanshi.com *.yotpo.com swellrewards.com *.swellrewards.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com https://rum.hlx.page https://portal.sandbox.clearpay.co.uk https://portal.clearpay.co.uk https://portal.sandbox.afterpay.com https://portal.afterpay.com https://static.afterpay.com *.squarecdn.com https://hbiq.net *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.maps.googleapis.com *.trackedlink.net *.google.com *.maps.gstatic.com maps.googleapis.com *.googletagmanager.com *.googleadservices.com https://buttons-config.sharethis.com/ https://connect.facebook.net https://platform-api.sharethis.com https://scontent-ams4-1.cdninstagram.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.googleapis.com *.avada.io *.shopify.com *.meetanshi.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com static.afterpay.com/ *.squarecdn.com assets.braintreegateway.com *.fontawesome.com https://static.klaviyo.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com *.google-analytics.com https://platform-api.sharethis.com https://fonts.bunny.net *.yotpo.com swellrewards.com *.swellrewards.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.magento-datasolutions.com *.magento-ds.com static.afterpay.com static.sandbox.afterpay.com *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com *.clearpay.co.uk *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.cloudflare.com *.twitter.com *.twimg.com *.googleadservices.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org *.google.co.in *.maps.gstatic.com *.maps.googleapis.com maps.googleapis.com https://scontent-ams4-1.cdninstagram.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io *.meetanshi.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; img-src 'self' data: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https:; media-src 'self' https:; frame-src 'self' https:; worker-src 'self' blob:; upgrade-insecure-requests; report-to csp; report-uri /csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net 'self' data: *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.affirm.com *.affirm.ca c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.affirm.com *.affirm.ca https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: www.google.com.ua https://info.nyif.com/ https://px.ads.linkedin.com/ https://www.google.co.in/ https://bat.bing.com/ https://fast.wistia.com/ https://px4.ads.linkedin.com/ https://sumome.com/ https://media.sumome.com/ https://www.linkedin.com/ https://nyif.com/pub/media/images/NYIF103_Logo_Main_HighRes.png data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.affirm.com *.affirm.ca *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.cloudflare.com https://www.googletagmanager.com tagmanager.google.com http://bat.bing.com/ http://js.hs-scripts.com/ https://snap.licdn.com/ http://nyinstituteoffinance.postaffiliatepro.com/ *.klaviyo.com http://cdn.inspectlet.com/ https://assets.calendly.com/ https://fast.wistia.com/ https://static.cloudflareinsights.com/ https://load.sumome.com/ https://static.cloudflareinsights.com/beacon.min.js/v8c78df7c7c0f484497ecbca7046644da1771523124516 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.googleapis.com *.gstatic.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.affirm.com *.affirm.ca https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://www.google-analytics.com https://px.ads.linkedin.com/ https://pipedream.wistia.com/ https://stats.g.doubleclick.net/ https://www.google.co.in/ https://bat.bing.com/ https://sumome.com/ https://media.sumome.com/ https://hn.inspectlet.com/ https://googleads.g.doubleclick.net https://a.klaviyo.com/ https://www.googleadservices.com/ https://www.googletagmanager.com https://www.google-analytics.com/ https://stats.g.doubleclick.net https://load.sumome.com/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com https://media.sumome.com/ 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com https://www.gstatic.com *.klevu.com *.ksearchnet.com https://fonts.gstatic.com *.fontawesome.com cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com consentcdn.cookiebot.com secure.livechatinc.com *.vimeo.com *.sandbox.paypal.com schulershoes.fullslate.com tst.kaptcha.com *.socialannex.com *.socialannex.net www.xtento.com *.wesupply.xyz https://wesupplylabs.com guarantee-cdn.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com https://*.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com *.files-text.com *.livechatinc.com *.livechat-files.com *.livechat-static.com https://*.google.com https://*.googleapis.com https://*.googleusercontent.com https://redchamps.com *.stats.paypal.com *.sandbox.paypal.com cdn.livechat-files.com schulershoes-magento.s3.amazonaws.com ss-stg-magento.s3.amazonaws.com meetanshi.com maps.googleapis.com *.socialannex.com *.socialannex.net tn.alphonso.tv *.tvsquared.com bat.bing.com www.facebook.com connect.facebook.net cdn.ywxi.net imgsct.cookiebot.com jumbe.zaius.com api.zaius.com www.xtento.com cdn.xtento.com guarantee-cdn.com *.facebook.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com apis.google.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com https://*.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com *.livechatinc.com *.livechat-static.com https://*.google.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.fontawesome.com *.cookiebot.com cdn.ywxi.net cdn.jsdelivr.net acsbapp.com d1igp3oop3iho5.cloudfront.net *.socialannex.com *.socialannex.net maxcdn.bootstrapcdn.com *.cardinalcommerce.com bat.bing.com connect.facebook.com connect.facebook.net *.mountain.com *.tvsquared.com tag.simpli.fi onlinedialogue.s3.amazonaws.com www.trustedsite.com *.clarity.ms cdn.openwidget.com api.openwidget.com www.xtento.com cdn.xtento.com *.cloudflare.com guarantee-cdn.com *.maxmind.com https://js.klevu.com *.facebook.net *.tiktok.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com *.livechatinc.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com *.vimeo.com *.socialannex.com *.socialannex.net maxcdn.bootstrapcdn.com cdn.jsdelivr.net cdnjs.cloudflare.com https://statsjs.klevu.com https://js.klevu.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src *.livechatinc.com 'self' 'unsafe-inline'; media-src *.adobe.com *.livechatinc.com *.livechat-static.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com *.livechatinc.com *.text.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com s3-us-west-2.amazonaws.com *.acsbapp.com tn.alphonso.tv bat.bing.com maps.google.com maps.googleapis.com *.g.doubleclick.net *.socialannex.com *.socialannex.net consentcdn.cookiebot.com www.facebook.com www.facebook.net kg668dbov0.execute-api.us-east-1.amazonaws.com 3.212.39.155 18.210.229.244 34.215.155.61 35.160.46.251 35.85.84.151 44.212.189.233 44.228.85.26 44.238.122.172 52.22.50.55 52.71.121.170 54.156.2.105 100.20.58.101 *.clarity.ms analytics-ipv6.tiktokw.us s3.amazonaws.com d1igp3oop3iho5.cloudfront.net *.mmapiws.com schuler-account-central.ddev.site account-central-local.schulershoes.com account-central.schulershoes.com *.facebook.net *.tiktok.com *.google-analytics.com *.analytics.google.com *.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com *.livechatinc.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'none';script-src 'self' 'strict-dynamic' 'sha256-2SK3CgmbtgQG68G7sXhYhYgeRZRDOzxx0FH6YMd7HlU=' 'sha256-q/lWePb21mP9eEMJFWXeuXUXkr7ZwofopbhhSWxa2Uw=';style-src 'self' 'unsafe-inline';img-src 'self' data: *.storyblok.com *.cloudfront.net *.facebook.com images-static.trustpilot.com;font-src 'self';connect-src 'self' *.liberty.com.au *.algolia.net *.algolianet.com *.storyblok.com *.sentry.io *.recaptcha.net *.matomo.cloud *.google.com *.googleapis.com *.facebook.net *.useinsider.com *.heapanalytics.com *.pricefinder.com.au *.doubleclick.net cdn.jsdelivr.net;frame-src 'self' *.recaptcha.net *.google.com;frame-ancestors 'self';object-src 'none';base-uri 'self';form-action 'self';report-uri https://services.liberty.com.au/api/azure-security-intelligence-csp/api/v1/csp-violation;report-to csp-endpoint 1
worker-src blob:; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com *.whisbi.com script.hj.contentsquare.net *.contentsquare.net; https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com tr.snapchat.com connect.facebook.net *.luxtrust.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com app.storyblok.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com *.doubleclick.net *.facebook.com tr.snapchat.com open.spotify.com *.facebook.net *.iadvize.com csxd.orange.lu orely.test.luxtrust.com orely.luxtrust.com *.ariadnext.io *.csxd.orange.lu *.csxd.checkout-revamp-uwj4pqq-76psfv3wag3fe.eu-6.magentosite.cloud *.csxd.integration-5ojmyuq-76psfv3wag3fe.eu-6.magentosite.cloud *.csxd.mcstaging.orange.lu csxd.checkout-revamp-uwj4pqq-76psfv3wag3fe.eu-6.magentosite.cloud csxd.integration-5ojmyuq-76psfv3wag3fe.eu-6.magentosite.cloud csxd.mcstaging.orange.lu payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io camo.githubusercontent.com *.googleapis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.storyblok.com placehold.co *.placeholder.com magefan.com cm.magefan.com tr.snapchat.com px.ads.linkedin.com *.whisbi.com t.co *.iadvize.com *.contentsquare.net app.ekoo.co *.app.ekoo.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com app.storyblok.com cdn.jsdelivr.net js-agent.newrelic.com bam.nr-data.net script.crazyegg.com snap.licdn.com static.ads-twitter.com sc-static.net track.adform.net *.whisbi.com www.google.fr sdk.privacy-center.org *.adform.net analytics.twitter.com *.iadvize.com *.contentsquare.net app.contentsquare.com app.ekoo.co *.app.ekoo.co cdn.c360a.salesforce.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.fontawesome.com *.whisbi.com *.iadvize.com app.ekoo.co *.app.ekoo.co https://fonts.googleapis.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cloudflarestream.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.facebook.com *.facebook.net script.crazyegg.com bam.nr-data.net tracking.crazyegg.com *.whisbi.com *.iadvize.com wss://*.iadvize.com wss://*.twilio.com *.contentsquare.net *.contentsquare.com app.ekoo.co *.app.ekoo.co ad.doubleclick.net *.doubleclick.net  *.videobot.com api.videobot.com mcstaging.orange.lu *.mcstaging.orange.lu payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com 'self' 'unsafe-inline'; child-src blob: http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://app.termly.io https://www.googletagmanager.com https://code.jquery.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://maps.googleapis.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://d3dknzx2xk13op.cloudfront.net https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://maxcdn.bootstrapcdn.com https://d3dknzx2xk13op.cloudfront.net; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net https://d3dknzx2xk13op.cloudfront.net; img-src 'self' data: https:; frame-src 'self' https://www.youtube.com https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com https://app.termly.io https://www.google-analytics.com https://ad.doubleclick.net https://www.google.com https://pagead2.googlesyndication.com https://trestlewood.s3.us-west-2.amazonaws.com https://trestlewood-test.s3.us-west-2.amazonaws.com; object-src 'none'; base-uri 'self'; report-uri /api/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://accounts.google.com/gsi/client https://www.googletagmanager.com https://www.google-analytics.com https://*.googleapis.com https://*.googlesyndication.com https://*.googleadservices.com https://*.doubleclick.net https://*.adtrafficquality.google https://api.receptivity.io https://securepubads.g.doubleclick.net https://www.google.com https://*.kueezrtb.com https://*.ad-delivery.net https://*.clean.gg https://*.amazon-adsystem.com https://*.vidazoo.com https://*.static.vidazoo.com; style-src 'self' 'unsafe-inline' https://accounts.google.com/gsi/style; connect-src 'self' https://accounts.google.com/gsi/ https://pagead2.googlesyndication.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://*.googleapis.com https://*.adtrafficquality.google https://*.doubleclick.net https://*.googlesyndication.com https://*.googleadservices.com https://*.google-analytics.com https://*.googletagmanager.com https://*.translate.zvo.cn https://*.g.doubleclick.net https://securepubads.g.doubleclick.net https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://*.kueezrtb.com https://*.ad-delivery.net https://*.clean.gg https://*.amazon-adsystem.com https://*.vidazoo.com https://*.wserver.vidazoo.com https://*.static.vidazoo.com https://*.rtb.com https://*.ad-delivery.com https://*.adsystem.com https://*.btloader.com; frame-src 'self' https://accounts.google.com/gsi/ https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://*.googleapis.com https://*.googlesyndication.com https://*.doubleclick.net https://*.googleadservices.com https://*.translate.zvo.cn https://*.cootlogix.com https://*.g.doubleclick.net https://*.google.com; img-src 'self' data: https: http:; font-src 'self' data:; object-src 'none'; media-src 'self'; form-action 'self'; base-uri 'self'; upgrade-insecure-requests; 1
frame-ancestors *.hana.ondemand.com https://oqs.google.com https://docs.google.com https://contacts.google.com https://accounts.google.com https://simplyasia.co.za https://locationbank.net 'self'; object-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; media-src https://beares-prod-dynamic-forms.vaimo-sa-cloud.co.za https://maps.googleapis.com/ *.zdassets.com http://ms-dynamic-form-builder-service:8000 https://ms-dynamic-form-builder-service:8000 https://locationbank.net 'self' 'unsafe-inline'; font-src https://beares-prod-dynamic-forms.vaimo-sa-cloud.co.za https://maps.googleapis.com/ www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net *.cloudflare.com *.googleapis.com *.zopim.com *.tawk.to *.jsdelivr.net media.flixfacts.com 'unsafe-inline' data: http://ms-dynamic-form-builder-service:8000 https://ms-dynamic-form-builder-service:8000 https://locationbank.net data: 'self' 'unsafe-inline'; style-src https://beares-prod-dynamic-forms.vaimo-sa-cloud.co.za https://maps.googleapis.com/ fonts.googleapis.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net *.cloudflare.com *.googleapis.com *.jsdelivr.net www.gstatic.com media.flixcar.com 'unsafe-inline' data: http://ms-dynamic-form-builder-service:8000 https://ms-dynamic-form-builder-service:8000 https://locationbank.net https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; connect-src https://beares-prod-dynamic-forms.vaimo-sa-cloud.co.za https://maps.googleapis.com/ www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.klevu.com *.ksearchnet.com https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com embed.payjustnow.com *.payjustnow.com *.testfreaks.com *.nosto.com *.hotjar.io *.hotjar.com *.doubleclick.net *.zendesk.com *.tawk.to wss://*.tawk.to *.tawk.link *.addthis.com *.addthisedge.com *.what3words.com *.googleapis.com vsb111.tawk.to ekr.zdassets.com api.magento.com commerce.adobedc.net app.mobicredwidget.co.za www.google-analytics.com wss://widget-mediator.zopim.com bam.nr-data.net *.googletagmanager.com security-hub.vaimo.network 'unsafe-eval' data: http://ms-dynamic-form-builder-service:8000 https://ms-dynamic-form-builder-service:8000 https://locationbank.net 'self' 'unsafe-inline'; form-action https://beares-prod-dynamic-forms.vaimo-sa-cloud.co.za https://maps.googleapis.com/ pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://secure.paygate.co.za/payweb3/process.trans https://sandbox.payfast.co.za https://www.payfast.co.za/eng/process webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; frame-src https://beares-prod-dynamic-forms.vaimo-sa-cloud.co.za https://maps.googleapis.com/ bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com embed.payjustnow.com *.payjustnow.com *.nosto.com *.issuu.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.criteo.net *.criteo.com *.addthis.com webchat.jdg.co.za *.jdg.co.za http://ms-dynamic-form-builder-service:8000 https://ms-dynamic-form-builder-service:8000 https://locationbank.net 'self' 'unsafe-inline'; img-src https://beares-prod-dynamic-forms.vaimo-sa-cloud.co.za https://maps.googleapis.com/ 'unsafe-inline' data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com *.klevu.com *.ksearchnet.com https://firebasestorage.googleapis.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cloudflare.com *.google.com *.google.lv *.google.co.za *.google.com.na *.google.na *.zopim.com *.nosto.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.zopim.io *.sfdr.co sfdr.co *.tawk.to tawk.link *.tawk.link *.addthis.com *.jsdelivr.net *.azurewebsites.net www.google-analytics.com maps.googleapis.com app.mobicredwidget.co.za amcglobal.sc.omtrdc.net media.flixcar.com rt.flix360.com assets.secure.checkout.visa.com http://ms-dynamic-form-builder-service:8000 https://ms-dynamic-form-builder-service:8000 https://locationbank.net data: 'self' 'unsafe-inline'; script-src https://beares-prod-dynamic-forms.vaimo-sa-cloud.co.za https://maps.googleapis.com/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.klevu.com *.ksearchnet.com *.avada.io *.shopify.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com embed.payjustnow.com *.payjustnow.com *.zopim.com *.videoly.co sfdr.co *.cnetcontent.com *.cloudfront.net *.klevu.com *.google.lv *.google.co.za *.google.com.na *.google.na *.cloudflare.com *.cloudflareinsights.com *.nosto.com *.hotjar.com *.googletagmanager.com *.criteo.net *.criteo.com *.sfdr.co *.tawk.to *.tawk.link *.jsdelivr.net *.addthis.com *.addthisedge.com *.moatads.com *.mouseflow.com *.facebook.com *.what3words.com maps.googleapis.com commerce.adobedtm.com magento-recs-sdk.adobe.net static.zdassets.com app.mobicredwidget.co.za www.gstatic.com bam.nr-data.net js.testfreaks.com media.flixfacts.com media.flixcar.com security-hub.vaimo.network http://ms-dynamic-form-builder-service:8000 https://ms-dynamic-form-builder-service:8000 https://locationbank.net https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://maps.googleapis.com https://ajax.googleapis.com https://cdn.branch.io https://snap.licdn.com https://px.ads.linkedin.com https://connect.facebook.net https://cdn-in.pagesense.io https://salesiq.zohopublic.in https://crm.zoho.in https://js.zohostatic.in https://bolt.keka.com https://cdn.kekastatic.net; style-src 'self' 'unsafe-inline' https://cdn.kekastatic.net https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://cdn.kekastatic.net; img-src 'self' data: blob: https://d1rvneoneyls7g.cloudfront.net https://cdn.shopify.com https://strapi.bolt.earth https://bolt-wordpress.bolt.earth https://secure.gravatar.com https://*.googleapis.com https://*.gstatic.com https://www.google-analytics.com https://www.googletagmanager.com https://www.facebook.com https://px.ads.linkedin.com https://cdn.kekastatic.net https://bolt.keka.com; connect-src 'self' https://strapi.bolt.earth https://bolt-wordpress.bolt.earth https://api.bolt.earth https://market.revos.in https://geocode.revos.in https://notification.revos.in https://new-reports.revos.in https://bolt-website-media.s3.ap-south-1.amazonaws.com https://www.google-analytics.com https://www.googletagmanager.com https://maps.googleapis.com https://*.googleapis.com https://api2.branch.io https://cdn.branch.io https://bolt.keka.com https://salesiq.zohopublic.in https://*.zohopublic.in https://cdn-in.pagesense.io; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://www.google.com https://bolt.keka.com https://salesiq.zohopublic.in; object-src 'none'; base-uri 'self'; report-uri https://o1342453.ingest.us.sentry.io/api/4508252751921152/security/?sentry_key=c64c89326c537ac69f8c622218d230d8 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com https://www.googletagmanager.com https://www.clarity.ms https://scripts.clarity.ms https://static.userguiding.com https://static.klaviyo.com https://static-tracking.klaviyo.com https://snap.licdn.com https://connect.facebook.net https://tags.srv.stackadapt.com https://googleads.g.doubleclick.net https://rum-static.pingdom.net; style-src 'self' 'unsafe-inline' https://static.klaviyo.com https://tags.srv.stackadapt.com; img-src 'self' data: https://res.cloudinary.com https://slattery-strapi-media-prod.s3.ap-southeast-2.amazonaws.com https://www.google.com https://www.google.com.au https://px.ads.linkedin.com https://www.facebook.com; connect-src 'self' https://www.google.com https://www.google.com.au https://www.google-analytics.com https://analytics.google.com https://www.googleadservices.com https://k.clarity.ms https://a.klaviyo.com https://sdk.userguiding.com https://rum-collector-2.pingdom.net https://bam.nr-data.net https://static.klaviyo.com https://tags.srv.stackadapt.com https://googleads.g.doubleclick.net https://px.ads.linkedin.com; font-src 'self' data: https://static.klaviyo.com; frame-src https://www.googletagmanager.com https://googleads.g.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; 1
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.multisafepay.com https://pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.multisafepay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.multisafepay.com https://pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.fontawesome.com *.multisafepay.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.multisafepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com fonts.cdnfonts.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ js.mollie.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com www.google.co.uk pagead2.googlesyndication.com *.doubleclick.net *.clarity.ms https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.mollie.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com https://rum.hlx.page https://maps.googleapis.com https://player.vimeo.com www.gstatic.com scripts.clarity.ms www.clarity.ms pagead2.googlesyndication.com www.googlesyndication.com cdn.jsdelivr.net/gh/orestbida/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.mollie.com pay.google.com applepay.cdn-apple.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com cdn.jsdelivr.net/gh/orestbida/ https://static.klaviyo.com maxcdn.bootstrapcdn.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io https://maps.googleapis.com https://player.vimeo.com www.google.com www.google.co.uk pagead2.googlesyndication.com www.googlesyndication.com *.doubleclick.net *.clarity.ms https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cloudflare.com https://widgets.trustedshops.com data: *.stape.io *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de ad4m.at *.doubleclick.net *.ad-srv.net *.adserver01.de *.bsmartdata.com https://www.googletagmanager.com/ *.addthis.com *.google.com.ua *.google.co.uk *.stape.io www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.dashandy.de *.tradetracker.net *.adcell.com *.xtento.com *.bild.de *.testit.de *.s24.com *.doubleclick.net *.adscale.de *.cloudflare.com cdn.klarna.com res.cloudinary.com *.ytimg.com *.usercentrics.eu *.haendlerbund.de *.idealo.com *.ad4m.at *.adition.com *.adform.net www.google.de *.bidswitch.net *.smartadserver.com *.rubiconproject.com *.360yield.com blob: http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.google.com *.google.com.ua *.google.co.uk *.stape.io https://widgets.trustedshops.com https://widgets-qa.trustedshops.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com apis.google.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.s24.com *.hyj.mobi *.tradetracker.net api.bounce-commerce.de *.cloudflare.com *.magento.com ad4m.at *.adcell.com *.ad-srv.net *.google-analytics.com *.trustedshops.com *.usercentrics.eu *.googletagmanager.com *.loadbee.com *.bild.de ipdpx.de px.qero-srv.de http://www.googletagmanager.com/ https://www.googletagmanager.com/ s7.addthis.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.google.com.ua *.google.co.uk *.gstatic.com *.doubleclick.net *.stape.io *.avada.io https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.typekit.net https://widgets.trustedshops.com *.usercentrics.eu *.googleapis.com *.bildstatic.de https://cdn.jsdelivr.net *.googletagmanager.com *.stape.io *.fontawesome.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de ad.doubleclick.net *.bounce-commerce.de *.adcell.com *.loadbee.com *.ad4m.at http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ ekr.zdassets.com/ *.google-analytics.com *.stape.io https://get.geojs.io *.avada.io *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://dashandy.de/; report-to report-endpoint; 1
default-src 'self' ; script-src 'self' 'unsafe-inline' 'strict-dynamic' 'nonce-cffa8e11-20a5-4ffc-a6ac-a9e810533632' https://consentcdn.cookiebot.com https://analyticsext.trafikverket.se; style-src 'self' 'unsafe-inline' ; img-src 'self' https: data: blob: ; connect-src 'self' https://analyticsext.trafikverket.se https://api.trafikinfo.trafikverket.se https://consentcdn.cookiebot.com https://ext-api.vasttrafik.se; frame-src 'self' https://consentcdn.cookiebot.com;  report-uri https://trafiken.nu/api/reporting/;  report-to csp-endpoint;  1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://cdnjs.cloudflare.com https://fonts.googleapis.com https://fonts.gstatic.com https://clients.servebase.co.th; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce--ZQF6SLZT16U5MDPYgf-yw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src-elem webcache.datareporter.eu webcache-eu.datareporter.eu https://browser.sentry-cdn.com 'self' 'unsafe-inline' cdn.gtranslate.net translate.google.com translate.googleapis.com translate-pa.googleapis.com; style-src-elem https://webcache.datareporter.eu https://webcache-eu.datareporter.eu 'self' 'unsafe-inline' www.gstatic.com; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com webcachex-eu.datareporter.eu *.klarnacdn.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com test.saferpay.com www.saferpay.com saferpay.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.klarna.com *.instagram.com test.saferpay.com www.saferpay.com saferpay.com www.xtento.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.klarna.com *.klarnaevt.com *.klarnacdn.net https://images.unsplash.com *.cdninstagram.com magefan.com cm.magefan.com *.disqus.com test.saferpay.com www.saferpay.com saferpay.com translate.google.com translate.googleapis.com cdn.gtranslate.net www.xtento.com cdn.xtento.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.klarna.com *.klarnacdn.net x.klarnacdn.net https://maps.googleapis.com *.instagram.com *.datareporter.eu https://api.usersnap.com https://cdn.usersnap.com *.disqus.com *.klarnaservices.com https://cdn.jsdelivr.net test.saferpay.com www.saferpay.com saferpay.com https://www.google.com https://www.gstatic.com www.xtento.com cdn.xtento.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.datareporter.eu *.klarnacdn.net https://cdn.jsdelivr.net assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net https://maps.googleapis.com https://player.vimeo.com *.datareporter.eu *.klarnaservices.com *.klarna.com test.saferpay.com www.saferpay.com saferpay.com translate.googleapis.com translate-pa.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src test.saferpay.com www.saferpay.com saferpay.com  *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://2b973568-2ef7-4890-8ff8-fe126999d884.sansec.watch/; report-to report-endpoint; 1
default-src 'none'; script-src 'self' 'nonce-nrhTx/WlmYAIa2NLqmLWoA==' https://challenges.cloudflare.com https://www.youtube.com https://plugin.handtalk.me https://www.googletagmanager.com https://tag.goadopt.io https://app.goadopt.io https://checkout.pagar.me https://vlibras.gov.br https://www.vlibras.gov.br https://cdn.jsdelivr.net 'strict-dynamic'; style-src 'self' 'nonce-nrhTx/WlmYAIa2NLqmLWoA==' https://fonts.googleapis.com https://www.vlibras.gov.br; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https://challenges.cloudflare.com https://d1ojbvo3c3mwp6.cloudfront.net https://plugin.handtalk.me https://www.google-analytics.com https://cdn.jsdelivr.net https://vlibras.gov.br https://www.vlibras.gov.br; connect-src 'self' https://api.icdgrupo.com.br https://challenges.cloudflare.com https://faro-collector-prod-sa-east-1.grafana.net/collect/79b24ff3e533a16695e06bf3fb3e8433 https://api.handtalk.me https://account.handtalk.me https://www.google-analytics.com https://api.pagar.me https://tag.goadopt.io https://app.goadopt.io https://api.goadopt.io https://vlibras.gov.br https://www.vlibras.gov.br https://traducao2.vlibras.gov.br https://dicionario2.vlibras.gov.br; frame-src 'self' https://challenges.cloudflare.com https://www.youtube.com https://www.youtube-nocookie.com https://www.instagram.com https://plugin.handtalk.me https://app.goadopt.io https://www.google.com https://vlibras.gov.br; frame-ancestors 'none'; form-action 'self'; base-uri 'self'; upgrade-insecure-requests; report-uri /api/csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com https://www.gstatic.com *.cloudflare.com https://fonts.gstatic.com *.stape.io *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://plumrocket.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca https://plumrocket.com *.addthis.com *.bing.com *.cloudflare.com *.doubleclick.net *.facebook.com *.googletagmanager.com *.livechatinc.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.stape.io www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://*.gstatic.com https://images.unsplash.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca maps.gstatic.com *.calcurates.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com *.bing.com *.clarity.ms *.doubleclick.net *.facebook.com *.facebook.net *.google.com *.googleadservices.com *.googletagmanager.com *.onesignal.com *.visualwebsiteoptimizer.com *.yahoo.com d24nhi8mwg40yy.cloudfront.net d3k81ch9hvuctc.cloudfront.net google.com www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.be www.google.bf www.google.bg www.google.bs www.google.by www.google.ca www.google.cd www.google.cg www.google.ch www.google.ci www.google.cl www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zw www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bn www.google.com.bo www.google.com.br www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.gg www.google.gl www.google.gr www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.iq www.google.is www.google.it www.google.jo www.google.kg www.google.kz www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mk www.google.mn www.google.mu www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.si www.google.sk www.google.sn www.google.sr www.google.tn www.google.tt www.theperfectwater.com https://*.google.com https://*.googleapis.com https://*.googleusercontent.com *.authorize.net assets.secure.checkout.visa.com sandbox.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.stape.io https://firebasestorage.googleapis.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com https://*.gstatic.com https://maps.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.addthis.com *.authorize.net *.bing.com *.clarity.ms *.cloudflare.com *.cloudflareinsights.com *.doubleclick.net *.facebook.net *.paypal.com *.paypalobjects.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.klaviyo.com *.livechatinc.com *.onesignal.com *.visualwebsiteoptimizer.com *.yimg.com onesignal.com sandbox.paypal.com *.cardinalcommerce.com *.vimeo.com *.hcaptcha.com *.aptrinsic.com s7.addthis.com assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com www.xtento.com cdn.xtento.com https://*.google.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com pay.google.com https://cdn.jsdelivr.net *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.stape.io *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.googleapis.com *.gstatic.com *.klaviyo.com onesignal.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.jsdelivr.net *.googletagmanager.com *.stape.io *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.bing.com *.livechatinc.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.googleapis.com https://maps.googleapis.com https://player.vimeo.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.authorize.net *.bing.com *.clarity.ms *.doubleclick.net *.facebook.com *.googleadservices.com *.googletagmanager.com *.klaviyo.com *.livechatinc.com *.visualwebsiteoptimizer.com *.yimg.com *.paypalobjects.com assets.adobedtm.com onesignal.com www.google.ae www.google.am www.google.at www.google.be www.google.bg www.google.bs www.google.by www.google.ca www.google.cd www.google.cg www.google.ch www.google.ci www.google.cl www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zw www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bn www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.fj www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kw www.google.com.mm www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.np www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.cz www.google.de www.google.dk www.google.dz www.google.es www.google.fi www.google.fr www.google.gr www.google.hn www.google.hr www.google.hu www.google.ie www.google.iq www.google.it www.google.jo www.google.kz www.google.lk www.google.lt www.google.lv www.google.md www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.ru www.google.rw www.google.se www.google.sk www.google.tt https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com *.googlesyndication.com https://www.merchant-center-analytics.goog *.stape.io https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.fontawesome.com *.googleapis.com cdnjs.cloudflare.com *.bunny.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io widgets.automizely.com widgets.automizely.io *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app tracking.netnutri.com load.tracking.netnutri.com *.leadconnectorhq.com *.filesafe.space cdn.ywxi.net analytics.google.com *.google.co.in *.googleadservices.com *.facebook.com assets.aftership.com *.aftership.com stats.g.doubleclick.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com ajax.googleapis.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.fontawesome.com *.googleapis.com *.gstatic.com cdn-scripts.signifyd.com tracking.netnutri.com load.tracking.netnutri.com *.leadconnectorhq.com *.msgsndr.com *.trustedsite.com cdn.ywxi.net connect.facebook.net *.facebook.com *.google.co.in *.googleadservices.com tagmanager.google.com shop.pe *.shop.pe *.cloudfront.net capi-automation.s3.us-east-2.amazonaws.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widgets.automizely.com widgets.automizely.io *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.fontawesome.com cdnjs.cloudflare.com *.leadconnectorhq.com *.bunny.net www.googletagmanager.com tagmanager.google.com assets.braintreegateway.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.automizely.com api.automizely.io *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com dp.signifyd.com tracking.netnutri.com load.tracking.netnutri.com *.leadconnectorhq.com *.msgsndr.com graph.facebook.com s3-us-west-2.amazonaws.com *.stape.gl shop.pe *.shop.pe *.cloudfront.net ad.doubleclick.net *.doubleclick.net *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com license.aureuserp.com wkm2repo.webkul.in https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.googleapis.com *.gstatic.com data: *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com *.facebook.com *.sharethis.com *.facebook.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googletagmanager.com *.facebook.net *.avada.io *.sharethis.com *.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.sharethis.com *.facebook.net *.facebook.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com *.google-analytics.com https://get.geojs.io *.avada.io *.sharethis.com *.facebook.net *.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-yZMqPMWBnIBMDki5fUOIIQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'nonce-6OVHU_oCr8RCqYJhqyi0l2x2DKzrZw0JHvzV43XPx73DYEsQyt5D4Q' https://jweiland.net https://stat.jweiland.net https://connect.facebook.net 'sha256-AKZnKXnqtOlXD47qmsZludKD3AgJk/jI1TZo38yYEsQ=' 'sha256-+nZ4HfY28YjDrh2jtJEmjM5e2bqcGJhqd7el43OvUzQ=' 'unsafe-hashes' data: https://*.openstreetmap.org 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://www.facebook.com https://*.openstreetmap.org; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://*.google.de https://*.google.com; script-src-elem 'self' 'nonce-6OVHU_oCr8RCqYJhqyi0l2x2DKzrZw0JHvzV43XPx73DYEsQyt5D4Q' https://jweiland.net https://stat.jweiland.net https://connect.facebook.net https: https://*.openstreetmap.org 'sha256-4L7+eT24AXoFsu64qwVUOUBoNTrzPz8rXmFyqpGwPKE=' 'sha256-QS2UauD3xa7CLL+d0+1+v0wC1neM3ScW6VS9xRiuoT4=' 'sha256-wdQzx4dn5AXAVYeAG/CTZaTA5elm+yAcRlk0TZ22FiI=' 'sha256-wdQzx4dn5AXAVYeAG/CTZaTA5elm+yAcRlk0TZ22FiI=' 'sha256-8xRKkR33jKkKraI/Lo93F78a/usGwOrD9zoGUJUXsFU=' 'report-sample'; connect-src 'self' https://stat.jweiland.net https://view.rekai.se https://predict.rekai.se https://www.facebook.com https://connect.facebook.net data: https://*.openstreetmap.org; style-src 'self' 'unsafe-inline' https://static.rek.ai 'report-sample'; report-uri https://jweiland.net/@http-reporting?csp=report&requestTime=1789272086868006&requestHash=7d2f6ea7226bd43b23808659d86637026556c939 1
default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; report-uri /csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com https://fonts.gstatic.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors https://api.clerk.io https://cdn.clerk.io 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.instagram.com https://checkout.dintero.com *.vipps.no https://apitest.vipps.no *.klarna.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://banners.helloretailcdn.com https://images.unsplash.com *.cdninstagram.com https://cdn.clerk.io https://checkout.dintero.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com *.vipps.no data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://core.helloretail.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://maps.googleapis.com https://player.vimeo.com tagmanager.google.com https://www.googletagmanager.com *.instagram.com https://api.clerk.io https://cdn.clerk.io https://custom.clerk.io https://checkout.dintero.com https://unpkg.com *.vipps.no https://apitest.vipps.no chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://fonts.googleapis.com https://api.clerk.io https://cdn.clerk.io downloads.mailchimp.com *.klarnacdn.net https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://core.helloretail.com https://helloretailcdn.com https://maps.googleapis.com https://player.vimeo.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://checkout.dintero.com *.vipps.no https://apitest.vipps.no form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://checkout.vipps.no/; report-to report-endpoint; 1
font-src https://fonts.gstatic.com *.fontawesome.com *.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://www.payfast.co.za 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://helloextend-static-assets.s3.amazonaws.com https://widgets.payflex.co.za *.facebook.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://*.helloextend.com https://widgets.payflex.co.za https://partpayassets.blob.core.windows.net *.fontawesome.com *.googleapis.com *.gstatic.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com https://fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://*.helloextend.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://maps.googleapis.com https://maps.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ www.google.com https://maps.googleapis.com https://gateway.moneris.com https://gatewayt.moneris.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com *.googleapis.com maxcdn.bootstrapcdn.com *.fonts.googleapis.com data: *.cloudflare.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.tawk.to static.olark.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com *.tawk.to *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com www.google.com *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com *.certcapture.com www.facebook.com platform.twitter.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://plumrocket.com *.addthis.com *.pinterest.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.tawk.to googleads.g.doubleclick.net www.google.co.in *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.sharethis.com *.certcapture.com *.bayengage.com https://www.magezon.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.addthis.com *.pinterest.com *.cdninstagram.com *.tawk.to cdn.jsdelivr.net insight.adsrvr.org bat.bing.com www.google.co.in img-msg.tb-list.com pixel.rubiconproject.com match.adsrvr.org *.doubleclick.net *.meetanshi.com *.authorize.net *.facebook.com *.southernlabware.com *.magecomp.com *.magebees.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ www.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sharethis.com *.crwdcntrl.net *.certcapture.com *.bayengage.com https://wh.bayengage.com/magento *.fontawesome.com *.googleapis.com *.gstatic.com *.avada.io *.google.com/ connect.facebook.net twitter.com platform.twitter.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.instagram.com app.targetbay.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.tawk.to cdn.jsdelivr.net js.adsrvr.org cdn-in.pagesense.io sf.bayengage.com bat.bing.com www.gstatic.com verify.authorize.net sc-static.net *.googleoptimize.com *.sucuri.net *.conversionbox.io *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com *.certcapture.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com *.tawk.to cdn.jsdelivr.net *.gstatic.com *.sucuri.net *.targetbay.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.olark.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com *.crwdcntrl.net *.certcapture.com *.bayengage.com https://wh.bayengage.com/magento https://get.geojs.io *.avada.io *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cloudflare.com *.googleapis.com *.addthis.com *.graph.instagram.com *.google-analytics.com app.targetbay.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.tawk.to wss://*.tawk.to bat.bing.com sfc-api.bayengage.com www.google.co.in *.typesense.net *.conversionbox.io *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
child-src 'self'; connect-src 'self' *.8x8.com *.cookiebot.com *.doubleclick.net *.google-analytics.com *.googleapis.com *.visualstudio.com analytics.google.com wss://*.8x8.com; default-src 'self' *.rmtag.com; font-src 'self' https://*.cloudfront.net/graphik/ https://*.cloudfront.net/lato/; frame-src 'self' *.8x8.com *.cookiebot.com *.doubleclick.net *.pages05.net *.stripe.com; img-src 'self' data: *.cookiebot.com *.doubleclick.net *.google-analytics.com infostore.saiglobal.com maps.gstatic.com www.google.com www.google.com.au; script-src-elem 'self' 'unsafe-inline' *.8x8.com *.ads-twitter.com *.azure.com *.cookiebot.com *.doubleclick.net *.google-analytics.com *.googleapis.com *.googletagmanager.com *.pardot.com *.rmtag.com *.stripe.com; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; 1
font-src data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googletagmanager.com *.google-analytics.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.googletagmanager.com *.google-analytics.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.googletagmanager.com *.google-analytics.com *.stats.g.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' cumulusmedia.com www.cumulusmedia.com 'report-sample'; base-uri 'self'; script-src 'nonce-o1vHmXXxW/gZkSUTZ+nIBIj7' 'self' 'inline-speculation-rules' cumulusmedia.com www.cumulusmedia.com 'sha256-MhtPZXr7+LpJUY5qtMutB+qWfQtMaPccfe7QXtCcEYc=' *.googletagmanager.com 'sha256-GyUsdBtdHKlqtQSzGDSvNCHPdK8s1GO2S2y9jj4oYog=' *.google-analytics.com stats.wp.com 'sha256-+zMjo4vywISTRiN+RDp+W665czd5i8MOxiovBqr69F0=' 'sha256-X7SYke/fTbXP5LTn1g56zfcWCiSzQpGhzSLHvvNm0jo=' form.jotform.com cdn.jotfor.ms *.cookielaw.org 'sha256-iqOPaRlwwgtNy7J3vh/+LSW9/QVdN+Fl+YfMS8+GcPo=' *.onetrust.com connect.facebook.net s3.tradingview.com https://www.google.com/recaptcha/ https://challenges.cloudflare.com/turnstile/ 'sha256-riitXBKGtl5y5ccA7GF6ccqJuwEVP5tm8j0ff/fbw9U=' 'sha256-k8zlbQ8Yw3tO1mzGrtP0m5BxCIEa+iH8LXA4dctSEMI=' 'sha256-wBhUGm/Lzl4TA4tJsiguA/vnV9LaNE6plmk4Xn/6/Mw=' 'sha256-6wRdeNJzEHNIsDAMAdKbdVLWIqu8b6+Bs+xVNZqplQw=' 'sha256-5oZoxPs07HkLGv2K/yyNWiLlCvxwJuQdhXLKg2AXhT0=' 'sha256-U6RUMq5+odqSjfOrLU4UryQNhktP4MuDKOApor+55jo=' 'unsafe-inline' 'unsafe-eval' 'report-sample'; style-src 'self' 'unsafe-inline' cumulusmedia.com www.cumulusmedia.com fonts.googleapis.com cdn.jotfor.ms 'report-sample'; img-src 'self' data: cumulusmedia.com www.cumulusmedia.com player.cumulusmedia.com *.wp.com *.googletagmanager.com *.google-analytics.com *.cookielaw.org *.jotform.com; font-src 'self' data: cumulusmedia.com www.cumulusmedia.com fonts.gstatic.com https://www.google.com/recaptcha/; connect-src 'self' cumulusmedia.com www.cumulusmedia.com player.cumulusmedia.com *.google-analytics.com https://www.google.com/g/collect www.googletagmanager.com *.doubleclick.net submit.jotform.com *.cookielaw.org *.onetrust.com; object-src 'none'; frame-src 'self' cumulusmedia.com www.cumulusmedia.com *.jotform.com *.youtube.com s.tradingview.com www.tradingview-widget.com challenges.cloudflare.com; report-uri https://www.cumulusmedia.com/wp-admin/admin-ajax.php?action=wpshr 1
font-src *.cloudfront.net *.reviews.io *.reviews.co.uk *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.reviews.io *.reviews.co.uk *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.reviews.io *.reviews.co.uk *.yotpo.com *.criteo.com *.hotjar.com *.pinterest.com *.useinsider.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.trackedlink.net magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.yotpo.com https: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://api.addressfinder.io https://rum.hlx.page *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.reviews.io *.reviews.co.uk *.yotpo.com *.ads-twitter.com *.adnxs.com *.api.useinsider.com *.bat.bing.com *.cfjump.com *.clarity.ms *.criteo.com *.dev.visualwebsiteoptimizer.com *.doubleclick.net *.facebook.net *.getsitecontrol.com *.google.com *.googletagmanager.com *.hotjar.com *.inwebr.com *.licdn.com *.pinimg.com *.redditstatic.com *.roymorgan.com *.thewhiskyclub.com.au *.twitter.com *.zipmoney.com.au *.zip.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://api.addressfinder.io webchat.dotdigital.com webchat.staging.dotdigital.com unsafe-inline assets.braintreegateway.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://api.addressfinder.io *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.yotpo.com *.bat.bing.com *.stats.g.doubleclick.net *.clarity.ms *.getsitecontrol.com *.getsitectrl.com *.hotjar.com *.pinterest.com *.useinsider.com *.thewhiskyclub.com.au *.zip.co *.zipmoney.com.au *.cdn.linkedin.oribi.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; frame-src https://www.google.com/ https://app.netlify.com https://www.googletagmanager.com https://secure.livechatinc.com https://player.vimeo.com/ https://www.youtube.com/ https://www.linkedin.com/ https://open.spotify.com/; script-src 'strict-dynamic' 'nonce-ZmIyNjYyNDQtNmEyYy00NGQ2LWJhMzktMDExZjlhNzI1YzA0' 'self' 'unsafe-eval'; script-src-attr 'unsafe-hashes'; style-src 'self' 'unsafe-inline' https://cdn.landbot.io https://fonts.googleapis.com; img-src 'self' data: w3.org/svg/2000 https://bat.bing.net https://cdn-ukwest.onetrust.com https://www.datocms-assets.com https://google.com https://www.google.co.uk https://*.google-analytics.com https://*.googletagmanager.com https://googleads.g.doubleclick.net https://www.google.com https://www.googleadservices.com https://image.mux.com https://*.litix.io https://pagead2.googlesyndication.com https://px.ads.linkedin.com https://storage.googleapis.com https://*.wistia.com https://*.gstatic.com; media-src 'self' blob data: https://www.datocms-assets.com https://*.mux.com; connect-src 'self' https://bat.bing.com https://bat.bing.net https://stats.g.doubleclick.net https://ad.doubleclick.net https://analytics.nyltx.com https://privacyportal-uk.onetrust.com https://a.clarity.ms/collect https://*.analytics.google.com https://cdn-ukwest.onetrust.com https://firestore.googleapis.com https://googleads.g.doubleclick.net https://google.com https://www.google.co.uk https://*.googletagmanager.com https://www.google.com https://graphql.datocms.com https://graphql-listen.datocms.com https://www.googleadservices.com https://*.google-analytics.com https://identitytoolkit.googleapis.com https://storage.googleapis.com https://*.litix.io https://*.mux.com https://pagead2.googlesyndication.com https://*.sentry-cdn.com https://*.landbot.io https://*.wistia.com http://*.wistia.com https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location https://*.mktoresp.com; font-src 'self' data: https://cdn.landbot.io https://fonts.gstatic.com https://*.wistia.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests; 1
default-src 'self' data: 'unsafe-inline' *.google-analytics.com *.okta.com *.networkhealth.com networkhealth.com *.facebook.com *.google.com *.doubleclick.net networkhealthfdb.adaptiverx.com *.cloudflare.com *.googleapis.com *.gstatic.com *.googleapis.com *.oktacdn.com; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google.com *.gstatic.com www.google-analytics.com *.networkhealth.com *.cloudflare.com *.facebook.net *.doubleclick.net *.googleapis.com *.oktacdn.com *.okta.com; connect-src 'self' *.networkhealth.com *.okta.com; object-src 'self' *.networkhealth.com; frame-ancestors 'self' *.adaptiverx.com; 1
object-src 'none';base-uri 'self';script-src 'nonce-0Ei31RcPeu104ZP16M0jag' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://ipgtest.monri.com/ https://ipg.monri.com/ https://formtest.wspay.biz/ https://form.wspay.biz/ *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com https://ipgtest.monri.com/ https://ipg.monri.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.facebook.com https://images.unsplash.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com connect.facebook.net https://maps.googleapis.com https://player.vimeo.com *.avada.io *.shopify.com js.mollie.com https://ipgtest.monri.com/ https://ipg.monri.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net https://ipgtest.monri.com/ https://ipg.monri.com/ assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.facebook.com graph.facebook.com https://maps.googleapis.com https://player.vimeo.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; connect-src 'self' https:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data: blob:; media-src 'self' https: blob:; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; worker-src 'self' blob:; base-uri 'self' 1
default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src http: https: data:; font-src https: data:; 1
object-src 'none';base-uri 'self';script-src 'nonce-MGTL78q1f1Xv6SQ67YDMsQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' 'unsafe-inline' upload.dibeo.at asset.dibeo.at static.kurier.at *.googletagservices.com *.googletagmanager.com *.googlesyndication.com *.google-analytics.com *.googleapis.com *.gstatic.com *.google.com *.google.at *.google.de *.google.sk *.privacy-center.org *.hotjar.com *.doubleclick.net *.openstreetmap.fr *.addthis.com cdn.ampproject.org; connect-src 'self' upload.dibeo.at asset.dibeo.at static.kurier.at *.googletagservices.com *.googletagmanager.com *.googlesyndication.com *.google-analytics.com *.googleapis.com *.gstatic.com *.google.com *.google.at *.google.de *.google.sk *.privacy-center.org *.hotjar.com *.doubleclick.net *.openstreetmap.fr *.addthis.com cdn.ampproject.org; base-uri 'self'; form-action 'self'; img-src 'self' data: upload.dibeo.at asset.dibeo.at static.kurier.at *.googletagservices.com *.googletagmanager.com *.googlesyndication.com *.google-analytics.com *.googleapis.com *.gstatic.com *.google.com *.google.at *.google.de *.google.sk *.privacy-center.org *.hotjar.com *.doubleclick.net *.openstreetmap.fr *.addthis.com cdn.ampproject.org; script-src 'self' 'unsafe-inline' upload.dibeo.at asset.dibeo.at static.kurier.at *.googletagservices.com *.googletagmanager.com *.googlesyndication.com *.google-analytics.com *.googleapis.com *.gstatic.com *.google.com *.google.at *.google.de *.google.sk *.privacy-center.org *.hotjar.com *.doubleclick.net *.openstreetmap.fr *.addthis.com cdn.ampproject.org; 1
default-src 'self';script-src 'nonce-8d1d8709468045b90c2f8144be2b2b2b' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' data: https:;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://*.aelia.pl https://*.movecloser.dev https://cdnjs.cloudflare.com https://www.gstatic.com;font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://account.affilitizer.com https://cdnjs.cloudflare.com;object-src 'none';base-uri 'none';img-src 'self' data: https:;form-action 'self' https://www.facebook.com;connect-src 'self' https://*.aelia.pl https://*.clarity.ms https://*.doubleclick.net https://*.google-analytics.com https://*.google.com https://*.google.pl https://*.hotjar.io https://*.movecloser.dev https://*.onet.pl https://*.snapchat.com https://*.synerise.com https://*.vimeo.com https://analytics-ipv6.tiktokw.us https://analytics.tiktok.com https://api-pl-points.easypack24.net https://api.bannercrowd.net https://api.retargeted.co https://bat.bing.com https://bat.bing.net https://connect.facebook.net https://consent.lagardere-tr.com https://loopwidget.com https://nominatim.openstreetmap.org https://p.gsitrix.com https://pagead2.googlesyndication.com https://pixel.wp.pl https://rtg.wewomedia.com https://sentry.movecloser.pl https://sslwidget.criteo.com https://vimeo.com https://webtrafficsource.com https://www.facebook.com https://www.google.by https://www.google.cz https://www.google.de https://www.google.hu https://www.google.nl https://www.google.sk https://www.googleadservices.com https://www.googletagmanager.com wss://ws.hotjar.com;frame-ancestors 'none';child-src 'self';frame-src 'self' https://www.googletagmanager.com https://tr.snapchat.com https://*.tradedoubler.com https://*.aelia.pl https://a.imgstatics.com https://event.getblue.io https://ban.tangooserver.com https://cm.g.doubleclick.net https://containertags.belboon.com https://gum.criteo.com https://static.criteo.net https://www.facebook.com https://rtg.wewomedia.com https://wewo.gotrackier.com https://www.youtube.com https://www.wp.pl https://3ds.pl.ing.com https://payment-widget.przelewy24.pl https://secure.przelewy24.pl https://www.saferpay.com https://methodurl.psp-solutions.com https://acswsx.citibank.pl https://secure.espago.com https://parcelshop.dhl.pl https://player.vimeo.com https://qn4e98.dashboard.wedare.pl https://webtrafficsource.com;report-uri https://sentry.movecloser.pl/api/77/security/?sentry_key=02f8a0fe2a7b4efd8cc99ae6f1fb84ce&sentry_environment=production; upgrade-insecure-requests 1
object-src 'none';base-uri 'self';script-src 'nonce-Todc9xLrneoQVOfPukXPQQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' *.zdassets.com *.zopim.com *.zendesk.com wss://*.zendesk.com wss://*.zopim.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' d1qmrxg9gbf226.cloudfront.net *.klaviyo.com cdn.qantasloyalty.com api-accent.bloomreach.co mpsnare.iesnare.com/snare.js api.smooch.io applepay.cdn-apple.com *.googleadservices.com assets.braintreegateway.com/web *.bazaarvoice.com *.doubleclick.net storage.googleapis.com/workbox-cdn www.google.com/recaptcha/ www.gstatic.com/recaptcha/ cfjump.vans.com.au cfjump.vans.co.nz *.fullstory.com www.googletagmanager.com analytics.tiktok.com cdn.unidays.world *.truefitcorp.com www.paypalobjects.com/api/checkout.min.js *.klaviyo.com t.cfjump.com *.zdassets.com connect.facebook.net maps.googleapis.com dma-cdn.staging.truefitcorp.com/fitrec/dma/js/tracker.js js-agent.newrelic.com js.datadome.co ct.captcha-delivery.com *.adobedtm.com *.afterpay.com *.demdex.net *.forter.com dlthst9q2beh8.cloudfront.net d2nww8zpyj5pk0.cloudfront.net *.google-analytics.com *.paypal.com afterpay.com foursixty.com *.useinsider.com *.roymorgan.com lantern.roeyecdn.com js-sandbox.squarecdn.com player.vimeo.com js.squarecdn.com *.stg.qantasloyalty.com/appcache/wid-redemptions-button/master/ ; style-src 'self' 'unsafe-inline' *.klaviyo.com/onsite/ display.ugc.bazaarvoice.com maxcdn.bootstrapcdn.com/font-awesome *.typekit.net fonts.googleapis.com assets.braintreegateway.com *.adobetm.com foursixty.com *.adobemc.com static.klaviyo.com/onsite/js static-tracking.klaviyo.com/onsite/js assets.api.useinsider.com/css *.klaviyo.com/onsite/ ; img-src data: 'self' api-accent.bloomreach.co *.zendesk.com dpm.demdex.net www.googleadservices.com/ccm www.magentocommerce.com/products/media *.vans.co.nz *.vans.com.au googleads.g.doubleclick.net ad.doubleclick.net www.google.com/ccm www.paypalobjects.com www.google.com www.google.com.au www.google.co.nz www.google.com.vn maps.gstatic.com/mapfiles scontent.cdninstagram.com *.afterpay.com *.accentgra.com www.googletagmanager.com www.facebook.com *.bazaarvoice.com t.paypal.com duuytoqss3gu4.cloudfront.net df45ay5pw60dy.cloudfront.net d3nocrch4qti4v.cloudfront.net *.google-analytics.com *.pinterest.com *.tiktok.com *.useinsider.com maps.googleapis.com/maps developers.google.com *.zopim.io *.zdassets.com adservice.google.com lantern.roeye.com d3k81ch9hvuctc.cloudfront.net ; object-src 'none' ; base-uri 'self' ; child-src 'self' blob: ; connect-src 'self' gateway.stg.qantasloyalty.com gateway.qantasloyalty.com api-accent.bloomreach.co analytics.google.com/g/collect iq.afterpay.com/us/v1 iq.afterpay-beta.com/us/v1 *.my.sentry.io wss://api.smooch.io *.accentgra.com www.facebook.com/tr google.com www.google.com collect-ap2.attraqt.io smetrics.vans.co.nz *.fullstory.com *.klaviyo.com smetrics.vans.com.au api-js.datadome.co *.adobedc.net *.afterpay.com *.bazaarvoice.com *.braintree-api.com *.braintreegateway.com *.demdex.net *.forter.com *.foursixty.com google.com/ccm www.google.com/ccm *.google-analytics.com *.googleapis.com *.nr-data.net *.paypal.com *.truefitcorp.com *.zdassets.com *.zendesk.com *.zopim.com accentgroupxpdev.112.2o7.net afterpay.com analytics.tiktok.com facebook.com foursixty.com kleber.datatoolscloud.net.au sentry.io smetrics.hypedc.com vimeo.com wss://widget-mediator.zopim.com d2o5idwacg3gyw.cloudfront.net dz8rit8v72mig.cloudfront.net d2lxqodqbpy7c2.cloudfront.net d6rak4b14t5gp.cloudfront.net d3k4bt74u9esq1.cloudfront.net wss://cdn0.forter.com api.myunidays.com o19233.ingest.sentry.io/api/1188273/store ct.pinterest.com opreq.observepoint.com *.useinsider.com stats.g.doubleclick.net/g/collect *.stg.qantasloyalty.com/redemptions/ ; font-src data: 'self' maxcdn.bootstrapcdn.com/font-awesome fonts.gstatic.com *.truefitcorp.com *.useinsider.com static.klaviyo.com use.typekit.net shopping.qantas.com/static/fonts ; frame-src 'self' checkout.qantas.com api-accent.bloomreach.co www.googletagmanager.com geo.captcha-delivery.com *.formstack.com *.afterpay.com *.bazaarvoice.com *.demdex.net *.doubleclick.net *.facebook.com *.myunidays.com *.omniparcelreturns.com *.paypal.com *.paypalobjects.com *.truefitcorp.com *.useinsider.com *.vimeo.com *.youtu.be *.youtube.com afterpay.com assets.braintreegateway.com facebook.com foursixty.com google.com www.google.com vimeo.com *.qlstg.qantas.com/ ; worker-src 'self' blob: *.accentgra.com *.vans.co.nz *.vans.com.au; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://assets.adobedtm.com https://*.omtrdc.net https://cdn-cookieyes.com https://*.typeform.com; style-src 'self' 'unsafe-inline' https://*.typeform.com; img-src 'self' data: https://api.satair.com/ https://assets.adobedtm.com https://*.omtrdc.net https://*.demdex.net https://*.everesttech.net https://cdn-cookieyes.com https://*.youtube.com https://*.ytimg.com; connect-src 'self' https://api.satair.com/ https://*.applicationinsights.azure.com https://assets.adobedtm.com https://*.omtrdc.net https://*.demdex.net https://*.everesttech.net https://cdn-cookieyes.com https://*.cookieyes.com https://*.typeform.com; frame-src 'self' https://*.demdex.net https://*.typeform.com https://*.youtube.com https://www.youtube-nocookie.com https://*.twentythree.com 1
base-uri 'self'; object-src 'none'; script-src 'nonce-aj2z3UezYbn5Kus1Yky5jKVoX' 'strict-dynamic' 'wasm-unsafe-eval'; worker-src 'self' blob:; frame-ancestors 'self'; manifest-src 'self' 1
default-src 'self' https: data: 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.segment.com https://assets.calendly.com https://js.stripe.com https://widget.intercom.io https://*.intercomcdn.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://tracking-api.g2.com https://www.g2.com https://bat.bing.com https://googleads.g.doubleclick.net https://cdn.mxpnl.com https://edge.fullstory.com https://rs.fullstory.com https://cdn.heapanalytics.com https://ct.capterra.com https://*.capterra.com https://*.openai.com https://n.synap.ac; style-src 'self' 'unsafe-inline' https://assets.calendly.com https://fonts.googleapis.com; img-src 'self' data: https:; connect-src 'self' https://cdn.segment.com https://api.segment.io https://*.segment.io https://*.segment.com https://*.segmentapis.com https://api.stripe.com https://labs-lambdas-prod.synap.ac https://*.synap.ac https://*.lambda-url.eu-west-2.on.aws https://*.intercom.io https://*.intercom.com wss://*.intercom.io https://*.intercomcdn.com https://*.intercom-messenger.com https://js.intercomcdn.com https://www.googletagmanager.com https://*.googletagmanager.com https://www.google.com https://www.google.co.uk https://www.googleadservices.com https://www.google-analytics.com https://google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://tracking-api.g2.com https://www.g2.com https://bat.bing.com https://bat.bing.net https://googleads.g.doubleclick.net https://ad.doubleclick.net https://*.mxpnl.com https://api.mixpanel.com https://*.fullstory.com https://*.heapanalytics.com https://cdn.heapanalytics.com https://ct.capterra.com https://*.capterra.com https://plausible.io https://*.openai.com https://stats.g.doubleclick.net; font-src 'self' https://fonts.gstatic.com https://fonts.intercomcdn.com; frame-src https://calendly.com https://*.calendly.com https://js.stripe.com https://hooks.stripe.com https://www.googletagmanager.com https://*.googletagmanager.com https://www.intercom.io https://*.intercom.io https://*.intercom-messenger.com https://googleads.g.doubleclick.net; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.google-analytics.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; img-src 'self' data: https://img.tanie-loty.com.pl https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://rezerwacje.tanie-loty.com.pl https://cloudflareinsights.com https://*.google-analytics.com https://*.analytics.google.com https://pagead2.googlesyndication.com; frame-src 'self' https://rezerwacje.tanie-loty.com.pl 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cloudflare.com *.twitter.com *.google.com *.google.co.in *.facebook.com https://www.gstatic.com *.twimg.com *.trustedshops.com *.googleapis.com *.bootstrapcdn.com cash-f.squarecdn.com https://cdn.riverty.design/ data: https://fonts.gstatic.com *.open32.nl *.silvercreek.nl *.b32groep.nl *.cdn-apple.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.facebook.com * uc8.tv 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net *.braintreegateway.com *.paypal.com google.com *.google.com *.youtube-nocookie.com *.twitter.com https://www.google.com https://www.google.co.in https://www.facebook.com * uc8.tv https://documents.riverty.com/ https://www.googletagmanager.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.paypal.com *.typekit.net *.gstatic.com *.cloudflare.com *.google.com *.google.co.in https://www.facebook.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.connect.facebook.net https://stats.g.doubleclick.net https://d.adroll.com https://pixel.advertising.com https://pixel.rubiconproject.com https://simage2.pubmatic.com https://dsum-sec.casalemedia.com https://ads.yahoo.com https://eb2.3lift.com https://sync.outbrain.com https://trc.taboola.com https://x.bidswitch.net/sync https://ib.adnxs.com https://idsync.rlcdn.com https://us-u.openx.net https://ups.analytics.yahoo.com https://segments.company-target.com https://sync.tidaltv.com * https://cdn.myafterpay.com/ uc8.tv https://cdn.riverty.design/ https://images.unsplash.com imgsct.cookiebot.com https://maps.gstatic.com http://maps.gstatic.com https://maps.googleapis.com http://maps.googleapis.com https://www.google-analytics.com https://www.google.com https://www.google.nl https://www.google.be *.open32.nl *.silvercreek.nl *.b32groep.nl https://cdn.riverty.design http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.magezon.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.cloudflare.com *.twitter.com *.google.co.in *.facebook.com *.googleadservices.com *.google-analytics.com *.twimg.com https://www.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://connect.facebook.net *.paypalobjects.com *.paypal.com https://chimpstatic.com *.googletagmanager.com https://s.adroll.com https://d.adroll.com https://d.adroll.mgr.consensu.org *.bootstrapcdn.com *.adyen.com pay.google.com *.payments-amazon.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com uc8.tv https://cdn.myafterpay.com/ https://cdn.bnpl.riverty.io/ https://maps.googleapis.com https://player.vimeo.com consent.cookiebot.com blob: https://www.google.com https://ssl.google-analytics.com https://ecookie.nl https://www.ecookie.nl https://www.googletagmanager.com *.open32.nl *.silvercreek.nl *.b32groep.nl *.convertexperiments.com *.voyado.com *.faslet.net http://www.googletagmanager.com/ https://www.googletagmanager.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.youtube.com *.bootstrapcdn.com *.cash.app https://fonts.googleapis.com http://fonts.googleapis.com *.open32.nl *.silvercreek.nl *.b32groep.nl 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://flirtcreativity.com *.open32.nl *.silvercreek.nl *.b32groep.nl http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com vimeo.com *.cloudflare.com *.twitter.com *.twimg.com *.google.co.in *.facebook.com * uc8.tv https://cdn.myafterpay.com/ https://documents.myafterpay.com/ https://documents.riverty.com/ https://www.afterpay.nl/ https://cdn.bnpl.riverty.io/ https://trace-api.newrelic.com/ https://distributions.crowdin.net/ https://api.crowdin.com/ https://maps.googleapis.com https://player.vimeo.com https://stats.g.doubleclick.net https://www.google-analytics.com/ *.open32.nl *.silvercreek.nl *.b32groep.nl *.voyado.com *.faslet.net http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://127.0.0.1/; report-to report-endpoint; 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss: blob:; frame-src 'self' https:; media-src 'self' https: data: blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://*.clarity.ms https://assets.calendly.com https://webforms.closeiocdn.com https://challenges.cloudflare.com https://cse.google.com https://www.google.com https://www.gstatic.com https://www.googleadservices.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' https://www.google.com https://cse.google.com https://www.gstatic.com; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://www.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.clarity.ms https://*.doubleclick.net https://www.googleadservices.com https://www.google.com https://syndicatedsearch.goog https://cse.google.com https://clients1.google.com https://calendly.com https://assets.calendly.com https://webforms.close.com https://webforms.closeiocdn.com https://challenges.cloudflare.com https://academy-api.tallyfy.workers.dev https://workflow-ai.tallyfy.com https://answers.tallyfy.com; frame-src 'self' https://syndicatedsearch.goog https://player.vimeo.com https://*.youtube.com https://*.youtube-nocookie.com https://calendly.com https://challenges.cloudflare.com https://giphy.com https://td.doubleclick.net https://www.googletagmanager.com; media-src 'self' https://player.vimeo.com; object-src 'none'; base-uri 'self'; form-action 'self' https://cse.google.com https://www.google.com https://newsletter.tallyfy.com; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-5wKstP29IuB0Sl9gd49lBw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=awyz4HkgZKpdVjmIQ8Urps7JGPnuTsA92InJJP0q8Eg-1789271676.878199-1.0.1.1-22NZ.2ae8idyoMMEP7tlLaNWc_nWEEynydQUd1E94e.DIbGt0URdjHBw57LEgpcCq0dlQmOxh2ZBkUu.2cSkoWGc_EHplItI3HvhxgmvsnKCQLa7yS8AWb3SLPWfzMFXnoS6t3vyRZtMoIRJQxnBP2Uf9o67FJ3b13pRQmVfs1tpXTaElOIawRetS9fuCTbA; report-to cf-uqdqwdlgmzmmlqdh 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://api.uk.exponea.com; style-src 'self' 'unsafe-inline' https://cloud.typography.com; img-src 'self' data: blob: https://emis.imgix.net https://i.ytimg.com https://www.google.com https://ddt035157piw6.cloudfront.net; font-src 'self' data: https://cloud.typography.com; connect-src 'self' https://api.exponea.com https://www.google.com https://www.googletagmanager.com https://consentcdn.cookiebot.com wss://visitors.live wss://*.visitors.live; frame-src 'self' https://www.youtube.com https://www.google.com https://consentcdn.cookiebot.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.clarity.ms https://*.clarity.ms https://cs.iubenda.com https://cdn.iubenda.com https://embeds.iubenda.com https://*.iubenda.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://static.cloudflareinsights.com https://cdn.trustindex.io https://analytics.ahrefs.com https://js.stripe.com https://*.algolia.net https://*.algolianet.com https://storage.ghost.io https://83-629.ghost.io; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.iubenda.com https://*.iubenda.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cdn.trustindex.io; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net https://cdn.trustindex.io; img-src 'self' data: https: blob:; connect-src 'self' https://*.clarity.ms https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://83-629.ghost.io https://api.iubenda.com https://*.iubenda.com https://*.algolia.net https://*.algolianet.com https://analytics.ahrefs.com https://cdn.trustindex.io; frame-src https://js.stripe.com https://hooks.stripe.com https://*.iubenda.com https://www.youtube.com https://player.vimeo.com https://83-629.ghost.io; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://83-629.ghost.io; object-src 'none'; upgrade-insecure-requests 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com *.fontawesome.com d1w350bl4wlonm.cloudfront.net d8mmzo4dbge7k.cloudfront.net drevs12goudzk.cloudfront.net d2zjb5saaoidg0.cloudfront.net d1bj2pk3s4epo2.cloudfront.net d12kmzq5k6k6i9.cloudfront.net d3o0jgwii26u89.cloudfront.net nuk.de applepay.cdn-apple.com cdnjs.cloudflare.com/ 'self' data: https://widgets.trustedshops.com https://integrations.etrusted.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com oppwa.com *.oppwa.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.awin1.com *.zenaps.com *.fls.doubleclick.net display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com https://www.googletagmanager.com/ configurator.nuk.de configurator.abnahme.nuk.de pay.google.com applepay.cdn-apple.com cmp.osano.com match.adsrvr.org hal9000.redintelligence.net insight.adsrvr.org ad.ad-srv.net d.c.cdnsrv.de surveymonkey.com www.surveymonkey.com secure.novalnet.de customers.barzahlen.de customers-sandbox.barzahlen.de oppwa.com *.oppwa.com data:text 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com www.gstatic.com *.awin1.com *.zenaps.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ d1w350bl4wlonm.cloudfront.net d8mmzo4dbge7k.cloudfront.net drevs12goudzk.cloudfront.net d2zjb5saaoidg0.cloudfront.net d1bj2pk3s4epo2.cloudfront.net d12kmzq5k6k6i9.cloudfront.net d3o0jgwii26u89.cloudfront.net display-stg.ugc.bazaarvoice.com network-eu-stg-a.bazaarvoice.com network-eu-a.bazaarvoice.com nuk.de cdn.pixabay.com maps.googleapis.com ad.doubleclick.net t.uimserv.net maps.gstatic.com lantern.roeye.com pagead2.googlesyndication.com https://api.mapbox.com oppwa.com *.oppwa.com 'self' data: https://widgets.trustedshops.com https://integrations.etrusted.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com google-analytics.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.awin1.com www.dwin1.com *.zenaps.com https://the.sciencebehindecommerce.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com widget.freshworks.com m2epro.freshdesk.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ d1w350bl4wlonm.cloudfront.net d8mmzo4dbge7k.cloudfront.net drevs12goudzk.cloudfront.net d2zjb5saaoidg0.cloudfront.net d1bj2pk3s4epo2.cloudfront.net d12kmzq5k6k6i 9.cloudfront.net d3o0jgwii26u89.cloudfront.net mapagmbh.germany-2.evergage.com cdn.evgnet.com/ network-eu-stg-a.bazaarvoice.com network-eu-a.bazaarvoice.com facebook.net facebook.com etracker.com etracker.de nuk.de maps.googleapis.com cmp.osano.com newell.piwik.pro tm.ad-srv.net s.uicdn.com connect.facebook.net cdn.mookie1.com acdn.adnxs.com js.adsrvr.org r.df-srv.de d.c.cdnsrv.de widget.surveymonkey.com ajax.googleapis.com lantern.roeye.com cdn.novalnet.de cdn.barzahlen.de applepay.cdn-apple.com *.oppwa.com oppwa.com https://widgets.trustedshops.com https://integrations.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com display.ugc.bazaarvoice.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com d1w350bl4wlonm.cloudfront.net d8mmzo4dbge7k.cloudfront.net drevs12goudzk.cloudfront.net d2zjb5saaoidg0.cloudfront.net d1bj2pk3s4epo2.cloudfront.net d12kmzq5k6k6i9.cloudfront.net d3o0jgwii26u89.cloudfront.net nuk.de cdnjs.cloudflare.com/ oppwa.com *.oppwa.com *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://integrations.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://the.sciencebehindecommerce.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com widget.freshworks.com m2epro.freshdesk.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ d1w350bl4wlonm.cloudfront.net d8mmzo4dbge7k.cloudfront.net drevs12goudzk.cloudfront.net d2zjb5saaoidg0.cloudfront.net d1bj2pk3s4epo2.cloudfront.net d12kmzq5k6k6i9.cloudfront.net d3o0jgwii26u89.cloudfront.net nuk.de secure.novalnet.de maps.googleapis.com newell.piwik.pro www.google.com googleads.g.doubleclick.net mapagmbh.germany-2.evergage.com www.wepowerconnections.com cmp.osano.com bat.bing.com/ lantern.roeye.com pagead2.googlesyndication.com payport.novalnet.de oppwa.com *.oppwa.com autocomplete2.postdirekt.de *.google-analytics.com *.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'none'; connect-src 'self' https://carross-eu.matomo.cloud https://www.facebook.com/tr/ https://*.google-analytics.com/*/; font-src 'self'; form-action 'self' https://paiement.systempay.fr/vads-payment/ https://www.facebook.com/tr/ https://*.ads.linkedin.com; frame-src https://www.youtube-nocookie.com; img-src 'self' data: https://cdn.matomo.cloud/carross-eu.matomo.cloud/ https://img.youtube.com https://i.ytimg.com https://ressources.carross.eu https://ressources.carross.local https://www.google-analytics.com https://11599994.fls.doubleclick.net https://ad.doubleclick.net https://www.facebook.com/tr/ https://*.ads.linkedin.com https://www.linkedin.com/px; script-src 'report-sample' 'self' 'unsafe-inline' https://cdn.matomo.cloud/carross-eu.matomo.cloud/matomo.js https://www.googletagmanager.com/gtm.js https://www.google-analytics.com/analytics.js https://www.google-analytics.com/plugins/ua/ec.js https://www.googletagmanager.com/gtag/js https://connect.facebook.net/en_US/fbevents.js https://connect.facebook.net/signals/config/3051721451810486 https://snap.licdn.com/li.lms-analytics/insight.min.js; style-src 'report-sample' 'self' 'unsafe-inline'; block-all-mixed-content; upgrade-insecure-requests; frame-ancestors https://carross-eu.matomo.cloud; base-uri 'self';  report-uri /csp-parser 1
object-src 'none'; base-uri 'self'; script-src 'self' 'strict-dynamic' https: http: 'nonce-9pQCE+k0krZoHDgV9jrKjA=='; script-src-elem 'self' 'nonce-9pQCE+k0krZoHDgV9jrKjA==' https://cdn.ckeditor.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://kit.fontawesome.com https://unpkg.com https://go.evolent.com https://go.evolenthealth.com https://www.clarity.ms https://www.clarity.ms/tag/h0yoxp4coe https://scripts.clarity.ms https://cdn.pardot.com https://pi.pardot.com https://edge.marker.io https://www.googletagmanager.com/gtm.js https://www.googletagmanager.com https://browser.sentry-cdn.com 1
object-src 'none'; script-src 'self' 'report-sample' addtocalendar.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://polyfill-fastly.io https://unpkg.com platform.twitter.com; style-src 'self' 'report-sample' addtocalendar.com fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
base-uri 'self'; block-all-mixed-content; default-src 'self'; form-action 'self'; frame-ancestors 'self'; plugin-types 'none'; script-src 'self' 'report-sample' 'unsafe-inline'; style-src 'self' 'report-sample' 'unsafe-inline'; object-src 'none'; worker-src 'none'; report-uri https://prod.ap.batic.cudasvc.com/xenios/api/v1/error/report??paid=151&spid=28211&v=v1.0&payload=YPdY9WRb5JwJ55hD1-rOWWRMFTotwuhEpaG2NrbPgAAbbqmtaoHV1oqRCiz2JL4wpkuajllnaJ-Hhqyht86zMz1Og1QjA68PyD2hqVIGTYaLgxmPi8wO2vLpL8c95zgxuSo7iBROp-e2io9GK688JCPQx8MxpRzDxdnjSH_whi4aXWEYPT3XElUZFxnC2gXZ2SyX6Rowj0DsrjOjawFubw==; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com cdnjs.cloudflare.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors self www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.weltpixel.com www.google.com www.gstatic.com apis.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.wesupply.xyz https://wesupplylabs.com guarantee-cdn.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://www.google.com.ar https://cdn.impel.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com guarantee-cdn.com maps.googleapis.com *.amazonaws.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page https://api.stage.bamboopayment.com https://testapi.siemprepago.com ajax.googleapis.com api.bamboopayment.com api.siemprepago.com *.googleapis.com *.gstatic.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cloudflare.com guarantee-cdn.com maps.googleapis.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com cdnjs.cloudflare.com *.googleapis.com *.google.com *.gstatic.com assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://cdnjs.cloudflare.com https://analytics-ipv6.tiktokw.us maps.googleapis.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.brid.tv https://*.google-analytics.com https://*.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://prod-11-api.golfdk.scandesigns.dk https://drupal.golf.dk https://*.google-analytics.com; media-src 'self' https://*.brid.tv; frame-src https://*.brid.tv https://www.youtube.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' 1
base-uri 'self'; connect-src 'self' https://*.googleapis.com https://www.google-analytics.com https://analytics.google.com https://www.google.com https://www.google.co.il https://*.taboola.com https://*.hotjar.com https://*.hotjar.io https://*.clarity.ms https://api-iam.intercom.io https://nexus-websocket-a.intercom.io https://widget.intercom.io https://realtime.cloud.gist.build https://consumer.cloud.gist.build https://firebase.googleapis.com https://px.ads.linkedin.com https://display.popt.in https://mpc-prod-21-1053047382554.us-central1.run.app; default-src 'self'; font-src 'self' data: https://fonts.gstatic.com https://script.hotjar.com; form-action 'self' https://www.facebook.com; frame-src 'self' https://www.google.com https://www.facebook.com; frame-ancestors 'none'; img-src 'self' data: blob: https://*.google.com https://*.google.co.il https://googleads.g.doubleclick.net https://cm.g.doubleclick.net https://www.googletagmanager.com https://www.facebook.com https://px.ads.linkedin.com https://pixel.wp.com https://c.clarity.ms https://cds.taboola.com https://tr-rc.lfeeder.com https://analytics.maskyoo.net; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://connect.facebook.net https://snap.licdn.com https://cdn.taboola.com https://trc.taboola.com https://script.hotjar.com https://static.hotjar.com https://www.clarity.ms https://scripts.clarity.ms https://widget.intercom.io https://sc.lfeeder.com https://s0.wp.com https://stats.wp.com https://tags.crwdcntrl.net https://cdn.customer.io https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=L2sDvRhbPulb11KyXf9XisCCcCOU74xtRoBZjsdJkeI-1789282561.4068303-1.0.1.1-.izhNtTsZCweNXsrJJzXQh9IfZ90rFvxcV0TvXp8nSz2P.Z3femzLY2D80Q_F4wCJFkF.08iIqjq0SLj09vHgCF007iCrkqwfshTmj9dnQKIaK9tn2eb7dhdmTpM5_pFvIhDT7sEx_KL_N0wQWEqyFNSEYTxJjO8lH5i_ZcpfxfEnBSx62j4KlpcAYeic5Er; report-to cf-nraocuohywhfzgqz 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com maxcdn.bootstrapcdn.com https://use.typekit.net https://fonts.gstatic.com/ https://p.typekit.net/ https://fonts.googleapis.com/ *.cdnfonts.com *.fontawesome.com *.klaviyo.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com https://www.rsa3dsauth.co.uk/ *.facebook.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com https://widget.trustpilot.com/ https://consentcdn.cookiebot.com/ https://www.rsa3dsauth.co.uk/ www.xtento.com *.doubleclick.net *.facebook.com *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.afd.co.uk www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.stripe.com *.stripe.network *.google.com ebizmarts-website.s3.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.magezon.com https://media.jtatkinson.co.uk/ https://imgsct.cookiebot.com/ www.xtento.com cdn.xtento.com *.cookiebot.com *.doubleclick.net *.facebook.com *.facebook.net *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cd www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.nl www.google.no www.google.nr www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sn www.google.so www.google.sr www.google.tg www.google.tl www.google.tn www.google.tt www.google.ws *.googletagmanager.com *.trustpilot.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com polyfill.io *.afd.co.uk www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.sagepay.com *.opayo.eu.elavon.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://widget.trustpilot.com/ https://consent.cookiebot.com https://consentcdn.cookiebot.com www.xtento.com cdn.xtento.com *.cookiebot.com *.doubleclick.net *.facebook.net *.googleapis.com *.googletagmanager.com *.klaviyo.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com *.sagepay.com *.opayo.eu.elavon.com https://static.klaviyo.com maxcdn.bootstrapcdn.com *.trustpilot.com https://use.typekit.net https://fonts.gstatic.com/ https://p.typekit.net/ https://fonts.googleapis.com/ *.fontawesome.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.klaviyo.com *.typekit.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://apps.afd.co.uk www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://consentcdn.cookiebot.com https://consent.cookiebot.com *.algolia.io *.algolia.net *.algolianet.com *.datadome.co *.doubleclick.net *.facebook.com *.google-analytics.com *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cd www.google.cg www.google.ch www.google.ci www.google.cl www.google.co.ao www.google.co.bw www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.mv www.google.mw www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sn www.google.sr www.google.tg www.google.tn www.google.tt *.klaviyo.com *.samsung.com *.typekit.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://b3c2c731-63d3-4340-a29a-f72f0bda06ca.sansec.watch/; report-to report-endpoint; 1
default-src 'self';     script-src 'self' 'unsafe-inline' 'unsafe-eval' blob:         https://cdnjs.cloudflare.com         https://www.youtube.com         https://challenges.cloudflare.com         https://static.zdassets.com         https://pod-28-sunco-ws.zendesk.com         https://ekr.zdassets.com         https://relokia.zendesk.com         https://assets.calendly.com         https://static.cloudflareinsights.com         https://www.google-analytics.com         https://www.googletagmanager.com         https://*.doubleclick.net         https://tracking-api.g2.com         https://unpkg.com/web-vitals@5.0.1/dist/web-vitals.iife.js         https://*.visualwebsiteoptimizer.com         https://*.clarity.ms         https://*.licdn.com         https://*.linkedin.com         https://analytics.ahrefs.com;     worker-src 'self' blob:;     style-src 'self' 'unsafe-inline'         https://cdnjs.cloudflare.com         https://assets.calendly.com         https://*.vwo.com         https://*.visualwebsiteoptimizer.com         https://fonts.googleapis.com;     img-src 'self' data: https:;     font-src 'self' data:         https://fonts.gstatic.com;     connect-src 'self'         https://relokia.zendesk.com         https://ekr.zdassets.com         wss://pod-28-sunco-ws.zendesk.com         https://ipinfo.io         https://*.doubleclick.net         https://pagead2.googlesyndication.com         https://www.google.com         https://www.google-analytics.com         https://analytics.ahrefs.com         https://*.clarity.ms         https://*.vwo.com         https://*.visualwebsiteoptimizer.com         https://validator.nu         https://*.linkedin.com         https://analytics.google.com         https://*.analytics.google.com;     frame-src         https://project-management.relokia.com         https://*.project-management.relokia.com         https://calendly.com         https://assets.calendly.com         https://challenges.cloudflare.com         https://www.youtube.com;     media-src 'self';     frame-ancestors 'self'         https://project-management.relokia.com/         https://*.project-management.relokia.com; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: *.fontawesome.com use.fontawesome.com/releases/v5.6.0/webfonts 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.imseuro.co.uk www.imseuro.eu 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com consentcdn.cookiebot.com consentcdn.cookiebot.eu www.xtento.com account.fetchify.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.googleapis.com imgsct.cookiebot.com imgsct.cookiebot.eu ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com www.xtento.com cdn.xtento.com *.hsforms.net *.hsforms.com 'self' data: *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ consent.cookiebot.com consentcdn.cookiebot.com consent.cookiebot.eu consentcdn.cookiebot.eu g10696554090.co chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com www.xtento.com cdn.xtento.com *.hsforms.net *.hsforms.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.googletagmanager.com tagmanager.google.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.fontawesome.com cc-cdn.com use.fontawesome.com/releases/v5.6.0/css *.googleapis.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com consentcdn.cookiebot.com consentcdn.cookiebot.eu consent.cookiebot.com consent.cookiebot.eu form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk t.elasticsuite.io *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-src 'self'; report-uri https://secure.ummsfoundation.org/site/XFrameViolation 1
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; img-src 'self' https: data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com; object-src 'none'; report-uri /api/csp-report.php 1
default-src 'none'; script-src 'self' https://go.siliconvalleycf.org https://www.google.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://translate.google.com https://www.gstatic.com https://translate.googleapis.com https://translate-pa.googleapis.com https://s3.amazonaws.com https://cdn-cookieyes.com/ https://www.googletagmanager.com https://w.recruiterbox.com; style-src 'self' https://go.siliconvalleycf.org https://www.gstatic.com https://fonts.gstatic.com https://cdn-images.mailchimp.com https://w.recruiterbox.com; img-src 'self' https://www.w3.org https://www.google.com https://www.gstatic.com https://fonts.gstatic.com/ data: https://www.siliconvalleycf.org https://cdn-cookieyes.com https://w.recruiterbox.com; connect-src 'self' https://translate.googleapis.com https://cdn-cookieyes.com https://log.cookieyes.com; font-src 'self' https://fonts.gstatic.com data:; frame-src https://www.google.com https://w.recruiterbox.com https://app.recruiterbox.com; form-action 'self'; base-uri 'self'; 1
object-src 'none';base-uri 'self';script-src 'nonce--O_RNepPTe0VtW2m_hcBHw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.fontawesome.com https://fonts.bunny.net *.bootstrapcdn.com *.cloudflare.com *.googleusercontent.com *.jsdelivr.net *.slant.co unpkg.com data: 'self' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.2c2p.com *.americanexpress.com *.arcot.com *.cardinalcommerce.com *.citibank.com *.ctbcbank.com *.dnp-cdms.jp *.inicis.com *.ipay88.com.my *.unionpay.com *.uobgroup.com 'self' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.weltpixel.com *.americanexpress.com *.arcot.com *.cardinalcommerce.com *.citibank.com *.ctbcbank.com *.dnp-cdms.jp *.inicis.com *.unionpay.com *.uobgroup.com 'self' 'unsafe-eval' 'unsafe-hashes'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com k.kakaocdn.net https://firebasestorage.googleapis.com *.inicis.com *.afterpay.com *.doubleclick.net *.elcompanies.com www.google.ad www.google.at www.google.co.id www.google.co.in www.google.co.jp www.google.co.kr www.google.com.au www.google.com.bd www.google.com.co www.google.com.hk www.google.com.mt www.google.com.my www.google.com.ph www.google.com.sg www.google.com.tw www.google.com.vn www.google.co.th www.google.co.uk www.google.co.za www.google.de www.google.dk www.google.es www.google.fr www.google.ie www.google.it www.google.nl www.google.se *.google.com *.googletagmanager.com *.googleusercontent.com *.hstatic.net *.naver.com *.thecompanystore.com.sg data: 'self' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://api.addressfinder.io *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.googleapis.com *.gstatic.com developers.kakao.com *.kakaocdn.net *.avada.io *.shopify.com *.inicis.com *.facebook.net *.google-analytics.com *.googletagmanager.com 'self' 'unsafe-eval' 'unsafe-hashes' 'nonce-bmhqb2hxZHkwZjVpY25iY3Ewd3hpZ294MThsbWI1ZWI=' 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY/CkTMBhjNhwPvglpYumjx31B4fjkY8=' 'sha256-XGfPSYcBWPq7sx/ucAvvEcAKkiSRS2GeZReWO0f5vXQ='; style-src *.adobe.com fonts.googleapis.com https://api.addressfinder.io *.cash.app *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.fontawesome.com https://fonts.bunny.net *.inicis.com *.googleapis.com *.gstatic.com *.jsdelivr.net 'self' 'unsafe-eval' 'unsafe-hashes'; object-src 'self'; media-src *.adobe.com *.gstatic.com 'self' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://api.addressfinder.io * *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com *.googleapis.com kauth.kakao.com https://get.geojs.io *.avada.io *.inicis.com *.doubleclick.net www.google.ad www.google.at www.google.co.id www.google.co.in www.google.co.jp www.google.co.kr www.google.com.au www.google.com.bd www.google.com.hk www.google.com.mt www.google.com.my www.google.com.ph www.google.com.sg www.google.com.tw www.google.com.vn www.google.co.th www.google.co.za www.google.de www.google.dk www.google.es www.google.fr www.google.ie www.google.it www.google.nl *.googletagmanager.com 'self' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self'; default-src 'self'; base-uri 'self'; report-uri https://577b98e4-295e-4fa5-a3b4-175395da624f.sansec.watch/; report-to report-endpoint; 1
font-src *.fontawesome.com *.yotpo.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com www.xtento.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de www.xtento.com cdn.xtento.com *.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com *.avada.io maps.googleapis.com www.xtento.com cdn.xtento.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-5L4MFMiKGN1emG5KUGzk3Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.cloudflare.com *.gstatic.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.sagepay.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.doubleclick.net *.googletagmanager.com *.google.com *.elavon.com *.sagepay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.googleadservices.com *.google-analytics.com *.gstatic.com *.googleapis.com *.google.co.uk https://firebasestorage.googleapis.com https://services.postcodeanywhere.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cc.cdn.civiccomputing.com *.google.com *.googleapis.com *.google-analytics.com *.gstatic.com *.fontawesome.com *.doubleclick.net *.elavon.com *.sagepay.com *.avada.io https://services.postcodeanywhere.co.uk https://howar11121.pcapredict.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.fontawesome.com https://fonts.bunny.net https://services.postcodeanywhere.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com apikeys.civiccomputing.com clapi.civiccomputing.com *.cloudflare.com *.google.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.elavon.com *.sagepay.com https://get.geojs.io *.avada.io https://services.postcodeanywhere.co.uk 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com s3.amazonaws.com statics.addi.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com preapproval.addi.com *.addi.com *.blob.core.windows.net/* *.blob.core.windows.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://* https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com s3.amazonaws.com widgets.addi.com statics.addi.com *.blob.core.windows.net/* *.blob.core.windows.net *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com s3.amazonaws.com statics.addi.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.addi.com *.sistecredito.com/* *.blob.core.windows.net/* *.sistecredito.com *.sistecreditocloud.com *.blob.core.windows.net https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src preapproval.addi.com *.addi.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/  https://widget.trustpilot.com;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://appleid.cdn-apple.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com *.myheritage.hu https://www.myheritage.hu  'unsafe-eval' 'nonce-16c4a9d11e20013b65eb41d3679d2b5d' 'strict-dynamic' https://widget.trustpilot.com https://invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style  https://widget.trustpilot.com;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io https://www.google.com/recaptcha/enterprise/* https://www.google.com/recaptcha/enterprise/ https://www.google.com/recaptcha/enterprise/clr https://www.google.com/recaptcha/ https://maps.googleapis.com https://people.googleapis.com https://translate-pa.googleapis.com *.myheritage.hu https://widget.trustpilot.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:  https://widget.trustpilot.com https://*.trustpilot.com;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=report&canonical_page_id=/company/home/ 1
default-src https:; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; report-uri /i/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.aardy.com partners.aardy.com *.partners.aardy.com *.googletagmanager.com tagmanager.google.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.googlesyndication.com *.google.com www.googleoptimize.com optimize.google.com *.salesforce.com *.force.com *.salesforceliveagent.com *.my.site.com api.s10h.io bat.bing.com *.bing.net *.clarity.ms www.clarity.ms scripts.clarity.ms sp.analytics.yahoo.com s.yimg.com connect.facebook.net script.tapfiliate.com tapfiliate.com c.webtrends-optimize.com cdn.mxpnl.com cdn.segment.com cdn.segment.io *.clerk.dev *.hotjar.com *.clerk.com clerk.aardy.com *.clerk.accounts.dev va.vercel-scripts.com vercel.live *.vercel.live *.vercel.app www.emjcd.com cj.dotomi.com static.hotjar.com script.hotjar.com *.cloudfront.net js.stripe.com; style-src 'self' 'unsafe-inline' partners.aardy.com *.partners.aardy.com *.salesforce.com *.my.site.com fonts.googleapis.com *.googletagmanager.com tagmanager.google.com *.force.com; img-src 'self' data: blob: https: images.ctfassets.net cdn.aardy.com partners.aardy.com *.partners.aardy.com *.cloudfront.net *.s3.amazonaws.com i.ytimg.com *.google-analytics.com *.googletagmanager.com www.facebook.com *.doubleclick.net *.googlesyndication.com *.google.com bat.bing.com *.bing.net *.clarity.ms www.clarity.ms scripts.clarity.ms *.clerk.com *.clerk.dev *.hotjar.com; font-src 'self' data: fonts.gstatic.com fonts.googleapis.com; connect-src 'self' http://localhost:* ws://localhost:* *.aardy.com partners.aardy.com *.partners.aardy.com *.vercel.app vitals.vercel-insights.com *.vercel-insights.com *.force.com *.salesforce.com *.salesforceliveagent.com *.my.site.com *.my.salesforce-scrt.com wss://*.my.salesforce-scrt.com api.s10h.io *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.doubleclick.net *.googlesyndication.com *.google.com *.googleadservices.com bat.bing.com *.bing.net *.clarity.ms www.clarity.ms scripts.clarity.ms s.yimg.com sp.analytics.yahoo.com *.facebook.com api.mixpanel.com api-js.mixpanel.com api.segment.io cdn.segment.com *.browser-intake-datadoghq.com browser-intake-datadoghq.com *.clerk.dev *.hotjar.com *.clerk.com clerk.aardy.com *.clerk.accounts.dev *.algolia.net *.algolianet.com *.tapfiliate.com tapfiliate.com *.webtrends-optimize.com *.hotjar.com *.hotjar.io wss://*.hotjar.com api.stripe.com merchant-ui-api.stripe.com r.stripe.com *.sentry.io frstre.com; frame-src 'self' partners.aardy.com *.partners.aardy.com www.youtube.com *.youtube.com *.force.com *.salesforce.com *.my.site.com *.facebook.com *.googletagmanager.com *.doubleclick.net *.google.com www.googleoptimize.com optimize.google.com *.clerk.dev *.hotjar.com *.clerk.com accounts.aardy.com *.hotjar.com checkout.stripe.com js.stripe.com vercel.live *.vercel.live; frame-ancestors 'none'; media-src 'self' *.salesforceliveagent.com; worker-src 'self' blob: *.aardy.com; object-src 'none'; base-uri 'self'; form-action 'self' *.facebook.com; manifest-src 'self' 1
default-src 'self' https: 'unsafe-inline' 'unsafe-eval'; img-src 'self' blob: data: https:; connect-src https: wss: ; media-src https: blob:; style-src-elem 'self' 'unsafe-inline' http: https:; worker-src 'self' blob: data: https:; report-uri https://o4506235758379008.ingest.us.sentry.io/api/4508912962568192/security/?sentry_key=92c1569b28dca67aec4477b9d237f9b9&sentry_environment=production 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.fontawesome.com https://*.iadvize.com https://fonts.axept.io fonts.googleapis.com https://static.payzen.eu/static/ https://cdnjs.cloudflare.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://secure.payzen.eu/vads-payment/ https://api.payzen.eu/api-payment/ https://static.payzen.eu/static/ 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https://challenges.cloudflare.com https://ct.pinterest.com https://td.doubleclick.net https://*.criteo.com https://*.criteo.net https://static.lyra.com https://svs.comtessedubarry.com https://*.iadvize.com https://secure.payzen.eu/vads-payment/ https://static.payzen.eu/static/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com https://*.google-analytics.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://images.unsplash.com https://axeptio.imgix.net https://comtessedubarry.twic.pics https://staging-comtessedubarry.twic.pics https://www.facebook.com https://*.bing.com https://*.google.fr https://*.google.com https://*.vo.msecnd.net https://*.clarity.ms https://cm.g.doubleclick.net https://*.adnxs.com https://*.smartadserver.com https://*.taboola.com https://*.adform.net https://visitor.omnitagjs.com https://*.casalemedia.com https://public-prod-dspcookiematching.dmxleo.com https://*.criteo.com https://id5-sync.com https://ad.360yield.com https://matching.ivitrack.com https://contextual.media.net https://exchange.mediavine.com https://jadserve.postrelease.com https://sync.outbrain.com https://simage2.pubmatic.com https://pixel.rubiconproject.com https://match.sharethrough.com https://criteo-sync.teads.tv https://criteo-partners.tremorhub.com https://*.3lift.com https://ad.yieldlab.net https://sync-criteo.ads.yieldmo.com https://e1.emxdgt.com https://*.comtessedubarry.com https://*.bidswitch.net https://beyable.twic.pics https://www.googletagmanager.com https://front.activation.beyable.com https://*.doubleclick.net https://sync.1rx.io https://*.unrulymedia.com https://*.imgix.net https://*.axept.io https://*.cloudfront.net https://*.fbcdn.net https://*.metaffiliation.com https://tag.beyable.com https://cdn.flbx.io https://static.lyra.com https://px.ads.linkedin.com https://*.iadvize.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com https://secure.payzen.eu/static/latest/images/type-carte/ https://static.payzen.eu/static/ https://secure.payzen.eu/vads-payment/ 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-ds.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.googletagmanager.com https://rum.hlx.page https://maps.googleapis.com https://player.vimeo.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ https://challenges.cloudflare.com http://static.axept.io https://rqd.comtessedubarry.com https://sdk.privacy-center.org https://comtessedubarry.twic.pics https://staging-comtessedubarry.twic.pics https://connect.facebook.net https://s.pinimg.com https://ct.pinterest.com https://*.criteo.net https://*.criteo.com https://bat.bing.com https://*.beyable.com https://www.clarity.ms https://googleads.g.doubleclick.net https://*.social-media-system.com https://front.activation.beyable.com https://apibeyableprod.azure-api.net https://*.axept.io https://*.getflowbox.com https://*.adschoom.com https://*.apicit.net https://apicit.net https://*.bbd-tag.de https://bbd-tag.de https://*.metaffiliation.com https://apptracker.stream https://tags.clickintext.net https://static.lyra.com https://scripts.clarity.ms https://snap.licdn.com https://*.iadvize.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https://api.payzen.eu/api-payment/ https://static.payzen.eu/static/ https://cdnjs.cloudflare.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://www.googletagmanager.com https://static.lyra.com https://*.iadvize.com https://fonts.axept.io https://static.payzen.eu/static/ https://fonts.googleapis.com https://cdnjs.cloudflare.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://cdn.flbx.io https://staging-comtessedubarry.twic.pics https://comtessedubarry.twic.pics 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io commerce.adobe.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com qa-api.magedevteam.com https://maps.googleapis.com https://player.vimeo.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ https://client.axept.io https://axeptio.imgix.net https://api.axept.io https://awsapis3.netreviews.eu https://pagead2.googlesyndication.com https://*.pinterest.com https://cl.avis-verifies.com https://rqd.comtessedubarry.com https://googleads.g.doubleclick.net https://*.clarity.ms https://*.criteo.com https://*.social-media-system.com https://stats.g.doubleclick.net https://apibeyableprod.azure-api.net https://beyableprodrt.blob.core.windows.net https://svs.comtessedubarry.com https://*.metaffiliation.com https://*.axept.io https://*.imgix.net https://*.getflowbox.com https://*.bing.net https://www.googletagmanager.com https://static.payzen.eu https://*.iadvize.com wss://*.iadvize.com https://static.lyra.com maps.googleapis.com https://secure.payzen.eu/vads-payment/ https://api.payzen.eu/api-payment/ *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src https://secure.payzen.eu/vads-payment/ https://api.payzen.eu/api-payment/ https://static.payzen.eu/static/ *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'nonce-4K6cb2gY11HX53IJEEPkbg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
object-src 'none';base-uri 'self';script-src 'nonce-uXeZ8KeIbznpEd-IYSBaKg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com data: *.fontawesome.com * data: 'self' 'unsafe-inline'; form-action 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * eu-gateway.mastercard.com ap-gateway.mastercard.com test-gateway.mastercard.com na-gateway.mastercard.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ google.com *.google.com pay.google.com * www.google.com landofcoder.com eu-gateway.mastercard.com ap-gateway.mastercard.com test-gateway.mastercard.com na-gateway.mastercard.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.cloudflare.com https://*.sweetmag.dev data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net includestest.ccdc02.com *.commerce-payment-services.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com pay.google.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ landofcoder.com eu-gateway.mastercard.com ap-gateway.mastercard.com test-gateway.mastercard.com na-gateway.mastercard.com https://*.cloudflare.com https://*.addtoany.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.googleapis.com *.addtoany.com https://*.cloudflare.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io google.com *.google.com *.braintree-api.com *.googleapis.com landofcoder.com http://dpm.demdex.net https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.addtoany.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com *.hotjar.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com 'self' data: *.tawk.to https://widgets.trustedshops.com https://integrations.etrusted.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.tawk.to *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.doubleclick.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.tawk.to *.trustpilot.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://images.unsplash.com https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com *.google.com *.google.it *.doubleclick.net *.googletagmanager.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com 'self' data: maps.gstatic.com *.trustedshops.com *.etrusted.com *.tawk.to tawk.link cdn.jsdelivr.net s3.amazonaws.com/ https://widgets.trustedshops.com https://integrations.etrusted.com *.facebook.com *.reddit.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com widget.freshworks.com m2epro.freshdesk.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com https://player.vimeo.com *.avada.io *.alothemes.com *.magepow.com *.hotjar.com *.iubenda.com *.doubleclick.net *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com maps.googleapis.com *.trustedshops.com *.etrusted.com *.tawk.to cdn.jsdelivr.net https://widgets.trustedshops.com https://integrations.etrusted.com *.trustpilot.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net *.redditstatic.com *.reddit.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com *.iubenda.com *.stripe.network *.stripecdn.com *.amazon.com assets.braintreegateway.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.trustedshops.com *.etrusted.com *.tawk.to cdn.jsdelivr.net https://widgets.trustedshops.com https://integrations.etrusted.com *.trustpilot.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tawk.to tawk.link 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com widget.freshworks.com m2epro.freshdesk.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com https://player.vimeo.com https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com *.google.it *.analytics.google.com *.iubenda.com *.hotjar.io *.googlesyndication.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.google-analytics.com *.tawk.to wss://*.tawk.to *.trustedshops.com *.etrusted.com *.facebook.net *.redditstatic.com *.reddit.com *.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; child-src 'self' lakedistrictgivaways.co.uk *.websiteni.com blob:; connect-src 'self' lottie.host *.googleapis.com *.facebook.net *.pay.com api.staging.pay.com api.pay.com metacapi.blaagiveaways.com *.google-analytics.com blaagiveaways.com *.cloudflare.com *.jsdelivr.net *.typekit.net matomo.mckinneycompetitions.com unpkg.com; default-src 'self'; font-src 'self' fonts.gstatic.com fonts.googleapis.com *.jsdelivr.net *.cloudflare.com data: *.typekit.net *.cdn-apple.com; form-action 'self' www.facebook.com; frame-ancestors 'self'; frame-src 'self' *.trustpilot.com *.pay.com universal.staging.pay.com universal.pay.com *.cardinalcommerce.com *.youtube.com; img-src 'self' imagedelivery.net maps.gstatic.com maps.googleapis.com data: *.google.com *.facebook.com *.facebook.net blaagiveaways.com *.googletagmanager.com; media-src 'self'; object-src 'self'; script-src 'self' unpkg.com widget.trustpilot.com lottie.host fonts.googleapis.com maps.googleapis.com *.jquery.com *.cloudflare.com *.jsdelivr.net 'unsafe-inline' *.datatables.net 'unsafe-eval' *.facebook.net *.pay.com js.staging.pay.com www.googletagmanager.com *.cdn-apple.com *.checkout.com matomo.mckinneycompetitions.com; style-src 'self' *.cloudflare.com *.jsdelivr.net fonts.googleapis.com widget.trustpilot.com lottie.host 'unsafe-inline' *.datatables.net maps.googleapis.com *.typekit.net unpkg.com; manifest-src 'self'; 1
default-src 'self'; script-src 'nonce-9HjC7dGBEh8xUSoG7AU/lw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
frame-src 'self' https://accounts.google.com https://www.google.com https://www.easyhindityping.com https://checkout.razorpay.com https://api.razorpay.com https://cse.google.com https://ep2.adtrafficquality.google https://syndicatedsearch.goog; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://accounts.google.com https://www.google.com https://clients1.google.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://apis.google.com https://connect.facebook.net https://googleads.g.doubleclick.net https://www.gstatic.com https://static.olark.com https://www.google-analytics.com https://cse.google.com https://ep2.adtrafficquality.google https://checkout.razorpay.com https://cdn.razorpay.com https://maxcdn.bootstrapcdn.com https://code.jquery.com; connect-src 'self' https://accounts.google.com https://www.google.com https://api.mymemory.translated.net https://translation.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://www.googleadservices.com https://www.google.co.in https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://ep1.adtrafficquality.google https://lumberjack.razorpay.com https://maxcdn.bootstrapcdn.com; style-src 'self' 'unsafe-inline' https://www.google.com https://maxcdn.bootstrapcdn.com https://netdna.bootstrapcdn.com https://code.jquery.com https://fonts.googleapis.com; 1
style-src-elem preprod-cdn.otter.ro cdn.otter.ro dev.otter247.local stage2.otter.ro stage2.tezyo.ro stage2.gryxx.ro stage2.aldoshoes.ro data: https://static.klaviyo.com https://cdn.jsdelivr.net https://*.adobe.com https://fonts.googleapis.com https://*.doubleclick.net https://*.facebook.com https://fonts.gstatic.com https://*.googletagmanager.com https://*.googlesyndication.com https://*.fontawesome.com https://maxcdn.bootstrapcdn.com https://fonts.bunny.net https://fonts.static.com https://*.nosto.com https://*.nos.to https://assets.braintreegateaway.com https://*.cloudfront.net https://*.reviews.io https://*.reviews.co.uk https://preprod-cdn.otter.ro https://cdn.otter.ro 'unsafe-inline' https://www.googletagmanager.com https://www.googlesyndication.com https://use.fontawesome.com https://assets.braintreegateway.com https://d2c7ipcroan06u2.cloudfront.net; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com maxcdn.bootstrapcdn.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.googleapis.com https://fonts.bunny.net fonts.googleapis.com preprod-cdn.otter.ro cdn.otter.ro static.klaviyo.com cdn.jsdelivr.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.nosto.com *.nos.to *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors https://www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ https://www.google.com/ *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.innoship.ro *.nosto.com *.nos.to *.reviews.io *.reviews.co.uk preprod-cdn.otter.ro cdn.otter.ro static.klaviyo.com cdn.jsdelivr.net https://www.googletagmanager.com https://consentcdn.cookiebot.eu https://event.2performant.com https://ams.creativecdn.com https://www.gstatic.com/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com *.tile.openstreetmap.org *.openstreetmap.org https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ * https://www.magezon.com *.nosto.com *.nos.to *.cloudfront.net *.reviews.io *.reviews.co.uk https://firebasestorage.googleapis.com quickchart.io img.youtube.com www.google.com.ua preprod-cdn.otter.ro cdn.otter.ro static.klaviyo.com cdn.jsdelivr.net https://www.gryxx.ro/ss data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://www.google.com/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com cdn.jsdelivr.net *.tiktok.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ * *.nosto.com *.nos.to *.reviews.io *.reviews.co.uk *.fontawesome.com *.googleapis.com https://www.gstatic.com/ *.avada.io *.shopify.com maps.googleapis.com preprod-cdn.otter.ro cdn.otter.ro static.klaviyo.com https://cdn.otter.ro https://www.gryxx.ro/ss 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://*.adobe.com fonts.googleapis.com *.googleapis.com https://*.doubleclick.net https://*.facebook.com *.gstatic.com https://*.googletagmanager.com https://*.googlesyndication.com *.tiktok.com https://*.fontawesome.com maxcdn.bootstrapcdn.com https://static.klaviyo.com https://*.nosto.com *.nos.to https://*.cloudfront.net *.reviews.io *.reviews.co.uk https://fonts.bunny.net fonts.gstatic.com preprod-cdn.otter.ro cdn.otter.ro dev.otter247.local stage2.otter.ro stage2.tezyo.ro stage2.gryxx.ro stage2.aldoshoes.ro data: https://cdn.jsdelivr.net https://fonts.googleapis.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://fonts.static.com https://*.nos.to https://assets.braintreegateaway.com https://*.reviews.io https://*.reviews.co.uk https://preprod-cdn.otter.ro https://cdn.otter.ro 'unsafe-inline' https://www.googletagmanager.com https://www.googlesyndication.com https://use.fontawesome.com https://assets.braintreegateway.com https://d2c7ipcroan06u2.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com preprod-cdn.otter.ro cdn.otter.ro static.klaviyo.com cdn.jsdelivr.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.facebook.com *.facebook.net https://www.google.com/ *.doubleclick.net *.googlesyndication.com *.tiktok.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.nosto.com *.nos.to *.cloudfront.net *.reviews.io *.reviews.co.uk https://get.geojs.io *.avada.io maps.googleapis.com preprod-cdn.otter.ro cdn.otter.ro stage2.otter.ro stage2.tezyo.ro stage2.gryxx.ro stage2.aldoshoes.ro static.klaviyo.com cdn.jsdelivr.net https://tezyo.zendesk.com https://ekr.zdassets.com https://*.zendesk.com https://*.zdassets.com https://event.2performant.com https://tidytracking.com https://www.gryxx.ro/ss 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'nonce-KXvqHe9FrZ6ri9wgAeVCGQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://appleid.cdn-apple.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 1
default-src 'self'; script-src 'nonce-DU2TsX3d+uexYbYdG1ILjw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
object-src 'none';base-uri 'self';script-src 'nonce-D46VrqKpOXsbWtcyvsN5UA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.aspnetcdn.com https://www.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net https://front.optimonk.com https://onsite.optimonk.com https://cdn-asset.optimonk.com https://knockoutjs.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: https://dr8bsncg67mqz.cloudfront.net/; font-src 'self' data: https://fonts.gstatic.com/; frame-src 'self' https://www.googletagmanager.com/; worker-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'; 1
object-src 'none';base-uri 'self';script-src 'nonce-t7kCv8AGpelD1cD7iedg7g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src https://fonts.gstatic.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com assets.braintreegateway.com https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://adservice.google.com https://googleads.g.doubleclick.net cdn.dnky.co webchat.dotdigital.com *.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com validator.swagger.io https://www.google-analytics.com https://www.gstatic.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.google.com https://adservice.google.com https://www.google.com.sg https://adservice.google.com.sg *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com js.authorize.net jstest.authorize.net js.braintreegateway.com cdn-scripts.signifyd.com www.youtube.com https://www.google-analytics.com https://www.googletagmanager.com https://ajax.googleapis.com https://www.google.com https://www.gstatic.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://stats.g.doubleclick.net https://adservice.google.com https://www.google.com.sg https://adservice.google.com.sg r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net cdn.dnky.co api.comapi.com webchat.dotdigital.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com https://fonts.googleapis.com cdn.dnky.co webchat.dotdigital.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com payments.sandbox.braintree-api.com origin-analytics-sand.sandbox.braintree-api.com assets.braintreegateway.com https://www.google-analytics.com https://www.google.com https://googleads.g.doubleclick.net https://www.gstatic.com https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://adservice.google.com https://www.googletagmanager.com https://www.google.com.sg https://adservice.google.com.sg r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net api.comapi.com webchat.dotdigital.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https: 'unsafe-eval' 'unsafe-inline'; script-src https: 'unsafe-eval' 'unsafe-inline'; script-src-elem https: 'unsafe-eval' 'unsafe-inline' https://platform.twitter.com; object-src 'none'; img-src http: https: data:; font-src 'self' data: fonts.gstatic.com; report-uri /report-csp-violation 1
font-src *.fontawesome.com fonts.googleapis.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://ecommerce-modal.modo.com.ar https://ecommerce-modal.preprod.modo.com.ar fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://*.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.magerocket.com *.gocuotas.com 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.dotdigital-pages.com *.dotdigital.com *.mercadolibre.com https://www.googletagmanager.com/ *.magerocket.com *.gocuotas.com https://*.appspot.com/ https://*.clarity.ms https://*.cloudfront.net https://*.doubleclick.net/ https://*.googleadservices.com/ https://*.facebook.com https://*.facebook.net https://*.google.com https://*.google.com.ar https://*.doubleclick.net https://notificaciones-web.com https://*.optimonk.com https://*.run.app https://*.titanpush.com/ https://*.tiktok.com https://*.tiktokw.us https://*.yango.com wss://*.yango.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar *.mercadolivre.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.googletagmanager.com *.magerocket.com *.gocuotas.com https://*.appspot.com/ https://*.clarity.ms https://*.cloudfront.net https://*.doubleclick.net/ https://*.googleadservices.com/ https://*.facebook.com https://*.facebook.net https://*.google.com https://*.google.com.ar https://*.doubleclick.net https://notificaciones-web.com https://*.optimonk.com https://*.run.app https://*.titanpush.com/ https://*.tiktok.com https://*.tiktokw.us https://*.yango.com wss://*.yango.com storage.googleapis.com *.google.com *.google.com.ar imgmp.mlstatic.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https://device.clearsale.com.br https://live.decidir.com meli-tag.com www.meli-tag.com *.meli-tag.com melisignals.com www.melisignals.com *.melisignals.com *.mlstatic.com *.mercadopago.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.magerocket.com *.gocuotas.com *.googleapis.com *.google.com *.gstatic.com *.avada.io https://ecommerce-modal.modo.com.ar https://ecommerce-modal.preprod.modo.com.ar https://*.appspot.com/ https://*.clarity.ms https://*.cloudfront.net https://*.doubleclick.net/ https://*.facebook.com https://*.facebook.net https://*.google.com https://*.google.com.ar https://*.doubleclick.net https://*.googleadservices.com/ https://notificaciones-web.com https://*.optimonk.com https://*.run.app https://*.titanpush.com/ https://*.tiktok.com https://*.tiktokw.us https://*.yango.com wss://*.yango.com polyfill.io go.botmaker.com storage.googleapis.com https://assets-cdn.woowup.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com maps.googleapis.com https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com fonts.googleapis.com *.googleapis.com *.google.com *.gstatic.com storage.googleapis.com unsafe-inline https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ storage.googleapis.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https://events.woowup.com https://developers.decidir.com/ https://developers-ventasonline.payway.com.ar/ melisignals.com www.melisignals.com *.melisignals.com *.mercadopago.com *.mercadolibre.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.magerocket.com *.gocuotas.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io https://*.appspot.com/ https://*.clarity.ms https://*.cloudfront.net https://*.doubleclick.net/ https://*.facebook.com https://*.facebook.net https://*.google.com https://*.google.com.ar https://*.doubleclick.net https://*.googleadservices.com/ https://notificaciones-web.com https://*.optimonk.com https://*.run.app https://*.titanpush.com/ https://*.tiktok.com https://*.tiktokw.us https://*.yango.com wss://*.yango.com go.botmaker.com stats.g.doubleclick.net maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://api.sooqco.com https://accounts.google.com; script-src 'self' 'unsafe-inline' https://cdn.tamara.co; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://api.sooqco.com https://sooqco.com https://aloshesha.com wss://api.sooqco.com https://cdn.tamara.co; frame-src 'self' https://cdn.tamara.co https://accounts.google.com; worker-src 'self' blob:; manifest-src 'self' 1
default-src 'self'; style-src 'self' 'unsafe-inline' https://*.posthog.com https://fonts.googleapis.com; script-src 'self' 'nonce-FmvbaXHc6JNPVdatf3ZfMx' https://*.posthog.com https://*.i.posthog.com; font-src 'self' https://*.posthog.com https://app-static.eu.posthog.com https://app-static-prod.posthog.com https://d1sdjtjk6xzm7.cloudfront.net https://fonts.gstatic.com https://cdn.jsdelivr.net https://assets.faircado.com https://use.typekit.net; worker-src 'self'; child-src 'none'; object-src 'none'; media-src https://res.cloudinary.com; img-src 'self' data: https://*.posthog.com https://posthog.com https://www.gravatar.com https://res.cloudinary.com https://platform.slack-edge.com https://raw.githubusercontent.com; frame-ancestors https://posthog.com https://preview.posthog.com https://vercel.com; connect-src 'self' https://www.posthogstatus.com https://*.posthog.com  https://raw.githubusercontent.com https://api.github.com; frame-src https:; manifest-src 'self'; base-uri 'self'; report-uri https://us.i.posthog.com/report/?token=sTMFPsFhdP1Ssg&sample_rate=0.1&v=2; report-to posthog 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cloudflare.com https://www.gstatic.com *.googleapis.com *.zopim.com 'self' data: *.chatchamp.com *.klarnacdn.net https://fonts.gstatic.com https://widgets.trustedshops.com https://webcachex-eu.datareporter.eu https://webcache-eu.datareporter.eu data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.kaptcha.com *.facebook.com *.pinterest.com *.sharethis.com *.chatchamp.com td.doubleclick.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.klarna.com landofcoder.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: blob: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: *.google.com *.google.de *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.googleadservices.com *.google-analytics.com region1.google-analytics.com *.analytics.google.com *.twitter.com *.twimg.com *.bing.com *.facebook.com *.facebook.net *.pinterest.com *.sleeknote.com *.zopim.com *.dalton-cosmetics.com *.googletagmanager.com *.googleapis.com *.sharethis.com *.newsletter2go.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.hsforms.net *.hsforms.com 'self' data: https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://analytics.tiktok.com https://*.tiktokcdn.com https://bat.bing.com https://bat.bing.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.google-analytics.com https://*.gstatic.com *.twitter.com *.googletagmanager.com *.googlesyndication.com *.pinimg.com *.bing.com *.facebook.net *.facebook.com *.zopim.com *.googleapis.com *.zdassets.com *.sleeknote.com *.cookielaw.org *.doubleclick.net www.dwin1.com *.paypal.com *.cardinalcommerce.com integrations.etrusted.com *.chatchamp.com *.sharethis.com *.newsletter2go.com 'self' data: js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com landofcoder.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.hsforms.net *.hsforms.com *.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com https://webcache-eu.datareporter.eu https://webcachex-eu.datareporter.eu https://cdn.brevo.com https://analytics.tiktok.com https://ct.pinterest.com https://sibautomation.com https://trck.linkster.co https://bat.bing.com https://webcache.datareporter.eu 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.chatchamp.com *.sharethis.com 'self' data: assets.braintreegateway.com *.klarnacdn.net https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com https://webcache-eu.datareporter.eu https://webcachex-eu.datareporter.eu 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://*.google.com *.google-analytics.com *.googleapis.com region1.google-analytics.com *.analytics.google.com *.doubleclick.net *.twitter.com *.cookielaw.org *.pinterest.com *.zopim.com *.zdassets.com *.onetrust.com *.braintree-api.com *.braintreegateway.com *.zendesk.com wss://widget-mediator.zopim.com *.chatchamp.com *.sharethis.com *.newsletter2go.com pagead2.googlesyndication.com *.google.de *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat googleads.g.doubleclick.net *.googleadservices.com *.bing.com *.posthog.com *.sleeknote.com *.crwdcntrl.net *.stbuttons.click api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com api.friendlycaptcha.com eu-api.friendlycaptcha.eu *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com landofcoder.com https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://webcache-eu.datareporter.eu https://swarmcrawler.datareporter.eu https://c.datareporter.eu https://analytics.tiktok.com https://business-api.tiktok.com https://bat.bing.com https://in-automate.brevo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.yotpo.com *.googleapis.com *.gstatic.com *.klevu.com *.ksearchnet.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com *.authorize.net *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.credova.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.credova.com * c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com *.yotpo.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.authorize.net *.weltpixel.com *.googletagmanager.com *.doubleclick.net https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://*.credova.com/ https://*.clarity.ms https://*.bing.com *.yotpo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com magefan.com cm.magefan.com https://img.youtube.com https://firebasestorage.googleapis.com moogento.com *.moogento.com *.googleapis.com *.gstatic.com *.google.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com *.credova.com chimpstatic.com downloads.mailchimp.com *.list-manage.com widget.freshworks.com m2epro.freshdesk.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://*.credova.com/ https://*.avmws.com https://*.livechatinc.com https://statsjs.klevu.com https://*.bing.com https://*.crazyegg.com https://*.clarity.ms *.yotpo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.klevu.com *.ksearchnet.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.avada.io *.shopify.com l2.moogento.com *.authorize.net *.googleapis.com *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net https://cdn-scripts.signifyd.com https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com downloads.mailchimp.com widget.freshworks.com m2epro.freshdesk.com unsafe-inline assets.braintreegateway.com *.yotpo.com *.googleapis.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com https://fonts.bunny.net *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com https://*.credova.com/ 'self' 'unsafe-inline'; manifest-src *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com *.credova.com widget.freshworks.com m2epro.freshdesk.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://*.credova.com/ https://*.clarity.ms https://statsjs.klevu.com https://*.livechatinc.com *.yotpo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://get.geojs.io *.avada.io *.authorize.net *.automaticffl.com *.googleapis.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.asc-stage-magento.com asc-stage-magento.com *.channels.magento.com channels.magento.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com demo.transact.nab.com.au nd.transact.nab.com.au *.nab.com.au *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com www.google.com js.stripe.com maps.googleapis.com chart.googleapis.com https://www.googletagmanager.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com test.api.securepay.com.au *.nab.com.au acs-ap-southeast-2.ndsprod.nds-sandbox-issuer.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://maps.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com maps.gstatic.com t.zip.co static.zipmoney.com.au static.zip.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ www.google.com js.stripe.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.googleapis.com chart.googleapis.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.fontawesome.com *.gstatic.com *.avada.io https://maps.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com demo.transact.nab.com.au nd.transact.nab.com.au transact.nab.com.au *.nab.com.au js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com maps.googleapis.com static.zipmoney.com.au static.zip.co zip.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com downloads.mailchimp.com unsafe-inline 'self' 'unsafe-inline'; object-src maps.googleapis.com chart.googleapis.com 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com maps.googleapis.com chart.googleapis.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io https://maps.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com demo.transact.nab.com.au *.nab.com.au api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-ancestors 'self' www.accademiaitaliana.com; default-src 'self'; script-src 'self' style-src 'self' object-src 'none'; base-uri 'self'; connect-src 'self' frame-src 'self' img-src 'self' manifest-src 'self'; media-src 'self'; worker-src 'self'; 1
font-src maxcdn.bootstrapcdn.com https://fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com td.doubleclick.net bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com *.wesupply.xyz https://wesupplylabs.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com bat.bing.com *.google.co.za www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.facebook.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com bat.bing.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com https://player.vimeo.com https://www.youtube.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com *.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com http://fonts.googleapis.com unsafe-inline 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'strict-dynamic' 'nonce-RIkAbFDgtio8qkVonZRsqA==' 1
font-src 'unsafe-inline' data: *.klarnacdn.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.youtube-nocookie.com *.klarna.com challenges.cloudflare.com account.fetchify.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com 'unsafe-inline' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.google.com *.google.co.uk *.klarna.com *.klarnaevt.com *.klarnacdn.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://images.unsplash.com https://maps.googleapis.com https://maps.gstatic.com flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com *.facebook.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ collector-1.audits.report *.auditiq.cloud *.google-analytics.com *.analytics.google.com *.klarna.com *.klarnacdn.net challenges.cloudflare.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.klarnaservices.com s7.addthis.com https://cdnjs.cloudflare.com https://maps.googleapis.com *.gstatic.com maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src downloads.mailchimp.com cc-cdn.com *.klarnacdn.net maxcdn.bootstrapcdn.com *.gstatic.com unsafe-inline assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com vimeo.com collector-1.audits.report *.auditiq.cloud *.google-analytics.com *.analytics.google.com https://stats.g.doubleclick.net *.amazonaws.com *.klarnaevt.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk *.klarnacdn.net *.klarna.com *.klarnaservices.com ekr.zdassets.com/ https://maps.googleapis.com www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.facebook.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; media-src 'self'; font-src 'self'; connect-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none' 1
default-src 'self'; base-uri 'self'; object-src 'none'; font-src 'self'; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'sha256-czdh6fnJk7ngaDwn8G0bzLEJBWlGMNKOELTz6qBwdzw=' https://www.googletagmanager.com https://*.google-analytics.com https://app.termly.io https://*.termly.io https://beacon-v2.helpscout.net https://*.helpscout.net; style-src 'self' 'unsafe-inline' https://*.termly.io https://*.helpscout.net; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://*.termly.io https://*.helpscout.net; connect-src 'self' https://*.google-analytics.com https://*.googletagmanager.com https://app.termly.io https://*.termly.io https://*.helpscout.net wss://*.helpscout.net 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.googleapis.com fonts.googleapis.com *.hotjar.com *.zopim.com *.fontawesome.com data: maxcdn.bootstrapcdn.com *.stape.io https://fonts.bunny.net *.gls.com *.szybkapaczka.pl *.gls-poland.com/ *.cloudflare.com *.bootstrapcdn.com *.trustedshops.com https://geowidget.easypack24.net https://widgets.trustedshops.com themes.googleusercontent.com at.alicdn.com kadax.pl *.thulium.com *.clickonometrics.pl data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.facebook.com https://plumrocket.com kadax.pl 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com kadax.pl 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com *.braintreegateway.com *.paypal.com google.com *.google.com https://static.addtoany.com/ www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.awin1.com *.zenaps.com *.fls.doubleclick.net cdn.dnky.co *.hotjar.com *.google.com/ *.facebook.com *.trustpilot.com *.criteo.com https://plumrocket.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.stape.io *.szybkapaczka.pl *.gls-poland.com/ secure.payu.com merch-prod.snd.payu.com https://geowidget-app.inpost.pl/ https://sandbox-easy-geowidget.easypack24.net/ js-agent.newrelic.com swg-2-rog.gkpge.pl kadax.pl *.addthis.com plumrocket.com *.paypo.pl *.payu.com *.mainadv.com *.creativecdn.com https://td.doubleclick.net/ *.clickonometrics.pl *.tiktok.com paypo.pl 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.awin1.com *.zenaps.com *.wepowerconnections.com https://ssl.ceneo.pl *.google.com *.google.nl connect.onlinesucces.nl px.ads.linkedin.com stats.g.doubleclick.net *.linkedin.com *.googletagmanager.com gallery.mailchimp.com *.trustedshops.com *.facebook.com *.zopim.com cdn.jsdelivr.net *.jmango360.com *.datatrics.com *.smaato.net cdn.flbx.io *.cloudfront.net magefan.com cm.magefan.com *.disqus.com https://www.magezon.com *.google.com.ua *.google.co.uk *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.stape.io https://img.youtube.com https://firebasestorage.googleapis.com https://api.mapbox.com *.szybkapaczka.pl *.openstreetmap.org *.gls-poland.com/ *.gls-poland.com.pl/ *.cloudflare.com https://cdn.klarna.com *.magentocommerce.com *.tpay.com *.payu.com https://s.ytimg.com *.usercentrics.eu static.payu.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com www.google.pl blob www.google.de www.google.at bam.eu01.nr-data.net www.google.com.ua www.google.sk www.google.ca www.google.se www.google.ch www.google.no www.google.com.pe www.google.cz www.google.co.uk www.google.fr files.mirasvit.com www.google.co.kr www.google.bg www.google.ie www.google.co.in log.pinterest.com www.google.is www.google.be www.google.com.au www.google.dk www.google.com.my consent.cookiefirst.com kadax.pl *.rzetelnyregulamin.pl static.paynow.pl *.bing.com *.clarity.ms https://lantern.roeye.com *.yieldmo.com e-planning.net *.e-planning.net *.mczbf.com *.emjcd.com cj.dotomi.com *.clickonometrics.pl *.sharethrough.com *.lijit.com *.omnitagjs.com *.ne.jp *.loopme.me *.onetag-sys.com *.mgid.com *.adtarget.com.tr *.rakuten.com *.visx.net *.opera.com *.bing.net *.fbcdn.net *.ggpht.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://static.addtoany.com/ https://maps.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com https://ssl.ceneo.pl *.paypal.com *.googletagmanager.com *.googleadservices.com cdn.dnky.co api.comapi.com *.trackedlink.net snap.licdn.com chimpstatic.com checkout.buckaroo.nl *.adyen.com *.zopim.com *.hotjar.com *.zdassets.com *.sendcloud.sc *.mailchimp.com *.trustedshops.com *.fontawesome.com *.facebook.net *.feedbackcompany.com *.google-analytics.com *.trustpilot.com https://cdn.jsdelivr.net *.googleoptimize.com *.clarity.ms *.datatrics.com *.criteo.net *.criteo.com cdn.mouseflow.com *.getflowbox.com *.disqus.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.stape.io *.avada.io *.shopify.com *.google.com/ *.szybkapaczka.pl *.openstreetmap.org *.gls-poland.com/ *.cloudflare.com *.usercentrics.eu *.tpay.com secure.payu.com secure.snd.payu.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com js-agent.newrelic.com consent.cookiefirst.com delivery.clickonometrics.pl kadax.pl *.gdpsystem.eu *.rzetelnyregulamin.pl *.furgonetka.pl https://z.moatads.com *.addthisedge.com *.addthis.com *.cloudfront.net *.bing.com *.payu.com *.tiktok.com *.thulium.com *.roeyecdn.com *.creativecdn.com *.prefixbox.com static.paynow.pl *.mczbf.com *.clickonometrics.pl 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.dnky.co checkout.buckaroo.nl *.fontawesome.com *.mailchimp.com *.trustpilot.com https://cdn.jsdelivr.net maxcdn.bootstrapcdn.com *.googleapis.com *.googletagmanager.com *.stape.io https://fonts.bunny.net *.szybkapaczka.pl *.gls-poland.com/ *.cloudflare.com *.typekit.net *.bootstrapcdn.com *.trustedshops.com *.usercentrics.eu https://geowidget.easypack24.net https://geowidget.inpost.pl https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com consent.cookiefirst.com kadax.pl *.rzetelnyregulamin.pl *.gdpsystem.eu *.cloudfront.net *.clickonometrics.pl 'self' 'unsafe-inline'; object-src kadax.pl *.rzetelnyregulamin.pl *.clickonometrics.pl 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.zopim.com *.szybkapaczka.pl *.gls-poland.com/ https://geowidget.easypack24.net kadax.pl *.rzetelnyregulamin.pl *.thulium.com *.clickonometrics.pl *.flbx.io 'self' 'unsafe-inline'; manifest-src kadax.pl 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://stats.addtoany.com/menu https://maps.googleapis.com https://player.vimeo.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.wepowerconnections.com https://the.sciencebehindecommerce.com commerce.adobedc.net api.comapi.com stats.g.doubleclick.net *.zdassets.com *.hotjar.com *.hotjar.io *.zopim.com wss://*.zopim.com *.feedbackcompany.com *.zendesk.com *.clarity.ms *.facebook.com *.datatrics.com *.getflowbox.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog *.stape.io https://get.geojs.io *.avada.io *.szybkapaczka.pl *.openstreetmap.org *.gls-poland.com/ *.cloudflare.com secure.payu.com merch-prod.snd.payu.com *.easypack24.net *.inpost.pl *.trustedshops.com *.etrusted.com https://integrations.etrusted.site www.google.pl www.google.sk www.google.com.pe properties www.google.nl www.google.com.ua www.google.de www.google.ie www.google.co.in www.google.ro www.google.by www.google.hu www.google.be ws.hotjar.com api.edrone.me content.hotjar.io kadax.pl *.gdpsystem.eu *.addthis.com *.edrone.me *.cloudfront.net *.ipify.org *.payu.com *.tiktok.com *.thulium.com wss://chat-proxy-service.thulium.com/netfox/panel.io/ wss://ws.hotjar.com/api/v2/client/ * data: *.clickonometrics.pl 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com kadax.pl http: https: blob: 'self' 'unsafe-inline'; default-src kadax.pl *.rzetelnyregulamin.pl *.clickonometrics.pl 'self' 'unsafe-inline' 'unsafe-eval'; base-uri kadax.pl 'self' 'unsafe-inline'; report-uri /csp_reporter.php; 1
default-src 'self' https://www.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://homedone.co.uk https://www.google.com https://www.gstatic.com https://apis.google.com https://widget.reviews.io https://widget.reviews.co.uk https://assets.reviews.io https://cdn.jsdelivr.net https://connect.facebook.net https://cdn.attn.tv https://homedone.attn.tv https://mcgst.homedone.co.uk https://www.paypal.com https://www.sandbox.paypal.com https://www.paypalobjects.com https://widget.trustpilot.com https://invitejs.trustpilot.com https://js.stripe.com https://js.braintreegateway.com https://static-eu.payments-amazon.com;  script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://app.zipchat.ai https://load.sst.furniturecentral.co.uk https://unpkg.com https://load.sgtm.homedone.co.uk https://scripts.clarity.ms https://googleads.g.doubleclick.net https://unpkg.com https://www.clarity.ms https://load.sgtm.homedone.co.uk https://web-sdk.aptrinsic.com https://assets.adobedtm.com https://www.homedone.co.uk https://js.squarecdn.com https://x.klarnacdn.net https://placement-api.clearpay.co.uk  https://static.cloudflareinsights.com https://www.google.com https://www.gstatic.com https://apis.google.com https://widget.reviews.io https://widget.reviews.co.uk https://assets.reviews.io https://cdn.jsdelivr.net https://connect.facebook.net https://homedone.co.uk https://cdn.attn.tv https://homedone.attn.tv https://mcgst.homedone.co.uk https://www.paypal.com https://www.sandbox.paypal.com https://www.paypalobjects.com https://widget.trustpilot.com https://invitejs.trustpilot.com https://js.stripe.com https://js.braintreegateway.com https://static-eu.payments-amazon.com https://static-na.payments-amazon.com; style-src 'self' 'unsafe-inline' data: https://cdn.jsdelivr.net https://assets.reviews.io https://widget.trustpilot.com; style-src-elem 'self' 'unsafe-inline' data: https://web-sdk.aptrinsic.com https://www.homedone.co.uk https://cdn.jsdelivr.net https://assets.reviews.io https://widget.trustpilot.com; style-src-attr 'self' 'unsafe-inline'; img-src 'self' data: blob: https: https://homedone.co.uk https://assets.reviews.io https://www.google.com https://www.gstatic.com https://www.facebook.com https://www.paypal.com https://www.paypalobjects.com https://widget.trustpilot.com https://q.stripe.com https://static-eu.payments-amazon.com; font-src 'self' data: https: https://homedone.co.uk https://assets.reviews.io; connect-src 'self' https://analytics.google.com https://pagead2.googlesyndication.com  https://ad.doubleclick.net https://sst.furniturecentral.co.uk https://app.zipchat.ai https://sgtm.homedone.co.uk https://u.clarity.ms https://homedone.co.uk https://esp.aptrinsic.com https://www.homedone.co.uk https://api.reviews.io https://api.reviews.co.uk https://widget.reviews.io https://widget.reviews.co.uk https://events.attentivemobile.com https://homedone.attn.tv https://www.google.com https://apis.google.com https://mcgst.homedone.co.uk https://www.paypal.com https://www.sandbox.paypal.com https://www.paypalobjects.com https://api.stripe.com https://m.stripe.network https://r.stripe.com https://payments.braintree-api.com https://client-analytics.braintreegateway.com https://pay-api.amazon.eu https://pay-api.amazon.com https://capig.stape.cc https://payments-eu.amazon.com; frame-src 'self' https://sst.furniturecentral.co.uk https://sgtm.homedone.co.uk https://placement-api.clearpay.co.uk https://www.google.com https://www.facebook.com https://widget.reviews.co.uk https://www.paypal.com https://www.sandbox.paypal.com https://js.stripe.com https://hooks.stripe.com https://assets.braintreegateway.com https://pay.amazon.com https://static-eu.payments-amazon.com; media-src 'self' https://homedone.co.uk; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com; frame-ancestors 'self'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com widget.freshworks.com m2epro.freshdesk.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com assets.braintreegateway.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com widget.freshworks.com m2epro.freshdesk.com api.friendlycaptcha.com eu-api.friendlycaptcha.eu api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.jquery.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://07fdcd59-7d6b-465f-b396-4a9635c32993.sansec.watch/; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.globalpay.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.olark.com *.adroll.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.gpwebpay.com *.gpe.cz *.globalpay-ecommerce.com https://*.securesuite.co.uk https://securesuite.co.uk 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.weltpixel.com *.americanexpress.com *.globalpay.com *.mastercard.com *.visa.com *.gpwebpay.com *.gpe.cz *.globalpay-ecommerce.com https://*.securesuite.co.uk https://securesuite.co.uk https://pay.google.com https://payments.google.com www.facebook.com platform.twitter.com *.olark.com *.adroll.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.globalpay.com https://www.gstatic.com/instantbuy/svg/dark/pay/en.svg https://www.gstatic.com/instantbuy/svg/light/pay/en.svg https://www.gstatic.com/instantbuy/svg/dark/en.svg https://www.gstatic.com/instantbuy/svg/light/en.svg https://firebasestorage.googleapis.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com *.cdninstagram.com *.fbcdn.net *.olark.com *.adroll.com maps.googleapis.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.aexp-static.com https://ajax.aspnetcdn.com *.globalpay.com *.gpapiservices.com https://pay.google.com https://*.securesuite.co.uk https://securesuite.co.uk https://payments.google.com *.avada.io *.shopify.com connect.facebook.net twitter.com platform.twitter.com ajax.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.instagram.com chimpstatic.com *.cloudflare.com *.googleapis.com *.olark.com *.adroll.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com https://fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com tagmanager.google.com *.cloudflare.com *.olark.com *.adroll.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.cdninstagram.com *.olark.com *.adroll.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://google.com/pay https://pay.google.com *.globalpay.com https://js.globalpay.com https://js-cert.globalpay.com https://*.securesuite.co.uk https://securesuite.co.uk https://payments.google.com https://get.geojs.io *.avada.io https://www.google-analytics.com *.instagram.com *.googleusercontent.com *.olark.com *.adroll.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src www.datapowertools.co.uk; font-src *.googleapis.com *.gstatic.com data: *.fontawesome.com use.typekit.net data://* *.cloudflare.com *.klarnacdn.net fonts.gstatic.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com *.stripe.com 'self' 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com *.weltpixel.com www.datapowertools.co.uk *.playground.klarna.com *.klarnaservices.com *.run.app *.googletagmanager.com *.doubleclick.net *.trustpilot.com *.stripe.com *.stripe.network *.link.com *.klarna.com www.commercepartnerhub.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.gstatic.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com p.typekit.net www.datapowertools.co.uk *.datapowertools.co.uk *.google.co.in *.google.co.uk c.clarity.ms bat.bing.com c.bing.com cdn-cookieyes.com *.cookieyes.com *.google.com *.facebook.com *.paypal.com *.klarnacdn.net *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.stripe.com ebizmarts-website.s3.amazonaws.com brippo.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.klarna.com *.klarnaevt.com https://firebasestorage.googleapis.com *.trustpilot.com maps.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com www.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.fontawesome.com *.clic2buy.com *.cloudflareinsights.com *.cookie-script.com *.bing.com *.cookieyes.com cdn-cookieyes.com *.attn.tv *.mida.so static.elfsight.com www.clarity.ms *.web-2-tel.com scripts.clarity.ms js-agent.newrelic.com universe-static.elfsightcdn.com powertool.m2web.dev *.playground.klarna.com eu.playground.klarna.com js.playground.klarna.com *.klarnaservices.com chimpstatic.com rs.clic2buy.com ajax.googleapis.com *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.trustpilot.com *.stripe.com *.link.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.avada.io *.shopify.com https://www.googletagmanager.com tagmanager.google.com invitejs.trustpilot.com maps.googleapis.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.bootstrapcdn.com *.typekit.net *.cloudflare.com *.klarnacdn.net *.tagmanager.google.com *.googletagmanager.com *.trustpilot.com downloads.mailchimp.com https://fonts.bunny.net maxcdn.bootstrapcdn.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mida.so *.clarity.ms l.clarity.ms bam.eu01.nr-data.net *.web-2-tel.com events.attentivemobile.com core.service.elfsight.com data-gb.attn.tv *.playground.klarna.com eu.playground.klarna.com *.klarnaservices.com cdn-cookieyes.com log.cookieyes.com *.cookieyes.com *.run.app bat.bing.com analytics-ipv6.tiktokw.us *.tiktokw.us www.google.com *.google.com *.google.co.uk analytics.tiktok.com *.googlesyndication.com pagead2.googlesyndication.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.stripe.com *.stripe.network *.link.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarna.com https://get.geojs.io *.avada.io https://www.google-analytics.com *.trustpilot.com widget.trustpilot.com invitejs.trustpilot.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'none'; base-uri 'none'; connect-src 'self'; frame-ancestors 'none'; img-src https://cernercentral.com/resources/core/v2.29/ https://cernercentral.com/resources/core/v2.30/; script-src 'unsafe-inline' https://cernercentral.com/resources/core/v2.30/; style-src 'unsafe-inline' https://cernercentral.com/resources/core/v2.30/ https://cernercentral.com/resources/home/v2.21/ 1
default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https://cdnapisec.kaltura.com/ https://pay.instamed.com https://premier.trustcommerce.com https://soapprod.multicare.org;script-src 'nonce-f5794ff728f54c9f950f404d161de782' https://www.ccmychart.org 'self';img-src https://* 'self' blob: data:;connect-src 'self' epichttp: https://us-api.experian.com/decisionanalytics/crosscore/npc3zwbc5v26/services/v0/applications/3;style-src https://www.ccmychart.org 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com maxcdn.bootstrapcdn.com *.fontawesome.com *.klarnacdn.net https://fonts.bunny.net https://static.klaviyo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.weltpixel.com *.klarna.com *.google.com/ js.mollie.com *.googletagmanager.com *.pinterest.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.doofinder.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://api.mapbox.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com https://firebasestorage.googleapis.com https://www.magezon.com https://www.mollie.com *.google.de *.cdninstagram.com *.fbcdn.net maps.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com *.doofinder.com *.chimpstatic.com downloads.mailchimp.com *.list-manage.com *.klarna.com *.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com *.google.com/ js.mollie.com https://freegeoip.app *.magento.com *.shoplytics.de *.dagmarfischermode.de *.googleadservices.com *.googletagmanager.com *.adobedtm.com *.pinimg.com *.clarity.ms *.pinterest.com 'unsafe-inline' https://www.googletagmanager.com tagmanager.google.com ajax.googleapis.com *.instagram.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.doofinder.com downloads.mailchimp.com maxcdn.bootstrapcdn.com *.fontawesome.com *.klarnacdn.net https://static.klaviyo.com https://fonts.bunny.net tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.doofinder.com wss://*.doofinder.com api.friendlycaptcha.com eu-api.friendlycaptcha.eu *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io autocomplete2.postdirekt.de https://freegeoip.app *.developer.adobe.com *.doubleclick.net *.pinterest.com *.dagmarfischermode.de *.clarity.ms https://www.google-analytics.com *.instagram.com *.googleusercontent.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.fontawesome.com https://fonts.bunny.net *.bootstrapcdn.com *.cloudflare.com *.googleusercontent.com *.jsdelivr.net *.slant.co unpkg.com data: 'self' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.2c2p.com *.americanexpress.com *.arcot.com *.cardinalcommerce.com *.citibank.com *.ctbcbank.com *.dnp-cdms.jp *.inicis.com *.ipay88.com.my *.unionpay.com *.uobgroup.com 'self' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.weltpixel.com *.americanexpress.com *.arcot.com *.cardinalcommerce.com *.citibank.com *.ctbcbank.com *.dnp-cdms.jp *.inicis.com *.unionpay.com *.uobgroup.com 'self' 'unsafe-eval' 'unsafe-hashes'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com k.kakaocdn.net https://firebasestorage.googleapis.com *.inicis.com *.afterpay.com *.doubleclick.net *.elcompanies.com www.google.ad www.google.at www.google.co.id www.google.co.in www.google.co.jp www.google.co.kr www.google.com.au www.google.com.bd www.google.com.co www.google.com.hk www.google.com.mt www.google.com.my www.google.com.ph www.google.com.sg www.google.com.tw www.google.com.vn www.google.co.th www.google.co.uk www.google.co.za www.google.de www.google.dk www.google.es www.google.fr www.google.ie www.google.it www.google.nl www.google.se *.google.com *.googletagmanager.com *.googleusercontent.com *.hstatic.net *.naver.com *.thecompanystore.com.sg data: 'self' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://api.addressfinder.io *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.googleapis.com *.gstatic.com developers.kakao.com *.kakaocdn.net *.avada.io *.shopify.com *.inicis.com *.facebook.net *.google-analytics.com *.googletagmanager.com 'self' 'unsafe-eval' 'unsafe-hashes' 'nonce-OHkzcTQyaWVpenRmeGV0NDdrejlvcGtyaDk2Z2ZkdGE=' 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY/CkTMBhjNhwPvglpYumjx31B4fjkY8=' 'sha256-XGfPSYcBWPq7sx/ucAvvEcAKkiSRS2GeZReWO0f5vXQ='; style-src *.adobe.com fonts.googleapis.com https://api.addressfinder.io *.cash.app *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.fontawesome.com https://fonts.bunny.net *.inicis.com *.googleapis.com *.gstatic.com *.jsdelivr.net 'self' 'unsafe-eval' 'unsafe-hashes'; object-src 'self'; media-src *.adobe.com *.gstatic.com 'self' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://api.addressfinder.io * *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com *.googleapis.com kauth.kakao.com https://get.geojs.io *.avada.io *.inicis.com *.doubleclick.net www.google.ad www.google.at www.google.co.id www.google.co.in www.google.co.jp www.google.co.kr www.google.com.au www.google.com.bd www.google.com.hk www.google.com.mt www.google.com.my www.google.com.ph www.google.com.sg www.google.com.tw www.google.com.vn www.google.co.th www.google.co.za www.google.de www.google.dk www.google.es www.google.fr www.google.ie www.google.it www.google.nl *.googletagmanager.com 'self' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self'; default-src 'self'; base-uri 'self'; report-uri https://d49023f3-8b11-4d8b-8a77-0cdf17bda398.sansec.watch/; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com *.googleapis.com *.homelux.ro *.tawk.to 'self' https://fonts.gstatic.com data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.homelux.ro *.tawk.to 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.doubleclick.net *.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.2performant.com *.addthis.com *.cookiebot.com *.googlesyndication.com *.homelux.ro *.pinterest.com *.tiktokw.us *.tawk.to *.weltpixel.com https://www.google.com https://www.gstatic.com https://services.dpd.ro 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com blob: *.google.ro *.google-analytics.com *.googlesyndication.com *.homelux.ro *.pinterest.com *.magentocommerce.com *.frizbit.com t.themarketer.com cdn1.themarketer.com *.tawk.to cdn.jsdelivr.net 'self' https://maps.googleapis.com https://maps.gstatic.com https://www.google.com https://services.dpd.ro https://stats.g.doubleclick.net https://www.google-analytics.com https://static.biano.ro https://imgsct.cookiebot.com https://i.pinimg.com https://s.pinimg.com https://ct.pinterest.com https://assets.pinterest.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com chimpstatic.com downloads.mailchimp.com *.list-manage.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.2performant.com *.addthis.com *.biano.ro *.cookiebot.com *.googleadservices.com *.googlesyndication.com *.homelux.ro *.moatads.com *.pinimg.com https://unpkg.com *.frizbit.com *.tiktok.com t.themarketer.com cdn1.themarketer.com *.tawk.to cdn.jsdelivr.net https://www.googletagmanager.com tagmanager.google.com 'self' https://maps.googleapis.com https://maps.gstatic.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://www.gstatic.com https://services.dpd.ro https://www.clarity.ms https://f.clarity.ms https://cdn.jsdelivr.net https://ct.pinterest.com https://widgets.pinterest.com https://assets.pinterest.com https://s.pinimg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com downloads.mailchimp.com assets.braintreegateway.com *.fontawesome.com *.homelux.ro t.themarketer.com cdn1.themarketer.com *.tawk.to cdn.jsdelivr.net tagmanager.google.com 'self' https://fonts.googleapis.com https://fonts.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.google-analytics.com *.facebook.com *.facebook.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.addthis.com *.biano.ro *.cookiebot.com *.doubleclick.net *.googlesyndication.com *.homelux.ro *.pinterest.com *.frizbit.com *.tiktokw.us *.tiktok.com t.themarketer.com cdn1.themarketer.com c1api.themarketer.com c2api.themarketer.com c3api.themarketer.com *.tawk.to wss://*.tawk.to 'self' https://maps.googleapis.com https://maps.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.google-analytics.com https://stats.g.doubleclick.net https://services.dpd.ro https://www.clarity.ms https://f.clarity.ms https://ct.pinterest.com https://log.pinterest.com https://s.pinimg.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.homelux.ro/; report-to report-endpoint; 1
script-src-elem 'self' 'unsafe-inline' data: https://stp.embryo.com https://z.embryo.com https://connect.facebook.net https://snap.licdn.com https://googleads.g.doubleclick.net https://scripts.clarity.ms https://www.clarity.ms https://www.gstatic.com https://cdn-cookieyes.com https://challenges.cloudflare.com https://static.cloudflareinsights.com https://sf16-website-login.neutral.ttwstatic.com https://www.instagram.com https://apis.google.com https://platform.twitter.com https://www.googletagmanager.com https://performance.radar.cloudflare.com; report-uri https://csp-reports.embryo.com/report 1
default-src 'self' *.youtube.com *.sentry.io; img-src 'self' data: *.espace-autoentrepreneur.com *.checkout.com *.google.com *.google.fr *.google-analytics.com *.outbrain.com https://www.facebook.com https://bat.bing.com *.jsdelivr.net; style-src 'unsafe-inline' 'self' *.espace-autoentrepreneur.com *.jsdelivr.net *.cloudflare.com *.googleapis.com *.checkout.com *.jquery.com https://fonts.cdnfonts.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' *.espace-autoentrepreneur.com https://unpkg.com https://bat.bing.com *.outbrain.com https://connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google.com *.gstatic.com *.google-analytics.com *.doubleclick.net *.checkout.com *.bootstrapcdn.com *.jsdelivr.net *.cloudflare.com *.jquery.com *.fontawesome.com https://js.stripe.com; font-src 'self' *.espace-autoentrepreneur.com *.googleapis.com *.gstatic.com *.fontawesome.com https://fonts.cdnfonts.com; frame-src 'self' *.checkout.com *.ckotech.co https://www.facebook.com *.youtube.com https://js.stripe.com https://hooks.stripe.com; connect-src 'self' *.google-analytics.com *.doubleclick.net *.sentry.io *.jquery.com *.fontawesome.com https://api.stripe.com https://r.stripe.com https://api-adresse.data.gouv.fr https://replay.espace-autoentrepreneur.com 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net *.tawk.to *.cloudflare.com *.googleapis.com *.klevu.com *.zopim.com *.jsdelivr.net media.flixfacts.com 'unsafe-inline' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://secure.paygate.co.za/payweb3/process.trans *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com *.tawk.to *.facebook.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; frame-ancestors *.hana.ondemand.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com *.tawk.to *.nosto.com *.issuu.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.criteo.net *.criteo.com *.addthis.com *.facebook.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'unsafe-inline' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://widgets.payflex.co.za oppwa.com *.oppwa.com *.peachpayments.com *.eu-west-1.amazonaws.com *.tawk.to cdn.jsdelivr.net *.cloudflare.com *.google.com *.google.lv *.google.co.za *.google.com.na *.google.na *.klevu.com *.zopim.com *.nosto.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.zopim.io *.sfdr.co sfdr.co tawk.link *.tawk.link *.addthis.com *.jsdelivr.net *.facebook.com *.azurewebsites.net maps.googleapis.com app.mobicredwidget.co.za media.flixcar.com rt.flix360.com assets.secure.checkout.visa.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://browser.sentry-cdn.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://widgets.payflex.co.za https://partpayassets.blob.core.windows.net *.oppwa.com oppwa.com *.peachpayments.com *.tawk.to cdn.jsdelivr.net *.zopim.com *.videoly.co sfdr.co *.cnetcontent.com *.cloudfront.net *.klevu.com *.google.lv *.google.co.za *.google.com.na *.google.na *.cloudflare.com *.cloudflareinsights.com *.nosto.com *.hotjar.com *.googletagmanager.com *.criteo.net *.criteo.com *.sfdr.co *.tawk.link *.jsdelivr.net *.addthis.com *.addthisedge.com *.moatads.com *.mouseflow.com *.facebook.com *.what3words.com maps.googleapis.com commerce.adobedtm.com magento-recs-sdk.adobe.net static.zdassets.com app.mobicredwidget.co.za www.gstatic.com connect.facebook.net bam.nr-data.net js.testfreaks.com media.flixfacts.com media.flixcar.com security-hub.vaimo.network 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com https://widgets.payflex.co.za oppwa.com *.oppwa.com *.peachpayments.com cdn.jsdelivr.net *.cloudflare.com *.googleapis.com *.klevu.com *.jsdelivr.net www.gstatic.com media.flixcar.com 'unsafe-inline' data: 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://*.ingest.sentry.io https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com oppwa.com *.oppwa.com *.peachpayments.com *.tawk.to wss://*.tawk.to *.testfreaks.com *.ksearchnet.com *.klevu.com *.nosto.com *.hotjar.io *.hotjar.com *.doubleclick.net *.zendesk.com *.tawk.link *.addthis.com *.addthisedge.com *.what3words.com *.googleapis.com vsb111.tawk.to ekr.zdassets.com api.magento.com commerce.adobedc.net app.mobicredwidget.co.za wss://widget-mediator.zopim.com bam.nr-data.net *.googletagmanager.com security-hub.vaimo.network 'unsafe-eval' data: 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'none'; report-uri /api/sec-csp/110000136/report 1
default-src     'self'     'unsafe-inline'     https://www.google-analytics.com     https://www.googletagmanager.com     https://connect.facebook.net ; img-src     'self'     data:     https://ajax.googleapis.com     https://bvr.snva.jp     https://*.clarity.ms     https://checkout-js.worldshopping.jp     https://checkout-static.worldshopping.jp     https://connect.facebook.net     https://dr29ns64eselm.cloudfront.net     https://googleads.g.doubleclick.net     https://i.ytimg.com     https://log.pinterest.com     https://m.media-amazon.com     https://maps.google.com     https://maps.googleapis.com     https://maps.gstatic.com     https://pagead2.googlesyndication.com     https://r3.snva.jp     https://s3-ap-northeast-1.amazonaws.com     https://scdn.line-apps.com     https://screenshot-static.worldshopping.global     https://static-contents.worldshopping.jp     https://syndication.twitter.com     https://taglogprd-c2.ukw.jp     https://video.visumo.jp     https://www.facebook.com     https://www.google.be     https://www.google.ca     https://www.google.co.in     https://www.google.co.jp     https://www.google.co.kr     https://www.google.co.uk     https://www.google.com     https://www.google.com.au     https://www.google.com.br     https://www.google.com.hk     https://www.google.com.ph     https://www.google.com.sg     https://www.google.com.tw     https://www.google.es     https://www.google.ie     https://www.google.it     https://www.google.se     https://www.googleadservices.com     https://www.googletagmanager.com     https://www.visumo.jp     https://c.bing.com ; font-src     'self'     data:     https://cdn.jsdelivr.net     https://fonts.gstatic.com     https://frontend-cdn.perplexity.ai ; connect-src     'self'     https://*.clarity.ms     https://analytics.google.com     https://bvr.snva.jp     https://checkout-api.worldshopping.jp     https://contents.api.visumo.jp     https://dpolc4ci3j.execute-api.ap-northeast-1.amazonaws.com     https://googleads.g.doubleclick.net     https://lightning-recommend.io     https://maps.googleapis.com     https://pagead2.googlesyndication.com     https://payments.amazon.co.jp     https://payment.worldshopping.global     https://payments-fe.amazon.com     https://posthog.worldshopping.global     https://region1.analytics.google.com     https://stats.g.doubleclick.net     https://www.facebook.com     https://www.google.be     https://www.google.ca     https://www.google.co.in     https://www.google.co.jp     https://www.google.co.kr     https://www.google.co.th     https://www.google.co.uk     https://www.google.com     https://www.google.com.au     https://www.google.com.hk     https://www.google.com.ph     https://www.google.com.sg     https://www.google.com.tw     https://www.google.es     https://www.google.fi     https://www.google.fr     https://www.google.it     https://www.googleadservices.com     https://www.visumo.jp ; frame-src     'self'     http://10.10.116.84:8787     https://checkout-v2.paidy.com     https://platform.twitter.com     https://social-plugins.line.me     https://toolytics.pa.clients6.google.com     https://www.facebook.com     https://www.google.com     https://www.youtube.com ; script-src     'self'     'unsafe-eval'     https://3001.scriptcdn.net     https://ajax.googleapis.com     https://apis.google.com     https://apps.paidy.com     https://assets.pinterest.com     https://bvr.ast.snva.jp     https://checkout-api.worldshopping.jp     https://checkout-js.worldshopping.jp     https://code.jquery.com     https://connect.facebook.net     https://d.line-scdn.net     https://googleads.g.doubleclick.net     https://lightning-recommend.io     https://maps.google.com     https://p01.mul-pay.jp     https://platform.twitter.com     https://rtg-endpoint.global.ssl.fastly.net     https://scripts.clarity.ms     https://shop-js.worldshopping.jp     https://static.mul-pay.jp     https://static-fe.payments-amazon.com     https://taglogprd-c2.ukw.jp     https://unisuggestprd-c2.ukw.jp     https://unpkg.com     https://www.clarity.ms     https://www.google.com     https://www.gstatic.com     https://www.visumo.jp     https://www.googletagmanager.com ; style-src     'self'     https://ajax.googleapis.com     https://cdn.jsdelivr.net     https://checkout-js.worldshopping.jp     https://fonts.googleapis.com     https://unpkg.com     https://www.visumo.jp ;          report-to              csp-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://dev.visualwebsiteoptimizer.com https://cdn-cookieyes.com https://www.google.com https://www.gstatic.com https://js.hs-analytics.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://dev.visualwebsiteoptimizer.com https://track.hubspot.com https://i.ytimg.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://dev.visualwebsiteoptimizer.com https://log.cookieyes.com; frame-src https://www.googletagmanager.com https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri https://imagefirst.report-uri.com/r/d/csp/reportOnly 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com fonts.bunny.net cdnjs.cloudflare.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https://www.paypal.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io e.jachensen.nl td.doubleclick.net www.kiyoh.com www.facebook.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://portal.payconiq.com https://static.buckaroo.nl https://www.paypalobjects.com www.jachensen.nl trengo.s3.eu-central-1.amazonaws.com www.google.nl blob: secure.adnxs.com bat.bing.com c.bing.com www.awin1.com www.facebook.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io col1.wiqhit.com cdn.widget.trengo.eu code.jquery.com cdnjs.cloudflare.com static.widget.trengo.eu www.mandad.nl s.codepen.io widget.prod.faslet.net www.clarity.ms connect.facebook.net bat.bing.com ct.beslist.nl www.dwin1.com analytics.tiktok.com js-agent.newrelic.com lantern.roeyecdn.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl jac-hensen.github.io use.fontawesome.com www.mandad.nl fonts.bunny.net www.jachensen.nl js-agent.newrelic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.widget.trengo.eu 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com wss://websocketservice-externalapi.prod.buckaroo.io https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://applepay.buckaroo.io https://www.paypal.com region1.google-analytics.com api.widget.trengo.eu region1.analytics.google.com api.faslet.net www.google.com ct.beslist.nl f.clarity.ms o.clarity.ms bat.bing.com analytics.tiktok.com bam.nr-data.net lantern.roeye.com hal9000.redintelligence.net col1.wiqhit.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.globalpay.com https://fonts.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com staticw2.yotpo.com cdn1.stamped.io static.klaviyo.com *.yotpo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.gpwebpay.com *.gpe.cz *.globalpay-ecommerce.com https://seo.mageplaza.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.americanexpress.com *.globalpay.com *.mastercard.com *.visa.com *.gpwebpay.com *.gpe.cz *.globalpay-ecommerce.com connect.facebook.net *.facebook.com *.disqus.com disqus.com www.facebook.com graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com t.zip.co app.hubspot.com tr.snapchat.com www.xtento.com *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.globalpay.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ connect.facebook.net *.facebook.com *.fbcdn.net *.disqus.com *.disquscdn.com www.facebook.com graph.facebook.com business.facebook.com *.google.com *.googleadservices.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com static.secure-afterpay.com.au stats.g.doubleclick.net www.google.com.au staticw2.yotpo.com p.yotpo.com cdn-yotpo-images-production.yotpo.com cfvod.kaltura.com a.klaviyo.com bat.bing.com tr.snapchat.com blob: www.xtento.com cdn.xtento.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.gstatic.com widget.freshworks.com m2epro.freshdesk.com *.aexp-static.com https://ajax.aspnetcdn.com *.globalpay.com *.gpapiservices.com https://pay.google.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ connect.facebook.net *.disqus.com *.disquscdn.com graph.facebook.com business.facebook.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.facebook.com seal.geotrust.com static.zipmoney.com.au api.instagram.com www.google.com www.gstatic.com staticw2.yotpo.com bam.nr-data.net cdn.inspectlet.com static.klaviyo.com fast.a.klaviyo.com edge.fullstory.com secure.ewaypayments.com v2.zopim.com static.zdassets.com widget-mediator.zopim.com bat.bing.com static.hotjar.com script.hotjar.com browser.sentry-cdn.com unsafe-eval edge.marker.io sc-static.net tr.snapchat.com global-api.afterpay.com js.squarecdn.com cdn.insightech.com www.xtento.com cdn.xtento.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app widget.freshworks.com m2epro.freshdesk.com https://fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com *.disquscdn.com maxcdn.bootstrapcdn.com assets.braintreegateway.com staticw2.yotpo.com cdn1.stamped.io static.klaviyo.com static-tracking.klaviyo.com use.typekit.net p.typekit.net analytics.tiktok.com sc-static.net tr.snapchat.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com stedi.s3.ap-southeast-2.amazonaws.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app cdn.jsdelivr.net api.lab.amplitude.com *.googleapis.com widget.freshworks.com m2epro.freshdesk.com https://google.com/pay https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ connect.facebook.net *.facebook.com *.disqus.com disqus.com *.disquscdn.com www.facebook.com graph.facebook.com business.facebook.com *.google-analytics.com *.googletagmanager.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.zip.co api.zipmoney.com.au staticw2.yotpo.com app.hubspot.com api.hubspot.com payments.braintree-api.com/graphql fast.a.klaviyo.com edge.fullstory.com rs.fullstory.com sales-w7ssk.zendesk.com stedi.zendesk.com widget-mediator.zopim.com ekr.zdassets.com metrics.hotjar.io tr.snapchat.com tr6.snapchat.com api.marker.io api.experianaperture.io bat.bing.com us-1-api.insightech.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com stedi.s3.ap-southeast-2.amazonaws.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' https://*.matomo.cloud https://*.cookiebot.com https://*.cookiebot.eu https://*.readspeaker.com https://*.jsdelivr.net https://*.cookiebot.com https://*.youtube.com https://*.cloudflare.com https://*.googletagmanager.com https://www.google.com https://www.gstatic.com 'nonce-dWNieXB5cXpsbGN2dGFjcHFyaG9rbndidGZja3B3dG9tc25w' 'nonce-emZ4enB6bnF0dmVubGlmZGNqc2plc3Z5dWtzYW5ieWF6eG5z' 'nonce-amVhcnhzaXlobHdkbHZ6bnh5ZXhzaXZrYWdtamdnd3FndGR0' 'nonce-em52dWJnbW1wd3NzZWdmY2ZzZHR3amhwYmFkcWxlcWtza3Ru' 'nonce-eGpuYm9zYWFzdGN0d29vemdsYWx6bmh4YXZlenZzbWxrZHRj' 'nonce-eGZkZ21obnpyZWt3a3BxenBzYXR3dmFmZG12Z2hpd2d0dGxt' 'nonce-cnB5amxta2Rwb3JrYWNtcXp3eGtxdHJ2eWd2Z25oaGl4Y3Bj'; style-src 'self' 'unsafe-inline' https://*.readspeaker.com https://*.typekit.net https://*.cookiebot.com; img-src 'self' https://*.cookiebot.com data:; connect-src 'self' https://*.algolia.net https://*.algolia.io https://*.cookiebot.com https://*.cookiebot.eu https://*.matomo.cloud https://*.typekit.net https://*.readspeaker.com https://*.typekit.net https://*.analytics.google.com https://www.google.com; font-src 'self' data: https://*.typekit.net; object-src 'none'; media-src 'self' https://*.mariamiddelares.be; frame-src 'self' https://*.cookiebot.com https://www.google.com; form-action 'self'; frame-ancestors https://*.mariamiddelares.be https://*.mijnziekenhuis.be; base-uri 'self'; 1
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.checkout-api.avarda.com *.checkout-cdn.avarda.com checkout-cdn.avarda.com payment-widget.avarda.com *.payment-widget.avarda.com payment-widget.stage.avarda.com *.payment-widget.stage.avarda.com *.klarnacdn.net *.cloudflare.com *.typekit.net *.trustedshops.com *.googleapis.com *.klaviyo.com *.tawk.to/ *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.twitter.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.checkout-cdn.avarda.com checkout-cdn.avarda.com card-payment-frame.production.avarda.com *.stage.avarda.com pay.google.com *.freshchat.com *.twitter.com *.pinterest.com landofcoder.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https://images.unsplash.com *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com *.avarda.com/ *.checkout-api.avarda.com checkout-api.avarda.com *.checkout-cdn.avarda.com checkout-cdn.avarda.com openbanking-logos.production.avarda.com payment-widget.avarda.com *.payment-widget.avarda.com payment-widget.stage.avarda.com *.payment-widget.stage.avarda.com *.cloudfront.net/ *.criteo.net *.stamped.io *.freshchat.com/ *.cloudflare.com *.klarna.com *.ytimg.com *.cookiefirst.com *.goodahead.dev/ *.unifaun.com/ *.blob.core.windows.net/ *.azureedge.net/ *.tile.openstreetmap.org dreampetstore.com vipstore.fi *.vipstore.fi *.bing.com/ *.clarity.ms/ *.google.fi *.google.se *.google.no *.google.dk www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ polyfill.io *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net/ *.tiktok.com/ *.avarda.com/ *.checkout-cdn.avarda.com checkout-cdn.avarda.com *.stage.avarda.com pay.google.com payment-widget.avarda.com *.payment-widget.avarda.com payment-widget.stage.avarda.com *.payment-widget.stage.avarda.com *.kk-resources.com/ *.shopalike.fi/ *.chatbotize.com/ qanuk-stage.vercel.app *.tradedoubler.com *.criteo.com *.cookiefirst.com *.omappapi.com *.googleoptimize.com *.klaviyo.com reviewsonmywebsite.com 'self' data: *.fontawesome.com *.videoly.co/ *.freshchat.com cdnjs.cloudflare.com/ *.googleapis.com/ *.noibu.com/ *.pinimg.com/ *.bing.com/ *.pinterest.com/ *.intercom.io/ *.intercomcdn.com/ *.clarity.ms/ *.klarnaservices.com/ *.klarna.com/ polyfill-fastly.io/ *.custobar.com/ *.tawk.to/ unpkg.com/ landofcoder.com s7.addthis.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.cookiefirst.com *.klarnacdn.net *.omappapi.com reviewsonmywebsite.com *.typekit.net *.freshchat.com/ *.cloudflare.com/ *.klaviyo.com/ *.tawk.to/ *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com/ *.algolianet.com *.insights.algolia.io *.google-analytics.com *.facebook.com *.facebook.net *.google.com/ *.doubleclick.net *.googlesyndication.com *.tiktok.com/ *.checkout-api.avarda.com checkout-api.avarda.com google.com www.google.com pay.google.com payment-widget.avarda.com *.payment-widget.avarda.com payment-widget.stage.avarda.com *.payment-widget.stage.avarda.com *.criteo.com *.kelkoogroup.net/ *.chatbotize.com *.klarnaservices.com *.qanuk.app *.cookiefirst.com *.omappapi.com reviewsonmywebsite.com *.cloudflare.com *.pinterest.com *.clarity.ms/ *.noibu.com/ wss://input.noibu.com/ wss://nexus-websocket-a.intercom.io/ *.intercom.io/ *.bing.com/ *.algolia.io/ *.klarna.com/ *.custobar.com/ *.tawk.to/ wss://*.tawk.to/ *.googleapis.com/ *.avarda.com/ landofcoder.com ekr.zdassets.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com; object-src 'none'; script-src 'self' 'report-sample' https://www.googletagmanager.com https://www.google-analytics.com cdn.jsdelivr.net https://ai.ocelotbot.com https://cdnjs.cloudflare.com mdbootstrap.com; style-src 'self' 'report-sample' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https://cdnjs.cloudflare.com mdbootstrap.com use.fontawesome.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://fonts.bunny.net 'self' data: https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com *.storyblok.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.instagram.com *.multisafepay.com https://pay.google.com *.trustpilot.com https://*.trengo.eu https://embed.pakketdienstqls.nl js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cdninstagram.com *.fbcdn.net/ *.multisafepay.com *.storyblok.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://tr.kickbite.io https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com tagmanager.google.com https://www.googletagmanager.com *.instagram.com *.multisafepay.com https://pay.google.com *.storyblok.com *.trustpilot.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://static.widget.trengo.eu https://*.trengo.eu https://static.cloudflareinsights.com https://tr.kickbite.io js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.multisafepay.com *.storyblok.com *.trustpilot.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com https://static.widget.trengo.eu 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.multisafepay.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.trengo.eu https://tr.kickbite.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.bootstrapcdn.com js.klevu.com *.zopim.com xmpp-contact.unlimitedhorizon.co.uk *.useinsider.com static.klaviyo.com *.klevu.com *.ksearchnet.com https://fonts.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com www.soholighting.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.facebook.com *.googlesyndication.com *.tiktok.com www.facebook.com *.americanexpress.com *.arcot.com *.monzo.com *.securesuite.co.uk authentication-acs.marqeta.com www.soholighting.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com www.soholighting.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.instagram.com www.google.com https://*.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.awin1.com *.zenaps.com account.fetchify.com assets.braintreegateway.com tst.kaptcha.com c.paypal.com *.zopim.com speedsize.com *.speedsize.com ct.pinterest.com *.freshchat.net *.freshchat.com *.useinsider.com *.arcot.com *.monzo.com *.securesuite.co.uk authentication-acs.marqeta.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.trustpilot.com *.weltpixel.com www.soholighting.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * *.cdninstagram.com 'self' data: https://*.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com *.awin1.com *.zenaps.com *.wepowerconnections.com *.bing.com *.clarity.ms js.klevu.com cdn-cookieyes.com speedsize.com *.speedsize.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ ct.pinterest.com www.google.co.uk *.googleapis.com *.ggpht *.sagepay.co.uk xmpp-contact.unlimitedhorizon.co.uk *.useinsider.com *.easyfundraising.org.uk *.klevu.com *.ksearchnet.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com www.soholighting.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com *.instagram.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://*.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com cc-cdn.com 'self' bat.bing.com js.klevu.com *.clarity.ms c.paypal.com chimpstatic.com cdn-cookieyes.com *.hotjar.com sentry.bigeyedeers.dev browser.sentry-cdn.com speedsize.com *.speedsize.com cdn.jsdelivr.net unpkg.com cdnjs.cloudflare.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ tags.creativecdn.com player.vimeo.com *.youtube.com *.googleapis.com t.elesi.com t.soholighting.com porjs.com widget.trustpilot.com s.pinimg.com ct.pinterest.com *.freshchat.net *.freshchat.com fw-cdn.com xmpp-contact.unlimitedhorizon.co.uk www.paidonresults.net widget.freshworks.com m2epro.freshdesk.com *.klevu.com *.ksearchnet.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.trustpilot.com https://www.googletagmanager.com tagmanager.google.com www.soholighting.com https://js.klevu.com https://so.soholighting.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com cc-cdn.com *.bootstrapcdn.com *.typekit.net js.klevu.com speedsize.com *.speedsize.com https://static.klaviyo.com *.freshchat.net *.freshchat.com xmpp-contact.unlimitedhorizon.co.uk *.useinsider.com widget.freshworks.com m2epro.freshdesk.com *.klevu.com *.ksearchnet.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com maxcdn.bootstrapcdn.com *.trustpilot.com tagmanager.google.com www.soholighting.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com speedsize.com *.speedsize.com www.soholighting.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.facebook.com *.facebook.net https://*.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com *.wepowerconnections.com https://the.sciencebehindecommerce.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com *.sandbox.braintree-api.com *.clarity.ms *.cookieyes.com cdn-cookieyes.com *.trustpilot.com *.hotjar.com sentry.bigeyedeers.dev speedsize.com *.speedsize.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.google.co.uk ct.pinterest.com *.useinsider.com capig.stape.gl widget.freshworks.com m2epro.freshdesk.com *.klevu.com *.ksearchnet.com https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://www.google-analytics.com www.soholighting.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com www.soholighting.com http: https: blob: 'self' 'unsafe-inline'; default-src speedsize.com *.speedsize.com elesi.com www.elesi.com cdn.elesi.com static.elesi.com soholighting.com www.soholighting.com cdn.soholighting.com static.soholighting.com lighteningbox.com www.lighteningbox.com cdn.lighteningbox.com static.lighteningbox.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://sentry.bigeyedeers.dev/api/6/security/?sentry_key=476f7497936cfb1dfb62eeeaa2a7f1cb; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://fonts.gstatic.com 'self' data: https://use.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com s7.addthis.com https://player.vimeo.com https://www.youtube.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com http://fonts.googleapis.com https://use.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com ekr.zdassets.com/ https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io https://olegnax.com https://api.instagram.com https://graph.instagram.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com cash-f.squarecdn.com *.fontawesome.com maxcdn.bootstrapcdn.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com * https://images.unsplash.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.trustly.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://maps.googleapis.com https://player.vimeo.com chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app downloads.mailchimp.com *.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * https://maps.googleapis.com https://player.vimeo.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com *.google-analytics.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://portal.envisagedigital.co.uk/api/website/kahfn1iruo/report-uri; report-to report-endpoint; 1
block-all-mixed-content; default-src 'self'; img-src 'self' blob: data: https:; script-src 'self' 'strict-dynamic' 'unsafe-inline' cdnjs.cloudflare.com js.intercomcdn.com k0r92gxvnwz6.statuspage.io https:; style-src 'self' 'unsafe-inline' fonts.googleapis.com tagmanager.google.com https://www.googletagmanager.com cdnjs.cloudflare.com cdn.jsdelivr.net embed.lpcontent.net; font-src 'self' data: https:; connect-src 'self' https: wss://*.intercom.io wss://*.pusher.com wss://*.ably.io wss://*.sessionstack.com; frame-src 'self' https:; media-src 'self' blob: data: https:; object-src 'self' *.amazonaws.com;; base-uri 'self'; frame-ancestors 'none'; form-action 'self'; upgrade-insecure-requests; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubce2055812be5901b8d66c0f68cdc5bce&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=environment%3Aprod%2Cservice%3Asftptogo; 1
object-src 'none'; default-src 'self' blob:; font-src 'self' static.artforum.sk use.typekit.net data:; style-src 'self' 'unsafe-inline' static.artforum.sk *.typekit.net cdn.luigisbox.tech tools.luckyorange.com; frame-src 'self' www.facebook.com staticxx.facebook.com connect.facebook.net *.doubleclick.net www.google.com www.googletagmanager.com player.vimeo.com www.youtube-nocookie.com www.podbean.com w.soundcloud.com www.scribd.com online.fliphtml5.com www.mixcloud.com www.soundtier.com sibautomation.com widget.packeta.com static.posta.sk; script-src 'self' 'unsafe-eval' 'unsafe-inline' static.artforum.sk cdn.luigisbox.tech scripts.luigisbox.tech cdnjs.cloudflare.com www.googletagmanager.com www.google-analytics.com ssl.google-analytics.com www.googleadservices.com pagead2.googlesyndication.com googleads.g.doubleclick.net www.google.com www.google.sk www.google.cz connect.facebook.net login.dognet.sk browser.sentry-cdn.com js.sentry-cdn.com *.sentry.io sibautomation.com widget.packeta.com tools.luckyorange.com static.posta.sk scripts.clarity.ms www.clarity.ms bat.bing.com; worker-src 'self'; img-src * data:; form-action 'self' www.facebook.com connect.facebook.net; connect-src * 'unsafe-eval' 'unsafe-inline'; media-src static.artforum.sk; report-uri https://o230028.ingest.sentry.io/api/6140909/security/?sentry_key=b0d95dc832b24fc0888fce3d780b74c6&sentry_environment=production&sentry_release=af3ba137ad6c1ed87ad3b9e951b5a79407483438 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.sagepay.com *.opayo.eu.elavon.com *.fontawesome.com https://fonts.bunny.net cdn.icomoon.io i.icomoon.io fonts.googleapis.com *.klaviyo.com *.jotform.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.stripe.com *.sagepay.com *.opayo.eu.elavon.com paymentpage.ecommpay.com paymentpage.westresscode.net pp.terminal.test https://seo.mageplaza.com *.nosto.com *.nos.to 'self' 'unsafe-inline'; frame-ancestors self *.worldpay.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com *.braintreegateway.com *.paypal.com google.com *.google.com *.stripe.com *.stripe.network *.link.com *.sagepay.com *.opayo.eu.elavon.com paymentpage.ecommpay.com paymentpage.westresscode.net pp.terminal.test *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.google.com/ *.nosto.com *.nos.to self consentcdn.cookiebot.com *.worldpay.com *.jotform.com *.bugherd.com *.brevo.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.paypal.com *.typekit.net *.gstatic.com maps.gstatic.com *.calcurates.com *.stripe.com ebizmarts-website.s3.amazonaws.com brippo.s3.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com paymentpage.ecommpay.com paymentpage.westresscode.net pp.terminal.test www.feedoptimise.com cdn.feedoptimise.com mageside.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com https://firebasestorage.googleapis.com *.mageside.com https://www.magezon.com *.nosto.com *.nos.to self maps.googleapis.com *.clarity.ms *.jotform.com *.feefo.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com *.amazonaws.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.stripe.com *.link.com *.sagepay.com *.opayo.eu.elavon.com paymentpage.ecommpay.com paymentpage.westresscode.net pp.terminal.test www.feedoptimise.com cdn.feedoptimise.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.avada.io *.shopify.com *.google.com/ *.nosto.com *.nos.to self cdn.icomoon.io consent.cookiebot.com *.cardinalcommerce.com youtube.com jquery.sellxed.com *.trackedlink.net ddlnk.net dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.trustpilot.com cdn.jsdelivr.net *.bugherd.com *.hotjar.com *.livechatinc.com *.myriadpayments.com *.clarity.ms *.klaviyo.com *.worldpay.com *.jotform.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sagepay.com *.opayo.eu.elavon.com paymentpage.ecommpay.com paymentpage.westresscode.net pp.terminal.test https://static.klaviyo.com *.googleapis.com *.googletagmanager.com *.fontawesome.com https://fonts.bunny.net *.nosto.com *.nos.to self cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com cdn.icomoon.io i.icomoon.io use.typekit.net p.typekit.net *.cloudfront.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.reviews.io *.reviews.co.uk tagmanager.google.com data: *.myriadpayments.com *.klaviyo.com *.jotform.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.stripe.com *.stripe.network *.link.com *.sagepay.com *.opayo.eu.elavon.com paymentpage.ecommpay.com paymentpage.westresscode.net pp.terminal.test https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google-analytics.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog https://get.geojs.io *.avada.io *.nosto.com *.nos.to maps.googleapis.com www.google.co.uk region1.google-analytics.com *.clarity.ms *.klaviyo.com *.livechatinc.com *.jotform.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src self cdn.icomoon.io unpkg.com fonts.googleapis.com *.jotform.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.mpmoran.co.uk/csp/csp/report; report-to report-endpoint; 1
font-src maxcdn.bootstrapcdn.com *.fontawesome.com *.klevu.com *.ksearchnet.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.punchout2go.com *.tradecentric.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.usg.edu * 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.punchout2go.com *.tradecentric.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.doofinder.com magefan.com cm.magefan.com *.klevu.com *.ksearchnet.com *.disqus.com store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page *.doofinder.com *.clarity.ms *.punchout2go.com *.tradecentric.com *.klevu.com *.ksearchnet.com *.disqus.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com maxcdn.bootstrapcdn.com *.doofinder.com *.fontawesome.com *.punchout2go.com *.tradecentric.com *.klevu.com *.ksearchnet.com unsafe-inline assets.braintreegateway.com https://www.pocketnurse.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.doofinder.com wss://*.doofinder.com *.clarity.ms *.klevu.com *.ksearchnet.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src blob:; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.kxcdn.com *.fontawesome.com *.alothemes.com *.magepow.com *.fonts.googleapis.com data: *.cloudflare.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.addthis.com *.pinterest.com *.livechatinc.com *.doubleclick.net js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com scontent.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com google.com magefan.com cm.magefan.com *.disqus.com *.alothemes.com *.magepow.com *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.google.nl *.addthis.com *.pinterest.com *.cdninstagram.com *.thuiswinkel.org *.thuiswinkel-cdn.org https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.googleapis.com *.gstatic.com cdn.ampproject.org googletagmanager.com *.kxcdn.com platform.twitter.com *.disqus.com *.avada.io *.alothemes.com *.magepow.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.instagram.com *.livechatinc.com *.thuiswinkel.org *.thuiswinkel-cdn.org *.diffuse.tools js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com google.com *.kxcdn.com *.gstatic.com *.fontawesome.com *.alothemes.com *.magepow.com *.thuiswinkel.org *.thuiswinkel-cdn.org maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.alothemes.com *.magepow.com *.cloudflare.com *.googleapis.com *.addthis.com *.cardinalcommerce.com *.graph.instagram.com *.googlesyndication.com *.g.doubleclick.net *.diffuse.tools *.thuiswinkel.org *.thuiswinkel-cdn.org api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
script-src-elem 'self' 'unsafe-inline' *.gstatic.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.googletagmanager.com *.cookiebot.com *.cookiebot.eu *.google.com *.youtube.com *.hotjar.com *.bing.com *.newrelic.com *.multisafepay.com *.trustedshops.com *.etrusted.com chatwidget-prod.web.app *.convertexperiments.com *.facebook.net squeezely.tech; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.doubleclick.net *.facebook.com *.fontawesome.com https://widgets.trustedshops.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.cardinalcommerce.com *.cookiebot.com *.cookiebot.eu *.doubleclick.net *.googletagmanager.com *.vimeo.com *.facebook.com *.multisafepay.com https://pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.swagger.io https://images.unsplash.com https://www.magezon.com *.magentocommerce.com *.google.com *.googleapis.com *.doubleclick.net *.googleadservices.com *.googletagmanager.com *.googlesyndication.com *.paypalobjects.com *.ytimg.com *.facebook.com *.facebook.net *.iusercentrics.eu *.bing.net *.etrusted.com *.cookiebot.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com magefan.com cm.magefan.com *.multisafepay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com cdn-4.convertexperiments.com *.cardinalcommerce.com *.googleapis.com *.gstatic.com *.doubleclick.net *.google-analytics.com *.googletagmanager.com *.ytimg.com *.facebook.com *.facebook.net *.avada.io *.hotjar.com *.cookiebot.com *.cookiebot.eu *.multisafepay.com *.trustedshops.com *.etrusted.com *.bing.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com https://pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.gstatic.com *.googleapis.com *.google.com *.magento-ds.com *.magento-datasolutions.com *.fontawesome.com chatwidget-css.web.app *.etrusted.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com maxcdn.bootstrapcdn.com *.multisafepay.com assets.braintreegateway.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com cdn-4.convertexperiments.com *.cookiebot.com *.cookiebot.eu *.cardinalcommerce.com *.googlesyndication.com *.facebook.com *.facebook.net *.avada.io *.bing.net api.ipify.org *.bing.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.multisafepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com v2.zopim.com embed.tawk.to *.commerce-connector.com *.flixcar.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sameday.ro c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.2performant.com *.doubleclick.net *.pinterest.com *.force.com *.facebook.com *.creativecdn.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com v2assets.zopim.io *.google.ro *.facebook.com *.widgetwhats.com tawk.link compari.ro ct.pinterest.com *.flix360.com *.flixcar.com *.flix360.io *.3lift.com *.doubleclick.net *.google.com *.nexx360.io data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sameday.ro unpkg.com/map-fanbox-points@0.0.5/umd/map-fanbox-points.js https://maps.googleapis.com https://player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.mczbf.com *.zdassets.com v2.zopim.com *.facebook.net *.facebook.com attr-2p.com *.widgetwhats.com chimpstatic.com embed.tawk.to *.jsdelivr.net *.hotjar.com *.arukereso.com *.gstatic.com *.clarity.ms *.themarketer.com *.pinimg.com *.pinterest.com *.enzuzo.com cdn-cookieyes.com *.googlesyndication.com *.commerce-connector.com *.force.com *.salesforceliveagent.com aqurate.ai *.flixcar.com *.flix360.io *.flixfacts.com popupsmart.com *.sharethis.com *.tiktok.com *.omniconvert.com *.2performant.com tagmanager.google.com *.creativecdn.com *.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.sameday.ro assets.braintreegateway.com *.googleapis.com *.widgetwhats.com embed.tawk.to *.googletagmanager.com tpc.googlesyndication.com *.cloudfront.net *.commerce-connector.com *.force.com *.popupsmart.com popupsmart.com *.flixcar.com tagmanager.google.com 'self' data: 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.fancourier.ro https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com ekr.zdassets.com wss://widget-mediator.zopim.com pagead2.googlesyndication.com *.google.ro googleads.g.doubleclick.net stats.g.doubleclick.net region1.analytics.google.com *.2performant.com *.widgetwhats.com zdata-ro-bellabike.s3.eu-west-1.amazonaws.com *.tawk.to kfea.zendesk.com api.edrone.me *.themarketer.com *.pinterest.com *.clarity.ms *.commerce-connector.com *.facebook.com *.hotjar.com *.hotjar.io *.google-analytics.com *.sharethis.com *.enzuzo.com *.flixcar.com *.tiktok.com *.omniconvert.com region1.google-analytics.com *.usehardal.com *.creativecdn.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src widget-mediator.zopim.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.clarity.ms; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; media-src 'self' https:; frame-src https://www.youtube-nocookie.com https://www.youtube.com; connect-src 'self' https://www.google-analytics.com https://www.clarity.ms; form-action 'self'; base-uri 'self'; frame-ancestors 'self'; object-src 'none'; report-uri /csp-report 1
font-src maxcdn.bootstrapcdn.com https://cdn.idcreator.com *.fontawesome.com *.fonts.googleapis.com *.gstatic.com data: *.cloudflare.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com https://seo.mageplaza.com *.authorize.net 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.authorize.net https://cdn.justuno.com https://x.adroll.com/ https://idcreator.wufoo.com *.google.com *.addthis.com *.pinterest.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io store.paradoxlabs.com https://cdn.justuno.com https://c813008.ssl.cf2.rackcdn.com/11192-small.png https://cdn.idcreator.com https://cm.g.doubleclick.net https://www.facebook.com https://www.google.com https://www.google.co.uk https://www.google.com.mx https://www.google.co.in https://www.google.co.ca https://www.google.com.au https://www.google.com.ph https://www.google.com.sg https://www.google.co.za https://www.google.com.br https://www.google.co.nz https://www.google.co.il https://www.google.com.sa https://www.google.com.ar https://www.google.com.co https://www.google.com.vn https://www.google.co.ve https://www.google.com.ua https://www.google.com.tr https://www.google.com.tw https://www.google.com.pk https://www.google.com.my https://www.google.com.pe https://www.shopperapproved.com/thankyou/images/xbutton.gif https://www.shopperapproved.com/thankyou/images/minicheckmark.jpg https://www.shopperapproved.com/thankyou/images/just-powered.png https://www.shopperapproved.com/thankyou/simplestar.png *.cloudfunctions.net *.bidswitch.net *.casalemedia.com *.rlcdn.com *.rubiconproject.com *.outbrain.com *.taboola.com *.adnxs.com *.3lift.com *.yahoo.com *.openx.net *.pubmatic.com https://d.adroll.com https://s.adroll.com https://d.adroll.mgr.consensu.org https://dsum-sec.casalemedia.com https://eb2.3lift.com https://googleads.g.doubleclick.net https://p.adsymptotic.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://pixel.advertising.com https://pixel.rubiconproject.com https://image2.pubmatic.com https://simage2.pubmatic.com https://snap.licdn.com https://sync.outbrain.com https://sync.taboola.com https://trc.taboola.com https://ads.yahoo.com https://ups.analytics.yahoo.com https://connect.facebook.net https://idsync.rlcdn.com https://ib.adnxs.com https://x.bidswitch.net https://www.shopperapproved.com/account/images/2020/sa-logo-02.svg *.cloudflare.com https://cdn.klarna.com https://s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com *.cdninstagram.com *.googletagmanager.com *.google-analytics.com www.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.avada.io *.authorize.net *.justuno.com https://cdn.idcreator.com *.facebook.com https://static.cloudflareinsights.com https://static.wufoo.com/scripts/embed/form.js https://www.wufoo.com/scripts/embed/form.js https://www.shopperapproved.com/thankyou/rate/11192.js https://www.shopperapproved.com/thankyou/disable-popup.php https://www.shopperapproved.com/page/js/jquery.noconflict.js https://www.shopperapproved.com/thankyou/initial.php https://d.adroll.com https://s.adroll.com https://d.adroll.mgr.consensu.org https://dsum-sec.casalemedia.com https://eb2.3lift.com https://googleads.g.doubleclick.net https://p.adsymptotic.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://pixel.advertising.com https://pixel.rubiconproject.com https://image2.pubmatic.com https://simage2.pubmatic.com https://snap.licdn.com https://sync.outbrain.com https://sync.taboola.com https://trc.taboola.com https://ads.yahoo.com https://ups.analytics.yahoo.com https://www.facebook.com https://connect.facebook.net https://idsync.rlcdn.com https://ib.adnxs.com https://x.bidswitch.net *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com maxcdn.bootstrapcdn.com https://cdn.idcreator.com https://cdn.justuno.com/ifm_4.1.css https://www.shopperapproved.com/account/css/new_look/custom-survey-error-modal.css *.googleapis.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com https://get.geojs.io *.avada.io *.authorize.net *.justuno.com https://analytics.google.com https://www.google.com/pagead/landing https://googleads.g.doubleclick.net/pagead/landing https://cdn.idcreator.com https://stats.g.doubleclick.net *.cloudflare.com *.paypal.com *.googleapis.com *.addthis.com *.cardinalcommerce.com https://graph.instagram.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'none'; connect-src 'self' blob: https://www.z24.de https://analytics.z24.de https://www.google.com https://adservice.google.com https://stats.g.doubleclick.net https://www.googleadservices.com https://bat.bing.com https://*.clarity.ms; frame-src https://www.youtube-nocookie.com https://www.googletagmanager.com https://tpc.googlesyndication.com https://td.doubleclick.net; frame-ancestors 'none'; font-src 'self'; form-action 'none'; img-src 'self' data: https:; manifest-src 'self'; script-src 'report-sample' 'strict-dynamic' 'nonce-fc4c7341-ebba-43f6-9268-69be0e0e2d44'; script-src-elem 'report-sample' 'strict-dynamic' 'nonce-fc4c7341-ebba-43f6-9268-69be0e0e2d44'; script-src-attr 'report-sample' 'unsafe-hashes' 'sha256-MhtPZXr7+LpJUY5qtMutB+qWfQtMaPccfe7QXtCcEYc='; style-src 'self' 'unsafe-inline'; base-uri 'self'; report-uri /security-report; report-to default 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.gstatic.com https://www.youtube.com https://f.vimeocdn.com; object-src 'none'; style-src 'self' 'unsafe-inline' https://www.youtube.com https://f.vimeocdn.com; img-src *; media-src *; frame-src *; frame-ancestors 'self'; child-src *; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://www.youtube.com; report-uri /report-csp-violation; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'nonce-rfvZiKTOV917Up7CsdQ1+w==' 'strict-dynamic' https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://*.posthog.com https://maps.googleapis.com https://*.tranzila.com https://www.google.com https://www.gstatic.com; style-src 'self' 'nonce-rfvZiKTOV917Up7CsdQ1+w==' 'unsafe-hashes' 'unsafe-inline' https://tagmanager.google.com; font-src 'self' data:; img-src 'self' data: blob: https://carassobucket1.s3.eu-west-1.amazonaws.com https://carassobucket2.s3.eu-west-1.amazonaws.com https://ik.imagekit.io https://my.freesbe.com https://media.spinframe.online https://pro.spinframe.online https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://maps.gstatic.com https://maps.googleapis.com https://ssl.gstatic.com https://www.gstatic.com https://*.tranzila.com; connect-src 'self' https://admin.freesbe.com https://admin-rental.freesbe.com https://apim.workato.com https://by6wfxw5wi.execute-api.eu-west-1.amazonaws.com https://us.i.posthog.com https://direct.tranzila.com https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://*.posthog.com https://maps.googleapis.com https://firebasedynamiclinks.googleapis.com https://ik.imagekit.io; frame-src 'self' https://direct.tranzila.com https://*.tranzila.com https://www.googletagmanager.com https://td.doubleclick.net https://www.google.com; frame-ancestors 'none'; form-action 'self' https://direct.tranzila.com https://*.tranzila.com; base-uri 'self'; object-src 'none'; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; report-uri https://ndlea.gov.ng/csp-report 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://cdn-cookieyes.com https://cdnjs.cloudflare.com https://api.mapbox.com https://link.gymprofitsolutions.com https://www.skynettechnologies.com https://static.cloudflareinsights.com https://widgets.leadconnectorhq.com https://stcdn.leadconnectorhq.com https://services.leadconnectorhq.com https://www.youtube.com https://www.instagram.com https://platform.twitter.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' https://api.mapbox.com https://cdnjs.cloudflare.com https://stcdn.leadconnectorhq.com; img-src 'self' data: blob: https:; font-src 'self' data: https:; media-src 'self' blob: https:; connect-src 'self' https://cdn-cookieyes.com https://api.mapbox.com https://events.mapbox.com https://api.ip2location.io https://www.google-analytics.com https://*.d1training.com https://*.amazonaws.com https://*.cloudfront.net https://services.leadconnectorhq.com https://widgets.leadconnectorhq.com https://services.msgsndr.com https://analytics.google.com https://www.google.com https://ad.doubleclick.net https://log.cookieyes.com; frame-src 'self' https://www.youtube.com https://player.vimeo.com https://open.spotify.com https://w.soundcloud.com https://link.gymprofitsolutions.com https://paymentmethod.mindbodyonline.com https://d1-training-careers.careerplug.com https://www.google.com https://platform.twitter.com https://syndication.twitter.com https://www.instagram.com; worker-src 'self' blob: 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.squarecdn.com *.fontawesome.com www.google.com *.iadvize.com halc.iadvize.com *.adobe.io commerce.adobe.io *.yotpo.com track.cbdatatracker.com *.quickspark.com *.facebook.net *.clarity.ms *.zopim.com *.searchspring.io https://fonts.bunny.net maxcdn.bootstrapcdn.com use.fontawesome.com *.googleapis.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com widgets.sandbox.afterpay.com *.cash.app *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com *.addtoany.com *.twitter.com *.zdassets.com *.leasestation.com landofcoder.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * checkout.sezzle.com sandbox.checkout.sezzle.com tracking.sezzle.com *.winkpayments.io *.winkapis.com *.winklogin.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.io widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.afterpay.com/ *.cash.app d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.certcapture.com connect.bolt.com connect-sandbox.bolt.com s3-us-west-1.amazonaws.com magefan.com cm.magefan.com www.google.co.in bat.bing.com *.amazonaws.com *.afterpay.com mcprod.tentandtable.net *.loggly.com *.iadvize.com halc.iadvize.com *.tentandtable.net commerce.adobe.io *.yotpo.com track.cbdatatracker.com *.quickspark.com *.facebook.net *.clarity.ms *.zopim.com *.searchspring.io *.approvepayments.com *.kaltura.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://img.youtube.com https://firebasestorage.googleapis.com flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com media.sezzle.com swellrewards.com *.swellrewards.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.io geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page https://portal.sandbox.afterpay.com https://portal.afterpay.com https://static.afterpay.com *.squarecdn.com https://hbiq.net *.cash.app *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com www.google.com www.xtento.com cdn.xtento.com *.hotjar.com utt.impactcdn.com *.iadvize.com halc.iadvize.com *.zdassets.com *.searchspring.io *.bing.com *.callrail.com www.cbvisittracker.com *.cbdatatracker.com *.loggly.com stats.g.doubleclick.net *.iesnare.com *.twitter.com *.webeyez.com commerce.adobe.io *.yotpo.com track.cbdatatracker.com *.quickspark.com *.kaltura.com *.facebook.net *.clarity.ms *.zopim.com *.kwipped.com *.approvepayments.com landofcoder.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ s7.addthis.com *.avada.io *.shopify.com *.gstatic.com maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com checkout-sdk.sezzle.com sandbox.checkout-sdk.sezzle.com widget.sezzle.com *.winkpayments.io *.winkpayment.js *.windows.net *.earlywarning.io *.winkapis.com swellrewards.com *.swellrewards.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.io *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com static.afterpay.com/ *.squarecdn.com *.cash.app *.certcapture.com *.fontawesome.com www.google.com *.iadvize.com halc.iadvize.com commerce.adobe.io *.yotpo.com track.cbdatatracker.com *.quickspark.com *.facebook.net *.clarity.ms *.zopim.com *.searchspring.io *.twitter.com https://static.klaviyo.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com assets.braintreegateway.com fonts.cdnfonts.com swellrewards.com *.swellrewards.com *.googleapis.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; object-src connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com *.facebook.net *.clarity.ms *.zopim.com *.searchspring.io landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.iesnare.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.afterpay.com *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com *.cash.app api.lab.amplitude.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com sessions.bugsnag.com www.google.com *.webeyez.com *.iadvize.com halc.iadvize.com *.googlesyndication.com *.zendesk.com *.callrail.com *.zopim.com *.clicklease.com *.cbvisittracker.com *.cbdatatracker.com *.loggly.com stats.g.doubleclick.net wss://mpsnare.iesnare.com/ wss://ws.hotjar.com/ *.fontawesome.com cognito-identity.eu-west-1.amazonaws.com firehose.eu-west-1.amazonaws.com *.yotpo.com track.cbdatatracker.com *.quickspark.com *.facebook.net *.clarity.ms *.searchspring.io content.hotjar.io storage.googleapis.com https://vpnapi.io *.kwipped.com *.approvepayments.com landofcoder.com *.wink.cloud https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ ekr.zdassets.com/ https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com gateway.sezzle.com sandbox.gateway.sezzle.com media.sezzle.com widget.sezzle.com *.winkpayments.io swellrewards.com *.swellrewards.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.vimeo.com *.afip.gob.ar *.google.com *.doubleclick.net *.cloudfront.net *.getblue.io *.mercadopago.com.ar *.mercadopago.com.uy *.mercadopago.com.co *.mercadopago.com.pe *.mercadopago.cl *.zdassets.com https://www.google.com.ar https://analytics.tiktok.com https://www.google.com https://track-icommkt.com https://scripts.icommkt.online https://bam.nr-data.net https://event.getblue.io/ https://static-content-qas.vnforapps.com/ https://static-content.vnforapps.com/ *.google-analytics.com analytics.google.com https://www.googletagmanager.com https://externalassets.icommarketing.com https://www.prunenews.com https://www.clarity.ms *.fontawesome.com https://fonts.bunny.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.vimeo.com *.afip.gob.ar *.doubleclick.net *.cloudfront.net *.getblue.io *.mercadopago.com.ar *.mercadopago.com.uy *.mercadopago.com.co *.mercadopago.com.pe *.mercadopago.cl *.zdassets.com https://www.google.com.ar https://analytics.tiktok.com https://www.google.com https://track-icommkt.com https://scripts.icommkt.online https://bam.nr-data.net https://event.getblue.io/ https://apitestenv.vnforapps.com/ https://apiprod.vnforapps.com/ https://static-content-qas.vnforapps.com/ https://static-content.vnforapps.com/ *.google-analytics.com analytics.google.com https://www.googletagmanager.com https://externalassets.icommarketing.com https://www.prunenews.com https://www.clarity.ms c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://live.decidir.com *.weltpixel.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.vimeo.com *.afip.gob.ar *.google.com *.doubleclick.net *.cloudfront.net *.getblue.io *.mercadopago.com.ar *.mercadopago.com.uy *.mercadopago.com.co *.mercadopago.com.pe *.mercadopago.cl *.zdassets.com https://www.google.com.ar https://analytics.tiktok.com https://www.google.com https://track-icommkt.com https://scripts.icommkt.online https://bam.nr-data.net https://event.getblue.io/ https://static-content-qas.vnforapps.com/ https://static-content.vnforapps.com/ analytics.google.com https://www.googletagmanager.com https://externalassets.icommarketing.com https://www.prunenews.com https://www.clarity.ms www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com * https://firebasestorage.googleapis.com *.hsforms.net *.hsforms.com 'self' data: *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.googletagmanager.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.vimeo.com *.afip.gob.ar *.doubleclick.net *.cloudfront.net *.getblue.io *.mercadopago.com.ar *.mercadopago.com.uy *.mercadopago.com.co *.mercadopago.com.pe *.mercadopago.cl *.zdassets.com https://www.google.com.ar https://analytics.tiktok.com https://www.google.com https://track-icommkt.com https://scripts.icommkt.online https://bam.nr-data.net https://event.getblue.io/ https://apitestenv.vnforapps.com/ https://apiprod.vnforapps.com/ https://static-content-qas.vnforapps.com/ https://static-content.vnforapps.com/ *.google-analytics.com https://www.googletagmanager.com https://externalassets.icommarketing.com https://www.prunenews.com https://www.clarity.ms js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com * *.avada.io *.shopify.com https://live.decidir.com https://developers.decidir.com/ *.hsforms.net *.hsforms.com *.gstatic.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.fontawesome.com https://fonts.bunny.net *.googleapis.com *.gstatic.com *.tagmanager.google.com *.googletagmanager.com https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.vimeo.com *.afip.gob.ar *.doubleclick.net *.cloudfront.net *.getblue.io *.mercadopago.com.ar *.mercadopago.com.uy *.mercadopago.com.co *.mercadopago.com.pe *.mercadopago.cl *.zdassets.com https://www.google.com.ar https://analytics.tiktok.com https://www.google.com https://track-icommkt.com https://scripts.icommkt.online https://bam.nr-data.net https://event.getblue.io/ https://apitestenv.vnforapps.com/ https://apiprod.vnforapps.com/ https://static-content-qas.vnforapps.com/ https://static-content.vnforapps.com/ analytics.google.com https://www.googletagmanager.com https://externalassets.icommarketing.com https://www.prunenews.com https://www.clarity.ms api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://get.geojs.io *.avada.io https://live.decidir.com https://developers.decidir.com/ t.elasticsuite.io *.hsforms.net *.hsforms.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.run.app https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://use.typekit.net https://fonts.gstatic.com fonts.googleapis.com *.googleapis.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://widgets.trustedshops.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://consentcdn.cookiebot.com https://*.robinhq.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://exch.bosrand.nl *.googletagmanager.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://*.robinhq.com maps.googleapis.com maps.gstatic.com *.googleapis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com magefan.com cm.magefan.com *.ggpht.com *.disqus.com https://firebasestorage.googleapis.com *.google.nl *.googleadservices.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://static.hotjar.com https://script.hotjar.com https://selfservice.robinhq.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com https://cdn.jsdelivr.net *.tiktok.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.disqus.com *.avada.io *.shopify.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://use.typekit.net https://p.typekit.net https://*.robinhq.com https://fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://consentcdn.cookiebot.com https://googleads.g.doubleclick.net/ https://pagead2.googlesyndication.com https://*.robinhq.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.gstatic.com data: https://get.geojs.io *.avada.io *.googletagmanager.com https://exch.bosrand.nl *.googleadservices.com *.google.nl *.pay.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://9c7eaa4e-11d4-4b74-af4e-1758420c0a75.sansec.watch/; report-to report-endpoint; 1
font-src https://use.typekit.net *.fontawesome.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://*.svea.com https://*.vipps.no https://*.trustly.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors https://api.clerk.io https://cdn.clerk.io 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com widget.trustpilot.com www.paypalobjects.com google-analytics.com vimeo.com *.yotpo.com *.googleapis.com https://use.typekit.net/* *.cookiebot.com/ *.fontawesome.com htps://fonts.gstatic.com https://*.svea.com *.weltpixel.com *.swiipe.com *.paymentiq.io c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * checkoutapistage.svea.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://cdn.clerk.io *.google.com cdn.valuesportal.com log.adtraction.fail https://www.unifaunonline.se https://*.tile.openstreetmap.org/ imgsct.cookiebot.com *.swiipe.com maps.gstatic.com https://bzr.openai.com *.disqus.com https://img.youtube.com https://meetanshi.com/media/logo.png flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.bing.com *.clarity.ms *.gstatic.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com/ *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://api.clerk.io https://cdn.clerk.io https://custom.clerk.io *.api.unifaun.com cdn.clerk.io api.clerk.io custom.clerk.io widget.trustpilot.com/bootstrap/v5/tp.widget.bootstrap.min.js v2.zopim.com *.gstatic.com chimpstatic.com static.zdassets.com bam.eu01.nr-data.net *.cookiebot.com/ addrevenue.io/ valuesportal.com cdn.adt393.com gtm.adt313.net pin.gymkompaniet.se cdn1.profitmetrics.io t.adii.se https://*.svea.com https://api.unifaun.com consent.cookiebot.com *.swiipe.com maps.googleapis.com https://bzrcdn.openai.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com checkoutapistage.svea.com *.bing.com *.clarity.ms *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net https://cdn1.profitmetrics.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://api.clerk.io https://cdn.clerk.io *.googleapis.com *.yotpo.com https://use.typekit.net cdn.dnky.com https://p.typekit.net *.fontawesome.com *.swiipe.com maxcdn.bootstrapcdn.com *.gstatic.com unsafe-inline assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src *.swiipe.com 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com my.profitmetrics.io gymkompaniet.zendesk.com https://ekr.zdassets.com widget-mediator.zopim.com https://googleads.g.doubleclick.net https://static.doubleclick.net https://stats.g.doubleclick.net www.youtube.com bam.eu01.nr-data.net api.adtraction.net pin.gymkompaniet.se log.adtraction.fail consentcdn.cookiebot.com *.swiipe.com maps.googleapis.com https://bzr.openai.com https://bzrcdn.openai.com www.gstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.clarity.ms *.bing.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
connect-src 'self' https://analytics.tiktok.com https://api.hubspot.com https://cdn.cookielaw.org https://cdn.dreamdata.cloud https://content.hotjar.io https://cta-service-cms2.hubspot.com https://forms.hsforms.com https://px.ads.linkedin.com https://script.crazyegg.com https://www.google-analytics.com https://www.google.com https://edge.api.brightcove.com https://bat.bing.com/ https://manifest.prod.boltdns.net https://sdl.brightcovecdn.com https://logx.optimizely.com https://*.optimizely.com; default-src 'self'; font-src 'self' data: https://use.typekit.net https://*.optimizely.com; frame-ancestors 'none'; frame-src https://www.googletagmanager.com https://googleads.g.doubleclick.net https://cm.g.doubleclick.net https://www.facebook.com https://calendly.com https://forms.hsforms.com https://a5098497884553216.cdn.optimizely.com https://a5098497884553216.cdn-pci.optimizely.com; img-src 'self' data: https://bat.bing.com https://forms-na1.hsforms.com https://ib.adnxs.com https://perf-na1.hsforms.com https://px.ads.linkedin.com https://secure.adnxs.com https://track.accountinsight.cloud https://track.hubspot.com https://www.facebook.com https://www.google.com https://www.google.com.ua https://metrics.brightcove.com https://www.googletagmanager.com https://cf-images.us-east-1.prod.boltdns.net https://cdn.optimizely.com https://app.optimizely.com; media-src 'self' blob:; script-src 'self' 'nonce-mfQIzRPgtXQC7eLoR7NJtw==' https://a.dpmsrv.com https://analytics.tiktok.com https://bat.bing.com https://cdn.cookielaw.org https://cdn.dreamdata.cloud https://cm.g.doubleclick.net https://connect.facebook.net https://googleads.g.doubleclick.net https://ib.adnxs.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://js.hsforms.net https://js.hubspot.com https://js.usemessages.com https://s.dpmsrv.com https://script.crazyegg.com https://script.hotjar.com https://serve.nrich.ai https://snap.licdn.com https://st.getsitecontrol.com https://static.hotjar.com https://widgets.getsitecontrol.com https://www.googletagmanager.com https://assets.calendly.com https://static.hsappstatic.net https://48752163.fs1.hubspotusercontent-na1.net https://cdnjs.cloudflare.com https://players.brightcove.net wss://ws.hotjar.com/ https://*.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://*.typekit.net https://assets.calendly.com https://*.optimizely.com https://app.optimizely.com; worker-src 'self' blob:; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.trustedshops.com *.fontawesome.com data: https://fonts.gstatic.com https://fonts.bunny.net *.tawk.to https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com *.googlesyndication.com *.tiktok.com 'self' connect.facebook.net graph.facebook.com business.facebook.com *.tawk.to 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net www.facebook.com *.googlesyndication.com *.tiktok.com *.googletagmanager.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.multisafepay.com https://pay.google.com *.sendcloud.sc *.jsdelivr.net *.tawk.to 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.googleapis.com *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com *.cloudflare.com *.mailcampaigns.nl www.google.nl bat.bing.com bat.bing.net app.youshouldask.ai https://firebasestorage.googleapis.com cdn.magmodules.eu connect.facebook.net graph.facebook.com business.facebook.com *.multisafepay.com *.amazonaws.com *.tawk.to tawk.link cdn.jsdelivr.net s3.amazonaws.com/ https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.gstatic.com *.google.bg *.googletagmanager.com www.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.trustedshops.com *.cloudflare.com *.fontawesome.com *.mailcampaigns.nl bat.bing.com api.ipify.org app.youshouldask.ai *.clarity.ms *.avada.io *.shopify.com connect.facebook.net graph.facebook.com business.facebook.com *.multisafepay.com https://pay.google.com *.sendcloud.sc *.tawk.to cdn.jsdelivr.net https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.fontawesome.com *.getfirebug.com *.cloudflare.com *.trustedshops.com app.youshouldask.ai https://fonts.googleapis.com https://fonts.bunny.net *.multisafepay.com *.sendcloud.sc *.jsdelivr.net *.tawk.to cdn.jsdelivr.net https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tawk.to tawk.link 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com www.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com bat.bing.com bat.bing.net exch.happyhorizon.com *.google.nl *.clarity.ms https://get.geojs.io *.avada.io connect.facebook.net graph.facebook.com business.facebook.com *.multisafepay.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.tawk.to wss://*.tawk.to *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com assets.adobedtm.com commerce.adobe.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-ds.com https://api.addressfinder.io https://rum.hlx.page chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https://api.addressfinder.io downloads.mailchimp.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.net qa-api.magedevteam.com https://api.addressfinder.io bam.nr-data.net form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';         script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://www.googletagmanager.com https://*.paypal.com https://*.paypalobjects.com https://stats.g.doubleclick.net https://www.gstatic.com;         style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;         font-src 'self' data: https://fonts.gstatic.com;         img-src * data: blob:;         connect-src 'self' https://*.paypal.com https://www.google-analytics.com;         frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.paybox-services.com;         frame-ancestors 'self';         base-uri 'self';         form-action 'self' https://*.paypal.com https://*.paybox-services.com; 1
object-src 'none'; base-uri 'self'; frame-ancestors 'none'; form-action 'self' https://checkout.stripe.com https://www.facebook.com; report-uri /api/csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.insidebrady.com cdnjs.cloudflare.com *.googleapis.com *.google.com *.google.co.in *.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com cert-xiecomm.paymetric.com xiecomm.paymetric.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.worldpay.com *.insidebrady.com *.lpsnmedia.net *.freshchat.com *.doubleclick.net *.force.com *.consentmanager.net cert-xiecomm.paymetric.com xiecomm.paymetric.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.media-brady.com api.feefo.com *.linkedin.com *.quora.com *.clarity.ms *.google.com *.google.co.in *.google.com.au *.bing.com *.doubleclick.net *.monetate.net *.shopperapproved.com *.consentmanager.net https://www.facebook.com *.2o7.net https://images.unsplash.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.media-brady.com *.insidebrady.com cdnjs.cloudflare.com *.worldpay.com unpkg.com *.liveperson.net *.elfsight.com *.lpsnmedia.net/ *.quora.com *.tiqcdn.com *.facebook.net *.licdn.com *.tealiumiq.com *.clarity.ms *.google.co.in *.xiecomm.worldpay.com *.cert-xiecomm.worldpay.com *.fontawesome.com *.googleapi.com *.googlecommerce.com *.monetate.net *.bing.com *.doubleclick.net *.qualtrics.com client.rum.us-east-1.amazonaws.com client.rum.us-east-2.amazonaws.com fw-cdn.com *.freshchat.com *.feefo.com *.force.com bradycorp.my.salesforce-sites.com *.salesforceliveagent.com *.shopperapproved.com https://media.richrelevance.com *.consentmanager.net *.quantummetric.com https://px.ads.linkedin.com cert-xiecomm.paymetric.com 'unsafe-eval' xiecomm.paymetric.com https://maps.googleapis.com https://player.vimeo.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.media-brady.com *.insidebrady.com cdnjs.cloudflare.com *.googleapis.com *.google.com *.google.co.in *.googletagmanager.com *.fontawesome.com *.bootstrapcdn.com *.freshchat.com *.jsdelivr.net *.force.com bradycorp.my.salesforce-sites.com cert-xiecomm.paymetric.com assets.braintreegateway.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.media-brady.com *.insidebrady.com *.tealiumiq.com *.clarity.ms *.google.co.in dataplane.rum.eu-central-1.amazonaws.com cognito-identity.eu-central-1.amazonaws.com sts.eu-central-1.amazonaws.com dataplane.rum.us-east-1.amazonaws.com cognito-identity.us-east-1.amazonaws.com sts.us-east-1.amazonaws.com dataplane.rum.us-east-2.amazonaws.com cognito-identity.us-east-2.amazonaws.com sts.us-east-2.amazonaws.com https://integration.algorecs.com *.quantummetric.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.monitor.azure.com https://vimeo.com https://player.vimeo.com https://*.vimeo.com https://dc.services.visualstudio.com https://js.monitor.azure.com https://www.youtube.com https://youtube.com https://www.youtube-nocookie.com https://i.ytimg.com/ https://i.vimeocdn.com https://player-telemetry.vimeo.com https://viewer.mapme.com https://m.ankiro.dk/ https://www.googletagmanager.com https://tracking.m.dk https://*.googleapis.com https://*.analytics.google.com https://tagmanager.google.com https://policy.app.cookieinformation.com https://consent.app.cookieinformation.com/api/consent https://fonst.gstatic.com https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/releases/ https://www.google.com/ https://hittegods.metroservice.dk https://hittegodseng.metroservice.dk https://hittegodsvedikke.metroservice.dk/ https://hittegodsvedikkeeng.metroservice.dk/ https://henvendelseeng.metroservice.dk/ https://henvendelse.metroservice.dk/ https://payment.metroservice.dk/ https://connect.facebook.net/en_US/fbevents.js https://*.adform.net https://s2.adform.net/banners/scripts/st/trackpoint-async.js https://cdn.matomo.cloud/metroselskabet.matomo.cloud/matomo.js https://connect.facebook.net/signals/config/ https://s2.adform.net/Serving/TrackPoint/ https://metroselskabet.matomo.cloud/matomo.php https://ad.doubleclick.net/activity https://9562205.fls.doubleclick.net/ https://td.doubleclick.net/ https://api-eu1.agillic.net/recipients https://api-eu1.agillic.net/recipients/v2/:upsertAndAchieve https://app-ne-metro-p-website-cd.azurewebsites.net https://app-ne-metro-p-corp-cd.azurewebsites.net; style-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com; img-src 'self' https://metroselskabet.euwest01.umbraco.io/ https://js.monitor.azure.com https://vimeo.com https://player.vimeo.com https://*.vimeo.com https://dc.services.visualstudio.com https://js.monitor.azure.com https://www.youtube.com https://youtube.com https://www.youtube-nocookie.com https://i.ytimg.com/ https://i.vimeocdn.com https://player-telemetry.vimeo.com https://viewer.mapme.com https://m.ankiro.dk/ https://www.googletagmanager.com https://tracking.m.dk https://*.googleapis.com https://*.analytics.google.com https://tagmanager.google.com https://policy.app.cookieinformation.com https://consent.app.cookieinformation.com/api/consent https://fonst.gstatic.com https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/releases/ https://www.google.com/ https://hittegods.metroservice.dk https://hittegodseng.metroservice.dk https://hittegodsvedikke.metroservice.dk/ https://hittegodsvedikkeeng.metroservice.dk/ https://henvendelseeng.metroservice.dk/ https://henvendelse.metroservice.dk/ https://payment.metroservice.dk/ https://connect.facebook.net/en_US/fbevents.js https://*.adform.net https://s2.adform.net/banners/scripts/st/trackpoint-async.js https://cdn.matomo.cloud/metroselskabet.matomo.cloud/matomo.js https://connect.facebook.net/signals/config/ https://s2.adform.net/Serving/TrackPoint/ https://metroselskabet.matomo.cloud/matomo.php https://ad.doubleclick.net/activity https://9562205.fls.doubleclick.net/ https://td.doubleclick.net/ https://api-eu1.agillic.net/recipients https://api-eu1.agillic.net/recipients/v2/:upsertAndAchieve https://app-ne-metro-p-website-cd.azurewebsites.net https://app-ne-metro-p-corp-cd.azurewebsites.net https://ssl.gstatic.com https://www.gstatic.com https://www.facebook.com blob: data:; media-src 'self' https://metroselskabet.euwest01.umbraco.io/ blob: data:; font-src 'self' https://fonts.gstatic.com data:; object-src 'none'; base-uri 'self'; form-action 'self' https://metroselskabet.euwest01.umbraco.io/; frame-ancestors 'none'; upgrade-insecure-requests; connect-src 'self' https://metroselskabet.euwest01.umbraco.io/ https://js.monitor.azure.com https://vimeo.com https://player.vimeo.com https://*.vimeo.com https://dc.services.visualstudio.com https://js.monitor.azure.com https://www.youtube.com https://youtube.com https://www.youtube-nocookie.com https://i.ytimg.com/ https://i.vimeocdn.com https://player-telemetry.vimeo.com https://viewer.mapme.com https://m.ankiro.dk/ https://www.googletagmanager.com https://tracking.m.dk https://*.googleapis.com https://*.analytics.google.com https://tagmanager.google.com https://policy.app.cookieinformation.com https://consent.app.cookieinformation.com/api/consent https://fonst.gstatic.com https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/releases/ https://www.google.com/ https://hittegods.metroservice.dk https://hittegodseng.metroservice.dk https://hittegodsvedikke.metroservice.dk/ https://hittegodsvedikkeeng.metroservice.dk/ https://henvendelseeng.metroservice.dk/ https://henvendelse.metroservice.dk/ https://payment.metroservice.dk/ https://connect.facebook.net/en_US/fbevents.js https://*.adform.net https://s2.adform.net/banners/scripts/st/trackpoint-async.js https://cdn.matomo.cloud/metroselskabet.matomo.cloud/matomo.js https://connect.facebook.net/signals/config/ https://s2.adform.net/Serving/TrackPoint/ https://metroselskabet.matomo.cloud/matomo.php https://ad.doubleclick.net/activity https://9562205.fls.doubleclick.net/ https://td.doubleclick.net/ https://api-eu1.agillic.net/recipients https://api-eu1.agillic.net/recipients/v2/:upsertAndAchieve https://app-ne-metro-p-website-cd.azurewebsites.net https://app-ne-metro-p-corp-cd.azurewebsites.net; frame-src 'self' https://js.monitor.azure.com https://vimeo.com https://player.vimeo.com https://*.vimeo.com https://dc.services.visualstudio.com https://js.monitor.azure.com https://www.youtube.com https://youtube.com https://www.youtube-nocookie.com https://i.ytimg.com/ https://i.vimeocdn.com https://player-telemetry.vimeo.com https://viewer.mapme.com https://m.ankiro.dk/ https://www.googletagmanager.com https://tracking.m.dk https://*.googleapis.com https://*.analytics.google.com https://tagmanager.google.com https://policy.app.cookieinformation.com https://consent.app.cookieinformation.com/api/consent https://fonst.gstatic.com https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/releases/ https://www.google.com/ https://hittegods.metroservice.dk https://hittegodseng.metroservice.dk https://hittegodsvedikke.metroservice.dk/ https://hittegodsvedikkeeng.metroservice.dk/ https://henvendelseeng.metroservice.dk/ https://henvendelse.metroservice.dk/ https://payment.metroservice.dk/ https://connect.facebook.net/en_US/fbevents.js https://*.adform.net https://s2.adform.net/banners/scripts/st/trackpoint-async.js https://cdn.matomo.cloud/metroselskabet.matomo.cloud/matomo.js https://connect.facebook.net/signals/config/ https://s2.adform.net/Serving/TrackPoint/ https://metroselskabet.matomo.cloud/matomo.php https://ad.doubleclick.net/activity https://9562205.fls.doubleclick.net/ https://td.doubleclick.net/ https://api-eu1.agillic.net/recipients https://api-eu1.agillic.net/recipients/v2/:upsertAndAchieve https://app-ne-metro-p-website-cd.azurewebsites.net https://app-ne-metro-p-corp-cd.azurewebsites.net; 1
default-src 'self'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; worker-src 'self' blob:; style-src 'self' https: 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https: wss://ws1.qualified.com; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' https://va.tawk.to https://embed.tawk.to https://fonts.googleapis.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com demo.transact.nab.com.au nd.transact.nab.com.au *.nab.com.au *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com 'self' data: *.google.com/ test.api.securepay.com.au *.nab.com.au acs-ap-southeast-2.ndsprod.nds-sandbox-issuer.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com https://www.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com 'self' https://bomborasupplies.com.au https://www.instagram.com https://www.facebook.com https://discountfridgefilters.com.au https://www.google.com.au magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com https://assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https://vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com 'self' https://apis.google.com https://gapi.googleapis.com https://www.gstatic.com https://*.adobe.com https://geostag.cardinalcommerce.com *.google.com/ https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com.au https://www.paypal.com https://www.sandbox.paypal.com https://*.youtube.com https://connect.facebook.net https://*.fontawesome.com https://*.cloudflare.com https://*.cloudflareinsights.com https://*.twitter.com https://embed.tawk.to https://va.tawk.to https://cdn.jsdelivr.net/emojione/ https://*.testpad.com.au *.disqus.com demo.transact.nab.com.au nd.transact.nab.com.au transact.nab.com.au *.nab.com.au *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com 'self' https://va.tawk.to https://embed.tawk.to https://fonts.googleapis.com maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com 'self' ws: https://embed.tawk.to https://va.tawk.to wss://*.tawk.to https://www.google.com.au *.doubleclick.net https://*.testpad.com.au demo.transact.nab.com.au *.nab.com.au *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com places.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-6HXeuB_GM0ydISUaGkUz5Q' https://cdn.jsdelivr.net https://challenges.cloudflare.com https://t.quotewise.io https://static.cloudflareinsights.com https://eu-assets.i.posthog.com https://d204c3srckk4j3.cloudfront.net; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com https://d204c3srckk4j3.cloudfront.net; img-src 'self' data: blob: https: https://d204c3srckk4j3.cloudfront.net; font-src 'self' https://cdn.jsdelivr.net https://fonts.gstatic.com https://d204c3srckk4j3.cloudfront.net; connect-src 'self' https://t.quotewise.io https://eu.i.posthog.com https://eu-assets.i.posthog.com; worker-src 'self' blob:; frame-src https://challenges.cloudflare.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://quotewise.io https://chatgpt.com https://appleid.apple.com https://twitter.com https://api.twitter.com https://accounts.google.com; report-uri /api/csp-report/; manifest-src 'self' https://d204c3srckk4j3.cloudfront.net https://quotewise-static-prod.s3.amazonaws.com 1
default-src 'self' https:; font-src 'self' use.typekit.net/af/ d1p8b7m2zl7a4f.cloudfront.net d2e0vf92j9kzr0.cloudfront.net/ cdn.myalex.com/ localhost:* host.docker.internal:* data:; img-src 'self' https: d2e0vf92j9kzr0.cloudfront.net/ d1p8b7m2zl7a4f.cloudfront.net cdn.usersnap.com/classic/ localhost:* host.docker.internal:* data:; object-src 'none'; script-src 'self' https: d2e0vf92j9kzr0.cloudfront.net/ d1p8b7m2zl7a4f.cloudfront.net cdn.usersnap.com/classic/ chat.myalex.com/widget.js localhost:* host.docker.internal:* 'unsafe-eval' 'unsafe-inline'; style-src 'self' https: localhost:* host.docker.internal:* p.typekit.net/p.css d2e0vf92j9kzr0.cloudfront.net/ data: d1p8b7m2zl7a4f.cloudfront.net use.typekit.net/nwy7lbs.css cdn.myalex.com/ 'unsafe-inline'; frame-src 'self' https: login.myalex.com localhost:* host.docker.internal:* chat.datatrough.com/; connect-src 'self' https: localhost:* host.docker.internal:* ingest-dev.jellydevs.com/ data: audio.myalex.com/ d2e0vf92j9kzr0.cloudfront.net d1p8b7m2zl7a4f.cloudfront.net; media-src 'self' https: d1p8b7m2zl7a4f.cloudfront.net d2e0vf92j9kzr0.cloudfront.net/; report-uri https://picwell.sentry.io/projects/alex-api/?issuesType=all&project=4506039022583808 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self' https://paiement.systempay.fr; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://www.google.com https://*.google.com https://www.gstatic.com https://static.systempay.fr https://paiement.systempay.fr https://www.youtube.com https://www.youtube-nocookie.com https://code.jquery.com https://static.axept.io https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://static.systempay.fr https://code.jquery.com https://fonts.axept.io; img-src 'self' data: blob: https://www.ownsport.fr https://ownsport.fr https://www.coach-tool.com https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://*.g.doubleclick.net https://www.google.fr https://www.google.com https://*.google.com https://www.gstatic.com https://maps.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://i.ytimg.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.axept.io; connect-src 'self' https://www.ownsport.fr https://ownsport.fr wss://www.ownsport.fr https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://region1.google-analytics.com https://www.googletagmanager.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://*.g.doubleclick.net https://ad.doubleclick.net https://www.google.com https://*.google.com https://static.systempay.fr https://paiement.systempay.fr https://client.axept.io https://api.axept.io; frame-src 'self' https://www.googletagmanager.com https://www.google.com https://*.google.com https://www.youtube.com https://www.youtube-nocookie.com https://static.systempay.fr https://paiement.systempay.fr; media-src 'self'; worker-src 'self' blob:; manifest-src 'self' 1
object-src 'none'; script-src 'self' 'report-sample' assets.yourdiseaserisk.org cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://transparency.nrchealth.com https://unpkg.com https://www.google.com; style-src 'self' 'report-sample' assets.yourdiseaserisk.org cdnjs.cloudflare.com fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com maxcdn.bootstrapcdn.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://ajax.googleapis.com https://cdn.bc0a.com https://*.bc0a.com https://tag.brandcdn.com https://adservices.brandcdn.com https://www.googletagmanager.com https://www.google-analytics.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://widget.taggbox.com https://cloud.tagbox.com https://admissions.lmc.edu https://mx.technolutions.net https://connect.facebook.net https://static.cloudflareinsights.com https://cdn.b0e8.com https://script.crazyegg.com https://tag.simpli.fi https://www.clarity.ms https://scripts.clarity.ms; style-src 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://*.bc0a.com https://widget.taggbox.com https://cloud.taggbox.com https://cloud.tagbox.com; font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://*.bc0a.com https://cloud.taggbox.com data:; img-src 'self' data: blob: https:; media-src 'self' https://*.bc0a.com; connect-src 'self' https:; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://www.facebook.com https:; frame-ancestors 'self'; form-action 'self' https:; object-src 'none'; base-uri 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://connect.facebook.net https://s.pinimg.com https://ct.pinterest.com https://snap.licdn.com https://js.hs-scripts.com https://js.hs-banner.com https://js.hs-analytics.net https://js.hubspot.com https://js.hsforms.net https://js.hsadspixel.net https://*.forter.com https://d1qmrxg9gbf226.cloudfront.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://ajax.aspnetcdn.com https://static.cloudflareinsights.com https://consent.cookiebot.com https://dynamic.criteo.com https://sslwidget.criteo.com https://js.adsrvr.org https://t.cfjump.com https://cfjump.bestrestaurants.com.au https://bat.bing.com https://maps.googleapis.com https://js.stripe.com https://www.paypal.com https://js.chargebee.com https://d27623md02evp.cloudfront.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://cdn.ivaws.com https://rsms.me; connect-src 'self' https://www.google.com https://www.google.com.au https://www.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://region1.google-analytics.com https://pagead2.googlesyndication.com https://ad.doubleclick.net https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.googleadservices.com https://www.googletagmanager.com https://px.ads.linkedin.com https://insight.adsrvr.org https://*.forter.com wss://*.forter.com https://api.hubapi.com https://cta-service-cms2.hubspot.com https://forms.hsforms.com https://perf-na1.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com https://ct.pinterest.com https://consentcdn.cookiebot.com https://www.facebook.com https://connect.facebook.net https://capig.bestrestaurants.com.au https://capig.stape.id https://tiktokgw.bestrestaurants.com.au https://analytics.tiktok.com https://maps.googleapis.com https://www.paypal.com https://www.sandbox.paypal.com https://bat.bing.com https://i.clarity.ms https://o.clarity.ms https://q.clarity.ms https://js.chargebee.com https://sslwidget.criteo.com https://ajax.aspnetcdn.com https://cdn.jsdelivr.net https://fonts.googleapis.com https://translate.googleapis.com https://d2o5idwacg3gyw.cloudfront.net https://d3banl4fzuxsjl.cloudfront.net https://d37l98t2r94go6.cloudfront.net https://dty0ycn35t4d2.cloudfront.net https://d27623md02evp.cloudfront.net; object-src 'none'; base-uri 'self'; child-src 'self' blob:; form-action 'self' https://forms.hsforms.com https://www.facebook.com; worker-src 'self' blob:; frame-src 'self' https://ct.pinterest.com https://*.doubleclick.net https://11501324.fls.doubleclick.net https://www.google.com https://js.stripe.com https://www.paypal.com https://insight.adsrvr.org https://match.adsrvr.org https://consentcdn.cookiebot.com https://gum.criteo.com https://gumi.criteo.com https://js.chargebee.com https://21643789.hs-sites.com https://www.facebook.com https://etracker.bestgiftgroup.com https://services.bestgiftcards.com.au https://forms.hsforms.com https://www.googletagmanager.com; frame-ancestors 'self'; report-uri https://bestrestaurants.report-uri.com/r/d/csp/reportOnly; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://code.jquery.com https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://maps.google.com https://www.gstatic.com https://cdn.thailandnightlife.net https://static.cloudflareinsights.com https://www.tiktok.com https://*.tiktokcdn-us.com https://*.ttwstatic.com https://www.youtube.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.gstatic.com https://*.ttwstatic.com https://*.tiktokcdn-us.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; connect-src 'self' https://maps.googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://www.google.com https://www.googletagmanager.com https://api.openai.com https://*.r2.cloudflarestorage.com https://cloudflareinsights.com https://*.tiktok.com https://*.tiktokcdn.com https://*.tiktokcdn-us.com https://*.tiktokv.com https://*.ttwstatic.com; frame-src 'self' https://www.google.com https://accounts.google.com https://www.youtube.com https://youtube.com https://www.youtube-nocookie.com https://www.tiktok.com; media-src 'self' data: blob: https://cdn.thailandnightlife.net https://*.tiktokcdn.com https://*.tiktokcdn-us.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; report-uri /ajax/csp-report.php 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com https://www.gstatic.com *.klevu.com *.ksearchnet.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com https://*.gstatic.com *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://*.google.com https://*.googleapis.com https://*.googleusercontent.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.magento-datasolutions.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com https://*.gstatic.com *.certcapture.com https://libs.masterffl.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://*.google.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io api.magento.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.certcapture.com https://api-qa.masterffl.com https://ffl-api.masterffl.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.klarnacdn.net *.fontawesome.com maxcdn.bootstrapcdn.com *.klaviyo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.sharethis.com www.xtento.com *.klarna.com *.resurs.com *.vimeo.com *.google.com *.googletagmanager.com gtm.sharkgaming.dk gtm.sharkgaming.se gtm.sharkgaming.no gtm-p7bx89s-nwviz.uc.r.appspot.com *.chatbotize.com *.cookieinformation.com *.trustpilot.com *.viabill.com *.doubleclick.net *.getzowie.com chat.karlachat.com *.getblue.io *.facebook.com *.anyday.io 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net *.sharethis.com www.xtento.com cdn.xtento.com *.bird.eu *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.facebook.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.bing.com *.magentocommerce.com sharkgaming.dk sharkgaming.se sharkgaming.no *.sharkgaming.dk *.sharkgaming.se *.sharkgaming.no *.google.dk *.google.se *.google.no *.charpstar.net s7g10.scene7.com *.anyday.io data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com commerce.adobe.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com *.sharethis.com www.xtento.com cdn.xtento.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.resurs.com *.sharkgaming.dk *.sharkgaming.se *.sharkgaming.no *.app.cookieinformation.com *.viabill.com *.trustpilot.com *.emaerket.dk *.payever.org *.hotjar.com *.bing.com addrevenue.io *.retargeted.co *.getzowie.com *.zopim.com *.adii.se *.charpstar.net *.azureedge.net gtm-p7bx89s-nwviz.uc.r.appspot.com analytics.tiktok.com *.getblue.io analytics.bestofluck.io *.anyday.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.sharethis.com *.klarnacdn.net https://static.klaviyo.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.adobe.io *.omtrdc.net data: 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.magento-datasolutions.com *.magento-ds.com *.sharethis.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net *.charpstar.net *.klaviyo.com *.doubleclick.net *.google.com *.app.cookieinformation.com *.getzowie.com *.zopim.com wss://widget-mediator.zopim.com *.browser-intake-datadoghq.eu *.googlesyndication.com blob: *.sharkgaming.dk *.sharkgaming.se *.sharkgaming.no *.payever.org *.elastic-cloud.com addrevenue.io *.chatbotize.com mboxedge37.tt.omtrdc.net gtm-p7bx89s-nwviz.uc.r.appspot.com analytics.tiktok.com *.bing.com wss://ws.hotjar.com *.hotjar.com *.hotjar.io maps.googleapis.com bat.bing.net *.anyday.io *.sparxpres.dk sparxpres.dk 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com vjs.zencdn.net *.klevu.com *.ksearchnet.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com aly.jst.ai cdn.jst.ai my.jst.ai analytics.tiktok.com rum.hlx.page cdn.oribi.io cdn.izooto.com www.googleapis.com a.quora.com www.redditstatic.com s.pinimg.com container.pepperjam.com dynamic.criteo.com acsbapp.com www.upsellit.com www.shopperapproved.com guarantee-cdn.com cdn.id5-sync.com sslwidget.criteo.com widget.us.criteo.com ct.pinterest.com px.ads.linkedin.com alb.reddit.com nsg.symantec.com vjs.zencdn.net pixel-config.reddit.com cdn.acsbapp.com measurement-api.criteo.com browser-intake-datadoghq.com static-na.payments-amazon.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com maps.googleapis.com maps.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ aly.jst.ai cdn.jst.ai my.jst.ai analytics.tiktok.com rum.hlx.page cdn.oribi.io cdn.izooto.com www.googleapis.com a.quora.com www.redditstatic.com s.pinimg.com container.pepperjam.com dynamic.criteo.com acsbapp.com www.upsellit.com www.shopperapproved.com guarantee-cdn.com cdn.id5-sync.com sslwidget.criteo.com widget.us.criteo.com ct.pinterest.com px.ads.linkedin.com alb.reddit.com nsg.symantec.com vjs.zencdn.net pixel-config.reddit.com cdn.acsbapp.com measurement-api.criteo.com browser-intake-datadoghq.com static-na.payments-amazon.com ad.doubleclick.net www.google.com.hk simage4.pubmatic.com gum.criteo.com sync.crwdcntrl.net *.klevu.com *.ksearchnet.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com connect.bolt.com connect-sandbox.bolt.com s3-us-west-1.amazonaws.com cdn.calltrk.com js.calltrk.com cdn.callrail.com script.crazyegg.com tracking.crazyegg.com https://bzrcdn.openai.com https://bzr.openai.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de maps.googleapis.com maps.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ aly.jst.ai cdn.jst.ai my.jst.ai analytics.tiktok.com rum.hlx.page cdn.oribi.io cdn.izooto.com a.quora.com www.redditstatic.com s.pinimg.com container.pepperjam.com dynamic.criteo.com acsbapp.com www.upsellit.com www.shopperapproved.com guarantee-cdn.com cdn.id5-sync.com sslwidget.criteo.com widget.us.criteo.com ct.pinterest.com px.ads.linkedin.com alb.reddit.com nsg.symantec.com vjs.zencdn.net pixel-config.reddit.com cdn.acsbapp.com measurement-api.criteo.com browser-intake-datadoghq.com www.gstatic.com static-na.payments-amazon.com js-agent.newrelic.com js.klevu.com *.ksearchnet.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com cdn.calltrk.com js.calltrk.com cdn.callrail.com js.callrail.com script.crazyegg.com tracking.crazyegg.com https://bzrcdn.openai.com https://bzr.openai.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maps.googleapis.com maps.gstatic.com https://static.klaviyo.com vjs.zencdn.net *.klevu.com *.ksearchnet.com assets.braintreegateway.com script.crazyegg.com tracking.crazyegg.com 'self' 'unsafe-inline'; object-src connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de maps.googleapis.com maps.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ aly.jst.ai cdn.jst.ai my.jst.ai analytics.tiktok.com rum.hlx.page cdn.oribi.io cdn.izooto.com www.googleapis.com a.quora.com www.redditstatic.com s.pinimg.com container.pepperjam.com dynamic.criteo.com acsbapp.com www.upsellit.com www.shopperapproved.com guarantee-cdn.com cdn.id5-sync.com sslwidget.criteo.com widget.us.criteo.com ct.pinterest.com px.ads.linkedin.com alb.reddit.com nsg.symantec.com vjs.zencdn.net pixel-config.reddit.com cdn.acsbapp.com measurement-api.criteo.com browser-intake-datadoghq.com conversions-config.reddit.com static-na.payments-amazon.com www.google.com.hk analytics-ipv6.tiktokw.us et.izooto.com trg.izooto.com ad.doubleclick.net stats.g.doubleclick.net bam.nr-data.net id5-sync.com *.id5-sync.com *.klevu.com *.ksearchnet.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com sessions.bugsnag.com cdn.calltrk.com js.calltrk.com cdn.callrail.com js.callrail.com api.callrail.com script.crazyegg.com tracking.crazyegg.com https://bzrcdn.openai.com https://bzr.openai.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src maps.googleapis.com maps.gstatic.com aly.jst.ai cdn.jst.ai my.jst.ai analytics.tiktok.com rum.hlx.page cdn.oribi.io cdn.izooto.com www.googleapis.com a.quora.com www.redditstatic.com s.pinimg.com container.pepperjam.com dynamic.criteo.com acsbapp.com www.upsellit.com www.shopperapproved.com guarantee-cdn.com cdn.id5-sync.com sslwidget.criteo.com widget.us.criteo.com ct.pinterest.com px.ads.linkedin.com alb.reddit.com nsg.symantec.com vjs.zencdn.net pixel-config.reddit.com cdn.acsbapp.com measurement-api.criteo.com browser-intake-datadoghq.com static-na.payments-amazon.com script.crazyegg.com tracking.crazyegg.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' www.scalemodelstore.com; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' www.scalemodelstore.com https://www.google.com www.gstatic.com https://www.googleadservices.com tpc.googlesyndication.com connect.facebook.net; frame-src www.google.com tpc.googlesyndication.com; img-src 'self' data: static.pay.nl www.gstatic.com https://googleads.g.doubleclick.net https://www.google.com rms.ups.com; object-src 'none'; report-uri /csp-violations.php; 1
default-src 'self'; base-uri 'self'; frame-ancestors 'none'; img-src 'self' data: https: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; connect-src 'self' https://webstatsapi.latamgs.com https://latamgameservers.com https://lunarust.com; font-src 'self' data: https:; object-src 'none' 1
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/  https://widget.trustpilot.com;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://appleid.cdn-apple.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com *.myheritage.com.pt https://www.myheritage.com.pt  'unsafe-eval' 'nonce-bfc708a2df59d0ebe796ce5d53a27545' 'strict-dynamic' https://widget.trustpilot.com https://invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style  https://widget.trustpilot.com;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io https://www.google.com/recaptcha/enterprise/* https://www.google.com/recaptcha/enterprise/ https://www.google.com/recaptcha/enterprise/clr https://www.google.com/recaptcha/ https://maps.googleapis.com https://people.googleapis.com https://translate-pa.googleapis.com *.myheritage.com.pt https://widget.trustpilot.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:  https://widget.trustpilot.com https://*.trustpilot.com;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=report&canonical_page_id=/company/home/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' https://*.barmenia.de https://*.barmenia24.de https://*.meine-barmenia.de https://*.firebaseio.com https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googletagservices.com https://*.doubleclick.net; script-src-elem 'self' 'unsafe-inline' https://*.barmenia.de https://*.barmenia24.de https://*.meine-barmenia.de https://*.firebaseio.com https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googletagservices.com https://*.doubleclick.net; script-src-attr 'unsafe-inline' 'unsafe-hashes'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.barmenia.de https://*.barmenia24.de https://*.meine-barmenia.de https://*.firebaseio.com https://*.googleapis.com https://*.firebaseremoteconfig.googleapis.com wss://*.firebaseio.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.doubleclick.net; frame-src 'self' https://*.barmenia.de https://*.barmenia24.de https://*.meine-barmenia.de https://*.computec.de https://*.paypal.com https://*.googletagmanager.com https://*.google-analytics.com https://*.doubleclick.net; object-src 'none'; base-uri 'self'; form-action 'self' https://*.barmenia.de https://*.barmenia24.de https://*.meine-barmenia.de https://*.computec.de https://*.paypal.com; frame-ancestors 'none'; upgrade-insecure-requests 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com admin.portalbuilder.nl api.portalbuilder.nl maxcdn.bootstrapcdn.com self https://fonts.gstatic.com/ https://v2.zopim.com/ data: data: 'self' 'unsafe-inline'; form-action *.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.cookiebot.com *.multisafepay.com https://pay.google.com https://www.google.com https://us4.campaign-archive.com/ *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com *.placeholder.com *.linkedin.com *.cookiebot.com admin.portalbuilder.nl api.portalbuilder.nl magefan.com cm.magefan.com *.disqus.com *.multisafepay.com *.magentocommerce.com https://www.facebook.com/ https://www.google.nl/ https://www.google.com/ https://www.google-analytics.com/ https://s.ytimg.com https://v2.zopim.com/ *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.newrelic.com bam-cell.nr-data.net bam.nr-data.net *.cookiebot.com admin.portalbuilder.nl api.portalbuilder.nl *.disqus.com *.multisafepay.com https://pay.google.com https://www.googletagmanager.com *.googleapis.com https://www.gstatic.com/ https://www.google.com/ https://www.google-analytics.com/ *.sendcloud.sc https://connect.facebook.net/ https://kit.fontawesome.com/ https://kit-pro.fontawesome.com/ https://grovet.us4.list-manage.com/ https://v2.zopim.com/ https://static.zdassets.com/ https://pro.fontawesome.com/releases/v5.14.0/js/solid.js https://pro.fontawesome.com/releases/v5.14.0/js/regular.js https://pro.fontawesome.com/releases/v5.14.0/js/brands.js https://pro.fontawesome.com/releases/v5.14.0/js/fontawesome.js *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cookiebot.com admin.portalbuilder.nl api.portalbuilder.nl maxcdn.bootstrapcdn.com *.multisafepay.com https://fonts.googleapis.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src https://us4.campaign-archive.com/ 'self' 'unsafe-inline'; media-src *.adobe.com static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com bam-cell.nr-data.net *.cookiebot.com *.zendesk.com admin.portalbuilder.nl api.portalbuilder.nl *.multisafepay.com https://www.google-analytics.com https://www.facebook.com https://kit.fontawesome.com/ https://kit-pro.fontawesome.com/ wss://widget-mediator.zopim.com/ https://ekr.zdassets.com/ *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri www.grovet.com/csp; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'nonce-fTLNkP5RkXawdFmv704EyKTz' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'self' 'unsafe-inline'; connect-src 'self' https://challenges.cloudflare.com https://cloudflareinsights.com https://api.cnodejs.org; img-src 'self' data: blob: https:; font-src 'self' data:; manifest-src 'self'; frame-src https://challenges.cloudflare.com; worker-src 'self' blob:; report-uri /__csp-report 1
object-src 'none';base-uri 'self';script-src 'nonce-uhNKVtzzgzZMV9AcW2em4g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://s3-eu-west-1.amazonaws.com https://unpkg.com https://www.google-analytics.com https://www.googletagmanager.com https://*.recaptcha.net https://*.google.com https://*.doubleclick.net https://*.googleusercontent.com https://*.youtube.com https://*.facebook.net https://*.hotjar.com https://*.inteliwise.com https://*.googleapis.com https://*.gstatic.com https://www.warta.pl https://*.www.warta.pl https://hdi.pl https://*.hdi.pl https://bat.bing.com https://pixel.wp.pl https://*.clarity.ms https://analytics.tiktok.com https://static.ads-twitter.com https://www.googleadservices.com https://microsoft.com https://perfo.salestube.pl https://*.przelewy24.pl https://browser-update.org https://cdn.evgnet.com https://cdn.evergage.com https://tenantpluginapiserver1.eloacc.warta.pl https://*.startquestion.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://s3-eu-west-1.amazonaws.com https://*.hotjar.com https://*.inteliwise.com https://surfly.io https://*.google.com https://www.google-analytics.com https://*.facebook.com https://*.doubleclick.net https://www.warta.pl https://*.www.warta.pl https://hdi.pl https://*.hdi.pl https://maxcdn.bootstrapcdn.com https://www.googletagmanager.com https://www.gstatic.com https://*.startquestion.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; connect-src 'self' https://inteliwise-eu.s3.amazonaws.com https://maps.googleapis.com https://s3-eu-west-1.amazonaws.com https://stats.g.doubleclick.net https://www.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://www.google.com https://www.recaptcha.net https://*.hotjar.com https://*.inteliwise.com https://pixel.wp.pl https://*.evergage.com https://*.evgnet.com https://rail-publisher.app.inteliwi.se https://ad.doubleclick.net https://*.clarity.ms wss://ws.hotjar.com https://content.hotjar.io https://metrics.hotjar.io https://www.facebook.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://bat.bing.com https://unpkg.com https://vc.hotjar.io https://googleads.g.doubleclick.net https://www.googleadservices.com https://microsoft.com https://perfo.salestube.pl https://*.run.app https://*.conversionsapigateway.com https://*.startquestion.com; font-src 'self' data: https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; frame-src 'self' https://10798259.fls.doubleclick.net https://9049979.fls.doubleclick.net https://s3-eu-west-1.amazonaws.com https://www.recaptcha.net https://*.google.com https://*.hotjar.com https://*.inteliwise.com https://www.googletagmanager.com https://td.doubleclick.net https://*.youtube.com https://*.vimeo.com https://*.wp.pl https://tenantpluginapiserver1.eloacc.warta.pl https://*.startquestion.com; img-src 'self' data: https://www.google-analytics.com https://www.google.pl https://*.hotjar.com https://*.inteliwise.com https://moventum.com.pl https://*.youtube.com https://connect.facebook.net https://*.googleusercontent.com https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.facebook.com https://*.doubleclick.net https://www.warta.pl https://*.www.warta.pl https://hdi.pl https://*.hdi.pl https://pixel.wp.pl https://bat.bing.com https://*.clarity.ms https://www.googletagmanager.com https://c.bing.com https://t.co https://analytics.twitter.com https://*.ytimg.com https://*.startquestion.com; manifest-src 'self'; media-src 'self'; worker-src 'self' blob:; report-uri /csp-report-endpoint; 1
script-src 'nonce-roOj_JpFPwuSkYFvqbSxvg' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl; base-uri 'none' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.fontawesome.com https://fonts.bunny.net *.bootstrapcdn.com *.cloudflare.com *.googleusercontent.com *.jsdelivr.net *.slant.co unpkg.com data: 'self' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.2c2p.com *.americanexpress.com *.arcot.com *.cardinalcommerce.com *.citibank.com *.ctbcbank.com *.dnp-cdms.jp *.inicis.com *.ipay88.com.my *.unionpay.com *.uobgroup.com 'self' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.weltpixel.com *.americanexpress.com *.arcot.com *.cardinalcommerce.com *.citibank.com *.ctbcbank.com *.dnp-cdms.jp *.inicis.com *.unionpay.com *.uobgroup.com 'self' 'unsafe-eval' 'unsafe-hashes'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com k.kakaocdn.net https://firebasestorage.googleapis.com *.inicis.com *.afterpay.com *.doubleclick.net *.elcompanies.com www.google.ad www.google.at www.google.co.id www.google.co.in www.google.co.jp www.google.co.kr www.google.com.au www.google.com.bd www.google.com.co www.google.com.hk www.google.com.mt www.google.com.my www.google.com.ph www.google.com.sg www.google.com.tw www.google.com.vn www.google.co.th www.google.co.uk www.google.co.za www.google.de www.google.dk www.google.es www.google.fr www.google.ie www.google.it www.google.nl www.google.se *.google.com *.googletagmanager.com *.googleusercontent.com *.hstatic.net *.naver.com *.thecompanystore.com.sg data: 'self' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://api.addressfinder.io *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.googleapis.com *.gstatic.com developers.kakao.com *.kakaocdn.net *.avada.io *.shopify.com *.inicis.com *.facebook.net *.google-analytics.com *.googletagmanager.com 'self' 'unsafe-eval' 'unsafe-hashes' 'nonce-aHMxd3BleG41ZWlzd2ZyMmF4cG90cThjazlmMWhwbTY=' 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY/CkTMBhjNhwPvglpYumjx31B4fjkY8=' 'sha256-XGfPSYcBWPq7sx/ucAvvEcAKkiSRS2GeZReWO0f5vXQ='; style-src *.adobe.com fonts.googleapis.com https://api.addressfinder.io *.cash.app *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.fontawesome.com https://fonts.bunny.net *.inicis.com *.googleapis.com *.gstatic.com *.jsdelivr.net 'self' 'unsafe-eval' 'unsafe-hashes'; object-src 'self'; media-src *.adobe.com *.gstatic.com 'self' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://api.addressfinder.io * *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com *.googleapis.com kauth.kakao.com https://get.geojs.io *.avada.io *.inicis.com *.doubleclick.net www.google.ad www.google.at www.google.co.id www.google.co.in www.google.co.jp www.google.co.kr www.google.com.au www.google.com.bd www.google.com.hk www.google.com.mt www.google.com.my www.google.com.ph www.google.com.sg www.google.com.tw www.google.com.vn www.google.co.th www.google.co.za www.google.de www.google.dk www.google.es www.google.fr www.google.ie www.google.it www.google.nl *.googletagmanager.com 'self' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self'; default-src 'self'; base-uri 'self'; report-uri https://44d1e7f7-e0f3-40b1-97a0-2365023697f1.sansec.watch/; report-to report-endpoint; 1
upgrade-insecure-requests; base-uri 'self'; object-src 'none'; script-src 'nonce-2Or6Zb4FQGFoYiB9yMbM20DPs' 'strict-dynamic'; manifest-src 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com *.klevu.com *.ksearchnet.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.yotpo.com *.googleapis.com *.shopify.com *.philipkingsley.co.uk data: 'self' 'unsafe-inline'; form-action *.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com https://seo.mageplaza.com *.nosto.com *.nos.to *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com *.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com/ *.doubleclick.net www.facebook.com *.googlesyndication.com www.apptrian.com facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com bytedance: sslocal: *.dotdigital-pages.com *.dotdigital.com business.facebook.com *.nosto.com *.nos.to *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com www.xtento.com *.yotpo.com email.philipkingsley.co.uk ams.creativecdn.com consentcdn.cookiebot.com *.googletagmanager.com *.freshchat.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com www.apptrian.com facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com ads.tiktok.com analytics.tiktok.com analytics-ipv6.tiktokw.us business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://firebasestorage.googleapis.com https://www.magezon.com *.nosto.com *.nos.to www.xtento.com cdn.xtento.com *.yotpo.com imgsct.cookiebot.com *.cloudfront.net *.google.com.ua *.google.co.uk services.postcodeanywhere.co.uk *.creativecdn.com *.philipkingsley.co.uk d21m4dsqdd3b9h.cloudfront.net cfvod.kaltura.com *.philipkingsley.com ads.stickyadstv.com sync.outbrain.com ih.adscale.de sync.taboola.com dsum-sec.casalemedia.com sync.teads.tv eb2.3lift.com *.google.rs data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google.com/ *.google.bg *.googletagmanager.com www.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net www.apptrian.com facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com ads.tiktok.com analytics.tiktok.com analytics-ipv6.tiktokw.us *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com widget.freshworks.com m2epro.freshdesk.com business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.klevu.com *.ksearchnet.com *.avada.io *.nosto.com *.nos.to *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://booking-widget.phorestcdn.com www.xtento.com cdn.xtento.com *.yotpo.com *.salesfire.co.uk email.philipkingsley.co.uk *.cookiebot.com *.ordergroove.com *.feefo.com analytics.webgains.io tags.creativecdn.com *.hotjar.com *.freshworks.com *.clarity.ms *.freshchat.com klear.com *.mention-me.com *.pcapredict.com services.postcodeanywhere.co.uk *.zoovu.com *.zuko.io *.googleadservices.com cdn.salesfire.co.uk *.philipkingsley.co.uk gstatic.com connect.nosto.com cdn-sitegainer.com cdnapisec.kaltura.com pro.ip-api.com r.lrkt-in.com *.omniconvert.com https://cdn.lrkt-in.com 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.fontawesome.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com https://fonts.bunny.net *.nosto.com *.nos.to *.stripe.network *.stripecdn.com *.amazon.com *.yotpo.com *.feefo.com *.freshworks.com services.postcodeanywhere.co.uk https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.google-analytics.com www.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com www.apptrian.com facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com ads.tiktok.com analytics.tiktok.com analytics-ipv6.tiktokw.us *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com widget.freshworks.com m2epro.freshdesk.com business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://get.geojs.io *.avada.io *.nosto.com *.nos.to *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.yotpo.com *.ordergroove.com *.smartmetrics.co.uk ams.creativecdn.com *.freshworks.com *.feefo.com *.cookiebot.com *.clarity.ms klear.com services.postcodeanywhere.co.uk *.salesfire.co.uk *.webgains.io *.mention-me.com *.zuko.io connect.nosto.com o970468.ingest.us.sentry.io *.freshdesk.com r.lrkt-in.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com https://fonts.gstatic.com https://use.fontawesome.com www.searchanise.com *.searchserverapi.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net www.searchanise.com *.searchserverapi.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com www.google.com *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com/ *.authorize.net www.searchanise.com *.searchserverapi.com *.twitter.com checkout.sezzle.com sandbox.checkout.sezzle.com tracking.sezzle.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://s3.amazonaws.com *.disqus.com https://img.youtube.com https://www.magezon.com store.paradoxlabs.com *.twitter.com *.twimg.com www.google.ru www.searchanise.com *.searchserverapi.com s3.amazonaws.com media.sezzle.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ www.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com *.gstatic.com https://standby.comm100vue.com https://comm100vue.com https://use.fontawesome.com https://chimpstatic.com https://searchserverapi.com https://maxcdn.bootstrapcdn.com https://*.adobe.com https://fonts.googleapis.com https://downloads.mailchimp.com https://*.searchserverapi.com https://searchanise-ef84.kxcdn.com https://static.hotjar.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.disqus.com *.google.com/ *.authorize.net searchanise-ef84.kxcdn.com s3.amazonaws.com ajax.aspnetcdn.com www.searchanise.com *.searchserverapi.com *.searchanise.com api.amplitude.com *.twitter.com *.twimg.com checkout-sdk.sezzle.com sandbox.checkout-sdk.sezzle.com widget.sezzle.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com https://use.fontawesome.com https://fonts.googleapis.com www.searchanise.com *.searchserverapi.com searchanise-ef84.kxcdn.com s3.amazonaws.com *.twitter.com ton.twimg.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.googleapis.com https://www.google-analytics.com https://olegnax.com https://api.instagram.com https://graph.instagram.com/ *.authorize.net api.amplitude.com stats.g.doubleclick.net gateway.sezzle.com sandbox.gateway.sezzle.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com https://*.clarity.ms https://kit.fontawesome.com https://cdn.headwayapp.co https://connect.facebook.net https://js.intercomcdn.com https://api-iam.intercom.io https://widget.intercom.io https://js.hs-scripts.com https://js.hsadspixel.net https://js.hs-analytics.net https://js.hs-banner.com https://js.usemessages.com https://*.hsadspixel.net https://*.hs-analytics.net https://js.hscta.net https://js-eu1.hscta.net https://static.hsappstatic.net https://*.hubspot.com https://*.usemessages.com https://*.hs-banner.com https://*.hubspotusercontent00.net https://*.hubspotusercontent10.net https://*.hubspotusercontent20.net https://*.hubspotusercontent30.net https://*.hubspotusercontent40.net https://*.hubspot.net https://*.hscollectedforms.net https://*.hsleadflows.net https://*.hsforms.net https://*.hsforms.com https://*.hs-scripts.com https://*.hubspotfeedback.com https://feedback.hubapi.com https://feedback-eu1.hubapi.com https://www.googletagmanager.com https://*.doubleclick.net; style-src 'self' 'unsafe-inline' https://cdn.headwayapp.co https://pro.fontawesome.com https://ka-p.fontawesome.com https://cdn2.hubspot.net https://*.hubspotusercontent00.net https://*.hubspotusercontent10.net https://*.hubspotusercontent20.net https://*.hubspotusercontent30.net https://*.hubspotusercontent40.net; img-src 'self' data: blob: https://pro.fontawesome.com https://ka-p.fontawesome.com https://js.hscta.net https://js-eu1.hscta.net https://no-cache.hubspot.com https://*.hubspot.com https://*.hubspotusercontent00.net https://*.hubspotusercontent10.net https://*.hubspotusercontent20.net https://*.hubspotusercontent30.net https://*.hubspotusercontent40.net https://*.hubspot.net https://cdn2.hubspot.net https://*.hsforms.net https://*.hsforms.com https://www.facebook.com https://www.google.com https://www.google.com.br; font-src 'self' data: https://pro.fontawesome.com https://ka-p.fontawesome.com; connect-src 'self' https://*.3c.plus https://*.clarity.ms https://connect.facebook.net https://widget.intercom.io https://ka-p.fontawesome.com https://pro.fontawesome.com wss://*.intercom.io wss://*.3c.plus wss://*.3c.plus:4443 wss://vox-socket.3c.fluxoti.com:4443 https://*.hubapi.com https://js.hscta.net https://js-eu1.hscta.net https://*.hubspot.com https://*.hs-banner.com https://*.hscollectedforms.net https://*.hsforms.com https://www.google.com https://www.googletagmanager.com https://*.doubleclick.net; media-src 'self' blob: https://*.3c.plus; frame-src 'self' https://headway-widget.net https://www.youtube.com https://www.youtube-nocookie.com https://*.3c.plus https://*.hubspot.com https://*.hs-sites.com https://*.hs-sites-eu1.com https://*.hubspot.net https://play.hubspotvideo.com https://play-eu1.hubspotvideo.com https://*.hsforms.net https://*.hsforms.com https://www.googletagmanager.com https://*.doubleclick.net; frame-ancestors https:; object-src 'none'; worker-src 'self' blob:; 1
script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://*.doofinder.com https://eu1-config.doofinder.com https://elfsightcdn.com https://connect.getflowbox.com https://*.getflowbox.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://*.trustedshops.com https://*.etrusted.com https://*.zendesk.com https://pod-29-sunco-ws.zendesk.com https://static.zdassets.com https://v2assets.zopim.io https://www.youtube.com https://s.ytimg.com https://*.ytimg.com https://load.sst.4seizoenentuinmeubelen.nl https://load.sst.4jahreszeitengartenmobel.de https://cdn-cookieyes.com https://bat.bing.com https://connect.facebook.net https://s.pinimg.com https://googleads.g.doubleclick.net https://track.adform.net; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://*.trustedshops.com data: *.fontawesome.com https://fonts.bunny.net https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com https://sst.4seizoenentuinmeubelen.nl https://sst.4jahreszeitengartenmobel.de https://ct.pinterest.com *.addthis.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.apptrian.com *.doofinder.com cdn.flbx.io *.cloudfront.net magefan.com cm.magefan.com 'self' https://4seizoenen.hypernode.io https://de.4seizoenen.hypernode.io https://*.trustedshops.com https://*.etrusted.com https://*.zendesk.com https://static.zdassets.com https://v2assets.zopim.io https://*.zdusercontent.com https://media.smooch.io https://www.google.nl https://www.google.de https://sst.4seizoenentuinmeubelen.nl https://sst.4jahreszeitengartenmobel.de *.disqus.com https://firebasestorage.googleapis.com www.google.com.ua https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com https://load.sst.4seizoenentuinmeubelen.nl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com *.doofinder.com *.getflowbox.com 'self' 'unsafe-inline' 'unsafe-eval' https://*.doofinder.com https://eu1-config.doofinder.com https://elfsightcdn.com https://connect.getflowbox.com https://*.getflowbox.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://*.trustedshops.com https://*.etrusted.com https://*.zendesk.com https://pod-29-sunco-ws.zendesk.com https://static.zdassets.com https://v2assets.zopim.io https://s.ytimg.com https://*.ytimg.com https://load.sst.4seizoenentuinmeubelen.nl https://load.sst.4jahreszeitengartenmobel.de https://cdn-cookieyes.com *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.avada.io *.shopify.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.doofinder.com 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net https://cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com www.apptrian.com *.doofinder.com wss://*.doofinder.com *.getflowbox.com https://*.doofinder.com https://eu1-config.doofinder.com https://eu1-layer.doofinder.com https://eu1-api.doofinder.com https://connect.getflowbox.com https://*.getflowbox.com https://*.trustedshops.com https://*.etrusted.com https://*.trustbadge.com https://4jahreszeitengartenmobel.zendesk.com https://4seizoenentuinkussens.zendesk.com https://*.zendesk.com https://pod-29-sunco-ws.zendesk.com wss://*.zendesk.com https://ekr.zdassets.com https://core.service.elfsight.com https://load.sst.4seizoenentuinmeubelen.nl https://sst.4seizoenentuinmeubelen.nl https://load.sst.4jahreszeitengartenmobel.de https://sst.4jahreszeitengartenmobel.de https://pagead2.googlesyndication.com https://*.googlesyndication.com https://cdn-cookieyes.com https://log.cookieyes.com https://get.geojs.io *.avada.io *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://*.basemaps.cartocdn.com; font-src 'self'; connect-src 'self'; frame-src https://www.youtube-nocookie.com; manifest-src 'self'; object-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; report-uri /api/csp.php 1
object-src 'none';base-uri 'self';script-src 'nonce-oZRyTsVwVA4bcObYXHDrmw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' 'unsafe-eval'     https://*.google-analytics.com https://*.google.com https://*.googleadservices.com https://www.googleadservices.com https://tagmanager.google.com     https://*.doubleclick.net https://*.gstatic.com https://*.googletagmanager.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://*.amazonaws.com     https://*.payu.com https://*.facebook.net https://connect.facebook.net https://*.ceneo.pl https://webetech.pl https://webep1.com https://cdn.shopify.com     https://*.hotjar.com https://*.tiktok.com https://*.cookiebot.eu https://*.cookiebot.com     https://consent.cookiebot.com https://*.trustedshops.com https://widgets.trustedshops.com https://*.leaselink.pl     https://*.easypack24.net https://*.dhl.pl https://*.webetech.pl https://*.webep1.com     https://*.cloudflare.com https://uicdn.toast.com https://blueimp.github.io https://cdn.jsdelivr.net https://code.jquery.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com www.googletagmanager.com https://fonts.googleapis.com https://*.payu.com     https://*.easypack24.net https://*.dhl.pl https://cdn.jsdelivr.net     https://*.cloudflare.com https://uicdn.toast.com https://blueimp.github.io https://onyxboox.pl https://*.onyxboox.pl; img-src 'self' data: https://czytio.pl https://*.google-analytics.com     https://*.google.com https://*.google.pl https://*.doubleclick.net https://*.googletagmanager.com https://*.googlesyndication.com https://www.googleadservices.com https://fonts.gstatic.com     https://*.tiktok.com https://*.facebook.com https://*.trustedshops.com https://*.payu.com     https://*.leaselink.pl https://img.youtube.com https://*.ceneo.pl https://*.easypack24.net     https://*.inpost.pl https://*.dhl.pl https://*.webetech.pl https://*.webep1.com     https://*.cookiebot.com https://*.pocketbook-reader.pl https://onyxboox.pl https://cdn.shopify.com     https://*.onyxboox.pl https://*.71media.pl https://*.czytio.pl     https://*.tiktokw.us; font-src 'self' data: https://*.gstatic.com https://*.googleapis.com https://*.payu.com https://*.easypack24.net; connect-src 'self' https://*.google-analytics.com https://*.doubleclick.net https://*.googlesyndication.com https://pagead2.googlesyndication.com https://*.googletagmanager.com     https://*.analytics.google.com https://*.google.com https://google.com https://www.google.com https://*.google.pl https://www.googleadservices.com https://*.g.doubleclick.net https://www.googletagmanager.com https://*.ceneo.pl     https://*.cookiebot.eu https://*.cookiebot.com https://*.facebook.com https://*.tiktok.com     https://*.payu.com https://*.leaselink.pl https://online.leaselink.pl https://*.easypack24.net     wss://ws.hotjar.com https://*.hotjar.io https://osm.inpost.pl     https://*.tiktokw.us https://connect.facebook.net https://cdn.shopify.com     https://*.inpost.pl https://*.dhl.pl https://*.trustedshops.com https://*.czytio.pl; frame-src 'self' https://*.google.com https://*.google.pl https://*.googleadservices.com https://*.doubleclick.net https://webetech.pl https://webep1.com     https://*.ceneo.pl https://*.cookiebot.eu https://*.facebook.com https://*.trustedshops.com https://*.payu.com     https://*.leaselink.pl https://online.leaselink.pl https://*.easypack24.net https://*.dhl.pl     https://consentcdn.cookiebot.com https://*.pocketbook-reader.pl; worker-src 'self' blob:; media-src 'self' *.boox.com *.shopify.com; frame-ancestors 'self'; report-to my-csp-endpoint; report-uri https://czytio.pl/api/csp-report.php; 1
font-src https://fonts.gstatic.com https://ws.colissimo.fr *.gstatic.com *.stape.io *.fontawesome.com maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://www.youtube.com https://form.typeform.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.googletagmanager.com *.stape.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com https://ipdev-kj11847-1841.fast-mage.com/ https://instantprecieux.fr/ https://www.google.fr/ https://www.facebook.com/ https://maps.googleapis.com https://maps.gstatic.com https://ws.colissimo.fr https://*.tile.openstreetmap.fr https://*.onyourmap.com https://google.fr magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.gstatic.com *.doubleclick.net *.googletagmanager.com *.stape.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://redchamps.com *.paypalobjects.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js https://static.cloudflareinsights.com/ https://connect.facebook.net/ https://www.google.com https://www.gstatic.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com widget.freshworks.com m2epro.freshdesk.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.gstatic.com *.googletagmanager.com *.doubleclick.net *.stape.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.trustpilot.com *.jsdelivr.net *.google-analytics.com *.googleadservices.com *.colissimo.fr 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://fonts.googleapis.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com widget.freshworks.com m2epro.freshdesk.com *.googleapis.com *.googletagmanager.com *.stape.io *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com https://static.cloudflareinsights.com/ https://region1.google-analytics.com https://mpc2-prod-1-is5qnl632q-uc.a.run.app https://ws.colissimo.fr https://nominatim.openstreetmap.org https://*.onyourmap.com https://*.mapbox.com widget.freshworks.com m2epro.freshdesk.com *.google-analytics.com *.google.com *.doubleclick.net *.googlesyndication.com *.stape.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
img-src 'self' data: https://secure.gravatar.com  https://i0.wp.com  https://pixel.wp.com  https://en.wordpress.com  https://www.gstatic.com  https://www.google.com  https://fonts.gstatic.com  https://translate.googleapis.com  https://translate.google.com  blob:  https://ps.w.org  https://kriesi.at  ; default-src 'self'; script-src 'self' 'unsafe-inline' data:  https://maps.googleapis.com  https://stats.wp.com  https://s0.wp.com  https://widgets.wp.com  https://connect.facebook.net  https://me.kis.v2.scr.kaspersky-labs.com  https://translate.googleapis.com  https://translate.google.com  https://translate-pa.googleapis.com  https://ff.kis.v2.scr.kaspersky-labs.com  https://gc.kis.v2.scr.kaspersky-labs.com  https://abfc-extension.com  'unsafe-eval'; script-src-elem 'self' 'unsafe-inline' https://maps.googleapis.com  https://stats.wp.com  https://s0.wp.com  https://widgets.wp.com  https://connect.facebook.net  https://me.kis.v2.scr.kaspersky-labs.com  https://translate.googleapis.com  https://translate.google.com  https://translate-pa.googleapis.com  https://ff.kis.v2.scr.kaspersky-labs.com  https://gc.kis.v2.scr.kaspersky-labs.com  https://abfc-extension.com ; style-src 'self' 'unsafe-inline' https://s0.wp.com  https://fonts.googleapis.com  https://widgets.wp.com  https://me.kis.v2.scr.kaspersky-labs.com  https://www.gstatic.com  https://gc.kis.v2.scr.kaspersky-labs.com  https://ff.kis.v2.scr.kaspersky-labs.com ; style-src-elem 'self' 'unsafe-inline' https://s0.wp.com  https://fonts.googleapis.com  https://widgets.wp.com  https://me.kis.v2.scr.kaspersky-labs.com  https://www.gstatic.com  https://gc.kis.v2.scr.kaspersky-labs.com  https://ff.kis.v2.scr.kaspersky-labs.com ; connect-src 'self' https://maps.googleapis.com  https://i0.wp.com  wss://me.kis.v2.scr.kaspersky-labs.com  https://translate.googleapis.com  https://translate-pa.googleapis.com  wss://view-localhost  data:  https://gc.kis.v2.scr.kaspersky-labs.com  https://infragrid.v.network  wss://ff.kis.v2.scr.kaspersky-labs.com  https://ff.kis.v2.scr.kaspersky-labs.com  https://widgets.wp.com;  frame-src 'self' https://widgets.wp.com  https://wordpress.com;  font-src 'self' data:  https://s0.wp.com  https://fonts.gstatic.com  https://s1.wp.com  chrome-extension;  media-src 'self' data:  https://asset.storyscale.com;  worker-src 'self' blob:;  report-uri https://www.tronikdsign.de/index.php?rest_route=/rsssl/v1/csp&rsssl_apitoken=419492290; 1
object-src 'none';base-uri 'self';script-src 'nonce-uWIl0R6ENktIcFPbuBhpow' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://connect.facebook.net https://www.clarity.ms https://*.clarity.ms https://cdn-ru.bitrix24.uz https://*.bitrix24.uz https://www.gstatic.com https://www.google.com https://apis.google.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https: 1
default-src 'self'; img-src 'self' data:; script-src 'self' 'unsafe-eval';style-src 'self' 'unsafe-inline';object-src 'none'; base-uri 'none'; connect-src 'self' *.zorgdoc.nl; report-uri https://sentry.zorgdoc.nl/api/11/security/?sentry_key=710eec7163c34959bcfe36be5404c07a 1
script-src 'nonce-13uyQjlTyiwdjmjK6OmB+A==' 'strict-dynamic'; object-src 'none'; base-uri 'none'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.facebook.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com blob: https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com s7.addthis.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com cdn.ampproject.org www.gstatic.com connect.facebook.net https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com www.gstatic.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com ekr.zdassets.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com cdn.ampproject.org www.googleapis.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://fonts.googleapis.com https://fonts.gstatic.com https://cdn.cookielaw.org https://www.clarity.ms https://api.c6x2kmpv6h-telefonic1-p1-public.model-t.cc.commerce.ondemand.com; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com maxcdn.bootstrapcdn.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com https://flex.cybersource.com https://testflex.cybersource.com https://www.googletagmanager.com/ https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.addthis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.gstatic.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://*.google.co.uk https://*.google-analytics.com https://*.googletagmanager.com https://bat.bing.com https://bat.bing.net https://c.bing.com https://www.facebook.com https://connect.facebook.net https://*.fbcdn.net https://www.electricpoint.com https://images.unsplash.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://flex.cybersource.com https://testflex.cybersource.com https://www.googletagmanager.com https://www.google-analytics.com https://*.googletagmanager.com https://*.clarity.ms https://bat.bing.com https://c.bing.com https://www.facebook.com https://connect.facebook.net https://cdn.cookie-script.com https://www.electricpoint.com https://maps.googleapis.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com s7.addthis.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com https://flex.cybersource.com https://testflex.cybersource.com https://www.electricpoint.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://flex.cybersource.com https://testflex.cybersource.com https://*.google.co.uk https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.clarity.ms https://bat.bing.net https://bat.bing.com https://c.bing.com https://connect.facebook.net https://*.facebook.com https://graph.facebook.com https://maps.googleapis.com https://player.vimeo.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com ekr.zdassets.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src https://flex.cybersource.com https://testflex.cybersource.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:; script-src 'self' https: 'unsafe-inline' https://*.js.stripe.com https://js.stripe.com https://maps.googleapis.com; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; connect-src 'self' https: data: blob: wss: https://api.stripe.com https://maps.googleapis.com; frame-ancestors 'self' https:; frame-src 'self' https://www.google.com https://checkout.stripe.com https://*.js.stripe.com https://js.stripe.com https://hooks.stripe.com https://www.googletagmanager.com/ https://www.kingston.com; report-uri https://www.misco.co.uk/csp-report; report-to csp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.authorize.net 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.addthis.com *.googletagmanager.com *.authorize.net *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net store.paradoxlabs.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net analytics.google.com *.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com player.vimeo.com *.googleadservices.com *.googleoptimize.com *.doubleclick.net 'sha256-QDGDb+WeOOB5b/eBI08w60MMT++33NXP7SyPW/nkAF0=' 'sha256-M+S/HK4OygEmE9PBu/Hiiktl8vyfcalDUU5cBHr0Olo=' 'sha256-cYzSldWkkFjiVyFgVK5ncCuGq6uuTBkiG9iwn/gVCWM=' *.authorize.net *.cloudflare.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.googleapis.com downloads.mailchimp.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.googleapis.com *.addthis.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.authorize.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src 'none'; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com 'self' data: https://maxcdn.bootstrapcdn.com *.bootstrapcdn.com *.googleapis.com https://fonts.bunny.net *.alothemes.com *.magepow.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://seo.mageplaza.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de 'self' https://js.stripe.com landofcoder.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://app-wallee.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.adobedtm.com *.cloudflare.com *.googleadservices.com *.google-analytics.com cdn.jsdelivr.net www.google.by www.google.ru dsum.casalemedia.com csync.loopme.me *.lesperformads.com https://*.vo.msecnd.net cdn.doofinder.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com adservice.google.com *.google.co.uk *.trustedshops.com *.facebook.com *.usercentrics.eu *.bidswitch.net *.ad4m.at *.adnxs.com *.adserver01.de *.adition.com *.adnet.de ad.doubleclick.net dsum-sec.casalemedia.com pixel.rubiconproject.com usync.vrtcal.com cm.adform.net e1.emxdgt.com ad.yieldlab.net *.adcell.com *.converify.com *.omtrdc.net *.demdex.net *.everesttech.net *.magentocommerce.com *.doubleclick.net *.ytimg.com *.validator.swagger.io *.cloudfront.net *.s3.amazonaws.com *.mailchimp.com *.google.com *.braintreegateway.com *.saferpay.com *.app-wallee.com *.xtento.com bodenheizung-24.de ad.360yield.com *.pubmine.com *.sync.1rx.io *.unrulymedia.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://app-wallee.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de 'report-sample' 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *.adobedtm.com *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com *.cardinalcommerce.com songbirdstag.cardinalcommerce.com *.cloudflare.com pay.google.com *.google-analytics.com https://www.googletagmanager.com *.googletagmanager.com apis.google.com *.googleapis.com *.googleadservices.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://www.gstatic.com/recaptcha https://www.google.com/recaptcha *.google.com/ https://maps.googleapis.com/maps/api/js *.instagram.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.paypalobjects.com c.paypal.com *.paypal.com sandbox.paypal.com *.sandbox.paypal.com https://js.stripe.com/v3/ *.stripe.com *.link.com cdn.jsdelivr.net cdn.doofinder.com chimpstatic.com downloads.mailchimp.com *.list-manage.com https://polyfill.io landofcoder.com *.disqus.com *.alothemes.com *.magepow.com *.facebook.net *.usercentrics.eu matomo.bodenheizung-24.de *.adcell.com *.trustedshops.com *.smarketer.de *.ad-srv.net *.ad4m.at ad4m.at *.hyj.mobi *.adnet.de *.twitter.com js.mollie.com applepay.cdn-apple.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com https://app-wallee.com https://gmtech.mfgroup.ch https://assets.secure.checkout.visa.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com 'report-sample' 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com *.bootstrapcdn.com *.cloudflare.com *.googleapis.com *.gstatic.com cdn.jsdelivr.net *.doofinder.com downloads.mailchimp.com https://fonts.bunny.net *.alothemes.com *.magepow.com *.adnet.de assets.braintreegateway.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com https://app-wallee.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'self' 'unsafe-inline'; manifest-src 'self' 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de 'self' analytics.optimalpeople.fr *.gsitrix.com *.cloudflare.com 'self' https://maps.googleapis.com *.doofinder.com wss://*.doofinder.com landofcoder.com https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com *.google-analytics.com matomo.bodenheizung-24.de *.usercentrics.eu *.doubleclick.net *.smarketer.de *.adcell.com *.ad4m.at *.trustedshops.com trustbadge.api.etrusted.com *.demdex.net *.omtrdc.net *.googlesyndication.com bodenheizung-24.de api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.etrusted.com https://integrations.etrusted.site https://app-wallee.com https://assets.secure.checkout.visa.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.paypal.com www.sandbox.paypal.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com www.paypal.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googletagmanager.com *.google-analytics.com *.avada.io *.shopify.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googletagmanager.com https://get.geojs.io *.avada.io www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cloudflare.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.trustedshops.com *.googleapis.com *.bootstrapcdn.com *.fontawesome.com cong-cdn.b-cdn.net *.b-cdn.net https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.bolt.com 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.bolt.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.twitter.com *.google.co.in *.facebook.com https://static.addtoany.com/ connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cloudflare.com *.google.com *.googlesyndication.com *.google.co.in *.facebook.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.connect.facebook.net https://stats.g.doubleclick.net d.adroll.com pixel.advertising.com https://pixel.rubiconproject.com simage2.pubmatic.com dsum-sec.casalemedia.com ads.yahoo.com eb2.3lift.com sync.outbrain.com trc.taboola.com x.bidswitch.net/sync ib.adnxs.com idsync.rlcdn.com us-u.openx.net ups.analytics.yahoo.com segments.company-target.com sync.tidaltv.com https://images.unsplash.com connect.bolt.com connect-sandbox.bolt.com s3-us-west-1.amazonaws.com cong-cdn.b-cdn.net *.b-cdn.net magefan.com cm.magefan.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://redchamps.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.bolt.com *.commerce-quick-checkout.com http://localhost:8082 https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.cloudflare.com *.twitter.com *.google.com.bd *.google.co.in *.facebook.com *.googleadservices.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com connect.facebook.net *.paypalobjects.com c.paypal.com *.chimpstatic.com *.googletagmanager.com s.adroll.com d.adroll.com d.adroll.mgr.consensu.org *.bootstrapcdn.com *.cardinalcommerce.com *.ccdc02.com *.ytimg.com *.vimeo.com *.googleapis.com *.avada.io js.braintreegateway.com assets.braintreegateway.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com https://static.addtoany.com/ https://maps.googleapis.com https://player.vimeo.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com cong-cdn.b-cdn.net *.b-cdn.net *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.shopify.com js.mollie.com *.paypal.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.youtube.com *.bootstrapcdn.com cong-cdn.b-cdn.net *.b-cdn.net *.googletagmanager.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.bolt.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.cloudflare.com *.twitter.com *.twimg.com *.google.co.in *.facebook.com ekr.zdassets.com agilecodexltd.zendesk.com widget-mediator.zopim.com https://stats.addtoany.com/menu https://maps.googleapis.com https://player.vimeo.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com sessions.bugsnag.com cong-cdn.b-cdn.net *.b-cdn.net *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; font-src 'self' fonts.gstatic.com; connect-src apikeys.civiccomputing.com region1.google-analytics.com stats.g.doubleclick.net region1.analytics.google.com; img-src 'self' www.google.co.uk; script-src 'self' 'sha256-DSXgEcZ0C6Gsvtb1NkKdPd0sgBG3DjQZlapeGipGQtQ=' 'sha256-hzyz3SKhd3Ybpqsw1kCEaVE9kkkRNSX+eE4Yaxps1Ng=' 'sha256-kkCkm3ch0TczZjKM0ESPCXZ9GDo66cYX3x/3pUib4OM=' 'sha256-ipbBoKixwqjquK36IWNLfyxCJva8UyLfGrfvxPHxr38=' 'sha256-+t757rqGNQwT0q1uqZHS/O5DqZqoP+z9XB2xcJexy44=' 'sha256-02h9Kd7OaXbDwKfiCMcUqDlHhCchx6G7lQz9BnewZ4Q=' www.googletagmanager.com widget.trustpilot.com cc.cdn.civiccomputing.com; style-src 'unsafe-hashes' 'self' 'sha256-NE3gBSsVG0IdyINKOXv7oHDjOD1hoJpOCZQDS8LzvUc=' 'sha256-gj3hXMTISjefzHKc3LvwPGkgIqBnMTl1JhLIdwcC/O8=' 'sha256-qWwxsTFcdIcN78qmlVvZfPMlQLLiEk7put1pv87RdRQ=' 'sha256-lHUKqGdl+4OehsZGVG+FKk+4B6tXm4KELpn17gDOWYI=' 'sha256-vPkO6PkFMX5iA0kFO1jXAURY633sJnJ60Zv2e1qkvRg=' 'sha256-SO0UQB6fd3Ui8RV8k0GukXnJfp8gsz8gTz71WGkq8MM=' fonts.googleapis.com; frame-ancestors 'self' widget.trustpilot.com; child-src wdiget.trustpilot.com, report-uri https://fx7h2e0u.uriports.com/reports/report; report-to default 1
font-src cdn.jsdelivr.net fonts.gstatic.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com https://cdnjs.cloudflare.com *.klarna.com *.klarnacdn.net usizy-media.s3.eu-west-1.amazonaws.com fonts.axept.io *.fontawesome.com *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.adyen.com pay.google.com payments-eu.amazon.com *.amazon.de *.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.adyen.com pay.google.com *.paypal.com *.google.com *.doubleclick.net *.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * *.klarna.com *.klarnaservices.com *.zendesk.com *.iadvize.com shopping.google.com *.sendcloud.sc *.jsdelivr.net *.trustpilot.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com https://flagcdn.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.adyen.com pay.google.com *.payments-amazon.com *.media-amazon.com *.paypalobjects.com https://images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com cdn.doofinder.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.ekinsport.com *.klarna.com *.klarnacdn.net *.klarnaevt.com media.usizy.es static.usizy.es axeptio.imgix.net www.google.fr *.zdassets.com *.iadvize.com *.pinterest.com *.snapchat.com www.gstatic.com *.googleusercontent.com *.jsdelivr.net magefan.com cm.magefan.com *.amazonaws.com api.empathybroker.com *.empathybroker.com api.empathy.co *.empathy.co api.staging.empathy.co *.staging.empathy.co maps.googleapis.com maps.gstatic.com *.alothemes.com *.magepow.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com cdn.jsdelivr.net *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com cdn.doofinder.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com https://cdnjs.cloudflare.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com static.axept.io static.usizy.es media.usizy.es sgtm.ekinsport.com js.sentry-cdn.com *.zdassets.com sibautomation.com cdn.brevo.com static.affilae.com s.kk-resources.com *.contentsquare.net *.iadvize.com sc-static.net *.snapchat.com www.gstatic.com *.jsdelivr.net *.sendcloud.sc https://polyfill-fastly.io https://browser.sentry-cdn.com maps.googleapis.com maps.gstatic.com *.alothemes.com *.magepow.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src cdn.jsdelivr.net fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.doofinder.com unsafe-inline assets.braintreegateway.com https://fonts.googleapis.com https://cdnjs.cloudflare.com *.klarna.com *.klarnacdn.net static.usizy.es fonts.axept.io *.fontawesome.com *.jsdelivr.net *.sendcloud.sc *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adyen.com *.google.com payments-eu.amazon.com *.paypal.com *.getalma.eu *.google-analytics.com *.facebook.com *.facebook.net *.doofinder.com wss://*.doofinder.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com google.com *.klarnaservices.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaevt.com client.axept.io api.axept.io usizy.com media.usizy.es sgtm.ekinsport.com *.zdassets.com *.zendesk.com in-automate.brevo.com sibautomation.com pagead2.googlesyndication.com *.contentsquare.net *.iadvize.com *.affilae.com *.doubleclick.net *.snapchat.com shopping.google.com www.gstatic.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com https://*.ingest.sentry.io api.empathybroker.com *.empathybroker.com api.empathy.co *.empathy.co api.staging.empathy.co *.staging.empathy.co maps.googleapis.com maps.gstatic.com *.alothemes.com *.magepow.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.googleapis.com https://www.gstatic.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com maxcdn.bootstrapcdn.com https://fonts.gstatic.com *.typekit.net *.cloudflare.com *.zohocdn.com s3.amazonaws.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.sharethis.com https://*.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com www.facebook.com platform.twitter.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.sharethis.com https://images.unsplash.com *.googleapis.com https://*.gstatic.com 'self' data: https://*.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com https://*.googleapis.com https://*.googleusercontent.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com www.google.ae www.google.am www.google.cd www.google.co.id www.google.co.in www.google.co.jp www.google.co.kr www.google.co.nz www.google.co.th www.google.co.uk www.google.co.za www.google.com.bd www.google.com.bh www.google.com.eg www.google.com.gh www.google.com.hk www.google.com.lb www.google.com.mx www.google.com.my www.google.com.ng www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.sa www.google.com.sg www.google.com.tw www.google.dz www.google.fr www.google.pl www.google.ro www.google.al www.google.ca www.google.co.ao www.google.co.bw www.google.co.ls www.google.co.ma www.google.co.ug www.google.co.ve www.google.com.cy www.google.com.fj www.google.com.kh www.google.com.kw www.google.com.np www.google.com.qa www.google.com.tr www.google.de www.google.es www.google.hr www.google.iq www.google.la www.google.lk www.google.ml www.google.nl www.google.rs www.google.ru www.google.se www.google.si www.google.sn www.google.be www.google.com.au www.google.com.sb www.google.com.vn www.google.ge www.google.ie raw.githubusercontent.com www.google.at www.google.az www.google.bf www.google.bi www.google.bs www.google.by www.google.ch www.google.ci www.google.cl www.google.co.ck www.google.co.cr www.google.co.il www.google.co.ke www.google.co.mz www.google.co.tz www.google.co.uz www.google.co.zm www.google.co.zw www.google.com.ar www.google.com.br www.google.com.bz www.google.com.co www.google.com.ec www.google.com.et www.google.com.gi www.google.com.jm www.google.com.mm www.google.com.mt www.google.com.na www.google.com.ni www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pr www.google.com.py www.google.com.ua www.google.com.uy www.google.cz www.google.dk www.google.ee www.google.fi www.google.fm www.google.gm www.google.gr www.google.hn www.google.hu www.google.it www.google.jo www.google.kz www.google.lt www.google.lv www.google.md www.google.mk www.google.mu www.google.mv www.google.no www.google.nr www.google.nu www.google.ps www.google.pt www.google.rw www.google.sk www.google.sr www.google.tg www.google.tn www.google.tt www.google.vu www.google.ba www.google.com.ly *.ggpht.com www.google.bt www.google.com.do www.google.com.sl www.google.mn www.google.com.bn www.google.com.bo www.google.com.sv www.google.com.vc www.google.mg www.google.so *.hsforms.net *.hsforms.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page *.sharethis.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js *.googleapis.com https://*.gstatic.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com chimpstatic.com downloads.mailchimp.com *.list-manage.com connect.facebook.net twitter.com platform.twitter.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.typekit.net *.nr-data.net *.jsdelivr.net *.newrelic.com *.cloudflare.com rum.hlx.page *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.sharethis.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com downloads.mailchimp.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com unsafe-inline assets.braintreegateway.com *.typekit.net *.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.sharethis.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net https://*.google.com *.doubleclick.net *.googlesyndication.com https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com www.google.ae www.google.co.id www.google.co.in www.google.co.jp www.google.co.nz www.google.co.za www.google.com.au www.google.com.bd www.google.com.bh www.google.com.eg www.google.com.hk www.google.com.lb www.google.com.my www.google.com.ng www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.sa www.google.com.sg www.google.com.vn www.google.fr www.google.bg www.google.ca www.google.co.ug www.google.co.uk www.google.co.ve www.google.com.gh www.google.com.np www.google.com.tw www.google.de www.google.la www.google.ml www.google.rs www.google.si www.google.sn www.google.be *.typekit.net *.nr-data.net www.google.at www.google.bf www.google.bs www.google.by www.google.ch www.google.cl www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.il www.google.co.ke www.google.co.kr www.google.co.ma www.google.co.th www.google.co.tz www.google.co.uz www.google.co.zw www.google.com.ar www.google.com.br www.google.com.co www.google.com.et www.google.com.fj www.google.com.kh www.google.com.mm www.google.com.mx www.google.com.na www.google.com.om www.google.com.pa www.google.com.py www.google.com.qa www.google.com.sb www.google.com.tr www.google.com.ua www.google.cz www.google.dk www.google.ee www.google.es www.google.gr www.google.hn www.google.hr www.google.hu www.google.ie www.google.iq www.google.it www.google.jo www.google.lk www.google.lt www.google.lv www.google.md www.google.mk www.google.mu www.google.nl www.google.no www.google.nr www.google.pl www.google.ps www.google.pt www.google.ro www.google.rw www.google.se www.google.sk www.google.tg www.google.tn www.google.vu www.google.fi www.google.com.pr www.google.ge rum.hlx.page www.google.com.bo www.google.com.cy www.google.com.kw www.google.com.ly www.google.com.vc www.google.ru t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://76e071dc-a298-4d67-9e5b-58f4c8b3dff3.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; script-src 'nonce-uyQKrJmQuvct3r87tW3+dA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
object-src 'none';base-uri 'self';script-src 'nonce-GRhK5dDIEL-ahhPWPGGTuw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
connect-src 'self' data: https://www.motonet.ee https://graphql.datocms.com https://*.doubleclick.net https://www.instagram.com https://*.broman.group https://*.litix.io https://vimeo.com https://*.adyen.com/checkoutanalytics/ https://*.adyen.com/checkoutshopper/ https://api.checkout.uat.walleydev.com/checkout/ https://api.checkout.walleypay.com/checkout/ https://api.postmarkapp.com https://www.youtube.com https://api.videoly.co https://js.testfreaks.com https://api.testfreaks.com https://reviews.testfreaks.com https://policy.app.cookieinformation.com https://consent.app.cookieinformation.com/api/consent https://api.custobar.com https://*.google-analytics.com https://googleads.g.doubleclick.net/pagead/viewthroughconversion/ https://*.googlesyndication.com https://*.adform.net https://*.creativecdn.com https://connect.facebook.net https://browser-intake-datadoghq.eu  https://*.broman.group https://*.cdn.adyen.com/checkoutshopper/ https://i.ytimg.com https://www.datocms-assets.com https://stagingaksapimanagementbroman.azure-api.net https://testapimanagementbroman.azure-api.net https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com https://*.mux.com https://*.vimeocdn.com https://dapi.videoly.co https://*.facebook.com https://*.seadform.net https://*.adform.net https://*.criteo.net https://*.criteo.com https://www.googletagmanager.com/ https://ib.adnxs.com/setuid https://ib.adnxs.com/getuid https://cm.g.doubleclick.net https://qr.motonet.ee https://embed.upseller.cloud https://cm4-production-assets.s3.amazonaws.com/ https://general-runtime.voiceflow.com https://runtime-api.voiceflow.com https://embed.upseller.cloud https://upseller-analytics.vercel.app wss://general-runtime.voiceflow.com wss://runtime-api.voiceflow.com wss://embed.upseller.cloud https://*.googletagmanager.com https://*.giosg.com https://*.interactions.giosgusercontent.com; img-src 'self' data: https://www.datocms-assets.com https://i.ytimg.com https://image.mux.com https://*.broman.group https://*.cdn.adyen.com/checkoutshopper/ https://i.ytimg.com https://www.datocms-assets.com https://stagingaksapimanagementbroman.azure-api.net https://testapimanagementbroman.azure-api.net https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com https://*.mux.com https://*.vimeocdn.com https://dapi.videoly.co https://*.facebook.com https://*.seadform.net https://*.adform.net https://*.criteo.net https://*.criteo.com https://www.googletagmanager.com/ https://ib.adnxs.com/setuid https://ib.adnxs.com/getuid https://cm.g.doubleclick.net https://qr.motonet.ee https://embed.upseller.cloud https://cm4-production-assets.s3.amazonaws.com/; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://checkout.uat.walleydev.com/ https://checkout.walleypay.com/ https://*.adyen.com/ https://*.vimeo.com https://app.ecoonline.com https://www.maston.fi https://websds.volvo.com https://policy.app.cookieinformation.com/ https://*.criteo.com https://*.adform.net https://*.creativecdn.com https://www.facebook.com https://www.gatestechzone.com https://staging-cdn.broman.group https://cdn.motonet.fi https://embed.upseller.cloud https://*.googletagmanager.com https://*.giosg.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.broman.group https://maps.googleapis.com https://api.walleypay.com/walley-checkout-loader.js https://api.videoly.co/1/quchbox/0/5256/quch.js https://www.paypal.com/sdk/js https://dapi.videoly.co https://www.youtube.com https://*.vimeo.com https://policy.app.cookieinformation.com https://script.custobar.com https://*.criteo.net https://*.criteo.com https://*.adform.net https://connect.facebook.net https://tags.creativecdn.com https://embed.upseller.cloud https://cdn.voiceflow.com https://*.googletagmanager.com https://*.giosg.com https://globalcdn.interactiondesigner.giosg.com; object-src 'none'; worker-src 'self' blob:; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://destinasian.us5.list-manage.com; script-src 'self' 'unsafe-inline' https://delivery.destinasian.com https://www.clarity.ms https://scripts.clarity.ms https://static.cloudflareinsights.com https://www.googletagmanager.com https://*.googlesyndication.com https://*.doubleclick.net https://*.statcounter.com; style-src 'self' 'unsafe-inline' https://cloud.typography.com https://staging.destinasian.com/wp-content/fonts/887117/83E1D54C78B8FE5C5.css; img-src 'self' data: blob: https:; font-src 'self' data: https://cloud.typography.com; connect-src 'self' https://delivery.destinasian.com https://a.clarity.ms https://k.clarity.ms https://l.clarity.ms https://analytics.google.com https://www.google.com https://ad.doubleclick.net https://stats.g.doubleclick.net https://e.clarity.ms https://j.clarity.ms https://statcounter.io https://cloudflareinsights.com https://restcountries.com https://*.google-analytics.com https://*.googletagmanager.com https://*.statcounter.com; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com; media-src 'self' https:; worker-src 'self' blob:; manifest-src 'self' 1
default-src 'self'; script-src 'self' *.hsadspixel.net *.hs-analytics.net *.hs-scripts.com *.hubspot.com static.hsappstatic.net *.usemessages.com *.hs-banner.com *.hscollectedforms.net *.hsleadflows.net *.hsforms.net *.hsforms.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspot.net js.hscta.net *.hubspotfeedback.com feedback.hubapi.com 'strict-dynamic' 'nonce-Pu/qDJ2l9JTXEK6FYATTmg=='; img-src 'self' data: *.hubspot.com no-cache.hubspot.com js.hscta.net *.hsforms.net *.hsforms.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspot.net *.hubspotusercontent-eu1.net cdn2.hubspot.net static.hsappstatic.net www.google.se www.google.com www.facebook.com region1.analytics.google.com stats.g.doubleclick.net googleads.g.doubleclick.net pagead2.googlesyndication.com sdk.privacy-center.org www.googletagmanager.com mnd-assets.mynewsdesk.com; connect-src 'self' *.hubapi.com *.hubspot.com js.hscta.net *.hs-banner.com *.hscollectedforms.net *.hsforms.net *.hsforms.com *.hs-analytics.net www.google.com ad.doubleclick.net plausible.io data.advania.se analytics.google.com api.privacy-center.org m.clarity.ms pagead2.googlesyndication.com; frame-src 'self' data.advania.se *.hubspot.com *.hs-sites.com advania-25168988.hs-sites-eu1.com *.hsforms.net *.hsforms.com *.hubspot.net play.hubspotvideo.com recognition.ecovadis.com; style-src 'self' 'unsafe-inline' static.hsappstatic.net use.typekit.net p.typekit.net cdn.jsdelivr.net *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net cdn2.hubspot.net; font-src 'self' use.typekit.net fonts.gstatic.com *.hubspotusercontent-eu1.net static.hsappstatic.net 1
default-src 'self' https://mc.yandex.ru https://www.googletagmanager.com https://api-maps.yandex.ru/ https://yastatic.net https://core-renderer-tiles.maps.yandex.net data:;report-uri https://planetarf.ru/debug/csp/csp.php; img-src 'self' data: maps.yandex.net https://core-renderer-tiles.maps.yandex.net https://api-maps.yandex.ru https://yandex.ru/clck/counter* https://*; connect-src 'self' https://mc.yandex.ru https://bestcon.planetarf.ru https://planetarf.ru https://www.google-analytics.com https://api-maps.yandex.ru https://taxi-routeinfo.taxi.yandex.net; child-src blob: https://mc.yandex.ru; frame-src blob: https://mc.yandex.ru https://planetarf.ru; style-src 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://unpkg.com https://cdn.jsdelivr.net https://*.mzalendo.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com; connect-src 'self' https://*.mzalendo.com; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://open.spotify.com; object-src 'self' https://mzdocs.fra1.digitaloceanspaces.com; base-uri 'self'; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-3AD3esq8CgQACeXFPXnhRw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.klarnacdn.net maxcdn.bootstrapcdn.com fonts.gstatic.com widget-v4.tidiochat.com x.klarnacdn.net code.tidio.co data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com services.paytrail.com paytrail.com *.paytrail.com epmt.nordea.fi *.nordea.com verkkopankki.danskebank.fi online.s-pankki.fi verkkomaksu.poppankki.fi verkkomaksu.omasp.fi auth.aktia.fi verkkomaksu.handelsbanken.fi verkkomaksu.saastopankki.fi online.alandsbanken.fi maksu.pivo.fi qa-maksu.pivo.fi v1-hub-staging.sph-test-solinor.com v1.api.paymenthighway.io *.paymenthighway.io *.mobilepay.fi https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.klarna.com www.googletagmanager.com td.doubleclick.net *.doubleclick.net pagead2.googlesyndication.com https://plumrocket.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.klarna.com *.klarnaevt.com *.klarnacdn.net magefan.com cm.magefan.com *.disqus.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com flagpedia.net *.googleusercontent.com cdnjs.cloudflare.com facebook.com google.se *.google.fi avatars.tidiochat.com resources.paytrail.com pagead2.googlesyndication.com google.com maps.googleapis.com cdn2.hubspot.net maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.disqus.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.gstatic.com maps.googleapis.com code.tidio.co widget-v4.tidiochat.com pagead2.googlesyndication.com services.paytrail.com resources.paytrail.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.klarnacdn.net maxcdn.bootstrapcdn.com *.gstatic.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com widget-v4.tidiochat.com code.tidio.co 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net www.gstatic.com maps.googleapis.com sentry-new.tidio.co wss://socket.tidio.co api-v2.tidio.co google.com www.google.com googleads.g.doubleclick.net pagead2.googlesyndication.com *.google.com www.googleapis.com *.paytrail.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://use.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://fonts.gstatic.com 'self' data: *.tawk.to data: 'self' 'unsafe-inline'; form-action *.paypal.com *.tawk.to 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com https://player.vimeo.com https://www.youtube-nocookie.com *.tawk.to 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com https://firebasestorage.googleapis.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com *.tawk.to cdn.jsdelivr.net data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.commerce-payment-services.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com s7.addthis.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.avada.io *.shopify.com https://player.vimeo.com https://www.youtube.com *.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.googleapis.com *.googletagmanager.com https://use.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://fonts.googleapis.com http://fonts.googleapis.com *.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com ekr.zdassets.com/ *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog https://get.geojs.io *.avada.io https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io https://olegnax.com https://api.instagram.com https://graph.instagram.com/ *.tawk.to wss://*.tawk.to 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://posthog.onsurity.com https://ph.onsurity.com https://salesiq.zohopublic.com https://salesiq.zohopublic.in https://*.zoho.com https://cdn.pagesense.io https://www.youtube.com https://www.youtube-nocookie.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.typekit.net https://p.typekit.net; font-src 'self' data: https://fonts.gstatic.com https://use.typekit.net; img-src 'self' data: blob: https://assets-wp-cdn.onsurity.com https://imagedelivery.net https://i.ytimg.com https://img.youtube.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://www.google.com https://www.google.co.in https://googleads.g.doubleclick.net https://cdn.pagesense.io https://*.zohopublic.com https://*.zohopublic.in; connect-src 'self' https://posthog.onsurity.com https://ph.onsurity.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://salesiq.zohopublic.com https://salesiq.zohopublic.in https://*.zoho.com https://*.zohopublic.com https://*.zohopublic.in https://cdn.pagesense.io; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://td.doubleclick.net https://salesiq.zohopublic.com https://salesiq.zohopublic.in https://challenges.cloudflare.com; worker-src 'self' blob:; manifest-src 'self'; report-uri /api/csp-report; report-to csp-endpoint 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.addthis.com *.facebook.com *.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.openstreetmap.org *.addthisedge.com *.twitter.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com maps.gstatic.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com map.gls-croatia.com map.gls-czech.com map.gls-hungary.com map.gls-romania.com map.gls-slovenia.com map.gls-slovakia.com map.gls-serbia.com *.openstreetmap.org *.addthis.com *.moatads.com *.addthisedge.com *.facebook.net *.twitter.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com tagmanager.google.com static.client.cardinaltrusted.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com maps.googleapis.com www.gstatic.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com tagmanager.google.com fonts.google.com *.stripe.network *.stripecdn.com *.amazon.com www.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com map.gls-croatia.com map.gls-czech.com map.gls-hungary.com map.gls-romania.com map.gls-slovenia.com map.gls-slovakia.com map.gls-serbia.com *.openstreetmap.org api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.cardinaltrusted.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.googleapis.com *.gstatic.com 'self' data: *.fontawesome.com *.cloudflare.com *.bootstrapcdn.com *.hotjar.com *.typekit.net cdn.curator.io static.klaviyo.com *.feedbackcompany.com maxcdn.bootstrapcdn.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action *.google.com *.facebook.com *.feedbackcompany.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.multisafepay.com https://pay.google.com 'self'; frame-src player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.youtube-nocookie.com https://static.addtoany.com/ www.google.com *.google.com *.chatra.io *.hotjar.com *.facebook.com *.trustpilot.com *.kiyoh.com *.pinterest.com *.criteo.com *.cookiefirst.com *.multisafepay.com https://pay.google.com www.xtento.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com 'self' data: *.vimeocdn.com i.ytimg.com *.youtube.com *.gstatic.com *.googleapis.com data: maps.googleapis.com maps.gstatic.com *.googleadservices.com *.google-analytics.com cdn.ckeditor.com * scontent.fzty3-2.fna.fbcdn.net *.feedbackcompany.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.multisafepay.com www.xtento.com cdn.xtento.com *.googletagmanager.com www.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://static.addtoany.com/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com *.gstatic.com maps.googleapis.com cdn.ckeditor.com/ *.cloudflare.com *.twitter.com *.fontawesome.com *.elfsight.com *.chimpstatic.com *.chatra.io *.jsdelivr.net chimpstatic.com *.facebook.com *.doubleclick.net *.trustpilot.com s.pinimg.com *.zdassets.com *.google-analytics.com *.feedbackcompany.com *.facebook.net *.hotjar.com *.mailchimp.com *.list-manage.com *.curator.io *.typekit.net *.clarity.ms *.leadinfo.net *.criteo.com *.googleadservices.com *.cookiefirst.com www.datadoghq-browser-agent.com bat.bing.com *.tidio.co *.tidiochat.com *.iubenda.com js-agent.newrelic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ s7.addthis.com *.multisafepay.com https://pay.google.com www.xtento.com cdn.xtento.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.fontawesome.com fonts.googleapis.com/ cdn.ckeditor.com/ *.cloudflare.com *.bootstrapcdn.com *.mailchimp.com *.jsdelivr.net *.googleapis.com *.curator.io *.cookiefirst.com *.typekit.net https://static.klaviyo.com maxcdn.bootstrapcdn.com *.multisafepay.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src curatorio.s3.amazonaws.com curator-assets.b-cdn.net video-lga3-2.cdninstagram.com video-iad3-1.xx.fbcdn.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src vimeo.com https://stats.addtoany.com/menu *.googleapis.com maps.googleapis.com/ *.cloudflare.com *.elfsight.com *.instacloud.io *.google-analytics.com *.google.com *.doubleclick.net *.hotjar.com *.hotjar.io ct.pinterest.com *.paypal.com *.zdassets.com *.zendesk.com *.feedbackcompany.com *.curator.io *.clarity.ms *.leadinfo.net *.cookiefirst.com gtm-mm85h6s-nzi2m.uc.r.appspot.com www.google-analytics.com www.google.com maps.googleapis.com *.livechatinc.com www.paypalobjects.com dev.visualwebsiteoptimizer.com www.googletagmanager.com pagead2.googlesyndication.com googleadservices.com rum.ewings.cloud https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ ekr.zdassets.com/ *.multisafepay.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.fontawesome.com https://fonts.bunny.net rainbowballoons.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * rainbowballoons.com 'self' 'unsafe-inline'; frame-ancestors rainbowballoons.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * rainbowballoons.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com rainbowballoons.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com rainbowballoons.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com rainbowballoons.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com rainbowballoons.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com rainbowballoons.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com rainbowballoons.com http: https: blob: 'self' 'unsafe-inline'; default-src rainbowballoons.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.klarnacdn.net fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de player.vimeo.com *.facebook.com *.youtube.com *.youtube-nocookie.com 'self' 'unsafe-inline'; img-src d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.cdninstagram.com *.hsforms.net *.hsforms.com *.gstatic.com *.facebook.com data: 'self' 'unsafe-inline'; script-src www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ player.vimeo.com connect.facebook.net *.newrelic.com *.nr-data.net *.hsforms.net *.hsforms.com https://www.googletagmanager.com tagmanager.google.com analytics.google.com *.facebook.net unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.klarnacdn.net https://static.klaviyo.com tagmanager.google.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.newrelic.com *.nr-data.net vimeo.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com analytics.google.com *.facebook.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-Pjx50Iv8KFzjUrf2mGZoVCo_1IIsDhTFLzziCv2NzhDKj09FTcH3tA' 'strict-dynamic' https://maps.googleapis.com https://maps.gstatic.com https://cdn.jsdelivr.net https://code.etracker.com https://www.etracker.com https://www.etracker.de *.etracker.com *.etracker.de; img-src 'self' data: *.ytimg.com *.vimeocdn.com blob: https://maps.googleapis.com https://maps.gstatic.com https://img.youtube.com https://code.etracker.com https://www.etracker.com https://www.etracker.de *.etracker.com *.etracker.de; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://eu.frcapi.com https://global.frcapi.com https://code.etracker.com https://www.etracker.com https://www.etracker.de *.etracker.com *.etracker.de; style-src 'self' 'nonce-Pjx50Iv8KFzjUrf2mGZoVCo_1IIsDhTFLzziCv2NzhDKj09FTcH3tA'; script-src-elem 'self' 'nonce-Pjx50Iv8KFzjUrf2mGZoVCo_1IIsDhTFLzziCv2NzhDKj09FTcH3tA' 'strict-dynamic' https://maps.googleapis.com https://maps.gstatic.com https://cdn.jsdelivr.net https://code.etracker.com https://www.etracker.com https://www.etracker.de *.etracker.com *.etracker.de; connect-src 'self' https://maps.googleapis.com https://maps.gstatic.com https://cdn.jsdelivr.net https://eu.frcapi.com https://global.frcapi.com https://code.etracker.com https://www.etracker.com https://www.etracker.de *.etracker.com *.etracker.de; object-src 'none'; frame-ancestors 'self' https://*.etracker.com https://*.etracker.de 1
script-src blob: 'unsafe-eval' 'self' https://*.awswaf.com https://*.ada.support https://*.stripe.com https://*.squarecdn.com https://*.googleapis.com https://*.google.com https://*.google-analytics.com https://*.gstatic.com https://*.hellosign.com https://*.hs-scripts.com https://*.hs-analytics.net https://*.hubspot.com https://*.hs-banner.com https://*.hsadspixel.net https://*.usemessages.com https://cdn.jsdelivr.net/npm/@deepgram/sdk@v3.1.9 https://*.googletagmanager.com https://*.pusher.com https://*.bing.com https://*.licdn.com https://trackcmp.net https://*.facebook.net https://*.growsumo.com https://*.doubleclick.net https://*.redditstatic.com  https://*.zoom.us https://*.practicebetter.support https://*.practicebetter.io https://*.apple.com https://appleid.cdn-apple.com https://chat.onmaven.app; connect-src https: wss: data: blob:; font-src https: blob: data:; img-src https: blob: data:; manifest-src 'self' *.practicebetter.support *.practicebetter.io; media-src https: blob: data:; object-src 'none'; script-src-elem 'self' 'unsafe-inline' blob: data: https://*.awswaf.com https://*.ada.support https://*.stripe.com https://*.squarecdn.com https://*.googleapis.com https://*.google.com https://*.google-analytics.com https://*.gstatic.com https://*.hellosign.com https://*.hs-scripts.com https://*.hs-analytics.net https://*.hubspot.com https://*.hs-banner.com https://*.hsadspixel.net https://*.usemessages.com https://cdn.jsdelivr.net/npm/@deepgram/sdk@v3.1.9 https://*.googletagmanager.com https://*.pusher.com https://*.bing.com https://*.licdn.com https://trackcmp.net https://*.facebook.net https://*.growsumo.com https://*.doubleclick.net https://*.redditstatic.com https://*.googleadservices.com https://*.pendo.io https://*.zoom.us https://zoom.us https://*.practicebetter.support https://*.practicebetter.io https://*.apple.com https://appleid.cdn-apple.com https://chat.onmaven.app; style-src https: blob: data: 'unsafe-inline'; worker-src 'self' blob:; form-action https:; frame-ancestors https:; base-uri 'self'; report-uri /api/csp/violations 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://dd.eijsink.nl https://*.googletagmanager.com https://*.azureedge.net https://*.cookiebot.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://*.cookiebot.com; img-src 'self' https: data: blob:; font-src 'self' data:; connect-src 'self' https://mobile.events.data.microsoft.com https://*.azureedge.net https://*.cookiebot.com https://*.dynamics.com https://*.algolia.net https://*.algolianet.com https://dd.eijsink.nl https://www.google.com https://cms.eijsink.nl; frame-src 'self' https://www.google.com https://*.azureedge.net https://*.cookiebot.com; frame-ancestors 'self' https://cms.eijsink.nl; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /api/csp-report 1
object-src 'none';base-uri 'self';script-src 'nonce-d5MBJv7d3_n6p0jymoTABw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cleverreach.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.googletagmanager.com https://tagmanager.google.com js.mollie.com www.xtento.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.cloudfront.net https://images.unsplash.com https://www.mollie.com *.hsforms.net *.hsforms.com 'self' data: www.xtento.com cdn.xtento.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com https://www.googletagmanager.com https://www.google.at https://maps.googleapis.com js.mollie.com *.hsforms.net *.hsforms.com maps.googleapis.com www.xtento.com cdn.xtento.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com t.elasticsuite.io *.hsforms.net *.hsforms.com places.googleapis.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src https://www.googletagmanager.com https://tagmanager.google.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com data: *.fontawesome.com https://fonts.gstatic.com fonts.googleapis.com https://fonts.bunny.net 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com js.mollie.com https://consentcdn.cookiebot.com/ https://consent.cookiebot.com/ https://www.googletagmanager.com/ https://td.doubleclick.net *.klarnaservices.com *.klarnacdn.net www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com 'self' data: validate.fishpig.co.uk cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com https://x.klarnacdn.net https://firebasestorage.googleapis.com https://www.mollie.com https://www.google.de/ http://bat.bing.com/ https://imgsct.cookiebot.com/ https://www.facebook.com/ *.klarnaservices.com *.klarnacdn.net www.xtento.com cdn.xtento.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com https://secure.pay1.de https://x.klarnacdn.net *.avada.io js.mollie.com *.gstatic.com https://www.clarity.ms/ http://bat.bing.com/ https://connect.facebook.net/ https://consentcdn.cookiebot.com/ https://consent.cookiebot.com/ *.klarnaservices.com *.klarnacdn.net *.klarna.com www.xtento.com cdn.xtento.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com *.fontawesome.com https://fonts.googleapis.com https://fonts.bunny.net *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com https://get.geojs.io *.avada.io *.google-analytics.com https://stats.g.doubleclick.net/ https://e.clarity.ms/ https://consentcdn.cookiebot.com/ https://consent.cookiebot.com/ *.klarnaservices.com *.klarnacdn.net *.klarnaevt.com *.klarna.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com *.fonts.googleapis.com 'unsafe-inline' data: *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.sharethis.com *.bootstrapcdn.com *.zopim.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors ; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.bigdatacorp.com.br *.b2egroup.com.br *.addthis.com *.sharethis.com *.pinterest.com *.twitter.com *.youtube.com/ *.googleapis.com http://maps.googleapis.com/* *.consensu.org *.facebook.com *.doubleclick.net *.conectiva.io *.sunset.systems https://app.cartstack.com *.performa.ai *.cupom.social *.conectiva.app www.google.com https://www.google.com/ https://www.google.com/* *.googlesyndication.com *.weltpixel.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.bigdatacorp.com.br *.b2egroup.com.br *.cloudflare.com *.klarna.com *.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.addthis.com *.sharethis.com *.pinterest.com *.cdninstagram.com *.googleadservices.com *.twitter.com *.twimg.com *.lightemporium.com *.usercentrics.eu *.siteblindado.com *.convisoappsec.com *.app.convisoappsec.com *.amazonaws.com *.instrutherm.com.br *.instrutherm.net.br *.facebook.com *.google.com https://www.google.com.br/* https://www.google.com.br *.analytics.yahoo.com *.navdmp.com *.facebook.net *.pixel.mathtag.com *.compreconfie.com.br *.akamaihd.net *.linkedin.com *.adsymptotic.com *.mathtag.com *.doubleclick.net *.google.com.py https://t.co https://t.co/* https://conectiva.io https://conectiva.io/* *.krxd.net *.ebitempresa.com.br *.omtrdc.net *.ebit.com.br *.googlesyndication.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.bigdatacorp.com.br *.b2egroup.com.br *.googleapis.com *.addthis.com *.sharethis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.instagram.com *.cloudflare.com *.twitter.com *.google-analytics.com *.googleadservices.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.vimeo.com *.paypal.com *.paypalobjects.com *.amazonaws.com *.facebook.net *.google.com.br *.doubleclick.net *.navdmp.com *.googletagmanager.com *.cloudfront.net *.compreconfie.com.br *.ebit.com.br *.licdn.com https://conectiva.io *.sunset.systems *.cartstack.com.br *.app.cartstack.com *.performa.ai *.cupom.social *.ads-twitter.com 'unsafe-inline' frame-ancestors: 'unsafe-inline' data: *.zopim.com *.zdassets.com *.siteblindado.com *.convisoappsec.com *.app.convisoappsec.com *.googlesyndication.com *.avada.io *.shopify.com maps.googleapis.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.amazonaws.com *.bootstrapcdn.com *.compreconfie.com.br *.ebit.com.br https://fonts.bunny.net tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.bigdatacorp.com.br *.b2egroup.com.br *.cloudflare.com *.googleapis.com *.addthis.com *.sharethis.com *.cardinalcommerce.com *.graph.instagram.com *.twitter.com *.twimg.com *.reclameaqui.com.br http://maps.googleapis.com/* *.facebook.net *.doubleclick.net *.rdstation.com.br *.conectiva.io *.sunset.systems *.cartstack.com.br https://app.cartstack.com *.performa.ai *.cupom.social *.conectiva.app https://conectiva.io/* https://hits-banner-cloud-function.azurewebsites.net/* *.zdassets.com *.zopim.com wss://widget-mediator.zopim.com wss *.siteblindado.com *.siteblindado.com.br *.convisoappsec.com *.app.convisoappsec.com https://seal.app.convisoappsec.com *.zendesk.com *.googlesyndication.com *.facebook.com https://get.geojs.io *.avada.io places.googleapis.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src id.elvonp.com https://apisandbox.cieloecommerce.cielo.com.br/ https://apiquerysandbox.cieloecommerce.cielo.com.br/ https://api.cieloecommerce.cielo.com.br/ https://apiquery.cieloecommerce.cielo.com.br/ 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://*.instrutherm.net.br; report-to report-endpoint; 1
default-src 'self';script-src 'self';font-src 'self' fonts.gstatic.com;img-src 'self' secure.gravatar.com;style-src 'self' fonts.googleapis.com;frame-ancestors 'self'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com https://fonts.gstatic.com https://ws.colissimo.fr *.fontawesome.com maxcdn.bootstrapcdn.com https://applepay.cdn-apple.com fonts.googleapis.com https://cdnjs.cloudflare.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com lessavonsdejoya.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com lessavonsdejoya.com 'self' 'unsafe-inline'; frame-ancestors https://pay.google.com https://js.stripe.com/ *.stripe.com stripe.com *.link.com *.amazon.com lessavonsdejoya.com 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.stripe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.awin1.com *.zenaps.com *.fls.doubleclick.net https://chatbot-joya.planb-communication.com ct.pinterest.com bat.bing.com https://www.youtube.com https://form.typeform.com *.payplug.com *.dalenys.com https://applepay.cdn-apple.com platform.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com lessavonsdejoya.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.awin1.com *.zenaps.com *.wepowerconnections.com a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://maps.googleapis.com https://maps.gstatic.com https://ws.colissimo.fr https://*.tile.openstreetmap.fr https://*.onyourmap.com https://google.fr https://secure-magenta.dalenys.com flagpedia.net pinterest.com assets.pinterest.com syndication.twitter.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com lessavonsdejoya.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.stripe.com *.googleapis.com *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://chatbot-joya.planb-communication.com ct.pinterest.com bat.bing.com sslwidget.criteo.com https://maps.googleapis.com https://maps.gstatic.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://www.google.com https://www.gstatic.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com https://secure-magenta.dalenys.com https://applepay.cdn-apple.com api.payplug.com cdn.payplug.com maps.googleapis.com twitter.com platform.twitter.com maps.gstatic.com fonts.googleapis.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com lessavonsdejoya.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com downloads.mailchimp.com https://fonts.googleapis.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com *.fontawesome.com maxcdn.bootstrapcdn.com https://secure-magenta.dalenys.com *.gstatic.com https://cdnjs.cloudflare.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com lessavonsdejoya.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com lessavonsdejoya.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.wepowerconnections.com https://the.sciencebehindecommerce.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://chatbot-joya.planb-communication.com ct.pinterest.com bat.bing.com sslwidget.criteo.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://ws.colissimo.fr https://maps.googleapis.com https://nominatim.openstreetmap.org https://*.onyourmap.com https://*.mapbox.com www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com places.googleapis.com www.googleapis.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com lessavonsdejoya.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com lessavonsdejoya.com http: https: blob: 'self' 'unsafe-inline'; default-src lessavonsdejoya.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-QsEmZ9k7OZkJb1ukwPzecQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: https://img.youtube.com https://upload.wikimedia.org https://www.vijfhart.nl https://api.mapbox.com; connect-src 'self'; frame-src 'self' https://challenges.cloudflare.com https://eu.help123.app; 1
font-src maps.googleapis.com www.google.com www.gstatic.com maps.gstatic.com fonts.googleapis.com fonts.gstatic.com www.w3.org *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.addthis.com/ *.moatads.com *.addthisedge.com m.addthis.com api-public.addthis.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.addthis.com *.moatads.com *.addthisedge.com m.addthis.com api-public.addthis.com https://app.sandbox.midtrans.com https://app.midtrans.com *.facebook.com https://www.googletagmanager.com *.addtoany.com *.pinterest.com *.google.com 'self' 'unsafe-inline'; img-src *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io maps.googleapis.com www.gstatic.com maps.gstatic.com fonts.googleapis.com www.w3.org blob: *.gstatic.com *.pinterest.com *.googleapis.com *.facebook.com *.connect.facebook.net *.google.co.id res.cloudinary.com/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ maps.googleapis.com www.google.com www.gstatic.com maps.gstatic.com fonts.googleapis.com www.w3.org *.addthis.com/ *.moatads.com *.addthisedge.com m.addthis.com api-public.addthis.com https://app.sandbox.midtrans.com https://app.midtrans.com https://www.googletagmanager.com connect.facebook.net analytics.tiktok.com *.addtoany.com *.facebook.com *.pinterest.com *.tumblr.com *.google.com *.gstatic.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com maps.googleapis.com www.google.com www.gstatic.com maps.gstatic.com fonts.googleapis.com www.w3.org *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.addthis.com/ *.moatads.com *.addthisedge.com m.addthis.com api-public.addthis.com *.cloudfront.net *.googleadservices.com *.googletagmanager.com *.cardinalcommerce.com *.sandbox.paypal.com *.paypalobjects.com *.paypal.com *.addtoany.com *.googleapis.com *.google.com analytics.tiktok.com https://app.sandbox.midtrans.com https://app.midtrans.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net *.googleusercontent.com pouch-global-font-assets.s3.eu-central-1.amazonaws.com *.wistia.com yotpo-stool.s3.amazonaws.com *.zohocdn.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.nosto.com *.nos.to c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.pinterest.com *.pinterdev.com commerce-app.pintergration.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com www.xtento.com *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com *.b0e8.com *.klevu.com *.ksearchnet.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com *.mageside.com mageside.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to *.ometria.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com https://cdn-ukwest.onetrust.com https://via.placeholder.com *.facebook.com www.xtento.com cdn.xtento.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.attentivemobile.com *.attn.tv *.bing.com *.bing.net *.clarity.ms *.doubleclick.net *.facebook.net *.ggpht.com *.googleadservices.com *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.st www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu www.google.ws google.com *.google.com *.googlesyndication.com *.googletagmanager.com *.googleusercontent.com *.kaltura.com *.linksynergy.com *.listrakbi.com *.onetrust.com *.portmeirion.com *.portmeirion.co.uk *.postcodeanywhere.co.uk *.spode.com *.spode.co.uk *.wistia.com yastatic.net *.yotpoapi.com yotpo-editor-production.s3.amazonaws.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.attn.tv events.attentivemobile.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com *.b0e8.com *.bc0a.com js.klevu.com *.ksearchnet.com *.disqus.com *.avada.io *.shopify.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://cdn-ukwest.onetrust.com https://js.klevu.com https://tag.rmp.rakuten.com https://portm11116.pcapredict.com https://cdn-widgetsrepository.yotpo.com https://maps.googleapis.com https://kebos.portmeirion.co.uk *.hotjar.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net www.xtento.com cdn.xtento.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net *.ometria.com https://cdn.cookielaw.org https://www.nambe.com *.bing.com *.clarity.ms d21m4dsqdd3b9h.cloudfront.net *.doubleclick.net *.google-analytics.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.kaltura.com *.klevu.com *.listrakbi.com *.livechatinc.com *.onetrust.com *.pcapredict.com *.portmeirion.co.uk *.postcodeanywhere.co.uk *.rakuten.com *.sentry-cdn.com *.wistia.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com display.ugc.bazaarvoice.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net *.nosto.com *.nos.to assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com tagmanager.google.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net https://statsjs.klevu.com https://js.klevu.com d21m4dsqdd3b9h.cloudfront.net *.googletagmanager.com *.gstatic.com *.listrakbi.com *.postcodeanywhere.co.uk *.typekit.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.googleapis.com *.gstatic.com *.kaltura.com video-s3-bucket.s3.eu-west-2.amazonaws.com *.wistia.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.attn.tv events.attentivemobile.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.hub-box.com *.klevu.com *.ksearchnet.com https://get.geojs.io *.avada.io connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://cdn-ukwest.onetrust.com *.hotjar.com ws.hotjar.com wss://ws.hotjar.com analytics.google.com *.facebook.net *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com *.ometria.com *.attentivemobile.com *.bc0a.com *.bing.com *.bing.net *.clarity.ms *.doubleclick.net *.facebook.com *.googleadservices.com *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bt www.google.by www.google.ca www.google.cd www.google.ch www.google.ci www.google.cm www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.br www.google.com.co www.google.com.cy www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.hk www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.np www.google.com.om www.google.com.pa www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gg www.google.gm www.google.gr www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.mv www.google.mw www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.tg www.google.tl www.google.tn www.google.vu www.google.ws *.googlesyndication.com *.hotjar.io *.kaltura.com *.listrakbi.com *.livechatinc.com *.onetrust.com *.portmeirion.com *.portmeirion.co.uk *.postcodeanywhere.co.uk *.samsung.com *.spode.com *.spode.co.uk *.wistia.com *.yotpoapi.com yotpo-stool.s3.amazonaws.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.ometria.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; base-uri *.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; report-uri https://32ede476-ded8-4814-88cb-f8ecfa864227.sansec.watch/; report-to report-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-XxMfpxlS4Ekr9nhPsgKugA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-5skRWjKcuxRnNuaGyZoZvA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io store.paradoxlabs.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.authorize.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.authorize.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'sha256-hmLnRu63K8LBxoW6XOgx+O66Yun11Jyb/iXdrh49wBE=' https://accounts.google.com https://apis.google.com https://www.googletagmanager.com https://www.google-analytics.com https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://*.yandex.ru https://*.yandex.net https://www.youtube.com https://s.ytimg.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://donatex.gg https://test.donatex.gg https://test2.donatex.gg wss://donatex.gg wss://test.donatex.gg wss://test2.donatex.gg https://accounts.google.com https://oauth2.googleapis.com https://*.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org wss://mc.yandex.ru wss://mc.yandex.az wss://mc.yandex.by wss://mc.yandex.co.il wss://mc.yandex.com wss://mc.yandex.com.am wss://mc.yandex.com.ge wss://mc.yandex.com.tr wss://mc.yandex.ee wss://mc.yandex.fr wss://mc.yandex.kg wss://mc.yandex.kz wss://mc.yandex.lt wss://mc.yandex.lv wss://mc.yandex.md wss://mc.yandex.tj wss://mc.yandex.tm wss://mc.yandex.uz wss://mc.webvisor.com wss://mc.webvisor.org https://yandex.ru https://*.yandex.ru https://*.yandex.net https://www.youtube.com https://cdn.donatex.gg https://*.selstorage.ru; frame-src 'self' blob: https://vault.donatex.gg https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.youtube.com https://www.youtube-nocookie.com https://accounts.google.com https://oauth.telegram.org; child-src 'self' blob: https://vault.donatex.gg https://mc.yandex.ru https://mc.yandex.az https://mc.yandex.by https://mc.yandex.co.il https://mc.yandex.com https://mc.yandex.com.am https://mc.yandex.com.ge https://mc.yandex.com.tr https://mc.yandex.ee https://mc.yandex.fr https://mc.yandex.kg https://mc.yandex.kz https://mc.yandex.lt https://mc.yandex.lv https://mc.yandex.md https://mc.yandex.tj https://mc.yandex.tm https://mc.yandex.uz https://mc.webvisor.com https://mc.webvisor.org https://www.youtube.com https://www.youtube-nocookie.com https://accounts.google.com https://oauth.telegram.org; media-src 'self' data: blob: https:; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; report-uri /csp-report 1
font-src *.cloudflare.com *.twitter.com *.google.com *.google.co.in *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.bootstrapcdn.com *.board.support data: alfitrade.com alfibrand.com eagousa.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.twitter.com *.facebook.com *.googletagmanager.com https://www.googletagmanager.com alfitrade.com alfibrand.com eagousa.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.twitter.com https://www.google.com https://www.google.co.in https://www.facebook.com *.doubleclick.net https://www.chatbase.co www.google.com *.googletagmanager.com https://www.googletagmanager.com *.g.doubleclick.net *.googleadservices.com alfitrade.com alfibrand.com eagousa.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.cloudflare.com *.gstatic.com *.google.com *.google.co.in *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu https://d.adroll.com https://pixel.advertising.com https://pixel.rubiconproject.com https://simage2.pubmatic.com https://dsum-sec.casalemedia.com https://ads.yahoo.com https://eb2.3lift.com https://sync.outbrain.com https://trc.taboola.com https://x.bidswitch.net/sync https://ib.adnxs.com https://idsync.rlcdn.com https://us-u.openx.net https://ups.analytics.yahoo.com https://segments.company-target.com https://sync.tidaltv.com *.board.support https://eadn-wc04-15788078.nxedge.io *.googleapis.com *.g.doubleclick.net https://www.google.co.in/ https://verify.authorize.net/ alfitrade.com alfibrand.com eagousa.com data: 'self' 'unsafe-inline'; script-src https://assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.cloudflare.com *.twitter.com *.google.com *.google.co.in *.googleadservices.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.paypalobjects.com *.paypal.com https://chimpstatic.com *.googletagmanager.com *.doubleclick.net https://s.adroll.com https://d.adroll.com https://d.adroll.mgr.consensu.org *.bootstrapcdn.com https://static.zdassets.com sibautomation.com *.hotjar.com *.cloudflareinsights.com *.ctctcdn.com *.board.support *.pusher.com https://cdn.jsdelivr.net https://www.chatbase.co *.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://www.googlecommerce.com/ alfitrade.com alfibrand.com eagousa.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://cdn.jsdelivr.net *.cloudflare.com *.googleapis.com *.twitter.com *.google.com *.google.co.in *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.youtube.com *.bootstrapcdn.com *.sibautomation.com *.ctctcdn.com *.board.support fonts.googleapis.com alfitrade.com alfibrand.com eagousa.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.board.support alfitrade.com alfibrand.com eagousa.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.google.com *.google.co.in https://ekr.zdassets.com https://www.google-analytics.com *.sibautomation.com *.ctctcdn.com *.doubleclick.net *.board.support https://www.chatbase.co *.googleapis.com alfitrade.com alfibrand.com eagousa.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://alfitrade.com/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com/analytics.js; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; object-src 'none'; base-uri 'self'; connect-src 'self' https://api.lever.co https://backend.tendermint.com https://www.google-analytics.com; font-src 'self' data: fonts.gstatic.com https://raw.githubusercontent.com; frame-src 'self'; img-src 'self' data: about: blob: https://www.gstatic.com/images/ https://cdn-images-1.medium.com https://d33wubrfki0l68.cloudfront.net https://www.google-analytics.com; manifest-src 'self'; media-src 'self' data:; worker-src 'none'; frame-ancestors 'none'; form-action 'self'; report-uri https://bce8f9ed809bb395c2d2805d76f7e87a.report-uri.com/r/d/csp/reportOnly; 1
default-src 'self' https://cuatro.sim-cdn.nl; img-src * data: blob:; style-src * 'unsafe-inline' blob: https://fonts.bunny.net; font-src 'self' data: https://fonts.bunny.net https://fonts.gstatic.com https://cuatro.sim-cdn.nl https://cuatro.sim-cdn-acceptatie.nl https://cuatro.sim-cdn-test.nl; script-src 'nonce-YTkyYTE5MzQtMWY2NS00ZWExLWEwNWQtYjMxMGIzZTViOWM3' 'strict-dynamic' 'report-sample'; connect-src *; form-action 'self'; media-src https://*.readspeaker.com https://*.streamlock.net https://storage.googleapis.com https://scribit-pro-hosting.storage.googleapis.com https://scribit-pro.storage.googleapis.com https://app.talkjs.com 'self' blob:; frame-src *; frame-ancestors 'self' https://*.polly.help; worker-src * 'unsafe-inline' blob:; report-uri /api/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://challenges.cloudflare.com https://*.clarity.ms; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://thumb.live.mmcdn.com https://jpeg.live.mmcdn.com https://flagcdn.com https://*.chaturbate.com https://*.cloudflare.com https://*.clarity.ms; font-src 'self' data:; connect-src 'self' https://challenges.cloudflare.com https://*.clarity.ms; frame-src 'self' https://*.chaturbate.com https://register.chaturband.com https://challenges.cloudflare.com; media-src 'self' data: blob: https://*.mmcdn.com https://*.chaturbate.com; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /api/csp-report.php; report-to csp-endpoint 1
default-src 'self'; script-src 'nonce-84AH38xD_naasRxHzkSR0g' 'strict-dynamic' 'unsafe-eval'; style-src 'self' 'nonce-84AH38xD_naasRxHzkSR0g'; style-src-attr 'unsafe-inline'; img-src 'self' data: blob: https://fd-cdn.nl https://px.ads.linkedin.com https://www.googletagmanager.com; font-src 'self' https://fd-cdn.nl; frame-src 'self' https://www.youtube.com https://*.google.com; connect-src 'self' https://*.google.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.linkedin.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /__csp-report__/ 1
font-src *.googleapis.com *.gstatic.com *.fontawesome.com *.bootstrapcdn.com *.paypal.com *.magentocommerce.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com https://cloud.ccm19.de https://td.doubleclick.net www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.magentocommerce.com *.paypal.com https://images.unsplash.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net https://www.google.de https://www.google.ba https://cloud.ccm19.de https://cmsstage.abeco.de https://cms.abeco.de www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com *.cloudflare.com *.twitter.com *.fontawesome.com *.bootstrapcdn.com *.paypal.com *.magentocommerce.com *.avada.io secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io https://cmsstage.abeco.de/ https://cms.abeco.de/ https://cloud.ccm19.de https://cdn.leadinfo.eu/ https://cdn.ldnfrpl.com/ www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.gstatic.com *.fontawesome.com *.bootstrapcdn.com *.paypal.com *.magentocommerce.com d.ratepay.com d.payla.io dr.payla.io https://cloud.ccm19.de/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.magentocommerce.com *.paypal.com https://get.geojs.io *.avada.io payments.amazon.de d.ratepay.com jsctool.com eu.playground.klarnaevt.com https://stats.g.doubleclick.net https://cloud.ccm19.de https://region1.analytics.google.com https://www.google.com/ https://pagead2.googlesyndication.com/ https://*.leadinfo.net/ https://api.leadinfo.com/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src blob:;img-src data: https://*.adnxs.com https://*.facebook.net https://*.facebook.com https://*.feefo.com https://*.google.com https://*.google.co.uk https://*.google-analytics.com https://*.googlesyndication.com https://*.novunapersonalfinance.co.uk https://*.usercentrics.eu https://c5.adalyser.com https://img06.en25.com https://px.gumgum.com https://www.googletagmanager.com 'self';connect-src https://*.adnxs.com https://*.adsrvr.org https://*.azure.com https://*.civiccomputing.com https://*.contentsquare.net https://*.doubleclick.net https://*.feefo.com https://*.google.com https://*.google.co.uk https://*.google-analytics.com https://*.googlesyndication.com https://*.heap-api.com https://*.novunapersonalfinance.co.uk https://*.pingdom.net https://*.usercentrics.eu https://*.visualstudio.com https://cdn.plyr.io https://www.googletagmanager.com;default-src https://*.adnxs.com https://*.adsrvr.org https://*.azure.com https://*.contentsquare.net https://*.doubleclick.net https://*.feefo.com https://*.google.com https://*.google.co.uk https://*.heap-api.com https://*.novunapersonalfinance.co.uk https://*.usercentrics.eu https://cdn.plyr.io https://img06.en25.com 'self';script-src https://*.adnxs.com https://*.adsrvr.org https://*.azure.com https://*.contentsquare.net https://*.doubleclick.net https://*.facebook.net https://*.facebook.com https://*.feefo.com https://*.google.com https://*.google.co.uk https://*.google-analytics.com https://*.heap-api.com https://*.hotjar.com https://*.novunapersonalfinance.co.uk https://*.pingdom.net https://*.usercentrics.eu https://c5.adalyser.com https://img.en25.com https://img06.en25.com https://pagead2.googlesyndication.com https://www.googletagmanager.com 'self' 'unsafe-eval' 'unsafe-inline';frame-src https://*.adsrvr.org https://*.doubleclick.net https://*.novunapersonalfinance.co.uk https://*.usercentrics.eu;font-src https://*.feefo.com https://*.gstatic.com https://*.novunapersonalfinance.co.uk https://img06.en25.com 'self';style-src https://*.feefo.com https://*.googleapis.com https://*.novunapersonalfinance.co.uk https://img06.en25.com 'self' 'unsafe-inline';script-src-elem https://*.google-analytics.com https://www.googletagmanager.com;frame-ancestors https://*.novunapersonalfinance.co.uk 1
font-src *.google-analytics.com *.gstatic.com *.googleapis.com *.fontawesome.com fonts.googleapis.com *.yotpo.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com player.vimeo.com *.facebook.net *.youtube.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com blob: *.facebook.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com *.google-analytics.com *.googleapis.com *.gstatic.com *.facebook.net *.youtube.com *.fontawesome.com *.googletagmanager.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com js.mollie.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.google-analytics.com *.googleapis.com *.gstatic.com *.fontawesome.com cdn.dnky.co webchat.dotdigital.com unsafe-inline *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com *.fontawesome.com *.paypal.com *.facebook.net *.youtube.com *.doubleclick.net *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src d.digsgogo.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io storage.googleapis.com magefan.com cm.magefan.com blob: www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.garciadepou.com cdn-cookieyes.com/ www.google.es data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com adobedtm.com *.doofinder.com *.oct8ne.com *.cookieyes.com cdn-cookieyes.com *.facebook.net s.kk-resources.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com storage.googleapis.com assets.braintreegateway.com *.doofinder.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.oct8ne.com *.doofinder.com *.cookieyes.com cdn-cookieyes.com *.facebook.net s.kk-resources.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-2DLNfSeLUGojs9xmszA-Lw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com fonts.googleapis.com *.googleapis.com data: https://www.googletagmanager.com *.fontawesome.com maxcdn.bootstrapcdn.com https://dashboard.webwinkelkeur.nlfonts/webandbrand.woff data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.multisafepay.com https://pay.google.com *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io maps.googleapis.com maps.gstatic.com *.googleapis.com https://images.unsplash.com magefan.com cm.magefan.com *.doofinder.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://maps.googleapis.com https://maps.gstatic.com *.multisafepay.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com tagmanager.google.com https://www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.doofinder.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://cdnjs.cloudflare.com *.multisafepay.com https://pay.google.com *.trustpilot.com https://dashboard.webwinkelkeur.nl/sidebar.js https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com *.doofinder.com downloads.mailchimp.com maxcdn.bootstrapcdn.com *.multisafepay.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://maps.googleapis.com https://player.vimeo.com *.doofinder.com wss://*.doofinder.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.multisafepay.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://dev.visualwebsiteoptimizer.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: https://i.ytimg.com https://*.sharepoint.com https://*.blob.core.windows.net; connect-src 'self' wss: https://dev.visualwebsiteoptimizer.com; frame-src 'self' https://form.jotform.com https://player.vimeo.com https://www.youtube.com; media-src 'self' https://player.vimeo.com https://www.youtube.com; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https://form.jotform.com 1
frame-ancestors *.certcapture.com *.stripe.com stripe.com *.link.com *.amazon.com *.storyblok.com 'self'; object-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; form-action https://sis.redsys.es/ pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; media-src https://www.germainedecapuccini.es *.storyblok.com *.zdassets.com *.doofinder.com 'self' 'unsafe-inline'; connect-src https://www.google.com https://region1.analytics.google.com https://pagead2.googlesyndication.com https://analytics.tiktok.com https://capi.gdc.us/events https://cdn.equalweb.com https://access.equalweb.com https://europe-west3-iktracker-397307.cloudfunctions.net https://www.googletagmanager.com https://capi.germainedecapuccini.es https://ev.st.adsmurai.com/ www.google-analytics.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.certcapture.com https://maps.googleapis.com https://player.vimeo.com *.doofinder.com wss://*.doofinder.com yotpo.com maps.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.yotpo.com swellrewards.com *.swellrewards.com www.googletagmanager.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.oct8ne.com *.zendesk.com *.zopim.com *.doubleclick.net *.hotjar.com *.hotjar.io *.clarity.ms *.smartsuppcdn.com *.googleapis.com *.gstatic.com *.google-analytics.com *.google.es *.connectif.cloud *.klaviyo.com *.photoslurp.com *.zdassets.com *.pinterest.com *.nosto.com *.empathybroker.com *.empathy.co 'self' 'unsafe-inline'; frame-src https://13128304.fls.doubleclick.net/ https://td.doubleclick.net https://www.googletagmanager.com/ *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.certcapture.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com www.googletagmanager.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.hotjar.com *.oct8ne.com *.pinterest.com *.doofinder.com *.empathybroker.com *.empathy.co *.criteo.com 'self' 'unsafe-inline'; font-src https://static.klaviyo.com https://static-es.germainedecapuccini.es https://germaine-de-capuccini.co.uk *.yotpo.com *.googleapis.com *.gstatic.com use.fontawesome.com maxcdn.bootstrapcdn.com fonts.gstatic.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.azureedge.net *.doofinder.com *.typekit.net data: 'self' 'unsafe-inline'; script-src https://maps.googleapis.com https://cdn.equalweb.com https://analytics.tiktok.com https://access.equalweb.com https://storage.googleapis.com https://cdn-st.adsmurai.com/ https://cdn.jsdelivr.net/ www.googleadservices.com www.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.certcapture.com *.doofinder.com yotpo.com maps.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.yotpo.com swellrewards.com *.swellrewards.com www.googletagmanager.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.googleoptimize.com widgets.trustedshops.com static-eu.oct8ne.com static.zdassets.com *.facebook.net *.tradedoubler.com *.doubleclick.net *.hotjar.com *.ads-twitter.com smct.co *.bsmartdata.com *.retargeted.co *.bing.com *.clarity.ms *.smartsuppcdn.com *.smartsuppchat.com *.smartsupp.com *.connectif.cloud *.klaviyo.com *.photoslurp.com *.pinimg.com *.nosto.com *.empathybroker.com *.unpkg.com *.storyblok.com 'self' 'unsafe-inline' 'unsafe-eval'; img-src https://maps.gstatic.com https://maps.googleapis.com https://www.googletagmanager.com https://d3k81ch9hvuctc.cloudfront.net https://ad.doubleclick.net https://ade.googlesyndication.com https://germaine-de-capuccini.ui.smartie.io https://www.germainedecapuccini.es widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.certcapture.com https://images.unsplash.com *.doofinder.com yotpo.com maps.googleapis.com maps.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.yotpo.com swellrewards.com *.swellrewards.com www.googletagmanager.com *.facebook.com *.google.com *.google.es widgets.trustedshops.com *.twitter.com t.co *.azureedge.net *.pinterest.com *.bing.com *.storyblok.com data: 'self' 'unsafe-inline'; style-src https://fonts.googleapis.com https://access.equalweb.com *.certcapture.com *.doofinder.com yotpo.com *.googleapis.com https://static.klaviyo.com *.yotpo.com swellrewards.com *.swellrewards.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com *.photoslurp.com *.nosto.com *.klaviyo.com *.typekit.net *.storyblok.com 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com data: *.multivlaai.nl data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.multivlaai.nl 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net *.braintreegateway.com *.paypal.com google.com *.google.com https://www.paypal.com *.multivlaai.nl https://www.googletagmanager.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.paypal.com *.typekit.net *.gstatic.com https://portal.payconiq.com https://static.buckaroo.nl https://www.paypalobjects.com *.googleapis.com *.google-analytics.com *.google.com *.google.nl *.google.be *.multivlaai.nl https://api.taggrs.io/ https://stats.g.doubleclick.net https://www.facebook.com https://bat.bing.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com *.gstatic.com *.google-analytics.com *.googleapis.com *.googletagmanager.com *.multivlaai.nl *.cookie-script.com bat.bing.com *.facebook.net *.clarity.ms http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.fluxmill.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl *.googleapis.com *.multivlaai.nl *.cookie-script.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com wss://websocketservice-externalapi.prod.buckaroo.io https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://applepay.buckaroo.io https://www.paypal.com *.multivlaai.nl *.google.nl https://stats.g.doubleclick.net *.googlesyndication.com *.google-analytics.com https://bat.bing.net https://bat.bing.com *.clarity.ms https://consent.cookie-script.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://127.0.0.1/; report-to report-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-xUH1R9tyiToaoysNfh4dOA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: *.fontawesome.com *.klarnacdn.net *.builder.io *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src *.cookieinformation.com *.hubspot.com *.pinterest.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.trustpilot.com *.sprii.shop sgtm.sparevinduer.no fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.klarna.com *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.kustom.co www.xtento.com 'self' 'unsafe-inline'; img-src *.sparvinduer.dk *.stape.net *.google.com *.bing.com *.hubspot.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.google.com bid.g.doubleclick.net *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com imgsct.cookiebot.com https://images.unsplash.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.builder.io www.google.com.ua https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.kustom.co https://jabs-configurator-frontend.s3.eu-central-1.amazonaws.com www.xtento.com cdn.xtento.com https://load.sgtm.sparfenster.de data: 'self' 'unsafe-inline'; script-src *.cookieinformation.com *.emaerket.dk *.sleeknote.com *.sparxpres.dk *.commoninja.com *.hs-scripts.com *.usemessages.com *.hs-analytics.net *.hs-banner.com *.clarity.ms *.sprii.shop *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com beacon-qa.magento-datasolutions.com beacon-stage.magento-ds.com beacon.magento-ds.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com commerce.adobe.net magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ consent.cookiebot.com https://*.dibspayment.eu www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.builder.io *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.trustpilot.com *.kustom.co https://jabs-configurator-frontend.s3.eu-central-1.amazonaws.com www.xtento.com cdn.xtento.com https://load.sgtm.sparfenster.de 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.sparvinduer.dk *.sleeknote.com *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.fontawesome.com *.klarnacdn.net *.stripe.network *.stripecdn.com *.amazon.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.trustpilot.com https://jabs-configurator-frontend.s3.eu-central-1.amazonaws.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src ssgtm.sparvinduer.dk *.cookieinformation.com *.sleeknote.com *.mobal.io *.commoninja.com *.hubspot.com *.clarity.ms www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com load.sgtm.sparvinduer.dk dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net p13n.adobe.io *.adobedc.net *.demdex.net *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.builder.io *.stripe.com klarna.com *.link.com *.amazon.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.kustom.co *.appsync-api.eu-central-1.amazonaws.com https://load.sgtm.sparfenster.de 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src https://www.google.com/recaptcha/ *.multisafepay.com https://pay.google.com js.mollie.com 'self' 'unsafe-inline'; img-src data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypalobjects.com *.multisafepay.com https://www.mollie.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypalobjects.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.multisafepay.com https://pay.google.com js.mollie.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.multisafepay.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com www.paypalobjects.com *.multisafepay.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://monitor.bigbridgedev.nl/csp; report-to report-endpoint; 1
default-src 'self'; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://consent.cookiebot.com https://consentcdn.cookiebot.com https://cdn.userway.org https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://static.ads-twitter.com https://snap.licdn.com https://chat.xxi-banorte.com https://connect.facebook.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://cdnjs.cloudflare.com https://www.youtube.com https://*.jotform.com https://cdn.jotfor.ms https://yoast.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://consent.cookiebot.com https://consentcdn.cookiebot.com https://cdn.userway.org https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://static.ads-twitter.com https://snap.licdn.com https://chat.xxi-banorte.com https://connect.facebook.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://cdnjs.cloudflare.com https://www.youtube.com https://*.jotform.com https://cdn.jotfor.ms https://yoast.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.userway.org https://chat.xxi-banorte.com https://cdn.jotfor.ms https://api.mapbox.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://cdn.userway.org; frame-src 'self' blob: https://www.googletagmanager.com https://consentcdn.cookiebot.com https://www.google.com https://ep2.adtrafficquality.google https://www.youtube.com https://www.youtube-nocookie.com https://open.spotify.com https://embed.spotify.com https://googleadservices.com https://*.googleadservices.com https://*.doubleclick.net https://*.googlesyndication.com https://*.jotform.com https://cdn.userway.org; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://consent.cookiebot.com https://googleads.g.doubleclick.net https://connect.facebook.net https://snap.licdn.com https://*.jotform.com https:; worker-src 'self' blob:; frame-ancestors 'self'; 1
object-src 'none';base-uri 'self';script-src 'nonce-qkiK3LHlEoLS2RHeDUrE5g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://*.g.doubleclick.net https://maps.googleapis.com https://www.googleapis.com https://maps.gstatic.com https://*.googleusercontent.com https://*.ggpht.com https://assets.adobedtm.com https://*.demdex.net https://*.omtrdc.net https://*.trustarc.com https://consent.trustarc.com https://cdn.jsdelivr.net https://s.pinimg.com https://ct.pinterest.com https://sc-static.net https://tr.snapchat.com https://js.adsrvr.org https://insight.adsrvr.org; style-src 'self' 'unsafe-inline' https://unpkg.com https://fast.fonts.net https://fonts.googleapis.com https://fonts.gstatic.com; font-src 'self' data: https://fast.fonts.net https://fonts.googleapis.com https://fonts.gstatic.com; img-src 'self' data: blob: https://s3.amazonaws.com https://maark-msc-assets.s3.amazonaws.com https://maark-msc-assets-dev.s3.amazonaws.com https://maps.googleapis.com https://www.googleapis.com https://maps.gstatic.com https://*.googleusercontent.com https://*.ggpht.com https://tiles.stadiamaps.com https://www.googletagmanager.com https://www.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://*.g.doubleclick.net https://www.google.ae https://www.google.at https://www.google.be https://www.google.bg https://www.google.ca https://www.google.ch https://www.google.cl https://www.google.cn https://www.google.co https://www.google.co.id https://www.google.co.il https://www.google.co.in https://www.google.co.jp https://www.google.co.kr https://www.google.co.nz https://www.google.co.th https://www.google.co.uk https://www.google.co.za https://www.google.com https://www.google.com.ar https://www.google.com.au https://www.google.com.br https://www.google.com.co https://www.google.com.eg https://www.google.com.hk https://www.google.com.mx https://www.google.com.my https://www.google.com.pe https://www.google.com.ph https://www.google.com.sa https://www.google.com.sg https://www.google.com.tr https://www.google.com.tw https://www.google.com.ua https://www.google.com.vn https://www.google.cz https://www.google.de https://www.google.dk https://www.google.ee https://www.google.es https://www.google.fi https://www.google.fr https://www.google.gr https://www.google.hr https://www.google.hu https://www.google.ie https://www.google.it https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.nl https://www.google.no https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.rs https://www.google.ru https://www.google.se https://www.google.si https://www.google.sk https://assets.adobedtm.com https://*.demdex.net https://*.omtrdc.net https://my.matterport.com https://*.matterport.com https://visitingmedia.com https://360.visitingmedia.com https://cdn.pannellum.org https://senserievirtualmedia.com https://venue.prismm.com https://threshold360.com https://gotyoulooking.com https://*.firstview.us https://*.contabostorage.com https://batdongsan.vr360.one https://*.rowilab.com https://*.truetour.com https://cloud.3dvista.com https://*.actsugi.com https://s.pinimg.com https://ct.pinterest.com https://sc-static.net https://tr.snapchat.com https://js.adsrvr.org https://insight.adsrvr.org https://mi.bookmarriott.com; media-src 'self' blob: https://s3.amazonaws.com https://maark-msc-assets.s3.amazonaws.com https://maark-msc-assets-dev.s3.amazonaws.com; connect-src 'self' https://maps.googleapis.com https://www.googleapis.com https://maps.gstatic.com https://*.googleusercontent.com https://*.ggpht.com https://www.googletagmanager.com https://www.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://*.g.doubleclick.net https://assets.adobedtm.com https://*.demdex.net https://*.omtrdc.net https://*.trustarc.com https://consent.trustarc.com https://s.pinimg.com https://ct.pinterest.com https://sc-static.net https://tr.snapchat.com https://js.adsrvr.org https://insight.adsrvr.org https://*.ingest.us.sentry.io https://s3.amazonaws.com https://maark-msc-assets.s3.amazonaws.com https://maark-msc-assets-dev.s3.amazonaws.com; frame-src 'self' https://www.googletagmanager.com https://my.matterport.com https://*.matterport.com https://visitingmedia.com https://360.visitingmedia.com https://cdn.pannellum.org https://senserievirtualmedia.com https://venue.prismm.com https://threshold360.com https://gotyoulooking.com https://*.firstview.us https://*.contabostorage.com https://batdongsan.vr360.one https://*.rowilab.com https://*.truetour.com https://cloud.3dvista.com https://*.actsugi.com https://www.youtube.com https://youtu.be https://player.vimeo.com https://*.trustarc.com https://consent.trustarc.com https://s.pinimg.com https://ct.pinterest.com https://sc-static.net https://tr.snapchat.com https://js.adsrvr.org https://insight.adsrvr.org; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://marriottbonvoyevents.com https://www.marriottbonvoyevents.com https://*.salesforce.com https://*.force.com https://*.visualforce.com 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob: https://www.googletagmanager.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://securepubads.g.doubleclick.net https://imasdk.googleapis.com https://cdn.onesignal.com; style-src 'self' 'unsafe-inline' https: https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https:; frame-src 'self' https: https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://securepubads.g.doubleclick.net https://www.youtube.com https://www.youtube-nocookie.com; connect-src 'self' https: https://www.google-analytics.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://securepubads.g.doubleclick.net https://cdn.onesignal.com; media-src 'self' https: blob:; worker-src 'self' blob:; 1
script-src 'nonce-OgkocSEkljtFzbZJdUnibA==' 'strict-dynamic' 'unsafe-eval' 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; report-uri /_/csp-report 1
default-src 'self' https://static.xx.fbcdn.net pagecdn.io data:; connect-src 'self' https://www.google.com/recaptcha/; font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' https://heyzine.com https://pagecdn.io https://google.com https://maps.googleapis.com https://www.youtube.com https://www.muzeulgazelor.ro https://www.google.com/ data: https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; img-src 'self' https://www.romgaz.ro data: https://pagecdn.io https://i.ytimg.com; object-src 'none'; script-src 'self' 'unsafe-eval' https://www.romgaz.ro https://cdnjs.cloudflare.com https://cdn.ckeditor.com https://cdn.jsdelivr.net https://polyfill-fastly.io https://unpkg.com https://www.google.com https://www.gstatic.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ cdnjs.cloudflare.com; script-src-attr 'none'; script-src-elem 'self' https://www.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cdn.ckeditor.com https://polyfill-fastly.io https://unpkg.com https://www.google.com cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://www.romgaz.ro fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.gstatic.com; style-src-attr 'self' 'unsafe-inline'; frame-ancestors 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com static.lipscore.com *.fontawesome.com https://fonts.bunny.net *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://*.qliro.com https://*.vipps.no https://*.trustly.com https://*.ideal.nl https://*.apple.com https://*.unzer.com https://*.heidelpay.com https://seo.mageplaza.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://*.qliro.com *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googletagmanager.com *.doubleclick.net *.typeform.com *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://d1pna5l3xsntoj.cloudfront.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com static.lipscore.com blob: img.youtube.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com maps.googleapis.com *.amazonaws.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://core.helloretail.com https://d1pna5l3xsntoj.cloudfront.net https://*.qliro.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://sleeknotecustomerscripts.sleeknote.com static.lipscore.com s7.addthis.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com ajax.googleapis.com maps.googleapis.com *.yotpo.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://d1pna5l3xsntoj.cloudfront.net downloads.mailchimp.com static.lipscore.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://core.helloretail.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com wapi.lipscore.com users.lipscore.com ekr.zdassets.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-ihqJXQ4R79EQTO-cp70W5Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com https://fonts.bunny.net https://maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline' 'unsafe-eval'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.googlesyndication.com *.tiktok.com 'self' connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net www.facebook.com *.googlesyndication.com *.tiktok.com *.innoship.ro connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline' 'unsafe-eval'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com 'self' data: *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com cdn.doofinder.com *.tile.openstreetmap.org *.openstreetmap.org https://firebasestorage.googleapis.com connect.facebook.net graph.facebook.com business.facebook.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://www.google.ro data: 'self' 'unsafe-inline' 'unsafe-eval'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com *.google.com *.google.bg *.googletagmanager.com www.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com https://cdn.jsdelivr.net *.tiktok.com cdn.doofinder.com *.avada.io *.shopify.com connect.facebook.net graph.facebook.com business.facebook.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://eu1-config.doofinder.com https://maxcdn.bootstrapcdn.com https://quantcast.mgr.consensu.org https://static.hotjar.com https://cdn.sameday.ro https://script.hotjar.com https://d3bo67muzbfgtl.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.doofinder.com *.fontawesome.com https://fonts.bunny.net unsafe-inline assets.braintreegateway.com https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net https://d3bo67muzbfgtl.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline' 'unsafe-eval'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com www.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com *.doofinder.com wss://*.doofinder.com https://get.geojs.io *.avada.io connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com https://api.edrone.me 'self' 'unsafe-inline' 'unsafe-eval'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline' 'unsafe-eval'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.google.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klarna.com https://www.googletagmanager.com/ *.meetanshi.com js.mollie.com *.multisafepay.com https://pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com cdn.doofinder.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://images.unsplash.com *.klarna.com *.klarnaevt.com *.klarnacdn.net http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com *.meetanshi.com flagpedia.net https://www.mollie.com *.multisafepay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com consent.cookiebot.com imgsct.cookiebot.com www.google.it www.borsezaini.it https: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de cdn.doofinder.com chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com https://player.vimeo.com *.klarna.com *.klarnacdn.net x.klarnacdn.net http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.klarnaservices.com *.disqus.com https://cdn.jsdelivr.net *.avada.io *.shopify.com *.meetanshi.com *.gstatic.com maps.googleapis.com js.mollie.com pay.google.com applepay.cdn-apple.com *.multisafepay.com https://pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com cdn.iubenda.com idb.iubenda.com cs.iubenda.com script.hotjar.com consent.cookiebot.com consentcdn.cookiebot.com pagead2.googlesyndication.com eu1-config.doofinder.com secure.authorize.net test.authorize.net www.gstatic.com *.trustpilot.com static.hotjar.com widget.trustpilot.com cdn.popupsmart.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.doofinder.com downloads.mailchimp.com *.klarnacdn.net https://cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com *.multisafepay.com assets.braintreegateway.com pay.multisafepay.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.borsezaini.it 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net region1.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.doofinder.com wss://*.doofinder.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com https://player.vimeo.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.klarnaservices.com *.klarna.com https://get.geojs.io *.avada.io *.meetanshi.com www.gstatic.com maps.googleapis.com *.multisafepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com capig.stape.org region1.analytics.google.com pagead2.googlesyndication.com consentcdn.cookiebot.com idb.iubenda.com cpl.iubenda.com vc.hotjar.io invitejs.trustpilot.com cdn.popupsmart.com eu1-layer.doofinder.com widget.trustpilot.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/  https://widget.trustpilot.com;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://appleid.cdn-apple.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com *.myheritage.ch https://www.myheritage.de  'unsafe-eval' 'nonce-5c6b0fc9244ce00d03c1541cf1874ebc' 'strict-dynamic' https://widget.trustpilot.com https://invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style  https://widget.trustpilot.com;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io https://www.google.com/recaptcha/enterprise/* https://www.google.com/recaptcha/enterprise/ https://www.google.com/recaptcha/enterprise/clr https://www.google.com/recaptcha/ https://maps.googleapis.com https://people.googleapis.com https://translate-pa.googleapis.com *.myheritage.ch https://widget.trustpilot.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:  https://widget.trustpilot.com https://*.trustpilot.com;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=report&canonical_page_id=/company/home/ 1
object-src 'none';base-uri 'self';script-src 'nonce-VSRcCyB48bDEEP3F0OCo8Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' *.admedia.com *.adsrvr.org advanced.neuro-id.com *.analytics-sm.com *.lidstatic.com *.leadid.com *.trustedform.com analytics-sm.com analytics.tiktok.com api-js.mixpanel.com api.amplitude.com api.glia.com api.measureone.com api.salemove.com api.yotpo.com arttrk.com *.arttrk.com auth.split.io bat.bing.com bcdn.integration.projectcorvette.us bcwup.integration.projectcorvette.us browser-intake-datadoghq.com cdn.amplitude.com cdn.lr-ingest.com cdn.plaid.com cdn.tiny.cloud client-logger.salemove.com dn.neuroid.cloud ekr.zdassets.com gabihelp.zendesk.com gabihelp1605922745.zendesk.com glia-applets.com globalsiteanalytics.com google.com googleadservices.com global.prod.uidapi.com insight.adsrvr.org js.adsrvr.org js.stripe.com js.verygoodvault.com js3.verygoodvault.com kluster.salemove.com *.kochava.com libs.glia.com libs.salemove.com logs.neuro-id.com match.adsrvr.org nexus.ensighten.com pixel.adsrvr.org prod.euid.eu pt.ispot.tv pubsub.salemove.com rc.dn.neuroid.cloud receiver.neuroid.cloud region1.analytics.google.com region1.google-analytics.com *.rokt.com rum.browser-intake-datadoghq.com sc-static.net servedby.thedmp.com sync.adsrvr.org scripts.neuro-id.com sdk.split.io session-replay.browser-intake-datadoghq.com siteintercept.qualtrics.com smarty.insurance.experian.com smarty.staging.gabi.com smetrics1.experian.com static.zdassets.com staticw2.yotpo.com stats.g.doubleclick.net storage.googleapis.com streaming.split.io *.tapad.com tms.experian.com tr.snapchat.com us-autocomplete-pro.api.smarty.com us-autocomplete-pro.api.smartystreets.com *.usecanopy.com vgs-collect-keeper.apps.verygood.systems wss://kluster.salemove.com wss://pubsub.salemove.com www.google-analytics.com www.google.ca www.google.co.in www.google.co.uk www.google.com www.google.com.mx www.google.com.ph www.google.com.pr www.googleadservices.com www.googletagmanager.com www.routingnumbers.info zn3ibrpkldazquxaq-consumerinfo.siteintercept.qualtrics.com blob:; img-src * data: blob:; style-src 'self' 'unsafe-inline' *.admedia.com *.adsrvr.org analytics-sm.com *.analytics-sm.com analytics.tiktok.com arttrk.com *.arttrk.com auth.split.io cdn.honey.io cdn.jsdelivr.net cdn.tiny.cloud cdnjs.cloudflare.com fonts.googleapis.com glia-applets.com google.com googleadservices.com hello.myfonts.net *.kochava.com libs.glia.com libs.salemove.com pt.ispot.tv *.rokt.com sc-static.net sdk.split.io smetrics1.experian.com staticw2.yotpo.com storage.googleapis.com streaming.split.io *.tapad.com tr.snapchat.com www.google.co.uk www.gstatic.com www.tiny.cloud; font-src 'self' cdn.gabi.com fonts.gstatic.com hello.myfonts.net static.zip.co staticw2.yotpo.com www.tiny.cloud data:; frame-src 'self' *.usecanopy.com 10178839.fls.doubleclick.net 6375438.fls.doubleclick.net api.measureone.com cdn.plaid.com js.stripe.com js.verygoodvault.com js3.verygoodvault.com *.rokt.com www.facebook.com; media-src 'self' glia-applets.com libs.glia.com libs.salemove.com; report-to https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub6266f5d846cb5713666132c0f0ffe817&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:production; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub6266f5d846cb5713666132c0f0ffe817&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env:production; 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-Abltvj71gnR7xOnlS2EoI1hR7MI=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://opquast.matomo.cloud https://chat-assets.frontapp.com https://app.mailjet.com https://website.oqs-cdn.com https://shop.opquast.com https://unpkg.com https://player.vimeo.com https://testimonial.to https://js.stripe.com https://openagenda.com https://www.youtube.com https://calendar.google.com https://www.googletagmanager.com https://www.google-analytics.com https://snap.licdn.com https://www.redditstatic.com blob:; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://website.oqs-cdn.com https://calendar.google.com https://fonts.googleapis.com https://www.googletagmanager.com blob:; img-src 'self' data: https: blob:; font-src 'self' data: https://website.oqs-cdn.com https://chat-assets.frontapp.com https://fonts.gstatic.com https://www.redditstatic.com; connect-src 'self' https://shop.opquast.com https://opquast.matomo.cloud https://chat-assets.frontapp.com https://chat.frontapp.com https://us-west-1-chat-server.frontapp.com https://eu-west-1-chat-server.frontapp.com https://sessions.bugsnag.com https://cdn.jsdelivr.net https://*.typesense.net https://*.typesense.org https://website.oqs-cdn.com https://unpkg.com wss://*.ably.io https://*.ably-realtime.com https://logs.browser-intake-datadoghq.com https://rum.browser-intake-datadoghq.com https://chat-webhook.frontapp.com https://www.google-analytics.com https://analytics.google.com https://*.google-analytics.com https://region1.analytics.google.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://www.google.com https://www.google.fr https://www.google.be https://www.google.ca https://www.google.ch https://www.google.de https://www.google.es https://www.google.it https://www.google.nl https://www.google.lu https://www.google.pt https://www.google.co.uk https://www.google.co.ma https://www.google.sn https://www.google.ci https://www.google.tn https://www.google.dz https://www.google.mg https://www.google.ml https://www.google.lv https://www.googleadservices.com https://pixel-config.reddit.com https://px.ads.linkedin.com https://alb.reddit.com https://ads.reddit.com https://www.redditstatic.com https://www.google.com.ar; frame-src 'self' https://xjkhi.mjt.lu https://player.vimeo.com https://chat-assets.frontapp.com https://chat.frontapp.com https://embed-v2.testimonial.to https://js.stripe.com https://openagenda.com https://*.openagenda.com https://www.youtube.com https://*.slideshare.net https://calendar.google.com https://open.spotify.com https://platform.twitter.com https://www.dailymotion.com https://api.opquast.com; frame-ancestors *; base-uri 'self'; form-action 'self' https://xjkhi.mjt.lu; report-uri https://app.glitchtip.com/api/21011/security/?glitchtip_key=af0e604bc0354bbf8ff471b35e151029; 1
default-src https: data: wss: 'unsafe-inline' 'unsafe-eval'; form-action https:; report-uri https://n5mcn64l2tp5piztj1c2b0wj.httpschecker.net/report 1
font-src *.yotpo.com *.googleapis.com *.gstatic.com *.typekit.net *.fontawesome.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.yotpo.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com consentcdn.cookiebot.com www.googletagmanager.com googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.yotpo.com *.bird.eu ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com * www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.yotpo.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com chimpstatic.com downloads.mailchimp.com *.list-manage.com s7.addthis.com * *.avada.io assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.yotpo.com *.googleapis.com *.typekit.net *.fontawesome.com cdn.dnky.co webchat.dotdigital.com downloads.mailchimp.com unsafe-inline 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.yotpo.com ws: *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com ekr.zdassets.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://plausible.io https://connect.facebook.net; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://plausible.io https://connect.facebook.net; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src 'self' data: blob: https://canmeorg.odoo.com https://www.canme.cloud https://canme.cloud https://staging.canme.cloud https://www.google-analytics.com https://www.googletagmanager.com https://www.facebook.com; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://*.analytics.google.com https://plausible.io https://www.facebook.com; media-src 'self' https://cnmwebsiteblob.blob.core.windows.net; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; frame-src 'none'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://api.hsforms.com https://submit-form.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://assets.apollo.io https://z-na.amazon-adsystem.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https://cdn.sanity.io https://*.strapiapp.com https://strapi-media-bucket.fly.storage.tigris.dev https://strapi-media-bucket.fly.storage.tigris.de https://i.pravatar.cc https://placehold.co https://www.googletagmanager.com https://www.google-analytics.com; media-src 'self' https:; connect-src 'self' https://api.hsforms.com https://submit-form.com https://api.usepylon.com https://*.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://assets.apollo.io https://z-na.amazon-adsystem.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://meetings.hubspot.com; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests 1
base-uri 'self'; child-src 'self' https://www.youtube-nocookie.com/embed/ blob:; connect-src 'self' ws://127.0.0.1:8080 http://127.0.0.1:8080 https://api.themoviedb.org/ wss://webchat.homiehelpdesk.net https://webchat.homiehelpdesk.net ws://webchat.homiehelpdesk.net wss://chat.homiehelpdesk.net https://chat.homiehelpdesk.net ws://chat.homiehelpdesk.net blob: https://challenges.cloudflare.com; default-src 'none'; font-src 'self'; form-action 'self'; frame-ancestors 'self' https://webchat.homiehelpdesk.net https://play.homiehelpdesk.net; frame-src 'self' https://www.youtube-nocookie.com/embed/ https://www.youtube.com/embed/ https://challenges.cloudflare.com/ https://webchat.homiehelpdesk.net https://play.homiehelpdesk.net https://app.plex.tv https://*.plex.direct https://thefin.homiehelpdesk.net; img-src 'self' * data: https: http:; media-src 'self' data: https: http: blob: https://www.youtube-nocookie.com/embed/ https://ice1.somafm.com/ https://ice2.somafm.com/ https://stream.radioparadise.com/ https://*.somafm.com/ https://app.plex.tv https://*.plex.direct https://thefin.homiehelpdesk.net https://*.radioparadise.com/ *; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'sha256-BOcelNlMrrVgydbJ+4m6FEx5yJqDQEYGAa0ukbOO0Z0=' 'sha256-hlennMQSbXEi/UhOE/RHIXtXEEVKXlpbO/wwEn9YkjA=' 'sha256-vW9zCmyXIPdQo2CGcOdlyGFRk37iqhI+/VU6nWj4Lws=' 'sha256-u3SkoVsWRR6+xzLlyZDfnJHzNQ1gDGU0MBP/hlrvwRA=' https://cdn.jsdelivr.net/ https://unpkg.com/ https://challenges.cloudflare.com/ blob:; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net/ https://unpkg.com/ https://static.cloudflareinsights.com/ https://challenges.cloudflare.com/ blob:; style-src 'self' 'unsafe-inline' gitcdn.xyz github.io *.github.io github.com https://webchat.homiehelpdesk.net https://play.homiehelpdesk.net; worker-src 'self' blob: https://unpkg.com/; block-all-mixed-content; upgrade-insecure-requests; report-uri /api/csp-report 1
default-src 'self'; script-src 'self' 'nonce-Tf_e7y89hUIcH2-OpbWcsQ' 'strict-dynamic' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://recaptcha.google.com https://*.vwo.com https://*.visualwebsiteoptimizer.com https://*.trustarc.com https://bat.bing.com https://googleads.g.doubleclick.net https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://js.hscollectedforms.net https://js.usemessages.com https://*.g2crowd.com; style-src 'self' 'unsafe-inline' https://*.vwo.com https://*.visualwebsiteoptimizer.com; font-src 'self' data: https://*.trustarc.com; img-src 'self' data: blob: https://*.mettl.pro https://*.mettl.xyz https://*.mettl.com https://*.mercermettl.com https://*.mercermettl.eu https://img.youtube.com https://i.ytimg.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://www.google.co.in https://www.gstatic.com https://f.hubspotusercontent10.net https://track.hubspot.com https://*.vwo.com https://*.visualwebsiteoptimizer.com https://*.vwo.io https://ade.googlesyndication.com https://forms.hsforms.com https://*.trustarc.com https://*.clarity.ms https://*.bing.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://www.googletagmanager.com https://www.google.com https://www.google.co.in https://pagead2.googlesyndication.com https://*.vwo.com https://*.visualwebsiteoptimizer.com https://api.hsforms.com https://api.hubspot.com https://forms.hubspot.com https://forms.hscollectedforms.net https://*.clarity.ms https://*.trustarc.com https://bat.bing.com https://ad.doubleclick.net https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.googleadservices.com https://*.g2.com https://*.g2crowd.com https://recaptcha.net https://static.hsappstatic.net; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://*.trustarc.com https://*.doubleclick.net https://recaptcha.net https://app.hubspot.com https://app.wingify.com https://*.vwo.com https://*.visualwebsiteoptimizer.com; worker-src 'self' blob:; media-src 'self' blob: https://*.mettl.com https://*.mettl.pro https://*.mettl.xyz https://*.mercermettl.com https://*.mercermettl.eu; object-src 'none'; base-uri 'self'; form-action 'self' https://www.google.com; frame-ancestors 'self' https://app.vwo.com https://app.wingify.com; report-uri https://logs.mercermettl.com/csp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://pgncom.co.id https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://pgncom.co.id https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https://pgncom.co.id; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://plausible.io https://accounts.google.com https://www.googletagmanager.com https://www.google-analytics.com https://static.cloudflareinsights.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://accounts.google.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://api.scamlens.org https://plausible.io https://accounts.google.com https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://cloudflareinsights.com https://challenges.cloudflare.com; frame-src https://accounts.google.com https://challenges.cloudflare.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; report-uri https://api.scamlens.org/v1/public/csp-report; report-to csp-endpoint 1
object-src  'none'; connect-src 'self' *.burningangel.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.burningangel.com join.gammasecure.com; script-src 'self' *.burningangel.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.burningangel.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
font-src fonts.gstatic.com use.typekit.net fonts.googleapis.com *.googleapis.com *.gstatic.com data: *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com *.zopim.com *.zopim.io https://use.fontawesome.com/ https://bam.nr-data.net/ *.sharethis.com *.elfsight.com *.nr-data.net *.addthis.com *.hsforms.net *.hsforms.com *.youtube.com *.office.net *.cdninstagram.com *.listrakbi.com *.jsdelivr.net *.affirm.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.addthis.com *.hsforms.net *.hsforms.com *.youtube.com *.office.net *.cdninstagram.com *.listrakbi.com *.jsdelivr.net *.affirm.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.affirm.com *.affirm.ca *.certcapture.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * http://www.sandbox.paypal.com *.twitter.com *.zendesk.com http://www.w3.org/2000/svg https://bam.nr-data.net/ *.sharethis.com *.elfsight.com *.nr-data.net *.addthis.com *.hsforms.net *.hsforms.com *.office.net *.cdninstagram.com *.listrakbi.com *.jsdelivr.net *.google.com/ *.googleapis.com *.google.com *.weltpixel.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com *.affirm.com *.affirm.ca *.certcapture.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.cloudflare.com *.addthis.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.bing.com *.zopim.com *.zopim.io *.doubleclick.net *.google.com *.google.co.in *.mastercard.com http://www.w3.org/2000/svg https://bam.nr-data.net/ *.sharethis.com *.cvoptical.com *.ggpht.com *.elfsight.com *.nr-data.net *.hsforms.net *.hsforms.com *.office.net *.cdninstagram.com *.listrakbi.com *.jsdelivr.net shipping-offers-static-images-bucket-platformsandbox.s3.amazonaws.com shipping-offers-static-images-bucket-stage.s3.amazonaws.com shipping-offers-static-images-bucket-prod.s3.amazonaws.com shipping-offers-static-images-bucket-dev.s3.amazonaws.com shipping-offers-static-images-bucket-demo.s3.amazonaws.com helloextend-static-assets.s3.amazonaws.com extendcoreoffersprod-offersthemelogobucketeb21afa-1lr7le13dvgtp.s3.amazonaws.com extendcoreoffersdemo-offersthemelogobucketeb21afa-19jnurg0a0o17.s3.amazonaws.com extendcoreoffersdev-offersthemelogobucketeb21afaa-2ttuvks0mzbd.s3.amazonaws.com extendcoreoffersstage-offersthemelogobucketeb21af-1f81w2c7u5t7p.s3.amazonaws.com ccspersistenceprod-contentstaticassets04b201d4-1apqb8dyegznm.s3.us-east-1.amazonaws.com ccspersistenceprod-contentstaticassets04b201d4-1apqb8dyegznm.s3.amazonaws.com https://s3.amazonaws.com/ccspersistenceprod-contentstaticassets04b201d4-1apqb8dyegznm/ ccspersistencedemo-contentstaticassets04b201d4-16x955emz0wxo.s3.us-east-1.amazonaws.com ccspersistencedemo-contentstaticassets04b201d4-16x955emz0wxo.s3.amazonaws.com https://s3.amazonaws.com/ccspersistencedemo-contentstaticassets04b201d4-16x955emz0wxo/ ccspersistencedev-contentstaticassets04b201d4-yga8a4yvjef2.s3.us-east-1.amazonaws.com ccspersistencedev-contentstaticassets04b201d4-yga8a4yvjef2.s3.amazonaws.com https://s3.amazonaws.com/ccspersistencedev-contentstaticassets04b201d4-yga8a4yvjef2/ ccspersistencestage-contentstaticassets04b201d4-d2hq2h502u66.s3.us-east-1.amazonaws.com ccspersistencestage-contentstaticassets04b201d4-d2hq2h502u66.s3.amazonaws.com https://s3.amazonaws.com/ccspersistencestage-contentstaticassets04b201d4-d2hq2h502u66/ ccspersistenceplatformsan-contentstaticassets04b20-hummk0wnkucu.s3.us-east-1.amazonaws.com ccspersistenceplatformsan-contentstaticassets04b20-hummk0wnkucu.s3.amazonaws.com https://s3.amazonaws.com/ccspersistenceplatformsan-contentstaticassets04b20-hummk0wnkucu/ ccspersistenceofferssand-contentstaticassets04b20-1hoyak4welg5e.s3.us-east-1.amazonaws.com ccspersistenceofferssand-contentstaticassets04b20-1hoyak4welg5e.s3.amazonaws.com https://s3.amazonaws.com/ccspersistenceofferssand-contentstaticassets04b20-1hoyak4welg5e/ https://redchamps.com s3.amazonaws.com https://s3.amazonaws.com/ccspersistenceprod-contentstaticassets04b201d4-1apqb8dyegznm/offers/learnMoreModal-default-1654273334107-learnMoreModal.backgroundImageUrl_Generic_WomanwithBox2.jpg https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com https://rum.hlx.page https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.affirm.com *.affirm.ca *.certcapture.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bing.com *.zopim.com *.zdassets.com *.google.com/ *.zendesk.com http://www.w3.org/2000/svg https://js-agent.newrelic.com/ https://bam.nr-data.net/ *.sharethis.com *.elfsight.com https://static.elfsight.com/ *.addthis.com *.moatads.com *.addthisedge.com *.hsforms.net *.hsforms.com *.office.net *.cdninstagram.com *.listrakbi.com *.jsdelivr.net https://sdk.helloextend.com/ assets.shipperhq.com https://www.googletagmanager.com tagmanager.google.com unpkg.com https://cdn-scripts.signifyd.com https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com unsafe-inline assets.braintreegateway.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.fontawesome.com *.bing.com https://use.fontawesome.com/ https://bam.nr-data.net/ *.sharethis.com *.elfsight.com *.nr-data.net *.addthis.com *.hsforms.net *.hsforms.com *.youtube.com *.office.net *.cdninstagram.com *.listrakbi.com *.jsdelivr.net *.affirm.com maxcdn.bootstrapcdn.com assets.shipperhq.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zopim.com *.zopim.io https://static.zdassets.com/ https://bam.nr-data.net/ *.sharethis.com *.nr-data.net *.addthis.com *.hsforms.net *.hsforms.com *.youtube.com *.office.net *.cdninstagram.com *.listrakbi.com *.jsdelivr.net *.affirm.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.affirm.com *.affirm.ca *.certcapture.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.cloudflare.com *.twitter.com *.twimg.com *.zdassets.com *.zopim.com *.zopim.io wss://widget-mediator.zopim.com *.google-analytics.com https://stats.g.doubleclick.net *.zendesk.com http://www.w3.org/2000/svg https://bam.nr-data.net/ *.sharethis.com *.elfsight.com *.addthis.com *.hsforms.net *.hsforms.com *.youtube.com *.office.net *.cdninstagram.com *.listrakbi.com *.jsdelivr.net https://*.helloextend.com/ https://*.extend.com/ ovs.shipperhq.com rms.shipperhq.com https://rms.shipperhq.com wss://rms.shipperhq.com *.doubleclick.net https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.jsdelivr.net *.affirm.com *.listrakbi.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss://c01.embed.navu.co wss://*.navu.co https://*.navu.co; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https:; media-src 'self' https: blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; upgrade-insecure-requests; 1
default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; upgrade-insecure-requests 1
default-src 'self' https:; script-src 'self' 'unsafe-eval' 'unsafe-hashes' 'sha256-FgsRaC2wBMgmedvk2SXcGKsyBm50noDD3zf6UJRVP7k=' 'sha256-sIipYTcDXago7BpGL7wl7yB1iyTRXgSUHMp2v3kNC4I=' 'sha256-2Qvq1ZFy2JexWoTCsWb3nXre5pYhIM6l1B98+1EqIlc=' 'sha256-Rsmtt0AsshyP5tiWY1DxT2qh/HpD6r5kvaGCeicOiWQ=' 'sha256-1xuiy3MqFFVkOxnVMJ3DhLzEgZsJVXKwvM1aQ3m67FU=' 'sha256-D9AOuhvW2pdpSpw5pcjiiGRL2wIJlo803FQriOAeJQA=' 'sha256-9fUduH8H6H2qqoIUT9CZTWSWc3qy8gAzpn6PpB2vlsc=' 'sha256-5qYFuvhns+xjRODaV9/ehkmO/8NzZaAcNWTuzup3yUA=' 'sha256-vdLoM684v2tlPllVwTa6zCbIIaJV17lcDPV+vQE1jkE=' 'sha256-OfPAsCm/8I9s314sbXuIAbU5vl5iefFBgEMKVFAeRLw=' 'sha256-Ch5ldUlPTacuox1ug3oUOGNJcvIb7m1xEzlsxVYSzLY=' 'sha256-VFMgclD6e3bBOHH9570M8KQ7e0WGZJKxshOciJ7vxYA=' 'sha256-4pddxvOWXRP/eY8qInSuIyad1dVUQDMV35GYRMdWl0M=' 'sha256-GYNiwrOA+cdO5DjYkz3C1hF4qOJkPNui5I+oAGXswQM=' 'sha256-Xl3KAp9nsVVEV64As4eztFIxtx/n4fbkEgxCgs8fniE=' 'sha256-aEf2gs+Z0gX8jabqlKcEdFYyn7NrW2yzMWj3YZY8hXI=' https://widget.iflat.io https://apimacro.interstroi.com.ru https://code.jivo.ru https://*.roistat.com https://cdn.botfaqtor.ru https://st.top100.ru https://counter.rambler.ru https://mc.yandex.ru https://smartcaptcha.yandexcloud.net https://api-maps.yandex.ru https://yastatic.net; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https://counter.rambler.ru https://mc.yandex.ru https://yastatic.net https://files.jivosite.com https://code.jivo.ru; font-src 'self' data: https:; connect-src 'self' https://mc.yandex.md  https://iflat.io https://cnt.rambler.ru https://kraken.rambler.ru https://5-182-5-41.botfaqtor.ru https://node-sber1-az1-24.jivosite.com https://telemetry.jivosite.com https://gw.botfaqtor.ru https://code.jivo.ru https://mc.yandex.ru wss://mc.yandex.ru wss://vi-sber1-23.jivosite.com; report-uri /csp-reports; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com cash-f.squarecdn.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * www.google.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://firebasestorage.googleapis.com https://maps.omnivasiunta.lt crystals.co.uk i.crystalidea.shop maps.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ chimpstatic.com downloads.mailchimp.com *.list-manage.com *.avada.io https://unpkg.com https://static.cloudflareinsights.com ajax.googleapis.com https://www.googletagmanager.com tagmanager.google.com maps.googleapis.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app downloads.mailchimp.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * https://get.geojs.io *.avada.io https://geocode.arcgis.com https://cloudflareinsights.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://js.monitor.azure.com https://az416426.vo.msecnd.net https://cdn.devexpress.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.fontawesome.com https://cdn.devexpress.com; font-src 'self' data: https://fonts.gstatic.com https://use.fontawesome.com; img-src 'self' data: https://www.google-analytics.com; connect-src 'self' https://www.google-analytics.com https://dc.services.visualstudio.com https://js.monitor.azure.com; frame-src 'none'; object-src 'none'; media-src 'self'; form-action 'self' http://localhost:* https://localhost:*; base-uri 'self'; 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https: data:; img-src 'self' https: data: blob:; font-src 'self' https: data:; frame-src 'self' https://rspcavictoria.weteachme.com https://www.youtube.com https://player.vimeo.com https://www.google.com https://www.googletagmanager.com https://rspcavictoria.simplybook.me https://events.humanitix.com https://www.google-analytics.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://*.fls.doubleclick.net https://fls.doubleclick.net https://www.googleadservices.com https://pagead2.googlesyndication.com https://connect.facebook.net https://www.facebook.com https://graph.facebook.com https://snap.licdn.com https://px.ads.linkedin.com https://bat.bing.com https://analytics.tiktok.com https://business-api.tiktok.com https://s.pinimg.com https://ct.pinterest.com https://static.ads-twitter.com https://analytics.twitter.com https://t.co https://sc-static.net https://tr.snapchat.com https://cdn.segment.com https://api.segment.io https://cdn.amplitude.com https://api.amplitude.com https://cdn.mxpnl.com https://api.mixpanel.com https://static.hotjar.com https://script.hotjar.com https://vars.hotjar.com https://script.crazyegg.com https://datawrapper.dwcdn.net https://app.acuityscheduling.com https://rspcavic.turborecruit.com.au https://collections.humanitix.com https://challenges.cloudflare.com; worker-src 'self' blob:; frame-ancestors 'self'; report-uri https://o132588.ingest.us.sentry.io/api/4510956384747520/security/?sentry_key=0c0a520ac7c6ae6b1dcfd4889d80e224&sentry_environment=production; report-to csp-endpoint 1
default-src 'self' https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; frame-ancestors 'self'; object-src 'none'; base-uri 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com https://fonts.bunny.net *.googleapis.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.canadapost.ca https://sso.epost.ca 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com www.google.com *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://firebasestorage.googleapis.com mageside.com *.canadapost.ca *.canadapost-postescanada.ca *.googleapis.com https://maps.gstatic.com https://maps.googleapis.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ www.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com cdn.ampproject.org raw.githubusercontent.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.avada.io *.shopify.com https://maps.googleapis.com https://maps.gstatic.com *.cloudflare.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com assets.braintreegateway.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com cdn.ampproject.org *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://get.geojs.io *.avada.io https://maps.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; child-src 'self'; connect-src 'self' *.algolia.net *.algolianet.com *.googleapis.com *.google.com *.doubleclick.net *.google-analytics.com *.google.com.au *.algolia.io *.pusher.com *.clarity.ms *.qualtrics.com sockjs.pusher.com *.fontawesome.com google.com cdn.plyr.io noembed.com ws: *.pstmn.io *.dynamics.com *.azureedge.net *.microsoft.com https://forms.office.com/Pages/ResponsePage.aspx calculators.gbst.com *.redditstatic.com pixel-config.reddit.com; font-src 'self' data: *.gstatic.com *.fontawesome.com; form-action 'self' *.qualtrics.com; frame-src 'self' *.gbst.com *.googletagmanager.com *.cloudflare.com *.google.com *.doubleclick.net *.qualtrics.com *.fliphtml5.com *.svc.dynamics.com *.youtube.com *.elmotalent.com.au player.vimeo.com; img-src 'self' data: *.googletagmanager.com *.google.com *.google-analytics.com *.google.com.au bugherd-attachments.s3.amazonaws.com siteimproveanalytics.com *.clarity.ms *.gstatic.com *.qualtrics.com *.adswizz.com *.facebook.com *.siteimproveanalytics.io *.tapad.com *.imgix.net *.bugherd.com i.ytimg.com *.googleapis.com *.mkt.dynamics.com *.redditstatic.com pixel-config.reddit.com; manifest-src 'self'; media-src 'self' *.imgix.net; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.fliphtml5.com *.dynamics.com *.azureedge.net *.microsoft.com https://forms.office.com/Pages/ResponsePage.aspx; script-src-elem 'self' kit.fontawesome.com *.gbst.com 'unsafe-inline' *.googleapis.com *.googletagmanager.com *.cloudflare.com *.google.com *.jsdelivr.net *.doubleclick.net *.google-analytics.com *.facebook.net siteimproveanalytics.com *.clarity.ms *.gstatic.com *.qualtrics.com mktdplp102cdn.azureedge.net *.youtube.com cxppusa1formui01cdnsa01-endpoint.azureedge.net *.dynamics.com player.vimeo.com *.redditstatic.com; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' *.googleapis.com cdn.plyr.io; worker-src 'self'; frame-ancestors 'self' *.dynamics.com *.azureedge.net *.microsoft.com https://forms.office.com/Pages/ResponsePage.aspx; report-to xbyk-csp-report 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com 1
script-src 'nonce-E763WX16aCaACDON4NR3ng' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/healthapp_google; base-uri 'none' 1
object-src 'none';base-uri 'self';script-src 'nonce-Vv2738CUoevVHNlVsRvvnA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.fontawesome.com *.urldefense.com *.mypurecloud.com your.attends.eu https://apps.mypurecloud.de https://apps.mypurecloud.com https://fonts.bunny.net *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.facebook.com *.urldefense.com your.attends.eu *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.tawk.to 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.twitter.com *.facebook.com *.doubleclick.net *.urldefense.com your.attends.eu *.addtoany.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.tawk.to 'self' 'unsafe-inline'; img-src *.adobedtm.com *.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: *.googleapis.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com self unsafe-inline *.lightemporium.com *.usercentrics.eu *.webdamdb.com *.amcglobal.sc.omtrdc.net *.stats.g.doubleclick.net *.doubleclick.net *.google.co.in *.google.com *.google.com.au *.facebook.com *.ggpht.com *.linkedin.com *.adsymptotic.com *.urldefense.com *.salsify.com http://images.salsify.com *.pflegehilfe.org *.attends.de *.attendspflegepaket.de your.attends.eu m.gr-cdn-3.com https://media.powerreviews.com *.powerreviews.com res.cloudinary.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.tawk.to tawk.link cdn.jsdelivr.net s3.amazonaws.com/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com *.gstatic.com *.cloudflare.com *.twitter.com *.google-analytics.com *.googletagmanager.com *.facebook.net *.googleads.g.doubleclick.net *.doubleclick.net *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.licdn.com *.jsdelivr.net *.jqueryscript.net *.urldefense.com http://ui.powerreviews.com static.powerreviews.com *.pflegehilfe.org *.digiaccess.org your.attends.eu an.gr-wcon.com https://apps.mypurecloud.de https://apps.mypurecloud.com http://mpsnare.iesnare.com *.clubdecuidadores.com *.getresponse.com *.gr-cdn.com *.addtoany.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.urldefense.com https://ui.powerreviews.com *.mypurecloud.com your.attends.eu https://fonts.bunny.net assets.braintreegateway.com *.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tawk.to tawk.link 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.doubleclick.net *.facebook.com *.urldefense.com *.display.powerreviews.com *.digiaccess.org your.attends.eu us-central1-grchat-d3548.cloudfunctions.net https://api.mypurecloud.de https://api.mypurecloud.com https://apps.mypurecloud.de https://apps.mypurecloud.com https://api-cdn.mypurecloud.de wss://webmessaging.mypurecloud.de wss://webmessaging.mypurecloud.com https://ui.powerreviews.com https://display.powerreviews.com https://writeservices.powerreviews.com https://portal.powerreviews.com *.clubdecuidadores.com *.getresponse.com *.gr-cdn.com *.addtoany.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.tawk.to wss://*.tawk.to 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://attends.com/; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com *.fontawesome.com *.geidea.net *.geidea.ae https://www.google.com https://www.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com/ *.geidea.net *.geidea.ae *.webengage.com *.webengage.co *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de www.googletagmanager.com *.doubleclick.net *.facebook.com *.facebook.net aia.meercato.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://*.gstatic.com https://images.unsplash.com https://www.magezon.com *.geidea.net *.geidea.ae *.webengage.com *.webengage.co *.disqus.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.doubleclick.net https://maps.gstatic.com https://maps.googleapis.com https://lh3.googleusercontent.com https://googleads.g.doubleclick.net aia.meercato.com *.clarity.ms c.bing.com www.facebook.com analytics.tiktok.com *.klaviyo.com www.google.com.eg *.google.com.eg *.google.com.sa *.google.ae *.google.co.in *.google.fr *.google.es *.google.it *.google.pl *.google.ru *.google.ca *.google.com.au *.google.com.br www.google.com.ua https://aia.meercato.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com https://maps.googleapis.com https://player.vimeo.com *.google.com/ *.geidea.net *.geidea.ae ssl.widgets.webengage.com cdn.widgets.webengage.com *.webengage.com *.webengage.co *.disqus.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.googletagmanager.com *.doubleclick.net https://www.gstatic.com aia.meercato.com *.stapecdn.com *.clarity.ms analytics.tiktok.com static.klaviyo.com static-tracking.klaviyo.com fast.klaviyo.com connect.facebook.net static.addtoany.com dunsregistered.dnb.com static.cloudflareinsights.com *.cloudflare.com cdn.mxpnl.com *.mixpanel.com stapecdn.com https://aia.meercato.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.geidea.net *.geidea.ae *.webengage.com *.webengage.co *.googleapis.com *.googletagmanager.com *.google.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com *.geidea.net *.geidea.ae *.webengage.com *.webengage.co *.doubleclick.net *.googlesyndication.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com aia.meercato.com *.clarity.ms c.bing.com analytics.tiktok.com *.klaviyo.com www.facebook.com www.google-analytics.com stats.g.doubleclick.net *.tiktokw.us *.mxpnl.com *.mixpanel.com *.facebook.com https://aia.meercato.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.googleapis.com *.gstatic.com 'self' blob: *.cart-guru.io 'self' blob: *.carts.guru 'self' blob: *.cartsguru.io *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ 'self' blob: *.cart-guru.io 'self' blob: *.carts.guru 'self' blob: *.cartsguru.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.googleapis.com *.gstatic.com 'self' blob: *.cart-guru.io 'self' blob: *.carts.guru 'self' blob: *.cartsguru.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.gstatic.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com 'self' blob: *.cart-guru.io 'self' blob: *.carts.guru 'self' blob: *.cartsguru.io jquery.sellxed.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com *.cloudflare.com https://www.googletagmanager.com tagmanager.google.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com 'self' blob: *.cart-guru.io 'self' blob: *.carts.guru 'self' blob: *.cartsguru.io downloads.mailchimp.com https://static.klaviyo.com *.fontawesome.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' blob: *.cart-guru.io 'self' blob: *.carts.guru 'self' blob: *.cartsguru.io 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com 'self' blob: *.cart-guru.io 'self' blob: *.carts.guru 'self' blob: *.cartsguru.io form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src 'self' blob: *.cart-guru.io 'self' blob: *.carts.guru 'self' blob: *.cartsguru.io http: https: blob: 'self' 'unsafe-inline'; default-src 'self' blob: *.cart-guru.io 'self' blob: *.carts.guru 'self' blob: *.cartsguru.io 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.opayo.eu.elavon.com *.gstatic.com 'self' data: *.cloudflare.com *.googleapis.com *.tawk.to 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.opayo.eu.elavon.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com *.opayo.eu.elavon.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.quotes.stockinthechannel.co.uk *.swcontentsyndication.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.paypal.com *.opayo.eu.elavon.com ebizmarts-website.s3.amazonaws.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.gstatic.com *.doubleclick.net media.stockinthechannel.com 'self' data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com maps.googleapis.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com *.opayo.eu.elavon.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.gstatic.com *.googletagmanager.com *.doubleclick.net *.tawk.to cdn.jsdelivr.net *.cloudflareinsights.com googleads.g.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.opayo.eu.elavon.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.cloudflare.com *.tawk.to 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.tawk.to 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com *.paypal.com *.opayo.eu.elavon.com *.google-analytics.com *.google.com t.elasticsuite.io *.tawk.to wss://*.tawk.to stats.g.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
upgrade-insecure-requests;  default-src 'self' 'unsafe-inline' 'unsafe-eval'; connect-src 'self' *.akamaihd.net *.akstat.io bat.bing.net bat.bing.com *.clarity.ms api.company-target.com tag-logger.demandbase.com stats.g.doubleclick.net www.facebook.com *.go-mpulse.net www.google.com googleads.g.doubleclick.net *.analytics.google.com analytics.google.com www.google-analytics.com *.google-analytics.com www.googletagmanager.com *.niceincontact.com; font-src 'self' fonts.gstatic.com use.typekit.net; frame-src *.horizondiscovery.com *.company-target.com www.facebook.com www.google.com *.niceincontact.com *.sharethis.com www.youtube.com; img-src 'self' bat.bing.net bat.bing.com *.clarity.ms c.clarity.ms segments.company-target.com data: www.facebook.com connect.facebook.net www.google.com googleads.g.doubleclick.net *.googletagmanager.com id.rlcdn.com *.sharethis.com analytics.twitter.com t.co i.ytimg.com; report-uri /api/alerts/cspreport; script-src 'self' 'unsafe-inline' 'unsafe-eval' bat.bing.net bat.bing.com *.clarity.ms cdnjs.cloudflare.com tag.demandbase.com connect.facebook.net *.go-mpulse.net www.google.com googleads.g.doubleclick.net ajax.googleapis.com *.googletagmanager.com www.gstatic.com static.hotjar.com *.niceincontact.com platform-api.sharethis.com plugin.sopro.io static.ads-twitter.com www.youtube.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.googletagmanager.com *.typekit.net; 1
base-uri 'self'; default-src data: *.youtube.com *.youtu.be *.vimeo.com *.google.com *.google-analytics.com *.googletagmanager.com cdn.alireviews.io cdn.jsdelivr.net *.alicdn.com *.klaviyo.com *.clarity.ms *.cookieinformation.com widget.trustpilot.com *.anyday.io *.weaverse.io *.shopify.com *.myshopify.com 'self' 'nonce-11bf16f7e5d1067256b12a051c3ae146' https://cdn.shopify.com https://shopify.com; frame-ancestors 'none'; style-src https://fonts.googleapis.com *.weaverse.io *.shopify.com *.myshopify.com 'self' 'unsafe-inline' https://cdn.shopify.com; connect-src vimeo.com *.shopifysvc.com *.google-analytics.com *.analytics.google.com https://www.google.com https://www.google.dk *.doubleclick.net *.googlesyndication.com *.klaviyo.com *.clarity.ms *.cookieinformation.com *.googletagmanager.com *.googleadservices.com *.g.doubleclick.net *.triplewhale.com https://api.config-security.com https://conf.config-security.com loox.io *.loox.io *.emaerket.dk *.trustedshops.com *.etrusted.com *.anyday.io office.teeshoppen.com teeshoppen.dk *.weaverse.io *.shopify.com *.myshopify.com 'self' https://cdn.shopify.com/ https://monorail-edge.shopifysvc.com https://checkout.teeshoppen.dk https://noodlefirm.myshopify.com; frame-src 'self' *.youtube.com *.youtu.be *.vimeo.com *.google.com *.googletagmanager.com *.klaviyo.com *.clarity.ms *.cookieinformation.com widget.trustpilot.com *.anyday.io loox.io *.loox.io *.emaerket.dk *.trustedshops.com *.etrusted.com *.weaverse.io *.shopify.com *.myshopify.com; img-src 'self' data: https://cdn.shopify.com https://teeshoppen.dk https://*.google-analytics.com https://*.googletagmanager.com https://*.google.com https://*.google.dk https://*.doubleclick.net https://*.g.doubleclick.net https://cdn.jsdelivr.net https://loox.io https://*.loox.io https://*.emaerket.dk https://*.trustedshops.com https://*.etrusted.com https://*.r2.dev https://teeshoppen-image-transform.benjamin-dba.workers.dev https://picsum.photos https://fastly.picsum.photos *.weaverse.io *.shopify.com *.myshopify.com; worker-src 'self' blob:; font-src 'self' data: https://fonts.gstatic.com https://*.klaviyo.com *.weaverse.io *.shopify.com *.myshopify.com; script-src https://cdn.shopify.com https://static.klaviyo.com https://static-tracking.klaviyo.com https://static-forms.klaviyo.com https://www.clarity.ms https://policy.app.cookieinformation.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://loox.io https://widget.emaerket.dk https://widget.trustpilot.com https://widgets.trustedshops.com https://*.trustedshops.com https://*.etrusted.com https://*.anyday.io 'nonce-11bf16f7e5d1067256b12a051c3ae146' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.cloudflare.com data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors https://*.etracker.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com/ *.kaufring-muenchen.de secure.pay1.de *.hotjar.com *.modehaus.dev *.page2flip.de c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://*.etracker.com https://*.etracker.de https://www.magezon.com s3.eu-central-1.amazonaws.com scontent-ham3-1.cdninstagram.com ix.a8.styla.com *.kaufring-muenchen.de *.modehaus.de my.page2flip.de *.facebook.com *.etracker.de *.google.de *.google.com x.bidswitch.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com widget.freshworks.com m2epro.freshdesk.com https://*.etracker.com https://*.etracker.de *.google.com/ *.modehaus.de *.modehaus2.de *.kaufring-muenchen.de *.etracker.com *.etracker.de api.signalize.com graph.instagram.com *.page2flip.de *.hotjar.com *.adcell.com *.facebook.com *.facebook.net *.ad-srv.net cdnjs.cloudflare.com *.hyj.mobi *.bidswitch.net *.casalemedia.com *.smaato.net *.marker.io *.axonix.com *.adform.net *.googletagmanager.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com cdnjs.cloudflare.com assets.braintreegateway.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com widget.freshworks.com m2epro.freshdesk.com https://*.etracker.de *.doubleclick.net *.modehaus.de *.kaufring-muenchen.de *.etracker.de *.pay1.de *.hotjar.com *.page2flip.de *.adcell.com *.google.de api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com places.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https: data:; base-uri 'self'; object-src 'none'; frame-ancestors 'self' https://moliner-sa.fr https://www.moliner-sa.fr; form-action 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://consent.cookiebot.com https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https:; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https:; connect-src 'self' https: https://public-api.wordpress.com https://stats.wp.com; frame-src 'self' https: https://www.googletagmanager.com https://consent.cookiebot.com https://widgets.wp.com; 1
default-src https:;script-src https: 'self' 'strict-dynamic' 'nonce-0fe36221d5be07342af48db7a4a016062a8c8f6a67bed7547f637799846e3dab' 'unsafe-inline' 'unsafe-eval' 'report-sample';style-src https: 'unsafe-inline';img-src https: data:;connect-src https: wss:;font-src https: data:;object-src 'none';media-src https: blob: data:;frame-src https: data: blob:;child-src 'self' https:;form-action 'self';frame-ancestors https://my.firespring.com;base-uri 'self' https://insights.sitesearch360.com;worker-src 'self' blob:;manifest-src 'self' https://cdn.firespring.com;report-uri /csp_log?n=1 1
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.yandex.ru https://*.searchbooster.net https://c.retailcrm.tech https://*.google.com https://*.gstatic.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://*.kirgu.ru https:; font-src 'self' data:; connect-src 'self' https://*.kirgu.ru https://*.yandex.ru https://*.yandex.com wss://*.yandex.ru wss://*.yandex.com https://*.searchbooster.net https://c.retailcrm.tech https://*.google.com https://*.gstatic.com; frame-src 'self' https://*.google.com https://*.gstatic.com https://surameb.kirgu.ru https://c.retailcrm.tech; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'nonce-3HcO9s6A6922MUT4H9uQrg==' 'unsafe-inline' https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' *; img-src * data:; font-src * data:; connect-src *; frame-src 'self' https://challenges.cloudflare.com; frame-ancestors https://bolt.new https://lovable.dev https://replit.com https://riff.new https://v0.app; upgrade-insecure-requests; worker-src 'self'; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubb28ba93eb59013963476c6dd6c190040&dd-evp-origin=content-security-policy&ddsource=csp-report; report-to csp-datadog 1
default-src 'self'; report-uri https://api.sendsteps.com/csp-reports 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.buddhaspa.com.br www.googletagmanager.com *.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net www.google.com www.gstatic.com translate.google.com translate.googleapis.com connect.facebook.net analytics.tiktok.com s.pinimg.com assets.pinterest.com stats.wp.com s0.wp.com js-agent.newrelic.com static.zdassets.com ekr.zdassets.com maps.googleapis.com *.pagaleve.com.br *.globalgetnet.com cdnjs.cloudflare.com cdn.jsdelivr.net www.paypalobjects.com s3.amazonaws.com bat.bing.com snap.licdn.com px.ads.linkedin.com www.clarity.ms cdn.mouseflow.com secure.lomadee.com.br pixel.byspotify.com collect.vendavalida.com.br diffuser-cdn.app-us1.com; style-src 'self' 'unsafe-inline' *.buddhaspa.com.br fonts.googleapis.com cdn.jsdelivr.net cdnjs.cloudflare.com; font-src 'self' data: *.buddhaspa.com.br fonts.gstatic.com cdn.jsdelivr.net cdnjs.cloudflare.com; img-src 'self' data: blob: https:; connect-src 'self' *.buddhaspa.com.br *.google-analytics.com region1.google-analytics.com stats.g.doubleclick.net www.googletagmanager.com www.facebook.com analytics.tiktok.com ct.pinterest.com bam.nr-data.net buddhaspa.zendesk.com *.zdassets.com wss://*.zendesk.com wss://*.zopim.com maps.googleapis.com gateway.pagolivre.com.br *.pagaleve.com.br *.globalgetnet.com *.getnet.com.br *.clearsale.com.br app.hubspot.com pixel.wp.com www.clarity.ms n2.mouseflow.com px.ads.linkedin.com; frame-src 'self' www.google.com www.youtube.com www.youtube-nocookie.com player.vimeo.com *.paypal.com *.paypalobjects.com *.zendesk.com *.zopim.com s3.amazonaws.com *.pagaleve.com.br app.hubspot.com; media-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' *.paypal.com *.pagaleve.com.br 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https:; connect-src 'self' https:; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; 1
default-src 'self' *.typekit.net *.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://static.cloudflareinsights.com   https://www.youtube-nocookie.com https://ajax.googleapis.com https://*.doubleclick.net https://*.googlesyndication.com https://*.adtrafficquality.google https://www.google.com https://www.gstatic.com   https://connect.facebook.net https://*.adroll.com https://js.hs-scripts.com https://*.vibe.co https://*.scorecardresearch.com https://*.licdn.com https://static.ads-twitter.com https://*.stackadapt.com;   style-src 'self' 'unsafe-inline' *; connect-src 'self' *.google-analytics.com https://www.googletagmanager.com https://*.doubleclick.net https://*.googlesyndication.com https://*.adtrafficquality.google   https://csi.gstatic.com https://*.adroll.com https://px.ads.linkedin.com https://*.vibe.co https://*.stackadapt.com https://www.google.com https://analytics.google.com; font-src 'self' data: use.typekit.net   fonts.gstatic.com; img-src 'self' data: *.placeholder.com *.youtube.com https://store.lexisnexis.com https://*.doubleclick.net https://*.googlesyndication.com https://*.adtrafficquality.google   https://www.google.com https://www.googletagmanager.com https://analytics.twitter.com https://t.co https://*.adroll.com https://px.ads.linkedin.com https://*.scorecardresearch.com https://www.facebook.com   https://*.tapad.com https://*.adsrvr.org https://analytics.google.com https://*.google-analytics.com; frame-src *.youtube.com *.youtube-nocookie.com *.googletagmanager.com https://*.doubleclick.net   https://*.googlesyndication.com https://*.adtrafficquality.google https://www.google.com https://*.googleadservices.com; 1
object-src 'none';base-uri 'self';script-src 'nonce-kZj4YkAwznh6YiUMjzybXQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src                                         'self'                                         'unsafe-inline'                                         'unsafe-eval'                                         blob:                                         https://www.google-analytics.com                                         https://www.googletagmanager.com                                         https://connect.facebook.net; connect-src 'self' *.clarity.ms https://analytics.google.com https://api.locize.io https://api3.veritrans.co.jp https://apm.yahoo.co.jp https://bvr.snva.jp https://checkout-api.worldshopping.jp https://ct.pinterest.com https://dm.slim02.jp https://graph.facebook.com https://p.typekit.net https://posthog.worldshopping.global https://stats.g.doubleclick.net https://use.typekit.net https://www.facebook.com https://www.google.co.jp https://www.google.com https://www.googleadservices.com https://www.google-analytics.com https://www.googletagmanager.com https://www.idee-online.com https://googleads.g.doubleclick.net https://payment.worldshopping.global https://region1.analytics.google.com https://image.daguands.cn https://www.google.co.kr https://www.google.co.nz https://www.google.com.sg https://www.google.com.tw https://www.google.es https://www.google.co.kr https://www.google.co.nz https://www.google.es https://collect.ptengine.jp https://www.google.com.vn https://overbridgenet.com https://www.google.co.th https://www.google.com.hk https://www.google.it https://s.pinimg.com https://www.google.co.uk https://www.google.com.pk; font-src 'self' data: https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://use.typekit.net https://www.idee-online.com https://cdn.scite.ai https://r2cdn.perplexity.ai https://cdnjs.cloudflare.com https://unpkg.com; frame-src 'self' https://api3.veritrans.co.jp https://bid.g.doubleclick.net https://ct.pinterest.com https://dig3ds.cafis-paynet.jp https://platform.twitter.com https://player.vimeo.com https://www.facebook.com https://www.youtube.com https://acs-jcn.dnp-cdms.jp https://gateway.zscaler.net https://gateway.zscalerthree.net https://geoissuer.cardinalcommerce.com https://methodurl.vcas.visa.com https://open.spotify.com https://safekeyacs.americanexpress.com https://www.securesuite.co.uk https://dig-acs2.cafis-paynet.jp https://acs.esunbank.com.tw https://m.facebook.com http://swg-msg.securewg.jp http://iproxy.intra.hitachi.co.jp https://block.opendns.com https://web.facebook.com https://xykpay.3d2.icbc.com.cn; img-src 'self' data: https://c.bing.com https://api3.veritrans.co.jp *.yahoo.co.jp https://bvr.snva.jp https://c.clarity.ms https://checkout-static.worldshopping.jp https://connect.facebook.net https://dggfhwd0xfelw.cloudfront.net https://r.snva.jp *.cdninstagram.com https://static-contents.worldshopping.jp https://syndication.twitter.com https://www.facebook.com https://www.google.co.jp https://www.google.co.th https://www.google.com https://www.googletagmanager.com https://www.idee-online.com https://ad2.trafficgate.net https://googleads.g.doubleclick.net https://i.ytimg.com https://itrack2.valuecommerce.ne.jp https://www.googleadservices.com https://www.google.ca https://www.google.co.id https://www.google.co.kr https://www.google.co.nz https://www.google.co.uk https://www.google.com.bd https://www.google.com.bn https://www.google.com.hk https://www.google.com.my https://www.google.com.sg https://www.google.com.tw https://www.google.es https://www.google.fi https://www.google.fr https://www.google.ie https://www.google.se https://www.google.si https://checkout-js.worldshopping.jp https://www.google.cl https://www.google.com.au https://www.google.com.ph https://www.google.com.vn https://screenshot-static.worldshopping.global https://stats.g.doubleclick.net https://www.google.com.bo https://www.google.com.tr https://www.google.it https://www.google.la https://www.google.rw https://i.vimeocdn.com https://www.google.com.mx https://www.google.com.pk https://www.google.de; script-src-elem 'self' 'unsafe-inline' https://ajax.googleapis.com *.yahoo.co.jp https://bvr.ast.snva.jp https://cdnjs.cloudflare.com https://checkout-api.worldshopping.jp https://checkout-js.worldshopping.jp https://clicktalecdn.sslcs.cdngc.net https://code.jquery.com https://connect.facebook.net https://ct.pinterest.com https://googleads.g.doubleclick.net https://js.ptengine.jp https://platform.twitter.com https://r.snva.jp https://rtg-endpoint.global.ssl.fastly.net https://s.pinimg.com https://s.yimg.jp https://scripts.clarity.ms https://shop-js.worldshopping.jp https://use.typekit.net https://v9999.adv.admeme.net https://www.clarity.ms https://www.googleadservices.com https://www.google-analytics.com https://www.googletagmanager.com https://www.idee-online.com http://ajax.googleapis.com https://image.daguands.cn https://infird.com https://gc.kis.v2.scr.kaspersky-labs.com https://me.kis.v2.scr.kaspersky-labs.com; style-src-elem 'self' 'unsafe-inline' https://checkout-js.worldshopping.jp https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://gc.kis.v2.scr.kaspersky-labs.com;                                     report-to                                         csp-endpoint; 1
default-src 'self' https:; img-src 'self' https: data: blob:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; font-src 'self' https: data:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; 1
object-src 'none';base-uri 'self';script-src 'nonce-SrXMFV_pYU2SqZL3qZbijQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.cloudflare.com *.bootstrapcdn.com *.googleapis.com *.google.com *.google.co.uk 'self' data: *.yotpo.com https://enchantwidgets-1358.kxcdn.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.facebook.com *.instagram.com *.braintreegateway.com *.google.com *.googleapis.com *.paypalobjects.com *.yotpo.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com accounts.google.com account.fetchify.com *.cookiebot.com *.paypalobjects.com *.googleapis.com 'self' data: *.yotpo.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.google.com/ www.facebook.com platform.twitter.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://www.magezon.com *.rosemaryandco.com https://rosemaryandco.com *.cloudfront.net *.cloudflare.com *.googleadservices.com *.google-analytics.com *.google.com *.google.co.in *.paypalobjects.com *.googletagmanager.com *.twitter.com *.facebook.com *.instagram.com *.sandbox.paypal.com *.googleapis.com *.newrelic.com *.adobedtm.com *.cookiebot.com https://imgsct.cookiebot.com https://www.google.co.uk 'self' data: *.yotpo.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com accounts.google.com 'unsafe-inline' *.cookiebot.com *.cloudfront.net *.gstatic.com *.bootstrapcdn.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.cardinalcommerce.com *.googletagservices.com *.googlesyndication.com *.paypal.com *.paypalobjects.com *.vimeo.com *.twitter.com *.facebook.com *.instagram.com *.cloudflareinsights.com *.cloudflare.com *.sandbox.paypal.com *.googleapis.com https://platform.enchant.com https://enchantwidgets-1358.kxcdn.com *.yotpo.com *.doubleclick.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.google.com/ connect.facebook.net twitter.com platform.twitter.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com accounts.google.com cc-cdn.com *.bootstrapcdn.com *.cloudflare.com *.cloudfront.net *.fontawesome.com *.braintreegateway.com *.google.com *.google.co.uk *.sandbox.paypal.com *.googletagmanager.com *.google-analytics.com *.googleapis.com *.yotpo.com assets.braintreegateway.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src *.paypal.com *.braintreegateway.com *.google.com *.googleapis.com *.gstatic.com *.paypalobjects.com *.yotpo.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com accounts.google.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk *.cloudflare.com *.cookiebot.com *.cardinalcommerce.com *.twitter.com *.facebook.com *.instagram.com *.paypalobjects.com *.google-analytics.com *.googleapis.com *.sandbox.paypal.com 'self' data: *.yotpo.com *.doubleclick.net *.demdex.net *.omtrdc.net *.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.rosemaryandco.com/; report-to report-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-kJNY3QWKJxAYYerax28OPA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src https://static.payzen.eu/static/ *.fontawesome.com *.gstatic.com 'self' data: fonts.googleapis.com fonts.gstatic.com data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://secure.payzen.eu/vads-payment/ https://api.payzen.eu/api-payment/ https://static.payzen.eu/static/ *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com https://secure.payzen.eu/vads-payment/ https://static.payzen.eu/static/ *.google.com https://app.goodays.co https://metrics.flunch-traiteur.fr https://ct.pinterest.com https://try.abtasty.com https://teddytor.abtasty.com https://pixel.rubiconproject.com/tap.php https://ad.avtm.fr https://connect.facebook.net https://www.facebook.com https://api2.abtasty.com https://api.abtasty.com https://o132438.ingest.sentry.io https://common-fonts.abtasty.com https://widgets-images.abtasty.com https://editor-assets.abtasty.com https://sslwidget.criteo.com https://www.criteo.net https://www.criteo.com https://measurement-api.criteo.com https://googleads.g.doubleclick.net https://*.outbrain.com https://*.contentsquare.net https://app.contentsquare.com https://online.flippingbook.com https://k-eu1.az.contentsquare.net https://*.elfsight.com https://jeu.flunch.fr https://applepay.cdn-apple.com/ https://region1.google-analytics.com maps.google.com maps.googleapis.com critizr.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com data: *.axept.io *.addthis.com axeptio.imgix.net *.newrelic.com *.nr-data.net *.moatads.com *.addthisedge.com *.google.com/ * 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https://secure.payzen.eu/static/latest/images/type-carte/ https://static.payzen.eu/static/ https://secure.payzen.eu/vads-payment/ magefan.com cm.magefan.com *.google.com *.mageside.com mageside.com https://bat.bing.com https://sk.ht https://dynamic.criteo.com https://tracking.lqm.io https://s.yimg.com https://snap.licdn.com https://s.pinimg.com https://insight.adsrvr.org https://cdn.linkedin.oribi.io https://pixel.bsmartdata.com https://track.adform.net https://ct.pinterest.com https://px.ads.linkedin.com https://try.abtasty.com https://teddytor.abtasty.com https://pixel.rubiconproject.com/tap.php https://ad.avtm.fr https://ariane.abtasty.com https://dcinfos-cache.abtasty.com https://connect.facebook.net https://www.facebook.com https://api2.abtasty.com https://api.abtasty.com https://o132438.ingest.sentry.io https://common-fonts.abtasty.com https://widgets-images.abtasty.com https://editor-assets.abtasty.com https://sslwidget.criteo.com https://www.criteo.net https://www.criteo.com https://measurement-api.criteo.com https://googleads.g.doubleclick.net https://*.outbrain.com https://*.contentsquare.net https://app.contentsquare.com https://online.flippingbook.com https://k-eu1.az.contentsquare.net https://*.elfsight.com https://jeu.flunch.fr https://applepay.cdn-apple.com/ https://region1.google-analytics.com consent.valiuz.com 'self' data: *.googleapis.com maps.google.com maps.gstatic.com www.gstatic.com *.ggpht.com *.tile.openstreetmap.org b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.axept.io *.addthis.com axeptio.imgix.net *.newrelic.com *.nr-data.net *.moatads.com *.addthisedge.com appsdev.agapes.fr *.agapes.fr blob: *.disqus.com https://img.youtube.com https://www.magezon.com www.sandbox.paypal.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page https://api.payzen.eu/api-payment/ https://static.payzen.eu/static/ *.google.com *.gstatic.com https://partner.flunch-traiteur.fr https://events.sk.ht/flunchtraiteur https://events.sk.ht/flunchtraiteur/lib.js https://bat.bing.com https://metrics.flunch-traiteur.fr https://sk.ht https://dynamic.criteo.com https://tracking.lqm.io https://s.yimg.com https://snap.licdn.com https://s.pinimg.com https://insight.adsrvr.org https://cdn.linkedin.oribi.io https://pixel.bsmartdata.com https://track.adform.net https://ct.pinterest.com https://try.abtasty.com https://teddytor.abtasty.com https://pixel.rubiconproject.com/tap.php https://ad.avtm.fr https://ariane.abtasty.com https://dcinfos-cache.abtasty.com https://connect.facebook.net https://s2.adform.net/banners/scripts/st/trackpoint-async.js https://www.facebook.com https://api2.abtasty.com https://api.abtasty.com https://o132438.ingest.sentry.io https://common-fonts.abtasty.com https://cdn.jsdelivr.net https://widgets-images.abtasty.com https://editor-assets.abtasty.com https://sslwidget.criteo.com https://www.criteo.net https://www.criteo.com https://measurement-api.criteo.com https://googleads.g.doubleclick.net https://*.outbrain.com https://*.contentsquare.net https://app.contentsquare.com https://online.flippingbook.com https://k-eu1.az.contentsquare.net https://*.elfsight.com https://*.elfsightcdn.com https://jeu.flunch.fr https://cdn.goodays.co/sdk/ https://applepay.cdn-apple.com https://static.payzen.eu https://region1.google-analytics.com consent.valiuz.com *.google.com/ maps.googleapis.com maps.google.com static.axept.io static.critizr.com secure.authorize.net test.authorize.net js.braintreegateway.com s7.addthis.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com data: *.axept.io *.addthis.com axeptio.imgix.net *.newrelic.com *.nr-data.net *.moatads.com *.addthisedge.com *.matomo.cloud *.disqus.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://static.payzen.eu/static/ *.fontawesome.com https://cdn.goodays.co https://metrics.flunch-traiteur.fr https://sk.ht https://dynamic.criteo.com https://tracking.lqm.io https://s.yimg.com https://snap.licdn.com https://s.pinimg.com https://insight.adsrvr.org https://cdn.linkedin.oribi.io https://pixel.bsmartdata.com https://track.adform.net https://ct.pinterest.com https://try.abtasty.com https://teddytor.abtasty.com https://pixel.rubiconproject.com/tap.php https://ad.avtm.fr https://ariane.abtasty.com https://dcinfos-cache.abtasty.com https://connect.facebook.net https://www.facebook.com https://api2.abtasty.com https://api.abtasty.com https://o132438.ingest.sentry.io https://common-fonts.abtasty.com https://cdn.jsdelivr.net https://fonts.googleapis.com https://fonts.gstatic.com https://widgets-images.abtasty.com https://editor-assets.abtasty.com https://sslwidget.criteo.com https://www.criteo.net https://www.criteo.com https://measurement-api.criteo.com https://googleads.g.doubleclick.net https://*.outbrain.com https://*.contentsquare.net https://app.contentsquare.com https://online.flippingbook.com https://k-eu1.az.contentsquare.net https://*.elfsight.com https://jeu.flunch.fr https://applepay.cdn-apple.com https://region1.google-analytics.com unsafe-inline *.googleapis.com *.gstatic.com static.critizr.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://secure.payzen.eu/vads-payment/ https://api.payzen.eu/api-payment/ https://metrics.flunch-traiteur.fr https://sk.ht https://dynamic.criteo.com https://tracking.lqm.io https://s.yimg.com https://snap.licdn.com https://s.pinimg.com https://insight.adsrvr.org https://cdn.linkedin.oribi.io https://pixel.bsmartdata.com https://track.adform.net https://ct.pinterest.com https://try.abtasty.com https://teddytor.abtasty.com https://pixel.rubiconproject.com/tap.php https://ad.avtm.fr https://ariane.abtasty.com https://dcinfos-cache.abtasty.com https://connect.facebook.net https://www.facebook.com https://api2.abtasty.com https://api.abtasty.com https://o132438.ingest.sentry.io https://common-fonts.abtasty.com https://widgets-images.abtasty.com https://editor-assets.abtasty.com https://sslwidget.criteo.com https://www.criteo.net https://www.criteo.com https://measurement-api.criteo.com https://googleads.g.doubleclick.net https://*.outbrain.com https://*.contentsquare.net https://app.contentsquare.com https://online.flippingbook.com https://k-eu1.az.contentsquare.net https://*.elfsight.com https://jeu.flunch.fr https://applepay.cdn-apple.com https://static.payzen.eu https://region1.google-analytics.com consent.valiuz.com google-analytics.com maps.googleapis.com maps.google.com client.axept.io ekr.zdassets.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com t.elasticsuite.io data: *.axept.io *.addthis.com axeptio.imgix.net *.newrelic.com *.nr-data.net *.moatads.com *.addthisedge.com *.matomo.cloud *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src https://secure.payzen.eu/vads-payment/ https://api.payzen.eu/api-payment/ https://static.payzen.eu/static/ *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-_fToZTddsIyCZhsnWXwPMg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://www.facebook.com https://www.tiktok.com https://analytics.tiktok.com https://bat.bing.com https://secure.ewaypayments.com https://*.ewaypayments.com https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://hcaptcha.com https://*.hcaptcha.com https://*.honeybot.ai; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com https://maps.googleapis.com; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://www.google-analytics.com https://www.facebook.com https://connect.facebook.net https://analytics.tiktok.com https://www.tiktok.com https://bat.bing.com https://*.ewaypayments.com https://maps.googleapis.com https://maps.gstatic.com https://www.gstatic.com https://*.hcaptcha.com https://*.honeybot.ai; media-src 'self' https://www.youtube.com https://*.ytimg.com; frame-src 'self' https://www.youtube.com https://www.facebook.com https://www.tiktok.com https://*.ewaypayments.com https://www.google.com https://www.gstatic.com https://hcaptcha.com https://*.hcaptcha.com https://*.honeybot.ai; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net https://analytics.tiktok.com https://www.tiktok.com https://bat.bing.com https://*.ewaypayments.com https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://hcaptcha.com https://*.hcaptcha.com https://*.honeybot.ai; object-src 'none'; base-uri 'self'; form-action 'self' https://*.ewaypayments.com; frame-ancestors 'self'; 1
default-src 'self'; img-src 'self' data: https://www.googletagmanager.com https://www.google-analytics.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; font-src 'self' data:; connect-src 'self' https://dashboard.spyderproxy.com https://www.google-analytics.com https://www.googletagmanager.com; frame-ancestors 'self' 1
upgrade-insecure-requests; object-src 'none'; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.plyr.io https://cdnjs.cloudflare.com https://code.jquery.com https://go.everstream.ai https://munchkin.marketo.net https://static.addtoany.com https://tag.demandbase.com https://fonts.googleapis.com https://ws-assets.zoominfo.com https://www.googletagmanager.com https://assets.codepen.io https://443-ezw-095.mktoweb.com https://cdn-cookieyes.com https://unpkg.com https://static.hotjar.com https://script.hotjar.com https://boards.greenhouse.io https://snap.licdn.com https://*.googleusercontent.com http://*.googleusercontent.com https://www.youtube.com https://cdn.bizible.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://fast.wistia.com; connect-src 'self' https://boards-api.greenhouse.io https://443-ezw-095.mktorest.com https://munchkin.marketo.net https://tag.demandbase.com https://ws-assets.zoominfo.com https://www.googletagmanager.com https://go.everstream.ai https://log.cookieyes.com https://cdn-cookieyes.com https://directory.cookieyes.com https://yoast.com https://ams.wpml.org https://noembed.com https://cdn.plyr.io https://px.ads.linkedin.com https://content.hotjar.io wss://ws.hotjar.com https://api.company-target.com https://analytics.google.com https://region1.google-analytics.com https://www.google-analytics.com https://tag-logger.demandbase.com https://pagead2.googlesyndication.com https://www.google.com https://stats.g.doubleclick.net https://metrics.hotjar.io https://www.google.ca; frame-src 'self' https://player.vimeo.com https://443-ezw-095.mktoweb.com https://static.addtoany.com https://job-boards.greenhouse.io https://www.youtube.com https://*.googleusercontent.com http://*.googleusercontent.com https://s.company-target.com https://td.doubleclick.net; style-src 'self' 'unsafe-inline' https://cdn.plyr.io https://cdnjs.cloudflare.com https://fonts.googleapis.com https://assets.codepen.io https://cdn-cookieyes.com https://unpkg.com https://443-ezw-095.mktoweb.com https://ams.wpml.org; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com data:; img-src 'self' data: https://cdn.plyr.io https://cdnjs.cloudflare.com https://go.everstream.ai https://munchkin.marketo.net https://static.addtoany.com https://tag.demandbase.com https://ws-assets.zoominfo.com https://www.googletagmanager.com https://assets.codepen.io https://cdn-cookieyes.com https://secure.gravatar.com https://*.ytimg.com https://i.ytimg.com https://px.ads.linkedin.com https://cdn.bizible.com https://id.rlcdn.com https://www.google.ca https://www.google.be; worker-src 'self' blob:; report-uri https://o82685.ingest.us.sentry.io/api/4509293955907584/security/?sentry_key=d0bac385543dfe367058e2015e42c128; 1
object-src 'none'; script-src 'self' 'report-sample' cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.ckeditor.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com unpkg.com; style-src 'self' 'report-sample' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com unpkg.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://*.lettingshub.co.uk https://www.google.com https://google-analytics.com https://googletagmanager.com; connect-src 'self' https://*.lettingshub.co.uk https://google-analytics.com https://analytics.google.com; img-src 'self' data: https://*.lettingshub.co.uk https://google-analytics.com https://www.google.com; frame-src 'self' https://*.lettingshub.co.uk https://www.google.com; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.squarecdn.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.zip.co *.bing.com *.alicdn.com *.baomitu.com *.bazaarvoice.com *.cdnfonts.com *.googleapis.com *.hotjar.com *.hsappstatic.net *.office.net *.slant.co *.zopim.com d1uznvntk80v7s.cloudfront.net unpkg.com *.burnsco.co.nz https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.localhost.com *.paymentexpress.com *.windcave.com api.bazaarvoice.com stg.api.bazaarvoice.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com widgets.sandbox.afterpay.com *.cash.app *.sharethis.com https://*.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.localhost.com *.paymentexpress.com *.windcave.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com *.googletagmanager.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.afterpay.com/ *.cash.app *.sharethis.com https://images.unsplash.com 'self' data: https://*.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.openstreetmap.org https://maps.googleapis.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com *.cdninstagram.com *.fbcdn.net *.unbxdapi.com *.bing.com *.google.com.vn *.google.com.au google.com *.adroll.com *.bidswitch.net *.rubiconproject.com *.openx.net *.pubmatic.com *.rlcdn.com *.yahoo.com *.adnxs.com *.casalemedia.com *.company-target.com *.ib-ibi.com *.dotomi.com *.prfct.co *.taboola.com *.addthis.com *.fg8dgt.com *.fzlnk.com *.jivox.com *.acuityplatform.com *.quantserve.com *.apolloprogram.io *.smartadserver.com *.storygize.net *.rezync.com *.rfihub.com *.mediarithmics.com mmtro.com *.1rx.io *.unrulymedia.com *.ctnsnet.com *.33across.com *.3lift.com *.lijit.com *.weborama.fr *.innovid.com *.skimresources.com pippio.com *.securedvisit.com *.insightexpressai.com *.ispot.tv *.swoop.com *.swpsv.com *.crsspxl.com *.acxiomapac.com *.globalwebindex.net *.mrtnsvr.com *.dxkulture.com *.rakuten.com *.semasio.net *.commander1.com *.adstir.com *.twitter.com *.socd.com *.im-apps.net *.rtbiq.com *.mgid.com *.meritb2b.com zdbb.ne *.reson8.com *.adsrvr.org *.clarity.ms *.amazon-adsystem.com *.stackadapt.com *.bluekai.com *.contextweb.com *.kargo.com *.criteo.com *.bidr.io *.exelator.com *.scorecardresearch.com *.turn.com *.w55c.net *.crwdcntrl.net *.walmart.com *.mathtag.com *.sitescout.com *.simpli.fi *.mxptint.net *.media.net *.adentifi.com *.linksynergy.com *.adgrx.com *.ipredictive.com *.tidaltv.com *.tapad.com *.cardlytics.com *.agkn.com *.owneriq.net bttrack.com *.spotify.com *.undertone.com *.tribalfusion.com *.admission.net *.eyeota.net *.ml314.com *.mookie1.com *.afterpay.com www.google.co.in www.google.co.nz www.google.com.hk www.google.com.mx www.google.com.my www.google.com.ph www.google.com.sg www.google.nl www.google.co.jp www.google.co.th www.google.co.uk www.google.com.co www.google.com.pk www.google.com.sa www.google.hu www.google.ie www.google.it www.google.ae www.google.at www.google.az www.google.be www.google.ca www.google.ch www.google.cl www.google.co.id www.google.co.il www.google.co.ke www.google.co.kr www.google.co.tz www.google.co.za www.google.com.ar www.google.com.bd www.google.com.bn www.google.com.br www.google.com.fj www.google.com.kh www.google.com.ly www.google.com.mt www.google.com.ng www.google.com.pg www.google.com.qa www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.cv www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.gr www.google.iq www.google.lk www.google.lt www.google.lv www.google.mn www.google.mu www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.so www.google.tl www.google.to *.techrentals.co.nz *.techrentals.com.au www.google.by www.google.cm www.google.co.ma www.google.co.ug www.google.co.uz www.google.co.ve www.google.com.bo www.google.com.kw www.google.com.lb www.google.com.om www.google.com.pe www.google.cz www.google.jo www.google.la www.google.sr www.google.vu *.google-analytics.com *.google.com *.googleadservices.com *.techrentals.com.my *.techrentals.com.sg www.google.ba www.google.bj www.google.bt www.google.ci www.google.co.ao www.google.co.bw www.google.co.mz www.google.co.zm www.google.co.zw www.google.com.au www.google.com.bh www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.gh www.google.com.gt www.google.com.mm www.google.com.np www.google.com.pa www.google.com.pr www.google.com.sb www.google.com.sv www.google.com.uy www.google.ge www.google.hr www.google.is www.google.kz www.google.ml www.google.mw www.google.ne www.google.rw www.google.sc www.google.sk www.google.sn www.google.tn www.google.tt *.alicdn.com *.bazaarvoice.com *.bing.net *.googleapis.com *.imgix.net *.scarabresearch.com *.zopim.com www.google.ad www.google.al www.google.am www.google.as www.google.bf www.google.bs www.google.cd www.google.cg www.google.co.ck www.google.co.cr www.google.co.vi www.google.com.ag www.google.com.bz www.google.com.cu www.google.com.gi www.google.com.jm www.google.com.na www.google.com.ni www.google.com.py www.google.com.sl www.google.com.vc www.google.dm www.google.fm www.google.ga www.google.gg www.google.gl www.google.gm www.google.gy www.google.hn www.google.ht www.google.im www.google.je www.google.kg www.google.ki www.google.lu www.google.md www.google.me www.google.mg www.google.mk www.google.mv www.google.nr www.google.nu www.google.pn www.google.ps www.google.sh www.google.sm www.google.st www.google.tg www.google.tm www.google.ws yastatic.net *.baidu.com *.burnsco.co.nz *.vimeo.com www.google.com.af www.google.td www.google.co.ls https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://portal.sandbox.afterpay.com https://portal.afterpay.com https://static.afterpay.com *.squarecdn.com https://hbiq.net *.cash.app *.sharethis.com https://maps.googleapis.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com *.instagram.com *.newrelic.com *.nr-data.net *.convertexperiments.com *.clarity.ms *.abtasty.com *.pricespider.com *.emarsys.net *.bing.com *.adsrvr.org *.cloudfront.net *.quantserve.com *.adroll.com *.quantcount.com *.online-metrix.net *.zdassets.com *.signifyd.com unpkg.com bpi.zip.co *.jsdelivr.net *.ipify.org *.afterpay.com *.bazaarvoice.com *.googleapis.com *.hotjar.com *.omtrdc.net *.scarabresearch.com *.vimeo.com *.zopim.com *.burnsco.co.nz rum.hlx.page *.plugins.emarsys.net https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com static.afterpay.com/ *.squarecdn.com *.cash.app *.sharethis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com display.ugc.bazaarvoice.com *.zip.co unpkg.com *.bing.com *.typekit.net *.jsdelivr.net *.baomitu.com *.omtrdc.net *.addysolutions.com *.burnsco.co.nz https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.cdninstagram.com vimeo.com *.zdassets.com *.vimeocdn.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.afterpay.com *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com *.cash.app api.lab.amplitude.com *.sharethis.com https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com *.facebook.com *.facebook.net https://*.google.com *.doubleclick.net *.googlesyndication.com *.openstreetmap.org api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.instagram.com *.googleusercontent.com cdn.jsdelivr.net *.abtasty.com *.nr-data.net *.clarity.ms *.adroll.com *.online-metrix.net *.zipmoney.com.au *.cloudfront.net *.zip.co *.zendesk.com *.mastersoftgroup.com *.zopim.com *.bing.com wss://widget-mediator.zopim.com *.zdassets.com *.addysolutions.com www.google.co.in www.google.co.nz www.google.com.au www.google.com.mx www.google.com.my www.google.com.ph www.google.com.sg www.google.co.jp www.google.co.uk www.google.com.co www.google.com.hk www.google.com.pk www.google.com.sa www.google.hu www.google.it www.google.ae www.google.be www.google.co.id www.google.co.kr www.google.co.th www.google.co.za www.google.com.ar www.google.com.bd www.google.com.bn www.google.com.kh www.google.com.pg www.google.com.tw www.google.com.vn www.google.cv www.google.de www.google.dz www.google.es www.google.iq www.google.lk www.google.mn www.google.pl www.google.ro www.google.ru www.google.so www.google.tl *.crwdcntrl.net www.google.at www.google.az www.google.ca www.google.ch www.google.co.il www.google.co.ug www.google.com.br www.google.com.fj www.google.com.ng www.google.com.pe www.google.com.qa www.google.com.tr www.google.dk www.google.fr www.google.nl www.google.no www.google.vu *.googleadservices.com *.techrentals.com.my *.techrentals.com.sg www.google.bt www.google.by www.google.cl www.google.co.bw www.google.co.ke www.google.co.ma www.google.co.tz www.google.co.zw www.google.com.bo www.google.com.do www.google.com.ec www.google.com.eg www.google.com.gh www.google.com.np www.google.com.sb www.google.com.sv www.google.com.ua www.google.cz www.google.ee www.google.ge www.google.gr www.google.ie www.google.jo www.google.kz www.google.la www.google.lt www.google.lv www.google.mu www.google.rs www.google.se www.google.sk www.google.sn www.google.to *.alicdn.com *.amplitude.com *.bazaarvoice.com *.bing.net *.contentsquare.net *.googletagmanager.com *.hotjar.com *.scarabresearch.com *.stbuttons.click localhost servail.com www.google.al www.google.am www.google.as www.google.ba www.google.bg www.google.bs www.google.cg www.google.ci www.google.cm www.google.co.ao www.google.co.ck www.google.co.cr www.google.co.mz www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.zm www.google.com.ag www.google.com.bh www.google.com.bz www.google.com.cu www.google.com.cy www.google.com.et www.google.com.gi www.google.com.gt www.google.com.jm www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.na www.google.com.ni www.google.com.om www.google.com.pa www.google.com.pr www.google.com.py www.google.com.sl www.google.com.uy www.google.dm www.google.fi www.google.fm www.google.ga www.google.gg www.google.gl www.google.gm www.google.gy www.google.hr www.google.ht www.google.is www.google.ki www.google.lu www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mv www.google.mw www.google.nr www.google.nu www.google.pn www.google.pt www.google.sc www.google.si www.google.sr www.google.st www.google.tn www.google.tt www.google.ws *.addy.co.nz *.burnsco.co.nz *.hotjar.io rum.hlx.page www.google.com.af www.google.hn unpkg.com www.google.bf www.google.cd www.google.kg www.google.tg *.eservice.emarsys.net https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://d94c0886-5f3c-4cfa-bd0f-6b0e89adce4f.sansec.watch/; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com maxcdn.bootstrapcdn.com *.salesfire.co.uk *.klarnacdn.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.facebook.com *.googlesyndication.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.doubleclick.net *.facebook.com *.googlesyndication.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.salesfire.co.uk *.googleapis.com *.trustpilot.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.trackedlink.net *.ddlnk.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com * www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.salesfire.co.uk maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com * js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.salesfire.co.uk *.googleapis.com *.trustpilot.com https://www.southillsawmills.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com webchat.dotdigital.com webchat.staging.dotdigital.com downloads.mailchimp.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.salesfire.co.uk *.typekit.net *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://bam.nr-data.net/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.salesfire.co.uk *.smartmetrics.co.uk *.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.klevu.com *.ksearchnet.com https://www.gstatic.com https://fonts.gstatic.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.paytrace.com www.tiktok.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://meetanshi.com/media/logo.png fmgaggi.com images.simpletire.com rs.fullstory.com https://www.google-analytics.com https://www.googletagmanager.com https://bat.bing.com https://t.co https://analytics.twitter.com https://www.facebook.com https://px.ads.linkedin.com https://analytics.tiktok.com www.tiktok.com *.tiktokcdn.com *.tiktokcdn-us.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.klevu.com *.ksearchnet.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.disqus.com *.paytrace.com hotjar.com fmgaggi.com simpletire.com edge.fullstory.com rs.fullstory.com cdn.rudderlabs.com https://www.googletagmanager.com https://www.google-analytics.com https://bat.bing.com https://static.ads-twitter.com https://connect.facebook.net https://snap.licdn.com https://analytics.tiktok.com https://us-assets.i.posthog.com https://eu-assets.i.posthog.com www.tiktok.com *.tiktokcdn.com *.tiktokcdn-us.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com simpletire.com assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com api.addressy.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com fmgaggi.com static.hotjar.com simpletire.com affiliate.simpletire.com edge.fullstory.com rs.fullstory.com api.rudderstack.com https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com https://bat.bing.com https://analytics.twitter.com https://www.facebook.com https://px.ads.linkedin.com https://analytics.tiktok.com https://us.i.posthog.com https://eu.i.posthog.com www.tiktok.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.azure-api.net 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com *.azure-api.net *.facebook.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.gstatic.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://meetanshi.com/media/logo.png *.facebook.com *.google.fr *.googletagmanager.com *.google-analytics.com ssl.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.azure-api.net *.cloudflare.com *.facebook.net *.googletagmanager.com tagmanager.google.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.fontawesome.com *.cloudflare.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.instagram.com *.facebook.com *.accounts.google.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-U2iTXqKSkkQPzVR1wtuNvA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https: 'unsafe-inline' 'unsafe-eval' data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://www.googletagmanager.com https://*.google-analytics.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://*.gstatic.com https://www.recaptcha.net https://recaptcha.net https://sdk.privacy-center.org https://*.privacy-center.org https://*.didomi.io https://metrics-gtm.kpark.fr; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss:; frame-src 'self' https:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; report-uri /api/csp-report; report-to csp-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://use.typekit.net https://p.typekit.net *.fontawesome.com https://fonts.gstatic.com https://www.gstatic.com maxcdn.bootstrapcdn.com https://fonts.bunny.net *.yotpo.com *.googleapis.com https://accounts.livechat.com/ *.globewest.com.au *.shopify.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com *.globewest.com.au 'self' 'unsafe-inline'; frame-ancestors *.globewest.com.au 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.teamtailor.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com *.yotpo.com https://accounts.livechat.com/ *.globewest.com.au 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com *.trackedlink.net magefan.com cm.magefan.com *.disqus.com *.teamtailor-cdn.com *.teamtailor.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.xtento.com cdn.xtento.com *.yotpo.com https://accounts.livechat.com/ *.globewest.com.au *.linkedin.com *.facebook.com *.clarity.ms *.pinterest.com *.nr-data.net *.bing.com *.google.com *.google.com.vn data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://api.addressfinder.io https://rum.hlx.page *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.disqus.com *.cloudflare.com *.teamtailor-cdn.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.avada.io *.shopify.com *.bpaygroup.com.au js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://cdn.searchspring.net/intellisuggest/is.min.js www.xtento.com cdn.xtento.com *.yotpo.com https://accounts.livechat.com/ https://bam.nr-data.net/* *.facebook.net *.globewest.com.au *.addtoany.com *.hotjar.com *.livechatinc.com *.licdn.com *.pinimg.com *.bing.com *.clarity.ms unpkg.com *.pinterest.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://api.addressfinder.io webchat.dotdigital.com webchat.staging.dotdigital.com https://use.typekit.net https://p.typekit.net *.fontawesome.com *.googleapis.com *.addtoany.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com maxcdn.bootstrapcdn.com https://fonts.bunny.net assets.braintreegateway.com *.yotpo.com https://accounts.livechat.com/ *.globewest.com.au 'self' 'unsafe-inline'; object-src https://accounts.livechat.com/ *.globewest.com.au 'self' 'unsafe-inline'; media-src *.adobe.com https://accounts.livechat.com/ *.globewest.com.au 'self' 'unsafe-inline'; manifest-src *.globewest.com.au 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://api.addressfinder.io *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.teamtailor-cdn.com *.teamtailor.com http://dpm.demdex.net https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://beacon.searchspring.io/beacon *.yotpo.com https://accounts.livechat.com/ https://bam.nr-data.net/* *.globewest.com.au *.linkedin.com *.facebook.com *.clarity.ms *.pinterest.com *.bing.com *.google.com.vn 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com https://bam.nr-data.net/* *.globewest.com.au http: https: blob: 'self' 'unsafe-inline'; default-src https://accounts.livechat.com/ https://bam.nr-data.net/* *.globewest.com.au 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.globewest.com.au 'self' 'unsafe-inline'; 1
frame-src 'self'; report-uri https://www.swimacrossamerica.org/site/XFrameViolation 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://salesiq.zoho.com https://*.zoho.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://*.googleapis.com https://*.gstatic.com https://*.kasikornbank.com https://kpaymentgateway.kasikornbank.com https://dev-kpaymentgateway.kasikornbank.com https://kpaymentgateway-services.kasikornbank.com https://dev-kpaymentgateway-services.kasikornbank.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://*.kasikornbank.com https://kpaymentgateway.kasikornbank.com https://dev-kpaymentgateway.kasikornbank.com https://kpaymentgateway-services.kasikornbank.com https://dev-kpaymentgateway-services.kasikornbank.com; img-src 'self' data: https:; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com; connect-src 'self' https://staygrid.com https://*.staygrid.com https://*.zoho.com https://*.googleapis.com wss: https://*.kasikornbank.com https://kpaymentgateway.kasikornbank.com https://dev-kpaymentgateway.kasikornbank.com https://kpaymentgateway-services.kasikornbank.com https://dev-kpaymentgateway-services.kasikornbank.com; frame-src 'self' https://*.zoho.com https://*.zohopublic.com https://*.staygrid.com https://*.kasikornbank.com https://kpaymentgateway.kasikornbank.com https://dev-kpaymentgateway.kasikornbank.com https://kpaymentgateway-services.kasikornbank.com https://dev-kpaymentgateway-services.kasikornbank.com; object-src 'self' https://*.staygrid.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net https://fonts.gstatic.com https://use.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://square-fonts-production-f.squarecdn.com/ https://d1g145x70srn7h.cloudfront.net/ https://cash-f.squarecdn.com/ https://fonts.gstatic.com/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://test.transafe.com https://post.live.transafe.com https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ https://test.transafe.com https://post.live.transafe.com https://pci-connect.squareup.com https://connect.squareup.com https://pci-connect.squareupsandbox.com https://connect.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com https://meetanshi.com/media/logo.png https://www.gstatic.com/ https://sandbox.api.cash.app/ https://site-assets.afterpay.com/ https://sandbox.web.squarecdn.com/ https://api.cash.app/ https://web.squarecdn.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://franklin-assets.s3.amazonaws.com/ https://static.sandbox.afterpay.com/ https://static.afterpay.com/ https://static.sandbox.afterpay.com/logo/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.disqus.com *.avada.io *.shopify.com *.payaconnect.com https://test.transafe.com https://post.live.transafe.com https://js-sandbox.squarecdn.com https://js.squareup.com https://js.afterpay.com/ https://nd.squarecdn.com https://js.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://portal.sandbox.afterpay.com/ https://portal.afterpay.com/ https://cdn.plaid.com/ https://sandbox.kit.cash.app/ https://kit.cash.app/ https://js-sandbox.squarecdn.com/ https://js.squarecdn.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://use.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://fonts.googleapis.com/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io https://get.geojs.io *.avada.io https://olegnax.com https://api.instagram.com https://graph.instagram.com/ https://pci-connect.squareup.com https://pci-connect.squareupsandbox.com https://api.amplitude.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://o160250.ingest.sentry.io/ https://api.lab.amplitude.com/sdk/vardata https://sandbox.plaid.com/ https://production.plaid.com/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com fonts.gstatic.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com magento-cloudflare.jetrails.com https://www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.weltpixel.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com *.ytimg.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com *.cdninstagram.com *.fbcdn.net maps.googleapis.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.google.com *.gstatic.com maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com ajax.googleapis.com https://www.googletagmanager.com tagmanager.google.com unpkg.com *.instagram.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.certcapture.com https://static.klaviyo.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com tagmanager.google.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.google-analytics.com *.doubleclick.net https://www.google-analytics.com *.instagram.com *.googleusercontent.com *.yotpo.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://f76f10d2-68e2-4789-9aaf-4449480ad26c.sansec.watch/; report-to report-endpoint; 1
worker-src blob:; form-action *.cardinalcommerce.com *.paypal.com www.sandbox.paypal.com *.amazon.com *.facebook.com *.googlesyndication.com *.tiktok.com connect.facebook.net 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src *.googletagmanager.com *.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com *.paypal.com www.sandbox.paypal.com www.paypalobjects.com player.vimeo.com *.google.com *.braintreegateway.com google.com *.klarna.com js.stripe.com *.amazon.com *.payments-amazon.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com connect.facebook.net www.commercepartnerhub.com assets.braintreegateway.com plumrocket.com *.authorize.net *.artifi.net www.googleadservices.com assets.pinterest.com ct.pinterest.com i.liadm.com *.securly.com gateway.zscalerthree.net ep2.adtrafficquality.google 'self' 'unsafe-inline'; script-src *.googletagmanager.com *.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net *.google.com *.newrelic.com *.nr-data.net *.authorize.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.paypal.com www.sandbox.paypal.com www.paypalobjects.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.gstatic.com assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com *.typekit.net google.com *.cdn-apple.com *.braintreegateway.com *.klarna.com *.klarnacdn.net x.klarnacdn.net js.stripe.com *.payments-amazon.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.searchspring.net *.athoscommerce.net *.klarnaservices.com *.klaviyo.com fast.a.klaviyo.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.shopify.com *.sandbox.braintreegateway.com *.popt.in *.cloudflare.com *.artifi.net maps.googleapis.com www.googletagservices.com *.visualwebsiteoptimizer.com https://cdn.searchspring.net/intellisuggest/is.min.js *.searchspring.io *.cloudfront.net s.pinimg.com bat.bing.com tag.rmp.rakuten.com ut.rd.linksynergy.com *.pinterest.com cdn.noibu.com *.hotjar.com b-code.liadm.com secure.merchantadvantage.com *.celebros.com ep2.adtrafficquality.google static.colorfulimages.com 'self' 'unsafe-inline' 'unsafe-eval'; report-uri https://www.colorfulimages.com/pr-csp/report/add/; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: maxcdn.bootstrapcdn.com fonts.googleapis.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://www.shopperapproved.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://store.plumrocket.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.affirm.com *.affirm.ca c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://store.plumrocket.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com landofcoder.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.affirm.com *.affirm.ca ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://www.shopperapproved.com magefan.com cm.magefan.com quickchart.io img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://*.clarity.ms https://c.bing.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.affirm.com *.affirm.ca chimpstatic.com downloads.mailchimp.com *.list-manage.com https://www.shopperapproved.com https://direct.shopperapproved.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com statics.esputnik.com https://www.clarity.ms https://scripts.clarity.ms *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com landofcoder.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com maxcdn.bootstrapcdn.com fonts.gstatic.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.affirm.com *.affirm.ca https://www.sandbox.paypal.com https://www.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com tracker.esputnik.com esputnik.com https://*.clarity.ms https://c.bing.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com landofcoder.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self'; frame-src 'self'; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none'; upgrade-insecure-requests; 1
font-src *.googleapis.com *.gstatic.com data: https://*.gopersonal.ai *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.google.com https://*.gopersonal.ai *.izipay.pe *.doubleclick.net *.google.com www.facebook.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com *.googleapis.com https://*.gopersonal.ai https://firebasestorage.googleapis.com *.perfumeriasunidas.com *.sentua.com sentua.com *.google.com *.google.es *.google.com.mx *.hubapi.com *.hubspot.com *.hsforms.com *.facebook.com *.google.com.pe data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://*.gopersonal.ai https://checkout.izipay.pe https://sandbox-checkout.izipay.pe *.avada.io *.shopify.com *.tiktok.com js.hubspot.com js.usemessages.com *.nr-data.net *.newrelic.com *.vnforapps.com *.facebook.com *.facebook.net *.luckyorange.com *.doubleclick.net *.hsleadflows.net *.hscollectedforms.net *.hs-analytics.net *.hs-banner.com *.hs-scripts.com *.hsadspixel.net *.omappapi.com *.googleadservices.com *.google-analytics.com *.google.com *.googletagmanager.com *.paypalobjects.com *.adobedtm.com amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net magento-recs-sdk.adobe.net *.braintreegateway.com *.cardinalcommerce.com *.unpkg.com plugins-media.makeupar.com *.hotjar.com cdn.jsdelivr.net *.useinsider.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src unsafe-inline assets.braintreegateway.com fonts.googleapis.com https://*.gopersonal.ai *.fontawesome.com https://fonts.bunny.net *.omappapi.com cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com https://*.gopersonal.ai https://*.goshops.ai https://*.googleapis.com https://*.gstatic.com *.izipay.pe https://get.geojs.io *.avada.io *.tiktok.com forms.hscollectedforms.net *.doubleclick.net *.omappapi.com *.luckyorange.com *.hubapi.com *.hubspot.com *.nr-data.net *.newrelic.com *.useinsider.com *.facebook.com *.hotjar.com localhost api.perfumeriasunidas.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-p7-z2IcjPqePtIe0h8Jl-g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src https://www.googletagmanager.com *.googleapis.com *.gstatic.com *.cloudflare.com *.typekit.net *.trustedshops.com *.fontawesome.com fonts.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com youtu.be *.vimeo.com *.addthis.com *.google.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.gstatic.com *.cloudflare.com https://cdn.klarna.com *.paypal.com https://s.ytimg.com *.usercentrics.eu blob: https://www.magezon.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com tagmanager.google.com https://www.googletagmanager.com *.cloudflare.com *.google-analytics.com *.google.com *.gstatic.com *.googleadservices.com *.googleapis.com *.trustedshops.com *.usercentrics.eu *.addthis.com *.addthisedge.com *.moatads.com www.paypal.com www.paypalobjects.com s7.addthis.com *.google.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.cloudflare.com *.typekit.net *.trustedshops.com *.usercentrics.eu fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.google-analytics.com *.cloudflare.com *.paypal.com *.googleapis.com ekr.zdassets.com/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
report-uri http://dropsolid.com/en/report-uri/reportOnly 1
default-src 'self' https: 'unsafe-inline' 'unsafe-eval'; img-src * data: blob:; media-src * data: blob:; connect-src *; font-src * data:; frame-src *; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; 1
upgrade-insecure-requests; report-to *.googletagmanager.com; report-uri *.googletagmanager.com; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com fonts.googleapis.com https://applepay.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.payplug.com *.dalenys.com https://applepay.cdn-apple.com *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.openstreetmap.org maps.googleapis.com maps.gstatic.com https://images.unsplash.com magefan.com cm.magefan.com cdn.doofinder.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.doubleclick.net *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://secure-magenta.dalenys.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https://maps.googleapis.com cdn.doofinder.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.gstatic.com *.googletagmanager.com *.doubleclick.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://secure-magenta.dalenys.com https://applepay.cdn-apple.com api.payplug.com cdn.payplug.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.doofinder.com *.googleapis.com *.googletagmanager.com assets.braintreegateway.com https://secure-magenta.dalenys.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com maps.googleapis.com https://maps.googleapis.com https://player.vimeo.com *.doofinder.com wss://*.doofinder.com *.google-analytics.com *.doubleclick.net *.googlesyndication.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com *.klarnacdn.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.elfsight.com https://js.stripe.com https://hooks.stripe.com https://*.ewaypayments.com https://*.sandbox.ewaypayments.com *.klarna.com *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.trackedlink.net *.ddlnk.net magefan.com cm.magefan.com *.elfsightcdn.com https://*.stripe.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.disqus.com t.zip.co static.zip.co https://www.google.co.in/ https://www.google.co.in/pagead https://www.google.co.in/pagead/* https://bat.bing.com/ https://bat.bing.com/* https://bat.bing.com/action https://bat.bing.com/action/* data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://api.addressfinder.io https://rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com elfsightcdn.com *.elfsightcdn.com elfsight.com *.elfsight.com https://js.stripe.com *.stripecdn.com https://*.stripe.network https://*.stripecdn.com https://*.ewaypayments.com https://*.sandbox.ewaypayments.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.disqus.com *.stripe.com *.stripe.network klarna.com *.klarnaevt.com *.amazon.com *.link.com static.zip.co zip.co https://v2.zopim.com/ https://t.cfjump.com/tag/ https://t.cfjump.com/* https://*.adobedtm.com https://geostag.cardinalcommerce.com https://1eafstag.cardinalcommerce.com https://geoapi.cardinalcommerce.com https://1eafapi.cardinalcommerce.com https://email.camerapro.com.au/ https://email.camerapro.com.au/* https://static.zdassets.com/ekr/ https://static.zdassets.com/ https://acds-events.adobe.io/v7/ds.min.js https://bat.bing.com/ https://connect.facebook.net/en_US/ https://js-agent.newrelic.com https://*.adobedc.net https://web-sdk.smartlook.com https://web-sdk.smartlook.com/* https://web-sdk.smartlook.com/recorder.js https://www.clarity.ms/ https://www.clarity.ms/* https://www.clarity.ms/tag/ https://www.clarity.ms/tag/* https://scripts.clarity.ms https://scripts.clarity.ms/* https://scripts.clarity.ms/0.8.61/ https://scripts.clarity.ms/0.8.61/* https://www.camerapro.com.au 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com https://api.addressfinder.io assets.braintreegateway.com webchat.dotdigital.com webchat.staging.dotdigital.com *.elfsightcdn.com *.klarnacdn.net *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https://static.zdassets.com *.zdassets.com/ https://www.google.co.in/ads/ga-audiences/* 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://api.addressfinder.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.elfsightcdn.com *.elfsight.com https://*.stripe.com https://*.stripe.network *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.stripe.com klarna.com *.link.com *.amazon.com https://a.clarity.ms/collect https://*.clarity.ms/collect wss://widget-mediator.zopim.com/ https://bam.nr-data.net https://*.adobedc.net https://commerce.adobedc.net https://assets-proxy.smartlook.cloud https://assets-proxy.smartlook.cloud/* https://ekr.zdassets.com https://ekr.zdassets.com/* https://cameraproptyltd.zendesk.com https://cameraproptyltd.zendesk.com/* https://web-writer.eu.smartlook.cloud/ https://web-writer.eu.smartlook.cloud/* https://manager.eu.smartlook.cloud https://manager.eu.smartlook.cloud/* 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com https://api.systempay.fr/static/ *.fontawesome.com https://fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://paiement.systempay.fr/vads-payment/ https://api.systempay.fr/api-payment/ https://api.systempay.fr/static/ 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com landofcoder.com https://paiement.systempay.fr/vads-payment/ https://api.systempay.fr/static/ *.google.com/ https://player.vimeo.com https://www.youtube-nocookie.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://www.magezon.com blueskytechmage.com mageblueskytech.com placehold.jp https://paiement.systempay.fr/static/latest/images/type-carte/ https://api.systempay.fr/static/ https://paiement.systempay.fr/vads-payment/ magefan.com cm.magefan.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com matomo.lcanetwork.com landofcoder.com https://api.systempay.fr/api-payment/ https://api.systempay.fr/static/ s7.addthis.com *.google.com/ https://player.vimeo.com https://www.youtube.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com https://api.systempay.fr/static/ *.fontawesome.com https://fonts.googleapis.com http://fonts.googleapis.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://matomo.lcanetwork.com landofcoder.com https://paiement.systempay.fr/vads-payment/ https://api.systempay.fr/api-payment/ ekr.zdassets.com/ https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src https://paiement.systempay.fr/vads-payment/ https://api.systempay.fr/api-payment/ https://api.systempay.fr/static/ 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; img-src 'self' data: blob: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://challenges.cloudflare.com https:; connect-src 'self' https: wss:; frame-src 'self' https://challenges.cloudflare.com https:; worker-src 'self' blob:; manifest-src 'self'; media-src 'self' data: https:; block-all-mixed-content 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://www.googletagmanager.com *.googleapis.com https://geowidget.easypack24.net mautic.sanpol.pl data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * mautic.sanpol.pl mauticdev.sanpol.pl 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://geowidget-app.inpost.pl/ https://sandbox-easy-geowidget.easypack24.net/ js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * mautic.sanpol.pl mauticdev.sanpol.pl *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://images.unsplash.com *.bird.eu https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com mautic.sanpol.pl mauticdev.sanpol.pl *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com *.google.com *.google.pl *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com https://player.vimeo.com tagmanager.google.com https://www.googletagmanager.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com mautic.sanpol.pl mauticdev.sanpol.pl *.googletagmanager.com *.vercel.app 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://geowidget.easypack24.net https://geowidget.inpost.pl assets.braintreegateway.com fonts.google.com mautic.sanpol.pl *.google-analytics.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://geowidget.easypack24.net mautic.sanpol.pl 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com https://player.vimeo.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.easypack24.net *.inpost.pl *.openstreetmap.org api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com mautic.sanpol.pl mauticdev.sanpol.pl *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com mautic.sanpol.pl http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net *.revolut.com *.google.com google.com *.cdn-apple.com pay.google.com *.checkout.vficloud.net *.vficloud.net *.amazonaws.com *.checkout.verifone.cloud *.verifone.cloud data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com *.gstatic.com *.checkout.vficloud.net *.vficloud.net *.checkout.verifone.cloud *.verifone.cloud 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.revolut.com *.cdn-apple.com *.gstatic.com *.checkout.vficloud.net *.vficloud.net *.checkout.verifone.cloud *.verifone.cloud 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.avada.io *.shopify.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.revolut.com *.gstatic.com *.checkout.vficloud.net *.vficloud.net *.checkout.verifone.cloud *.verifone.cloud 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.revolut.com *.cdn-apple.com pay.google.com *.gstatic.com *.checkout.vficloud.net *.vficloud.net *.checkout.verifone.cloud *.verifone.cloud 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-1lI3QxvFtJxtjUvw3gDzQw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://*.googletagmanager.com https://js.hs-scripts.com https://*.hubspot.com https://js.usemessages.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hscollectedforms.net https://static.hotjar.com https://script.hotjar.com https://va.vercel-scripts.com https://static.cdn.prismic.io; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; media-src 'self' https:; frame-src 'self' https://*.hubspot.com https://*.googletagmanager.com https://*.prismic.io; object-src 'none'; base-uri 'self'; form-action 'self' https://*.hubspot.com; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-LYAEZEJOXQR3ujwfe5z2hg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' 'unsafe-inline' https://static.addtoany.com https://www.youtube.com https://td.doubleclick.net https://ct.pinterest.com https://use.fontawesome.com https://use.typekit.net https://fonts.gstatic.com; connect-src 'self' https://ka-p.fontawesome.com https://kit-uploads.fontawesome.com https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://ct.pinterest.com https://analytics.google.com https://stats.addtoany.com/menu; img-src 'self' https://server.arcgisonline.com https://www.facebook.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com.au https://i.ytimg.com https://i.ytimg.com/vi_webp/GT0eeHf2Rc8/mqdefault.webp data:; object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' https://www.googletagmanager.com https://s.pinimg.com https://connect.facebook.net https://ct.pinterest.com https://www.google-analytics.com cdn.jsdelivr.net cdnjs.cloudflare.com https://api.mapbox.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://kit.fontawesome.com https://static.addtoany.com https://unpkg.com https://use.fontawesome.com mdbootstrap.com unpkg.com; style-src 'self' 'report-sample' https://p.typekit.net https://use.typekit.net cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https://api.mapbox.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maxst.icons8.com https://unpkg.com mdbootstrap.com unpkg.com use.fontawesome.com; style-src-elem 'self' 'report-sample' https://p.typekit.net https://use.typekit.net cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https://api.mapbox.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maxst.icons8.com https://unpkg.com mdbootstrap.com unpkg.com use.fontawesome.com 1
default-src 'self'; manifest-src 'self' *.airwaysim.com *.airlinemanagementsim.com; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.airwaysim.com *.airlinemanagementsim.com fd.cleantalk.org js.braintreegateway.com assets.braintreegateway.com www.paypalobjects.com *.paypal.com pay.google.com songbird.cardinalcommerce.com static.client.cardinaltrusted.com *.cdn-apple.com www.google.com www.gstatic.com connect.facebook.net www.googletagmanager.com *.doubleclick.net; style-src 'self' data: blob: 'unsafe-inline' *.airwaysim.com *.airlinemanagementsim.com assets.braintreegateway.com cdnjs.cloudflare.com fonts.googleapis.com; font-src 'self' data: cdnjs.cloudflare.com fonts.gstatic.com; connect-src 'self' data: https: stats.airwaysim.com api.braintreegateway.com client-analytics.braintreegateway.com *.braintree-api.com *.paypal.com pay.google.com *.cardinalcommerce.com *.cardinaltrusted.com www.google.com google.com www.gstatic.com www.facebook.com; frame-src 'self' https: assets.braintreegateway.com *.paypal.com www.google.com recaptcha.google.com www.facebook.com; form-action 'self' https:; img-src * data: blob:; object-src 'none'; report-uri /errors/cspreport 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com *.certcapture.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com *.certcapture.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com gtlinens.com yotpo-editor-production.s3.amazonaws.com bat.bing.com static.hotjar.com script.hotjar.com www.clarity.ms img.youtube.com www.google.com.br https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://maps.gstatic.com https://maps.googleapis.com https://images.unsplash.com blob: magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com s.pinimg.com *.certcapture.com chimpstatic.com downloads.mailchimp.com *.list-manage.com bat.bing.com static.hotjar.com script.hotjar.com www.clarity.ms ct.pinterest.com www.youtube.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://maps.googleapis.com/maps/api/ https://maps.googleapis.com/ *.disqus.com *.avada.io *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com downloads.mailchimp.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com *.certcapture.com bat.bing.com static.hotjar.com *.clarity.ms www.youtube.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://maps.googleapis.com https://get.geojs.io *.avada.io *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.googleapis.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com fonts.googleapis.com fonts.gstatic.com *.hotjar.com *.zopim.com *.fontawesome.com data: *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com texman.pl *.eu01.nr-data.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com texman.pl 'self' 'unsafe-inline'; frame-ancestors texman.pl 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com cdn.dnky.co *.hotjar.com *.trustpilot.com *.criteo.com www.googletagmanager.com texman.pl *.eu01.nr-data.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.googleapis.com *.gstatic.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.google.nl connect.onlinesucces.nl px.ads.linkedin.com stats.g.doubleclick.net *.linkedin.com gallery.mailchimp.com *.trustedshops.com *.zopim.com cdn.jsdelivr.net *.jmango360.com *.datatrics.com *.smaato.net *.disqus.com *.alothemes.com *.magepow.com bam.eu01.nr-data.net www.google.hr www.google.com.ua texman.pl www.google.pl *.eu01.nr-data.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.paypal.com *.googleadservices.com cdn.dnky.co api.comapi.com *.trackedlink.net snap.licdn.com chimpstatic.com checkout.buckaroo.nl *.adyen.com *.zopim.com *.hotjar.com *.zdassets.com *.sendcloud.sc *.mailchimp.com *.trustedshops.com *.fontawesome.com *.feedbackcompany.com *.trustpilot.com *.newrelic.com *.nr-data.net cdn.jsdelivr.net *.googleoptimize.com *.clarity.ms *.datatrics.com *.criteo.net *.criteo.com cdn.mouseflow.com *.disqus.com *.avada.io *.alothemes.com *.magepow.com texman.pl *.eu01.nr-data.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com cdn.dnky.co checkout.buckaroo.nl *.fontawesome.com *.mailchimp.com *.trustpilot.com cdn.jsdelivr.net *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com texman.pl *.eu01.nr-data.net 'self' 'unsafe-inline'; object-src texman.pl *.eu01.nr-data.net 'self' 'unsafe-inline'; media-src *.adobe.com *.zopim.com texman.pl *.eu01.nr-data.net 'self' 'unsafe-inline'; manifest-src texman.pl *.eu01.nr-data.net 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.paypal.com commerce.adobedc.net api.comapi.com stats.g.doubleclick.net *.zdassets.com *.hotjar.com *.hotjar.io *.zopim.com wss://*.zopim.com *.feedbackcompany.com *.zendesk.com *.nr-data.net *.clarity.ms *.datatrics.com https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com www.google.de texman.pl www.google.pl *.eu01.nr-data.net 'self' 'unsafe-inline'; child-src texman.pl *.eu01.nr-data.net http: https: blob: 'self' 'unsafe-inline'; default-src texman.pl *.eu01.nr-data.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri texman.pl 'self' 'unsafe-inline'; report-uri /csp_reporter.php; 1
base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'nonce-yCTnaQ2i9zm5b6VGhM2+ng==' https://www.google.com https://kit.fontawesome.com https://ka-p.fontawesome.com https://mpsnare.iesnare.com https://widget.trustpilot.com https://kit-pro.fontawesome.com https://www.googletagmanager.com https://bat.bing.com https://www.dwin1.com https://www.googleadservices.com https://www.google-analytics.com https://region1.google-analytics.com https://region2.google-analytics.com https://region3.google-analytics.com https://analytics.google.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://region1.analytics.google.com https://region2.analytics.google.com https://region3.analytics.google.com https://www.paypal.com https://www.paypalobjects.com https://www.sandbox.paypal.com https://b.sbox.stats.paypal.com https://sdk.privacy-center.org https://api.privacy-center.org https://sibautomation.com https://in-automate.brevo.com https://pagead2.googlesyndication.com https://widget.botmind.io https://api.widget.botmind.ai https://matomo.123roulement.com https://matomojs.trackify.info https://checkoutshopper-live.adyen.com https://checkoutshopper-live.cdn.adyen.com https://checkoutanalytics-live.adyen.com https://applepay.cdn-apple.com https://x.klarnacdn.net https://pay.google.com https://insights.algolia.io https://cdn.jsdelivr.net https://cdn.jsdelivr.net/npm/search-insights https://tag.123kogellager.nl https://tag.123cuscinetti.it https://tag.123rodamiento.es https://tag.123bearing.ca https://tag.123bearing.co.uk https://tag.123bearing.ie https://tag.123roulement.ch https://tag.123cuscinetti.ch https://tag.123kugellager.ch https://tag.123kogellager.be https://tag.123kugellager.at https://tag.123lozysko.pl https://tag.123rodamiento.mx https://tag.123roulement.be https://tag.123roulement.ca https://apis.google.com https://www.gstatic.com; connect-src 'self' https://*.algolia.net https://*.algolianet.com https://insights.algolia.io https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://region2.google-analytics.com https://region3.google-analytics.com https://region1.analytics.google.com https://region2.analytics.google.com https://region3.analytics.google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com https://pay.google.com https://checkoutshopper-live.adyen.com https://checkoutshopper-live.cdn.adyen.com https://checkoutanalytics-live.adyen.com https://www.paypal.com https://www.sandbox.paypal.com https://b.sbox.stats.paypal.com https://sdk.privacy-center.org https://api.privacy-center.org https://sibautomation.com https://in-automate.brevo.com https://widget.botmind.io https://api.widget.botmind.ai https://matomo.123roulement.com https://matomojs.trackify.info https://widget.trustpilot.com https://kit.fontawesome.com https://ka-p.fontawesome.com https://kit-pro.fontawesome.com https://bat.bing.com https://www.dwin1.com https://mpsnare.iesnare.com https://tag.123kogellager.nl https://tag.123cuscinetti.it https://tag.123rodamiento.es https://tag.123bearing.ca https://tag.123bearing.co.uk https://tag.123bearing.ie https://tag.123roulement.ch https://tag.123cuscinetti.ch https://tag.123kugellager.ch https://tag.123kogellager.be https://tag.123kugellager.at https://tag.123lozysko.pl https://tag.123rodamiento.mx https://tag.123roulement.be https://tag.123roulement.ca; default-src 'self'; img-src 'self' data: https://cdn.123kugellager.de https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://bat.bing.com https://www.dwin1.com https://matomo.123roulement.com https://matomojs.trackify.info https://widget.trustpilot.com https://www.gstatic.com https://apis.google.com https://checkoutshopper-live.adyen.com https://checkoutshopper-live.cdn.adyen.com https://www.paypalobjects.com https://x.klarnacdn.net https://applepay.cdn-apple.com https://pay.google.com; style-src 'self' 'unsafe-inline' https://widget.trustpilot.com https://sdk.privacy-center.org https://widget.botmind.io https://www.gstatic.com; font-src 'self' data:; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://www.google.com https://checkoutshopper-live.adyen.com https://checkoutshopper-live.cdn.adyen.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://x.klarnacdn.net https://sdk.privacy-center.org https://api.privacy-center.org https://widget.botmind.io https://widget.trustpilot.com https://apis.google.com https://www.gstatic.com; media-src 'self'; form-action 'self' https://checkoutshopper-live.adyen.com https://checkoutshopper-live.cdn.adyen.com https://www.paypal.com https://www.sandbox.paypal.com; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests; report-uri /_csp-report; report-to csp-endpoint 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://www.gstatic.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://*.google.com www.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com *.authorize.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com magefan.com cm.magefan.com https://www.mollie.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://*.google.com https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com pay.google.com applepay.cdn-apple.com *.authorize.net maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.authorize.net places.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
style-src *.force.com 'unsafe-inline' 'self' https://api.mixpanel.com https://gateway.gainsightcloud.com https://checkoutshopper-test.adyen.com/ https://acquia.gainsightcloud.com https://*.forethought.ai https://acquia--full--c.sandbox.vf.force.com https://*.springcm.com https://dev-agent.acquia.net http://adn.acquia.com https://fonts.gstatic.com https://checkoutshopper-live.adyen.com/ https://feeds.feedburner.com https://acquia.my.site.com https://aq112111s.searchunify.com https://aq142201p.searchunify.com https://dev-adn.acquia.com https://acquia.my.salesforce.com https://d3mvpbun2t0ap6.cloudfront.net https://calendar.google.com https://fonts.googleapis.com/css2 blob: https://sfapi-sandbox.formstack.io https://embed.widencdn.net https://www.acquia.com https://api.forethought.ai https://fonts.googleapis.com/css https://acquia.widen.net https://sentry.io https://www.googletagmanager.com https://www.equusoft.com *.widencollective.com https://www.widen.com https://d1z9ryalr1cz6s.cloudfront.net https://www.google-analytics.com *.salesforce.com *.visualforce.com:* https://widen.widen.net https://agent.acquia.net https://service.force.com/embeddedservice/ https://sfapi.formstack.io; report-to sfdc-csp-ep; report-uri https://acquia.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D6g000003vCaM&networkId=0DM6g000000Rijv&type=communities 1
script-src 'unsafe-inline' 'unsafe-eval'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=7U6vfBfh9Ne7CrhHRUsXz9oK9Faz7VfatbwakpgyW24-1789275116.3739033-1.0.1.1-WaYfp5HFRFFVJ2_flRzcQNZRFpIC.69cJzOSTScmQRlFGn7EtgDSeE7EgxAy_7sh17wFi9ShdIehm_WSQdWcvrcrEyOX_K_Tf4vv7DWa_CovEqiuVrLx6cJlNPunMgBlNaOb.pcfTCY0XrM8l5q5Xh3KQ7f0Vh8THXc3Nq0OL7c; report-to cf-csp-endpoint 1
default-src 'self'; script-src 'self' 'nonce-omA4wxhbpKCM7_HSr5trNrWrWtPQgk252GsRqgH-naXURsOlb_4r5g' data: https://*.openstreetmap.org 'unsafe-eval' https://*.cvag.mogic-server.de https://*.youtube.com https://*.google.com https://*.usercentrics.eu https://*.cmp.usercentrics.eu https://statistics.cvag.de 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://*.openstreetmap.org https:; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com *.meldungen.city-bahn.de https://meldungen.city-bahn.de https://*.cvag.mogic-server.de https://*.cvag.de https://*.instagram.com https://*.vimeo.com https://*.youtube.com; connect-src 'self' data: https://*.openstreetmap.org https://graphql.usercentrics.eu/graphql https://*.cvag.mogic-server.de https://*.cvag.de https://*.statistics.cvag.de https://*.usercentrics.eu https://*.cmp.usercentrics.eu; media-src 'self' *.files.cvag.de https://files.cvag.de; style-src-elem 'self' 'nonce-omA4wxhbpKCM7_HSr5trNrWrWtPQgk252GsRqgH-naXURsOlb_4r5g' https://*.cvag.mogic-server.de https://*.usercentrics.eu https://*.cmp.usercentrics.eu https://*.openstreetmap.org https://statistics.cvag.de 'report-sample'; style-src 'self' 'nonce-omA4wxhbpKCM7_HSr5trNrWrWtPQgk252GsRqgH-naXURsOlb_4r5g' https://*.usercentrics.eu https://*.cmp.usercentrics.eu https://*.openstreetmap.org 'report-sample'; report-uri https://www.cvag.de/@http-reporting?csp=report&requestTime=1789275226325783&requestHash=c35ff3b3f6087568c8aeca0d8258cb816e703234 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' boitempoeditorial.com.br *.boitempoeditorial.com.br wake-components.fbitsstatic.net boitempoeditorial.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br; frame-ancestors *.boitempoeditorial.com.br boitempoeditorial.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com a.omappapi.com *.fontawesome.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://seo.mageplaza.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com event.getblue.io static.omni.chat *.criteo.com static.criteo.net td.doubleclick.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com js.mollie.com js.stripe.com hooks.stripe.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com www.oceandrop.com.br c.clarity.ms *.bing.com www.google.com.br cm.g.doubleclick.net collect.vendavalida.com.br *.criteo.com *.omappapi.com a.mgid.com trackings.nemu.com.br openfpcdn.io ipinfo.io api.ipify.org api.bigdatacloud.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com event.getblue.io widget.getblue.io static.omni.chat a.omappapi.com oceandrop-br.mais.social js-agent.newrelic.com www.clarity.ms *.hotjar.com bat.bing.com www.googleoptimize.com collect.vendavalida.com.br *.criteo.com secure.afilio.com.br a.mgid.com *.ubembed.com rum.hlx.page trackings.nemu.com.br openfpcdn.io ipinfo.io api.ipify.org api.bigdatacloud.net *.convertexperiments.com d3bo67muzbfgtl.cloudfront.net player.vimeo.com widget.freshworks.com m2epro.freshdesk.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com js.mollie.com js.stripe.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com oceandrop-br.mais.social a.omappapi.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com player.vimeo.com *.vimeocdn.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://maps.googleapis.com https://player.vimeo.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com oceandrop-br.mais.social omnichat-web-chat.omni.chat webchat-adapter.omni.chat *.omappapi.com *.clarity.ms bam.nr-data.net ws.hotjar.com *.hotjar.io *.criteo.com stats.g.doubleclick.net collect.vendavalida.com.br bat.bing.com trackings.nemu.com.br openfpcdn.io ipinfo.io api.ipify.org api.bigdatacloud.net api.edrone.me widget.freshworks.com m2epro.freshdesk.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.stripe.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com *.google.com/ *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com js.stripe.com *.hotjar.com *.calendly.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: *.googleapis.com *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com cdn.doofinder.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.magezon.com https://biocare.webecast.atreemo.uk bat.bing.com *.google.co.uk *.googleadservices.com *.google-analytics.com *.magentocommerce.com *.widgets.magentocommerce.com *.paypalobjects.com *.postcodeanywhere.co.uk *.cloudflare.com *.klarna.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com connect.facebook.net *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com cdn.doofinder.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://tracking.atreemo.com https://bat.bing.com https://www.dwin1.com https://static.hotjar.com https://www.clarity.ms https://cdn.noibu.com https://script.hotjar.com https://services.postcodeanywhere.co.uk https://static.zdassets.com js-agent.newrelic.com bam.nr-data.net *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.calendly.com *.pcapredict.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.doofinder.com https://static.klaviyo.com services.postcodeanywhere.co.uk *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.pcapredict.com *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com *.doofinder.com wss://*.doofinder.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://p.clarity.ms https://cdn.noibu.com wss://input.noibu.com https://bam.nr-data.net https://services.postcodeanywhere.co.uk https://ekr.zdassets.com https://biocare.zendesk.com wss://widget-mediator.zopim.com *.pcapredict.com *.cloudflare.com *.twitter.com *.twimg.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-Ev3HDwEdRTYGYyQquyMacA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
worker-src blob:; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.kxcdn.com *.fontawesome.com *.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.gstatic.com *.fbcdn.net blob: https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com *.googleadservices.com *.googletagmanager.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com imgsct.cookiebot.com google.pl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://static.addtoany.com/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.googleapis.com *.google.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.fontawesome.com *.avada.io *.googletagmanager.com *.googleadservices.com *.google-analytics.com twitter.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' elfsightcdn.com *.cookiebot.com js.stripe.com static-na.payments-amazon.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com https://static.klaviyo.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io https://stats.addtoany.com/menu *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.googletagmanager.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com wss://livechathost.com *.cookiebot.com js.stripe.com stripe.com www.google-analytics.com googletagmanager.com connect.facebook.net static-na.payments-amazon.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self'; media-src 'self' https: blob:; frame-ancestors 'self'; frame-src 'self' https:; base-uri 'self'; form-action 'self'; object-src 'none' 1
default-src 'self'; script-src 'self' www.googletagmanager.com constructor.matomo.cloud cdn.matomo.cloud js-eu1.hs-scripts.com js.hs-scripts.com js-eu1.hubspot.com js-eu1.hs-banner.com js-eu1.hs-analytics.net js-eu1.usemessages.com snap.licdn.com connect.facebook.net assets.apollo.io 'nonce-2fiaScATDRzqCbUBTonuUw==' 'strict-dynamic'; connect-src 'self' constructor.matomo.cloud ip2c.org google.com www.google.com www.googleadservices.com www.googletagmanager.com www.google-analytics.com apis.google.com www.gstatic.com ad.doubleclick.net googleads.g.doubleclick.net px.ads.linkedin.com www.facebook.com connect.facebook.net api-eu1.hubspot.com cta-eu1.hubspot.com forms.hsforms.com forms-eu1.hsforms.com perf-eu1.hsforms.com aplo-evnt.com; img-src 'self' data: blob: *.constructor.tech brand-assets.capterra.com px.ads.linkedin.com px4.ads.linkedin.com www.linkedin.com ads.linkedin.com www.facebook.com connect.facebook.net track-eu1.hubspot.com track.hubspot.com perf-eu1.hsforms.com forms-eu1.hsforms.com googleads.g.doubleclick.net www.googleadservices.com www.googletagmanager.com i.ytimg.com google.com www.google.ad www.google.ae www.google.al www.google.am www.google.as www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cat www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.cn www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.com www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.ki www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.nr www.google.nu www.google.pl www.google.pn www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.st www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu www.google.ws; style-src 'self' 'unsafe-inline'; font-src 'self' data: fonts.gstatic.com; frame-src 'self' www.youtube-nocookie.com app-eu1.hubspot.com js-eu1.hsforms.net js.hsforms.net forms-eu1.hsforms.com www.facebook.com; media-src 'self'; worker-src 'self' blob:; style-src-attr 'unsafe-inline'; report-to csp-endpoint; report-uri /api/v2/csp/report 1
style-src-elem 'self' https://embed.tawk.to 'unsafe-inline'; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://embed.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://seo.mageplaza.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube-nocookie.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.instagram.com https://espace-revendeurs.ign.fr https://embed.tawk.to *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com https://img.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' https://tile.openstreetmap.org https://a.tile.openstreetmap.org https://b.tile.openstreetmap.org https://c.tile.openstreetmap.org https://embed.tawk.to data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com https://www.instagram.com https://embed.tawk.to https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://*.tawk.to wss://*.tawk.to https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-bETOBnyjGjI06sAPEMKP_w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src data.serverschrank24.de *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action data.serverschrank24.de *.facebook.com 'self' 'unsafe-inline'; frame-ancestors data.serverschrank24.de *.multisafepay.com https://pay.google.com 'self'; frame-src data.serverschrank24.de bid.g.doubleclick.net player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.sharethis.com *.google.com *.doubleclick.net *.facebook.com *.multisafepay.com https://pay.google.com *.apps.ladesk.com *.hubspot.com *.pinterest.com speelplezier.ladesk.com *.bing.net *.bing.com js.mollie.com 'self' 'unsafe-inline'; img-src data.serverschrank24.de widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com *.sharethis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.multisafepay.com https://at19.net https://bdt9.net https://ds1.nl https://dt51.net https://dt61.net https://fr135.net https://glp8.net https://jdt8.net https://jf79.net https://hs82.net https://lt45.net https://mt74.net https://ndt5.net https://rkn3.net *.bing.com *.bing.net *.cloudimg.io *.contentsquare.net *.etrusted.com *.google-analytics.com *.googlesyndication.com *.googleusercontent.com *.hsforms.com *.hubspot.com *.imgix.net *.linkedin.com *.premiere.page *.trustedshops.com www.google.be www.google.de www.google.nl flagpedia.net https://www.mollie.com *.tile.openstreetmap.org data: 'self' 'unsafe-inline'; script-src data.serverschrank24.de googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.sharethis.com *.google.com *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.multisafepay.com https://pay.google.com *.hs-analytics.net *.usemessages.com *.hs-scripts.com *.bing.net *.beslist.nl *.bing.com *.cloudflare.com *.contentsquare.net *.etrusted.com *.getqonfi.com *.google-analytics.com *.googlesyndication.com *.hotjar.com *.hs-banner.com *.hscollectedforms.net *.licdn.com *.pinimg.com *.pinterest.com *.premiere.page *.tiktok.com *.trustedshops.com *.webwinkelkeur.nl *.ladesk.com https://cdn.polyfill.io https://browser.sentry-cdn.com *.gstatic.com maps.googleapis.com js.mollie.com pay.google.com applepay.cdn-apple.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src data.serverschrank24.de *.sharethis.com *.googleapis.com *.doubleclick.net *.facebook.com *.multisafepay.com *.etrusted.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' 'unsafe-inline'; object-src data.serverschrank24.de 'self' 'unsafe-inline'; media-src data.serverschrank24.de 'self' 'unsafe-inline'; manifest-src data.serverschrank24.de 'self' 'unsafe-inline'; connect-src data.serverschrank24.de www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.sharethis.com *.google-analytics.com *.facebook.com *.facebook.net *.multisafepay.com *.beslist.nl *.bing.com *.bing.net *.contentsquare.net *.doubleclick.net *.etrusted.com *.getqonfi.com *.google.com *.googlesyndication.com *.hotjar.com *.hotjar.io *.hs-banner.com *.hscollectedforms.net *.hsforms.com *.hubspot.com *.linkedin.com *.pinterest.com *.premiere.page *.tiktok.com *.trustedshops.com www.google.be www.google.nl https://*.ingest.sentry.io www.gstatic.com maps.googleapis.com *.tile.openstreetmap.org 'self' 'unsafe-inline'; child-src data.serverschrank24.de http: https: blob: 'self' 'unsafe-inline'; default-src data.serverschrank24.de 'self' 'unsafe-inline' 'unsafe-eval'; base-uri data.serverschrank24.de 'self' 'unsafe-inline'; report-uri https://394bd828-e8ee-4169-91b3-7b587c6eb99c.sansec.watch/; report-to report-endpoint; 1
default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https://www.google.com https://*.google.com https://js.stripe.com https://hooks.stripe.com https://*.paypal.com https://*.paypalobjects.com; report-uri https://csp.threatview.app/report; report-to threatview 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: *.tawk.to maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com magefan.com cm.magefan.com *.disqus.com *.tawk.to https://img.youtube.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net *.disqus.com *.tawk.to https://cdn.jsdelivr.net *.avada.io *.shopify.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.tagmanager.google.com *.googletagmanager.com *.tawk.to https://cdn.jsdelivr.net maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app *.tawk.to https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://www.google.com https://www.gstatic.com https://js.stripe.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https: blob:; connect-src 'self' https://storage.googleapis.com https://generativelanguage.googleapis.com; frame-src 'self' https://sis.redsys.es https://js.stripe.com https://storage.googleapis.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 1
font-src fonts.gstatic.com use.typekit.net *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://www.facebook.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com www.google.com *.facebook.com *.dotdigital-pages.com *.dotdigital.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://plumrocket.com *.weltpixel.com 'self' 'unsafe-inline'; img-src https://assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net https://www.facebook.com https://www.google.co.in https://cdn.hoolah.co https://scontent.cdninstagram.com/ https://d27eqfoeueoniv.cloudfront.net https://amcglobal.sc.omtrdc.net https://dpm.demdex.net https://scontent-sin6-1.cdninstagram.com https://scontent-sin6-2.cdninstagram.com/ https://scontent-sin6-3.cdninstagram.com https://scontent-sin6-4.cdninstagram.com *.clarity.ms *.bing.com *.trackedlink.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.dycdn.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-ds.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://connect.facebook.net *.tiktok.com *.cloudfront.net *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.paypal.com *.paypalobjects.com *.googleapis.com *.gstatic.com *.google.com www.facebook.com https://merchant.cdn.hoolah.co https://merchant.cdn.hoolah.co.net *.trackedweb.net *.hit-pay.com *.clarity.ms https://hit-pay.com/hitpay.js https://am.freshrelevance.com/ *.assets.adobedtm.com *.trackedlink.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.dycdn.net dn1i8v75r669j.cloudfront.net dkpklk99llpj0.cloudfront.net ds9p2a60lh6fp.cloudfront.net am.freshrelevance.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://merchant.cdn.hoolah.co https://cdn.hoolah.co https://cdnjs.cloudflare.com downloads.mailchimp.com *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io commerce.adobe.net qa-api.magedevteam.com *.sentry.io *.doubleclick.net *.facebook.net *.facebook.com https://web.facebook.com *.demdex.net *.omtrdc.net *.tiktok.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.paypal.com *.paypalobjects.com *.trackedweb.net https://melissa.com.sg/fbe/Pixel/ProductInfoForAddToCart *.clarity.ms wss://am.freshrelevance.com/ https://am.freshrelevance.com *.dycdn.net *.trackedlink.net *.dotdigital-pages.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com am.freshrelevance.com wss://am.freshrelevance.com wss://am.dycdn.net dn1i8v75r669j.cloudfront.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.analytics.google.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.fontawesome.com https://fonts.bunny.net https://fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' business.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com business.facebook.com www.commercepartnerhub.com *.trustpilot.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://images.unsplash.com *.disqus.com https://firebasestorage.googleapis.com business.facebook.com 'self' data: *.bing.com *.bing.net *.clarity.ms *.google.co.uk *.google.com *.linkedin.com *.test-meter.co.uk data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com unpkg.com https://maps.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://www.googletagmanager.com tagmanager.google.com *.disqus.com *.avada.io *.shopify.com business.facebook.com https://getaddress.io *.gstatic.com bat.bing.com bat.bing.net *.clarity.ms *.cookie-script.com *.googlesyndication.com snap.licdn.com code.jquery.com *.zdassets.com *.zopim.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com downloads.mailchimp.com unsafe-inline assets.braintreegateway.com maxcdn.bootstrapcdn.com tagmanager.google.com *.fontawesome.com https://fonts.bunny.net *.googleapis.com *.gstatic.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://checkout.iwdagency.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com https://maps.googleapis.com https://player.vimeo.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://www.google-analytics.com https://get.geojs.io *.avada.io business.facebook.com https://api.getaddress.io *.google-analytics.com bat.bing.com bat.bing.net *.clarity.ms *.googlesyndication.com *.linkedin.com *.trustpilot.com *.zdassets.com *.zendesk.com *.zopim.com wss://widget-mediator.zopim.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' polipet.com.br *.polipet.com.br wake-components.fbitsstatic.net polipet.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br *.conectiva.io *.sunset.systems *.cartstack.com.br *app.cartstack.com *.performa.ai *.cupom.social *.conectiva.app conectiva.io app.conectiva.io vm.conectiva.io conectiva.app api.performa.ai valid.performa.ai cartstack.com.br app.cartstack.com.br api.cartstack.com.br sunset.systems api.sunset.systems cupom.social app.cupom.social cdn.performa.ai app.cartstack.com gstatic.com *.ebit.com.br *.tiktok.com analytics.tiktok.com *.g.doubleclick.net googleadservices.com *.instagram.com *.polipet.com.br instagram.com gtm-nxl3xbc-mwi2n.uc.r.appspot.com *.uc.r.appspot.com s.pinimg.com ct.pinterest.com *.akamaihd.net paymentconnectorwakesandbox.cieloecommerce.cielo.com.br paymentconnectorwake.cieloecommerce.cielo.com.br web.fpcs-monitor.com.br device.clearsale.com.br *.fpcs-monitor.com.br h.online-metrix.net *.checkout.fbits.store mpi.braspag.com.br cdnjs.cloudflare.com; frame-ancestors *.polipet.com.br polipet.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-ALOf7Pj7NkNadA_wUQXPf3FNKeNSqN3v'; base-uri 'none'; report-uri https://data.sanitino.eu/csp-report 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'nonce-3k0RHpS/MfSRe75/1RDQ0Q==' 'sha256-V1h0iOGMb8X0iyBy+ujfOsLwbz1Xji5f/fti/zifMN0=' https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.reown.com; connect-src 'self' https://browser-intake-datadoghq.com https://api.web3modal.org https://pulse.walletconnect.org https://explorer-api.walletconnect.com wss://relay.walletconnect.com wss://relay.walletconnect.org https://rpc.mainnet.chain.robinhood.com https://eth.drpc.org https://eth-mainnet.public.blastapi.io https://mainnet.unichain.org https://mainnet.base.org; frame-src 'self' https://challenges.cloudflare.com https://verify.walletconnect.org https://verify.walletconnect.com; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; report-uri /api/csp-report; report-to csp-endpoint 1
default-src 'self'; script-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://www.google-analytics.com https://brandcenter.flex.com; upgrade-insecure-requests; 1
default-src 'self' *.ccavenue.com *.razorpay.com view.officeapps.live.com www.google.com use.fontawesome.com www.youtube-nocookie.com www.youtube.com; connect-src 'self' *.elitmus.com *.elitmus.net *.nr-data.net sentry.elitmusmail.com *.google-analytics.com www.googletagmanager.com api.mixpanel.com api.github.com/ wss:; font-src 'self' cdn.jsdelivr.net fonts.gstatic.com use.fontawesome.com https: data:; img-src 'self' blob: cdn0.elitmus.net *.amazonaws.com data: https: www.google.com *.google-analytics.com www.googletagmanager.com api.mixpanel.com; object-src 'self' *.amazonaws.com; script-src 'self' blob: 'unsafe-inline' *.newrelic.com *.nr-data.net cdn0.elitmus.net google-analytics.com api.mixpanel.com cdn.jsdelivr.net/bootstrap.daterangepicker/2/daterangepicker.js cdn.jsdelivr.net/momentjs/latest/moment.min.js cdn.ckeditor.com/4.11.3/full/ckeditor.js https: data:; style-src 'self' 'unsafe-inline' cdn0.elitmus.net use.fontawesome.com/releases/v5.0.6/css/all.css cdn.jsdelivr.net/bootstrap/3/css/bootstrap.css cdn.jsdelivr.net/bootstrap.daterangepicker/2/daterangepicker.css https:; report-uri /csp_reports 1
object-src 'none'; script-src 'self' 'report-sample' https://api.mapbox.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.google.com; style-src 'self' 'report-sample' https://api.mapbox.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://unpkg.com https://use.fontawesome.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
style-src-attr 'unsafe-inline'; style-src-elem https://*.adobe.com https://fonts.googleapis.com https://*.fontawesome.com https://fonts.bunny.net https://maxcdn.bootstrapcdn.com 'self' https://checkout.dibspayment.eu https://p.typekit.net https://use.typekit.net www.googletagmanager.com *.googletagmanager.com tagmanager.google.com www.google-analytics.com https://consentcdn.cookiebot.com consent.cookiebot.com js.klarna.com assets.adobedtm.com  *.adobe.com www.googleadservices.com googleads.g.doubleclick.net analytics.google.com *.newrelic.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com www.gstatic.com/recaptcha/ www.google.com/recaptcha/ use.typekit.net *.typekit.net google.com *.google.com *.svea.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.gstatic.com maps.googleapis.com *.trustpilot.com 'unsafe-inline' 'sha256-dd4J3UnQShsOmqcYi4vN5BT3mGZB/0fOwBA72rsguKc=' 'sha256-x63IUVwcGyBuc3YVk/Vn+JUVlZrIJ4y4DmQHd1we3aU=' 'sha256-geAf45T0KaZ2ydbHPqPBAThYuH+RWyzqWFG8frf24So=' 'sha256-qIERAITgrJ9AXZNnCcqbbILE9DKOsTtgoNyUiIWBIFc=' 'sha256-iHmQ4UYHlpNOJtxExHHy+Q0JMRnJNDY6YgxVe6bgaic=' 'sha256-M3ENU8FVbLQ4zC6/S+i6mAI6J5nJXYv7wdkGHPOPFyQ=' 'sha256-mbX3dvB8fuCZ44wp7rb2yNCTKnpaDZTWi4FcxaO5aDQ=' 'sha256-u3rGoFrgreoLDFgN9VSSH7Vqp4m5hr/s2wfEQoHrW8c=' 'sha256-Xb6BHXOvmdrqEHGnDsi7LrWFdbcWYjsBlrrnPUCU9ug=' 'sha256-LF9wJDGUs2fb0EuryuM6Cg3M2uRmMRw9rKxjltG6cdE=' 'sha256-8vTTdxnqIADi9o4lGGySN3hT8zQ0BypPf8LRc8+LO/M=' 'sha256-HMtSDyZylUC0B0/QF4+8nRx/LkFCFma5jkUqXEl4660=' 'sha256-COK7S11UEOHh9WIBbWFZdG7Sm1XlzZwjdIe7OgasN+8=' 'sha256-zGecSZtsbThzRiC/u1o8wDRhc+dpVCQZFtWqCcEw+TA=' 'sha256-jD7BDj+WZj7unuYYayelgr7+ffVyQydTi7htHpUmg14=' 'sha256-S5dLW8qZNQbHfUy6i0RtXNJn6y8r50QKnow1NJ/GNPQ=' 'sha256-hPwGZOTIQtJn+Eb+hhaXKeQv4IAAAgoCqlhK3fHA2eU=' 'sha256-02dOSHmzqb5KHD3ySPWlRS6CEBQKt01r1uozTOnVvHc=' 'sha256-JbjHC1TTVijVjJte4e5LwkK93t2WTpzxc9J5rU/dtMs=' 'sha256-j555MbwHoOArAzBAVQfjmRGWYF8LqnAi0nAVvZxJgA8=' 'sha256-pIx+OHZEXAf4LIcENg+newn2P324rpLqDjdk3hwCr6o=' 'sha256-/58/2uJnleB6nQMBWaDmSfPEZXwThcBFyt01/vVrd+w=' 'sha256-o5yvPeVKcbO8rUOQSfnukFWIf37e2rkcqmVWtpGyLGc=' 'sha256-7pHlVEt++If9+JsxbHaFH3MK7NgjxEEedwOnaEc95Fw=' 'sha256-gW4wX3VZataAdm7szA0MXHr3qNl/XvPZ8SCwk4+zV9o=' 'sha256-pCWSgAdhYVDLT05syYCrvDRlcJqcipxa9Y4i8ie1Jgk=' 'sha256-ZczLptMt5VIK6hiGPKq1jVklbY+gDznrL7dy5SXqRks=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-7Nwa3eZYsCc3PcYZ6i6g3JFuo51sAWpadpjJCSMdowI=' 'sha256-X4vuBEc4IxZzZs8GUgcKUo7LKKbs9aZgEZLuAKh9dF4='; font-src fonts.gstatic.com use.typekit.net *.klarnacdn.net *.klaviyo.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://consentcdn.cookiebot.com/sdk/bc-v4.min.html www.googletagmanager.com consentcdn.cookiebot.com js.klarna.com *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io https://www.facebook.com www.google.se www.google.dk connect.facebook.net *.kildemoes.dk *.linkedin.com *.bing.com https://info.dibs.se https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com https://firebasestorage.googleapis.com flagpedia.net www.google.com.ua data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://*.dibspayment.eu https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.avada.io *.gstatic.com maps.googleapis.com *.trustpilot.com sst.kildemoes.dk https: 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://*.adobe.com fonts.googleapis.com https://fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net https://maxcdn.bootstrapcdn.com 'self' https://checkout.dibspayment.eu https://p.typekit.net https://use.typekit.net 'unsafe-hashes' 'unsafe-inline' https://*.dibspayment.eu https://static.klaviyo.com maxcdn.bootstrapcdn.com *.gstatic.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io https://*.dibspayment.eu https://consentcdn.cookiebot.com *.doubleclick.net *.googlesyndication.com analytics.tiktok.com *.tiktok.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com *.sparxpres.dk sparxpres.dk sst.kildemoes.dk https: 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-ancestors *.hana.ondemand.com 'self'; object-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; media-src googleapis.com *.zdassets.com 'self' 'unsafe-inline'; font-src googleapis.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klevu.com *.ksearchnet.com *.cloudflare.com *.googleapis.com *.zopim.com *.tawk.to *.jsdelivr.net media.flixfacts.com 'unsafe-inline' data: data: 'self' 'unsafe-inline'; style-src googleapis.com fonts.googleapis.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com https://widgets.payflex.co.za oppwa.com *.oppwa.com *.peachpayments.com *.cloudflare.com *.googleapis.com *.jsdelivr.net www.gstatic.com media.flixcar.com 'unsafe-inline' data: https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; connect-src static-forms.klaviyo.com googleapis.com facebook.com facebook.net klaviyo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://*.ingest.sentry.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com oppwa.com *.oppwa.com *.peachpayments.com *.testfreaks.com *.nosto.com *.hotjar.io *.hotjar.com *.doubleclick.net *.zendesk.com *.tawk.to wss://*.tawk.to *.tawk.link *.addthis.com *.addthisedge.com *.what3words.com *.googleapis.com vsb111.tawk.to ekr.zdassets.com api.magento.com commerce.adobedc.net app.mobicredwidget.co.za wss://widget-mediator.zopim.com bam.nr-data.net *.googletagmanager.com security-hub.vaimo.network 'unsafe-eval' data: 'self' 'unsafe-inline'; form-action googleapis.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com *.facebook.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; frame-src googleapis.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com *.nosto.com *.issuu.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.criteo.net *.criteo.com *.addthis.com *.facebook.com webchat.jdg.co.za *.jdg.co.za map.pargo.co.za 'self' 'unsafe-inline'; img-src googleapis.com widgets.magentocommerce.com 'unsafe-inline' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://widgets.payflex.co.za oppwa.com *.oppwa.com *.peachpayments.com *.eu-west-1.amazonaws.com *.cloudflare.com *.google.com *.google.lv *.google.co.za *.google.com.na *.google.na *.zopim.com *.nosto.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.zopim.io *.sfdr.co sfdr.co *.tawk.to tawk.link *.tawk.link *.addthis.com *.jsdelivr.net *.facebook.com *.azurewebsites.net maps.googleapis.com app.mobicredwidget.co.za amcglobal.sc.omtrdc.net media.flixcar.com rt.flix360.com assets.secure.checkout.visa.com data: 'self' 'unsafe-inline'; script-src googleapis.com klaviyo.com facebook.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com www.gstatic.com https://browser.sentry-cdn.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://widgets.payflex.co.za https://partpayassets.blob.core.windows.net *.oppwa.com oppwa.com *.peachpayments.com *.zopim.com *.videoly.co sfdr.co *.cnetcontent.com *.cloudfront.net *.google.lv *.google.co.za *.google.com.na *.google.na *.cloudflare.com *.cloudflareinsights.com *.nosto.com *.hotjar.com *.googletagmanager.com *.criteo.net *.criteo.com *.sfdr.co *.tawk.to *.tawk.link *.jsdelivr.net *.addthis.com *.addthisedge.com *.moatads.com *.mouseflow.com *.facebook.com *.what3words.com maps.googleapis.com commerce.adobedtm.com magento-recs-sdk.adobe.net static.zdassets.com app.mobicredwidget.co.za connect.facebook.net bam.nr-data.net js.testfreaks.com media.flixfacts.com media.flixcar.com security-hub.vaimo.network https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; 1
object-src 'none'; script-src 'self' 'unsafe-eval' 'report-sample' cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://code.jquery.com https://extend.vimeocdn.com 'strict-dynamic' https://geolocation.onetrust.com 'nonce-Ou0zfT4RlvpqXx2o3ibjYg'; script-src-elem 'self' 'unsafe-eval' 'report-sample' cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://code.jquery.com https://extend.vimeocdn.com 'strict-dynamic' https://geolocation.onetrust.com 'nonce-Ou0zfT4RlvpqXx2o3ibjYg'; base-uri 'self'; report-uri https://coopervision.jp/log-report-uri/reportOnly 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com 'self' data: cdn.jsdelivr.net *.googleapis.com *.tawk.to *.feedbackcompany.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.feedbackcompany.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com https://player.vimeo.com/ https://www.google.com/ https://googleads.g.doubleclick.net/ https://www.google.nl/ https://vars.hotjar.com/ *.multisafepay.com https://pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com *.doubleclick.net 'self' data: *.googleapis.com cdn.jsdelivr.net *.feedbackcompany.com *.multisafepay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com ts.tradetracker.net www.magmodules.eu data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https://vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com https://www.gstatic.com/ cdn.jsdelivr.net player.vimeo.com http://player.vimeo.com/api/player.js https://script.hotjar.com static.hotjar.com v2.zopim.com static.zdassets.com *.feedbackcompany.com *.multisafepay.com https://pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com tm.tradetracker.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com cdn.jsdelivr.net *.fontawesome.com *.multisafepay.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net https://vimeo.com/api/ geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com 'self' data: *.google-analytics.com *.tawk.to 'self' ws: https://stats.g.doubleclick.net/ in.hotjar.com https://ekr.zdassets.com widget-mediator.zopim.com *.feedbackcompany.com *.multisafepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'nonce-YTY4YzE1YzktODFjZi00ZWZkLWJiYTItMDQwZThjOTU2ZTY0' 'strict-dynamic'; style-src 'self' 'unsafe-inline' https://accounts.google.com https://*.lingoapp.com https://use.typekit.net https://p.typekit.net https://fonts.googleapis.com; img-src 'self' blob: data: https://cdn.lingoapp.com https://*.lingoapp.com https://*.amazonaws.com https://*.ads.linkedin.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.gravatar.com https://*.wp.com https://*.intercomcdn.com https://*.hubspot.com https://analytics.google.com https://*.clarity.ms https://c.bing.com https://images.prismic.io https://pagead2.googlesyndication.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat; font-src 'self' data: https://fonts.gstatic.com https://*.lingoapp.com https://*.s3.amazonaws.com https://use.typekit.net https://p.typekit.net https://*.intercomcdn.com; connect-src 'self' https://*.lingoapp.com https://*.s3.amazonaws.com https://o24487.ingest.sentry.io wss://*.intercom.io https://*.intercom.io https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://stats.g.doubleclick.net https://www.google.com https://www.googletagmanager.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat https://*.doubleclick.net https://www.googleapis.com https://accounts.google.com https://api.stripe.com https://assets.apollo.io https://aplo-evnt.com https://*.clarity.ms https://c.bing.com https://snap.licdn.com https://*.ads.linkedin.com https://*.hubapi.com https://*.hs-scripts.com https://*.hubspot.com https://*.hs-analytics.net https://*.intercomcdn.com; worker-src blob: https://*.intercom.io; media-src 'self' blob: data: https://cdn.lingoapp.com https://*.lingoapp.com https://*.s3.amazonaws.com https://*.prismic.io; frame-src 'self' https://js.stripe.com https://*.intercom.io https://intercom-sheets.com https://docs.google.com https://accounts.google.com https://www.dropbox.com https://*.s3.amazonaws.com https://*.lingoapp.com https://*.prismic.io; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://*.lingoapp.com; report-uri https://o24487.ingest.sentry.io/api/225513/security/?sentry_key=a4729b507a934e30baa9b6194cadcc4b 1
default-src 'self' https:; connect-src *; font-src *; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-pzo7wkn8K_wbnUdpLfLahQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cloudflare.com *.trustedshops.com *.fontawesome.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com youtu.be *.vimeo.com *.addthis.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.cloudflare.com https://cdn.klarna.com https://s.ytimg.com *.usercentrics.eu blob: *.magebig.com magefan.com cm.magefan.com *.disqus.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.cloudflare.com *.google-analytics.com *.gstatic.com *.googleadservices.com *.googleapis.com *.trustedshops.com *.usercentrics.eu *.addthis.com *.addthisedge.com *.moatads.com *.disqus.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.doubleclick.net *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.cloudflare.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.googleapis.com *.googletagmanager.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.cloudflare.com *.googleapis.com https://ipinfo.io *.facebook.com *.google-analytics.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' https: data:; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-vGu907_TYC_e5a5UMcSIUg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-WDEVdCMlddN-0vXXPbAzKA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
report-uri /csp-report;base-uri 'self';block-all-mixed-content;connect-src 'self' *.algolia.net *.algolianet.com *.ingest.sentry.io;default-src 'self';font-src 'self' data: *.gstatic.com;form-action 'self';frame-src 'self';img-src 'self' cdn.freeontour.com https://images-camping.info http://images.stellplatz.promobil.de verlage.avs.de data: *.gstatic.com *.googleapis.com *.ggpht.com;manifest-src 'self';media-src 'self';object-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com www.google-analytics.com www.googletagmanager.com;style-src 'self' 'unsafe-inline' *.googleapis.com 1
default-src 'self'; script-src 'self' 'nonce-biHgDiNMDjza4Xz+W9ML/w==' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; img-src 'self' data: https:; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net; frame-src 'self' https://www.google.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; 1
default-src 'self' data:; connect-src 'self' https://plausible.io *.webanalytics.italia.it *.sentry.io *.sentry-cdn.com *.opencontent.io *.opencontent.it *.opencityitalia.it *.stanzadelcittadino.it wss://*.opencityitalia.it https://nominatim.openstreetmap.org *.meilisearch.io https://apimeteoras.biddaweb.it *.comuni-chiamo.com https://m1.openfpcdn.io https://translate-pa.googleapis.com https://translate.yandex.net https://s3.eu-west-1.amazonaws.com https://servizi.comune.udine.it; font-src 'self' data: *.opencontent.io *.opencontent.it *.opencityitalia.it *.comuni-chiamo.com; frame-src 'self' *.youtube.com https://www.youtube-nocookie.com https://youtu.be *.vimeo.com https://api.webanalytics.italia.it https://dati.comune.udine.it https://www.google.com https://www.museofriulanostorianaturale.it; img-src 'self' data: blob: https://flyimg.opencityitalia.it https://flyimg-qa.opencityitalia.it *.openstreetmap.org *.ytimg.com https://s3-eu-west-1.amazonaws.com *.webanalytics.italia.it https://img.youtube.com https://www.thiings.co; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://plausible.io https://www.googletagmanager.com *.sentry-cdn.com *.webanalytics.italia.it *.opencontent.io *.opencontent.it *.opencityitalia.it https://nominatim.openstreetmap.org https://apimeteoras.biddaweb.it https://www.youtube.com *.comuni-chiamo.com https://cdnjs.cloudflare.com https://servizi.comune.udine.it; style-src 'self' 'unsafe-inline' https:; report-uri https://csp-collector.opencontent.it/csp?env=production&app=cms; worker-src 'self' blob: 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com *.googleapis.com static.lipscore.com https://fonts.gstatic.com https://applepay.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.facebook.com *.googlesyndication.com 'self' 'unsafe-inline'; frame-ancestors https://api.clerk.io https://cdn.clerk.io 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com/ *.doubleclick.net *.facebook.com *.googlesyndication.com *.circleoftrust.nl *.googletagmanager.com ct.pinterest.com *.cookiebot.com *.googleapis.com exch.circleoftrust.nl *.marvelpixel.io static.xx.fbcdn.net https://player.vimeo.com https://www.youtube-nocookie.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://applepay.cdn-apple.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.bird.eu https://cdn.clerk.io static.lipscore.com blob: img.youtube.com *.circleoftrust.nl bat.bing.com *.cookiebot.com *.googleapis.com exch.circleoftrust.nl *.marvelpixel.io static.xx.fbcdn.net https://www.magezon.com https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com https://static.buckaroo.nl https://www.buckaroo.nl https://www.paypalobjects.com https://pay.google.com https://developers.google.com https://applepay.cdn-apple.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google.com/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.fontawesome.com *.googleapis.com https://api.clerk.io https://cdn.clerk.io https://custom.clerk.io static.lipscore.com *.cookiebot.com custom.clerk.io *.circleoftrust.nl *.clarity.ms *.hotjar.com bat.bing.com *.pinimg.com *.pinterest.com analytics.tiktok.com exch.circleoftrust.nl *.marvelpixel.io static.xx.fbcdn.net https://player.vimeo.com https://www.youtube.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com https://www.sandbox.paypal.com https://applepay.cdn-apple.com https://pay.google.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.fontawesome.com https://api.clerk.io https://cdn.clerk.io static.lipscore.com https://fonts.googleapis.com http://fonts.googleapis.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com wapi.lipscore.com users.lipscore.com ct.pinterest.com *.cookiebot.com analytics.tiktok.com z.clarity.ms bat.bing.com *.googleapis.com exch.circleoftrust.nl *.marvelpixel.io static.xx.fbcdn.net https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://applepay.buckaroo.io https://smp-paymentservices.apple.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com player.vimeo.com *.youtube.com *.demdex.net *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.adobeaemcloud.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https://experience.adobe.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.googleapis.com *.gstatic.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.paypal.com *.paypalobjects.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.magento-datasolutions.com *.magento-ds.com downloads.mailchimp.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://aem-discovery.adobe.io https://aem-discovery-stage.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.magento.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.googleapis.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.cloudflare.com *.twitter.com *.twimg.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com https://use.fontawesome.com https://netdna.bootstrapcdn.com https://*.hotjar.com https://*.hotjar.io https://*.klaviyo.com https://*.googletagmanager.com https://*.gstatic.com https://*.trustpilot.com/ *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com www.outdoor-revolution.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.worldpay.com www.outdoor-revolution.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com www.outdoor-revolution.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.instagram.com www.google.com https://www.google.com https://region1.analytics.google.com https://*.google.com https://*.klaviyo.com https://*.googletagmanager.com https://*.gstatic.com https://google.com/ https://*.trustpilot.com/ landofcoder.com maps.googleapis.com chart.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.trustpilot.com *.weltpixel.com www.outdoor-revolution.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cdninstagram.com *.googleapis.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.co.uk https://lantern.roeye.com https://*.klaviyo.com https://*.googletagmanager.com https://*.gstatic.com https://google.com/ https://*.trustpilot.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.outdoor-revolution.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com https://*.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.instagram.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com *.gstatic.com https://use.fontawesome.com https://assets.adobedtm.com https://secure.authorize.net https://test.authorize.net https://www.googleadservices.com https://js.braintreegateway.com https://maps.google.com https://connect.facebook.net https://static.cloudflareinsights.com https://unpkg.com https://maps.googleapis.com https://region1.analytics.google.com https://*.google.com https://*.roeyecdn.com https://static.hotjar.com https://script.hotjar.com https://*.hotjar.com wss://ws.hotjar.com https://stats.g.doubleclick.net https://*.klaviyo.com https://*.googletagmanager.com https://*.gstatic.com https://google.com/ https://*.growthbook.io/ https://*.zdassets.com/ https://*.trustpilot.com/ https://*.zopim.com/ https://*.zendesk.com/ widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ landofcoder.com maps.googleapis.com chart.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.trustpilot.com www.outdoor-revolution.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://use.fontawesome.com https://fonts.googleapis.com https://*.klaviyo.com https://*.googletagmanager.com https://*.gstatic.com https://*.trustpilot.com/ widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com *.trustpilot.com www.outdoor-revolution.com 'self' 'unsafe-inline'; object-src landofcoder.com maps.googleapis.com chart.googleapis.com 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com www.outdoor-revolution.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://region1.google-analytics.com https://region1.analytics.google.com https://*.google.com https://www.google.com https://www.google.co.uk https://*.google.co.uk https://*.roeyecdn.com https://static.hotjar.com https://script.hotjar.com https://*.hotjar.com https://*.hotjar.io wss://ws.hotjar.com https://*.zdassets.com/ https://stats.g.doubleclick.net https://*.klaviyo.com https://*.googletagmanager.com https://*.gstatic.com https://google.com/ https://*.growthbook.io/ https://*.trustpilot.com/ https://*.zopim.com/ https://*.zendesk.com/ wss://*.zopim.com/ widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ landofcoder.com maps.googleapis.com chart.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com www.outdoor-revolution.com 'self' 'unsafe-inline'; child-src www.outdoor-revolution.com http: https: blob: 'self' 'unsafe-inline'; default-src www.outdoor-revolution.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-otAc3DO_WbdXdTSijXQ2eg' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
font-src *.fontawesome.com *.googleapis.com *.gstatic.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://seo.mageplaza.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com landofcoder.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.trackedlink.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com www.xtento.com cdn.xtento.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com https://www.facebook.com https://c.clarity.ms/ https://bat.bing.com/ https://c.bing.com/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com landofcoder.com s7.addthis.com *.fontawesome.com *.googleapis.com *.gstatic.com player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.xtento.com cdn.xtento.com *.googletagmanager.com tagmanager.google.com https://reviewcollection.trustpilot.com https://cs.iubenda.com/ static.addtoany.com acsbapp.com mylivechat.com a6.mylivechat.com https://cdn.iubenda.com/cs/ccpa/stub.js https://connect.facebook.net/ http://www.paypalobjects.com http://www.googletagmanager.com http://www.vimeo.com https://cdn.iubenda.com/ https://bat.bing.com/ https://www.clarity.ms/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.googleapis.com *.addtoany.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com tagmanager.google.com fonts.google.com a6.mylivechat.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com landofcoder.com ekr.zdassets.com/ http://dpm.demdex.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com https://reviewcollection.trustpilot.com cdn.acsbapp.com http://www.googletagmanager.com http://www.sandbox.paypal.com http://www.paypalobjects.com https://hits-i.iubenda.com/ https://w.clarity.ms/collect http://www.google-analytics.com https://consent.iubenda.com/ https://o.clarity.ms/collect https://v.clarity.ms/collect 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self'; frame-src 'self'; frame-ancestors 'self' https://web.telegram.org https://*.telegram.org; base-uri 'self'; form-action 'self'; object-src 'none' 1
object-src 'none';base-uri 'self';script-src 'nonce-TzH-7-0AksKuMPbi8brhqw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://*.bitrix24.com https://www.googletagmanager.com https://*.marquiz.ru http://*.marquiz.ru; style-src 'self' 'unsafe-inline' https://*.bitrix24.ru https://*.bitrix24.com; img-src 'self' data: blob: https://mc.yandex.ru https://*.googleapis.com https://medstandartprof.ru https://cdn.medstandartprof.ru https://*.marquiz.ru; font-src 'self' data: https://*.bitrix24.com; connect-src 'self' https://mc.yandex.ru https://*.bitrix24.com https://*.marquiz.ru https://api.marquiz.ru; frame-src https://*.bitrix24.com https://*.marquiz.ru http://*.marquiz.ru; media-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://*.bitrix24.com; frame-ancestors 'self' https://metrika.yandex.ru https://*.metrika.yandex.ru https://webvisor.com 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' https://accounts.google.com https://apis.google.com https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://js.hs-scripts.com https://*.hs-scripts.com https://*.hs-analytics.net https://*.hscollectedforms.net https://*.hs-banner.com https://*.hsforms.com https://*.hubspot.com https://*.hs-sites.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com; connect-src 'self' https://wapi.traveltalktours.com https://js.hs-scripts.com https://*.hs-scripts.com https://*.hs-analytics.net https://*.hscollectedforms.net https://*.hs-banner.com https://*.hsforms.com https://*.hubspot.com https://*.hs-sites.com https://www.google.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com; frame-src 'self' https://wapi.traveltalktours.com https://*.hs-sites.com https://*.hsforms.com https://www.google.com https://accounts.google.com https://www.googletagmanager.com; upgrade-insecure-requests 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klarnacdn.net https://fonts.gstatic.com data: *.klevu.com *.flixcar.com *.flixfacts.com https://bf-content.elon.se https://c.bannerflow.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.klarna.com *.klevu.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://briqpay.test *.briqpay.com *.klarna.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.hotjar.com *.klarnaservices.com *.ingrid.com *.klarnaevt.com *.dibspayment.eu 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.klarna.com *.klarnaevt.com *.klarnacdn.net https://*.google.com https://*.googleapis.com https://*.googleusercontent.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.adnxs.com *.omtrdc.net *.bing.com *.cloudflare.com *.cookiebot.com *.elongroup.se *.elon.se elon.se *.facebook.com *.googleadservices.com *.google-analytics.com *.google.se *.google.pl *.googletagmanager.com *.googleapis.com *.imbox.io *.klevu.com *.klarnaservices.com *.vaimo.net *.ytimg.com *.pricerunner.se *.flixcar.com *.flixfacts.com *.flix360.com *.flix360.io *.jwpsrv.com *.jwplayer.com *.uc.se *.prisjakt.no *.googlesyndication.com *.where-to-buy.co *.clarity.ms *.doubleclick.net *.dialogtrail.com *.lemonpi.io *.facebook.net *.reddit.com *.elon.no *.wistia.com *.videoly.co *.testfreaks.com https://where-to-buy.co https://bf-content.elon.se https://c.bannerflow.net js.live.kustom.co js.playground.kustom.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://briqpay.test *.briqpay.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.adnxs.com *.bing.com *.clarity.ms *.cookiebot.com *.depict.ai *.elongroup.se *.facebook.net *.googletagmanager.com *.googleapis.com *.hotjar.com *.imbox.io *.klevu.com *.myvisitors.se *.oribi.io *.pertento.ai *.pinimg.com *.pinterest.com *.testfreaks.com *.charpstar.net *.flixfacts.com *.loadbee.com *.flix360.io *.flixcar.com *.unpkg.com *.dialogtrail.com *.adform.net *.elon.se *.cloudfront.net *.videoly.co *.scaleflex.it *.redditstatic.com *.voyado.com https://unpkg.com https://bf-content.elon.se https://c.bannerflow.net js.live.kustom.co js.playground.kustom.co js.adsrvr.org *.redeal.se blob: *.tiktok.com *.ingrid.com *.klarnaevt.com https://www.elon.no 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com *.klarnacdn.net https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com assets.braintreegateway.com *.depict.ai *.dibspayment.eu *.googleapis.com *.gstatic.com *.klevu.com *.flixcar.com *.testfreaks.com https://www.elon.no 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.flixcar.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.adnxs.com *.demdex.net *.clarity.ms *.cookiebot.com *.depict.ai *.dibspayment.eu *.google-analytics.com *.g.doubleclick.net *.hotjar.com *.hotjar.io *.klarnauserservices.com *.ksearchnet.com *.pertento.ai *.pinterest.com security-hub.vaimo.network *.vaimo.net *.apptus.cloud *.iconify.design *.dialogtrail.com *.flix360.io *.charpstar.net *.loadbee.com *.flixcar.com *.googlesyndication.com *.elon.no *.bing.com *.facebook.com *.reddit.com *.unisvg.com *.testfreaks.com wss://ws.depict.ai wss://headless.dialogtrail.com https://bf-content.elon.se https://c.bannerflow.net js.live.kustom.co js.playground.kustom.co ad.doubleclick.net insight.adsrvr.org *.voyado.com *.tiktok.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googlesyndication.com *.doubleclick.net *.google.com *.googleadservices.com *.vidoomy.com connect.facebook.net *.criteo.com *.id5-sync.com *.crwdcntrl.net imasdk.googleapis.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self'; frame-src https:; connect-src 'self' https:; object-src 'none'; base-uri 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://cdn.quilljs.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://cdn.quilljs.com https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com; frame-src 'self' https://www.google.com; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://static.cloudflareinsights.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://cloudflareinsights.com; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; frame-src https://www.youtube-nocookie.com https://www.youtube.com https://player.vimeo.com; media-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' https://admin.empireescort.co.uk; report-uri /api/csp-report/; report-to csp-endpoint 1
font-src *.googleapis.com *.gstatic.com https://fonts.gstatic.com papi.hobex.at *.custhelp.com custhelp.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.simpli.at simpli.at *.simplitv.at simplitv.at *.google.at google.at *.google.com google.com *.google.ro google.ro *.google-analytics.com google-analytics.com *.doubleclick.net doubleclick.net *.usercentrics.eu usercentrics.eu www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.googletagmanager.com simplitv.docker *.google.com/ papi.hobex.at js.mollie.com orfdigital.thelounge.net digital.orf.at viveum.test.v-psp.com viveum.v-psp.com insight.adsrvr.org oc-cdn-public-eur.azureedge.net *.simpli.at simpli.at *.simplitv.at simplitv.at *.google.at google.at *.google.com google.com *.google.ro google.ro *.google-analytics.com google-analytics.com *.doubleclick.net doubleclick.net *.usercentrics.eu usercentrics.eu *.criteo.com criteo.com www.facebook.com integration-5ojmyuq-ltroc5ehej66o.eu-3.magentosite.cloud 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net https://images.unsplash.com *.googleapis.com *.gstatic.com https://www.magezon.com papi.hobex.at magefan.com cm.magefan.com https://www.mollie.com www.rnengage.com *.bing.com bing.com files.uat.austrostream.insysdev.pl images.mdn.ors.at *.simpli.at simpli.at *.simplitv.at simplitv.at *.google.at google.at *.google.com google.com *.google.ro google.ro *.google-analytics.com google-analytics.com *.doubleclick.net doubleclick.net *.usercentrics.eu usercentrics.eu www.facebook.com public-prod-dspcookiematching.dmxleo.com x.bidswitch.net cs.media.net r.casalemedia.com *.criteo.com criteo.com id5-sync.com ad.360yield.com jadserve.postrelease.com *.outbrain.com outbrain.com *.pubmatic.com pubmatic.com rtb-csync.smartadserver.com *.taboola.com taboola.com *.twiago.com twiago.com criteo-sync.teads.tv criteo-partners.tremorhub.com eb2.3lift.com ad.yieldlab.net sync.1rx.io dpm.demdex.net sync.targeting.unrulymedia.com aa.agkn.com *.clarity.ms clarity.ms data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.gstatic.com simplitv.docker *.google.com/ papi.hobex.at js.mollie.com *.custhelp.com custhelp.com www.rnengage.com js-agent.newrelic.com bam.nr-data.net imagesrv.adition.com *.bing.com bing.com connect.facebook.net js.adsrvr.org *.adform.net adform.net www.googleoptimize.com https://io.fusedeck.net oc-cdn-public-eur.azureedge.net *.usercentrics.eu usercentrics.eu *.criteo.com criteo.com *.outbrain.com outbrain.com *.taboola.com taboola.com *.simpli.at simpli.at *.simplitv.at simplitv.at *.google.at google.at *.google.com google.com *.google.ro google.ro *.google-analytics.com google-analytics.com *.doubleclick.net doubleclick.net *.clarity.ms clarity.ms capi-automation.s3.us-east-2.amazonaws.com integration-5ojmyuq-ltroc5ehej66o.eu-3.magentosite.cloud 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com https://fonts.googleapis.com papi.hobex.at *.custhelp.com custhelp.com *.datatables.net datatables.net oc-cdn-public-eur.azureedge.net *.simpli.at simpli.at *.simplitv.at simplitv.at *.google.at google.at *.google.com google.com *.google.ro google.ro *.google-analytics.com google-analytics.com *.doubleclick.net doubleclick.net *.usercentrics.eu usercentrics.eu 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com simplitv.docker papi.hobex.at *.custhelp.com custhelp.com bam.nr-data.net google-analytics.com wss://io.fusedeck.net *.simpli.at simpli.at *.simplitv.at simplitv.at *.google.at google.at *.google.com google.com *.google.ro google.ro *.google-analytics.com *.doubleclick.net doubleclick.net *.usercentrics.eu usercentrics.eu *.taboola.com taboola.com *.outbrain.com outbrain.com *.clarity.ms clarity.ms eu-mobile.events.data.microsoft.com integration-5ojmyuq-ltroc5ehej66o.eu-3.magentosite.cloud 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' cdnjs.cloudflare.com https://cdn.jsdelivr.net https://www.google.com stackpath.bootstrapcdn.com; script-src-attr 'self'; style-src 'self' https://cdn.jsdelivr.net https://pro.fontawesome.com https://use.fontawesome.com stackpath.bootstrapcdn.com; style-src-attr 'self'; frame-ancestors 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com https://fonts.gstatic.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com https://www.google.com https://www.gstatic.com *.bootstrapcdn.com *.modehaus.dev data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com https://*.etracker.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.google.com/ *.doubleclick.net *.facebook.com *.googlesyndication.com snapwidget.com secure.pay1.de *.hotjar.com *.modehaus.dev js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io maps.googleapis.com maps.gstatic.com *.googleapis.com https://images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com https://www.magezon.com https://*.etracker.com https://*.etracker.de s3.eu-central-1.amazonaws.com *.s3.eu-central-1.amazonaws.com *.google.de *.widgetwhats.com *.modehaus.dev services.postcodeanywhere.co.uk rdrct.li api.qrserver.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com https://maps.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com widget.freshworks.com m2epro.freshdesk.com https://*.etracker.com https://*.etracker.de *.modehaus.de *.leffers-mode.de *.leffers-sport.de *.havenschoen-shop.de *.modehaus2.de *.etracker.com *.etracker.de snapwidget.com *.widgetwhats.com *.hotjar.com *.modehaus.dev services.postcodeanywhere.co.uk *.signalize.com ipinfo.io customized-whatsapp-widget.chatarmin.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com *.google.com *.widgetwhats.com *.bootstrapcdn.com *.modehaus.dev services.postcodeanywhere.co.uk assets.braintreegateway.com d.ratepay.com d.payla.io dr.payla.io 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com widget.freshworks.com m2epro.freshdesk.com https://*.etracker.de http://dpm.demdex.net https://www.google.com https://www.gstatic.com *.modehaus.de *.widgetwhats.com *.hotjar.com *.modehaus.dev *.etracker.com *.etracker.de services.postcodeanywhere.co.uk api.chatarmin.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com places.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com/ https://connect.facebook.net/ https://script.crazyegg.com/ https://static.hotjar.com/ https://widgets-static.embluemail.com/ https://cdn.embluemail.com/ data: *.googleapis.com/ *.greenpay.me/ https://d29zz2n2ngyl3j.cloudfront.net *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com c.paypal.com client.cardinaltrusted.com cas.client.cardinaltrusted.com centinel.cardinalcommerce.com authentication.cardinalcommerce.com checkoutv2.greenpay.me checkoutv2.greenpaysbx.me checkoutv2.greenpayqa.me 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://d29zz2n2ngyl3j.cloudfront.net https://connect.facebook.net/ https://script.crazyegg.com/ https://static.hotjar.com/ https://widgets-static.embluemail.com/ https://cdn.embluemail.com/ data: *.googleapis.com/ *.greenpay.me/ *.appspot.com https://centinelapi.cardinalcommerce.com https://centinelapistag.cardinalcommerce.com https://checkoutv2.greenpay.me https://checkoutv2.greenpaysbx.me c.paypal.com *.greenpay.me centinel.cardinalcommerce.com client.cardinaltrusted.com cas.client.cardinaltrusted.com authentication.cardinalcommerce.com checkoutv2.greenpayqa.me 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://maps.gstatic.com https://maps.googleapis.com https://connect.facebook.net/ https://script.crazyegg.com/ https://static.hotjar.com/ https://widgets-static.embluemail.com/ https://cdn.embluemail.com/ https://www.google.co.cr/ *.googleapis.com/ *.greenpay.me/ https://d29zz2n2ngyl3j.cloudfront.net maps.gstatic.com static.greenpay.me *.greenpay.me *.paypalobjects.com static.legitscript.com *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com *.greenpaysbx.me *.kaptcha.com connect.facebook.net https://script.crazyegg.com/ https://static.hotjar.com/ https://widgets-static.embluemail.com/ https://cdn.embluemail.com/ https://code.jquery.com/jquery-3.6.0.min.js https://code.jquery.com/ui/1.13.2/jquery-ui.min data: *.googleapis.com/ *.greenpay.me/ https://d29zz2n2ngyl3j.cloudfront.net https://d1wxcpi03uiovj.cloudfront.net maps.googleapis.com maps.gstatic.com https://centinelapi.cardinalcommerce.com https://centinelapistag.cardinalcommerce.com api.sandbox.paypal.com api.paypal.com checkoutv2.greenpay.me checkoutv2.greenpaysbx.me static.greenpay.me centinelapi.cardinalcommerce.com centinelapistag.cardinalcommerce.com client.cardinaltrusted.com cas.client.cardinaltrusted.com authentication.cardinalcommerce.com checkoutv2.greenpayqa.me *.googletagmanager.com *.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://connect.facebook.net/ https://script.crazyegg.com/ https://static.hotjar.com/ https://widgets-static.embluemail.com/ https://cdn.embluemail.com/ data: *.googleapis.com/ *.greenpay.me/ https://d29zz2n2ngyl3j.cloudfront.net *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.kaptcha.com https://data-collector.greenpay.me https://d29zz2n2ngyl3j.cloudfront.net https://connect.facebook.net/ https://script.crazyegg.com/ *.hotjar.net/ https://widgets-static.embluemail.com/ https://cdn.embluemail.com/ https://fonts.gstatic.com/ https://fonts.googleapis.com/ https://googletagmanager.com/ https://www.googletagmanager.com/ https://gtm-mpv8c69c-mze5m.uc.r.appspot.com *.doubleclick.net/ data: *.googleapis.com/ *.greenpay.me/ maps.googleapis.com www.google-analytics.com https://centinelapi.cardinalcommerce.com https://centinelapistag.cardinalcommerce.com https://checkoutv2.greenpay.me https://checkoutv2.greenpaysbx.me api.paypal.com api.sandbox.paypal.com checkoutv2.greenpay.me checkoutv2.greenpaysbx.me client.cardinaltrusted.com cas.client.cardinaltrusted.com authentication.cardinalcommerce.com checkoutv2.greenpayqa.me *.ecs.us-east-2.on.aws 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src https://d29zz2n2ngyl3j.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://maps.googleapis.com https://cdn.jsdelivr.net https://*.sincsports.com https://player.vimeo.com https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://googleads.g.doubleclick.net https://securepubads.g.doubleclick.net https://www.googletagservices.com https://adservice.google.com https://ep2.adtrafficquality.google https://fundingchoicesmessages.google.com https://connect.facebook.net https://platform.twitter.com https://cdn.ampproject.org https://apis.google.com https://www.googleadservices.com https://www.accuweather.com https://vortex.accuweather.com https://js.authorize.net https://jstest.authorize.net https://api.paysimple.com https://sandbox-api.paysimple.com https://gateway.transit-pass.com https://js.stripe.com https://static.cloudflareinsights.com https://challenges.cloudflare.com https://weatherwidget.io https://s.amazon-adsystem.com https://kit.fontawesome.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdn.sincsports.com https://soccer.sincsports.com https://www.gstatic.com https://simaxsports.com https://vortex.accuweather.com https://cdn.honey.io https://ka-p.fontawesome.com; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net https://cdn.sincsports.com https://ka-p.fontawesome.com; img-src 'self' data: blob: https:; media-src 'self' blob: https:; connect-src 'self' https://www.googletagmanager.com https://www.google.com https://stats.g.doubleclick.net https://td.doubleclick.net https://ad.doubleclick.net https://googleads.g.doubleclick.net https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://adservice.google.com https://www.googleadservices.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.googleapis.com https://*.gstatic.com https://www.facebook.com https://apiv3.teamsnap.com https://auth.teamsnap.com https://*.paysimple.com https://*.authorize.net https://gateway.transit-pass.com https://*.paypal.com https://*.braintreegateway.com https://*.verticalinsure.com https://api.stripe.com https://cloudflareinsights.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://fundingchoicesmessages.google.com https://s.amazon-adsystem.com; frame-src 'self' https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://pagead2.googlesyndication.com https://adservice.google.com https://ep2.adtrafficquality.google https://fundingchoicesmessages.google.com https://*.paypal.com https://*.braintreegateway.com https://*.authorize.net https://*.paysimple.com https://gateway.transit-pass.com https://*.verticalinsure.com https://www.googletagmanager.com https://www.google.com https://accounts.google.com https://*.facebook.com https://platform.twitter.com https://syndication.twitter.com https://scribehow.com https://usarank.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://stayker.com https://web.usssa.com https://*.sincsports.com https://js.stripe.com https://hooks.stripe.com https://challenges.cloudflare.com https://weatherwidget.io https://s.amazon-adsystem.com; worker-src 'self' blob:; form-action 'self' https://www.facebook.com https://*.paypal.com https://*.authorize.net https://gateway.transit-pass.com; frame-ancestors 'self' https://*.sincsports.com; object-src 'none'; base-uri 'self'; upgrade-insecure-requests; report-uri /services/CspReport.ashx; 1
font-src fonts.gstatic.com use.typekit.net cash-f.squarecdn.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.hotjar.com *.trustami.com *.confmetrix.com *.metrix-demo.com *.tailwindcss.com *.klarnacdn.net *.paypal.com *.paypalobjects.com *.typekit.net *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://widgets.trustedshops.com www.auronia.de data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com * *.facebook.com https://plumrocket.com *.paypal.com www.auronia.de 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com www.auronia.de 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ * www.google.com *.google.com *.doubleclick.net *.facebook.com *.certcapture.com *.hotjar.com *.pinterest.com *.klarna.com *.imajize.com https://plumrocket.com *.paypal.com *.sandbox.paypal.com *.trustpilot.com www.auronia.de 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io * 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.certcapture.com *.bing.com *.pinterest.com *.klarnacdn.net *.usercentrics.eu *.confmetrix.com *.metrix-demo.com *.tailwindcss.com *.klarna.com *.klarnaevt.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.paypal.com *.sandbox.paypal.com https://firebasestorage.googleapis.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com www.auronia.de data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.certcapture.com *.pinterest.com *.klaviyo.com *.bing.com *.hotjar.com *.zdassets.com *.zendesk.com *.zopim.com *.pinimg.com *.confmetrix.com *.metrix-demo.com *.klarnacdn.net *.trustami.com https://unpkg.com/vimeo-froogaloop2@0.1.0/javascript/froogaloop.min.js *.usercentrics.eu *.tailwindcss.com *.klarna.com x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.sandbox.paypal.com *.paypalobjects.com *.cdn-apple.com *.avada.io *.shopify.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.trustpilot.com www.auronia.de 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.certcapture.com *.trustami.com *.confmetrix.com *.metrix-demo.com *.tailwindcss.com *.klarnacdn.net https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.trustpilot.com www.auronia.de 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.pinterest.com *.zdassets.com www.auronia.de 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io * *.facebook.com *.facebook.net *.google.com *.certcapture.com *.pinterest.com *.zdassets.com *.doubleclick.net *.zendesk.com *.zopim.com *.confmetrix.com *.metrix-demo.com *.hotjar.com *.klaviyo.com wss://widget-mediator.zopim.com/ *.klarnaevt.com/ *.trustpilot.com/ https://bat.bing.com/ *.usercentrics.eu *.tailwindcss.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.paypal.com *.sandbox.paypal.com https://get.geojs.io *.avada.io *.trustedshops.com *.etrusted.com https://integrations.etrusted.site www.auronia.de 'self' 'unsafe-inline'; child-src *.certcapture.com www.auronia.de http: https: blob: 'self' 'unsafe-inline'; default-src www.auronia.de 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-t-ePmynsL28eFe9NXQWmyA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
connect-src 'self' https://bot.io.gravyty.com; object-src 'none'; script-src 'self' 'report-sample' https://bot.io.gravyty.com cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://maxcdn.bootstrapcdn.com https://unpkg.com https://www.google.com; style-src 'self' 'report-sample' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://unpkg.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
script-src-elem *.facebook.net; font-src *.fontawesome.com *.gstatic.com *.cloudfront.net *.reviews.io *.reviews.co.uk data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.sharethis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.reviews.io *.reviews.co.uk *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io *.sharethis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.cloudfront.net *.reviews.io *.reviews.co.uk maps.gstatic.com *.gstatic.com emjcd.com *.emjcd.com idsync.rlcdn.com *.idsync.rlcdn.com *.facebook.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.sharethis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.authorize.net assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.reviews.io *.reviews.co.uk *.translate.google.com *.translate.googleapis.com maps.googleapis.com https://www.googletagmanager.com tagmanager.google.com emjcd.com *.emjcd.com pkracv.com *.pkracv.com qksrv.net *.qksrv.net kdukvh.com *.kdukvh.com commission-junction.com *.commission-junction.com cj.mplxtms.com *.cj.mplxtms.com mczbf.com *.mczbf.com sjwoe.com *.sjwoe.com idsync.rlcdn.com *.idsync.rlcdn.com *.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.sharethis.com https://static.klaviyo.com *.fontawesome.com *.googleapis.com unsafe-inline assets.braintreegateway.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.translate.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.sharethis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.cloudfront.net *.reviews.io *.reviews.co.uk https://www.google-analytics.com cj.mplxtms.com *.cj.mplxtms.com idsync.rlcdn.com *.idsync.rlcdn.com *.nlm.nih.gov *.facebook.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com maps.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; font-src 'self' https://use.typekit.net fonts.gstatic.com; form-action 'self' https://accounts.google.com/ https://crm.zoho.com/crm/WebToLeadForm https://courses.projectstem.org https://clever.com; frame-src 'self' https://www.google.com https://www.recaptcha.net/recaptcha/api2/ https://player.vimeo.com https://scratch.mit.edu https://videos.projectstem.org https://www.sociablekit.com http://lsrelay-config-production.s3.amazonaws.com http://schools-blocked.s3-website-us-east-1.amazonaws.com https://form.jotform.com https://submit.jotform.com https://js.stripe.com; img-src 'self' data: https://i.vimeocdn.com/video/ https://p.typekit.net https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://googleads.g.doubleclick.net https://code.org; manifest-src 'self'; media-src https://files.projectstem.org https://videos.projectstem.org https://videos.stg.projectstem.site https://player.vimeo.com https://vod-progressive.akamaized.net https://download-video.akamaized.net; object-src 'none'; script-src 'self' 'strict-dynamic' 'unsafe-inline' https://www.google.com/recaptcha/api.js https://player.vimeo.com https://use.typekit.net https://www.googleadservices.com/pagead/conversion.js https://www.googletagmanager.com/gtag/js https://www.gstatic.com/recaptcha/releases/ https://www.recaptcha.net https://projectstem.org https://js.stripe.com/clover/stripe.js 'nonce-SEcd615kse4aaSiW8rwuBg=='; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/css2; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net/j/collect https://files.projectstem.org https://docs.projectstem.org https://projectstem.org; worker-src 'self' 1
default-src 'none'; child-src 'self' www.google-analytics.com; connect-src 'self' cdn.cookielaw.org privacyportal.onetrust.com geolocation.onetrust.com www.google-analytics.com s3.amazonaws.com www.google.ca analytics.google.com; font-src 'self' fonts.gstatic.com stackpath.bootstrapcdn.com; img-src 'self' https: data:; script-src 'self' www.googletagmanager.com code.jquery.com cdn.jsdelivr.net cdn.cookielaw.org stackpath.bootstrapcdn.com cdnjs.cloudflare.com 'nonce-99c5788cc2c302a0c32537021c328a9e'; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net stackpath.bootstrapcdn.com fonts.googleapis.com; object-src 'none'; report-uri /report-violation 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com *.googleapis.com https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * static.olark.com *.facebook.com amc.demdex.net *.certcapture.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.christianlight.com *.visualwebsiteoptimizer.com *.google.com *.windows.net *.facebook.com *.google.ru *.bing.com *.olark.com *.cookielaw.org *.googleapis.com https://*.gstatic.com *.certcapture.com https://*.google.com https://*.googleapis.com https://*.googleusercontent.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com dev.visualwebsiteoptimizer.com connect.facebook.net bat.bing.com cdn.roirevolution.com js.bronto.com *.olark.com ajax.googleapis.com edge1.certona.net www.res-x.com *.celebros-analytics.com js-agent.newrelic.com bam-cell.nr-data.net *.cookielaw.org *.googleapis.com https://*.gstatic.com *.certcapture.com https://*.google.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com use.fontawesome.com uitemplatev3stag.celebros.com static.olark.com www.christianlight.com *.certcapture.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.olark.com *.christianlight.com *.cookielaw.org 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.roirevolution.com *.bronto.com *.olark.com *.doubleclick.net bam-cell.nr-data.net *.cookielaw.org *.onetrust.com *.googleapis.com *.certcapture.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.christianlight.com/; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self' https://*.hubspot.com https://*.hsforms.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://*.google-analytics.com https://js.hs-scripts.com https://js.hsforms.net https://cdn.firstpromoter.com https://fast.wistia.com https://www.youtube.com https://www.clarity.ms https://snap.licdn.com https://cdn.raygun.io https://app.autohive.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://*.google-analytics.com https://*.googletagmanager.com https://*.hubspot.com https://*.hubspotusercontent.com https://*.wistia.com https://*.wistia.net https://*.clarity.ms https://*.linkedin.com https://app.autohive.com https://i.ytimg.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.hubspot.com https://*.hsforms.com https://api.hsforms.com https://hubspotonwebflow.com https://*.firstpromoter.com https://*.wistia.com https://*.wistia.net https://*.clarity.ms https://*.linkedin.com https://*.raygun.io https://app.autohive.com https://collector.autohive.com; frame-src https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://*.wistia.net https://*.hubspot.com https://*.hsforms.com; media-src 'self' blob: https://*.wistia.com https://*.wistia.net; worker-src 'self' blob:; upgrade-insecure-requests 1
font-src *.googleapis.com *.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com data: *.zohocdn.com *.zohostatic.eu *.zoho.com *.zoho.in *.zohostatic.com *.klarna.com *.klarnacdn.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.meetanshi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.google.com *.meetanshi.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.zoho.com *.zoho.eu *.zoho.in *.zohostatic.com *.zohopublic.com *.klarna.com *.klarnacdn.net *.hotjar.com *.hotjar.io *.facebook.com *.facebook.net js.mollie.com www.youtube.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com *.meetanshi.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://meetanshi.com/media/logo.png pagead2.googlesyndication.com c.clarity.ms static.elfsight.com files.elfsightcdn.com phosphor.utils.elfsightcdn.com c.bing.com *.clarity.ms *.hotjar.com *.hotjar.io *.elfsight.com *.elfsightcdn.com *.zohopublic.eu *.zohostatic.eu *.zohocdn.com *.zoho.com *.zoho.in *.zohostatic.com *.zohopublic.com *.klarna.com *.klarnacdn.net *.google.co.in *.doubleclick.net *.analytics.google.com *.google.nl https://www.mollie.com https://redchamps.com *.adobedtm.com *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.avada.io *.meetanshi.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com static.elfsight.com consent.cookiebot.com static.hotjar.com analytics.ahrefs.com www.clarity.ms scripts.clarity.ms universe-static.elfsightcdn.com script.hotjar.com static.cloudflareinsights.com *.activehosted.com *.clarity.ms *.hotjar.com *.hotjar.io *.elfsight.com *.elfsightcdn.com *.zoho.eu *.zohopublic.eu *.zoho.com *.zoho.in *.zohocdn.com *.zohostatic.eu *.zohostatic.com *.klarna.com *.klarnacdn.net toekomst.vixxbadkamers.nl consentcdn.cookiebot.com data: js.mollie.com www.youtube.com player.vimeo.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com tagmanager.google.com *.clarity.ms *.hotjar.com *.hotjar.io *.zohocdn.com *.zohostatic.eu *.zoho.com *.zoho.in *.zohostatic.com *.klarna.com *.klarnacdn.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.amazonaws.com *.googleapis.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com https://get.geojs.io *.avada.io *.meetanshi.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com pagead2.googlesyndication.com toekomst.vixxbadkamers.nl analytics.ahrefs.com consentcdn.cookiebot.com metrics.hotjar.io vc.hotjar.io ws.hotjar.com content.hotjar.io core.service.elfsight.com static.elfsight.com service-reviews-ultimate.elfsight.com universe-static.elfsightcdn.com f.clarity.ms y.clarity.ms e.clarity.ms h.clarity.ms widget.trustpilot.com wss: *.clarity.ms *.hotjar.com *.hotjar.io *.elfsight.com *.elfsightcdn.com *.zoho.eu *.zohopublic.eu *.zohostatic.eu *.zohocdn.com *.zoho.com *.zoho.in *.zohostatic.com *.klarna.com *.klarnacdn.net *.doubleclick.net cdn.plyr.io noembed.com *.google-analytics.com *.facebook.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://eu-assets.i.posthog.com https://assets.calendly.com; style-src 'self' 'unsafe-inline' https://assets.calendly.com; img-src 'self' data: blob: https:; font-src 'self' data: https://assets.calendly.com; connect-src 'self' https://eu.i.posthog.com https://eu-assets.i.posthog.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://googleads.g.doubleclick.net https://calendly.com; frame-src 'self' https://calendly.com https://www.googletagmanager.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com https://cdn.checkout.com *.cdn-apple.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com fonts.googleapis.com cdn.tamara.co fonts.bunny.net *.fontawesome.com https://fonts.bunny.net data: checkout.tabby.ai widgets.tabby.ai cdn.tabby.ai storage.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.google.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://js.checkout.com *.klarna.com *.youtube.com/ https://scontent-ams4-1.cdninstagram.com checkout.tabby.ai cdn.tamara.co www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com *.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io platform-api.sharethis.com *.cloudflare.com *.klarna.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com https://clauem2.arrowtheme.com https://scontent.cdninstagram.com/ https://scontent-ams4-1.cdninstagram.com www.google.co.in www.facebook.com connect.facebook.net https://images.unsplash.com *.cdninstagram.com *.tabby.ai *.tamara.co assets.braintreegateway.com https://maps.gstatic.com https://maps.googleapis.com blob: https://firebasestorage.googleapis.com graph.facebook.com business.facebook.com checkout.tabby.ai widgets.tabby.ai cdn.tabby.ai fonts.googleapis.com storage.googleapis.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com https://*.checkout.com *.klarnacdn.net *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.maps.googleapis.com *.trackedlink.net www.google.com *.maps.gstatic.com maps.googleapis.com *.googletagmanager.com *.googleadservices.com https://buttons-config.sharethis.com/ https://connect.facebook.net https://platform-api.sharethis.com https://scontent-ams4-1.cdninstagram.com cdn.tamara.co checkout.tabby.ai cdnjs.cloudflare.com platform.twitter.com https://maps.googleapis.com/maps/api/ https://places.googleapis.com/ https://examplecdn.com https://maps.googleapis.com https://maps.googleapis.com/maps-api-v3/ https://places.googleapis.com *.avada.io *.shopify.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com widgets.tabby.ai cdn.segment.com cdn.sift.com score.jcsc.online seondf.com deviceinf.com getdeviceinf.com *.tamara.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://cdn.checkout.com *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com *.google-analytics.com https://platform-api.sharethis.com cdn.tamara.co checkout.tabby.ai https://fonts.bunny.net *.tamara.co 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tamara.co 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://js.checkout.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.cloudflare.com *.twitter.com *.twimg.com *.googleadservices.com *.google-analytics.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org *.google.co.in *.maps.gstatic.com *.maps.googleapis.com maps.googleapis.com https://scontent-ams4-1.cdninstagram.com checkout.tabby.ai cdn.tamara.co https://maps.googleapis.com https://places.googleapis.com https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com widgets.tabby.ai cdn.segment.com api.segment.com api.segment.io api.amplitude.com *.seondfresolver.com *.deviceinfresolver.com *.getdeviceinfresolver.com *.tamara.co 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.seondnsresolve.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://analytics.tiktok.com https://*.in.applicationinsights.azure.com https://cdn-ukwest.onetrust.com https://*.googletagmanager.com https://*.google-analytics.com https://js.monitor.azure.com https://static.hotjar.com https://connect.facebook.net https://tracker.marinsm.com https://bat.bing.com https://tt.mbww.com https://www.tradedoubler.com https://secure.adnxs.com https://ade.googlesyndication.com https://jaishroff-org-help.freshchat.com https://script.hotjar.com https://googleads.g.doubleclick.net https://*.smct.io https://smct.co https://swrap.tradedoubler.com https://collect.bannercrowd.net https://*.bannercrowd.net https://*.marinsoftware.com https://*.tangoo.it https://*.tangooserver.com https://*.smct.co https://collinson-insurance-eu.my.connect.aws a1.engage-x.io analytics.bestofluck.io https://open.spotify.com https://embed-cdn.spotifycdn.com https://*.facebook.net https://s1.ad-leaps.com; style-src 'self' 'unsafe-inline' 'self' 'unsafe-inline' https://fonts.googleapis.com https://jaishroff-org-help.freshchat.com https://cdn-ukwest.onetrust.com https://cdn.honey.io; object-src 'none'; base-uri 'self'; connect-src 'self' 'self' https://analytics.tiktok.com https://analytics.google.com https://bat.bing.net https://*.analytics.google.com https://*.in.applicationinsights.azure.com https://cdn-ukwest.onetrust.com https://*.googletagmanager.com https://*.google-analytics.com https://js.monitor.azure.com https://*.hotjar.com https://*.hotjar.io https://connect.facebook.net https://tracker.marinsm.com https://bat.bing.com https://tt.mbww.com https://www.tradedoubler.com https://secure.adnxs.com https://www.facebook.com https://stats.g.doubleclick.net https://*.smct.io https://firehose.eu-west-1.amazonaws.com https://cognito-identity.eu-west-1.amazonaws.com https://*.doubleclick.net https://*.google.com https://*.facebook.com https://analytics-ipv6.tiktokw.us wss://*.hotjar.com https://*.tiktokw.us https://api.bannercrowd.net https://*.googlesyndication.com https://*.google.it https://*.smct.co https://*.google.ch https://*.google.fr https://*.connect.eu-central-1.amazonaws.com https://*.ingest.chime.aws https://static.sdkassets.chime.aws wss://*.app.chime.aws https://collinson-insurance-eu.my.connect.aws https://pagead2.googlesyndication.com https://www.googleadservices.com https://*.facebook.net https://graph.facebook.com https://*.google.es https://fonts.googleapis.com; font-src 'self' data: 'self' https://fonts.gstatic.com https://cdn-ukwest.onetrust.com; frame-src 'self' 'self' https://open.spotify.com https://analytics.tiktok.com https://*.googletagmanager.com https://jaishroff-org-help.freshchat.com https://connect.facebook.net https://*.doubleclick.net https://*.smct.io https://d2d7do8qaecbru.cloudfront.net https://*.tangooserver.com https://www.youtube.com/ https://*.tradedoubler.com https://*.information-world.info https://*.world-trade.today https://*.exchange-rate.xyz https://*.universal-weather.today https://*.news-world.live https://*.techrobo.club https://*.business-world.shop; img-src 'self' 'self' https://ade.googlesyndication.com https://analytics.tiktok.com https://uksouth-1.in.applicationinsights.azure.com https://cdn-ukwest.onetrust.com https://*.googletagmanager.com https://*.google-analytics.com https://static.hotjar.com https://bat.bing.com https://secure.adnxs.com https://*.google.com https://*.google.co.uk https://*.google.com.it https://ad.doubleclick.net https://bat.bing.net https://*.facebook.com https://cdn.smct.io https://*.smct.co data: https://*.google.com.et https://*.google.it https://*.googlesyndication.com https://*.g.doubleclick.net https://news-dashboard.umbraco.com https://*.s3.eu-central-1.amazonaws.com https://*.google.gr https://*.google.ch https://www.googleadservices.com https://pagead2.googlesyndication.com https://*.google.ca https://*.google.co.jp https://*.google.at https://*.google.fr https://*.google.es https://*.google.nl https://*.google.co.th https://*.google.co.id https://*.google.com.br; manifest-src 'self'; media-src 'self'; worker-src 'self' blob:; report-uri /csp-violation-report; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com; img-src 'self' data: blob: https:; connect-src 'self' https://api.project-ebonhold.com wss://api.project-ebonhold.com https://*.googleapis.com https://*.firebaseio.com https://*.firebasestorage.app https://*.google-analytics.com https://www.googletagmanager.com https://mainnet.base.org https://basescan.org; font-src 'self' data: https://cdnjs.cloudflare.com; frame-src https://ebonhold-2af78.firebaseapp.com; object-src 'none'; base-uri 'self'; frame-ancestors 'none' 1
default-src 'self'; script-src 'nonce-FDyF4wuR7taJCyADa+4Wng==' 'strict-dynamic' 'unsafe-eval' https: 'self'; style-src 'self' 'unsafe-inline' https://*.gstatic.com https://fonts.googleapis.com; img-src 'self' data: blob: https://assets.omio.design https://basemaps.cartocdn.com https://*.basemaps.cartocdn.com https://*.openstreetmap.org https://*.googletagmanager.com https://*.googlesyndication.com https://*.doubleclick.net https://*.google.com https://*.gstatic.com https://lh3.googleusercontent.com https://*.adtrafficquality.google; media-src 'self' data: blob: https://*.googlesyndication.com https://*.doubleclick.net; connect-src 'self' https://errors.tomdapp.uk https://*.google-analytics.com https://*.googletagmanager.com https://ssl.bing.com https://api.indexnow.org https://yandex.com https://basemaps.cartocdn.com https://*.basemaps.cartocdn.com https://*.tiles.openrailwaymap.org https://*.googlesyndication.com https://*.doubleclick.net https://*.google.com https://*.adtrafficquality.google https://fundingchoicesmessages.google.com https://*.gstatic.com; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://www.googletagmanager.com https://*.googlesyndication.com https://*.doubleclick.net https://*.google.com https://fundingchoicesmessages.google.com https://*.adtrafficquality.google; worker-src 'self' blob:; manifest-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; report-uri /api/csp-report; report-to csp-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' fonts.gstatic.com; connect-src 'self' http: https: ws: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; block-all-mixed-content;; report-uri https://linkyfi.com/csp/report; report-to csp-endpoint; 1
default-src 'self' 'unsafe-inline' data: stats.g.doubleclick.net googleads.g.doubleclick.net static.doubleclick.net static.addtoany.com addtoany.com www.googletagmanager.com www.youtube.com *.fontawesome.com www.google-analytics.com *.googleapis.com fonts.gstatic.com *.gstatic.com; script-src 'self' 'unsafe-inline' data: stats.g.doubleclick.net googleads.g.doubleclick.net static.doubleclick.net static.addtoany.com addtoany.com www.googletagmanager.com www.youtube.com *.fontawesome.com www.google-analytics.com *.googleapis.com fonts.gstatic.com *.gstatic.com; report-uri /report-csp-violation 1
default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; frame-ancestors 'self'; worker-src 'self' blob:; manifest-src 'self'; script-src 'self' 'unsafe-inline' https://app.chatwoot.com https://js.pusher.com https://www.googletagmanager.com https://connect.facebook.net https://www.clarity.ms https://*.clarity.ms https://analytics.ahrefs.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https://cdn.ofmjobs.com https://ofmjobsv2-production-public.ofmjobs.com https://public-storage.ofmjobs.com https://24152370b4c05cd7249987505b0c7960.r2.cloudflarestorage.com https://*.24152370b4c05cd7249987505b0c7960.r2.cloudflarestorage.com https://images.unsplash.com https://lh3.googleusercontent.com https://ui-avatars.com https://app.chatwoot.com https://www.googletagmanager.com https://*.google-analytics.com https://www.facebook.com https://www.google.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://*.clarity.ms; media-src 'self' blob: https://ofmjobsv2-production-public.ofmjobs.com https://public-storage.ofmjobs.com https://24152370b4c05cd7249987505b0c7960.r2.cloudflarestorage.com https://*.24152370b4c05cd7249987505b0c7960.r2.cloudflarestorage.com https://d8j0ntlcm91z4.cloudfront.net; connect-src 'self' https://cdn.ofmjobs.com https://ofmjobsv2-production-public.ofmjobs.com https://public-storage.ofmjobs.com https://24152370b4c05cd7249987505b0c7960.r2.cloudflarestorage.com https://*.24152370b4c05cd7249987505b0c7960.r2.cloudflarestorage.com https://*.pusher.com wss://*.pusher.com https://speed.cloudflare.com https://app.chatwoot.com wss://app.chatwoot.com https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://www.facebook.com https://connect.facebook.net https://*.clarity.ms https://analytics.ahrefs.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com; frame-src 'self' https://24152370b4c05cd7249987505b0c7960.r2.cloudflarestorage.com https://*.24152370b4c05cd7249987505b0c7960.r2.cloudflarestorage.com https://www.loom.com https://www.youtube.com https://app.chatwoot.com; upgrade-insecure-requests 1
object-src 'none';base-uri 'self';script-src 'nonce-OHBMFIfl7LfNHX-OJqSY1g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src https: 'unsafe-inline' 'unsafe-eval' data: about: blob:; report-uri /_resources/php/csp-report.php 1
font-src *.accelasearch.io applepay.cdn-apple.com *.cloudflare.com *.googleapis.com *.gstatic.com *.typekit.net *.twitter.com *.trustedshops.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com oct8necdneu.azureedge.net *.accelasearch.net *.oct8ne.com 'self' data: *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src * 'self' 'unsafe-inline'; img-src *.paypal.com *.paypalobjects.com *.doubleclick.net assets.adobedtm.com dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com www.google.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.accelasearch.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com pay.google.com applepay.cdn-apple.com *.iubenda.com *.cloudflare.com *.klarna.com *.twitter.com *.usercentrics.eu *.lightemporium.com *.pm7.it https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com *.camo.githubusercontent.com oct8necdneu.azureedge.net *.nexi.it *.sc.omtrdc.net action-wear.com media.action-wear.com *.accelasearch.net *.oct8ne.com https://secure-magenta.dalenys.com *.hsforms.net *.hsforms.com 'self' data: *.braintreegateway.com *.stripe.com *.mollie.com *.payplug.com *.worldline-solutions.com *.nexigroup.com *.gstatic.com *.facebook.com *.reddit.com data: 'self' 'unsafe-inline'; script-src *.cardinalcommerce.com *.braintreegateway.com *.paypal.com *.paypalobjects.com *.stripe.com *.google.com assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.googletagmanager.com *.newrelic.com *.nr-data.net includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.accelasearch.io chimpstatic.com downloads.mailchimp.com *.list-manage.com applepay.cdn-apple.com *.iubenda.com *.cloudflare.com *.twitter.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.trackedlink.net *.avada.io *.alothemes.com *.magepow.com *.unpkg.com cdn.jsdelivr.net *.nexi.it *.accelasearch.net *.oct8ne.com https://secure-magenta.dalenys.com *.hsforms.net *.hsforms.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.mollie.com *.payplug.com *.worldline-solutions.com *.nexigroup.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.accelasearch.io downloads.mailchimp.com *.cloudflare.com *.googleapis.com *.gstatic.com *.twitter.com *.typekit.net *.fontawesome.com *.trustedshops.com *.usercentrics.eu https://fonts.bunny.net *.alothemes.com *.magepow.com *.unpkg.com cdn.jsdelivr.net media.action-wear.com *.accelasearch.net unsafe-inline assets.braintreegateway.com https://secure-magenta.dalenys.com *.iubenda.com *.payplug.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.braintreegateway.com *.braintree-api.com *.paypal.com *.stripe.com *.cardinalcommerce.com dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.paypalobjects.com *.accelasearch.io applepay.cdn-apple.com *.iubenda.com *.cloudflare.com *.twitter.com *.trackedlink.net *.legalblink.it https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com *.oct8neeufrontal3microservicescheckdomain.azurewebsites.net *.nexi.it *.crmcag.it *.accelasearch.net *.oct8ne.com *.google.com google.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.stripe.network *.mollie.com *.payplug.com *.worldline-solutions.com *.nexigroup.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src https://fonts.gstatic.com *.gstatic.com *.fontawesome.com https://www.google.com https://www.gstatic.com use.fontawesome.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://seo.mageplaza.com https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://api.pre.globalgetnet.com https://api.globalgetnet.com magento-cloudflare.jetrails.com www.youtube.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com https://plumrocket.com *.getbeamer.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com *.googleapis.com *.gstatic.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de https://newimgebit-a.akamaihd.net *.ytimg.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.getbeamer.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com *.googleapis.com *.gstatic.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://imgs.ebit.com.br https://newimgebit-a.akamaihd.net *.google.com *.avada.io assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.googletagmanager.com *.facebook.net *.getbeamer.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com fonts.googleapis.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com unsafe-inline use.fontawesome.com *.getbeamer.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https://newimgebit-a.akamaihd.net http://dpm.demdex.net https://www.google.com https://www.gstatic.com www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.google-analytics.com *.getbeamer.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com *.fontawesome.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.addthis.com js.mollie.com *.multisafepay.com https://pay.google.com https://www.googletagmanager.com https://td.doubleclick.net 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com https://www.mollie.com *.multisafepay.com *.hsforms.net *.hsforms.com 'self' data: https://www.google.com https://www.google.nl https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.modeltreinwinkel.nl https://modeltreinwinkel.nl https://vollmershop.com https://www.vollmershop.com https://imgproxy.vendic.dev data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net js.mollie.com pay.google.com applepay.cdn-apple.com *.multisafepay.com https://pay.google.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://cdn.jsdelivr.net *.fontawesome.com *.multisafepay.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com *.multisafepay.com t.elasticsuite.io *.hsforms.net *.hsforms.com https://www.google.com https://www.google.nl https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://p2iqhncxyh.execute-api.eu-central-1.amazonaws.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' https://platform.twitter.com https://connect.facebook.net https://www.instagram.com https://www.tiktok.com https://www.youtube.com https://www.googletagmanager.com https://www.clarity.ms https://scripts.clarity.ms https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://imagedelivery.net https://*.b-cdn.net https://*.tile.openstreetmap.org https://server.arcgisonline.com; font-src 'self' https://fonts.gstatic.com; media-src 'self' blob: https://*.b-cdn.net; connect-src 'self' blob: https://*.b-cdn.net https://imagedelivery.net https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.clarity.ms https://c.bing.com; worker-src 'self' blob:; frame-src https://www.googletagmanager.com https://platform.twitter.com https://www.youtube.com https://www.facebook.com https://www.instagram.com https://www.tiktok.com https://www.linkedin.com https://platform.linkedin.com https://open.spotify.com https://spotify.com https://w.soundcloud.com https://soundcloud.com; frame-ancestors 'self' https://cms.clashreport.com http://localhost:* https://localhost:* http://127.0.0.1:* https://127.0.0.1:* 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; connect-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self'; report-uri /ikd_img/skins/ipko/k_rcv; 1
default-src 'self'; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://cdnjs.cloudflare.com https://cdn.cookielaw.org; style-src 'self' https://fonts.googleapis.com https://use.fontawesome.com; font-src 'self' https://fonts.gstatic.com https://use.fontawesome.com; img-src 'self' data: https:; connect-src 'self' https://www.google-analytics.com https://cdn.cookielaw.org; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.wheel-size.com cdn.wheel-size.com *.google.co.in stats.g.doubleclick.net https://fonts.gstatic.com www.googleadservices.com www.google-analytics.com www.googletagmanager.com www.vimeo.com www.paypal.com  www.sandbox.paypal.com  *.tamara.co *.fontawesome.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.tabby.ai cdn.tabby.sa fonts.googleapis.com storage.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.wheel-size.com cdn.wheel-size.com *.google.co.in stats.g.doubleclick.net *.googleapis.com *.gstatic.com www.googleadservices.com www.google-analytics.com www.googletagmanager.com www.vimeo.com  www.sandbox.paypal.com  www.paypalobjects.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com core.service.elfsight.com *.wheel-size.com cdn.wheel-size.com *.google.co.in stats.g.doubleclick.net *.googleapis.com *.gstatic.com www.googleadservices.com www.google-analytics.com www.googletagmanager.com www.vimeo.com  www.sandbox.paypal.com  *.doubleclick.net js.mollie.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com checkout.tabby.ai checkout.tabby.sa *.weltpixel.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.elfsightcdn.com *.wheel-size.com cdn.wheel-size.com *.google.co.in stats.g.doubleclick.net *.googleapis.com www.google-analytics.com www.vimeo.com  www.sandbox.paypal.com  *.doubleclick.net https://images.unsplash.com *.tamara.co https://firebasestorage.googleapis.com flagpedia.net https://www.mollie.com 'self' data: checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.tabby.ai cdn.tabby.sa fonts.googleapis.com storage.googleapis.com *.facebook.com *.reddit.com *.googletagmanager.com *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.elfsightcdn.com elfsightcdn.com core.service.elfsight.com *.wheel-size.com cdn.wheel-size.com *.google.co.in stats.g.doubleclick.net *.googleapis.com *.gstatic.com  www.sandbox.paypal.com  *.cloudflare.com https://maps.googleapis.com https://player.vimeo.com *.tamara.co *.avada.io maps.googleapis.com js.mollie.com www.google.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.segment.com connect.facebook.net cdn.sift.com score.jcsc.online seondf.com deviceinf.com getdeviceinf.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.wheel-size.com cdn.wheel-size.com *.google.co.in stats.g.doubleclick.net *.googleapis.com *.gstatic.com www.googleadservices.com www.google-analytics.com www.googletagmanager.com www.vimeo.com www.paypal.com  www.sandbox.paypal.com  www.paypalobjects.com *.cloudflare.com *.fontawesome.com *.tamara.co *.google.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.wheel-size.com cdn.wheel-size.com *.google.co.in stats.g.doubleclick.net *.googleapis.com *.gstatic.com www.googleadservices.com www.google-analytics.com www.googletagmanager.com www.vimeo.com www.paypal.com  www.sandbox.paypal.com  www.paypalobjects.com *.tamara.co 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com core.service.elfsight.com *.elfsight.com static.elfsight.com *.wheel-size.com cdn.wheel-size.com *.google.co.in stats.g.doubleclick.net *.googleapis.com *.gstatic.com www.google-analytics.com  www.sandbox.paypal.com  *.cloudflare.com *.doubleclick.net https://maps.googleapis.com https://player.vimeo.com *.tamara.co http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.segment.com api.segment.com api.segment.io api.amplitude.com *.seondfresolver.com *.deviceinfresolver.com *.getdeviceinfresolver.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com *.seondnsresolve.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.googletagmanager.com https://*.hsappstatic.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self'; connect-src 'self' https://consent.cookiebot.com https://consentcdn.cookiebot.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.hubspot.com; frame-src https://*.hubspot.com https://www.googletagmanager.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none'; upgrade-insecure-requests; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.gstatic.com https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com  https://googletagmanager.com https://googleapis.com https://g.doubleclick.net https://facebook.com https://facebook.com.br https://facebook.net https://consent.cookiefirst.com/ *.yourviews.com.br *.yviews.com.br *.google.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://commerce.adobedc.net https://commerce.adobedtm.com https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com  https://googletagmanager.com https://googleapis.com https://g.doubleclick.net https://facebook.com https://facebook.com.br https://facebook.net 'self' 'unsafe-inline' https://consent.cookiefirst.com/ *.yourviews.com.br *.yviews.com.br *.pagar.me *.netsgroup.com *.sibs.pt *.seglan.com *.secureacs.com *.rsa3dsauth.com *.apata.io *.cardinalcommerce.com *.santander.com.br *.bradesco.com.br *.bradesco *.stone.com.br *.nubank.com.br *.itau.com.br *.bb.com.br *.caixa.gov.br *.inter.co *.bancointer.com.br *.c6bank.com.br *.bancobmg.com.br *.safra.com.br *.sicoob.com.br *.banrisul.com.br *.banrisul.b.br *.banorte.com *.xpi.com.br *.btgpactual.com *.btgpactualdigital.com *.mercadopago.com.br *.mercadopago.com *.picpay.com *.amedigital.com *.neon.tech *.neon.com.br *.wise.com *.revolut.com *.sandbox.3dsecure.io *.google.com 'self' 'unsafe-inline'; frame-ancestors https://commerce.adobedc.net https://commerce.adobedtm.com https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com  https://googletagmanager.com https://googleapis.com https://g.doubleclick.net https://facebook.com https://facebook.com.br https://facebook.net 'self' https://consent.cookiefirst.com/ *.yourviews.com.br *.yviews.com.br 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.google.com/ https://commerce.adobedc.net https://commerce.adobedtm.com https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://td.doubleclick.net https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com  https://googletagmanager.com https://googleapis.com https://g.doubleclick.net https://facebook.com https://facebook.com.br https://facebook.net 'self' data: 'unsafe-inline' https://consent.cookiefirst.com/ *.yourviews.com.br *.yviews.com.br https://gum.criteo.com/ https://ct.pinterest.com/ https://server.souqstore.com.br *.pagar.me *.netsgroup.com *.sibs.pt *.seglan.com *.secureacs.com *.rsa3dsauth.com *.apata.io *.cardinalcommerce.com *.santander.com.br *.bradesco.com.br *.bradesco *.stone.com.br *.nubank.com.br *.itau.com.br *.bb.com.br *.caixa.gov.br *.inter.co *.bancointer.com.br *.c6bank.com.br *.bancobmg.com.br *.safra.com.br *.sicoob.com.br *.banrisul.com.br *.banrisul.b.br *.banorte.com *.xpi.com.br *.btgpactual.com *.btgpactualdigital.com *.mercadopago.com.br *.mercadopago.com *.picpay.com *.amedigital.com *.neon.tech *.neon.com.br *.wise.com *.revolut.com *.sandbox.3dsecure.io *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.magezon.com https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://stats.g.doubleclick.net https://staticfiles.yviews.com.br https://service.yourviews.com.br https://api.pagar.me https://cdn.mundipagg.com https://img.youtube.com https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com  https://googletagmanager.com https://googleapis.com https://g.doubleclick.net https://facebook.com https://facebook.com.br https://facebook.net https://consent.cookiefirst.com/ *.yourviews.com.br *.yviews.com.br https://c.clarity.ms https://newimgebit-a.akamaihd.net https://c.bing.com/ https://helpsouq.zendesk.com/ https://bat.bing.com/ https://oaz.sc.omtrdc.net/ https://www.souqstore.com.br/ https://server.souqstore.com.br cdn.mundipagg.com api.pagar.me data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.magento-datasolutions.com maps.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ widget.freshworks.com m2epro.freshdesk.com *.google.com/ http://viacep.com.br https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com  https://googletagmanager.com https://googleapis.com https://www.googleoptimize.com https://g.doubleclick.net https://facebook.com https://facebook.com.br https://facebook.net https://commerce.adobedtm.com https://js-agent.newrelic.com/ https://consent.cookiefirst.com/ *.yourviews.com.br *.yviews.com.br https://www.clarity.ms/ https://imgs.ebit.com.br/ https://onsite.optimonk.com/ https://cdn-asset.optimonk.com/ https://gs-cdn.optimonk.com/ 'self' https://sslwidget.criteo.com/ https://pip.mimo.com.br/ https://ct.pinterest.com/ https://static.zdassets.com/ https://dynamic.criteo.com/ https://reviews.konfidency.com.br/ https://bat.bing.com/ https://s.pinimg.com/ https://www.dwin1.com/ https://flipnet-assets.s3.sa-east-1.amazonaws.com/ https://tag.goadopt.io/ 3ds2.pagar.me 3ds2-sdx.pagar.me https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com https://static.klaviyo.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com https://commerce.adobedc.net https://commerce.adobedtm.com https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com  https://googletagmanager.com https://googleapis.com https://g.doubleclick.net https://facebook.com https://facebook.com.br https://facebook.net 'self' 'unsafe-inline' https://consent.cookiefirst.com/ *.yourviews.com.br *.yviews.com.br *.googleapis.com *.google.com tagmanager.google.com 'self' 'unsafe-inline'; object-src https://commerce.adobedc.net https://commerce.adobedtm.com https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com  https://googletagmanager.com https://googleapis.com https://g.doubleclick.net https://facebook.com https://facebook.com.br https://facebook.net 'self' 'unsafe-inline' https://consent.cookiefirst.com/ *.yourviews.com.br *.yviews.com.br 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https://commerce.adobedc.net https://commerce.adobedtm.com https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com  https://googletagmanager.com https://googleapis.com https://g.doubleclick.net https://facebook.com https://facebook.com.br https://facebook.net 'self' 'unsafe-inline' https://consent.cookiefirst.com/ *.yourviews.com.br *.yviews.com.br 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https://commerce.adobedc.net https://commerce.adobedtm.com https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com  https://googletagmanager.com https://googleapis.com https://g.doubleclick.net https://facebook.com https://facebook.com.br https://facebook.net 'self' 'unsafe-inline' https://consent.cookiefirst.com/ *.yourviews.com.br *.yviews.com.br 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.magento-datasolutions.com *.magento-ds.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ widget.freshworks.com m2epro.freshdesk.com https://commerce.adobedc.net https://commerce.adobedtm.com https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com  https://googletagmanager.com https://googleapis.com https://g.doubleclick.net https://facebook.com https://facebook.com.br https://facebook.net 'self' 'unsafe-inline' https://consent.cookiefirst.com/ *.yourviews.com.br *.yviews.com.br https://newimgebit-a.akamaihd.net/ https://w.clarity.ms/ https://j.clarity.ms/ https://front.optimonk.com/ https://cdn-account.optimonk.com/ https://cdn-limit.optimonk.com/ https://jfapiprod.optimonk.com/ https://ekr.zdassets.com/ https://api.mimolivesales.com.br/ https://ct.pinterest.com/ https://helpsouq.zendesk.com/ https://idacomvoce.zendesk.com/ https://reviews-api.konfidency.com.br/ https://i.konduto.com/ https://oaz.tt.omtrdc.net/ https://server.souqstore.com.br api.mundipagg.com api.pagar.me brasilapi.com.br viacep.com.br servicodados.ibge.gov.br pay.sandbox.google.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src https://commerce.adobedc.net https://commerce.adobedtm.com https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://td.doubleclick.net https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com  https://googletagmanager.com https://googleapis.com https://g.doubleclick.net https://facebook.com https://facebook.com.br https://facebook.net 'self' data: 'unsafe-inline' https://consent.cookiefirst.com/ *.yourviews.com.br *.yviews.com.br http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https://commerce.adobedc.net https://commerce.adobedtm.com https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com https://googletagmanager.com https://googleapis.com https://g.doubleclick.net https://td.doubleclick.net https://facebook.com https://facebook.com.br https://facebook.net 'self' 'unsafe-inline' https://consent.cookiefirst.com/ *.yourviews.com.br *.yviews.com.br 'self' 'unsafe-inline' 'unsafe-eval'; base-uri https://commerce.adobedc.net https://commerce.adobedtm.com https://*.gstatic.com https://*.google.com https://*.google.com.br https://*.googleadservices.com https://google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.g.doubleclick.net https://td.doubleclick.net https://*.facebook.com https://*.facebook.com.br https://*.facebook.net https://gstatic.com https://google.com https://google.com.br https://googleadservices.com https://*.google-analytics.com  https://googletagmanager.com https://googleapis.com https://g.doubleclick.net https://facebook.com https://facebook.com.br https://facebook.net 'self' 'unsafe-inline' https://consent.cookiefirst.com/ *.yourviews.com.br *.yviews.com.br 'self' 'unsafe-inline'; 1
default-src 'self' 'unsafe-inline'; img-src https://* 'data'; child-src 'none'; frame-ancestors 'self'; upgrade-insecure-requests; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://cdn.paddle.com https://public.profitwell.com; style-src 'self' 'unsafe-inline' https://cdn.paddle.com; img-src 'self' data: https://cdn.discordapp.com; font-src 'self'; media-src 'self'; connect-src 'self' https://api.xenon.bot https://api.paddle.com https://www2.profitwell.com https://analytics.xenon.bot https://status.xenon.bot; worker-src 'self'; frame-src https://www.youtube-nocookie.com https://retain-widgets.paddle.io; object-src 'none'; form-action 'self'; base-uri 'none'; frame-ancestors 'none' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.cardinalcommerce.com *.tawk.to *.cloudfront.net *.reviews.co.uk *.fdchosting.co.uk *.zopim.com *.fontawesome.com maxcdn.bootstrapcdn.com *.superpayments.com *.stripe.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.googlesyndication.com *.tiktok.com *.twitter.com *.reviews.co.uk *.list-manage.com *.superpayments.com *.stripe.com 'self' 'unsafe-inline'; frame-ancestors https://widget.reviews.co.uk https://widget.reviews.io *.superpayments.com *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.instagram.com *.doubleclick.net www.facebook.com *.googlesyndication.com *.tiktok.com connect.facebook.net graph.facebook.com business.facebook.com *.twitter.com *.reviews.co.uk *.addthis.com *.superpayments.com *.stripe.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://images.unsplash.com *.googleapis.com *.cdninstagram.com *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com imgsct.cookiebot.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com connect.facebook.net graph.facebook.com business.facebook.com www.feedoptimise.com cdn.feedoptimise.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.jsdelivr.net *.reviews.co.uk *.fdchosting.co.uk *.google.co.uk *.zopim.com *.superpayments.com *.stripe.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://maps.googleapis.com *.googleapis.com *.gstatic.com *.instagram.com *.google.bg *.googletagmanager.com www.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com consent.cookiebot.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com connect.facebook.net graph.facebook.com business.facebook.com www.feedoptimise.com cdn.feedoptimise.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.reviews.co.uk *.tawk.to *.chimpstatic.net *.chimpstatic.com *.zopim.com *.zdassets.com *.onefeed.co.uk *.addthis.com *.addthisedge.com *.moatads.com *.pinterest.com *.superpayments.com *.stripe.com segment.com *.segment.com *.segmentapis.com q4g4k4pw47biltffyqrfab7q7m0jaagm.lambda-url.ap-south-1.on.aws cdn.seondf.com *.trustpilot.com cdn.jsdelivr.net https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com downloads.mailchimp.com *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.jsdelivr.net *.reviews.co.uk *.mailchimp.com *.cloudfront.net maxcdn.bootstrapcdn.com *.superpayments.com *.stripe.com cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.google-analytics.com www.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com connect.facebook.net graph.facebook.com business.facebook.com *.tawk.to *.cloudflare.com *.twitter.com *.twimg.com *.reviews.co.uk ekr.zdassets.com *.zopim.com wss://*.zopim.com *.addthis.com *.superpayments.com *.stripe.com stripe.com cognito-idp.eu-west-2.amazonaws.com segment.com *.segment.com *.segmentapis.com q4g4k4pw47biltffyqrfab7q7m0jaagm.lambda-url.ap-south-1.on.aws cdn.seondf.com *.seondnsresolve.com *.seondfresolver.com *.deviceinfresolver.com *.seonintelligence.com *.trustpilot.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.reviews.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.franknutt.co.uk/; report-to report-endpoint; 1
font-src fonts.googleapis.com fonts.gstatic.com *.googleapis.com *.gstatic.com data: https://www.googletagmanager.com *.tidio.co upstream.heidipay.com sbx-upstream.heidipay.io https://fonts.gstatic.com *.klarnacdn.net *.fontawesome.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.google.com d2d7do8qaecbru.cloudfront.net td.doubleclick.net *.klarna.com *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com app.pulsantereso.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com www.arredodacasa.com recensioni-io-static-folder.s3.eu-central-1.amazonaws.com *.tidiochat.com *.cloudflare.com widget.feedaty.com www.facebook.com d3k81ch9hvuctc.cloudfront.net cdn.iubenda.com www.google.it storage.googleapis.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.development.scalapay.com *.staging.scalapay.com *.scalapay.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.cloudfront.net *.clarity.ms *.tidio.co cdn.doofinder.com static.addtoany.com cdn.jsdelivr.net static.klaviyo.com static-tracking.klaviyo.com widget.feedaty.com cdn.iubenda.com cs.iubenda.com connect.facebook.net cdn.scalapay.com upstream.heidipay.com sbx-upstream.heidipay.io *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com app.pulsantereso.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com cdn.jsdelivr.net widget.feedaty.com cdn.doofinder.com static.klaviyo.com cdn.iubenda.com https://fonts.googleapis.com *.klarnacdn.net *.fontawesome.com *.development.scalapay.com *.staging.scalapay.com *.scalapay.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tidio.co fonts.gstatic.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://www.google-analytics.com *.onlinereviews.tech *.google-analytics.com *.clarity.ms wss://socket.tidio.co *.tidio.co pagead2.googlesyndication.com region1.analytics.google.com widget.feedaty.com fast.a.klaviyo.com static-forms.klaviyo.com wss://eu1-layer.doofinder.com eu1-layer.doofinder.com *.iubenda.com upstream.heidipay.com sbx-upstream.heidipay.io *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.stripe.com klarna.com *.link.com *.amazon.com app.pulsantereso.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com app.pulsantereso.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
img-src blob: data: https: 'self';media-src blob: 'self';worker-src blob: 'self';font-src data: 'self';connect-src https://*.analytics.google.com https://*.cookiebot.com https://*.doubleclick.net https://*.firebaseio.com https://*.google-analytics.com https://*.googleapis.com https://*.gstatic.com https://www.googletagmanager.com 'self' wss://*.firebaseio.com;frame-src https://*.cookiebot.com https://*.doubleclick.net https://*.google.com https://*.youtube.com https://*.youtube-nocookie.com https://banner.admiral.at https://player.vimeo.com https://www.googletagmanager.com 'self';script-src https://*.cookiebot.com https://*.google.com https://*.googleapis.com https://*.gstatic.com https://www.googletagmanager.com 'self';default-src 'self';base-uri 'self';child-src 'self';form-action 'self';manifest-src 'self';style-src 'self' 'unsafe-inline';style-src-attr 'unsafe-inline';script-src-attr 'unsafe-inline';upgrade-insecure-requests 1
object-src 'none';base-uri 'self';script-src 'nonce-uldsOCqh-1omiCaiZaD21w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-jYAqKnnMF7r6h02HGLf1PGl2J8u9ex8p'; base-uri 'none'; report-uri https://data.sanitino.eu/csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.snapfinance.com maxcdn.bootstrapcdn.com *.paypal.com *.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com *.klarnacdn.net *.stape.io *.fontawesome.com https://fonts.bunny.net *.shopperapproved.com tirebros24.services.answerbase.com data3.answerbase.com tawk.link embed.tawk.to *.tawk.to *.klaviyo.com static.afterpay.com static-us.afterpay.com static-oc.afterpay.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://seo.mageplaza.com *.authorize.net 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.affirm.com *.affirm.ca *.snapfinance.com *.koalafi.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.sandbox.paypal.com *.google.com *.klarna.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.stape.io connect.facebook.net *.facebook.com *.disqus.com disqus.com faire.com snapwidget.com *.zapier.app *.zapier.com commercepartnerhub.com *.shopperapproved.com tirebros24.services.answerbase.com ajax.googleapis.com data3.answerbase.com embed.tawk.to va.tawk.to ob.buzzfufighter.com portal.afterpay.com *.authorize.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.affirm.com *.affirm.ca *.snapfinance.com *.seondf.com *.socure.io *.dv.socure.io *.koalafi.com *.online-metrix.net *.veriff.me vault.pactsafe.io s3.amazonaws.com *.s3.amazonaws.com rp.liadm.com ccspersistencedemo-contentstaticassets04b201d4-16x955emz0wxo.s3.us-east-2.amazonaws.com t.teads.tv l.teads.tv ccspersistencedemo-contentstaticassets04b201d4-16x955emz0wxo.s3.us-east-1.amazonaws.com bat.bing.com www.facebook.com connect.facebook.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.sandbox.paypal.com *.gstatic.com https://cds.activant.com shipping-offers-static-images-bucket-platformsandbox.s3.amazonaws.com shipping-offers-static-images-bucket-stage.s3.amazonaws.com shipping-offers-static-images-bucket-prod.s3.amazonaws.com shipping-offers-static-images-bucket-dev.s3.amazonaws.com shipping-offers-static-images-bucket-demo.s3.amazonaws.com helloextend-static-assets.s3.amazonaws.com extendcoreoffersprod-offersthemelogobucketeb21afa-1lr7le13dvgtp.s3.amazonaws.com extendcoreoffersdemo-offersthemelogobucketeb21afa-19jnurg0a0o17.s3.amazonaws.com extendcoreoffersdev-offersthemelogobucketeb21afaa-2ttuvks0mzbd.s3.amazonaws.com extendcoreoffersstage-offersthemelogobucketeb21af-1f81w2c7u5t7p.s3.amazonaws.com https://s3.amazonaws.com/ccspersistenceprod-contentstaticassets04b201d4-1apqb8dyegznm/offers/learnMoreModal-default-1654273334107-learnMoreModal.backgroundImageUrl_Generic_WomanwithBox2.jpg https://s3.amazonaws.com/ccspersistenceprod-contentstaticassets04b201d4-1apqb8dyegznm/offers/shippingProtectionCartOffer-default-1720746621507-extend_svg_cart.svg *.klarna.com *.klarnaevt.com *.klarnacdn.net magefan.com cm.magefan.com *.disqus.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com *.stape.io *.facebook.com *.fbcdn.net *.disquscdn.com https://firebasestorage.googleapis.com *.shopperapproved.com tirebros24.services.answerbase.com data3.answerbase.com tawk.link tirebros24.s3.us-east-1.amazonaws.com obs.esnlocco.com obs.buzzfufighter.com ob.buzzfufighter.com www.google.co.in static.afterpay.com static-us.afterpay.com static-oc.afterpay.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.affirm.com *.affirm.ca *.snapfinance.com *.trustpilot.com cdn.seondf.com sdk.dv.socure.io *.koalafi.com ecomm-sdk.koalafi.com ecomm-sdk.sandbox.koalafi.com content.koalafi.com *.online-metrix.net *.veriff.me connect.facebook.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.sandbox.paypal.com *.paypalobjects.com *.google.com *.cdn-apple.com https://sdk.helloextend.com/ *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.disqus.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.stape.io *.disquscdn.com *.avada.io *.shopify.com *.zapier.com snapwidget.com *.shopperapproved.com tirebros24.services.answerbase.com ajax.googleapis.com data3.answerbase.com embed.tawk.to va.tawk.to ob.esnlocco.com obs.esnlocco.com t.tirebros24.com b.visitor-speed.com blob: *.klaviyo.com d-code.liadm.com p.teads.tv analytics.tiktok.com bat.bing.com cdn.jsdelivr.net ob.buzzfufighter.com obs.buzzfufighter.com static.afterpay.com static-us.afterpay.com static-oc.afterpay.com js.afterpay.com portal.afterpay.com www.afterpay.com *.authorize.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.snapfinance.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.klarnacdn.net *.googleapis.com *.googletagmanager.com *.stape.io *.fontawesome.com *.disquscdn.com https://fonts.bunny.net *.mailchimp.com tirebros24.services.answerbase.com data3.answerbase.com embed.tawk.to va.tawk.to *.klaviyo.com static.afterpay.com static-us.afterpay.com static-oc.afterpay.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.affirm.com *.affirm.ca *.snapfinance.com *.trustpilot.com *.seondf.com *.seondnsresolve.com *.socure.io *.dv.socure.io *.koalafi.com *.online-metrix.net *.veriff.me idx.liadm.com rp.liadm.com cm.teads.tv t.teads.tv bat.bing.com connect.facebook.net www.facebook.com graph.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com *.sandbox.paypal.com https://*.helloextend.com/ https://*.extend.com/ *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog *.stape.io *.facebook.com *.disqus.com disqus.com *.disquscdn.com https://get.geojs.io *.avada.io tirebros24.services.answerbase.com data3.answerbase.com embed.tawk.to va.tawk.to *.tawk.to wss://*.tawk.to a.visitor-speed.com ob.esnlocco.com obs.esnlocco.com ob.buzzfufighter.com obs.buzzfufighter.com t.tirebros24.com lg.hyr.so www.google.co.in *.klaviyo.com portal.afterpay.com www.afterpay.com *.centralus.logic.azure.com prod-20.centralus.logic.azure.com prod-25.centralus.logic.azure.com prod-19.centralus.logic.azure.com prod-03.centralus.logic.azure.com prod-30.centralus.logic.azure.com prod-02.centralus.logic.azure.com *.authorize.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'none'; report-uri /tracking 1
default-src 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:; connect-src 'self' https://api2.amplitude.com https://api.eu.amplitude.com https://api-sr.amplitude.com https://api-sr.eu.amplitude.com https://sr-client-cfg.amplitude.com https://sr-client-cfg.eu.amplitude.com; media-src 'self'; object-src 'none'; frame-src 'self' https://www.youtube-nocookie.com https://www.youtube.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; report-uri /api/csp/report/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://analytics.tiktok.com https://bat.bing.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://scripts.clarity.ms https://www.clarity.ms https://googleads.g.doubleclick.net https://www.gstatic.com https://jscloud.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://region1.analytics.google.com https://*.google-analytics.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://consentcdn.cookiebot.com https://j.clarity.ms https://www.clarity.ms https://jscloud.net https://www.google.com https://www.google.pl https://analytics.tiktok.com https://*.tiktokw.us https://bat.bing.com; frame-src https://consentcdn.cookiebot.com https://pay.google.com; frame-ancestors 'self'; form-action 'self'; base-uri 'self'; object-src 'none' 1
default-src 'self' data: *.intercomcdn.com;               connect-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.googletagmanager.com *.google.com *.facebook.com *.microsoftonline.com *.cookiebot.com *.linkedin.com *.doubleclick.net *.clarity.ms *.wisepops.net *.onetrust.com *.intercom.io;              script-src 'self' data: 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.googletagmanager.com *.getaddress.io *.jsdelivr.net *.3chillies.report-uri.io *.cookiebot.com *.googleapis.com  *.brightcove.com *.googleapis.com https://ssl.google-analytics.com *.youtube.com *.google.com *.bing.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.facebook.net *.twitter.com *.amazonaws.com ;              style-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com *.googleapis.com *.fontawesome.com;                img-src * data:;               frame-src 'self' data: *.trustpilot.com *.cookiebot.com;               script-src-elem 'self' data: 'unsafe-inline' 'unsafe-eval'   *.trustpilot.com *.clarity.ms *.youtube.com *.facebook.net *.bing.com *.onetrust.com *.googleapis.com *.googletagmanager.com *.google.com *.facebook.com *.microsoftonline.com *.cookiebot.com https://getaddress.io *.jsdelivr.net *.cookiebot.com https://consent.cookiebot.com  *.cdn.getaddress.io *.wisepops.com *.dwin1.com *.licdn.com *.roeyecdn.com *.intercom.io *.intercomcdn.com;              font-src 'self' data: *.fontawesome.com *.fonts.gstatic.com *.getaddress.io *.googleapis.com *.typekit.net  *.googleusercontent.com;                child-src 'self' data: *.getaddress.io *.googleapis.com  *.youtube.com *.google.com https://accounts.google.com *.googletagmanager.com;              frame-ancestors 'self';              report-uri https://3chillies.report-uri.com/r/d/csp/wizard; 1
font-src https://www.googletagmanager.com *.googleapis.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com *.bird.eu ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ tagmanager.google.com https://www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com *.fontawesome.com *.googleapis.com *.gstatic.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.certcapture.com downloads.mailchimp.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.affirm.com *.affirm.ca *.certcapture.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.facebook.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://www.mollie.com https://api.mapbox.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.gstatic.com connect.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com assets.braintreegateway.com www.gstatic.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com region1.google-analytics.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com autocomplete2.postdirekt.de www.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' https: web106.reachmee.com www.skuld.com bcvp0rtal.com players.brightcove.net; frame-ancestors 'self' https: www.skuld.com skuld.com; 1
font-src *.fontawesome.com https://fonts.bunny.net https://www.ppl.cz/ maxcdn.bootstrapcdn.com api.mapy.cz data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com https://www.google.com/recaptcha/ https://*.doubleclick.net https://ehub.cz https://*.gls-czech.cz https://*.packeta.com/ https://*.heureka.cz/ https://*.heureka.sk/ https://tm.vitalpoint.cz https://tm.vitalpoint.sk https://*.googletagmanager.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com https://images.unsplash.com https://firebasestorage.googleapis.com https://*.ppl.cz https://*.seznam.cz https://im9.cz https://*.google.cz https://*.google.com https://*.google.sk https://*.google.de https://*.google.at https://*.google.pl https://*.google.nl https://*.google.hu https://*.facebook.com https://*.g.doubleclick.net https://*.mailkit.eu https://ehub.cz https://*.heureka.cz/ https://*.heureka.sk/ https://*.zbozi.cz https://*.bing.com https://*.clarity.ms/ https://tm.vitalpoint.cz https://tm.vitalpoint.sk https://bat.bing.net https://bat.bing.com https://*.analytics.google.com https://maps.geoapify.com flagpedia.net www.ppl.cz api.mapy.cz data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com *.avada.io *.shopify.com https://*.googletagmanager.com https://*.smartlook.com https://*.smartlook.cloud https://*.smartform.cz https://*.heureka.cz https://*.mailkit.eu https://*.google.cz/ https://*.google.com/ https://*.google.sk https://*.google.de https://*.google.at https://*.google.pl https://*.google.nl https://*.google.hu https://*.seznam.cz https://*.dognet.sk https://ehub.cz https://*.facebook.net https://*.googleadservices.com https://*.google-analytics.com https://*.googleapis.com https://*.packeta.com/ https://*.zbozi.cz/ https://im9.cz/ https://*.clarity.ms/ https://bat.bing.com/ https://bat.bing.net/ https://cdn.heureka.group/ https://*.heureka.sk/ https://tm.vitalpoint.cz https://tm.vitalpoint.sk https://*.googlesyndication.com *.gstatic.com maps.googleapis.com www.ppl.cz api.mapy.cz 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.fontawesome.com https://fonts.bunny.net https://www.ppl.cz/ https://client.smartform.cz/ https://im9.cz maxcdn.bootstrapcdn.com *.gstatic.com api.mapy.cz 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com vimeo.com https://maps.googleapis.com https://player.vimeo.com https://get.geojs.io *.avada.io https://www.ppl.cz https://*.smartlook.com https://*.smartlook.cloud https://*.mailkit.eu https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.google.com https://*.google.cz https://*.google.sk https://*.google.de https://*.google.at https://*.google.pl https://*.google.nl https://*.google.hu https://*.g.doubleclick.net https://ehub.cz https://widget.packeta.com https://*.clarity.ms https://*.heureka.group https://bat.bing.net https://tm.vitalpoint.cz https://tm.vitalpoint.sk https://*.seznam.cz https://*.googlesyndication.com https://bat.bing.com https://*.googleadservices.com https://maps.geoapify.com www.gstatic.com maps.googleapis.com api.mapy.cz api.dhl.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'sha256-CfeOm6Qzzkwnbh1nIF+hefxiUL/KCW/IqK1jVpAd1aI=' https://cdn.cookielaw.org https://*.onetrust.com https://sgtm.nationalfunding.com; style-src 'self' 'unsafe-inline' https://cdn.cookielaw.org; img-src 'self' data: https://cdn.cookielaw.org https://*.cloudfront.net; font-src 'self' data:; connect-src 'self' https://cdn.cookielaw.org https://geolocation.onetrust.com https://*.onetrust.com https://sgtm.nationalfunding.com https://wp.next.nationalfunding.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://*.docusign.net https://*.docusign.com; report-uri /api/csp-report; report-to csp-endpoint 1
script-src 'self' blob: 'unsafe-inline' 'unsafe-eval' albertateachers.tstllc.net analytics.tiktok.com api.lightboxcdn.com apps.mypurecloud.com az416426.vo.msecnd.net bat.bing.com c.amazon-adsystem.com cdn.ama.ab.ca cdn.segment.com cm.g.doubleclick.net connect.facebook.net googleads.g.doubleclick.net ict.infinity-tracking.net js.stripe.com live.rezync.com player.vimeo.com maps.googleapis.com mpsnare.iesnare.com retdaqb2qi.kameleoon.eu secure.wufoo.com script.infinity-tracking.com scripts.clarity.ms sdk.privacy-center.org snap.licdn.com tools.luckyorange.com www.clarity.ms www.google-analytics.com www.googletagmanager.com www.instagram.com www.lightboxcdn.com www.redditstatic.com www.youtube.com; worker-src 'self' blob:; report-uri https://ama.ab.ca/api/security/csp-report; 1
default-src 'self'; script-src 'self' https://cdnjs.cloudflare.com https://translate-pa.googleapis.com https://translate.google.com https://*.googletagmanager.com *.diffuse.tools 'nonce-aLxW0WTqUnEAmhqSbCJvyA=='; script-src-elem: 'self' 'unsafe-inline' https://translate.google.com https://*.googleapis.com https://translate.googleapis.com https://www.googletagmanager.com *.diffuse.tools 'nonce-aLxW0WTqUnEAmhqSbCJvyA=='; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https://www.leergeld.nl https://plate.libpx.com https://prod1-plate-attachments.s3.amazonaws.com https://translate.googleapis.com https://www.gstatic.com https://www.google.com https://translate.google.com https://fonts.gstatic.com https://*.ytimg.com https://*.google-analytics.com https://*.googletagmanager.com; connect-src 'self' https://translate.googleapis.com https://www.youtube.com https://*.google-analytics.com *.diffuse.tools https://*.analytics.google.com https://*.googletagmanager.com; frame-src 'self'; 1
object-src 'none';base-uri 'self';script-src 'nonce-Ix3BCXF09ERS3fgrrbSq4A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'nonce-lxyfGDsNr+xgcXtInwCIVw==' 'strict-dynamic' 'unsafe-eval' 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; report-uri /_/csp-report 1
object-src 'none';base-uri 'self';script-src 'nonce-zxq80Ki3RxhOGkzSexvXxg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://web.cmp.usercentrics.eu https://api.usercentrics.eu https://app.usercentrics.eu https://*.usercentrics.eu https://*.googletagmanager.com https://*.google-analytics.com https://*.googlesyndication.com https://*.doubleclick.net https://*.googleadservices.com https://*.adyen.com https://checkoutshopper-live.cdn.adyen.com https://*.paypal.com https://*.paypalobjects.com https://*.kctag.net https://aproxy.ksgct.de https://*.dwin1.com https://*.awin1.com https://www.google.com https://www.gstatic.com https://recaptchaenterprise.googleapis.com; style-src 'self' 'unsafe-inline' https://web.cmp.usercentrics.eu https://api.usercentrics.eu https://app.usercentrics.eu https://*.usercentrics.eu https://*.adyen.com https://checkoutshopper-live.cdn.adyen.com; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; font-src 'self' data: https://web.cmp.usercentrics.eu https://api.usercentrics.eu https://app.usercentrics.eu https://*.usercentrics.eu https://*.paypal.com https://*.paypalobjects.com https://*.adyen.com https://checkoutshopper-live.cdn.adyen.com; connect-src 'self' https://*.algolia.net https://*.algolianet.com https://*.algolia.io https://a.klaviyo.com https://*.ingest.de.sentry.io https://*.ingest.sentry.io https://*.googletagmanager.com https://*.google-analytics.com https://*.googlesyndication.com https://*.doubleclick.net https://*.googleadservices.com https://web.cmp.usercentrics.eu https://api.usercentrics.eu https://app.usercentrics.eu https://*.usercentrics.eu https://*.adyen.com https://checkoutshopper-live.cdn.adyen.com https://*.kctag.net https://aproxy.ksgct.de https://*.dwin1.com https://*.awin1.com https://api.trustedshops.com https://*.trustedshops.com https://www.google.com https://www.gstatic.com https://recaptchaenterprise.googleapis.com; frame-src 'self' https://*.adyen.com https://checkoutshopper-live.cdn.adyen.com https://*.paypal.com https://*.paypalobjects.com https://web.cmp.usercentrics.eu https://api.usercentrics.eu https://app.usercentrics.eu https://*.usercentrics.eu https://www.google.com; frame-ancestors 'self'; form-action 'self' https://*.adyen.com https://checkoutshopper-live.cdn.adyen.com https://*.paypal.com https://*.paypalobjects.com; base-uri 'self'; object-src 'none'; upgrade-insecure-requests 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.weltpixel.com *.google.com/ js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com *.ad-srv.net www.usemaxserver.de *.redintelligence.net www.pinterest.com www.pinterest.de www.facebook.com *.googletagmanager.com ad4m.at *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com https://www.magezon.com flagpedia.net https://www.mollie.com bat.bing.com bat.bing.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com maps.gstatic.com *.cdninstagram.com *.fbcdn.net www.google.de *.facebook.com *.pinterest.com www.usemaxserver.de *.awin1.com *.googleadservices.com *.doubleclick.net widgets.trustedshops.com as.ad4m.at ad11.adfarm1.adition.com imagesrv.adition.com adservice.google.com lantern.roeye.com *.roeye.com ih.adscale.de rtb-csync.smartadserver.com simage2.pubmatic.com dsum-sec.casalemedia.com a.twiago.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.avada.io *.shopify.com *.google.com/ *.gstatic.com maps.googleapis.com js.mollie.com bat.bing.com cdn.jsdelivr.net ajax.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com https://freegeoip.app https://www.googletagmanager.com tagmanager.google.com *.instagram.com analytics.gourvita.com www.gstatic.com *.ratepay.com www.dwin1.com www.usemaxserver.de *.ad-srv.net *.doubleclick.net connect.facebook.net *.pinimg.com widgets.trustedshops.com *.googletagmanager.com lantern.roeyecdn.com ad4m.at 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com assets.braintreegateway.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.friendlycaptcha.com eu-api.friendlycaptcha.eu https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com bat.bing.com bat.bing.net cdn.jsdelivr.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com https://freegeoip.app https://www.google-analytics.com *.instagram.com *.googleusercontent.com analytics.gourvita.com *.ratepay.com *.pinterest.com *.google-analytics.com *.merchant-center-analytics.goog *.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'none'; style-src 'report-sample' 'self' 'unsafe-inline' ; object-src 'none'; img-src 'self' *.rainforest-rescue.org data: ; connect-src 'self' ; block-all-mixed-content; report-uri /csp-violation-report/83b8138c-255 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com portal.bulkgate.com *.everypay.gr *.fontawesome.com https://fonts.bunny.net v2.zopim.com 'unsafe-inline' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * portal.bulkgate.com *.cardlink.gr *.alphaecommerce.gr *.eurocommerce.gr *.everypay.gr www.facebook.com checkout.simpler.so *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * portal.bulkgate.com *.everypay.gr www.google.com analytics.skroutz.gr skroutza.skroutz.gr www.facebook.com go.linkwi.se www.pinterest.com gr.pinterest.com tpc.googlesyndication.com *.facebook.com *.doubleclick.net https://widget-v5.boxnow.gr https://widget-v5.boxnow.cy *.weltpixel.com *.googletagmanager.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com portal.bulkgate.com *.everypay.gr ping.contactpigeon.com https://firebasestorage.googleapis.com www.facebook.com www.google.gr v2.zopim.com connect.facebook.net linkedin.com google-analytics.com analytics.skroutz.gr skroutza.skroutz.gr ct.pinterest.com *.glamipixel.com glamipixel.com *.glami.gr *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com maps.googleapis.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com portal.bulkgate.com *.everypay.gr ping.contactpigeon.com *.avada.io *.shopify.com go.linkwi.se analytics.skroutz.gr *.skroutz.gr connect.facebook.net v2.zopim.com www.gstatic.com static.zdassets.com www.google.com https://js.everypay.gr 'self' data: *.zopim.com s.pinimg.com analytics.tiktok.com tpc.googlesyndication.com www.contactpigeon.com *.glamipixel.com glamipixel.com *.glami.gr cdn.simpler.so sdk.local.simpler.so ajax.googleapis.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net https://www.googletagmanager.com tagmanager.google.com maps.googleapis.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com portal.bulkgate.com *.gstatic.com ping.contactpigeon.com *.fontawesome.com https://fonts.bunny.net www.googletagmanager.com www.contactpigeon.com *.tagmanager.google.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com portal.bulkgate.com *.gstatic.com *.everypay.gr ping.contactpigeon.com https://get.geojs.io *.avada.io 'unsafe-inline' data: 'unsafe-inline' wss: stats.g.doubleclick.net 'unsafe-inline' ekr.zdassets.com 'unsafe-inline' maps.googleapis.com gtmss.izyshoes.gr www.facebook.com ct.pinterest.com analytics.tiktok.com 'unsafe-inline' ekr.zendesk.com region1.analytics.google.com socialplugin.facebook.net *.facebook.com web.facebook.com *.contactpigeon.com *.googlesyndication.com www.google.com googleads.g.doubleclick.net checkout.simpler.so button.simpler.so analytics.simpler.so button.local.simpler.so *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri www.contactpigeon.com 'self' 'unsafe-inline'; 1
default-src 'self' *.moesif.com; script-src 'self' 'unsafe-inline' *.moesif.com *.unpkg.com *.jsdelivr.net *.auth0.com *.datadoghq.com *.amplitude.com *.unlayer.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.facebook.net *.hs-banner.com *.hs-scripts.com *.hscollectedforms.net *.hubspot.com *.hsappstatic.net *.apollo.io; script-src-elem 'self' 'unsafe-inline' *.moesif.com *.auth0.com *.hscollectedform.net *.hubspot.com *.hs-scripts.com *.facebook.net *.clarity.ms *.googletagmanager.com *.unpkg.com *.jsdelivr.net; script-src-attr 'unsafe-inline'; style-src 'self' *.moesif.com 'unsafe-inline' *.unlayer.com *.googletagmanager.com; style-src-elem 'self' 'unsafe-inline' *.moesif.com *.jsdelivr.net unpkg.com; style-src-attr 'unsafe-inline'; img-src 'self' data: *.moesif.com *.auth0.com blob: *.datadoghq.com *.amplitude.com *.wp.com *.unlayer.com *.gravatar.com *.mapbox.com *.google-analytics.com *.googleusercontent.com *.googletagmanager.com *.googleleadservices.com *.hsappstatic.net *.hs-banner.com *.hsforms.com *.facebook.net *.hubspot.com *.doubleclick.net; connect-src 'self' *.moesif.net *.moesif.com *.auth0.com *.datadoghq.com *.amplitude.com browser-intake-datadoghq.com *.unlayer.com *.clarity.com *.clarity.ms *.google-analytics.com *.google.com *.googletagmanager.com *.googleleadservices.com *.google.ca *.doubleclick.net *.aplo-evnt.com aplo-evnt.com *.facebook.net *.facebook.com *.hubspot.com *.hscollectedforms.net *.hs-banner.com *.statuspage.io; font-src 'self' data: *.moesif.com moz-extension: *.unlayer.com *.googleapis.com *.gstatic.com; frame-src 'self' *.moesif.com *.doubleclick.net *.hubspot.com *.facebook.com *.auth0.com *.unlayer.com *.googletagmanager.com; media-src 'self' data: *.moesif.com; worker-src 'self' blob: *.moesif.com *.unlayer.com; object-src 'none'; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub5216f5ae0690200e71eff84be3b1303a&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env%3Aprod 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://cdn.segmentify.com http://cdn.segmentify.com https://cdn.sgmntfy.com https://widget.sikayetvar.com https://connect.facebook.net https://snap.licdn.com https://static.hotjar.com https://analytics.tiktok.com https://cdn.taboola.com http://cdn.taboola.com https://bundles.efilli.com https://maps.googleapis.com http://ajax.googleapis.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://static.ads-twitter.com; style-src 'self' 'unsafe-inline' https://cdn.segmentify.com http://cdn.segmentify.com; img-src 'self' data: https:; connect-src 'self' https:; frame-src https:; object-src 'none'; report-uri /api/csp-report 1
default-src 'self'; script-src 'self' 'sha256-Ca3D/BjDft62Qs26Gxg0gHoGKeX7D2G68r3P+FSQfYs=' 'sha256-I/wh4RDiZzbU7x13ViAm+8wUNYj3rZJJ7jeI6RByBu4=' 'sha256-6ZH+/nYVFJ68gMcCOL77gFJo1cBhx/okLwuAoiAi+rg=' 'sha256-Lf0SdqcTfoz0RFWrdmH8abLHfoSi5Me0xJejcXLiflQ=' 'sha256-1F30zgOjj0BmfTWi51dl55W525dojBVfASiuMJMPao0=' 'sha256-ccm2yHsOVpDq1Qr8YQ9JwRtDR39evVF5kqDJyBAAHM4=' 'sha256-smuWBUjOqdBsFOzguZsytsy2ugNy7drYHQnEg0gojks=' 'sha256-16tP0s6AY3j4xjAuc5GLuQuue5bilsm4sGXr8p8rbsQ=' https://www.googletagmanager.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self'; connect-src 'self' https://api.echoflow.it https://*.ingest.de.sentry.io https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://pagead2.googlesyndication.com; media-src 'self' blob:; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; report-uri https://o4511710396350464.ingest.de.sentry.io/api/4511710617337936/security/?sentry_key=322e2aa1542ec29c7e1dcc665db85a9c 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com *.authorize.net plausible.io cdn.userway.org *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.certcapture.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ cdn.userway.org data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.certcapture.com chimpstatic.com downloads.mailchimp.com *.list-manage.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.kaptcha.com *.authorize.net plausible.io cdn.userway.org 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com downloads.mailchimp.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com cdn.userway.org 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.certcapture.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.kaptcha.com *.authorize.net plausible.io *.userway.org 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-wNIWjUvLR-9ew8pmr6kCvw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-wPvsyN7XpO5bOMdagsZC-A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src https://www.gstatic.com https://fonts.gstatic.com fonts.gstatic.com fonts.googleapis.com data: *.fontawesome.com maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com *.gstatic.com 'self' data: https://code.tidio.co/widget-v4/fonts/ https://fonts.axept.io data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://cloudfront.s-a-g.fr/ https://www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://www.googletagmanager.com/ https://www.societe-des-avis-garantis.fr/wp-content/plugins/ag-core/widgets/iframe/2/h/ https://r.adserver01.de/r/797151516356679.html https://td.doubleclick.net https://lrf.configurateur.fybolia.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com 'self' data: http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.google.fr https://ad3.adserver01.de/www/delivery/fc.php https://action.metaffiliation.com http://www.googleadservices.com http://www.google-analytics.com http://www.google.com https://ad3.adserver01.de https://v2assets.zopim.io https://axeptio.imgix.net https://cloudfront.s-a-g.fr/static/product-widget/img/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://cloudfront.s-a-g.fr/ *.google.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.avada.io maps.googleapis.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://lqb.leroidelafenetre.fr https://static.axept.io https://static.zdassets.com https://profiling.socialperf.com https://r.adserver01.de https://tag.beyable.com https://tag.beyable.com/api/beYableJSv2.js https://soc.socialperf.com/profiling/perform.php https://front.activation.beyable.com/api/v2/displays https://assets.adobedtm.com https://www.googleadservices.com/ https://www.google-analytics.com https://googleads.g.doubleclick.net/ https://analytics.google.com https://www.googletagmanager.com http://www.googleadservices.com http://www.googletagmanager.com https://www.google.com https://soc.socialperf.com https://code.tidio.co https://widget-v4.tidiochat.com https://embed.tawk.to https://lrf.configurateur.fybolia.com https://halc.iadvize.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com https://fonts.googleapis.com https://cdnjs.cloudflare.com unsafe-inline assets.braintreegateway.com *.googleapis.com http://www.googleapis.com https://cloudfront.s-a-g.fr/static/product-widget/css/ https://fonts.axept.io 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://static.zdassets.com https://widget-v4.tidiochat.com https://code.tidio.co 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com t.elasticsuite.io *.google-analytics.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://api.axept.io https://leroidelafenetre.zendesk.com https://lqb.leroidelafenetre.fr https://region1.analytics.google.com https://widget-mediator.zopim.com https://www.google.com https://ekr.zdassets.com https://googleads.g.doubleclick.net https://client.axept.io https://widget-mediator.zopim.com/s/W/ws/W05234pNQ9BT-RBK/c/1712579529421 https://widget-mediator.zopim.com/s/W/ws/FSus75S4Yg5FU2AJ/c/1712579533925 https://www.google-analytics.com https://www.googleadservices.com https://analytics.google.com https://www.googletagmanager.com http://www.googletagmanager.com http://www.google-analytics.com http://www.googleadservices.com wss://widget-mediator.zopim.com wss://socket.tidio.co https://va.tawk.to https://cloudfront.s-a-g.fr/dynamic/10007/productWidget/ https://lrf.configurateur.fybolia.com https://halc.iadvize.com https://api.iadvize.com https://ad.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com https://lrf.configurateur.fybolia.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com https://lrf.configurateur.fybolia.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://leroidelafenetre-fr.report.centralcsp.com/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data: https:; frame-ancestors 'self' 1
img-src https://higherlogicdownload.s3.amazonaws.com/POPULATIONASSOCIATION/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/POPULATIONASSOCIATION/ https://img.youtube.com/vi/ https://static.filestackapi.com/picker/ https://d2x5ku95bkycr3.cloudfront.net https://higherlogiclongterm.s3.amazonaws.com/POPULATIONASSOCIATION/ blob: https://d132x6oi8ychic.cloudfront.net 'self'; style-src https://d132x6oi8ychic.cloudfront.net 'unsafe-inline' https://higherlogiccloudfront.s3.amazonaws.com https://cdn.jsdelivr.net/jquery.slick/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://d2x5ku95bkycr3.cloudfront.net/ https://ajax.googleapis.com/ajax/libs/jqueryui/ https://use.fortawesome.com/ https://cdn.higherlogic.com/ai-assistant https://static.filestackapi.com/picker/ https://fonts.googleapis.com/ https://d3uf7shreuzboy.cloudfront.net/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/POPULATIONASSOCIATION/ https://higherlogicdownload.s3.amazonaws.com/POPULATIONASSOCIATION/ https://higherlogiclongterm.s3.amazonaws.com/POPULATIONASSOCIATION/ 'self'; font-src https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogiccloudfront.s3.amazonaws.com https://higherlogicdownload.s3.amazonaws.com/POPULATIONASSOCIATION/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/POPULATIONASSOCIATION/ 'self' https://higherlogiclongterm.s3.amazonaws.com/POPULATIONASSOCIATION/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://d2x5ku95bkycr3.cloudfront.net https://d132x6oi8ychic.cloudfront.net data:; script-src-elem https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d3uf7shreuzboy.cloudfront.net/ https://static.filestackapi.com/picker/ https://cdn.higherlogic.com/ai-assistant https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d2x5ku95bkycr3.cloudfront.net/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://www.gstatic.com/recaptcha/ https://static.filestackapi.com/filestack-js/ 'self' https://ajax.aspnetcdn.com/ajax/ 'unsafe-eval' 'unsafe-inline'; media-src https://higherlogiclongterm.s3.amazonaws.com/POPULATIONASSOCIATION/ https://higherlogicdownload.s3.amazonaws.com/POPULATIONASSOCIATION/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/POPULATIONASSOCIATION/ https://higherlogicstream.s3.amazonaws.com/POPULATIONASSOCIATION/ 'self' https://d132x6oi8ychic.cloudfront.net; script-src https://higherlogiclongterm.s3.amazonaws.com/POPULATIONASSOCIATION/ https://higherlogicdownload.s3.amazonaws.com/POPULATIONASSOCIATION/ https://ajax.aspnetcdn.com/ajax/ https://cdn.jsdelivr.net/jquery.slick/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d132x6oi8ychic.cloudfront.net https://cdn.informz.net 'unsafe-eval' https://use.fortawesome.com/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/POPULATIONASSOCIATION/ https://cdnjs.cloudflare.com/ajax/libs/prism/ 'unsafe-inline' https://d2x5ku95bkycr3.cloudfront.net/ https://higherlogiccloudfront.s3.amazonaws.com https://static.filestackapi.com https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d3uf7shreuzboy.cloudfront.net/ 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://api.connectedcommunity.org/ 'self' https://www.youtube.com/embed/ https://*.kb.us.higherlogic.com; connect-src https://upload.filestackapi.com https://static.filestackapi.com https://cloud.filestackapi.com/folder/list/ 'self' https://hl-managedservices.informz.net https://d3uf7shreuzboy.cloudfront.net/ blob:; worker-src 'self'; default-src 'self'; base-uri 'self'; frame-ancestors https://*.connectedcommunity.org/ 'self'; object-src 'none'; manifest-src 'self'; 1
default-src 'self'; base-uri 'self'; frame-ancestors 'self'; object-src 'none'; img-src 'self' data: blob: https:; media-src 'self' blob: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.paypal.com https://www.paypalobjects.com https://www.youtube.com https://s.ytimg.com https://www.gstatic.com https://apis.google.com https://www.google.com https://www.recaptcha.net https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://partner.googleadservices.com https://securepubads.g.doubleclick.net https://ep2.adtrafficquality.google *.adtrafficquality.google https://static.cloudflareinsights.com https://www.googletagmanager.com https://connect.facebook.net; script-src-elem 'self' 'unsafe-inline' https://www.paypal.com https://www.paypalobjects.com https://www.youtube.com https://s.ytimg.com https://www.gstatic.com https://apis.google.com https://www.google.com https://www.recaptcha.net https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://partner.googleadservices.com https://securepubads.g.doubleclick.net https://ep2.adtrafficquality.google *.adtrafficquality.google https://static.cloudflareinsights.com https://www.googletagmanager.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; connect-src 'self' https://*.paypal.com https://api-m.paypal.com https://api-m.sandbox.paypal.com https://www.youtube.com https://*.googleapis.com https://*.gstatic.com https://www.google.com https://www.recaptcha.net https: https://cloudflareinsights.com https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://www.facebook.com https://graph.facebook.com https://connect.facebook.net; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.paypal.com https://*.paypal.com https://www.google.com https://www.recaptcha.net https://www.facebook.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://partner.googleadservices.com https://securepubads.g.doubleclick.net https://ep2.adtrafficquality.google *.adtrafficquality.google; form-action 'self' https://www.paypal.com https://www.facebook.com https://faacebook.com https://google.com https://googleads.g.doubleclick.net https://paypal.com https://securepubads.g.doubleclick.net; report-uri https://xxtrabutta.com/api/v1/security/csp-report; 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; media-src 'self' https:; object-src 'none'; base-uri 'self'; report-uri /wp-json/vlsec/v1/csp-report 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.thenorthface.co.nz *.paypal.com www.paypalobjects.com  connect.facebook.net *.cquotient.com service.force.com *.salesforceliveagent.com googleads.g.doubleclick.net www.googletagmanager.com www.google-analytics.com *.google.com google.com *.googleapis.com stockinstore.net *.ratepay.com *.adyen.com applepay.cdn-apple.com *.zip.co *.zipmoney.com.au *.auspost.com.au *.doddle.tech *.yotpo.com *.klaviyo.com *.tiktok.com *.cfjump.com lantern.roeyecdn.com *.getblue.io www.upsellit.com *.abtasty.com *.stockinstore.net *.mastercard.com *.visa.com *.truefitcorp.com *.cloudflare.com *.referralcandy.com *.vimeo.com *.hellobar.com *.clarity.ms *.bing.com cdnapisec.kaltura.com *.pinterest.com *.pinimg.com *.gstatic.com gstatic.com *.cloudflareinsights.com; report-uri https://thenorthface.co.nz/c/csp/; 1
default-src 'self' vrmproperties.com *.vrmproperties.com vrmco.com *.vrmco.com;script-src 'self' 'unsafe-inline' vrmproperties.com *.vrmproperties.com vrmco.com *.vrmco.com fontawesome.com *.fontawesome.com jquery.com *.jquery.com cdn.jsdelivr.net stackpath.bootstrapcdn.com cdnjs.cloudflare.com stripe.com *.stripe.com googletagmanager.com *.googletagmanager.com ajax.aspnetcdn.com cdn3.devexpress.com googleapis.com *.googleapis.com gstatic.com *.gstatic.com browser-update.org *.browser-update.org unpkg.com *.unpkg.com js.monitor.azure.com *.google.com *.inspectlet.com *.hs-scripts.com *.hs-analytics.net *.hubspot.com *.hscollectedforms.net *.hs-banner.com snap.licdn.com *.g.doubleclick.net *.hsadspixel.net;style-src 'self' 'unsafe-inline' vrmproperties.com *.vrmproperties.com vrmco.com *.vrmco.com fontawesome.com *.fontawesome.com jquery.com *.jquery.com cdn.jsdelivr.net stackpath.bootstrapcdn.com cdnjs.cloudflare.com stripe.com *.stripe.com googletagmanager.com *.googletagmanager.com ajax.aspnetcdn.com cdn3.devexpress.com googleapis.com *.googleapis.com gstatic.com *.gstatic.com browser-update.org *.browser-update.org unpkg.com *.unpkg.com *.google.com browser-intake-datadoghq.com;connect-src 'self' vrmproperties.com *.vrmproperties.com vrmco.com *.vrmco.com google-analytics.com www.google-analytics.com *.applicationinsights.azure.com fontawesome.com *.fontawesome.com googleapis.com *.googleapis.com js.monitor.azure.com *.inspectlet.com wss://*.inspectlet.com *.hubapi.com *.hubspot.com *.google.com forms.hscollectedforms.net *.linkedin.com;font-src 'self' vrmproperties.com *.vrmproperties.com vrmco.com *.vrmco.com fontawesome.com *.fontawesome.com jquery.com *.jquery.com cdn.jsdelivr.net stackpath.bootstrapcdn.com cdnjs.cloudflare.com stripe.com *.stripe.com googletagmanager.com *.googletagmanager.com ajax.aspnetcdn.com cdn3.devexpress.com googleapis.com *.googleapis.com gstatic.com *.gstatic.com browser-update.org *.browser-update.org unpkg.com *.unpkg.com;img-src 'self' data: vrmproperties.com *.vrmproperties.com vrmco.com *.vrmco.com stripe.com *.stripe.com gstatic.com *.gstatic.com googleapis.com *.googleapis.com *.googletagmanager.com *.inspectlet.com browser-update.org *.browser-update.org google-analytics.com www.google-analytics.com *.hsforms.com *.hubspot.com *.linkedin.com *.google.com;media-src 'self' data: vrmproperties.com *.vrmproperties.com vrmco.com *.vrmco.com stripe.com *.stripe.com gstatic.com *.gstatic.com googleapis.com *.googleapis.com;frame-src 'self' vrmproperties.com *.vrmproperties.com stripe.com *.stripe.com https://www.google.com *.elf.site *.googletagmanager.com td.doubleclick.net;report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubf8efd5a55f319bb301802ad5204f8c81&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env%3Aproduction%2Cservice%3Avrmproperties.com 1
font-src fonts.gstatic.com fonts.googleapis.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://fonts.gstatic.com/ https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ app.thefrontrowhealth.com www.googletagmanager.com https://www.googletagmanager.com https://*.g.doubleclick.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://maps.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io blob: https://bat.bing.com https://alb.reddit.com ssl.google-analytics.com stats.g.doubleclick.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.facebook.com bzr.openai.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://*.g.doubleclick.net magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://*.google.com https://*.google.ae https://*.google.al https://*.google.at https://*.google.be https://*.google.bg https://*.google.ca https://*.google.ch https://*.google.cz https://*.google.de https://*.google.dk https://*.google.dz https://*.google.ee https://*.google.es https://*.google.fi https://*.google.fr https://*.google.gr https://*.google.hr https://*.google.hu https://*.google.ie https://*.google.it https://*.google.lt https://*.google.nl https://*.google.no https://*.google.pl https://*.google.pt https://*.google.ro https://*.google.rs https://*.google.ru https://*.google.se https://*.google.si https://*.google.sk https://*.google.co.id https://*.google.co.il https://*.google.co.in https://*.google.co.jp https://*.google.co.kr https://*.google.co.nz https://*.google.co.th https://*.google.co.uk https://*.google.co.ve https://*.google.co.za https://*.google.com.ar https://*.google.com.au https://*.google.com.br https://*.google.com.co https://*.google.com.cy https://*.google.com.eg https://*.google.com.hk https://*.google.com.mx https://*.google.com.my https://*.google.com.ph https://*.google.com.pk https://*.google.com.sa https://*.google.com.sg https://*.google.com.tr https://*.google.com.tw https://*.google.com.vn data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://static.cloudflareinsights.com https://bat.bing.com https://www.redditstatic.com app.thefrontrowhealth.com ssl.google-analytics.com tagmanager.google.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://connect.facebook.net bzrcdn.openai.com https://www.googletagmanager.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://cdnjs.cloudflare.com/ widget.freshworks.com m2epro.freshdesk.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com js.onrally.com js.sandbox.onrally.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com www.googletagmanager.com tagmanager.google.com fonts.googleapis.com https://static.klaviyo.com *.stripe.network *.stripecdn.com *.amazon.com https://fonts.googleapis.com https://cdnjs.cloudflare.com/ widget.freshworks.com m2epro.freshdesk.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com go.donotage.org https://go.staging.donotage.org app.thefrontrowhealth.com ssl.google-analytics.com stats.g.doubleclick.net region1.google-analytics.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.facebook.com bzr.openai.com bzrcdn.openai.com https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net https://pagead2.googlesyndication.com https://go.donotage.org *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com widget.freshworks.com m2epro.freshdesk.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com api.onrally.com api.sandbox.onrally.com https://*.google.com https://*.google.ae https://*.google.al https://*.google.at https://*.google.be https://*.google.bg https://*.google.ca https://*.google.ch https://*.google.cz https://*.google.de https://*.google.dk https://*.google.dz https://*.google.ee https://*.google.es https://*.google.fi https://*.google.fr https://*.google.gr https://*.google.hr https://*.google.hu https://*.google.ie https://*.google.it https://*.google.lt https://*.google.nl https://*.google.no https://*.google.pl https://*.google.pt https://*.google.ro https://*.google.rs https://*.google.ru https://*.google.se https://*.google.si https://*.google.sk https://*.google.co.id https://*.google.co.il https://*.google.co.in https://*.google.co.jp https://*.google.co.kr https://*.google.co.nz https://*.google.co.th https://*.google.co.uk https://*.google.co.ve https://*.google.co.za https://*.google.com.ar https://*.google.com.au https://*.google.com.br https://*.google.com.co https://*.google.com.cy https://*.google.com.eg https://*.google.com.hk https://*.google.com.mx https://*.google.com.my https://*.google.com.ph https://*.google.com.pk https://*.google.com.sa https://*.google.com.sg https://*.google.com.tr https://*.google.com.tw https://*.google.com.vn 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src blob:; font-src fonts.gstatic.com *.kxcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com *.hostedpayments.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io scontent.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.gstatic.com *.cdninstagram.com *.fbcdn.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.google.com *.gstatic.com cdn.ampproject.org connect.facebook.net www.googletagmanager.com googletagmanager.com *.kxcdn.com platform.twitter.com 'unsafe-inline' *.addthis.com *.addthisedge.com *.moatads.com static.cloudflareinsights.com sce.toogoerp.net sce.toogo.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: https://client.crisp.chat *.stripe.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.cdnfonts.com *.cloudflare.com *.trustpilot.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.stripe.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.arcot.com *.rsa3dsauth.co.uk *.rsa3dsauth.com *.boc.cn *.afs.com.bh *.enfuce.com *.cardcenter.ch *.nexigroup.com *.pluscard.de *.qiib.com.qa *.paylife.at *.redsys.es *.3dsecure.no *.modirum.com *.edb.com *.viseca.ch *.apata.io *.capitalone.com *.dnp-cdms.jp *.revolut.com *.bankserv.co.za *.swisscard.ch *.six-group.com *.marqeta.com *.cardinalcommerce.com *.wlp-acs.com *.imbank.com *.tsys.co.uk *.sia.eu *.garanti.com.tr *.commerzbank.de *.cmbchina.com *.alahli.com *.mycardsecure.com *.gps.com.bh *.citibank.com *.wibmo.com *.dkb.de *.monzo.com *.alinma.com *.nccc.com.tw *.starlingbank.com *.danskebank.com *.pekao24.pl *.lloydsbank.co.uk/ *.lloydsbank.com/ *.lloydsbankinggroup.com/ *.channel-cards-auth-api.lloydsbankinggroup.com/ *.sparebank1.no *.rabobank.nl *.s-id-check-sparkassen.de *.sparkassen-kreditkarten.de *.mbank.pl *.secure2gw.ro *.btrl.ro *.cafis-paynet.jp *.borica.bg *.fibank.bg *.cic.fr *.zaba.hr *.citibank.co.in *.centrum24.pl *.bankmillennium.pl *.icps.mu *.egolomt.mn *.lcl.fr *.ctbcbank.com *.qiwi.com *.postfinance.ch *.citadele.lv *.kib.com.kw *.cathaybk.com.tw *.pkobp.pl *.acdcproc.com *.abanca.com *.n26.com *.klikbca.com *.psa.at *.sumup.com *.eglobal.com.mx *.pl.ing.com *.qnb.com *.rpc-raiffeisen.com *.sebkort.com *.ocbc.com *.tapngo.com.hk *.stcpay.com.sa *.creditmutuel.fr *.luottokunta.fi *.swedbank.se *.unibank.am *.estcard.ee *.hyundaicard.com *.privatbank.ua *.fssnet.co.in *.kbcard.com *.luminorgroup.com *.mashreq.com *.mercurypaymentservices.it *.moneta.cz *.sensebank.com.ua *.sibs.pt *.stripeauthentications.com *.dskbank.bg *.otpbank.hu *.techcombank.com.vn *.touch.tech *.asseco-see.hr *.3dsecure-csas.cz *.cyris.com *.secureacs.com *.acb.com.vn 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.stripe.com *.sagepay.com *.opayo.eu.elavon.com *.arcot.com *.rsa3dsauth.co.uk *.rsa3dsauth.com *.boc.cn *.afs.com.bh *.enfuce.com *.cardcenter.ch *.pluscard.de *.qiib.com.qa *.nexigroup.com *.paylife.at *.redsys.es *.3dsecure.no *.modirum.com *.edb.com *.viseca.ch *.apata.io *.capitalone.com *.dnp-cdms.jp *.revolut.com *.bankserv.co.za *.swisscard.ch *.six-group.com *.marqeta.com *.cardinalcommerce.com *.wlp-acs.com *.imbank.com *.tsys.co.uk *.sia.eu *.garanti.com.tr *.commerzbank.de *.cmbchina.com *.alahli.com *.mycardsecure.com *.gps.com.bh *.citibank.com *.wibmo.com *.dkb.de *.monzo.com *.alinma.com *.nccc.com.tw *.starlingbank.com *.danskebank.com *.pekao24.pl *.lloydsbank.co.uk/ *.lloydsbank.com/ *.lloydsbankinggroup.com/ *.channel-cards-auth-api.lloydsbankinggroup.com/ *.sparebank1.no *.rabobank.nl *.s-id-check-sparkassen.de *.sparkassen-kreditkarten.de *.mbank.pl *.secure2gw.ro *.btrl.ro *.cafis-paynet.jp *.borica.bg *.fibank.bg *.cic.fr *.zaba.hr *.citibank.co.in *.centrum24.pl *.bankmillennium.pl *.icps.mu *.egolomt.mn *.lcl.fr *.ctbcbank.com *.qiwi.com *.postfinance.ch *.citadele.lv *.kib.com.kw *.cathaybk.com.tw *.pkobp.pl *.acdcproc.com *.abanca.com *.n26.com *.klikbca.com *.psa.at *.sumup.com *.eglobal.com.mx *.pl.ing.com *.qnb.com *.rpc-raiffeisen.com *.sebkort.com *.ocbc.com *.tapngo.com.hk *.stcpay.com.sa *.creditmutuel.fr *.luottokunta.fi *.swedbank.se *.unibank.am *.estcard.ee *.hyundaicard.com *.privatbank.ua *.fssnet.co.in *.kbcard.com *.luminorgroup.com *.mashreq.com *.mercurypaymentservices.it *.moneta.cz *.sensebank.com.ua *.sibs.pt *.stripeauthentications.com *.dskbank.bg *.otpbank.hu *.techcombank.com.vn *.touch.tech *.asseco-see.hr *.3dsecure-csas.cz *.cyris.com *.secureacs.com *.acb.com.vn c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com * *.trustpilot.com www.xtento.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://images.unsplash.com https://image.crisp.chat *.stripe.com *.google.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.xtento.com cdn.xtento.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com *.crisp.chat cwberry.s3-eu-west-1.amazonaws.com d17lvj5xn8sco6.cloudfront.net *.doubleclick.net *.facebook.com *.facebook.net www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.ca www.google.ch www.google.cl www.google.co.ao www.google.co.bw www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.kr www.google.co.ma www.google.com.af www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bo www.google.com.br www.google.com.co www.google.com.cy www.google.com.eg www.google.com.gh www.google.com.gi www.google.com.hk www.google.com.jm www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ng www.google.com.np www.google.com.om www.google.com.pa www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gg www.google.gr www.google.gy www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.kz www.google.lk www.google.lt www.google.lu www.google.lv www.google.me www.google.mg www.google.mk www.google.mu www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk www.google.tn *.trustpilot.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://client.crisp.chat *.stripe.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.sagepay.com *.opayo.eu.elavon.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.trustpilot.com www.xtento.com cdn.xtento.com *.googletagmanager.com tagmanager.google.com *.cloudflare.com *.crisp.chat *.doubleclick.net *.facebook.com *.facebook.net *.jsdelivr.net *.noibu.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com https://client.crisp.chat *.stripe.com *.google.com downloads.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com assets.braintreegateway.com *.trustpilot.com tagmanager.google.com fonts.google.com *.crisp.chat *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src *.doorvisualiser.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; media-src *.adobe.com *.crisp.chat 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.googleapis.com https://client.crisp.chat wss://client.relay.crisp.chat https://plugins.crisp.chat *.stripe.com *.sagepay.com *.opayo.eu.elavon.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.crisp.chat *.doubleclick.net *.epostcode.com *.facebook.com *.facebook.net www.google.ae www.google.al www.google.at www.google.ba www.google.be www.google.bg www.google.by www.google.ca www.google.ch www.google.cl www.google.co.ao www.google.co.bw www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.kr www.google.co.ma www.google.com.au www.google.com.bd www.google.com.bh www.google.com.cy www.google.com.eg www.google.com.gh www.google.com.gi www.google.com.hk www.google.com.mt www.google.com.my www.google.com.ng www.google.com.om www.google.com.ph www.google.com.pk www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.co.nz www.google.co.th www.google.co.tz www.google.co.uk www.google.co.za www.google.co.zw www.google.cz www.google.de www.google.dk www.google.dz www.google.es www.google.fr www.google.gg www.google.gr www.google.ie www.google.im www.google.iq www.google.it www.google.je www.google.lk www.google.lt www.google.lv www.google.mu www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se *.noibu.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://388b1011-c31a-4e04-adf4-d061d9b5b59c.sansec.watch/; report-to report-endpoint; 1
font-src *.fontawesome.com https://fonts.bunny.net *.gstatic.com fonts.gstatic.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * sandbox.przelewy24.pl secure.przelewy24.pl 'self' 'unsafe-inline'; frame-ancestors pay.google.com *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com www.google.com challenges.cloudflare.com sgtm.fibermarkt.com *.hubspot.com *.usemessages.com *.packeta.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * apm.przelewy24.pl *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com www.facebook.com *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io challenges.cloudflare.com *.lfeeder.com cdn-cookieyes.com *.cookieyes.com fibermarkt.com/metrics *.hsforms.com forms-eu1.hsforms.com *.hubspot.com track-eu1.hubspot.com www.google.pl www.facebook.com www.google.com.ua magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com static.przelewy24.pl www.gstatic.com gstatic.com maps.gstatic.com *.gstatic.com www.xtento.com cdn.xtento.com https://fibermarkt.com/metrics data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ www.google.com challenges.cloudflare.com www.clarity.ms scripts.clarity.ms *.clarity.ms *.lfeeder.com cdn-cookieyes.com *.cookieyes.com sgtm.fibermarkt.com fibermarkt.com/metrics www.clickcease.com *.clickcease.com *.hs-scripts.com *.hscollectedforms.net *.usemessages.com *.hs-analytics.net *.hs-banner.com capi-automation.s3.us-east-2.amazonaws.com *.s3.us-east-2.amazonaws.com *.disqus.com *.avada.io *.packeta.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com sandbox.przelewy24.pl secure.przelewy24.pl apm.przelewy24.pl *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com maps.googleapis.com cdn.ampproject.org www.gstatic.com connect.facebook.net https://www.googletagmanager.com tagmanager.google.com www.xtento.com cdn.xtento.com https://fibermarkt.com/metrics 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com challenges.cloudflare.com cdn-cookieyes.com *.fontawesome.com https://fonts.bunny.net *.googleapis.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com www.gstatic.com maxcdn.bootstrapcdn.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com challenges.cloudflare.com *.clarity.ms e.clarity.ms *.lfeeder.com log.cookieyes.com directory.cookieyes.com cdn-cookieyes.com *.cookieyes.com sgtm.fibermarkt.com fibermarkt.com/metrics *.hubspot.com *.hscollectedforms.net www.google.pl www.facebook.com graph.facebook.com https://get.geojs.io *.avada.io *.packeta.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com sandbox.przelewy24.pl secure.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com cdn.ampproject.org www.googleapis.com https://www.google-analytics.com https://fibermarkt.com/metrics 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; style-src 'self' 'unsafe-inline' https://*.posthog.com https://fonts.googleapis.com; script-src 'self' 'nonce-JWF9Hq6EgfpwCWbV5sd3bE' https://*.posthog.com https://*.i.posthog.com; font-src 'self' https://*.posthog.com https://app-static.eu.posthog.com https://app-static-prod.posthog.com https://d1sdjtjk6xzm7.cloudfront.net https://fonts.gstatic.com https://cdn.jsdelivr.net https://assets.faircado.com https://use.typekit.net; worker-src 'self'; child-src 'none'; object-src 'none'; media-src https://res.cloudinary.com; img-src 'self' data: https://*.posthog.com https://posthog.com https://www.gravatar.com https://res.cloudinary.com https://platform.slack-edge.com https://raw.githubusercontent.com; frame-ancestors https://posthog.com https://preview.posthog.com https://vercel.com; connect-src 'self' https://www.posthogstatus.com https://*.posthog.com  https://raw.githubusercontent.com https://api.github.com; frame-src https:; manifest-src 'self'; base-uri 'self'; report-uri https://us.i.posthog.com/report/?token=sTMFPsFhdP1Ssg&sample_rate=0.1&v=2; report-to posthog 1
object-src 'none';base-uri 'self';script-src 'nonce-iRm5LUeOhJCA8WaEGTk8ww' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
base-uri 'self';connect-src 'self' *.iubenda.com maps.googleapis.com *.analytics.google.com www.google-analytics.com stats.g.doubleclick.net;default-src 'self' data: fonts.gstatic.com www.google.com;form-action 'self';img-src 'self' data: via.placeholder.com *.iubenda.com maps.googleapis.com maps.gstatic.com www.google.it www.google.com www.google-analytics.com www.googletagmanager.com media.givi.it i.ytimg.com;media-src 'self';object-src 'none';script-src 'self' 'nonce-DZpWhrkIC1oT4dvfTOeJxuxYjjM7355i' *.iubenda.com www.google.it www.google.com www.google-analytics.com www.googletagmanager.com www.gstatic.com maps.googleapis.com;style-src 'self' *.iubenda.com fonts.googleapis.com 'unsafe-inline';frame-src *.iubenda.com www.google.com td.doubleclick.net 1
font-src www.paypalobjects.com *.klarnacdn.net *.fontawesome.com *.hotjar.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.klarna.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.googletagmanager.com *.hotjar.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.doofinder.com https://images.unsplash.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com www.google.de *.google.de www.google-analytics.com *.google.com www.facebook.com *.hotjar.com https://api.mapbox.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.doofinder.com https://maps.googleapis.com https://player.vimeo.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.google.com connect.facebook.net www.clarity.ms *.clarity.ms static.hotjar.com script.hotjar.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.doofinder.com *.klarnacdn.net *.fontawesome.com assets.braintreegateway.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.doofinder.com wss://*.doofinder.com https://maps.googleapis.com https://player.vimeo.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com www.google.com www.google-analytics.com *.googletagmanager.com analytics.google.com www.facebook.com connect.facebook.net *.clarity.ms *.hotjar.com *.hotjar.io autocomplete2.postdirekt.de 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-oTLoE2dz42wWxHQONwpx0MBR_lCpad43'; base-uri 'none'; report-uri https://data.sanitino.eu/csp-report 1
default-src   'self';            script-src    'self' 'unsafe-inline' 'unsafe-eval'                          https://widget.intercom.io                          https://app.intercom.io                          https://js.intercomcdn.com;            worker-src    'self' blob:;            style-src     'self' 'unsafe-inline'                          https://maxcdn.bootstrapcdn.com                          https://fonts.googleapis.com                          https://widget.intercom.io;            img-src       'self' data: blob: https:;            font-src      'self' data:                          https://maxcdn.bootstrapcdn.com                          https://fonts.gstatic.com                          https://js.intercomcdn.com                          https://fonts.intercomcdn.com;            connect-src   'self'                          https://via.intercom.io                          https://api.intercom.io                          https://api-iam.intercom.io                          https://api-ping.intercom.io                          https://*.intercom-messenger.com                          https://nexus-websocket-a.intercom.io                          https://nexus-websocket-b.intercom.io                          https://uploads.intercomcdn.com                          https://uploads.intercomusercontent.com                          wss://*.intercom-messenger.com                          wss://nexus-websocket-a.intercom.io                          wss://nexus-websocket-b.intercom.io;            media-src     https://js.intercomcdn.com                          https://downloads.intercomcdn.com;            frame-src     'none';            frame-ancestors 'self';            object-src    'none';            base-uri      'self';            form-action   'self';            report-uri    /log/csp-report;            report-to     csp-reports; 1
object-src 'none';base-uri 'self';script-src 'nonce-5wWfR0RleOLh_gIGt48__w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.google-analytics.com https://www.google.com https://*.googleapis.com https://res.cloudinary.com https://*.supabase.co https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https: wss:; media-src 'self' https: blob:; frame-src 'self' https://www.youtube.com https://*.youtube-nocookie.com https://player.vimeo.com https://www.google.com https://challenges.cloudflare.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none'; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' https://www.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com https://player.vimeo.com https://app.usercentrics.eu https://*.usercentrics.eu https://www.google.com https://www.gstatic.com https://ajax.googleapis.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://i.ytimg.com https://*.gstatic.com https://*.googleapis.com; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.google.com https://*.google.com; script-src-elem 'self' https://www.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com https://player.vimeo.com https://app.usercentrics.eu https://*.usercentrics.eu https://www.google.com https://www.gstatic.com https://ajax.googleapis.com 'report-sample' 'sha256-JepFxLZodMjoWbtBToE1neQfNq2r8kI5wR8nSLLRyPU=' 'sha256-pvPw+upLPUjgMXY0G+8O0xUf+/Im1MZjXxxgOcBQBXU=' 'sha256-75XwvRqV3fSAN1kynscj20tgLG8gZK5IOfW1WWsf8Lc='; style-src 'self' 'unsafe-inline' 'report-sample'; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://maps.googleapis.com https://api.usercentrics.eu https://*.usercentrics.eu; font-src 'self' data:; report-uri https://www.muettergenesungswerk.de/@http-reporting?csp=report&requestTime=1789263160520480&requestHash=f73b41f903d3ef8419247b9cba8efb968de5b6f0; style-src-elem 'self' 'unsafe-inline' 'report-sample' 'sha256-4WNDsS2KsPTFS8N3lk2s8cimsDQDti7In9Tuw/izBV4=' 'sha256-sSwc2BH1TRG/3LXiNec5NKi4p6her7hSkRf5pbtkzPg=' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://use.fontawesome.com https://fonts.bunny.net https://fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://player.vimeo.com https://www.youtube-nocookie.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com s7.addthis.com *.avada.io *.shopify.com https://player.vimeo.com https://www.youtube.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://use.fontawesome.com https://fonts.bunny.net https://fonts.googleapis.com http://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com ekr.zdassets.com/ https://get.geojs.io *.avada.io https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io https://olegnax.com https://api.instagram.com https://graph.instagram.com/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' *.lqgroup.org.uk *.lqhomes.com; script-src 'unsafe-inline' 'unsafe-eval' 'self' *.googleapis.com *.cloudflare.com *.gstatic.com *.google.com *.cookie-script.com *.googletagmanager.com *.lqgroup.org.uk *.lqhomes.com *.puzzel.com widget.trustpilot.com *.doubleclick.net *.google.co.uk *.facebook.net *.hotjar.com *.ctnsnet.com *.stackadapt.com *.tiktok.com *.googlesyndication.com; style-src 'self' 'unsafe-inline' *.lqgroup.org.uk *.lqhomes.com fonts.googleapis.com *.stackadapt.com ; font-src 'self' fonts.gstatic.com; connect-src 'self' *.lqgroup.org.uk *.lqhomes.com *.puzzel.com widget.trustpilot.com *.google.com *.cookie-script.com *.doubleclick.net *.stackadapt.com *.googleapis.com *.cloudflare.com; frame-src 'self' *.google.com *.doubleclick.net *.pt-x.com; media-src 'self'  data: ;img-src 'self' data: *.doubleclick.net *.google.co.uk *.google.com *.adnxs.com *.yahoo.com *.facebook.com 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: https:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; script-src 'self' 'unsafe-inline' https://pagead2.googlesyndication.com https://*.googlesyndication.com https://www.googletagmanager.com https://www.google-analytics.com https://challenges.cloudflare.com https://adservice.google.com https://*.googleadservices.com https://googleads.g.doubleclick.net; frame-src https://challenges.cloudflare.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://*.google.com; connect-src 'self' https://www.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://pagead2.googlesyndication.com; upgrade-insecure-requests 1
default-src 'self' *.rikstv.no wss://*.rikstv.no *.strim.no https://*.launchdarkly.com fonts.gstatic.com https://*.braintree-api.com https://*.braintreegateway.com https://*.paypal.com https://*.cardinalcommerce.com https://geo.cardinalcommerce.com https://*.litix.io https://*.theoplayer.com https://*.sanity.io https://*.nep.ms https://*.telenorcdn.net https://d35a3yqleg4mle.cloudfront.net https://*.sentry.io https://*.google-analytics.com https://*.doubleclick.net https://*.google.com https://*.google.no https://*.googlesyndication.com https://www.googletagmanager.com https://*.clarity.ms https://*.bing.com https://eu.i.posthog.com blob: data: https://*.niceincontact.com https://af-de-web-modules.s3.eu-central-1.amazonaws.com https://*.viaplay.no; script-src 'self' 'unsafe-eval' 'nonce-qAM03SvQpVc9+LCTludsDg==' 'strict-dynamic' 'wasm-unsafe-eval' https://www.clarity.ms https://www.gstatic.com 'report-sample' https://www.paypalobjects.com https://www.paypal.com https://songbird.cardinalcommerce.com; style-src 'self' 'unsafe-inline' https://assets.braintreegateway.com https://web-modules-de-eu1.niceincontact.com; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubcc16aeced64de99ebc739f17aa7b488f&ddsource=csp-report; report-to csp-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net https://maps.googleapis.com https://fonts.googleapis.com https://www.posta.hu data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://maps.googleapis.com https://www.posta.hu www.xtento.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.openstreetmap.org https://firebasestorage.googleapis.com blob: https://maps.googleapis.com https://maps.gstatic.com https://www.posta.hu www.xtento.com cdn.xtento.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com test.saferpay.com www.saferpay.com saferpay.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com map.gls-croatia.com map.gls-czech.com map.gls-hungary.com map.gls-romania.com map.gls-slovenia.com map.gls-slovakia.com map.gls-serbia.com *.openstreetmap.org *.avada.io *.shopify.com *.googletagmanager.com https://maps.googleapis.com https://www.posta.hu https://posta.hu www.xtento.com cdn.xtento.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com test.saferpay.com www.saferpay.com saferpay.com tagmanager.google.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.fontawesome.com https://fonts.bunny.net https://maps.googleapis.com https://fonts.googleapis.com https://maps.gstatic.com https://www.posta.hu assets.braintreegateway.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com map.gls-croatia.com map.gls-czech.com map.gls-hungary.com map.gls-romania.com map.gls-slovenia.com map.gls-slovakia.com map.gls-serbia.com *.openstreetmap.org https://get.geojs.io *.avada.io *.doubleclick.net *.google-analytics.com https://maps.googleapis.com https://www.posta.hu https://posta.hu api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com test.saferpay.com www.saferpay.com saferpay.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net https://square-fonts-production-f.squarecdn.com/ https://d1g145x70srn7h.cloudfront.net/ https://cash-f.squarecdn.com/ https://fonts.gstatic.com/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.addthis.com js.mollie.com https://pci-connect.squareup.com https://connect.squareup.com https://pci-connect.squareupsandbox.com https://connect.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://images.unsplash.com magefan.com cm.magefan.com *.google.com *.googleadservices.com *.googletagmanager.com *.disqus.com https://firebasestorage.googleapis.com https://www.mollie.com https://www.gstatic.com/ https://sandbox.api.cash.app/ https://site-assets.afterpay.com/ https://sandbox.web.squarecdn.com/ https://api.cash.app/ https://web.squarecdn.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://franklin-assets.s3.amazonaws.com/ https://static.sandbox.afterpay.com/ https://static.afterpay.com/ https://static.sandbox.afterpay.com/logo/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com https://maps.googleapis.com https://player.vimeo.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.avada.io *.shopify.com js.mollie.com https://js-sandbox.squarecdn.com https://js.squareup.com https://js.afterpay.com/ https://nd.squarecdn.com https://js.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://portal.sandbox.afterpay.com/ https://portal.afterpay.com/ https://cdn.plaid.com/ https://sandbox.kit.cash.app/ https://kit.cash.app/ https://js-sandbox.squarecdn.com/ https://js.squarecdn.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://fonts.googleapis.com/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com *.googletagmanager.com stats.g.doubleclick.net https://get.geojs.io *.avada.io https://pci-connect.squareup.com https://pci-connect.squareupsandbox.com https://api.amplitude.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://o160250.ingest.sentry.io/ https://api.lab.amplitude.com/sdk/vardata https://sandbox.plaid.com/ https://production.plaid.com/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-yADHD4xTGmDIP4-flR3bRA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com data: blob: *.klevu.com *.klarnacdn.net *.klarnaevt.com *.acsbapp.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de data: blob: *.cybersource.com *.facebook.com *.cookielaw.org *.klarnacdn.net *.klarnaevt.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de data: blob: *.paypalobjects.com *.cybersource.com *.facebook.com *.cookielaw.org *.hotjar.com *.kaptcha.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.pinterest.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googleapis.com *.weltpixel.com *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.sharethis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com blob: *.magentocommerce.com *.googleadservices.com *.googletagmanager.com *.google.ae *.google.as *.google.at *.google.ca *.google.co.id *.google.co.ke *.google.co.uk *.google.co.zm *.google.com *.google.de *.google.fr *.google.hu *.google.iq *.google.it *.google.jo *.google.kz *.google.se *.google.tt *.google.com.au *.google.com.br *.google.com.co *.google.com.mx *.google.com.my *.google.com.pa *.google.com.ph *.google.com.pr *.google.com.sg *.google.com.tr *.cookielaw.org *.addthis.com *.doubleclick.net *.hellobar.com *.rubiconproject.com *.paypalobjects.com *.klevu.com *.hestage.com *.cybersource.com *.facebook.com *.bing.com *.linkedin.com *.twitter.com *.instagram.com *.prfct.co *.adsymptotic.com *.adnxs.com *.openx.net *.yahoo.com *.nr-data.net *.bigcommerce.com *.stovercompany.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.kaltura.com *.pinterest.com *.acsbapp.com *.googleapis.com paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.io geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.sharethis.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com data: blob: *.fontawesome.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.adobedc.net *.adobedtm.net *.adobedtm.com *.authorize.net *.paypal.com *.paypalobjects.com *.signifyd.com *.gstatic.com *.doubleclick.net *.hellobar.com *.klevu.com *.cybersource.com *.windows.net *.jquery.com *.facebook.net *.onetrust.com *.cookielaw.org *.licdn.com *.hotjar.com *.bing.com *.marinsm.com *.optimizely.com *.bronto.com *.prfct.co *.hotjar.io *.klaviyo.com *.acsbapp.com acsbapp.com *.klarnaservices.com *.klarnacdn.net *.klarnaevt.com *.kaltura.com *.pinimg.com *.pinterest.com *.klarna.com x.klarnacdn.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com maps.googleapis.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.sharethis.com downloads.mailchimp.com data: blob: *.googleapis.com *.klevu.com *.windows.net *.facebook.net *.cookielaw.org *.klarnacdn.net *.klarnaevt.com assets.braintreegateway.com *.yotpo.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.sharethis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de form-assets.mailchimp.com *.intuit.com *.amazonaws.com data: blob: *.magento.com *.adobedtm.com *.adobedc.net *.doubleclick.net *.ksearchnet.com *.cybersource.com *.onetrust.com *.cookielaw.org *.optimizely.com http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com *.bing.com *.facebook.com *.instagram.com *.acsbapp.com acsbapp.com https://acsbapp.com *.klarnaservices.com *.googleapis.com *.klarnacdn.net *.klarnaevt.com *.pinterest.com x.klarnacdn.net *.klarna.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com maps.googleapis.com places.googleapis.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://46ed9a00c1000e800e17046bbda2a424.report-uri.com/r/d/csp/enforce; report-to report-endpoint; 1
default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline'; 1
worker-src blob:; font-src www.paypalobjects.com fonts.gstatic.com *.kxcdn.com cdnjs.cloudflare.com *.cdnjs.cloudflare.com fonts.googleapis.com *.gstatic.com *.stape.io *.amazonaws.com *.cloudfront.net *.global.prod.fastly.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com secure.livechatinc.com cdn.livechatinc.com *.livechatinc.com go.mips.mu *.mips.mu *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.stape.io 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.cdninstagram.com *.kxcdn.com amcglobal.sc.omtrdc.net *.twitter.com *.googleapis.com *.google.com *.gstatic.com *.fbcdn.net maps.googleapis.com maps.gstatic.com magefan.com cm.magefan.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.files-text.com *.livechatinc.com *.livechat-files.com *.livechat-static.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com *.stape.io https://meetanshi.com/media/logo.png *.amazonaws.com *.cloudfront.net *.global.prod.fastly.net data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.google.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com *.cloudflare.com static.cloudflareinsights.com cdn.livechatinc.com secure.livechatinc.com go.mips.mu *.mips.mu maps.googleapis.com maps.gstatic.com fonts.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.livechatinc.com *.livechat-static.com s7.addthis.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.doubleclick.net *.stape.io *.amazonaws.com *.cloudfront.net *.global.prod.fastly.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com cdnjs.cloudflare.com *.cdnjs.cloudflare.com fonts.googleapis.com https://static.klaviyo.com *.livechatinc.com *.googletagmanager.com *.stape.io *.amazonaws.com *.cloudfront.net *.global.prod.fastly.net 'self' 'unsafe-inline'; object-src *.livechatinc.com 'self' 'unsafe-inline'; media-src *.livechatinc.com *.livechat-static.com *.amazonaws.com *.cloudfront.net *.global.prod.fastly.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com dpm.demdex.net *.instagram.com cloudflareinsights.com static.cloudflareinsights.com *.livechatinc.com secure.livechatinc.com go.mips.mu *.mips.mu https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.text.com ekr.zdassets.com/ *.google.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog *.stape.io *.amazonaws.com *.cloudfront.net *.global.prod.fastly.net 'self' 'unsafe-inline'; child-src *.livechatinc.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' blob: https://cdn.millionpodcasts.com https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://www.googleadservices.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://widget.intercom.io https://js.intercomcdn.com https://js.stripe.com; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https://cdn.millionpodcasts.com https://fonts.googleapis.com https://www.gstatic.com; img-src * data: blob:; font-src 'self' data: https://cdn.millionpodcasts.com https://fonts.gstatic.com https://js.intercomcdn.com https://fonts.intercomcdn.com; media-src 'self' blob: data: https:; connect-src 'self' https://api.millionpodcasts.com https://cdn.millionpodcasts.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.doubleclick.net https://www.googletagmanager.com https://www.googleadservices.com https://*.google.com https://www.google.ch https://www.google.co.in https://www.google.co.uk https://www.google.ca https://www.google.com.au https://www.google.de https://www.google.fr https://www.google.es https://www.google.it https://www.google.nl https://www.google.com.br https://www.google.com.mx https://www.google.co.jp https://www.google.pl https://www.google.se https://*.facebook.com https://*.facebook.net https://*.intercom.io wss://*.intercom.io https://api.stripe.com https://fonts.googleapis.com; frame-src 'self' blob: https://www.google.com https://td.doubleclick.net https://js.stripe.com https://checkout.stripe.com https://www.youtube.com https://www.youtube-nocookie.com https://open.spotify.com https://embed.podcasts.apple.com https://podcasters.spotify.com https://www.facebook.com; frame-ancestors 'self'; form-action 'self' https://api.millionpodcasts.com https://checkout.stripe.com; base-uri 'none'; object-src 'none'; report-uri https://api.millionpodcasts.com/csp-report.php; report-to csp-endpoint 1
report-to cspep;default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.scope.ne.jp *.pay.jp stscopestatics001.blob.core.windows.net scope-files.s3.amazonaws.com *.rakuten.co.jp cse.google.com clients1.google.com cdnjs.cloudflare.com www.googletagmanager.com www.google-analytics.com analytics.google.com *.analytics.google.com www.google.co.jp www.google.com www.gstatic.com *.adtrafficquality.google storage.googleapis.com func-bbs-scope-stage-japaneast.azurewebsites.net func-bbs-scope-prod-japaneast.azurewebsites.net *.youtube.com yt.ggpht.com *.gstatic.com i.ytimg.com static.doubleclick.net stats.g.doubleclick.net www.facebook.com connect.facebook.net player.vimeo.com td.doubleclick.net helpfeel.com js-agent.newrelic.com bam.nr-data.net 1
default-src 'self' https: data: blob:; script-src 'self' https: blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' https: data: blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:; report-uri https://glitchtip.dogmatech.co/api/9/security/?glitchtip_key=d91262a4ff7541bc8d9987dd7874fc33 1
default-src 'self'  https://*.mipulse.co https://*.gstatic.com; style-src 'self'  'unsafe-inline' https://fonts.googleapis.com; script-src 'self'  'nonce-k8/fYw+3NEXa5Q1V+DrerQ==' 'unsafe-eval' https://maps.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://cdn.cookielaw.org https://connect.facebook.net https://*.krxd.net https://cstatic.weborama.fr https://cdn.livechatinc.com https://api.livechatinc.com https://pureinfluencer.idrove.it https://assets.adobedtm.com https://www.youtube.com/ https://snap.licdn.com 'sha256-IXwUgYQlz6whdqY9fAsuWm5tF3a/48gpSOx/RrJVM2M=' 'sha256-ZmOqvxu/SYXtKMZjkegWCZv0fNWqYPMIAbkDSAFd9HQ=' 'sha256-rwMOiOeVICH7/Cjy5SkreID3OOi5HTrit357k22hUDQ=' 'sha256-IgMQOOOedQeMPBl7lSreMVPmJvU62bc6l8HcsGXnbWc=' 'sha256-mIJsOQOBL5URHW6ppIPLOp054yHEgxgh+tumu3VW4uY=' 'sha256-L6GTuf9tzJT4M/eRPyT9q18L0UnaWdBIpW2kYl6Fkwk=' 'sha256-IdzrL+27mccklOzBWVvXNgfZ8D6HIFjn7Y46BiYZxTY=' 'sha256-5Cz4ZsI1P9g7z/hqtco8MVFsPeuN1kkADoDE9KE5Nzw=' 'sha256-gJR8nYIj9BIisULplpuG6AU6/3PMeA+ZN5sISuG7Roc=' 'sha256-73tOv4V0QRBLpWjCPRThujEhdW5bB4Hx1uA8jBszxUQ=' 'sha256-zCzIA5Bv5v0Y/u686kOREhia31pT64lCSWPLez72SsI=' 'sha256-2sDhctfJAd53/P/qWSTE71aWvnK2vYVrDmF3P2a5yC0=' 'sha256-g6+9PI/TlodFbDrCPHRXzigoOKGKtu3pJ7F2bPLWRQ0=' 'sha256-7PyrcA0NOMOO1UolfxOEr0a+ClC2NRZZopOV0aDnqTc=' 'sha256-7sUD0rKPq7QkPTkJQIxh29ga8KBXgV/+rXHtn0jzPRg=' 'sha256-ULRvWsXdAu0tZgP5Lm/YcdG09i5xDrD0FTeK0+8+LDY=' 'sha256-ykJUQ34Vs5aGtiZ8/Y/3jk7xHgXHFFdobPe/XpUPwbU=' 'sha256-z8P9D8SlqjFhTbJlsocGwGVQPS1kjtDPFseU75brggM=' 'sha256-V685dp7Jpv93B7VcKE2er/ZlyPI5HIRWk2E6qllmjeY=' 'sha256-U7/M8TKZhT8DWAhD2RL1hr60w7H1i+GRfNYe7iOJMfE=' 'sha256-nOc3LegX/8ADmYdGC1d7ig0o995pVq2rfz34uz28tTo=' 'sha256-/XghktC/jSbJ/rP3BqRv6WKIGjlfgmVSGsI6nJAo5qw=' 'sha256-ae9Y2uLK/1m5oiL4aIDKOSYBXCHA/9LjsjAQ5a+qjd4='; img-src 'self'  data: https://*.krxd.net https://www.facebook.com https://*.adsrvr.org https://maps.googleapis.com https://www.google.com https://www.google.co.in https://www.google.ca https://ups.analytics.yahoo.com https://cm.g.doubleclick.net https://*.mipulse.co https://maps.gstatic.com https://www.google-analytics.com https://www.googletagmanager.com http://report.mitsubishicars.com https://cdn.cookielaw.org https://px.ads.linkedin.com; frame-src 'self' data: https://www.facebook.com https://8715429.fls.doubleclick.net https://bid.g.doubleclick.net https://aax-eu.amazon-adsystem.com https://mitsubishi1.solution.weborama.fr https://*.krxd.net https://td.doubleclick.net https://*.mipulse.co https://secure.livechatinc.com; connect-src 'self'  https://cdn.cookielaw.org https://stats.g.doubleclick.net https://*.onetrust.com https://analytics.google.com https://pagead2.googlesyndication.com https://*.mipulse.co https://maps.googleapis.com/ https://www.google-analytics.com https://api.livechatinc.com https://pureinfluencer-api.idrove.it https://pro.ip-api.com https://rts-api.idrove.it; media-src 'self' data: https://*.mipulse.co https://cdn.livechatinc.com; 1
default-src https://www.oreilly.com/7EjQWM/weIx-q/j7Ge6t/AoPGthOs/I/fSp7hpu3iw/JjQXMCkYAQ/d1pABH/JwKkod https://www.oreilly.com/7EjQWM/weIx-q/j7Ge6t/AoPGthOs/I/fSp7hpu3iw/JjQXMCkYAQ/d1pABH/JwKkod  https://www.oreilly.com/7EjQWM/weIx-q/j7Ge6t/AoPGthOs/I/fup7hp6kDwG2GLuS/HwsSMCkYAQ/aT9Ram/cvTSM  https://www.oreilly.com  * 'unsafe-inline' 'unsafe-eval' data: blob: android-webview-video-poster: moz-extension: ms-browser-extension: chrome-extension: ios-log:; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubb898c25826db9d251f99fdcece943792&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service:wordpress-prod-cluster; 1
form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://*.svea.com https://*.vipps.no https://*.trustly.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com ss.varmefag.no https://*.svea.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ polyfill.io *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com vjs.zencdn.net player.vimeo.com ss.varmefag.no *.voyado.com *.cookiebot.com cdnjs.cloudflare.com https://*.svea.com chimpstatic.com downloads.mailchimp.com *.list-manage.com static.lipscore.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io *.google-analytics.com *.facebook.com *.facebook.net *.google.com ss.varmefag.no *.voyado.com *.cookiebot.com wapi.lipscore.com users.lipscore.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; font-src https://pim.varmefag.no *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com data: fonts.gstatic.com static.lipscore.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; style-src https://pim.varmefag.no *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com vjs.zencdn.net fonts.googleapis.com downloads.mailchimp.com static.lipscore.com maxcdn.bootstrapcdn.com unsafe-inline 'self' 'unsafe-inline'; img-src https://pim.varmefag.no assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com ss.varmefag.no ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com static.lipscore.com blob: img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.monetico-services.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.monetico-services.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://images.unsplash.com a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com flagpedia.net https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com https://player.vimeo.com chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.disqus.com https://cdn.jsdelivr.net *.gstatic.com maps.googleapis.com js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com https://cdn.jsdelivr.net *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com https://player.vimeo.com *.monetico-services.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; frame-ancestors 'none'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.google.co.uk *.googletagmanager.com *.google-analytics.com cdn.polyfill.io *.brightcove.net munchkin.market.net your.fitchratings.com *.evidon.com cdn2.funnelenvy.com script.crazyegg.com snap.licdn.com *.idio.co chart-studio.plotly.com public.flourish.studio app.fitchconnect-stg.com *.fitchconnect.com *.fitch.group *.jotjar.com *.zencdn.net *.mktorest.com *.ads-twitter.com *.googleadservices.com googleads.g.doubleclick.net *.linkedin.com *.ads.linkedin.com *.amazonaws.com *.google-analytics.com *.analytics.google.com *.twitter.com *.facebook.com  *.youtube.com *.googleapis.com *.facebook.net *.evidon.com *.crwdcntrl.net *.addtoany.com cdn.jsdelivr.net *.bing.com *.licdn.com *.baidu.com *.ads-twitteer.com *.crazyegg.com *.hotjar.com *.marketo.net *.funnelenvy.com *.ctnsnet.com *.typekit.net *.woopra.com consentag.eu *.adobedtm.com demdex.net *.adobedc.net *.gstatic.com *.googlesyndication.com *.google.com.hk global.ketchcdn.com cdn.ketchjs.com; object-src 'self'; style-src 'self' 'unsafe-inline' https: blob: *.amazonaws.com *.googleapis.com *.googletagmanager.com your.fitchratings.com fonts.googleapis.com *.fitch.group *.hotjar.com consentag.eu assets.adobedtm.com demdex.net edge.adobedc.net; img-src 'self' 'unsafe-inline' https: blob: data: *.amazonaws.com *.doubleclick.net *.google-analytics.com *.google.com *.google.co.in *.google.de *.google.co.jp *.google.co.uk *.google.fr *.google.com.br *.google.it *.google.es *.google.com.mx *.google.ca *.google.com.au *.google.com.tr *.google.nl *.google.pl *.google.co.id *.google.com.ar *.google.com.sa *.google.com.eg *.google.co.th *.google.com.my *.google.co.za *.google.com.sg *.google.com.tw *.google.be *.google.com.ua *.google.se *.google.ch *.google.at *.google.com.co *.google.pt *.google.dk *.google.fi *.google.no *.google.gr *.google.hu *.google.cz *.google.ro consentag.eu assets.adobedtm.com demdex.net edge.adobedc.net global.ketchcdn.com cdn.ketchjs.com; media-src 'self' *.youtube.com consentag.eu assets.adobedtm.com demdex.net edge.adobedc.net; frame-src 'self' 'unsafe-inline' *.brightcove.net *.doubleclick.net vars.hotjar.com *.addtoany.com *.facebook.com bid.g.doubleclick.net *.fls.doubleclick.net *.fitchratings.com *.evidon.com *.infogram.com infogram-download-eu.s3.eu-west-1.amazonaws.com infogram-download-us2.s3.eu-west-1.amazonaws.com your.fitch.group flo.uri.sh plotly.com chart-studio.plotly.com fitchgroup.eu.qualtrics.com indd.adobe.com *.hotjar.com bid.g.doubleclick.net *.fls.doubleclick.net td.doubleclick.net i.ctnsnet.com tags.crwdcntrl.net px.ads.linkedin.com *.gtm.js i.ctnsnet.com *.googletagmanager.com *.flashtalking.com *.lpsnmedia.net consentag.eu assets.adobedtm.com demdex.net edge.adobedc.net *.gstatic.com *.google.com.hk *.googlesyndication.com *.google.com; frame-ancestors 'self'; child-src 'self'; font-src 'self' 'unsafe-inline' https: data: *.fitchratings.com fonts.gstatic.com *.hotjar.com consentag.eu assets.adobedtm.com demdex.net edge.adobedc.net; connect-src 'self' https: blob: wss: *.funnelenvy.com *.hotjar.com *.mktoresp.com *.bing.com *.ipinfo.io *.google-analytics.com *.bugsnag.com a.clarity.ms *.linkedin.oribi.io *.googletagmanager.com *.fitchratings.com *.brightcove.com *.brightcove.net 732-ckh-767.mktoresp.com fx.fitchgroup.co *.boltdns.net *.akamaihd.net *.crazyegg.com *.idio.co *.brightcovecdn.com *.marketo.net *.fitch.group *.evidon.com *.google.com *.google.co.uk *.twitter.com *.googleapis.com snap.licdn.com *.ctfassets.net *.gstatic.com stats.g.doubleclick.net api.sjpf.io api.fpjs.io *.analytics.google.com *.mktorest.com td.doubleclick.net i.ctnsnet.com tags.crwdcntrl.net px.ads.linkedin.com *.gtm.js i.ctnsnet.com *.google.co.in *.google.de *.google.co.jp *.google.fr *.google.com.br *.google.it *.google.es *.google.com.mx *.google.ca *.google.com.au *.google.com.tr *.google.nl *.google.pl *.google.co.id *.google.com.ar *.google.com.sa *.google.com.eg consentag.eu *.adobedtm.com demdex.net *.adobedc.net global.ketchcdn.com cdn.ketchjs.com; report-uri /report-csp-violation 1
script-src 'nonce-iy50UUZJm6yJ7v16qqr7OQ==' 'strict-dynamic' 'unsafe-eval' 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; report-uri /_/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.gstatic.com https://*.clarity.ms https://*.cloudflare.com https://*.optimumhq.com https://*.doubleclick.net https://www.googleadservices.com https://cdn-cookieyes.com https://static.cloudflareinsights.com https://www.youtube.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.cloudflare.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.clarity.ms https://*.bing.com https://*.optimumhq.com https://ng.optimumhq.com https://*.google.* https://*.doubleclick.net https://www.googleadservices.com https://static.cloudflareinsights.com https://log.cookieyes.com https://cdn-cookieyes.com; worker-src blob:; frame-src 'self' https://*.google.com https://*.recaptcha.net https://ng.optimumhq.com https://www.youtube.com https://player.vimeo.com; form-action 'self' https://*.optimumhq.com https://ng.optimumhq.com; frame-ancestors 'self' https://*.optimumhq.com; base-uri 'self'; report-uri https://optimumhq.report-uri.com/r/d/csp/reportOnly; 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; frame-ancestors 'self'; report-to csp-endpoint 1
font-src *.fontawesome.com *.yotpo.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.weltpixel.com *.yotpo.com https://www.youtube-nocookie.com https://*.youtube.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com https://*.googleapis.com https://*.gstatic.com https://*.youtube.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.yotpo.com https://*.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com unsafe-inline *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com www.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.yotpo.com https://*.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-YlGnWfXLIv3T-pV_rizMRg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.cloudflare.com *.digitalbridgehq.com *.elev.io *.fixtuur.com *.goinstore.com *.gstatic.com *.honey.io fonts.gstatic.com use.typekit.net *.typekit.net *.stripe.com *.sagepay.com *.opayo.eu.elavon.com *.fontawesome.com https://www.gstatic.com https://fonts.gstatic.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com www.paypalobjects.com https://www.googletagmanager.com *.googleapis.com *.opayo.cloud data: 'self' 'unsafe-inline'; form-action *.arcot.com *.cardinalcommerce.com *.facebook.com *.realexpayments.com *.touch.tech geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.stripe.com *.google.com *.sagepay.com *.opayo.eu.elavon.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.wlp-acs.com * 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.network *.opayo.cloud 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src *.acdcproc.com *.addthis.com *.americanexpress.com *.braintreegateway.com *.cardinalcommerce.com *.criteo.com *.criteo.net *.digitalbridgehq.com *.doubleclick.net *.fixtuur.com *.flashtalking.com *.google.co.uk *.googlesyndication.com *.hotjar.com *.jotform.com *.kaptcha.com *.klarna.com *.klarnacdn.net *.klarnaservices.com *.lloydsbankinggroup.com *.paypal.com *.pinterest.com *.playground.klarna.com *.playground.klarnaservices.com *.realexpayments.com *.sandbox.paypal.com *.touch.tech *.zenaps.com ct.pinterest.com servedby.flashtalking.com fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ google.com *.google.com *.stripe.com *.sagepay.com *.opayo.eu.elavon.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.demdex.net klarna.com *.klarnaevt.com *.link.com *.amazon.com *.stripe.network *.opayo.cloud 'self' 'unsafe-inline'; img-src *.360yield.com *.addthis.com *.adform.net *.adnxs.com *.ads.yieldmo.com *.advertising.com *.amazon-adsystem.com *.amazonaws.com *.awin1.com *.bidswitch.net *.bing.com *.bluekai.com *.bnmla.com *.casalemedia.com *.creativecdn.com *.criteo.com *.criteo.net *.digitaleast.mobi *.dmxleo.com *.doubleclick.net *.elfsight.com *.elfsightcdn.com *.exelator.com *.feefo.com *.goinstore.com *.google.ie *.googleapis.com *.honey.io *.imrworldwide.com *.ivitrack.com *.liadm.com *.mediavine.com *.mediawallahscript.com *.modafurnishings.co.uk *.narrative.io *.outbrain.com *.pinterest.com *.postcodeanywhere.co.uk *.pubmatic.com *.revcontent.com *.rubiconproject.com *.sagepay.co.uk *.semasio.net *.smaato.net *.smartadserver.com *.socdm.com *.stickyadstv.com *.taboola.com *.tapad.com *.thebrighttag.com *.trackedlink.net *.tvsquared.com *.twiago.com *.vimeocdn.com *.yahoo.com *.yieldlab.net *.zdassets.com *.zemanta.com *.zenaps.com *.zendesk.com bat.bing.com beacon.krxd.net contextual.media.net coviyr.modafurnishings.co.uk criteo-partners.tremorhub.com criteo-sync.teads.tv eb2.3lift.com google.com id5-sync.com jadserve.postrelease.com maps.googleapis.com match.sharethrough.com static.elfsight.com visitor.omnitagjs.com www.coupert.com www.google.ae www.google.cn www.google.co.in www.google.co.ma www.google.co.uk www.google.co.za www.google.com.ag www.google.com.au www.google.com.bd www.google.com.eg www.google.com.lb www.google.com.my www.google.com.ph www.google.com.sa www.google.com.tr www.google.com.ua www.google.de www.google.es www.google.fr www.google.gg www.google.im www.google.it www.google.je www.google.lu www.google.nl assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com *.stripe.com ebizmarts-website.s3.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudfront.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com *.everesttech.net *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io *.demdex.net *.stripe.network brippo.s3.amazonaws.com *.opayo.cloud data: 'self' 'unsafe-inline'; script-src *.app-us1.com *.bing.com *.clickguard.com *.craftyclicks.co.uk *.criteo.com *.criteo.net *.digitalbridgehq.com *.dwin1.com *.dynamicyield.com *.elev.io *.elfsight.com *.feefo.com *.finance-calculator.co.uk *.fixtuur.com *.goinstore.com *.hotjar.com *.jsdelivr.net *.newrelic.com *.nr-data.net *.opentok.com *.pcapredict.com *.pennies.org.uk *.pinimg.com *.pureclarity.net *.responsetap.com *.sciencebehindecommerce.com *.tvsquared.com *.vimeo.com *.zdassets.com *.zenaps.com trackcmp.net assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.commerce-payment-services.com *.magento-datasolutions.com *.magento-ds.com *.typekit.net google.com *.google.com *.stripe.com *.sagepay.com *.opayo.eu.elavon.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cdn-apple.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.adobedtm.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io *.sentry.io *.sentry-cdn.com *.braintreegateway.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com commerce-payments-sdk.adobe.io tagmanager.google.com https://www.googletagmanager.com *.opayo.cloud 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.braintreegateway.com *.digitalbridgehq.com *.feefo.com *.finance-calculator.co.uk *.fixtuur.com *.goinstore.com *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.sagepay.com *.opayo.eu.elavon.com https://static.klaviyo.com assets.braintreegateway.com *.fontawesome.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.stripe.network *.stripecdn.com *.amazon.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.opayo.cloud 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com 'self' 'unsafe-inline'; connect-src *.addthis.com *.amazonaws.com *.analytics.google.com *.app-us1.com *.bing.com *.cardinalcommerce.com *.clickguard.com *.cookiebot.com *.digitalbridgehq.com *.doubleclick.net *.dynamicyield.com *.elev.io *.elfsight.com *.feefo.com *.finance-calculator.co.uk *.fixtuur.com *.google.com *.googleapis.com *.googlesyndication.com *.hotjar.com *.hotjar.io *.jsdelivr.net *.loggly.com *.my.sentry.io *.nr-data.net *.pennies.org.uk *.pinterest.com *.postcodeanywhere.co.uk *.sciencebehindecommerce.com *.sentry.io *.smooch.io *.tokbox.com *.trustpilot.com *.ucweb.com *.zdassets.com *.zendesk.com *.zuko.io adservice.google.com bat.bing.com eu.prd.impact.fixtuur.com maps.googleapis.com vimeo.com www.google.co.uk www.google.it www.google.je www.google.nl www.wepowerconnections.com dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.paypal.com google.com *.stripe.com *.sagepay.com *.opayo.eu.elavon.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://*.google.com https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry-cdn.com *.braintreegateway.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.stripe.network fonts.googleapis.com fonts.gstatic.com *.opayo.cloud 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri /csp/report; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: https: blob:; style-src 'self' 'unsafe-inline' https: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https: https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://www.recaptcha.net; connect-src 'self' https: https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com; frame-src https: https://www.google.com https://www.recaptcha.net https://player.vimeo.com https://www.youtube.com https://www.youtube-nocookie.com https://flipsnack.com https://www.flipsnack.com; font-src 'self' data: https:; report-uri /wp-json/csp/v1/report 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com *.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.tawk.to 'self' data: *.streammarket.co.uk *.bksmotors.com *.cloudflareinsights.com static.cloudflareinsights.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.ccavenue.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.streammarket.co.uk *.bksmotors.com *.cloudflareinsights.com static.cloudflareinsights.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.ccavenue.com landofcoder.com *.google.com.ua *.google.co.uk c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * api.razorpay.com *.twitter.com *.addthis.com *.doubleclick.net *.embedly.com *.rvvup.com *.streammarket.co.uk *.bksmotors.com https://accounts.google.com/gsi/ *.cloudflareinsights.com static.cloudflareinsights.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com *.ccavenue.com *.google.com *.google.com.ua *.google.co.uk *.doubleclick.net https://meetanshi.com/media/logo.png www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com cdn.razorpay.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.co.in *.jsdelivr.net www.logicrays.com www.magecomp.com *.amazonaws.com *.securitymetrics.com *.postcodeanywhere.co.uk *.streammarket.co.uk *.bksmotors.com *.facebook.net *.facebook.com blob: *.cloudflareinsights.com *.cdn.trustindex.io/ *.googleusercontent.com static.cloudflareinsights.com https://cdn.trustindex.io/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com *.ccavenue.com landofcoder.com *.google.com.ua *.google.co.uk *.gstatic.com *.googletagmanager.com *.doubleclick.net *.fontawesome.com *.googleapis.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com checkout.razorpay.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu embed.tawk.to cdn.jsdelivr.net *.razorpay.com indep11146.pcapredict.com *.postcodeanywhere.co.uk *.feefo.com *.streammarket.co.uk *.bksmotors.com *.facebook.net *.lightwidget.com *.googleadservices.com *.adobedtm.com *.checkout.razorpay.com *.cloudflareinsights.com https://accounts.google.com/gsi/client static.cloudflareinsights.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.googletagmanager.com *.fontawesome.com assets.braintreegateway.com *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.jsdelivr.net *.google.com *.postcodeanywhere.co.uk *.streammarket.co.uk *.bksmotors.com *.unpkg.com https://unpkg.com/swiper@11.1.14/swiper-bundle.min.css https://unpkg.com/swiper/swiper-bundle.min.css https://accounts.google.com/gsi/style *.cloudflareinsights.com static.cloudflareinsights.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com *.granberg.se 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com *.ccavenue.com landofcoder.com *.google-analytics.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com lumberjack.razorpay.com lumberjack-metrics.razorpay.com *.cloudflare.com *.twitter.com *.twimg.com *.tawk.to *.doubleclick.net *.amazonaws.com *.securitymetrics.com *.embedly.com *.rvvup.com *.postcodeanywhere.co.uk *.googleapis.com *.streammarket.co.uk *.bksmotors.com *.facebook.net *.facebook.com https://accounts.google.com/gsi/ *.cloudflareinsights.com static.cloudflareinsights.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com *.streammarket.co.uk *.bksmotors.com *.facebook.net *.cloudflareinsights.com static.cloudflareinsights.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com b2b.mcstaging.sumatec.co mcstaging.ferricentro.com b2b.mcstaging.ferricentro.com mcstaging.werkindustrial.com sumatec.co ferricentro.com ferrindustria.ferricentro.com werkindustrial.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; frame-ancestors https://*.ariba.com https://*.ariba-network.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.newrelic.com *.herokuapp.com *.doubleclick.net/ *.googleapis.com b2b.mcstaging.sumatec.co mcstaging.ferricentro.com b2b.mcstaging.ferricentro.com mcstaging.werkindustrial.com sumatec.co ferricentro.com ferrindustria.ferricentro.com werkindustrial.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://sumatec.co *.google.com.ar *.mercadopago.com *.facebook.com *.newrelic.com *.clarity.ms *.bing.com *.googleapis.com b2b.mcstaging.sumatec.co mcstaging.ferricentro.com b2b.mcstaging.ferricentro.com mcstaging.werkindustrial.com sumatec.co ferricentro.com ferrindustria.ferricentro.com werkindustrial.com https://firebasestorage.googleapis.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com *.herokuapp.com *.clarity.ms b2b.mcstaging.sumatec.co mcstaging.ferricentro.com b2b.mcstaging.ferricentro.com mcstaging.werkindustrial.com sumatec.co ferricentro.com ferrindustria.ferricentro.com werkindustrial.com *.avada.io *.shopify.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.herokuapp.com *.newrelic.com b2b.mcstaging.sumatec.co mcstaging.ferricentro.com b2b.mcstaging.ferricentro.com mcstaging.werkindustrial.com sumatec.co ferricentro.com ferrindustria.ferricentro.com werkindustrial.com *.fontawesome.com https://fonts.bunny.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com analytics.google.com *.googleapis.com *.google.com.ar *.doubleclick.com *.doubleclick.net *.clarity.ms b2b.mcstaging.sumatec.co mcstaging.ferricentro.com b2b.mcstaging.ferricentro.com mcstaging.werkindustrial.com sumatec.co ferricentro.com ferrindustria.ferricentro.com werkindustrial.com https://get.geojs.io *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src b2b.mcstaging.sumatec.co mcstaging.ferricentro.com b2b.mcstaging.ferricentro.com mcstaging.werkindustrial.com sumatec.co ferricentro.com ferrindustria.ferricentro.com werkindustrial.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'nonce-+GoIv5DAOCGhAoZwqKdQww==' 'strict-dynamic'; object-src 'none'; base-uri 'none'; 1
object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-aOCGZzR6bffnSTW9x70ZzcaiDofli1Nt'; base-uri 'none'; report-uri https://data.sanitino.eu/csp-report 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' https://challenges.cloudflare.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://challenges.cloudflare.com https://cloudflareinsights.com https://ocbakprgaplrwgtnmnxq.supabase.co; frame-src https://challenges.cloudflare.com; worker-src 'self' blob:; manifest-src 'self'; report-uri /api/csp-report; report-to csp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; 1
report-uri https://www.viasante.fr/csp-report.php ;base-uri 'self' https://viasante.fr https://web2.viasante.fr ;object-src 'self' ;manifest-src 'self' ;media-src 'blob' 'self' https://beacon-v2.helpscout.net https://upload.wikimedia.org ;worker-src 'self' 'blob' https://viasante.fr https://*.viasante.fr ;font-src 'self' data: https://assets.app.smart-tribune.com https://cdnjs.cloudflare.com https://fast.wistia.com https://fonts.gstatic.com https://web2.viasante.fr ;style-src 'self' 'unsafe-inline' https://assets.app.smart-tribune.com ;style-src-elem 'self' 'unsafe-inline' https://viasante.fr https://*.viasante.fr https://web2.viasante.fr https://assets.app.smart-tribune.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cdnroom.myfeelback.com https://fonts.googleapis.com https://unpkg.com ;img-src 'blob' 'self' data: https://viasante.fr https://*.viasante.fr https://6967624b22e1f73495a780f4.tracker.adotmob.com https://a.tile.openstreetmap.org https://assets.app.smart-tribune.com https://b.tile.openstreetmap.org https://bat.bing.com https://bat.bing.net https://c.tile.openstreetmap.org https://cdnjs.cloudflare.com https://connect.facebook.net https://d33v4339jhl8k0.cloudfront.net https://embed-ssl.wistia.com https://fast.wistia.com https://googleads.g.doubleclick.net https://img.youtube.com https://manager.tagcommander.com https://*.viasante.fr https://ps.w.org https://qr-code.ithemes.com https://s.w.org https://secure.gravatar.com https://stv2-uploads-prod.s3.eu-west-3.amazonaws.com https://uploads.app.smart-tribune.com https://web2.viasante.fr https://www.facebook.com https://www.google-analytics.com https://www.google.com https://www.google.fr https://www.google.nl https://www.googletagmanager.com https://www.mutuellebleue.fr https://yoast.com https://translate.google.com https://fonts.gstatic.com ;frame-src 'blob' 'self' https://viasante.fr https://*.viasante.fr https://web2.viasante.fr https://api.wp-rocket.me https://cdn.trustcommander.net https://embed.acast.com https://fast.wistia.net https://room.myfeelback.com https://support.google.com https://td.doubleclick.net https://v.calameo.com https://widget.enterpriseappointments.com https://viasante.enterpriseappointments.com https://www.google.com https://www.googletagmanager.com https://www.youtube-nocookie.com https://www.youtube.com ;script-src 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline' https://*.viasante.fr https://cdn.trustcommander.net https://assets.app.smart-tribune.com https://www.google.com https://www.gstatic.com ;script-src-elem 'self' 'unsafe-inline' https://*.viasante.fr https://assets.app.smart-tribune.com https://bat.bing.com https://beacon-v2.helpscout.net https://cdn.jsdelivr.net https://cdn.tagcommander.com https://cdn.trustcommander.net https://cdnroom.myfeelback.com https://connect.facebook.net https://fast.wistia.com https://googleads.g.doubleclick.net https://nytimes.github.io https://polyfill-fastly.io https://unpkg.com https://web2.viasante.fr https://web2.viasante.fr/stats/matomo.js https://web2.viasante.fr/stats/js/container_CuIKFKUR.js https://widget.enterpriseappointments.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://yoast.com ;connect-src 'self' https://viasante.fr https://*.viasante.fr https://api-gateway.app.smart-tribune.com https://bat.bing.com https://bat.bing.net https://beaconapi.helpscout.net https://d3hb14vkzrxvla.cloudfront.net https://distillery.wistia.com https://fast.wistia.com https://google.com https://my.yoast.com https://nominatim.openstreetmap.org https://pipedream.wistia.com https://privacy.commander1.com https://privacy.trustcommander.net https://region1.google-analytics.com https://web2.viasante.fr https://www.facebook.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://yoast.com https://www.googleadservices.com https://translate.googleapis.com ; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cdn.almapay.com fonts.axept.io *.googleapis.com data: *.oney.io *.staging.oney.io *.bootstrapcdn.com *.fontawesome.com maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com *.hipay-tpp.com *.hipay.com *.googleapis.com https://www.googletagmanager.com/ www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com axeptio.imgix.net www.google.fr www.google.es www.google.it www.google.co.uk www.google.de www.facebook.com *.googleapis.com *.openstreetmap.org https://maps.googleapis.com *.hipay.com *.oney.io *.staging.oney.io http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ accastillage-diffusion.com accastillage-diffusion.es accastillage-diffusion.it accastillage-diffusion.co.uk *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com ws.colissimo.fr connect.facebook.net *.googleapis.com *.gstatic.com *.hipay-tpp.com *.hipay.com mpsnare.iesnare.com *.paypal.com *.oney.io *.staging.oney.io http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.atinternet-solutions.com *.atinternet.io *.aticdn.net *.xiti.com *.ati-host.net *.atinternet.com *.piano.io *.axept.io *.target2sell.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.disqus.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.jsdelivr.net fonts.axept.io *.hipay.com *.googleapis.com *.bootstrapcdn.com *.fontawesome.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com assets.braintreegateway.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com data: mpsnare.iesnare.com *.googleapis.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com googleads.g.doubleclick.net www.google.com www.google.fr www.google.es www.google.it www.google.co.uk www.google.de *.axept.io www.facebook.com connect.facebook.net *.googleapis.com *.openstreetmap.org https://maps.googleapis.com *.hipay-tpp.com *.hipay.com wss://mpsnare.iesnare.com *.oney.io *.staging.oney.io http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.atinternet-solutions.com *.atinternet.io *.aticdn.net *.xiti.com *.ati-host.net *.atinternet.com *.piano.io *.target2sell.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com maxcdn.bootstrapcdn.com *.cloudflare.com cdn.jsdelivr.net fonts.bunny.net *.update.nl https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com *.googlesyndication.com *.tiktok.com 'self' connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.doubleclick.net www.facebook.com *.googlesyndication.com *.tiktok.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.trustpilot.com *.google.nl *.cookiebot.com *.googletagmanager.com sst.update.nl 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com 'self' data: *.google.nl *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com magefan.com cm.magefan.com connect.facebook.net graph.facebook.com business.facebook.com *.complies.nl *.braintreegateway.com *.paypalobjects.com *.mailcampaigns.nl *.amazonaws.com *.clarity.ms *.cookiebot.com *.bing.com *.update.nl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com www.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com www.google.com www.gstatic.com connect.facebook.net graph.facebook.com business.facebook.com *.trustpilot.com *.google.nl *.fontawesome.com bootstrapcdn.com code.jquery.com *.paypal.com *.paypalobjects.com *.widget.trengo.eu *.hotjar.com *.clarity.ms *.mailcampaigns.nl *.cookiebot.com *.update.nl consent.studio 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.fontawesome.com maxcdn.bootstrapcdn.com *.trustpilot.com *.typekit.net fonts.bunny.net *.update.nl https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.widget.trengo.eu *.update.nl 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com www.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com https://www.sandbox.paypal.com https://www.paypal.com http://dpm.demdex.net connect.facebook.net graph.facebook.com business.facebook.com *.clarity.ms *.google.nl *.widget.trengo.eu ws-eu.pusher.com sockjs-eu.pusher.com *.cookiebot.com *.googletagmanager.com *.update.nl *.pay.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://update.hypernode.io/paynl/csp/report; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://test.oppwa.com/ https://oppwa.com/ https://eu-prod.oppwa.com/ https://www.datafast.com.ec/ 'self' 'unsafe-inline'; frame-ancestors *.bolt.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.bolt.com https://www.google.com/recaptcha/ https://test.oppwa.com/ https://oppwa.com/ https://www.datafast.com.ec/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net https://test.oppwa.com/ https://oppwa.com/ https://www.datafast.com.ec/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.bolt.com *.commerce-quick-checkout.com http://localhost:8082 https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-ds.com https://test.oppwa.com/ https://oppwa.com/ https://eu-prod.oppwa.com/ https://www.datafast.com.ec/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.avada.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://test.oppwa.com/ https://oppwa.com/ https://eu-prod.oppwa.com/ https://www.datafast.com.ec/ *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io commerce.adobe.net *.bolt.com qa-api.magedevteam.com *.sentry.io https://test.oppwa.com/ https://oppwa.com/ https://eu-prod.oppwa.com/ https://www.datafast.com.ec/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.googletagmanager.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.fontawesome.com *.googleapis.com *.gstatic.com *.google.com/ assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com unsafe-inline 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; 1
default-src 'self' ; connect-src 'self' https://matomo.trouver-un-cours.ch https://*.googleapis.com *.google.com https://*.gstatic.com https://domdetailer.com; img-src 'self' data: https://matomo.trouver-un-cours.ch https://*.gstatic.com https://*.googleapis.com https://cdnjs.cloudflare.com https://*.tile.openstreetmap.org; style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.gstatic.com https://cdnjs.cloudflare.com ; font-src 'self' data: https://fonts.gstatic.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://matomo.trouver-un-cours.ch https://*.google.com https://*.googleapis.com https://*.gstatic.com https://cdnjs.cloudflare.com https://ipinfo.io ; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://*.facebook.com https://*.google.com ; report-uri https://www.trouver-un-cours.ch/logs/csp-report.php ; 1
default-src 'self' https://*.uestra.de https://cloud.ccm19.de; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cloud.ccm19.de https://gvh.demo.hafas.cloud https://gvh.hafas.de https://*.uestra.de https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: https://img.youtube.com https://gvh.demo.hafas.cloud https://gvh.hafas.de https://*.uestra.de https://cloud.ccm19.de https://elma.gvh.de https://uestra-produktion.pi-asp.de/ https://www.facebook.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://google.com https://www.google.de; base-uri 'self' https://*.uestra.de; frame-src 'self' blob: https://*.youtube.com/ https://gvh.demo.hafas.cloud https://gvh.hafas.de https://abo.gvh.de https://cloud.ccm19.de https://deutschlandticket.gvh.de https://transport.novafind.eu/ https://uestra-produktion.pi-asp.de/ https://www.googletagmanager.com; media-src 'self' blob:; style-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://cloud.ccm19.de https://*.hafas.cloud https://*.hafas.de https://elma.gvh.de https://stats.uestra.de 'report-sample'; font-src 'self' data: https://fonts.gstatic.com https://gvh.demo.hafas.cloud https://gvh.hafas.de https://stats.uestra.de https://elma.gvh.de https://uestra-produktion.pi-asp.de/; connect-src 'self' https://gvh.demo.hafas.cloud https://gvh.hafas.de https://cloud.ccm19.de https://stats.uestra.de https://elma.gvh.de https://www.facebook.com https://*.google-analytics.com https://*.analytics.google.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://www.google.com https://google.com https://www.google.de; object-src 'self' blob: https://*.uestra.de; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' https://cloud.ccm19.de https://gvh.demo.hafas.cloud https://gvh.hafas.de https://*.uestra.de https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://relaunch.uestra.de https://*.webit.de https://*.hafas.cloud https://*.hafas.de https://elma.gvh.de https://connect.facebook.net 'report-sample'; style-src-elem 'self' 'unsafe-inline' https://www.uestra.de https://relaunch.uestra.de https://stats.uestra.de https://gvh.demo.hafas.cloud https://gvh.hafas.de https://cloud.ccm19.de https://elma.gvh.de 'report-sample'; frame-ancestors 'self' https://*.uestra.de https://gvh.demo.hafas.cloud https://gvh.hafas.de https://uestra-produktion.pi-asp.de/; form-action 'self'; report-uri https://www.uestra.de/@http-reporting?csp=report&requestTime=1789274903811719&requestHash=0c4997b5d8d8f7e3f6b112d5dd4aca4a0cef16f8 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.oney.io *.staging.oney.io https://cdn.doofinder.com/ maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com *.brevo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://www.facebook.com/ *.e-transactions.fr *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.hipay-tpp.com *.hipay.com *.googleapis.com https://sibautomation.com/ https://www.googletagmanager.com/ www.facebook.com platform.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.hipay.com *.googleapis.com *.oney.io *.staging.oney.io http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.doofinder.com log.pinterest.com cm.g.doubleclick.net *.bing.com *.google.fr bat.bing.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.hipay-tpp.com *.hipay.com mpsnare.iesnare.com *.paypal.com *.googleapis.com *.oney.io *.staging.oney.io https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ https://js-agent.newrelic.com/ https://sdk.privacy-center.org/ https://bam.eu01.nr-data.net/ https://bat.bing.com/ https://sibautomation.com/ https://cdn.doofinder.com/ https://www.clarity.ms/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ connect.facebook.net twitter.com platform.twitter.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.doubleclick.net *.pinterest.com *.pinimg.com *.criteo.net *.criteo.com bat.bing.net sibforms.com *.clarity.ms *.brevo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.hipay.com *.googleapis.com https://cdn.doofinder.com/ maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com assets.braintreegateway.com sibforms.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com data: mpsnare.iesnare.com *.googleapis.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.hipay-tpp.com *.hipay.com wss://mpsnare.iesnare.com *.googleapis.com *.oney.io *.staging.oney.io https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ https://eu1-layer.doofinder.com/ https://in-automate.sendinblue.com/ https://j.clarity.ms/ https://bam.eu01.nr-data.net/ http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google.fr *.doubleclick.net *.google-analytics.com *.googleadservices.com *.googlesyndication.com *.facebook.com *.brevo.com *.doofinder.com wss://*.doofinder.com/ *.clarity.ms *.bing.com *.bing.net *.pinterest.com *.privacy-center.org 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.leaderplant.com/; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com www.etracker.de *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com www.facebook.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com www.etracker.de https://firebasestorage.googleapis.com https://www.mollie.com blob: https://widgets.trustedshops.com https://widgets-qa.trustedshops.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.etracker.com www.etracker.de/cntcc code.etracker.de code.etracker.com *.avada.io *.shopify.com js.mollie.com cdn.ampproject.org www.gstatic.com connect.facebook.net https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com www.etracker.de *.fontawesome.com https://fonts.bunny.net www.gstatic.com maxcdn.bootstrapcdn.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.etracker.de www.etracker.com www.etracker.de/cntcc code.etracker.de code.etracker.com https://get.geojs.io *.avada.io cdn.ampproject.org www.googleapis.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: https://www.googletagmanager.com *.fontawesome.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com m2.dev.leverengineering.pirstack.com m2.staging.lever-es.com.cfstack.com m2.dev.lever-es.com.cfstack.com lever-es.com www.lever-es.com p.typekit.net fonts.bunny.net static.klaviyo.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com lever-es.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com lever-es.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com live.opayo.eu.elavon.com *.opayo.co.uk *.elavon.com secure7.arcot.com *.arcot.com www.googletagmanager.com lever-es.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://firebasestorage.googleapis.com m2.dev.leverengineering.pirstack.com m2.staging.lever-es.com.cfstack.com m2.dev.lever-es.com.cfstack.com lever-es.com www.lever-es.com d3k81ch9hvuctc.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.avada.io *.shopify.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com m2.dev.leverengineering.pirstack.com m2.staging.lever-es.com.cfstack.com m2.dev.lever-es.com.cfstack.com lever-es.com www.lever-es.com cdnjs.cloudflare.com cdn.jsdelivr.net eu1-config.doofinder.com trackcmp.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net *.stripe.network *.stripecdn.com *.amazon.com lever-es.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com lever-es.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://get.geojs.io *.avada.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com m2.dev.leverengineering.pirstack.com m2.staging.lever-es.com.cfstack.com m2.dev.lever-es.com.cfstack.com lever-es.com www.lever-es.com api-js.datadome.co cdnjs.cloudflare.com *.doofinder.com 'self' 'unsafe-inline'; child-src lever-es.com http: https: blob: 'self' 'unsafe-inline'; default-src lever-es.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.googletagmanager.com *.adobe.com www.googleadservices.com www.google-analytics.com *.googleapis.com vimeo.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.newrelic.com *.nr-data.net fonts.googleapis.com fonts.gstatic.com *.hotjar.com *.zopim.com *.fontawesome.com 'self' data: *.cloudflare.com *.twitter.com *.twimg.com *.usercentrics.eu *.bing.com *.zdassets.com *.google.com *.google.gr *.clarity.ms/ *.viokalunderwear.gr https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.zdassets.com *.facebook.com *.contactpigeon.com *.google.gr *.zopim.com *.moosend.com *.cloudflare.com td.doubleclick.net 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.googletagmanager.com *.contactpigeon.com *.hotjar.com *.facebook.com td.doubleclick.net widget-v3.boxnow.gr widget-v5.boxnow.cy *.clarity.ms/ *.bing.com *.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: *.vimeocdn.com i.ytimg.com validator.swagger.io *.zdassets.com https://trustmark.gr *.tiktok.com *.contactpigeon.com *.googleapis.com *.gstatic.com *.trustedshops.com *.zopim.com cdn.jsdelivr.net *.moosend.com *.cloudflare.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.bing.com *.zopim.io td.doubleclick.net *.facebook.com *.mastercard.com *.google.com *.google.gr *.googletagmanager.com *.clarity.ms/ *.youtube.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ 'self' data: *.tiktok.com *.googletagmanager.com *.googleapis.com *.facebook.net *.facebook.com *.doubleclick.net *.google-analytics.com *.gstatic.com *.contactpigeon.com *.newrelic.com *.nr-data.net *.paypal.com *.google.com *.hotjar.com *.fontawesome.com *.feedbackcompany.com *.trustpilot.com cdn.jsdelivr.net *.googleoptimize.com *.youtube.com *.cloudflare.com *.google.gr https://trustmark.gr/badge/dist/index.js https://static.adman.gr/adman.js https://greca.adman.gr cdn.omnicliq.com/ss.js *.clarity.ms/ *.bing.com *.debugbear.com *.viokalunderwear.gr *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googletagmanager.com www.googleadservices.com www.google-analytics.com *.googleapis.com vimeo.com *.facebook.net *.facebook.com *.doubleclick.net *.google-analytics.com *.gstatic.com *.contactpigeon.com *.newrelic.com *.nr-data.net *.fontawesome.com *.trustpilot.com cdn.jsdelivr.net *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.bing.com *.hotjar.com *.clarity.ms/ *.viokalunderwear.gr https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' data: *.google.gr *.zopim.com *.moosend.com *.cloudflare.com *.youtube.com *.viokalunderwear.gr 'self' 'unsafe-inline'; manifest-src *.viokalunderwear.gr 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.gstatic.com *.mastercard.com *.google.com *.google.gr *.googletagmanager.com *.tiktok.com *.contactpigeon.com *.paypal.com stats.g.doubleclick.net https://googleads.g.doubleclick.net/ *.zdassets.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.zopim.com wss://*.zopim.com *.feedbackcompany.com *.cloudflare.com https://pagead2.googlesyndication.com *.bing.com *.clarity.ms/ *.debugbear.com td.doubleclick.net https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; connect-src 'self' https://*.google-analytics.com https://*.brightcove.com https://*.boltdns.net https://*.brightcovecdn.com https://www.google.com; font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' https://info.mumc.nl https://www.google.com https://players.brightcove.net https://*.youtube.com https://*.vimeo.com https://heritage.mumc.nl https://www.googletagmanager.com https://tagging.mumc.nl; img-src 'self' https://metrics.brightcove.com https://*.boltdns.net https://*.ytimg.com data:; media-src 'self' https://*.brightcovecdn.com https://*.boltdns.net blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.texthelp.com https://*.browsealoud.com https://players.brightcove.net https://vjs.zencdn.net https://cdn.rawgit.com https://www.googletagmanager.com https://www.google-analytics.com https://apis.google.com https://www.google.com https://www.gstatic.com https://tagging.mumc.nl blob: https://connect.facebook.net cdn.jsdelivr.net https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com cdn.jsdelivr.net; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri https://www.werkenbijmumc.nl/system/reporting/default; report-to default; block-all-mixed-content 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.ckeditor.com https://www.youtube.com https://s.ytimg.com https://cse.google.com https://www.google.com https://www.gstatic.com https://www.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data:; font-src 'self' https: data:; frame-src 'self' https:; media-src 'self' https: data:; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://cse.google.com https://www.google.com https://www.googleapis.com https://clients1.google.com https://www.youtube.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https://www.paypal.com 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com https://ws.colissimo.fr *.fontawesome.com https://fonts.bunny.net https://cdnjs.cloudflare.com https://applepay.cdn-apple.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.youtube.com https://form.typeform.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.payplug.com *.dalenys.com https://applepay.cdn-apple.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org https://maps.googleapis.com https://maps.gstatic.com https://ws.colissimo.fr https://*.tile.openstreetmap.fr https://*.onyourmap.com https://google.fr https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://secure-magenta.dalenys.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com *.avada.io *.shopify.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://secure-magenta.dalenys.com https://applepay.cdn-apple.com api-qa.payplug.com cdn-qa.payplug.com api.payplug.com cdn.payplug.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com https://ws.colissimo.fr https://api.mapbox.com https://*.typeform.com *.fontawesome.com https://fonts.bunny.net https://cdnjs.cloudflare.com assets.braintreegateway.com https://secure-magenta.dalenys.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://ws.colissimo.fr https://maps.googleapis.com https://nominatim.openstreetmap.org https://*.onyourmap.com https://*.mapbox.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
report-to self; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com maxcdn.bootstrapcdn.com 'self' data: widgets.trustedshops.com https://widgets.trustedshops.com d2jyby6zfixqwe.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de d2jyby6zfixqwe.cloudfront.net 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com https://www.googletagmanager.com/ *.facebook.com js.mollie.com challenges.cloudflare.com td.doubleclick.net d2jyby6zfixqwe.cloudfront.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.trackedlink.net *.ddlnk.net http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.hsforms.net *.hsforms.com *.cdninstagram.com flagpedia.net https://www.mollie.com 'self' data: *.cloudfront.net *.usercentrics.eu integrations.etrusted.com *.content.lego.com www.google.pl www.google.de www.google.en blob: https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com maps.gstatic.com d2jyby6zfixqwe.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.hsforms.net *.hsforms.com player.vimeo.com connect.facebook.net cdnjs.cloudflare.com *.gstatic.com maps.googleapis.com js.mollie.com challenges.cloudflare.com *.usercentrics.eu *.content.lego.com *.hotjar.com toysforfun.matomo.cloud https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://d2jyby6zfixqwe.cloudfront.net d2jyby6zfixqwe.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.gstatic.com *.googleapis.com integrations.etrusted.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com d2jyby6zfixqwe.cloudfront.net 'self' 'unsafe-inline'; object-src d2jyby6zfixqwe.cloudfront.net 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.content.lego.com d2jyby6zfixqwe.cloudfront.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ t.elasticsuite.io *.hsforms.net *.hsforms.com www.gstatic.com maps.googleapis.com *.usercentrics.eu api.legogroup.io *.content.lego.com region1.analytics.google.com googleads.g.doubleclick.net pagead2.googlesyndication.com www.google.pl www.google.de www.google.en wss://ws.hotjar.com content.hotjar.com content.hotjar.io metrics.hotjar.io toysforfun.matomo.cloud challenges.cloudflare.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site d2jyby6zfixqwe.cloudfront.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com d2jyby6zfixqwe.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.cloudfront.net 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action 'self' *.pneumatig.eu *.imoje.pl *.paypal.com *.newrelic.com *.googletagmanager.com 'unsafe-inline'; frame-ancestors ; frame-src bid.g.doubleclick.net https://www.google.com/recaptcha/ *.paypal.com *.newrelic.com *.googleapis.com *.googletagmanager.com td.doubleclick.net *.google.com 'self' 'unsafe-inline'; img-src 'self' data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com data: https://firebasestorage.googleapis.com *.googleadservices.com *.googleads.g.doubleclick.net *.googleapis.com *.paypal.com *.google.pl *.google.com *.newrelic.com *.googletagmanager.com *.paypalobjects.com *.youtube.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.ampproject.org raw.githubusercontent.com *.avada.io *.shopify.com *.paypal.com *.pneumatig.eu *.googletagmanager.com *.google.pl *.google.com *.google-analytics.com *.googleapis.com *.newrelic.com js-agent.newrelic.com *.iubenda.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net *.iubenda.com 'self' 'unsafe-inline'; object-src *.pneumatig.eu *.googleapis.com 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com cdn.ampproject.org https://get.geojs.io *.avada.io *.paypal.com *.googleapis.com *.google.com *.newrelic.com *.googletagmanager.com *.doubleclick.net *.iubenda.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-d3NnGDgvQPzxHEFrK8lhqA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://use.fontawesome.com https://google-analytics.com http://cdnjs.cloudflare.com https://www.google-analytics.com https://maps.googleapis.com https://www.googletagmanager.com https://merchants.niftepay.pk https://www.googleadservices.com https://googleads.g.doubleclick.net; object-src 'none'; style-src 'self' 'unsafe-inline' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://maps.googleapis.com https://maps.gstatic.com https://merchants.niftepay.pk; report-uri /report-csp-violation; upgrade-insecure-requests 1
script-src 'nonce-M3CKB05N9PZL_CFgV2droA' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/static-on-bigtable; base-uri 'none' 1
font-src *.termsfeed.com *.adobe.com *.adobedtm.com *.googleadservices.com *.googleapis.com *.gstatic.com *.google.com *.facebook.com *.facebook.net *.atcb2b.gr *.cloudflare.com *.typekit.net *.trustedshops.com *.fontawesome.com fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com youtu.be *.vimeo.com *.addthis.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.com/ 'self' 'unsafe-inline'; img-src *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.termsfeed.com *.googleadservices.com *.googleapis.com *.gstatic.com *.google.com *.facebook.com *.facebook.net *.atcb2b.gr ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.cloudflare.com https://cdn.klarna.com *.paypal.com https://s.ytimg.com *.usercentrics.eu blob: *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.doubleclick.net https://www.magezon.com 'self' data: data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.termsfeed.com *.googleadservices.com *.googleapis.com *.gstatic.com *.google.com *.facebook.com *.facebook.net *.atcb2b.gr chimpstatic.com downloads.mailchimp.com *.list-manage.com *.cloudflare.com *.google-analytics.com *.trustedshops.com *.usercentrics.eu *.addthis.com *.addthisedge.com *.moatads.com s7.addthis.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.termsfeed.com *.adobedtm.com *.googleadservices.com *.googleapis.com *.gstatic.com *.google.com *.facebook.com *.facebook.net *.atcb2b.gr downloads.mailchimp.com *.cloudflare.com *.typekit.net *.trustedshops.com *.usercentrics.eu fonts.googleapis.com *.googletagmanager.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.termsfeed.com *.adobe.com *.adobedtm.com *.googleadservices.com *.googleapis.com *.gstatic.com *.google.com *.facebook.com *.facebook.net *.atcb2b.gr *.cloudflare.com *.paypal.com ekr.zdassets.com/ *.google-analytics.com *.doubleclick.net *.googlesyndication.com t.elasticsuite.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://staging.atcb2b.gr/; report-to report-endpoint; 1
default-src 'self' https://g.alicdn.com https://*.piufoto.com https://turing.captcha.qcloud.com https://turing.captcha.gtimg.com https://s9.cnzz.com https://zz.bdstatic.com https://afc.alltuu.com alltuu-frontend-crm-log-tracking.ap-southeast-1.log.aliyuncs.com 'unsafe-eval' 'unsafe-inline' data: https://v1.cnzz.com https://res.wx.qq.com https://at.alicdn.com https://sp0.baidu.com https://open.weixin.qq.com https://alltuu-storage-piufotonew.oss-ap-southeast-1.aliyuncs.com blob:; report-uri https://csp-page.piufoto.com;connect-src 'self' https://mp.weixin.qq.com/ https://*.piufoto.com https://alltuu-frontend-log-tracking-piufoto.ap-southeast-1.log.aliyuncs.com https://alltuu-storage-piufotonew.oss-ap-southeast-1.aliyuncs.com wss://*.piufoto.com https://videocloud.cn-hangzhou.log.aliyuncs.com data: blob:;worker-src 'self' blob:;frame-src 'self' dxwebview: https://turing.captcha.gtimg.com; 1
frame-ancestors 'self' https:; default-src 'self' https://static.badgr.io; media-src 'self'; object-src 'none'; style-src www.gstatic.com *.googleapis.com *.pendo.io 'unsafe-inline' *.eesysoft.com 'self' ; script-src www.gstatic.com *.pendo.io translate.google.com *.googleapis.com *.eesysoft.com 'self' 'sha256-6wRdeNJzEHNIsDAMAdKbdVLWIqu8b6+Bs+xVNZqplQw=' 'strict-dynamic'  'nonce-gxvqsvitz8TL2roUs0X6wSU2vfF8ktpk' 'sha256-MhtPZXr7+LpJUY5qtMutB+qWfQtMaPccfe7QXtCcEYc=' 'unsafe-hashes'; font-src *.eesysoft.com *.pendo.io fonts.gstatic.com 'self'; img-src * data: blob:; connect-src 'self' https://badges.parchment.com https://www.gravatar.com *.pendo.io *.eesysoft.com *.instructure.com *.googleapis.com translate.google.com data:; frame-src 'self'; worker-src 'self' blob: *.pendo.io; base-uri 'self'; require-trusted-types-for 'script'; trusted-types angular angular#bundler dompurify webpack default goog#html highcharts 'allow-duplicates'; report-uri /api/csp-report; 1
default-src 'self'; script-src 'nonce-HSppZizwBjYTsajEuqP/+g==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; script-src 'self' https://kit.fontawesome.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src 'self' https://cdn.datatables.net https://fonts.googleapis.com https://unpkg.com https://ggtech-public-assets.s3.eu-west-1.amazonaws.com; font-src 'self' data: https://fonts.gstatic.com https://ggtech-public-assets.s3.eu-west-1.amazonaws.com; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; frame-src 'self' https://www.youtube.com; require-trusted-types-for 'script'; trusted-types default 1
base-uri 'self'; default-src 'self'; img-src 'self' data: https://*.googleusercontent.com; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://plausible.io https://accounts.google.com/gsi/client; connect-src 'self' https://plausible.io https://statuspal.io https://accounts.google.com/gsi/; frame-src 'self' https://iframe.mediadelivery.net https://player.mediadelivery.net https://www.youtube.com https://accounts.google.com/gsi/; form-action 'self' https://www.activityinfo.org; report-uri /app/csp-violation; 1
object-src 'none';base-uri 'self';script-src 'nonce-EavieT86Ue6CJ7DjlxtFAw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'nonce-CTR6F+jYGc00VITeDOBpMg==' 'wasm-unsafe-eval' https://js.stripe.com https://challenges.cloudflare.com https://lottie.host https://maps.googleapis.com https://*.googleapis.com https://source.zoom.us https://vercel.live https://www.googletagmanager.com https://us-assets.i.posthog.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://source.zoom.us; img-src 'self' data: blob: https: http:; font-src 'self' https://fonts.gstatic.com https://source.zoom.us data:; connect-src 'self' https://api.stripe.com https://vitals.vercel-insights.com https://o4508611993468928.ingest.us.sentry.io https://lottie.host https://cdn.jsdelivr.net https://unpkg.com https://maps.googleapis.com https://*.googleapis.com https://*.zoom.us https://source.zoom.us https://vercel.live https://us.i.posthog.com https://www.google-analytics.com https://www.facebook.com wss: ws:; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://challenges.cloudflare.com https://*.zoom.us https://maps.googleapis.com https://lottie.host https://vercel.live https://www.youtube.com https://www.youtube-nocookie.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /api/security/csp-report; report-to csp-endpoint 1
worker-src blob:; font-src https://fonts.gstatic.com *.gstatic.com data: fonts.gstatic.com *.kxcdn.com *.fontawesome.com https://www.google.com https://www.gstatic.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.google.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com google.com *.addthis.com https://player.vimeo.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.paypalobjects.com t.paypal.com www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com www.googleadservices.com www.google-analytics.com s.ytimg.com *.gstatic.com *.googleapis.com *.cdninstagram.com *.kxcdn.com *.twitter.com google.com *.fbcdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.googleadservices.com www.google-analytics.com www.youtube.com polyfill.io *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ google.com cdn.ampproject.org connect.facebook.net www.googletagmanager.com googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com https://widget.freshworks.com/ https://chimpstatic.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.facebook.net *.google.com *.avada.io https://player.vimeo.com https://www.youtube.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com fonts.googleapis.com *.googleapis.com google.com *.kxcdn.com *.gstatic.com *.fontawesome.com https://widget.freshworks.com/ https://static.klaviyo.com *.google.com https://fonts.googleapis.com http://fonts.googleapis.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.algolia.net *.algolia.com *.googleapis.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com https://widget.freshworks.com/ https://www.instagram.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maps.googleapis.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://fonts.googleapis.com https://fonts.gstatic.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://staging-v2.groupebbh.kaliop.ca/; report-to report-endpoint; 1
default-src 'self' ; base-uri 'self' ; object-src 'none' ; style-src 'self' 'unsafe-inline' cdn.plyr.io https://fonts.googleapis.com https://devcomapbotpilot-test.azurewebsites.net/ https://chatbotapp-stage.azurewebsites.net/ https://intelibot-prod.azurewebsites.net/ ; script-src 'strict-dynamic' 'nonce-r1615SwWN2rRbvOFWfDrveZzCSyLpM4j' 'self' 'unsafe-inline' 'unsafe-eval' https://js.monitor.azure.com https://admin.dev.comap-control.bluehosting.cz https://chatbotapp-stage.azurewebsites.net/ https://devcomapbotpilot-test.azurewebsites.net/ https://intelibot-prod.azurewebsites.net/ ; font-src 'self' https://fonts.gstatic.com/ ; connect-src 'self' https://*.google.com https://*.logic.azure.com/ https://chatbotapp-stage.azurewebsites.net/ https://intelibot-prod.azurewebsites.net/   https://intelisearch.azurewebsites.net https://directline.botframework.com https://websearchproxy.azure-api.net wss://directline.botframework.com https://*.in.applicationinsights.azure.com/ wss://localhost:44377 ws://localhost:50602 noembed.com cdn.plyr.io ; img-src * 'self' data: ; media-src 'self' *.comap-control.com/ https://comapkenticouat6527.blob.core.windows.net ; frame-src https://www.thinglink.com youtube-nocookie.com www.youtube-nocookie.com youtube.com www.youtube.com vimeo.com www.vimeo.com https://www.google.com/ ; frame-ancestors https://admin.dev.comap-control.bluehosting.cz/ 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.example *.cloudflare.com *.trustedshops.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.example *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com *.reviews.co.uk *.reviews.io *.catering24.co.uk 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.stripe.com *.google.com/ *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.googletagmanager.com  *.youtube.com *.intercom.io *.intercomcdn.com *.clarity.ms *.bing.com *.bing.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.example *.reviews.co.uk account.fetchify.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com blob: *.bing.com *.bing.net grwapi.net *.intercom.io *.intercomcdn.com *.clarity.ms https://images.unsplash.com https://firebasestorage.googleapis.com *.example *.cloudflare.com https://cdn.klarna.com https://www.catering24.co.uk *.google.co.uk https://s.ytimg.com *.usercentrics.eu https://www.magezon.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.stripe.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.termly.io *.debugbear.com *.hotjar.com *.googleapis.com grwapi.net *.intercom.io *.intercomcdn.com *.clarity.ms *.bing.com *.bing.net https://maps.googleapis.com https://player.vimeo.com *.avada.io *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.loyaltylion.net *.cloudflare.com https://www.catering24.co.uk www.googleservices.com *.reviews.co.uk *.trustedshops.com *.usercentrics.eu https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com grwapi.net *.intercom.io *.intercomcdn.com *.clarity.ms *.bing.com *.bing.net https://fonts.bunny.net *.stripe.network *.stripecdn.com *.amazon.com *.loyaltylion.net *.cloudflare.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com cc-cdn.com https://static.klaviyo.com maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.example 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com *.termly.io *.debugbear.com *.hotjar.io wss://ws.hotjar.com *.googleapis.com grwapi.net *.intercom.io *.intercomcdn.com *.clarity.ms *.bing.com *.bing.net https://maps.googleapis.com https://player.vimeo.com https://get.geojs.io *.avada.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.loyaltylion.net *.loyaltylion.com *.cloudflare.com *.reviews.co.uk api.craftyclicks.co.uk pcls1.craftyclicks.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.sagepay.com *.opayo.eu.elavon.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.opayo.cloud *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.sagepay.com *.opayo.eu.elavon.com *.stripe.com *.stripe.network *.google.com *.opayo.cloud 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.fls.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.sagepay.com *.opayo.eu.elavon.com *.awin1.com *.zenaps.com *.stripe.com *.stripe.network klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.opayo.cloud landofcoder.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.sagepay.com ebizmarts-website.s3.amazonaws.com *.opayo.eu.elavon.com *.awin1.com *.zenaps.com *.wepowerconnections.com *.stripe.com *.stripe.network brippo.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.opayo.cloud *.klarna.com *.klarnaevt.com *.klarnacdn.net data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.sagepay.com *.opayo.eu.elavon.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.opayo.cloud x.klarnacdn.net *.klarnaservices.com landofcoder.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.sagepay.com *.opayo.eu.elavon.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com downloads.mailchimp.com *.opayo.cloud *.klarnacdn.net *.fontawesome.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com commerce.adobe.io *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.sagepay.com *.opayo.eu.elavon.com *.wepowerconnections.com https://the.sciencebehindecommerce.com *.stripe.com *.stripe.network klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com fonts.googleapis.com fonts.gstatic.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.opayo.cloud x.klarnacdn.net *.klarnaservices.com landofcoder.com api.addressy.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://accounts.google.com/gsi/client https://static.cloudflareinsights.com https://www.googletagmanager.com https://*.posthog.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://accounts.google.com/gsi/; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https://planephd.com https://images.unsplash.com https://cdn.planespotters.net https://i.ytimg.com https://*.google-analytics.com; connect-src 'self' https://planephd.com https://api.planephd.com https://accounts.google.com/gsi/ https://o4511899953463296.ingest.us.sentry.io https://*.google-analytics.com https://*.posthog.com; worker-src 'self' blob:; frame-src https://accounts.google.com/gsi/ https://www.youtube.com https://www.youtube-nocookie.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'; report-uri https://o4511899953463296.ingest.us.sentry.io/api/4511900038397952/security/?sentry_key=98733eb3d85f8945f184e3ab8b263efa 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://fonts.gstatic.com data: *.fontawesome.com *.cloudflare.com *.google.com static.flooringliquidators.net media.flooringliquidators.net cdnstage.flooringliquidators.net cdnstagemedia.flooringliquidators.net *.zopim.com *.chargeitpro.com *.audioeye.com *.mailchimp.com https://fonts.bunny.net https://www.google.com https://www.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * secure.authorize.net test.authorize.net https://seo.mageplaza.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com self www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com secure.authorize.net test.authorize.net www.gstatic.com apis.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.sharethis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.magentocommerce.com *.google.com *.braintreegateway.com www.facebook.com *.cloudinary.com *.googletagmanager.com *.msisurfaces.com *.meetanshi.com meetanshi.com static.flooringliquidators.net media.flooringliquidators.net cdnstage.flooringliquidators.net cdnstagemedia.flooringliquidators.net *.zopim.com t.co *.twitter.com *.google.co.in *.simpli.fi *.doubleclick.net *.tapad.com *.roomvo.com *.chargeitpro.com *.audioeye.com *.amazonaws.com *.mailchimp.com https://firebasestorage.googleapis.com connect.facebook.net graph.facebook.com business.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sharethis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ secure.authorize.net test.authorize.net js.authorize.net jstest.authorize.net *.mm-api.agency *.roomvo.com *.googleadservices.com *.google-analytics.com *.cloudflare.com *.adobedtm.com *.googletagmanager.com *.paypalobjects.com www.facebook.com *.addressy.com *.authorize.net *.measuresquare.com static.flooringliquidators.net media.flooringliquidators.net cdnstage.flooringliquidators.net cdnstagemedia.flooringliquidators.net *.zopim.com *.ads-twitter.com s.pinimg.com *.zdassets.com *.attn.tv tag.simpli.fi *.funnelll.com *.simpli.fi *.chargeitpro.com *.audioeye.com *.mailchimp.com chimpstatic.com *.amazonaws.com player.vimeo.com *.avada.io *.shopify.com connect.facebook.net graph.facebook.com business.facebook.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com assets.braintreegateway.com *.fontawesome.com *.mm-api.agency *.roomvo.com *.googleadservices.com *.google-analytics.com *.cloudflare.com *.google.com assets.adobedtm.com *.adobedtm.com *.googletagmanager.com *.paypal.com *.gstatic.com *.googleapis.com *.paypalobjects.com *.vimeo.com *.facebook.com *.addressy.com static.flooringliquidators.net media.flooringliquidators.net cdnstage.flooringliquidators.net cdnstagemedia.flooringliquidators.net *.zopim.com *.chargeitpro.com *.audioeye.com *.mailchimp.com https://fonts.bunny.net maxcdn.bootstrapcdn.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com *.chargeitpro.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com apitest.authorize.net jstest.authorize.net *.mm-api.agency *.roomvo.com *.googleadservices.com *.cloudflare.com *.adobe.com assets.adobedtm.com *.adobedtm.com *.googletagmanager.com *.gstatic.com *.paypalobjects.com www.facebook.com *.addressy.com static.flooringliquidators.net media.flooringliquidators.net cdnstage.flooringliquidators.net cdnstagemedia.flooringliquidators.net *.zopim.com *.pinterest.com *.google.co.in *.zendesk.com *.attentivemobile.com *.zdassets.com *.attn.tv wss://widget-mediator.zopim.com *.authorize.net *.chargeitpro.com *.audioeye.com *.mailchimp.com eventcollector.mcf-prod.a.intuit.com https://get.geojs.io *.avada.io http://dpm.demdex.net https://www.google.com https://www.gstatic.com connect.facebook.net graph.facebook.com business.facebook.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-A1Id+yzEu01Sxr5GZ+k5XA==' 'strict-dynamic' https: ;frame-ancestors 'self';style-src 'self' 'nonce-A1Id+yzEu01Sxr5GZ+k5XA==';style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com;style-src-attr 'unsafe-inline';font-src 'self' https://fonts.gstatic.com;img-src 'self' data: https://www.googletagmanager.com https://maps.gstatic.com https://maps.google.com https://www.google.com https://www.google.com.pe https://www.facebook.com https://i.ytimg.com;connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://maps.googleapis.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://connect.facebook.net https://www.facebook.com;frame-src 'self' https://www.googletagmanager.com https://www.google.com https://www.youtube-nocookie.com https://www.youtube.com;worker-src 'self' blob:; report-to csp-endpoint; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-PE4a7CgLYo-c4aVlPU4W_g' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com *.yotpo.com *.googleapis.com 'self' data: *.iubenda.com *.facebook.net *.bing.com *.clarity.ms *.tidio.co *.tidiochat.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors https://www.youtube.com https://www.google.com/maps https://www.google.com/ https://insight.adsrvr.org/ https://analytics.google.com https://vimeo.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://songbird.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://*.cardinalcommerce.com https://*.centinelapi.cardinalcommerce.com https://insight.adsrvr.org/ https://analytics.google.com https://vimeo.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://plumrocket.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com *.yotpo.com *.iubenda.com *.facebook.net *.bing.com *.clarity.ms *.tidio.co *.tidiochat.com *.onesignal.com onesignal.com *.cookie-script.com *.openwidget.com *.chatbot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com https://www.facebook.com *.googleapis.com *.yotpo.com 'self' data: *.iubenda.com *.facebook.net *.tidio.co *.tidiochat.com *.onesignal.com onesignal.com *.cookie-script.com *.openwidget.com *.chatbot.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https://vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com https://cdn1.ebizcharge.net https://songbird.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://cdnjs.cloudflare.com https://insight.adsrvr.org/ https://dpm.demdex.net https://amcglobal.sc.omtrdc.net https://geostag.cardinalcommerce.com https://geo.cardinalcommerce.com https://centinelapistag.cardinalcommerce.com https://analytics.google.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com https://connect.facebook.net *.googleapis.com *.yotpo.com *.iubenda.com *.tidio.co *.tidiochat.com *.onesignal.com onesignal.com *.cookie-script.com *.openwidget.com *.chatbot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com *.yotpo.com *.googleapis.com *.iubenda.com *.facebook.net *.bing.com *.clarity.ms *.tidio.co *.tidiochat.com *.onesignal.com onesignal.com *.cookie-script.com *.openwidget.com *.chatbot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tidiochat.com *.yotpo.com *.openwidget.com *.chatbot.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net https://vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com 3dsapi.ebizcharge.net kg668dbov0.execute-api.us-east-1.amazonaws.com ebizcharge3ds-staging1.azurewebsites.net https://includestest.ccdc02.com *.ebizcharge.net https://songbird.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://cdnjs.cloudflare.com https://insight.adsrvr.org/ https://dpm.demdex.net https://amcglobal.sc.omtrdc.net https://geostag.cardinalcommerce.com https://geo.cardinalcommerce.com https://centinelapistag.cardinalcommerce.com https://analytics.google.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com https://www.facebook.com *.googleapis.com *.yotpo.com *.googlesyndication.com *.iubenda.com *.tidio.co wss://socket.tidio.co *.tidiochat.com *.onesignal.com onesignal.com *.cookie-script.com *.openwidget.com *.chatbot.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self'; frame-ancestors 'self'; object-src 'none' 1
default-src 'self' rolex.okta.com login.rolex.com *.oktacdn.com *.rolex.com; connect-src 'self' rolex.okta.com rolex-admin.okta.com login.rolex.com *.oktacdn.com *.mixpanel.com *.mapbox.com rolex.kerberos.okta.com rolex.mtls.okta.com *.authenticatorlocalprod.com:8769 http://localhost:8769 http://127.0.0.1:8769 *.authenticatorlocalprod.com:65111 http://localhost:65111 http://127.0.0.1:65111 *.authenticatorlocalprod.com:65121 http://localhost:65121 http://127.0.0.1:65121 *.authenticatorlocalprod.com:65131 http://localhost:65131 http://127.0.0.1:65131 *.authenticatorlocalprod.com:65141 http://localhost:65141 http://127.0.0.1:65141 *.authenticatorlocalprod.com:65151 http://localhost:65151 http://127.0.0.1:65151 https://oinmanager.okta.com data: login.catalogue.rolex.com login.isecrown.com login.tudorwatch.com *.rolex.com *.ingest.sentry.io https://cdn.jsdelivr.net/sm/; script-src 'unsafe-inline' 'unsafe-eval' 'self' 'report-sample' rolex.okta.com login.rolex.com *.oktacdn.com *.rolex.com https://cdn.jsdelivr.net/gh/altcha-org/altcha/dist/altcha.min.js https://cdn.jsdelivr.net/gh/altcha-org/altcha@2.3.0/dist/altcha.min.js; style-src 'unsafe-inline' 'self' 'report-sample' rolex.okta.com login.rolex.com *.oktacdn.com *.rolex.com; frame-src 'self' rolex.okta.com rolex-admin.okta.com login.rolex.com login.okta.com com-okta-authenticator: *.rolex.com; img-src 'self' rolex.okta.com login.rolex.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com data: *.rolex.com blob:; font-src 'self' rolex.okta.com login.rolex.com data: *.oktacdn.com fonts.gstatic.com *.rolex.com; worker-src 'self' blob:; frame-ancestors 'self' https://home.pro.myrolex.com:443 https://at-mrws.pro.myrolex.com https://teams.microsoft.com https://mrws.pro.myrolex.com https://intranet.myrolex.com https://wa-iam-bot-cqduhjf9hrawdmf7.switzerlandnorth-01.azurewebsites.net https://pp-mrws.pro.myrolex.com https://val-mrws.pro.myrolex.com https://int-mrws.pro.myrolex.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net; img-src 'self' data: https:; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://*.googleapis.com https://*.gstatic.com https://www.google-analytics.com https://www.googletagmanager.com https://*.cookiebot.com https://*.cloudflareinsights.com https://trackcmp.net https://*.hotjar.com https://script.hotjar.com https://cdn.mxpnl.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https: blob:; connect-src 'self' https://*.thethirdwave.co https://*.googleapis.com https://*.google-analytics.com https://*.doubleclick.net https://*.google.com https://*.cookiebot.com https://*.hotjar.com https://*.mixpanel.com https://*.facebook.com https://connect.facebook.net; frame-src 'self' https://www.google.com https://www.youtube.com https://*.cookiebot.com https://*.hotjar.com https://*.facebook.com; object-src 'none'; base-uri 'self'; form-action 'self'; 1
default-src 'self'; script-src 'nonce-WsdDeni1coc4bKzliXRapA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.transbank.cl https://webpay3gint.transbank.cl/webpayserver/initTransaction https://webpay3g.transbank.cl/webpayserver/initTransaction 'self' 'unsafe-inline'; frame-ancestors *.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.weltpixel.com *.doubleclick.net *.basis.net https://webpay3gint.transbank.cl https://webpay3g.transbank.cl 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net *.google.co.in *.basis.net *.hsforms.net *.hsforms.com 'self' data: *.transbank.cl https://webpay3gint.transbank.cl/webpayserver/initTransaction https://webpay3g.transbank.cl/webpayserver/initTransaction https://www.novasalud.cl/ https://www.facebook.com/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page ajax.googleapis.com *.googletagmanager.com *.googleapis.com *.bing.com *.facebook.net unsafe-inline *.hsforms.net *.hsforms.com *.gstatic.com *.transbank.cl https://webpay3gint.transbank.cl/webpayserver/initTransaction https://webpay3g.transbank.cl/webpayserver/initTransaction https://www.novasalud.cl/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.gstatic.com *.transbank.cl https://webpay3gint.transbank.cl/webpayserver/initTransaction https://webpay3g.transbank.cl/webpayserver/initTransaction unsafe-inline https://www.novasalud.cl/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://www.novasalud.cl/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.transbank.cl https://webpay3gint.transbank.cl/webpayserver/initTransaction https://webpay3g.transbank.cl/webpayserver/initTransaction https://www.novasalud.cl/ https://stats.g.doubleclick.net/ 'self' 'unsafe-inline'; child-src https://www.novasalud.cl/ http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com https://www.novasalud.cl/ 'self' 'unsafe-inline' 'unsafe-eval'; base-uri https://www.novasalud.cl/ 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'none'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'nonce-pVeOR3rfN30x6AF1rZgOkg==' 'strict-dynamic' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://unpkg.com https://trustseals.trust-guard.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; connect-src 'self' https://core.smsbox.be https://www.cloudflare.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://www.facebook.com https://connect.facebook.net https://maps.googleapis.com https://places.googleapis.com; frame-src 'self' https://www.google.com; media-src 'self' data: blob:; worker-src 'self' blob:; manifest-src 'self'; report-uri /csp-report; report-to csp 1
base-uri 'none'; font-src 'self' https: data:; form-action https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://www.facebook.com; frame-ancestors 'self'; img-src https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://ads-twitter.com https://ads-api.twitter.com https://analytics.twitter.com https://mautic.netcup.news https://px.ads.linkedin.com 'self' blob: data: https: https://www.captcha.eu; object-src 'none'; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://www.captcha.eu; script-src https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://chat.netcup.com https://chat-dev-ui.netcup.net https://chat-ui.netcup.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com https://*.onetrust.com https://measure.netcup.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://widget.trustpilot.com https://cdn.brevo.com/js/sdk-loader.js https://www.captcha.eu 'self' 'wasm-unsafe-eval' 'nonce-51ttd1iMc9Z4KSC69t3wO/KI'; child-src blob: https://td.doubleclick.net; connect-src https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://chat.netcup.com https://chat-dev-ui.netcup.net https://chat-ui.netcup.com https://ads-twitter.com https://ads-api.twitter.com https://analytics.twitter.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com https://*.onetrust.com https://www.google.com https://in-automate.brevo.com https://measure.netcup.com https://google.com https://px.ads.linkedin.com https://*.clarity.ms/ 'self' https://*.analytics.google.com https://*.google-analytics.com https://stats.g.doubleclick.net https://www.captcha.eu https://googleads.g.doubleclick.net https://www.googleadservices.com https://cdn.cookielaw.org https://adservice.google.com https://pagead2.googlesyndication.com https://www.redditstatic.com https://pixel-config.reddit.com https://analytics.tiktok.com https://ads.tiktok.com https://bat.bing.com https://widget.trustpilot.com; frame-src https://td.doubleclick.net https://www.facebook.com https://www.googletagmanager.com https://measure.netcup.com https://www.youtube.com https://www.youtube-nocookie.com/ https://widget.trustpilot.com https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://chat.netcup.com https://chat-dev-ui.netcup.net https://chat-ui.netcup.com; script-src-elem https://green.netcup.com https://red.netcup.com https://blue.netcup.com https://www.netcup.com https://chat.netcup.com https://chat-dev-ui.netcup.net https://chat-ui.netcup.com https://cdn.brevo.com/js/sdk-loader.js https://sibautomation.com/sa.js https://sibforms.com/ https://www.googleadservices.com https://www.redditstatic.com 'self' 'unsafe-inline' https://*.googletagmanager.com https://static.ads-twitter.com https://snap.licdn.com https://bat.bing.com https://connect.facebook.net https://*.clarity.ms https://googleads.g.doubleclick.net https://cdn.cookielaw.org https://analytics.tiktok.com https://ads.tiktok.com https://measure.netcup.com https://www.youtube.com https://pagead2.googlesyndication.com https://widget.trustpilot.com; worker-src blob:; report-to csp-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.intuit.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com *.intuit.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.certcapture.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.certcapture.com *.intuit.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.certcapture.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src * data: 'self'; form-action * 'self'; frame-ancestors * 'self'; frame-src * 'self'; img-src * data: 'self'; script-src * 'self' 'unsafe-inline' 'unsafe-eval'; style-src * 'self' 'unsafe-inline'; object-src * 'self'; media-src * 'self'; manifest-src * 'self'; connect-src * 'self'; child-src * http: https: blob: 'self'; default-src * 'self'; base-uri * 'self'; 1
worker-src blob:; font-src *.googleapis.com *.gstatic.com data: fonts.gstatic.com *.kxcdn.com *.fontawesome.com *.paypal.com *.paypalobjects.com *.typekit.net applepay.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.instagram.com www.google.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com *.weltpixel.com https://www.googletagmanager.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.sandbox.paypal.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com *.cdninstagram.com *.kxcdn.com *.twitter.com *.google.com *.fbcdn.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.sandbox.paypal.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com *.instagram.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com chimpstatic.com downloads.mailchimp.com *.list-manage.com widget.freshworks.com m2epro.freshdesk.com utt.impactcdn.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ s7.addthis.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.sandbox.paypal.com *.paypalobjects.com *.cdn-apple.com https://js-agent.newrelic.com https://www.paypal.com https://www.sandbox.paypal.com https://js.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com www.xtento.com cdn.xtento.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com downloads.mailchimp.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com unsafe-inline assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com widget.freshworks.com m2epro.freshdesk.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ ekr.zdassets.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com *.sandbox.paypal.com https://bam.nr-data.net https://api.braintreegateway.com https://api.sandbox.braintreegateway.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
font-src *.fontawesome.com https://fonts.gstatic.com 'self' data: *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de cdn.doofinder.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.google.com *.google.com.co c.bing.com *.gstatic.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de cdn.doofinder.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com s7.addthis.com *.avada.io https://player.vimeo.com https://www.youtube.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.doubleclick.net analytics.google.com cdn.connectif.cloud *.hotjar.com *.clarity.ms connect.facebook.net *.cloudflare.com https://www.googletagmanager.com tagmanager.google.com unpkg.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.doofinder.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com https://fonts.googleapis.com http://fonts.googleapis.com unsafe-inline tagmanager.google.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.doofinder.com wss://*.doofinder.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com ekr.zdassets.com/ https://get.geojs.io *.avada.io https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.google.com.co analytics.google.com *.clarity.ms stats.g.doubleclick.net am1-api.connectif.cloud content.hotjar.io *.hotjar.com *.facebook.com *.google-analytics.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' cdn.segment.com myob.com *.myob.com *.myobdev.com *.ninetailed.co *.clarity.ms *.bing.com *.linkedin.com *.reddit.com connect.facebook.net *.facebook.com *.fullstory.com *.segmentapis.com *.google.com.au *.redditstatic.com d.impactradius-event.com analytics.tiktok.com analytics-ipv6.tiktokw.us www.googletagmanager.com *.hsforms.net *.hsforms.com *.hs-scripts.com *.hs-banner.com *.hubspot.com *.hubspotfeedback.com *.hs-analytics.net *.hsadspixel.net *.segment.io *.hsappstatic.net *.clickagy.com *.adsrvr.org *.zoominfo.com feedback.hubapi.com *.survicate.com snap.licdn.com *.pinimg.com *.google.com *.google-analytics.com fast.wistia.net *.mypurecloud.com.au *.newrelic.com *.pinterest.com *.zi-scripts.com *.doubleclick.net *.wistia.com *.youtube.com *.youtu.be *.jsdelivr.net *.algolia.io *.algolia.net *.algolia.com alg.li *.algolianet.com *.ctfassets.net *.sentry-cdn.com *.sentry.io *.contentful.com *.survicate-cdn.com *.googleapis.com *.zdassets.com *.zendesk.com *.googleadservices.com myob.74xz8u.net d.impct.site google.com recaptcha.net *.gstatic.com d34r8q7sht0t9k.cloudfront.net ipv4.pdscrb.com tracking-api.g2.com cdn.veritonic.com *.veritonicmetrics.com tr.capterra.com bzrcdn.openai.com bzr.openai.com *.litix.io bam.nr-data.net *.hubapi.com csp.withgoogle.com ws: blob:; style-src 'self' *.myob.com *.myobdev.com *.wistia.com *.survicate.com *.survicate-cdn.com www.googletagmanager.com *.googleapis.com *.hsappstatic.net *.gstatic.com *.youtube.com 'unsafe-inline' ws: blob:; img-src 'self' *.myob.com *.myobdev.com *.wistia.com *.ctfassets.net *.survicate-cdn.com *.survicate.com *.google-analytics.com *.googleadservices.com www.googletagmanager.com *.doubleclick.net *.facebook.com connect.facebook.net *.linkedin.com snap.licdn.com *.hubspot.com *.hsforms.com *.hsforms.net *.bing.com *.clarity.ms *.google.com *.google.com.au *.gstatic.com *.reddit.com *.clickagy.com *.adsrvr.org *.youtube.com i.ytimg.com yt3.ggpht.com *.pdscrb.com *.adnxs.com *.rubiconproject.com *.tapad.com *.casalemedia.com *.pubmatic.com *.bidswitch.net *.adswizz.com *.covatic.io data: blob:; font-src 'self' *.myob.com *.myobdev.com *.wistia.com fast.wistia.net *.survicate-cdn.com fonts.gstatic.com data:; object-src 'none'; frame-src 'self' *.youtube.com *.youtu.be *.wistia.com *.hubspot.com *.hsforms.com *.hsforms.net *.survicate.com *.mypurecloud.com.au app.contentful.com www.googletagmanager.com www.google.com www.recaptcha.net google.com *.doubleclick.net *.pinterest.com *.adsrvr.org *.adnxs.com *.casalemedia.com *.rubiconproject.com *.pubmatic.com *.bidswitch.net *.ninetailed.io *.widgets.ninetailed.io; frame-ancestors 'self' https://app.contentful.com; script-src 'nonce-OWQ3ODNiNDctODg0ZC00YWNiLWJmNjUtNzYxMjk5MjFhYmUx' 'strict-dynamic' 'unsafe-eval' ws: blob:; report-uri /api/csp-report; 1
default-src 'self' https://*.minecraft.jp; script-src 'self' 'unsafe-inline' 'nonce-iKYrmdyR5IdoMOCD2hHMmg' 'report-sample' https://*.minecraft.jp https://ajax.googleapis.com https://apis.google.com https://connect.facebook.net https://platform.twitter.com; style-src 'self' 'unsafe-inline' https://*.minecraft.jp; img-src 'self' data: https://*.minecraft.jp https://*.gstatic.com https://www.facebook.com; font-src 'self' data:; frame-src https://*.facebook.com https://*.twitter.com; report-uri https://report-uri.appspot.com/987875600540635136?ro=1 1
default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https://cdnapisec.kaltura.com https://epicproxy.et1240.epichosted.com https://pay.instamed.com https://stagepremier.trustcommerce.com;script-src 'nonce-e3fe26ecc122415f9d730f41aa4de08e' 'self';img-src https://* 'self' blob: data:;connect-src 'self' epichttp: https://*.app.st-1240.epiccloud.io https://*.kaltura.com https://mychart-mychart-chat-mediator.app.st-1240.epiccloud.io wss://*.webpubsub.azure.com;style-src 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none' 1
worker-src blob:; font-src fonts.gstatic.com *.kxcdn.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.ccavenue.com https://seo.mageplaza.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com connect.facebook.net graph.facebook.com business.facebook.com *.ccavenue.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.gstatic.com *.fbcdn.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.ccavenue.com *.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.google.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com www.facebook.com graph.facebook.com business.facebook.com *.ccavenue.com s7.addthis.com *.googletagmanager.com *.facebook.net www.termsfeed.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com *.fontawesome.com unsafe-inline 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.ccavenue.com ekr.zdassets.com/ *.google-analytics.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
script-src 'strict-dynamic' 'nonce-KMC1S2ywezjO1W7QvkR2rA==' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.sandbox.paypal.com https://www.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.biminitop.eu/contact; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://pagead2.googlesyndication.com https://www.googletagmanager.com https://www.google-analytics.com https://*.googlesyndication.com https://*.g.doubleclick.net https://tpc.googlesyndication.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; frame-src https://googleads.g.doubleclick.net https://*.googlesyndication.com https://*.doubleclick.net; connect-src 'self' https://*.google-analytics.com https://*.googlesyndication.com https://*.doubleclick.net; object-src 'none'; base-uri 'self' 1
font-src fonts.gstatic.com use.typekit.net *.cloudflare.com 'unsafe-inline' data: *.googleapis.com *.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.bolt.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.bolt.com https://www.google.com/recaptcha/ www.googletagmanager.com *.mercadolibre.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com *.gstatic.com *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar *.mercadolivre.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.bolt.com *.commerce-quick-checkout.com http://localhost:8082 https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-ds.com *.googleapis.com *.gstatic.com *.avada.io *.mlstatic.com *.mercadopago.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.fontawesome.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io commerce.adobe.net *.bolt.com qa-api.magedevteam.com *.sentry.io *.googleapis.com *.mercadopago.com *.mercadolibre.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://va.vercel-scripts.com https://*.vercel-insights.com https://www.googletagmanager.com https://www.google-analytics.com https://www.clarity.ms https://*.clarity.ms; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; media-src 'self' blob:; connect-src 'self' https://*.supabase.co https://api.resend.com https://va.vercel-scripts.com https://*.vercel-insights.com https://www.google-analytics.com https://region1.google-analytics.com https://www.clarity.ms https://*.clarity.ms; frame-src 'self'; form-action 'self'; base-uri 'self'; object-src 'none' 1
default-src 'self';          connect-src corvirtus.com 'self';         frame-src www.facebook.com;         script-src-elem ajax.aspnetcdn.com cdnsrc.asp.net www.google-analytics.com connect.facebook.net 'self';         style-src-elem maxcdn.bootstrapcdn.com fonts.googleapis.com 'self' 'sha256-o6wSC15InKzMdQsAjlOwalELkGSpN0I4/fzIfw2Ckvg=';         font-src maxcdn.bootstrapcdn.com fonts.googleapis.com fonts.gstatic.com 'self'; 1
font-src www.paypalobjects.com https://ewniosek.credit-agricole.pl/ https://*.typekit.net https://geowidget.easypack24.net https://wniosek.santanderconsumer.pl fonts.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: https://trustmate.io https://trustmate.pro data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://ewniosek.credit-agricole.pl/ https://online.leaselink.pl https://onlinetest.leaselink.pl www.facebook.com sandbox.przelewy24.pl secure.przelewy24.pl 'self' connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors pay.google.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.weltpixel.com https://ewniosek.credit-agricole.pl/ https://online.leaselink.pl https://onlinetest.leaselink.pl https://*.googletagmanager.com https://wniosek.eraty.pl www.facebook.com https://wniosek.santanderconsumer.pl https://*.hotjar.com https://*.googleapis.com https://*.salesmanago.pl https://*.dpd.com.pl https://*.doofinder.com https://*.clarity.ms https://c.bing.com https://*.cookiebot.eu https://*.cookiebot.com https://payment-widget-sandbox.przelewy24.pl https://payment-widget.przelewy24.pl pay.google.com apm.przelewy24.pl *.przelewy24.pl *.espago.com pudofinder.dpd.com.pl https://geowidget-app.inpost.pl/ https://sandbox-easy-geowidget.easypack24.net/ connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https://images.unsplash.com https://ewniosek.credit-agricole.pl/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://img.youtube.com https://roweroza.pl https://sprint-rowery.pl https://stage.roweroza-magento.centuria.pl https://i.ibb.co www.facebook.com https://*.usercentrics.eu https://www.google-analytics.com https://www.google.com https://*.googletagmanager.com https://*.sharethis.com https://wniosek.santanderconsumer.pl https://*.googleapis.com https://*.doofinder.com https://*.clarity.ms https://c.bing.com static.przelewy24.pl www.gstatic.com gstatic.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.gstatic.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com *.hsforms.net *.hsforms.com 'self' data: https://trustmate.io https://trustmate.pro data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ apis.google.com https://maps.googleapis.com https://player.vimeo.com player.vimeo.com https://ssl.ceneo.pl/ https://ewniosek.credit-agricole.pl/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.typekit.net www.facebook.com https://www.google-analytics.com https://platform-api.sharethis.com https://cdn.jsdelivr.net https://cdn.tmtarget.com https://cdnjs.cloudflare.com https://geowidget.easypack24.net https://biznes.furgonetka.pl https://*.googleapis.com https://*.hotjar.com https://wniosek.santanderconsumer.pl https://*.googletagmanager.com https://*.cookiebot.eu https://*.cookiebot.com https://*.newrelic.com https://*.dpd.com.pl https://*.doofinder.com https://*.clarity.ms https://c.bing.com sandbox.przelewy24.pl secure.przelewy24.pl pay.google.com apm.przelewy24.pl *.easypack24.net *.inpost.pl *.openstreetmap.org https://www.googletagmanager.com tagmanager.google.com connect.facebook.net graph.facebook.com business.facebook.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com https://trustmate.io https://trustmate.pro 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://ewniosek.credit-agricole.pl/ https://static.klaviyo.com https://*.typekit.net https://cdn.jsdelivr.net https://geowidget.easypack24.net https://wniosek.santanderconsumer.pl https://cdnjs.cloudflare.com https://*.googletagmanager.com *.googleapis.com https://*.doofinder.com https://*.clarity.ms https://c.bing.com fonts.googleapis.com *.fontawesome.com https://geowidget.inpost.pl tagmanager.google.com maxcdn.bootstrapcdn.com sandbox-easy-geowidget-sdk.easypack24.net *.gstatic.com https://trustmate.io https://trustmate.pro 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com https://ewniosek.credit-agricole.pl/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://online.leaselink.pl https://onlinetest.leaselink.pl https://*.googlesyndication.com https://*.sharethis.com https://*.typekit.net https://*.googleapis.com google.com https://*.analytics.google.com https://stats.g.doubleclick.net https://*.hotjar.com https://*.googletagmanager.com https://*.nr-data.net https://*.doofinder.com https://*.clarity.ms https://c.bing.com sandbox.przelewy24.pl secure.przelewy24.pl wss://ws.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com *.easypack24.net *.inpost.pl *.openstreetmap.org https://a.klaviyo.com https://www.google-analytics.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com t.elasticsuite.io *.hsforms.net *.hsforms.com https://trustmate.io https://trustmate.pro 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
upgrade-insecure-requests; default-src 'none'; object-src 'self'; media-src 'self'; connect-src 'self'; frame-ancestors 'none'; frame-src https://www.youtube.com; img-src 'self' data: https://www.google-analytics.com https://maps.gstatic.com https://csi.gstatic.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; script-src 'self' 'nonce-2c03e450d64094ad725da55a0c69a52ccd17cc33' 'sha256-NeueIEO8rwnaeJW0jYHRwrarPP+KzGzhk6xBJ06ntlw=' https://www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://maps.googleapis.com; 1
default-src 'self';   img-src 'self' https://i.vimeocdn.com https://cartodb-basemaps-c.global.ssl.fastly.net https://cartodb-basemaps-b.global.ssl.fastly.net https://cartodb-basemaps-a.global.ssl.fastly.net https://server.arcgisonline.com https://imgsct.cookiebot.com https://secure.gravatar.com maps.gstatic.com maps.googleapis.com *.stripe.com *.linkedin.com *.cookiepro.com www.googletagmanager.com https://*.hotjar.com data:;   script-src 'self' https://consent.cookiebot.com https://consentcdn.cookiebot.com https://yoast.com https://cdn.jsdelivr.net https://oxerambd.activehosted.com https://js.stripe.com https://connect-js.stripe.com https://*.mimecastprotect.com https://diffuser-cdn.app-us1.com https://*.googleapis.com https://*.cookiepro.com https://snap.licdn.com Https://prism.app-us1.com https://trackcmp.net https://www.googletagmanager.com https://*.hotjar.com 'unsafe-inline' 'unsafe-eval';   connect-src 'self' https://consentcdn.cookiebot.com *.googleapis.com *.linkedin.com *.cookiepro.com *.google-analytics.com www.googletagmanager.com www.google.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com;   font-src 'self' https://s0.wp.com/ https://fonts.gstatic.com https://*.hotjar.com data:;   style-src 'self' https://cdn.jsdelivr.net https://fonts.googleapis.com https://*.hotjar.com 'unsafe-inline';   frame-src 'self' https://oxera.com/ https://player.vimeo.com https://consentcdn.cookiebot.com https://www.youtube.com/ https://connect-js.stripe.com https://js.stripe.com; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com https://square-fonts-production-f.squarecdn.com/ https://d1g145x70srn7h.cloudfront.net/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com canadapost.ca ct.soa-gw.canadapost.ca soa-gw.canadapost.ca https://pci-connect.squareup.com https://connect.squareup.com https://pci-connect.squareupsandbox.com https://connect.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.certcapture.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://maps.gstatic.com store.paradoxlabs.com https://www.gstatic.com/ https://sandbox.api.cash.app/ https://site-assets.afterpay.com/ https://sandbox.web.squarecdn.com/ https://api.cash.app/ https://web.squarecdn.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com tagmanager.google.com https://www.googletagmanager.com *.certcapture.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://maps.googleapis.com https://js.squareup.com https://js.afterpay.com/ https://nd.squarecdn.com https://js.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://portal.sandbox.afterpay.com/ https://portal.afterpay.com/ https://cdn.plaid.com/ https://sandbox.kit.cash.app/ https://kit.cash.app/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.certcapture.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com maxcdn.bootstrapcdn.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://fonts.googleapis.com/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://www.google-analytics.com *.certcapture.com https://basicbiblestudies.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://maps.googleapis.com canadapost.ca ct.soa-gw.canadapost.ca soa-gw.canadapost.ca https://pci-connect.squareup.com https://pci-connect.squareupsandbox.com https://api.amplitude.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://o160250.ingest.sentry.io/ 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-EjvV2R7qA2pNHVZO+BH6Ww==' 'strict-dynamic' https: 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data:; font-src 'self' https: data:; connect-src 'self' https:; frame-src https:; form-action 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /csp-report.php; report-to csp-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.cookielaw.org https://*.onetrust.com https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://eu-images.contentstack.com https://*.contentstack.com https://*.onetrust.com https://www.googletagmanager.com https://www.google-analytics.com; font-src 'self' data:; connect-src 'self' https://*.contentstack.com https://cdn.cookielaw.org https://*.onetrust.com https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com; frame-src 'self' https://*.onetrust.com https://www.googletagmanager.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: *.boxnow.gr *.boxnow.cy *.fontawesome.com https://fonts.bunny.net *.bootstrapcdn.com *.auglio.com cdnjs.cloudflare.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.piraeusbank.gr *.vivapayments.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.boxnow.gr *.boxnow.cy x.grxchange.gr iframe.auglio.com *.twitter.com *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.boxnow.gr *.boxnow.cy https://firebasestorage.googleapis.com *.designer-images.net trustmark.gr greca-obj.adman.gr *.dustandcream.gr www.google.gr l.sharethis.com/ *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cloudfront.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.boxnow.gr *.boxnow.cy *.avada.io *.stat-track.com polyfill.io *.moosend.com static.adman.gr trustmark.gr go.linkwi.se mirror.virtooal.com greca.adman.gr tryon.auglio.com static.cloudflareinsights.com auglio.pages.dev cdn.stat-track.com platform-api.sharethis.com buttons-config.sharethis.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.piraeusbank.gr *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net *.moosend.com *.bootstrapcdn.com cdnjs.cloudflare.com use.fontawesome.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.dustandcream.gr 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.googleapis.com *.boxnow.gr *.boxnow.cy https://get.geojs.io *.avada.io *.stat-track.com *.m-pages.com *.m-operations.com greca.adman.gr static.adman.gr www.virtooal.com iframe.auglio.com t.stat-track.com forms.m-pages.com l.sharethis.com tryon.auglio.com *.cloudflare.com *.twitter.com *.twimg.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src iframe.auglio.com greca.adman.gr auglio.pages.dev 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://*.amf.se;connect-src 'self' https://*.amf.se https://amf.piwik.pro https://*.ace.teliacompany.com https://*.ace.teliacompany.net https://*.humany.net;form-action 'self' https://*.amf.se https://*.minpension.se;frame-src 'self' https://*.amf.se https://amf.fondlista.se https://dreambroker.com https://*.infogram.com https://infogram.com https://*.jobylon.com https://*.ace.teliacompany.com https://*.ace.teliacompany.net https://*.humany.net https://*.youtube-nocookie.com;font-src 'self' https://*.amf.se https://*.ace.teliacompany.com https://*.ace.teliacompany.net https://*.humany.net https://ace-knowledge-cdn.teliacompany.net;img-src 'self' data: https://*.amf.se https://amf.piwik.pro https://*.ace.teliacompany.com https://*.ace.teliacompany.net https://*.humany.net https://*.ytimg.com;media-src 'self' data: https://*.amf.se https://*.ace.teliacompany.com https://*.ace.teliacompany.net https://*.humany.net;script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://amf.piwik.pro https://*.infogram.com https://infogram.com https://*.ace.teliacompany.com https://*.ace.teliacompany.net https://*.humany.net https://*.youtube.com;style-src 'self' data: 'unsafe-inline' https://*.ace.teliacompany.com https://*.ace.teliacompany.net https://*.humany.net;report-uri /_csp_uri;report-to csp; 1
font-src webcachex-eu.datareporter.eu *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.educlub.at *.unzer.com *.datareporter.eu *.sibautomation.com *.brevo.com *.fontawesome.com https://static.unzer.com https://applepay.cdn-apple.com *.klarnacdn.net https://fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.twitter.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.twitter.com *.livechatinc.com *.doubleclick.net *.oppwa.com *.firebaseapp.com *.educlub.at *.googletagmanager.com *.unzer.com *.weltpixel.com *.klarna.com https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://h.online-metrix.net https://google.com/pay https://pay.google.com/ https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ www.xtento.com *.addthis.com *.facebook.com https://player.vimeo.com https://www.youtube-nocookie.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.reddit.com *.redditstatic.com *.doubleclick.net *.google.si *.googleusercontent.com *.oppwa.com *.facebook.net *.facebook.com *.unzer.com *.sibautomation.com *.brevo.com *.edustore.at *.klarnaevt.com *.klarnacdn.net https://static.unzer.com *.online-metrix.net https://www.gstatic.com www.xtento.com cdn.xtento.com https://images.unsplash.com *.addthisedge.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.datareporter.eu *.cloudflare.com *.twitter.com *.google-analytics.com *.google.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.piwik.pro *.facebook.net *.doubleclick.net *.tarife.at *.livechatinc.com *.reddit.com *.redditstatic.com *.tiktok.com *.educlub.at *.oppwa.com *.unzer.com *.sibautomation.com *.brevo.com *.klarna.com *.klarnacdn.net x.klarnacdn.net https://static.unzer.com https://applepay.cdn-apple.com https://pay.google.com https://code.jquery.com https://h.online-metrix.net https://h64.online-metrix.net www.xtento.com cdn.xtento.com *.klarnaservices.com *.addthis.com *.moatads.com *.addthisedge.com https://player.vimeo.com https://www.youtube.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://webcache.datareporter.eu *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.datareporter.eu *.piwik.pro *.facebook.net *.doubleclick.net *.tarife.at https://webcache-eu.datareporter.eu *.educlub.at *.oppwa.com *.unpkg.com *.unzer.com *.sibautomation.com *.brevo.com *.klarnacdn.net https://fonts.googleapis.com http://fonts.googleapis.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.datareporter.eu *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com https://swarmcrawler.datareporter.eu https://c.datareporter.eu *.livechatinc.com *.reddit.com *.redditstatic.com *.google.com *.tiktok.com *.doubleclick.net *.google-analytics.com *.googleapis.com *.educlub.at *.piwik.pro *.unzer.com *.sibautomation.com *.brevo.com *.tiktokw.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net https://api.unzer.com https://api.heidelpay.com https://sbx-api.heidelpay.com https://sbx-api.unzer.com https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://h.online-metrix.net https://h64.online-metrix.net https://google.com/pay https://www.google.com/pay https://pay.google.com https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ *.klarnaservices.com *.klarna.com https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-De10z66-4BrGNBfP9VcjlQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; font-src 'self'; img-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self'; frame-ancestors 'self'; report-uri https://account-subdomain.uriports.com/reports/report; report-to default 1
default-src 'self' https: data: blob:; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https: data:; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss: data: blob:; frame-src 'self' https: blob:; media-src 'self' https: data: blob:; worker-src 'self' blob:; manifest-src 'self' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://web.cmp.usercentrics.eu https://*.usercentrics.eu https://scoutefy.com https://adscout.io https://challenges.cloudflare.com https://static.klaviyo.com https://static-forms.klaviyo.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://www.googleadservices.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://scripts.claspo.io https://consent.cookiebot.com https://consentcdn.cookiebot.com https://maps.googleapis.com https://maps.gstatic.com https://www.paypal.com https://www.paypalobjects.com https://www.benu.bg https://maxcdn.bootstrapcdn.com https://code.jquery.com https://ajax.googleapis.com; style-src 'self' 'unsafe-inline' https://web.cmp.usercentrics.eu https://*.usercentrics.eu https://static.klaviyo.com https://www.gstatic.com https://maps.gstatic.com https://fonts.googleapis.com https://consentcdn.cookiebot.com https://scripts.claspo.io https://maxcdn.bootstrapcdn.com; img-src 'self' data: blob: https://benuimages.com https://storage.googleapis.com https://www.facebook.com https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://www.google.com https://www.googleadservices.com https://i.ytimg.com https://img.youtube.com https://maps.gstatic.com https://maps.googleapis.com https://*.googleapis.com https://www.paypalobjects.com https://www.paypal.com https://c.paypal.com https://t.paypal.com https://static.klaviyo.com https://*.klaviyo.com https://*.usercentrics.eu https://imgs.cookiebot.com https://scoutefy.com https://adscout.io https://scripts.claspo.io https://www.gstatic.com; font-src 'self' data: https://fonts.gstatic.com https://www.gstatic.com https://maxcdn.bootstrapcdn.com; connect-src 'self' https://web.cmp.usercentrics.eu https://*.usercentrics.eu https://scoutefy.com https://adscout.io https://challenges.cloudflare.com https://static.klaviyo.com https://a.klaviyo.com https://fast.a.klaviyo.com https://telemetrics.klaviyo.com https://www.klaviyo.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://www.gstatic.com https://www.facebook.com https://connect.facebook.net https://graph.facebook.com https://scripts.claspo.io https://consent.cookiebot.com https://consentcdn.cookiebot.com https://maps.googleapis.com https://places.googleapis.com https://api.sumup.com https://www.paypal.com https://www.sandbox.paypal.com https://www.paypalobjects.com https://api.rollbar.com https://mypos.eu https://www.mypos.com; frame-src 'self' https://www.googletagmanager.com https://challenges.cloudflare.com https://www.google.com https://www.gstatic.com https://www.youtube.com https://www.youtube-nocookie.com https://www.broshura.bg https://mypos.eu https://www.mypos.com https://www.paypal.com https://www.sandbox.paypal.com https://static.klaviyo.com https://www.klaviyo.com https://*.usercentrics.eu https://consent.cookiebot.com https://scripts.claspo.io https://td.doubleclick.net; worker-src 'self' blob:; media-src 'self' https:; form-action 'self' https://www.mypos.com https://mypos.eu https://www.paypal.com https://www.sandbox.paypal.com; report-uri /csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com fonts.googleapis.com *.googleapis.com data: *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://apps.elfsight.com https://*.doubleclick.net https://journey.vandentop.nl https://*.saas.innoveet.com www.google.com js.mollie.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://elfsightcdn.com https://static.elfsight.com https://*.doubleclick.net https://*.clarity.ms https://assets.cookieconfirm.com https://bat.bing.com https://bat.bing.net https://v1.widget.futy.io https://www.google.nl https://journey.vandentop.nl https://squeezely.tech https://activate.vandentop.nl https://connect.facebook.com https://connect.facebook.net https://www.facebook.com https://app.aiden.cx https://*.saas.innoveet.com maps.googleapis.com maps.gstatic.com *.googleapis.com imgsct.cookiebot.com https://firebasestorage.googleapis.com *.sooqr.com *.spotlersearch.com https://www.mollie.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com https://elfsightcdn.com https://static.elfsight.com https://*.clarity.ms https://assets.cookieconfirm.com https://bat.bing.com https://api.ipify.org https://v1.widget.futy.io https://www.google.nl https://journey.vandentop.nl https://squeezely.tech https://activate.vandentop.nl https://connect.facebook.com https://connect.facebook.net https://app.aiden.cx https://*.saas.innoveet.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ consent.cookiebot.com *.avada.io *.shopify.com *.sooqr.com *.spotlersearch.com spotlersearchanalytics.com js.mollie.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://*.saas.innoveet.com *.fontawesome.com https://fonts.bunny.net *.sooqr.com *.spotlersearch.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://service.elfsight.com https://elfsightcdn.com https://static.elfsight.com https://*.doubleclick.net https://*.clarity.ms https://assets.cookieconfirm.com https://bat.bing.com https://bat.bing.net https://api.widget.futy.io https://journey.vandentop.nl https://squeezely.tech https://activate.vandentop.nl https://connect.facebook.com https://connect.facebook.net https://www.facebook.com https://app.aiden.cx https://*.saas.innoveet.com wss://gateway.saas.innoveet.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://get.geojs.io *.avada.io *.sooqr.com *.spotlersearch.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net; img-src 'self' data: https: blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; connect-src 'self' https://api.queroapoiar.com.br https://media.queroapoiar.com.br https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com; frame-src https://www.google.com https://www.recaptcha.net; 1
default-src 'self' ; style-src 'self' 'unsafe-inline' optimize.google.com www.googletagmanager.com fonts.googleapis.com *.typekit.net *.yotpo.com *.myfonts.net *.cloudfront.net *.adyen.com; font-src 'self' data: optimize.google.com fonts.gstatic.com *.abtasty.com *.dwin1.com *.typekit.net *.livechatinc.com snap.licdn.com *.tiktok.com static.ads-twitter.com ct.pinterest.com *.yotpo.com *.addthis.com *.moatads.com *.curalate.com *.cloudflare.com *.cloudfront.net; img-src 'self' data: *; base-uri 'self' ;  form-action *; frame-ancestors 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googlesyndication.com optimize.google.com www.googletagmanager.com www.googleanalytics.com www.google-analytics.com www.googleoptimize.com www.googleadservices.com maps.googleapis.com polyfill.io player.vimeo.com connect.facebook.net *.cardinaltrusted.com *.klevu.com api.exponea.com s.pinimg.com intljs.rmtag.com assistjs.skimresources.com googleads.g.doubleclick.net bat.bing.com t.contentsquare.net track.sweetanalytics.com *.yotpo.com snap.licdn.com static.ads-twitter.com *.tiktok.com *.abtasty.com *.adobedc.net *.dwin1.com *.livechatinc.com *.voyado.com *.ksearchnet.com *.hotjar.com *.veinteractive.com *.mouseflow.com *.sleeknote.com *.stripe.com *.zdassets.com *.trustpilot.com *.clarity.ms *.addthis.com *.addthisedge.com *.moatads.com *.clearpay.co.uk *.amplitude.com *.sagepay.com snapppt.com *.snapppt.com *.onetrust.com *.convertexperiments.com *.tomandco.uk *.reviews.io *.roeyecdn.com *.marker.io *.oakandmore.co.uk *.securetrading.net *.adyen.com *.segment.com *.ecommpay.com *.google.com; connect-src 'self' mage.oakandmore.co.uk *.googlesyndication.com *.google-analytics.com *.klevu.com api.exponea.com ct.pinterest.com *.abtasty.com *.adobedc.net *.tiktok.com *.yotpo.com maps.googleapis.com vimeo.com *.addthis.com *.moatads.com *.dwin1.com *.54proxy.com *.ksearchnet.com *.hotjar.com *.hotjar.io *.zdassets.com *.clarity.ms *.amplitude.com *.sweetanalytics.com snapppt.com *.snapppt.com *.zendesk.com *.cardinaltrusted.com *.oakandmore.co.uk *.tomandco.uk *.supabase.com *.advancedcommerce.services *.onetrust.com *.convertexperiments.com *.marker.io *.securetrading.net *.adyen.com *.amazonaws.com *.segment.com; frame-src 'self' player.vimeo.com *.fls.doubleclick.net ct.pinterest.com vimeo.com secure.livechatinc.com *.addthis.com *.curalate.com *.54proxy.com *.hotjar.com *.stripe.com *.trustpilot.com *.paypal.com *.zendesk.com *.zdassets.com *.cardinaltrusted.com *.adyen.com *.ecommpay.com *.google.com *.securetrading.net; worker-src 'self' ; media-src 'self' data: ; report-uri https://sentry.c1a.tomandco.uk/api/81/security/?sentry_key=ecf7ae622b06dacf1fe3fbb0fadc531f&sentry_environment=production; report-to csp-endpoint; 1
object-src  'none'; connect-src 'self' *.oopsieanimated.com *.adulttime.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.oopsieanimated.com *.adulttime.com join.gammasecure.com; script-src 'self' *.oopsieanimated.com *.adulttime.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.oopsieanimated.com *.adulttime.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
default-src 'self' frame-ancestors 'self'; connect-src 'self' https://api.newsletter2go.com https://consent.cookiefirst.com https://edge.cookiefirst.com; script-src 'self' 'unsafe-inline' https://static.newsletter2go.com/utils.js https://consent.cookiefirst.com; font-src 'self'; style-src 'self' https://consent.cookiefirst.com 'unsafe-inline'; img-src 'self' data: https://api.newsletter2go.com https://files.newsletter2go.com; frame-src 'self' https://report.sayway.com/s/pj8vbA https://3d-tour.linsenspektrum.de/tour/ https://www.youtube-nocookie.com/embed/; worker-src 'self'; 1
default-src tpc.googlesyndication.com *.safeframe.googlesyndication.com; script-src 'strict-dynamic' 'nonce-SWfWuIj17LjamlKpHNAozwHg97NQFNtxxo+1f5rwOF3otZA+1l' 'self' 'report-sample' 'unsafe-inline' cdn.syndication.twimg.com connect.facebook.net c.files.bbci.co.uk emp.bbci.co.uk mybbc-analytics.files.bbci.co.uk nav.files.bbci.co.uk news.files.bbci.co.uk platform.twitter.com public.flourish.studio static.bbc.co.uk static.bbci.co.uk static.chartbeat.com static2.chartbeat.com www.bbc.co.uk www.instagram.com www.ons.gov.uk gn-web-assets.api.bbc.com www.google-analytics.com adservice.google.co.uk adservice.google.com *.g.doubleclick.net www.googletagservices.com cdn.ampproject.org tpc.googlesyndication.com *.adsafeprotected.com *.effectivemeasure.net *.3lift.com cdn.permutive.com sb.scorecardresearch.com bbc.gscontxt.net bitesize.files.bbci.co.uk www.tiktok.com lf16-tiktok-web.ttwstatic.com static.files.bbci.co.uk; img-src 'self' https: data:; font-src c.files.bbci.co.uk gel.files.bbci.co.uk static.files.bbci.co.uk static.bbci.co.uk news.files.bbci.co.uk ws-downloads.files.bbci.co.uk bitesize.files.bbci.co.uk; style-src branding.files.bbci.co.uk cdn.riddle.com flo.uri.sh news.files.bbci.co.uk platform.twitter.com static.bbc.co.uk static.bbci.co.uk static.files.bbci.co.uk ton.twimg.com www.riddle.com 'unsafe-inline' lf16-tiktok-web.ttwstatic.com; frame-src 'self' bbc001.carto.com bbc003.carto.com bbc-maps.carto.com *.cdn.optimizely.com cdn.riddle.com chartbeat.com emp.bbc.co.uk emp.bbc.com flo.uri.sh graphics.reuters.com www.reuters.com graphics.thomsonreuters.com dynamic.mc-cdn.io vapi.mc-cdn.io vapi.beta.mc-cdn.io elections.mapcreator.io elections.beta.mapcreator.io cdn.mapcreator.io m.facebook.com news.files.bbci.co.uk personaltaxcalculator2.deloittecloud.co.uk platform.twitter.com public.flourish.studio static2.chartbeat.com syndication.twitter.com web.facebook.com www.bbc.co.uk www.facebook.com www.instagram.com www.tiktok.com www.ons.gov.uk www.riddle.com www.youtube.com www.youtube-nocookie.com uk-script.dotmetrics.net ssp-app-uk.votenow.tv ssp-app-uktest.votenow.tv ssp-app-ukbench.votenow.tv session.test.bbc.co.uk session.bbc.co.uk session.stage.bbc.co.uk bitesize.files.bbci.co.uk *.googlesyndication.com *.doubleclick.net edigitalsurvey.com eb2.3lift.com cdn-gl.imrworldwide.com *.teads.tv bitesize.files.bbci.co.uk; object-src 'none'; manifest-src static.files.bbci.co.uk bitesize.files.bbci.co.uk; media-src 'self' blob: https:; connect-src 'self' https:; child-src blob:; base-uri 'none'; form-action 'self' platform.twitter.com syndication.twitter.com uk-script.dotmetrics.net/DeviceInfo.dotmetrics account.bbc.com/auth/identifier/landing; frame-ancestors 'none'; upgrade-insecure-requests; 1
default-src 'self'; script-src 'self' 'unsafe-inline' blob: https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://js.hs-scripts.com https://js.hsforms.net https://js.hscollectedforms.net https://js.hs-analytics.net https://js.hs-banner.com https://js.usemessages.com https://js.hubspot.com https://js.hsadspixel.net https://script.crazyegg.com https://snap.licdn.com https://connect.facebook.net https://api.aisdr.com https://www.youtube.com https://forms.hsforms.com https://api.leadpipe.com https://cdn.pixel.leadpipe.com https://gif.datasdk.ai https://js.web-interactives.hubspot.com https://pxdrop.lijit.com https://googleads.g.doubleclick.net https://static.hsappstatic.net https://s3.tradingview.com/external-embedding/embed-widget-symbol-overview.js *.wingify.net app.vwo.com *.clarity.ms https://js-na1.hs-scripts.com https://app.wingify.com https://a.omappapi.com https://api.omappapi.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com *.wingify.net app.vwo.com https://script.crazyegg.com/scripts/addons/1.0.149/survey.css https://a.omappapi.com https://api.omappapi.com; img-src 'self' data: blob: *.wingify.net https://d2o9p5vky89u4e.cloudfront.net https://px.ads.linkedin.com https://track.hubspot.com https://perf-na1.hsforms.com https://www.facebook.com https://www.google.co.uk https://www.google.lt https://www.googleadservices.com https://www.google.com.sg https://www.google.com.pk https://www.google.co.in https://www.google.mu https://www.google.co.za https://www.google.com.ph https://www.google.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://api.hubspot.com https://forms.hubspot.com https://track.hubspot.com https://api.hubapi.com https://forms.hsforms.com https://js.hs-banner.com https://hubspot-forms-static-embed-v3.s3.amazonaws.com https://script.crazyegg.com https://tracking.crazyegg.com https://pagestates-tracking.crazyegg.com https://assets-tracking.crazyegg.com https://px.ads.linkedin.com https://cta-service-cms2.hubspot.com https://www.facebook.com https://api.leadpipe.com https://api.sitelytics.tech https://www.google.com.au https://static.hsappstatic.net *.wingify.net app.vwo.com *.clarity.ms https://ad.doubleclick.net https://region1.analytics.google.com https://www.googleadservices.com https://www.googletagmanager.com https://perf-na1.hsforms.com https://hubspot-forms-static-embed.s3.amazonaws.com https://a.omappapi.com https://api.omappapi.com; media-src 'self' blob: https://d2o9p5vky89u4e.cloudfront.net https://px.ads.linkedin.com https://track.hubspot.com https://perf-na1.hsforms.com https://www.facebook.com https://www.google.co.uk https://www.google.lt https://www.googleadservices.com https://www.google.com.sg https://www.google.com.pk https://www.google.co.in https://www.google.mu https://www.google.co.za https://www.google.com.ph https://www.google.com; object-src 'none'; frame-src 'self' https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://www.googletagmanager.com https://player.vimeo.com https://forms.hubspot.com https://forms.hsforms.com https://pxdrop.lijit.com https://www.tradingview-widget.com/ https://s.tradingview.com/ *.wingify.net app.vwo.com https://www.facebook.com https://script.crazyegg.com https://a.omappapi.com https://api.omappapi.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://forms.hubspot.com https://forms.hsforms.com https://www.facebook.com; worker-src 'self' https://script.crazyegg.com blob:; upgrade-insecure-requests; report-uri https://www.janison.com/wp-json/janison-security/v1/csp-report; report-to janison-security 1
default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';frame-src 'self' https://td.doubleclick.net https://lsw-v3.instaleap.io https://imgs.signifyd.com https://h.online-metrix.net https://www.youtube.com https://getticket.automercado.cr:8093 https://lcx-player.bambuser.com https://ik.imagekit.io https://m-ae90520f-c10b-4cec-a566-6d47870f385f.us.omnichannelengagementhub.com https://oc-cdn-ocprod.azureedge.net;img-src 'self' https: data: blob:;object-src 'none';script-src 'self' https://maps.googleapis.com https://edge.fullstory.com https://www.googletagmanager.com https://dev.visualwebsiteoptimizer.com https://oc-cdn-ocprod.azureedge.net https://m-ae90520f-c10b-4cec-a566-6d47870f385f.us.omnichannelengagementhub.com https://xandar-lsw-v3.instaleap.io/ https: 'unsafe-inline';script-src-attr 'unsafe-inline';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests;connect-src 'self' https: https://maps.googleapis.com https://edge.fullstory.com https://www.googletagmanager.com https://dev.visualwebsiteoptimizer.com https://oc-cdn-ocprod.azureedge.net https://m-ae90520f-c10b-4cec-a566-6d47870f385f.us.omnichannelengagementhub.com https://xandar-lsw-v3.instaleap.io/;media-src 'self' https:;worker-src 'self' blob:;; report-to csp-endpoint 1
default-src 'self'; form-action 'self' https://request.qlar.com; base-uri 'none'; frame-ancestors 'none'; object-src 'none'; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://ad.doubleclick.net https://google.com https://*.google.com https://*.google.de https://*.google.es https://*.google.co.in https://*.google.co.jp https://*.google.co.uk https://*.ads.linkedin.com https://t.visitorqueue.com; frame-src 'self' https://request.qlar.com https://td.doubleclick.net https://*.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://www.recaptcha.net; script-src 'strict-dynamic' 'nonce-CgzRBaRR9l3uFufs4Bpb1RZUV9dtL7mBtRymf8sr' 'self' https://www.googleadservices.com https://www.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://www.googletagmanager.com https://*.googletagmanager.com https://snap.licdn.com https://t.visitorqueue.com https://online.flippingbook.com https://d33i2vgywgme2s.cloudfront.net https://request.qlar.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://googleads.g.doubleclick.net  https://pagead2.googlesyndication.com https://www.googleadservices.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://google.com https://*.google.com https://*.google.de https://*.google.es https://*.google.co.in https://*.google.co.jp https://*.google.co.uk https://*.ads.linkedin.com https://t.visitorqueue.com; report-uri https://www.qlar.com/api/report/csp; report-to csp-endpoint; upgrade-insecure-requests; block-all-mixed-content 1
report-to *.usercentrics.eu; font-src https://www.googletagmanager.com *.googleapis.com *.gstatic.com https://eadn-wc01-16164980.nxedge.io https://geowidget.easypack24.net maxcdn.bootstrapcdn.com https://widgets.trustedshops.com *.fontawesome.com *.usercentrics.eu data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.usercentrics.eu 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://eadn-wc01-16164980.nxedge.io *.cookiebot.eu *.googletagmanager.com *.newrelic.com *.google.com https://geowidget-app.inpost.pl/ https://sandbox-easy-geowidget.easypack24.net/ secure.payu.com merch-prod.snd.payu.com *.usercentrics.eu 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com https://images.unsplash.com *.googleapis.com https://eadn-wc01-16164980.nxedge.io https://integrations.etrusted.com *.clarity.ms https://c.bing.com *.google.pl *.facebook.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org static.payu.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com *.usercentrics.eu data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com tagmanager.google.com https://www.googletagmanager.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js *.googleapis.com *.gstatic.com https://eadn-wc01-16164980.nxedge.io https://ai-data *.newrelic.com *.clarity.ms *.cookiebot.eu *.facebook.net https://id1247.entirem.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org secure.payu.com secure.snd.payu.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.avada.io *.usercentrics.eu 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com fonts.googleapis.com https://eadn-wc01-16164980.nxedge.io https://integrations.etrusted.com https://geowidget.easypack24.net https://geowidget.inpost.pl maxcdn.bootstrapcdn.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.fontawesome.com *.usercentrics.eu 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://eadn-wc01-16164980.nxedge.io https://dfr4rssi07fv7.cloudfront.net https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://www.google-analytics.com *.googleapis.com https://eadn-wc01-16164980.nxedge.io *.clarity.ms *.google-analytics.com *.cookiebot.eu *.nr-data.net *.newrelic.com *.googlesyndication.com *.doubleclick.net *.facebook.com https://id1247.entirem.com *.easypack24.net *.inpost.pl *.openstreetmap.org secure.payu.com merch-prod.snd.payu.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://get.geojs.io *.avada.io *.usercentrics.eu 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com data: *.fontawesome.com *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com https://applepay.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.addthis.com www.googletagmanager.com www.facebook.com platform.twitter.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://applepay.cdn-apple.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://meetanshi.com/media/logo.png https://at19.net https://bdt9.net https://ds1.nl https://dt51.net https://dt61.net https://fr135.net https://glp8.net https://jdt8.net https://jf79.net https://hs82.net https://lt45.net https://mt74.net https://ndt5.net https://rkn3.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.alothemes.com *.magepow.com *.google.com *.googleadservices.com *.googletagmanager.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com https://static.buckaroo.nl https://www.buckaroo.nl https://www.paypalobjects.com https://pay.google.com https://developers.google.com https://applepay.cdn-apple.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.fontawesome.com downloads.mailchimp.com *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; connect-src https://tagging.versaantafel.nl dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.addthis.com *.alothemes.com *.magepow.com *.googletagmanager.com stats.g.doubleclick.net https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://applepay.buckaroo.io https://smp-paymentservices.apple.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https: 'self' 'unsafe-inline'; script-src https://tagging.versaantafel.nl assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.alothemes.com *.magepow.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com twitter.com platform.twitter.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com https://www.sandbox.paypal.com https://applepay.cdn-apple.com https://pay.google.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io tagmanager.google.com https://chimpstatic.com https: 'self' 'unsafe-inline' 'unsafe-eval'; 1
font-src *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://plumrocket.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.awin1.com *.zenaps.com *.fls.doubleclick.net https://plumrocket.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.awin1.com *.zenaps.com *.wepowerconnections.com *.akamaihd.net *.ebit.com.br *.ebitemptresa.com.br www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com *.ebit.com.br www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.k-analytix.com *.cloudfront.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.ebit.com.br *.googleapis.com *.cloudfront.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.wepowerconnections.com https://the.sciencebehindecommerce.com *.akamaihd.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.konduto.com *.edrone.me api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.adyen.com pay.google.com payments-eu.amazon.com *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.adyen.com pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src https://assets.adobedtm.com https://amcglobal.sc.omtrdc.net dpm.demdex.net https://cm.everesttech.net https://*.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com https://*.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://validator.swagger.io https://*.adyen.com pay.google.com *.payments-amazon.com *.media-amazon.com *.paypalobjects.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://api.allabeslag.se https://analytics.google.com https://*.behance.net https://assets.braintreegateway.com https://dpm.demdex.net https://*.disqus.com https://googleads.g.doubleclick.net https://bid.g.doubleclick.net https://www.facebook.com https://*.ftcdn.net https://www.google.com https://www.googleadservices.com https://www.google-analytics.com https://*.google.co.uk https://*.google.at https://*.google.be https://*.google.cz https://*.google.de https://*.google.dk https://*.google.ee https://*.google.es https://*.google.fi https://*.google.fr https://*.google.hu https://*.google.ie https://*.google.it https://*.google.lt https://*.google.lv https://*.google.nl https://*.google.no https://*.google.pl https://*.google.pt https://*.google.se https://www.googletagmanager.com https://*.gstatic.com https://*.hsforms.net https://*.hsforms.com https://magefan.com https://cm.magefan.com https://widgets.magentocommerce.com https://*.media-amazon.com https://pay.google.com https://*.payments-amazon.com https://www.paypal.com https://c.paypal.com https://checkout.paypal.com https://t.paypal.com https://fpdbs.paypal.com https://www.paypalobjects.com https://www.sandbox.paypal.com https://fpdbs.sandbox.paypal.com https://b.stats.paypal.com https://dub.stats.paypal.com https://*.typekit.net https://p.typekit.net https://*.usercentrics.eu https://*.vimeocdn.com https://i.ytimg.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com https://*.ratepay.com tagmanager.google.com https://www.googletagmanager.com https://browser.sentry-cdn.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com https://*.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.googletagmanager.com https://*.snrcdn.net https://*.snrbox.com https://*.ekomiapps.de https://assets.adobedtm.com https://*.adobe.com https://*.adyen.com https://analytics.google.com https://api.braintreegateway.com https://client-analytics.braintreegateway.com https://js.braintreegateway.com https://api.sandbox.braintreegateway.com https://client-analytics.sandbox.braintreegateway.com https://1eafapi.cardinalcommerce.com https://1eafstag.cardinalcommerce.com https://geoapi.cardinalcommerce.com https://geostag.cardinalcommerce.com https://songbird.cardinalcommerce.com https://songbirdstag.cardinalcommerce.com https://capi-automation.s3.us-east-2.amazonaws.com https://includestest.ccdc02.com https://*.cdn-apple.com https://*.commerce-payment-services.com https://*.disqus.com https://*.g.doubleclick.net https://connect.facebook.net https://www.googleadservices.com https://www.google-analytics.com https://www.googleapis.com https://google.com https://*.googletagmanager.com https://*.google.com https://www.gstatic.com https://*.hsforms.com https://*.hsforms.net https://cdn.kiprotect.com https://*.magento-ds.com https://*.newrelic.com https://*.nr-data.net https://pay.google.com https://*.payments-amazon.com https://www.paypalobjects.com https://www.sandbox.paypal.com https://www.paypal.com https://*.paypal.com https://t.paypal.com https://s.pinimg.com https://ct.pinterest.com https://tagmanager.google.com https://*.typekit.net https://use.typekit.net https://*.usercentrics.eu https://*.vimeocdn.com https://vimeo.com https://*.youtube.com https://s.ytimg.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com https://*.adobe.com https://assets.braintreegateway.com https://*.fontawesome.com https://fonts.googleapis.com https://*.googleapis.com https://*.gstatic.com https://cdn.kiprotect.com https://tagmanager.google.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.adyen.com payments-eu.amazon.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.ingest.sentry.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://*.adobe.io https://ad.doubleclick.net https://*.adyen.com https://analytics.google.com https://*.avada.io https://*.braintree-api.com https://api.braintreegateway.com https://client-analytics.braintreegateway.com https://api.sandbox.braintreegateway.com https://client-analytics.sandbox.braintreegateway.com https://1eaf.cardinalcommerce.com https://1eafstag.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://centinelapistag.cardinalcommerce.com https://*.cardinalcommerce.com https://geo.cardinalcommerce.com https://geostag.cardinalcommerce.com https://dpm.demdex.net t.elasticsuite.io https://www.googleadservices.com https://google.com https://www.google.pl https://pagead2.googlesyndication.com https://*.googletagmanager.com https://*.google.com https://*.hsforms.com https://*.hsforms.net https://*.newrelic.com https://*.nr-data.net https://amcglobal.sc.omtrdc.net https://payments-eu.amazon.com https://www.paypal.com https://www.paypalobjects.com https://pilot-payflowlink.paypal.com https://www.sandbox.paypal.com https://s.pinimg.com https://ct.pinterest.com https://*.sentry.io https://sl-11a463aaedf44600a99367660fd6fa70.ecs.us-east-1.on.aws https://*.g.doubleclick.net https://performance.typekit.net https://*.usercentrics.eu https://vimeo.com *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.googleapis.com *.gstatic.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.avada.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
upgrade-insecure-requests; default-src 'none'; object-src 'self'; media-src 'self'; connect-src 'self'; frame-ancestors 'none'; frame-src https://www.youtube.com; img-src 'self' data: https://www.google-analytics.com https://maps.gstatic.com https://csi.gstatic.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; script-src 'self' 'nonce-ee3a905b7803008378bc591b397dcb0cf1ce53da' 'sha256-NeueIEO8rwnaeJW0jYHRwrarPP+KzGzhk6xBJ06ntlw=' https://www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://maps.googleapis.com; 1
upgrade-insecure-requests; default-src 'none'; object-src 'self'; media-src 'self'; connect-src 'self'; frame-ancestors 'none'; frame-src https://www.youtube.com; img-src 'self' data: https://www.google-analytics.com https://maps.gstatic.com https://csi.gstatic.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; script-src 'self' 'nonce-45c8b6586669b96494cffab51ac02c2abeff92dc' 'sha256-NeueIEO8rwnaeJW0jYHRwrarPP+KzGzhk6xBJ06ntlw=' https://www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://maps.googleapis.com; 1
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * services.paytrail.com paytrail.com *.paytrail.com epmt.nordea.fi *.nordea.com verkkopankki.danskebank.fi online.s-pankki.fi verkkomaksu.poppankki.fi verkkomaksu.omasp.fi auth.aktia.fi verkkomaksu.handelsbanken.fi verkkomaksu.saastopankki.fi online.alandsbanken.fi maksu.pivo.fi qa-maksu.pivo.fi v1-hub-staging.sph-test-solinor.com v1.api.paymenthighway.io *.paymenthighway.io *.mobilepay.fi 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com cdn2.hubspot.net resources.paytrail.com https://log.pinterest.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com services.paytrail.com resources.paytrail.com https://chimpstatic.com https://assets.pinterest.com bnSQZ2z9YDOGs4NgOKjSdQtzYlkZxVoLxk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com downloads.mailchimp.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com *.paytrail.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com cash-f.squarecdn.com fonts.googleapis.com x.klarnacdn.net cdn.elev.io maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ * ct.pinterest.com td.doubleclick.net *.snapchat.com messenger-edge.dixa.io messenger.dixa.io www.googletagmanager.com facebook.com *.facebook.com *.dialogintelligens.dk js.mollie.com *.klarna.com *.trustpilot.com www.ditur.no *.www.ditur.no 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com *.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io * https://images.unsplash.com *.google.com *.google.dk *.facebook.com bat.bing.com bat.bing.net stats.g.doubleclick.net *.sleeknote.com parametre.online *.snapchat.com *.etrusted.com *.trustedshops.com *.reddit.com raw.githubusercontent.com bzr.openai.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com https://www.magezon.com https://www.mollie.com https://redchamps.com *.klarna.com *.klarnaevt.com *.klarnacdn.net www.ditur.no *.www.ditur.no data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com *.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://maps.googleapis.com https://player.vimeo.com *.facebook.net script.parametre.online ct.pinterest.com s.pinimg.com bat.bing.com *.tiktok.com *.sleeknote.com *.cloudfront.net *.fontawesome.com messenger.dixa.io sc-static.net tr.snapchat.com cdn.elev.io *.clarity.ms checkout.reepay.com static.cloudflareinsights.com *.trustedshops.com *.etrusted.com *.posthog.com *.impactcdn.com www.redditstatic.com dialogintelligens.github.io bzrcdn.openai.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com js.mollie.com *.reepay.com *.klarnacdn.net *.klarna.com *.profitmetrics.io *.trustpilot.com www.ditur.no *.www.ditur.no 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cash.app x.klarnacdn.net fonts.googleapis.com *.etrusted.com https://static.klaviyo.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com * https://maps.googleapis.com https://player.vimeo.com google.com *.google.com googleads.g.doubleclick.net *.pinterest.com *.tiktok.com *.fontawesome.com bat.bing.com bat.bing.net invitejs.trustpilot.com *.snapchat.com messenger-edge.dixa.io region1.google-analytics.com *.elev.io *.clarity.ms pagead2.googlesyndication.com *.etrusted.com analytics.sleeknote.com/ *.posthog.com *.impactcdn.com *.config-security.com *.reddit.com *.dialogintelligens.dk bzr.openai.com bzrcdn.openai.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io *.klarnacdn.net *.klarna.com *.klarnaevt.com *.profitmetrics.io www.ditur.no *.www.ditur.no 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-9AsZmCQUi6WDeXfQweUv_w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://trustmate.io https://www.snrcdn.net https://*.clarity.ms; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://trustmate.io https://www.snrcdn.net; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.algolia.net https://*.algolianet.com https://cdn.sanity.io https://trustmate.io https://www.snrcdn.net https://api.synerise.com https://*.synerise.com https://*.clarity.ms https://api.mamyito.pl https://sentry.mamyito.org; frame-src 'self' https://www.googletagmanager.com; media-src 'self'; worker-src 'self' blob: 1
font-src https://www.googletagmanager.com *.googleapis.com *.gstatic.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com *.ap-gateway.mastercard.com *.mastercard.com www.googletagmanager.com googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.gstatic.com 'self' data: blob: 'unsafe-inline' data: *.ap-gateway.mastercard.com *.mastercard.com *.clarity.ms c.bing.com www.google.co.in data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.ap-gateway.mastercard.com ap-gateway.mastercard.com *.mastercard.com *.clarity.ms www.clarity.ms c.bing.com *.cloudflareinsights.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://fonts.googleapis.com maxcdn.bootstrapcdn.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://maps.googleapis.com https://player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.clarity.ms www.clarity.ms c.bing.com *.cloudflareinsights.com www.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https: 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com client.cardinaltrusted.com cas.client.cardinaltrusted.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.googletagmanager.com *.doubleclick.net insight.adsrvr.org *.cybersource.com writer.cardinalcommerce.com client.cardinaltrusted.com cas.client.cardinaltrusted.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com *.disqus.com *.linkedin.com www.facebook.com *.doubleclick.net www.google.co.nz *.google.co.nz data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.disqus.com cdnjs.cloudflare.com connect.facebook.net snap.licdn.com js.adsrvr.org *.cybersource.com writer.cardinalcommerce.com client.cardinaltrusted.com cas.client.cardinaltrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fonts.net *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net analytics.google.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com cdnjs.cloudflare.com www.google.com writer.cardinalcommerce.com client.cardinaltrusted.com cas.client.cardinaltrusted.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com fonts.googleapis.com *.googleapis.com data: https://www.googletagmanager.com *.fontawesome.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.certcapture.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * js.mollie.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.certcapture.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://www.mollie.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.certcapture.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com js.mollie.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.certcapture.com *.fontawesome.com assets.braintreegateway.com downloads.mailchimp.com https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.magento-datasolutions.com *.magento-ds.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.certcapture.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' api.herefish.com js.zi-scripts.com js.adsrvr.org tags.clickagy.com www.redditstatic.com www.googletagmanager.com www.google-analytics.com ssl.google-analytics.com cdn.segment.com cdn.amplitude.com js.hs-scripts.com js.hsforms.net js.hscta.net js.hs-analytics.net js.hscollectedforms.net js.hsadspixel.net js.hs-banner.com *.demandbase.com *.appcast.io *.talkdesk.com cdn.cookielaw.org *.cookielaw.org connect.facebook.net snap.licdn.com bat.bing.com js.monitor.azure.com chatsupport.employbridge.com *.optimizely.com optimizely.s3.amazonaws.com cdn-assets-prod.s3.amazonaws.com www.google.com www.gstatic.com www.youtube.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.optimizely.com; font-src 'self' data: fonts.gstatic.com; img-src 'self' data: blob: www.google-analytics.com www.google.com www.googletagmanager.com www.facebook.com px.ads.linkedin.com px4.ads.linkedin.com *.hubspot.com track.hubspot.com forms.hsforms.com *.demandbase.com segments.company-target.com bat.bing.com id.rlcdn.com www.gstatic.com *.dxcloud.episerver.net aorta.clickagy.com cdn.optimizely.com cdn.cookielaw.org *.cookielaw.org; connect-src 'self' api.segment.io cdn.segment.com api2.amplitude.com api.amplitude.com api.hubspot.com api.hsforms.com api.hubapi.com track.hubspot.com forms.hscollectedforms.net *.appsync-api.us-west-2.amazonaws.com maps.googleapis.com recaptchaenterprise.googleapis.com api.ipify.org www.google-analytics.com analytics.google.com stats.g.doubleclick.net pagead2.googlesyndication.com *.demandbase.com *.talkdesk.com api.company-target.com px.ads.linkedin.com dc.services.visualstudio.com insight.adsrvr.org chatsupport.employbridge.com pixel-config.reddit.com ws.zoominfo.com js.zi-scripts.com logx.optimizely.com *.optimizely.com cdn.cookielaw.org geolocation.onetrust.com privacyportal.onetrust.com; frame-src 'self' www.youtube.com www.google.com www.facebook.com *.hubspot.com app.hubspot.com chatsupport.employbridge.com s.company-target.com match.adsrvr.org insight.adsrvr.org a21002372803.cdn.optimizely.com a21002372803.cdn-pci.optimizely.com; object-src 'none'; base-uri 'self'; worker-src 'self' blob:; report-to csp-endpoint; report-uri /api/cspreport/report 1
object-src 'none';base-uri 'self';script-src 'nonce-luWMtH_acZuYjoETGC4WKg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com fonts.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.googleapis.com *.vitalia-reformhaus.de data: https://widgets.trustedshops.com *.consentmanager.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cleverreach.com *.twitter.com *.vitalia-reformhaus.de www.facebook.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.twitter.com *.vitalia-reformhaus.de *.weltpixel.com *.googletagmanager.com *.doubleclick.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io maps.googleapis.com maps.gstatic.com *.cloudfront.net *.cloudflare.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com www.facebook.com *.vitalia-reformhaus.de *.cloudflare.net *.google.com *.trustedshops.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com cdn.pay1.de x.klarnacdn.net m.media-amazon.com static-eu.payments-amazon.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com *.consentmanager.net *.cdninstagram.com *.fbcdn.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com *.cloudflare.com *.twitter.com *.twimg.com *.fontawesome.com *.googletagmanager.com *.vitalia-reformhaus.de *.trustedshops.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.consentmanager.net ajax.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.instagram.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.vitalia-reformhaus.de *.tagmanager.google.com *.googletagmanager.com assets.braintreegateway.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.consentmanager.net tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.cloudflare.com *.twitter.com *.twimg.com *.vitalia-reformhaus.de www.google.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.consentmanager.net https://www.google-analytics.com *.instagram.com *.googleusercontent.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.googletagmanager.com https://connect.facebook.net https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.clarity.ms; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; img-src 'self' data: https://www.google.com https://www.google.com.tr; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com; connect-src 'self' https://ads/ga-audiences https://connect.facebook.net https://td.doubleclick.net https://www.google.com https://analytics.google.com https://www.google-analytics.com; frame-src 'self' https://td.doubleclick.net https://www.googletagmanager.com; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com applepay.cdn-apple.com 'self' data: *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardlink.gr *.alphaecommerce.gr *.eurocommerce.gr int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com pay.google.com applepay.cdn-apple.com *.facebook.com *.skroutz.gr *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com cdn.klarna.com www.gstatic.com pay.google.com applepay.cdn-apple.com *.linkwi.se *.google.com pagead2.googlesyndication.com *.glami.gr *.iconify.design *.skroutz.gr *.quantserve.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com chimpstatic.com downloads.mailchimp.com *.list-manage.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com www.google.com www.gstatic.com pay.google.com applepay.cdn-apple.com *.facebook.net *.facebook.com *.linkwi.se *.cookiefirst.com *.bestprice.gr *.glami.gr *.iconify.design *.skroutz.gr *.jsdelivr.net *.quantserve.com *.quantcount.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com downloads.mailchimp.com *.jsdelivr.net *.jquery.com *.cookiefirst.com *.fontawesome.com assets.braintreegateway.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com pay.google.com applepay.cdn-apple.com *.cookiefirst.com *.bestprice.gr pagead2.googlesyndication.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://*.appsflyer.com https://connect.facebook.net https://challenges.cloudflare.com https://*.webflow.com https://assets.website-files.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.webflow.com https://assets.website-files.com; font-src 'self' https://fonts.gstatic.com https://*.webflow.com https://assets.website-files.com data:; img-src 'self' data: https:; connect-src 'self' https://backend-api.truthly.ai https://staging.api.truthly.ai https://*.execute-api.us-east-1.amazonaws.com https://api.mixpanel.com https://www.google-analytics.com https://*.appsflyer.com https://*.appsflyersdk.com https://connect.facebook.net https://www.facebook.com https://onelink.me https://*.onelink.me https://*.sentry.io https://assets.mailerlite.com; frame-src 'self' https://challenges.cloudflare.com https://player.vimeo.com; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; form-action 'self' https://signup.truthly.ai https://staging.signup.truthly.ai; report-uri https://o4510762256367616.ingest.us.sentry.io/api/4511543420846080/security/?sentry_key=d49e9b2cf1d37b5b18735585ad96e6f6&sentry_environment=production; report-to csp-endpoint 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://www.gstatic.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com https://maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://accounts.google.com https://*.google.com https://*.hotjar.com https://vars.hotjar.com https://www.facebook.com https://*.criteo.com https://gum.criteo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com public.montonio.com https://www.facebook.com https://www.google.com https://www.google.ee https://www.google-analytics.com rx.apotheka.lv data: http: https: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com public.montonio.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net rx.apotheka.lv http: https: 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com maxcdn.bootstrapcdn.com https://maxcdn.bootstrapcdn.com rx.apotheka.lv http: https: 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://www.google-analytics.com https://stats.g.doubleclick.net rx.apotheka.lv http: https: wss: 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri https://www.hop.fr; default-src 'self' https://www.hop.fr; script-src 'self' https://www.hop.fr/* 'unsafe-inline'; style-src 'self' https://www.hop.fr/* 'unsafe-inline'; font-src 'self' data: ; 1
script-src 'nonce-jNHwuzKJ5KJbuwychHSz3A==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https://events.mercadolibre.com/csp/reports?identifier=Avyj0s3p2xLmT5-RgQyIZUpiMPPIj-yXZLCxxnrr3OyTIo4PSsnS5jU9g3thAQWKptWJ&policy_id=28711&user_id=&request_id=0b5cccd7-093b-4ca5-a7a9-6ac58d4ac15a; report-to csp-endpoint-avyjspxlmtrgqyizupimppijyxzlcxxnrroytiopssnsjugthaqwkptwj; object-src https://http2.mlstatic.com/ https://mlstaticquic-a.akamaihd.net/; frame-ancestors 'self' https://*.mercadolibre.cl:* https://*.mercadolibre.com:* https://*.mercadolibre.com.ve:* https://*.mercadolibre.com.ar:* https://*.mercadolivre.com.br:* https://*.mercadolibre.com.co:* https://*.mercadolibre.com.ec:* https://*.mercadolibre.com.mx:* https://*.mercadolibre.com.pe:* https://*.mercadolibre.com.uy:* https://*.mercadopago.cl:* https://*.mercadopago.com.ar:* https://*.mercadopago.com.br:* https://*.mercadopago.com.co:* https://*.mercadopago.com.mx:* https://*.mercadopago.com.pe:* https://*.mercadopago.com.uy:* https://*.mercadopago.com.ve:* https://*.mercadopago.com:* https://*.adminml.com:* https://*.mercadolibre.co.cr:* https://*.mercadolibre.com.pa:* https://*.mercadolibre.com.do:* https://*.mercadolibre.com.bo:* https://*.mercadolibre.com.py:* https://*.mercadolibre.com.gt:* https://*.mercadolibre.com.hn:* https://*.mercadolibre.com.ni:* https://*.mercadolibre.com.sv:* https://*.mercadopago.com.ec:* https://*.portalinmobiliario.com:* https://*.mercadolivre.com:* 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.fontawesome.com https://fonts.bunny.net *.bootstrapcdn.com *.cloudflare.com *.googleusercontent.com *.jsdelivr.net *.slant.co unpkg.com data: 'self' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.2c2p.com *.americanexpress.com *.arcot.com *.cardinalcommerce.com *.citibank.com *.ctbcbank.com *.dnp-cdms.jp *.inicis.com *.ipay88.com.my *.unionpay.com *.uobgroup.com 'self' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.weltpixel.com *.americanexpress.com *.arcot.com *.cardinalcommerce.com *.citibank.com *.ctbcbank.com *.dnp-cdms.jp *.inicis.com *.unionpay.com *.uobgroup.com 'self' 'unsafe-eval' 'unsafe-hashes'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com k.kakaocdn.net https://firebasestorage.googleapis.com *.inicis.com *.afterpay.com *.doubleclick.net *.elcompanies.com www.google.ad www.google.at www.google.co.id www.google.co.in www.google.co.jp www.google.co.kr www.google.com.au www.google.com.bd www.google.com.co www.google.com.hk www.google.com.mt www.google.com.my www.google.com.ph www.google.com.sg www.google.com.tw www.google.com.vn www.google.co.th www.google.co.uk www.google.co.za www.google.de www.google.dk www.google.es www.google.fr www.google.ie www.google.it www.google.nl www.google.se *.google.com *.googletagmanager.com *.googleusercontent.com *.hstatic.net *.naver.com *.thecompanystore.com.sg data: 'self' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://api.addressfinder.io *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.googleapis.com *.gstatic.com developers.kakao.com *.kakaocdn.net *.avada.io *.shopify.com *.inicis.com *.facebook.net *.google-analytics.com *.googletagmanager.com 'self' 'unsafe-eval' 'unsafe-hashes' 'nonce-ajd2ZmtvcDR2ajZzNTV6azB1czAwaWhza254a2x6Ym8=' 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY/CkTMBhjNhwPvglpYumjx31B4fjkY8=' 'sha256-XGfPSYcBWPq7sx/ucAvvEcAKkiSRS2GeZReWO0f5vXQ='; style-src *.adobe.com fonts.googleapis.com https://api.addressfinder.io *.cash.app *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.fontawesome.com https://fonts.bunny.net *.inicis.com *.googleapis.com *.gstatic.com *.jsdelivr.net 'self' 'unsafe-eval' 'unsafe-hashes'; object-src 'self'; media-src *.adobe.com *.gstatic.com 'self' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://api.addressfinder.io * *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com *.googleapis.com kauth.kakao.com https://get.geojs.io *.avada.io *.inicis.com *.doubleclick.net www.google.ad www.google.at www.google.co.id www.google.co.in www.google.co.jp www.google.co.kr www.google.com.au www.google.com.bd www.google.com.hk www.google.com.mt www.google.com.my www.google.com.ph www.google.com.sg www.google.com.tw www.google.com.vn www.google.co.th www.google.co.za www.google.de www.google.dk www.google.es www.google.fr www.google.ie www.google.it www.google.nl *.googletagmanager.com 'self' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self'; default-src 'self'; base-uri 'self'; report-uri https://22c8dc48-d20f-4b81-a782-677a04e4a778.sansec.watch/; report-to report-endpoint; 1
object-src 'none'; script-src 'self' cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.jquery.com https://flex.cybersource.com https://testflex.cybersource.com https://unpkg.com https://vjs.zencdn.net; script-src-attr 'self'; style-src 'self' https://cdn.jsdelivr.net https://unpkg.com https://vjs.zencdn.net; style-src-attr 'self'; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com https://www.paypal.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.mondu.ai/ *.mondu.local localhost:*/ *.weltpixel.com *.googletagmanager.com *.doubleclick.net www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.ftcdn.net *.behance.net https://images.unsplash.com https://portal.payconiq.com https://static.buckaroo.nl https://www.paypalobjects.com magefan.com cm.magefan.com *.disqus.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://img.youtube.com *.mondu.ai/ *.hsforms.net *.hsforms.com 'self' data: *.gstatic.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com www.xtento.com cdn.xtento.com bat.bing.com www.facebook.com www.google.nl www.btndehaas.nl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://maps.googleapis.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io *.disqus.com https://cdn.jsdelivr.net *.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.mondu.ai/widget.js *.mondu.local/widget.js localhost:*/dist/widget.js *.hsforms.net *.hsforms.com *.gstatic.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net www.xtento.com cdn.xtento.com d5yoctgpv4cpx.cloudfront.net bat.bing.com cdn.cookie-script.com connect.facebook.net js-agent.newrelic.com static.hotjar.com script.hotjar.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://cdn.jsdelivr.net https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com *.googleapis.com *.gstatic.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io https://maps.googleapis.com https://player.vimeo.com wss://websocketservice-externalapi.prod.buckaroo.io https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://applepay.buckaroo.io https://www.paypal.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app p2iqhncxyh.execute-api.eu-central-1.amazonaws.com l.clarity.ms bam.nr-data.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com bat.bing.com l.clarity.ms bam.nr-data.net www.google.com bat.bing.net pagead2.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';script-src 'nonce-fbdc3180f7241dd7b6a7f53b8f939c354b8929e4' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' 'report-sample' https:;script-src-attr 'unsafe-inline';report-uri https://www.startpagina.be/ajax/csp_report_uri; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://bloeise.nl https://*.bloeise.nl https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.gstatic.com https://*.jsdelivr.net https://a.mailmunch.co https://code.jquery.com https://ajax.googleapis.com https://*.tiktok.com https://*.ttwstatic.com https://platform.twitter.com https://*.youtube.com https://www.instagram.com https://ustat.info https://openstat.eu; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://bloeise.nl https://*.bloeise.nl https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.gstatic.com https://*.jsdelivr.net https://a.mailmunch.co https://code.jquery.com https://ajax.googleapis.com https://*.tiktok.com https://*.ttwstatic.com https://platform.twitter.com https://*.youtube.com https://www.instagram.com https://ustat.info https://openstat.eu *.mailmunch.co *.cloudfront.net *.piwikpro.com; style-src 'self' 'unsafe-inline' https://bloeise.nl https://*.bloeise.nl https://fonts.googleapis.com https://*.gstatic.com https://*.jsdelivr.net https://stackpath.bootstrapcdn.com https://pro.fontawesome.com https://a.mailmunch.co https://*.ttwstatic.com; style-src-elem 'self' blob: 'unsafe-inline' https://bloeise.nl https://*.bloeise.nl https://fonts.googleapis.com https://*.gstatic.com https://*.jsdelivr.net https://stackpath.bootstrapcdn.com https://pro.fontawesome.com https://a.mailmunch.co https://*.ttwstatic.com; img-src 'self' data: blob: https: https://bloeise.nl https://*.bloeise.nl https://a.mailmunch.co https://*.ytimg.com https://*.twimg.com https://*.tiktok.com https://*.facebook.com https://*.instagram.com; font-src 'self' data: https://bloeise.nl https://*.bloeise.nl https://fonts.gstatic.com https://*.jsdelivr.net https://pro.fontawesome.com https://s0.wp.com https://cdn.scite.ai; connect-src 'self' https://bloeise.nl https://*.bloeise.nl https://*.google.com https://*.google.nl https://*.google.be https://*.google.co.ke https://*.google.ph https://*.google.co.id https://*.google.co.th https://*.google.es https://www.google.de https://*.google.is https://*.google.am https://*.google.com.eg https://*.google.sr https://*.google.com.ar https://*.google.it https://*.google.se https://*.google.co.uk https://*.google.com.ua https://*.google.co.in https://*.google.co.tz https://*.google.al https://*.google.bg https://*.google.mk https://*.google.fr https://*.google.com.mx https://*.google.com.pk https://*.googleadservices.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://a.mailmunch.co https://forms.mailmunch.co https://*.tiktok.com https://overbridgenet.com; media-src 'self' https://bloeise.nl https://*.bloeise.nl; worker-src 'self' blob:; child-src 'self' blob: https://*.google.com https://a.mailmunch.co https://*.youtube.com https://*.tiktok.com; frame-src 'self' https://*.google.com https://*.gstatic.com https://a.mailmunch.co https://*.youtube.com https://*.youtube-nocookie.com https://*.tiktok.com https://platform.twitter.com https://www.googletagmanager.com https://www.instagram.com https://gateway.zscalertwo.net https://player.vimeo.com https://embed.ted.com *.soundcloud.com; frame-ancestors 'self' https://google.com https://*.google.com; base-uri 'self'; form-action 'self' https://*.list-manage.com https://www.facebook.com https://*.facebook.com; report-uri https://smeders.nl/csp/report.php 1
base-uri 'self'; block-all-mixed-content; default-src 'self'; form-action 'self'; frame-ancestors 'self'; plugin-types 'none'; script-src 'self' 'report-sample' 'unsafe-inline'; style-src 'self' 'report-sample' 'unsafe-inline'; object-src 'none'; worker-src 'none'; report-uri https://prod.ap.batic.cudasvc.com/xenios/api/v1/error/report??paid=151&spid=16482&v=v1.0&payload=AAXF38vOSaaXGWoOrrKDU0TO8Z67w7B6wvdPMDuGYA_pj5sANscnLNs_aOzhSPmhSKUIimV2Q8dXeBt7WqSr5egt379Q3kz3YV7evRfYNf_deItf5_fTt149Y6Wsy9rEgAU-r05X5uHypDYYSna9DZVIIgBrs-XSrkVDWj-0A1RKwBq_3hwwDKABANyieSiLIZopAz0uYUhlt681ZU1j8Q==; 1
object-src 'none';base-uri 'self';script-src 'nonce-nLiTaG61OwabLBkwTKVUcQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
require-trusted-types-for 'script';report-uri /us/_/ThinkWithGoogle/cspreport 1
font-src *.fontawesome.com https://widgets.trustedshops.com *.yotpo.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.meetanshi.com 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com player.vimeo.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com *.meetanshi.com *.weltpixel.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de https://meetanshi.com/media/logo.png *.meetanshi.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.gstatic.com *.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com maps.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com *.meetanshi.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com https://www.googletagmanager.com tagmanager.google.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com unsafe-inline cdn.dnky.co webchat.dotdigital.com *.fontawesome.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com tagmanager.google.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com *.meetanshi.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://www.google-analytics.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss:; frame-src 'self' https:; frame-ancestors 'self' https://webvisor.com https://*.metrika.yandex.ru https://*.metrika.yandex.com https://*.metrika.yandex.by https://*.metrika.yandex.com.tr; worker-src 'self' blob:; media-src 'self' https: blob: data:; form-action 'self' https: 1
default-src 'self'; img-src 'self' data: https://*.flo.io https://objectstorage.us-ashburn-1.oraclecloud.com https://objectstorage.us-phoenix-1.oraclecloud.com https://objectstorage.us-sanjose-1.oraclecloud.com https://*.paypal.com https://*.paypalobjects.com https://*.googlesyndication.com https://*.google.com https://www.google.ca https://www.google.co.uk https://www.google.com.au https://www.google.de https://www.google.fr https://www.google.co.jp https://www.google.es https://www.google.it https://www.google.com.br https://www.google.com.mx https://www.google.co.in https://www.google.com.np https://www.google.com.bz https://www.googleadservices.com https://www.googletagmanager.com https://googleads.g.doubleclick.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://applepay.cdn-apple.com https://www.paypal.com https://c.paypal.com https://checkout.paypal.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://consentcdn.cookiebot.com https://consent.cookiebot.com https://api.tnapplications.com https://hpc.freedompay.com https://fvm71509.jscrambler.com; connect-src 'self' https://www.google.com https://googleadservices.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://www.paypal.com https://o1067987.ingest.sentry.io https://events.global1.groupbycloud.com https://telemetry.partners.prod.minionplatform.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://api.tnapplications.com https://www.googletagmanager.com https://cognito-idp.us-east-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://cognito.flo.io https://payments.braintree-api.com https://origin-analytics-prod.braintree-api.com https://api.braintreegateway.com https://client-analytics.braintreegateway.com https://hpc.freedompay.com https://fvm71509.jscrambler.com; style-src 'self' 'unsafe-inline' https://api.tnapplications.com https://hpc.freedompay.com; frame-src 'self' https://www.paypal.com https://c.paypal.com https://checkout.paypal.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://public.prod.minionplatform.com https://payments.braintree-api.com https://hpc.freedompay.com; font-src 'self' data: ; worker-src 'self' blob:; child-src 'self' blob:; object-src 'none'; base-uri 'self'; report-to csp-endpoint; report-uri https://flo.io/api/csp-report; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.segment.com https://matomo.onlineresults.nl https://cdn.cookie-script.com https://www.google-analytics.com https://www.googletagmanager.com https://api.segment.io; style-src 'self' 'unsafe-hashes' https://hello.myfonts.net; connect-src 'self' https://cdn.segment.com https://matomo.onlineresults.nl https://cdn.cookie-script.com https://www.google-analytics.com https://www.googletagmanager.com https://api.segment.io; img-src 'self' https://www.googletagmanager.com 1
object-src 'none';base-uri 'self';script-src 'nonce-eqYV-aizzkGpPQHtB1WskQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src * data:; connect-src * 1
object-src 'none';base-uri 'self';script-src 'nonce-P57N5WELKHm8h6HmQZMnMw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com magefan.com cm.magefan.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-ShTd5XO_UOKYg0x313Nm9g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self';base-uri 'self';frame-ancestors 'self' https://www.nmhs.net/;frame-src 'self' *.kaltura.com *.trustcommerce.com epichttp: https://cdnapisec.kaltura.com/ https://eiclbext.nmhs.net https://premier.trustcommerce.com https://stagepremier.trustcommerce.com;script-src 'nonce-ed8d3e207a7946a8ab2307f82762507e' 'self';img-src https://* 'self' blob: data:;connect-src 'self' epichttp: https://*.kaltura.com;style-src 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net *.googleusercontent.com pouch-global-font-assets.s3.eu-central-1.amazonaws.com *.wistia.com yotpo-stool.s3.amazonaws.com *.zohocdn.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.nosto.com *.nos.to c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.pinterest.com *.pinterdev.com commerce-app.pintergration.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com www.xtento.com *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com *.b0e8.com *.klevu.com *.ksearchnet.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com *.mageside.com mageside.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to *.ometria.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com https://cdn-ukwest.onetrust.com https://via.placeholder.com *.facebook.com www.xtento.com cdn.xtento.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.attentivemobile.com *.attn.tv *.bing.com *.bing.net *.clarity.ms *.doubleclick.net *.facebook.net *.ggpht.com *.googleadservices.com *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.st www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu www.google.ws google.com *.google.com *.googlesyndication.com *.googletagmanager.com *.googleusercontent.com *.kaltura.com *.linksynergy.com *.listrakbi.com *.onetrust.com *.portmeirion.com *.portmeirion.co.uk *.postcodeanywhere.co.uk *.spode.com *.spode.co.uk *.wistia.com yastatic.net *.yotpoapi.com yotpo-editor-production.s3.amazonaws.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.attn.tv events.attentivemobile.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com *.b0e8.com *.bc0a.com js.klevu.com *.ksearchnet.com *.disqus.com *.avada.io *.shopify.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://cdn-ukwest.onetrust.com https://js.klevu.com https://tag.rmp.rakuten.com https://portm11116.pcapredict.com https://cdn-widgetsrepository.yotpo.com https://maps.googleapis.com https://kebos.portmeirion.co.uk *.hotjar.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net www.xtento.com cdn.xtento.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net *.ometria.com https://cdn.cookielaw.org https://www.spode.com *.bing.com *.clarity.ms d21m4dsqdd3b9h.cloudfront.net *.doubleclick.net *.google-analytics.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.kaltura.com *.klevu.com *.listrakbi.com *.livechatinc.com *.onetrust.com *.pcapredict.com *.portmeirion.co.uk *.postcodeanywhere.co.uk *.rakuten.com *.sentry-cdn.com *.wistia.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com display.ugc.bazaarvoice.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net *.nosto.com *.nos.to assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com tagmanager.google.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net https://statsjs.klevu.com https://js.klevu.com d21m4dsqdd3b9h.cloudfront.net *.googletagmanager.com *.gstatic.com *.listrakbi.com *.postcodeanywhere.co.uk *.typekit.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.googleapis.com *.gstatic.com *.kaltura.com video-s3-bucket.s3.eu-west-2.amazonaws.com *.wistia.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.attn.tv events.attentivemobile.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.hub-box.com *.klevu.com *.ksearchnet.com https://get.geojs.io *.avada.io connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://cdn-ukwest.onetrust.com *.hotjar.com ws.hotjar.com wss://ws.hotjar.com analytics.google.com *.facebook.net *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com *.ometria.com *.attentivemobile.com *.bc0a.com *.bing.com *.bing.net *.clarity.ms *.doubleclick.net *.facebook.com *.googleadservices.com *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bt www.google.by www.google.ca www.google.cd www.google.ch www.google.ci www.google.cm www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.br www.google.com.co www.google.com.cy www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.hk www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.np www.google.com.om www.google.com.pa www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gg www.google.gm www.google.gr www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.mv www.google.mw www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.tg www.google.tl www.google.tn www.google.vu www.google.ws *.googlesyndication.com *.hotjar.io *.kaltura.com *.listrakbi.com *.livechatinc.com *.onetrust.com *.portmeirion.com *.portmeirion.co.uk *.postcodeanywhere.co.uk *.samsung.com *.spode.com *.spode.co.uk *.wistia.com *.yotpoapi.com yotpo-stool.s3.amazonaws.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.ometria.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; base-uri *.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; report-uri https://32ede476-ded8-4814-88cb-f8ecfa864227.sansec.watch/; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com https://seo.mageplaza.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://*.svea.com https://*.vipps.no https://*.trustly.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net www.facebook.com *.googlesyndication.com static.addtoany.com vars.hotjar.com ct.pinterest.com checkoutapi.svea.com connect.facebook.net graph.facebook.com business.facebook.com *.trustpilot.com *.weltpixel.com *.addthis.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://*.svea.com https://td.doubleclick.net/ td.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com www.google.se merit.soliditet.se maps.gstatic.com maps.googleapis.com ct.pinterest.com s.pinimg.com www.google.co.uk px.ads.linkedin.com cookie-cdn.cookiepro.com *.trustpilot.net *.trustpilot.com connect.facebook.net graph.facebook.com business.facebook.com https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com *.google.pl www.google.pl px4.ads.linkedin.com *.klaviyo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com static.addtoany.com maps.googleapis.com cookie-cdn.cookiepro.com static.zdassets.com script.hotjar.com static.hotjar.com snap.licdn.com s.pinimg.com checkoutapi.svea.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com *.trustpilot.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.googletagmanager.com tagmanager.google.com *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.avada.io *.shopify.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com https://*.svea.com 'self' 'unsafe-inline' 'unsafe-eval' *.pod-29.zendesk.com https://pod-29.zendesk.com/sc/faye *.klaviyo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.fontawesome.com *.trustpilot.com https://static.klaviyo.com tagmanager.google.com https://cdn.jsdelivr.net https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.google-analytics.com www.facebook.com *.facebook.net stats.g.doubleclick.net pagead2.googlesyndication.com ct.pinterest.com cookie-cdn.cookiepro.com vesaniswedenab.zendesk.com geolocation.onetrust.com *.analytics.google.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.google-analytics.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval' *.pod-29.zendesk.com https://pod-29.zendesk.com/sc/faye *.zendesk.com *.hotjar.io *.klaviyo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' components.cross-7.de; style-src 'self' 'unsafe-inline' fontsapi.cross-7.de; img-src 'self' sgx.geodatenzentrum.de data:; font-src 'self' fonts.cross-7.de fontsapi.cross-7.de data:; connect-src 'self' fontsapi.cross-7.de api.cross-7.de wss://api.cross-7.de; frame-src 'self' api.cross-7.de; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com maxcdn.bootstrapcdn.com *.salesfire.co.uk *.klarnacdn.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.facebook.com *.googlesyndication.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.doubleclick.net *.facebook.com *.googlesyndication.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.salesfire.co.uk *.googleapis.com *.trustpilot.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.trackedlink.net *.ddlnk.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com * www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.salesfire.co.uk maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com * js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.salesfire.co.uk *.googleapis.com *.trustpilot.com https://www.oxfordfencing.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com webchat.dotdigital.com webchat.staging.dotdigital.com downloads.mailchimp.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.salesfire.co.uk *.typekit.net *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://bam.nr-data.net/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.salesfire.co.uk *.smartmetrics.co.uk *.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com data: https://cdnjs.cloudflare.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.trackedlink.net *.ddlnk.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.avada.io https://maps.googleapis.com https://cdnjs.cloudflare.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://www.googletagmanager.com tagmanager.google.com *.yotpo.com https://agoragom.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com webchat.dotdigital.com webchat.staging.dotdigital.com https://fonts.googleapis.com https://cdnjs.cloudflare.com *.stripe.network *.stripecdn.com *.amazon.com tagmanager.google.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://www.google-analytics.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-X961TCSzbcp8Awi5flCrhg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' 'unsafe-inline' fonts.gstatic.com fonts.googleapis.com; img-src 'self' data: https: http: ; frame-src 'self' http: https: *.google.com; script-src 'self' 'unsafe-inline' https: ; object-src 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://browser.sentry-cdn.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://*.ingest.sentry.io https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.googleapis.com *.gstatic.com data: *.fontawesome.com maxcdn.bootstrapcdn.com *.revolut.com *.google.com google.com *.cdn-apple.com pay.google.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com *.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com js.stripe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.revolut.com *.google.com *.cdn-apple.com google.com *.gstatic.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.feedaty.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.revolut.com *.cdn-apple.com google.com pay.google.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com maps.gstatic.com *.doofinder.com *.facebook.com *.google.it *.google.sm stats.g.doubleclick.net *.kelkoogroup.net *.tradetracker.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ js.stripe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com widget.freshworks.com m2epro.freshdesk.com *.feedaty.com https://ipinfo.io *.googletagmanager.com *.googleadservices.com *.google-analytics.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.revolut.com *.google.com *.cdn-apple.com google.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com maps.googleapis.com *.adfyier.com *.admediasales.com *.bannercrowd.net sibautomation.com *.clarity.ms *.clerk.io *.doofinder.com *.hotjar.com *.kk-resources.com *.optimalpeople.fr shop-cart.app *.tradedoubler.com *.tradetracker.net https://cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.feedaty.com *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.doofinder.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com widget.freshworks.com m2epro.freshdesk.com *.feedaty.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.revolut.com *.cdn-apple.com pay.google.com *.gstatic.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.bannercrowd.net *.brevo.com *.clarity.ms *.doofinder.com wss://eu1-layer.doofinder.com/ wss://eu1-recommendations.doofinder.com/ *.doubleclick.net *.facebook.com wss://ws.hotjar.com/ *.hotjar.io/ *.kelkoogroup.net *.optimalpeople.fr 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' googletagmanager.com google-analytics.com googletagservices.com adservice.google.nl adservice.google.com www.googletagservices.com securepubads.g.doubleclick.net tpc.googlesyndication.com static.hotjar.com script.hotjar.com stats.nhg.org stats.henw.org stats.thuisarts.nl connect.facebook.net https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; object-src 'self'; style-src 'self' 'unsafe-inline' p.typekit.net use.typekit.com fonts.googleapis.com fast.fonts.net; img-src * data:; media-src 'self' *.nhg.org; frame-src 'self' 'unsafe-inline' googleads.g.doubleclick.net adservice.google.nl *.safeframe.googlesyndication.com tpc.googlesyndication.com google.com app.springcast.fm securepubads.g.doubleclick.net https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptch; frame-ancestors 'self' *.prescriptor.nl; child-src 'self'; font-src 'self' use.typekit.com fonts.googleapis.com fonts.gstatic.com fast.fonts.net; connect-src 'self' securepubads.g.doubleclick.net pagead2.googlesyndication.com google-analytics.com stats.g.doubleclick.net stats.henw.org stats.nhg.org stats.thuisarts.nl *.hotjar.io fast.fonts.net; report-uri /report-csp-violation; upgrade-insecure-requests 1
script-src 'self' https://unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js https://www.googletagmanager.com/gtag/js https://region1.google-analytics.com/g/collect https://cdn.cookielaw.org/scripttemplates/ 'unsafe-inline' 'nonce-wUebW8PuFvodu5rJpHhmZg=='; report-uri https://thea.com/nelmio/csp/report 1
object-src 'none';base-uri 'self';script-src 'nonce-pNxgFYtBBb5JgpaJUJ0I3Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://*.clarity.ms https://*.bing.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com; script-src 'self' 'unsafe-inline' https://phs.my.onetrust.eu https://www.googletagmanager.com https://*.porsche-holding.com https://maps.googleapis.com https://google-analytics.com wasm-eval; img-src 'self' 'unsafe-inline' data: blob: https://phs.my.onetrust.eu https://*.porsche-holding.com https://maps.googleapis.com https://*.nwi-ms.com https://www.googletagmanager.com https://*.porscheinformatik.cloud https://*.gstatic.com https://*.porscheinformatik.com https://*.google.com https://*.cloudfront.net https://*.google-analytics.com https://assets; connect-src 'self' 'unsafe-inline' https://localhost:8180 https://*.carlog.com https://phs.my.onetrust.eu https://*.porsche-holding.com https://maps.googleapis.com https://*.porscheinformatik.cloud https://*.google-analytics.com https://www.googletagmanager.com https://www.google.com https://*.analytics.google.com data https://cdn.jsdelivr.net/npm/@lottiefiles; font-src 'self' data: https://*.gstatic.com; frame-src 'self' https://www.googletagmanager.com; report-uri /api/api-public/csp-report/report-uri; report-to csp-violation-endpoint 1
object-src 'none';base-uri 'self';script-src 'nonce-KCJMpq2RxtKJDqW41zwh6A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' www.googletagmanager.com *.googletagmanager.com *.gleamjs.io *.gleam.io pagead2.googlesyndication.com *.adtrafficquality.google; object-src 'self'; style-src 'self' 'unsafe-inline' fonts.googleapis.com www.gstatic.com; img-src 'self' 'unsafe-inline' data: acgl.gg acgl.co.za www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.doubleclick.net *.google.com *.google.co.za www.google.co.za fonts.gstatic.com *.gleamjs.io *.gleam.io static-cdn.jtvnw.net *.ytimg.com discord.acgl.gg *.youtube.com *.googlesyndication.com *.adtrafficquality.google schools.acgl.gg www.google.com www.google.com.ng www.googleadservices.com *.google.*; media-src 'self'; frame-src 'self' *.doubleclick.net pagead2.googlesyndication.com *.googlesyndication.com www.youtube.com www.tiktok.com player.twitch.tv www.youtube-nocookie.com www.googletagmanager.com gleam.io *.adtrafficquality.google *.google.com google.com ; frame-ancestors 'self'; child-src 'self'; font-src 'self' fonts.gstatic.com; connect-src 'self' 'unsafe-inline' wss://acgl.gg/socket *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.co.za analytics.google.com acgl.gg acgl.co.za fonts.gstatic.com translate.googleapis.com cdn.jsdelivr.net discord.acgl.gg *.ytimg.com *.youtube.com *.adtrafficquality.google pagead2.googlesyndication.com *.googlesyndication.com *.google.*; report-uri /report-csp-violation 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://js-eu1.hsforms.net https://js-eu1.hs-scripts.com https://js-eu1.hs-banner.com https://js-eu1.hs-analytics.net https://js-eu1.hscollectedforms.net https://widget.wenetasystent.ai https://www.google.com https://www.gstatic.com https://*.googletagmanager.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https://forms-eu1.hsforms.com https://track.hubspot.com https://widget.wenetasystent.ai https://*.google-analytics.com https://*.googletagmanager.com https://www.facebook.com; connect-src 'self' https://forms-eu1.hscollectedforms.net https://api-eu1.hsforms.com https://forms-eu1.hsforms.com https://widget.wenetasystent.ai https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://www.facebook.com https://connect.facebook.net; frame-src https://forms-eu1.hsforms.com https://www.google.com https://widget.wenetasystent.ai; base-uri 'self'; form-action 'self' https://forms-eu1.hsforms.com; object-src 'none' 1
script-src 'self' blob: https://prod-bk-web.mx.rbi.tools/en/static/js/vendor.5dc447bb.js https://prod-bk-web.mx.rbi.tools/en/static/js/main.6f5a35ee.js https://prod-bk-web.mx.rbi.tools/en/static/js/runtime.e6d60a58.js https://*.mparticle.com https://cdn.cookielaw.org https://www.googletagmanager.com https://*.onetrust.com https://static.ads-twitter.com https://platform.twitter.com https://www.google-analytics.com https://connect.facebook.net https://secure.quantserve.com https://dynamic.criteo.com https://rules.quantcount.com https://cdn.branch.io https://app.link https://*.cdn4.forter.com https://dlthst9q2beh8.cloudfront.net https://sslwidget.criteo.com https://widget.eu.criteo.com https://pagead2.googlesyndication.com https://cdn.amplitude.com https://accounts.google.com https://appleid.cdn-apple.com https://analytics.tiktok.com https://c.amazon-adsystem.com https://js.adsrvr.org https://maps.googleapis.com https://googleads.g.doubleclick.net https://static.zdassets.com https://bat.bing.com https://cdn-st.adsmurai.com https://www.youtube.com https://player.vimeo.com https://prod-bk-web.mx.rbi.tools/en/static/js/main.2f800b27.js https://prod-bk-web.mx.rbi.tools/en/static/js/runtime.b9a2ee76.js; object-src 'none'; base-uri 'none'; worker-src 'self' blob:; report-uri https://intl-csp-service.rbictg.com/report 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com cash-f.squarecdn.com https://*.gstatic.com *.pikolin.com/es *.pikolin.com/pt *.magentosite.cloud *.beds.es *.googleapis.com https://script.hotjar.com *.landbot.io applepay.cdn-apple.com/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.adyen.com *.pikolin.com/es *.pikolin.com/pt *.magentosite.cloud *.beds.es api.paycomet.com *.ogone.com *.v-psp.com https://www.facebook.com *.redsys.es 'self' 'unsafe-inline'; frame-ancestors *.pikolin.com/es *.pikolin.com/pt *.magentosite.cloud *.beds.es *.adobe.com https://bid.g.doubleclick.net https://www.linkbux.com/ 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.adyen.com *.dotdigital-pages.com *.dotdigital.com *.awin1.com *.zenaps.com *.fls.doubleclick.net *.pikolin.com/es *.pikolin.com/pt *.magentosite.cloud *.beds.es www.google.com api.paycomet.com *.doubleclick.net pay.google.com service.force.com hal9000.redintelligence.net https://pikolinrecommend.botslovers.com https://*.soreto.com https://ams.creativecdn.com/ https://www.facebook.com/ https://www.awin1.com/ *.redsys.es https://www.googletagmanager.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.trustpilot.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https://*.gstatic.com *.adyen.com *.trackedlink.net *.ddlnk.net *.awin1.com *.zenaps.com *.wepowerconnections.com *.pikolin.com https://pikolin.com *.magentosite.cloud *.beds.es *.adotmob.com *.facebook.com *.facebook.net *.google.com *.google.es *.googleapis.com *.omtrdc.net https://*.g.doubleclick.net/ *.doubleclick.net https://*.googletagmanager.com *.media-amazon.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com https://ade.googlesyndication.com https://lantern.roeyecdn.com https://lantern.roeye.com https://pikolinrecommend.botslovers.com https://*.tagmanager.google.com https://pikolin.botslovers.com https://cdn.botslovers.com https://t.teads.tv/ https://c.clarity.ms/ https://*.bing.com/ https://static.hotjar.com https://script.hotjar.com https://survey-images.hotjar.com https://rt.udmserve.net/ https://pixel.rubiconproject.com https://www.awin1.com/ https://eb2.3lift.com/ https://secure.adnxs.com/ https://ih.adscale.de/ https://sync.outbrain.com/ https://ssp-csync.smartadserver.com/ https://ads.stickyadstv.com https://ads.yieldmo.com/ https://api.soreto.com/ https://cdn.doofinder.com/ https://ib.adnxs.com/ eu1-doofinderuser.s3.amazonaws.com https://*.collect.igodigital.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com *.pikolin.com/es *.pikolin.com/pt *.magentosite.cloud *.beds.es www.google.com https://maps.googleapis.com *.gstatic.com *.zdassets.com js-agent.newrelic.com *.serving-sys.com *.facebook.net *.doubleclick.net *.zopim.com *.cstatic.weborama.fr https://cdn.cookielaw.org https://pikolin.botslovers.com.co https://pikolin.botslovers.com https://pikolinrecommend.botslovers.com https://cdn.landbot.io https://service.force.com https://cdn.doofinder.com *.clarity.ms *.hotjar.com https://www.dwin1.com https://www.wepowerconnections.com https://lantern.roeyecdn.com https://espadesa.my.salesforce.com/ https://*.googletagmanager.com https://*.tagmanager.google.com https://*.google-analytics.com https://www.googleadservices.com https://p.teads.tv/ https://*.soreto.com https://cdn.frizbit.com/ https://js.cookieless-data.com/ https://*.adform.net/ https://js.sddan.com/ https://tags.creativecdn.com/ https://*.bing.com https://www.awin1.com/ https://the.sciencebehindecommerce.com/ https://*.datnova.com/ https://static.lightning.force.com https://espadesa.secure.force.com https://d.la11-core1.sfdc-cehfhs.salesforceliveagent.com/ https://d.la2-c1-cdg.salesforceliveagent.com/ *.redsys.es https://sslwidget.criteo.com/ https://dynamic.criteo.com/ https://pikolin--presandbox.sandbox.my.site.com/ https://pikolin.my.site.com/ https://www.cetelem.es/ https://*.collect.igodigital.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.trustpilot.com https://www.beds.es https://espadesa.my.site.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.cash.app https://fonts.googleapis.com/ *.pikolin.com/es *.pikolin.com/pt *.magentosite.cloud *.beds.es *.googleapis.com service.force.com *.clarity.ms https://cdn.doofinder.com https://*.googletagmanager.com https://*.tagmanager.google.com https://static.hotjar.com https://script.hotjar.com https://cdn.frizbit.com/ https://espadesa.secure.force.com/ https://pikolin--presandbox.sandbox.my.site.com/ https://pikolin.my.site.com/ *.trustpilot.com 'self' 'unsafe-inline'; object-src *.pikolin.com/es *.pikolin.com/pt *.magentosite.cloud *.beds.es 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.pikolin.com https://pikolin.com *.magentosite.cloud *.beds.es *.zdassets.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.pikolin.com/es *.pikolin.com/pt *.magentosite.cloud *.beds.es 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com * *.adyen.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.wepowerconnections.com https://the.sciencebehindecommerce.com *.pikolin.com/es *.pikolin.com/pt pikolin.tt.omtrdc.net *.magentosite.cloud *.beds.es *.zdassets.com *.zendesk.com *.zopim.com wss://widget-mediator.zopim.com *.serving-sys.com *.analytics.analytics.com *.googletagmanager.com *.g.doubleclick.net *.demdex.net *.doubleclick.net https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com https://maps.googleapis.com https://google.com https://www.google.es https://www.google.com https://pagead2.googlesyndication.com pay.google.com https://payments-eu.amazon.com *.amazon.com eu1-layer.doofinder.com wss://eu1-layer.doofinder.com/ *.clarity.ms https://*.hotjar.io https://*.hotjar.com wss://*.hotjar.com https://pikolinrecommend.botslovers.com *.tt.omtrdc.net https://pikolin.botslovers.com https://cdn.botslovers.com/ https://www.facebook.com/ https://cm.teads.tv/ https://t.teads.tv/ https://www.wepowerconnections.com https://*.soreto.com https://*.frizbit.com/ https://ams.creativecdn.com/ https://the.sciencebehindecommerce.com/ https://geolocation.onetrust.com https://privacyportal.onetrust.com https://privacyportal-eu.onetrust.com https://*.bing.com/ https://espadesa.secure.force.com/ *.googleapis.com *.landbot.io sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com https://*.trustpilot.com/ 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com *.pikolin.com/es *.pikolin.com/pt *.magentosite.cloud *.beds.es https://*.soreto.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.pikolin.com/es *.pikolin.com/pt *.magentosite.cloud *.beds.es 'self' 'unsafe-inline'; report-uri https://pikolin.report-uri.com/r/d/csp/reportOnly; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.googletagmanager.com *.hotjar.com *.appnexus.com cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.gstatic.com; img-src 'self' data: *.google-analytics.com *.googletagmanager.com *.hotjar.com *.gravatar.com; connect-src 'self' *.google-analytics.com *.googletagmanager.com *.hotjar.com; frame-src 'self' *.leadpages.com; report-uri https://connectorsupplier.com/csp-report 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com data: *.stripe.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.fontawesome.com *.twitter.com *.zopim.com *.ubteam.com *.ubteam.co.uk *.ubteam.ca *.ubteam.com.au *.ubteam.co.nz *.ubteam.eu *.ubteam.fr *.intercomcdn.com fast.wistia.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.stripe.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.rsa3dsauth.co.uk *.rsa3dsauth.com *.boc.cn *.afs.com.bh *.enfuce.com *.cardcenter.ch *.nexigroup.com *.pluscard.de *.qiib.com.qa *.paylife.at *.redsys.es *.3dsecure.no *.modirum.com *.edb.com *.viseca.ch *.apata.io *.capitalone.com *.dnp-cdms.jp *.revolut.com *.bankserv.co.za *.swisscard.ch *.six-group.com *.marqeta.com *.imbank.com *.tsys.co.uk *.sia.eu *.garanti.com.tr *.commerzbank.de *.cmbchina.com *.alahli.com *.mycardsecure.com *.gps.com.bh *.citibank.com *.wibmo.com *.dkb.de *.alinma.com *.nccc.com.tw *.starlingbank.com *.danskebank.com *.pekao24.pl *.lloydsbank.co.uk/ *.lloydsbank.com/ *.lloydsbankinggroup.com/ *.channel-cards-auth-api.lloydsbankinggroup.com/ *.sparebank1.no *.ubteam.com *.ubteam.co.uk *.twitter.com *.ubteam.ca *.ubteam.com.au *.ubteam.co.nz *.ubteam.eu *.ubteam.fr *.b2clogin.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.networkmerchants.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com *.stripe.com *.sagepay.com *.opayo.eu.elavon.com *.arcot.com *.rsa3dsauth.co.uk *.rsa3dsauth.com *.boc.cn *.afs.com.bh *.enfuce.com *.cardcenter.ch *.pluscard.de *.qiib.com.qa *.nexigroup.com *.paylife.at *.redsys.es *.3dsecure.no *.modirum.com *.edb.com *.viseca.ch *.apata.io *.capitalone.com *.dnp-cdms.jp *.revolut.com *.bankserv.co.za *.swisscard.ch *.six-group.com *.marqeta.com *.wlp-acs.com *.imbank.com *.tsys.co.uk *.sia.eu *.garanti.com.tr *.commerzbank.de *.cmbchina.com *.alahli.com *.mycardsecure.com *.gps.com.bh *.citibank.com *.wibmo.com *.dkb.de *.monzo.com *.alinma.com *.nccc.com.tw *.starlingbank.com *.danskebank.com *.pekao24.pl *.lloydsbank.co.uk/ *.lloydsbank.com/ *.lloydsbankinggroup.com/ *.channel-cards-auth-api.lloydsbankinggroup.com/ *.sparebank1.no landofcoder.com *.wistia.com *.wistia.net *.mercadolibre.com *.google.mu *.twitter.com *.vimeo.com *.ubteam.com *.ubteam.co.uk *.ubteam.ca *.ubteam.com.au *.ubteam.co.nz *.ubteam.eu *.ubteam.fr *.brightcove.net *.authorize.net *.kaptcha.com *.flipsnack.com *.ceros.com 'self' 'unsafe-inline'; img-src *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.networkmerchants.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.stripe.com *.google.com ebizmarts-website.s3.amazonaws.com *.sagepay.co.uk *.paypalobjects.com *.opayo.co.uk 'self' data: *.wistia.com *.wistia.net *.mercadopago.com *.mercadolibre.com *.magentocommerce.com *.ytimg.com *.authorize.net *.cardinalcommerce.com *.googleadservices.com *.google-analytics.com *.twitter.com *.newrelic.com *.nr-data.net *.googletagmanager.com *.doubleclick.net *.zopim.com https://ryanscomputers.com https://www.ryanscomputers.com *.lenovo.com *.asus.com *.samsung.com *.raxcdn.com *.wikichip.org *.scan.co.uk *.broadcastbruce.com *.akamaihd.net *.ubteam.com *.ubteam.co.uk *.ubteam.ca *.ubteam.com.au *.ubteam.co.nz *.ubteam.eu *.ubteam.fr 'self' blob: *.news18.com *.google.mu *.google.co.nz *.google.co.uk *.google.com.ua *.google.com.ph *.klarna.com *.amazonaws.com *.rackcdn.com/ *.google.com.vn/ *.intercomcdn.com *.mcusercontent.com *.intercomassets.com *.linkedin.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.networkmerchants.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.stripe.com *.sagepay.com *.opayo.eu.elavon.com *.avada.io landofcoder.com *.wistia.com *.wistia.net *.google.mu *.mlstatic.com *.sagepay.co.uk www.google.com/recaptcha/api.js js-agent.newrelic.com https://bam.nr-data.net fonts.gstatic.com *.authorize.net *.cardinalcommerce.com *.ccdc02.com *.paypalobjects.com *.ytimg.com *.signifyd.com *.getfirebug.com *.google-analytics.com *.zdassets.com *.zopim.com *.akamaihd.net *.googleadservices.com 'unsafe-inline' wss: 'self' data: *.ubteam.com *.ubteam.co.uk *.ubteam.ca *.ubteam.com.au *.ubteam.co.nz *.ubteam.eu *.ubteam.fr *.cloudflareinsights.com *.googletagmanager.com *.embed.typeform.com *.intercom.io *.intercomcdn.com *.ceros.com *.cdnjs.cloudflare.com *.hotjar.com *.licdn.com munchkin.marketo.net *.chatwoot.com *.respond.io connect.facebook.net browser.sentry-cdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.networkmerchants.com assets.braintreegateway.com *.stripe.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.fontawesome.com *.googleapis.com *.twitter.com *.gstatic.com *.typekit.net *.getfirebug.com *.google.mu *.mercadopago.com *.zdassets.com *.omtrdc.net *.zopim.com 'unsafe-inline' wss: 'self' data: *.ubteam.com *.ubteam.co.uk *.ubteam.ca *.ubteam.com.au *.ubteam.co.nz *.ubteam.eu *.ubteam.fr *.wistia.com *.wistia.net 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com blob: * 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net *.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.networkmerchants.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.googleapis.com *.stripe.com *.sagepay.com *.opayo.eu.elavon.com https://get.geojs.io *.avada.io landofcoder.com *.mercadopago.com *.twitter.com *.doubleclick.net *.zdassets.com 'unsafe-inline' wss: *.google-analytics.com *.akamaihd.net *.wistia.com *.wistia.net *.litix.io *.ubteam.com *.ubteam.co.uk *.ubteam.ca *.ubteam.com.au *.ubteam.co.nz *.ubteam.eu *.ubteam.fr *.zendesk.com *.intercom.io *.cdnjs.cloudflare.com *.mktoresp.com *.hotjar.com *.hotjar.io *.linkedin.com *.chatwoot.com *.respond.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com blob: * http: https: blob: 'self' 'unsafe-inline'; default-src blob: * 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com maxcdn.bootstrapcdn.com *.googleapis.com *.gstatic.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com t.elasticsuite.io *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://b1e92d7e-1350-4be7-a5d3-93722c28fd0a.sansec.watch/; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.fontawesome.com https://fonts.bunny.net *.cdn-apple.com *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://www.youtube.com http://www.sandbox.paypal.com *.twitter.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io www.apptrian.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: *.paypal.com *.gstatic.com *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.ytimg.com *.bing.com *.doubleclick.net *.google.com *.mastercard.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.apptrian.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.cdn-apple.com *.cloudflare.com *.twitter.com *.google-analytics.com *.gstatic.com *.fontawesome.com *.bing.com *.zopim.com *.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.cloudflare.com *.googleapis.com *.twitter.com *.gstatic.com *.typekit.net *.bing.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com *.zopim.com *.zopim.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io www.apptrian.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.cardinaltrusted.com www.google-analytics.com *.cloudflare.com *.twitter.com https://stats.g.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' *.windows.net *.powerbi.com *.gstatic.com *.googleapis.com *.visualstudio.com content.powerapps.com stats.g.doubleclick.net www.google-analytics.com www.google.com www.googletagmanager.com *.pendo.io; style-src 'self' 'unsafe-inline' www.gstatic.com content.powerapps.com fonts.googleapis.com *.pendo.io; img-src 'self' data: blob: file *.windows.net *.1bc.app *.powerapps.com www.google-analytics.com *.gstatic.com *.googletagmanager.com *.googleapis.com *.pendo.io; frame-src 'self' *.google.com app.pendo.io; frame-ancestors 'self' app.pendo.io; worker-src blob:; report-uri https://1breadcrumb.report-uri.com/r/d/csp/reportOnly 1
object-src 'none';base-uri 'self';script-src 'nonce-ZLFSqqOQqo3Ce0xzuJkcHQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self';  script-src   'self'   'unsafe-inline'   https://ajax.googleapis.com   https://www.googletagmanager.com   https://www.google-analytics.com   https://static.hotjar.com   https://script.hotjar.com   https://static.hj.contentsquare.net   https://t.contentsquare.net   https://connect.facebook.net   https://www.google.com   https://apis.google.com   https://www.gstatic.com   https://accounts.google.com   https://googleads.g.doubleclick.net   https://static.site24x7rum.com   https://cdn.jsdelivr.net   https://cdn2.easycredito.com.br;  style-src   'self'   'unsafe-inline'   https://cdn.jsdelivr.net   https://cdn2.easycredito.com.br;  img-src   'self'   https:   data:   blob:   https://www.google.com   https://www.gstatic.com   https://www.facebook.com;  connect-src   'self'   https:   https://www.google-analytics.com   https://www.google.com   https://stats.g.doubleclick.net   https://googleads.g.doubleclick.net   wss://ws.hotjar.com;  font-src   'self'   https:   https://www.gstatic.com;  frame-src   'self'   https:   https://accounts.google.com   https://www.google.com;  object-src 'none'; base-uri 'self'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https://app.termly.io https://www.googletagmanager.com https://www.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net https://*.adroll.com https://lex.33across.com https://connect.facebook.net https://widget.intercom.io https://*.intercomcdn.com https://us-assets.i.posthog.com https://www.youtube.com; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self' data: https://cdn.sanity.io https://api.producthunt.com https://www.googletagmanager.com https://*.google-analytics.com https://www.google.com https://www.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net https://*.adroll.com https://www.facebook.com https://*.intercomcdn.com; connect-src 'self' https://*.termly.io https://us.i.posthog.com https://us-assets.i.posthog.com https://www.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://www.google.com https://www.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net https://*.adroll.com https://www.facebook.com https://api-iam.intercom.io https://*.intercom.io wss://*.intercom.io; frame-src 'self' https://www.youtube.com https://www.googletagmanager.com https://*.googlesyndication.com https://*.doubleclick.net https://*.intercom.io https://intercom-sheets.com https://www.intercom-reporting.com https://app.intercom.com 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-I3b6yhecFM_rYeEiNMk0AQ' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com www.clarity.ms scripts.clarity.ms js-na2.hs-scripts.com js-na2.hs-analytics.net js-na2.hs-banner.com js-na2.hsadspixel.net js-na2.hubspot.com www.googleadservices.com googleads.g.doubleclick.net api-02.callboxinc.com static.hsappstatic.net fast.wistia.com translate.google.com translate.googleapis.com translate-pa.googleapis.com www.gstatic.com; style-src 'self' 'unsafe-inline' api-02.callboxinc.com translate.googleapis.com www.gstatic.com; font-src 'self'; img-src 'self' data: cms.callboxinc.com www.callboxinc.com i.vimeocdn.com img.youtube.com i.ytimg.com images.unsplash.com hebbkx1anhila5yf.public.blob.vercel-storage.com fast.wistia.com www.googletagmanager.com www.google.com www.google.com.ph perf-na2.hsforms.com track-na2.hubspot.com secure.gravatar.com www.googleadservices.com fonts.gstatic.com www.gstatic.com c.clarity.ms; frame-src 'self' www.youtube.com www.youtube-nocookie.com www.googletagmanager.com fast.wistia.com meetings-na2.hubspot.com meetings.hubspot.com 4950628.hs-sites-na2.com api-02.callboxinc.com translate.google.com translate.googleapis.com; connect-src 'self' api-02.callboxinc.com cms.callboxinc.com ad.doubleclick.net stats.g.doubleclick.net www.google.com analytics.google.com cta-na2.hubspot.com js-na2.hs-banner.com api-na2.hubapi.com *.clarity.ms www.googleadservices.com static.hsappstatic.net translate.googleapis.com; worker-src 'none'; child-src 'none'; object-src 'none'; base-uri 'self'; form-action 'self' cms.callboxinc.com; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://hoenderdaell.nl https://*.hoenderdaell.nl https://landgoedhoenderdaell.nl https://*.landgoedhoenderdaell.nl https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.gstatic.com https://*.hotjar.com https://*.hotjar.io https://*.fontawesome.com https://*.cookiebot.com https://*.cloudflare.com https://ywt.hoenderdaell.nl https://code.jquery.com https://*.jsdelivr.net https://*.facebook.net https://*.doubleclick.net https://*.clarity.ms https://*.tiktok.com https://snap.licdn.com https://app.youform.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://hoenderdaell.nl https://*.hoenderdaell.nl https://landgoedhoenderdaell.nl https://*.landgoedhoenderdaell.nl https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.gstatic.com https://*.hotjar.com https://*.hotjar.io https://*.fontawesome.com https://*.cookiebot.com https://*.cloudflare.com https://ywt.hoenderdaell.nl https://code.jquery.com https://*.jsdelivr.net *.facebook.net https://*.clarity.ms https://*.tiktok.com https://snap.licdn.com https://app.youform.com *.g.doubleclick.net googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' https://hoenderdaell.nl https://*.hoenderdaell.nl https://landgoedhoenderdaell.nl https://*.landgoedhoenderdaell.nl https://fonts.googleapis.com https://*.gstatic.com https://*.jsdelivr.net https://*.cookiebot.com https://*.typekit.net https://*.clarity.ms https://*.fontawesome.com *.typekit.net; img-src 'self' blob: data: https: https://hoenderdaell.nl https://*.hoenderdaell.nl https://landgoedhoenderdaell.nl https://*.landgoedhoenderdaell.nl https://*.facebook.com https://*.linkedin.com; font-src 'self' data: https://hoenderdaell.nl https://*.hoenderdaell.nl https://landgoedhoenderdaell.nl https://*.landgoedhoenderdaell.nl https://fonts.gstatic.com https://*.gstatic.com https://*.fontawesome.com https://ka-p.fontawesome.com https://*.typekit.net *.faceworks.nl; connect-src 'self' https://hoenderdaell.nl https://*.hoenderdaell.nl https://landgoedhoenderdaell.nl https://*.landgoedhoenderdaell.nl https://ywt.hoenderdaell.nl https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.nl https://*.hotjar.io https://*.hotjar.com wss://*.hotjar.com https://*.fontawesome.com https://*.cookiebot.com https://*.googlesyndication.com https://*.googleadservices.com https://*.clarity.ms https://*.tiktok.com https://*.tiktokw.us https://*.facebook.com https://*.ads.linkedin.com https://*.typekit.net; media-src 'self' data: https://hoenderdaell.nl https://*.hoenderdaell.nl https://landgoedhoenderdaell.nl https://*.landgoedhoenderdaell.nl; worker-src 'self' blob:; child-src 'self' blob: https://*.hotjar.com https://*.google.com https://*.cloudflare.com; frame-src 'self' https://*.google.com https://*.gstatic.com https://*.youtube.com https://*.hotjar.com https://*.cookiebot.com https://*.cloudflare.com https://*.googletagmanager.com https://*.doubleclick.net https://app.youform.com https://*.facebook.com https://ywt.hoenderdaell.nl object.center; frame-ancestors 'self' *.superpixels.nl; base-uri 'self'; form-action 'self' https://*.facebook.com; report-uri https://groundcontrol.smeders.nl/csp/report.php 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; frame-src 'self' https://www.loom.com; script-src 'self' https://www.googletagmanager.com https://cdn.apple-mapkit.com 'wasm-unsafe-eval' 'unsafe-inline'; script-src-attr 'none'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://vit.al https://cdn.apple-mapkit.com https://tile.maps.apple.com https://*.google-analytics.com https://*.googletagmanager.com; font-src 'self'; connect-src 'self' https://browser-intake-datadoghq.com https://*.logs.datadoghq.com https://*.apple-mapkit.com https://tile.maps.apple.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com; worker-src 'self' blob:; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubd6e945d1071ed0afa4ecd31d7739a98c&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Aatlas-web%2Cenv%3Aproduction 1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' https://www.rst.net.id 'unsafe-inline'; font-src 'self' https://www.rst.net.id data:; img-src 'self' data: https://www.rst.net.id; connect-src 'self' https://fonts.gstatic.com; frame-src 'self' https://maps.google.com; media-src 'self'; worker-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.globalpay.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.gpwebpay.com *.gpe.cz *.globalpay-ecommerce.com https://*.securesuite.co.uk https://securesuite.co.uk *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.americanexpress.com *.globalpay.com *.mastercard.com *.visa.com *.gpwebpay.com *.gpe.cz *.globalpay-ecommerce.com https://*.securesuite.co.uk https://securesuite.co.uk https://pay.google.com https://payments.google.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.globalpay.com https://www.gstatic.com/instantbuy/svg/dark/pay/en.svg https://www.gstatic.com/instantbuy/svg/light/pay/en.svg https://www.gstatic.com/instantbuy/svg/dark/en.svg https://www.gstatic.com/instantbuy/svg/light/en.svg https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.aexp-static.com https://ajax.aspnetcdn.com *.globalpay.com *.gpapiservices.com https://pay.google.com https://*.securesuite.co.uk https://securesuite.co.uk https://payments.google.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://google.com/pay https://pay.google.com *.globalpay.com https://js.globalpay.com https://js-cert.globalpay.com https://*.securesuite.co.uk https://securesuite.co.uk https://payments.google.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src, object-src, base-uri, frame-src 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com fonts.googleapis.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com *.googleapis.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://ct.pinterest.com https://consentcdn.cookiebot.com https://challenges.cloudflare.com *.google.com/ https://plumrocket.com *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://banners.helloretailcdn.com https://scontent.cdninstagram.com *.cloudfront.net *.helloretail.com *.pinterest.com *.google.com *.google.dk https://info.dibs.se ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com https://www.magezon.com www.google.com.ua maps.googleapis.com maps.gstatic.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https://player.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com https://core.helloretail.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://gtm.bittekairand.com https://magento.com https://foursixty.com https://static.bambora.com https://cdn.jsdelivr.net https://connect.facebook.net https://*.doubleclick.net https://*.hotjar.com https://*.mouseflow.com https://*.pinimg.com *.cookiebot.com https://challenges.cloudflare.com https://*.dibspayment.eu chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.googleapis.com *.gstatic.com *.fontawesome.com *.avada.io *.shopify.com *.google.com/ maps.googleapis.com https://www.googletagmanager.com tagmanager.google.com www.xtento.com cdn.xtento.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://foursixty.com https://cdn.jsdelivr.net https://*.dibspayment.eu downloads.mailchimp.com https://static.klaviyo.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com https://fonts.bunny.net tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://core.helloretail.com https://helloretailcdn.com https://foursixty.com *.pinterest.com https://gtm.bittekairand.com *.doubleclick.net *.cookiebot.com https://*.dibspayment.eu form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io maps.googleapis.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.pinterest.com *.pinimg.com *.microsoft.com *.bing.com *.clarity.ms *.twitter.com *.x.com *.twimg.com *.linkedin.com *.licdn.com *.adsymptotic.com https://fonts.gstatic.com static.klaviyo.com static-forms.klaviyo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.pinterest.com *.pinimg.com *.microsoft.com *.bing.com *.clarity.ms *.twitter.com *.x.com *.twimg.com *.linkedin.com *.licdn.com *.adsymptotic.com  *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.pinterest.com *.pinimg.com *.microsoft.com *.bing.com *.clarity.ms *.twitter.com *.x.com *.twimg.com *.linkedin.com *.licdn.com *.adsymptotic.com magento-cloudflare.jetrails.com js.mollie.com  c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com *.pinterest.com *.pinimg.com *.microsoft.com *.bing.com *.clarity.ms *.twitter.com *.x.com *.twimg.com *.linkedin.com *.licdn.com *.adsymptotic.com *.snapchat.com *.analytics.tiktok.com *.analytics.pinterest.com *.ct.pinterest.com *.bat.bing.com *.googleadservices.com *.googletagservices.com *.tr.facebook.com static.klaviyo.com static-forms.klaviyo.com fast.a.klaviyo.com static-tracking.klaviyo.com a.klaviyo.com telemetrics.klaviyo.com gtm.itiles.ro imgsct.cookiebot.com www.sicis.com images.unsplash.com *.ytimg.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://cdn.tbibank.support data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gtag.com *.analytics.google.com *.gstatic.com *.googlesyndication.com cdn.jsdelivr.net *.tiktok.com *.pinterest.com *.pinimg.com *.microsoft.com *.bing.com *.clarity.ms *.twitter.com *.x.com *.twimg.com *.linkedin.com *.licdn.com *.adsymptotic.com *.snapchat.com *.analytics.tiktok.com *.analytics.pinterest.com *.bat.bing.com static.klaviyo.com static-forms.klaviyo.com fast.a.klaviyo.com static-tracking.klaviyo.com https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ gtm.itiles.ro load.gtm.itiles.ro stapecdn.com consent.cookiebot.com consentcdn.cookiebot.com static.cloudflareinsights.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.pinterest.com *.pinimg.com *.microsoft.com *.bing.com *.clarity.ms *.twitter.com *.x.com *.twimg.com *.linkedin.com *.licdn.com *.adsymptotic.com *.snapchat.com *.analytics.tiktok.com *.analytics.pinterest.com *.ct.pinterest.com *.bat.bing.com https://fonts.googleapis.com static.klaviyo.com https://static.klaviyo.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com *.pinterest.com *.pinimg.com *.microsoft.com *.bing.com *.clarity.ms *.twitter.com *.x.com *.twimg.com *.linkedin.com *.licdn.com *.adsymptotic.com static.klaviyo.com static-forms.klaviyo.com fast.a.klaviyo.com static-tracking.klaviyo.com a.klaviyo.com telemetrics.klaviyo.com gtm.itiles.ro load.gtm.itiles.ro consentcdn.cookiebot.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/  api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://ro.tbibank.support 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net *.googleusercontent.com pouch-global-font-assets.s3.eu-central-1.amazonaws.com *.wistia.com yotpo-stool.s3.amazonaws.com *.zohocdn.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.nosto.com *.nos.to c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.pinterest.com *.pinterdev.com commerce-app.pintergration.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com www.xtento.com *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com *.b0e8.com *.klevu.com *.ksearchnet.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com *.mageside.com mageside.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to *.ometria.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com https://cdn-ukwest.onetrust.com https://via.placeholder.com *.facebook.com www.xtento.com cdn.xtento.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.attentivemobile.com *.attn.tv *.bing.com *.bing.net *.clarity.ms *.doubleclick.net *.facebook.net *.ggpht.com *.googleadservices.com *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.st www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.to www.google.tt www.google.vu www.google.ws google.com *.google.com *.googlesyndication.com *.googletagmanager.com *.googleusercontent.com *.kaltura.com *.linksynergy.com *.listrakbi.com *.onetrust.com *.portmeirion.com *.portmeirion.co.uk *.postcodeanywhere.co.uk *.spode.com *.spode.co.uk *.wistia.com yastatic.net *.yotpoapi.com yotpo-editor-production.s3.amazonaws.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.attn.tv events.attentivemobile.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com *.b0e8.com *.bc0a.com js.klevu.com *.ksearchnet.com *.disqus.com *.avada.io *.shopify.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://cdn-ukwest.onetrust.com https://js.klevu.com https://tag.rmp.rakuten.com https://portm11116.pcapredict.com https://cdn-widgetsrepository.yotpo.com https://maps.googleapis.com https://kebos.portmeirion.co.uk *.hotjar.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net www.xtento.com cdn.xtento.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net *.ometria.com https://cdn.cookielaw.org https://cdn.attn.tv https://www.portmeirion.com *.bing.com *.clarity.ms d21m4dsqdd3b9h.cloudfront.net *.doubleclick.net *.google-analytics.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.kaltura.com *.klevu.com *.listrakbi.com *.livechatinc.com *.onetrust.com *.pcapredict.com *.portmeirion.co.uk *.postcodeanywhere.co.uk *.rakuten.com *.sentry-cdn.com *.wistia.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com display.ugc.bazaarvoice.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net *.nosto.com *.nos.to assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com tagmanager.google.com *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net https://statsjs.klevu.com https://js.klevu.com d21m4dsqdd3b9h.cloudfront.net *.googletagmanager.com *.gstatic.com *.listrakbi.com *.postcodeanywhere.co.uk *.typekit.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.googleapis.com *.gstatic.com *.kaltura.com video-s3-bucket.s3.eu-west-2.amazonaws.com *.wistia.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.attn.tv events.attentivemobile.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.hub-box.com *.klevu.com *.ksearchnet.com https://get.geojs.io *.avada.io connect.facebook.net graph.facebook.com business.facebook.com *.nosto.com *.nos.to api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://cdn-ukwest.onetrust.com *.hotjar.com ws.hotjar.com wss://ws.hotjar.com analytics.google.com *.facebook.net *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com *.ometria.com *.attentivemobile.com *.bc0a.com *.bing.com *.bing.net *.clarity.ms *.doubleclick.net *.facebook.com *.googleadservices.com *.googleapis.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bt www.google.by www.google.ca www.google.cd www.google.ch www.google.ci www.google.cm www.google.co.ao www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.br www.google.com.co www.google.com.cy www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.hk www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.np www.google.com.om www.google.com.pa www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gg www.google.gm www.google.gr www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.mv www.google.mw www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.tg www.google.tl www.google.tn www.google.vu www.google.ws *.googlesyndication.com *.hotjar.io *.kaltura.com *.listrakbi.com *.livechatinc.com *.onetrust.com *.portmeirion.com *.portmeirion.co.uk *.postcodeanywhere.co.uk *.samsung.com *.spode.com *.spode.co.uk *.wistia.com *.yotpoapi.com yotpo-stool.s3.amazonaws.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.ometria.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; base-uri *.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; report-uri https://32ede476-ded8-4814-88cb-f8ecfa864227.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self' https:; img-src 'self' data: https: blob:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'sha256-CZ8yVh5GigT67lr/zqUe8PUPTElBMYaFxq9bbp+Befw=' 'sha256-JFzE5nZlclHRgp40MAu0angUAM+4C0XeorQvfIbtcCE=' 'sha256-yElBEKucE35qwHf8qWcAvqD25zOJ7TqTptcHyzGhOxw=' 'sha256-WJOolpvCImM0JxjAyeGBfm1gwbRdqVi3dED77fyl324=' 'sha256-AbpHGcgLb+kRsJGnwFEktk7uzpZOCcBY74+YBdrKVGs=' 'sha256-FiAPjjtFScKjVTqbsSoP8hGWOYRi+pxk8tfzrHl3hTc=' 'sha256-57VMrIcwJkuGVSTlaOs1Ov9Ga7LDKmMnCkLZd/Hx8CQ=' 'sha256-UibG0zVooHX2vsDAf8JWjPQGt1BETvMxivCi/+J0/mU=' 'sha256-TRUfXCZw2EqFMC1yOc6ytxLZ2EzfmHkYswgZqDjEEhI=' 'sha256-wqhkleSvBlevYN6HbvRrRC4Enm99VkYUP0TpVRPDCZA=' 'sha256-FW/P9zl6nAZ7lMKPjaP0b+IMbTN9SzWfLvMbc72Sn88=' 'sha256-3Q7Fer8VTVLBYfrpLbYBTwQkF9lmBnkJeuVShwQexS4=' 'sha256-KwE0qrFCKyVndtchVjtavGKki8YgzrWBoOrKC04wf7o=' 'sha256-Nqvyrc6VSm3EcGTrzH4DiTFAnjNFPsBB4J6wp4SaWNs=' 'sha256-OzluHk50LB84SkuWIuPzeSFT+OjaaH+L64hS2M8qe5Y=' 'sha256-ozC+cLmPNctZQj+QD98pWnmEysIjRObmqzgrVLnrib4=' 'sha256-PuaTXggfrQZgXiEPlgxHzCGwbeWvzhpHA5XxW5Gzrs8=' 'sha256-nxLW+U916JdhDbgGzVqV3wcvcn1rONOBNlYxfo5xP7A=' 'sha256-GBp5wK7kXodOTszpBAUlizg1jGrGMwadA2n+jwsqi/M=' 'sha256-Kd3YI644o2PzA+ijiHSuhcDiO+F7zwSBERiRBfPfCtE=' 'sha256-9Ae2rT4hmMUU0iGnFNItnETmqVwqfz6wnLjpsNoAccQ=' 'sha256-9IhiZWL6sk7lRp5pcjkkVpTeNxZ5cYjy3ExyRjoy+as=' 'sha256-oPPsq+/AmYcDc2INOF1sbiPL8y1zqEofm4GOrX3d+2w=' 'sha256-wsrCkgc5ZYb95tKcOLMJZEXsZqcoFF2GYe7RGmX6kLo=' 'sha256-J1QHVAri1VFjAOQCfOmU4cl/lY1GThN9D/8RbXrPDyQ=' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://code.jquery.com https://stackpath.bootstrapcdn.com https://maxcdn.bootstrapcdn.com https://ajax.cloudflare.com https://static.cloudflareinsights.com https://embed.typeform.com https://*.typeform.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://tracker.metricool.com https://connect.facebook.net; frame-src 'self' https://*.typeform.com https://typeform.com https://www.google.com https://recaptcha.google.com https://www.gstatic.com; connect-src 'self' https: https://*.typeform.com https://api.typeform.com https://embed.typeform.com https://www.google-analytics.com https://stats.g.doubleclick.net https://tracker.metricool.com https://connect.facebook.net https://www.facebook.com; media-src 'self' https: blob:; worker-src 'self' blob:; upgrade-insecure-requests; 1
connect-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.bing.net *.braintreegateway.com bucket-ip-website.s3.eu-central-1.amazonaws.com capi-automation.s3.us-east-2.amazonaws.com *.clarity.ms *.convertexperiments.com *.cookiebot.com d3k81ch9hvuctc.cloudfront.net *.datadome.co *.doubleclick.net *.ecotools.be *.ecotools.de *.ecotools.nl ecotools.nl *.etrusted.com *.facebook.com *.facebook.net *.faceworks.nl fraudescanner.com *.googleadservices.com *.google-analytics.com *.googleapis.com www.google.at www.google.be www.google.ch www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bo www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.eg www.google.com.et www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.kh www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ng www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.co.uk www.google.cz www.google.de www.google.dk www.google.es www.google.fr www.google.it www.google.nl www.google.pl www.google.pt www.google.ru *.google.com google.com *.googlesyndication.com *.googletagmanager.com *.googleusercontent.com *.gstatic.com *.hsappstatic.net *.klaviyo.com *.licdn.com *.linkedin.com *.mouseflow.com *.newrelic.com *.nr-data.net *.profitmetrics.io secured-pixel.com *.sentry.io *.sooqr.com *.spotlersearchanalytics.com *.spotlersearch.com *.squeezely.tech squeezely.tech *.trustedshops.com *.typekit.net vercel.com vercel.live *.youtube.com *.ytimg.com api.marker.io ssr.marker.io s3.eu-west-1.amazonaws.com/marker.sessions.prod integrations.etrusted.com; default-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.bing.net *.cloud.microsoft *.convertexperiments.com *.cookiebot.com d3k81ch9hvuctc.cloudfront.net *.datadome.co *.doubleclick.net *.ecotools.nl *.facebook.com *.facebook.net *.googleadservices.com *.google-analytics.com *.googleapis.com www.google.at www.google.be www.google.cz www.google.fr www.google.it www.google.nl *.google.com google.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.klaviyo.com *.licdn.com *.linkedin.com *.mouseflow.com *.profitmetrics.io *.spotlersearchanalytics.com *.spotlersearch.com *.squeezely.tech squeezely.tech *.trustedshops.com *.typekit.net *.youtube.com; frame-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.cloud.microsoft *.cookiebot.com *.doubleclick.net *.facebook.com *.google.com *.googletagmanager.com *.opendns.com *.trustedshops.com vercel.live *.youtube.com *.youtube-nocookie.com app.marker.io; img-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.bing.net bucket-ip-website.s3.eu-central-1.amazonaws.com *.clarity.ms *.cookiebot.com d3k81ch9hvuctc.cloudfront.net *.doubleclick.net *.ecotools.be *.ecotools.de *.ecotools.nl *.etrusted.com *.facebook.com *.facebook.net fraudescanner.com *.googleadservices.com *.google-analytics.com *.googleapis.com www.google.at www.google.be www.google.ch www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cy www.google.com.do www.google.com.eg www.google.com.et www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.kh www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ng www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.uk www.google.cz www.google.de www.google.dk www.google.es www.google.fr www.google.it www.google.nl www.google.pl www.google.pt www.google.ru *.google.com google.com *.googlesyndication.com *.googletagmanager.com *.googleusercontent.com *.gstatic.com *.linkedin.com *.sooqr.com *.squeezely.tech *.trustedshops.com vercel.com *.wikimedia.org *.ytimg.com blob: data: media.marker.io app.marker.io edge.marker.io integrations.etrusted.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.braintreegateway.com capi-automation.s3.us-east-2.amazonaws.com *.clarity.ms *.convertexperiments.com *.cookiebot.com *.doubleclick.net *.ecotools.be *.ecotools.nl *.etrusted.com *.facebook.net *.googleadservices.com *.google-analytics.com *.googleapis.com *.google.com *.googlesyndication.com *.googletagmanager.com *.klaviyo.com *.licdn.com *.mouseflow.com *.newrelic.com *.profitmetrics.io secured-pixel.com *.spotlersearchanalytics.com *.spotlersearch.com squeezely.tech *.trustedshops.com vercel.live edge.marker.io app.marker.io integrations.etrusted.com; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.etrusted.com *.googleapis.com *.google.com *.googletagmanager.com *.gstatic.com *.klaviyo.com *.spotlersearch.com *.typekit.net integrations.etrusted.com; form-action 'self' 'unsafe-inline' 'unsafe-eval' *.facebook.com app.marker.io api.marker.io; font-src 'self' 'unsafe-inline' 'unsafe-eval' *.faceworks.nl *.gstatic.com *.hsappstatic.net *.jsdelivr.net *.klaviyo.com *.typekit.net vercel.live app.marker.io edge.marker.io; child-src 'self' 'unsafe-inline' 'unsafe-eval'  app.marker.io; media-src 'self' 'unsafe-inline' 'unsafe-eval' media.marker.io app.marker.io edge.marker.io; report-uri https://1ea1b78a-0b70-4d23-b29e-391034d153e8.sansec.watch/; report-to report-endpoint; 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' msam.com.br *.msam.com.br wake-components.fbitsstatic.net msam.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br gstatic.com *.elfsightcdn.com *.service.elfsight.com *.elf.site service-reviews-ultimate.elfsight.com static.elfsight.com core.service.elfsight.com tag.goadopt.io googleads.g.doubleclick.net www.googleadservices.com axeptio-api.goadopt.io www.google.com.br disclaimer-api.goadopt.io doubleclick.net elfsightcdn.com; frame-ancestors *.msam.com.br msam.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss:; frame-src 'self' https:; form-action 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net www.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.online-metrix.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.fontawesome.com assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src *.online-metrix.net 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com *.zizel.gr *.fontawesome.com 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com *.cardlink.gr *.alphaecommerce.gr *.eurocommerce.gr *.iris.dias.com.gr *.test-iris.dias.com.gr 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.google.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com bytedance: sslocal: https://widget-v5.boxnow.gr https://widget-v4.boxnow.gr https://widget-v4-dev.boxnow.gr https://widget-v5-dev.boxnow.gr https://widget-v4-stage.boxnow.gr https://widget-v5-stage.boxnow.gr https://go.linkwi.se 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com https://flagcdn.com data: www.apptrian.com www.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com *.zizel.gr *.findbar.io *.facebook.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com js.authorize.net jstest.authorize.net cdn-scripts.signifyd.com www.youtube.com cdn.ampproject.org raw.githubusercontent.com maps.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com *.zizel.gr *.static.adman.gr https://go.linkwi.se https://assets.zizel.gr *.findbar.io *.googletagmanager.com *.facebook.net *.avada.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com fonts.googleapis.com *.zizel.gr *.findbar.io *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com www.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com *.zizel.gr *.findbar.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com cdn.ampproject.org www.apptrian.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com *.zizel.gr artserver.gr api.openai.com *.findbar.io *.google-analytics.com 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' https://cdn.cookielaw.org https://www.googletagmanager.com https://connect.facebook.net https://www.redditstatic.com https://static.ads-twitter.com https://utt.impactcdn.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://cdn.cookielaw.org https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.facebook.com https://alb.reddit.com https://www.redditstatic.com https://analytics.twitter.com https://t.co https://utt.impactcdn.com https://papersai.pxf.io; font-src 'self' data:; connect-src 'self' https://api.dspace.writefull.com https://api-eu.mixpanel.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.facebook.com https://connect.facebook.net https://alb.reddit.com https://pixel-config.reddit.com https://www.redditstatic.com https://analytics.twitter.com https://t.co https://utt.impactcdn.com https://papersai.pxf.io; frame-src 'self' https://www.googletagmanager.com 1
default-src 'self'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=K0CFuWKh6wfLfxZ9ju6i2IebubNh.CPLymcEo59iBXk-1789263926.2754674-1.0.1.1-J1hBM.RV45Y5M69d_a344E1JkoxfjNNudwnjdh5gJZpzNQHybVNDe9PSUTYt5bGHbwhXqAjNH_AUqvnAO5CzjQHqvUBujYqOYBZuQybLuDLqw3HQV6jh4zVEQb6WV61Z84S5r7G2P.MGXhQYTMiSO4iPm4ecqEMteIZU0V2StCqZsed3bBrEfaGAhQtNmEvtEBA4Pl5UW.bz9MWGuDMOEA; report-to cf-eqxqcdclmvznbjtw 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com magento-cloudflare.jetrails.com https://www.googletagmanager.com/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.certcapture.com *.bayengage.com *.ytimg.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://firebasestorage.googleapis.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.certcapture.com *.bayengage.com https://wh.bayengage.com/magento http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io *.shopify.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.fontawesome.com https://fonts.bunny.net *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.certcapture.com *.bayengage.com https://wh.bayengage.com/magento http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com *.googleapis.com *.gstatic.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.google.com 'self' data: fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.pagar.me *.netsgroup.com *.sibs.pt *.seglan.com *.secureacs.com *.rsa3dsauth.com *.apata.io *.cardinalcommerce.com *.santander.com.br *.bradesco.com.br *.bradesco *.stone.com.br *.nubank.com.br *.itau.com.br *.bb.com.br *.caixa.gov.br *.inter.co *.bancointer.com.br *.c6bank.com.br *.bancobmg.com.br *.safra.com.br *.sicoob.com.br *.banrisul.com.br *.banrisul.b.br *.banorte.com *.xpi.com.br *.btgpactual.com *.btgpactualdigital.com *.mercadopago.com.br *.mercadopago.com *.picpay.com *.amedigital.com *.neon.tech *.neon.com.br *.wise.com *.revolut.com *.sandbox.3dsecure.io *.google.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.mercadolibre.com *.pagar.me *.netsgroup.com *.sibs.pt *.seglan.com *.secureacs.com *.rsa3dsauth.com *.apata.io *.cardinalcommerce.com *.santander.com.br *.bradesco.com.br *.bradesco *.stone.com.br *.nubank.com.br *.itau.com.br *.bb.com.br *.caixa.gov.br *.inter.co *.bancointer.com.br *.c6bank.com.br *.bancobmg.com.br *.safra.com.br *.sicoob.com.br *.banrisul.com.br *.banrisul.b.br *.banorte.com *.xpi.com.br *.btgpactual.com *.btgpactualdigital.com *.mercadopago.com.br *.mercadopago.com *.picpay.com *.amedigital.com *.neon.tech *.neon.com.br *.wise.com *.revolut.com *.sandbox.3dsecure.io *.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar *.mercadolivre.com *.disqus.com https://firebasestorage.googleapis.com cdn.mundipagg.com api.pagar.me *.gstatic.com *.hsforms.net *.hsforms.com 'self' data: *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://ws-sandbox.bellunopag.com.br https://api.belluno.digital https://i.k-analytix.com https://i.konduto.com *.mlstatic.com *.mercadopago.com *.disqus.com *.fontawesome.com *.googleapis.com *.gstatic.com *.avada.io 3ds2.pagar.me 3ds2-sdx.pagar.me *.google.com *.hsforms.net *.hsforms.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.googleapis.com *.google.com *.gstatic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.mercadopago.com *.mercadolibre.com https://get.geojs.io *.avada.io api.mundipagg.com api.pagar.me brasilapi.com.br viacep.com.br servicodados.ibge.gov.br *.google.com google.com pay.sandbox.google.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.intercomcdn.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.savacable.com *.force.com *.doubleclick.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.linkedin.com *.facebook.com *.google.com *.googletagmanager.com *.google.co.in *.intercomcdn.com *.intercomassets.com *.hsforms.com *.webtraxs.com *.hubspot.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.callrail.com *.googletagmanager.com *.licdn.com *.doubleclick.net *.pardot.com *.intercom.io *.intercomcdn.com *.savacable.com *.facebook.net *.force.com *.salesforceliveagent.com *.hsforms.net *.ahrefs.com *.webtraxs.com *.hs-scripts.com *.hs-analytics.net *.hs-banner.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.force.com *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.intercomcdn.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.callrail.com *.intercom.io *.linkedin.com wss://*.intercom.io *.doubleclick.net *.hsforms.com *.ahrefs.com *.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com t.zip.co static.zipmoney.com.au static.zip.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com *.disqus.com *.avada.io *.shopify.com player.vimeo.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com static.zipmoney.com.au static.zip.co zip.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app assets.braintreegateway.com *.fontawesome.com https://fonts.bunny.net *.googleapis.com *.addtoany.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.googleapis.com https://get.geojs.io *.avada.io http://dpm.demdex.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.googleapis.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.cloudflare.com *.bootstrapcdn.com *.dhlparcel.nl https://static.dhlecommerce.nl https://fonts.gstatic.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com *.googlesyndication.com *.tiktok.com *.twitter.com 'self' connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com https://www.google.com/recaptcha/ www.google.com *.google.com *.doubleclick.net www.facebook.com *.googlesyndication.com *.tiktok.com *.addthis.com *.hotjar.com *.cookiebot.com consentcdn.cookiebot.eu https://*.dpdconnect.nl js.mollie.com *.trustpilot.com *.twitter.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com validator.swagger.io *.googleapis.com *.gstatic.com *.google.nl *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com forza-refurbished.nl *.forza-refurbished.nl *.bluebirdday.io *.amazonaws.com *.google.com *.bing.com *.trustpilot.com *.trustpilot.net *.clarity.ms magefan.com cm.magefan.com https://maps.googleapis.com https://maps.gstatic.com *.disqus.com https://www.mollie.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.vimeocdn.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cloudfront.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://img.youtube.com https://firebasestorage.googleapis.com connect.facebook.net graph.facebook.com business.facebook.com https://redchamps.com *.hsforms.net *.hsforms.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com *.gstatic.com *.google.com *.google.bg *.googletagmanager.com www.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.trengo.eu *.addthis.com *.addthisedge.com *.moatads.com chimpstatic.com *.cookiebot.com *.dhlparcel.nl *.bing.com *.hotjar.com *.trustpilot.com *.clarity.ms consent.cookiebot.eu consentcdn.cookiebot.eu https://static.dhlecommerce.nl https://maps.googleapis.com https://*.dpdconnect.nl *.disqus.com js.mollie.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com connect.facebook.net graph.facebook.com business.facebook.com *.hsforms.net *.hsforms.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.dhlparcel.nl https://static.dhlecommerce.nl https://maps.googleapis.com https://fonts.googleapis.com *.trustpilot.com *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://static.klaviyo.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.trengo.eu 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com *.google-analytics.com www.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com *.addthis.com *.trengo.eu *.bing.com *.hotjar.com *.trustpilot.com *.clarity.ms *.cookiebot.com consent.cookiebot.eu consentcdn.cookiebot.eu https://api-gw.dhlparcel.nl https://static.dhlecommerce.nl https://maps.googleapis.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io connect.facebook.net graph.facebook.com business.facebook.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://9637a2fc-703a-41a1-8fac-098933e6d57f.sansec.watch; report-to report-endpoint; 1
default-src 'self'; script-src 'report-sample' 'unsafe-inline' 'self' https://bat.bing.com/p/insights/s/0.8.1 https://cdn-cookieyes.com/client_data/3163df0a6f39249079c92eb3/script.js https://cdn.taboola.com/libtrc/unip/1655489/tfa.js https://connect.facebook.net/en_US/fbevents.js; style-src 'report-sample' 'unsafe-inline' 'self' https://fonts.googleapis.com https://x.klarnacdn.net; object-src 'none'; base-uri 'self'; connect-src 'self' https://api2.amplitude.com https://bat.bing.com https://bat.bing.net https://cdn-cookieyes.com https://edge.eu1.fullstory.com https://eu.klarnaevt.com https://js.klarna.com https://log.cookieyes.com https://o24547.ingest.sentry.io; font-src 'self' data: https://fonts.gstatic.com https://x.klarnacdn.net; frame-src 'self' https://hpp.worldpay.com https://js.klarna.com https://td.doubleclick.net https://www.facebook.com https://www.googletagmanager.com https://www.recaptcha.net; img-src 'self' https://cdn-cookieyes.com https://googleads.g.doubleclick.net https://lantern.roeye.com https://secure.gravatar.com https://www.facebook.com https://www.google-analytics.com https://www.google.co.uk https://www.google.com; manifest-src 'self'; media-src 'self'; worker-src 'self'; report-to csp-endpoint; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' google-analytics.com use.fontawesome.com fonts.googleapis.com fonts.gstatic.com cdn.jsdelivr.net *.google-analytics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://consent.cookiebot.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' data: https:; frame-src 'self' https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.googletagmanager.com https://td.doubleclick.net; connect-src 'self' https://pocanaliticafapp.azurewebsites.net; report-uri /report-csp-violation; upgrade-insecure-requests 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com fonts.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com landofcoder.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com quickchart.io img.youtube.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com widget.freshworks.com m2epro.freshdesk.com *.avada.io *.shopify.com landofcoder.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com fonts.gstatic.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com widget.freshworks.com m2epro.freshdesk.com https://get.geojs.io *.avada.io landofcoder.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; img-src 'self' data: https:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://pagead2.googlesyndication.com https://ajax.googleapis.com https://*.googlesyndication.com https://*.googleadservices.com https://*.google.com https://*.gstatic.com https://*.doubleclick.net; connect-src 'self' https://*.googlesyndication.com https://*.google.com https://*.doubleclick.net; frame-src https://*.googlesyndication.com https://*.doubleclick.net https://www.mbank.net.pl 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.googleapis.com maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com *.gstatic.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com downloads.mailchimp.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com fonts.googleapis.com *.googleapis.com data: maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * js.mollie.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com www.apptrian.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://www.mollie.com *.hsforms.net *.hsforms.com 'self' data: *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com js.mollie.com applepay.cdn-apple.com *.hsforms.net *.hsforms.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com maxcdn.bootstrapcdn.com *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com www.apptrian.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com https://ad.doubleclick.net https://googleads.g.doubleclick.net t.elasticsuite.io *.hsforms.net *.hsforms.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.klarnacdn.net *.fontawesome.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.vivapayments.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://plumrocket.com www.googletagmanager.com www.google.com www.google.com/recaptcha vimeo.com www.youtube-nocookie.com leafstag.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com *.weltpixel.com *.google.com widget-v5.boxnow.gr td.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.apptrian.com *.paypal.com c.paypal.com checkout.paypal.com www.sandbox.paypal.com vimeo.com player.vimeo.com www.youtube.com gallery.mailchimp.com downloads.mailchimp.com form-assets.mailchimp.com chimpstatic.com *.list-manage.com ebizmarts-website.s3.amazonaws.com magefan.com cm.magefan.com *.disqus.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com www.facebook.com bat.bing.net *.vivapayments.com www.clarity.ms https://ss.butlers.gr https://osm.klarnaservices.com *.klarna.com *.klarnaevt.com *.klarnacdn.net business.facebook.com connect.facebook.net graph.facebook.com sandbox.braintree-api.com *.weltpixel.com www.google.gr www.gstatic.com *.googlesyndication.com pagead2.googlesyndication.com adservice.google.com adservice.google.gr *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.apptrian.com player.vimeo.com www.youtube.com maps.googleapis.com *.paypal.com c.paypal.com checkout.paypal.com leafstag.cardinalcommerce.com centinelapi.cardinalcommerce.com songbirdstag.cardinalcommerce.com *.behance.net *.ftcdn.net *.gstatic.com assets.braintreegateway.com api.braintreegateway.com api.sandbox.braintreegateway.com js.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.stat-track.com *.avada.io *.vivapayments.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.disqus.com pay.google.com analytics.braintreegateway.com sandbox.braintree-api.com bat.bing.com www.clarity.ms *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com region1.google-analytics.com *.googlesyndication.com pagead2.googlesyndication.com adservice.google.com adservice.google.gr apis.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com *.klarnacdn.net *.fontawesome.com unsafe-inline assets.braintreegateway.com https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.apptrian.com cm.everesttech.net maps.googleapis.com www.googleapis.com *.paypal.com assets.braintreegateway.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.stat-track.com *.avada.io google.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.cardinalcommerce.com *.google.com analytics.braintreegateway.com sandbox.braintree-api.com bat.bing.com www.clarity.ms *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com region1.google-analytics.com *.googlesyndication.com pagead2.googlesyndication.com adservice.google.com adservice.google.gr stats.g.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://*.google-analytics.com https://www.googletagmanager.com https://www.clarity.ms https://*.doubleclick.net 1
frame-ancestors 'self' ; frame-src 'self' *.google.com *.youtube.com *.doubleclick.net ; connect-src 'self' *.axept.io *.doubleclick.net *.googlesyndication.com *.google-analytics.com *.google.com *.google.fr *.googleadservices.com *.googleapis.com *.mapbox.com *.matomo.cloud *.pointvision.com *.pointvision.fr yoast.com *.youtube.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.axept.io *.clarity.ms *.clickcease.com *.doubleclick.net *.google-analytics.com *.google.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.matomo.cloud *.s4mdsp.com tarteaucitron.io *.youtube.com ; font-src 'self' data: *.gstatic.com ; style-src 'self' 'unsafe-inline' *.mapbox.com *.googleapis.com *.gstatic.com *.youtube.com ; img-src 'self' data: *.pointvision.com *.clarity.ms *.ggpht.com *.google-analytics.com *.google.com *.google.fr *.googletagmanager.com *.gravatar.com *.gstatic.com *.imgix.net *.pointvision.fr *.youtube.com *.ytimg.com 1
default-src 'none'; child-src 'self' https://*.stockholm.se; connect-src 'self' data: *.rekai.se https://*.mediaflow.com https://*.mediaflowpro.com https://*.stockholm.se https://consent.app.cookieinformation.com https://esp-eu.aptrinsic.com https://familjebostader.containers.piwik.pro https://familjebostader.piwik.pro https://infragrid.v.network https://mfstatic.com https://predict.rek.ai https://predict.rekai.se https://translate-pa.googleapis.com https://view.rekai.se https://www.familjebostader.com https://www.google.com https://www.google-analytics.com policy.app.cookieinformation.com; font-src 'self' data: https://*.cloudfront.net/graphik/ https://*.cloudfront.net/lato/ https://*.stockholm.se https://at.alicdn.com https://cdn.scite.ai https://fonts.gstatic.com https://mfstatic.com; form-action 'self' https://*.stockholm.se; frame-src 'self' https://*.mediaflow.com https://*.mediaflowpro.com https://*.stockholm.se https://aptusportalen.familjebostader.com https://export.objektvision.se https://stockholmsstad.varbi.com https://via.tt.se https://www.google.com https://www.youtube.com policy.app.cookieinformation.com; img-src 'self' blob: data: https://*.familjebostader.com https://*.mediaflow.com https://*.mediaflowpro.com https://*.stockholm.se https://cdn.honey.io https://familjebostader.piwik.pro https://fonts.gstatic.com https://im16.inviewer.se https://jonypractic.net https://maps.googleapis.com https://mfstatic.com https://translate.google.com; media-src 'self' blob: data: https://*.mediaflow.com https://*.mediaflowpro.com https://*.stockholm.se; script-src-attr 'self' 'unsafe-inline' https://*.stockholm.se; script-src-elem 'self' 'unsafe-inline' blob: *.rekai.se https://*.stockholm.se https://cdnjs.cloudflare.com https://connect.facebook.net https://familjebostader.containers.piwik.pro https://gc.kis.v2.scr.kaspersky-labs.com https://maxcdn.bootstrapcdn.com https://mfstatic.com https://policy.app.cookieinformation.com https://secured-pixel.com https://static.rekai.se https://via.tt.se https://web-sdk-eu.aptrinsic.com https://www.google.com https://www.gstatic.com policy.app.cookieinformation.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.stockholm.se https://connect.facebook.net https://familjebostader.containers.piwik.pro https://policy.app.cookieinformation.com https://static.rekai.se; style-src-elem 'self' 'unsafe-inline' http://www.familjebostader.com https://*.familjebostader.com https://*.stockholm.se https://fonts.googleapis.com https://gc.kis.v2.scr.kaspersky-labs.com https://maxcdn.bootstrapcdn.com https://mfstatic.com https://web-sdk-eu.aptrinsic.com https://www.familjebostader.com https://www.gstatic.com; style-src-attr 'unsafe-inline' https://*.stockholm.se; style-src 'unsafe-eval' 'unsafe-inline' http://www.familjebostader.com https://*.stockholm.se https://www.familjebostader.com; worker-src blob: https://*.stockholm.se; frame-ancestors https://*.stockholm.se https://www.familjebostader.com; base-uri https://*.stockholm.se; manifest-src https://*.stockholm.se; object-src https://*.stockholm.se; report-to stott-security-endpoint; 1
font-src maxcdn.bootstrapcdn.com fonts.gstatic.com *.alothemes.com *.magepow.com *.cloudfront.net *.reviews.io *.reviews.co.uk cdnjs.cloudflare.com cdn.buttonizer.io use.typekit.net cdn.jsdelivr.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.omniporttest.ocrf.co.uk/ *.omniport.omnicapital.co.uk/ *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors *.hsdcoilovers.com *.wisefab.co.uk *.driftworks.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.youtube-nocookie.com *.doubleclick.net *.hsdcoilovers.com *.wisefab.co.uk *.driftworks.com *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.googletagmanager.com js.mollie.com *.reviews.io *.reviews.co.uk www.xtento.com www.googletagmanager.com www.google.com www.recaptcha.net maps.google.com www.youtube.com accounts.google.com googleads.g.doubleclick.net tpc.googlesyndication.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com validator.swagger.io https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.gstatic.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.google.com *.alothemes.com *.magepow.com flagpedia.net https://www.mollie.com https://redchamps.com *.cloudfront.net *.reviews.io *.reviews.co.uk www.xtento.com cdn.xtento.com www.google.co.uk sr20.driftworks.com www.jdmconcept.com.au www.google.ie www.google.co.nz www.google.pl www.google.es www.google.no www.google.com.hk www.google.se assets.reviews.io www.google.sk www.google.co.th www.google.dk www.google.co.in blob: www.google.lv www.google.lt www.google.fi www.google.it www.google.com.my www.google.ca www.google.rs www.google.co.id www.google.fr www.google.nl www.google.com.mt www.google.de www.google.ee pics.driftworks.com www.google.com.ph www.google.com.au www.google.com.br www.google.gr www.google.co.ke www.google.bg www.google.pt www.google.im www.google.co.jp www.google.hr www.google.si www.google.hu www.google.be www.google.ro www.google.co.il www.google.com.gi www.google.com.kw www.google.com.sg www.google.is www.google.com.cy flagcdn.com www.google.com.mx www.google.com.tw www.google.ae www.google.tn pagead2.googlesyndication.com www.google.com.sa connect.facebook.net www.facebook.com googletagmanager.com *.g.doubleclick.net googleads.g.doubleclick.net google.com ad.doubleclick.net ade.googlesyndication.com adservice.google.com ssl.gstatic.com www.gstatic.com maps.googleapis.com maps.gstatic.com *.ggpht.com *.ytimg.com translate.google.com google.ad google.ae google.com.af google.com.ag google.al google.am google.co.ao google.com.ar google.as google.at google.com.au google.az google.ba google.com.bd google.be google.bf google.bg google.com.bh google.bi google.bj google.com.bn google.com.bo google.com.br google.bs google.bt google.co.bw google.com.bz google.ca google.cd google.cf google.cg google.ch google.ci google.co.ck google.cl google.cm google.cn google.com.co google.co.cr google.com.cu google.cv google.com.cy google.cz google.de google.dj google.dk google.dm google.com.do google.dz google.com.ec google.ee google.com.eg google.es google.com.et google.fi google.com.fj google.fm google.fr google.ga google.ge google.gg google.com.gh google.com.gi google.gl google.gm google.gr google.com.gt google.gy google.com.hk google.hn google.hr google.ht google.hu google.co.id google.ie google.co.il google.im google.co.in google.iq google.is google.it google.je google.com.jm google.jo google.co.jp google.co.ke google.com.kh google.ki google.kg google.co.kr google.com.kw google.kz google.la google.com.lb google.li google.lk google.co.ls google.lt google.lu google.lv google.com.ly google.co.ma google.md google.me google.mg google.mk google.ml google.com.mm google.mn google.com.mt google.mu google.mv google.mw google.com.mx google.com.my google.co.mz google.com.na google.com.ng google.com.ni google.ne google.nl google.no google.com.np google.nr google.nu google.co.nz google.com.om google.com.pa google.com.pe google.com.pg google.com.ph google.com.pk google.pl google.pn google.com.pr google.ps google.pt google.com.py google.com.qa google.ro google.rw google.com.sa google.com.sb google.sc google.se google.com.sg google.sh google.si google.sk google.com.sl google.sn google.so google.sm google.sr google.st google.com.sv google.co.th google.com.tj google.tm google.tn google.com.tr google.tt google.com.tw google.co.tz google.co.ug google.co.uk google.com.uy google.co.uz google.com.vc google.co.ve google.co.vi google.com.vn google.vu google.ws google.rs google.co.zw google.cat data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com *.googletagmanager.com https://maps.googleapis.com cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com cdn.jsdelivr.net chimpstatic.com downloads.mailchimp.com *.list-manage.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net *.alothemes.com *.magepow.com *.gstatic.com maps.googleapis.com js.mollie.com *.reviews.io *.reviews.co.uk www.xtento.com cdn.xtento.com cdn.buttonizer.io www.formilla.com connect.facebook.net www.googletagmanager.com pagead2.googlesyndication.com widget.reviews.co.uk player.vimeo.com static.klaviyo.com googletagmanager.com tagmanager.google.com www.google.com www.gstatic.com www.recaptcha.net maps.google.com www.youtube.com apis.google.com translate.google.com translate.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com maxcdn.bootstrapcdn.com data: cdnjs.cloudflare.com unsafe-inline assets.braintreegateway.com cdn.jsdelivr.net downloads.mailchimp.com https://static.klaviyo.com *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com *.alothemes.com *.magepow.com *.gstatic.com *.cloudfront.net *.reviews.io *.reviews.co.uk cdn.buttonizer.io assets.reviews.io d19ayerf5ehaab.cloudfront.net widget.reviews.co.uk googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline'; object-src js.mollie.com www.youtube.com data: 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com vimeo.com www.googleadservices.com www.google-analytics.com analytics.google.com *.googletagmanager.com *.omniporttest.ocrf.co.uk/ *.omniport.omnicapital.co.uk/ https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.ideal-postcodes.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app *.alothemes.com *.magepow.com www.gstatic.com maps.googleapis.com *.cloudfront.net *.reviews.io *.reviews.co.uk cdn.buttonizer.io api.buttonizer.io pagead2.googlesyndication.com www.facebook.com www.google.pl properties: www.formilla.com data: translate.googleapis.com overbridgenet.com api.reviews.co.uk www.google.co.uk www.google.is www.googletagmanager.com *.g.doubleclick.net googleads.g.doubleclick.net www.google.com ad.doubleclick.net accounts.google.com pay.google.com google.ad google.ae google.com.af google.com.ag google.al google.am google.co.ao google.com.ar google.as google.at google.com.au google.az google.ba google.com.bd google.be google.bf google.bg google.com.bh google.bi google.bj google.com.bn google.com.bo google.com.br google.bs google.bt google.co.bw google.com.bz google.ca google.cd google.cf google.cg google.ch google.ci google.co.ck google.cl google.cm google.cn google.com.co google.co.cr google.com.cu google.cv google.com.cy google.cz google.de google.dj google.dk google.dm google.com.do google.dz google.com.ec google.ee google.com.eg google.es google.com.et google.fi google.com.fj google.fm google.fr google.ga google.ge google.gg google.com.gh google.com.gi google.gl google.gm google.gr google.com.gt google.gy google.com.hk google.hn google.hr google.ht google.hu google.co.id google.ie google.co.il google.im google.co.in google.iq google.is google.it google.je google.com.jm google.jo google.co.jp google.co.ke google.com.kh google.ki google.kg google.co.kr google.com.kw google.kz google.la google.com.lb google.li google.lk google.co.ls google.lt google.lu google.lv google.com.ly google.co.ma google.md google.me google.mg google.mk google.ml google.com.mm google.mn google.com.mt google.mu google.mv google.mw google.com.mx google.com.my google.co.mz google.com.na google.com.ng google.com.ni google.ne google.nl google.no google.com.np google.nr google.nu google.co.nz google.com.om google.com.pa google.com.pe google.com.pg google.com.ph google.com.pk google.pl google.pn google.com.pr google.ps google.pt google.com.py google.com.qa google.ro google.rw *.google.no *.google.de *.google.com.au *.google.at 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.omniporttest.ocrf.co.uk/ *.omniport.omnicapital.co.uk/ 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net data: *.hotjar.com github.com cdn.honey.io *.photoslurp.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.redsys.es facebook.com *.adyen.com *.redsys.com *.pinterest.com sas.redsys.es *.facebook.com sas.redsys.com checkoutshopper-live.adyen.com checkoutshopper-test.adyen.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.hotjar.com *.google.com *.addthis.com *.kampyle.com facebook.com docs.google.com *.facebook.com *.pinterest.es *.pinterest.com service.force.com *.criteo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.ftcdn.net *.behance.net magefan.com cm.magefan.com *.disqus.com blob: *.w3.org *.bing.com c.bing.com *.hotjar.com *.paypal.com bat.bing.com *.clarity.ms *.google.fr facebook.com *.kampyle.com *.gstatic.com *.ladybird.nl *.google.com *.fbcdn.net *.cookiepro.com *.pinterest.com *.pronovias.com *.facebook.com *.google.es *.photoslurp.com *.googleapis.com *.sanpatrick.com *.nicolemilano.com *.cdninstagram.com instagram.com *.verawangbride.com *.whiteonebridal.com *.googletagmanager.com scontent.fmad7-1.fna.fbcdn.net click.s50.exacttarget.com * data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.disqus.com unpkg.com *.force.com bat.bing.com *.adyen.com *.pinimg.com *.google.com *.hotjar.com *.tiktok.com dropbox.com gstatic.com *.clarity.ms *.moatads.com *.addthis.com *.kampyle.com *.gstatic.com *.dropbox.com *.cookiepro.com *.facebook.net *.facebook.com facebook.net *.photoslurp.com *.googleapis.com *.salesforce.com *.addthisedge.com *.secure.force.com http://polyfill.io service.force.com bam.eu01.nr-data.net *.nicolemilano.com *.empathybroker.com x.empathy.co x.staging.empathy.co *.lightning.force.com analytics.tiktok.com *.googletagmanager.com googletagmanager.com *.salesforceliveagent.com static.lightning.force.com *.la3-c1cs-fra.salesforceliveagent.com d.la3-c1cs-fra.salesforceliveagent.com pronoviasgroup.my.salesforce.com *.pinterest.com player.vimeo.com *.criteo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.honey.io *.kampyle.com *.force.com *.photoslurp.com service.force.com *.nicolemilano.com gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.vimeo.com *.akamaized.net *.photoslurp.com player.vimeo.com vod-progressive.akamaized.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net *.tt.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io wss: bat.bing.com *.force.com *.tiktok.com *.google.com *.hotjar.io *.clarity.ms *.vimeo.com d.clarity.ms h.clarity.ms *.kampyle.com *.hotjar.com google.com vc.hotjar.io ws7.hotjar.com *.instagram.com *.cookiepro.com *.pinterest.com *.amazonaws.com client.rum.us-east-1.amazonaws.com sts.eu-west-1.amazonaws.com ws16.hotjar.com ws20.hotjar.com ws22.hotjar.com ws23.hotjar.com ws33.hotjar.com ws34.hotjar.com *.facebook.com *.googleapis.com *.photoslurp.com *.secure.force.com bam.eu01.nr-data.net *.empathybroker.com x.empathy.co x.staging.empathy.co stats.g.doubleclick.net *.google-analytics.com api.empathybroker.com api.empathy.co api.staging.empathy.co *.cardinalcommerce.com api-staging.empathybroker.com pronoviasgroupcti.secure.force.com analytics.pangle-ads.com properties *.onetrust.com *.criteo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' *.veone.io *.googleapis.com *.gstatic.com; img-src 'self' data: blob: *.veone.io; style-src 'self' *.googleapis.com *.gstatic.com 'unsafe-inline'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.veone.io; connect-src 'self' blob: *.veone.io; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.cookiebot.com *.ad-srv.net xyz.lola-haengematten.de ad4m.at connect.facebook.net *.stripe.com pay.google.com *.pay.google.com; frame-src 'self' *.pinterest.com *.pinimg.com *.doubleclick.net *.googleadservices.com *.googletagmanager.com fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com www.google.com/recaptcha *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de api.boldcommerce.com api.staging.boldcommerce.com *.paypal.com *.bold.ninja static-eps.secure.boldcommerce.com static-eps.secure.staging.boldcommerce.com *.stripe.com *.klarna.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.xtento.com *.cookiebot.com *.ad-srv.net xyz.lola-haengematten.de ad4m.at *.rebounce.ai pay.google.com *.pay.google.com; connect-src 'self' *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.ad-srv.net xyz.lola-haengematten.de ad4m.at *.stripe.com *.klarna.com pay.google.com *.pay.google.com; img-src 'self' data: *.google-analytics.com *.googletagmanager.com *.ad-srv.net xyz.lola-haengematten.de ad4m.at www.facebook.com; child-src 'self' *.lola-haengematten.de xyz.lola-haengematten.de; worker-src 'self' blob: *.lola-haengematten.de xyz.lola-haengematten.de; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://maxcdn.bootstrapcdn.com/ *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.weltpixel.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * api.razorpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.trackedlink.net https://www.google.co.in/ https://www.facebook.com/ https://www.magecomp.com/ https://raw.githubusercontent.com/ magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com cdn.razorpay.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com https://connect.facebook.net https://cookie-script.com/ https://cdn.cookie-script.com/ https://secure.paytmpayments.com/ https://staticpg.paytmpayments.com/ https://accounts.paytm.com/ *.disqus.com *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com checkout.razorpay.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com webchat.dotdigital.com webchat.staging.dotdigital.com https://maxcdn.bootstrapcdn.com/ https://staticpg.paytmpayments.com/ *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com https://secure.paytmpayments.com/ https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com lumberjack.razorpay.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
connect-src 'self' https: data: *.app.cookieinformation.com *.google-analytics.com maps.googleapis.com danfoss-ps-shared-test-services-prod.z01.azurefd.net danfoss-ps-prod-fd-algolia-prod.z01.azurefd.net *.algolia.net northeurope-2.in.applicationinsights.azure.com gst.powersource.danfoss.com *.bf.dynatrace.com *.siteintercept.qualtrics.com *.g.doubleclick.net *.analytics.google.com googletagmanager.com danfoss-appswitcherapi-prod-webapi.azurewebsites.net; frame-src https://policy.app.cookieinformation.com https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://*.danfoss.com https://danfoss.eu.qualtrics.com https://player.youku.com; script-src 'self' 'nonce-ZGM2ZDBhYWUtNGE3NS00ZmQzLWE2ZTYtZjU3OWRiZjAwYmIx' 'strict-dynamic' ; script-src-elem 'self' 'nonce-ZGM2ZDBhYWUtNGE3NS00ZmQzLWE2ZTYtZjU3OWRiZjAwYmIx' 'strict-dynamic' ; style-src 'self' 'unsafe-inline' https://cdn.mosaic.danfoss.com https://fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' https://cdn.mosaic.danfoss.com https://fonts.googleapis.com; style-src-attr 'unsafe-inline'; font-src https://*.danfoss.com https://fonts.googleapis.com https://cdn.mosaic.danfoss.com https://fonts.gstatic.com; object-src 'none'; img-src 'self' data: https://cdn.mosaic.danfoss.com https://*.danfoss.com https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com https://www.clarity.ms https://www.c.clarity.ms https://maps.googleapis.com https://maps.gstatic.com https://i.ytimg.com https://login.windows.net https://*.contentstack.com https://*.qualtrics.com https://*.g.doubleclick.net https://*.google.com; manifest-src 'self' https://cdn.mosaic.danfoss.com; frame-ancestors 'self'; base-uri 'self'; report-uri /api/csp-report 1
base-uri 'self'; connect-src 'self' https://www.paynearme.com https://s.yimg.com https://www.google-analytics.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://www.gstatic.com https://bat.bing.com google.com.pr *.google.com.pr hotjar.io *.hotjar.io *.google.com wss://ws.hotjar.com www.googleadservices.com https://api.rollbar.com https://content.hotjar.io https://www.commissionsoup.com https://metrics.hotjar.io https://*.google.com ninjafetch.com *.ninjafetch.com neuro-id.com *.neuro-id.com neuroid.cloud *.neuroid.cloud; default-src 'self'; font-src 'self' data: https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; form-action 'self' https://*.yodlee.com; frame-src 'self' https://www.paynearme.com https://td.doubleclick.net https://www.googletagmanager.com bat.bing.com https://widget.sophtron.com https://*.edgescore.com https://*.yodlee.com https://www.commissionsoup.com; img-src 'self' data: https://sp.analytics.yahoo.com https://static.ads-twitter.com https://t.co analytics.twitter.com https://*.googletagmanager.com https://*.google-analytics.com https://*.g.doubleclick.net https://*.google.com totalcardinc.com *.totalcardinc.com bing.com *.bing.com bat.bing.net www.google.com.mx www.google.com.ng www.googleadservices.com www.google.com.ph https://edge-public-assets.s3.us-east-2.amazonaws.com https://www.commissionsoup.com https://images.totalcardinc.com https://www.google.co.in www.google.com.pr https://bat.bing.com https://www.google.com.pr; object-src 'none'; script-src https://www.paynearme.com https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com 'self' static.ads-twitter.com *.static.ads-twitter.com yimg.com *.yimg.com bat.bing.com *.bat.bing.com hotjar.com *.hotjar.com engagement.technology *.engagement.technology g.doubleclick.net *.g.doubleclick.net googleadservices.com *.googleadservices.com ninjafetch.com *.ninjafetch.com yodlee.com *.yodlee.com neuro-id.com *.neuro-id.com 'unsafe-inline'; style-src 'self' https://www.paynearme.com https://unpkg.com/swiper@7/swiper-bundle.min.css https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' https://ninjafetch.com https://www.paynearme-sandbox.com; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=6eUzrxvm5HF5S2Hjz5xziy4Zjzc1xWbhnWI4LtOH3bg-1789285942.7093034-1.0.1.1-6uJcJYvUjTl_QryAU7611YB5THND4E0ce5H3EZbQz5vOzsijpM7ccLryRrSFa4m7WmMLeGZY4sRrZEvXNXDCDZx_JIF7engbdyZCsX.NqmSeYZsHgxsjPCXNiFagCVkzkSsUUSnCHDAdn1PCGxEmJfGSOo.vhtQTofjzgVWxbzP4Z671G1UsQUbA7mg8Bva8HDfbeUoSh9E.zzkhEULwGQ; report-to cf-korfhmqyodlhnhiy 1
object-src  'none'; connect-src 'self' *.nextdoorstudios.com *.asgmax.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.nextdoorstudios.com *.asgmax.com join.gammasecure.com; script-src 'self' *.nextdoorstudios.com *.asgmax.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.nextdoorstudios.com *.asgmax.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://getamevia.com; style-src 'self' 'unsafe-inline' https://getamevia.com; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://getamevia.com https://clients.webfundament.com; frame-src https://www.google.com https://www.recaptcha.net https://www.paypal.com https://getamevia.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://clients.webfundament.com https://www.paypal.com; report-uri /csp-report 1
script-src 'unsafe-inline' 'unsafe-eval'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=p3pKJo1FigQosAabGv2LxFZhtyX_XRuWER845DJtcTY-1789261851.6703057-1.0.1.1-aiRh85MAvKid11rj5mQzpNk1b1lxTNn4JuFloN2lO4hLao2D2Hw3XzJIldsV8lg_6fLU65jfaUPxOszFlvIlLdsF5acusZYN_z1DmFx294pz4OY9mPo6XpmWUN8xs2HRoxQhf_roYh03YG02YRI58cMXOZOXXWAWRUhBWnRpRho; report-to cf-csp-endpoint 1
default-src 'self'; script-src 'self' 'nonce-g508Lmd81YpoRWvmjW6Z-QrJLgmA0JZOJ5Eaw6H2CsK8e9I-B2w-eg' 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com; report-uri https://www.asterdmhealthcare.in/@http-reporting?csp=report&requestTime=1789262739037952 1
default-src 'self'; base-uri 'none'; connect-src https: wss:; font-src https: data:; form-action 'self'; frame-ancestors 'self'; frame-src https:; img-src https: data:; media-src 'self' https://widget.molin.ai; object-src 'none'; script-src https: 'unsafe-eval' 'unsafe-inline'; style-src https: 'unsafe-inline'; report-uri https://kosik.bauhaus.sk/csp_report; report-to bauhaus-csp; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://lwadm.com https://pagead2.googlesyndication.com https://*.google-analytics.com https://*.googleadservices.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://*.googleapis.com https://*.openstreetmap.org https://*.tile.openstreetmap.org https://*.gstatic.com; connect-src 'self' https://lwadm.com https://*.google-analytics.com; frame-src https://googleads.g.doubleclick.net https://*.google.com https://challenges.cloudflare.com; font-src 'self' data:; object-src 'none'; base-uri 'self' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src https:; form-action 'self' https:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.naver.net https://*.naver.com https://*.pstatic.net https://ssp.igaw.io https://cdn.flarelane.com https://*.kakao.com https://*.kakaocdn.net https://*.daumcdn.net https://*.googletagmanager.com https://*.google-analytics.com https://*.googleapis.com https://apis.google.com https://connect.facebook.net https://*.facebook.com https://*.channel.io https://matomo.carmore.kr https://rum.beusable.net https://*.airbridge.io https://id.abr.ge https://*.megadata.co.kr https://*.openai.com https://*.clarity.ms https://*.tmap.co.kr https://apis.openapi.sk.com https://js.tosspayments.com https://unpkg.com https://www.youtube.com https://*.ytimg.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' data: blob: https:; worker-src 'self' blob:; object-src 'none'; report-uri /home/php/csp-report.php 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https: data:; frame-src 'self' https://*.montonio.com https://*.youtube.com; connect-src 'self' https:; frame-ancestors 'self' https://zback2.chilli.ee https://zback.chilli.ee 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://platform.twitter.com https://www.youtube.com https://connect.facebook.net https://challenges.cloudflare.com https://js.stripe.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://fundingchoicesmessages.google.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://securepubads.g.doubleclick.net https://static.criteo.net https://static.cloudflareinsights.com https://anymind360.com https://cdn.jsdelivr.net https://cdn.id5-sync.com https://oa.openxcdn.net https://tags.crwdcntrl.net https://googletagservices.com https://www.googletagservices.com https://console.googletagservices.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; connect-src 'self' wss: https:; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://platform.twitter.com https://www.facebook.com https://challenges.cloudflare.com https://js.stripe.com https://hooks.stripe.com https://googleads.g.doubleclick.net https://www.google.com https://fundingchoicesmessages.google.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://cm.g.doubleclick.net https://gum.criteo.com https://console.googletagservices.com; font-src 'self' https://fonts.gstatic.com data:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri https://counter-pressing.com/api/csp-report; report-to csp-endpoint 1
font-src *.typekit.net *.gstatic.com www.paypalobjects.com cdnjs.cloudflare.com fonts.gstatic.com *.googleapis.com 'unsafe-inline' data: *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net *.cloudflare.com *.zopim.com *.tawk.to *.jsdelivr.net media.flixfacts.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com magento.buildify.shop oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com *.facebook.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.hana.ondemand.com 'self'; img-src widgets.magentocommerce.com 'unsafe-inline' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com s3.amazonaws.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://firebasestorage.googleapis.com https://widgets.payflex.co.za oppwa.com *.oppwa.com *.peachpayments.com *.eu-west-1.amazonaws.com *.cloudflare.com *.google.com *.google.lv *.google.co.za *.google.com.na *.google.na *.zopim.com *.nosto.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.zopim.io *.sfdr.co sfdr.co *.tawk.to tawk.link *.tawk.link *.addthis.com *.jsdelivr.net *.facebook.com *.azurewebsites.net maps.googleapis.com app.mobicredwidget.co.za amcglobal.sc.omtrdc.net media.flixcar.com rt.flix360.com assets.secure.checkout.visa.com data: 'self' 'unsafe-inline'; style-src cdnjs.cloudflare.com fonts.googleapis.com magento.buildify.shop https://static.klaviyo.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net oppwa.com *.oppwa.com *.peachpayments.com *.cloudflare.com *.googleapis.com *.jsdelivr.net www.gstatic.com media.flixcar.com 'unsafe-inline' data: https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; media-src widget-v4.tidiochat.com *.zdassets.com 'self' 'unsafe-inline'; connect-src wss://socket.tidio.co telemetrics.klaviyo.com magento.buildify.shop www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://*.ingest.sentry.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://get.geojs.io *.avada.io oppwa.com *.oppwa.com *.peachpayments.com *.testfreaks.com *.nosto.com *.hotjar.io *.hotjar.com *.doubleclick.net *.zendesk.com *.tawk.to wss://*.tawk.to *.tawk.link *.addthis.com *.addthisedge.com *.nr-data.net *.what3words.com vsb111.tawk.to ekr.zdassets.com api.magento.com commerce.adobedc.net app.mobicredwidget.co.za wss://widget-mediator.zopim.com bam.nr-data.net *.googletagmanager.com security-hub.vaimo.network 'unsafe-eval' data: 'self' 'unsafe-inline'; frame-src magento.buildify.shop bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com platform.twitter.com www.google.com oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com *.nosto.com *.issuu.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.criteo.net *.criteo.com *.addthis.com *.facebook.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; script-src www.instagram.com code.tidio.co widget-v4.tidiochat.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com platform.twitter.com platform.instagram.com apis.google.com magento.buildify.shop *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://browser.sentry-cdn.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.klevu.com *.ksearchnet.com *.avada.io *.shopify.com https://widgets.payflex.co.za https://partpayassets.blob.core.windows.net *.oppwa.com oppwa.com *.peachpayments.com *.zopim.com *.videoly.co sfdr.co *.cnetcontent.com *.cloudfront.net *.newrelic.com *.klevu.com *.google.lv *.google.co.za *.google.com.na *.google.na *.cloudflare.com *.cloudflareinsights.com *.nosto.com *.hotjar.com *.googletagmanager.com *.criteo.net *.criteo.com *.sfdr.co *.tawk.to *.tawk.link *.jsdelivr.net *.addthis.com *.addthisedge.com *.moatads.com *.mouseflow.com *.nr-data.net *.facebook.com *.what3words.com maps.googleapis.com commerce.adobedtm.com magento-recs-sdk.adobe.net static.zdassets.com app.mobicredwidget.co.za www.gstatic.com connect.facebook.net bam.nr-data.net js.testfreaks.com media.flixfacts.com media.flixcar.com security-hub.vaimo.network https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; 1
font-src fonts.gstatic.com use.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com https://widgets.trustedshops.com *.yotpo.com *.googleapis.com *.klarnacdn.net maxcdn.bootstrapcdn.com *.stripe.com klarna.com *.klarna.com *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com https://plumrocket.com *.yotpo.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com https://plumrocket.com https://accounts.google.com *.yotpo.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com https://maps.gstatic.com https://maps.googleapis.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com *.yotpo.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.koongo.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com https://rum.hlx.page *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com https://maps.googleapis.com https://maps.gstatic.com https://vimeo.com https://player.vimeo.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://accounts.google.com https://www.gstatic.com *.yotpo.com *.klarna.com *.klarnacdn.net *.klarnaservices.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com klarna.com *.klarnaevt.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://accounts.google.com https://www.gstatic.com *.yotpo.com cdnjs.cloudflare.com/ajax/libs/highlight.js/9.3.0/styles/darkula.min.css *.klarnacdn.net maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.magento-datasolutions.com *.magento-ds.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com https://maps.googleapis.com https://places.googleapis.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://accounts.google.com *.yotpo.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.koongo.com *.klarnaservices.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com *.stripe.com klarna.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://js.stripe.com https://pay.google.com https://payments.google.com https://applepay.cdn-apple.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://cdn.moogold.com https://lh3.googleusercontent.com https://ggpick.ams3.cdn.digitaloceanspaces.com https://ggpick.ams3.digitaloceanspaces.com; font-src 'self' data:; media-src 'self' data: blob: https://cdn.moogold.com https://lh3.googleusercontent.com https://ggpick.ams3.cdn.digitaloceanspaces.com https://ggpick.ams3.digitaloceanspaces.com; worker-src 'self' blob:; manifest-src 'self'; connect-src 'self' https://o4511874189426688.ingest.de.sentry.io https://api.stripe.com https://q.stripe.com https://r.stripe.com https://m.stripe.network https://pay.google.com https://payments.google.com https://cardpay.com https://*.cardpay.com https://sandbox.cardpay.com https://challenges.cloudflare.com; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://pay.google.com https://payments.google.com https://cardpay.com https://*.cardpay.com https://sandbox.cardpay.com https://challenges.cloudflare.com; form-action 'self' https://js.stripe.com https://hooks.stripe.com https://cardpay.com https://*.cardpay.com https://sandbox.cardpay.com; base-uri 'self'; object-src 'none'; frame-ancestors 'self' 1
script-src 'strict-dynamic' 'nonce-52a6c3b760c96b621198435e98a4d8b9' 'unsafe-inline' 'unsafe-eval' https: ; frame-ancestors 'self' ; base-uri 'self'; object-src 'none'; report-uri https://csp.phenompeople.com/violations; 1
default-src 'self'; script-src 'nonce-fB4lgJsIzkk11MdQs6oXDA==' 'strict-dynamic' 'unsafe-inline' 'report-sample' https: https://cdn.ampproject.org; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https://*.gstatic.com https://tpc.googlesyndication.com; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https://hifitorget.se https://*.hifitorget.se https://*.criipto.id https://bifrostauth.com; frame-ancestors 'self'; report-uri /csp-report.php 1
report-uri /-/csp_report?report_only=true&source=webapp-no-object-src; script-src 'nonce-p35196gq0w5b7k86j2jfbxein' 'nonce-rvhhfk2oq2dv1prnse45ygy2g' 'self' https: 'strict-dynamic' 'report-sample' 'wasm-unsafe-eval' 'unsafe-inline' https://ssl.gstatic.com https://apis.google.com https://accounts.google.com/gsi/client https://d3ki9tyy5l5ruj.cloudfront.net https://d1gwm4cf8hecp4.cloudfront.net https://d1a3usp4brejtz.cloudfront.net https://d3u0af8znnrzzj.cloudfront.net https://d1dg3ns82tdjz3.cloudfront.net https://d2y3xhxlqzgfzh.cloudfront.net https://oauth.googleusercontent.com https://app.box.com https://platform.twitter.com https://connect.facebook.net https://platform.harvestapp.com https://www.google.com https://docs.google.com https://www.gstatic.com https://www.dropbox.com https://www.paypal.com/sdk/js https://recordwidget.vimeocdn.com https://api.stripe.com https://hooks.stripe.com https://js.stripe.com https://m.stripe.com https://m.stripe.network https://q.stripe.com https://prod-eu1.app.asana.com https://prod-au1.app.asana.com https://prod-jp1.app.asana.com https://prod-me1.app.asana.com https://cdn.cookielaw.org https://861-iiv-735.mktoweb.com https://resources.asana.com https://ccwizard.vertexsmb.com; frame-ancestors 'self' https://teams.integrations.asana.plus https://teams-beta.integrations.asana.plus https://teams-uat.integrations.asana.plus https://teams.microsoft.com https://teams.cloud.microsoft; frame-src 'self' blob: https://www.figma.com https://*.invisionapp.com https://invis.io https://miro.com https://whimsical.com https://www.loom.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.com https://www.canva.com https://xd.adobe.com https://*.looker.com https://lucid.app https://*.okta.com https://*.sharepoint.com https://*.dovetail.com https://*.tableau.com https://airtable.com https://*.mural.co https://help.asana.com https://accounts.google.com https://accounts.google.com/gsi/ https://content.googleapis.com https://www.google.com https://docs.google.com https://fast.wistia.net https://www.dropbox.com https://platform.harvestapp.com https://forms.asana.plus https://forms-server.asana.plus https://local.asana.com https://asana.com https://apisandbox.zuora.com https://test.zuora.com https://www.zuora.com https://www.sandbox.paypal.com https://www.paypal.com https://recordwidget.vimeocdn.com https://api.stripe.com https://hooks.stripe.com https://js.stripe.com https://m.stripe.com https://m.stripe.network https://q.stripe.com https://pixel.asana.com https://d3ki9tyy5l5ruj.cloudfront.net https://prod-eu1.app.asana.com https://prod-au1.app.asana.com https://prod-jp1.app.asana.com https://prod-me1.app.asana.com https://cdn.cookielaw.org https://form.asana.com https://form.asana-gov.com https://form-beta.asana.com https://form-stag.luna-s.org https://localhost.asana.com:3000 https://861-iiv-735.mktoweb.com https://resources.asana.com https://ccwizard.vertexsmb.com https://*.qualtrics.com; worker-src 'self' blob: https://d3ki9tyy5l5ruj.cloudfront.net; child-src 'self' blob: https://d3ki9tyy5l5ruj.cloudfront.net; object-src 'none'; base-uri 'none' 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://d2ro8nulmiov87.cloudfront.net https://fast.appcues.com https://cdnjs.cloudflare.com https://das7jppvi5n0n.cloudfront.net https://d1oqyjra2dknw2.cloudfront.net https://*.freshchat.com https://*.freshmarketer.eu https://euc-widget.freshworks.com https://ajax.googleapis.com https://analytics.google.com https://*.analytics.google.com https://www.google-analytics.com https://*.google-analytics.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://widget.intercom.io https://js.intercomcdn.com https://code.jquery.com http://localhost:* https://js-agent.newrelic.com https://d3v732z7m2wa8j.cloudfront.net https://js.pusher.com https://d3m3vzpdohm3qj.cloudfront.net; script-src-elem 'self' 'unsafe-inline' https://d2ro8nulmiov87.cloudfront.net https://fast.appcues.com https://cdnjs.cloudflare.com https://das7jppvi5n0n.cloudfront.net https://d1oqyjra2dknw2.cloudfront.net https://*.freshchat.com https://*.freshmarketer.eu https://euc-widget.freshworks.com https://ajax.googleapis.com https://analytics.google.com https://*.analytics.google.com https://www.google-analytics.com https://*.google-analytics.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://widget.intercom.io https://js.intercomcdn.com https://code.jquery.com http://localhost:* https://js-agent.newrelic.com https://d3v732z7m2wa8j.cloudfront.net https://js.pusher.com https://d3m3vzpdohm3qj.cloudfront.net; style-src 'self' 'unsafe-inline' https://d2ro8nulmiov87.cloudfront.net https://fast.appcues.com https://stackpath.bootstrapcdn.com https://d4sn1cftmz9k0.cloudfront.net/ https://das7jppvi5n0n.cloudfront.net https://d1oqyjra2dknw2.cloudfront.net https://*.freshchat.com https://euc-widget.freshworks.com https://fonts.googleapis.com http://localhost:* https://d3m3vzpdohm3qj.cloudfront.net; img-src 'self' data: https://images.appcues.com https://app.ihasco.co.uk https://www.interactive-training.net https://aws-ihasco-application-data-public.s3.amazonaws.com https://aws-ihasco-application-data-public.s3-eu-west-1.amazonaws.com https://aws-ihasco-application-data-public.s3-eu-west-2.amazonaws.com https://aws-ihasco-application-data-public.s3.eu-west-2.amazonaws.com https://s3.amazonaws.com https://aws-ihasco-application-data-public.s3.amazonaws.com https://aws-ihasco-application-data-public.s3-eu-west-1.amazonaws.com https://aws-ihasco-application-data-public.s3-eu-west-2.amazonaws.com https://aws-ihasco-application-data-public.s3.eu-west-2.amazonaws.com https://ihasco-application-data-public.s3.amazonaws.com https://ihasco-application-data-public.s3-eu-west-1.amazonaws.com https://ihasco-application-data-public.s3-eu-west-2.amazonaws.com https://ihasco-application-data-public.s3.eu-west-2.amazonaws.com https://d4sn1cftmz9k0.cloudfront.net/ https://*.freshchat.com https://analytics.google.com https://*.analytics.google.com https://www.google-analytics.com https://*.google-analytics.com https://www.google.co.uk https://www.googletagmanager.com https://www.gravatar.com https://js.intercomcdn.com https://*.intercomcdn.com https://uploads.intercomusercontent.com https://static.intercomassets.com https://images.unsplash.com; font-src 'self' data: https://d2ro8nulmiov87.cloudfront.net https://fonts.googleapis.com https://fonts.gstatic.com https://js.intercomcdn.com https://*.intercomcdn.com https://cdn.scite.ai; connect-src 'self' https://ixil4045vl.execute-api.eu-west-2.amazonaws.com https://ai-bespoke-service-production-files.s3.eu-west-2.amazonaws.com https://api.appcues.net wss://api.appcues.net https://fast.appcues.com https://authentication.ihasco.co.uk https://8vosgu2i00.execute-api.eu-west-2.amazonaws.com/tokens/request https://d4sn1cftmz9k0.cloudfront.net/ https://uph8je1ugd.execute-api.eu-west-2.amazonaws.com wss://*.freshchat.com https://*.freshchat.com https://*.freshmarketer.eu https://euc-widget.freshworks.com https://analytics.google.com https://*.analytics.google.com https://www.google-analytics.com https://*.google-analytics.com https://www.google.co.uk https://stats.g.doubleclick.net https://www.googletagmanager.com https://www.ihasco.co.uk https://api-iam.eu.intercom.io https://*.intercom.io wss://*.intercom.io https://*.intercomcdn.com https://uploads.intercomusercontent.com http://localhost:* ws://localhost:* https://bam.nr-data.net https://api.ihasco.co.uk https://api.interactive-training.net https://sockjs-eu.pusher.com wss://ws-eu.pusher.com https://787c9oc45m.execute-api.eu-west-2.amazonaws.com https://*.vimeocdn.com https://player.vimeo.com; object-src 'self' 'self' https://app.ihasco.co.uk https://www.interactive-training.net; media-src 'self' blob: https://d4sn1cftmz9k0.cloudfront.net/ https://player.vimeo.com; frame-src 'self' https://d4sn1cftmz9k0.cloudfront.net/ https://portal.e-lfh.org.uk https://*.freshchat.com https://*.intercom.io https://d7xmptt7e32b1.cloudfront.net; child-src 'none'; worker-src 'self' blob:; form-action 'self' https://authentication.ihasco.co.uk; base-uri 'self'; manifest-src 'self'; frame-ancestors *; report-uri https://nye42htnnh.execute-api.eu-west-2.amazonaws.com/report 1
font-src fonts.gstatic.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.twitter.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.youtube.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.tawk.to 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.rs www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.google.com.ua *.tawk.to https://ga4ss.kidsland.me data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.ampproject.org raw.githubusercontent.com tagmanager.google.com https://www.googletagmanager.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.trackedlink.net *.adform.net *.jsdelivr.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.tawk.to https://ga4ss.kidsland.me 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com unsafe-inline assets.braintreegateway.com *.tawk.to 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.ampproject.org https://www.google-analytics.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.googleadservices.com *.google-analytics.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.tawk.to wss://vsa120.tawk.to www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google.com google.com https://ga4ss.kidsland.me 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://vars.hotjar.com/ https://www.form.jotform.com; frame-ancestors 'self' https://cms.kiwaregister.nl; style-src 'self' https://fonts.googleapis.com/; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.googletagmanager.com https://region1.google-analytics.com https://dev.visualwebsiteoptimizer.com https://www.google-analytics.com https://static.hotjar.com https://script.hotjar.com; img-src 'self' https://www.kiwa.com https://www.google-analytics.com https://region1.google-analytics.com https://dev.visualwebsiteoptimizer.com; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://in.hotjar.com; form-action 'self'; base-uri 'self'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.vimeo.com *.afip.gob.ar *.google.com *.doubleclick.net *.cloudfront.net *.getblue.io *.mercadopago.com.ar https://www.google.com.ar https://www.google.com https://track-icommkt.com https://notifications-icommkt.com https://bam.nr-data.net https://event.getblue.io/ https://static-content-qas.vnforapps.com/ https://static-content.vnforapps.com/ *.fontawesome.com https://fonts.bunny.net https://media.laspepas.com.ar https://fonts.gstatic.com maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.vimeo.com *.afip.gob.ar *.doubleclick.net *.cloudfront.net *.getblue.io *.mercadopago.com.ar https://www.google.com.ar https://www.google.com https://track-icommkt.com https://notifications-icommkt.com https://bam.nr-data.net https://event.getblue.io/ https://apitestenv.vnforapps.com/ https://apiprod.vnforapps.com/ https://static-content-qas.vnforapps.com/ https://static-content.vnforapps.com/ *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com www.facebook.com *.trackedlink.net *.vimeo.com *.afip.gob.ar *.google.com *.doubleclick.net *.cloudfront.net *.getblue.io *.mercadopago.com.ar https://www.google.com.ar https://www.google.com https://track-icommkt.com https://notifications-icommkt.com https://bam.nr-data.net https://event.getblue.io/ https://static-content-qas.vnforapps.com/ https://static-content.vnforapps.com/ *.disqus.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de https://firebasestorage.googleapis.com http://www.afip.gob.ar https://notifications-icommkt.website https://media.laspepas.com.ar *.postimg.cc *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar connect.facebook.net graph.facebook.com business.facebook.com flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com https://www.googletagmanager.com/ *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com www.apptrian.com www.facebook.com connect.facebook.net graph.facebook.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.vimeo.com *.afip.gob.ar *.doubleclick.net *.cloudfront.net *.getblue.io *.mercadopago.com.ar https://www.google.com.ar https://www.google.com https://track-icommkt.com https://notifications-icommkt.com https://bam.nr-data.net https://event.getblue.io/ https://apitestenv.vnforapps.com/ https://apiprod.vnforapps.com/ https://static-content-qas.vnforapps.com/ https://static-content.vnforapps.com/ *.disqus.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.gstatic.com *.googletagmanager.com *.avada.io *.shopify.com https://maps.google.com https://www.google.com/pagead/conversion_async.js https://googleads.g.doubleclick.net *.cloudfront.net/ *.jsdelivr.net/ *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com business.facebook.com maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com webchat.dotdigital.com webchat.staging.dotdigital.com *.googleapis.com *.googletagmanager.com *.fontawesome.com https://fonts.bunny.net https://media.laspepas.com.ar https://fonts.googleapis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com *.gstatic.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com www.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com www.apptrian.com connect.facebook.net graph.facebook.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.vimeo.com *.afip.gob.ar *.doubleclick.net *.cloudfront.net *.getblue.io *.mercadopago.com.ar https://www.google.com.ar https://www.google.com https://track-icommkt.com https://notifications-icommkt.com https://bam.nr-data.net https://event.getblue.io/ https://apitestenv.vnforapps.com/ https://apiprod.vnforapps.com/ https://static-content-qas.vnforapps.com/ https://static-content.vnforapps.com/ *.google-analytics.com *.googlesyndication.com https://get.geojs.io *.avada.io https://maps.googleapis.com/ https://track-icommkt.com/ https://www.mailing.laspepas.com.ar *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com business.facebook.com www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob: https:; media-src 'self' blob: https://*.amazonaws.com https://*.cloudfront.net; font-src 'self' data: https:; frame-src https://www.youtube-nocookie.com https://www.youtube.com; script-src 'self' 'unsafe-inline' https://app.posthog.com https://*.posthog.com https://*.netlify.app; style-src 'self' 'unsafe-inline'; connect-src 'self' https://*.amazonaws.com wss://*.amazonaws.com https://*.cloudfront.net https://*.amazoncognito.com https://api.deepgram.com https://app.posthog.com https://*.posthog.com https://ingesteer.services-prod.nsvcs.net; worker-src 'self' blob: 1
default-src 'self'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=VhMIXmYL9rCR_xjiDeGcoil3m09fYR0uccE8Zcjc3Go-1789275678.855146-1.0.1.1-5kDIS35qcJvDbgkTgIc9Jj3Mo3tNyk_TKRv6AAks8ZMKADAQq1HXuTG7tLbX3q5HTXWH2xXpgM_NSzk9QorqMCefzdiJP_GchSpQ4qz0iCA6uNnmdSMwq_Cym7CEEXe_.g_SCzeCX40muMz_psTDNu9K6T252RH9eh04XDyMu_NoGhQM..aGGanxQjVGaWJ80vRsS2oZGk8MfP0bGGJpeg; report-to cf-plrexoqfynfbhfky 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' normatel.com.br *.normatel.com.br wake-components.fbitsstatic.net normatel.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br traycorp.paymee.com.br googleadservices.com stats.g.doubleclick.net *.hotjar.com *.googleadservices.com *.g.doubleclick.net *.googlesyndication.com *.smarthint.co wake-commerce-scripts.omni.chat; frame-ancestors *.normatel.com.br normatel.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self' https://www.facebook.com; script-src 'nonce-Y2FjMDlmYmUtNDY5YS00YjEzLTg4OGEtOWJjMDZiMGI0NDQ3' 'strict-dynamic' https: 'unsafe-inline'; script-src-elem 'nonce-Y2FjMDlmYmUtNDY5YS00YjEzLTg4OGEtOWJjMDZiMGI0NDQ3' 'self' https://challenges.cloudflare.com https://www.googletagmanager.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; connect-src 'self' https://www.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://www.facebook.com https://challenges.cloudflare.com https://*.sentry.io https://logs.tatagiba.dev; frame-src 'self' https://www.facebook.com https://td.doubleclick.net https://challenges.cloudflare.com; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests; report-uri /api/telemetry; report-to telemetry-endpoint 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com *.bootstrapcdn.com maxcdn.bootstrapcdn.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net *.cloudfront.net *.reviews.io *.reviews.co.uk *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors *.greenhouses.ie *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.youtube-nocookie.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.storyblok.com *.klarna.com business.facebook.com www.commercepartnerhub.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.reviews.io *.reviews.co.uk *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://images.unsplash.com *.prismic.io *.cdn.prismic.io *.cookiebot.com imgsct.cookiebot.com *.documentforce.com hummuk--c.documentforce.com *.force.com hummuk.file.force.com *.google.com *.google.com.vn bat.bing.com *.linkedin.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klarna.com *.klarnaevt.com *.klarnacdn.net magefan.com cm.magefan.com https://firebasestorage.googleapis.com business.facebook.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudfront.net *.reviews.io *.reviews.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://maps.googleapis.com https://player.vimeo.com adobedtm.com *.googleapis.com maxcdn.bootstrapcdn.com *.fontawesome.com static.cdn.prismic.io *.prismic.io cdn.jsdelivr.net *.jsdelivr.net *.cookiebot.com consent.cookiebot.com config.gorgias.chat *.gorgias.chat data: self unsafe-inline *.lr-intake.com bat.bing.com snap.licdn.com s.pinimg.com *.googleoptimize.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.avada.io business.facebook.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.reviews.io *.reviews.co.uk *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com services.postcodeanywhere.co.uk *.klaviyo.com https://static.klaviyo.com maxcdn.bootstrapcdn.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.stripe.network *.stripecdn.com *.amazon.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com vimeo.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://maps.googleapis.com https://player.vimeo.com api.addressy.com *.doubleclick.net *.fontawesome.com *.youtube.com *.cardinalcommerce.com *.facebook.com config.gorgias.chat *.googlesyndication.com pagead2.googlesyndication.com *.cookiebot.com consent.cookiebot.com *.prismic.io *.algolia.io *.lr-intake.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://get.geojs.io *.avada.io business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.stripe.com klarna.com *.link.com *.amazon.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://a1444c0b-988b-46bf-8bde-a8332665a15c.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.prenatal.gr https://www.googletagmanager.com https://challenges.cloudflare.com https://www.google-analytics.com https://widget.heresai.it https://*.google-analytics.com https://*.analytics.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com https://maps.gstatic.com https://js.api.here.com https://cdn.scalapay.com https://*.scalapay.com https://*.klarnacdn.net https://*.klarna.com https://eu1-config.doofinder.com https://*.doofinder.com https://invitejs.trustpilot.com https://*.trustpilot.com https://www.dwin1.com https://*.awin1.com https://*.tiktok.com https://cdn.cookielaw.org https://*.bing.com https://*.facebook.net https://responder.wt-safetag.com https://pixel.queryo.com https://widget.heres.ai https://*.toyscenter.it https://googleads.g.doubleclick.net https://dynamic.criteo.com https://static.hotjar.com https://sslwidget.criteo.com https://applepay.cdn-apple.com https://www.paypal.com https://the.sciencebehindecommerce.com https://pay.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://cdn.prenatal.gr https://fonts.googleapis.com https://cdn.doofinder.com https://js.api.here.com https://widget.heres.ai https://x.klarnacdn.net https://ajax.googleapis.com https://www.gstatic.com https://use.typekit.net; img-src 'self' data: blob: https://cdn.prenatal.gr https://www.prenatal.gr https://www.toyscenter.it https://assets.heresai.it https://*.google-analytics.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://www.google.com https://www.gstatic.com https://maps.googleapis.com https://maps.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://*.here.com https://*.hereapi.com https://*.scalapay.com https://*.klarnacdn.net https://*.trustpilot.com https://*.awin1.com https://*.dwin1.com https://*.toyscenter.it https://media.bimbo.prenatal-services.com https://cdn.cookielaw.org https://*.facebook.com https://bucket.heres.ai https://*.bing.com https://cdn.doofinder.com https://www.google.it https://t.mateti.net https://eu1-doofinderuser.s3.amazonaws.com https://checkoutshopper-live.cdn.adyen.com https://bat.bing.net https://cdn.toyscenter.it https://googleads.g.doubleclick.net https://img.youtube.com https://osm.klarnaservices.com https://pagead2.googlesyndication.com https://prenatal.gr https://raw.githubusercontent.com https://*.facebook.net https://public.prenatal-services.com https://www.zenaps.com https://client-side-metrics.nl3.eu.criteo.net https://www.google.al https://www.google.co.uk https://www.google.sm https://www.google.com.eg https://secure.gravatar.com https://www.googleadservices.com https://*.tiktok.com https://i.ytimg.com https://media.toys.prenatal-services.com https://www.google.co.in https://www.google.ch https://www.google.fr https://www.google.es https://www.google.ie https://www.google.com.tr https://www.google.de https://www.google.no https://www.google.com.om https://www.google.hr https://www.google.ca https://www.google.gr https://www.google.nl https://www.google.rs https://www.google.ge https://www.google.mu https://www.google.is; font-src 'self' data: https://fonts.gstatic.com https://cdn.prenatal.gr https://x.klarnacdn.net https://applepay.cdn-apple.com https://js.api.here.com https://use.typekit.net; connect-src 'self' https://challenges.cloudflare.com https://www.prenatal.gr https://cdn.prenatal.gr https://config.heresai.it wss://bot.heresai.it https://*.doofinder.com wss://*.doofinder.com https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://www.googletagmanager.com https://maps.googleapis.com https://*.api.here.com https://*.hereapi.com https://*.scalapay.com https://*.klarna.com https://*.trustpilot.com https://*.awin1.com https://*.dwin1.com https://*.tiktok.com https://cdn.cookielaw.org https://*.bing.com https://www.google.com https://prenatal-services.com https://bat.bing.net https://pubsub.googleapis.com https://widget.heres.ai https://o24547.ingest.sentry.io https://www.paypal.com https://*.toyscenter.it https://eu.klarnaevt.com https://*.facebook.com https://pagead2.googlesyndication.com https://analytics-ipv6.tiktokw.us https://geolocation.onetrust.com https://privacyportal-eu.onetrust.com https://google.com https://www.googleadservices.com https://www.wepowerconnections.com https://na.klarnaevt.com https://www.google.it https://checkoutanalytics-live.adyen.com https://the.sciencebehindecommerce.com https://sslwidget.criteo.com https://pay.google.com blob: https://googleads.g.doubleclick.net https://fcmregistrations.googleapis.com https://www.zenaps.com https://www.awinblackfriday.com https://checkoutshopper-live.cdn.adyen.com https://checkoutshopper-live.adyen.com https://analytics.google.com https://*.klarnaevt.com https://*.klarnacdn.net https://spay.samsung.com https://t.mateti.net https://fonts.googleapis.com https://www.gstatic.com https://play.google.com https://www.google.al https://www.google.co.in https://www.google.gr https://www.google.co.uk; frame-src https://challenges.cloudflare.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://*.scalapay.com https://*.klarna.com https://td.doubleclick.net https://www.googletagmanager.com https://servedby.flashtalking.com https://www.paypal.com https://gum.criteo.com https://728252369996325.mateti.net https://checkoutshopper-live.adyen.com https://*.facebook.com https://www.awin1.com https://static-bot.heres.ai https://www.youtube.com https://3ds.nexigroup.com https://pay.google.com https://secure7.arcot.com https://prenatal-services.com https://gumi.criteo.com https://*.nexigroup.com https://youtube.com https://www.prenatal.gr https://s1.trovaprezzi.it https://osm.klarnaservices.com https://applepay.cdn-apple.com https://cdn.iubenda.com https://catalogo.prenatal.gr https://acs.netsgroup.com; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://www.prenatal.gr https://*.facebook.com https://3ds4.nexigroup.com https://*.nexigroup.com https://acs.netsgroup.com; frame-ancestors 'self' https://prg-dashboard-prod.web.app; upgrade-insecure-requests; block-all-mixed-content; report-uri https://889ecefd2de50feabce01d0fae49ca81.report-uri.com/r/d/csp/reportOnly; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'unsafe-inline' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com https://*.moneris.com/ www.googletagmanager.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.moneris.com https://www.youtube.com https://c.paypal.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com https://maps.gstatic.com https://maps.googleapis.com https://lh3.googleusercontent.com https://*.gstatic.com https://googleads.g.doubleclick.net https://firebasestorage.googleapis.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://b.stats.paypal.com/ https://slc.stats.paypal.com/ https://c.paypal.com/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.moneris.com/ https://maps.googleapis.com https://www.gstatic.com *.avada.io *.shopify.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.gstatic.com *.moneris.com *.webeyez.com paypal.com *.fontawesome.com https://bam.nr-data.net https://bam-cell.nr-data.net https://c.paypal.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com https://static.klaviyo.com https://*.moneris.com/ *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://maps.googleapis.com https://get.geojs.io *.avada.io *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.webeyez.com firehose.eu-west-1.amazonaws.com cognito-identity.eu-west-1.amazonaws.com paypal.com paypalobjects.com https://bam.nr-data.net https://bam-cell.nr-data.net https://payments.sandbox.braintree-api.com/ https://origin-analytics-sand.sandbox.braintree-api.com/ 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://smartsolutions.report-uri.com/r/d/csp/reportOnly; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://www.google.com https://www.gstatic.com https://t1.kakaocdn.net https://developers.kakao.com https://kauth.kakao.com https://wcs.naver.net https://static.nid.naver.com https://ssl.pstatic.net https://nsp.pay.naver.com https://stgstdpay.inicis.com https://stdpay.inicis.com https://stdux.inicis.com https://cr.shopping.naver.com https://tenping.kr https://connect.facebook.net https://api.recopick.com https://www.youtube.com https://static.recopick.com https://lc.recopick.com https://googleads.g.doubleclick.net https://dapi.kakao.com https://t1.daumcdn.net https://cdnjs.cloudflare.com https://static.hotjar.com https://scripts.clarity.ms https://www.clarity.ms; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://www.google.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://www.facebook.com https://bc.ad.daum.net https://aem-kakao-collector.onkakao.net https://wcs.naver.net https://cr.shopping.naver.com https://tenping.kr https://www.youtube.com https://cdn.dev.saeki.co.kr https://cdn.saeki.co.kr https://wcs.naver.com https://nam.veta.naver.com https://tivan.naver.com https://static.recopick.com https://lc.recopick.com https://googleads.g.doubleclick.net https://dapi.kakao.com https://kapi.kakao.com https://www.google.co.kr https://www.googleadservices.com https://www.googletagmanager.com https://region1.analytics.google.com https://www.googleapis.com https://m.saeki.co.kr https://connect.facebook.net https://z.clarity.ms; style-src 'self' 'unsafe-inline' https://stgstdpay.inicis.com https://stdpay.inicis.com https://stdux.inicis.com https://fonts.googleapis.com https://www.googletagmanager.com https://ssl.pstatic.net https://www.gstatic.com https://cdn.saeki.co.kr; font-src 'self' data: https://fonts.gstatic.com https://appdown.pstatic.net https://frontend-cdn.perplexity.ai https://cdn.jsdelivr.net; img-src 'self' data: https:; media-src 'self' data: https:; frame-src 'self' https://www.youtube.com https://www.facebook.com https://t1.kakaocdn.net https://postcode.map.kakao.com https://cdn.dev.saeki.co.kr https://cdn.saeki.co.kr https://stgstdpay.inicis.com https://stdpay.inicis.com https://stdpay.inicis.com https://test-nsp.pay.naver.com https://nsp.pay.naver.com https://player.vimeo.com https://www.youtube-nocookie.com https://youtu.be https://vimeo.com https://www.googletagmanager.com https://t1.daumcdn.net https://serviceapi.nmv.naver.com https://online.fliphtml5.com https://myaccount.google.com https://td.doubleclick.net https://cdn.cms.lomography.com; frame-ancestors 'self'; object-src https://player.vimeo.com https://www.youtube.com; base-uri 'self'; report-uri /csp-report; 1
object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-YsVWX2tiSPqCspI89jRVhWNviAbnW2zT'; base-uri 'none'; report-uri https://data.sanitino.eu/csp-report 1
object-src 'none';base-uri 'self';script-src 'nonce-Qulmbm9odUQI97Q7RNmkhg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://maps.googleapis.com https://maps.gstatic.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maps.googleapis.com; img-src 'self' data: blob: https://www.google-analytics.com https://www.googletagmanager.com https://www.facebook.com https://maps.googleapis.com https://maps.gstatic.com https://i.ytimg.com https://*.googleusercontent.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://region1.google-analytics.com https://connect.facebook.net https://maps.googleapis.com; frame-src 'self' https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://www.facebook.com; worker-src 'self' blob:; manifest-src 'self'; media-src 'self' blob:; 1
font-src https://www.googletagmanager.com *.googleapis.com *.gstatic.com *.fontawesome.com *.yotpo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com assets.braintreegateway.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.innoship.ro https://*.sameday.ro *.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com validator.swagger.io *.gstatic.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.tile.openstreetmap.org *.openstreetmap.org *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com js.authorize.net jstest.authorize.net js.braintreegateway.com cdn-scripts.signifyd.com www.youtube.com tagmanager.google.com https://www.googletagmanager.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.avada.io https://*.sameday.ro https://pa.7w.ro http://pa.7w.ro *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com https://*.sameday.ro *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com payments.sandbox.braintree-api.com origin-analytics-sand.sandbox.braintree-api.com assets.braintreegateway.com https://www.google-analytics.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https://get.geojs.io *.avada.io https://pa.7w.ro http://pa.7w.ro *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' https://www.googletagmanager.com https://accounts.google.com https://appleid.cdn-apple.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://media.way2quran.com https://storage.googleapis.com https://quran.islam-db.com https://www.googletagmanager.com; font-src 'self' data:; media-src 'self' https://media.way2quran.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://accounts.google.com https://appleid.apple.com; frame-src 'self' https://accounts.google.com https://appleid.apple.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://cdn.cookielaw.org https://connect.facebook.net https://*.hotjar.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://cdn.cookielaw.org https://connect.facebook.net https://*.hotjar.com https://*.medallia.eu https://*.liveperson.net https://*.lpsnmedia.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://*.medallia.eu https://*.liveperson.net https://*.lpsnmedia.net https://ssl.google-analytics.com https://www.googletagmanager.com https://cdn.cookielaw.org https://www.facebook.com https://ad.doubleclick.net https://stats.g.doubleclick.net https://secure.adnxs.com https://www.google.ie; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://ssl.google-analytics.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://cdn.cookielaw.org https://privacyportal-eu.onetrust.com https://connect.facebook.net https://*.hotjar.com https://*.hotjar.io https://*.medallia.eu https://*.liveperson.net https://*.lpsnmedia.net; frame-src 'self' https://www.googletagmanager.com https://*.medallia.eu https://*.liveperson.net https://*.lpsnmedia.net; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none' 1
base-uri 'self'; connect-src 'self' https://content.hotjar.io wss://ws.hotjar.com https://api.rollbar.com https://ninjafetch.com https://www.spaceflop.com https://www.commissionsoup.com wss://mpsnare.iesnare.com/star *.doubleclick.net https://www.paynearme.com https://www.google.com/pagead/1p-conversion https://vc.hotjar.io https://metrics.hotjar.io https://analytics.tiktok.com/api/v2 https://analytics.tiktok.com/api/v2/pixel https://analytics.google.com/g/collect https://www.google.com/ccm/collect https://www.google-analytics.com https://s.yimg.com/wi/config/10178813.json https://analytics.tiktok.com/api/v2/pixel/act bing.com *.bing.com; default-src 'self' 'unsafe-inline'; font-src 'self' data: https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; form-action 'self' https://*.yodlee.com; frame-src 'self' https://widget.sophtron.com https://*.edgescore.com https://*.yodlee.com https://www.spaceflop.com https://www.commissionsoup.com https://www.paynearme.com https://www.googletagmanager.com https://td.doubleclick.net; img-src 'self' https://edge-public-assets.s3.us-east-2.amazonaws.com https://www.spaceflop.com https://www.commissionsoup.com https://um.simpli.fi https://googleads.g.doubleclick.net https://www.googleadservices.com https://cm.g.doubleclick.net/pixel https://images.totalcardinc.com https://bat.bing.com/action https://fonts.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://sp.analytics.yahoo.com https://bat.bing.com/action/0 google.com *.google.com google.co.in *.google.co.in; object-src 'none'; script-src bing.com *.bing.com doubleclick.net *.doubleclick.net engagement.technology *.engagement.technology facebook.net *.facebook.net googletagmanager.com *.googletagmanager.com hotjar.com *.hotjar.com ninjafetch.com *.ninjafetch.com paynearme.com *.paynearme.com revvi.com *.revvi.com sophtron.com *.sophtron.com simpli.fi *.simpli.fi yodlee.com *.yodlee.com yimg.com *.yimg.com unpkg.com *.unpkg.com tiktok.com *.tiktok.com google-analytics.com *.google-analytics.com 'unsafe-inline' 'self'; style-src 'self' https://ninjafetch.com https://www.paynearme.com https://unpkg.com/swiper@7/swiper-bundle.min.css https://www.googletagmanager.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com 'sha256-xWGOGGMGQQ+IV0Om4xzgbDHXUh/+L1c375p0Pb6vF9A=' 'sha256-CwE3Bg0VYQOIdNAkbB/Btdkhul49qZuwgNCMPgNY5zw=' 'sha256-MZKTI0Eg1N13tshpFaVW65co/LeICXq4hyVx6GWVlK0=' 'sha256-LpfmXS+4ZtL2uPRZgkoR29Ghbxcfime/CsD/4w5VujE=' 'sha256-YJO/M9OgDKEBRKGqp4Zd07dzlagbB+qmKgThG52u/Mk=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-biLFinpqYMtWHmXfkA1BPeCY0/fNt46SAZ+BBk5YUog=' 'sha256-WWn0l9kVjXaC+CGcbxP6Zyac31v1Cjkx2VMnFR3uVng='; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=qBif6grLMt_UCUJX9hjJzH99buVIuSg8wGWGqeekv4w-1789288351.0782835-1.0.1.1-z97RkCmYYV_arWjSv8s0NG8PmCIqEv3YLnBqGXrOAEz3JH26v3OM5eqgJedBPcz3wVwErIwZc9bcI5bjJtOYQN6RU7j7X8sKjZzn0SmHC5HNzj1GDm2iulP1NNW8254pKGr3gkEY3IiQWcBIyMBGpxGMPi3ELdsLSRDUN49CoB1Ddtt6TFXAzgv8WOaVQmJc; report-to cf-yqdgsmofswnnjjgt 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https:; 1
font-src *.googleapis.com *.gstatic.com *.cloudflare.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.vimeo.com *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://view.genially.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com www.youtube.com magefan.com cm.magefan.com *.cloudflare.com *.doofinder.com *.doofinder *.ytimg.com *.doubleclick.net *.casmarglobal.com *.google-analytics.com *.connectif.cloud akeneo.casmarglobal.com:8000 *.eu1-layer.doofinder.com www.vimeo.com imgsct.cookiebot.com cdn.doofinder.com storage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: *.paypal.com *.clarity.ms *.bing.com *.google.es *.google.com.ar www.google.com.ar data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.fontawesome.com *.cloudflare.com *.google-analytics.com *.connectif.cloud *.doofinder.com *.analytics.google.com *.casmarglobal.com pro.casmarglobal.com consent.cookiebot.com consentcdn.cookiebot.com s7.addthis.com cdn.doofinder.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cookiebot.com *.consent.cookiebot.com *.region1.analytics.google.com *.www.google.es *.clarity.ms *.licdn.com *.google.com consentcdn.cookiebot.com/sdk/bc-v4.min.html *.usercentrics.com *.usercentrics.eu *.consent.cookiebot.eu *.cdn.connectif.cloud *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com *.doofinder.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.cloudflare.com *.twitter.com *.google-analytics.com *.casmarglobal.com *.cookiebot.com *.connectif.cloud *.doofinder.com ekr.zdassets.com/ wss://*.doofinder.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.clarity.ms *.doubleclick.net *.usercentrics.com *.usercentrics.eu *.consent.cookiebot.eu cdn.connectif.cloud eu4-api.connectif.cloud *.consent.cookiebot.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; frame-src 'self' https://www.google.com https://*.google.com; object-src 'none'; base-uri 'self'; form-action 'self' 1
font-src fonts.googleapis.com fonts.gstatic.com *.googleapis.com *.gstatic.com data: *.fontawesome.com maxcdn.bootstrapcdn.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.apptrian.com facebook.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com www.apptrian.com facebook.com *.weltpixel.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; base-uri 'self' 'unsafe-inline'; style-src https://www.googletagmanager.com/ *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com t.themarketer.com cdn1.themarketer.com *.googleapis.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; default-src https://www.epay.bg https://online.epay.bg *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; media-src https://static.zdassets.com/web_widget/classic/latest/fda6cd35495c75f83508d9d2e77ee33d.mp3 *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; img-src https://www.google.bg/ https://cdn1.mktr2.com/ https://chart.googleapis.com/ assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.tiktok.com www.apptrian.com facebook.com *.tbicp.com t.themarketer.com cdn1.themarketer.com 'self' data: https://cdn.tbibank.support *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; connect-src https://ekr.zdassets.com/ https://dimitarstoichkov.zendesk.com/ wss://widget-mediator.zopim.com/ https://googleads.g.doubleclick.net/ https://c2api.themarketer.com/ https://stats.g.doubleclick.net/ https://www.google.bg/ https://chart.googleapis.com/ dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.tiktok.com *.tiktokw.us www.apptrian.com facebook.com https://get.geojs.io *.avada.io t.themarketer.com cdn1.themarketer.com t.elasticsuite.io *.google-analytics.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://beta.tbibank.support *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; script-src https://v2.zopim.com/ https://static.zdassets.com/ https://www.epay.bg https://online.epay.bg assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.tiktok.com www.apptrian.com facebook.com *.tbicp.com *.avada.io t.themarketer.com cdn1.themarketer.com *.google.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://framerusercontent.com https://*.framer.com https://*.framer.app https://us.i.posthog.com https://us-assets.i.posthog.com https://www.googletagmanager.com https://va.vercel-scripts.com; style-src 'self' 'unsafe-inline' https://framerusercontent.com https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://framerusercontent.com https://fonts.gstatic.com; connect-src 'self' https: wss:; frame-src 'self' https://*.framer.com https://www.youtube.com https://player.vimeo.com; media-src 'self' blob: https:; object-src 'none'; base-uri 'self'; form-action 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-wUgM4FPcUoN6SEZKOzOkGw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
frame-ancestors 'self'; report-uri /api/security/csp-report 1
default-src 'self'; font-src 'self' data: https://cdn.rawgit.com https://fonts.gstatic.com https://ka-p.fontawesome.com https://pro.fontawesome.com https://www.erblearn.org https://fonts.typekit.net https://maxcdn.bootstrapcdn.com https://use.fontawesome.com https://cdn.jsdelivr.net; img-src * data:; script-src 'unsafe-eval' 'unsafe-inline' 'self' https://cdn.datatables.net https://cdn.erblearn.org https://cdn.jsdelivr.net https://code.jquery.com/jquery-3.5.1.min.js https://kit.fontawesome.com/8e16178960.js https://cdn.jsdelivr.net https://kit.fontawesome.com/3a3e8d3071.js https://www.googletagmanager.com/gtag/js https://use.fontawesome.com/cdc1a032d4.js http://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.7/umd/popper.min.js https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/releases/4rwLQsl5N_ccppoTAwwwMrEN/recaptcha__en.js https://kendo.cdn.telerik.com/2021.3.1109/js/jszip.min.js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtm.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://connect.facebook.net; style-src 'unsafe-inline' 'self' https://cdn.datatables.net https://cdn.erblearn.org https://cdn.rawgit.com https://fonts.googleapis.com https://pro.fontawesome.com https://fonts.typekit.net https://use.fontawesome.com https://kendo.cdn.telerik.com https://cdn.jsdelivr.net https://maxcdn.bootstrapcdn.com/ https://fast.fonts.net https://code.jquery.com; frame-src https://www.facebook.com https://player.vimeo.com; connect-src 'unsafe-inline' 'self' https://ka-p.fontawesome.com https://worldtimeapi.org https://www.google-analytics.com https://stats.g.doubleclick.net; 1
script-src 'strict-dynamic' 'nonce-a28efa81d03b5fbd870eaf2978aa078c' 'unsafe-inline' 'unsafe-eval' https: ; frame-ancestors 'self' ; base-uri 'self'; object-src 'none'; report-uri https://csp.phenompeople.com/violations; 1
default-src https: data: wss: 'unsafe-inline' 'unsafe-eval'; form-action https:; report-uri https://vmtawsjkbhlls5jckka33h0c.httpschecker.net/report 1
default-src 'self'; frame-ancestors 'self' http://localhost:3333 https://sanity.renuityhome.com https://*.renuityhome.com https://*.sanity.studio; script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://tracking-code-generator.onrender.com https://www.googletagmanager.com https://www.google-analytics.com https://dev.visualwebsiteoptimizer.com https://connect.facebook.net https://s.pinimg.com https://ct.pinterest.com https://js.sentry-cdn.com https://us.i.posthog.com https://maps.googleapis.com https://maps.gstatic.com https://api.trustedform.com https://cdn.trustedform.com https://cdn.jsdelivr.net https://jobs.ashbyhq.com; style-src 'self' 'unsafe-inline'; img-src 'self' https:; connect-src 'self' https://api.sanity.io https://www.google-analytics.com https://us.i.posthog.com https://ct.pinterest.com https://maps.googleapis.com https://maps.gstatic.com https://api.trustedform.com https://cdn.trustedform.com https://pnapi.invoca.net https://cdn.feathery.io https://api.feathery.io; font-src 'self'; worker-src 'self' data:; object-src 'none'; base-uri 'self' 1
object-src 'none'; script-src 'self' 'report-sample' cdn.jsdelivr.net https://cdn.jsdelivr.net https://www.google.com platform.instagram.com platform.twitter.com; style-src 'self' 'report-sample' fonts.googleapis.com https://cdn.jsdelivr.net https://maxcdn.bootstrapcdn.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
script-src 'unsafe-inline' 'unsafe-eval'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=vbQUP.1wJpl11Py1RX_ECCuqlY5fQTUHkSiSEFMH8mQ-1789269884.7901943-1.0.1.1-ukipw.5wf1Vo._t8HQfgx7iWdcLz0Omu6LTiCh.IkzXBHMDgHeJH.DR5cTdmgQt4k.A8l4nrkprjfCQuOcxpN16GB65_qPnMivo9ew5.iRq_kP98l.3OkiPsEo.6rtkYpAHPERW02R1j2sc0i1VFizs05Nmi4AyVsBrzJmcuvoU; report-to cf-csp-endpoint 1
script-src 'strict-dynamic' 'nonce-rAnd0m123' 'unsafe-inline' http: https:; object-src 'none'; base-uri 'none'; require-trusted-types-for 'script'; 1
default-src 'self' *;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com http://www.googletagmanager.com *.fabriquedestyles.com *.googletagmanager.com googletagmanager.com maps.googleapis.com static.cdn.prismic.io prismic.io vimeo.com https://player.vimeo.com/api/player.js https://player.vimeo.com/ https://i.vimeocdn.com/video/ https://i.vimeocdn.com https://*.attraqt.io https://www.youtube.com/embed https://www.google-analytics.com https://*.hotjar.com/ js.stripe.com *.google.com google.com *.google.fr https://*.facebook.net https://*.googlesyndication.com https://*.googleadservices.com https://*.doubleclick.net https://*.facebook.com *.woosmap.com *.imagino.com blob: https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net *.experimentation.dev *.bing.com *.bing.net *.bing.fr *.microsoft.com *.microsoft.fr *.microsoft.net *.pinterest.com *.pinterest.net *.pinterest.fr *.privacy-center.org *.clarity.ms privacy-center.org *.paypal.com paypal.com;frame-src 'self' maps.googleapis.com *.google.com google.com *.prismic.io https://player.vimeo.com/ https://www.youtube.com/ https://player.vimeo.com/ https://i.vimeocdn.com/video/ https://i.vimeocdn.com js.stripe.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net *.woosmap.com *.imagino.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net *.experimentation.dev *.fabriquedestyles.com *.googletagmanager.com googletagmanager.com *.privacy-center.org *.clarity.ms privacy-center.org *.paypal.com paypal.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.googletagmanager.com *.googletagmanager.com googletagmanager.com *.google.com google.com *.woosmap.com *.imagino.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net *.experimentation.dev *.privacy-center.org *.clarity.ms privacy-center.org *.paypal.com paypal.com;img-src 'self' data: *;font-src 'self' data: *;connect-src 'self' https://vimeo.com/api/ *.hotjar.com maps.googleapis.com *.attraqt.io *.google.com google.com *.doubleclick.net https://*.facebook.net https://www.googletagmanager.com *.googletagmanager.com googletagmanager.com *.fabriquedestyles.com wss://ws.hotjar.com https://content.hotjar.io https://www.google-analytics.com https://*.google-analytics.com *.analytics.google.com https://vc.hotjar.io https://*.facebook.com *.woosmap.com *.imagino.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net *.experimentation.dev *.bing.com *.bing.net *.bing.fr *.microsoft.com *.microsoft.fr *.microsoft.net *.pinterest.com *.pinterest.net *.pinterest.fr *.privacy-center.org *.clarity.ms privacy-center.org *.paypal.com paypal.com;base-uri 'self' *;report-uri /csp/report 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-87DghktPJ9yUqASw/Zq5PGVadrA=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: https://www.googletagmanager.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com cloudflare.com *.cloudflare.com rolex.com *.rolex.com *.finance-calculator.co.uk *.s3.eu-west-2.amazonaws.com *.dekopay.org *.deko-uat.com *.blackhorseflexpay.co.uk *.fontawesome.com https://fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com *.rsa3dsauth.co.uk *.rsa3dsauth.com *.boc.cn *.afs.com.bh *.enfuce.com *.cardcenter.ch *.nexigroup.com *.pluscard.de *.qiib.com.qa *.paylife.at *.redsys.es *.3dsecure.no *.modirum.com *.edb.com *.viseca.ch *.apata.io *.capitalone.com *.dnp-cdms.jp *.revolut.com *.bankserv.co.za *.swisscard.ch *.six-group.com *.marqeta.com *.imbank.com *.tsys.co.uk *.sia.eu *.garanti.com.tr *.commerzbank.de *.cmbchina.com *.alahli.com *.mycardsecure.com *.gps.com.bh *.citibank.com *.wibmo.com *.dkb.de *.alinma.com *.nccc.com.tw *.starlingbank.com *.danskebank.com *.pekao24.pl *.lloydsbank.co.uk/ *.lloydsbank.com/ *.lloydsbankinggroup.com/ *.channel-cards-auth-api.lloydsbankinggroup.com/ *.sparebank1.no 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.arcot.com *.rsa3dsauth.co.uk *.rsa3dsauth.com *.boc.cn *.afs.com.bh *.enfuce.com *.cardcenter.ch *.pluscard.de *.qiib.com.qa *.nexigroup.com *.paylife.at *.redsys.es *.3dsecure.no *.modirum.com *.edb.com *.viseca.ch *.apata.io *.capitalone.com *.dnp-cdms.jp *.revolut.com *.bankserv.co.za *.swisscard.ch *.six-group.com *.marqeta.com *.wlp-acs.com *.imbank.com *.tsys.co.uk *.sia.eu *.garanti.com.tr *.commerzbank.de *.cmbchina.com *.alahli.com *.mycardsecure.com *.gps.com.bh *.citibank.com *.wibmo.com *.dkb.de *.monzo.com *.alinma.com *.nccc.com.tw *.starlingbank.com *.danskebank.com *.pekao24.pl *.lloydsbank.co.uk/ *.lloydsbank.com/ *.lloydsbankinggroup.com/ *.channel-cards-auth-api.lloydsbankinggroup.com/ *.sparebank1.no *.finance-calculator.co.uk *.deko.finance *.dekopay.org *.deko-uat.com *.blackhorseflexpay.co.uk *.google.com/ https://player.vimeo.com https://www.youtube-nocookie.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com *.stripe.network *.google.com ebizmarts-website.s3.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com cloudflare.com *.cloudflare.com rolex.com *.rolex.com *.elfsightcdn.com *.elfsight.com *.googlesyndication.com *.i-synergy.com *.doubleclick.net *.clarity.ms *.google.co.uk *.synergyconnect.io *.finance-calculator.co.uk *.dekopay.com *.dekopay.org *.deko-uat.com s3.eu-west-1.amazonaws.com 'self' data: *.blackhorseflexpay.co.uk *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.magezon.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src adobedtm.com adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.google.com/ *.sagepay.com *.opayo.eu.elavon.com cloudflare.com *.cloudflare.com rolex.com *.rolex.com *.adobedtm.com *.adobe.com *.clarity.ms *.elfsightcdn.com *.elfsight.com *.i-synergy.com *.ahrefs.com *.hotjar.com *.hotjar.io *.mouseflow.com *.doubleclick.net *.klaviyo.com *.synergyconnect.io *.finance-calculator.co.uk *.dekopay.com *.dekopay.org *.deko-uat.com dekowallet-feature-assets.s3.eu-west-2.amazonaws.com *.blackhorseflexpay.co.uk/ x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://player.vimeo.com https://www.youtube.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com *.sagepay.com *.opayo.eu.elavon.com cloudflare.com *.cloudflare.com rolex.com *.rolex.com *.typekit.net *.klaviyo.com *.synergyconnect.io *.finance-calculator.co.uk *.dekopay.com *.dekopay.org *.deko-uat.com *.blackhorseflexpay.co.uk *.klarnacdn.net https://static.klaviyo.com *.fontawesome.com https://fonts.googleapis.com http://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.clarity.ms *.elfsightcdn.com *.elfsight.com *.googlesyndication.com *.i-synergy.com *.ahrefs.com *.hotjar.com *.hotjar.io *.doubleclick.net *.rolex.com *.google.co.uk *.synergyconnect.io *.datadome.co *.finance-calculator.co.uk *.dekopay.com *.dekopay.org *.deko-uat.com *.blackhorseflexpay.co.uk x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com stripe.com *.stripe.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://3fb0afa5-5155-4b19-a5e0-ea7ca776bd86.sansec.watch/; report-to report-endpoint; 1
img-src https://higherlogicdownload.s3.amazonaws.com/AEJMC/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/AEJMC/ https://img.youtube.com/vi/ https://static.filestackapi.com/picker/ https://d2x5ku95bkycr3.cloudfront.net https://higherlogiclongterm.s3.amazonaws.com/AEJMC/ blob: https://d132x6oi8ychic.cloudfront.net 'self'; style-src https://d132x6oi8ychic.cloudfront.net 'unsafe-inline' https://higherlogiccloudfront.s3.amazonaws.com https://cdn.jsdelivr.net/jquery.slick/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://d2x5ku95bkycr3.cloudfront.net/ https://ajax.googleapis.com/ajax/libs/jqueryui/ https://use.fortawesome.com/ https://cdn.higherlogic.com/ai-assistant https://static.filestackapi.com/picker/ https://fonts.googleapis.com/ https://d3uf7shreuzboy.cloudfront.net/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/AEJMC/ https://higherlogicdownload.s3.amazonaws.com/AEJMC/ https://higherlogiclongterm.s3.amazonaws.com/AEJMC/ 'self'; font-src https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogiccloudfront.s3.amazonaws.com https://higherlogicdownload.s3.amazonaws.com/AEJMC/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/AEJMC/ 'self' https://higherlogiclongterm.s3.amazonaws.com/AEJMC/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://d2x5ku95bkycr3.cloudfront.net https://d132x6oi8ychic.cloudfront.net data:; script-src-elem https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d3uf7shreuzboy.cloudfront.net/ https://static.filestackapi.com/picker/ https://cdn.higherlogic.com/ai-assistant https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d2x5ku95bkycr3.cloudfront.net/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://www.gstatic.com/recaptcha/ https://static.filestackapi.com/filestack-js/ 'self' https://ajax.aspnetcdn.com/ajax/ 'unsafe-eval' 'unsafe-inline'; media-src https://higherlogiclongterm.s3.amazonaws.com/AEJMC/ https://higherlogicdownload.s3.amazonaws.com/AEJMC/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/AEJMC/ https://higherlogicstream.s3.amazonaws.com/AEJMC/ 'self' https://d132x6oi8ychic.cloudfront.net; script-src https://higherlogiclongterm.s3.amazonaws.com/AEJMC/ https://higherlogicdownload.s3.amazonaws.com/AEJMC/ https://ajax.aspnetcdn.com/ajax/ https://cdn.jsdelivr.net/jquery.slick/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d132x6oi8ychic.cloudfront.net https://cdn.informz.net 'unsafe-eval' https://use.fortawesome.com/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/AEJMC/ https://cdnjs.cloudflare.com/ajax/libs/prism/ 'unsafe-inline' https://d2x5ku95bkycr3.cloudfront.net/ https://higherlogiccloudfront.s3.amazonaws.com https://static.filestackapi.com https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d3uf7shreuzboy.cloudfront.net/ 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://api.connectedcommunity.org/ 'self' https://www.youtube.com/embed/ https://*.kb.us.higherlogic.com; connect-src https://upload.filestackapi.com https://static.filestackapi.com https://cloud.filestackapi.com/folder/list/ 'self' https://hl-managedservices.informz.net https://d3uf7shreuzboy.cloudfront.net/ blob:; worker-src 'self'; default-src 'self'; base-uri 'self'; frame-ancestors https://*.connectedcommunity.org/ 'self'; object-src 'none'; manifest-src 'self'; 1
font-src fonts.gstatic.com *.googleapis.com https://origin.xtlo.net https://mediacdn.espssl.com *.fontawesome.com *.richpanel.com *.gstatic.com https://fonts.gstatic.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.credova.com *.authorize.net 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.networkmerchants.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.credova.com * *.trysera.com https://td.doubleclick.net www.xtento.com *.authorize.net *.weltpixel.com *.googletagmanager.com *.doubleclick.net https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com *.networkmerchants.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.ammunitiondepot.com *.facebook.com *.symantec.com *.exitintel.com *.cloudfront.net credova.com *.credova.com *.clickagy.com *.adxcel-ec2.com *.googe.com *.provenpixel.com *.rlcdn.com *.google.com *.espssl.com *.google.co.in *.ytimg.com *.listrakbi.com https://guarantee-cdn.com *.amped.io https://origin.xtlo.net https://tracking.avantlink.com https://www.googletagmanager.com https://lh3.googleusercontent.com *.mczbf.com *.sjwoe.com cj.dotomi.com *.emjcd.com idsync.rlcdn.com *.cj.com *.amazonaws.com *.richpanel.com www.xtento.com cdn.xtento.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com maps.gstatic.com *.gstatic.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com *.networkmerchants.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.credova.com *.hiconversion.com *.ammunitiondepot.com *.facebook.com *.facebook.net *.symantec.com *.exitintel.com *.gorgias.io *.listrakbi.com *.crazyegg.com *.qualaroo.com *.cloudfront.net *.listrak.com *.clickagy.com *.provenpixel.com *.gstatic.com *.nofraud.com https://guarantee-cdn.com *.sumo.com *.amped.io https://a.ads.rmbl.ws https://h64.online-metrix.net https://ammunition-depot.extole.io https://origin-4.xtlo.net https://ssl.avmws.com *.cloudflareinsights.com https://classic.avantlink.com/ *.mczbf.com *.sjwoe.com cj.dotomi.com *.emjcd.com idsync.rlcdn.com *.cj.com track.getgobot.com *.richpanel.com www.xtento.com cdn.xtento.com https://developer.adobe.com https://magento.com https://cdn.avmws.com/ http://cdn.avmws.com/ *.avada.io *.shopify.com *.authorize.net maps.googleapis.com *.googletagmanager.com *.googleadservices.com *.google.com *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net https://cdn-scripts.signifyd.com https://imgs.signifyd.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.networkmerchants.com *.googleapis.com *.listrakbi.com https://mediacdn.espssl.com *.richpanel.com *.fontawesome.com https://fonts.googleapis.com https://fonts.bunny.net *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.amazonaws.com *.richpanel.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com https://maps.googleapis.com https://player.vimeo.com *.networkmerchants.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.credova.com *.doubleclick.net *.listrak.com *.listrakbi.com *.signifyd.com *.signifyd.com:* bt.signifyd.com *.cloudfront.net *.crazyegg.com *.clickagy.com *.google.com *.mmapiws.com https://bl.listrakbi.com *.sumo.com *.amped.io *.tryamped.com https://sumo.com https://services.nofraud.com https://ipapi.co https://ammunition-depot.extole.io https://referral.ammunitiondepot.com *.richpanel.com https://t.lt02.net *.mczbf.com *.sjwoe.com cj.dotomi.com *.emjcd.com idsync.rlcdn.com *.cj.com track.getgobot.com wss://*.richpanel.com https://developer.adobe.com https://cdn.avmws.com/ http://cdn.avmws.com/ https://ipinfo.io/json https://get.geojs.io *.avada.io *.authorize.net maps.googleapis.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.klaviyo.com *.clarity.ms *.run.app https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.fontawesome.com *.cloudflare.com *.jsdelivr.net code.jquery.com unpkg.com zipaddr.com *.typekit.net *.youtube.com *.ytimg.com *.twitter.com *.twimg.com; style-src 'self' 'unsafe-inline' *.google.com *.googleapis.com *.gstatic.com *.fontawesome.com *.cloudflare.com *.jsdelivr.net *.typekit.net code.ionicframework.com; img-src 'self' data: blob: *.etb-rights.com *.amazonaws.com *.google.com *.googleapis.com *.googleusercontent.com *.googletagmanager.com *.youtube.com *.ytimg.com *.cloudflare.com *.twitter.com *.twimg.com; font-src 'self' data: *.google.com *.googleapis.com *.gstatic.com *.fontawesome.com *.cloudflare.com *.typekit.net code.ionicframework.com; media-src 'self' *.amazonaws.com *.youtube.com *.cloudfront.net; frame-src 'self' *.youtube.com *.twitter.com *.google.com; connect-src 'self' *.amazonaws.com *.google.com *.google-analytics.com *.googletagmanager.com *.fontawesome.com *.typekit.net *.firebaseio.com; object-src 'none' 1
object-src  'none'; connect-src 'self' *.asgmax.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.asgmax.com join.gammasecure.com; script-src 'self' *.asgmax.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.asgmax.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-ylIeIaa8OG2rAdIa2Wu9JA' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
default-src 'self' https://*.die-samariter.org https://*.online-packen.org; script-src 'self' 'nonce-cq3rj8RKf3FFK-dEdmSDmJ91qpvy193leqDEpr9XCEWbDKn3YWl0cw' 'unsafe-eval' blob: 'sha256-6wRdeNJzEHNIsDAMAdKbdVLWIqu8b6+Bs+xVNZqplQw=' 'sha256-jA1JnOA6P+SEuRDQzd/Ct+O0GAeafaB4Nhia5xh0Ecs=' https://app.usercentrics.eu https://privacy-proxy.usercentrics.eu https://ssl.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://maps.googleapis.com https://code.etracker.com https://www.etracker.de https://connect.facebook.net 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://app.usercentrics.eu https://uct.service.usercentrics.eu https://privacy-proxy-server.usercentrics.eu https://privacy-proxy.usercentrics.eu https://maps.gstatic.com https://maps.googleapis.com https://adfarm1.adition.com https://www.google.com https://www.google.de https://www.google.at https://www.google.ch https://www.googleadservices.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://ssl.google-analytics.com https://*.tile.openstreetmap.org; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://app.usercentrics.eu https://creatorapp.zohopublic.eu https://creatorl.zohopublic.eu https://www.googletagmanager.com; style-src 'self' https://*.die-samariter.org https://*.online-packen.org 'unsafe-inline' https://fonts.googleapis.com 'report-sample'; font-src 'self' https://*.die-samariter.org https://*.online-packen.org data: https://fonts.googleapis.com https://fonts.gstatic.com; connect-src 'self' https://*.die-samariter.org https://*.online-packen.org https://api.usercentrics.eu https://graphql.usercentrics.eu https://privacy-proxy.usercentrics.eu https://consent-api.service.consent.usercentrics.eu https://aggregator.service.usercentrics.eu https://maps.googleapis.com https://www.etracker.de https://*.analytics.google.com https://*.google-analytics.com https://analytics.google.com https://www.google.de https://www.google.com https://www.googleadservices.com https://stats.g.doubleclick.net https://ad.doubleclick.net; report-uri https://www.die-samariter.org/@http-reporting?csp=report&requestTime=1789278207516747&requestHash=4012e2f31ba4eed8f210e6f6935780f19f3914ce 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.googletagmanager.com https://www.google-analytics.com https://*.mux.com https://www.gstatic.com https://vercel.live https://www.google.com https://analytics.google.com https://*.google-analytics.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://cmp.osano.com https://tattle.api.osano.com https://app.cal.com https://munchkin.marketo.net https://*.mktoresp.com https://snap.licdn.com https://px.ads.linkedin.com https://*.clarity.ms https://www.redditstatic.com https://pixel-config.reddit.com https://amplify.outbrain.com https://wave.outbrain.com https://tr.outbrain.com https://ws.zoominfo.com https://js.zi-scripts.com https://cdn.mouseflow.com https://www.clickcease.com https://app.optibase.io https://cdn.cr-relay.com https://s3-us-west-2.amazonaws.com https://*.execute-api.us-west-2.amazonaws.com https://pro.ip-api.com https://a.usbrowserspeed.com https://alocdn.com https://*.liadm.com https://*.sampleadai.net https://cdn.syftdata.com https://e2.sy-d.io https://*.amplitude.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://vercel.live; media-src 'self' blob: https://*.mux.com; connect-src 'self' https://*.mux.com https://*.litix.io https://www.googletagmanager.com https://www.google-analytics.com https://site-assets.plasmic.app https://vercel.live https://*.pusher.com wss://*.pusher.com https://www.google.com https://analytics.google.com https://*.google-analytics.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://cmp.osano.com https://tattle.api.osano.com https://app.cal.com https://munchkin.marketo.net https://*.mktoresp.com https://snap.licdn.com https://px.ads.linkedin.com https://*.clarity.ms https://www.redditstatic.com https://pixel-config.reddit.com https://amplify.outbrain.com https://wave.outbrain.com https://tr.outbrain.com https://ws.zoominfo.com https://js.zi-scripts.com https://cdn.mouseflow.com https://www.clickcease.com https://app.optibase.io https://cdn.cr-relay.com https://s3-us-west-2.amazonaws.com https://*.execute-api.us-west-2.amazonaws.com https://pro.ip-api.com https://a.usbrowserspeed.com https://alocdn.com https://*.liadm.com https://*.sampleadai.net https://cdn.syftdata.com https://e2.sy-d.io https://*.amplitude.com; frame-src 'self' https://vercel.live https://app.cal.com https://cal.com; worker-src 'self' blob:; frame-ancestors 'self' https://studio.plasmic.app; base-uri 'self'; form-action 'self' 1
default-src 'self'; script-src 'report-sample' 'self' https://app.hubspot.com/content/editor/prefetcher.js https://cdnjs.cloudflare.com/ajax/libs/jquery/3.6.0/jquery.min.js https://connect.facebook.net/en_GB/sdk.js https://j.6sc.co/6si.min.js https://js.hs-analytics.net/analytics/1728579000000/8089267.js https://js.hs-banner.com/8089267.js https://js.hsadspixel.net/fb.js https://js.hscollectedforms.net/collectedforms.js https://js.hscta.net/cta/current.js https://js.hsleadflows.net/leadflows.js https://js.hubspot.com/web-interactives-embed.js https://js.zi-scripts.com/zi-tag.js https://platform.linkedin.com/in.js https://script.hotjar.com/browser-perf.8417c6bba72228fa2e29.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://static.hotjar.com/c/hotjar-2164719.js https://static.hsappstatic.net/content-cwv-embed/static-1.1293/embed.js https://tag.clearbitscripts.com/v1/pk_28b4f192479bc58362240e30a96a0e05/tags.js https://tools.luckyorange.com/core/core.js https://trk.techtarget.com/tracking.js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/js; style-src 'report-sample' 'self' https://7052064.fs1.hubspotusercontent-na1.net https://cdnjs.cloudflare.com https://static.hsappstatic.net https://tags.srv.stackadapt.com; object-src 'none'; base-uri 'self'; connect-src 'self' https://analytics.google.com https://api.hubapi.com https://app.hubspot.com https://cp.hubspot.com https://cta-service-cms2.hubspot.com https://forms-na1.hubspot.com https://forms.hscollectedforms.net https://forms.hsforms.com https://forms.hubspot.com https://ibc-flow.techtarget.com https://in.visitors.live https://ipv6.6sc.co https://js.hs-banner.com https://js.zi-scripts.com https://px.ads.linkedin.com https://tags.srv.stackadapt.com https://ws.zoominfo.com https://www.google-analytics.com https://www.google.com wss://in.visitors.live wss://realtime.luckyorange.com; font-src 'self' https://cdnjs.cloudflare.com; frame-src 'self' https://platform.twitter.com https://player.vimeo.com https://td.doubleclick.net; img-src 'self' data: https://298890.fs1.hubspotusercontent-na1.net https://b.6sc.co https://forms-na1.hsforms.com https://forms.hsforms.com https://perf-na1.hsforms.com https://px.ads.linkedin.com https://secure.adnxs.com https://static.hsappstatic.net https://track.hubspot.com https://www.googletagmanager.com; manifest-src 'self'; media-src 'self'; report-uri https://670805d10ec8e242e29afa7d.endpoint.csper.io/?v=0; worker-src 'self'; 1
report-uri https://app.glitchtip.com/api/11198/security/?glitchtip_key=b34a99a6982a4417972cb679fa8b8bfd;base-uri 'self';connect-src 'self' https://connect.facebook.net https://www.google.com https://www.googletagmanager.com https://www.youtube.com https://www.google-analytics.com https://visualsponline.azurewebsites.net https://translate.googleapis.com https://snap.licdn.com https://listgrowth.ctctcdn.com/v1/a8de2ead6fc0f5433ab4177c50a3190f.json https://stats.g.doubleclick.net https://visitor2.constantcontact.com https://givebutter.com https://www.google.com/recaptcha/api.js https://region1.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://crm.bloomerang.co https://ajax.aspnetcdn.com https://js.stripe.com https://r.stripe.com https://api.bloomerang.co https://*.bloomerang.co;default-src 'self';form-action 'self';img-src 'self' data: https: https://jbs-foods.imgix.net https://www.facebook.com https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com android-webview-video-poster: https://px.ads.linkedin.com;media-src 'self' https: data:;object-src 'none';script-src 'self' 'nonce-K56IYkd1IKLDyX0h6qn2PC7mmqswczU2' https://www.google.com https://www.googletagmanager.com https://www.youtube.com https://www.google-analytics.com https://connect.facebook.net https://ssl.google-analytics.com/ga.js https://static.ctctcdn.com/js/signup-form-widget/current/signup-form-widget.min.js https://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.4/jquery.js https://cdnjs.cloudflare.com/ajax/libs/underscore.js/1.8.3/underscore-min.js https://snap.licdn.com https://www.gstatic.com https://stats.g.doubleclick.net https://visitor2.constantcontact.com https://givebutter.com https://www.google.com/recaptcha/api.js 'sha256-FDyPg8CqqIpPAfGVKx1YeKduyLs0ghNYWII21wL+7HM=' 'sha256-19tTl2QL1fqBlIdD6/tWY1mjgpye79zseuzVrrybcDc=' https://*.googletagmanager.com https://crm.bloomerang.co https://ajax.aspnetcdn.com https://js.stripe.com https://r.stripe.com https://api.bloomerang.co https://*.bloomerang.co 'unsafe-eval' www.google.com;style-src 'self' https://cdn.plyr.io/3.5.2/plyr.css https://static.ctctcdn.com/js/signup-form-widget/current/signup-form-widget.css 'unsafe-inline';font-src 'self' https://fonts.gstatic.com chrome-extension: data:;frame-src 'self' https://www.google.com https://www.googletagmanager.com https://www.youtube.com https://givebutter.com https://js.stripe.com 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src https:; object-src 'none'; base-uri 'self'; form-action 'self' https: 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cloudflare.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com  'self' 'unsafe-inline'; frame-ancestors *.googleapis.com *.newsmanapp.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://challenges.cloudflare.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com  *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cloudflare.com https://s.ytimg.com magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://challenges.cloudflare.com *.cloudflare.com *.fontawesome.com *.livechatinc.com *.facebook.net *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com *.googletagmanager.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.cloudflare.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog https://get.geojs.io *.avada.io  'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-ARQu7yJv5Gij8NyXVGz9sg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://platform.twitter.com https://www.instagram.com https://connect.facebook.net https://platform.linkedin.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: blob: https: http:; media-src 'self' blob: https:; connect-src 'self' https: wss:; frame-src 'self' https: http:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://ajax.googleapis.com https://ssl.ingersoll-imc.com https://www.google-analytics.com https://platform.twitter.com  https://www.googletagmanager.com https://wpcc.io https://recruitingbypaycor.com; style-src 'self' 'unsafe-inline' http://ssl.ingersoll-imc.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://ajax.googleapis.com https://wpcc.io https://cdn.websitepolicies.io; img-src 'self' https://ssl.ingersoll-imc.com https://www.google-analytics.com https://syndication.twitter.com https://stats.g.doubleclick.net; connect-src 'self' https://syndication.twitter.com https://www.google-analytics.com https://stats.g.doubleclick.net; font-src 'self' https://ssl.ingersoll-imc.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com; form-action 'self' https://syndication.twitter.com https://platform.twitter.com; frame-src https://platform.twitter.com https://syndication.twitter.com https://recruitingbypaycor.com/; report-uri https://report.ingersoll-imc.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.hotjar.com https://widget.trustpilot.com https://cdn.cookielaw.org https://ct.pinterest.com https://s.pinimg.com https://apps.mypurecloud.de https://resources.digital-cloud.medallia.eu https://www.youtube.com https://c.amazon-adsystem.com https://connect.facebook.net https://*.googletagmanager.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://*.doubleclick.net https://*.google.com https://bat.bing.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com https://www.googletagmanager.com; img-src 'self' data: * https://bnpppfalphacredit.sc.omtrdc.net https://www.facebook.com; media-src 'self' https://ssl.gstatic.com; frame-src 'self' https://*.doubleclick.net https://www.youtube.com https://widget.trustpilot.com https://ct.pinterest.com https://apps.mypurecloud.de https://resources.digital-cloud.medallia.eu https://www.googletagmanager.com https://*.amazon-adsystem.com https://bnpppfalphacredit.demdex.net https://www.facebook.com; font-src 'self' data: * fonts.gstatic.com; connect-src 'self' https://cdn.cookielaw.org https://analytics-fe.digital-cloud.medallia.eu https://resources.digital-cloud.medallia.eu https://udc-neb.kampyle.com https://ct.pinterest.com wss://ws.hotjar.com https://*.hotjar.io https://*.paa-reporting-advertising.amazon https://*.paa-reporting-advertising.amazon.com https://*.amazon-adsystem.com https://pagead2.googlesyndication.com https://*.mypurecloud.de wss://webmessaging.mypurecloud.de https://www.google.com https://www.google.com/ccm/collect https://*.google.com https://*.onetrust.com https://dpm.demdex.net ws://localhost:12387 https://bat.bing.com https://*.facebook.net https://*.facebook.com https://*.doubleclick.net; report-uri /report-csp-violation 1
font-src fonts.gstatic.com use.typekit.net *.fontawesome.com *.gstatic.com 'self' data: fonts.gstatic.com/ data: *.klaviyo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.adyen.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.adyen.com www.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.dotdigital.com *.klarna.com *.doubleclick.net www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.adyen.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maps.gstatic.com *.hsforms.net *.hsforms.com 'self' data: *.mailchimp.com tracking.qa.paypal.com seal-seflorida.bbb.org x.klarnacdn.net *.playground.klarnaevt.com bat.bing.com *.google.com *.google.de *.gstatic.com *.googleusercontent.com *.doubleclick.net tags.w55c.net *.cookielaw.org *.crazyegg.com www.xtento.com cdn.xtento.com widgets.trustedshops.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-ds.com *.adyen.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maps.googleapis.com *.hsforms.net *.hsforms.com www.google.com *.gstatic.com *.cookielaw.org *.onetrust.com *.mailchimp.com *.paypal.com *.paypalobjects.com mc.us10.list-manage.com seal-seflorida.bbb.org tagmanager.google.com gstatic.com x.klarnacdn.net js.playground.klarna.com js.klarna.com bat.bing.com *.trackedlink.net script.crazyegg.com www.xtento.com cdn.xtento.com widgets.trustedshops.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com *.googleapis.com *.gstatic.com *.mailchimp.com seal-seflorida.bbb.org *.google.com *.google.de fast.fonts.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io commerce.adobe.net qa-api.magedevteam.com *.sentry.io *.adyen.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maps.googleapis.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.cookielaw.org *.onetrust.com *.klarnaevt.com bat.bing.com *.doubleclick.net *.analytics.google.com *.googlesyndication.com *.crazyegg.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com *.klarna.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/  https://widget.trustpilot.com;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://appleid.cdn-apple.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com *.myheritage.com.tr https://www.myheritage.com.tr  'unsafe-eval' 'nonce-c498fcb3d6c14897cfb7eb5f4eb3b13a' 'strict-dynamic' https://widget.trustpilot.com https://invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style  https://widget.trustpilot.com;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io https://www.google.com/recaptcha/enterprise/* https://www.google.com/recaptcha/enterprise/ https://www.google.com/recaptcha/enterprise/clr https://www.google.com/recaptcha/ https://maps.googleapis.com https://people.googleapis.com https://translate-pa.googleapis.com *.myheritage.com.tr https://widget.trustpilot.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:  https://widget.trustpilot.com https://*.trustpilot.com;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=report&canonical_page_id=/company/home/ 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://*.hubspot.com https://*.hsforms.net https://*.hs-scripts.com https://*.hs-analytics.net https://*.hscollectedforms.net https://js.hs-banner.com https://widget.intercom.io https://js.intercomcdn.com https://www.googletagmanager.com https://www.google-analytics.com https://ddwl4m2hdecbv.cloudfront.net https://bat.bing.com https://*.doubleclick.net https://connect.facebook.net https://*.clarity.ms https://www.google.com https://www.gstatic.com; connect-src 'self' https: wss://*.intercom.io; frame-src 'self' https://js.stripe.com https://*.hubspot.com https://*.intercom.io https://watch.getcontrast.io https://www.google.com 1
default-src cdn.cookie-script.com 'self'; script-src cdn.cookie-script.com *.google-analytics.com *.googletagmanager.com cdnjs.cloudflare.com *.twitter.com *.twimg.com *.hubspot.com *.hscollectedforms.net js.hsadspixel.net *.hs-scripts.com *.hs-banner.com *.hs-analytics.net forms.hsforms.com *.usemessages.com unpkg.com 'unsafe-eval' 'self' 'unsafe-inline'; style-src cdnjs.cloudflare.com fonts.googleapis.com 'self' 'unsafe-inline' ; font-src data: cdnjs.cloudflare.com fonts.gstatic.com 'self'; frame-src www.youtube.com *.twitter.com *.googletagmanager.com 'self'; img-src data: *.twimg.com *.twitter.com *.google-analytics.com *.googletagmanager.com www.gstatic.com *.hsforms.com *.hubspot.com 'self'; style-src-elem cdnjs.cloudflare.com hello.myfonts.net *.twitter.com *.twimg.com 'self' 'unsafe-inline'; connect-src https://*.algolia.net https://*.algolianet.com https://*.algolia.io consent.cookie-script.com *.google-analytics.com *.googletagmanager.com *.hubspot.com *.hubapi.com *.hscollectedforms.net 'self'; script-src-elem cdn.cookie-script.com *.googletagmanager.com cdnjs.cloudflare.com *.google-analytics.com *.twimg.com *.twitter.com *.hubspot.com *.hscollectedforms.net js.hsadspixel.net *.hs-scripts.com *.hs-banner.com *.hs-analytics.net forms.hsforms.com *.usemessages.com unpkg.com 'self' 'unsafe-inline'; report-uri https://dcvc.report-uri.com/r/d/csp/reportOnly 1
font-src *.environmentallights.com *.typekit.net *.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.environmentallights.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.environmentallights.com *.google.com *.googleapis.com *.vimeo.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.environmentallights.com *.google.com *.googleapis.com *.gstatic.com *.linkedin.com *.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page *.environmentallights.com bam.nr-data.net *.cookielaw.org *.google.com *.googleapis.com *.gstatic.com js-agent.newrelic.com player.vimeo.com *.facebook.net api.wistia.com fast.wistia.com *.callrail.com *.crazyegg.com *.cookiepro.com *.pardot.com *.licdn.com *.d41.co js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.environmentallights.com *.typekit.net *.cloudflare.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src *.bolt.com 'self' 'unsafe-inline'; media-src *.adobe.com *.environmentallights.com embed.wistia.com embed-ssl.wistia.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com *.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.environmentallights.com bam.nr-data.net *.doubleclick.net *.facebook.com *.google.com *.googleapis.com api.wistia.com fast.wistia.com *.callrail.com *.cookiepro.com cookiepro.blob.core.windows.net *.d41.co *.onetrust.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.environmentallights.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cloudflare.com *.trustedshops.com *.fontawesome.com https://fonts.bunny.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com youtu.be *.vimeo.com *.addthis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.revolut.com *.quotes.stockinthechannel.co.uk https://s7.addthis.com https://www.google.com https://tpc.googlesyndication.com https://googleads.g.doubleclick.net https://www.paypalobjects.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cloudflare.com https://cdn.klarna.com https://s.ytimg.com *.usercentrics.eu blob: *.magebig.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com media.stockinthechannel.com images.icecat.biz 'self' data: https://bat.bing.com https://c.bing.com https://c.clarity.ms https://pagead2.googlesyndication.com https://www.google.lt https://www.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com widget.freshworks.com m2epro.freshdesk.com *.cloudflare.com *.google-analytics.com *.gstatic.com *.googleadservices.com *.googleapis.com *.trustedshops.com *.usercentrics.eu *.addthis.com *.addthisedge.com *.moatads.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.revolut.com *.hsforms.net *.hsforms.com https://v1.addthisedge.com https://m.addthis.com https://s7.addthis.com https://widgets.pinterest.com https://api-public.addthis.com https://z.moatads.com https://apis.google.com https://www.google.com https://bat.bing.com https://www.clickcease.com https://www.gstatic.com https://d.clarity.ms https://f.clarity.ms https://h.clarity.ms https://i.clarity.ms https://www.googletagmanager.com https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://partner.googleadservices.com https://adservice.google.lt https://adservice.google.com https://googleads.g.doubleclick.net https://s.kk-resources.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.cloudflare.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com objects.icecat.biz 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com widget.freshworks.com m2epro.freshdesk.com *.cloudflare.com *.googleapis.com https://ipinfo.io *.facebook.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com https://www.google-analytics.com https://api-public.addthis.com https://stats.g.doubleclick.net https://www.paypal.com https://d.clarity.ms https://pagead2.googlesyndication.com https://csi.gstatic.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' 'unsafe-inline' https://www.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net;                                         img-src 'self' data: https: https://*.google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com www.googletagmanager.com https://ajax.googleapis.com https://syndication.twitter.com https://www.googleadservices.com https://googleads.g.doubleclick.net;                                         font-src 'self' data: fonts.googleapis.com fonts.gstatic.com https://fonts.gstatic.com https://googleads.g.doubleclick.net https://maxcdn.bootstrapcdn.com;                                         connect-src 'self' data: blob: https://*.paidy.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googleapis.com *.google.com https://*.gstatic.com https://*.clarity.ms https://apm.yahoo.co.jp https://bat.bing.com https://dm.slim02.jp https://fspark-ap.com https://googleads.g.doubleclick.net https://jp.analytics.omnisegment.com https://o4506693258641408.ingest.us.sentry.io https://omnitag.omnisegment.com https://sslwidget.criteo.com https://stats.g.doubleclick.net https://www.google.co.jp https://www.google.com https://www.google.com.tw  https://ad.doubleclick.net https://api.mattrz-cx.com https://apm.yahoo.co.jp https://bat.bing.net https://cognito-identity.ap-northeast-1.amazonaws.com https://dm.slim02.jp https://googleads.g.doubleclick.net https://kinesis.ap-northeast-1.amazonaws.com https://o1037169.ingest.sentry.io https://pagead2.googlesyndication.com https://stats.g.doubleclick.net https://www.google.be https://www.google.ca https://www.google.co.kr https://www.google.co.uk https://www.google.com https://www.google.com.eg https://www.google.com.hk https://www.google.com.sg https://www.google-analytics.com https://www.google.at https://www.google.co.th https://www.google.com.au https://www.googleadservices.com;                                         frame-src 'self' https://www.google.com https://www.recaptcha.net https://checkout-v2.paidy.com/ *.google.com www.googletagmanager.com https://gum.criteo.com https://platform.twitter.com https://cn-1793908178-5-7vnsr30290.ibosscloud.com https://fg.id.sse.cisco.com https://gateway.zscalerthree.net https://gumi.criteo.com https://jp.analytics.omnisegment.com https://safe.menlosecurity.com https://static.criteo.net;                                         script-src 'self' data: 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.googletagmanager.com static.mul-pay.jp p01.mul-pay.jp https://www.google.com/recaptcha/enterprise.js https://www.recaptcha.net/recaptcha/enterprise.js https://www.gstatic.com https://yubinbango.github.io https://apps.paidy.com/ http://code.jquery.com https://ajax.googleapis.com https://b99.yahoo.co.jp https://bat.bing.com https://dynamic.criteo.com https://fspark-ap.com https://googleads.g.doubleclick.net https://h.accesstrade.net https://intljs.rmtag.com https://omnitag.omniscientai.com https://platform.twitter.com https://rec.ebis.ne.jp https://s.yimg.jp https://scripts.clarity.ms https://sslwidget.criteo.com https://static.criteo.net https://taj1.ebis.ne.jp https://b98.yahoo.co.jp https://bat.bing.com https://dynamic.criteo.com https://fspark-ap.com https://googleads.g.doubleclick.net https://intljs.rmtag.com https://library.mattrz-cx.com https://omnitag.omniscientai.com https://platform.twitter.com https://s.yimg.jp https://scripts.clarity.ms https://sslwidget.criteo.com https://static.criteo.net https://taj1.ebis.ne.jp https://taj2.ebis.ne.jp https://uploads.mattrz-cx.com https://c.bing.com https://www.clarity.ms;                                         style-src 'self' 'unsafe-inline' https://ajax.googleapis.com https://fonts.googleapis.com fonts.googleapis.com https://maxcdn.bootstrapcdn.com;                                         worker-src blob:;                                         report-to csp-endpoint; 1
font-src *.cloudflare.com *.typekit.net *.trustedshops.com *.fontawesome.com fonts.gstatic.com *.ccm19.de https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com youtu.be *.vimeo.com *.addthis.com *.gesutra-devbox.de *.ccm19.de https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com js.mollie.com www.youtube.com drive.google.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io *.adcell.com *.shopvote.de *.cloudflare.com https://cdn.klarna.com *.paypal.com https://s.ytimg.com *.usercentrics.eu blob: *.gesutra-devbox.de *.ccm19.de https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.mollie.com *.adobedtm.com *.adobe.com *.gstatic.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://www.captcha.eu *.adcell.com *.shopvote.de *.cloudflare.com *.google-analytics.com *.google.com *.gstatic.com *.googleadservices.com *.googleapis.com *.trustedshops.com *.usercentrics.eu *.addthis.com *.addthisedge.com *.moatads.com *.gesutra-devbox.de *.ccm19.de https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.mollie.com maps.googleapis.com https://app.uptain.de www.youtube.com player.vimeo.com drive.google.com *.googletagmanager.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.cloudflare.com *.typekit.net *.trustedshops.com *.usercentrics.eu fonts.googleapis.com *.ccm19.de https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.amazonaws.com *.googleapis.com *.google.com *.r2.dev *.webkul.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://www.captcha.eu https://w19.captcha.at https://at.captcha.at *.adcell.com *.shopvote.de *.cloudflare.com *.paypal.com *.googleapis.com *.gesutra-devbox.de *.ccm19.de https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com places.googleapis.com https://app.uptain.de cdn.plyr.io noembed.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https: data: 'unsafe-inline' fonts.googleapis.com; script-src 'self' 'unsafe-inline' platform.twitter.com maps.googleapis.com *.facebook.net *.google-analytics.com *.googletagmanager.com *.googleapis.com widget2.fanimani.pl cdnjs.cloudflare.com; img-src 'self' secure.gravatar.com s.w.org maps.googleapis.com syndication.twitter.com *.gstatic.com *.google-analytics.com *.facebook.com *.google.com *.google.pl stats.g.doubleclick.net  ; 1
object-src 'none';base-uri 'self';script-src 'nonce-WpSYE7Rh7KlowCoJ9gqBMg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://fonts.gstatic.com *.paypal.com *.paypalobjects.com *.braintreegateway.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.oct8ne.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com https://api.clerk.io https://cdn.clerk.io 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.weltpixel.com *.cdn-apple.com *.sandbox.paypal.com *.iubenda.com *.oct8ne.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://cdn.clerk.io *.bing.com *.google.it *.google.com google.com *.googleapis.com *.etrusted.com *.sandbox.paypal.com *.braintreegateway.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.iubenda.com https://firebasestorage.googleapis.com *.oct8ne.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.googletagmanager.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://api.clerk.io https://cdn.clerk.io https://custom.clerk.io *.bing.com *.clerk.io *.clarity.ms *.google.it *.trustedshops.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.iubenda.com *.avada.io *.shopify.com *.oct8ne.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://api.clerk.io https://cdn.clerk.io https://fonts.googleapis.com *.etrusted.com *.braintreegateway.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com PLACEHOLDER *.bing.com *.clarity.ms *.google.it *.grupposanmarco.eu *.googlesyndication.com *.sandbox.paypal.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.iubenda.com https://get.geojs.io *.avada.io *.oct8ne.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com cash-f.squarecdn.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com 'self' data: *.zopim.com *.facebook.net *.facebook.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net https://widgets.trustedshops.com *.vonroc.com *.vonroc.nl *.vonroc.de *.vonroc.at *.vonroc.fr *.vonroc.be *.vonroc.it *.vonroc.se *.vonroc.dk *.vonroc.pl *.vonroc.cz *.vonroc.bg *.vonroc.es *.vonroc.pt *.vonroc.ro *.vonroc.hu *.paypalobjects.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com *.googleapis.com *.facebook.com *.vonroc.com *.paypalobjects.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com *.braintreegateway.com *.paypal.com google.com *.google.com bid.g.doubleclick.net * *.awin1.com *.zenaps.com *.fls.doubleclick.net *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com account.fetchify.com *.weltpixel.com *.twitter.com *.demdex.net www.youtube.com youtu.be *.vimeo.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.googleapis.com www.xtento.com *.googletagmanager.com *.doubleclick.net *.typeform.com *.hotjar.com *.freshchat.com *.vonroc.com *.paypalobjects.com *.facebook.com *.cookiebot.com *.tradedoubler.com *.imgstatics.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com *.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com 'self' data: widgets.magentocommerce.com *.google-analytics.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.paypal.com *.typekit.net *.gstatic.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.analytics.google.com www.googletagmanager.com * https://images.unsplash.com *.awin1.com *.zenaps.com *.wepowerconnections.com *.trackedlink.net *.ddlnk.net *.cloudflare.com *.cdninstagram.com *.klarna.com *.demdex.net *.googleadservices.com *.googletagmanager.com *.twitter.com *.twimg.com *.ytimg.com youtu.be *.lightemporium.com *.usercentrics.eu *.trustedshops.com *.google.nl *.google.com *.zopim.com *.bing.com c.clarity.ms *.facebook.net *.facebook.com *.vimeo.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com *.googleapis.com www.xtento.com cdn.xtento.com *.reddit.com *.doubleclick.net *.visualwebsiteoptimizer.com *.paypalobjects.com *.cookiebot.com *.vonroc.com *.vonroc.nl *.vonroc.de *.vonroc.at *.vonroc.fr *.vonroc.be *.vonroc.it *.vonroc.se *.vonroc.dk *.vonroc.pl *.vonroc.cz *.vonroc.bg *.vonroc.es *.vonroc.pt *.vonroc.ro *.vonroc.hu data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.google-analytics.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com googleads.g.doubleclick.net www.googleadservices.com analytics.google.com www.googletagmanager.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://maps.googleapis.com https://player.vimeo.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com cc-cdn.com *.cloudflare.com *.twitter.com *.sentry-cdn.com *.google-analytics.com *.googleadservices.com *.paypalobject.com *.google.nl youtu.be *.gstatic.com *.googletagmanager.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.amazonaws.com *.zdassets.com *.dassets.com *.diffuse.nl *.yotpo.com *.twimg.com chimpstatic.com *.zopim.com *.facebook.net *.facebook.com https://*.google.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.avada.io *.shopify.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.cardinaltrusted.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.googleapis.com www.xtento.com cdn.xtento.com *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com *.clarity.ms *.wiqhit.com *.bugherd.com *.hotjar.com *.prisjakt.nu *.bing.com *.visualwebsiteoptimizer.com *.freshchat.com *.vonroc.com *.paypalobjects.com *.tradedoubler.com *.beslist.nl *.cookiebot.com *.optimalpeople.fr *.imgstatics.com *.vonroc.nl *.vonroc.de *.vonroc.at *.vonroc.fr *.vonroc.be *.vonroc.it *.vonroc.se *.vonroc.dk *.vonroc.pl *.vonroc.cz *.vonroc.bg *.vonroc.es *.vonroc.pt *.vonroc.ro *.vonroc.hu https://vonroc.nl 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app webchat.dotdigital.com webchat.staging.dotdigital.com cc-cdn.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://fonts.googleapis.com maxcdn.bootstrapcdn.com https://hcaptcha.com https://*.hcaptcha.com https://fonts.bunny.net assets.braintreegateway.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com *.bootstrapcdn.com *.freshchat.com *.paypalobjects.com *.facebook.com *.vonroc.com *.vonroc.nl *.vonroc.de *.vonroc.at *.vonroc.fr *.vonroc.be *.vonroc.it *.vonroc.se *.vonroc.dk *.vonroc.pl *.vonroc.cz *.vonroc.bg *.vonroc.es *.vonroc.pt *.vonroc.ro *.vonroc.hu 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.googleapis.com *.vimeo.com *.paypalobjects.com *.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com *.newrelic.com *.nr-data.net *.vimeo.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com * https://maps.googleapis.com https://player.vimeo.com *.wepowerconnections.com https://the.sciencebehindecommerce.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com *.instagram.com *.doubleclick.net *.demdex.net *.cloudflare.com *.twitter.com *.amazonaws.com *.zdassets.com *.twimg.com *.zopim.com wss://widget-mediator.zopim.com client.diffuse.tools *.facebook.net *.facebook.com youtu.be https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.googleapis.com *.redditstatic.com *.reddit.com *.tiktok.com *.run.app *.typeform.com *.clarity.ms *.hotjar.com *.paypalobjects.com *.tradedoubler.com *.optimalpeople.fr *.vonroc.com *.vonroc.nl *.vonroc.de *.vonroc.at *.vonroc.fr *.vonroc.be *.vonroc.it *.vonroc.se *.vonroc.dk *.vonroc.pl *.vonroc.cz *.vonroc.bg *.vonroc.es *.vonroc.pt *.vonroc.ro *.vonroc.hu *.pay.nl 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com *.googleapis.com *.vimeo.com *.paypalobjects.com *.facebook.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://vonroc.se/paynl/csp/report; report-to report-endpoint; 1
font-src *.fontawesome.com *.yotpo.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com *.avada.io assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com unsafe-inline *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' *.yandex.ru 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://v.scribe-mail.com https://www.googletagmanager.com https://*.googletagmanager.com https://googleads.g.doubleclick.net https://app.termly.io https://widgets.tely.ai https://client.crisp.chat https://settings.crisp.chat https://eu.posthog.com https://eu.i.posthog.com https://eu-assets.i.posthog.com https://cdn.snitcher.com https://connect.facebook.net https://snap.licdn.com https://static.ads-twitter.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://client.crisp.chat; img-src 'self' data: blob: https://*.scribe-mail.com https://*.scribe-mail-staging.com https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.g.doubleclick.net https://ad.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://google.com https://pagead2.googlesyndication.com https://www.facebook.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://t.co https://analytics.twitter.com https://a300.stripecdn.com https://api.dicebear.com https://client.crisp.chat https://image.crisp.chat https://proxy.crisp.chat https://storage.crisp.chat; font-src 'self' data: https://client.crisp.chat https://proxy.crisp.chat; connect-src 'self' https://*.scribe-mail.com https://www.googletagmanager.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.g.doubleclick.net https://ad.doubleclick.net https://www.googleadservices.com https://pagead2.googlesyndication.com https://google.com https://www.google.com https://eu.posthog.com https://eu.i.posthog.com https://eu-assets.i.posthog.com https://internal-t.posthog.com https://app.termly.io https://us.consent.api.termly.io https://radar.snitcher.com https://client.crisp.chat https://storage.crisp.chat wss://client.relay.crisp.chat wss://stream.relay.crisp.chat wss://client.relay.rescue.crisp.chat wss://stream.relay.rescue.crisp.chat https://px.ads.linkedin.com https://analytics.twitter.com https://t.co https://www.facebook.com https://cloudflareinsights.com https://widgets.tely.ai https://srv.tely.ai wss://streaming.tely.ai; media-src 'self' https://*.scribe-mail.com https://client.crisp.chat; frame-src 'self' https://www.googletagmanager.com https://td.doubleclick.net https://bid.g.doubleclick.net https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://fast.wistia.net https://www.loom.com https://app.cal.com https://app.termly.io https://www.facebook.com https://iframe.tely.ai; worker-src 'self' blob:; manifest-src 'self'; form-action 'self'; report-uri https://scribe.report-uri.com/r/d/csp/reportOnly 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com 'self' data: *.bootstrapcdn.com *.doubleclick.net *.nr-data.net *.bobcatparts.com *.fontawesome.com *.googleadservices.com *.google.com *.facebook.net *.facebook.com *.paypal.com *.paypalobjects.com *.google.com.ua *.livechatinc.com *.bridgepaynetsecuretest.com *.bridgepaynetsecuretx.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.cardinalcommerce.com *.affirm.com *.klaviyo.com *.inspectlet.com *.braintree-api.com *.bobcat.com *.okta.com *.facebook.com *.mouseflow.com *.dmctools.com *.mcstaging.dmctools.com *.bridgepaynetsecuretest.com *.bridgepaynetsecuretx.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.certcapture.com *.olark.com *.google-analytics.com *.affirm.com *.doubleclick.net *.newrelic.com *.nr-data.net *.bobcatparts.com *.fontawesome.com *.googleadservices.com *.facebook.net *.facebook.com *.paypalobjects.com *.google.com.ua *.klaviyo.com *.inspectlet.com *.braintree-api.com *.kaptcha.com *.mouseflow.com *.iwdagency.com *.dmctools.com *.mcstaging.dmctools.com *.livechatinc.com *.bridgepaynetsecuretest.com *.bridgepaynetsecuretx.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com *.certcapture.com *.magentocommerce.com *.ytimg.com data: *.google.com *.bootstrapcdn.com *.doubleclick.net *.newrelic.com *.nr-data.net *.bobcatparts.com *.fontawesome.com *.googleadservices.com *.google-analytics.com *.facebook.net *.facebook.com *.paypalobjects.com *.google.com.ua *.klaviyo.com *.google.com *.google.co.in *.google.nl *.inspectlet.com *.yotpo.com *.mouseflow.com *.reddit.com *.linkedin.com *.hsforms.net *.hsforms.com *.bridgepaynetsecuretest.com *.bridgepaynetsecuretx.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googletagmanager.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.certcapture.com *.google.com.ua *.google-analytics.com *.affirm.com *.doubleclick.net *.fontawesome.com *.googleadservices.com *.googletagmanager.com *.facebook.net *.facebook.com *.paypal.com *.paypalobjects.com *.instagram.com *.klaviyo.com *.inspectlet.com *.braintree-api.com *.mouseflow.com *.cloudflare.com *.igodigital.com *.pingdom.net *.dmctools.com *.mcstaging.dmctools.com *.amazonaws.com *.livechatinc.com *.bridgepaynetsecuretest.com *.bridgepaynetsecuretx.com *.hsforms.net *.hsforms.com *.sdiapi.com *.licdn.com rum.hlx.page *.adobe.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com *.bootstrapcdn.com *.googleapis.com *.google.com.ua *.doubleclick.net *.newrelic.com *.nr-data.net *.bobcatparts.com *.typekit.net *.fontawesome.com *.googleadservices.com *.facebook.net *.facebook.com *.paypal.com *.paypalobjects.com *.klaviyo.com *.cloudflare.com *.googletagmanager.com *.bridgepaynetsecuretest.com *.bridgepaynetsecuretx.com https://static.klaviyo.com assets.braintreegateway.com *.tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.bobcat.com *.bridgepaynetsecuretest.com *.bridgepaynetsecuretx.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.magento.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.certcapture.com *.cardinalcommerce.com *.google-analytics.com *.olark.com *.affirm.com *.groupbycloud.com *.doubleclick.net *.bobcatparts.com *.fontawesome.com *.googleadservices.com *.facebook.net *.facebook.com *.paypalobjects.com *.google.co.in *.google.com.ua *.klaviyo.com inspectlet.com *.inspectlet.com *.yotpo.com *.mouseflow.com *.iwdagency.com *.pingdom.net *.dmctools.com *.mcstaging.dmctools.com *.livechatinc.com *.hsforms.net *.hsforms.com *.sdiapi.com *.linkedin.com *.bridgepaynetsecuretest.com *.bridgepaynetsecuretx.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.analytics.google.com *.run.app 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.googleapis.com *.gstatic.com data: *.fontawesome.com  https://fonts.gstatic.com *.oct8ne.com fonts.gstatic.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * sandbox.przelewy24.pl secure.przelewy24.pl 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.oct8ne.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.google.com chart.googleapis.com *.addthis.com *.addthisedge.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com *.bird.eu *.doofinder.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.oct8ne.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com static.przelewy24.pl www.gstatic.com gstatic.com pay.google.com google.com/pay ecomms2s.sella.it sandbox.gestpay.net *.hsforms.com *.gumlet.io placehold.co *.google.it *.hubspot.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.doofinder.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.oct8ne.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com sandbox.przelewy24.pl secure.przelewy24.pl www.google.com www.gstatic.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com cdn.jsdelivr.net maps.google.com *.addthis.com *.addthisedge.com *.moatads.com unpkg.com cdn.iubenda.com *.hsforms.net *.hotjar.com *.pardot.com *.hs-scripts.com *.hs-banner.com *.hs-analytics.net *.hscollectedforms.net *.usemessages.com/ *.legalblink.it *.fontawesome.com accessibility.tun2u.it *.hubspot.com *.clarity.ms https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.doofinder.com https://static.klaviyo.com *.fontawesome.com unsafe-inline assets.braintreegateway.com cdn.jsdelivr.net *.googleapis.com unpkg.com cdn.iubenda.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com *.doofinder.com wss://*.doofinder.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.oct8ne.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com sandbox.przelewy24.pl secure.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com www.google.com www.gstatic.com pay.google.com google.com/pay ecomms2s.sella.it sandbox.gestpay.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com chart.googleapis.com *.addthis.com *.hsforms.com *.google-analytics.com *.doubleclick.net *.hubspot.com *.legalblink.it *.hscollectedforms.net *.gumlet.io accessibility.tun2u.it *.clarity.ms *.fontawesome.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net 'self' data: cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * customer-jo4fg3675hw5zuyf.cloudflarestream.com www.google.com gum.criteo.com fledge.eu.criteo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.googleapis.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: customer-jo4fg3675hw5zuyf.cloudflarestream.com www.gstatic.com a.omappapi.com matching.ivitrack.com x.bidswitch.net sync-t1.taboola.com sync.outbrain.com zendesk.com sgtm.jeannebaret.com campagnolo1715786198.zendesk.com www.google.it sync.1rx.io ib.adnxs.com rtb.csync.smartserver.com r.casalemedia.com gum.criteo.com id5-sync.com ad.360yield.com contextual.media.net exchange.mediavine.com jadserve.postrelease.com simage2.pubmatic.com pixel.rubiconproject.com match.sharethrough.com criteo-sync.teads.tv criteo-partners.tremorhub.com eb2.3lift.com ad.yieldlab.net sync-criteo.ads.yieldmo.com e1.emxdgt.com *.dmxleo.com *.smartadserver.com *.omnitagjs.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com tagmanager.google.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com *.disqus.com https://cdn.jsdelivr.net *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com static.zdassets.com chimpstatic.com cdn.clerk.io customer-jo4fg3675hw5zuyf.cloudflarestream.com cdn.iubenda.com api.clerk.io cs.iubenda.com js-agent.newrelic.com embed.cloudflarestream.com www.google.com www.gstatic.com dynamic.criteo.com a.omappapi.com static.hotjar.com sslwidget.criteo.com script.hotjar.com ecomm.sella.it sandbox.gestpay.net pod-29.zendesk.com sgtm.jeannebaret.com sgtm.cmpsport.com mn.cmpsport.com mn.melby.it connect.facebook.net *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.gstatic.com maxcdn.bootstrapcdn.com www.gstatic.com a.omappapi.com cdnjs.cloudflare.com *.typekit.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.googleapis.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com region1.google-analytics.com ekr.zdassets.com customer-jo4fg3675hw5zuyf.cloudflarestream.com api.openweathermap.org cmp.zendesk.com bam.nr-data.net idb.iubenda.com region1.analytics.google.com api.omappapi.com gum.criteo.com measurement-api.criteo.com wss://pod-29.zendesk.com sgtm.jeannebaret.com campagnolo1715786198.zendesk.com www.google.it connect.facebook.net *.doubleclick.net mn.cmpsport.com mn.melby.it *.qualtrics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com *.nr-data.net *.criteo.net *.cloudflarestream.com *.cloudflare.com *.clerk.io *.cmpsport.com *.melby.it *.zdassets.com *.chimpstatic.com *.iubenda.com *.zendesk.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https: data: wss: 'unsafe-inline' 'unsafe-eval'; form-action https:; report-uri https://zhklrkwwz3qjjxbsljqmqe2b.httpschecker.net/report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://argylepayments.transactiongateway.com https://js.onvopay.com https://www.google.com https://www.gstatic.com https://www.youtube.com https://www.youtube-nocookie.com https://fast.wistia.com https://fast.wistia.net https://www.googletagmanager.com https://ops.fitscript.me https://maps.googleapis.com https://maps.gstatic.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://cdn.realpeptides.co https://ghiecftubiquaspxytch.supabase.co https://www.realpeptides.co https://coa.realpeptides.co https://realpeptides-coa-vault.s3.us-east-1.amazonaws.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.google-analytics.com https://ops.fitscript.me; font-src 'self' data:; connect-src 'self' https://realpeptides-web.s3.us-east-1.amazonaws.com https://ghiecftubiquaspxytch.supabase.co https://argylepayments.transactiongateway.com https://api.tagada.io https://api.onvopay.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.google-analytics.com https://ops.fitscript.me https://maps.googleapis.com https://maps.gstatic.com; frame-src 'self' https://argylepayments.transactiongateway.com https://api.tagada.io https://js.onvopay.com https://coa.realpeptides.co https://realpeptides-coa-vault.s3.us-east-1.amazonaws.com https://www.google.com https://www.gstatic.com https://www.youtube.com https://www.youtube-nocookie.com https://fast.wistia.com https://fast.wistia.net https://www.googletagmanager.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com https://*.google.com https://*.googletagmanager.com https://*.google-analytics.com https://*.gstatic.com https://*.firebase.com https://*.firebaseio.com https://*.seobot.com https://*.seobotai.com https://*.doubleclick.net https://static.giftlist.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https: http:; media-src 'self' blob: https://static.giftlist.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.giftlist.com https://*.googleapis.com https://*.google.com https://*.google-analytics.com https://*.firebaseio.com https://*.seobot.com https://*.seobotai.com https://*.doubleclick.net wss://*.firebaseio.com https://static.giftlist.com; frame-src 'self' https://*.google.com https://*.giftlist.com; worker-src 'self' blob:; child-src 'self' blob:; manifest-src 'self'; 1
object-src 'none';base-uri 'self';script-src 'nonce-8agAWRa3o7Buf1qjI9NTMg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com cloud.ccm19.de cdn.shopify.com *.trstd.com *.paypal.com *.paypalobjects.com 'self' data: https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.trstd.com *.trustedshops.com *.etrusted.com js.mollie.com *.sandbox.paypal.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io cloud.ccm19.de app.eu.usercentrics.eu config.eu.usercentrics.eu app.usercentrics.eu getkapp.alterspruefung365.de *.trstd.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://www.magezon.com https://www.mollie.com https://api.mapbox.com *.sandbox.paypal.com *.hsforms.net *.hsforms.com 'self' data: https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net *.google.com *.cdn-apple.com *.braintreegateway.com cloud.ccm19.de app.eu.usercentrics.eu config.eu.usercentrics.eu app.usercentrics.eu privacy-proxy.usercentrics.eu consent-api.service.consent.eu1.usercentrics.eu static.hotjar.com googletagmanager.com getkapp.alterspruefung365.de *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.paypalobjects.com *.googleapis.com *.gstatic.com/recaptcha/ *.gstatic.com c.paypal.com pay.google.com *.paypal.com *.trstd.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com js.mollie.com applepay.cdn-apple.com *.sandbox.paypal.com *.hsforms.net *.hsforms.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com cloud.ccm19.de getkapp.alterspruefung365.de *.trstd.com https://static.klaviyo.com *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com cloud.ccm19.de app.eu.usercentrics.eu config.eu.usercentrics.eu app.usercentrics.eu graphql.usercentrics.eu privacy-proxy.usercentrics.eu aggregator.service.usercentrics.eu consent-api.service.consent.eu1.usercentrics.eu *.googletagmanager.com getkapp.alterspruefung365.de *.usercentrics.eu *.trstd.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.sandbox.paypal.com autocomplete2.postdirekt.de t.elasticsuite.io *.hsforms.net *.hsforms.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://unpkg.com https://cdn.ckeditor.com https://js.stripe.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://qui-cdn.azureedge.net https://cdn.jsdelivr.net; font-src 'self' data: https://cdnjs.cloudflare.com https://qui-cdn.azureedge.net; img-src 'self' data: https:; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://js.stripe.com; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' 1
font-src *.fontawesome.com https://fonts.gstatic.com *.fonts.googleapis.com *.gstatic.com data: *.cloudflare.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://plumrocket.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com https://plumrocket.com *.google.com *.addthis.com *.pinterest.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de https://img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudflare.com https://cdn.klarna.com https://s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com *.cdninstagram.com maps.gstatic.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com s7.addthis.com *.avada.io assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com maps.googleapis.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com unsafe-inline https://fonts.googleapis.com *.googleapis.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com ekr.zdassets.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cloudflare.com *.paypal.com *.googleapis.com *.addthis.com *.cardinalcommerce.com https://graph.instagram.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.googleapis.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com web.facebook.com www.facebook.com consentcdn.cookiebot.com *.trustpilot.com  *.test.empathy.co x.test.empathy.co *.staging.empathy.co *.empathy.co x.empathy.co api.empathy.co https://www.googletagmanager.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com *.connectif.cloud storage.googleapis.com forms-eu1.hsforms.com track-eu1.hubspot.com www.google.be www.google.es www.google.com.ar www.facebook.com maps.gstatic.com connect.facebook.net scontent-cdt1-1.cdninstagram.com scontent-cdt2-1.cdninstagram.com scontent-cdg2-1.cdninstagram.com imgsct.cookiebot.com perf-eu1.hsforms.com *.hubspotusercontent-eu1.net *.trustpilot.com  *.test.empathy.co x.test.empathy.co *.staging.empathy.co *.empathy.co x.empathy.co api.empathy.co www.itemint.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com *.connectif.cloud cdn.jsdelivr.net connect.facebook.net js-eu1.hs-scripts.com js-eu1.hs-analytics.net js-eu1.hsadspixel.net js-eu1.hscollectedforms.net js-eu1.hs-banner.com js-eu1.hsleadflows.net searchserverapi.com pixel.convertize.io consent.cookiebot.com consentcdn.cookiebot.com js-eu1.usemessages.com js-eu1.hubspot.com static.hotjar.com script.hotjar.com *.trustpilot.com  *.test.empathy.co x.test.empathy.co *.staging.empathy.co *.empathy.co x.empathy.co api.empathy.co static.cloudflareinsights.com static.userguiding.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com cdn.jsdelivr.net *.trustpilot.com  *.test.empathy.co x.test.empathy.co *.staging.empathy.co *.empathy.co x.empathy.co api.empathy.co *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com *.connectif.cloud api-eu1.hubapi.com forms-eu1.hubspot.com graph.instagram.com maps.googleapis.com forms-eu1.hscollectedforms.net consentcdn.cookiebot.com pagead2.googlesyndication.com cta-eu1.hubspot.com api-eu1.hubspot.com *.google-analytics.com *.trustpilot.com  *.test.empathy.co x.test.empathy.co *.staging.empathy.co *.empathy.co x.empathy.co api.empathy.co sdk.userguiding.com vc.hotjar.io itemint.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-RqVx0U-22aqQmKpWtBrCtg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com maxcdn.bootstrapcdn.com *.fontawesome.com https://widgets.trustedshops.com https://integrations.etrusted.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.awin1.com *.zenaps.com *.fls.doubleclick.net js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.awin1.com *.zenaps.com *.wepowerconnections.com flagpedia.net https://www.mollie.com www.bunzlaucastle.nl www.bunzlaucastle.com www.bunzlaucastle.de www.bunzlaucastle.fr www.returntosender.nl returntosender.content.clipbv.com bunzlaucastle.content.clipbv.com bat.bing.com www.google.nl b2b.content.clipbv.com b2b.clipbv.com www.thetable.store thetable.content.clipbv.com viavel.content.clipbv.com www.viavel.nl www.facebook.com d15k2d11r6t6rl.cloudfront.net api.mapbox.com pins.stockist.co stockist.co c.bing.com c.clarity.ms https://widgets.trustedshops.com https://integrations.etrusted.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.amazonaws.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.fontawesome.com *.gstatic.com stockist.co https://widgets.trustedshops.com https://integrations.etrusted.com assets.braintreegateway.com *.sendcloud.sc *.jsdelivr.net tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src b2b.content.clipbv.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; connect-src https://tagging.bunzlaucastle.nl dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.wepowerconnections.com https://the.sciencebehindecommerce.com www.gstatic.com maps.googleapis.com bat.bing.com app.reloadify.com region1.google-analytics.com ct.pinterest.com www.google.nl stockist.co us-central1-stockist-prod.cloudfunctions.net gap.stockist.workers.dev pro.ip-api.com www.pinterest.com widget-portal.givacard.nl tagging.bunzlaucastle.nl tagging.bunzlaucastle.com tagging.bunzlaucastle.de tagging.thetable.store pagead2.googlesyndication.com tagging.returntosender.nl www.facebook.com *.trustedshops.com *.etrusted.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com https: 'self' 'unsafe-inline'; script-src https://tagging.bunzlaucastle.nl assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com *.gstatic.com maps.googleapis.com js.mollie.com bat.bing.com cdn-eu.pagesense.io app.reloadify.com s.pinimg.com connect.facebook.net ct.pinterest.com stockist.co cdnjs.cloudflare.com widget-portal.givacard.nl tagging.bunzlaucastle.nl pagead2.googlesyndication.com tagging.bunzlaucastle.com tagging.bunzlaucastle.de tagging.thetable.store tagging.returntosender.nl https://widgets.trustedshops.com https://integrations.etrusted.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.sendcloud.sc *.jsdelivr.net *.googletagmanager.com tagmanager.google.com https: 'self' 'unsafe-inline' 'unsafe-eval'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://client.imageshop.no https://js.monitor.azure.com https://app.prod.konversai.no https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://*.arcgis.com https://services.arcgisonline.com https://cdn.cookie-script.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://fonts.googleapis.com https://*.arcgis.com https://app.prod.konversai.no; img-src 'self' data: blob: https:; font-src 'self' data: https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://fonts.gstatic.com; connect-src 'self' https://*.geodataonline.no https://services.arcgisonline.com https://*.arcgis.com https://app.prod.konversai.no wss://app.prod.konversai.no https://js.monitor.azure.com https://*.applicationinsights.azure.com https://dc.services.visualstudio.com https://www.googletagmanager.com https://www.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://sst.skiforeningen.no https://pagead2.googlesyndication.com https://report.cookie-script.com; frame-src 'self' https://www.googletagmanager.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /api/csp-report; report-to csp-endpoint 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.multisafepay.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com https://*.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.multisafepay.com https://pay.google.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.sharethis.com 'self' data: https://*.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com *.multisafepay.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sharethis.com https://*.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.multisafepay.com https://pay.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.multisafepay.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com *.facebook.com *.facebook.net https://*.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.multisafepay.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://conversations-widget.brevo.com https://pw.hotgloo.co; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://conversations-widget.brevo.com wss://conversations-widget.brevo.com https://pw.hotgloo.co; frame-src https://conversations-widget.brevo.com; object-src 'none'; frame-ancestors 'self'; base-uri 'self' 1
font-src www.paypalobjects.com *.gstatic.com 'self' data: *.cloudflare.com *.typekit.net *.trustedshops.com *.usercentrics.eu data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.paypal.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com *.hsforms.net *.hsforms.com 'self' data: blob: https://cdn.tbibank.support *.cloudfront.net https://cdn.klarna.com *.paypal.com https://s.ytimg.com *.usercentrics.eu data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.hsforms.net *.hsforms.com www.google.com *.gstatic.com maps.googleapis.com *.cloudflare.com *.typekit.net *.trustedshops.com *.usercentrics.eu www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://static.klaviyo.com *.googleapis.com *.gstatic.com *.cloudflare.com getfirebug.com *.yotpo.com *.typekit.net *.trustedshops.com *.usercentrics.eu data: 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ t.elasticsuite.io *.hsforms.net *.hsforms.com places.googleapis.com https://beta.tbibank.support *.cloudflare.com *.paypal.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' matomo.siinergy.net themes.googleusercontent.com *.typekit.net www.googletagmanager.com www.google-analytics.com www.googleadservices.com googleads.g.doubleclick.net tagmanager.google.com www.google.com linkedin.com px.ads.linkedin.com snap.licdn.com player.ausha.co api-shortlist.hippolyte.ai https://api.mapbox.com https://api.tiles.mapbox.com https://cdn.ckeditor.com https://cdn.jsdelivr.net https://cdn.rawgit.com https://cdnjs.cloudflare.com https://js.hsforms.net https://maps.googleapis.com https://unpkg.com unpkg.com; worker-src 'self' blob: 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com www.google-analytics.com ssl.google-analytics.com *.hotjar.com static.hotjar.com script.hotjar.com *.facebook.net connect.facebook.net *.addtoany.com static.addtoany.com *.che.org.il; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.hotjar.com; img-src * data: blob:; font-src 'self' data: fonts.gstatic.com *.hotjar.com; connect-src 'self' *.google-analytics.com *.analytics.google.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.facebook.com *.facebook.net *.sharepoint.com *.office.com *.microsoftonline.com *.azure.com; frame-src 'self' *.youtube.com *.youtube-nocookie.com *.google.com *.facebook.com *.canva.com *.hotjar.com *.sharepoint.com *.office.com *.addtoany.com static.addtoany.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' *.facebook.com *.sharepoint.com *.microsoftonline.com; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.modehaus.de *.schulze-fashion.de data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.cleverreach.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com/ *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com *.cloudfront.net https://www.magezon.com s3.eu-central-1.amazonaws.com *.modehaus.de *.schulze-fashion.de https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com cdn.pay1.de x.klarnacdn.net m.media-amazon.com static-eu.payments-amazon.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.google.com/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.modehaus.de *.schulze-fashion.de js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com widget.freshworks.com m2epro.freshdesk.com *.modehaus.de *.schulze-fashion.de assets.braintreegateway.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com widget.freshworks.com m2epro.freshdesk.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com places.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: assets.reviews.io *.reviews.io code.tidio.co *.tidio.co *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.yotpo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.usercentrics.eu *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ pagead2.googlesyndication.com *.googlesyndication.com *.googleadservices.com *.reviews.io *.linkedin.com *.licdn.com *.tidio.co *.albacross.com *.clarity.ms d3k81ch9hvuctc.cloudfront.net *.cloudfront.net media.reviews.co.uk *.reviews.co.uk *.yotpo.com data: 'self' 'unsafe-inline'; script-src wss://*.tawk.to assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ app.usercentrics.eu *.usercentrics.eu privacy-proxy.usercentrics.eu pagead2.googlesyndication.com *.googlesyndication.com *.googleadservices.com widget.reviews.io *.reviews.io widget.reviews.co.uk *.reviews.co.uk snap.licdn.com *.licdn.com www.clarity.ms *.clarity.ms code.tidio.co *.tidio.co serve.albacross.com *.albacross.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com https://static.klaviyo.com assets.reviews.io *.reviews.io *.reviews.co.uk *.stripe.network *.stripecdn.com *.amazon.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com code.tidio.co *.tidio.co 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ v1.api.service.cmp.usercentrics.eu *.usercentrics.eu pagead2.googlesyndication.com *.googlesyndication.com *.googleadservices.com widget.reviews.io api.reviews.io *.reviews.io api.reviews.co.uk *.reviews.co.uk px.ads.linkedin.com *.linkedin.com *.licdn.com a.klaviyo.com *.klaviyo.com *.tidio.co wss://socket.tidio.co *.albacross.com *.clarity.ms *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-N2U1ZDI0ZmQtNDU5OC00MTM1LWE2NzEtZGU3NDdhZjQzYjQ3' https://api-maps.yandex.ru https://yastatic.net; style-src 'self' 'unsafe-inline' https://yastatic.net; img-src 'self' data: blob: https://media.b2b-mems.ru https://*.storage.beget.cloud https://*.maps.yandex.net https://yastatic.net; font-src 'self' data: https://yastatic.net; connect-src 'self' https://b2b-mems.ru https://mon.b2b-mems.ru https://sentry.b2b-mems.ru https://*.ingest.sentry.io https://api-maps.yandex.ru https://*.maps.yandex.net https://yastatic.net; media-src 'self' blob: https://*.storage.beget.cloud; worker-src 'self' blob:; object-src 'none'; frame-src 'self' https://*.storage.beget.cloud; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; manifest-src 'self'; report-uri /api/v1/security/csp-report; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self'; media-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.zenaps.com *.fls.doubleclick.net https://www.googletagmanager.com/ js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.awin1.com *.zenaps.com *.wepowerconnections.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.google.com.ua maps.gstatic.com 1rx.io *.1rx.io 360yield.com *.360yield.com 3lift.com *.3lift.com adnxs.com *.adnxs.com billiger.de *.billiger.de bing.com *.bing.com criteo.com *.criteo.com doubleclick.net *.doubleclick.net facebook.com *.facebook.com google.de *.google.de idealo.com *.idealo.com media.net *.media.net omnitagjs.com *.omnitagjs.com roeye.com *.roeye.com roeyecdn.com *.roeyecdn.com sharethrough.com *.sharethrough.com smartadserver.com *.smartadserver.com taboola.com *.taboola.com teads.tv *.teads.tv tremorhub.com *.tremorhub.com twiago.com *.twiago.com uimserv.net *.uimserv.net usd.de *.usd.de usercentrics.eu *.usercentrics.eu yieldlab.net *.yieldlab.net https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com www.xtento.com cdn.xtento.com https://a.timeshop24.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io *.shopify.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com bing.com *.bing.com criteo.com *.criteo.com cdnsrv.de *.cdnsrv.de clickcease.com *.clickcease.com df-srv.de *.df-srv.de fatmedia.io *.fatmedia.io facebook.net *.facebook.net id5-sync.com *.id5-sync.com kuponacdn.de *.kuponacdn.de livechatinc.com *.livechatinc.com pinimg.com *.pinimg.com roeyecdn.com *.roeyecdn.com shopgate.com *.shopgate.com uicdn.com *.uicdn.com usercentrics.eu *.usercentrics.eu googletagmanager.com *.googletagmanager.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com www.xtento.com cdn.xtento.com https://www.dwin1.com https://a.timeshop24.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com googletagmanager.com *.googletagmanager.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de wepowerconnections.com https://the.sciencebehindecommerce.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com criteo.com *.criteo.com doubleclick.net *.doubleclick.net facebook.com *.facebook.com livechatinc.com *.livechatinc.com pinterest.com *.pinterest.com usercentrics.eu *.usercentrics.eu *.wepowerconnections.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://a.timeshop24.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://www.google.com 'unsafe-inline' 'strict-dynamic'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https:; frame-src 'self' https://www.google.com https://www.youtube.com; form-action 'self'; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; upgrade-insecure-requests; report-uri /csp-report; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com account.fetchify.com www.xtento.com *.google.com/ js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com blob: facebook.com www.facebook.com connect.facebook.net graph.facebook.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://www.magezon.com www.xtento.com cdn.xtento.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.google.com *.google.fr *.google.ie data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com jquery.sellxed.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com cc-cdn.com www.xtento.com cdn.xtento.com s7.addthis.com *.avada.io *.shopify.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.google.fr *.google.ie *.googletagmanager.com *.googleadservices.com https://www.googletagmanager.com tagmanager.google.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com cc-cdn.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com ekr.zdassets.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com *.fontawesome.com *.gstatic.com 'self' data: fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com js.mollie.com https://tagging.argentorshop.be https://www.googletagmanager.com https://td.doubleclick.net 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.mollie.com *.hsforms.net *.hsforms.com 'self' data: *.googletagmanager.com ssl.gstatic.com www.gstatic.com https://bat.bing.com https://bat.bing.net https://www.google.nl https://www.google.be https://www.google.fr https://tagging.argentorshop.be https://argentorshop.be https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://imgproxy.vendic.dev data: 'self' 'unsafe-inline'; style-src downloads.mailchimp.com *.fontawesome.com *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; connect-src https://tagging.argentorshop.be *.newrelic.com *.nr-data.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com https://maps.googleapis.com https://player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.googletagmanager.com https://bat.bing.com https://bat.bing.net https://www.google.nl https://www.google.be https://www.google.fr https://p2iqhncxyh.execute-api.eu-central-1.amazonaws.com https://ad.doubleclick.net https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://www.google.com 'self' 'unsafe-inline'; script-src https://tagging.argentorshop.be *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://maps.googleapis.com https://player.vimeo.com *.disqus.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.mollie.com pay.google.com applepay.cdn-apple.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com *.googletagmanager.com tagmanager.google.com https://d5yoctgpv4cpx.cloudfront.net https://script.hotjar.com https://bat.bing.com https://diffuser-cdn.app-us1.com https://prism.app-us1.com 'self' 'unsafe-inline' 'unsafe-eval'; 1
font-src *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.bootstrapcdn.com *.trustpilot.com *.demdex.net *.clarity.ms *.nr-data.net *.bing.com *.fontawesome.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.twitter.com *.nr-data.net *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com *.twitter.com *.addthis.com *.trustpilot.com *.google.com *.doubleclick.net *.paypal.com *.braintreegateway.com *.consentmanager.net *.googletagmanager.com *.aptrinsic.com *.demdex.net *.clarity.ms *.nr-data.net *.bing.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com *.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de static-eu.payments-amazon.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.trustpilot.com *.cloudfront.net *.consensu.org *.consentmanager.net *.google.com *.google.co.in *.gstatic.com *.aptrinsic.com *.demdex.net *.everesttech.net *.clarity.ms *.adobedtm.com *.magentocommerce.com *.nr-data.net *.bing.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.cloudflare.com *.twitter.com *.google-analytics.com *.google.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.addthis.com *.moatads.com *.addthisedge.com *.newrelic.com *.nr-data.net *.omtrdc.net *.trustpilot.com *.luckyorange.com *.consensu.org *.consentmanager.net *.doubleclick.net *.paypal.com *.aptrinsic.com *.demdex.net *.clarity.ms *.bing.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.omtrdc.net *.trustpilot.com *.consensu.org *.aptrinsic.com *.demdex.net *.clarity.ms *.nr-data.net *.bing.com unsafe-inline 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.addthis.com *.nr-data.net *.trustpilot.com *.sc.omtrdc.net *.luckyorange.com *.braintree-api.com *.braintreegateway.com *.aptrinsic.com *.demdex.net *.clarity.ms *.bing.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com t.elasticsuite.io *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://plumrocket.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.disqus.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com https://www.gstatic.com *.superpayments.com *.stripe.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.superpayments.com *.stripe.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.superpayments.com *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.googletagmanager.com/ *.superpayments.com *.stripe.com doubleclick.net secure.livechatinc.com *.trustpilot.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://plumrocket.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.googleapis.com https://*.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.superpayments.com *.stripe.com bat.bing.net *.onetrust.com *.postcodeanywhere.co.uk *.facebook.com *.todd-doors.co.uk https://*.google.com https://*.googleapis.com https://*.googleusercontent.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: www.google.com.ua *.doubleclick.net *.bing.com *.google.co.uk https://sst.todd-doors.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com https://*.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.superpayments.com *.stripe.com segment.com *.segment.com *.segmentapis.com q4g4k4pw47biltffyqrfab7q7m0jaagm.lambda-url.ap-south-1.on.aws cdn.seondf.com *.trustpilot.com *.onetrust.com *.livechatinc.com *.reaktion.com *.avada.io *.bing.com c3.adalyser.com cdn.livechatinc.com chimpstatic.com *.facebook.net *.pinterest.com rum-static.pingdom.net *.pinimg.com scripts.clarity.ms *.postcodeanywhere.co.uk *.klaviyo.com www.clarity.ms toddd11112.pcapredict.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com *.cloudfront.net https://cdn.superpayments.com https://sst.todd-doors.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.superpayments.com *.stripe.com *.onetrust.com *.googleapis.com *.postcodeanywhere.co.uk *.klaviyo.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.superpayments.com *.stripe.com stripe.com cognito-idp.eu-west-2.amazonaws.com segment.com *.segment.com *.segmentapis.com q4g4k4pw47biltffyqrfab7q7m0jaagm.lambda-url.ap-south-1.on.aws cdn.seondf.com *.seondnsresolve.com *.seondfresolver.com *.deviceinfresolver.com *.seonintelligence.com *.trustpilot.com *.onetrust.com ad.doubleclick.net *.reaktion.com *.storyblok.com bat.bing.net cdn.segment.com ct.pinterest.com in.eu2.segmentapis.com k.clarity.ms rum-collector-2.pingdom.net *.postcodeanywhere.co.uk *.klaviyo.com www.google.com api.addressy.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.amazonaws.com *.clarity.ms *.merchant-center-analytics.goog https://sst.todd-doors.co.uk 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com 'self' data: https://use.fontawesome.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com s7.addthis.com https://player.vimeo.com https://www.youtube.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com https://fonts.googleapis.com http://fonts.googleapis.com https://use.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com ekr.zdassets.com/ https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io https://olegnax.com https://api.instagram.com https://graph.instagram.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://81b2a837-b297-4006-8580-381d51f5b653.sansec.watch/; report-to report-endpoint; 1
object-src  'none'; connect-src 'self' *.mommysboy.com *.adulttime.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.mommysboy.com *.adulttime.com join.gammasecure.com; script-src 'self' *.mommysboy.com *.adulttime.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.mommysboy.com *.adulttime.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
default-src 'self'; script-src 'self' https://analytics.avv-augsburg.de https://cdn.eye-able.com https://translate-cdn.eye-able.com https://fahrtauskunft.avv-augsburg.de https://www.cdn.botfriendsx.com https://api.eu-1.smooch.io 'sha256-Pn59f+s+XVjLbIBPaKtcJMx+XrYnD9bly7kSRzkhfQw=' 'sha256-WMV6TCAKRqiJchBuLbDidJP71VKfKmtmQMLi2ITJGWY=' 'unsafe-eval' 'unsafe-inline' 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://cdn.eye-able.com https://www.cdn.botfriendsx.com https://www.gravatar.com https://analytics.vwork.de; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://kundencenter.avv-augsburg.de; style-src-elem 'self' https://cdn.eye-able.com https://www.cdn.botfriendsx.com 'unsafe-inline' 'report-sample'; connect-src 'self' https://fahrtauskunft.avv-augsburg.de https://analytics.avv-augsburg.de https://analytics.vwork.de https://translate.eye-able.com https://translate-cdn.eye-able.com https://www.cdn.botfriendsx.com https://690c6018ecaa9434b9fe2b5f.config.eu-1.smooch.io https://cdn.jsdelivr.net https://api.eu-1.smooch.io wss://api.eu-1.smooch.io; font-src 'self' data: https://cdn.eye-able.com https://www.cdn.botfriendsx.com; media-src 'self' data: https://www.cdn.botfriendsx.com; style-src 'self' https://cdn.eye-able.com 'unsafe-inline' 'report-sample'; report-uri https://www.avv-augsburg.de/@http-reporting?csp=report&requestTime=1789283577344929&requestHash=8cb6759e5fd08df31a683c39d21881628a4e82e5 1
script-src 'self' https://static.hotjar.com https://script.hotjar.com https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com; report-uri /csp-report; 1
default-src 'self'; script-src 'self' 'sha256-Du+OJKJSbdUgz5nrHeWWINvez6XKDDU/tyj/5c2uvwo=' 'sha256-zjMDpk17kQdQ/6XlUdwomWiDwSZk3WNoPl1qg3ELHu8=' 'unsafe-hashes' 'sha256-NXgJIJJYQbjLZDdAmJyEXQ0ldk+Rf0iQY7WdZ1mQrZ4=' https://cdn.consentmanager.net https://t.maedchen.de https://www.googletagmanager.com https://scripts.tracdelight.io https://js.hcaptcha.com https://*.googlesyndication.com https://*.doubleclick.net https://*.googletagservices.com 'sha256-WZRJfWvsnNCPcxzZwvyhovnZGqhZaC+8gPGPRbx6wTk='; img-src 'self' data: https:; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; font-src 'self'; frame-src https:; worker-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /api/v1/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self'; frame-src 'self'; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; 1
script-src 'none'; script-src-elem 'none'; script-src-attr 'none'; report-uri https://csp-report.apptrana.com/csp/report/10285 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.mercadolibre.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.cardinalcommerce.com *.cardinaltrusted.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar *.mercadolivre.com https://firebasestorage.googleapis.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.mlstatic.com *.mercadopago.com *.avada.io *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.pagseguro.com.br *.pagseguro.com *.cardinalcommerce.com *.cardinaltrusted.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.mercadopago.com *.mercadolibre.com https://get.geojs.io *.avada.io *.mercadolivre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.pagseguro.com.br *.pagseguro.com *.cardinalcommerce.com *.cardinaltrusted.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' *.google.com *.gstatic.com https://www.googletagmanager.com https://connect.facebook.net https://pagead2.googlesyndication.com *.doubleclick.net https://www.googleadservices.com *.adtrafficquality.google https://maps.googleapis.com https://s0.2mdn.net https://cdn.ampproject.org 'unsafe-inline' 'unsafe-eval' 'report-sample'; style-src 'self' https://fonts.googleapis.com *.gstatic.com 'unsafe-inline'; img-src 'self' blob: data: https:; font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://ep2.adtrafficquality.google *.google.com *.facebook.com *.doubleclick.net https://pagead2.googlesyndication.com; connect-src 'self' *.google.com *.google-analytics.com *.gstatic.com *.adtrafficquality.google https://pagead2.googlesyndication.com https://www.googletagmanager.com *.facebook.com *.googleapis.com; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com https://secure.wayforpay.com; report-uri /csp-report.ashx; report-to csp-endpoint 1
base-uri 'self';connect-src 'self' https://analytics.x-onweb.com https://sentry.x-onweb.com https://cloudflareinsights.com https://via.intercom.io https://api.intercom.io https://api.au.intercom.io https://api.eu.intercom.io https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io https://api-ping.intercom.io https://nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io wss://nexus-websocket-b.intercom.io https://nexus-europe-websocket.intercom.io wss://nexus-europe-websocket.intercom.io https://nexus-australia-websocket.intercom.io wss://nexus-australia-websocket.intercom.io https://uploads.intercomcdn.com https://uploads.intercomcdn.eu https://uploads.au.intercomcdn.com https://uploads.eu.intercomcdn.com https://uploads.intercomusercontent.com;default-src 'self';form-action 'self' https://intercom.help https://api-iam.intercom.io https://api-iam.eu.intercom.io https://api-iam.au.intercom.io;img-src 'self' data: images.x-onweb.com https://analytics.x-onweb.com https://js.intercomcdn.com https://static.intercomassets.com https://downloads.intercomcdn.com https://downloads.intercomcdn.eu https://downloads.au.intercomcdn.com https://uploads.intercomusercontent.com https://gifs.intercomcdn.com https://video-messages.intercomcdn.com https://messenger-apps.intercom.io https://messenger-apps.eu.intercom.io https://messenger-apps.au.intercom.io https://*.intercom-attachments-1.com https://*.intercom-attachments.eu https://*.au.intercom-attachments.com https://*.intercom-attachments-2.com https://*.intercom-attachments-3.com https://*.intercom-attachments-4.com https://*.intercom-attachments-5.com https://*.intercom-attachments-6.com https://*.intercom-attachments-7.com https://*.intercom-attachments-8.com https://*.intercom-attachments-9.com https://static.intercomassets.eu https://static.au.intercomassets.com;font-src 'unsafe-inline' 'self' fonts.gstatic.com https://js.intercomcdn.com https://fonts.intercomcdn.com;media-src 'self' https://js.intercomcdn.com https://downloads.intercomcdn.com https://downloads.intercomcdn.eu https://downloads.au.intercomcdn.com;object-src 'none';script-src 'self' 'nonce-PL6SsVf5i2ZSiDPWledVKaWqVPCw2S6c' https://analytics.x-onweb.com https://static.cloudflareinsights.com;script-src-elem 'self' 'unsafe-inline' https://analytics.x-onweb.com https://app.intercom.io https://widget.intercom.io https://js.intercomcdn.com;style-src 'self' 'unsafe-inline' fonts.googleapis.com;style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com;child-src https://intercom-sheets.com https://www.intercom-reporting.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.net;report-uri https://sentry.x-onweb.com/api/16/security/?sentry_key=fde8c4b479fa405e8ebe62bcea27a8d8 1
default-src 'self'; script-src 'nonce-orh2DYNYjvbvAWsd6C0kyA==' 'self' 'unsafe-inline' 'unsafe-eval' *.geotab.com *.google.com *.google.ca *.googleapis.com *.recaptcha.net *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.incontact.com *.salesforce.com  *.buzzsprout.com *.visualwebsiteoptimizer.com *.vidyard.com *.twitter.com *.ads-twitter.com https://www.youtube.com https://script.crazyegg.com https://googleads.g.doubleclick.net https://514004470.collect.igodigital.com/collect.js https://connect.facebook.net https://snap.licdn.com https://cmp.osano.com https://bugcrowd.com https://*.bugcrowdusercontent.com *.linkedin.com blob: https://s.saleswingsapp.com/ https://cdn.c212.net/ https://c212.net https://pixel.mathtag.com/ *.zoominfo.com *.clickagy.com *.6sc.co https://client-registry.mutinycdn.com/ https://js.zi-scripts.com https://bat.bing.com *.clarity.ms https://js.adsrvr.org *.niceincontact.com *.marketo.net https://*.qualified.com https://www.redditstatic.com https://cdnjs.cloudflare.com https://bzrcdn.openai.com/sdk/; font-src 'self' 'unsafe-eval' 'unsafe-inline' *.geotab.com *.google.com *.google.ca *.googleapis.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.typekit.net *.zoominfo.com data: *.niceincontact.com https://js.qualified.com; style-src 'self' 'unsafe-inline' *.geotab.com *.google.com *.google.ca *.googleapis.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.typekit.net *.niceincontact.com *.stackadapt.com https://*.qualified.com; img-src * data: blob:; connect-src *; object-src *; frame-src 'self' *.geotab.com *.google.com *.google.ca *.googleapis.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.gstatic.com *.youtube.com *.facebook.com *.salesforce.com https://home-c19.incontact.com *.doubleclick.net https://www.buzzsprout.com https://attendee.gotowebinar.com https://register.gotowebinar.com *.vidyard.com https://www.youtube.com https://cmp.osano.com https://www.recaptcha.net https://bugcrowd.com *.linkedin.com https://calendly.com/ https://www.youtube-nocookie.com https://pixel.mathtag.com/ https://insight.adsrvr.org/ *.niceincontact.com *.arcade.software https://*.qualified.com https://my.datasubject.com https://www.welldonecode.com; media-src 'self' *.googleapis.com webtest2.geotab.com webtest3.geotab.com *.niceincontact.com mediastream: https://*.qualified.com; frame-ancestors 'self' *.geotab.com https://geotab.my.salesforce.com; ; report-uri /api/csp-report; report-to csp-endpoint 1
font-src *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com 'self' data: https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js widget.freshworks.com m2epro.freshdesk.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com *.google.com *.gstatic.com https://cdn-scripts.signifyd.com https://imgs.signifyd.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com widget.freshworks.com m2epro.freshdesk.com unsafe-inline *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com widget.freshworks.com m2epro.freshdesk.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com t.elasticsuite.io *.google-analytics.com https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' https://www.googletagmanager.com https://*.clarity.ms https://connect.facebook.net https://cdn.openwidget.com https://applepay.cdn-apple.com https://*.g.doubleclick.net https://www.googleadservices.com https://pix.hyj.mobi https://d.hyj.mobi https://community.rumx.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://applepay.cdn-apple.com; img-src 'self' data: blob: https:; media-src 'self' blob: https://storage.googleapis.com; connect-src 'self' https://europe-west3-rumtastingnotes.cloudfunctions.net https://us-central1-rumtastingnotes.cloudfunctions.net https://europe-west3-rumx-app.cloudfunctions.net https://storage.googleapis.com https://api.ipinfo.io https://*.algolia.net https://*.algolianet.com https://*.algolia.io https://*.recombee.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.googletagmanager.com https://pagead2.googlesyndication.com https://*.g.doubleclick.net https://www.google.com https://www.google.de https://www.google.fr https://www.google.at https://www.google.ch https://www.google.it https://www.google.es https://www.google.nl https://www.google.be https://www.google.co.uk https://www.google.ie https://www.google.dk https://www.google.se https://www.google.pl https://www.google.cz https://www.google.pt https://www.googleadservices.com https://*.clarity.ms https://c.bing.com https://www.facebook.com https://connect.facebook.net https://mpc-prod-28-1053047382554.us-central1.run.app https://pix.hyj.mobi https://d.hyj.mobi https://*.openwidget.com https://*.livechatinc.com wss://*.livechatinc.com https://community.rumx.com https://api.rumx.com; frame-src 'self' https://checkout.rumx.com https://rx-checkout.web.app https://rx-popups.web.app https://app.rumx.com https://www.youtube-nocookie.com https://td.doubleclick.net https://*.openwidget.com https://www.facebook.com https://community.rumx.com; form-action 'self' https://www.facebook.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; worker-src 'self' blob:; manifest-src 'self'; report-uri https://us-central1-rumtastingnotes.cloudfunctions.net/cspReport 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://*.googletagmanager.com https://fast.wistia.com https://fast.wistia.net https://unpkg.com https://platform.twitter.com https://static.cloudflareinsights.com https://cart.easy.tools; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://assets.easy.tools https://trustmrr.com https://*.wistia.com https://*.google-analytics.com https://*.googletagmanager.com https://i.ytimg.com https://pbs.twimg.com https://abs.twimg.com; font-src 'self' https://assets.easy.tools; connect-src 'self' https://assets.easy.tools https://cloudflareinsights.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.wistia.com https://*.wistia.net; media-src 'self' blob: https://assets.easy.tools https://*.wistia.com https://*.wistia.net; frame-src https://*.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://cdn.embedly.com https://drive.google.com https://fast.wistia.com https://fast.wistia.net https://platform.twitter.com https://syndication.twitter.com; worker-src 'self' blob:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://cart.easy.tools https://app.easycart.pl 1
default-src 'self'; script-src 'self' https://*.podigee-cdn.net https://*.readspeaker.com https://matomo.gweb.de 'nonce-VTyQ2C28k_qvGkF-i5sgzXGLs8J6kpkiXjokSKkEc2mN8yXjN92xJg' 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src https: 'self' https://*.amazonaws.com https://static-dsj-de.s3.amazonaws.com https://matomo.gweb.de data:; base-uri 'self'; frame-src 'self' https://*.youtube.com https://*.youtube.de https://*.podigee-cdn.net; connect-src 'self' https://*.readspeaker.com https://matomo.gweb.de; style-src 'self' 'unsafe-inline' https://*.readspeaker.com 'report-sample'; style-src-elem 'self' https://*.podigee-cdn.net https://*.readspeaker.com https://matomo.gweb.de 'nonce-VTyQ2C28k_qvGkF-i5sgzXGLs8J6kpkiXjokSKkEc2mN8yXjN92xJg' 'report-sample'; font-src * https: data:; media-src 'self' https://*.readspeaker.com; report-uri https://www.dsj.de/@http-reporting?csp=report&requestTime=1789263045125060&requestHash=b4cec7d1d7eb06b30a44d1f7876fc030bcc47ef5 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://analytics.statslook.com https://www.googletagmanager.com https://www.google-analytics.com https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://www.googletagservices.com https://imasdk.googleapis.com https://adservice.google.com https://*.googlesyndication.com https://*.doubleclick.net https://*.google.com https://*.gstatic.com https://cdn.membrana.media https://*.membrana.media https://*.notsy.io; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://images.statslook.com https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://www.googletagservices.com https://imasdk.googleapis.com https://adservice.google.com https://*.googlesyndication.com https://*.doubleclick.net https://*.google.com https://*.gstatic.com https://cdn.membrana.media https://*.membrana.media https://*.notsy.io; font-src 'self' data:; connect-src 'self' https://analytics.statslook.com https://www.google-analytics.com https://*.sentry.io https://pet.ugurcan.me https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://www.googletagservices.com https://imasdk.googleapis.com https://adservice.google.com https://*.googlesyndication.com https://*.doubleclick.net https://*.google.com https://*.gstatic.com https://cdn.membrana.media https://*.membrana.media https://*.notsy.io; frame-src 'self' https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://www.googletagservices.com https://imasdk.googleapis.com https://adservice.google.com https://*.googlesyndication.com https://*.doubleclick.net https://*.google.com https://*.gstatic.com https://cdn.membrana.media https://*.membrana.media https://*.notsy.io; frame-ancestors 'none'; base-uri 'self'; form-action 'self' 1
object-src 'none'; script-src-attr 'self'; script-src-elem 'self' https://www.googletagmanager.com cdn.jsdelivr.net cdnjs.cloudflare.com mdbootstrap.com stackpath.bootstrapcdn.com; style-src 'self' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com mdbootstrap.com stackpath.bootstrapcdn.com use.fontawesome.com 'unsafe-inline'; style-src-attr 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.omise.co https://www.googletagmanager.com https://app.roomie.work; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://cdn.shopify.com https://images.unsplash.com https://www.googletagmanager.com; font-src 'self'; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://app.roomie.work; frame-src 'self' https://cdn.omise.co https://www.youtube.com https://www.youtube-nocookie.com https://www.tiktok.com https://www.googletagmanager.com; media-src 'self' data: blob:; object-src 'none'; worker-src 'self' blob:; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com; img-src 'self' data: https:; connect-src 'self' https://www.google-analytics.com; frame-ancestors 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.sharethis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sharethis.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.googleapis.com *.gstatic.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com downloads.mailchimp.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com *.intercomcdn.com *.bootstrapcdn.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.facebook.com *.mobilpay.ro *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com dacia-ro.os.tc *.facebook.com *.doubleclick.net *.cookiebot.com *.pinterest.com *.dotdigital-pages.com *.dotdigital.com *.addthis.com *.twitter.com *.creativecdn.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.google.com *.google.ro *.googleapis.com *.googletagmanager.com *.ibb.co contactrenaultgroup.secure.force.com *.salesforceliveagent.com *.intercomcdn.com *.facebook.com trusted.ro *.analytics.yahoo.com *.pinterest.com *.kafune.ro *.trackedlink.net *.ddlnk.net magefan.com cm.magefan.com https://firebasestorage.googleapis.com *.addthisedge.com *.twitter.com lafantana.ro *.lafantana.ro *.smartsuppcdn.com *.linkedin.com *.docomo.ne.jp *.e-planning.net *.media.net *.smaato.net *.rakuten.com *.gumgum.com *.opera.com *.usercentrics.eu *.disqus.com flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.googleoptimize.com *.googletagmanager.com onesignal.com *.onesignal.com *.intercom.io *.intercomcdn.com *.salesforceliveagent.com *.googleapis.com *.gstatic.com *.facebook.net *.yimg.com *.retargeting.biz *.retargeting.app *.cookiebot.com *.mczbf.com *.pinimg.com *.smartsuppchat.com *.smartsuppcdn.com *.smartsupp.com *.creativecdn.com *.pinterest.com *.tiktok.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.avada.io *.shopify.com *.addthis.com *.moatads.com *.addthisedge.com *.twitter.com *.smartlook.com *.licdn.com *.usercentrics.eu *.disqus.com maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com https://lafantana.ro 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.smartsuppcdn.com maxcdn.bootstrapcdn.com *.gstatic.com assets.braintreegateway.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.intercomcdn.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.doubleclick.net *.intercom.io wss://nexus-websocket-a.intercom.io wss://ah-pusher.gd.ro *.webrci.ro *.yimg.com cdn.cookielaw.org *.retargeting.app *.smartsuppchat.com *.pinterest.com *.googleapis.com *.smartsuppcdn.com *.smartsupp.com wss://websocket-visitors.smartsupp.com *.creativecdn.com *.sjwoe.com *.mczbf.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https://get.geojs.io *.avada.io *.google.ro *.smartlook.cloud *.cookiebot.com *.usercentrics.eu *.tiktok.com www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/  https://widget.trustpilot.com;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://appleid.cdn-apple.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com *.myheritage.com.ua https://www.myheritage.com.ua  'unsafe-eval' 'nonce-66fd9b90d3995807ebd6253b4154b9ee' 'strict-dynamic' https://widget.trustpilot.com https://invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style  https://widget.trustpilot.com;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io https://www.google.com/recaptcha/enterprise/* https://www.google.com/recaptcha/enterprise/ https://www.google.com/recaptcha/enterprise/clr https://www.google.com/recaptcha/ https://maps.googleapis.com https://people.googleapis.com https://translate-pa.googleapis.com *.myheritage.com.ua https://widget.trustpilot.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:  https://widget.trustpilot.com https://*.trustpilot.com;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=report&canonical_page_id=/company/home/ 1
default-src 'self' https:; script-src 'self' 'nonce-OkiP//wmDZ/yn1h0a41eIA==' 'strict-dynamic' 'sha256-cp/OcAQZ2Gzkh3ALpHvrRx8Sllk6oHb7NZ2XaQAUPgU=' 'sha256-vcFaIL9cx4GIMxpnWkE2UhwOibUDsHfahLGLNApK0Yk=' 'sha256-7PKx0P/t5byxLENGe744dYHutyP4f5JkSQiWoxn4n6Q=' 'sha256-j8JMFrQhhbIjQTB3TKAY/Kzd2HG926dbZzYg/UOxdNQ=' 'sha256-I0m/Cc5V3ScLPx93EPrfcvW6r1OZER+2pes08HbfKZg=' 'sha256-UKq8q7dKPQ9Jus3AooXQi6S2tGNulzw1ZKQKJNJ9bDQ=' 'sha256-TcSXibMfUdp3pQ9ssKTY98ryVK3eJjOrRJQvqrz3Qsk=' 'sha256-Jrl9w8N8gvBrndzEshGa8HulTuIK/0dy8qb9bXS7EbE=' 'sha256-R9enWtQO+YZEyaO5016kl556NOFRHr7FKqR85znjk9s=' 'sha256-UZXeaSSEiCCEb4eTWAfvvJGFj4Gkib9zScdA0WgU3TU=' 'sha256-f1g41YcRjBAI20KzJGAkYpbjc1IL2AtrxrBfD2ovaBI=' 'sha256-Nm82G/aoTeVUmuJadh276K6yhWgXdRHdnWvyUO2tIOE=' 'sha256-cq4fbPTp3NjRmWRfaYK0xf0w8GCocFjoOwG6tGzrcmM=' 'sha256-EzQ6+2TosDKDU/4MGjxtJo96sFj4D068XcYj5xAI7Ec=' 'sha256-Ag05Q6SRzovM6mNsv5R3k9KrVOXijQvAgDeQoAcv5yE=' 'sha256-2NbS5X3RKqJTzrxgGAe3Imi++LLSf7Zh89ra6gCWQW0=' 'sha256-63rluIUtQ3g95QRC0osTn5v77teCavQ+kBEfe78/CtY=' 'sha256-HrVwjfQiXQouEMoPRBFryrPVFZDSzkpjBCJTKnZtP/8=' 'sha256-cz0kFCJbgj+I82cOB7rE15FojwAJ8vQnwsgGTY3Tkz4=' 'sha256-qgube0nOY8ch6FHuF552qHj9TqK32DxudWvpMk0vWn8=' 'sha256-2LSuzlCtpZIm8wcP2mCnXeKN7r1zK/5QzFJv6aHSLMg=' 'sha256-IuENR8fIQKqobLHGLzNlfjSpClbQWaYXFLCy1e2cH9I=' 'sha256-DmdNSsvJGpPe4TPqJTsCiLGbDTHuoClhT8bayfcFGaw=' 'sha256-IcsBmYzqzd5EitEYLdDmY2ivUUtd9OCzeFSo8ekhxSg=' 'sha256-/5FvV9Vy9L+4DwjcuiL0tQ8i33gdJ9sHKsxBoqqJ/EE=' 'unsafe-inline' data: https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; frame-src 'self' https:; media-src 'self' https:; worker-src 'self' blob:; upgrade-insecure-requests; report-uri https://www.amsc.com/wp-json/3mw-security/v1/csp-report 1
script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=p8gIsX8Xnf3ORvKfle3JlEYXcjlQytD3e8zF8SU2iKo-1789272125.9615502-1.0.1.1-MbMx5x5IhP.llR7ervQpgCBqteBZrWv5I02qvgf0eIHpIGwCrMLVawrxQqia5Tni6d69e3KbXttxAjIPhX_xl0py152j9X0rIAqZ7ww9ANMpRAoZ8jzy4seAkn_3H2SanljHf0BCM72oorTFMgCpq3lSCv42.bpTbXP45khZzFx8LWOuktVVhhtA9NrrPlN6; report-to cf-csp-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.adsterra.com https://*.adsterra.network https://*.adsrv.org https://mc.yandex.ru https://yandex.ru; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' https://image.tmdb.org https://*.tmdb.org https://*.adsterra.com https://*.adsterra.network data: blob:; frame-src 'self' https://byseqekaho.com https://vidlink.pro https://yapgrid.com https://player.videasy.to https://vidfast.vc https://apiplayer.ru https://vidapi.ru https://mapplee.com https://www.youtube-nocookie.com https://player.smashy.stream https://vidsrc.to https://vidsrc.icu https://vidsrc.xyz https://multiembed.mov https://*.adsterra.com https://*.adsterra.network https://*.adsrv.org; connect-src 'self' https://*.adsterra.com https://*.adsterra.network https://mc.yandex.ru; media-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://bat.bing.net https://bat.bing.com https://static.klaviyo.com https://static-tracking.klaviyo.com https://*.clarity.ms https://ecwportal.vertexsmb.com https://www.paypal.com https://www.paypalobjects.com https://bzrcdn.openai.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://www.google.com https://bat.bing.com https://*.clarity.ms https://*.klaviyo.com https://www.facebook.com https://graph.facebook.com https://api.vertexsmb.com https://www.paypal.com https://www.sandbox.paypal.com https://bzr.openai.com; frame-src 'self' https://www.googletagmanager.com https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://ecwportal.vertexsmb.com https://www.paypal.com https://www.sandbox.paypal.com https://*.facebook.com; frame-ancestors 'self'; base-uri 'self'; object-src 'none' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: *.feedbackcompany.com maxcdn.bootstrapcdn.com *.tawk.to *.crisp.chat *.bootstrapcdn.com https://fonts.bunny.net *.jsdelivr.net *.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.feedbackcompany.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.facebook.com *.decta.com js.mollie.com *.trustpilot.com *.hotjar.com *.googletagmanager.com *.cookiebot.eu *.pinterest.com *.weltpixel.com *.doubleclick.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io maps.googleapis.com maps.gstatic.com *.googleapis.com https://images.unsplash.com *.feedbackcompany.com 'self' data: *.facebook.com *.facebook.net *.googletagmanager.com *.google.com *.google.lv blob: *.crisp.chat https://firebasestorage.googleapis.com https://www.mollie.com 123magazijninrichting.nl 123magazijn.stimmt.dev 123magazijninrichting.dev *.cloudflare.com *.cloudimage.io *.linkedin.com *.adsymptotic.com *.google.nl *.trengo.eu *.bing.com *.visualwebsiteoptimizer.com *.etrusted.com *.feedbucket.app *.reddit.com *.google-analytics.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://maps.googleapis.com *.feedbackcompany.com *.googletagmanager.com *.facebook.com *.facebook.net infimv.com *.stripe.com *.decta.com *.crisp.chat *.avada.io *.shopify.com js.mollie.com pay.google.com applepay.cdn-apple.com *.cloudflare.com *.twitter.com *.fontawesome.com *.pingdom.net *.trustpilot.com *.hotjar.com *.licdn.com *.chimpstatic.com *.adobetm.com polyfill.io *.doubleclick.net *.cookiebot.eu *.bing.com *.clarity.ms *.clarity.ms/collect *.pinimg.com *.pinterest.com *.trengo.eu *.brevo.com *.diffuse.tools sibautomation.com *.visualwebsiteoptimizer.com *.feedbucket.app *.getqonfi.com *.app-us1.com *.cloudfront.net *.googleadservices.com *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com maxcdn.bootstrapcdn.com *.tawk.to *.crisp.chat *.fontawesome.com https://fonts.bunny.net *.bunny.net *.etrusted.com *.feedbucket.app *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.trengo.eu 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com *.feedbackcompany.com *.google-analytics.com *.facebook.com *.doubleclick.net wss://*.crisp.chat/ https://get.geojs.io *.avada.io *.cloudflare.com *.pingdom.net *.hotjar.com *.usercentrics.eu *.pinterest.com *.bing.com *.trengo.eu *.clarity.ms *.clarity.ms/collect *.cookiebot.eu *.brevo.com *.diffuse.tools sibautomation.com *.visualwebsiteoptimizer.com *.googlesyndication.com *.feedbucket.app *.cloudfront.net *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://123magazijninrichting.nl/; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com fonts.googleapis.com *.googleapis.com data: https://www.googletagmanager.com https://fonts.gstatic.com *.crisp.chat https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com 'self' 'unsafe-inline'; frame-ancestors *.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.cloudflare.com *.usercentrics.eu *.cleverpush.com *.loadbee.com *.doubleclick.net *.facebook.com *.googletagmanager.com js.mollie.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.hotcoffee.dev *.hotcoffee.de *.amazonaws.com *.cloudfront.net *.usercentrics.eu *.google.de *.google.com *.facebook.com *.cleverpush.com *.etrusted.com *.crisp.chat https://api.mapbox.com https://www.mollie.com *.openstreetmap.de https://widgets.trustedshops.com https://widgets-qa.trustedshops.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com tagmanager.google.com https://www.googletagmanager.com *.hotcoffee.de *.hotcoffee.dev *.cloudflare.com cdn.jsdelivr.net *.cloudfront.net *.crisp.chat *.nr-data.net *.newrelic.com *.doubleclick.net *.google-analytics.com *.usercentrics.eu *.cleverpush.com *.mouseflow.com *.tailwindcss.com *.sentry-cdn.com cdn.loadbee.com *.facebook.net blob: js.mollie.com pay.google.com applepay.cdn-apple.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://fonts.googleapis.com cdn.jsdelivr.net *.cloudflare.com *.usercentrics.eu *.crisp.chat *.etrusted.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src *.google.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com tracking.hotcoffee.de *.facebook.com *.crisp.chat *.nr-data.net *.mouseflow.com *.ingest.sentry.io *.usercentrics.eu availability.loadbee.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.hotcoffee.de; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com cdn.icomoon.io i.icomoon.io fonts.googleapis.com *.klaviyo.com *.fontawesome.com maxcdn.bootstrapcdn.com *.cloudfront.net *.reviews.io *.reviews.co.uk data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors self *.worldpay.com https://www.google.com https://www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com self consentcdn.cookiebot.com *.worldpay.com *.livechatinc.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.google.com/ www.commercepartnerhub.com *.reviews.io *.reviews.co.uk *.weltpixel.com try.access.worldpay.com access.worldpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com mageside.com self maps.googleapis.com *.clarity.ms *.google.com *.google.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com *.google.com.ua *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com *.mageside.com https://www.magezon.com *.cloudfront.net *.reviews.io *.reviews.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com self *.googleapis.com cdn.icomoon.io consent.cookiebot.com *.cardinalcommerce.com youtube.com jquery.sellxed.com *.trackedlink.net ddlnk.net dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.disqus.com *.gstatic.com *.trustpilot.com cdn.jsdelivr.net *.bugherd.com *.hotjar.com *.livechatinc.com *.myriadpayments.com *.clarity.ms *.klaviyo.com *.worldpay.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.doubleclick.net *.avada.io *.google.com/ *.reviews.io *.reviews.co.uk https://www.googletagmanager.com tagmanager.google.com try.access.worldpay.com access.worldpay.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com self cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com cdn.icomoon.io i.icomoon.io use.typekit.net p.typekit.net *.cloudfront.net *.googleapis.com *.googletagmanager.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.reviews.io *.reviews.co.uk tagmanager.google.com data: *.myriadpayments.com *.klaviyo.com https://static.klaviyo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com www.google.co.uk region1.google-analytics.com *.clarity.ms *.klaviyo.com *.livechatinc.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google-analytics.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog https://get.geojs.io *.avada.io *.cloudfront.net *.reviews.io *.reviews.co.uk https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src self cdn.icomoon.io unpkg.com fonts.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src blob:; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.squarecdn.com *.googleapis.com data: *.sterlingparts.com.au *.licdn.com *.pingdom.net *.criteo.com *.adobe.net *.fontawesome.com *.adobedtm.com *.cardinalcommerce.com *.ccdc02.com *.magento-datasolutions.com *.magento-ds.com *.sentry.io *.sentry-cdn.com *.newrelic.com *.nr-data.net *.vimeocdn.com *.youtube.com *.bolt.com *.commerce-quick-checkout.com *.addthis.com *.vimeo.com *.paypal.com *.google.co.in *.braintreegateway.com *.everesttech.net *.demdex.net *.ytimg.com *.swagger.io *.ftcdn.net *.behance.net *.magentocommerce.com *.bidswitch.net *.yieldmo.com *.adnxs.com *.clmbtech.com *.smaato.net *.pubmatic.com *.taboola.com *.teads.tv *.3lift.com *.socdm.com *.casalemedia.com *.dable.io *.adingo.jp *.360yield.com *.rlcdn.com *.bing.com *.outbrain.com *.yahoo.com *.smartadserver.com *.rubiconproject.com *.media.net *.stickyadstv.com *.aralego.com *.dmxleo.com *.omtrdc.net *.snplow.net *.adobedc.net *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.magedevteam.com *.linkedin.com *.braintree-api.com *.magento.com *.ampproject.org *.avada.io *.zdassets.com *.geojs.io *.razorpay.com *.paytm.in *.yellowmessenger.com *.facebook.net *.netcoresmartech.com *.bunny.net *.bidr.io *.paypalobjects.com *.yellow.ai *.facebook.com wss://r0.cloud.yellow.ai/websocket/ wss://cloud.yellow.ai/websocket/ *.linkedin.com/ wss://securegw.paytm.in/websocket/ *.cdninstagram.com *.cdn.productreview.com.au *.service.force.com *.static.hotjar.com *.beacon.cdnma.com *.d.la1-core1.sfdc-vwfla6.salesforceliveagent.com *.productreview.com.au *.force.com *.hotjar.com *.salesforceliveagent.com *.tts-pim.com.au *.zip.co *.bpi.zip.co *.static.zip.co static.zipmoney.com.au *.zipmoney.com.au *.uibcdn.com *.22102.l.useitbetter.com *.l.useitbetter.com *.useitbetter.com *.livechatinc.com *.cdn.livechatinc.com *.api.livechatinc.com *.klaviyo.com *.intercom.io *.intercomcdn.com *.intercomassets.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.sterlingparts.com.au *.livechatinc.com *.cdn.livechatinc.com *.api.livechatinc.com *.klaviyo.com *.intercom.io *.intercomcdn.com *.intercomassets.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com widgets.sandbox.afterpay.com www.google.com *.sterlingparts.com.au *.livechatinc.com *.cdn.livechatinc.com *.api.livechatinc.com *.klaviyo.com *.intercom.io *.intercomcdn.com *.intercomassets.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.afterpay.com  *.googleapis.com *.adobedtm.com *.sterlingparts.com.au  *.assets.adobedtm.com  *.z.clarity.ms  *.clarity.ms  rec.smartlook.com  *.smartlook.com  t.cfjump.com  *.cfjump.com *.zip.co *.bpi.zip.co *.static.zip.co static.zipmoney.com.au *.zipmoney.com.au tagmanager.google.com *.google.com www.google.co.in *.google.co.in *.sc.omtrdc.net  *.demdex.net  dpm.demdex.net  cm.everesttech.net  *.everesttech.net  *.magentocommerce.com www.googleadservices.com  *.googleadservices.com  www.google-analytics.com   *.analytics.yahoo.com www.paypalobjects.com  *.paypalobjects.com  x.bidswitch.net dsum-sec.casalemedia.com us-u.openx.net sync.taboola.com sync.outbrain.com image2.pubmatic.com ups.analytics.yahoo.com eb2.3lift.com pixel.rubiconproject.com *.bidswitch.net *.casalemedia.com *.openx.net *.taboola.com *.outbrain.com *.pubmatic.com *.3lift.com *.rubiconproject.com *.ftcdn.net  *.behance.net  p.typekit.net  *.typekit.net  fpdbs.paypal.com  fpdbs.sandbox.paypal.com  *.ytimg.com  validator.swagger.io  static.afterpay.com  site-assets.afterpay.com www.facebook.com  connect.facebook.net  graph.facebook.com  business.facebook.com  cdn-redirector.glopal.com  plugin-magento-ui.glopalservice.com  www.sandbox.paypal.com  b.stats.paypal.com  dub.stats.paypal.com  assets.braintreegateway.com  c.paypal.com  checkout.paypal.com  cdn1.stamped.io  stamped.io  *.sandbox.paypal.com  *.swagger.io  *.facebook.com  *.glopal.com  *.glopalservice.com  *.braintreegateway.com  *.stamped.io  d.adroll.com  *.adroll.com  c.bing.com  *.bing.com  *.googletagmanager.com ib.adnxs.com *.adnxs.com s3-us-west-2.amazonaws.com *.amazonaws.com *.cdn.productreview.com.au *.service.force.com *.static.hotjar.com *.beacon.cdnma.com *.d.la1-core1.sfdc-vwfla6.salesforceliveagent.com *.productreview.com.au *.force.com *.hotjar.com *.salesforceliveagent.com *.sandbox.my.site.com *.uibcdn.com *.22102.l.useitbetter.com *.l.useitbetter.com *.useitbetter.com *.livechatinc.com *.cdn.livechatinc.com *.api.livechatinc.com *.klaviyo.com *.intercom.io *.intercomcdn.com *.intercomassets.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.files-text.com *.livechat-files.com *.livechat-static.com magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' *.googleusercontent.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page https://portal.sandbox.afterpay.com https://portal.afterpay.com https://static.afterpay.com *.squarecdn.com https://hbiq.net *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.sterlingparts.com.au  *.assets.adobedtm.com  *.z.clarity.ms  *.clarity.ms  rec.smartlook.com  *.smartlook.com  t.cfjump.com  *.cfjump.com *.zip.co static.zipmoney.com.au *.zipmoney.com.au tagmanager.google.com www.google.co.in a.adroll.com *.adroll.com  x.bidswitch.net dsum-sec.casalemedia.com us-u.openx.net sync.taboola.com sync.outbrain.com image2.pubmatic.com ups.analytics.yahoo.com eb2.3lift.com pixel.rubiconproject.com *.bidswitch.net *.casalemedia.com *.openx.net *.taboola.com *.outbrain.com *.pubmatic.com *.google-analytics.com   *.3lift.com *.rubiconproject.com *.bpi.zip.co *.static.zip.co *.google.co.in *.sc.omtrdc.net  *.demdex.net  dpm.demdex.net  cm.everesttech.net  *.everesttech.net  *.magentocommerce.com widgets.magentocommerce.com www.googleadservices.com  *.googleadservices.com  www.google-analytics.com   www.paypalobjects.com  *.paypalobjects.com  *.paypal.com *.ftcdn.net  *.behance.net  p.typekit.net  *.typekit.net  fpdbs.paypal.com  fpdbs.sandbox.paypal.com  *.ytimg.com  validator.swagger.io  static.afterpay.com  site-assets.afterpay.com *.sandbox.afterpay.com *.afterpay-beta.com *.portal.sandbox.afterpay.com *.portal.afterpay.com *.jsdelivr.net *.cdn.jsdelivr.net www.facebook.com  connect.facebook.net  graph.facebook.com  business.facebook.com  cdn-redirector.glopal.com  plugin-magento-ui.glopalservice.com  www.sandbox.paypal.com  b.stats.paypal.com  dub.stats.paypal.com  assets.braintreegateway.com  c.paypal.com  checkout.paypal.com  cdn1.stamped.io  stamped.io  *.sandbox.paypal.com  *.swagger.io  *.afterpay.com  *.facebook.com  *.glopal.com  *.glopalservice.com  *.braintreegateway.com  *.stamped.io  d.adroll.com  c.bing.com  *.bing.com  *.googletagmanager.com ib.adnxs.com *.adnxs.com s3-us-west-2.amazonaws.com *.amazonaws.com *.cdn.productreview.com.au *.service.force.com *.static.hotjar.com *.beacon.cdnma.com *.cdnma.com *.d.la1-core1.sfdc-vwfla6.salesforceliveagent.com *.productreview.com.au *.force.com *.hotjar.com *.salesforceliveagent.com *.uibcdn.com *.22102.l.useitbetter.com *.l.useitbetter.com *.useitbetter.com *.livechatinc.com *.cdn.livechatinc.com *.api.livechatinc.com *.klaviyo.com *.a.klaviyo.com *.intercom.io *.intercomcdn.com *.intercomassets.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.livechat-static.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' *.ggpht.com *.googleusercontent.com blob: 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com static.afterpay.com/ *.squarecdn.com *.sterlingparts.com.au *.service.force.com *.force.com *.zip.co *.bpi.zip.co *.static.zip.co *.livechatinc.com *.cdn.livechatinc.com *.api.livechatinc.com *.klaviyo.com *.intercom.io *.intercomcdn.com *.intercomassets.com https://static.klaviyo.com *.fontawesome.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline' https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src *.livechatinc.com 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.sterlingparts.com.au *.adobedtm.com  *.assets.adobedtm.com  *.z.clarity.ms  *.clarity.ms  rec.smartlook.com  *.smartlook.com  t.cfjump.com  *.cfjump.com *.zip.co *.bpi.zip.co *.static.zip.co static.zipmoney.com.au *.zipmoney.com.au tagmanager.google.com *.google.com www.google.co.in a.adroll.com *.adroll.com  x.bidswitch.net dsum-sec.casalemedia.com us-u.openx.net sync.taboola.com sync.outbrain.com image2.pubmatic.com ups.analytics.yahoo.com eb2.3lift.com pixel.rubiconproject.com *.bidswitch.net *.casalemedia.com *.openx.net *.taboola.com *.outbrain.com *.pubmatic.com *.google-analytics.com   *.3lift.com *.rubiconproject.com *.google.co.in *.sc.omtrdc.net  *.demdex.net  dpm.demdex.net  cm.everesttech.net  *.everesttech.net  *.magentocommerce.com widgets.magentocommerce.com www.googleadservices.com  *.googleadservices.com  www.google-analytics.com   www.paypalobjects.com  *.paypalobjects.com  t.paypal.com *.paypal.com *.ftcdn.net  *.behance.net  p.typekit.net  *.typekit.net  fpdbs.paypal.com  fpdbs.sandbox.paypal.com  *.ytimg.com  validator.swagger.io  static.afterpay.com  site-assets.afterpay.com www.facebook.com  connect.facebook.net  graph.facebook.com  business.facebook.com  cdn-redirector.glopal.com  plugin-magento-ui.glopalservice.com  www.sandbox.paypal.com  b.stats.paypal.com  dub.stats.paypal.com  assets.braintreegateway.com  c.paypal.com  checkout.paypal.com  cdn1.stamped.io  stamped.io  *.gstatic.com  *.sandbox.paypal.com  *.swagger.io  *.afterpay.com  *.facebook.com  *.glopal.com  *.glopalservice.com  *.braintreegateway.com  *.stamped.io  d.adroll.com  c.bing.com  *.bing.com  *.googletagmanager.com ib.adnxs.com *.adnxs.com s3-us-west-2.amazonaws.com *.amazonaws.com *.cdn.productreview.com.au *.service.force.com *.static.hotjar.com *.beacon.cdnma.com *.d.la1-core1.sfdc-vwfla6.salesforceliveagent.com *.productreview.com.au *.force.com *.hotjar.com *.salesforceliveagent.com *.tts-pim.com.au *.www.tts-pim.com.au *.pim.com.au *.pim.com *.tooltechnic.my.salesforce.com *.salesforce.com *.tooltechnic--tts.sandbox.my.site.com *.sandbox.my.site.com *.uibcdn.com *.22102.l.useitbetter.com *.l.useitbetter.com *.useitbetter.com *.livechatinc.com *.cdn.livechatinc.com *.api.livechatinc.com *.klaviyo.com *.intercom.io *.intercomcdn.com *.intercomassets.com *.livechat-static.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.sterlingparts.com.au *.licdn.com *.pingdom.net *.criteo.com *.adobe.net *.googleapis.com *.fontawesome.com *.adobedtm.com *.cardinalcommerce.com *.ccdc02.com *.magento-datasolutions.com *.magento-ds.com *.sentry.io *.sentry-cdn.com *.newrelic.com *.nr-data.net *.vimeocdn.com *.youtube.com *.bolt.com *.commerce-quick-checkout.com *.gstatic.com *.addthis.com *.vimeo.com *.paypal.com *.google.co.in *.braintreegateway.com *.everesttech.net *.typekit.net *.demdex.net *.ytimg.com *.swagger.io *.ftcdn.net *.behance.net *.magentocommerce.com *.bidswitch.net *.yieldmo.com *.adnxs.com *.clmbtech.com *.smaato.net *.pubmatic.com *.taboola.com *.teads.tv *.3lift.com *.socdm.com *.casalemedia.com *.dable.io *.adingo.jp *.360yield.com *.rlcdn.com *.bing.com *.outbrain.com *.yahoo.com *.smartadserver.com *.rubiconproject.com *.media.net *.stickyadstv.com *.aralego.com *.dmxleo.com *.omtrdc.net *.snplow.net *.adobedc.net *.google-analytics.com *.googleadservices.com *.googletagmanager.com *.magedevteam.com *.linkedin.com *.braintree-api.com *.magento.com *.ampproject.org *.avada.io *.zdassets.com *.geojs.io *.razorpay.com *.paytm.in *.yellowmessenger.com *.facebook.net *.netcoresmartech.com *.bunny.net *.bidr.io *.paypalobjects.com *.yellow.ai *.facebook.com wss://r0.cloud.yellow.ai/websocket/ wss://cloud.yellow.ai/websocket/ *.linkedin.com/ wss://securegw.paytm.in/websocket/ *.cdninstagram.com *.cdn.productreview.com.au *.service.force.com *.static.hotjar.com *.beacon.cdnma.com *.d.la1-core1.sfdc-vwfla6.salesforceliveagent.com *.productreview.com.au *.force.com *.hotjar.com *.salesforceliveagent.com *.zip.co *.bpi.zip.co *.static.zip.co static.zipmoney.com.au *.zipmoney.com.au *.uibcdn.com *.22102.l.useitbetter.com *.l.useitbetter.com *.useitbetter.com *.livechatinc.com *.cdn.livechatinc.com *.api.livechatinc.com *.klaviyo.com *.intercom.io *.intercomcdn.com *.intercomassets.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.afterpay.com  *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com *.googleapis.com *.sterlingparts.com.au  *.z.clarity.ms  *.clarity.ms  stats.g.doubleclick.net  manager.eu.smartlook.cloud  *.smartlook.com www.google.co.in *.adobedtm.com *.adobe.com  *.assets.adobedtm.com  rec.smartlook.com  t.cfjump.com  *.cfjump.com *.zip.co *.bpi.zip.co *.static.zip.co static.zipmoney.com.au *.zipmoney.com.au tagmanager.google.com *.google.co.in *.sc.omtrdc.net  *.demdex.net  dpm.demdex.net  cm.everesttech.net  *.everesttech.net  *.magentocommerce.com widgets.magentocommerce.com www.googleadservices.com  *.googleadservices.com  www.google-analytics.com   *.analytics.yahoo.com www.paypalobjects.com  *.paypalobjects.com  t.paypal.com x.bidswitch.net dsum-sec.casalemedia.com us-u.openx.net sync.taboola.com sync.outbrain.com image2.pubmatic.com ups.analytics.yahoo.com eb2.3lift.com pixel.rubiconproject.com *.bidswitch.net *.casalemedia.com *.openx.net *.taboola.com *.outbrain.com *.pubmatic.com *.3lift.com *.rubiconproject.com *.ftcdn.net  *.behance.net  p.typekit.net  *.typekit.net  fpdbs.paypal.com  fpdbs.sandbox.paypal.com  *.ytimg.com  validator.swagger.io  static.afterpay.com  site-assets.afterpay.com *.sandbox.afterpay.com *.afterpay-beta.com *.portal.sandbox.afterpay.com *.portal.afterpay.com *.jsdelivr.net *.cdn.jsdelivr.net www.facebook.com  connect.facebook.net  graph.facebook.com  business.facebook.com  cdn-redirector.glopal.com  plugin-magento-ui.glopalservice.com  www.sandbox.paypal.com  b.stats.paypal.com  dub.stats.paypal.com  assets.braintreegateway.com  c.paypal.com  checkout.paypal.com  cdn1.stamped.io  stamped.io  *.gstatic.com *.sandbox.paypal.com  *.swagger.io  *.facebook.com  *.glopal.com  *.glopalservice.com  *.braintreegateway.com  *.stamped.io  d.adroll.com  *.adroll.com  c.bing.com  *.bing.com  *.googletagmanager.com ib.adnxs.com *.adnxs.com s3-us-west-2.amazonaws.com *.amazonaws.com *.cdn.productreview.com.au *.service.force.com *.static.hotjar.com *.beacon.cdnma.com *.d.la1-core1.sfdc-vwfla6.salesforceliveagent.com *.productreview.com.au *.force.com *.hotjar.com *.salesforceliveagent.com *.tts-pim.com.au *.uibcdn.com *.22102.l.useitbetter.com *.l.useitbetter.com *.useitbetter.com *.livechatinc.com *.cdn.livechatinc.com *.api.livechatinc.com *.klaviyo.com *.intercom.io *.intercomcdn.com *.intercomassets.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.text.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' data: blob: 'self' 'unsafe-inline'; child-src *.livechatinc.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.klarnacdn.net *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com services.paytrail.com v1.api.paymenthighway.io maksu.pivo.fi kultaraha.op.fi epmt.nordea.fi verkkopankki.danskebank.fi verkkomaksu.poppankki.fi auth.aktia.fi verkkomaksu.saastopankki.fi verkkomaksu.omasp.fi online.s-pankki.fi online.alandsbanken.fi pay.paytrail.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://www.googletagmanager.com/ www.google.com www.facebook.com js.playground.klarna.com *.klarna.com policy.app.cookieinformation.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.facebook.com www.google.fi pagead2.googlesyndication.com cdn2.hubspot.net static.paytrail.com resources.paytrail.com x.klarnacdn.net www.resursbank.fi ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://*.cdninstagram.com https://*.fbcdn.net https://scontent-fra3-1.cdninstagram.com https://*.scontent.cdninstagram.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.shipit.ax *.upcloudobjects.com 'self' data: www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ graph.instagram.com static.zdassets.com widget-mediator.zopim.com connect.facebook.net x.klarnacdn.net chimpstatic.com downloads.mailchimp.com *.list-manage.com https://*.cdninstagram.com *.klarna.com *.klarnacdn.net *.klarnaservices.com policy.app.cookieinformation.com *.google.com *.gstatic.com www.xtento.com cdn.xtento.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com *.klarnacdn.net *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ static.zdassets.com https://*.cdninstagram.com https://*.fbcdn.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ ekr.zdassets.com hevari.zendesk.com wss://widget-mediator.zopim.com zendesk-eu.my.sentry.io www.facebook.com region1.analytics.google.com www.google.fi pagead2.googlesyndication.com eu.playground.klarnaevt.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com policy.app.cookieinformation.com consent.app.cookieinformation.com t.elasticsuite.io *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src https://embed.tawk.to *.fontawesome.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com hemsync.clickagy.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.googletagmanager.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://embed.tawk.to https://www.metricss.com https://www.linkedin.com https://www.facebook.com https://www.instagram.com https://www.youtube.com js.zi-scripts.com ws.zoominfo.com tags.clickagy.com s7.addthis.com embed.tawk.to js-agent.newrelic.com bam.nr-data.net va.tawk.to assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.yotpo.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.dnky.co webchat.dotdigital.com downloads.mailchimp.com https://embed.tawk.to *.fontawesome.com unsafe-inline *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com https://embed.tawk.to wss://vsa33.tawk.to *.tawk.to aorta.clickagy.com hemsync.clickagy.com ekr.zdassets.com/ bam.nr-data.net va.tawk.to api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com fonts.gstatic.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com sandbox.przelewy24.pl secure.przelewy24.pl 'self' 'unsafe-inline'; frame-ancestors pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com pay.google.com apm.przelewy24.pl *.przelewy24.pl *.espago.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com https://maps.googleapis.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com static.przelewy24.pl www.gstatic.com gstatic.com *.hsforms.net *.hsforms.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com https://maps.googleapis.com https://furgonetka.pl *.avada.io *.shopify.com sandbox.przelewy24.pl secure.przelewy24.pl pay.google.com apm.przelewy24.pl *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com fonts.googleapis.com fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google-analytics.com *.facebook.com *.facebook.net google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com https://maps.googleapis.com https://get.geojs.io *.avada.io sandbox.przelewy24.pl secure.przelewy24.pl wss://ws.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com data: *.bglobale.com *.global-e.com *.klarnacdn.net *.klevu.com *.ksearchnet.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trustpilot.com https://vars.hotjar.com https://www.paypalobjects.com https://lpcdn.lpsnmedia.net *.bglobale.com *.global-e.com *.klarna.com *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googleapis.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https://media.festive-lights.com https://www.festive-lights.com https://bat.bing.com https://www.google.com https://www.google.co.uk https://www.facebook.com https://lpcdn.lpsnmedia.net https://t.co cookie-cdn.cookiepro.com https://www.magezon.com *.bglobale.com *.global-e.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.klevu.com *.ksearchnet.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://redchamps.com maps.gstatic.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.attn.tv events.attentivemobile.com https://static.hotjar.com https://script.hotjar.com https://widget.trustpilot.com https://invitejs.trustpilot.com https://www.googletagmanager.com https://cdn.cookielaw.org https://ajax.googleapis.com https://festi11112.pcapredict.com https://static.ads-twitter.com https://bat.bing.com https://connect.facebook.net https://www.gstatic.com https://googleads.g.doubleclick.net https://stglite.bglobale.com https://accdn.lpsnmedia.net https://va.v.liveperson.net https://lpcdn.lpsnmedia.net https://static-eu.payments-amazon.com https://analytics.twitter.com *.cloudflare.com graph.facebook.com js-agent.newrelic.com *.mention-me.com https://cookie-cdn.cookiepro.com *.pinterest.com *.tiktok.com *.pinimg.com *.stackadapt.com *.adsrvr.org *.trustpilot.com *.bglobale.com *.global-e.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klevu.com *.ksearchnet.com *.google.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.googletagmanager.com tagmanager.google.com https://browser.sentry-cdn.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://optanon.blob.core.windows.net https://stglite.bglobale.com *.trustpilot.com *.bglobale.com *.global-e.com *.klarnacdn.net *.klevu.com *.ksearchnet.com assets.braintreegateway.com tagmanager.google.com fonts.google.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.attn.tv events.attentivemobile.com https://www.google-analytics.com https://www.googleadservices.com https://www.google.co.uk https://stats.g.doubleclick.net https://payments-uk.amazon.com cdn.cookielaw.org https://cookie-cdn.cookiepro.com *.pinterest.com *.tiktok.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.klevu.com *.ksearchnet.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.googletagmanager.com o121154.ingest.sentry.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.boxnow.hr *.fontawesome.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.sandbox.paypal.com *.youtube.com *.paypal.com *.googleadservices.com *.google-analytics.com *.google.com *.cdninstagram.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.placeholder.com *.wspay.biz *.corvuspay.com *.zopim.com *.klevu.com data: mi.hr *.pushpushgo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://ipgtest.monri.com/ https://ipg.monri.com/ https://formtest.wspay.biz/ https://form.wspay.biz/ *.facebook.com *.googlesyndication.com *.tiktok.com *.boxnow.hr https://seo.mageplaza.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.cdninstagram.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.googleapis.com *.placeholder.com *.wspay.biz *.corvuspay.com mi.hr 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://ipgtest.monri.com/ https://ipg.monri.com/ *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.boxnow.hr c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.twitter.com *.cdninstagram.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.googleapis.com *.placeholder.com cdn.lightwidget.com lightwidget.com *.wspay.biz *.corvuspay.com mi.hr *.pushpushgo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com *.corvuspay.com *.boxnow.hr venkon.hr www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cdninstagram.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.googleapis.com *.placeholder.com cdn.lightwidget.com lightwidget.com *.wspay.biz maps.gstatic.com blob: *.google.hr mi.hr *.pushpushgo.com *.bing.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com https://ipgtest.monri.com/ https://ipg.monri.com/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com https://sibautomation.com *.boxnow.hr js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cloudflare.com *.cloudflareinsights.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.instagram.com *.cdninstagram.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.googleapis.com *.placeholder.com cdn.lightwidget.com lightwidget.com *.wspay.biz *.pushpushgo.com *.adobedtm.com *.corvuspay.com *.doubleclick.com *.demdex.net *.klevu.com *.zopim.com *.zdassets.com mi.hr *.bing.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://ipgtest.monri.com/ https://ipg.monri.com/ *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.boxnow.hr *.fontawesome.com assets.braintreegateway.com *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.google.com *.youtube.com *.cdninstagram.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.placeholder.com cdn.lightwidget.com lightwidget.com *.wspay.biz *.corvuspay.com *.klevu.com mi.hr *.pushpushgo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com https://in-automate.brevo.com *.boxnow.hr api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cloudflare.com *.twitter.com *.twimg.com *.youtube.com *.cdninstagram.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.googleapis.com *.placeholder.com cdn.lightwidget.com lightwidget.com *.wspay.biz *.corvuspay.com *.googletagmanager.com *.doubleclick.com *.demdex.net *.amcglobal.sc.omtrdc.net *.klevu.com *.zopim.com *.zdassets.com *.pagead2.googlesyndication.com mi.hr *.pushpushgo.com *.google.hr *.bing.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
secure-frame-src *.idtheftscanner.f-secure.com; font-src *.fontawesome.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.idtheftscanner.f-secure.com 'self' 'unsafe-inline'; frame-ancestors *.bolt.com www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.bolt.com https://www.google.com/recaptcha/ www.googletagmanager.com www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.twitter.com *.cloudfront.net https://electric-house.com https://static.addtoany.com https://www.google-analytics.com landofcoder.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.idtheftscanner.f-secure.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.bolt.com *.commerce-quick-checkout.com http://localhost:8082 https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.idtheftscanner.f-secure.com landofcoder.com *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com unsafe-inline assets.braintreegateway.com *.cookiefirst.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com *.idtheftscanner.f-secure.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.bolt.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.idtheftscanner.f-secure.com *.cookiefirst.com landofcoder.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.yotpo.com *.googleapis.com *.gstatic.com *.sirv.com *.olark.com *.contivio.com *.avalara.com sbx.certcapture.com app.certcapture.com https://img.en25.com/i/elqCfg.min.js https://trk.barcoproducts.com/ *.invocacdn.com *.crazyegg.com https://bat.bing.com/ https://s.adroll.com/ https://d.adroll.com/ https://x.adroll.com/ https://ipv4.d.adroll.com/ *.visualvisitor.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.certcapture.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com *.yotpo.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.certcapture.com www.gstatic.com *.yotpo.com *.sirv.com www.xtento.com cdn.xtento.com *.olark.com https://img.en25.com/i/elqCfg.min.js *.artifi.net *.monetate.net www.magecomp.com *.contivio.com *.avalara.com sbx.certcapture.com app.certcapture.com https://trk.barcoproducts.com/ *.invocacdn.com *.crazyegg.com https://bat.bing.com/ https://s.adroll.com/ https://d.adroll.com/ https://x.adroll.com/ https://ipv4.d.adroll.com/ *.visualvisitor.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://rum.hlx.page *.certcapture.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.yotpo.com *.sirv.com player.vimeo.com www.xtento.com cdn.xtento.com *.olark.com *.monetate.net img03.en25.com *.coveo.com *.artifi.net https://img.en25.com/i/elqCfg.min.js *.contivio.com *.avalara.com sbx.certcapture.com app.certcapture.com https://trk.barcoproducts.com/ *.invocacdn.com *.crazyegg.com https://bat.bing.com/ https://s.adroll.com/ https://d.adroll.com/ https://x.adroll.com/ https://ipv4.d.adroll.com/ *.visualvisitor.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.yotpo.com *.googleapis.com *.sirv.com *.olark.com *.contivio.com *.avalara.com sbx.certcapture.com app.certcapture.com https://img.en25.com/i/elqCfg.min.js https://trk.barcoproducts.com/ *.invocacdn.com *.crazyegg.com https://bat.bing.com/ https://s.adroll.com/ https://d.adroll.com/ https://x.adroll.com/ https://ipv4.d.adroll.com/ *.visualvisitor.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.sirv.com *.olark.com blob: *.avalara.com sbx.certcapture.com app.certcapture.com https://img.en25.com/i/elqCfg.min.js https://trk.barcoproducts.com/ *.invocacdn.com *.crazyegg.com https://bat.bing.com/ https://s.adroll.com/ https://d.adroll.com/consent/ https://x.adroll.com/attribution/trigger https://ipv4.d.adroll.com/ *.visualvisitor.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.certcapture.com *.yotpo.com *.sirv.com *.youtube.com blob: *.olark.com *.cloud.coveo.com bam.nr-data.net *.artifi.net *.contivio.com *.avalara.com sbx.certcapture.com app.certcapture.com https://img.en25.com/i/elqCfg.min.js https://trk.barcoproducts.com/ *.invocacdn.com *.crazyegg.com https://bat.bing.com/ https://s.adroll.com/ https://d.adroll.com/consent/ https://x.adroll.com/attribution/trigger https://ipv4.d.adroll.com/ *.visualvisitor.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cloudflare.com *.twitter.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.twitter.com cdn.pagesense.io 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: *.cloudflare.com *.googleadservices.com *.twitter.com *.ytimg.com pagesense-proxy.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.cloudflare.com *.twitter.com *.google-analytics.com *.gstatic.com *.fontawesome.com cdn.pagesense.io pagesense-proxy.com static.zohocdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.gstatic.com *.typekit.net *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.cloudflare.com *.twitter.com pagesense-proxy.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';         script-src 'self' data:             https://*.fontawesome.com             https://*.googleapis.com             https://*.gstatic.com             https://*.freshworks.com             https://js.hsadspixel.net             https://*.google-analytics.com             https://*.hubspot.com             https://google-analytics.com             https://*.clarity.ms             https://*.googleadservices.com             https://pixel.sitescout.com             https://*.doubleclick.net             https://*.google.com             https://*.googletagmanager.com             https://*.hs-scripts.com             https://*.hs-analytics.net             https://*.hs-banner.com             https://js.hscollectedforms.net             https://bat.bing.com             https://up.pixel.ad             https://code.jquery.com             https://t.cometlytrack.com             https://gdata.westfax.com             https://affiliate.westfax.com             https://snap.licdn.com             https://www.redditstatic.com;         script-src-elem 'self' data: 'unsafe-inline'             https://player.vimeo.com             https://js.hsforms.net             https://s3.amazonaws.com             https://js.hsadspixel.net             https://js-na2.hsadspixel.net             https://*.fontawesome.com             https://*.googleapis.com             https://*.gstatic.com             https://*.freshworks.com             https://*.google-analytics.com             https://*.hubspot.com             https://google-analytics.com             https://*.clarity.ms             https://*.googleadservices.com             https://pixel.sitescout.com             https://*.doubleclick.net             https://*.google.com             https://*.googletagmanager.com             https://*.hs-scripts.com             https://*.hs-analytics.net             https://*.hs-banner.com             https://js.hscollectedforms.net             https://js-na2.hscollectedforms.net             https://bat.bing.com             https://up.pixel.ad             https://code.jquery.com             https://s3.amazonaws.com             https://t.cometlytrack.com             https://gdata.westfax.com             https://affiliate.westfax.com             https://snap.licdn.com             https://www.redditstatic.com;         script-src-attr 'self' data: 'unsafe-inline'             https://*.fontawesome.com             https://*.googleapis.com             https://*.gstatic.com             https://*.freshworks.com             https://*.google-analytics.com             https://*.hubspot.com             https://google-analytics.com             https://*.clarity.ms             https://*.googleadservices.com             https://pixel.sitescout.com             https://*.doubleclick.net             https://*.google.com             https://*.googletagmanager.com             https://*.hs-scripts.com             https://*.hs-analytics.net             https://*.hs-banner.com             https://js.hscollectedforms.net             https://bat.bing.com             https://up.pixel.ad             https://code.jquery.com             https://t.cometlytrack.com;         style-src 'self' data: 'unsafe-inline'             https://*.fontawesome.com             https://*.googleapis.com             https://*.westfax.com             https://*.freshworks.com             https://s3.amazonaws.com;         style-src-elem 'self' data: 'unsafe-inline'             https://*.fontawesome.com             https://*.googleapis.com             https://*.westfax.com             https://*.freshworks.com             https://s3.amazonaws.com;         style-src-attr 'self' data: 'unsafe-inline'             https://*.fontawesome.com             https://*.googleapis.com             https://*.westfax.com             https://*.freshworks.com;         img-src 'self' data:             http://www.w3.org/2000/svg             https://*.google.com             https://*.googletagmanager.com             https://*.hsforms.com             https://t.cometlytrack.com             https://px.ads.linkedin.com             https://alb.reddit.com             https://track.hubspot.com             https://track-na2.hubspot.com             https://c.clarity.ms             https://c.bing.com;         font-src 'self' data:             https://*.fontawesome.com             https://*.googleapis.com             https://*.gstatic.com;         connect-src 'self'             https://westfax.freshdesk.com             https://hubspot-forms-static-embed.s3.amazonaws.com             https://forms.hsforms.com             https://forms-na2.hsforms.com             https://api.hubapi.com             https://api-na2.hubapi.com             https://gdata.westfax.com             https://static.hsappstatic.net             https://*.fontawesome.com             https://*.googleapis.com             https://*.gstatic.com             https://*.freshworks.com             https://*.google-analytics.com             https://*.hubspot.com             https://google-analytics.com             https://*.clarity.ms             https://*.googleadservices.com             https://pixel.sitescout.com             https://*.doubleclick.net             https://*.google.com             https://t.cometlytrack.com             https://px.ads.linkedin.com             https://pixel-config.reddit.com             https://www.redditstatic.com             https://forms.hscollectedforms.net             https://forms-na2.hscollectedforms.net             https://grsm.io             https://partnerlinks.io             https://affiliate.westfax.com             https://api.partnerstack.com;         media-src 'self'             https://*.youtube.com;         object-src 'self';         child-src 'self';         frame-src 'self'             https://player.vimeo.com             https://www.google.com             https://forms.hsforms.com             https://westfax.freshdesk.com             https://*.westfax.com             https://*.sitescout.com             https://*.doubleclick.net             https://*.youtube.com             https://www.googletagmanager.com;         worker-src 'self';         form-action 'self'             https://forms.hsforms.com             https://*.westfax.com;         upgrade-insecure-requests;         block-all-mixed-content;         base-uri 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-gGjnlFtNQavP9zhn7kSCWg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com https://apis.google.com https://pay.google.com https://js.braintreegateway.com https://assets.braintreegateway.com https://*.braintreegateway.com https://*.paypal.com https://*.paypalobjects.com https://js.klevu.com https://*.klevu.com https://api.videoly.co https://*.videoly.co https://cdn.noibu.com https://*.noibu.com https://*.marketingautomation.services https://*.sharpspring.com https://platform.twitter.com https://connect.facebook.net https://cdnjs.cloudflare.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://sec.webeyez.com https://www.youtube.com https://assets.pinterest.com https://app.zipchat.ai https://*.zipchat.ai; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://use.fontawesome.com https://*.klevu.com; font-src 'self' data: https://fonts.gstatic.com https://use.fontawesome.com https://cdnjs.cloudflare.com https://js.klevu.com; img-src 'self' data: blob: https:; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://*.braintreegateway.com https://*.braintree-api.com https://client-analytics.braintreegateway.com https://api.videoly.co https://*.videoly.co https://*.klevu.com https://*.noibu.com https://*.marketingautomation.services https://*.sharpspring.com https://analytics.google.com https://stats.g.doubleclick.net https://*.ksearchnet.com wss://*.noibu.com https://www.google.com https://*.zipchat.ai wss://*.zipchat.ai; frame-src 'self' https://js.braintreegateway.com https://*.braintreegateway.com https://*.paypal.com https://pay.google.com https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.facebook.com https://*.facebook.com https://platform.twitter.com https://syndication.twitter.com https://*.twitter.com https://*.zipchat.ai; form-action 'self' https://*.paypal.com; worker-src 'self' blob:; report-uri /CspReport.ashx; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.sharethis.com *.rawgit.com *.jquery.com *.facebook.net *.usercentrics.eu *.cookiebot.eu *.cookiebot.com *.g.doubleclick.net *.fontawesome.com *.googleapis.com *.linkedin.com *.hotjar.com wasm-eval *.google-analytics.com *.googleoptimize.com *.googletagmanager.com *.gstatic.com; script-src-elem 'self' 'unsafe-inline' *.googleapis.com *.google.com *.sharethis.com *.rawgit.com *.cloudflare.com *.jquery.com *.facebook.net *.cookiebot.com *.g.doubleclick.net *.fontawesome.com *.bootstrapcdn.com *.wisoyekivo.com *.linkedin.com *.vimeo.com *.skedify.io *.plugin.skedify.io *.hotjar.com *.google-analytics.com *.googleoptimize.com *.googletagmanager.com *.gstatic.com *.pagespeed-mod.com; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' *.googleapis.com *.fontawesome.com *.sharethis.com *.gstatic.com *.pvgroup.be; style-src-elem 'self' 'unsafe-inline' *.jquery.com *.googleapis.com *.bootstrapcdn.com *.skedify.io pv.skedify.show *.fontawesome.com *.sharethis.com *.gstatic.com *.pvgroup.be; style-src-attr 'unsafe-inline'; img-src 'self' data: *.google.com *.skedify.io *.vimeocdn.com *.ytimg.com *.sharethis.com *.googleapis.com *.gstatic.com *.sharethis.com *.google-analytics.com *.hotjar.com *.gstatic.com *.sharethis.com *.google.com *.sharethis.com *.facebook.com *.google-analytics.com *.google.at *.google.be *.google.ch *.google.co.uk *.google.co.za *.google.com *.google.com.ng *.google.de *.google.es *.google.fi *.google.fr *.google.ie *.google.it *.google.lu *.google.nl *.google.pt *.google.se *.googletagmanager.com *.gstatic.com *.ondernemersbelang.nl *.pv.be *.pvgroep.coop *.pvgroup.be *.reprintsdesk.com *.researchsolutions.com *.verfvanniveau.nl *.google.co.in; font-src 'self' data: *.alicdn.com *.gstatic.com github.com *.fontawesome.com *.bootstrapcdn.com *.hotjar.com; connect-src 'self' *.doubleclick.net *.google.com *.eu1.kaskocloud.com *.skedify.io *.crwdcntrl.net *.cookiebot.com *.withgoogle.com *.stbuttons.click data: *.hotjar.com *.fontawesome.com *.sharethis.com *.google.com *.googleapis.com *.ingest.sentry.io *.googlesyndication.com properties *.google-analytics.com *.g.doubleclick.net *.hotjar.io *.facebook.com; media-src 'self'; child-src *.fls.doubleclick.net *.google.com *.esignlive.eu *.cookiebot.com *.sharethis.com *.facebook.com *.linkedin.com *.youtube-nocookie.com *.youtube.com; frame-src 'self' *.fls.doubleclick.net *.google.com *.esignlive.eu blob: *.cookiebot.com *.ebconnect.be *.zscaler.net *.zscalertwo.net *.vimeo.com *.plugin.skedify.io *.sharethis.com properties *.facebook.com *.sharethis.com *.facebook.com *.google.com *.linkedin.com *.sofiskonline.be *.youtube-nocookie.com *.youtube.com; frame-ancestors 'self'; form-action 'self' *.sips-services.com *.salesforce.com *.facebook.com; manifest-src 'self'; object-src 'none' 1
connect-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.bing.net *.clarity.ms *.cloudflare.com *.cookiefirst.com d5yoctgpv4cpx.cloudfront.net *.deleukstetaartenshop.be *.deleukstetaartenshop.com *.deleukstetaartenshop.nl *.doubleclick.net *.facebook.com *.facebook.net *.feedbackcompany.com *.fontawesome.com *.freshchat.com *.freshworks.com *.fundelices.be *.fundelices.fr *.getflowbox.com *.googleadservices.com *.google-analytics.com *.googleapis.com www.google.at www.google.be www.google.ch www.google.com.ar www.google.com.au www.google.com.bd www.google.com.br www.google.com.co www.google.com.cy www.google.com.ec www.google.com.eg www.google.com.et www.google.com.hk www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.ph www.google.com.pk www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.uk www.google.cz www.google.de www.google.dk www.google.es www.google.fr www.google.it www.google.nl www.google.pl www.google.pt www.google.ru *.google.com google.com *.googlesyndication.com *.googletagmanager.com *.googleusercontent.com *.gstatic.com *.hotjar.com *.hotjar.io *.klarnacdn.net *.klarna.com *.klarnaevt.com *.marker.io *.media-amazon.com *.multisafepay.com *.newrelic.com noembed.com *.nr-data.net p2iqhncxyh.execute-api.eu-central-1.amazonaws.com *.pinimg.com *.pinterest.com s3.amazonaws.com s3.eu-west-1.amazonaws.com squeezely.tech *.squeezely.tech vercel.live *.youtube.com *.ytimg.com api.marker.io ssr.marker.io s3.eu-west-1.amazonaws.com/marker.sessions.prod *.flbx.io; default-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.bing.net *.clarity.ms *.cookiefirst.com d5yoctgpv4cpx.cloudfront.net *.doubleclick.net *.facebook.com *.facebook.net *.googleadservices.com *.google-analytics.com *.googleapis.com www.google.be www.google.com.au www.google.com.tr www.google.cz www.google.de www.google.dk www.google.fr www.google.it www.google.nl google.com *.google.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.hotjar.io *.klarnacdn.net *.klarna.com *.klarnaevt.com noembed.com p2iqhncxyh.execute-api.eu-central-1.amazonaws.com *.pinimg.com *.pinterest.com squeezely.tech *.squeezely.tech *.youtube.com *.ytimg.com; frame-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.doubleclick.net *.facebook.com *.freshchat.com *.google.com *.googletagmanager.com *.klarna.com *.klarnaservices.com *.pinterest.com vercel.live *.youtube.com app.marker.io; img-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.bing.net *.clarity.ms *.cookiefirst.com *.deleukstetaartenshop.be *.deleukstetaartenshop.com *.deleukstetaartenshop.nl *.doubleclick.net *.facebook.com *.facebook.net *.fundelices.be *.fundelices.fr *.googleadservices.com www.google.at www.google.be www.google.ch www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.uk www.google.cz www.google.de www.google.dk www.google.es www.google.fr www.google.it www.google.nl www.google.pl www.google.pt www.google.ru google.com *.google.com *.googlesyndication.com *.googletagmanager.com *.googleusercontent.com *.gstatic.com *.klarnacdn.net *.klarna.com *.media-amazon.com *.pinterest.com s3.amazonaws.com *.squeezely.tech *.youtube.com *.ytimg.com blob: data: media.marker.io app.marker.io edge.marker.io *.flbx.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.clarity.ms *.cookiefirst.com d5yoctgpv4cpx.cloudfront.net *.doubleclick.net *.facebook.net *.feedbackcompany.com *.freshchat.com *.freshworks.com *.getflowbox.com *.googleadservices.com *.google-analytics.com *.googleapis.com *.google.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com *.hotjar.com *.klarnacdn.net *.marker.io *.multisafepay.com *.newrelic.com *.pinimg.com *.pinterest.com squeezely.tech vercel.live *.youtube.com edge.marker.io app.marker.io; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.cookiefirst.com *.deleukstetaartenshop.be *.deleukstetaartenshop.com *.fontawesome.com *.freshchat.com *.freshworks.com *.fundelices.be *.googleapis.com *.googletagmanager.com *.gstatic.com *.multisafepay.com; font-src 'self' 'unsafe-inline' 'unsafe-eval' *.deleukstetaartenshop.be *.deleukstetaartenshop.com *.fontawesome.com *.getflowbox.com *.gstatic.com *.jsdelivr.net *.preply.com s3.amazonaws.com *.typekit.net app.marker.io edge.marker.io; form-action 'self' 'unsafe-inline' 'unsafe-eval' *.facebook.com app.marker.io api.marker.io; child-src 'self' 'unsafe-inline' 'unsafe-eval'  app.marker.io; media-src 'self' 'unsafe-inline' 'unsafe-eval' media.marker.io app.marker.io edge.marker.io *.flbx.io; report-uri https://fdaba162-4422-4f3a-a4f4-c7768ec87549.sansec.watch/; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * services.paytrail.com paytrail.com *.paytrail.com epmt.nordea.fi *.nordea.com verkkopankki.danskebank.fi online.s-pankki.fi verkkomaksu.poppankki.fi verkkomaksu.omasp.fi auth.aktia.fi verkkomaksu.handelsbanken.fi verkkomaksu.saastopankki.fi online.alandsbanken.fi maksu.pivo.fi qa-maksu.pivo.fi v1-hub-staging.sph-test-solinor.com v1.api.paymenthighway.io *.paymenthighway.io *.mobilepay.fi 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com cdn2.hubspot.net resources.paytrail.com *.google.fi data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com services.paytrail.com resources.paytrail.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com downloads.mailchimp.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.paytrail.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';base-uri 'self';frame-ancestors 'self' https://*.mcfarlandclinic.com https://*.mgmc.org https://*.mychartiowa.com https://beta---online-checkin-ae65ecrdlq-uc.a.run.app/ https://covid-vaccine-scheduler-dev-ae65ecrdlq-uc.a.run.app https://demosched.mcfarlandclinic.com https://hvprdweb0046.hv.local https://hvprdweb0047.hv.local https://mcfarlandclinic.com https://mychartiowa.com https://prd-mychart03.hv.local https://prd-mychart04.hv.local;frame-src 'self' epichttp: https://cdnapisec.kaltura.com/ https://emrproxy.mcfarlandclinic.com https://mcfarlandclinic.com https://mychart.personapay.com https://pay.instamed.com https://www.google.com https://www.mcfarlandclinic.com https://www.recaptcha.net;script-src https://www.mychartiowa.com 'self' 'unsafe-inline' https://www.google.com https://www.gstatic.com;img-src https://* 'self' * blob: data: https://www.google.com https://www.gstatic.com;connect-src 'self' epichttp: https://*.kaltura.com https://www.google.com https://www.gstatic.com;style-src https://www.mychartiowa.com 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:;report-uri https://www.mcfarlandclinic.com; 1
object-src 'none';base-uri 'self';script-src 'nonce-G4J7Fq3Ax8c5ctDpwiXClA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'nonce-Qrj85a1FHwj/MktcHH5T2iHyFycmdsOZ' 'unsafe-eval' 'strict-dynamic' 'unsafe-inline' 'self' https: http:; report-uri /.netlify/functions/__csp-violations 1
default-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; upgrade-insecure-requests 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com consent.cookiefirst.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com consent.cookiefirst.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com *.google.com *.googleadservices.com *.googletagmanager.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de consent.cookiefirst.com *.avada.io *.shopify.com *.alothemes.com *.magepow.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com consent.cookiefirst.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de consent.cookiefirst.com edge.cookiefirst.com api.cookiefirst.com https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com *.googletagmanager.com stats.g.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri https://www.paypalobjects.com 'self' 'unsafe-inline'; 1
default-src 'self' 'unsafe-eval' 'unsafe-inline'; script-src 'self' 'nonce-Zp7UU7jLSONBBkVlzvM9EPcOM9-CmaM8vRdHDfbM99455xyI8V5xQA' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.ggpht.com https://*.googleusercontent.com blob: https://*.googletagmanager.com https://*.google-analytics.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://*.youtube.com https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.googleusercontent.com https://*.ggpht.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com 'report-sample'; connect-src 'self' https://*.googleapis.com https://*.google.com https://*.gstatic.com data: blob: https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net; font-src 'self' https://fonts.gstatic.com; worker-src 'self' 'nonce-Zp7UU7jLSONBBkVlzvM9EPcOM9-CmaM8vRdHDfbM99455xyI8V5xQA' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.ggpht.com https://*.googleusercontent.com blob:; report-uri https://www.socialistinternational.org/@http-reporting?csp=report&requestTime=1789262551482783&requestHash=83b6770ea92aeff016f30a467d1adbcf361ef2a9 1
style-src-elem 'self' 'unsafe-inline' *.legalblink.com *.legalblink.it *.licdn.com *.weglot.com *.bootstrapcdn.com *.googleapis.com *.linkedin.com; script-src-elem 'self' 'unsafe-inline' *.legalblink.com *.legalblink.it *.facebook.net *.facebook.com *.trustpilot.com *.googletagmanager.com *.googleadservices.com *.google.com *.google-analytics.com *.paypal.com *.scalapay.com *.gstatic.com *.payments-amazon.com *.amazon.com *.licdn.com *.doubleclick.net *.linkedin.com *.weglot.com; font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.licdn.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.facebook.com *.googlesyndication.com *.tiktok.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.google.com *.legalblink.com *.legalblink.it 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.google.it *.weglot.com *.storeden.net *.linkedin.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.avada.io *.shopify.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com maps.googleapis.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com assets.braintreegateway.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com *.legalblink.com *.legalblink.it *.weglot.com *.linkedin.com *.google.it https://get.geojs.io *.avada.io *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com https://popsql.com https://popsql.com ; frame-src 'self' https://vercel.live ; media-src 'self' blob: ; script-src 'self' 'unsafe-inline' https://popsql.com https://popsql.com http://cdn.mxpnl.com http://fast.wistia.com http://static.asayer.io http://www.google-analytics.com https://*.g.doubleclick.net https://*.google-analytics.com https://*.googletagmanager.com https://assets.customer.io https://cdn.koala.live https://cdn.segment.com https://cmp.osano.com https://js-na1.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hsadspixel.net https://snap.licdn.com https://static.asayer.io https://vercel.live https://www.redditstatic.com ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://fonts.googleapis.com ; worker-src 'self' blob: ; 1
object-src 'none'; script-src 'self' 'report-sample' 'inline-speculation-rules' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; script-src-elem 'self' 'report-sample' 'inline-speculation-rules' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src 'self' 'report-sample' 'unsafe-inline' https://fonts.googleapis.com https://maps.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; block-all-mixed-content 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://connect.nosto.com https://d1cocw0250tpxv.cloudfront.net https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https: blob:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://*.facebook.com https://*.nosto.com; frame-src 'self' https://www.youtube.com https://td.doubleclick.net; object-src 'none'; base-uri 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://api.github.com; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests; report-uri /api/v1/csp-report 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com cdn.userway.org api.userway.org 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com cdn.userway.org api.userway.org cdn.jsdelivr.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com *.gstatic.com cdn.userway.org api.userway.org player.vimeo.com cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.userway.org api.userway.org cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com cdn.userway.org api.userway.org 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.googleapis.com cdn.userway.org api.userway.org cdn.jsdelivr.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com ukfabricsonline.com assets.reviews.io data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.reviews.io *.reviews.co.uk *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com www.googletagmanager.com td.doubleclick.net www.google.com b.stripecdn.com newassets.hcaptcha.com m.stripe.network *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://redchamps.com *.cloudfront.net *.reviews.io *.reviews.co.uk ukfabricsonline.com assets.reviews.io www.facebook.com bat.bing.com www.google.co.uk www.gstatic.com media.reviews.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.reviews.io *.reviews.co.uk *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com ukfabricsonline.com widget.reviews.io widget.reviews.co.uk static.zdassets.com static.hotjar.com connect.facebook.net bat.bing.com www.clarity.ms script.hotjar.com www.google.com www.gstatic.com b.stripecdn.com hcaptcha.com newassets.hcaptcha.com m.stripe.network https://www.googletagmanager.com tagmanager.google.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com assets.braintreegateway.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.stripe.network *.stripecdn.com *.amazon.com ukfabricsonline.com assets.reviews.io widget.reviews.co.uk d19ayerf5ehaab.cloudfront.net b.stripecdn.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com region1.analytics.google.com ukfabricsonline.com widget.reviews.io api.reviews.io ekr.zdassets.com content.hotjar.io ukfabricsonline.zendesk.com q.clarity.ms r.stripe.com merchant-ui-api.stripe.com api.stripe.com pay.google.com play.google.com api.hcaptcha.com m.stripe.com api.reviews.co.uk api2.hcaptcha.com region1.google-analytics.com *.google-analytics.com *.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src ukfabricsonline.com bat.bing.com www.google.com ws.hotjar.com widget-mediator.zopim.com r.stripe.com q.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.klarnacdn.net *.fontawesome.com maxcdn.bootstrapcdn.com static.payu.com https://geowidget.easypack24.net https://fonts.gstatic.com *.typekit.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * secure.payu.com merch-prod.snd.payu.com static.payu.com credit-widget-config.payu.com/ https://geowidget-app.inpost.pl/ https://app2.salesmanago.com 'self' www.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.klarna.com *.klarnaevt.com *.klarnacdn.net magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com static.payu.com credit-widget-config.payu.com/ https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.glami.pl *.pixel.wp.pl *.imgsct.cookiebot.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://cdn.polyfill.io https://browser.sentry-cdn.com *.klarna.com *.klarnacdn.net *.klarnaservices.com *.disqus.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com secure.payu.com secure.snd.payu.com static.payu.com credit-widget-config.payu.com/ *.googletagmanager.com *.snrcdn.net *.snrbox.com *.ekomiapps.de https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.opineo.pl *.consent.cookiebot.com *.consentcdn.cookiebot.com www.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.klarnacdn.net *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com https://geowidget.easypack24.net https://geowidget.inpost.pl *.typekit.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com https://*.ingest.sentry.io *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com secure.payu.com merch-prod.snd.payu.com static.payu.com credit-widget-config.payu.com/ *.easypack24.net *.inpost.pl *.openstreetmap.org *.vc-service.saleago.com ws: *.consent.cookiebot.com *.consentcdn.cookiebot.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
connect-src    'self'    *.google.com   *.googleapis.com    *.google-analytics.com   *.googleadservices.com   *.googletagmanager.com   *.google.ad   *.google.ae   *.google.al   *.google.at   *.google.be   *.google.bg   *.google.ca   *.google.ch   *.google.co.id   *.google.co.il   *.google.co.in   *.google.co.kr   *.google.co.ma   *.google.co.nz   *.google.co.th   *.google.co.uk   *.google.co.za   *.google.com.ar   *.google.com.au   *.google.com.bd   *.google.com.bh   *.google.com.hk   *.google.com.lb   *.google.com.mt   *.google.com.mx   *.google.com.my   *.google.com.ph   *.google.com.sg   *.google.com.tr   *.google.com.tw   *.google.com.ua   *.google.com.uy   *.google.com.vn   *.google.cz   *.google.de   *.google.dk   *.google.ee   *.google.es   *.google.fr   *.google.ge   *.google.gr   *.google.hr   *.google.hu   *.google.ie   *.google.it   *.google.li   *.google.lt   *.google.lu   *.google.lv   *.google.md   *.google.mg   *.google.mu   *.google.nl   *.google.no   *.google.pl   *.google.pt   *.google.ro   *.google.ru   *.google.se   *.google.si   *.google.sk   *.google.sr   *.google.tn   api.leadinfo.com   collector.leadinfo.net     consentcdn.cookiebot.com   ct.pinterest.com     api.expertise.ai   *.hotjar.io   wss://ws.hotjar.com   www.rensonevents.com   renson-public.azure-api.net   adservice.google.com   bat.bing.com   googleads.g.doubleclick.net   px.ads.linkedin.com   stats.g.doubleclick.net   *.facebook.com   *.wisepops.net   *.wisepops.com   *wisepops.net   *.visualwebsiteoptimizer.com   app.getwisp.co   *.cookieinformation.com;  font-src    'self'   fonts.gstatic.com   cdnjs.cloudflare.com   www.renson.eu   *.bootstrapcdn.com;  frame-src    'self'   ct.pinterest.com   e.issuu.com   consentcdn.cookiebot.com   *.youtube.com   www.facebook.com   www.google.com   www.googletagmanager.com   *.calendly.com   td.doubleclick.net   td.doubleclick.net.x.09600de704fdb043ff099c40aabe2d8e7198.d0452329.id.opendns.com   td.doubleclick.net.x.0bd2460605b4e04bf409574056f2418fd810.d0452329.id.opendns.com   td.doubleclick.net.x.11f3929f0711204179088e1076d27c30fcfc.d0452329.id.opendns.com   td.doubleclick.net.x.12062b6606f6804057080e602e654f342153.d045232a.id.opendns.com   td.doubleclick.net.x.166dd5d20db1b04cb00bb5b0884c6cf94d6f.d0452329.id.opendns.com   td.doubleclick.net.x.2c7492b00bb7a04b350a6900ac977ec52030.d0452329.id.opendns.com   td.doubleclick.net.x.31c642540514d04bc80b949092146ba26358.d0452329.id.opendns.com   td.doubleclick.net.x.35cc51200e4c704c3f08a430eb59507708ab.d0452329.id.opendns.com   td.doubleclick.net.x.3b58afbe0ea5d04ae60988b023ea5ea2359b.d045232a.id.opendns.com   td.doubleclick.net.x.3e6a328505e2804f81088350914b066f49a0.d0452329.id.opendns.com   td.doubleclick.net.x.429955f002718049410bd6200e42c267599c.d0452329.id.opendns.com   td.doubleclick.net.x.4648cb5e0e5a404b490b9a105477214446b6.d0452329.id.opendns.com   td.doubleclick.net.x.489bb32f0a15404673098cb0c1351dd70222.d0452329.id.opendns.com   td.doubleclick.net.x.51fda7e1067db0405f0b2dd05608976fe2dd.d045232a.id.opendns.com   td.doubleclick.net.x.5a63bf430171304e730a84f0d9f52c4187dc.d0452329.id.opendns.com   td.doubleclick.net.x.6f93b53a0470d04633080d8024491a677636.d0452329.id.opendns.com   td.doubleclick.net.x.71f8a2360890f0488d09ea60691fad4265f6.d045232a.id.opendns.com   td.doubleclick.net.x.79e545d800555042160869703a3fb53d3d9d.d0452329.id.opendns.com   td.doubleclick.net.x.7c948fc00baef042bb0a8100764725ee9678.d045232a.id.opendns.com   td.doubleclick.net.x.7d7b73560e1e5044c80bba00ab620978d940.d0452329.id.opendns.com   td.doubleclick.net.x.7f206e2a0a44504d250b7100616d2172708b.d0452329.id.opendns.com   td.doubleclick.net.x.85acb37104bbe04e470af500fa5abc2a85c4.d0452329.id.opendns.com   td.doubleclick.net.x.8a5cdd200b65104e1e08e780ff4e6c9c2009.d0452329.id.opendns.com   td.doubleclick.net.x.8ae9da7f07c8a044fd09adb07b13a044244a.d0452329.id.opendns.com   td.doubleclick.net.x.9f4ee3e10e549048800b3d90307f47a07fb2.d0452329.id.opendns.com   td.doubleclick.net.x.ab2cb5e605336048a30b0df0f39973dacd76.d0452329.id.opendns.com   td.doubleclick.net.x.ac1ca9c20dc3e04c950a5fe0d8a1ffe32d5b.d045232a.id.opendns.com   td.doubleclick.net.x.b1b51f290464f04f5108e4201f4de2e7b690.d0452329.id.opendns.com   td.doubleclick.net.x.b46b14ab04c0a047b608ef905b8f1143837d.d0452329.id.opendns.com   td.doubleclick.net.x.ce9226f40c1f904c84090b6046a863167757.d0452329.id.opendns.com   td.doubleclick.net.x.d44cb5620a41404e4c091d00c62a34fdffd7.d0452329.id.opendns.com   td.doubleclick.net.x.e2bde31a00424041b60902f07e8b96739702.d0452329.id.opendns.com   td.doubleclick.net.x.e60e8ce80796004348081da00bb4f6cc1035.d0452329.id.opendns.com   td.doubleclick.net.x.ee2110460af800460008d110a9de7bf33df3.d0452329.id.opendns.com   td.doubleclick.net.x.fc22e2bb098ff047ed092f807e0a5b7a130a.d0452329.id.opendns.com   *.wisepops.com   wisepops.net   *.visualwebsiteoptimizer.com   *.cookieinformation.com;  img-src    'self'    data:    renson-co-renson-kentico-dev-cdn-wa-ep.azureedge.net   renson-co-stg-kentico-website-live-cdnep.azureedge.net   renson-co-prd-kentico-website-live-cdnep.azureedge.net   *.renson.eu   *.renson.net   *.bynder.com     imgsct.cookiebot.com    *.googleapis.com   *.google-analytics.com   *.google.com   www.googletagmanager.com   *.gstatic.com    img.youtube.com   i.ytimg.com     cdnjs.cloudflare.com   chatsimple-widget.s3.us-east-2.amazonaws.com     connect.facebook.net   www.facebook.com   *.doubleclick.net   googleads.g.doubleclick.net   i.vimeocdn.com   log.pinterest.com   *.linkedin.com   *.google.ad   *.google.ae   *.google.al   *.google.at   *.google.be   *.google.bg   *.google.ca   *.google.ch   *.google.co.id   *.google.co.il   *.google.co.in   *.google.co.kr   *.google.co.ma   *.google.co.nz   *.google.co.th   *.google.co.uk   *.google.co.za   *.google.com.ar   *.google.com.au   *.google.com.bd   *.google.com.bh   *.google.com.hk   *.google.com.lb   *.google.com.mt   *.google.com.mx   *.google.com.my   *.google.com.ph   *.google.com.sg   *.google.com.tr   *.google.com.tw   *.google.com.ua   *.google.com.uy   *.google.com.vn   *.google.cz   *.google.de   *.google.dk   *.google.ee   *.google.es   *.google.fr   *.google.ge   *.google.gr   *.google.hr   *.google.hu   *.google.ie   *.google.it   *.google.li   *.google.lt   *.google.lu   *.google.lv   *.google.md   *.google.mg   *.google.mu   *.google.nl   *.google.no   *.google.pl   *.google.pt   *.google.ro   *.google.ru   *.google.se   *.google.si   *.google.sk   *.google.sr   *.google.tn   *.wisepops.net   *.wisepops.com   *.visualwebsiteoptimizer.com   dx4nr741tfc02.cloudfront.net   wisp-production-storage.s3.amazonaws.com   ct.pinterest.com;  manifest-src    'self';  script-src-attr    'unsafe-inline';  script-src-elem    'self'    'unsafe-inline'      www.gstatic.com   *.google.com   *.googleapis.com    *.googlesyndication.com   *.google-analytics.com   *.googleadservices.com   www.googletagmanager.com   *.youtube.com   cdn.chatsimple.ai   *.wisepops.com   *.visualwebsiteoptimizer.com   chatsimple-widget.s3.us-east-2.amazonaws.com   code.jquery.com   *.cookiebot.com   cdn.leadinfo.net   *.hotjar.com   connect.facebook.net   *.cookieinformation.com   cdnjs.cloudflare.com   *.facebook.net   *.pinterest.com   googleads.g.doubleclick.net   https://cdnjs.cloudflare.com/ajax/libs/jquery/   https://cdnjs.cloudflare.com/ajax/libs/tooltipster/   https://cdnjs.cloudflare.com/ajax/libs/fotorama/4.6.4/fotorama.min.js;  script-src   'nonce-m/ME9s1qYklld3vOREQ0qg=='   'self'   code.jquery.com   cdn.leadinfo.net   connect.facebook.net   *.cookiebot.com   *.googlesyndication.com   *.google.com   www.google-analytics.com   *.googletagmanager.com   www.gstatic.com   maps.googleapis.com   www.googleadservices.com   *.cloudflare.com   *.wisepops.net   *.wisepops.com   *wisepops.net   *.visualwebsiteoptimizer.com   app.getwisp.co   googleads.g.doubleclick.net   *.youtube.com; style-src-attr    'unsafe-inline';  style-src-elem    'self'    'unsafe-inline'   *.calendly.com   cdn.chatsimple.ai   cdnjs.cloudflare.com   fonts.googleapis.com   stackpath.bootstrapcdn.com; report-uri https://440648cc39180e293ac22cb81bfa4281.report-uri.com/r/d/csp/reportOnly 1
font-src fonts.gstatic.com fonts.googleapis.com cdnjs.cloudflare.com *.fontawesome.com https://cdnjs.cloudflare.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://cdnjs.cloudflare.com *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdnjs.cloudflare.com *.fontawesome.com https://fonts.googleapis.com https://cdnjs.cloudflare.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com fonts.googleapis.com fonts.gstatic.com *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: *.tawk.to *.appzi.io *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://dashboard.webwinkelkeur.nlfonts/webandbrand.woff data: 'self' 'unsafe-inline'; form-action *.paypal.com *.tawk.to 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com https://chatwidget-prod.web.app https://www.feedbackcompany.com wm-livechat-2-prod-dot-watermelonmessenger.appspot.com *.doubleclick.net *.googletagmanager.com *.appzi.io sstr.kunststofbouwmateriaal.nl js.mollie.com *.tawk.to 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.googleapis.com cdn.doofinder.com magefan.com cm.magefan.com bat.bing.com *.clarity.ms www.google.nl *.googletagmanager.com *.tawk.to tawk.link *.appzi.io *.hotjar.com *.hotjar.io sstr.kunststofbouwmateriaal.nl *.disqus.com https://firebasestorage.googleapis.com https://www.mollie.com cdn.jsdelivr.net s3.amazonaws.com/ ts.tradetracker.net www.magmodules.eu cdn.magmodules.eu data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.commerce-payment-services.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ cdn.doofinder.com data: 'unsafe-inline' https://chatwidget-prod.web.app https://www.feedbackcompany.com www.google.com region1.google-analytics.com cdn.cookie-script.com bat.bing.com *.clarity.ms *.doofinder.com *.tawk.to *.jsdelivr.net *.googletagmanager.com *.appzi.io *.hotjar.com *.hotjar.io sstr.kunststofbouwmateriaal.nl *.disqus.com *.avada.io player.vimeo.com js.mollie.com cdn.jsdelivr.net tm.tradetracker.net https://dashboard.webwinkelkeur.nl/sidebar.js 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.doofinder.com *.tawk.to *.appzi.io *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tawk.to tawk.link 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.googleapis.com *.doofinder.com wss://*.doofinder.com https://www.feedbackcompany.com region1.google-analytics.com www.google.com cdn.cookie-script.com bat.bing.com *.clarity.ms *.doubleclick.net *.tawk.to *.appzi.io wss://*.tawk.to *.googletagmanager.com wss://*.hotjar.com wss://*.hotjar.io *.hotjar.com *.hotjar.io sstr.kunststofbouwmateriaal.nl https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src www.google.com www.google.nl region1.google-analytics.com cdn.cookie-script.com bat.bing.com *.clarity.ms *.doofinder.com *.tawk.to *.googletagmanager.com sstr.kunststofbouwmateriaal.nl 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com https://widgets.trustedshops.com typesense.c-479.maxcluster.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com typesense.c-479.maxcluster.net 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ bid.g.doubleclick.net js.mollie.com consentcdn.cookiebot.com *.etrusted.com *.trustedshops.com sst.scs-holzshop.de *.adcell.com *.google.com safeframe.googlesyndication.com *.googletagmanager.com typesense.c-479.maxcluster.net 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com validator.swagger.io https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.mollie.com imgsct.cookiebot.com *.etrusted.com *.trustedshops.com *.adcell.com *.clarity.ms *.doubleclick.net *.google.com www.google.at www.google.be www.google.by www.google.ch www.google.co.in www.google.co.th www.google.co.uk www.google.com.br www.google.com.cy www.google.com.eg www.google.com.ph www.google.com.tr www.google.com.ua www.google.cz www.google.de www.google.dk www.google.ee www.google.es www.google.fr www.google.gr www.google.hu www.google.it www.google.li www.google.lt www.google.lu www.google.lv www.google.nl www.google.pl www.google.ro www.google.rs www.google.rw www.google.se www.google.si www.google.sk www.google.tg app.usercentrics.eu sst.scs-holzshop.de uct.service.usercentrics.eu *.googletagmanager.com ssl.gstatic.com www.gstatic.com c.clarity.ms c.bing.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com typesense.c-479.maxcluster.net data: 'self' 'unsafe-inline'; script-src www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.mollie.com pay.google.com applepay.cdn-apple.com consent.cookiebot.com consentcdn.cookiebot.com *.gstatic.com *.google.com *.googletagmanager.com *.adcell.com *.clarity.ms analytics.ahrefs.com static.klaviyo.com sst.scs-holzshop.de *.cmp.usercentrics.eu tagmanager.google.com https://www.clarity.ms https://scripts.clarity.ms https://l.clarity.ms https://d5yoctgpv4cpx.cloudfront.net https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com typesense.c-479.maxcluster.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://static.klaviyo.com *.googletagmanager.com tagmanager.google.com fonts.google.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com typesense.c-479.maxcluster.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ a.klaviyo.com https://telemetrics.klaviyo.com/ sst.scs-holzshop.de consentcdn.cookiebot.com *.etrusted.com *.trustedshops.com stats.g.doubleclick.net *.google.com *.googletagmanager.com *.adcell.com *.clarity.ms *.doubleclick.net www.google.com.ua www.google.de analytics.ahrefs.com *.cmp.usercentrics.eu https://www.clarity.ms https://o.clarity.ms https://scripts.clarity.ms https://l.clarity.ms https://d5yoctgpv4cpx.cloudfront.net https://p2iqhncxyh.execute-api.eu-central-1.amazonaws.com https://integrations.etrusted.site typesense.c-479.maxcluster.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://b907e4fb-b0f5-4d13-82f2-4cbf3fb9e900.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' https://ajax.googleapis.com https://cdnjs.cloudflare.com https://cdn-cookieyes.com https://platform.twitter.com https://maps.googleapis.com https://www.googletagmanager.com; style-src 'self' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://maps.googleapis.com; frame-src 'self' https://www.youtube.com https://platform.twitter.com https://syndication.twitter.com https://preview.mailerlite.io; object-src 'none'; base-uri 'self'; form-action 'self' 1
font-src cdn.jsdelivr.net fonts.gstatic.com cdn.almapay.com https://fonts.gstatic.com *.gstatic.com data: *.fontawesome.com https://www.google.com https://www.gstatic.com https://cdnjs.cloudflare.com applepay.cdn-apple.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.getalma.eu *.almapay.com/ *.stripe.com/ *.checkout.com/ *.adyen.com/ facebook.com www.facebook.com connect.facebook.net graph.facebook.com api.payplug.com secure.payplug.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.gstatic.com *.googleapis.com blob: facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.google.com *.google.fr *.google.ie data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.jsdelivr.net *.googleapis.com *.gstatic.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com s7.addthis.com *.google.com https://cdnjs.cloudflare.com api.payplug.com applepay.cdn-apple.com https://cdn.payplug.com/js/integrated-payment/ *.google.fr *.google.ie *.googletagmanager.com *.googleadservices.com googleads.g.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.jsdelivr.net fonts.googleapis.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com https://fonts.googleapis.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.getalma.eu *.almapay.com *.googleapis.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com ekr.zdassets.com/ http://dpm.demdex.net https://www.google.com https://www.gstatic.com *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-OcW6qYoihmlPtoVtHHLm4Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; img-src 'self' data: https: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; connect-src 'self' https: https://api-widget.soundcloud.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://geo.dailymotion.com https://embed.ted.com https://coub.com https://www.reverbnation.com https://w.soundcloud.com https://open.spotify.com https://platform.twitter.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 1
script-src sdk.privacy-center.org spir.hit.gemius.pl cnc.daktela.com widget.packeta.com *.google.com *.smartsuppchat.com *.smartsuppcdn.com *.smartsupp.com static.hotjar.com script.hotjar.com *.googletagmanager.com a.opmnstr.com *.google-analytics.com *.googleadservices.com googleads.g.doubleclick.net connect.facebook.net *.ads-twitter.com 2.adform.net s2.adform.net track.adform.net im9.cz *.im9.cz c.imedia.cz ssl.heureka.cz www.heureka.cz www.zbozi.cz c.seznam.cz 1gr.cz sgtm.signals.cz cdn.cpex.cz cdn.ampproject.org *.cxense.com *.mapy.cz *.piano.io gjstatic.blob.core.windows.net capi-automation.s3.us-east-2.amazonaws.com me.ikiosek.cz *.clarity.ms sdk.mrf.io experiences.mrf.io 'self' 'unsafe-inline' 'unsafe-eval';script-src-elem sdk.privacy-center.org spir.hit.gemius.pl cnc.daktela.com widget.packeta.com *.google.com *.smartsuppchat.com *.smartsuppcdn.com *.smartsupp.com static.hotjar.com script.hotjar.com *.googletagmanager.com a.opmnstr.com *.google-analytics.com *.googleadservices.com googleads.g.doubleclick.net connect.facebook.net *.ads-twitter.com 2.adform.net s2.adform.net track.adform.net im9.cz *.im9.cz c.imedia.cz ssl.heureka.cz www.heureka.cz www.zbozi.cz c.seznam.cz 1gr.cz sgtm.signals.cz cdn.cpex.cz cdn.ampproject.org *.cxense.com *.mapy.cz *.piano.io gjstatic.blob.core.windows.net capi-automation.s3.us-east-2.amazonaws.com me.ikiosek.cz *.clarity.ms sdk.mrf.io experiences.mrf.io 'self' 'unsafe-inline' 'unsafe-eval';style-src tagmanager.google.com accounts.google.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com *.smartsuppcdn.com translate.googleapis.com fonts.googleapis.com api.mapy.cz 'self' 'unsafe-inline';style-src-elem tagmanager.google.com accounts.google.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com *.smartsuppcdn.com translate.googleapis.com fonts.googleapis.com api.mapy.cz 'self' 'unsafe-inline';report-uri /csp 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://maps.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.gstatic.com https://www.google.com https://www.youtube.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.irclass.org; font-src 'self' https://fonts.gstatic.com https://www.irclass.org; img-src 'self' data: https://www.google-analytics.com https://ssl.google-analytics.com https://maps.gstatic.com https://maps.googleapis.com https://i.ytimg.com; frame-src 'self' https://www.youtube.com https://www.google.com; connect-src 'self' 'unsafe-inline' https://maps.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com; object-src 'none'; frame-ancestors 'self' https://staging-new.irclass.net; 1
report-to slardar-endpoint; script-src 'unsafe-eval' 'report-sample' 'nonce-903832831ab99f29cfe28fa51968c883-argus' 'strict-dynamic'; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-o4HnDFJ9JXhFTp1CFhHwqQ' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
default-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src https: wss:; report-uri https://almexx.report-uri.io/r/default/csp/reportOnly 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com *.punchout2go.com *.tradecentric.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.cybersource.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com *.punchout2go.com *.tradecentric.com *.online-metrix.net pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com *.cybersource.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.gstatic.com *.online-metrix.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page testflex.cybersource.com flex.cybersource.com *.punchout2go.com *.tradecentric.com *.online-metrix.net pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.cardinalcommerce.com *.cardinaltrusted.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.punchout2go.com *.tradecentric.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.cardinaltrusted.com *.online-metrix.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.oney.io *.staging.oney.io *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.stripe.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.hipay-tpp.com *.hipay.com *.googleapis.com *.iubenda.com *.salesmanago.pl *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.hipay.com *.googleapis.com *.oney.io *.staging.oney.io *.sharethis.com *.iubenda.com *.ads.linkedin.com sm-cdn.eu *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.stripe.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com widget.freshworks.com m2epro.freshdesk.com *.hipay-tpp.com *.hipay.com mpsnare.iesnare.com *.paypal.com *.googleapis.com *.oney.io *.staging.oney.io *.sharethis.com *.iubenda.com *.clarity.ms analytics.tiktok.com snap.licdn.com rum.hlx.page *.googletagmanager.com *.googleadservices.com *.google-analytics.com cdn.scalapay.com b2c-cdn.scalapay.com maps.googleapis.com https://cdp.wardem.ai 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.hipay.com *.googleapis.com use.typekit.net p.typekit.net *.fontawesome.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com data: mpsnare.iesnare.com *.googleapis.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com widget.freshworks.com m2epro.freshdesk.com *.hipay-tpp.com *.hipay.com wss://mpsnare.iesnare.com *.googleapis.com *.oney.io *.staging.oney.io maps.googleapis.com *.sharethis.com *.iubenda.com *.clarity.ms analytics.tiktok.com *.ads.linkedin.com analytics-ipv6.tiktokw.us *.on.aws *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.b-cdn.net 'self' data: d199010hwwdamg.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com d199010hwwdamg.cloudfront.net 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.googletagmanager.com/ *.facebook.com consentcdn.cookiebot.com d199010hwwdamg.cloudfront.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.cdninstagram.com app.usercentrics.eu *.userlike.com *.cookiebot.com *.hsforms.net *.hsforms.com 'self' data: d199010hwwdamg.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ player.vimeo.com connect.facebook.net cdnjs.cloudflare.com app.usercentrics.eu consent.cookiebot.com *.b-cdn.net userlike-cdn-widgets.s3-eu-west-1.amazonaws.com *.hsforms.net *.hsforms.com *.gstatic.com d199010hwwdamg.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.gstatic.com d199010hwwdamg.cloudfront.net 'self' 'unsafe-inline'; object-src d199010hwwdamg.cloudfront.net 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ d199010hwwdamg.cloudfront.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ api.usercentrics.eu api.userlike.com userlike-cdn-widgets.s3-eu-west-1.amazonaws.com t.elasticsuite.io *.hsforms.net *.hsforms.com d199010hwwdamg.cloudfront.net consentcdn.cookiebot.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com d199010hwwdamg.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-36vRnKfJqUIbZQ9DYr9WrQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' pxlfsn.co www.google-analytics.com maps.googleapis.com ajax.googleapis.com www.google.com google.com gstatic.com www.gstatic.com connect.facebook.net facebook.com www.moshtix.com.au; 1
font-src *.googleapis.com *.gstatic.com data: https://fonts.gstatic.com https://*.typekit.net/ *.fontawesome.com 'self' data: fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * secure.nuvei.com ppp-test.safecharge.com *.safecharge.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://*.safecharge.com https://cdn-cookieyes.com https://ade.googlesyndication.com https://cdn-int.safecharge.com https://cdn.safecharge.com https://devmobile.sccdev-qa.com https://secure.safecharge.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.facebook.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://*.fontawesome.com/ https://*.typekit.net/ https://*.googleapis.com/ https://*.chatra.io/ https://*.facebook.net/ https://*.safecharge.com https://play.google.com https://magento.com https://cdn-cookieyes.com  https://cdn.safecharge.com https://devmobile.sccdev-qa.com https://cdn-int.safecharge.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.googletagmanager.com *.facebook.net www.termsfeed.com https://player.vimeo.com https://www.youtube.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com cdn.safecharge.com secure.nuvei.com *.safecharge.com *.nuvei.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com/ https://*.safecharge.com/ https://*.typekit.net/ https://cdn.safecharge.com https://devmobile.sccdev-qa.com  https://fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com https://fonts.googleapis.com http://fonts.googleapis.com unsafe-inline assets.braintreegateway.com cdn.safecharge.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://*.safecharge.com https://*.nuvei.com/ https://play.google.com https://cdn-cookieyes.com https://log.cookieyes.com https://directory.cookieyes.com https://pagead2.googlesyndication.com  https://sdkmon.safecharge.com https://ppp-test.safecharge.com https://ppp-test.nuvei.com https://secure.safecharge.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google-analytics.com https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com secure.nuvei.com ppp-test.safecharge.com gw.safecharge.com gw-test.safecharge.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; img-src 'self' https://www.google-analytics.com; style-src 'self'; script-src 'self' https://www.google-analytics.com https://ssl.google-analytics.com; connect-src: 'self' https://www.google-analytics.com; report-uri https://www.net-ing.com/csp/; report-to csp-endpoint 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.klarnacdn.net https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.klarna.com https://www.googletagmanager.com/ *.freshchat.com www.youtube-nocookie.com js.mollie.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com *.klarna.com *.klarnaevt.com *.klarnacdn.net http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com *.disqus.com bat.bing.net *.etrusted.com *.google.de *.usercentrics.eu https://img.youtube.com https://www.mollie.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.klarna.com *.klarnacdn.net x.klarnacdn.net http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.disqus.com https://cdn.jsdelivr.net *.klarnaservices.com *.execute-api.eu-central-1.amazonaws.com bat.bing.com *.cloudflareinsights.com *.cloudfront.net *.freshchat.com *.usercentrics.eu js.mollie.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com www.xtento.com cdn.xtento.com cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://cdn.jsdelivr.net *.klarnacdn.net *.etrusted.com *.freshchat.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://maps.googleapis.com https://player.vimeo.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.klarnaservices.com *.klarna.com *.execute-api.eu-central-1.amazonaws.com bat.bing.com bat.bing.net *.usercentrics.eu *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://c6184974-9a02-46fc-a790-1e5ac6ff585e.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://app.termly.io https://widget.trustpilot.com https://cdn.userway.org https://cdn.jsdelivr.net https://snap.licdn.com https://api.mapbox.com https://*.mapbox.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://api.mapbox.com https://fonts.googleapis.com https://cdn.userway.org; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net https://api.mapbox.com https://cdn.userway.org; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://app.termly.io https://api.mapbox.com https://*.mapbox.com https://events.mapbox.com https://www.google.com https://px.ads.linkedin.com https://www.linkedin.com https://cdn.userway.org https://api.userway.org; frame-src 'self' https://app.termly.io https://widget.trustpilot.com https://www.googletagmanager.com https://td.doubleclick.net https://cdn.userway.org https://www.youtube.com https://www.google.com; worker-src 'self' blob:; media-src 'self' data: https:; report-uri https://3fb93f8892cda2990f85db743ae6f587.report-uri.com/r/d/csp/enforce; report-to csp-endpoint report-to https://3fb93f8892cda2990f85db743ae6f587.report-uri.com/r/d/csp/enforce; report-uri https://3fb93f8892cda2990f85db743ae6f587.report-uri.com/r/d/csp/enforce; 1
font-src *.googleapis.com *.gstatic.com *.fontawesome.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.authorize.net *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.authorize.net *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com store.paradoxlabs.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com *.cdninstagram.com *.fbcdn.net maps.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.authorize.net *.cloudflare.com ajax.googleapis.com *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net https://www.googletagmanager.com tagmanager.google.com *.instagram.com *.maxmind.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com downloads.mailchimp.com *.fontawesome.com *.tagmanager.google.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com *.authorize.net *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app https://www.google-analytics.com *.instagram.com *.googleusercontent.com *.mmapiws.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; font-src 'self'; img-src 'self'; script-src 'self'; style-src 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-94tl99pJVYyxMocX3jKJ3Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'nonce-JF23Wov1YEhS4+J2xAfVpA==' cdnjs.cloudflare.com ajax.aspnetcdn.com cdnsrc.asp.net *.googleapis.com maxcdn.bootstrapcdn.com *.cloudfront.net js.stripe.com js.braintreegateway.com *.cardconnect.com *.google.com www.gstatic.com www.googletagmanager.com googletagmanager.com www.google-analytics.com google-analytics.com analytics.barnebys.com www.facebook.com *.hs-scripts.com app.hoversignal.com static.zdassets.com s.adroll.com connect.facebook.net cdn.leadmanagerfx.com cdn.now4real.com brands.metaads.io cdn.rlets.com www.datadoghq-browser-agent.com www.clarity.ms analytics.tiktok.com pi.pardot.com cdn.pardot.com www.googleadservices.com analytics.ahrefs.com cdn.userway.org *.addthis.com s3.amazonaws.com cdn.ably.com chat-assets.frontapp.com static.ctctcdn.com use.typekit.net js.createsend1.com fast.fonts.net googleads.g.doubleclick.net stats.g.doubleclick.net consent.cookiebot.com scripts.clarity.ms b.clarity.ms manychat.com widget.manychat.com mccdn.me s.pinimg.com js.hs-banner.com js.usemessages.com js.hscollectedforms.net js.hs-analytics.net js-ap1.hs-banner.com js-ap1.hscollectedforms.net js-ap1.hs-analytics.net js-ap1.hsadspixel.net ct.pinterest.com *.zendesk.com support.hdhwine.com support.hdhauctions.com diffuser-cdn.app-us1.com prism.app-us1.com www.youtube.com integrator.swipetospin.com cdn.impel.io static.opentok.com *.nanocosmos.de *.auth0.com static.addtoany.com; style-src 'self' 'nonce-JF23Wov1YEhS4+J2xAfVpA==' 'sha256-WMSGf2xDz2B+SRKrg/Iu1zsXSOfKnRhzYxp8SaGSGUE=' 'sha256-wIuuK5ba7OAcKAanTmQNfXsquALURJjbDNey9fYOgrk=' *.googleapis.com maxcdn.bootstrapcdn.com *.auctionmobility.com cdn.userway.org cdnjs.cloudflare.com *.fontawesome.com static.ctctcdn.com fast.fonts.net static.zdassets.com 'sha256-tHyZ4F/uujwtAEljfL1u0tyDYN85EgDaR/Yey6+DL/g=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' cdn.impel.io 'sha256-VFYCG8ZmScOy7Y1AQEV7fyQSjGKI9IQkRBGylsNzBPM=' *.zendesk.com js.usemessages.com; img-src 'self' data: blob: *.auctionmobility.com cdn.userway.org *.googletagmanager.com www.google-analytics.com www.googletagmanager.com *.google-analytics.com google.com www.google.com googleads.g.doubleclick.net stats.g.doubleclick.net www.facebook.com connect.facebook.net *.adswizz.com us-18668-adswizz.attribution.adswizz.com px.ads.linkedin.com www.linkedin.com track.hubspot.com forms.hsforms.com track-ap1.hubspot.com forms-ap1.hsforms.com www.googleadservices.com googleadservices.com www.google.co.in www.google.co.jp www.google.com.au www.google.co.kr www.google.com.sg www.google.co.uk www.google.de www.google.fr www.google.it www.google.es www.google.nl www.google.be www.google.se www.google.dk www.google.fi www.google.ie www.google.pl www.google.pt www.google.gr www.google.cz www.google.hu www.google.ro www.google.at www.google.com.br www.google.ca www.google.com.mx www.google.com.ar www.google.cl www.google.co.ve www.google.co.za www.google.ae www.google.com.eg www.google.co.il www.google.com.tr chat.frontapp.com chat-assets.frontusercontent.com auctionmobility-web-static.s3.amazonaws.com wwwimages.adobe.com *.googleapis.com static.addtoany.com *.googlesyndication.com *.zendesk.com www.biddinghereonline.com; font-src 'self' data: fonts.gstatic.com maxcdn.bootstrapcdn.com *.fontawesome.com *.auctionmobility.com cdn.userway.org chat-assets.frontapp.com; connect-src 'self' api.stripe.com api.braintreegateway.com *.braintreegateway.com *.cardconnect.com *.ably.io ably.com *.userway.org *.google-analytics.com google-analytics.com www.googletagmanager.com googletagmanager.com cdnjs.cloudflare.com *.auctionmobility.com static.ctctcdn.com listgrowth.ctctcdn.com api.rollbar.com *.braintree-api.com *.google.com www.facebook.com stats.g.doubleclick.net consentcdn.cookiebot.com analytics.tiktok.com *.clarity.ms analytics.barnebys.net ct.pinterest.com www.googleadservices.com googleads.g.doubleclick.net ekr.zdassets.com *.zendesk.com wss://*.zendesk.com api.hubspot.com api-ap1.hubapi.com forms.hscollectedforms.net forms-ap1.hscollectedforms.net connect.facebook.net capig.madgicx.ai zjlrnada.use.stape.io px.ads.linkedin.com s.pinimg.com www.google.co.in www.google.co.jp www.google.com.au www.google.co.kr www.google.com.sg www.google.co.uk www.google.de www.google.fr www.google.it www.google.es www.google.nl www.google.be www.google.se www.google.dk www.google.fi www.google.ie www.google.pl www.google.pt www.google.gr www.google.cz www.google.hu www.google.ro www.google.at www.google.com.br www.google.ca www.google.com.mx www.google.com.ar www.google.cl www.google.co.ve www.google.co.za www.google.ae www.google.com.eg www.google.co.il www.google.com.tr *.bugsnag.com *.frontapp.com us-west-1-chat-server.frontapp.com us-west-2-chat-server.frontapp.com eu-west-1-chat-server.frontapp.com *.browser-intake-datadoghq.com wss://front-us-realtime.ably.io wss://front-eu-realtime.ably.io internet-up.ably-realtime.com timer.auctionatlas.com wss://*.auctionmobility.com:* cdn.impel.io *.opentok.com *.tokbox.com wss://*.tokbox.com wss://*.ably.net static.addtoany.com cdn.now4real.com; frame-src 'self' www.google.com js.stripe.com *.cardconnect.com *.braintreegateway.com cdn.userway.org consentcdn.cookiebot.com ct.pinterest.com app.hubspot.com *.zendesk.com zjlrnada.use.stape.io recaptcha.google.com www.gstatic.com cdn.impel.io www.youtube.com static.addtoany.com www.facebook.com cdn.now4real.com 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net www.hslchairs.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.hslchairs.com 'self' 'unsafe-inline'; frame-ancestors www.hslchairs.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.trustpilot.com try.access.worldpay.com access.worldpay.com *.googletagmanager.com www.hslchairs.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com * https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com www.hslchairs.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com * *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.trustpilot.com try.access.worldpay.com access.worldpay.com *.googletagmanager.com tagmanager.google.com www.hslchairs.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.trustpilot.com tagmanager.google.com fonts.google.com www.hslchairs.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.hslchairs.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.ideal-postcodes.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ pagead2.googlesyndication.com *.doubleclick.net www.google.co.uk apikeys.civiccomputing.com ct.pinterest.com pixel.quantserve.com *.infinity-tracking.com *.pingdom.net *.nfon-cchub.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googletagmanager.com www.hslchairs.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com www.hslchairs.com http: https: blob: 'self' 'unsafe-inline'; default-src www.hslchairs.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-2VKxFU0KVfHQOugvv_rFkw' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.cmecorp.com *.olark.com *.google.com *.youtube.com doubleclick.net *.doubleclick.net googletagmanager.com google-analytics.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cmecorp.com *.olark.com *.google.com *.youtube.com doubleclick.net *.doubleclick.net googletagmanager.com google-analytics.com *.gstatic.com *.googleapis.com *.authorize.net 'self' 'unsafe-inline'; frame-ancestors *.cmecorp.com *.olark.com *.google.com *.youtube.com doubleclick.net *.doubleclick.net googletagmanager.com google-analytics.com *.gstatic.com *.googleapis.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.cmecorp.com *.olark.com doubleclick.net *.doubleclick.net googletagmanager.com google-analytics.com *.gstatic.com *.googleapis.com data: *.hubspot.com *.hs-sites.com *.hubspot.net play.hubspotvideo.com *.hsforms.net *.hsforms.com *.authorize.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.cmecorp.com *.olark.com *.google.com doubleclick.net *.doubleclick.net googletagmanager.com google-analytics.com *.googleapis.com js.hscta.net no-cache.hubspot.com *.hubspot.com *.hubspotusercontent.net *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspot.net cdn2.hubspot.net *.hsforms.net *.hsforms.com snap.licdn.com px.ads.linkedin.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.cmecorp.com *.olark.com doubleclick.net *.doubleclick.net googletagmanager.com google-analytics.com *.gstatic.com *.googleapis.com *.hsadspixel.net *.hs-analytics.net js.hscta.net *.hubspot.com static.hsappstatic.net *.usemessages.com *.hs-banner.com *.hubspotusercontent.net *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspot.net *.hscollectedforms.net *.hsleadflows.net *.hsforms.net *.hsforms.com *.hs-scripts.com *.hubspotfeedback.com feedback.hubapi.com snap.licdn.com *.shopperapproved.com *.searchspring.net *.authorize.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cmecorp.com *.olark.com *.google.com *.youtube.com doubleclick.net *.doubleclick.net googletagmanager.com google-analytics.com *.gstatic.com *.googleapis.com *.hubspotusercontent.net *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net cdn2.hubspot.net 'self' 'unsafe-inline'; object-src *.cmecorp.com *.olark.com *.google.com *.youtube.com doubleclick.net *.doubleclick.net googletagmanager.com google-analytics.com *.gstatic.com *.googleapis.com 'self' 'unsafe-inline'; media-src *.adobe.com *.cmecorp.com *.olark.com *.google.com *.youtube.com doubleclick.net *.doubleclick.net googletagmanager.com google-analytics.com *.gstatic.com *.googleapis.com 'self' 'unsafe-inline'; manifest-src *.cmecorp.com *.olark.com *.google.com *.youtube.com doubleclick.net *.doubleclick.net googletagmanager.com google-analytics.com *.gstatic.com *.googleapis.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.cmecorp.com *.olark.com *.youtube.com doubleclick.net *.doubleclick.net googletagmanager.com google-analytics.com *.gstatic.com *.googleapis.com *.hubapi.com js.hscta.net *.hubspot.com *.hs-banner.com *.hscollectedforms.net *.hsforms.com *.searchspring.io px.ads.linkedin.com *.authorize.net 'self' 'unsafe-inline'; child-src *.cmecorp.com *.olark.com *.google.com *.youtube.com doubleclick.net *.doubleclick.net googletagmanager.com google-analytics.com *.gstatic.com *.googleapis.com *.hsforms.com http: https: blob: 'self' 'unsafe-inline'; default-src *.cmecorp.com *.olark.com *.google.com *.youtube.com doubleclick.net *.doubleclick.net googletagmanager.com google-analytics.com *.gstatic.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.cmecorp.com 'self' 'unsafe-inline'; 1
script-src https://api.segment.io https://player.vimeo.com https://www.linkedin.com 'self' https://stats.g.doubleclick.net https://checkoutshopper-test.adyen.com/ https://pal-test.adyen.com https://company.target.com https://cdn.cookielaw.org https://*.clickagy.com/ https://tag.demandbase.com https://ws-assets.zoominfo.com https://aorta.clickagy.com/ https://js.zi-scripts.com https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location https://id.rlcdn.com https://d.la4-c1cs-phx.salesforceliveagent.com https://cdn.evgnet.com/ https://data.privacy.ensighten.com https://cdn.segment.com/ https://view.ceros.com https://www.youtube.com https://pay.google.com https://c.clicktale.net https://www.fidelity.com blob: https://snap.licdn.com https://c.la4-c1cs-phx.salesforceliveagent.com/content/g/js/46.0/deployment.js https://splashthat.com https://cdnssl.clicktale.net https://na5.thunderhead.com https://rlcdn.com https://*.zoominfo.com 'report-sample' https://service.force.com/embeddedservice/ https://api.demandbase.com/ 'unsafe-eval' https://scripts.demandbase.com https://segments.company-target.com 'unsafe-inline' https://payments.salesforce.com/ https://3824016.fls.doubleclick.net https://fidelitybrokerage.us-4.evergage.com/ https://d.company-target.com https://checkoutshopper-live.adyen.com/ https://cdn.content.aws-prod1-useast1.aws.sfdc.cl/ https://cdn.evgnet.com https://match.prod.bidr.io https://na5.cdn.thunderhead.com https://www.gstatic.com/recaptcha/ https://uip.canary.lwc.dev https://geolocation.onetrust.com https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/ https://assets.fidelity.com/fonts https://k-aus1.clicktale.net https://nexus-test.ensighten.com/ https://events.fidelityworkplace.com https://assets.fidelityworkplace.com https://cdn.evergage.com/ https://www.google.com/recaptcha/ https://js.stripe.com/ https://dmt.fidelityworkplace.com https://*.qualtrics.com https://px.ads.linkedin.com https://bidr.io https://app.contentsquare.com https://t.contentsquare.net https://privacyportal.onetrust.com https://www.googletagmanager.com import: https://api.company-target.com https://www.google-analytics.com *.salesforce.com https://www.paypal.com/sdk/js https://nexus.ensighten.com; report-to sfdc-csp-ep; report-uri https://fmr.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D300000000ZLP&networkId=0DM500000008Sgs&type=communities 1
font-src *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net js.mollie.com *.sendcloud.sc *.jsdelivr.net https://www.googletagmanager.com https://td.doubleclick.net https://app.hubspot.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://www.mollie.com *.amazonaws.com *.hsforms.net *.hsforms.com 'self' data: https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://track.hubspot.com https://www.google.de https://www.google.nl https://www.google.be https://www.google.pl https://pagead2.googlesyndication.com https://imgproxy.vendic.dev data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://maps.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com https://cdn.jsdelivr.net js.mollie.com *.sendcloud.sc *.jsdelivr.net *.hsforms.net *.hsforms.com *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://static.klaviyo.com https://cdn.jsdelivr.net *.sendcloud.sc *.jsdelivr.net *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com t.elasticsuite.io *.hsforms.net *.hsforms.com https://www.google.com https://www.google-analytics.com https://analytics.google.com https://pagead2.googlesyndication.com https://stats.g.doubleclick.net https://api.hubspot.com https://forms.hscollectedforms.net https://static.hsappstatic.net https://p2iqhncxyh.execute-api.eu-central-1.amazonaws.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
img-src data: 'self' www.googletagmanager.com;style-src https://cdn-images.mailchimp.com https://cdnjs.cloudflare.com/ajax/libs/ng-dialog/ https://webservices.memorix.nl https://webservices8.memorix.nl 'self' 'unsafe-inline';script-src https://cdnjs.cloudflare.com/ajax/libs/jquery/ https://connect.facebook.net https://consent.studio https://eu.libraryh3lp.com https://images.memorix.nl https://webservices.memorix.nl https://webservices8.memorix.nl https://www.googletagmanager.com 'self' 'unsafe-eval' 'unsafe-inline';connect-src https://eu.libraryh3lp.com 'self' www.google.com www.googletagmanager.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.detecon.com *.stc.info *.stc365.de *.hubspot.com *.hsforms.com *.hsforms.net *.hs-scripts.com *.hs-analytics.net *.hs-banner.com *.hubspotusercontent.com *.usemessages.com *.hubspot.net; style-src 'self' 'unsafe-inline' *.detecon.com *.stc.info *.stc365.de *.hubspot.com *.hsforms.com *.hsforms.net *.hs-scripts.com *.hs-analytics.net *.hs-banner.com *.hubspotusercontent.com *.usemessages.com *.hubspot.net fonts.googleapis.com; img-src 'self' data: blob: *.detecon.com *.stc.info *.stc365.de *.hubspot.com *.hsforms.com *.hsforms.net *.hs-scripts.com *.hs-analytics.net *.hs-banner.com *.hubspotusercontent.com *.usemessages.com *.hubspot.net *.gravatar.com *.wp.com; font-src 'self' fonts.gstatic.com data:; frame-src 'self' *.detecon.com *.stc.info *.stc365.de *.hubspot.com *.hsforms.com *.hsforms.net *.hs-scripts.com *.hs-analytics.net *.hs-banner.com *.hubspotusercontent.com *.usemessages.com *.hubspot.net *.youtube.com *.vimeo.com; frame-ancestors 'self' *.detecon.com *.stc.info *.stc365.de *.hubspot.com *.hsforms.com *.hsforms.net *.hs-scripts.com *.hs-analytics.net *.hs-banner.com *.hubspotusercontent.com *.usemessages.com *.hubspot.net; connect-src 'self' *.detecon.com *.stc.info *.stc365.de *.hubspot.com *.hsforms.com *.hsforms.net *.hs-scripts.com *.hs-analytics.net *.hs-banner.com *.hubspotusercontent.com *.usemessages.com *.hubspot.net; media-src 'self' *.detecon.com *.stc.info *.stc365.de *.hubspot.com *.hsforms.com *.hsforms.net *.hs-scripts.com *.hs-analytics.net *.hs-banner.com *.hubspotusercontent.com *.usemessages.com *.hubspot.net; base-uri 'self'; form-action 'self' *.hsforms.net *.hsforms.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.jquery.com https://yandex.st https://mc.yandex.ru https://mc.yandex.com https://api-maps.yandex.ru https://app.daily-grow.com https://translate.google.com https://translate.googleapis.com https://translate-pa.googleapis.com https://translate.yandex.net https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://www.gstatic.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https: http:; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://translate.googleapis.com https://translate-pa.googleapis.com https://app.daily-grow.com https://api-maps.yandex.ru; frame-src 'self' https://nok.minzdrav.gov.ru https://yandex.ru https://translate.google.com https://forms.yandex.ru https://www.youtube.com https://youtube.com https://www.youtube-nocookie.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self' 1
default-src * 'unsafe-hashes' 'unsafe-inline' data: 1
object-src 'none';base-uri 'self';script-src 'nonce-j5ACcvm4ApVF2NS7dNuDOQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.klarnacdn.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.klarna.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.gstatic.com *.doubleclick.net https://firebasestorage.googleapis.com flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js chimpstatic.com downloads.mailchimp.com *.list-manage.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.gstatic.com *.googletagmanager.com *.doubleclick.net *.avada.io maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com *.klarnacdn.net *.googleapis.com *.googletagmanager.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.google-analytics.com *.google.com *.doubleclick.net *.googlesyndication.com https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://use.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com www.google.com *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ www.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.disqus.com *.avada.io *.shopify.com *.alothemes.com *.magepow.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com maps.googleapis.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://use.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com https://fonts.googleapis.com assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com https://olegnax.com https://api.instagram.com https://graph.instagram.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com places.googleapis.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' 'unsafe-inline' https://static.b-ite.com https://cs-assets.b-ite.com https://code.jquery.com https://beteiligung.nrw.de/portal/widgets/widgets-api.js https://api.service-digitale-verwaltung.de/ https://softwareplattform.test.115.de cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.etracker.com platform.instagram.com platform.twitter.com sf1-eu.readspeaker.com www.etracker.de; script-src-elem 'self' 'unsafe-inline' https://static.b-ite.com https://cs-assets.b-ite.com https://code.jquery.com https://beteiligung.nrw.de/portal/widgets/widgets-api.js https://api.service-digitale-verwaltung.de/ https://softwareplattform.test.115.de cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.etracker.com platform.instagram.com platform.twitter.com sf1-eu.readspeaker.com www.etracker.de; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://api.service-digitale-verwaltung.de/ https://use.typekit.net/ https://p.typekit.net/ https://softwareplattform.test.115.de https://cdnjs.cloudflare.com sf1-eu.readspeaker.com; style-src-elem 'self' 'unsafe-inline' https://www.gstatic.com https://api.service-digitale-verwaltung.de/ https://use.typekit.net/ https://p.typekit.net/ https://softwareplattform.test.115.de https://cdnjs.cloudflare.com sf1-eu.readspeaker.com 1
default-src 'self'; script-src 'self' 'nonce-09eaffeb7ef64521aad36dbfb5f55771' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://challenges.cloudflare.com https://acscdn.com https://*.acscdn.com https://adcash.com https://*.adcash.com https://youradexchange.com https://*.youradexchange.com https://usrpubtrk.com https://*.usrpubtrk.com https://pagead2.googlesyndication.com https://*.googlesyndication.com https://www.googletagservices.com https://securepubads.g.doubleclick.net https://googleads.g.doubleclick.net https://*.doubleclick.net https://*.sonobi.com https://*.risecodes.com https://ssp.cadent.com https://*.cadent.tv https://*.cadent.com https://*.yahoo.com https://*.yimg.com https://*.themediagrid.com https://*.id5-sync.com https://bartererfaxtingling.com https://*.bartererfaxtingling.com https://deductgreedyheadroom.com https://*.deductgreedyheadroom.com https://detoxifylagoonsnugness.com https://*.detoxifylagoonsnugness.com https://guidepaparazzisurface.com https://*.guidepaparazzisurface.com https://magsrv.com https://*.magsrv.com https://exdynsrv.com https://*.exdynsrv.com https://realsrv.com https://*.realsrv.com https://pemsrv.com https://*.pemsrv.com https://exoclick.com https://*.exoclick.com https://exosrv.com https://*.exosrv.com https://aqle3.com https://*.aqle3.com https://monetag.com https://*.monetag.com; script-src-elem 'self' 'nonce-09eaffeb7ef64521aad36dbfb5f55771' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://challenges.cloudflare.com https://acscdn.com https://*.acscdn.com https://adcash.com https://*.adcash.com https://youradexchange.com https://*.youradexchange.com https://usrpubtrk.com https://*.usrpubtrk.com https://pagead2.googlesyndication.com https://*.googlesyndication.com https://www.googletagservices.com https://securepubads.g.doubleclick.net https://googleads.g.doubleclick.net https://*.doubleclick.net https://*.sonobi.com https://*.risecodes.com https://ssp.cadent.com https://*.cadent.tv https://*.cadent.com https://*.yahoo.com https://*.yimg.com https://*.themediagrid.com https://*.id5-sync.com https://bartererfaxtingling.com https://*.bartererfaxtingling.com https://deductgreedyheadroom.com https://*.deductgreedyheadroom.com https://detoxifylagoonsnugness.com https://*.detoxifylagoonsnugness.com https://guidepaparazzisurface.com https://*.guidepaparazzisurface.com https://magsrv.com https://*.magsrv.com https://exdynsrv.com https://*.exdynsrv.com https://realsrv.com https://*.realsrv.com https://pemsrv.com https://*.pemsrv.com https://exoclick.com https://*.exoclick.com https://exosrv.com https://*.exosrv.com https://aqle3.com https://*.aqle3.com https://monetag.com https://*.monetag.com; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; img-src 'self' https: data: blob: about:; font-src 'self' data:; frame-src https://acscdn.com https://*.acscdn.com https://adcash.com https://*.adcash.com https://youradexchange.com https://*.youradexchange.com https://pagead2.googlesyndication.com https://*.googlesyndication.com https://adtrafficquality.google https://*.adtrafficquality.google https://challenges.cloudflare.com https://bartererfaxtingling.com https://*.bartererfaxtingling.com https://deductgreedyheadroom.com https://*.deductgreedyheadroom.com https://detoxifylagoonsnugness.com https://*.detoxifylagoonsnugness.com https://guidepaparazzisurface.com https://*.guidepaparazzisurface.com https://magsrv.com https://*.magsrv.com https://exdynsrv.com https://*.exdynsrv.com https://realsrv.com https://*.realsrv.com https://pemsrv.com https://*.pemsrv.com https://exoclick.com https://*.exoclick.com https://exosrv.com https://*.exosrv.com https://aqle3.com https://*.aqle3.com https://monetag.com https://*.monetag.com; media-src 'self' blob: https: https://youradexchange.com https://*.youradexchange.com; worker-src 'self' blob:; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://challenges.cloudflare.com https://acscdn.com https://*.acscdn.com https://adcash.com https://*.adcash.com https://youradexchange.com https://*.youradexchange.com https://adexchangerapid.com https://*.adexchangerapid.com https://adexchangeclear.com https://*.adexchangeclear.com https://usrpubtrk.com https://*.usrpubtrk.com https://pagead2.googlesyndication.com https://*.googlesyndication.com https://securepubads.g.doubleclick.net https://googleads.g.doubleclick.net https://*.doubleclick.net https://*.sonobi.com https://*.risecodes.com https://ssp.cadent.com https://*.cadent.tv https://*.cadent.com https://*.yahoo.com https://*.yimg.com https://*.themediagrid.com https://id5-sync.com https://*.id5-sync.com https://*.eu-1-id5-sync.com https://adtrafficquality.google https://*.adtrafficquality.google https://bartererfaxtingling.com https://*.bartererfaxtingling.com https://deductgreedyheadroom.com https://*.deductgreedyheadroom.com https://detoxifylagoonsnugness.com https://*.detoxifylagoonsnugness.com https://guidepaparazzisurface.com https://*.guidepaparazzisurface.com https://magsrv.com https://*.magsrv.com https://exdynsrv.com https://*.exdynsrv.com https://realsrv.com https://*.realsrv.com https://pemsrv.com https://*.pemsrv.com https://exoclick.com https://*.exoclick.com https://exosrv.com https://*.exosrv.com https://aqle3.com https://*.aqle3.com https://monetag.com https://*.monetag.com; object-src 'none'; base-uri 'self'; form-action 'self' https://terabox.com https://*.terabox.com https://1024terabox.com https://*.1024terabox.com https://1024tera.com https://*.1024tera.com https://4funbox.com https://*.4funbox.com https://teraboxapp.com https://*.teraboxapp.com https://freeterabox.com https://*.freeterabox.com https://terabox.app https://*.terabox.app; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com oppwa.com *.oppwa.com peachpayments.com *.peachpayments.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://widgets.payflex.co.za oppwa.com *.oppwa.com *.peachpayments.com *.eu-west-1.amazonaws.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://polyfill-fastly.io https://browser.sentry-cdn.com https://widgets.payflex.co.za https://partpayassets.blob.core.windows.net *.oppwa.com oppwa.com *.peachpayments.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com maxcdn.bootstrapcdn.com https://widgets.payflex.co.za oppwa.com *.oppwa.com *.peachpayments.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://*.ingest.sentry.io oppwa.com *.oppwa.com *.peachpayments.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' s.adroll.com d.adroll.com omnisnippet1.com load.gtm.gaminggiveaways.co.uk cdn.onesignal.com api.onesignal.com pay.dnapayments.com cdn.dnapayments.com analytics.tiktok.com connect.facebook.net bat.bing.com cdn-cookieyes.com cdn-4.convertexperiments.com www.redditstatic.com stapecdn.com w2ztvj.gaminggiveaways.co.uk static.ads-twitter.com tr.snapchat.com sc-static.net www.clarity.ms scripts.clarity.ms googleads.g.doubleclick.net www.paypal.com c.paypal.com cdn.shortpixel.ai applepay.cdn-apple.com stats.wp.com www.googletagmanager.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.soundestlink.com use.typekit.net p.typekit.net onesignal.com; font-src 'self' data: fonts.gstatic.com use.typekit.net fonts.soundestlink.com applepay.cdn-apple.com; img-src 'self' data: alb.reddit.com cdn.shortpixel.ai d.adroll.com ipv4.d.adroll.com analytics.twitter.com t.co bat.bing.com bat.bing.net tr.snapchat.com cdn-cookieyes.com www.google.com www.google.co.uk www.google.gr www.google.lu www.facebook.com forms.soundestlink.com wt.omnisendlink.com b.stats.paypal.com c6.paypal.com c.paypal.com www.googleadservices.com googleads.g.doubleclick.net stats.g.doubleclick.net www.googletagmanager.com load.gtm.gaminggiveaways.co.uk img.onesignal.com secure.gravatar.com www.gravatar.com pagead2.googlesyndication.com pixel.wp.com c.clarity.ms; connect-src 'self' cdn-cookieyes.com log.cookieyes.com directory.cookieyes.com analytics.tiktok.com analytics-ipv6.tiktokw.us tr.snapchat.com tr6.snapchat.com pagead2.googlesyndication.com www.google.com www.google.co.uk region1.analytics.google.com analytics.google.com region1.google-analytics.com www.google-analytics.com bat.bing.com bat.bing.net forms.soundestlink.com wt.omnisendlink.com gtm.gaminggiveaways.co.uk load.gtm.gaminggiveaways.co.uk w2ztvj.gaminggiveaways.co.uk pixel-config.reddit.com alb.reddit.com googleads.g.doubleclick.net stats.g.doubleclick.net ad.doubleclick.net *.clarity.ms api.onesignal.com www.paypal.com pay.dnapayments.com sentry.dnapayments.com o511301.ingest.us.sentry.io www.facebook.com connect.facebook.net analytics.twitter.com t.co d.adroll.com www.googleadservices.com fonts.googleapis.com www.googletagmanager.com; frame-src 'self' tr.snapchat.com https://www.facebook.com c.paypal.com www.paypal.com pay.dnapayments.com; worker-src 'self' blob:; report-uri https://o4508613773688832.ingest.de.sentry.io/api/4511472593797200/security/?sentry_key=0fce8a8f1d20d47f884bf90093ffb73e 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com https://fonts.gstatic.com *.tawk.to 'self' data: https://fonts.bunny.net *.googleapis.com maxcdn.bootstrapcdn.com *.sagepay.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cashfree.com *.cardinalcommerce.com *.ccavenue.com *.twitter.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.sagepay.com *.arcot.com *.analytics.com *.googleadservices.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.cashfree.com *.cardinalcommerce.com www.googletagmanager.com *.twitter.com *.addthis.com *.doubleclick.net *.embedly.com *.rvvup.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.addtoany.com *.hotjar.com *.pinterest.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.sagepay.com *.arcot.com *.analytics.com *.googleadservices.com https://lightwidget.com *.chatra.io *.lightwidget.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cashfree.com https://images.unsplash.com *.google.com *.googleadservices.com *.googletagmanager.com *.ccavenue.com *.cloudflare.com *.klarna.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.co.in *.jsdelivr.net www.independent4life.co.uk www.logicrays.com www.magecomp.com *.amazonaws.com *.securitymetrics.com https://firebasestorage.googleapis.com *.pinterest.com https://meetanshi.com/media/logo.png www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.sagepay.com ebizmarts-website.s3.amazonaws.com *.analytics.com *.vega.co.in https://cdn-media.vega.co.in https://cdnmedia.vega.co.in https://breeze.vega.co.in https://breeze-media.vega.co.in data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.cashfree.com *.cardinalcommerce.com *.googleapis.com https://player.vimeo.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu embed.tawk.to cdn.jsdelivr.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com *.addtoany.com *.adobe.com *.hotjar.com *.clarity.ms *.avada.io *.shopify.com *.fontawesome.com *.pinterest.com www.facebook.com graph.facebook.com business.facebook.com *.sagepay.com *.arcot.com *.analytics.com *.lightwidget.com *.chatra.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.jsdelivr.net *.google.com *.addtoany.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.sagepay.com *.analytics.com *.googleadservices.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.granberg.se 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.cashfree.com *.googleapis.com https://player.vimeo.com *.googletagmanager.com stats.g.doubleclick.net *.cloudflare.com *.twitter.com *.twimg.com *.tawk.to www.google-analytics.com *.doubleclick.net *.amazonaws.com *.securitymetrics.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com wss://ws.hotjar.com/ *.clarity.ms *.hotjar.io *.googleadservices.com https://get.geojs.io *.avada.io http://dpm.demdex.net *.addtoany.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.sagepay.com *.arcot.com *.analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com *.gstatic.com 'self' data: *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com *.mercadolibre.com https://www.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.paypal.com www.sandbox.paypal.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.weltpixel.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de www.apptrian.com www.facebook.com *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar connect.facebook.net graph.facebook.com business.facebook.com www.paypal.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: *.gstatic.com *.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com www.facebook.com connect.facebook.net graph.facebook.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com *.mlstatic.com *.google.com https://www.gstatic.com *.avada.io business.facebook.com www.sandbox.paypal.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.gstatic.com https://www.googletagmanager.com tagmanager.google.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com unsafe-inline *.googleapis.com *.gstatic.com tagmanager.google.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com www.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de www.apptrian.com connect.facebook.net graph.facebook.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com *.mercadopago.com www.facebook.com business.facebook.com www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.google-analytics.com https://www.google-analytics.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com one.elavonpay.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
child-src 'self' https://*.qualified.com; default-src 'self'; frame-src 'self' https://9628652.fls.doubleclick.net https://td.doubleclick.net https://js.driftt.com https://*.qualified.com https://a8447815042.cdn-pci.optimizely.com https://ct.pinterest.com https://tealium-f.squarecdn.com; worker-src 'self' blob:; connect-src 'self' https://assets.ctfassets.net https://api.broadway.squareup.com https://campaign-hub-production-f.squarecdn.com https://api.squareup.com/v1/cdp/batch https://api.squarestagingexternal.com/v1/cdp/batch https://api.squarestagingexternal.com https://api.squareup.com https://api.squareupstaging.com *.contentsquare.net https://capi.squareup.com https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com https://stats.g.doubleclick.net https://facebook.com https://www.facebook.com https://googleads.g.doubleclick.net http://www.google-analytics.com https://www.google-analytics.com https://google.com https://www.google.com https://us-central1-sq-sgtm-prod.cloudfunctions.net https://www.googletagmanager.com http://images.ctfassets.net https://images.ctfassets.net http://424-iab-218.mktoresp.com https://424-iab-218.mktoresp.com https://xms2-marketo.beta.stage.sqprod.co https://424-iab-218.mktoutil.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://logx.optimizely.com https://ct.pinterest.com https://conversions-config.reddit.com https://pixel-config.reddit.com https://www.redditstatic.com *.ingest.us.sentry.io *.6sc.co https://api.sprig.com https://squareupstaging.com https://visitor-scoring-new.marketlinc.com https://api.chilipiper.com https://squareinc-sandbox.chilipiper.com https://squareinc.chilipiper.com https://www.workwithsquare.com wss://*.qualified.com https://*.qualified.com https://pw-renderer-production-c.squarecdn.com localhost:*; font-src 'self' https://cash-f.squarecdn.com https://square-fonts-production-f.squarecdn.com; img-src 'self' data: blob: https://ib.adnxs.com https://assets.ctfassets.net https://cdn.blisspointmedia.com https://campaign-hub-production-f.squarecdn.com *.contentsquare.net https://ad.doubleclick.net https://facebook.com https://www.facebook.com https://google.com https://www.google.com https://adservice.google.com https://googleads.g.doubleclick.net http://www.google-analytics.com https://www.google-analytics.com https://*.g.doubleclick.net https://www.googletagmanager.com http://images.ctfassets.net https://images.ctfassets.net https://px.ads.linkedin.com https://cdn.cookielaw.org https://pixel.pointmediatracker.com https://alb.reddit.com *.6sc.co https://api.squareup.com https://api.squareupstaging.com https://insight.adsrvr.org https://match.adsrvr.org https://*.qualified.com https://pw-renderer-production-c.squarecdn.com; manifest-src 'self' https://pw-renderer-production-c.squarecdn.com; media-src 'self' mediastream: https://assets.ctfassets.net https://js.driftt.com http://videos.ctfassets.net https://videos.ctfassets.net https://*.qualified.com; script-src 'self' *.contentsquare.net https://www.datadoghq-browser-agent.com https://js.driftt.com https://*.qualified.com https://connect.facebook.net https://www.googleadservices.com https://googleads.g.doubleclick.net http://www.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com https://campaign-hub-production-f.squarecdn.com https://lift-ai-js.marketlinc.com https://martech-development-c.squarecdn.com https://martech-production-c.squarecdn.com https://martech-staging-c.squarecdn.com http://munchkin.marketo.net https://munchkin.marketo.net https://cdn.cookielaw.org https://a8447815042.cdn-pci.optimizely.com https://s.pinimg.com https://ct.pinterest.com https://pw-renderer-production-c.squarecdn.com https://pw-renderer-staging-c.squarecdn.com https://pwt-production-c.squarecdn.com https://pwt-staging-c.squarecdn.com https://sales-bridge-production-c.squarecdn.com https://sales-bridge-staging-c.squarecdn.com https://squareinc-sandbox.chilipiper.com https://squareinc.chilipiper.com https://www.workwithsquare.com https://www.redditstatic.com *.6sc.co https://cdn.sprig.com https://xms-production-f.squarecdn.com https://www.youtube.com https://pw-renderer-production-c.squarecdn.com 'nonce-JpoqNghKvRVKrLazGGjopQ=='; style-src 'self' https://square-fonts-production-f.squarecdn.com https://sales-bridge-production-c.squarecdn.com https://sales-bridge-staging-c.squarecdn.com 'unsafe-inline' https://*.qualified.com https://pw-renderer-production-c.squarecdn.com; frame-ancestors 'self' https://app.contentful.com; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubd9af00759e65a48ba7ee3ff1dfa4260b&dd-evp-origin=content-security-policy&ddsource=csp-report; report-to browser-intake-datadoghq 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:; 1
font-src www.paypalobjects.com *.fontawesome.com *.gstatic.com 'self' data: https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.addthis.com js.mollie.com *.sendcloud.sc *.jsdelivr.net https://www.googletagmanager.com https://td.doubleclick.net 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com imgsct.cookiebot.com https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://www.mollie.com https://api.mapbox.com *.amazonaws.com *.hsforms.net *.hsforms.com 'self' data: https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com opensource.justbetter.nl aardbeiplantje.nl jordgubbsplantor.se erdbeerprofi.de https://imgproxy.vendic.dev data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com consent.cookiebot.com https://maps.googleapis.com *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net js.mollie.com *.sendcloud.sc *.jsdelivr.net https://servicepoints.sendcloud.sc https://embed.sendcloud.sc *.hsforms.net *.hsforms.com *.google.com *.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com static.cloudflareinsights.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src https://cdn.jsdelivr.net *.fontawesome.com *.sendcloud.sc *.jsdelivr.net *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com cbsignal-1.in-endp.profitmetrics.io googleads.g.doubleclick.net https://maps.googleapis.com https://player.vimeo.com autocomplete2.postdirekt.de *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://www.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.twitter.com https://*.fbcdn.net https://*.google.com https://*.ingenious.ai  https://*.googleapis.com https://*.facebook.net https://siteimproveanalytics.com https://js.createsend1.com https://www.googletagmanager.com https://fburl.com https://theta360.com https://ecommunications.wyndham.vic.gov.au https://www.createsend.com https://soundcloud.com https://wyndham.vudoo.io https://*.eventbrite.com.au https://cdn.jsdelivr.net https://unpkg.com https://*.ingest.sentry.io https://*.buzzsprout.com https://www.gstatic.com https://api.smooch.io https://www.pagespeed-mod.com https://*.google-analytics.com https://*.cloudflare.com https://conoret.com https://*.hotjar.com ; object-src 'self'; style-src 'self' 'unsafe-inline' blob: https://*.fbcdn.net https://*.ingenious.ai https://*.googleapis.com https://www.gstatic.com tagmanager.google.com https://theta360.com https://ecommunications.wyndham.vic.gov.au https://www.createsend.com https://soundcloud.com https://wyndham.vudoo.io https://*.eventbrite.com.au https://cdn.jsdelivr.net https://unpkg.com https://*.ingest.sentry.io https://*.buzzsprout.com https://*.cloudflare.com https://*.opoint.no  https://*.trendmicro.com; img-src 'self' 'unsafe-inline' data: blob: https://*.ingenious.ai https://*.fbcdn.net *.google-analytics.com https://*.twimg.com https://*.gstatic.com https://*.siteimproveanalytics.io https://*.twitter.com https://*.eventbrite.com.au https://cdn.jsdelivr.net https://unpkg.com https://*.ingest.sentry.io https://*.buzzsprout.com https://*.googletagmanager.com https://*.google.com https://*.ytimg.com https://theta360.com https://*.cloudfront.net https://*.googleapis.com https://digital.wyndham.vic.gov.au https://*.smooch.io https://*.facebook.com https://*.g.doubleclick.net https://*.google.com.au; media-src 'self' data: https://web-messenger-v5.ingenious.ai https://*.gstatic.com; frame-src 'self' data: https://youtu.be https://www.youtube.com *.google.com https://*.twitter.com https://js.createsend1.com https://w.soundcloud.com https://wyndham.vudoo.io https://*.eventbrite.com.au https://cdn.jsdelivr.net https://unpkg.com https://*.buzzsprout.com https://wyndham.civicclerk.com.au https://*.facebook.com https://block.localnetwork.zone https://theta360.com https://*.wyndham.vic.gov.au https://*.zscalertwo.net https://*.trendmicro.com https://*.vimeo.com https://*.zscloud.net https://td.doubleclick.net https://au.api.ingenious.ai https://cloud.enrolnow.com.au ; frame-ancestors 'self'; child-src 'self' https://youtu.be https://www.youtube.com; font-src 'self' data: https://fonts.gstatic.com https://web-messenger-v5.ingenious.ai https://at.alicdn.com https://shopping.qantas.com https://cdn.jsdelivr.net https://script.hotjar.com; connect-src 'self' data: https://*.googleapis.com https://web-messenger-v5.ingenious.ai *.smooch.io https://*.google-analytics.com wss://api.smooch.io https://createsend.com https://*.doubleclick.net https://*.facebook.com https://*.google.com https://*.global-cache.online https://*.ytlogs.ru https://meetlookup.com https://zone1-services-cdn.com https://*.cdn77.org https://ecmacore.com https://zone1-services-cdn.com https://*.hotjar.io wss://ws.hotjar.com https://*.google.com.au https://fonts.gstatic.com https://connect.facebook.net https://www.google.com.bn https://www.google.com.np https://c.ba.contentsquare.net https://web-messenger-v5.ingenious.ai https://www.googletagmanager.com https://stats.g.doubleclick.net https://widget-config.au.ingenious.ai; report-uri /report-csp-violation; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://browser.sentry-cdn.com https://*.fontawesome.com https://challenges.cloudflare.com https://www.googletagmanager.com https://connect.facebook.net https://analytics.tiktok.com https://t.contentsquare.net https://pay.google.com https://*.adyen.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://ka-f.com https://*.fontawesome.com https://*.adyen.com; font-src 'self' data: https://fonts.gstatic.com https://ka-f.com https://*.fontawesome.com; img-src 'self' data: https:; connect-src 'self' https://*.ingest.de.sentry.io https://*.ingest.sentry.io https://ka-f.com https://*.fontawesome.com https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net https://pagead2.googlesyndication.com https://www.google.com https://www.google.de https://www.google.at https://www.google.ch https://connect.facebook.net https://www.facebook.com https://analytics.tiktok.com https://*.contentsquare.net https://pay.google.com https://*.adyen.com; frame-src 'self' https://challenges.cloudflare.com https://*.paypal.com https://pay.google.com https://*.adyen.com https://www.facebook.com; form-action 'self' https://*.saferpay.com https://www.paypal.com https://*.sofort.com https://*.klarna.com https://www.facebook.com; object-src 'none'; base-uri 'self'; report-uri /csp-report 1
default-src 'self' capacitor://localhost; connect-src 'self' http://localhost:8889 http://localhost:8888 https://*.sitickets.com https://*.tn-apis.com https://*.google.com https://google.com https://*.google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.paypal.com https://*.outbrain.com http://*.outbrain.com https://*.hubspot.com https://*.hubapi.com https://*.hotjar.com https://*.hotjar.io https://*.riskified.com https://*.app-us1.com https://*.visitiq.io https://*.clarity.ms https://*.mixpanel.com https://*.mxpnl.com https://*.taboola.com https://*.doubleclick.net https://*.googleadservices.com https://*.bing.com https://*.bugsnag.com https://*.attentivemobile.com https://*.stackadapt.com https://*.p-n.io https://*.attn.tv https://*.smartlook.com https://*.smartlook.cloud https://*.facebook.com https://*.amazonaws.com https://qa-sitickets-static-frontend.s3.us-east-1.amazonaws.com https://*.zdassets.com https://*.zendesk.com https://*.3ddvapis.com https://*.adyen.com capacitor://localhost http://localhost; script-src 'self' 'unsafe-inline' https://*.seatics.com http://*.seatics.com https://libs.3ddvapis.com https://contentdistribution.3ddvapis.com https://resources-contentdistribution.3ddvapis.com https://*.google.com https://www.google.com https://*.gstatic.com https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.doubleclick.net https://pay.google.com https://js.stripe.com https://*.stripe.com https://*.braintreegateway.com https://*.paypal.com https://*.paypalobjects.com https://*.adyen.com https://*.hotjar.com https://*.hotjar.io https://pixel.visitiq.io https://*.mxpnl.com https://api-js.mixpanel.com https://*.bugsnag.com https://diffuser-cdn.app-us1.com https://*.ketchcdn.com https://*.queue-it.net https://www.tn-apis.com https://cdn.jsdelivr.net https://cdn.growthbook.io https://cdn.p-n.io https://static.zdassets.com https://*.zdassets.com https://*.zendesk.com https://cdn.auth0.com https://*.auth0.com https://*.riskified.com https://api.country.is; frame-src 'self' https://*.stripe.com https://*.paypal.com https://*.sitickets.com https://*.google.com https://*.googletagmanager.com https://*.hotjar.com https://*.doubleclick.net https://*.facebook.com https://*.adyen.com capacitor://localhost; img-src 'self' data: blob: https://*.sitickets.com https://*.zdassets.com https://*.hubspot.com https://*.hsforms.com https://*.rdcdn.com http://*.rdcdn.com https://rdcdn.com https://*.seatics.com https://*.cloudfront.net http://*.cloudfront.net https://*.google.com https://*.google.com.br https://*.gstatic.com https://*.google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.paypal.com https://*.hotjar.com https://*.riskified.com http://*.riskified.com https://*.clarity.ms https://*.bing.com https://*.taboola.com https://*.doubleclick.net https://*.googleadservices.com https://*.facebook.net https://*.facebook.com https://*.twitter.com https://*.t.co https://t.co https://*.mxpnl.com https://*.amazonaws.com https://qa-sitickets-static-frontend.s3.us-east-1.amazonaws.com https://*.3ddvapis.com https://codigosport.com https://*.adyen.com https://*.outbrain.com http://*.outbrain.com capacitor://localhost; font-src 'self' https://*.googleapis.com https://*.gstatic.com https://*.onlinewebfonts.com https://*.cloudfront.net http://*.cloudfront.net https://*.amazonaws.com https://qa-sitickets-static-frontend.s3.us-east-1.amazonaws.com https://*.3ddvapis.com data:; style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.stackadapt.com https://*.hotjar.com https://*.cloudfront.net http://*.cloudfront.net https://*.amazonaws.com https://qa-sitickets-static-frontend.s3.us-east-1.amazonaws.com https://*.3ddvapis.com; object-src 'none'; media-src 'self' https://*.sitickets.com https://*.3ddvapis.com data: blob:; worker-src 'self' https://*.3ddvapis.com data: blob:; child-src 'self' https://*.stripe.com https://*.paypal.com capacitor://localhost; form-action 'self' https://*.sitickets.com https://*.paypal.com https://*.facebook.com; base-uri 'self'; manifest-src 'self'; report-uri /api/csp-report; report-to csp-endpoint, default-src 'self' capacitor://localhost; connect-src 'self' http://localhost:8889 http://localhost:8888 https://*.sitickets.com https://*.tn-apis.com https://*.google.com https://google.com https://*.google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.paypal.com https://*.outbrain.com http://*.outbrain.com https://*.hubspot.com https://*.hubapi.com https://*.hotjar.com https://*.hotjar.io https://*.riskified.com https://*.app-us1.com https://*.visitiq.io https://*.clarity.ms https://*.mixpanel.com https://*.mxpnl.com https://*.taboola.com https://*.doubleclick.net https://*.googleadservices.com https://*.bing.com https://*.bugsnag.com https://*.attentivemobile.com https://*.stackadapt.com https://*.p-n.io https://*.attn.tv https://*.smartlook.com https://*.smartlook.cloud https://*.facebook.com https://*.amazonaws.com https://qa-sitickets-static-frontend.s3.us-east-1.amazonaws.com https://*.zdassets.com https://*.zendesk.com https://*.3ddvapis.com https://*.adyen.com capacitor://localhost http://localhost; script-src 'nonce-ZDM2OWNiYmItMGJlNC00M2UwLTllYzUtODkxMjI0ODcxYjRl' 'strict-dynamic' https: 'unsafe-inline'; frame-src 'self' https://*.stripe.com https://*.paypal.com https://*.sitickets.com https://*.google.com https://*.googletagmanager.com https://*.hotjar.com https://*.doubleclick.net https://*.facebook.com https://*.adyen.com capacitor://localhost; img-src 'self' data: blob: https://*.sitickets.com https://*.zdassets.com https://*.hubspot.com https://*.hsforms.com https://*.rdcdn.com http://*.rdcdn.com https://rdcdn.com https://*.seatics.com https://*.cloudfront.net http://*.cloudfront.net https://*.google.com https://*.google.com.br https://*.gstatic.com https://*.google-analytics.com https://*.googletagmanager.com https://*.googleapis.com https://*.paypal.com https://*.hotjar.com https://*.riskified.com http://*.riskified.com https://*.clarity.ms https://*.bing.com https://*.taboola.com https://*.doubleclick.net https://*.googleadservices.com https://*.facebook.net https://*.facebook.com https://*.twitter.com https://*.t.co https://t.co https://*.mxpnl.com https://*.amazonaws.com https://qa-sitickets-static-frontend.s3.us-east-1.amazonaws.com https://*.3ddvapis.com https://codigosport.com https://*.adyen.com https://*.outbrain.com http://*.outbrain.com capacitor://localhost; font-src 'self' https://*.googleapis.com https://*.gstatic.com https://*.onlinewebfonts.com https://*.cloudfront.net http://*.cloudfront.net https://*.amazonaws.com https://qa-sitickets-static-frontend.s3.us-east-1.amazonaws.com https://*.3ddvapis.com data:; style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.stackadapt.com https://*.hotjar.com https://*.cloudfront.net http://*.cloudfront.net https://*.amazonaws.com https://qa-sitickets-static-frontend.s3.us-east-1.amazonaws.com https://*.3ddvapis.com; object-src 'none'; media-src 'self' https://*.sitickets.com https://*.3ddvapis.com data: blob:; worker-src 'self' https://*.3ddvapis.com data: blob:; child-src 'self' https://*.stripe.com https://*.paypal.com capacitor://localhost; form-action 'self' https://*.sitickets.com https://*.paypal.com https://*.facebook.com; base-uri 'self'; manifest-src 'self'; report-uri /api/csp-report; report-to csp-endpoint 1
object-src 'none';base-uri 'self';script-src 'nonce-lrnrr1f2rYroHrJrA5iG4g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://cdn.sift.com https://accounts.google.com https://apis.google.com https://pay.google.com https://connect.facebook.net https://www.googletagmanager.com https://capi-automation.s3.us-east-2.amazonaws.com https://www.google-analytics.com https://analytics.google.com https://www.google.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://accounts.google.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https:; media-src 'self' blob: data:; frame-src 'self' https://js.stripe.com https://pay.google.com https://accounts.google.com https://www.facebook.com https://connect.facebook.net https://www.googletagmanager.com https://td.doubleclick.net https://www.google.com; connect-src 'self' https: wss://ravers.co.nz; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' https://pay.google.com https://*.stripe.com 1
font-src www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.avada.io *.shopify.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://get.geojs.io *.avada.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src https://*.gstatic.com *.fontawesome.com fonts.googleapis.com www.leonpaul.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.adyen.com pay.google.com payments-eu.amazon.com *.amazon.de www.leonpaul.com 'self' 'unsafe-inline'; frame-ancestors www.leonpaul.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com www.google.com *.adyen.com pay.google.com *.paypal.com *.dotdigital-pages.com *.dotdigital.com https://www.googletagmanager.com/ *.weltpixel.com www.leonpaul.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.adyen.com pay.google.com *.payments-amazon.com *.media-amazon.com *.paypalobjects.com https://*.gstatic.com *.trackedlink.net validate.fishpig.co.uk http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ maps.gstatic.com www.leonpaul.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ www.google.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com polyfill.io *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal http://www.googletagmanager.com/ https://www.googletagmanager.com/ maps.googleapis.com www.leonpaul.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://fonts.googleapis.com/ *.fontawesome.com www.leonpaul.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ www.leonpaul.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adyen.com *.google.com google.com payments-eu.amazon.com *.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ www.leonpaul.com 'self' 'unsafe-inline'; child-src www.leonpaul.com http: https: blob: 'self' 'unsafe-inline'; default-src www.leonpaul.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' *.cookiebot.com https://liveupdate.pimcore.org *.cloudflare.com *.googleapis.com maps.gstatic.com gtm.simplon.com youtube.com *.google.com *.google.at www.youtube.com youtube-nocookie.com geo.dailymotion.com dailymotion.com player.vimeo.com vimeo.com *.kameleoon.com *.doubleclick.net www.facebook.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://*.hotjar.com https://*.hotjar.io https://connect.facebook.net https://*.unzer.com https://h.online-metrix.net https://pay.google.com e.issuu.com https://www.bodyscanningcrm-cloud.de https://coronavirus.jhu.edu https://experience.arcgis.com https://simplon.factorialhr.de; font-src 'self' data: fonts.gstatic.com fonts.googleapis.com https://use.fontawesome.com https://*.hotjar.com https://*.hotjar.io https://*.unzer.com; img-src * data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cookiebot.com *.google.at *.doubleclick.net gtm.simplon.com maps.googleapis.com www.googletagmanager.com https://cdnjs.cloudflare.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://*.hotjar.com https://*.hotjar.io https://connect.facebook.net www.facebook.com https://*.unzer.com https://h.online-metrix.net https://*.google.com https://*.google.at; style-src 'self' 'unsafe-inline' https://use.fontawesome.com fonts.googleapis.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https://*.hotjar.com https://*.hotjar.io https://*.unzer.com; report-uri /nelmio/csp/report 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' mbplc.com *.mbplc.com maps.google.com *.maps.google.com maps.googleapis.com pay.google.com *.pay.google.com analytics.google.com *.analytics.google.com *.maps.googleapis.com clarity.ms *.clarity.ms googletagmanager.com *.googletagmanager.com cloudflare.com *.cloudflare.com designmynight.com *.designmynight.com webtrends-optimize.com *.webtrends-optimize.com woosmap.com *.woosmap.com clicksandmortar-production.com *.clicksandmortar-production.com facebook.com *.facebook.com facebook.net *.facebook.net tiktok.com *.tiktok.com google.co.uk *.google.co.uk quantserve.com secure.quantserve.com smct.co ep.smct.co ipl.smct.io js.smct.co js.smct.io miller-and-carter.sjv.io rules.quantcount.com safekey-3.americanexpress.com static.hotjar.com script.hotjar.com *.onetrust.com sc-static.net *.sc-static.net snapchat.com spay.samsung.com s7.addthis.com castle.verseapps.co.uk code.jquery.com www.dwin1.com *.azurewebsites.net forms.airship.co.uk pages.airship.co.uk sdk.fra-02.braze.eu js.appboycdn.com eu01.in.treasuredata.com cdn.treasuredata.com cognito-identity.eu-west-1.amazonaws.com firehose.eu-west-1.amazonaws.com 6nw8ohlf.micpn.com bda.bookatable.com googleadservices.com *.googleadservices.com doubleclick.net *.doubleclick.net adnxs.com *.adnxs.com bing.com *.bing.com dynatrace.com *.dynatrace.com fingerprint.host *.fingerprint.host flashtalking.com *.flashtalking.com google-analytics.com *.google-analytics.com google.com *.google.com gstatic.com *.gstatic.com imgix.net *.imgix.net impactcdn.com *.impactcdn.com impct.site *.impct.site jsdelivr.net *.jsdelivr.net mbplc.io *.mbplc.io tradedoubler.com *.tradedoubler.com zonalconnect.com *.zonalconnect.com pxf.io *.pxf.io ojrq.net *.ojrq.net sjv.io *.sjv.io secure.adnxs.com cam-production-fingerprint-assets.imgix.net verifi.podscribe.com ipv4.podscribe.com events-widget.liveres.co.uk cdn.fingerprint-staging.host cdn.fingerprint.host sdk.privacy-center.org www.recaptcha.net delivery.uber.com platform.twitter.com *.platform.twitter.com pagead2.googlesyndication.com *.pagead2.googlesyndication.com *.eagleeye.com static.uk.eagleeye.com *.static.uk.eagleeye.com ade.googlesyndication.com player.vimeo.com api.privacy-center.org *.api.privacy-center.org tr.snapchat.com tr6.snapchat.com analytics-ipv6.tiktokw.us *.analytics-ipv6.tiktokw.us *.cloudfront.net *.privacy-center.org privacy-center.org *.googlesyndication.com adsmurai.com *.adsmurai.com cdnjs.cloudflare.com/ajax/libs/js-sha256/0.9.0/sha256.min.js js.appboycdn.com/web-sdk/5.9/braze.no-amd.min.js; frame-ancestors 'self' https://www.quandoo-partner.com/ https://ws.ephapay.net/ https://pp.ephapay.net/; object-src 'none'; base-uri 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=0DXZboYbu71tfp_dyIey5lBTfh1sP_pqXkW1sTRcRq8-1789279365.3192775-1.0.1.1-5qAsqOfR.MPzHd6YNpmRW3m4uC6zbQiJlzzbUkDriuNaxD9f9923qX7qivzdOmDMaR4LInTMMrErjjLGoLPrZo7OAPo.YR1XfGrhUBNgDedTJU67hn_YS3jp7kNy1a0.jhSR_KzBKu.GKLKvsh4pAutz3TNMvpcB9tf0t4dCvPEVQGIZjB07LPCNaKpUBqia; report-to cf-luieueeaxzvnqlvl 1
object-src 'none';base-uri 'self';script-src 'nonce--NLRMplP8G30y6sIuHam-Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' syndication.twitter.com; script-src js.tirol.tl 'unsafe-inline' 'unsafe-eval' player.peer.tv stats.peer.biz platform.twitter.com apis.google.com; connect-src 'self' stats.peer.biz; img-src 'self' data: images2.tirol.tl css.tirol.tl  www.hotel-guide.it player.peer.tv stats.peer.biz carto.peer.biz www.gravatar.com syndication.twitter.com api.trustyou.com; style-src 'self' 'unsafe-inline' css.tirol.tl js.tirol.tl; font-src css.tirol.tl; frame-src 'self' player.peer.tv www.facebook.com platform.twitter.com apis.google.com accounts.google.com www.youtube.com; child-src 'self' player.peer.tv www.facebook.com platform.twitter.com apis.google.com accounts.google.com www.youtube.com; report-uri https://csp-report.peer.biz/reportOnly/index 1
default-src 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; connect-src 'self'; img-src 'self' data:; frame-src 'self'; font-src 'self' data: https:; object-src 'none'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.sagepay.com *.opayo.eu.elavon.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.sagepay.com *.opayo.eu.elavon.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.sagepay.com *.opayo.eu.elavon.com account.fetchify.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.youtube.com youtube.com wchat.freshchat.com ukpos.webpush.freshchat.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com *.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com bat.bing.com www.facebook.com www.xtento.com cdn.xtento.com *.google.fr *.google.ie *.google.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com cc-cdn.com *.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com ict.infinity-tracking.net script.crazyegg.com bat.bing.com wchat.freshchat.com api.feefo.com register.feefo.com connect.facebook.net client.prod.mplat-ppcprotect.com https://s3.amazonaws.com/downloads.mailchimp.com/ www.xtento.com cdn.xtento.com *.google.fr *.google.ie *.google.co.uk *.googletagmanager.com *.googleadservices.com *.ukpos.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com cc-cdn.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com wchat.freshchat.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google.com google.com ict.infinity-tracking.net script.crazyegg.com tracking.crazyegg.com bat.bing.com client.prod.mplat-ppcprotect.com click.prod.mplat-ppcprotect.com region1.analytics.google.com https://www.google.co.uk/ads/ data: stats.g.doubleclick.net *.ukpos.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https: blob:; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://atlasprzetargow.pl https://basemaps.cartocdn.com https://*.carto.com https://*.basemaps.cartocdn.com wss:; worker-src 'self' blob:; child-src 'self' blob:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://challenges.cloudflare.com https://va.vercel-scripts.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://*.supabase.co https://www.google-analytics.com https://region1.google-analytics.com https://challenges.cloudflare.com https://vitals.vercel-insights.com; frame-src https://challenges.cloudflare.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' 1
worker-src blob:; font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br *.fontawesome.com *.yotpo.com *.googleapis.com https://fonts.bunny.net https: data: blob: https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.maskfitar.com https://plumrocket.com *.yotpo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.facebook.com medchatapp.com tr.snapchat.com/cm/i *.aeroflowdirect.com *.aeroflowbreastpumps.com *.aeroflowurology.com *.aeroflowsleep.com *.cpapsupplies.com *.cheapcpapsupplies.com *.motifmedical.com *.pumpingessentials.com *.lactationlink.com *.aeroflowdiabetes.com *.authorize.net 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com lootly.io *.aeroflowdirect.com *.aeroflowbreastpumps.com *.aeroflowurology.com *.aeroflowsleep.com *.cpapsupplies.com *.cheapcpapsupplies.com *.motifmedical.com *.pumpingessentials.com *.lactationlink.com *.aeroflowdiabetes.com shop.aeroflowinc.com *.aeroflow.dev *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.affirm.com *.affirm.ca t.sharethis.com *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com *.meetanshi.com https://plumrocket.com *.yotpo.com urology.nxfe2.aeroflow.ninja *.nxfe.aeroflow.ninja *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de lootly.io www.affirm.com cmp.osano.com ct.pinterest.com *.five9.net graph.instagram.com *.googlesyndication.com *.healthline.com medchatapp.com mozbar.moz.com tr.snapchat.com ws.sharethis.com www.facebook.com www.youtube.com www.youtube-nocookie.com aeroflow-breastpumps.gorgias.help help-center.gorgias.help www.instagram.com players.brightcove.net www.tiktok.com *.aeroflowdirect.com *.aeroflowbreastpumps.com *.aeroflowurology.com *.aeroflowsleep.com *.cpapsupplies.com *.cheapcpapsupplies.com *.motifmedical.com *.pumpingessentials.com *.lactationlink.com *.aeroflowdiabetes.com shop.aeroflowinc.com www.nbcnews.com/news/embedded-video/ ep2.adtrafficquality.google *.authorize.net https://*.online-metrix.net https://imgs.signifyd.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net upload-widget.cloudinary.com https://gtm.cpapsupplies.com https: 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.affirm.com *.affirm.ca *.sharethis.com *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com *.meetanshi.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com https://meetanshi.com/media/logo.png *.disqus.com *.yotpo.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https://img.youtube.com https://firebasestorage.googleapis.com https: blob: https://imgs.signifyd.com https://*.online-metrix.net https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net data: https: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.affirm.com *.affirm.ca *.sharethis.com https://ajax.googleapis.com https://cdn.jsdelivr.net *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com https://www.datadoghq-browser-agent.com *.meetanshi.com https://s3.amazonaws.com/idme/developer/idme-buttons/assets/* https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.yotpo.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de lootly.io cdn.rangetouch.com *.avada.io *.shopify.com https://static.kameleoon.com https://*.kameleoon.io https://js.appboycdn.com https://cdn.noibu.com https://staticw2.yotpo.com https://acds-events.adobe.io https://static.cloudflareinsights.com https://cmp.osano.com https://us01ccistatic.zoom.us https://bat.bing.com https://snippet.maze.com https://widget.gotolstoy.com https://lootly.io https://www.clarity.ms https://scripts.clarity.ms *.authorize.net https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net https://qnetpylnje.kameleoon.io https://cdn-widgetsrepository.yotpo.com https://*.kameleoon.com https://*.kameleoon.eu https://*.kameleoon.net widget.cloudinary.com/v2.0/global/all.js https://gtm.cpapsupplies.com https: 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.sharethis.com https://cdn.jsdelivr.net *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br *.tagmanager.google.com *.googletagmanager.com *.typeform.com https://static.klaviyo.com *.fontawesome.com *.yotpo.com *.googleapis.com https://fonts.bunny.net https: data: blob: https://fonts.googleapis.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net https: 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https: data: blob: 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.affirm.com *.affirm.ca *.sharethis.com https://ipapi.co https://ajax.googleapis.com *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com *.meetanshi.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.yotpo.com https://resupply.aeroflowurology.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de www.mczbf.com pipedream.wistia.com us-autocomplete-pro.api.smarty.com lootly.io https://get.geojs.io *.avada.io self wss://input.noibu.com *.authorize.net https://imgs.signifyd.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net portal.aeroflow.online https: 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https://*.kameleoon.com https://*.kameleoon.io https://*.kameleoon.eu https://*.kameleoon.net portal.aeroflow.online https: 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://www.gstatic.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com https://maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com https://accounts.google.com https://*.google.com https://*.hotjar.com https://vars.hotjar.com https://www.facebook.com https://*.criteo.com https://gum.criteo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com public.montonio.com https://www.google.com https://www.google.ee https://www.google-analytics.com rx.sudameapteek.ee data: http: https: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com www.facebook.com https://connect.facebook.net graph.facebook.com business.facebook.com public.montonio.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.googletagmanager.com rx.sudameapteek.ee http: https: 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com maxcdn.bootstrapcdn.com https://maxcdn.bootstrapcdn.com rx.sudameapteek.ee http: https: 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.google-analytics.com https://stats.g.doubleclick.net rx.sudameapteek.ee http: https: wss: 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://jlxsgk.com https://newrotatormarch23.bid https://news.2xclick.ru https://yandex.ru https://mrdrop.ru https://statika.mpsuadv.ru https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.org; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://mc.webvisor.org wss://mc.yandex.ru; frame-src 'self' blob: https://*.mpsuadv.ru; object-src 'none'; 1
script-src 'nonce-GlrYMtOKsdyNh6-fN5tFfA' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl; base-uri 'none' 1
object-src 'none'; script-src 'self' adform.net *.adform.net *.bing.com *.taboola.com *.fullstory.com *.geocomply.com *.kameleoon.eu *.ads-twitter.com *.google-analytics.com *.kaizengaming.com *.jsdelivr.net *.kwai.net *.clarity.ms *.greencolumnart.com *.adalyser.com *.performgroup.com *.scoutgg.net *.sportradarserving.com *.pa4r.com res-odx.op-mobile.opera.com *.bannerflow.net *.facebook.com *.cloudfront.net *.maze.co *.app.delivery *.betano.co *.betgenius.com *.cloudflare.com *.cloudflareinsights.com *.cookielaw.org *.creativecdn.com *.facebook.net *.gmlinteractive.com *.googletagmanager.com *.kameleoon.io *.lgrckt-in.com *.optimove.net *.sportradar.com *.tostarsbuilding.com d32tdr35c4icxo.cloudfront.net; worker-src 'self' blob:; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=b5A2Jq0WWm.UOcNB5MC4bJFzvirF4bXVeeXAxItbF5Y-1789263891.529276-1.0.1.1-loLZPJ45nA96e4VynFhrd5uWPibyvFZlZTZ0vmJYZ4x.d6rPBc9elin9SaUTVm4zbhZPyJsYGmJ9TTbGTZN1FcjH0GemlpK58LShZ5O94DU0CrNA9uhyinZWiLKguAKKzHa_bPnynCTKeSXHax9Jck1XnW7y.Coz8m6boxhqa9yg21Nqg0qiJMawdinAIPKCC7vWMKp80UuMzdedAfGECA; report-to cf-yvxgicxxmhimvuht 1
default-src 'self'; base-uri 'self'; frame-ancestors 'none'; object-src 'none'; form-action 'self'; img-src 'self' data: blob: https:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://va.vercel-scripts.com https://vitals.vercel-insights.com; connect-src 'self' https://*.supabase.co wss://*.supabase.co https://vitals.vercel-insights.com https://va.vercel-scripts.com; frame-src 'none' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com https://cdnjs.cloudflare.com https://widgets.trustedshops.com https://integrations.etrusted.com 'self' data: https://static.klaviyo.com/onsite/hosted-fonts/Poppins/latin/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://seo.mageplaza.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://vars.hotjar.com/ *.weltpixel.com *.code.createjs.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io maps.gstatic.com maps.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.openstreetmap.org https://maps.googleapis.com https://stats.g.doubleclick.net/ https://www.google.fr/ads/ga-audiences https://www.google.com/ads/ga-audiences https://widgets.trustedshops.com https://integrations.etrusted.com *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com maps.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://cdnjs.cloudflare.com https://www.gstatic.com/ https://static.hotjar.com/ https://script.hotjar.com/ https://js-agent.newrelic.com/ https://bam.nr-data.net/ https://widgets.trustedshops.com https://integrations.etrusted.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com payment.direct.worldline-solutions.com static.klaviyo.com static-tracking.klaviyo.com static.hotjar.com script.hotjar.com *.google-analytics.com *.googletagmanager.com *.facebook.com *.code.createjs.com/ *.cloudflare.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com https://www.clickcease.com/monitor/stat.js 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://widgets.trustedshops.com https://integrations.etrusted.com tagmanager.google.com use.typekit.net p.typekit.net *.googleapis.com https://use.typekit.net/ydg8rjt.css https://p.typekit.net/p.css 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.openstreetmap.org https://maps.googleapis.com https://in.hotjar.com/api/v2/client/sites/ https://vc.hotjar.io/sessions/ https://stats.g.doubleclick.net/ https://www.google-analytics.com/j/collect *.trustedshops.com *.etrusted.com *.google-analytics.com *.facebook.net analytics.beautyparfumerie.eu maps.googleapis.com a.klaviyo.com moyjovea.eua.stape.net *.doubleclick.net payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com https://moyjovea.eua.stape.net/g/collect https://pagead2.googlesyndication.com/pagead/landing https://analytics.beautyparfumerie.eu/g/collect 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src www.google.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.fontawesome.com https://fonts.bunny.net *.bootstrapcdn.com *.cloudflare.com *.googleusercontent.com *.jsdelivr.net *.slant.co unpkg.com data: 'self' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.2c2p.com *.americanexpress.com *.arcot.com *.cardinalcommerce.com *.citibank.com *.ctbcbank.com *.dnp-cdms.jp *.inicis.com *.ipay88.com.my *.unionpay.com *.uobgroup.com 'self' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.weltpixel.com *.americanexpress.com *.arcot.com *.cardinalcommerce.com *.citibank.com *.ctbcbank.com *.dnp-cdms.jp *.inicis.com *.unionpay.com *.uobgroup.com 'self' 'unsafe-eval' 'unsafe-hashes'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com k.kakaocdn.net https://firebasestorage.googleapis.com *.inicis.com *.afterpay.com *.doubleclick.net *.elcompanies.com www.google.ad www.google.at www.google.co.id www.google.co.in www.google.co.jp www.google.co.kr www.google.com.au www.google.com.bd www.google.com.co www.google.com.hk www.google.com.mt www.google.com.my www.google.com.ph www.google.com.sg www.google.com.tw www.google.com.vn www.google.co.th www.google.co.uk www.google.co.za www.google.de www.google.dk www.google.es www.google.fr www.google.ie www.google.it www.google.nl www.google.se *.google.com *.googletagmanager.com *.googleusercontent.com *.hstatic.net *.naver.com *.thecompanystore.com.sg data: 'self' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://api.addressfinder.io *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.googleapis.com *.gstatic.com developers.kakao.com *.kakaocdn.net *.avada.io *.shopify.com *.inicis.com *.facebook.net *.google-analytics.com *.googletagmanager.com 'self' 'unsafe-eval' 'unsafe-hashes' 'nonce-Y3Ywa3JwOGQ4djB5ZjlqY3E2eDlkdzljenZjcHRvaDY=' 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY/CkTMBhjNhwPvglpYumjx31B4fjkY8=' 'sha256-XGfPSYcBWPq7sx/ucAvvEcAKkiSRS2GeZReWO0f5vXQ='; style-src *.adobe.com fonts.googleapis.com https://api.addressfinder.io *.cash.app *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.fontawesome.com https://fonts.bunny.net *.inicis.com *.googleapis.com *.gstatic.com *.jsdelivr.net 'self' 'unsafe-eval' 'unsafe-hashes'; object-src 'self'; media-src *.adobe.com *.gstatic.com 'self' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://api.addressfinder.io * *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com *.googleapis.com kauth.kakao.com https://get.geojs.io *.avada.io *.inicis.com *.doubleclick.net www.google.ad www.google.at www.google.co.id www.google.co.in www.google.co.jp www.google.co.kr www.google.com.au www.google.com.bd www.google.com.hk www.google.com.mt www.google.com.my www.google.com.ph www.google.com.sg www.google.com.tw www.google.com.vn www.google.co.th www.google.co.za www.google.de www.google.dk www.google.es www.google.fr www.google.ie www.google.it www.google.nl *.googletagmanager.com 'self' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self'; default-src 'self'; base-uri 'self'; report-uri https://36b1ddb8-f3d2-4d2f-8889-d8ced8400535.sansec.watch/; report-to report-endpoint; 1
font-src *.fontawesome.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://plumrocket.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.googleapis.com *.gstatic.com *.elfsightcdn.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com player.vimeo.com *.googleapis.com *.elfsight.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com *.fontawesome.com *.googleapis.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com *.googleapis.com *.elfsight.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src-elem webcache.datareporter.eu webcache-eu.datareporter.eu 'unsafe-inline' 'self' js.hsforms.net *.hotjar.com *.licdn.com *.bing.com *.hs-scripts.com *.doubleclick.net *.usemessages.com *.hs-analytics.net *.hsadspixel.net *.hubspot.com *.hs-banner.com *.clarity.ms *.ddev.site *.stage-m-romerlabs-upgrade.ecxdev.io *.romerlabs.com *.datareporter.eu; style-src-elem https://webcache.datareporter.eu https://webcache-eu.datareporter.eu 'unsafe-inline' 'self' *.ddev.site *.stage-m-romerlabs-upgrade.ecxdev.io *.romerlabs.com *.datareporter.eu; font-src webcachex-eu.datareporter.eu *.fontawesome.com *.gstatic.com 'self' data: *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com maps.gstatic.com *.calcurates.com *.visualwebsiteoptimizer.com 'self' data: *.hsforms.com *.bing.net *.ddev.site *.stage-m-romerlabs-upgrade.ecxdev.io *.romerlabs.com *.hubspot.com *.linkedin.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.googleapis.com *.datareporter.eu *.googletagmanager.com *.visualwebsiteoptimizer.com *.google.com *.gstatic.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.hsforms.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.datareporter.eu *.fontawesome.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com *.datareporter.eu t.elasticsuite.io *.google-analytics.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com wss://ws.hotjar.com *.bing.net *.clarity.ms *.hubspot.com *.hubapi.com *.hotjar.io *.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://133109b8-74af-417a-958f-a1ab45636457.sansec.watch/; report-to report-endpoint; 1
worker-src blob:; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.kxcdn.com *.fontawesome.com *.snapfinance.com https://square-fonts-production-f.squarecdn.com/ https://d1g145x70srn7h.cloudfront.net/ https://cash-f.squarecdn.com/ https://fonts.gstatic.com/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.affirm.com *.affirm.ca facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.addthis.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.snapfinance.com https://pci-connect.squareup.com https://connect.squareup.com https://pci-connect.squareupsandbox.com https://connect.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.affirm.com *.affirm.ca *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.fbcdn.net blob: magefan.com cm.magefan.com *.disqus.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.snapfinance.com https://www.gstatic.com/ https://sandbox.api.cash.app/ https://site-assets.afterpay.com/ https://sandbox.web.squarecdn.com/ https://api.cash.app/ https://web.squarecdn.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://franklin-assets.s3.amazonaws.com/ https://static.sandbox.afterpay.com/ https://static.afterpay.com/ https://static.sandbox.afterpay.com/logo/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.affirm.com *.affirm.ca *.googleapis.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com *.fbcdn.net platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com *.cloudflareinsights.com *.disqus.com www.facebook.com graph.facebook.com business.facebook.com *.snapfinance.com https://js-sandbox.squarecdn.com https://js.squareup.com https://js.afterpay.com/ https://nd.squarecdn.com https://js.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://portal.sandbox.afterpay.com/ https://portal.afterpay.com/ https://cdn.plaid.com/ https://sandbox.kit.cash.app/ https://kit.cash.app/ https://js-sandbox.squarecdn.com/ https://js.squarecdn.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com *.fontawesome.com *.snapfinance.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://fonts.googleapis.com/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.affirm.com *.affirm.ca https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.snapfinance.com https://pci-connect.squareup.com https://pci-connect.squareupsandbox.com https://api.amplitude.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://o160250.ingest.sentry.io/ https://api.lab.amplitude.com/sdk/vardata https://sandbox.plaid.com/ https://production.plaid.com/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net databot-api.herokuapp.com *.fontawesome.com *.googleapis.com *.gstatic.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com databot-api.herokuapp.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com databot-api.herokuapp.com *.googleapis.com *.gstatic.com www.apptrian.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com databot-api.herokuapp.com *.googleapis.com *.gstatic.com www.apptrian.com *.avada.io https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com databot-api.herokuapp.com *.fontawesome.com https://fonts.googleapis.com https://cdnjs.cloudflare.com unsafe-inline assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.sentry.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com databot-api.herokuapp.com *.googleapis.com www.apptrian.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: *.cloudfront.net *.trustpilot.com *.cloudflare.com *.trustedshops.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com pay.google.com js.stripe.com *.stripecdn.com newassets.hcaptcha.com *.stripe.network *.trustpilot.com youtu.be *.vimeo.com *.addthis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * https://plumrocket.com https://www.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.gstatic.com *.googleapis.com *.cloudfront.net bat.bing.com www.google.bg www.google.com.ua www.google.co.uk *.cloudflare.com https://cdn.klarna.com https://s.ytimg.com *.usercentrics.eu blob: magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com www.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.cloudfront.net apis.google.com *.trustpilot.com bat.bing.com js.stripe.com *.stripecdn.com pay.google.com hcaptcha.com newassets.hcaptcha.com *.stripe.network *.zdassets.com region1.analytics.google.com *.cloudflare.com *.google-analytics.com *.gstatic.com *.googleadservices.com *.trustedshops.com *.usercentrics.eu *.addthis.com *.addthisedge.com *.moatads.com *.disqus.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com https://apis.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net https://load.cofs.partscentre.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudfront.net js.stripe.com *.stripecdn.com *.trustpilot.com *.cloudflare.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.stripe.network *.amazon.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://ipinfo.io *.cloudfront.net bat.bing.com *.zdassets.com partsretailgroup.zendesk.com region1.analytics.google.com js.stripe.com *.stripe.com pay.google.com *.hcaptcha.com *.trustpilot.com widget-mediator.zopim.com *.cloudflare.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app https://load.cofs.partscentre.co.uk 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' litium.revolutionrace.pl fbcdn.revolutionrace.pl wss://fbcdn.revolutionrace.pl *.edb.com *.cdn-apple.com *.klarnaservices.com *.klarnauserservices.com *.klarnacdn.net *.klarna.com *.klarnaevt.com *.kustom.co *.adyen.com www.paypal.com js.stripe.com *.google.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.gstatic.com ajax.googleapis.com fonts.googleapis.com maps.googleapis.com *.apptus.cloud *.storyblok.com *.symplify.com cdn-sitegainer.com *.cdn-sitegainer.com sitegainer.com wss://recording.sitegainer.com *.criteo.net *.criteo.com *.doubleclick.net *.emarsys.net *.mention-me.com *.imedia.cz *.scarabresearch.com *.spinnaker-js.com bat.bing.com www.seznam.cz tags.creativecdn.com *.kindlycdn.com *.kindly.ai wss://sage.kindly.ai revolutionrace.customerfirst.ai *.facebook.net *.tiktok.com *.snapchat.com *.pinterest.com *.bambuser.com *.facebook.com www.pinterest.se *.cloudflare.com *.digitaloceanspaces.com *.distancify.workers.dev cdn.jsdelivr.net maxcdn.bootstrapcdn.com player.vimeo.com pro.ip-api.com recommender.scarabresearch.com s.pinimg.com sc-static.net vimeo.com ws-eu.pusher.com wss://ws-eu.pusher.com 'unsafe-inline' 'unsafe-eval'; img-src data: blob: https://* 'self'; media-src https://*; worker-src 'self' blob:; frame-src analytics.revolutionrace.pl *.mention-me.com mention-me.com *.google.com *.adyen.com *.paypal.com *.kustom.co *.sitegainer.com *.criteo.com revolutionrace.customerfirst.ai; frame-ancestors https://app.storyblok.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; connect-src data: *; report-uri /api/csp-report; report-to csp-endpoint; 1
default-src 'self'; base-uri 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://nominatim.openstreetmap.org https://chat01.wolkvox.com https://www.googletagmanager.com https://ajax.aspnetcdn.com https://cdnjs.cloudflare.com https://ajax.googleapis.com https://code.jquery.com https://code.getmdl.io https://cdn.jsdelivr.net https://www.gstatic.com https://www.google.com https://unpkg.com https://api.ipify.org https://formden.com blob:; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.jquery.com https://fonts.googleapis.com https://www.gstatic.com https://formden.com; img-src 'self' data: https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com https://positiva.adacsc.co https://www.alissta.gov.co https://alissta.gov.co https://www.greatplacetowork.com.co https://fonts.gstatic.com https://vicetecnica-test-positiva.adacsc.co; font-src 'self' data: https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.gstatic.com https://formden.com; connect-src 'self' https://nominatim.openstreetmap.org https://www.google-analytics.com https://www.googletagmanager.com https://translate.google.com https://api.ipify.org https://app.powerbi.com https://*.powerbi.com https://www.google.com https://www.alissta.gov.co https://alissta.gov.co https://www.gstatic.com https://chat01.wolkvox.com blob:; worker-src 'self' blob:; frame-src 'self' https://chat01.wolkvox.com https://www.google.com https://www.alissta.gov.co https://alissta.gov.co https://*.powerbi.com https://app.powerbi.com blob:; frame-ancestors 'self'; child-src 'self' blob:; media-src 'self' blob:; object-src 'self' data: https://www.alissta.gov.co https://alissta.gov.co https://*.powerbi.com https://app.powerbi.com;report-uri /csp-report; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://challenges.cloudflare.com https://unpkg.com https://*.youtube.com https://*.ytimg.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.googletagmanager.com https://challenges.cloudflare.com https://stats.g.doubleclick.net; frame-src https://www.googletagmanager.com https://challenges.cloudflare.com https://www.youtube.com https://www.youtube-nocookie.com; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self'; script-src 'self' 'nonce-l+mnlduXZh1mILfaXx87Gg==' 'strict-dynamic'; style-src 'self' 'nonce-l+mnlduXZh1mILfaXx87Gg==' https://api.mapbox.com https://cdn.nagich.co.il; style-src-elem 'self' 'nonce-l+mnlduXZh1mILfaXx87Gg==' https://api.mapbox.com https://cdn.nagich.co.il; style-src-attr 'unsafe-inline'; font-src 'self' data: https://api.mapbox.com; img-src 'self' data: blob: https://devwebimages.mogidigital.com https://cdn.keyz.ai https://images2.madlan.co.il https://www.googletagmanager.com https://www.google-analytics.com https://ssl.gstatic.com https://www.gstatic.com https://maps.googleapis.com https://maps.gstatic.com https://api.mapbox.com https://*.tiles.mapbox.com https://www.clarity.ms https://*.clarity.ms https://cdn.nagich.co.il https://access.nagich.co.il https://img.youtube.com https://i.ytimg.com https://www.facebook.com https://*.fbcdn.net https://www.instagram.com https://*.cdninstagram.com https://www.tiktok.com https://*.tiktokcdn.com; connect-src 'self' https://gateway.keyz.ai https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://maps.googleapis.com https://maps.gstatic.com https://places.googleapis.com https://identitytoolkit.googleapis.com https://securetoken.googleapis.com https://api.mapbox.com https://events.mapbox.com https://*.tiles.mapbox.com https://www.clarity.ms https://*.clarity.ms https://cdn.nagich.co.il https://access.nagich.co.il https://s3.eu-central-1.amazonaws.com https://*.maskyoo.com https://www.youtube.com https://www.tiktok.com https://api.instagram.com https://www.facebook.com https://keyz.ai; frame-src 'self' https://www.googletagmanager.com https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://www.tiktok.com https://www.instagram.com https://www.facebook.com; media-src 'self' blob: data: https://devwebimages.mogidigital.com; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; report-uri /monitoring/csp-report; upgrade-insecure-requests 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.klevu.com *.ksearchnet.com *.cloudflare.com static.klaviyo.com *.bootstrapcdn.com *.cdnfonts.com maxcdn.bootstrapcdn.com https://fonts.gstatic.com 'self' data: https://use.fontawesome.com https://d1cwup7r903a1d.cloudfront.net *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.tawk.to 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com blob: *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com www.facebook.com platform.twitter.com https://player.vimeo.com https://www.youtube-nocookie.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * checkout.sezzle.com sandbox.checkout.sezzle.com tracking.sezzle.com *.tawk.to https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com *.amazonaws.com *.cloudinary.com *.google.com www.google.com.co.uk blob: *.cloudfront.net stats.g.doubleclick.net *.s3-us-west-2.amazonaws.com magefan.com cm.magefan.com *.disqus.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com media.sezzle.com *.tawk.to tawk.link cdn.jsdelivr.net s3.amazonaws.com/ https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com *.amazonaws.com *.jst.ai *.cloudflare.com *.klaviyo.com static.klaviyo.com fast.a.klaviyo.com a.klaviyo.com *.typeform.com *.liadm.com *.retention.com *.execute-api.us-west-2.amazonaws.com *.disqus.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net connect.facebook.net twitter.com platform.twitter.com https://player.vimeo.com https://www.youtube.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com cdn.routeapp.io https//fonts.googleapis.com https://protect-quote-q.route.com protection-widget.route.com protect-lightning-bolt-widget.route.com d3od5si8vgcekb.cloudfront.net ddbmicszvqxcg.cloudfront.net https://unpkg.com wobs.route.com checkout-sdk.sezzle.com sandbox.checkout-sdk.sezzle.com widget.sezzle.com *.tawk.to cdn.jsdelivr.net https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com *.cloudflare.com *.klaviyo.com *.fontawesome.com *.bootstrapcdn.com assets.braintreegateway.com *.typekit.net *.typeform.com *.cdnfonts.com *.googleapis.com *.googletagmanager.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com http://fonts.googleapis.com https://use.fontawesome.com https//fonts.googleapis.com https://d1cwup7r903a1d.cloudfront.net fonts.cdnfonts.com *.tawk.to cdn.jsdelivr.net https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src blob: 'self' 'unsafe-inline'; media-src *.adobe.com blob: *.tawk.to tawk.link 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com stats.g.doubleclick.net *.typeform.com *.liadm.com *.retention.com *.klaviyo.com fast.a.klaviyo.com a.klaviyo.com *.execute-api.us-west-2.amazonaws.com aly.jst.ai *.sezzle.com 'self' 'unsafe-inline' *.google-analytics.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io https://olegnax.com https://api.instagram.com https://graph.instagram.com/ *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com api.route.com https://protect-quote-q.route.com protection-widget.route.com d3od5si8vgcekb.cloudfront.net protect-lightning-bolt-widget.route.com ddbmicszvqxcg.cloudfront.net https://unpkg.com wobs.route.com gateway.sezzle.com sandbox.gateway.sezzle.com media.sezzle.com widget.sezzle.com *.tawk.to wss://*.tawk.to https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: https://*.paypal.com https://*.paypalobjects.com 'nonce-XGj6ZCSfmUyVAXFUsEXErbPOek0YMMCs'; base-uri 'none'; report-uri https://data.sanitino.eu/csp-report 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-QZuf_tPQmPPfE-okj6uxoA' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com *.klarnacdn.net https://fonts.bunny.net *.googleapis.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.klarna.com https://www.googletagmanager.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com www.youtube.com *.cookiebot.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io github.blog www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.klarna.com *.klarnaevt.com *.klarnacdn.net http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.equalweb.com maps.googleapis.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io *.shopify.com *.fontawesome.com *.googleapis.com *.gstatic.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.google.com www.gstatic.com www.youtube.com *.equalweb.com *.cookiebot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com downloads.mailchimp.com *.klarnacdn.net https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.equalweb.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com http://127.0.0.1:63342 http://127.0.0.1:34567 www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com www.google-analytics.com *.equalweb.com maps.googleapis.com *.cookiebot.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.googletagmanager.com https://cdn.amplitude.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://js.stripe.com https://*.js.stripe.com https://accounts.google.com https://apis.google.com https://heydeacon.com https://*.heydeacon.com; script-src-elem 'self' 'unsafe-inline' blob: https://*.googletagmanager.com https://cdn.amplitude.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://js.stripe.com https://*.js.stripe.com https://accounts.google.com https://apis.google.com https://heydeacon.com https://*.heydeacon.com; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://fonts.googleapis.com https://accounts.google.com https://*.heydeacon.com; style-src-elem 'self' 'unsafe-inline' https://www.gstatic.com https://fonts.googleapis.com https://accounts.google.com https://*.heydeacon.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://*.heydeacon.com; connect-src 'self' https://arcadium3d.com https://arcadium-files.nyc3.cdn.digitaloceanspaces.com data: blob: https://accounts.google.com https://apis.google.com https://www.googleapis.com https://oauth2.googleapis.com https://*.google-analytics.com https://*.analytics.google.com https://*.amplitude.com https://api.stripe.com https://m.stripe.com https://m.stripe.network https://*.sentry.io https://*.googletagmanager.com https://www.google.com https://heydeacon.com https://*.heydeacon.com wss://*.heydeacon.com; media-src 'self' data: blob:; frame-src 'self' https://www.youtube.com https://m.youtube.com https://osrd6v6dgck.typeform.com https://www.g2.com https://js.stripe.com https://*.js.stripe.com https://hooks.stripe.com https://accounts.google.com https://www.google.com https://heydeacon.com https://*.heydeacon.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /csp-report 1
font-src *.fontawesome.com *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com unsafe-inline *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-3kIVVmPJM3FSspEWH_bh2Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors https://*.doubleclick.net https://*.sharethis.com 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.adsrvr.org https://*.clarity.ms https://*.doubleclick.net https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.marketo.com https://*.mouseflow.com https://*.scene7.com https://*.youtube.com https://*.zimmerbiomet.com https://acsbapp.com https://assets.adobedtm.com https://assets.map.brightcove.com https://bat.bing.com https://cdn.cookielaw.org https://connect.facebook.net https://js.driftt.com https://munchkin.marketo.net https://pagead2.googlesyndication.com https://players.brightcove.net https://snap.licdn.com https://tags.srv.stackadapt.com https://vjs.zencdn.net https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://*.sharethis.com https://www.redditstatic.com https://www.youtube.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.marketo.com https://*.scene7.com https://cdn.cookielaw.org https://tags.srv.stackadapt.com; img-src 'self' data: https://*.bing.com https://*.clarity.ms https://*.doubleclick.net https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.picsum.photos https://*.salesforce.com https://*.scene7.com https://*.turn.com https://*.zimmerbiomet.com https://assets.adobedtm.com https://assets.map.brightcove.com https://bat.bing.com https://cdn.cookielaw.org https://cf-images.us-east-1.prod.boltdns.net https://cm.everesttech.net https://facebook.com https://connect.facebook.net https://dev.day.com https://dpm.demdex.net https://hostedseal.trustarc.com https://metrics.brightcove.com https://pagead2.googlesyndication.com https://picsum.photos https://privacy-policy.truste.com https://snap.licdn.com https://tags.srv.stackadapt.com https://www.facebook.com https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://zimzbdotcomprod.112.2o7.net https://alb.reddit.com https://l.sharethis.com https://sync.sharethis.com https://www.google.com.mx; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' data: https://*.adsrvr.org https://*.bing.com https://*.clarity.ms https://*.doubleclick.net https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.mktoresp.com https://*.mktoutil.com https://*.salesforce.com https://*.scene7.com https://*.zimmerbiomet.com https://api.ipdata.co https://assets.adobedtm.com https://assets.map.brightcove.com https://bat.bing.com https://bcp.crwdcntrl.net https://cdn.acsbapp.com https://cdn.cookielaw.org https://facebook.com https://connect.facebook.net https://dpm.demdex.net https://edge.api.brightcove.com https://geolocation.onetrust.com https://js.driftt.com https://manifest.prod.boltdns.net https://metrics.brightcove.com https://n2.mouseflow.com https://pagead2.googlesyndication.com https://privacyportal.onetrust.com https://snap.licdn.com https://tags.srv.stackadapt.com https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com https://zimmerbiomet.tt.omtrdc.net https://zimzbdotcomprod.112.2o7.net https://*.brightcovecdn.com https://l.sharethis.com https://pixel-config.reddit.com; frame-src 'self' https://*.adsrvr.org https://*.doubleclick.net https://*.google.com https://*.marketo.com https://*.scene7.com https://*.youtube.com https://assets.map.brightcove.com https://connect.facebook.net https://js.driftt.com https://www.googletagmanager.com https://zimmer.demdex.net https://t.sharethis.com https://www.youtube.com; media-src 'self' data: blob: https://*.scene7.com https://*.zimmerbiomet.com https://assets.map.brightcove.com https://*.driftt.com https://js.driftt.com https://*.brightcovecdn.com; form-action 'self' 1
style-src https://l.clarity.ms *.force.com https://c.bing.com 'self' https://stats.g.doubleclick.net https://i.clarity.ms https://checkoutshopper-test.adyen.com/ https://api.paytrace.com https://api.prod.us.five9.net https://a.clarity.ms https://v1.api.service.cmp.usercentrics.eu https://*.g.doubleclick.net https://www.gemline.ca https://catalogs.merch.ai https://w.clarity.ms https://www.google.ge https://www.gstatic.com https://uct.service.usercentrics.eu https://d.clarity.ms https://www.google.com https://analytics.google.com https://fonts.googleapis.com/css2 https://go.gemline.com https://gemline.com https://app-atl.five9.com blob: https://go.pardot.com https://thegemgroup.my.salesforce-scrt.com https://images.salsify.com https://d.la1-core2.sfdc-lywfpd.salesforceliveagent.com https://*.salesforceliveagent.com https://f.clarity.ms https://fonts.googleapis.com/css https://m.clarity.ms https://*.googletagmanager.com https://www.gravitytank.com https://*.google-analytics.com https://ssl.gstatic.com https://integrationdesigner.artifi.net https://thegemgroup.my.site.com https://service.force.com/embeddedservice/ https://*.analytics.google.com 'unsafe-inline' https://v.clarity.ms https://api.usercentrics.eu https://d.la4-c2-ia5.salesforceliveagent.com https://consent-api.service.consent.usercentrics.eu https://e.clarity.ms https://gemline.ca https://designer.artifi.net https://*.google.com https://checkoutshopper-live.adyen.com/ https://scripts.clarity.ms https://tagmanager.google.com https://q.clarity.ms https://app.usercentrics.eu https://c.clarity.ms https://www.google.co.in https://www.gemline.com https://r.clarity.ms https://c.la1-core2.sfdc-lywfpd.salesforceliveagent.com https://www.googletagmanager.com https://www.google-analytics.com *.salesforce.com *.visualforce.com:* https://b.clarity.ms https://*.fastly.net https://j.clarity.ms https://web.cmp.usercentrics.eu; report-to sfdc-csp-ep; report-uri https://thegemgroup.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D3t000001K38v&networkId=0DM3t000000Q8vH&type=communities 1
default-src 'self'; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; font-src 'self' data: https:; connect-src 'self' https: wss:; media-src 'self' https:; frame-src 'self' https:; frame-ancestors 'self'; object-src 'none'; base-uri 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.cookiefirst.com 'self' data: https://widgets.trustedshops.com 'unsafe-inline' 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cleverreach.com *.paypal.com *.amazon.jp *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline' 'self' 'unsafe-inline'; frame-ancestors https://www.kazenmaier-bikeleasing.de 'self' 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.zenaps.com *.doubleclick.net *.bikeleasing.de *.bosch-ebike.com *.easycredit.de *.kazenmaier-bikeleasing.de *.lease-a-bike.de *.neocomapp.com radimdienst.web.app *.rashedi-consulting.de *.ad-srv.net *.smartfit.online js.mollie.com maps.googleapis.com chart.googleapis.com https://www.googletagmanager.com/ *.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.awin1.com *.zenaps.com *.wepowerconnections.com *.cloudfront.net *.cookiefirst.com *.roeye.com lantern.roeye.com www.econda-monitor.de google.pl www.google.pl https://www.mollie.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.cdninstagram.com *.hsforms.net *.hsforms.com maps.googleapis.com ratenkauf.easycredit.de www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com ad.doubleclick.net *.adition.com adservice.google.com as.ad4m.at www.google.de www.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com *.googleapis.com *.gstatic.com *.cookiefirst.com the.sciencebehindecommerce.com lantern.roeye.com *.ad-srv.net *.onlinesizing.bike production.neocomapp.com *.gsitrix.com *.smartfit.online js.mollie.com maps.googleapis.com chart.googleapis.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ player.vimeo.com connect.facebook.net cdnjs.cloudflare.com *.hsforms.net *.hsforms.com *.googleoptimize.com ratenkauf.easycredit.de js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://app.uptain.de retrack-kupona.kuponacdn.de ad4m.at ad.doubleclick.net ad11.adfarm1.adition.com dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: bid.g.doubleclick.net fpdbs.paypal.com fpdbs.sandbox.paypal.com i.ytimg.com p.typekit.net validator.swagger.io *.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.roeye.com google.pl b.stats.paypal.com dub.stats.paypal.com checkout.paypal.com *.adition.com adservice.google.com as.ad4m.at www.econda-monitor.de www.google.pl www.google.de 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cookiefirst.com assets.braintreegateway.com *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com cdn.prod.smartfit.online 'self' 'unsafe-inline'; object-src maps.googleapis.com chart.googleapis.com 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.wepowerconnections.com https://the.sciencebehindecommerce.com *.cookiefirst.com the.sciencebehindecommerce.com *.onlinesizing.bike maps.googleapis.com chart.googleapis.com stats.g.doubleclick.net t.elasticsuite.io *.hsforms.net *.hsforms.com ratenkauf.easycredit.de *.google-analytics.com d28gf49ln4tix8.cloudfront.net ad.ad-srv.net www.fahrradlagerverkauf.com www.econda-monitor.de staging.fahrradlagerverkauf.com prompts.api.production.neocomapp.com *.gsitrix.com *.smartfit.online http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://app.uptain.de *.google.pl *.google.de *.google.ch *.ad-srv.net ad.doubleclick.net production.neocomapp.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.ebike-24.com/csp/report/; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; img-src 'self' data: blob: https://cdn.gippokrat.kz https://mc.yandex.ru https://www.googletagmanager.com https://*.google-analytics.com https://api-maps.yandex.ru https://yastatic.net https://*.maps.yandex.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://mc.yandex.ru https://accounts.google.com https://challenges.cloudflare.com https://*.google-analytics.com https://api-maps.yandex.ru https://yastatic.net; style-src 'self' 'unsafe-inline'; font-src 'self' data:; connect-src 'self' https://api.gippokrat.kz https://mc.yandex.ru https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://accounts.google.com https://api-maps.yandex.ru https://yastatic.net https://*.maps.yandex.net; style-src-elem 'self' 'unsafe-inline' https://api-maps.yandex.ru https://yastatic.net; frame-src 'self' https://accounts.google.com https://challenges.cloudflare.com https://mc.yandex.ru; worker-src 'self' blob: 1
default-src 'self' *.creditvidya.com *.prefr.com getpostings-tpma6xih7q-uc.a.run.app getpostingswithid-tpma6xih7q-uc.a.run.app *.google-analytics.com google-analytics.com google-analytics.com/collect google-analytics.com/analytics.js;  frame-src 'self' *.creditvidya.com *.prefr.com google-analytics.com google-analytics.com/collect google-analytics.com/analytics.js;  script-src 'self' 'unsafe-inline' 'unsafe-eval' *.creditvidya.com *.prefr.com *.googletagmanager.com googletagmanager.com *.google-analytics.com google-analytics.com/collect google-analytics.com/analytics.js ajax.googleapis.com;  script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' *.creditvidya.com *.prefr.com *.googletagmanager.com googletagmanager.com *.google-analytics.com google-analytics.com/collect google-analytics.com/analytics.js ajax.googleapis.com;  img-src 'self' *.creditvidya.com *.prefr.com *.google-analytics.com data:; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.creditvidya.com *.prefr.com;  style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com *.creditvidya.com *.prefr.com;  font-src 'self' fonts.gstatic.com *.creditvidya.com *.prefr.com data:; report-to /_/csp-report 1
script-src 'self' https://www.paypal.com/sdk/js 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.openstreetmap.org www.google.com www.facebook.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com blob: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.google-analytics.com googleads.g.doubleclick.net www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com www.gstatic.com connect.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com www.gstatic.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.trustpilot.com *.hotjar.com *.pcapredict.com *.psplugin.com *.postcodeanywhere.co.uk *.googleapis.com *.cardinalcommerce.com www.googletagmanager.com www.google-analytics.com js-agent.newrelic.com bam.nr-data.net cdn.jsdelivr.net; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' *.trustpilot.com *.hotjar.com *.pcapredict.com *.psplugin.com squeezely.tech assets.sitescdn.net googleads.g.doubleclick.net *.postcodeanywhere.co.uk *.googleapis.com *.cardinalcommerce.com consent.cookiebot.com pay.google.com www.paypalobjects.com www.paypal.com www.googletagmanager.com www.google-analytics.com js-agent.newrelic.com bam.nr-data.net cdn.jsdelivr.net; worker-src 'self' *.psplugin.com blob:; frame-src consentcdn.cookiebot.com *.trustpilot.com *.hotjar.com *.braintreegateway.com www.googletagmanager.com *.doubleclick.net checkout.paypal.com pay.google.com *.cardinalcommerce.com *.paypal.com; frame-ancestors 'self' *.psplugin.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: fonts.google.com fonts.googleapis.com fonts.gstatic.com maps.google.co.jp maps.google.com maps.googleapis.com maps.gstatic.com maps-api-ssl.google.com mapsengine.google.com mt.googleapis.com khms0.googleapis.com khms1.googleapis.com tagmanager.google.com www.googletagmanager.com *.analytics.google.com *.google-analytics.com analytics.google.com google-analytics.com stats.g.doubleclick.net ad-apac.doubleclick.net ad.doubleclick.net bid.g.doubleclick.net cm.g.doubleclick.net googleads.g.doubleclick.net googleads4.g.doubleclick.net static.doubleclick.net td.doubleclick.net *.c.2mdn.net c.2mdn.net gcdn.2mdn.net s0.2mdn.net s1.2mdn.net www.googleadservices.com *.privacysandbox.googleadservices.com privacysandbox.googleadservices.com adservice.google.co.jp adservice.google.com pagead2.googleadservices.com pagead2.googlesyndication.com www.google.com *.metric.gstatic.com metric.gstatic.com ssl.gstatic.com www.gstatic.com t0.gstatic.com t1.gstatic.com t2.gstatic.com t3.gstatic.com encrypted-tbn0.gstatic.com encrypted-tbn1.gstatic.com encrypted-tbn2.gstatic.com encrypted-tbn3.gstatic.com csi.gstatic.com lh3.ggpht.com yt3.ggpht.com *.googlevideo.com googlevideo.com gdata.youtube.com i.ytimg.com img.youtube.com s.youtube.com s.ytimg.com www.youtube.com www.youtube-nocookie.com youtube.com jnn-pa.googleapis.com www.recaptcha.net cdn.jquerytools.org cdnjs.cloudflare.com code.jquery.com cdn.jsdelivr.net distillery.wistia.com embed-cloudfront.wistia.com embed-fastly.wistia.com fast.wistia.com fast.wistia.net pipedream.wistia.com *.wistia.com *.cmp-origin.datasign.co *.webtru.io as.datasign.co cmp-origin.datasign.co cmp.datasign.co cmp.webtru.cloud-circus.com csp.datasign.co fe.datasign.co log.cmp.datasign.co static.cmp.datasign.co webtru.io *.cmp-origin.webtru.cloud-circus.com ccfp.cloudcircus.ai dev-ccfp.cloudcircus.ai contents.bownow.jp dev3-contents.bownow.jp token.bownow.jp www.bow-now.jp js.stripe.com api.stripe.com m.stripe.com m.stripe.network *.stripe.network hooks.stripe.com checkout.stripe.com 95nr3ukf5i.execute-api.ap-northeast-1.amazonaws.com cognito-identity.ap-northeast-1.amazonaws.com cognito-identity.ap-northeast-2.amazonaws.com cognito-identity.ap-south-1.amazonaws.com cognito-identity.ap-southeast-1.amazonaws.com cognito-identity.ap-southeast-2.amazonaws.com cognito-identity.ca-central-1.amazonaws.com cognito-identity.eu-central-1.amazonaws.com cognito-identity.eu-west-1.amazonaws.com cognito-identity.eu-west-2.amazonaws.com cognito-identity.us-east-1.amazonaws.com cognito-identity.us-east-2.amazonaws.com cognito-identity.us-west-2.amazonaws.com cognito-idp.ap-northeast-1.amazonaws.com cognito-idp.ap-northeast-2.amazonaws.com cognito-idp.ap-south-1.amazonaws.com cognito-idp.ap-southeast-1.amazonaws.com cognito-idp.ap-southeast-2.amazonaws.com cognito-idp.ca-central-1.amazonaws.com cognito-idp.eu-central-1.amazonaws.com cognito-idp.eu-west-1.amazonaws.com cognito-idp.eu-west-2.amazonaws.com cognito-idp.us-east-1.amazonaws.com cognito-idp.us-east-2.amazonaws.com cognito-idp.us-west-2.amazonaws.com cognito-sync.ap-northeast-1.amazonaws.com cognito-sync.ap-northeast-2.amazonaws.com cognito-sync.ap-south-1.amazonaws.com cognito-sync.ap-southeast-1.amazonaws.com cognito-sync.ap-southeast-2.amazonaws.com cognito-sync.eu-central-1.amazonaws.com cognito-sync.eu-west-1.amazonaws.com cognito-sync.eu-west-2.amazonaws.com cognito-sync.us-east-1.amazonaws.com cognito-sync.us-east-2.amazonaws.com cognito-sync.us-west-2.amazonaws.com *.clarity.ms c.bing.com clarity.ms content.powerapps.com c.office.com kikusui.powerappsportals.com forms.cloud.microsoft forms.office.com res-1.cdn.office.net browser.events.data.microsoft.com us-mobile.events.data.microsoft.com acsbapp.com cdn.acsbapp.com cdn.docsbot.ai docsbot.ai api.docsbot.ai widget.docsbot.ai timerex.net *.timerex.net global.kikusui.co.jp kikusui.co.jp cn.kikusui.co.jp in.kikusui.co.jp ph.kikusui.co.jp *.kikusui.co.jp *.kikusui-europe.com kikusui-europe.com *.kikusuiamerica.com kikusuiamerica.com kikusui-electronics.biz kikusui.search.zetacx.net cdn.iconmonstr.com; 1
font-src www.paypalobjects.com *.cdn-apple.com *.googleapis.com *.gstatic.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com fonts.gstatic.com d1cwup7r903a1d.cloudfront.net data: 'self' data: 'unsafe-inline' data: *.zopim.com use.fontawesome.com *.yotpo.com static.klaviyo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.affirm.com *.affirm.ca https://www.googletagmanager.com/ www.facebook.com platform.twitter.com static.addtoany.com *.facebook.com *.authorize.net cdn.dnky.co webchat.dotdigital.com accounts.google.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.affirm.com *.affirm.ca https://helloextend-static-assets.s3.amazonaws.com https://extendcoreoffersdemo-offersthemelogobucketeb21afa-19jnurg0a0o17.s3.amazonaws.com https://s3.amazonaws.com https://extendcoreoffersprod-offersthemelogobucketeb21afa-1lr7le13dvgtp.s3.amazonaws.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com *.disqus.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com *.tialsport.com *.injectordynamics.com www.google-analytics.com s.ytimg.com *.cloudfront.net www.tialsport.com *.zopim.com ssl.gstatic.com cdn-assets.affirm.com *.klaviyo.com *.yotpo.com p.yotpoapi.com connect.facebook.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.cdn-apple.com *.googleapis.com *.gstatic.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.affirm.com *.affirm.ca https://*.helloextend.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.kaptcha.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.disqus.com connect.facebook.net twitter.com platform.twitter.com static.addtoany.com cdn.routeapp.io fonts.googleapis.com *.amplitude.com cdn.jsdelivr.net protect-quote-q.route.com protection-widget.route.com stage-protection-widget.route.com protect-lightning-bolt-widget.route.com d3od5si8vgcekb.cloudfront.net ddbmicszvqxcg.cloudfront.net unpkg.com wobs.route.com *.cardinalcommerce.com *.authorize.net video.google.com *.vimeo.com cdn-scripts.signifyd.com www.youtube.com *.trackedlink.net *.trackedweb.net cdn.dnky.co api.comapi.com webchat.dotdigital.com *.klaviyo.com *.avada.io *.zdassets.com *.zopim.com *.cloudflare.com apis.google.com www.google.com www.gstatic.com *.yotpo.com assets.gorgias.chat cdn.verifypass.com config.gorgias.chat contact.gorgias.help 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com assets.braintreegateway.com fonts.googleapis.com https://fonts.googleapis.com https://static.klaviyo.com maxcdn.bootstrapcdn.com d1cwup7r903a1d.cloudfront.net use.fontawesome.com static.klaviyo.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.cardinaltrusted.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.affirm.com *.affirm.ca https://*.helloextend.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.kaptcha.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ stats.addtoany.com https://olegnax.com https://api.instagram.com https://graph.instagram.com/ api.route.com *.amplitude.com cdn.jsdelivr.net protect-quote-q.route.com protection-widget.route.com stage-protection-widget.route.com d3od5si8vgcekb.cloudfront.net protect-lightning-bolt-widget.route.com ddbmicszvqxcg.cloudfront.net unpkg.com wobs.route.com *.trackedlink.net *.trackedweb.net api.comapi.com webchat.dotdigital.com *.klaviyo.com *.zdassets.com *.zopim.com wss://widget-mediator.zopim.com ingress.flareapp.io *.yotpo.com config.gorgias.chat gorgias-convert.com ad.doubleclick.net fh-118116076e9a4c2a96a99fbb70bea2a0.ecs.us-west-2.on.aws www.facebook.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src assets.gorgias.chat 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.full-race.com/csp_report_watch; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-DRBp2gJFayzac8eJMoQ4LQ' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https://cdnapisec.kaltura.com/ https://premier.trustcommerce.com https://stagepremier.trustcommerce.com;script-src 'nonce-d2b28666476c4a30ae97447b49fa53ee' https://www.myhillchart.com 'self';img-src https://* 'self' blob: data:;connect-src 'self' epichttp:;style-src https://www.myhillchart.com 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; img-src 'self' https: data: https://*.sucuri.net; font-src 'self' https://fonts.gstatic.com data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://unpkg.com https://www.googletagmanager.com https://www.google-analytics.com https://*.sucuri.net; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://*.sucuri.net; frame-src 'self' https://www.youtube.com https://player.vimeo.com https://*.sucuri.net; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com maps.googleapis.com *.cybersource.com up.cybersource.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://cas.client.cardinaltrusted.com https://client.cardinaltrusted.com https://centinelapistag.cardinalcommerce.com https://centinelapi.cardinalcommerce.com maps.googleapis.com secureacceptance.cybersource.com testsecureacceptance.cybersource.com cas.client.cardinaltrusted.com client.cardinaltrusted.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://testup.cybersource.com https://up.cybersource.com https://cas.client.cardinaltrusted.com https://client.cardinaltrusted.com https://centinelapistag.cardinalcommerce.com https://centinelapi.cardinalcommerce.com maps.googleapis.com *.cybersource.com up.cybersource.com testup.cybersource.com flex.cybersource.com testflex.cybersource.com secureacceptance.cybersource.com testsecureacceptance.cybersource.com cas.client.cardinaltrusted.com client.cardinaltrusted.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.wesupply.xyz https://wesupplylabs.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io maps.googleapis.com *.cybersource.com up.cybersource.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://testup.cybersource.com https://up.cybersource.com s7.addthis.com player.vimeo.com maps.googleapis.com polyfill.io  googleapis.com *.cybersource.com up.cybersource.com testup.cybersource.com flex.cybersource.com testflex.cybersource.com cas.client.cardinaltrusted.com client.cardinaltrusted.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com maps.googleapis.com *.cybersource.com up.cybersource.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com testup.cybersource.com up.cybersource.com ekr.zdassets.com/ maps.googleapis.com *.cybersource.com api.cybersource.com testapi.cybersource.com *.cardinalcommerce.com *.cardinaltrusted.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://maps.googleapis.com/; report-to report-endpoint; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.youtube.com https://s.ytimg.com https://www.google-analytics.com https://*.moatads.com https://*.doubleclick.net https://*.newrelic.com https://*.nr-data.net https://*.googlevideo.com https://*.arcgis.com https://*.gov.uk https://*.facebook.com https://challenges.cloudflare.com; frame-src 'self' https://*.youtube.com https://www.googletagmanager.com https://*.arcgis.com https://challenges.cloudflare.com; report-uri https://snhwebsite.report-uri.com/r/d/csp/reportOnly 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://*.clerk.accounts.dev https://clerk.trychannel3.com https://js.stripe.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https://api.trychannel3.com https://internal.trychannel3.com https://*.clerk.accounts.dev https://clerk.trychannel3.com https://i.trychannel3.com https://www.google-analytics.com https://www.googletagmanager.com; frame-src https://js.stripe.com https://*.clerk.accounts.dev https://clerk.trychannel3.com https://trychannel3.substack.com; frame-ancestors 'self' 1
worker-src blob:; font-src fonts.gstatic.com *.kxcdn.com *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://seo.mageplaza.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ checkout.stripe.com assets.braintreegateway.com *.affirm.com *.affirm.ca facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com landofcoder.com maps.googleapis.com chart.googleapis.com c.paypal.com checkout.paypal.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://plumrocket.com *.wesupply.xyz https://wesupplylabs.com challenges.cloudflare.com *.weltpixel.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.affirm.com *.affirm.ca scontent.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.gstatic.com *.cdninstagram.com *.fbcdn.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.disqus.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ checkout.stripe.com assets.braintreegateway.com *.affirm.com *.affirm.ca *.googleapis.com *.google.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com 'unsafe-inline' *.addthis.com *.addthisedge.com *.moatads.com static.cloudflareinsights.com chimpstatic.com downloads.mailchimp.com *.list-manage.com widget.freshworks.com m2epro.freshdesk.com landofcoder.com maps.googleapis.com chart.googleapis.com *.disqus.com *.avada.io js.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cloudflare.com challenges.cloudflare.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com checkout.stripe.com assets.braintreegateway.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com downloads.mailchimp.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com unsafe-inline 'self' 'unsafe-inline'; object-src landofcoder.com maps.googleapis.com chart.googleapis.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.affirm.com *.affirm.ca https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com widget.freshworks.com m2epro.freshdesk.com landofcoder.com maps.googleapis.com chart.googleapis.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
font-src *.googleapis.com *.gstatic.com data: *.fontawesome.com *.typekit.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com axeptio.imgix.net *.google-analytics.com *.google.fr *.google.com *.privacy-center.org www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.axept.io cdn.jsdelivr.net cdnjs.cloudflare.com *.privacy-center.org *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com cdnjs.cloudflare.com *.typekit.net unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com api.axept.io client.axept.io *.google-analytics.com *.google.com *.google.fr *.privacy-center.org https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com *.cloudflare.com *.twitter.com *.klaviyo.com *.googleapis.com *.bootstrapcdn.com *.olark.com *.paypal.com https://cdn.accessibly.app https://maps.gstatic.com *.klarnacdn.net https://fonts.bunny.net maxcdn.bootstrapcdn.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com https://plumrocket.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.meetanshi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.klarna.com *.meetanshi.com https://meetanshi.com *.twitter.com *.addthis.com *.doubleclick.net *.cookiebot.com *.intercom.io https://plumrocket.com *.weltpixel.com *.yotpo.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.meetanshi.com https://meetanshi.com *.cloudflare.com *.googleadservices.com *.cloudfront.net *.twitter.com *.olark.com *.vimeo.com *.bing.com *.google.co.in *.doubleclick.net *.googletagmanager.com *.cookiebot.com *.cardinalcommerce.com https://cdn.accessibly.app https://maps.gstatic.com https://bzr.openai.com *.intercom.io *.intercomcdn.com *.disqus.com https://firebasestorage.googleapis.com *.yotpo.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ apis.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.meetanshi.com https://meetanshi.com *.cloudflare.com *.cloudflareinsights.com *.twitter.com *.google-analytics.com *.googleadservices.com *.klaviyo.com https://dash.accessibly.app https://cdn.accessibly.app https://maps.googleapis.com *.googletagmanager.com *.cardinalcommerce.com maxcdn.bootstrapcdn.com *.gstatic.com *.trustedshops.com *.fontawesome.com *.addthis.com widgets.pinterest.com *.olark.com *.callrail.com *.pinimg.com *.hotjar.com *.ipify.org *.noibu.com *.bing.com *.schema.org *.pinterest.com *.yotpo.com *.facebook.net *.cookiebot.com *.paypalobjects.com https://bzrcdn.openai.com *.intercom.io *.intercomcdn.com *.klarnaservices.com *.disqus.com *.avada.io *.shopify.com *.maxmind.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com *.certcapture.com assets.braintreegateway.com *.paypal.com *.cloudflare.com *.googleapis.com *.twitter.com *.gstatic.com *.typekit.net *.bootstrapcdn.com *.olark.com *.vimeo.com *.cardinalcommerce.com *.googletagmanager.com https://maps.gstatic.com *.google-analytics.com *.cookiebot.com *.klarnacdn.net https://fonts.bunny.net maxcdn.bootstrapcdn.com *.yotpo.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.olark.com *.gstatic.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.certcapture.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.meetanshi.com https://meetanshi.com *.cloudflare.com *.klaviyo.com *.twitter.com *.olark.com *.callrail.com *.pinterest.com *.facebook.com *.doubleclick.net *.bing.com *.cookiebot.com https://alt-tags.accessiblyapp.com https://bzr.openai.com https://bzrcdn.openai.com *.intercom.io *.intercomcdn.com *.klarnaservices.com *.klarna.com https://get.geojs.io *.avada.io *.mmapiws.com *.yotpo.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.google-analytics.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud maxcdn.bootstrapcdn.com github.com pouch-global-font-assets.s3.eu-central-1.amazonaws.com *.hotjar.com static3.avast.com use.fontawesome.com widget.superchat.de *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud pay.realexpayments.com *.tawk.to *.two.inc *.sandbox.two.inc *.demo.two.inc *.staging.two.inc *.release.two.inc *.experimental.two.inc *.perf.two.inc *.cyber.two.inc 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud www.google.com www.googletagmanager.com tpc.googlesyndication.com t.sharethis.com tourmkr.com *.hotjar.com widget.trustpilot.com c.sharethis.mgr.consensu.org gateway.zscaler.net gateway.zscloud.net puckator.us16.list-manage.com account.fetchify.com secure.payu.com merch-prod.snd.payu.com *.tawk.to *.wesupply.xyz https://wesupplylabs.com guarantee-cdn.com *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com *.stripe.network *.google.com ebizmarts-website.s3.amazonaws.com brippo.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud www.google.com.ec www.google.co.id www.google.lv www.google.com.gi www.google.co.il www.google.md www.google.com.mt www.google.co.in www.google.nl www.google.com.mx www.google.co.jp www.google.no www.google.com.ng www.google.co.kr www.google.pl www.google.com.ni www.google.co.ma www.google.pt www.google.com.pe www.google.co.th www.google.ro www.google.com.ph www.google.co.uk www.google.ru www.google.se www.google.com.pk www.google.co.ve admin.puckator.info www.google.sh www.google.com.sg www.google.co.za cdn-images.mailchimp.com www.google.si www.google.com.tr www.google.co.zm www.google.sk www.google.com.ua www.google.sm www.google.com.uy www.google.com.ar www.google.sn www.google.com.vn www.google.com.au image.providesupport.com www.google.tn www.google.cz blob: www.google.com.bd l.sharethis.com www.google.tt www.google.de www.google.com.bo mcusercontent.com www.google.dk www.google.com.co platform-cdn.sharethis.com www.gstatic.com www.google.ee www.apptrian.com www.google.com.cy s3.amazonaws.com www.puckator-ipad.net www.google.es www.google.com.do shinesoftware.it www.puckator.co.uk www.google.fi translate.google.com www.puckator.cz www.google.fr translate.googleapis.com www.tailwindapp.com www.google.ga www.google.gg www.google.ad www.google.gr www.google.ae www.google.hr www.google.at www.google.hu www.google.az www.google.ie www.google.be www.google.im www.google.ca www.google.is www.google.ch www.google.it www.google.ci www.google.lt www.google.cl www.google.lu integrations.etrusted.com files.superchat.de magefan.com cm.magefan.com *.disqus.com https://meetanshi.com/media/logo.png static.payu.com *.tawk.to tawk.link cdn.jsdelivr.net s3.amazonaws.com/ guarantee-cdn.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com tagmanager.google.com https://www.googletagmanager.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud mc.us16.list-manage.com platform-api.sharethis.com *.hotjar.com t.sharethis.com vezowi.rakiwoxori.com www.google.com bam.eu01.nr-data.net buttons-config.sharethis.com chs03.cookie-script.com goal.us16.list-manage.com js-agent.newrelic.com zakuto.rijedegevu.com data1.pletar.com zamaca.didemofedo.com data1.poolif.com zuvofu.towaxubudo.com data1.raplof.com data1.rectez.com fevoki.wejekihota.com a.apiywc.net image.providesupport.com ajax.googleapis.com jigepu.macudivida.com kafiro.kuwinesume.com cehute.ramitetuha.com lizere.nepefeseju.com najiwu.xeyutezepo.com peboki.wukedowoki.com data1.eneude.com poruce.neyelanane.com data1.good-recettes.com data1.hyjouco.com rdc.apicit.net tpc.googlesyndication.com translate.google.com translate.googleapis.com widget.bugreporting.co widget.trustpilot.com www.gstatic.com www.webrtc-experiment.com player.vimeo.com cdn.cookie-script.com cdn.leadchampion.com mastertag.leadchampion.com widget.superchat.de integrations.etrusted.com cdn.connectif.cloud cc-cdn.com *.disqus.com secure.payu.com secure.snd.payu.com *.tawk.to cdn.jsdelivr.net *.cloudflare.com guarantee-cdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com downloads.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud maxcdn.bootstrapcdn.com puckator.fr translate.googleapis.com widget.bugreporting.co www.puckator.fr *.typekit.net integrations.etrusted.com cc-cdn.com *.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com player.vimeo.com *.tawk.to tawk.link 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.facebook.com graph.facebook.com business.facebook.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com fonts.googleapis.com fonts.gstatic.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud bam.eu01.nr-data.net gjtrack.ucweb.com *.hotjar.com *.hotjar.io l.sharethis.com l.sharethis.mgr.consensu.org plugin.ucads.ucweb.com server.bugreporting.co stats.g.doubleclick.net translate.google.com translate.googleapis.com www.google-analytics.com www.google.com region1.analytics.google.com integrations.etrusted.com *.superchat.de api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com secure.payu.com merch-prod.snd.payu.com *.tawk.to wss://*.tawk.to *.two.inc *.sandbox.two.inc *.demo.two.inc *.staging.two.inc *.release.two.inc *.experimental.two.inc *.perf.two.inc *.cyber.two.inc 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.two.inc *.sandbox.two.inc *.demo.two.inc *.staging.two.inc *.release.two.inc *.experimental.two.inc *.perf.two.inc *.cyber.two.inc 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com https://www.gstatic.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io creditkey-assets.s3-us-west-2.amazonaws.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page www.google.com/recaptcha/ www.gstatic.com/recaptcha/ unpkg.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://static.klaviyo.com *.fontawesome.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net https://square-fonts-production-f.squarecdn.com/ https://d1g145x70srn7h.cloudfront.net/ https://cash-f.squarecdn.com/ https://fonts.gstatic.com/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.googletagmanager.com/ js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * canadapost.ca ct.soa-gw.canadapost.ca soa-gw.canadapost.ca https://pci-connect.squareup.com https://connect.squareup.com https://pci-connect.squareupsandbox.com https://connect.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://www.gstatic.com/ https://sandbox.api.cash.app/ https://site-assets.afterpay.com/ https://sandbox.web.squarecdn.com/ https://api.cash.app/ https://web.squarecdn.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://franklin-assets.s3.amazonaws.com/ https://static.sandbox.afterpay.com/ https://static.afterpay.com/ https://static.sandbox.afterpay.com/logo/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io *.shopify.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://js-sandbox.squarecdn.com https://js.squareup.com https://js.afterpay.com/ https://nd.squarecdn.com https://js.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://portal.sandbox.afterpay.com/ https://portal.afterpay.com/ https://cdn.plaid.com/ https://sandbox.kit.cash.app/ https://kit.cash.app/ https://js-sandbox.squarecdn.com/ https://js.squarecdn.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://fonts.googleapis.com/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com canadapost.ca ct.soa-gw.canadapost.ca soa-gw.canadapost.ca https://pci-connect.squareup.com https://pci-connect.squareupsandbox.com https://api.amplitude.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://o160250.ingest.sentry.io/ https://api.lab.amplitude.com/sdk/vardata https://sandbox.plaid.com/ https://production.plaid.com/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.sagepay.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.site.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.sagepay.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://images.unsplash.com cdn.cookie-script.com *.site.com *.salesforce-scrt.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page https://maps.googleapis.com https://player.vimeo.com cdn.cookie-script.com *.site.com *.sagepay.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.cookie-script.com *.fontawesome.com *.site.com *.salesforce-scrt.com *.googleapis.com *.addtoany.com assets.braintreegateway.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com cdn.cookie-script.com consent.cookie-script.com *.salesforce-scrt.com *.site.com *.sagepay.com api.addressy.com http://dpm.demdex.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://tracker.radiosondy.info; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https://*.tile.openstreetmap.org https://server.arcgisonline.com https://maps.google.com https://tracker.radiosondy.info; connect-src 'self' https://tracker.radiosondy.info https://nominatim.openstreetmap.org; frame-src 'self' https://www.google.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://fonts.gstatic.com *.fontawesome.com https://applepay.cdn-apple.com https://fonts.googleapis.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com magento-cloudflare.jetrails.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://applepay.cdn-apple.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io *.trustpilot.com https://www.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.ytimg.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com *.facebook.com https://static.buckaroo.nl https://www.buckaroo.nl https://www.paypalobjects.com https://pay.google.com https://developers.google.com https://applepay.cdn-apple.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com https://mylivechat.com https://uk.mylivechat.com https://www.google.nl https://tagging.camperpassie.nl data: 'self' 'unsafe-inline'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com downloads.mailchimp.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl tagmanager.google.com fonts.google.com *.trustpilot.com https://uk.mylivechat.com https://www.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; connect-src https://tagging.camperpassie.nl dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://applepay.buckaroo.io https://smp-paymentservices.apple.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com *.googletagmanager.com https://www.feedbackcompany.com https://mylivechat.com https://uk.mylivechat.com https://stats.g.doubleclick.net https: 'self' 'unsafe-inline'; script-src https://tagging.camperpassie.nl assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.cardinaltrusted.com chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.googletagmanager.com *.facebook.net www.termsfeed.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com https://www.sandbox.paypal.com https://applepay.cdn-apple.com https://pay.google.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io tagmanager.google.com *.trustpilot.com https://www.feedbackcompany.com https://mylivechat.com https://uk.mylivechat.com https: 'self' 'unsafe-inline' 'unsafe-eval'; 1
default-src 'self'; script-src 'self' www.greatharvest.com *.hsadspixel.net *.hs-analytics.net js.hscta.net *.hubspot.com static.hsappstatic.net *.usemessages.com *.hs-banner.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspotusercontent-na1.net *.hubspot.net *.hscollectedforms.net *.hsleadflows.net *.hsforms.net *.hsforms.com *.hs-scripts.com *.hubspotfeedback.com feedback.hubapi.com www.googletagmanager.com www.google-analytics.com cdn.jsdelivr.net www.googleadservices.com www.google.com pagead2.googlesyndication.com googleads.g.doubleclick.net 'strict-dynamic' 'nonce-IJkbdluevYgFMkrlSjd8oQ=='; style-src 'self' 'unsafe-inline' www.greatharvest.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspotusercontent-na1.net cdn2.hubspot.net cdn.jsdelivr.net fonts.googleapis.com use.fontawesome.com cdn.userway.org; img-src 'self' data: js.hscta.net no-cache.hubspot.com *.hubspot.com *.hubspotusercontent00.net *.hubspotusercontent10.net *.hubspotusercontent20.net *.hubspotusercontent30.net *.hubspotusercontent40.net *.hubspotusercontent-na1.net *.hubspot.net cdn2.hubspot.net *.hsforms.net *.hsforms.com www.googletagmanager.com www.google-analytics.com www.google.com google.com www.googleadservices.com googleads.g.doubleclick.net pagead2.googlesyndication.com cdn.userway.org www.facebook.com px.ads.linkedin.com log.pinterest.com; font-src 'self' data: fonts.gstatic.com use.fontawesome.com *.hubspotusercontent-na1.net cdn2.hubspot.net; connect-src 'self' *.hubapi.com js.hscta.net *.hubspot.com *.hs-banner.com *.hscollectedforms.net *.hsforms.com www.google-analytics.com www.googletagmanager.com www.google.com analytics.google.com google.com www.googleadservices.com googleads.g.doubleclick.net pagead2.googlesyndication.com ad.doubleclick.net stats.g.doubleclick.net api.userway.org cdn.userway.org cdn77.api.userway.org px.ads.linkedin.com pipedream.wistia.com; frame-src 'self' www.greatharvest.com *.hubspot.com *.hs-sites.com *.hubspot.net play.hubspotvideo.com *.hsforms.net *.hsforms.com www.googletagmanager.com; child-src *.hsforms.com 1
default-src 'self'; form-action 'none'; frame-ancestors 'none'; report-uri https://05b05d212ae69f14bc0693ae06b9402c.report-uri.com/r/t/csp/wizard 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https://static.klaviyo.com assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src cdn.jsdelivr.net fonts.gstatic.com cdn.almapay.com *.googleapis.com *.gstatic.com data: 'self' blob: *.cart-guru.io 'self' blob: *.carts.guru 'self' blob: *.cartsguru.io *.fontawesome.com https://applepay.cdn-apple.com cl.avis-verifies.com fonts.googleapis.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.getalma.eu www.google.com 'self' blob: *.cart-guru.io 'self' blob: *.carts.guru 'self' blob: *.cartsguru.io *.payplug.com *.dalenys.com https://applepay.cdn-apple.com cl.avis-verifies.com *.addthis.com *.facebook.com *.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://plumrocket.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com 'self' blob: *.cart-guru.io 'self' blob: *.carts.guru 'self' blob: *.cartsguru.io *.doofinder.com maps.gstatic.com sst.kangui.com *.analytics.google.com www.facebook.com www.google.fr bat.bing.com bat.bing.net *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com https://secure-magenta.dalenys.com cl.avis-verifies.com *.addthisedge.com *.twitter.com *.openstreetmap.org maps.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.jsdelivr.net *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ 'self' blob: *.cart-guru.io 'self' blob: *.carts.guru 'self' blob: *.cartsguru.io *.doofinder.com maps.googleapis.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ sst.kangui.com *.zdassets.com *.zendesk.com *.zopim.com static.hotjar.com cdn.payplug.com cdn.cartsguru.io integration.carts.guru bat.bing.com bat.bing.net *.googletagmanager.com tagmanager.google.com https://secure-magenta.dalenys.com https://applepay.cdn-apple.com api.payplug.com cl.avis-verifies.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.net *.twitter.com maps.gstatic.com fonts.googleapis.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.jsdelivr.net fonts.googleapis.com 'self' blob: *.cart-guru.io 'self' blob: *.carts.guru 'self' blob: *.cartsguru.io *.doofinder.com tagmanager.google.com fonts.google.com *.fontawesome.com https://secure-magenta.dalenys.com https://fonts.googleapis.com https://cdnjs.cloudflare.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' blob: *.cart-guru.io 'self' blob: *.carts.guru 'self' blob: *.cartsguru.io 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.getalma.eu *.googleapis.com 'self' blob: *.cart-guru.io 'self' blob: *.carts.guru 'self' blob: *.cartsguru.io *.doofinder.com wss://*.doofinder.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ sst.kangui.com *.zdassets.com *.zendesk.com *.zopim.com wss://widget-mediator.zopim.com cdn.cartsguru.io integration.carts.guru bat.bing.com bat.bing.net *.google-analytics.com *.analytics.google.com *.googletagmanager.com awsapis3.netreviews.eu maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src 'self' blob: *.cart-guru.io 'self' blob: *.carts.guru 'self' blob: *.cartsguru.io assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' blob: *.cart-guru.io 'self' blob: *.carts.guru 'self' blob: *.cartsguru.io 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.fontawesome.com *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.twitter.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.youtube.com/ *.addthis.com *.facebook.com *.twitter.com *.mercadolibre.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.addthisedge.com *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar *.mercadolivre.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-ds.com https://rum.hlx.page *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.trackedlink.net *.addthis.com *.moatads.com *.addthisedge.com *.facebook.net *.mlstatic.com *.mercadopago.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu https://fonts.googleapis.com https://cdnjs.cloudflare.com unsafe-inline assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io commerce.adobe.net qa-api.magedevteam.com *.sentry.io *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.googleadservices.com *.google-analytics.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org *.mercadopago.com *.mercadolibre.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google.com google.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.hotjar.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.mitec.com.mx *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.mitec.com.mx 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mitec.com.mx *.e-pago.com.mx www.threedsecurempi.com *.doubleclick.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.feedoptimise.com cdn.feedoptimise.com *.pidesalud.com *.pidederma.com *.farmaciasespecializadas.com *.google.com *.google.com.mx *.bing.com *.clarity.ms *.googleapis.com maps.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.feedoptimise.com cdn.feedoptimise.com *.mitec.com.mx https://cdnjs.cloudflare.com https://static.hotjar.com https://script.hotjar.com/modules.28e3191d8757c557b4b7.js https://www.clarity.ms https://bat.bing.com https://cdn.mouseflow.com *.hotjar.com *.gstatic.com *.adobe.io cdn.mxpnl.com cdn.brevo.com scripts.clarity.ms *.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.magento.com *.magento-datasolutions.com *.magento-ds.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mitec.com.mx https://bam.nr-data.net https://bam-cell.nr-data.net https://stats.g.doubleclick.net https://googleads.g.doubleclick.net *.mouseflow.com *.clarity.ms *.google.com.mx *.appspot.com wss://ws.hotjar.com/ *.hotjar.com *.hotjar.io live.store-locator.nx.iwdfun.com *.a.run.app https://demo-1.conversionsapigateway.com *.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://1mal1japan.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *; script-src-elem 'self' 'unsafe-inline' data: blob: *; style-src 'self' 'unsafe-inline' data: *; style-src-elem 'self' 'unsafe-inline' data: *; img-src 'self' data: blob: *; font-src 'self' data: *; connect-src 'self' data: *; frame-src 'self' blob: about: *; worker-src 'self' blob: *; media-src 'self' data: https://beacon-v2.helpscout.net *; report-uri /csp-report.php; 1
default-src 'self'; script-src 'self' 'nonce-asdO+wSnDp1jgq0e9bgq8w==' https://checkout.razorpay.com https://api.razorpay.com https://cdn.razorpay.com https://www.google.com https://www.gstatic.com https://apis.google.com https://accounts.google.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://connect.facebook.net https://embed.tawk.to https://static.cloudflareinsights.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.jquery.com https://maxcdn.bootstrapcdn.com https://stackpath.bootstrapcdn.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.jquery.com https://maxcdn.bootstrapcdn.com https://stackpath.bootstrapcdn.com https://embed.tawk.to; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://embed.tawk.to; img-src 'self' data: https: blob:; connect-src 'self' https://api.razorpay.com https://lumberjack.razorpay.com https://www.google-analytics.com https://analytics.google.com https://www.google.com https://www.google.co.in https://www.google.ae https://www.googleadservices.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://accounts.google.com https://www.facebook.com https://firebaseinstallations.googleapis.com https://fcm.googleapis.com https://fcmregistrations.googleapis.com https://notify.crestolympiads.com https://*.tawk.to wss://*.tawk.to; frame-src 'self' https://api.razorpay.com https://checkout.razorpay.com https://accounts.google.com https://www.google.com https://www.googletagmanager.com https://www.facebook.com https://web.facebook.com https://td.doubleclick.net https://googleads.g.doubleclick.net https://www.youtube.com https://www.youtube-nocookie.com https://tawk.to https://*.tawk.to; object-src 'none'; base-uri 'self'; form-action 'self' https://api.razorpay.com https://www.facebook.com; report-uri https://www.olympiadsuccess.com/csp-report 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://www.googletagmanager.com *.googleapis.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net https://cdnjs.cloudflare.com https://applepay.cdn-apple.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com p.monetico-services.com/ *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com cl.avis-verifies.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.payplug.com *.dalenys.com https://applepay.cdn-apple.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com *.googleapis.com a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org *.openstreetmap.org maps.googleapis.com maps.gstatic.com t4.my-probance.one/ www.google.fr t4.my-probance.one https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://secure-magenta.dalenys.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com https://maps.googleapis.com *.googleapis.com *.gstatic.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com static.cloudflareinsights.com ajax.cloudflare.com/ t4.my-probance.one/ t4.my-probance.one *.avada.io *.shopify.com js.mollie.com https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com https://secure-magenta.dalenys.com https://applepay.cdn-apple.com api-qa.payplug.com cdn-qa.payplug.com api.payplug.com cdn.payplug.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net https://fonts.googleapis.com https://cdnjs.cloudflare.com assets.braintreegateway.com https://secure-magenta.dalenys.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com maps.googleapis.com region1.analytics.google.com https://get.geojs.io *.avada.io https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src t4.my-probance.one/ *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: *.klaviyo.com *.cloudfront.net *.reviews.io *.reviews.co.uk https://plugin-magento-ui.glopalservice.com *.klarnacdn.net maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com agechecked.verifico.io unity.agechecked.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.reviews.io *.reviews.co.uk *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self' agechecked.verifico.io unity.agechecked.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.awin1.com *.zenaps.com *.doubleclick.net embedsocial.com *.google.co.uk *.reviews.io *.reviews.co.uk *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com agechecked.verifico.io unity.agechecked.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.awin1.com *.zenaps.com *.wepowerconnections.com imgsct.cookiebot.com *.cookiepro.com *.cloudfront.net *.cdninstagram.com *.postcodeanywhere.co.uk *.bing.com *.bing.net *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.reviews.io *.reviews.co.uk https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ services.postcodeanywhere.co.uk www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com agechecked.verifico.io unity.agechecked.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com consent.cookiebot.com *.cookiepro.com embedsocial.com *.zdassets.com *.doubleclick.net *.pcapredict.com *.postcodeanywhere.co.uk *.googlesyndication.com *.bing.com *.clarity.ms *.hotjar.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.reviews.io *.reviews.co.uk https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com cdn-renderer.glopalstore.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.addressy.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com agechecked.verifico.io unity.agechecked.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com embedsocial.com *.postcodeanywhere.co.uk *.klaviyo.com 'self' data: *.cloudfront.net *.reviews.io *.reviews.co.uk https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com *.klarnacdn.net https://static.klaviyo.com api.addressy.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com agechecked.verifico.io unity.agechecked.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.wepowerconnections.com https://the.sciencebehindecommerce.com *.google-analytics.com *.analytics.google.com cbsignal-1.in-endp.profitmetrics.io googleads.g.doubleclick.net *.cookiepro.com *.onetrust.com *.zdassets.com *.zendesk.com wss://widget-mediator.zopim.com *.googlesyndication.com *.postcodeanywhere.co.uk *.bing.net wss://ws.hotjar.com *.hotjar.io *.googletagmanager.com stats.g.doubleclick.net *.cloudfront.net *.reviews.io *.reviews.co.uk https://api-plugin-facade.glopalservice.com https://cognito-idp.eu-west-1.amazonaws.com api.glopaltranslator.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.addressy.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.link.com *.amazon.com agechecked.verifico.io unity.agechecked.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://portal.envisagedigital.co.uk/api/website/23noff24jl/report-uri; report-to report-endpoint; 1
script-src 'self' 'nonce-UCYKk//9JrO0YUGeTSWK3Wbk80stCaPPV94T/7HDCDk=' 'strict-dynamic' 'wasm-unsafe-eval' www.youtube.com  az416426.vo.msecnd.net cdn.cookielaw.org www.google-analytics.com maps.googleapis.com www.googletagmanager.com  dl.episerver.net www.youtube.com www.google.com www.gstatic.com snap.licdn.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.com.ai https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.ms https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.vg https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat  https://connect.facebook.net/ https://munchkin.marketo.net/ static.hotjar.com script.hotjar.com https://cdn.jsdelivr.net/ https://cdn.cookielaw.org/;object-src 'none';base-uri 'self';report-uri https://o4507537122852864.ingest.de.sentry.io/api/4507764299726928/security/?sentry_key=2e67b3fa9c193f38db8ea33933d09ffa&sentry_environment=production&sentry_release=sprint24; 1
default-src 'self' 'unsafe-inline' https://meals2go.com https://meals2go.wegmans.com https://www.meals2go.com  https://images.wegmans.com https://s7d1.scene7.com https://hello.myfonts.net https://dok.js-cdn.dynatrace.com https://cm.everesttech.net https://www.google.com https://ct.pinterest.com https://px.ads.linkedin.com https://www.facebook.com https://connect.facebook.net https://googleads.g.doubleclick.net *.adobedc.com https://di.rlcdn.com https://s.pinimg.com https://snap.licdn.com ; connect-src data: https://simulator-cert-eastus2.azurewebsites.net https://meals2go.cert.wegmans.cloud https://meals2go.dev.wegmans.cloud https://meals2go.test.wegmans.cloud *.livediagnostics.monitor.azure.com *.applicationinsights.azure.com https://images.wegmans.com https://meals2go.wegmans.com https://www.meals2go.com https://meals2go.com https://wfm-cmp-functionapp-prod-eastus.azurewebsites.net https://wfm-cmp-functionapp-cert-eastus.azurewebsites.net https://wfm-cmp-functionapp-dev-eastus.azurewebsites.net https://wfm-cmp-functionapp-sandbox-eastus.azurewebsites.net https://*.akamaihd.net https://cdn.cookielaw.org https://geolocation.onetrust.com https://googleads.g.doubleclick.net https://google.com https://www.google.com https://myaccount.wegmans.com https://stagingmyaccount.wegmans.com https://wegapi.azure-api.net https://wegdevapi.azure-api.net https://wegcertapi.azure-api.net https://*.digitaldevelopment.wegmans.com https://mbox.wegmans.com https://app.launchdarkly.com https://events.launchdarkly.com https://*.akstat.io https://*.go-mpulse.net https://dc.services.visualstudio.com https://dpm.demdex.net https://adobedc.demdex.net https://edge.adobedc.net https://clientstream.launchdarkly.com https://js.monitor.azure.com https://s.pinimg.com  https://ct.pinterest.com https://px.ads.linkedin.com https://snap.licdn.com https://www.facebook.com https://*.bf.dynatrace.com https://www.googleadservices.com https://dok.js-cdn.dynatrace.com https://cm.everesttech.net https://www.googletagmanager.com https://fonts.gstatic.com https://connect.facebook.net https://hello.myfonts.net https://s7d1.scene7.com https://beacon.riskified.com https://c.riskified.com https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' https://meals2go.com https://meals2go.wegmans.com https://www.meals2go.com https://myaccount.wegmans.com https://*.go-mpulse.net https://cm.everesttech.net https://px.ads.linkedin.com https://s.pinimg.com https://googleads.g.doubleclick.net https://www.google.com  https://hello.myfonts.net https://di.rlcdn.com https://connect.facebook.net px.ads.linkedin.com ; script-src-elem 'self' 'unsafe-inline' data: https://images.wegmans.com https://myaccount.wegmans.com https://wfm-cmp-functionapp-prod-eastus.azurewebsites.net https://wfm-cmp-functionapp-cert-eastus.azurewebsites.net https://wfm-cmp-functionapp-dev-eastus.azurewebsites.net https://wfm-cmp-functionapp-sandbox-eastus.azurewebsites.net https://meals2go.com https://meals2go.wegmans.com https://www.meals2go.com https://dok.js-cdn.dynatrace.com https://*.go-mpulse.net https://*.akamaihd.net https://googleads.g.doubleclick.net https://www.google.com https://www.googleadservices.com https://cm.everesttech.net px.ads.linkedin.com https://px.ads.linkedin.com https://ct.pinterest.com https://www.googletagmanager.com https://connect.facebook.net https://www.facebook.com *.adobedc.com https://assets.adobedtm.com https://di.rlcdn.com https://s.pinimg.com https://snap.licdn.com https://fonts.gstatic.com https://dpm.demdex.net https://hello.myfonts.net https://s7d1.scene7.com https://cdn.cookielaw.org https://beacon.riskified.com; img-src 'self' data: blob: https://meals2go.com https://meals2go.wegmans.com https://www.meals2go.com https://myaccount.wegmans.com https://images.wegmans.com https://images.salsify.com https://cdn.cookielaw.org https://*.akstat.io https://img.riskified.com https://d19hn3jcfcdeky.cloudfront.net https://d17qf54098xvyo.cloudfront.net *.adobedc.com https://di.rlcdn.com https://s.pinimg.com https://ct.pinterest.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.linkedin.com https://www.googletagmanager.com https://s7d1.scene7.com https://cm.everesttech.net https://www.google.com https://www.facebook.com px.ads.linkedin.com https://px.ads.linkedin.com https://dok.js-cdn.dynatrace.com https://fonts.gstatic.com https://dpm.demdex.net https://hello.myfonts.net https://connect.facebook.net https://snap.licdn.com; frame-src 'self' data: https://images.wegmans.com https://meals2go.com https://meals2go.wegmans.com https://www.meals2go.com https://myaccount.wegmans.com https://stagingmyaccount.wegmans.com *.adobedc.com https://login.microsoftonline.com *.aurusepay.com *.auruspay.com https://0324.semafone.cloud https://0324.preprod.semafone.cloud https://di.rlcdn.com https://s.pinimg.com https://connect.facebook.net https://ct.pinterest.com https://wegmans.demdex.net https://snap.licdn.com https://googleads.g.doubleclick.net https://td.doubleclick.net https://www.googletagmanager.com https://dok.js-cdn.dynatrace.com https://cm.everesttech.net https://px.ads.linkedin.com https://fonts.gstatic.com  https://www.google.com https://www.facebook.com https://hello.myfonts.net https://s7d1.scene7.com ; style-src-elem 'self' 'unsafe-inline' https://meals2go.com https://meals2go.wegmans.com https://www.meals2go.com https://px.ads.linkedin.com https://hello.myfonts.net; font-src 'self' data: https://meals2go.com https://meals2go.wegmans.com https://www.meals2go.com https://dok.js-cdn.dynatrace.com https://cm.everesttech.net https://www.google.com https://fonts.gstatic.com ; worker-src 'self' blob: ; frame-ancestors 'self' https://googleads.g.doubleclick.net https://td.doubleclick.net ; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self' https://automo.ai https://*.automo.ai https://*.sandbox.ciao.dev https://desygner.com https://*.desygner.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://js.stripe.com https://*.hs-scripts.com https://*.hsforms.net https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://*.supabase.co https://*.automo.ai; media-src 'self' data: blob: https:; connect-src 'self' https: wss:; frame-src 'self' https://js.stripe.com https://www.googletagmanager.com; worker-src 'self' blob:; report-uri https://prod-api.automo.ai/functions/v1/csp-report; report-to csp 1
script-src 'self' 'unsafe-inline' https://cdn.weglot.com https://static.b-ite.com https://cs-assets.b-ite.com https://chat-app.neurabot.neuraflow.de https://prod-chat-app.neurabot.neuraflow.de/ cdn.jsdelivr.net cdn1.readspeaker.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.etracker.com https://unpkg.com platform.instagram.com platform.twitter.com www.etracker.de; script-src-elem 'self' 'unsafe-inline' https://cdn.weglot.com https://static.b-ite.com https://cs-assets.b-ite.com https://chat-app.neurabot.neuraflow.de https://prod-chat-app.neurabot.neuraflow.de/ cdn.jsdelivr.net cdn1.readspeaker.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.etracker.com https://unpkg.com platform.instagram.com platform.twitter.com www.etracker.de; style-src 'self' 'unsafe-inline' https://cdn.weglot.com https://cs-assets.b-ite.com https://chat-app.neurabot.neuraflow.de https://prod-chat-app.neurabot.neuraflow.de/ https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com cdn1.readspeaker.com; style-src-elem 'self' 'unsafe-inline' https://cdn.weglot.com https://cs-assets.b-ite.com https://chat-app.neurabot.neuraflow.de https://prod-chat-app.neurabot.neuraflow.de/ https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com cdn1.readspeaker.com 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com maxcdn.bootstrapcdn.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.dotdigital-pages.com *.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.trackedlink.net *.ddlnk.net https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://stackpath.bootstrapcdn.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.3bsystems.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://stackpath.bootstrapcdn.com *.fontawesome.com maxcdn.bootstrapcdn.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.bomenenzo.nl www.bomenenzo.nl *.feedbackcompany.com *.googleapis.com https://fonts.gstatic.com *.fontawesome.com https://widgets.trustedshops.com https://integrations.etrusted.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.bomenenzo.nl *.feedbackcompany.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com www.googletagmanager.com td.doubleclick.net mc.yandex.com www.facebook.com js.mollie.com *.multisafepay.com https://pay.google.com 'self' 'unsafe-inline'; img-src cdn.bomenenzo.nl assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.datatrics.com *.google.nl *.google-analytics.com *.hipex.cloud *.bomenenzo.nl *.smartsuppcdn.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.video-dns.com www.google.nl www.facebook.com www.bomenenzo.nl *.feedbackcompany.com https://www.mollie.com *.multisafepay.com https://widgets.trustedshops.com https://integrations.etrusted.com data: https: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.convertexperiments.com *.smartsuppchat.com widget-v2.smartsuppcdn.com *.feedbackcompany.com *.datatrics.com *.bomenenzo.nl *.clarity.ms chimpstatic.com downloads.mailchimp.com *.list-manage.com www.bomenenzo.nl www.clarity.ms scripts.clarity.ms mc.yandex.ru googletagmanager.com www.smartsuppchat.com connect.facebook.net widget-v3.smartsuppcdn.com static.cloudflareinsights.com pay.multisafepay.com https://navigator-analytics.tweakwise.com js.mollie.com pay.google.com applepay.cdn-apple.com *.multisafepay.com https://pay.google.com https://widgets.trustedshops.com https://integrations.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.typekit.net *.bomenenzo.nl downloads.mailchimp.com widget-v3.smartsuppcdn.com www.bomenenzo.nl pay.multisafepay.com https://fonts.googleapis.com *.fontawesome.com *.multisafepay.com https://widgets.trustedshops.com https://integrations.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.video-dns.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.convertexperiments.com *.smartsuppchat.com widget-v2.smartsuppcdn.com translations.smartsuppcdn.com websocket-visitors.smartsupp.com wss://*.smartsupp.com *.feedbackcompany.com *.datatrics.com *.bomenenzo.nl *.clarity.ms wss://metrics.video-dns.com bootstrap.smartsuppchat.com widget-v3.smartsuppcdn.com *.video-dns.com www.feedbackcompany.com mc.yandex.com region1.analytics.google.com region1.google-analytics.com www.bomenenzo.nl www.google.com mpc2-prod-1-is5qnl632q-uc.a.run.app b.clarity.ms https://navigator-analytics.tweakwise.com *.multisafepay.com *.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src websocket-visitors.smartsupp.com www.google.com *.video-dns.com www.bomenenzo.nl b.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data: blob:; object-src 'none'; script-src 'self' https: 'unsafe-inline'; style-src 'self' https: 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com *.fontawesome.com *.cloudflare.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.trustedshops.com *.bootstrapcdn.com *.hawksearch.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.twitter.com https://www.google.com https://www.google.co.in https://www.facebook.com *.vimeo.com *.hostedpayments.com https://calendly.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com www.apptrian.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com magefan.com cm.magefan.com *.disqus.com *.hawksearch.com *.cloudflare.com *.google.com *.google.co.in https://www.facebook.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.connect.facebook.net https://stats.g.doubleclick.net https://d.adroll.com https://pixel.advertising.com https://pixel.rubiconproject.com https://simage2.pubmatic.com https://dsum-sec.casalemedia.com https://ads.yahoo.com https://eb2.3lift.com https://sync.outbrain.com https://trc.taboola.com https://x.bidswitch.net/sync https://ib.adnxs.com https://idsync.rlcdn.com https://us-u.openx.net https://ups.analytics.yahoo.com https://segments.company-target.com https://sync.tidaltv.com http://app.bronto.com https://app.bronto.com http://cdn.bronto.com https://cdn.bronto.com http://c.bron.to https://c.bron.to http://maw.bronto.com https://maw.bronto.com *.hawksearch.net *.bing.com *.calendly.com https://info.triadtechnologies.com *.hubspot.com *.hsforms.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.googleapis.com *.gstatic.com www.apptrian.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com sce.toogoerp.net sce.toogo.io sce-test.toogoerp.net *.disqus.com *.cloudflare.com *.twitter.com *.google.co.in *.facebook.com *.googleadservices.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://connect.facebook.net *.paypalobjects.com https://chimpstatic.com *.googletagmanager.com https://s.adroll.com https://d.adroll.com https://d.adroll.mgr.consensu.org *.bootstrapcdn.com *.pingdom.net *.bronto.com *.bron.to *.hawksearch.net *.hawksearch.com *.clarity.ms *.livechatinc.com *.bing.com *.hs-scripts.com *.hs-analytics.net *.hscollectedforms.net *.hubspot.com *.hs-banner.com *.hsadspixel.net *.licdn.com https://px.ads.linkedin.com/ *.zi-scripts.com *.zdassets.com https://js.hubspot.com https://web.hubspot.com https://forms.hubspot.com https://api.hubspot.com https://track.hubspot.com https://api.hubapi.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.fontawesome.com *.cloudflare.com *.googleapis.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.youtube.com *.bootstrapcdn.com *.bronto.com *.materialdesignicons.com *.hawksearch.net *.hawksearch.com *.calendly.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.googleapis.com www.apptrian.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.cloudflare.com *.twitter.com *.twimg.com *.google.co.in *.facebook.com *.bronto.com *.brontops.com *.pingdom.net stats.g.doubleclick.net *.google-analytics.com *.clarity.ms *.livechatinc.com *.bing.com *.hs-scripts.com *.hs-analytics.net *.hscollectedforms.net *.hubspot.com *.hs-banner.com *.hsadspixel.net *.licdn.com https://px.ads.linkedin.com/ *.zi-scripts.com *.zdassets.com *.hubapi.com *.zoominfo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'unsafe-inline' 'self' *.zoon.by zoon.by *.zoon.kz zoon.kz *.zoon.ru zoon.ru fonts.googleapis.com fonts.gstatic.com www.gstatic.com data: blob: yandex.com yandex.net *.yandex.net yandex.ru *.yandex.ru yastatic.net *.adfox.ru adfox.ru *.adriver.ru adriver.ru *.yandexadexchange.net yandexadexchange.net *.googleusercontent.com i.ytimg.com *.googlevideo.com *.gstatic.com challenges.cloudflare.com static.cloudflareinsights.com rutube.ru *.rutube.ru vk.com *.vk.com vkvideo.ru *.vkvideo.ru userapi.com *.userapi.com *.vkuser.net *.vkuserlive.net mc.webvisor.com mc.webvisor.org mc.yandex.by mc.yandex.com mc.yandex.com.tr mc.yandex.kz mc.yandex.md mc.yandex.ru mc.yandex.uz mc.yandex.az mc.yandex.tm mc.yandex.com.ge ymkvww9tj4.ru cdn.jsdelivr.net; script-src 'self' *.zoon.by zoon.by *.zoon.kz zoon.kz *.zoon.ru zoon.ru yandex.com yandex.net *.yandex.net yandex.ru *.yandex.ru yastatic.net *.adfox.ru adfox.ru *.adriver.ru adriver.ru *.yandexadexchange.net yandexadexchange.net challenges.cloudflare.com static.cloudflareinsights.com s.ytimg.com mc.webvisor.com mc.webvisor.org mc.yandex.by mc.yandex.com mc.yandex.com.tr mc.yandex.kz mc.yandex.md mc.yandex.ru mc.yandex.uz mc.yandex.az mc.yandex.tm mc.yandex.com.ge ymkvww9tj4.ru wss://mc.webvisor.com wss://mc.webvisor.org wss://mc.yandex.by wss://mc.yandex.com wss://mc.yandex.com.tr wss://mc.yandex.kz wss://mc.yandex.md wss://mc.yandex.ru wss://mc.yandex.uz wss://mc.yandex.com.ge cdn.jsdelivr.net 'nonce-pPIMKFz12wllF51HQx3qfMhB'; script-src-elem 'report-sample' 'nonce-pPIMKFz12wllF51HQx3qfMhB' 'strict-dynamic'; style-src 'unsafe-inline' 'report-sample' 'self' *.zoon.by zoon.by *.zoon.kz zoon.kz *.zoon.ru zoon.ru *.gstatic.com fonts.googleapis.com fonts.gstatic.com blob:; frame-src 'self' *.zoon.by zoon.by *.zoon.kz zoon.kz *.zoon.ru zoon.ru blob: yandex.com yandex.net *.yandex.net yandex.ru *.yandex.ru yastatic.net *.adfox.ru adfox.ru *.adriver.ru adriver.ru *.yandexadexchange.net yandexadexchange.net *.gdelu-pro.ru gdelu-pro.ru challenges.cloudflare.com static.cloudflareinsights.com rutube.ru *.rutube.ru googlevideo.com *.googlevideo.com youtube.com *.youtube.com youtube-nocookie.com *.youtube-nocookie.com *.ytimg.com ytimg.com vk.com *.vk.com vkvideo.ru *.vkvideo.ru userapi.com *.userapi.com *.vkuser.net *.vkuserlive.net mc.webvisor.com mc.webvisor.org mc.yandex.by mc.yandex.com mc.yandex.com.tr mc.yandex.kz mc.yandex.md mc.yandex.ru mc.yandex.uz mc.yandex.az mc.yandex.tm mc.yandex.com.ge ymkvww9tj4.ru wss://mc.webvisor.com wss://mc.webvisor.org wss://mc.yandex.by wss://mc.yandex.com wss://mc.yandex.com.tr wss://mc.yandex.kz wss://mc.yandex.md wss://mc.yandex.ru wss://mc.yandex.uz wss://mc.yandex.com.ge cdn.jsdelivr.net master-hauz.ru etro-mejk-ap-salon.ru inpromed-med.ru; connect-src 'self' *.zoon.by zoon.by *.zoon.kz zoon.kz *.zoon.ru zoon.ru yandex.com yandex.net *.yandex.net yandex.ru *.yandex.ru yastatic.net *.adfox.ru adfox.ru *.adriver.ru adriver.ru *.yandexadexchange.net yandexadexchange.net googlevideo.com *.googlevideo.com youtube.com *.youtube.com youtube-nocookie.com *.youtube-nocookie.com *.ytimg.com ytimg.com mc.webvisor.com mc.webvisor.org mc.yandex.by mc.yandex.com mc.yandex.com.tr mc.yandex.kz mc.yandex.md mc.yandex.ru mc.yandex.uz mc.yandex.az mc.yandex.tm mc.yandex.com.ge ymkvww9tj4.ru wss://mc.webvisor.com wss://mc.webvisor.org wss://mc.yandex.by wss://mc.yandex.com wss://mc.yandex.com.tr wss://mc.yandex.kz wss://mc.yandex.md wss://mc.yandex.ru wss://mc.yandex.uz wss://mc.yandex.com.ge cdn.jsdelivr.net wss://ws.zoon.ru:2481 wss://ws.zoon.ru:17375 https://ws.zoon.ru:17375; object-src 'none'; base-uri 'self'; form-action 'self'; report-to csp-public; report-uri /csp.php?csp_area=public&user_id=81338268&secret=cN5whRfp 1
font-src *.googleapis.com *.gstatic.com data: *.fontawesome.com *.typekit.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com axeptio.imgix.net *.google-analytics.com *.google.fr *.google.com *.privacy-center.org www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.axept.io cdn.jsdelivr.net cdnjs.cloudflare.com *.privacy-center.org *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com https://www.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com cdnjs.cloudflare.com *.typekit.net unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com api.axept.io client.axept.io *.google-analytics.com *.google.com *.google.fr *.privacy-center.org https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; default-src 'none'; frame-ancestors 'self'; form-action 'self'; child-src 'self'; manifest-src 'self'; script-src 'self' https: 'report-sample'; script-src-attr 'none' 'report-sample'; script-src-elem 'self' 'unsafe-inline' https://meinfrankreich.com https://*.meinfrankreich.com https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com https://www.booking.com https://www.booking.com:443; style-src 'self' 'unsafe-inline' https:; style-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https: https://meinfrankreich.com https://*.meinfrankreich.com https://www.booking.com; font-src 'self' data: https:; img-src 'self' data: https://meinfrankreich.com https://*.meinfrankreich.com https://secure.gravatar.com https://www.gravatar.com https://*.wp.com https://*.w.org https://*.youtube.com https://*.ytimg.com https://*.vimeo.com https://*.vimeocdn.com https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com https://*.met.vgwort.de https://*.tile.openstreetmap.de https://*.tile.openstreetmap.org https://maunder.de tile.openstreetmap.org https://www.booking.com https://www.booking.com:443; media-src 'self' https://meinfrankreich.com https://*.meinfrankreich.com https://*.youtube.com https://www.youtube-nocookie.com https://*.vimeo.com https://*.vimeocdn.com; frame-src 'self' https://meinfrankreich.com https://*.meinfrankreich.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com *.google.com https://www.booking.com https://www.booking.com:443; connect-src 'self' data: blob: https://meinfrankreich.com https://*.meinfrankreich.com https://*.googleapis.com *.google.com https://*.gstatic.com; object-src 'none'; worker-src 'self'; upgrade-insecure-requests; report-uri https://meinfrankreich.com/wp-json/webandmore-tweaks/v1/security-report; report-to csp-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.webvisor.org https://yastatic.net https://an.yandex.ru https://yandex.ru https://smartcaptcha.yandexcloud.net https://telegram.org https://oauth.telegram.org; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https:; frame-src 'self' https://smartcaptcha.yandexcloud.net https://mc.yandex.ru https://oauth.telegram.org https://an.yandex.ru https://yandex.ru; object-src 'none'; base-uri 'self'; form-action 'self' https://oauth.telegram.org 1
font-src *.bootstrapcdn.com *.fontawesome.com *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.google.com *.youtube.com *.yotpo.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.twitter.com *.google.com *.youtube.com maps.googleapis.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com *.hcaptcha.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.twitter.com *.google.com *.facebook.com maps.googleapis.com lightwidget.com *.maps.gstatic.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.com *.youtube.com maps.googleapis.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.googleapis.com *.placeholder.com *.maps.gstatic.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com *.jquery.com *.highcharts.com *.hcaptcha.com *.avada.io assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.google.com *.youtube.com maps.googleapis.com *.facebook.net cdn.lightwidget.com *.instagram.com *.cdninstagram.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.googleapis.com *.placeholder.com *.maps.gstatic.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.dnky.co webchat.dotdigital.com *.bootstrapcdn.com *.fontawesome.com unsafe-inline *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.google.com *.youtube.com maps.googleapis.com *.cdninstagram.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.placeholder.com *.maps.gstatic.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com *.hcaptcha.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.google.com *.youtube.com maps.googleapis.com facebook.net *.maps.gstatic.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.gstatic.com 'self' data: *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.google.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.google.com *.gstatic.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.dnky.co webchat.dotdigital.com unsafe-inline *.googleapis.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.google-analytics.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob: https:; media-src 'self' blob: https://cdn.henvids.com https:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://challenges.cloudflare.com https://a.magsrv.com https://a.pemsrv.com https://static.cloudflareinsights.com https://www.clarity.ms https://scripts.clarity.ms; connect-src 'self' https://cdn.henvids.com https://*.magsrv.com https://*.pemsrv.com https://challenges.cloudflare.com https://cloudflareinsights.com https://*.clarity.ms; frame-src 'self' https://challenges.cloudflare.com https: 1
object-src 'none';base-uri 'self';script-src 'nonce-Sw1t9wK-wQrjOCDMJk-Oyg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
frame-ancestors 'self'; report-uri https://c4b562ef207d9ca89618f9d5f5a9d1d9.report-uri.com/r/d/csp/reportOnly; 1
default-src 'self'; base-uri 'self'; connect-src 'self' blob: https://api.geoapify.com https://www.paypal.com https://www.sandbox.paypal.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://ad.doubleclick.net https://www.google.com https://connect.facebook.net https://www.facebook.com; font-src 'self' data:; frame-src 'self' https://consentcdn.cookiebot.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.dailymotion.com https://www.paypal.com https://www.sandbox.paypal.com; img-src 'self' data: blob: https://www.facebook.com https://www.google-analytics.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://imgs.cookiebot.com https://www.paypalobjects.com; media-src 'self' blob:; object-src 'none'; script-src 'self' 'strict-dynamic' https://consent.cookiebot.com https://consentcdn.cookiebot.com https://connect.facebook.net https://www.paypal.com https://www.sandbox.paypal.com https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net 'unsafe-inline' 'nonce-GmZNKYZwfkgk0VHf7PsOTw=='; style-src 'self' 'unsafe-inline'; report-uri /nelmio/csp/report 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com *.firstdata.com *.hotjar.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com self *.firstdata.com *.ipg-online.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com www.googletagmanager.com *.demdex.net www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.firstdata.com https://pay.google.com *.ipg-online.com *.google.com/ js.stripe.com *.hotjar.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com *.googleapis.com *.firstdata.com *.ipg-online.com https://www.magezon.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com bat.bing.com *.google.com *.google.co.uk *.googleadservices.com *.google-analytics.com *.magentocommerce.com *.widgets.magentocommerce.com *.paypalobjects.com *.postcodeanywhere.co.uk *.googletagmanager.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com *.gstatic.com *.firstdata.com self unsafe-inline https://pay.google.com *.ipg-online.com *.google.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ ipinfo.io connect.facebook.net js-agent.newrelic.com bam.nr-data.net *.google-analytics.com analytics.google.com googletagmanager.com googleadservices.com *.pcapredict.com *.postcodeanywhere.co.uk *.bing.com *.hotjar.com *.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.firstdata.com *.ipg-online.com https://static.klaviyo.com services.postcodeanywhere.co.uk *.typekit.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.firstdata.com *.ipg-online.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ ipinfo.io *.pcapredict.com *.postcodeanywhere.co.uk *.doubleclick.net *.hotjar.com *.hotjar.io wss://*.hotjar.com wss://*.hotjar.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://business.playtoearn.com; font-src 'self' data:; connect-src 'self' https://api.afkheroes.xyz https://bqzshnyldhcoweybibju.supabase.co wss://bqzshnyldhcoweybibju.supabase.co https://*.solana.com https://*.helius-rpc.com https://api.mainnet-beta.solana.com https://frontend-api.pump.fun; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none'; worker-src 'self' blob: 1
base-uri 'none'; frame-ancestors 'self'; img-src data: 'self' https://www.google-analytics.com https://cdn.rgfstaffing.be https://i.ytimg.com https://maps.googleapis.com https://vumbnail.com https://maps.gstatic.com https://img.youtube.com https://www.google.be https://cdn.entrili.com; object-src 'none'; script-src 'unsafe-eval' 'unsafe-inline' 'self' 'unsafe-inline' 'unsafe-eval' https://use.fontawesome.coms https://code.jquery.com https://cdn.jsdelivr.net https://consentcdn.cookiebot.com https://*.google-analytics.com https://cdn.rgfstaffing.be https://kit.fontawesome.com https://maps.googleapis.com https://js.monitor.azure.com https://www.googletagmanager.com https://consent.cookiebot.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; report-to csp-endpoint; report-uri https://csp-dxp.rgfstaffing.be/csp 1
default-src 'self'; script-src 'self' data: https://*.openstreetmap.org 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://*.openstreetmap.org; base-uri 'self'; frame-src https://display.contentfry.com; connect-src 'self' data: https://*.openstreetmap.org; script-src-elem 'self' data: https://platform.contentfry.com 'sha256-bqofdV0WNfWeji7994IAPDOnyaWv3fqoxOAn70/HcWo=' 'report-sample'; frame-ancestors 'self'; style-src-elem 'self' 'report-sample'; report-uri https://www.adlershof.de/@http-reporting?csp=report&requestTime=1789271934612650&requestHash=30daf857026da2c9177c678d6fa7da5542463721 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' api.sumsub.com static.zdassets.com pay.google.com firebasedynamiclinks.googleapis.com *.algolia.net *.algolianet.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data: blob: res.cloudinary.com images.ctfassets.net i.pravatar.cc; font-src 'self' fonts.gstatic.com data:; connect-src 'self' *.picklebet.com *.firebaseio.com *.googleapis.com cdn.contentful.com preview.contentful.com *.algolia.net *.algolianet.com *.sentry.io *.zendesk.com api.segment.io cdn.segment.com; frame-src 'self' static.zdassets.com *.zendesk.com player.twitch.tv pay.google.com; object-src 'none'; base-uri 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-poAcQ3H6HJcm3JwB9QKvxg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://connect.facebook.net https://accounts.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://checkout.razorpay.com https://secure.paytmpayments.com https://js.stripe.com https://www.clarity.ms https://scripts.clarity.ms https://snap.licdn.com https://www.facebook.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://bat.bing.com https://www.redditstatic.com https://alb.reddit.com https://tracking.g2crowd.com https://tracking-api.g2.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://accounts.google.com; img-src 'self' data: blob: https://cdn.intellemo.ai https://stock.intellemo.ai https://media.intellemo.ai https://creatives.intellemo.ai https://gdn.intellemo.ai https://cdn.intellemo.com https://stock.intellemo.com https://storage.googleapis.com https://intellemo-files.storage.googleapis.com https://lh3.googleusercontent.com https://images.unsplash.com https://flagcdn.com https://i.imgur.com https://www.googletagmanager.com https://www.google-analytics.com https://www.facebook.com https://www.google.com https://www.google.co.in https://googleads.g.doubleclick.net https://www.linkedin.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://www.clarity.ms https://*.stripe.com https://secure.paytmpayments.com https://bat.bing.com https://www.redditstatic.com https://alb.reddit.com https://tracking.g2crowd.com https://pixel.reddit.com; font-src 'self' https://cdn.intellemo.ai https://fonts.gstatic.com https://cdnjs.cloudflare.com; connect-src 'self' https://api.intellemo.ai wss://api.intellemo.ai https://dev-api.intellemo.ai wss://dev-api.intellemo.ai https://www.google-analytics.com https://www.googletagmanager.com https://firebaseinstallations.googleapis.com https://fcmregistrations.googleapis.com https://accounts.google.com https://checkout.razorpay.com https://api.stripe.com https://secure.paytmpayments.com https://www.clarity.ms https://v.clarity.ms https://snap.licdn.com https://www.facebook.com https://region1.google-analytics.com https://analytics.google.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://www.google.com https://bat.bing.com https://alb.reddit.com https://tracking.g2crowd.com https://px.ads.linkedin.com https://pixel-config.reddit.com https://*.a.run.app https://tracking-api.g2.com; frame-src 'self' https://www.youtube.com https://checkout.razorpay.com https://www.facebook.com https://secure.paytmpayments.com https://js.stripe.com https://hooks.stripe.com https://www.google.com https://accounts.google.com https://td.doubleclick.net https://snap.licdn.com https://bat.bing.com https://www.googletagmanager.com https://outlook.office.com https://outlook.office365.com; worker-src 'self' blob:; media-src 'self' https://cdn.intellemo.ai blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; 1
font-src https://fonts.gstatic.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com https://www.google.com https://www.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com *.facebook.com *.googlesyndication.com *.tiktok.com *.tbibank.ro tbicp.com https://lapp.leanpay.hr https://app.leanpay.hr https://stage-app.leanpay.si https://app.leanpay.si https://stage-app.leanpay.ro https://vendor.leanpay.ro 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.tbibank.ro www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com www.apptrian.com tbicp.com *.tbibank.ro t.themarketer.com cdn1.themarketer.com https://redchamps.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com www.apptrian.com tbicp.com *.tbibank.ro t.themarketer.com cdn1.themarketer.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.fontawesome.com *.google.com maxcdn.bootstrapcdn.com t.themarketer.com cdn1.themarketer.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com www.apptrian.com *.tbibank.ro http://dpm.demdex.net https://www.google.com https://www.gstatic.com t.themarketer.com cdn1.themarketer.com c1api.themarketer.com c2api.themarketer.com c3api.themarketer.com c4api.themarketer.com c5api.themarketer.com t.elasticsuite.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=CBxH0bfLw7WE8cx6jVmnbTvCnAXUT5hAzL2EfCS8iWM-1789283000.3353906-1.0.1.1-DoPZ2xxHbrVcGnKSH6cAHrR8Cz1z984zRZXejlG_9XDV4JC87cIW1fskKPvaDwBZn9gMRmO_EXsloNT1cyRdYPMlsXwIlDCb9zl708AxklmXM6RXRmZF2KR6lfd4RDXGl2eL0Grzgse9Mfd97ezPkDrzm9imQ3jRDVMWL7KQnxM; report-to cf-csp-endpoint 1
object-src 'none';base-uri 'self';script-src 'nonce-0veouXwlx5UDWJw55kgakw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://connect.facebook.net https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://js.hscollectedforms.net https://js.hsforms.net https://js.stripe.com https://mtag.microsoft.com https://bat.bing.com https://script.hotjar.com https://static.hotjar.com https://scripts.clarity.ms https://www.clarity.ms https://static.cloudflareinsights.com https://www.googletagmanager.com https://analytics.tiktok.com https://www.tiktok.com https://d.adroll.com https://s.adroll.com https://www.nextroll.com https://assets.anytrack.io https://diffuser-cdn.app-us1.com https://prism.app-us1.com https://widget.intercom.io https://www.redditstatic.com https://ceocreative.postaffiliatepro.com https://theceocreative7323.activehosted.com https://cdn-cookieyes.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com data:; img-src 'self' data: https: ; connect-src 'self' https://js.hs-analytics.net https://js.hscollectedforms.net https://script.hotjar.com https://static.hotjar.com https://scripts.clarity.ms https://www.clarity.ms https://www.googletagmanager.com https://analytics.tiktok.com https://d.adroll.com https://s.adroll.com https://assets.anytrack.io https://diffuser-cdn.app-us1.com https://prism.app-us1.com https://js.stripe.com https://ceocreative.postaffiliatepro.com; frame-src 'self' https://js.stripe.com https://widget.intercom.io https://www.facebook.com https://telegram.me https://twitter.com https://x.com https://cdn-cookieyes.com; object-src 'none'; base-uri 'self'; 1
object-src 'none';base-uri 'self';script-src 'nonce-ZbtlHrkzpxLpW9ynmfxd4Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.tawk.to *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.fontawesome.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de pay.google.com/ *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com bat.bing.com www.facebook.com www.google-analytics.com google-analytics.com www.google.co.uk www.google.com googleads.g.doubleclick.net www.googletagmanager.com www.gstatic.com embed.tawk.to fonts.gstatic.com translate.googleapis.com translate.google.com *.clarity.ms *.bing.com tawk.link *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud ebizmarts-website.s3.amazonaws.com www.feedoptimise.com cdn.feedoptimise.com magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.googletagmanager.com googletagmanager.com www.google-analytics.com google-analytics.com apis.google.com googleads.g.doubleclick.net www.gstatic.com bat.bing.com www.buzzcateringsupplies.com connect.facebook.net cdn.jsdelivr.net embed.tawk.to translate.google.com translate.googleapis.com translate-pa.googleapis.com www.clarity.ms static.cloudflareinsights.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud widget.freshworks.com m2epro.freshdesk.com www.feedoptimise.com cdn.feedoptimise.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com www.buzzcateringsupplies.com *.tawk.to www.gstatic.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de www.google.co.uk www.google-analytics.com google-analytics.com www.googletagmanager.com googletagmanager.com www.googleadservices.com *.g.doubleclick.net maps.googleapis.com *.tawk.to wss://*.tawk.to translate.googleapis.com translate-pa.googleapis.com bat.bing.com *.clarity.ms region1.google-analytics.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud widget.freshworks.com m2epro.freshdesk.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com places.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com 'self' 'unsafe-inline'; frame-ancestors https://meetanshi.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ https://meetanshi.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com https://applepay.cdn-apple.com www.facebook.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://meetanshi.com/media/logo.png *.authorize.net assets.secure.checkout.visa.com sandbox.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com https://applepay.cdn-apple.com blob: data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com https://rum.hlx.page https://meetanshi.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com https://applepay.cdn-apple.com maps.googleapis.com www.gstatic.com connect.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com maxcdn.bootstrapcdn.com www.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.magento-datasolutions.com *.magento-ds.com https://meetanshi.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com places.googleapis.com www.googleapis.com *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.apptrian.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://firebasestorage.googleapis.com https://www.mollie.com 'self' *.signifyd.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com www.xtento.com cdn.xtento.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com www.apptrian.com chimpstatic.com downloads.mailchimp.com *.list-manage.com widget.freshworks.com m2epro.freshdesk.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.avada.io *.shopify.com js.mollie.com pay.google.com applepay.cdn-apple.com 'self' *.signifyd.com 'self' *.online-metrix.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com maps.googleapis.com www.xtento.com cdn.xtento.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com widget.freshworks.com m2epro.freshdesk.com maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com www.apptrian.com widget.freshworks.com m2epro.freshdesk.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com https://imgs.signifyd.com *.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.klevu.com *.ksearchnet.com mcstaging.macfarlanepackaging.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com https://www.googletagmanager.com/ js.stripe.com b.stripecdn.com pay.google.com newassets.hcaptcha.com m.stripe.network js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.trustpilot.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://images.unsplash.com https://files.zakeke.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.klevu.com *.ksearchnet.com services.postcodeanywhere.co.uk 'self' js.klevu.com www.gstatic.com cdn.cookielaw.org public-gbr.mkt.dynamics.com *.azureedge.net macfarlanepackaging.bynder.com *.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ js.klevu.com *.ksearchnet.com api.addressy.com 'self' unpkg.com www.google.com www.gstatic.com js.stripe.com b.stripecdn.com pay.google.com hcaptcha.com m.stripe.network cdn.cookielaw.org *.livechatinc.com *.azureedge.net *.dynamics.com *.scurritrackplus.com maps.googleapis.com js.mollie.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.trustpilot.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.klevu.com *.ksearchnet.com api.addressy.com 'self' js.klevu.com www.gstatic.com js.stripe.com b.stripecdn.com *.gstatic.com *.googleapis.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://maps.googleapis.com https://player.vimeo.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.klevu.com *.ksearchnet.com api.addressy.com *.google-analytics.com *.analytics.google.com 'self' *.stripe.com *.hcaptcha.com *.cardinalcommerce.com *.cookielaw.org *.dynamics.com *.azureedge.net *.googlesyndication.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' commerce.adobedc.net r.stripe.com *.google-analytics.com *.analytics.google.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://2679108e-012b-4aa9-9696-ac7c5fc442e1.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://js-eu1.hs-scripts.com https://js-eu1.hsforms.net https://*.hs-analytics.net https://*.hsadspixel.net https://*.hscollectedforms.net https://*.hs-banner.com https://public.profitwell.com https://clerk.dometrain.com https://*.clerk.accounts.dev https://*.clerk.com https://challenges.cloudflare.com https://*.mux.com https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://cdn.paddle.com https://static.cloudflareinsights.com https://widget.trustpilot.com; script-src-elem 'self' 'unsafe-inline' https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://js-eu1.hs-scripts.com https://js-eu1.hsforms.net https://*.hs-analytics.net https://*.hsadspixel.net https://*.hscollectedforms.net https://*.hs-banner.com https://public.profitwell.com https://clerk.dometrain.com https://*.clerk.accounts.dev https://*.clerk.com https://challenges.cloudflare.com https://*.mux.com https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://cdn.paddle.com https://static.cloudflareinsights.com https://widget.trustpilot.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://*.hsforms.net https://cdn.paddle.com; font-src 'self' data: https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://assets.dometrain.com; img-src 'self' data: blob: https://assets.dometrain.com https://*.cookiebot.com https://www.googletagmanager.com https://*.google-analytics.com https://www.google.com https://img.clerk.com https://*.hsforms.com https://*.hubspot.com https://*.mux.com https://image.mux.com https://blogsmith.ai; media-src 'self' blob: https://*.mux.com https://stream.mux.com; connect-src 'self' https://api.dometrain.com https://brain.dometrain.com https://orders.dometrain.com https://portal.dometrain.com https://assets.dometrain.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://js-eu1.hs-scripts.com https://*.hs-analytics.net https://*.hsforms.com https://*.hubspot.com https://*.hubapi.com https://*.hscollectedforms.net https://public.profitwell.com https://clerk.dometrain.com https://*.clerk.accounts.dev https://*.clerk.com https://clerk-telemetry.com https://challenges.cloudflare.com https://*.mux.com https://stream.mux.com https://*.litix.io https://*.paddle.com https://www.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com; frame-src 'self' blob: https://challenges.cloudflare.com https://*.clerk.accounts.dev https://*.paddle.com https://buy.paddle.com https://js-eu1.hsforms.net https://www.googletagmanager.com https://widget.trustpilot.com https://consentcdn.cookiebot.com; worker-src 'self' blob:; object-src 'self' blob:; base-uri 'self' 1
font-src https://*.gstatic.com https://fonts.gstatic.com *.googleapis.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com *.yotpo.com *.klevu.com *.ksearchnet.com fonts.gstatic.com use.fontawesome.com app.christies.test static.klaviyo.com *.typekit.net https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.adyen.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.googlesyndication.com *.tiktok.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.adyen.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * js.stripe.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://*.dpdconnect.nl *.yotpo.com *.multisafepay.com https://pay.google.com www.googletagmanager.com widget.trustpilot.com d.la1-core1.sfdc-cehfhs.salesforceliveagent.com service.force.com insight.adsrvr.org *.zonka.co 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.adyen.com https://images.unsplash.com https://*.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com www.feedoptimise.com cdn.feedoptimise.com *.yotpo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com *.multisafepay.com app.christies.test cdn-ukwest.onetrust.com cdn.christiesdirect.com x.klarnacdn.net apple-resources.s3.amazonaws.com play.google.com www.facebook.com js.klevu.com bat.bing.com maps.gstatic.com bat.bing.net www.google.co.uk static.klaviyo.com static-forms.klaviyo.com fast.a.klaviyo.com static-tracking.klaviyo.com a.klaviyo.com telemetrics.klaviyo.com *.christiesdirect.com *.etrusted.com christiesdirect.com d3k81ch9hvuctc.cloudfront.net www.google.be www.google.fr www.google.nl *.zonka.co https://widgets.trustedshops.com https://widgets-qa.trustedshops.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.adyen.com https://maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js js.stripe.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com https://*.dpdconnect.nl www.feedoptimise.com cdn.feedoptimise.com *.yotpo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.klevu.com *.ksearchnet.com *.multisafepay.com https://pay.google.com app.christies.test widget.trustpilot.com js.klarna.com integrations.etrusted.com www.dwin1.com connect.facebook.net lantern.roeyecdn.com cdn-ukwest.onetrust.com bat.bing.com static.hotjar.com cdn.attn.tv service.force.com js.adsrvr.org analytics.tiktok.com www.clarity.ms d.la2-c2-cdg.salesforceliveagent.com d.la1-core1.sfdc-cehfhs.salesforceliveagent.com christiesdirect-dev.my.salesforce-sites.com tag.mention-me.com static.mention-me.com maps.googleapis.com static.klaviyo.com static-forms.klaviyo.com fast.a.klaviyo.com static-tracking.klaviyo.com a.klaviyo.com telemetrics.klaviyo.com *.clarity.ms *.cookielaw.org *.hotjar.com *.rawgit.com *.salesforce.com *.salesforceliveagent.com *.thoughtmetric.io *.zdassets.com christiesdirect.com d2yyd1h5u9mauk.cloudfront.net *.zonka.co us-js.zonka.co *.apis.zonkafeedback.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://fonts.googleapis.com/ https://fonts.googleapis.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.fontawesome.com *.yotpo.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com *.multisafepay.com app.christies.test use.fontawesome.com x.klarnacdn.net js.klevu.com service.force.com pay.multisafepay.com *.etrusted.com *.klaviyo.com *.salesforce.com *.typekit.net *.zonka.co https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adyen.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com *.yotpo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com *.multisafepay.com region1.google-analytics.com s.clarity.ms js.klarna.com app.christies.test widget.trustpilot.com cdn-ukwest.onetrust.com geolocation.onetrust.com pay.google.com play.google.com maps.googleapis.com bat.bing.net static.klaviyo.com static-forms.klaviyo.com fast.a.klaviyo.com static-tracking.klaviyo.com a.klaviyo.com telemetrics.klaviyo.com *.adsrvr.org *.attentivemobile.com *.attn.tv *.bing.com *.clarity.ms *.cookielaw.org *.delighted.com *.hotjar.com *.hotjar.io *.onetrust.com *.thoughtmetric.io *.tiktokw.us *.zdassets.com *.zonka.co us-js.zonka.co *.apis.zonkafeedback.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src app.christies.test bat.bing.com s.clarity.ms pagead2.googlesyndication.com analytics.tiktok.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://12b2c380-a74f-4dc1-8591-4e44eb3933d3.sansec.watch/; report-to report-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-UE0Khyx2_1RqTcQpSA8p1w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.twitter.com *.addthis.com *.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.allegroimg.com *.avto.pro *.facebook.com *.binotel.ua https://chat.key.live/ *.google.com.ua *.google.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.ampproject.org raw.githubusercontent.com *.googletagmanager.com *.avto.pro *.binotel.com https://chat.key.live/ *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.addthis.com *.google.com *.moatads.com *.addthisedge.com *.pinterest.com *.facebook.net *.avada.io *.shopify.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.binotel.com https://chat.key.live/ *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://fonts.bunny.net unsafe-inline 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.binotel.com https://chat.key.live/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com cdn.ampproject.org *.google.com *.binotel.com https://chat.key.live/ wss://wschat1.binotel.com:9025/ *.facebook.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.google-analytics.com *.g.doubleclick.net *.addthis.com *.pinterest.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://connect.facebook.net https://www.googletagmanager.com https://www.gstatic.com https://apis.google.com https://pagead2.googlesyndication.com https://*.googlesyndication.com https://www.youtube.com https://player.twitch.tv https://servedby.revive-adserver.net https://ep2.adtrafficquality.google https://*.adtrafficquality.google; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https: https://www.fanziz.com; font-src 'self' data:; connect-src 'self' https://api.fanziz.com https://ai-gen.fanziz.com wss://api.fanziz.com https://media.fanziz.com https://www.fanziz.com https://fanziz.s3.ap-south-1.amazonaws.com https://stream.fanziz.com https://streaming-hindi.fanziz.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googleapis.com https://*.gstatic.com https://*.googlesyndication.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://*.adtrafficquality.google https://firebase.googleapis.com https://firebaseinstallations.googleapis.com https://firebaselogging.googleapis.com https://identitytoolkit.googleapis.com https://securetoken.googleapis.com https://www.facebook.com https://connect.facebook.net; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.twitch.tv https://www.twitch.tv https://accounts.google.com https://www.google.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://ep2.adtrafficquality.google https://*.adtrafficquality.google https://fanziz-prod.firebaseapp.com https://media.fanziz.com https://fanziz.s3.ap-south-1.amazonaws.com; media-src 'self' blob: https: https://media.fanziz.com https://fanziz.s3.ap-south-1.amazonaws.com https://stream.fanziz.com https://streaming-hindi.fanziz.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com www.googletagmanager.com stats.g.doubleclick.net www.paypal.com www.paypalobjects.com js.stripe.com connect.facebook.net static.addtoany.com www.googleadservices.com static.cloudflareinsights.com ajax.cloudflare.com googleads.g.doubleclick.net www.google.com servicepoints.sendcloud.sc www.gstatic.com cdn.jsdelivr.net analytics.tiktok.com static.olark.com assets.olark.com knrpc.olark.com maps.google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net static.olark.com; img-src 'self' data: www.google-analytics.com stats.g.doubleclick.net www.paypal.com www.paypalobjects.com connect.facebook.net googleads.g.doubleclick.net www.google.com www.facebook.com analytics.tiktok.com log.olark.com; connect-src 'self' www.google-analytics.com www.paypal.com securepayments.paypal.com api.braintreegateway.com js.stripe.com api.stripe.com www.google.com www.google.fr region1.analytics.google.com www.merchant-center-analytics.goog www.googleadservices.com analytics.tiktok.com cdn.jsdelivr.net analytics-ipv6.tiktokw.us knrpc.olark.com api.getalma.eu maps.google.com maps.googleapis.com; font-src 'self' fonts.gstatic.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net data: static.olark.com/; frame-src 'self' www.paypal.com payments.amazon.com servicepoints.sendcloud.sc www.google.com www.youtube.com www.facebook.com static.addtoany.com www.googletagmanager.com static.olark.com; object-src 'none'; media-src 'self' static.olark.com; form-action 'self' www.paypal.com securepayments.paypal.com secure.payplug.com www.facebook.com 1
require-trusted-types-for 'script'; trusted-types 'allow-duplicates' default; report-uri /api/csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cdninstagram.com *.fbcdn.net maps.googleapis.com *.amazonaws.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com ajax.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.instagram.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://www.google-analytics.com *.instagram.com *.googleusercontent.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'none'; object-src 'none'; form-action 'self'; frame-ancestors 'self' https://cms.internal.banksync.io; script-src 'self' 'unsafe-inline' https://www.dubcdn.com; style-src 'self' 'unsafe-inline' https://unpkg.com; img-src 'self' data: blob: https:; media-src 'self' https://cdn.banksync.io; font-src 'self'; connect-src 'self' https://*.ingest.us.sentry.io https://cdn.jsdelivr.net https://api.dub.co https://*.banksync.io; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://banksync.notion.site 1
default-src 'none'; base-uri 'self'; child-src 'self'; manifest-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'  https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://*.doubleclick.net https://*.formstack.io https://unpkg.com https://cdn.jsdelivr.net https://connect.facebook.net https://www.youtube.com https://*.mypurecloud.com.au https://*.hotjar.com https://*.spotify.com https://*.taboola.com https://cdn.taboola.com https://*.redditstatic.com https://cdn.pdst.fm https://*.posthog.com https://api.reciteme.com https://auapi.reciteme.com https://reciteme.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.formstack.io https://unpkg.com https://api.reciteme.com https://auapi.reciteme.com https://reciteme.com; img-src 'self' 'unsafe-inline' blob: data: https://res.cloudinary.com https://*.formstack.io https://i.ytimg.com https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.google.com.au https://*.doubleclick.net https://*.facebook.com https://*.reddit.com https://*.redditstatic.com https://*.mypurecloud.com.au https://*.hotjar.com https://*.spotify.com https://*.taboola.com https://cdn.taboola.com https://cdn.pdst.fm https://*.pdst.fm https://api.reciteme.com https://auapi.reciteme.com https://reciteme.com; font-src 'self' data: https://fonts.gstatic.com https://api.reciteme.com https://auapi.reciteme.com https://reciteme.com; media-src 'self' blob: data: https://res.cloudinary.com https://*.cloudinary.com https://api.reciteme.com https://auapi.reciteme.com https://reciteme.com; connect-src 'self' https://vqfhbjvreyqrcwsrpyov.supabase.co https://experience.ninetailed.co https://www.google.com https://*.google.com https://*.google.com.au https://www.googletagmanager.com https://*.google-analytics.com https://*.doubleclick.net https://*.formstack.io https://*.facebook.com https://*.mypurecloud.com.au wss://*.mypurecloud.com.au wss://*.hotjar.com wss://*.hotjar.io https://*.hotjar.com https://*.hotjar.io https://*.spotify.com https://*.taboola.com https://cdn.taboola.com https://*.cancervic.org.au https://cdn.pdst.fm https://*.pdst.fm https://res.cloudinary.com https://*.cloudinary.com https://*.reddit.com https://*.redditstatic.com https://api.reciteme.com https://auapi.reciteme.com https://reciteme.com https://events.reciteme.com https://*.posthog.com https://*.algolia.net https://*.algolianet.com https://*.algolia.io; frame-src 'self'  https://www.google.com https://www.googletagmanager.com https://*.doubleclick.net https://www.youtube-nocookie.com https://*.mypurecloud.com.au https://*.hotjar.com https://api.reciteme.com https://auapi.reciteme.com https://reciteme.com; object-src 'none'; form-action 'self' https://*.facebook.com; frame-ancestors 'self' https://app.contentful.com; upgrade-insecure-requests; report-uri /api/csp-reports; report-to /api/csp-reports 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net https://widgets.trustedshops.com *.paypal.com *.paypalobjects.com data: 'self'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cleverreach.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.sandbox.paypal.com *.usercentrics.eu 'self'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.cloudfront.net https://images.unsplash.com https://firebasestorage.googleapis.com https://www.mollie.com https://api.mapbox.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.sandbox.paypal.com www.it-recht-kanzlei.de *.usercentrics.eu www.google.de stats.g.doubleclick.net bat.bing.com www.facebook.com *.criteo.com *.criteo.net data: 'self'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.googleapis.com *.gstatic.com https://maps.googleapis.com https://player.vimeo.com *.avada.io *.shopify.com js.mollie.com pay.google.com applepay.cdn-apple.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.sandbox.paypal.com *.paypalobjects.com 'unsafe-eval' bat.bing.com *.usercentrics.eu connect.facebook.net *.criteo.com *.criteo.net stapecdn.com *.stapecdn.com capi-automation.s3.us-east-2.amazonaws.com 'self' 'unsafe-eval' 'nonce-dW1mb2VvNWtrNGhobDdsb2Zra29yMnJ5Y29zeDA0dTk=' 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY/CkTMBhjNhwPvglpYumjx31B4fjkY8=' 'sha256-6wRdeNJzEHNIsDAMAdKbdVLWIqu8b6+Bs+xVNZqplQw=' 'sha256-TKO/MlFC+lQ+UjTzg4HCe8TWVAUSTwFoMp5RikMTKPw=' 'sha256-6BGoYrzyGfR2K/ZEUkjW/AkE4ZGlATy5XOKjka2oIBw=' 'sha256-E/mfe9YKshMNmBNo1FCsaZCL2Q+0KNYE/JOnWGKvPTA=' 'sha256-zHk+Kyi0jr6946+74mMF1NfUrqkjjwciYZ6+Dpijmq8=' 'sha256-1VZzjcntvi+y0x5dqAkPNmRkVVsUiqWuTt3JJ6w1Li0=' 'sha256-NpgLbbfn+hD8BXjiBtboZA5wTpqyXv72owl4tDH0qX4=' 'sha256-2+NbdjG9kK/sG986ipOKkh+ScjowIEBMniTTUAke2Pw=' 'sha256-V3WAqZThH4iL7RY0rXWVjQFdECjvhqMQH5ISlv0K6gw=' 'sha256-uDxqt3nT7ndZGzhxul/REYRIxfwA889/ZylJBI6OL8M=' 'sha256-Idxf4XMXQueLlLEMaCc76PAcuMZxhS3LMjgGm5+qVHE=' 'sha256-3NumeIDogH1DSljbU+DjIJKQ9++IcRI+NFKDnq0CkOM=' 'sha256-nEzlnNJ/jd2pAXYbnAT6oLEE/uj2eMRrhsnGnxgc69Q=' 'sha256-72q62jI5d/rIUysZz7BRwNNybIwsr6VZSxxYzuwfHgQ=' 'sha256-faJof9jcDxLu+olMUwdFQtf5dL5ytPDeIKe1uSUFxiY=' 'sha256-WwQpLvWqCvcvl1Rc0C5c9lCEAoRLVrBqKFZbvkYtiU4=' 'sha256-YrFFSZu+QGKKoefdqt/kOy5ieHw4QaPFqyINfOTlBrU=' 'sha256-D3eSH7qdnS0SWT9UeYO3oRDuRkGAQjZSXcq3Rvhi8u4=' 'sha256-SagMQUIY0X3tyf43+qoAXRmjgEEkgbnj97cVeEOQTAY=' 'sha256-wmIe93GPdBT30Mddv2aJZjFw3ZCJ39NvnNXqz7OmHMQ=' 'sha256-kjjjf20jUtJoPsYh7F+KoKY4gXXw9JRUmdgZf1KZz0c=' 'sha256-Vcx46DWwOd0xCsrepUl/wRL4ejhw1IF7JSNuG+hYiDY=' 'sha256-RcWYS2emFILgg4xEupfIr72jJd6IRD1acydYFxtHQpM=' 'sha256-tba2/Jptw9bgb68f22o29dUuayGmIvL+6AAH/j5lulc=' 'sha256-HGT36QRdPOUsbzHY8erpN6/Ii7/3uD37M22XJbgMNwQ=' 'sha256-vsWC8g56MlhdVT8P+cvwEiHNvpFbpjEMYANVeIfN3mc=' 'sha256-6Z239l4yF4ZguR6Dx7NhXzW+rs/xTxIeXFLsHHO/UcM=' 'sha256-kuhf2mzokCrH4clkN8vcENl8bR91+1C0Opbz/4cKsGQ=' 'sha256-lOC9Qbl1uHc1yu1nCtRsZuz5D4W4V7gt0QMZG0H8ons=' 'sha256-jRxgqnhHG9hSIYjY5rmAl2YhdNjW3EQElFuxcheyw7c=' 'sha256-xelyOt0WwRKY3/5wElunRNB5io/vTWksrKMfUbM5phg=' 'sha256-VGcsVvCSSFVejS5jzSF5o1JsDD7uaj22LyDrfD3HyPY=' 'sha256-P8oGY5K2gAoixjtcSzwO2etlq/ZGlVa86Cicxo/aPag=' 'sha256-tUWeM18XEwpl+OImbakF+2cEwBQI07r06WOppwmWBrs=' 'sha256-WE+4tjyA6xlBzOH4lCOYxCefv016UEIocPY6zIF5w18=' 'sha256-h/50/R6VkdrLC2N+dqbPMCr8zBbhSZ1iI6x55HSbCVo=' 'sha256-T4fUWBcll2CaGUTmTwnebnd9obuJHtjZDlidqxJrnbc=' 'sha256-m5VsM9S4FUwzEFXGr91p4uuirOn0AxZaJYlr7Wy3sQo=' 'sha256-+/LglPotdGCJTgDcm6fz8bEF8KkmBy15L1t5WGLWFKk=' 'sha256-X6cTETYgHmqTb0lBV5l2oWaInfX28iUzkKcKgWxPS5I=' 'sha256-MRrATcdAdYHZVPoEryfC4s1Bo5sFpSXokFnReLCdIIc=' 'sha256-zr9xtkrWRNO3a27hjEeKg3I4e7z5B2ob80cjx52q0wc=' 'sha256-wobmtQUv2neIUQYYk/GU4KU/QGkkUWBwVCbKRM691S0=' 'sha256-WQaPKbOJFfmzcS3bJc7LteLDzpVkgON//vJZEgdW7rw=' 'sha256-1syILycYpwuoUPX4SyNV0f9gcF8TOku+XaZtT6pDsUU=' 'sha256-3A9R9HMkFh2nj/WjXNw7FOsU8a6DAXoXyBkxdG2IShE=' 'sha256-AQm6Vc8rw1wwLMAdb1JzY5e4JdnVugp+JJhvG9roVjE='; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com assets.braintreegateway.com www.gstatic.com 'self' 'unsafe-inline'; object-src 'self'; media-src *.adobe.com 'self'; manifest-src 'self'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https://maps.googleapis.com https://player.vimeo.com https://get.geojs.io *.avada.io *.trustedshops.com *.etrusted.com https://integrations.etrusted.site api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.sandbox.paypal.com autocomplete2.postdirekt.de *.usercentrics.eu userlike-cdn-widgets.s3-eu-west-1.amazonaws.com bat.bing.com www.facebook.com *.criteo.com *.criteo.net tw-0fde0867b14c4d8e9131519b5349f6f2.ecs.us-west-2.on.aws 'self'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self'; default-src 'self' 'unsafe-eval'; base-uri 'self'; 1
base-uri 'self'; connect-src 'self' https://www.paynearme.com https://s.yimg.com/ *.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com bing.com *.bing.com hotjar.com *.hotjar.com hotjar.io *.hotjar.io wss://ws.hotjar.com https://content.hotjar.io https://api.rollbar.com https://ninjafetch.com https://vc.hotjar.io/ https://www.commissionsoup.com https://bat.bing.net; default-src 'self'; font-src 'self' data: https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; form-action 'self' https://*.yodlee.com; frame-src 'self' https://www.paynearme.com https://td.doubleclick.net https://www.googletagmanager.com https://widget.sophtron.com https://*.edgescore.com https://*.yodlee.com https://www.commissionsoup.com; img-src 'self' https://bat.bing.com https://sp.analytics.yahoo.com https://images.totalcardinc.com data: https://static.ads-twitter.com https://t.co https://analytics.twitter.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://edge-public-assets.s3.us-east-2.amazonaws.com https://www.commissionsoup.com https://www.google.co.in https://www.google.com.ph; object-src 'none'; script-src 'self' googletagmanager.com *.googletagmanager.com doubleclick.net *.doubleclick.net *.yimg.com bat.bing.com *.bat.bing.com *.hotjar.com google-analytics.com *.google-analytics.com tags.engagement.technology *.tags.engagement.technology static.ads-twitter.com *.static.ads-twitter.com https://ninjafetch.com https://cdn.yodlee.com 'unsafe-inline'; style-src 'self' https://www.paynearme.com https://unpkg.com/swiper@7/swiper-bundle.min.css maxcdn.bootstrapcdn.com 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-WWn0l9kVjXaC+CGcbxP6Zyac31v1Cjkx2VMnFR3uVng=' https://ninjafetch.com https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=.yrtvCNb6WCpcCyiGbnMpVOwVG_Lk8Ohacjeay5rxHo-1789278622.3321116-1.0.1.1-nuHcd_gMmptafkOn.EFWYh4ouT1EnARx37amoApb2IXCMrsYE5HkTtadlGR8lus7wWQjr5W.ujt7ZC0DvGxsOyM29JIatzUiQHLN7zffPYrnDXWwv5HtPEUQB_9pamiUMxar.2FORccqbSIrBFH4OlRQ_ofI8xhUfR0LWixsFTgQlP02G6ClYHE7rGfV5q8_8QrDKEYPbuAMY0gA2lwhyg; report-to cf-tqtakekmguqxrsuj 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com; frame-src 'self' https://www.googletagmanager.com https://*.payu.in https://*.payubiz.in; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; 1
object-src 'none';base-uri 'self';script-src 'nonce-ydHm_v9bKKKJkBMPCuJjBw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
worker-src blob:; form-action *.cardinalcommerce.com *.paypal.com www.sandbox.paypal.com *.amazon.com *.facebook.com *.googlesyndication.com *.tiktok.com connect.facebook.net 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src *.googletagmanager.com *.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com *.paypal.com www.sandbox.paypal.com www.paypalobjects.com player.vimeo.com *.google.com *.braintreegateway.com google.com *.klarna.com js.stripe.com *.amazon.com *.payments-amazon.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com connect.facebook.net www.commercepartnerhub.com assets.braintreegateway.com plumrocket.com *.authorize.net *.artifi.net www.googleadservices.com assets.pinterest.com ct.pinterest.com i.liadm.com *.securly.com gateway.zscalerthree.net ep2.adtrafficquality.google 'self' 'unsafe-inline'; script-src *.googletagmanager.com *.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net *.google.com *.newrelic.com *.nr-data.net *.authorize.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.paypal.com www.sandbox.paypal.com www.paypalobjects.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.gstatic.com assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com *.typekit.net google.com *.cdn-apple.com *.braintreegateway.com *.klarna.com *.klarnacdn.net x.klarnacdn.net js.stripe.com *.payments-amazon.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.searchspring.net *.athoscommerce.net *.klarnaservices.com *.klaviyo.com fast.a.klaviyo.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.shopify.com *.sandbox.braintreegateway.com *.popt.in *.cloudflare.com *.artifi.net maps.googleapis.com www.googletagservices.com *.visualwebsiteoptimizer.com https://cdn.searchspring.net/intellisuggest/is.min.js *.searchspring.io *.cloudfront.net s.pinimg.com bat.bing.com tag.rmp.rakuten.com ut.rd.linksynergy.com *.pinterest.com cdn.noibu.com *.hotjar.com b-code.liadm.com secure.merchantadvantage.com *.celebros.com ep2.adtrafficquality.google assets.finestationery.com 'self' 'unsafe-inline' 'unsafe-eval'; report-uri https://www.finestationery.com/pr-csp/report/add/; report-to report-endpoint; 1
default-src 'self'; script-src-elem 'self' 'unsafe-inline' https://static.zdassets.com https://js.stripe.com https://cdn.segment.com https://dev.visualwebsiteoptimizer.com https://maps.googleapis.com https://analytics.tiktok.com; style-src 'self' 'unsafe-inline'; img-src 'self' data:; frame-src 'self' https://js.stripe.com; media-src 'self' https://static.zdassets.com; connect-src 'self' https://maps.googleapis.com https://api.segment.io https://z3nm41nt3nanc3m0d3.s3.us-east-2.amazonaws.com https://browser-intake-datadoghq.com https://ekr.zdassets.com https://zensurance.zendesk.com https://cdn.segment.com https://duckduckgo.com wss://widget-mediator.zopim.com https://analytics.tiktok.com https://zenstage.wpengine.com; worker-src 'self' blob:; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https://22games.net https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://www.gstatic.com https://connect.facebook.net https://analytics.tiktok.com https://www.clarity.ms https://scripts.clarity.ms https://js.stripe.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.jquery.com https://mc.yandex.com https://static.hotjar.com https://*.hotjar.com https://cdn.onesignal.com https://checkout.revolut.com https://merchant.revolut.com https://www.paypal.com https://www.paypalobjects.com https://static.cloudflareinsights.com https://googleads.g.doubleclick.net https://www.googleadservices.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://22games.net; font-src 'self' data: https://fonts.gstatic.com https://22games.net; img-src 'self' data: blob: https: http:; connect-src 'self' https: wss: blob:; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://www.paypal.com https://www.sandbox.paypal.com https://checkout.revolut.com https://merchant.revolut.com https://www.youtube.com https://tdn.gtranslate.net https://*.gtranslate.net; form-action 'self' https://22games.net https://www.paypal.com; worker-src 'self' blob:; manifest-src 'self' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://www.googletagmanager.com https://*.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://cdn.yektanet.com https://*.yektanet.com https://www.gstatic.com https://www.goftino.com https://*.goftino.com; style-src 'self' 'unsafe-inline' https://*.goftino.com; img-src 'self' data: blob: https:; media-src 'self' blob: https:; font-src 'self' data: https://*.goftino.com; connect-src 'self' ws: wss: https://*.googletagmanager.com https://www.googletagmanager.com https://analytics.google.com https://*.analytics.google.com https://www.google-analytics.com https://*.google-analytics.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com https://*.yektanet.com https://cdn.yektanet.com https://firebase.googleapis.com https://firebaseinstallations.googleapis.com https://www.goftino.com https://*.goftino.com; frame-src 'self' https://www.aparat.com https://*.googletagmanager.com https://td.doubleclick.net https://*.yektanet.com https://www.goftino.com https://*.goftino.com; worker-src 'self' blob:; manifest-src 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com fonts.googleapis.com *.googleapis.com data: https://www.googletagmanager.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com *.multisafepay.com https://pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.apptrian.com https://firebasestorage.googleapis.com cdn.magmodules.eu *.multisafepay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com *.avada.io *.shopify.com *.multisafepay.com https://pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'unsafe-eval' 'unsafe-inline' *.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net *.multisafepay.com assets.braintreegateway.com 'unsafe-inline' *.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com www.apptrian.com https://get.geojs.io *.avada.io *.multisafepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.punchout2go.com https://*.qliro.com https://*.vipps.no https://*.trustly.com https://*.ideal.nl https://*.apple.com https://*.unzer.com https://*.heidelpay.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.punchout2go.com https://*.qliro.com *.trustpilot.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.punchout2go.com https://*.qliro.com *.trustpilot.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com assets.braintreegateway.com *.punchout2go.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' blob: 'sha256-Dtt7rOwM3Wxdu/+Khgd+aqYmb67u7taaDMoG8XMGTDk=' https://www.googletagmanager.com https://www.google-analytics.com https://challenges.cloudflare.com https://*.daily.co https://va.vercel-scripts.com https://js.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.usemessages.com https://js.hsforms.net https://js.hscollectedforms.net https://www.clarity.ms https://*.clarity.ms; style-src 'self' 'sha256-QC5YcUxxFfO9DWgxIsbCh0L5ADAdUUGglFB4qUYVS04=' https://fonts.googleapis.com; img-src 'self' data: blob: https://www.google-analytics.com https://www.googletagmanager.com https://*.supabase.co https://images.unsplash.com https://lh3.googleusercontent.com https://track.hubspot.com https://forms.hsforms.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://*.supabase.co https://www.google-analytics.com https://region1.google-analytics.com https://api.hubapi.com https://meetings.hubspot.com https://ipapi.co https://challenges.cloudflare.com https://api.vapi.ai wss://*.vapi.ai https://*.vapi.ai https://*.daily.co wss://*.daily.co https://*.ingest.sentry.io https://*.ingest.us.sentry.io https://*.ingest.de.sentry.io https://vitals.vercel-insights.com https://va.vercel-scripts.com https://forms.hsforms.com https://api.hsforms.com https://track.hubspot.com https://api.hubspot.com https://www.clarity.ms https://*.clarity.ms; frame-src 'self' https://meetings.hubspot.com https://*.supabase.co https://challenges.cloudflare.com https://*.daily.co https://*.hubspot.com https://*.hubspotusercontent.com https://app.hubspot.com https://www.youtube.com; frame-ancestors 'self'; form-action 'self'; base-uri 'self'; media-src 'self' blob: https://*.daily.co; worker-src 'self' blob:; object-src 'none'; report-uri /api/csp-report; report-to csp-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com; script-src-elem 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; img-src 'self' data: blob: https: https://www.google.com https://www.gstatic.com https://maps.google.com https://maps.googleapis.com; media-src 'self' data: blob: https:; connect-src 'self' https://www.google-analytics.com https://api.google.com https://*.googleapis.com https://*.firebaseio.com https://identitytoolkit.googleapis.com https://securetoken.googleapis.com ws://sw-games.net wss://sw-games.net ws://sw-games.net:* wss://sw-games.net:*; frame-src 'self' https://www.google.com https://maps.google.com; frame-ancestors 'none'; form-action 'self'; base-uri 'self'; object-src 'none'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net https://fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.oppwa.com oppwa.com *.mastercard.com *.iesnare.com *.requirejs.org *.visa.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.oppwa.com oppwa.com *.mastercard.com *.iesnare.com *.requirejs.org *.visa.com https://player.vimeo.com https://www.youtube-nocookie.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io blueskytechmage.com mageblueskytech.com placehold.jp *.oppwa.com oppwa.com *.mastercard.com *.iesnare.com *.requirejs.org *.visa.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.jquery.com *.oppwa.com oppwa.com *.mastercard.com *.visa.com *.iesnare.com *.requirejs.org *.disqus.com *.avada.io *.shopify.com https://player.vimeo.com https://www.youtube.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.oppwa.com oppwa.com *.mastercard.com *.iesnare.com *.requirejs.org *.visa.com *.fontawesome.com https://fonts.bunny.net https://fonts.googleapis.com http://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.oppwa.com oppwa.com *.mastercard.com *.iesnare.com *.requirejs.org *.visa.com https://get.geojs.io *.avada.io https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://*.snowsoftware.io https://*.flexeraeu.flexera.com https://*.eu.pendo.io; frame-src 'self' https://app.pendo.io https://*.eu.pendo.io https://www.youtube.com https://player.vimeo.com  https://*.snowsoftware.io blob:;connect-src 'self' https://*.snowatlas.snowsoftware.io https://*.snowatlaseu.snowsoftware.io https://*.snowsoftware.io https://*.eu.pendo.io https://*.execute-api.us-east-1.amazonaws.com https://sts.us-east-1.amazonaws.com https://qbusiness.us-east-1.api.aws wss://qbusiness-websocket.us-east-1.api.aws wss://*.snowsoftware.io https://*.launchdarkly.com https://westeurope-2.in.applicationinsights.azure.com https://js.monitor.azure.com/ https://*.blob.core.windows.net https://*.sumologic.com;script-src 'self' 'unsafe-eval' 'report-sample' https://app.eu.pendo.io https://*.snowatlas.snowsoftware.io https://*.snowatlaseu.snowsoftware.io https://*.snowsoftware.io  https://snowsoftware.io https://*.flexera.com https://*.flexeraone.flexera.com https://cdn.pendo.io https://*.sumologic.com; style-src 'self' 'unsafe-inline' 'report-sample' https://*.eu.pendo.io https://*.snowatlaseu.snowsoftware.io https://*.snowsoftware.io; font-src 'self' data: https://*.eu.pendo.io https://*.cdn.eu.pendo.io https://*.snowsoftware.io;img-src 'self' https://*.snowatlas.snowsoftware.io https://*.snowatlaseu.snowsoftware.io https://*.eu.pendo.io https://*.dev-snowsoftware.io https://*.flexera.com data:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net https://*.google.com https://google.com https://*.gstatic.com https://*.googleapis.com https://*.youtube.com https://*.clevertap-prod.com https://*.wzrkt.com https://*.clevertap.com https://*.contentsquare.net https://websdk.appsflyersdk.com https://fvalid.appsflyersdk.com https://oltreai.com https://*.oltreai.com https://connect.facebook.net https://*.facebook.com https://*.licdn.com https://*.linkedin.com https://*.cloudfront.net https://*.amazonaws.com; connect-src 'self' https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net https://*.google.com https://google.com https://*.gstatic.com https://*.googleapis.com https://*.youtube.com https://*.clevertap-prod.com https://*.wzrkt.com https://*.clevertap.com https://*.contentsquare.net https://websdk.appsflyersdk.com https://fvalid.appsflyersdk.com https://oltreai.com https://*.oltreai.com https://connect.facebook.net https://*.facebook.com https://*.licdn.com https://*.linkedin.com https://*.cloudfront.net https://*.amazonaws.com https://*.appsflyer.com https://*.onelink.me https://banner.appsflyersdk.com https://creatives-cdn.appsflyersdk.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat https://*.joinrs.com wss://*.joinrs.com; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; media-src 'self' https: blob:; frame-src 'self' blob: https://*.googletagmanager.com https://*.youtube.com https://*.doubleclick.net https://*.facebook.com https://www.google.it https://www.google.es https://www.google.de https://www.google.fr https://www.google.pt https://www.google.co.uk https://www.google.com.br; worker-src 'self' blob:; object-src 'self' blob:; base-uri 'self'; form-action 'self' https://*.facebook.com; report-uri /api/security/csp-report; report-to csp-endpoint 1
default-src 'none'; script-src 'self' 'sha256-QBU4OYS2TSNy1FAAqusf1VZSWvy1Jurlx13eQo7ofqk=' https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://www.googletagmanager.com https://connect.facebook.net https://analytics.menton.fr; style-src 'self' https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://fonts.googleapis.com https://use.fontawesome.com; style-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://fonts.googleapis.com https://use.fontawesome.com; font-src 'self' data: https://fonts.gstatic.com https://use.fontawesome.com; img-src 'self' data: blob: https://img.youtube.com https://i.ytimg.com https://www.facebook.com https://www.googletagmanager.com https://*.google-analytics.com https://analytics.menton.fr https://ads.fete-du-citron.com https://*.tile.openstreetmap.fr; media-src 'self' blob:; connect-src 'self' https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://region1.google-analytics.com https://analytics.menton.fr https://ads.fete-du-citron.com; frame-src 'self' https://www.facebook.com https://www.youtube.com https://www.youtube-nocookie.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; worker-src 'self' blob:; manifest-src 'self'; report-uri https://635a3a821b097796c21f8bcd.endpoint.csper.io/; report-to csp-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.googleapis.com *.gstatic.com *.hotjar.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googletagmanager.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com; img-src 'self' data: *.google.com *.googleapis.com *.gstatic.com *.hotjar.com *.facebook.com *.doubleclick.net; font-src 'self' *.googleapis.com *.gstatic.com; connect-src 'self' *.hotjar.com *.google-analytics.com *.googletagmanager.com; frame-src *.google.com *.facebook.com; report-uri /csp-report; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net https://fonts.gstatic.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com landofcoder.com maps.googleapis.com chart.googleapis.com https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com maps.google.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ landofcoder.com maps.googleapis.com chart.googleapis.com *.avada.io *.shopify.com https://player.vimeo.com https://www.youtube.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://static.klaviyo.com https://fonts.bunny.net https://fonts.googleapis.com http://fonts.googleapis.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src landofcoder.com maps.googleapis.com chart.googleapis.com 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.fontawesome.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ landofcoder.com maps.googleapis.com chart.googleapis.com https://get.geojs.io *.avada.io https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/publicpolicy_google 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://challenges.cloudflare.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://inventorydb-publish-worker.kotyakov.workers.dev; font-src 'self' data:; connect-src 'self' https://challenges.cloudflare.com https://qdqugmlxpxhcrzdzgdnt.supabase.co https://o4511578102890496.ingest.us.sentry.io; frame-src 'self' https://challenges.cloudflare.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none' 1
object-src 'none';base-uri 'self';script-src 'nonce-GccQNYtDf6Y44adtEnmPuQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-P112IVai4_olUqm9wW9rDg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'none'; connect-src 'self' https://api.oneworldvirtual.org https://acars.oneworldvirtual.org https://tiles.vasystem.org https://flight-analyses.vasystem.org; font-src 'self'; img-src 'self' https://www.gravatar.com https://images.vasystem.org blob: data:; manifest-src 'self'; script-src 'self'; style-src 'self' https://storage.oneworldvirtual.org 'nonce-xzZ2kKLzdgyGSPvaG24Zd7vQRmo'; style-src-attr 'unsafe-inline'; report-uri https://oneworldvirtual.org/csp/report 1
object-src 'none';base-uri 'self';script-src 'nonce-XP5cRZ70XAF_lBo5XktUWA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.googleapis.com *.gstatic.com data: https://www.googletagmanager.com *.fontawesome.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com 'self'; frame-src www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.youtube-nocookie.com https://static.addtoany.com/ www.google.com js.stripe.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com ad.ipredictive.com www.googletagmanager.com digioh.com *.digioh.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.gstatic.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com https://meetanshi.com/media/logo.png https://redchamps.com *.authorize.net assets.secure.checkout.visa.com sandbox.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com cdn.digioh.com *.google-analytics.com *.doubleclick.net www.zeropartyforms.com data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://static.addtoany.com/ *.googleapis.com *.gstatic.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.vimeo.com js.stripe.com *.matomo.cloud https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com *.clarity.ms www.lightboxcdn.com js.ipredictive.com *.klaviyo.com *.wheelio-app.com cdnjs.cloudflare.com *.doubleclick.net www.googletagmanager.com www.zeropartyforms.com https://shopstarship.matomo.cloud 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://static.klaviyo.com *.fontawesome.com cdn.digioh.com www.zeropartyforms.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com vimeo.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://stats.addtoany.com/menu *.googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.matomo.cloud https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com *.clarity.ms api.digioh.com *.doubleclick.net jsapi.azurewebsites.net www.google-analytics.com analytics.google.com www.google.com analytics.digioh.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://cdnjs.cloudflare.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' data: https://www.google-analytics.com https://www.googletagmanager.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com; frame-src https://www.google.com; font-src 'self' https://cdnjs.cloudflare.com https://fonts.gstatic.com; 1
object-src 'none';base-uri 'self';script-src 'nonce-uUwLBm_JQQa4OwXmQ9MDqA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://fonts.gstatic.com 'self' data: *.fontawesome.com *.abode.com *.scupio.com *.criteo.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2 https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.ttf data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://logistics-stage.ecpay.com.tw/Express/map https://logistics.ecpay.com.tw/Express/map https://logistics-stage.ecpay.com.tw/helper/printTradeDocument https://logistics.ecpay.com.tw/helper/printTradeDocument 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.criteo.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https://static.addtoany.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.gstatic.com *.abode.com *.scupio.com 'self' 'unsafe-inline'; img-src *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.abode.com blob: *.azureedge.net *.magentosite.cloud https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page https://static.addtoany.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com https://www.gstatic.com 'self' data: https://code.highcharts.com unpkg.com/@dotlottie/ https://cdnjs.cloudflare.com/ajax/libs/dompurify/3.2.0/ https://cdnjs.cloudflare.com/ajax/libs/select2/4.0.13/ https://cdnjs.cloudflare.com/ajax/libs/codemirror/4.13.0/ *.optimonk.com https://rum.hlx.page/ *.clarity.ms *.scupio.com *.criteo.com https://cdnjs.cloudflare.com/ajax/libs/dompurify/3.2.7/purify.min.js https://www.googletagmanager.com *.avada.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com assets.braintreegateway.com *.gstatic.com 'self' data: https://fonts.googleapis.com *.fontawesome.com *.abode.com *.scupio.com *.criteo.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css https://static.klaviyo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://stats.addtoany.com/menu api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com https://fcm.googleapis.com 'self' data: *.gstatic.com *.abode.com *.optimonk.com hotaimember.com.tw/ *.clarity.ms *.scupio.com *.criteo.com https://get.geojs.io *.avada.io http://hotaigo-wss.yoxi.io:443/socket.io/ https://hotaigo-wss.yoxi.io:443/socket.io/ wss://hotaigo-wss.yoxi.io:443/socket.io/ http://chathotail.local:443/socket.io/ https://chathotail.local:443/socket.io/ wss://chathotail.local:443/socket.io/ https://chathotail.local/socket.io/ http://test-chat-app-hotai.vercel.app/socket.io/ https://test-chat-app-hotai.vercel.app:443/socket.io/ wss://test-chat-app-hotai.vercel.app:443/socket.io/ http://hotaichatapptest.branch8.com/socket.io/ https://hotaichatapptest.branch8.com:443/socket.io/ wss://hotaichatapptest.branch8.com:443/socket.io/ ws://hotaichatapptest.branch8.com:80/socket.io/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: https://*.paypal.com https://*.paypalobjects.com 'nonce-Nu9vOagJbLLAobDMAsuY-HrF6TDsDhQ2'; base-uri 'none'; report-uri https://data.sanitino.eu/csp-report 1
default-src 'self'; script-src 'nonce-ZWZmZGNjZjYtOGE3Yi00OGJjLWJlMmItYWRmNGIzN2M5MDMx' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' https: http:; script-src-elem 'nonce-ZWZmZGNjZjYtOGE3Yi00OGJjLWJlMmItYWRmNGIzN2M5MDMx' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval'; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.googletagmanager.com https://tagmanager.google.com https://accounts.google.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com https://www.googletagmanager.com https://tagmanager.google.com https://accounts.google.com; style-src-attr 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com https://*.gstatic.com https://fonts.googleapis.com data:; img-src 'self' data: blob: https: http:; connect-src 'self' https://api.mylens.ai wss://api.mylens.ai https://cdn.tolt.io https://api.tolt.io https://track.customer.io https://assets.customer.io https://*.datadoghq.com https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com https://api-js.mixpanel.com https://*.mixpanel.com https://58qr5yci46.execute-api.us-east-1.amazonaws.com https://www.googletagmanager.com https://www.google.com https://api.iconify.design https://api.unisvg.com https://api.simplesvg.com https://*.google.com https://*.googleapis.com https://*.doubleclick.net https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net https://*.cloudflareaccess.com https://fonts.gstatic.com https://*.gstatic.com https://cdn.mylens.ai https://*.google.com.ua https://*.google.com.tr https://*.google.co.in https://*.google.com.au https://*.googleadservices.com https://www.googleadservices.com; media-src 'self' https: https://cdn.mylens.ai https://cdn.dmtest.tech blob: data:; frame-src 'self' https://embed.mylens.ai https://www.youtube.com https://www.youtube-nocookie.com https://accounts.google.com https://td.doubleclick.net https://www.googletagmanager.com https://cdn.tolt.io https://*.doubleclick.net https://*.google.com; worker-src 'self' blob:; child-src 'self' blob:; manifest-src 'self' https://mylens.ai https://*.cloudflareaccess.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; block-all-mixed-content; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=puba7f91ffcbbd406a0a1267bc609678e63&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=env%3Aproduction%2Cservice%3Alanding%2Ccontent-security-policy&ddservice=landing; report-to csp-endpoint 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cloudflare.com *.twitter.com *.googleapis.com 'self' data: *.sitejabber.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.googleapis.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.youtube.com http://www.sandbox.paypal.com *.twitter.com *.facebook.com *.freshchat.com *.sitejabber.com *.criteo.com *.criteo.net js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com 'self' data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.cloudflare.com *.facebook.com *.criteo.com *.criteo.net *.googleadservices.com www.google-analytics.com dev.visualwebsiteoptimizer.com d10lpsik1i8c69.cloudfront.net *.twitter.com *.bing.com *.doubleclick.net *.google.com *.sitejabber.com *.payments-amazon.com *.bizrate.com www.google.co.in https://images.unsplash.com magefan.com cm.magefan.com https://img.youtube.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.cloudflare.com *.twitter.com *.google-analytics.com *.gstatic.com *.fontawesome.com *.bing.com *.sitejabber.com *.doubleclick.net *.netcoresmartech.com *.steelhousemedia.com *.criteo.com https://www.clickcease.com/ https://js-agent.newrelic.com/ https://bam-cell.nr-data.net https://www.googletagmanager.com/ https://www.googleoptimize.com/ https://dev.visualwebsiteoptimizer.com/ https://d10lpsik1i8c69.cloudfront.net/ https://d.impactradius-event.com/ https://www.googleadservices.com/ https://connect.facebook.net/ https://wchat.freshchat.com/ https://static.criteo.net/ https://maps.googleapis.com https://player.vimeo.com *.avada.io *.shopify.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.gstatic.com *.fontawesome.com *.bing.com *.freshchat.com *.sitejabber.com *.doubleclick.net maxcdn.bootstrapcdn.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zopim.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.google-analytics.com www.ag-grid.com *.cloudflare.com *.twitter.com https://stats.g.doubleclick.net https://www.sitejabber.com https://bam-cell.nr-data.net https://maps.googleapis.com https://player.vimeo.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' https://www.googletagmanager.com https://elfsightcdn.com https://js-agent.newrelic.com https://static.elfsight.com cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://static.addtoany.com https://unpkg.com mdbootstrap.com; style-src 'self' 'report-sample' 'unsafe-inline' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://use.fontawesome.com mdbootstrap.com use.fontawesome.com; webrtc 'block'; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
font-src * *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.google.com *.googletagmanager.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.doubleclick.net * *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.sdu.nl *.awssdu.nl * *.hsforms.net *.hsforms.com *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com * *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com * 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.sdu.nl *.awssdu.nl *.google.com * t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
connect-src https://alanboswellgroup.3cx.uk:5001/ 'self' *.algolianet.com *.algolia.net *.clarity.ms ad.doubleclick.net stats.g.doubleclick.net https://api.feefo.com/ *.google-analytics.com www.google.co.uk https://www.google.com/ https://www.googleadservices.com/ *.googlesyndication.com www.googletagmanager.com cpl.iubenda.com idb.iubenda.com https://maps.googleapis.com/ https://mapsresources-pa.googleapis.com/ https://noembed.com/ cdn.plyr.io cdn.usefathom.com googleads.g.doubleclick.net https://google.com/ https://webcontent.alanboswell.com https://viewlicense.adobe.io https://register.feefo.com www.facebook.com region1.analytics.google.com https://analytics.google.com/; font-src 'self' fonts.gstatic.com https://fonts.feefo.com; img-src 'self' https://webcontent.alanboswell.com data: https://alan-boswell.imgix.net cdn.usefathom.com www.google.com www.google.co.uk www.googleadservices.com www.google-analytics.com www.googletagmanager.com www.facebook.com alb.reddit.com www.redditstatic.com googleads.g.doubleclick.net *.clarity.ms i.ytimg.com maps.googleapis.com mapsresources-pa.googleapis.com maps.gstatic.com *.googlesyndication.com api.feefo.com files.bugherd.com; script-src 'self' www.googletagmanager.com maps.googleapis.com scripts.clarity.ms www.clarity.ms connect.facebook.net cdn.usefathom.com googleads.g.doubleclick.net www.youtube.com cdn.iubenda.com embeds.iubenda.com challenges.cloudflare.com static.cloudflareinsights.com acrobatservices.adobe.com downloads-global.3cx.com public.flourish.studio www.bugherd.com https://unpkg.com/imask sidebar.bugherd.com www.redditstatic.com 'unsafe-inline' 'unsafe-eval' register.feefo.com api.feefo.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://register.feefo.com; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=lFHyVSHlhPL.RaKNtVj421F59gf1h8hWRD.ISU1hF4s-1789277136.7489533-1.0.1.1-QYIrNceczX641UgM34MKly42U15N1VBNaByxnFXDMS.W5cpkXaCgK2Xd2eHFw6ro4WkcUxLuLxVPuXVLDALNwYR2M5fDcY1RiJDfT1aWS.gc6mgFCZzMVpGwskSMeZp_UYYjq1sreiMMhBmo85.zBjHtprbdnmpPFbUJJShMoDzKOBkSGArR_FZBM1P58GE1qNhsS29HvnxIsBP5L7v.sQ; report-to cf-rfjmpybgxftpavwj 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com static.lipscore.com *.googleapis.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de www.facebook.com platform.twitter.com https://tst.kaptcha.com https://ssl.kaptcha.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.trustpilot.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com d3cfv1r84exbq1.cloudfront.net cdn.subscribers.com rum-static.pingdom.net static-tracking.klaviyo.com static-forms.klaviyo.com rum-collector-2.pingdom.net olivastu.com *.facebook.com www.google.co.in 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ static.lipscore.com blob: img.youtube.com *.disqus.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.doubleclick.net *.google.com.vn *.google.com.sg *.google.com.au *.google.fr *.google.it *.google.es *.google.pl *.google.ca *.google.ie *.google.dk *.google.se *.google.no *.google.ch *.google.at *.google.cz *.google.pt *.google.gr *.google.ro https://firebasestorage.googleapis.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com https://tst.kaptcha.com https://ssl.kaptcha.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.weltpixel.com d3cfv1r84exbq1.cloudfront.net cdn.subscribers.com rum-static.pingdom.net static-tracking.klaviyo.com static-forms.klaviyo.com rum-collector-2.pingdom.net olivastu.com *.facebook.com www.google.co.in data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ static.lipscore.com *.disqus.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.gstatic.com *.googletagmanager.com *.doubleclick.net static.cloudflareinsights.com *.fontawesome.com *.googleapis.com *.avada.io *.sharethis.com connect.facebook.net twitter.com platform.twitter.com https://tst.kaptcha.com https://ssl.kaptcha.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.referralcandy.com *.trustpilot.com *.cloudflare.com *.weltpixel.com d3cfv1r84exbq1.cloudfront.net cdn.subscribers.com rum-static.pingdom.net static-tracking.klaviyo.com static-forms.klaviyo.com rum-collector-2.pingdom.net olivastu.com *.facebook.com www.google.co.in 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://static.klaviyo.com static.lipscore.com *.googleapis.com *.googletagmanager.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://tst.kaptcha.com https://ssl.kaptcha.com assets.braintreegateway.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ wapi.lipscore.com users.lipscore.com *.google-analytics.com *.doubleclick.net *.googlesyndication.com cloudflareinsights.com *.cloudflareinsights.com https://get.geojs.io *.avada.io *.sharethis.com https://tst.kaptcha.com https://ssl.kaptcha.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.weltpixel.com d3cfv1r84exbq1.cloudfront.net cdn.subscribers.com rum-static.pingdom.net static-tracking.klaviyo.com static-forms.klaviyo.com rum-collector-2.pingdom.net olivastu.com *.facebook.com www.google.co.in 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src c.imedia.cz c.seznam.cz s2.adform.net connect.facebook.net googleads.g.doubleclick.net www.google-analytics.com widget.packeta.com 1gr.cz c.seznam.cz www.zbozi.cz cdn.cpex.cz sdk.privacy-center.org sgtm.signals.cz rec.smartlook.com cnc.daktela.com widget-v2.smartsuppcdn.com www.smartsuppchat.com *.smartsupp.com *.smartsuppcdn.com *.smartlook.com *.smartsuppchat.com spir.hit.gemius.pl a.opmnstr.com track.adform.net widget.packeta.com c.imedia.cz api.mapy.cz *.mapy.cz script.hotjar.com www.google.com *.google.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com tagmanager.google.com googleads.g.doubleclick.net connect.facebook.net static.hotjar.com *.im9.cz im9.cz 'self' 'unsafe-inline' 'unsafe-eval'; script-src-elem *.im9.cz im9.cz www.zbozi.cz *.smartlook.com rec.smartlook.com widget-v2.smartsuppcdn.com *.smartsuppcdn.com script.hotjar.com www.obchod.crew.cz api.mapy.cz c.imedia.cz c.seznam.cz s2.adform.net connect.facebook.net googleads.g.doubleclick.net www.google-analytics.com widget.packeta.com api.mapy.cz www.googleadservices.com www.googleadservices.com 2.adform.net www.googletagmanager.com track.adform.net 1gr.cz 'self' 'unsafe-inline'; style-src translate.googleapis.com *.smartsuppcdn.com cdnjs.cloudflare.com fonts.googleapis.com tagmanager.google.com api.mapy.cz 'unsafe-inline' 'self'; style-src-elem fonts.googleapis.com *.smartsuppcdn.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; report-uri /csp 1
object-src 'none';base-uri 'self';script-src 'nonce-02WDReRBn4fKgW5h1MeYew' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.clarity.ms https://*.clarity.ms https://maps.googleapis.com https://maps.gstatic.com https://challenges.cloudflare.com https://js.stripe.com https://static.cloudflareinsights.com https://client.crisp.chat https://googleads.g.doubleclick.net; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.clarity.ms https://*.clarity.ms https://api.stripe.com https://maps.googleapis.com https://tiles.stadiamaps.com https://challenges.cloudflare.com https://model.prod.paaw.co https://accounts.prod.paaw.co https://uploads.prod.paaw.co https://client.crisp.chat wss://client.relay.crisp.chat https://region1.analytics.google.com https://*.analytics.google.com https://ad.doubleclick.net https://www.googleadservices.com https://www.google.com https://www.google.fr https://nominatim.openstreetmap.org; frame-src https://js.stripe.com https://hooks.stripe.com https://checkout.stripe.com https://challenges.cloudflare.com https://www.youtube-nocookie.com https://www.youtube.com https://www.google.com; img-src 'self' data: blob: https://cdn.rescuegroups.org https://*.paaw.co https://images.pexels.com https://tiles.stadiamaps.com https://maps.googleapis.com https://maps.gstatic.com https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://*.clarity.ms https://c.bing.com https://www.google.com https://www.google.fr https://image.crisp.chat https://client.crisp.chat; style-src 'self' 'unsafe-inline' https://client.crisp.chat; font-src 'self' data: https://client.crisp.chat; worker-src 'self' blob:; media-src 'self' https://*.paaw.co; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp 1
default-src 'self'; object-src 'none'; font-src data: https:; frame-ancestors 'none'; form-action 'self'; script-src 'unsafe-eval' 'unsafe-inline' https:; img-src https: data:; style-src https: 'unsafe-inline'; connect-src https:; media-src https:; frame-src https:; worker-src blob:; upgrade-insecure-requests; block-all-mixed-content; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self' https://backend.fiakarting.com; upgrade-insecure-requests; script-src 'self' https://www.googletagmanager.com https://*.google-analytics.com https://openlayers.org https://www.youtube.com https://www.apex-timing.com https://matomo-tracking.fia.com; style-src 'self' 'unsafe-inline' https://openlayers.org https://curator-assets.b-cdn.net https://p.typekit.net https://use.typekit.net; img-src 'self' https://*.basemaps.cartocdn.com https://backend.fiakarting.com https://curator-assets.b-cdn.net https://www.google-analytics.com https://www.googletagmanager.com https://openlayers.org https://matomo-tracking.fia.com https://www.youtube.com https://*.ytimg.com; font-src 'self' https://use.typekit.net; form-action 'self'; connect-src 'self' https://backend.fiakarting.com https://*.google-analytics.com https://region1.analytics.google.com https://www.googletagmanager.com https://openlayers.org https://www.apex-timing.com https://matomo-tracking.fia.com; frame-src 'self' https://www.youtube.com https://www.apex-timing.com https://ikr.apex-timing.com; report-uri https://report.centralcsp.com/695c1f7908466c24b44db9ae; report-to csp-endpoint; 1
default-src * 'unsafe-inline'; img-src * data: 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://yastatic.net https://*.yandex.net https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://forms.amocrm.ru https://gso.amocrm.ru https://smartcaptcha.cloud.yandex.ru https://captcha-api.yandex.ru https://rpa-design.ru https://*.b242ya.ru https://67p.b242ya.ru https://fincollege.bitrix24.ru; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://yastatic.net https://rpa-design.ru https://fincollege.bitrix24.ru; font-src 'self' data: https://fonts.gstatic.com https://yastatic.net; img-src 'self' data: blob: https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://*.yandex.ru https://*.yandex.net https://yandex.ru https://img.youtube.com https://rutube.ru https://www.google.ru https://www.google.com https://stats.g.doubleclick.net https://rpa-design.ru https://*.b242ya.ru https://67p.b242ya.ru https://fincollege.bitrix24.ru; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://rutube.ru https://player.vimeo.com https://forms.amocrm.ru https://smartcaptcha.cloud.yandex.ru https://yandex.ru https://mc.yandex.ru https://mc.yandex.com https://fincollege.bitrix24.ru; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.ru wss://mc.yandex.com https://yastatic.net https://www.googletagmanager.com https://www.google.ru https://www.google.com https://forms.amocrm.ru https://gso.amocrm.ru https://smartcaptcha.cloud.yandex.ru https://analytics.google.com https://*.analytics.google.com https://stats.g.doubleclick.net https://*.b242ya.ru https://67p.b242ya.ru https://fincollege.bitrix24.ru; object-src 'none'; base-uri 'self'; form-action 'self' https://forms.amocrm.ru https://gso.amocrm.ru; report-uri /assets/csp-report.php 1
font-src use.typekit.net v2.zopim.com d1azc1qln24ryf.cloudfront.net popups-cdn.tinyme.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.adyen.com www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.adyen.com www.facebook.com vars.hotjar.com www.google.com www.paypalobjects.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.adyen.com www.tinyme.com.au www.tinyme.sg bat.bing.com ct.pinterest.com www.facebook.com a.klaviyo.com www.google.com.au embed-fastly.wistia.com fast.wistia.com www.sandbox.paypal.com popups-cdn.tinyme.com https://a.klaviyo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.adyen.com static.zipmoney.com.au js-agent.newrelic.com bam.nr-data.net s.pinimg.com bat.bing.com connect.facebook.net v2.zopim.com static.zdassets.com fast.wistia.com static.hotjar.com script.hotjar.com widget.parcelpoint.com.au apis.google.com www.gstatic.com popups-cdn.tinyme.com https://static.klaviyo.com https://fast.a.klaviyo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com use.typekit.net p.typekit.net d1azc1qln24ryf.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adyen.com www.tinyme.com.au www.tinyme.sg api.zipmoney.com.au t.zip.co ct.pinterest.com ekr.zdassets.com fast.a.klaviyo.com telemetrics.klaviyo.com *.zopim.com bam.nr-data.net bat.bing.com stats.g.doubleclick.net distillery.wistia.com embed-fastly.wistia.com pipedream.wistia.com in.hotjar.com embedwistia-a.akamaihd.net www.google.com api-m.paypal.com api-m.sandbox.paypal.com popups-cdn.tinyme.com https://static.klaviyo.com https://fast.a.klaviyo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src www.tinyme.com.au www.tinyme.sg 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com https://fonts.gstatic.com https://widgets.trustedshops.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://*.computop-paygate.com/payssl.aspx https://*.computop-paygate.com/paypal.aspx https://plumrocket.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.google.com/ https://plumrocket.com *.wesupply.xyz https://wesupplylabs.com guarantee-cdn.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://www.magezon.com https://matomo.alpinawein.de blob: https://maps.gstatic.com https://maps.googleapis.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com guarantee-cdn.com *.gstatic.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com/ jquery.sellxed.com https://*.computop-paygate.com/payssl.aspx https://*.computop-paygate.com/paypal.aspx https://matomo.alpinawein.de https://cdn.mouseflow.com http://cdn.mouseflow.com https://subx.alpinawein.de *.googletagmanager.com https://maps.googleapis.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.cloudflare.com guarantee-cdn.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com https://fonts.googleapis.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://*.computop-paygate.com/payssl.aspx https://*.computop-paygate.com/paypal.aspx https://matomo.alpinawein.de https://cdn.mouseflow.com http://cdn.mouseflow.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com https://*.icomoon.io https://fonts.gstatic.com https://*.google.com https://cdnjs.cloudflare.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://*.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com https://*.googletagmanager.com https://*.cookiebot.com https://*.facebook.com *.multisafepay.com https://pay.google.com *.sendcloud.sc *.jsdelivr.net *.weltpixel.com www.xtento.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://connect.facebook.net https://*.facebook.com *.multisafepay.com *.amazonaws.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com www.xtento.com cdn.xtento.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com *.gstatic.com https://*.sportimex.com https://developer.adobe.com https://magento.com https://*.cookiebot.com https://static.dhlecommerce.nl https://*.bootstrapcdn.com https://*.jsdelivr.net https://*.google.com https://connect.facebook.net *.multisafepay.com https://pay.google.com *.sendcloud.sc *.jsdelivr.net maps.googleapis.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com ajax.googleapis.com www.xtento.com cdn.xtento.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://*.sportimex.com https://*.icomoon.io https://*.cloudfront.net https://static.dhlecommerce.nl https://*.cookiebot.com https://*.jsdelivr.net https://*.google.com https://cdnjs.cloudflare.com *.multisafepay.com *.sendcloud.sc *.jsdelivr.net https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://*.sportimex.com https://developer.adobe.com https://*.google.com *.multisafepay.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com places.googleapis.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src maxcdn.bootstrapcdn.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ app-wallee.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com app-wallee.com cdn.magmodules.eu https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.avada.io app-wallee.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com maxcdn.bootstrapcdn.com *.fontawesome.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https:;script-src https: 'self' 'strict-dynamic' 'nonce-6d0e157cc372838d6d217b6ea199fd11b62d49d3d5dbabf16dfe98e2a4a2ba75' 'unsafe-inline' 'unsafe-eval' 'report-sample';style-src https: 'unsafe-inline';img-src https: data:;connect-src https: wss:;font-src https: data:;object-src 'none';media-src https: blob: data:;frame-src https: data: blob:;child-src 'self' https:;form-action 'self';frame-ancestors https://my.firespring.com;base-uri 'self' https://insights.sitesearch360.com;worker-src 'self' blob:;manifest-src 'self' https://cdn.firespring.com;report-uri /csp_log?n=1 1
frame-ancestors 'self' ; object-src 'none' ; report-to csp-report-only; report-uri https://cspreports.realpage.com/api/reports/save/report-only; 1
default-src 'self' telligen.okta.com *.oktacdn.com; connect-src 'self' telligen.okta.com telligen-admin.okta.com *.oktacdn.com *.mixpanel.com *.mapbox.com telligen.kerberos.okta.com telligen.mtls.okta.com *.authenticatorlocalprod.com:8769 http://localhost:8769 http://127.0.0.1:8769 *.authenticatorlocalprod.com:65111 http://localhost:65111 http://127.0.0.1:65111 *.authenticatorlocalprod.com:65121 http://localhost:65121 http://127.0.0.1:65121 *.authenticatorlocalprod.com:65131 http://localhost:65131 http://127.0.0.1:65131 *.authenticatorlocalprod.com:65141 http://localhost:65141 http://127.0.0.1:65141 *.authenticatorlocalprod.com:65151 http://localhost:65151 http://127.0.0.1:65151 https://oinmanager.okta.com data: art.login.telligen.com cqmv.login.telligen.com jira.login.telligen.com massqex.login.telligen.com pcmt.login.telligen.com qaqc.login.telligen.com qat.login.telligen.com tea.login.telligen.com; script-src 'unsafe-inline' 'nonce-W1Ere7-Kg1mY26__b9Q7rw' 'self' 'report-sample' telligen.okta.com *.oktacdn.com; style-src 'unsafe-inline' 'nonce-W1Ere7-Kg1mY26__b9Q7rw' 'self' 'report-sample' telligen.okta.com *.oktacdn.com; frame-src 'self' telligen.okta.com telligen-admin.okta.com login.okta.com com-okta-authenticator:; img-src 'self' telligen.okta.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com data: blob:; font-src 'self' telligen.okta.com data: *.oktacdn.com fonts.gstatic.com; frame-ancestors 'self' https://myqualitrac.com 1
object-src 'none';base-uri 'self';script-src 'nonce-DeBcddcV2mGiIO4h8UhuHQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.gstatic.com 'self' data: https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net *.sendcloud.sc *.jsdelivr.net https://www.googletagmanager.com https://td.doubleclick.net 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com *.amazonaws.com *.hsforms.net *.hsforms.com 'self' data: https://imgproxy.vendic.dev data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://maps.googleapis.com https://player.vimeo.com *.disqus.com https://cdn.jsdelivr.net *.sendcloud.sc *.jsdelivr.net *.hsforms.net *.hsforms.com *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src downloads.mailchimp.com https://cdn.jsdelivr.net *.sendcloud.sc *.jsdelivr.net *.googleapis.com *.gstatic.com https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com https://maps.googleapis.com https://player.vimeo.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com t.elasticsuite.io *.hsforms.net *.hsforms.com https://www.google.com *.pay.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.budgetwijnen.nl/paynl/csp/report; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'nonce-E2h7oUAPZ4LXc9E3MvYDxBVCmYCDn62g2DsYazHnWTurd5xTvzgGKA' data: https://*.openstreetmap.org 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://*.openstreetmap.org https://www.asyl.net/ https://matomo.test-asyl.net/; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com; connect-src 'self' data: https://*.openstreetmap.org https://matomo.test-asyl.net/; script-src-elem 'self' 'unsafe-inline' https://matomo.test-asyl.net/ 'report-sample'; worker-src 'self' 'nonce-E2h7oUAPZ4LXc9E3MvYDxBVCmYCDn62g2DsYazHnWTurd5xTvzgGKA' data: https://*.openstreetmap.org blob: 'report-sample'; style-src 'self' 'nonce-E2h7oUAPZ4LXc9E3MvYDxBVCmYCDn62g2DsYazHnWTurd5xTvzgGKA' 'report-sample'; style-src-elem 'self' 'unsafe-inline' 'report-sample'; font-src 'self' data: blob:; report-uri https://www.asyl.net/@http-reporting?csp=report&requestTime=1789267045841307&requestHash=a281fc2b63a56fa4188e1cf70dc136ac7afbeaaa 1
font-src *.googleapis.com *.gstatic.com *.fontawesome.com *.google.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.pagar.me *.netsgroup.com *.sibs.pt *.seglan.com *.secureacs.com *.rsa3dsauth.com *.apata.io *.cardinalcommerce.com *.santander.com.br *.bradesco.com.br *.bradesco *.stone.com.br *.nubank.com.br *.itau.com.br *.bb.com.br *.caixa.gov.br *.inter.co *.bancointer.com.br *.c6bank.com.br *.bancobmg.com.br *.safra.com.br *.sicoob.com.br *.banrisul.com.br *.banrisul.b.br *.banorte.com *.xpi.com.br *.btgpactual.com *.btgpactualdigital.com *.mercadopago.com.br *.mercadopago.com *.picpay.com *.amedigital.com *.neon.tech *.neon.com.br *.wise.com *.revolut.com *.sandbox.3dsecure.io *.google.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.pagar.me *.netsgroup.com *.sibs.pt *.seglan.com *.secureacs.com *.rsa3dsauth.com *.apata.io *.cardinalcommerce.com *.santander.com.br *.bradesco.com.br *.bradesco *.stone.com.br *.nubank.com.br *.itau.com.br *.bb.com.br *.caixa.gov.br *.inter.co *.bancointer.com.br *.c6bank.com.br *.bancobmg.com.br *.safra.com.br *.sicoob.com.br *.banrisul.com.br *.banrisul.b.br *.banorte.com *.xpi.com.br *.btgpactual.com *.btgpactualdigital.com *.mercadopago.com.br *.mercadopago.com *.picpay.com *.amedigital.com *.neon.tech *.neon.com.br *.wise.com *.revolut.com *.sandbox.3dsecure.io *.google.com *.google.com/ *.mercadolibre.com *.weltpixel.com *.egoi.page egoi.page *.pagaleve.io *.pagaleve.com.br 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.paypalobjects.com t.paypal.com www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io *.googleapis.com *.gstatic.com *.bis2bis.com.br https://www.magezon.com *.facebook.com cdn.mundipagg.com api.pagar.me *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar *.mercadolivre.com egoimmerce.e-goi.com *.egoimmerce.e-goi.com egoiapp2.com *.egoiapp2.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com *.pagaleve.com.br data: 'self' 'unsafe-inline'; script-src secure.authorize.net test.authorize.net www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com *.bis2bis.com.br cdn.jsdelivr.net *.googletagmanager.com *.facebook.net 3ds2.pagar.me 3ds2-sdx.pagar.me *.google.com *.google.com/ *.mlstatic.com *.mercadopago.com e-goi.com *.e-goi.com egoiapp2.com *.egoiapp2.com egoi.site *.egoi.site *.avada.io *.pagseguro.com.br *.pagseguro.com *.pagaleve.com.br https://www.googletagmanager.com tagmanager.google.com www.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.bis2bis.com.br *.fontawesome.com *.googleapis.com *.google.com *.egoiapp2.com egoiapp2.com https://fonts.bunny.net maxcdn.bootstrapcdn.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com *.bis2bis.com.br *.google-analytics.com api.mundipagg.com api.pagar.me brasilapi.com.br viacep.com.br servicodados.ibge.gov.br *.google.com google.com pay.sandbox.google.com *.mercadopago.com *.mercadolibre.com egoiapp2.com egoi.page https://get.geojs.io *.avada.io *.pagseguro.com.br *.pagseguro.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.googleapis.com 'unsafe-inline' data: data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.libreka.de *.fontawesome.com https://fonts.bunny.net *.bootstrapcdn.com *.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * www.google.com secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.libreka.de www.sovendus-connect.com www.sovendus-benefits.com *.googletagmanager.com *.cookiebot.com *.pinterest.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * *.googleapis.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com cdn.cookielaw.org qm.magazinabo.com qm.bergweltenabo.ch qm.getredbulletin.ch *.libreka.de *.googletagmanager.com ssl.gstatic.com www.gstatic.com https://firebasestorage.googleapis.com *.cookiefirst.com *.cookiebot.com *.elfsight.com *.facebook.com *.google.de *.linkedin.com *.pinterest.com *.redbull.com *.usd.de *.usercentrics.eu *.scnem2.com cdn.consentmanager.net cloud.ccm19.de *.matomo.cloud *.ppzv.de *.hsforms.net *.hsforms.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com cdn.cookielaw.org qm.magazinabo.com qm.bergweltenabo.ch qm.getredbulletin.ch *.libreka.de api.sovendus.com *.googletagmanager.com tagmanager.google.com *.avada.io *.shopify.com *.cloudfront.net *.cookiefirst.com *.cookiebot.com *.elfsight.com *.facebook.net *.google-analytics.com *.haymarketstat.de *.licdn.com *.linkedin.com *.logopaletti.de *.redbull.com *.trustedshops.com *.pinimg.com *.usercentrics.eu *.scnem2.com *.s7.addthis.com cdn.consentmanager.net d.delivery.consentmanager.net cloud.ccm19.de *.matomo.cloud *.ppzv.de *.hsforms.net *.hsforms.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app d.ratepay.com d.payla.io dr.payla.io src.mastercard.com *.stripe.network *.stripecdn.com *.amazon.com *.libreka.de *.fontawesome.com tagmanager.google.com fonts.google.com https://fonts.bunny.net *.cloudfront.net *.cookiefirst.com *.google.com *.trustedshops.com cdn.consentmanager.net cloud.ccm19.de 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.libreka.de *.cloudfront.net *.amazonaws.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.googleapis.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com privacyportal-de.onetrust.com pagead2.googlesyndication.com qm.magazinabo.com qm.getredbulletin.ch *.libreka.de identification-api.sovendus.com press-tracking-api.sovendus.com *.googletagmanager.com https://get.geojs.io *.avada.io *.cookiefirst.com *.cookiebot.com *.cookielaw.org *.doubleclick.net *.elfsight.com *.google.de *.haymarketstat.de *.logopaletti.de *.usercentrics.eu *.pinterest.com cloud.ccm19.de *.matomo.cloud *.ppzv.de t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://platform.twitter.com https://www.instagram.com https://www.tiktok.com https://connect.facebook.net https://pagead2.googlesyndication.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://news.google.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://platform.twitter.com https://www.instagram.com https://www.tiktok.com https://www.facebook.com https://googleads.g.doubleclick.net https://www.googletagmanager.com https://news.google.com; media-src 'self' blob: https://cdn1.tvlin.net https://telesoldiario-videosmultimedia-fwfwcj-0d87d4-158-69-223-228.sslip.io; connect-src 'self' https: https://telesolweb-proxy.sapiamedios.com wss://telesolweb-proxy.sapiamedios.com https://cdn1.tvlin.net https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests 1
default-src 'none';script-src 'nonce-b1252f47b788ed49263e818ffc261466' 'self' 'unsafe-eval' https://chatwidget-prod.web.app;script-src-elem 'nonce-b1252f47b788ed49263e818ffc261466' 'self' https://chatwidget-prod.web.app https://www.google.com;style-src 'nonce-b1252f47b788ed49263e818ffc261466' 'self' https://chatwidget-prod.web.app;style-src-attr 'self' 'unsafe-inline';font-src 'self' data:;img-src 'self' data:;connect-src 'self' https://chatwidget-prod.web.app;frame-src 'self' https://www.youtube.com/ https://chatwidget-prod.web.app;media-src 'self';frame-ancestors 'none'; 1
font-src *.jsdelivr.net https://cdnjs.cloudflare.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.monetico-services.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.monetico-services.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.google.com *.mageside.com mageside.com jeulin.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page *.google.com *.gstatic.com sdk.privacy-center.org https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ https://cdnjs.cloudflare.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.mediascience.fr *.jsdelivr.net https://fonts.googleapis.com https://cdnjs.cloudflare.com unsafe-inline assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.monetico-services.com api.privacy-center.org https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn0.entryboss.cc https://cdn.pinpayments.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://cdn0.entryboss.cc https://fonts.googleapis.com https://rsms.me; font-src 'self' data: https://cdn0.entryboss.cc https://fonts.gstatic.com https://rsms.me; img-src 'self' data: https:; connect-src 'self' https://app.getsentry.com https://fastly.jsdelivr.net https://api.pinpayments.com https://test-api.pinpayments.com https://maps.googleapis.com wss://entryboss.cc wss://demo.entryboss.cc; worker-src 'self' blob:; frame-src https://entryboss.groovehq.com https://www.google.com; form-action 'self'; report-uri /csp-violations 1
object-src  'none'; connect-src 'self' *.gangbangcreampie.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.gangbangcreampie.com join.gammasecure.com; script-src 'self' *.gangbangcreampie.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.gangbangcreampie.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
object-src 'none';base-uri 'self';script-src 'nonce-hxSYUWcWkGE5qzMQsuv93g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; script-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
report-uri /api/report-csp;base-uri 'self';connect-src 'self' dl2dg4vx8rw69.cloudfront.net *.googletagmanager.com www.google-analytics.com *.analytics.google.com adservice.google.com analytics.google.com google.com stats.g.doubleclick.net translate.googleapis.com www.google.ca www.google.com www.googleadservices.com *.braintree-api.com *.paypal.com analytics.braintreegateway.com analytics.sandbox.braintreegateway.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com www.facebook.com bat.bing.com;default-src 'self';font-src dl2dg4vx8rw69.cloudfront.net 'self' data: fonts.gstatic.com;form-action 'self' www.facebook.com;img-src dl2dg4vx8rw69.cloudfront.net d1oy5biuu9v5f4.cloudfront.net s3.ca-central-1.amazonaws.com data: 'self' ssl.gstatic.com www.gstatic.com *.analytics.google.com *.g.doubleclick.net *.google-analytics.com *.google.ad *.google.ae *.google.al *.google.am *.google.as *.google.at *.google.az *.google.ba *.google.be *.google.bf *.google.bg *.google.bi *.google.bj *.google.bs *.google.bt *.google.by *.google.ca *.google.cat *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.cl *.google.cm *.google.cn *.google.co.ao *.google.co.bw *.google.co.ck *.google.co.cr *.google.co.id *.google.co.il *.google.co.in *.google.co.jp *.google.co.ke *.google.co.kr *.google.co.ls *.google.co.ma *.google.co.mz *.google.co.nz *.google.co.th *.google.co.tz *.google.co.ug *.google.co.uk *.google.co.uz *.google.co.ve *.google.co.vi *.google.co.za *.google.co.zm *.google.co.zw *.google.com *.google.com.af *.google.com.ag *.google.com.ai *.google.com.ar *.google.com.au *.google.com.bd *.google.com.bh *.google.com.bn *.google.com.bo *.google.com.br *.google.com.bz *.google.com.co *.google.com.cu *.google.com.cy *.google.com.do *.google.com.ec *.google.com.eg *.google.com.et *.google.com.fj *.google.com.gh *.google.com.gi *.google.com.gt *.google.com.hk *.google.com.jm *.google.com.kh *.google.com.kw *.google.com.lb *.google.com.ly *.google.com.mm *.google.com.mt *.google.com.mx *.google.com.my *.google.com.na *.google.com.ng *.google.com.ni *.google.com.np *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.com.pr *.google.com.py *.google.com.qa *.google.com.sa *.google.com.sb *.google.com.sg *.google.com.sl *.google.com.sv *.google.com.tj *.google.com.tr *.google.com.tw *.google.com.ua *.google.com.uy *.google.com.vc *.google.com.vn *.google.cv *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.dz *.google.ee *.google.es *.google.fi *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.gl *.google.gm *.google.gr *.google.gy *.google.hn *.google.hr *.google.ht *.google.hu *.google.ie *.google.im *.google.iq *.google.is *.google.it *.google.je *.google.jo *.google.kg *.google.ki *.google.kz *.google.la *.google.li *.google.lk *.google.lt *.google.lu *.google.lv *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.mn *.google.ms *.google.mu *.google.mv *.google.mw *.google.ne *.google.nl *.google.no *.google.nr *.google.nu *.google.pl *.google.pn *.google.ps *.google.pt *.google.ro *.google.rs *.google.ru *.google.rw *.google.sc *.google.se *.google.sh *.google.si *.google.sk *.google.sm *.google.sn *.google.so *.google.sr *.google.st *.google.td *.google.tg *.google.tl *.google.tm *.google.tn *.google.to *.google.tt *.google.vg *.google.vu *.google.ws *.googletagmanager.com www.google-analytics.com googleads.g.doubleclick.net www.google.com google.com www.googleadservices.com i.ytimg.com assets.braintreegateway.com *.paypal.com www.paypalobjects.com www.facebook.com bat.bing.com;media-src 'self';object-src 'none';script-src dl2dg4vx8rw69.cloudfront.net 'self' 'unsafe-eval' 'nonce-RTAtkmXK9tJxNzUqUeeZN849UEOIBQjM' tagmanager.google.com *.googletagmanager.com ssl.google-analytics.com www.google-analytics.com www.google.com www.googleadservices.com googleads.g.doubleclick.net www.youtube.com api.braintreegateway.com api.sandbox.braintreegateway.com assets.braintreegateway.com *.paypal.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com js.braintreegateway.com www.paypalobjects.com connect.facebook.net bat.bing.com;style-src dl2dg4vx8rw69.cloudfront.net 'self' 'unsafe-inline' fonts.googleapis.com tagmanager.google.com www.gstatic.com;frame-src *.googletagmanager.com bid.g.doubleclick.net www.google.com td.doubleclick.net tpc.googlesyndication.com www.youtube.com *.cardinalcommerce.com assets.braintreegateway.com *.paypal.com www.paypalobjects.com m.facebook.com www.facebook.com bat.bing.com;child-src assets.braintreegateway.com c.paypal.com 1
default-src 'self' 'nonce-8eP6G+wPRfP+D2vRbwCTvA==' blob: data: ws: wss: finsight.com *.finsight.com *.finsight.com www.google.com *.g.doubleclick.net *.googletagmanager.com *.google-analytics.com analytics.google.com *.analytics.google.com *.gstatic.com *.googleapis.com unpkg.com *.amazonaws.com *.twilio.com zoom.us *.zoom.us turn.cloudflare.com stun.cloudflare.com ws.zoominfo.com snap.licdn.com px.ads.linkedin.com cdn.linkedin.oribi.io *.frontapp.com sessions.bugsnag.com *.turbobridge.com *.sentry.io login.microsoftonline.com *.login.microsoftonline.com *.sharepoint.com onedrive.live.com *.onedrive.com *.1drv.com *.microsoftpersonalcontent.com graph.microsoft.com https://otel.use1.workload.production.finsight-operations-live.com; script-src 'self' 'report-sample' 'nonce-8eP6G+wPRfP+D2vRbwCTvA==' 'strict-dynamic' ; style-src 'self' 'report-sample' 'unsafe-inline' blob: finsight.com *.finsight.com *.finsight.com www.google.com *.g.doubleclick.net *.googletagmanager.com *.google-analytics.com analytics.google.com *.analytics.google.com *.gstatic.com *.googleapis.com unpkg.com *.amazonaws.com *.twilio.com zoom.us *.zoom.us turn.cloudflare.com stun.cloudflare.com ws.zoominfo.com snap.licdn.com px.ads.linkedin.com cdn.linkedin.oribi.io *.frontapp.com sessions.bugsnag.com *.turbobridge.com *.sentry.io login.microsoftonline.com *.login.microsoftonline.com *.sharepoint.com onedrive.live.com *.onedrive.com *.1drv.com *.microsoftpersonalcontent.com graph.microsoft.com https://otel.use1.workload.production.finsight-operations-live.com; base-uri 'self'; script-src-elem 'self' 'report-sample' 'nonce-8eP6G+wPRfP+D2vRbwCTvA==' www.google.com *.g.doubleclick.net *.googletagmanager.com *.google-analytics.com analytics.google.com *.analytics.google.com *.gstatic.com *.googleapis.com unpkg.com *.amazonaws.com *.twilio.com zoom.us *.zoom.us turn.cloudflare.com stun.cloudflare.com ws.zoominfo.com snap.licdn.com px.ads.linkedin.com cdn.linkedin.oribi.io *.frontapp.com sessions.bugsnag.com *.turbobridge.com *.sentry.io login.microsoftonline.com *.login.microsoftonline.com *.sharepoint.com onedrive.live.com *.onedrive.com *.1drv.com *.microsoftpersonalcontent.com graph.microsoft.com https://otel.use1.workload.production.finsight-operations-live.com; frame-ancestors 'self' https://finsight.com https://users.finsight.com https://dealroadshow.finsight.com https://condor.finsight.com https://manager.finsight.com https://dealvdr.com https://loansend.com https://17g5.com https://investorset.com https://verisend.com https://researchroom.com https://evercall.co https://api.finsight.com https://assets.finsight.com https://openmarket.finsight.com https://allocate.finsight.com https://creditflowresearch.com https://stage20.quantumcf.com https://www.quantumcf.com https://bi-staging.quantumcf.com; report-uri /browser/csph-report; report-to csp-endpoint; 1
font-src *.fontawesome.com *.googleapis.com *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.facebook.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ landofcoder.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.twitter.com *.g.doubleclick.net *.googlesyndication.com *.facebook.com www.google.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.facebook.com *.googlesyndication.com *.google.com.bd *.clarity.ms *.bing.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ landofcoder.com s7.addthis.com *.addtoany.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cloudflare.com *.twitter.com *.google-analytics.com *.google.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.facebook.net *.facebook.com *.googlesyndication.com *.googleadservices.com *.google.com.bd *.localhost *.clarity.ms *.hotjar.com www.google.com www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com *.googleapis.com *.addtoany.com unsafe-inline assets.braintreegateway.com *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.facebook.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com landofcoder.com ekr.zdassets.com/ http://dpm.demdex.net *.facebook.net connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.cloudflare.com *.twitter.com *.twimg.com *.facebook.com *.googlesyndication.com ap.stape.info *.clarity.ms 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.example.com/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data:; connect-src 'self' https://cloudflareinsights.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; report-uri /csp-report 1
report-uri /-/csp_report?report_only=true&source=webapp-no-object-src; script-src 'nonce-nxflp05zgh165jcx0rnsv2c80' 'nonce-rvhhfk2oq2dv1prnse45ygy2g' 'self' https: 'strict-dynamic' 'report-sample' 'wasm-unsafe-eval' 'unsafe-inline' https://ssl.gstatic.com https://apis.google.com https://accounts.google.com/gsi/client https://d3ki9tyy5l5ruj.cloudfront.net https://d1gwm4cf8hecp4.cloudfront.net https://d1a3usp4brejtz.cloudfront.net https://d3u0af8znnrzzj.cloudfront.net https://d1dg3ns82tdjz3.cloudfront.net https://d2y3xhxlqzgfzh.cloudfront.net https://oauth.googleusercontent.com https://app.box.com https://platform.twitter.com https://connect.facebook.net https://platform.harvestapp.com https://www.google.com https://docs.google.com https://www.gstatic.com https://www.dropbox.com https://www.paypal.com/sdk/js https://recordwidget.vimeocdn.com https://api.stripe.com https://hooks.stripe.com https://js.stripe.com https://m.stripe.com https://m.stripe.network https://q.stripe.com https://prod-eu1.app.asana.com https://prod-au1.app.asana.com https://prod-jp1.app.asana.com https://prod-me1.app.asana.com https://cdn.cookielaw.org https://861-iiv-735.mktoweb.com https://resources.asana.com https://ccwizard.vertexsmb.com; frame-ancestors 'self' https://teams.integrations.asana.plus https://teams-beta.integrations.asana.plus https://teams-uat.integrations.asana.plus https://teams.microsoft.com https://teams.cloud.microsoft; frame-src 'self' blob: https://www.figma.com https://*.invisionapp.com https://invis.io https://miro.com https://whimsical.com https://www.loom.com https://www.youtube.com https://player.vimeo.com https://fast.wistia.com https://www.canva.com https://xd.adobe.com https://*.looker.com https://lucid.app https://*.okta.com https://*.sharepoint.com https://*.dovetail.com https://*.tableau.com https://airtable.com https://*.mural.co https://help.asana.com https://accounts.google.com https://accounts.google.com/gsi/ https://content.googleapis.com https://www.google.com https://docs.google.com https://fast.wistia.net https://www.dropbox.com https://platform.harvestapp.com https://forms.asana.plus https://forms-server.asana.plus https://local.asana.com https://asana.com https://apisandbox.zuora.com https://test.zuora.com https://www.zuora.com https://www.sandbox.paypal.com https://www.paypal.com https://recordwidget.vimeocdn.com https://api.stripe.com https://hooks.stripe.com https://js.stripe.com https://m.stripe.com https://m.stripe.network https://q.stripe.com https://pixel.asana.com https://d3ki9tyy5l5ruj.cloudfront.net https://prod-eu1.app.asana.com https://prod-au1.app.asana.com https://prod-jp1.app.asana.com https://prod-me1.app.asana.com https://cdn.cookielaw.org https://form.asana.com https://form.asana-gov.com https://form-beta.asana.com https://form-stag.luna-s.org https://localhost.asana.com:3000 https://861-iiv-735.mktoweb.com https://resources.asana.com https://ccwizard.vertexsmb.com https://*.qualtrics.com; worker-src 'self' blob: https://d3ki9tyy5l5ruj.cloudfront.net; child-src 'self' blob: https://d3ki9tyy5l5ruj.cloudfront.net; object-src 'none'; base-uri 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://*.hotjar.com https://cdn-cookieyes.com https://log.cookieyes.com https://s3.amazonaws.com https://*.chimpstatic.com https://*.list-manage.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; frame-src https:; object-src 'none'; base-uri 'self' 1
default-src 'self' https://cdn.bsky.app https://video.bsky.app; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://cdn.jsdelivr.net https://www.highperformanceformat.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://cdn.bsky.app https://video.bsky.app https://*.googleusercontent.com; media-src 'self' https://video.bsky.app; connect-src 'self' https://www.google-analytics.com; font-src 'self' data:; frame-src 'self' https://www.highperformanceformat.com; base-uri 'self'; form-action 'self' 1
font-src https://www.googletagmanager.com *.googleapis.com *.gstatic.com *.klarnacdn.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.google.com *.klarna.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com *.googleapis.com www.apptrian.com *.klarna.com *.klarnaevt.com *.klarnacdn.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com tagmanager.google.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com cdn.mouseflow.com o2.mouseflow.com www.youtube.com youtube.com https://cdnjs.cloudflare.com cdnjs.cloudflare.com *.klarna.com *.klarnacdn.net *.klarnaservices.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com fonts.googleapis.com https://cdnjs.cloudflare.com cdnjs.cloudflare.com *.klarnacdn.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://www.google-analytics.com *.googleapis.com www.apptrian.com cdn.mouseflow.com o2.mouseflow.com www.youtube.com youtube.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.gstatic.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.cloudflare.com *.typekit.net *.trustedshops.com *.usercentrics.eu data: 'self' 'unsafe-inline'; form-action www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://3dsgate-dev.borica.bg https://3dsgate.borica.bg 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.paypal.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com magefan.com cm.magefan.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.hsforms.net *.hsforms.com 'self' data: blob: *.cloudfront.net https://cdn.klarna.com *.paypal.com https://s.ytimg.com *.usercentrics.eu data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.hsforms.net *.hsforms.com www.google.com *.gstatic.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com maps.googleapis.com *.cloudflare.com *.typekit.net *.trustedshops.com *.usercentrics.eu www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com *.googleapis.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com *.cloudflare.com getfirebug.com *.yotpo.com *.typekit.net *.trustedshops.com *.usercentrics.eu data: 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ t.elasticsuite.io *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com places.googleapis.com *.cloudflare.com *.paypal.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.youtube-nocookie.com *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.doubleclick.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com 'self' data: *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com connect.facebook.net graph.facebook.com business.facebook.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com *.google.bg *.googletagmanager.com www.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com connect.facebook.net graph.facebook.com business.facebook.com *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com assets.braintreegateway.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.google-analytics.com www.facebook.com *.facebook.net connect.facebook.net graph.facebook.com business.facebook.com https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://js.stripe.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://api.stripe.com https://www.google-analytics.com; frame-ancestors 'self' https://*.givecentral.org; base-uri 'self'; form-action 'self'; upgrade-insecure-requests; 1
object-src 'none';  script-src  'nonce-b5fa0b96-2488-41d3-a885-c0c09dedccfa' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https:;  script-src-elem 'unsafe-inline' https:;  script-src-attr 'unsafe-inline';  base-uri 'none';  report-uri https://csp-reporting.onlinesupport-3aa.workers.dev/csp-report/8f43c2a1-76de-4b90-a124-5e7d93c840bf; report-to csp-endpoint; 1
default-src 'self'; font-src 'self' https://fonts.gstatic.com; img-src 'self' https://*.googleapis.com https://*.gstatic.com *.google.com  *.googleusercontent.com data: https://www.gravatar.com/avatar/ https://*.google-analytics.com https://*.googletagmanager.com blob:; script-src 'self' https://*.googletagmanager.com 'nonce-a70dba248ef20dd1a45ac66c61e309dd' https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com blob:; style-src 'self' 'nonce-a70dba248ef20dd1a45ac66c61e309dd' https://fonts.googleapis.com; worker-src 'self' blob:; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googleapis.com *.google.com https://*.gstatic.com  data: blob:; frame-ancestors 'self'; 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https:; frame-src https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; 1
object-src 'none';base-uri 'self';script-src 'nonce-UbsJuIR8JuRcN3VArXvE6g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'self'  https://cdn.suitableshop.net/ https://bat.bing.com https://d5yoctgpv4cpx.cloudfront.net https://tggng.suitable.de/ 'unsafe-inline' ; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: https: blob:; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://challenges.cloudflare.com; frame-src https://www.google.com https://www.youtube-nocookie.com https://player.vimeo.com https://challenges.cloudflare.com; media-src 'self' https: blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none' 1
default-src 'self' https: data: blob:;         script-src 'self' https: 'unsafe-inline' 'unsafe-eval' yandex.net *.yandex.net yandex.ru *.yandex.ru yadro.ru *.yadro.ru clarity.ms *.clarity.ms youtube.com *.youtube.com googleusercontent.com *.googleusercontent.com yastatic.net *.yastatic.net google-analytics.com *.google-analytics.com googletagmanager.com *.googletagmanager.com *.codepen.io;         img-src 'self' data: https: yandex.net *.yandex.net yandex.ru *.yandex.ru youtube.com *.youtube.com googleusercontent.com *.googleusercontent.com yastatic.net *.yastatic.net;         style-src 'self' https: 'unsafe-inline';         font-src 'self' https: data:;         connect-src 'self' https: yandex.net *.yandex.net yandex.ru *.yandex.ru clarity.ms *.clarity.ms google-analytics.com *.google-analytics.com googletagmanager.com *.googletagmanager.com yastatic.net *.yastatic.net;         frame-src 'self' https: youtube.com *.youtube.com;         frame-ancestors 'self';         report-uri https://www.internet-technologies.ru/csp-report/; 1
object-src 'none';base-uri 'self';script-src 'nonce-2a1O-Jll9hXK2HvyVNm9pg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' ccbuchner.de www.ccbuchner.de https://secure.ogone.com https://ogone.test.v-psp.com *.wirth-horn.de https://www.click-and-teach.de https://www.click-and-study.de https://www.google-analytics.com https://tagmanager.google.com https://www.googletagmanager.com https://www.googleadservices.com https://adservice.google.com *.g.doubleclick.net https://*.googleapis.com https://connect.facebook.net https://www.facebook.com https://www.youtube.com https://www.youtube-nocookie.com https://*.googleusercontent.com https://www.instagram.com 'unsafe-eval' 'unsafe-inline'; img-src data: *; media-src *; font-src data: 'self' https://fonts.gstatic.com https://fonts.googleapis.com https://services.ccbuchner.de; report-uri /csp-report.cfm 1
font-src fonts.gstatic.com https://embed.tawk.to *.fontawesome.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com *.merchantwarrior.com https://base.merchantwarrior.com *.mycardsecure.com 'self' 'unsafe-inline'; frame-ancestors fast.amc.demdex.net https://secure-au.sandbox.ewaypayments.com https://ewaypayments.com *.merchantwarrior.com https://base.merchantwarrior.com *.mycardsecure.com *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com https://secure-au.sandbox.ewaypayments.com https://ewaypayments.com *.merchantwarrior.com https://base.merchantwarrior.com *.mycardsecure.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://embed.tawk.to ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.merchantwarrior.com https://base.merchantwarrior.com *.mycardsecure.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com maps.googleapis.com fonts.googleapis.com https://embed.tawk.to https://secure.ewaypayments.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.avada.io *.merchantwarrior.com https://base.merchantwarrior.com *.mycardsecure.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline fonts.googleapis.com https://embed.tawk.to downloads.mailchimp.com *.fontawesome.com 'self' 'unsafe-inline'; object-src *.merchantwarrior.com https://base.merchantwarrior.com *.mycardsecure.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com https://va.tawk.to https://embed.tawk.to *.tawk.to http://www.google-analytics.com http://www.googleadservices.com http://www.googletagmanager.com http://www.sandbox.paypal.com http://www.paypalobjects.com http://www.paypal.com https://get.geojs.io *.avada.io *.merchantwarrior.com https://base.merchantwarrior.com *.mycardsecure.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com *.merchantwarrior.com https://base.merchantwarrior.com *.mycardsecure.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https://cdnapisec.kaltura.com/ https://sppincoa2.spint.dk;script-src 'nonce-753a582a49494b87a8f271db7acee225' https://minsundhedsplatform.dk 'self';img-src https://* 'self' blob: data:;connect-src 'self' epichttp:;style-src https://minsundhedsplatform.dk 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action 'self';media-src https://* 'self' blob:; 1
default-src 'self' https://*.s3.fr-par.scw.cloud https://*.axept.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://choosemycompany.com https://*.choosemycompany.com https://*.s3.fr-par.scw.cloud https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://cdnjs.cloudflare.com https://ajax.googleapis.com https://unpkg.com https://cdn.matomo.cloud https://*.matomo.cloud https://*.axept.io https://*.hubspot.com https://*.hs-scripts.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hsadspixel.net https://*.usemessages.com https://*.hsforms.net https://*.hsappstatic.net https://*.doubleclick.net https://*.googlesyndication.com https://*.googleadservices.com https://snap.licdn.com https://platform.twitter.com; style-src 'self' 'unsafe-inline' https://*.s3.fr-par.scw.cloud https://*.axept.io https://www.gstatic.com https://fonts.googleapis.com https://*.fontawesome.com https://unpkg.com; img-src 'self' data: blob: https:; font-src 'self' data: https:; media-src 'self' data: https://*.s3.fr-par.scw.cloud https://*.axept.io; connect-src 'self' https://choosemycompany.com https://*.choosemycompany.com https://*.s3.fr-par.scw.cloud https://*.ingest.us.sentry.io https://*.ingest.sentry.io https://*.matomo.cloud https://www.google-analytics.com https://www.google.com https://*.google.com https://google.com https://www.googletagmanager.com https://*.hubspot.com https://*.hubapi.com https://*.hs-banner.com https://*.hsappstatic.net https://*.axept.io https://api-eu.mixpanel.com https://api.iconify.design https://api.unisvg.com https://api.simplesvg.com https://*.doubleclick.net https://*.googlesyndication.com https://*.googleadservices.com https://px.ads.linkedin.com; frame-src 'self' https://*.s3.fr-par.scw.cloud https://*.axept.io https://*.hubspot.com https://www.googletagmanager.com https://www.google.com https://*.hsforms.com https://www.youtube.com https://www.linkedin.com; worker-src 'self' blob: https://*.s3.fr-par.scw.cloud https://*.axept.io; object-src 'self' https://choosemycompany.com https://*.s3.fr-par.scw.cloud https://*.axept.io; base-uri 'self'; report-uri https://o286126.ingest.us.sentry.io/api/4511785408462848/security/?sentry_key=b601999ea1295a5a7238b52555e64c31&sentry_environment=prod 1
default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; media-src 'self' blob: https:; connect-src 'self'; font-src 'self' data:; frame-src https://www.youtube.com 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: https://maxcdn.bootstrapcdn.com *.livehelpnow.net *.hotjar.com *.fontawesome.com fonts.googleapis.com cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.canadapost.ca https://sso.epost.ca *.authorize.net 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com https://www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.gstatic.com roundme.com *.facebook.com *.affirm.com *.affirm.ca www.xtento.com *.authorize.net *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net *.googleapis.com *.livehelpnow.net https://www.facebook.com *.fbcdn.net *.google.com *.google.ca *.authorize.net *.bing.com *.beachcomberhottubs.com *.affirm.com *.affirm.ca *.cdninstagram.com www.xtento.com cdn.xtento.com mageside.com *.canadapost.ca *.canadapost-postescanada.ca https://maps.googleapis.com https://maps.gstatic.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com *.gstatic.com https://connect.facebook.net *.hotjar.com *.bing.com *.polyfill.io *.affirm.com *.affirm.ca *.jquery.com *.jsdelivr.net *.cloudflare.com *.livehelpnow.net *.clickdimensions.com www.xtento.com cdn.xtento.com https://maps.googleapis.com *.authorize.net maps.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.instagram.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.livehelpnow.net *.fontawesome.com *.jsdelivr.net cdnjs.cloudflare.com *.googleapis.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com data: www.google-analytics.com *.livehelpnow.net *.doubleclick.net wss://app.livehelpnow.net/ *.hotjar.com wss://wsp25.hotjar.com/ *.google.ca *.authorize.net *.bing.com *.polyfill.io *.beachcomberhottubs.com *.hotjar.io wss://wsp37.hotjar.com/ *.affirm.com *.affirm.ca *.clickdimensions.com *.instagram.com wss://ws.hotjar.com https://maps.googleapis.com maps.googleapis.com https://www.google-analytics.com *.googleusercontent.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-src standard.paystack.co checkout.paystack.com; connect-src api.paystack.co js.paystack.co plugin-tracker.paystackintegrations.com; script-src js.paystack.co api.paystack.co; 1
object-src 'none';base-uri 'self';script-src 'nonce-IyeItkWIggIpFNQ5wTNehg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com cash-f.squarecdn.com https://cdn.riverty.design/ *.klarnacdn.net *.fontawesome.com maxcdn.bootstrapcdn.com *.cloudflare.com *.hotjar.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * uc8.tv *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors https://api.clerk.io https://cdn.clerk.io *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * uc8.tv https://documents.riverty.com/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.klarna.com *.addthis.com js.mollie.com *.multisafepay.com https://pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.klarnaservices.com *.hotjar.com *.googlesyndication.com *.doubleclick.net *.cookiebot.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https://cdn.myafterpay.com/ uc8.tv https://cdn.riverty.design/ https://images.unsplash.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https://cdn.clerk.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.taggrs.io *.klarna.com *.klarnaevt.com *.klarnacdn.net *.disqus.com https://www.mollie.com *.multisafepay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com *.cloudflare.com *.clerk.io *.slimminglabs.com *.klarnaservices.com *.bralex.nl *.doubleclick.net *.bing.com *.hotjar.com *.google.com *.google.ch *.google.de *.google.dk *.google.es *.google.fi *.google.fr *.google.co.uk *.google.ie *.google.it *.google.nl *.google.no *.google.pl *.google.pt *.google.se *.google.ad *.google.cz *.google.gr *.google.hr *.google.sk *.google.com.tr *.google.be *.google.com.co *.google.hu *.google.lu *.google.at *.google.si *.google.ro *.cookiebot.com *.billink.nl *.gyazo.com whm.asip.cloud paywithmybank.com blob: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com uc8.tv https://cdn.myafterpay.com/ https://cdn.bnpl.riverty.io/ https://maps.googleapis.com https://player.vimeo.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://api.clerk.io https://cdn.clerk.io https://custom.clerk.io chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.taggrs.io *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net js.mollie.com *.multisafepay.com https://pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com maps.googleapis.com *.cloudflare.com *.clerk.io *.bralex.nl *.doubleclick.net *.bing.com *.googleoptimize.com *.hotjar.com *.fontawesome.com *.cookiebot.com whm.asip.cloud *.profitmetrics.io *.googlesyndication.com https://sst.slimminglabs.com https://app.varify.io https://cdn.zigpoll.com *.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app https://api.clerk.io https://cdn.clerk.io downloads.mailchimp.com https://static.klaviyo.com *.klarnacdn.net https://cdn.jsdelivr.net *.fontawesome.com maxcdn.bootstrapcdn.com *.multisafepay.com assets.braintreegateway.com *.cloudflare.com *.hotjar.com *.typekit.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * uc8.tv https://cdn.myafterpay.com/ https://documents.myafterpay.com/ https://documents.riverty.com/ https://www.afterpay.nl/ https://cdn.bnpl.riverty.io/ https://trace-api.newrelic.com/ https://distributions.crowdin.net/ https://api.crowdin.com/ https://maps.googleapis.com https://player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.multisafepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cloudflare.com *.klarnauserservices.com *.doubleclick.net *.hotjar.io *.hotjar.com wss://*.hotjar.com *.bing.com *.bing.net *.google.ch *.google.de *.google.dk *.google.es *.google.fi *.google.fr *.google.co.uk *.google.ie *.google.it *.google.nl *.google.no *.google.pl *.google.pt *.google.se *.google.ad *.google.cz *.google.gr *.google.hr *.google.sk *.google.com.tr *.google.be *.google.com.co *.google.hu *.google.lu *.google.at *.google.si *.google.ro *.googlesyndication.com *.cookiebot.com whm.asip.cloud 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.slimminglabs.com/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'nonce-/KglIYkWaglLpGs8darVsQ==' 'strict-dynamic' https://*.google.com https://*.google https://*.googleapis.com https://*.gstatic.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.doubleclick.net https://code.jquery.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.gstatic.com; img-src 'self' data: https: http:; frame-src https://*.google.com https://*.google https://*.googlesyndication.com https://*.doubleclick.net https://www.facebook.com https://widget.squarecompare.com; connect-src 'self' https://*.google.com https://*.google https://*.googleapis.com https://*.googlesyndication.com https://*.googletagmanager.com https://*.google-analytics.com https://*.doubleclick.net; font-src 'self' https://*.gstatic.com https://*.googleapis.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://sentry10.cfdata.org https://www.googletagmanager.com https://js-eu1.hs-scripts.com https://www.clarity.ms https://scripts.clarity.ms https://bat.bing.com https://script.infinity-tracking.com https://t.contentsquare.net https://static.hj.contentsquare.net https://js-eu1.hscollectedforms.net https://js-eu1.usemessages.com https://js-eu1.hs-analytics.net https://js-eu1.hsadspixel.net https://js-eu1.hs-banner.com https://js-eu1.hubspot.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://connect.facebook.net https://capi-automation.s3.us-east-2.amazonaws.com https://www.youtube.com https://cdn-cookieyes.com https://tags.srv.stackadapt.com; style-src 'self' 'unsafe-inline' https://tags.srv.stackadapt.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://cdn1.hubspotusercontent-eu1.net; connect-src 'self' https: https://sentry10.cfdata.org; frame-src 'self' https://www.facebook.com https://www.youtube.com https://widget.trustpilot.com https://customer-ubnstkcbbem7e6fl.cloudflarestream.com blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; 1
object-src 'none';base-uri 'self';script-src 'nonce-qgi4ot2fqDjZQZMHCrB-9Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src https://embed.tawk.to www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src *.googletagmanager.com fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com 'self' 'unsafe-inline'; img-src https://verify.etrustmark.rs/cert/image.php https://www.facebook.com https://www.google.de *.googleapis.com *.gstatic.com stats.g.doubleclick.net www.google.com www.google.rs www.facebook.com www.googletagmanager.com googleads.g.doubleclick.net *.youtube.com data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com bid.g.doubleclick.net *.analytics.google.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com p.typekit.net *.paypal.com *.typekit.net https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src https://connect.facebook.net *.googleapis.com www.google-analytics.com connect.facebook.net googleads.g.doubleclick.net stats.g.doubleclick.net *.yandex.ru *.yandex.com mc.yango.com assets.adobedtm.com *.adobe.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com *.gstatic.com *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://embed.tawk.to *.gstatic.com *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src https://va.tawk.to wss://*.tawk.to dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.googleapis.com https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https:; script-src 'self' 'unsafe-inline' https://ajax.googleapis.com https://cdn.jsdelivr.com https://code.jquery.com https://maps.googleapis.com https://maps.gstatic.com https://www.gstatic.com https://www.google.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://code.jquery.com https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google.com https://maps.googleapis.com https://www.googletagmanager.com https://analytics.google.com https://*.analytics.google.com https://*.google-analytics.com; frame-src http://www.secretcv.com https://www.google.com https://maps.google.com https://www.googletagmanager.com https://www.youtube.com; object-src 'none'; base-uri 'self'; form-action 'self' 1
connect-src 'self' noembed.com cdn.plyr.io cdn.linkedin.oribi.io www.facebook.com ad.doubleclick.net stats.g.doubleclick.net region1.analytics.google.com region1.google-analytics.com www.google-analytics.com maps.googleapis.com translate.googleapis.com; default-src 'self' 'unsafe-eval' 'unsafe-inline' www.google.ch tpc.googlesyndication.com www.google-analytics.com www.google.com data: *.adform.net www.youtube-nocookie.com cdn.plyr.io embed.eventfrog.ch *.ffhs.ch *.3vrooms.app i.ytimg.com www.youtube.com 12720745.fls.doubleclick.net adservice.google.com analytics.google.com maps.googleapis.com www.gstatic.com connect.facebook.net googleads.g.doubleclick.net region1.analytics.google.com snap.licdn.com stats.g.doubleclick.net www.facebook.com www.googleadservices.com www.googletagmanager.com www.linkedin.com cdn.linkedin.oribi.io px.ads.linkedin.com; font-src 'self' fonts.gstatic.com ; form-action 'self'; img-src 'self' data: px.ads.linkedin.com www.facebook.com www.google.com www.google.ch maps.googleapis.com region1.analytics.google.com region1.google-analytics.com googleads.g.doubleclick.net www.googletagmanager.com maps.gstatic.com i.ytimg.com blob: ad.doubleclick.net region1.google-analytics.com www.google-analytics.com translate.google.com fonts.gstatic.com px4.ads.linkedin.com; media-src cfvod.kaltura.com; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com; style-src 'unsafe-inline' 'self' fonts.googleapis.com; frame-src 12720745.fls.doubleclick.net tube.switch.ch embed.eventfrog.ch www.terminland.de bid.g.doubleclick.net tpc.googlesyndication.com www.google.com www.youtube.com *.ffhs.ch; worker-src blob:; report-uri https://ffhs.report-uri.com/r/d/csp/reportOnly; report-to default 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://challenges.cloudflare.com https://www.googletagmanager.com https://www.clarity.ms https://*.clarity.ms https://widgetbe.com https://va.vercel-scripts.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https://widgetbe.com; connect-src 'self' https://challenges.cloudflare.com https://www.google-analytics.com https://www.googletagmanager.com https://*.ingest.us.sentry.io https://www.clarity.ms https://*.clarity.ms https://widgetbe.com https://va.vercel-scripts.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com; frame-src https://challenges.cloudflare.com https://www.youtube.com https://youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://my.matterport.com https://app.immoviewer.com https://www.zillow.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https:; frame-ancestors 'self' https://*.moneiro.jp https://hs-lp.moneiro.jp; base-uri 'self'; form-action 'self'; object-src 'none' 1
frame-ancestors 'self'; default-src 'nonce-5e4533ca36c9661b495f6291c4370090' 'strict-dynamic'; font-src 'self' data: fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/css https://cdn.walkme.com/users/4351fcec0f5b403f93eb714dc275dffb/ https://*.kampyle.com https://www.gstatic.com/recaptcha/; worker-src 'self' blob:; script-src 'nonce-5e4533ca36c9661b495f6291c4370090' 'strict-dynamic'; img-src 'self' blob: data: https:; media-src 'self' blob: https: https://*.xactimate.com https://*.xactcontents.com https://xactcontents.com https://xactware-claimx-us-prod.s3.us-west-1.amazonaws.com https://usw2-prod-property-media-media.s3.us-west-2.amazonaws.com https://*.claimxperience.com https://claimxperience.com; connect-src 'self' blob: https://www.google.com/recaptcha/ https://*.kampyle.com https://*.verisk.com https://*.xactware.com/ https://*.xactcontents.com/ https://xactcontents.com/ https://*.xactimate.com/ https://servicenotify.statuspage.io https://*.walkme.com https://*.launchdarkly.com https://maps.googleapis.com https://places.googleapis.com https://*.tokbox.com https://*.opentok.com wss://*.tokbox.com https://*.medallia.com https://xactware-claimx-us-prod.s3.us-west-1.amazonaws.com https://usw2-prod-property-media-media.s3.us-west-2.amazonaws.com https://*.claimxperience.com https://claimxperience.com https://contentstrack.com; frame-src 'self' blob: https://*.360-value.com https://nebula-cdn.kampyle.com https://www.google.com/recaptcha/ https://*.verisk.com https://servicenotify.statuspage.io https://www.youtube.com; object-src 'none'; base-uri 'self'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com *.googleapis.com https://fonts.bunny.net *.yotpo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.certcapture.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com *.certcapture.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.certcapture.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.disqus.com *.fontawesome.com *.googleapis.com *.avada.io *.shopify.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.yotpo.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.certcapture.com downloads.mailchimp.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com *.certcapture.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://get.geojs.io *.avada.io *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'none'; connect-src 'self'; font-src 'self' data:; img-src 'self' data: https:; script-src 'self' 'report-sample' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.recaptcha.net; style-src 'self' 'report-sample' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; worker-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-8EhZqbtmRPYjC3j2tXAQIQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src  'none'; connect-src 'self' *.ragingstallion.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.ragingstallion.com join.gammasecure.com; script-src 'self' *.ragingstallion.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.ragingstallion.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
script-src 'self' 'nonce-VAxceULtRRp/2S6sFlVJ1c6dl2HtB9GuTnJw2mi3rVw=' 'strict-dynamic' 'wasm-unsafe-eval' www.youtube.com  az416426.vo.msecnd.net cdn.cookielaw.org www.google-analytics.com maps.googleapis.com www.googletagmanager.com  dl.episerver.net www.youtube.com www.google.com www.gstatic.com snap.licdn.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.com.ai https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.ms https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.vg https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat  https://connect.facebook.net/ https://munchkin.marketo.net/ static.hotjar.com script.hotjar.com https://cdn.jsdelivr.net/ https://cdn.cookielaw.org/;object-src 'none';base-uri 'self';report-uri https://o4507537122852864.ingest.de.sentry.io/api/4507764299726928/security/?sentry_key=2e67b3fa9c193f38db8ea33933d09ffa&sentry_environment=production&sentry_release=sprint24; 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' minhacasasolar.com.br *.minhacasasolar.com.br wake-components.fbitsstatic.net minhacasasolar.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br *.minhacasasolar.com.br *.ecommercegateway.com.br *.itau.com *.itau.com.br *.itaushopline.com.br *.itaushopline.com *.criteo.net *.shoptarget.com.br app.shoptarget.com.br *.onesignal.com *.trustvox.com.br *.ip.sb *.alphassl.com *.ecommercemail.com.br rawgit.com *.jivosite.com *.criteo.com *.googleadservices.com *.masterpass.com *.dc.linximpulse.net *.g.doubleclick.net cdnjs.cloudflare.com checkout.minhacasasolar.com.br masterpass.com apis.google.com cdn.onesignal.com rate.trustvox.com.br sslwidget.criteo.com integration-healthy.dc.linximpulse.net *.mundipaggone.com *.linximpulse.net poscompra.shopconvert.com.br *.shopconvert.com.br static.shopback.net *.ckies.net *.shopback.net cdn.jsdelivr.net ajax.googleapis.com *.retargeter.com.br trustvox.com.br events.chaordicsystems.com *.chaordicsystems.com click.retargeter.com.br onesignal.com wss://chat-ca.jivosite.com ckies.net certificate.trustvox.com.br api-ads.percycle.com wss://node224.jivosite.com *.googlesyndication.com connect.facebook.net recursos.minhacasasolar.com.br recursos.ecommercegateway.com.br ssl.google-analytics.com cdn.bitrix24.com *.bitrix24.com gm.fbits.net suite.linximpulse.net collect.chaordicsystems.com api.shopback.net gum.criteo.com wss://rtc-v2-us1.bitrix24.com static.trustvox.com.br *.sun21.com.br *.smarthint.co *.shoppush.com.br .crazyegg.com *.crazyegg.com gstatic.com *.tiktok.com *.byspotify.com *.spotify.com analytics.tiktok.com api.opencnpj.org *.reclameaqui.com.br *.google.com.br https://s3.amazonaws.com/raichu-beta/ capi-automation.s3.us-east-2.amazonaws.com minhacasasolar.bitrix24.com ad.doubleclick.net; frame-ancestors *.minhacasasolar.com.br minhacasasolar.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-m7oV_VWpaeL9noX6BhEg98F4p0xZLDdK'; base-uri 'none'; report-uri https://data.sanitino.eu/csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com gateway.ptranz.com staging.ptranz.com www.facebook.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com onvo-pay-widget.vercel.app sdk.onvopay.com gateway.ptranz.com ssl.kaptcha.com app.tilopay.com staging.ptranz.com vars.hotjar.com accounts.googleapis.com www.facebook.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com ccapi-stg.paymentez.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io ik.imagekit.io *.s3.amazonaws.com www.facebook.com *.googleapis.com *.google.com *.google.co.cr *.google.co.mx *.googleusercontent.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com onvo-pay-widget.vercel.app sdk.onvopay.com cdn.jsdelivr.net app.tilopay.com api.tokenex.com cdnjs.cloudflare.com unpkg.com static.hotjar.com script.hotjar.com connect.facebook.net *.googleapis.com *.gstatic.com *.googleusercontent.com *.klaviyo.com *.elfsight.com sdk.amazonaws.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com x.klarnacdn.net https://cdn.paymentez.com/ccapi/sdk/payment_stable.min.js https://code.jquery.com/jquery-1.11.3.min.js *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.klaviyo.com cdn.paymentez.com https://cdn.paymentez.com/ccapi/sdk/payment_stable.min.css 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com app.tilopay.com ssl.kaptcha.com tilopay-staging-kb4ui2z5cq-uc.a.run.app developer.moovin.me assets5.lottiefiles.com stats.g.doubleclick.net in.hotjar.com vc.hotjar.io *.googleapis.com *.gstatic.com *.google.co.cr *.googleusercontent.com www.google-analytics.com *.klaviyo.com a.klaviyo.com fast.a.klaviyo.com telemetrics.klaviyo.com static-forms.klaviyo.com *.elfsight.com cognito-identity.us-east-1.amazonaws.com *.s3.amazonaws.com ccapi-stg.paymentez.com https://pg-micros-stg.paymentez.com https://pg-micros.paymentez.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.facebook.net *.facebook.com *.cloudflare.com *.gstatic.com *.crisp.chat *.tawk.to *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.net *.facebook.com *.twitter.com https://seo.mageplaza.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.bka.sh *.bkash.com *.facebook.net *.facebook.com *.addtoany.com optimize.google.com *.tawk.to *.addthis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.bdtronics.com *.facebook.net *.facebook.com *.cloudflare.com *.cloudfront.com *.cloudfront.net *.crisp.chat *.tawk.to tawk.link *.jsdelivr.net *.amazonaws.com *.googletagmanager.com *.google.com.bd *.google.com *.inspectlet.com *.shofity.com https://images.unsplash.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.bka.sh *.facebook.net *.facebook.com https://cdn.jsdelivr.net *.onebark.org *.addtoany.com *.smartlook.com *.inspectlet.com *.sentry-cdn.com *.googletagmanager.com *.datadome.co *.crisp.chat *.tawk.to *.doubleclick.net *.klaviyo.com *.openreplay.com *.hs-scripts.com *.hs-analytics.net *.hs-banner.com *.usemessages.com *.hscollectedforms.net *.clare.ai cdnjs.cloudflare.com https://maps.googleapis.com https://player.vimeo.com unpkg.com s7.addthis.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com *.avada.io *.shopify.com *.alothemes.com *.magepow.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.facebook.net *.facebook.com *.cloudflare.com *.googleapis.com *.crisp.chat *.tawk.to unpkg.com https://cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com unsafe-inline assets.braintreegateway.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.cloudflare.com *.facebook.net *.facebook.com *.googleapis.com *.google.com *.smartlook.cloud *.inspectlet.com wss://ws.inspectlet.com *.sentry.io *.datadome.co wss://client.relay.crisp.chat *.crisp.chat *.tawk.to wss://*.tawk.to *.diligent-infotech.com insights.algolia.io *.doubleclick.net https://maps.googleapis.com https://player.vimeo.com *.bdtronics.com:8108 *.bdtronics.com:2053 ekr.zdassets.com/ https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; media-src 'self' blob: https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' saovito.com *.saovito.com wake-components.fbitsstatic.net armazemsaovito.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br cloudflare.com online-metrix.net doubleclick.net hotjar.io hotjar.com hertzen.com traycheckout.com.br *.hertzen.com *.hotjar.com *.hotjar.io *.cloudflare.com *.doubleclick.net *.ebit.com.br imgs.ebit.com.br *.fontawesome.com targeting.voxus.com.br targeting.voxus.tv api.voxus.tv *.loggly.com cdn.targeting.voxus.com.br voxus.com.br www.googletagmanager.com www.googleadservices.com www.google.com cdn.taghike.com taghike.com; frame-ancestors *.saovito.com saovito.com; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' Voceconstroi.com.br *.Voceconstroi.com.br wake-components.fbitsstatic.net voceconstroi.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br *.voceconstroi.com.br *.ecommercegateway.com.br *.itau.com.br *.itau.com *.itaushopline.com *.itaushopline.com.br *.alphassl.com seal.alphassl.com *.navdmp.com *.googleadservices.com *.octadesk.services *.bing.com *.compreconfie.com.br *.g.doubleclick.net *.rdstation.com.br googleadservices.com checkout.lojacss.ecommercestore.com.br *.lojacss.ecommercestore.com.br *.yandex.ru mc.yandex.ru cl.avis-verifies.com wss://www2.voceconstroi.com.br:1234 gstatic.com *.yango.com yandex.com yandex.ru yandex.md yads.tech yango.com *.yandex.com *.yandex.md *.webvisor.com *.webvisor.org *.yastatic.net *.doubleclick.net *.yads.tech t.adx.opera.com *.opinioes-verificadas.com.br *.opinioes-verificadas.com *.youtube-nocookie.com youtube-nocookie.com *.youtube.com *.cxr.skeepers.io *.rr.skeepers.io skeepers.io *.skeepers.io api.reclameaqui.com.br *.reclameaqui.com.br *.jsdelivr.net cdn.jsdelivr.net wss://www.voceconstroi.com.br:1234 https://s3.amazonaws.com/raichu-beta/ recursos.voceconstroi.com.br; frame-ancestors *.Voceconstroi.com.br Voceconstroi.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.pagseguro.com.br *.pagseguro.com *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.pagseguro.com.br *.pagseguro.com https://get.geojs.io *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.googleapis.com *.gstatic.com data: *.fontawesome.com *.yotpo.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com bytedance: sslocal: *.blue.cl *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.weltpixel.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.wesupply.xyz https://wesupplylabs.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.gstatic.com *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com pinterest.com www.pinterest.com s.pinimg.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com *.blue.cl *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.avada.io assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cloudflare.com https://www.googletagmanager.com tagmanager.google.com analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com unpkg.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com unsafe-inline tagmanager.google.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com *.blue.cl *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.google-analytics.com analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.doubleclick.net *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com magento.keukennederland.nl cdnjs.cloudflare.com fontawesome.com *.feedbackcompany.com *.googleapis.com https://fonts.bunny.net maxcdn.bootstrapcdn.com fonts.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.feedbackcompany.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com magento-cloudflare.jetrails.com www.googletagmanager.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magento.keukennederland.nl *.google.nl *.google.com *.feedbackcompany.com 'self' data: *.ytimg.com https://firebasestorage.googleapis.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com quickchart.io img.youtube.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com magento.keukennederland.nl cdnjs.cloudflare.com cdn.jsdelivr.net *.doubleclick.net *.googletagmanager.com v1.widget.futy.io api.widget.futy.io *.feedbackcompany.com https://browser.sentry-cdn.com *.avada.io *.shopify.com connect.facebook.net *.googleadservices.com *.google-analytics.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com magento.keukennederland.nl fontawesome.com cdnjs.cloudflare.com cdn.jsdelivr.net *.googleapis.com https://fonts.bunny.net maxcdn.bootstrapcdn.com fonts.gstatic.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com magento.keukennederland.nl *.doubleclick.net api.widget.futy.io *.feedbackcompany.com https://*.ingest.sentry.io https://get.geojs.io *.avada.io *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.clarity.ms c.paypal.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://static.cloudflareinsights.com *.clarity.ms c.paypal.com *.avada.io *.shopify.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://static.cloudflareinsights.com https://cloudflareinsights.com *.clarity.ms c.paypal.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.clarity.ms *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; style-src 'self' 'unsafe-inline' https://translate.googleapis.com https://www.gstatic.com/_/translate_http/ https://cdn.jsdelivr.net/npm/bootstrap@4.6.2/dist/css/bootstrap.min.css; connect-src 'self' ws://localhost:3000 https://shop-api.kfm-motorraeder.de https://webhook.kfm-motorraeder.de https://translate.googleapis.com https://shops-si.trustedshops.com https://api.trustedshops.com https://widgets.trustedshops.com https://trustbadge.api.etrusted.com https://api.trustbadge.etrusted.com https://payments-eu.amazon.com https://payments.amazon.de https://*.kaspersky-labs.com wss://*.kaspersky-labs.com; script-src 'self' 'self' 'unsafe-inline' 'unsafe-eval' https://widgets.trustedshops.com https://static-eu.payments-amazon.com; img-src 'self' data: https://www.kfm-motorraeder.de https://img.kfm-motorraeder.de https://widgets.trustedshops.com https://translate.google.com https://translate.googleapis.com https://fonts.gstatic.com/s/i/ https://www.gstatic.com/images/ https://yastatic.net https://m.media-amazon.com/images/ https://static-eu.payments-amazon.com/assets/; font-src 'self' data: https://fonts.gstatic.com https://github.com/google/fonts/; object-src 'none'; report-uri https://webhook.kfm-motorraeder.de/csp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; frame-ancestors 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://js.stripe.com https://js.hsforms.net https://js.hs-scripts.com https://*.hs-banner.com https://js.hs-analytics.net https://js.hsadspixel.net https://js.usemessages.com https://js.hscollectedforms.net https://play.hubspotvideo.com https://player.vimeo.com https://www.youtube.com https://s.ytimg.com https://snap.licdn.com https://connect.facebook.net https://www.gstatic.com https://www.google.com https://embed.typeform.com https://unpkg.com https://googleads.g.doubleclick.net https://bat.bing.com https://*.clarity.ms https://js.hubspot.com https://pagead2.googlesyndication.com https://www.googleadservices.com; style-src 'self' 'unsafe-inline' https://www.gstatic.com; connect-src 'self' https://api.fusionww.com https://dev-api.fusionww.com https://test-api.fusionww.com https://prerelease-api.fusionww.com https://*.amplitude.com https://*.algolia.net https://*.algolianet.com https://api.stripe.com https://*.applicationinsights.azure.com https://dc.services.visualstudio.com https://js.monitor.azure.com https://api.hsforms.com https://forms.hsforms.com https://forms.hscollectedforms.net https://track.hubspot.com https://api.hubapi.com https://vimeo.com https://*.vimeo.com https://stats.g.doubleclick.net https://px.ads.linkedin.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://api.typeform.com https://form.typeform.com https://www.google.com https://google.com https://www.googleadservices.com https://analytics.google.com https://*.analytics.google.com https://pagead2.googlesyndication.com https://bat.bing.com https://bat.bing.net https://*.clarity.ms https://ad.doubleclick.net https://googleads.g.doubleclick.net https://cta-service-cms2.hubspot.com https://*.hs-banner.com https://insights.algolia.io https://perf-na1.hsforms.com https://api.postgrid.com; img-src 'self' data: blob: https://images.fusionww.com https://images-qa.fusionww.link https://images-uat.fusionww.link https://images.ctfassets.net https://videos.ctfassets.net https://downloads.ctfassets.net https://info.fusionww.com https://rocketchips.blob.core.windows.net https://fwwenvprodstaticweb.blob.core.windows.net https://s3.us-east-1.amazonaws.com https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://track.hubspot.com https://forms.hsforms.com https://px.ads.linkedin.com https://www.facebook.com https://stats.g.doubleclick.net https://www.google.com https://i.ytimg.com https://*.vimeocdn.com https://images.typeform.com https://bat.bing.com https://bat.bing.net https://*.clarity.ms https://perf-na1.hsforms.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://translate.google.com https://www.gstatic.com https://fonts.gstatic.com https://5664301.fs1.hubspotusercontent-na1.net; font-src 'self' data: https://fusionww.com https://www.fusionww.com https://fonts.gstatic.com; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://player.vimeo.com https://www.youtube.com https://www.youtube-nocookie.com https://play.hubspotvideo.com https://forms.hsforms.com https://app.hubspot.com https://td.doubleclick.net https://www.googletagmanager.com https://embed.typeform.com https://form.typeform.com; media-src 'self' blob: https://videos.ctfassets.net https://play.hubspotvideo.com https://*.vimeocdn.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://forms.hsforms.com https://api.hsforms.com; frame-ancestors 'self'; report-uri /api/csp-report 1
default-src 'self'; script-src 'self' https://*.usercentrics.eu 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://*.openstreetmap.org https://www.loewen.de https://maps.gstatic.com https://maps.google.com https://maps.googleapis.com https://www.youtube.com https://*.google-analytics.com https://*.googletagmanager.com https://*.analytics.google.com https://www.facebook.com https://*.usercentrics.eu https://medien.loewen.de https://medien.loewen-kundenportal.de; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://vimeo.com https://www.googletagmanager.com https://*.usercentrics.eu; connect-src 'self' data: https://*.openstreetmap.org https://maps.googleapis.com https://*.google-analytics.com https://*.googletagmanager.com https://*.analytics.google.com https://*.usercentrics.eu; font-src 'self' https://fonts.gstatic.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.usercentrics.eu 'report-sample'; style-src 'self' 'unsafe-inline' 'report-sample'; script-src-elem 'self' 'sha256-kmB83Qlmak1+ekHFk+S5GfHhbvJrD6n2YITJgFDEWWQ=' https://maps.google.com https://maps.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://www.facebook.com https://*.usercentrics.eu 'report-sample'; media-src 'self' https://medien.loewen.de https://medien.loewen-kundenportal.de; report-uri https://www.loewen.de/gruppe/@http-reporting?csp=report&requestTime=1789273932921576&requestHash=4287765fc1b6015824eca075917c62286dfb73ee 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://use.fontawesome.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.elfsight.com elfsight.com *.elfsightcdn.com elfsightcdn.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://use.fontawesome.com https://fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://olegnax.com *.elfsight.com elfsight.com *.elfsightcdn.com elfsightcdn.com https://api.instagram.com https://graph.instagram.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline'; img-src 'self' https: data:; style-src 'self' 'unsafe-inline' 1
default-src 'self'; script-src 'self' 'nonce-vh6CBHe2C3w2gL/j0Xd/qg==' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://accounts.google.com https://apis.google.com https://cdn.jsdelivr.net https://js.stripe.com https://*.stripe.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://sdk.braze.com https://*.braze.com https://*.braze.eu https://*.hsforms.net https://static.hsappstatic.net https://sst.rasmus.com https://connect.facebook.net https://*.clarity.ms https://*.podium.com https://*.appboycdn.com https://google.com/recaptcha/; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; media-src 'self' https://storage.googleapis.com https://*.podium.com; connect-src 'self' https://*.auction-engine.com https://*.googleapis.com https://*.firebaseio.com https://*.firebaseapp.com https://*.algolia.net https://*.algolianet.com https://*.algolia.io https://api.stripe.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://mpc-prod-27-s6uit34pua-uk.a.run.app https://search-1091133704295.us-central1.run.app https://*.braze.com https://*.braze.eu https://sdk.braze.com https://*.hsforms.com https://*.hsforms.net https://forms.hubspot.com https://sst.rasmus.com https://*.clarity.ms https://*.podium.com wss://*.podium.com https://connect.facebook.net https://www.facebook.com https://analytics.google.com https://*.launchdarkly.com; frame-src 'self' https://rasmus.com https://*.firebaseapp.com https://www.youtube.com https://www.youtube-nocookie.com https://js.stripe.com https://*.stripe.com https://accounts.google.com https://www.google.com https://*.hsforms.com https://*.hsforms.net https://app.hubspot.com https://sst.rasmus.com https://*.podium.com https://google.com https://www.facebook.com; object-src 'none'; base-uri 'self'; form-action 'self' https://accounts.google.com https://www.facebook.com 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.efpa.es api.locize.app maxcdn.bootstrapcdn.com ka-f.fontawesome.com; img-src efpa.es *.efpa.es 'self' data: 'self'; font-src 'self' 'unsafe-inline' 'unsafe-eval' fonts.gstatic.com *.fontawesome.com fonts.googleapis.com data: 'self'; style-src 'self' 'unsafe-inline' 'unsafe-eval' fonts.googleapis.com maxcdn.bootstrapcdn.com *.fontawesome.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.fontawesome.com; object-src 'self'; 1
default-src *.retelit.it *.irideos.it *.clouditalia.com 'self' cdnjs.cloudflare.com 'unsafe-inline' cdn.datatables.net www.googletagmanager.com *.cookiebot.com *.google-analytics.com fonts.gstatic.com code.ionicframework.com *.googleapis.com www.google.com www.gstatic.com maxcdn.bootstrapcdn.com *.kolst.com code.jquery.com netdna.bootstrapcdn.com *.matomo.cloud; report-to csp~www.kolst.com 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://fonts.gstatic.com *.fontawesome.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.affirm.com *.affirm.ca *.meetanshi.com https://plumrocket.com *.wesupply.xyz https://wesupplylabs.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.affirm.com *.affirm.ca ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.meetanshi.com https://uatnew.orpazdefense.com https://www.facebook.com https://orpazdefense.com https://www.orpazdefense.com *.taggrs.io *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com *.affirm.com *.affirm.ca chimpstatic.com downloads.mailchimp.com *.list-manage.com *.meetanshi.com https://uatnew.orpazdefense.com https://*.cloudflare.com https://static.cloudflareinsights.com https://static.addtoany.com https://s7.addthis.com https://connect.facebook.net https://www.facebook.com https://uatnew.orpazdefense.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js *.taggrs.io *.cloudflare.com *.yotpo.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com downloads.mailchimp.com *.fontawesome.com *.googleapis.com *.addtoany.com https://uatnew.orpazdefense.com https://fonts.googleapis.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.affirm.com *.affirm.ca http://dpm.demdex.net *.meetanshi.com https://www.facebook.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'strict-dynamic' 'nonce-cBybRt3J8qBHytTyFhpRTQ==' 'sha256-/JqT3SQfawRcv/BIHPThkBvs0OEvtFFmqPF/lYI/Cxo=' 'sha384-RuyvpeZCxMJCqVUGFI0Do1mQrods/hhxYlcVfGPOfQtPJh0JCw12tUAZ/Mv10S7D' 'sha384-I7E8VVD/ismYTF4hNIPjVp/Zjvgyol6VFvRkX/vR+Vc4jQkC+hVqc2pM8ODewa9r' 'sha256-AlTido85uXPlSyyaZNsjJXeCs07eSv3r43kyCVc8ChI=' 'sha256-5kTP1GtVzERrwf+MJaNPcX7idt6AAoXDzcgeL9RbcGQ=' https: http:; style-src 'self' https://fonts.googleapis.com https://ajax.googleapis.com 'nonce-cBybRt3J8qBHytTyFhpRTQ==' https://ka-p.fontawesome.com https://kit.fontawesome.com; style-src-elem 'self' https://p.typekit.net https://use.typekit.net https://ajax.googleapis.com https://fonts.googleapis.com 'nonce-cBybRt3J8qBHytTyFhpRTQ==' 'sha256-5kTP1GtVzERrwf+MJaNPcX7idt6AAoXDzcgeL9RbcGQ=' https://kit.fontawesome.com https://ka-p.fontawesome.com; font-src 'self' https://fonts.gstatic.com https://use.typekit.net https://ka-p.fontawesome.com https://kit.fontawesome.com/39ef521402.css; img-src 'self' data: https://www.google-analytics.com; connect-src 'self' https://www.google-analytics.com https://ka-p.fontawesome.com; frame-src 'self' https://www.youtube.com https://player.vimeo.com https://www.googletagmanager.com/; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; require-trusted-types-for 'script'; 1
default-src https: 'unsafe-inline' 'unsafe-eval' data: about:; report-uri /_resources/php/csp-report.php 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.paypal.com *.paypalobjects.com *.cdn-apple.com *.braintreegateway.com 'unsafe-inline' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com www.googletagmanager.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.cdn-apple.com *.sandbox.paypal.com checkout.sezzle.com sandbox.checkout.sezzle.com tracking.sezzle.com https://www.youtube.com https://c.paypal.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://firebasestorage.googleapis.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.sandbox.paypal.com *.braintreegateway.com media.sezzle.com https://b.stats.paypal.com/ https://slc.stats.paypal.com/ https://c.paypal.com/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com *.gstatic.com *.avada.io connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.sandbox.paypal.com *.paypalobjects.com *.hotjar.com pop1.screenpopper.com livereload.js cdn.statstrk01.com stats.ryzeo.com checkout-sdk.sezzle.com sandbox.checkout-sdk.sezzle.com widget.sezzle.com *.fontawesome.com https://bam.nr-data.net https://bam-cell.nr-data.net https://c.paypal.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.braintreegateway.com *.hotjar.com fonts.cdnfonts.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://get.geojs.io *.avada.io *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.sandbox.paypal.com gateway.sezzle.com sandbox.gateway.sezzle.com media.sezzle.com widget.sezzle.com https://bam.nr-data.net https://bam-cell.nr-data.net https://payments.sandbox.braintree-api.com/ https://origin-analytics-sand.sandbox.braintree-api.com/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://smartsolutions.report-uri.com/r/d/csp/reportOnly; report-to report-endpoint; 1
font-src applepay.cdn-apple.com www.gstatic.com fonts.gstatic.com cfg.schmidtspiele-shop.de data: 'self' 'unsafe-inline'; form-action facebook.com www.facebook.com graph.facebook.com connect.facebook.net 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src payments.amazon.de applepay.cdn-apple.com challenges.cloudflare.com td.doubleclick.net facebook.com www.facebook.com graph.facebook.com connect.facebook.net *.google.com www.google.com/recaptcha/ www.googletagmanager.com googletagmanager.com jsctool.com www.jsctool.com js.playground.klarna.com secure.pay1.de player.vimeo.com *.youtube-nocookie.com *.youtube.com 'self' 'unsafe-inline'; img-src *.cloudfront.net *.cookielaw.org data: googleads.g.doubleclick.net *.g.doubleclick.net facebook.com www.facebook.com graph.facebook.com connect.facebook.net www.google-analytics.com *.google-analytics.com www.google.com analytics.google.com *.google.com *.analytics.google.com google.com *.google.de www.googleadservices.com *.googleapis.com pagead2.googlesyndication.com www.googletagmanager.com googletagmanager.com *.googletagmanager.com *.googleusercontent.com *.gstatic.com ssl.gstatic.com www.gstatic.com x.klarnacdn.net magefan.com cm.magefan.com www.magezon.com m.media-amazon.com *.onetrust.com cdn.pay1.de static-eu.payments-amazon.com www.paypalobjects.com *.vimeocdn.com *.youtube.com i.ytimg.com blob: cfg.schmidtspiele-shop.de data: 'self' 'unsafe-inline'; script-src *.adform.net includestest.ccdc02.com applepay.cdn-apple.com challenges.cloudflare.com *.cookielaw.org googleads.g.doubleclick.net facebook.com www.facebook.com graph.facebook.com connect.facebook.net *.ggpht.com www.google-analytics.com *.google-analytics.com analytics.google.com *.google.com www.google.com/recaptcha/ www.googleadservices.com www.googleapis.com maps.googleapis.com *.googleapis.com pagead2.googlesyndication.com www.googletagmanager.com googletagmanager.com *.googletagmanager.com *.googleusercontent.com *.gstatic.com www.gstatic.com/recaptcha/ jsctool.com cdn.klarna.com x.klarnacdn.net *.onetrust.com secure.pay1.de d.payla.io static-eu.payments-amazon.com www.paypalobjects.com d.ratepay.com vimeo.com www.vimeo.com *.vimeocdn.com sentry.webidea.cloud *.youtube.com s.ytimg.com cfg.schmidtspiele-shop.de https://cdn.cookielaw.org https://browser.sentry-cdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.google-analytics.com fonts.googleapis.com googletagmanager.com *.googletagmanager.com d.payla.io dr.payla.io d.ratepay.com cfg.schmidtspiele-shop.de 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src facebook.com www.facebook.com graph.facebook.com connect.facebook.net www.google-analytics.com www.googleadservices.com cfg.schmidtspiele-shop.de 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src payments-eu.amazon.com payments.amazon.de *.cookielaw.org stats.g.doubleclick.net *.g.doubleclick.net facebook.com www.facebook.com graph.facebook.com connect.facebook.net www.google-analytics.com *.google-analytics.com analytics.google.com *.google.com *.analytics.google.com google.com www.google.com *.google.de www.googleadservices.com maps.googleapis.com *.googleapis.com www.googletagmanager.com *.googletagmanager.com *.gstatic.com jsctool.com eu.playground.klarnaevt.com *.onetrust.com www.paypalobjects.com d.ratepay.com vimeo.com player.vimeo.com sentry.webidea.cloud cfg.schmidtspiele-shop.de 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://sentry.webidea.cloud/api/2/security&sentry_key=2f4936682b1c37fdb96bfe78a119e6ff&sentry_release=2836525123&sentry_environment=live&sentry_release=2836525123&sentry_environment=live; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: 'self' data: 'unsafe-inline' data: *.usercentrics.eu *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com *.paypal.com *.paypalobjects.com *.cdn-apple.com *.tiktok.com *.ttcdn-row.com https://static.unzer.com https://applepay.cdn-apple.com *.klaviyo.com *.trustami.com *.unzer.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.woodstore24.de *.woodstore24.test *.usercentrics.eu mirakl.m2e.cloud www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.sandbox.paypal.com https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://static-cc.test.unzer.com https://h.online-metrix.net https://google.com/pay https://pay.google.com/ https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ https://sandbox.clicktopay.auth.visa.com https://clicktopay.visa.com https://sandbox.secure.checkout.visa.com https://secure.checkout.visa.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com www.xtento.com *.awin1.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com 'self' data: validate.fishpig.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.woodstore24.de *.woodstore24.test 'unsafe-inline' data: *.usercentrics.eu magefan.com cm.magefan.com https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.sandbox.paypal.com *.tiktok.com *.ttcdn-row.com https://static.unzer.com *.online-metrix.net https://www.gstatic.com *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com www.xtento.com cdn.xtento.com *.ad4m.at *.adition.com *.adscale.de *.awin1.com *.bing.com *.bing.net *.casalemedia.com d3k81ch9hvuctc.cloudfront.net *.facebook.net *.googleadservices.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.by www.google.ca www.google.cd www.google.ch www.google.ci www.google.cm www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.au www.google.com.bd www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.eg www.google.com.fj www.google.com.gh www.google.com.hk www.google.com.kw www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.co.mz www.google.co.th www.google.co.uk www.google.co.za www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gr www.google.hr www.google.hu www.google.ie www.google.is www.google.it www.google.jo www.google.kz www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mu www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk www.google.sn www.google.tn google.com *.googlesyndication.com *.paypalobjects.com *.pubmatic.com *.roeye.com *.shoop.de *.smartadserver.com *.trustami.com *.twiago.com woodstore24.at woodstore24.de *.ytimg.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes';, script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.woodstore24.de *.woodstore24.test *.goo.gle *.googlecommerce.com *.googletagmanager.com *.usercentrics.eu static.client.cardinaltrusted.com *.avada.io *.shopify.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.sandbox.paypal.com *.paypalobjects.com *.tiktok.com *.ttcdn-row.com *.bytedance.com analytics.tiktok.com https://static.unzer.com https://applepay.cdn-apple.com https://pay.google.com https://code.jquery.com https://h.online-metrix.net https://h64.online-metrix.net https://static-v2.unzer.com/v2/ui-components/ *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com unpkg.com *.doubleclick.net *.typeform.com www.xtento.com cdn.xtento.com ad4m.at *.ad-srv.net *.attrxs.de *.awin1.com *.bing.com *.dwin1.com *.etrusted.com *.googlesyndication.com *.gr-cdn.com *.gr-wcon.com *.gsitrix.com *.hotjar.com *.klaviyo.com *.mastercard.com *.roeyecdn.com smct.co *.timify.com *.trustami.com *.trustedshops.com *.unzer.com woodstore24.de 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com *.woodstore24.de *.woodstore24.test *.googleapis.com *.usercentrics.eu *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com assets.braintreegateway.com *.tiktok.com *.ttcdn-row.com https://sandbox.src.mastercard.com https://static-v2.unzer.com/v2/ui-components/ *.tagmanager.google.com *.googletagmanager.com *.typeform.com *.gstatic.com *.klaviyo.com *.mastercard.com *.unzer.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src *.tiktok.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.woodstore24.de *.woodstore24.test *.usercentrics.eu *.cardinaltrusted.com https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.sandbox.paypal.com analytics.tiktok.com business-api.tiktok.com *.ttcdn-row.com *.bytedance.com https://api.unzer.com https://api.heidelpay.com https://sbx-api.heidelpay.com https://sbx-api.unzer.com https://payment.unzer.com https://payment.heidelpay.com https://sbx-payment.heidelpay.com https://sbx-payment.unzer.com https://h.online-metrix.net https://h64.online-metrix.net https://google.com/pay https://www.google.com/pay https://pay.google.com https://test-heidelpay.hpcgw.net/ https://sbx-api.heidelpay.com/ https://static-cc.test.unzer.com https://static-v2.unzer.com/v2/ui-components/ *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com *.awinblackfriday.com *.bing.com *.bing.net *.datadome.co *.facebook.com *.getresponse.com *.googleadservices.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.ba www.google.be www.google.bg www.google.by www.google.ca www.google.cd www.google.ch www.google.ci www.google.cm www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ma www.google.com.au www.google.com.bd www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.eg www.google.com.et www.google.com.gh www.google.com.hk www.google.com.mt www.google.com.mx www.google.com.ng www.google.com.np www.google.com.om www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.co.th www.google.co.uk www.google.co.za www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.gr www.google.hr www.google.hu www.google.ie www.google.is www.google.it www.google.kz www.google.li www.google.lt www.google.lu www.google.lv www.google.md www.google.mg www.google.mk www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.si www.google.sk www.google.tn *.googlesyndication.com *.gr-wcon.com *.gsitrix.com *.hotjar.com *.hotjar.io *.klaviyo.com *.wepowerconnections.com woodstore24.de 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline';, default-src ad4m.at *.ad4m.at *.adition.com *.adscale.de *.ad-srv.net *.attrxs.de *.awin1.com *.bing.com *.bing.net *.braintreegateway.com *.casalemedia.com d3k81ch9hvuctc.cloudfront.net *.datadome.co *.doubleclick.net *.dwin1.com *.facebook.com *.facebook.net *.getresponse.com *.googleadservices.com *.googleapis.com www.google.at www.google.be www.google.ch www.google.de www.google.fr www.google.pl *.google.com *.googlesyndication.com *.googletagmanager.com *.gr-cdn.com *.gr-wcon.com *.gsitrix.com *.gstatic.com *.hotjar.com *.hotjar.io *.klaviyo.com *.paypal.com *.paypalobjects.com *.pubmatic.com *.roeyecdn.com *.roeye.com *.smartadserver.com smct.co *.timify.com *.trustami.com *.twiago.com *.unzer.com *.usercentrics.eu *.wepowerconnections.com woodstore24.at woodstore24.de *.youtube.com *.ytimg.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; base-uri 'self' 'unsafe-inline'; report-uri https://f94791c8-55fa-4368-a75e-1fafd25902d2.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; report-uri /client/csp-report.php 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://use.fontawesome.com https://fonts.gstatic.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com https://player.vimeo.com https://www.youtube-nocookie.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.trustpilot.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com https://redchamps.com maps.gstatic.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ widget.freshworks.com m2epro.freshdesk.com player.vimeo.com https://player.vimeo.com https://www.youtube.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com maps.googleapis.com *.trustpilot.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com https://use.fontawesome.com https://fonts.googleapis.com http://fonts.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com widget.freshworks.com m2epro.freshdesk.com https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io https://olegnax.com https://api.instagram.com https://graph.instagram.com/ *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.clarity.ms *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com https://d1givitoj7uukl.cloudfront.net *.fontawesome.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.instagram.com js.stripe.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.twitter.com *.consensu.org *.sharethis.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.cdninstagram.com *.trackedlink.net *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.sharethis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypalobjects.com js.braintreegateway.com www.paypal.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com *.instagram.com js.stripe.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.sharethis.com https://connect.facebook.net https://s7.addthis.com https://api.addsauce.com https://cdn.addsauce.com/ https://snapppt.com *.googleadservices.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://d1givitoj7uukl.cloudfront.net/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.googleapis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.cloudflare.com *.twitter.com *.twimg.com *.googleadservices.com *.google-analytics.com *.sandbox.paypal.com *.paypalobjects.com *.ampproject.org *.sharethis.com https://cdn.addsauce.com/ https://snapppt.com https://app.addsauce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' data:; connect-src 'self' https://plausible.io *.webanalytics.italia.it *.sentry.io *.sentry-cdn.com *.opencontent.io *.opencontent.it *.opencityitalia.it *.stanzadelcittadino.it wss://*.opencityitalia.it https://nominatim.openstreetmap.org *.meilisearch.io https://apimeteoras.biddaweb.it *.comuni-chiamo.com https://m1.openfpcdn.io https://translate-pa.googleapis.com https://translate.yandex.net https://s3.eu-west-1.amazonaws.com https://sensorcivico.comune.trento.it https://servizi.comune.trento.it; font-src 'self' data: *.opencontent.io *.opencontent.it *.opencityitalia.it *.comuni-chiamo.com; frame-src 'self' *.youtube.com https://www.youtube-nocookie.com https://youtu.be *.vimeo.com https://api.webanalytics.italia.it; img-src 'self' data: blob: https://flyimg.opencityitalia.it https://flyimg-qa.opencityitalia.it *.openstreetmap.org *.ytimg.com https://s3-eu-west-1.amazonaws.com *.webanalytics.italia.it https://img.youtube.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://plausible.io https://www.googletagmanager.com *.sentry-cdn.com *.webanalytics.italia.it *.opencontent.io *.opencontent.it *.opencityitalia.it https://nominatim.openstreetmap.org https://apimeteoras.biddaweb.it https://www.youtube.com *.comuni-chiamo.com https://servizi.comune.trento.it *.js.sentry-cdn.com; style-src 'self' 'unsafe-inline' https:; report-uri https://csp-collector.opencontent.it/csp?env=production&app=cms; worker-src 'self' blob: 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com *.googleapis.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors self www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com www.google.com www.gstatic.com apis.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * api.demo.convergepay.com api.convergepay.com convergepay.com gstatic.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.googleapis.com *.fontawesome.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com api.demo.convergepay.com api.convergepay.com convergepay.com gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.googletagmanager.com *.fontawesome.com *.google.com *.gstatic.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.google-analytics.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com api.demo.convergepay.com api.convergepay.com convergepay.com gstatic.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com *.adobe.com *.facebook.com *.facebook.net *.googleapis.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.paypal.com *.youtube.com *.vimeo.com *.vimeocdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.facebook.com *.facebook.net *.fontawesome.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.vimeo.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.facebook.com *.facebook.net *.fontawesome.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.paypal.com *.vimeo.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.facebook.com *.facebook.net *.googleapis.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.paypal.com *.youtube.com *.vimeo.com *.vimeocdn.com assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.adobe.com *.facebook.com *.facebook.net *.fontawesome.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.youtube.com *.vimeo.com *.vimeocdn.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; script-src 'self' https: 'unsafe-inline' 'nonce-d9c86b720da03f9f5234bdeb13da6abe'; style-src 'self' https: 'unsafe-inline' 'nonce-d9c86b720da03f9f5234bdeb13da6abe'; frame-src 'self' https:; connect-src 'self' https: wss:; worker-src 'self' blob: 1
font-src data.utp-kabel.nl *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action data.utp-kabel.nl *.facebook.com 'self' 'unsafe-inline'; frame-ancestors data.utp-kabel.nl *.multisafepay.com https://pay.google.com 'self'; frame-src data.utp-kabel.nl bid.g.doubleclick.net player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.sharethis.com *.google.com *.doubleclick.net *.facebook.com *.multisafepay.com https://pay.google.com *.apps.ladesk.com *.hubspot.com *.pinterest.com speelplezier.ladesk.com *.bing.net *.bing.com js.mollie.com 'self' 'unsafe-inline'; img-src data.utp-kabel.nl widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com *.sharethis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.multisafepay.com https://at19.net https://bdt9.net https://ds1.nl https://dt51.net https://dt61.net https://fr135.net https://glp8.net https://jdt8.net https://jf79.net https://hs82.net https://lt45.net https://mt74.net https://ndt5.net https://rkn3.net *.bing.com *.bing.net *.cloudimg.io *.contentsquare.net *.etrusted.com *.google-analytics.com *.googlesyndication.com *.googleusercontent.com *.hsforms.com *.hubspot.com *.imgix.net *.linkedin.com *.premiere.page *.trustedshops.com www.google.be www.google.de www.google.nl flagpedia.net https://www.mollie.com *.tile.openstreetmap.org data: 'self' 'unsafe-inline'; script-src data.utp-kabel.nl googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.sharethis.com *.google.com *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.multisafepay.com https://pay.google.com *.hs-analytics.net *.usemessages.com *.hs-scripts.com *.bing.net *.beslist.nl *.bing.com *.cloudflare.com *.contentsquare.net *.etrusted.com *.getqonfi.com *.google-analytics.com *.googlesyndication.com *.hotjar.com *.hs-banner.com *.hscollectedforms.net *.licdn.com *.pinimg.com *.pinterest.com *.premiere.page *.tiktok.com *.trustedshops.com *.webwinkelkeur.nl *.ladesk.com https://cdn.polyfill.io https://browser.sentry-cdn.com *.gstatic.com maps.googleapis.com js.mollie.com pay.google.com applepay.cdn-apple.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src data.utp-kabel.nl *.sharethis.com *.googleapis.com *.doubleclick.net *.facebook.com *.multisafepay.com *.etrusted.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' 'unsafe-inline'; object-src data.utp-kabel.nl 'self' 'unsafe-inline'; media-src data.utp-kabel.nl 'self' 'unsafe-inline'; manifest-src data.utp-kabel.nl 'self' 'unsafe-inline'; connect-src data.utp-kabel.nl www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.sharethis.com *.google-analytics.com *.facebook.com *.facebook.net *.multisafepay.com *.beslist.nl *.bing.com *.bing.net *.contentsquare.net *.doubleclick.net *.etrusted.com *.getqonfi.com *.google.com *.googlesyndication.com *.hotjar.com *.hotjar.io *.hs-banner.com *.hscollectedforms.net *.hsforms.com *.hubspot.com *.linkedin.com *.pinterest.com *.premiere.page *.tiktok.com *.trustedshops.com www.google.be www.google.nl https://*.ingest.sentry.io www.gstatic.com maps.googleapis.com *.tile.openstreetmap.org 'self' 'unsafe-inline'; child-src data.utp-kabel.nl http: https: blob: 'self' 'unsafe-inline'; default-src data.utp-kabel.nl 'self' 'unsafe-inline' 'unsafe-eval'; base-uri data.utp-kabel.nl 'self' 'unsafe-inline'; report-uri https://394bd828-e8ee-4169-91b3-7b587c6eb99c.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; img-src 'self' data: blob: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://challenges.cloudflare.com https://googletagmanager.com https://connect.facebook.net https://static.ads-twitter.com https://snap.licdn.com https://widget.usepylon.com https://js.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://ddwl4m2hdecbv.cloudfront.net https://googleads.g.doubleclick.net https://googleadservices.com; connect-src 'self' https://challenges.cloudflare.com https://api.axiom.co https://frost.icon.com https://widget.usepylon.com wss://widget.usepylon.com https://icon-cdn.com https://icon-private https://*.r2.cloudflarestorage.com https://www.facebook.com https://px.ads.linkedin.com https://google-analytics.com https://googleads.g.doubleclick.net https://googleadservices.com https://analytics.twitter.com https://t.co https://track.hubspot.com https://*.mux.com https://mpc-prod-28-1053047382554.us-central1.run.app https://www.google.com wss://bios-realtime.onrender.com https://o4507117100924928.ingest.us.sentry.io; frame-src 'self' https://challenges.cloudflare.com https://www.facebook.com https://widget.usepylon.com; media-src 'self' blob: https:; worker-src 'self' blob:; manifest-src 'self' https:; form-action 'self' https:; report-uri /api/csp-report 1
font-src *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ bid.g.doubleclick.net *.addthis.com js.mollie.com https://www.googletagmanager.com https://td.doubleclick.net 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://images.unsplash.com maps.gstatic.com *.googleapis.com *.ggpht.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com *.sooqr.com https://www.mollie.com *.hsforms.net *.hsforms.com 'self' data: https://www.google.com https://www.google.com.ua https://www.google.ro https://www.google.nl https://pagead2.googlesyndication.com https://imgproxy.vendic.dev data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.sooqr.com js.mollie.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com https://d5yoctgpv4cpx.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src downloads.mailchimp.com https://cdn.jsdelivr.net *.fontawesome.com *.sooqr.com maxcdn.bootstrapcdn.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src https://www.google.com 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net vimeo.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://maps.googleapis.com https://player.vimeo.com *.gstatic.com data: t.elasticsuite.io *.hsforms.net *.hsforms.com https://google.com https://www.google.com https://ad.doubleclick.net https://p2iqhncxyh.execute-api.eu-central-1.amazonaws.com https://pagead2.googlesyndication.com https://analytics.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub774fbd4bd44873e5007931530f7abcf6&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Aui-switch%2Cenv%3Aprod;report-to https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub774fbd4bd44873e5007931530f7abcf6&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Aui-switch%2Cenv%3Aprod;default-src 'self';connect-src 'self' *.ovoenergyau-uat.com *.ovoenergy.com.au *.facebook.com *.logs.datadoghq.com *.zendesk.com *.zdassets.com *.sleeknote.com *.hotjar.com *.hotjar.io *.browser-intake-datadoghq.com *.split.io ovoenergyau-uat.zendesk.com/ *.zopim.com fonts.googleapis.com www.google-analytics.com translate.googleapis.com *.google.com.au *.google.com *.google.co.in *.doubleclick.net;img-src 'self' data: blob: *.facebook.com *.sleeknote.com *.zopim.io static.zdassets.com script.hotjar.com img.nicereply.com *.google-analytics.com *.google.com *.google.com.au googleads.g.doubleclick.net www.googletagmanager.com www.google.co.in *.doubleclick.net;script-src 'self' *.facebook.net *.sleeknote.com *.zdassets.com *.hotjar.com *.ovoenergyau.zendesk.com *.zopim.com *.elfsight.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.google.com;script-src-elem 'self' 'unsafe-inline' *.facebook.net *.zdassets.com *.sleeknote.com *.hotjar.com *.elfsight.com *.googletagmanager.com *.google-analytics.com *.google.com *.googleadservices.com;media-src 'self' *.zdassets.com;style-src 'self' 'unsafe-inline' fonts.googleapis.com;font-src 'self' data: fonts.gstatic.com *.googleapis.com;object-src 'none';frame-src www.facebook.com *.doubleclick.net www.googletagmanager.com vars.hotjar.com www.zenaps.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' *.website-files.com *.googletagmanager.com *.google-analytics.com *.hubspot.com *.hsforms.net *.hs-scripts.com *.hs-analytics.net *.hs-banner.com *.hscollectedforms.net cdn.docketai.com d33t2173eag6fx.cloudfront.net d3e54v103j8qbb.cloudfront.net cdn.jsdelivr.net/npm/@finsweet/ cdn.embedly.com ajax.googleapis.com prod-assets.sequelvideo.com assets.revenuehero.io *.sharethis.com googleads.g.doubleclick.net bat.bing.com snap.licdn.com connect.facebook.net js.hsadspixel.net scripts.clarity.ms www.clarity.ms cdn.vector.co static.claydar.com cdn.claydar.com app.factors.ai bzrcdn.openai.com tracking-api.g2.com www.clickcease.com js.zi-scripts.com static.cloudflareinsights.com px.petavue.com; style-src 'self' 'unsafe-inline' *.website-files.com fonts.googleapis.com; font-src 'self' data: fonts.gstatic.com *.website-files.com res.cloudinary.com; img-src 'self' data: *; connect-src 'self' *; media-src 'self' blob: docket.io cdn.docketai.com d33t2173eag6fx.cloudfront.net; frame-src 'self' www.facebook.com forms.hsforms.com www.googletagmanager.com cdn.embedly.com app.revenuehero.io popup.schedulehero.io aiseller.app.docketai.com embed.sequel.io sdk.goldcast.io *.sharethis.com open.spotify.com api.vector.co; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; report-uri https://o4509285468471296.ingest.us.sentry.io/api/4511942288015360/security/?sentry_key=dc3b92b004dd22bcac03548c82707e1e 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://platform.twitter.com https://syndication.twitter.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://www.google.com https://stats.g.doubleclick.net https://platform.twitter.com https://syndication.twitter.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://platform.twitter.com https://syndication.twitter.com 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.ccavenue.com *.facebook.com *.instagram.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.weltpixel.com *.ccavenue.com https://cdn.moengage.com/ *.facebook.com *.instagram.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.wesupply.xyz https://wesupplylabs.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ccavenue.com *.googletagmanager.com https://www.google.co.in *.moengage.com https://image.moengage.com https://image-eu.moengage.com/ *.facebook.com https://x.adroll.com https://px.ads.linkedin.com https://tr.snapchat.com https://fashion.krishaccelerator.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.ccavenue.com *.avada.io *.googletagmanager.com https://analytics.google.com https://cdn.moengage.com/webpush/moe_webSdk.min.latest.js https://cdn.moengage.com/webpush/modules/inapp.js https://cdn.moengage.com/webpush/beta/sdk.inapp.cdnHelper.js https://cdn.moengage.com/release/dc_2/serviceworker_cdn.min.latest.js https://cdn.moengage.com/webpush/moe_webSdk_cards.min.latest.js https://cdn.moengage.com/webpush/moe_webSdk_webp.min.latest.js https://app-cdn.moengage.com s7.addthis.com *.instagram.com *.facebook.com *.facebook.net https://static.addtoany.com *.hotjar.com *.adroll.com https://snap.licdn.com https://sc-static.net *.snapchat.com cdn.jsdelivr.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://app-cdn.moengage.com/ https://fonts.bunny.net *.googleapis.com *.addtoany.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.ccavenue.com https://get.geojs.io *.avada.io https://analytics.google.com https://sdk-01.moengage.com/ https://sdk-02.moengage.com/ https://sdk-03.moengage.com/ https://sdk-04.moengage.com/ https://stats.g.doubleclick.net ekr.zdassets.com/ *.instagram.com *.analytics.google.com *.facebook.com https://px.ads.linkedin.com http://dpm.demdex.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com https://fonts.bunny.net *.absolute-teamsport-boeckmann.de teamsport-boeckmann.app.baqend.com *.trustedshops.com *.bing.com *.clarity.ms *.hotjar.com *.smarketer.de *.google.de *.google.com *.googlesyndication.com *.googletagmanager.com *.google-analytics.com app.varify.io *.klarinsights.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com 'self' connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net www.facebook.com https://cdn.consentmanager.net https://delivery.consentmanager.net connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com js.mollie.com *.absolute-teamsport-boeckmann.de teamsport-boeckmann.app.baqend.com *.trustedshops.com *.bing.com *.clarity.ms *.hotjar.com *.smarketer.de *.google.de *.googlesyndication.com *.googletagmanager.com *.google-analytics.com app.varify.io *.klarinsights.net 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com https://cdn.consentmanager.net https://delivery.consentmanager.net https://a.delivery.consentmanager.net https://b.delivery.consentmanager.net https://c.delivery.consentmanager.net https://d.delivery.consentmanager.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com connect.facebook.net graph.facebook.com business.facebook.com https://www.mollie.com *.absolute-teamsport-boeckmann.de teamsport-boeckmann.app.baqend.com *.trustedshops.com *.bing.com *.clarity.ms *.hotjar.com *.smarketer.de *.google.de *.googlesyndication.com *.google-analytics.com app.varify.io *.klarinsights.net data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google.bg *.googletagmanager.com www.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com https://cdn.consentmanager.net https://delivery.consentmanager.net https://a.delivery.consentmanager.net https://b.delivery.consentmanager.net https://c.delivery.consentmanager.net https://d.delivery.consentmanager.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com connect.facebook.net graph.facebook.com business.facebook.com js.mollie.com pay.google.com applepay.cdn-apple.com *.absolute-teamsport-boeckmann.de teamsport-boeckmann.app.baqend.com *.trustedshops.com *.bing.com *.clarity.ms *.hotjar.com *.smarketer.de *.google.de *.googlesyndication.com app.varify.io *.klarinsights.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net *.absolute-teamsport-boeckmann.de teamsport-boeckmann.app.baqend.com *.trustedshops.com *.bing.com *.clarity.ms *.hotjar.com *.smarketer.de *.google.de *.google.com *.googlesyndication.com *.google-analytics.com app.varify.io *.klarinsights.net 'self' 'unsafe-inline'; object-src https://cdn.consentmanager.net https://delivery.consentmanager.net 'self' 'unsafe-inline'; media-src https://cdn.consentmanager.net https://delivery.consentmanager.net https://a.delivery.consentmanager.net https://b.delivery.consentmanager.net https://c.delivery.consentmanager.net https://d.delivery.consentmanager.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.google-analytics.com www.facebook.com *.facebook.net https://cdn.consentmanager.net https://delivery.consentmanager.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io connect.facebook.net graph.facebook.com business.facebook.com *.absolute-teamsport-boeckmann.de teamsport-boeckmann.app.baqend.com *.trustedshops.com *.bing.com *.clarity.ms *.hotjar.com *.smarketer.de *.google.de *.googlesyndication.com *.googletagmanager.com *.doubleclick.net app.varify.io *.klarinsights.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src https://cdn.consentmanager.net https://delivery.consentmanager.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://googleads.g.doubleclick.net https://connect.facebook.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cdn.matomo.cloud https://ravate.matomo.cloud https://cdn.cartsguru.io https://integration.carts.guru https://static.axept.io https://api.axept.io https://media.flixfacts.com https://media.flixcar.com https://widgets.rr.skeepers.io https://maps.googleapis.com https://maps.google.com;report-uri https://csp-reporter.ravate.workers.dev; report-to csp-endpoint; 1
frame-src 'self' td.doubleclick.net youtube.com *.youtube.com oneconnect.opendigitaleducation.com google.com www.google.com *.doubleclick.net www.googletagmanager.com; report-to /infra/monitoring/csp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; frame-src https:; connect-src 'self' https:; media-src 'self' blob: https:; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests 1
object-src 'none';base-uri 'self';script-src 'nonce-3UD7UQ4XESajW918qKUZEg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.googleapis.com fonts.gstatic.com applepay.cdn-apple.com assets.braintreegateway.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net https://cdnjs.cloudflare.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpaysandbox.nexigroup.com xpay.nexigroup.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.google.com bid.g.doubleclick.net int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpaysandbox.nexigroup.com xpay.nexigroup.com pay.google.com applepay.cdn-apple.com platform.indigo.ai *.braintreegateway.com assets.braintreegateway.com *.braintree-api.com *.vivapayments.com demo.vivapayments.com acs.revolut.com *.sharethis.com *.nexi.it fast.amc.demdex.net *.adobe.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com validator.swagger.io maps.googleapis.com maps.gstatic.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpaysandbox.nexigroup.com xpay.nexigroup.com cdn.klarna.com www.gstatic.com pay.google.com applepay.cdn-apple.com track.hubspot.com *.hubspot.com *.hsforms.com *.clarity.ms assets.braintreegateway.com *.vivapayments.com visio.now platform.indigo.ai s3.eu-de.cloud-object-storage.appdomain.cloud *.sharethis.com *.gstatic.com *.googleapis.com *.nexi.it magefan.com cm.magefan.com https://firebasestorage.googleapis.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: 'self' 'unsafe-inline'; script-src www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.gstatic.com *.google.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpaysandbox.nexigroup.com xpay.nexigroup.com www.google.com www.gstatic.com pay.google.com applepay.cdn-apple.com js-eu1.hsforms.net *.hsforms.net *.hsforms.com *.hubspot.com js-eu1.hs-scripts.com *.hs-scripts.com *.hs-analytics.net *.hscollectedforms.net *.hs-banner.com *.clarity.ms www.clarity.ms *.sharethis.com *.algolianet.com *.algolia.net *.braintreegateway.com assets.braintreegateway.com *.braintree-api.com *.vivapayments.com demo.vivapayments.com platform.indigo.ai *.smartlook.com *.googletagmanager.com *.doubleclick.net *.googleapis.com https://chimpstatic.com *.nexi.it *.avada.io *.shopify.com https://cdnjs.cloudflare.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com assets.braintreegateway.com platform.indigo.ai *.sharethis.com *.fontawesome.com https://fonts.bunny.net https://fonts.googleapis.com https://cdnjs.cloudflare.com *.adobe.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src platform.indigo.ai *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpaysandbox.nexigroup.com xpay.nexigroup.com pay.google.com applepay.cdn-apple.com *.hubapi.com js-eu1.hsforms.net *.hsforms.net *.hsforms.com *.hubspot.com cta-eu1.hubspot.com *.hs-scripts.com *.hs-analytics.net *.hscollectedforms.net *.hs-banner.com hubspot-forms-static-embed-eu1.s3.amazonaws.com *.clarity.ms www.clarity.ms *.smartlook.com cdn.jsdelivr.net *.braintreegateway.com *.braintree-api.com *.vivapayments.com demo.vivapayments.com platform.indigo.ai wss://platform.indigo.ai *.sharethis.com *.smartlook.cloud *.doubleclick.net *.nexi.it https://get.geojs.io *.avada.io *.newrelic.com *.nr-data.net dpm.demdex.net amcglobal.sc.omtrdc.net 'self' 'unsafe-inline'; child-src *.braintreegateway.com *.braintree-api.com *.vivapayments.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-report.kiwivapor.com/; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page hovmanddeployment.blob.core.windows.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com hovmanddeployment.blob.core.windows.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.youtube-nocookie.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src-elem *.elfsightcdn.com *.cookieyes.com *.cloudfront.net *.sender.net *.googleapis.com *.google.com *.gstatic.com cdn.ampproject.org www.googletagmanager.com googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.youtube.com; worker-src blob:; font-src fonts.gstatic.com *.kxcdn.com data: *.gstatic.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com *.googletagmanager.com *.trustpilot.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.cdninstagram.com data: *.kxcdn.com amcglobal.sc.omtrdc.net *.twitter.com *.googleapis.com *.google.com *.gstatic.com *.fbcdn.net *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.elfsightcdn.com *.cookieyes.com *.tile.openstreetmap.org yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.googleapis.com *.google.com *.gstatic.com cdn.ampproject.org connect.facebook.net www.googletagmanager.com googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com *.youtube.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.elfsightcdn.com *.cloudfront.net *.sender.net *.cookieyes.com *.trustpilot.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com *.cloudfront.net *.trustpilot.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com dpm.demdex.net *.instagram.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net region1.analytics.google.com *.analytics.google.com www.google.ro *.elfsightcdn.com *.cloudfront.net *.sender.net *.cookieyes.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://maps.googleapis.com https://app.cobrowser.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action *.paypal.com https://mcheckout.mstart.hr/iCheckOutX/v1/icheckout/confirm.xhtml https://mcheckouttest.mstart.hr:9443/iCheckOutX/v1/icheckout/confirm.xhtml https://form.wspay.biz/authorization.aspx https://formtest.wspay.biz/authorization.aspx googletagmanager.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://widget-cdn.boxnow.hr https://widget-v5.boxnow.hr https://widget-v4.boxnow.hr *.weltpixel.com https://service.force.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.yotpo.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com https://mstart.eu/wp-content/uploads/2026/03/imgi_1_logo-200x37.png magefan.com cm.magefan.com maps.googleapis.com https://preprod-u1974--preprod.cs173.force.com https://u1974--preprod.my.salesforce.com https://u1974--preprod--c.visualforce.com https://zoocity.secure.force.com https://www.wspay.info/layout/logo.png https://www.wspay.info/payment-info/wsPayWebSecureLogo-118x50-transparent.png https://www.facebook.com https://app.cobrowser.com www.google.hr www.facebook.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com *.g.doubleclick.net *.google.com www.paypalobjects.com *.openstreetmap.org *.disqus.com connect.facebook.net graph.facebook.com business.facebook.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ www.google.com assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://widget-cdn.boxnow.hr https://widget-v5.boxnow.hr https://dsp-media.eskimi.com/ maps.googleapis.com https://service.force.com https://*.salesforceliveagent.com https://u1974--preprod.my.salesforce.com https://d.la3-c1cs-cdg.salesforceliveagent.com https://zoocity.my.salesforce.com https://d.la3-c2-fra.salesforceliveagent.com https://static.lightning.force.com https://zoocity.secure.force.com https://d.la1-core1.sfdc-yzvdd4.salesforceliveagent.com https://app.cobrowser.com https://connect.facebook.net *.googletagmanager.com tagmanager.google.com ssl.google-analytics.com dashboard.trustprofile.com https://www.googletagmanager.com map.gls-croatia.com map.gls-czech.com map.gls-hungary.com map.gls-romania.com map.gls-slovenia.com map.gls-slovakia.com map.gls-serbia.com *.openstreetmap.org *.disqus.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com https://maps.googleapis.com https://service.force.com https://preprod-u1974--preprod.cs173.force.com https://zoocity.secure.force.com https://app.cobrowser.com googletagmanager.com tagmanager.google.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src https://app.cobrowser.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://mcheckout.mstart.hr/iCheckOutX/v1/icheckout/confirm.xhtml https://mcheckouttest.mstart.hr:9443/iCheckOutX/v1/icheckout/confirm.xhtml maps.googleapis.com https://connect.facebook.net https://preprod-u1974--preprod.cs173.force.com https://zoocity.secure.force.com https://secure.wspay.biz/api/services/processpayment https://test.wspay.biz/api/services/processpayment https://app.cobrowser.com *.googletagmanager.com *.g.doubleclick.net https://www.google-analytics.com map.gls-croatia.com map.gls-czech.com map.gls-hungary.com map.gls-romania.com map.gls-slovenia.com map.gls-slovakia.com map.gls-serbia.com *.openstreetmap.org www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://*.cssmi.qc.ca; script-src 'self' 'strict-dynamic' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; object-src 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://*.googlesyndication.com https://*.doubleclick.net https://*.googleadservices.com https://*.googletagservices.com https://adservice.google.com https://*.adtrafficquality.google https://www.google.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://*.googlesyndication.com https://*.doubleclick.net https://*.adtrafficquality.google; frame-src 'self' https://player.twitch.tv https://www.twitch.tv https://*.doubleclick.net https://*.googlesyndication.com https://www.google.com https://*.adtrafficquality.google; frame-ancestors 'self'; base-uri 'self'; object-src 'none' 1
default-src https:; connect-src *; font-src * data:; frame-src *; img-src * data:; media-src *; object-src *; script-src * 'unsafe-inline' 'unsafe-eval'; style-src * 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-Zzlie0WlgYhW6EIL-_BQvA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' *; media-src 'self' * data: ; font-src 'self' * data: ; img-src 'self' data: blob: *; script-src * 'unsafe-inline' 'unsafe-eval' data: *; style-src 'self' 'unsafe-inline' *; worker-src 'self' * blob: ; report-uri /api/csp-violation 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; img-src 'self' data: blob: https://lh3.googleusercontent.com https://api.telegram.org https://*.supabase.co; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://accounts.google.com https://static.cloudflareinsights.com; script-src-elem 'self' 'unsafe-inline' https://accounts.google.com https://static.cloudflareinsights.com; connect-src 'self' https://*.maxplus-ai.cc https://*.supabase.co wss://*.supabase.co https://api.telegram.org https://api.frankfurter.dev; frame-src 'self' blob: data: https://*.supabase.co https://accounts.google.com; worker-src 'self' blob:; manifest-src 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://fonts.gstatic.com *.salesmartly.com *.mambasms.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.mambasms.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com *.disqus.com https://maps.gstatic.com https://maps.googleapis.com flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.salesmartly.com *.mambasms.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.disqus.com https://maps.googleapis.com https://maps.gstatic.com *.gstatic.com maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.salesmartly.com *.mambasms.com https://storage.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com assets.braintreegateway.com *.salesmartly.com *.cdnjs.cloudflare.com *.mambasms.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.salesmartly.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.sandbox.paypal.com https://www.paypal.com https://maps.googleapis.com www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.salesmartly.com *.mambasms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com data: *.fontawesome.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com cdn.dnky.co amc.demdex.net www.google.com www.facebook.com *.mercadolibre.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * mldp.mercadopago.com www.mercadolibre.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net maps.gstatic.com maps.googleapis.com accounts.google.com www.facebook.com *.vnforapps.com *.online-metrix.net imgmp.mlstatic.com *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 'self' data: www.mercadolibre.com www.mercadolibre.com.mx www.mercadolibre.com.ar www.mercadolibre.com.br a248.e.akamai.net mercadolivre.com.br www.mercadolivre.com.br www.mercadolivre.com.mx www.mercadolivre.com.ar www.mercadopago.com secure.mlstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.magento-datasolutions.com cdn.dnky.co r1-t.trackedlink.net www.gstatic.com js-agent.newrelic.com bam.nr-data.net maps.googleapis.com connect.facebook.net *.vnforapps.com *.online-metrix.net *.mlstatic.com www.facebook.com graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.gstatic.com http2.mlstatic.com secure.mlstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com cdn.dnky.co *.fontawesome.com assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.magento-datasolutions.com *.magento-ds.com api.comapi.com bam.nr-data.net *.vnforapps.com *.online-metrix.net *.mercadopago.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google-analytics.com api.mercadopago.com events.mercadopago.com www.mercadolibre.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://mc.yandex.ru https://connect.facebook.net https://code.jivo.ru https://*.jivosite.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https:; connect-src 'self' https: wss://api.mochironauction.com wss://*.jivosite.com; frame-src 'self' https://www.googletagmanager.com https://*.jivosite.com https://challenges.cloudflare.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self'; media-src 'self'; frame-src 'self'; frame-ancestors 'self'; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self'; report-uri /report-csp-violation 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://*.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com; frame-src 'none'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://p.monetico-services.com 1
style-src-elem 'self' https://cdn.sucuri.net; script-src-elem 'self' https://*.clarity.ms https://bat.bing.com https://cdn.cookie-script.com https://cdn.jsdelivr.net https://cdn.sucuri.net https://challenges.cloudflare.com https://elfsightcdn.com https://googleads.g.doubleclick.net https://sc.lfeeder.com https://static.cloudflareinsights.com https://universe-static.elfsightcdn.com https://unpkg.com https://www.googletagmanager.com https://www.gstatic.com; font-src www.paypalobjects.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ https://challenges.cloudflare.com *.weltpixel.com https://calendly.com https://www.google.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com magefan.com cm.magefan.com *.disqus.com https://images.unsplash.com maps.gstatic.com *.googleapis.com *.ggpht.com https://img.youtube.com https://*.cdninstagram.com https://*.clarity.ms https://bat.bing.com https://bat.bing.net https://pagead2.googlesyndication.com https://phosphor.utils.elfsightcdn.com https://tr.lfeeder.com https://www.google.co.uk https://www.google.com.ng *.gstatic.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.disqus.com https://challenges.cloudflare.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com https://cdn.jsdelivr.net *.googletagmanager.com *.googleadservices.com *.google.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://cdn.jsdelivr.net *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://portal.envisagedigital.co.uk https://maps.googleapis.com https://player.vimeo.com *.gstatic.com data: https://*.clarity.ms https://analytics.google.com https://bat.bing.com https://bat.bing.net https://cdn.jsdelivr.net https://core.service.elfsight.com https://lottie.host https://pagead2.googlesyndication.com https://service-reviews-ultimate.elfsight.com https://static.elfsight.com https://universe-static.elfsightcdn.com https://unpkg.com https://www.google.co.uk https://www.google.com https://www.googleadservices.com *.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://portal.envisagedigital.co.uk/api/reporting/ibL5SimjqW2ssxjflUkrsWE6KPNVD1MahSZFvJWaNDugIJj6RHEtL85zwDxCtCgz; report-to envisage-ed9ecd3c30d5; 1
report-uri https://csp.vilmos.co.uk/CspReport?header=Content-Security-Policy-Report-Only 'self'; default-src 'self'; script-src 'self' *.googleapis.com *.gstatic.com www.google.com apis.google.com connect.facebook.net ajax.aspnetcdn.com https://www.youtube.com platform.linkedin.com https://*.googletagmanager.com *.truste.com *.trustarc.com *.trustpilot.com *.bing.com *.adalyser.com https://utt.impactcdn.com *.doubleclick.net *.tiktok.com *.google-analytics.com *.twitter.com *.linkstant.com *.ensighten.com 'unsafe-inline' 'unsafe-eval' js.hs-scripts.com js.hs-analytics.net js.hs-banner.com js.hsleadflows.net forms.hubspot.com js.hscollectedforms.net https://cdn.insight.sitefinity.com https://dec.azureedge.net *.eloqua.com *.en25.com web-chat.nativechat.com cdn.ampproject.org; style-src 'self' *.googleapis.com *.gstatic.com netdna.bootstrapcdn.com kendo.cdn.telerik.com www.google.com platform.twitter.com/css/ *.twimg.com 'unsafe-inline' https://cdn.insight.sitefinity.com https://dec.azureedge.net web-chat.nativechat.com; img-src 'self' *.gstatic.com *.googleapis.com web.facebook.com www.facebook.com www.redditstatic.com www.linkedin.com https://static.licdn.com/scds/common/u/images/apps/connect/sprites/sprite_connect_v14.png data: blob: https://*.googletagmanager.com *.adnxs.com *.t.co *.adalyser.com *.googlesyndication.com *.bing.net *.trustarc.com *.adsrvr.org *.google.com *.bing.com *.mathtag.com *.google.co.uk *.twitter.com https://t.co *.doubleclick.net *.insight.adsrvr.org https://uk.protectyourbubble.com *.googleadservices.com track.hubspot.com js.hsleadflows.net forms.hsforms.com https://cdn.insight.sitefinity.com https://dec.azureedge.net *.eloqua.com web-chat.nativechat.com; font-src 'self' fonts.gstatic.com kendo.cdn.telerik.com netdna.bootstrapcdn.com data: *.trustarc.com *.truste.com; frame-src 'self' *.trustarc.com *.googletagmanager.com *.trustpilot.com *.doubleclick.net forms.hsforms.com web-chat.nativechat.com; connect-src 'self' data: accounts.google.com *.gstatic.com https://*.googletagmanager.com *.bing.net *.trustarc.com *.googlesyndication.com *.doubleclick.net *.bing.com *.google-analytics.com *.google.com *.tiktokw.us *.tiktok.com *.trustpilot.com *.googleapis.com *.googleadservices.com forms.hubspot.com *.hsforms.com https://*.insight.sitefinity.com https://*.dec.sitefinity.com; media-src 'self' data: blob:; child-src 'self' https://platform.twitter.com/ https://syndication.twitter.com/ https://www.youtube.com/ https://www.youtube-nocookie.com https://player.vimeo.com/ https://w.soundcloud.com/ apis.google.com accounts.google.com staticxx.facebook.com www.facebook.com web.facebook.com badge.stumbleupon.com web-chat.nativechat.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; style-src 'self' 'unsafe-inline' https: data: blob:; style-src-elem 'self' 'unsafe-inline' https: data: blob:; img-src 'self' https: data: blob:; font-src 'self' https: data: blob:; connect-src 'self' https: wss: data: blob:; frame-src 'self' https: data: blob:; child-src 'self' https: data: blob:; media-src 'self' https: data: blob:; worker-src 'self' https: blob: data:; manifest-src 'self' https: data: blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self' https://fontur.com.co https://www.fontur.com.co; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://challenges.cloudflare.com; worker-src 'self' blob:; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https:; frame-ancestors 'self'; form-action 'self'; base-uri 'self'; object-src 'none'; upgrade-insecure-requests; report-uri https://ifac-control.org/wp-json/ifac/v1/csp-report; report-to ifac-csp 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:; connect-src 'self'; frame-src 'self'; form-action 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com *.googleapis.com https://fonts.bunny.net *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.tawk.to 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.tawk.to 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.tawk.to tawk.link cdn.jsdelivr.net s3.amazonaws.com/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.fontawesome.com *.googleapis.com *.gstatic.com *.avada.io *.alothemes.com *.magepow.com *.google.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tawk.to tawk.link 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.tawk.to wss://*.tawk.to 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-N3qtIlGBvTS-2KXTLlbhlQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
block-all-mixed-content;connect-src  'self'    https://*.bimago.com  https://bimago.com  https://*.bimago.cz  https://bimago.cz  https://*.bimago.es  https://bimago.es  https://*.bimago.at  https://bimago.at  https://*.bimago.art  https://bimago.art  https://*.bimago.co.uk  https://bimago.co.uk  https://*.bimago.se  https://bimago.se  https://*.bimago.pl  https://bimago.pl  https://*.bimago.de  https://bimago.de  https://*.bimago.fr  https://bimago.fr  https://*.bimago.it  https://bimago.it  https://*.bimago.nl  https://bimago.nl  https://*.bimago.pt  https://bimago.pt    https://adyen.com  https://*.adyen.com  https://paypal.com  https://*.paypal.com  https://pay.google.com/gp/p/js/pay.js      https://google.*  https://*.google.*  https://gstatic.com  https://*.gstatic.com  https://googletagmanager.com  https://*.googletagmanager.com  https://googleadservices.com  https://*.googleadservices.com  https://googlesyndication.com  https://*.googlesyndication.com  https://googleapis.com  https://*.googleapis.com  https://doubleclick.net  https://*.doubleclick.net  https://google-analytics.com  https://*.google-analytics.com  https://bing.*  https://*.bing.*  https://facebook.*  https://*.facebook.*  https://pinterest.*  https://*.pinterest.*  https://exponea.com  https://*.exponea.com  https://cookiebot.com  https://*.cookiebot.com  https://clarity.ms  https://*.clarity.ms  https://sentry.io  https://*.sentry.io  https://trustpilot.com  https://*.trustpilot.com  https://trustedshops.com  https://*.trustedshops.com  https://etrusted.com  https://*.etrusted.com    https://biano.com  https://*.biano.com  https://biano.cz  https://*.biano.cz  https://bianopixel.com  https://*.bianopixel.com  https://pinimg.com  https://*.pinimg.com  https://capig.stape.host;script-src  'self'    https://*.bimago.com  https://bimago.com  https://*.bimago.cz  https://bimago.cz  https://*.bimago.es  https://bimago.es  https://*.bimago.at  https://bimago.at  https://*.bimago.art  https://bimago.art  https://*.bimago.co.uk  https://bimago.co.uk  https://*.bimago.se  https://bimago.se  https://*.bimago.pl  https://bimago.pl  https://*.bimago.de  https://bimago.de  https://*.bimago.fr  https://bimago.fr  https://*.bimago.it  https://bimago.it  https://*.bimago.nl  https://bimago.nl  https://*.bimago.pt  https://bimago.pt    https://adyen.com  https://*.adyen.com  https://paypal.com  https://*.paypal.com  https://pay.google.com/gp/p/js/pay.js      https://google.*  https://*.google.*  https://gstatic.com  https://*.gstatic.com  https://googletagmanager.com  https://*.googletagmanager.com  https://googleadservices.com  https://*.googleadservices.com  https://googlesyndication.com  https://*.googlesyndication.com  https://googleapis.com  https://*.googleapis.com  https://doubleclick.net  https://*.doubleclick.net  https://google-analytics.com  https://*.google-analytics.com  https://bing.*  https://*.bing.*  https://facebook.*  https://*.facebook.*  https://pinterest.*  https://*.pinterest.*  https://exponea.com  https://*.exponea.com  https://cookiebot.com  https://*.cookiebot.com  https://clarity.ms  https://*.clarity.ms  https://sentry.io  https://*.sentry.io  https://trustpilot.com  https://*.trustpilot.com  https://trustedshops.com  https://*.trustedshops.com  https://etrusted.com  https://*.etrusted.com    https://biano.com  https://*.biano.com  https://biano.cz  https://*.biano.cz  https://bianopixel.com  https://*.bianopixel.com  https://pinimg.com  https://*.pinimg.com  https://capig.stape.host;frame-src  'self'  https://*;frame-ancestors  https://acss-cms.prod.artgeist.co;default-src  'self';img-src  'self'  data:  blob:  https://*;media-src  'self'  data:  blob:  https://*;style-src  'self'  'unsafe-inline'  https://*;object-src  'none';font-src  'self'  data:  https://*;navigate-to  'self'  https://*;base-uri  'self'  https://*;worker-src  'self';manifest-src  'self'; 1
frame-ancestors *.hana.ondemand.com 'self'; object-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; media-src live-agrinet-m2.vaimo.net js.paystack.co *.zdassets.com 'self' 'unsafe-inline'; font-src live-agrinet-m2.vaimo.net https://static.klaviyo.com js.paystack.co fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.klevu.com *.ksearchnet.com https://fonts.gstatic.com *.cloudflare.com *.googleapis.com *.zopim.com *.tawk.to *.jsdelivr.net media.flixfacts.com 'unsafe-inline' data: data: 'self' 'unsafe-inline'; style-src live-agrinet-m2.vaimo.net js.paystack.co fonts.googleapis.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com *.googleapis.com https://hcaptcha.com https://*.hcaptcha.com assets.braintreegateway.com *.cloudflare.com *.jsdelivr.net www.gstatic.com media.flixcar.com 'unsafe-inline' data: https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; connect-src static-forms.klaviyo.com live-agrinet-m2.vaimo.net js.paystack.co geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://*.ingest.sentry.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com api.paystack.co plugin-tracker.paystackintegrations.com *.testfreaks.com *.nosto.com *.hotjar.io *.hotjar.com *.doubleclick.net *.zendesk.com *.tawk.to wss://*.tawk.to *.tawk.link *.addthis.com *.addthisedge.com *.what3words.com *.googleapis.com vsb111.tawk.to ekr.zdassets.com api.magento.com commerce.adobedc.net app.mobicredwidget.co.za wss://widget-mediator.zopim.com bam.nr-data.net *.googletagmanager.com security-hub.vaimo.network 'unsafe-eval' data: 'self' 'unsafe-inline'; form-action live-agrinet-m2.vaimo.net js.paystack.co geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; frame-src live-agrinet-m2.vaimo.net js.paystack.co geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * checkout.paystack.com standard.paystack.co *.nosto.com *.issuu.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.criteo.net *.criteo.com *.addthis.com *.facebook.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; img-src live-agrinet-m2.vaimo.net js.paystack.co widgets.magentocommerce.com 'unsafe-inline' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com *.google.com https://*.googleapis.com https://*.googleusercontent.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: *.cloudflare.com *.google.lv *.google.co.za *.google.com.na *.google.na *.zopim.com *.nosto.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.zopim.io *.sfdr.co sfdr.co *.tawk.to tawk.link *.tawk.link *.addthis.com *.jsdelivr.net *.facebook.com *.azurewebsites.net maps.googleapis.com app.mobicredwidget.co.za amcglobal.sc.omtrdc.net media.flixcar.com rt.flix360.com assets.secure.checkout.visa.com data: 'self' 'unsafe-inline'; script-src www.youtube.com live-agrinet-m2.vaimo.net js.paystack.co geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://browser.sentry-cdn.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.klevu.com *.ksearchnet.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.zopim.com *.videoly.co sfdr.co *.cnetcontent.com *.cloudfront.net *.klevu.com *.google.lv *.google.co.za *.google.com.na *.google.na *.cloudflare.com *.cloudflareinsights.com *.nosto.com *.hotjar.com *.googletagmanager.com *.criteo.net *.criteo.com *.sfdr.co *.tawk.to *.tawk.link *.jsdelivr.net *.addthis.com *.addthisedge.com *.moatads.com *.mouseflow.com *.facebook.com *.what3words.com maps.googleapis.com commerce.adobedtm.com magento-recs-sdk.adobe.net static.zdassets.com app.mobicredwidget.co.za www.gstatic.com connect.facebook.net bam.nr-data.net js.testfreaks.com media.flixfacts.com media.flixcar.com security-hub.vaimo.network 'self' 'unsafe-inline' 'unsafe-eval'; 1
default-src 'self'; script-src 'self' 'nonce-srMzKAa1fRZW4P6tYjtJwQ==' 'strict-dynamic' https://metrics.fixami.be https://*.hotjar.com https://*.mypurecloud.de https://*.kindlycdn.com https://*.exponea.com https://www.youtube.com https://s.ytimg.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https:; frame-src 'self' https://*.adyen.com https://*.paypal.com https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://*.adyen.com https://*.paypal.com; frame-ancestors 'none'; report-uri /api/csp-report; report-to csp-endpoint 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; img-src 'self' data: https:; font-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self'; frame-src https://www.google.com 1
default-src 'self' wss: *.gravatar.com *.civicplus.com *.civicplus.pro *.civic.place *.civicclerk.com engage6.azureedge.net *.audioeye.com *.pendo.io *.zdassets.com *.zendesk.com *.zopim.com *.arcgis.com *.arcgisonline.com *.services.visualstudio.com *.monitor.azure.com *.googleapis.com *.googletagmanager.com *.google-analytics.com use.fontawesome.com *.google.com *.gstatic.com gstatic.com cdnjs.cloudflare.com static.cloudflareinsights.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.publicstuff.com *.googletagmanager.com *.civicplus.com *.civicplus.pro *.civicclerk.com engage6.azureedge.net *.audioeye.com *.pendo.io *.zdassets.com *.zendesk.com *.zopim.com *.arcgis.com *.arcgisonline.com *.services.visualstudio.com *.monitor.azure.com *.googleapis.com *.googletagmanager.com *.google-analytics.com use.fontawesome.com *.google.com *.gstatic.com gstatic.com cdnjs.cloudflare.com static.cloudflareinsights.com connect.facebook.net static.addtoany.com https://widgets.nrel.gov *.openstreetmap.org cdn-images.mailchimp.com platform.twitter.com blob:; object-src 'self' 'unsafe-inline' 'unsafe-eval' translate.googleapis.com iframe.publicstuff.com; style-src 'self' 'unsafe-inline' iframe.publicstuff.com  *.civicplus.com *.civicplus.pro *.civicclerk.com *.civic.place engage6.azureedge.net *.audioeye.com *.pendo.io *.zdassets.com *.zendesk.com *.zopim.com *.arcgis.com *.arcgisonline.com *.services.visualstudio.com *.monitor.azure.com *.googleapis.com *.googletagmanager.com *.google-analytics.com use.fontawesome.com *.google.com *.gstatic.com gstatic.com cdnjs.cloudflare.com static.cloudflareinsights.com *.ctctcdn.com cdn-images.mailchimp.com data:; img-src 'self' 'unsafe-inline' iframe.publicstuff.com *.civicplus.com *.civicplus.pro *.civicclerk.com *.civic.place engage6.azureedge.net *.audioeye.com *.pendo.io *.zdassets.com *.zendesk.com *.zopim.com *.arcgis.com *.arcgisonline.com *.services.visualstudio.com *.monitor.azure.com *.googleapis.com *.googletagmanager.com *.google-analytics.com use.fontawesome.com *.google.com *.gstatic.com gstatic.com cdnjs.cloudflare.com static.cloudflareinsights.com www.facebook.com https://widgets.nrel.gov www.facebook.com *.openstreetmap.org cdn-images.mailchimp.com i.ytimg.com data:; media-src 'self' translate.googleapis.com iframe.publicstuff.com data:; frame-src 'self' 'unsafe-inline' iframe.publicstuff.com *.youtube.com *.airtable.com *.swagit.com *.google.com *.civicplus.com *.novusagenda.com *.publicstuff.com *.audioeye.com acg.is *.maps.arcgis.com https://www.google.com/maps/embed *.googletagmanager.com https://www.youtube.com/embed https://www.youtube-nocookie.com/embed static.addtoany.com www.facebook.com m.facebook.com my.matterport.com ltfl.librarything.com player.vimeo.com *.granicus.com data:; frame-ancestors 'self' *.civicplus.com *.civicplus.pro *.civic.place *.civicclerk.com; child-src 'self' 'unsafe-inline' iframe.publicstuff.com *.youtube.com *.airtable.com *.swagit.com *.google.com *.civicplus.com *.novusagenda.com *.publicstuff.com *.audioeye.com acg.is *.maps.arcgis.com https://www.google.com/maps/embed *.googletagmanager.com https://www.youtube.com/embed https://www.youtube-nocookie.com/embed static.addtoany.com www.facebook.com m.facebook.com my.matterport.com ltfl.librarything.com player.vimeo.com *.granicus.com data:; font-src 'self' 'unsafe-inline' 'unsafe-eval' *.civicplus.com *.civicplus.pro *.civicclerk.com engage6.azureedge.net *.audioeye.com *.pendo.io *.zdassets.com *.zendesk.com *.zopim.com *.arcgis.com *.arcgisonline.com *.services.visualstudio.com *.monitor.azure.com *.googleapis.com *.googletagmanager.com *.google-analytics.com use.fontawesome.com *.google.com *.gstatic.com gstatic.com cdnjs.cloudflare.com static.cloudflareinsights.com user.govoutreach.com syndication.twitter.com data:; connect-src 'self' 'unsafe-inline' iframe.publicstuff.com  *.civicplus.com *.civicplus.pro *.civic.place *.civicclerk.com engage6.azureedge.net *.audioeye.com *.pendo.io *.zdassets.com *.zendesk.com *.zopim.com *.arcgis.com *.arcgisonline.com *.services.visualstudio.com *.monitor.azure.com *.googleapis.com *.googletagmanager.com *.google-analytics.com use.fontawesome.com *.google.com *.gstatic.com gstatic.com cdnjs.cloudflare.com static.cloudflareinsights.com stats.g.doubleclick.net; report-uri /report-csp-violation 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://ai.turcademy.com https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://ssl.google-analytics.com https://images.dmca.com https://live.maytap.me; connect-src 'self' https://ai.turcademy.com https://www.google-analytics.com https://analytics.google.com https://live.maytap.me https://ipapi.co; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://tagmanager.google.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; frame-src 'self' https://www.googletagmanager.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self' 1
script-src 'self' 'unsafe-inline' *.wistia.net *.xyplanningnetwork.com *.google.com *.gstatic.com *.googletagmanager.com *.googleapis.com googleapis.com *.cloudfront.net cloudfront.net *.cloudflare.com *.clarity.ms c.bing.com *.facebook.net *.facebook.com *.jsdelivr.net *.hubspot.com *.libsyn.com *.wistia.com browser.sentry-cdn.com *.doubleclick.net *.hsappstatic.net *.hubspotusercontent20.net *.hubspotusercontent-na1.net *.hscollectedforms.net *.usemessages.com *.hsleadflows.net *.hs-scripts.com *.hsadspixel.net *.hs-analytics.net *.hs-banner.com *.hs-banner.net *.hsforms.net *.hsforms.com *.hubspotvideo.com *.hubspotfeedback.com *.hubapi.com *.unpkg.com *.whova.com https://whova.com *.google-analytics.com;   img-src 'self' data: *.xyplanningnetwork.com *.gstatic.com *.google-analytics.com *.s3.us-west-2.amazonaws.com *.wistia.com *.hsforms.net *.hubspotusercontent20.net *.googleapis.com *.googletagmanager.com *.rogerdooley.com *.bing.com *.clarity.ms *.hubspot.com *.hubspot.net *.googleusercontent.com *.hs-forms.com *.hsforms.com *.hubspotusercontent00.net *.hubspotusercontent-na1.net *.w3.org *.whova.com whova.com *.facebook.com *.clarity.ms c.bing.com www.google.com perf-na1.hsforms.com static.hsappstatic.net;   frame-src 'self' xyplanningnetwork.com player.vimeo.com *.xyplanningnetwork.com *.hs-sites.com *.facebook.com *.hsforms.com *.google.com *.doubleclick.net *.googletagmanager.com *.hubspot.com *.hubspotvideo.com *.hubspot.net *.youtube.com *.libsyn.com https://whova.com whova.com *.whova.com;   style-src 'self' 'unsafe-inline' *.xyplanningnetwork.com *.cloudflare.com *.fs1.hubspotusercontent-na1.net *.fontawesome.com *.hubspot.net *.googeapis.com *.googletagmanager.com *.hsappstatic.net *.gstatic.com fonts.googleapis.com;   connect-src 'self' p3gkyij7zdoc76liznvyon3t7q0dtvif.lambda-url.us-east-1.on.aws *.zapier.com *.hsappstatic.net *.xyplanningnetwork.com *.cloudflare.com *.googleapis.com *.googlesyndication.com aeo-evaluator-production.up.railway.app aeo-optimizer-production.up.railway.app googleadservices.com *.googleadservices.com *.googletagmanager.com hubspot-forms-static-embed.s3.amazonaws.com *.facebook.com *.clarity.ms *.bing.com google.com *.google.com *.wistia.com *.google-analytics.com *.hubspot.com *.doubleclick.net *.hubspot.net *.hubapi.com *.rippling.com *.hsforms.net *.hsforms.com *.hs-banner.com *.hsappstatic.net *.hscollectedforms.net; frame-ancestors 'self' https://*.xyplanningnetwork.com; block-all-mixed-content; 1
base-uri 'self'; default-src 'none'; frame-ancestors 'none'; font-src 'self' https://fonts.gstatic.com; form-action 'self'; frame-src 'self' https://td.doubleclick.net; connect-src 'self' https://swile-privacy.my.onetrust.com https://cdn.cookielaw.org https://static.axept.io https://api.axept.io https://client.axept.io https://swile.containers.piwik.pro https://swile.piwik.pro/ https://adservice.google.com https://googleads.g.doubleclick.net https://www.google.com; img-src 'self' blob: data: https://cdn.cookielaw.org https://static.axept.io https://axeptio.imgix.net https://www.google.fr https://www.googletagmanager.com https://fonts.gstatic.com; manifest-src 'self'; object-src 'none'; report-uri https://csp-report.browser-intake-datadoghq.eu/api/v2/logs?dd-api-key=pub1f7041eb55ec9a12eea50b161be3d8c0&dd-evp-origin=content-security-policy&ddsource=csp-report; report-to csp; script-src 'nonce-YjE0ZDI5ODEtYWUwZi00MjNiLTlmNTUtMGUyMGNlMDliMWRi' 'strict-dynamic' https://static.axept.io; style-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://fonts.googleapis.com 1
object-src 'none';base-uri 'self';script-src 'nonce-xNIaKheUI0DWltiKVcQk7Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-1md01veM4S8hRFYvpky1QA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-0wN9mZJIGmMrZIWYr5kwOw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://www.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://*.doubleclick.net https://*.googleadservices.com https://www.google.com https://www.google.co.in https://*.hubspot.com https://*.hs-scripts.com https://*.hs-analytics.net https://*.hsadspixel.net https://*.hs-banner.com https://*.hsforms.com https://*.hsappstatic.net https://*.hubapi.com https://*.hotjar.com https://*.hotjar.io https://snap.licdn.com https://px.ads.linkedin.com https://connect.facebook.net https://www.facebook.com https://cdn.callrail.com https://*.callrail.com https://*.mida.so https://*.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.googletagmanager.com https://www.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://*.doubleclick.net https://*.googleadservices.com https://www.google.com https://www.google.co.in https://*.hubspot.com https://*.hs-scripts.com https://*.hs-analytics.net https://*.hsadspixel.net https://*.hs-banner.com https://*.hsforms.com https://*.hsappstatic.net https://*.hubapi.com https://*.hotjar.com https://*.hotjar.io https://snap.licdn.com https://px.ads.linkedin.com https://connect.facebook.net https://www.facebook.com https://cdn.callrail.com https://*.callrail.com https://*.mida.so https://*.googleapis.com wss://*.hotjar.com wss://*.hotjar.io; frame-src 'self' https://*.hubspot.com https://*.doubleclick.net https://www.youtube.com https://player.vimeo.com https://*.google.com; media-src 'self' blob: https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https://*.hubspot.com; upgrade-insecure-requests 1
object-src 'none';base-uri 'self';script-src 'nonce-pZwLIFJvsPWjzNCDu61ZVA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net *.cloudflare.com *.trustedshops.com *.cookiebot.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.cookiebot.com *.consentmanager.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com https://firebasestorage.googleapis.com https://api.mapbox.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.google.com *.google.de *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cookiebot.com *.consentmanager.net *.shopvote.de *.hsforms.net *.hsforms.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com tagmanager.google.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com widget.freshworks.com m2epro.freshdesk.com *.avada.io *.cloudflare.com *.google-analytics.com *.googleads.* *.googletagmanager.com *.shopvote.de *.fontawesome.com *.cookiebot.com *.consentmanager.net *.hsforms.net *.hsforms.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com https://fonts.bunny.net *.cloudflare.com *.gstatic.com *.cookiebot.com *.consentmanager.net *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com https://www.google-analytics.com *.googleapis.com widget.freshworks.com m2epro.freshdesk.com https://get.geojs.io *.avada.io autocomplete2.postdirekt.de *.cloudflare.com *.google-analytics.com *.cookiebot.com *.consentmanager.net *.shopvote.de t.elasticsuite.io *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' ajax.googleapis.com cdn.jsdelivr.net connect.facebook.net googleads.g.doubleclick.net js.stripe.com m.stripe.network player.vimeo.com pop.calcworkshop.com scripts.clarity.ms ssl.p.jwpcdn.com tpc.googlesyndication.com www.clarity.ms www.google.com www.googleadservices.com www.googletagmanager.com www.gstatic.com www.shopperapproved.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: cdn.jsdelivr.net fonts.gstatic.com ssl.p.jwpcdn.com www.shopperapproved.com; connect-src 'self' data: *.akamaized.net *.calcworkshop.com *.clarity.ms *.vimeocdn.com www.google.com www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bs www.google.ca www.google.cg www.google.ch www.google.cl www.google.cm www.google.co.ao www.google.co.id www.google.co.il www.google.co.cr www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zm www.google.co.zw www.google.com.af www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.py www.google.com.vn www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gr www.google.gy www.google.hn www.google.hr www.google.hu www.google.ie www.google.iq www.google.is www.google.it www.google.jo www.google.kg www.google.kz www.google.la www.google.lk www.google.lt www.google.lu www.google.md www.google.mk www.google.mn www.google.mu www.google.mv www.google.mw www.google.nl www.google.no www.google.pl www.google.ps www.google.ro www.google.rs www.google.ru www.google.rw www.google.se www.google.si www.google.sk www.google.tl www.google.tt ad.doubleclick.net adservice.google.com analytics.google.com api.stripe.com cdn.jsdelivr.net entitlements.jwplayer.com fps.ezdrm.com googleads.g.doubleclick.net m.stripe.com o4510312440987648.ingest.us.sentry.io player.vimeo.com playready.ezdrm.com prd.jwpltx.com region1.analytics.google.com ssl.p.jwpcdn.com stats.g.doubleclick.net widevine-dash.ezdrm.com www.facebook.com www.google-analytics.com www.google.com www.googleadservices.com www.googletagmanager.com; media-src 'self' data: blob: *.akamaized.net *.calcworkshop.com *.vimeocdn.com player.vimeo.com; frame-src 'self' bid.g.doubleclick.net connect.facebook.net g.jwpsrv.com js.stripe.com m.stripe.network player.vimeo.com tpc.googlesyndication.com vimeo.com www.facebook.com www.google.com www.googletagmanager.com www.youtube.com; worker-src 'self' blob:; form-action 'self' connect.facebook.net www.facebook.com; base-uri 'self'; object-src 'none'; report-uri https://calcworkshop.report-uri.com/r/d/csp/reportOnly 1
default-src 'self' 'unsafe-inline' https:; report-uri https://reporturi.savagescape.com/report.php; report-to default 1
report-to https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubc9543ec1b1c491d9dca1eb02c4cfd428&dd-evp-origin=content-security-policy&ddsource=csp-report; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubc9543ec1b1c491d9dca1eb02c4cfd428&dd-evp-origin=content-security-policy&ddsource=csp-report; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' code.jquery.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com *.googleapis.com *.googleoptimize.com *.google-analytics.com *.googletagmanager.com *.datadoghq.com www.datadoghq-browser-agent.com *.gstatic.com maps.googleapis.com ajax.googleapis.com edge.fullstory.com fullstory.com cdn.optimizely.com lptag.liveperson.net *.lpsnmedia.net *.liveperson.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com maxcdn.bootstrapcdn.com; font-src 'self' fonts.gstatic.com fonts.googleapis.com; img-src 'self' data: blob: *.google-analytics.com *.googletagmanager.com *.datadoghq.com maps.googleapis.com *.gstatic.com fullstory.com *.inventoryrsc.com media.chromedata.com http://*.cudlautosmart.com https://*.cudlautosmart.com http://*.carbook.com https://*.carbook.com https://s3.amazonaws.com; connect-src 'self' *.google-analytics.com *.googletagmanager.com *.datadoghq.com https://browser-intake-us3-datadoghq.com https://browser-intake-datadoghq.com www.datadoghq-browser-agent.com maps.googleapis.com *.gstatic.com *.fullstory.com rs.fullstory.com *.cudl.com *.cudlautosmart.com *.cudirect.com *.azconfig.io accdn.lpsnmedia.net; frame-src 'self' *.kbb.com *.kelleybluebook.com maps.googleapis.com www.google.com www.carfax.com *.lpsnmedia.net www.blackbookportals.com www.jdpowervalues.com www.nadaguidesstore.com www.jdpowerwindowlink.com brandfolder.com; frame-ancestors 'self'; object-src 'none'; manifest-src 'self'; media-src 'self'; worker-src 'self' blob:; form-action 'self'; base-uri 'self'; block-all-mixed-content; upgrade-insecure-requests; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://api.mapbox.com https://unpkg.com https://www.googletagmanager.com https://static.axept.io https://client.axept.io https://koi-3QNEK9I8Q4.marketingautomation.services blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://unpkg.com https://api.mapbox.com https://fonts.axept.io https://static.axept.io https://www.gstatic.com; img-src 'self' data: blob: https://www.google.fr https://www.googletagmanager.com https://axeptio.imgix.net https://stats.g.doubleclick.net https://secure.gravatar.com https://maps.google.com https://*.gstatic.com; font-src 'self' https://fonts.gstatic.com https://fonts.axept.io; connect-src 'self' https://region1.analytics.google.com https://region1.google-analytics.com https://client.axept.io https://api.axept.io https://stats.g.doubleclick.net https://api.mapbox.com https://*.tiles.mapbox.com https://events.mapbox.com; frame-src 'self' https://www.youtube.com; worker-src 'self' blob:; frame-ancestors 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com maxcdn.bootstrapcdn.com *.hotjar.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com www.googletagmanager.com *.hotjar.com www.google.com secure.pay1.de *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com https://www.mollie.com www.google-analytics.com *.google.com www.facebook.com *.hotjar.com stats.g.doubleclick.net api.omappapi.com www.xtento.com cdn.xtento.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.mollie.com *.googletagmanager.com connect.facebook.net www.clarity.ms *.clarity.ms static.hotjar.com script.hotjar.com polyfill.io maps.googleapis.com secure.pay1.de cdn.klarna.com a.opmnstr.com diffuser-cdn.app-us1.com www.google.com prism.app-us1.com www.gstatic.com ajax.googleapis.com cdnjs.cloudflare.com trackcmp.net plausible.io *.posthog.com *.i.posthog.com www.xtento.com cdn.xtento.com *.hsforms.net *.hsforms.com *.gstatic.com https://browser.sentry-cdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com maxcdn.bootstrapcdn.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com api.friendlycaptcha.com eu-api.friendlycaptcha.eu https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.google-analytics.com *.googletagmanager.com analytics.google.com www.facebook.com connect.facebook.net *.clarity.ms *.hotjar.com *.hotjar.io api.omappapi.com sentry.smdm.at *.ingest.sentry.io plausible.io *.posthog.com *.i.posthog.com t.elasticsuite.io *.hsforms.net *.hsforms.com https://*.ingest.sentry.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-eval' *.osha.europa.eu www.gstatic.com www.google.com cdn.jsdelivr.net europa.eu platform.twitter.com www.youtube.com cdnjs.cloudflare.com webtools.europa.eu translate.googleapis.com translate-pa.googleapis.com static.addtoany.com translate.google.com; style-src 'self' 'unsafe-inline' www.gstatic.com europa.eu webtools.europa.eu fonts.googleapis.com; img-src 'self' data: *.osha.europa.eu abs.twimg.com pbs.twimg.com europa.eu syndication.twitter.com webtools.europa.eu *.google.com *.gstatic.com i.ytimg.com; media-src 'self' data:; connect-src 'self' translate.googleapis.com translate-pa.googleapis.com webtools.europa.eu europa.eu piwik.osha.europa.eu webstats.osha.europa.eu www.google.com; frame-src 'self' platform.twitter.com www.google.com syndication.twitter.com www.youtube.com www.youtube-nocookie.com euosha.gestmax.eu webtools.europa.eu piwik.osha.europa.eu webstats.osha.europa.eu; worker-src 'none'; font-src 'self' data: fonts.gstatic.com cdnjs.cloudflare.com themes.googleusercontent.com use.typekit.net; report-uri https://stat.alberora.eu/stat/CSP.php; 1
default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; img-src 'self' https: data: blob:; frame-ancestors 'self'; 1
object-src 'none';base-uri 'self';script-src 'nonce-5fkLFGJy9vZauMguBXYuBg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.klarnacdn.net *.fontawesome.com *.alothemes.com *.magepow.com data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.klarnaevt.com *.google.de *.klarna.com *.doubleclick.net secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.klarna.com *.klarnaevt.com *.klarnacdn.net *.google.de *.alothemes.com *.magepow.com https://api.mapbox.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.google.de *.doubleclick.net https://cdn.jsdelivr.net *.alothemes.com *.magepow.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.klarnacdn.net *.fontawesome.com *.alothemes.com *.magepow.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.doubleclick.net *.google.de *.alothemes.com *.magepow.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' wchat.freshchat.com www.google-analytics.com www.googleoptimize.com www.googletagmanager.com sg1.wzrkt.com connect.facebook.net snap.licdn.com www.googleadservices.com static.clevertap.com script.accesstrade.global d2r1yp2w7bby2u.cloudfront.net app.sandbox.midtrans.com app.midtrans.com js.xendit.co js.stripe.com analytics.tiktok.com www.recaptcha.net www.gstatic.com; report-uri https://o1085556.ingest.sentry.io/api/6096424/security/?sentry_key=f1c3fa347b7849b698e3f72e96c9872e 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com *.fontawesome.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com www.pavingandflooring.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.searchanise.com *.searchserverapi.com *.searchserverapi1.com *.twitter.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.pavingandflooring.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com www.pavingandflooring.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.searchanise.com *.searchserverapi.com *.searchserverapi1.com *.twitter.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com *.awin1.com *.zenaps.com *.fls.doubleclick.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com account.fetchify.com odoo.westminsterstone.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.trustpilot.com www.pavingandflooring.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.twitter.com *.twimg.com www.google.ru www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com s3.amazonaws.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com *.awin1.com *.zenaps.com *.wepowerconnections.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ * odoo.westminsterstone.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.pavingandflooring.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com searchanise-ef84.kxcdn.com s3.amazonaws.com ajax.aspnetcdn.com www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com *.searchanise.com api.amplitude.com *.twitter.com *.twimg.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com pinterest.com www.pinterest.com s.pinimg.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com widget.freshworks.com m2epro.freshdesk.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com cc-cdn.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ * odoo.westminsterstone.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.trustpilot.com www.pavingandflooring.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com searchanise-ef84.kxcdn.com s3.amazonaws.com *.twitter.com ton.twimg.com widget.freshworks.com m2epro.freshdesk.com cc-cdn.com https://static.klaviyo.com *.fontawesome.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com www.pavingandflooring.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com www.pavingandflooring.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.amplitude.com stats.g.doubleclick.net www.google-analytics.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de www.apptrian.com pinterest.com www.pinterest.com ct.pinterest.com *.wepowerconnections.com https://the.sciencebehindecommerce.com widget.freshworks.com m2epro.freshdesk.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ odoo.westminsterstone.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com www.pavingandflooring.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com www.pavingandflooring.com http: https: blob: 'self' 'unsafe-inline'; default-src www.pavingandflooring.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.pusher.com https://cdn.agora.io https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://www.youtube.com https://www.google.com https://www.gstatic.com https://apis.google.com https://js.stripe.com https://player.vimeo.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: blob: https://thehistoricfaithapp.b-cdn.net https://thf-images.b-cdn.net https://antenicenefathers.com https://www.gravatar.com https://*.wp.com https://*.googleapis.com https://*.gstatic.com https://*.youtube.com https://i.ytimg.com https://ui-avatars.com; media-src 'self' blob: https://thehistoricfaithapp.b-cdn.net https://*.cloudfront.net; connect-src 'self' wss://*.pusher.com https://*.pusher.com https://*.agora.io wss://*.agora.io https://thehistoricfaithapp.b-cdn.net https://*.cloudfront.net https://accounts.google.com https://api.stripe.com https://messenger-upload.thehistoricfaith.workers.dev https://api.languagetool.org; frame-src https://www.youtube.com https://accounts.google.com https://js.stripe.com https://player.vimeo.com; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self'; connect-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; form-action 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com *.google-analytics.com *.analytics.google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; img-src 'self' data: i.ytimg.com img.youtube.com *.media-amazon.com images-na.ssl-images-amazon.com www.amazon.co.jp secure.gravatar.com s.w.org www.googletagmanager.com; frame-src 'self' www.youtube.com www.youtube-nocookie.com; font-src 'self' fonts.gstatic.com data:; connect-src 'self' *.google-analytics.com *.analytics.google.com www.googletagmanager.com; object-src 'none'; base-uri 'self'; form-action 'self' 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' http://dmaps.daum.net https://ssl.daumcdn.net https://cdn.gtranslate.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://developers.kakao.com https://maps.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com 1
script-src 'nonce-QSK+nHMUnNmFN7PUr2SOLQ==' 'self' 'unsafe-eval' cdn.orsted.com *.googletagmanager.com *.app.cookieinformation.com cdn.appdynamics.com *.googletagmanager.com *.gstatic.com *.googleoptimize.com www.googleadservices.com *.googleapis.com *.bing.com *.doubleclick.net *.t.co *.pardot.com *.youtube.com *.linkedin.com *.twitter.com *.globenewswire.com *.23video.com delivery.twentythree.com orsted.containers.piwik.pro orsted.piwik.pro *.crazyegg.com unpkg.com cs.lf-discover.com *.puzzel.com *.arcgis.com code.jquery.com *.lfeeder.com orsted-global-graduate-programme.simplecast.com omny.fm cdnjs.cloudflare.com *.bootstrapcdn.com *.defgo.com *.defgo.net *.vimeo.com presscloud.com *.ritzau.dk *.simplecast.com *.elnet.danskenergi.dk *.sli.do *.audioboom.com *.licdn.com *.adsrvr.org *.soundcloud.com *.google.com *.google.com.my *.google.nl *.google.dk *.facebook.net;       style-src 'nonce-QSK+nHMUnNmFN7PUr2SOLQ==' 'self' cdn.orsted.com fonts.googleapis.com;       style-src-attr 'unsafe-inline' cdn.orsted.com;       img-src 'self' data: cdn.orsted.com *.azureedge.net *.youtube.com *.23video.com delivery.twentythree.com www.googletagmanager.com *.lfeeder.com *.linkedin.com *.doubleclick.net *.pardot.com;       media-src 'self' blob: cdn.orsted.com *.youtube.com *.23video.com delivery.twentythree.com;       font-src 'self' data: fonts.gstatic.com cdn.orsted.com;       frame-src 'self' *.app.cookieinformation.com *.youtube.com *.23video.com delivery.twentythree.com *.google.com *.google.nl *.googletagmanager.com *.doubleclick.net *.pardot.com;       connect-src 'self' *.app.cookieinformation.com *.euroland.com *.eum-appdynamics.com *.googletagmanager.com *.google.com *.doubleclick.net *.googleadservices.com *.crazyegg.com *.linkedin.com orsted.piwik.pro *.pardot.com *.signalfx.com;       worker-src 'self'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' assets.ceros.com media.ceros.com view.ceros.com play.vidyard.com assets.vidyard.com www.googletagmanager.com snap.licdn.com up.pixel.ad www.google-analytics.com *.hs-sites.com *.hubspotusercontent-na1.net js.hs-banner.com js.hs-analytics.net js.hubspot.com *.hsappstatic.net js.hscollectedforms.net ajax.googleapis.com googleads.g.doubleclick.net static.doubleclick.net www.google.com vidassets.terminus.services cookie-script.com *.cookie-script.com cdn.rollbar.com kit.fontawesome.com www.gstatic.com www.youtube.com platform.linkedin.com connect.facebook.net platform.twitter.com; object-src 'none'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://challenges.cloudflare.com https://www.googletagmanager.com https://static.cloudflareinsights.com; object-src 'none'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://*.tile.openstreetmap.org https://tile.openstreetmap.org https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com; frame-src https://challenges.cloudflare.com; frame-ancestors 'self'; font-src 'self'; connect-src 'self' https://challenges.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://cloudflareinsights.com https://static.cloudflareinsights.com; report-uri /report-csp-violation 1
font-src maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://seo.mageplaza.com https://services.paytrail.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ js.mollie.com *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com https://resources.paytrail.com flagpedia.net https://www.mollie.com *.gstatic.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com *.mgt.com *.gstatic.com maps.googleapis.com js.mollie.com https://services.paytrail.com https://www.googletagmanager.com tagmanager.google.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com maxcdn.bootstrapcdn.com *.gstatic.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com https://get.geojs.io *.mgt.com www.gstatic.com maps.googleapis.com https://services.paytrail.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.mailchimp.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googlesyndication.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://*.dpdconnect.nl js.mollie.com *.google.nl *.google.be *.googleapis.com *.doubleclick.net *.googlesyndication.com consentcdn.cookiebot.eu consentcdn.cookiebot.com consent.cookiebot.com *.googletagmanager.com sst.epoxywinkel.nl sst.epoxywinkel.be sst.epoxidharz-shop.de bat.bing.com *.mailchimp.com www.kiyoh.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com https://www.mollie.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com 'self' data: *.google.com *.google.bg *.google.nl *.google.be *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com img.sct.eu1.usercentrics.eu sst.epoxywinkel.nl sst.epoxywinkel.be sst.epoxidharz-shop.de bat.bing.com *.mailchimp.com www.epoxywinkel.nl *.taggrs.io https://firebasestorage.googleapis.com *.amazonaws.com *.hsforms.net *.hsforms.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com https://maps.googleapis.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com *.gstatic.com https://*.dpdconnect.nl js.mollie.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.google.bg *.google.nl *.google.be *.googletagmanager.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com consent.cookiebot.eu sst.epoxywinkel.nl sst.epoxywinkel.be sst.epoxidharz-shop.de bat.bing.com *.clarity.ms consentcdn.cookiebot.eu consentcdn.cookiebot.com consent.cookiebot.com *.mailchimp.com www.kiyoh.com *.taggrs.io *.avada.io *.shopify.com *.sendcloud.sc *.jsdelivr.net *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.mailchimp.com https://fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://maps.googleapis.com https://player.vimeo.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com *.facebook.net *.google.nl *.google.be *.google.co.in *.doubleclick.net *.googlesyndication.com consentcdn.cookiebot.eu consentcdn.cookiebot.com sst.epoxywinkel.nl sst.epoxywinkel.be sst.epoxidharz-shop.de bat.bing.com *.clarity.ms *.mailchimp.com eventcollector.mcf-prod.a.intuit.com https://get.geojs.io *.avada.io *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src data.serverkast.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action data.serverkast.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors data.serverkast.com *.multisafepay.com https://pay.google.com 'self'; frame-src data.serverkast.com bid.g.doubleclick.net player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.sharethis.com *.google.com *.doubleclick.net *.facebook.com *.multisafepay.com https://pay.google.com *.apps.ladesk.com *.hubspot.com *.pinterest.com speelplezier.ladesk.com *.bing.net *.bing.com js.mollie.com 'self' 'unsafe-inline'; img-src data.serverkast.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com *.sharethis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.multisafepay.com https://at19.net https://bdt9.net https://ds1.nl https://dt51.net https://dt61.net https://fr135.net https://glp8.net https://jdt8.net https://jf79.net https://hs82.net https://lt45.net https://mt74.net https://ndt5.net https://rkn3.net *.bing.com *.bing.net *.cloudimg.io *.contentsquare.net *.etrusted.com *.google-analytics.com *.googlesyndication.com *.googleusercontent.com *.hsforms.com *.hubspot.com *.imgix.net *.linkedin.com *.premiere.page *.trustedshops.com www.google.be www.google.de www.google.nl flagpedia.net https://www.mollie.com *.tile.openstreetmap.org data: 'self' 'unsafe-inline'; script-src data.serverkast.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.sharethis.com *.google.com *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.multisafepay.com https://pay.google.com *.hs-analytics.net *.usemessages.com *.hs-scripts.com *.bing.net *.beslist.nl *.bing.com *.cloudflare.com *.contentsquare.net *.etrusted.com *.getqonfi.com *.google-analytics.com *.googlesyndication.com *.hotjar.com *.hs-banner.com *.hscollectedforms.net *.licdn.com *.pinimg.com *.pinterest.com *.premiere.page *.tiktok.com *.trustedshops.com *.webwinkelkeur.nl *.ladesk.com https://cdn.polyfill.io https://browser.sentry-cdn.com *.gstatic.com maps.googleapis.com js.mollie.com pay.google.com applepay.cdn-apple.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src data.serverkast.com *.sharethis.com *.googleapis.com *.doubleclick.net *.facebook.com *.multisafepay.com *.etrusted.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' 'unsafe-inline'; object-src data.serverkast.com 'self' 'unsafe-inline'; media-src data.serverkast.com 'self' 'unsafe-inline'; manifest-src data.serverkast.com 'self' 'unsafe-inline'; connect-src data.serverkast.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.sharethis.com *.google-analytics.com *.facebook.com *.facebook.net *.multisafepay.com *.beslist.nl *.bing.com *.bing.net *.contentsquare.net *.doubleclick.net *.etrusted.com *.getqonfi.com *.google.com *.googlesyndication.com *.hotjar.com *.hotjar.io *.hs-banner.com *.hscollectedforms.net *.hsforms.com *.hubspot.com *.linkedin.com *.pinterest.com *.premiere.page *.tiktok.com *.trustedshops.com www.google.be www.google.nl https://*.ingest.sentry.io www.gstatic.com maps.googleapis.com *.tile.openstreetmap.org 'self' 'unsafe-inline'; child-src data.serverkast.com http: https: blob: 'self' 'unsafe-inline'; default-src data.serverkast.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri data.serverkast.com 'self' 'unsafe-inline'; report-uri https://394bd828-e8ee-4169-91b3-7b587c6eb99c.sansec.watch/; report-to report-endpoint; 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://hm.baidu.com https://static.wbolt.com https://www.recaptcha.net https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://static.wbolt.com https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://static.tapfiliate.com https://connect.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; frame-src 'self' https://www.google.com https://creative.mavrtracktor.com; connect-src 'self' https://*.google-analytics.com https://www.googletagmanager.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.i.posthog.com https://*.posthog.com https://connect.facebook.net https://websdk.appsflyersdk.com https://js.stripe.com https://*.js.stripe.com https://static.shoplive.cloud https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://challenges.cloudflare.com https://hcaptcha.com https://*.hcaptcha.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://www.googletagmanager.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.facebook.com https://www.paypalobjects.com https://*.stripe.com https://www.google.com https://www.gstatic.com; font-src 'self' data: https://fonts.gstatic.com; media-src 'self' blob: https:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'none'; child-src https://auth.privy.io https://verify.walletconnect.com https://verify.walletconnect.org https://coinflow.cash https://*.coinflow.cash https://js.stripe.com https://*.js.stripe.com https://hooks.stripe.com https://www.googletagmanager.com https://static.shoplive.cloud https://www.google.com https://www.recaptcha.net https://challenges.cloudflare.com https://hcaptcha.com https://*.hcaptcha.com; frame-src https://auth.privy.io https://verify.walletconnect.com https://verify.walletconnect.org https://coinflow.cash https://*.coinflow.cash https://js.stripe.com https://*.js.stripe.com https://hooks.stripe.com https://www.googletagmanager.com https://static.shoplive.cloud https://www.google.com https://www.recaptcha.net https://challenges.cloudflare.com https://hcaptcha.com https://*.hcaptcha.com; connect-src 'self' data: https: https://*.appsflyer.com https://*.appsflyersdk.com wss:; worker-src 'self' blob:; manifest-src 'self' 1
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; frame-src 'self' https://www.openstreetmap.org; object-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.bunny.net; font-src 'self' data: https://fonts.gstatic.com https://fonts.bunny.net; img-src 'self' data: blob: https://cdn.vidaxl.com https://vdxl.im; connect-src 'self'; media-src 'self' data: blob:; worker-src 'self' blob: 1
default-src 'self'; script-src 'nonce-teuqZ5Z+chhYUsyzWgQHDg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self' https://cuatro.sim-cdn.nl; img-src * data: blob:; style-src * 'unsafe-inline' blob: https://fonts.bunny.net; font-src 'self' data: https://fonts.bunny.net https://fonts.gstatic.com https://cuatro.sim-cdn.nl https://cuatro.sim-cdn-acceptatie.nl https://cuatro.sim-cdn-test.nl; script-src 'nonce-ZTg4MjhhNTMtM2FjMC00NTlmLThlOTMtN2NiZWQ3OGRmODcy' 'strict-dynamic' 'report-sample'; connect-src *; form-action 'self'; media-src https://*.readspeaker.com https://*.streamlock.net https://storage.googleapis.com https://scribit-pro-hosting.storage.googleapis.com https://scribit-pro.storage.googleapis.com https://app.talkjs.com 'self' blob:; frame-src *; frame-ancestors 'self' https://*.polly.help; worker-src * 'unsafe-inline' blob:; report-uri /api/csp-report 1
font-src *.googleapis.com *.gstatic.com 'self' data: *.fontawesome.com *.cloudflare.com *.bootstrapcdn.com *.hotjar.com *.typekit.net cdn.curator.io static.klaviyo.com maxcdn.bootstrapcdn.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.multisafepay.com https://pay.google.com 'self'; frame-src player.vimeo.com *.youtube.com *.youtube-nocookie.com www.google.com *.chatra.io *.hotjar.com *.facebook.com *.trustpilot.com *.kiyoh.com *.pinterest.com *.criteo.com *.cookiefirst.com *.multisafepay.com https://pay.google.com *.sendcloud.sc *.jsdelivr.net *.weltpixel.com *.googletagmanager.com *.doubleclick.net www.xtento.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: *.vimeocdn.com i.ytimg.com *.youtube.com *.gstatic.com *.googleapis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com * scontent.fzty3-2.fna.fbcdn.net magefan.com cm.magefan.com *.multisafepay.com *.amazonaws.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.cloudflare.com *.twitter.com *.fontawesome.com *.elfsight.com *.chatra.io *.jsdelivr.net chimpstatic.com *.facebook.com *.doubleclick.net *.trustpilot.com s.pinimg.com *.zdassets.com *.google-analytics.com *.feedbackcompany.com *.facebook.net *.hotjar.com *.mailchimp.com *.curator.io *.typekit.net *.clarity.ms *.leadinfo.net *.criteo.com *.googleadservices.com *.cookiefirst.com www.datadoghq-browser-agent.com bat.bing.com *.tidio.co *.tidiochat.com *.iubenda.com js-agent.newrelic.com s7.addthis.com *.multisafepay.com https://pay.google.com *.sendcloud.sc *.googletagmanager.com *.google.com *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.klaviyo.com unpkg.com www.xtento.com cdn.xtento.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.fontawesome.com downloads.mailchimp.com *.cloudflare.com *.bootstrapcdn.com *.mailchimp.com *.jsdelivr.net *.googleapis.com *.curator.io *.cookiefirst.com *.typekit.net maxcdn.bootstrapcdn.com *.multisafepay.com *.sendcloud.sc *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src curatorio.s3.amazonaws.com curator-assets.b-cdn.net video-lga3-2.cdninstagram.com video-iad3-1.xx.fbcdn.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src vimeo.com *.googleapis.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com *.cloudflare.com *.elfsight.com *.instacloud.io *.google-analytics.com *.google.com *.doubleclick.net *.hotjar.com *.hotjar.io ct.pinterest.com *.paypal.com *.zdassets.com *.zendesk.com *.feedbackcompany.com *.curator.io *.clarity.ms *.leadinfo.net *.cookiefirst.com gtm-mm85h6s-nzi2m.uc.r.appspot.com www.google-analytics.com www.google.com maps.googleapis.com *.livechatinc.com www.paypalobjects.com dev.visualwebsiteoptimizer.com www.googletagmanager.com pagead2.googlesyndication.com googleadservices.com rum.ewings.cloud ekr.zdassets.com/ *.multisafepay.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.run.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com v2.zopim.com embed.tawk.to *.commerce-connector.com *.flixcar.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sameday.ro c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.2performant.com *.doubleclick.net *.pinterest.com *.force.com *.facebook.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io tracker.aqurate.ai *.findbar.io shopmania.ro *.openstreetmap.org https://images.unsplash.com t.themarketer.com cdn1.themarketer.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com v2assets.zopim.io *.google.ro *.facebook.com *.widgetwhats.com tawk.link compari.ro ct.pinterest.com *.flix360.com *.flixcar.com *.flix360.io mny.ro *.reddit.com *.redditstatic.com *.criteo.com *.creativecdn.com *.taboola.com *.cartbooster.io *.yimg.com *.bannercrowd.net *.opera.com *.bidswitch.net *.doubleclick.net *.connectad.io *.yahoo.com *.pubmatic.com *.media.net *.casalemedia.com id5-sync.com *.360yield.com *.postrelease.com *.outbrain.com *.smartadserver.com *.teads.tv *.tremorhub.com *.yieldlab.net *.1rx.io *.unrulymedia.com *.demdex.net *.agkn.com *.33across.com *.seedtag.com *.sonobi.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tracker.aqurate.ai *.findbar.io *.sameday.ro unpkg.com/map-fanbox-points@0.0.5/umd/map-fanbox-points.js https://maps.googleapis.com https://player.vimeo.com *.themarketer.com cdn1.themarketer.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com https://www.googletagmanager.com tagmanager.google.com https://pa.7w.ro http://pa.7w.ro *.zdassets.com v2.zopim.com *.facebook.net *.facebook.com attr-2p.com *.widgetwhats.com chimpstatic.com embed.tawk.to *.jsdelivr.net *.hotjar.com *.arukereso.com *.gstatic.com *.clarity.ms *.pinimg.com *.pinterest.com *.enzuzo.com cdn-cookieyes.com *.googlesyndication.com *.commerce-connector.com *.force.com *.salesforceliveagent.com aqurate.ai *.flixcar.com *.flix360.io *.flixfacts.com popupsmart.com *.sharethis.com *.tiktok.com *.omniconvert.com *.2performant.com mny.ro *.redditstatic.com *.criteo.com *.creativecdn.com *.taboola.com *.cartbooster.io *.yimg.com *.bannercrowd.net *.nitelashop.ro 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.findbar.io *.sameday.ro t.themarketer.com cdn1.themarketer.com assets.braintreegateway.com tagmanager.google.com *.googleapis.com *.widgetwhats.com embed.tawk.to *.googletagmanager.com tpc.googlesyndication.com *.cloudfront.net *.commerce-connector.com *.force.com *.popupsmart.com popupsmart.com *.flixcar.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.findbar.io *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com tracker.aqurate.ai *.findbar.io *.fancourier.ro https://maps.googleapis.com https://player.vimeo.com *.themarketer.com cdn1.themarketer.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com https://www.google-analytics.com https://pa.7w.ro http://pa.7w.ro ekr.zdassets.com wss://widget-mediator.zopim.com pagead2.googlesyndication.com *.google.ro googleads.g.doubleclick.net stats.g.doubleclick.net region1.analytics.google.com *.2performant.com *.widgetwhats.com zdata-ro-bellabike.s3.eu-west-1.amazonaws.com *.tawk.to kfea.zendesk.com api.edrone.me *.pinterest.com *.clarity.ms *.commerce-connector.com *.facebook.com *.hotjar.com *.hotjar.io *.sharethis.com *.enzuzo.com *.flixcar.com *.tiktok.com *.omniconvert.com www.google-analytics.com region1.google-analytics.com *.nitelashop.ro *.reddit.com *.creativecdn.com *.yimg.com *.taboola.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src widget-mediator.zopim.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/  https://widget.trustpilot.com;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://appleid.cdn-apple.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com *.myheritage.at https://www.myheritage.de  'unsafe-eval' 'nonce-30a60e3ffc43b52f3bc76c92f8da55a7' 'strict-dynamic' https://widget.trustpilot.com https://invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style  https://widget.trustpilot.com;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io https://www.google.com/recaptcha/enterprise/* https://www.google.com/recaptcha/enterprise/ https://www.google.com/recaptcha/enterprise/clr https://www.google.com/recaptcha/ https://maps.googleapis.com https://people.googleapis.com https://translate-pa.googleapis.com *.myheritage.at https://widget.trustpilot.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:  https://widget.trustpilot.com https://*.trustpilot.com;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=report&canonical_page_id=/company/home/ 1
worker-src 'none'; font-src fonts.gstatic.com use.typekit.net kit.fontawesome.com maxcdn.bootstrapcdn.com https://d3b4nwfy34ee2t.cloudfront.net css.zohocdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' sbiepay.sbi test.epay.sbiuat.bank.in https://www.sbiepay.sbi www.sbiepay.sbi *.cardinalcommerce.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com api.razorpay.com 'self' https://td.doubleclick.net https://securestage.paytmpayments.com https://9618151.fls.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com cdn.razorpay.com 'self' b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com checkout.paypal.com www.facebook.com www.sandbox.paypal.com www.google.co.in c.clarity.ms *.bing.com/* https://*.googleapis.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com https://rum.hlx.page chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com checkout.razorpay.com 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' https://salesiq.zohopublic.in/widget www.sandbox.paypal.com cdn.jsdelivr.net https://www.clarity.ms/tag/jj2l9znc71 https://www.clarity.ms/s/0.7.69/clarity.js https://www.clarity.ms/tag/k45caocwix https://connect.facebook.net/en_US/fbevents.js https://connect.facebook.net/signals/config/471564928839789 https://js.zohocdn.com/salesiq/js/floatbutton1_jpInXe9VDveFPJJRfAolK73kxWVZ9fnhF9uuhrdGNpVho-1tsqriT3evhYJkgBKU_.js www.clarity.ms connect.facebook.net js.zohocdn.com salesiq.zohopublic.in https://d29rw3zaldax51.cloudfront.net *.cloudflare.com https://securestage.paytmpayments.com https://static-staging.paytmpayments.com https://staticpg.paytmpayments.com https://accounts-staging.paytm.in https://d3b4nwfy34ee2t.cloudfront.net https://*.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com downloads.mailchimp.com *.fontawesome.com maxcdn.bootstrapcdn.com d29rw3zaldax51.cloudfront.net d3b4nwfy34ee2t.cloudfront.net css.zohocdn.com 'self' 'unsafe-inline' 'report-sample' https://static-staging.paytmpayments.com 'self' 'unsafe-inline'; object-src none 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com d3b4nwfy34ee2t.cloudfront.net 'self' d29rw3zaldax51.cloudfront.net 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net api.magento.com *.magento-datasolutions.com *.magento-ds.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com lumberjack.razorpay.com lumberjack-metrics.razorpay.com google.com 'self' https://d3b4nwfy34ee2t.cloudfront.net *.cardinalcommerce.com *.clarity.ms wss://vts.zohopublic.in/watchws https://www.google.co.in https://d.clarity.ms/collect https://api.razorpay.com *.paypal.com *.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com 'unsafe-inline' *.google-analytics.com www.sandbox.paypal.com salesiq.zohopublic.in stats.g.doubleclick.net https://securestage.paytmpayments.com https://*.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' z.clarity.ms www.google.com vts.zohopublic.in 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com 'unsafe-inline' data: maxcdn.bootstrapcdn.com *.cloudflare.com *.google.com *.google.co.in *.podium.com *.analyticspodium.com media.rugs.shop static.rugs.shop https://fonts.bunny.net *.alothemes.com *.magepow.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com secure.authorize.net test.authorize.net 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com https://static.addtoany.com/ https://www.googletagmanager.com/ secure.authorize.net test.authorize.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.sharethis.com *.cloudinary.com *.google.com *.facebook.com *.magentocommerce.com *.braintreegateway.com *.googleapis.com *.podium.com *.analyticspodium.com *.google.co.in media.rugs.shop static.rugs.shop http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sharethis.com https://static.addtoany.com/ *.facebook.com *.mm-api.agency *.roomvo.com *.googleadservices.com *.google-analytics.com *.cloudflare.com *.adobedtm.com *.googletagmanager.com *.paypal.com *.gstatic.com *.googleapis.com *.paypalobjects.com *.facebook.net *.podium.com *.analyticspodium.com *.google.co.in *.doubleclick.net *.force.com *.salesforceliveagent.com *.authorize.net media.rugs.shop static.rugs.shop player.vimeo.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io *.shopify.com *.alothemes.com *.magepow.com secure.authorize.net test.authorize.net js.authorize.net jstest.authorize.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com *.fontawesome.com *.googleapis.com maxcdn.bootstrapcdn.com *.mm-api.agency *.roomvo.com *.googleadservices.com *.google-analytics.com *.cloudflare.com *.google.com assets.adobedtm.com *.adobedtm.com *.googletagmanager.com *.paypal.com *.gstatic.com *.paypalobjects.com *.vimeo.com *.facebook.com *.google.co.in *.podium.com *.analyticspodium.com *.typekit.net *.force.com media.rugs.shop static.rugs.shop https://fonts.bunny.net *.alothemes.com *.magepow.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com https://stats.addtoany.com/menu *.mm-api.agency *.roomvo.com *.googleadservices.com *.cloudflare.com *.adobe.com assets.adobedtm.com *.adobedtm.com *.googletagmanager.com *.gstatic.com *.googleapis.com *.paypalobjects.com *.facebook.com *.podium.com *.analyticspodium.com *.google.co.in *.doubleclick.net *.authorize.net media.rugs.shop static.rugs.shop http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com apitest.authorize.net jstest.authorize.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'none'; base-uri 'self' about:; form-action 'self' https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://*.adyen.com https://pay-staging.canneslions.com https://pay-staging.money2020.com https://yap-staging.ascential.com; object-src 'none'; script-src 'self' 'nonce-ljCXgXFR6HYDYgm8RlGlWQ==' 'strict-dynamic' 'unsafe-eval'; script-src-elem 'self' 'unsafe-inline' https://*.raygun.io https://transcend-cdn.com https://www.googletagmanager.com https://tagmanager.google.com https://*.cloudfront.net https://*.s3.amazonaws.com https://*.marketo.com https://*.intercom.io https://*.intercomcdn.com https://use.typekit.net https://ajax.googleapis.com https://maps.googleapis.com https://page.money2020.com https://page.ascential.com https://cdn.ingo.me https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://*.adyen.com https://pay.google.com https://*.payments-amazon.com https://*.paypal.com https://*.ratepay.com https://*.cash.app https://cookie-cdn.cookiepro.com https://player.vimeo.com https://*.production.platform-team.com https://static.hotjar.com https://script.hotjar.com https://www.google-analytics.com https://platform.twitter.com https://static.ads-twitter.com https://munchkin.marketo.net https://snap.licdn.com https://extend.vimeocdn.com https://connect.facebook.net https://www.everestjs.net https://*.taboola.com https://bat.bing.com https://*.adsrvr.org https://analytics.tiktok.com https://tags.srv.stackadapt.com https://*.doubleclick.net https://*.googleadservices.com https://*.livechatinc.com; connect-src 'self' https://*.raygun.io https://transcend-cdn.com https://telemetry.transcend.io https://in.hotjar.com https://*.hotjar.com wss://*.hotjar.com https://vc.hotjar.io https://*.hotjar.io https://www.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://tagmanager.google.com https://api.raygun.io https://images.ctfassets.net https://ascentialcdn.filespin.io https://cdn.filespin.io https://videocdn.filespin.io https://horizon-assets.production.platform-team.com https://*.production.platform-team.com https://*.auth0.com https://*.cloudfront.net https://*.s3.amazonaws.com https://*.marketo.com https://*.intercom.io https://cannes-integration.lionsfestivals.com https://dmsproxyapi.lionscreativity.com https://dmsproxyapi-integration.lionsfestivals.com https://dmsproxyapi-uat.lionsfestivals.com https://dmsproxyapi-staging.lionsfestivals.com https://page.money2020.com https://page.ascential.com https://www.linkedin.com https://*.facebook.com https://maps.googleapis.com https://cookie-cdn.cookiepro.com https://geolocation.onetrust.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://*.adyen.com https://pay.google.com https://*.payments-amazon.com https://*.paypal.com https://*.ratepay.com https://*.cash.app https://vimeo.com https://www.google.com https://region1.google-analytics.com https://*.integration.platform-team.com https://*.taboola.com https://px.ads.linkedin.com https://privacyportal.cookiepro.com https://*.mktoresp.com https://bat.bing.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://*.adsrvr.org https://*.srv.stackadapt.com https://0jaku7mk0a.execute-api.eu-west-1.amazonaws.com; img-src 'self' data: blob: https://images.ctfassets.net https://ascentialcdn.filespin.io https://assets-jpeg.imgix.net https://cdn.filespin.io https://portal-assets.imgix.net https://videocdn.filespin.io https://www.google-analytics.com https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://maps.gstatic.com https://horizon-assets.production.platform-team.com https://horizon-mfe-assets.production.platform-team.com https://*.adsrvr.org https://*.everesttech.net https://*.intercomcdn.com https://lions-shared.imgix.net https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://checkoutshopper-test.cdn.adyen.com https://checkoutshopper-live.cdn.adyen.com https://s.gravatar.com https://cdn.auth0.com https://cookie-cdn.cookiepro.com https://*.ascential.com https://*.google.com https://*.google.co.uk https://*.doubleclick.net https://*.googleadservices.com https://*.facebook.com https://bat.bing.com https://*.bing.net https://page.money2020.com https://px.ads.linkedin.com https://*.ads.linkedin.com https://analytics.twitter.com https://t.co https://*.wp.com; style-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://*.cloudfront.net https://*.s3.amazonaws.com 'unsafe-inline' https://horizon-mfe-assets.production.platform-team.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://*.cash.app https://transcend-cdn.com https://page.money2020.com https://page.ascential.com https://*.srv.stackadapt.com; style-src-elem 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://*.cloudfront.net https://*.s3.amazonaws.com 'unsafe-inline' https://horizon-mfe-assets.production.platform-team.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://*.cash.app https://transcend-cdn.com https://page.money2020.com https://page.ascential.com https://*.srv.stackadapt.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com https://*.intercomcdn.com https://*.typekit.net https://cash-f.squarecdn.com; worker-src 'self' blob:; media-src 'self' blob: https://videos.ctfassets.net https://videocdn.filespin.io https://www.google-analytics.com https://*.intercomcdn.com; frame-src 'self' https://app.contentful.com https://www.googletagmanager.com https://vars.hotjar.com https://transcend-cdn.com https://*.auth0.com https://www.youtube.com https://youtube.com https://*.youtube.com https://player.vimeo.com https://vimeo.com https://*.vimeo.com https://*.marketo.com blob: https://page.money2020.com https://page.ascential.com https://www.linkedin.com https://checkoutshopper-test.adyen.com https://checkoutshopper-live.adyen.com https://pay.google.com https://*.payments-amazon.com https://*.paypal.com https://*.ratepay.com https://*.cash.app https://*.everestjs.net https://*.everesttech.net https://*.adsrvr.org https://*.livechatinc.com; frame-ancestors 'self' https://app.contentful.com; manifest-src 'self' https://*.integration.platform-team.com; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.weltpixel.com www.google.com js.stripe.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.line.me *.ladesk.com *.googletagmanager.com *.g.doubleclick.net www.google.co.th www.google.co.id https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.ladesk.com *.line-scdn.net *.g.doubleclick.net *.googletagmanager.com www.google.com www.google.co.th www.google.co.id *.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ js.stripe.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.line.me *.ladesk.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; connect-src 'self' https://www.google.com https://43r9vgyz.apicdn.sanity.io https://43r9vgyz.api.sanity.io https://cdn.sanity.io https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.googletagmanager.com; default-src 'self'; font-src 'self' data:; form-action 'self'; frame-ancestors 'self'; frame-src https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com; img-src 'self' data: blob: https://cdn.sanity.io https://*.googletagmanager.com https://*.google-analytics.com; manifest-src 'self'; media-src 'self' https://cdn.sanity.io; object-src 'none'; script-src 'self' 'unsafe-inline' https://*.googletagmanager.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline'; worker-src 'self' blob:; report-uri /csp-report.php 1
object-src 'none';base-uri 'self';script-src 'nonce-Y06YU8KHotyaTd2TDo8_XQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; report-uri https://www.kcrent.jp/csp-report/; 1
default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; img-src * data: blob:; connect-src *; frame-src *; object-src 'none'; base-uri 'self'; form-action 'self'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: https://www.googletagmanager.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io maps.googleapis.com maps.gstatic.com *.googleapis.com https://images.unsplash.com cdn.doofinder.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com tagmanager.google.com https://www.googletagmanager.com https://maps.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ cdn.doofinder.com *.avada.io js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.doofinder.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://maps.googleapis.com https://player.vimeo.com *.doofinder.com wss://*.doofinder.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com https://* data: blob: https://challenges.cloudflare.com; img-src 'self' https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com https://* about: data: blob:; frame-src 'self' *.google.com https://* data: blob: https://challenges.cloudflare.com; connect-src 'self' * https://*.googleapis.com *.google.com https://*.gstatic.com wss://* https://* data: blob:; font-src 'self' https://fonts.gstatic.com https://* data: blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://* data: blob:; worker-src 'self' https://* data: blob:; report-to browser-intake-datadoghq; frame-ancestors 'self' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'nonce-PbdrPpe6TlMuLpjRMTXgEg==' 'strict-dynamic'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://*.google-analytics.com https://www.google.lt https://www.googletagmanager.com https://www.google.com; font-src 'self'; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://www.google.lt https://www.google.com; frame-src 'self'; form-action 'self'; report-uri /neocsp/report; 1
default-src 'self'; base-uri 'none'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; frame-src 'none'; manifest-src 'self'; font-src 'self'; worker-src 'self' blob:; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://images.ptvdata.de https://maps.ptvdata.de; connect-src 'self' https://images.ptvdata.de https://maps.ptvdata.de; upgrade-insecure-requests 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.bglobale.com *.global-e.com *.klarnacdn.net *.cloudflare.com d19ayerf5ehaab.cloudfront.net d1azc1qln24ryf.cloudfront.net dsb5btxtdmlo9.cloudfront.net globale-prod.s3-eu-west-1.amazonaws.com *.hotjar.com *.jsdelivr.net *.klaviyo.com *.reviews.io s3-eu-west-1.amazonaws.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.stripe.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.nosto.com *.nos.to *.facebook.com *.americanexpress.com *.apata.io *.arcot.com *.cardinalcommerce.com *.danskebank.com *.global-e.com *.lloydsbankinggroup.com *.modirum.com *.monzo.com *.privatbank.ua *.reviews.co.uk *.revolut.com *.rsa3dsauth.co.uk *.starlingbank.com *.viseca.ch 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.stripe.com *.stripe.network *.link.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.bglobale.com *.global-e.com *.klarna.com *.nosto.com *.nos.to *.weltpixel.com www.xtento.com *.americanexpress.com *.apata.io *.arcot.com *.awin1.com *.bwe.io *.captcha-delivery.com *.cardinalcommerce.com *.danskebank.com *.dotdigital-pages.com *.doubleclick.net *.facebook.com *.googletagmanager.com *.lloydsbankinggroup.com *.modirum.com *.monzo.com *.pinterest.com *.privatbank.ua *.reviews.co.uk *.revolut.com *.rsa3dsauth.co.uk *.securly.com *.starlingbank.com *.techloq.com *.typeform.com *.usercentrics.eu *.viseca.ch 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.doofinder.com *.stripe.com ebizmarts-website.s3.amazonaws.com brippo.s3.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.bglobale.com *.global-e.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.nosto.com *.nos.to *.facebook.com *.reddit.com *.cdninstagram.com *.fbcdn.net www.xtento.com cdn.xtento.com *.awin1.com *.chatham.co.uk d21m4dsqdd3b9h.cloudfront.net d3k81ch9hvuctc.cloudfront.net *.doubleclick.net dsb5btxtdmlo9.cloudfront.net ebizmartsextensions.s3.amazonaws.com *.facebook.net *.ggpht.com *.googleadservices.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bi www.google.bj www.google.bs www.google.by www.google.ca www.google.cd www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gg www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.mv www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.tt google.com *.google.com *.googlesyndication.com *.googletagmanager.com *.googleusercontent.com *.magentocommerce.com *.mccreedie.co.uk *.ojrq.net *.pinterest.com *.postcodeanywhere.co.uk *.pxf.io *.rainbowclub.com *.rainbowclub.co.uk *.reviews.io s3.amazonaws.com s3-eu-west-1.amazonaws.com tawk.link *.tawk.to *.trackedweb.net *.usercentrics.eu data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.doofinder.com *.stripe.com *.link.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.bglobale.com *.global-e.com *.klarna.com *.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.nosto.com *.nos.to https://www.googletagmanager.com tagmanager.google.com *.facebook.net *.redditstatic.com *.reddit.com unpkg.com *.instagram.com www.xtento.com cdn.xtento.com https://dsb5btxtdmlo9.cloudfront.net *.awin1.com *.cloudflare.com *.dotdigital-pages.com *.doubleclick.net dsb5btxtdmlo9.cloudfront.net *.dwin1.com *.googlesyndication.com *.googletagmanager.com *.hotjar.com *.impactradius-event.com *.jsdelivr.net *.klaviyo.com *.payments-amazon.com *.paypal.com *.pcapredict.com *.pinimg.com *.pinterest.com *.postcodeanywhere.co.uk *.reviews.co.uk *.tawk.to *.toolszen.com *.trackedlink.net *.trackedweb.net *.typeform.com *.usercentrics.eu *.wisepops.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com *.doofinder.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.bglobale.com *.global-e.com *.klarnacdn.net https://static.klaviyo.com *.nosto.com *.nos.to tagmanager.google.com *.bwe.io d19ayerf5ehaab.cloudfront.net dsb5btxtdmlo9.cloudfront.net *.googleapis.com *.googletagmanager.com *.gstatic.com *.klaviyo.com *.mccreedie.co.uk *.postcodeanywhere.co.uk *.reviews.co.uk *.reviews.io *.tawk.to *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cdninstagram.com d21m4dsqdd3b9h.cloudfront.net *.gstatic.com *.tawk.to 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.doofinder.com wss://*.doofinder.com *.stripe.com *.stripe.network *.link.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.nosto.com *.nos.to wss://*.hotjar.com wss://*.tawk.to *.google-analytics.com *.facebook.net *.redditstatic.com *.reddit.com *.doubleclick.net *.instagram.com *.googleusercontent.com *.bglobale.com *.chatham.co.uk *.chathamfootwear.com *.datadome.co *.datah04.com dsb5btxtdmlo9.cloudfront.net *.facebook.com *.global-e.com *.googleadservices.com www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bj www.google.bs www.google.by www.google.ca www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.bw www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.bz www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.gh www.google.com.gi www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zm www.google.co.zw www.google.cz www.google.de www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gg www.google.gr www.google.gy www.google.hn www.google.hr www.google.hu www.google.ie www.google.im www.google.is www.google.it www.google.je www.google.jo www.google.kz www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.mv www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.si www.google.sk www.google.sn www.google.so www.google.tl www.google.tn *.googlesyndication.com *.hotjar.io *.impct.site *.klaviyo.com *.pinterest.com *.postcodeanywhere.co.uk *.pxf.io *.rainbowclub.co.uk *.reviews.co.uk *.reviews.io *.tawk.to *.trackedweb.net *.typeform.com *.usercentrics.eu *.wepowerconnections.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://e840a2bc-3d9d-4f2a-b6af-c5aad746125f.sansec.watch/; report-to report-endpoint; 1
default-src 'none'; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com 'unsafe-inline'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; connect-src 'self' https://*.sentry.io https://*.google-analytics.com https://*.googletagmanager.com https://analytics.google.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'; worker-src 'none' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://accounts.google.com https://www.facebook.com https://login.live.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://token.tuna-demo.uy https://token.tunagateway.com https://engine.tunagateway.com https://sandbox.tuna-demo.uy https://js.tuna.uy *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com *.hsforms.net *.hsforms.com 'self' data: https://token.tuna-demo.uy https://token.tunagateway.com https://engine.tunagateway.com https://sandbox.tuna-demo.uy https://js.tuna.uy *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.avada.io *.hsforms.net *.hsforms.com *.gstatic.com https://token.tuna-demo.uy https://token.tunagateway.com https://engine.tunagateway.com https://sandbox.tuna-demo.uy https://js.tuna.uy *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://get.geojs.io *.avada.io t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com https://token.tuna-demo.uy https://token.tunagateway.com https://engine.tunagateway.com https://sandbox.tuna-demo.uy https://js.tuna.uy *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com js.mollie.com https://www.googletagmanager.com https://td.doubleclick.net https://ss.sweetjewellery.nl 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://images.unsplash.com https://www.mollie.com *.hsforms.net *.hsforms.com 'self' data: https://www.google.com https://www.google.com.ua https://www.google.lt https://www.google.nl https://www.google.be https://www.google.de https://www.google.fr https://www.google.co.uk https://www.google.es https://www.google.it https://www.google.pl https://ss.sweetjewellery.nl https://www.sweetjewellery.nl https://*.gstatic.com https://analytics.tiktok.com https://maps.gstatic.com https://imgproxy.vendic.dev data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://maps.googleapis.com js.mollie.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src downloads.mailchimp.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://maps.googleapis.com https://player.vimeo.com t.elasticsuite.io *.hsforms.net *.hsforms.com https://www.google.com https://pagead2.googlesyndication.com https://ss.sweetjewellery.nl https://p2iqhncxyh.execute-api.eu-central-1.amazonaws.com https://analytics.tiktok.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-dJXZb8leTncYHceiSR3CiQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self';script-src 'self' 'unsafe-inline' 'nonce-gqhY875YCmRisyS3TkNwbwj9' https://cosmos.enedis.fr https://www.datadoghq-browser-agent.com https://*.awswaf.com;object-src 'self';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cosmos.enedis.fr https://*.awswaf.com;img-src 'self' https://cosmos.enedis.fr;font-src 'self' https://fonts.gstatic.com https://cosmos.enedis.fr;connect-src 'self' https://oasice.enedis.fr https://oasice.edf.fr https://distri-ingepilot.enedis.fr https://distri-ingepilot-sei.edf.fr https://e-travaux.enedis.fr https://cosmos.enedis.fr https://api.e-plans.fr;base-uri 'self';frame-ancestors 'self';report-uri /Csp/Report 1
font-src *.googleapis.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com https://cdn.jsdelivr.net *.disqus.com *.avada.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://unpkg.com https://assets1.lottiefiles.com; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; connect-src 'self' https:; frame-src 'self' https://www.googletagmanager.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com my.lcmark.net *.iubenda.com *.weltpixel.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googletagmanager.com *.doubleclick.net *.typeform.com www.xtento.com app.pulsantereso.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.smartsuppcdn.com *.iubenda.com www.google.it https://images.unsplash.com www.gstatic.com pay.google.com google.com/pay ecomms2s.sella.it sandbox.gestpay.net img.riskified.com *.doofinder.com *.feedaty.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com ts.tradetracker.net www.magmodules.eu *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.oct8ne.com *.klaviyo.com *.trovaprezzi.it *.adobedtm.com *.iubenda.com *.googleadservices.com *.smartsuppcdn.com *.smartsuppchat.com *.scalapay.com https://maps.googleapis.com https://player.vimeo.com www.google.com www.gstatic.com pay.google.com beacon.riskified.com *.doofinder.com *.feedaty.com *.avada.io *.shopify.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com tm.tradetracker.net tracking.trovaprezzi.it www.trovaprezzi.it *.googletagmanager.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com www.xtento.com cdn.xtento.com app.pulsantereso.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.klaviyo.com *.smartsuppcdn.com *.iubenda.com *.fontawesome.com *.doofinder.com *.feedaty.com https://fonts.bunny.net assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.smartsuppcdn.com my.lcmark.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.oct8ne.com fast.a.klaviyo.com static-forms.klaviyo.com *.iubenda.com *.googlesyndication.com *.smartsuppchat.com wss://websocket-visitors.smartsupp.com *.smartsupp.com *.smartsuppcdn.com bot-dot-envolvetech-001.appspot.com https://maps.googleapis.com https://player.vimeo.com www.google.com www.gstatic.com pay.google.com google.com/pay ecomms2s.sella.it sandbox.gestpay.net c.riskified.com *.doofinder.com wss://*.doofinder.com *.feedaty.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com https://www.google.com/recaptcha/ app.pulsantereso.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com app.pulsantereso.com http: https: blob: 'self' 'unsafe-inline'; default-src my.lcmark.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:; 1
object-src 'none';base-uri 'self';script-src 'nonce-_lumyJB14rygqkEsbmQaKw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-JHNrH1vGgmcYJQIB_HPIfg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://www.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.cookieplus.com https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://*.google-analytics.com https://*.googletagmanager.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.cookieplus.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; media-src 'self' blob: https:; connect-src 'self' http://localhost:* http://127.0.0.1:* ws://localhost:* ws://127.0.0.1:* https://ingenious-frogs-fb47b9568c.strapiapp.com https://ingenious-frogs-fb47b9568c.media.strapiapp.com https://cdn.cookieplus.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.googletagmanager.com https://api.iconify.design https://connect.facebook.net https://www.facebook.com https://*.facebook.com https://*.a.run.app; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://maps.google.com https://view.officeapps.live.com https://www.facebook.com; worker-src 'self' blob:; child-src 'self' blob: 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' https://cdnjs.cloudflare.com https://www.gstatic.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' 'report-sample' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; media-src 'self' blob: https:; connect-src 'self' https://almc.es https://media.almc.es https://api.almc.es https://maps.googleapis.com; frame-src 'self' https://almc.es https://checkout.revolut.com https://js.stripe.com https://hooks.stripe.com https://www.youtube.com; frame-ancestors 'self'; form-action 'self' https://checkout.revolut.com https://sandbox-checkout.revolut.com https://checkout.stripe.com; base-uri 'self'; object-src 'none'; worker-src 'self' blob:; report-uri /api/reports/csp; report-to default 1
default-src 'self' https://cdn.coaster-count.com; base-uri 'self'; frame-ancestors 'self'; frame-src 'self' https://www.google.com https://maps.google.com https://maps.google.de https://rcdb.com https://www.rcdb.com https://*.rcdb.com https://www.paypal.com; child-src 'self' https://www.google.com https://maps.google.com https://maps.google.de https://rcdb.com https://www.rcdb.com https://*.rcdb.com https://www.paypal.com; img-src 'self' https://cdn.coaster-count.com data: https:; font-src 'self' https://cdn.coaster-count.com https://fonts.gstatic.com https://www.paypalobjects.com data:; style-src 'self' https://cdn.coaster-count.com https://fonts.googleapis.com 'unsafe-inline'; script-src 'self' https://cdn.coaster-count.com https://maps.googleapis.com https://www.paypalobjects.com 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https://cdn.coaster-count.com https://maps.googleapis.com https://www.paypal.com; report-uri /csp-report 1
default-src 'self'; base-uri 'self'; manifest-src 'self'; script-src 'self' 'unsafe-eval' https://js.stripe.com https://www.googletagmanager.com https://*.firebasedatabase.app; script-src-elem 'self' https://js.stripe.com https://*.stream-io-api.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://*.googletagmanager.com https://apis.google.com https://*.firebasedatabase.app https://static.cloudflareinsights.com; connect-src 'self' https://*.sentry.io https://api.gamerprofiles.com https://api.staging.gamerprofiles.com https://consentcdn.cookiebot.com wss://*.stream-io-api.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://storage.googleapis.com https://securetoken.googleapis.com https://identitytoolkit.googleapis.com https://firebase.googleapis.com https://firebaseinstallations.googleapis.com wss://*.firebasedatabase.app https://gp-db1-prod.europe-west1.firebasedatabase.app https://firebaselogging-pa.googleapis.com ; child-src 'self'; worker-src 'self'; frame-src 'self' https://player.twitch.tv https://td.doubleclick.net https://js.stripe.com https://gp-vpc-host-prod-302509.firebaseapp.com https://*.firebasedatabase.app https://auth.gamerprofiles.com https://consentcdn.cookiebot.com https://www.youtube-nocookie.com/ https://www.tiktok.com ; style-src 'self' 'unsafe-inline' *.gamerprofiles.com; media-src 'self' blob: *.gamerprofiles.com; img-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com *.gamerprofiles.com blob: data: https:; object-src 'none'; font-src 'self' data: https://fonts.gstatic.com https://fonts.gamerprofiles.com; report-uri https://o4504750872920064.ingest.sentry.io/api/4505188474028032/security/?sentry_key=31ed91db89c7497583e8981442d7cf70 1
object-src  'none'; connect-src 'self' *.xempire.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.xempire.com join.gammasecure.com; script-src 'self' *.xempire.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.xempire.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
default-src 'self';base-uri 'self';object-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.portaldoseller.com.br https://portaldoseller.com.br https://*.google.com https://*.google.com.br https://*.googleapis.com https://*.gstatic.com https://*.google-analytics.com https://*.googletagmanager.com https://*.googletagservices.com https://*.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net https://www.googletagmanager.com https://www.google-analytics.com https://www.googletagservices.com https://pagead2.googlesyndication.com https://*.adopt.com.br https://*.goadopt.io https://connect.facebook.net https://static.hotjar.com https://script.hotjar.com https://www.clarity.ms https://*.clarity.ms https://bat.bing.com https://*.usebeon.io https://*.konfidency.com.br https://*.hablla.com https://imgs.ebit.com.br https://*.cloudfront.net http://*.cloudfront.net https://s3.amazonaws.com https://*.s3.amazonaws.com https://*.s3.us-east-1.amazonaws.com https://cdnjs.cloudflare.com https://*.reclameaqui.com.br https://cdn.jsdelivr.net https://device.clearsale.com.br https://*.clearsale.com.br https://www.googleadservices.com https://api.pagseguro.com https://*.pagseguro.com https://assets.pagseguro.com.br https://*.cieloecommerce.cielo.com.br https://*.cielo.com.br https://*.userede.com.br https://*.rede.com.br https://*.erede.com.br https://sdk.mercadopago.com https://www.mercadopago.com https://*.mercadopago.com https://*.mercadolibre.com https://*.mercadolivre.com https://*.mercadolivre.com.br https://*.k-analytix.com https://i.k-analytix.com https://awscdn.portaldoseller.com.br https://*.www.lojanesher.com.br https://www.lojanesher.com.br;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https://*.portaldoseller.com.br https://portaldoseller.com.br https://s3.amazonaws.com https://*.s3.amazonaws.com https://s3.us-east-1.amazonaws.com https://*.s3.us-east-1.amazonaws.com https://imgur.com https://*.imgur.com https://api.pagseguro.com https://*.pagseguro.com https://*.cloudfront.net http://*.cloudfront.net https://*.usebeon.io https://*.konfidency.com.br https://*.hablla.com https://*.googleapis.com https://*.gstatic.com https://fonts.googleapis.com https://*.adopt.com.br https://*.goadopt.io https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://*.clearsale.com.br https://awscdn.portaldoseller.com.br https://*.www.lojanesher.com.br https://www.lojanesher.com.br;img-src 'self' data: blob: https://*.portaldoseller.com.br https://portaldoseller.com.br https://s3.amazonaws.com https://*.s3.amazonaws.com https://s3.us-east-1.amazonaws.com https://*.s3.us-east-1.amazonaws.com https://imgur.com https://*.imgur.com https://api.pagseguro.com https://*.pagseguro.com https://assets.pagseguro.com.br https://api.pagar.me https://*.pagar.me https://*.cieloecommerce.cielo.com.br https://*.cielo.com.br https://*.userede.com.br https://*.rede.com.br https://*.erede.com.br https://img.youtube.com https://*.ytimg.com https://newimgebit-a.akamaihd.net https://connect.facebook.net https://*.google.com https://*.google.com.br https://*.googleusercontent.com https://*.gstatic.com https://*.google-analytics.com https://*.googletagmanager.com https://*.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net https://*.adopt.com.br https://*.goadopt.io https://www.facebook.com https://*.fbcdn.net https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://bat.bing.com https://c.bing.com https://*.hotjar.com https://*.hotjar.io https://*.usebeon.io https://*.konfidency.com.br https://*.hablla.com https://*.hablla.io https://imgs.ebit.com.br https://*.reclameaqui.com.br https://pdl-sandbox-prod.s3.us-east-1.amazonaws.com https://*.cloudfront.net https://upload.wikimedia.org https://i.ibb.co https://*.ibb.co https://*.clearsale.com.br https://api.iconify.design https://www.clarity.ms https://*.clarity.ms https://www.mercadopago.com https://*.mercadopago.com https://*.mlstatic.com https://www.mercadolivre.com https://*.mercadolivre.com https://*.mercadolivre.com.br https://www.mercadolibre.com https://*.mercadolibre.com https://awscdn.portaldoseller.com.br https://*.www.lojanesher.com.br https://www.lojanesher.com.br;connect-src 'self' https://*.portaldoseller.com.br https://portaldoseller.com.br https://*.pagseguro.com https://api.pagseguro.com https://api.edrone.me https://api.intercom.io https://api.usebeon.io https://api.konfidency.com.br https://api.habla.com https://*.hablla.com https://*.intercom.com https://*.intercom.io https://*.edrone.me https://*.usebeon.io https://*.konfidency.com.br https://newimgebit-a.akamaihd.net https://*.google.com https://*.google.com.br https://*.googleapis.com https://*.google-analytics.com https://*.googletagmanager.com https://*.googletagservices.com https://*.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net https://*.adopt.com.br wss://*.adopt.com.br https://*.goadopt.io wss://*.goadopt.io https://www.facebook.com https://connect.facebook.net https://www.google-analytics.com https://region1.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://bat.bing.com https://c.bing.com https://www.bing.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com wss://*.hotjar.io https://www.clarity.ms https://*.clarity.ms wss://*.hablla.com https://api.reclameaqui.com.br https://*.reclameaqui.com.br https://*.cloudfront.net https://s3.amazonaws.com https://*.s3.amazonaws.com https://*.s3.us-east-1.amazonaws.com https://*.ebit.com.br https://imgs.ebit.com.br https://*.modernamobilia.com.br https://www.modernamobilia.com.br https://modernamobilia.com.br https://doc-0s-5g-sheets.googleusercontent.com https://viacep.com.br https://api.pagar.me https://*.pagar.me https://assets.pagseguro.com.br https://*.cieloecommerce.cielo.com.br https://*.cielo.com.br https://*.userede.com.br https://*.rede.com.br https://*.erede.com.br https://*.clearsale.com.br https://api.iconify.design https://api.mercadopago.com https://*.mercadopago.com https://*.mercadolibre.com https://*.mercadolivre.com https://*.mercadolivre.com.br https://*.k-analytix.com https://i.k-analytix.com https://awscdn.portaldoseller.com.br https://*.www.lojanesher.com.br https://www.lojanesher.com.br;font-src 'self' data: https://*.portaldoseller.com.br https://portaldoseller.com.br https://*.gstatic.com https://fonts.gstatic.com https://*.adopt.com.br https://*.goadopt.io https://cdnjs.cloudflare.com https://c.usebeon.io https://awscdn.portaldoseller.com.br https://*.clearsale.com.br;frame-src 'self' https://api.pagseguro.com https://*.pagseguro.com https://www.youtube.com https://*.youtube.com https://www.youtube-nocookie.com https://*.youtube-nocookie.com https://*.google.com https://*.google.com.br https://*.googletagmanager.com https://*.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net https://*.adopt.com.br https://*.goadopt.io https://www.googletagmanager.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://td.doubleclick.net https://*.usebeon.io https://*.konfidency.com.br https://*.hablla.com https://www.facebook.com https://connect.facebook.net https://assets.pagseguro.com.br https://*.cieloecommerce.cielo.com.br https://*.cielo.com.br https://*.userede.com.br https://*.rede.com.br https://*.erede.com.br https://*.clearsale.com.br https://www.mercadopago.com https://*.mercadopago.com https://*.mercadolibre.com https://*.mercadolivre.com https://*.mercadolivre.com.br https://*.www.lojanesher.com.br https://www.lojanesher.com.br;form-action 'self' https://*.pagseguro.com https://api.pagseguro.com https://assets.pagseguro.com.br https://*.pagar.me https://*.cieloecommerce.cielo.com.br https://*.cielo.com.br https://*.userede.com.br https://*.rede.com.br https://*.erede.com.br https://*.clearsale.com.br https://www.mercadopago.com https://*.mercadopago.com https://*.mercadolibre.com https://*.mercadolivre.com https://*.mercadolivre.com.br https://*.bb.com.br https://*.bancobrasil.com.br https://*.itau.com.br https://*.itaubanco.com.br https://*.itau.com https://*.www.lojanesher.com.br https://www.lojanesher.com.br;frame-ancestors 'self' https://*.portaldoseller.com.br https://portaldoseller.com.br;worker-src 'self' blob:;manifest-src 'self';upgrade-insecure-requests 1
font-src https://fonts.gstatic.com/ 'self' 'unsafe-inline'; form-action *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.facebook.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es https://www.googleapis.com https://maps.gstatic.com https://maps.googleapis.com https://www.googleadservices.com https://www.google-analytics.com *.facebook.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com www.googleadservices.com www.google-analytics.com s.ytimg.com video.google.com vimeo.com www.vimeo.com cdn-scripts.signifyd.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es https://www.googleapis.com https://maps.gstatic.com https://maps.googleapis.com https://www.googleadservices.com https://www.google-analytics.com *.googletagmanager.com *.google-analytics.com *.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com https://fonts.googleapis.com *.googletagmanager.com *.google-analytics.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es https://www.googleapis.com https://maps.gstatic.com https://maps.googleapis.com https://www.google-analytics.com https://www.googleadservices.com *.googletagmanager.com *.google-analytics.com *.stats.g.doubleclick.net 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
block-all-mixed-content; style-src 'self' *.licdn.com *.google.com fonts.googleapis.com www.googletagmanager.com 'unsafe-inline'; connect-src 'self' https://apikeys.civiccomputing.com https://*.google.com https://www.google.com https://www.google.co.uk https://www.googletagmanager.com https://*.analytics.google.com https://www.google-analytics.com https://*.googlesyndication.com https://www.googleadservices.com https://ad.doubleclick.net https://stats.g.doubleclick.net https://www.gstatic.com https://s.yimg.com https://script.crazyegg.com https://tracking.crazyegg.com https://px.ads.linkedin.com https://tr.snapchat.com https://tr6.snapchat.com https://www.facebook.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://www.clarity.ms https://*.clarity.ms https://c.bing.com https://www.ucas.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://*.fls.doubleclick.net https://www.googletagmanager.com https://tr.snapchat.com https://www.facebook.com; img-src 'self' data: i.ytimg.com https://ad.doubleclick.net https://www.google.co.uk https://www.google.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://px.ads.linkedin.com https://*.ads.linkedin.com https://tr.snapchat.com https://connect.facebook.net https://www.facebook.com https://sp.analytics.yahoo.com https://s.yimg.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://c.clarity.ms https://*.clarity.ms https://*.bing.com https://i.ytimg.com https://img.youtube.com https://www.ucas.com; frame-ancestors 'self'; script-src 'strict-dynamic' 'nonce-0M1lku3qo+jshNQ7fHxbnA==' https:; worker-src 'self'; object-src 'none'; form-action 'self'; base-uri 'self'; default-src 'self'; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net/npm/bootstrap@4.6.0/dist/fonts/ 1
worker-src blob:; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.kxcdn.com *.fontawesome.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.addthis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.fbcdn.net blob: https://cdn.jsdelivr.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com *.cloudflareinsights.com s7.addthis.com *.fontawesome.com https://cdn.jsdelivr.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com *.fontawesome.com https://cdn.jsdelivr.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com ekr.zdassets.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://www.facebook.com https://cdn.brevo.com https://www.paypal.com https://www.paypalobjects.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://cdn.brevo.com; frame-src 'self' https://www.paypal.com https://www.facebook.com https://www.instagram.com https://www.googletagmanager.com; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' https://www.googletagmanager.com https://va.vercel-scripts.com https://*.vercel-insights.com; style-src 'self'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://*.supabase.co wss://*.supabase.co https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://*.vercel-insights.com; media-src 'self' blob:; worker-src 'self' blob:; manifest-src 'self'; frame-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'; report-uri https://bkzeypmfrjbeeytwomwc.supabase.co/functions/v1/csp-report; report-to csp-endpoint 1
font-src www.paypalobjects.com *.fontawesome.com *.gstatic.com 'self' data: fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ connect.facebook.net *.facebook.com *.disqus.com disqus.com js.mollie.com *.cookiebot.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: *.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com connect.facebook.net *.facebook.com *.fbcdn.net *.disqus.com *.disquscdn.com https://www.mollie.com dummyimage.com placebear.com qoliber.com *.qoliber.com *.cookiebot.com *.hsforms.net *.hsforms.com 'self' data: *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com connect.facebook.net *.disqus.com *.disquscdn.com js.mollie.com *.cookiebot.com https://cdnjs.cloudflare.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.fontawesome.com *.disquscdn.com https://cdnjs.cloudflare.com *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com connect.facebook.net *.facebook.com *.disqus.com disqus.com *.disquscdn.com *.cookiebot.com t.elasticsuite.io *.hsforms.net *.hsforms.com ingress.flareapp.io *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' fb.okta.com *.oktacdn.com; connect-src 'self' fb.okta.com fb-admin.okta.com *.oktacdn.com *.mixpanel.com *.mapbox.com fb.kerberos.okta.com fb.mtls.okta.com *.authenticatorlocalprod.com:8769 http://localhost:8769 http://127.0.0.1:8769 *.authenticatorlocalprod.com:65111 http://localhost:65111 http://127.0.0.1:65111 *.authenticatorlocalprod.com:65121 http://localhost:65121 http://127.0.0.1:65121 *.authenticatorlocalprod.com:65131 http://localhost:65131 http://127.0.0.1:65131 *.authenticatorlocalprod.com:65141 http://localhost:65141 http://127.0.0.1:65141 *.authenticatorlocalprod.com:65151 http://localhost:65151 http://127.0.0.1:65151 https://oinmanager.okta.com data: *.ingest.sentry.io; script-src 'unsafe-inline' 'nonce-rTd0YG5KBRstgL-TsdEiAQ' 'self' 'report-sample' fb.okta.com *.oktacdn.com; style-src 'unsafe-inline' 'nonce-rTd0YG5KBRstgL-TsdEiAQ' 'self' 'report-sample' fb.okta.com *.oktacdn.com; frame-src 'self' fb.okta.com fb-admin.okta.com login.okta.com *.vidyard.com com-okta-authenticator: api-49adafb4.duosecurity.com; img-src 'self' fb.okta.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: blob:; font-src 'self' fb.okta.com data: *.oktacdn.com fonts.gstatic.com; frame-ancestors 'self' 1
default-src 'self' https://rising-world.net https://*.rising-world.net; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://rising-world.net https://*.rising-world.net https://platform.twitter.com https://www.paypalobjects.com/api/checkout.js; style-src 'self' 'unsafe-inline' https://rising-world.net https://*.rising-world.net; font-src * data:; img-src * data:; media-src *; frame-ancestors 'self'; frame-src 'self' https://www.youtube-nocookie.com  https://player.vimeo.com/video/ https://w.soundcloud.com/player/ https://www.twitch.tv https://clips.twitch.tv https://platform.twitter.com; form-action 'self' https://rising-world.net https://*.rising-world.net https://www.paypal.com/cgi-bin/webscr; report-uri https://rising-world.net/csp.php 1
default-src 'self'; script-src 'nonce-pZavXJisR8IIVtBIIVV2kg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
upgrade-insecure-requests; default-src 'none'; base-uri 'self'; frame-ancestors 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.typekit.net https://*.vimeo.com https://*.vimeocdn.com https://*.marketo.com https://*.marketo.net https://*.mktoweb.com https://*.mktorest.com; img-src 'self' data: blob: https://www.googletagmanager.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.vimeo.com https://*.vimeocdn.com https://*.akamaized.net https://*.cloudfront.net https://*.marketo.com https://*.marketo.net https://*.mktoweb.com https://*.mktorest.com https://*.typekit.net; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.vimeo.com https://*.vimeocdn.com https://*.akamaized.net https://*.cloudfront.net https://*.marketo.com https://*.marketo.net https://*.mktoweb.com https://*.mktorest.com https://*.typekit.net; style-src 'self' 'unsafe-inline' https://*.typekit.net https://*.marketo.com https://*.marketo.net https://*.mktoweb.com; font-src 'self' data: https://*.typekit.net; frame-src 'self' https://player.vimeo.com https://*.vimeo.com https://*.marketo.com https://*.marketo.net https://*.mktoweb.com; media-src 'self' blob: https://*.vimeo.com https://*.vimeocdn.com https://*.akamaized.net https://*.cloudfront.net; form-action 'self' https://*.marketo.com https://*.marketo.net https://*.mktoweb.com https://*.mktorest.com; worker-src 'self' blob:; report-uri https://www.proxim.com/csp-report.php; report-to csp-endpoint; 1
default-src 'self'; script-src 'self' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://app.conexaoclarobrasil.com.br https://files.conexaoclarobrasil.com.br https://*.xbrain.com.br https://googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://files.conexaoclarobrasil.com.br/public/fonts/v1/roboto-v1.css; font-src 'self' https://fonts.gstatic.com https://files.conexaoclarobrasil.com.br/public/fonts/v1/Roboto-Light.ttf https://files.conexaoclarobrasil.com.br/public/fonts/v1/Roboto-Regular.ttf https://files.conexaoclarobrasil.com.br/public/fonts/v1/Roboto-Medium.ttf; img-src 'self' data: blob: https://files.conexaoclarobrasil.com.br https://api.conexaoclarobrasil.com.br https://www.googletagmanager.com; connect-src wss://app.conexaoclarobrasil.com.br:443 wss://api.conexaoclarobrasil.com.br:443 wss://mailing-api.conexaoclarobrasil.com.br:443 https://app.conexaoclarobrasil.com.br https://api.conexaoclarobrasil.com.br https://mailing-api.conexaoclarobrasil.com.br https://vendas-api.conexaoclarobrasil.com.br https://files.conexaoclarobrasil.com.br https://www.googletagmanager.com https://www.google.com/recaptcha/; frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; frame-ancestors 'self' https://app.conexaoclarobrasil.com.br https://www.netcombo.com.br https://www.net.com.br; media-src 'self' data: blob: https://*.conexaoclarobrasil.com.br; worker-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /csp-violation-report-endpoint; report-to csp-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net https://cdn.userway.org https://static.klaviyo.com https://widgets.xsellco.com https://*.xsellco.com cdn1.stamped.io stamped.io data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://widgets.xsellco.com https://*.xsellco.com https://app.termly.io/ *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maps.gstatic.com *.googleapis.com *.ggpht.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://cdn.userway.org https://cdn1.stamped.io https://cdn.stamped.io https://widgets.xsellco.com https://*.xsellco.com https://*.edesk.com cdn1.stamped.io stamped.io *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maps.googleapis.com *.avada.io *.shopify.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://static.cloudflareinsights.com https://accessibilityserver.org https://cdn.userway.org https://*.pingdom.net https://cdn1.stamped.io https://ajax.googleapis.com https://widgets.xsellco.com https://*.xsellco.com *.maxmind.com https://app.termly.io/ https://cdn.weglot.com/ cdn1.stamped.io stamped.io *.googletagmanager.com *.googleadservices.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com https://*.typekit.net https://cdn.userway.org https://cdn1.stamped.io https://widgets.xsellco.com https://*.xsellco.com cdn1.stamped.io stamped.io *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com cdn1.stamped.io stamped.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.gstatic.com data: https://get.geojs.io *.avada.io *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://cdn.userway.org https://api.userway.org https://*.api.userway.org https://*.pingdom.net https://widgets.xsellco.com https://*.xsellco.com *.mmapiws.com https://app.termly.io/ cdn1.stamped.io stamped.io *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com https://fonts.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.multisafepay.com https://pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com cdn.magmodules.eu *.multisafepay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com www.google.com.ua https://carsandcovers.cabriosupply.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com widget.freshworks.com m2epro.freshdesk.com *.avada.io *.multisafepay.com https://pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.trustpilot.com https://carsandcovers.cabriosupply.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com widget.freshworks.com m2epro.freshdesk.com https://fonts.googleapis.com *.fontawesome.com *.multisafepay.com unsafe-inline assets.braintreegateway.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com widget.freshworks.com m2epro.freshdesk.com https://get.geojs.io *.avada.io *.multisafepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com https://carsandcovers.cabriosupply.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.growthbook.io https://go.rcvlink.com https://b-sing.com https://*.clarity.ms https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; object-src 'none'; img-src 'self' data: https://wsrv.nl https://images.perlahelsa.ua https://go.rcvlinks.com https://*.clarity.ms https://i.ytimg.com https://analytics.google.com https://*.analytics.google.com https://www.google.com https://ss.perlahelsa.ua https://*.doubleclick.net https://www.googletagmanager.com https://www.google.com.ua https://www.google.be https://www.google.nl https://www.google.de https://www.google.fr https://www.google.pl https://www.google.it https://www.google.es https://www.google.pt https://www.google.cz https://www.google.sk https://www.google.hu https://www.google.ro https://www.google.bg https://www.google.at https://www.google.ch https://www.google.se https://www.google.dk https://www.google.fi https://www.google.no https://www.google.gr https://www.google.ie https://www.google.hr https://www.google.si https://www.google.lt https://www.google.lv https://www.google.ee https://www.google.md https://www.google.co.uk https://www.google.ca https://back.perlahelsa.ua; media-src 'self' https://images.perlahelsa.ua https://back.perlahelsa.ua; connect-src 'self' https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://ss.perlahelsa.ua https://cdn.growthbook.io https://www.google.com https://www.google.com.ua https://www.googleadservices.com https://*.doubleclick.net https://*.clarity.ms https://back.perlahelsa.ua; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://ss.perlahelsa.ua; frame-ancestors 'none'; base-uri 'self'; form-action 'self' 1
frame-ancestors 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.cloudmaestro.com www.reedssports.com cdn.reedssports.com rum-static.pingdom.net a-52365312.cdn.ns8ds.com widget-mediator.zopim.com *.dotdigital-pages.com r2.dotdigital-pages.com r2-t.trackedlink.net www.google-analytics.com *.google.com www.gstatic.com *.addthis.com *.moatads.com *.addthisedge.com *.newrelic.com *.nr-data.net *.com.imgeng.in *.miss.imgeng.in a-52365312.nscontrol.com googleads.g.doubleclick.net www.googletagmanager.com www.googleadservices.com connect.facebook.net *.integrator.io js.authorize.net google-analytics.com www.google-analytics.com player.vimeo.com www.youtube.com cdn.dnky.co *.reedsvipdeals.com/* app.viralsweep.com cdn.sift.com static.zdassets.com *.turnto.com maps.googleapis.com js.klevu.com; report-uri /.webscale/csp-report 1
form-action 'self' https://*.hubspot.com https://forms.hsforms.com https://*.facebook.com; report-uri https://www.atlashxm.com/csp-reports; report-to csp-endpoint; 1
script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=0xl9zhHydc3ZjA9ZoMi0C9ZmqM2_Vz2frptL3Y0MdXM-1789280241.4414032-1.0.1.1-H9GIB9pYuQiTFjI3azWIWELhuSbAtovmycofHWUfd6lq12VExzoL70C_XOT0qa5PkBD3DX_DA8uhbRh9qykfbYJu9uLmVTdpTX3vgz1ueRyAdzJ146scA0GN9ODbisLCu3ydu3.05_6Ibd8TpbRByqez4j5woX6QqqkkPdj9zaua.elxPWY.02vBdszsxL0t; report-to cf-csp-endpoint 1
default-src 'self' *.bhh.dev.init *.init.de *.init-ag.de *.bundeshaushalt.de *.bundesfinanzministerium.de; base-uri 'self'; style-src 'self' 'unsafe-inline' *.openlayers.org openlayers.org *.openstreetmap.org *.twitter.com *.twimg.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.google.com *.gstatic.com *.openlayers.org openlayers.org *.init.de *.bhh.dev.init *.init-ag.de *.bundeshaushalt.de *.openstreetmap.org *.twitter.com *.twimg.com *.bundeshaushalt.de *.bundesfinanzministerium.de; object-src 'self'; media-src 'self' *.youtube.com *.bundeshaushalt.de *.bhh.dev.init *.init-ag.de *.streamfarm.net http://multimedia.gsb.bund.de; child-src *.google.com *.gstatic.com *.youtube.com *.init.de *.twitter.com *.twimg.com; img-src 'self' data: *.google.com *.gstatic.com *.youtube.com *.openlayers.org openlayers.org *.openstreetmap.org *.init.de *.bhh.dev.init *.init-ag.de *.twitter.com *.twimg.com *.bundeshaushalt.de *.bundesfinanzministerium.de; frame-ancestors 'self'; connect-src 'self' *.bhh.dev.init *.init.de *.init-ag.de *.bundeshaushalt.de *.bundesfinanzministerium.de; report-uri /site/servlet/csp-report; 1
font-src *.googleapis.com *.gstatic.com data: maxcdn.bootstrapcdn.com *.google.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://accounts.google.com https://www.facebook.com https://login.live.com *.pagar.me *.netsgroup.com *.sibs.pt *.seglan.com *.secureacs.com *.rsa3dsauth.com *.apata.io *.cardinalcommerce.com *.santander.com.br *.bradesco.com.br *.bradesco *.stone.com.br *.nubank.com.br *.itau.com.br *.bb.com.br *.caixa.gov.br *.inter.co *.bancointer.com.br *.c6bank.com.br *.bancobmg.com.br *.safra.com.br *.sicoob.com.br *.banrisul.com.br *.banrisul.b.br *.banorte.com *.xpi.com.br *.btgpactual.com *.btgpactualdigital.com *.picpay.com *.amedigital.com *.neon.tech *.neon.com.br *.wise.com *.revolut.com *.sandbox.3dsecure.io *.google.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com *.google.com/ *.weltpixel.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.pagar.me *.netsgroup.com *.sibs.pt *.seglan.com *.secureacs.com *.rsa3dsauth.com *.apata.io *.cardinalcommerce.com *.santander.com.br *.bradesco.com.br *.bradesco *.stone.com.br *.nubank.com.br *.itau.com.br *.bb.com.br *.caixa.gov.br *.inter.co *.bancointer.com.br *.c6bank.com.br *.bancobmg.com.br *.safra.com.br *.sicoob.com.br *.banrisul.com.br *.banrisul.b.br *.banorte.com *.xpi.com.br *.btgpactual.com *.btgpactualdigital.com *.picpay.com *.amedigital.com *.neon.tech *.neon.com.br *.wise.com *.revolut.com *.sandbox.3dsecure.io *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com https://www.magezon.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com flagpedia.net cdn.mundipagg.com api.pagar.me www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.hsforms.net *.hsforms.com 'self' data: *.facebook.com *.reddit.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ storage.googleapis.com *.google.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maps.googleapis.com 3ds2.pagar.me 3ds2-sdx.pagar.me js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com maxcdn.bootstrapcdn.com *.gstatic.com *.googleapis.com *.google.com unsafe-inline assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com api.dito.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.gstatic.com maps.googleapis.com api.mundipagg.com api.pagar.me brasilapi.com.br viacep.com.br servicodados.ibge.gov.br *.google.com google.com pay.sandbox.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self' data:; connect-src 'self'; media-src 'self' blob:; frame-src 'self'; worker-src 'self' blob: 1
default-src 'self'; script-src 'self' 'nonce-8c1b1f04-6bba-4cb6-a3df-41dc6eb7fbe0' 'strict-dynamic' js.stripe.com merchant.revolut.com sandbox-merchant.revolut.com www.googletagmanager.com connect.facebook.net bzrcdn.openai.com translate.google.com www.paypal.com pay.google.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: *.picmood.com picmood.com dl.dropboxusercontent.com *.basemaps.cartocdn.com *.tile.openstreetmap.org flagcdn.com www.facebook.com www.gstatic.com pay.google.com; font-src 'self'; connect-src 'self' api.stripe.com m.stripe.network *.paypal.com *.revolut.com *.google-analytics.com www.google-analytics.com *.ingest.sentry.io *.ingest.de.sentry.io *.ingest.us.sentry.io translate.google.com translate.googleapis.com dl.dropboxusercontent.com pay.google.com google.com www.facebook.com bzr.openai.com bzrcdn.openai.com; frame-src 'self' js.stripe.com hooks.stripe.com m.stripe.network *.paypal.com merchant.revolut.com sandbox-merchant.revolut.com pay.google.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' *.paypal.com; report-uri https://o4511036706848768.ingest.de.sentry.io/api/4511036710584400/security/?sentry_key=bf1aab87759b9494ac10423f6fbfe3ff 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net wordpress-1170834-4362865.cloudwaysapps.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * wordpress-1170834-4362865.cloudwaysapps.com 'self' 'unsafe-inline'; frame-ancestors wordpress-1170834-4362865.cloudwaysapps.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.affirm.com *.affirm.ca *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com wordpress-1170834-4362865.cloudwaysapps.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.affirm.com *.affirm.ca *.trackedlink.net *.ddlnk.net *.klarna.com *.klarnaevt.com *.klarnacdn.net https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cdninstagram.com *.fbcdn.net maps.googleapis.com wordpress-1170834-4362865.cloudwaysapps.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.affirm.com *.affirm.ca *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cloudflare.com ajax.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.instagram.com maps.googleapis.com wordpress-1170834-4362865.cloudwaysapps.com https://andersoncomposites.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com tagmanager.google.com wordpress-1170834-4362865.cloudwaysapps.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com wordpress-1170834-4362865.cloudwaysapps.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.affirm.com *.affirm.ca *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://ipinfo.io/json https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com https://www.google-analytics.com *.instagram.com *.googleusercontent.com wordpress-1170834-4362865.cloudwaysapps.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com wordpress-1170834-4362865.cloudwaysapps.com http: https: blob: 'self' 'unsafe-inline'; default-src wordpress-1170834-4362865.cloudwaysapps.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com *.google.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com https://www.magezon.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://ipinfo.io *.google-analytics.com *.fontawesome.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
report-uri https://www.sg.no/api/reporting/;  report-to csp-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://magic.sprinkle.com https://accounts.google.com https://challenges.cloudflare.com https://*.vercel-scripts.com https://*.googletagmanager.com https://www.googleadservices.com https://bat.bing.com https://*.clarity.ms; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://cdn.sprinkle.com https://images.unsplash.com https://*.ebayimg.com https://*.googleusercontent.com https://*.google-analytics.com https://*.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://bat.bing.com https://*.clarity.ms https://c.bing.com; font-src 'self' data:; connect-src 'self' https://magic.sprinkle.com https://*.supabase.co wss://*.supabase.co https://accounts.google.com https://challenges.cloudflare.com https://*.sentry.io https://*.posthog.com https://images.unsplash.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://bat.bing.com https://*.clarity.ms https://c.bing.com; frame-src https://accounts.google.com https://challenges.cloudflare.com https://cdn.sprinkle.com; object-src 'none'; base-uri 'self'; form-action 'self'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.googleapis.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com tagmanager.google.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com *.avada.io *.shopify.com js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.googleapis.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klevu.com *.ksearchnet.com *.cdn-apple.com 'self' data: https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * ssl.kaptcha.com www.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.klevu.com *.ksearchnet.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: www.google-analytics.com www.gstatic.com cookie-cdn.cookiepro.com bat.bing.com www.google.pl www.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com js.klevu.com *.ksearchnet.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.hsforms.net *.hsforms.com *.gstatic.com cookie-cdn.cookiepro.com consent.cookiebot.com bat.bing.com connect.facebook.net *.clarity.ms https://js.klevu.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.klevu.com *.ksearchnet.com assets.braintreegateway.com *.googleapis.com *.gstatic.com https://fonts.googleapis.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.klevu.com *.ksearchnet.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com t.elasticsuite.io *.hsforms.net *.hsforms.com cookie-cdn.cookiepro.com *.onetrust.com https://fonts.googleapis.com https://fonts.gstatic.com googleads.g.doubleclick.net *.clarity.ms 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.zopim.com *.zopim.io acsbapp.com *.acsbapp.com *.crazyegg.com *.rolex.com *.intercomcdn.com *.intercom.io *.nr-data.net *.intercomassets.com *.affirm.com *.mouseflow.com *.gembuilder.com alpixtrack.com *.alpixtrack.com *.breitling.com *.mapbox.com *.myregistry.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.rolex.com acsbapp.com *.acsbapp.com *.crazyegg.com *.intercomcdn.com *.intercom.io *.nr-data.net *.intercomassets.com *.affirm.com *.mouseflow.com *.gembuilder.com alpixtrack.com *.alpixtrack.com *.breitling.com *.mapbox.com *.myregistry.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.affirm.com *.affirm.ca www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.youtube.com http://www.sandbox.paypal.com *.twitter.com *.rolex.com acsbapp.com *.acsbapp.com *.crazyegg.com *.intercomcdn.com *.intercom.io *.nr-data.net *.intercomassets.com *.doubleclick.net https://googleads.g.doubleclick.net https://www.google.co.in *.mouseflow.com *.gembuilder.com alpixtrack.com *.alpixtrack.com *.breitling.com *.mapbox.com *.myregistry.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.affirm.com *.affirm.ca www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.bing.com *.zopim.com *.zopim.io *.doubleclick.net *.google.com *.google.co.in *.mastercard.com *.acsbapp.com *.crazyegg.com *.rolex.com *.intercomcdn.com *.intercom.io *.nr-data.net *.intercomassets.com *.mouseflow.com *.gembuilder.com alpixtrack.com *.alpixtrack.com *.breitling.com *.mapbox.com *.myregistry.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.googletagmanager.com *.cdninstagram.com *.fbcdn.net maps.googleapis.com *.amazonaws.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com *.affirm.com *.affirm.ca www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bing.com *.zopim.com *.zdassets.com acsbapp.com *.crazyegg.com *.rolex.com *.doubleclick.net *.intercomcdn.com *.intercom.io *.intercomassets.com *.mouseflow.com *.tagecorner.com *.gembuilder.com *.cloudflareinsights.com alpixtrack.com *.alpixtrack.com *.breitling.com *.mapbox.com *.myregistry.com *.googleadservices.com *.googletagmanager.com *.cardinalcommerce.com *.paypal.com *.paypalobjects.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com ajax.googleapis.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.typeform.com https://www.googletagmanager.com tagmanager.google.com *.instagram.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.fontawesome.com *.bing.com *.rolex.com *.acsbapp.com *.crazyegg.com *.intercomcdn.com *.intercom.io *.nr-data.net *.intercomassets.com *.affirm.com *.mouseflow.com *.gembuilder.com alpixtrack.com *.alpixtrack.com *.breitling.com *.mapbox.com *.myregistry.com https://static.klaviyo.com https://fonts.bunny.net assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zopim.com *.zopim.io acsbapp.com *.acsbapp.com *.crazyegg.com *.rolex.com *.intercomcdn.com *.intercom.io *.nr-data.net *.intercomassets.com *.affirm.com *.mouseflow.com *.gembuilder.com alpixtrack.com *.alpixtrack.com *.breitling.com *.mapbox.com *.myregistry.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.affirm.com *.affirm.ca www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google-analytics.com *.cloudflare.com *.twitter.com *.twimg.com *.zdassets.com *.zopim.com *.zopim.io wss://widget-mediator.zopim.com https://stats.g.doubleclick.net acsbapp.com *.acsbapp.com *.crazyegg.com *.rolex.com *.intercomcdn.com *.intercom.io *.intercomassets.com wss://nexus-websocket-a.intercom.io *.mouseflow.com *.gembuilder.com *.googlesyndication.com alpixtrack.com *.alpixtrack.com *.breitling.com *.mapbox.com *.myregistry.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com https://www.google-analytics.com *.instagram.com *.googleusercontent.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://maps.googleapis.com https://*.pendo.io https://pendo-io-static.storage.googleapis.com https://stats.pusher.com https://cdn.datatables.net https://cdnjs.cloudflare.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://pendo-static-5749076184662016.storage.googleapis.com https://pendo-io-static.storage.googleapis.com https://static.parcelplatform.com https://stats.pusher.com https://www.google.com https://www.googletagmanager.com https://maps.googleapis.com https://*.pendo.io https://www.gstatic.com https://cdn.datatables.net https://widget.intercom.io https://js.intercomcdn.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.datatables.net; img-src 'self' data: https://www.google.com https://*.googleapis.com https://maps.gstatic.com https://*.ggpht.com https://*.collateral360.com https://*.pendo.io https://*.s3.amazonaws.com https://www.googletagmanager.com https://static.parcelplatform.com https://static.intercomassets.com https://*.intercomcdn.com https://content.pendo.spatialstream.com; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com https://fonts.intercomcdn.com; connect-src 'self' https://www.google.com https://*.googleapis.com https://stats.g.doubleclick.net https://data.pendo.io https://sockjs-us2.pusher.com wss://ws-us2.pusher.com https://api-iam.intercom.io wss://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io; frame-src 'self' https://c360parc-datastorage-prod.s3.amazonaws.com https://www.google.com; form-action 'self'; report-to default 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data:; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; require-trusted-types-for 'script'; 1
default-src 'self'; script-src 'self' 'nonce-ori+WdxjJOtf5/MTfsYf+Q==' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://code.jquery.com https://cdn.jsdelivr.net https://stackpath.bootstrapcdn.com https://cdnjs.cloudflare.com; style-src 'self' 'nonce-ori+WdxjJOtf5/MTfsYf+Q==' 'unsafe-inline' https://stackpath.bootstrapcdn.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; form-action 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
script-src 'nonce-csmFGwLU0AmuUrl54ZzVSQ==' https://www.googletagmanager.com/ https://www.google.com/ https://www.heureka.sk/ https://www.heureka.cz/ http://www.heureka.cz/ https://cdn.heureka.group/ https://api.foxentry.cz/ https://cdn.foxentry.cz/ https://connect.facebook.net 'unsafe-inline' 'report-sample' 'nonce-csmFGwLU0AmuUrl54ZzVSQ==' 'strict-dynamic' 'unsafe-eval' https://www.pneusvet.sk/ https://pneusvet.venalio.com/ https://pneusvet.bwcdn.net/ https://www.googletagmanager.com/ https://www.google.com/ https://www.heureka.sk/ https://www.heureka.cz/ http://www.heureka.cz/ https://cdn.heureka.group/ https://api.foxentry.cz/ https://cdn.foxentry.cz/ https://connect.facebook.net 'unsafe-inline' 'report-sample'; report-uri https://pneusvet.sk/api/v1/csp/hook; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:; connect-src 'self' https://analytics.tiktok.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; report-uri https://probe.uptime.fend.team/in/csp-report/iwh_Y9mACdD4eF12c8qHS061qLByGU-mmXP4HT2CLBBVp8I; report-to fend-csp 1
object-src 'none';base-uri 'self';script-src 'nonce-PQp6kylwJRUFJAMoYCVy4Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-RbSJYVC3p3zTs2eVz6pBgQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
base-uri 'self';connect-src 'self' https://*.hotjar.com https://*.google-analytics.com https://*.linkedin.com https://*.facebook.com https://*.twitter.com;default-src 'self';form-action 'self' https://*.facebook.com;img-src * data:;media-src 'self';object-src 'none';script-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.hotjar.com https://*.facebook.net https://*.twitter.com https://instant.page;style-src 'self' 'unsafe-inline' https://*.googleapis.com;frame-src https://*.googletagmanager.com https://*.hotjar.com https://*.facebook.com https://*.twitter.com https://cdn.yoshki.com;font-src 'self' data: https://*.gstatic.com https://*.googleapis.com 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://static.hotjar.com https://script.hotjar.com https://files.tlt-cdn.com https://code.iconify.design https://unpkg.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; worker-src 'self' blob:; frame-src 'self' https://maps.google.com https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com; connect-src 'self' https://pmuqtcilwmvrcfhmnijs.supabase.co wss://pmuqtcilwmvrcfhmnijs.supabase.co https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://www.facebook.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.tolt.io https://files.tlt-cdn.com https://api.iconify.design https://api.simplesvg.com https://api.unisvg.com 1
default-src 'self' syndication.twitter.com; script-src js.val-pusteria.net 'unsafe-inline' 'unsafe-eval' player.peer.tv stats.peer.biz platform.twitter.com apis.google.com; connect-src 'self' stats.peer.biz; img-src 'self' data: images2.val-pusteria.net css.val-pusteria.net  www.hotel-guide.it player.peer.tv stats.peer.biz carto.peer.biz www.gravatar.com syndication.twitter.com api.trustyou.com; style-src 'self' 'unsafe-inline' css.val-pusteria.net js.val-pusteria.net; font-src css.val-pusteria.net; frame-src 'self' player.peer.tv www.facebook.com platform.twitter.com apis.google.com accounts.google.com www.youtube.com; child-src 'self' player.peer.tv www.facebook.com platform.twitter.com apis.google.com accounts.google.com www.youtube.com; report-uri https://csp-report.peer.biz/reportOnly/index 1
object-src  'none'; connect-src 'self' *.21sextreme.com *.21members.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.21sextreme.com *.21members.com join.gammasecure.com; script-src 'self' *.21sextreme.com *.21members.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.21sextreme.com *.21members.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
img-src https://higherlogicdownload.s3.amazonaws.com/AAFCS/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/AAFCS/ https://img.youtube.com/vi/ https://static.filestackapi.com/picker/ https://d2x5ku95bkycr3.cloudfront.net https://higherlogiclongterm.s3.amazonaws.com/AAFCS/ blob: https://d132x6oi8ychic.cloudfront.net 'self'; style-src https://d132x6oi8ychic.cloudfront.net 'unsafe-inline' https://higherlogiccloudfront.s3.amazonaws.com https://cdn.jsdelivr.net/jquery.slick/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://d2x5ku95bkycr3.cloudfront.net/ https://ajax.googleapis.com/ajax/libs/jqueryui/ https://use.fortawesome.com/ https://cdn.higherlogic.com/ai-assistant https://static.filestackapi.com/picker/ https://fonts.googleapis.com/ https://d3uf7shreuzboy.cloudfront.net/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/AAFCS/ https://higherlogicdownload.s3.amazonaws.com/AAFCS/ https://higherlogiclongterm.s3.amazonaws.com/AAFCS/ 'self'; font-src https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogiccloudfront.s3.amazonaws.com https://higherlogicdownload.s3.amazonaws.com/AAFCS/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/AAFCS/ 'self' https://higherlogiclongterm.s3.amazonaws.com/AAFCS/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://d2x5ku95bkycr3.cloudfront.net https://d132x6oi8ychic.cloudfront.net data:; script-src-elem https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d3uf7shreuzboy.cloudfront.net/ https://static.filestackapi.com/picker/ https://cdn.higherlogic.com/ai-assistant https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d2x5ku95bkycr3.cloudfront.net/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://www.gstatic.com/recaptcha/ https://static.filestackapi.com/filestack-js/ 'self' https://ajax.aspnetcdn.com/ajax/ 'unsafe-eval' 'unsafe-inline'; media-src https://higherlogiclongterm.s3.amazonaws.com/AAFCS/ https://higherlogicdownload.s3.amazonaws.com/AAFCS/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/AAFCS/ https://higherlogicstream.s3.amazonaws.com/AAFCS/ 'self' https://d132x6oi8ychic.cloudfront.net; script-src https://higherlogiclongterm.s3.amazonaws.com/AAFCS/ https://higherlogicdownload.s3.amazonaws.com/AAFCS/ https://ajax.aspnetcdn.com/ajax/ https://cdn.jsdelivr.net/jquery.slick/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d132x6oi8ychic.cloudfront.net https://cdn.informz.net 'unsafe-eval' https://use.fortawesome.com/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/AAFCS/ https://cdnjs.cloudflare.com/ajax/libs/prism/ 'unsafe-inline' https://d2x5ku95bkycr3.cloudfront.net/ https://higherlogiccloudfront.s3.amazonaws.com https://static.filestackapi.com https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d3uf7shreuzboy.cloudfront.net/ 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://api.connectedcommunity.org/ 'self' https://www.youtube.com/embed/ https://*.kb.us.higherlogic.com; connect-src https://upload.filestackapi.com https://static.filestackapi.com https://cloud.filestackapi.com/folder/list/ 'self' https://hl-managedservices.informz.net https://d3uf7shreuzboy.cloudfront.net/ blob:; worker-src 'self'; default-src 'self'; base-uri 'self'; frame-ancestors https://*.connectedcommunity.org/ 'self'; object-src 'none'; manifest-src 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.matomo.cloud https://static.ads-twitter.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; font-src 'self' https: data:; media-src 'self' https://media.citizenx.com https: data: blob:; connect-src 'self' https://citizenx.matomo.cloud https: wss: blob: data:; manifest-src 'self'; frame-src 'self' https://app.cal.com; frame-ancestors 'self'; 1
font-src *.fontawesome.com *.fonts.googleapis.com *.gstatic.com data: *.cloudflare.com 'self' data: *.tawk.to fonts.gstatic.com use.fontawesome.com maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com https://square-fonts-production-f.squarecdn.com/ https://d1g145x70srn7h.cloudfront.net/ https://cash-f.squarecdn.com/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.tawk.to *.yotpo.com swellrewards.com *.swellrewards.com https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com www.google.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com sandbox.secure.checkout.visa.com secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com *.google.com *.addthis.com *.pinterest.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com *.paypal.com * *.tawk.to *.yotpo.com swellrewards.com *.swellrewards.com https://*.online-metrix.net https://imgs.signifyd.com https://pci-connect.squareup.com https://connect.squareup.com https://pci-connect.squareupsandbox.com https://connect.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.gstatic.com sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com *.cdninstagram.com validate.fishpig.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: *.tawk.to cdn.jsdelivr.net *.yotpo.com swellrewards.com *.swellrewards.com https://imgs.signifyd.com https://*.online-metrix.net https://www.gstatic.com/ https://sandbox.api.cash.app/ https://site-assets.afterpay.com/ https://sandbox.web.squarecdn.com/ https://api.cash.app/ https://web.squarecdn.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://franklin-assets.s3.amazonaws.com/ https://static.sandbox.afterpay.com/ https://static.afterpay.com/ https://static.sandbox.afterpay.com/logo/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.instagram.com utt.impactcdn.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com *.tawk.to cdn.jsdelivr.net *.yotpo.com swellrewards.com *.swellrewards.com https://cdn-scripts.signifyd.com https://imgs.signifyd.com https://js.squareup.com https://js.afterpay.com/ https://nd.squarecdn.com https://js.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://portal.sandbox.afterpay.com/ https://portal.afterpay.com/ https://cdn.plaid.com/ https://sandbox.kit.cash.app/ https://kit.cash.app/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com https://static.klaviyo.com unsafe-inline assets.braintreegateway.com *.gstatic.com *.tawk.to fonts.googleapis.com cdn.jsdelivr.net *.yotpo.com swellrewards.com *.swellrewards.com maxcdn.bootstrapcdn.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://fonts.googleapis.com/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com thm.visa.com *.cloudflare.com *.paypal.com *.googleapis.com *.addthis.com *.cardinalcommerce.com *.graph.instagram.com *.google-analytics.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.google.com google.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.tawk.to wss://*.tawk.to *.yotpo.com swellrewards.com *.swellrewards.com https://imgs.signifyd.com https://pci-connect.squareup.com https://pci-connect.squareupsandbox.com https://api.amplitude.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://o160250.ingest.sentry.io/ https://api.lab.amplitude.com/sdk/vardata https://sandbox.plaid.com/ https://production.plaid.com/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'report-sample' https://telegram.org https://www.googletagmanager.com https://connect.facebook.net https://static.line-scdn.net https://accounts.google.com https://seal.gamecheck.cloud; connect-src 'self' wss: https://api.iconify.design https://api.simplesvg.com https://api.unisvg.com https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://www.facebook.com https://connect.facebook.net https://accounts.google.com; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline' 'report-sample' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https:; child-src 'self' https:; media-src 'self' blob: data:; worker-src 'self' blob:; manifest-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self' https:; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'strict-dynamic' 'nonce-a22ca5a292787e5fc9406b64a03cbca3' *.yandex.ru *.facebook.net *.google-analytics.com *.google.com *.gstatic.com *.googletagmanager.com *.mail.ru dota2.net *.trustpilot.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss: https://mysentry.io; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri https://mysentry.io/api/148/security/?sentry_key=a616d2c34afed96d13185a20f54a6732 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdnjs.cloudflare.com cdn.jsdelivr.net cdn.datatables.net cdn.embedly.com code.jquery.com stackpath.bootstrapcdn.com www.googletagmanager.com www.google.com www.gstatic.com vlibras.gov.br; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdnjs.cloudflare.com cdn.jsdelivr.net cdn.datatables.net code.jquery.com pro.fontawesome.com; font-src 'self' data: fonts.gstatic.com cdnjs.cloudflare.com cdn.jsdelivr.net pro.fontawesome.com; img-src 'self' data: blob: https:; media-src 'self' blob: https:; connect-src 'self' *.google-analytics.com *.analytics.google.com www.googletagmanager.com; worker-src 'self' blob: cdn.jsdelivr.net; frame-src 'self' www.google.com www.youtube.com www.youtube-nocookie.com player.vimeo.com cdn.embedly.com vlibras.gov.br; object-src 'self'; base-uri 'self'; frame-ancestors 'self' https://transparencia.al.ce.gov.br https://transparencia-hmg.al.ce.gov.br http://10.85.4.214:9037 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://www.googletagservices.com https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://adservice.google.com https://googleads.g.doubleclick.net https://*.fundingchoicesmessages.google.com https://*.adtrafficquality.google https://cdn.cookielaw.org https://cmp.gatekeeperconsent.com https://the.gatekeeperconsent.com https://www.ezojs.com https://*.ezojs.com https://ezoicanalytics.com https://*.ezoic.com https://*.ezoic.net https://*.ezoiccdn.com https://cdn.jsdelivr.net https://unpkg.com https://*.privacy-center.org; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https: http:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://*.google.com https://*.googlesyndication.com https://*.googleadservices.com https://*.doubleclick.net https://pagead2.googlesyndication.com https://*.fundingchoicesmessages.google.com https://*.adtrafficquality.google https://*.ezoic.com https://*.ezoic.net https://cmp.gatekeeperconsent.com https://the.gatekeeperconsent.com https://ezoicanalytics.com wss://*.uakor.com https://uakor.com https://api.uakor.com; frame-src 'self' https://www.google.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://*.fundingchoicesmessages.google.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://*.adtrafficquality.google https://*.ezoic.com https://*.ezoic.net https://www.ezojs.com; frame-ancestors 'self'; form-action 'self'; base-uri 'self'; object-src 'none'; worker-src 'self' blob:; media-src 'self' blob: data:; manifest-src 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: *.fontawesome.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com embed.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.meetanshi.com meetanshi.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com *.google.com/ *.meetanshi.com meetanshi.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com challenges.cloudflare.com *.challenges.cloudflare.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.gstatic.com https://translate.googleapis.com https://fonts.gstatic.com http://translate.google.com https://www.magezon.com *.meetanshi.com meetanshi.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com oealabs.com *.cloudfront.net embed.tawk.to c.clarity.ms c.bing.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://translate.googleapis.com http://translate.google.com https://translate-pa.googleapis.com *.google.com/ *.meetanshi.com meetanshi.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com challenges.cloudflare.com *.challenges.cloudflare.com www.clarity.ms scripts.clarity.ms embed.tawk.to 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com www.gstatic.com *.fontawesome.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com challenges.cloudflare.com *.challenges.cloudflare.com cdn.jsdelivr.net embed.tawk.to 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://translate.googleapis.com *.googleadservices.com *.googletagmanager.com  *.sandbox.paypal.com *.paypalobjects.com *.meetanshi.com meetanshi.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com challenges.cloudflare.com *.challenges.cloudflare.com e.clarity.ms h.clarity.ms *.tawk.to wss://*.tawk.to 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'nonce-I++M+PXy4w1GhHPv5ISnlg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'nonce-1NLxoxVm7L+ENTBoptmd6w==' www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net c.seznam.cz www.zbozi.cz connect.facebook.net analytics.tiktok.com t.contentsquare.net widget.packeta.com cdn.foxentry.com cdn.foxentry.cz api.foxentry.cz; style-src 'self' fonts.googleapis.com cdn.foxentry.com cdn.foxentry.cz; style-src-attr 'unsafe-inline'; font-src 'self' fonts.gstatic.com cdn.foxentry.com; img-src https: data:; connect-src https:; frame-src 'self' www.googletagmanager.com www.youtube.com www.youtube-nocookie.com widget.packeta.com api.foxentry.cz www.facebook.com; frame-ancestors 'self'; form-action 'self' www.facebook.com; base-uri 'self'; object-src 'none' 1
connect-src 'none'; script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=7AN8r64Z241jf4eWWqtOMkyXZAjR5fCHIfA1UfyNDP4-1789291123.9804337-1.0.1.1-wxo2rYad1WuR9Jggn2nG7aPHknpOgcncja9wT3JAL0v25IzJoDc5hzf6CsaFKQ8SG3i1rILJm.yKJWbSFmzPPGu..pcK63JU8DY5vrLb0B86UaUN2hFyUV7ylJToY1rP_.tTNIOZmeo0kGeCGLZUSAHpCAaMZtxOye2rIQOCC6oXK8wGQTEZ808yQ0MgUMNMwlOsU160jGT09QAYvHGPAA; report-to cf-agutyhqcpcilioee 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com maxcdn.bootstrapcdn.com https://geowidget.easypack24.net https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://geowidget-app.inpost.pl/ https://sandbox-easy-geowidget.easypack24.net/ https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com www.xtento.com cdn.xtento.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com www.xtento.com cdn.xtento.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.googleapis.com maxcdn.bootstrapcdn.com assets.braintreegateway.com https://geowidget.easypack24.net https://geowidget.inpost.pl https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.easypack24.net *.inpost.pl *.openstreetmap.org https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-qY1AmMLi5kPX0M8-LpeveA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://cdn.cookielaw.org https://www.bnpparibas.de https://brasil.bnpparibas; script-src 'self' 'unsafe-eval' https://fast.wistia.com https://beacon-v2 https://analyticsgroupcom.bnpparibas.com https://cdn-group.bnpparibas.com https://cdn.cookielaw.org https://cdn.territories.bnpparibas ajax.googleapis.com www.googletagmanager.com googletagmanager.com tagmanager.google.com 'sha256-F+QMJISS2IIkRUd2a+c+u1owMqMSoidCaHFDAmzUgOo=' 'sha256-iqOPaRlwwgtNy7J3vh/+LSW9/QVdN+Fl+YfMS8+GcPo=' 'sha256-yZHeusBmoqYSsqdm5ylf993dfqVyosFaYa5gueKZDsA=' 'sha256-rjfSUjIA2A20p4lATAefLLG7Fy7VJssnkJ+SnJ2TXNo=' 'sha256-AgTl8Go9WFl+lprCLuWNLfmORUij6C8Lv3fUmWcnPPI=' 'sha256-RWn1w3BKiDlDNbD6vM1kYLpeWCwwWPkob0LMWJ2gKJk=' 'sha256-20r4C1ML+UK/9Jud0Z88jxCTipJIBnYfOx7LTihQpIk=' 'sha256-fPXetwWx4258jL256OrNtQQyvFVR4/BotkeZKtfk54Q=' 'sha256-yElBEKucE35qwHf8qWcAvqD25zOJ7TqTptcHyzGhOxw=' 'sha256-XcJhjhQeT3IZrXbvjXS7FdDB0mGtErY7S1qu8mAIatM=' 'sha256-qcT/R0HkWUs2DMxvtvcMobUms6Z5/fPtfgUe2hN67gE='; style-src 'self' 'unsafe-inline' data: https://fonts.googleapis.com https://www.gstatic.com https://cdn-group.bnpparibas.com https://cdn.cookielaw.org https://cdn.territories.bnpparibas fonts.googleapis.com www.googletagmanager.com tagmanager.google.com; img-src 'self' data: https://s.w.org https://wp-rocket.me https://c.tile.openstreetmap.org https://a.tile.openstreetmap.org https://b.tile.openstreetmap.org blob: https://www.google.com/pagead/landing https://ade.googlesyndication.com https://pagead2.googlesyndication.com https://ad.doubleclick.net https://contrib.territories.bnpparibas https://cdn-group.bnpparibas.com https://cdn.cookielaw.org https://cdn.territories.bnpparibas secure.gravatar.com www.gravatar.com i.ytimg.com data: www.googletagmanager.com; connect-src 'self' https://bnp-privacy.my.onetrust.com https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location https://yoast.com https://cdn.cookielaw.org https://o173685.ingest.sentry.io https://analyticsgroupcom.bnpparibas.com https://contrib.territories.bnpparibas https://www.google.com/pagead/landing https://pagead2.googlesyndication.com https://adservice.google.com https://sourcemap.devowl.io https://sourcemap.devowl.io/real-media-library/4.22.47/adb9a2f4ef22d5d85978840bd322bf76/index.js.map www.googletagmanager.com; font-src 'self' data: https://fonts.gstatic.com https://fast.wistia.com https://github.com/google/fonts https://cdn-group.bnpparibas.com https://cdn.cookielaw.org https://cdn.territories.bnpparibas fonts.gstatic.com fonts.googleapis.com data:; media-src 'self' https://asset.mediahub.bnpparibas https://upload.wikimedia.org https://broadcast.mediahub.bnpparibas data: https://mediahub.group.echonet https://my.mediahub.bnpparibas https://my.mediahub.bnpparibas/AssetLink/1cwfu8n4ki414p6d240ff18r41ver00j.mp4 https://cdn-group.bnpparibas.com https://cdn.cookielaw.org https://cdn.territories.bnpparibas; frame-src 'self' https://www.youtube.com https://wp-rocket.me https://open.spotify.com https://www.youtube-nocookie.com https://centric.bnpparibas.com https://13179764.fls.doubleclick.net https://td.doubleclick.net https://gateway.zscalertwo.net https://remove.video https://mozbar.moz.com blob: https://fxplus.bnpparibas.com www.youtube.com www.googletagmanager.com; child-src 'self' www.youtube.com www.googletagmanager.com; worker-src 'self' blob:; 1
default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https://www.youtube.com https://open.spotify.com https://docs.google.com https://sst.villapinedo.nl https://plugin.whydonate.com; report-uri https://abp.villapinedo.nl/api/security/csp-reports 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * libs.na.bambora.com gstatic.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://static.bambora.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://static.bambora.com widget.freshworks.com m2epro.freshdesk.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com libs.na.bambora.com gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.bambora.com widget.freshworks.com m2epro.freshdesk.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://api.v1.checkout.bambora.com widget.freshworks.com m2epro.freshdesk.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com libs.na.bambora.com gstatic.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.stape.io *.cloudflare.com *.bootstrapcdn.com *.fontawesome.com maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.elmotalent.com.au 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://*.ewaypayments.com https://*.sandbox.ewaypayments.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.stape.io dpm.demdex.net *.addthis.com *.ewaypayments.com *.elmotalent.com.au c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.facebook.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com *.stape.io *.cloudflare.com *.googleapis.com *.clarity.ms *.bing.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: blob: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.ewaypayments.com https://*.sandbox.ewaypayments.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.stape.io *.cloudflare.com *.twitter.com *.fontawesome.com dpm.demdex.net *.addthis.com *.moatads.com *.addthisedge.com *.googleapis.com *.elmotalent.com.au *.clarity.ms accesshardwareptyltd.snapforms.com.au www.gstatic.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com maps.googleapis.com cdn.ampproject.org connect.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https://static.klaviyo.com *.googleapis.com *.googletagmanager.com *.stape.io *.cloudflare.com *.fontawesome.com *.bootstrapcdn.com *.typekit.net www.gstatic.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com assets.braintreegateway.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog *.stape.io *.cloudflare.com *.addthis.com *.clarity.ms api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com places.googleapis.com cdn.ampproject.org www.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src dpm.demdex.net *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri /csp-report; report-to report-endpoint; 1
font-src https://www.googletagmanager.com *.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com *.salesfire.co.uk *.typekit.net *.klarnacdn.net fonts.gstatic.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com *.klaviyo.com *.slant.co *.tawk.to data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.salesfire.co.uk *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.salesfire.co.uk www.google.com.ua www.xtento.com cdn.xtento.com *.bing.com *.bing.net cdn-cookieyes.com *.clarity.ms d3k81ch9hvuctc.cloudfront.net *.doubleclick.net *.facebook.com *.googleadservices.com www.google.ad www.google.ae www.google.al www.google.at www.google.be www.google.bg www.google.ca www.google.ch www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.com.au www.google.com.bd www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.eg www.google.com.gh www.google.com.hk www.google.com.mx www.google.com.ng www.google.com.om www.google.com.ph www.google.com.pk www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.tr www.google.com.tw www.google.com.vc www.google.com.vn www.google.co.nz www.google.co.th www.google.co.ug www.google.co.uk www.google.co.ve www.google.co.za www.google.cz www.google.de www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.gg www.google.gr www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.it www.google.je www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.mu www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.se www.google.sk www.google.tn *.google.com *.googlesyndication.com *.jsdelivr.net *.klarnacdn.net *.placeholder.com *.postcodeanywhere.co.uk tawk.link *.tawk.to data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.salesfire.co.uk *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com * www.xtento.com cdn.xtento.com *.addthis.com *.bing.com *.calendly.com cdn-cookieyes.com *.clarity.ms *.cloudflareinsights.com *.doubleclick.net *.facebook.net *.googleapis.com *.google.com *.googlesyndication.com *.googletagmanager.com *.jsdelivr.net *.klaviyo.com *.mplat-ppcprotect.com *.pcapredict.com *.pingdom.net *.postcodeanywhere.co.uk *.responsetap.com s3.amazonaws.com *.tawk.to 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://static.klaviyo.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com *.salesfire.co.uk *.typekit.net fonts.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com *.gstatic.com *.jsdelivr.net *.klaviyo.com *.mailchimp.com *.postcodeanywhere.co.uk *.tawk.to 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.gstatic.com *.tawk.to 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ wss://*.tawk.to api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.salesfire.co.uk *.smartmetrics.co.uk *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com * *.bing.com *.bing.net cdn-cookieyes.com *.clarity.ms *.cookieyes.com *.datadome.co *.doubleclick.net *.facebook.com *.googleadservices.com www.google.ae www.google.be www.google.ca www.google.ch www.google.co.id www.google.co.in www.google.com.au www.google.com.cy www.google.com.do www.google.com.gh www.google.com.hk www.google.com.mx www.google.com.ng www.google.com.ph www.google.com.pk www.google.com.tr www.google.com.ua www.google.com.vn www.google.co.nz www.google.co.ug www.google.co.uk www.google.co.za www.google.de www.google.ee www.google.es www.google.fr www.google.gg www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.it www.google.je www.google.li www.google.lk www.google.lv www.google.nl www.google.ro www.google.se *.googlesyndication.com *.klaviyo.com *.mplat-ppcprotect.com *.pingdom.net *.postcodeanywhere.co.uk *.sinaydove.com *.tawk.to 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://cbf9bc0e-d2df-49cc-aef1-648d26aeabb5.sansec.watch/; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://accounts.google.com https://www.google.com https://www.gstatic.com https://cookie-cdn.cookiepro.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io content.holmbank.ee https://www.google.com https://www.google.ee https://www.google-analytics.com https://www.facebook.com https://cookie-cdn.cookiepro.com https://*.cookiepro.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://www.google.com https://www.gstatic.com https://cookie-cdn.cookiepro.com https://geolocation.onetrust.com https://www.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cookie-cdn.cookiepro.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://cookie-cdn.cookiepro.com https://geolocation.onetrust.com https://stats.g.doubleclick.net https://privacyportal.cookiepro.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com *.klarnacdn.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com cdn.userway.org data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://static.addtoany.com/ www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * js.mollie.com *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://js.stripe.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.klarna.com *.klarnaevt.com *.klarnacdn.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://www.mollie.com www.google.com.ua *.google.com *.google.fr *.google.ie *.hsforms.com bat.bing.com *.hubspot.com cdn.userway.org cdn.asphaltkingdom.com *.hubspotusercontent00.net https://data.asphaltkingdom.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://static.addtoany.com/ https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com widget.freshworks.com m2epro.freshdesk.com *.klarna.com *.klarnacdn.net *.klarnaservices.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.avada.io js.mollie.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com *.google.fr *.google.ie *.googletagmanager.com *.googleadservices.com https://checkout.stripe.com/checkout.js https://js.stripe.com/v3/ *.stape.io seal.godaddy.com bat.bing.com js.hs-scripts.com *.hotjar.com *.asphaltkingdom.com js.usemessages.com js.hs-analytics.net js.hsleadflows.net js.hubspot.com js.hs-banner.com js.hsadspixel.net js.hsforms.net cdn.userway.org js.hscta.net fast.wistia.com googleadservices.com https://data.asphaltkingdom.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com widget.freshworks.com m2epro.freshdesk.com *.klarnacdn.net assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com cdn.userway.org 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://stats.addtoany.com/menu www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com widget.freshworks.com m2epro.freshdesk.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.link.com *.amazon.com *.google-analytics.com *.doubleclick.net *.cloudflare.com maps.googleapis.com api.userway.org *.hubspot.com *.hsforms.com api.hubapi.com app.clicklease.com googleads.g.doubleclick.net googleadservices.com cdn.userway.org https://data.asphaltkingdom.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.yotpo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com meetanshi.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.meetanshi.com meetanshi.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com landofcoder.com www.xtento.com *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com *.meetanshi.com meetanshi.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.xtento.com cdn.xtento.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com widget.freshworks.com m2epro.freshdesk.com *.avada.io *.shopify.com *.meetanshi.com meetanshi.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com landofcoder.com www.xtento.com cdn.xtento.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com *.yotpo.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com widget.freshworks.com m2epro.freshdesk.com *.ideal-postcodes.co.uk https://get.geojs.io *.avada.io *.meetanshi.com meetanshi.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com landofcoder.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-OUwx1Th8nDIhWd22DORIOg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; img-src 'self' data: https: *.trustedshops.com *.cloudfront.net garten-deals.de www.garten-deals.de *.paypal.com *.google-analytics.com *.googletagmanager.com *.adobe.com *.ftcdn.net *.behance.net *.vimeocdn.com *.youtube.com *.typekit.net *.gstatic.com *.ssl-images-amazon.com *.media-amazon.com *.payments-amazon.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.facebook.com *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.googleapis.com *.addthis.com *.pinterest.com *.cdninstagram.com widgets.magentocommerce.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net bid.g.doubleclick.net googleads.g.doubleclick.net validator.swagger.io b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com cdn.xtento.com *.doubleclick.net *.ad-srv.net *.bsmartdata.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.trustedshops.com *.klaviyo.com *.adcell.com *.paypal.com *.google.com *.googletagmanager.com *.adobe.com *.newrelic.com *.nr-data.net *.cardinalcommerce.com *.commerce-payment-services.com *.vimeocdn.com *.youtube.com vimeo.com *.magento-ds.com *.typekit.net *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com cdn.doofinder.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com webchat.dotdigital.com *.klarna.com *.klarnacdn.net *.klarnaservices.com *.facebook.net *.avada.io *.shopify.com pay.google.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.instagram.com cdn.xtento.com s.ytimg.com amcglobal.sc.omtrdc.net includestest.ccdc02.com songbirdstag.cardinalcommerce.com *.doubleclick.net *.ad-srv.net ad4m.at consent.cookiebot.com static.hotjar.com script.hotjar.com pix.hyj.mobi ipdpx.de px.qero-srv.de t.adcell.com stapecdn.com *.stapecdn.com consentcdn.cookiebot.com www.google-analytics.com google-analytics.com; style-src 'self' 'unsafe-inline' *.klaviyo.com *.googleapis.com *.adobe.com *.doofinder.com *.klarnacdn.net *.fontawesome.com assets.braintreegateway.com; font-src 'self' *.klaviyo.com *.gstatic.com *.typekit.net *.klarnacdn.net *.fontawesome.com; connect-src 'self' *.klaviyo.com *.google-analytics.com *.googletagmanager.com *.newrelic.com *.nr-data.net *.cardinalcommerce.com *.paypal.com *.adobe.io *.sentry.io *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazonpay.com mws.amazonservices.com *.doofinder.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com *.klarnaevt.com *.klarnacdn.net *.klarnaservices.com *.klarna.com *.avada.io *.cloudflare.com *.googleapis.com *.addthis.com *.graph.instagram.com dpm.demdex.net amcglobal.sc.omtrdc.net performance.typekit.net *.doubleclick.net *.ad-srv.net *.bsmartdata.com ad4m.at t.adcell.com consentcdn.cookiebot.com www.google.com region1.analytics.google.com ws.hotjar.com wss://ws.hotjar.com content.hotjar.io metrics.hotjar.io stapecdn.com *.stapecdn.com *.garten-deals.de www.googleadservices.com *.googleadservices.com www.google.de *.google.de; frame-src 'self' *.trustedshops.com *.paypal.com *.google.com *.youtube.com *.youtube-nocookie.com *.cardinalcommerce.com *.braintreegateway.com *.amazon.com *.payments-amazon.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.addthis.com *.pinterest.com player.vimeo.com *.adobe.com ad4m.at *.ad4m.at *.bsmartdata.com *.doubleclick.net *.ad-srv.net consent.cookiebot.com r.adserver01.de t.adcell.com consentcdn.cookiebot.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' *.cardinalcommerce.com *.paypal.com *.amazon.com *.wirecard.com * 1
font-src *.cloudflare.com *.iconify.design https://fonts.gstatic.com *.gstatic.com *.fontawesome.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com https://www.google.com https://www.gstatic.com 'self' data: *.tawk.to fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cloudflare.com *.iconify.design *.googleapis.com *.gstatic.com *.fontawesome.com *.twitter.com *.google.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.tawk.to webpay3g.transbank.cl webpay3gint.transbank.cl 'self' 'unsafe-inline'; frame-ancestors self www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.cloudflare.com *.youtube.com/ *.iconify.design *.googleapis.com *.gstatic.com *.fontawesome.com *.kaptcha.com *.google.com https://scontent-ams4-1.cdninstagram.com www.google.com www.gstatic.com apis.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.tawk.to 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.cloudflare.com *.salesmanago.pl *.iconify.design *.googleapis.com *.gstatic.com *.fontawesome.com *.amazonaws.com *.kaptcha.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com https://clauem2.arrowtheme.com https://scontent-ams4-1.cdninstagram.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.tawk.to cdn.jsdelivr.net data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.salesmanago.pl *.cloudflare.com *.iconify.design *.googleapis.com *.gstatic.com *.fontawesome.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.nr-data.net *.newrelic.com *.maps.googleapis.com *.trackedlink.net *.cloudfront.net *.rdstation.com.br *.google.com *.maps.gstatic.com maps.googleapis.com *.googletagmanager.com *.googleadservices.com https://scontent-ams4-1.cdninstagram.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cloudflare.com *.iconify.design *.googleapis.com *.gstatic.com *.fontawesome.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com fonts.googleapis.com *.google-analytics.com unsafe-inline assets.braintreegateway.com *.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.cloudflare.com *.salesmanago.pl *.iconify.design *.googleapis.com *.gstatic.com *.fontawesome.com *.twitter.com *.paypal.com *.twimg.com *.googleadservices.com *.google-analytics.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.nr-data.net *.newrelic.com *.ampproject.org *.rdstation.com.br *.google.com *.google.co.in *.maps.gstatic.com *.maps.googleapis.com maps.googleapis.com https://scontent-ams4-1.cdninstagram.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com google.com t.elasticsuite.io *.tawk.to wss://*.tawk.to 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
font-src *.fontawesome.com *.fonts.googleapis.com *.gstatic.com data: *.cloudflare.com *.tawk.to fonts.gstatic.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.tawk.to *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com *.google.com https://www.youtube.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.addthis.com *.pinterest.com *.tawk.to *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com *.cdninstagram.com *.tawk.to cdn.jsdelivr.net *.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com *.avada.io *.google.com/ assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.instagram.com *.tawk.to cdn.jsdelivr.net *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com unsafe-inline *.googleapis.com *.tawk.to fonts.googleapis.com cdn.jsdelivr.net *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com https://get.geojs.io *.avada.io www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cloudflare.com *.paypal.com *.googleapis.com *.addthis.com *.cardinalcommerce.com *.graph.instagram.com *.google-analytics.com *.tawk.to wss://*.tawk.to *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.hubspot.com https://js.hs-scripts.com https://js.hs-analytics.net https://js.hsforms.net https://js.hscollectedforms.net https://js.hsadspixel.net https://*.hsforms.net https://*.hs-banner.com https://*.brevo.com https://sibautomation.com https://*.wonderpush.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://*.googleapis.com https://apis.google.com https://www.google.com https://www.gstatic.com https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com https://*.epayco.co https://static.cloudflareinsights.com https://connect.facebook.net https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.clarity.ms https://snap.licdn.com https://analytics.tiktok.com https://static.hsappstatic.net https://*.hubspotusercontent-na1.net https://js-na1.hs-scripts.com https://epayco-checkout-testing.s3.amazonaws.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://*.brevo.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net https://*.brevo.com; connect-src 'self' https://*.hubspot.com https://*.hubapi.com https://*.hsforms.com https://*.brevo.com https://*.wonderpush.com https://www.google-analytics.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://*.googleapis.com https://*.epayco.co https://cloudflareinsights.com https://*.clarity.ms https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://px.ads.linkedin.com https://analytics.google.com https://region1.analytics.google.com https://www.google.com https://www.google.com.co https://ad.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://forms.hscollectedforms.net https://*.epayco.io https://mpc2-prod-21-is5qnl632q-uc.a.run.app https://5z-2b6b7616f94640c2840d1841e1ac24c3.ecs.us-east-1.on.aws; frame-src 'self' https://*.epayco.co https://www.google.com https://www.youtube.com https://td.doubleclick.net https://*.facebook.com; manifest-src 'self' https://*.wonderpush.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; report-uri https://epayco.repolite.link/epayco-csp-report.php; report-to csp-endpoint 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.adobe.com *.facebook.com *.facebook.net *.fontawesome.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.paypal.com *.youtube.com *.vimeo.com *.vimeocdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://checkout.flutterwave.com *.ravepay.co *.f4b-flutterwave.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'unsafe-inline' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.facebook.com *.facebook.net *.fontawesome.com *.googleapis.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.vimeo.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://js.useklump.com s7.addthis.com *.facebook.com *.facebook.net *.fontawesome.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.paypal.com *.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com https://checkout.flutterwave.com *.f4b-flutterwave.com *.ravepay.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.facebook.com *.facebook.net *.fontawesome.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.paypal.com *.youtube.com *.vimeo.com *.vimeocdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com ekr.zdassets.com/ *.adobe.com *.facebook.com *.facebook.net *.fontawesome.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.youtube.com *.vimeo.com *.vimeocdn.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.ravepay.co https://checkout.flutterwave.com *.f4b-flutterwave.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src 'self' data:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-src 'self' https://vercel.live https://*.youtube.com https://discord.com https://www.google.com https://recaptcha.google.com https://*.canvas.stillfront.com; default-src 'self' https://vercel.live https://discord.com; script-src 'self' 'strict-dynamic' 'nonce-YWNlZjJkZWUtNGYyZC00MWUyLWFjZWUtZmI4Mzk0ZTYyMzFk' https://*.vercel.app https://vercel.live https://*.appsflyer.com https://*.playsupremacy.com https://*.strapiapp.com https://*.google-analytics.com https://*.googletagmanager.com https://*.google.com https://www.gstatic.com; script-src-elem 'self' 'strict-dynamic' 'nonce-YWNlZjJkZWUtNGYyZC00MWUyLWFjZWUtZmI4Mzk0ZTYyMzFk'; style-src 'self' 'nonce-YWNlZjJkZWUtNGYyZC00MWUyLWFjZWUtZmI4Mzk0ZTYyMzFk'; style-src-attr 'unsafe-inline'; connect-src 'self' https://*.vercel.app https://vercel.live https://*.playsupremacy.com:* https://sentry.bytro.com wws://*.pusher.com https://*.onelink.me https://*.privacy-center.org https://*.appsflyer.com https://*.playsupremacy.com https://*.strapiapp.com https://*.google-analytics.com https://*.googletagmanager.com https://www.google.com https://*.canvas.stillfront.com https://cdn.jsdelivr.net https://storage.googleapis.com; media-src 'self' https://*.playsupremacy.com https://*.strapiapp.com; upgrade-insecure-requests; frame-ancestors 'self' https://*.strapiapp.com; img-src 'self' blob: data: https://www.googletagmanager.com https://*.privacy-center.org diligent-luck-1d26f70e1b.media.strapiapp.com stunning-badge-0df13c215f.media.strapiapp.com storage.googleapis.com; report-uri https://www.playsupremacy.com/api/csp-report; report-to csp-endpoint; 1
object-src  'none'; connect-src 'self' *.lethalhardcore.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.lethalhardcore.com join.gammasecure.com; script-src 'self' *.lethalhardcore.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.lethalhardcore.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
font-src data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src 'self' 'unsafe-inline'; img-src data: maps.gstatic.com *.googleapis.com *.ggpht.com analytics.hyva.io https://images.unsplash.com data: 'self' 'unsafe-inline'; script-src maps.googleapis.com analytics.hyva.io https://maps.googleapis.com https://player.vimeo.com *.newrelic.com *.nr-data.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.gstatic.com data: analytics.hyva.io *.google-analytics.com https://maps.googleapis.com https://player.vimeo.com *.newrelic.com *.nr-data.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://77656ea2-9f80-4a74-ba7d-9d4c3bc7b1bd.sansec.watch/; report-to report-endpoint; 1
font-src *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net *.youtube-nocookie.com *.visualwebsiteoptimizer.com app.vwo.com cdn.privacy-mgmt.com www.computop-paygate.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com useruploads.vwo.io chart.googleapis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.captcha.eu *.google.de m.media-amazon.com static-eu.payments-amazon.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com static.zdassets.com static.zdassets.com/ekr/snippet.js static.zdassets.com/web_widget/classic/latest/web-widget-main-4a143a0.js static.zdassets.com/web_widget/classic/latest/web-widget-locales/classic/de-de-json-4a143a0.js static.zdassets.com/web_widget/classic/latest/web-widget-chat-sdk-4a143a0.js cdn.privacy-mgmt.com *.visualwebsiteoptimizer.com app.vwo.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com fpdbs.paypal.com fpdbs.sandbox.paypal.com i.ytimg.com validator.swagger.io www.google.com bid.g.doubleclick.net cdn.pushcrew.com useruploads.vwo.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.captcha.eu *.gstatic.com/recaptcha jquery.sellxed.com chimpstatic.com *.list-manage.com *.avada.io https://www.captcha.eu static-eu.payments-amazon.com widget.freshworks.com m2epro.freshdesk.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.visualwebsiteoptimizer.com app.vwo.com cdn.pushcrew.com downloads.mailchimp.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com wss://widget-mediator.zopim.com cdn.privacy-mgmt.com stats.g.doubleclick.net *.visualwebsiteoptimizer.com app.vwo.com *.vimeo.com ekr.zdassets.com con-dermedienvertrieb.zendesk.com assets.adobedtm.com cm.everesttech.net *.adobe.com widgets.magentocommerce.com t.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net cdn.pushcrew.com useruploads.vwo.io chart.googleapis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.captcha.eu https://w19.captcha.at https://at.captcha.at https://get.geojs.i region1.analytics.google.com region1.google-analytics.com https://www.captcha.eu www.computop-paygate.com payments-eu.amazon.com widget.freshworks.com m2epro.freshdesk.com https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri app.vwo.com; report-to report-endpoint; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-dWdNdmjp_fmk3O0LF_fCgA' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
font-src *.stripe.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.stripe.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.arcot.com *.rsa3dsauth.co.uk *.rsa3dsauth.com *.boc.cn *.afs.com.bh *.enfuce.com *.cardcenter.ch *.nexigroup.com *.pluscard.de *.qiib.com.qa *.paylife.at *.redsys.es *.3dsecure.no *.modirum.com *.edb.com *.viseca.ch *.apata.io *.capitalone.com *.dnp-cdms.jp *.revolut.com *.bankserv.co.za *.swisscard.ch *.six-group.com *.marqeta.com *.cardinalcommerce.com *.wlp-acs.com *.imbank.com *.tsys.co.uk *.sia.eu *.garanti.com.tr *.commerzbank.de *.cmbchina.com *.alahli.com *.mycardsecure.com *.gps.com.bh *.citibank.com *.wibmo.com *.dkb.de *.monzo.com *.alinma.com *.nccc.com.tw *.starlingbank.com *.danskebank.com *.pekao24.pl *.lloydsbank.co.uk/ *.lloydsbank.com/ *.lloydsbankinggroup.com/ *.channel-cards-auth-api.lloydsbankinggroup.com/ *.sparebank1.no *.rabobank.nl *.s-id-check-sparkassen.de *.sparkassen-kreditkarten.de *.mbank.pl *.secure2gw.ro *.btrl.ro *.cafis-paynet.jp *.borica.bg *.fibank.bg *.cic.fr *.zaba.hr *.citibank.co.in *.centrum24.pl *.bankmillennium.pl *.icps.mu *.egolomt.mn *.lcl.fr *.ctbcbank.com *.qiwi.com *.postfinance.ch *.citadele.lv *.kib.com.kw *.cathaybk.com.tw *.pkobp.pl *.acdcproc.com *.abanca.com *.n26.com *.klikbca.com *.psa.at *.sumup.com *.eglobal.com.mx *.pl.ing.com *.qnb.com *.rpc-raiffeisen.com *.sebkort.com *.ocbc.com *.tapngo.com.hk *.stcpay.com.sa *.creditmutuel.fr *.luottokunta.fi *.swedbank.se *.unibank.am *.estcard.ee *.hyundaicard.com *.privatbank.ua *.fssnet.co.in *.kbcard.com *.luminorgroup.com *.mashreq.com *.mercurypaymentservices.it *.moneta.cz *.sensebank.com.ua *.sibs.pt *.stripeauthentications.com *.dskbank.bg *.otpbank.hu *.techcombank.com.vn *.touch.tech *.asseco-see.hr *.3dsecure-csas.cz *.cyris.com *.secureacs.com *.acb.com.vn *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.stripe.com *.google.com/ *.sagepay.com *.opayo.eu.elavon.com *.arcot.com *.rsa3dsauth.co.uk *.rsa3dsauth.com *.boc.cn *.afs.com.bh *.enfuce.com *.cardcenter.ch *.pluscard.de *.qiib.com.qa *.nexigroup.com *.paylife.at *.redsys.es *.3dsecure.no *.modirum.com *.edb.com *.viseca.ch *.apata.io *.capitalone.com *.dnp-cdms.jp *.revolut.com *.bankserv.co.za *.swisscard.ch *.six-group.com *.marqeta.com *.cardinalcommerce.com *.wlp-acs.com *.imbank.com *.tsys.co.uk *.sia.eu *.garanti.com.tr *.commerzbank.de *.cmbchina.com *.alahli.com *.mycardsecure.com *.gps.com.bh *.citibank.com *.wibmo.com *.dkb.de *.monzo.com *.alinma.com *.nccc.com.tw *.starlingbank.com *.danskebank.com *.pekao24.pl *.lloydsbank.co.uk/ *.lloydsbank.com/ *.lloydsbankinggroup.com/ *.channel-cards-auth-api.lloydsbankinggroup.com/ *.sparebank1.no *.rabobank.nl *.s-id-check-sparkassen.de *.sparkassen-kreditkarten.de *.mbank.pl *.secure2gw.ro *.btrl.ro *.cafis-paynet.jp *.borica.bg *.fibank.bg *.cic.fr *.zaba.hr *.citibank.co.in *.centrum24.pl *.bankmillennium.pl *.icps.mu *.egolomt.mn *.lcl.fr *.ctbcbank.com *.qiwi.com *.postfinance.ch *.citadele.lv *.kib.com.kw *.cathaybk.com.tw *.pkobp.pl *.acdcproc.com *.abanca.com *.n26.com *.klikbca.com *.psa.at *.sumup.com *.eglobal.com.mx *.pl.ing.com *.qnb.com *.rpc-raiffeisen.com *.sebkort.com *.ocbc.com *.tapngo.com.hk *.stcpay.com.sa *.creditmutuel.fr *.luottokunta.fi *.swedbank.se *.unibank.am *.estcard.ee *.hyundaicard.com *.privatbank.ua *.fssnet.co.in *.kbcard.com *.luminorgroup.com *.mashreq.com *.mercurypaymentservices.it *.moneta.cz *.sensebank.com.ua *.sibs.pt *.stripeauthentications.com *.dskbank.bg *.otpbank.hu *.techcombank.com.vn *.touch.tech *.asseco-see.hr *.3dsecure-csas.cz *.cyris.com *.secureacs.com *.acb.com.vn account.fetchify.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.stripe.com *.google.com ebizmarts-website.s3.amazonaws.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.stripe.com *.google.com/ *.sagepay.com *.opayo.eu.elavon.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.stripe.com *.google.com *.sagepay.com *.opayo.eu.elavon.com cc-cdn.com *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.stripe.com *.google.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
img-src 'self' data: blob: https://genspark.ai https://*.genspark.ai https://gensparkspace.com https://*.gensparkspace.com https://gensparksite.com https://*.gensparksite.com https://genspark.site https://*.genspark.site https://genspark.space https://*.genspark.space https://gensparkcommunity.com https://*.gensparkcommunity.com https://gensparkclaw.com https://*.gensparkclaw.com https://genteam.ai https://*.genteam.ai https://genteams.ai https://*.genteams.ai https://speakly.ai https://*.speakly.ai https://clawhub.ai https://*.clawhub.ai https://mainfunc.ai https://*.mainfunc.ai https://gensparkpublicblob.blob.core.windows.net https://gensparkstorage.blob.core.windows.net https://gensparkstorageprodwest.blob.core.windows.net https://gensparkprivateblob.blob.core.windows.net https://gensparkprodprivateblob.blob.core.windows.net https://t3.gstatic.com https://lh3.googleusercontent.com https://coswift.ai https://*.coswift.ai https://sspark.ai https://*.sspark.ai; report-to csp-img 1
style-src 'unsafe-inline' 'self' fonts.googleapis.com cdn.firebase.com cdnjs.cloudflare.com https://hcaptcha.com https://*.hcaptcha.com d1bhf2byybf5br.cloudfront.net d2e18nuhnog8lh.cloudfront.net intrepid-prod.azureedge.net intrepid-prod-secure.azureedge.net cdn.intrepidagile.com;connect-src 'self' blob: https://*.azureedge.net bam.nr-data.net wss://*.vitalbook.com https://intrepidagile-dev.s3.us-west-2.amazonaws.com https://intrepidagile-dev-secure.s3.us-west-2.amazonaws.com https://intrepidagile-prod-secure.s3.us-west-2.amazonaws.com https://intrepidagile-prod.s3.us-west-2.amazonaws.com https://api.honeybadger.io https://*.vitalbook.com wss://*.firebaseio.com https://*.google-analytics.com https://securetoken.googleapis.com https://*.liveswitch.io wss://*.liveswitch.io https://api.openai.com https://www.youtube.com d1bhf2byybf5br.cloudfront.net d2e18nuhnog8lh.cloudfront.net intrepid-prod.azureedge.net intrepid-prod-secure.azureedge.net cdn.intrepidagile.com;script-src 'self' 'nonce-5bd991ed-3a09-4963-89a5-a5db328b96d1' 'unsafe-eval' https://challenges.cloudflare.com https://*.google.com https://*.gstatic.com https://*.googletagmanager.com https://*.google-analytics.com https://*.recaptcha.net https://hcaptcha.com https://*.hcaptcha.com https://ssl.p.jwpcdn.com https://bam.nr-data.net https://js-agent.newrelic.com cdnjs.cloudflare.com cdn.firebase.com https://*.firebaseio.com https://*.vitalbook.com https://*.liveswitch.io wss://*.liveswitch.io https://www.youtube.com;worker-src 'self' blob:;media-src * blob:;frame-src * https://hcaptcha.com https://*.hcaptcha.com;img-src * data:;default-src 'self';font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com https://ssl.p.jwpcdn.com 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com *.google.com *.newrelic.com *.nr-data.net *.lrkt-in.com *.kele.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.google.com *.newrelic.com https://analytics.clickdimensions.com *.google-analytics.com *.nr-data.net *.lrkt-in.com *.kele.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors https://www.youtube.com https://www.google.com/maps https://www.google.com/ https://insight.adsrvr.org/ https://analytics.google.com https://vimeo.com https://includestest.ccdc02.com/cardinalcruise/ 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.clickdimensions.com *.google-analytics.com *.nr-data.net *.lrkt-in.com *.kele.com js.stripe.com https://songbird.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://*.cardinalcommerce.com https://*.centinelapi.cardinalcommerce.com https://insight.adsrvr.org/ https://analytics.google.com https://vimeo.com https://includestest.ccdc02.com/cardinalcruise/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.google.com *.newrelic.com https://analytics.clickdimensions.com *.nr-data.net *.cookieyes.com cdn-cookieyes.com *.bing.com *.lesman.com *.lrkt-in.com *.kele.com imgsct.cookiebot.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com https://vimeo.com/ www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.google-analytics.com *.clickdimensions.com *.cookieyes.com cdn-cookieyes.com *.bing.com gstatic.com *.lrkt-in.com *.kele.com js.stripe.com consent.cookiebot.com https://cdn1.ebizcharge.net https://songbird.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://cdnjs.cloudflare.com https://insight.adsrvr.org/ https://dpm.demdex.net https://amcglobal.sc.omtrdc.net https://geostag.cardinalcommerce.com https://geo.cardinalcommerce.com https://centinelapistag.cardinalcommerce.com https://centinelapi.cardinalcommerce.com/ https://analytics.google.com/ https://includestest.ccdc02.com/cardinalcruise/ *.kaptcha.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.google.com *.newrelic.com https://analytics.clickdimensions.com *.google-analytics.com *.nr-data.net *.lrkt-in.com *.kele.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net https://vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.clickdimensions.com *.cookieyes.com cdn-cookieyes.com *.bing.com gstatic.com *.lrkt-in.com *.kele.com 3dsapi.ebizcharge.net kg668dbov0.execute-api.us-east-1.amazonaws.com ebizcharge3ds-staging1.azurewebsites.net https://includestest.ccdc02.com *.ebizcharge.net https://songbird.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://cdnjs.cloudflare.com https://insight.adsrvr.org/ https://dpm.demdex.net https://amcglobal.sc.omtrdc.net https://geostag.cardinalcommerce.com https://geo.cardinalcommerce.com https://centinelapistag.cardinalcommerce.com https://analytics.google.com https://includestest.ccdc02.com/cardinalcruise/ *.kaptcha.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' adobedtm.com *.adobedtm.com adroll.com *.adroll.com ads-twitter.com *.ads-twitter.com afterpay.com *.afterpay.com apxprogrammatic.com *.apxprogrammatic.com bazaarvoice.com *.bazaarvoice.com bing.com *.bing.com boldchat.com *.boldchat.com braintree-api.com *.braintree-api.com braintreegateway.com *.braintreegateway.com brcdn.com *.brcdn.com cloudflare.com *.cloudflare.com cookielaw.org *.cookielaw.org demdex.net *.demdex.net dotomi.com *.dotomi.com doubleclick.net *.doubleclick.net facebook.net *.facebook.net fullstory.com *.fullstory.com genpt.com *.genpt.com google-analytics.com *.google-analytics.com google.ca *.google.ca google.com *.google.com googleadservices.com *.googleadservices.com googletagmanager.com *.googletagmanager.com fonts.gstatic.com iesnare.com *.iesnare.com jst.ai *.jst.ai klaviyo.com *.klaviyo.com livechatinc.com *.livechatinc.com maps.googleapis.com *.maps.googleapis.com maxmind.com *.maxmind.com micpn.com *.micpn.com mmapiws.com *.mmapiws.com napaonline.com *.napaonline.com netmng.com *.netmng.com newrelic.com *.newrelic.com nr-data.net *.nr-data.net omtrdc.net *.omtrdc.net onetrust.com *.onetrust.com paypal.com *.paypal.com paypalobjects.com *.paypalobjects.com pinterest.com *.pinterest.com rakuten.com *.rakuten.com repairpal.com *.repairpal.com rfihub.net *.rfihub.net scene7.com *.scene7.com sentry-cdn.com *.sentry-cdn.com signifyd.com *.signifyd.com skyword.com *.skyword.com smartystreets.com *.smartystreets.com twitter.com *.twitter.com vibescm.com *.vibescm.com vimeo.com *.vimeo.com wp.com *.wp.com youtube.com *.youtube.com localhost *.localhost; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=AiOTUi940J2RkseocC_IWVAphbhV8WpeaFrz5ZsigxI-1789286265.9802008-1.0.1.1-YR7l62BU.HBctZtagLWXwMpN0eUQKqPsHRAtF453oFGTqlxBae._TH6jV4nMa4d9cEmUQzWH1XiUje87xleFObFMrJB7Ff7yUc7lKBYIhrysyUVhw618vKqFydxt9xJEFCxPXkkdsfagci9UjNbkhsAiowc18hU55nTwkfzmuz3dX4wtUwQB1URoweLD8XdZslS0kjFKUg3mCOZIkRPGZQ; report-to cf-glexkftovraroksn 1
default-src 'self' https: 'unsafe-inline' data: 'unsafe-eval'; report-uri https://servix.idnes.cz/log/csp-report.aspx?w=labuznik 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://www.facebook.com/tr/ *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.facebook.com https://www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cochin.com https://cdn.shopify.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.zdassets.com https://bam.nr-data.net https://js-agent.newrelic.com *.gstatic.com *.facebook.com https://maps.googleapis.com https://maps.googleapis.com/maps-api-v3/api/js/46/8/intl/en_gb/common.js https://maps.googleapis.com/maps-api-v3/api/js/46/8/intl/en_gb/util.js https://www.google.com/recaptcha/api2/webworker.js *.cochin.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://zendesk-eu.my.sentry.io *.zendesk.com wss://widget-mediator.zopim.com *.googleapis.com https://www.facebook.com https://bam.nr-data.net *.zdassets.com *.cochin.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.googleapis.com maxcdn.bootstrapcdn.com *.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.googleapis.com forms-na2.hsforms.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.gstatic.com js-na2.hsforms.net js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com forms-na2.hsforms.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://challenges.cloudflare.com https://*.google.com https://*.googleapis.com https://*.googletagmanager.com https://*.google-analytics.com https://*.gstatic.com https://*.doubleclick.net https://*.facebook.com https://*.facebook.net https://*.tiktok.com https://*.tiktokcdn.com https://*.ibyteimg.com https://*.byteoversea.com https://*.mercadopago.com https://*.mercadolibre.com https://*.mlstatic.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.gstatic.com; img-src 'self' data: blob: https:; font-src 'self' data: https://*.gstatic.com; connect-src 'self' https://api.comprafacil.pics https://*.google.com https://*.googleapis.com https://*.google-analytics.com https://*.facebook.com https://*.facebook.net https://*.tiktok.com https://*.mercadopago.com https://*.mlstatic.com wss://*.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com https://*.facebook.com https://*.google.com https://*.mercadopago.com https://*.mercadolibre.com https://www.youtube.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com *.googleapis.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://fonts.gstatic.com *.amazonaws.com *.zopim.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.global-e.com *.doubleclick.net *.weltpixel.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src 'self' data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com https://maps.gstatic.com https://maps.googleapis.com flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://redchamps.com *.google.com *.zopim.com *.bing.com *.clarity.ms *.adroll.com *.facebook.com *.reddit.com *.bing.net *.googletagmanager.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.fontawesome.com *.googleapis.com *.gstatic.com ipinfo.io https://maps.googleapis.com https://maps.gstatic.com maps.googleapis.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.mailchimp.com *.list-manage.com *.addthis.com *.addthisedge.com *.pinterest.com *.googletagmanager.com *.facebook.net *.cloudflare.com chimpstatic.com *.surveymonkey.com *.kbmaxnext.com *.ctctcdn.com *.adroll.com *.zopim.com *.klaviyo.com sc-static.net *.twitter.com brighterimagelab.com *.ads-twitter.com *.doubleclick.net *.googleadservices.com globalshopex.com *.clickcease.com *.bing.com *.clarity.ms *.redditstatic.com *.reddit.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com assets.braintreegateway.com *.mailchimp.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://ipinfo.io https://maps.googleapis.com www.gstatic.com maps.googleapis.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.doubleclick.net brighterimagelab.com *.klaviyo.com *.zopim.com *.googleadservices.com *.clarity.ms *.adroll.com *.facebook.net *.redditstatic.com *.reddit.com *.bing.com *.bing.net *.google-analytics.com *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' data: 'unsafe-inline' 'unsafe-eval' unpkg.com *.episerver.net *.googletagmanager.com *.imgi.no *.youtube.com siteimproveanalytics.com *.siteimproveanalytics.io *.doubleclick.net localhost:5771 *.snapchat.com *.google.com *.facebook.com js.monitor.azure.com *.facebook.net snap.licdn.com sc-static.net *.tiktok.com px.ads.linkedin.com *.cloudfront.net *.eu1.odp.optimizely.com *.bing.com *.ads.linkedin.com *.services.visualstudio.com *.googlesyndication.com *.aptrinsic.com cdn.siteimprove.net adservice.google.com *.googleapis.com *.gstatic.com 1
font-src maxcdn.bootstrapcdn.com fonts.googleapis.com fonts.gstatic.com *.paypal.com *.paypalobjects.com *.typekit.net *.gstatic.com applepay.cdn-apple.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de www.facebook.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.youtube-nocookie.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de cdn.chatbot.com ct.pinterest.com *.criteo.com *.criteo.net www.facebook.com shop4runners.cr.rlvs.co.uk www.awin1.com d.c.cdnsrv.de mea.shop4runners.com mea.shop4runners.eu mea.shop4runners.at mea.shop4runners.ch mea.shop4runners.fr mea.runnershub.de mea.runnershub.bg mea.runnershub.eu mea.barfuss-shop.de mea.barefoot-shop.com *.attrxs.de *.getblue.io *.sovendus.com *.sovendus-connect.com bid.g.doubleclick.net td.doubleclick.net www.googletagmanager.com *.ad-srv.net js.mollie.com *.paypal.com *.sandbox.paypal.com *.google.com google.com https://c.paypal.com *.loadbee.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com magefan.com cm.magefan.com https: www.googleadservices.com *.g.doubleclick.net *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.gstatic.com *.google.com *.google.de *.google.at *.google.ch *.google.eu *.google.fr https://images.unsplash.com https://www.mollie.com *.paypal.com *.sandbox.paypal.com https://api.mapbox.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ img.metaffiliation.com action.metaffiliation.com https://c.paypal.com https://b.stats.paypal.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.onefid.com maps.googleapis.com api.recova.ai assets.revlifter.io bat.bing.com cdn.chatbot.com *.consentmanager.net connect.facebook.net ct.pinterest.com s.pinimg.com *.criteo.com www.awin1.com www.dwin1.com the.sciencebehindecommerce.com www.ladenzeile.de tracking.s24.com d.c.cdnsrv.de smct.co s.uicdn.com *.attrxs.de *.gsitrix.com *.corporate-benefits.eu *.getblue.io *.wewomedia.com googleads.g.doubleclick.net www.google.com www.googleadservices.com www.google-analytics.com analytics.google.com *.googletagmanager.com tagmanager.google.com *.ad-srv.net js.mollie.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.google.com *.cdn-apple.com s7.addthis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ action.metaffiliation.com img.metaffiliation.com google.com https://c.paypal.com *.loadbee.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src maxcdn.bootstrapcdn.com fonts.googleapis.com *.googletagmanager.com tagmanager.google.com https://static.klaviyo.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https://api.batteryincluded.io api.paypal.com maps.googleapis.com api.recova.ai devt.revlifter.com bat.bing.com bat.bing.net cdn.chatbot.com *.consentmanager.net www.facebook.com connect.facebook.net ct.pinterest.com www.pinterest.com *.criteo.com the.sciencebehindecommerce.com www.wepowerconnections.com tracking.s24.com mea.shop4runners.com mea.shop4runners.eu mea.shop4runners.at mea.shop4runners.ch mea.shop4runners.fr mea.runnershub.de mea.runnershub.bg mea.runnershub.eu mea.barfuss-shop.de mea.barefoot-shop.com r.nunami.ai *.gsitrix.com *.wewomedia.com *.sovendus.com *.sovendus-connect.com www.googleadservices.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.de *.google.at *.google.ch *.google.eu *.google.fr *.googlesyndication.com *.paypal.com *.sandbox.paypal.com ekr.zdassets.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ action.metaffiliation.com img.metaffiliation.com google.com *.loadbee.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.disqus.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.googleapis.com https://script.hotjar.com https://fonts.gstatic.com https://use.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://www.facebook.com https://www.paypal.com https://www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com landofcoder.com ipinfo.io https://vars.hotjar.com https://4914179.fls.doubleclick.net https://pixel.mathtag.com www.facebook.com https://bid.g.doubleclick.net ssl.widgets.webengage.com https://zc2ab3220.webengage.co https://z2024bb90.webengage.co googletagmanager.com td.doubleclick.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://www.google.com https://www.google.co.in https://ds0rwwup944qj.cloudfront.net https://www.googletagmanager.com https://www.facebook.com https://script.hotjar.com https://images.notifications-icommkt.com https://www.gstatic.com https://www.paypal.com https://www.sandbox.paypal.com https://www.e-compreahora.com https://connect.facebook.net https://ssl.widgets.webengage.com https://cdn.cookielaw.org https://dgn3cmgewqdgl.cloudfront.net https://afiles.webengage.com https://maps.gstatic.com/ maps.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page landofcoder.com ipinfo.io https://d12zyq17vm1xwx.cloudfront.net https://static.hotjar.com https://script.hotjar.com https://www.google.com https://js-agent.newrelic.com https://bam-cell.nr-data.net https://script.crazyegg.com https://connect.facebook.net https://googleads.g.doubleclick.net https://storage.cdn.braindw.com https://s.braindw.com https://www.paypal.com https://www.sandbox.paypal.com https://externalassets.icommarketing.com https://ssl.widgets.webengage.com https://cdn.cookielaw.org https://cdnjs.cloudflare.com https://c.webengage.com https://static.zdassets.com https://bam.nr-data.net https://use.fontawesome.com https://maps.googleapis.com cdn.widgets.webengage.com rum.hlx.page 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com https://fonts.gstatic.com https://use.fontawesome.com 'self' 'unsafe-inline'; object-src landofcoder.com ipinfo.io 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com landofcoder.com ipinfo.io https://s.braindw.com https://stats.g.doubleclick.net https://notifications-icommkt.com https://in.hotjar.com wss://ws14.hotjar.com https://script.crazyegg.com https://www.facebook.com https://bam-cell.nr-data.net https://www.google-analytics.com https://unileverbrazil.demdex.net https://surveystats.hotjar.io https://u.braindw.com https://track-icommkt.com https://gstatic.com https://vc.hotjar.io wss://ws12.hotjar.com wss://ws2.hotjar.com https://ws12.hotjar.com https://ws2.hotjar.com https://www.paypal.com https://www.sandbox.paypal.com https://p.braindw.com https://connect.facebook.net https://cdn.cookielaw.org https://c.webengage.com https://ekr.zdassets.com https://martech2364.zendesk.com https://bam.nr-data.net https://maps.googleapis.com https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location https://privacyportal-eu.onetrust.com/request/v1/consentreceipts 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'strict-dynamic' 'nonce-vk2XooIWIz/wh4lo+XJINQ=='; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com; frame-ancestors 'self' https://hdcorgnz.sharepoint.com/; frame-src 'self' https://www.google.com https://www.youtube.com https://maps.google.com; img-src 'self' data: https://img.youtube.com https://maps.gstatic.com https://maps.googleapis.com https://www.gravatar.com https://our.umbraco.com https://*.sitesearch360.com https://www.googletagmanager.com; connect-src 'self' ws: wss: https://our.umbraco.com https://maps.googleapis.com https://*.sitesearch360.com https://*.google-analytics.com https://*.hotjar.io https://www.googletagmanager.com; report-uri https://report-to-api.raygun.com/reports?apikey=PtU22hSR52gZHaq0ukRX4w; report-to csp-endpoint; 1
default-src 'self';      script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://kendo.cdn.telerik.com https://*.calyxiservice.com https://*.mgic.com https://*.LLUploader.aspx https://*.radianmi.biz https://*.riskexec.com https://*.radianmi.biz https://*.nationalmi.com https://*.smartermi.com https://*.complianceeagle.com https://*.calyxwm.com https://*.lodestarss.com https://*.docmagic.com https://www.aspose.com https://www.loanscorecard.com https://*.calyxpath.com blob:;      script-src-elem 'self' 'unsafe-inline' https://kendo.cdn.telerik.com https://*.calyxiservice.com https://*.mgic.com https://*.LLUploader.aspx https://*.radianmi.biz https://*.riskexec.com https://*.radianmi.biz https://*.nationalmi.com https://*.smartermi.com https://*.complianceeagle.com https://*.calyxwm.com https://*.lodestarss.com https://*.docmagic.com https://*.calyxpath.com blob:;      style-src 'self' 'unsafe-inline' https://kendo.cdn.telerik.com https://*.calyxiservice.com https://*.mgic.com https://*.LLUploader.aspx https://*.radianmi.biz https://*.riskexec.com https://*.radianmi.biz https://*.nationalmi.com https://*.smartermi.com https://*.complianceeagle.com https://*.calyxwm.com https://*.lodestarss.com https://*.docmagic.com https://*.calyxpath.com https://fonts.googleapis.com;      img-src 'self' data: blob: https://*.calyxpath.com https://kendo.cdn.telerik.com https://*.calyxiservice.com https://*.mgic.com https://*.LLUploader.aspx https://*.radianmi.biz https://*.riskexec.com https://*.radianmi.biz https://*.nationalmi.com https://*.smartermi.com https://*.complianceeagle.com https://*.calyxwm.com https://*.lodestarss.com https://*.docmagic.com https://pathstorage.blob.core.windows.net https://pathstoragestaging.blob.core.windows.net https://pathstorageproduction.blob.core.windows.net https://*.credittechnologies.com;      font-src 'self' data: blob: https://*.calyxpath.com https://kendo.cdn.telerik.com https://*.calyxiservice.com https://*.mgic.com https://*.LLUploader.aspx https://*.radianmi.biz https://*.riskexec.com https://*.radianmi.biz https://*.nationalmi.com https://*.smartermi.com https://*.complianceeagle.com https://*.calyxwm.com https://*.lodestarss.com https://*.docmagic.com https://fonts.gstatic.com;      connect-src 'self' blob: data: https://wms.compdf.com https://api.compdf.com https://*.calyxiservice.com https://*.mgic.com https://*.LLUploader.aspx https://*.radianmi.biz https://*.riskexec.com https://*.radianmi.biz https://*.nationalmi.com https://*.smartermi.com https://*.complianceeagle.com https://*.calyxwm.com https://*.lodestarss.com https://*.docmagic.com https://*.calyxpath.com https://*.blob.core.windows.net https://*.credittechnologies.com;      frame-src 'self' blob: https://*.blob.core.windows.net;      worker-src 'self' blob: https://*.calyxpath.com;      child-src 'self' blob: https://*.calyxpath.com;      object-src 'self' blob: https://*.blob.core.windows.net;      base-uri 'self' https://*.calyxpath.com; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net *.googleapis.com data: 'self' 'unsafe-inline'; form-action *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.stripe.com www.paypal.com www.sandbox.paypal.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com public.montonio.com self: https://public.montonio.com https://usage.trackjs.com https://www.google.com https://googleads.g.doubleclick.net www.paypal.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.avada.io *.shopify.com *.fontawesome.com *.googleapis.com *.gstatic.com public.montonio.com js.stripe.com https://cdn.trackjs.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.cardinaltrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://get.geojs.io *.avada.io api.sandbox-card-payments.montonio.com api.card-payments.montonio.com https://capture.trackjs.com https://www.google.com www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; img-src 'self' data: https://d31w3hofg2vu6m.cloudfront.net https://www.classiccountryland.com https://classiccountryland.com https://maps.googleapis.com https://maps.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://www.facebook.com https://ad.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://pagead2.googlesyndication.com https://www.google.com https://analytics.tiktok.com https://lnfdgbjqvabmthiwdbuj.supabase.co; script-src 'self' 'unsafe-inline' https://maps.googleapis.com https://www.googletagmanager.com https://connect.facebook.net https://*.clarity.ms https://cdn.callrail.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://js.authorize.net https://jstest.authorize.net https://215330.t.hyros.com https://analytics.tiktok.com; style-src 'self' 'unsafe-inline'; font-src 'self'; connect-src 'self' https://*.sentry.io https://*.ingest.sentry.io https://maps.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.clarity.ms https://c.bing.com https://*.callrail.com https://www.facebook.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://ad.doubleclick.net https://adservice.google.com https://www.google.com https://pagead2.googlesyndication.com https://api.authorize.net https://api2.authorize.net https://apitest.authorize.net https://js.authorize.net https://jstest.authorize.net https://accept.authorize.net https://215330.t.hyros.com https://app.hyros.com https://lg.hyr.so https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://ccl-media-dash.vercel.app https://lnfdgbjqvabmthiwdbuj.supabase.co wss://lnfdgbjqvabmthiwdbuj.supabase.co; frame-src https://www.youtube.com https://youtube.com https://m.youtube.com https://www.youtube-nocookie.com https://youtube-nocookie.com https://youtu.be https://vimeo.com https://www.vimeo.com https://player.vimeo.com https://maps.google.com https://www.googletagmanager.com https://ade.googlesyndication.com 1
default-src 'self'; font-src fonts.gstatic.com; frame-src www.google.com; img-src data: www.gravatar.com; script-src-elem cdnjs.cloudflare.com www.google-analytics.com www.google.com www.gstatic.com; style-src-attr 'unsafe-inline'; style-src-elem 'unsafe-inline' fonts.googleapis.com; report-uri https://a51hosting.report-uri.com/r/d/csp/wizard 1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://www.fif-it.de; font-src 'self'; connect-src 'self'; frame-src https://chat.fif-it.de https://www.openstreetmap.org; form-action 'self' https://www.fif-it.de; base-uri 'self'; object-src 'none'; frame-ancestors 'self' 1
default-src 'self'; base-uri 'self'; frame-ancestors 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://client.crisp.chat https://www.googletagmanager.com https://www.google-analytics.com https://www.clarity.ms; style-src 'self' 'unsafe-inline' https://client.crisp.chat; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src 'self' https: 1
default-src 'self' data: blob: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https:; upgrade-insecure-requests 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://use.fontawesome.com https://fonts.bunny.net https://fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.avada.io *.shopify.com https://player.vimeo.com https://www.youtube.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://use.fontawesome.com https://fonts.bunny.net https://fonts.googleapis.com http://fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://get.geojs.io *.avada.io https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io https://olegnax.com https://api.instagram.com https://graph.instagram.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://app-wallee.com https://paymentshub.weareplanet.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://app-wallee.com https://paymentshub.weareplanet.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://app-wallee.com https://paymentshub.weareplanet.com https://gmtech.mfgroup.ch https://assets.secure.checkout.visa.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com https://app-wallee.com https://paymentshub.weareplanet.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://app-wallee.com https://paymentshub.weareplanet.com https://assets.secure.checkout.visa.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; media-src 'self' *.gds-services.com 1
script-src 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' 'unsafe-eval' 'nonce-yh8nFLBVvRolcJv1Z2thnla7jtxpbvnj0xQk57p8sQk='; base-uri 'none'; connect-src 'self' https://*.fontawesome.com https://*.googleapis.com https://*.googlesyndication.com https://consentcdn.cookiebot.com https://analytics.tiktok.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net; img-src data: 'self' https://*.googleapis.com https://*.gstatic.com https://*.google-analytics.com https://cdn.startpeople.be https://img.youtube.com https://i.ytimg.com https://imgsct.cookiebot.com https://vumbnail.com/ https://i.vimeocdn.com; object-src 'none'; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net/npm/@fancyapps/ui/dist/fancybox.css https://cdnjs.cloudflare.com/ajax/libs/bootstrap-datepicker/1.9.0/css/bootstrap-datepicker3.min.css https://cdn.jsdelivr.net/npm/bootstrap@5.3.0-alpha3/dist/css/bootstrap.min.css https://cdn.jsdelivr.net/npm/select2@4.0.13/dist/css/select2.min.css https://cdn.jsdelivr.net/npm/select2-bootstrap-5-theme@1.3.0/dist/select2-bootstrap-5-theme.min.css https://cdn.jsdelivr.net/npm/bootstrap-icons@1.10.3/font/bootstrap-icons.css https://fonts.googleapis.com; frame-src 'strict-dynamic' 'self' https://consentcdn.cookiebot.com https://www.google.com/recaptcha/ https://www.youtube-nocookie.com/ https://player.vimeo.com/; report-to csp-endpoint; report-uri https://csp-dxp.rgfstaffing.be/csp 1
report-uri /csp-report;default-src 'self';base-uri 'self';object-src 'none';frame-ancestors 'self';form-action 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' https://srv.discordl.org https://usr.discordl.org https://shr.discordl.org https://emj.discordl.org https://gl.discordl.org https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://pagead2.googlesyndication.com https://cmp.gatekeeperconsent.com https://the.gatekeeperconsent.com https://go.ezodn.com https://*.ezoic.net https://*.ezoic.com https://js.stripe.com https://api.stripe.com https://hooks.stripe.com https://m.stripe.network https://eu.i.posthog.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://srv.discordl.org https://usr.discordl.org https://shr.discordl.org https://emj.discordl.org https://gl.discordl.org https://cmp.gatekeeperconsent.com https://the.gatekeeperconsent.com https://go.ezodn.com https://*.ezoic.net https://*.ezoic.com;img-src 'self' data: blob: https:;font-src 'self' data: https://fonts.gstatic.com https://srv.discordl.org https://usr.discordl.org https://shr.discordl.org https://emj.discordl.org https://gl.discordl.org;connect-src 'self' https://srv.discordl.org https://usr.discordl.org https://shr.discordl.org https://emj.discordl.org https://gl.discordl.org https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://pagead2.googlesyndication.com https://cmp.gatekeeperconsent.com https://the.gatekeeperconsent.com https://go.ezodn.com https://*.ezoic.net https://*.ezoic.com https://js.stripe.com https://api.stripe.com https://hooks.stripe.com https://m.stripe.network https://eu.i.posthog.com;frame-src 'self' https://www.google.com https://cmp.gatekeeperconsent.com https://the.gatekeeperconsent.com https://go.ezodn.com https://*.ezoic.net https://*.ezoic.com https://js.stripe.com https://api.stripe.com https://hooks.stripe.com https://m.stripe.network https://googleads.g.doubleclick.net https://tpc.googlesyndication.com;media-src 'self' data: https:;worker-src 'self' blob:;manifest-src 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com https://applepay.cdn-apple.com *.cloudflare.com maxcdn.bootstrapcdn.com fonts.bunny.net cdn.jsdelivr.net 'self' data: https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors sst.mooihorloge.nl 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://maps.google.com/ *.facebook.com *.hotjar.com *.addthis.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://applepay.cdn-apple.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io *.doubleclick.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://stats.g.doubleclick.net *.google.com *.google.nl https://dev.visualwebsiteoptimizer.com http://www.w3.org 'self' data: assets.myparcel.nl *.openstreetmap.fr magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://static.buckaroo.nl https://www.buckaroo.nl https://www.paypalobjects.com https://pay.google.com https://developers.google.com https://applepay.cdn-apple.com *.adyen.com googletagmanager.com *.laroyale.nl www.google.nl www.facebook.com widgets.trustedshops.com e1.emxdgt.com *.doubleclick.net x.bidswitch.net ib.adnxs.com rtb-csync.smartadserver.com sync-criteo.ads.yieldmo.com contextual.media.net pixel.rubiconproject.com sync-t1.taboola.com eb2.3lift.com beacon.krxd.net *.criteo.com *.analytics.yahoo.com criteo-partners.tremorhub.com match.sharethrough.com trends.revcontent.com ad.yieldlab.net criteo-sync.teads.tv cm.adform.net *.omnitagjs.com r.casalemedia.com id5-sync.com ad.360yield.com matching.ivitrack.com exchange.mediavine.com jadserve.postrelease.com s.thebrighttag.com simage2.pubmatic.com sync.outbrain.com *.trengo.eu *.giphy.com *.amazonaws.com hb.yahoo.net cdn.laroyale.nl c1.adform.net sst.mooihorloge.nl sst.mooihorloge.be sst.montresboutique.fr sst.uhr247.de *.taggrs.io *.1rx.io *.agkn.com sync.targeting.unrulymedia.com *.etrusted.com *.hsforms.net *.hsforms.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://cs.media.net/ https://c.bing.com https://simage4.pubmatic.com/ data: 'self'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com tagmanager.google.com https://www.googletagmanager.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hotjar.com https://polyfill.io *.pinterest.com *.facebook.net *.facebook.com https://googleads.g.doubleclick.net *.googletagmanager.com http://dev.visualwebsiteoptimizer.com *.gstatic.com *.salesfeed.com *.leadinfo.net cdnjs.cloudflare.com cdn.jsdelivr.net *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.sandbox.paypal.com https://applepay.cdn-apple.com https://pay.google.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io widgets.trustedshops.com dynamic.criteo.com sslwidget.criteo.com connect.facebook.net *.adyen.com *.trengo.eu *.google-analytics.com *.googleadservices.com googletagmanager.com sst.mooihorloge.nl sst.mooihorloge.be sst.montresboutique.fr sst.uhr247.de sc-static.net *.hsforms.net *.hsforms.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com assets.braintreegateway.com cdn.jsdelivr.net https://cdn.jsdelivr.net *.fontawesome.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl *.adyen.com *.paypal.com *.trengo.eu *.etrusted.com *.google.com googletagmanager.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.trengo.eu 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.hotjar.com *.cloudflare.com *.yotpo.com *.addthis.com *.salesfeed.com *.leadinfo.net *.leadinfo.com *.googleapis.com api.myparcel.nl cdn.jsdelivr.net https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://applepay.buckaroo.io https://smp-paymentservices.apple.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com *.googletagmanager.com *.g.doubleclick.net measurement-api.criteo.com *.trengo.eu *.amazonaws.com ws-eu.pusher.com sslwidget.criteo.com *.googlesyndication.com sst.mooihorloge.nl sst.mooihorloge.be sst.montresboutique.fr sst.uhr247.de t.elasticsuite.io *.hsforms.net *.hsforms.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://ad.doubleclick.net/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.designmanager.com *.gstatic.com *.mustcheck.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.instagram.com *.weltpixel.com designfiles.co *.doubleclick.net *.fliphtml5.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.cdninstagram.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.gstatic.com *.facebook.com *.doubleclick.net exchjsdata.com *.googleapis.com www.google.ae www.google.am www.google.at www.google.bg www.google.bs www.google.ca www.google.cl www.google.cm www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.kr www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.co www.google.com.do www.google.com.eg www.google.com.hk www.google.com.kw www.google.com.mx www.google.com.my www.google.com.ng www.google.com.np www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.co.nz www.google.co.th www.google.co.uk www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zw www.google.cz www.google.de www.google.es www.google.fr www.google.gr www.google.hr www.google.ie www.google.it www.google.mk www.google.nl www.google.pl www.google.ps www.google.rs www.google.ru www.google.se www.google.sk data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.instagram.com chimpstatic.com downloads.mailchimp.com *.list-manage.com https://ajax.cloudflare.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com https://chimpstatic.com designfiles.co *.googleapis.com *.newrelic.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com downloads.mailchimp.com tagmanager.google.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google-analytics.com *.facebook.net *.doubleclick.net get663.com *.googleapis.com www.google.be www.google.bs www.google.by www.google.ca www.google.cl www.google.co.id www.google.co.in www.google.co.jp www.google.co.kr www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.do www.google.com.eg www.google.com.hk www.google.com.mx www.google.com.my www.google.com.ng www.google.com.ph www.google.com.pk www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.vn www.google.co.th www.google.co.uk www.google.de www.google.fr www.google.gr www.google.hr www.google.nl www.google.ru *.google.com *.nr-data.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://5a06d6ec-c9e3-4020-8ae7-730a01080da3.sansec.watch/; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://*.gstatic.com *.fontawesome.com use.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.adyen.com api.bazaarvoice.com stg.api.bazaarvoice.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.adyen.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.adyen.com https://*.gstatic.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.adyen.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https://fonts.googleapis.com/ display.ugc.bazaarvoice.com *.fontawesome.com assets.braintreegateway.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.adyen.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://25839c8b-6d91-4819-9e40-a90276f15ff7.sansec.watch/; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net cdn.datatables.net use.fontawesome.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.avada.io *.shopify.com *.google-analytics.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hotjar.com/ *.region1.google-analytics.com/ *.cloudflare.com/ *.datatables.net/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com cdn.datatables.net use.fontawesome.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.hotjar.com/ *.region1.google-analytics.com/ *.google-analytics.com/ *.datatables.net/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://apis.google.com https://va.vercel-scripts.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://bat.bing.com https://scripts.clarity.ms https://www.clarity.ms https://snap.licdn.com https://px.ads.linkedin.com https://cdn-cookieyes.com https://js.zi-scripts.com https://j.6sc.co https://b.6sc.co https://plausible.io https://js.hsforms.net https://tags.clickagy.com https://www.gstatic.com https://www.ziprecruiter.com https://sc.lfeeder.com; connect-src 'self' https://5ujtwa6a.api.sanity.io wss://5ujtwa6a.api.sanity.io https://api.github.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://bat.bing.com https://bat.bing.net https://a.clarity.ms https://v.clarity.ms https://e.clarity.ms https://l.clarity.ms https://o.clarity.ms https://q.clarity.ms https://y.clarity.ms https://js.zi-scripts.com https://ws.zoominfo.com https://px.ads.linkedin.com https://epsilon.6sense.com https://c.6sc.co https://ipv6.6sc.co https://plausible.io https://forms.hsforms.com https://5ujtwa6a.apicdn.sanity.io https://secure.adnxs.com https://cdn-cookieyes.com https://log.cookieyes.com https://directory.cookieyes.com https://analytics.google.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com https://www.googleadservices.com https://hemsync.clickagy.com https://aorta.clickagy.com https://www.ziprecruiter.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; style-src-elem 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.ziprecruiter.com; script-src-elem 'self' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://bat.bing.com https://scripts.clarity.ms https://www.clarity.ms https://snap.licdn.com https://cdn-cookieyes.com https://js.zi-scripts.com https://j.6sc.co https://plausible.io https://sc.lfeeder.com; style-src-attr 'self' 'unsafe-inline'; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https: blob:; media-src 'self' https:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.googletagmanager.com https://www.google.com; frame-ancestors 'self' https://*.sanity.studio http://localhost:*; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.klarnacdn.net *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.epdq.co.uk *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.tawk.to 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.klarna.com *.epdq.co.uk c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.tawk.to 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io maps.gstatic.com *.calcurates.com *.klarna.com *.klarnaevt.com *.klarnacdn.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.tawk.to tawk.link cdn.jsdelivr.net s3.amazonaws.com/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.epdq.co.uk js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.klarnacdn.net assets.braintreegateway.com *.tawk.to cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tawk.to tawk.link 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.tawk.to wss://*.tawk.to 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.analytics.google.com stats.g.doubleclick.net www.google.co.uk *.facebook.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.onetrust.com *.klarna.com *.klarnacdn.net *.klarnaservices.com widget.freshworks.com m2epro.freshdesk.com *.googletagmanager.com *.facebook.net www.termsfeed.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.klarnacdn.net widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com *.onetrust.com *.klarnaevt.com *.analytics.google.com stats.g.doubleclick.net *.klarnacdn.net *.klarna.com *.klarnaservices.com widget.freshworks.com m2epro.freshdesk.com *.google-analytics.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com maps.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://cuatro.sim-cdn.nl; img-src * data: blob:; style-src * 'unsafe-inline' blob: https://fonts.bunny.net; font-src 'self' data: https://fonts.bunny.net https://fonts.gstatic.com https://cuatro.sim-cdn.nl https://cuatro.sim-cdn-acceptatie.nl https://cuatro.sim-cdn-test.nl; script-src 'nonce-NjVlNDBiN2UtNzZlMS00NjZlLWI0MjctZGViZmFmNDQzYzg5' 'strict-dynamic' 'report-sample'; connect-src *; form-action 'self'; media-src https://*.readspeaker.com https://*.streamlock.net https://storage.googleapis.com https://scribit-pro-hosting.storage.googleapis.com https://scribit-pro.storage.googleapis.com https://app.talkjs.com 'self' blob:; frame-src *; frame-ancestors 'self' https://*.polly.help; worker-src * 'unsafe-inline' blob:; report-uri /api/csp-report 1
object-src 'none'; script-src 'self' cdn.jsdelivr.net https://cdn.ckeditor.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://unpkg.com maps.google.com maps.googleapis.com; script-src-attr 'self'; style-src 'self' cdn.jsdelivr.net fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src-attr 'self'; frame-ancestors 'self' 1
object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-_2Qkj2URD9ZcozBVZxHJDDCb9OOoHv-D'; base-uri 'none'; report-uri https://data.sanitino.eu/csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net 'self' data: *.doubleclick.net *.facebook.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com *.doubleclick.net *.facebook.com *.googlesyndication.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io cdn.doofinder.com https://images.unsplash.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com cdn.klarna.com https://firebasestorage.googleapis.com 'self' data: *.google.com *.google.it *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.feedaty.com *.googlesyndication.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com maps.gstatic.com https://www.cavallimusica.com *.trustedshops.com *.etrusted.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com cdn.doofinder.com https://maps.googleapis.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com www.google.com www.gstatic.com *.avada.io *.shopify.com *.google.bg *.google.it *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.feedaty.com *.googleadservices.com *.adform.net *.iubenda.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com maps.googleapis.com *.trustedshops.com *.etrusted.com *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.doofinder.com *.fontawesome.com https://fonts.bunny.net *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.feedaty.com *.iubenda.com assets.braintreegateway.com *.trustedshops.com *.etrusted.com *.tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.doofinder.com wss://*.doofinder.com https://maps.googleapis.com https://player.vimeo.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com https://get.geojs.io *.avada.io *.facebook.com *.facebook.net *.feedaty.com *.googlesyndication.com *.doubleclick.net *.iubenda.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.onesignal.com https://js.stripe.com https://docs.opencv.org https://connect.facebook.net https://analytics.tiktok.com https://www.googletagmanager.com https://www.google-analytics.com https://td.doubleclick.net; style-src 'self' 'unsafe-inline' https://use.typekit.net https://cdn.onesignal.com; font-src 'self' data: https://use.typekit.net https://p.typekit.net; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; frame-src 'self' https://js.stripe.com https://hooks.stripe.com; worker-src 'self' blob: https://cdn.onesignal.com; media-src 'self' data: blob: https:; manifest-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://checkout.stripe.com; frame-ancestors 'none' 1
font-src *.googleapis.com *.gstatic.com data: https://widgets.trustedshops.com https://integrations.etrusted.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action www.paypal.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.nosto.com *.nos.to 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com pay.google.com *.paypal.com * www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com *.mondu.ai/ *.mondu.local localhost:*/ https://www.googletagmanager.com/ *.nosto.com *.nos.to 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io b.stats.paypal.com dub.stats.paypal.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com https://widgets.trustedshops.com https://integrations.etrusted.com ratenkauf.easycredit.de *.mondu.ai/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://redchamps.com *.nosto.com *.nos.to magefan.com cm.magefan.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net includestest.ccdc02.com www.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ c.paypal.com pay.google.com *.paypal.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com https://widgets.trustedshops.com https://integrations.etrusted.com ratenkauf.easycredit.de *.mondu.ai/widget.js *.mondu.local/widget.js localhost:*/dist/widget.js https://www.googletagmanager.com/ *.nosto.com *.nos.to jsd-widget.atlassian.com maps.googleapis.com https://www.bau2b.de 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline fonts.googleapis.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com https://widgets.trustedshops.com https://integrations.etrusted.com *.nosto.com *.nos.to *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.paypalobjects.com www.paypal.com *.braintree-api.com *.paypal.com *.google.com google.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com *.trustedshops.com *.etrusted.com ratenkauf.easycredit.de https://stats.g.doubleclick.net/ https://www.google-analytics.com/ *.nosto.com *.nos.to jsd-widget.atlassian.com api-private.atlassian.com api.friendlycaptcha.com eu-api.friendlycaptcha.eu maps.googleapis.com 'self' 'unsafe-inline'; child-src c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss: ws:; frame-src 'self' https:; media-src 'self' blob: https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; report-uri /csp-report/ 1
manifest-src 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; worker-src data: blob:; base-uri www.bobshop.co.za litestoreusa.com www.manualslib.com www.researchgate.net www.tme.eu robodk.com www.onlineautoparts.com.au www.ebay.com www.parttarget.com www.tedss.com www.google.com 'self' 'unsafe-inline'; frame-ancestors www.elcomcomponents.com elcomcomponents.com 'self'; object-src noop.style 'self' 'unsafe-inline'; style-src www.elcomcomponents.com www.gstatic.com data: pwm-image.trendmicro.jp cdn.honey.io pwm-image.trendmicro.com *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; form-action www.paypal.com www.elcomcomponents.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; media-src data: tts.baidu.com ssl.gstatic.com *.adobe.com 'self' 'unsafe-inline'; font-src cdn.megabonus.com data: static3.avast.com chrome-extension: www.slant.co use.typekit.net github.com moz-extension: at.alicdn.com svcs.tql.com assets.merci-app.com cdn.scite.ai assets.tailwindapp.com sc-static.net fonts.gstatic.com themes.googleusercontent.com www.elcomcomponents.com cdn-uicons.flaticon.com cdn.ziplyne.com migaku-public-data.migaku.com images.simplycodes.com r2cdn.perplexity.ai cdn.yiban.io *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; frame-src www.google.com www.paypalobjects.com c.paypal.com ssl.kaptcha.com assets.braintreegateway.com www.google.com.x.a2789b1908fd80415a0a64e01d06ed9111e3.9270fc44.id.opendns.com www.google.com.x.1875ad2c0c084040f50be8a0579c66ada197.9270fc4a.id.opendns.com www.google.com.x.49a9c05a0325004d510bfcb01e98dfbf22a9.9270fc42.id.opendns.com www.google.com.x.bec4267503a9a04e9f09e4c0c0651291f9a7.9270fd42.id.opendns.com www.google.com.x.d6e32a3e0234d04f7108a9c0405be7447b0a.9270fd5a.id.opendns.com www.google.com.x.cf9f75010e215048990a978082e04f68aeae.9270fd48.id.opendns.com www.google.com.x.5b4b4dc2021f1045f309d0f0394877a45167.9270fd42.id.opendns.com www.google.com.x.b24222c0015fb042b408bda04cc0d99a6b91.9270fd5a.id.opendns.com www.google.com.x.8811d2110d5f504f6108267074a8c4b4ba54.9270fd48.id.opendns.com www.google.com.x.93fce7500570304419083da04c455f826bcb.9270fd42.id.opendns.com www.google.com.x.5ca0b8ef0252e045190bd730c19f2eadf7b1.9270fd5a.id.opendns.com t.032168.com t.windows7home.com 3yo.cn www.google.com.x.55c3a23f0278f049e7092900c006517881e5.9270fe44.id.opendns.com www.google.com.x.f967ab440a13b0449a0aef8044d80ff58c8c.9270fe4d.id.opendns.com www.google.com.x.6c48cbbb0fa3c0492e09e9f080d9acb3163c.9270fe58.id.opendns.com gateway.zscalertwo.net dss0.js.images.static.jqurey.vip assistance.quantumadblocker.com mozbar.moz.com tongji.398yuer.com safe.menlosecurity.com www.recaptcha.net pwm-image.trendmicro.com vip.zhanyangsh.cn lsrelay-config-production.s3.amazonaws.com div.show cdn.hunong.xyz pwm-image.trendmicro.jp gateway.zscloud.net v2.maoyinews.xyz cx.chacizus.com wo.laiwoshop.com td.doubleclick.net www.googletagmanager.com m.youtube.com fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com checkout.paypal.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; script-src www.google.com www.gstatic.com c.paypal.com jaramyouk.org www.googletagmanager.com www.google-analytics.com www.elcomcomponents.com www.desideriosoldi.com meyune.jaceloregi.com cdn.viglink.com cdnjs.cloudflare.com data: dss0.js.images.static.jqurey.vip www.pagespeed-mod.com connect.facebook.net data1.repossot.com www.gstatic.cn data1.pletar.com search.imtt.qq.com vip.zhanyangsh.cn cdn.mcfarland.cn translate.google.com translate.googleapis.com translate-pa.googleapis.com cdn.hunong.xyz v1.maoyinews.xyz v2.maoyinews.xyz ssl.google-analytics.com soidngru.colloquiumz.com qoogle-analytics.com c.chuyueshop.com 1.safecdn01.com decision.etc4.com js-c.etc4.com cdn.artstattracker.com cdn.sketchdataanalytics.com cdn.artworkanalytics.com cdn.colorschemeobserver.com cdn.drawdatahub.com cdn.strokeanalysislab.com cdn.drawnstatsgather.com cdn.visualartinsights.com cdn.drawninfoinspector.com cdn.picturetrendsdb.com cdn.artprofilingtool.com cdn.canvastrendstracker.com cdn.arttrendtrackers.com cdn.imageinsightvault.com cdn.paintedvisionsstats.com cdn.visualdatacollector.com cdn.gallerydatainsight.com cdn.visualartexplorer.com cdn.brushstrokemetrics.com cdn.paintedworldstats.com cdn.colorpalettemetrics.com cdn.artistictrendsprobe.com cdn.paintinfoanalyzer.com cdn.drawinginfopro.com cdn.artdataharvest.com cdn.artisticpatterndata.com cdn.picinfometrics.com cdn.imagestatistician.com cdn.artisticexpressiondb.com arttrendtrackers.com visualartinsights.com visualdatacollector.com artdataharvest.com artisticexpressiondb.com picturedataminer.com imagestatistician.com gallerydatainsight.com artworkanalytics.com drawdatahub.com visualartexplorer.com imagepatternprofiler.com strokeanalysislab.com picturetrendsdb.com sketchdataharbor.com sketchanalyticsvault.com sketchdataanalytics.com strokepatternanalysis.com drawnstatsgather.com paintinfoanalyzer.com canvastrendstracker.com paintedworldstats.com sketchinsightswatch.com drawinginfopro.com paintedvisionsstats.com artprofilingtool.com picinfometrics.com gallerytrendstracker.com colorschemeobserver.com sketchmetrics.com artistictrendsmap.com artstattracker.com sc-static.net brushstrokemetrics.com sketchtrendsmonitor.com imageinsightvault.com artistictrendsprobe.com artisticpatterndata.com picturetrendsmonitor.com drawninfoinspector.com colorpalettemetrics.com mainf.global-cache.online conoret.com shopper.deals-way.com infimv.com static01.tobeecloud.com infirc.com wistiaextension.com sellquestor.com lottingem.com designstatistix.com statepulseapp.com speed.ilink-tk.com infird.com secured-pixel.com static.cloudflareinsights.com clicktranslator.com assets.adobedtm.com *.adobe.com www.googleadservices.com googleads.g.doubleclick.net analytics.google.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.avada.io js.braintreegateway.com assets.braintreegateway.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; connect-src www.google-analytics.com www.paypal.com payments.braintree-api.com client-analytics.braintreegateway.com sovetnik.market.yandex.ru session.scamprotection.net az.nmgplatform.com www.elcomcomponents.com api.viglink.com 360api.33445522.com tm.filter dss0.js.images.static.jqurey.vip skincareadvertsking.com gateway.zscalertwo.net payments.sandbox.braintree-api.com origin-analytics-sand.sandbox.braintree-api.com userproxy-ext.sf-helper.com uc.gre translate.googleapis.com analytics.google.com stats.g.doubleclick.net www.google.co.kr csp.withgoogle.com api.blocksly.org searchaggr-dra.dt.dbankcloud.com adtonus.com code.jquery.com rdtds.net api.braintreegateway.com region1.google-analytics.com region1.analytics.google.com www.google.si api.socialsolutionapp.com statistic-order.com decision.etc4.com gooqle-info.com c.paypal.com translate.google.com data: tl.ytlogs.ru cdnml.global-cache.online w88p9x.com translate-pa.googleapis.com overbridgenet.com www.i-shunxi.com api.earthyandenergy.com everyview.info topodat.info d2rol5dpdbtxxu.cloudfront.net extapi.collectsavings.com cdn.shopimgs.com gjtrack.ucweb.com plugin.ucads.ucweb.com localhost sbbdom.com www.erai.com local.adblock360.com hm.baidu.com api.ipify.org infragrid.v.network meetlookup.com 1752680588.rsc.cdn77.org dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://get.geojs.io *.avada.io api.sandbox.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; img-src www.erai.com www.gstatic.com b.stats.paypal.com c.paypal.com jaramyouk.org translate.google.com az.nmgplatform.com www.elcomcomponents.com www.facebook.com blob: www.google.com translate.googleapis.com www.google.co.kr store.chainwon.com fonts.gstatic.com www.googletagmanager.com pos.baidu.com www.google.si region1.google-analytics.com svcs.tql.com infinity.500apps.com cdn.honey.io statistic-order.com translate.yandex.net gooqle-info.com c6.paypal.com hm.baidu.com yastatic.net s2.ssl.qhimg.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net bid.g.doubleclick.net analytics.google.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com www.sandbox.paypal.com dub.stats.paypal.com assets.braintreegateway.com checkout.paypal.com data: 'self' 'unsafe-inline';report-uri https://www.elcomcomponents.com/fl32csp/report/; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com https://challenges.cloudflare.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://cloudflareinsights.com; frame-src https://challenges.cloudflare.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 1
script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.googleadservices.com *.doubleclick.net *.facebook.net *.bing.com static.hotjar.com script.hotjar.com *.clarity.ms *.criteo.com sslwidget.criteo.com *.webgains.io *.onesignal.com *.clerk.io *.elfsight.com *.elfsightcdn.com *.mody.ai chimpstatic.com *.global-e.com js.stripe.com *.tangoo.it genny.commander1.com *.tagcommander.com *.sirv.com scripts.sirv.com static-eu.payments-amazon.com *.payments-amazon.com *.braintreegateway.com *.adobedtm.com *.aptrinsic.com; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://js.stripe.com/ https://js.stripe.com *.stripecdn.com https://b.stripecdn.com https://s3-eu-west-1.amazonaws.com *.klarnacdn.net *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.fontawesome.com *.fonts.googleapis.com data: https://www.google.com https://www.gstatic.com https://fonts.bunny.net *.stripe.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.facebook.com *.googlesyndication.com *.tiktok.com *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors https://api.clerk.io https://cdn.clerk.io self www.google.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.klarna.com *.youtube.com/ *.addthis.com *.sharethis.com *.pinterest.com https://www.googletagmanager.com/ www.google.com www.gstatic.com apis.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com https://cdn.clerk.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.tagcommander.com *.sirv.com https://genny.b-cdn.net/ https://www.genny.com/ https://www.google.it/ https://img.onesignal.com/ https://static.elfsight.com/ https://files.elfsightcdn.com/ https://genny.commander1.com/ bat.bing.com *.dmxleo.com *.bidswitch.net *.pubmatic.com *.media.net *.casalemedia.com *.criteo.com *.360yield.com *.postrelease.com *.outbrain.com *.clarity.ms rtb-csync.smartadserver.com sync-t1.taboola.com criteo-sync.teads.tv criteo-partners.tremorhub.com eb2.3lift.com ad.yieldlab.net sync.1rx.io aa.agkn.com *.smartadserver.com *.taboola.com id5-sync.com *.id5-sync.com https://id5-sync.com *.devbox.site *.justbetter.nl *.klarna.com *.klarnaevt.com *.klarnacdn.net *.cloudflare.com *.cdn.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.s.ytimg.com *.lightemporium.com *.usercentrics.eu *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.addthis.com *.sharethis.com *.pinterest.com *.cdninstagram.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com https://api.clerk.io https://cdn.clerk.io https://custom.clerk.io chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.tagcommander.com *.acsbapp.com https://acsbapp.com *.elfsight.com *.clerk.io *.elfsightcdn.com https://scripts.sirv.com/ *.hotjar.com https://cdn.onesignal.com/ https://onesignal.com/ https://busz.io/ https://cdn.mody.ai/ https://analytics.webgains.io/ https://static.cloudflareinsights.com/ https://cdn.tuurbo.ai/ dynamic.criteo.com sslwidget.criteo.com bat.bing.com scripts.clarity.ms www.clarity.ms api.onesignal.com cdn.tangoo.it genny.commander1.com *.adobedtm.com *.aptrinsic.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.trackedlink.net *.addthis.com *.sharethis.com *.moatads.com *.addthisedge.com *.pinterest.com *.instagram.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com https://api.clerk.io https://cdn.clerk.io downloads.mailchimp.com *.tagcommander.com *.stagingbox.site https://genny247.stagingbox.site https://genny.b-cdn.net https://scripts.sirv.com https://onesignal.com *.klarnacdn.net *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.google.com https://fonts.bunny.net assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://www.genny.com/ blob: http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.facebook.com *.facebook.net https://www.google.it/ *.doubleclick.net *.googlesyndication.com *.tiktok.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.tagcommander.com *.acsbapp.com *.elfsight.com *.stripe.com *.stripecdn.com https://tmanculk.sirv.com/ https://video.sirv.com/ https://www.genny.com/ blob: https://onesignal.com/ https://api.mody.ai/ genny.commander1.com bat.bing.com *.clarity.ms *.devbox.site *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.cloudflare.com *.twitter.com *.twimg.com *.googleadservices.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org *.addthis.com *.sharethis.com *.cardinalcommerce.com *.graph.instagram.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com klarna.com *.link.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; child-src 'self' blob:; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://api.cookiefirst.com https://consent.cookiefirst.com https://edge.cookiefirst.com https://www.recaptcha.net https://*.ingest.us.sentry.io; font-src 'self' data:; form-action 'self'; frame-ancestors 'self'; frame-src 'self' https://e.issuu.com https://player.vimeo.com https://w.soundcloud.com https://www.google.com https://www.googletagmanager.com https://www.recaptcha.net https://www.youtube.com; img-src 'self' data: blob: https:; manifest-src 'self'; media-src 'self' blob: https:; object-src 'none'; script-src 'self' https://www.googletagmanager.com https://browser.sentry-cdn.com https://consent.cookiefirst.com https://www.recaptcha.net 'nonce-o8sZDjup5351t0hd/7Wekw=='; style-src 'self' https://consent.cookiefirst.com 'nonce-o8sZDjup5351t0hd/7Wekw=='; style-src-attr 'unsafe-inline'; worker-src 'self' blob:; report-uri /csp-reports; report-to csp-endpoint 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.bootstrapcdn.com js.klevu.com *.zopim.com xmpp-contact.unlimitedhorizon.co.uk *.useinsider.com static.klaviyo.com *.klevu.com *.ksearchnet.com https://fonts.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com www.elesi.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.facebook.com *.googlesyndication.com *.tiktok.com www.facebook.com *.americanexpress.com *.arcot.com *.monzo.com *.securesuite.co.uk authentication-acs.marqeta.com www.elesi.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com www.elesi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.instagram.com www.google.com https://*.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.awin1.com *.zenaps.com account.fetchify.com assets.braintreegateway.com tst.kaptcha.com c.paypal.com *.zopim.com speedsize.com *.speedsize.com ct.pinterest.com *.freshchat.net *.freshchat.com *.useinsider.com *.arcot.com *.monzo.com *.securesuite.co.uk authentication-acs.marqeta.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.trustpilot.com *.weltpixel.com www.elesi.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * *.cdninstagram.com 'self' data: https://*.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com *.awin1.com *.zenaps.com *.wepowerconnections.com *.bing.com *.clarity.ms js.klevu.com cdn-cookieyes.com speedsize.com *.speedsize.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ ct.pinterest.com www.google.co.uk *.googleapis.com *.ggpht *.sagepay.co.uk xmpp-contact.unlimitedhorizon.co.uk *.useinsider.com *.easyfundraising.org.uk *.klevu.com *.ksearchnet.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com www.elesi.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com *.instagram.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://*.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com cc-cdn.com 'self' bat.bing.com js.klevu.com *.clarity.ms c.paypal.com chimpstatic.com cdn-cookieyes.com *.hotjar.com sentry.bigeyedeers.dev browser.sentry-cdn.com speedsize.com *.speedsize.com cdn.jsdelivr.net unpkg.com cdnjs.cloudflare.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ tags.creativecdn.com player.vimeo.com *.youtube.com *.googleapis.com t.elesi.com t.soholighting.com porjs.com widget.trustpilot.com s.pinimg.com ct.pinterest.com *.freshchat.net *.freshchat.com fw-cdn.com xmpp-contact.unlimitedhorizon.co.uk www.paidonresults.net widget.freshworks.com m2epro.freshdesk.com *.klevu.com *.ksearchnet.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.trustpilot.com https://www.googletagmanager.com tagmanager.google.com www.elesi.com https://js.klevu.com https://el.elesi.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com cc-cdn.com *.bootstrapcdn.com *.typekit.net js.klevu.com speedsize.com *.speedsize.com https://static.klaviyo.com *.freshchat.net *.freshchat.com xmpp-contact.unlimitedhorizon.co.uk *.useinsider.com widget.freshworks.com m2epro.freshdesk.com *.klevu.com *.ksearchnet.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com maxcdn.bootstrapcdn.com *.trustpilot.com tagmanager.google.com www.elesi.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com speedsize.com *.speedsize.com www.elesi.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.facebook.com *.facebook.net https://*.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com *.wepowerconnections.com https://the.sciencebehindecommerce.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com *.sandbox.braintree-api.com *.clarity.ms *.cookieyes.com cdn-cookieyes.com *.trustpilot.com *.hotjar.com sentry.bigeyedeers.dev speedsize.com *.speedsize.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.google.co.uk ct.pinterest.com *.useinsider.com capig.stape.gl widget.freshworks.com m2epro.freshdesk.com *.klevu.com *.ksearchnet.com https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://www.google-analytics.com www.elesi.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com www.elesi.com http: https: blob: 'self' 'unsafe-inline'; default-src speedsize.com *.speedsize.com elesi.com www.elesi.com cdn.elesi.com static.elesi.com soholighting.com www.soholighting.com cdn.soholighting.com static.soholighting.com lighteningbox.com www.lighteningbox.com cdn.lighteningbox.com static.lighteningbox.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://sentry.bigeyedeers.dev/api/6/security/?sentry_key=476f7497936cfb1dfb62eeeaa2a7f1cb; report-to report-endpoint; 1
frame-src 'self'; report-uri https://www.seva.org/site/XFrameViolation 1
default-src 'self' https://www.googletagmanager.com *.onetrust.com; script-src 'self' 'nonce-YjljZmZkNTYtYzAzMS00NzQ2LWE4ODMtYWY5ZGJmNDlmNDMw' https://snap.licdn.com https://cdn.cookielaw.org https://*.googletagmanager.com https://tagmanager.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://www.google.com https://www.googleadservices.com https://widgets.sociablekit.com https://app.storyblok.com https://vercel.live https://www.youtube.com/iframe_api https://www.youtube.com https://player.vimeo.com https://*.clarity.ms https://s.yimg.com https://js.adsrvr.org https://widgets.sociablekit.com; style-src 'self' 'nonce-YjljZmZkNTYtYzAzMS00NzQ2LWE4ODMtYWY5ZGJmNDlmNDMw' https://localhost:3000 https://192.168.1.72:3000 https://development-tag-website.vercel.app https://092f-2001-8a0-faef-d900-bdda-59c5-cdf7-e1a9.ngrok-free.app https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com; style-src-attr 'self' 'unsafe-hashes' 'sha256-zlqnbDt84zf1iSefLU/ImC54isoprH/MRiVZGskwexk=' 'sha256-ZDrxqUOB4m/L0JWL/+gS52g1CRH0l/qwMhjTw5Z/Fsc='; connect-src 'self' https://api.sociablekit.com https://data.accentapi.com https://px.ads.linkedin.com https://privacyportal-de.onetrust.com https://www.google.com https://analytics.google.com https://*.analytics.google.com https://*.google-analytics.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://cdn.cookielaw.org https://api.storyblok.com https://player.vimeo.com https://vimeo.com https://www.youtube.com https://vod-adaptive-ak.vimeocdn.com https://geolocation.onetrust.com https://www.googleadservices.com https://ad.doubleclick.net https://*.clarity.ms https://s.yimg.com https://insight.adsrvr.org https://pagead2.googlesyndication.com; frame-src 'self' https://td.doubleclick.net https://www.googletagmanager.com https://www.youtube.com/iframe_api https://www.youtube.com https://player.vimeo.com https://insight.adsrvr.org https://match.adsrvr.org https://*.fls.doubleclick.net https://apps.elfsight.com https://vercel.live; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' * https://px.ads.linkedin.com https://cdn.cookielaw.org https://a.storyblok.com https://a2.storyblok.com https://googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://*.google-analytics.com https://*.googletagmanager.com https://ad.doubleclick.net https://ade.googlesyndication.com https://adservice.google.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://*.g.doubleclick.net https://*.google.com; media-src 'self' https://vod-adaptive-ak.vimeocdn.com https://player.vimeo.com https://a.storyblok.com blob:; manifest-src 'self'; frame-ancestors 'self' https://app.storyblok.com; form-action 'self'; upgrade-insecure-requests; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://analytics.ahrefs.com; connect-src 'self' https://us.i.posthog.com https://us-assets.i.posthog.com https://analytics.ahrefs.com; img-src 'self' data: https://cdn.sanity.io https://us-assets.i.posthog.com https://p.typekit.net; style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net; font-src 'self' data: https://use.typekit.net https://p.typekit.net; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; form-action 'self' 1
default-src 'self' 'nonce-WFd099995798558a' cc.js https://googleads https://cc-cdn.com https://api.craftyclicks.co.uk https://www.westfieldfasteners.co.uk https://bat.bing.com http://bat.bing.com https://bat.bing.net https://www.google-analytics.com https://www.google.com https://region1.google-analytics.com https://www.google.co.uk https://www.googleadservices.com https://google.com https://www.googletagmanager.com 1
object-src 'none'; script-src 'nonce-smRvgDbaDl5l0tMwHnu7Rw==' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; base-uri 'none'; report-uri https://sentry.io/api/1258985/security/?sentry_key=1891ca9ff5bc416bbb0349a074c3b41f 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com https://fonts.bunny.net www.meisterbarf.de media.meisterbarf.de t.meisterbarf.de *.optimonk.com https://cdnjs.cloudflare.com https://widgets.trustedshops.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com js.stripe.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://cdn.consentmanager.net https://delivery.consentmanager.net https://front.optimonk.com https://onsite.optimonk.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.consentmanager.net a.meisterbarf.de t.meisterbarf.de www.meisterbarf.de media.meisterbarf.de *.googletagmanager.com widget.rational-ai.cloud js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https://cdn.consentmanager.net https://delivery.consentmanager.net https://a.delivery.consentmanager.net https://b.delivery.consentmanager.net https://c.delivery.consentmanager.net https://d.delivery.consentmanager.net https://front.optimonk.com https://cdn-asset.optimonk.com https://cdn-account.optimonk.com https://firebasestorage.googleapis.com *.google.com *.google.de *.googletagmanager.com *.google-analytics.com *.g.doubleclick.net *.facebook.com *.consentmanager.net it-recht-kanzlei.de www.it-recht-kanzlei.de bing.com bat.bing.com bat.bing.net integrations.etrusted.com attachments.etrusted.com a.meisterbarf.de t.meisterbarf.de www.meisterbarf.de media.meisterbarf.de js.stripe.com *.optimonk.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: www.xtento.com cdn.xtento.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ js.stripe.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de jsd-widget.atlassian.com https://cdn.consentmanager.net https://delivery.consentmanager.net https://a.delivery.consentmanager.net https://b.delivery.consentmanager.net https://c.delivery.consentmanager.net https://d.delivery.consentmanager.net https://onsite.optimonk.com https://cdn-asset.optimonk.com https://gs-cdn.optimonk.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.avada.io *.shopify.com *.facebook.com connect.facebook.net *.consentmanager.net *.clarity.ms bing.com bat.bing.com www.meisterbarf.de media.meisterbarf.de a.meisterbarf.de 'unsafe-inline' t.meisterbarf.de *.googletagmanager.com tagmanager.google.com widget.rational-ai.cloud static.cloudflareinsights.com cdn.brevo.com sibautomation.com https://cdnjs.cloudflare.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://cdn-asset.optimonk.com https://gs-cdn.optimonk.com *.stripe.network *.stripecdn.com *.amazon.com https://fonts.googleapis.com maxcdn.bootstrapcdn.com https://fonts.bunny.net integrations.etrusted.com *.googletagmanager.com tagmanager.google.com fonts.gstatic.com t.meisterbarf.de https://cdnjs.cloudflare.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com assets.braintreegateway.com *.googleapis.com *.gstatic.com fonts.google.com 'self' 'unsafe-inline'; object-src https://cdn.consentmanager.net https://delivery.consentmanager.net 'self' 'unsafe-inline'; media-src *.adobe.com https://cdn.consentmanager.net https://delivery.consentmanager.net https://a.delivery.consentmanager.net https://b.delivery.consentmanager.net https://c.delivery.consentmanager.net https://d.delivery.consentmanager.net www.meisterbarf.de media.meisterbarf.de 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de jsd-widget.atlassian.com api-private.atlassian.com https://cdn.consentmanager.net https://delivery.consentmanager.net https://front.optimonk.com https://cdn-account.optimonk.com https://cdn-limit.optimonk.com https://jfapiprod.optimonk.com autocomplete2.postdirekt.de *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com https://get.geojs.io *.avada.io bat.bing.net bat.bing.com *.facebook.com *.google-analytics.com *.googletagmanager.com *.g.doubleclick.net *.google.de pagead2.googlesyndication.com *.consentmanager.net *.clarity.ms a.meisterbarf.de t.meisterbarf.de www.meisterbarf.de media.meisterbarf.de places.googleapis.com js.stripe.com widget.rational-ai.cloud api.rational-ai.cloud *.brevo.com *.optimonk.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.analytics.google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src https://cdn.consentmanager.net https://delivery.consentmanager.net *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp.meisterbarf.de; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: https:; font-src 'self' https://fonts.gstatic.com data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://unpkg.com; script-src 'self' 'unsafe-inline' https://pagead2.googlesyndication.com https://fundingchoicesmessages.google.com https://www.googletagmanager.com https://www.google-analytics.com https://unpkg.com; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://pagead2.googlesyndication.com https://fundingchoicesmessages.google.com; frame-src 'self' https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://ep2.adtrafficquality.google https://www.google.com 1
font-src storage.googleapis.com/rtux-rtux-data-integration-rti/ *.fontawesome.com *.gstatic.com fonts.gstatic.com https://widgets.trustedshops.com https://integrations.etrusted.com data: 'self' 'unsafe-inline'; form-action test.saferpay.com www.saferpay.com saferpay.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net *.bugherd.com *.prismic.io *.netmailer.ch *.google.com *.wufoo.com *.doubleclick.net *.googletagmanager.com *.weltpixel.com test.saferpay.com www.saferpay.com saferpay.com *.typeform.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com https://images.unsplash.com *.prism.app-us1.com *.prismic.io *.gstatic.com *.magentocommerce.com *.bing.com *.google.rs *.google.ch *.trackjs.com *.profity.ch *.clarity.ms test.saferpay.com www.saferpay.com saferpay.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.googletagmanager.com *.doubleclick.net *.google.com https://widgets.trustedshops.com https://integrations.etrusted.com data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com bx-cdn.com/static/bav2.min.js track.bx-cloud.com/static/bav2.min.js r-st.bx-cloud.com/static/bav2.min.js r-st.bx-cloud.com/static/rti.min.js track.bx-cloud.com/static/rti.min.js bx-cdn.com/static/rti.min.js storage.googleapis.com/rtux-rtux-data-integration-rti/ *.prism.app-us1.com *.prismic.io *.google.com *.hs-scripts.com *.bugherd.com *.convertful.com *.facebook.net *.hs-analytics.com *.hscollectedforms.com *.headspixel.com *.hs-banner.com *.hotjar.com *.googleapis.com *.licdn.com *.googleadservices.com *.g.doubleclick.net *.newrelic.net *.trackjs.com *.cdn.prismic.io *.bing.com *.clarity.ms *.profity.ch *.wufoo.com test.saferpay.com www.saferpay.com saferpay.com cdnjs.cloudflare.com payment *.googletagmanager.com *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com https://widgets.trustedshops.com https://integrations.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.fontawesome.com *.googleapis.com *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com *.typeform.com https://widgets.trustedshops.com https://integrations.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src storage.googleapis.com/rtux-rtux-data-integration-rti/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com track.bx-cloud.com main.bx-cloud.com track-gw1.bx-cloud.com bx-cloud.com main.wi-platform-cloud.com r-st.bx-cloud.com track.bx-cloud.com/track/v2 storage.googleapis.com/rtux-rtux-data-integration-rti/ *.prism.app-us1.com *.prismic.io *.google.com *.clarity.ms *.bing.com *.trackjs.com test.saferpay.com www.saferpay.com saferpay.com intent://payment *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com *.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src test.saferpay.com www.saferpay.com saferpay.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
connect-src 'self' *.doubleclick.net *.facebook.com *.google.com *.google-analytics.com *.mapbox.com *.pinterest.com; font-src 'self'; frame-src *.authorize.net *.doubleclick.net *.facebook.com *.google.com *.hcaptcha.com *.instagram.com *.issuu.com *.pinterest.com *.youtube.com; img-src 'self' *.doubleclick.net *.facebook.com *.google-analytics.com *.googleadservices.com *.googletagmanager.com nugget-markets-01.s3.us-west-1.amazonaws.com *.nuggetmarkets.net *.simpli.fi; script-src-elem 'self' *.authorize.net *.facebook.net *.google-analytics.com *.googletagmanager.com *.hcaptcha.com *.instagram.com *.mapbox.com *.pinimg.com *.pinterest.com *.simpli.fi; style-src-elem 'self' *.mapbox.com; form-action 'self' *.facebook.com; report-uri https://nugget.report-uri.com/r/t/csp/wizard 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.nitropay.com https://www.googletagmanager.com https://*.googlesyndication.com https://*.googleadservices.com https://*.doubleclick.net https://static.cloudflareinsights.com https://fundingchoicesmessages.google.com https://*.adtrafficquality.google https://cdn.paddle.com https://*.paddle.com; script-src-elem 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; media-src 'self' blob: https:; worker-src 'self' blob:; frame-src 'self' https: 1
img-src https://higherlogicdownload.s3.amazonaws.com/THEACA/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/THEACA/ https://img.youtube.com/vi/ https://static.filestackapi.com/picker/ https://d2x5ku95bkycr3.cloudfront.net https://higherlogiclongterm.s3.amazonaws.com/THEACA/ blob: https://d132x6oi8ychic.cloudfront.net 'self'; style-src https://d132x6oi8ychic.cloudfront.net 'unsafe-inline' https://higherlogiccloudfront.s3.amazonaws.com https://cdn.jsdelivr.net/jquery.slick/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://d2x5ku95bkycr3.cloudfront.net/ https://ajax.googleapis.com/ajax/libs/jqueryui/ https://use.fortawesome.com/ https://cdn.higherlogic.com/ai-assistant https://static.filestackapi.com/picker/ https://fonts.googleapis.com/ https://d3uf7shreuzboy.cloudfront.net/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/THEACA/ https://higherlogicdownload.s3.amazonaws.com/THEACA/ https://higherlogiclongterm.s3.amazonaws.com/THEACA/ 'self'; font-src https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogiccloudfront.s3.amazonaws.com https://higherlogicdownload.s3.amazonaws.com/THEACA/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/THEACA/ 'self' https://higherlogiclongterm.s3.amazonaws.com/THEACA/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://d2x5ku95bkycr3.cloudfront.net https://d132x6oi8ychic.cloudfront.net data:; script-src-elem https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d3uf7shreuzboy.cloudfront.net/ https://static.filestackapi.com/picker/ https://cdn.higherlogic.com/ai-assistant https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d2x5ku95bkycr3.cloudfront.net/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://www.gstatic.com/recaptcha/ https://static.filestackapi.com/filestack-js/ 'self' https://ajax.aspnetcdn.com/ajax/ 'unsafe-eval' 'unsafe-inline'; media-src https://higherlogiclongterm.s3.amazonaws.com/THEACA/ https://higherlogicdownload.s3.amazonaws.com/THEACA/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/THEACA/ https://higherlogicstream.s3.amazonaws.com/THEACA/ 'self' https://d132x6oi8ychic.cloudfront.net; script-src https://higherlogiclongterm.s3.amazonaws.com/THEACA/ https://higherlogicdownload.s3.amazonaws.com/THEACA/ https://ajax.aspnetcdn.com/ajax/ https://cdn.jsdelivr.net/jquery.slick/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d132x6oi8ychic.cloudfront.net https://cdn.informz.net 'unsafe-eval' https://use.fortawesome.com/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/THEACA/ https://cdnjs.cloudflare.com/ajax/libs/prism/ 'unsafe-inline' https://d2x5ku95bkycr3.cloudfront.net/ https://higherlogiccloudfront.s3.amazonaws.com https://static.filestackapi.com https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d3uf7shreuzboy.cloudfront.net/ 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://api.connectedcommunity.org/ 'self' https://www.youtube.com/embed/ https://*.kb.us.higherlogic.com; connect-src https://upload.filestackapi.com https://static.filestackapi.com https://cloud.filestackapi.com/folder/list/ 'self' https://hl-managedservices.informz.net https://d3uf7shreuzboy.cloudfront.net/ blob:; worker-src 'self'; default-src 'self'; base-uri 'self'; frame-ancestors https://*.connectedcommunity.org/ 'self'; object-src 'none'; manifest-src 'self'; 1
default-src 'self'; script-src 'self' 'nonce-MTA2MTI3NWYtNTBkYi00MTI5LTgwYTMtNDg1YWViMjdkZmE3' 'strict-dynamic' https://www.googletagmanager.com https://wchat.freshchat.com https://www.google-analytics.com https://analytics.google.com https://connect.facebook.net https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://googleads.g.doubleclick.net https://td.doubleclick.net https://www.clarity.ms https://scripts.clarity.ms https://bat.bing.com https://capi-automation.s3.us-east-2.amazonaws.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https://apim.tucambista.pe https://devapim.tucambista.pe https://firebase.googleapis.com https://fcmregistrations.googleapis.com https://dc.services.visualstudio.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://www.google.com https://www.google.com.pe https://*.clarity.ms https://connect.facebook.net https://*.facebook.com https://*.on.aws https://wchat.freshchat.com wss://*.freshchat.com https://bat.bing.com https://capi-automation.s3.us-east-2.amazonaws.com; frame-src 'self' https://wchat.freshchat.com https://*.webpush.freshchat.com https://www.googletagmanager.com https://www.youtube.com https://www.google.com https://googleads.g.doubleclick.net https://td.doubleclick.net; worker-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests; report-uri /api/csp-report 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net https://fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io blueskytechmage.com mageblueskytech.com placehold.jp https://firebasestorage.googleapis.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com s7.addthis.com *.avada.io https://player.vimeo.com https://www.youtube.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net https://fonts.googleapis.com http://fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com ekr.zdassets.com/ https://get.geojs.io *.avada.io https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com/ https://www.googleadservices.com/ https://bat.bing.com/ https://celebrosnlp.com/autocompletev6/Clients/KsiInt/output/CelScriptsAC.js https://connect.facebook.net/ https://data.brandible.de/ https://googleads.g.doubleclick.net/ https://integrations.etrusted.com/ https://rns.matelso.de/ https://secure.pay1.de/client-api/js/ajax.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://static.hotjar.com/ https://script.hotjar.com/ https://widgets.trustedshops.com/ https://www.google.com/recaptcha/ https://static-eu.payments-amazon.com/ https://secure.pay1.de/client-api/ https://www.gstatic.com/ https://cl.avis-verifies.com/ https://d388us03v35p3m.cloudfront.net/js/conversions_min.js https://stats.cleverreach.com/ https://snap.licdn.com/li.lms-analytics/ https://script.brandible.de/; style-src 'self' 'unsafe-inline' https://celebrosnlp.com https://integrations.etrusted.com/ https://widgets.trustedshops.com/; object-src 'none'; base-uri 'self'; connect-src 'self' https:; font-src 'self' https://www.brandible.at/ https://celebrosnlp.com/AutoCompleteV6/Templates/Default/fonts/ https://widgets.trustedshops.com/reviews/tsSticker/fonts/; frame-src 'self' https://td.doubleclick.net https://www.google.com https://www.youtube-nocookie.com https://secure.pay1.de/ https://data.brandible.de/; img-src data: *; manifest-src 'self'; media-src *; worker-src 'none'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com https://fonts.gstatic.com https://use.fontawesome.com https://fonts.bunny.net *.alicdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * mercury-t2.phonepe.com mercury.phonepe.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * mercury-t2.phonepe.com mercury-stg.phonepe.com api.razorpay.com https://www.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com https://meetanshi.com/media/logo.png cdn.razorpay.com https://*.googleusercontent.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com https://www.googletagmanager.com tagmanager.google.com https://www.googleadservices.com *.disqus.com *.avada.io *.shopify.com mercury.phonepe.com mercury-stg.phonepe.com checkout.razorpay.com https://maps.googleapis.com https://www.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com https://use.fontawesome.com https://fonts.bunny.net https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com https://get.geojs.io *.avada.io https://olegnax.com https://api.instagram.com https://graph.instagram.com/ mercury-t2.phonepe.com mercury.phonepe.com lumberjack.razorpay.com lumberjack-metrics.razorpay.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
style-src 'self' admin.littleboxoffice.com hub.nuwebgroup.com assets.nuwebgroup.com nextgen-prod-a.s3.eu-west-1.amazonaws.com *.googleapis.com *.gstatic.com *.google.com google.com *.google-analytics.com *.cloudflareinsights.com cloudflareinsights.com *.cloudflare.com *.googletagmanager.com *.mixpanel.com connect.facebook.net www.facebook.com/tr/ *.fbcdn.net pixel.byspotify.com pixels.spotify.com analytics.tiktok.com static.ads-twitter.com *.birdie.so cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.1.0/ cdn.tailwindcss.com goselljslib.b-cdn.net *.tap.company *.oppwa.com oppwa.com *.iovation.com/snare.js *.iesnare.com *.arcot.com *.klarnacdn.net/kp/lib/v1/api.js *.affirm.com/js/v2/affirm.js *.payments-amazon.com/checkout.js *.oney.io/build/loader.min.js *.afterpay.com/afterpay.js *.mastercard.com d.ratepay.com/*/di.js d3rpjm0wf8u2co.cloudfront.net/static/rkfl.js d35p4vvdul393k.cloudfront.net/sdk_library/us/stg/ops/pc_gsmpi_web_sdk.js d16i99j5zwwv51.cloudfront.net/sdk_library/us/prd/ops/pc_gsmpi_web_sdk.js us-cdn-gpp.mcsvc.samsung.com a.swallet.link checkout-sdk.sezzle.com/checkout.min.js yookassa.ru/checkout-widget/v1/checkout-widget.js applepay.cdn-apple.com/jsapi/v1.1.0/apple-pay-sdk.js cdn10.ebuckler.com/ebuckler.widget.js stats.ebuckler.com/js/ebuckler.widget.js *.masterpass.com/lightbox/Switch/integration/MasterPass.client.js *.stripe.com *.adyen.com *.authorize.net *.razorpay.com *.netpay.mx *.online-metrix.net *.netpaydev.com *.netpay.com.mx *.cardinalcommerce.com *.ccdc02.com/cardinalcruise/ *.safecharge.com *.onvopay.com *.paypal.com *.braintreegateway.com *.paypalobjects.com *.paytabs.com *.ryftpay.com my.emerchantpay.com *.3dsecure.io *.sumup.com cdn.optimizely.com *.cybersource.com *.barclaycard *.secure.checkout.visa.com *.aexp-static.com *.protectgroup.com www.stay22.com *.vimeocdn.com *.vimeo.com vimeo.com *.youtube.com *.3ddvapis.com *.clarity.ms *.hotjar.com wss://*.hotjar.com *.hotjar.io *.bing.com *.bing.net *.zoho.eu *.zohocdn.com *.doubleclick.net www.googleadservices.com *.googlesyndication.com www.google.co.uk/ads www.google.hu/ads www.google.rs/ads www.google.ru/ads www.google.mx/ads *.optimonk.com *.crazyegg.com *.linkedin.com *.licdn.com open.spotify.com 'unsafe-inline';frame-src 'self' admin.littleboxoffice.com hub.nuwebgroup.com assets.nuwebgroup.com nextgen-prod-a.s3.eu-west-1.amazonaws.com *.googleapis.com *.gstatic.com *.google.com google.com *.google-analytics.com *.cloudflareinsights.com cloudflareinsights.com *.cloudflare.com *.googletagmanager.com *.mixpanel.com connect.facebook.net www.facebook.com/tr/ *.fbcdn.net pixel.byspotify.com pixels.spotify.com analytics.tiktok.com static.ads-twitter.com *.birdie.so cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.1.0/ cdn.tailwindcss.com goselljslib.b-cdn.net *.tap.company *.oppwa.com oppwa.com *.iovation.com/snare.js *.iesnare.com *.arcot.com *.klarnacdn.net/kp/lib/v1/api.js *.affirm.com/js/v2/affirm.js *.payments-amazon.com/checkout.js *.oney.io/build/loader.min.js *.afterpay.com/afterpay.js *.mastercard.com d.ratepay.com/*/di.js d3rpjm0wf8u2co.cloudfront.net/static/rkfl.js d35p4vvdul393k.cloudfront.net/sdk_library/us/stg/ops/pc_gsmpi_web_sdk.js d16i99j5zwwv51.cloudfront.net/sdk_library/us/prd/ops/pc_gsmpi_web_sdk.js us-cdn-gpp.mcsvc.samsung.com a.swallet.link checkout-sdk.sezzle.com/checkout.min.js yookassa.ru/checkout-widget/v1/checkout-widget.js applepay.cdn-apple.com/jsapi/v1.1.0/apple-pay-sdk.js cdn10.ebuckler.com/ebuckler.widget.js stats.ebuckler.com/js/ebuckler.widget.js *.masterpass.com/lightbox/Switch/integration/MasterPass.client.js *.stripe.com *.adyen.com *.authorize.net *.razorpay.com *.netpay.mx *.online-metrix.net *.netpaydev.com *.netpay.com.mx *.cardinalcommerce.com *.ccdc02.com/cardinalcruise/ *.safecharge.com *.onvopay.com *.paypal.com *.braintreegateway.com *.paypalobjects.com *.paytabs.com *.ryftpay.com my.emerchantpay.com *.3dsecure.io *.sumup.com cdn.optimizely.com *.cybersource.com *.barclaycard *.secure.checkout.visa.com *.aexp-static.com *.protectgroup.com www.stay22.com *.vimeocdn.com *.vimeo.com vimeo.com *.youtube.com *.3ddvapis.com *.clarity.ms *.hotjar.com wss://*.hotjar.com *.hotjar.io *.bing.com *.bing.net *.zoho.eu *.zohocdn.com *.doubleclick.net www.googleadservices.com *.googlesyndication.com www.google.co.uk/ads www.google.hu/ads www.google.rs/ads www.google.ru/ads www.google.mx/ads *.optimonk.com *.crazyegg.com *.linkedin.com *.licdn.com open.spotify.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' admin.littleboxoffice.com hub.nuwebgroup.com assets.nuwebgroup.com nextgen-prod-a.s3.eu-west-1.amazonaws.com *.googleapis.com *.gstatic.com *.google.com google.com *.google-analytics.com *.cloudflareinsights.com cloudflareinsights.com *.cloudflare.com *.googletagmanager.com *.mixpanel.com connect.facebook.net www.facebook.com/tr/ *.fbcdn.net pixel.byspotify.com pixels.spotify.com analytics.tiktok.com static.ads-twitter.com *.birdie.so cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.1.0/ cdn.tailwindcss.com goselljslib.b-cdn.net *.tap.company *.oppwa.com oppwa.com *.iovation.com/snare.js *.iesnare.com *.arcot.com *.klarnacdn.net/kp/lib/v1/api.js *.affirm.com/js/v2/affirm.js *.payments-amazon.com/checkout.js *.oney.io/build/loader.min.js *.afterpay.com/afterpay.js *.mastercard.com d.ratepay.com/*/di.js d3rpjm0wf8u2co.cloudfront.net/static/rkfl.js d35p4vvdul393k.cloudfront.net/sdk_library/us/stg/ops/pc_gsmpi_web_sdk.js d16i99j5zwwv51.cloudfront.net/sdk_library/us/prd/ops/pc_gsmpi_web_sdk.js us-cdn-gpp.mcsvc.samsung.com a.swallet.link checkout-sdk.sezzle.com/checkout.min.js yookassa.ru/checkout-widget/v1/checkout-widget.js applepay.cdn-apple.com/jsapi/v1.1.0/apple-pay-sdk.js cdn10.ebuckler.com/ebuckler.widget.js stats.ebuckler.com/js/ebuckler.widget.js *.masterpass.com/lightbox/Switch/integration/MasterPass.client.js *.stripe.com *.adyen.com *.authorize.net *.razorpay.com *.netpay.mx *.online-metrix.net *.netpaydev.com *.netpay.com.mx *.cardinalcommerce.com *.ccdc02.com/cardinalcruise/ *.safecharge.com *.onvopay.com *.paypal.com *.braintreegateway.com *.paypalobjects.com *.paytabs.com *.ryftpay.com my.emerchantpay.com *.3dsecure.io *.sumup.com cdn.optimizely.com *.cybersource.com *.barclaycard *.secure.checkout.visa.com *.aexp-static.com *.protectgroup.com www.stay22.com *.vimeocdn.com *.vimeo.com vimeo.com *.youtube.com *.3ddvapis.com *.clarity.ms *.hotjar.com wss://*.hotjar.com *.hotjar.io *.bing.com *.bing.net *.zoho.eu *.zohocdn.com *.doubleclick.net www.googleadservices.com *.googlesyndication.com www.google.co.uk/ads www.google.hu/ads www.google.rs/ads www.google.ru/ads www.google.mx/ads *.optimonk.com *.crazyegg.com *.linkedin.com *.licdn.com open.spotify.com;script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' admin.littleboxoffice.com hub.nuwebgroup.com assets.nuwebgroup.com nextgen-prod-a.s3.eu-west-1.amazonaws.com *.googleapis.com *.gstatic.com *.google.com google.com *.google-analytics.com *.cloudflareinsights.com cloudflareinsights.com *.cloudflare.com *.googletagmanager.com *.mixpanel.com connect.facebook.net www.facebook.com/tr/ *.fbcdn.net pixel.byspotify.com pixels.spotify.com analytics.tiktok.com static.ads-twitter.com *.birdie.so cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.1.0/ cdn.tailwindcss.com goselljslib.b-cdn.net *.tap.company *.oppwa.com oppwa.com *.iovation.com/snare.js *.iesnare.com *.arcot.com *.klarnacdn.net/kp/lib/v1/api.js *.affirm.com/js/v2/affirm.js *.payments-amazon.com/checkout.js *.oney.io/build/loader.min.js *.afterpay.com/afterpay.js *.mastercard.com d.ratepay.com/*/di.js d3rpjm0wf8u2co.cloudfront.net/static/rkfl.js d35p4vvdul393k.cloudfront.net/sdk_library/us/stg/ops/pc_gsmpi_web_sdk.js d16i99j5zwwv51.cloudfront.net/sdk_library/us/prd/ops/pc_gsmpi_web_sdk.js us-cdn-gpp.mcsvc.samsung.com a.swallet.link checkout-sdk.sezzle.com/checkout.min.js yookassa.ru/checkout-widget/v1/checkout-widget.js applepay.cdn-apple.com/jsapi/v1.1.0/apple-pay-sdk.js cdn10.ebuckler.com/ebuckler.widget.js stats.ebuckler.com/js/ebuckler.widget.js *.masterpass.com/lightbox/Switch/integration/MasterPass.client.js *.stripe.com *.adyen.com *.authorize.net *.razorpay.com *.netpay.mx *.online-metrix.net *.netpaydev.com *.netpay.com.mx *.cardinalcommerce.com *.ccdc02.com/cardinalcruise/ *.safecharge.com *.onvopay.com *.paypal.com *.braintreegateway.com *.paypalobjects.com *.paytabs.com *.ryftpay.com my.emerchantpay.com *.3dsecure.io *.sumup.com cdn.optimizely.com *.cybersource.com *.barclaycard *.secure.checkout.visa.com *.aexp-static.com *.protectgroup.com www.stay22.com *.vimeocdn.com *.vimeo.com vimeo.com *.youtube.com *.3ddvapis.com *.clarity.ms *.hotjar.com wss://*.hotjar.com *.hotjar.io *.bing.com *.bing.net *.zoho.eu *.zohocdn.com *.doubleclick.net www.googleadservices.com *.googlesyndication.com www.google.co.uk/ads www.google.hu/ads www.google.rs/ads www.google.ru/ads www.google.mx/ads *.optimonk.com *.crazyegg.com *.linkedin.com *.licdn.com open.spotify.com;worker-src 'self' blob: admin.littleboxoffice.com hub.nuwebgroup.com assets.nuwebgroup.com nextgen-prod-a.s3.eu-west-1.amazonaws.com *.googleapis.com *.gstatic.com *.google.com google.com *.google-analytics.com *.cloudflareinsights.com cloudflareinsights.com *.cloudflare.com *.googletagmanager.com *.mixpanel.com connect.facebook.net www.facebook.com/tr/ *.fbcdn.net pixel.byspotify.com pixels.spotify.com analytics.tiktok.com static.ads-twitter.com *.birdie.so cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.1.0/ cdn.tailwindcss.com goselljslib.b-cdn.net *.tap.company *.oppwa.com oppwa.com *.iovation.com/snare.js *.iesnare.com *.arcot.com *.klarnacdn.net/kp/lib/v1/api.js *.affirm.com/js/v2/affirm.js *.payments-amazon.com/checkout.js *.oney.io/build/loader.min.js *.afterpay.com/afterpay.js *.mastercard.com d.ratepay.com/*/di.js d3rpjm0wf8u2co.cloudfront.net/static/rkfl.js d35p4vvdul393k.cloudfront.net/sdk_library/us/stg/ops/pc_gsmpi_web_sdk.js d16i99j5zwwv51.cloudfront.net/sdk_library/us/prd/ops/pc_gsmpi_web_sdk.js us-cdn-gpp.mcsvc.samsung.com a.swallet.link checkout-sdk.sezzle.com/checkout.min.js yookassa.ru/checkout-widget/v1/checkout-widget.js applepay.cdn-apple.com/jsapi/v1.1.0/apple-pay-sdk.js cdn10.ebuckler.com/ebuckler.widget.js stats.ebuckler.com/js/ebuckler.widget.js *.masterpass.com/lightbox/Switch/integration/MasterPass.client.js *.stripe.com *.adyen.com *.authorize.net *.razorpay.com *.netpay.mx *.online-metrix.net *.netpaydev.com *.netpay.com.mx *.cardinalcommerce.com *.ccdc02.com/cardinalcruise/ *.safecharge.com *.onvopay.com *.paypal.com *.braintreegateway.com *.paypalobjects.com *.paytabs.com *.ryftpay.com my.emerchantpay.com *.3dsecure.io *.sumup.com cdn.optimizely.com *.cybersource.com *.barclaycard *.secure.checkout.visa.com *.aexp-static.com *.protectgroup.com www.stay22.com *.vimeocdn.com *.vimeo.com vimeo.com *.youtube.com *.3ddvapis.com *.clarity.ms *.hotjar.com wss://*.hotjar.com *.hotjar.io *.bing.com *.bing.net *.zoho.eu *.zohocdn.com *.doubleclick.net www.googleadservices.com *.googlesyndication.com www.google.co.uk/ads www.google.hu/ads www.google.rs/ads www.google.ru/ads www.google.mx/ads *.optimonk.com *.crazyegg.com *.linkedin.com *.licdn.com open.spotify.com;connect-src 'self' admin.littleboxoffice.com hub.nuwebgroup.com assets.nuwebgroup.com nextgen-prod-a.s3.eu-west-1.amazonaws.com *.googleapis.com *.gstatic.com *.google.com google.com *.google-analytics.com *.cloudflareinsights.com cloudflareinsights.com *.cloudflare.com *.googletagmanager.com *.mixpanel.com connect.facebook.net www.facebook.com/tr/ *.fbcdn.net pixel.byspotify.com pixels.spotify.com analytics.tiktok.com static.ads-twitter.com *.birdie.so cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.1.0/ cdn.tailwindcss.com goselljslib.b-cdn.net *.tap.company *.oppwa.com oppwa.com *.iovation.com/snare.js *.iesnare.com *.arcot.com *.klarnacdn.net/kp/lib/v1/api.js *.affirm.com/js/v2/affirm.js *.payments-amazon.com/checkout.js *.oney.io/build/loader.min.js *.afterpay.com/afterpay.js *.mastercard.com d.ratepay.com/*/di.js d3rpjm0wf8u2co.cloudfront.net/static/rkfl.js d35p4vvdul393k.cloudfront.net/sdk_library/us/stg/ops/pc_gsmpi_web_sdk.js d16i99j5zwwv51.cloudfront.net/sdk_library/us/prd/ops/pc_gsmpi_web_sdk.js us-cdn-gpp.mcsvc.samsung.com a.swallet.link checkout-sdk.sezzle.com/checkout.min.js yookassa.ru/checkout-widget/v1/checkout-widget.js applepay.cdn-apple.com/jsapi/v1.1.0/apple-pay-sdk.js cdn10.ebuckler.com/ebuckler.widget.js stats.ebuckler.com/js/ebuckler.widget.js *.masterpass.com/lightbox/Switch/integration/MasterPass.client.js *.stripe.com *.adyen.com *.authorize.net *.razorpay.com *.netpay.mx *.online-metrix.net *.netpaydev.com *.netpay.com.mx *.cardinalcommerce.com *.ccdc02.com/cardinalcruise/ *.safecharge.com *.onvopay.com *.paypal.com *.braintreegateway.com *.paypalobjects.com *.paytabs.com *.ryftpay.com my.emerchantpay.com *.3dsecure.io *.sumup.com cdn.optimizely.com *.cybersource.com *.barclaycard *.secure.checkout.visa.com *.aexp-static.com *.protectgroup.com www.stay22.com *.vimeocdn.com *.vimeo.com vimeo.com *.youtube.com *.3ddvapis.com *.clarity.ms *.hotjar.com wss://*.hotjar.com *.hotjar.io *.bing.com *.bing.net *.zoho.eu *.zohocdn.com *.doubleclick.net www.googleadservices.com *.googlesyndication.com www.google.co.uk/ads www.google.hu/ads www.google.rs/ads www.google.ru/ads www.google.mx/ads *.optimonk.com *.crazyegg.com *.linkedin.com *.licdn.com open.spotify.com;object-src 'self' admin.littleboxoffice.com hub.nuwebgroup.com assets.nuwebgroup.com nextgen-prod-a.s3.eu-west-1.amazonaws.com *.googleapis.com *.gstatic.com *.google.com google.com *.google-analytics.com *.cloudflareinsights.com cloudflareinsights.com *.cloudflare.com *.googletagmanager.com *.mixpanel.com connect.facebook.net www.facebook.com/tr/ *.fbcdn.net pixel.byspotify.com pixels.spotify.com analytics.tiktok.com static.ads-twitter.com *.birdie.so cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.1.0/ cdn.tailwindcss.com goselljslib.b-cdn.net *.tap.company *.oppwa.com oppwa.com *.iovation.com/snare.js *.iesnare.com *.arcot.com *.klarnacdn.net/kp/lib/v1/api.js *.affirm.com/js/v2/affirm.js *.payments-amazon.com/checkout.js *.oney.io/build/loader.min.js *.afterpay.com/afterpay.js *.mastercard.com d.ratepay.com/*/di.js d3rpjm0wf8u2co.cloudfront.net/static/rkfl.js d35p4vvdul393k.cloudfront.net/sdk_library/us/stg/ops/pc_gsmpi_web_sdk.js d16i99j5zwwv51.cloudfront.net/sdk_library/us/prd/ops/pc_gsmpi_web_sdk.js us-cdn-gpp.mcsvc.samsung.com a.swallet.link checkout-sdk.sezzle.com/checkout.min.js yookassa.ru/checkout-widget/v1/checkout-widget.js applepay.cdn-apple.com/jsapi/v1.1.0/apple-pay-sdk.js cdn10.ebuckler.com/ebuckler.widget.js stats.ebuckler.com/js/ebuckler.widget.js *.masterpass.com/lightbox/Switch/integration/MasterPass.client.js *.stripe.com *.adyen.com *.authorize.net *.razorpay.com *.netpay.mx *.online-metrix.net *.netpaydev.com *.netpay.com.mx *.cardinalcommerce.com *.ccdc02.com/cardinalcruise/ *.safecharge.com *.onvopay.com *.paypal.com *.braintreegateway.com *.paypalobjects.com *.paytabs.com *.ryftpay.com my.emerchantpay.com *.3dsecure.io *.sumup.com cdn.optimizely.com *.cybersource.com *.barclaycard *.secure.checkout.visa.com *.aexp-static.com *.protectgroup.com www.stay22.com *.vimeocdn.com *.vimeo.com vimeo.com *.youtube.com *.3ddvapis.com *.clarity.ms *.hotjar.com wss://*.hotjar.com *.hotjar.io *.bing.com *.bing.net *.zoho.eu *.zohocdn.com *.doubleclick.net www.googleadservices.com *.googlesyndication.com www.google.co.uk/ads www.google.hu/ads www.google.rs/ads www.google.ru/ads www.google.mx/ads *.optimonk.com *.crazyegg.com *.linkedin.com *.licdn.com open.spotify.com;manifest-src 'self' admin.littleboxoffice.com hub.nuwebgroup.com assets.nuwebgroup.com nextgen-prod-a.s3.eu-west-1.amazonaws.com *.googleapis.com *.gstatic.com *.google.com google.com *.google-analytics.com *.cloudflareinsights.com cloudflareinsights.com *.cloudflare.com *.googletagmanager.com *.mixpanel.com connect.facebook.net www.facebook.com/tr/ *.fbcdn.net pixel.byspotify.com pixels.spotify.com analytics.tiktok.com static.ads-twitter.com *.birdie.so cdnjs.cloudflare.com/ajax/libs/flag-icon-css/3.1.0/ cdn.tailwindcss.com goselljslib.b-cdn.net *.tap.company *.oppwa.com oppwa.com *.iovation.com/snare.js *.iesnare.com *.arcot.com *.klarnacdn.net/kp/lib/v1/api.js *.affirm.com/js/v2/affirm.js *.payments-amazon.com/checkout.js *.oney.io/build/loader.min.js *.afterpay.com/afterpay.js *.mastercard.com d.ratepay.com/*/di.js d3rpjm0wf8u2co.cloudfront.net/static/rkfl.js d35p4vvdul393k.cloudfront.net/sdk_library/us/stg/ops/pc_gsmpi_web_sdk.js d16i99j5zwwv51.cloudfront.net/sdk_library/us/prd/ops/pc_gsmpi_web_sdk.js us-cdn-gpp.mcsvc.samsung.com a.swallet.link checkout-sdk.sezzle.com/checkout.min.js yookassa.ru/checkout-widget/v1/checkout-widget.js applepay.cdn-apple.com/jsapi/v1.1.0/apple-pay-sdk.js cdn10.ebuckler.com/ebuckler.widget.js stats.ebuckler.com/js/ebuckler.widget.js *.masterpass.com/lightbox/Switch/integration/MasterPass.client.js *.stripe.com *.adyen.com *.authorize.net *.razorpay.com *.netpay.mx *.online-metrix.net *.netpaydev.com *.netpay.com.mx *.cardinalcommerce.com *.ccdc02.com/cardinalcruise/ *.safecharge.com *.onvopay.com *.paypal.com *.braintreegateway.com *.paypalobjects.com *.paytabs.com *.ryftpay.com my.emerchantpay.com *.3dsecure.io *.sumup.com cdn.optimizely.com *.cybersource.com *.barclaycard *.secure.checkout.visa.com *.aexp-static.com *.protectgroup.com www.stay22.com *.vimeocdn.com *.vimeo.com vimeo.com *.youtube.com *.3ddvapis.com *.clarity.ms *.hotjar.com wss://*.hotjar.com *.hotjar.io *.bing.com *.bing.net *.zoho.eu *.zohocdn.com *.doubleclick.net www.googleadservices.com *.googlesyndication.com www.google.co.uk/ads www.google.hu/ads www.google.rs/ads www.google.ru/ads www.google.mx/ads *.optimonk.com *.crazyegg.com *.linkedin.com *.licdn.com open.spotify.com;default-src * data: blob: 'unsafe-eval' 'unsafe-inline';report-uri https://nuwebgroup.report-uri.com/r/d/csp/reportOnly; 1
default-src 'self';script-src 'self' https://googletagmanager.com https://www.googletagmanager.com https://google-analytics.com https://www.google-analytics.com https://maps.google.com https://maps.googleapis.com https://use.fontawesome.com https://docs.google.com https://player.vimeo.com https://cdn.cookielaw.org 'sha256-EvDxpS6q8fx+mHxbCIS9KccnLVdrr/eLSOXZuxfjiHs=' 'sha256-dBTeJJRCuGIPZx+hUD0fkS6GWs8YtEyyujkD4ZasWkk=' 'sha256-x2rVQUM6l45jlJIStmWUWKl/rqleDYudloDYe6zeG/g=' 'sha256-kLSCL1VzEa/hegonQvu1+zpYmXHfDwxaF9ImJfvcdmo=' 'sha256-yUXrkvbo8KKgAjKQsgseJ6Fchh4UlWKfAZn/rSjxB4k=' 'sha256-TK/rbqFw7TePPz+m1JfgH44iDiCpinJnEtk9FGqeIDA=' 'sha256-oCGfgaZcXOEKtMVK1iM63DaF94PtHd0hGJnJR825NP0=' 'sha256-r/F6I3CGI5HTmvK0r0lHuwpR4bbXcUI0NumfChxEx7o=' 'sha256-A/117BO+Z0zybSOf4lfpNiIiA00pHrNOr8glPupBcxE=' 'sha256-OIBv30UhT322O/PHenkHRKwgffWc8EbmLHaU9BcvpkA=' 'sha256-sHXKh32czGIGyzMm0vEmLwW0+cIjg70z0rhG2ulVUHA=' 'sha256-/w2M4CbFJnH8BR4xAQPeYgpG4j1DXGmifFALNhhyFdY=' 'sha256-fNPsPXq72ESQv/usaT+oMlRvnPBRLtLYI+0qVmSmVm4=' 'sha256-ipbBoKixwqjquK36IWNLfyxCJva8UyLfGrfvxPHxr38=' 'sha256-hLNw7XF2Q/WfS0B0QukvrNZv8mSBODgfQ1J8axCT5iI=' 'sha256-rCMyM+e8r4BgQbJDV4+rCB3O2KBF2agnVkENqeojgqE=' 'sha256-PcR9GxSc7PEIa3AFYjBmlqc/NSUe3jFHLYjEFcslTDA=' 'nonce-f531be5726';style-src 'self' 'unsafe-hashes' 'unsafe-inline' https://www.googleapis.com https://www.google-analytics.com https://www.fontawesome.com 'sha256-LbZ1Unz/mECrqrf+3CWtpnBrwBH/o0xkJib5D3aXOi0=' 'sha256-HDYY6U2YJ1OY+bJ5Wfjr2rSQUWfvwIH2JVCtfSjiHPM=' 'sha256-h4K3squ9pciWWgumahdcs5MLh2+olNLNFgPvZI1KPWI=' 'sha256-qWwxsTFcdIcN78qmlVvZfPMlQLLiEk7put1pv87RdRQ=' 'sha256-8mpks22BfpbeSAxurqM+4YfqX5+SDZ/wIoU2ILeX2Nc=' 'sha256-QRtVm1c2wPGTerReFrmmYsF1uKpbQ37C4S8R9Jaw17U=' 'sha256-LbZ1Unz/mECrqrf+3CWtpnBrwBH/o0xkJib5D3aXOi0=' 'sha256-HDYY6U2YJ1OY+bJ5Wfjr2rSQUWfvwIH2JVCtfSjiHPM=' 'sha256-h4K3squ9pciWWgumahdcs5MLh2+olNLNFgPvZI1KPWI=' 'sha256-qWwxsTFcdIcN78qmlVvZfPMlQLLiEk7put1pv87RdRQ=' 'sha256-8mpks22BfpbeSAxurqM+4YfqX5+SDZ/wIoU2ILeX2Nc=' 'sha256-QRtVm1c2wPGTerReFrmmYsF1uKpbQ37C4S8R9Jaw17U=' 'sha256-hDpvALZKzxNd2YViRa7cIjjP8g7ZUpR2veo/ibqq1pQ=' 'sha256-VyHDlO3hVkhFldFuJRk+k8Peh8NGvD0Sg9yPWevJiiE=';font-src 'self' data: https://www.googleapis.com https://www.gstatic.com https://fonts.gstatic.com;child-src 'self' https://*.youtube.com https://*.vimeo.com https://youtu.be;connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://cdn.cookielaw.org https://privacyportal.onetrust.com;form-action 'self';frame-src https://www.google.com https://www.youtube.com https://youtube.com https://youtu.be https://player.vimeo.com https://www.scribd.com;img-src 'self' https://*.gravatar.com https://*.google-analytics.com https://*.vimeocdn.com https://cdn.cookielaw.org;style-src-elem 'self' https://fonts.googleapis.com 'sha256-LbZ1Unz/mECrqrf+3CWtpnBrwBH/o0xkJib5D3aXOi0=' 'sha256-HDYY6U2YJ1OY+bJ5Wfjr2rSQUWfvwIH2JVCtfSjiHPM=' 'sha256-h4K3squ9pciWWgumahdcs5MLh2+olNLNFgPvZI1KPWI=' 'sha256-qWwxsTFcdIcN78qmlVvZfPMlQLLiEk7put1pv87RdRQ=' 'sha256-8mpks22BfpbeSAxurqM+4YfqX5+SDZ/wIoU2ILeX2Nc=' 'sha256-QRtVm1c2wPGTerReFrmmYsF1uKpbQ37C4S8R9Jaw17U=' 'sha256-Sk3BSlaw3Md0zjc8aqjiep6a+P5u+7u3WH4u3uBb5xY=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-QVPYhFew7P3p46DxC68MMy/iAdzPaXWHAFcS3O2A0tI=';worker-src 'self' data:;report-uri https://centrusenergy.report-uri.com/r/d/csp/reportOnly 1
frame-ancestors 'self'; report-uri https://eastus-swscsp.azurewebsites.net/reporting/secure.bpointsaas.it/reportOnly 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://googleads.g.doubleclick.net https://ep2.adtrafficquality.google; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://*.public.blob.vercel-storage.com https://pbs.twimg.com https://www.google-analytics.com https://www.googletagmanager.com https://*.googlesyndication.com https://*.doubleclick.net https://ep1.adtrafficquality.google https://*.google.com https://*.google.co.jp; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.public.blob.vercel-storage.com https://*.upstash.io https://api.daily.co wss://*.daily.co https://*.googlesyndication.com https://*.doubleclick.net https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://*.google.com; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://*.daily.co https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://www.google.com https://ep2.adtrafficquality.google; media-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.gstatic.com https://*.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net https://maps.googleapis.com https://connect.facebook.net https://*.facebook.net https://snap.licdn.com https://*.licdn.com https://va.vercel-scripts.com https://*.youtube.com https://*.ytimg.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.google.com https://*.gstatic.com https://maps.googleapis.com https://*.vercel-insights.com https://va.vercel-scripts.com https://*.licdn.com https://px.ads.linkedin.com https://*.facebook.com https://*.doubleclick.net https://*.googlesyndication.com https://*.googleadservices.com; frame-src 'self' https://*.youtube.com https://www.youtube-nocookie.com https://*.googletagmanager.com https://*.doubleclick.net https://*.google.com https://*.googlesyndication.com; worker-src 'self' blob:; report-uri /api/csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.fontawesome.com https://fonts.bunny.net *.bootstrapcdn.com *.cloudflare.com *.googleusercontent.com *.jsdelivr.net *.slant.co unpkg.com data: 'self' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.2c2p.com *.americanexpress.com *.arcot.com *.cardinalcommerce.com *.citibank.com *.ctbcbank.com *.dnp-cdms.jp *.inicis.com *.ipay88.com.my *.unionpay.com *.uobgroup.com 'self' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.weltpixel.com *.americanexpress.com *.arcot.com *.cardinalcommerce.com *.citibank.com *.ctbcbank.com *.dnp-cdms.jp *.inicis.com *.unionpay.com *.uobgroup.com 'self' 'unsafe-eval' 'unsafe-hashes'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com k.kakaocdn.net https://firebasestorage.googleapis.com *.inicis.com *.afterpay.com *.doubleclick.net *.elcompanies.com www.google.ad www.google.at www.google.co.id www.google.co.in www.google.co.jp www.google.co.kr www.google.com.au www.google.com.bd www.google.com.co www.google.com.hk www.google.com.mt www.google.com.my www.google.com.ph www.google.com.sg www.google.com.tw www.google.com.vn www.google.co.th www.google.co.uk www.google.co.za www.google.de www.google.dk www.google.es www.google.fr www.google.ie www.google.it www.google.nl www.google.se *.google.com *.googletagmanager.com *.googleusercontent.com *.hstatic.net *.naver.com *.thecompanystore.com.sg data: 'self' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://api.addressfinder.io *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.googleapis.com *.gstatic.com developers.kakao.com *.kakaocdn.net *.avada.io *.shopify.com *.inicis.com *.facebook.net *.google-analytics.com *.googletagmanager.com 'self' 'unsafe-eval' 'unsafe-hashes' 'nonce-cjJvMmN2MGVjczFla3dncTI3enlxY2Vhc3J1enJ3c2s=' 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY/CkTMBhjNhwPvglpYumjx31B4fjkY8=' 'sha256-XGfPSYcBWPq7sx/ucAvvEcAKkiSRS2GeZReWO0f5vXQ='; style-src *.adobe.com fonts.googleapis.com https://api.addressfinder.io *.cash.app *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.fontawesome.com https://fonts.bunny.net *.inicis.com *.googleapis.com *.gstatic.com *.jsdelivr.net 'self' 'unsafe-eval' 'unsafe-hashes'; object-src 'self'; media-src *.adobe.com *.gstatic.com 'self' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://api.addressfinder.io * *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com *.googleapis.com kauth.kakao.com https://get.geojs.io *.avada.io *.inicis.com *.doubleclick.net www.google.ad www.google.at www.google.co.id www.google.co.in www.google.co.jp www.google.co.kr www.google.com.au www.google.com.bd www.google.com.hk www.google.com.mt www.google.com.my www.google.com.ph www.google.com.sg www.google.com.tw www.google.com.vn www.google.co.th www.google.co.za www.google.de www.google.dk www.google.es www.google.fr www.google.ie www.google.it www.google.nl *.googletagmanager.com 'self' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self'; default-src 'self'; base-uri 'self'; report-uri https://46455082-197a-43b3-bc26-d7a9c62189af.sansec.watch/; report-to report-endpoint; 1
frame-ancestors 'self' https://localhost:44300 https://localhost:44317 *.idocmarket.com *.authorize.net *.tyler-mc3.oktapreview.com 1
default-src 'self' data: blob:;     script-src 'self' 'unsafe-inline' 'unsafe-eval'       https://ajax.googleapis.com       https://cdn.jsdelivr.net       https://cdnjs.cloudflare.com       https://maps.googleapis.com       https://s.w.org       https://www.youtube.com       https://s.ytimg.com       https://www.googletagmanager.com       https://www.google-analytics.com       https://elfsightcdn.com       https://*.elfsightcdn.com       https://files.elfsightcdn.com       https://core.service.elfsight.com       https://apps.elfsight.com       https://static.elfsight.com       https://pi.pardot.com       https://js.driftt.com       https://go.leonardoworldwide.com;     script-src-elem 'self' 'unsafe-inline'       https://ajax.googleapis.com       https://cdn.jsdelivr.net       https://cdnjs.cloudflare.com       https://s.w.org       https://www.youtube.com       https://snap.licdn.com       https://www.gstatic.com       https://s.ytimg.com       https://www.googletagmanager.com       https://www.google-analytics.com       https://elfsightcdn.com       https://*.elfsightcdn.com       https://files.elfsightcdn.com       https://core.service.elfsight.com       https://apps.elfsight.com       https://static.elfsight.com       https://pi.pardot.com       https://js.driftt.com       https://go.leonardoworldwide.com;     connect-src 'self'       https://www.google-analytics.com       https://www.googletagmanager.com       https://maps.googleapis.com       https://elfsightcdn.com       https://*.elfsightcdn.com       https://ad.doubleclick.net       https://stats.g.doubleclick.net       https://www.google.com       https://files.elfsightcdn.com       https://core.service.elfsight.com       https://pi.pardot.com       https://js.driftt.com       https://go.leonardoworldwide.com       https://www.googleadservices.com       https://analytics.google.com       https://www.google.ca       https://px.ads.linkedin.com;     frame-src 'self'       https://go.leonardoworldwide.com       https://www.youtube.com       https://www.youtube-nocookie.com       https://elfsightcdn.com       https://*.elfsightcdn.com       https://js.driftt.com;     img-src 'self' data:       https://img.youtube.com       https://*.ytimg.com       https://www.google.com       https://px.ads.linkedin.com       https://www.google.ca       https://stats.g.doubleclick.net       https://files.elfsightcdn.com       https://*.elfsightcdn.com;     style-src 'self' 'unsafe-inline' https:;     font-src 'self' data: https:;     object-src 'none';     base-uri 'self';     form-action 'self';     frame-ancestors 'self';     worker-src 'self' blob:; 1
object-src 'none';base-uri 'self';script-src 'nonce-DTs8unMWQN9zE1KwLlNAZw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'nonce-kOd3O0JmGYifsNeKGBmqSQ==' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' https: 'report-sample'; base-uri 'none'; report-uri https://events.mercadolibre.com/csp/reports?identifier=hKHOeIiGYUxNhoHNKhLS8KljRIv-YHyAocNLtub0odUzEgOn7hrwieFys3cjfAIn9DgDnDHrLFc=&policy_id=30057&user_id=&request_id=0c7ce56f-c750-4d44-9940-f7b65ede7c02; report-to csp-endpoint-hkhoeiigyuxnhohnkhlskljrivyhyaocnltuboduzegonhrwiefyscjfaindgdndhrlfc; object-src https://http2.mlstatic.com/ https://mlstaticquic-a.akamaihd.net/; frame-ancestors 'self' https://*.mercadolibre.cl:* https://*.mercadolibre.com:* https://*.mercadolibre.com.ve:* https://*.mercadolibre.com.ar:* https://*.mercadolivre.com.br:* https://*.mercadolibre.com.co:* https://*.mercadolibre.com.ec:* https://*.mercadolibre.com.mx:* https://*.mercadolibre.com.pe:* https://*.mercadolibre.com.uy:* https://*.mercadopago.cl:* https://*.mercadopago.com.ar:* https://*.mercadopago.com.br:* https://*.mercadopago.com.co:* https://*.mercadopago.com.mx:* https://*.mercadopago.com.pe:* https://*.mercadopago.com.uy:* https://*.mercadopago.com.ve:* https://*.mercadopago.com:* https://*.adminml.com:* https://*.mercadolibre.co.cr:* https://*.mercadolibre.com.pa:* https://*.mercadolibre.com.do:* https://*.mercadolibre.com.bo:* https://*.mercadolibre.com.py:* https://*.mercadolibre.com.gt:* https://*.mercadolibre.com.hn:* https://*.mercadolibre.com.ni:* https://*.mercadolibre.com.sv:* https://*.mercadopago.com.ec:* https://*.portalinmobiliario.com:* https://*.mercadolivre.com:*; require-trusted-types-for 'script' 1
frame-src 'self' https://www.youtube-nocookie.com https://player.vimeo.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://www.google.com https://fundingchoicesmessages.google.com 1
object-src 'none';base-uri 'self';script-src 'nonce-2X5dLcYwZJ07LfVl1c_gBA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src  'none'; connect-src 'self' *.tabooheat.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.tabooheat.com join.gammasecure.com; script-src 'self' *.tabooheat.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.tabooheat.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.inspectlet.com https://connect.facebook.net https://consent.cookiebot.com https://consentcdn.cookiebot.com https://go.jetcraft.com https://googleads.g.doubleclick.net https://pi.pardot.com https://snap.licdn.com https://static.ads-twitter.com https://static.doubleclick.net https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.redditstatic.com https://www.youtube.com https://s.ytimg.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://go.jetcraft.com https://www.youtube.com; img-src 'self' data: blob: https://alb.reddit.com https://analytics.twitter.com https://i.ytimg.com https://px.ads.linkedin.com https://t.co https://www.facebook.com https://www.google.com https://www.linkedin.com https://www.youtube.com https://yt3.ggpht.com https://www.gstatic.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://ad.doubleclick.net https://analytics.google.com https://consentcdn.cookiebot.com https://googleads.g.doubleclick.net https://hn.inspectlet.com https://jnn-pa.googleapis.com https://pagead2.googlesyndication.com https://px.ads.linkedin.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://www.youtube.com; frame-src 'self' https://consentcdn.cookiebot.com https://go.jetcraft.com https://www.youtube.com https://www.google.com; media-src 'self' data: blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://go.jetcraft.com; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://*.browsealoud.com https://*.google-analytics.com https://siteimproveanalytics.com https://*.googletagmanager.com https://*.google.com https://*.googleadservices.com https://*.gstatic.com https://*.facebook.net https://*.twitter.com https://cdn.syndication.twimg.com https://waterschaplimburg.matomo.cloud https://cdn.weglot.com; script-src-elem 'self' 'unsafe-inline' https://*.browsealoud.com https://*.google-analytics.com https://siteimproveanalytics.com https://www.googletagmanager.com https://*.google.com https://*.googleapis.com https://*.googleadservices.com https://connect.facebook.net https://www.gstatic.com https://*.twitter.com https://cdn.syndication.twimg.com https://waterschaplimburg.matomo.cloud https://cdn.weglot.com; style-src 'self' 'unsafe-inline' https://*.myfonts.net https://*.bootstrapcdn.com https://cdn.weglot.com; style-src-elem 'self' 'unsafe-inline' https://*.browsealoud.com https://*.googleapis.com https://*.myfonts.net https://*.bootstrapcdn.com https://*.twitter.com https://*.twimg.com https://*.typekit.net https://cdn.weglot.com https://unpkg.com; img-src * data:; font-src * data:; connect-src 'self' https://*.google-analytics.com https://*.googleapis.com https://*.google.com https://*.browsealoud.com https://stats.g.doubleclick.net https://*.speechstream.net https://api.pdok.nl https://waterschaplimburg.matomo.cloud https://api.weglot.com https://cdn.weglot.com https://cdn-api-weglot.com; media-src * blob: data:; frame-src 'self' https://*.iprox.nl https://*.waterschaplimburg.nl https://www.youtube.com https://*.google.com https://waterschap-limburg.vergunningen.info https://*.maps.arcgis.com https://*.arcgis.com https://*.twitter.com https://*.vimeo.com https://www.waterstandlimburg.nl https://*.doubleclick.net https://*.googletagmanager.com https://global.frcapi.com; frame-ancestors 'self' https://*.iprox.nl https://*.waterschaplimburg.nl https://www.geleenbeekdal.nl https://www.waterleeftinbeek.nl https://www.wbl.nl https://www.zuidelijkmaasdal.nl https://wblnl.sharepoint.com 1
font-src *.googleapis.com *.gstatic.com *.monetate.net use.typekit.net p.typekit.net *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com magefan.com cm.magefan.com *.monetate.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maps.gstatic.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.shopperapproved.com direct.shopperapproved.com *.monetate.net *.en25.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maps.googleapis.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.monetate.net use.typekit.net p.typekit.net https://static.klaviyo.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maps.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; report-uri https://csp.radnoc.com/csp; report-to csp-endpoint; 1
default-src self; script-src self unsafe-inline unsafe-eval data: https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://app.termly.io https://cdn.onesignal.com https://www.googletagmanager.com https://static.cloudflareinsights.com; style-src self unsafe-inline https://fonts.googleapis.com https://*.sportradar.com https://cdn.jsdelivr.net; img-src self data: https:; font-src self data: https://fonts.gstatic.com; connect-src self https:; media-src self blob:; frame-src self blob: https://www.youtube.com https://www.youtube-nocookie.com; frame-ancestors self; base-uri self; form-action self 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com www.gstatic.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com www.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; img-src 'self' https://flagcdn.com https://cdn.wowtrk.com https://www.google.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self' 1
default-src https:; script-src https: 'unsafe-inline'; report-uri https://rko-router.rubykaigi.org/_csp 1
default-src 'self'; script-src 'nonce-w+jnVLo98I+UQq9UGhkXXw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self' https: data: blob:; connect-src 'self' https: wss:; font-src 'self' https: data:; frame-src 'self' https:; img-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com *.fontawesome.com https://fonts.bunny.net *.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors app.cux.io 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.youtube-nocookie.com pay.google.com play.google.com *.autopay.eu https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * *.cookiebot.com www.xtento.com www.youtube.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.salesmanago.pl *.salesmanago.es *.salesmanago.com platnosci.bm.pl platnosci-accept.bm.pl www.gstatic.com *.autopay.eu https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com pixel.wp.pl trustmate.io facebook.com *.cookiebot.com www.xtento.com cdn.xtento.com www.google.pl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.autopay.eu pay.google.com *.google-analytics.com *.googletagmanager.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com https://scripts.luigisbox.com https://cdn.luigisbox.com https://live.luigisbox.com https://api.luigisbox.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.dwin1.com dc.cux.io connect.facebook.net *.livechatinc.com *.luigisbox.com pixel.wp.pl *.comfino.pl trustmate.io *.cookiebot.com *.hotjar.com *.adform.net unpkg.com www.xtento.com cdn.xtento.com static.clickonometrics.pl 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.autopay.eu *.googleapis.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com https://scripts.luigisbox.com https://cdn.luigisbox.com https://live.luigisbox.com https://api.luigisbox.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com unpkg.com *.comfino.pl trustmate.io *.cloudflare.com *.typekit.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com vimeo.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.google-analytics.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com https://scripts.luigisbox.com https://cdn.luigisbox.com https://live.luigisbox.com https://api.luigisbox.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.analytics.google.com *.track.cux.io pixel.wp.pl *.comfino.pl *.cookiebot.com *.hotjar.com *.adform.net stats.g.doubleclick.net ws: 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://music.anjunabeats.com https://player.ochre.io https://static.cloudflareinsights.com; connect-src 'self' https://api.anjunabeats.com https://music.anjunabeats.com https://api.ochre.io https://cloudflareinsights.com https://player.ochre.io; frame-src 'self' https://player.ochre.io; object-src 'none'; img-src 'self' https: data: blob:; style-src 'self' https: 'unsafe-inline'; font-src 'self' https: data:; report-uri https://bw5uwrcd.uriports.com/reports/report; report-to default 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.acsbapp.com https://*.ads-twitter.com https://*.bing.com https://*.convertexperiments.com https://*.cookiebot.com https://*.facebook.net https://*.google.com https://*.google.co.uk https://*.google.com.au https://*.google.ca https://*.google.de https://*.google.fr https://*.google.com.ph https://*.google.co.in https://*.google.com.br https://*.google-analytics.com https://*.googletagmanager.com https://*.gstatic.com https://*.hotjar.com https://*.licdn.com https://*.openx.net https://*.simpli.fi https://*.zekelman.com https://acsbapp.com https://app-cf.bc0a.com https://cdn.amplitude.com https://cdn.amcharts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hsforms.net https://js.hs-scripts.com https://js.hscollectedforms.net https://tags.srv.stackadapt.com https://*.hubspotusercontent-na1.net https://static.hsappstatic.net; script-src-elem 'self' 'unsafe-inline' https://*.acsbapp.com https://*.ads-twitter.com https://*.bing.com https://*.convertexperiments.com https://*.cookiebot.com https://*.facebook.net https://*.google.com https://*.google.co.uk https://*.google.com.au https://*.google.ca https://*.google.de https://*.google.fr https://*.google.com.ph https://*.google.co.in https://*.google.com.br https://*.google-analytics.com https://*.googletagmanager.com https://*.gstatic.com https://*.hotjar.com https://*.licdn.com https://*.openx.net https://*.simpli.fi https://*.zekelman.com https://acsbapp.com https://app-cf.bc0a.com https://cdn.amplitude.com https://cdn.amcharts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hsforms.net https://js.hs-scripts.com https://js.hscollectedforms.net https://tags.srv.stackadapt.com https://*.hubspotusercontent-na1.net https://static.hsappstatic.net; style-src 'self' 'unsafe-inline' https://*.typography.com https://*.zekelman.com https://maxcdn.bootstrapcdn.com https://tags.srv.stackadapt.com; style-src-elem 'self' 'unsafe-inline' https://*.typography.com https://*.zekelman.com https://maxcdn.bootstrapcdn.com https://tags.srv.stackadapt.com; font-src 'self' 'unsafe-inline' data: https://*.gstatic.com https://cloud.typography.com https://www.zekelman.com https://maxcdn.bootstrapcdn.com; img-src 'self' data: https://*.1rx.io https://*.3lift.com https://*.accessnewswire.com https://*.adnxs.com https://*.adnxs.net https://*.ads-twitter.com https://*.adsrvr.org https://*.agkn.com https://*.amazon-adsystem.com https://*.bfmio.com https://*.bing.com https://*.bing.net https://*.casalemedia.com https://*.cootlogix.com https://*.crwdcntrl.net https://*.doubleclick.net https://*.exelator.com https://*.eyeota.com https://*.eyeota.net https://*.facebook.com https://*.facebook.net https://*.fwmrm.net https://*.google.ca https://*.google.co.in https://*.googleadservices.com https://*.googletagmanager.com https://*.gstatic.com https://*.infolinks.com https://*.intentiq.com https://*.lijit.com https://*.linkedin.com https://*.lkqd.net https://*.mgid.com https://*.openx.net https://*.pgammedia.com https://*.pippio.com https://*.pro-market.net https://*.pubmatic.com https://*.rlcdn.com https://*.rubiconproject.com https://*.simpli.fi https://*.smaato.net https://*.tapad.com https://*.temu.com https://*.tremorhub.com https://*.twitter.com https://*.yahoo.com https://*.zekelman.com https://forms.hsforms.com https://imgsct.cookiebot.com https://s.w.org https://pippio.com https://secure.gravatar.com https://forms-na1.hsforms.com https://*.hsforms.com https://t.co https://tags.srv.stackadapt.com https://test-zekelmancom.pantheonsite.io https://track.hubspot.com; connect-src 'self' https://*.1rx.io https://*.3lift.com https://*.acsbapp.com https://*.adnxs.com https://*.adnxs.net https://*.ads-twitter.com https://*.adsrvr.org https://*.agkn.com https://*.amazon-adsystem.com https://*.bfmio.com https://*.bing.com https://*.bing.net https://*.casalemedia.com https://*.cootlogix.com https://*.cookiebot.com https://*.crwdcntrl.net https://*.doubleclick.net https://*.exelator.com https://*.eyeota.com https://*.eyeota.net https://*.facebook.com https://*.facebook.net https://*.fwmrm.net https://*.google.ca https://*.google.com https://*.google.co.in https://*.google.co.uk https://*.google.com.au https://*.google.de https://*.google.fr https://*.google.com.ph https://*.google.co.in https://*.google.com.br https://*.google-analytics.com https://*.googletagmanager.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.infolinks.com https://*.intentiq.com https://*.lijit.com https://*.linkedin.com https://*.lkqd.net https://*.mgid.com https://*.openx.net https://*.pgammedia.com https://*.pippio.com https://*.pro-market.net https://*.pubmatic.com https://*.rlcdn.com https://*.rubiconproject.com https://*.simpli.fi https://*.smaato.net https://*.tapad.com https://*.temu.com https://*.tremorhub.com https://*.typography.com https://*.yahoo.com https://*.zekelman.com https://acsbapp.com https://api2.amplitude.com https://app-cdn.bc0a.com https://app-cf.bc0a.com https://forms.hscollectedforms.net https://pippio.com https://tags.srv.stackadapt.com; frame-src 'self' https://*.facebook.com https://*.google.com https://*.google.co.uk https://*.google.com.au https://*.google.ca https://*.google.de https://*.google.fr https://*.google.com.ph https://*.google.co.in https://*.google.com.br https://*.googletagmanager.com https://*.youtube.com https://*.youtube-nocookie.com https://consentcdn.cookiebot.com https://rive.app https://forms.hsforms.com https://*.hsforms.com; worker-src 'self' blob:; report-uri https://www.zekelman.com/csp-report/; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google-analytics.com; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self' data: www.google-analytics.com; connect-src 'self'; object-src 'none'; frame-src 'self'; media-src 'self'; form-action 'self'; frame-ancestors 'self'; report-uri https://www.bildkunst.de/api/security/action.reportcsp/; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: https://www.googletagmanager.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com use.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://*.qliro.com https://*.vipps.no https://*.trustly.com https://*.ideal.nl https://*.apple.com https://*.unzer.com https://*.heidelpay.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://*.qliro.com https://p11.techlab-cdn.com https://eu-test.oppwa.com/ *.weltpixel.com www.xtento.com partstream.arinet.com services.arinet.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io maps.googleapis.com maps.gstatic.com *.googleapis.com https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.xtento.com cdn.xtento.com partstream.arinet.com services.arinet.com cdn.datamanager.arinet.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com tagmanager.google.com https://www.googletagmanager.com https://maps.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://*.qliro.com https://p11.techlab-cdn.com https://eu-test.oppwa.com/ www.xtento.com cdn.xtento.com partstream.arinet.com partstream.arinet.com/* services.arinet.com use.fontawesome.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com assets.braintreegateway.com partstream.arinet.com use.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io www.gstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://p11.techlab-cdn.com https://eu-test.oppwa.com/ partstream.arinet.com services.arinet.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-ancestors https://sdccd.instructure.com/ https://sdmiramar.edu http://sdmiramar.edu https://dev.loc http://dev.loc; report-uri /report-csp-violation 1
default-src                                           'self'                                           'unsafe-inline'                                           https://www.google-analytics.com                                           https://www.googletagmanager.com                                           https://connect.facebook.net;            script-src             'self'             'unsafe-inline'             'unsafe-eval'              https://ajax.googleapis.com                https://platform.twitter.com                https://p01.mul-pay.jp                https://travel.fraudprevention.jp                https://static.mul-pay.jp                https://www.datadoghq-browser-agent.com                https://www.googletagmanager.com                https://connect.facebook.net;            style-src             'self'             'unsafe-inline'                https://ajax.googleapis.com                https://fonts.googleapis.com;                                       connect-src                                        'self'                                        https://analytics.google.com                https://travel.fraudprevention.jp;                                       img-src                                           'self'                                           data:                                           https://ajax.googleapis.com                https://syndication.twitter.com                https://www.googletagmanager.com;                                       font-src                                           'self'                                           data:                                           https://fonts.gstatic.com                                           https://fonts.googleapis.com;               frame-src                'self'                https://platform.twitter.com                https://travel.fraudprevention.jp                https://www.facebook.com;                                       report-to                                           csp-endpoint; 1
default-src 'self'; script-src 'self' 'nonce-9_ieRk2XQgPxQvv-eAOEEfXZnum7ZpT3IODnK2WzqOaCCuRkcqd8eg' data: https://*.openstreetmap.org 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://*.googleapis.com https://*.gstatic.com *.google.com *.googleusercontent.com *.openstreetmap.org https://*.openstreetmap.org https://*.google.com/; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com *.google.com; script-src-elem 'self' 'nonce-9_ieRk2XQgPxQvv-eAOEEfXZnum7ZpT3IODnK2WzqOaCCuRkcqd8eg' 'strict-dynamic' 'report-sample'; connect-src 'self' *.google.com https://*.googleapis.com https://*.gstatic.com https://nominatim.openstreetmap.org blob: data: https://*.openstreetmap.org https://www.piwik.bayern.de/; font-src 'self' https://fonts.gstatic.com data:; style-src-elem 'self' 'unsafe-inline' https://fonts.gstatic.com https://fonts.googleapis.com 'nonce-9_ieRk2XQgPxQvv-eAOEEfXZnum7ZpT3IODnK2WzqOaCCuRkcqd8eg' https://www.google.com/ 'report-sample'; worker-src 'self' 'nonce-9_ieRk2XQgPxQvv-eAOEEfXZnum7ZpT3IODnK2WzqOaCCuRkcqd8eg' blob: 'report-sample'; object-src 'none'; report-uri https://www.hdbg.de/@http-reporting?csp=report&requestTime=1789283012230522&requestHash=608434b9c902fd0bbfa9f0b3ddde9ea7fd49a10e 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' 'report-sample' https://www.googletagmanager.com https://www.google-analytics.com; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com blob: maps.googleapis.com maps.gstatic.com https://www.google.com https://www.google.de https://www.googletagmanager.com https://fonts.gstatic.com https://pagead2.googlesyndication.com https://www.google.co.in https://googleads.g.doubleclick.net; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://*.googletagmanager.com https://*.youtube-nocookie.com https://*.frcapi.com/ player.vimeo.com; media-src 'self' blob: data:; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' https://unpkg.com https://cdn.plyr.io https://*.noembed.com https://www.youtube.com https://player.vimeo.com https://maps.googleapis.com/maps/api/js https://www.googletagmanager.com https://googleads.g.doubleclick.net 'report-sample'; script-src-attr 'unsafe-inline' 'unsafe-hashes' 'report-sample'; style-src-elem 'self' 'unsafe-inline' 'unsafe-hashes' 'report-sample' https://fonts.googleapis.com https://unpkg.com https://www.googletagmanager.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' 'unsafe-eval' cdn.plyr.io noembed.com youtube.com youtube.de maps.googleapis.com https://eu-api.friendlycaptcha.eu https://api.friendlycaptcha.com https://www.google.com https://www.google.de https://www.google-analytics.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://region1.google-analytics.com/ https://region1.analytics.google.com/ https://stats.g.doubleclick.net/g/ https://ad.doubleclick.net/ccm/s/ *.www.googletagmanager.com; report-uri https://www.ifabrik.de/@http-reporting?csp=report&requestTime=1789283429611849&requestHash=d937caae7b19dd862062daed7dcd27dc1a29583a 1
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src bid.g.doubleclick.net player.vimeo.com *.youtube.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com https://www.google.com/recaptcha/ *.youtube-nocookie.com *.google.com *.doubleclick.net *.facebook.com https://www.paypal.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io *.multisafepay.com https://pay.google.com www.xtento.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net https://portal.payconiq.com https://static.buckaroo.nl https://www.paypalobjects.com *.multisafepay.com https://redchamps.com ts.tradetracker.net www.magmodules.eu www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io *.multisafepay.com https://pay.google.com *.gstatic.com tm.tradetracker.net www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.doubleclick.net *.facebook.com https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl maxcdn.bootstrapcdn.com *.multisafepay.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com vimeo.com *.google-analytics.com *.facebook.com *.facebook.net wss://websocketservice-externalapi.prod.buckaroo.io https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://applepay.buckaroo.io https://www.paypal.com *.multisafepay.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'    prod.degreedcdn.com  lxp.usprod.degreedcdn.com fast.chmln-cdn.com;  script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https:  prod.degreedcdn.com   lxp.usprod.degreedcdn.com   fast.trychameleon.com   cmp.osano.com   snap.licdn.com   bat.bing.com   googletagmanager.com   google-analytics.com   googleads.g.doubleclick.net   google.com   translate.google.com   tag.demandbase.com   js-na1.hs-scripts.com   js.hs-analytics.net   gstatic.com   d2c7xlmseob604.cloudfront.net  datadoghq-browser-agent.com   zn3dpyydxnqicchiy-degreed.siteintercept.qualtrics.com   explore.degreed.com     blog.degreed.com   assets.adobedtm.com;  style-src 'self' 'unsafe-inline' data:  prod.degreedcdn.com   lxp.usprod.degreedcdn.com   explore.degreed.com   blog.degreed.com   gstatic.com   cdn.jsdelivr.net;  img-src * data: blob: about: https:;  frame-src * blob: https:;  font-src * data:;  connect-src 'self'  wss: *.degreed.com *.livekit.cloud  https:  prod.degreedcdn.com   lxp.usprod.degreedcdn.com   api.company-target.com   stats.g.doubleclick.net   graphql.contentful.com   api.hubapi.com   forms.hubspot.com   analytics.degreed.com   fast.trychameleon.com   ld.degreed.com   rum.browser-intake-datadoghq.com   zn3dpyydxnqicchiy-degreed.siteintercept.qualtrics.com   explore.degreed.com;  base-uri 'self' about:   ld.degreed.com   zn3dpyydxnqicchiy-degreed.siteintercept.qualtrics.com;  manifest-src 'self';  media-src * data: blob:;  worker-src 'self' blob:;  object-src 'none';  report-uri https://csp.degreed.com/api/ReportCollector?type=mvc&env=production; 1
default-src 'self' www.google-analytics.com  cdnjs.cloudflare.com 'unsafe-inline' bam.nr-data.net; script-src 'self' bam.nr-data.net www.googletagmanager.com 'unsafe-inline' ajax.googleapis.com www.google-analytics.com cdn.jsdelivr.net js-agent.newrelic.com static.addtoany.com unpkg.com cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline'  www.google-analytics.com fonts.googleapis.com cdnjs.cloudflare.com cdn.jsdelivr.net unpkg.com use.fontawesome.com www.google-analytics.com img.youtube netdna.bootstrapcdn.com; img-src 'self' data: https: img.youtube.com google-analytics.com; frame-src 'self' static.addtoany.com www.youtube.com; font-src 'self' use.fontawesome.com cdnjs.cloudflare.com cdn.jsdelivr.net fonts.gstatic.com netdna.bootstrapcdn.com; report-uri /report-csp-violation 1
font-src *.fontawesome.com data: maxcdn.bootstrapcdn.com https://widgets.trustedshops.com https://integrations.etrusted.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.dotdigital-pages.com *.dotdigital.com *.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.trackedlink.net *.googleapis.com *.fbcdn.net *.google.com *.facebook.com *.cdninstagram.com *.instagram.com *.paypal.com *.idealo.com *.trustedshops.com https://www.mollie.com https://api.mapbox.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.amazonaws.com maps.gstatic.com https://widgets.trustedshops.com https://integrations.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.instagram.com *.google.com *.googleapis.com *.facebook.com *.facebook.net *.googletagmanager.com cdnjs.cloudflare.com paypalobjects.com *.gstatic.com *.trustedshops.com widget.freshworks.com m2epro.freshdesk.com *.avada.io js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.sendcloud.sc *.jsdelivr.net maps.googleapis.com https://widgets.trustedshops.com https://integrations.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.google.com *.gstatic.com *.fontawesome.com widget.freshworks.com m2epro.freshdesk.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com *.sendcloud.sc *.jsdelivr.net https://widgets.trustedshops.com https://integrations.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.paypal.com *.google.com *.google-analytics.com *.gstatic.com *.solutenetwork.com widget.freshworks.com m2epro.freshdesk.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com google.com autocomplete2.postdirekt.de *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://cdn.cookie-script.com https://*.cookie-script.com https://snap.licdn.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://*.cookie-script.com https://px.ads.linkedin.com; frame-src 'self' https://www.googletagmanager.com https://td.doubleclick.net; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none' 1
font-src www.paypalobjects.com https://fonts.gstatic.com *.gstatic.com data: https://www.googletagmanager.com *.googleapis.com *.fontawesome.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com www.apptrian.com facebook.com connect.facebook.net graph.facebook.com services.paytrail.com paytrail.com *.paytrail.com epmt.nordea.fi *.nordea.com verkkopankki.danskebank.fi online.s-pankki.fi verkkomaksu.poppankki.fi verkkomaksu.omasp.fi auth.aktia.fi verkkomaksu.handelsbanken.fi verkkomaksu.saastopankki.fi online.alandsbanken.fi maksu.pivo.fi qa-maksu.pivo.fi v1-hub-staging.sph-test-solinor.com v1.api.paymenthighway.io *.paymenthighway.io *.mobilepay.fi 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://www.googletagmanager.com https://js.stripe.com js.stripe.com https://www.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://api.esto.ee https://api.esto.lv https://api.estopay.lt https://www.hcpro.ee https://www.google.fi https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://bid.g.doubleclick.net https://krediidiraportid.ee https://cdn.kevin.eu https://public.montonio.com https://firebasestorage.googleapis.com public.montonio.com self: https://gw.neuwon.fi https://gw.neuwon.devi http://gw.neuwon.devi cdn2.hubspot.net resources.paytrail.com cdn.modena.ee cms.modena.ee data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://analytics.tiktok.com https://tiktok.com js.stripe.com  https://www.epbdf8trk.com *.fontawesome.com *.google.com *.avada.io *.shopify.com public.montonio.com https://gw.neuwon.fi https://gw.neuwon.devi http://gw.neuwon.devi services.paytrail.com resources.paytrail.com https://www.google.com https://www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com *.google.com *.gstatic.com https://fonts.bunny.net https://gw.neuwon.fi https://gw.neuwon.devi http://gw.neuwon.devi self: 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://doubleclick.net https://www.doubleclick.net https://google.com https://www.google.com http://dpm.demdex.net https://www.gstatic.com https://get.geojs.io *.avada.io api.sandbox-card-payments.montonio.com api.card-payments.montonio.com https://gw.neuwon.fi https://gw.neuwon.devi http://gw.neuwon.devi *.paytrail.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-om2Ny1tyRax26Ukfg2KBPg' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
default-src 'none'; script-src 'self'; script-src-elem 'self' https://assets.adobedtm.com https://cdn.segment.com https://cdn.pendo.io https://*.qualtrics.com; script-src-attr 'none'; object-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://data.pendo.io https://lon-prod-asset-store.s3.eu-west-2.amazonaws.com data:; media-src https://lon-prod-asset-store.s3.eu-west-2.amazonaws.com; frame-src 'self' data:; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://faro-collector-prod-eu-west-0.grafana.net https://dpm.demdex.net https://cdn.pendo.io https://data.pendo.io https://*.qualtrics.com https://cdn.segment.com https://api.segment.io https://*.segmentapis.com https://*.microblink.com https://lon-prod-sar-export.s3.eu-west-2.amazonaws.com https://lon-prod-asset-store.s3.eu-west-2.amazonaws.com https://lon-prod-batch-automation.s3.eu-west-2.amazonaws.com https://lon-prod-batch-automation-store.s3.eu-west-2.amazonaws.com https://lon-prod-cifas.s3.eu-west-2.amazonaws.com https://lon-prod-fintrac.s3.eu-west-2.amazonaws.com https://lon-prod-fintrac-submissions.s3.eu-west-2.amazonaws.com; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /api/csp-reports; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net https://www.googletagmanager.com *.googleapis.com *.gstatic.com cdnjs.cloudflare.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com fonts.googleapis.com https://cdnjs.cloudflare.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.google.com www.gstatic.com s7.addthis.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com www.gstatic.com www.youtube.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.pinterest.com *.pinterdev.com commerce-app.pintergration.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.gstatic.com https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com flagpedia.net *.openstreetmap.org maps.googleapis.com maps.gstatic.com https://maps.googleapis.com https://maps.gstatic.com https://www.google.fr https://api.mapbox.com *.tile.openstreetmap.org www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net tagmanager.google.com https://www.googletagmanager.com dpm.demdex.net s7.addthis.com m.addthis.com z.moatads.com widget.freshworks.com m2epro.freshdesk.com *.avada.io *.shopify.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.gstatic.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com https://cdnjs.cloudflare.com https://maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com widget.freshworks.com m2epro.freshdesk.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com https://fonts.googleapis.com https://cdnjs.cloudflare.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com www.google-analytics.com stats.g.doubleclick.net s7.addthis.com m.addthis.com cdnjs.cloudflare.com *.pinimg.com widget.freshworks.com m2epro.freshdesk.com https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.gstatic.com maps.googleapis.com https://maps.googleapis.com https://nominatim.openstreetmap.org api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; report-to {"group":"default","max_age":31536000,"endpoints":[{"url":"https://magellan.report-uri.com/a/d/g"}],"include_subdomains":true} 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.googleapis.com https://www.google.com https://www.gstatic.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https:; frame-src https://www.google.com https://mpi.3dsecure.az; frame-ancestors 'none'; base-uri 'self'; form-action 'self' https://mpi.3dsecure.az; object-src 'none' 1
object-src  'none'; connect-src 'self' *.sxx.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.sxx.com join.gammasecure.com; script-src 'self' *.sxx.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.sxx.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-OTErRP8T2va6NdA3cq32YQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce--L9o60YzdNKpPTG3SQeSBg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; upgrade-insecure-requests; style-src 'self' 'unsafe-inline'; font-src 'self' data: https://yastatic.net; img-src 'self' data: https:; script-src 'self' 'unsafe-eval' 'nonce-ycEJKRKnrfkv1xaaIyzy6g==' https://mc.yandex.ru https://yastatic.net https://yandex.ru https://an.yandex.ru https://cdn.onesignal.com https://*.googlesyndication.com https://*.doubleclick.net https://www.googletagservices.com https://adservice.google.com; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://mc.webvisor.org https://mc.webvisor.com https://yandex.ru https://an.yandex.ru https://*.onesignal.com wss://*.onesignal.com https://*.doubleclick.net https://*.googlesyndication.com; frame-src https://an.yandex.ru https://yandex.ru https://mc.yandex.ru https://www.youtube-nocookie.com https://www.youtube.com https://*.doubleclick.net https://*.googlesyndication.com; report-uri /csp-report 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com cash-f.squarecdn.com https://*.gstatic.com https://font.static.useinsider.com *.kueskipay.com data: http://img-longchamp.grupoultra.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.adyen.com *.kueskipay.com data: https://www.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * *.adyen.com *.weltpixel.com *.kueskipay.com data: https://players.brightcove.net https://bid.g.doubleclick.net https://insight.adsrvr.org https://static.rolex.com https://td.doubleclick.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com www.youtube.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * https://*.gstatic.com *.adyen.com www.google.com.ua *.kueskipay.com *.google.com https://img.kreiconceptstore.com https://www.facebook.com https://www.paypal.com https://www.sandbox.paypal.com https://www.google.com https://www.google.com.mx https://googleads.g.doubleclick.net https://img-longchamp.grupoultra.com https://bat.bing.com https://www.kreiconceptstore.com https://insight.adsrvr.org https://www.tiktok.com https://ultrafemme.com https://us4-files.zohopublic.com https://smetrics.rolex.com https://maps.googleapis.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net maps.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page *.api.useinsider.com *.kueskipay.com *.googletagmanager.com *.mxpnl.com data: https://a.klaviyo.com https://www.facebook.com https://www.paypal.com https://www.sandbox.paypal.com https://static-tracking.klaviyo.com https://script.crazyegg.com https://googleads.g.doubleclick.net https://js-agent.newrelic.com https://bam.nr-data.net https://bat.bing.com http://bat.bing.com https://j01l4h3n.com https://secure.adnxs.com https://5mcl.fr http://5mcl.fr http://secure.adnxs.com https://js-cdn.dynatrace.com https://js.adsrvr.org https://www.clarity.ms https://assets.adobedtm.com https://static.cloudflareinsights.com *.cloudfront.net https://www.googleoptimize.com https://maps.googleapis.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com www.youtube.com ajax.googleapis.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app https://fonts.googleapis.com/ https://assets.api.useinsider.com *.kueskipay.com *.googletagmanager.com *.mxpnl.com data: https://static.klaviyo.com https://static-tracking.klaviyo.com *.typekit.net *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.tagmanager.google.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com data: https://img.kreiconceptstore.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.adyen.com *.kueskipay.com *.doubleclick.net data: https://a.klaviyo.com https://static.klaviyo.com https://www.paypalobjects.com https://www.google-analytics.com  https://www.sandbox.paypal.com  https://www.facebook.com https://stats.g.doubleclick.net https://script.crazyegg.com https://pagestates-tracking.crazyegg.com https://assets-tracking.crazyegg.com https://tracking.crazyegg.com https://bam.nr-data.net https://analytics.google.com https://static-forms.klaviyo.com https://j.clarity.ms https://bf52126kbt.bf.dynatrace.com https://salesiq.zohopublic.com wss://vts.zohopublic.com https://z.clarity.ms https://maps.googleapis.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com cdn.plyr.io noembed.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net https://*.gstatic.com https://*.hsforms.net https://*.hs-scripts.com https://*.hs-banner.com https://*.hsforms.com https://*.hubspot.com https://*.hubapi.com https://*.hsadspixel.net https://*.hs-analytics.net https://consent.cookiebot.com https://*.cookiebot.com https://*.cookiebot.eu https://*.linkedin.com https://*.licdn.com https://*.facebook.net https://connect.facebook.net https://bat.bing.com https://va.vercel-scripts.com https://vitals.vercel-insights.com https://ddwl4m2hdecbv.cloudfront.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.hsforms.net https://*.hubspot.com; font-src 'self' data: https://fonts.gstatic.com https://*.hsforms.net https://*.hubspot.com; img-src 'self' data: blob: https:; media-src 'self' https: blob:; connect-src 'self' https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.google.com https://*.doubleclick.net https://*.hsforms.com https://*.hubspot.com https://*.hubapi.com https://*.hsforms.net https://*.hs-analytics.net https://*.hs-banner.com https://api.hsforms.com https://forms.hubspot.com https://*.cookiebot.com https://*.cookiebot.eu https://*.linkedin.com https://px.ads.linkedin.com https://*.facebook.com https://*.facebook.net https://bat.bing.com https://*.vercel-insights.com https://vitals.vercel-insights.com; frame-src 'self' https://*.googletagmanager.com https://*.youtube.com https://*.youtube-nocookie.com https://*.vimeo.com https://player.vimeo.com https://*.hsforms.net https://*.hubspot.com https://*.navattic.com https://*.cookiebot.com https://vercel.live; frame-ancestors 'self'; form-action 'self' https://*.hsforms.com https://forms.hubspot.com; base-uri 'self'; object-src 'none'; upgrade-insecure-requests; report-uri /api/csp-report 1
default-src 'self'; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com maxcdn.bootstrapcdn.com consenttool.haendlerbund.de data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com secure.novalnet.de seamless.novalnet.de c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * consenttool.haendlerbund.de haendlerbund.de www.haendlerbund.de www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com logo.haendlerbund.de haendlerbund.de www.haendlerbund.de consenttool.haendlerbund.de images.provenexpert.com www.provenexpert.com www.google.de *.google.de www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com cdn.novalnet.de js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com consenttool.haendlerbund.de haendlerbund.de www.haendlerbund.de www.xtento.com cdn.xtento.com https://consenttool.haendlerbund.de 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com assets.braintreegateway.com consenttool.haendlerbund.de 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com payport.novalnet.de secure.novalnet.de api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com consenttool.haendlerbund.de haendlerbund.de www.haendlerbund.de region1.google-analytics.com https://stats.g.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src consenttool.haendlerbund.de haendlerbund.de www.haendlerbund.de 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.hcaptcha.com https://www.googletagmanager.com https://maps.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com; script-src-elem 'self' 'unsafe-inline' https://www.google-analytics.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://js.hcaptcha.com https://www.googletagmanager.com https://maps.googleapis.com https://s.go-mpulse.net *.siteintercept.qualtrics.com https://pi.pardot.com https://connect.facebook.net https://bat.bing.com https://snap.licdn.com https://siteintercept.qualtrics.com https://go.frieslandcampina-foodservice.com https://googleads.g.doubleclick.net https://static.xingcdn.com https://view.publitas.com https://zn40n3kie90teedbt-frieslandcampina.siteintercept.qualtrics.com https://www.youtube.com https://analytics.tiktok.com https://www.googleadservices.com https://dev.visualwebsiteoptimizer.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; worker-src 'self' blob:; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-Hb4W-05mzYNrjSKQubPspQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; img-src 'self' data: https:; media-src 'self' https:; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net; script-src 'nonce-pen9R9xeor2VwtgKPY6i4w==' 'strict-dynamic' https://js.stripe.com https://js.klarna.com https://*.klarnacdn.net https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://googleads.g.doubleclick.net https://www.google.com https://apis.google.com https://cdn.pji.nu https://api.pj.nu https://connect.facebook.net https://pagead2.googlesyndication.com https://invitejs.trustpilot.com https://widget.trustpilot.com https://*.trustpilot.com 'self' https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com; connect-src 'self' https://ol-y.com https://www.ol-y.com https://api.tigoo.com https://api.ol-y.com https://api.velicoo.com https://data.tigoo.com https://data.nutri.se https://api.stripe.com https://js.klarna.com https://*.klarna.com https://*.klarnacdn.net https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://analytics.google.com https://*.analytics.google.com https://www.google.com https://www.google.se https://www.google.gr https://www.google.de https://www.google.fr https://www.google.fi https://www.google.dk https://www.google.no https://www.google.co.uk https://www.google.it https://www.google.es https://www.google.nl https://www.google.pl https://pagead2.googlesyndication.com https://www.googleadservices.com https://*.doubleclick.net https://*.facebook.com https://cdn.pji.nu https://api.pj.nu https://*.sentry.io https://*.ingest.sentry.io https://api.cloudinary.com https://*.trustpilot.com https://invitejs.trustpilot.com https://widget.trustpilot.com https://bat.bing.net https://*.bat.bing.net https://bat.bing.com https://*.bat.bing.com https://*.clarity.ms https://ranqa.me https://accounts.google.com; worker-src 'self' blob:; frame-src https://js.stripe.com https://hooks.stripe.com https://js.klarna.com https://*.klarna.com https://*.klarnacdn.net https://*.doubleclick.net https://widget.trustpilot.com https://*.trustpilot.com https://*.google.com https://ranqa.me; frame-ancestors 'none'; base-uri 'self'; form-action 'self' https://checkout.stripe.com https://*.klarna.com; object-src 'none' 1
font-src *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://www.facebook.com/ https://roomle.configurator.vendeco.com/ *.doubleclick.net/ *.googlesyndication.com/ secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com https://www.googletagmanager.com/ *.google.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.paypalobjects.com t.paypal.com www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https://www.magezon.com *.vendeco.com/ https://test.api.configurator.vendeco.com/ https://api.configurator.vendeco.com/ https://www.google.at/ https://www.google.de/ https://www.google.ch/ *.bing.com/ https://www.facebook.com/ *.googlesyndication.com/ *.doubleclick.net/ *.metallimgarten.test:8000 cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.googletagmanager.com magefan.com cm.magefan.com *.hsforms.net *.hsforms.com 'self' data: maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.google-analytics.com/ connect.facebook.net/ cdn.connectif.cloud/ rum.browser-intake-datadoghq.eu/ https://www.datadoghq-browser-agent.com/ https://googleads.g.doubleclick.net/ *.googlesyndication.com/ https://gmtech.mfgroup.ch *.bing.com *.clarity.ms *.youtube.com *.googleadservices.com/ jquery.sellxed.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.google.com *.hsforms.net *.hsforms.com *.gstatic.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com d.ratepay.com d.payla.io dr.payla.io *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de eu5-api.connectif.cloud/ https://rum.browser-intake-datadoghq.eu/ https://213723cx.customerdns.at/ https://api.configurator.vendeco.com/ https://test.api.configurator.vendeco.com/ https://session-replay.browser-intake-datadoghq.eu/ *.google.com *.clarity.ms *.googlesyndication.com/ payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cdninstagram.com *.fbcdn.net maps.googleapis.com *.amazonaws.com *.googleapis.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.avada.io *.shopify.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cloudflare.com ajax.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.instagram.com maps.googleapis.com *.googleapis.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com tagmanager.google.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://get.geojs.io *.avada.io *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://www.google-analytics.com *.instagram.com *.googleusercontent.com *.googleapis.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https:;script-src https: 'self' 'strict-dynamic' 'nonce-b9be44a5cf9b32ec8c2344cd0410ff9de0d8fbe841088e7a490e016ecc1fbc55' 'unsafe-inline' 'unsafe-eval' 'report-sample';style-src https: 'unsafe-inline';img-src https: data:;connect-src https: wss:;font-src https: data:;object-src 'none';media-src https: blob: data:;frame-src https: data: blob:;child-src 'self' https:;form-action 'self';frame-ancestors https://my.firespring.com;base-uri 'self' https://insights.sitesearch360.com;worker-src 'self' blob:;manifest-src 'self' https://cdn.firespring.com;report-uri /csp_log 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.firstdata.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.firstdata.com *.ipg-online.com *.nosto.com *.nos.to 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.firstdata.com https://pay.google.com *.ipg-online.com *.nosto.com *.nos.to *.trustpilot.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.firstdata.com *.ipg-online.com www.feedoptimise.com cdn.feedoptimise.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.nosto.com *.nos.to *.googleapis.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.firstdata.com self unsafe-inline https://pay.google.com *.ipg-online.com jquery.sellxed.com www.feedoptimise.com cdn.feedoptimise.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.nosto.com *.nos.to *.trustpilot.com *.googleapis.com https://www.mccauley.ie 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.firstdata.com *.ipg-online.com https://static.klaviyo.com *.fontawesome.com maxcdn.bootstrapcdn.com *.nosto.com *.nos.to *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.magento-datasolutions.com *.magento-ds.com *.facebook.com *.facebook.net *.google.com *.firstdata.com *.ipg-online.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.nosto.com *.nos.to *.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com fonts.googleapis.com *.googleapis.com data: *.fontawesome.com script.hotjar.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.awin1.com *.zenaps.com *.fls.doubleclick.net https://lantern.roeye.com *.sportcerebral.com *.megastar.fr *.denksport.com *.tankesport.se *.tankesport.dk consentcdn.cookiebot.com consentcdn.cookiebot.eu sportcerebral1.solution.weborama.fr td.doubleclick.net 3702a098-32b9-4861-a031-0c4bc8b7e7f0-webclient.conversed.biz widget.trustpilot.com notifications.wisepops.com wisepops.net *.weltpixel.com www.xtento.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.awin1.com *.zenaps.com *.wepowerconnections.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com magefan.com cm.magefan.com *.disqus.com *.sportcerebral.com *.megastar.fr *.denksport.com *.tankesport.se *.tankesport.dk consentcdn.cookiebot.com imgsct.cookiebot.com consentcdn.cookiebot.eu imgsct.cookiebot.eu *.google.nl bat.bing.com secure.adnxs.com img.sct.eu1.usercentrics.eu cdn.wisepops.com tracking.wisepops.com dx4nr741tfc02.cloudfront.net wisp-production-storage.s3.amazonaws.com cdn.wisepops.net assets.wisepops.net https://firebasestorage.googleapis.com https://maps.gstatic.com www.xtento.com cdn.xtento.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.disqus.com consentcdn.cookiebot.com consent.cookiebot.com consentcdn.cookiebot.eu consent.cookiebot.eu static.axept.io static.cloudflareinsights.com js-agent.newrelic.com view.publitas.com bat.bing.com cstatic.weborama.fr cdn-4.convertexperiments.com embed.typeform.com 3702a098-32b9-4861-a031-0c4bc8b7e7f0-webclient.conversed.biz config.gorgias.chat scripts.makeinfluence.com widget.trustpilot.com cdn.wisepops.com loader.wisepops.com notifications.wisepops.com app.getwisp.co wisepops.net cdn.wisepops.net static.hotjar.com script.hotjar.com www.clarity.ms scripts.clarity.ms sleeknotecustomerscripts.sleeknote.com src.mastercard.com platform.getqonfi.com *.keesing.com https://cdn.jsdelivr.net *.avada.io *.shopify.com www.xtento.com cdn.xtento.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app downloads.mailchimp.com *.fontawesome.com *.sportcerebral.com *.megastar.fr *.denksport.com *.tankesport.se *.tankesport.dk fonts.gstatic.com embed.typeform.com *.keesing.com https://cdn.jsdelivr.net https://fonts.bunny.net *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.wepowerconnections.com https://the.sciencebehindecommerce.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.sportcerebral.com *.megastar.fr *.denksport.com *.tankesport.se *.tankesport.dk pagead2.googlesyndication.com *.clarity.ms api.typeform.com activity.wisepops.com popup.wisepops.com tracking.wisepops.com app.getwisp.co wisepops.net consentcdn.cookiebot.com consentcdn.cookiebot.eu client.axept.io api.axept.io *.hotjar.io o24547.ingest.sentry.io sentry.io app.getsentry.com bat.bing.com bat.bing.net www.google.com wss://ws.hotjar.com *.keesing.com https://get.geojs.io *.avada.io *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src *.sportcerebral.com *.megastar.fr *.denksport.com *.tankesport.se *.tankesport.dk ws.hotjar.com metrics.hotjar.io *.keesing.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: https://www.googletagmanager.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://plausible.io *.disqus.com https://cdn-ukwest.onetrust.com *.mgt.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://plausible.io https://cdn-ukwest.onetrust.com https://get.geojs.io *.mgt.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.cashflows.com https://*.dnapayments.com https://static.klaviyo.com https://static-tracking.klaviyo.com https://connect.facebook.net https://analytics.tiktok.com https://applepay.cdn-apple.com https://analytics.comps.gg https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://imagedelivery.net https://images.unsplash.com https://www.facebook.com https://*.klaviyo.com https://analytics.comps.gg; font-src 'self' data: https://fonts.gstatic.com https://static.klaviyo.com https://static-tracking.klaviyo.com https://applepay.cdn-apple.com; connect-src 'self' https://api.catchlifecompetitions.co.uk https://s2447567.eu-fsn-3.betterstackdata.com wss://jobs.comps.gg https://*.cashflows.com https://*.dnapayments.com https://*.klaviyo.com https://*.betterstackdata.com https://*.betterstack.com https://www.facebook.com https://analytics.tiktok.com https://analytics.comps.gg https://cloudflareinsights.com https://apple-pay-gateway.apple.com; frame-src 'self' https:; media-src 'self' data: blob:; worker-src 'self' blob:; manifest-src 'self'; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; form-action 'self' https://*.cashflows.com https://*.dnapayments.com 1
font-src *.googleapis.com *.gstatic.com data: https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com *.authorize.net *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.google.com *.certcapture.com https://plumrocket.com *.authorize.net *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com *.googleapis.com *.certcapture.com store.paradoxlabs.com https://firebasestorage.googleapis.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.certcapture.com *.avada.io *.authorize.net *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.certcapture.com https://fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com *.certcapture.com https://get.geojs.io *.avada.io *.authorize.net *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=9PzdLiERAGGAwR1YEJ1uI8jDd4w7mrcDlMO.EC9Beko-1789283147.9416106-1.0.1.1-5nL1voblCKYKfKFgRGIc4lLBq7O0RvIE9613DDjTIIk_eROU4DK4XXM07CRu7SjuPO0vZuy1Wp5lEAQfJz_SJBVgLHox.mvKX94b1z8hScBcTudVe2bvPes9KxiFNERpD.K8KF1jYYGeJ.KDtCZ1RA8TUe8ZqU7RBsrPMUAfXWpVofSk4Qzcgwh2XvRiczfU; report-to cf-csp-endpoint 1
font-src *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.adyen.com pay.google.com payments-eu.amazon.com *.amazon.de *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.adyen.com pay.google.com *.paypal.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * https://plumrocket.com landofcoder.com *.weltpixel.com www.googletagmanager.com td.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.adyen.com pay.google.com *.payments-amazon.com *.media-amazon.com *.paypalobjects.com https://images.unsplash.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com flagpedia.net https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com *.facebook.com *.analytics.google.com ad.doubleclick.net google.com *.googleadservices.com google.de *.google.de google.be *.google.be google.nl *.google.nl api.taggrs.io sst.steunkousen.nl sst.stutzstrumpfe.de sst.blessurewijzer.nl sst.compressiekousen.be  *.google.ca  *.google.nl  *.google.hr  *.bing.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com https://maps.googleapis.com https://player.vimeo.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.avada.io *.shopify.com *.gstatic.com maps.googleapis.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com landofcoder.com https://www.googletagmanager.com tagmanager.google.com www.google.com *.facebook.net unpkg.com channel.me *.bing.com *.cookiehub.eu 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com unsafe-inline assets.braintreegateway.com tagmanager.google.com cookiehub.net 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adyen.com *.google.com google.com payments-eu.amazon.com *.paypal.com https://maps.googleapis.com https://player.vimeo.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com landofcoder.com *.google-analytics.com *.analytics.google.com ad.doubleclick.net googleads.g.doubleclick.net *.facebook.net https://www.google-analytics.com *.bing.com sst.steunkousen.nl sst.stutzstrumpfe.de sst.blessurewijzer.nl sst.compressiekousen.be 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.bing.com *.simpli.fi googleads.g.doubleclick.net www.googletagmanager.com cdnjs.cloudflare.com cdn.jsdelivr.net *.fontawesome.com kit.fontawesome.com use.fontawesome.com *.blackfire.io *.rlets.com player.vimeo.com s3-us-west-1.amazonaws.com connect.facebook.net bat.bing.com tag.simpli.fi i.simpli.fi cdn.rlets.com sky.blackbaudcdn.net *.blackbaud.com *.blackbaud.net ; object-src 'self' ; style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com cdn.jsdelivr.net cdn.honey.io *.fontawesome.com; img-src 'self' data: *.simpli.fi *.google.com bat.bing.com pubads.g.doubleclick.net *.googletagmanager.com api.mapbox.com *.googleadservices.com www.google.ie cm.g.doubleclick.net *.rlets.com rtb-csync.smartadserver.com us-u.openx.net bat.bing.com *.fontawesome.com sync.targeting.unrulymedia.com ps.eyeota.net pixel.tapad.com simplifi.partners.tremorhub.com pixel.rubiconproject.com idsync.rlcdn.com bcp.crwdcntrl.net ib.adnxs.com *.googleadservices.com ce.lijit.com fei.pro-market.net sync.intentiq.com s.ad.smaato.net aa.agkn.com eb2.3lift.com sync.bfmio.com loadm.exelator.com ads.stickyadstv.com image2.pubmatic.com sync.1rx.io ups.analytics.yahoo.com loadm.exelator.com idsync.rlcdn.com fei.pro-market.net https: um.simpli.fi; media-src 'self' ; frame-src 'self' *.rlets.com player.vimeo.com *.googletagmanager.com td.doubleclick.net vimeo.com www.youtube.com useast-www.securly.com gateway.zscalerthree.net gateway.zscalertwo.net gateway.zscloud.net https://docs.google.com *.blackbaud.com *.blackbaud.net secure3.convio.net *.convio.net; frame-ancestors 'self' ; child-src 'self' ; font-src 'self' data: ms-browser-extension *.fontawesome.com https://fonts.gstatic.com; connect-src 'self' *.fontawesome.com *.blackfire.io *.google-analytics.com *.google.com *.google.co.uk *.google.com.ph *.google.com.pk *.localiq.com bat.bing.com *.rlets.com capture-api.reachlocalservices.com *.googletagmanager.com stats.g.doubleclick.net googleads.g.doubleclick.net *.googleadservices.com google.com api.clockwisemd.com www.google.de www.google.com.sg www.google.co.in 127.0.0.1 wss://127.0.0.1 *.blackbaud.com *.blackbaud.net sky.blackbaudcdn.net secure3.convio.net *.convio.net; report-uri /report-csp-violation 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com maxcdn.bootstrapcdn.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com www.google.com *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com *.sendcloud.sc *.jsdelivr.net *.shopreviews.com https://form.jotform.com https://mss.radiatorkopen.nl https://mss.radiatorkopen.be https://cdn.cookiepal.io www.facebook.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com *.disqus.com www.facebook.com https://*.google.com https://*.google.nl https://*.googleadservices.com https://*.googlesyndication.com https://*.doubleclick.net https://*.g.doubleclick.net https://*.fls.doubleclick.net https://*.adservice.google.com https://*.facebook.net https://*.tiktok.com https://*.bing.com https://bat.bing.com https://bat.bing.net https://bzrcdn.openai.com https://*.openai.com https://www.mollie.com *.amazonaws.com https://phosphor.utils.elfsightcdn.com https://www.google.nl https://mss.radiatorkopen.nl https://mss.radiatorkopen.be https://cdn.cookiepal.io https://widget-v3.smartsuppcdn.com https://www.google.ie https://www.google.com.ua blob: https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ www.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.disqus.com connect.facebook.net https://*.facebook.net https://*.tiktok.com https://bat.bing.com https://bzrcdn.openai.com https://*.openai.com js.mollie.com pay.google.com applepay.cdn-apple.com *.sendcloud.sc *.jsdelivr.net maps.googleapis.com cdn.ampproject.org https://static.elfsight.com https://universe-static.elfsightcdn.com https://www.smartsuppchat.com https://widget-v3.smartsuppcdn.com https://mss.radiatorkopen.nl https://mss.radiatorkopen.be https://cdn.cookiepal.io www.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.sendcloud.sc *.jsdelivr.net https://widget-v3.smartsuppcdn.com https://cdn.cookiepal.io www.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://stream.getmetrion.com https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.googleadservices.com https://*.googletagmanager.com https://*.googletagservices.com https://*.googlesyndication.com https://*.doubleclick.net https://*.google.nl https://*.googlevideo.com https://*.googleusercontent.com https://*.googledomains.com https://*.g.doubleclick.net https://*.fls.doubleclick.net https://*.adservice.google.com https://*.facebook.net https://*.tiktok.com https://*.bing.com https://bat.bing.com https://*.bingads.microsoft.com https://bat.bing.net https://bzrcdn.openai.com https://*.openai.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.shopreviews.com places.googleapis.com cdn.ampproject.org https://core.service.elfsight.com https://static.elfsight.com https://service-reviews-ultimate.elfsight.com https://bootstrap.smartsuppchat.com https://widget-v3.smartsuppcdn.com https://translations.smartsuppcdn.com wss://websocket-visitors.smartsupp.com https://mss.radiatorkopen.nl https://mss.radiatorkopen.be https://cdn.cookiepal.io https://universe-static.elfsightcdn.com www.googleapis.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src https://cdn.cookiepal.io https://static.elfsight.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src https://* 'self' epichttp:;script-src 'nonce-206d6a984ddb4db8bc30b8d2ea209ca0' https://www.mybmgchart.com 'self';img-src https://* 'self' blob: data:;style-src https://www.mybmgchart.com 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
media-src *; worker-src 'none'; font-src 'self' data:; frame-ancestors 'none'; default-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample' 'nonce-dlmnz5r278rVh22Y7yrC8Q=='; style-src 'unsafe-inline' *; img-src blob: data: *; object-src 'none'; base-uri 'none'; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io 1
default-src 'self' ;  base-uri 'self' ;  style-src 'self' 'unsafe-inline' https://www.gstatic.com https://*.googleapis.com https://maxcdn.bootstrapcdn.com ;  font-src 'self' data: https://*.googleapis.com https://*.gstatic.com https://maxcdn.bootstrapcdn.com  ;  img-src 'self' data: https://www.imvrs.com https://data.pendo.io https://fonts.gstatic.com https://translate.google.com https://verify.authorize.net ;  frame-ancestors 'self' ;  frame-src 'self' https://www.googletagmanager.com https://static.novacredit.com https://app.verifast.com https://sandbox.verifast.com https://www.youtube.com https://data.pendo.cio https://*.storage.googleapis.com  ;  script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.rhris.com https://www.rhrtest.com https://www.googletagmanager.com https://seal.godaddy.com https://ajax.googleapis.com https://cdn.pendo.io https://static.novacredit.com https://verify.authorize.net https://*.storage.googleapis.com  ;  connect-src 'self' https://data.pendo.io https://*.storage.googleapis.com https://*.googleapis.com https://www.google-analytics.com ; 1
font-src *.fontawesome.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.authorize.net assets.secure.checkout.visa.com sandbox.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com *.hsforms.net *.hsforms.com 'self' data: *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ maps.googleapis.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com *.cloudflare.com https://www.googletagmanager.com tagmanager.google.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com *.fontawesome.com *.googleapis.com *.gstatic.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com pay.google.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://itch-production.web.app https://teamdev.download https://analytics.google.com https://www.google-analytics.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google.com https://region1.google-analytics.com https://ajax.googleapis.com https://www.googletagservices.com https://doubleclick.net https://googleadservices.com https://pagead2.googlesyndication.com https://connect.facebook.net https://www.facebook.com https://static.ads-twitter.com https://platform.twitter.com https://platform.linkedin.com https://www.linkedin.com https://static.hotjar.com https://script.hotjar.com https://vc.hotjar.io https://buttons.github.io https://unpkg.com https://code.jquery.com https://cdn.cookie-script.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://use.typekit.net https://p.typekit.net https://fonts.googleapis.com; connect-src 'self' https://api.teamdev.com https://backend.stage.teamdev.com https://itch-fastapi-prod-145676959489.europe-west1.run.app https://analytics.google.com https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://region1.analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://www.googleadservices.com wss://ws.hotjar.com https://content.hotjar.io https://metrics.hotjar.io https://vc.hotjar.io https://cdn.cookie-script.com; img-src 'self' data: https://pagead2.googlesyndication.com https://stats.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://googleads.g.doubleclick.net; report-uri https://api.teamdev.com/security/csp/report 1
default-src 'self' data:; img-src 'self' data: blob: https://secure.gravatar.com https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https:; font-src 'self' data: https://fonts.gstatic.com; worker-src 'self' blob:; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://www.google.com https://ad.doubleclick.net https://googleads.g.doubleclick.net https://px.ads.linkedin.com; frame-src 'self' https://help.maskyoo.com https://www.googletagmanager.com https://www.google.com https://maps.google.com https://td.doubleclick.net; object-src 'none'; base-uri 'self'; report-uri /csp-report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://challenges.cloudflare.com https://js.stripe.com https://www.googletagmanager.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https://flagcdn.com https://*.supabase.co https://images.unsplash.com https://upload.wikimedia.org https://cdn.esimpanel.io https://esimpanel.s3.us-east-1.amazonaws.com https://q.stripe.com https://www.facebook.com; frame-src https://js.stripe.com https://hooks.stripe.com https://challenges.cloudflare.com https://accounts.google.com; connect-src 'self' https://*.supabase.co wss://*.supabase.co https://api.stripe.com https://challenges.cloudflare.com https://www.google-analytics.com https://www.facebook.com; object-src 'none'; base-uri 'self'; form-action 'self' https://checkout.stripe.com; frame-ancestors 'none' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https:; script-src 'self' 'unsafe-inline' https://consent.cookiebot.com https://*.cookiebot.com https://www.googletagmanager.com https://www.google-analytics.com; connect-src 'self' https://consent.cookiebot.com https://*.cookiebot.com https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com; frame-src 'self' https://*.cookiebot.com; worker-src 'self' blob:; 1
font-src data.patchkast.be *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action data.patchkast.be *.facebook.com 'self' 'unsafe-inline'; frame-ancestors data.patchkast.be *.multisafepay.com https://pay.google.com 'self'; frame-src data.patchkast.be bid.g.doubleclick.net player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.sharethis.com *.google.com *.doubleclick.net *.facebook.com *.multisafepay.com https://pay.google.com *.apps.ladesk.com *.hubspot.com *.pinterest.com speelplezier.ladesk.com *.bing.net *.bing.com js.mollie.com 'self' 'unsafe-inline'; img-src data.patchkast.be widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com *.sharethis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.multisafepay.com https://at19.net https://bdt9.net https://ds1.nl https://dt51.net https://dt61.net https://fr135.net https://glp8.net https://jdt8.net https://jf79.net https://hs82.net https://lt45.net https://mt74.net https://ndt5.net https://rkn3.net *.bing.com *.bing.net *.cloudimg.io *.contentsquare.net *.etrusted.com *.google-analytics.com *.googlesyndication.com *.googleusercontent.com *.hsforms.com *.hubspot.com *.imgix.net *.linkedin.com *.premiere.page *.trustedshops.com www.google.be www.google.de www.google.nl flagpedia.net https://www.mollie.com *.tile.openstreetmap.org data: 'self' 'unsafe-inline'; script-src data.patchkast.be googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.sharethis.com *.google.com *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.multisafepay.com https://pay.google.com *.hs-analytics.net *.usemessages.com *.hs-scripts.com *.bing.net *.beslist.nl *.bing.com *.cloudflare.com *.contentsquare.net *.etrusted.com *.getqonfi.com *.google-analytics.com *.googlesyndication.com *.hotjar.com *.hs-banner.com *.hscollectedforms.net *.licdn.com *.pinimg.com *.pinterest.com *.premiere.page *.tiktok.com *.trustedshops.com *.webwinkelkeur.nl *.ladesk.com https://cdn.polyfill.io https://browser.sentry-cdn.com *.gstatic.com maps.googleapis.com js.mollie.com pay.google.com applepay.cdn-apple.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src data.patchkast.be *.sharethis.com *.googleapis.com *.doubleclick.net *.facebook.com *.multisafepay.com *.etrusted.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' 'unsafe-inline'; object-src data.patchkast.be 'self' 'unsafe-inline'; media-src data.patchkast.be 'self' 'unsafe-inline'; manifest-src data.patchkast.be 'self' 'unsafe-inline'; connect-src data.patchkast.be www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.sharethis.com *.google-analytics.com *.facebook.com *.facebook.net *.multisafepay.com *.beslist.nl *.bing.com *.bing.net *.contentsquare.net *.doubleclick.net *.etrusted.com *.getqonfi.com *.google.com *.googlesyndication.com *.hotjar.com *.hotjar.io *.hs-banner.com *.hscollectedforms.net *.hsforms.com *.hubspot.com *.linkedin.com *.pinterest.com *.premiere.page *.tiktok.com *.trustedshops.com www.google.be www.google.nl https://*.ingest.sentry.io www.gstatic.com maps.googleapis.com *.tile.openstreetmap.org 'self' 'unsafe-inline'; child-src data.patchkast.be http: https: blob: 'self' 'unsafe-inline'; default-src data.patchkast.be 'self' 'unsafe-inline' 'unsafe-eval'; base-uri data.patchkast.be 'self' 'unsafe-inline'; report-uri https://394bd828-e8ee-4169-91b3-7b587c6eb99c.sansec.watch/; report-to report-endpoint; 1
font-src *.googleapis.com *.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com https://fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com landofcoder.com maps.googleapis.com chart.googleapis.com https://player.vimeo.com https://www.youtube-nocookie.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com www.apptrian.com https://cdn.conveythis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com https://cdn.jsdelivr.net https://maps.google.com https://maps.googleapis.com https://*.google.com https://*.gstatic.com https://cdn.conveythis.com connect.facebook.net https://static.xx.fbcdn.net https://*.fbcdn.net https://*.facebook.com chimpstatic.com downloads.mailchimp.com *.list-manage.com www.facebook.com graph.facebook.com business.facebook.com landofcoder.com maps.googleapis.com chart.googleapis.com *.avada.io https://player.vimeo.com https://www.youtube.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com https://cdn.jsdelivr.net downloads.mailchimp.com *.fontawesome.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com http://fonts.googleapis.com 'self' 'unsafe-inline'; object-src landofcoder.com maps.googleapis.com chart.googleapis.com 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com www.apptrian.com https://api.conveythis.com https://api-proxy.conveythis.com https://cdn.conveythis.com https://*.facebook.com https://stats.g.doubleclick.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com landofcoder.com maps.googleapis.com chart.googleapis.com https://get.geojs.io *.avada.io https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://www.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com https://*.cookiebot.com *.multisafepay.com https://pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.sendcloud.sc *.jsdelivr.net https://wwww.facebook.com https://www.youtube.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com https://www.google.com https://www.google.nl https://wwww.facebook.com *.multisafepay.com https://*.cookiebot.com https://googleads.g.doubleclick.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.amazonaws.com https://bat.bing.com https://c.bing.com https://c.clarity.ms data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com https://*.cookiebot.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.cloudflare.com/ajax/libs/prototype/1.7.3/prototype.js *.multisafepay.com https://pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.sendcloud.sc *.jsdelivr.net https://www.googletagmanager.com https://googleads.g.doubleclick.net https://connect.facebook.net https://bat.bing.com https://www.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com https://static.klaviyo.com *.fontawesome.com *.multisafepay.com unsafe-inline assets.braintreegateway.com *.sendcloud.sc *.jsdelivr.net https://maxcdn.bootstrapcdn.com/ https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com https://pagead2.googlesyndication.com https://*.clarity.ms/ https://*.cookiebot.com https://googleads.g.doubleclick.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io *.multisafepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com https://www.google-analytics.com https://stats.g.doubleclick.net https://f.clarity.ms 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-FsvHMPjzqGRqAQh88musvA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://*.sentry.io https://www.googletagmanager.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://adservice.google.com https://static.cloudflareinsights.com https://fundingchoicesmessages.google.com https://challenges.cloudflare.com https://*.applixir.com https://imasdk.googleapis.com https://securepubads.g.doubleclick.net https://sdk.privacy-center.org https://s0.2mdn.net https://scripts.scriptwrapper.com https://*.scriptwrapper.com https://*.mediavine.com https://scripts.mediavine.com https://*.journeymv.com https://c.amazon-adsystem.com https://www.googletagservices.com https://*.confiant-integrations.net https://btloader.com https://*.adlightning.com https://*.consentmanager.net https://*.grow.me https://*.rapidedge.io; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.applixir.com https://s3.us-east-1.amazonaws.com https://*.mediavine.com https://*.scriptwrapper.com https://*.consentmanager.net https://*.grow.me data:; font-src 'self' data: https://fonts.gstatic.com https://*.mediavine.com; img-src 'self' data: https: blob:; media-src 'self' https: blob: data:; connect-src 'self' https://*.supabase.co https://*.sentry.io https://*.ingest.sentry.io https://ddragon.leagueoflegends.com https://cdn.communitydragon.org https://fonts.googleapis.com https://fonts.gstatic.com https://www.google-analytics.com https://region1.google-analytics.com https://region1.analytics.google.com https://analytics.google.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://adservice.google.com https://stats.g.doubleclick.net https://securepubads.g.doubleclick.net https://cloudflareinsights.com https://pub-c2abdfc91d4b40419af43f1b0d13aa14.r2.dev https://*.applixir.com https://imasdk.googleapis.com https://sdk.privacy-center.org https://api.privacy-center.org https://csi.gstatic.com https://fundingchoicesmessages.google.com https://ep1.adtrafficquality.google https://*.mediavine.com https://*.scriptwrapper.com https://*.journeymv.com https://c.amazon-adsystem.com https://*.confiant-integrations.net https://*.adlightning.com https://*.consentmanager.net https://*.grow.me https://*.rapidedge.io; frame-src https://*.doubleclick.net https://tpc.googlesyndication.com https://pagead2.googlesyndication.com https://challenges.cloudflare.com https://*.applixir.com https://imasdk.googleapis.com https://*.mediavine.com https://*.scriptwrapper.com https://*.journeymv.com https://c.amazon-adsystem.com https://*.confiant-integrations.net https://*.consentmanager.net https://*.grow.me; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests 1
font-src *.googleapis.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com *.revolut.com *.google.com google.com *.cdn-apple.com pay.google.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.vivapayments.com checkout.simpler.so *.cardlink.gr *.eurocommerce.gr *.iris.dias.com.gr *.test-iris.dias.com.gr *.piraeusbank.gr 'self' 'unsafe-inline'; frame-ancestors *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com *.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://widget-v5.boxnow.gr https://widget-v5.boxnow.cy *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com *.gstatic.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com *.gstatic.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com *.gstatic.com *.vivapayments.com *.disqus.com *.avada.io *.shopify.com https://cdnjs.cloudflare.com cdn.simpler.so sdk.local.simpler.so *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com maps.googleapis.com *.piraeusbank.gr 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com https://get.geojs.io *.avada.io checkout.simpler.so button.simpler.so analytics.simpler.so button.local.simpler.so *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com *.gstatic.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-VU1ajdRtSvDsMh5rpdXC7A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
report-uri /csp-report;base-uri 'self';default-src 'self';child-src blob:;connect-src 'self' https://flex-api.sharetribe.com undefined *.st-api.com maps.googleapis.com *.tiles.mapbox.com api.mapbox.com events.mapbox.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com stats.g.doubleclick.net https://tagmanager.google.com https://analytics.tiktok.com plausible.io *.plausible.io fonts.googleapis.com sentry.io *.sentry.io *.stripe.com https://connect.facebook.net https://www.facebook.com/ https://connect.facebook.net/en_US/fbevents.js https://www.facebook.com/tr https://j.clarity.ms/collect https://analytics.google.com/g/collect https://www.google.com/ccm/collect https://consent-eu.cookiehub.net/ https://px.ads.linkedin.com/wa/ https://pagead2.googlesyndication.com/ccm/collect https://px.ads.linkedin.com/wa/ wss://nexus-websocket-a.intercom.io https://api-iam.intercom.io https://cdn.cookiehub.eu/client/5d81cba1/es.json https://px.ads.linkedin.com/attribution_trigger https://px.ads.linkedin.com/collect https://www.google.co.in/ads/ga-audiences connect.facebook.net www.facebook.com/ connect.facebook.net/en_US/fbevents.js www.facebook.com/tr https://googleads.g.doubleclick.net https://www.googleadservices.com *.clarity.ms cdnjs.cloudflare.com px.ads.linkedin.com www.google.com accounts.google.com www.gstatic.com;font-src 'self' data: assets-sharetribecom.sharetribe.com fonts.gstatic.com cdnjs.cloudflare.com fonts.intercomcdn.com;form-action 'self' https://www.facebook.com;frame-src 'self' *.stripe.com *.youtube-nocookie.com https://www.googletagmanager.com https://www.facebook.com https://accounts.google.com https://www.google.com;img-src 'self' data: blob: *.imgix.net sharetribe.imgix.net picsum.photos *.picsum.photos api.mapbox.com *.amazonaws.com maps.googleapis.com *.gstatic.com *.googleapis.com *.ggpht.com *.giphy.com www.googletagmanager.com www.google.com www.google-analytics.com stats.g.doubleclick.net https://tagmanager.google.com https://analytics.tiktok.com *.ytimg.com *.stripe.com https://connect.facebook.net https://www.facebook.com/ https://connect.facebook.net/en_US/fbevents.js https://www.facebook.com/tr https://www.google.co.in www.google.es https://www.google.es https://c.clarity.ms/c.gif https://px.ads.linkedin.com/collect https://px.ads.linkedin.com/attribution_trigger https://googleads.g.doubleclick.net *.intercomcdn.com ayuda.cocopool.es;script-src 'self' 'unsafe-inline' 'unsafe-eval' data: maps.googleapis.com api.mapbox.com www.googletagmanager.com *.google-analytics.com js.stripe.com https://tagmanager.google.com https://analytics.tiktok.com https://business.tiktok.com plausible.io https://connect.facebook.net https://www.facebook.com/ https://connect.facebook.net/en_US/fbevents.js https://www.facebook.com/tr https://j.clarity.ms/collect https://googleads.g.doubleclick.net https://scripts.clarity.ms/0.8.30/clarity.js https://www.clarity.ms/tag/qb7wmhhqgm?ref=gtm2 https://snap.licdn.com/li.lms-analytics/insight.min.js https://widget.intercom.io/widget/zepwqny5 https://js.intercomcdn.com https://cdn.cookiehub.eu/c2/5d81cba1.js https://accounts.google.com;style-src 'self' 'unsafe-inline' fonts.googleapis.com api.mapbox.com https://cdn.cookiehub.eu/c2/css/5d81cba1.css https://cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.6.0/slick.min.css https://cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.6.0/slick-theme.min.css https://connect.facebook.net https://www.facebook.com/tr https://accounts.google.com 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: blob:; connect-src 'self' 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' lojaslivia.com.br *.lojaslivia.com.br wake-components.fbitsstatic.net lojaslivia.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br hotjar.com cloudflare.com zopim.com googleadservices.com hertzen.com smarthint.co doubleclick.net zdassets.com googleapis.com hotjar.io *.zdassets.com *.googleapis.com *.hotjar.io *.hotjar.com *.cloudflare.com *.googleadservices.com *.hertzen.com *.smarthint.co *.doubleclick.net *.zopim.com *.ebit.com.br wss://widget-mediator.zopim.com *.mailbiz.one cdn.jsdelivr.net *.jsdelivr.net *.pinterest.com google.com.br *.google.com.br blog.lojaslivia.com.br lojaslivia.com.br d3bo67muzbfgtl.cloudfront.net api.edrone.me lojaslivia-br.mais.social connect.facebook.net youtube.com google.co.jp googleads.g.doubleclick.net d335luupugsy2.cloudfront.net www.rdstation.com.br pageview-notify.rdstation.com.br d1sag09wwfbul8.cloudfront.net popups.rdstation.com.br content.syndigo.com event-harbor.rdstation.com; frame-ancestors *.lojaslivia.com.br lojaslivia.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: https:; font-src 'self' https: data:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https:; form-action 'self' https:; 1
font-src 'self' data: *.cloudfront.net *.gstatic.com; img-src 'self' data: blob: *.meupositivo.com.br *.positivoempresas.com.br *.google.com  *.google.com.br *.google-analytics.com *.facebook.com *.facebook.net; style-src 'self' 'unsafe-eval' 'unsafe-inline' data: *.googleapis.com;script-src 'self' 'unsafe-eval' 'unsafe-inline' data: *.youtube.com *.google.com *.googletagmanager.com *.hotjar.com tags.cmp.tail.digital *.google-analytics.com *.positivoempresas.com.br code.jquery.com *.gstatic.com *.facebook.net *.cloudfront.net googleads.g.doubleclick.net; frame-ancestors 'self' data: *.positivoempresas.com.br *.positivotecnologia.com.br; worker-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: *.positivoempresas.com.br 1
frame-ancestors 'self'; default-src 'self' https:; script-src 'report-sample' 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'report-sample' 'self' https: 'unsafe-inline'; font-src 'self' https: 'unsafe-inline' data:; img-src 'self' https: data:; report-uri https://5eb1e20184090c563b06661b.endpoint.csper.io; 1
default-src https: 'self'; script-src  https: 'unsafe-eval' 'unsafe-inline'; style-src  https: 'unsafe-inline'; img-src  https: data:; font-src  https: data:; report-uri /csp-report 1
default-src 'self' https://themes.googleusercontent.com/ https://apps.geodan.nl https://acc.apps.geodan.nl https://platform.twitter.com/ https://syndication.twitter.com/ http://www.rovid.nl https://geodata.rivm.nl https://statistiek.rijksoverheid.nl https://mebi.rivm.nl https://cstm.rivm.nl/ https://cgl-web-api.rivm.nl/ https://acceptatie-cgl-web-api.rivm.nl/ https://data.rivm.nl/ ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://statistiek.rijksoverheid.nl http://platform.twitter.com/ https://cdn.syndication.twimg.com https://mebi.rivm.nl https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cstm.rivm.nl/ https://cgl-web-api.rivm.nl/ https://acceptatie-cgl-web-api.rivm.nl/ https://data.rivm.nl/  https://apps.rivm.nl; object-src https://cstm.rivm.nl/ https://cgl-web-api.rivm.nl/ https://acceptatie-cgl-web-api.rivm.nl/; style-src 'self' 'unsafe-inline' https://platform.twitter.com/ https://ton.twimg.com/ https://mebi.rivm.nl https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cstm.rivm.nl/ https://cgl-web-api.rivm.nl/ https://acceptatie-cgl-web-api.rivm.nl/; img-src 'self' https://rivm.nl/ https://*.rivm.nl/ https://statistiek.rijksoverheid.nl/ https://geodata.nationaalgeoregister.nl/ https://syndication.twitter.com/ https://pbs.twimg.com/ https://ton.twimg.com/ https://abs.twimg.com/ https://platform.twitter.com/ http://abs.twimg.com/ data:  http://www.rovid.nl https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cstm.rivm.nl/ https://cgl-web-api.rivm.nl/ https://acceptatie-cgl-web-api.rivm.nl/  https://service.pdok.nl/ https://data.rivm.nl/  https://*.openstreetmap.org/; frame-ancestors 'self' https://www.atlasleefomgeving.nl https://*.gezondeleefomgeving.nl https://*.woondossier.nl/ https://roosendaal.incijfers.nl https://*.nhnieuws.nl; child-src https://cstm.rivm.nl/ https://cgl-web-api.rivm.nl/ https://acceptatie-cgl-web-api.rivm.nl/ https://data.rivm.nl/ ; font-src 'self' https://rivm.nl/ https://*.rivm.nl/ https://themes.googleusercontent.com/ https://cstm.rivm.nl/ https://cgl-web-api.rivm.nl/ https://acceptatie-cgl-web-api.rivm.nl/ data: ; connect-src 'self' https://mebi.rivm.nl/* https://statistiek.rijksoverheid.nl/ https://statistiek.rijksoverheid.nl/* https://cstm.rivm.nl/ https://cstm.rivm.nl/* https://cgl-web-api.rivm.nl/ https://acceptatie-cgl-web-api.rivm.nl/ https://acc-api.rivm.nl https://api.rivm.nl/ https://api.pdok.nl/*; report-uri /report-csp-violation 1
font-src staticw2.yotpo.com *.yotpo.com *.googleapis.com *.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.yotpo.com https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://www.googletagmanager.com/ d2wzl9lnvjz3bh.cloudfront.net d2oarllo6tn86.cloudfront.net inpref.com *.inpref.com fi1.frosmo.com *.fi1.frosmo.com www.vismasignforms.com uittokalusto.shard.fi policy.app.cookieinformation.com *.europe-west1.firebasedatabase.app dapi.videoly.co *.yotpo.com online.avarda.org stage.avarda.org https://plumrocket.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ d2wzl9lnvjz3bh.cloudfront.net d2oarllo6tn86.cloudfront.net inpref.com *.inpref.com fi1.frosmo.com *.fi1.frosmo.com *.serviceform.com *.cloudfront.net www.google.fi pagead2.googlesyndication.com cdn2.hubspot.net static.paytrail.com resources.paytrail.com p.yotpo.com yotpo-editor-production.s3.amazonaws.com v2assets.zopim.io dapi.videoly.co uittokalusto.fi www.uittokalusto.fi *.yotpo.com online.avarda.org stage.avarda.org https://cdn.flbx.io *.hsforms.net *.hsforms.com *.yotpoapi.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ d2wzl9lnvjz3bh.cloudfront.net d2oarllo6tn86.cloudfront.net inpref.com *.inpref.com fi1.frosmo.com *.fi1.frosmo.com t.myvisitors.se dash.serviceform.com widget-mediator.zopim.com code.tidio.co policy.app.cookieinformation.com static.zdassets.com connect.getflowbox.com staticw2.yotpo.com api.custobar.com script.custobar.com dapi.videoly.co *.europe-west1.firebasedatabase.app api.videoly.co *.yotpo.com online.avarda.org stage.avarda.org https://cdn.flbx.io https://connect.getflowbox.com http://connect.getflowbox.com *.hsforms.net *.hsforms.com https://t.myvisitors.se https://staticw2.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com d2wzl9lnvjz3bh.cloudfront.net d2oarllo6tn86.cloudfront.net inpref.com *.inpref.com fi1.frosmo.com *.fi1.frosmo.com dash.serviceform.com staticw2.yotpo.com *.yotpo.com *.googleapis.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ cdn.flbx.io static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ d2wzl9lnvjz3bh.cloudfront.net d2oarllo6tn86.cloudfront.net inpref.com *.inpref.com fi1.frosmo.com *.fi1.frosmo.com *.serviceform.com www.google.fi www.google.com pagead2.googlesyndication.com zendesk-eu.my.sentry.io wss://widget-mediator.zopim.com scone-pa.clients6.google.com policy.app.cookieinformation.com region1.analytics.google.com ekr.zdassets.com uittokalustohelp.zendesk.com staticw2.yotpo.com gateway.getflowbox.com a.getflowbox.com api.custobar.com wss://*.europe-west1.firebasedatabase.app *.yotpo.com https://*.amazonaws.com https://cdn.flbx.io https://connect.getflowbox.com http://connect.getflowbox.com consent.app.cookieinformation.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src d2wzl9lnvjz3bh.cloudfront.net d2oarllo6tn86.cloudfront.net inpref.com *.inpref.com fi1.frosmo.com *.fi1.frosmo.com widget-mediator.zopim.com googleads.g.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; manifest-src 'self' https://supernova-enterprise.cloudflareaccess.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://connect.facebook.net https://play4tune-scripts-prod.s3.us-east-1.amazonaws.com https://adscool.net https://www.clarity.ms https://*.clarity.ms https://analytics.tiktok.com https://*.tiktok.com https://static.cloudflareinsights.com https://cdnjs.cloudflare.com https://ui.invisiblesport.com https://*.invisiblesport.com https://*.sptpub.com https://embed.tawk.to https://*.tawk.to https://cdn.jsdelivr.net http://localhost:5500; style-src 'self' 'unsafe-inline' https://play4tune-scripts-prod.s3.us-east-1.amazonaws.com https://fonts.googleapis.com https://embed.tawk.to https://*.tawk.to http://localhost:5500; img-src 'self' data: blob: https: http://localhost:5500; font-src 'self' data: https://play4tune-scripts-prod.s3.us-east-1.amazonaws.com https://fonts.gstatic.com https://embed.tawk.to https://*.tawk.to http://localhost:5500; media-src 'self' blob: https://*.tawk.to; connect-src 'self' https: wss:; frame-src 'self' https:; worker-src 'self' blob:; base-uri 'self'; form-action 'self' https: 1
default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; object-src 'none' 1
https://www.google.ca; script-src 'strict-dynamic' 'nonce-kWy6/qwtAkeF0uJnuQDPWQ==' 1
worker-src https: blob: 'self'; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: https://static2.sharepointonline.com https: *.fontawesome.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com test.saferpay.com www.saferpay.com saferpay.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self' *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com test.saferpay.com www.saferpay.com saferpay.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com https://littlebit.eu-test.encoway.cloud/ https://littlebit.eu.encoway.cloud ratenkauf.easycredit.de test.saferpay.com www.saferpay.com saferpay.com https: blob: *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io magefan.com cm.magefan.com *.disqus.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://littlebit.eu-test.encoway.cloud/ https://littlebit.eu.encoway.cloud ratenkauf.easycredit.de test.saferpay.com www.saferpay.com saferpay.com *.visualwebsiteoptimizer.com app.vwo.com *.disqus.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com btodev.littlebit.ch bto.littlebit.ch *.hsforms.net *.hsforms.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://widgets.trustedshops.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://littlebit.eu-test.encoway.cloud/ https://littlebit.eu.encoway.cloud *.visualwebsiteoptimizer.com app.vwo.com *.fontawesome.com assets.braintreegateway.com btodev.littlebit.ch bto.littlebit.ch *.googleapis.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com https://widgets.trustedshops.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://littlebit.eu-test.encoway.cloud/ https://littlebit.eu.encoway.cloud ratenkauf.easycredit.de test.saferpay.com www.saferpay.com saferpay.com https: wss: *.visualwebsiteoptimizer.com app.vwo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com btodev.littlebit.ch bto.littlebit.ch t.elasticsuite.io *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src test.saferpay.com www.saferpay.com saferpay.com https: blob: *.visualwebsiteoptimizer.com app.vwo.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://challenges.cloudflare.com https://static.ads-twitter.com https://*.clarity.ms https://web-sdk.smartlook.com; style-src 'self' 'unsafe-inline' https://fonts.bunny.net; img-src 'self' data: blob: https://gamerhash.com https://app.gamerhash.com https://cdn.gamerhash.com https://api.gamerhash.com https://gamerhash-com.ams3.digitaloceanspaces.com https://*.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.google.pl https://pagead2.googlesyndication.com https://www.googleadservices.com https://*.doubleclick.net https://t.co https://analytics.twitter.com https://*.clarity.ms https://fonts.gstatic.com; font-src 'self' data: https://fonts.bunny.net https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://www.googletagmanager.com https://api.gamerhash.com https://o108604.ingest.us.sentry.io https://pagead2.googlesyndication.com https://www.googleadservices.com https://*.doubleclick.net https://www.google.com https://www.google.pl https://t.co https://analytics.twitter.com https://*.clarity.ms https://*.smartlook.cloud; media-src 'self' blob: https:; frame-src https://challenges.cloudflare.com https://www.googletagmanager.com; worker-src 'self' blob:; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests; report-uri https://o108604.ingest.us.sentry.io/api/4512016286351360/security/?sentry_key=ecf05ba8988c59be0e59f30453b55aea&sentry_environment=production; 1
default-src 'self' https://*.googleapis.com https://www.paypal.com  https://*.google-analytics.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.paypalobjects.com https://www.paypal.com https://s.ytimg.com https://maps.google.com https://m.addthis.com https://www.youtube.com/iframe_api https://www.youtube.com http://www.youtube.com http://dev.openlayers.org https://dev.openlayers.org https://m.addthisedge.com https://s7.addthis.com https://apis.google.com https://googleads.g.doubleclick.net https://unpkg.com  https://use.fontawesome.com https://pro.fontawesome.com http://www.amcharts.com https://platform.twitter.com https://ssl.p.jwpcdn.com https://www.google-analytics.com https://records-ws.nbnatlas.org https://use.typekit.net https://www.googleadservices.com https://mc.us16.list-manage.com https://www.googletagmanager.com https://tagmanager.google.com https://downloads.mailchimp.com https://code.jquery.com https://maps.googleapis.com https://connect.facebook.net   https://downloads.mailchimp.com https://csi.gstatic.com; img-src 'self' https: data:; style-src 'self' 'unsafe-inline' http://dev.openlayers.org https://tagmanager.google.com https://ajax.googleapis.com https://maxcdn.bootstrapcdn.com https://downloads.mailchimp.com https://use.fontawesome.com https://p.typekit.net https://use.typekit.net https://pro.fontawesome.com https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://use.typekit.net https://use.fontawesome.com https://pro.fontawesome.com  https://maxcdn.bootstrapcdn.com; frame-src 'self'  https://www.paypal.com https://www.paypalobjects.com https://www.google.com https://s7.addthis.com https://e.issuu.com https://apis.google.com/ https://www.youtube.com/ https://staticxx.facebook.com/ https://accounts.google.com/ https://platform.twitter.com/ https://syndication.twitter.com/ https://www.facebook.com/ https://web.facebook.com/; object-src 'self'; connect-src 'self' https://www.paypal.com  Content Security Policy: The page’s settings observed the loading of a resource at https://*.googleapis.com https://www.google-analytics.com https://m.addthis.com https://syndication.twitter.com  https://performance.typekit.net/ ; media-src 'self' blob: https://e5c5a7c5.ssl.hwcdn.net; worker-src 'self' blob:; frame-ancestors 'self'; base-uri 'self' 1
default-src self; font-src self; img-src self; script-src self; style-src self 1
object-src 'none';base-uri 'self';script-src 'nonce-hHYHQehUF72RSRrKAA5LiQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'none';                             form-action 'Self' https://*.macmap.org https://export.highcharts.com https://mas-admintools.intracen.org;                             child-src 'Self' https://*.intracen.org https://platform.twitter.com https://syndication.twitter.com https://www.youtube.com https://div.show;        frame-src 'Self' https://www.youtube.com https://*.intracen.org https://www.youtube.com https://platform.twitter.com https://syndication.twitter.com http://auth.iws-hybrid.trendmicro.com https://auth.iws-hybrid.trendmicro.com https://auth.vemic.com https://block.opendns.com https://blocked.syd-1.linewize.net https://gateway.id.swg.umbrella.com https://gateway.zscaler.net https://gateway.zscalertwo.net https://gateway.zscloud.net https://notify.bluecoat.com https://pwm-image.trendmicro.com https://safe.menlosecurity.com https://www.securly.com https://web-notification.capgemini.com;                             frame-ancestors 'Self' https://*.macmap.org https://www.trade.gov.in https://www.macmap.org https://export.bh https://*.efta.int https://oic.tradehelpdesk.org https://oecs.int https://www.investmentfiji.org.fj https://www.mauritiustrade.mu https://info.ttbizlink.gov.tt https://en.tpo.ir https://www.ceintelligence.com https://sau-demo.tradehelpdesk.org https://www.info.ttbizlink.gov.tt;                             img-src 'Self' data: blob: https://www.googletagmanager.com https://fonts.gstatic.com https://translate.google.com https://cdn.honey.io:443 https://pos.baidu.com https://www.gstatic.com https://www.macmap.org https://yastatic.net https://cdn.shopimgs.com https://yastatic.net https://macmap.org;                             style-src 'Self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com;                             style-src-attr 'Self' 'report-sample' 'unsafe-inline';                             style-src-elem 'Self' 'report-sample' 'unsafe-inline' https://fonts.googleapis.com https://*.kaspersky-labs.com https://www.gstatic.com https://cdn.honey.io:443 https://fonts.googleapis.com https://pwm-image.trendmicro.com https://www.gstatic.com https://www.gstatic.com:443 https://www.l-sou.com https://www.macmap.org;                             script-src 'Self' 'unsafe-inline' 'unsafe-eval' 'report-sample' https://maxcdn.bootstrapcdn.com https://code.jquery.com https://platform.twitter.com https://www.googletagmanager.com https://*.macmap.org https://code.jquery.com;                             script-src-attr 'Self' 'unsafe-inline';                             script-src-elem 'Self' 'report-sample' 'unsafe-inline' blob: https://www.googletagmanager.com https://platform.twitter.com https://code.jquery.com https://maxcdn.bootstrapcdn.com https://ajax.googleapis.com https://ajax.googleapis.com:443 https://cdn.bootcdn.net https://code.jquery.com https://connect.facebook.net:443 https://ff.kis.v2.scr.kaspersky-labs.com https://gc.kis.v2.scr.kaspersky-labs.com https://infird.com https://me.kis.v2.scr.kaspersky-labs.com https://platform.twitter.com https://translate.google.com https://translate.googleapis.com https://www.googletagmanager.com https://www.l-sou.com https://www.macmap.org https://static.cloudflareinsights.com;                             connect-src 'Self' blob: data: https://region1.google-analytics.com https://www.google-analytics.com https://api.adsfight.com https://cdn.shopimgs.com https://fonts.googleapis.com https://fonts.googleapis.com:443 https://fonts.gstatic.com https://fonts.gstatic.com:443 https://gateway.oyealva.com https://infragrid.v.network https://local.adblock360.com https://l-sou.com https://overbridgenet.com https://polyfilljs.org https://translate.googleapis.com https://translate.googleapis.com:443 https://translate-pa.googleapis.com https://translate-pa.googleapis.com:443 https://www.google-analytics.com https://www.googletagmanager.com https://www.macmap.org https://overbridgenet.com https://www.google-analytics.com https://cdn.shopimgs.com;                             font-src 'Self' data: https://fonts.gstatic.com https://account.affilitizer.com https://at.alicdn.com https://cdn.fastdic.com https://cdn.jsdelivr.net https://cdn.megabonus.com https://cdn.scite.ai https://cdn-uicons.flaticon.com https://migaku-public-data.migaku.com https://r2cdn.perplexity.ai https://use.typekit.net;                             media-src blob: data: https://ssl.gstatic.com;                             worker-src blob:;                             manifest-src 'Self' https://www.macmap.org;        object-src 'Self' https://www.macmap.org;                             report-uri https://fawedsitereporting.azurewebsites.net/api/csp-report?;                             report-to default 1
default-src 'self'; script-src 'self' 'nonce-ZH803HgVxnjh94R4zgk6+w==' cdnjs.cloudflare.com ajax.aspnetcdn.com cdnsrc.asp.net *.googleapis.com maxcdn.bootstrapcdn.com *.cloudfront.net js.stripe.com js.braintreegateway.com *.cardconnect.com *.google.com www.gstatic.com www.googletagmanager.com googletagmanager.com www.google-analytics.com google-analytics.com analytics.barnebys.com www.facebook.com *.hs-scripts.com app.hoversignal.com static.zdassets.com s.adroll.com connect.facebook.net cdn.leadmanagerfx.com cdn.now4real.com brands.metaads.io cdn.rlets.com www.datadoghq-browser-agent.com www.clarity.ms analytics.tiktok.com pi.pardot.com cdn.pardot.com www.googleadservices.com analytics.ahrefs.com cdn.userway.org *.addthis.com s3.amazonaws.com cdn.ably.com chat-assets.frontapp.com static.ctctcdn.com use.typekit.net js.createsend1.com fast.fonts.net googleads.g.doubleclick.net stats.g.doubleclick.net consent.cookiebot.com scripts.clarity.ms b.clarity.ms manychat.com widget.manychat.com mccdn.me s.pinimg.com js.hs-banner.com js.usemessages.com js.hscollectedforms.net js.hs-analytics.net js-ap1.hs-banner.com js-ap1.hscollectedforms.net js-ap1.hs-analytics.net js-ap1.hsadspixel.net ct.pinterest.com *.zendesk.com support.hdhwine.com support.hdhauctions.com diffuser-cdn.app-us1.com prism.app-us1.com www.youtube.com integrator.swipetospin.com cdn.impel.io static.opentok.com *.nanocosmos.de *.auth0.com static.addtoany.com; style-src 'self' 'nonce-ZH803HgVxnjh94R4zgk6+w==' 'sha256-WMSGf2xDz2B+SRKrg/Iu1zsXSOfKnRhzYxp8SaGSGUE=' 'sha256-wIuuK5ba7OAcKAanTmQNfXsquALURJjbDNey9fYOgrk=' *.googleapis.com maxcdn.bootstrapcdn.com *.auctionmobility.com cdn.userway.org cdnjs.cloudflare.com *.fontawesome.com static.ctctcdn.com fast.fonts.net static.zdassets.com 'sha256-tHyZ4F/uujwtAEljfL1u0tyDYN85EgDaR/Yey6+DL/g=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' cdn.impel.io 'sha256-VFYCG8ZmScOy7Y1AQEV7fyQSjGKI9IQkRBGylsNzBPM=' *.zendesk.com js.usemessages.com; img-src 'self' data: blob: *.auctionmobility.com cdn.userway.org *.googletagmanager.com www.google-analytics.com www.googletagmanager.com *.google-analytics.com google.com www.google.com googleads.g.doubleclick.net stats.g.doubleclick.net www.facebook.com connect.facebook.net *.adswizz.com us-18668-adswizz.attribution.adswizz.com px.ads.linkedin.com www.linkedin.com track.hubspot.com forms.hsforms.com track-ap1.hubspot.com forms-ap1.hsforms.com www.googleadservices.com googleadservices.com www.google.co.in www.google.co.jp www.google.com.au www.google.co.kr www.google.com.sg www.google.co.uk www.google.de www.google.fr www.google.it www.google.es www.google.nl www.google.be www.google.se www.google.dk www.google.fi www.google.ie www.google.pl www.google.pt www.google.gr www.google.cz www.google.hu www.google.ro www.google.at www.google.com.br www.google.ca www.google.com.mx www.google.com.ar www.google.cl www.google.co.ve www.google.co.za www.google.ae www.google.com.eg www.google.co.il www.google.com.tr chat.frontapp.com chat-assets.frontusercontent.com auctionmobility-web-static.s3.amazonaws.com wwwimages.adobe.com *.googleapis.com static.addtoany.com *.googlesyndication.com *.zendesk.com; font-src 'self' data: fonts.gstatic.com maxcdn.bootstrapcdn.com *.fontawesome.com *.auctionmobility.com cdn.userway.org chat-assets.frontapp.com; connect-src 'self' api.stripe.com api.braintreegateway.com *.braintreegateway.com *.cardconnect.com *.ably.io ably.com *.userway.org *.google-analytics.com google-analytics.com www.googletagmanager.com googletagmanager.com cdnjs.cloudflare.com *.auctionmobility.com static.ctctcdn.com listgrowth.ctctcdn.com api.rollbar.com *.braintree-api.com *.google.com www.facebook.com stats.g.doubleclick.net consentcdn.cookiebot.com analytics.tiktok.com *.clarity.ms analytics.barnebys.net ct.pinterest.com www.googleadservices.com googleads.g.doubleclick.net ekr.zdassets.com *.zendesk.com wss://*.zendesk.com api.hubspot.com api-ap1.hubapi.com forms.hscollectedforms.net forms-ap1.hscollectedforms.net connect.facebook.net capig.madgicx.ai zjlrnada.use.stape.io px.ads.linkedin.com s.pinimg.com www.google.co.in www.google.co.jp www.google.com.au www.google.co.kr www.google.com.sg www.google.co.uk www.google.de www.google.fr www.google.it www.google.es www.google.nl www.google.be www.google.se www.google.dk www.google.fi www.google.ie www.google.pl www.google.pt www.google.gr www.google.cz www.google.hu www.google.ro www.google.at www.google.com.br www.google.ca www.google.com.mx www.google.com.ar www.google.cl www.google.co.ve www.google.co.za www.google.ae www.google.com.eg www.google.co.il www.google.com.tr *.bugsnag.com *.frontapp.com us-west-1-chat-server.frontapp.com us-west-2-chat-server.frontapp.com eu-west-1-chat-server.frontapp.com *.browser-intake-datadoghq.com wss://front-us-realtime.ably.io wss://front-eu-realtime.ably.io internet-up.ably-realtime.com timer.auctionatlas.com wss://*.auctionmobility.com:* cdn.impel.io *.opentok.com *.tokbox.com wss://*.tokbox.com wss://*.ably.net static.addtoany.com cdn.now4real.com; frame-src 'self' www.google.com js.stripe.com *.cardconnect.com *.braintreegateway.com cdn.userway.org consentcdn.cookiebot.com ct.pinterest.com app.hubspot.com *.zendesk.com zjlrnada.use.stape.io recaptcha.google.com www.gstatic.com cdn.impel.io www.youtube.com static.addtoany.com www.facebook.com cdn.now4real.com 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net *.fonts.googleapis.com data: *.cloudflare.com cdn.ra.parts *.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com cdn.ra.parts 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.addthis.com *.pinterest.com cdn.ra.parts 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com *.cloudflare.com *.cdn.klarna.com *.vimeocdn.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.addthis.com *.pinterest.com *.cdninstagram.com cdn.ra.parts data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.avada.io *.shopify.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.instagram.com cdn.ra.parts *.hotjar.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net *.googleapis.com assets.braintreegateway.com *.cloudflare.com *.twitter.com *.bootstrapcdn.com cdn.ra.parts 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com cdn.ra.parts 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://get.geojs.io *.avada.io *.cloudflare.com *.googleapis.com *.addthis.com *.cardinalcommerce.com *.graph.instagram.com cdn.ra.parts *.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://raparts.report-uri.com/r/d/csp/reportOnly; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' blob: https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com https://www.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://fonts.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.instagram.com https://*.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://www.paypal.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cdninstagram.com *.googleapis.com https://*.gstatic.com 'self' data: https://*.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com https://portal.payconiq.com https://static.buckaroo.nl https://www.paypalobjects.com magefan.com cm.magefan.com https://*.googleapis.com https://*.googleusercontent.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.instagram.com *.googleapis.com https://*.gstatic.com https://*.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.facebook.com *.facebook.net https://*.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com wss://websocketservice-externalapi.prod.buckaroo.io https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://applepay.buckaroo.io https://www.paypal.com https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
connect-src 'self' https://lsquared.com https://api.hubspot.com https://tr.capterra.com https://manager.eu.smartlook.cloud https://js.hs-analytics.net https://js.hs-banner.com https://forms.hscollectedforms.net https://js.usemessages.com https://js.hsadspixel.net https://app.hubspot.com https://track.hubspot.com https://cp.hubspot.com https://cta-service-cms2.hubspot.com https://forms.hsforms.com https://forms-na1.hsforms.com https://perf-na1.hsforms.com https://js.hsforms.net https://api.hubapi.com https://static.hsappstatic.net https://fonts.googleapis.com https://analytics.google.com https://ad.doubleclick.net https://stats.g.doubleclick.net https://www.googletagmanager.com https://o.clarity.ms https://scripts.clarity.ms https://www.clarity.ms https://app.factors.ai https://web-sdk.smartlook.com https://tracking-api.g2.com https://www.facebook.com data:; script-src 'self' 'unsafe-eval' blob: https://tr.capterra.com https://7052064.fs1.hubspotusercontent-na1.net https://app.hubspot.com/ https://lsquared.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hscollectedforms.net https://js.usemessages.com https://js.hsadspixel.net https://js.hubspot.com https://forms.hsforms.com https://js.hsforms.net https://api.hubapi.com https://static.hsappstatic.net https://fonts.googleapis.com https://fonts.gstatic.com https://pagead2.googlesyndication.com https://ad.doubleclick.net https://stats.g.doubleclick.net https://scripts.clarity.ms https://www.clarity.ms https://app.factors.ai https://web-sdk.smartlook.com https://tracking-api.g2.com https://connect.facebook.net 'strict-dynamic' 'nonce-PcGu3YiwOOevz92Xxq24Kw=='; object-src 'self'; upgrade-insecure-requests 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://www.paypal.com https://www.sandbox.paypal.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; worker-src 'self' blob:; manifest-src 'self'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.rbtoolsandfixings.com *.cloudflare.com fonts.googleapis.com *.mdoq.io applepay.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com cdn.livechatinc.com www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com widget.trustpilot.com lpcdn.lpsnmedia.net www.google.com secure.livechatinc.com cdn.flipsnack.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: *.rbtoolsandfixings.com *.cloudflare.com *.mdoq.io *.google.com *.google.co.uk *.cdninstagram.com www.facebook.com proxy.elfsightcdn.com *.elfsightcdn.com fonts.gstatic.com usage.trackjs.com imgsct.cookiebot.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com app.avada.io *.shopify.com *.alothemes.com *.magepow.com player.vimeo.com js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.divinetrash.co.uk *.cloudflare.com *.twitter.com *.fontawesome.com *.liveperson.net *.trustpilot.com media.twiliocdn.com *.elfsight.com code.jquery.com connect.facebook.net api.livechatinc.com cdn.livechatinc.com chimpstatic.com unpkg.com cdn.jsdelivr.net cdn.kiprotect.com *.mdoq.io cdn.trackjs.com consent.cookiebot.com consentcdn.cookiebot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com assets.braintreegateway.com *.googleapis.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com *.rbtoolsandfixings.com *.cloudflare.com *.bootstrapcdn.com www.google-analytics.com cdn.kiprotect.com www.googletagmanager.com *.mdoq.io 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src *.rbtoolsandfixings.com 'self' 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.rbtoolsandfixings.com *.cloudflare.com *.doubleclick.net get.geojs.io *.mdoq.io capture.trackjs.com consentcdn.cookiebot.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.googleapis.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://ccapi-stg.paymentez.com https://ccapi.paymentez.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.googleapis.com *.gstatic.com https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://* *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com https://cdn.paymentez.com/ *.avada.io *.shopify.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://cdn.paymentez.com/ccapi/sdk/payment_checkout_stable.min.css *.fontawesome.com https://fonts.bunny.net unsafe-inline assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com https://ccapi-stg.paymentez.com https://ccapi.paymentez.com https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://checkout.stripe.com https://connect.stripe.com https://accounts.google.com https://appleid.apple.com; script-src 'self' 'unsafe-inline' https://maps.googleapis.com https://maps.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://static.cloudflareinsights.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://cdn.wowu.travel https://wowu-production.s3.ap-northeast-1.amazonaws.com https://*.amazonaws.com https://maps.googleapis.com https://maps.gstatic.com https://*.googleapis.com https://*.gstatic.com https://*.ggpht.com https://*.googleusercontent.com https://www.google.com https://maps.google.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://cdn.wowu.travel https://wowu-production.s3.ap-northeast-1.amazonaws.com https://*.amazonaws.com https://maps.googleapis.com https://*.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://cloudflareinsights.com https://static.cloudflareinsights.com https://www.wowu.travel https://o4511981500891136.ingest.us.sentry.io https://*.ingest.sentry.io https://*.ingest.us.sentry.io https://*.ingest.de.sentry.io; frame-src 'self' https://www.google.com https://maps.google.com https://www.youtube.com https://www.youtube-nocookie.com https://challenges.cloudflare.com https://www.googletagmanager.com; media-src 'self' data: blob: https://cdn.wowu.travel https://wowu-production.s3.ap-northeast-1.amazonaws.com https://*.amazonaws.com; worker-src 'self' blob:; report-uri /api/csp-report 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com consentcdn.cookiebot.com consentcdn.cookiebot.eu *.dotdigital-pages.com *.dotdigital.com *.byrne.com https://webchat.mitel.io https://www.facebook.com form.typeform.com www.googletagmanager.com wisepops.net cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.google.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com imgsct.cookiebot.com imgsct.cookiebot.eu *.trackedlink.net https://www.magezon.com byrne.liquifire.com configurator.inforcloudsuite.com https://*.linkedin.com https://www.facebook.com https://accounts.youtube.com img.youtube.com *.cdninstagram.com *.typeform.com *.reddit.com wisepops.net *.google.com *.mageside.com mageside.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page www.apptrian.com consent.cookiebot.com consentcdn.cookiebot.com consent.cookiebot.eu consentcdn.cookiebot.eu *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal mail.byrne.com js-agent.newrelic.com bam.nr-data.net www.google.com www.gstatic.com includes.ccdc02.com https://webchat.mitel.io *.net-results.io https://beacon.cdnma.com https://dlut3lsiqvb0g.cloudfront.net https://snap.licdn.com https://komito.net https://connect.facebook.net https://*.authorize.net www.youtube.com graph.instagram.com ajax.googleapis.com *.elfsight.com *.elfsightcdn.com *.typeform.com unpkg.com *.redditstatic.com wisepops.net rum.hlx.page cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.gstatic.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.fontawesome.com use.typekit.net p.typekit.net *.typeform.com wisepops.net cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com www.apptrian.com consentcdn.cookiebot.com consentcdn.cookiebot.eu consent.cookiebot.com consent.cookiebot.eu *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com ws://localhost:9109/ws wss://localhost:9109/ws wss://localhost:9109/ bam.nr-data.net jstest.authorize.net js.authorize.net api2.authorize.net *.analytics.google.com *.lottiefiles.com https://lottie.host https://stats.g.doubleclick.net *.net-results.com commerce.adobedtm.com commerce.adobe.net qa-api.magedevteam.com *.cardinalcommerce.com t.elasticsuite.io core.service.elfsight.com *.typeform.com *.linkedin.com *.redditstatic.com *.reddit.com wisepops.net *.wisepops.com rum.hlx.page apitest.authorize.net api.authorize.net webchat.dotdigital.com webchat.staging.dotdigital.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com sandbox.secure.checkout.visa.com secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.online-metrix.net testflex.cybersource.com flex.cybersource.com sandbox.secure.checkout.visa.com secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com assets.secure.checkout.visa.com thm.visa.com sandbox.src.mastercard.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com thm.visa.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'none'; img-src 'self' *; font-src 'self' data: fonts.gstatic.com; style-src 'self' *.mailchimp.com 'unsafe-inline'; form-action 'none'; connect-src 'self' eeqj.matomo.cloud t.sneak.cloud; script-src 'self' t.sneak.cloud ajax.cloudflare.com downloads.mailchimp.com *.list-manage.com 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'none'; object-src 'none'; base-uri 'self'; report-uri https://ea3fc85e.report-uri.com/r/d/csp/enforce ; report-to https://ea3fc85e.report-uri.com/r/d/csp/enforce ; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src maxcdn.bootstrapcdn.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.facebook.com *.facebook.net 'self' connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ *.addthis.com *.facebook.com *.facebook.net *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com connect.facebook.net graph.facebook.com business.facebook.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com magefan.com cm.magefan.com *.facebook.com *.facebook.net *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.doubleclick.net *.googletagmanager.com https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.omnivasiunta.lt *.google.lv *.tawk.link data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com s7.addthis.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.facebook.com *.facebook.net *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.avada.io *.shopify.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://unpkg.com *.tawk.to *.jsdelivr.net *.newrelic.com *.nr-data.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net *.googleapis.com *.googletagmanager.com *.fontawesome.com https://fonts.bunny.net *.tawk.to 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://maps.googleapis.com https://player.vimeo.com ekr.zdassets.com/ *.facebook.com *.facebook.net *.google-analytics.com *.google.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog https://get.geojs.io *.avada.io connect.facebook.net graph.facebook.com business.facebook.com https://geocode.arcgis.com *.tawk.to wss://*.tawk.to/ *.nr-data.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-fXfSZutT4PuC1GJLgiw-dg' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
default-src 'self'; script-src 'nonce-+UGOw6UDrsSgfC5M5fM9Qw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
font-src maps.googleapis.com www.google.com www.gstatic.com maps.gstatic.com fonts.googleapis.com fonts.gstatic.com www.w3.org *.fontawesome.com *.gstatic.com *.authorize.net *.cardinalcommerce.com *.adobedtm.com *.yotpo.com 'self' data: *.cloudfront.net *.googleapis.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.addthis.com/ *.moatads.com *.addthisedge.com m.addthis.com api-public.addthis.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com *.addthis.com *.moatads.com *.addthisedge.com m.addthis.com api-public.addthis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.qiscus.com *.google.com *.facebook.com *.facebook.net *.twitter.com *.midtrans.com *.addtoany.com *.pinterest.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com maps.googleapis.com www.google.com www.gstatic.com maps.gstatic.com fonts.googleapis.com www.w3.org blob: www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' data: *.png *.jpg *.jpeg *.gstatic.com *.googleapis.com *.cloudfront.net *.yotpo.com *.cdninstagram.com *.facebook.com *.facebook.net *.google.com *.google.lk *.twitter.com *.pinterest.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com chimpstatic.com downloads.mailchimp.com *.list-manage.com maps.googleapis.com www.google.com www.gstatic.com maps.gstatic.com fonts.googleapis.com www.w3.org *.addthis.com/ *.moatads.com *.addthisedge.com m.addthis.com api-public.addthis.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.amazonaws.com *.google.com *.gstatic.com *.authorize.net *.cardinalcommerce.com *.googleapis.com *.cloudfront.net *.facebook.net *.newrelic.com *.nr-data.net *.googletagmanager.com *.yotpo.com cdn.rawgit.com *.twitter.com *.midtrans.com *.addtoany.com *.pinterest.com *.tumblr.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cloudflare.com https://www.googletagmanager.com tagmanager.google.com analytics.google.com unpkg.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.dnky.co webchat.dotdigital.com downloads.mailchimp.com maps.googleapis.com www.google.com www.gstatic.com maps.gstatic.com fonts.googleapis.com www.w3.org *.fontawesome.com *.amazonaws.com *.googleapis.com *.cloudfront.net *.yotpo.com unsafe-inline tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com *.addthis.com/ *.moatads.com *.addthisedge.com m.addthis.com api-public.addthis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.qiscus.com *.google-analytics.com *.cardinalcommerce.com *.amazonservices.com *.amazonservices.co.jp *.amazonservices.jp *.amazonservices.it *.amazonservices.fr *.amazonservices.es *.nr-data.net *.instagram.com *.dotdigital.com *.comapi.com *.paypal.com *.cloudfront.net *.facebook.com *.facebook.net *.doubleclick.net *.addtoany.com *.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com analytics.google.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com https://fonts.bunny.net use.fontawesome.com data: 'self' 'unsafe-inline'; form-action *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ js.mollie.com *.weltpixel.com *.addthis.com www.paypal.com www.sandbox.paypal.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.facebook.com https://www.mollie.com https://images.unsplash.com *.gstatic.com https://firebasestorage.googleapis.com www.paypal.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ connect.facebook.net js.mollie.com pay.google.com applepay.cdn-apple.com https://www.googletagmanager.com tagmanager.google.com s7.addthis.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.avada.io *.shopify.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com tagmanager.google.com https://cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net unsafe-inline assets.braintreegateway.com use.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com https://www.google-analytics.com ekr.zdassets.com/ https://get.geojs.io *.avada.io www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
child-src js.stripe.com; connect-src 'self' geoip-js.com api.stripe.com maps.googleapis.com www.paypal.com www.facebook.com; font-src use.typekit.net; form-action 'self' www.facebook.com; frame-src js.stripe.com hooks.stripe.com www.facebook.com www.paypal.com www.youtube.com; img-src 'self' cdn.buyoly.com data: dg6xfr3y1xvv2.cloudfront.net p.typekit.net t.paypal.com www.facebook.com; script-src-elem 'unsafe-inline' cdn.buyoly.com connect.facebook.net js.stripe.com use.typekit.net www.paypal.com geoip-js.com www.paypalobjects.com; script-src 'unsafe-inline' cdn.buyoly.com connect.facebook.net js.stripe.com maps.googleapis.com use.typekit.net; style-src-attr 'unsafe-inline'; style-src-elem 'unsafe-inline' cdn.buyoly.com code.jquery.com; style-src cdn.buyoly.com code.jquery.com; report-uri https://buyolympia.report-uri.com/r/d/csp/wizard 1
default-src 'self'; base-uri 'self'; frame-ancestors 'self'; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https://www.google-analytics.com https://secure.gravatar.com; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net; frame-src 'self' https://www.youtube.com https://player.vimeo.com; form-action 'self'; object-src 'none'; report-uri /api/csp-report; 1
font-src *.fontawesome.com *.gstatic.com maxcdn.bootstrapcdn.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com *.weltpixel.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.com/ https://www.youtube.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com www.google.com.ua https://www.magezon.com magefan.com cm.magefan.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.gstatic.com *.doubleclick.net *.cdninstagram.com *.fbcdn.net maps.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com www.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.gstatic.com *.googletagmanager.com *.doubleclick.net *.avada.io *.google.com/ ajax.googleapis.com *.instagram.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com www.gstatic.com *.fontawesome.com https://static.klaviyo.com *.googleapis.com *.googletagmanager.com maxcdn.bootstrapcdn.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google-analytics.com *.google.com *.doubleclick.net *.googlesyndication.com *.instagram.com *.googleusercontent.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com *.avada.io *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com https://get.geojs.io *.avada.io *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://use.typekit.net *.bing.com *.bootstrapcdn.com *.bunny.net *.jsdelivr.net *.degrootstoffen.nl https://dashboard.webwinkelkeur.nl data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com self www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com www.gstatic.com apis.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.sendcloud.sc *.jsdelivr.net https://dashboard.webwinkelkeur.nl 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com *.doofinder.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.amazonaws.com *.hsforms.net *.hsforms.com https://a.tile.openstreetmap.fr https://b.tile.openstreetmap.fr https://c.tile.openstreetmap.fr https://ct.pinterest.com https://api.taggrs.io https://www.google.nl https://mcusercontent.com *.etrusted.com https://imgsct.cookiebot.com *.bing.com *.webshopapp.com https://cdn.webshopapp.com *.degrootstoffen.nl https://dashboard.webwinkelkeur.nl data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.doofinder.com chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://browser.sentry-cdn.com *.googleapis.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.sendcloud.sc https://servicepoints.sendcloud.sc https://embed.sendcloud.sc *.hsforms.net *.hsforms.com https://consentcdn.cookiebot.com https://consent.cookiebot.com *.bing.com *.clickcease.com *.widget.trengo.eu *.trengo.eu https://s3.amazonaws.com https://www.clarity.ms https://scripts.clarity.ms *.degrootstoffen.nl https://static.cloudflareinsights.com https://api-js.datadome.co https://dashboard.webwinkelkeur.nl 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.doofinder.com downloads.mailchimp.com https://static.klaviyo.com *.fontawesome.com *.google.com assets.braintreegateway.com *.sendcloud.sc *.jsdelivr.net *.etrusted.com *.bunny.net *.degrootstoffen.nl 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.trengo.eu 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com *.doofinder.com wss://*.doofinder.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.ingest.sentry.io http://dpm.demdex.net https://www.google.com https://www.gstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.hotjar.com *.hotjar.io *.bing.com https://consentcdn.cookiebot.com https://consent.cookiebot.com *.trengo.eu https://s3.amazonaws.com https://n.clarity.ms https://s.clarity.ms *.degrootstoffen.nl https://api-js.datadome.co 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https: data: 'unsafe-inline' 'unsafe-eval'; report-uri /csp_report; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-6WDYz9aePnjfDQUXaRZ_Gg' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
frame-ancestors 'self'; report-uri /presentation/api/csp-report; report-to csp-endpoint, img-src 'self' data: blob: https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com https://googleads.g.doubleclick.net https://player.vimeo.com https://www.vimeo.com https://widget.trustpilot.com https://cdn.cookielaw.org https://static.affilae.com https://cdn.brevo.com https://sibautomation.com https://static.hotjar.com https://script.hotjar.com https://a.plerdy.com https://connect.facebook.net https://snap.licdn.com https://bat.bing.com https://storage.googleapis.com https://www.teledec.fr https://google.com https://www.google.fr https://region1.google-analytics.com https://region1.analytics.google.com https://analytics.google.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://pagead2.googlesyndication.com https://geolocation.onetrust.com https://privacyportal-eu.onetrust.com https://in-automate.brevo.com https://47231325.sibforms.com https://content.hotjar.io https://vc.hotjar.io https://metrics.hotjar.io https://px.ads.linkedin.com https://bat.bing.net https://snowplow.visma.com https://lb.affilae.com https://www.googleadservices.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://dv-c3e594c6d429469e90b54478358619c3.ecs.us-east-1.on.aws https://d3-36c34dc0877246a0b32c4f4e24be6ce8.ecs.us-east-1.on.aws https://bded8a3c6ae-1-1053047382554.us-central1.run.app https://vumbnail.com https://www.facebook.com; report-uri /presentation/api/csp-report; report-to csp-endpoint 1
default-src 'self' https: data: blob:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://sep.shaparak.ir 1
font-src https://forms.bigpixelstudio.com *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.fonts.googleapis.com *.gstatic.com data: *.cloudflare.com *.bigpixelstudio.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.instagram.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de forms.bigpixelstudio.com *.paypalobjects.com *.paypal.com sandbox.paypal.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com magento-cloudflare.jetrails.com www.youtube.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.google.com *.addthis.com *.pinterest.com *.bigpixelstudio.com https://forms.bigpixelstudio.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io *.cdninstagram.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de https://forms.bigpixelstudio.com www.sandbox.paypal.com *.ytimg.com https://firebasestorage.googleapis.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudflare.com https://cdn.klarna.com https://s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com *.bigpixelstudio.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.instagram.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com *.googleapis.com *.google.com *.gstatic.com *.avada.io *.shopify.com cdn.jsdelivr.net connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.bigpixelstudio.com https://forms.bigpixelstudio.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://forms.bigpixelstudio.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com https://fonts.bunny.net cdn.jsdelivr.net maxcdn.bootstrapcdn.com unsafe-inline *.bigpixelstudio.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https://forms.bigpixelstudio.com *.googleadservices.com https://get.geojs.io *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com *.avada.io *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cloudflare.com *.paypal.com *.googleapis.com *.addthis.com *.cardinalcommerce.com https://graph.instagram.com *.bigpixelstudio.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; connect-src 'self' https:; report-uri /csp-violation-report-endpoint 1
font-src *.gstatic.com *.globalpay.com https://fonts.gstatic.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.gpwebpay.com *.gpe.cz *.globalpay-ecommerce.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com account.fetchify.com *.americanexpress.com *.globalpay.com *.mastercard.com *.visa.com *.gpwebpay.com *.gpe.cz *.globalpay-ecommerce.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.trackedlink.net *.globalpay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.vimeo.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.aexp-static.com https://ajax.aspnetcdn.com *.globalpay.com *.gpapiservices.com https://pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com webchat.dotdigital.com webchat.staging.dotdigital.com cc-cdn.com https://fonts.googleapis.com unsafe-inline assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk https://google.com/pay api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
upgrade-insecure-requests; worker-src blob: https://tobaccofreeflorida.com/; object-src 'none'; script-src  'unsafe-eval' 'self' https://www.googletagmanager.com/ https://connect.facebook.net/	https://static.ads-twitter.com/ https://analytics.tiktok.com/ https://sc-static.net/ https://www.youtube.com/iframe_api https://www.google-analytics.com/ https://maps.googleapis.com/ https://play.google.com/ https://googleads.g.doubleclick.net/ https://tffl.wpengine.com/ https://www.youtube.com/ https://dashboard.chatfuel.com/ https://bat.bing.com/ https://action.media6degrees.com/ https://ajax.googleapis.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/releases/ https://tags.srv.stackadapt.com/ https://siterecruit.comscore.com/ https://code.jquery.com/ https://ajax.aspnetcdn.com/ https://cdn.jsdelivr.net/ https://cdnjs.cloudflare.com/ https://tag.simpli.fi/ https://i.simpli.fi 1
default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval' 1
font-src fonts.gstatic.com use.typekit.net fonts.googleapis.com *.fontawesome.com https://cdnjs.cloudflare.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io https://aheadworks.com axeptio.imgix.net a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org *.openstreetmap.org maps.googleapis.com maps.gstatic.com https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.axept.io maps.googleapis.com maps.gstatic.com fonts.googleapis.com https://maps.googleapis.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.googleapis.com https://cdnjs.cloudflare.com assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io api.axept.io client.axept.io maps.googleapis.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://googleads.g.doubleclick.net https://snap.licdn.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://apis.google.com https://cxppeur1rdrect01sa02cdn.blob.core.windows.net https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://mktdplp102cdn.azureedge.net https://googleads.g.doubleclick.net https://snap.licdn.com https://connect.facebook.net https://bat.bing.com https://script.hotjar.com https://static.hotjar.com https://*.clarity.ms https://www.youtube.com https://static.cdn.prismic.io; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https://hello.myfonts.net; style-src-elem 'self' 'unsafe-inline' https://hello.myfonts.net https://fonts.googleapis.com; script-src-elem 'self' 'unsafe-inline' https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://apis.google.com https://cxppeur1rdrect01sa02cdn.blob.core.windows.net https://cxppeur1rdrect01sa02cdn.blob.core.windows.net https://mktdplp102cdn.azureedge.net https://googleads.g.doubleclick.net https://snap.licdn.com https://connect.facebook.net https://bat.bing.com https://script.hotjar.com https://static.hotjar.com https://*.clarity.ms https://www.youtube.com https://static.cdn.prismic.io; img-src 'self' data: blob: https://*.cdn.prismic.io https://images.prismic.io https://prismic-io.s3.amazonaws.com https://i.ytimg.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.google.ae https://www.google.at https://www.google.az https://www.google.ba https://www.google.be https://www.google.bg https://www.google.bj https://www.google.by https://www.google.ca https://www.google.cg https://www.google.cd https://www.google.ch https://www.google.ci https://www.google.cm https://www.google.cl https://www.google.co.cr https://www.google.co.id https://www.google.co.il https://www.google.co.in https://www.google.co.jp https://www.google.co.ke https://www.google.co.kr https://www.google.co.ma https://www.google.co.nz https://www.google.co.th https://www.google.co.tz https://www.google.co.ug https://www.google.co.uk https://www.google.co.uz https://www.google.co.ve https://www.google.co.za https://www.google.com https://www.google.com.af https://www.google.com.ar https://www.google.com.au https://www.google.com.bd https://www.google.com.bh https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.com.co https://www.google.com.cy https://www.google.com.do https://www.google.com.ec https://www.google.com.eg https://www.google.com.et https://www.google.com.gh https://www.google.com.gt https://www.google.com.hk https://www.google.com.jm https://www.google.com.kh https://www.google.com.kw https://www.google.com.lb https://www.google.com.mm https://www.google.com.mx https://www.google.com.my https://www.google.com.ng https://www.google.com.np https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.ph https://www.google.com.pk https://www.google.com.py https://www.google.com.qa https://www.google.com.sa https://www.google.com.sg https://www.google.com.sv https://www.google.com.tr https://www.google.com.ua https://www.google.com.tw https://www.google.com.vn https://www.google.cz https://www.google.de https://www.google.dk https://www.google.dz https://www.google.ee https://www.google.es https://www.google.fi https://www.google.fr https://www.google.ge https://www.google.gr https://www.google.hr https://www.google.ht https://www.google.hn https://www.google.hu https://www.google.ie https://www.google.iq https://www.google.is https://www.google.it https://www.google.jo https://www.google.kz https://www.google.lk https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.md https://www.google.ml https://www.google.mu https://www.google.nl https://www.google.no https://www.google.pl https://www.google.ps https://www.google.pt https://www.google.ro https://www.google.rs https://www.google.ru https://www.google.rw https://www.google.sc https://www.google.se https://www.google.si https://www.google.sk https://www.google.sn https://www.google.tn https://www.googleadservices.com https://*.ads.linkedin.com https://bat.bing.com https://c.bing.com https://*.clarity.ms https://www.facebook.com https://pagead2.googlesyndication.com https://www.vitronic.com; font-src 'self' data: https://fonts.gstatic.com; media-src 'self' https://*.cdn.prismic.io https://images.prismic.io https://prismic-io.s3.amazonaws.com; connect-src 'self' https://*.prismic.io https://*.cdn.prismic.io https://vitronic.csod.com https://*.svc.dynamics.com https://*.mkt.dynamics.com https://cxppusa1formui01cdnsa01-endpoint.azureedge.net https://hello.myfonts.net https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://mobile.events.data.microsoft.com https://google.com https://www.google.com https://analytics.google.com https://*.analytics.google.com https://www.googleadservices.com https://ad.doubleclick.net https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://*.ads.linkedin.com https://bat.bing.com https://www.facebook.com https://*.clarity.ms https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://www.vitronic.com; frame-src https://www.youtube-nocookie.com https://www.youtube.com https://player.youku.com https://www.google.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.facebook.com https://www.googletagmanager.com https://static.vitronic.com https://toolytics.pa.clients6.google.com https://*.prismic.io; frame-ancestors 'self' https://*.prismic.io; base-uri 'self'; object-src 'none'; report-uri /api/csp-report; report-to csp-endpoint 1
font-src *.googleapis.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com fonts.gstatic.com *.fonts.googleapis.com data: *.cloudflare.com *.yotpo.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.facebook.com *.googlesyndication.com https://plumrocket.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.com *.doubleclick.net www.facebook.com *.googlesyndication.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com connect.facebook.net graph.facebook.com business.facebook.com td.doubleclick.net www.googletagmanager.com https://plumrocket.com *.addthis.com *.pinterest.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.gstatic.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de 'self' data: *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com www.google.co.in *.cloudflare.com https://cdn.klarna.com https://s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.addthis.com *.pinterest.com *.cdninstagram.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.googleapis.com *.gstatic.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com connect.facebook.net graph.facebook.com business.facebook.com *.avada.io s7.addthis.com www.googletagmanager.com googleads.g.doubleclick.net *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.google-analytics.com www.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com connect.facebook.net graph.facebook.com business.facebook.com https://get.geojs.io *.avada.io google.com www.google.com analytics.google.com stats.g.doubleclick.net www.googletagmanager.com *.a.run.app *.cloudflare.com *.paypal.com *.addthis.com *.cardinalcommerce.com https://graph.instagram.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.sagepay.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.sagepay.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.sagepay.com *.eu.elavon.com *.opayo.cloud *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.sagepay.com *.eu.elavon.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https: data:; connect-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 1
default-src 'self'; img-src 'self' https: data:; script-src 'self' 'nonce-YThmNDQ4MTEyYmNkNDg0ZD' 'strict-dynamic' https://www.googletagmanager.com https://www.google-analytics.com https://www.clarity.ms https://diffuser-cdn.app-us1.com https://trackcmp.net https://connect.facebook.net https://bzrcdn.openai.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; connect-src 'self' http://127.0.0.1:4001 https://*.sentry.io https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.clarity.ms https://c.bing.com https://trackcmp.net https://*.app-us1.com https://www.facebook.com https://bzr.openai.com https://bzrcdn.openai.com https://cloudflareinsights.com; frame-ancestors 'none'; report-uri /api/security/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://*.gstatic.com https://*.googlesyndication.com https://*.doubleclick.net https://*.adtrafficquality.google https://cdn.jwplayer.com https://content.jwplatform.com https://cdn.plyr.io https://www.youtube.com https://s.ytimg.com https://cdn.jsdelivr.net https://*.idonate.com https://connect.facebook.net https://snap.licdn.com https://static.ads-twitter.com https://rum-static.pingdom.net https://*.branch.io https://app.link https://*.usercentrics.eu https://*.clarity.ms https://*.bing.com https://*.adsrvr.org https://*.agkn.com https://*.mpio.io https://g10498469755.co https://*.faithassistant.com https://*.usefaithbase.com https://*.ltw.org https://*.i.posthog.com https://online.flippingbook.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.gstatic.com https://cdn.plyr.io; img-src 'self' data: blob: https:; font-src 'self' data: https://*.gstatic.com; connect-src 'self' https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googleapis.com https://*.gstatic.com https://*.googlesyndication.com https://*.doubleclick.net https://*.adtrafficquality.google https://www.googleadservices.com https://google.com https://*.ltw.org https://cdn.jwplayer.com https://cdn.plyr.io https://noembed.com https://vimeo.com https://*.mux.com https://*.litix.io https://api.esv.org https://*.algolia.net https://*.algolianet.com https://*.facebook.com https://*.facebook.net https://px.ads.linkedin.com https://*.twitter.com https://t.co https://*.branch.io https://rum-collector-2.pingdom.net https://*.usercentrics.eu https://*.clarity.ms https://*.bing.com https://*.bing.net https://*.adsrvr.org https://*.agkn.com https://*.mpio.io https://*.faithassistant.com https://*.usefaithbase.com https://*.i.posthog.com https://*.idonate.com https://fbo-b.flippingbook.com https://www.google.com https://www.google.ad https://www.google.ae https://www.google.com.af https://www.google.com.ag https://www.google.al https://www.google.am https://www.google.co.ao https://www.google.com.ar https://www.google.as https://www.google.at https://www.google.com.au https://www.google.az https://www.google.ba https://www.google.com.bd https://www.google.be https://www.google.bf https://www.google.bg https://www.google.com.bh https://www.google.bi https://www.google.bj https://www.google.com.bn https://www.google.com.bo https://www.google.com.br https://www.google.bs https://www.google.bt https://www.google.co.bw https://www.google.by https://www.google.com.bz https://www.google.ca https://www.google.cd https://www.google.cf https://www.google.cg https://www.google.ch https://www.google.ci https://www.google.co.ck https://www.google.cl https://www.google.cm https://www.google.cn https://www.google.com.co https://www.google.co.cr https://www.google.com.cu https://www.google.cv https://www.google.com.cy https://www.google.cz https://www.google.de https://www.google.dj https://www.google.dk https://www.google.dm https://www.google.com.do https://www.google.dz https://www.google.com.ec https://www.google.ee https://www.google.com.eg https://www.google.es https://www.google.com.et https://www.google.fi https://www.google.com.fj https://www.google.fm https://www.google.fr https://www.google.ga https://www.google.ge https://www.google.gg https://www.google.com.gh https://www.google.com.gi https://www.google.gl https://www.google.gm https://www.google.gr https://www.google.com.gt https://www.google.gy https://www.google.com.hk https://www.google.hn https://www.google.hr https://www.google.ht https://www.google.hu https://www.google.co.id https://www.google.ie https://www.google.co.il https://www.google.im https://www.google.co.in https://www.google.iq https://www.google.is https://www.google.it https://www.google.je https://www.google.com.jm https://www.google.jo https://www.google.co.jp https://www.google.co.ke https://www.google.com.kh https://www.google.ki https://www.google.kg https://www.google.co.kr https://www.google.com.kw https://www.google.kz https://www.google.la https://www.google.com.lb https://www.google.li https://www.google.lk https://www.google.co.ls https://www.google.lt https://www.google.lu https://www.google.lv https://www.google.com.ly https://www.google.co.ma https://www.google.md https://www.google.me https://www.google.mg https://www.google.mk https://www.google.ml https://www.google.com.mm https://www.google.mn https://www.google.com.mt https://www.google.mu https://www.google.mv https://www.google.mw https://www.google.com.mx https://www.google.com.my https://www.google.co.mz https://www.google.com.na https://www.google.com.ng https://www.google.com.ni https://www.google.ne https://www.google.nl https://www.google.no https://www.google.com.np https://www.google.nr https://www.google.nu https://www.google.co.nz https://www.google.com.om https://www.google.com.pa https://www.google.com.pe https://www.google.com.pg https://www.google.com.ph https://www.google.com.pk https://www.google.pl https://www.google.pn https://www.google.com.pr https://www.google.ps https://www.google.pt https://www.google.com.py https://www.google.com.qa https://www.google.ro https://www.google.ru https://www.google.rw https://www.google.com.sa https://www.google.com.sb https://www.google.sc https://www.google.se https://www.google.com.sg https://www.google.sh https://www.google.si https://www.google.sk https://www.google.com.sl https://www.google.sn https://www.google.so https://www.google.sm https://www.google.sr https://www.google.st https://www.google.com.sv https://www.google.td https://www.google.tg https://www.google.co.th https://www.google.com.tj https://www.google.tl https://www.google.tm https://www.google.tn https://www.google.to https://www.google.com.tr https://www.google.tt https://www.google.com.tw https://www.google.co.tz https://www.google.com.ua https://www.google.co.ug https://www.google.co.uk https://www.google.com.uy https://www.google.co.uz https://www.google.com.vc https://www.google.co.ve https://www.google.co.vi https://www.google.com.vn https://www.google.vu https://www.google.ws https://www.google.rs https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.cat; frame-src 'self' https://*.ltw.org https://www.youtube.com https://www.youtube-nocookie.com https://player.simplecast.com https://vimeo.com https://player.vimeo.com https://players.brightcove.net https://*.idonate.com https://*.list-manage.com https://www.googletagmanager.com https://www.google.com https://*.doubleclick.net https://*.googlesyndication.com https://*.adsrvr.org https://*.adtrafficquality.google https://www.facebook.com https://*.usercentrics.eu https://*.faithassistant.com https://*.usefaithbase.com; media-src 'self' https: blob: data:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://*.list-manage.com https://*.idonate.com https://www.facebook.com; report-uri https://us.i.posthog.com/report/?token=phc_vPwQFuzx53coxqVhdjfuvNUFb8GscPm6syMLYQwBzFgU&v=1&sample_rate=0.05; report-to posthog 1
default-src 'self'; base-uri 'self'; connect-src 'self' https://statistieken.iwink.nl https://*.google-analytics.com https://www.google.com/recaptcha/; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://www.google.com https://www.youtube-nocookie.com https://player.vimeo.com https://sgmt.tap-ag.com:81 https://anyflip.com; frame-ancestors 'self'; form-action 'self'; img-src 'self' data: https://fonts.gstatic.com https://i.ytimg.com https://www.gstatic.com https://www.googletagmanager.com https://statistieken.iwink.nl https://jsstatic.services.kirra.nl https://i.vimeocdn.com/video/; manifest-src 'self'; media-src 'self'; object-src 'none'; script-src 'nonce-faa79293ee988e0987d9e61da2fda281' 'strict-dynamic' 'inline-speculation-rules' 'wasm-unsafe-eval'; style-src 'nonce-faa79293ee988e0987d9e61da2fda281' 'self'; style-src-elem 'nonce-faa79293ee988e0987d9e61da2fda281' 'self' https://jsstatic.services.kirra.nl/ajax/libs/icalendar/2.3/css/icalendar.css; worker-src 'none' 1
object-src 'none';base-uri 'self';script-src 'nonce-tKg9FhlRqq-i_FZ4ltbpKA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://js-eu1.hs-scripts.com https://js-eu1.hs-analytics.net https://js-eu1.hs-banner.com https://js-eu1.hscollectedforms.net https://js.hsforms.net https://js-eu1.hsforms.net https://*.hubspot.com https://*.hs-scripts.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hscollectedforms.net https://*.hsforms.com https://cdnjs.cloudflare.com https://static.cloudflareinsights.com https://use.typekit.net https://use.typekit.com https://pi.pardot.com https://snap.licdn.com https://info.quorumcyber.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.typekit.net https://use.typekit.com https://p.typekit.net https://cdnjs.cloudflare.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://use.typekit.net https://use.typekit.com https://*.typekit.net https://*.typekit.com; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googlesyndication.com https://*.hubspot.com https://*.hubapi.com https://*.hs-analytics.net https://*.hscollectedforms.net https://*.hsforms.com https://*.cloudflareinsights.com https://px.ads.linkedin.com https://*.linkedin.com https://info.quorumcyber.com; frame-src 'self' https:; media-src 'self' blob: https:; worker-src 'self' blob:; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self' https:; report-uri https://3771445c75bff0caca171f902c43ca9e.report-uri.com/r/d/csp/reportOnly; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com https://browser.sentry-cdn.com https://e.comparethecloud.net https://eu.posthog.com https://*.posthog.com https://chat.comparethecloud.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://e.comparethecloud.net https://eu.posthog.com https://*.posthog.com https://ingest.maple.dev https://*.ingest.de.sentry.io https://*.ingest.sentry.io https://cloudflareinsights.com https://static.cloudflareinsights.com https://tiles.openfreemap.org https://nominatim.openstreetmap.org https://chat.comparethecloud.net wss://chat.comparethecloud.net; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://stream.mux.com https://www.openstreetmap.org https://*.iubenda.com https://chat.comparethecloud.net; media-src 'self' blob: https://stream.mux.com https://*.mux.com; worker-src 'self' blob:; child-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.pusher.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https: wss:; frame-src https:; frame-ancestors *; form-action 'self' https:; worker-src 'self' blob:; manifest-src 'self' 1
script-src 'nonce-WbhZ6GqV5Y/Rfjkj8B9IkQ==' 'self' 'unsafe-eval' cdn.orsted.com *.googletagmanager.com *.app.cookieinformation.com cdn.appdynamics.com *.googletagmanager.com *.gstatic.com *.googleoptimize.com www.googleadservices.com *.googleapis.com *.bing.com *.doubleclick.net *.t.co *.pardot.com *.youtube.com *.linkedin.com *.twitter.com *.globenewswire.com *.23video.com delivery.twentythree.com orsted.containers.piwik.pro orsted.piwik.pro *.crazyegg.com unpkg.com cs.lf-discover.com *.puzzel.com *.arcgis.com code.jquery.com *.lfeeder.com orsted-global-graduate-programme.simplecast.com omny.fm cdnjs.cloudflare.com *.bootstrapcdn.com *.defgo.com *.defgo.net *.vimeo.com presscloud.com *.ritzau.dk *.simplecast.com *.elnet.danskenergi.dk *.sli.do *.audioboom.com *.licdn.com *.adsrvr.org *.soundcloud.com *.google.com *.google.com.my *.google.nl *.google.dk *.facebook.net;       style-src 'nonce-WbhZ6GqV5Y/Rfjkj8B9IkQ==' 'self' cdn.orsted.com fonts.googleapis.com;       style-src-attr 'unsafe-inline' cdn.orsted.com;       img-src 'self' data: cdn.orsted.com *.azureedge.net *.youtube.com *.23video.com delivery.twentythree.com www.googletagmanager.com *.lfeeder.com *.linkedin.com *.doubleclick.net *.pardot.com;       media-src 'self' blob: cdn.orsted.com *.youtube.com *.23video.com delivery.twentythree.com;       font-src 'self' data: fonts.gstatic.com cdn.orsted.com;       frame-src 'self' *.app.cookieinformation.com *.youtube.com *.23video.com delivery.twentythree.com *.google.com *.google.nl *.googletagmanager.com *.doubleclick.net *.pardot.com;       connect-src 'self' *.app.cookieinformation.com *.euroland.com *.eum-appdynamics.com *.googletagmanager.com *.google.com *.doubleclick.net *.googleadservices.com *.crazyegg.com *.linkedin.com orsted.piwik.pro *.pardot.com *.signalfx.com;       worker-src 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: wss:; frame-src https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
font-src maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.googletagmanager.com *.google-analytics.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.googletagmanager.com *.google-analytics.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com *.googletagmanager.com *.google-analytics.com *.stats.g.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.googleapis.com *.gstatic.com data: fonts.gstatic.com fonts.googleapis.com use.typekit.net *.fontawesome.com *.cloudflare.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.google.be *.google.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com c.sharethis.mgr.consensu.org *.facebook.com *.googletagmanager.com js.mollie.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com *.facebook.com *.google.be *.google.com *.sharethis.com *.apik-pp.be *.bird.eu maps.gstatic.com maps.googleapis.com https://www.mollie.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ platform-api.sharethis.com buttons-config.sharethis.com *.googletagmanager.com connect.facebook.net *.google-analytics.com secure.authorize.net *.authorize.net static.hotjar.com script.hotjar.com maps.googleapis.com *.facebook.net www.termsfeed.com js.mollie.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com fonts.gstatic.com use.typekit.net p.typekit.net *.fontawesome.com *.cloudflare.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com l.sharethis.com *.google-analytics.com *.analytics.google.com *.doubleclick.net *.paypal.com *.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' 'unsafe-inline' *.VLeBooks.com *.vlereader.com; script-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' *.vlebooks.com *.vlereader.com apis.google.com cdn.segment.com/next-integrations/actions www.google-analytics.com www.googletagmanager.com;  script-src-elem 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline'  *.vlebooks.com *.vlereader.com apis.google.com cdn.segment.com/next-integrations/actions www.google-analytics.com www.googletagmanager.com; style-src 'report-sample' 'self' 'unsafe-inline' 'unsafe-eval' *.VLeBooks.com *.vlereader.com ajax.aspnetcdn.com fonts.googleapis.com; style-src-attr 'report-sample' 'self' 'unsafe-inline' ;  style-src-elem 'report-sample' 'self' 'unsafe-inline' assets.braintreegateway.com fonts.googleapis.com/css;  child-src 'self' blob:; connect-src 'self' 'unsafe-inline' 'unsafe-eval' *.VLeBooks.com *.vlereader.com https://region1.google-analytics.com https://www.google-analytics.com *.idm.oclc.org/ *.qmul.ac.uk/ *.open.ac.uk/ *.bath.ac.uk/ *.uwtsd.ac.uk/ *.bolton.ac.uk/; font-src 'self' 'unsafe-inline' data: *.VLeBooks.com *.vlereader.com ajax.aspnetcdn.com cdn.jsdelivr.net cdn.scite.ai fonts.gstatic.com static.preply.com; frame-ancestors 'self' *.vlereader.com *.vlebooks.com www.vlebooks.com; frame-src 'report-sample' 'self' *.vlebooks.com *.vlereader.com; img-src 'self' blob: data: https: *.VLeBooks.com *.vlereader.com *.dmmserver.com *.gardners.com http://jackets.gardners.com ; object-src 'none'; base-uri 'self'; manifest-src 'self' *.idm.oclc.org/pwa_manifest.json *.qmul.ac.uk *.open.ac.uk *.bath.ac.uk *.uwtsd.ac.uk *.bolton.ac.uk; media-src 'self'; worker-src blob:; report-uri https://679259fe8ff833a6e12adf10.endpoint.csper.io?v=9; 1
default-src https: blob: https://*.experimentation.dev:* https://tbs.tradedoubler.com:* https://*.scene7.com:* https://*.stenaline.com:* https://stenalinetravel.com:* wss://api.ebiai.app:*; script-src 'unsafe-inline' 'unsafe-eval' blob: https://static.experimentation.dev:* https://stenalinescandinaviaab.d3.sc.omtrdc.net:* https://*.kameleoon.io:* https://*.kameleoon.eu:* https://*.kameleoon.com:* https://*.kameleoon.net:* https://*.scene7.com:* https://sembo-inspire-apis.sembo.travel:*/stenaline-search-component/latest/stenaline-search-component.js https://challenges.cloudflare.com:*/turnstile/v0/api.js https://www.google.com:*/recaptcha/api.js https://www.gstatic.com:*/recaptcha/releases/ https://analytics.tiktok.com:* https://widget.trustpilot.com:* https://p.teads.tv:*/teads-fellow.js https://bat.bing.com:* https://googleads.g.doubleclick.net:* https://acrobatservices.adobe.com:* https://cdn.cookielaw.org:* https://*.mouseflow.com:* https://documentservices.adobe.com:* https://www.google-analytics.com:* https://www.googletagmanager.com:* https://connect.facebook.net:* https://messenger.ebiai.app:* https://www.stenalinetravel.com/etc.clientlibs:* https://www.stenalinetravel.com:* https://*.stenaline.com:* https://*.stenalinetravel.com:* https://stenaline.com:* https://assets.adobedtm.com:*; img-src data: https: https://static.experimentation.dev:* https://*.scene7.com:*; style-src 'self' 'unsafe-inline' https://static.experimentation.dev:* https://*.scene7.com:* https://acrobatservices.adobe.com:* https://*.stenaline.com:* https://stenaline.com:* https://stenalinetravel.com:*; object-src 'none';  frame-ancestors 'self' https://static.experimentation.dev:* https://*.stenaline.com https://*.stenalinetravel.com 1
base-uri 'self' ;connect-src https: ;default-src 'self' ;font-src 'self' https: data: ;form-action 'self' https://*.mett.nl ;frame-ancestors 'self' ;frame-src https: ;img-src https: data: blob: ;object-src 'self' ;script-src 'self' 'unsafe-inline' 'unsafe-eval' https: ;script-src-attr 'self' 'unsafe-inline' https: ;script-src-elem 'self' 'unsafe-inline' https: ;style-src 'self' 'unsafe-inline' https: ;style-src-elem 'self' 'unsafe-inline' https: ;worker-src 'self' https: blob: ;report-uri https://www.vrijwilligerswerk.nl/api/csp/RecordReport; 1
img-src 'self' data: https://pixel.wp.com https://www.googletagmanager.com https://www.google.com https://connect.facebook.net https://stats.g.doubleclick.net https://www.tuttoperlestetica.com; default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://cdn.jsdelivr.net https://yoast.com https://widget.trustpilot.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://www.tuttoperlestetica.com; font-src 'self' https://fonts.gstatic.com data:; 1
object-src 'none';base-uri 'self';script-src 'nonce-DHYqv9ucwH9PmBKjs_UjYQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'nonce-IZLW4k7ALeLM8UFxSjHUxA==' 'strict-dynamic' https: 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; media-src 'self' https:; font-src 'self'; connect-src 'self' https://backend.dokanmazad.com wss://backend.dokanmazad.com; frame-src https://www.googletagmanager.com https://www.google.com https://maps.google.com; object-src 'none'; base-uri 'none'; frame-ancestors 'self'; require-trusted-types-for 'script' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://sales-stryke.s3.us-east-2.amazonaws.com https://www.clarity.ms https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://tagmanager.google.com https://js.adsrvr.org; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://atlas.microsoft.com; font-src 'self' https://fonts.gstatic.com https://atlas.microsoft.com; img-src 'self' data: https:; connect-src 'self' https://*.azure-api.net https://*.azurefd.net https://*.azurewebsites.net https://*.firebaseapp.com https://*.firebasestorage.app https://*.firebaseio.com wss://*.firebaseio.com https://atlas.microsoft.com https://*.applicationinsights.azure.com https://*.livediagnostics.monitor.azure.com https://dc.applicationinsights.azure.com https://clarity.microsoft.com https://www.clarity.ms https://www.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://www.google.com https://insight.adsrvr.org https://match.adsrvr.org; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://tagmanager.google.com https://payment.lrsrecycles.com https://lrs-prd-tow-etrl.amcsplatform.com https://secure.soft-pak.com https://myaccount.gflenv.com https://www.google.com; media-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; worker-src 'self' blob: 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://pagead2.googlesyndication.com https://securepubads.g.doubleclick.net https://tpc.googlesyndication.com https://partner.googleadservices.com https://www.google.com https://cse.google.com https://www.gstatic.com https://ep2.adtrafficquality.google https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://code.jquery.com https://static.cloudflareinsights.com https://connect.facebook.net https://static.landbot.io; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.google.com; img-src 'self' https: data:; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https:; frame-src 'self' https://www.google.com https://ep2.adtrafficquality.google https://*.safeframe.googlesyndication.com https://cm.g.doubleclick.net https://pagead2.googlesyndication.com https://syndicatedsearch.goog https://www.youtube.com https://www.facebook.com https://cdn.flipsnack.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; report-uri /csp-report.php; report-to csp-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://va.vercel-scripts.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://va.vercel-scripts.com https://vitals.vercel-insights.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://client.crisp.chat https://us-assets.i.posthog.com https://static.ads-twitter.com https://snap.licdn.com https://va.vercel-scripts.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com; style-src 'self' 'unsafe-inline' https://client.crisp.chat; img-src 'self' data: blob: https:; font-src 'self' data: https://client.crisp.chat; connect-src 'self' https://cloud-api.near.ai https://us.i.posthog.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://*.linkedin.com https://*.twitter.com https://*.crisp.chat wss://*.crisp.chat; frame-src 'self' https://client.crisp.chat https://td.doubleclick.net https://bid.g.doubleclick.net https://www.googletagmanager.com; worker-src 'self' blob:; form-action 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none' 1
default-src 'self'; img-src 'self' https://cdn.shopify.com https://cdn.sanity.io https://cdn.builder.io; script-src 'self' https://www.googletagmanager.com; 1
font-src *.googleapis.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io https://cdn-scripts.signifyd.com https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src https://www.gstatic.com https://fonts.gstatic.com *.gstatic.com 'self' data: https://dashboard.webwinkelkeur.nlfonts/webandbrand.woff fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com *.pinterest.com *.facebook.com *.cookiebot.com *.googletagmanager.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.google.com https://dashboard.webwinkelkeur.nl www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https://static.buckaroo.nl *.google.nl *.bing.com *.pinterest.com *.facebook.com *.cookiebot.com *.clarity.ms *.googlesyndication.com https://images.unsplash.com magefan.com cm.magefan.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com *.disqus.com https://meetanshi.com/media/logo.png *.cdninstagram.com/ https://redchamps.com 'self' data: www.xtento.com cdn.xtento.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl *.zopim.com *.unpkg.com unpkg.com *.zdassets.com *.bing.com *.pinimg.com *.facebook.net *.clarity.ms *.futy.io *.feedbackcompany.com *.cookiebot.com *.pinterest.com *.webwinkelkeur.nl https://polyfill-fastly.io https://browser.sentry-cdn.com *.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.disqus.com *.gstatic.com https://dashboard.webwinkelkeur.nl/sidebar.js www.xtento.com cdn.xtento.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl *.zopim.com wss://widget-mediator.zopim.com *.amazonaws.com *.clarity.ms *.pinterest.com *.futy.io *.feedbackcompany.com *.doubleclick.net https://google.com/ccm/* *.cookiebot.com *.googlesyndication.com https://*.ingest.sentry.io https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com t.elasticsuite.io *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com 'self' data: https://widgets.trustedshops.com d3otxgxltntbw8.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * d3otxgxltntbw8.cloudfront.net 'self' 'unsafe-inline'; frame-ancestors ; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com landofcoder.com https://www.googletagmanager.com/ *.facebook.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.sendcloud.sc *.jsdelivr.net d3otxgxltntbw8.cloudfront.net consentcdn.cookiebot.com td.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.cdninstagram.com maps.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.amazonaws.com *.hsforms.net *.hsforms.com 'self' data: https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com d3otxgxltntbw8.cloudfront.net bat.bing.com imgsct.cookiebot.com www.google.pl www.google.de px.ads.linkedin.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ landofcoder.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ player.vimeo.com connect.facebook.net cdnjs.cloudflare.com maps.googleapis.com www.facebook.com graph.facebook.com business.facebook.com js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.sendcloud.sc *.jsdelivr.net *.hsforms.net *.hsforms.com *.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com d3otxgxltntbw8.cloudfront.net consent.cookiebot.com bat.bing.com analytics.webgains.io diffuser-cdn.app-us1.com consentcdn.cookiebot.com prism.app-us1.com trackcmp.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com assets.braintreegateway.com *.sendcloud.sc *.jsdelivr.net *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com d3otxgxltntbw8.cloudfront.net 'self' 'unsafe-inline'; object-src landofcoder.com d3otxgxltntbw8.cloudfront.net 'self' data: 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ d3otxgxltntbw8.cloudfront.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ landofcoder.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ maps.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com places.googleapis.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site d3otxgxltntbw8.cloudfront.net region1.analytics.google.com bat.bing.com www.google.com googleads.g.doubleclick.net consentcdn.cookiebot.com www.google.pl www.google.de pagead2.googlesyndication.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com d3otxgxltntbw8.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com data: *.fontawesome.com https://fonts.bunny.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors https://www.youtube.com https://www.google.com/maps https://www.google.com/ https://insight.adsrvr.org/ https://assets.adobedtm.com/ https://adobe.com/ *.meetanshi.com meetanshi.com https://code.tidio.co/ 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://songbird.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://*.cardinalcommerce.com https://*.centinelapi.cardinalcommerce.com https://insight.adsrvr.org/ https://assets.adobedtm.com/ https://adobe.com/ https://code.tidio.co/ https://c1.websitealive.com http://tracking-v3.websitealive.com https://tracking-v3.websitealive.com *.meetanshi.com meetanshi.com *.dnky.co c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.websitealive.com *.meetanshi.com meetanshi.com https://firebasestorage.googleapis.com *.rapidscansecure.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com https://cdn1.ebizcharge.net https://songbird.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://cdnjs.cloudflare.com https://insight.adsrvr.org/ https://assets.adobedtm.com/ https://adobe.com/ https://code.tidio.co/ https://www.sagepayments.net https://www.google.com https://www.gstatic.com http://tracking-v3.websitealive.com https://r2-t.trackedlink.net https://cdnjs.cloudflare.com/ https://unpkg.com/ *.meetanshi.com meetanshi.com *.avada.io *.shopify.com *.dnky.co *.rapidscansecure.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com http://tracking-v3.websitealive.com *.fontawesome.com https://fonts.bunny.net *.dnky.co assets.braintreegateway.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com 3dsapi.ebizcharge.net kg668dbov0.execute-api.us-east-1.amazonaws.com ebizcharge3ds-staging1.azurewebsites.net https://songbird.cardinalcommerce.com https://centinelapi.cardinalcommerce.com https://cdnjs.cloudflare.com https://insight.adsrvr.org/ https://assets.adobedtm.com/ https://adobe.com/ https://code.tidio.co/ *.meetanshi.com meetanshi.com https://get.geojs.io *.avada.io *.tidio.com tidio.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.gstatic.com https://fonts.bunny.net *.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.tawk.to *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com https://www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.tawk.to *.wesupply.xyz https://wesupplylabs.com guarantee-cdn.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.tawk.to tawk.link cdn.jsdelivr.net s3.amazonaws.com/ guarantee-cdn.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.certcapture.com widget.freshworks.com m2epro.freshdesk.com https://www.gstatic.com https://www.recaptcha.net *.googletagmanager.com *.google-analytics.com *.googlesyndication.com *.doubleclick.net *.googleadservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://cdn.jsdelivr.net *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://cdn.searchspring.net/intellisuggest/is.min.js *.tawk.to cdn.jsdelivr.net *.cloudflare.com guarantee-cdn.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com https://fonts.googleapis.com https://static.klaviyo.com https://fonts.bunny.net assets.braintreegateway.com *.tawk.to cdn.jsdelivr.net *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tawk.to tawk.link 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.certcapture.com widget.freshworks.com m2epro.freshdesk.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://beacon.searchspring.io/beacon *.tawk.to wss://*.tawk.to *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.authorize.net *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.xtento.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.addthis.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.xtento.com cdn.xtento.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.authorize.net assets.secure.checkout.visa.com sandbox.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com *.hsforms.net *.hsforms.com 'self' data: *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.xtento.com cdn.xtento.com *.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com *.hsforms.net *.hsforms.com *.gstatic.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com unsafe-inline assets.braintreegateway.com *.googleapis.com *.gstatic.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.addthis.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://cdn.jsdelivr.net https://accounts.google.com https://apis.google.com https://maps.googleapis.com https://maps.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://b2d.marcoser.ro https://t.themarketer.com https://widget.trusted.ro https://storage.trafic.ro https://secure.trafic.ro; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /csp-report.php 1
font-src *.yotpo.com *.googleapis.com *.gstatic.com *.cochranesupply.com *.cochranetechservices.com *.controlscon.com *.google.com *.googletagmanager.com *.twitter.com *.tiktok.com *.spotify.com *.soundcloud.com www.cochranesupply.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com www.cochranesupply.com 'self' 'unsafe-inline'; frame-ancestors www.cochranesupply.com 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.yotpo.com *.weltpixel.com *.cochranesupply.com *.cochranetechservices.com *.controlscon.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.twitter.com *.tiktok.com *.spotify.com *.soundcloud.com www.cochranesupply.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de validate.fishpig.co.uk *.yotpo.com *.gstatic.com *.cochranesupply.com *.cochranetechservices.com *.controlscon.com *.google.com *.googleapis.com *.googletagmanager.com *.w.org *.twitter.com www.cochranesupply.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.gstatic.com *.google.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.yotpo.com https://www.googletagmanager.com tagmanager.google.com analytics.google.com *.cochranesupply.com *.cochranetechservices.com *.controlscon.com *.googleapis.com *.googletagmanager.com *.sheetjs.com *.twitter.com *.tiktok.com *.tiktokcdn-us.com www.cochranesupply.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.yotpo.com *.googleapis.com tagmanager.google.com *.cochranesupply.com *.cochranetechservices.com *.controlscon.com *.google.com *.googletagmanager.com *.gstatic.com *.tiktokcdn-us.com www.cochranesupply.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.cochranesupply.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.yotpo.com *.google-analytics.com analytics.google.com www.cochranesupply.com 'self' 'unsafe-inline'; child-src www.cochranesupply.com http: https: blob: 'self' 'unsafe-inline'; default-src www.cochranesupply.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://*.google-analytics.com https://www.google.com https://www.gstatic.com https://ajax.googleapis.com https://maps.google.com https://maps.googleapis.com https://connect.facebook.net https://*.hotjar.com https://*.clarity.ms https://bat.bing.com https://*.bing.com https://snap.licdn.com https://pixel.byspotify.com https://*.sharethis.com https://aws.predictiveresponse.net https://*.adsrvr.org https://proxy.csidetm.com https://browser-update.org https://*.readspeaker.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.sharethis.com; img-src 'self' data: blob: https://*.google-analytics.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://*.g.doubleclick.net https://*.doubleclick.net https://www.facebook.com https://*.facebook.com https://*.hotjar.com https://*.clarity.ms https://c.bing.com https://*.bing.com https://px.ads.linkedin.com https://*.licdn.com https://*.adsrvr.org https://*.sharethis.com https://i.vimeocdn.com https://*.vimeocdn.com https://img.youtube.com https://aws.predictiveresponse.net https://www.google.com.au https://*.rubiconproject.com https://*.casalemedia.com https://*.adnxs.com https://s3-ap-southeast-2.amazonaws.com https://*.readspeaker.com; font-src 'self' data: https://fonts.gstatic.com https://*.hotjar.com; frame-src 'self' https://www.google.com https://player.vimeo.com https://www.youtube.com https://www.youtube-nocookie.com https://connect.facebook.net https://www.facebook.com https://web.facebook.com https://*.sharethis.com https://*.adsrvr.org https://*.doubleclick.net https://maps.google.com https://s3-ap-southeast-2.amazonaws.com; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://stats.g.doubleclick.net https://www.google.com https://maps.googleapis.com https://connect.facebook.net https://www.facebook.com https://*.facebook.com https://*.hotjar.com wss://*.hotjar.com https://*.clarity.ms https://bat.bing.com https://*.bing.com https://px.ads.linkedin.com https://*.licdn.com https://pixel.byspotify.com https://*.sharethis.com https://aws.predictiveresponse.net https://*.adsrvr.org https://proxy.csidetm.com https://*.doubleclick.net https://pixels.spotify.com https://*.hotjar.io wss://*.hotjar.io https://v5-b75ccb2b73c54aa4a5098ab7f8533696.ecs.us-east-2.on.aws https://*.readspeaker.com; media-src 'self' https://*.vimeocdn.com https://s3-ap-southeast-2.amazonaws.com https://*.readspeaker.com; worker-src 'self' blob:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://tagmanager.google.com https://www.google.com https://www.gstatic.com https://apis.google.com https://js.stripe.com https://m.stripe.network https://*.paypal.com https://*.paypalobjects.com https://*.braintreegateway.com https://*.braintree-api.com https://*.getalma.eu https://*.payplug.com https://static.payplug.com https://*.systempay.fr https://*.lyra.com https://static.payzen.eu https://*.revolut.com https://*.vivawallet.com https://*.vivapayments.com https://client.crisp.chat https://*.crisp.chat https://*.smartsupp.com https://www.smartsuppchat.com https://code.tidio.co https://*.tidio.co https://*.trustpilot.com https://widget.trustpilot.com https://*.doofinder.com https://cdn.doofinder.com https://*.mailjet.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.trustpilot.com; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https://*.google-analytics.com https://*.googletagmanager.com https://*.analytics.google.com https://api.stripe.com https://*.stripe.com https://*.getalma.eu https://*.payplug.com https://*.crisp.chat wss://*.crisp.chat https://*.smartsupp.com wss://*.smartsupp.com https://*.tidio.co wss://*.tidio.co https://*.doofinder.com https://*.trustpilot.com; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://*.stripe.com https://*.paypal.com https://*.getalma.eu https://*.payplug.com https://*.systempay.fr https://*.lyra.com https://*.payzen.eu https://*.revolut.com https://*.vivawallet.com https://*.vivapayments.com https://*.trustpilot.com https://*.doofinder.com https://www.google.com https://recaptcha.google.com https://www.youtube.com https://www.youtube-nocookie.com; media-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://*.systempay.fr https://*.lyra.com https://*.payzen.eu https://*.payplug.com https://*.paypal.com https://*.getalma.eu https://*.revolut.com https://*.vivawallet.com https://*.vivapayments.com; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com consent.cookiebot.com consentcdn.cookiebot.com cdn.segment.com recommender.tradeprint.co.uk; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: images.unsplash.com images.ctfassets.net placehold.co via.placeholder.com www.tradeprint.co.uk www.feefo.com gstatic.com uploads.documents.cimpress.io cdn.filestackcontent.com img.youtube.com no-cache.hubspot.com api.feefo.com www.facebook.com; font-src 'self' data:; connect-src 'self' api.segment.io cdn.segment.com consentcdn.cookiebot.com; frame-src 'self' consentcdn.cookiebot.com; media-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self' 1
font-src *.googleapis.com *.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com sc.sftcdn.net fonts.gstatic.com *.amazonaws.com *.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.authorize.net *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.authorize.net securepubads.g.doubleclick.net www.googletagmanager.com td.doubleclick.net ep2.adtrafficquality.google www.google.com 26e8257adc55ba7472792bb7fa110bfc.safeframe.googlesyndication.com pagead2.googlesyndication.com www.googleadservices.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com store.paradoxlabs.com images.sftcdn.net sc.sftcdn.net bat.bing.com www.facebook.com ad.doubleclick.net ad-delivery.net notix.io tpc.googlesyndication.com ep2.adtrafficquality.google cdn.userway.org *.facebook.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com chimpstatic.com downloads.mailchimp.com *.list-manage.com https://www.googletagmanager.com https://polyfill.io s7.addthis.com *.avada.io *.authorize.net sdk.privacy-center.org sc.sftcdn.net bat.bing.com securepubads.g.doubleclick.net connect.facebook.net rv-assets.softonic.com www.clarity.ms btloader.com c.amazon-adsystem.com config.aps.amazon-adsystem.com cdn.id5-sync.com cdn.btmessage.com ep2.adtrafficquality.google tpc.googlesyndication.com pagead2.googlesyndication.com *.facebook.net *.facebook.com *.pinimg.com clarity.ms *.userway.org https://ct.pinterest.com https://api.userway.org *.cloudflare.com https://chimpstatic.com *.googletagmanager.com *.googleadservices.com *.google.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com downloads.mailchimp.com *.fontawesome.com maxcdn.bootstrapcdn.com sc.sftcdn.net cdn.userway.org *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com ekr.zdassets.com/ https://get.geojs.io *.avada.io *.authorize.net region1.analytics.google.com pagead2.googlesyndication.com rv-assets.softonic.com ad.360yield.com shb.richaudience.com hbopenbid.pubmatic.com bt.dns-finder.com c.amazon-adsystem.com prebid.media.net htlb.casalemedia.com ib.adnxs.com ap.lijit.com api.btmessage.com aax.amazon-adsystem.com api.btloader.com z.clarity.ms ep1.adtrafficquality.google securepubads.g.doubleclick.net www.googletagservices.com *.pinterest.com *.userway.org *.facebook.net *.google-analytics.com *.analytics.google.com *.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src bat.bing.com sc.sftcdn.net z.clarity.ms www.google.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-97a738d32eb4f641e7ba314d54787493' 'strict-dynamic'; style-src 'self' 'nonce-97a738d32eb4f641e7ba314d54787493' https://*.myareaf2a.com; style-src-elem 'self' 'unsafe-inline' https://*.myareaf2a.com; style-src-attr 'unsafe-inline'; img-src 'self' data: blob: https://*.myareaf2a.com; font-src 'self'; connect-src 'self' https://*.myareaf2a.com wss://*.myareaf2a.com; worker-src 'self' blob:; frame-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://sso.myareaf2a.com https://sso2.myareaf2a.com; frame-ancestors 'none'; upgrade-insecure-requests; report-uri https://api2.myareaf2a.com/v1/utilities/csp/report/loginFrontend; report-to csp-endpoint 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.studio-creative.com.ua c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com tagmanager.google.com https://www.googletagmanager.com *.studio-creative.com.ua s7.addthis.com *.fontawesome.com *.googleapis.com *.gstatic.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.studio-creative.com.ua *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://www.google-analytics.com *.studio-creative.com.ua ekr.zdassets.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.google.com https://*.gstatic.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com; font-src 'self' https://*.gstatic.com; img-src 'self' data: https://*.brno.cz https://*.youtube.com https://*.ytimg.com https://*.google-analytics.com https://*.googletagmanager.com; frame-src 'self' https://*.brno.cz https://*.youtube.com https://*.youtube-nocookie.com https://*.google.com; connect-src 'self' https://*.brno.cz https://*.google-analytics.com https://*.analytics.google.com; 1
object-src 'none';base-uri 'self';script-src 'nonce-yPJWe9CKBCE4bh64uALOxQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob:  https://maps.hereapi.com https://*.maps.hereapi.com https://*.microsoftonline.com https://*.userguiding.com https://*.azuredatabricks.net https://*.ifleetvision.com:* https://*.amazonaws.com; media-src 'self'; manifest-src 'self'; worker-src 'self' blob:; frame-src 'self'  https://maps.hereapi.com https://*.azuredatabricks.net; font-src 'self' data:  https://fonts.googleapis.com https://cdn.jsdelivr.net https://fonts.gstatic.com https://kendo.cdn.telerik.com https://*.userguiding.com https://*.azuredatabricks.net https://*.ifleetvision.com:* https://*.amazonaws.com; connect-src 'self'  wss://ctrack-signalr-ccprd-za.service.signalr.net ws://ctrack-signalr-ccprd-za.service.signalr.net http://ctrack-signalr-ccprd-za.service.signalr.net https://ctrack-signalr-ccprd-za.service.signalr.net https://apim.ctrackcrystal.com https://cdn.jsdelivr.net https://kendo.cdn.telerik.com https://maps.hereapi.com https://*.maps.hereapi.com https://*.microsoftonline.com https://*.optix.co https://js.monitor.azure.com https://dc.services.visualstudio.com/v2/track https://*.userguiding.com https://*.azuredatabricks.net https://*.ifleetvision.com:* https://*.amazonaws.com; style-src 'self' 'unsafe-inline'  https://fonts.googleapis.com https://cdn.jsdelivr.net https://fonts.gstatic.com https://kendo.cdn.telerik.com https://*.userguiding.com https://*.azuredatabricks.net https://*.ifleetvision.com:* https://*.amazonaws.com; script-src 'self' 'nonce-fNPT8haSYVNQhUP3lmL+ZQ==' 'unsafe-eval' 'sha256-3bzWVxQE32IZQKH9eh8KzyHuhXOlMrboDVVBRd0fWTU='  https://cdn.jsdelivr.net https://*.optix.co https://*.userguiding.com https://*.azuredatabricks.net https://*.ifleetvision.com:* https://*.amazonaws.com; 1
font-src *.googleapis.com *.gstatic.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.storyblok.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.sharethis.com www.youtube-nocookie.com *.vimeo.com *.cookiebot.com *.linkedin.com *.hubspot.com *.albacross.com *.kuraraynoritake.eu *.newrelic.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.sharethis.com *.googleapis.com *.gstatic.com browser-update.org *.hsforms.com *.cookiebot.com *.hubspot.com *.linkedin.com *.albacross.com files.bpcontent.cloud a.storyblok.com www.google.nl www.google-analytics.com www.googleapis.com www.gstatic.com connect.facebook.net *.storyblok.com *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.sharethis.com *.googleapis.com *.gstatic.com cdn.jsdelivr.net *.matomo.cloud browser-update.org *.addthis.com *.hsforms.net *.hsforms.com *.cookiebot.com *.hotjar.com js.hs-scripts.com serve.albacross.com *.hubspot.com *.hsadspixel.com *.hsadspixel.net *.hs-analytics.net *.hs-banner.com *.licdn.com cdn.botpress.cloud files.bpcontent.cloud static.cloudflareinsights.com capi-automation.s3.us-east-2.amazonaws.com *.storyblok.com *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.sharethis.com fonts.googleapis.com files.bpcontent.cloud *.storyblok.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com a.storyblok.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.sharethis.com *.googleapis.com *.matomo.cloud *.hsforms.com *.hubapi.com *.hubspot.com *.hotjar.com wss://*.hotjar.com *.hotjar.io *.googlesyndication.com *.kuraraynoritake.eu *.linkedin.com webchat.botpress.cloud consentcdn.cookiebot.com www.google.com www.google-analytics.com www.googleapis.com www.google.nl *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://fonts.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.googletagmanager.com js.mollie.com *.fittingbox.com *.gls-hungary.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.facebook.com magefan.com cm.magefan.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com https://www.mollie.com *.arukereso.hu *.gls-hungary.com *.googleapis.com *.openstreetmap.org cdn-cookieyes.com *.cookieyes.com *.bing.com *.bing.net *.clarity.ms *.google.hu *.googlesyndication.com *.akcdn.net whqillpv.euj.stape.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com js.mollie.com pay.google.com applepay.cdn-apple.com static.arukereso.hu assets.arukereso.com *.fittingbox.com *.gls-hungary.com *.googleapis.com cdn-cookieyes.com *.cookieyes.com *.bing.com *.clarity.ms *.googlesyndication.com *.euj.stape.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com https://fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com *.arukereso.hu assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com optikbrand.hu 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net *.arukereso.hu assets.arukereso.com *.gls-hungary.com *.googleapis.com *.gstatic.com 'self' data: cdn-cookieyes.com *.cookieyes.com *.bing.com *.bing.net *.clarity.ms *.googlesyndication.com *.euj.stape.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'none';script-src 'self' 'unsafe-eval' 'sha256-1HSYoHPNTbixa7+46Xv8f+3gadEZzOWccgJ5VEsRCiQ=' 'sha256-XuH0V153tQcl8LhZeLlndEOZG6QhtgYh1+ihKE5C868=' 'sha256-8jS2Lc6yn1GiMS47eJ+YV0fsxtcpruvBArE+gXskWNo=' 'sha256-lRrbM2V5sTNreGuT1/B5ajbrhZh+on/rLKZMZhfWeFs=' 'sha256-oMGSw0xMGzg1gjQaVIGcgRTAmZe3sc2mmakN2nRqNHo=' 'sha256-i3m4iVgmScSPeR2xpTQshzvWp6yWcpPo+FEGRhLqR2o=' 'sha256-5xpwWECJkydDHHC2dRivFODBlvo0+bAPUNG+RkTgbA0=' 'sha256-WFYUplEj4LXJ/ekxb5jHDDZQNE+Kh2rqbiOLsW+R7Zo=' 'sha256-UZKZ74NbTbmq926byVVaEcRoYpYhC5GiA8w3Kl1fC6w=' 'sha256-VoBBkelMmeLYY4t85pvGT2QkL84jVRZIBSN7gB/Ne8c=' 'sha256-lv2/Bkel4VfG0RBQMcIVtZi+4YG95TT74oD7gK3y5kg=' 'sha256-FfU5EZYIyuxQzChjCOCieSAu7TytMOv3i3sqhxI+V/8=' 'sha256-IFc2JzX73wRAuIynFDejk443JLlTSluFDhlQ/xEOea0=' 'sha256-MMxKS86qxcm4u/S1eKsKm76muWdBNinYgTX03lETS5k=' 'sha256-Sik91OjA1UoRJBO1HNxPVz8QHcwfjSbilmh849MJlWE=' 'sha256-eMkljhIX97D6vb4FsKXpC00TVIL4rVsyg76/6CRMkek=' 'sha256-c1h3tqjDRzs6Mz3p7oVNGcQrKXCZ38DqdlFZ1seAU1s=' 'sha256-k+wT4MUV4XdjOzCRtpZCN1Ero2kjjt9PYBbgz13tMCY=' 'sha256-aEuGb0ht5DXR7K1wyDaZ+ukhrUKh5eb3hzXOISi/7pE=' 'sha256-qbvMnSEbbg5W7gDIQD/ZFa2Nb5M1NEkkPcMBf0Tft6w=' 'sha256-kF8AD9ljMuFhg4UgNOkd++cEhP+hkODmcMigC5L3P+Y=' 'sha256-DhC8Un1/6teHnb+LSHQGApVW/N4iSBIYC1RB9SfQ3Z4=' 'sha256-sO1gYu4spgKCEbJIn93pvwyc/e3wH5ZcCTP88LxOjaA=' 'sha256-1pWcvs1OWR7oidr0ek5JfNgOamrCW1t/Ut+dclnTJw8=' 'sha256-3xMvl8KrU1T05O3vMiSPM2NpQyAfECTWncyNwSs2Iq8=' 'nonce-6mowzGAsCJNPPhwe8phSOg=='  maven.zohodl.com     *.zohocdn.com        dre.zoho.com.au   *.zohostatic.com   salesiq.zohopublic.com;style-src 'self' 'unsafe-inline' maven.zohodl.com     *.zohocdn.com           *.zohostatic.com   ;img-src https: data: blob:;connect-src 'self' blob: wss:    salesiq.zoho.com.au  *.zohocdn.com flow.zoho.com.au salesiq.zoho.com.au  convokraft.zoho.com.au phonebridge.zoho.com.au *.manageengine.com.au      *.zohostatic.com   ;form-action 'self';frame-src https: blob:;worker-src 'self' blob:;media-src 'self' blob:       *.zohocdn.com           *.zohostatic.com   ;object-src blob:;font-src 'self' data: maven.zohodl.com     *.zohocdn.com           *.zohostatic.com   ;report-uri https://logsapi.zoho.com.au/csplog?service=SDPOnDemand 1
worker-src blob:; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.kxcdn.com https://cdnjs.cloudflare.com *.snapfinance.com https://square-fonts-production-f.squarecdn.com/ https://d1g145x70srn7h.cloudfront.net/ https://cash-f.squarecdn.com/ https://fonts.gstatic.com/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.affirm.com *.affirm.ca facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.addthis.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.snapfinance.com https://pci-connect.squareup.com https://connect.squareup.com https://pci-connect.squareupsandbox.com https://connect.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.affirm.com *.affirm.ca *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.fbcdn.net blob: magefan.com cm.magefan.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.snapfinance.com https://www.gstatic.com/ https://sandbox.api.cash.app/ https://site-assets.afterpay.com/ https://sandbox.web.squarecdn.com/ https://api.cash.app/ https://web.squarecdn.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://franklin-assets.s3.amazonaws.com/ https://static.sandbox.afterpay.com/ https://static.afterpay.com/ https://static.sandbox.afterpay.com/logo/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.affirm.com *.affirm.ca *.googleapis.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com *.fbcdn.net platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com *.cloudflareinsights.com www.facebook.com graph.facebook.com business.facebook.com code.jquery.com cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.snapfinance.com https://js-sandbox.squarecdn.com https://js.squareup.com https://js.afterpay.com/ https://nd.squarecdn.com https://js.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://portal.sandbox.afterpay.com/ https://portal.afterpay.com/ https://cdn.plaid.com/ https://sandbox.kit.cash.app/ https://kit.cash.app/ https://js-sandbox.squarecdn.com/ https://js.squarecdn.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com cdnjs.cloudflare.com assets.braintreegateway.com *.snapfinance.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://fonts.googleapis.com/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.affirm.com *.affirm.ca https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com *.snapfinance.com https://pci-connect.squareup.com https://pci-connect.squareupsandbox.com https://api.amplitude.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://o160250.ingest.sentry.io/ https://api.lab.amplitude.com/sdk/vardata https://sandbox.plaid.com/ https://production.plaid.com/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
script-src 'nonce-nM0YLcKUnP5if80DO7x1-g' 'strict-dynamic' https: 'unsafe-inline'; base-uri 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://app.termly.io https://cdn.onesignal.com https://www.googletagmanager.com https://stats.wp.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.sportradar.com https://cdn.jsdelivr.net https://therealefl.co.uk; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://therealefl.co.uk https://fonts.googleapis.com; connect-src 'self' https:; media-src 'self' blob:; frame-src 'self' blob: https://www.youtube.com https://www.youtube-nocookie.com https://www.ladbrokes.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 1
default-src 'self'; script-src 'self' blob: 'nonce-KEdSPJ7H8dJvARkkRCf6Ew==' 'strict-dynamic' 'unsafe-eval'; style-src 'self' 'unsafe-inline' checkoutshopper-test.adyen.com checkoutshopper-live.adyenpayments.com; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' *.datadoghq.eu browser-intake-datadoghq.eu http-intake.logs.datadoghq.eu cdn.sanity.io *.api.sanity.io cdn.segment.com api.segment.io in.eu2.segmentapis.com *.intercom.io wss://*.intercom.io *.intercomcdn.com *.azurewebsites.net bat.bing.com bat.bing.net analytics.tiktok.com analytics-ipv6.tiktokw.us www.facebook.com connect.facebook.net graph.facebook.com www.google.com analytics.google.com region1.analytics.google.com region1.google-analytics.com www.google-analytics.com www.googletagmanager.com www.googleadservices.com googleads.g.doubleclick.net stats.g.doubleclick.net ct.pinterest.com vimeo.com *.clarity.ms https://graph.cheffelo.com https://gg-api-management-prod.azure-api.net; frame-src 'self' checkoutshopper-test.adyen.com checkoutshopper-live.adyenpayments.com widget.trustpilot.com *.intercom.io player.vimeo.com www.youtube.com ct.pinterest.com *.fls.doubleclick.net www.facebook.com www.googletagmanager.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' www.facebook.com; frame-ancestors 'self' 1
frame-src 'self'; report-uri https://secure.supportwmfe.org/site/XFrameViolation 1
default-src 'self'; script-src 'sha256-1V4YlBcwrO3Ri2PIb9USib/ksRT9AiFvG0khlirgXMc=' 'sha256-pnfVwEkC+d9dfWQAis6iFWy0JiMrcYN8P1XevEtSx/A=' 'sha256-JgTkn4Lc7zAiu5tJ2gt1oC+tnlnWGsnwq9lZXrPblqs=' 'strict-dynamic'; style-src 'self'; img-src 'self' data: https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://www.googletagmanager.com; font-src 'self'; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://www.googletagmanager.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types redmeat-analytics goog#html 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'wasm-unsafe-eval' https://challenges.cloudflare.com https://www.googletagmanager.com; style-src 'self'; img-src 'self' data: https://assets.webstories.eu https://*.google-analytics.com; font-src 'self' data:; connect-src 'self' https://assets.webstories.eu https://*.google-analytics.com https://*.analytics.google.com; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'self' https://challenges.cloudflare.com 1
base-uri 'self'; default-src 'none'; block-all-mixed-content; script-src 'self' 'strict-dynamic' 'nonce-Y2QwODk4YTgtNDkzZi00NjYyLTk2MTQtYzY1Nzk1YjE0NzJj' https://cdn.cookie-script.com/ https://connect.facebook.net https://*.g.doubleclick.net https://*.googletagmanager.com https://www.googletagmanager.com https://static.hotjar.com/ https://scripts.hotjar.com/ https://cdn.leadinfo.net https://*.ldnfrpl.com https://www.linkedin.com https://platform.linkedin.com https://snap.licdn.com https://px.ads.linkedin.com/ https://api.linkedin.com https://*.mouseflow.com http://*.mouseflow.com https://cdn.snitcher.com https://widget.trustpilot.com/bootstrap/v5/ *.visualwebsiteoptimizer.com app.vwo.com; connect-src 'self' https://places.geo.eu-west-1.amazonaws.com/ https://cms.energreen.com/graphql https://cms.energreen.com https://cdn.prod.website-files.com https://*.facebook.com wss://develop.api.io-comms.com/v2health https://*.google.be https://*.google.nl https://*.google.fr https://*.google.lu https://google.com/ https://*.google.com https://*.g.doubleclick.net https://*.googleadservices.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com www.googletagmanager.com https://*.hotjar.io/ wss://ws.hotjar.com/ https://api.leadinfo.com https://*.leadinfo.net https://*.ldnfrpl.com https://li-replay.s3-accelerate.amazonaws.com https://www.linkedin.com https://platform.linkedin.com https://snap.licdn.com https://px.ads.linkedin.com/ https://api.linkedin.com https://*.mouseflow.com http://*.mouseflow.com https://radar.snitcher.com https://hascoinvest.recruitee.com/api/ *.visualwebsiteoptimizer.com app.vwo.com; img-src 'self' blob: data: https://*.basemaps.cartocdn.com https://d4uvk9fin58ln.cloudfront.net https://cdn.prod.website-files.com https://*.fbcdn.net https://*.facebook.com https://*.google.be https://*.google.nl https://*.google.fr https://*.google.lu https://google.com/ https://*.google.com https://*.g.doubleclick.net https://*.googleadservices.com https://*.google-analytics.com https://*.googletagmanager.com www.googletagmanager.com https://collector.leadinfo.net https://cdn.leadinfo.net https://www.linkedin.com https://platform.linkedin.com https://snap.licdn.com https://px.ads.linkedin.com/ https://api.linkedin.com https://*.mouseflow.com http://*.mouseflow.com *.visualwebsiteoptimizer.com app.vwo.com useruploads.vwo.io; style-src 'self' 'unsafe-inline' https://cdn.leadinfo.net https://www.linkedin.com https://platform.linkedin.com https://snap.licdn.com https://px.ads.linkedin.com/ https://api.linkedin.com *.visualwebsiteoptimizer.com app.vwo.com; font-src 'self' data: https://cdn.prod.website-files.com https://cdn.leadinfo.net https://*.mouseflow.com http://*.mouseflow.com https://fonts.gstatic.com/ https://assets.merci-app.com/fonts/ chrome-extension; frame-src 'self' https://www.googletagmanager.com https://*.mouseflow.com http://*.mouseflow.com https://widget.trustpilot.com/trustboxes/ *.visualwebsiteoptimizer.com app.vwo.com; frame-ancestors 'none'; report-to csp-endpoint; media-src https://d4uvk9fin58ln.cloudfront.net; child-src https://*.mouseflow.com http://*.mouseflow.com; worker-src 'self' blob:; report-uri https://www.energreen.com/api/content-security-policy; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; frame-src 'self' https:; connect-src 'self' https: wss://*.pusher.com; media-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' https: 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://pagead2.googlesyndication.com https://*.googlesyndication.com https://*.doubleclick.net https://www.googletagmanager.com https://www.google-analytics.com https://challenges.cloudflare.com https://www.youtube.com https://fundingchoicesmessages.google.com https://*.adtrafficquality.google https://www.gstatic.com; img-src 'self' data: https:; frame-src https:; connect-src 'self' https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
default-src 'self'; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; report-uri /csp-report 1
script-src 'self' https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://maps.googleapis.com https://maps.google.com https://www.gstatic.com https://app.secureprivacy.ai https://cmp.secureprivacy.ai https://www.youtube.com https://player.vimeo.com; style-src 'self' https://fonts.googleapis.com https://www.gstatic.com 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.mktoresp.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.magentosite.cloud https://images.unsplash.com *.google.com *.googleadservices.com *.googletagmanager.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.digicor.com.au *.marketo.net abr.business.gov.au https://rum.hlx.page https://maps.googleapis.com https://player.vimeo.com https://cdn.jsdelivr.net https://cdn.tailwindcss.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com www.facebook.com graph.facebook.com business.facebook.com *.avada.io *.shopify.com js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.digicor.com.au maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.digicor.com.au *.magentosite.cloud 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.digicor.com.au *.mktoresp.com https://maps.googleapis.com https://player.vimeo.com *.googletagmanager.com stats.g.doubleclick.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.google-analytics.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https:; 1
default-src 'self'; script-src 'nonce-zABX6aV1MCYuCNK3ZYpnFQ==' 'strict-dynamic' 'unsafe-eval' https: 'self' https://cdnjs.cloudflare.com https://maps.googleapis.com https://unpkg.com https://cdn.plyr.io https://www.google-analytics.com https://www.youtube.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.plyr.io https://cdn.jsdelivr.net https://use.fontawesome.com; img-src 'self' data: https://maps.gstatic.com https://*.googleapis.com https://*.ggpht.com; font-src 'self' https://fonts.gstatic.com https://use.fontawesome.com; connect-src 'self' https://maps.googleapis.com https://www.google-analytics.com https://region1.google-analytics.com https://noembed.com https://cdn.plyr.io; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com; object-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' wasm-eval api.ipstack.com connect.facebook.net dev.visualwebsiteoptimizer.com embed.typeform.com j.6sc.co maps.googleapis.com s0.wp.com script.hotjar.com snap.licdn.com static.hotjar.com stats.wp.com www.blackbook.com www.google.com www.googletagmanager.com www.gstatic.com; script-src-elem 'self' data: 'unsafe-inline' api.ipstack.com connect.facebook.net dev.visualwebsiteoptimizer.com embed.typeform.com j.6sc.co maps.googleapis.com s0.wp.com script.hotjar.com snap.licdn.com static.hotjar.com stats.wp.com www.blackbook.com www.google.com www.googletagmanager.com www.gstatic.com; script-src-attr 'unsafe-inline'; style-src 'self' data: 'unsafe-inline' use.typekit.net fonts.googleapis.com; style-src-elem 'self' data: 'unsafe-inline' use.typekit.net fonts.googleapis.com; style-src-attr 'unsafe-inline'; font-src 'self' data: use.typekit.net fonts.gstatic.com; img-src 'self' data: https: b.6sc.co dev.visualwebsiteoptimizer.com; connect-src 'self' content.hotjar.io dev.visualwebsiteoptimizer.com epsilon.6sense.com maps.googleapis.com metrics.hotjar.io px.ads.linkedin.com region1.google-analytics.com secure.adnxs.com www.blackbook.com www.facebook.com www.google-analytics.com www.google.com www.googletagmanager.com *.6sense.com; worker-src 'self' blob:; media-src 'self' data: blob:; object-src 'none'; form-action 'self' www.blackbook.com canadianblackbook.com; frame-ancestors 'self'; base-uri 'self'; upgrade-insecure-requests; report-uri https://668e090e2c406e55c4610b0dad7ab731.report-uri.com/r/t/csp/reportOnly 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: *.klevu.com *.ksearchnet.com *.stape.io *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.stape.io *.tipalti.com secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.klevu.com *.ksearchnet.com magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com *.stape.io https://api.mapbox.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.klevu.com *.ksearchnet.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.doubleclick.net *.stape.io secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io https://js.klevu.com https://www.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.klevu.com *.ksearchnet.com *.googleapis.com *.googletagmanager.com *.stape.io *.fontawesome.com d.ratepay.com d.payla.io dr.payla.io 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.klevu.com *.ksearchnet.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog *.stape.io region1.google-analytics.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com autocomplete2.postdirekt.de 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.cloudfront.net *.drogueriasumed.com *.google.com.ar www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://apis.google.com *.ajax.googleapis.com *.googletagmanager.com *.js-agent.newrelic.com *.cloudfront.net/ https://cdnjs.cloudflare.com ajax.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com https://fonts.googleapis.com https://cdn.jsdelivr.net *.cloudflare.com cdn.jsdelivr.net *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.cloudfront.net *.commerce.drogueriasumed.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' https://esm.sh https://www.googletagmanager.com https://connect.facebook.net https://analytics.tiktok.com https://challenges.cloudflare.com https://accounts.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https://challenges.cloudflare.com https://accounts.google.com; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; report-uri /api/csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com use.fontawesome.com maxcdn.bootstrapcdn.com *.fontawesome.com js.klevu.com *.paypal.com *.paypalobjects.com 'self' data: *.yotpo.com *.googleapis.com dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com *.yotpo.com swellrewards.com *.swellrewards.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com/ *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com account.fetchify.com *.yotpo.com swellrewards.com *.swellrewards.com js.mollie.com *.yieldify.com static.olark.com *.addthis.com https://disqus.com/ *.twitter.com smct.co googletagmanager.com *.zenaps.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.sandbox.paypal.com https://plumrocket.com *.trustpilot.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.facebook.com https://images.unsplash.com *.stripe.com *.stripe.network *.google.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com *.yotpo.com swellrewards.com *.swellrewards.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://www.mollie.com *.bing.net *.bing.com *.cloudiq.com services.postcodeanywhere.co.uk *.visualwebsiteoptimizer.com js.klevu.com *.cloudfront.net *.viglink.com *.disqus.com *.addthis.com *.disquscdn.com *.yieldify.com *.harmonystore.co.uk *.awin1.com *.zenaps.com px2.smct.co *.roeyecdn.com *.roeye.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.sandbox.paypal.com *.hsforms.net *.hsforms.com 'self' data: dhv2ziothpgrr.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com connect.facebook.net https://maps.googleapis.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com cc-cdn.com *.yotpo.com swellrewards.com *.swellrewards.com x.klarnacdn.net *.klarnaservices.com js.mollie.com pay.google.com applepay.cdn-apple.com widget.trustpilot.com invitejs.trustpilot.com js-agent.newrelic.com *.cloudiq.com *.gstatic.com maps.googleapis.com *.cloudflare.com *.visualwebsiteoptimizer.com *.pcapredict.com static.olark.com instant.page services.postcodeanywhere.co.uk data: js.klevu.com cdn.jsdelivr.net td.yieldify.com www.dwin1.com *.addthis.com *.disquscdn.com *.addthisedge.com *.moatads.com *.disqus.com *.twitter.com smct.co *.js.smct.io *.powr.io *.roeyecdn.com *.nunami.ai *.clarity.ms *.bing.com *.taboola.com *.envolvetech.com *.googleadservices.com *.zenaps.com the.sciencebehindecommerce.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.sandbox.paypal.com *.paypalobjects.com *.hsforms.net *.hsforms.com *.trustpilot.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com d18eg7dreypte5.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com downloads.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com cc-cdn.com *.yotpo.com swellrewards.com *.swellrewards.com maxcdn.bootstrapcdn.com *.klarnacdn.net *.fontawesome.com *.cloudflare.com services.postcodeanywhere.co.uk js.klevu.com cdn.jsdelivr.net assets.braintreegateway.com *.googleapis.com *.gstatic.com *.trustpilot.com dhv2ziothpgrr.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com *.yotpo.com swellrewards.com *.swellrewards.com x.klarnacdn.net *.klarnaservices.com *.appspot.com *.doubleclick.net *.bing.net *.bing.com *.clarity.ms widget.trustpilot.com services.postcodeanywhere.co.uk knrpc.olark.com https://links.services.disqus.com/ *.addthis.com ipb.smct.io firehose.eu-west-1.amazonaws.com/ the.sciencebehindecommerce.com js.smct.io cognito-identity.eu-west-1.amazonaws.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.sandbox.paypal.com t.elasticsuite.io *.hsforms.net *.hsforms.com dhv2ziothpgrr.cloudfront.net *.smsbump.com 7kgd3hs1oh.execute-api.us-east-1.amazonaws.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com; img-src 'self' data: https://www.google-analytics.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; frame-src https://www.googletagmanager.com; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://fonts.gstatic.com data: *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de api.bazaarvoice.com stg.api.bazaarvoice.com https://seo.mageplaza.com *.authorize.net *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.klarna.com *.authorize.net static.addtoany.com *.wesupply.xyz https://wesupplylabs.com guarantee-cdn.com *.weltpixel.com www.xtento.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com *.trackedlink.net *.klarna.com *.klarnaevt.com *.klarnacdn.net https://firebasestorage.googleapis.com guarantee-cdn.com www.xtento.com cdn.xtento.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.avada.io *.shopify.com *.authorize.net static.addtoany.com acsbapp.com apis.google.com *.cloudflare.com cloudflare.com static.cloudflareinsights.com guarantee-cdn.com www.xtento.com cdn.xtento.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com display.ugc.bazaarvoice.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net *.googleapis.com *.addtoany.com maxcdn.bootstrapcdn.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://get.geojs.io *.avada.io http://dpm.demdex.net *.authorize.net cdn.acsbapp.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'unsafe-eval' 'nonce-9ed5485ce5249c43de839ba93a3529deafef0bd63f5ff0dd' 'strict-dynamic'; style-src 'self' data: 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://instantcms.ru; font-src 'self' data: https://fonts.gstatic.com; report-uri https://valekse.ru/csp/report; report-to icms-csp-ep 1
font-src fonts.googleapis.com fonts.gstatic.com *.bootstrapcdn.com *.fontawesome.com *.cloudfront.net data: *.typekit.net userlike-cdn-umm.b-cdn.net maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.facebook.net *.facebook.com https://plumrocket.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.jsctool.com *.timify.com *.cookiebot.com *.pay1.de *.facebook.net *.facebook.com https://static.fittingbox.com vto-advanced.fittingbox.com secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com https://plumrocket.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.xtento.com *.sendcloud.sc *.jsdelivr.net *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de static-eu.payments-amazon.com *.cloudfront.net *.amazonaws.com widgets.trustedshops.com *.klarnacdn.net *.pay1.de *.facebook.com *.cookiebot.com www.google.de becker-floege.de mcstaging.becker-floege.de brilledirekt.de mcstaging.brilledirekt.de stream.brilledirekt.de cdn.pay1.de x.klarnacdn.net m.media-amazon.com https://cdn.doofinder.com https://api.mapbox.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com www.xtento.com cdn.xtento.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.newrelic.com *.pay1.de *.ratepay.com *.cloudfront.net *.amazonaws.com userlike-cdn-umm.b-cdn.net *.nr-data.net *.timify.com chimpstatic.com widgets.trustedshops.com *.cookiebot.com connect.facebook.net static.hotjar.com script.hotjar.com pagead2.googlesyndication.com stream.brilledirekt.de www.clarity.ms extern.conversion.consulting *.fittingbox.com/api/v1/fitmix.js https://msrt-integration-api.fittingbox.com/index.js https://api.segment.io/v1/batch vto-advanced-integration-api.fittingbox.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.avada.io https://cdn.doofinder.com https://eu1-config.doofinder.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.xtento.com cdn.xtento.com *.sendcloud.sc *.jsdelivr.net https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.bootstrapcdn.com *.typekit.net *.fonts.net *.cookiebot.com *.googletagmanager.com d.ratepay.com d.payla.io dr.payla.io *.fontawesome.com maxcdn.bootstrapcdn.com https://cdn.doofinder.com unsafe-inline assets.braintreegateway.com https://fonts.googleapis.com *.sendcloud.sc *.jsdelivr.net https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cloudfront.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.google-analytics.com *.doubleclick.net *.ratepay.com *.nr-data.net userlike-cdn-widgets.s3-eu-west-1.amazonaws.com api.userlike.com www.xtento.com *.etrusted.com *.trustbadge.com *.trustedshops.com *.cookiebot.com *.facebook.net *.facebook.com maps.googleapis.com pagead2.googlesyndication.com wss://ws.hotjar.com content.hotjar.io vc.hotjar.io metrics.hotjar.io u.clarity.ms product-api.fittingbox.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com https://get.geojs.io *.avada.io https://eu1-layer.doofinder.com wss://eu1-layer.doofinder.com https://us1-layer.doofinder.com wss://us1-layer.doofinder.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com autocomplete2.postdirekt.de *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src *.facebook.net *.facebook.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; 1
default-src 'self' https: data: blob: 'unsafe-inline' 'unsafe-eval'; img-src 'self' https: data: blob:; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; font-src 'self' https: data:; connect-src 'self' https:; frame-ancestors 'self' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self'; connect-src 'self' https://581bdba7b147c56303bdd70211d98362.r2.cloudflarestorage.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://widget.spreaker.com https://gestor.fiorilli.com.br; report-uri https://fiorilli.com.br/csp-relatorio 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.disqus.com mageside.com *.google.com *.google.de *.google.ua www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.disqus.com *.zdassets.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.zendesk.com *.zdassets.com wss://widget-mediator.zopim.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src: https: 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com https://www.googletagmanager.com https://tagassistant.google.com https://tagmanager.google.com https://accounts.google.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://www.google.com https://apis.google.com https://connect.facebook.net https://capi-automation.s3.us-east-2.amazonaws.com https://js.stripe.com https://*.js.stripe.com https://maps.googleapis.com https://consent.cookiefirst.com https://cdn.lupasearch.com https://appleid.cdn-apple.com https://challenges.cloudflare.com https://web-sdk.smartlook.com https://www.dwin1.com https://www.zenaps.com; style-src 'self' 'unsafe-inline' https://accounts.google.com https://www.googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com https://www.gstatic.com https://consent.cookiefirst.com; img-src 'self' data: blob: https: https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://*.google-analytics.com https://*.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://google.com https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat https://www.facebook.com https://*.facebook.com https://*.stripe.com https://appleid.cdn-apple.com https://www.awin1.com https://www.zenaps.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://api.klipshop.co.uk https://accounts.google.com https://www.googletagmanager.com https://tagassistant.google.com https://tagmanager.google.com https://google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://*.googleadservices.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://google.com https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat https://connect.facebook.net https://www.facebook.com https://graph.facebook.com properties: https://*.ecs.us-east-1.on.aws/events https://*.ecs.us-east-2.on.aws/events https://*.ecs.us-west-2.on.aws/events https://*.us-central1.run.app/events https://api.stripe.com https://maps.googleapis.com https://consent.cookiefirst.com https://edge.cookiefirst.com https://api.cookiefirst.com https://cdn.lupasearch.com https://api.lupasearch.com https://appleid.apple.com https://challenges.cloudflare.com https://manager.eu.smartlook.cloud https://web-writer.eu.smartlook.cloud https://assets-proxy.smartlook.cloud https://www.awin1.com https://www.zenaps.com https://www.awinblackfriday.com https://www.wepowerconnections.com; frame-src 'self' https://accounts.google.com https://www.googletagmanager.com https://tagassistant.google.com https://tagmanager.google.com https://www.google.com https://toolytics.pa.clients6.google.com https://www.facebook.com https://js.stripe.com https://*.js.stripe.com https://hooks.stripe.com https://appleid.apple.com https://challenges.cloudflare.com https://www.zenaps.com; worker-src 'self' blob:; media-src 'self' blob: https:; manifest-src 'self'; form-action 'self' https://www.facebook.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; report-uri https://821zgf9xawww.uriports.com/reports/report; report-to default 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.zopim.com *.zopim.io https://use.fontawesome.com/ https://bam.nr-data.net/  https://www.googletagmanager.com/ *.facebook.com *.adsrvr.org.com *.quantserve.com *.jotfor.ms *.whiz-q.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.facebook.com *.bing.com *.googletagmanager.com *.jotform.com *.whiz-q.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com https://www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com http://www.sandbox.paypal.com *.twitter.com *.zendesk.com http://www.w3.org/2000/svg https://bam.nr-data.net/ https://prod.order-history.stickergiant.com/ *.pinterest.com *.facebook.com *.adsrvr.org.com *.quantserve.com https://sp.analytics.yahoo.com/ *.bing.com *.jotform.com *.whiz-q.com *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * landofcoder.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.bing.com *.zopim.com *.zopim.io *.doubleclick.net *.google.com *.google.co.in *.mastercard.com http://www.w3.org/2000/svg https://bam.nr-data.net/ *.pinterest.com *.facebook.com *.adsrvr.org.com *.quantserve.com *.reddit.com https://t.co/ https://sp.analytics.yahoo.com/ https://px.ads.linkedin.com/ https://match.adsrvr.org/ *.hubspot.com *.linkedin.com *.adsrvr.org *.steelhousemedia.com *.analytics.yahoo.com *.bluekai.com *.casalemedia.com/ *.jotfor.ms *.jotform.com *.magecomp.com *.whiz-q.com *.googleusercontent.com *.adobedtm.com *.demdex.net *.everesttech.net *.magentocommerce.com https://firebasestorage.googleapis.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bing.com *.zopim.com *.zdassets.com *.google.com/ *.zendesk.com http://www.w3.org/2000/svg https://js-agent.newrelic.com/ https://bam.nr-data.net/ https://prod.order-history.stickergiant.com/ https://www.googletagmanager.com/ https://www.googleadservices.com/ *.googleapis.com *.mpactcdn.com *.hotjar.com *.licdn.com *.quantserve.com *.yimg.com *.mountain.com *.pinimg.com https://www.redditstatic.com/ https://static.ads-twitter.com/ *.tiktok.com https://js.hs-scripts.com/ https://connect.facebook.net/ https://snap.licdn.com/ *.quantcount.com *.hs-banner.com *.usemessages.com *.hsadspixel.com *.pinterest.com *.hubspot.com *.hubapi.com *.facebook.com *.adsrvr.org.com https://sp.analytics.yahoo.com/ *.impactcdn.com *.hs-analytics.net.com *.hsadspixel.net https://js.hs-analytics.net/ *.s7.addthis.com *.addthis.com *.facebook.net *.jotfor.ms *.jotform.com *.magecomp.com *.whiz-q.com *.jquery.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com landofcoder.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.fontawesome.com *.bing.com https://use.fontawesome.com/ https://bam.nr-data.net/ https://www.googletagmanager.com/ *.pinterest.com *.facebook.com *.adsrvr.org.com *.jotfor.ms *.magecomp.com *.whiz-q.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com *.zopim.com *.zopim.io https://static.zdassets.com/ https://bam.nr-data.net/ *.pinterest.com *.facebook.com *.adsrvr.org.com *.quantserve.com *.bing.com *.magecomp.com *.whiz-q.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.cloudflare.com *.twitter.com *.twimg.com *.zdassets.com *.zopim.com *.zopim.io wss://widget-mediator.zopim.com *.google-analytics.com https://stats.g.doubleclick.net *.zendesk.com http://www.w3.org/2000/svg https://bam.nr-data.net/  https://www.googletagmanager.com/ *.pinterest.com *.facebook.com *.adsrvr.org.com *.quantserve.com https://sp.analytics.yahoo.com/ https://cdn.linkedin.oribi.io/ *.yimg.com *.hubspot.com https://44.228.85.26/ https://api.hubapi.com/ https://44.238.122.172/ *.hotjar.com *.hotjar.io *.bing.com *.magecomp.com *.whiz-q.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com landofcoder.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://applepay.cdn-apple.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net cdnjs.cloudflare.com *.flixfacts.com *.flixcar.com *.googleapis.com *.electroworld.nl *.dewitgoedspecialist.nl *.witgoedspecialist.nl *.clarity.ms *.bing.com *.doubleclick.net *.criteo.com *.criteo.net *.facebook.com *.id5-sync.com *.yahoo.com *.facebook.net *.channelsight.com *.extreme-ip-lookup.com *.googletagmanager.com *.survicate.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com *.loadbee.com *.flixfacts.com *.flixgvid.com *.flixcar.com *.flix360.io *.cookiebot.com *.doubleclick.net *.googletagmanager.com *.gstatic.com *.hotjar.com *.newrelic.com *.nr-data.net *.adobedtm.com *.adobe.com *.authorize.net *.braintreegateway.com *.paypalobjects.com *.ytimg.com *.googleapis.com *.vimeo.com *.vimeocdn.com *.google.com *.cardinalcommerce.com *.bazaarvoice.com *.iesnare.com *.buckaroo.nl *.dotdigital.com *.dotdigital-pages.com *.trackedlink.net *.trackedweb.net *.ccdc02.com *.googleoptimize.com *.hs-scripts.com *.hsforms.net *.hubspot.com *.hscollectedforms.net *.hs-banner.net *.hs-analytics.net *.hsadspixel.net *.hscollectedforms.com *.hs-banner.com *.hs-analytics.com *.hsadspixel.com *.amazonaws.com *.hsforms.com hubspot-forms-static-embed-eu1.s3.amazonaws.com track-eu1.hubspot.com forms-eu1.hsforms.com *.facebook.com *.electroworld.nl *.dewitgoedspecialist.nl *.witgoedspecialist.nl *.tweakwise.com *.clarity.ms *.bing.com *.criteo.com *.criteo.net *.id5-sync.com *.yahoo.com *.facebook.net *.channelsight.com *.extreme-ip-lookup.com *.visualwebsiteoptimizer.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://applepay.cdn-apple.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.loadbee.com *.flixcar.com *.publitas.com *.cookiebot.com *.hotjar.com *.electroworld.nl *.dewitgoedspecialist.nl *.witgoedspecialist.nl *.clarity.ms *.bing.com *.doubleclick.net *.criteo.com *.criteo.net *.facebook.com *.id5-sync.com *.yahoo.com *.facebook.net *.channelsight.com *.extreme-ip-lookup.com *.googletagmanager.com *.hsforms.com *.hubspot.com *.hs-sites-eu1.com *.visualwebsiteoptimizer.com *.aiden.cx 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com https://static.buckaroo.nl https://www.buckaroo.nl https://www.paypalobjects.com https://pay.google.com https://developers.google.com https://applepay.cdn-apple.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://firebasestorage.googleapis.com *.loadbee.com *.flixfacts.com *.flixgvid.com *.flixcar.com *.flix360.io *.google.com *.google.nl *.electroworld.nl *.dewitgoedspecialist.nl *.adobedtm.com *.demdex.net *.omtrdc.net *.everesttech.net *.magentocommerce.com *.googleadservices.com *.paypalobjects.com *.vimeo.com *.ytimg.com *.swagger.io *.bazaarvoice.com *.buckaroo.nl *.braintreegateway.com *.googleapis.com *.hubspot.com *.hscollectedforms.net *.hs-banner.net *.hs-analytics.net *.hsadspixel.net *.hscollectedforms.com *.hs-banner.com *.hs-analytics.com *.hsadspixel.com *.amazonaws.com *.hsforms.com hubspot-forms-static-embed-eu1.s3.amazonaws.com track-eu1.hubspot.com forms-eu1.hsforms.com *.360yield.com *.smartclip.net *.yieldlab.net *.bing.com *.krxd.net *.adform.net *.doubleclick.net *.media.net *.adscale.de *.tremorhub.com *.teads.tv *.criteo.com *.criteo.net *.3lift.com *.mediavine.com *.liadm.com *.adnxs.com *.id5-sync.com *.rlcdn.com *.sharethrough.com *.rubiconproject.com *.casalemedia.com *.smartadserver.com *.thebrighttag.com *.pubmatic.com *.yieldmo.com *.taboola.com *.outbrain.com *.omnitagjs.com *.facebook.com *.bidswitch.net *.witgoedspecialist.nl *.tweakwise.com *.clarity.ms *.yahoo.com *.facebook.net *.channelsight.com *.extreme-ip-lookup.com *.googletagmanager.com id5-sync.com *.ivitrack.com *.jwpsrv.com *.jwplayer.com *.squeezely.tech *.hsappstatic.net *.visualwebsiteoptimizer.com *.cdninstagram.com *.fbcdn.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com *.googletagmanager.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com https://www.sandbox.paypal.com https://applepay.cdn-apple.com https://pay.google.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.avada.io *.shopify.com *.loadbee.com *.flixfacts.com *.flixgvid.com *.flixcar.com *.flix360.io *.omnistock.nl *.publitas.com *.cookiebot.com *.doubleclick.net *.gstatic.com *.hotjar.com *.adobedtm.com *.authorize.net *.paypal.com *.paypalobjects.com *.ytimg.com *.googleapis.com *.vimeo.com *.cardinalcommerce.com *.bazaarvoice.com *.iesnare.com *.buckaroo.nl *.dotdigital.com *.dotdigital-pages.com *.trackedlink.net *.trackedweb.net *.ccdc02.com *.googleoptimize.com *.hs-scripts.com *.hsforms.net *.hubspot.com *.hscollectedforms.net *.hs-banner.net *.hs-analytics.net *.hsadspixel.net *.hscollectedforms.com *.hs-banner.com *.hs-analytics.com *.hsadspixel.com *.amazonaws.com *.hsforms.com hubspot-forms-static-embed-eu1.s3.amazonaws.com track-eu1.hubspot.com forms-eu1.hsforms.com *.facebook.com *.electroworld.nl *.dewitgoedspecialist.nl *.witgoedspecialist.nl *.tweakwise.com *.clarity.ms *.bing.com *.criteo.com *.criteo.net *.id5-sync.com *.yahoo.com *.facebook.net *.channelsight.com *.extreme-ip-lookup.com https://extreme-ip-lookup.com *.hubspotfeedback.com *.beslist.nl *.convertexperiments.com *.survicate.com squeezely.tech *.squeezely.tech *.funnelytics.io *.mouseflow.com *.visualwebsiteoptimizer.com unpkg.com *.aiden.cx *.kieskeurig.nl *.adnxs.com *.uxcam.com *.heap-api.com *.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com display.ugc.bazaarvoice.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com https://fonts.bunny.net cdnjs.cloudflare.com *.flixcar.com *.googleapis.com *.gstatic.com *.electroworld.nl *.dewitgoedspecialist.nl *.witgoedspecialist.nl *.clarity.ms *.bing.com *.doubleclick.net *.criteo.com *.criteo.net *.facebook.com *.id5-sync.com *.yahoo.com *.facebook.net *.channelsight.com *.extreme-ip-lookup.com *.googletagmanager.com *.ditiseentest.nl *.survicate.com *.visualwebsiteoptimizer.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.flixcar.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://applepay.buckaroo.io https://smp-paymentservices.apple.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com *.pro6pp.nl https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://get.geojs.io *.avada.io *.loadbee.com *.flixfacts.com *.flixgvid.com *.flixcar.com *.flix360.io *.hotjar.com *.doubleclick.net *.demdex.net *.omtrdc.net *.paypalobjects.com *.cardinalcommerce.com *.bazaarvoice.com *.buckaroo.nl *.trackedlink.net *.trackedweb.net *.dotdigital.com *.dotdigital-pages.com *.googleapis.com *.hubspot.com *.hscollectedforms.net *.hs-banner.net *.hs-analytics.net *.hsadspixel.net *.hscollectedforms.com *.hs-banner.com *.hs-analytics.com *.hsadspixel.com *.amazonaws.com *.hsforms.com hubspot-forms-static-embed-eu1.s3.amazonaws.com track-eu1.hubspot.com forms-eu1.hsforms.com *.facebook.com *.electroworld.nl *.dewitgoedspecialist.nl *.witgoedspecialist.nl *.tweakwise.com *.clarity.ms *.bing.com *.criteo.com *.criteo.net *.id5-sync.com *.yahoo.com *.facebook.net *.channelsight.com *.extreme-ip-lookup.com *.hubapi.com *.googletagmanager.com *.hotjar.io *.beslist.nl *.googlesyndication.com *.funnelytics.workers.dev *.funnelytics.io *.visualwebsiteoptimizer.com *.aiden.cx *.uxcam.com *.convertexperiments.com *.heap-api.com wss://ws.hotjar.com *.kieskeurig.nl *.google.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cloudflare.com *.clarity.ms *.bing.com *.samsung.com *.facebook.com *.trustpilot.com https://www.googletagmanager.com *.googleapis.com *.stripe.com *.google.com *.fontawesome.com *.fonts.googleapis.com data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cloudflare.com *.clarity.ms *.bing.com *.samsung.com *.facebook.com *.trustpilot.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.stripe.com *.google.com https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.cloudflare.com *.clarity.ms *.bing.com *.samsung.com *.facebook.com *.trustpilot.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com *.stripe.com https://plumrocket.com *.addthis.com *.pinterest.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cloudflare.com *.clarity.ms *.bing.com *.samsung.com *.facebook.com *.trustpilot.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.stripe.com *.google.com ebizmarts-website.s3.amazonaws.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.addthis.com *.pinterest.com *.cdninstagram.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.cloudflare.com *.clarity.ms *.bing.com *.samsung.com *.facebook.com *.trustpilot.com *.cloudflareinsights.com *.stripe.com *.addthis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com tagmanager.google.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.moatads.com *.addthisedge.com *.pinterest.com *.instagram.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.clarity.ms *.bing.com *.samsung.com *.facebook.com *.trustpilot.com assets.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.stripe.com *.google.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cloudflare.com *.clarity.ms *.bing.com *.samsung.com *.facebook.com *.trustpilot.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.cloudflare.com *.clarity.ms *.bing.com *.samsung.com *.facebook.com *.trustpilot.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.googleapis.com *.stripe.com *.addthis.com *.graph.instagram.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.cloudflare.com *.clarity.ms *.bing.com *.samsung.com *.facebook.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.stonecrete-direct.co.uk/pr-csp/report/add/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.googletagmanager.com https://www.google-analytics.com https://euc-widget.freshworks.com https://js.mollie.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://a.storyblok.com https://*.blob.core.windows.net https://*.mcsnl.io https://*.core-connect.io https://images.cdn.europe-west1.gcp.commercetools.com https://www.googletagmanager.com https://www.google-analytics.com https://consent.cookiebot.com; font-src 'self' data: https://euc-widget.freshworks.com https://*.freshworks.com; connect-src 'self' https://api.storyblok.com https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://euc-widget.freshworks.com https://*.freshdesk.com https://*.freshworks.com https://api.mollie.com; frame-src https://mcswebsitefunctions.azurewebsites.net https://www.youtube.com https://consent.cookiebot.com https://js.mollie.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none'; report-uri /_csp-report 1
font-src fonts.gstatic.com use.typekit.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.certcapture.com checkout.paystand.io checkout.paystand.co checkout.paystand.com checkout.paystand.biz info.rowleycompany.com www.google.com www.gstatic.com app-sj02.marketo.com ct.pinterest.com insight.adsrvr.org *.extforms.netsuite.com *.adsrvr.org *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net *.certcapture.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com rowleycompany.scene7.com rowleyimages.com s7d2.scene7.com app-sj02.marketo.com www.gstatic.com adservice.google.com www.facebook.com ib.adnxs.com pixel.mediaiqdigital.com secure.adnxs.com stats.sa-as.com ad.doubleclick.net *.rowleycompany.com *.clarity.ms *.gstatic.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com https://rum.hlx.page *.certcapture.com chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com checkout.paystand.io api.paystand.io checkout.paystand.co api.paystand.co checkout.paystand.com api.paystand.com checkout.paystand.biz api.paystand.biz rowleycompany.scene7.com s7d2.scene7.com info.rowleycompany.com app-sj02.marketo.com munchkin.marketo.net www.google.com www.gstatic.com 776-dwo-877.mktoresp.com ct.pinterest.com insight.adsrvr.org js.adsrvr.org ws.zoominfo.com acdn.adnxs.com s.pinimg.com connect.facebook.net stats.sa-as.com tag.simpli.fi i.simpli.fi script.crazyegg.com *.logr-in.com *.cloudflare.com https://www.googletagmanager.com tagmanager.google.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com downloads.mailchimp.com checkout.paystand.io checkout.paystand.co checkout.paystand.com checkout.paystand.biz rowleycompany.scene7.com s7d2.scene7.com app-sj02.marketo.com www.google.com www.gstatic.com use.typekit.net p.typekit.net tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com s7d2.scene7.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.magento-datasolutions.com *.magento-ds.com *.certcapture.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com checkout.paystand.io api.paystand.io checkout.paystand.co api.paystand.co checkout.paystand.com api.paystand.com checkout.paystand.biz api.paystand.biz magento-plugin-logs.paystand-core-services.workers.dev rowleycompany.scene7.com s7d2.scene7.com s7mbrstream.scene7.com www.google.com www.gstatic.com 776-dwo-877.mktoresp.com ct.pinterest.com stats.g.doubleclick.net ib.adnxs.com script.crazyegg.com shipapi.pacejet.cc *.adsrvr.org *.logr-in.com *.google-analytics.com 'self' 'unsafe-inline'; child-src *.certcapture.com app-sj02.marketo.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com fonts.gstatic.com www.safetots.co.uk data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.safetots.co.uk 'self' 'unsafe-inline'; frame-ancestors localhost:* *.motive.co *.stripe.com stripe.com *.link.com *.amazon.com www.safetots.co.uk 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com *.googletagmanager.com www.safetots.co.uk 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com validate.fishpig.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.motive.co *.gstatic.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com www.safetots.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.motive.co *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://www.googletagmanager.com tagmanager.google.com *.googletagmanager.com www.safetots.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com https://static.klaviyo.com *.fontawesome.com maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com tagmanager.google.com fonts.google.com www.safetots.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.safetots.co.uk 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.motive.co *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://www.google-analytics.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com www.safetots.co.uk 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com www.safetots.co.uk http: https: blob: 'self' 'unsafe-inline'; default-src www.safetots.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self';connect-src 'self' https://fls-a1bfc656-51d4-48b6-80fb-c0c3ec2d5615.367be3a2035528943240074d0096e0cd.r2.cloudflarestorage.com *.googletagmanager.com *.googleadservices.com https://ad.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com https://sst.fntpost.com www.facebook.com;default-src 'self';font-src 'self' fonts.bunny.net;form-action 'self' www.facebook.com;frame-src 'self' https://connect-js.stripe.com https://js.stripe.com *.googletagmanager.com *.googleadservices.com https://sst.fntpost.com www.facebook.com www.google.com/recaptcha/ recaptcha.google.com/recaptcha/;frame-ancestors 'none';img-src 'self' blob: data: https://*.stripe.com https://fls-a1bfc656-51d4-48b6-80fb-c0c3ec2d5615.367be3a2035528943240074d0096e0cd.r2.cloudflarestorage.com *.googletagmanager.com *.googleadservices.com https://analytics.google.com https://www.google.com https://sst.fntpost.com www.facebook.com https://fls-a1bfc656-51d4-48b6-80fb-c0c3ec2d5615.laravel.cloud;media-src 'self' https://fls-a1bfc656-51d4-48b6-80fb-c0c3ec2d5615.laravel.cloud;object-src 'none';script-src 'self' 'unsafe-eval' 'nonce-gzLTjjLk7DA17yhhxKnA2eXaQ0sK3FF21XfOPU84' https://connect-js.stripe.com https://js.stripe.com *.googletagmanager.com *.googleadservices.com 'sha256-ANUm/UTZJh9LStTeCynaR2l9bZNAW09xE64mogu/qMg=' 'sha256-HoSPYX1vwQPVTSBCtamomuWzyrfeCIj3XEnFWCelqc4=' 'sha256-PckhPP1CJXsTlgZq6x7Yxmlj0Y0Y+I0WrO7p7aWmGRU=' connect.facebook.net www.google.com/recaptcha/ www.gstatic.com/recaptcha/;style-src 'self' 'unsafe-inline' fonts.bunny.net;worker-src 'self' blob: 1
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.googleapis.com *.fontawesome.com data: https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.googletagmanager.com *.youtube-nocookie.com calendly.com js.mollie.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com *.klarna.com *.googleadservices.com *.google-analytics.com *.analytics.google.com *.paypal.com *.ytimg.com *.google.nl *.google.be *.google.de *.stripe.com/v3/fingerprinted/img/ assets.calendly.com https://www.mollie.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.googleapis.com *.googleadservices.com *.fontawesome.com assets.calendly.com *.clarity.ms js-agent.newrelic.com js.mollie.com pay.google.com applepay.cdn-apple.com *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.google.com *.fontawesome.com assets.calendly.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com data: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com *.paypal.com *.analytics.google.com *.googletagmanager.com *.googleadservices.com *.google.nl *.google.be *.clarity.ms bam.eu01.nr-data.net https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://o4508488278474752.ingest.de.sentry.io/api/4508488401485904/security/?sentry_key=fde292d12fb57d9b06069c63fc976b9d; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.klevu.com *.ksearchnet.com *.fontawesome.com maxcdn.bootstrapcdn.com *.googleapis.com/ *.zip.co *.zipmoney.com.au bat.bing.com *.adobedtm.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.payway.com.au www.payway.com.au payway.stgeorge.com.au *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com www.googletagmanager.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com 'self' 'unsafe-inline'; img-src *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.trackedlink.net https://images.unsplash.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.klevu.com *.ksearchnet.com magefan.com cm.magefan.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com/ *.zip.co *.zipmoney.com.au bat.bing.com t.zip.co static.zip.co data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://api.addressfinder.io *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com https://maps.googleapis.com https://player.vimeo.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.klevu.com *.ksearchnet.com js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cloudflare.com *.gstatic.com *.googleapis.com/ *.zip.co *.zipmoney.com.au bat.bing.com *.maxmind.com static.zip.co zip.co https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://api.addressfinder.io *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com *.klevu.com *.ksearchnet.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.googleapis.com *.googleapis.com/ *.zip.co bat.bing.com *.adobedtm.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://api.addressfinder.io *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app cdn.jsdelivr.net api.lab.amplitude.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com widget.freshworks.com m2epro.freshdesk.com https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net *.klevu.com *.ksearchnet.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.gstatic.com *.googleapis.com/ *.zip.co *.zipmoney.com.au bat.bing.com *.adobedtm.com *.mmapiws.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'nonce-ZiVpTTl8FbEoJmxqo+lixQ==' https://www.google.com https://kit.fontawesome.com https://ka-p.fontawesome.com https://mpsnare.iesnare.com https://widget.trustpilot.com https://kit-pro.fontawesome.com https://www.googletagmanager.com https://bat.bing.com https://www.dwin1.com https://www.googleadservices.com https://www.google-analytics.com https://region1.google-analytics.com https://region2.google-analytics.com https://region3.google-analytics.com https://analytics.google.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://region1.analytics.google.com https://region2.analytics.google.com https://region3.analytics.google.com https://www.paypal.com https://www.paypalobjects.com https://www.sandbox.paypal.com https://b.sbox.stats.paypal.com https://sdk.privacy-center.org https://api.privacy-center.org https://sibautomation.com https://in-automate.brevo.com https://pagead2.googlesyndication.com https://widget.botmind.io https://api.widget.botmind.ai https://matomo.123roulement.com https://matomojs.trackify.info https://checkoutshopper-live.adyen.com https://checkoutshopper-live.cdn.adyen.com https://checkoutanalytics-live.adyen.com https://applepay.cdn-apple.com https://x.klarnacdn.net https://pay.google.com https://insights.algolia.io https://cdn.jsdelivr.net https://cdn.jsdelivr.net/npm/search-insights https://tag.123kogellager.nl https://tag.123cuscinetti.it https://tag.123rodamiento.es https://tag.123bearing.ca https://tag.123bearing.co.uk https://tag.123bearing.ie https://tag.123roulement.ch https://tag.123cuscinetti.ch https://tag.123kugellager.ch https://tag.123kogellager.be https://tag.123kugellager.at https://tag.123lozysko.pl https://tag.123rodamiento.mx https://tag.123roulement.be https://tag.123roulement.ca https://apis.google.com https://www.gstatic.com; connect-src 'self' https://*.algolia.net https://*.algolianet.com https://insights.algolia.io https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://region2.google-analytics.com https://region3.google-analytics.com https://region1.analytics.google.com https://region2.analytics.google.com https://region3.analytics.google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com https://pay.google.com https://checkoutshopper-live.adyen.com https://checkoutshopper-live.cdn.adyen.com https://checkoutanalytics-live.adyen.com https://www.paypal.com https://www.sandbox.paypal.com https://b.sbox.stats.paypal.com https://sdk.privacy-center.org https://api.privacy-center.org https://sibautomation.com https://in-automate.brevo.com https://widget.botmind.io https://api.widget.botmind.ai https://matomo.123roulement.com https://matomojs.trackify.info https://widget.trustpilot.com https://kit.fontawesome.com https://ka-p.fontawesome.com https://kit-pro.fontawesome.com https://bat.bing.com https://www.dwin1.com https://mpsnare.iesnare.com https://tag.123kogellager.nl https://tag.123cuscinetti.it https://tag.123rodamiento.es https://tag.123bearing.ca https://tag.123bearing.co.uk https://tag.123bearing.ie https://tag.123roulement.ch https://tag.123cuscinetti.ch https://tag.123kugellager.ch https://tag.123kogellager.be https://tag.123kugellager.at https://tag.123lozysko.pl https://tag.123rodamiento.mx https://tag.123roulement.be https://tag.123roulement.ca; default-src 'self'; img-src 'self' data: https://cdn.123cuscinetti.it https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://bat.bing.com https://www.dwin1.com https://matomo.123roulement.com https://matomojs.trackify.info https://widget.trustpilot.com https://www.gstatic.com https://apis.google.com https://checkoutshopper-live.adyen.com https://checkoutshopper-live.cdn.adyen.com https://www.paypalobjects.com https://x.klarnacdn.net https://applepay.cdn-apple.com https://pay.google.com; style-src 'self' 'unsafe-inline' https://widget.trustpilot.com https://sdk.privacy-center.org https://widget.botmind.io https://www.gstatic.com; font-src 'self' data:; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://www.google.com https://checkoutshopper-live.adyen.com https://checkoutshopper-live.cdn.adyen.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://x.klarnacdn.net https://sdk.privacy-center.org https://api.privacy-center.org https://widget.botmind.io https://widget.trustpilot.com https://apis.google.com https://www.gstatic.com; media-src 'self'; form-action 'self' https://checkoutshopper-live.adyen.com https://checkoutshopper-live.cdn.adyen.com https://www.paypal.com https://www.sandbox.paypal.com; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests; report-uri /_csp-report; report-to csp-endpoint 1
default-src 'self' https: data: blob:; img-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' https: data:; connect-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:; object-src 'none'; upgrade-insecure-requests 1
font-src *.fontawesome.com *.yotpo.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://www.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com https://www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.youtube.com https://www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.facebook.com https://www.googletagmanager.com https://i.ytimg.com https://www.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com chimpstatic.com downloads.mailchimp.com *.list-manage.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.google.com https://www.gstatic.com https://js.nagich.co.il https://js-agent.newrelic.com https://bam.nr-data.net s7.addthis.com *.avada.io assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com downloads.mailchimp.com *.fontawesome.com unsafe-inline *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://js.nagich.co.il https://bam.nr-data.net ekr.zdassets.com/ https://get.geojs.io *.avada.io www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://emdev1.greenboardnow.com/csp-report/CspLog/; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://*.gstatic.com *.fontawesome.com use.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.adyen.com api.bazaarvoice.com stg.api.bazaarvoice.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.adyen.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.adyen.com https://*.gstatic.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.adyen.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com https://fonts.googleapis.com/ display.ugc.bazaarvoice.com *.fontawesome.com assets.braintreegateway.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.adyen.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://3bb61dc1-a559-4e04-a5cd-44834bae6c9a.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'nonce-0febfdb6472e4e41b292f425a6d607cb' 'strict-dynamic' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://www.clarity.ms; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://www.google.com https://*.google.com https://www.gstatic.com https://*.gstatic.com https://stats.g.doubleclick.net https://*.doubleclick.net https://www.googleadservices.com https://googleadservices.com https://google.com https://*.google.de https://*.google.fr https://*.google.co.uk https://*.google.ae https://*.google.com.tr https://*.google.com.eg https://*.google.co.ma https://*.google.iq https://*.google.com.af https://www.clarity.ms https://*.clarity.ms https://c.bing.com; frame-src https://www.google.com https://recaptcha.google.com https://maps.google.com https://www.gstatic.com https://www.googletagmanager.com https://td.doubleclick.net https://neshan.org https://*.neshan.org https://balad.ir https://*.balad.ir; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /api/security/csp-report 1
default-src *.facebook.com *.fbcdn.net *.instagram.com blob:;script-src *.instagram.com static.cdninstagram.com z-p42-static.cdninstagram.com https://instagram.com https://*.www.instagram.com https://*.cdninstagram.com wss://www.instagram.com blob: *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'nonce-pIHE9sGx' 'self' 'wasm-unsafe-eval';style-src *.instagram.com static.cdninstagram.com z-p42-static.cdninstagram.com https://*.www.instagram.com data: blob: 'unsafe-inline' *.fbcdn.net *.facebook.com;connect-src *.instagram.com wss://edge-chat.instagram.com connect.facebook.net https://instagram.com https://*.www.instagram.com https://*.graph.instagram.com https://*.i.instagram.com https://*.od.instagram.com https://i.threads.net https://i.threads.com https://*.od.threads.net https://*.od.threads.com wss://www.instagram.com blob: *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* ws://localhost:* *.cdninstagram.com wss://*.instagram.com:* 'self';font-src *.instagram.com static.cdninstagram.com z-p42-static.cdninstagram.com data: *.fbcdn.net *.intern.facebook.com *.facebook.com https://*.cdninstagram.com;img-src *.instagram.com *.facebook.com *.fbcdn.net data: *.cdninstagram.com *.whatsapp.net blob: https://*.threads.net https://*.threads.com *.fbsbx.com android-webview-video-poster: *.oculuscdn.com;media-src *.facebook.com *.fbcdn.net *.instagram.com *.cdninstagram.com *.fbsbx.com data: blob:;child-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;frame-src https://instagram.com https://connect.facebook.net *.instagram.com *.facebook.com *.fbsbx.com fbsbx.com data:;manifest-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;object-src *.facebook.com *.fbcdn.net *.instagram.com data: blob:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=tr_exp&minimize=0; 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' karcher-center-altex.com.br *.karcher-center-altex.com.br wake-components.fbitsstatic.net karchercenteraltex.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br doubleclick.net addthis.com hertzen.com cartstack.com moatads.com alphassl.com googleadservices.com online-metrix.net cloudflare.com cartstack.com.br ebit.com.br traycheckout.com.br *.alphassl.com *.googleadservices.com *.cloudflare.com *.addthis.com *.hertzen.com *.doubleclick.net *.cartstack.com *.moatads.com *.cartstack.com.br *.ebit.com.br *.conectiva.io *.sunset.systems app.cartstack.com.br *.performa.ai *.cupom.social *.conectiva.app conectiva.io *.hotjar.com samuraiexpertsstorage.blob.core.windows.net boletoflex.azurewebsites.net boletoflex.com *.boletoflex.com *.blob.core.windows.net google.com.br *.google.com.br translate.googleapis.com *.googleapis.com google.com.co *.com.co google.es *.google.es google.fr *.google.fr plugins.crmback.io sdk.crmback.io crmback.io crmback.com cbstatus.net webapp-middleware-wake-hero-seguros.azurewebsites.net static.cloudflareinsights.com *.cloudflareinsights.com clarity.ms *.clarity.ms youtube.com *.youtube.com onsite.crmback.io *.crmback.io x.cbstatus.net *.cbstatus.net wake-hero-api.heroseguros.com.br *.heroseguros.com.br px.ads.linkedin.com px4.ads.linkedin.com bat.bing.com snap.licdn.com bat.bing.net analytics.tiktok.com analytics-ipv6.tiktokw.us i.imgur.com i3.ytimg.com assets.mastercard.com src.mastercard.com; frame-ancestors *.karcher-center-altex.com.br karcher-center-altex.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: http:; style-src 'self' 'unsafe-inline' https: http:; img-src 'self' data: https: http: blob:; font-src 'self' https: data:; connect-src 'self' https: http:; frame-src https: http:; media-src 'self' https: http:; object-src 'none'; base-uri 'self'; form-action 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action *.facebook.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src *.facebook.com fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com 'self' 'unsafe-inline'; img-src *.wp.com *.facebook.com data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com *.doubleclick.net www.google.de data: 'self' 'unsafe-inline'; script-src *.facebook.net assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com *.avada.io *.shopify.com capi-automation.s3.us-east-2.amazonaws.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://get.geojs.io *.avada.io *.ecs.us-east-2.on.aws *.us-central1.run.app capi-automation.s3.us-east-2.amazonaws.com *.doubleclick.net *.facebook.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com https://www.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com assets.braintreegateway.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com js.authorize.net jstest.authorize.net js.braintreegateway.com cdn-scripts.signifyd.com www.youtube.com *.avada.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com payments.sandbox.braintree-api.com origin-analytics-sand.sandbox.braintree-api.com assets.braintreegateway.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://www.gstatic.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com https://maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://accounts.google.com https://*.google.com https://*.hotjar.com https://vars.hotjar.com https://www.facebook.com https://*.criteo.com https://gum.criteo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com public.montonio.com https://imagedelivery.net https://www.facebook.com https://www.google.com https://www.google.ee https://www.google-analytics.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com public.montonio.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com maxcdn.bootstrapcdn.com https://maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://www.google-analytics.com https://stats.g.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://firebasestorage.googleapis.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.avada.io *.shopify.com *.google.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.trustpilot.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com *.fontawesome.com https://fonts.bunny.net unsafe-inline assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com api.addressy.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
require-trusted-types-for 'script'; 1
base-uri 'self'; child-src 'self' www.google.com; connect-src 'self' www.google-analytics.com www.googletagmanager.com www.google.com platform-api.sharethis.com connect.facebook.net; default-src 'self'; font-src 'self' data: fonts.gstatic.com cdn.jsdelivr.net; form-action 'self'; frame-src 'self' www.google.com hdtodayz.to content.jwplatform.com; img-src 'self' data: blob: f.woowoowoowoo.net img.hdtodayz.to hdtodayz.to www.google.com www.gstatic.com www.google-analytics.com www.googletagmanager.com; media-src 'self' data: blob: f.woowoowoowoo.net; object-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net www.googletagmanager.com www.google.com www.google-analytics.com platform-api.sharethis.com connect.facebook.net content.jwplatform.com; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net fonts.googleapis.com www.google.com; 1
frame-src 'self'  https://www.youtube.com https://www.youtube-nocookie.com https://vimeo.com https://*.vimeo.com https://google.com https://www.google.com  https://*.googletagmanager.com https://*.doubleclick.net https://*.siawa.com.au https://*.hsforms.net/  https://www.recaptcha.net https://app.powerbi.com; script-src 'self' 'unsafe-inline' https://www.google.com https://google.com https://www.gstatic.com https://www.recaptcha.net https://www.googletagmanager.com https://cdnjs.cloudflare.com https://maps.googleapis.com/ https://*.hsforms.net/ https://player.vimeo.com/ https://unpkg.com; frame-ancestors 'self' https://oceanreefmarinawa.com https://siawa.com.au https://test.developmentwa.com.au; child-src 'self'  https://www.youtube.com/ https://vimeo.com https://*.vimeo.com https://google.com  https://www.google.com  https://*.googletagmanager.com https://*.doubleclick.net https://*.siawa.com.au https://*.hsforms.net/ https://*.hsforms.com/  https://www.recaptcha.net; connect-src 'self'  https://www.google.com  https://google.com  https://www.recaptcha.net  https://www.googletagmanager.com  https://www.google-analytics.com https://maps.googleapis.com https://ad.doubleclick.net https://ipapi.co/json; img-src 'self' data:  https://www.google.com https://developers.google.com https://www.gstatic.com  https://www.google-analytics.com https://maps.gstatic.com https://maps.googleapis.com https://*.hsforms.com/ https://c.bing.com https://c.clarity.ms; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://*.typekit.net https://fonts.googleapis.com https://cdnjs.cloudflare.com 1
object-src 'none';base-uri 'self';script-src 'nonce-0uH4Sd80AOMqDB3rsO9pog' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.net connect.facebook.net graph.facebook.com business.facebook.com *.twitter.com *.chimpstatic.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.facebook.net connect.facebook.net graph.facebook.com business.facebook.com *.twitter.com *.demdex.net *.chimpstatic.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.trustpilot.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com *.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://images.unsplash.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.com *.google.rs www.magecomp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ imgsct.cookiebot.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.googleapis.com maps.gstatic.com *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://core.helloretail.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://maps.googleapis.com *.facebook.net connect.facebook.net graph.facebook.com business.facebook.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js maps.googleapis.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.trustpilot.com *.chimpstatic.com *.cloudfront.net *.helloretail.com *.addwish.com *.googleapis.com cdn.cookie-script.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ consent.cookiebot.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.cloudfront.net https://static.klaviyo.com https://fonts.googleapis.com https://fonts.bunny.net assets.braintreegateway.com *.trustpilot.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net *.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://core.helloretail.com https://helloretailcdn.com https://maps.googleapis.com https://player.vimeo.com *.facebook.net connect.facebook.net graph.facebook.com business.facebook.com places.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.demdex.net *.chimpstatic.com *.doubleclick.net *.helloretail.com *.addwish.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google-analytics.com *.analytics.google.com cbsignal-1.in-endp.profitmetrics.io googleads.g.doubleclick.net https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com adressevaelger.dk maps.googleapis.com *.redditstatic.com *.reddit.com *.tiktok.com *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.example.com/; report-to report-endpoint; 1
default-src 'self' ;   script-src 'self' 'unsafe-eval' https://analitica.dacoruna.gal 'nonce-aqZhI163p5MfnJpM0X7pzAAAARA';   img-src 'self' data: blob: ;   frame-src 'self' ;   style-src 'self' 'unsafe-inline';   font-src 'self' ;   connect-src 'self' https://analitica.dacoruna.gal ;   object-src 'self' ;   frame-ancestors 'self' ; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gemmax.cz *.prave-sperky.cz *.vegadesign.cz *.vegadesign.local 'self' data: *.twitter.com *.twimg.com data: 'self' 'unsafe-inline'; form-action *.paypal.com 'self' *.gemmax.cz *.prave-sperky.cz *.vegadesign.cz *.vegadesign.local *.facebook.com *.twitter.com yaby.eu 'self' 'unsafe-inline'; frame-ancestors *.gemmax.cz *.prave-sperky.cz 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.packeta.com *.gemmax.cz *.prave-sperky.cz *.vegadesign.cz *.vegadesign.local *.criteo.com *.criteo.net *.doubleclick.net *.facebook.com *.googletagmanager.com *.gopay.cz *.gopay.com *.hotjar.com im9.cz *.im9.cz *.pinterest.com *.twitter.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.facebook.com *.adobedtm.com *.gemmax.cz *.prave-sperky.cz media.gemmax.cz media.prave-sperky.cz *.vegadesign.cz *.vegadesign.local blob: data: *.ceneo.pl *.bing.com *.clarity.ms *.contentsquare.net *.ba.contentsquare.net *.doubleclick.net *.g.doubleclick.net *.facebook.net *.glami.cz glamipixel.com *.google.at *.google.be *.google.bg *.google.com *.google.com.au *.google.com.cr *.google.com.cy *.google.com.do *.google.com.eg *.google.com.mt *.google.com.ph *.google.com.tr *.google.com.ua *.google.co.il *.google.co.jp *.google.co.th *.google.co.tw *.google.co.uk *.google.ae *.google.by *.google.ca *.google.ch *.google.cz *.google.de *.google.dk *.google.es *.google.fr *.google.gr *.google.hr *.google.hu *.google.ie *.google.is *.google.it *.google.lu *.google.lv *.google.md *.google.me *.google.nl *.google.no *.google.pl *.google.pt *.google.ro *.google.ru *.google.rs *.google.se *.google.sk *.google.tn *.google.tr *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.googleusercontent.com *.googlesyndication.com *.heureka.cz *.heureka.sk im9.cz *.imedia.cz *.modio.cz *.packeta.com *.seznam.cz t.co *.twiago.com *.twitter.com *.twimg.com *.ytimg.com *.zbozi.cz www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.googleapis.com *.gstatic.com https://browser.sentry-cdn.com *.googletagmanager.com *.facebook.net *.packeta.com *.adobedtm.com *.gemmax.cz *.prave-sperky.cz static.gemmax.cz static.prave-sperky.cz *.vegadesign.cz *.vegadesign.local *.addthis.com *.bing.com *.cloudflare.com *.clarity.ms *.cloudflareinsights.com *.contentsquare.net *.ba.contentsquare.net *.cookiehub.com cookiehub.net *.cookiehub.eu *.doubleclick.net *.facebook.com *.fontawesome.com glamipixel.com *.googleadservices.com *.google-analytics.com *.googlesyndication.com *.google.cz *.gopay.cz *.gopay.com *.heureka.cz *.heureka.group *.hotjar.com im9.cz *.im9.cz *.imedia.cz *.klaviyo.com *.modio.cz *.outfindo.com 'self' data: *.pinterest.com *.pinimg.com *.seznam.cz sc-static.net *.stape.pro *.tiktok.com *.ads-twitter.com *.twitter.com *.twimg.com *.zbozi.cz www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com *.googleapis.com *.gemmax.cz *.prave-sperky.cz static.gemmax.cz static.prave-sperky.cz *.vegadesign.cz *.vegadesign.local *.cloudflare.com *.cookiehub.com *.cookiehub.eu cookiehub.net *.gstatic.com *.twitter.com *.twimg.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com data: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.googleapis.com https://*.ingest.sentry.io *.google-analytics.com *.packeta.com *.gemmax.cz *.prave-sperky.cz *.vegadesign.cz *.vegadesign.local *.bing.com bat.bing.com bat.bing.net *.stape.pro *.clarity.ms *.contentsquare.net *.ba.contentsquare.net *.cookiehub.com *.cookiehub.net cookiehub.net *.cookiehub.eu *.doubleclick.net *.facebook.com *.facebook.net *.google.cz *.google.sk adservice.google.com *.googleadservices.com *.googlesyndication.com *.gopay.cz *.gopay.com harvester.ocm.heureka.group *.klaviyo.com *.pinterest.com *.seznam.cz *.tiktok.com *.twitter.com *.twimg.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src assets.adobedtm.com *.adobedtm.com *.gemmax.cz *.prave-sperky.cz *.vegadesign.cz *.vegadesign.local *.gopay.cz *.gopay.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://sentry.vegadesign.cz/api/2/security/?sentry_key=51d554344da94ac6ae47a8de4f71817e; report-to report-endpoint; 1
script-src 'self' 'unsafe-inline' code.jquery.com ajax.googleapis.com maps.googleapis.com www.google-analytics.com www.googletagmanager.com www.google.com www.gstatic.com www.youtube.com; report-uri /report-csp-violation; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.amazonaws.com https://acsbapp.com https://*.gstatic.com https://*.google-analytics.com https://cdn.jsdelivr.net https://*.brandcdn.com https://*.facebook.net https://*.cudasvc.com https://*.rlets.com https://*.affirm.com https://*.web-2-tel.com https://*.googletagmanager.com https://*.livechatinc.com https://*.maestra.io https://*.simpli.fi https://sc-static.net https://*.snapchat.com https://www.google.com; style-src 'self' 'unsafe-inline' https://*.jsdelivr.net https://fonts.googleapis.com; img-src 'self' data: https: blob:; font-src 'self' data: https://*.gstatic.com https://fonts.gstatic.com; connect-src 'self' https://*.stripe.com https://*.affirm.com https://*.maestra-static.io https://*.maestra.io https://*.snapchat.com https://*.google-analytics.com https://*.web-2-tel.com https://www.google-analytics.com https://*.googletagmanager.com https://*.acsbapp.com https://*.google.com https://*.doubleclick.net https://*.googleadservices.com; frame-src 'self' https://*.stripe.com https://*.affirm.com https://*.facebook.com https://*.brandcdn.com https://*.facebook.net https://*.adsrvr.org https://*.cloudfront.net https://*.livechatinc.com https://www.google.com; object-src 'none'; base-uri 'self'; form-action 'self' https://*.facebook.com 1
font-src *.cloudflare.com *.bootstrapcdn.com *.fontawesome.com *.gstatic.com *.livechatinc.com/ *.googleapis.com https://static.klaviyo.com/onsite/hosted-fonts/Poppins/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.trustpilot.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.cloudflare.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.gotolstoy.com/ https://maps.gstatic.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.cloudflare.com *.twitter.com *.fontawesome.com *.trustpilot.com *.jscloud.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://api.ideal-postcodes.co.uk/ *.livechatinc.com/ *.gotolstoy.com/ *.bootstrapcdn.com assets.braintreegateway.com tagmanager.google.com s7.addthis.com https://maps.googleapis.com js.mollie.com js.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cloudflare.com *.fontawesome.com *.bootstrapcdn.com https://static.klaviyo.com http://fonts.googleapis.com/ *.googleapis.com assets.braintreegateway.com *.trustpilot.com tagmanager.google.com *.gotolstoy.com/ unsafe-inline 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.gotolstoy.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.cloudflare.com *.ideal-postcodes.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://stats.g.doubleclick.net/ *.livechatinc.com/ *.gotolstoy.com/ ekr.zdassets.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com *.cardinalcommerce.com *.google.com ekr.zdassets.com/ https://maps.googleapis.com *.braintree-api.com google.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https:;script-src https: 'self' 'strict-dynamic' 'nonce-dd0b10defcd596e5c8dbc2c7d5adee24983f7c29b769e4d169adf22787e17a7c' 'unsafe-inline' 'unsafe-eval' 'report-sample';style-src https: 'unsafe-inline';img-src https: data:;connect-src https: wss:;font-src https: data:;object-src 'none';media-src https: blob: data:;frame-src https: data: blob:;child-src 'self' https:;form-action 'self';frame-ancestors https://my.firespring.com;base-uri 'self' https://insights.sitesearch360.com;worker-src 'self' blob:;manifest-src 'self' https://cdn.firespring.com;report-uri /csp_log?n=1 1
connect-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com *.multisafepay.com *.newrelic.com *.paypal.com *.paypalobjects.com vercel.live api.marker.io ssr.marker.io s3.eu-west-1.amazonaws.com/marker.sessions.prod; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.multisafepay.com; img-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com *.multisafepay.com blob: data: media.marker.io app.marker.io edge.marker.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.multisafepay.com vercel.live edge.marker.io app.marker.io; font-src 'self' 'unsafe-inline' 'unsafe-eval' *.gstatic.com app.marker.io edge.marker.io; frame-src 'self' 'unsafe-inline' 'unsafe-eval' *.multisafepay.com vercel.live app.marker.io; child-src 'self' 'unsafe-inline' 'unsafe-eval' app.marker.io; form-action 'self' 'unsafe-inline' 'unsafe-eval' app.marker.io api.marker.io; media-src 'self' 'unsafe-inline' 'unsafe-eval' media.marker.io app.marker.io edge.marker.io; report-uri https://848037e5-5712-4ea4-8f84-4bdca14b9fea.sansec.watch/; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * sandbox.przelewy24.pl secure.przelewy24.pl 'self' 'unsafe-inline'; frame-ancestors pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com geowidget-app.inpost.pl mapa.ecommerce.poczta-polska.pl pudofinder.dpd.com.pl js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * apm.przelewy24.pl *.przelewy24.pl *.espago.com consentcdn.cookiebot.com consent.cookiebot.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com static.przelewy24.pl www.gstatic.com gstatic.com consentcdn.cookiebot.com imgsct.cookiebot.com *.googletagmanager.com ssl.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://furgonetka.pl *.furgonetka.pl https://unpkg.com *.unpkg.com https://jsdelivr.net *.jsdelivr.net https://maps.googleapis.com https://player.vimeo.com geowidget.inpost.pl api.inpost.pl mapa.ecommerce.poczta-polska.pl api.furgonetka.pl cdn.jsdelivr.net *.avada.io *.shopify.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com sandbox.przelewy24.pl secure.przelewy24.pl apm.przelewy24.pl ruch-osm.sysadvisors.pl consentcdn.cookiebot.com consent.cookiebot.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://furgonetka.pl *.furgonetka.pl https://unpkg.com *.unpkg.com https://jsdelivr.net *.jsdelivr.net https://fonts.googleapis.com *.googleapis.com maxcdn.bootstrapcdn.com geowidget.inpost.pl mapa.orlenpaczka.pl cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com ruch-osm.sysadvisors.pl tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://furgonetka.pl *.furgonetka.pl https://unpkg.com *.unpkg.com https://jsdelivr.net *.jsdelivr.net https://maps.googleapis.com https://player.vimeo.com api.furgonetka.pl https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com sandbox.przelewy24.pl secure.przelewy24.pl wss://ws.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com consentcdn.cookiebot.com consent.cookiebot.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-src 'self' *.b2clogin.com https://www.youtube.com https://www.google.com https://services.gastronovi.com www.recaptcha.net *.loadbee.com *.youtube.com; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com js-agent.newrelic.com www.youtube.com www.google-analytics.com bam.nr-data.net static.dvinci-easy.com maps.googleapis.com bat.bing.com www.gstatic.com connect.facebook.net widget.msgp.pl services.gastronovi.com www.gastronavi.de www.googleadservices.com googleads.g.doubleclick.net blob: cdnjs.cloudflare.com https://cdn.kiprotect.com https://cdnjs.cloudflare.com unpkg.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' www.googletagmanager.com static.dvinci-easy.com unpkg.com js-agent.newrelic.com www.google-analytics.com maps.googleapis.com bam.nr-data.net connect.facebook.net bat.bing.com www.gstatic.com www.youtube.com widget.msgp.pl services.gastronovi.com www.gastronavi.de www.googleadservices.com googleads.g.doubleclick.net www.google.com www.recaptcha.net content.syndigo.com js.monitor.azure.com *.dvinci-easy.com www.clarity.ms *.clarity.ms *.loadbee.com cdnjs.cloudflare.com https://cdn.kiprotect.com https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' static.dvinci-easy.com fonts.googleapis.com cdnjs.cloudflare.com unpkg.com; style-src-attr 'self' 'unsafe-inline'; base-uri 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' *.googletagmanager.com *.google-analytics.com *.cookiebot.com consentcdn.cookiebot.com *.hubspot.com *.hs-scripts.com js.hs-analytics.net; style-src 'self' 'unsafe-inline' *.cookiebot.com *.hubspot.com; img-src 'self' data: *.google-analytics.com *.cookiebot.com *.hubspot.com *.hs-analytics.net; font-src 'self' fonts.googleapis.com fonts.gstatic.com; connect-src 'self' *.google-analytics.com *.cookiebot.com *.hubspot.com api.hubapi.com *.hsforms.net; frame-src 'self' *.cookiebot.com *.hubspot.com *.hsforms.net; frame-ancestors 'self'; base-uri 'self'; form-action 'self' *.hsforms.net; report-uri /csp-violation-report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; 1
base-uri 'none'; default-src 'self'; form-action 'self'; frame-ancestors 'self'; img-src 'self' data:; script-src 'report-sample' 'self' usage.jenkins.io; style-src 'report-sample' 'self' 'unsafe-inline'; report-to content-security-policy; report-uri https://djangoci.com/content-security-policy-reporting-endpoint/_rJQ9ekUHoUl798Mpln68xXXDn6TcOYF7cLfwqslP0A=:YW5vbnltb3Vz:aHVkc29uLm1vZGVsLkFsbFZpZXc=: 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'sha256-QSwVNKaisRgbF0R3boc/2ETS8JwhAH+n3IkwJkmWIwQ=' 'sha256-7zPiGFj7SSsuyVzALrK3IZ9YuRQj3TsQlmM4HyuLT0s=' 'sha256-zI25+WT2dtPmH34yyscj6qc8FqVn9iJ3z9XgSf3jDhQ='; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self'; frame-ancestors 'none'; form-action 'self'; upgrade-insecure-requests; report-uri /r/csp-report 1
font-src fonts.googleapis.com fonts.gstatic.com *.googleapis.com *.gstatic.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.webwinkelkeur.nl static.lipscore.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.googlesyndication.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.cookiebot.com *.cookiebot.eu *.consentcdn.cookiebot.com *.consentcdn.cookiebot.eu *.google.nl *.webwinkelkeur.nl *.usercentrics.eu js.mollie.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com https://flagcdn.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com https://images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.google.nl *.webwinkelkeur.nl *.usercentrics.eu img.sct.eu1.usercentrics.eu bat.bing.net bat.bing.com *.bidswitch.net *.adnxs.com *.smartadserver.com *.taboola.com *.omnitagjs.com *.casalemedia.com *.criteo.com *.demdex.net id5-sync.com *.360yield.com *.ivitrack.com *.media.net *.mediavine.com *.postrelease.com *.outbrain.com *.pubmatic.com *.rubiconproject.com *.sharethrough.com *.teads.tv *.tremorhub.com *.3lift.com *.yieldlab.net *.yieldmo.com *.emxdgt.com *.1rx.io sync.targeting.unrulymedia.com https://www.magezon.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ static.lipscore.com blob: img.youtube.com https://www.mollie.com ts.tradetracker.net www.magmodules.eu data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.dhlecommerce.nl *.cookiebot.eu *.cookiebot.com *.consentcdn.cookiebot.com *.consentcdn.cookiebot.eu *.google.nl *.webwinkelkeur.nl *.usercentrics.eu bat.bing.net bat.bing.com *.clarity.ms *.calendly.com *.beslist.nl *.pinimg.com *.criteo.com *.criteo.net *.cloudflareinsights.com *.pinterest.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ static.lipscore.com js.mollie.com applepay.cdn-apple.com tm.tradetracker.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com widget.tagembed.com api.taggbox.com cdn.tagbox.com static.dhlecommerce.nl https://static.klaviyo.com static.lipscore.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.cookiebot.com *.cookiebot.eu *.consentcdn.cookiebot.com *.consentcdn.cookiebot.eu *.google.nl *.usercentrics.eu bat.bing.net bat.bing.com *.clarity.ms *.pinterest.com *.criteo.com *.beslist.nl widget.tagembed.com api.taggbox.com cdn.tagbox.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ wapi.lipscore.com users.lipscore.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
connect-src 'self' https: data: *.app.cookieinformation.com *.google-analytics.com maps.googleapis.com danfoss-ps-shared-test-services-prod.z01.azurefd.net danfoss-ps-prod-fd-algolia-prod.z01.azurefd.net *.algolia.net northeurope-2.in.applicationinsights.azure.com gst.powersource.danfoss.com *.bf.dynatrace.com *.siteintercept.qualtrics.com *.g.doubleclick.net *.analytics.google.com googletagmanager.com danfoss-appswitcherapi-prod-webapi.azurewebsites.net; frame-src https://policy.app.cookieinformation.com https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://*.danfoss.com https://danfoss.eu.qualtrics.com https://player.youku.com; script-src 'self' 'nonce-M2RiNDUwMWMtMjY3NS00MzQwLTg1ZDQtYTk3MzAzMTViMTBl' 'strict-dynamic' ; script-src-elem 'self' 'nonce-M2RiNDUwMWMtMjY3NS00MzQwLTg1ZDQtYTk3MzAzMTViMTBl' 'strict-dynamic' ; style-src 'self' 'unsafe-inline' https://cdn.mosaic.danfoss.com https://fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' https://cdn.mosaic.danfoss.com https://fonts.googleapis.com; style-src-attr 'unsafe-inline'; font-src https://*.danfoss.com https://fonts.googleapis.com https://cdn.mosaic.danfoss.com https://fonts.gstatic.com; object-src 'none'; img-src 'self' data: https://cdn.mosaic.danfoss.com https://*.danfoss.com https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com https://www.clarity.ms https://www.c.clarity.ms https://maps.googleapis.com https://maps.gstatic.com https://i.ytimg.com https://login.windows.net https://*.contentstack.com https://*.qualtrics.com https://*.g.doubleclick.net https://*.google.com; manifest-src 'self' https://cdn.mosaic.danfoss.com; frame-ancestors 'self'; base-uri 'self'; report-uri /api/csp-report 1
default-src 'self' *.qq.com *.google-analytics.com *.ytimg.com *.youtube.com *.googletagmanager.com *.baidu.com *.cookieinformation.com *.licdn.com *.facebook.net *.marketingautomation.com *.sleeknote.com *.sharpspring.com *.gstatic.com  https: 'unsafe-inline' 'unsafe-eval';  block-all-mixed-content; report-uri https://94f62820d7c43df17e384a74a389587c.report-uri.com/r/t/csp/reportOnly 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com *.google.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.pagar.me *.netsgroup.com *.sibs.pt *.seglan.com *.secureacs.com *.rsa3dsauth.com *.apata.io *.cardinalcommerce.com *.santander.com.br *.bradesco.com.br *.bradesco *.stone.com.br *.nubank.com.br *.itau.com.br *.bb.com.br *.caixa.gov.br *.inter.co *.bancointer.com.br *.c6bank.com.br *.bancobmg.com.br *.safra.com.br *.sicoob.com.br *.banrisul.com.br *.banrisul.b.br *.banorte.com *.xpi.com.br *.btgpactual.com *.btgpactualdigital.com *.mercadopago.com.br *.mercadopago.com *.picpay.com *.amedigital.com *.neon.tech *.neon.com.br *.wise.com *.revolut.com *.sandbox.3dsecure.io *.google.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://token.tuna-demo.uy https://token.tunagateway.com https://engine.tunagateway.com/ https://sandbox.tuna-demo.uy *.mercadolibre.com *.pagar.me *.netsgroup.com *.sibs.pt *.seglan.com *.secureacs.com *.rsa3dsauth.com *.apata.io *.cardinalcommerce.com *.santander.com.br *.bradesco.com.br *.bradesco *.stone.com.br *.nubank.com.br *.itau.com.br *.bb.com.br *.caixa.gov.br *.inter.co *.bancointer.com.br *.c6bank.com.br *.bancobmg.com.br *.safra.com.br *.sicoob.com.br *.banrisul.com.br *.banrisul.b.br *.banorte.com *.xpi.com.br *.btgpactual.com *.btgpactualdigital.com *.mercadopago.com.br *.mercadopago.com *.picpay.com *.amedigital.com *.neon.tech *.neon.com.br *.wise.com *.revolut.com *.sandbox.3dsecure.io c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://token.tuna-demo.uy https://token.tunagateway.com https://engine.tunagateway.com/ https://sandbox.tuna-demo.uy *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar *.mercadolivre.com cdn.mundipagg.com api.pagar.me www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.croapp.net https://token.tuna-demo.uy https://token.tunagateway.com https://engine.tunagateway.com/ https://sandbox.tuna-demo.uy assets.streamshop.com.br *.mlstatic.com *.mercadopago.com 3ds2.pagar.me 3ds2-sdx.pagar.me https://onsite-plugin-xp.wake.tech/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.smarthint.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.googleapis.com *.google.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://token.tuna-demo.uy https://token.tunagateway.com https://engine.tunagateway.com/ https://sandbox.tuna-demo.uy *.mercadopago.com *.mercadolibre.com api.mundipagg.com api.pagar.me brasilapi.com.br viacep.com.br servicodados.ibge.gov.br pay.sandbox.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-Xzp7Mvw5lBLB23YeJssOhA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-bTuz4ZQnDNf8W3hhLIUIGw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://cdnjs.cloudflare.com maxcdn.bootstrapcdn.com *.cloudflare.com *.popt.in *.amazonaws.com *.on.aws *.cloudfront.net use.fontawesome.com cdn11.bigcommerce.com store-k1orizwm4c.mybigcommerce.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net https://plumrocket.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com *.authorize.net https://plumrocket.com www.xtento.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com whitepages.site *.saasquatch.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.sharethis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.popt.in *.cloudfront.net www.sourceknowledge.com upx.provenpixel.com www.xtento.com cdn.xtento.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com mysticlabsd8.com alb.reddit.com *.adroll.com ipv4.d.adroll.com media.globalwidget.com tr.snapchat.com clickserv.sitescout.com *.bidswitch.net ml314.com rtb-csync.smartadserver.com *.tapad.com *.eyeota.net *.outbrain.com *.pubmatic.com *.taboola.com eb2.3lift.com *.adnxs.com *.yotpoapi.com segment.prod.bidr.io *.smartadserver.com *.casalemedia.com *.doubleclick.net *.rlcdn.com *.rubiconproject.com *.openx.net defenseboost.com *.undertone.com sync.taboola.com *.adsrvr.org segments.company-target.com pixel.sitescout.com *.clarity.ms *.bing.com www.ojrq.net c.clarity.ms *.sitescout.com d.adroll.com fcmatch.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.sharethis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ code.jquery.com cdnjs.cloudflare.com *.authorize.net *.popt.in *.cloudflare.com *.jsdelivr.net sandbox-assets.secure.checkout.visa.com www.sourceknowledge.com upx.provenpixel.com www.xtento.com cdn.xtento.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com acsbap.com www.redditstatic.com s.adroll.com d.adroll.com scripts.clarity.ms connect.facebook.net aggle.net amplify.outbrain.com analytics.tiktok.com js.ipredictive.com sc-static.net tr.outbrain.com tr.snapchat.com wave.outbrain.com lex.33across.com utt.impactcdn.com assets.mantisadnetwork.com *.clarity.ms app.visitortracking.com www.clarity.ms acsbapp.com fast.ssqt.io storeadmin.mysticlabsd8.com *.adroll.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.sharethis.com https://static.klaviyo.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com *.popt.in *.cloudflare.com *.jsdelivr.net *.on.aws *.amazonaws.com yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com static-tracking.klaviyo.com stackpath.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.sharethis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.authorize.net *.cloudfront.net *.cloudflare.com *.popt.in yotpo.com *.yotpo.com swellrewards.com *.swellrewards.com analytics.mantis.marketing cdn.acsbapp.com analytics.tiktok.com api-js.datadome.co d.adroll.com tr.outbrain.com tr.snapchat.com tr6.snapchat.com *.experian.com *.taboola.com *.pubmatic.com *.triplelift.com *.clarity.ms d.clarity.ms x.clarity.ms pixel-config.reddit.com app.visitortracking.com *.saasquatch.com www.ojrq.net *.visitortracking.com mysticlabs.sjv.io stats.g.doubleclick.net storeadmin.mysticlabsd8.com *.adroll.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src self 'self' 'unsafe-inline' 'unsafe-eval'; base-uri self 'self' 'unsafe-inline'; report-uri https://mysticlabsd8.com/scommercereporturi/report/storefront; report-to report-endpoint; 1
style-src https: 'unsafe-inline'; img-src https: data:; font-src https: data:; report-uri /csp-report 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self' https://*.paypal.com https://*.amazon.de https://*.payments-amazon.com; script-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.payments-amazon.com https://*.media-amazon.com https://www.youtube.com https://www.youtube-nocookie.com https://www.provenexpert.com https://www.googletagmanager.com https://*.google-analytics.com; style-src 'self' 'unsafe-inline' https://*.paypal.com https://*.paypalobjects.com https://*.payments-amazon.com; img-src 'self' data: blob: https://*.ytimg.com https://*.paypal.com https://*.paypalobjects.com https://*.payments-amazon.com https://*.media-amazon.com https://*.provenexpert.com https://*.google-analytics.com https://www.googletagmanager.com; font-src 'self' data:; connect-src 'self' https://*.paypal.com https://*.payments-amazon.com https://*.amazon.com https://*.amazon.de https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://www.provenexpert.com; frame-src 'self' https://*.paypal.com https://*.payments-amazon.com https://*.amazon.com https://*.amazon.de https://www.youtube.com https://www.youtube-nocookie.com https://www.provenexpert.com; media-src 'self' data: blob:; worker-src 'self' blob: 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://plugin.jup.ag https://*.jup.ag https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; media-src 'self' https:; connect-src 'self' https: wss:; frame-src https://jup.ag https://*.jup.ag https://www.googletagmanager.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; report-uri /api/csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://cdn.consentmanager.net https://delivery.consentmanager.net load.cpga.copiatek.store www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com js.mollie.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://cdn.consentmanager.net https://delivery.consentmanager.net https://a.delivery.consentmanager.net https://b.delivery.consentmanager.net https://c.delivery.consentmanager.net https://d.delivery.consentmanager.net analytics.google.com www.google.nl www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.mollie.com www.google.com.ua data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://cdn.consentmanager.net https://delivery.consentmanager.net https://a.delivery.consentmanager.net https://b.delivery.consentmanager.net https://c.delivery.consentmanager.net https://d.delivery.consentmanager.net load.cpga.copiatek.store www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.mollie.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src https://cdn.consentmanager.net https://delivery.consentmanager.net 'self' 'unsafe-inline'; media-src *.adobe.com https://cdn.consentmanager.net https://delivery.consentmanager.net https://a.delivery.consentmanager.net https://b.delivery.consentmanager.net https://c.delivery.consentmanager.net https://d.delivery.consentmanager.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://cdn.consentmanager.net https://delivery.consentmanager.net load.cpga.copiatek.store www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src https://cdn.consentmanager.net https://delivery.consentmanager.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.tailwindcss.com https://www.youtube.com https://s.ytimg.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://app.koah.ai https://platform.twitter.com https://connect.facebook.net https://assets.pinterest.com https://js.stripe.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https: http:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://app.koah.ai https://js.stripe.com https://hooks.stripe.com; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://app.koah.ai https://api.stripe.com; media-src 'self' https: data: blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://checkout.stripe.com; frame-ancestors 'self'; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: blob:; object-src 'none'; base-uri 'self'; manifest-src 'self' https:; media-src 'self'; form-action 'self' https:; frame-src 'self' https:; frame-ancestors 'self'; worker-src 'self' blob:; report-uri https://www.biohof.at/ajaxgateway/csp/; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.googletagmanager.com www.googleadservices.com *.doubleclick.net pagead2.googlesyndication.com *.google.com *.google-analytics.com www.gstatic.com cct.google *.facebook.net *.facebook.com analytics.tiktok.com sc-static.net *.snapchat.com *.addtoany.com *.booxi.com *.doofinder.com *.tapper.ai static.cloudflareinsights.com challenges.cloudflare.com *.checkout.com *.tabby.ai *.tamara.co *.paypal.com *.paypalobjects.com *.cdn-apple.com *.youtube.com cdn.segment.com cdn.sift.com seondf.com deviceinf.com getdeviceinf.com score.jcsc.online; style-src 'self' 'unsafe-inline' *.addtoany.com *.doofinder.com *.checkout.com *.tabby.ai *.tamara.co; font-src 'self' data: fonts.gstatic.com *.tabby.ai *.tamara.co *.doofinder.com *.cdn-apple.com; img-src data: blob: https:; connect-src 'self' *.google-analytics.com www.googleadservices.com *.doubleclick.net *.googletagmanager.com google.com *.google.com *.google.ae *.google.jo *.google.com.sa *.google.com.kw *.google.com.qa *.google.com.bh *.google.com.om *.google.com.eg *.google.iq *.google.com.lb *.facebook.com connect.facebook.net analytics.tiktok.com *.snapchat.com *.addtoany.com *.booxi.com *.doofinder.com *.tapper.ai *.checkout.com *.browser-intake-datadoghq.com *.tabby.ai *.tamara.co *.paypal.com cloudflareinsights.com api.segment.io api.amplitude.com *.seondfresolver.com *.deviceinfresolver.com *.getdeviceinfresolver.com *.seondnsresolve.com; frame-src 'self' *.cdn-apple.com *.googletagmanager.com *.doubleclick.net *.google.com *.facebook.com *.youtube.com www.youtube-nocookie.com *.checkout.com *.tabby.ai *.tamara.co *.paypal.com challenges.cloudflare.com *.booxi.com *.addtoany.com; media-src 'self' blob: data:; worker-src 'self' blob:; object-src 'none'; base-uri 'self' 1
object-src  'none'; connect-src 'self' *.gloryholesecrets.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.gloryholesecrets.com join.gammasecure.com; script-src 'self' *.gloryholesecrets.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.gloryholesecrets.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.bootstrapcdn.com *.fontawesome.com maxcdn.bootstrapcdn.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com https://seo.mageplaza.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.twitter.com *.addthis.com *.facebook.com *.addtoany.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.doofinder.com https://www.magezon.com *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.com magefan.com cm.magefan.com *.facebook.com flagpedia.net https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.google.de www.facebook.com bat.bing.com integrations.etrusted.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.doofinder.com widget.freshworks.com m2epro.freshdesk.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.facebook.net *.jsdelivr.net *.addtoany.com *.googletagmanager.com maps.googleapis.com js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com connect.facebook.net bat.bing.com *.adobedtm.com *.cloudflareinsights.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.doofinder.com widget.freshworks.com m2epro.freshdesk.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bootstrapcdn.com maxcdn.bootstrapcdn.com assets.braintreegateway.com integrations.etrusted.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.doofinder.com wss://*.doofinder.com widget.freshworks.com m2epro.freshdesk.com *.cloudflare.com *.twitter.com *.twimg.com *.g.doubleclick.net *.addthis.com *.pinterest.com *.addtoany.com www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com wss://eu1-layer.doofinder.com googleads.g.doubleclick.net *.adobedtm.com www.facebook.com bat.bing.com *.usercentrics.eu *.cloudflareinsights.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klarnacdn.net static.lipscore.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com account.fetchify.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com www.xtento.com *.wesupply.xyz https://wesupplylabs.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.trackedlink.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.klarna.com *.klarnaevt.com *.klarnacdn.net static.lipscore.com blob: img.youtube.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.xtento.com cdn.xtento.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com *.cdninstagram.com *.fbcdn.net maps.googleapis.com *.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com widget.freshworks.com m2epro.freshdesk.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com static.lipscore.com *.disqus.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.xtento.com cdn.xtento.com *.cloudflare.com ajax.googleapis.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net https://www.googletagmanager.com tagmanager.google.com *.instagram.com maps.googleapis.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com webchat.dotdigital.com webchat.staging.dotdigital.com downloads.mailchimp.com widget.freshworks.com m2epro.freshdesk.com cc-cdn.com *.klarnacdn.net static.lipscore.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com widget.freshworks.com m2epro.freshdesk.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com wapi.lipscore.com users.lipscore.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app https://www.google-analytics.com *.instagram.com *.googleusercontent.com *.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com fonts.googleapis.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.zdassets.com *.pinterest.com *.facebook.com js.mollie.com https://checkout.reepay.com https://*.reepay.com *.reepay.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.googleusercontent.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.zdassets.com brl-hyva.allbugs.info cdn.barlife.dk *.b-cdn.net *.yougreencolumn.com bat.bing.com *.facebook.com *.google.com *.google.com.ua *.doubleclick.net imgsct.cookiebot.com magefan.com cm.magefan.com *.disqus.com quickchart.io img.youtube.com https://www.mollie.com assets.coolrunner.dk assets.homerunner.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com *.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com tagmanager.google.com https://www.googletagmanager.com apis.google.com *.reepay.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.zdassets.com *.addrevenue.io addrevenue.io *.yougreencolumn.com *.cookie-script.com barlife.dk *.barlife.dk *.pinimg.com *.pinterest.com bat.bing.com *.cloudflareinsights.com *.profitmetrics.io *.facebook.com connect.facebook.net *.trustpilot.com *.hotjar.com static.klaviyo.com pricetag.viabill.com *.trustedshops.com *.etrusted.com *.etrusted.site cookie-script.com *.googleadservices.com cct.google https://cdn.jsdelivr.net consent.cookiebot.com www.googletagmanager.com *.disqus.com js.mollie.com pay.google.com applepay.cdn-apple.com https://checkout.reepay.com https://*.reepay.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://static.klaviyo.com https://cdn.jsdelivr.net *.fontawesome.com maxcdn.bootstrapcdn.com fonts.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.zdassets.com *.zendesk.com *.zopim.com wss://*.zopim.com *.googlesyndication.com *.yougreencolumn.com *.profitmetrics.io *.trustpilot.com *.pinimg.com *.pinterest.com bat.bing.com bat.bing.net browser-intake-datadoghq.eu *.doubleclick.net *.googleadservices.com *.googletagmanager.com cct.google *.youtube.com cdn.jsdelivr.net cookie-script.com *.cookie-script.com cbsignal-1.in-endp.profitmetrics.io googleads.g.doubleclick.net https://checkout.reepay.com https://*.reepay.com *.reepay.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://static.addtoany.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com *.avada.io *.shopify.com https://static.addtoany.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://get.geojs.io *.avada.io https://static.addtoany.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; object-src 'none'; base-uri 'none'; script-src 'nonce-ba981ace861b26c51a2b85caf258a2b5' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; script-src-elem 'nonce-ba981ace861b26c51a2b85caf258a2b5' 'strict-dynamic' 'self' https://securepubads.g.doubleclick.net https://pubads.g.doubleclick.net https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://tpc.googlesyndication.com https://partner.googleadservices.com https://fundingchoicesmessages.google.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://at.alicdn.com; img-src 'self' data: https: http: blob:; connect-src 'self' https: wss:; frame-src 'self' https: http:; media-src 'self' data: https: http: blob:; worker-src 'self' blob: 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://challenges.cloudflare.com https://www.youtube.com https://s.ytimg.com https://widget.trustpilot.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://www.google-analytics.com https://i.ytimg.com https://img.youtube.com https://user-images.trustpilot.com; media-src 'self' data: blob:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com; frame-src 'self' https://challenges.cloudflare.com https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://www.tiktok.com https://widget.trustpilot.com; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /api/csp-report 1
font-src www.mygossip.in data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 'self' data: *.payu.in https://plumrocket.com www.mygossip.in 'self' 'unsafe-inline'; frame-ancestors 'self' data: *.payu.in *.facebook.com *.flydubai.com *.myshopify.com www.mygossip.in 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com 'self' data: *.payu.in *.facebook.com *.flydubai.com *.myshopify.com https://plumrocket.com api.razorpay.com *.weltpixel.com www.mygossip.in 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com cdn.razorpay.com www.mygossip.in data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.mgt.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com *.payu.in checkout.razorpay.com www.mygossip.in 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline www.mygossip.in 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.mygossip.in 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://get.geojs.io *.mgt.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.payu.in lumberjack.razorpay.com lumberjack-metrics.razorpay.com www.mygossip.in 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com www.mygossip.in http: https: blob: 'self' 'unsafe-inline'; default-src www.mygossip.in 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-IXMrIKSgKdlKoBo0trRrLQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-DNiEVOLH9sjUNr8+NQ1lR29kXJI=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-I5_5mgYLHGXosHII6KDKXA' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
font-src *.cloudflare.com *.iconify.design https://fonts.gstatic.com *.gstatic.com *.fontawesome.com cdnjs.cloudflare.com *.facebook.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com https://www.google.com https://www.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cloudflare.com *.iconify.design *.googleapis.com *.gstatic.com *.fontawesome.com *.twitter.com www.googletagmanager.com www.paypalobjects.com *.facebook.com *.facebook.net connect.facebook.net www.facebook.com firebasestorage.googleapis.com *.google.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.cloudflare.com *.twitter.com *.iconify.design *.googleapis.com *.gstatic.com *.fontawesome.com *.facebook.com www.googletagmanager.com td.doubleclick.net *.google.com *.google.com.co *.youtube.com/ https://scontent-ams4-1.cdninstagram.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io nguillers.com *.nguillers.com *.cloudflare.com *.iconify.design *.googleapis.com *.gstatic.com *.fontawesome.com *.amazonaws.com seeklogo.com *.seeklogo.com www.facebook.com *.usercentrics.eu maps.googleapis.com maps.gstatic.com *.facebook.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com checkout.paypal.com c.paypal.com *.twimg.com *.twitter.com stats.g.doubleclick.net facebook.com *.doubleclick.net files.stripe.com statics.addi.com s3.amazonaws.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.ytimg.com *.lightemporium.com *.google.com *.maps.gstatic.com https://clauem2.arrowtheme.com https://scontent-ams4-1.cdninstagram.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com *.hsforms.net *.hsforms.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.cloudflare.com *.iconify.design *.googleapis.com *.gstatic.com *.fontawesome.com *.jsdelivr.net *.credinet.co player.vimeo.com *.facebook.com *.facebook.net connect.facebook.net www.facebook.com d335luupugsy2.cloudfront.net *.google-analytics.com firebasestorage.googleapis.com stats.g.doubleclick.net demdex.net amcglobal.sc.omtrdc.net flowlink.paypal.com *.hsforms.net *.hsforms.com facebook.com checkout.paypal.com js.stripe.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.maps.googleapis.com *.trackedlink.net *.google.com *.maps.gstatic.com maps.googleapis.com *.googletagmanager.com *.googleadservices.com https://scontent-ams4-1.cdninstagram.com *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cloudflare.com *.iconify.design *.googleapis.com *.gstatic.com *.fontawesome.com *.jsdelivr.net *.facebook.com stats.g.doubleclick.net www.google-analytics.com downloads.mailchimp.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com fonts.googleapis.com *.google-analytics.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.cloudflare.com *.iconify.design *.googleapis.com *.gstatic.com *.fontawesome.com *.credinet.co *.paypal.com *.paypalobjects.com *.facebook.com *.facebook.net connect.facebook.net www.facebook.com firebasestorage.googleapis.com *.seeklogo.com flowlink.paypal.com analyticsuite.io *.hsforms.net *.hsforms.com facebook.com api.stripe.com api.paypal.com www.merchant-center-analytics.goog stats.g.doubleclick.net form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.twitter.com *.twimg.com *.googleadservices.com *.google-analytics.com *.sandbox.paypal.com *.trackedlink.net *.ampproject.org *.google.com *.google.co.in *.maps.gstatic.com *.maps.googleapis.com maps.googleapis.com https://scontent-ams4-1.cdninstagram.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com google.com t.elasticsuite.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: blob: https:; connect-src 'self' https:; frame-src 'self' https:; frame-ancestors 'self' https:; upgrade-insecure-requests; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https://www.facebook.com https://static.bhphoto.com https://*.google-analytics.com https://www.googletagmanager.com; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://connect.facebook.net; frame-src 'self' https://www.google.com https://maps.google.com; object-src 'none'; base-uri 'self'; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data:; frame-src https://www.youtube.com 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net https://cdn.caps.nl data: 'self' 'unsafe-inline'; form-action *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com/ https://tweakers.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com maps.googleapis.com maps.gstatic.com https://www.magezon.com https://firebasestorage.googleapis.com *.koongo.com www.google.com.ua https://cdn.caps.nl https://www.google.com https://www.google.es https://www.google.nl https://www.google-analytics.com *.tweakwisenavigator.net https://sgtm.caps.nl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com maps.googleapis.com *.avada.io *.shopify.com https://www.google.com cdnjs.cloudflare.com/ajax/libs/highlight.js/9.3.0/highlight.min.js *.tweakwisenavigator.net *.tweakwisenavigator.com https://cdn.caps.nl https://chimpstatic.com https://www.googletagmanager.com https://sgtm.caps.nl 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com downloads.mailchimp.com *.fontawesome.com https://fonts.bunny.net cdnjs.cloudflare.com/ajax/libs/highlight.js/9.3.0/styles/darkula.min.css use.typekit.net p.typekit.net https://cdn-images.mailchimp.com https://cdn.caps.nl *.tweakwisenavigator.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com maps.googleapis.com https://get.geojs.io *.avada.io *.koongo.com *.tweakwise.com *.tweakwisenavigator.net *.tweakwisenavigator.com https://cdn.caps.nl https://cognito-identity.eu-central-1.amazonaws.com https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://www.postcode-checkout.nl https://dpm.demdex.net https://amcglobal.sc.omtrdc.net https://www.googleadservices.com https://analytics.google.com https://vimeo.com https://*.avada.io https://*.koongo.com https://*.facebook.net *.pay.nl https://sgtm.caps.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.caps.nl/paynl/csp/report; report-to report-endpoint; 1
font-src www.paypalobjects.com https://*.gstatic.com https://applepay.cdn-apple.com *.fontawesome.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://applepay.cdn-apple.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://up.cybersource.com https://assets.secure.checkout.visa.com https://src.mastercard.com *.addthis.com https://www.sovendus-connect.com *.boxers.nl *.boxers.be *.sokken.nl *.sokken.be *.zwembroeken.nl *.shirts.nl https://www.facebook.com https://www.googletagmanager.com https://td.doubleclick.net 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com https://belco-prod.s3-eu-central-1.amazonaws.com https://static.buckaroo.nl https://www.buckaroo.nl https://www.paypalobjects.com https://pay.google.com https://developers.google.com https://applepay.cdn-apple.com https://up.cybersource.com https://assets.secure.checkout.visa.com https://src.mastercard.com https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com *.hsforms.net *.hsforms.com 'self' data: https://imgproxy.vendic.dev data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https://cdn.belco.io https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com https://www.sandbox.paypal.com https://applepay.cdn-apple.com https://pay.google.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://up.cybersource.com https://flex.cybersource.com https://assets.secure.checkout.visa.com https://src.mastercard.com sdk.copernica.com https://maps.googleapis.com https://player.vimeo.com *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.hsforms.net *.hsforms.com *.google.com *.gstatic.com *.boxers.nl *.boxers.be *.sokken.nl *.sokken.be *.zwembroeken.nl *.shirts.nl d5yoctgpv4cpx.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://*.googleapis.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://cdn.jsdelivr.net *.fontawesome.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net vimeo.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com wss://chat.belco.io https://cdn.belco.io https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://applepay.buckaroo.io https://smp-paymentservices.apple.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://auth.buckaroo.io https://clicktopay-externalapi.prod-pci.buckaroo.io https://up.cybersource.com https://flex.cybersource.com https://assets.secure.checkout.visa.com https://src.mastercard.com sdk.copernica.com wss://sdk.copernica.com https://maps.googleapis.com https://player.vimeo.com t.elasticsuite.io *.hsforms.net *.hsforms.com https://*.execute-api.eu-central-1.amazonaws.com https://www.facebook.com https://www.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'strict-dynamic' https://www.googletagmanager.com 'nonce-9kbMggGHGZkSsqksMaaaog=='; object-src 'none'; base-uri 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://use.fontawesome.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com sandbox.cashfree.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * api.razorpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io cashfreelogo.cashfree.com *.disqus.com https://www.magezon.com *.google.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com cdn.razorpay.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com sdk.cashfree.com *.disqus.com *.gstatic.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com checkout.razorpay.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://use.fontawesome.com *.google.com https://fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://olegnax.com https://api.instagram.com https://graph.instagram.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com lumberjack.razorpay.com lumberjack-metrics.razorpay.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://discord.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://www.facebook.com js.mollie.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://lh3.googleusercontent.com https://images.unsplash.com https://firebasestorage.googleapis.com flagpedia.net https://www.mollie.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://maps.googleapis.com https://player.vimeo.com *.avada.io *.shopify.com https://connect.facebook.net *.gstatic.com maps.googleapis.com js.mollie.com https://cdn.jsdelivr.net https://code.highcharts.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.gstatic.com https://cdn.jsdelivr.net tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://maps.googleapis.com https://player.vimeo.com https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
img-src 'self' data:; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; object-src 'none'; font-src 'self'; manifest-src 'self'; frame-src 'self' blob: https:; frame-ancestors 'self' https:; 1
object-src 'none';base-uri 'self';script-src 'nonce-NPnNM1cuWwAr1vvKRvDRtA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.googleapis.com *.gstatic.com https://*.googleapis.com https://*.gstatic.com *.fontawesome.com https://unpkg.com https://*.typekit.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.certcapture.com https://elements.sandbox.fortis.tech https://elements.fortis.tech https://secure.livechatinc.com https://www.googletagmanager.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.googleapis.com *.gstatic.com *.certcapture.com https://track.hubspot.com https://www.facebook.com *.files-text.com *.livechatinc.com *.livechat-files.com *.livechat-static.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com *.certcapture.com https://developer.adobe.com https://magento.com https://js.sandbox.fortis.tech https://js.fortis.tech https://elements.sandbox.fortis.tech https://elements.fortis.tech https://api.livechatinc.com http://cdn.livechatinc.com https://www.googletagmanager.com https://maps.googleapis.com https://unpkg.com https://cdn.livechatinc.com https://connect.facebook.net https://js-na1.hs-scripts.com http://js-na1.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hsadspixel.net https://cdnjs.cloudflare.com *.livechatinc.com *.livechat-static.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com https://unpkg.com https://*.typekit.net https://cdnjs.cloudflare.com *.livechatinc.com *.fontawesome.com 'self' 'unsafe-inline'; object-src *.livechatinc.com 'self' 'unsafe-inline'; media-src *.adobe.com *.livechatinc.com *.livechat-static.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com *.certcapture.com https://developer.adobe.com https://elements.sandbox.fortis.tech https://elements.fortis.tech https://api.hubapi.com https://www.facebook.com *.livechatinc.com *.text.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ places.googleapis.com 'self' 'unsafe-inline'; child-src *.certcapture.com *.livechatinc.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googlesyndication.com https://*.google.com https://*.googletagmanager.com https://*.google-analytics.com https://*.ezoic.net https://*.ezojs.com https://*.ezoiccdn.com https://cdn-cookieyes.com https://*.cookieyes.com https://fundingchoicesmessages.google.com https://challenges.cloudflare.com https://*.doubleclick.net; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src https:; object-src 'none'; base-uri 'self' 1
default-src https://www.amyntagroup.com 'self' https://*.amyntagroup.com https://amyntagroup.com  ;  script-src 'self' 'unsafe-eval' 'unsafe-inline'  https://www.amyntagroup.com ; 1
font-src data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ s7.addthis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com connect.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com ekr.zdassets.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-wQsiUv7tTTvdB9A-dh2_tw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; worker-src 'self' blob: https:; style-src 'self' 'unsafe-inline' https:; media-src 'self' data: *.masterenglish.com *.shared.masterenglish.com; img-src 'self' blob: data: https:; connect-src 'self' data: properties: https:; font-src 'self' data: https:; object-src 'none'; base-uri 'self'; form-action 'self' www.facebook.com; frame-src 'self' https: mailto:; frame-ancestors 'none'; upgrade-insecure-requests; report-to csp-endpoint 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https://*.linkedin.com https://*.addthis.com https://*.acsbapp.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://px.ads.linkedin.com https://px4.ads.linkedin.com https://*.ads.linkedin.com https://*.linkedin.com https://new-collect.albacross.com https://*.albacross.com https://*.addthis.com https://*.addtoany.com https://*.acsbapp.com https://track.hubspot.com https://*.hubspot.com https://www.google.co.in https://www.google.co.uk https://www.google.com.au https://www.google.ca https://www.google.de https://www.google.fr *.files-text.com *.livechatinc.com *.livechat-files.com *.livechat-static.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page https://s7.addthis.com https://*.addthis.com https://static.addtoany.com https://*.addtoany.com https://acsbapp.com https://*.acsbapp.com https://js.hs-scripts.com https://js-na1.hs-scripts.com https://*.hs-scripts.com https://js.hs-banner.com https://*.hs-banner.com https://js.hsadspixel.net https://*.hsadspixel.net https://js.hscollectedforms.net https://*.hscollectedforms.net https://js.hs-analytics.net https://*.hs-analytics.net https://snap.licdn.com https://*.licdn.com https://serve.albacross.com https://*.albacross.com *.livechatinc.com *.livechat-static.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.livechatinc.com *.fontawesome.com assets.braintreegateway.com *.googleapis.com *.gstatic.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src *.livechatinc.com 'self' 'unsafe-inline'; media-src *.adobe.com *.livechatinc.com *.livechat-static.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://cdn.acsbapp.com https://*.acsbapp.com https://acsbapp.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://*.ads.linkedin.com https://*.linkedin.com https://snap.licdn.com https://*.licdn.com https://api.hubapi.com https://*.hubapi.com https://forms.hscollectedforms.net https://*.hscollectedforms.net https://js.hs-scripts.com https://js.hs-analytics.net https://js.hsadspixel.net https://*.hsappstatic.net https://serve.albacross.com https://new-collect.albacross.com https://*.albacross.com https://s7.addthis.com https://*.addthis.com https://static.addtoany.com https://*.addtoany.com *.livechatinc.com *.text.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src *.livechatinc.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.plyr.io https://cdn.datatables.net https://unpkg.com https://maxcdn.bootstrapcdn.com https://www.gstatic.com https://challenges.cloudflare.com https://www.youtube.com https://s.ytimg.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.plyr.io https://cdn.datatables.net https://unpkg.com https://maxcdn.bootstrapcdn.com; img-src 'self' data: blob: https://thumbs.voxtv.cz https://cdn-petra.voxtv.cz https://profile-cdn.voxtv.cz https://stream-context.voxtv.cz https://www.google-analytics.com https://www.googletagmanager.com https://www.gravatar.com https://i.ytimg.com https://placehold.it; font-src 'self' data: https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com; media-src 'self' blob: https://cdn-petra.voxtv.cz https://stream-context.voxtv.cz; connect-src 'self' https://cdn-petra.voxtv.cz https://stream-context.voxtv.cz https://www.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://challenges.cloudflare.com; frame-src 'self' https://www.googletagmanager.com https://challenges.cloudflare.com https://www.youtube.com https://www.youtube-nocookie.com; worker-src 'self' blob:; manifest-src 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com *.haendlerbund.de *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.googleapis.de *.zopim.com *.zopim.io *.unpkg.com unpkg.com trustedshops.com cloud.ccm19.de *.ccm19.de data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.trustedshops.com *.unpkg.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.weltpixel.com https://cdn.consentmanager.net https://delivery.consentmanager.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.haendlerbund.de https://www.youtube.com http://www.sandbox.paypal.com *.twitter.com *.trustedshops.com trustedshops.com *.unpkg.com unpkg.com *.doubleclick.net cloud.ccm19.de *.ccm19.de 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://cdn.consentmanager.net https://delivery.consentmanager.net *.doofinder.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.haendlerbund.de *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.bing.com *.zopim.com *.zopim.io *.doubleclick.net *.google.com *.google.de *.google.co.in *.mastercard.com *.trustedshops.com trustedshops.com *.unpkg.com cloud.ccm19.de *.ccm19.de maps.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com jsd-widget.atlassian.com https://cdn.consentmanager.net https://delivery.consentmanager.net *.doofinder.com chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.haendlerbund.de *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bing.com *.zopim.com *.zdassets.com *.roomvo.com roomvo.com *.unpkg.com *.doubleclick.net cloud.ccm19.de *.ccm19.de ajax.googleapis.com maps.googleapis.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.doofinder.com downloads.mailchimp.com *.fontawesome.com assets.braintreegateway.com *.haendlerbund.de *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.bing.com *.unpkg.com https://unpkg.com/ *.googletagmanager.com cloud.ccm19.de *.ccm19.de 'self' 'unsafe-inline'; object-src https://cdn.consentmanager.net https://delivery.consentmanager.net 'self' 'unsafe-inline'; media-src *.adobe.com https://cdn.consentmanager.net https://delivery.consentmanager.net *.haendlerbund.de *.zopim.com *.zopim.io *.trustedshops.com trustedshops.com *.unpkg.com unpkg.com cloud.ccm19.de *.ccm19.de 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com jsd-widget.atlassian.com api-private.atlassian.com https://cdn.consentmanager.net https://delivery.consentmanager.net *.doofinder.com wss://*.doofinder.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com www.google.com www.google.de www.google-analytics.de *.cloudflare.com *.twitter.com *.twimg.com *.zdassets.com *.zopim.com *.zopim.io wss://widget-mediator.zopim.com *.google-analytics.com https://stats.g.doubleclick.net *.doubleclick.net *.trustedshops.com trustedshops.com *.unpkg.com *.roomvo.com roomvo.com cloud.ccm19.de *.ccm19.de 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src https://cdn.consentmanager.net https://delivery.consentmanager.net 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://*.gsmboutique.ro https://*.gsmagazine.ro https://*.usams.ro https://www.googletagmanager.com https://*.tawk.to https://*.jsdelivr.net https://*.google.ro https://*.googleadservices.com https://google.com/pagead https://google.com/ccm/form-data maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com https://*.gsmboutique.ro https://*.gsmagazine.ro https://*.usams.ro https://www.googletagmanager.com https://*.tawk.to https://*.jsdelivr.net https://*.google.ro https://*.googleadservices.com https://google.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://*.gsmboutique.ro https://*.gsmagazine.ro https://*.usams.ro https://www.googletagmanager.com https://*.tawk.to https://*.jsdelivr.net https://*.google.ro https://*.googleadservices.com https://google.com https://www.google.ro https://www.tiktok.com https://www.tiktok.com/embed/ 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net https://www.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com https://*.gsmboutique.ro https://c.clarity.ms https://r.clarity.ms https://*.clarity.ms https://c.bing.com https://*.gsmagazine.ro https://*.usams.ro https://*.google-analytics.com https://*.tawk.to https://*.jsdelivr.net https://*.google.ro https://*.googleadservices.com https://google.com https://analytics.tiktok.com https://images.unsplash.com blob: data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com *.google.bg https://www.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com https://*.jsdelivr.net *.tiktok.com https://*.gsmboutique.ro https://www.clarity.ms https://*.gsmagazine.ro https://*.usams.ro https://*.google-analytics.com https://*.tawk.to https://*.google.ro https://*.googleadservices.com https://google.com https://analytics.tiktok.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com https://www.googletagmanager.com *.googlesyndication.com *.tiktok.com https://*.gsmboutique.ro https://*.gsmagazine.ro https://*.usams.ro https://*.tawk.to https://*.jsdelivr.net https://*.google.ro https://*.googleadservices.com https://google.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com https://*.doubleclick.net *.googlesyndication.com *.tiktok.com https://*.gsmboutique.ro https://c.clarity.ms https://r.clarity.ms https://*.clarity.ms https://*.gsmagazine.ro https://*.usams.ro https://www.googletagmanager.com https://*.google-analytics.com https://*.tawk.to https://*.jsdelivr.net https://*.google.ro https://googleadservices.com https://google.com https://analytics.tiktok.com https://maps.googleapis.com https://player.vimeo.com places.googleapis.com ingress.flareapp.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://cdnjs.cloudflare.com *.klarnacdn.net *.fontawesome.com *.googleapis.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.wesupply.xyz https://wesupplylabs.com guarantee-cdn.com *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https://www.google.co.in https://www.google.co.uk *.klarna.com *.klarnaevt.com *.klarnacdn.net https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com guarantee-cdn.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://static.hotjar.com https://script.hotjar.com https://pcls1.craftyclicks.co.uk *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.fontawesome.com *.googleapis.com *.gstatic.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cloudflare.com guarantee-cdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://cdnjs.cloudflare.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com cash-f.squarecdn.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net * *.sendcloud.sc *.jsdelivr.net js.mollie.com https://www.googletagmanager.com https://td.doubleclick.net 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com * https://images.unsplash.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com magefan.com cm.magefan.com *.amazonaws.com https://www.mollie.com *.hsforms.net *.hsforms.com 'self' data: https://maps.gstatic.com https://imgproxy.vendic.dev data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://maps.googleapis.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.sendcloud.sc *.jsdelivr.net js.mollie.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.cash.app downloads.mailchimp.com *.sendcloud.sc *.jsdelivr.net *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com * https://maps.googleapis.com https://player.vimeo.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com t.elasticsuite.io *.hsforms.net *.hsforms.com https://www.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-ca1930782cd85755c19a0ca9ccdbd2a49c7e3d16c16726533df4ea5eab55465b' 'strict-dynamic' 'report-sample' 'sha256-uDlt9ZdSbqVygheSRezUUp1M3TutA6TKZ7TpveFjaw0='; frame-src 'self' *.google.com https://www.youtube.com/ https://www.facebook.com/ https://weatherwidget.io/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.datatables.net https://cdn.jsdelivr.net https://stackpath.bootstrapcdn.com https://*.fontawesome.com https://cdn.ckeditor.com; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com https://*.fontawesome.com https://use.typekit.net https://vlibras.gov.br https://cdn.jsdelivr.net; connect-src 'self' data: blob: https://www.google-analytics.com https://*.googleapis.com *.google.com https://*.gstatic.com https://*.fontawesome.com https://cke4.ckeditor.com https://api.iconify.design https://yoast.com https://api.unisvg.com https://acessos.vlibras.gov.br https://dicionario2.vlibras.gov.br https://vlibras.gov.br https://cdn.jsdelivr.net https://traducao2.vlibras.gov.br; img-src 'self' data: https://vlibras.gov.br https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://*.tile.osm.org https://cdn.ckeditor.com https://secure.gravatar.com https://api.iconify.design https://api.simplesvg.com https://api.unisvg.com; object-src 'none'; base-uri 'self'; worker-src blob:; frame-ancestors 'none'; report-to default; report-uri /_csp; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://*.ably.io wss://*.ably.io https://*.ably-realtime.com wss://*.ably-realtime.com https://*.ably.net wss://*.ably.net; frame-src https://challenges.cloudflare.com; frame-ancestors 'none'; base-uri 'self'; object-src 'none'; form-action 'self' 1
default-src 'self' *.zdassets.com *.zopim.com *.zendesk.com wss://*.zendesk.com wss://*.zopim.com ; script-src 'self' 'unsafe-inline' 'unsafe-eval' d1qmrxg9gbf226.cloudfront.net *.klaviyo.com cdn.qantasloyalty.com api-accent.bloomreach.co api.smooch.io mpsnare.iesnare.com/snare.js mpsnare.iesnare.com/script/logo.js applepay.cdn-apple.com *.googleadservices.com assets.braintreegateway.com/web *.bazaarvoice.com *.doubleclick.net storage.googleapis.com/workbox-cdn www.google.com/recaptcha www.gstatic.com/recaptcha *.squarecdn.com cfjump.drmartens.com.au cfjump.drmartens.co.nz *.fullstory.com www.googletagmanager.com analytics.tiktok.com cdn.unidays.world *.truefitcorp.com www.paypalobjects.com/api/checkout.min.js *.klaviyo.com t.cfjump.com *.zdassets.com connect.facebook.net maps.googleapis.com dma-cdn.staging.truefitcorp.com/fitrec/dma/js/tracker.js js-agent.newrelic.com js.datadome.co ct.captcha-delivery.com *.adobedtm.com *.afterpay.com *.demdex.net *.forter.com dlthst9q2beh8.cloudfront.net d2nww8zpyj5pk0.cloudfront.net *.google-analytics.com *.paypal.com afterpay.com foursixty.com *.useinsider.com *.roymorgan.com *.adobemc.com ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js js-sandbox.squarecdn.com s.pinimg.com lantern.roeyecdn.com ct.pinterest.com js.squarecdn.com *.stg.qantasloyalty.com/appcache/wid-redemptions-button/master/ ; style-src 'self' 'unsafe-inline' *.klaviyo.com/onsite/ display.ugc.bazaarvoice.com maxcdn.bootstrapcdn.com/font-awesome *.typekit.net fonts.googleapis.com assets.braintreegateway.com assets.braintreegateway.com/web/dropin/1.16.0/css/dropin.css *.adobetm.com foursixty.com *.adobemc.com static.klaviyo.com/onsite/js static-tracking.klaviyo.com/onsite/js assets.api.useinsider.com/css ; img-src data: 'self' api-accent.bloomreach.co *.zendesk.com dpm.demdex.net www.googleadservices.com/ccm www.magentocommerce.com/products/media *.drmartens.co.nz *.drmartens.com.au cm.everesttech.net/cm/dd googleads.g.doubleclick.net ad.doubleclick.net www.google.com/ccm www.paypalobjects.com www.google.com www.google.com.au www.google.co.nz www.google.com.vn maps.gstatic.com/mapfiles scontent.cdninstagram.com *.afterpay.com *.accentgra.com www.googletagmanager.com www.facebook.com *.bazaarvoice.com t.paypal.com duuytoqss3gu4.cloudfront.net df45ay5pw60dy.cloudfront.net d3nocrch4qti4v.cloudfront.net *.google-analytics.com *.pinterest.com *.tiktok.com *.useinsider.com maps.googleapis.com/maps developers.google.com *.zopim.io *.zdassets.com adservice.google.com www.drmartens.com lantern.roeye.com ; object-src 'none' ; base-uri 'self' ; child-src 'self' blob: ; connect-src 'self' gateway.stg.qantasloyalty.com gateway.qantasloyalty.com api-accent.bloomreach.co analytics.google.com/g/collect iq.afterpay.com/us/v1 iq.afterpay-beta.com/us/v1 *.my.sentry.io wss://api.smooch.io *.accentgra.com www.facebook.com/tr google.com www.google.com collect-ap2.attraqt.io smetrics.drmartens.co.nz *.fullstory.com *.klaviyo.com smetrics.drmartens.com.au api-js.datadome.co *.adobedc.net *.afterpay.com *.bazaarvoice.com *.braintree-api.com *.braintreegateway.com *.demdex.net *.forter.com *.foursixty.com google.com/ccm www.google.com/ccm *.google-analytics.com *.googleapis.com *.nr-data.net *.paypal.com *.taboola.com *.truefitcorp.com *.zdassets.com *.zendesk.com *.zopim.com accentgroupxpdev.112.2o7.net afterpay.com analytics.tiktok.com facebook.com *.roymorgan.com foursixty.com kleber.datatoolscloud.net.au sentry.io vimeo.com wss://widget-mediator.zopim.com d2o5idwacg3gyw.cloudfront.net dz8rit8v72mig.cloudfront.net d2lxqodqbpy7c2.cloudfront.net d6rak4b14t5gp.cloudfront.net d3k4bt74u9esq1.cloudfront.net wss://cdn0.forter.com *.useinsider.com api.myunidays.com opreq.observepoint.com ct.pinterest.com stats.g.doubleclick.net/g/collect *.stg.qantasloyalty.com/redemptions/ ; font-src data: 'self' maxcdn.bootstrapcdn.com/font-awesome fonts.gstatic.com *.truefitcorp.com *.useinsider.com static.klaviyo.com use.typekit.net ; frame-src 'self' checkout.qantas.com api-accent.bloomreach.co www.googletagmanager.com geo.captcha-delivery.com *.formstack.com *.afterpay.com *.bazaarvoice.com *.criteo.net *.demdex.net *.everesttech.net *.everestjs.net *.doubleclick.net *.facebook.com *.myunidays.com *.omniparcelreturns.com *.paypal.com *.paypalobjects.com *.truefitcorp.com *.useinsider.com *.vimeo.com *.youtu.be *.youtube.com afterpay.com assets.braintreegateway.com everestjs.net facebook.com foursixty.com google.com www.google.com vimeo.com ct.pinterest.com  *.qlstg.qantas.com/ ; worker-src 'self' blob: *.accentgra.com *.drmartens.co.nz *.drmartens.com.au; 1
default-src 'self'; script-src 'self' https://challenges.cloudflare.com https://www.googletagmanager.com https://bat.bing.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline'; img-src 'self' https://50pnlpush-3ac6.kxcdn.com https://bat.bing.com https://www.google.nl https://www.google.com https://www.google.be https://www.googletagmanager.com https://googleads.g.doubleclick.net https://dashboard.trustprofile.com data:; font-src 'self' data: https://use.typekit.net; connect-src 'self' https://challenges.cloudflare.com https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://bat.bing.com https://bat.bing.net https://google.com https://www.google.com https://www.google.nl https://www.google.be https://www.googleadservices.com https://*.doubleclick.net; frame-src https://challenges.cloudflare.com https://www.googletagmanager.com; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /inc_new/csp-report.php; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://*.googletagmanager.com https://*.google-analytics.com https://ssl.google-analytics.com https://www.googleoptimize.com https://*.hotjar.com https://maps.googleapis.com https://accounts.google.com https://cdn.segment.com https://cdn.segment.io https://*.clarity.ms https://analytics.tiktok.com https://*.tiktokw.us https://*.taboola.com https://bat.bing.com https://connect.facebook.net https://snap.licdn.com https://*.amplitude.com https://s.go-mpulse.net https://*.creativecdn.com https://*.cloudfront.net https://bzrcdn.openai.com; connect-src 'self' https://*.habi.co https://*.private.habi.co https://*.google-analytics.com https://ampcid.google.com https://ampcid.google.com.co https://analytics.tiktok.com https://*.tiktokw.us https://*.taboola.com https://api.segment.io https://cdn.segment.io https://bat.bing.com https://connect.facebook.net https://www.facebook.com https://px.ads.linkedin.com https://*.ingest.sentry.io https://*.ingest.us.sentry.io https://*.amplitude.com https://*.clarity.ms https://*.hotjar.com wss://*.hotjar.com https://s.go-mpulse.net https://c.go-mpulse.net https://event.getblue.io https://*.appspot.com https://*.cloudfront.net; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' https://accounts.google.com https://*.googletagmanager.com https://td.doubleclick.net https://www.facebook.com; worker-src 'self' blob:; frame-ancestors 'self'; report-uri https://csp-report.habi.co/csp-report 1
img-src https://higherlogicdownload.s3.amazonaws.com/NASBLA/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/NASBLA/ https://img.youtube.com/vi/ https://static.filestackapi.com/picker/ https://d2x5ku95bkycr3.cloudfront.net https://higherlogiclongterm.s3.amazonaws.com/NASBLA/ blob: https://d132x6oi8ychic.cloudfront.net 'self'; style-src https://d132x6oi8ychic.cloudfront.net 'unsafe-inline' https://higherlogiccloudfront.s3.amazonaws.com https://cdn.jsdelivr.net/jquery.slick/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://d2x5ku95bkycr3.cloudfront.net/ https://ajax.googleapis.com/ajax/libs/jqueryui/ https://use.fortawesome.com/ https://cdn.higherlogic.com/ai-assistant https://static.filestackapi.com/picker/ https://fonts.googleapis.com/ https://d3uf7shreuzboy.cloudfront.net/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/NASBLA/ https://higherlogicdownload.s3.amazonaws.com/NASBLA/ https://higherlogiclongterm.s3.amazonaws.com/NASBLA/ 'self'; font-src https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogiccloudfront.s3.amazonaws.com https://higherlogicdownload.s3.amazonaws.com/NASBLA/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/NASBLA/ 'self' https://higherlogiclongterm.s3.amazonaws.com/NASBLA/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://d2x5ku95bkycr3.cloudfront.net https://d132x6oi8ychic.cloudfront.net data:; script-src-elem https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d3uf7shreuzboy.cloudfront.net/ https://static.filestackapi.com/picker/ https://cdn.higherlogic.com/ai-assistant https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d2x5ku95bkycr3.cloudfront.net/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://www.gstatic.com/recaptcha/ https://static.filestackapi.com/filestack-js/ 'self' https://ajax.aspnetcdn.com/ajax/ 'unsafe-eval' 'unsafe-inline'; media-src https://higherlogiclongterm.s3.amazonaws.com/NASBLA/ https://higherlogicdownload.s3.amazonaws.com/NASBLA/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/NASBLA/ https://higherlogicstream.s3.amazonaws.com/NASBLA/ 'self' https://d132x6oi8ychic.cloudfront.net; script-src https://higherlogiclongterm.s3.amazonaws.com/NASBLA/ https://higherlogicdownload.s3.amazonaws.com/NASBLA/ https://ajax.aspnetcdn.com/ajax/ https://cdn.jsdelivr.net/jquery.slick/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d132x6oi8ychic.cloudfront.net https://cdn.informz.net 'unsafe-eval' https://use.fortawesome.com/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/NASBLA/ https://cdnjs.cloudflare.com/ajax/libs/prism/ 'unsafe-inline' https://d2x5ku95bkycr3.cloudfront.net/ https://higherlogiccloudfront.s3.amazonaws.com https://static.filestackapi.com https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d3uf7shreuzboy.cloudfront.net/ 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://api.connectedcommunity.org/ 'self' https://www.youtube.com/embed/ https://*.kb.us.higherlogic.com; connect-src https://upload.filestackapi.com https://static.filestackapi.com https://cloud.filestackapi.com/folder/list/ 'self' https://hl-managedservices.informz.net https://d3uf7shreuzboy.cloudfront.net/ blob:; worker-src 'self'; default-src 'self'; base-uri 'self'; frame-ancestors https://*.connectedcommunity.org/ 'self'; object-src 'none'; manifest-src 'self'; 1
object-src 'none';base-uri 'self';script-src 'nonce-6s6LMmcjUpK8Yn54QYdhEg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.cloudflare.com *.twitter.com *.googleapis.com *.fontawesome.com *.bootstrapcdn.com https://static.payzen.eu/static/ *.twimg.com *.trustedshops.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com https://secure.payzen.eu/vads-payment/ https://api.payzen.eu/api-payment/ https://static.payzen.eu/static/ *.google.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.twitter.com *.addthis.com *.connectif.cloud https://secure.payzen.eu/vads-payment/ https://static.payzen.eu/static/ https://scontent-ams4-1.cdninstagram.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: blob: *.cloudflare.com *.www.googleadservices.com *.www.google-analytics.com *.twitter.com *.assets.adobedtm.com *.amcglobal.sc.omtrdc.net *.dpm.demdex.net *.cm.everesttech.net *.widgets.magentocommerce.com *.googleads.g.doubleclick.net *.bid.g.doubleclick.net *.t.paypal.com *.fpdbs.paypal.com *.fpdbs.sandbox.paypal.com *.i.ytimg.com *.validator.swagger.io *.klarna.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.b.stats.paypal.com *.dub.stats.paypal.com *.assets.braintreegateway.com *.c.paypal.com *.checkout.paypal.com *.mcstaging.alcarrito.com *.google.com.co https://secure.payzen.eu/static/latest/images/type-carte/ https://static.payzen.eu/static/ https://secure.payzen.eu/vads-payment/ https://platform-api.sharethis.com *.www.google.com.co *.maps.gstatic.com maps.gstatic.com maps.googleapis.com https://clauem2.arrowtheme.com https://scontent.cdninstagram.com/ https://scontent-ams4-1.cdninstagram.com *.hsforms.net *.hsforms.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.cloudflare.com *.twitter.com *.google-analytics.com *.fontawesome.com apis.google.com code.iconify.design *.geostag.cardinalcommerce.com *.1eafstag.cardinalcommerce.com *.geoapi.cardinalcommerce.com *.1eafapi.cardinalcommerce.com *.songbird.cardinalcommerce.com *.includestest.ccdc02.com *.googleadservices.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.t.paypal.com *.s.ytimg.com *.googleapis.com *.bolt.com *.commerce-quick-checkout.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.trackedlink.net *.js.braintreegateway.com *.assets.braintreegateway.com *.c.paypal.com *.pay.google.com *.api.braintreegateway.com *.api.sandbox.braintreegateway.com *.client-analytics.braintreegateway.com *.client-analytics.sandbox.braintreegateway.com *.songbirdstag.cardinalcommerce.com *.connectif.cloud https://api.payzen.eu/api-payment/ https://static.payzen.eu/static/ *.twimg.com *.maps.googleapis.com *.maps.gstatic.com maps.googleapis.com *.googletagmanager.com https://buttons-config.sharethis.com/ https://connect.facebook.net https://platform-api.sharethis.com https://scontent-ams4-1.cdninstagram.com *.hsforms.net *.hsforms.com *.chart.apis.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.fontawesome.com *.bootstrapcdn.com https://static.payzen.eu/static/ *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com *.google-analytics.com https://platform-api.sharethis.com *.cdn.connectif.cloud 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.cloudflare.com *.twitter.com *.operacionmayo.com *.audiosmadres.onrender.com *.doubleclick.net *.iconify.design https://secure.payzen.eu/vads-payment/ https://api.payzen.eu/api-payment/ *.twimg.com *.googleadservices.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org *.google.co.in *.maps.gstatic.com *.maps.googleapis.com maps.googleapis.com https://scontent-ams4-1.cdninstagram.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src https://secure.payzen.eu/vads-payment/ https://api.payzen.eu/api-payment/ https://static.payzen.eu/static/ *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.googleapis.com fonts.gstatic.com *.googleapis.com *.gstatic.com data: 'self' data: *.fontawesome.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.authorize.net *.paypal.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors www.gstatic.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com *.authorize.net *.brevo.com *.weltpixel.com *.googletagmanager.com *.crisp.chat *.google.com google.com *.paypal.com *.publitas.com vimeo.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com *.hsforms.net *.hsforms.com 'self' data: *.googletagmanager.com ssl.gstatic.com www.gstatic.com *.doubleclick.net google.com *.google.com paulbhardware.com *.publitas.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.disqus.com *.authorize.net *.brevo.com *.hsforms.net *.hsforms.com *.google.com *.maxmind.com *.googletagmanager.com tagmanager.google.com *.crisp.chat *.doubleclick.net *.publitas.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com *.crisp.chat *.fontawesome.com *.googletagmanager.com *.paypal.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.youtube.com youtube.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com *.authorize.net t.elasticsuite.io *.hsforms.net *.hsforms.com ingress.flareapp.io *.mmapiws.com *.googletagmanager.com *.brevo.com *.doubleclick.net *.google.com google.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://683a17cb-2730-43d7-9160-6b8b43e52cd9.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self'; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self' litium.revolutionrace.at fbcdn.revolutionrace.at wss://fbcdn.revolutionrace.at *.edb.com *.cdn-apple.com *.klarnaservices.com *.klarnauserservices.com *.klarnacdn.net *.klarna.com *.klarnaevt.com *.kustom.co *.adyen.com www.paypal.com js.stripe.com *.google.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.gstatic.com ajax.googleapis.com fonts.googleapis.com maps.googleapis.com *.apptus.cloud *.storyblok.com *.symplify.com cdn-sitegainer.com *.cdn-sitegainer.com sitegainer.com wss://recording.sitegainer.com *.criteo.net *.criteo.com *.doubleclick.net *.emarsys.net *.mention-me.com *.imedia.cz *.scarabresearch.com *.spinnaker-js.com bat.bing.com www.seznam.cz tags.creativecdn.com *.kindlycdn.com *.kindly.ai wss://sage.kindly.ai revolutionrace.customerfirst.ai *.facebook.net *.tiktok.com *.snapchat.com *.pinterest.com *.bambuser.com *.facebook.com www.pinterest.se *.cloudflare.com *.digitaloceanspaces.com *.distancify.workers.dev cdn.jsdelivr.net maxcdn.bootstrapcdn.com player.vimeo.com pro.ip-api.com recommender.scarabresearch.com s.pinimg.com sc-static.net vimeo.com ws-eu.pusher.com wss://ws-eu.pusher.com 'unsafe-inline' 'unsafe-eval'; img-src data: blob: https://* 'self'; media-src https://*; worker-src 'self' blob:; frame-src analytics.revolutionrace.at *.mention-me.com mention-me.com *.google.com *.adyen.com *.paypal.com *.kustom.co *.sitegainer.com *.criteo.com revolutionrace.customerfirst.ai; frame-ancestors https://app.storyblok.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; connect-src data: *; report-uri /api/csp-report; report-to csp-endpoint; 1
default-src 'self' litium.revolutionrace.nl fbcdn.revolutionrace.nl wss://fbcdn.revolutionrace.nl *.edb.com *.cdn-apple.com *.klarnaservices.com *.klarnauserservices.com *.klarnacdn.net *.klarna.com *.klarnaevt.com *.kustom.co *.adyen.com www.paypal.com js.stripe.com *.google.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.gstatic.com ajax.googleapis.com fonts.googleapis.com maps.googleapis.com *.apptus.cloud *.storyblok.com *.symplify.com cdn-sitegainer.com *.cdn-sitegainer.com sitegainer.com wss://recording.sitegainer.com *.criteo.net *.criteo.com *.doubleclick.net *.emarsys.net *.mention-me.com *.imedia.cz *.scarabresearch.com *.spinnaker-js.com bat.bing.com www.seznam.cz tags.creativecdn.com *.kindlycdn.com *.kindly.ai wss://sage.kindly.ai revolutionrace.customerfirst.ai *.facebook.net *.tiktok.com *.snapchat.com *.pinterest.com *.bambuser.com *.facebook.com www.pinterest.se *.cloudflare.com *.digitaloceanspaces.com *.distancify.workers.dev cdn.jsdelivr.net maxcdn.bootstrapcdn.com player.vimeo.com pro.ip-api.com recommender.scarabresearch.com s.pinimg.com sc-static.net vimeo.com ws-eu.pusher.com wss://ws-eu.pusher.com 'unsafe-inline' 'unsafe-eval'; img-src data: blob: https://* 'self'; media-src https://*; worker-src 'self' blob:; frame-src analytics.revolutionrace.nl *.mention-me.com mention-me.com *.google.com *.adyen.com *.paypal.com *.kustom.co *.sitegainer.com *.criteo.com revolutionrace.customerfirst.ai; frame-ancestors https://app.storyblok.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; connect-src data: *; report-uri /api/csp-report; report-to csp-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.gstatic.com https://ajax.googleapis.com https://cdnjs.cloudflare.com/ajax/libs/ https://cdn.jsdelivr.net/npm/ https://webshopmanager.com https://*.webshopmanager.com https://use.fontawesome.com https://js.authorize.net https://jstest.authorize.net https://www.paypal.com https://www.paypalobjects.com https://h.online-metrix.net https://ssl.kaptcha.com https://cdn1.affirm.com https://cdn-assets.affirm.com; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://*.affirm.com; frame-src 'self' https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://www.paypal.com https://risk.kount.net https://ssl.kaptcha.com; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.fontawesome.com https://cdnjs.cloudflare.com; font-src 'self' data: https://fonts.gstatic.com https://use.fontawesome.com https://cdnjs.cloudflare.com; base-uri 'self'; object-src 'none'; form-action 'self' https://www.paypal.com https://*.authorize.net; frame-ancestors 'self'; report-uri /api/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://www.youtube.com https://www.google.com https://www.gstatic.com https://analytics.silktide.com https://www.googletagmanager.com https://www.google-analytics.com https://js.monitor.azure.com https://cc.cdn.civiccomputing.com https://messenger.ebiai.app; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; connect-src 'self' https://a.eu.silktide.com https://apikeys.civiccomputing.com https://api.ebiai.app https://messenger.ebiai.app https://region1.google-analytics.com https://www.google-analytics.com http://localhost:57873 ws://localhost:57873 wss://localhost:44329; object-src 'none'; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; base-uri 'self'; frame-ancestors 'self'; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com; img-src 'self' data: https://dashboard.umbraco.com https://www.googletagmanager.com https://i.ytimg.com https://lobster-static-upload-uk-production.s3.eu-west-2.amazonaws.com; 1
font-src *.fontawesome.com 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com api.razorpay.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com cdn.razorpay.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com js.authorize.net jstest.authorize.net js.braintreegateway.com cdn-scripts.signifyd.com www.youtube.com *.avada.io checkout.razorpay.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://get.geojs.io *.avada.io lumberjack.razorpay.com 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' 'unsafe-eval' 'unsafe-inline'; script-src 'self' 'nonce-STMWuIRGKL_e-uktxAMyGO2zKg7tIPVCa9SXawMNYCwulBjEEblWgA' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.ggpht.com https://*.googleusercontent.com blob: https://*.googletagmanager.com https://*.google-analytics.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://*.youtube.com https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.googleusercontent.com https://*.ggpht.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com https://cdn.userway.org/ https://25740095.hs-sites-eu1.com/; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.userway.org/ 'report-sample'; connect-src 'self' https://*.googleapis.com https://*.google.com https://*.gstatic.com data: blob: https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net https://api.userway.org/ https://*.hubspot.com/ https://www.getgobot.com/; font-src 'self' https://fonts.gstatic.com; worker-src 'self' 'nonce-STMWuIRGKL_e-uktxAMyGO2zKg7tIPVCa9SXawMNYCwulBjEEblWgA' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.ggpht.com https://*.googleusercontent.com blob:; report-uri https://www.plumpton.ac.uk/error.json 1
default-src 'self' *.ctfassets.net *.trackjs.com *.demdex.net; font-src 'self' *.gstatic.com; img-src 'self' *.ctfassets.net *.trackjs.com costalimited.d3.sc.omtrdc.net *.gstatic.com data: *.onetrust.com cm.everesttech.net *.googleapis.com; connect-src 'self' *.go-mpulse.net cdn-ukwest.onetrust.com trial-eum-clientnsv4-s.akamaihd.net trial-eum-clienttons-s.akamaihd.net *.akstat.io *.demdex.net costalimited.d3.sc.omtrdc.net *.onetrust.io *.trackjs.com maps.googleapis.com; script-src 'self'; frame-src 'self' googletagmanager.com doubleclick.net google-analytics.com; script-src-elem 'self' 'unsafe-inline' assets.adobedtm.com *.go-mpulse.net cdn-ukwest.onetrust.com maps.googleapis.com fonts.googleapis.com; style-src-attr 'self' 'unsafe-inline'; style-src 'self'; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com; script-src-attr 'self' 'unsafe-inline'; frame-ancestors 'self'; report-to https://costa.report-uri.com/r/t/csp/reportOnly 1
frame-src 'self' data: https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://open.spotify.com https://anchor.fm https://podcasters.spotify.com https://creators.spotify.com https://w.soundcloud.com https://bandcamp.com https://*.bandcamp.com https://embed.music.apple.com https://embed.podcasts.apple.com https://instagram.com https://www.instagram.com https://read.amazon.com https://iframely.net https://cdn.iframe.ly https://team-hosted-public.s3.amazonaws.com https://*.dwcdn.net https://datawrapper.de https://www.datawrapper.de https://tiktok.com https://www.tiktok.com https://lichess.org https://embed.polymarket.com https://polymarket.com https://manifold.markets https://metaculus.com https://www.metaculus.com https://embed.bsky.app https://delphi.ai https://www.delphi.ai https://delphi.build https://app.askdewey.co https://*.substackcode.com https://js.stripe.com https://hooks.stripe.com https://withpersona.com https://*.withpersona.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.facebook.com https://tr.snapchat.com https://substack.com https://*.substack.com; script-src 'self' 'report-sample' 'wasm-unsafe-eval' https://substackcdn.com https://app.viral-loops.com https://browser.sentry-cdn.com https://cdn.parsely.com https://cdn.withpersona.com https://cdnjs.cloudflare.com https://decagon.ai https://js.sentry-cdn.com https://js.stripe.com https://static.ads-twitter.com https://static.chartbeat.com https://static.cloudflareinsights.com https://www.datadoghq-browser-agent.com https://www.google.com https://www.googletagmanager.com https://www.instagram.com https://googleads.g.doubleclick.net 'nonce-COliCf4TJrefp638T88WNg' 'sha256-oNUpYJTjyv6mHx4JzPCmMhElUii2dwkB0MFj/41GTy4=' 'sha256-6mPxECCUmrjOqGu7V7AJtjO9bkmffsxNz7vhLmOvV/U='; worker-src 'self' blob:; report-uri https://o350427.ingest.us.sentry.io/api/4512007192838144/security/?sentry_key=0dd7d049b002dc4a3455fefa8a530c88&sentry_environment=production 1
default-src 'self'; script-src 'self' https://static.axept.io https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://code.jquery.com https://cdnjs.cloudflare.com 'unsafe-eval' https://dk0rzsp9wq5yj.cloudfront.net 'nonce-f2e9446fbbd21b3e83a5b6cd54c9ef1b'; script-src-elem 'self' 'unsafe-inline' https://static.axept.io https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://code.jquery.com https://cdnjs.cloudflare.com 'unsafe-eval' https://cdn-app.myli.io https://dk0rzsp9wq5yj.cloudfront.net; script-src-attr 'unsafe-inline'; style-src 'self' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://dk0rzsp9wq5yj.cloudfront.net 'nonce-f2e9446fbbd21b3e83a5b6cd54c9ef1b'; style-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://use.fontawesome.com https://cdn-app.myli.io https://dk0rzsp9wq5yj.cloudfront.net; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com https://dk0rzsp9wq5yj.cloudfront.net; img-src 'self' data: https://api.mapbox.com https://www.google.com https://www.gstatic.com https://eprel.ec.europa.eu https://dk0rzsp9wq5yj.cloudfront.net https://profilplus.s3.eu-west-1.amazonaws.com https://pagead2.googlesyndication.com https://cdn-app.myli.io; connect-src 'self' https://api.mapbox.com https://nominatim.openstreetmap.org https://www.google.com https://static.axept.io https://cdn-app.myli.io; frame-src 'self' https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://www.googletagmanager.com https://t.profilplus.fr; object-src 'none'; frame-ancestors 'self'; form-action 'self'; base-uri 'self' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://maxcdn.bootstrapcdn.com https://maps.googleapis.com https://www.google-analytics.com https://connect.facebook.net https://www.facebook.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://static.cloudflareinsights.com https://apis.google.com https://www.gstatic.com https://www.google.com https://www.recaptcha.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com https://use.fontawesome.com; img-src 'self' data: blob: https://d101dla6jee8wn.cloudfront.net https://s3.ap-southeast-1.amazonaws.com https://www.google-analytics.com https://stats.g.doubleclick.net https://www.facebook.com https://www.gstatic.com; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://www.facebook.com https://connect.facebook.net https://apis.google.com; frame-src 'self' https://www.facebook.com https://accounts.google.com https://apis.google.com https://www.google.com https://www.recaptcha.net; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: https://*.cardinalcommerce.com https://*.olark.com https://*.cloudflare.com https://*.fontawesome.com https://*.bootstrapcdn.com https://*.gstatic.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.amc.demdex.net *.cardinalcommerce.com https://*.doubleclick.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://www.google.com https://www.huskyseating.com https://www.huskyoffice.com https://www.sciencewoodworks.com https://www.google.ca https://*.olark.com https://*.bing.com https://*.facebook.com https://*.clarity.ms https://*.amazonaws.com https://*.shopperapproved.com https://*.americancommercialfurniture.com https://*.adobedtm.com https://*.demdex.net https://*.everesttech.net https://*.magentocommerce.com https://*.adobe.com https://*.doubleclick.net https://behance.net https://t.paypal.com https://fpdbs.paypal.com https://fpdbs.sandbox.paypal.com https://*.vimeocdn.com https://i.ytimg.com https://*.youtube.com https://p.typekit.net https://*.paypal.com https://*.typekit.net https://*.gstatic.com https://validator.swagger.io https://*.googleapis.com https://ebizmarts-website.s3.amazonaws.com https://downloads.mailchimp.com https://gallery.mailchimp.com https://magefan.com https://cm.magefan.com https://b.stats.paypal.com https://dub.stats.paypal.com https://assets.braintreegateway.com https://c.paypal.com https://checkout.paypal.com https://maps.gstatic.com https://*.cylindo.com https://rpt.huskyoffice.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.google.com.ua maps.gstatic.com https://rpt.huskyseating.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://*.zi-scripts.com https://*.jst.ai https://*.callrail.com https://www.googletagmanager.com https://chimpstatic.com https://*.justuno.com https://*.olark.com https://bat.bing.com https://www.clarity.ms https://*.facebook.net https://*.doubleclick.net https://*.addthis.com https://*.addthisedge.com https://*.moatads.com https://*.pinterest.com/ https://cdn.jsdelivr.net https://*.cloudflare.com https://*.shopperapproved.com https://*.cardinalcommerce.com https://*.americancommercialfurniture.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com https://rpt.huskyseating.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://*.googletagmanager.com https://*.olark.com https://*.googleapis.com https://*.cloudflare.com https://*.jsdelivr.net downloads.mailchimp.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://*.olark.com https://*.americancommercialfurniture.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.googleapis.com https://*.zi-scripts.com https://www.facebook.com https://*.justuno.com https://*.callrail.com https://*.olark.com https://*.clarity.ms https://*.ipify.org https://*.doubleclick.net https://*.addthis.com https://*.cardinalcommerce.com https://*.zoominfo.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com https://rpt.huskyseating.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://089e45c2-77ca-4505-abc1-85ccf175102b.sansec.watch/; report-to report-endpoint; 1
script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com www.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.sagepay.com *.opayo.eu.elavon.com https://api.goaffpro.com https://static.goaffpro.com x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.fontawesome.com *.googleapis.com *.avada.io *.shopify.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com *.cloudfront.net *.zdassets.net *.zdassets.com *.webgains.io *.zopim.com *.zopim.io *.bing.com *.clarity.ms *.facebook.com *.google.co.uk *.smartmetrics.co.uk *.cloudflare.com *.salesfire.co.uk *.feefo.com *.tradedoubler.com *.googlecommerce.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.fontawesome.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com fonts.googleapis.com *.sagepay.com *.opayo.eu.elavon.com cc-cdn.com *.klarnacdn.net https://static.klaviyo.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.cloudfront.net *.klarnaservices.com *.klarnaservices.net *.zdassets.net *.zdassets.com *.webgains.io *.smartmetrics.co.uk *.google-analytics.com *.zopim.com *.zopim.io *.bing.com *.clarity.ms *.facebook.net *.google.co.uk *.cloudflare.com *.salesfire.co.uk *.feefo.com *.klarnaevt.com *.klarna.com *.tradedoubler.com *.googlecommerce.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google-analytics.com www.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com fonts.googleapis.com fonts.gstatic.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk https://api.goaffpro.com https://static.goaffpro.com x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io connect.facebook.net graph.facebook.com business.facebook.com www.gstatic.com maps.googleapis.com *.cloudfront.net *.klarnaservices.net *.zdassets.net *.zdassets.com *.webgains.io *.smartmetrics.co.uk *.zopim.com *.zopim.io wss://widget-mediator.zopim *.bing.com *.clarity.ms *.google.co.uk *.facebook.com *.cloudflare.com *.googletagmanager.com *.salesfire.co.uk *.feefo.com *.tradedoubler.com *.googlecommerce.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; connect-src 'self' ws: wss: https://challenges.cloudflare.com https://cloudflareinsights.com; font-src 'self' data:; form-action 'self'; frame-ancestors 'none'; frame-src https://challenges.cloudflare.com https://player.vimeo.com https://www.youtube.com https://www.youtube-nocookie.com; img-src 'self' data: https:; media-src 'self' data: blob: https:; object-src 'none'; script-src 'self' 'nonce-QKfRKbpLd3LXpdXmEjCPoQ' https://challenges.cloudflare.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.google-analytics.com https://connect.facebook.net https://*.hs-scripts.com https://*.hs-analytics.net https://*.hs-banner.com https://*.hscollectedforms.net https://*.hsforms.net https://static.hsappstatic.net https://consent.cookiebot.com https://consentcdn.cookiebot.com https://assets.cello.so https://scripts.clarity.ms https://snap.licdn.com https://*.hubspot.com https://analytics.ahrefs.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https:; frame-src 'self' https://*.hubspot.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://aerztetag.aerztezeitung.de https://*.podigee.io https://player.podigee-cdn.net https://www.google.com; media-src 'self' https://audio.podigee-cdn.net 1
font-src https://www.googletagmanager.com *.googleapis.com *.gstatic.com bablas.co.uk www.bablas.co.uk fonts.cdnfonts.com maxcdn.bootstrapcdn.com fonts.gstatic.com cdnjs.cloudflare.com *.fontawesome.com fonts.googleapis.com *.klarnacdn.net *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com https://fonts.bunny.net https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://www.facebook.com https://live.opayo.eu.elavon.com https://acs.gc.at https://acs.gc.be https://acs.gc.bg https://acs.gc.hr https://acs.gc.cy https://acs.gc.cz https://acs.gc.dk https://acs.gc.ee https://acs.gc.fi https://acs.gc.fr https://acs.gc.de https://acs.gc.gr https://acs.gc.hu https://acs.gc.ie https://acs.gc.it https://acs.gc.lv https://acs.gc.lt https://acs.gc.lu https://acs.gc.mt https://acs.gc.nl https://acs.gc.pl https://acs.gc.pt https://acs.gc.ro https://acs.gc.sk https://acs.gc.si https://acs.gc.es https://acs.gc.se https://acs.gc.co.uk https://acs.gc.ge https://acs2.ufc.at https://acs2.ufc.be https://acs2.ufc.bg https://acs2.ufc.hr https://acs2.ufc.cy https://acs2.ufc.cz https://acs2.ufc.dk https://acs2.ufc.ee https://acs2.ufc.fi https://acs2.ufc.fr https://acs2.ufc.de https://acs2.ufc.gr https://acs2.ufc.hu https://acs2.ufc.ie https://acs2.ufc.it https://acs2.ufc.lv https://acs2.ufc.lt https://acs2.ufc.lu https://acs2.ufc.mt https://acs2.ufc.nl https://acs2.ufc.pl https://acs2.ufc.pt https://acs2.ufc.ro https://acs2.ufc.sk https://acs2.ufc.si https://acs2.ufc.es https://acs2.ufc.se https://acs2.ufc.co.uk https://acs2.ufc.ge https://safekey-3.americanexpress.com https://acs2.libertybank.ge *.twitter.com *.google.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://calendly.com https://assets.calendly.com https://www.google.com https://www.googletagmanager.com https://td.doubleclick.net https://platform.twitter.com https://www.facebook.com https://www.paypal.com https://acs2.ufc.ge https://acs2.ufc.co.uk https://acs2.ufc.com https://acs.gc.ge https://acs.gc.co.uk https://acs.gc.com *.klarna.com *.youtube.com/ *.google.com/ https://scontent-ams4-1.cdninstagram.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com www.googletagmanager.com api.feefo.com www.google.co.uk www.google.com bat.bing.com syndication.twitter.com register.feefo.com www.bablas.co.uk pagead2.googlesyndication.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://platform-api.sharethis.com *.cloudflare.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com https://clauem2.arrowtheme.com https://scontent.cdninstagram.com/ https://scontent-ams4-1.cdninstagram.com magefan.com cm.magefan.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com https://firebasestorage.googleapis.com https://www.magezon.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ tagmanager.google.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com *.syndication.tiekinetix.net *.calendly.com syndication.tiekinetix.net api.feefo.com static.hotjar.com ajax.googleapis.com register.feefo.com www.googletagmanager.com *.cloudflare.com script.hotjar.com consent.cookiefirst.com edge.cookiefirst.com connect.facebook.net *.google.com google.com www.gstatic.com *.g.doubleclick.net bat.bing.com platform.twitter.com www.reviewcentre.com pcls1.craftyclicks.co.uk chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.maps.googleapis.com *.trackedlink.net *.google.com/ *.maps.gstatic.com maps.googleapis.com *.googletagmanager.com *.googleadservices.com https://buttons-config.sharethis.com/ https://connect.facebook.net https://platform-api.sharethis.com https://scontent-ams4-1.cdninstagram.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.avada.io *.shopify.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com fonts.googleapis.com maxcdn.bootstrapcdn.com consent.cookiefirst.com register.feefo.com cdnjs.cloudflare.com *.fontawesome.com downloads.mailchimp.com *.klarnacdn.net *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com *.google-analytics.com https://platform-api.sharethis.com *.googletagmanager.com https://fonts.bunny.net https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.googleapis.com stats.g.doubleclick.net consent.cookiefirst.com edge.cookiefirst.com pagead2.googlesyndication.com api.cookiefirst.com *.google.com google.com analytics.google.com api.feefo.com collect.feefo.com syndication.twitter.com www.facebook.com vc.hotjar.io form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.googleadservices.com *.google-analytics.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org *.google.co.in *.maps.gstatic.com *.maps.googleapis.com maps.googleapis.com https://scontent-ams4-1.cdninstagram.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog https://get.geojs.io *.avada.io *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src pagead2.googlesyndication.com stats.g.doubleclick.net bat.bing.com *.google.com www.paypal.com analytics.google.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
font-src *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de www.googletagmanager.com fonts.gstatic.com www.google.es www.google.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com *.googletagmanager.com *.doubleclick.net assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.dnky.co webchat.dotdigital.com www.googletagmanager.com unsafe-inline *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com www.googletagmanager.com *.google-analytics.com *.google.com stats.g.doubleclick.net googleads.g.doubleclick.net *.googlesyndication.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-src *.force.com https://player.vimeo.com 'self' https://stats.g.doubleclick.net *.youtube.co.uk https://sfdc-link-preview.hk.salesforce.com https://checkoutshopper-test.adyen.com/ https://pal-test.adyen.com *.cybersource.com *.youtube.es *.adis.ws *.youtube.ie https://www.youtube.com *.cloudinary.com https://pay.google.com *.vimeo.com *.youtube.jp bcove.video https://region1.google-analytics.com https://app.arcade.software *.youtube.fr https://acrowebsite2023.file.force.com https://*.a.forceusercontent.com https://player.cloudinary.com https://sfdc-link-preview-staging.sfdc.sh https://s1.adis.ws *.forceusercontent.com *.brightcove.net *.youtube.com *.youtube.nl https://service.force.com/embeddedservice/ *.live-preview.salesforce-experience.com https://fast.wistia.net *.quip.com *.arkoselabs.com *.youtube-nocookie.com https://www.paypal.com https://appiniummastertrial.secure.force.com https://play.vidyard.com *.youtube.com.br *.salesforce-experience.com *.salesforceliveagent.com https://scormanywhere.secure.force.com https://demo.arcade.software https://checkoutshopper-live.adyen.com/ *.sfdcfc.net *.youtube.ca https://location.force.com *.my.salesforce.com *.vidyard.com https://www.gstatic.com/recaptcha/ https://players.brightcove.net https://cdn.embedly.com https://www.google.com/recaptcha/ https://js.stripe.com/ https://www.sandbox.paypal.com https://gbr34.sfdc-5pakla.salesforce.com https://*.a.forceusercontent.com/lightningmaps/ https://www.googletagmanager.com *.wistia.net https://www.google-analytics.com *.salesforce.com *.youtube.pl; report-to sfdc-csp-ep; report-uri https://acrowebsite2023.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D8d00000AWYBx&networkId=0DMNz00000001iU&type=communities 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cloudfront.net 'self' data: *.google.com *.google.co.in https://fonts.gstatic.com *.cloudflare.com *.bootstrapcdn.com *.chimpstatic.com *.googleadwordswidget.com *.nr-data.net *.newrelic.com *.klaviyo.com maxcdn.bootstrapcdn.com *.fontawesome.com https://www.google.com https://www.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com *.cloudfront.net www.youtube-nocookie.com *.google.com *.cloudflare.com *.chimpstatic.com *.googleadwordswidget.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.youtube-nocookie.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://static.addtoany.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.stripe.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com *.cloudfront.net https://www.google.com https://www.google.co.in *.cloudflare.com *.trustpilot.com *.flashingblinkylights.com *.fullstory.com *.googleadwordswidget.com *.nr-data.net *.newrelic.com *.weltpixel.com js.mollie.com https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.wesupply.xyz https://wesupplylabs.com guarantee-cdn.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com www.youtube-nocookie.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net assets.secure.checkout.visa.com sandbox.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.cloudfront.net *.google.com *.google.co.in *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.magentocommerce.com *.flashingblinkylights.com *.herokuapp.com *.cloudflare.com *.doubleclick.net *.chimpstatic.com *.fullstory.com *.googleadwordswidget.com *.nr-data.net *.newrelic.com https://bzr.openai.com https://meetanshi.com/media/logo.png https://www.mollie.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com guarantee-cdn.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube-nocookie.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://static.addtoany.com/ https://maps.googleapis.com https://player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.stripe.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.cloudfront.net *.paypal.com *.google.co.in *.googleadservices.com *.googletagmanager.com *.google-analytics.com *.paypalobjects.com *.fullstory.com fullstory.com *.trustpilot.com *.springbot.com *.gstatic.com *.chimpstatic.com *.cloudflare.com *.hellobar.com chimpstatic.com *.googleadwordswidget.com *.hotjar.com static.hotjar.com script.hotjar.com *.config-security.com https://bzrcdn.openai.com *.googleapis.com js.mollie.com https://www.youtube.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com guarantee-cdn.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com *.maxmind.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.cloudfront.net *.paypal.com www.youtube-nocookie.com *.googleapis.com *.google.com *.google.co.in *.cloudflare.com *.bootstrapcdn.com *.flashingblinkylights.com *.fullstory.com *.googleadwordswidget.com *.nr-data.net *.newrelic.com maxcdn.bootstrapcdn.com *.fontawesome.com *.gstatic.com https://fonts.googleapis.com http://fonts.googleapis.com assets.braintreegateway.com *.trustpilot.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://stats.addtoany.com/menu https://maps.googleapis.com https://player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.authorize.net assets.secure.checkout.visa.com sandbox-assets.secure.checkout.visa.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.cloudfront.net www.youtube-nocookie.com *.google.co.in *.fullstory.com *.cloudflare.com *.flashingblinkylights.com *.chimpstatic.com *.googleadwordswidget.com *.hotjar.com *.hotjar.io vc.hotjar.io *.config-security.com api.config-security.com conf.config-security.com https://bzr.openai.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com *.mmapiws.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com *.fontawesome.com fonts.googleapis.com fonts.gstatic.com *.gstatic.com 'self' data: *.alkar.es *.alkar-autospiegel.de data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.cloudfront.net www.google.es www.google-analytics.com stats.g.doubleclick.net *.onetrust.com *.hsforms.net *.hsforms.com 'self' data: *.alkar.es *.alkar-autospiegel.de alkar.es data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.google.com www.gstatic.com sl.google-analytics.com js-agent.newrelic.com bam.nr-data.net *.onetrust.com *.hsforms.net *.hsforms.com *.gstatic.com *.alkar.es *.alkar-autospiegel.de https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com *.fontawesome.com fonts.googleapis.com fonts.gstatic.com *.googleapis.com *.gstatic.com *.alkar.es *.alkar-autospiegel.de 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com www.google-analytics.com stats.g.doubleclick.net *.paypal.com bam.nr-data.net *.onetrust.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.alkar.es *.alkar-autospiegel.de 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com *.alkar.es *.alkar-autospiegel.de 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://telegram.org https://www.googletagmanager.com https://mc.yandex.ru; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; media-src 'self' blob: https:; font-src 'self' data: https:; connect-src 'self' https://api.pixly.ru wss://api.pixly.ru https://cdn.pixly.ru https://mc.yandex.ru https://www.google-analytics.com; worker-src 'self' blob:; frame-src 'self' https://oauth.telegram.org https://t.me https://telegram.org; manifest-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://oauth.telegram.org; frame-ancestors 'self' https://web.telegram.org https://*.telegram.org; upgrade-insecure-requests 1
default-src 'self'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https://*.stripe.com https://*.paypal.com; img-src 'self' data: blob: https:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.gstatic.com https://js.stripe.com https://www.googletagmanager.com; connect-src 'self' https: wss:; frame-src 'self' https://www.google.com https://maps.google.com https://js.stripe.com https://hooks.stripe.com https://www.youtube.com https://player.vimeo.com; object-src 'none'; upgrade-insecure-requests 1
object-src 'none';base-uri 'self';script-src 'nonce-5ETXO7GMT0oSvRIZrBBwHA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
media-src https://anap.matomo.cloud 'self' https://stats.g.doubleclick.net https://ka-f.fontawesome.com https://anap.my.site.com https://www.anap.fr https://*.g.doubleclick.net https://www.gstatic.com https://cdn.matomo.cloud https://www.youtube-nocookie.com https://axeptio.imgix.net https://www.youtube.com https://www.google.fr https://analytics.google.com https://api.ipify.org https://app.powerbi.com https://region1.google-analytics.com blob: https://region1.analytics.google.com https://anap--roa.sandbox.my.site.com https://*.googletagmanager.com https://cdnjs.cloudflare.com https://*.google-analytics.com https://ssl.gstatic.com https://anap.force.com https://airtable.com https://*.analytics.google.com https://www.google.es https://anap--c.documentforce.com https://youtu.be https://www.google.mu https://*.google.com https://anap.fr https://app.fabric.microsoft.com https://anap--c.visualforce.com https://cdn.jsdelivr.net https://anap.lightning.force.com https://player.ausha.co https://kit.fontawesome.com https://tagmanager.google.com https://teams.microsoft.com https://my.anap.fr https://www.google.co.in https://client.axept.io https://anap--roa.sandbox.lightning.force.com https://anap--dev01.sandbox.my.site.com https://www.googletagmanager.com https://use.fontawesome.com https://www.google-analytics.com *.salesforce.com; report-to sfdc-csp-ep; report-uri https://anap.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D7Q000006HfIy&networkId=0DM7Q000000tJ68&type=communities 1
default-src 'self'; script-src 'self' 'nonce-rVXPbQYb-55z7G4rL_GAARU12cQr76uO6Qwono5nNbu6AxxJ6YLdCA' 'unsafe-eval' blob: https://*.youtube.com https://*.youtube-nocookie.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://*.youtube.com https://*.youtube-nocookie.com https://*.google.com https://*.spotify.com https://*.soundcloud.com https://fmadore.github.io https://heshmat.zmo.de; connect-src 'self' https://matomo.zmo.de; script-src-elem 'self' 'nonce-rVXPbQYb-55z7G4rL_GAARU12cQr76uO6Qwono5nNbu6AxxJ6YLdCA' https://*.youtube.com https://*.youtube-nocookie.com https://*.google.com https://*.spotify.com https://*.soundcloud.com https://matomo.zmo.de 'report-sample'; style-src 'self' 'nonce-rVXPbQYb-55z7G4rL_GAARU12cQr76uO6Qwono5nNbu6AxxJ6YLdCA' 'report-sample'; report-uri https://www.zmo.de/@http-reporting?csp=report&requestTime=1789285021715852&requestHash=b0873054bb34d2bbdb26537ba338321148893c35 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://cmp.osano.com https://www.googletagmanager.com https://connect.facebook.net https://kit.fontawesome.com https://estrellainsurance.blob.core.windows.net https://unpkg.com https://c.amazon-adsystem.com https://googleads.g.doubleclick.net https://analytics.tiktok.com https://bzrcdn.openai.com https://www.gstatic.com https://static.hotjar.com https://script.hotjar.com https://bat.bing.com https://tags.srv.stackadapt.com; script-src-elem 'self' 'unsafe-inline' https://cmp.osano.com https://www.googletagmanager.com https://connect.facebook.net https://kit.fontawesome.com https://estrellainsurance.blob.core.windows.net https://unpkg.com https://c.amazon-adsystem.com https://googleads.g.doubleclick.net https://analytics.tiktok.com https://bzrcdn.openai.com https://www.gstatic.com https://static.hotjar.com https://script.hotjar.com https://bat.bing.com https://tags.srv.stackadapt.com; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://tags.srv.stackadapt.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://tags.srv.stackadapt.com; img-src 'self' data: https://www.facebook.com https://www.googletagmanager.com https://estrellainsurance.blob.core.windows.net https://www.google.com https://bat.bing.com; font-src 'self' https://fonts.gstatic.com https://ka-p.fontawesome.com; connect-src 'self' https://www.facebook.com https://www.googletagmanager.com https://ka-p.fontawesome.com https://www.google.com https://www.googleadservices.com https://analytics.google.com https://bzrcdn.openai.com https://bzr.openai.com https://c.amazon-adsystem.com https://s.amazon-adsystem.com https://ara.paa-reporting-advertising.amazon https://analytics.tiktok.com https://tags.srv.stackadapt.com https://bat.bing.com https://ad.doubleclick.net; frame-src 'self' https://www.googletagmanager.com; frame-ancestors 'none'; form-action 'self'; 1
worker-src blob:; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.kxcdn.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.addthis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.fbcdn.net blob: magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.googleapis.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com *.disqus.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn-cookieyes.com https://www.googletagmanager.com https://embed.acuityscheduling.com https://static.klaviyo.com https://static-tracking.klaviyo.com https://static-forms.klaviyo.com https://js.datadome.co https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com; font-src 'self' data: https://fonts.gstatic.com https://static.klaviyo.com; img-src 'self' data: https://cdn.shopify.com https://cdn-cookieyes.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://static.klaviyo.com https://img-cdn.klaviyo.com https://www.facebook.com; connect-src 'self' https://cdn-cookieyes.com https://*.cookieyes.com https://sierra-shay.myshopify.com https://cdn.shopify.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://a.klaviyo.com https://fast.a.klaviyo.com https://static.klaviyo.com https://static-tracking.klaviyo.com https://static-forms.klaviyo.com https://api-js.datadome.co https://www.facebook.com https://connect.facebook.net; frame-src https://app.acuityscheduling.com https://www.facebook.com; media-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none' 1
font-src *.hotjar.com data: maxcdn.bootstrapcdn.com *.bootstrapcdn.com www.bugherd.com *.cloudfront.net fonts.gstatic.com *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.nosto.com *.nos.to 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com accounts.google.com *.hotjar.com *.click4assistance.co.uk www.paypalobjects.com live.sagepay.com td.doubleclick.net *.doubleclick.net doubleclick.net googletagmanager.com *.googletagmanager.com account.fetchify.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.nosto.com *.nos.to 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com img.youtube.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.click4assistance.co.uk services.postcodeanywhere.co.uk bugherd-attachments.s3.amazonaws.com *.cloudfront.net bat.bing.com www.google.co.uk stats.g.doubleclick.net maps.gstatic.com maps.googleapis.com *.cdninstagram.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.doubleclick.net *.googletagmanager.com https://firebasestorage.googleapis.com *.nosto.com *.nos.to data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com accounts.google.com *.hotjar.com services.postcodeanywhere.co.uk *.pcapredict.com *.click4assistance.co.uk www.bugherd.com *.cloudfront.net bat.bing.com www.google.com www.gstatic.com maps.googleapis.com chimpstatic.com pi-test.sagepay.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com widget.freshworks.com m2epro.freshdesk.com cc-cdn.com api.addressy.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.avada.io *.shopify.com *.nosto.com *.nos.to https://cdnjs.cloudflare.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com accounts.google.com services.postcodeanywhere.co.uk maxcdn.bootstrapcdn.com *.bootstrapcdn.com *.cloudfront.net fonts.googleapis.com fast.fonts.net *.typekit.net downloads.mailchimp.com widget.freshworks.com m2epro.freshdesk.com cc-cdn.com api.addressy.com *.googleapis.com *.googletagmanager.com *.fontawesome.com https://fonts.bunny.net *.nosto.com *.nos.to https://fonts.googleapis.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com accounts.google.com *.hotjar.com *.hotjar.io services.postcodeanywhere.co.uk www.bugherd.com sessions.bugsnag.com wss://ws.pusherapp.com *.pusher.com www.google.co.uk stats.g.doubleclick.net graph.instagram.com google-analytics.com region1.google-analytics.com *.google-analytics.com google.com *.google.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com widget.freshworks.com m2epro.freshdesk.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com api.addressy.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog https://get.geojs.io *.avada.io *.nosto.com *.nos.to 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com eadn-wc01-14654835.nxedge.io applepay.cdn-apple.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpaysandbox.nexigroup.com xpay.nexigroup.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com eadn-wc01-14654835.nxedge.io cdn.lightwidget.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpaysandbox.nexigroup.com xpay.nexigroup.com pay.google.com applepay.cdn-apple.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io eadn-wc01-14654835.nxedge.io *.clarity.ms c.bing.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpaysandbox.nexigroup.com xpay.nexigroup.com cdn.klarna.com www.gstatic.com pay.google.com applepay.cdn-apple.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com blob: data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com eadn-wc01-14654835.nxedge.io *.clarity.ms int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpaysandbox.nexigroup.com xpay.nexigroup.com www.google.com www.gstatic.com pay.google.com applepay.cdn-apple.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com https://cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com eadn-wc01-14654835.nxedge.io https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net https://cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src eadn-wc01-14654835.nxedge.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com eadn-wc01-14654835.nxedge.io *.clarity.ms meilisearch.internal meilisearch-ui.vercel.app int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpaysandbox.nexigroup.com xpay.nexigroup.com pay.google.com applepay.cdn-apple.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com http://localhost:7700 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-src vimeo.com *.1psa.net *.jyic.net *.facebook.com *.youtube.com *.tkdbooks.com docs.google.com etlady.tw view.officeapps.live.com dl.mosme.net onecompiler.com widgets.judge0.com tkd.e4sp.tw bao.jyic.net *.mosme.net *.mosme.cn https://googletagmanager.com https://www.googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com https://ssl.gstatic.com https://www.gstatic.com https://fonts.gstatic.com https://*.google-analytics.com https://*.analytics.google.com https://www.googleadservices.com https://www.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://google.com https://td.doubleclick.net https://player.vimeo.com https://share.plvideo.cn https://www.bilibili.com; frame-ancestors 'self'; object-src 'none'; report-uri /api/csp-report; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com https://www.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://fonts.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com https://cp-vanzelstautomaten.fmp360online.com http://cp-vanzelstautomaten.fmp360online.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com https://*.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.sharethis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com https://*.gstatic.com 'self' data: https://*.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://*.googleapis.com https://*.googleusercontent.com https://redchamps.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sharethis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com https://*.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://*.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com chimpstatic.com downloads.mailchimp.com *.list-manage.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com assets.braintreegateway.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com downloads.mailchimp.com *.typekit.net https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net https://*.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src ; font-src *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com fonts.gstatic.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.facebook.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.stripe.com *.stripe.network *.google.com ebizmarts-website.s3.amazonaws.com brippo.s3.amazonaws.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com *.opayo.cloud *.klarna.com *.klarnaevt.com *.klarnacdn.net magefan.com cm.magefan.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.doubleclick.net *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com blob: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud www.google.com *.klarnaservices.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com cdn.ampproject.org www.gstatic.com connect.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com fonts.googleapis.com *.sagepay.com *.opayo.eu.elavon.com *.opayo.cloud *.klarnacdn.net *.googleapis.com *.googletagmanager.com *.fontawesome.com unsafe-inline assets.braintreegateway.com www.gstatic.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com fonts.googleapis.com fonts.gstatic.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com *.opayo.cloud eu.playground.klarnaevt.com *.klarnaservices.com *.google-analytics.com *.google.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com google.com cdn.ampproject.org www.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' http: https: data: blob:; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://accounts.google.com https://apis.google.com https://www.gstatic.com https://maps.googleapis.com https://connect.facebook.net https://www.facebook.com https://www.paypal.com https://www.paypalobjects.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com https://www.gstatic.com; img-src 'self' data: blob: https://www.paypalobjects.com https://uploads.usashop.mn https://uploads.usdev.shop https://api.qrserver.com https://m.media-amazon.com https://images-na.ssl-images-amazon.com https://i.ebayimg.com https://static.zara.net https://image.uniqlo.com https://www.sephora.com https://www.microcenter.com https://www.walmart.com https://chart.googleapis.com https://maps.googleapis.com https://maps.gstatic.com https://*.googleusercontent.com https://i5.walmartimages.com https://i5-richmedia.walmartimages.com https://3d.walmartimages.com https://*.basemaps.cartocdn.com https://secureir.ebaystatic.com https://pics.ebaystatic.com https://*.cloudfront.net https://s3.amazonaws.com https://computershop.mn https://api.phia.com https://cdn.listingmirror.com https://pisces.bbystatic.com https://images.salsify.com https://content.syndigo.com https://booksrun.com https://www.google.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.paypalobjects.com https://c.paypal.com https://accounts.google.com https://www.facebook.com https://graph.facebook.com https://maps.googleapis.com https://maps.gstatic.com https://127.0.0.1:* https://localhost:* https://m.media-amazon.com https://www.sephora.com https://image.uniqlo.com https://static.zara.net https://i.ebayimg.com https://secureir.ebaystatic.com https://pics.ebaystatic.com https://i5.walmartimages.com https://www.google-analytics.com https://www.paypal.com https://computershop.mn https://uploads.usashop.mn https://overbridgenet.com https://*.basemaps.cartocdn.com https://fonts.gstatic.com https://events.usashop.mn https://events.usdev.shop; frame-src 'self' https://accounts.google.com https://www.facebook.com https://www.paypal.com https://c.paypal.com https://vr.lantuundohio.org; form-action 'self' https://www.facebook.com https://accounts.google.com https://www.paypal.com; media-src 'self' data: https://uploads.usashop.mn; base-uri 'self'; object-src 'none'; worker-src 'self'; upgrade-insecure-requests; report-to csp-endpoint; report-uri /api/csp-report 1
child-src blob:; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://cdn.jsdelivr.net https://translate.googleapis.com https://rabbitsign-beta-docs.s3.amazonaws.com https://rabbitsign-docs.s3.amazonaws.com https://rabbitsign-beta-templates.s3.amazonaws.com https://rabbitsign-templates.s3.amazonaws.com https://rabbitsign-beta-signing-options.s3.amazonaws.com https://rabbitsign-signing-options.s3.amazonaws.com https://rabbitsign-beta-user-assets.s3.amazonaws.com https://rabbitsign-user-assets.s3.amazonaws.com; default-src 'self'; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net; frame-src https:; img-src 'self' blob: data: https://translate.google.com https://rabbitsign-beta-signing-options.s3.amazonaws.com https://rabbitsign-signing-options.s3.amazonaws.com https://*.google-analytics.com https://*.googletagmanager.com; object-src 'none'; script-src 'self' https://cdn.jsdelivr.net https://*.googletagmanager.com 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com; worker-src blob:; base-uri 'none'; frame-ancestors 'none'; report-uri https://webhook.site/2ff2c0c3-0cac-47a8-a21f-e3394b3de561 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://consent.cookiebot.com https://consentcdn.cookiebot.com https://connect.facebook.net https://www.facebook.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://analytics.tiktok.com https://widget.trustpilot.com https://wetrack.ro https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://pagead2.googlesyndication.com blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://widget.trustpilot.com https://tagassistant.google.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https:; connect-src 'self' https://www.google.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://o4510861031440384.ingest.de.sentry.io https://o4508171698241536.ingest.de.sentry.io https://sentry.io https://analytics.tiktok.com https://connect.facebook.net https://www.facebook.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://widget.trustpilot.com https://wetrack.ro https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://region1.analytics.google.com https://region1.google-analytics.com; frame-src 'self' https://www.google.com https://www.recaptcha.net https://consentcdn.cookiebot.com https://www.googletagmanager.com https://td.doubleclick.net https://widget.trustpilot.com; worker-src 'self' blob: https://cdnjs.cloudflare.com; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /csp-violations; 1
font-src https://www.gstatic.com https://fonts.gstatic.com *.gstatic.com 'self' data: *.bootstrapcdn.com *.fontawesome.com *.mopinion.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.sharethis.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.newrelic.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.multisafepay.com https://pay.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.sharethis.com *.trackedlink.net https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com *.multisafepay.com *.hsforms.net *.hsforms.com 'self' data: bucket-ip-website.s3.eu-central-1.amazonaws.com *.mopinion.com *.sorgente.nl data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.sharethis.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.multisafepay.com https://pay.google.com *.hsforms.net *.hsforms.com *.gstatic.com *.hotjar.com *.marker.io *.mopinion.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com *.sharethis.com webchat.dotdigital.com webchat.staging.dotdigital.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.multisafepay.com *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.fontawesome.com *.mopinion.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com *.sharethis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.multisafepay.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.crwdcntrl.net *.hotjar.com *.hotjar.io *.marker.io *.mopinion.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://c31c5428-fe2b-4918-8f94-417118f9c8fa.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://pagead2.googlesyndication.com https://*.googlesyndication.com https://*.google.com https://*.gstatic.com https://fundingchoicesmessages.google.com https://*.googleadservices.com https://adservice.google.com https://*.doubleclick.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https://*.supabase.co https://fundingchoicesmessages.google.com https://*.doubleclick.net https://*.google.com https://*.google-analytics.com https://*.googlesyndication.com; frame-src https: ; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none' 1
default-src *.fn-sb-notification-handler-dev.azurewebsites.net *.superbook.cbn.com superlibro.tv *.pantheonsite.io superbookindo.tv superbook.docksal.site *.cookielaw.org superbookkids.com *.brightcovecdn.com 'self' data:; script-src *.googleoptimize.com *.google-analytics.com *.googletagmanager.com 'unsafe-eval' ajax.googleapis.com *.superbook.cbn.com superlibro.tv *.pantheonsite.io superbookindo.tv superbook.docksal.site *.addtoany.com superbookkids.com *.cookielaw.org *.brightcove.net *.zencdn.net js-agent.newrelic.com 'self' 'unsafe-inline' *.go-mpulse.net ; object-src *.superbook.cbn.com superlibro.tv *.pantheonsite.io superbookindo.tv superbook.docksal.site superbookkids.com 'self'; style-src p.typekit.net use.typekit.net *.superbook.cbn.com superlibro.tv *.pantheonsite.io superbookindo.tv superbook.docksal.site fonts.googleapis.com 'self' 'unsafe-inline'; img-src *.cbn.com http://bible.cbn.com *.superbook.cbn.com superlibro.tv *.pantheonsite.io superbookindo.tv superbook.docksal.site *.cookielaw.org superbookkids.com sb-avatar-generator-aac5era4f5hfc7aq.eastus-01.azurewebsites.net *.brightcove.com *.boltdns.net 'self' data:; media-src *.cbn.com *.superbook.cbn.com superlibro.tv *.pantheonsite.io superbookindo.tv superbook.docksal.site superbookkids.com cbn.brightcovecdn.com 'self'; frame-src *.superbook.cbn.com superlibro.tv *.pantheonsite.io superbookindo.tv superbook.docksal.site *.addtoany.com superbookkids.com 'self'; frame-ancestors *.superbook.cbn.com superlibro.tv *.pantheonsite.io superbookindo.tv superbook.docksal.site superbookkids.com 'self'; child-src *.superbook.cbn.com superlibro.tv *.pantheonsite.io superbookindo.tv superbook.docksal.site superbookkids.com 'self' blob:; font-src use.typekit.net *.superbook.cbn.com superlibro.tv *.pantheonsite.io superbookindo.tv superbook.docksal.site fonts.googleapis.com fonts.gstatic.com superbookkids.com 'self' data:; connect-src *.google-analytics.com *.superbook.cbn.com superbook-api.cbn.com superlibro.tv *.pantheonsite.io superbookindo.tv superbook.docksal.site *.cookielaw.org *.onetrust.com oss-cosmo-router-dev.fingent.net oss-cosmo-router-qa.fingent.net fn-sb-notification-handler-dev.azurewebsites.net superbookkids.com *.cbn.com *.boltdns.net bam.nr-data.net *.go-mpulse.net *.akstat.io *.akamaihd.net *.brightcove.com *.brightcovecdn.com wss://sr-superbook-prod.service.signalr.net 'self'; report-uri /report-csp-violation 1
default-src 'self'; script-src 'self' https://eu.i.posthog.com https://eu-assets.i.posthog.com; connect-src 'self' https://eu.i.posthog.com; img-src 'self' data: https://eu-assets.i.posthog.com; style-src 'self' 'unsafe-inline'; font-src 'self' data:; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.klarnacdn.net fonts.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.weltpixel.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypalobjects.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klarna.com *.criteo.com *.pinterest.com *.googletagmanager.com *.doubleclick.net *.typeform.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google.com *.criteo.com cdn.cookielaw.org *.braintreegateway.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.cloudflare.com *.klaviyo.com *.zdassets.com *.criteo.com *.criteo.net cdn.id5-sync.com *.pinimg.com *.pinterest.com *.braintree-api.com *.levelaccess.net *.cookielaw.org *.clarity.ms *.amazonaws.com *.liadm.com *.pinterest.co *.impactcdn.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com sc-static.net *.snapchat.com unpkg.com *.doubleclick.net *.typeform.com https://cdn-scripts.signifyd.com https://cdn-scripts.signifyd.com/api/script-tag.js https://imgs.signifyd.com https://h64.online-metrix.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app assets.braintreegateway.com *.klarnacdn.net https://static.klaviyo.com fonts.gstatic.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com stats.g.doubleclick.net www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.kmail-lists.com *.klarnauserservices.com *.zendesk.com *.zdassets.com *.zopim.com wss://*.zendesk.com wss://*.zopim.com *.criteo.com *.id5-sync.com *.eu-1-id5-sync.com google-analytics.com *.google-analytics.com *.pinterest.com *.signifyd.com pagead2.googlesyndication.com privacyportal.onetrust.com geolocation.onetrust.com *.levelaccess.net *.cookielaw.org *.clarity.ms *.amazonaws.com *.liadm.com *.pinterest.co *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com https://widgets.trustedshops.com *.amazonaws.com unpkg.com *.bing.com *.doubleclick.net *.google.nl google.nl *.google.com google.com google.de *.google.de *.cloudflare.com *.trengo.eu fonts.bunny.net cdn.jsdelivr.net *.google.by www.gstatic.com *.clarity.ms *.facebook.net *.facebook.com d5yoctgpv4cpx.cloudfront.net rkkck31tec.execute-api.eu-central-1.amazonaws.com *.spotlersearch.com spotlersearchanalytics.com *.spotlersearchanalytics.com ipinfo.io *.newrelic.com *.nr-data.net *.beslist.nl *.openhaardhout-gigant.nl *.brennholzgigant.de *.haardhout.nl *.strooizoutgigant.nl *.zoutgigant.be *.tuinshop.nl *.brandhoutgigant.be fonts.googleapis.com *.cloudflareinsights.com *.interacty.me *.squeezely.tech *.bing.net *.sentry-cdn.com *.trustpilot.com sgtm.saltgiant.co.uk pagead2.googlesyndication.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://plumrocket.com *.aiden.cx *.amazonaws.com unpkg.com *.bing.com *.doubleclick.net *.google.nl google.nl *.google.com google.com google.de *.google.de *.cloudflare.com *.trengo.eu fonts.bunny.net cdn.jsdelivr.net *.google.by www.gstatic.com *.clarity.ms *.facebook.net *.facebook.com d5yoctgpv4cpx.cloudfront.net rkkck31tec.execute-api.eu-central-1.amazonaws.com *.spotlersearch.com spotlersearchanalytics.com *.spotlersearchanalytics.com ipinfo.io *.newrelic.com *.nr-data.net *.beslist.nl *.openhaardhout-gigant.nl *.brennholzgigant.de *.haardhout.nl *.strooizoutgigant.nl *.zoutgigant.be *.tuinshop.nl *.brandhoutgigant.be fonts.googleapis.com *.cloudflareinsights.com *.interacty.me *.squeezely.tech *.bing.net *.sentry-cdn.com *.trustpilot.com sgtm.saltgiant.co.uk pagead2.googlesyndication.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.multisafepay.com https://pay.google.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com www.google.com https://www.googletagmanager.com/ *.multisafepay.com https://pay.google.com https://plumrocket.com *.aiden.cx www.xtento.com *.trustpilot.com *.amazonaws.com unpkg.com *.bing.com *.doubleclick.net *.google.nl google.nl *.google.com google.com google.de *.google.de *.cloudflare.com *.trengo.eu fonts.bunny.net cdn.jsdelivr.net *.google.by www.gstatic.com *.clarity.ms *.facebook.net *.facebook.com d5yoctgpv4cpx.cloudfront.net rkkck31tec.execute-api.eu-central-1.amazonaws.com *.spotlersearch.com spotlersearchanalytics.com *.spotlersearchanalytics.com ipinfo.io *.newrelic.com *.nr-data.net *.beslist.nl *.openhaardhout-gigant.nl *.brennholzgigant.de *.haardhout.nl *.strooizoutgigant.nl *.zoutgigant.be *.tuinshop.nl *.brandhoutgigant.be fonts.googleapis.com *.cloudflareinsights.com *.interacty.me *.squeezely.tech *.bing.net *.sentry-cdn.com sgtm.saltgiant.co.uk pagead2.googlesyndication.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com https://images.unsplash.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://firebasestorage.googleapis.com *.sooqr.com *.multisafepay.com www.magmodules.eu *.squeezely.tech *.aiden.cx www.xtento.com cdn.xtento.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.amazonaws.com unpkg.com *.bing.com *.doubleclick.net *.google.nl google.nl *.google.com google.com google.de *.google.de *.cloudflare.com *.trengo.eu fonts.bunny.net cdn.jsdelivr.net *.google.by www.gstatic.com *.clarity.ms *.facebook.net *.facebook.com d5yoctgpv4cpx.cloudfront.net rkkck31tec.execute-api.eu-central-1.amazonaws.com *.spotlersearch.com spotlersearchanalytics.com *.spotlersearchanalytics.com ipinfo.io *.newrelic.com *.nr-data.net *.beslist.nl *.openhaardhout-gigant.nl *.brennholzgigant.de *.haardhout.nl *.strooizoutgigant.nl *.zoutgigant.be *.tuinshop.nl *.brandhoutgigant.be fonts.googleapis.com *.cloudflareinsights.com *.interacty.me *.bing.net *.sentry-cdn.com *.trustpilot.com sgtm.saltgiant.co.uk pagead2.googlesyndication.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io *.shopify.com *.sooqr.com *.multisafepay.com https://pay.google.com squeezely.tech www.squeezely.tech *.squeezely.tech *.aiden.cx www.xtento.com cdn.xtento.com *.trustpilot.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.amazonaws.com unpkg.com *.bing.com *.doubleclick.net *.google.nl google.nl *.google.com google.com google.de *.google.de *.cloudflare.com *.trengo.eu fonts.bunny.net cdn.jsdelivr.net *.google.by www.gstatic.com *.clarity.ms *.facebook.net *.facebook.com d5yoctgpv4cpx.cloudfront.net rkkck31tec.execute-api.eu-central-1.amazonaws.com *.spotlersearch.com spotlersearchanalytics.com *.spotlersearchanalytics.com ipinfo.io *.beslist.nl *.openhaardhout-gigant.nl *.brennholzgigant.de *.haardhout.nl *.strooizoutgigant.nl *.zoutgigant.be *.tuinshop.nl *.brandhoutgigant.be fonts.googleapis.com *.cloudflareinsights.com *.interacty.me *.bing.net *.sentry-cdn.com sgtm.saltgiant.co.uk pagead2.googlesyndication.com https://browser.sentry-cdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.fontawesome.com https://fonts.bunny.net *.sooqr.com maxcdn.bootstrapcdn.com *.multisafepay.com *.trustpilot.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.amazonaws.com unpkg.com *.bing.com *.doubleclick.net *.google.nl google.nl *.google.com google.com google.de *.google.de *.cloudflare.com *.trengo.eu fonts.bunny.net cdn.jsdelivr.net *.google.by www.gstatic.com *.clarity.ms *.facebook.net *.facebook.com d5yoctgpv4cpx.cloudfront.net rkkck31tec.execute-api.eu-central-1.amazonaws.com *.spotlersearch.com spotlersearchanalytics.com *.spotlersearchanalytics.com ipinfo.io *.newrelic.com *.nr-data.net *.beslist.nl *.openhaardhout-gigant.nl *.brennholzgigant.de *.haardhout.nl *.strooizoutgigant.nl *.zoutgigant.be *.tuinshop.nl *.brandhoutgigant.be fonts.googleapis.com *.cloudflareinsights.com *.interacty.me *.squeezely.tech *.bing.net *.sentry-cdn.com sgtm.saltgiant.co.uk pagead2.googlesyndication.com https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.amazonaws.com unpkg.com *.bing.com *.doubleclick.net *.google.nl google.nl *.google.com google.com google.de *.google.de *.cloudflare.com *.trengo.eu fonts.bunny.net cdn.jsdelivr.net *.google.by www.gstatic.com *.clarity.ms *.facebook.net *.facebook.com d5yoctgpv4cpx.cloudfront.net rkkck31tec.execute-api.eu-central-1.amazonaws.com *.spotlersearch.com spotlersearchanalytics.com *.spotlersearchanalytics.com ipinfo.io *.newrelic.com *.nr-data.net *.beslist.nl *.openhaardhout-gigant.nl *.brennholzgigant.de *.haardhout.nl *.strooizoutgigant.nl *.zoutgigant.be *.tuinshop.nl *.brandhoutgigant.be fonts.googleapis.com *.cloudflareinsights.com *.interacty.me *.squeezely.tech *.bing.net *.sentry-cdn.com *.trustpilot.com sgtm.saltgiant.co.uk pagead2.googlesyndication.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io *.multisafepay.com squeezely.tech *.squeezely.tech *.aiden.cx *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.amazonaws.com unpkg.com *.bing.com *.doubleclick.net *.google.nl google.nl *.google.com google.com google.de *.google.de *.cloudflare.com *.trengo.eu fonts.bunny.net cdn.jsdelivr.net *.google.by www.gstatic.com *.clarity.ms *.facebook.net *.facebook.com d5yoctgpv4cpx.cloudfront.net rkkck31tec.execute-api.eu-central-1.amazonaws.com *.spotlersearch.com spotlersearchanalytics.com *.spotlersearchanalytics.com ipinfo.io *.beslist.nl *.openhaardhout-gigant.nl *.brennholzgigant.de *.haardhout.nl *.strooizoutgigant.nl *.zoutgigant.be *.tuinshop.nl *.brandhoutgigant.be fonts.googleapis.com *.cloudflareinsights.com *.interacty.me *.bing.net *.sentry-cdn.com *.trustpilot.com sgtm.saltgiant.co.uk pagead2.googlesyndication.com *.pay.nl o1145342.ingest.us.sentry.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data: http://clients1.google.com; object-src 'none'; script-src 'self' https: 'unsafe-eval' 'nonce-'; style-src 'self' https: 'unsafe-inline' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com unpkg.com *.unpkg.com imagekit.io *.imagekit.io *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com/ unpkg.com *.unpkg.com cdnjs.cloudflare.com imagekit.io *.imagekit.io js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://www.magezon.com magefan.com cm.magefan.com *.disqus.com unpkg.com *.unpkg.com imagekit.io *.imagekit.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://img.youtube.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com https://maps.googleapis.com *.disqus.com https://cdn.jsdelivr.net *.google.com/ unpkg.com *.unpkg.com cdnjs.cloudflare.com imagekit.io *.imagekit.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://cdn.jsdelivr.net unpkg.com *.unpkg.com imagekit.io *.imagekit.io https://static.klaviyo.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://maps.googleapis.com https://player.vimeo.com unpkg.com *.unpkg.com imagekit.io *.imagekit.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; img-src 'self' data: blob: https://i.netfla.com.br https://*.netfla.com.br https://*.googlesyndication.com https://*.google-analytics.com https://*.googletagmanager.com https://*.onesignal.com https://i.imgur.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googlesyndication.com https://*.google-analytics.com https://*.googletagmanager.com https://cdn.onesignal.com https://*.onesignal.com https://d3u598arehftfk.cloudfront.net https://tags.premiumads.com.br https://fp.mediaintelliview.com https://embed.onefootball.com https://platform.twitter.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://api.netfla.com.br https://*.google-analytics.com https://*.onesignal.com https://vitals.vercel-insights.com; frame-src 'self' https://*.googlesyndication.com https://www.youtube.com https://platform.twitter.com https://track.mediaintelliview.com 1
default-src 'self'; connect-src 'self' https://www.googletagmanager.com https://analytics.google.com *.analytics.google.com https://www.google-analytics.com https://parachuteforms-prod-web.azurewebsites.net https://tags.srv.stackadapt.com https://connect.facebook.net https://maps.googleapis.com https://maps.gstatic.com https://unpkg.com https://fbo-b.flippingbook.com/FrontendApi.svc/GetPublicationForDisplay dc.services.visualstudio.com *.snapchat.com https://www.google.com https://px.ads.linkedin.com https://ad.doubleclick.net https://www.facebook.com https://t.co https://analytics.twitter.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net; font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' https://www.googletagmanager.com https://online.flippingbook.com https://static.addtoany.com https://www.youtube.com https://www.google.com https://www.gstatic.com https://www.facebook.com https://13397055.fls.doubleclick.net *.snapchat.com; img-src 'self' https: data:; object-src 'none'; script-src 'self' https://www.googletagmanager.com https://www.gstatic.com https://online.flippingbook.com https://parachuteforms-prod-web.azurewebsites.net https://snap.licdn.com https://connect.facebook.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://maps.gstatic.com https://unpkg.com https://www.google.com platform.instagram.com platform.twitter.com https://d33i2vgywgme2s.cloudfront.net/render/ js.monitor.azure.com https://tags.srv.stackadapt.com https://static.ads-twitter.com https://code.jquery.com https://static.addtoany.com; script-src-attr 'self'; script-src-elem 'self' https://www.googletagmanager.com https://www.gstatic.com https://siteimproveanalytics.com https://online.flippingbook.com https://parachuteforms-prod-web.azurewebsites.net https://snap.licdn.com https://connect.facebook.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://maps.googleapis.com https://maps.gstatic.com https://unpkg.com https://www.google.com platform.instagram.com platform.twitter.com https://d33i2vgywgme2s.cloudfront.net/render/ js.monitor.azure.com https://tags.srv.stackadapt.com https://analytics.twitter.com https://static.ads-twitter.com https://sc-static.net https://code.jquery.com https://static.addtoany.com 'nonce-SWcMaJh-NdqnfhZgip5PNw'; style-src 'self' https://parachuteforms-prod-web.azurewebsites.net https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' https://tags.srv.stackadapt.com https://sc-static.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com 'nonce-SWcMaJh-NdqnfhZgip5PNw'; frame-ancestors 'self'; report-uri https://www.saskenergy.com/log-report-uri/reportOnly 1
default-src 'self'; script-src 'self' 'nonce-Gh9J6rg8T4l40C/8a15v7Q==' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://code.jquery.com https://cdn.jsdelivr.net https://stackpath.bootstrapcdn.com https://cdnjs.cloudflare.com; style-src 'self' 'nonce-Gh9J6rg8T4l40C/8a15v7Q==' 'unsafe-inline' https://stackpath.bootstrapcdn.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; form-action 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
font-src robertopiraloff.com www.robertopiraloff.com fonts.googleapis.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ robertopiraloff.com www.robertopiraloff.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io robertopiraloff.com www.robertopiraloff.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ robertopiraloff.com www.robertopiraloff.com static.cloudflareinsights.com connect.facebook.net code.jivosite.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com robertopiraloff.com www.robertopiraloff.com fonts.googleapis.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com robertopiraloff.com www.robertopiraloff.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com robertopiraloff.com www.robertopiraloff.com ws.hotjar.com code.jivosite.com node-ya-5.jivosite.com connect.facebook.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src robertopiraloff.com www.robertopiraloff.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-kSxyRXda2e2ZZnsnBruXcg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' 'unsafe-inline' *.usercentrics.eu *.youtube.com tracker.muellergroup.com data: connect.facebook.net *.googletagmanager.com analytics.tiktok.com *.amazon-adsystem.com; frame-src *.youtube.com *.youtube-nocookie.com *.frcapi.com *.facebook.com; img-src 'self' data: *.ytimg.com *.usercentrics.eu *.facebook.com *.googlesyndication.com ad.doubleclick.net analytics.tiktok.com; connect-src 'self' noembed.com *.plyr.io *.usercentrics.eu tracker.muellergroup.com analytics.tiktok.com analytics-ipv6.tiktokw.us *.amazon-adsystem.com *.paa-reporting-advertising.amazon *.googlesyndication.com *.facebook.com; report-uri https://allesmuelleroderwas.de/@http-reporting?csp=report&requestTime=1789290336916353&requestHash=e6b19b25e1d48b714a8900ee2ebefa38d296c2bd 1
font-src data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.instagram.com *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.cdninstagram.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.instagram.com *.google.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com *.fontawesome.com data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.s3.magento.com s3.magento.com *.cloudfront.net cloudfront.net *.doubleclick.net doubleclick.net *.s3.amazonaws.com s3.amazonaws.com checkout.sandbox.dev.clover.com checkout.clover.com *.pixriot.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googletagmanager.com googletagmanager.com gstatic.com *.cloudfront.net cloudfront.net *.mailchimp.com mailchimp.com cdn-images.mailchimp.com *.list-manage.com list-manage.com checkout.sandbox.dev.clover.com checkout.clover.com *.avada.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.fontawesome.com *.s3.magento.com s3.magento.com *.cloudfront.net cloudfront.net downloads.mailchimp.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.s3.magento.com s3.magento.com *.cloudfront.net cloudfront.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com *.luckyorange.net luckyorange.net *.visitors.live visitors.live auth.axiomaudio.com *.pixriot.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com blob: http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
report-uri /csp-violation-report-endpoint 1
default-src 'self';  script-src   'self'   'unsafe-inline'   'unsafe-eval'   https://www.googletagmanager.com   https://www.google-analytics.com   https://www.googleadservices.com   https://static.hotjar.com   https://script.hotjar.com   https://js.hsforms.net   https://*.hs-scripts.com   https://*.hs-analytics.net   https://*.hsforms.net   https://*.hsforms.com   https://*.hs-banner.com   https://*.usemessages.com   https://*.hubspot.com   https://*.hubspot.net   https://*.hubspotusercontent.net   https://cdn2.hubspot.net;  connect-src   'self'   https://www.google-analytics.com   https://stats.g.doubleclick.net   https://www.googletagmanager.com   https://www.googleadservices.com   https://*.hubapi.com   https://*.hs-analytics.net   https://*.hotjar.com   https://*.hotjar.io   https://forms.hubspot.com   https://api.hsforms.com   https://forms.hsforms.com   https://perf-eu1.hsforms.com   https://*.hsforms.com   https://*.hsforms.net;  img-src   'self'   data:   https://www.google-analytics.com   https://www.googletagmanager.com   https://www.googleadservices.com   https://stats.g.doubleclick.net   https://*.hsforms.com   https://*.hsforms.net   https://*.hubspotusercontent.net   https://*.hotjar.com;  frame-src   https://www.googletagmanager.com   https://*.hsforms.com   https://*.hsforms.net   https://*.hubspot.com   https://*.usemessages.com   https://*.hotjar.com   https://forms.hubspot.com   https://forms.hsforms.com;  style-src   'self'   'unsafe-inline'   https://*.hubspot.com   https://*.hubspotusercontent.net   https://*.hsforms.com   https://*.hsforms.net;  font-src   'self'   data:   https://*.hubspotusercontent.net   https://*.hsforms.com   https://*.hsforms.net;  form-action   'self'   https://forms.hubspot.com   https://forms.hsforms.com   https://api.hsforms.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://widget.leat.com https://widget.piggy.eu https://unpkg.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://unpkg.com https://fonts.googleapis.com; img-src 'self' data: blob: https://*.basemaps.cartocdn.com https://widget.leat.com https://widget.piggy.eu https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://widget.leat.com https://widget.piggy.eu https://foodhallen-api.vercel.app https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com; frame-src https://widget.leat.com https://widget.piggy.eu; media-src 'self'; form-action 'self' https://foodhallen-api.vercel.app; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; upgrade-insecure-requests 1
upgrade-insecure-requests; report-to siuludama.lt; report-uri siuludama.lt; 1
font-src *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.dnky.co webchat.dotdigital.com unsafe-inline *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com advisor.bluebarry.ai js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com *.taggrs.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com matters.hal18.nl app.taggrs.io api.taggrs.io www.google.com.ua www.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com advisor.bluebarry.ai cdn.bluebarry.ai https://maps.googleapis.com *.disqus.com https://cdn.jsdelivr.net *.taggrs.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com tagmanager.google.com matters.hal18.nl www.google.com.ua portal.cookiebanners.nl www.clarity.ms connect.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com data.bluebarry.ai advisor.bluebarry.ai https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com matters.hal18.nl www.google.com.ua www.clarity.ms q.clarity.ms 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com fonts.googleapis.com *.googleapis.com data: *.abtasty.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com paymentpage.ecommpay.com paymentpage.westresscode.net pp.terminal.test *.two.inc *.sandbox.two.inc *.demo.two.inc *.staging.two.inc *.release.two.inc *.experimental.two.inc *.perf.two.inc *.cyber.two.inc processing.psmock.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.awin1.com *.zenaps.com *.fls.doubleclick.net *.buildingmaterials.co.uk *.weltpixel.com paymentpage.ecommpay.com paymentpage.westresscode.net pp.terminal.test *.trustpilot.com processing.psmock.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.everesttech.net *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com maps.googleapis.com maps.gstatic.com *.googleapis.com https://images.unsplash.com *.awin1.com *.zenaps.com *.wepowerconnections.com services.postcodeanywhere.co.uk *.bing.com *.bing.net *.google.co.uk *.roeye.com cdn-cookieyes.com www.feedoptimise.com cdn.feedoptimise.com www.google.com.ua paymentpage.ecommpay.com paymentpage.westresscode.net pp.terminal.test https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ processing.psmock.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.abtasty.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com https://gtm.buildingmaterials.co.uk data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.adobedtm.com *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://maps.googleapis.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com api.addressy.com *.bing.com *.bing.net *.mediahawk.co.uk *.noibu.com *.roeyecdn.com *.hotjar.com cdn-cookieyes.com www.feedoptimise.com cdn.feedoptimise.com paymentpage.ecommpay.com paymentpage.westresscode.net pp.terminal.test https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.trustpilot.com processing.psmock.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.abtasty.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net https://gtm.buildingmaterials.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com api.addressy.com paymentpage.ecommpay.com paymentpage.westresscode.net pp.terminal.test https://static.klaviyo.com processing.psmock.com assets.braintreegateway.com *.abtasty.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io amcglobal.sc.omtrdc.net p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com *.wepowerconnections.com https://the.sciencebehindecommerce.com api.addressy.com *.bing.com *.bing.net *.mediahawk.co.uk *.buildingmaterials.co.uk *.googlesyndication.com *.hotjar.com *.hotjar.io wss://*.hotjar.com *.cookieyes.com cdn-cookieyes.com paymentpage.ecommpay.com paymentpage.westresscode.net pp.terminal.test *.two.inc *.sandbox.two.inc *.demo.two.inc *.staging.two.inc *.release.two.inc *.experimental.two.inc *.perf.two.inc *.cyber.two.inc https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ processing.psmock.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.abtasty.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app https://gtm.buildingmaterials.co.uk 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.two.inc *.sandbox.two.inc *.demo.two.inc *.staging.two.inc *.release.two.inc *.experimental.two.inc *.perf.two.inc *.cyber.two.inc 'self' 'unsafe-inline'; report-uri https://5d00f164-d437-484e-9565-3361ea4d16a4.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' soofos.nl media.soofos.nl www.youtube.com googleads.g.doubleclick.net www.googletagmanager.com www.gstatic.com connect.facebook.net www.google.com static.klaviyo.com static-tracking.klaviyo.com cdn.addevent.com *.visualwebsiteoptimizer.com www.chatbase.co eu-assets.i.posthog.com googleads.g.doubleclick.net analytics.tiktok.com snap.licdn.com js.mollie.com ajax.cloudflare.com yoast.com assets.calendly.com/assets/external/widget.js; style-src 'self' 'unsafe-inline' soofos.nl media.soofos.nl use.fontawesome.com fonts.googleapis.com cdnjs.cloudflare.com assets.calendly.com; img-src media.soofos.nl *.visualwebsiteoptimizer.com vz-16f018c5-434.b-cdn.net px.ads.linkedin.com connect.facebook.net 'self' data: soofos.nl secure.gravatar.com media4.giphy.com s.w.org www.googleadservices.com www.googletagmanager.com pagead2.googlesyndication.com googleads.g.doubleclick.net www.facebook.com assets.calendly.com www.google.com www.google.com.mx www.google.nl www.google.bg www.google.es www.google.fr www.google.de www.google.be www.google.it www.google.co.za; frame-src 'self' player.mediadelivery.net w.soundcloud.com player.vimeo.com www.youtube.com www.youtube-nocookie.com www.canva.com www.loom.com calendly.com/lonne/kennismakingmetsoofos www.googletagmanager.com td.doubleclick.net js.mollie.com www.facebook.com www.chatbase.co www.klantenvertellen.nl blob:; connect-src 'self' soofos.nl media.soofos.nl video.bunnycdn.com ad.doubleclick.net www.googletagmanager.com www.google.com www.google.de www.google.be www.google.es www.google.nl www.google-analytics.com insights.algolia.io www.facebook.com analytics.google.com region1.analytics.google.com region1.google-analytics.com pagead2.googlesyndication.com px.ads.linkedin.com eu.i.posthog.com fast.a.klaviyo.com voa0vpznn3-dsn.algolia.net yoast.com static-forms.klaviyo.com analytics.tiktok.com www.chatbase.co google.com a.klaviyo.com www.googleadservices.com analytics-ipv6.tiktokw.us stats.g.doubleclick.net *.visualwebsiteoptimizer.com; font-src 'self' soofos.nl media.soofos.nl cdnjs.cloudflare.com use.fontawesome.com fonts.gstatic.com buddyboss-app-files.s3.amazonaws.com data:; media-src 'self' soofos.nl r2-public.soofos.nl media.soofos.nl media4.giphy.com; object-src 'none'; base-uri 'self'; form-action 'self' www.facebook.com; frame-ancestors 'self'; report-to csp-endpoint 1
font-src maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com www.xtento.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com maps.gstatic.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com js.authorize.net jstest.authorize.net js.braintreegateway.com cdn-scripts.signifyd.com www.youtube.com maps.googleapis.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src-elem https://static.klaviyo.com/ https://js.klevu.com/ https://static-tracking.klaviyo.com/ https://www.shopperapproved.com/ https://bat.bing.com/ https://js.stripe.com/ https://www.paypal.com/ https://html5.dcatalog.com/ https://ct.pinterest.com/ https://cdnjs.cloudflare.com/ https://connect.facebook.net/ https://maps.googleapis.com/ https://mockett.services.answerbase.com/ https://s.pinimg.com/ https://assets.pinterest.com/ https://www.google-analytics.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.googletagmanager.com/ https://js-agent.newrelic.com/nr-spa-1.293.0.min.js www.paypalobjects.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src-elem https://maxcdn.bootstrapcdn.com/ https://js.klevu.com/ https://fonts.googleapis.com/ https://use.typekit.net/ https://p.typekit.net/ https://cdnjs.cloudflare.com/ https://mockett.services.answerbase.com/ https://data3.answerbase.com/ https://www.shopperapproved.com/ https://www.shopperapproved.com/seal/2253.css static.klaviyo.com static-tracking.klaviyo.com 'self' 'unsafe-inline'; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klevu.com *.ksearchnet.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com https://www.shopperapproved.com/ https://maxcdn.bootstrapcdn.com/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com https://www.mockett.com/dmcadmin/swatches/iframe/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io github.blog www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com https://bat.bing.com/ https://www.shopperapproved.com/ https://assets.pinterest.com/ https://data3.answerbase.com/ https://mockett.services.answerbase.com/ https://log.pinterest.com/ https://mockett.com/pub/media/wysiwyg/mockett_sa_milestone_award.png d3k81ch9hvuctc.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com s.pinimg.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com maps.googleapis.com https://m.stripe.network/ https://www.mockett.com/ self 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com assets.braintreegateway.com *.stripe.network *.stripecdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com https://statsjs.klevu.com/ https://maps.googleapis.com/ https://mockett.services.answerbase.com/ https://stats.g.doubleclick.net/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://*.ayshei.com https://*.ayshei.io https://appleid.apple.com https://accounts.google.com https://stg-id.uaepass.ae https://id.uaepass.ae https://www.facebook.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.ayshei.com https://*.ayshei.io https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://cdn.moengage.com https://*.moengage.com https://websdk-recording.uxcam.com https://*.uxcam.com https://*.appsflyer.com https://*.onelink.me https://maps.googleapis.com https://apis.google.com https://accounts.google.com https://appleid.cdn-apple.com https://js.stripe.com https://www.gstatic.com https://*.gstatic.com https://www.youtube.com https://www.youtube-nocookie.com https://sc-static.net https://static.cloudflareinsights.com https://googleads.g.doubleclick.net https://*.snapchat.com https://*.tiktok.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.ayshei.com https://*.ayshei.io https://*.ayshei.xyz wss://*.ayshei.com wss://*.ayshei.io https://*.supabase.co wss://*.supabase.co https://www.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://connect.facebook.net https://www.facebook.com https://*.moengage.com https://*.uxcam.com https://*.appsflyer.com https://api.stripe.com https://maps.googleapis.com https://*.googleapis.com https://*.gstatic.com https://*.firebaseio.com https://www.google.com https://ad.doubleclick.net https://googleads.g.doubleclick.net https://*.snapchat.com https://*.tiktok.com https://*.tiktokw.us https://analytics.google.com; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://www.youtube.com https://www.youtube-nocookie.com https://accounts.google.com https://*.firebaseapp.com https://appleid.apple.com https://www.google.com https://www.facebook.com https://*.snapchat.com; worker-src 'self' blob:; media-src 'self' https: blob: data:; manifest-src 'self'; report-uri /api/csp-report 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.checkout.com *.cdn-apple.com cdn.livechat.connexease.com api.connexease.com *.g.doubleclick.net *.smooch.io cdnjs.cloudflare.com *.googlesyndication.com *.googleadservices.com *.googletagservices.com *.google.com google.ae *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com https://fonts.gstatic.com *.fontawesome.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: checkout.tabby.ai widgets.tabby.ai cdn.tabby.ai fonts.googleapis.com storage.googleapis.com https://cdn-sandbox.tamara.co data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.twitter.com self pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com pay.sandbox.realexpayments.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors self www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.checkout.com *.klarna.com self *.tamara.co *.vimeo.com td.doubleclick.net *.googletagmanager.com livechat.connexease.com cdn.allinone.connexease.com cdnjs.cloudflare.com tr.snapchat.com *.googlesyndication.com *.googleadservices.com *.g.doubleclick.net www.googletagservices.com *.twitter.com *.youtube.com/ www.google.com www.gstatic.com apis.google.com checkout.tabby.ai www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com *.americanexpress.com *.globalpay.com *.mastercard.com *.visa.com *.fls.doubleclick.net *.facebook.com *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.checkout.com 'self' 'unsafe-inline' 'self' data: *.g.doubleclick.net *.cloudflare.com *.klarna.com *.tamara.co *.facebook.com *.twitter.com *.snapchat.com preprod.calvinklein.ae *.ytimg.com cdn.allinone.connexease.com cdn.livechat.connexease.com api.connexease.com *.smooch.io cdnjs.cloudflare.com tr.snapchat.com cdn.connexease.com *.googlesyndication.com *.googleadservices.com *.googletagservices.com *.google.com *.google.ae *.google.com.af *.google.com.bh *.google.com.eg *.google.iq *.google.com.jo *.google.com.kw *.google.com.lb *.google.com.om *.google.ps *.google.com.qa *.google.com.sa *.google.com.tr *.google.com.ye *.twimg.com *.lightemporium.com *.usercentrics.eu magefan.com cm.magefan.com https://firebasestorage.googleapis.com checkout.tabby.ai widgets.tabby.ai cdn.tabby.ai fonts.googleapis.com storage.googleapis.com https://ad.doubleclick.net *.speedcurve.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.checkout.com *.klarnacdn.net 'self' 'unsafe-inline' 'unsafe-eval' www.paypal.com connect.facebook.net cdn.segment.com *.cloudflare.com js.braintreegateway.com *.tamara.co *.adobedtm.com tr.snapchat.com analytics.tiktok.com preprod.calvinklein.ae api.segment.io sc-static.net livechat.connexease.com cdn.allinone.connexease.com cdn.livechat.connexease.com api.connexease.com *.smooch.io td.doubleclick.net cdnjs.cloudflare.com cdn.connexease.com *.googlesyndication.com *.googletagservices.com *.google.ae *.google.com.af *.google.com.bh *.google.com.eg *.google.iq *.google.com.jo *.google.com.kw *.google.com.lb *.google.com.om *.google.ps *.google.com.qa *.google.com.sa *.google.com.tr *.google.com.ye *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.trackedlink.net *.googleapis.com *.avada.io *.shopify.com checkout.tabby.ai widgets.tabby.ai www.google.com cdn.sift.com score.jcsc.online seondf.com deviceinf.com getdeviceinf.com *.speedcurve.com capi-automation.s3.us-east-2.amazonaws.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s7.addthis.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com *.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://cdn.checkout.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com *.hotjar.com *.contentsquare.net wss://*.hotjar.com *.hotjar.io *.facebook.com *.tkrconnector.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.checkout.com 'self' 'unsafe-inline' *.fontawesome.com livechat.connexease.com preprod.calvinklein.ae cdn.allinone.connexease.com cdn.livechat.connexease.com api.connexease.com *.g.doubleclick.net *.smooch.io cdnjs.cloudflare.com tr.snapchat.com *.googlesyndication.com *.googleadservices.com *.googletagservices.com *.google.com *.google.ae *.google.com.eg *.google.com.lb *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu https://fonts.bunny.net maxcdn.bootstrapcdn.com *.tamara.co https://unpkg.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tamara.co d2cbsaprdtfsuaensto00.blob.core.windows.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.checkout.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.browser-intake-datadoghq.com 'self' cdn.segment.com *.tamara.co *.facebook.net *.cloudflare.com tr.snapchat.com get.geojs.io tr6.snapchat.com analytics.tiktok.com cdn.sift.com api.braintreegateway.com livechat.connexease.com api.connexease.com cdn.livechat.connexease.com *.g.doubleclick.net *.smooch.io cdnjs.cloudflare.com *.googlesyndication.com *.googleadservices.com *.googletagservices.com *.google.ae *.google.com.eg *.google.com.lb *.twitter.com *.twimg.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io checkout.tabby.ai widgets.tabby.ai api.segment.com api.segment.io api.amplitude.com *.seondfresolver.com *.deviceinfresolver.com *.getdeviceinfresolver.com https://browser-intake-datadoghq.eu google.com/pay *.hotjar.com wss://*.hotjar.com *.hotjar.io *.contentsquare.net https://analytics-ipv6.tiktokw.us https://*.us-central1.run.app https://*.conversionsapigateway.com https://ad.doubleclick.net *.facebook.com *.speedcurve.com https://cdn.allinone.connexease.com analytics.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.seondnsresolve.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'nonce-ot2Pu74NtKFLzkzD1uhO4w==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-j7k6IoIio2RFqv7+hzo3Xw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-0LY1yCj2Me6ofW/Bt5Nc/Q==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
object-src 'none';base-uri 'self';script-src 'nonce-6kfmrl0BcZtGyCb4SzqFYA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src https://www.googletagmanager.com *.googleapis.com *.gstatic.com https://cdnjs.cloudflare.com *.fontawesome.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com js.mollie.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com *.gstatic.com *.googleapis.com https://www.google.fr https://api.mapbox.com *.tile.openstreetmap.org https://www.mollie.com https://maps.googleapis.com https://maps.gstatic.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com *.gstatic.com https://cdnjs.cloudflare.com js.mollie.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com fonts.googleapis.com https://fonts.googleapis.com https://cdnjs.cloudflare.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.googleapis.com https://nominatim.openstreetmap.org 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'nonce-I3fDum1QK4C5CDYz/EipyQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-dEPVaO2R5JDbZ/SddahH2Q==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-ilJ15j8j8ektVn16A9e/FQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-ofEXUAE/FINnwQaN9ZG2fA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-bW4V+BWJzkSVJCjArG0bLA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-lMZY7vCLgn+oNub3oVSHlQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
object-src 'none';base-uri 'self';script-src 'nonce-ewimMHvRX05nyk866b31Lg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https: https://backend.abuauf.com https://abuauf-stg.cloudhosta.com https://abuauf.com;script-src 'self' blob: 'unsafe-eval' 'unsafe-inline' https://static.cloudflareinsights.com https://analytics.google.com https://api-gateway-uat.ngenius-payments.com https://paypage.sandbox.ngenius-payments.com https://paypage.ngenius-payments.com https://*.ngenius-payments.com https://www.googletagmanager.com https://backend.abuauf.com https://abuauf-stg.cloudhosta.com https://abuauf.com https://script.hotjar.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.googletagmanager.com;img-src 'self' blob: data: https://c.bing.com/ https://c.clarity.ms/c.gif https://scripts.clarity.ms/ https://*.googleapis.com https://backend.abuauf.com https://abuauf-stg.cloudhosta.com https://abuauf.com https://www.facebook.com  https://maps.gstatic.com https://www.google.com https://www.google.com https://www.google.com.eg https://www.googletagmanager.com https://www.google.ru https://*.abuauf.com https://googleads.g.doubleclick.net https://i.ytimg.com https://www.google-analytics.com https://fonts.gstatic.com;media-src 'self' blob: https://backend.abuauf.com https://abuauf-stg.cloudhosta.com https://abuauf.com ;font-src 'self' 'unsafe-eval' blob: data: webpack: https://fonts.gstatic.com;base-uri 'self';connect-src 'self' https://cloudflareinsights.com https://ipapi.co https://static.cloudflareinsights.com https://analytics.tiktok.com https://analytics.google.com https://api-gateway-uat.ngenius-payments.com https://paypage.sandbox.ngenius-payments.com https://paypage.ngenius-payments.com https://*.ngenius-payments.com https://www.googleleadservices.com https://www.googleadservices.com https://www.google-analytics.com https://backend.abuauf.com https://backendstg.abuauf.com/ https://www.googleapis.com https://www.facebook.com https://graph.facebook.com https://google.com https://vc.hotjar.io https://metrics.hotjar.io https://www.google.com https://www.google.com.eg https://stats.g.doubleclick.net https://www.clarity.ms https://*.clarity.ms https://api.ipapi.is https://googleads.g.doubleclick.net;script-src-elem 'self' 'unsafe-inline' https://scripts.clarity.ms/ https://static.cloudflareinsights.com https://analytics.tiktok.com https://analytics.google.com https://paypage.sandbox.ngenius-payments.com https://paypage.ngenius-payments.com https://*.ngenius-payments.com https://maps.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://static.hotjar.com https://connect.facebook.net https://js.createsend1.com https://*.googleapis.com https://*.google.com https://googleads.g.doubleclick.net https://script.hotjar.com https://ap-gateway.mastercard.com https://www.googleadservices.com https://www.youtube.com https://waffarad.com https://www.clarity.ms;form-action 'self' https://analytics.google.com https://api-gateway-uat.ngenius-payments.com https://authentication.cardinalcommerce.com  https://www.facebook.com https://secure-acs2ui-b1-indmum-mumrdc.wibmo.com https://ap.gateway.mastercard.com https://*.wibmo.com;frame-src 'self' https://analytics.google.com https://api-gateway.sandbox.ngenius-payments.com https://api-gateway-uat.ngenius-payments.com https://paypage.sandbox.ngenius-payments.com https://paypage.ngenius-payments.com https://*.ngenius-payments.com https://authentication.cardinalcommerce.com https://www.googletagmanager.com https://www.facebook.com https://backend.abuauf.com https://backendstg.abuauf.com/ https://abuauf.com https://www.youtube.com https://td.doubleclick.net https://ap-gateway.mastercard.com https://secure-acs2ui-b1-indmum-mumrdc.wibmo.com https://ap.gateway.mastercard.com https://*.wibmo.com;object-src 'self' blob: data:;worker-src 'self' blob:;report-to default; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://maps.googleapis.com https://unpkg.com https://www.instagram.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://www.recaptcha.net https://static.axept.io http://static.axept.io https://cdn.ckeditor.com https://code.jquery.com https://maxcdn.bootstrapcdn.com https://use.fontawesome.com https://app.mailjet.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.axept.io https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.axept.io https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com; img-src 'self' data: blob: https:; connect-src 'self' https://www.googletagmanager.com https://connect.facebook.net https://www.facebook.com https://maps.googleapis.com https://www.instagram.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://region1.analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://*.doubleclick.net https://www.googleadservices.com https://*.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://*.google.com https://www.google.fr https://*.google.fr https://www.gstatic.com https://www.recaptcha.net https://client.axept.io https://api.axept.io; frame-src 'self' https://www.googletagmanager.com https://www.facebook.com https://connect.facebook.net https://www.google.com https://www.recaptcha.net https://www.instagram.com https://www.youtube.com https://www.youtube-nocookie.com https://extrait.acces-editions.com https://fliphtml5.com https://*.fliphtml5.com https://vrlq.mjt.lu; form-action 'self' https:; media-src 'self' https: data: 1
style-src-elem maps.gstatic.com maps.googleapis.com fonts.googleapis.com *.gstatic.com 'unsafe-inline' 'self' mcstaging.chopo.com.mx www.chopo.com.mx; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com fonts.googleapis.com https://fonts.bunny.net https://fonts.gstatic.com data: https://www.google.com https://www.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action *.paypal.com *.mercadopago.com.mx https://mercadopago.com.mx https://grupoproa.qualtrics.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mitec.com.mx 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com.mx https://mercadopago.com.mx https://grupoproa.qualtrics.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mitec.com.mx www.gstatic.com self www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com *.braintreegateway.com *.paypal.com google.com *.google.com *.mercadopago.com.mx https://mercadopago.com.mx https://grupoproa.qualtrics.com https://*.crazyegg.com 'self' *.doubleclick.net *.sharethis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mitec.com.mx www.google.com www.gstatic.com apis.google.com *.sapproa.com.mx https://devoluciones.sapproa.com.mx:34271 https://devolucionesqa.sapproa.com.mx:34271 *.examedi.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.mercadopago.com.mx https://mercadopago.com.mx https://grupoproa.qualtrics.com https://*.crazyegg.com https://user-images.crazyeggcdn.com maps.gstatic.com maps.googleapis.com *.facebook.com *.sharethis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://firebasestorage.googleapis.com *.mitec.com.mx *.googleapis.com *.sapproa.com.mx https://devoluciones.sapproa.com.mx:34271 https://devolucionesqa.sapproa.com.mx:34271 *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.mercadopago.com.mx https://mercadopago.com.mx https://grupoproa.qualtrics.com https://*.crazyegg.com *.googleapis.com maps.google.com *.gstatic.com *.sharethis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.avada.io *.shopify.com *.mitec.com.mx www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.sapproa.com.mx https://devoluciones.sapproa.com.mx:34271 https://devolucionesqa.sapproa.com.mx:34271 *.jscrambler.com *.examedi.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.fontawesome.com *.mercadopago.com.mx https://mercadopago.com.mx https://grupoproa.qualtrics.com https://*.crazyegg.com maps.gstatic.com maps.googleapis.com *.gstatic.com 'unsafe-inline' 'self' mcstaging.chopo.com.mx www.chopo.com.mx *.sharethis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://fonts.bunny.net *.googleapis.com *.addtoany.com *.mitec.com.mx *.google.com *.sapproa.com.mx https://devoluciones.sapproa.com.mx:34271 https://devolucionesqa.sapproa.com.mx:34271 https://accesosalud.com.mx 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.mercadopago.com.mx https://mercadopago.com.mx https://grupoproa.qualtrics.com https://*.crazyegg.com *.googleapis.com maps.google.com *.gstatic.com *.sharethis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://get.geojs.io *.avada.io http://dpm.demdex.net *.mitec.com.mx https://www.google.com https://www.gstatic.com *.sapproa.com.mx https://devoluciones.sapproa.com.mx:34271 https://devolucionesqa.sapproa.com.mx:34271 *.jscrambler.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src https://*.crazyegg.com blob: http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; form-action 'self' https://wa.me https://web.whatsapp.com; frame-ancestors 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://challenges.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com https://cdn.jsdelivr.net https://ajax.googleapis.com https://static.cloudflareinsights.com https://cdnjs.cloudflare.com https://stats.wp.com; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; style-src-attr 'unsafe-inline'; img-src 'self' data: blob: https://challenges.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.google.com.mx https://secure.gravatar.com https://*.wp.com https://*.gravatar.com https://cdn.jsdelivr.net; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; connect-src 'self' blob: https://challenges.cloudflare.com https://www.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://api.wordpress.org https://my.elementor.com https://my.yoast.com https://cloudflareinsights.com; media-src 'self' data: blob: https://*.wp.com; child-src 'self' blob: https://challenges.cloudflare.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.google.com https://maps.google.com https://www.facebook.com; frame-src 'self' blob: https://challenges.cloudflare.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.google.com https://maps.google.com https://www.facebook.com; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests; report-uri https://www.adea.com.mx/adeamx-csp-report.php; report-to csp-endpoint 1
default-src https:; script-src 'self' blob: catalyst-analytics.net stats.catalyst-au.net cdnjs.cloudflare.com *.youtube.com *.twitter.com *.twimg.com *.ytimg.com *.googleapis.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net h5p.org *.wikipedia.org 'unsafe-inline' 'unsafe-eval'; font-src https: data:; style-src https: 'unsafe-inline'; img-src https: data: *.yimg.com *.twimg.com *.navy.gov.au *.army.gov.au amc.edu.au gfs.org.au abc.net.au catalyst-analytics.net; report-uri https://www.adele.edu.au/local/csp/collector.php?uid=0&cid=1 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: ; style-src 'self' 'unsafe-inline' https: ; img-src 'self' data: blob: https: ; font-src 'self' data: https: ; connect-src 'self' https: ; frame-ancestors 'self'; object-src 'none'; base-uri 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://media.adorocupom.com https://www.googletagmanager.com; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com; frame-ancestors 'self'; report-uri /csp-report 1
default-src 'self'; base-uri 'self'; form-action https:; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.aerogligli.fr; script-src-elem 'self' 'unsafe-inline' https://www.aerogligli.fr; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://www.gstatic.com https://www.aerogligli.fr; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://www.gstatic.com https://www.aerogligli.fr; img-src 'self' data: blob: https:; font-src 'self' https://fonts.gstatic.com https://www.aerogligli.fr data:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com; connect-src 'self' data:; media-src 'self' data: blob:; upgrade-insecure-requests; report-uri /csp-violation-endpoint 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://oss.maxcdn.com https://maps.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://kit.fontawesome.com https://www.google.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://fonts.googleapis.com https://use.fontawesome.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; connect-src 'self' https:; frame-src 'self' https://drive.google.com https://www.googletagmanager.com https://www.youtube.com; worker-src 'self' blob:; report-uri /csp-report 1
default-src 'self'; frame-src https://challenges.cloudflare.com https://sdk.monnify.com https://salesiq.zohopublic.com https://www.facebook.com; worker-src 'self' blob:; connect-src 'self' https://www.facebook.com https://region1.analytics.google.com https://www.google.com https://www.google.co.uk https://www.google.com.ng https://www.google.com.gh https://www.googleadservices.com https://ad.doubleclick.net https://stats.g.doubleclick.net https://t.co https://analytics.twitter.com https://sdk.monnify.com https://api.monnify.com wss://api.monnify.com https://salesiq.zohopublic.com; font-src 'self' https://salesiq.zohopublic.com https://static.zohocdn.com; img-src 'self' data: https://assets.afrimillions.com https://m.afrimillions.com https://www.facebook.com https://region1.analytics.google.com https://www.google.com https://www.google.co.uk https://www.google.com.ng https://www.google.com.gh https://www.googletagmanager.com https://www.googleadservices.com https://ad.doubleclick.net https://t.co https://analytics.twitter.com https://static.zohocdn.com; object-src 'none'; script-src-elem 'self' https://www.googletagmanager.com https://connect.facebook.net https://capi-automation.s3.us-east-2.amazonaws.com https://static.ads-twitter.com https://googleads.g.doubleclick.net https://challenges.cloudflare.com https://sdk.monnify.com https://salesiq.zohopublic.com https://static.zohocdn.com 'sha256-dB9Acrj5IeIJJLGV/DH3AmvPP1+JdGMDxW7DJs7XhbU=' 'sha256-InFJmdCtlbAGExRjXbzMsYZrHDBSbrkrYsbvGpl1lwM='; script-src-attr 'unsafe-hashes' 'sha256-7dQwUgLau1NFCCGjfn9FsYptB6ZtWxJin6VohGIu20I='; style-src 'self' 'unsafe-inline' https://static.zohocdn.com; base-uri 'self'; form-action 'self' https://www.facebook.com; frame-ancestors 'none'; report-uri /csp-report; script-src 'self' 'sha256-InFJmdCtlbAGExRjXbzMsYZrHDBSbrkrYsbvGpl1lwM=' 1
default-src 'self'; script-src 'self' https://tag.goadopt.io https://www.googletagmanager.com https://www.google-analytics.com https://cdnjs.cloudflare.com https://cdn.cookielaw.org; style-src 'self' https://fonts.googleapis.com https://use.fontawesome.com; font-src 'self' https://fonts.gstatic.com https://use.fontawesome.com; img-src 'self' data: https:; connect-src 'self' https://www.google-analytics.com https://cdn.cookielaw.org; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; 1
default-src 'self'; script-src 'nonce-y6fDnUoHqtkjN3GRs0fenA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
font-src *.googleapis.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net 'self' data: *.yotpo.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com *.google.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com *.gstatic.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de https://firebasestorage.googleapis.com 'self' data: *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.googleapis.com d.dowclick.com *.gstatic.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com s7.addthis.com https://cdn.jsdelivr.net *.avada.io *.google.com unpkg.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline fonts.googleapis.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com https://fonts.bunny.net *.googleapis.com unpkg.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.googleapis.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com ekr.zdassets.com/ https://get.geojs.io *.avada.io *.google-analytics.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-1jskxl2GSv0Hls5sz_Or8g' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com id.dokobit.com id-sandbox.dokobit.com https://fonts.bunny.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self' *.maksekeskus.ee *.test.maksekeskus.ee 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://app.usercentrics.eu 'self' *.maksekeskus.ee *.test.maksekeskus.ee www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.dokobit.com *.google.lv *.openstreetmap.org https://maps.omnivasiunta.lt ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com magefan.com cm.magefan.com https://app.usercentrics.eu *.disqus.com https://img.youtube.com https://firebasestorage.googleapis.com *.maksekeskus.ee *.test.maksekeskus.ee www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.dokobit.com *.usercentrics.eu *.hotjar.com https://unpkg.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://www.googletagmanager.com https://api.usercentrics.eu https://id-sandbox.dokobit.com *.disqus.com *.avada.io *.shopify.com 'self' *.maksekeskus.ee *.test.maksekeskus.ee data: www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com downloads.mailchimp.com id.dokobit.com id-sandbox.dokobit.com *.googleapis.com https://fonts.bunny.net *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.dokobit.com *.doubleclick.net https://geocode.arcgis.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://api.usercentrics.eu https://id-sandbox.dokobit.com https://get.geojs.io *.avada.io 'self' *.maksekeskus.ee *.test.maksekeskus.ee www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src 'self' *.maksekeskus.ee *.test.maksekeskus.ee http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://widgets.trustedshops.com *.googleapis.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com *.weltpixel.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com *.sendcloud.sc *.jsdelivr.net *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com https://*.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https:/at19.net https://bdt9.net https://ds1.nl https://dt51.net https://dt61.net https://fr135.net https://glp8.net https://jdt8.net https://jf79.net https://hs82.net https://lt45.net https://mt74.net https://ndt5.net https://rkn3.net https://*.google.com https://*.googleapis.com https://*.googleusercontent.com https://www.mollie.com https://redchamps.com *.amazonaws.com *.hsforms.net *.hsforms.com 'self' data: *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://maps.googleapis.com https://player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js *.googleapis.com https://*.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com player.vimeo.com js.mollie.com *.sendcloud.sc *.jsdelivr.net *.hsforms.net *.hsforms.com *.gstatic.com *.trustpilot.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com assets.braintreegateway.com https://static.klaviyo.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com maxcdn.bootstrapcdn.com *.sendcloud.sc *.jsdelivr.net *.googleapis.com *.gstatic.com *.trustpilot.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.facebook.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://o482844.ingest.us.sentry.io/api/4511330374123520/security&sentry_key=d4bbc9bcf4bb64245e81e2a019a17811&sentry_release=1788939507&sentry_environment=production; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'nonce-d39121d8be853699e9399dba42bbe1a0'; script-src-elem 'self' 'nonce-d39121d8be853699e9399dba42bbe1a0'; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://www.gstatic.com; style-src-elem 'self' 'unsafe-inline' https://www.gstatic.com; style-src-attr 'unsafe-inline'; img-src 'self' data: blob: https://translate.google.com https://fonts.gstatic.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' ws: wss: https://translate.googleapis.com; media-src 'self' data:; object-src 'none'; base-uri 'self'; form-action 'self' http://allpayfinance.com https://allpayfinance.com https://www.allpayfinance.com http://localhost http://127.0.0.1; frame-ancestors 'self'; worker-src 'self' blob:; manifest-src 'self'; report-uri /csp-report 1
object-src 'none'; script-src 'nonce-5ZxO0JyGdFuz-1sgaAZpC4ga' 'strict-dynamic' http: https:; base-uri 'none'; 1
default-src 'self'; script-src 'nonce-xUAIUSKl2FrmU/lv1yJXaA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.tiendaforastero.cl *.hubspot.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com mageside.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.hs-scripts.com *.hs-banner.com *.hs-analytics.net *.usemessages.com *.hscollectedforms.net *.hsadspixel.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com https://static.klaviyo.com *.fontawesome.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.hubspot.com *.hubapi.com *.hscollectedforms.net *.hsadspixel.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self' https://*.fillout.com; script-src 'self' 'unsafe-inline' https://static.klaviyo.com https://*.klaviyo.com https://www.googletagmanager.com https://cdn.jsdelivr.net https://js.intercomcdn.com https://widget.intercom.io https://server.fillout.com https://*.fillout.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://*.klaviyo.com https://fonts.googleapis.com; img-src 'self' data: blob: https://images.unsplash.com https://*.s3.us-east-1.amazonaws.com https://*.public.blob.vercel-storage.com https://static.klaviyo.com https://*.klaviyo.com https://www.google-analytics.com https://www.googletagmanager.com https://*.intercomcdn.com https://static.intercomassets.com https://cdn.jsdelivr.net https://www.google.com https://*.gstatic.com; font-src 'self' data: https://cdn.jsdelivr.net https://*.intercomcdn.com https://fonts.gstatic.com; connect-src 'self' https://a.klaviyo.com https://*.klaviyo.com https://www.google-analytics.com https://*.analytics.google.com https://region1.google-analytics.com https://api-iam.intercom.io https://*.intercom.io wss://*.intercom.io https://*.fillout.com https://*.s3.us-east-1.amazonaws.com; frame-src 'self' https://*.intercom.io https://intercom-sheets.com https://*.fillout.com; media-src 'self' https://*.public.blob.vercel-storage.com; worker-src 'self' blob:; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-eval' https://cdn.jsdelivr.net https://unpkg.com https://www.googletagmanager.com https://static.cloudflareinsights.com https://www.gstatic.com 'nonce-b8kB76xBuwZzuUbUjHuN4R0qCQ8yUiCKoHyCaZa4'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://unpkg.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.google-analytics.com https://*.googletagmanager.com; frame-src 'self' https:; media-src 'self' https: blob:; worker-src 'self' blob:; form-action 'self'; object-src 'none'; base-uri 'self'; report-uri /csp-report; report-to csp-endpoint 1
script-src 'self' 'strict-dynamic' ; style-src 'self' ; img-src 'self' data: blob: ; font-src 'self' ; connect-src 'self' wss: ; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' ; frame-src 'self' ; 1
default-src 'self' https: data: blob:; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; media-src 'self' blob: https:; connect-src 'self' https: wss:; worker-src 'self' blob:; manifest-src 'self'; report-uri /api/security/csp-report 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' anjuss.com.br *.anjuss.com.br wake-components.fbitsstatic.net anjuss.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br *.ytimg.com *.anjuss.com.br *.hotjar.io *.hotjar.com *.shoptarget.com.br *.g.doubleclick.net *.google.com.br *.lomadee.com *.yourviews.com.br checkout.anjuss.com.br *.g2afse.com static.hotjar.com static.fbits.net koin-custom-conector-gateway.fbits.net payments.koin.com.br *.bithome-brasil.com.br plac.bithome-brasil.com.br gstatic.com *.cybba.solutions *.rtb123.com *.cybba.us *.amazon-adsystem.com *.adnxs.com *.stackadapt.com *.adsrvr.org *.licdn.com *.cloudfront.ne *.ads.linkedin.com *.cybbaview.com *.smct.io *.pinimg.com *.pinterest.com *.dsspn.com *.doubleclick.net *.reclameaqui.com.br d2rp1k1dldbai6.cloudfront.net cybba-bucket.s3.amazonaws.com d335luupugsy2.cloudfront.net d2d7do8qaecbru.cloudfront.net https://s3.amazonaws.com/raichu-beta/ cognito-identity.eu-west-1.amazonaws.com firehose.eu-west-1.amazonaws.com; frame-ancestors *.anjuss.com.br anjuss.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src *.google-analytics.com *.paypal.com *.googleadservices.com *.youtube.com *.vimeocdn.com *.cloudfront.net www.facebook.com www.google.rs *.facebook.net data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com i.ytimg.com p.typekit.net *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src *.google-analytics.com *.googletagmanager.com  *.paypal.com *.klaviyo.com *.vimeocdn.com *.youtube.com *.newrelic.com *.nr-data.net connect.facebook.net assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com tagmanager.google.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src static-tracking.klaviyo.com *.adobe.com fonts.googleapis.com assets.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src stats.g.doubleclick.net *.facebook.com dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https://app-pay.jp https://api.veritrans.co.jp https://api3.veritrans.co.jp https://o983003.ingest.sentry.io https://cognito-idp.ap-northeast-1.amazonaws.com https://cognito-identity.ap-northeast-1.amazonaws.com https://analytics.google.com 'unsafe-inline'; connect-src https://app-pay.jp https://analytics.google.com https://api.veritrans.co.jp https://api3.veritrans.co.jp https://o983003.ingest.sentry.io https://cognito-idp.ap-northeast-1.amazonaws.com https://cognito-identity.ap-northeast-1.amazonaws.com https://stats.g.doubleclick.net https://55altsx9ie.execute-api.ap-northeast-1.amazonaws.com; img-src https:; font-src https:; script-src https://app-pay.jp https://api.veritrans.co.jp https://api3.veritrans.co.jp https://o983003.ingest.sentry.io 'unsafe-inline' https://www.googletagmanager.com; report-uri https://55altsx9ie.execute-api.ap-northeast-1.amazonaws.com/dev/securityReport; report-to https://55altsx9ie.execute-api.ap-northeast-1.amazonaws.com/dev/securityReport 1
font-src *.fontawesome.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.googletagmanager.com/ www.paypalobjects.com https://sandbox.sequracdn.com https://live.sequracdn.com https://sandbox.sequrapi.com https://live.sequrapi.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ aquasistema.com scontent-iad3-2.cdninstagram.com *.cdninstagram.com maps.googleapis.com https://sandbox.sequracdn.com https://live.sequracdn.com https://sandbox.sequrapi.com https://live.sequrapi.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io pzes.magestio.es 'unsafe-inline' http://localhost:8080 http://localhost:8888 *.ddev.site *.findflow.shop maps.googleapis.com https://cdnjs.cloudflare.com https://sandbox.sequracdn.com https://live.sequracdn.com https://sandbox.sequrapi.com https://live.sequrapi.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com pzes.magestio.es http://localhost:8080 http://localhost:8888 *.ddev.site *.findflow.shop https://fonts.googleapis.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ video-iad3-2.cdninstagram.com *.cdninstagram.com maps.googleapis.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com http://stats.g.doubleclick.net/ https://region1.google-analytics.com https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io pzes.magestio.es www.google.com http://localhost:8080 http://localhost:8888 *.ddev.site *.findflow.shop maps.googleapis.com https://sandbox.sequracdn.com https://live.sequracdn.com https://sandbox.sequrapi.com https://live.sequrapi.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.bglobale.com *.global-e.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.certcapture.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * challenges.cloudflare.com *.bglobale.com *.global-e.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.certcapture.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.bglobale.com *.global-e.com maps.gstatic.com www.xtento.com cdn.xtento.com *.sharethis.com *.doubleclick.net www.kong.it *.googleapis.com www.google.ae www.google.as www.google.at www.google.be www.google.bg www.google.by www.google.ca www.google.ch www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.nz www.google.co.th www.google.co.ug www.google.co.uk www.google.co.vi www.google.co.za www.google.co.zw www.google.com.ar www.google.com.au www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.eg www.google.com.gh www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.mx www.google.com.my www.google.com.om www.google.com.pa www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.cz www.google.de www.google.dj www.google.dk www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gr www.google.gy www.google.hn www.google.hr www.google.hu www.google.ie www.google.is www.google.it www.google.li www.google.lt www.google.lv www.google.mu www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.sc www.google.se www.google.si www.google.sk *.castellarisrl.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.certcapture.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com challenges.cloudflare.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.bglobale.com *.global-e.com maps.googleapis.com www.xtento.com cdn.xtento.com *.sharethis.com *.hotjar.com *.googleapis.com kenect.com resource.kenect.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com assets.braintreegateway.com downloads.mailchimp.com *.bglobale.com *.global-e.com https://fonts.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.certcapture.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.sharethis.com *.doubleclick.net *.crwdcntrl.net stbuttons.click *.ltmsphrcl.net *.googleapis.com www.google.as www.google.at www.google.be www.google.by www.google.ca www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.nz www.google.co.th www.google.co.uk www.google.com.ar www.google.com.au www.google.com.br www.google.com.hk www.google.com.mx www.google.com.my www.google.com.pa www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.cz www.google.de www.google.dj www.google.es www.google.fi www.google.fr www.google.ge www.google.gr www.google.gy www.google.hn www.google.hr www.google.hu www.google.ie www.google.it www.google.li www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.ru www.google.sc www.google.se www.google.si www.google.sk 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://98827900-8df7-48df-8bab-e0358eaca440.sansec.watch/; report-to report-endpoint; 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data: https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.googleadservices.com/ https://verifi.podscribe.com https://t.co https://analytics.twitter.com; object-src 'none'; script-src 'strict-dynamic' 'self' https: 'unsafe-hashes' 'sha256-MhtPZXr7+LpJUY5qtMutB+qWfQtMaPccfe7QXtCcEYc=' 'nonce-T4UIc0bDPfH73rJyOgt7aQ=='; style-src 'self' https: 'unsafe-inline'; connect-src 'self' https: https://ad.doubleclick.net https://googleads.g.doubleclick.net https://www.googletagmanager.com https://*.google.com https://*.prommt.com wss://*.liveperson.net https://*.nr-data.net https://ipv4.podscribe.com/ https://analytics-ipv6.tiktokw.us/ 1
base-uri 'self';connect-src 'self' www.google-analytics.com region1.google-analytics.com https://accounts.google.com https://appleid.apple.com;default-src 'none';form-action 'self' https://sis.redsys.es/sis/realizarPago https://sis.redsys.es/sis/rest/trataPeticionREST;img-src 'self' https://gestor.artesiete.es/storage/ https://lh3.googleusercontent.com https://*.gstatic.com;media-src 'self';object-src 'none';script-src 'self' 'nonce-YPbzfRM8LotlfdUwnzTJ4DuzsD00z88U' 'unsafe-eval' https://unpkg.com/swiper/swiper-bundle.min.js http://unpkg.com/swiper@11.2.6/swiper-bundle.min.js https://www.googletagmanager.com/gtag/ https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js https://artesiete.es/js/app.js www.googletagmanager.com/gtag/js https://accounts.google.com/gsi/client https://appleid.cdn-apple.com;style-src 'self' 'nonce-YPbzfRM8LotlfdUwnzTJ4DuzsD00z88U' 'unsafe-inline' https://unpkg.com/swiper/swiper-bundle.min.css https://accounts.google.com/gsi/style;frame-src https://accounts.google.com https://appleid.apple.com;font-src 'self' data: 1
default-src 'self'; script-src 'nonce-d8cAkdMqlMTurHzvPdO57A==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://app.asksquid.ai https://app.factors.ai; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self' data: https:; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://app.asksquid.ai wss://app.asksquid.ai https://api.factors.ai; frame-src https://www.googletagmanager.com https://app.asksquid.ai; frame-ancestors 'self' 1
script-src 'self' 'unsafe-eval' 'strict-dynamic' 'report-sample' 'nonce-adbb44b7761e8cf1' ; script-src-attr 'report-sample'; worker-src 'self' blob:; report-to csp-endpoint; report-uri https://notify.oasgo.com/csp-report; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://ajax.googleapis.com https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://ab-crm.bi3x.org; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://ab-crm.bi3x.org; img-src 'self' data: https:; font-src 'self' data: https://www.gstatic.com; frame-src https://www.google.com https://ab-crm.bi3x.org https://maps.google.com; connect-src 'self' https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://ab-crm.bi3x.org; object-src 'none'; base-uri 'self' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: blob: https://braceaccess-media-prod.s3.amazonaws.com; media-src 'self' blob: https://braceaccess-media-prod.s3.amazonaws.com; connect-src 'self' https://braceaccess-media-prod.s3.amazonaws.com https://api.zipaddress.net https://*.ingest.sentry.io https://*.ingest.us.sentry.io https://*.sentry.io 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://pl30493745.effectivecpmnetwork.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://i.ytimg.com https://www.googletagmanager.com; font-src 'self'; frame-src https://www.youtube-nocookie.com; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com; base-uri 'self'; object-src 'none'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://challenges.cloudflare.com https://widget.intercom.io https://js.intercomcdn.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://cdn.sanity.io https://*.intercomcdn.com https://static.intercomassets.com; font-src 'self' https://fonts.intercomcdn.com; media-src 'self' https://js.intercomcdn.com; connect-src 'self' https://*.sanity.io https://api-eu.mixpanel.com https://*.intercom.io wss://*.intercom.io https://*.sentry.io https://challenges.cloudflare.com; frame-src https://challenges.cloudflare.com https://intercom-sheets.com; worker-src 'self' blob:; frame-ancestors 'none'; form-action 'self'; object-src 'none'; base-uri 'self'; report-uri https://o4504360534147072.ingest.us.sentry.io/api/4511982821572608/security/?sentry_key=00e0168742109c7c947b34893ec299a7; report-to csp 1
default-src https: 'self' data:;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdnjs.com https://cdnjs.cloudflare.com https://polyfill.io https://unpkg.com https://dev.visualwebsiteoptimizer.com https://www.googletagmanager.com https://ideo.containers.piwik.pro https://connect.facebook.net https://js-agent.newrelic.com https://cdn.jsdelivr.net https://www.google-analytics.com;style-src 'self' 'unsafe-inline' https://unpkg.com https://fonts.googleapis.com https://www.gstatic.com;font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com;frame-src 'self' https://*.scorecastbusiness.com https://scorecastbusiness.com https://*.amazonaws.com https://*.playable.com https://playable-agency.leadfamly.com https://player.vimeo.com https://smartsystems.ain.az https://ain.az;frame-ancestors 'self' https://*.scorecastbusiness.com https://scorecastbusiness.com;img-src 'self' 'unsafe-inline' data: blob: https://dev.visualwebsiteoptimizer.com https://cdn.amcharts.com https://translate.google.com https://fonts.gstatic.com https://www.google.bg https://www.googletagmanager.com https://katalog.motivationdirect.pl https://www.google.nl https://stats.g.doubleclick.net https://www.google.no https://www.google.de https://www.google.be https://www.google.ci https://www.google.hr https://www.google.at https://www.google.ba https://www.google.fi https://www.google.it https://www.google.ie https://www.google.co.uk https://www.google.ch https://www.google.co.in;worker-src 'self' blob:;report-uri https://bat2you.com/PublicApi/ContentSecurityPolicy/Report 1
object-src 'none';base-uri 'self';script-src 'nonce-32INP8rdSYcy5vGVW5tklg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-no5dYH1mxCV0kp-ZC41XQg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cash-f.squarecdn.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.sharethis.com platform.cloud-iq.com.au *.facebook.com *.adyen.com *.doubleclick.net *.bedbathntable.com.au *.criteo.com *.pinterest.com *.dotdigital-pages.com *.dotdigital.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.youtube.com www.youtube-nocookie.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.ftcdn.net *.behance.net * *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.sharethis.com *.googleapis.com dev.visualwebsiteoptimizer.com *.google.com *.facebook.com *.cloud-iq.com.au *.adyen.com *.afterpay.com *.linksynergy.com *.google.com.au *.bedbathntable.com.au bbnt-m2-image-library.s3-ap-southeast-2.amazonaws.com *.cdninstagram.com *.google.lk *.doubleclick.net *.bidswitch.net *.adnxs.com *.smartadserver.com *.taboola.com *.socdm.com *.criteo.com *.casalemedia.com *.dable.io *.adingo.jp *.stickyadstv.com *.360yield.com *.rlcdn.com *.media.net *.bing.com *.yieldmo.com *.aralego.com *.3lift.com *.clmbtech.com *.teads.tv *.smaato.net *.rubiconproject.com *.pubmatic.com *.outbrain.com *.aralego.net *.bluekai.com *.1rx.io *.contextweb.com *.unrulymedia.com px.ads.linkedin.com *.trackedlink.net *.ddlnk.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com t.zip.co static.zip.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.googletagmanager.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.sharethis.com *.googleapis.com *.gstatic.com *.searchspring.net *.athoscommerce.net applepay.cdn-apple.com dev.visualwebsiteoptimizer.com cdnjs.cloudflare.com bam-cell.nr-data.net platform.cloud-iq.com.au *.crazyegg.com *.facebook.net *.facebook.com *.rakuten.com googleads.g.doubleclick.net cdn.lr-ingest.io *.foursixty.com *.bedbathntable.com.au *.tiktok.com *.pinimg.com *.criteo.com *.pinterest.com *.freshworks.net *.freshworks.com *.abtasty.com snap.licdn.com *.clarity.ms *.stackadapt.com *.insightech.com foursixty.com *.zip.co player.vimeo.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com static.zip.co zip.co https://www.bedbathntable.co.nz 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.sharethis.com *.searchspring.net *.athoscommerce.net unpkg.com *.foursixty.com *.bedbathntable.com.au *.cloud-iq.com.au use.typekit.net p.typekit.net *.stackadapt.com foursixty.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com *.sharethis.com *.googleapis.com *.searchspring.net *.athoscommerce.net *.crazyegg.com googleads.g.doubleclick.net *.lr-ingest.io *.foursixty.com foursixty.com *.google-analytics.com *.doubleclick.net *.bedbathntable.com.au *.pinterest.com *.pangle-ads.com *.tiktok.com *.criteo.com *.freshworks.net *.freshworks.com *.attraqt.io *.abtasty.com px.ads.linkedin.com *.clarity.ms *.insightech.com *.stackadapt.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://vep-conference.hktdc.com; script-src 'self' 'unsafe-inline' https://vep-conference.hktdc.com https://fe-caas.hktdc.com https://my.hktdc.com https://home.hktdc.com https://accounts-res.hktdc.com https://portal.hktdc.com https://www.youtube.com https://hktdcad.engine.adglare.net https://tags.tiqcdn.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.captcha.qq.com https://code.jquery.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://vep-conference.hktdc.com https://fonts.googleapis.com https://portal.hktdc.com https://accounts-res.hktdc.com; img-src 'self' data:  https://vep-conference.hktdc.com https://metrics.hktdc.com https://info.hktdc.com https://portal.hktdc.com https://hktdcad.cdn.adglare.net https://collect.tealiumiq.com; font-src 'self' data: https://vep-conference.hktdc.com https://fonts.gstatic.com; connect-src 'self' https://vep-conference.hktdc.com https://api-general.hktdc.com https://uet.hktdc.com https://fe-caas.hktdc.com https://hktdcad.engine.adglare.net https://ssl.captcha.qq.com https://collect.tealiumiq.com https://dpm.demdex.net; frame-src 'self' https://vep-conference.hktdc.com https://hktdc.demdex.net https://match.eventdex.com https://www.googletagmanager.com https://ssl.captcha.qq.com; object-src 'none'; base-uri 'self'; form-action 'self' https://vep-conference.hktdc.com https://match.eventdex.com; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net *.googleapis.com *.gstatic.com *.fontawesome.com *.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.mercadolibre.com *.cookiebot.com *.googletagmanager.com https://docs.google.com www.youtube.com www.youtube-nocookie.com https://www.googletagmanager.com/ challenges.cloudflare.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar *.mercadolivre.com *.facebook.com *.googleadservices.com *.google-analytics.com *.google.com.br *.mercadopago.com.br *.beltnutrition.com.br https://*.clearsale.com.br *.ytimg.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com http://www.vimeo.com/ www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com https://rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com *.mlstatic.com *.mercadopago.com https://www.googleoptimize.com/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://consent.cookiebot.com/ http://www.google-analytics.com/ http://www.googleadservices.com/ http://www.paypal.com/ http://www.facebook.com/ https://js-agent.newrelic.com/ https://vfr-v3-production.sizebay.technology/ https://maps.google.com/ https://www.google.com/ *.cloudfront.net *.facebook.net *.sdk.mercadopago.com *.googletagmanager.com https://viacep.com.br/ https://rum.hlx.page/ https://*.clearsale.com.br https://*.clarity.ms https://*.tiktok.com *.avada.io challenges.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com assets.braintreegateway.com *.fontawesome.com *.jsdelivr.net/ *.cloudflare.com/ *.googleapis.com *.cloudfront.net *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.magento-datasolutions.com *.magento-ds.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com *.mercadopago.com *.mercadolibre.com https://www.google-analytics.com/ *.facebook.com https://viacep.com.br https://rum.hlx.page/ https://*.beltnutrition.com.br/ https://*.clearsale.com.br https://mpc2-prod-29-is5qnl632q-uc.a.run.app https://*.doubleclick.net/ https://*.tiktok.com https://*.google.com.br https://get.geojs.io *.avada.io *.gstatic.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.viacep.com.br 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-src 'self' www.youtube.com www.google.com js.playground.klarna.com js.klarna.com https://checkoutshopper-test.adyen.com https://pay.google.com https://wchat.freshchat.com return.4sellers.de *.webpush.freshchat.com ct.pinterest.com vercel.live *.sovendus.com *.adyen.com gum.criteo.com fledge.eu.criteo.com *.cnstrc.com cnstrc.com graphical-editor.kameleoon.com *.vimeo.com vimeo.com www.googletagmanager.com 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klarnacdn.net *.klevu.com *.ksearchnet.com maxcdn.bootstrapcdn.com *.cloudfront.net *.reviews.io *.reviews.co.uk data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.hotjar.com *.addthis.com www.google.co.uk www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.weltpixel.com *.dotdigital-pages.com *.dotdigital.com *.googletagmanager.com *.doubleclick.net *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * js.mollie.com *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.hotjar.com *.hotjar.io *.pinterest.com *.addthis.com app.termly.io www.google.co.uk www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.trackedlink.net *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ services.postcodeanywhere.co.uk *.klevu.com *.ksearchnet.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com flagpedia.net https://www.mollie.com https://redchamps.com *.cloudfront.net *.reviews.io *.reviews.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com script.hotjar.com static.hotjar.com assets.pinterest.com *.pinterest.com s7.addthis.com *.addthis.com app.termly.io www.google.co.uk www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net *.klarna.com *.klarnacdn.net x.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.addressy.com *.klarnaservices.com *.klevu.com *.ksearchnet.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.gstatic.com maps.googleapis.com js.mollie.com *.reviews.io *.reviews.co.uk https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.tagmanager.google.com *.googletagmanager.com https://static.klaviyo.com api.addressy.com *.klarnacdn.net *.klevu.com *.ksearchnet.com assets.braintreegateway.com maxcdn.bootstrapcdn.com *.gstatic.com *.cloudfront.net *.reviews.io *.reviews.co.uk https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com services.postcodeanywhere.co.uk *.hotjar.com *.hotjar.io *.addthis.com app.termly.io www.google.co.uk www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.addressy.com *.klarnaservices.com *.klarna.com *.klevu.com *.ksearchnet.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com www.gstatic.com maps.googleapis.com *.cloudfront.net *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'nonce-FZDfY6TvVxLZtLpGQobC3g==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://tile.openstreetmap.org https://tools.applemediaservices.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self'; frame-src https://challenges.cloudflare.com https://consultabancaria.bipay.cl; form-action 'self'; frame-ancestors 'self'; base-uri 'self'; object-src 'none' 1
font-src fonts.gstatic.com use.typekit.net fonts.googleapis.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net maps.googleapis.com maps.gstatic.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com assets.adobedtm.com commerce.adobe.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com *.magento-ds.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.fontawesome.com unsafe-inline 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.magento-datasolutions.com *.magento-ds.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com maxcdn.bootstrapcdn.com https://geowidget.easypack24.net *.gstatic.com 'self' data: fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com accounts.google.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com www.paypal.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.addthis.com secure.payu.com merch-prod.snd.payu.com https://geowidget-app.inpost.pl/ www.googletagmanager.com consentcdn.cookiebot.com td.doubleclick.net www.google.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.disqus.com static.payu.com maps.gstatic.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org 'self' data: *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com trustmate.io www.google.pl imgsct.cookiebot.com c.clarity.ms c.bing.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net secure.payu.com secure.snd.payu.com maps.googleapis.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.google.com *.gstatic.com *.googletagmanager.com tagmanager.google.com scripts.luigisbox.com trustmate.io dc.cux.io d3bo67muzbfgtl.cloudfront.net cdn.luigisbox.com consent.cookiebot.com consentcdn.cookiebot.com www.clarity.ms geowidget.inpost.pl www.google.com www.gstatic.com scripts.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech https://cdn.jsdelivr.net *.fontawesome.com maxcdn.bootstrapcdn.com https://geowidget.easypack24.net https://geowidget.inpost.pl *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com trustmate.io cdn.luigisbox.com d3bo67muzbfgtl.cloudfront.net fonts.googleapis.com geowidget.inpost.pl 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com https://maps.googleapis.com https://player.vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://scripts.luigisbox.tech https://cdn.luigisbox.tech https://live.luigisbox.tech https://api.luigisbox.tech secure.payu.com merch-prod.snd.payu.com *.easypack24.net *.inpost.pl *.openstreetmap.org t.elasticsuite.io *.google-analytics.com *.analytics.google.com *.googletagmanager.com region1.analytics.google.com live.luigisbox.com api.luigisbox.com api.edrone.me consentcdn.cookiebot.com x.clarity.ms maps.googleapis.com n.clarity.ms www.google.pl j.clarity.ms a.clarity.ms 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com www.google.pl x.clarity.ms www.google.com j.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://www.google.com https://googleads.g.doubleclick.net https://*.clarity.ms https://*.socdm.com https://static.cloudflareinsights.com https://www.youtube.com https://s.ytimg.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://adservice.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.googletagmanager.com https://*.clarity.ms https://*.socdm.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://googleads.g.doubleclick.net https://static.cloudflareinsights.com https://pagead2.googlesyndication.com https://www.google.com https://www.google.co.jp https://www.googleadservices.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.googletagmanager.com https://td.doubleclick.net https://ad.doubleclick.net https://*.googlesyndication.com https://*.socdm.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none'; upgrade-insecure-requests; report-uri https://bizpla.com/csp-report.php; report-to csp-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://squizlabs.github.io/HTML_CodeSniffer/build/HTMLCS.css; object-src data: 'unsafe-eval'; base-uri 'self'; connect-src 'self' https://ad.doubleclick.net https://www.googletagmanager.com https://www.google.com.co https://www.googleadservices.com https://cm.g.doubleclick.net https://cdn.navdmp.com https://usr.navdmp.com https://tag.navdmp.com https://www.google.com.co https://googleads.g.doubleclick.net https://web.bmm.com.co https://integraciones.bmm.com.co https://www.google.com https://maps.googleapis.com https://socialplugin.facebook.net https://www.bmm.com.co https://www.facebook.com https://www.google-analytics.com/ https://analytics.google.com https://web.bmm.com.co https://bmm-co-integration.modyo.be https://bmm.cdn.modyo.com/ https://stats.g.doubleclick.net; font-src 'self' https://bmm.cdn.modyo.com/ https://fonts.gstatic.com; frame-src 'self' https://www.googletagmanager.com/ https://www.facebook.com https://docs.google.com/ https://www.youtube.com/ https://bmm.cdn.modyo.com/ https://td.doubleclick.net/ https://www.google.com/ https://www.google.com.mx/; img-src 'self' data: https://www.googleadservices.com https://cm.g.doubleclick.net https://bmm.cdn.modyo.com https://squizlabs.github.io https://www.googletagmanager.com https://ssl.google-analytics.com https://maps.gstatic.com/ https://maps.googleapis.com/ https://www.google.cl https://www.facebook.com https://www.bmm.com.co https://www.google.com.co https://www.google.com https://www.google.com.mx https://d3jwfft71-idss.cloudfront.net/ https://d3jwfft71-idss.cloudfront.net/uploads/79186edc-91a6-4cf4-99b4-78624313b15c/original/logo_pse_2x.png; manifest-src 'self'; media-src 'self' https://bmm-mercadeo.github.io/BMM https://bmm.cdn.modyo.com; worker-src 'self'; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://connect.facebook.net https://www.googletagmanager.com https://maps.googleapis.com https://analytics.google.com https://www.youtube.com/iframe_api https://www.youtube.com/ https://bmm.cdn.modyo.com/ https://googleads.g.doubleclick.net/ https://www.google.com/ https://www.gstatic.com/ https://web.bmm.com.co/ https://analytics.tiktok.com https://tag.navdmp.com https://cdn.navdmp.com https://usr.navdmp.com 1
default-src 'self'; script-src 'nonce-uDxiyqo8zzEybFvTb7ZdNA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-wAGTMclbZFMC1sqWgl9Pgw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-IK1btvyMrFpc15h/3xEKEw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-EVEyFlOzSd11TXTqU/3aCg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-2kN2QdjAziV5UFNXCH/8mg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-jHlfu/KDe3GgIKvOJ+td+A==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-YsTAPUr6nH0UI8Y/2syApg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-biLmCVXBwswYmSH++OrRMA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-XaXscwcI6bshKmCn1373fg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-XbSO8ix0BqstBKLuSR9wBg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-wd5e7D4wD+ZzdwcR5uYhOg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-81kHtal00DQ2i46ZZEB61Q==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-VtiJGwACnfubfC/+e4fe4A==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-jqbZ/MfCm5ftTuX6I3Bhuw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-cLTROUj3WFd4L0lu6vihIQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-KWZVPvvShgpAkPxvweasDw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-jjVfipdu4N8+QhTyplF7YA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
font-src bonafont.com.mx *.fontawesome.com fonts.gstatic.com *.criteo.net *.criteo.com script.hotjar.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com facebook.com *.facebook.net *.germany-2.evergage.com eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ us.creativecdn.com api.retargetly.com resources-rt.idx.lat facebook.com *.facebook.net static.criteo.net cdn.evergage.com *.germany-2.evergage.com cdn.evgnet.com danonesa.germany-2.evergage.com eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com *.mercadolibre.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com c.sharethis.mgr.consensu.org *.sharethis.com *.lpsnmedia.net *.hotjar.com *.criteo.com danonebonafont.api.useinsider.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io bonafont.com.mx blob: i.liadm.com *.liadm.com x.bidswitch.net cm.g.doubleclick.net ib.adnxs.com r.casalemedia.com ad.360yield.com contextual.media.net sync.outbrain.com pixel.rubiconproject.com match.sharethrough.com rtb-csync.smartadserver.com sync-t1.taboola.com criteo-sync.teads.tv eb2.3lift.com ups.analytics.yahoo.com e1.emxdgt.com tg.socdm.com visitor.omnitagjs.com matching.ivitrack.com exchange.mediavine.com c.bing.com simage2.pubmatic.com trends.revcontent.com s.ad.smaato.net criteo-partners.tremorhub.com ade.clmbtech.com sync-criteo.ads.yieldmo.com tags.bluekai.com e.dlx.addthis.com *.stickyadstv.com cdn.evergage.com google.com.br www.google.com.br idsync.rlcdn.com l.sharethis.com cure.adnxs.com cm.adgrx.com script.hotjar.com bam.nr-data.net secure.adnxs.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.germany-2.evergage.com cdn.evgnet.com danonesa.germany-2.evergage.com *.facebook.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar *.mercadolivre.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com platform-cdn.sharethis.com maps.gstatic.com cdn2.hubspot.net *.facebook.com *.igodigital.com *.google.com.mx *.criteo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.googletagmanager.com www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ bonafont.com.mx cdn.gbqofs.com *.newrelic.com js-agent.newrelic.com bam.nr-data.net io.narrative.io idsync.rlcdn.com emv3dsauth1.secureacs.com cdn.jsdelivr.net google.com.br facebook.com analytics.google.com *.googletagmanager.com cdn.evergage.com *.germany-2.evergage.com cdn.evgnet.com danonesa.germany-2.evergage.com *.facebook.net eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com *.gateway.mastercard.com *.avada.io *.mlstatic.com *.mercadopago.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com *.sharethis.com *.liveperson.net *.lpsnmedia.net *.googleapis.com *.igodigital.com *.hotjar.com danonebonafont.api.useinsider.com *.criteo.net *.criteo.com api.retargetly.com resources-rt.idx.lat 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com bonafont.com.mx cdn.jsdelivr.net cdn.evergage.com *.germany-2.evergage.com cdn.evgnet.com danonesa.germany-2.evergage.com *.facebook.net *.fontawesome.com unsafe-inline fonts.googleapis.com *.criteo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com bonafont.com.mx blob: idsync.rlcdn.com danonesa.germany-2.evergage.com *.germany-2.evergage.com *.facebook.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com bonafont.com.mx danonesa.germany-2.evergage.com rt.idx.lat report.danone.gbqofs.io io.narrative.io idsync.rlcdn.com emv3dsauth1.secureacs.com bam.nr-data.net google.com.br facebook.com *.facebook.net l.sharethis.com content.hotjar.io *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.germany-2.evergage.com https://get.geojs.io *.avada.io *.mercadopago.com *.mercadolibre.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com www.googleapis.com *.hotjar.com stats.g.doubleclick.net wss://*.hotjar.com *.criteo.com hit.api.useinsider.com surveystats.hotjar.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'nonce-uLTp9ybRqZd0TNW1UvnTaQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'nonce-vYirdJ5w547gJzK4'; img-src 'self' data: www.bosbadputten.nl bosbadputten.nl https://placehold.co https://picsum.photos https://*.picsum.photos https://*.cookiebot.com https://*.cookiebot.eu https://*.usercentrics.eu https://cdn-cookieyes.com https://googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat https://google.com https://pagead2.googlesyndication.com https://*.fls.doubleclick.net https://ad.doubleclick.net https://www.googleadservices.com https://ade.googlesyndication.com https://*.youtube.com https://*.ytimg.com https://static.pay.nl https://betalen.rabobank.nl https://epayments-support.ingenico.com https://support.legacy.worldline-solutions.com https://*.vimeocdn.com https://tr.snapchat.com https://www.facebook.com https://connect.facebook.net https://*.fbcdn.net https://*.clarity.ms https://bat.bing.com https://bat.bing.net https://*.ads.linkedin.com https://*.hotjar.com https://futy-io.s3.eu-west-2.amazonaws.com https://*.global.siteimproveanalytics.io https://tile.openstreetmap.org https://cdn-img.guestplan.com https://phosphor.utils.elfsightcdn.com https://api.taggrs.io https://www.gravatar.com https://*.sharethis.com; media-src 'self' www.bosbadputten.nl bosbadputten.nl; script-src 'report-sample' 'strict-dynamic' 'nonce-vYirdJ5w547gJzK4' 'sha256-/JqT3SQfawRcv/BIHPThkBvs0OEvtFFmqPF/lYI/Cxo=' 'sha384-Fy6S3B9q64WdZWQUiU+q4/2Lc9npb8tCaSX9FK7E8HnRr0Jz8D6OP9dO5Vg3Q9ct' 'unsafe-inline' https: http: 'unsafe-eval'; style-src-attr 'report-sample' 'unsafe-inline'; style-src 'report-sample' 'self' 'unsafe-inline' https://cdn.jsdelivr.net/npm/cookieconsent@3/build/cookieconsent.min.css https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com https://*.fontawesome.com https://cdn.jsdelivr.net/npm/@fortawesome/ https://*.typekit.net https://*.hotjar.com https://v.kcmg.nl https://*.mopinion.com; font-src 'self' data: https://fonts.gstatic.com https://*.fontawesome.com https://cdn.jsdelivr.net/npm/@fortawesome/ https://*.typekit.net https://*.hotjar.com https://v.kcmg.nl https://*.mopinion.com https://cdn.faceworks.nl; connect-src 'self' https://socket.sera.nl:18889 wss://socket.sera.nl:18889 https://socket.sera.nl:443 wss://socket.sera.nl:443 https://consentcdn.cookiebot.com https://consentcdn.cookiebot.eu https://consent.cookiebot.com https://consent.cookiebot.eu https://*.cookieyes.com https://cdn-cookieyes.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat https://google.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://*.fontawesome.com https://*.snapchat.com https://www.facebook.com https://graph.facebook.com ws://localhost:12387 https://*.clarity.ms https://bat.bing.com https://bat.bing.net https://*.ads.linkedin.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://viewerapi.kcmg.nl https://api.kcmg.nl https://api.widget.futy.io https://sentry.sera.nl https://etender-connect.com https://*.elfsight.com https://9292.nl https://inacademia.org/ https://op.srv-test.inacademia.org https://*.mopinion.com https://www.gravatar.com https://*.sharethis.com; frame-src 'self' www.bosbadputten.nl bosbadputten.nl https://consentcdn.cookiebot.com https://consentcdn.cookiebot.eu https://www.googletagmanager.com https://td.doubleclick.net https://*.fls.doubleclick.net https://www.google.com/recaptcha/ https://maps.google.com https://www.google.com/maps/ https://*.youtube.com https://myaccount.google.com https://player.vimeo.com https://tr.snapchat.com https://www.facebook.com https://www.kijk360.nl https://9292.nl; manifest-src 'self' www.bosbadputten.nl bosbadputten.nl; base-uri 'none'; report-to csp-endpoint 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' boutiquedassi.com.br *.boutiquedassi.com.br wake-components.fbitsstatic.net boutiquedassi.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br api.mercadopago.com secure.mlstatic.com gstatic.com *.boutiquedassi.com.br googleads.g.doubleclick.net *.googleadservices.com *.moip.com.br *.g.doubleclick.net connect.facebook.net *.egoi.site cdn-te.e-goi.com *.mailbiz.one *.jsdelivr.net d3eq1zq78ux3cv.cloudfront.net *.google.com.br *.googleapis.com google.com.py google.it google.co.uk google.cl *.google.pt *.com.mx *.co.jp *.bonifiq.com.br widget.bonifiq.com.br *.conectiva.io *.sunset.systems *.cartstack.com.br *.cartstack.com *.performa.ai *.cupom.social *.conectiva.app conectiva.io app.conectiva.io vm.conectiva.io conectiva.app api.performa.ai valid.performa.ai cartstack.com.br app.cartstack.com.br api.cartstack.com.br sunset.systems api.sunset.systems cupom.social app.cupom.social cdn.performa.ai dxyxft75r9rwr.cloudfront.net https://s3.amazonaws.com/raichu-beta/ dg2f9wmqg3.map.azionedge.net; frame-ancestors *.boutiquedassi.com.br boutiquedassi.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
font-src static.runconverge.com *.facebook.net *.facebook.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.google.com *.pinimg.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.runconverge.com *.facebook.net *.facebook.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.google.com *.pinimg.com ssl.gstatic.com www.gstatic.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com static.breiwebshop.nl static.yarnies.com *.runconverge.com *.facebook.net *.facebook.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.google.com *.pinimg.com ssl.gstatic.com www.gstatic.com js.mollie.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.google.com *.google.nl *.google.co.uk *.doubleclick.net *.bing.com *.bing.net *.runconverge.com *.mailchimp.com static.breiwebshop.nl static.yarnies.com static.runconverge.com *.facebook.net *.facebook.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.pinimg.com ssl.gstatic.com www.gstatic.com https://www.mollie.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ apis.google.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.doubleclick.net *.googlesyndication.com *.bing.com *.bing.net *.runconverge.com *.svgator.com *.beslist.nl chimpstatic.com *.mailchimp.com static.breiwebshop.nl static.yarnies.com *.facebook.net *.facebook.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.google.com *.pinimg.com ssl.gstatic.com www.gstatic.com js.mollie.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com static.runconverge.com *.facebook.net *.facebook.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.google.com *.pinimg.com ssl.gstatic.com www.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com *.google.com *.google.nl *.doubleclick.net *.googlesyndication.com *.bing.com *.bing.net *.runconverge.com *.beslist.nl *.intuit.com *.mailchimp.com static.breiwebshop.nl static.yarnies.com *.facebook.net *.facebook.com *.googletagmanager.com *.analytics.google.com *.pinimg.com ssl.gstatic.com www.gstatic.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' https: *.brokerapp.com.br *.google.com *.cloudflare.com *.mapbox.com *.googleapis.com *.cloudflare.com *.jqueryscript.net *.iporto.com.br *.brokercrm.com.br *.googlesyndication.com *.googletagmanager.com *.facebook.com *.facebook.net 'unsafe-inline' 'unsafe-eval'; img-src * data: blob:; connect-src 'self' https: *.googlesyndication.com *.facebook.com *.facebook.net 'unsafe-inline' 'unsafe-eval' blob: data:; worker-src data: 'unsafe-eval' 'unsafe-inline' blob: 1
script-src 'self' http://java.sun.com/jsp/jstl/core http://java.sun.com/jsp/jstl/fmt http://tiles.apache.org/tags-tiles 'nonce-l9GhvA9LnYUsatDOoJRZ1w==' 'wasm-unsafe-eval'; frame-src 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; media-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://oapi.map.naver.com https://*.pstatic.net https://challenges.cloudflare.com https://appleid.cdn-apple.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.building0.com https://cdn.building0.com https://*.naver.com https://*.naver.net https://*.navercorp.com https://maps.apigw.ntruss.com https://*.vworld.kr https://api.vworld.kr https://challenges.cloudflare.com https://*.google-analytics.com https://*.analytics.google.com; frame-src 'self' https://challenges.cloudflare.com https://appleid.apple.com; form-action 'self' https://appleid.apple.com 1
script-src 'self' 'unsafe-eval' blob: https://prod-bk-web.pt.rbi.tools/en/static/js/vendor.5dc447bb.js https://prod-bk-web.pt.rbi.tools/en/static/js/main.862831f4.js https://prod-bk-web.pt.rbi.tools/en/static/js/runtime.04678df4.js https://*.mparticle.com https://cdn.cookielaw.org https://www.googletagmanager.com https://*.onetrust.com https://static.ads-twitter.com https://platform.twitter.com https://www.google-analytics.com https://connect.facebook.net https://secure.quantserve.com https://dynamic.criteo.com https://rules.quantcount.com https://cdn.branch.io https://app.link https://*.cdn4.forter.com https://dlthst9q2beh8.cloudfront.net https://sslwidget.criteo.com https://widget.eu.criteo.com https://pagead2.googlesyndication.com https://cdn.amplitude.com https://accounts.google.com https://appleid.cdn-apple.com https://analytics.tiktok.com https://c.amazon-adsystem.com https://js.adsrvr.org https://maps.googleapis.com https://googleads.g.doubleclick.net https://static.zdassets.com https://bat.bing.com https://cdn-st.adsmurai.com https://www.youtube.com https://player.vimeo.com https://prod-bk-web.pt.rbi.tools/en/static/js/main.3e0682c0.js https://prod-bk-web.pt.rbi.tools/en/static/js/runtime.93494e97.js; object-src 'none'; base-uri 'none'; worker-src 'self' blob:; report-uri https://intl-csp-service.rbictg.com/report 1
default-src 'self'; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; frame-ancestors 'self'; base-uri 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://maps.googleapis.com https://maps.gstatic.com https://*.googletagmanager.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com; font-src 'self' data: https://cdnjs.cloudflare.com; img-src 'self' data: blob: https://*.googleapis.com https://*.gstatic.com https://*.ggpht.com https://*.google-analytics.com https://*.googletagmanager.com; connect-src 'self' https://api.bvdgroup.com https://bvdgroupapi.bvdpetro.com https://maps.googleapis.com https://routes.googleapis.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com; frame-src https://www.youtube-nocookie.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none' 1
default-src 'self'; script-src 'nonce-WaE2+rAtSVQaj7730qFBNQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-T3fbxu6GPKqzPMUDldcK1g==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-LzpYmhM6bCmPUr51rIlOEg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.certcapture.com ByramBaby.pxf.io https://www.ojrq.net https://logs-01.loggly.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.certcapture.com https://utt.impactcdn.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.fontawesome.com assets.braintreegateway.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.certcapture.com ByramBaby.pxf.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' cabralmotor.com.br *.cabralmotor.com.br wake-components.fbitsstatic.net cabralmotor.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br gstatic.com *.googleapis.com *.cabralmotor.com.br *.google.com.br *.g.doubleclick.net *.clarity.ms *.leadster.com.br; frame-ancestors *.cabralmotor.com.br cabralmotor.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline'; img-src 'self' https: data:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com; font-src 'self' data:; connect-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /csp-report.php 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google-analytics.com https://ajax.googleapis.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://www.google-analytics.com; font-src 'self'; frame-ancestors 'none'; base-uri 'self'; object-src 'none'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://embed.tawk.to https://*.tawk.to https://checkout.razorpay.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.tawk.to; img-src 'self' data: blob: https:; font-src 'self' data: blob: https://fonts.gstatic.com https://*.tawk.to; connect-src 'self' data: blob: https://*.supabase.co wss://*.supabase.co https://*.amazonaws.com https://api.sarvam.ai https://fonts.googleapis.com https://fonts.gstatic.com https://*.tawk.to wss://*.tawk.to https://*.posthog.com https://*.ingest.sentry.io https://*.ingest.us.sentry.io https://api.razorpay.com https://lumberjack.razorpay.com; media-src 'self' data: blob: https://*.amazonaws.com; worker-src 'self' blob:; frame-src https://*.tawk.to https://api.razorpay.com https://checkout.razorpay.com; object-src 'none'; base-uri 'self'; frame-ancestors 'none' 1
default-src 'self'; script-src  'self' https:; style-src   'self' https:       'unsafe-inline'; font-src    'self' https: data: 'unsafe-inline'; img-src     'self' https: data:; connect-src 'self' https:; frame-src   'self' https://*.vipleiloes.com.br https://*.provedor.space https://streaming01.vplpar.com:5443; media-src   'self' https:; form-action 'self' https:; base-uri    'self'; frame-ancestors 'self' https://*.vipleiloes.com.br https://streaming01.vplpar.com:5443; object-src  'none'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://maps.googleapis.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://appleid.cdn-apple.com https://accounts.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://maps.googleapis.com https://places.googleapis.com https://www.google.com https://www.gstatic.com https://accounts.google.com wss://www.carrelibertin.com; frame-src 'self' https://www.google.com https://www.googletagmanager.com https://td.doubleclick.net https://appleid.apple.com https://accounts.google.com; media-src 'self' blob: https://video.jeuxlibertin.com https://www.envidel.fr https://www.allocam.com https://www.visioparty.com https://www.visiofrance.com; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://tpeweb.paybox.com https://preprod-tpeweb.paybox.com https://www1.paybox.com https://appleid.apple.com https://accounts.google.com; report-uri /ajax_jserrors/reportcsp 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' casabergan.com.br *.casabergan.com.br wake-components.fbitsstatic.net casabergan.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br *.g.doubleclick.net *.googleadservices.com *.google.com.br stats.g.doubleclick.net a.omappapi.com clarity.ms api.omappapi.com service.yourviews.com.br googleads.g.doubleclick.net connect.facebook.net staticfiles.yviews.com.br *.yourviews.com.br *.yviews.com.br *.lightwidget.com cdn.lightwidget.com *.clarity.ms td.doubleclick.net *.doubleclick.net casabergan.fbitsstatic.net youtube.com *.fbitsstatic.net pub-gateway.fbits.net *.comupload.uploadcare.com *.lojaconfiavel.com service2.yourviews.com.br service.yviews.com.br upload.uploadcare.com properties z.omappapi.com *.jivosite.com server-side-tagging-wvnqi32bba-uc.a.run.app bq-scripts.s3.amazonaws.com *.vimeo.com *.goadopt.io *.bonifiq.com.br *.hotjar.com *.mailclick.me *.youtube.com *.properties *.google.ca translate.googleapis.com *.googleapis.com *.google.no google.no google.ca google.com.py *.com.py google.com.au google.be google.bs google.pt google.ro google.com.uy google.ci google.de google.com.ar *.google.be translate-pa.googleapis.com google.com.br googleadservices.com *.google.bs *.casabergan.com.br vimeo.com tagmanager.events tag.goadopt.io *.konfidency.com.br reviews.konfidency.com.br *.lomadee.com secure.lomadee.com *.googlesyndication.com pagead2.googlesyndication.com localhost:12387 gstatic.com static.fbits.net scripts.fbits.net code.jquery.com wss://vi-ya-8.jivosite.com wss://node-ya-9.jivosite.com *.streamshop.com.br assets.streamshop.com.br *.liveshop.com.br *.hj.contentsquare.net *.contentsquare.net t.contentsquare.net casabergan.liveshop.com.br s3.amazonaws.com api.reclameaqui.com.br api.edrone.me d3bo67muzbfgtl.cloudfront.net *.edrone.me *.widde.io cdn.widde.io api-admin.widde.io videos.widde.io *.mailbiz.one *.jsdelivr.net *.ingest.us.sentry.io casabergan.app.n8n.cloud *.pinterest.com casa2.casabergan.com.br s.pinimg.com *.solomon.com.br webanalytics-listener-685646918301.us-east1.run.app webanalytics.solomon.com.br d3eq1zq78ux3cv.cloudfront.net dxyxft75r9rwr.cloudfront.net pixel-events-se6wof3usq-ue.a.run.app bzrcdn.openai.com bzr.openai.com c.clarity.ms apis.google.com i.vimeocdn.com gibxbsonxmtufsvtjeaq.supabase.co supabase.co; frame-ancestors *.casabergan.com.br casabergan.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' casamattos.com.br *.casamattos.com.br wake-components.fbitsstatic.net casamattos.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br blog.casamattos.com.br d335luupugsy2.cloudfront.net imgs.ebit.com.br *.ebit.com.br *.criteo.com dynamic.criteo.com *.getblue.io event.getblue.io *.criteo.net static.criteo.net ad.doubleclick.net googleads.g.doubleclick.net www.googleadservices.com googleadservices.com www.google.com.br google.com.br; frame-ancestors *.casamattos.com.br casamattos.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://ssl.p.jwpcdn.com https://cdn.jwplayer.com https://content.jwplatform.com https://prd.jwpltx.com https://*.jwpsrv.com https://*.jwplayer.com https://*.jwpcdn.com https://www.googletagmanager.com https://www.google-analytics.com; script-src-elem 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://ssl.p.jwpcdn.com https://cdn.jwplayer.com https://content.jwplatform.com https://prd.jwpltx.com https://*.jwpsrv.com https://*.jwplayer.com https://*.jwpcdn.com https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: blob:; media-src 'self' blob: https:; worker-src 'self' blob:; child-src 'self' blob:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://cat3.asuka-vod.site; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://scripts.cleverwebserver.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://*.googlesyndication.com https://*.doubleclick.net https://*.google.com https://apis.google.com https://*.adtrafficquality.google https://*.vidoomy.com https://imasdk.googleapis.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; frame-src 'self' https://publicidad.catamarcaya.com.ar https://www.facebook.com https://*.googlesyndication.com https://*.doubleclick.net https://www.youtube.com https://www.meteored.com.ar https://apis.google.com https://accounts.google.com https://*.adtrafficquality.google https://www.google.com https://*.vidoomy.com https://*.pubmatic.com https://*.springserve.com; connect-src 'self' https:; font-src 'self' data:; object-src 'none'; base-uri 'self' 1
default-src 'self';script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;font-src 'self' https://fonts.gstatic.com data:;img-src 'self' data: blob: https:;media-src 'self' blob:;connect-src 'self' https: wss: ws:;frame-src 'self' https://www.google.com;frame-ancestors 'none';object-src 'none';base-uri 'self';form-action 'self';script-src-attr 'none';upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://tagmanager.google.com https://www.google-analytics.com https://connect.facebook.net https://snap.licdn.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://*.google-analytics.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://www.facebook.com https://px.ads.linkedin.com https://*.sentry.io https://accounts.google.com https://login.microsoftonline.com; img-src 'self' data: blob: https://www.google-analytics.com https://www.googletagmanager.com https://www.facebook.com https://px.ads.linkedin.com https://apistorage.cec.edu.ec https://i0.wp.com https://images.unsplash.com https://cec-content.nyc3.cdn.digitaloceanspaces.com https://pb-cec-prod.nyc3.cdn.digitaloceanspaces.com https://lms.cec.edu.ec; frame-src https://pay.payphonetodoesposible.com https://payphone.app https://docs.payphone.app https://api.payphone.app https://www.youtube.com https://www.googletagmanager.com; font-src 'self' https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; media-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://code.jquery.com https://www.google.com https://www.gstatic.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; connect-src 'self' https://static.cloudflareinsights.com; media-src 'self'; frame-src 'self' https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com; base-uri 'self'; form-action 'self'; object-src 'none'; upgrade-insecure-requests; report-uri /csp-report.php 1
connect-src *.analytics.google.com *.google-analytics.com *.googleapis.com *.matomo.cloud *.openstreetmap.org *.stats.g.doubleclick.net *.tolkie.nl *.typekit.net *.umbraco.org analytics.google.com cdnjs.cloudflare.com consent.cookiebot.com embed.email-provider matomoembraceklantportaal.azurewebsites.net matomoembracewin.azurewebsites.net 'self';img-src *.analytics.google.com *.blob.core.windows.net *.cookiebot.com *.google-analytics.com *.googleapis.com *.gstatic.com *.openstreetmap.org *.tolkie.nl *.typekit.net *.umbraco.org api.maptiler.com cdn.jsdelivr.net data: openlayers.org pbs.twimg.com placehold.it 'self' tileserver.embracecloud.nl translate.googleapis.com umbraco.tv umbracoportalsp.azureedge.net umbracoportalsp.blob.core.windows.net umbracowebportalsprod.azureedge.net umbracowebportalsprod.blob.core.windows.net www.google.com www.googletagmanager.com www.gravatar.com www.openlayers.org;style-src *.cloudflare.com *.googleapis.com *.readspeaker.com *.tolkie.nl *.typekit.net openlayers.org 'self' 'unsafe-inline' www.gstatic.com www.openlayers.org;frame-ancestors *.embracecloud.nl 'self';script-src *.google-analytics.com *.googleapis.com *.openstreetmap.org *.readspeaker.com *.typekit.net ajax.aspnetcdn.com centrada.ucsnet.nl code.jquery.com openlayers.org 'self' translate.google.com 'unsafe-eval' 'unsafe-inline' www.googletagmanager.com www.openlayers.org;default-src *.googleapis.com *.gstatic.com *.tolkie.nl *.vimeocdn.com *.youtube.com player.vimeo.com secure.ogone.com 'self' www.openstreetmap.org;font-src *.gstatic.com *.tolkie.nl *.typekit.net cdn.faceworks.nl cdnjs.cloudflare.com data: 'self';report-uri /cspreport 1
default-src 'self'; connect-src 'self' https://api.ansa.my https://rmpayment.cermatmadani.com; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; script-src 'self'; frame-ancestors 'self'; base-uri 'self'; object-src 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://pagead2.googlesyndication.com https://www.googletagmanager.com https://static.cloudflareinsights.com https://ep2.adtrafficquality.google; script-src-elem 'self' 'unsafe-inline' https://pagead2.googlesyndication.com https://www.googletagmanager.com https://static.cloudflareinsights.com https://ep2.adtrafficquality.google; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://pagead2.googlesyndication.com https://ep1.adtrafficquality.google https://cloudflareinsights.com https://www.google-analytics.com; frame-src 'self' https://googleads.g.doubleclick.net https://*.doubleclick.net https://ep2.adtrafficquality.google https://www.google.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; require-trusted-types-for 'script'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://static.cloudflareinsights.com https://connect.facebook.net https://sc-static.net https://tr.snapchat.com https://analytics.tiktok.com https://static.ads-twitter.com https://*.doubleclick.net https://maps.googleapis.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://webteamcdnep-ctg2hcb5hybcbwgv.a02.azurefd.net https://amgsawebteam.blob.core.windows.net https://www.google.com https://www.google.com.sa https://t.co https://analytics.twitter.com https://maps.googleapis.com https://maps.gstatic.com https://www.facebook.com https://www.googletagmanager.com; media-src 'self' https://webteamcdnep-ctg2hcb5hybcbwgv.a02.azurefd.net https://amgsawebteam.blob.core.windows.net; font-src 'self' data:; connect-src 'self' https://*.google-analytics.com https://www.google.com https://mpc-prod-23-s6uit34pua-ue.a.run.app https://*.doubleclick.net https://*.snapchat.com https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us https://maps.googleapis.com; frame-src https://www.google.com https://*.snapchat.com https://www.facebook.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; 1
font-src www.paypalobjects.com *.gstatic.com *.unpkg.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors tatrapayplus.sk moja.tatrabanka.sk *.tatrapayplus.sk *.tatrabanka.sk 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.packeta.com api.tatrabanka.sk *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://images.unsplash.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.unpkg.com https://firebasestorage.googleapis.com https://tile.openstreetmap.org https://balikomat.sps-sro.sk https://i.alza.cz https://cdn.alza.cz *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com *.packeta.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.unpkg.com *.avada.io *.shopify.com *.mailchimp.com *.cloudflareinsights.com *.chantallonline.com moja.tatrabanka.sk https://unpkg.com https://balikomat.sps-sro.sk/ *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com downloads.mailchimp.com *.unpkg.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://unpkg.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com https://player.vimeo.com *.packeta.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.unpkg.com https://get.geojs.io *.avada.io *.chantallonline.com https://unpkg.com https://balikomat.sps-sro.sk https://nominatim.openstreetmap.org *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-tP1fHQLAZqFvYM/Hi9Nbrg==' 'sha256-L9NtTqBLxf1z3sIza7z/JTtm01m91a8xVl07p4WTMYw=' https://pagead2.googlesyndication.com https://www.googletagservices.com https://adservice.google.com https://adservice.google.fr https://static.getclicky.com https://cache.consentframework.com https://choices.consentframework.com https://fundingchoicesmessages.google.com; style-src 'self' 'unsafe-inline' https://fonts.bunny.net https://unpkg.com https://fonts.googleapis.com; font-src 'self' data: https://fonts.bunny.net https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https://pagead2.googlesyndication.com https://*.google.com https://*.googlesyndication.com https://*.googleadservices.com https://*.adtrafficquality.google https://*.getclicky.com https://*.tile.openstreetmap.org https://fcm.googleapis.com https://*.consentframework.com https://fundingchoicesmessages.google.com; frame-src 'self' https://forms.lecomparateurassurance.com https://www.youtube.com https://player.vimeo.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://*.googlesyndication.com https://*.adtrafficquality.google https://www.google.com https://fundingchoicesmessages.google.com; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self' 1
font-src https://www.google.com *.force.com https://fonts.gstatic.com/ 'self' https://www.gstatic.com *.salesforce.com blob: data:; report-to sfdc-csp-ep; report-uri https://mdccs.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D8z0000008aLS&networkId=0DM8z00000000TE&type=communities 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://challenges.cloudflare.com cdnjs.cloudflare.com ssl.google-analytics.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com *.jquery.com *.facebook.net *.facebook.com *.bootstrapcdn.com *.google.com *.gstatic.com *.clarity.ms *.hotjar.com oss.maxcdn.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com https://fonts.googleapis.com *.cloudflare.com *.fontawesome.com *.gstatic.com maxcdn.bootstrapcdn.com *.hotjar.com; font-src 'self' data: fonts.gstatic.com https://fonts.gstatic.com cdnjs.cloudflare.com *.hotjar.com use.fontawesome.com maxcdn.bootstrapcdn.com; img-src 'self' data: blob: *.googletagmanager.com https://*.googletagmanager.com *.gstatic.com c.clarity.ms *.hotjar.com https://www.google-analytics.com https://*.google-analytics.com; connect-src 'self' https://challenges.cloudflare.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com; child-src https://facebook.com; frame-src 'self' www.facebook.com www.youtube.com www.google.com https://challenges.cloudflare.com; object-src 'none'; base-uri 'self'; 1
default-src https: data:; script-src https:; style-src https: 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://sdk.twilio.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https://flagcdn.com; connect-src 'self' https: wss:; media-src 'self' blob: https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none' 1
default-src 'self' https://*.clarity.ms https://c.bing.com 'unsafe-inline';         script-src 'self' 'unsafe-inline' 'unsafe-eval' 'nonce-1746633616965' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://*.clarity.ms https://www.youtube.com https://www.googleadservices.com https://ad.doubleclick.net https://googleads.g.doubleclick.net https://lett.2buycdn.com;         script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://*.clarity.ms https://www.youtube.com https://www.googleadservices.com https://ad.doubleclick.net https://googleads.g.doubleclick.net https://lett.2buycdn.com;         style-src 'self' 'unsafe-inline' 'nonce-1746633616965' https://use.typekit.net https://p.typekit.net;         style-src-elem 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net;         style-src-attr 'unsafe-inline';         font-src 'self' https://use.typekit.net https://p.typekit.net;         img-src 'self' data: blob: https://www.google-analytics.com https://www.facebook.com https://ad.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://www.google.com.br https://*.clarity.ms;         connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://www.google.com https://www.google.com.br https://ad.doubleclick.net https://stats.g.doubleclick.net https://www.googleadservices.com https://connect.facebook.net https://www.facebook.com https://*.clarity.ms;         frame-src 'self' https://www.youtube.com https://player.vimeo.com https://www.googletagmanager.com https://www.google.com https://6689030.fls.doubleclick.net https://td.doubleclick.net;         frame-ancestors 'self';         object-src 'none';         base-uri 'self';         form-action 'self';         upgrade-insecure-requests;         report-uri https://www.claybom.com.br/server/csp-report.php 1
default-src 'self'; script-src 'self' 'nonce-68PIl2T1fwfbu+yQwWh4Ow==' 'unsafe-inline' 'unsafe-eval' https://assets.calendly.com https://cse.google.com https://platform.twitter.com https://cdn.segment.com https://www.googletagmanager.com https://www.google-analytics.com https://client.crisp.chat; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://client.crisp.chat https://www.google.com; img-src 'self' data: https: https://storeclindata.blob.core.windows.net *.clinicea.com clinicea.com *.curofic.com curofic.com; font-src 'self' data: https://fonts.gstatic.com https://client.crisp.chat; connect-src 'self' https://api.clinicea.com https://api.curofic.com https://wapcloudclinapifailover-staging.azurewebsites.net https://wapcloudclinstaging-api.azurewebsites.net https://api.segment.io https://www.google-analytics.com https://analytics.google.com *.analytics.google.com https://www.googletagmanager.com https://www.google.com https://www.google.co.in https://www.googleadservices.com https://ad.doubleclick.net https://stats.g.doubleclick.net https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://calendly.com https://client.crisp.chat wss://client.relay.crisp.chat https://*.crisp.chat *.clinicea.com clinicea.com *.curofic.com curofic.com; frame-src 'self' https://status.clinicea.com https://www.googletagmanager.com https://calendly.com https://platform.twitter.com https://syndication.twitter.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google; worker-src 'self' blob:; frame-ancestors 'self' *.clinicea.com clinicea.com *.curofic.com curofic.com; object-src 'none'; base-uri 'self'; form-action 'self' *.clinicea.com clinicea.com *.curofic.com curofic.com; report-uri https://0xdkk1mz.uriports.com/reports/report; 1
font-src *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.iubenda.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.iubenda.com magefan.com cm.magefan.com *.alothemes.com *.magepow.com https://www.mollie.com maps.gstatic.com maps.google.com *.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.iubenda.com *.alothemes.com *.magepow.com js.mollie.com *.googleapis.com maps.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.google.com *.gstatic.com https://*.ttwstatic.com https://*.tiktok.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com *.googleapis.com https://*.ttwstatic.com https://*.tiktok.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.iubenda.com *.alothemes.com *.magepow.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.google-analytics.com https://*.ttwstatic.com https://*.tiktok.com https://mssdk-i18n.tiktok.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' data:; script-src 'self' 'nonce-d7354c433548c6d3d022571809c4f092' www.googletagmanager.com; script-src-elem 'self' 'nonce-d7354c433548c6d3d022571809c4f092' maps.google.com maps.googleapis.com www.googletagmanager.com www.google-analytics.com cdnjs.cloudflare.com static.cloudflareinsights.com ajax.cloudflare.com cdn.jsdelivr.net d3js.org cdn2.woxo.tech client.crisp.chat; style-src 'self' 'unsafe-inline' fonts.googleapis.com cdn.jsdelivr.net client.crisp.chat; img-src 'self' data: www.gravatar.com maps.googleapis.com maps.google.com maps.gstatic.com www.google-analytics.com img.youtube.com *.coced.co image.crisp.chat client.crisp.chat; font-src 'self' data: fonts.gstatic.com cdn.jsdelivr.net client.crisp.chat; connect-src * www.google-analytics.com; media-src *; object-src 'self'; frame-ancestors 'self'; form-action 'self'; frame-src 'self' www.youtube.com maps.google.com widgets.woxo.tech; block-all-mixed-content; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://www.gstatic.com https://apis.google.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com; frame-src 'self' https://www.google.com https://www.youtube.com; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net/npm/mathjax@2.7.8/ https://www.google.com/recaptcha/ https://www.youtube.com https://vimeo.com https://www.instagram.com; connect-src 'self' blob:; script-src-elem 'self' 'unsafe-inline' https://www.youtube.com https://cdn.jsdelivr.net/npm/mathjax@2.7.8/ https://www.google.com/recaptcha/ https://vimeo.com https://www.instagram.com; frame-src 'self' https://www.youtube.com https://view.genial.ly https://www.canva.com https://player.vimeo.com https://www.instagram.com https://es.educaplay.com https://www.educaplay.com https://prezi.com https://h5p.org; media-src 'self' https://www.youtube.com  ; style-src * data: blob: 'unsafe-inline'; style-src-attr * data: blob: 'unsafe-inline'; style-src-elem * data: blob: 'unsafe-inline'; font-src * data: blob: about: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline';  worker-src data: blob: 'unsafe-inline'; report-uri https://aprendemos.comfenalcoantioquia.com/local/csp/collector.php?uid=0&cid=1 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' construmarques.com.br *.construmarques.com.br wake-components.fbitsstatic.net construmarques.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br *.egoi.site egoi.site *.e-goi.com *.blob.core.windows.net *.boletoflex.com samuraiexpertsstorage.blob.core.windows.net boletoflexhom.azurewebsites.net boletoflex.azurewebsites.net *.bflx.com.br analytics.google.com *.g.doubleclick.net *.googleadservices.com *.com.au service.smarthint.co *.google.com.br *.googleapis.com *.google.de *.google.pt *.google.fr *.com.py *.co.jp azurewebsites.net static.hotjar.com static.fbits.net koin-custom-conector-gateway.fbits.net payments.koin.com.br *.mailbiz.one *.jsdelivr.net; frame-ancestors *.construmarques.com.br construmarques.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
object-src 'none';base-uri 'self';script-src 'nonce-HmWb2KsNbSNtBpc5UkXdeA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://*.clarity.ms c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google.com.co *.google.com *.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com https://www.googletagmanager.com https://*.clarity.ms *.bam.nr-data.net https://bam.nr-data.net https://h.online-metrix.net/ *.online-metrix.net https://js-agent.newrelic.com/ https://maps.googleapis.com/ https://stats.g.doubleclick.net/ *.pingdom.net widgets.pau.zone www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yappy.cloud *.yappycloud.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.rum-static.pingdom.net https://www.google-analytics.com/ *.googletagmanager.com *.googleadservices.com *.connect.facebook.net *.stats.g.doubleclick.net *.rum-collector-2.pingdom.net *.amazonaws.com https://maps.googleapis.com https://www.googletagmanager.com www.clarity.ms https://www.clarity.ms https://*.clarity.ms *.js-agent.newrelic.com *.bam.nr-data.net https://bam.nr-data.net *.onesignal.com https://onesignal.com/ https://h.online-metrix.net/ *.online-metrix.net https://js-agent.newrelic.com/ https://bam.nr-data.net/ https://*.cardinalcommerce.com/ *.pingdom.net widgets.pau.zone js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.googleapis.com *.yappy.cloud *.yappycloud.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com https://static.klaviyo.com *.fontawesome.com *.cloudflare.com https://fonts.googleapis.com https://*.clarity.ms assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.rum-static.pingdom.net *.static.klaviyo.com *.stats.g.doubleclick.net *.connect.facebook.net *.rum-collector-2.pingdom.net https://www.googletagmanager.com www.clarity.ms https://*.clarity.ms *.bam.nr-data.net https://bam.nr-data.net https://h.online-metrix.net/ *.online-metrix.net https://js-agent.newrelic.com/ https://maps.googleapis.com/ https://stats.g.doubleclick.net/ *.pingdom.net *.smallshi.com:1442/ *.smallshi.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com *.googleapis.com *.bgeneral.cloud *.demdex.net *.yappycloud.com *.yappy.cloud 'self' 'unsafe-inline'; child-src https://*.clarity.ms assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.rum-static.pingdom.net *.connect.facebook.net *.stats.g.doubleclick.net *.rum-collector-2.pingdom.net https://*.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval'; base-uri https://*.clarity.ms 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://visitor.r20.constantcontact.com; img-src 'self' data: https://seal-central-westernma.bbb.org https://imgssl.constantcontact.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'report-sample' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://ajax.googleapis.com; style-src 'self' 'unsafe-inline' 'report-sample'; font-src 'self' data:; frame-src 'self' https://www.google.com https://www.gstatic.com; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://www.google.com https://www.gstatic.com; report-uri https://csp.threatview.app/report; report-to threatview 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' https://connect.facebook.net https://umami.practis.pe https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https:; media-src 'self' blob: https:; frame-src 'self' blob: https://player.vimeo.com; connect-src 'self' blob: https://umami.practis.pe https://connect.facebook.net https://www.facebook.com https://*.craptica.com https://cloudflareinsights.com; manifest-src 'self' 1
default-src 'self'; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://connect.facebook.net https://www.facebook.com 'unsafe-inline'; connect-src 'self' https://www.google.com https://www.google.com.uy https://www.googletagmanager.com https://analytics.google.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://www.googleadservices.com https://www.facebook.com https://ca-b9cba0339e9f4d8694919b7aae7b83dd.ecs.us-east-1.on.aws; img-src 'self' data: https://www.google.com https://www.google.com.uy https://www.facebook.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline'; font-src 'self' data:; frame-src 'self' https://www.facebook.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none' 1
base-uri 'none'; font-src 'self' https: data:; form-action 'self'; frame-ancestors 'self'; img-src 'self' data: https:; object-src 'none'; script-src-attr 'none'; style-src 'self' https: 'unsafe-inline'; script-src 'self' 'strict-dynamic' 'unsafe-eval' 'nonce-ceEx9BaksNxuLr3Iq7xuVLVv' https://www.googletagmanager.com; upgrade-insecure-requests; default-src 'self'; frame-src 'self' https://optimus-web.stage.ecofin.io https://*.onfido.com; connect-src 'self' https://cms.creditprime.md https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://connect.facebook.net https://www.facebook.com https://*.onfido.com https://optimus-web.stage.ecofin.io wss://optimus-web.stage.ecofin.io https://api.maestra.io https://websdk-cdn.ekyc.europarc.md https://mobileapi-staging.e-kyc.europarc.md https://mapi.ekyc.europarc.md https://ai.creditprime.md https://z.clarity.ms https://consent.cookie-script.com; 1
default-src 'self' csx.okta.com logon.csx.com *.oktacdn.com; connect-src 'self' csx.okta.com csx-admin.okta.com logon.csx.com *.oktacdn.com *.mixpanel.com *.mapbox.com csx.kerberos.okta.com csx.mtls.okta.com *.authenticatorlocalprod.com:8769 http://localhost:8769 http://127.0.0.1:8769 *.authenticatorlocalprod.com:65111 http://localhost:65111 http://127.0.0.1:65111 *.authenticatorlocalprod.com:65121 http://localhost:65121 http://127.0.0.1:65121 *.authenticatorlocalprod.com:65131 http://localhost:65131 http://127.0.0.1:65131 *.authenticatorlocalprod.com:65141 http://localhost:65141 http://127.0.0.1:65141 *.authenticatorlocalprod.com:65151 http://localhost:65151 http://127.0.0.1:65151 https://oinmanager.okta.com data: logon.shipcsx.com *.ingest.sentry.io https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://cdn.jsdelivr.net/sm/; script-src 'unsafe-inline' 'unsafe-eval' 'self' 'report-sample' csx.okta.com logon.csx.com *.oktacdn.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://cdn.jsdelivr.net/gh/altcha-org/altcha/dist/altcha.min.js https://cdn.jsdelivr.net/gh/altcha-org/altcha@2.3.0/dist/altcha.min.js; style-src 'unsafe-inline' 'self' 'report-sample' csx.okta.com logon.csx.com *.oktacdn.com; frame-src 'self' csx.okta.com csx-admin.okta.com logon.csx.com login.okta.com *.vidyard.com com-okta-authenticator: https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ api-7d96e6a9.duosecurity.com; img-src 'self' csx.okta.com logon.csx.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: blob:; font-src 'self' csx.okta.com logon.csx.com data: *.oktacdn.com fonts.gstatic.com; worker-src 'self' blob:; frame-ancestors 'self' https://csxcrewlife.com https://accounts.diligentoneplatform.com https://accounts.highbond.com https://sts1.csx.com 1
object-src 'none';base-uri 'self';script-src 'nonce-1qZilO6X1JKJvSH871gwlw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' *.incomit.dk;manifest-src 'self' *.incomit.dk;script-src 'self' *.incomit.dk;frame-src 'self' *.incomit.dk;object-src 'self' *.incomit.dk;media-src 'self' *.incomit.dk;child-src 'self' *.incomit.dk blob:;connect-src 'self' *.incomit.dk;frame-ancestors 'none';img-src 'self' *.incomit.dk;script-src-elem 'self' *.incomit.dk;script-src-attr 'self' *.incomit.dk;font-src 'self' *.incomit.dk https://fonts.gstatic.com ;style-src 'self' *.incomit.dk 'unsafe-inline' ;style-src-attr 'self' *.incomit.dk 'unsafe-inline'; 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' daju.com.br *.daju.com.br wake-components.fbitsstatic.net daju.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br *.reclameaqui.com.br *.googleadservices.com static.hotjar.com script.hotjar.com imgs.ebit.com.br stats.g.doubleclick.net googleads.g.doubleclick.net vc.hotjar.io daju.fbitsstatic.net *.ebit.com.br google.com.uy google.it translate.googleapis.com google.com.br *.fbitsstatic.net *.hotjar.io *.google.com.br googleadservices.com connect.facebook.net wss://ws.hotjar.com content.hotjar.io metrics.hotjar.io ct.pinterest.com *.pinterest.com s.pinimg.com *.pinimg.com *.g.doubleclick.net *.googleapis.com google.com.tr *.com.tr *.co.id google.co.id google.de *.google.de google.se *.google.pt google.pt google.co.uk *.google.cl google.cl translate-pa.googleapis.com google.co.in *.co.in *.google.nl google.nl google.ca *.google.ae google.ae google.com.ar *.com.ar *.google.ca *.co.uk accounts.google.com *.com.uy *.google.es google.es google.ie *.google.ie facebook.com.x.b6b226c70cf6c04a3c0b1370600a461e86eb.9270ee44.id.opendns.com *.com.x.b6b226c70cf6c04a3c0b1370600a461e86eb.9270ee44.id.opendns.com *.com.x.218224e50829d0495009ec90c8ea5c9dabf5.9270ee44.id.opendns.com facebook.com.x.218224e50829d0495009ec90c8ea5c9dabf5.9270ee44.id.opendns.com g.clarity.ms *.clarity.ms b.clarity.ms clarity.ms wake-commerce-scripts.omni.chat *.unpkg.com https://s3.amazonaws.com/raichu-beta/; frame-ancestors *.daju.com.br daju.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://fundingchoicesmessages.google.com https://www.googletagservices.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https: ; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://fundingchoicesmessages.google.com https://tpc.googlesyndication.com https://www.google.com; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; 1
default-src 'self' blob: wss: data: https: 'report-sample'; block-all-mixed-content; script-src 'self' 'unsafe-eval' 'unsafe-inline' blob: data: https: 'report-sample'; style-src 'self' 'unsafe-inline' data: https: 'report-sample'; report-uri /nelmio/csp/report 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self' https://checkout.paystack.com https://*.paystack.com; script-src 'self' 'nonce-NGRhMzg4OGEtMGZkNS00MjY4LTgyYzAtZjRkZTlmYjc2YjM2' 'strict-dynamic'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://backend.databosshub.com https://backend.databosshub.org https://api.paystack.co wss: ws:; frame-src 'self' https://checkout.paystack.com https://*.paystack.com; worker-src 'self' blob:; media-src 'self'; upgrade-insecure-requests 1
font-src maxcdn.bootstrapcdn.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ js.mollie.com *.cookiebot.com *.kiyoh.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://www.mollie.com *.zendesk.com *.zdassets.com *.cookiebot.com *.facebook.com *.google.nl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com js.mollie.com *.zendesk.com *.zdassets.com *.cookiebot.com *.dwin1.com *.hotjar.com *.facebook.net *.roeyecdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com maxcdn.bootstrapcdn.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.zendesk.com *.zdassets.com *.cookiebot.com *.doubleclick.net *.analytics.google.com *.facebook.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://shop.dejongmarinelife.nl/; report-to report-endpoint; 1
font-src *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com *.yotpo.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mercadolibre.com *.weltpixel.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar *.mercadolivre.com *.gstatic.com *.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com s7.addthis.com *.googleapis.com *.google.com *.gstatic.com *.avada.io *.mlstatic.com *.mercadopago.com https://www.googletagmanager.com tagmanager.google.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com tagmanager.google.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com ekr.zdassets.com/ http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io *.mercadopago.com *.mercadolibre.com https://www.google-analytics.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; img-src 'self' data: blob:; font-src 'self' https://fonts.bunny.net; style-src 'self' 'unsafe-inline' https://fonts.bunny.net; script-src 'self' 'unsafe-inline' 'unsafe-eval'; connect-src 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net https://geowidget.easypack24.net 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * secure.payu.com merch-prod.snd.payu.com https://geowidget-app.inpost.pl/ https://sandbox-easy-geowidget.easypack24.net/ *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com static.payu.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.hsforms.net *.hsforms.com 'self' data: www.facebook.com/ bat.bing.net region1.analytics.google.com www.google.pl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.avada.io js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com secure.payu.com secure.snd.payu.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.hsforms.net *.hsforms.com *.gstatic.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com mail.desportivo.pl recostream.com trustmate.io 'sha256-gP1oNVTXBLfgTvNe/Fqkv6tcF4UVivtUXBKTYUUjkmc=' 'sha256-xrzx3VAUiE9YjZB6FTwbudERC18Hn8TWBp/5cZ5mu4Q=' 'sha256-QqMxYirdvmGWDghmc28HatqqDMWBMZF4Bo05rxgzHA4=' 'sha256-M1gyCA1OxlRXKeam1PtXmXNrwxUiPS2no8eJafmPHcw=' 'sha256-VauVwPyzKQJVB4JO0GY2KyPY7+3Ms6SIioUcusfJKdw=' 'sha256-ftxLHMNQKDsafHI5+QkFdcTvZj3AKuTMgt+LdIR9muc=' 'sha256-9hYTzaA9DDOQTiC1QkHH2mwKOp/n6xeB7aNM4KNAbK4=' 'sha256-sFjNEEgXewbvYtfdtF0q220nc3MRABC/ee3WKnw7cJo=' 'sha256-wgKgZXfnlNUfpqsC0ftJiX13R1Ypa5fbk64p7Q3jX3Y=' 'sha256-65DEwAH4V2XNW7nTnVZxmS/4cNFkWPXrtMLKVB6CXlg=' 'sha256-Gq0ymyi115HXafhBJHpN6BpOMqu/OsnGFQtTfad1soc=' 'sha256-ndJGwLDQahNctVNA6j6wqNGGNk3v5Ar2YX0PqXcUlyU=' 'sha256-07Pd3rfUurk1QYw9viTNB1wyxLuYRII41GW5cNzPIuQ=' 'sha256-l1dZUePoutyb8m22eKsbL+Ak2Ppw02qEm3ltY3E61BE=' an.gr-wcon.com us-an.gr-cdn.com 'sha256-R3ElzeGsi4VM1mSrEGi52r9WCpo6Hj1lmJVCcWIxa3g=' 'sha256-FZo0+9k2Upqwve84C5aShQkutPerAOMMlHWxdSbRFSw=' connect.facebook.net bat.bing.com 'sha256-H30t1+h5cSjM5hvPb2jlOZpTe8pxaMu9ES2nZkhkZlc=' 'sha256-+R/CMLea10rdFcdJCRvDjf9kPFvf88n37QVjmYMkWbo=' 'sha256-3bzWVxQE32IZQKH9eh8KzyHuhXOlMrboDVVBRd0fWTU=' *.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com https://geowidget.easypack24.net https://geowidget.inpost.pl *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com trustmate.io 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://maps.googleapis.com https://player.vimeo.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com secure.payu.com merch-prod.snd.payu.com *.easypack24.net *.inpost.pl *.openstreetmap.org t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.klarnaservices.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.packeta.com stream.cloud.witbee.com j.clarity.ms google.pl *.analytics.google.com consentcdn.cookiebot.com googleads.g.doubleclick.net static.payu.com *.facebook.net *.facebook.com app2.recostream.com ga2.getresponse.com/ bam.nr-data.net clk.leadexpert.pl www.google.com pixel.wp.pl popups1-show.getresponse.com ts.getresponse.pl popups1-s.getresponse.com pagead2.googlesyndication.com metrics.desportivo.pl metrics.desportivo.cz metrics.desportivo.de *.desportivo.sk *.desportivo.ro *.bing.net *.clarity.ms 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
report-uri /csp/report/;base-uri 'self';default-src 'self';script-src 'self' 'unsafe-inline' https: 'nonce-uPkaeUkYaJicyw' 'strict-dynamic';frame-src 'self' https://subscription-management.paddle.com https://buy.paddle.com https://newassets.hcaptcha.com;style-src 'self' 'unsafe-inline' https://cdn.paddle.com/;img-src 'self' https://cdn.paddle.com/ blob: data:;object-src 'none';connect-src 'self' https://plausible.io/ wss://deva.guru ws://deva.guru; 1
default-src 'self'; script-src 'nonce-XKkpFawZLuNwZMHOVUiMiA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-CbdRioxvqw70BPOLIuFKRQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-zcfzhQKzjl+9nDd35n5r/Q==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-9c2+zAkArV6EsrJPwdGiaQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-RboI07BlzA8HYa9tpwONjQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://connect.facebook.net https://www.googletagmanager.com https://www.google-analytics.com https://kit.fontawesome.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://ka-f.fontawesome.com; img-src 'self' data: https://www.facebook.com https://www.google-analytics.com https://www.googletagmanager.com https://stats.g.doubleclick.net; connect-src 'self' https://connect.facebook.net https://www.facebook.com https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com; frame-src 'self' https://www.facebook.com https://www.googletagmanager.com https://td.doubleclick.net; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /csp-report 1
object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; frame-src td.doubleclick.net/ https://lockerplugin.sameday.ro https://www.googletagmanager.com/ fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://plumrocket.com *.weltpixel.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; frame-ancestors unsafe-inline www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; connect-src www.google-analytics.com https://stats.g.doubleclick.net/j/ https://www.google.com/ https://googleads.g.doubleclick.net/ https://web.facebook.com/ pagead2.googlesyndication.com/pagead/buyside_topics/set/ region1.analytics.google.com/g/ https://stats.g.doubleclick.net/ dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io t.elasticsuite.io *.google-analytics.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.facebook.net 'self' 'unsafe-inline'; img-src data: www.google.bg/pagead/ www.google.com/pagead/ www.facebook.com/tr/ maps.googleapis.com www.google.bg/ads/ga-audiences www.google.com/ads/ga-audiences assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io maps.gstatic.com *.gstatic.com *.googleapis.com https://images.unsplash.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ 'self' data: *.facebook.com data: 'self' 'unsafe-inline'; style-src maxcdn.bootstrapcdn.com fonts.googleapis.com https://cdn.sameday.ro *.adobe.com downloads.mailchimp.com https://static.klaviyo.com *.fontawesome.com https://fonts.googleapis.com *.googleapis.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com tagmanager.google.com 'self' 'unsafe-inline'; font-src maxcdn.bootstrapcdn.com fonts.gstatic.com googleapis.com fonts.googleapis.com *.googleapis.com *.gstatic.com data: *.fontawesome.com https://fonts.gstatic.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; script-src connect.facebook.com connect.facebook.net facebook.com googleads.g.doubleclick.net www.google-analytics.com www.google.com/pagead/ www.google.bg/pagead/ www.facebook.com/tr/ maps.googleapis.com ajax.cloudflare.com/cdn-cgi/scripts/ ssets.adobedtm.com secure.authorize.net test.authorize.net js.braintreegateway.com bimg.abv.bg/GDPR/GDPR.js dmp.adwise.bg chimpstatic.com cdn.onesignal.com/sdks/OneSignalSDK.js static.zdassets.com/ekr/asset_composer.js v2.zopim.com/ cdn.onesignal.com/ onesignal.com/ https://cdn.sameday.ro http://www.facebook.com/tr/ static.klaviyo.com fast.a.klaviyo.com static-tracking.klaviyo.com a.klaviyo.com telemetrics.klaviyo.com assets.adobedtm.com *.adobe.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com www.facebook.com graph.facebook.com downloads.mailchimp.com *.list-manage.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.google.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; form-action https://3dsgate.borica.bg/cgi-bin/cgi_link geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://plumrocket.com *.facebook.com 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-DAoVnJoMOR4HLNKa-jnpTw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-Pjj9J-ZTH8Qk1J-Qqq20HQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
report-uri https://www.dovetailhome.com/api/reporting/;  report-to csp-endpoint; 1
img-src 'self' data: https://cdn.goftino.com  https://fonts.gstatic.com  https://translate.google.com  https://www.googletagmanager.com  https://www.mayoclinic.org  https://lh3.googleusercontent.com  https://s3.goftino.com  https://images.rxlist.com  https://www.google-analytics.com  https://elmobadan.ir  blob:  https://images.medicinenet.com  https://really-simple-ssl.com  https://s2.goftino.com  https://encrypted-tbn0.gstatic.com  https://api.themeisle.com  https://www.google.com  https://woocommerce.com  https://torob.com  https://cdn.zhaket.com  https://pos.baidu.com  https://api.wpclever.net  https://www.gstatic.com  https://pd.w.org  https://notificationx.com  https://duckduckgo.com  https://drdarousaz.ir  https://images.profileengine.com  http://www.stackoverflow.com  https://www.stackoverflow.com  https://mc.yandex.ru  https://embed-ssl.wistia.com  https://cdn.yektanet.com  https://tasvir-t.yektanet.com  https://tasvir-r.yektanet.com  https://tasvir.yektanet.com  https://dkstatics-public.digikala.com  https://cdn.lfunl.com  https://static.cdn.asset.filimo.com  https://tasvir-s.yektanet.com  https://t.cdn.sfstr.com  https://cdn.plnst.ir  https://plus.sabavision.com  https://ua.yektanet.com  https://perfmatters.io  http://drdarousaz.ir  https://woodmart.xtemos.com  https://assets.elementor.com  https://bahmankhah.com  https://addtrolly.com  https://media.rtlcdn.com  https://files.rtl-theme.com  https://drsoleimanifar.com  https://lingo4030.com  https://content-marketing.rtlcdn.com  https://secure.gravatar.com https://ts.w.org https://s.w.org https://ps.w.org; default-src 'self'; script-src 'self' 'unsafe-inline' blob:  data:  https://cdn.goftino.com  https://www.goftino.com  https://drdarousaz.ir  https://www.googletagmanager.com  https://gc.kis.v2.scr.kaspersky-labs.com  https://me.kis.v2.scr.kaspersky-labs.com  https://www.pagespeed-mod.com  https://www.google-analytics.com  https://ff.kis.v2.scr.kaspersky-labs.com  https://cdn.immereeako.info  https://s3.scriptcdn.net  https://connect.facebook.net  https://infimv.com  https://apis.google.com  https://translate.google.com  https://translate.googleapis.com  https://translate-pa.googleapis.com  https://gc.kes.v2.scr.kaspersky-labs.com  https://3001.scriptcdn.net  asset  https://infirc.com  https://fvpvpnextension.com  https://unpkg.com  https://cdnjs.cloudflare.com  https://cdn.datatables.net  https://www.google.com  https://infird.com  https://s3.amazonaws.com  https://mstat.acestream.net  https://cct.google  https://fast.wistia.com  https://beacon-v2.helpscout.net  https://api.nimblecapture.com  https://cdn.yektanet.com  https://native-scripts.yektanet.com  https://cdn.ravenjs.com  https://emojikeyboardforchrome.com  https://cdn.alsgp0.fds.api.mi-img.com  https://s.skimresources.com  https://com.lge.browser  https://www.gstatic.com  https://ajax.googleapis.com  https://maps.google.com  https://ff.kes.v2.scr.kaspersky-labs.com  'unsafe-eval'; script-src-elem 'self' 'unsafe-inline' blob:  data:  https://cdn.goftino.com  https://www.goftino.com  https://drdarousaz.ir  https://www.googletagmanager.com  https://gc.kis.v2.scr.kaspersky-labs.com  https://me.kis.v2.scr.kaspersky-labs.com  https://www.pagespeed-mod.com  https://www.google-analytics.com  https://ff.kis.v2.scr.kaspersky-labs.com  https://cdn.immereeako.info  https://s3.scriptcdn.net  https://connect.facebook.net  https://infimv.com  https://apis.google.com  https://translate.google.com  https://translate.googleapis.com  https://translate-pa.googleapis.com  https://gc.kes.v2.scr.kaspersky-labs.com  https://3001.scriptcdn.net  asset  https://infirc.com  https://fvpvpnextension.com  https://unpkg.com  https://cdnjs.cloudflare.com  https://cdn.datatables.net  https://www.google.com  https://infird.com  https://s3.amazonaws.com  https://mstat.acestream.net  https://cct.google  https://fast.wistia.com  https://beacon-v2.helpscout.net  https://api.nimblecapture.com  https://cdn.yektanet.com  https://native-scripts.yektanet.com  https://cdn.ravenjs.com  https://emojikeyboardforchrome.com  https://cdn.alsgp0.fds.api.mi-img.com  https://s.skimresources.com  https://www.gstatic.com  https://ajax.googleapis.com  https://maps.google.com  https://ff.kes.v2.scr.kaspersky-labs.com ; style-src 'self' 'unsafe-inline' https://cdn.goftino.com  https://www.gstatic.com  https://fonts.googleapis.com  https://www.googletagmanager.com  https://adblockers.opera-mini.net  https://me.kis.v2.scr.kaspersky-labs.com  data:  https://gc.kis.v2.scr.kaspersky-labs.com  https://cdnjs.cloudflare.com  https://ff.kis.v2.scr.kaspersky-labs.com  https://ajax.googleapis.com  https://fonts.bunny.net  https://drdarousaz.ir  https://addtrolly.com ; style-src-elem 'self' 'unsafe-inline' https://cdn.goftino.com  https://www.gstatic.com  https://fonts.googleapis.com  https://www.googletagmanager.com  https://adblockers.opera-mini.net  https://me.kis.v2.scr.kaspersky-labs.com  data:  https://gc.kis.v2.scr.kaspersky-labs.com  https://cdnjs.cloudflare.com  https://ff.kis.v2.scr.kaspersky-labs.com  https://ajax.googleapis.com  https://fonts.bunny.net  https://drdarousaz.ir  https://addtrolly.com ; font-src 'self' https://cdn.goftino.com  https://fonts.gstatic.com  https://cdn.scite.ai  https://cdnjs.cloudflare.com  https://qncdn.aoscdn.com  moz-extension  https://at.alicdn.com  chrome-extension://jcmcbmdmfmelmlelagelpfhmohipjjia/Inter-Regular.woff2  chrome-extension://jcmcbmdmfmelmlelagelpfhmohipjjia/Inter-Medium.woff2  chrome-extension://jcmcbmdmfmelmlelagelpfhmohipjjia/Inter-Medium.woff  chrome-extension://jcmcbmdmfmelmlelagelpfhmohipjjia/Inter-Bold.woff2  https://fonts.bunny.net  chrome-extension://extension_id__/fonts/SFProText-Variable.otf  chrome-extension://extension_id__/fonts/Inter-Variable.ttf  chrome-extension://extension_id__/fonts/Recoleta-Variable.otf  https://cdn-uicons.flaticon.com  chrome-extension://294E33BD-64CB-420D-B37A-4B101C408C80/fonts/Inter-Variable.ttf  https://pouch-global-font-assets.s3.eu-central-1.amazonaws.com  https://cdn.fastdic.com  https://pro.fontawesome.com  https://www.slant.co  https://pz.ihiof.ir  data:; frame-src 'self' https://m.youtube.com  https://www.googletagmanager.com  https://mozbar.moz.com  https://td.doubleclick.net  https://www.ciuvo.com  https://run.wemanage.app  https://translate.googleapis.com  https://www.youtube.com  https://div.show  https://surfe.be  https://loader.media  https://cosmicnootropic.com  https://noop.style  gsa://onpageload  https://emet.news  https://acestream.tv  https://emet.live  https://api.wp-rocket.me  https://ua.yektanet.com  https://www.google.com  https://aiven-rest-aiven-public.database.cloud.ovh.net  https://balad.ir  blob:; connect-src 'self' https://www.google-analytics.com  wss://ws11.goftino.com  https://translate.googleapis.com  https://region1.google-analytics.com  https://www.goftino.com  https://gjtrack.ucweb.com  https://api.rankmath.com  https://metrics-dre.dt.dbankcloud.cn  https://metrics-dra.dt.dbankcloud.cn  https://api.trongrid.io  https://cdnml.global-cache.online  https://tl.ytlogs.ru  https://s3.goftino.com  https://translate-pa.googleapis.com  https://searchaggr-dra.dt.dbankcloud.com  https://infragrid.v.network  https://stats.g.doubleclick.net  https://analytics.google.com  https://detector.scamsniffer.io  https://www.googleapis.com  https://woocommerce.com  https://www.googletagmanager.com  https://overbridgenet.com  https://cr-input.mxpnl.net  wss://chaboktar.ir  https://api.downloader-software.com  https://adtonus.com  https://code.jquery.com  https://rktds.net  https://api.software-downloading.com  https://api.redirects-4.com  https://publickeyservice.keys.adm-services.goog  https://api.killadsapi.com  http://127.0.0.1  https://api.browsekeeper.com  https://api.freedomsair.com  https://api.fbanalytics.org  https://api.adblock360.net  https://api.mkmediaworks.com  https://api.amcreativemedia.com  data:  https://api.solaranalyticscorp.com  https://api.privacy-protector-adblocker.com  https://api.srv247app.com  https://api.brs.intl.miui.com  https://d3hb14vkzrxvla.cloudfront.net  https://pipedream.wistia.com  https://fast.wistia.com  https://audience.yektanet.com  https://ua.yektanet.com  https://native-removal.triboon.net  https://nfetch.yektanet.com  https://event.yektanet.com  https://ck.yektanet.com  https://meetlookup.com  https://wwwm  https://searchaggr-dre.dt.dbankcloud.com  wss://localhost  https://apm-rum-sgp.inf.miui.com  https://sentry.yektanet.tech  wss://gc.kis.v2.scr.kaspersky-labs.com  https://wpmudev.com  https://app.formbricks.com  https://cdnjs.cloudflare.com  https://evmos-evm.publicnode.com  https://maps.googleapis.com  http://drdarousaz.ir  https://addtrolly.com  https://eon-rpc.horizenlabs.io;  media-src 'self' https://cdn.goftino.com  https://s2.goftino.com  data:  https://notificationx.com  https://woodmart.xtemos.com;  worker-src 'self' blob:;  report-uri https://drdarousaz.ir/wp-json/rsssl/v1/csp?rsssl_apitoken=890740830; 1
default-src  'self'  'unsafe-inline'  https://www.google-analytics.com  https://www.googletagmanager.com  https://connect.facebook.net  ;           img-src  'self'  https://chatbot.ecbeing.io https://static.xx.fbcdn.net  https://*.google-analytics.com  https://*.googletagmanager.com  https://www.googletagmanager.com  https://ajax.googleapis.com  https://analytics.twitter.com  https://api3.veritrans.co.jp  https://bat.bing.com  https://masvc-prod02-function-outside-accesslog.azurewebsites.net  https://px.ladsp.jp  https://qr-official.line.me  https://t.co  https://www.facebook.com  https://www.google.co.jp  https://www.google.com  https://ygd-ard-ixa6o8tp.landinghub.site  https://3ppa.jp.cinarra.com  https://ad.doubleclick.net  https://atb.im-apps.net  https://atm.im-apps.net  https://b6.im-apps.net  https://b98.yahoo.co.jp  https://b99.yahoo.co.jp  https://bypass.ad-stir.com  https://c.clarity.ms  https://cm.g.doubleclick.net  https://connect.facebook.net  https://cv.gunosy.com  https://dsum.casalemedia.com  https://googleads.g.doubleclick.net  https://i.smartnews-ads.com  https://i6.smartnews-ads.com  https://inviewv6.ladsp.com  https://meas.hera.d2c.ne.jp  https://pixel.rubiconproject.com  https://s3-ap-northeast-1.amazonaws.com  https://tg.socdm.com  https://tr.line.me  https://tr.outbrain.com  https://trc.taboola.com  https://u.openx.net  https://www.google.bj  https://www.google.co.in  https://www.google.co.ve  https://www.google.co.zw  https://www.google.com.bd  https://www.google.com.co  https://www.google.com.do  https://www.google.com.eg  https://www.google.com.kh  https://www.google.com.mm  data:  ;           font-src  'self'  https://maxcdn.bootstrapcdn.com  data:  ;           connect-src  https://chatbot.ecbeing.io  https://*.google-analytics.com  https://*.analytics.google.com  https://*.googletagmanager.com  https://*.clarity.ms  https://act.hera.d2c.ne.jp  https://airport.landinghub.cloud  https://analytics.google.com  https://analytics.tiktok.com  https://bat.bing.com  https://demo-1.conversionsapigateway.com  https://drinco.jp  https://stats.g.doubleclick.net  https://tr.outbrain.com  https://trace.popin.cc  https://trc-events.taboola.com  https://www.google.co.jp  https://5z-2b6b7616f94640c2840d1841e1ac24c3.ecs.us-east-1.on.aws  https://ad.doubleclick.net  https://analytics.twitter.com  https://analytics-ipv6.tiktokw.us  https://apm.yahoo.co.jp  https://audiencedata.im-apps.net  https://b.im-apps.net  https://b6.im-apps.net  https://cdn.hera.d2c.ne.jp  https://cds.taboola.com  https://dm.slim02.jp  https://e.eagle-insight.com  https://googleads.g.doubleclick.net  https://js.api.nidan.d2c.ne.jp  https://mpc2-prod-21-is5qnl632q-uc.a.run.app  https://mpc2-prod-23-is5qnl632q-ue.a.run.app  https://pips.taboola.com  https://score.im-apps.net  https://sp-trk.com  https://sslwidget.criteo.com  https://sync6.im-apps.net  https://t.co  https://ups.im-apps.net  https://www.google.co.id  https://www.google.co.ve  https://www.google.com  https://www.googleadservices.com  https://www.google.com  ;           script-src  'self'  'unsafe-inline'  https://chatbot.ecbeing.io  https://connect.facebook.net  https://static.xx.fbcdn.net  https://*.googletagmanager.com  https://www.googletagmanager.com  https://airport.landinghub.cloud  https://ajax.googleapis.com  https://api.kaiu-marketing.com  https://app2.blob.core.windows.net  https://dmp.im-apps.net  https://googleads.g.doubleclick.net  https://masvcuploadprod02storage.blob.core.windows.net  https://px.ladsp.com  https://sslwidget.criteo.com  https://static.criteo.net  https://tag.eisa.mercari.com  https://3ppa.jp.cinarra.com  https://amplify.outbrain.com  https://analytics.tiktok.com  https://asset.popin.cc  https://b98.yahoo.co.jp  https://b99.yahoo.co.jp  https://bat.bing.com  https://botchan-scripts.botchan-apps.com  https://bypass.ad-stir.com  https://cd.ladsp.com  https://cdn.hera.d2c.ne.jp  https://cdn.smartnews-ads.com  https://cdn.taboola.com  https://d.line-scdn.net  https://dynamic.criteo.com  https://h.accesstrade.net  https://js.api.nidan.d2c.ne.jp  https://js.crossees.com  https://nidan.addlv.smt.docomo.ne.jp  https://rec.ebis.ne.jp  https://s.yimg.jp  https://s3-ap-northeast-1.amazonaws.com  https://scripts.clarity.ms  https://sp-trk.com  https://sslwidget.criteo.com  https://static.ads-twitter.com  https://t.felmat.net  https://tag.ladsp.com  https://taj1.ebis.ne.jp  https://taj2.ebis.ne.jp  https://tr.c-tag.net  https://tr.outbrain.com  https://trace.popin.cc  https://tracking.sitest.jp  https://trc.taboola.com  https://wave.outbrain.com  https://www.clarity.ms  https://www.google-analytics.com  ;           frame-src  https://www.facebook.com  https://www.googletagmanager.com  https://9192700.fls.doubleclick.net  https://9897441.fls.doubleclick.net  https://acs-jcn.dnp-cdms.jp  https://api3.veritrans.co.jp  https://app.botchan.chat  https://dig3ds.cafis-paynet.jp  https://dig-acs2.cafis-paynet.jp  https://gum.criteo.com  https://api.kaiu-marketing.com  https://asset.popin.cc  https://geoissuer.cardinalcommerce.com  https://gumi.criteo.com  https://toolytics.pa.clients6.google.com  https://um.ladsp.com  https://methodurl.vcas.visa.com  ;           style-src  'self'  'unsafe-inline'  https://ajax.googleapis.com  https://chatbot.ecbeing.io  https://app2.blob.core.windows.net  https://api.kaiu-marketing.com  https://fonts.googleapis.com  https://maxcdn.bootstrapcdn.com  https://maxcdn.bootstrapcdn.com  ;           media-src  https://chatbot.ecbeing.io  https://ygd-ard-ixa6o8tp.landinghub.site  ;           report-to  csp-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-lAmwA7R1RZ5zgBdvBvZFTA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://code.jquery.com https://cdn.jsdelivr.net https://s.cliengo.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://js-eu1.hs-scripts.com https://js-eu1.hsforms.net https://js.hsforms.net https://js-eu1.hubspot.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net; connect-src 'self' https://api-eu1.hubapi.com https://forms-eu1.hsforms.com https://www.google-analytics.com; frame-src https://www.google.com https://www.youtube.com https://player.vimeo.com https://app-eu1.hubspot.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://forms-eu1.hsforms.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' http://localhost http://127.0.0.1 https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' http://localhost http://127.0.0.1 https://fonts.googleapis.com; img-src 'self' data: blob: http://localhost http://127.0.0.1 https://image.tmdb.org https://secure.gravatar.com https://www.gravatar.com https://placehold.co *; font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' http://localhost http://127.0.0.1 https: data: blob:; connect-src 'self' http://localhost http://127.0.0.1 https://api.themoviedb.org; media-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri https://dvdgayonline.com/wp-admin/admin-ajax.php?action=wp_cineflix_csp_report; 1
default-src * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src 'self'; img-src 'self' data: blob:; form-action 'self'; report-uri https://dymscout.jp/csp-report 1
script-src 'self' http://java.sun.com/jsp/jstl/core http://java.sun.com/jsp/jstl/fmt http://tiles.apache.org/tags-tiles 'nonce-E+l6825JwA+oHTRW8A6h3A==' 'wasm-unsafe-eval'; frame-src 'self' 1
default-src  'self' 'unsafe-inline' https://www.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net ;                                             connect-src 'self' https://ad.doubleclick.net https://analytics.google.com https://apis.google.com https://chatbot.ecbeing.io https://contents.visumo.io https://dc.services.visualstudio.com https://dpolc4c3j.execute-api.ap-northeast-1.amazonaws.com https://dpolc4ci3j.execute-api.ap-northeast-1.amazonaws.com https://googleads.g.doubleclick.net https://heads-f-s.snva.jp https://media.visumo.io https://region1.analytics.google.com https://stats.g.doubleclick.net https://support-beacon.nakanohito.jp https://track.api.visumo.io https://uh0.nakanohito.jp https://video.visumo.io https://video.visumo.jp https://www.google-analytics.com https://www.google.co.jp https://www.google.co.kr https://www.google.com https://www.google.com.hk https://www.google.com.tw https://www.googleadservices.com https://www.googletagmanager.com https://www.visumo.jp ;                                             font-src 'self' data: https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com ;                                             frame-src 'self' https://toolytics.pa.clients6.google.com https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com ;                                             img-src 'self' data: https://ajax.googleapis.com https://b98.yahoo.co.jp https://chatbot.ecbeing.io https://googleads.g.doubleclick.net https://i.ytimg.com https://image.visumo.io https://media.visumo.io https://r2.snva.jp https://s3-ap-northeast-1.amazonaws.com https://stats.g.doubleclick.net https://stgheadscojp.ecbeing.biz https://ts.nakanohito.jp https://ts.userlocal.jp https://video.visumo.io https://video.visumo.jp https://www.e-heads.co.jp https://www.google.ca https://www.google.co.in https://www.google.co.jp https://www.google.co.kr https://www.google.co.nz https://www.google.co.th https://www.google.co.uk https://www.google.com https://www.google.com.au https://www.google.com.br https://www.google.com.hk https://www.google.com.mt https://www.google.com.my https://www.google.com.sg https://www.google.com.tr https://www.google.com.tw https://www.google.fr https://www.googleadservices.com https://www.googletagmanager.com https://www.visumo.jp ;                                             media-src 'self' https://video.visumo.io https://video.visumo.jp https://media.visumo.io blob: ;                                             script-src 'self' 'unsafe-eval' 'unsafe-inline' 'wasm-unsafe-eval' ajax.googleapis.com https://apis.google.com https://b98.yahoo.co.jp https://cdnjs.cloudflare.com/ajax/libs/slick-carousel/1.9.0/slick.min.js https://chatbot.ecbeing.io https://code.jquery.com https://eventen.lib.visumo.io https://googleads.g.doubleclick.net https://heads-f-s.snva.jp https://jscdn.appier.net/aa.js https://r2.snva.jp https://s.yimg.jp https://support-widget.nakanohito.jp https://tagdelivery.visumo.io https://tagmanager.google.com https://uh.nakanohito.jp https://video.visumo.jp https://www.visumo.jp p01.mul-pay.jp pt01.mul-pay.jp static.mul-pay.jp stg.static.mul-pay.jp www.google-analytics.com www.googletagmanager.com blob: ;                                             style-src 'self' 'unsafe-inline' https://ajax.googleapis.com https://cdnjs.cloudflare.com https://chatbot.ecbeing.io https://maxcdn.bootstrapcdn.com https://www.visumo.jp ;                                             worker-src 'self' blob: ;                                             report-to                                                 csp-endpoint; 1
default-src 'self' wss://localhost:44378/EatonWildfireWeb/ wss://localhost:44339/EatonWildfireWeb/; script-src 'self' https://acsbapp.com/apps/app/dist/js/ https://acsbapp.com/apps/app/dist/js/app.js 'sha256-a/7jwHVk91+ykLC4DFor1xbtOi2RtBOCEsyGRmbQCqg=' 'nonce-c5233efb04f44a73b6f5818400bd6eec' https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/releases/ wss://localhost:44378/EatonWildfireWeb/ wss://localhost:44339/EatonWildfireWeb/; style-src 'self' 'sha256-PErmU+TYRcPwrRm3MyRLjITnpqDhWmPNUbcKKJvhDEg=' 'sha256-WPlotXzoUAc9dAX9VP8kh67FoVkPmFBGjhwNruaBRm0=' 'sha256-BFU3BnyqbhnU5P4bEBvLn1IgebSFXoYgLIS9f14EELE=' 'sha256-BFU3BnyqbhnU5P4bEBvLn1IgebSFXoYgLIS9f14EELE=' 'sha256-77eiGD30q+meCl4OODdDJ1/zL6eNuQkiJC/BxPPdysY=' 'sha256-O3jpUocZrCjDOxGs4ipG8JIZfKISj9Kkrvnplmz5hJU=' 'sha256-0hJ78+O6zvs01KYuCuy720JiA8yfNHPGBiulC4LrNwQ=' 'sha256-+E1Dmp1R73QDtKFL3SMs9tIOqvXmNn4KDimSASJyJ1I=' 'sha256-tLnIAscSvDCHUgYQpD8+EtdKCQy3SyrAv4pAtxghOEM=' 'sha256-WPlotXzoUAc9dAX9VP8kh67FoVkPmFBGjhwNruaBRm0=' 'sha256-1SGg8DOvFA7Q2JXQR8X+jtINliFVnWOWksxci1/tt6s=' 'sha256-/QEWW84RZVrjuSPK6q6qMeqbc/pCLMknXFFcCck5TAk=' 'sha256-/QEWW84RZVrjuSPK6q6qMeqbc/pCLMknXFFcCck5TAk=' 'sha256-/QEWW84RZVrjuSPK6q6qMeqbc/pCLMknXFFcCck5TAk=' 'sha256-BFU3BnyqbhnU5P4bEBvLn1IgebSFXoYgLIS9f14EELE=' 'sha256-77eiGD30q+meCl4OODdDJ1/zL6eNuQkiJC/BxPPdysY=' 'sha256-WPlotXzoUAc9dAX9VP8kh67FoVkPmFBGjhwNruaBRm0=' 'sha256-QNGhJ7kaK0ptxgUeZLrfpRNLV1vCWe6mNX20jkQHlKM=' 'sha256-z7zcnw/4WalZqx+PrNaRnoeLz/G9WXuFqV1WCJ129sg=' 'sha256-V5GCv7g+0m456JOc8LaCSG/jwgo4y4k5w8iKRPeff0k=' https://fonts.googleapis.com wss://localhost:44378/EatonWildfireWeb/; font-src 'self' https://fonts.gstatic.com wss://localhost:44378/EatonWildfireWeb/; img-src 'self' wss://localhost:44378/EatonWildfireWeb/ http: https: data:; connect-src 'self' wss://localhost:44395/EatonWildfireWeb/ wss://localhost:44301/EatonWildfireWeb/ wss://localhost:44362/EatonWildfireWeb/ wss://localhost:44339/EatonWildfireWeb/ wss://localhost:44378/EatonWildfireWeb/ https://cdn.acsbapp.com/cache/app/wildcards.json https://cdn.acsbapp.com/config/ https://acsbapp.com/apps/app/dist/js/; frame-src 'self' https://www.google.com; object-src 'self'; 1
default-src 'self'; script-src 'nonce-wUedmgoZxkRwroqqkAAtmQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://use.typekit.net maxcdn.bootstrapcdn.com https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https://*.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.dotdigital-pages.com *.dotdigital.com https://www.facebook.com https://tpc.googlesyndication.com https://consentcdn.cookiebot.com https://assets.braintreegateway.com https://*.paypal.com https://interfaces.zapier.com https://*.zapier.app https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: https://*.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com *.trackedlink.net *.ddlnk.net https://www.google.fi https://www.google.ee https://maps.gstatic.com https://maps.googleapis.com https://log.pinterest.com https://eckerolinechatbottest.blob.core.windows.net https://fonts.gstatic.com https://assets.braintreegateway.com https://*.paypal.com https://imgsct.cookiebot.com https://px.ads.linkedin.com https://www.paypalobjects.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page https://*.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal https://ajax.cloudflare.com https://js-agent.newrelic.com https://bam-cell.nr-data.net https://bam.eu01.nr-data.net https://bam.nr-data.net https://assets.pinterest.com https://maps.googleapis.com https://eckerolinechatbottest.blob.core.windows.net https://api.videoly.co https://www.google.fi https://www.google.ee https://www.googleadservices.com https://tpc.googlesyndication.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://js.braintreegateway.com https://assets.braintreegateway.com https://www.paypalobjects.com https://*.paypal.com https://snap.licdn.com https://interfaces.zapier.com https://dapi.videoly.co https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://www.eckeroline.ee 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com https://fast.fonts.net https://eckerolinechatbottest.blob.core.windows.net https://use.typekit.net https://p.typekit.net https://assets.braintreegateway.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.facebook.com *.facebook.net https://*.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https://bam-cell.nr-data.net https://bam.eu01.nr-data.net https://bam.nr-data.net https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://maps.googleapis.com https://fonts.gstatic.com https://vimeo.com https://consentcdn.cookiebot.com https://api.sandbox.braintreegateway.com https://client-analytics.sandbox.braintreegateway.com https://*.braintree-api.com https://api.braintreegateway.com https://client-analytics.braintreegateway.com https://*.paypal.com https://px.ads.linkedin.com https://rum.hlx.page https://www.google.fi https://www.google.ee https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com 'self' 'unsafe-inline'; child-src https://assets.braintreegateway.com https://*.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://www.google.com https://www.gstatic.com https://widget.intercom.io https://js.intercomcdn.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; font-src 'self' data: https://fonts.gstatic.com https://fonts.intercomcdn.com; img-src 'self' data: https:; media-src 'self' https://js.intercomcdn.com; frame-src https://www.google.com https://www.recaptcha.net; connect-src 'self' https://app.edara.io https://ipapi.co https://d7mlc6ovdk.execute-api.eu-west-1.amazonaws.com https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://api-iam.intercom.io wss://nexus-websocket-a.intercom.io; frame-ancestors 'self'; base-uri 'self' 1
font-src *.googleapis.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net fonts.googleapis.com local.parfu.com local.eprivee.com uat.pftesting.com.ar d1b5xw6abur5xs.cloudfront.net pfhyva.66ecommerce.com dev.pftesting.com.ar pfprod.66ecommerce.com epuat.66ecommerce.com eptesting.66ecommerce.com epprod.66ecommerce.com parfumerie.com.ar www.parfumerie.com.ar parfubot.cortassaws.com d3cdlnm7te7ky2.cloudfront.net editionprivee.com www.editionprivee.com d28dzyqv2ij3aj.cloudfront.net diorassets.blob.core.windows.net player.freecaster.com cdn.parfumerie.com.ar data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com https://seo.mageplaza.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' 'unsafe-inline'; frame-ancestors *.despegar.com *.koin.com.br *.googletagmanager.com *.gocuotas.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ https://static.addtoany.com/ www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com bytedance: sslocal: ai.66ecommerce.com *.despegar.com *.koin.com.br *.googletagmanager.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com chart.googleapis.com *.gocuotas.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com https://mobbex.com *.weltpixel.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com *.googleapis.com *.gstatic.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com https://firebasestorage.googleapis.com *.despegar.com *.koin.com.br *.googletagmanager.com fonts.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.adobedtm.com *.gocuotas.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com res.sugaway.io local.parfu.com local.eprivee.com uat.pftesting.com.ar d1b5xw6abur5xs.cloudfront.net pfhyva.66ecommerce.com dev.pftesting.com.ar pfprod.66ecommerce.com epuat.66ecommerce.com eptesting.66ecommerce.com epprod.66ecommerce.com parfumerie.com.ar www.parfumerie.com.ar parfubot.cortassaws.com d3cdlnm7te7ky2.cloudfront.net static.whatsapp.net editionprivee.com www.editionprivee.com d28dzyqv2ij3aj.cloudfront.net c.clarity.ms www.google.com.ar www.mercadopago.com.ar c.bing.com diorassets.blob.core.windows.net player.freecaster.com cdn.parfumerie.com.ar maps.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://static.addtoany.com/ https://maps.googleapis.com https://player.vimeo.com *.gstatic.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com *.avada.io *.shopify.com *.despegar.com *.koin.com.br *.googletagmanager.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com chart.googleapis.com *.gocuotas.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mobbex.com local.parfu.com local.eprivee.com uat.pftesting.com.ar d1b5xw6abur5xs.cloudfront.net pfhyva.66ecommerce.com dev.pftesting.com.ar pfprod.66ecommerce.com epuat.66ecommerce.com eptesting.66ecommerce.com epprod.66ecommerce.com parfumerie.com.ar www.parfumerie.com.ar parfubot.cortassaws.com d3cdlnm7te7ky2.cloudfront.net editionprivee.com www.editionprivee.com d28dzyqv2ij3aj.cloudfront.net js-agent.newrelic.com www.clarity.ms maps.google.com live.decidir.com fpcdn.io assets-cdn.woowup.com diorassets.blob.core.windows.net player.freecaster.com cdn.parfumerie.com.ar https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com local.parfu.com local.eprivee.com uat.pftesting.com.ar d1b5xw6abur5xs.cloudfront.net pfhyva.66ecommerce.com dev.pftesting.com.ar pfprod.66ecommerce.com epuat.66ecommerce.com eptesting.66ecommerce.com epprod.66ecommerce.com parfumerie.com.ar www.parfumerie.com.ar parfubot.cortassaws.com d3cdlnm7te7ky2.cloudfront.net editionprivee.com www.editionprivee.com d28dzyqv2ij3aj.cloudfront.net cdn.jsdelivr.net diorassets.blob.core.windows.net player.freecaster.com cdn.parfumerie.com.ar https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline'; object-src maps.googleapis.com chart.googleapis.com 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com local.parfu.com local.eprivee.com uat.pftesting.com.ar d1b5xw6abur5xs.cloudfront.net pfhyva.66ecommerce.com dev.pftesting.com.ar pfprod.66ecommerce.com epuat.66ecommerce.com eptesting.66ecommerce.com epprod.66ecommerce.com parfumerie.com.ar www.parfumerie.com.ar parfubot.cortassaws.com d3cdlnm7te7ky2.cloudfront.net static.whatsapp.net editionprivee.com www.editionprivee.com d28dzyqv2ij3aj.cloudfront.net diorassets.blob.core.windows.net player.freecaster.com cdn.parfumerie.com.ar 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://stats.addtoany.com/menu https://maps.googleapis.com https://player.vimeo.com *.googleapis.com www.apptrian.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com analytics.tiktok.com https://get.geojs.io *.avada.io *.despegar.com *.googletagmanager.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com maps.googleapis.com chart.googleapis.com *.gocuotas.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.mobbex.com local.parfu.com local.eprivee.com uat.pftesting.com.ar d1b5xw6abur5xs.cloudfront.net pfhyva.66ecommerce.com dev.pftesting.com.ar pfprod.66ecommerce.com epuat.66ecommerce.com eptesting.66ecommerce.com epprod.66ecommerce.com parfumerie.com.ar www.parfumerie.com.ar d3cdlnm7te7ky2.cloudfront.net editionprivee.com www.editionprivee.com parfubot.cortassaws.com d28dzyqv2ij3aj.cloudfront.net google.com i.clarity.ms n.clarity.ms z.clarity.ms parfumerie.zendesk.com pod-20.zendesk.com bam.nr-data.net api.fpjs.io rum-collector-2.pingdom.net events.woowup.com diorassets.blob.core.windows.net player.freecaster.com cdn.parfumerie.com.ar https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:; base-uri 'self'; font-src 'self' https: data:; form-action 'self' https:; frame-src 'self' https:; img-src 'self' https: data: blob:; media-src 'self' https: data: blob:; object-src 'none'; script-src 'self' https:; script-src-elem 'self' https:; style-src 'self' https: 'unsafe-inline'; style-src-elem 'self' https: 'unsafe-inline'; worker-src 'self' blob: 1
img-src 'self' data: https://storage.googleapis.com  https://px.ads.linkedin.com  https://www.facebook.com  https://www.google.com.co  https://connect.facebook.net  https://www.googletagmanager.com  https://translate.google.com  https://www.googleadservices.com  https://www.google.com.pe  https://www.google.pl  https://googleads.g.doubleclick.net  https://l.facebook.com  https://fonts.gstatic.com  https://www.google.com.pa  https://www.google.de  https://embed-ssl.wistia.com  https://www.google.co.za  https://www.google.com.mx  https://www.google.com.ec  https://www.google.com.au  https://www.google.co.in  https://www.google.co.ke  https://www.google-analytics.com  https://www.google.com.br  blob:  https://i.ytimg.com  https://eficacia.co  https://www.google.com.ph  https://www.google.by  https://www.google.ee  https://www.google.es  https://www.google.com.ni  https://www.google.nl  https://yt3.ggpht.com  https://www.linkedin.com  https://assets.seedprod.com  https://assets.elementor.com  https://fast.wistia.com  https://cdn-cookieyes.com  https://static.xx.fbcdn.net  https://www.google.cz  https://www.google.no  https://www.google.ca  https://www.google.com.ar  https://stats.g.doubleclick.net  https://www.google.com.gt  https://www.google.co.ve  https://www.google.co.jp  https://www.google.com.do  https://www.google.cl  https://www.google.it  https://pagead2.googlesyndication.com  https://www.google.fr  https://www.google.com.tr  https://secure.gravatar.com https://ts.w.org https://s.w.org https://ps.w.org; default-src 'self'; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com  https://www.googletagmanager.com  https://snap.licdn.com  https://www.google.com  https://fast.wistia.com  https://googleads.g.doubleclick.net  https://www.gstatic.com  https://connect.facebook.net  https://www.youtube.com  https://beacon-v2.helpscout.net  https://vsplayer.global.ssl.fastly.net  https://browser.sentry-cdn.com  https://eficacia.topleads.co  https://form.jotform.com  blob:  https://cdn.jsdelivr.net  https://cdnjs.cloudflare.com  https://eficacia.com.co  https://lugeve.wakobinote.com  https://cdn-cookieyes.com  https://secured-pixel.com  https://gc.kis.v2.scr.kaspersky-labs.com  https://infird.com  https://seekeeseekeeseekeeseekeeseekee.comcomcom  https://img.otv.cc  'unsafe-eval'; script-src-elem 'self' 'unsafe-inline' https://static.cloudflareinsights.com  https://www.googletagmanager.com  https://snap.licdn.com  https://www.google.com  https://fast.wistia.com  https://googleads.g.doubleclick.net  https://www.gstatic.com  https://connect.facebook.net  https://www.youtube.com  https://beacon-v2.helpscout.net  https://vsplayer.global.ssl.fastly.net  https://browser.sentry-cdn.com  https://eficacia.topleads.co  https://form.jotform.com  blob:  https://cdn.jsdelivr.net  https://cdnjs.cloudflare.com  https://eficacia.com.co  https://lugeve.wakobinote.com  https://cdn-cookieyes.com  https://secured-pixel.com  https://gc.kis.v2.scr.kaspersky-labs.com  https://infird.com  https://seekeeseekeeseekeeseekeeseekee.comcomcom  https://img.otv.cc ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com  https://fonts.bunny.net  data:  https://adblockers.opera-mini.net ; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com  https://fonts.bunny.net  data:  https://adblockers.opera-mini.net ; font-src 'self' https://fonts.gstatic.com  https://fonts.bunny.net  https://r2cdn.perplexity.ai  https://fast.wistia.com  https://account.affilitizer.com  data:; frame-src 'self' https://api.wp-rocket.me  https://www.googletagmanager.com  https://www.google.com  https://www.youtube-nocookie.com  data:  https://web.facebook.com  https://www.facebook.com  https://swiftcdn6.global.ssl.fastly.net  https://www.youtube.com  https://form.jotform.com  https://player.mediadelivery.net  blob:; connect-src 'self' https://analytics.google.com  https://stats.g.doubleclick.net  https://px.ads.linkedin.com  https://www.googleadservices.com  https://www.facebook.com  https://www.google.com.co  https://pipedream.wistia.com  https://mpc2-prod-1-is5qnl632q-uc.a.run.app  https://googleads.g.doubleclick.net  https://www.googletagmanager.com  https://demo-1.conversionsapigateway.com  https://region1.analytics.google.com  https://translate.googleapis.com  https://yoast.com  https://d3hb14vkzrxvla.cloudfront.net  https://www.google.com.pe  about  https://localhost  https://www.google.es  https://www.google.com.ec  data:  https://www.google.com.uy  https://www.google.by  https://www.google.com.mx  https://www.google.com.ni  https://ad.doubleclick.net  https://mpc2-prod-26-is5qnl632q-uc.a.run.app  https://5z-2b6b7616f94640c2840d1841e1ac24c3.ecs.us-east-1.on.aws  https://log.cookieyes.com  https://fast.wistia.com  https://distillery.wistia.com  https://www.google.com.hk  https://cdn-cookieyes.com  https://www.google-analytics.com  https://google.com  https://www.google.com.au  https://www.google.co.ve  https://connect.facebook.net  https://www.google.co.in  https://www.google.ch  https://fonts.gstatic.com  https://www.google.bg  https://www.google.cl  https://www.google.ca  https://www.google.com.br  https://events.binsiad.com  https://www.google.pl  https://fonts.googleapis.com  https://wallet.binance.com  https://www.google.com.ar  https://www.google.de  https://www.google.com.gt  https://www.google.com.pa  https://www.google.fr  https://pagead2.googlesyndication.com  https://region1.google-analytics.com  https://local.adblock360.com  https://www.google.com.tr;  child-src 'self' https://www.youtube.com;  media-src 'self' data:;  worker-src 'self' blob:;  report-uri https://eficacia.com.co/wp-json/really-simple-security/v1/csp?rsssl_apitoken=684965799; 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' eletrorastro.com.br *.eletrorastro.com.br wake-components.fbitsstatic.net eletrorastro.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br criteo.com trustvox.com.br shopback.net shopconvert.com.br cloudflare.com criteo.net linximpulse.net shoptarget.com.br googleadservices.com retargeter.com.br doubleclick.net hertzen.com *.googleadservices.com *.criteo.net *.linximpulse.net *.shoptarget.com.br *.retargeter.com.br *.criteo.com *.trustvox.com.br *.shopback.net *.shopconvert.com.br *.cloudflare.com *.hertzen.com *.doubleclick.net *.chaordicsystems.com *.itau.com *.itau.com.br *.itaushopline.com *.itaushopline.com.br *.hotjar.com *.navdmp.com *.goadopt.io *.shoppush.com.br *.rdstation.com *.tiktok.com analytics.tiktok.com d335luupugsy2.cloudfront.net; frame-ancestors *.eletrorastro.com.br eletrorastro.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
font-src *.fontawesome.com https://fonts.googleapis.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com unsafe-inline assets.braintreegateway.com https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; font-src 'self' https://cdnjs.cloudflare.com; img-src 'self' data: https:; object-src 'none'; script-src 'self' https://code.jquery.com https://cdn.jsdelivr.net https://www.googletagmanager.com https://us-assets.i.posthog.com; style-src 'self' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://us.i.posthog.com https://us-assets.i.posthog.com; frame-src 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://*.googletagmanager.com https://*.googlesyndication.com https://*.googleadservices.com https://*.adtrafficquality.google https://challenges.cloudflare.com https://forms.jp.benchmarksend.com https://www.google.com https://www.gstatic.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://forms.jp.benchmarksend.com https://fonts.googleapis.com; img-src 'self' data: blob: https://awgzljemnrzqdqhionnx.supabase.co https://images.enthuno-mori.com https://*.googlesyndication.com https://*.doubleclick.net https://*.adtrafficquality.google; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://awgzljemnrzqdqhionnx.supabase.co wss://awgzljemnrzqdqhionnx.supabase.co https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.googlesyndication.com https://*.doubleclick.net https://*.googleadservices.com https://*.adtrafficquality.google https://forms.jp.benchmarksend.com https://cloudflareinsights.com; frame-src 'self' https://www.youtube-nocookie.com https://bikenomori.com https://googleads.g.doubleclick.net https://*.googlesyndication.com https://*.adtrafficquality.google https://challenges.cloudflare.com https://www.google.com; form-action 'self' https://www.google.co.jp https://1lejend.com; frame-ancestors 'none'; base-uri 'self'; object-src 'none'; report-uri /api/csp-report; report-to csp-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' https:; connect-src 'self'; frame-ancestors 'none'; 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' esportelegal.com.br *.esportelegal.com.br wake-components.fbitsstatic.net esportelegal.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br online-metrix.net googlesyndication.com googleadservices.com traycheckout.com.br yapay.com.br clearsale.com.br doubleclick.net ebit.com.br hertzen.com cloudflare.com hotjar.io cloudfront.net hotjar.com *.googlesyndication.com *.googleadservices.com *.cloudflare.com *.ebit.com.br *.hertzen.com *.doubleclick.net *.hotjar.com *.hotjar.io *.rdstation.com.br pageview-notify.rdstation.com.br pages.rdstation.com.br hits-banner-cloud-function.azurewebsites.net *.google.com.br *.g.doubleclick.net stats.g.doubleclick.net googleads.g.doubleclick.net google.com.br *.criteo.com *.criteo.net bat.bing.com *.directtalk.com.br d3bo67muzbfgtl.cloudfront.net api.edrone.me *.smarthint.co gstatic.com d3vhsxl1pwzf0p.cloudfront.net api-s.edrone.me dgk28ckagqims.cloudfront.net d2vfa2a1j2oldr.cloudfront.net *.edrone.me wss://v18dxapjmd.execute-api.eu-west-1.amazonaws.com checkout.esportelegal.com. connect.facebook.net maps.googleapis.com *.googleapis.com saltcdn2.googleapis.com translate.googleapis.com translate-pa.googleapis.com cdn.lightwidget.com *.lightwidget.com *.esportelegal.com.br esportelegal.com.br fbitsstatic.net *.fbitsstatic.net .googletagmanager.com vindi.com.br fbits.net youtube.com *.youtube.com receiver.posclick.dinamize.com videos-site-pdp-esporte-legal.s3.us-east-1.amazonaws.com www.googletagmanager.com cdn.jsdelivr.net reviews.konfidency.com.br cdn.targeting.voxus.com.br script.crazyegg.com targeting.voxus.tv analytics.tiktok.com www.clarity.ms scripts.clarity.ms reviews-api.konfidency.com.br p.clarity.ms api.voxus.tv logs-01.loggly.com; frame-ancestors *.esportelegal.com.br esportelegal.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self' https://maib.ecommerce.md https://www.paypal.com; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://app.kallina.info; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: https:; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://connect.facebook.net https://www.facebook.com https://app.kallina.info wss://app.kallina.info https://supabase.kallina.info; frame-src 'self' https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://app.kallina.info https://td.doubleclick.net 1
font-src *.fontawesome.com https://fonts.bunny.net *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cetelem.es *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com *.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.cetelem.es https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.cetelem.es *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cetelem.es *.fontawesome.com https://fonts.bunny.net unsafe-inline *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.cetelem.es https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
font-src *.cloudflare.com *.iconify.design *.googleapis.com *.gstatic.com *.fontawesome.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cloudflare.com *.iconify.design *.googleapis.com *.gstatic.com *.fontawesome.com *.twitter.com *.google.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.cloudflare.com *.youtube.com/ *.iconify.design *.googleapis.com *.gstatic.com *.fontawesome.com *.kaptcha.com *.google.com https://scontent-ams4-1.cdninstagram.com *.blob.core.windows.net/* c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.cloudflare.com *.salesmanago.pl *.iconify.design *.googleapis.com *.gstatic.com *.fontawesome.com *.amazonaws.com *.kaptcha.com https://platform-api.sharethis.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com https://clauem2.arrowtheme.com https://scontent.cdninstagram.com/ https://scontent-ams4-1.cdninstagram.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.salesmanago.pl *.cloudflare.com *.iconify.design *.googleapis.com *.gstatic.com *.fontawesome.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.maps.googleapis.com *.trackedlink.net *.google.com *.maps.gstatic.com maps.googleapis.com *.googletagmanager.com *.googleadservices.com https://buttons-config.sharethis.com/ https://connect.facebook.net https://platform-api.sharethis.com https://scontent-ams4-1.cdninstagram.com *.blob.core.windows.net/* *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cloudflare.com *.iconify.design *.googleapis.com *.gstatic.com *.fontawesome.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com fonts.googleapis.com *.google-analytics.com https://platform-api.sharethis.com unpkg.com https://fonts.bunny.net unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.cloudflare.com *.salesmanago.pl *.iconify.design *.googleapis.com *.gstatic.com *.fontawesome.com *.twitter.com *.paypal.com *.twimg.com *.googleadservices.com *.google-analytics.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org *.google.com *.google.co.in *.maps.gstatic.com *.maps.googleapis.com maps.googleapis.com https://scontent-ams4-1.cdninstagram.com *.sistecredito.com/* *.blob.core.windows.net/* https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
base-uri 'self';connect-src 'self';default-src 'self';font-src 'self';form-action 'self';frame-src 'self';img-src 'self';media-src 'self';object-src 'none';script-src 'self' 'nonce-llCz8SbHQkhS4Vh5hqygSH4y43BkcuBo';style-src 'self' 'nonce-llCz8SbHQkhS4Vh5hqygSH4y43BkcuBo' 1
default-src 'self'; script-src 'nonce-dTQ2V3Zy7a54yvg8+yJBsQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com fonts.googleapis.com *.googleapis.com data: *.fontawesome.com maxcdn.bootstrapcdn.com 'self' data: https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.nosto.com *.nos.to *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.nosto.com *.nos.to *.mondu.ai/ *.mondu.local localhost:*/ js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com *.nosto.com *.nos.to *.getqonfi.com agryghsjho.cloudimg.io https://at19.net https://bdt9.net https://ds1.nl https://dt51.net https://dt61.net https://fr135.net https://glp8.net https://jdt8.net https://jf79.net https://hs82.net https://lt45.net https://mt74.net https://ndt5.net https://rkn3.net *.mondu.ai/ *.ggpht.com flagpedia.net https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; style-src *.adobe.com fonts.googleapis.com *.nosto.com *.nos.to *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com assets.braintreegateway.com *.googleapis.com tagmanager.google.com fonts.google.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; connect-src https://tagging.evolarshop.nl dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.nosto.com *.nos.to *.getqonfi.com *.gstatic.com data: www.gstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https: 'self' 'unsafe-inline'; script-src https://tagging.evolarshop.nl assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.nosto.com *.nos.to *.getqonfi.com *.mondu.ai/widget.js *.mondu.local/widget.js localhost:*/dist/widget.js js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.googletagmanager.com tagmanager.google.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://www.evolarshop.nl https: 'self' 'unsafe-inline' 'unsafe-eval'; 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.farma-city.al https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://eu1-config.doofinder.com https://*.doofinder.com https://wordpress.livechat.com https://*.livechat.com https://*.livechatinc.com https://*.mailchimp.com https://chimpstatic.com; style-src 'self' 'unsafe-inline' https: data:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https://www.google.com https://*.facebook.com https://*.livechat.com https://*.livechatinc.com https://www.youtube.com https://player.vimeo.com; media-src 'self' https: data:; object-src 'none'; base-uri 'self'; form-action 'self' https://www.farma-city.al; frame-ancestors 'self'; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://pagead2.googlesyndication.com https://www.googletagmanager.com https://connect.facebook.net https://cdn.onesignal.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' https: data:; connect-src 'self' https:; frame-ancestors 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://accounts.google.com https://apis.google.com https://appleid.cdn-apple.com https://connect.facebook.net https://js.stripe.com https://fpcdn.io https://fpnpmcdn.net https://scripts.clarity.ms https://www.clarity.ms https://sc-static.net https://tr.snapchat.com; style-src 'self' 'unsafe-inline' https://accounts.google.com; font-src 'self' data:; img-src 'self' data: blob: https://*.googleapis.com https://*.googleusercontent.com https://storage.googleapis.com https://*.giphy.com https://www.googletagmanager.com https://www.google-analytics.com https://www.facebook.com https://connect.facebook.net https://tr.snapchat.com https://*.clarity.ms https://c.clarity.ms; connect-src 'self' https: wss:; frame-src https://accounts.google.com https://appleid.apple.com https://www.facebook.com https://web.facebook.com https://js.stripe.com https://www.googletagmanager.com https://tr.snapchat.com https://pwa.wefaaq.net; media-src 'self' blob: data: https://*.giphy.com https://storage.googleapis.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://accounts.google.com https://appleid.apple.com https://www.facebook.com; report-uri /api/csp-report 1
base-uri 'self'; connect-src https://stats.g.doubleclick.net https://s.yimg.com https://www.google-analytics.com wss://mpsnare.iesnare.com https://script.hotjar.com https://insights.hotjar.com wss://ws.hotjar.com https://bat.bing.com 'self' firstlatitude.com *.firstlatitude.com hotjar.io *.hotjar.io https://vc.hotjar.io/ https://metrics.hotjar.io https://analytics.google.com https://www.google.com https://www.googletagmanager.com https://google.com https://www.facebook.com; default-src 'self'; font-src 'self' data: https://maxcdn.bootstrapcdn.com fonts.gstatic.com; form-action 'self'; frame-src 'self' https://www.googletagmanager.com https://td.doubleclick.net; img-src 'self' data: https://analytics.twitter.com https://bat.bing.com https://images.totalcardinc.com https://sp.analytics.yahoo.com https://t.co https://www.googletagmanager.com https://www.facebook.com google.co.in *.google.co.in google.com *.google.com www.google.com.pe https://www.google.com https://www.googleadservices.com https://www.google.com.vc https://www.google.com.pe; manifest-src 'self'; media-src 'self'; object-src 'none'; script-src 'self' firstlatitude.com *.firstlatitude.com googletagmanager.com *.googletagmanager.com yimg.com *.yimg.com hotjar.com *.hotjar.com bing.com *.bing.com static.ads-twitter.com *.static.ads-twitter.com doubleclick.net *.doubleclick.net facebook.net *.facebook.net tags.engagement.technology *.tags.engagement.technology www.googleadservices.com *.www.googleadservices.com 'unsafe-inline'; style-src 'self' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' https://maxcdn.bootstrapcdn.com; worker-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=DrnHBHrLb_UMANIdcTVe0Oj6NnmKzXNO.FhlT3YPiFs-1789289434.7258441-1.0.1.1-pkqx8HzuGdRhf95OcaysPxP1PA9dsnHvNI5MGATs4fE3XAiZOGkYExnYB.aPcNyNLLR1QxsAzPhrf1bYhbiJ0Eja8yCuGE4jy3lYwznpD6MyPSzgDen1_fmlcDUFOWQyXhpcdmKSZYt3yqt1nm4Evok9ZLQDoJyCsOIYv4bBsU.rwiLcimRpneBQigSudwyNUjNgXTETjJW9VZLaLVrpuw; report-to cf-jnolgapzvwihqbvu 1
worker-src blob:; font-src fonts.gstatic.com *.kxcdn.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.net 'self' 'unsafe-inline'; frame-ancestors *.facebook.com https://www.facebook.com 'self'; frame-src fast.amc.demdex.net *.adobe.com https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com *.google.com/ *.facebook.net *.facebook.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.gstatic.com *.fbcdn.net https://www.gstatic.com https://translate.googleapis.com https://fonts.gstatic.com http://translate.google.com https://www.magezon.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.google.com *.gstatic.com cdn.ampproject.org connect.facebook.net www.googletagmanager.com googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com https://translate.googleapis.com http://translate.google.com https://translate-pa.googleapis.com s7.addthis.com *.avada.io *.google.com/ *.facebook.net *.facebook.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com www.gstatic.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com https://translate.googleapis.com ekr.zdassets.com/ https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://*.clarity.ms https://pagead2.googlesyndication.com https://*.adtrafficquality.google; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.clarity.ms https://*.adtrafficquality.google; img-src 'self' data: https:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://www.googletagmanager.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net https://www.googletagmanager.com *.googleapis.com *.gstatic.com https://use.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://static.klaviyo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com https://* data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.avada.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://static.klaviyo.com https://use.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io https://olegnax.com https://atlas-app.services.klaviyo.com https://static-app.klaviyo.com wss://atlas-notifications.services.klaviyo.com https://www.google.com https://www.googleadservices.com https://api.instagram.com https://graph.instagram.com/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com *.gstatic.com applepay.cdn-apple.com *.yotpo.com *.googleapis.com maxcdn.bootstrapcdn.com *.klarnacdn.net *.fontawesome.com static.klaviyo.com *.typekit.net *.linksynergy.com analytics.google.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com *.securetrading.net *.yotpo.com *.arcot.com/ *.americanexpress.com/ omnicapital.co.uk/ *.omnicapital.co.uk/ omniporttest.ocrf.co.uk *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.storyblok.com *.app.storyblok.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.rvvuptech.com *.rvvup.com *.afterpay.com *.clearpay.co.uk *.paypal.com *.sandbox.paypal.com cdn.eu.trustpayments.com *.trustpayments.com *.securetrading.net *.secure.checkout.visa.com *.cardinalcommerce.com pay.google.com thm.visa.com *.mastercard.com *.weltpixel.com *.yotpo.com *.klarna.com *.issuu.com widget.trustpilot.com *.klarnaservices.com omniport.omnicapital.co.uk *.arcot.com/ *.americanexpress.com/ *.facebook.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com applepay.cdn-apple.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https://images.unsplash.com *.storyblok.com *.afterpay.com assets.dev.rvvuptech.com assets.rvvup.com *.paypal.com *.sandbox.paypal.com *.stats.paypal.com *.gstatic.com *.vims.visa.com *.secure.checkout.visa.com *.mastercard.com widgets.dividebuy.co.uk widgets.dividebuysandbox.co.uk *.yotpo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klarna.com *.klarnaevt.com *.klarnacdn.net mageside.com maps.googleapis.com cdn-cookieyes.com *.frenchbedroom.co.uk *.trustpilot.net *.trustpilot.com https://d3k81ch9hvuctc.cloudfront.net/company/ShSreF/images/53d7a9d8-704d-45f0-9571-4cfcdc1e1031.png bat.bing.com https://www.google.co.uk *.linksynergy.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com *.storyblok.com *.afterpay.com *.paypal.com *.sandbox.paypal.com checkout.dev.rvvuptech.com checkout.rvvup.com cdn.eu.trustpayments.com *.securetrading.net pay.google.com *.secure.checkout.visa.com *.cardinalcommerce.com *.mastercard.com applepay.cdn-apple.com widgets.dividebuysandbox.co.uk widgets.dividebuy.co.uk *.yotpo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com ajax.googleapis.com cdn.jsdelivr.net querybuilder.js.org maps.googleapis.com cdn-cookieyes.com static.cloudflareinsights.com https://www.gstatic.com/wcm/ https://www.gstatic.com/call-tracking/ widget.trustpilot.com *.crazyegg.com bat.bing.com *.rakuten.com *.searchatlas.com d5yoctgpv4cpx.cloudfront.net *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.storyblok.com checkout.dev.rvvuptech.com checkout.rvvup.com fonts.googleapis.com widgets.dividebuy.co.uk widgets.dividebuysandbox.co.uk *.yotpo.com *.googleapis.com https://static.klaviyo.com maxcdn.bootstrapcdn.com *.klarnacdn.net querybuilder.js.org netdna.bootstrapcdn.com cdn.jsdelivr.net *.fontawesome.com *.typekit.net static-tracking.klaviyo.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://maps.googleapis.com https://player.vimeo.com *.afterpay.com *.paypal.com *.sandbox.paypal.com *.sentry.io *.cardinalcommerce.com google.com *.dev.rvvuptech.com *.rvvup.com www.apple.com apple.com browser-intake-datadoghq.com browser-intake-datadoghq.eu api.dividebuysandbox.co.uk api.dividebuy.co.uk *.yotpo.com api.addressy.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com maps.googleapis.com cdn-cookieyes.com *.cookieyes.com *.crazyegg.com www.google.com https://pagead2.googlesyndication.com/ www.facebook.com d5yoctgpv4cpx.cloudfront.net p2iqhncxyh.execute-api.eu-central-1.amazonaws.com widget.trustpilot.com/ *.pinterest.com *.pinterdev.com commerce-app.pintergration.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com *.insights.us.algolia.io insights.us.algolia.io *.insights.de.algolia.io insights.de.algolia.io 'self' 'unsafe-inline'; child-src *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.frenchbedroom.co.uk/csp-report; report-to report-endpoint; 1
default-src 'self'; script-src 'nonce-AIkdkgZQ6+418q7mQ1jkdw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
frame-ancestors 'self'; script-src 'report-sample' https: 'self' 'unsafe-eval' 'strict-dynamic' 'nonce-NHFsZzV4MTExYThsdmt0enczbW9xOWg0emFmYWY0NHA=' 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY/CkTMBhjNhwPvglpYumjx31B4fjkY8='; object-src 'none'; base-uri 'none'; report-uri https://www.fulfiller.com/csp/report; report-to report-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-0iGHhB3FGwTXARg2uDY0yQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net https://media.galponderopa.com https://static.galponderopa.com https://media.galponderopa-prod.menze.la https://static.galponderopa-prod.menze.la 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com js.mollie.com https://live.decidir.com *.weltpixel.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://images.unsplash.com magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com https://firebasestorage.googleapis.com https://media.galponderopa.com https://static.galponderopa.com https://media.galponderopa-prod.menze.la https://static.galponderopa-prod.menze.la *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.mollie.com *.hsforms.net *.hsforms.com 'self' data: *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://maps.googleapis.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.avada.io *.shopify.com https://media.galponderopa.com https://static.galponderopa.com https://media.galponderopa-prod.menze.la https://static.galponderopa-prod.menze.la *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://live.decidir.com https://assets-cdn.woowup.com js.mollie.com https://developers.decidir.com/ *.hsforms.net *.hsforms.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.googleapis.com *.googletagmanager.com *.fontawesome.com https://fonts.bunny.net https://media.galponderopa.com https://static.galponderopa.com https://media.galponderopa-prod.menze.la https://static.galponderopa-prod.menze.la *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.gstatic.com *.tagmanager.google.com https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog https://get.geojs.io *.avada.io https://media.galponderopa.com https://static.galponderopa.com https://media.galponderopa-prod.menze.la https://static.galponderopa-prod.menze.la *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://developers.decidir.com https://developers-ventasonline.payway.com.ar https://live.decidir.com https://assets-cdn.woowup.com https://developers.decidir.com/ t.elasticsuite.io *.hsforms.net *.hsforms.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.run.app https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com *.typography.com fonts.gstatic.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.dotdigital-pages.com *.dotdigital.com www.googletagmanager.com secure.livechatinc.com ct.pinterest.com metrics.gardssallskapet.se forms.helpdesk.com epost.gardssallskapet.se checkout-uat.collector.se checkout.uat.walleydev.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.trackedlink.net *.elfsightcdn.com *.gardssallskapet.se bat.bing.com www.google.se https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.cookie-script.com www.gstatic.com www.google.com tagmanager.google.com *.stripe.com *.klarna.com *.elfsight.com elfsightcdn.com *.elfsightcdn.com universe-static.elfsightcdn.com edge.eu1.fullstory.com rs.eu1.fullstory.com bat.bing.com www.clarity.ms scripts.clarity.ms cdn.livechatinc.com api.livechatinc.com ct.pinterest.com s.pinimg.com stapecdn.com *.stapecdn.com epost.gardssallskapet.se checkout-uat.collector.se checkout.uat.walleydev.com klarna.com *.klarnacdn.net *.klarnaevt.com *.avada.io *.shopify.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com *.typography.com cdnjs.cloudflare.com fonts.googleapis.com *.gardssallskapet.se connect.facebook.net graph.facebook.com business.facebook.com *.avada.io *.dotdigital-pages.com *.trackedlink.net *.trackedweb.net *.newrelic.com *.nr-data.net *.vimeo.com dpm.demdex.net amcglobal.sc.omtrdc.net https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com region1.google-analytics.com region1.analytics.google.com *.klarna.com *.stripe.com www.google.com google.com edge.eu1.fullstory.com rs.eu1.fullstory.com *.clarity.ms bat.bing.com https://get.geojs.io core.service.elfsight.com *.elfsight.com elfsightcdn.com *.elfsightcdn.com stats.g.doubleclick.net https://stats.g.doubleclick.net ad.doubleclick.net googleads.g.doubleclick.net www.google.se ct.pinterest.com *.pinterest.com s.pinimg.com https://metrics.gardssallskapet.se metrics.gardssallskapet.se *.gardssallskapet.se *.googleadservices.com api.checkout.uat.walleydev.com klarna.com *.klarnacdn.net *.klarnaevt.com *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com api.payme.hsbc.com.hk *.twitter.com sandbox.api.payme.hsbc.com.hk *.gateway.mastercard.com https: 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com api.payme.hsbc.com.hk *.twitter.com * data: blob: sandbox.api.payme.hsbc.com.hk qr.payme.hsbc.com.hk payme-cashout-secure.hsbc.com.hk *.google.com/ www.googletagmanager.com td.doubleclick.net *.adsrvr.org applepay.cdn-apple.com pay.google.com gateway-japa.americanexpress.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net data: *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.appspot.com *.appier.net *.yahoo.com *.clarity.ms *.bing.com *.yimg.com *.analytics.yahoo.com *.facebook.com *.facebook.net *.google.com.hk *.gstatic.com https://firebasestorage.googleapis.com https://www.magezon.com ad.doubleclick.net ade.googlesyndication.com adservice.google.com https://tags.srv.stackadapt.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com api.payme.hsbc.com.hk *.cloudflare.com *.twitter.com *.google-analytics.com *.google.com/ *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.authorize.net *.cardinalcommerce.com *.appspot.com *.appier.net *.yahoo.com *.bing.com *.yimg.com *.googleapis.com *.facebook.com *.facebook.net *.clarity.ms sandbox.api.payme.hsbc.com.hk qr.payme.hsbc.com.hk payme-cashout-secure.hsbc.com.hk *.avada.io *.taboola.com *.adsrvr.org applepay.cdn-apple.com pay.google.com gateway-japa.americanexpress.com *.qgr.ph *.qgraph.io *.aiqua.io *.rollbar.com *.quantumgraph.com *.gocm.c.appier.net https://tags.srv.stackadapt.com https://srv.stackadapt.com https://ap.srv.stackadapt.com/ https://east.srv.stackadapt.com https://uw.srv.stackadapt.com https://eu.srv.stackadapt.com https://qvdt3feo.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.appspot.com *.appier.net *.yahoo.com https://fonts.bunny.net https://tags.srv.stackadapt.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.demdex.net *.cloudflare.com *.twitter.com *.twimg.com *.google-analytics.com *.google.com google.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.adobedtm.com *.cardinalcommerce.com *.authorize.net *.clarity.ms *.yimg.com *.googleapis.com *.appier.net https://get.geojs.io *.avada.io pagead2.googlesyndication.com *.taboola.com https://tags.srv.stackadapt.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://dis.genki.com:8700/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://js.stripe.com https://www.googletagmanager.com https://cdn.cookie-script.com https://cookie-script.com https://cdn.jsdelivr.net https://maps.google.com https://maps.googleapis.com https://connect.facebook.net https://googleads.g.doubleclick.net https://*.geoworld.mobi; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com https://www.gstatic.com https://*.geoworld.mobi; font-src 'self' data: https://fonts.gstatic.com https://*.geoworld.mobi; img-src 'self' data: https:; frame-src https://js.stripe.com https://hooks.stripe.com https://www.googletagmanager.com; connect-src 'self' https://api.stripe.com https://www.google-analytics.com https://region1.google-analytics.com https://maps.googleapis.com https://cdn.cookie-script.com https://www.google.com https://google.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://www.googletagmanager.com https://translate.googleapis.com https://ad.doubleclick.net https://*.geoworld.mobi; manifest-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri https://geoworld.mobi/csp-report 1
font-src fonts.gstatic.com use.typekit.net *.fontawesome.com *.cloudflare.com *.googleapis.com *.gstatic.com *.typekit.net *.bootstrapcdn.com *.cloudfront.net *.hotjar.com *.gerduva.lt *.dixa.io *.lupasearch.com https://fonts.bunny.net widget.dixa.io data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.twitter.com *.facebook.com *.hotjar.com *.gerduva.lt 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.twitter.com *.cloudfront.net *.hotjar.com *.gerduva.lt *.cookiebot.eu *.usercentrics.eu *.dotdigital-pages.com *.lupasearch.com https://*.every-pay.com/ https://pay.google.com/ www.youtube.com *.weltpixel.com gtm.gerduva.lt consentcdn.cookiebot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://omnisnippet1.com https://wt.soundestlink.com 'self' *.cloudflare.com *.gstatic.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.cloudfront.net *.hotjar.com *.paysera.com *.gerduva.lt *.google.lt *.bing.com *.tiktok.com *.lupasearch.com https://www.terminalmappingjs.com https://osm.venipak.com http://mano.venipak.lt https://*.every-pay.com/ *.facebook.com https://firebasestorage.googleapis.com *.googleapis.com https://maps.omnivasiunta.lt *.adobedtm.com wt.omnisendlink.com *.every-pay.eu gtm.gerduva.lt data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://omnisnippet1.com https://forms.soundestlink.com *.cloudflare.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.paypal.com *.paypalobjects.com chimpstatic.com *.ytimg.com s.adroll.com d.adroll.com d.adroll.mgr.consensu.org *.bootstrapcdn.com *.cloudfront.net *.hotjar.com *.paysera.com *.gerduva.lt gtm.gerduva.lt gerduva.lt *.cookiebot.eu *.dotdigital-pages.com *.dixa.io *.bing.com *.tiktok.com *.lupasearch.com https://unpkg.com https://*.every-pay.com/ https://pay.google.com/ s7.addthis.com *.facebook.net *.avada.io *.shopify.com *.googleapis.com www.youtube.com player.vimeo.com *.clarity.ms *.scripts.clarity.ms widget.dixa.io static.cloudflareinsights.com consent.cookiebot.com consentcdn.cookiebot.com analytics.tiktok.com pay.every-pay.eu 'unsafe-inline' https://browser.sentry-cdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.cloudflare.com *.googleapis.com *.twitter.com *.google.com *.facebook.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.bootstrapcdn.com *.cloudfront.net *.hotjar.com *.gerduva.lt *.lupasearch.com https://unpkg.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.dixa.io *.amazonaws.com *.googleapis.com widget.dixa.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cloudflare.com *.twitter.com *.facebook.com *.google.com *.paypal.com *.hotjar.com *.paysera.com *.gerduva.lt gtm.gerduva.lt *.cookiebot.eu *.dotdigital-pages.com *.dixa.io wss://sockets.dixa.io https://api.dixa.io *.omnisendlink.com sentry.io *.doubleclick.net *.tiktok.com *.bing.com *.soundestlink.com *.lupasearch.com https://www.terminalmappingjs.com https://geocode.arcgis.com ekr.zdassets.com/ *.google-analytics.com https://get.geojs.io *.avada.io *.googleapis.com *.gstatic.com cdn.plyr.io noembed.com wt.omnisendlink.com widget.dixa.io api.dixa.io consentcdn.cookiebot.com *sockets.dixa.io forms.soundestlink.com analytics.tiktok.com *.clarity.ms o4511711105056768.ingest.de.sentry.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://127.0.0.1:8080/; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self' https://maib.ecommerce.md https://maib.ecommerce.md:21443; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; font-src 'self' data:; img-src 'self' data: https:; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://connect.facebook.net https://www.facebook.com https://www.googleadservices.com https://www.google.com https://www.google.md https://ad.doubleclick.net https://td.doubleclick.net; frame-src 'self' https://www.google.com https://td.doubleclick.net 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://connect.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://*.supabase.co https://www.facebook.com https://www.google-analytics.com; font-src 'self' data:; connect-src 'self' https://*.supabase.co wss://*.supabase.co https://www.google-analytics.com https://connect.facebook.net https://vitals.vercel-insights.com; media-src 'self' https://*.supabase.co; frame-ancestors 'none'; frame-src 'none'; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /api/security/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https:; frame-ancestors 'none' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://*.ipay88.com.ph https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.facebook.net *.facebook.com https://*.ipay88.com.ph https://plumrocket.com amc.demdex.net www.facebook.com web.facebook.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io maps.googleapis.com maps.gstatic.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com www.facebook.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.gstatic.com *.facebook.net connect.facebook.net https://*.ipay88.com.ph www.google.com www.gstatic.com *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.gstatic.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://*.ipay88.com.ph www.facebook.com maps.googleapis.com https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' www.golfleaguetracker.com 'unsafe-inline' www.paypal.com www.paypalobjects.com *.googleapis.com www.googletagmanager.com *.bing.com mylivechat.com *.mylivechat.com fonts.gstatic.com *.clarity.ms js.monitor.azure.com www.google-analytics.com stats.g.doubleclick.net 'unsafe-eval' *.google.com ws://localhost:* http://localhost:* cdnjs.cloudflare.com code.jquery.com cdn.datatables.net datatables-cdn.com use.fontawesome.com *.maxcdn.com *.msecnd.net golfleaguetracker.disqus.com referrer.disqus.com *.privacymanager.io *.disquscdn.com js.stripe.com api.openweathermap.org *.visualstudio.com data:;frame-src disqus.com *.privacymanager.io  'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.google-analytics.com *.googlesyndication.com *.googleadservices.com *.doubleclick.net *.adtrafficquality.google connect.facebook.net *.google.com *.gstatic.com challenges.cloudflare.com static.cloudflareinsights.com *.stripe.com *.inbank.eu; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.gstatic.com; img-src 'self' data: blob: https:; font-src 'self' data: fonts.gstatic.com; connect-src 'self' *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.adtrafficquality.google *.facebook.com *.stripe.com *.inbank.eu cloudflareinsights.com; frame-src 'self' *.google.com *.google.lt *.youtube.com *.youtube-nocookie.com *.facebook.com challenges.cloudflare.com *.stripe.com *.inbank.eu *.googletagmanager.com *.googlesyndication.com *.googleadservices.com *.doubleclick.net *.adtrafficquality.google *.esto.lt *.tiktok.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' *.stripe.com *.inbank.eu *.facebook.com *.opay.lt 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self';  script-src 'self' 'unsafe-inline'   https://assets-cf.grannychats.com   https://www.googletagmanager.com   https://www.google-analytics.com   https://www.googletagservices.com   https://www.google.com   https://accounts.google.com   https://accounts.google.com/gsi/client   https://apis.google.com;  script-src-elem 'self' 'unsafe-inline'   https://assets-cf.grannychats.com   https://www.googletagmanager.com   https://www.google-analytics.com   https://www.googletagservices.com   https://www.google.com   https://accounts.google.com   https://accounts.google.com/gsi/client   https://apis.google.com;  connect-src 'self'   https://assets-cf.grannychats.com   https://www.googletagmanager.com   https://www.google-analytics.com   https://region1.google-analytics.com   https://stats.g.doubleclick.net   https://googleads.g.doubleclick.net   https://www.google.com   https://accounts.google.com   https://accounts.google.com/gsi/;  img-src 'self' data:   https://assets-cf.grannychats.com   https://www.googletagmanager.com   https://www.google-analytics.com   https://stats.g.doubleclick.net   https://googleads.g.doubleclick.net   https://www.google.com;  frame-src 'self'   https://accounts.google.com   https://accounts.google.com/gsi/   https://www.googletagmanager.com;  style-src 'self' 'unsafe-inline'   https://assets-cf.grannychats.com   https://accounts.google.com/gsi/style;  font-src 'self' data:   https://assets-cf.grannychats.com   https://fonts.gstatic.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.clarity.ms https://analytics.tiktok.com https://www.viator.com https://js.stripe.com; frame-src 'self' https://www.googletagmanager.com https://js.stripe.com https://accounts.google.com; img-src 'self' data: blob: https: http:; style-src 'self' 'unsafe-inline'; connect-src 'self' https://www.google-analytics.com https://*.google.com https://*.clarity.ms https://*.tiktok.com https://analytics.tiktok.com https://*.stripe.com https://*.greytt.com https://*.greytt.ai wss:; font-src 'self' https://fonts.gstatic.com 1
base-uri 'none'; connect-src 'self' https://analytics.grtc.today https://api.grtc.today https://photon.komoot.io https://*.google-analytics.com https://www.googletagmanager.com https://translate.googleapis.com https://translate-pa.googleapis.com; default-src 'none'; font-src 'self'; form-action https://www.google.com; frame-ancestors 'none'; img-src 'self' data: https://*.basemaps.cartocdn.com https://*.google-analytics.com https://www.googletagmanager.com https://translate.google.com; object-src 'none'; script-src 'report-sample' 'self' https://analytics.grtc.today https://*.google-analytics.com https://www.googletagmanager.com; style-src 'report-sample' 'self' 'unsafe-inline'; report-uri https://api.grtc.today/cspro; 1
default-src 'self'; script-src * 'unsafe-eval' rum-static.pingdom.net; script-src-elem 'self' 'unsafe-inline' rum-static.pingdom.net; script-src-attr 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; style-src-attr 'unsafe-inline'; report-uri https://97b8198850694a23d54859b4d7c65ebc.report-uri.com/r/d/csp/wizard 1
font-src *.fontawesome.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ https://*.mercadolibre.com https://td.doubleclick.net https://*.adobe.com *.mercadolibre.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://*.google.com https://*.google.com.ar https://www.afip.gob.ar secure.trust-provider.com www.facebook.com *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar *.mercadolivre.com *.gstatic.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src https://assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://live.decidir.com secure.comodo.com 'unsafe-inline' https://googleads.g.doubleclick.net https://analytics.google.com https://*.mercadopago.com sha256-JjB9AR5B8LsPf/TKvAnbJPZo0gV8TDK3FD5ufwBVVT8= *.avada.io *.mlstatic.com *.mercadopago.com *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com *.typeform.com https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://developers.decidir.com/ https://live.decidir.com https://*.google.com https://*.google.com.ar https://www.afip.gob.ar secure.trust-provider.com www.facebook.com https://get.geojs.io *.avada.io *.mercadopago.com *.mercadolibre.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com https://merchants.playdigital.com.ar/ https://merchants.preprod.playdigital.com.ar/ https://ecommerce-modal.modo.com.ar/ https://ecommerce-modal.preprod.modo.com.ar/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-w4zOTFj-ZJ8K3ilXKwxvQw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'nonce-nEqyesb4GHHclHl3jrUBxg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: blob: https:; media-src 'self' blob: https: data:; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'wasm-unsafe-eval' https://www.gstatic.com https://www.googletagmanager.com https://apis.google.com https://maps.googleapis.com https://console.thecloud.chat https://cdn.jsdelivr.net; connect-src 'self' data: https://api.hashadchan.co.il https://*.googleapis.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://*.gstatic.com https://console.thecloud.chat wss://*.thecloud.chat https://www.google.com https://apis.google.com; frame-src 'self' blob: https://matara.pro https://docs.google.com https://*.firebaseapp.com https://console.thecloud.chat https://accounts.google.com https://hashadchan-images.s3.eu-west-1.amazonaws.com https://www.google.com https://drive.google.com https://*.ravpage.co.il; worker-src 'self' blob:; manifest-src 'self'; form-action 'self' https://matara.pro; report-uri https://api.hashadchan.co.il/api/public/csp-report 1
default-src 'self'; script-src 'self' https://pagead2.googlesyndication.com; object-src 'none'; 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' hippieartesanatos.com *.hippieartesanatos.com wake-components.fbitsstatic.net hippieartesanatos.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br *.g.doubleclick.net *.hippieartesanatos.com.br *.sizebay.technology mailbiz.one *.mailbiz.one *.jsdelivr.net cdn.jsdelivr.net *.clarity.ms *.smarthint.co *.zoppy.com.br ct.pinterest.com *.pinterest.com d3eq1zq78ux3cv.cloudfront.net dxyxfi75r9rwr.cloudfront.net dg2f9wrmcq3.map.azionedge.net; frame-ancestors *.hippieartesanatos.com hippieartesanatos.com; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
default-src 'self'; script-src 'nonce-dZo0R7tuavBLwIsnUUmEeQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://static.hotjar.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https: blob:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com; frame-src 'self' https://www.youtube.com https://www.google.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://connect.facebook.net https://www.google-analytics.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://images.unsplash.com https://cdn.pixabay.com https:; font-src 'self'; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://www.facebook.com https://connect.facebook.net https:; frame-src https://www.googletagmanager.com https://www.google.com; media-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self' 1
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://humpum.ai https://a.humpum.ai https://m.humpum.ai https://d.humpum.ai https://maps.googleapis.com https://maps.gstatic.com https://www.gstatic.com https://code.jquery.com https://www.google.com/recaptcha/ https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://ajax.googleapis.com https://connect.facebook.net https://assets.calendly.com;script-src-attr 'self' 'unsafe-inline';style-src 'self' 'unsafe-inline' https://humpum.ai https://a.humpum.ai https://m.humpum.ai https://d.humpum.ai https://maps.googleapis.com https://maps.gstatic.com https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.facebook.com https://connect.facebook.net https://assets.calendly.com;img-src 'self' data: https://humpum.ai https://a.humpum.ai https://m.humpum.ai https://d.humpum.ai https://chen1.in-maa-1.linodeobjects.com https://osc1.us-ord-1.linodeobjects.com https://maps.googleapis.com https://maps.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.facebook.com https://connect.facebook.net;connect-src 'self' https://humpum.ai https://a.humpum.ai https://m.humpum.ai https://d.humpum.ai https://maps.googleapis.com https://maps.gstatic.com https://www.google.com/recaptcha/ https://cdn.jsdelivr.net https://ajax.googleapis.com https://www.facebook.com https://connect.facebook.net https://assets.calendly.com https://calendly.com;frame-src 'self' https://www.facebook.com https://www.google.com/recaptcha/ https://calendly.com;upgrade-insecure-requests;report-uri /policy/csp-violation-report;base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none' 1
default-src 'self'; script-src 'nonce-9/a9OWEON0pNLogzZU6VKw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://www.googletagmanager.com https://www.google-analytics.com https://challenges.cloudflare.com; frame-src https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://www.google-analytics.com https://pagead2.googlesyndication.com https://region1.google-analytics.com; frame-ancestors 'self'; base-uri 'self'; report-uri /api/csp-report; report-to csp 1
default-src 'self'; font-src 'self' https: data: fonts.googleapis.com; img-src 'self' https: data: images.ctfassets.net; media-src 'self' https: data: videos.ctfassets.net; object-src 'none'; script-src 'self' https: 'unsafe-eval' 'strict-dynamic' 'nonce-piom7mV+mTA8BX47tZzFEw=='; script-src-elem 'self' https: 'unsafe-eval' 'unsafe-inline' *.nr-data.net *.newrelic.com *.intercom.io *.googletagmanager.com *.cookiebot.com *.vimeo.com/* *.youtube.com; style-src 'self' https: 'unsafe-inline'; frame-src 'self' https: *.vimeo.com *.youtube.com *.kaltura.com *.googletagmanager.com; connect-src 'self' wss: *.intercom.io wss://nexus-websocket-a.intercom.io/* https://www.google-analytics.com https://www.google.com https://consentcdn.cookiebot.com https://www.consentcdn.cookiebot.com https://analytics.google.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://membersuat.b2clogin.com https://iobmembers.b2clogin.com https://region1.analytics.google.com https://region1.google-analytics.com https://bam.nr-data.net https://stats.g.doubleclick.net https://www.facebook.com https://adservice.google.com https://connect.facebook.net https://www.google.ie *.pingdom.net *.clarity.ms *.nr-data.net *.newrelic.com; report-uri https://api.honeybadger.io/v1/browser/csp?api_key=0c395212&env= 1
object-src 'none';base-uri 'self';script-src 'nonce-manoKfL_K9hZ3fUAtNBt9Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; upgrade-insecure-requests; block-all-mixed-content 1
default-src 'self'; script-src 'nonce-3GRCCjp6vjcqjLARXoqCKg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-DbQRk9/X+gWVplqZngevvA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-7t54aNVnhWxNC+oXUwb0ig==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-6uktXH2901e8EC2JgjghTA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-iS27EQvE0hjjRwrPNQi32Q==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'nonce-8e768f367a8aeb68b1648ac947760168'; script-src-elem 'self' 'nonce-8e768f367a8aeb68b1648ac947760168'; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://www.gstatic.com; style-src-elem 'self' 'unsafe-inline' https://www.gstatic.com; style-src-attr 'unsafe-inline'; img-src 'self' data: blob: https://translate.google.com https://fonts.gstatic.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' ws: wss: https://translate.googleapis.com; media-src 'self' data:; object-src 'none'; base-uri 'self'; form-action 'self' http://jestpayment.com https://jestpayment.com https://www.jestpayment.com http://localhost http://127.0.0.1; frame-ancestors 'self'; worker-src 'self' blob:; manifest-src 'self'; report-uri /csp-report 1
default-src 'self'; script-src 'nonce-thbp1vyTDJB4T5BNVDQwZw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
prefetch-src 'self' https://chat.justschool.me; script-src 'self' 'unsafe-eval' 'unsafe-inline' ; style-src 'self' 'unsafe-inline' ; connect-src https://*.creatio.com http://*.creatio.com ws://justschool-creatio.com.ua https://*.bpmonline.com wss://*.bpmonline.com:* wss://justschool-creatio.com.ua http://*.bpmonline.com 'self' https://*.facebook.com https://nominatim.openstreetmap.org https://www.googletagmanager.com https://www.facebook.com https://*.google-analytics.com ; font-src https://fonts.gstatic.com data: 'self' ; manifest-src 'self' ; worker-src 'self' blob: ; frame-src http://*.bpmonline.com 'self' http://*.creatio.com https://*.creatio.com https://*.bpmonline.com https://*.facebook.com https://www.facebook.com chat.justschool.me https://chat.justschool.me; frame-ancestors 'self' ; media-src 'self' ; object-src 'none' ; script-src-elem https://nominatim.openstreetmap.org https://connect.facebook.net https://*.google-analytics.com https://www.googletagmanager.com 'self' 'unsafe-inline' ; style-src-elem https://fonts.googleapis.com 'unsafe-inline' 'self' ; form-action 'self' ; style-src-attr 'self' 'unsafe-inline' ; script-src-attr 'unsafe-inline' 'self' ; img-src * data: ; report-uri https://justschool-creatio.com.ua/0/ServiceModel/CspViolationService.svc/SaveCspViolationData; 1
default-src 'self';     script-src  'self' 'unsafe-inline' 'unsafe-eval' *.onetrust.com https://s.yimg.jp *.smart-bdash.com                 *.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com                 *.googleadservices.com *.google.com https://googleads.g.doubleclick.net *.twitter.com                 *.facebook.net *.paygent.co.jp https://cdnjs.cloudflare.com https://std3f-s.snva.jp                 https://b99.yahoo.co.jp;     style-src   'self' 'unsafe-inline' https://googletagmanager.com https://tagmanager.google.com *.googleapis.com;     img-src     'self' *.onetrust.com https://googletagmanager.com *.googletagmanager.com *.google-analytics.com                 *.gstatic.com *.google.com https://google.com https://googleads.g.doubleclick.net                 *.facebook.com https://dyc7a1957gj3w.cloudfront.net https://b99.yahoo.co.jp data:;     font-src    'self' *.gstatic.com data:;     connect-src 'self' *.onetrust.com *.smart-bdash.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com                 *.facebook.com *.paygent.co.jp *.google.com https://ad.doubleclick.net https://apm.yahoo.co.jp                 *.ecs.us-east-2.on.aws;     frame-src   'self' *.twitter.com *.googletagmanager.com https://www.facebook.com;     frame-ancestors   'self';   1
default-src 'self'; script-src 'nonce-tDoF4a+GqCNTfy7cGDG8nw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-idTUjZ3z37e1QpZcUaHkEg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-DA4tHb5pthGUqeVCJpbUdg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-5CuiVavxYtc1oFZytWkrjg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-2cg5CApDxbOiHZ+b2wAN5Q==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
script-src 'self' http://java.sun.com/jsp/jstl/core http://java.sun.com/jsp/jstl/fmt http://tiles.apache.org/tags-tiles 'nonce-JaULXqjUhq9k8f0IcZ3NHQ==' 'wasm-unsafe-eval'; frame-src 'self' 1
default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data: blob:; font-src 'self' data:; connect-src 'self'; frame-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'nonce-o8/xMULTwZW4iqKXeAFm9A==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
object-src 'none';base-uri 'self';script-src 'nonce-S5E-17CjwSPw-JoLTOhglA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'nonce-EphQao0wPTR4l8DC4UIXJw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://*.gstatic.com *.googleapis.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://*.dpdconnect.nl *.facebook.com *.hotjar.com landofcoder.com maps.googleapis.com chart.googleapis.com www.facebook.com platform.twitter.com https://www.googletagmanager.com/ js.mollie.com *.multisafepay.com https://pay.google.com https://td.doubleclick.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://belco-prod.s3-eu-central-1.amazonaws.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://stats.g.doubleclick.net *.google.com *.google.nl https://dev.visualwebsiteoptimizer.com http://www.w3.org 'self' data: magefan.com cm.magefan.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com https://www.kippenhuis.nl https://www.plukmachine.nl http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.disqus.com https://firebasestorage.googleapis.com flagpedia.net https://www.mollie.com *.multisafepay.com https://c.clarity.ms https://c.bing.com https://cdn1.avada.io data: 'self'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com https://cdn.belco.io *.belco.io https://*.dpdconnect.nl chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.hotjar.com https://polyfill.io *.pinterest.com *.facebook.net *.facebook.com https://googleads.g.doubleclick.net *.googletagmanager.com http://dev.visualwebsiteoptimizer.com *.gstatic.com *.salesfeed.com *.leadinfo.net landofcoder.com maps.googleapis.com chart.googleapis.com connect.facebook.net twitter.com platform.twitter.com *.chimpstatic.com *.googleapis.com bam.nr-data.net bam.eu01.nr-data.net https://maps.google.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.disqus.com *.avada.io *.shopify.com js.mollie.com pay.google.com applepay.cdn-apple.com *.multisafepay.com https://pay.google.com https://www.clarity.ms https://consent.cookiefirst.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://*.googleapis.com downloads.mailchimp.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com *.multisafepay.com https://consent.cookiefirst.com 'self' 'unsafe-inline'; object-src landofcoder.com maps.googleapis.com chart.googleapis.com 'self' 'unsafe-inline'; media-src *.adobe.com cdn.belco.io http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com wss://chat.belco.io https://cdn.belco.io *.belco.io form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.hotjar.com *.cloudflare.com *.yotpo.com *.addthis.com *.salesfeed.com *.leadinfo.net *.leadinfo.com *.googleapis.com landofcoder.com maps.googleapis.com chart.googleapis.com *.g.doubleclick.net *.facebook.com https://region1.analytics.google.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io www.gstatic.com *.multisafepay.com https://t.clarity.ms https://consent.cookiefirst.com https://edge.cookiefirst.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-oNeC3UprJDhYY575ue9Ltw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'strict-dynamic' 'unsafe-eval' 'nonce-ySPa4n+LLaE8s50Nw0+r+Q=='; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' https: data:; img-src 'self' https: data: blob:; frame-src 'self' https:; manifest-src 'self' https:; media-src 'self' https: data:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self'; connect-src 'self' https: wss: blob:; upgrade-insecure-requests; report-uri https://relay-iad.sentry.insops.net/api/13/security/?sentry_key=eed8d2dc6d324ba295378228ac35a0dd&sentry_release=3134c9a35352f4204bc078a9bea6da42f9b17460&sentry_environment=prod 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://www.clarity.ms https://bat.bing.com https://sdk.mercadopago.com https://www.mercadopago.com.ar https://static.cloudflareinsights.com https://www.googleadservices.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https: blob:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://*.doubleclick.net https://www.google.com https://www.googleadservices.com https://static.cloudflareinsights.com https://www.clarity.ms https://bat.bing.com https://api.mercadopago.com https://www.mercadopago.com.ar; frame-src 'self' https://www.mercadopago.com.ar https://www.mercadopago.com https://*.doubleclick.net; object-src 'none'; base-uri 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://va.vercel-scripts.com https://vitals.vercel-scripts.com https://*.razorpay.com https://*.posthog.com https://us-assets.i.posthog.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://apis.google.com https://connect.facebook.net https://lairik.in https://*.lairik.in; connect-src 'self' https://*.googleapis.com https://*.sentry.io https://*.posthog.com https://us-assets.i.posthog.com https://*.razorpay.com https://www.googletagmanager.com https://*.google-analytics.com https://analytics.google.com https://*.firebaseapp.com https://va.vercel-scripts.com https://vitals.vercel-scripts.com wss://*.firebaseio.com https://www.google.com https://apis.google.com https://lairik.in https://*.lairik.in; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://lairik.in https://*.lairik.in; img-src 'self' blob: data: https://*.google-analytics.com https://*.googletagmanager.com https://lh3.googleusercontent.com https://www.google.com https://images.unsplash.com https://translate.google.com https://fonts.gstatic.com https://lairik.in https://*.lairik.in; font-src 'self' data: https://fonts.gstatic.com https://frontend-cdn.perplexity.ai https://lairik.in https://*.lairik.in; frame-src 'self' https://*.razorpay.com https://*.firebaseapp.com https://www.google.com/recaptcha/ https://auth.lairik.in https://*.lairik.in; worker-src 'self' blob:; 1
font-src *.fontawesome.com https://fonts.bunny.net http://fonts.gstatic.com https://maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://consentcdn.cookiebot.com https://www.salesmanago.pl https://app3.salesmanago.pl https://www.salesmanago.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://www.google.com https://www.google.es https://widgets.sociablekit.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://cdn.doofinder.com https://eu1-search.doofinder.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.google-analytics.com https://www.google.com https://widgets.sociablekit.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com https://fonts.bunny.net unsafe-inline assets.braintreegateway.com http://fonts.googleapis.com https://widgets.sociablekit.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net https://vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://eu1-search.doofinder.com https://consentcdn.cookiebot.com https://www.google-analytics.com https://www.youtube.com https://youtu.be 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'nonce-zXKJ0p7Jeyn0Rm9tsEPfuw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:; connect-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none' 1
default-src 'self'; script-src 'nonce-6gzdkCkoJgx4uVK0x83XHA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' data: *.cloudflare.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.addthis.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.clarity.ms *.credit-agricole.pl *.doubleclick.net *.facebook.com *.facebook.net *.googleapis.com *.googlesyndication.com *.liderwood.pl *.trustedshops.com cdn-cookieyes.com liderwood.com liderwood.cz liderwood.pl www.google.at www.google.be www.google.ch www.google.ci www.google.co.il www.google.co.in www.google.co.jp www.google.co.uk www.google.com.cy www.google.com.do www.google.com.ec www.google.com.hk www.google.com.tr www.google.com.ua www.google.cz www.google.de www.google.dk www.google.ee www.google.es www.google.fr www.google.hr www.google.hu www.google.ie www.google.is www.google.it www.google.lt www.google.lu www.google.lv www.google.mk www.google.nl www.google.no www.google.pl www.google.ro www.google.rs www.google.se www.google.si www.google.sk https://images.unsplash.com data.imoje.pl *.salesmanago.pl *.salesmanago.es *.salesmanago.com magefan.com cm.magefan.com *.disqus.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: *.googletagmanager.com ssl.gstatic.com www.gstatic.com www.google.ae www.google.al www.google.am www.google.ba www.google.bg www.google.by www.google.ca www.google.cg www.google.co.ao www.google.co.id www.google.co.kr www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bo www.google.com.br www.google.com.co www.google.com.eg www.google.com.fj www.google.com.gt www.google.com.kh www.google.com.lb www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ng www.google.com.ni www.google.com.np www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.tw www.google.com.vn www.google.co.th www.google.co.ug www.google.co.uz www.google.co.ve www.google.co.za www.google.dz www.google.fi www.google.ge www.google.gl www.google.gr www.google.gy www.google.iq www.google.kz www.google.la www.google.li www.google.lk www.google.md www.google.me www.google.mv www.google.pt www.google.ru www.google.sn www.google.tn www.google.tt google.com *.google.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.clarity.ms *.cloudflare.com *.cloudflareinsights.com *.doubleclick.net *.facebook.net *.googlesyndication.com *.googletagmanager.com *.salesmanago.pl *.thulium.com *.trustedshops.com cdn-cookieyes.com unpkg.com https://maps.googleapis.com https://player.vimeo.com paywall.imoje.pl sandbox.paywall.imoje.pl *.salesmanago.es *.salesmanago.com *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com tagmanager.google.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src fonts.googleapis.com *.cloudflare.com *.googletagmanager.com *.fontawesome.com https://cdn.jsdelivr.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com *.typekit.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src liderwood.pl 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.clarity.ms *.cookieyes.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.salesmanago.pl *.thulium.com *.trustedshops.com cdn-cookieyes.com www.google.at www.google.be www.google.co.jp www.google.co.uk www.google.com.do www.google.com.ec www.google.com.ua www.google.cz www.google.de www.google.dk www.google.fr www.google.hu www.google.ie www.google.is www.google.nl www.google.no www.google.pl www.google.ro www.google.se www.google.si www.google.sk https://maps.googleapis.com https://player.vimeo.com *.salesmanago.es *.salesmanago.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.googletagmanager.com *.googleapis.com www.google.ae www.google.al www.google.ba www.google.bg www.google.by www.google.ca www.google.ch www.google.co.ao www.google.co.id www.google.co.il www.google.co.in www.google.co.kr www.google.com.ar www.google.com.au www.google.com.bd www.google.com.br www.google.com.co www.google.com.cy www.google.com.eg www.google.com.fj www.google.com.gt www.google.com.hk www.google.com.lb www.google.com.mt www.google.com.my www.google.com.ng www.google.com.ph www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.vn www.google.co.th www.google.co.uz www.google.dz www.google.ee www.google.es www.google.fi www.google.ge www.google.gl www.google.gr www.google.gy www.google.hr www.google.it www.google.kz www.google.lt www.google.lu www.google.lv www.google.me www.google.pt www.google.tn www.google.tt 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; report-uri https://62c912e0-d32b-4281-b1db-4981ae297d2c.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; script-src 'nonce-gmpnY8XJ+8reHRg+bA2iQA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-OjGfdBFhHwInoUC2ZvCcJQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-RDb/6krd2vVs7/Sp6G+RRA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-1B+8i5mkTtKK6gA0aa+rsw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-bGasUuSoOr3u59FzzgpPZw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-Azn+OER/4f85Huqf0vITvg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-Ir+YhuYEPV+lCBRew+S+Cg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.criteo.com https://www.googletagmanager.com https://connect.facebook.net https://analytics.tiktok.com https://bat.bing.com https://*.clarity.ms https://static.ads-twitter.com https://googleads.g.doubleclick.net https://b99.yahoo.co.jp https://s.yimg.jp https://d.line-scdn.net https://js.hs-analytics.net https://js.hs-banner.com https://js.hs-scripts.com https://js.hscollectedforms.net https://js.usemessages.com https://hm.mieru-ca.com https://cdn-jp.pagesense.io https://cdn.ad-platform.jmty.jp https://lf-optimize-app-production.up.railway.app; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src https://gum.criteo.com https://app.hubspot.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' livo.com.br *.livo.com.br wake-components.fbitsstatic.net livo.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br *.execute-api.us-east-2.amazonaws.com device.clearsale.com.br vto.partners.api.ditto.com bsdk.api.ditto.com *.ditto.com *.bsdk.api.ditto.com apimocha.com *.fidelizarmais.com *.fidelizarmais.com.br cdn.fidelizarmais.com widget.fidelizarmais.com cdns.fidelizarmais.com *.clarity.ms *.pinimg.com *.pinterest.com *.googleadservices.com *.googlesyndication.com googleadservices.com googlesyndication.com *.auglio.com *.googleapis.com *.avis-verifies.com *.cloudflare.com *.virtooal.com *.g.doubleclick.net *.jsdelivr.net virtooal.com *.tiktok.com *.openstreetmap.org sdk.amazonaws.com unpkg.com *.youtube.com *.doubleclick.net *.hubspot.com google.com.co *.google.com.co payments.koin.com.br static.fbits.net koin-custom-conector-gateway.fbits.net koinprod.azurewebsites.net google.com.br *.google.com.br samuraiexpertsstorage.blob.core.windows.net static.hotjar.com signalr.fbits.net *.hsforms.net *.hsforms.com *.nager.at date.nager.at *.ads.linkedin.com *.crmbonus.com analytics.tiktok.com *.goldfoodservice.com.br checkout.goldfoodservice.com.br wake.crmbonus.com *.blip.ai *.crmback.io *.crmback.dev *.crmback.com *.cbstatus.net api.fbits.net *.youtube-nocookie.com *.ttwstatic.com *.hsleadflows.net js.hsleadflows.net *.msging.net *.0mn.io *.vo.msecnd.net dc.services.visualstudio.com *.dynatrace.com *.newlentes.com.br *.licdn.com *.hs-scripts.com *.hs-analytics.net *.hs-banner.com *.tiktokw.us livo-wake.s3.us-east-2.amazonaws.com *.smarthint.co; frame-ancestors *.livo.com.br livo.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
default-src 'self' 'unsafe-inline' a.imgvc.com ad.doubleclick.net adservice.google.com ade.googlesyndication.com ajax.googleapis.com analytics.twitter.com b6.im-apps.net b99.yahoo.co.jp bat.bing.com cct.google cdn.treasuredata.com cdnjs.cloudflare.com connect.facebook.net ct.pinterest.com cv.valuecommerce.com d.line-scdn.net dmp.im-apps.net flamingo.gomobile.jp googleads.g.doubleclick.net https://bosh.flamingo.gomobile.jp https://files.flamingo.gomobile.jp https://www.facebook.com https://www.googletagmanager.com itrack2.valuecommerce.com itrack2.valuecommerce.ne.jp m.youtube.com munchkin.marketo.net *.paygent.co.jp pagead2.googlesyndication.com paygent.co.jp platform.twitter.com pubsub.googleapis.com *.sitest.jp s3-ap-northeast-1.amazonaws.com s.pinimg.com sandbox.paygent.co.jp sslwidget.criteo.com static.ads-twitter.com static.criteo.net stats.g.doubleclick.net stg.flamingo.gomobile.jp sandbox.paygent.co.jp syndication.twitter.com t.co tracking.sitest.jp wcscv.valuecommerce.com wss://bosh.flamingo.gomobile.jp www.facebook.com www.google-analytics.com www.google.co.jp www.google.com www.googletagmanager.com www.googleadservices.com www.youtube.com www.lixil-online.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://files.flamingo.gomobile.jp; script-src-elem 'self' 'unsafe-inline' a.imgvc.com ad.doubleclick.net adservice.google.com ade.googlesyndication.com ajax.googleapis.com analytics.twitter.com b6.im-apps.net b99.yahoo.co.jp bat.bing.com cct.google cdn.treasuredata.com cdnjs.cloudflare.com connect.facebook.net ct.pinterest.com cv.valuecommerce.com d.line-scdn.net dmp.im-apps.net flamingo.gomobile.jp googleads.g.doubleclick.net https://bosh.flamingo.gomobile.jp https://files.flamingo.gomobile.jp https://www.facebook.com https://www.googletagmanager.com itrack2.valuecommerce.com itrack2.valuecommerce.ne.jp m.youtube.com munchkin.marketo.net *.paygent.co.jp pagead2.googlesyndication.com paygent.co.jp platform.twitter.com pubsub.googleapis.com *.sitest.jp s3-ap-northeast-1.amazonaws.com s.pinimg.com sandbox.paygent.co.jp sslwidget.criteo.com static.ads-twitter.com static.criteo.net stats.g.doubleclick.net stg.flamingo.gomobile.jp sandbox.paygent.co.jp syndication.twitter.com t.co tracking.sitest.jp wcscv.valuecommerce.com wss://bosh.flamingo.gomobile.jp www.facebook.com www.google-analytics.com www.google.co.jp www.google.com www.googletagmanager.com www.googleadservices.com www.youtube.com www.lixil-online.com; frame-ancestors https://ide.flamingo.gomobile.jp; 1
default-src 'self'; script-src 'self' https://cdn.jsdelivr.net https://www.googletagmanager.com 'unsafe-inline'; style-src 'self' https://cdn.jsdelivr.net https://use.fontawesome.com 'unsafe-inline'; img-src 'self' data: blob: https://www.googletagmanager.com https://www.google-analytics.com; font-src 'self' https://use.fontawesome.com data:; connect-src 'self' https://www.google-analytics.com; frame-src https://www.googletagmanager.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://accounts.google.com https://www.gstatic.com https://cdn.snigelweb.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https: blob:; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net https://accounts.google.com https://*.facebook.com; frame-src 'self' https://www.facebook.com https://accounts.google.com; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com 1
default-src 'self'; script-src 'nonce-kKl5Tb2uLxKqinUAywrAjQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' lojanetlab.com.br *.lojanetlab.com.br wake-components.fbitsstatic.net lojanetlab.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br api.fbits.net *.eficazmarketing.com *.reclameaqui.com.br s3.amazonaws.com cdn.jsdelivr.net eficazmarketing.com *.yviews.com.br *.yourviews.com.br service2.yourviews.com.br *.lojaconfiavel.com viacep.com.br cdn02.jotfor.ms *.jotfor.ms clarity.ms *.clarity.ms tag.goadopt.io *.goadopt.io stats.g.doubleclick.net *.g.doubleclick.net googleads.g.doubleclick.net disclaimer-api.goadopt.io td.doubleclick.net *.doubleclick.net *.google.be *.google.com.br *.googleadservices.com *.fbitsstatic.net *.com.ar *.youtube.com *.pachane.com.br *.fpcs-monitor.com.br *.localhost:5500 *.grasow.com *.com.py *.chrome-extension *.com.ec *.co.uk *.google.ca *.googleapis.com adservice.google.com google.co.jp *.google.it *.google.pt *.instagram.com *.mylabor.com.br mylabor.com.br instagram.fvix1-1.fna.fbcdn.net *.fvix1-1.fna.fbcdn.net scontent.cdninstagram.com *.cdninstagram.com *.fldb1-1.fna.fbcdn.net *.cupom.social bat.bing.com *.bing.com *.google.es plugins.soclminer.com.br graph.instagram.com *.lojanetlab.com lojanetlab.com *.conectiva.io:1:0; frame-ancestors *.lojanetlab.com.br lojanetlab.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' lojaprolab.com.br *.lojaprolab.com.br wake-components.fbitsstatic.net prolab.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br *.googleadservices.com *.g.doubleclick.net sendermail.lojaprolab.com.br; frame-ancestors *.lojaprolab.com.br lojaprolab.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' lojastemperare.com.br *.lojastemperare.com.br wake-components.fbitsstatic.net lojastemperare.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br *.enviou.com.br *.smarthint.co api.mercadopago.com paypalobjects.com gstatic.com; frame-ancestors *.lojastemperare.com.br lojastemperare.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.ckeditor.com https://cdn.quilljs.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://esm.sh https://cdn.ably.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.quilljs.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; connect-src 'self' wss: https://cdn.ably.com https://rest.ably.io https://realtime.ably.io https://api.giphy.com https://media.giphy.com https://api.spotify.com https://www.googletagmanager.com https://www.google-analytics.com; media-src 'self' https: blob:; frame-src 'self' https://open.spotify.com https://www.youtube.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self' loto6.jp;         script-src 'self' loto6.jp 'unsafe-inline' 'unsafe-hashes' www.googletagmanager.com pagead2.googlesyndication.com *.g.doubleclick.net *.google.com *.adtrafficquality.google *.twitter.com www.facebook.com connect.facebook.net b.st-hatena.com b.hatena.ne.jp;         style-src 'self' 'unsafe-inline';         connect-src 'self' loto6.jp *.google.com *.google-analytics.com *.gstatic.com *.adtrafficquality.google pagead2.googlesyndication.com *.g.doubleclick.net;         frame-ancestors 'self' *.google.com;         frame-src 'self' data: *.google.com *.adtrafficquality.google *.g.doubleclick.net pagead2.googlesyndication.com *.twitter.com www.facebook.com b.hatena.ne.jp ;         fenced-frame-src 'self' data: *.google.com *.adtrafficquality.google *.g.doubleclick.net pagead2.googlesyndication.com *.twitter.com www.facebook.com b.hatena.ne.jp ;         img-src 'self' *.google.co.jp www.googletagmanager.com pagead2.googlesyndication.com *.adtrafficquality.google *.twitter.com b.st-hatena.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.tosspayments.com https://analytics.lumo.gg https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://images.unsplash.com https://*.r2.dev https://img.lumo.gg; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://api.lumo.gg https://analytics.lumo.gg https://*.tosspayments.com https://cloudflareinsights.com; frame-src 'self' https://*.tosspayments.com https://nice.checkplus.co.kr; form-action 'self' https://nice.checkplus.co.kr; frame-ancestors 'none'; base-uri 'self'; object-src 'none'; upgrade-insecure-requests 1
default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data: bunny-cms-files-cdn-assets.mafelo.com mafelo-com-website-assets.mafelo.com;object-src 'none';script-src 'self' 'unsafe-inline' mafelo-com-website-assets.mafelo.com;script-src-attr 'none';style-src 'self' 'unsafe-inline' mafelo-com-website-assets.mafelo.com;upgrade-insecure-requests;connect-src 'self' mafelo-com-website-assets.mafelo.com *.sentry.io https://www.mafelo.com;frame-src https://www.youtube-nocookie.com https://www.youtube.com;worker-src blob:;report-uri https://o4507073493401600.ingest.de.sentry.io/api/4508100407394384/security/?sentry_key=5613a41abc2ce3b424a6abff0873bcf3 1
default-src 'self'; script-src 'self' 'nonce-zdRh//WGIqlJSST5krhvIQ==' https://cdn.acaoentreamigos.online https://connect.facebook.net https://www.googletagmanager.com https://www.google-analytics.com https://analytics.tiktok.com; style-src 'self' 'unsafe-inline' https://cdn.acaoentreamigos.online https://fonts.googleapis.com https://use.typekit.net; img-src 'self' data: https:; media-src 'self' https://cdn.acaoentreamigos.online data: blob:; font-src 'self' https://cdn.acaoentreamigos.online https://fonts.gstatic.com https://use.typekit.net data:; connect-src 'self' https://www.facebook.com https://www.google-analytics.com https://analytics.tiktok.com https://business-api.tiktok.com https://p.typekit.net; frame-src 'self' https://www.facebook.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
font-src maxcdn.bootstrapcdn.com https://pro.fontawesome.com cdn.jsdelivr.net fonts.gstatic.com cdn.almapay.com *.googleapis.com *.gstatic.com fonts.googleapis.com https://fonts.bunny.net *.alothemes.com *.magepow.com https://cdnjs.cloudflare.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.getalma.eu *.almapay.com/ *.stripe.com/ *.checkout.com/ *.adyen.com/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com bytedance: sslocal: https://player.vimeo.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com ads.tiktok.com analytics.tiktok.com analytics-ipv6.tiktokw.us *.openstreetmap.org maps.googleapis.com maps.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com flagpedia.net https://www.facebook.com https://www.google.fr www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https://vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.jsdelivr.net *.googleapis.com *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com ads.tiktok.com analytics.tiktok.com analytics-ipv6.tiktokw.us maps.googleapis.com maps.gstatic.com fonts.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com *.alothemes.com *.magepow.com https://www.google.com https://magento.com *.googlejs.com https://connect.facebook.net https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src maxcdn.bootstrapcdn.com *.adobe.com *.fontawesome.com cdn.jsdelivr.net fonts.googleapis.com https://static.klaviyo.com https://fonts.bunny.net *.alothemes.com *.magepow.com *.gstatic.com https://fonts.googleapis.com https://cdnjs.cloudflare.com unsafe-inline assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.getalma.eu *.almapay.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com ads.tiktok.com analytics.tiktok.com analytics-ipv6.tiktokw.us places.googleapis.com maps.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com www.gstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data.geopf.fr 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'nonce-AbHd0o+Ox+TZs/fZfem9wQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-j8n4hLptX/65E0YBvG+P4w==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://*.googlesyndication.com https://static.cloudflareinsights.com https://*.adtrafficquality.google; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; img-src 'self' data: https://pub-cebeba7aaab44238a67c5848c5c61386.r2.dev https://img.maplanet.net https://*.googlesyndication.com https://*.doubleclick.net https://*.google.com; connect-src 'self' https://pub-cebeba7aaab44238a67c5848c5c61386.r2.dev https://img.maplanet.net https://api.maplanet.net https://meplan-market-api.rhrlk.workers.dev https://*.googlesyndication.com https://*.doubleclick.net https://*.adtrafficquality.google; frame-src https://googleads.g.doubleclick.net https://*.googlesyndication.com https://*.adtrafficquality.google; font-src 'self' data: https://cdn.jsdelivr.net; object-src 'none'; base-uri 'self'; form-action 'self'; worker-src 'self' blob: 1
default-src 'self'; script-src 'self' cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net fonts.googleapis.com; font-src 'self' fonts.gstatic.com; img-src 'self' data:; connect-src 'self'; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; report-uri /csp-violation-report 1
font-src *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.facebook.com platform.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io https://firebasestorage.googleapis.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.google.com *.gstatic.com *.avada.io connect.facebook.net twitter.com platform.twitter.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com https://fonts.bunny.net maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com t.elasticsuite.io *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'nonce-A8KRPPOkptEkO5iglFozkw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
worker-src blob:; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com *.kxcdn.com *.fontawesome.com https://fonts.bunny.net *.smartsuppcdn.com maxcdn.bootstrapcdn.com static.payu.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * sandbox.przelewy24.pl secure.przelewy24.pl 'self' 'unsafe-inline'; frame-ancestors pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com connect.facebook.net graph.facebook.com business.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * apm.przelewy24.pl secure.payu.com merch-prod.snd.payu.com static.payu.com credit-widget-config.payu.com/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com scontent.cdninstagram.com *.kxcdn.com *.twitter.com google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com *.smartsuppcdn.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com static.przelewy24.pl www.gstatic.com gstatic.com static.payu.com credit-widget-config.payu.com/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com *.facebook.net graph.facebook.com business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com *.smartsuppchat.com *.smartsuppcdn.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com sandbox.przelewy24.pl secure.przelewy24.pl apm.przelewy24.pl secure.payu.com secure.snd.payu.com static.payu.com credit-widget-config.payu.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com google.com *.kxcdn.com *.gstatic.com *.fontawesome.com https://static.klaviyo.com https://fonts.bunny.net smartsuppcdn.com maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.smartsuppcdn.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com *.googleapis.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io wss://*.smartsupp.com *.smartsupp.com  *.smartsuppchat.com *.smartsuppcdn.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com sandbox.przelewy24.pl secure.przelewy24.pl wss://ws.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com secure.payu.com merch-prod.snd.payu.com static.payu.com credit-widget-config.payu.com/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com; script-src-elem 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; img-src 'self' data: blob: https: https://www.google.com https://www.gstatic.com https://maps.google.com https://maps.googleapis.com; media-src 'self' data: blob: https:; connect-src 'self' https://www.google-analytics.com https://api.google.com https://*.googleapis.com https://*.firebaseio.com https://identitytoolkit.googleapis.com https://securetoken.googleapis.com ws://mega-game.net wss://mega-game.net ws://mega-game.net:* wss://mega-game.net:*; frame-src 'self' https://www.google.com https://maps.google.com; frame-ancestors 'none'; form-action 'self'; base-uri 'self'; object-src 'none'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests 1
default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https://cdnapisec.kaltura.com/ https://interconnect.luks.ch;script-src 'nonce-2ff1444037d44cbfbd8d9cb8bd9a4fc7' https://MeinLUKS.ch 'self';img-src https://* 'self' blob: data:;connect-src 'self' epichttp: https://*.kaltura.com;style-src https://MeinLUKS.ch 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action 'self';media-src https://* 'self' blob:; 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com data: *.fontawesome.com *.gstatic.com 'self' data: *.hotjar.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com www.klap.cl *.multicaja.cl *.mcdesaqa.cl *.online-metrix.net https://pay.google.com https://google.com cdn.dnky.co amc.demdex.net www.google.com www.facebook.com youtube.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.googletagmanager.com td.doubleclick.net *.fls.doubleclick.net apollo-public.loyal.ink https://tracking.captain.ai/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.trackedlink.net *.ddlnk.net assets.fintoc.com https://assets.fintoc.com *.multicaja.cl *.mcdesaqa.cl *.online-metrix.net maps.gstatic.com maps.googleapis.com accounts.google.com www.facebook.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com connect.facebook.net graph.facebook.com business.facebook.com 'self' data: *.googletagmanager.com *.g.doubleclick.net *.google.com *.fls.doubleclick.net ade.googlesyndication.com *.gstatic.com *.hotjar.com *.facebook.net *.google.cl c.clarity.ms c.bing.com www.google.com.ar tracker.metricool.com *.google.com.br data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com https://rum.hlx.page *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com www.klap.cl klap.cl *.multicaja.cl *.mcdesaqa.cl *.online-metrix.net https://songbirdstag.cardinalcommerce.com cdn.dnky.co r1-t.trackedlink.net www.gstatic.com js-agent.newrelic.com bam.nr-data.net maps.googleapis.com connect.facebook.net player.vimeo.com *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com graph.facebook.com business.facebook.com https://www.google.com *.gstatic.com https://maps.googleapis.com *.googletagmanager.com *.tagmanager.google.com *.googleadservices.com *.google.com *.facebook.net *.clarity.ms tracker.metricool.com https://www.meltpizzas.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com webchat.dotdigital.com webchat.staging.dotdigital.com www.klap.cl *.multicaja.cl *.mcdesaqa.cl *.moprestamo.com *.visa.com bc.earlywarning.com *.aexp-static.com *.assets.mastercard.com *.discover.com *.discover-src.com *.discovercard.com *.googleapis.com cdn.dnky.co *.fontawesome.com *.googletagmanager.com *.cookielaw.org *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com *.gstatic.com *.tagmanager.google.com *.hotjar.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.magento-datasolutions.com *.magento-ds.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.multicaja.cl *.mcdesaqa.cl pagos-pasarela-sandbox.mcdesaqa.cl *.cybersource.com *.online-metrix.net https://api.ipify.org https://pay.google.com https://google.com maps.googleapis.com api.comapi.com bam.nr-data.net *.cookielaw.org *.mercadopago.com *.mercadolivre.com *.mercadolibre.com *.mercadolibre.com.br https://mercadopago.com.br *.mercadopago.com.br *.mlstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.hotjar.com *.hotjar.io e.clarity.ms b.clarity.ms google.com l.clarity.ms v.clarity.ms s.clarity.ms/collect https://sentinel.captain.ai/ https://api-gateway.captain.ai/ *.gstatic.com ces.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://apis.google.com https://connect.facebook.net https://www.google-analytics.com https://unpkg.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.cdnfonts.com https://stackpath.bootstrapcdn.com; font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.cdnfonts.com; img-src 'self' data: blob: https:; media-src 'self' https:; connect-src 'self' https: wss:; frame-src https://www.paytr.com https://www.google.com https://menu-online-d025c.firebaseapp.com; manifest-src 'self' blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; report-uri /api/csp-report; report-to csp-endpoint 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com v2.zopim.com embed.tawk.to *.commerce-connector.com *.flixcar.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://lapp.leanpay.hr https://app.leanpay.hr https://lapp.leanpay.si https://app.leanpay.si https://stage-app.leanpay.ro https://app.leanpay.ro *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sameday.ro c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.2performant.com *.doubleclick.net *.pinterest.com *.force.com *.facebook.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com t.themarketer.com cdn1.themarketer.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://cdn.tbibank.support v2assets.zopim.io *.google.ro *.facebook.com *.widgetwhats.com tawk.link compari.ro ct.pinterest.com *.flix360.com *.flixcar.com *.flix360.io mny.ro *.reddit.com *.redditstatic.com *.criteo.com *.creativecdn.com *.taboola.com *.cartbooster.io *.yimg.com *.bannercrowd.net *.opera.com *.bidswitch.net *.doubleclick.net *.connectad.io *.yahoo.com *.pubmatic.com *.media.net *.casalemedia.com id5-sync.com *.360yield.com *.postrelease.com *.outbrain.com *.smartadserver.com *.teads.tv *.tremorhub.com *.yieldlab.net *.1rx.io *.unrulymedia.com *.demdex.net *.agkn.com *.33across.com *.seedtag.com *.sonobi.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sameday.ro unpkg.com/map-fanbox-points@0.0.5/umd/map-fanbox-points.js https://maps.googleapis.com https://player.vimeo.com *.themarketer.com cdn1.themarketer.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.zdassets.com v2.zopim.com *.facebook.net *.facebook.com attr-2p.com *.widgetwhats.com chimpstatic.com embed.tawk.to *.jsdelivr.net *.hotjar.com *.arukereso.com *.gstatic.com *.clarity.ms *.pinimg.com *.pinterest.com *.enzuzo.com cdn-cookieyes.com *.googlesyndication.com *.commerce-connector.com *.force.com *.salesforceliveagent.com aqurate.ai *.flixcar.com *.flix360.io *.flixfacts.com popupsmart.com *.sharethis.com *.tiktok.com *.omniconvert.com *.2performant.com tagmanager.google.com mny.ro *.redditstatic.com *.criteo.com *.creativecdn.com *.taboola.com *.cartbooster.io *.yimg.com *.bannercrowd.net *.brevo.com sibautomation.com *.doubleclick.net *.tiktokw.us 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.sameday.ro t.themarketer.com cdn1.themarketer.com assets.braintreegateway.com *.googleapis.com *.widgetwhats.com embed.tawk.to *.googletagmanager.com tpc.googlesyndication.com *.cloudfront.net *.commerce-connector.com *.force.com *.popupsmart.com popupsmart.com *.flixcar.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.zdassets.com *.vimeo.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.fancourier.ro https://maps.googleapis.com https://player.vimeo.com *.themarketer.com cdn1.themarketer.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com https://ro.tbibank.support ekr.zdassets.com wss://widget-mediator.zopim.com pagead2.googlesyndication.com *.google.ro googleads.g.doubleclick.net stats.g.doubleclick.net region1.analytics.google.com *.2performant.com *.widgetwhats.com zdata-ro-bellabike.s3.eu-west-1.amazonaws.com *.tawk.to kfea.zendesk.com api.edrone.me *.pinterest.com *.clarity.ms *.commerce-connector.com *.facebook.com *.hotjar.com *.hotjar.io *.sharethis.com *.enzuzo.com *.flixcar.com *.tiktok.com *.omniconvert.com www.google-analytics.com region1.google-analytics.com *.mesteresti.ro *.reddit.com *.creativecdn.com *.yimg.com *.taboola.com *.brevo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src widget-mediator.zopim.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https://flagcdn.com https://www.facebook.com; connect-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; object-src 'none' 1
default-src 'self'; img-src 'self' data: https://cdn.metrolima.info https://*.basemaps.cartocdn.com https://*.googlesyndication.com https://*.doubleclick.net https://*.adtrafficquality.google; font-src 'self'; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googlesyndication.com https://*.doubleclick.net https://*.adtrafficquality.google https://challenges.cloudflare.com; frame-src https://*.googlesyndication.com https://*.doubleclick.net https://td.doubleclick.net https://*.adtrafficquality.google https://www.google.com https://challenges.cloudflare.com; object-src 'none'; base-uri 'self'; form-action 'self'; upgrade-insecure-requests; script-src 'self' https://www.googletagmanager.com https://pagead2.googlesyndication.com https://*.googlesyndication.com https://*.doubleclick.net https://*.googleadservices.com https://*.adtrafficquality.google https://challenges.cloudflare.com 'unsafe-inline'; style-src 'self' 'unsafe-inline'; report-to csp-endpoint; report-uri https://metrolima.info/api/csp-report; 1
base-uri 'self'; child-src 'self'; connect-src 'self'; default-src 'self'; form-action 'self'; img-src 'self'; object-src 'none'; script-src 'self' https://imagicahealth.live/helpdesk/ 'nonce-d69eeaccdcb584097ec5e48e'; style-src 'self' https://imagicahealth.live/helpdesk/; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://www.magezon.com *.midn.cl www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com *.avada.io *.google.com/ *.freshworks.com fw-cdn.com *.midn.cl js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://get.geojs.io *.avada.io *.freshworks.com fw-cdn.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https://cdnapisec.kaltura.com/ https://epcproxy.olvg.nl;script-src 'nonce-bd187d5029bf46e7833327cc09ef0ff7' https://mijnolvg.nl 'self';img-src 'self' blob: https://www.mijnolvg.nl https://www.olvg.nl;connect-src 'self' epichttp:;style-src 'nonce-bd187d5029bf46e7833327cc09ef0ff7' https://mijnolvg.nl 'self';worker-src 'self' blob:;child-src 'self' blob:;form-action 'self';media-src 'self' blob:; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com data: https://cdnjs.cloudflare.com *.googleapis.com *.googleadservices.com https://square-fonts-production-f.squarecdn.com https://d1g145x70srn7h.cloudfront.net 'self' data: https://square-fonts-production-f.squarecdn.com/ https://d1g145x70srn7h.cloudfront.net/ https://cash-f.squarecdn.com/ https://fonts.gstatic.com/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.twitter.com *.widencdn.net *.brightcove.net *.weltpixel.com https://multipay.komoju.com https://multipay.komoju.com/extras/error-reporting/ https://multipay.komoju.com/static/ www.xtento.com https://komoju.com https://hcs.komoju.com *.addthis.com https://pci-connect.squareup.com https://connect.squareup.com https://pci-connect.squareupsandbox.com https://connect.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com www.apptrian.com *.brightcove.com *.boltdns.net cdn-apac.onetrust.com contents.online.checkout.rakuten.co.jp https://komoju.com *.googleapis.com *.ggpht.com www.xtento.com cdn.xtento.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://images.unsplash.com *.hsforms.net *.hsforms.com 'self' data: https://www.gstatic.com/ https://sandbox.api.cash.app/ https://site-assets.afterpay.com/ https://sandbox.web.squarecdn.com/ https://api.cash.app/ https://web.squarecdn.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://franklin-assets.s3.amazonaws.com/ https://static.sandbox.afterpay.com/ https://static.afterpay.com/ https://static.sandbox.afterpay.com/logo/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de www.apptrian.com *.brightcove.com *.brightcove.net *.zencdn.net cdn-apac.onetrust.com connect.facebook.net tags.tiqcdn.com visitor-service-ap-east-1.tealiumiq.com https://statics.a8.net *.googleapis.com *.googleadservices.com https://multipay.komoju.com https://multipay.komoju.com/extras/error-reporting/ https://multipay.komoju.com/static/ unpkg.com www.xtento.com cdn.xtento.com yubinbango.github.io chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://maps.googleapis.com https://player.vimeo.com s7.addthis.com https://hcs.komoju.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.hsforms.net *.hsforms.com *.gstatic.com https://js-sandbox.squarecdn.com https://js.squareup.com https://js.afterpay.com/ https://nd.squarecdn.com https://js.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://portal.sandbox.afterpay.com/ https://portal.afterpay.com/ https://cdn.plaid.com/ https://sandbox.kit.cash.app/ https://kit.cash.app/ https://js-sandbox.squarecdn.com/ https://js.squarecdn.com/ https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-eval' 'nonce-MTB0MWd1ZWdzNnJsbWprMTJyMmo2NHYyZnBhb3JrbGo=' 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY/CkTMBhjNhwPvglpYumjx31B4fjkY8=' 'sha256-D6wr/V4zf0wICx8qLHYrEuk00YqoT0v0P5u4l7d9gJo=' 'sha256-y/m8tiGdNafk8fTNBcM7uFhNPqoHmIbSplulIsxrYBg=' 'sha256-tbtkYx+tDXxC7v+oBDMbbqHzJVyTpMCRB1yz9U0u4WI=' 'sha256-ItVBtPByqU/BYg5llYVl2pIgEh4yL54sUfFfV/WkNv0=' 'sha256-55FpLXhXpsT7OOQzv67Ee0FZKVGyBCTy6sME7py6oVY=' 'sha256-PGlju6dM4qSddHAavQyzF+jz0aXNh9hZBA7lEM4rN5w=' 'sha256-6F+WCMd46iCpdUUUJZDqbt7P0iqEXp5H3lDES+lnl4I=' 'sha256-rDcNGJYtZsYqn7KM4kUrUdlcl3Zux0m44a899ZJPL5o=' 'sha256-IZ3/fCVTrJWqJIc50xMCB0fstymO94hRQGvHh9Lu7Yg=' 'sha256-2MSeRjUjhYl2oo9+QeXatwMN0gtF5uNg6lgE/OI3Vys='; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://cdnjs.cloudflare.com https://multipay.komoju.com/static/shared.css *.gstatic.com *.googleapis.com *.googleadservices.com downloads.mailchimp.com https://web.squarecdn.com https://sandbox.web.squarecdn.com https://cdn.jsdelivr.net https://sandbox.kit.cash.app/ https://kit.cash.app/ https://fonts.googleapis.com/ tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de www.apptrian.com *.brightcove.com *.boltdns.net *.akamaihd.net cdn-apac.onetrust.com www.facebook.com tags.tiqcdn.com collect.tealiumiq.com visitor-service-ap-east-1.tealiumiq.com *.googleapis.com *.googleadservices.com https://komoju.com data: blob: yubinbango.github.io form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://maps.googleapis.com https://player.vimeo.com ekr.zdassets.com/ t.elasticsuite.io *.hsforms.net *.hsforms.com https://pci-connect.squareup.com https://pci-connect.squareupsandbox.com https://connect.squareup.com https://connect.squareupsandbox.com https://api.amplitude.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://o160250.ingest.sentry.io/ https://api.lab.amplitude.com/sdk/vardata https://sandbox.plaid.com/ https://production.plaid.com/ https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' mimeria.com.br *.mimeria.com.br wake-components.fbitsstatic.net mimeria.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br *.googleadservices.com *.g.doubleclick.net *.googleads.com *.ebit.com.br *.googlesyndication.com stats.g.doubleclick.net imgs.ebit.com.br hits-banner-cloud-function.azurewebsites.net *.googleads.g.doubleclick.net *.tpc.googlesyndication.com *.smarthint.co conectiva.io sunset.systems cartstack.com.br *.conectiva.io *.sunset.systems *.cartstack.com.br *app.cartstack.com *.performa.ai *.cupom.social *.conectiva.app app.conectiva.io vm.conectiva.io conectiva.app api.performa.ai valid.performa.ai app.cartstack.com.br api.cartstack.com.br api.sunset.systems cupom.social app.cupom.social cdn.performa.ai connect.facebook.net google.com.br *.google.com.br *.doubleclick.net td.doubleclick.net translate.googleapis.com *.googleapis.com *.com.py google.com.py accounts.google.com analytics.tiktok.com *.tiktok.com *.posclick.dinamize.com receiver.posclick.dinamize.com *.emkt.dinamize.com *.stapecdn.com *.mimeria.com.br *.hotjar.com *.trustvox.com.br trustvox.com.br *.lightwidget.com *.crmbonus.com src.mastercard.com assets.mastercard.com; frame-ancestors *.mimeria.com.br mimeria.com.br; report-uri https://pub-csp.fbits.net/04cccdbe-5953-4885-981e-f256256fda6a; report-to csp-endpoint; worker-src 'self' blob:; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.zopim.com *.zopim.io *.fontawesome.com 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.twitter.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es https://www.youtube.com http://www.sandbox.paypal.com *.twitter.com cdn.dnky.co webchat.dotdigital.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com 'self' data: *.bing.com *.zopim.com *.zopim.io *.doubleclick.net *.google.lt *.google.com *.google.co.in *.mastercard.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.gstatic.com https://maps.omnivasiunta.lt 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com js.authorize.net jstest.authorize.net js.braintreegateway.com cdn-scripts.signifyd.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bing.com *.zopim.com *.zdassets.com *.google.com *.google.lt r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net cdn.dnky.co api.comapi.com webchat.dotdigital.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.googletagmanager.com *.doubleclick.net *.avada.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.fontawesome.com *.bing.com cdn.dnky.co webchat.dotdigital.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.zopim.com *.zopim.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es www.google-analytics.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.zdassets.com *.zopim.com *.zopim.io wss://widget-mediator.zopim.com *.google-analytics.com https://stats.g.doubleclick.net r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net api.comapi.com webchat.dotdigital.com *.google.com https://get.geojs.io *.avada.io https://geocode.arcgis.com 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; base-uri 'none'; report-uri https://o225139.ingest.us.sentry.io/api/4508413968973824/security/?sentry_key=d470f887ca7cad3517dfc80c0b6dd0cc&sentry_environment=PRODUCTION; script-src 'unsafe-eval' 'strict-dynamic' 'report-sample' 'unsafe-hashes' 'sha256-lo7ZdP6kFds+wf1WMWvn7MhcFVFJV44kAXODRevzRZ8=' 'sha256-rRMdkshZyJlCmDX27XnL7g3zXaxv7ei6Sg+yt4R3svU=' 'sha256-kbHtQyYDQKz4SWMQ8OHVol3EC0t3tHEJFPCSwNG9NxQ=' 'nonce-QHzYSpPQxx91LJUpzHvdQQ==' 1
connect-src 'self' https://stats.g.doubleclick.net https://www.ina.hr https://*.doubleclick.net https://checkoutshopper-test.adyen.com/ https://www.facebook.com api.salesforce.com https://mol--c.visualforce.com https://*.googleapis.com http://sutaz.slovnaftmove.sk https://*.api.salesforce.com https://www.molmove.hu https://moluat-mol.cs173.force.com https://jatek.molmove.hu https://www.youtube.com https://pwgapp.freshcorner.hr https://www.loteria.molmove.pl https://cloud.mail.loyaltyteam.com https://bid.g.doubleclick.net https://mol.si https://fonts.googleapis.com/css2 *.amazonaws.com https://mol.my.salesforce-scrt.com https://core.iprom.net https://app.arcade.software wss://*.slack-gov-dev.com https://soutez.molmove.cz wss://api.salesforce.com https://dc.services.visualstudio.com https://*.googletagmanager.com http://fra-col.eum-appdynamics.com https://vyhody.molmove.cz cdn.appdynamics.com https://ade.googlesyndication.com https://iprom.net https://*.google-analytics.com https://cdn.cbweb.code-builder.platform.salesforce.com https://*.analytics.google.com molgogen2dev.b2clogin.com www.molserbia.rs https://payments.salesforce.com/ https://www.googleadservices.com https://promofresh.molmove.ro https://www.paypal.com https://mol--c.documentforce.com https://pwgapp.molmove.cz https://pwgapp.molmove.pl wss://*.slack.com https://*.gstatic.com https://googleads.g.doubleclick.net https://sutaz.slovnaft.sk https://*.google.com https://nagradnaigra.molmove.si https://demo.arcade.software https://checkoutshopper-live.adyen.com/ https://*.adnxs.com https://image.mail.molmove.com https://pwgapp.molmove.hu https://*.loyaltyteam.com https://connect.facebook.net molmove.pl https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/ https://slovnaft-nasa.esx.sk https://nagradnaigra.molmove.rs appdynamics.com https://*.googlesyndication.com wss://*.api.salesforce.com https://www.google.com/recaptcha/ https://image.s50.sfmc-content.com https://www.sandbox.paypal.com https://js.stripe.com/ https://o11y.sfproxy-core1.sfdc-cehfhs.svc.sfdcfc.net/ui-telemetry https://molserbia.rs https://nagradna.freshcorner.hr https://www.google-analytics.com https://inaloyaltynagradna.com *.salesforce.com *.api.salesforce.com wss://*.slack-gov.com; report-to sfdc-csp-ep; report-uri https://mol.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D3X000002NQ3S&networkId=0DM7S000000KyjC&type=communities 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com data: *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://widgets.trustedshops.com https://integrations.etrusted.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.facebook.com *.googlesyndication.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.doubleclick.net *.facebook.com *.googlesyndication.com secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com *.dotdigital-pages.com *.dotdigital.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com *.trackedlink.net *.ddlnk.net *.klarna.com *.klarnaevt.com *.klarnacdn.net https://firebasestorage.googleapis.com https://api.mapbox.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://widgets.trustedshops.com https://integrations.etrusted.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com widget.freshworks.com m2epro.freshdesk.com jsd-widget.atlassian.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal *.klarna.com *.klarnacdn.net *.klarnaservices.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com https://widgets.trustedshops.com https://integrations.etrusted.com www.xtento.com cdn.xtento.com https://www.mondesi.de 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com widget.freshworks.com m2epro.freshdesk.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com https://widgets.trustedshops.com https://integrations.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com widget.freshworks.com m2epro.freshdesk.com jsd-widget.atlassian.com api-private.atlassian.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com autocomplete2.postdirekt.de places.googleapis.com *.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.cloudflare.com 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net *.twitter.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com *.twitter.com *.weltpixel.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com *.rimax.com.co *.salesmanago.pl *.gstatic.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com js.authorize.net jstest.authorize.net js.braintreegateway.com cdn-scripts.signifyd.com www.youtube.com *.salesmanago.pl https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.cloudflare.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.salesmanago.pl 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; block-all-mixed-content; default-src 'self'; form-action 'self'; frame-ancestors 'self'; plugin-types 'none'; script-src 'self' 'report-sample' 'unsafe-inline'; style-src 'self' 'report-sample' 'unsafe-inline'; object-src 'none'; worker-src 'none'; report-uri https://prod.ap.batic.cudasvc.com/xenios/api/v1/error/report??paid=151&spid=15379&v=v1.0&payload=LsqRCwGhVLNr-SHL__TULgYbG_wtaFqSHTX9bzX5Gje9NFv7YGCT_pxxahb2Xopcgu5ljdHVpxkQgfI0OPiZTajdYA_aZhjQM_ZpHdsikXNOyPNIrjODw4m75BKpz7dN-8czDUwZjOjWOzUPDwDQ3mFBklT87BTPyyAR9liG8r8Scf39mLyQ_yqVXwGClkhcvsfo5nyXW74RucUih_fPyw==; 1
report-uri /csp-reports/; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com fonts.googleapis.com *.google.com *.fontawesome.com https://cdnjs.cloudflare.com https://applepay.cdn-apple.com 'self' data: fonts.axept.io data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.payplug.com *.dalenys.com https://applepay.cdn-apple.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net api.payplug.com cdn.payplug.com ct.pinterest.com www.facebook.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com *.google.fr *.imgix.net cl.avis-verifies.com *.jeujouet.com *.doofinder.com https://secure-magenta.dalenys.com *.hsforms.net *.hsforms.com 'self' data: *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com *.g.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.jeujouet.com stats.g.doubleclick.net *.google.fr pagead2.googlesyndication.com *.googletagmanager.com *.google-analytics.com *.axept.io connect.facebook.net s.pinimg.com *.pinterest.com analytics.webgains.io apicit.net ai.trk42.net *.container.webgains.link *.imgix.net https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ *.doofinder.com https://cdnjs.cloudflare.com https://secure-magenta.dalenys.com https://applepay.cdn-apple.com api.payplug.com cdn.payplug.com *.hsforms.net *.hsforms.com https://static-sb.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net 'unsafe-inline' cdn.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.google.com *.fontawesome.com *.doofinder.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://secure-magenta.dalenys.com *.googleapis.com *.gstatic.com *.tagmanager.google.com *.googletagmanager.com fonts.axept.io 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com maps.googleapis.com fonts.googleapis.com *.jeujouet.com stats.g.doubleclick.net *.google.fr pagead2.googlesyndication.com *.googletagmanager.com *.axept.io static.axept.io connect.facebook.net s.pinimg.com *.pinterest.com analytics.webgains.io apicit.net ai.trk42.net *.container.webgains.link *.imgix.net *.doubleclick.net https://widgets.rr.skeepers.io/ https://api-product-reviews.cxr.skeepers.io/ https://cl-ppr.rr.skeepers.io/ https://cl-pbr.cxr.skeepers.io/ *.doofinder.com wss://*.doofinder.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.run.app social-sb.com api.payplug.com cdn.payplug.com *.g.doubleclick.net *.pagead2.googlesyndication.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-iT3XzpXhFc3a3vGyYlK7Kw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 1
base-uri 'none'; default-src 'none'; object-src 'none'; script-src 'self' https://*.js.stripe.com https://js.stripe.com consent.cookiefirst.com https://*.googletagmanager.com https://static.hotjar.com https://script.hotjar.com 'nonce-JAE1j+m5WGu/+lCz3ONzhw=='; connect-src 'self' https://s3-eu-west-1.amazonaws.com/assets.my.tvha.co.uk/font.css consent.cookiefirst.com edge.cookiefirst.com api.cookiefirst.com www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://api.stripe.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com; img-src 'self' data: https://mtvh-formio-stage.s3.eu-west-2.amazonaws.com https://mtvh-formio-prod.s3.eu-west-2.amazonaws.com https://*.stripe.com consent.cookiefirst.com www.googletagmanager.com https://*.google-analytics.com https://*.googletagmanager.com https://static.hotjar.com https://script.hotjar.com https://survey-images.hotjar.com; style-src 'self' consent.cookiefirst.com 'sha256-/TH2J4ADy16MMQkBGTgUHngbsfb+cbhg46NDE9IAUKw=' https://static.hotjar.com https://script.hotjar.com 'nonce-JAE1j+m5WGu/+lCz3ONzhw=='; font-src 'self' https://*.hotjar.com; frame-ancestors 'self'; frame-src 'self' https://*.js.stripe.com https://js.stripe.com https://hooks.stripe.com; form-action 'self'; report-uri https://appsignal-endpoint.net/logs?api_key=ls-22a1f705-5e15-439f-a9bc-a6a53a13198e&group=mtvh-online 1
default-src 'self'; script-src 'nonce-1G9fd86BG27ddgd3/5aiVA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' *.facebook.com *.csob.cz *.gpwebpay.com *.muzo.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.googleapis.com *.gstatic.com *.google.com *.google.cz www.recaptcha.net *.googleadservices.com *.googlesyndication.com *.googletagservices.com *.doubleclick.net *.seznam.cz *.imedia.cz im9.cz *.im9.cz *.zbozi.cz *.heureka.cz *.heureka.group *.facebook.com *.facebook.net *.linkedin.com *.licdn.com *.pinterest.com *.pinimg.com platform.twitter.com *.ads-twitter.com analytics.twitter.com *.youtube.com *.youtube-nocookie.com *.ytimg.com *.hotjar.com *.hotjar.io *.searchready.cz ppl-widget2.apidog.io *.ppl.cz *.tiny.cloud *.tinymce.com; style-src 'self' 'unsafe-inline' *.googleapis.com *.gstatic.com *.googletagmanager.com *.tiny.cloud *.tinymce.com; img-src 'self' data: blob: https:; font-src 'self' data: *.gstatic.com *.googleapis.com *.tiny.cloud *.tinymce.com; connect-src 'self' api.mapy.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.googleapis.com *.gstatic.com *.google.com *.google.cz *.googleadservices.com *.googlesyndication.com *.doubleclick.net *.seznam.cz *.imedia.cz *.im9.cz *.zbozi.cz *.heureka.cz *.heureka.group *.facebook.com *.facebook.net *.linkedin.com *.licdn.com *.pinterest.com *.hotjar.com *.hotjar.io *.searchready.cz ppl-widget2.apidog.io *.ppl.cz *.tiny.cloud; frame-src 'self' *.youtube.com *.youtube-nocookie.com *.google.com *.googletagmanager.com *.doubleclick.net *.googlesyndication.com *.seznam.cz *.imedia.cz *.im9.cz *.zbozi.cz *.heureka.cz *.facebook.com *.pinterest.com platform.twitter.com ppl-widget2.apidog.io *.ppl.cz *.csob.cz *.gpwebpay.com *.muzo.com *.tiny.cloud; child-src 'self' *.youtube.com *.youtube-nocookie.com *.google.com *.facebook.com ppl-widget2.apidog.io *.ppl.cz *.csob.cz *.gpwebpay.com; worker-src 'self' blob:; media-src 'self' data: blob: https:; manifest-src 'self'; report-uri /csp-report.php 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' https: data: blob:; object-src 'none'; base-uri 'self'; form-action 'self'; 1
default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https://cdnapisec.kaltura.com/ https://eprescribing.accesscommunityhealth.net https://paymentsafe.experianhealth.com;script-src 'nonce-9695764a69a94d13b5789a0b061ef369' https://www.myaccesshealth.net 'self';img-src https://* 'self' blob: data:;connect-src 'self' epichttp: https://*.kaltura.com;style-src https://www.myaccesshealth.net 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https://cdnapisec.kaltura.com/ https://epicproxy.et1123.epichosted.com https://paymentsafe.experianhealth.com;script-src 'nonce-db79a6d1238a4482b6c02b2106863e86' https://www.myaltamed.net 'self';img-src https://* 'self' blob: data:;connect-src 'self' epichttp: pageguard.feroot;style-src https://www.myaltamed.net 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
default-src 'self'; script-src 'self' 'nonce-CSPPhase1Placeholder' 'strict-dynamic'; style-src 'self' 'nonce-CSPPhase1Placeholder'; img-src 'self' data: blob:; font-src 'self' data:; connect-src 'self'; worker-src 'self' blob:; object-src 'none'; frame-src 'self'; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; report-uri /Public/Handlers/CspReport.ashx; 1
default-src 'self';base-uri 'self';frame-ancestors 'self' https://bowdlehc.com https://freemanregional.com https://lakeshealth.org https://nwiasurgeons.com https://rhshc.com https://www.accesshealth.net https://www.avera.org https://www.averahealthplans.com https://www.brookingshealth.org https://www.floydvalley.org https://www.hegghc.org https://www.hendrickshosp.org https://www.nwiabone.com https://www.osceolarhc.org https://www.pipestonehealth.org https://www.redfieldcmh.org https://www.siouxcenterhealth.org https://www.spencerhospital.org https://www.surgicalinstitute.com;frame-src 'self' epichttp: https://*.kaltura.com https://apps-staging.healthcare.elsevier.com https://apps.healthcare.elsevier.com https://epic.gateway.patientco.com https://epic.integration.gateway.patientco.com https://epicproxy-np.et1439.epichosted.com https://epicproxy.et1439.epichosted.com https://epicproxy.et1439.epichosted.com/FHIRProxyPRD/api/FHIR/R4 https://patientpass-staging.healthcare.elsevier.com https://patientpass.healthcare.elsevier.com https://www.youtube.com;script-src 'nonce-80de03ecdb9b467c8af98a519683c1fc' https://mychartconnectsites.org 'self';img-src https://* 'self' blob: data:;connect-src 'self' epichttp:;style-src https://mychartconnectsites.org 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.gstatic.com *.morningstar.com https://www.google.com https://code.jquery.com https://hcaptcha.com https://*.hcaptcha.com https://ajax.googleapis.com https://cdnjs.cloudflare.com https://cdn.polyfill.io; connect-src 'self' *.morningstar.com; img-src 'self' data: *.morningstar.com *.davy.ie https://www.google.com https://www.google.ie https://d6tizftlrpuof.cloudfront.net; font-src 'self' data: https://fast.fonts.net https://fonts.gstatic.com *.morningstar.com https://cdnjs.cloudflare.com https://use.fontawesome.com https://d6tizftlrpuof.cloudfront.net; base-uri 'self' https://d6tizftlrpuof.cloudfront.net https://d6tizftlrpuof.cloudfront.net; style-src 'self' 'unsafe-inline' *.jsdelivr.net https://fast.fonts.net *.morningstar.com https://use.fontawesome.com https://d6tizftlrpuof.cloudfront.net *.googleapis.com; form-action 'self'; frame-src https://*.hcaptcha.com; manifest-src 'self'; report-uri /api/csp/violationReport; 1
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/  https://widget.trustpilot.com;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://appleid.cdn-apple.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com *.myheritage.gr https://www.myheritage.gr  'unsafe-eval' 'nonce-5fc4ae8bfcffd309687822e53e100763' 'strict-dynamic' https://widget.trustpilot.com https://invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style  https://widget.trustpilot.com;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io https://www.google.com/recaptcha/enterprise/* https://www.google.com/recaptcha/enterprise/ https://www.google.com/recaptcha/enterprise/clr https://www.google.com/recaptcha/ https://maps.googleapis.com https://people.googleapis.com https://translate-pa.googleapis.com *.myheritage.gr https://widget.trustpilot.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:  https://widget.trustpilot.com https://*.trustpilot.com;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=report&canonical_page_id=/company/home/ 1
default-src blob: https://*.mhcache.com;font-src 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.gstatic.com;frame-src 'self' https://*.mhcache.com https://portal.allyable.com https://mh-site-files-5c53d6a9947c.s3.amazonaws.com https://myheritage-container.com https://www.myheritage-partners.com https://www.myheritage.com https://*.mk-sense.com https://player.vimeo.com https://*.facebook.com https://*.google.com https://tpc.googlesyndication.com https://*.doubleclick.net https://accounts.google.com/gsi/ https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/  https://widget.trustpilot.com;script-src https://accounts.google.com/gsi/client https://www.datadoghq-browser-agent.com https://appleid.cdn-apple.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://maps.googleapis.com *.myheritage.sk https://www.myheritage.sk  'unsafe-eval' 'nonce-b984b55b63599af1e52530f706aa8f92' 'strict-dynamic' https://widget.trustpilot.com https://invitations.trustpilot.com;style-src data: blob: 'unsafe-inline' 'self' https://*.myheritage.com https://*.mhcache.com https://fonts.googleapis.com https://accounts.google.com/gsi/style  https://widget.trustpilot.com;connect-src data: 'self' https://*.myheritage.com https://portal.allyable.com https://*.mhcache.com https://adservice.google.com https://*.logs.datadoghq.com https://*.browser-intake-datadoghq.com https://browser-intake-datadoghq.com https://sentry.io https://*.bing.com https://*.facebook.com https://*.doubleclick.net https://*.mk-sense.com https://*.filae.com https://accounts.google.com/gsi/ https://www.google.com/pagead/landing https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://translate.googleapis.com https://www.google.com/ccm/collect https://cdn.builder.io https://www.google.com/recaptcha/enterprise/* https://www.google.com/recaptcha/enterprise/ https://www.google.com/recaptcha/enterprise/clr https://www.google.com/recaptcha/ https://maps.googleapis.com https://people.googleapis.com https://translate-pa.googleapis.com *.myheritage.sk https://widget.trustpilot.com;media-src 'self' https://*.myheritage.com https://*.mhcache.com;frame-ancestors 'self' https://builder.io;img-src * data:  https://widget.trustpilot.com https://*.trustpilot.com;object-src 'none';base-uri 'self' https://*.mhcache.com;report-uri /FP/API/ContentSecurityPolicy/report-violation.php?report_mode=report&canonical_page_id=/company/home/ 1
default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://kit.fontawesome.com/ https://js.monitor.azure.com https://ajax.googleapis.com https://*.google.com https://www.gstatic.com https://*.kubra.com https://*.apogee.net https://js.braintreegateway.com https://*.paypal.com; style-src 'self' 'unsafe-inline' https://*.kubra.com https://fonts.googleapis.com; img-src * 'self' data:; font-src * 'self' data:; connect-src *; frame-src https://*.apogee.net https://*.google.com https://*.paypal.com; report-uri /csp/report 1
default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https://*.kaltura.com https://epicproxy.et1220.epichosted.com https://premier.trustcommerce.com;script-src 'nonce-eb728a4a6b664f5f9196c613d062fee4' 'self';img-src https://* 'self' blob: data:;connect-src 'self' epichttp: https://*.app.st-1220.epiccloud.io https://*.kaltura.com https://mychart-mychart-chat-mediator.app.st-1220.epiccloud.io https://static-map-tiles-api.arcgis.com https://us-api.experian.com/decisionanalytics/crosscore/npb2hjhva2fa/services/v0/applications/3 https://www.google.com/recaptcha/enterprise.js wss://*.webpubsub.azure.com;style-src 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
default-src 'none'; script-src 'self' https://*.typekit.net/ https://*.clarity.ms/ https://www.googletagmanager.com/ https://www.google-analytics.com/ https://*.googleapis.com/ https://*.gstatic.com/ https://seal.thawte.com/ https://secure.bluepay.com https://seal.digicert.com/ https://www.safewayxchange.com/ 'unsafe-inline' 'unsafe-eval'; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.clarity.ms/ https://stats.g.doubleclick.net; img-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://dev.virtualearth.net/ data: https://seal.digicert.com https://www.google.com; style-src 'self' 'unsafe-inline' https://*.typekit.net/ https://fonts.googleapis.com/ https://*.gstatic.com; font-src 'self' https://*.typekit.net/ https://fonts.gstatic.com/ https://fonts.googleapis.com/; frame-src 'self' https://secure.bluepay.com https://www.safewayxchange.com/; object-src 'self'; media-src 'self' https://www.google-analytics.com/; manifest-src 'self'; frame-ancestors 'self'; report-uri https://08bfb48ddcee7d64057e88503ec1149f.report-uri.com/r/t/csp/reportOnly 1
default-src 'self';base-uri 'self';frame-ancestors 'self';frame-src 'self' epichttp: https://cdnapisec.kaltura.com/ https://intconfg-p.well-net.org https://patient.health-ce.wolterskluwer.com https://patientpass-staging.healthcare.elsevier.com/ https://patientpass.healthcare.elsevier.com https://pay.instamed.com;script-src 'nonce-5789ed5e0a7f4d0c98108272a97bdbe3' https://mychart-p.well-net.org 'self';img-src https://* 'self' blob: data:;connect-src 'self' epichttp:;style-src https://mychart-p.well-net.org 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self' apps-staging.healthcare.elsevier.com apps.cert.healthcare.elsevier.com blue-ocean-0ed0aab0f-poc.eastus2.1.azurestaticapps.net blue-ocean-0ed0aab0f-test.eastus2.1.azurestaticapps.net blue-ocean-0ed0aab0f.1.azurestaticapps.net customer.staging.curaihealth.com https://mychart-np.et4084.epichosted.com https://mychart-np.well-net.org https://tuftsmedauth.azurewebsites.net https://tuftsmedicinestg.prod.acquia-sites.com localhost:5115 mychart-np.et4084.epichosted.com mychart-np.well-net.org tufts-staging.clearstep.health tuftsmedauth.azurewebsites.net tuftsmedicinestg.prod.acquia-sites.com;media-src https://* 'self' blob:; 1
default-src 'self'; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://www.google.com https://www.gstatic.com https://www.recaptcha.net; connect-src 'self' https: wss:; frame-src 'self' https://www.google.com https://www.gstatic.com https://www.recaptcha.net; frame-ancestors 'self'; base-uri 'self' 1
default-src 'self'; object-src 'none'; base-uri 'self'; 1
font-src fonts.gstatic.com use.typekit.net *.gstatic.com 'self' data: *.cloudflare.com *.typekit.net *.trustedshops.com *.usercentrics.eu data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ *.paypal.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.hsforms.net *.hsforms.com 'self' data: maps.gstatic.com *.cloudfront.net https://cdn.klarna.com *.paypal.com https://s.ytimg.com *.usercentrics.eu data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.hsforms.net *.hsforms.com www.google.com *.gstatic.com maps.googleapis.com *.cloudflare.com *.typekit.net *.trustedshops.com *.usercentrics.eu www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.gstatic.com *.cloudflare.com getfirebug.com *.yotpo.com *.typekit.net *.trustedshops.com *.usercentrics.eu data: 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com *.adobe.io performance.typekit.net *.sentry.io t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.cloudflare.com *.paypal.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.google-analytics.com https://connect.facebook.net https://snap.licdn.com https://*.visualwebsiteoptimizer.com https://plausible.io https://accounts.google.com https://apis.google.com https://cdn.jsdelivr.net; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src * data: blob:; font-src 'self' data: https://fonts.gstatic.com; media-src 'self' blob: https:; connect-src 'self' https://*.google-analytics.com https://*.googletagmanager.com https://*.visualwebsiteoptimizer.com https://plausible.io https://api.openpanel.dev https://openpanelapi.neoskola.com https://video.neoskola.net https://*.cloudflarestream.com https://*.herokuapp.com https://*.facebook.com https://px.ads.linkedin.com wss:; frame-src 'self' https://embed.cloudflarestream.com https://player.vimeo.com https://www.youtube.com https://accounts.google.com https://www.facebook.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://static.cloudflareinsights.com https://unpkg.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://unpkg.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://cloudflareinsights.com https://static.cloudflareinsights.com https://stats.g.doubleclick.net https://*.google-analytics.com https://*.analytics.google.com https://*.clarity.ms; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com; object-src 'none'; base-uri 'none'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'nonce-Q8wn2M1aEL7upckg2CiVQw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src  'self' blob: https://*.google.com https://*.youtube.com https://*.gstatic.com https://*.googlesyndication.com https://*.doubleclick.net https://clients3.google.com https://mtalk.google.com https://android.clients.google.com https://accounts.google.com https://ssl.gstatic.com https://www.gstatic.com https://dl.google.com https://redirector.gvt1.com https://edgedl.me.gvt1.com https://clientservices.googleapis.com https://beacons.gcp.gvt2.com https://beacons.gvt2.com https://beacons3.gvt2.com https://*.apple.com https://updates.cdn-apple.com https://gs-loc-bundle.apple.com https://configuration.apple.com https://xp.apple.com https://its-presence.apple.com https://p58-buy.itunes.apple.com https://bag.itunes.apple.com https://play.google.com https://*.clarity.ms https://www.googletagmanager.com https://mec-chat.com https://yubinbango.github.io https://ajaxzip3.github.io https://script.kujira-a.co.jp 'nonce-4kVVUhUjmcju5tCC1s97SQ=='; script-src-elem 'self' blob: https://*.google.com https://*.youtube.com https://*.gstatic.com https://*.googlesyndication.com https://*.doubleclick.net https://clients3.google.com https://mtalk.google.com https://android.clients.google.com https://accounts.google.com https://ssl.gstatic.com https://www.gstatic.com https://dl.google.com https://redirector.gvt1.com https://edgedl.me.gvt1.com https://clientservices.googleapis.com https://beacons.gcp.gvt2.com https://beacons.gvt2.com https://beacons3.gvt2.com https://*.apple.com https://updates.cdn-apple.com https://gs-loc-bundle.apple.com https://configuration.apple.com https://xp.apple.com https://its-presence.apple.com https://p58-buy.itunes.apple.com https://bag.itunes.apple.com https://play.google.com https://*.clarity.ms https://www.googletagmanager.com https://mec-chat.com https://yubinbango.github.io https://ajaxzip3.github.io https://script.kujira-a.co.jp 'nonce-4kVVUhUjmcju5tCC1s97SQ=='; style-src   'self' https://fonts.googleapis.com https://use.fontawesome.com 'nonce-4kVVUhUjmcju5tCC1s97SQ==' unsafe-hashes; style-src-attr 'unsafe-inline'; connect-src 'self' https://connectivitycheck.gstatic.com https://connectivitycheck.android.com https://safebrowsing.googleapis.com https://content-autofill.googleapis.com https://optimizationguide-pa.googleapis.com https://update.googleapis.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://*.google.com https://*.google.co.jp https://*.doubleclick.net https://*.clarity.ms https://www.googletagmanager.com https://api.mec-chat.com https://www.googleadservices.com; img-src     'self' https://i.ytimg.com https://yt3.ggpht.com https://*.ytimg.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://s.youtube.com https://*.google.com https://*.google.co.jp https://*.clarity.ms https://*.bing.com https://secure.gravatar.com https://ssl.nihon-data.jp data: https://s.w.org https://www.googletagmanager.com https://s3.ap-northeast-1.amazonaws.com https://www.googleadservices.com https://*.doubleclick.net; font-src    'self' https://fonts.gstatic.com https://use.fontawesome.com data:; frame-src   'self' https://www.youtube.com https://s.youtube.com https://*.google.com https://maps.google.com https://www.googletagmanager.com; media-src   'self' https://*.googlevideo.com https://ssl.nihon-data.jp; object-src 'none'; report-uri /csp-report.php 1
script-src 'self' ; img-src 'self' ; object-src 'none'; base-uri 'none'; frame-ancestors 'self'; report-uri https://api.nonamemobile.ca/api/csp-report/NNM 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' norterefrigeracao.com.br *.norterefrigeracao.com.br wake-components.fbitsstatic.net norterefrigeracao.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br gstatic.com *.trustvox.com.br checkout.norterefrigeracao.com.br translate.googleapis.com h.online-metrix.net device.clearsale.com.br *.benova.com.br trustvox.com.br *.smarthint.co googleadservices.com *.googleadservices.com googleads.g.doubleclick.net *.g.doubleclick.net google.com.br *.google.com.br adservice.google.com service.smarthint.co *.sino3d.app sino3d.app norterefrigeracao.fbitsstatic.net *.fbitsstatic.net wake-commerce-scripts.omni.chat *.omni.chat static.hotjar.com; frame-ancestors *.norterefrigeracao.com.br norterefrigeracao.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
font-src www.paypalobjects.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.fontawesome.com https://fonts.bunny.net *.cloudfront.net *.reviews.io *.reviews.co.uk *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.reviews.io *.reviews.co.uk *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.weltpixel.com https://*.ewaypayments.com https://*.sandbox.ewaypayments.com *.google.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.reviews.io *.reviews.co.uk *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app www.apptrian.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com https://www.magezon.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cloudfront.net *.reviews.io *.reviews.co.uk maps.gstatic.com assets-novo-com-au.s3.ap-southeast-2.amazonaws.com *.novoshoes.co.nz *.novoshoes.com.au *.igodigital.com *.searchspring.io *.facebook.com *.gstatic.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app www.apptrian.com https://cdn.searchspring.net/intellisuggest/is.min.js https://*.ewaypayments.com https://*.sandbox.ewaypayments.com *.disqus.com *.avada.io *.shopify.com *.google.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.reviews.io *.reviews.co.uk maps.googleapis.com *.igodigital.com *.searchspring.io *.facebook.net *.googletagmanager.com *.googleadservices.com *.google.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.fontawesome.com https://fonts.bunny.net *.cloudfront.net *.reviews.io *.reviews.co.uk data: *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com assets-novo-com-au.s3.ap-southeast-2.amazonaws.com *.novoshoes.co.nz *.novoshoes.com.au *.igodigital.com *.reviews.io *.searchspring.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com fcmregistrations.googleapis.com firebaseinstallations.googleapis.com www.apptrian.com https://beacon.searchspring.io/beacon https://www.sandbox.paypal.com https://www.paypal.com https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cloudfront.net *.reviews.io *.reviews.co.uk maps.googleapis.com places.googleapis.com *.igodigital.com *.searchspring.io *.facebook.net *.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'nonce-UpQFjUfzmD4uDxhGY0Ue/g==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self' https: data: blob:; base-uri 'self'; connect-src 'self' https: wss: https://maps.googleapis.com https://maps.gstatic.com; font-src 'self' data: https://fonts.gstatic.com https://pro.fontawesome.com https://ka-f.fontawesome.com https://use.fontawesome.com; form-action 'self' https:; frame-ancestors 'self'; frame-src 'self' https://www.googletagmanager.com https://mc.yandex.ru https://www.facebook.com https://maps.google.com https://www.google.com; img-src 'self' data: blob: https: https://maps.googleapis.com https://maps.gstatic.com; object-src 'none'; script-src 'self' 'nonce-64d76cd3424c1971d51372b3153bd3b9' 'unsafe-eval' https://www.googletagmanager.com https://mc.yandex.ru https://kit.fontawesome.com https://ka-f.fontawesome.com https://maps.googleapis.com https://maps.gstatic.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://pro.fontawesome.com https://ka-f.fontawesome.com https://maps.googleapis.com https://maps.gstatic.com; worker-src 'self' blob: 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.cookiebot.com/ https://*.cookiebot.eu/ 'nonce-iW60Vu1rFJ1Nqrt9vl3/Kg==' 1
default-src 'report-sample'; base-uri 'self'; frame-ancestors 'self'; script-src 'self' 'nonce-PurBP9BL240TmofODgfBYJCSxyBt2M8eGRX1EAVWFRE' 'report-sample'   ; style-src 'self' 'unsafe-inline'; img-src 'self' https://*.gov.in https://cdn.ux4g.gov.in data: blob:; connect-src 'self' https://*.gov.in https://cdn.ux4g.gov.in https://www.clarity.ms https://acsapi.digilocker.gov.in; child-src 'self'; report-uri /csp-violation ; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data:; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net *.alothemes.com *.magepow.com https://*.clarity.ms *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com webpay3g.transbank.cl webpay3gint.transbank.cl *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors self www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com www.gstatic.com apis.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com https://chatbot.oteroindustrial.cl https://*.clarity.ms 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io https://aheadworks.com maps.gstatic.com maps.googleapis.com cdn.rawgit.com/googlemaps/ cdn.jsdelivr.net/gh/googlemaps/ *.facebook.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.alothemes.com *.magepow.com https://chatbot.oteroindustrial.cl https://*.clarity.ms https://c.bing.com *.gstatic.com *.reddit.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net maps.googleapis.com *.googletagmanager.com *.facebook.net www.termsfeed.com *.googleapis.com *.google.com *.gstatic.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.alothemes.com *.magepow.com https://chatbot.oteroindustrial.cl https://*.clarity.ms https://www.googletagmanager.com tagmanager.google.com *.redditstatic.com *.reddit.com unpkg.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com https://fonts.bunny.net assets.braintreegateway.com *.alothemes.com *.magepow.com https://chatbot.oteroindustrial.cl tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io maps.googleapis.com *.google-analytics.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.alothemes.com *.magepow.com https://chatbot.oteroindustrial.cl https://*.clarity.ms https://c.bing.com *.facebook.net *.redditstatic.com *.reddit.com *.doubleclick.net t.elasticsuite.io *.hsforms.net *.hsforms.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com https://*.clarity.ms http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'nonce-JCE4G2O/kXklUUiOBmrqYA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-ixqpz8kIXx6OjTsJt8EvfA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-vm16izj81B9vzTUR3rZKww==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.fontawesome.com *.acsbapp.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.acsbapp.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com acsbapp.com *.acsbapp.com hotjar.com *.hotjar.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.magento.com *.magento-datasolutions.com *.magento-ds.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com acsbapp.com *.acsbapp.com hotjar.com *.hotjar.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-Dh7cVSe1oj-naKPPImuypw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'nonce-tO4n6jo7UttJzKLT6A3/bg==' 'strict-dynamic' https: 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data:; font-src 'self' https: data:; connect-src 'self' https:; frame-src https:; form-action 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; report-uri /csp-report.php; report-to csp-endpoint 1
default-src 'self'; script-src 'nonce-oHnw1Has375r5cb+nVcvnA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-q4b1ZVEFIA0HSHynK/jHtw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'none'; base-uri 'self'; form-action 'none'; manifest-src 'self'; connect-src * blob:; script-src 'self' 'unsafe-eval'; style-src 'self'; font-src 'self'; frame-ancestors 'none'; img-src 'self' data: blob:; media-src blob:; object-src blob:; sandbox allow-same-origin allow-scripts allow-forms allow-popups allow-modals allow-downloads 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://us.i.posthog.com https://us-assets.i.posthog.com https://e.patrimore.com https://analytics.ahrefs.com https://www.google.com https://www.gstatic.com https://fast.wistia.com https://player.vimeo.com https://www.youtube.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://connect.facebook.net https://analytics.tiktok.com https://snap.licdn.com https://www.clarity.ms https://codvhzuv.sav.stape.io https://capi-automation.s3.us-east-2.amazonaws.com blob: https://patrimore.my.connect.aws https://*.sdkassets.chime.aws; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https://images.ctfassets.net https://img.youtube.com https://i.ytimg.com https://assets.calendly.com https://fast.wistia.com https://www.googletagmanager.com https://*.google-analytics.com https://stats.g.doubleclick.net https://td.doubleclick.net https://googleads.g.doubleclick.net https://www.facebook.com https://connect.facebook.net https://analytics.tiktok.com https://px.ads.linkedin.com https://c.clarity.ms https://www.google.com https://www.google.cl; connect-src 'self' https://us.i.posthog.com https://us-assets.i.posthog.com https://e.patrimore.com https://analytics.ahrefs.com https://graphql.contentful.com https://retirement-planner-api-idxzl.ondigitalocean.app https://api.cumplir.cl https://patrifunds-api.onrender.com https://fast.wistia.com https://www.googletagmanager.com https://*.google-analytics.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.facebook.com https://analytics.tiktok.com https://px.ads.linkedin.com https://*.clarity.ms https://c.bing.com https://codvhzuv.sav.stape.io https://*.ingest.us.sentry.io https://www.google.com https://ad.doubleclick.net https://capig.stape.pm https://analytics-ipv6.tiktokw.us https://www.googleadservices.com https://cdn.contentful.com https://supportflow.patrimore.com https://patrimore.my.connect.aws https://*.chime.aws wss://*.chime.aws; frame-src https://calendly.com https://codvhzuv.sav.stape.io https://www.youtube.com https://player.vimeo.com https://www.google.com https://drive.google.com https://flow-crecimiento.vercel.app https://app.contentful.com https://td.doubleclick.net https://bid.g.doubleclick.net https://*.fls.doubleclick.net https://www.linkedin.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' https://app.contentful.com; report-uri /.netlify/functions/csp-report 1
connect-src 'self' *.google-analytics.com *.googletagmanager.com *.analytics.google.com ws: http://localhost:* https://localhost:* https://facebook.net; default-src 'self'; font-src 'self'; frame-ancestors 'none'; img-src 'self' data: *.googletagmanager.com https://facebook.net; script-src 'self' 'unsafe-eval' 'unsafe-inline' *.googletagmanager.com *.google-analytics.com ajax.googleapis.com https://facebook.net; style-src 'self' 'unsafe-inline' fonts.googleapis.com; 1
frame-ancestors 'self' https://s.brightspace.com https://*.ally.ac https://leaplti.desire2learn.com/ https://leaplti-fr.brightspace.com/ https://tryleap.brightspace.com/ https://leaplti-es.desire2learn.com/ https://leaplti-ptbr.desire2learn.com/ https://leaplti-us.brightspace.com/ https://leaplti-apac.brightspace.com/ https://leaplti-emea.brightspace.com/ https://leapqa.net https://leaplti-ap.brightspace.com https://login.microsoftonline.com/ https://login.live.com/ https://cdn.lcs.brightspace.com/ https://leaplti-in.brightspace.com; report-uri https://logger.us-east-1.logging.brightspace.com/log/csp/Fux1sQcjiqxnws6yAUy_IgAAAaCZypo5 1
default-src 'self'; script-src 'nonce-qan319EagrcAvPQirvbyKw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.sagepay.com *.opayo.eu.elavon.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.sagepay.com *.opayo.eu.elavon.com *.arcot.com *.rsa3dsauth.co.uk *.rsa3dsauth.com *.boc.cn *.afs.com.bh *.enfuce.com *.cardcenter.ch *.nexigroup.com *.pluscard.de *.qiib.com.qa *.paylife.at *.redsys.es *.3dsecure.no *.modirum.com *.edb.com *.viseca.ch *.apata.io *.capitalone.com *.dnp-cdms.jp *.revolut.com *.bankserv.co.za *.swisscard.ch *.six-group.com *.marqeta.com *.cardinalcommerce.com *.wlp-acs.com *.imbank.com *.tsys.co.uk *.sia.eu *.garanti.com.tr *.commerzbank.de *.cmbchina.com *.alahli.com *.mycardsecure.com *.gps.com.bh *.citibank.com *.wibmo.com *.dkb.de *.monzo.com *.alinma.com *.nccc.com.tw *.starlingbank.com *.danskebank.com *.pekao24.pl 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.arcot.com *.rsa3dsauth.co.uk *.rsa3dsauth.com *.boc.cn *.afs.com.bh *.enfuce.com *.cardcenter.ch *.pluscard.de *.qiib.com.qa *.nexigroup.com *.paylife.at *.redsys.es *.3dsecure.no *.modirum.com *.edb.com *.viseca.ch *.apata.io *.capitalone.com *.dnp-cdms.jp *.revolut.com *.bankserv.co.za *.swisscard.ch *.six-group.com *.marqeta.com *.cardinalcommerce.com *.wlp-acs.com *.imbank.com *.tsys.co.uk *.sia.eu *.garanti.com.tr *.commerzbank.de *.cmbchina.com *.alahli.com *.mycardsecure.com *.gps.com.bh *.citibank.com *.wibmo.com *.dkb.de *.monzo.com *.alinma.com *.nccc.com.tw *.starlingbank.com *.danskebank.com *.pekao24.pl https://www.googletagmanager.com/ https://x.klarnacdn.net *.klarnaevt.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.sagepay.com *.opayo.eu.elavon.com ebizmarts-website.s3.amazonaws.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com https://x.klarnacdn.net flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://cdn.perchandparrow.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sagepay.com *.opayo.eu.elavon.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io *.shopify.com *.alothemes.com *.magepow.com https://x.klarnacdn.net *.klarna.com *.klarnaevt.com *.gstatic.com maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://cdn.searchspring.net/intellisuggest/is.min.js 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sagepay.com *.opayo.eu.elavon.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com maxcdn.bootstrapcdn.com *.gstatic.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sagepay.com *.opayo.eu.elavon.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com https://x.klarnacdn.net *.klarna.com *.klarnaevt.com www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://beacon.searchspring.io/beacon 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://*.eideasy.com; img-src 'self' data: blob: https://*.amazonaws.com https://id.dokobit.com https://id-sandbox.dokobit.com https://*.eideasy.com https://www.datocms-assets.com https://www.googletagmanager.com https://maps.googleapis.com https://maps.gstatic.com; font-src 'self' fonts.gstatic.com https://id.dokobit.com https://id-sandbox.dokobit.com; media-src 'self' https://*.amazonaws.com; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' https://id.dokobit.com https://id-sandbox.dokobit.com; style-src-elem 'self' 'unsafe-inline' https://id.dokobit.com https://id-sandbox.dokobit.com fonts.googleapis.com; script-src 'self' 'unsafe-inline' blob: https://id.dokobit.com https://id-sandbox.dokobit.com https://*.eideasy.com https://www.googletagmanager.com https://maps.googleapis.com; script-src-elem 'self' 'unsafe-inline' blob: https://id.dokobit.com https://id-sandbox.dokobit.com https://*.eideasy.com https://www.googletagmanager.com https://maps.googleapis.com; frame-src 'self' https://id.dokobit.com https://id-sandbox.dokobit.com https://*.eideasy.com; connect-src 'self' data: https://*.eideasy.com https://id.dokobit.com https://id-sandbox.dokobit.com https://region1.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com https://maps.googleapis.com https://places.googleapis.com; report-uri /api/log/csp-report; 1
default-src 'self'; script-src 'nonce-lSOXp2NJO6S9RQOPM2UP6Q==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.easypack24.net *.gdpsystem.eu *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com sandbox.przelewy24.pl secure.przelewy24.pl 'self' 'unsafe-inline'; frame-ancestors pay.google.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.dpd.com.pl *.easypack24.net *.inpost.pl *.openstreetmap.org *.gdpsystem.eu secure.payu.com merch-prod.snd.payu.com https://ssl.ceneo.pl pay.google.com apm.przelewy24.pl *.przelewy24.pl *.espago.com https://www.googletagmanager.com/ *.packeta.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com *.google.pl *.easypack24.net *.inpost.pl *.openstreetmap.org pieceofcase.pl *.gdpsystem.eu *.googleusercontent.com https://*.elfsightcdn.com static.payu.com https://ssl.ceneo.pl static.przelewy24.pl www.gstatic.com gstatic.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://firebasestorage.googleapis.com *.hsforms.net *.hsforms.com https://*.bing.com https://us-ms.gr-cdn.com https://bat.bing.net https://*.googlesyndication.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.google.pl *.hotjar.com *.poczta-polska.pl unpkg.com *.mapbox.com *.easypack24.net *.inpost.pl *.openstreetmap.org *.gdpsystem.eu https://static.cloudflareinsights.com https://*.cloudflareinsights.com https://*.elfsight.com secure.payu.com secure.snd.payu.com https://ssl.ceneo.pl sandbox.przelewy24.pl secure.przelewy24.pl pay.google.com apm.przelewy24.pl https://cdnjs.cloudflare.com cdnjs.cloudflare.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io *.shopify.com *.packeta.com *.hsforms.net *.hsforms.com https://an.gr-wcon.com https://bat.bing.com https://us-an.gr-cdn.com https://us-wbe.gr-cdn.com https://*.elfsightcdn.com https://app.responso.com gdpsystem.rzetelnagrupa.pl 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.gdpsystem.eu https://cdnjs.cloudflare.com cdnjs.cloudflare.com *.fontawesome.com https://fonts.bunny.net gdpsystem.rzetelnagrupa.pl 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.easypack24.net pieceofcase.pl *.gdpsystem.eu http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.facebook.com *.facebook.net https://googleads.g.doubleclick.net *.googlesyndication.com *.tiktok.com wss://ws.hotjar.com *.hotjar.io *.easypack24.net *.inpost.pl *.openstreetmap.org *.gdpsystem.eu https://*.g.doubleclick.net https://*.elfsight.com secure.payu.com merch-prod.snd.payu.com sandbox.przelewy24.pl secure.przelewy24.pl wss://ws.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io *.packeta.com t.elasticsuite.io *.hsforms.net *.hsforms.com https://*.getresponse.com https://ts.getresponse.pl https://bat.bing.net https://*.googlesyndication.com https://app.responso.com https://participant.connect.eu-west-2.amazonaws.com wss://tufsuyburufn.transport.connect.eu-west-2.amazonaws.com bat.bing.com vwe.gr-wcon.com cdn.jsdelivr.net unpkg.com https://analytics-ipv6.tiktokw.us gdpsystem.rzetelnagrupa.pl ad.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://ssl.p.jwpcdn.com https://cdn.jwplayer.com https://content.jwplatform.com https://prd.jwpltx.com https://*.jwpsrv.com https://*.jwplayer.com https://*.jwpcdn.com https://www.googletagmanager.com https://www.google-analytics.com; script-src-elem 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://ssl.p.jwpcdn.com https://cdn.jwplayer.com https://content.jwplatform.com https://prd.jwpltx.com https://*.jwpsrv.com https://*.jwplayer.com https://*.jwpcdn.com https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https: blob:; media-src 'self' blob: https:; worker-src 'self' blob:; child-src 'self' blob:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://pk.asuka-vod.site; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 1
script-src 'unsafe-inline' 'unsafe-eval' 'report-sample' https: www.googletagmanager.com www.google-analytics.com; script-src-elem 'unsafe-inline' 'unsafe-eval' 'report-sample' https: www.googletagmanager.com www.google-analytics.com; form-action 'self' https://*.planetrentalcars.com; object-src 'none'; media-src 'none'; report-uri /csp/report; worker-src 'self' blob:; 1
default-src 'self'; child-src blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https:; font-src https: data:; style-src https: 'unsafe-inline'; img-src https: blob: data:; frame-ancestors 'self'; frame-src 'self' https:; worker-src blob:; object-src 'self'; media-src https: blob: data:; report-uri https://www.plateforme-apis.fr/local/csp/collector.php?uid=0&cid=1 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://challenges.cloudflare.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https://res.cloudinary.com https://media.playbicho.com https://api.playbicho.com https://i.ytimg.com https://www.googletagmanager.com https://www.google-analytics.com https://www.facebook.com; connect-src 'self' https://api.playbicho.com https://media.playbicho.com https://www.google-analytics.com https://www.googletagmanager.com https://challenges.cloudflare.com https://brasilapi.com.br https://api.ipify.org; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://challenges.cloudflare.com https://www.googletagmanager.com; object-src 'none'; base-uri 'self'; form-action 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com self data: https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * self 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.swagger.io *.scene7.com static.klaviyo.com mcstaging.polarenlinea.com mcprod.polarenlinea.com *.facebook.com *.doubleclick.net *.googleapis.com *.google.com *.googleadservices.com *.braintreegateway.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com self data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.marketo.net 233-mju-939.mktoresp.com smetrics.polarenlinea.com *.facebook.com *.facebook.net *.connect.facebook.net *.cardinalcommerce.com unpkg.com cdn.jsdelivr.net *.magento-datasolutions.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.paypal.com *.paypalobjects.com *.bolt.com *.commerce-quick-checkout.com *.googleapis.com *.gstatic.com *.online-metrix.net *.cybersource.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com self unsafe-inline 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com fonts.gstatic.com static.klaviyo.com assets.braintreegateway.com self unsafe-inline 'self' 'unsafe-inline'; object-src none 'self' 'unsafe-inline'; media-src *.adobe.com self 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com smetrics.polarenlinea.com *.demdex.net 233-mju-939.mktoresp.com *.cardinalcommerce.com *.snplow.net *.facebook.com *.pingdom.net *.woorank.com *.adobedc.net *.youtube.com *.googleapis.com https://www.google-analytics.com https://www.googleadservices.com https://www.googletagmanager.com *.bolt.com *.magento-ds.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com self 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' blob: https://prod-plk-web.es.rbi.tools/en/static/js/vendor.029ed18f.js https://prod-plk-web.es.rbi.tools/en/static/js/main.8788ef34.js https://prod-plk-web.es.rbi.tools/en/static/js/runtime.7feee061.js https://*.mparticle.com https://cdn.cookielaw.org https://www.googletagmanager.com https://*.onetrust.com https://static.ads-twitter.com https://platform.twitter.com https://www.google-analytics.com https://connect.facebook.net https://secure.quantserve.com https://dynamic.criteo.com https://rules.quantcount.com https://cdn.branch.io https://app.link https://*.cdn4.forter.com https://dlthst9q2beh8.cloudfront.net https://sslwidget.criteo.com https://widget.eu.criteo.com https://pagead2.googlesyndication.com https://cdn.amplitude.com https://accounts.google.com https://appleid.cdn-apple.com https://analytics.tiktok.com https://c.amazon-adsystem.com https://js.adsrvr.org https://maps.googleapis.com https://googleads.g.doubleclick.net https://static.zdassets.com https://bat.bing.com https://cdn-st.adsmurai.com https://www.youtube.com https://player.vimeo.com https://prod-plk-web.es.rbi.tools/en/static/js/main.0d7b31ac.js https://prod-plk-web.es.rbi.tools/en/static/js/runtime.0613b8c7.js; object-src 'none'; base-uri 'none'; worker-src 'self' blob:; report-uri https://intl-csp-service.rbictg.com/report 1
object-src 'none';base-uri 'self';script-src 'nonce-yYrV43_LC_7p-4JVfCgpjg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://maps.googleapis.com https://maps.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://*.googleapis.com https://*.gstatic.com https://*.google.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.googleapis.com https://*.gstatic.com; object-src 'none'; frame-ancestors 'self'; base-uri 'self'; 1
font-src *.klarnacdn.net *.typekit.net *.fonts.smct.io *.akamaihd.net *.gstatic.com *.google.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com api.bazaarvoice.com stg.api.bazaarvoice.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com *.dotdigital-pages.com *.dotdigital.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.liveperson.net *.pinterest.com *.vimeo.com *.lpsnmedia.net *.formstack.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com www.apptrian.com ct.pinterest.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com www.facebook.com *.silentnightbrands-gb.attn.tv *.bazaarvoice.com *.collector-20390.tvsquared.com *.bat.bing.com *.onetrust.com *.google.com *.cdn.smct.io *.cdn.smct.co *.ctfassets.net *.placeholder.com *.photorank.me *.quantserve.com *.ometria.com *.data-8.co.uk *.gstatic.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.apptrian.com www.pinterest.com s.pinimg.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com *.smct.co *.js.smct.io *.bat.bing.com *.rules.quantcount.com *.script.hotjar.com *.lantern.roeyecdn.com *.attn.tv *.cdn.sub2tech.com *.collector-20390.tvsquared.com *.static.hotjar.com *.dwin1.com *.google.com *.sharethis.com *.google-analytics.com *.googletagmanager.com *.gstatic.com *.googleapis.com *.bazaarvoice.com *.onetrust.com *.trustpilot.com *.ometria.com *.liveperson.net *.quantserve.com *.doubleclick.net *.lpsnmedia.net *.akamaihd.net *.data-8.co.uk *.pinterest.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com display.ugc.bazaarvoice.com *.klarnacdn.net https://static.klaviyo.com unsafe-inline assets.braintreegateway.com *.fonts.smct.io *.akamaihd.net *.data-8.co.uk *.gstatic.com *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com ct.pinterest.com www.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.apptrian.com ct.pinterest.com api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com connect.facebook.net graph.facebook.com *.ws.hotjar.com *.data-8.co.uk *.content.hotjar.io *.ipl.smct.io *.firehose.eu-west-1.amazonaws.com *.silentnightbrands-gb.attn.tv *.googleads.g.doubleclick.net *.events.attentivemobile.com *.onetrust.com *.akamaihd.net *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; script-src 'self' https://cdnjs.cloudflare.com https://maps.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net http://cdn.truconversion.com ; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https://www.google-analytics.com https://stats.g.doubleclick.net; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net; frame-src 'self' https://www.googletagmanager.com; child-src 'self' https://www.googletagmanager.com 1
font-src fonts.gstatic.com use.typekit.net data: *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ cdn.dnky.co amc.demdex.net www.google.com www.facebook.com youtube.com https://h.online-metrix.net/ https://static-content.vnforapps.com https://maps.google.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net cm.everesttech.net maps.gstatic.com maps.googleapis.com accounts.google.com www.facebook.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com https://rum.hlx.page cdn.dnky.co r1-t.trackedlink.net www.gstatic.com js-agent.newrelic.com bam.nr-data.net maps.googleapis.com connect.facebook.net player.vimeo.com https://www.google.com https://maps.googleapis.com https://sibautomation.com/sa.js https://share.hsforms.com/1u5aYKB4eS7in1XkiXplEuAr2a3r https://script.crazyegg.com/pages/scripts/0019/6089.js https://static.hotjar.com/ https://h.online-metrix.net/fp/tags.js https://static-content.vnforapps.com/v2/js/checkout.js https://static-content.vnforapps.com/v2/js/prd_dfp.js https://rum.hlx.page/.rum/@adobe/ https://script.hotjar.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com *.magento-datasolutions.com *.magento-ds.com cdn.dnky.co *.googletagmanager.com *.cookielaw.org *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com maps.googleapis.com api.comapi.com bam.nr-data.net *.cookielaw.org https://in-automate.brevo.com/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'nonce-ArE1c0dLRV/fnpOcDPi8ww==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
script-src 'nonce-c11907193b752a3ece09537abda9b702ec0cdef3682ff36aa1891a5b3c64d331' assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.autopay.eu pay.google.com *.google-analytics.com *.googletagmanager.com www.xtento.com cdn.xtento.com secure.payu.com secure.snd.payu.com https://cdnjs.cloudflare.com *.inpost.pl *.packeta.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com sandbox.przelewy24.pl secure.przelewy24.pl apm.przelewy24.pl *.facebook.net *.allekurier.pl *.hsforms.net *.hsforms.com 'self' *.trustpilot.com 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY/CkTMBhjNhwPvglpYumjx31B4fjkY8=' 'sha256-F20iqiqGicuuiFlhCPv0sBKJFT9sCplzelbf57o8GsI=' 'sha256-syV/eNOnvdKZkC4mI0Qgl6a+j1+UDhVcxAdH9K2eMUw='; style-src *.adobe.com fonts.googleapis.com *.autopay.eu *.googleapis.com https://fonts.googleapis.com https://cdnjs.cloudflare.com *.inpost.pl *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.typekit.net *.gstatic.com 'self' 'unsafe-inline' *.trustpilot.com; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com platnosci.bm.pl platnosci-accept.bm.pl www.gstatic.com *.autopay.eu www.xtento.com cdn.xtento.com static.payu.com *.inpost.pl magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com static.przelewy24.pl gstatic.com puccini.pl *.puccini.pl puccini.cz *.puccini.cz puccini.hu *.puccini.hu puccini.ro *.puccini.ro puccini.sk *.puccini.sk puccini.ua *.puccini.ua *.allekurier.pl *.wittchen.com *.hsforms.net *.hsforms.com 'self' data: 'self'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.google-analytics.com secure.payu.com merch-prod.snd.payu.com *.inpost.pl *.packeta.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com sandbox.przelewy24.pl secure.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self'; media-src *.adobe.com *.inpost.pl 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com pay.google.com play.google.com *.autopay.eu www.xtento.com secure.payu.com merch-prod.snd.payu.com *.inpost.pl *.dhl.pl *.dhl24.com.pl *.packeta.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * apm.przelewy24.pl *.googletagmanager.com 'self' *.trustpilot.com; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * sandbox.przelewy24.pl secure.przelewy24.pl 'self'; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: https://cdnjs.cloudflare.com *.inpost.pl *.fontawesome.com maxcdn.bootstrapcdn.com 'self' data: 'self'; frame-ancestors www.gstatic.com pay.google.com; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.googleapis.com 'self'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com 'self'; object-src 'self'; 1
font-src *.niceincontact.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.judopay.com *.portal.gpwebpay.com *.gpe.cz 'self' 'unsafe-inline'; frame-ancestors *.storyblok.com 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net www.googletagmanager.com player.vimeo.com https://www.google.com/recaptcha/ *.judopay.com *.portal.gpwebpay.com *.gpe.cz dms2.idraught.com bms.brulines.com *.niceincontact.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com *.storyblok.com cdn.usefathom.com *.cookiepro.com *.niceincontact.com *.amazonaws.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page https://maps.googleapis.com *.judopay.com *.storyblok.com cdn.usefathom.com *.cookiepro.com *.niceincontact.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.storyblok.com *.niceincontact.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net https://maps.googleapis.com https://player.vimeo.com *.judopay.com *.onetrust.com *.cookiepro.com *.niceincontact.com wss://chat-gw-de-uk1.niceincontact.com/ t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'nonce-q1QcaGLvbQPZIJCJL8OXIw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-gelWVsZGwnHBuKcsXBDqvg' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.google-analytics.com https://*.clarity.ms; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https:; media-src 'self' blob: https:; frame-src 'self'; object-src 'none'; base-uri 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cloudflare.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.trustedshops.com *.googleapis.com *.bootstrapcdn.com 'self' data: *.doubleclick.net *.fontawesome.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.twitter.com https://www.google.com https://www.google.co.in https://www.facebook.com *.doubleclick.net *.facebook.com https://*.dpdconnect.nl js.mollie.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cloudflare.com *.google.com *.googlesyndication.com *.google.co.in https://www.facebook.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.connect.facebook.net https://stats.g.doubleclick.net https://d.adroll.com https://pixel.advertising.com https://pixel.rubiconproject.com https://simage2.pubmatic.com https://dsum-sec.casalemedia.com https://ads.yahoo.com https://eb2.3lift.com https://sync.outbrain.com https://trc.taboola.com https://x.bidswitch.net/sync https://ib.adnxs.com https://idsync.rlcdn.com https://us-u.openx.net https://ups.analytics.yahoo.com https://segments.company-target.com https://sync.tidaltv.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com magefan.com cm.magefan.com *.disqus.com https://www.google.nl https://imgsct.cookiebot.com *.adobedtm.com https://meetanshi.com/media/logo.png flagpedia.net https://www.mollie.com https://redchamps.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.cloudflare.com *.twitter.com *.google.com.bd *.google.co.in *.facebook.com *.googleadservices.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://connect.facebook.net *.paypalobjects.com *.paypal.com https://chimpstatic.com *.googletagmanager.com https://s.adroll.com https://d.adroll.com https://d.adroll.mgr.consensu.org *.bootstrapcdn.com *.google.bg *.facebook.net *.doubleclick.net https://*.dpdconnect.nl *.disqus.com *.googleapis.com https://consentcdn.cookiebot.com https://consent.cookiebot.com https://use.fontawesome.com *.adobedtm.com https://assets.adobedtm.com https://www.googleadservices.com https://www.google-analytics.com maps.googleapis.com js.mollie.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.youtube.com *.bootstrapcdn.com *.doubleclick.net *.googletagmanager.com https://fonts.googleapis.com https://use.fontawesome.com https://www.raintechshop.nl maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.cloudflare.com *.twitter.com *.twimg.com *.google.co.in *.facebook.com *.google-analytics.com *.facebook.net https://www.postcode-checkout.nl https://consent.cookiebot.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://consentcdn.cookiebot.com www.gstatic.com maps.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google.com https://www.gstatic.com https://cdn.brevo.com https://sibautomation.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: blob:; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://analytics.google.com https://stats.g.doubleclick.net https://www.google.com https://ad.doubleclick.net https://sibautomation.com https://cdn.brevo.com https://in-automate.brevo.com https://region1.google-analytics.com; frame-src https://www.googletagmanager.com https://www.google.com https://www.gstatic.com; 1
default-src 'self' https://redebanmulticolor.com.co https://www.pasarelapagosaval.com https://www.pagaenlinearbm.com; script-src 'self' https://pagaenlinearbm.com https://web.certicamara.com https://seal.websecurity.norton.com 'unsafe-eval' 'unsafe-hashes'; object-src 'none'; img-src 'self' data: https:; style-src 'unsafe-inline' 'self';script-src-elem 'self' 'unsafe-inline' https:; connect-src 'self' 'unsafe-inline' https:;style-src-elem 'self' 'unsafe-inline' https:; font-src 'self' https:; frame-src 'self' https:;frame-ancestors 'self' https://redebanmulticolor.com.co https://www.pasarelapagosaval.com https://www.pagaenlinearbm.com; 1
font-src *.fontawesome.com https://fonts.bunny.net *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.google.com redington.market 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com https://fonts.bunny.net unsafe-inline assets.braintreegateway.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-o4MHiuIawf9A9nA3IMZUgA==' 'strict-dynamic' https: http:; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com https://cdn.jsdelivr.net https://unpkg.com; img-src 'self' data: blob: https:; font-src 'self' https://cdnjs.cloudflare.com https://fonts.gstatic.com; connect-src 'self' https://oauth2.googleapis.com https://accounts.google.com; frame-src https://accounts.google.com; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'self'; report-uri /wp-json/rrc-core/v1/csp-report 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com; connect-src 'self' https:; frame-src 'self' https://www.googletagmanager.com https://*.google.com https://www.youtube.com https://www.youtube-nocookie.com; worker-src 'self' blob:; media-src 'self' blob: https: 1
default-src 'self' https://*.uestra.de https://cloud.ccm19.de; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://cloud.ccm19.de https://gvh.demo.hafas.cloud https://gvh.hafas.de https://*.uestra.de https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: https://img.youtube.com https://gvh.demo.hafas.cloud https://gvh.hafas.de https://*.uestra.de https://cloud.ccm19.de https://elma.gvh.de https://uestra-produktion.pi-asp.de/ https://www.facebook.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.google.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://google.com https://www.google.de; base-uri 'self' https://*.uestra.de; frame-src 'self' blob: https://*.youtube.com/ https://gvh.demo.hafas.cloud https://gvh.hafas.de https://abo.gvh.de https://cloud.ccm19.de https://deutschlandticket.gvh.de https://transport.novafind.eu/ https://uestra-produktion.pi-asp.de/ https://www.googletagmanager.com; media-src 'self' blob:; style-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://cloud.ccm19.de https://*.hafas.cloud https://*.hafas.de https://elma.gvh.de https://stats.uestra.de 'report-sample'; font-src 'self' data: https://fonts.gstatic.com https://gvh.demo.hafas.cloud https://gvh.hafas.de https://stats.uestra.de https://elma.gvh.de https://uestra-produktion.pi-asp.de/; connect-src 'self' https://gvh.demo.hafas.cloud https://gvh.hafas.de https://cloud.ccm19.de https://stats.uestra.de https://elma.gvh.de https://www.facebook.com https://*.google-analytics.com https://*.analytics.google.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://www.google.com https://google.com https://www.google.de; object-src 'self' blob: https://*.uestra.de; script-src-elem 'self' 'unsafe-eval' 'unsafe-inline' https://cloud.ccm19.de https://gvh.demo.hafas.cloud https://gvh.hafas.de https://*.uestra.de https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://relaunch.uestra.de https://*.webit.de https://*.hafas.cloud https://*.hafas.de https://elma.gvh.de https://connect.facebook.net 'report-sample'; style-src-elem 'self' 'unsafe-inline' https://www.uestra.de https://relaunch.uestra.de https://stats.uestra.de https://gvh.demo.hafas.cloud https://gvh.hafas.de https://cloud.ccm19.de https://elma.gvh.de 'report-sample'; frame-ancestors 'self' https://*.uestra.de https://gvh.demo.hafas.cloud https://gvh.hafas.de https://uestra-produktion.pi-asp.de/; form-action 'self'; report-uri https://www.uestra.de/@http-reporting?csp=report&requestTime=1789277671498308&requestHash=13e1cf2cf55d26fc69b5de59740f6e7a9c4b9304 1
default-src 'self'; script-src 'self' 'nonce-JgArZHiUY3vHhQzEI4OLzw==' https://cdn.acaoentreamigos.online https://connect.facebook.net https://www.googletagmanager.com https://www.google-analytics.com https://analytics.tiktok.com; style-src 'self' 'unsafe-inline' https://cdn.acaoentreamigos.online https://fonts.googleapis.com https://use.typekit.net; img-src 'self' data: https:; media-src 'self' https://cdn.acaoentreamigos.online data: blob:; font-src 'self' https://cdn.acaoentreamigos.online https://fonts.gstatic.com https://use.typekit.net data:; connect-src 'self' https://www.facebook.com https://www.google-analytics.com https://analytics.tiktok.com https://business-api.tiktok.com https://p.typekit.net; frame-src 'self' https://www.facebook.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; frame-src https://www.googletagmanager.com https://accounts.google.com https://*.doubleclick.net; connect-src 'self' wss: https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://*.doubleclick.net https://*.googlesyndication.com https://www.googleadservices.com https://www.google.com https://google.com https://www.google.fr https://www.google.pt https://cloudflareinsights.com https://static.cloudflareinsights.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https://www.googletagmanager.com https://www.google-analytics.com https://*.doubleclick.net https://*.googlesyndication.com https://www.googleadservices.com https://www.google.com https://www.google.fr https://www.google.pt https://www.google.es https://verified-profiles.com; object-src 'none'; script-src 'self' 'report-sample' https://www.googletagmanager.com https://accounts.google.com https://static.cloudflareinsights.com https://*.doubleclick.net https://*.googlesyndication.com https://www.googleadservices.com 'sha256-bK5XGn0eCIZRr6aX34GGyPU2eYeil6aVPQt+YIu3IAA=' 'sha256-hGk0n4RPz+GY0G/gS+JJ/yWGAq7cV68P2QUnoVUwjD8=' 'sha256-IMInsVd8yl/clckYEnncYP8KXtEmMVA6OZljNjOgRdk=' 'sha256-oDtZtIWo7cZf12/s8cwazJD7XsTHcg1vqzIWC8k0j7g='; script-src-attr 'unsafe-hashes' 'sha256-7dQwUgLau1NFCCGjfn9FsYptB6ZtWxJin6VohGIu20I='; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; base-uri 'self'; form-action 'self' https://accounts.google.com https://rencontresendirect.com; frame-ancestors 'none'; report-uri /api/csp-report?p=6 1
media-src https://www.google.com 'self' https://rtbamock.getsandbox.com https://www.paypal.com https://www.gstatic.com *.salesforce.com blob: https://www.sandbox.paypal.com https://api-m.sandbox.paypal.com; report-to sfdc-csp-ep; report-uri https://rentalbondsvic.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D5i000000Hwrq&networkId=0DMMn0000000T0R&type=communities 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net *.adobe.com *.facebook.com *.facebook.net *.googleapis.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.paypal.com *.youtube.com *.vimeo.com *.vimeocdn.com *.yotpo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * challenges.cloudflare.com *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com *.facebook.com *.facebook.net *.fontawesome.com *.googleapis.com *.googletagmanager.com *.googleadservices.com *.vimeo.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.disqus.com *.avada.io *.shopify.com *.facebook.com *.facebook.net *.fontawesome.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.paypal.com *.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com challenges.cloudflare.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net *.facebook.com *.facebook.net *.googleapis.com *.gstatic.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.paypal.com *.youtube.com *.vimeo.com *.vimeocdn.com assets.braintreegateway.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://get.geojs.io *.avada.io *.adobe.com *.facebook.com *.facebook.net *.fontawesome.com *.googleapis.com *.gstatic.com *.googletagmanager.com *.googleadservices.com *.youtube.com *.vimeo.com *.vimeocdn.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.googleapis.com *.gstatic.com data: *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe *.weltpixel.com https://www.googletagmanager.com/ business.facebook.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ business.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io business.facebook.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com unsafe-inline assets.braintreegateway.com *.fontawesome.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.mercadolibre.com *.mercadolivre.com *.mlstatic.com *.mercadopago.com *.mercadopago.com.ar *.mercadopago.cl *.mercadopago.com.co *.mercadopago.com.br *.mercadopago.com.mx *.mercadopago.com.uy *.mercadopago.com.ve *.mercadopago.com.pe http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io business.facebook.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://*.sentry.io; img-src 'self' data: https://www.googletagmanager.com https://www.google-analytics.com https://resraku-image-files-production.s3.ap-northeast-1.amazonaws.com; object-src 'none'; script-src 'self' 'unsafe-inline' https://browser.sentry-cdn.com https://www.google-analytics.com https://www.googletagmanager.com https://ssl.google-analytics.com https://cdn.jsdelivr.net https://static.line-scdn.net 'nonce-'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' 'unsafe-inline' https://fonts.gstatic.com; script-src-attr 'none'; report-uri /csp/report 1
default-src 'self'; script-src 'self' apis.google.com; script-src-elem 'self' gstatic.com *.googleapis.com google.com *.google.com 'unsafe-inline' *.gstatic.com *.datadoghq.com *.datadoghq-browser-agent.com *.amplitude.com cdn.jsdelivr.net; img-src 'self' data: *.googleapis.com *.gstatic.com *.google.com; connect-src 'self' *.amplitude.com *.googleapis.com *.tomra.cloud browser-intake-datadoghq.com *.browser-intake-datadoghq.com cdn.jsdelivr.net *.google.com; frame-src 'self' *.google.com *.firebaseapp.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' fonts.googleapis.com; style-src-attr 'self' 'unsafe-inline'; font-src 'self' fonts.gstatic.com; worker-src 'self' blob:; form-action 'self'; frame-ancestors 'self'; base-uri 'self'; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pube7d052325d2ca600d1e54d20bd5c2195&dd-evp-origin=content-security-policy&ddsource=csp-report 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'nonce-gvBwFEFSHBPKhxQ/UzMlParV' 'strict-dynamic' 'report-sample'; script-src-attr 'none'; style-src 'self' 'nonce-gvBwFEFSHBPKhxQ/UzMlParV' 'report-sample'; style-src-attr 'unsafe-inline'; img-src 'self' data: https://www.rexera.com https://secure.gravatar.com; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://stats.g.doubleclick.net; frame-src https://www.googletagmanager.com https://www.youtube.com https://youtube.com; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests 1
default-src 'self'; script-src 'nonce-H5+lCH9CvckgUdfwgXwAdQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-UREGjh5Y5RQ4t8suQocVhg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
font-src fonts.gstatic.com *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net fonts.cdnfonts.com use.typekit.net data: 'self' 'unsafe-inline'; form-action https://www.facebook.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube-nocookie.com *.youtube.com *.braintreegateway.com player.vimeo.com pilot-payflowlink.paypal.com *.googletagmanager.com https://www.facebook.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com https://www.google.com/recaptcha/ *.paypal.com google.com *.google.com 'self' 'unsafe-inline'; img-src *.googleapis.com *.gstatic.com stats.g.doubleclick.net www.google.com www.facebook.com www.googletagmanager.com *.adobe.com googleads.g.doubleclick.net analytics.google.com *.vimeocdn.com *.youtube.com maps.googleapis.com *.yandex.ru *.roma.rs assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com bid.g.doubleclick.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com i.ytimg.com p.typekit.net *.paypal.com *.typekit.net validator.swagger.io https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src *.googleapis.com *.gstatic.com *.googletagmanager.com *.google-analytics.com connect.facebook.net googleads.g.doubleclick.net stats.g.doubleclick.net *.yandex.com *.roma.rs assets.adobedtm.com *.adobe.com www.googleadservices.com *.vimeocdn.com *.clarity.ms *.youtube.com  www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets assets.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net fonts.cdnfonts.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.avada.io dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.googleapis.com https://get.geojs.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.gstatic.com *.googletagmanager.com *.google-analytics.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googletagmanager.com *.google-analytics.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googletagmanager.com *.google-analytics.com *.stats.g.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.getflowbox.com v2.zopim.com embed.tawk.to *.commerce-connector.com *.flixcar.com *.iadvize.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.adyen.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.adyen.com *.sameday.ro c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.2performant.com *.doubleclick.net *.pinterest.com *.force.com *.facebook.com *.iadvize.com *.groupeseb.com *.creativecdn.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.adyen.com tracker.aqurate.ai https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.getflowbox.com v2assets.zopim.io *.google.ro *.facebook.com *.widgetwhats.com tawk.link compari.ro ct.pinterest.com *.flix360.com *.flixcar.com *.flix360.io *.iadvize.com *.3lift.com *.doubleclick.net *.google.com *.nexx360.io mny.ro *.reddit.com *.redditstatic.com *.criteo.com *.creativecdn.com *.taboola.com *.cartbooster.io *.yimg.com *.bannercrowd.net *.opera.com *.bidswitch.net *.connectad.io *.yahoo.com *.pubmatic.com *.media.net *.casalemedia.com id5-sync.com *.360yield.com *.postrelease.com *.outbrain.com *.smartadserver.com *.teads.tv *.tremorhub.com *.yieldlab.net *.1rx.io *.unrulymedia.com *.demdex.net *.agkn.com *.33across.com *.seedtag.com *.sonobi.com *.openx.net *.bing.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com tracker.aqurate.ai *.sameday.ro unpkg.com/map-fanbox-points@0.0.5/umd/map-fanbox-points.js https://maps.googleapis.com https://player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.getflowbox.com *.zdassets.com v2.zopim.com *.facebook.net *.facebook.com attr-2p.com *.widgetwhats.com chimpstatic.com embed.tawk.to *.jsdelivr.net *.hotjar.com *.arukereso.com *.gstatic.com *.clarity.ms *.themarketer.com *.pinimg.com *.pinterest.com *.enzuzo.com cdn-cookieyes.com *.googlesyndication.com *.commerce-connector.com *.force.com *.salesforceliveagent.com aqurate.ai *.flixcar.com *.flix360.io *.flixfacts.com popupsmart.com *.sharethis.com *.tiktok.com *.omniconvert.com *.2performant.com tagmanager.google.com halc.iadvize.com *.iadvize.com *.creativecdn.com *.cloudfront.net mny.ro *.redditstatic.com *.criteo.com *.taboola.com *.cartbooster.io *.yimg.com *.bannercrowd.net *.retargeted.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.sameday.ro assets.braintreegateway.com *.getflowbox.com *.googleapis.com *.widgetwhats.com embed.tawk.to *.googletagmanager.com tpc.googlesyndication.com *.cloudfront.net *.commerce-connector.com *.force.com *.popupsmart.com popupsmart.com *.flixcar.com tagmanager.google.com *.iadvize.com 'self' data: 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.getflowbox.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.adyen.com tracker.aqurate.ai *.fancourier.ro https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com *.getflowbox.com ekr.zdassets.com wss://widget-mediator.zopim.com pagead2.googlesyndication.com *.google.ro googleads.g.doubleclick.net stats.g.doubleclick.net region1.analytics.google.com *.2performant.com *.widgetwhats.com zdata-ro-bellabike.s3.eu-west-1.amazonaws.com *.tawk.to kfea.zendesk.com api.edrone.me *.themarketer.com *.pinterest.com *.clarity.ms *.commerce-connector.com *.facebook.com *.hotjar.com *.hotjar.io *.sharethis.com *.enzuzo.com *.flixcar.com *.tiktok.com *.omniconvert.com www.google-analytics.com region1.google-analytics.com *.iadvize.com *.usehardal.com *.creativecdn.com *.rowenta.ro *.rowenta.com *.reddit.com *.yimg.com *.taboola.com *.doubleclick.net dv-c3e594c6d429469e90b54478358619c3.ecs.us-east-1.on.aws 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.getflowbox.com widget-mediator.zopim.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-WL1Ku-yu0D7VGoj6VS_orw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'nonce-NeNralWhu51Pg48QTv2iJQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-XVviSh6pZkSk0iTIT/5w2w==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'nonce-uK9Xzgl5ZiZ09u5CpyJ2jA==' 'strict-dynamic' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://apis.google.com https://js.sentry-cdn.com https://browser.sentry-cdn.com https://connect.facebook.net https://analytics.tiktok.com https://saku-ticket-prod.firebaseapp.com https://static-content.payment.global.rakuten.com https://aq-ess.sakuticket.jp; script-src-elem 'self' 'nonce-uK9Xzgl5ZiZ09u5CpyJ2jA==' 'strict-dynamic' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://apis.google.com https://js.sentry-cdn.com https://browser.sentry-cdn.com https://connect.facebook.net https://analytics.tiktok.com https://saku-ticket-prod.firebaseapp.com https://static-content.payment.global.rakuten.com https://aq-ess.sakuticket.jp; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; manifest-src 'self' https://sakuticket.jp https://www.sakuticket.jp; media-src 'self' https://actions.google.com; connect-src 'self' data: https://*.googleapis.com https://apis.google.com https://apis.google.com:443 https://www.google-analytics.com https://region1.google-analytics.com https://region1.analytics.google.com https://www.googletagmanager.com https://www.gstatic.com https://ssl.gstatic.com https://fonts.gstatic.com https://fonts.gstatic.com:443 https://api64.ipify.org https://sentry.io https://*.ingest.sentry.io https://*.ingest.us.sentry.io https://bank.teraren.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://pagead2.googlesyndication.com:443 https://www.googleadservices.com https://www.google.com https://www.google.at https://www.google.ba https://www.google.be https://www.google.bg https://www.google.by https://www.google.ca https://www.google.ch https://www.google.cl https://www.google.co.id https://www.google.co.il https://www.google.co.in https://www.google.co.jp https://www.google.co.kr https://www.google.co.nz https://www.google.co.th https://www.google.co.uk https://www.google.co.za https://www.google.com.ar https://www.google.com.au https://www.google.com.bd https://www.google.com.br https://www.google.com.bz https://www.google.com.co https://www.google.com.cy https://www.google.com.et https://www.google.com.hk https://www.google.com.kh https://www.google.com.lb https://www.google.com.mt https://www.google.com.mx https://www.google.com.my https://www.google.com.om https://www.google.com.pe https://www.google.com.ph https://www.google.com.pk https://www.google.com.py https://www.google.com.sa https://www.google.com.sg https://www.google.com.tr https://www.google.com.tw https://www.google.com.ua https://www.google.com.vn https://www.google.cz https://www.google.de https://www.google.dk https://www.google.es https://www.google.fi https://www.google.fr https://www.google.hr https://www.google.hu https://www.google.ie https://www.google.it https://www.google.la https://www.google.lk https://www.google.lt https://www.google.mn https://www.google.nl https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.ru https://www.google.se https://connect.facebook.net https://analytics.tiktok.com https://*.tiktokw.us https://analytics.twitter.com https://static.ads-twitter.com https://ad.doubleclick.net https://www.facebook.com https://analytics.google.com https://stats.g.doubleclick.net https://t.co/i/adsct https://t.co/1/i/adsct https://t.co/i/adsctp https://t.co/1/i/adsctp https://www.google.com:443 https://www.google.at:443 https://www.google.ba:443 https://www.google.be:443 https://www.google.bg:443 https://www.google.by:443 https://www.google.ca:443 https://www.google.ch:443 https://www.google.cl:443 https://www.google.co.id:443 https://www.google.co.il:443 https://www.google.co.in:443 https://www.google.co.jp:443 https://www.google.co.kr:443 https://www.google.co.nz:443 https://www.google.co.th:443 https://www.google.co.uk:443 https://www.google.co.za:443 https://www.google.com.ar:443 https://www.google.com.au:443 https://www.google.com.bd:443 https://www.google.com.br:443 https://www.google.com.bz:443 https://www.google.com.co:443 https://www.google.com.cy:443 https://www.google.com.et:443 https://www.google.com.hk:443 https://www.google.com.kh:443 https://www.google.com.lb:443 https://www.google.com.mt:443 https://www.google.com.mx:443 https://www.google.com.my:443 https://www.google.com.om:443 https://www.google.com.pe:443 https://www.google.com.ph:443 https://www.google.com.pk:443 https://www.google.com.py:443 https://www.google.com.sa:443 https://www.google.com.sg:443 https://www.google.com.tr:443 https://www.google.com.tw:443 https://www.google.com.ua:443 https://www.google.com.vn:443 https://www.google.cz:443 https://www.google.de:443 https://www.google.dk:443 https://www.google.es:443 https://www.google.fi:443 https://www.google.fr:443 https://www.google.hr:443 https://www.google.hu:443 https://www.google.ie:443 https://www.google.it:443 https://www.google.la:443 https://www.google.lk:443 https://www.google.lt:443 https://www.google.mn:443 https://www.google.nl:443 https://www.google.pl:443 https://www.google.pt:443 https://www.google.ro:443 https://www.google.ru:443 https://www.google.se:443 https://*.tiktokw.us:443 https://analytics.twitter.com:443 https://static.ads-twitter.com:443 https://ad.doubleclick.net:443 https://www.facebook.com:443 https://analytics.google.com:443 https://stats.g.doubleclick.net:443 https://payment.global.rakuten.com https://static-content.payment.global.rakuten.com https://payvault.global.rakuten.com https://sakuticket.jp https://www.sakuticket.jp https://asia-northeast1-saku-ticket-prod.cloudfunctions.net https://saku-ticket-prod.firebaseapp.com https://id.amob.jp https://aq-ess.sakuticket.jp https://capi-automation.s3.us-east-2.amazonaws.com; frame-src https://www.google.com https://www.gstatic.com https://www.googletagmanager.com https://www.facebook.com https://saku-ticket-prod.firebaseapp.com https://static-content.payment.global.rakuten.com https://sakuticket.jp https://www.sakuticket.jp; child-src 'self' blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; form-action 'self' https://payment.global.rakuten.com https://www.facebook.com; upgrade-insecure-requests; report-uri https://o1057948.ingest.us.sentry.io/api/4508323278159872/security/?sentry_key=7a516df40f9edada722a09357c338cc9; report-to csp-endpoint 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self' 1
script-src 'self'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https://pagead2.googlesyndication.com https://www.googletagmanager.com https://www.googletagservices.com https://partner.googleadservices.com https://adservice.google.com https://adservice.google.co.in https://widget.supercounters.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com; img-src 'self' data: https:; font-src 'self' data: https://cdnjs.cloudflare.com; frame-src 'self' https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://www.googletagmanager.com; connect-src 'self' https://www.google-analytics.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://widget.supercounters.com 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' sbb.com.br *.sbb.com.br wake-components.fbitsstatic.net sbb.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br cdn.jsdelivr.net cdnjs.cloudflare.com stats.g.doubleclick.net h.clarity.ms www.google.com.br www.clarity.ms scripts.clarity.ms; frame-ancestors *.sbb.com.br sbb.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
default-src 'self'; script-src 'nonce-J2VB+Eu6IOfuGxz9qv5AMA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://*.google.com https://www.gstatic.com https://*.gstatic.com https://connect.facebook.net https://static.cloudflareinsights.com https://challenges.cloudflare.com https://*.challenges.cloudflare.com https://www.youtube.com https://*.youtube.com https://*.gateway.mastercard.com https://*.ipg.com https://*.ipay.lk https://*.boc.lk blob:; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://*.google.com https://www.gstatic.com https://*.gstatic.com https://connect.facebook.net https://static.cloudflareinsights.com https://challenges.cloudflare.com https://*.challenges.cloudflare.com https://www.youtube.com https://*.youtube.com https://*.gateway.mastercard.com https://*.ipg.com https://*.ipay.lk https://*.boc.lk blob:; style-src 'self' 'unsafe-inline' data:; img-src 'self' data: https: blob: https://scopecinemas-v2.s3.amazonaws.com https://www.facebook.com https://www.google-analytics.com https://*.ytimg.com; font-src 'self' data: https://fonts.gstatic.com https://*.gstatic.com; media-src 'self' blob: data: https://scopecinemas-v2.s3.amazonaws.com https://*.s3.amazonaws.com; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://translate.googleapis.com https://*.googleapis.com https://www.facebook.com https://*.facebook.com https://connect.facebook.net https://cloudflareinsights.com https://*.cloudflareinsights.com https://www.youtube.com https://*.youtube.com https://*.gateway.mastercard.com https://*.ipg.com https://*.ipay.lk https://*.boc.lk; frame-src 'self' https://www.facebook.com https://*.facebook.com https://www.google.com https://*.google.com https://www.gstatic.com https://*.gstatic.com https://www.youtube.com https://*.youtube.com https://*.youtube-nocookie.com https://*.gateway.mastercard.com; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com https://*.facebook.com; upgrade-insecure-requests; report-uri https://www.scopecinemas.com/api/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.youtube.com https://s.ytimg.com https://cdn.quilljs.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://cdn.quilljs.com; font-src 'self' data:; img-src 'self' data: blob: https:; media-src 'self' data: https:; connect-src 'self'; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://open.spotify.com https://w.soundcloud.com; worker-src 'self' blob:; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; report-uri /core/csp-report/ 1
script-src 'self' 'nonce-v3sKeXrr5FnGMNfY9yOQMAWHQxLfldrAZVd1Dx+o92Y=' 'strict-dynamic' 'wasm-unsafe-eval' www.youtube.com  az416426.vo.msecnd.net cdn.cookielaw.org www.google-analytics.com maps.googleapis.com www.googletagmanager.com  dl.episerver.net www.youtube.com www.google.com www.gstatic.com snap.licdn.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.com.ai https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.ms https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.vg https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat  https://connect.facebook.net/ https://munchkin.marketo.net/ static.hotjar.com script.hotjar.com https://cdn.jsdelivr.net/ https://cdn.cookielaw.org/;object-src 'none';base-uri 'self';report-uri https://o4507537122852864.ingest.de.sentry.io/api/4507764299726928/security/?sentry_key=2e67b3fa9c193f38db8ea33933d09ffa&sentry_environment=production&sentry_release=sprint24; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https:; img-src 'self' data: blob: https:; frame-ancestors 'self' 1
default-src 'self'; script-src 'nonce-0g5uYwRg8PXlLUOV5hUcRg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'unsafe-inline' 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' https://static.serum.com.pl https://serum.com.pl https://s1.serum.com.pl https://osozre.kamsoft.local https://unpkg.com https://ad.osoz.pl; script-src-elem 'unsafe-eval' 'unsafe-inline' 'self' https://static.serum.com.pl https://serum.com.pl https://s1.serum.com.pl https://osozre.kamsoft.local https://ad.osoz.pl https://unpkg.com https://osozre.kamsoft.local https://ajax.googleapis.com https://cdnjs.cloudflare.com https://code.jquery.com; style-src 'unsafe-inline' 'self'  https://static.serum.com.pl https://serum.com.pl https://s1.serum.com.pl https://fonts.googleapis.com https://unpkg.com https://osozre.kamsoft.local https://ad.osoz.pl; style-src-elem 'unsafe-inline' 'self'  https://static.serum.com.pl https://serum.com.pl https://s1.serum.com.pl https://fonts.googleapis.com https://unpkg.com https://osozre.kamsoft.local https://ad.osoz.pl https://re.osoz.pl; font-src 'self' https://static.serum.com.pl https://serum.com.pl https://s1.serum.com.pl https://fonts.gstatic.com; img-src 'self' https://static.serum.com.pl https://serum.com.pl https://s1.serum.com.pl https://re.osoz.pl https://api.kamsoft.pl https://ad.osoz.pl http://ws4.pharmindex.pl https://ws3.pharmindex.pl https://pljasien.pl blob: data:; child-src 'self' https://static.serum.com.pl https://serum.com.pl https://s1.serum.com.pl; object-src https://static.serum.com.pl https://serum.com.pl https://s1.serum.com.pl blob: data:; connect-src 'self' https://static.serum.com.pl https://serum.com.pl https://s1.serum.com.pl https://fonts.gstatic.com https://dc.services.visualstudio.com https://ad.osoz.pl https://osozre.kamsoft.local; frame-src 'self' https://static.serum.com.pl https://serum.com.pl https://s1.serum.com.pl https://repoedm-dev.azure-api.net https://edm-suite.kamsoft.pl https://api.kamsoft.pl https://api.pharmindex.pl blob: data:; frame-ancestors 'self' https://static.serum.com.pl https://serum.com.pl https://s1.serum.com.pl; media-src 'unsafe-eval' 'unsafe-inline' 'self' https://static.serum.com.pl https://serum.com.pl https://s1.serum.com.pl data: blob:; report-uri https://dev.serum.com.pl/cspreps1; report-to csp-endpoint 1
default-src 'self';           object-src 'none';           base-uri 'self';           frame-ancestors 'self';           frame-src 'self' https://consentcdn.cookiebot.com https://www.googletagmanager.com https://googleads.g.doubleclick.net;           img-src 'self' data: https: blob:;           script-src 'self' 'nonce-ucWjSKMIBHd60F51j1qapA==' 'unsafe-eval' https:;           script-src-elem 'self' 'nonce-ucWjSKMIBHd60F51j1qapA==' https://www.googletagmanager.com https://googleads.g.doubleclick.net https://widgets.trustedshops.com https://widget.trustpilot.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://integrations.etrusted.com https://cdn.jsdelivr.net https://static.criteo.net https://dynamic.criteo.com https://sslwidget.criteo.com https://ajax.googleapis.com https://connect.facebook.net https://bat.bing.com https://www.clarity.ms;           script-src-attr 'self' 'unsafe-inline';           style-src 'self' 'unsafe-inline' https:;           font-src 'self' data: https:;           connect-src 'self' https:;           report-uri /csp-report 1
object-src 'none';base-uri 'self';script-src 'nonce-c4jfsHuMOtW4ii4vn5kzvA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' SingularMedicamentos.com.br *.SingularMedicamentos.com.br wake-components.fbitsstatic.net singularmedicamentos.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br *.singularmedicamentos.com.br *.ecommercegateway.com.br *.itau.com.br *.itau.com *.itaushopline.com.br *.itaushopline.com *.ebit.com.br imgs.ebit.com.br *.heatmap.it *.g.doubleclick.net *.rdstation.com.br rdstation.com.br teste.com.br checkout.singularmedicamentos.com.br pagar.me mundipagg.conector.gateway.fbits.net *.conector.gateway.fbits.net googleadservices.com *.uc.r.appspot.com ajax.googleapis.com *.googleapis.com *.cloudflare.com *.metaffiliation.com rd.afftrack.pro rtgpix.com tags.fulllab.com.br ca.enviou.com.br js.cookieless-data.com event.getblue.io *.enviou.com.br *.cookieless-data.com cookieless-data.com *.sddan.com *.getblue.io *.targeting.voxus.com.br *.targeting.voxus.tv *.api.ipify.org *.api.voxus.tv *.loggly.com *.secure.adnxs.com *.voxus.com.br targeting.voxus.com.br *.voxus.tv api.voxus.tv cdn.targeting.voxus.com.br targeting.voxus.tv gstatic.com *.brasilapi.com.br brasilapi.com.br reviews-api.konfidency.com.br *.clarity.ms *.konfidency.com.br *.fontawesome.com *.rd.services n8n.omni360agencia.com.br analytics.tiktok.com adscool.net *.tiktokw.us cloudfront.net uwmzytpguwrmnlohuykd.supabase.co *.omni360agencia.com.br *.google.com.br *.googleadservices.com stats.g.doubleclick.net googleads.g.doubleclick.net *.youtube.com cdn.jsdelivr.net affys.me; frame-ancestors *.SingularMedicamentos.com.br SingularMedicamentos.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://connect.facebook.net https://*.googleads.g.doubleclick.net https://cdn.jsdelivr.net https://cdn.sinnada.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.googletagmanager.com https://cdn.sinnada.com; font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com https://fonts.bunny.net https://cdn.sinnada.com; img-src 'self' https://cdn.sinnada.com https://www.googletagmanager.com https://*.google-analytics.com https://*.google.com https://*.googleads.g.doubleclick.net https://www.facebook.com data: blob:; frame-src https://www.google.com https://www.googletagmanager.com; connect-src 'self' https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://www.google.com https://fonts.googleapis.com https://fonts.gstatic.com https://cdn.sinnada.com; media-src 'self' https://cdn.sinnada.com; base-uri 'self'; form-action 'self' https://reservation.sinnada.com; report-uri https://sinnada.com/csp-report 1
default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval' 1
font-src *.fontawesome.com https://fonts.gstatic.com 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com landofcoder.com *.mercadolibre.com https://pagseguro.uol.com.br https://sandbox.pagseguro.uol.com.br https://www.google.com/ https://www.youtube.com/ https://www.facebook.com/ *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar *.mercadolivre.com https://pagseguro.uol.com.br https://sandbox.pagseguro.uol.com.br https://stc.pagseguro.uol.com.br https://sandbox.stc.pagseguro.uol.com.br https://www.google.com/ https://d335luupugsy2.cloudfront.net https://www.google.com.br https://www.googletagmanager.com *.gstatic.com *.facebook.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com js.authorize.net jstest.authorize.net js.braintreegateway.com cdn-scripts.signifyd.com www.youtube.com landofcoder.com *.avada.io *.mlstatic.com *.mercadopago.com http://viacep.com.br https://stc.pagseguro.uol.com.br https://stc.sandbox.pagseguro.uol.com.br https://d335luupugsy2.cloudfront.net https://static.zdassets.com https://googleads.g.doubleclick.net https://www.gstatic.com https://www.google.com/ *.cloudflare.com https://www.googletagmanager.com tagmanager.google.com analytics.google.com *.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.fontawesome.com https://fonts.googleapis.com tagmanager.google.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src https://static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com landofcoder.com https://get.geojs.io *.avada.io *.mercadopago.com *.mercadolibre.com https://ekr.zdassets.com https://sacsitiodamata.zendesk.com https://popups.rdstation.com.br https://pageview-notify.rdstation.com.br wss://widget-mediator.zopim.com https://google.com/ *.google-analytics.com analytics.google.com *.facebook.net 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'nonce-0WJk4orxny+673N7QdkK/g==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-bjD/l2APnw9o/oHjv0xQ8A==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
object-src 'none';base-uri 'self';script-src 'nonce-DbnvjViShaQBdeMoD-sluw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src https://www.googletagmanager.com *.googleapis.com *.gstatic.com https://use.typekit.net https://geowidget.easypack24.net *.fontawesome.com fonts.gstatic.com webetech.pl webep1.com *.inpost.pl fonts.googleapis.com https://fonts.bunny.net *.gls.com *.szybkapaczka.pl *.gls-poland.com/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com sandbox.przelewy24.pl secure.przelewy24.pl 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://www.googletagmanager.com https://td.doubleclick.net https://cookie.inpost.pl https://geowidget-app.inpost.pl/ https://sandbox-easy-geowidget.easypack24.net/ pay.google.com apm.przelewy24.pl *.przelewy24.pl *.espago.com webetech.pl webep1.com *.inpost.pl www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.szybkapaczka.pl *.gls-poland.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com https://ekipatonosi.pl https://indeste.pl https://genzie.store https://influcenter.pl https://krakowkings.store https://hi-store.pl https://sklepbazy.pl https://sklepfazy.pl https://static.paynow.pl *.cloudfront.net https://player.vimeo.com https://www.google.pl https://www.facebook.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org static.przelewy24.pl www.gstatic.com gstatic.com track.webepartners.pl https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://api.mapbox.com *.szybkapaczka.pl *.gls-poland.com/ *.gls-poland.com.pl/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com https://player.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ tagmanager.google.com https://www.googletagmanager.com https://ekipatonosi.pl https://indeste.pl https://genzie.store https://influcenter.pl https://krakowkings.store https://hi-store.pl https://sklepbazy.pl https://sklepfazy.pl https://static.paynow.pl https://developer.gls-poland.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org sandbox.przelewy24.pl secure.przelewy24.pl pay.google.com apm.przelewy24.pl webetech.pl webep1.com *.avada.io *.shopify.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.szybkapaczka.pl *.gls-poland.com/ sandbox-global-geowidget-sdk.easypack24.net geowidget.inpost-group.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://developer.gls-poland.com https://use.typekit.net https://geowidget.easypack24.net https://geowidget.inpost.pl *.fontawesome.com fonts.googleapis.com webetech.pl webep1.com *.inpost.pl https://fonts.bunny.net *.szybkapaczka.pl *.gls-poland.com/ sandbox-global-geowidget-sdk.easypack24.net geowidget.inpost-group.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://geowidget.easypack24.net *.szybkapaczka.pl *.gls-poland.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.easypack24.net *.inpost.pl *.openstreetmap.org sandbox.przelewy24.pl secure.przelewy24.pl wss://ws.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl google.com www.google.com pay.google.com webetech.pl webep1.com https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.szybkapaczka.pl *.gls-poland.com/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src data: https://api.dhl.com https://www.ppl.cz 'self'; img-src data: https://* https://*.googletagmanager.com https://*.google-analytics.com https://*.trustedshops.com https://bat.bing.com https://www.ppl.cz 'self'; font-src data: https://fonts.googleapis.com  https://fonts.gstatic.com https://api.dhl.com https://*.trustedshops.com https://www.ppl.cz 'self'; style-src https://fonts.googleapis.com  'unsafe-inline' https://www.ppl.cz https://cdn.puxdesign.cz https://www.googletagmanager.com 'self'; script-src  'unsafe-inline' https://www.google.com https://www.youtube.com https://www.ppl.cz https://*.googletagmanager.com https://cdn.puxdesign.cz https://widget.packeta.com https://ps-maps.gls-czech.com https://api.dhl.com https://*.trustedshops.com https://www.gstatic.com https://bat.bing.com https://connect.facebook.net https://googleads.g.doubleclick.net https://*.clarity.ms https://c.bing.com https://www.heureka.cz https://cdn.heureka.group https://api.dpd.cz/ https://www.ppl.cz 'unsafe-eval' https://www.googletagmanager.com https://analytics.tiktok.com https://*.im9.cz https://*.seznam.cz https://www.lhinsights.com 'self'; style-src-attr 'unsafe-inline'; frame-src https://www.google.com https://www.youtube-nocookie.com https://www.youtube.com https://*.googletagmanager.com https://widget.packeta.com https://ps-maps.gls-czech.com https://maps.gls-czech.cz https://www.facebook.com https://api.dpd.cz/ https://www.googletagmanager.com https://*.im9.cz https://*.seznam.cz 'self'; connect-src https://www.google.com https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://widget.packeta.com https://api.dhl.com https://*.trustedshops.com https://*.etrusted.com https://*.trustbadge.com https://bat.bing.com https://connect.facebook.net https://bat.bing.net https://www.facebook.com https://*.clarity.ms https://c.bing.com https://www.ppl.cz https://sst.skodak.cz https://pagead2.googlesyndication.com https://analytics.tiktok.com https://*.seznam.cz https://stats.g.doubleclick.net https://api.mapy.cz https://h.seznam.cz 'self'; worker-src blob:; child-src blob: 1
frame-ancestors 'self' https://s.brightspace.com https://*.ally.ac https://leaplti.desire2learn.com/ https://leaplti-fr.brightspace.com/ https://tryleap.brightspace.com/ https://leaplti-es.desire2learn.com/ https://leaplti-ptbr.desire2learn.com/ https://leaplti-us.brightspace.com/ https://leaplti-apac.brightspace.com/ https://leaplti-emea.brightspace.com/ https://leapqa.net https://leaplti-ap.brightspace.com https://login.microsoftonline.com/ https://login.live.com/ https://cdn.lcs.brightspace.com/ https://leaplti-in.brightspace.com; report-uri https://logger.ca-central-1.logging.brightspace.com/log/csp/ls9q9JCU0q0ixjfu2cP45QAAAaCY7QmK 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://googletagmanager.com https://connect.facebook.net https://us.i.posthog.com https://app.posthog.com https://anl.smsperkasa.com https://www.google-analytics.com https://www.google.com https://static.cloudflareinsights.com https://analytics.ahrefs.com https://www.googleadservices.com https://pagead2.googlesyndication.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.googletagmanager.com; img-src 'self' data: blob: https://img.smsperkasa.com https://img.besisni.com https://cpanel-blog.smsperkasa.com https://secure.gravatar.com https://www.facebook.com https://www.google-analytics.com https://lh3.googleusercontent.com https://www.googletagmanager.com https://www.google.com https://www.google.co.id https://googleads.g.doubleclick.net https://stats.g.doubleclick.net; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://us.i.posthog.com https://app.posthog.com https://anl.smsperkasa.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://channels.smsperkasa.com https://channels.besisni.com https://cpanel-blog.smsperkasa.com wss://channels.smsperkasa.com wss://channels.besisni.com https://static.cloudflareinsights.com https://analytics.ahrefs.com; frame-src 'self' https://www.youtube.com https://youtube-nocookie.com https://player.vimeo.com https://www.google.com https://*.sibforms.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint 1
default-src 'self'; script-src 'nonce-cweLJh5AOy1u8MKEblQOYQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com https://cdn.jsdelivr.net components-bnpl-pe-bbva-production.moprestamo.com sole.com.pe mcstaging.sole.com.pe https://components-bnpl-pe-bbva-moprestamo-com.s3.amazonaws.com *.fontawesome.com https://fonts.bunny.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://sole.qualtrics.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.payment.pagoefectivo.pe td.doubleclick.net https://h.online-metrix.net https://static-content-qas.vnforapps.com https://m.vnforapps.com https://sole.qualtrics.com www.facebook.com *.moprestamo.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.maps.googleapis.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com mcstaging.sole.com.pe https://mcprod.sole.com.pe www.facebook.com www.google.cl www.google.com.ar www.google.com.pe www.google-analytics.com www.sole.com.pe sole.com.pe *.apurata.com sandbox.pulsedive.com *.vnforapps.com *.clarity.ms *.bing.com static.apurata.com https://www.google.com.co https://app.apurata.com https://static-content.vnforapps.com https://m.vnforapps.com https://*.online-metrix.net https://siteintercept.qualtrics.com *.moprestamo.com https://firebasestorage.googleapis.com mageside.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com *.gstatic.com admin.revenuehunt.com connect.facebook.net components-bnpl-pe-bbva-production.moprestamo.com widgets-static.embluemail.com *.clarity.ms cdnjs.cloudflare.com zn3fnfkjfbzjxoun4-sole.siteintercept.qualtrics.com siteintercept.qualtrics.com *.vnforapps.com *.moprestamo.com https://*.inferencelabs9.com mcstaging.sole.com.pe sole.com.pe components-bnpl-pe-bbva-green.moprestamo.com widgets-api.embluemail.com www.clarity.ms js-agent.newrelic.com gateway.payulatam.com static-content-qas.vnforapps.com www.google.com www.gstatic.com https://m.vnforapps.com https://*.online-metrix.net *.avada.io *.shopify.com www.facebook.com graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.maps.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com cdn.jsdelivr.net components-bnpl-pe-bbva-production.moprestamo.com sole.com.pe mcstaging.sole.com.pe *.moprestamo.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.googleapis.com *.gstatic.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com analytics.google.com www.google-analytics.com siteintercept.qualtrics.com apurata.com *.powerpay.pe *.clarity.ms *.moprestamo.com https://*.inferencelabs9.com https://www.google.com sole.com.pe mcstaging.sole.com.pe bam.nr-data.net a.clarity.ms https://stats.g.doubleclick.net https://mo-services-bbva-bnpl-pe-green.moprestamo.com https://maps.googleapis.com https://apurata.com https://h.online-metrix.net https://m.vnforapps.com https://www.google.com.co https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.maps.googleapis.com *.facebook.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src www.google.com bam.nr-data.net mcstaging.sole.com.pe a.clarity.ms www.google.com.co sole.com.pe *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://js.tosspayments.com https://cdn.paddle.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://api.soopeh.com https://api.classbud.com https://assets.soopeh.com https://avatars.soopeh.com https://api.dicebear.com https://api.qrserver.com https://www.google-analytics.com https://*.google-analytics.com https://stats.g.doubleclick.net; media-src 'self' blob: data: https://assets.soopeh.com; font-src 'self' data:; connect-src 'self' https://api.soopeh.com https://api.classbud.com https://api.tosspayments.com https://*.paddle.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net; worker-src 'self' blob:; manifest-src 'self'; frame-src https://*.tosspayments.com https://*.paddle.com; upgrade-insecure-requests 1
default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; frame-ancestors 'self' https://app.rightlinelab.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://connect.facebook.net https://d.line-scdn.net https://www.google-analytics.com https://www.googleadservices.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://cdn.rightlinelab.com https://www.googletagmanager.com https://www.google-analytics.com https://www.facebook.com https://tr.line.me https://d.line-scdn.net https://www.googleadservices.com https://googleads.g.doubleclick.net; font-src 'self' data:; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://connect.facebook.net https://www.facebook.com https://tr.line.me https://d.line-scdn.net https://googleads.g.doubleclick.net; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.googletagmanager.com https://td.doubleclick.net https://docs.google.com https://googleads.g.doubleclick.net; media-src 'self' https://cdn.rightlinelab.com; worker-src 'self' blob:; manifest-src 'self' 1
default-src 'self'; script-src 'nonce-JFUsXaNcftcUtT6BsLjqrw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self' replacements.okta.com signin.replacements.com *.oktacdn.com *.replacements.com; connect-src 'self' replacements.okta.com replacements-admin.okta.com signin.replacements.com *.oktacdn.com *.mixpanel.com *.mapbox.com replacements.kerberos.okta.com replacements.mtls.okta.com https://oinmanager.okta.com data: *.replacements.com *.ingest.sentry.io; script-src 'unsafe-inline' 'unsafe-eval' 'self' 'report-sample' replacements.okta.com signin.replacements.com *.oktacdn.com *.replacements.com; style-src 'unsafe-inline' 'self' 'report-sample' replacements.okta.com signin.replacements.com *.oktacdn.com *.replacements.com; frame-src 'self' replacements.okta.com replacements-admin.okta.com signin.replacements.com login.okta.com *.vidyard.com *.replacements.com; img-src 'self' replacements.okta.com signin.replacements.com *.oktacdn.com https://ok12static.oktacdn.com/fs/bcg/4/gfs9dry6mb9NvbOxK5d7 *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: *.replacements.com blob:; font-src 'self' replacements.okta.com signin.replacements.com data: *.oktacdn.com fonts.gstatic.com *.replacements.com; frame-ancestors 'self' https://www.starsupplier.com 1
connect-src https://visuel3d-secure.peugeot.com 'self' https://stats.g.doubleclick.net https://checkoutshopper-test.adyen.com/ api.salesforce.com https://web-modules-de-eu1.niceincontact.com https://psafinance-es.my.salesforce-scrt.com https://app-qqt.bvw-7d24512.lzb.stla-aws.net https://*.api.salesforce.com https://store.fiat.es https://www.gstatic.com https://visual3d-secure.opel-vauxhall.com https://ressource.gdpr-banner.awsmpsa.com https://europe-west1-cookiebannergdpr.cloudfunctions.net wss://*.iadvize.com https://psafinance-es.my.site.com https://www.google.com https://analytics.google.com https://api.gdpr-banner.awsmpsa.com https://fonts.googleapis.com/css2 *.amazonaws.com https://region1.google-analytics.com https://app.arcade.software wss://*.slack-gov-dev.com https://app-it.bvw-7d24512.lzb.stla-aws.net https://*.vf.force.com wss://api.salesforce.com https://*.salesforceliveagent.com https://dc.services.visualstudio.com https://idfed.mpsa.com https://ssl.gstatic.com https://cdn.cbweb.code-builder.platform.salesforce.com https://visuel3d-secure.citroen.com https://fast.wistia.net https://payments.salesforce.com/ https://www.paypal.com https://o11y.sfproxy-core1.sfdc-urlt2q.svc.sfdcfc.net/ui-telemetry https://stellantis.splunkcloud.com https://cxagent.nicecxone.com wss://*.slack.com https://consumer.marsh.es https://fonts.gstatic.com https://demo.arcade.software https://checkoutshopper-live.adyen.com/ https://www.afterbanks.com https://fonts.googleapis.com https://testing.ktp.es https://tagmanager.google.com https://psafinance-es.my.salesforce.com https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/ https://api2-dev.gdpr-banner.awsmpsa.com wss://*.api.salesforce.com https://www.google.com/recaptcha/ https://www.sandbox.paypal.com https://js.stripe.com/ https://rum-ingest.eu0.signalfx.com https://www.pagos.stellantis.com https://www.googletagmanager.com https://static.afterbanks.com https://www.google-analytics.com *.salesforce.com https://*.iadvize.com https://*.gestionmultas.com *.api.salesforce.com https://api2.gdpr-banner.awsmpsa.com wss://*.slack-gov.com; report-to sfdc-csp-ep; report-uri https://psafinance-es.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D1t000000qE9T&networkId=0DMTn0000000nFG&type=communities 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://*.algolia.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https://ik.imagekit.io https://www.google-analytics.com https://www.facebook.com https://*.fbcdn.net; media-src 'self' https://ik.imagekit.io; connect-src 'self' https://ik.imagekit.io https://www.google-analytics.com https://analytics.google.com https://www.facebook.com; frame-src 'self' https://www.google.com https://www.facebook.com; object-src 'none'; base-uri 'self'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.klarnacdn.net *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net www.facebook.com *.googlesyndication.com *.tiktok.com connect.facebook.net graph.facebook.com business.facebook.com *.klarna.com landofcoder.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://banners.helloretailcdn.com 'self' data: *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com connect.facebook.net graph.facebook.com business.facebook.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://core.helloretail.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com *.google.bg *.googletagmanager.com www.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com connect.facebook.net graph.facebook.com business.facebook.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ landofcoder.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.klarnacdn.net https://static.klaviyo.com *.fontawesome.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://core.helloretail.com https://helloretailcdn.com www.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com connect.facebook.net graph.facebook.com business.facebook.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ landofcoder.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'none'; object-src 'none'; script-src 'nonce-WdvNfKbEBvwzvSEmFA1KPg' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; report-uri https://logic.bg/csp-report; 1
base-uri 'none'; object-src 'none'; script-src 'nonce-nEiyZCbY8aifX7OCQ66SmQ' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; report-uri https://logic.bg/csp-report; 1
object-src 'none';base-uri 'self';script-src 'nonce-5-iNGvSVvasx-kxfwsdNtw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-IPIUGW9p1Onqi94PnWGvww' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-8U9QLE7wdhoGIsU7y7XXzg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'nonce-LdlJosMXnjXS5jvFKjcbxA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com sundberguat-m2-cdn.azureedge.net sundbergprd-m2-cdn.azureedge.net *.fonts.gstatic.com *.hawksearch.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com batchgeo.com https://spins0.arqspin.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.trackedlink.net *.ddlnk.net sundberguat-m2-cdn.azureedge.net sundbergprd-m2-cdn.azureedge.net *.repairclinic.com *.www.stageimages.repairclinic.com https://spins0.arqspin.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com sundberguat-m2-cdn.azureedge.net sundbergprd-m2-cdn.azureedge.net *.googleapis.com *.ajax.googleapis.com *.hawksearch.net https://www.sundbergamerica.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com webchat.dotdigital.com webchat.staging.dotdigital.com sundberguat-m2-cdn.azureedge.net sundbergprd-m2-cdn.azureedge.net manage.hawksearch.com *.googleapis.com *.fonts.googleapis.com *.hawksearch.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-uY40lf53HK0EUrgkn1il4w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' surfalive.com.br *.surfalive.com.br wake-components.fbitsstatic.net surfalive.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br criteo.net cloudflare.com smarthint.co zdassets.com googleadservices.com trustvox.com.br hertzen.com paypal.com zopim.com ebit.com.br criteo.com doubleclick.net paypalobjects.com *.criteo.net *.cloudflare.com *.smarthint.co *.zdassets.com *.googleadservices.com *.trustvox.com.br *.hertzen.com *.zopim.com *.ebit.com.br *.criteo.com *.doubleclick.net *.shoptarget.com.br shoptarget.com.br *.shopback.net *.shopconvert.com.br *.ckies.net *.linximpulse.net i.btg360.com.br gstatic.com *.lightwidget.com *.surfalive.com.br blog.surfalive.com.br bq-scripts.s3.amazonaws.com *.bonifiq.com.br *.compreconfie.com.br server.surfalive.com.br *.hotjar.com *.fontawesome.com *.surfshopvirtual.com.br *.tiktok.com *.crmback.io *.konfidency.com.br *.cbstatus.net *.crmbonus.com *.tiktokw.us *.youtube.com fbits.net google.com.br www.google.com.br; frame-ancestors *.surfalive.com.br surfalive.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
object-src 'none';base-uri 'self';script-src 'nonce-INTgsXgaq1_R47TleCrAtw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self';base-uri 'self';font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com;form-action 'self';frame-ancestors 'self';img-src 'self' data: blob: https:;object-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://cdn.tailwindcss.com https://unpkg.com;script-src-attr 'none';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;upgrade-insecure-requests;script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://cdn.tailwindcss.com https://unpkg.com;style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com;connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com;frame-src 'self' https://www.googletagmanager.com https://www.google.com;media-src 'self' blob: data: https:;worker-src 'self' blob:;manifest-src 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.googletagmanager.com/gtag/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https://www.googletagmanager.com https://www.google-analytics.com https://www.facebook.com; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com; base-uri 'self'; form-action 'self'; object-src 'none' 1
object-src 'none';base-uri 'self';script-src 'nonce-4H7pe62U9qIJxzv9JwSPvQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://clarity.ms; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://clarity.ms https://www.google-analytics.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 1
default-src 'self';base-uri 'self';frame-ancestors 'self' https://cdnapisec.kaltura.com/ https://epic.gateway.patientco.com/ https://epic.integration.gateway.patientco.com/;frame-src 'self' epichttp: https://cdnapisec.kaltura.com/ https://epic.gateway.patientco.com/ https://epic.integration.gateway.patientco.com/ https://epicproxy.et1098.epichosted.com https://pge.phreesia.net;script-src 'nonce-5dabd50200ea49cb9ed135109f99cdd6' https://www.tannermychart.org 'self';img-src https://* 'self' blob: data:;connect-src 'self' epichttp: https://epic.gateway.patientco.com https://epic.integration.gateway.patientco.com/;style-src https://www.tannermychart.org 'self' 'unsafe-inline';worker-src 'self' blob:;child-src 'self' blob:;form-action https://central.mychart.org/MyChart/ 'self';media-src https://* 'self' blob:; 1
default-src 'self'; script-src 'self' *.hubspot.com *.hsforms.com *.hs-sites.com *.hubspotusercontent.net *.hubapi.com *.hs-analytics.net *.hscollectedforms.net *.hs-banner.com *.hsadspixel.net static.hsappstatic.net code.jquery.com cdn.datatables.net cdn.jsdelivr.net maps.googleapis.com d2wy8f7a9ursnm.cloudfront.net *.oracle.com *.oraclecorp.com *.oraclecloud.com *.custhelp.com *.googletagmanager.com *.google-analytics.com *.googleadservices.com *.doubleclick.net *.facebook.net *.rnengage.com platform.twitter.com platform.linkedin.com *.banrural.niu.marketing banrural.niu.marketing https://*.hotjar.com https://*.hotjar.io https://*.hotjarcdn.com *.google.com 'strict-dynamic' 'nonce-O396/vKSoHT41YzrgUZY/w==' 'nonce-VWWFDmrbQ6PbwvYeJGhe9Q=='; style-src 'self' tailwindcss.com *.hubspot.com *.hsforms.com *.hs-sites.com *.hubspotusercontent.net *.fs1.hubspotusercontent-na1.net fonts.googleapis.com *.custhelp.com *.hsappstatic.net cdn.datatables.net cdn.jsdelivr.net *.banrural.niu.marketing banrural.niu.marketing https://*.hotjar.com https://*.hotjar.io https://*.hotjarcdn.com *.googletagmanager.com *.google.com; img-src 'self' data: blob: www.tailwindcss.com *.hubspot.com *.hsforms.com *.hs-sites.com *.hubspotusercontent.net *.hubspotusercontent-na1.net maps.googleapis.com *.gstatic.com forms.hsforms.com *.custhelp.com *.hsappstatic.net *.banrural.com.gt *.banrural.niu.marketing banrural.niu.marketing *.facebook.com connect.facebook.net px.ads.linkedin.com *.rnengage.com *.google.com *.google.com.gt *.googletagmanager.com *.google-analytics.com https://*.hotjar.com https://*.hotjar.io https://*.hotjarcdn.com; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com *.hubspotusercontent-na1.net *.custhelp.com *.banrural.niu.marketing banrural.niu.marketing static.hsappstatic.net; frame-src 'self' https://i-a.co blob: https://www.youtube.com https://docs.google.com https://www.google.com https://google.com https://www.banrural.com.gt https://21994660.fs1.hubspotusercontent-na1.net https://50794169.fs1.hubspotusercontent-na1.net *.hubspot.com *.hsforms.com *.hsforms.net play.hubspotvideo.com https://*.jotform.com *.oracle.com *.oraclecloud.com *.custhelp.com *.googletagmanager.com td.doubleclick.net platform.twitter.com banrural-klaro.tiiny.site https://*.hotjar.com; connect-src *.on.aws *.run.app https://stats.g.doubleclick.net https://analytics.ahrefs.com https://ad.doubleclick.net js.hs-banner.com banrural.com.gt unpkg.com *.contentsquare.net *.fs1.hubspotusercontent-na1.net 'self' https://static.hsappstatic.net https://js.hsforms.net static.hsappstatic.net *.hubspot.com *.hsforms.com *.hs-sites.com *.hubapi.com *.hubspotusercontent.net d2wy8f7a9ursnm.cloudfront.net *.oracle.com *.oraclecorp.com *.oraclecloud.com *.custhelp.com forms.hscollectedforms.net *.google.com *.google.com.gt *.googletagmanager.com *.google-analytics.com maps.googleapis.com *.banrural.niu.marketing banrural.niu.marketing px.ads.linkedin.com sessions.bugsnag.com otlp.bugsnag.com in.hotjar.com content.hotjar.io ws.hotjar.com wss://*.hotjar.com https://*.hotjar.com https://*.hotjar.io; worker-src 'self' blob:; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.bunny.net; font-src 'self' https://fonts.gstatic.com https://fonts.bunny.net; img-src 'self' data: blob: https: https://ui-avatars.com; connect-src 'self' https://fonts.bunny.net https://ui-avatars.com; worker-src https://cdnjs.cloudflare.com 'self' blob:; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.agechecker.net *.userway.org data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com app.parceltrackr.com trackr.sandbox.aheadworks.com *.authorize.net td.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.agechecker.net *.userway.org blob: *.sharethis.com https://aheadworks.com aheadworks.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ lb.data-dynamic.net www.google.co.in d3k81ch9hvuctc.cloudfront.net maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.agechecker.net cdn.userway.org *.sharethis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.authorize.net *.mouseflow.com cloudfront.barilliance.com static.cloudflareinsights.com ajax.cloudflare.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.agechecker.net cdn.userway.org *.sharethis.com https://static.klaviyo.com static-tracking.klaviyo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.agechecker.net *.userway.org *.sharethis.com https://places.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.authorize.net *.crwdcntrl.net *.amazonaws.com *.stbuttons.click www.barilliance.net stats.g.doubleclick.net *.googleapis.com *.wizzy.ai wss://sockets.wizzy.ai *.wizsearch.in wss://sockets.wizsearch.in 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.getflowbox.com v2.zopim.com embed.tawk.to *.commerce-connector.com *.flixcar.com *.iadvize.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.adyen.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.adyen.com *.sameday.ro c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.2performant.com *.doubleclick.net *.pinterest.com *.force.com *.facebook.com *.iadvize.com *.groupeseb.com *.creativecdn.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.adyen.com tracker.aqurate.ai tbicp.com https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.getflowbox.com v2assets.zopim.io *.google.ro *.facebook.com *.widgetwhats.com tawk.link compari.ro ct.pinterest.com *.flix360.com *.flixcar.com *.flix360.io *.iadvize.com *.3lift.com *.doubleclick.net *.google.com *.nexx360.io mny.ro *.reddit.com *.redditstatic.com *.criteo.com *.creativecdn.com *.taboola.com *.cartbooster.io *.yimg.com *.bannercrowd.net *.opera.com *.bidswitch.net *.connectad.io *.yahoo.com *.pubmatic.com *.media.net *.casalemedia.com id5-sync.com *.360yield.com *.postrelease.com *.outbrain.com *.smartadserver.com *.teads.tv *.tremorhub.com *.yieldlab.net *.1rx.io *.unrulymedia.com *.demdex.net *.agkn.com *.33across.com *.seedtag.com *.sonobi.com *.bing.com *.adtech.ink *.missena.io data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com tracker.aqurate.ai tbicp.com *.sameday.ro unpkg.com/map-fanbox-points@0.0.5/umd/map-fanbox-points.js https://maps.googleapis.com https://player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.mczbf.com *.getflowbox.com *.zdassets.com v2.zopim.com *.facebook.net *.facebook.com attr-2p.com *.widgetwhats.com chimpstatic.com embed.tawk.to *.jsdelivr.net *.hotjar.com *.arukereso.com *.gstatic.com *.clarity.ms *.themarketer.com *.pinimg.com *.pinterest.com *.enzuzo.com cdn-cookieyes.com *.googlesyndication.com *.commerce-connector.com *.force.com *.salesforceliveagent.com aqurate.ai *.flixcar.com *.flix360.io *.flixfacts.com popupsmart.com *.sharethis.com *.tiktok.com *.omniconvert.com *.2performant.com tagmanager.google.com halc.iadvize.com *.iadvize.com *.creativecdn.com *.cloudfront.net mny.ro *.redditstatic.com *.criteo.com *.taboola.com *.cartbooster.io *.yimg.com *.bannercrowd.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.sameday.ro assets.braintreegateway.com *.getflowbox.com *.googleapis.com *.widgetwhats.com embed.tawk.to *.googletagmanager.com tpc.googlesyndication.com *.cloudfront.net *.commerce-connector.com *.force.com *.popupsmart.com popupsmart.com *.flixcar.com tagmanager.google.com *.iadvize.com 'self' data: 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.getflowbox.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.adyen.com tracker.aqurate.ai *.fancourier.ro https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com *.getflowbox.com ekr.zdassets.com wss://widget-mediator.zopim.com pagead2.googlesyndication.com *.google.ro googleads.g.doubleclick.net stats.g.doubleclick.net region1.analytics.google.com *.2performant.com *.widgetwhats.com zdata-ro-bellabike.s3.eu-west-1.amazonaws.com *.tawk.to kfea.zendesk.com api.edrone.me *.themarketer.com *.pinterest.com *.clarity.ms *.commerce-connector.com *.facebook.com *.hotjar.com *.hotjar.io *.sharethis.com *.enzuzo.com *.flixcar.com *.tiktok.com *.omniconvert.com www.google-analytics.com region1.google-analytics.com *.iadvize.com *.usehardal.com *.creativecdn.com *.tefal.com.tr *.tefal.com *.reddit.com *.yimg.com *.taboola.com www.mczbf.com *.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.getflowbox.com widget-mediator.zopim.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://challenges.cloudflare.com https://sdk.mercadopago.com https://www.googletagmanager.com https://www.googleadservices.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://i.ytimg.com https://*.mlstatic.com https://www.google-analytics.com https://www.google.com https://www.google.com.br https://*.blob.core.windows.net; media-src 'self' https://*.blob.core.windows.net; font-src 'self' data:; connect-src 'self' https://api.mercadopago.com https://*.mercadopago.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com wss://ast.telemensagem.com.br:9093 wss://ast.telemensagem.com.br:2087; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://challenges.cloudflare.com https://*.mercadopago.com https://*.mercadolibre.com https://td.doubleclick.net; frame-ancestors 'none'; base-uri 'self'; form-action 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-ceYIp5novEWCZOsNGJdH-Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com *.klarnacdn.net *.fontawesome.com *.fonts.googleapis.com data: *.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com https://api.clerk.io https://cdn.clerk.io 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com secure-gateway.hipay-tpp.com *.hipay.com *.klarna.com *.addthis.com *.sharethis.com *.pinterest.com https://www.googletagmanager.com/ *.trustpilot.com *.weltpixel.com https://td.doubleclick.net https://*.doubleclick.net https://*.iubenda.com https://www.facebook.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://cdn.clerk.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.cdn.klarna.com *.klarnaevt.com *.klarnacdn.net *.cloudflare.com osm.klarnaservices.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.addthis.com *.sharethis.com *.pinterest.com *.cdninstagram.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.google.it https://*.googleadservices.com *.s.ytimg.com https://pagead2.googlesyndication.com https://www.facebook.com https://*.facebook.com https://connect.facebook.net widget.feedaty.com idb.iubenda.com https://api.clerk.io *.fontawesome.com *.tessilhotel.com https://c.clarity.ms https://*.clarity.ms https://c.bing.com https://*.bing.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://api.clerk.io https://cdn.clerk.io chimpstatic.com downloads.mailchimp.com *.list-manage.com secure-gateway.hipay-tpp.com *.hipay.com mpsnare.iesnare.com https://cdn.polyfill.io https://browser.sentry-cdn.com *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.addthis.com *.sharethis.com *.moatads.com *.addthisedge.com *.facebook.net *.pinterest.com *.instagram.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io *.trustpilot.com cdn.ampproject.org https://pagead2.googlesyndication.com raw.githubusercontent.com widget.feedaty.com idb.iubenda.com cdn.iubenda.com cs.iubenda.com custom.clerk.io *.tessilhotel.com www.clarity.ms static.zdassets.com code.upscope.io js.upscope.io https://cdn.iubenda.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://api.clerk.io https://cdn.clerk.io downloads.mailchimp.com *.hipay.com *.klarnacdn.net *.googleapis.com *.fontawesome.com *.trustpilot.com widget.feedaty.com idb.iubenda.com *.tessilhotel.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com data: mpsnare.iesnare.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.hipay.com wss://mpsnare.iesnare.com https://*.ingest.sentry.io *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com *.cloudflare.com *.addthis.com *.sharethis.com *.cardinalcommerce.com *.graph.instagram.com *.google-analytics.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io widget.feedaty.com idb.iubenda.com ekr.zdassets.com data--eu-central.upscope.io wss://data--eu-central.upscope.io tessilhotel.zendesk.com widget-mediator.zopim.com wss://widget-mediator.zopim.com https://b.clarity.ms https://*.clarity.ms https://pagead2.googlesyndication.com https://*.googlesyndication.com https://securepubads.g.doubleclick.net https://cpl.iubenda.com https://*.iubenda.com https://c.bing.com https://www.facebook.com https://*.facebook.com http://widget.trustpilot.com https://secure-gateway.hipay-tpp.com https://*.hipay-tpp.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https:; object-src 'none'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' https://www.googletagmanager.com https://widget.voxassist.ai https://apps.clientify.net https://analyticsplusdev.clientify.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://widget.voxassist.ai https://apps.clientify.net https://analyticsplusdev.clientify.net https://plus.clientify.com; frame-src 'self' https://www.googletagmanager.com https://apps.clientify.net https://plus.clientify.com; frame-ancestors 'self'; report-uri /csp-report.php; report-to csp-endpoint 1
default-src *; script-src 'unsafe-inline' https://www.google.com/; style-src 'unsafe-inline' https://www.google.com/; img-src *; font-src *; media-src *; frame-src 'none'; frame-ancestors 'none'; form-action 'none'; report-uri https://thespidershop.report-uri.com/r/d/csp/enforce 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://connect.facebook.net https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self' 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' thugnine.com.br *.thugnine.com.br wake-components.fbitsstatic.net thugnine.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br *.g.doubleclick.net *.googleadservices.com *.yourviews.com.br *.criteo.com *.yviews.com.br *.criteo.net *.pinimg.com *.pinterest.com d3bo67muzbfgtl.cloudfront.net api.edrone.me gstatic.com *.edrone.me; frame-ancestors *.thugnine.com.br thugnine.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
upgrade-insecure-requests; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; img-src https: data:; font-src https: data:; script-src 'nonce-IJywLDg3YZiDmrawqgd+vw==' 'strict-dynamic' 'unsafe-eval' https: 'self' blob:; default-src 'unsafe-inline' https:; connect-src https: wss:; report-uri /module/aperinsertscript/cspreport 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https://googletagmanager.com https://*.googletagmanager.com https://tagmanager.google.com https://*.tagmanager.google.com https://*.azureedge.net https://*.azurewebsites.net https://*.clarity.ms https://*.connectif.cloud https://*.doubleclick.net https://*.ggpht.com https://*.google.es https://*.google.com https://*.googleapis.com https://*.gstatic.com https://*.mxpnl.com https://*.oct8ne.com https://tiendamalagacf.com https://*.tiendamalagacf.com https://*.redsys.es https://*.sentry.io https://*.sequrapi.com https://*.sequracdn.com https://*.tiktok.com https://*.tiktokw.us https://*.trevenque.es https://*.typography.com https://*.youtube.com https://*.youtube-nocookie.com https://*.ytimg.com https://*.facebook.com https://*.facebook.net https://*.twitter.com https://*.instagram.com https://*.jsdelivr.net https://*.cloudflare.com https://*.paypal.com https://*.paypalobjects.com https://*.bootstrapcdn.com https://*.datatables.net https://*.highcharts.com https://code.highcharts.com https://cdn.tailwindcss.com https://unpkg.com https://code.jquery.com https://cartstack.com https://*.cartstack.com https://metricool.com https://*.metricool.com https://hotjar.com https://*.hotjar.com https://*.googlesyndication.com https://*.google-analytics.com https://clippingmagic.com https://*.clippingmagic.com https://intercom.io https://*.intercom.io https://*.intercomcdn.com https://bing.com https://*.bing.com https://cdn.cookielaw.org https://hertzen.com https://*.hertzen.com https://infird.com https://*.infird.com https://prestashop3.com https://*.prestashop3.com https://*.secured-pixel.com https://*.extensionscontrol.com https://js.chargebee.com https://connect.facebook.net https://*.connect.facebook.net; style-src 'self' 'unsafe-inline' https://googletagmanager.com https://tagmanager.google.com https://*.googleapis.com https://*.gstatic.com https://*.azurewebsites.net https://*.clarity.ms https://*.connectif.cloud https://*.doubleclick.net https://*.ggpht.com https://*.google.es https://*.google.com https://*.googletagmanager.com https://*.mxpnl.com https://*.oct8ne.com https://tiendamalagacf.com https://*.tiendamalagacf.com https://*.redsys.es https://*.sentry.io https://sequracdn.com https://*.sequracdn.com https://*.sequrapi.com https://*.tiktok.com https://*.tiktokw.us https://*.trevenque.es https://*.typography.com https://*.youtube.com https://*.youtube-nocookie.com https://*.ytimg.com https://*.facebook.com https://*.facebook.net https://*.twitter.com https://*.instagram.com https://*.jsdelivr.net https://*.cloudflare.com https://*.paypal.com https://*.paypalobjects.com https://*.bootstrapcdn.com https://*.datatables.net https://*.highcharts.com https://code.highcharts.com https://cdn.tailwindcss.com https://unpkg.com https://code.jquery.com https://fontawesome.com https://*.fontawesome.com https://honey.io https://*.honey.io https://ray.st https://*.ray.st; img-src 'self' data: blob: https:; font-src 'self' data: https://*.gstatic.com https://*.cdn.office.net https://*.azurewebsites.net https://*.clarity.ms https://*.connectif.cloud https://*.doubleclick.net https://*.ggpht.com https://*.google.es https://*.google.com https://*.googleapis.com https://*.googletagmanager.com https://*.mxpnl.com https://*.oct8ne.com https://tiendamalagacf.com https://*.tiendamalagacf.com https://*.redsys.es https://*.sentry.io https://sequracdn.com https://*.sequracdn.com https://*.sequrapi.com https://*.tiktok.com https://*.tiktokw.us https://*.trevenque.es https://*.typography.com https://*.youtube.com https://*.youtube-nocookie.com https://*.ytimg.com https://*.facebook.com https://*.facebook.net https://*.twitter.com https://*.instagram.com https://*.jsdelivr.net https://*.cloudflare.com https://*.paypal.com https://*.paypalobjects.com https://*.bootstrapcdn.com https://unpkg.com https://code.jquery.com https://fontawesome.com https://*.fontawesome.com https://*.perplexity.ai https://*.pixiebrix.com https://*.scite.ai; connect-src 'self' data: https://wsg127.com https://*.wsg127.com https://*.googlesyndication.com https://*.azurewebsites.net https://*.clarity.ms https://*.connectif.cloud https://*.datatables.net https://*.doubleclick.net https://*.ggpht.com https://*.google.es https://*.google.com https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.mxpnl.com https://*.oct8ne.com http://tiendamalagacf.com http://*.tiendamalagacf.com https://tiendamalagacf.com https://*.tiendamalagacf.com https://*.redsys.es https://*.sentry.io https://*.sequrapi.com https://*.sequracdn.com https://*.tiktok.com https://*.tiktokw.us https://*.trevenque.es https://*.typography.com https://*.youtube.com https://*.youtube-nocookie.com https://*.ytimg.com https://*.facebook.com https://*.facebook.net https://*.twitter.com https://*.instagram.com https://*.jsdelivr.net https://*.cloudflare.com https://*.paypal.com https://*.paypalobjects.com https://*.bootstrapcdn.com https://*.highcharts.com https://code.highcharts.com https://cdn.tailwindcss.com https://unpkg.com https://code.jquery.com https://*.mkt.dynamics.com https://*.azureedge.net wss://*.oct8ne.com https://*.google-analytics.com https://*.region1.google-analytics.com https://*.region1.analytics.google.com https://*.googleadservices.com https://*.hotjar.io wss://*.hotjar.com wss://*.hotjar.io https://empathy.co https://*.empathy.co https://intercom.io https://*.intercom.io wss://*.intercom.io https://*.google.kz https://*.google.be https://*.google.com.ar https://*.google.com.co https://*.google.pt https://*.google.cl https://*.google.co.uk https://bing.com https://*.bing.com https://*.onetrust.com https://*.overbridgenet.com https://*.segment.com https://*.segment.io https://*.psessentials.net https://*.safesearchinc.com https://*.growthbook.io https://api.video-adblock.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://*.geolocation.onetrust.com; frame-src 'self' blob: https://*.azurewebsites.net https://*.clarity.ms https://*.connectif.cloud https://*.doubleclick.net https://*.ggpht.com https://*.google.es https://*.google.com https://*.googleapis.com https://googletagmanager.com https://*.googletagmanager.com https://*.gstatic.com https://*.mxpnl.com https://*.oct8ne.com https://tiendamalagacf.com https://*.tiendamalagacf.com https://*.redsys.es https://*.sentry.io https://*.sequracdn.com https://*.sequrapi.com https://*.tiktok.com https://*.tiktokw.us https://*.trevenque.es https://*.typography.com https://*.youtube.com https://*.youtube-nocookie.com https://*.ytimg.com https://*.facebook.com https://*.facebook.net https://*.twitter.com https://*.instagram.com https://*.jsdelivr.net https://*.cloudflare.com https://*.paypal.com https://*.paypalobjects.com https://*.bootstrapcdn.com https://unpkg.com https://code.jquery.com https://prestashop.com https://*.prestashop.com; media-src 'self' data: https://*.azurewebsites.net https://*.clarity.ms https://*.connectif.cloud https://*.doubleclick.net https://*.ggpht.com https://*.google.es https://*.google.com https://*.googleapis.com https://*.googletagmanager.com https://*.gstatic.com https://*.mxpnl.com https://*.oct8ne.com https://tiendamalagacf.com https://*.tiendamalagacf.com https://*.redsys.es https://*.sentry.io https://*.sequracdn.com https://*.sequrapi.com https://*.tiktok.com https://*.tiktokw.us https://*.trevenque.es https://*.typography.com https://*.youtube.com https://*.youtube-nocookie.com https://*.ytimg.com https://*.facebook.com https://*.facebook.net https://*.twitter.com https://*.instagram.com https://*.jsdelivr.net https://*.cloudflare.com https://*.paypal.com https://*.paypalobjects.com https://*.bootstrapcdn.com https://unpkg.com https://code.jquery.com https://*.googlevideo.com; worker-src 'self' blob:; child-src 'self' blob: https://*.oct8ne.com; base-uri 'self'; form-action 'self' https://*.redsys.es https://*.paypal.com https://*.facebook.com https://*.google.com; frame-ancestors 'self'; upgrade-insecure-requests; report-uri https://cspreports.desarrollotrevenque.com/api/csp-report/8d21d112-1648-4ac6-844d-d8d25818a1e7; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.zenaps.com *.fls.doubleclick.net https://www.googletagmanager.com/ js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.awin1.com *.zenaps.com *.wepowerconnections.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.google.com.ua maps.gstatic.com 1rx.io *.1rx.io 360yield.com *.360yield.com 3lift.com *.3lift.com adnxs.com *.adnxs.com billiger.de *.billiger.de bing.com *.bing.com criteo.com *.criteo.com doubleclick.net *.doubleclick.net facebook.com *.facebook.com google.de *.google.de idealo.com *.idealo.com media.net *.media.net omnitagjs.com *.omnitagjs.com roeye.com *.roeye.com roeyecdn.com *.roeyecdn.com sharethrough.com *.sharethrough.com smartadserver.com *.smartadserver.com taboola.com *.taboola.com teads.tv *.teads.tv tremorhub.com *.tremorhub.com twiago.com *.twiago.com uimserv.net *.uimserv.net usd.de *.usd.de usercentrics.eu *.usercentrics.eu yieldlab.net *.yieldlab.net https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com www.xtento.com cdn.xtento.com https://a.timeshop24.es data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io *.shopify.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com bing.com *.bing.com criteo.com *.criteo.com cdnsrv.de *.cdnsrv.de clickcease.com *.clickcease.com df-srv.de *.df-srv.de fatmedia.io *.fatmedia.io facebook.net *.facebook.net id5-sync.com *.id5-sync.com kuponacdn.de *.kuponacdn.de livechatinc.com *.livechatinc.com pinimg.com *.pinimg.com roeyecdn.com *.roeyecdn.com shopgate.com *.shopgate.com uicdn.com *.uicdn.com usercentrics.eu *.usercentrics.eu googletagmanager.com *.googletagmanager.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com www.xtento.com cdn.xtento.com https://www.dwin1.com https://a.timeshop24.es 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com googletagmanager.com *.googletagmanager.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de wepowerconnections.com https://the.sciencebehindecommerce.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com criteo.com *.criteo.com doubleclick.net *.doubleclick.net facebook.com *.facebook.com livechatinc.com *.livechatinc.com pinterest.com *.pinterest.com usercentrics.eu *.usercentrics.eu *.wepowerconnections.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://a.timeshop24.es 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; frame-ancestors 'self' https://*.ezoic.net; object-src 'none'; base-uri 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://pagead2.googlesyndication.com https://tpc.googlesyndication.com https://*.mixpanel.com https://*.stripe.com https://www.youtube.com https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; media-src 'self' blob: https://*.supabase.co https://*.stream-io-cdn.com https://*.daily.co; connect-src 'self' https://pagead2.googlesyndication.com https://*.supabase.co wss://*.supabase.co https://*.stream-io-api.com wss://*.stream-io-api.com https://*.daily.co wss://*.daily.co https://api.mixpanel.com https://api.revenuecat.com https://*.openai.com https://api.elevenlabs.io https://api.twilio.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net; frame-src https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://*.stripe.com https://*.daily.co https://maps.google.com https://maps.googleapis.com https://www.youtube.com https://www.googletagmanager.com https://td.doubleclick.net; font-src 'self' data:; object-src 'none'; base-uri 'self'; frame-ancestors 'none' 1
object-src 'none';base-uri 'self';script-src 'nonce-402kE7UFU3omSCMYYAcRgQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://checkout.razorpay.com https://static.elfsight.com https://stackpath.bootstrapcdn.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://stackpath.bootstrapcdn.com https://static.elfsight.com; font-src 'self' data: https://fonts.gstatic.com https://stackpath.bootstrapcdn.com; img-src 'self' data: blob: https:; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://api.razorpay.com https://lumberjack.razorpay.com; frame-src 'self' https://www.googletagmanager.com https://checkout.razorpay.com https://api.razorpay.com https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com; form-action 'self' https://checkout.razorpay.com https://api.razorpay.com; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.google-analytics.com https://connect.facebook.net https://*.jwpcdn.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https: blob:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.google-analytics.com https://*.facebook.com; frame-ancestors 'self'; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.facebook.com; object-src 'none'; base-uri 'self'; form-action 'self' 1
font-src cdn.jsdelivr.net fonts.gstatic.com cdn.almapay.com fonts.googleapis.com *.fontawesome.com https://cdnjs.cloudflare.com *.gstatic.com 'self' data: *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com *.getalma.eu *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com https://www.googletagmanager.com/ *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com maps.googleapis.com maps.gstatic.com tile.openstreetmap.org docs.maptiler.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ 'self' data: *.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com cdn.jsdelivr.net maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://cdnjs.cloudflare.com *.google.com *.gstatic.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.jsdelivr.net fonts.googleapis.com unpkg.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com https://fonts.googleapis.com https://cdnjs.cloudflare.com *.googleapis.com *.gstatic.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.getalma.eu *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.google-analytics.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-4OAtcLweNB4_SYDPWgkrGA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://pagead2.googlesyndication.com https://partner.googleadservices.com https://tpc.googlesyndication.com https://www.googletagservices.com https://adservice.google.com https://s3.tradingview.com https://www.tradingview.com https://s.tradingview.com https://charting-library.tradingview-widget.com https://www.gstatic.com https://apis.google.com https://accounts.google.com https://challenges.cloudflare.com https://static.cloudflareinsights.com https://cdn.adx.ws;script-src-attr 'unsafe-inline';style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;img-src 'self' data: https:;font-src 'self' data: https://fonts.gstatic.com;connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://www.tradingview.com https://accounts.google.com https://challenges.cloudflare.com https://static.cloudflareinsights.com https://cdn.adx.ws;frame-src 'self' https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://www.google.com https://www.tradingview.com https://s.tradingview.com https://accounts.google.com https://challenges.cloudflare.com;object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'self';upgrade-insecure-requests 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' https://static-content.vnforapps.com https://www.googletagmanager.com https://www.clarity.ms https://accounts.google.com https://accounts.google.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data: https://use.typekit.net; connect-src 'self' https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.clarity.ms https://accounts.google.com https://api.iconify.design https://*.ingest.sentry.io https://*.ingest.us.sentry.io https://sistema.transporteschiclayo.pe wss://sistema.transporteschiclayo.pe; frame-src 'self' https://*.niubiz.com.pe https://*.vnforapps.com https://accounts.google.com; form-action 'self' https://*.niubiz.com.pe https://*.vnforapps.com 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com https://*.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.newrelic.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.multisafepay.com https://pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: https://*.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com *.multisafepay.com assets.myparcel.nl www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com *.bing.com *.bing.net *.clarity.ms *.cookiebot.com *.googleadservices.com www.google.ad www.google.ae www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.by www.google.ca www.google.cd www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.cr www.google.co.id www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.gh www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.om www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.ga www.google.gm www.google.gr www.google.hr www.google.hu www.google.ie www.google.im www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.mv www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.si www.google.sk www.google.sn www.google.sr www.google.tm www.google.tn www.google.vu google.com *.google.com *.openstreetmap.fr s3.amazonaws.com *.taggrs.io *.treasurejuwelier.nl treasurejuwelier.nl data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com chimpstatic.com downloads.mailchimp.com *.list-manage.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.multisafepay.com https://pay.google.com cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com https://chimpstatic.com *.bing.com *.clarity.ms *.cookiebot.com *.fullstory.com *.hotjar.com *.marker.io 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com downloads.mailchimp.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com *.multisafepay.com cdnjs.cloudflare.com assets.braintreegateway.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com treasurejuwelier.nl *.treasurejuwelier.nl 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.facebook.com *.facebook.net https://*.google.com *.doubleclick.net *.googlesyndication.com https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.multisafepay.com api.myparcel.nl api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.bing.com *.bing.net chimpstatic.com *.clarity.ms *.contentsquare.net *.cookiebot.com *.googleadservices.com www.google.nl *.hotjar.com *.hotjar.io *.marker.io s3.eu-west-1.amazonaws.com *.samsung.com *.treasurejuwelier.nl 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://a717a566-b317-4973-bbbe-bb61b5876afa.sansec.watch/; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com  https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com www.xtento.com  https://plumrocket.com https://*.sameday.ro *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com www.apptrian.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com www.xtento.com cdn.xtento.com https://redchamps.com *.hsforms.net *.hsforms.com maps.gstatic.com https://cdn.tbibank.support data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com www.apptrian.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.avada.io *.meetanshi.com self www.xtento.com cdn.xtento.com https://*.sameday.ro *.hsforms.net *.hsforms.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net https://*.sameday.ro 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com www.apptrian.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io  t.elasticsuite.io *.hsforms.net *.hsforms.com https://ro.tbibank.support 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.googleapis.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.fontawesome.com *.feedbackcompany.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.twitter.com *.feedbackcompany.com 'self' 'unsafe-inline'; frame-ancestors *.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.google.com *.doubleclick.net *.facebook.com *.twitter.com *.addthis.com *.pinterest.com *.gstatic.com *.cookiebot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com *.google.nl *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.cloudflare.com *.cookiebot.com *.klarna.com *.googleadservices.com *.google-analytics.com *.pinterest.com *.twitter.com *.twimg.com *.ytimg.com *.usercentrics.eu *.paypalobjects.com *.google.com *.clarity.ms *.bing.com *.linkedin.com *.feedbackcompany.com https://firebasestorage.googleapis.com ts.tradetracker.net www.magmodules.eu data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.pinimg.com *.cloudflare.com *.twitter.com *.twimg.com *.usercentrics.eu *.fontawesome.com *.addthis.com *.clarity.ms *.bing.com unpkg.com *.gladior.com *.cookiebot.eu www.feedbackcompany.com *.mailchimp.com *.licdn.com *.pinterest.com *.googlesyndication.com capi-automation.s3.us-east-2.amazonaws.com *.feedbackcompany.com *.avada.io *.shopify.com tm.tradetracker.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com downloads.mailchimp.com *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.usercentrics.eu *.fontawesome.com unpkg.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.cloudflare.com *.twitter.com *.pinterest.com *.twimg.com *.doubleclick.net *.addthis.com *.gstatic.com ljj3ynf0ak.execute-api.eu-west-1.amazonaws.com *.clarity.ms *.bing.com maps.googleapis.com *.cookiebot.eu api.dh.datalaag.nl *.feedbackcompany.com *.googlesyndication.com *.linkedin.com fh-118116076e9a4c2a96a99fbb70bea2a0.ecs.us-west-2.on.aws *.google.nl https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' twofeet.com.br *.twofeet.com.br wake-components.fbitsstatic.net twofeet.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br *.googleadservices.com googleadservices.com td.doubleclick.net *.doubleclick.net; frame-ancestors *.twofeet.com.br twofeet.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com https://*.ewaypayments.com https://*.sandbox.ewaypayments.com *.ewaypayments.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com *.trackedlink.net *.ddlnk.net *.google.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com https://*.ewaypayments.com https://*.sandbox.ewaypayments.com js-agent.newrelic.com bam.nr-data.net *.ewaypayments.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com unpkg.com *.doubleclick.net https://www.uhp.com.au 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com webchat.dotdigital.com webchat.staging.dotdigital.com assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com bam.nr-data.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net; font-src 'self' data: https://use.typekit.net; img-src 'self' data: blob: https:; connect-src 'self' https://performance.typekit.net; media-src 'self' https://*.public.blob.vercel-storage.com; frame-src 'self' https://challenges.cloudflare.com; worker-src 'self' blob:; frame-ancestors 'self'; form-action 'self'; base-uri 'self'; object-src 'none'; report-uri /api/csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net d23rlvd1yebk9y.cloudfront.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com d23rlvd1yebk9y.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.avada.io *.shopify.com d23rlvd1yebk9y.cloudfront.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net d23rlvd1yebk9y.cloudfront.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://get.geojs.io *.avada.io d23rlvd1yebk9y.cloudfront.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com *.googleapis.com *.zopim.com *.hotjar.com *.hotjar.io data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://seo.mageplaza.com 'self' *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.hotjar.com *.issuu.com *.vimeo.com *.demdex.net *.openpay.mx *.openpay.co *.opencontrol.mx *.kaptcha.com *.openpay.pe *.paynet.com.mx c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * landofcoder.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com *.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com *.facebook.com *.zopim.io *.zopim.com *.doubleclick.net https://landofcoder.com *.googletagmanager.com *.googleusercontent.com *.google.com *.ggpht.com *.never8.com *.unitam.com eadn-wc04-10468518.nxedge.io ce2f80375c.nxcli.io *.postimg.cc *.openpay.mx www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.reddit.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeocdn.com www.vimeo.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ * player.vimeo.com *.facebook.net connect.facebook.net graph.facebook.com business.facebook.com *.hotjar.com *.zopim.com *.bootstrapcdn.com *.zdassets.com *.issuu.com *.googleapis.com *.googletagmanager.com vimeo.com *.magento.com *.s3.amazonaws.com *.openpay.co *.openpay.pe *.google-analytics.com *.google.com/recaptcha/ *.gstatic.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com landofcoder.com https://www.googletagmanager.com tagmanager.google.com *.redditstatic.com *.reddit.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com maxcdn.bootstrapcdn.com *.googleapis.com *.google.com *.magento.com assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com https://vimeo.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com wss://*.zopim.com wss://*.hotjar.com *.zdassets.com *.hotjar.com *.hotjar.io *.demdex.net *.zopim.com *.omtrdc.net *.google-analytics.com *.doubleclick.net *.magento.com *.googleapis.com *.openpay.mx *.openpay.co *.openpay.pe api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com landofcoder.com *.facebook.net *.redditstatic.com *.reddit.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'none'; script-src 'self' https://www.google-analytics.com https://cdn.jsdelivr.net https://www.youtube.com/ https://www.recaptcha.net/ https://www.gstatic.com/ https://www.googletagmanager.com/ https://matomo.engagement.com.co 'unsafe-eval' 'unsafe-inline'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline';  img-src 'self' https: data:; media-src 'self'; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com/ https://matomo.engagement.com.co; font-src 'self' https://fonts.gstatic.com/ data:; worker-src 'self' blob:; form-action 'self'; frame-ancestors 'self'; frame-src 'self' https://www.youtube.com/ https://view.genial.ly https://view.genially.com https://www.recaptcha.net/ https://boa.escuelacorporativa.com/; manifest-src 'self'; base-uri 'self'; object-src 'self'; block-all-mixed-content; report-uri https://universidadgelsa.com/local/csp/collector.php?uid=0&cid=1 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://pagead2.googlesyndication.com https://*.googlesyndication.com https://*.googleadservices.com https://adservice.google.com https://*.doubleclick.net https://*.adtrafficquality.google; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https:; connect-src 'self' https:; frame-src 'self' https://googleads.g.doubleclick.net https://*.doubleclick.net https://*.googlesyndication.com https://*.google.com https://*.adtrafficquality.google; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none' 1
object-src 'none';base-uri 'self';script-src 'nonce-3QdwuFMLs6h0bPOU4KcWgA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-utr5cwEXjYGQkvvS1rI0WQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' ValordoConhecimento.com.br *.ValordoConhecimento.com.br wake-components.fbitsstatic.net valordoconhecimento.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br *.valordoconhecimento.com.br *.ecommercegateway.com.br *.opolen.com.br *.addthis.com googleadservices.com googleads.g.doubleclick.net stats.g.doubleclick.net google.com.br; frame-ancestors *.ValordoConhecimento.com.br ValordoConhecimento.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cloudflare.com *.trustedshops.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com youtu.be *.vimeo.com *.addthis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * api.razorpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://cdnjs.cloudflare.com https://cdn.klarna.com https://s.ytimg.com *.usercentrics.eu blob: *.magebig.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com cdn.razorpay.com 'self' data: 'unsafe-inline' data: https://upload.wikimedia.org data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com http://cdnjs.cloudflare.com *.google-analytics.com *.gstatic.com *.googleadservices.com *.googleapis.com *.trustedshops.com *.usercentrics.eu *.addthis.com *.addthisedge.com *.moatads.com *.disqus.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com checkout.razorpay.com cdn.razorpay.com https://cdn.razorpay.com www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://cdnjs.cloudflare.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com www.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.cloudflare.com *.googleapis.com https://ipinfo.io *.facebook.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com lumberjack.razorpay.com lumberjack-metrics.razorpay.com www.gstatic.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-UMHHDEs9ErrMLMdo5DaQng' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.fontawesome.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ https://www.googletagmanager.com/ www.xtento.com *.google.com/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.bird.eu http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.xtento.com cdn.xtento.com https://www.magezon.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.hsforms.net *.hsforms.com 'self' data: maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.google-analytics.com googleads.g.doubleclick.net www.googleadservices.com analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ navigator-analytics.tweakwise.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ www.xtento.com cdn.xtento.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google.com *.hsforms.net *.hsforms.com *.gstatic.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com https://static.klaviyo.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com navigator-analytics.tweakwise.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.cloudflare.com *.twitter.com *.facebook.net *.twimg.com *.hotjar.com *.trustedshops.com *.googleapis.com *.magentocommerce.com *.paypal.com *.cardinalcommerce.com *.authorize.net *.fontawesome.com https://fonts.bunny.net *.mncdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.twitter.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.google.com *.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.googletagmanager.com/ *.twitter.com *.gstatic.com *.hotjar.com *.google.com.tr *.veinteractive.com *.demdex.net *.solocpm.com *.facebook.com *.facebook.net *.addthis.com *.livechatinc.com *.yandex.ru *.adyen.com *.vimeo.com *.doubleclick.net *.bluekai.com *.useinsider.com *.asseco-see.com.tr *.param.com.tr *.modirum.com 'self' 'unsafe-inline'; img-src 'self' data: *.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.swagger.io *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.cloudflare.com *.klarna.com *.googleadservices.com *.paypalobjects.com *.hotjar.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.magentocommerce.com *.cardinalcommerce.com *.authorize.net *.omtrdc.net *.newrelic.com *.doubleclick.net *.google.com *.google.com.tr *.facebook.com *.facebook.net *.demdex.net *.everesttech.net *.googleapis.com *.adis.ws *.livechatinc.com *.yandex.ru *.adyen.com *.setrowid.com *.setrow.com *.instagram.com *.useinsider.com *.googletagmanager.com https://firebasestorage.googleapis.com *.mncdn.com *.asseco-see.com.tr *.param.com.tr *.modirum.com *.mobilexpress.com.tr *.google.nl *.google.be *.segmentify.com *.sgmntfy.com *.vicco.com.tr *.yandex.com yandex.com *.yads.tech *.sharethis.com *.googlesyndication.com yandex.ru *.cloudflareinsights.com *.betweendigital.com *.bluevoox.com *.yandex.com.tr *.adkernel.com *.lunamedia.live *.bidswitch.net *.digital-services.solutions *.revotas.com *.quilljs.com *.yango.com *.opera.com vicco-middleware.mncdn.com pro.ip-api.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.magentocommerce.com *.paypal.com *.hotjar.com *.cardinalcommerce.com *.authorize.net *.omtrdc.net *.instana.io *.google.com.tr *.googletagmanager.com *.veinteractive.com *.facebook.net *.supert.ag *.setrowid.com *.mainadv.com *.doubleclick.net *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.livechatinc.com *.yandex.ru *.adyen.com *.vimeo.com *.jsdelivr.net *.setrow.com *.instagram.com *.criteo.com *.criteo.net *.ciritizr.com *.bkrtx.com *.cloudfront.net *.useinsider.com *.critizr.com *.behance.net *.swagger.io *.avada.io *.shopify.com *.mncdn.com *.asseco-see.com.tr *.param.com.tr *.modirum.com *.mobilexpress.com.tr *.segmentify.com *.sgmntfy.com *.cookiespool.com *.vicco.com.tr *.yandex.com yandex.com *.yads.tech *.sharethis.com *.googlesyndication.com yandex.ru *.cloudflareinsights.com *.betweendigital.com *.bluevoox.com *.yandex.com.tr *.adkernel.com *.lunamedia.live *.bidswitch.net *.digital-services.solutions *.revotas.com *.quilljs.com *.jquery.com *.yango.com *.opera.com vicco-middleware.mncdn.com pro.ip-api.com *.adform.net s2.adform.net track.adform.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.facebook.net *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.magentocommerce.com *.fontawesome.com *.paypal.com *.paypalobjects.com *.hotjar.com *.cardinalcommerce.com *.authorize.net *.omtrdc.net *.newrelic.com *.setrowid.com *.setrow.com *.critizr.com *.useinsider.com *.adobedtm.com *.google-analytics.com *.googletagmanager.com *.swagger.io https://fonts.bunny.net *.mncdn.com *.google.com *.jsdelivr.net *.segmentify.com *.sgmntfy.com *.vicco.com.tr *.yandex.com yandex.com *.yads.tech *.sharethis.com *.googlesyndication.com *.yandex.ru *.cloudflareinsights.com *.betweendigital.com *.bluevoox.com *.yandex.com.tr *.adkernel.com *.lunamedia.live *.bidswitch.net *.digital-services.solutions *.revotas.com *.quilljs.com *.yango.com *.opera.com vicco-middleware.mncdn.com pro.ip-api.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.google.com *.jsdelivr.net *.segmentify.com *.sgmntfy.com *.vicco.com.tr *.yandex.com yandex.com *.yads.tech *.sharethis.com *.googlesyndication.com *.yandex.ru yandex.ru *.cloudflareinsights.com *.betweendigital.com *.bluevoox.com *.yandex.com.tr *.adkernel.com *.lunamedia.live *.bidswitch.net *.digital-services.solutions *.revotas.com *.quilljs.com *.yango.com *.opera.com vicco-middleware.mncdn.com vicco-videos.lg.mncdn.com pro.ip-api.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net *.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.cloudflare.com *.doubleclick.net *.twitter.com *.facebook.com *.facebook.net *.paypalobjects.com *.hotjar.com *.hotjar.io *.twimg.com *.magentocommerce.com *.cardinalcommerce.com *.cardinalcommerce.net *.veinteractive.com *.demdex.net *.yandex.ru *.vimeo.com *.setrowid.com *.setrow.com *.useinsider.com *.adobedtm.com *.swagger.io https://get.geojs.io *.avada.io *.segmentify.com *.sgmntfy.com *.googleapis.com *.cookiespool.com *.vicco.com.tr *.yandex.com yandex.com *.yads.tech *.sharethis.com *.googlesyndication.com yandex.ru *.cloudflareinsights.com *.betweendigital.com *.bluevoox.com *.yandex.com.tr *.adkernel.com *.lunamedia.live *.bidswitch.net *.digital-services.solutions *.revotas.com *.quilljs.com *.yango.com *.opera.com vicco-middleware.mncdn.com pro.ip-api.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.inpost.pl *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' cdnjs.cloudflare.com https://geowidget.easypack24.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com sandbox.przelewy24.pl secure.przelewy24.pl https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://static.addtoany.com/ *.instagram.com *.inpost.pl *.addthis.com js.mollie.com pay.google.com apm.przelewy24.pl *.przelewy24.pl *.espago.com https://plumrocket.com 'self' https://pudofinder.dpd.com.pl/ *.dpd.com.pl *.user.com www.googletagmanager.com https://geowidget-app.inpost.pl/ https://sandbox-easy-geowidget.easypack24.net/ *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.cdninstagram.com magefan.com cm.magefan.com *.inpost.pl *.disqus.com https://firebasestorage.googleapis.com https://www.mollie.com static.przelewy24.pl www.gstatic.com 'self' *.openstreetmap.org *.sysadvisors.pl https://cdn-cookieyes.com trustmate.io bat.bing.com media.user.com www.facebook.com *.google.pl *.google-analytics.com *.googletagmanager.com *.doubleclick.net images.unsplash.com www.mollie.com *.easypack24.net *.satisfly.co victoriavynn.com *.victoriavynn.com http://victoriavynn.com http://www.victoriavynn.com *.googlesyndication.com https://geowidget.easypack24.net *.hsforms.net *.hsforms.com 'self' data: ssl.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://static.addtoany.com/ https://maps.googleapis.com https://player.vimeo.com *.instagram.com *.inpost.pl *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.avada.io *.shopify.com js.mollie.com sandbox.przelewy24.pl secure.przelewy24.pl pay.google.com apm.przelewy24.pl *.googletagmanager.com *.snrcdn.net *.snrbox.com *.ekomiapps.de unsafe-inline *.adobedtm.com *.googleadservices.com *.google-analytics.com www.google.com *.easypack24.net *.sysadvisors.pl *.openstreetmap.org *.hsforms.net *.hsforms.com *.gstatic.com *.ruch-osm.sysadvisors.pl cdnjs.cloudflare.com https://cdn-cookieyes.com *.user.com *.allekurier.pl *.facebook.net trustmate.io bat.bing.com www.facebook.com *.tiktok.com https://polyfill-fastly.io https://browser.sentry-cdn.com https://geowidget.easypack24.net tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.inpost.pl https://cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' *.sysadvisors.pl *.ruch-osm.sysadvisors.pl cdnjs.cloudflare.com trustmate.io https://geowidget.easypack24.net https://geowidget.inpost.pl *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com *.inpost.pl https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://stats.addtoany.com/menu https://maps.googleapis.com https://player.vimeo.com *.inpost.pl https://get.geojs.io *.avada.io sandbox.przelewy24.pl secure.przelewy24.pl wss://ws.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com 'self' *.sysadvisors.pl *.user.com wss://vynngroup.user.com https://cdn-cookieyes.com *.cookieyes.com *.tiktok.com bat.bing.com *.google-analytics.com *.analytics.google.com trustmate.io trustmate.pro *.googlesyndication.com https://*.ingest.sentry.io *.easypack24.net *.openstreetmap.org t.elasticsuite.io *.hsforms.net *.hsforms.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://vieniora-static.b-cdn.net https://www.googletagmanager.com https://www.google-analytics.com; font-src 'self' data:; media-src 'self' blob: https://vieniora-static.b-cdn.net https://vz-36cadde8-4b7.b-cdn.net https://vz-cdef3f01-3ab.b-cdn.net; connect-src 'self' https://www.vieniora.com wss://www.vieniora.com https://*.communication.azure.com wss://*.communication.azure.com https://vieniora-static.b-cdn.net https://vz-36cadde8-4b7.b-cdn.net https://vz-cdef3f01-3ab.b-cdn.net https://www.google-analytics.com https://region1.google-analytics.com; frame-src 'self' https://vz-36cadde8-4b7.b-cdn.net; worker-src 'self' blob:; manifest-src 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-CXBYUOvoeM0v2N5-ahcQ2Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'nonce-I0XEh1lK2G4RWsDN8tl2RQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
font-src *.fontawesome.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.addthis.com *.google.com/ *.mercadolibre.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io https://images.unsplash.com https://www.magezon.com *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadolivre.com.br *.mercadolibre.com.mx *.mercadolibre.com.ar *.mercadolivre.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net s7.addthis.com *.google.com/ *.mlstatic.com *.mercadopago.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://cdn.jsdelivr.net *.fontawesome.com unsafe-inline 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://www.sandbox.paypal.com https://www.paypal.com ekr.zdassets.com/ *.mercadopago.com *.mercadolibre.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; media-src 'self' blob: https:; frame-src 'self' https: blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.razorpay.com https://checkout.razorpay.com https://static.payu.in https://secure.payu.in https://jsuites.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: blob: https://ik.imagekit.io https://i.ytimg.com https://lh3.googleusercontent.com https://i.pravatar.cc; connect-src 'self' https://*.supabase.co https://api.razorpay.com https://secure.payu.in https://api.cloudinary.com; frame-src https://www.youtube.com https://checkout.razorpay.com https://secure.payu.in; media-src 'self' https://ik.imagekit.io; object-src 'none'; base-uri 'self'; form-action 'self' 1
script-src 'self' 'nonce-caqqQ1ebQfktEz7ttcdFpA' 'strict-dynamic'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; object-src 'none'; base-uri 'none' 1
default-src 'self'; script-src 'nonce-N5m/L5QDRvAzMt3v+uinZw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
script-src 'self' http://java.sun.com/jsp/jstl/core http://java.sun.com/jsp/jstl/fmt http://tiles.apache.org/tags-tiles 'nonce-HHZOmUuUn1uggy69Sgmi0Q==' 'wasm-unsafe-eval'; frame-src 'self' 1
default-src 'self'; script-src 'nonce-r6I5CM0vqWSvEpGEaItIhA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; frame-src 'none'; form-action 'self' https://accounts.google.com; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; media-src 'self' blob:; worker-src 'self' blob:; connect-src 'self' https://streaming-rekognition.eu-west-1.amazonaws.com wss://streaming-rekognition.eu-west-1.amazonaws.com; manifest-src 'self' 1
frame-ancestors *.multisafepay.com https://pay.google.com *.storyblok.com 'self'; manifest-src 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; img-src https://public.worok.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://images.unsplash.com www.googletagmanager.com *.multisafepay.com *.facebook.com *.google.com *.google.es widgets.trustedshops.com *.twitter.com t.co *.azureedge.net *.pinterest.com *.doofinder.com *.bing.com *.storyblok.com data: 'self' 'unsafe-inline'; object-src www.google.com www.gstatic.com 'self' 'unsafe-inline'; connect-src quirumed.azure-api.net https://public.quirumed.com https://public.quirumed.click https://public.worok.com www.google-analytics.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://maps.googleapis.com https://player.vimeo.com www.googletagmanager.com *.multisafepay.com *.oct8ne.com *.zendesk.com *.zopim.com *.doubleclick.net *.hotjar.com *.hotjar.io *.clarity.ms *.smartsuppcdn.com *.googleapis.com *.gstatic.com *.google-analytics.com *.google.es *.connectif.cloud *.klaviyo.com *.photoslurp.com *.zdassets.com *.pinterest.com *.nosto.com *.doofinder.com *.empathybroker.com *.empathy.co 'self' 'unsafe-inline'; form-action https://sis.redsys.es/ https://www.facebook.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; media-src widget-v2.smartsuppcdn.com c.clarity.ms *.storyblok.com *.zdassets.com *.doofinder.com 'self' 'unsafe-inline'; frame-src www.google.com vars.hotjar.com www.googletagmanager.com https://chatbot.catalogflow.ai https://www.facebook.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.multisafepay.com https://pay.google.com *.hotjar.com *.oct8ne.com *.pinterest.com *.doofinder.com *.empathybroker.com *.empathy.co *.criteo.com 'self' 'unsafe-inline'; script-src www.googletagmanager.com www.google.com www.gstatic.com www.smartsuppchat.com static.hotjar.com https://public.quirumed.com https://public.quirumed.click https://public.worok.com www.googleadservices.com www.google-analytics.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://maps.googleapis.com *.multisafepay.com https://pay.google.com *.googleoptimize.com widgets.trustedshops.com static-eu.oct8ne.com static.zdassets.com *.facebook.net *.tradedoubler.com *.doubleclick.net *.hotjar.com *.ads-twitter.com smct.co *.bsmartdata.com *.retargeted.co *.bing.com *.clarity.ms *.smartsuppcdn.com *.smartsuppchat.com *.smartsupp.com *.connectif.cloud *.klaviyo.com *.photoslurp.com *.pinimg.com *.nosto.com *.doofinder.com *.empathybroker.com *.unpkg.com *.storyblok.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com downloads.mailchimp.com maxcdn.bootstrapcdn.com *.multisafepay.com *.photoslurp.com *.nosto.com *.doofinder.com *.klaviyo.com *.typekit.net *.storyblok.com 'self' 'unsafe-inline'; font-src fonts.gstatic.com maxcdn.bootstrapcdn.com *.azureedge.net *.doofinder.com *.typekit.net *.googleapis.com data: 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; media-src 'self' blob: https:; connect-src 'self' https: wss:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; report-uri /api/csp-report 1
default-src 'self'; script-src 'nonce-qJS2sB/jAj5aq0hnaUSSpg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; media-src 'self' blob: https:; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.sharpify.com.br https://cdn.socket.io https://*.googletagmanager.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://cdn.sharpify.com.br https://res.cloudinary.com https://*.googleusercontent.com https://*.rbxcdn.com https://*.google-analytics.com https://*.googletagmanager.com https://www.facebook.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://cdn.sharpify.com.br https://api.sharpify.com.br https://ws.sharpify.com.br wss://ws.sharpify.com.br https://*.google-analytics.com https://*.googletagmanager.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://challenges.cloudflare.com; media-src 'self' https://cdn.sharpify.com.br; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /__csp-report 1
default-src 'self'; script-src 'nonce-owGCh2bMdtH9Kc47fppFiQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-PLA3zz1mxFWRwvVzoVLsMw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'               https://connect.facebook.net               http://116389.tctm.co               https://td.doubleclick.net               https://cdn.userway.org               https://cdn.userway.org               https://api.userway.org               https://www.google.co.il               https://www.google.com               https://analytics.google.com                https://www.googletagmanager.com               https://www.google-analytics.com               https://maps.googleapis.com                https://fonts.gstatic.com                https://stats.g.doubleclick.net               https://client.crisp.chat               wss://client.relay.crisp.chat               https://googleads.g.doubleclick.net;               script-src 'self' 'unsafe-inline' 'unsafe-eval'               https://connect.facebook.net                http://116389.tctm.co               https://ajax.googleapis.com               https://www.toyota-europe.com               https://cdn.jsdelivr.net               https://code.jquery.com               https://cdn.userway.org               https://cdn.userway.org               https://api.userway.org               https://www.google.co.il               https://www.google.com               https://analytics.google.com               https://maps.googleapis.com               https://www.googletagmanager.com               https://www.google-analytics.com               https://fonts.gstatic.com               https://stats.g.doubleclick.net               https://client.crisp.chat               wss://client.relay.crisp.chat               https://googleads.g.doubleclick.net;               style-src 'self' 'unsafe-inline'               https://client.crisp.chat               https://cdn.userway.org               https://cdn.jsdelivr.net               https://cdn.jsdelivr.net;               img-src 'self' data:              https://www.facebook.com              https://www.googletagmanager.com               https://www.google.com               https://www.google.co.il               https://yos17.blob.core.windows.net               https://cdn.userway.org               https://haifaac.localtimeline.com               https://maps.gstatic.com; report-uri /csp-report 1
script-src 'nonce-Q1NQXzZhYTYwNDAwYzg5MjE4LjgxMTcyNDg5' 'strict-dynamic' https: 'unsafe-inline'; object-src 'none'; base-uri 'none'; report-uri https://www.zenstore.it/csp/report.php 1
default-src 'self'; script-src 'nonce-ZhpSAoBbFXYDZYYBE640XA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
font-src fonts.gstatic.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.googletagmanager.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io magefan.com cm.magefan.com maps.googleapis.com maps.gstatic.com *.googletagmanager.com *.doubleclick.net blob: *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ widgets.binotel.com maps.googleapis.com cdn.jsdelivr.net *.googletagmanager.com 'unsafe-eval' 'unsafe-hashes' *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.doubleclick.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widgets.binotel.com *.googleapis.com *.googletagmanager.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com maps.googleapis.com *.google-analytics.com *.doubleclick.net widgets.binotel.com *.google.com *.googlesyndication.com https://www.merchant-center-analytics.goog api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; img-src 'self' data: 'unsafe-eval' https://cdn.rand.com https://s1749.t.eloqua.com https://cihost.uberflip.com https://dpm.demdex.net https://idsync.rlcdn.com https://sync.crwdcntrl.net https://match.adsrvr.org https://ps.eyeota.net https://px.ads.linkedin.com https://b.6sc.co https://ml314.com https://chatserver12.comm100.io https://www.google.com https://www.google.ca https://www.google-analytics.com https://insights.sitesearch360.com https://content.cdntwrk.com https://i.ytimg.com https://app.cdntwrk.com https://blogs.rand.com https://vue.comm100.com https://www.googletagmanager.com https://bat.bing.com https://tags.bluekai.com https://cm.g.doubleclick.net https://ws.rqtrk.eu https://pippio.com https://pixel.tapad.com https://dmp.adform.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://bat.bing.com https://googleads.g.doubleclick.net https://ajax.aspnetcdn.com https://img.en25.com/i/elqCfg.min.js https://img.en25.com/i/elqCfg.min.js https://www.google.com https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://cdnjs.cloudflare.com https://cdn.sitesearch360.com/ https://j.6sc.co/6si.min.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://vue.comm100.com https://ml314.com https://415621.tctm.xyz/t.js; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://content.cdntwrk.com; connect-src 'self' https://www.google-analytics.com https://c.6sc.co https://ipv6.6sc.co https://stats.g.doubleclick.net https://chatserver12.comm100.io https://cdn.linkedin.oribi.io https://analytics.google.com https://epsilon.6sense.com https://insights.sitesearch360.com ; font-src 'self' data: https://fonts.gstatic.com https://vue.comm100.com; frame-src 'self' https://www.youtube-nocookie.com https://www.google.com; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self' https://*.getcha.io https://*.getcha.kr; form-action 'self' https://kauth.kakao.com; script-src 'self' 'unsafe-inline' https://t1.daumcdn.net https://www.googletagmanager.com https://connect.facebook.net https://cdnet.nasmob.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; font-src 'self' data: https://cdn.jsdelivr.net; img-src 'self' data: blob: https://img.getcha.io https://cloud.getcha.io https://image.getcha.io https://dev-image.getcha.io https://getcha.s3.ap-northeast-2.amazonaws.com https://www.google-analytics.com https://www.facebook.com; media-src 'self' https://img.getcha.io https://cloud.getcha.io; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://auto-consulting-admin.getcha.io https://dev-auto-consulting-admin.getcha.io https://www.facebook.com https://appleid.apple.com; worker-src 'self' blob:; connect-src 'self' https://api.getcha.io https://dev-api.getcha.io https://picky-api.getcha.io https://dev-picky-api.getcha.io https://getcha-api-v7-prod.getcha.io https://dev-getcha-api.getcha.io https://www.google-analytics.com https://region1.google-analytics.com https://connect.facebook.net https://www.facebook.com https://analytics.ad.daum.net https://*.daumcdn.net https://*.amplitude.com https://*.airbridge.io https://a.ab180.co https://*.notifly.tech https://*.nasmob.com https://appleid.apple.com 1
object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://bat.bing.com https://www.redditstatic.com https://origin.acuityplatform.com https://e.acuityplatform.com https://secure.adnxs.com https://www.googleadservices.com https://js-agent.newrelic.com https://bam.nr-data.net https://pixel.mathtag.com https://ums.acuityplatform.com https://connect.facebook.net https://tpc.googlesyndication.com https://tr.contextweb.com https://bh.contextweb.com https://epidiolex-medinfo-c.uat.v3.chat.conversationhealth.com https://epidiolex-medinfo-c.prod.v3.chat.conversationhealth.com https://trc.lhmos.com https://match.deepintent.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://moderate.cleantalk.org https://unpkg.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://bat.bing.com https://www.redditstatic.com https://origin.acuityplatform.com https://e.acuityplatform.com https://secure.adnxs.com https://www.googleadservices.com https://js-agent.newrelic.com https://bam.nr-data.net https://pixel.mathtag.com https://ums.acuityplatform.com https://connect.facebook.net https://tpc.googlesyndication.com https://tr.contextweb.com https://bh.contextweb.com https://epidiolex-medinfo-c.uat.v3.chat.conversationhealth.com https://epidiolex-medinfo-c.prod.v3.chat.conversationhealth.com https://trc.lhmos.com https://match.deepintent.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://moderate.cleantalk.org https://unpkg.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.typekit.net https://p.typekit.net http://hello.myfonts.net https://www.googletagmanager.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://use.typekit.net https://p.typekit.net http://hello.myfonts.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; frame-ancestors 'self' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self' https://accounts.google.com; img-src 'self' data: blob: https:; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://pagead2.googlesyndication.com https://*.googlesyndication.com; style-src 'self' 'unsafe-inline'; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com; frame-src https://googleads.g.doubleclick.net https://*.googlesyndication.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https:; frame-ancestors 'self' https://*.tekmetric.com chrome-extension:; report-uri /api/csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.checkout.com *.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.checkout.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.checkout.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.checkout.com *.klarnacdn.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.checkout.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.checkout.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.browser-intake-datadoghq.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' www.google.com www.googletagmanager.com www.gstatic.com c.go-mpulse.net cdnjs.cloudflare.com cdn.jsdelivr.net  packages.dxfeed.com gateway.zscloud.net googleads.g.doubleclick.net doubleclick.net apis.google.com 'sha256-4+DGik2IqkmqSK238cqqwOxTPkUUtOITn+PXN9lnZUc=' 'sha256-f8da2cfd845ab0a872087b87d310731229db700318df5d78f7e465f75da7a5b7' 'sha256-WCzAhd2P6gRJF9Hv3oOOd+hFJi/QJbv+Azn4CGB8gfY=' cdnjs.cloudflare.com paypal.com www.paypal.com app.leadsrx.com 'sha256-2neWyvk1kBWvTs34xsy9U3BupGE5Mqm2+B5ELknV9iY=' 'sha256-egj5xxtj40Ds0GUbObVZ7m2LEOsnvu9i5Ogtmd1I+jk=' 'sha256-mL0tkzkmoPscbkYaee3akCxGrYyk7S8mDZklTs/k5FE=' 'nonce-ZWsvkvCR' 'strict-dynamic' 'sha256-2neWyvk1kBWvTs34xsy9U3BupGE5Mqm2+B5ELknV9iY='; script-src-elem 'self' www.google.com www.googletagmanager.com www.gstatic.com c.go-mpulse.net cdnjs.cloudflare.com cdn.jsdelivr.net  packages.dxfeed.com gateway.zscloud.net googleads.g.doubleclick.net doubleclick.net apis.google.com 'sha256-4+DGik2IqkmqSK238cqqwOxTPkUUtOITn+PXN9lnZUc=' 'sha256-f8da2cfd845ab0a872087b87d310731229db700318df5d78f7e465f75da7a5b7' 'sha256-WCzAhd2P6gRJF9Hv3oOOd+hFJi/QJbv+Azn4CGB8gfY=' cdnjs.cloudflare.com paypal.com www.paypal.com app.leadsrx.com 'sha256-2neWyvk1kBWvTs34xsy9U3BupGE5Mqm2+B5ELknV9iY=' 'sha256-egj5xxtj40Ds0GUbObVZ7m2LEOsnvu9i5Ogtmd1I+jk=' 'sha256-mL0tkzkmoPscbkYaee3akCxGrYyk7S8mDZklTs/k5FE=' 'nonce-ZWsvkvCR' 'strict-dynamic' 'sha256-2neWyvk1kBWvTs34xsy9U3BupGE5Mqm2+B5ELknV9iY='; object-src 'none'; style-src 'self' code.highcharts.com 'sha256-mL0tkzkmoPscbkYaee3akCxGrYyk7S8mDZklTs/k5FE=' 'nonce-ZWsvkvCR' ; img-src 'self' data: https://www.miaxglobal.com www.googletagmanager.com www.google.com www.google.co.uk www.google.co.in www.paypalobjects.com app.leadsrx.com googleads.g.doubleclick.net; media-src 'self' https://www.miaxglobal.com/sites/default/files/videos/MIAX_Homepage_Video_FNL_3.9.2023.mp4; frame-src 'self' https://www.googletagmanager.com https://www.googletagmanager.com  www.youtube.com gateway.zscloud.net www.google.com https://block.opendns.com https://td.doubleclick.net www.paypal.com; frame-ancestors 'self'; child-src 'self'; font-src 'self'; connect-src 'self' c.go-mpulse.net cdn.jsdelivr.net miax-ipf.dxfeed.com widgets.dxfeed.com miax-dxlink-d15m.dxfeed.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net www.google.com google.com www.paypal.com app.leadsrx.com https://o4508962044575744.ingest.us.sentry.io/api/4508965182963712/envelope/; upgrade-insecure-requests; style-src-elem 'self' code.highcharts.com cdnjs.cloudflare.com 'unsafe-inline'; style-src-attr 'unsafe-inline' 1
object-src 'none';base-uri 'self';script-src 'nonce-lbDeZbRTyBXgaXaX63mg2g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-U4y080RBxIiMUDossS1RJQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-eXZS2k-WW4QhQf7D5KW2cQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net *.hotjar.com *.hotjar.io *.cloudflare.com *.gstatic.com *.peterprint.nl *.frontapp.com *.sentry-cdn.com *.facebook.com *.facebook.net *.doubleclick.net *.clarity.ms peterprint.wufoo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.sharethis.com https://www.googletagmanager.com/ *.klarna.com www.xtento.com *.multisafepay.com https://pay.google.com *.cloudflare.com *.google.com *.hotjar.com *.hotjar.io *.frontapp.com *.sentry-cdn.com *.peterprint.nl *.facebook.com *.facebook.net *.doubleclick.net peterprint.wufoo.com *.pinterest.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com *.sharethis.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.klarna.com *.klarnaevt.com *.klarnacdn.net https://firebasestorage.googleapis.com www.xtento.com cdn.xtento.com *.multisafepay.com cdn-cookieyes.com *.placeholder.com *.peterprint.nl *.cloudflare.com *.google.nl *.bing.com *.googleapis.com *.gstatic.com *.sentry-cdn.com *.cookieyes.com *.facebook.com *.clarity.ms *.doubleclick.net *.frontapp.com *.visualwebsiteoptimizer.com *.amazonaws.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com *.sharethis.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.avada.io *.shopify.com www.xtento.com cdn.xtento.com *.multisafepay.com https://pay.google.com cdn-cookieyes.com *.cookieyes.com *.google.com *.gstatic.com *.google-analytics.com *.hotjar.com *.hotjar.io *.fontawesome.com *.cloudflare.com *.mouseflow.com *.peterprint.nl *.bing.com *.doubleclick.net unpkg.com *.googleapis.com *.googleoptimize.com *.frontapp.com *.sentry-cdn.com *.facebook.com *.facebook.net *.clarity.ms peterprint.wufoo.com *.pinterest.com *.pinimg.com *.visualwebsiteoptimizer.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.sharethis.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net *.multisafepay.com *.googleapis.com *.peterprint.nl *.sentry-cdn.com *.cookieyes.com *.facebook.com *.facebook.net *.doubleclick.net *.clarity.ms peterprint.wufoo.com *.frontapp.com *.cloudflare.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com *.sharethis.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://get.geojs.io *.avada.io *.multisafepay.com cdn-cookieyes.com *.cookieyes.com *.google.com *.gstatic.com *.google-analytics.com *.fontawesome.com *.hotjar.com *.hotjar.io *.cloudflare.com *.peterprint.nl *.googleapis.com https://chat-assets.frontapp.com/ *.sentry-cdn.com *.facebook.com *.facebook.net *.doubleclick.net *.clarity.ms peterprint.wufoo.com *.pinterest.com https://sessions.bugsnag.com wss://front-eu-realtime.ably.io *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://*.dropcowboy.com https://*.callcowboy.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.dropcowboy.com https://*.callcowboy.com https://js.stripe.com https://*.chargebee.com https://*.intercom.io https://*.intercomcdn.com https://*.google-analytics.com https://*.googletagmanager.com https://connect.facebook.net https://*.auth0.com https://fast.wistia.net https://*.wistia.com https://kit.fontawesome.com https://ka-p.fontawesome.com https://cdnjs.cloudflare.com https://challenges.cloudflare.com https://fpjscdn.net https://services.postcodeanywhere.co.uk https://acsbapp.com https://cdn.ably.com https://cdn.jsdelivr.net https://js.authorize.net https://www.google.com https://www.gstatic.com https://s.ytimg.com https://cdn.plaid.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.intercomcdn.com https://*.chargebee.com https://services.postcodeanywhere.co.uk https://cdn.jsdelivr.net; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://*.intercomcdn.com https://ka-p.fontawesome.com; connect-src 'self' https: wss://*.intercom.io wss://*.dropcowboy.com wss://*.comsapi.com wss://*.ably.net wss://*.ably.io; frame-src 'self' https://*.dropcowboy.com https://dc-web-variants.s3.amazonaws.com https://js.stripe.com https://*.chargebee.com https://*.intercom.io https://*.youtube.com https://*.youtube-nocookie.com https://player.vimeo.com https://*.wistia.net https://challenges.cloudflare.com https://www.google.com https://cdn.plaid.com; worker-src 'self' blob:; media-src 'self' https: blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://*.chargebee.com https://*.dropcowboy.com; frame-ancestors 'self' 1
font-src *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp d.digsgogo.com *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.dnky.co webchat.dotdigital.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com unsafe-inline *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' https://cookiebot.com;  1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.dotdigital-pages.com *.dotdigital.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.trustpilot.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.trackedlink.net *.ddlnk.net https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal https://maps.googleapis.com https://player.vimeo.com *.disqus.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.trustpilot.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.trustpilot.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https://maps.googleapis.com https://player.vimeo.com api.addressy.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://unpkg.com https://cdn.jsdelivr.net https://challenges.cloudflare.com; object-src 'none'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; media-src 'self'; frame-src 'self'; frame-ancestors 'self'; child-src 'self'; font-src 'self' data:; connect-src 'self'; report-uri /report-csp-violation; upgrade-insecure-requests 1
block-all-mixed-content; default-src 'self'; script-src 'self' 'unsafe-inline' https://*.google.com https://*.googletagmanager.com https://*.googlesyndication.com https://*.gstatic.com https://*.adtrafficquality.google; style-src 'self' 'unsafe-inline' https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://*.google.com https://*.google.fr https://*.googletagmanager.com https://*.googlesyndication.com https://*.adtrafficquality.google https://*.ytimg.com https://*.ebayimg.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://*.google.com https://*.google.fr https://*.googletagmanager.com https://*.googlesyndication.com https://*.g.doubleclick.net https://*.adtrafficquality.google https://*.ebayimg.com; frame-ancestors 'none'; frame-src 'self' https://*.google.com https://*.googlesyndication.com https://*.adtrafficquality.google https://*.youtube.com; child-src 'self' https://*.google.com https://*.googlesyndication.com https://*.adtrafficquality.google https://*.youtube.com; base-uri 'self'; form-action 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-QTIHXPH3CjAOXUxMqwGVDg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' statistiek.rijksoverheid.nl; script-src 'self' statistiek.rijksoverheid.nl 'report-sample' 'sha256-GCAGLI4US16FcGs+p6+XISNdqk3jJehdbND5mCng/k4=' 'sha256-CaN42Zi+a+oATitdYvGRVlyS6mCZIxrLFXhTbgp6HCI=' 'sha256-kbxdHCgUdrZK4ETPFEMbYVmfSWsi5P6bF1xkaFpzWwA=' 'sha256-oh6ZTSefRfIBPlcye8dBjlQBkC0A32V1QIb2htJq7ao=' 'sha256-MM3CG7szGAeVIKY58JGR+X+7xTDccDemqcIY0lQLrX8=' 'sha256-Wuuo8pjCq8p1DupaB6iKVd7xGXUV2cZ6FNKupyZkqtA=' 'sha256-rWd9UEdKeFeLqC7IaJz1wxlZctnoLlCVLl196dQ3XcM='; object-src 'none'; style-src 'self' 'sha256-ZdHxw9eWtnxUb3mk6tBS+gIiVUPE3pGM470keHPDFlE=' 'sha256-v2NsGDfcQvA9v36g3/fcwag7FTBO0gpJRZm0Gb6dgFM=' 'sha256-QLxpG/SkrAsFt4RhNXuW4sYL8ehWaXmFGHShqQQgGB8=' 'sha256-FUjt+ObqUSCpuQLS5dcXCrlb/K5x8I6Wf0hntswuz3I=' 'sha256-/Mold7LpOLiXPL6ZUD2g4HukqtVSqqMSxhvqj7FM1JY=' 'sha256-9s7lC2GzUUKlE3XPBaOsDS7hvg4xAsX3zuyUojlamtE=' 'sha256-/okNWXmWq6ACIbPo1CyYip0qDxBnjxUmSWJ1hdca+wA=' 'sha256-4LBEjchlwRrvc/o5PWkzP4zfj5119cLhWaJyMtiKRVc=' 'sha256-s46feognZeNCnOfZUhDw6qOijuTDw8bsnIAsrYpEo5g=' 'sha256-2EA12+9d+s6rrc0rkdIjfmjbh6p2o0ZSXs4wbZuk/tA=' 'sha256-6TD9T2GLgemUtWDfGS6xuvb8pwqOKV665C5itzceI+Q=' 'sha256-/HzB0oUXCjF1X3ePcn6F5vBOf787Yd6ZPQbCx9DsV/0=' 'sha256-2eHsQCvJfybN+irzSq7oVlagXMAt9fVsKshHduPgdcc=' 'sha256-T6lV/jeKAUbvL7n/+FIctusAcR4zRM21HSThFcWp7fs=' 'sha256-FVIAwJdK81osoqCJ/Ej4mM+eHVpzv1d/mUxo+clpIdQ=' 'sha256-BQa5UjYUb+kyX2iReXhKiXy8sbD2dSdEcV1L/MN9i14=' 'sha256-MRLe1N0WuHicxwci5Jh0nPT7gQcK4wsGaha2oj5c/oM=' 'sha256-8AYlWL9cvG8jYJjPkXBl5js3sILXmVeOgdXVUnWB1iY=' 'sha256-VjdZlb043MCysjACBWpz+4F2wAY7JkdJWcjKtHbxwcc=' 'sha256-wXb6aQPNH8seDdM4tzL5B7ACoAYT4aPgYngEzI3brj0=' 'sha256-RxiWBZYLCS3QKI4PLXxu0Blyj8vmxeuK9J7TB1/jWuY=' 'sha256-9SHn29V4zLOHjVJq92HpFpp1NN7aoRyhW8L48YW6rRY=' 'sha256-BQdguyxnSnBKZQqP4a8dr/d+ZotDyvgdk19eea71qgw=' 'sha256-MySsC+u+VdmjXf6r8ZYJaD17sc/hitJOwXXfqTYAA8E=' 'sha256-nmm8ItERQyzkJcpOSodAIXnlyHnEY7fX+S3bSgnqBcs=' 'sha256-ZbhuK+BYd9QEPexswy/DVf9gK/UeP4KQoZPLCAcyDRQ=' 'sha256-4qwQIuCrY4GtcFeYztbNvhYhJpcmSrdQgJbESRDX0Ag=' 'sha256-rbBgGFyfGzPErYaJk67UdWYnprmSUOmsthHiSjzbZTc=' 'sha256-FMds87GwC25yjwsohWzNpO0kdDsPMEJ+Rago/VZOpk0=' 'sha256-C2ehWAGr1mFuGpLoXTNZTAdtYCmIbLEVIbG/lq+GguU=' 'sha256-uXkXw2JB1V+Gwgcdunz8SSzasmzjE/o8TAq+11+k4fM=' 'sha256-a6W7OLx3X/uxUoMEpBZlDgXu5dzMwMtMqxbrsSOrrhc=' 'sha256-lCwzlRxX6jViMRn9wKezsu/yA3nx7mIdEewYWJxL+qA=' 'sha256-V/NGbBjYFAfWeViND1ooOGubTksV07jWBEfuMqymIr8=' 'sha256-kevEEbJVKNwABPtBxv0gHn+y4oZY3FRiFqxZbfMaDK8=' 'sha256-l6JwEbyxJN9Q+R7PlW5jNpX4gK6seSxOmbf834205Gg=' 'sha256-rLl3HLTo4EBxJ+7FOPulmhv6F8mgunYmTqjV4tD6eKA=' 'sha256-3HGmtJloH0zk89NpySpSfZlc/h9uk/4KzPVch8SHNVI=' 'sha256-TPiAMuKNLItlFYo+Nyqc6kE/E1beDIPD18i6B3jd17M=' 'sha256-4PlTIlzoyWEpNDMbkFgs3WSrUDkWaqMtX6WNJMfT6Ao=' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-JbTfnCr1DRVbrZ3DMnsUk39OagRVx/76lvbADaThn+8=' 'sha256-C/Su3y1Xu/KZJEXeXDgBJGhwRayU9C+udWS7yVIeUG4=' 'sha256-ZPaEQsUYrDi3KreWQD/+VO33FtKQrKi/3wS/dth16BE=' 'sha256-BzkH6T4d78MjHgouHaye8UOUkaq5vPjWURGKD5dFuUw=' 'sha256-HtQ+Yd1C4dHgIprcZ11TcScY54YLEy+wJHeCuUnrrkQ=' 'sha256-A/3QjCo43fwYhwC0LaO5DeV9VHFYy9nGNlfvgX3f4Vw=' 'sha256-Vvs7jGkUfGXQ3Hj8mxsviqJZsgsGltqaPQPwp0O4MjE=' 'sha256-40w6WzeaPA2X4UO5rM+9V0c0oo4xdZz0Tqj13Tn9SwQ=' 'sha256-T/iXRETAXrriZ4uxOL1Y/J344tXGfFq7+5ISPx9GovQ=' 'sha256-x/vL45Wz2KepGlHd8gpwvqQ6ZXSFYe+2l5MDhJ+yMNE=' 'sha256-tog1r3OcgvqxVQtxGbyWUqeOLqqFKyy7Umm97ioUfd0=' 'sha256-KqCzJ5EyNcJc+3SsRnq6mC5zEHkH5jhkFRnqu+G8DoY=' 'sha256-L+T2ZId3tFnZUiYn6D6FvsUwMQgLF/MJbp+6chYoT7A=' 'sha256-83jnIycIXSkpiipPVejcIpwStPphlmSqmBs3wkaqnUs=' 'sha256-xxDN6q9UnHtxc0SFVSICFL5cmp4svZB4pToHDLj/IeM=' 'sha256-K9syITcxwuBN4IM1utpENVyUVBk5osc1/foT36+f4Yg=' 'sha256-0uk2c/hlm5oSZnJAbWwJ2KJJcZMioSWQxzMz3Oo3VzI=' 'sha256-jnf07cWLqAcfo7BbRZxdTAjgcyCWxkjvt1OC/JIbZts=' 'sha256-M0m7vB/M3n3/8sQ23h7EeyyTDBVn4q9CjsawgbsXS2g=' 'sha256-zDgvCAZF73JEdU+deOsx/TP7qpOpEOHK2d3J1VII/L4=' 'sha256-MhOJTlsF4IHo2IoFGgzIvh86cupAr/iFAmR3XsTBDBI=' 'sha256-EpnMayRaQCXpc7EgwpM+JpOK3QiScYWYwGJ/iV1gJtA='; img-src statistiek.rijksoverheid.nl *.rovid.nl 'self' data:; media-src 'self' rovid.nl *.rovid.nl; frame-src 'self'; font-src 'self'; report-uri https://sentry.dtnr.nl/api/38/security/?sentry_key=134f37c86e0b4680a5c10e8ca8d646eb&sentry_environment=production 1
font-src *.fontawesome.com https://fonts.bunny.net https://fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://firebasestorage.googleapis.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ widget.freshworks.com m2epro.freshdesk.com *.avada.io *.shopify.com https://player.vimeo.com https://www.youtube.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com cdn.jsdelivr.net *.fontawesome.com cdn.ywxi.net www.google.com *.googleapis.com www.gstatic.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com https://fonts.bunny.net https://fonts.googleapis.com http://fonts.googleapis.com unsafe-inline assets.braintreegateway.com cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com widget.freshworks.com m2epro.freshdesk.com https://get.geojs.io *.avada.io https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.amazonaws.com/mfesecure-public/host/ *.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src https://fonts.gstatic.com www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.authorize.net *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src https://www.paypal.com https://seal-easternc.bbb.org fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.authorize.net *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https://firebasestorage.googleapis.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src unsafe-inline https://www.google-analytics.com https://www.googletagmanager.com https://www.gstatic.com https://www.google.com https://seal-easternc.bbb.org https://www.paypal.com https://www.paypalobjects.com vimeo.com *.youtube.com https://seal-easternnc.bbb.org https://verify.authorize.net assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.avada.io *.shopify.com *.authorize.net *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://fonts.googleapis.com *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https://get.geojs.io *.avada.io *.authorize.net *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' go.globallogic.com dev.method.com cms.method.com *.doubleclick.net *.linkedin.com analytics.google.com www.google-analytics.com td.doubleclick.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.doubleclick.net snap.licdn.com www.google-analytics.com www.clickcease.com go.globallogic.com www.googletagmanager.com consent.cookiebot.com consentcdn.cookiebot.com scripts.clarity.ms www.clarity.ms *.hs-scripts.com *.hsadspixel.net *.hs-banner.com *.hs-analytics.net connect.facebook.net sc.lfeeder.com va.vercel-scripts.com; connect-src 'self' go.globallogic.com dev.method.com cms.method.com *.doubleclick.net *.linkedin.com analytics.google.com www.google-analytics.com td.doubleclick.net consentcdn.cookiebot.com www.clarity.ms c.clarity.ms e.clarity.ms www.google.com *.hubapi.com vitals.vercel-insights.com; frame-src 'self' consentcdn.cookiebot.com go.globallogic.com; style-src 'self' 'unsafe-inline' go.globallogic.com; font-src 'self' data:; img-src * data:; report-uri https://18d817936646be941c2394dca4a651ce.report-uri.com/r/d/csp/reportOnly; 1
font-src www.paypalobjects.com *.feedbackcompany.com *.googleapis.com *.gstatic.com *.fontawesome.com 'self' data: https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.feedbackcompany.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com *.addthis.com *.sendcloud.sc *.jsdelivr.net https://www.googletagmanager.com https://td.doubleclick.net 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://banners.helloretailcdn.com *.feedbackcompany.com 'self' data: https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://img.youtube.com *.amazonaws.com *.hsforms.net *.hsforms.com https://maps.gstatic.com https://imgproxy.vendic.dev data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https://core.helloretail.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com *.feedbackcompany.com https://maps.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.cloudflare.com/ajax/libs/prototype/1.7.3/prototype.js *.sendcloud.sc *.jsdelivr.net *.hsforms.net *.hsforms.com *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com *.googleapis.com https://static.klaviyo.com https://cdn.jsdelivr.net *.fontawesome.com *.sendcloud.sc *.jsdelivr.net *.gstatic.com https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://core.helloretail.com https://helloretailcdn.com *.feedbackcompany.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com t.elasticsuite.io *.hsforms.net *.hsforms.com https://www.google.com *.pay.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://localhost/paynl/csp/report; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com data: fonts.googleapis.com maxcdn.bootstrapcdn.com https://use.typekit.net *.fontawesome.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com www.gstatic.com data: youtube.com www.youtube.com vimeo.com s7.addthis.com googleads.g.doubleclick.net tpc.googlesyndication.com https://www.facebook.com https://*.doubleclick.net https://*.hotjar.com https://*.addthis.com https://*.moneris.com https://*.smartadserver.com https://*.rubiconproject.com https://*.googlesyndication.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com maps.gstatic.com www.maps.gstatic.com ssl.gstatic.com maps.googleapis.com developers.google.com www.google-analytics.com www.google.ca www.facebook.com px.ads.linkedin.com stats.g.doubleclick.net www.davinci.tools www15.smartadserver.com creatives.sascdn.com pre.glotgrx.com pagead2.googlesyndication.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.id5-sync.com *.axept.io *.linkedin.com *.imgix.net https://www.facebook.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.ca https://www.google.com https://maps.gstatic.com https://*.bing.com https://c.clarity.ms https://googleads.g.doubleclick.net https://ct.pinterest.com https://*.adsymptotic.com https://*.smartadserver.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://*.cookielaw.org www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com data: maps.googleapis.com www.google.com tagmanager.google.com www.googletagservices.com adservice.google.ca adservice.google.com www.gstatic.com js-agent.newrelic.com bam.nr-data.net connect.facebook.net chimpstatic.com snap.licdn.com securepubads.g.doubleclick.net ced.sascdn.com www15.smartadserver.com pixel.yabidos.com ced-ns.sascdn.com pixel.adsafeprotected.com static.adsafeprotected.com pagead2.googlesyndication.com s7.addthis.com z.moatads.com v1.addthisedge.com m.addthis.com api-public.addthis.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com id5-sync.com cdn.id5-sync.com *.axept.io *.linkedin.com *.trackedlink.net *.doubleclick.net *.addthis.com *.addthisedge.com *.google.com  *.gstatic.com *.facebook.net *.googleadservices.com *.bing.com *.clarity.ms *.hotjar.com *.google-analytics.com *.googletagmanager.com  *.googletagservices.com *.chimpstatic.com *.gstatic.com  *.googleapis.com  *.paypal.com  *.paypalobjects.com  *.googlesyndication.com *.g.doubleclick.net *.adnxs.com *.pinimg.com *.discus.com *.cookielaw.org *.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com https://*.cookielaw.org js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com tagmanager.google.com maxcdn.bootstrapcdn.com downloads.mailchimp.com https://*.typekit.net https://static.klaviyo.com *.fontawesome.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com bam.nr-data.net s7.addthis.com m.addthis.com www.facebook.com www.google.ca www.google-analytics.com pagead2.googlesyndication.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com id5-sync.com *.id5-sync.com *.eu-1-id5-sync.com *.axept.io *.linkedin.com *.smartadserver.com https://*.signifyd.com:* https://analytics.google.com https://www.google-analytics.com https://www.google.ca https://maps.googleapis.com https://*.doubleclick.net https://*.clarity.ms https://*.bing.com https://*.hotjar.com https://*.hotjar.io https://*.addthis.com https://*.facebook.com/ https://*.gstatic.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.cookielaw.org https://*.onetrust.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cloudflare.com *.trustedshops.com *.fontawesome.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.authorize.net *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com youtu.be *.vimeo.com *.addthis.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.quotes.stockinthechannel.co.uk *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cloudflare.com https://cdn.klarna.com https://s.ytimg.com *.usercentrics.eu blob: www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com media.stockinthechannel.com images.icecat.biz 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.cloudflare.com *.google-analytics.com *.gstatic.com *.googleadservices.com *.googleapis.com *.trustedshops.com *.usercentrics.eu *.addthis.com *.addthisedge.com *.moatads.com s7.addthis.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.typekit.net *.trustedshops.com *.usercentrics.eu assets.braintreegateway.com *.googleapis.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com objects.icecat.biz 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.cloudflare.com *.googleapis.com ekr.zdassets.com/ *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'nonce-huRabya6OWyED+3euIy6+Q==' 'strict-dynamic' https: 'unsafe-inline' 'unsafe-hashes' 'sha256-qOBd84dGYZ1TXAj+NIqiwfe6+6cjjOJx8QNDBdoNQyM=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-1jAmyYXcRq6zFldLe/GCgIDJBiOONdXjTLgEFMDnDSM=' 'report-sample' https://bat.bing.com https://*.usercentrics.eu https://*.newsletter2go.com www.googletagmanager.com api.gutscheinconnection.de api.sovendus.com *.trustedshops.com *.trustedshops.de *.etrusted.com https://c.paypal.com 'unsafe-eval'; script-src-elem 'nonce-huRabya6OWyED+3euIy6+Q==' 'strict-dynamic' https: 'unsafe-inline' 'report-sample' https://bat.bing.com https://*.usercentrics.eu https://*.newsletter2go.com www.googletagmanager.com api.gutscheinconnection.de api.sovendus.com *.trustedshops.com *.trustedshops.de *.etrusted.com https://c.paypal.com 'unsafe-eval'; script-src-attr 'unsafe-hashes' 'sha256-qOBd84dGYZ1TXAj+NIqiwfe6+6cjjOJx8QNDBdoNQyM=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-1jAmyYXcRq6zFldLe/GCgIDJBiOONdXjTLgEFMDnDSM=' 'report-sample'; img-src 'self' data: blob: https: https://c.paypal.com https://b.stats.paypal.com 'report-sample'; object-src 'none'; base-uri 'none'; report-uri /error.php; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.castinfo.de *.cloudflare.com https://www.gstatic.com https://unpkg.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.castinfo.de *.cleverreach.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.castinfo.de https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com landofcoder.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.castinfo.de *.cloudfront.net magefan.com cm.magefan.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com *.disqus.com *.facebook.com https://firebasestorage.googleapis.com www.safemage.com *.hsforms.net *.hsforms.com 'self' data: *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com jsd-widget.atlassian.com *.castinfo.de *.googleapis.com *.gstatic.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.disqus.com *.googletagmanager.com *.facebook.net www.termsfeed.com *.avada.io *.shopify.com *.hsforms.net *.hsforms.com landofcoder.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.castinfo.de https://cdnjs.cloudflare.com *.googleapis.com https://unpkg.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com *.castinfo.de 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com jsd-widget.atlassian.com api-private.atlassian.com *.castinfo.de https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://get.geojs.io *.avada.io t.elasticsuite.io *.hsforms.net *.hsforms.com landofcoder.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://widgets.trustedshops.com *.perfumist.net *.perfumist.fr *.ccm19.de *.barrierefreie-web.de www.googletagmanager.com ad.doubleclick.net *.klarnacdn.net *.fontawesome.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.awin1.com *.zenaps.com *.fls.doubleclick.net *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com *.awin1.com *.zenaps.com *.wepowerconnections.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.perfumist.net *.perfumist.fr https://consenttool.haendlerbund.de *.haendlerbund.de *.cookiebot.com *.ccm19.de *.vgz.fr *.barrierefreie-web.de flagcdn.com *.casalemedia.com *.bidswitch.net ad11.adfarm1.adition.com imagesrv.adition.com *.google.de ad.adnet.de ad.doubleclick.net sync.connectad.io www.converify.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://api.mapbox.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.perfumist.net *.perfumist.fr https://consenttool.haendlerbund.de *.facebook.net *.cookiebot.com *.ccm19.de *.barrierefreie-web.de *.adcell.com pix.hyj.mobi tm.ad-srv.ne *.ad-srv.net ad4m.at *.bounce-commerce.de img.adnet.de *.pinterest.com sibautomation.com *.pinimg.com ad.doubleclick.net *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.perfumist.net *.perfumist.fr https://consenttool.haendlerbund.de *.cookiebot.com *.ccm19.de *.barrierefreie-web.de www.googletagmanager.com ad.doubleclick.net *.klarnacdn.net *.fontawesome.com assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com *.wepowerconnections.com https://the.sciencebehindecommerce.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.perfumist.net *.perfumist.fr https://consenttool.haendlerbund.de *.cookiebot.com *.googleapis.com *.doubleclick.net *.ccm19.de *.barrierefreie-web.de *.adcell.com *.ad4m.at *.bounce-commerce.de *.pinterest.com *.brevo.com ad.doubleclick.net *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com autocomplete2.postdirekt.de t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src  'none'; connect-src 'self' *.mommysgirl.com *.girlsway.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.mommysgirl.com *.girlsway.com join.gammasecure.com; script-src 'self' *.mommysgirl.com *.girlsway.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.mommysgirl.com *.girlsway.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
upgrade-insecure-requests; default-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob: data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://cdn.jsdelivr.net https://maxcdn.bootstrapcdn.com https://embed.tawk.to https://geolocation.onetrust.com https://rockwellautomation-privacy.my.onetrust.com https://wwwqa.lektronix.com https://origin-wwwqa.lektronix.com https://wwwqa.lektronix.de https://wwwqa.lektronix.cz https://www.lektronix.com https://origin-www.lektronix.com https://www.lektronix.de https://www.lektronix.cz https://www.lektronix.pl https://www.lektronix.it https://*.akamaihd.net https://*.cookielaw.org https://*.google.com https://*.gstatic.com https://*.googletagmanager.com https://*.google-analytics.com https://*.doubleclick.net https://*.cloudflare.com https://*.clarity.ms https://*.akstat.io https://*.go-mpulse.net https://ajax.googleapis.com https://connect.facebook.net https://*.bing.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com https://translate.googleapis.com https://embed.tawk.to https://wwwqa.lektronix.com https://origin-wwwqa.lektronix.com https://wwwqa.lektronix.de https://wwwqa.lektronix.cz https://www.lektronix.com https://origin-www.lektronix.com https://www.lektronix.de https://www.lektronix.cz https://www.lektronix.pl https://www.lektronix.it https://*.cookielaw.org https://*.cloudflare.com; font-src 'self' data: https://wwwqa.lektronix.com https://origin-wwwqa.lektronix.com https://wwwqa.lektronix.de https://wwwqa.lektronix.cz https://www.lektronix.com https://origin-www.lektronix.com https://www.lektronix.de https://www.lektronix.cz https://www.lektronix.pl https://www.lektronix.it https://embed.tawk.to https://*.googleapis.com https://*.gstatic.com https://*.cloudflare.com https://*.fontawesome.com https://at.alicdn.com; img-src 'self' data: https: https://wwwqa.lektronix.com https://origin-wwwqa.lektronix.com https://wwwqa.lektronix.de https://wwwqa.lektronix.cz https://www.lektronix.com https://origin-www.lektronix.com https://www.lektronix.de https://www.lektronix.cz https://www.lektronix.pl https://www.lektronix.it https://www.google.com https://www.googleadservices.com https://*.clarity.ms https://*.cookielaw.org https://*.google-analytics.com https://*.doubleclick.net; media-src 'self' data: https://embed.tawk.to https://wwwqa.lektronix.com https://origin-wwwqa.lektronix.com https://wwwqa.lektronix.de https://wwwqa.lektronix.cz https://www.lektronix.com https://origin-www.lektronix.com https://www.lektronix.de https://www.lektronix.cz https://www.lektronix.pl https://www.lektronix.it; connect-src 'self' https://api.tawk.to https://geolocation.onetrust.com https://rockwellautomation-privacy.my.onetrust.com https://bat.bing.com https://wwwqa.lektronix.com https://origin-wwwqa.lektronix.com https://wwwqa.lektronix.de https://wwwqa.lektronix.cz https://www.lektronix.com https://origin-www.lektronix.com https://www.lektronix.de https://www.lektronix.cz https://www.lektronix.pl https://www.lektronix.it wss://*.tawk.to/* https://*.tawk.to https://*.akstat.io https://*.clarity.ms https://*.cookielaw.org https://*.google.com https://*.gstatic.com https://*.googletagmanager.com https://*.google-analytics.com https://*.doubleclick.net https://*.go-mpulse.net https://www.googleadservices.com https://pagead2.googlesyndication.com https://bat.bing.net https://connect.facebook.net https://ajax.googleapis.com https://*.bing.com; frame-src 'self' https://rockwellautomation.wd1.myworkdayjobs.com https://rockwellautomation.com https://embed.tawk.to https://tourmkr.com https://wwwqa.lektronix.com https://origin-wwwqa.lektronix.com https://wwwqa.lektronix.de https://wwwqa.lektronix.cz https://www.lektronix.com https://origin-www.lektronix.com https://www.lektronix.de https://www.lektronix.cz https://www.lektronix.pl https://www.lektronix.it https://www.googleadservices.com https://www.clarity.ms https://bat.bing.com https://consent.youtube.com https://recaptcha.net https://security-eu.mimecast.com https://*.youtube.com https://*.doubleclick.net https://*.google.com https://*.gstatic.com https://*.googletagmanager.com https://*.zscaler.net https://block.opendns.com https://*.zscalerthree.net https://*.zscloud.net https://translate.googleapis.com; object-src 'self' https://wwwqa.lektronix.com https://origin-wwwqa.lektronix.com https://wwwqa.lektronix.de https://wwwqa.lektronix.cz https://www.lektronix.com https://origin-www.lektronix.com https://www.lektronix.de https://www.lektronix.cz https://www.lektronix.pl https://www.lektronix.it https://www.youtube.com; base-uri 'self'; frame-ancestors 'self'; worker-src 'self' blob:; report-uri /csp-report.php; 1
default-src 'self' https://cdn.diggz.co;     script-src 'self' 'unsafe-inline'     https://cdn.diggz.co     https://js.stripe.com     https://*.googletagmanager.com     https://*.google-analytics.com     https://www.gstatic.com     https://www.google.com     https://www.facebook.com https://connect.facebook.net     https://maps.googleapis.com          https://cdn.jsdelivr.net     https://cdnjs.cloudflare.com     https://ipqualityscore.com          https://*.sentry.io     https://apis.google.com     https://challenges.cloudflare.com https://appleid.cdn-apple.com https://by2.uservoice.com https://widget.uservoice.com https://analytics.trovit.com https://cdn.onesignal.com https://*.onesignal.com https://*.ubembed.com https://*.unbounce.com https://join.diggz.co  https://cdn.firebase.com https://*.firebaseio.com https://cdn.trackdesk.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://www.clarity.ms https://scripts.clarity.ms;  style-src 'self' 'unsafe-inline'     https://cdn.diggz.co     https://fonts.googleapis.com     https://cdnjs.cloudflare.com     https://cdn.jsdelivr.net     https://onesignal.com https://maxcdn.bootstrapcdn.com;   img-src 'self' data: blob:     https://cdn.diggz.co     https://*.firebaseio.com     https://diggz-pron.s3.amazonaws.com     https://diggz-secondary-assets.s3.amazonaws.com          https://www.gstatic.com     https://*.googletagmanager.com     https://*.google-analytics.com     https://www.clarity.ms     https://ipqualityscore.com     https://graph.facebook.com https://c.clarity.ms https://*.googleapis.com https://maps.googleapis.com https://appleid.cdn-apple.com https://maps.gstatic.com https://csi.gstatic.com https://*.gstatic.com https://cdn.onesignal.com https://lh3.googleusercontent.com https://rd.clk.thribee.com https://www.facebook.com https://*.google.com https://*.googleusercontent.com https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com;      font-src 'self'     https://cdn.diggz.co     https://fonts.gstatic.com     https://cdnjs.cloudflare.com     https://maxcdn.bootstrapcdn.com;     frame-src 'self'     https://js.stripe.com     https://connect.facebook.net     https://www.facebook.com     https://www.google.com     https://www.googletagmanager.com     https://*.firebaseio.com      https://googleads.g.doubleclick.net https://accounts.google.com https://www.clarity.ms https://by2.uservoice.com https://diggz.uservoice.com https://widget.uservoice.com  https://*.ubembed.com https://diggz-inbox-e7b71.firebaseapp.com https://diggz-test.firebaseapp.com https://challenges.cloudflare.com;      connect-src 'self'     https://cdn.diggz.co https://firestore.googleapis.com https://*.google-analytics.com https://*.googletagmanager.com https://*.clarity.ms     https://ipqualityscore.com     https://*.unbounce.com     https://*.sentry.io     https://4ac8e45367304fa8a7d64ef9ea506ac8.events.ubembed.com  https://by2.uservoice.com https://analytics.trovit.com https://*.ubembed.com https://api.onesignal.com https://onesignal.com https://cdn.onesignal.com wss://*.onesignal.com https://*.onesignal.com https://firebaseio.com https://*.firebaseio.com wss://*.firebaseio.com wss://s-gke-usc1-nssi2-12.firebaseio.com https://join.diggz.co https://www.googleapis.com https://maps.googleapis.com https://*.googleapis.com https://securetoken.googleapis.com https://streetviewpixels-pa.googleapis.com https://pagead2.googlesyndication.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.facebook.com https://www.google.com;  worker-src 'self' blob:; child-src 'self' blob:;    object-src 'none';   base-uri 'self';   form-action 'self';   frame-ancestors 'self';   upgrade-insecure-requests;   block-all-mixed-content;   report-uri https://bf563a18136c0c5aa08af4a4ac437157.report-uri.com/r/d/csp/enforce; 1
default-src 'self' data: *.engitel.com *.acsbapp.com matomo.engitel.com www.spingo.it; script-src 'self' 'unsafe-inline' *.engitel.com acsbapp.com *.acsbapp.com matomo.engitel.com *.googletagmanager.com connect.facebook.net *.facebook.com; style-src 'self' data: *.engitel.com *.acsbapp.com matomo.engitel.com 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: *.facebook.com i.ytimg.com web.archive.org matomo.engitel.com; frame-src 'self' *.youtube.com www.youtube-nocookie.com; connect-src 'self' *.acsbapp.com acsbapp.com *.engitel.com matomo.engitel.com *.google-analytics.com www.facebook.com; report-uri /web/cspLogger.aspx 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com *.google.com *.newrelic.com *.nr-data.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.google.com *.newrelic.com *.google-analytics.com *.nr-data.net https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com *.google-analytics.com *.nr-data.net https://plumrocket.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com www.gstatic.com *.google.com *.newrelic.com *.nr-data.net https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com *.addtoany.com *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.google.com *.newrelic.com *.google-analytics.com *.nr-data.net *.fontawesome.com https://fonts.bunny.net *.googleapis.com *.addtoany.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com https://get.geojs.io *.avada.io http://dpm.demdex.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-ReajAhOWNrkzHOUZfVv_0Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://*.quadpay.com https://*.zip.co maxcdn.bootstrapcdn.com https://fonts.gstatic.com https://cdn.jsdelivr.net *.lewandmassager.com *.bvibe.com use.fontawesome.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://bid.g.doubleclick.net *.lewandmassager.com *.bvibe.com https://www.googletagmanager.com/ *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.quadpay.com https://*.zip.co www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com shareasale.com *.bvibe.com *.lewandmassager.com *.yotpo.com swellrewards.com *.swellrewards.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com chimpstatic.com downloads.mailchimp.com *.list-manage.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.kaptcha.com https://*.quadpay.com https://*.zip.co *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.gstatic.com https://www.google.com https://cdnjs.cloudflare.com *.lewandmassager.com *.bvibe.com *.impactcdn.com https://maps.googleapis.com https://maps.gstatic.com https://cdn.jsdelivr.net https://static.cloudflareinsights.com *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com https://static.klaviyo.com maxcdn.bootstrapcdn.com assets.braintreegateway.com https://fonts.gstatic.com https://fonts.googleapis.com *.lewandmassager.com *.bvibe.com *.yotpo.com swellrewards.com *.swellrewards.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.kaptcha.com https://*.quadpay.com https://*.zip.co api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com https://bvibe.pxf.io/ https://lewand-massager.sjv.io/ *.yotpo.com swellrewards.com *.swellrewards.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src blob:; font-src fonts.gstatic.com *.kxcdn.com *.fontawesome.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.gstatic.com *.fbcdn.net https://www.mollie.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.googleapis.com *.google.com *.gstatic.com cdn.ampproject.org connect.facebook.net www.googletagmanager.com googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com *.youtube.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com s7.addthis.com js.mollie.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com ekr.zdassets.com/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://code.jquery.com https://cdn.jsdelivr.net https://cdn.datatables.net https://cdnjs.cloudflare.com https://unpkg.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://static.hotjar.com https://script.hotjar.com https://www.google.com https://www.gstatic.com https://analytics.ahrefs.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://cdn.datatables.net https://fonts.googleapis.com https://unpkg.com; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; img-src 'self' data: blob: https: https://*.tile.openstreetmap.org https://www.google-analytics.com https://*.hotjar.com https://*.hotjar.io https://analytics.ahrefs.com https://via.placeholder.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://region1.google-analytics.com https://www.googletagmanager.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://analytics.ahrefs.com https://prices.resistencias.com; frame-src 'self' https://www.google.com https://recaptcha.google.com https://www.googletagmanager.com https://vars.hotjar.com; frame-ancestors 'self'; form-action 'self' https://prices.resistencias.com; base-uri 'self'; object-src 'none'; upgrade-insecure-requests 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.googletagmanager.com js.mollie.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.doubleclick.net *.googletagmanager.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com s7.addthis.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.gstatic.com *.googletagmanager.com *.doubleclick.net *.avada.io *.shopify.com js.mollie.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.googletagmanager.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com ekr.zdassets.com/ *.doubleclick.net *.googlesyndication.com https://get.geojs.io *.avada.io *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-ryPCztjzqeT1hie091Fz0w==' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://connect.facebook.net https://code.jquery.com https://cdn.jsdelivr.net https://stackpath.bootstrapcdn.com https://cdnjs.cloudflare.com; style-src 'self' 'nonce-ryPCztjzqeT1hie091Fz0w==' 'unsafe-inline' https://stackpath.bootstrapcdn.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; form-action 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
font-src *.fontawesome.com *.alothemes.com *.magepow.com fonts.gstatic.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com magento-cloudflare.jetrails.com www.youtube.com *.google.com/ secure.livechatinc.com marketing.nailgundepot.com app.zinrelo.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.facebook.com sec.webeyez.com www.xtento.com https://*.online-metrix.net https://imgs.signifyd.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.trackedlink.net *.ddlnk.net *.ytimg.com *.facebook.com https://img.youtube.com *.alothemes.com *.magepow.com https://www.magezon.com store.paradoxlabs.com *.nailgundepot.com dgjcoqnzn763b.cloudfront.net cdn.files-text.com https://redchamps.com nailgundepot.com *.gstatic.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com www.adelixir.com bat.bing.com www.xtento.com cdn.xtento.com https://imgs.signifyd.com https://*.online-metrix.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com https://connect.facebook.net *.facebook.com s7.addthis.com *.avada.io *.alothemes.com *.magepow.com *.google.com/ player.vimeo.com *.authorize.net maps.googleapis.com *.online-metrix.net blob: *.config-security.com *.cloudflare.com *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.listrakbi.com bat.bing.com api.livechatinc.com cdn.livechatinc.com www.gstatic.com marketing.nailgundepot.com d395yjvh5spyzw.cloudfront.net sec.webeyez.com www.adelixir.com js-agent.newrelic.com www.xtento.com cdn.xtento.com https://app.zinrelo.com app.zinrelo.com https://cdn.zinrelo.com/js/all.js https://cdn-scripts.signifyd.com https://imgs.signifyd.com https://www.nailgundepot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com webchat.dotdigital.com webchat.staging.dotdigital.com *.fontawesome.com *.alothemes.com *.magepow.com *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com *.listrakbi.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com ekr.zdassets.com/ https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com *.authorize.net www.google.com maps.googleapis.com dp.signifyd.com *.online-metrix.net *.config-security.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app bam.nr-data.net https://imgs.signifyd.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.googleapis.com *.gstatic.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com maxcdn.bootstrapcdn.com *.bootstrapcdn.com *.yotpo.com v2.zopim.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.google.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com magento-cloudflare.jetrails.com www.youtube.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com *.klarna.com *.sequrapi.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.gstatic.com *.googleapis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.ytimg.com https://redchamps.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com blob: *.magentocommerce.com *.google.es *.zopim.io v2.zopim.com *.comercialtpv.com *.redsys.es *.klarnacdn.net *.cookielaw.org data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.googleapis.com *.gstatic.com apis.google.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com maps.googleapis.com *.trustedshops.com *.google.es *.zdassets.com *.cookielaw.org *.onetrust.com *.zopim.com *.klarnacdn.net *.cloudflareinsights.com *.cloudflare.com *.sequrapi.com *.crazyegg.com *.scanmarche.fr https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com downloads.mailchimp.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.tiktokw.us form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com sandbox.sequracdn.com live.sequracdn.com sandbox.sequrapi.com live.sequrapi.com live.cdn.sequra.svea.com next-live.sequra.svea.com live.sequra.svea.com sandbox.cdn.sequra.svea.com next-sandbox.sequra.svea.com sandbox.sequra.svea.com places.googleapis.com wss://*.zopim.com *.zendesk.com *.zdassets.com *.cookielaw.org *.onetrust.com *.klarnaevt.com *.crazyegg.com *.scanmarche.fr *.tiktok.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com *.klarna.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri /contact; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; img-src 'self' https://image.tmdb.org https://www.google.com https://*.google.com https://www.google.de https://*.google.de https://www.google.at https://*.google.at https://www.google-analytics.com https://*.google-analytics.com https://*.googlesyndication.com https://*.doubleclick.net data:; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://cdn.ampproject.org; connect-src 'self' https://api.themoviedb.org https://www.googletagmanager.com https://*.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.google.com https://*.googlesyndication.com https://*.doubleclick.net; frame-src https://www.youtube.com https://www.youtube-nocookie.com https://*.googlesyndication.com https://*.doubleclick.net 1
font-src *.fontawesome.com *.googleapis.com *.gstatic.com cdnjs.cloudflare.com self unsafe-inline data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com self *.facebook.com *.facebook.net 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.trustpilot.com ecomm.sella.it *.doubleclick.net *.google-analytics.com *.googletagmanager.com www.paypalobjects.com bid.g.doubleclick.net *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://banners.helloretailcdn.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com * ecomm.sella.it *.google.it *.google.com *.doubleclick.net *.google-analytics.com *.googletagmanager.com *.trustpilot.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.gstatic.com *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://core.helloretail.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com chimpstatic.com downloads.mailchimp.com *.list-manage.com widget.freshworks.com m2epro.freshdesk.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.fontawesome.com *.googleapis.com *.gstatic.com * *.trustpilot.com ecomm.sella.it *.doubleclick.net *.google-analytics.com *.googletagmanager.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com downloads.mailchimp.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com *.trustpilot.com cdnjs.cloudflare.com self unsafe-inline tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com https://core.helloretail.com https://helloretailcdn.com widget.freshworks.com m2epro.freshdesk.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com ecomm.sella.it *.doubleclick.net *.google-analytics.com *.googletagmanager.com *.trustpilot.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.facebook.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com http://cdnjs.cloudflare.com/ajax/libs/ maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com maps.gstatic.com maps.googleapis.com *.googleusercontent.com *.ggpht.com https://meetanshi.com/media/logo.png https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.jsdelivr.net https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com 'unsafe-eval' cdn.jsdelivr.net https://cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/js/utils.js js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com unsafe-inline http://cdnjs.cloudflare.com/ajax/libs/ cdn.jsdelivr.net maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.googletagmanager.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com *.weltpixel.com www.xtento.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.wesupply.xyz https://wesupplylabs.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.vimeocdn.com i.ytimg.com www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com www.xtento.com cdn.xtento.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.gstatic.com *.cdninstagram.com *.fbcdn.net maps.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.googletagmanager.com www.sandbox.paypal.com t.paypal.com chimpstatic.com downloads.mailchimp.com *.list-manage.com www.xtento.com cdn.xtento.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.cloudflare.com ajax.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.instagram.com maps.googleapis.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://www.google-analytics.com *.instagram.com *.googleusercontent.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
child-src *;connect-src *;form-action *;frame-ancestors *;worker-src *;style-src-elem * https://optimistontour.nl 'unsafe-inline' https://www.watersportverbond.nl https://watersportverbond.nl https://www.teamallianz.nl https://teamallianz.nl https://maritbouwmeesteracademy.nl https://www.allianzkanosprint.nl https://allianzkanosprint.nl https://www.zeilervanhetjaar.nl https://zeilervanhetjaar.nl https://cleanupontour.nl https://www.cleanupontour.nl  https://www.optimistontour.nl https://fonts.googleapis.com https://cdn.jsdelivr.net;media-src *;manifest-src *;frame-src *;font-src * data: https://fonts.gstatic.com;img-src * data:;;style-src-attr https://optimistontour.nl 'unsafe-inline' https://www.watersportverbond.nl https://watersportverbond.nl https://www.teamallianz.nl https://teamallianz.nl https://maritbouwmeesteracademy.nl https://www.allianzkanosprint.nl https://allianzkanosprint.nl https://www.zeilervanhetjaar.nl https://zeilervanhetjaar.nl https://cleanupontour.nl https://www.cleanupontour.nl  https://www.optimistontour.nl https://fonts.googleapis.com https://cdn.jsdelivr.net;style-src https://optimistontour.nl 'unsafe-inline' https://www.watersportverbond.nl https://watersportverbond.nl https://www.teamallianz.nl https://teamallianz.nl https://maritbouwmeesteracademy.nl https://www.allianzkanosprint.nl https://allianzkanosprint.nl https://www.zeilervanhetjaar.nl https://zeilervanhetjaar.nl https://cleanupontour.nl https://www.cleanupontour.nl  https://www.optimistontour.nl https://fonts.googleapis.com https://cdn.jsdelivr.net;default-src https://optimistontour.nl 'unsafe-inline' https://www.watersportverbond.nl https://watersportverbond.nl https://www.teamallianz.nl https://teamallianz.nl https://maritbouwmeesteracademy.nl https://www.allianzkanosprint.nl https://allianzkanosprint.nl https://www.zeilervanhetjaar.nl https://zeilervanhetjaar.nl https://cleanupontour.nl https://www.cleanupontour.nl  https://www.optimistontour.nl https://fonts.googleapis.com https://cdn.jsdelivr.net;base-uri 'none';script-src 'self' https://code.jquery.com https://ajax.aspnetcdn.com https://www.googletagmanager.com https://localhost:5173 https://static.hotjar.com https://connect.facebook.net https://cdn.jsdelivr.net https://script.hotjar.com 'nonce-J5HshSrS8cbAdMRrkV/X9gsr' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com accounts.google.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com *.instagram.com js.mollie.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com *.cdninstagram.com unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com https://www.mollie.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com *.gstatic.com apis.google.com *.instagram.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googletagmanager.com www.google-analytics.com  widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com js.mollie.com applepay.cdn-apple.com web.facebook.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.cookiefirst.com https://cookiefirst.com https://www.googletagmanager.com https://engage.klickpark.de https://*.clarity.ms https://*.snitcher.com https://swetrix.org https://cdn.jsdelivr.net https://helpdesk.klickpark.de; style-src 'self' 'unsafe-inline' https://engage.klickpark.de https://*.cookiefirst.com https://helpdesk.klickpark.de; img-src 'self' data: blob: https://images.provenexpert.com https://klickpark.de https://cms.klickpark.de https://www.googletagmanager.com https://*.google-analytics.com https://*.clarity.ms https://*.cookiefirst.com https://helpdesk.klickpark.de; font-src 'self' data:; media-src 'self' https://vz-9a54e33f-904.b-cdn.net https://vz-b9aecf19-398.b-cdn.net; connect-src 'self' https://*.cookiefirst.com https://www.googletagmanager.com https://*.analytics.google.com https://*.google-analytics.com https://engage.klickpark.de https://*.clarity.ms https://*.snitcher.com https://analytics.managedpark.de https://swetrix.org https://helpdesk.klickpark.de wss://helpdesk.klickpark.de; frame-src 'self' https://global.frcapi.com https://*.cookiefirst.com https://www.youtube.com https://www.youtube-nocookie.com; form-action 'self' https://engage.klickpark.de 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajaxgeo.cartrawler.com https://otageo.cartrawler.com https://cdn.cartrawler.com https://s.cartrawler.com https://tag.cartrawler.com; style-src 'self' 'unsafe-inline' https://ajaxgeo.cartrawler.com https://cdn.cartrawler.com https://ct-images.imgix.net; img-src 'self' data: blob: https:; font-src 'self' data: https://ajaxgeo.cartrawler.com https://cdn.cartrawler.com https://ct-images.imgix.net; connect-src 'self' https://*.supabase.co https://api.stripe.com https://api.duffel.com https://otageo.cartrawler.com https://otasecure.cartrawler.com https://s.cartrawler.com https://pay.cartrawler.com https://tag.cartrawler.com https://snowplow.cartrawler.com https://ct-errs.cartrawler.com; frame-src 'self' https://www.openstreetmap.org https://js.stripe.com https://links.duffel.com https://widget.getyourguide.com https://s.cartrawler.com https://otasecure.cartrawler.com https://pay.cartrawler.com https://ui-components.evervault.com https://customer.cartrawler.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self' 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.googleapis.com data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.fontawesome.com jsappcdn.hikeorders.com https://jsappcdn.hikeorders.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com https://www.merchante-solutions.com https://hostedpayments.merchante.com https://merchantacsstag.cardinalcommerce.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com *.braintreegateway.com *.paypal.com google.com *.google.com *.dotdigital-pages.com *.dotdigital.com www.google.com *.weltpixel.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.googletagmanager.com *.doubleclick.net *.certcapture.com webchat.dotdigital.com webchat.staging.dotdigital.com https://jsappcdn.hikeorders.com *.google.com/ https://merchantacsstag.cardinalcommerce.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com p.typekit.net *.vimeocdn.com i.ytimg.com *.youtube.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com *.googleapis.com *.trackedlink.net blob: https://www.magezon.com *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com *.certcapture.com https://jsappcdn.hikeorders.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io amcglobal.sc.omtrdc.net *.adobe.io use.typekit.net magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.magento-datasolutions.com *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com *.gstatic.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.certcapture.com webchat.dotdigital.com webchat.staging.dotdigital.com jsappcdn.hikeorders.com cdn.livechatinc.com api.livechatinc.com js-agent.newrelic.com app.hubspot.com checkout.iglobalstores.com cdn.leadmanagerfx.com https://jsappcdn.hikeorders.com https://api.merchante-solutions.com https://cert.merchante-solutions.com https://testapi.merchante-solutions.com *.hsforms.net *.hsforms.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com *.stripe.network *.stripecdn.com *.amazon.com *.fontawesome.com *.tagmanager.google.com *.googletagmanager.com *.certcapture.com webchat.dotdigital.com webchat.staging.dotdigital.com https://jsappcdn.hikeorders.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net commerce.adobe.io *.sentry.io www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.magento-datasolutions.com *.magento-ds.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com *.amazonaws.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.certcapture.com webchat.dotdigital.com webchat.staging.dotdigital.com a11yenabler.hikeorders.com https://a11yenablerapi.hikeorders.com https://api.merchante-solutions.com https://cert.merchante-solutions.com https://testapi.merchante-solutions.com https://writer.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com places.googleapis.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src https://jsappcdn.hikeorders.com https://a11yenablerapi.hikeorders.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
frame-src 'self' https://embed.tawk.to/ https://plugins.tawk.to; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://ajax.googleapis.com/ajax/libs/jqueryui/1.13.2/jquery-ui.min.js https://ajax.googleapis.com/ajax/libs/jquery/3.7.0/jquery.min.js https://embed.tawk.to/ https://ajax.googleapis.com/ajax/libs/jquery/1.11.0/ cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.ckeditor.com https://cdn.jsdelivr.net mdbootstrap.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://ajax.googleapis.com/ajax/libs/jqueryui/1.13.2/jquery-ui.min.js https://ajax.googleapis.com/ajax/libs/jquery/3.7.0/jquery.min.js https://embed.tawk.to/ https://ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.ckeditor.com https://cdn.jsdelivr.net mdbootstrap.com; style-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://ajax.googleapis.com/ajax/libs/jqueryui/1.13.2/jquery-ui.min.js https://ajax.googleapis.com/ajax/libs/jquery/3.7.0/jquery.min.js https://embed.tawk.to/ cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https://cdn.jsdelivr.net mdbootstrap.com use.fontawesome.com; frame-ancestors 'self' static.addtoany.com https://embed.tawk.to/ 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com cash-f.squarecdn.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * www.google.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io * ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://firebasestorage.googleapis.com https://maps.omnivasiunta.lt crystals.co.uk i.crystalidea.shop maps.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ chimpstatic.com downloads.mailchimp.com *.list-manage.com *.avada.io https://unpkg.com https://static.cloudflareinsights.com ajax.googleapis.com https://www.googletagmanager.com tagmanager.google.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app downloads.mailchimp.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * https://get.geojs.io *.avada.io https://geocode.arcgis.com https://cloudflareinsights.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
child-src 'self' https://*.qualified.com; default-src 'self'; frame-src 'self' https://9628652.fls.doubleclick.net https://td.doubleclick.net https://js.driftt.com https://*.qualified.com https://a8447815042.cdn-pci.optimizely.com https://ct.pinterest.com https://tealium-f.squarecdn.com; worker-src 'self' blob:; connect-src 'self' https://assets.ctfassets.net https://api.broadway.squareup.com https://campaign-hub-production-f.squarecdn.com https://api.squareup.com/v1/cdp/batch https://api.squarestagingexternal.com/v1/cdp/batch https://api.squarestagingexternal.com https://api.squareup.com https://api.squareupstaging.com *.contentsquare.net https://capi.squareup.com https://browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com https://stats.g.doubleclick.net https://facebook.com https://www.facebook.com https://googleads.g.doubleclick.net http://www.google-analytics.com https://www.google-analytics.com https://google.com https://www.google.com https://us-central1-sq-sgtm-prod.cloudfunctions.net https://www.googletagmanager.com http://images.ctfassets.net https://images.ctfassets.net http://424-iab-218.mktoresp.com https://424-iab-218.mktoresp.com https://xms2-marketo.beta.stage.sqprod.co https://424-iab-218.mktoutil.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://privacyportal.onetrust.com https://logx.optimizely.com https://ct.pinterest.com https://conversions-config.reddit.com https://pixel-config.reddit.com https://www.redditstatic.com *.ingest.us.sentry.io *.6sc.co https://api.sprig.com https://squareupstaging.com https://visitor-scoring-new.marketlinc.com https://api.chilipiper.com https://squareinc-sandbox.chilipiper.com https://squareinc.chilipiper.com https://www.workwithsquare.com wss://*.qualified.com https://*.qualified.com https://pw-renderer-production-c.squarecdn.com localhost:*; font-src 'self' https://cash-f.squarecdn.com https://square-fonts-production-f.squarecdn.com; img-src 'self' data: blob: https://ib.adnxs.com https://assets.ctfassets.net https://cdn.blisspointmedia.com https://campaign-hub-production-f.squarecdn.com *.contentsquare.net https://ad.doubleclick.net https://facebook.com https://www.facebook.com https://google.com https://www.google.com https://adservice.google.com https://googleads.g.doubleclick.net http://www.google-analytics.com https://www.google-analytics.com https://*.g.doubleclick.net https://www.googletagmanager.com http://images.ctfassets.net https://images.ctfassets.net https://px.ads.linkedin.com https://cdn.cookielaw.org https://pixel.pointmediatracker.com https://alb.reddit.com *.6sc.co https://api.squareup.com https://api.squareupstaging.com https://insight.adsrvr.org https://match.adsrvr.org https://*.qualified.com https://pw-renderer-production-c.squarecdn.com; manifest-src 'self' https://pw-renderer-production-c.squarecdn.com; media-src 'self' mediastream: https://assets.ctfassets.net https://js.driftt.com http://videos.ctfassets.net https://videos.ctfassets.net https://*.qualified.com; script-src 'self' *.contentsquare.net https://www.datadoghq-browser-agent.com https://js.driftt.com https://*.qualified.com https://connect.facebook.net https://www.googleadservices.com https://googleads.g.doubleclick.net http://www.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com https://campaign-hub-production-f.squarecdn.com https://lift-ai-js.marketlinc.com https://martech-development-c.squarecdn.com https://martech-production-c.squarecdn.com https://martech-staging-c.squarecdn.com http://munchkin.marketo.net https://munchkin.marketo.net https://cdn.cookielaw.org https://a8447815042.cdn-pci.optimizely.com https://s.pinimg.com https://ct.pinterest.com https://pw-renderer-production-c.squarecdn.com https://pw-renderer-staging-c.squarecdn.com https://pwt-production-c.squarecdn.com https://pwt-staging-c.squarecdn.com https://sales-bridge-production-c.squarecdn.com https://sales-bridge-staging-c.squarecdn.com https://squareinc-sandbox.chilipiper.com https://squareinc.chilipiper.com https://www.workwithsquare.com https://www.redditstatic.com *.6sc.co https://cdn.sprig.com https://xms-production-f.squarecdn.com https://www.youtube.com https://pw-renderer-production-c.squarecdn.com 'nonce-C5ProPip+23iZGukgcviKw=='; style-src 'self' https://square-fonts-production-f.squarecdn.com https://sales-bridge-production-c.squarecdn.com https://sales-bridge-staging-c.squarecdn.com 'unsafe-inline' https://*.qualified.com https://pw-renderer-production-c.squarecdn.com; frame-ancestors 'self' https://app.contentful.com; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubd9af00759e65a48ba7ee3ff1dfa4260b&dd-evp-origin=content-security-policy&ddsource=csp-report; report-to browser-intake-datadoghq 1
default-src 'self'         https://www.google.com/ 		https://www.facebook.com/ ;    script-src 'self' 'unsafe-inline' 		http://platform.twitter.com/ 	    https://smarticon.geotrust.com/;     child-src 'self'         https://www.google.com/;     style-src 'self' 'unsafe-inline';     font-src 'self' ;     block-all-mixed-content; 	img-src * data:; 	object-src 'self' ;    1
font-src *.fontawesome.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * secure.pay1.de *.klarna.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.google.com/ *.mondu.ai/ *.mondu.local localhost:*/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com connect.facebook.net blog-m2-magezon-com.disqus.com disqus.com *.klarna.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com https://www.magezon.com cdn.doofinder.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com maps.gstatic.com maps.googleapis.com cdn.rawgit.com/googlemaps/ cdn.jsdelivr.net/gh/googlemaps/ *.mondu.ai/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net shop.rimpler.de www.drrimpler.de bat.bing.com connect.facebook.net www.facebook.com www.google.de blog-m2-magezon-com.disqus.com c.disquscdn.com checkout.mondu.ai data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js cdn.doofinder.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.google.com/ maps.googleapis.com *.avada.io *.mondu.ai/widget.js *.mondu.local/widget.js localhost:*/dist/widget.js js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io connect.facebook.net blog-m2-magezon-com.disqus.com player.vimeo.com bat.bing.com *.cloudfront.net accounts.google.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.doofinder.com downloads.mailchimp.com *.fontawesome.com fonts.googleapis.com unsafe-inline assets.braintreegateway.com d.ratepay.com d.payla.io dr.payla.io checkout.mondu.ai 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.doofinder.com wss://*.doofinder.com maps.googleapis.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com payments.amazon.de d.ratepay.com jsctool.com eu.playground.klarnaevt.com connect.facebook.net stats.g.doubleclick.net googleads.g.doubleclick.net www.google.de blog-m2-magezon-com.disqus.com disqus.com eu.klarnaevt.com bat.bing.com *.execute-api.eu-central-1.amazonaws.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.drrimpler.de/csp-report/report/index; report-to report-endpoint; 1
font-src www.paypalobjects.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.sharethis.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com www.google.com *.sharethis.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.sharethis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ widget.freshworks.com m2epro.freshdesk.com *.sharethis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com widget.freshworks.com m2epro.freshdesk.com *.sharethis.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com widget.freshworks.com m2epro.freshdesk.com *.sharethis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://*.sharethis.com/; report-to report-endpoint; 1
base-uri 'self'; block-all-mixed-content; default-src 'self'; form-action 'self'; frame-ancestors 'self'; plugin-types 'none'; script-src 'self' 'report-sample' 'unsafe-inline'; style-src 'self' 'report-sample' 'unsafe-inline'; object-src 'none'; worker-src 'none'; report-uri https://prod.ap.batic.cudasvc.com/xenios/api/v1/error/report??paid=151&spid=18168&v=v1.0&payload=OmAZ91Za5TPbhRNpMd-KaiiZEyJJp5TKtczGBrr8Z4rm7cFEr3TC0OGsbvHkHSMCmdVqX6nGQtofD9ReOI3szbEf-uk_iFo9z6p6vBTgL7mii2XxFhggIVHpq4Dlhds7hByJmlYzHM9__XbsnTE6FchXwUGaRy6h3atYsJCq5IavrYTfeDeX_pUsh3KDfZ7R7JztoJ-BwfserI3337Tohg==; 1
default-src 'self'; script-src 'self' https://analytics.tiktok.com https://bat.bing.com https://cdn-3.convertexperiments.com https://cdn-4.convertexperiments.com https://cdn.cookielaw.org https://cdn.debugbear.com https://cdn.ometria.com https://script.hotjar.com https://code.jquery.com https://connect.facebook.net https://googleads.g.doubleclick.net https://p.teads.tv https://s.pinimg.com https://script.hotjar.com https://static.hotjar.com https://unpkg.com https://widget.trustpilot.com https://www.bing.com https://js.klarna.com https://payments.worldpay.com https://rum-static.pingdom.net https://www.awin1.com https://www.dwin1.com https://www.google.com https://www.googleadservices.com https://www.googletagmanager.com https://app.convert.com https://ct.pinterest.com https://no-cdn.convertexperiments.com https://r.bing.com https://apis.google.com https://js.playground.klarna.com https://translate-pa.googleapis.com https://translate.google.com https://translate.googleapis.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://*.ssl.ak.dynamic.tiles.virtualearth.net https://www.flyingflowers.co.uk https://www.interflora.ie https://www.interflora.co.uk https://www.paypal.com https://static.zdassets.com 'report-sample'; script-src-attr 'self'; script-src-elem 'self' https://cdn-4.convertexperiments.com https://www.paypal.com https://tr.snapchat.com https://atlas.microsoft.com https://static.zdassets.com https://www.googletagmanager.com https://www.dwin1.com https://widget.trustpilot.com https://unpkg.com https://static.hotjar.com https://script.hotjar.com https://s.pinimg.com https://rum-static.pingdom.net https://js.klarna.com https://googleads.g.doubleclick.net https://ct.pinterest.com https://connect.facebook.net https://cdn.ometria.com https://cdn.debugbear.com https://cdn.cookielaw.org https://bat.bing.com https://analytics.tiktok.com https://payments.worldpay.com; connect-src 'self' https://hpp.worldpay.com https://tr.snapchat.com https://tr6.snapchat.com https://*.metrics.convertexperiments.com https://ekr.zdassets.com https://ad.doubleclick.net https://analytics.tiktok.com https://ask.hotjar.io https://bat.bing.com https://cdn-3.convertexperiments.com https://cdn.cookielaw.org https://cdn.debugbear.com https://cm.teads.tv https://content.hotjar.io https://ct.pinterest.com https://data.debugbear.com https://googleads.g.doubleclick.net https://in.hotjar.com https://insights.algolia.io https://l.teads.tv https://logs.convertexperiments.com https://metrics.hotjar.io https://msn7pvpzhu-1.algolianet.com https://msn7pvpzhu-2.algolianet.com https://msn7pvpzhu-3.algolianet.com https://msn7pvpzhu-dsn.algolia.net https://stats.g.doubleclick.net https://surveystats.hotjar.io https://t.teads.tv https://trk.ometria.com https://unpkg.com https://vc.hotjar.io https://widget.trustpilot.com wss://ws.hotjar.com https://www.bing.com https://www.facebook.com https://media.interflora.co.uk https://apis.google.com https://cdn.ometria.com https://geolocation.onetrust.com https://payments.worldpay.com https://privacyportal-eu.onetrust.com https://rum-collector-2.pingdom.net https://rum-static.pingdom.net https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://uksouth-0.in.applicationinsights.azure.com https://region1.google-analytics.com https://pagead2.googlesyndication.com https://o4506853695881216.ingest.us.sentry.io https://*.playground.klarnaevt.com https://adservice.google.com https://cdn-4.convertexperiments.com https://connect.facebook.net https://js.klarna.com https://js.playground.klarna.com https://oc.klarnaevt.com https://eu.klarnaevt.com https://region1.analytics.google.com https://analytics.google.com https://api.edq.com https://bat.bing.net https://dev.virtualearth.net https://translate.googleapis.com https://translate-pa.googleapis.com https://www.google.co.uk https://na.klarnaevt.com https://atlas.microsoft.com https://na.klarnaevt.com https://www.interflora.ie https://www.flyingflowers.co.uk https://dc.services.visualstudio.com https://www.awin1.com https://www.googleadservices.com https://wepowerconnections.com https://fonts.gstatic.com https://google.com https://www.paypal.com https://analytics-ipv6.tiktokw.us https://www.sandbox.paypal.com https://cdn.media.amplience.net https://o24547.ingest.sentry.io; style-src 'self' 'unsafe-inline'; frame-src 'self' https://tr.snapchat.com https://*.fls.doubleclick.net https://match.adsrvr.org https://ct.pinterest.com https://hpp.worldpay.com https://js.klarna.com https://payments.worldpay.com https://td.doubleclick.net https://widget.trustpilot.com https://www.awin1.com https://www.facebook.com https://js.klarna.com https://pay.klarna.com https://www.paypal.com https://www.googletagmanager.com https://www.sandbox.paypal.com; img-src 'self' data: https://www.interflora.co.uk https://media.interflora.co.uk https://ad.doubleclick.net https://analytics.tiktok.com https://bat.bing.com https://cdn.cookielaw.org https://cm.teads.tv https://connect.facebook.net https://googleads.g.doubleclick.net https://l.teads.tv https://stats.g.doubleclick.net https://t.teads.tv https://trk.ometria.com https://www.awin1.com https://www.bing.com https://www.facebook.com https://logs.convertexperiments.com https://adservice.google.com https://media.flyingflowers.co.uk https://translate.google.com https://www.flyingflowers.co.uk https://www.googletagmanager.com https://t.ssl.ak.dynamic.tiles.virtualearth.net https://interflora.a.bigcontent.io https://ade.googlesyndication.com https://www.wepowerconnections.com https://eu.fareye.co https://cdn.media.amplience.net https://media.interflora.ie https://www.interflora.ie https://fonts.gstatic.com https://www.google.co.uk https://www.google.com https://pagead2.googlesyndication.com https://bat.bing.net https://analytics-ipv6.tiktokw.us https://google.com https://www.googleadservices.com; form-action 'self' https://payments.worldpay.com; worker-src 'self'; report-uri https://flyingflowers.report-uri.com/r/t/csp/reportOnly;  1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https://cdn.shopify.com; connect-src 'self' https://api.livesite.technology https://*.azure.com https://a.klaviyo.com https://static-tracking.klaviyocdn.com https://api.livesite.technology; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; report-uri /api/csp-report 1
font-src *.fontawesome.com fonts.googleapis.com 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com js.authorize.net jstest.authorize.net js.braintreegateway.com cdn-scripts.signifyd.com www.youtube.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src blob:; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com *.kxcdn.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.addthis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.cdninstagram.com *.kxcdn.com *.twitter.com *.google.com *.fbcdn.net blob: https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com *.fbcdn.net platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com *.cloudflareinsights.com s7.addthis.com *.avada.io *.shopify.com https://checkout.epayco.co/checkout.js https://cms.epayco.co js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com ekr.zdassets.com/ https://get.geojs.io *.avada.io https://apify-private.epayco.co https://secure.epayco.co https://cms.epayco.co/checkout/payment/session api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com analytics.google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; script-src 'self' https: www.gstatic.com https://challenges.cloudflare.com 'nonce-T8iRExtTtVaF280Mz7GSNQ=='; style-src 'self' https:; report-uri https://craftcourses.report-uri.com/r/d/csp/enforce 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com *.hotjar.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * api.bazaarvoice.com stg.api.bazaarvoice.com *.authorize.net 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.braintreegateway.com *.paypal.com google.com *.google.com widgets.sandbox.afterpay.com widgets.sandbox.clearpay.co.uk c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com sketchfab.com *.pinterest.com *.weltpixel.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com *.authorize.net *.wesupply.xyz https://wesupplylabs.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com p.typekit.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://static.afterpay.com https://site-assets.afterpay.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com obs.esnbranding.com arielbath.com atlasusa.net *.pinterest.com *.bing.com *.google.com *.google.com.vn *.bazaarvoice.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com display.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com network-a.bazaarvoice.com network-stg-a.bazaarvoice.com photos-uat-us.bazaarvoice.com img.youtube.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com amcglobal.sc.omtrdc.net commerce.adobe.net use.typekit.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.magento-ds.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.magento-datasolutions.com https://portal.sandbox.clearpay.co.uk https://portal.clearpay.co.uk https://portal.sandbox.afterpay.com https://portal.afterpay.com https://static.afterpay.com *.squarecdn.com https://hbiq.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ obs.esnbranding.com unpkg.com *.sketchfab.com *.zdassets.com *.smooch.io *.pinimg.com www.clickcease.com *.hotjar.com *.bing.com www.googleoptimize.com *.newrelic.com *.pinterest.com *.zendesk.com chimpstatic.com downloads.mailchimp.com *.list-manage.com apps.bazaarvoice.com apps.nexus.bazaarvoice.com apps-stg.nexus.bazaarvoice.com analytics-static.ugc.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com display.ugc.bazaarvoice.com api.bazaarvoice.com stg.api.bazaarvoice.com mpsnare.iesnare.com *.avada.io *.shopify.com *.authorize.net sandbox-assets.secure.checkout.visa.com *.cloudflare.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.magento-datasolutions.com *.magento-ds.com static.afterpay.com/ *.squarecdn.com unsafe-inline assets.braintreegateway.com downloads.mailchimp.com display.ugc.bazaarvoice.com *.fontawesome.com https://fonts.bunny.net tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.snplow.net commerce.adobedc.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com commerce.adobe.io *.sentry.io *.paypal.com google.com *.google.com *.magento-datasolutions.com *.magento-ds.com static.afterpay.com static.sandbox.afterpay.com *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com *.clearpay.co.uk api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.googleapis.com obs.esnbranding.com *.zdassets.com edge.adobedc.net *.smooch.io *.pinimg.com www.clickcease.com *.hotjar.com *.hotjar.io *.bing.com www.googleoptimize.com *.newrelic.com *.pinterest.com *.zendesk.com *.doubleclick.net wss://ws.hotjar.com *.nr-data.net regtech.sbs wss://api.smooch.io/faye api.bazaarvoice.com stg.api.bazaarvoice.com apps.bazaarvoice.com network.bazaarvoice.com network-stg.bazaarvoice.com https://get.geojs.io *.avada.io *.authorize.net https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';  script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleapis.com *.gstatic.com *.google.com;  style-src 'self' 'unsafe-inline' *.googleapis.com;  img-src 'self' data: *;  font-src 'self' data: *.gstatic.com;  frame-src 'self' *.youtube.com *.google.com *.cloudflare.com;  connect-src 'self' *.google.com *.googleapis.com; 1
default-src 'self'; script-src 'nonce-J/0x3uEo0kdhP/v8lCcbwQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
script-src 'self' blob: https://prod-bk-web.nz.rbi.tools/en/static/js/vendor.5dc447bb.js https://prod-bk-web.nz.rbi.tools/en/static/js/main.88fa6546.js https://prod-bk-web.nz.rbi.tools/en/static/js/runtime.03a86245.js https://*.mparticle.com https://cdn.cookielaw.org https://www.googletagmanager.com https://*.onetrust.com https://static.ads-twitter.com https://platform.twitter.com https://www.google-analytics.com https://connect.facebook.net https://secure.quantserve.com https://dynamic.criteo.com https://rules.quantcount.com https://cdn.branch.io https://app.link https://*.cdn4.forter.com https://dlthst9q2beh8.cloudfront.net https://sslwidget.criteo.com https://widget.eu.criteo.com https://pagead2.googlesyndication.com https://cdn.amplitude.com https://accounts.google.com https://appleid.cdn-apple.com https://analytics.tiktok.com https://c.amazon-adsystem.com https://js.adsrvr.org https://maps.googleapis.com https://googleads.g.doubleclick.net https://static.zdassets.com https://bat.bing.com https://cdn-st.adsmurai.com https://www.youtube.com https://player.vimeo.com https://prod-bk-web.nz.rbi.tools/en/static/js/main.4aeabb67.js https://prod-bk-web.nz.rbi.tools/en/static/js/runtime.54ae5545.js; object-src 'none'; base-uri 'none'; worker-src 'self' blob:; report-uri https://intl-csp-service.rbictg.com/report 1
object-src 'none';base-uri 'self';script-src 'nonce-p9dsIb9vzal64cLF5Lh1ig' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'self' 'unsafe-eval' 'wasm-unsafe-eval' 'report-sample' data: blob: 'nonce-7e51e2d343eaeebf28076ca8beca9f40-argus' 'strict-dynamic' 'unsafe-inline' https:; connect-src 'self' *.idouyinvod.com:* *.volcsiriusbd.com:* *.volcsirius.com:* *.tt.x.bsgslb.cn:* *.dy.zzcdnx.com:* *.qc.bsccdn.net:* *.smtcdns.com:* *.ugslb.com:* *.livehwc3.cn:* *.smtcdns.net:* *.bytefcdnrd.com:* *.ksyungslb.com:* *.ksyungslb2.com:* *.ourdvsss.com:* *.tbcache.com:* *.jomodns.com:* *.douyincdn.com:* *.ixigua.com:* *.bdxigualive.com:* *.pstatp.com:* *.douyinliving.com:* *.picovr.com:* *.huoshanlive.com:* *.ihuoshanlive.com:* *.volccdn.com:* *.bestv.com.cn:* *.bytefcdn.com:* *.douyinvod.com:* *.qnqcdn.net:* *.weilayun.com:* *.saxysec.com:* *.saxyit.com:* *.saxydc.com:* *.sjxysec.com:* *.sjxydc.com:* *.hiecheimaetu.com:* *.ppio.cloud:* *.vegslb.com:* *.xsj.wasu.tv:* *.zebracdn.com:* *.volctranscdn.com:* *.hizhecheng.com:* *.sealaly.net:* *.souajki.net:* *.souajki.com:* *.souajki.cn:* *.siomxity.cn:* *.siomxity.com:* *.siomxity.net:* *.uochly.cn:* *.smogfly.cloud:* *.smogfly.club:* *.iquaveizeeru.com:* *.ietheivaicai.com:* *.bytescm.com *.bytetos.com *.ibytedapm.com *.zijieapi.com *.snssdk.com *.bytedance.com *.bytedance.net *.pstatp.com *.bytednsdoc.com *.bytegoofy.com *.byted-static.com *.yhgfb-cn-static.com *.usergrowth.com.cn:* *.toutiao.com:* *.fqnovel.com:* *.google-analytics.com:* *.fqnovelstatic.com:*; frame-ancestors 'self'; upgrade-insecure-requests ; report-to slardar-endpoint; object-src 'self'; base-uri 'self'; frame-src 'self' bytedance:; 1
font-src fonts.googleapis.com fonts.gstatic.com *.googleapis.com *.gstatic.com data: *.fontawesome.com maxcdn.bootstrapcdn.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com *.reviews.io *.reviews.co.uk *.rsa3dsauth.co.uk 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com woodenfloorsuk.dev trade.woodenfloorsuk.dev 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.reviews.io *.reviews.co.uk *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com woodenfloorsuk.dev trade.woodenfloorsuk.dev 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.gstatic.com *.googleapis.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.google.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://redchamps.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.googleusercontent.com *.facebook.com api.ecologi.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net maps.googleapis.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.livechatinc.com *.livechat-api.com *.livechat-static.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.reviews.io *.reviews.co.uk *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.facebook.net widget.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.gstatic.com *.googleapis.com fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com *.cloudfront.net *.reviews.io *.reviews.co.uk data: *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com maps.googleapis.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com maps.gstatic.com fonts.googleapis.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com stats.g.doubleclick.net *.google.co.uk https://www.sandbox.paypal.com https://www.paypal.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.livechatinc.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.google-analytics.com *.analytics.google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' www.googletagmanager.com www.google-analytics.com www.google.com ssl.google-analytics.com use.typekit.net use.typekit.com player.vimeo.com vimeo.com i.vimeocdn.com s3.tradingview.com tradingview.com cdn.tradingview.com widget.tradingview.com fxpricing.com cdn.fxpricing.com cashbackforex.com; style-src 'self' 'unsafe-inline' use.typekit.net use.typekit.com player.vimeo.com vimeo.com i.vimeocdn.com s3.tradingview.com cdn.tradingview.com tradingview.com fxpricing.com cdn.fxpricing.com; font-src 'self' use.typekit.net use.typekit.com data: cdn.tradingview.com cdn.fxpricing.com i.vimeocdn.com; img-src 'self' data: www.google-analytics.com www.googletagmanager.com player.vimeo.com vimeo.com i.vimeocdn.com s3.tradingview.com cdn.tradingview.com tradingview.com fxpricing.com cdn.fxpricing.com cashbackforex.com; connect-src 'self' www.google-analytics.com www.googletagmanager.com player.vimeo.com vimeo.com s3.tradingview.com cdn.tradingview.com widget.tradingview.com fxpricing.com cdn.fxpricing.com cashbackforex.com; frame-src 'self' player.vimeo.com vimeo.com s3.tradingview.com tradingview.com fxpricing.com cashbackforex.com; object-src 'none'; base-uri 'self'; form-action 'self'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://cdn.riverty.design/ *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com uc8.tv 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com *.braintreegateway.com *.paypal.com google.com *.google.com uc8.tv https://documents.riverty.com/ js.mollie.com *.sendcloud.sc *.jsdelivr.net www.facebook.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://cdn.myafterpay.com/ uc8.tv https://cdn.riverty.design/ https://firebasestorage.googleapis.com https://www.mollie.com *.amazonaws.com blob: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com uc8.tv https://cdn.myafterpay.com/ https://cdn.bnpl.riverty.io/ *.avada.io *.shopify.com js.mollie.com *.sendcloud.sc *.jsdelivr.net maps.googleapis.com cdn.ampproject.org www.gstatic.com connect.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net *.sendcloud.sc *.jsdelivr.net www.gstatic.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com uc8.tv https://cdn.myafterpay.com/ https://documents.myafterpay.com/ https://documents.riverty.com/ https://www.afterpay.nl/ https://cdn.bnpl.riverty.io/ https://trace-api.newrelic.com/ https://distributions.crowdin.net/ https://api.crowdin.com/ https://get.geojs.io *.avada.io *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com places.googleapis.com cdn.ampproject.org www.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-vy07dLQd+vBWrDstGgZZzWfk/4Q=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
default-src *; script-src * 'unsafe-inline'; style-src * 'unsafe-inline'; img-src * data:; font-src * data:; report-to https://mercedesforum.report-uri.com/r/d/csp/enforce 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' data: *.monolithicpower.com *.monolithicpower.cn *.cloudflare.com *.googleapis.com *.hotjar.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self' data: *.monolithicpower.com *.monolithicpower.cn *.googleadservices.com *.cookiebot.com *.hotjar.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com 'self' data: *.monolithicpower.com *.monolithicpower.cn *.doubleclick.net *.cookiebot.com *.hotjar.com *.stripe.com vendor.ultralibrarian.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com *.monolithicpower.com *.monolithicpower.cn *.cloudflare.com *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.google.co.in *.google.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.baidu.com *.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp quickchart.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src *.assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com 'self' data: *.cloudflare.com *.stripe.com *.monolithicpower.com *.monolithicpower.cn *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.cookiebot.com *.gstatic.com *.doubleclick.net *.usercentrics.eu *.fontawesome.com *.hotjar.com *.baidu.com *.zdassets.com *.zendesk.com *.zopim.com *.marketo.net *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.ipstack.com *.youku.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' data: *.monolithicpower.com *.monolithicpower.cn *.cloudflare.com *.googleapis.com *.gstatic.com cdn.dnky.co *.dotdigital.com *.bootstrapcdn.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' data: *.monolithicpower.com *.monolithicpower.cn *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com 'self' data: *.monolithicpower.com *.monolithicpower.cn *.google-analytics.com *.doubleclick.net *.cloudflare.com *.hotjar.com wss://ws4.hotjar.com *.zdassets.com *.zendesk.com wss://widget-mediator.zopim.com *.cardinalcommerce.com *.braintree-api.com assets.braintreegateway.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.trackedweb.net api.comapi.com webchat.dotdigital.com 186-oug-983.mktoresp.com 224-vwe-648.mktoresp.com *.ipstack.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-JbDIZBJz8ztFskvsTdD9NA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.googleapis.com *.gstatic.com data: *.fontawesome.com fonts.gstatic.com 'self' data: *.yotpo.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com sandbox.przelewy24.pl secure.przelewy24.pl *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.google.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com landofcoder.com *.google.com/ pay.google.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com *.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.paypalobjects.com t.paypal.com www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io *.gstatic.com *.googleapis.com https://img.youtube.com https://www.magezon.com static.przelewy24.pl www.gstatic.com gstatic.com 'self' data: *.facebook.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src secure.authorize.net test.authorize.net www.paypalobjects.com js.braintreegateway.com www.paypal.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com s7.addthis.com landofcoder.com *.avada.io *.google.com sandbox.przelewy24.pl secure.przelewy24.pl pay.google.com *.cloudflare.com https://www.googletagmanager.com tagmanager.google.com analytics.google.com *.facebook.net unpkg.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com *.googleapis.com *.gstatic.com tagmanager.google.com *.yotpo.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.googleapis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com ekr.zdassets.com/ landofcoder.com https://get.geojs.io *.avada.io sandbox.przelewy24.pl secure.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com t.elasticsuite.io *.google-analytics.com analytics.google.com *.facebook.net *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://js-agent.newrelic.com https://widget.trustpilot.com https://track.adtraction.com https://policy.app.cookieinformation.com https://player.vimeo.com; style-src 'self' https: 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https: https://res.cloudinary.com https://d2bythind2nctn.cloudfront.net https://www.google-analytics.com https://www.googletagmanager.com; connect-src 'self' https: https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com https://bam.nr-data.net https://api.mapbox.com https://events.mapbox.com https://api.dataforsyningen.dk https://policy.app.cookieinformation.com; frame-src 'self' https://www.googletagmanager.com https://player.vimeo.com https://widget.trustpilot.com https://sites.google.com; media-src 'self' https: blob:; worker-src 'self' blob:; form-action 'self' https: 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-XNt/vMaGPvqqEp6vOSW5birUEfI=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com data: 'self' 'unsafe-inline'; form-action *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors https://api.clerk.io https://cdn.clerk.io 'self'; frame-src player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ bid.g.doubleclick.net *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.addthis.com js.mollie.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com *.vimeocdn.com i.ytimg.com *.youtube.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com https://images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.tiktok.com https://cdn.clerk.io imgsct.cookiebot.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://img.youtube.com www.tiktok.com https://www.mollie.com *.koongo.com *.hsforms.net *.hsforms.com ts.tradetracker.net www.magmodules.eu https://imgproxy.vendic.dev data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com https://maps.googleapis.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com https://cdn.jsdelivr.net *.tiktok.com https://api.clerk.io https://cdn.clerk.io consent.cookiebot.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com connect.tiktok.net js.mollie.com cdnjs.cloudflare.com/ajax/libs/highlight.js/9.3.0/highlight.min.js *.hsforms.net *.hsforms.com tm.tradetracker.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com https://api.clerk.io https://cdn.clerk.io https://static.klaviyo.com https://cdn.jsdelivr.net cdnjs.cloudflare.com/ajax/libs/highlight.js/9.3.0/styles/darkula.min.css 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.koongo.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.stripe.com *.google.com *.sagepay.com *.opayo.eu.elavon.com maxcdn.bootstrapcdn.com *.klarnacdn.net *.gstatic.com 'self' data: *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com fonts.gstatic.com *.cloudflare.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.stripe.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.arcot.com *.rsa3dsauth.co.uk *.rsa3dsauth.com *.boc.cn *.afs.com.bh *.enfuce.com *.cardcenter.ch *.nexigroup.com *.pluscard.de *.qiib.com.qa *.paylife.at *.redsys.es *.3dsecure.no *.modirum.com *.edb.com *.viseca.ch *.apata.io *.capitalone.com *.dnp-cdms.jp *.revolut.com *.bankserv.co.za *.swisscard.ch *.six-group.com *.marqeta.com *.cardinalcommerce.com *.wlp-acs.com *.imbank.com *.tsys.co.uk *.sia.eu *.garanti.com.tr *.commerzbank.de *.cmbchina.com *.alahli.com *.mycardsecure.com *.gps.com.bh *.citibank.com *.wibmo.com *.dkb.de *.monzo.com *.alinma.com *.nccc.com.tw *.starlingbank.com *.danskebank.com *.pekao24.pl *.lloydsbank.co.uk/ *.lloydsbank.com/ *.lloydsbankinggroup.com/ *.channel-cards-auth-api.lloydsbankinggroup.com/ *.sparebank1.no *.rabobank.nl *.s-id-check-sparkassen.de *.sparkassen-kreditkarten.de *.mbank.pl *.secure2gw.ro *.btrl.ro *.cafis-paynet.jp *.borica.bg *.fibank.bg *.cic.fr *.zaba.hr *.citibank.co.in *.centrum24.pl *.bankmillennium.pl *.icps.mu *.egolomt.mn *.lcl.fr *.ctbcbank.com *.qiwi.com *.postfinance.ch *.citadele.lv *.kib.com.kw *.cathaybk.com.tw *.pkobp.pl *.acdcproc.com *.abanca.com *.n26.com *.klikbca.com *.psa.at *.sumup.com *.eglobal.com.mx *.pl.ing.com *.qnb.com *.rpc-raiffeisen.com *.sebkort.com *.ocbc.com *.tapngo.com.hk *.stcpay.com.sa *.creditmutuel.fr *.luottokunta.fi *.swedbank.se *.unibank.am *.estcard.ee *.hyundaicard.com *.privatbank.ua *.fssnet.co.in *.kbcard.com *.luminorgroup.com *.mashreq.com *.mercurypaymentservices.it *.moneta.cz *.sensebank.com.ua *.sibs.pt *.stripeauthentications.com *.dskbank.bg *.otpbank.hu *.techcombank.com.vn *.touch.tech *.asseco-see.hr *.3dsecure-csas.cz *.cyris.com *.secureacs.com *.acb.com.vn *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.stripe.com *.google.com *.sagepay.com *.opayo.eu.elavon.com *.arcot.com *.rsa3dsauth.co.uk *.rsa3dsauth.com *.boc.cn *.afs.com.bh *.enfuce.com *.cardcenter.ch *.pluscard.de *.qiib.com.qa *.nexigroup.com *.paylife.at *.redsys.es *.3dsecure.no *.modirum.com *.edb.com *.viseca.ch *.apata.io *.capitalone.com *.dnp-cdms.jp *.revolut.com *.bankserv.co.za *.swisscard.ch *.six-group.com *.marqeta.com *.cardinalcommerce.com *.wlp-acs.com *.imbank.com *.tsys.co.uk *.sia.eu *.garanti.com.tr *.commerzbank.de *.cmbchina.com *.alahli.com *.mycardsecure.com *.gps.com.bh *.citibank.com *.wibmo.com *.dkb.de *.monzo.com *.alinma.com *.nccc.com.tw *.starlingbank.com *.danskebank.com *.pekao24.pl *.lloydsbank.co.uk/ *.lloydsbank.com/ *.lloydsbankinggroup.com/ *.channel-cards-auth-api.lloydsbankinggroup.com/ *.sparebank1.no *.rabobank.nl *.s-id-check-sparkassen.de *.sparkassen-kreditkarten.de *.mbank.pl *.secure2gw.ro *.btrl.ro *.cafis-paynet.jp *.borica.bg *.fibank.bg *.cic.fr *.zaba.hr *.citibank.co.in *.centrum24.pl *.bankmillennium.pl *.icps.mu *.egolomt.mn *.lcl.fr *.ctbcbank.com *.qiwi.com *.postfinance.ch *.citadele.lv *.kib.com.kw *.cathaybk.com.tw *.pkobp.pl *.acdcproc.com *.abanca.com *.n26.com *.klikbca.com *.psa.at *.sumup.com *.eglobal.com.mx *.pl.ing.com *.qnb.com *.rpc-raiffeisen.com *.sebkort.com *.ocbc.com *.tapngo.com.hk *.stcpay.com.sa *.creditmutuel.fr *.luottokunta.fi *.swedbank.se *.unibank.am *.estcard.ee *.hyundaicard.com *.privatbank.ua *.fssnet.co.in *.kbcard.com *.luminorgroup.com *.mashreq.com *.mercurypaymentservices.it *.moneta.cz *.sensebank.com.ua *.sibs.pt *.stripeauthentications.com *.dskbank.bg *.otpbank.hu *.techcombank.com.vn *.touch.tech *.asseco-see.hr *.3dsecure-csas.cz *.cyris.com *.secureacs.com *.acb.com.vn *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.paypal.com * klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.trustpilot.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.stripe.com *.google.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klarna.com *.klarnaevt.com *.klarnacdn.net https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://redchamps.com *.hsforms.net *.hsforms.com 'self' data: *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com *.bigcommerce.com *.doubleclick.net *.esellerpro.com *.facebook.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bj www.google.bs www.google.by www.google.ca www.google.cd www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mn www.google.mu www.google.mv www.google.mw www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.st www.google.tg www.google.tm www.google.tn www.google.tt www.google.ws google.com *.googlesyndication.com *.i-sells.co.uk *.trustpilot.com *.wiska.com *.wiska.co.uk *.ytimg.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.stripe.com *.google.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.sagepay.com *.opayo.eu.elavon.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.link.com *.trustpilot.com *.googletagmanager.com tagmanager.google.com *.buttonizer.io *.doubleclick.net *.facebook.net *.formilla.com *.googlesyndication.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com *.stripe.com *.google.com downloads.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com maxcdn.bootstrapcdn.com *.klarnacdn.net unsafe-inline assets.braintreegateway.com *.googleapis.com *.gstatic.com *.stripe.network *.stripecdn.com *.trustpilot.com tagmanager.google.com fonts.google.com *.cloudflare.com *.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src *.youtube.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.stripe.com *.google.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com api.addressy.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com google.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com klarna.com *.link.com *.analytics.google.com *.googletagmanager.com *.buttonizer.io *.doubleclick.net *.facebook.com *.formilla.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bj www.google.bs www.google.by www.google.ca www.google.cd www.google.ch www.google.ci www.google.cl www.google.co.ao www.google.co.bw www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gg www.google.gr www.google.hn www.google.hr www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mk www.google.mn www.google.mu www.google.mv www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.so www.google.tn www.google.tt *.googlesyndication.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri *.google.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; report-uri https://fe01bf3e-e83e-4500-af8b-4766d0d3c786.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=DcGODkq1mCfyEQB_Jhs8ocCs_4brD0brqAq.BgjQlk8-1789288740.7420323-1.0.1.1-bdgKTEsHaFt2aoUTqwTYAnTMP5uwr5rBgtcAIDF2REU2A3LYgWTAJ3J6qwfg6TZov9ew57YTFwpKLjvFE5Vzx1DsJAeWBfsU0ORwbgAZBCw0YZGwxwmoedqIM2_yXKnO_2lWSHBcUP2RUaLMO_O_JNWGyH41bUeHoq3FfepkBAOsmwm.e4woUSOymB_DodGqgFYcDBQlcjf7qZXNI10ePw; report-to cf-gohrtznmetdsvrju 1
object-src 'none';base-uri 'self';script-src 'nonce-JF6bTc00L9FHpahDrZKvVQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-AQCM7azp0-5np3wSMqpB_w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com fonts.gstatic.com *.sagepay.com *.opayo.eu.elavon.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com *.arcot.com *.rsa3dsauth.co.uk *.rsa3dsauth.com *.boc.cn *.afs.com.bh *.enfuce.com *.cardcenter.ch *.nexigroup.com *.pluscard.de *.qiib.com.qa *.paylife.at *.redsys.es *.3dsecure.no *.modirum.com *.edb.com *.viseca.ch *.apata.io *.capitalone.com *.dnp-cdms.jp *.revolut.com *.bankserv.co.za *.swisscard.ch *.six-group.com *.marqeta.com *.cardinalcommerce.com *.wlp-acs.com *.imbank.com *.tsys.co.uk *.sia.eu *.garanti.com.tr *.commerzbank.de *.cmbchina.com *.alahli.com *.mycardsecure.com *.gps.com.bh *.citibank.com *.wibmo.com *.dkb.de *.monzo.com *.alinma.com *.nccc.com.tw *.starlingbank.com *.danskebank.com *.pekao24.pl *.lloydsbank.co.uk/ *.lloydsbank.com/ *.lloydsbankinggroup.com/ *.channel-cards-auth-api.lloydsbankinggroup.com/ *.sparebank1.no *.rabobank.nl *.s-id-check-sparkassen.de *.sparkassen-kreditkarten.de *.mbank.pl *.secure2gw.ro *.btrl.ro *.cafis-paynet.jp *.borica.bg *.fibank.bg *.cic.fr *.zaba.hr *.citibank.co.in *.centrum24.pl *.bankmillennium.pl *.icps.mu *.egolomt.mn *.lcl.fr *.ctbcbank.com *.qiwi.com *.postfinance.ch *.citadele.lv *.kib.com.kw *.cathaybk.com.tw *.pkobp.pl *.acdcproc.com *.abanca.com *.n26.com *.klikbca.com *.psa.at *.sumup.com *.eglobal.com.mx *.pl.ing.com *.qnb.com *.rpc-raiffeisen.com *.sebkort.com *.ocbc.com *.tapngo.com.hk *.stcpay.com.sa *.creditmutuel.fr *.luottokunta.fi *.swedbank.se *.unibank.am *.estcard.ee *.hyundaicard.com *.privatbank.ua *.fssnet.co.in *.kbcard.com *.luminorgroup.com *.mashreq.com *.mercurypaymentservices.it *.moneta.cz *.sensebank.com.ua *.sibs.pt *.stripeauthentications.com *.dskbank.bg *.otpbank.hu *.techcombank.com.vn *.touch.tech *.asseco-see.hr *.3dsecure-csas.cz *.cyris.com *.secureacs.com *.acb.com.vn *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.arcot.com *.rsa3dsauth.co.uk *.rsa3dsauth.com *.boc.cn *.afs.com.bh *.enfuce.com *.cardcenter.ch *.pluscard.de *.qiib.com.qa *.nexigroup.com *.paylife.at *.redsys.es *.3dsecure.no *.modirum.com *.edb.com *.viseca.ch *.apata.io *.capitalone.com *.dnp-cdms.jp *.revolut.com *.bankserv.co.za *.swisscard.ch *.six-group.com *.marqeta.com *.cardinalcommerce.com *.wlp-acs.com *.imbank.com *.tsys.co.uk *.sia.eu *.garanti.com.tr *.commerzbank.de *.cmbchina.com *.alahli.com *.mycardsecure.com *.gps.com.bh *.citibank.com *.wibmo.com *.dkb.de *.monzo.com *.alinma.com *.nccc.com.tw *.starlingbank.com *.danskebank.com *.pekao24.pl *.lloydsbank.co.uk/ *.lloydsbank.com/ *.lloydsbankinggroup.com/ *.channel-cards-auth-api.lloydsbankinggroup.com/ *.sparebank1.no *.rabobank.nl *.s-id-check-sparkassen.de *.sparkassen-kreditkarten.de *.mbank.pl *.secure2gw.ro *.btrl.ro *.cafis-paynet.jp *.borica.bg *.fibank.bg *.cic.fr *.zaba.hr *.citibank.co.in *.centrum24.pl *.bankmillennium.pl *.icps.mu *.egolomt.mn *.lcl.fr *.ctbcbank.com *.qiwi.com *.postfinance.ch *.citadele.lv *.kib.com.kw *.cathaybk.com.tw *.pkobp.pl *.acdcproc.com *.abanca.com *.n26.com *.klikbca.com *.psa.at *.sumup.com *.eglobal.com.mx *.pl.ing.com *.qnb.com *.rpc-raiffeisen.com *.sebkort.com *.ocbc.com *.tapngo.com.hk *.stcpay.com.sa *.creditmutuel.fr *.luottokunta.fi *.swedbank.se *.unibank.am *.estcard.ee *.hyundaicard.com *.privatbank.ua *.fssnet.co.in *.kbcard.com *.luminorgroup.com *.mashreq.com *.mercurypaymentservices.it *.moneta.cz *.sensebank.com.ua *.sibs.pt *.stripeauthentications.com *.dskbank.bg *.otpbank.hu *.techcombank.com.vn *.touch.tech *.asseco-see.hr *.3dsecure-csas.cz *.cyris.com *.secureacs.com *.acb.com.vn account.fetchify.com *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.paypal.com * *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com *.stripe.network *.google.com ebizmarts-website.s3.amazonaws.com brippo.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.google.com/ chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.trustpilot.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com fonts.googleapis.com downloads.mailchimp.com *.sagepay.com *.opayo.eu.elavon.com cc-cdn.com *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com fonts.googleapis.com fonts.gstatic.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-ci-p537Z7zAGEdmSqGaiZQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=mTkjx1DX7vraNBpqIrsCc2Gn8GnDUfd9a26efsH7EnE-1789262032.6267796-1.0.1.1-2Af3ZKy2L7GF.Wd__vw_g6xaIZHQb4CUvKNEFCJJYpQ4cyN0waevKhD91lmroT_A40.XRclE0bbQKmdtkE20RYhfDvoETUXd74YHxIp8R5PXoeRU33ZRc.CezYMAmunNmu9ia5HGL3Vdsbd8MA7XiVAUDy9PENAFmBjFobJjIBvfmpujYe04NwlVNYtRoPnH; report-to cf-csp-endpoint 1
default-src 'self'; script-src 'self' 'wasm-unsafe-eval' https://js.stripe.com https://talkdeskchatsdk.talkdeskapp.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.origin.one wss://*.origin.one https://*.ingest.us.sentry.io https://js.stripe.com https://api.stripe.com https://cdn-global.configcat.com https://cognito-idp.us-east-1.amazonaws.com https://cognito-identity.us-east-1.amazonaws.com https://maps.geo.us-east-1.amazonaws.com https://flagcdn.com https://*.talkdeskapp.com wss://*.talkdeskapp.com https://fonts.googleapis.com https://fonts.gstatic.com https://oit-prod-xb2q9386-uploads.s3.us-east-1.amazonaws.com data: blob:; frame-src 'self' blob: https://js.stripe.com https://hooks.stripe.com https://m.stripe.network https://*.calendly.com https://talkdeskchatsdk.talkdeskapp.com https://www.flipsnack.com; worker-src 'self' blob:; manifest-src 'self' https://*.origin.one; frame-ancestors 'none'; form-action 'self'; base-uri 'self'; object-src 'none'; report-uri https://o4507821959938048.ingest.us.sentry.io/api/4507827481804800/security/?sentry_key=3e6599e60a283b05fa42476acf2067db&sentry_environment=prod 1
object-src 'none';base-uri 'self';script-src 'nonce-2scauStCnI47-KjOM3jyRw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
connect-src 'self' https://payments.salesforce.com/ https://www.paypal.com https://*.123formbuilder.com https://1millioncups.my.salesforce-scrt.com https://1millioncups--uat.livepreview.salesforce-communities.com https://checkoutshopper-test.adyen.com/ api.salesforce.com wss://*.slack.com https://*.api.salesforce.com https://1millioncups--c.visualforce.com https://demo.arcade.software https://checkoutshopper-live.adyen.com/ https://www.youtube-nocookie.com https://www.google.com https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/ https://fonts.googleapis.com/css2 https://o11y.sfproxy-core2.sfdc-lywfpd.svc.sfdcfc.net/ui-telemetry *.amazonaws.com https://app.arcade.software wss://*.slack-gov-dev.com wss://*.api.salesforce.com https://www.google.com/recaptcha/ https://*.vimeo.com https://www.sandbox.paypal.com https://js.stripe.com/ https://beta22.1millioncups.com wss://api.salesforce.com https://salesforce.123formbuilder.com https://www.googletagmanager.com https://storage101.iad3.clouddrive.com https://www.google-analytics.com *.salesforce.com https://cdn.cbweb.code-builder.platform.salesforce.com *.api.salesforce.com wss://*.slack-gov.com; report-to sfdc-csp-ep; report-uri https://1millioncups.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D4W000006kWdP&networkId=0DM4W0000000Z5o&type=communities 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com data: *.dhlparcel.nl *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com identity.bluebirdday.io accounts.google.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com *.cookiebot.com *.facebook.com *.doubleclick.net *.addthis.com *.criteo.com *.kiyoh.com *.robinhq.com *.pinterest.com *.googlesyndication.com maps.googleapis.com chart.googleapis.com *.weltpixel.com *.multisafepay.com https://pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com *.sharethis.com dyka.nl *.dyka.nl *.dyka.bluebirdday.io *.bluebirdday.io *.dhlparcel.nl maps.gstatic.com *.googleapis.com *.ggpht *.google.com *.google.nl *.googletagmanager.com *.googlesyndication.com *.trustedshops.com *.facebook.com *.pinterest.com *.gravatar.com *.percolate-3.hipex.cloud *.bing.com *.windows.net robincontentdesktop.blob.core.windows.net *.doubleclick.net *.clarity.ms *.linkedin.com *.sendtric.com *.cloudfront.net cookiebot.com *.cookiebot.com *.speedcurve.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://firebasestorage.googleapis.com *.multisafepay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sharethis.com dyka.nl *.dyka.nl *.dyka.bluebirdday.io *.bluebirdday.io *.dhlparcel.nl maps.googleapis.com *.google.nl *.gstatic.com *.googleoptimize.com *.googleadservices.com *.pushbird.com chimpstatic.com *.cookiebot.com *.facebook.net *.pinimg.com *.addthisedge.com *.addthis.com *.criteo.net *.criteo.com *.bing.com unpkg.com *.klaviyo.com *.google-analytics.com *.clarity.ms *.robinhq.com robincontentdesktop.blob.core.windows.net surfly.com *.surfly.com *.msecnd.net *.vo.msecnd.net *.googlesyndication.com *.cookie-script.com *.tiktok.com *.licdn.com *.livechatinc.com *.hotjar.com *.hotjar.io *.speedcurve.com chart.googleapis.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.avada.io *.shopify.com *.multisafepay.com https://pay.google.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com *.google.com *.klaviyo.com *.dhlparcel.nl downloads.mailchimp.com tagmanager.google.com *.fontawesome.com *.googleapis.com *.gstatic.com https://fonts.bunny.net *.multisafepay.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src maps.googleapis.com chart.googleapis.com 'self' 'unsafe-inline'; media-src *.adobe.com *.vimeo.com *.akamaized.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com *.dhlparcel.nl dyka.nl *.dyka.nl *.dyka.bluebirdday.io *.bluebirdday.io *.klaviyo.com *.doubleclick.net *.googleapis.com *.pinterest.com *.bing.com *.clarity.ms *.speedcurve.com surfly.com *.surfly.com *.visualstudio.com *.cookiebot.com *.tiktok.com *.linkedin.com *.googlesyndication.com *.cookie-script.com *.hotjar.com wss://ws.hotjar.com *.hotjar.io wss://ws.hotjar.io maps.googleapis.com chart.googleapis.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com analytics.google.com https://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io *.multisafepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://*.adtrafficquality.google https://fundingchoicesmessages.google.com https://www.google.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://*.sslip.io https://*.supabase.co https://pagead2.googlesyndication.com https://*.adtrafficquality.google https://fundingchoicesmessages.google.com; frame-src https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://www.google.com https://fundingchoicesmessages.google.com https://*.adtrafficquality.google; frame-ancestors 'self' 1
upgrade-insecure-requests; frame-src 'self' https://www.google.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; font-src 'self' fonts.googleapis.com fonts.gstatic.com data:; connect-src 'self' https://*.google.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.gcrocks.io; script-src 'self' 'unsafe-eval' 'unsafe-inline' static.cloudflareinsights.com https://*.google-analytics.com https://*.googletagmanager.com https://maps.google.com https://maps.googleapis.com https://www.google.com; img-src 'self' https://maps.googleapis.com https://*.google-analytics.com https://*.googletagmanager.com https://maps.gstatic.com https://csi.gstatic.com https://rawgit.com https://www.gravatar.com https://www.globalconexus.com data:; manifest-src 'self'; media-src 'self'; base-uri 'self'; default-src 'self'; frame-ancestors 'self'; form-action 'self'; object-src 'self'; child-src 'self'; report-to csp-endpoint; report-uri https://sentry.gcrocks.io/api/2/security/?sentry_key=8524e680cb46705924f20b2e8da47329 1
default-src 'self' syndication.twitter.com; script-src js.pustertal.org 'unsafe-inline' 'unsafe-eval' player.peer.tv stats.peer.biz platform.twitter.com apis.google.com; connect-src 'self' stats.peer.biz; img-src 'self' data: images2.pustertal.org css.pustertal.org  www.hotel-guide.it player.peer.tv stats.peer.biz carto.peer.biz www.gravatar.com syndication.twitter.com api.trustyou.com; style-src 'self' 'unsafe-inline' css.pustertal.org js.pustertal.org; font-src css.pustertal.org; frame-src 'self' player.peer.tv www.facebook.com platform.twitter.com apis.google.com accounts.google.com www.youtube.com; child-src 'self' player.peer.tv www.facebook.com platform.twitter.com apis.google.com accounts.google.com www.youtube.com; report-uri https://csp-report.peer.biz/reportOnly/index 1
default-src 'self'; connect-src 'self' https://*.google-analytics.com https://*.boltdns.net https://*.siteimprove.com https://www.google.com; font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' https://info.mumc.nl https://www.google.com https://*.youtube.com https://*.vimeo.com https://heritage.mumc.nl https://www.googletagmanager.com; img-src 'self' https://*.boltdns.net https://*.ytimg.com data:; media-src 'self' https://*.boltdns.net blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.texthelp.com https://*.browsealoud.com https://vjs.zencdn.net https://cdn.rawgit.com https://www.googletagmanager.com https://www.google-analytics.com https://apis.google.com https://www.google.com https://www.gstatic.com blob: https://cdn.jsdelivr.net https://cdn.siteimprove.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri https://sjgweert.nl/report-uri/reportOnly; block-all-mixed-content 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com fonts.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com/ js.mollie.com *.sociablekit.com *.facebook.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://www.magezon.com https://www.mollie.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com *.facebook.com *.facebook.net *.sociablekit.com *.paypalobjects.com www.google.be *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google.com/ js.mollie.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com 'unsafe-inline' connect.facebook.net *.facebook.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com use.typekit.net p.typekit.net *.typekit.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com maps.googleapis.com payment.direct.worldline-solutions.com payment.preprod.direct.worldline-solutions.com payment.anzworldline-solutions.com.au payment.preprod.anzworldline-solutions.com.au payment.payone.com payment.preprod.payone.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'nonce-m6ettxbM9AdE1xknqqtW1A' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/static-on-bigtable; base-uri 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://challenges.cloudflare.com https://live.meetcody.ai; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; frame-src https://www.googletagmanager.com https://challenges.cloudflare.com https://player.vimeo.com https://live.meetcody.ai; connect-src 'self' https://www.googletagmanager.com https://live.meetcody.ai; frame-ancestors 'none'; base-uri 'self'; object-src 'none' 1
font-src https://widgets.trustedshops.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com https://static.dhlecommerce.nl https://fonts.gstatic.com fonts.gstatic.com fonts.googleapis.com fonts.bunny.net cdnjs.cloudflare.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://*.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com https://*.dpdconnect.nl *.newrelic.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com *.multisafepay.com https://pay.google.com *.allspares.fr *.allspares.nl *.allspares.de *.dunstabzugshaube-filter.de *.filtricasafacile.it *.filtraciondomestica.es *.filtre-de-hotte.fr *.afzuigkapfilterwinkel.nl *.waterfilterwinkel.com *.wasserfilterspezialist.de *.filtrocasa.pt *.husfilter.dk *.filterspezialist.at *.paypal.com *.paypalobjects.com *.trengo.eu 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://widgets.trustedshops.com https://widgets-qa.trustedshops.com 'self' data: https://*.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com https://maps.googleapis.com https://maps.gstatic.com *.trackedlink.net https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://www.mollie.com *.openstreetmap.org maps.googleapis.com maps.gstatic.com *.multisafepay.com https://api.mapbox.com moogento.com *.moogento.com *.paypal.com *.paypalobjects.com *.allspares.fr *.allspares.nl *.allspares.de *.dunstabzugshaube-filter.de *.filtricasafacile.it *.filtraciondomestica.es *.filtre-de-hotte.fr *.afzuigkapfilterwinkel.nl *.waterfilterwinkel.com *.wasserfilterspezialist.de *.filtrocasa.pt *.husfilter.dk *.filterspezialist.at www.google.nl www.google.de www.google.fr www.google.es www.google.it www.google.dk www.google.pt www.google.at www.google.ch track-eu1.hubspot.com app.usercentrics.eu *.kk-resources.com tile.openstreetmap.org a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org *.trackedweb.net *.hsforms.net *.hsforms.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com https://static.dhlecommerce.nl https://maps.googleapis.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com https://*.dpdconnect.nl https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com pay.google.com applepay.cdn-apple.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.multisafepay.com https://pay.google.com l.moogento.com webchat.digitalcx.com static.widget.trengo.eu *.trengo.eu *.allspares.fr *.allspares.nl *.allspares.de *.dunstabzugshaube-filter.de *.filtricasafacile.it *.filtraciondomestica.es *.filtre-de-hotte.fr *.afzuigkapfilterwinkel.nl *.waterfilterwinkel.com *.wasserfilterspezialist.de *.filtrocasa.pt *.husfilter.dk *.filterspezialist.at js-eu1.hs-scripts.com js-eu1.hs-analytics.net js-eu1.hs-banner.com js.usemessages.com js-eu1.hubspot.com app.usercentrics.eu api.usercentrics.eu privacy-proxy.usercentrics.eu sec.webeyez.com script.hotjar.com static.hotjar.com *.kk-resources.com ct.beslist.nl *.beslist.nl static.cloudflareinsights.com *.clckptrl.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com https://static.dhlecommerce.nl https://maps.googleapis.com https://fonts.googleapis.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com https://hcaptcha.com https://*.hcaptcha.com fonts.googleapis.com *.multisafepay.com fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.widget.trengo.eu *.trengo.eu 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.google-analytics.com *.facebook.com *.facebook.net https://*.google.com *.doubleclick.net *.googlesyndication.com https://api-gw.dhlparcel.nl https://static.dhlecommerce.nl https://maps.googleapis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com maps.googleapis.com *.multisafepay.com autocomplete2.postdirekt.de ws.hotjar.com wss://ws.hotjar.com wss://*.hotjar.com content.hotjar.io static.hotjar.com script.hotjar.com insights.hotjar.com vc.hotjar.io surveys.hotjar.com ct.beslist.nl *.beslist.nl *.a.run.app *.conversionsapigateway.com *.paypal.com *.paypalobjects.com *.ddlnk.net webchat.digitalcx.com *.digitalcx.com *.trengo.eu *.allspares.fr *.allspares.nl *.allspares.de *.dunstabzugshaube-filter.de *.filtricasafacile.it *.filtraciondomestica.es *.filtre-de-hotte.fr *.afzuigkapfilterwinkel.nl *.waterfilterwinkel.com *.wasserfilterspezialist.de *.filtrocasa.pt *.husfilter.dk *.filterspezialist.at track-eu1.hubspot.com forms-eu1.hsforms.com api.hubapi.com api-eu1.hubapi.com cta-eu1.hubspot.com perf-eu1.hubspot.com sec.webeyez.com *.webeyez.com app.usercentrics.eu api.usercentrics.eu privacy-proxy.usercentrics.eu consent-api.service.consent.usercentrics.eu *.kk-resources.com tile.openstreetmap.org a.tile.openstreetmap.org b.tile.openstreetmap.org c.tile.openstreetmap.org *.clckptrl.com *.google.de *.google.nl *.google.es *.google.it *.google.pt *.google.dk *.google.at *.google.be *.google.co.uk t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://c6d02f62-c45e-4c56-876c-2102faf3fd5c.sansec.watch/; report-to report-endpoint; 1
font-src fonts.googleapis.com fonts.gstatic.com *.googleapis.com *.gstatic.com data: maxcdn.bootstrapcdn.com use.typekit.net *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com https://*.facebook.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com https://*.magneticnaildesign.com https://*.google.nl https://firebasestorage.googleapis.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://www.gstatic.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://storage.googleapis.com *.googletagmanager.com https://instant.page https://*.amazonaws.com *.avada.io *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms *.klaviyo.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com p.typekit.net https://*.myfonts.net *.fontawesome.com https://fonts.bunny.net *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com wss://mnd-livestream-test.epaflex.nl wss://mnd-livestream-prod.epaflex.nl https://storage.googleapis.com *.googletagmanager.com https://www.gstatic.com https://www.google.com https://google.com https://*.googlesyndication.com https://get.geojs.io *.avada.io *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-hashes' 'sha256-MhtPZXr7+LpJUY5qtMutB+qWfQtMaPccfe7QXtCcEYc=' 'sha256-e9FDhn45ugpUXrSXuMOvvK613zvDsQIebi2ir0mwrKc=' 'sha256-tLl8IcJnFaJUG8+PEGhf/CVdyaTbs+a8LTdQBuwJ3vo=' https://www.googletagmanager.com https://*.clarity.ms https://cdn.jsdelivr.net https://app.optibase.io https://dev.visualwebsiteoptimizer.com https://js.hsforms.net https://tools.refokus.com https://cdn.plyr.io https://*.iubenda.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdn.plyr.io; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https:; frame-src https://cdn.embedly.com https://meetings.hubspot.com; connect-src 'self' https://dev.visualwebsiteoptimizer.com https://js.hsforms.net https://api.hsforms.com https://www.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://stats.g.doubleclick.net https://*.iubenda.com https://*.clarity.ms; frame-ancestors 'none'; base-uri 'self'; form-action 'self' https://api.hsforms.com 1
default-src 'self'; script-src 'nonce-9ap3LLkq6CS2Wp0fRZEw1A==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://plausible.io https://*.sentry.io https://*.ingest.sentry.io https://*.ingest.de.sentry.io https://js.stripe.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://images.miet24.de https://cdn.miet24.de https://images.unsplash.com https://*.tile.openstreetmap.org https://*.public.blob.vercel-storage.com https://*.blob.vercel-storage.com; font-src 'self' data:; connect-src 'self' https://plausible.io https://*.sentry.io https://*.ingest.sentry.io https://*.ingest.de.sentry.io https://nominatim.openstreetmap.org https://api.stripe.com; frame-src 'self' https://payments.miet24.de https://js.stripe.com https://hooks.stripe.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://payments.miet24.de; frame-ancestors 'none'; upgrade-insecure-requests 1
font-src *.fontawesome.com *.gstatic.com http://*.gstatic.com data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ https://*.ditonlinebetalingssystem.dk http://*.ditonlinebetalingssystem.dk 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://at19.net https://bdt9.net https://ds1.nl https://dt51.net https://dt61.net https://fr135.net https://glp8.net https://jdt8.net https://jf79.net https://hs82.net https://lt45.net https://mt74.net https://ndt5.net https://rkn3.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://images.unsplash.com *.greendozer.com http://*.greendozer.com blob: *.pricerunner.dk http://*.pricerunner.dk *.europa.eu http://*.europa.eu *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ polyfill.io chimpstatic.com downloads.mailchimp.com *.list-manage.com cdn.jsdelivr.net *.doubleclick.net unpkg.com *.greendozer.com http://*.greendozer.com *.zdassets.com http://*.zdassets.com *.zendesk.com http://*.zendesk.com https://*.ditonlinebetalingssystem.dk http://*.ditonlinebetalingssystem.dk *.novicell.dev http://*.novicell.dev *.cloudflare.com tagmanager.googleusercontent.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com *.fontawesome.com *.greendozer.com http://*.greendozer.com https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.greendozer.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io *.greendozer.com http://*.greendozer.com *.aws.dk wss://widget-mediator.zopim.com https://ekr.zdassets.com https://greendozer.zendesk.com *.google.com *.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://cuatro.sim-cdn.nl; img-src * data: blob:; style-src * 'unsafe-inline' blob: https://fonts.bunny.net; font-src 'self' data: https://fonts.bunny.net https://fonts.gstatic.com https://cuatro.sim-cdn.nl https://cuatro.sim-cdn-acceptatie.nl https://cuatro.sim-cdn-test.nl; script-src 'nonce-ODIyODMxODMtY2VlYy00M2NiLWIyNDQtZjAwY2M5ZTBjOTFk' 'strict-dynamic' 'report-sample'; connect-src *; form-action 'self'; media-src https://*.readspeaker.com https://*.streamlock.net https://storage.googleapis.com https://scribit-pro-hosting.storage.googleapis.com https://scribit-pro.storage.googleapis.com https://app.talkjs.com 'self' blob:; frame-src *; frame-ancestors 'self' https://*.polly.help; worker-src * 'unsafe-inline' blob:; report-uri /api/csp-report 1
object-src 'none';base-uri 'self';script-src 'nonce-_CFWBIC-VCy6UYMFjDqJ-A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
img-src 'self' data: https://platform-cdn.sharethis.com  https://l.sharethis.com  https://i.ytimg.com  https://fonts.gstatic.com  https://translate.google.com  https://pd.sharethis.com  https://www.googletagmanager.com  https://hrwf.eu  http://i.ytimg.com  https://log-papago.naver.com  https://mail.google.com  blob:  https://image.thum.io  https://www.jotform.com  https://files.jotform.com  https://joko-mobile-app-media.s3.eu-west-1.amazonaws.com  https://images.unsplash.com  https://yastatic.net  https://gdpr-api.sharethis.com  https://cdn.honey.io  https://wallpapercave.com  https://secure.gravatar.com https://ts.w.org https://s.w.org https://ps.w.org; default-src 'self'; script-src 'self' 'unsafe-inline' data:  https://platform-api.sharethis.com  https://buttons-config.sharethis.com  https://www.gstatic.com  https://www.google.com  https://www.googletagmanager.com  https://form.jotformeu.com  https://maps.googleapis.com  https://hrwf.eu  https://connect.facebook.net  http://platform-api.sharethis.com  https://static.cloudflareinsights.com  https://lottingem.com  https://loader.knack.com  https://platform.twitter.com  https://gc.kis.v2.scr.kaspersky-labs.com  blob:  https://t.sharethis.com  https://bak.res.qq.com  https://count-server.sharethis.com  https://gdpr-api.sharethis.com  https://nutrifunc.com  https://cdnjs.cloudflare.com  https://ff.kis.v2.scr.kaspersky-labs.com  'unsafe-eval'; script-src-elem 'self' 'unsafe-inline' https://platform-api.sharethis.com  https://buttons-config.sharethis.com  https://www.gstatic.com  https://www.google.com  https://www.googletagmanager.com  https://form.jotformeu.com  https://maps.googleapis.com  https://hrwf.eu  https://connect.facebook.net  http://platform-api.sharethis.com  https://static.cloudflareinsights.com  https://lottingem.com  https://loader.knack.com  https://platform.twitter.com  https://gc.kis.v2.scr.kaspersky-labs.com  blob:  https://t.sharethis.com  https://bak.res.qq.com  https://count-server.sharethis.com  https://gdpr-api.sharethis.com  https://nutrifunc.com  https://cdnjs.cloudflare.com  https://ff.kis.v2.scr.kaspersky-labs.com ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com  https://maxcdn.bootstrapcdn.com  https://www.gstatic.com  https://hrwf.eu  https://www.opoint.no  https://adblockers.opera-mini.net  https://gc.kis.v2.scr.kaspersky-labs.com  https://cdn.honey.io  https://ff.kis.v2.scr.kaspersky-labs.com ; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com  https://maxcdn.bootstrapcdn.com  https://www.gstatic.com  https://hrwf.eu  https://www.opoint.no  https://adblockers.opera-mini.net  https://gc.kis.v2.scr.kaspersky-labs.com  https://cdn.honey.io  https://ff.kis.v2.scr.kaspersky-labs.com ; font-src 'self' https://fonts.gstatic.com  https://maxcdn.bootstrapcdn.com  https://hrwf.eu  https://cdn.scite.ai  https://frontend-cdn.perplexity.ai  https://at.alicdn.com  https://migaku-public-data.migaku.com  data:; frame-src 'self' https://www.youtube.com  https://www.google.com  https://form.jotform.com  https://flowpaper.com  https://www.europeantimes.news  https://freedomofconscience.eu  https://t.sharethis.com  https://gdpr-api.sharethis.com  https://api.coralanalytic.com  https://europeantimes.news  https://auth.iws-hybrid.trendmicro.com  blob:; connect-src 'self' https://l.sharethis.com  https://data.stbuttons.click  https://www.google.com  https://www.google-analytics.com  https://region1.google-analytics.com  https://maps.googleapis.com  https://cdn.jsdelivr.net  https://www.googletagmanager.com  https://cdn.printfriendly.com  wss://127.0.0.1  https://hrwf.eu  https://singleview.site  https://statsdata.online  https://gadstat.com  https://translate.googleapis.com  https://platform-cdn.sharethis.com  https://fonts.googleapis.com  https://ai.elegantthemes.com  data:  blob:  https://plugin.ucads.ucweb.com  https://gjtrack.ucweb.com  https://proxy.getinstantimages.com  https://fonts.gstatic.com  https://platform-api.sharethis.com  https://gdpr-api.sharethis.com  https://api.coralanalytic.com  https://d2rol5dpdbtxxu.cloudfront.net  https://pd.sharethis.com  https://translate-pa.googleapis.com  https://api.openai.com  https://tstats.online  https://getnuvio.org  https://navrix.art;  media-src 'self' https://hrwf.eu  data:;  worker-src 'self' blob:;  report-uri https://hrwf.eu/wp-json/really-simple-security/v1/csp?rsssl_apitoken=78860388; 1
font-src https://cdn.riverty.design/ *.tawk.to fonts.gstatic.com *.fontawesome.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action uc8.tv *.tawk.to 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ uc8.tv https://documents.riverty.com/ td.doubleclick.net https://*.dpdconnect.nl *.tawk.to *.weltpixel.com *.addthis.com *.multisafepay.com https://pay.google.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://cdn.myafterpay.com/ uc8.tv https://cdn.riverty.design/ www.weidswonenenslapen.nl www.google.nl www.facebook.com region1.analytics.google.com https://images.unsplash.com *.tawk.to cdn.jsdelivr.net magefan.com cm.magefan.com *.gstatic.com *.multisafepay.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ uc8.tv https://cdn.myafterpay.com/ https://cdn.bnpl.riverty.io/ analytics.amitix.nl static.hotjar.com script.hotjar.com widget.trustpilot.com platform.getqonfi.com ct.beslist.nl connect.facebook.net https://*.dpdconnect.nl *.tawk.to cdn.jsdelivr.net https://www.googletagmanager.com tagmanager.google.com s7.addthis.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.avada.io *.multisafepay.com https://pay.google.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.tawk.to fonts.googleapis.com cdn.jsdelivr.net tagmanager.google.com https://cdn.jsdelivr.net *.fontawesome.com *.multisafepay.com https://fonts.googleapis.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com uc8.tv https://cdn.myafterpay.com/ https://documents.myafterpay.com/ https://documents.riverty.com/ https://www.afterpay.nl/ https://cdn.bnpl.riverty.io/ https://trace-api.newrelic.com/ https://distributions.crowdin.net/ https://api.crowdin.com/ analytics.amitix.nl www.google.com googleads.g.doubleclick.net region1.analytics.google.com ct.beslist.nl *.tawk.to wss://*.tawk.to https://www.google-analytics.com ekr.zdassets.com/ https://get.geojs.io *.avada.io *.multisafepay.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; font-src 'self' data:; base-uri 'none'; default-src 'none'; script-src 'self' 'unsafe-inline' 'report-sample' 'nonce-6I6YTG4uVFuv8vX3DP9tkg=='; style-src 'unsafe-inline' *; connect-src 'self' *.algolia.net *.algolianet.com *.algolia.io; frame-ancestors 'none'; worker-src 'none'; img-src blob: data: *; media-src * 1
default-src 'self'; script-src 'self' 'nonce-gzA50Ais3Uu1h/9NRXlZog==' https://www.googletagmanager.com https://*.divcom.com https://munchkin.marketo.net https://static.cloudflareinsights.com https://www.google.com https://www.gstatic.com https://*.authorize.net https://*.brella.io https://www.youtube.com https://s.ytimg.com https://player.vimeo.com https://f.vimeocdn.com; style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net https://*.fontawesome.com https://cdn.jsdelivr.net https://cdn.cookielaw.org https://fonts.googleapis.com https://*.divcom.com; img-src 'self' data: blob: https:; font-src 'self' data: https://use.typekit.net https://*.fontawesome.com https://fonts.gstatic.com https://*.divcom.com; connect-src 'self' https://divcomplatform.s3.amazonaws.com https://assets.divcomstaging.com https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://*.ingest.us.sentry.io https://*.authorize.net https://*.divcom.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://*.fontawesome.com https://use.typekit.net https://*.brella.io https://munchkin.marketo.net https://*.algolia.net https://*.algolianet.com https://www.google.com https://www.youtube.com https://player.vimeo.com; frame-src 'self' https:; media-src 'self' https: data: blob:; form-action 'self' https://accept.authorize.net https://test.authorize.net; object-src 'none'; base-uri 'self'; report-uri https://o123887.ingest.us.sentry.io/api/272694/security/?sentry_key=a55321bf52d44c5fa7ada94d915f8609 1
font-src *.typekit.net *.gstatic.com fonts.gstatic.com use.typekit.net *.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com p.typekit.net validator.swagger.io https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.commerce-payment-services.com *.typekit.net google.com *.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.adobe.io performance.typekit.net *.sentry.io *.cloudflare.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' https: https://www.google-analytics.com https://cdn.amplitude.com 'unsafe-eval' 'unsafe-inline' data: 'nonce-XJCyMHRNHF44NR5ufpAhZA=='; worker-src blob: data:; report-uri https://us.sentry.io/api/4506690010480640/security/?sentry_key=aab2498373841041d6b48d721aefbdc1&sentry_environment=production&sentry_release=3ded8ea721858e7b8900ff514480d48183b0fa4c 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-pWquDV2c61UXNnpsOMKzNgDVTEg=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * api.razorpay.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com cdn.razorpay.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com checkout.razorpay.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com lumberjack.razorpay.com lumberjack-metrics.razorpay.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://challenges.cloudflare.com https://www.googletagmanager.com https://cse.google.com https://cdnjs.cloudflare.com https://www.google-analytics.com https://ssl.google-analytics.com https://analytics.tiktok.com https://*.clarity.ms https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com; connect-src 'self' https://challenges.cloudflare.com https://*.clarity.ms https://analytics.tiktok.com https://www.google-analytics.com https://analytics.google.com https://*.google.com https://*.doubleclick.net https://www.googleadservices.com; frame-src https://challenges.cloudflare.com https://www.googletagmanager.com https://*.doubleclick.net https://www.youtube.com https://www.youtube-nocookie.com; img-src 'self' data: https:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; 1
default-src 'self';   base-uri 'self';   child-src  'self' https://ecommerce.nexi.it https://www.googletagmanager.com google-analytics.com https://ssl.google-analytics.com www.google-analytics.com https://www.google-analytics.com https://region1.google-analytics.com https://www.paypal.com https://www.paypal.com/tagmanager/pptm.js https://www.paypalobjects.com/api/checkout.js https://connect.facebook.net/en_US/fbevents.js https://connect.facebook.net https://o1026956.ingest.sentry.io;   connect-src 'self' https://keycloak.plasticfreeonlus.it https://cms.plasticfreeonlus.it https://ecommerce.plasticfreeonlus.it s3.eu-central-1.amazonaws.com plasticfree-documents.s3.eu-central-1.amazonaws.com plasticfree-profiles-pictures.s3.eu-central-1.amazonaws.com https://ecommerce.nexi.it https://o1026956.ingest.sentry.io https://www.google-analytics.com www.google-analytics.com https://ampcid.google.com https://stats.g.doubleclick.net https://www.facebook.com https://www.paypal.com https://t.paypal.com;   script-src 'self'  https://ecommerce.nexi.it https://www.googletagmanager.com google-analytics.com https://ssl.google-analytics.com www.google-analytics.com https://www.google-analytics.com https://region1.google-analytics.com https://www.paypal.com https://www.paypal.com/tagmanager/pptm.js https://www.paypalobjects.com/api/checkout.js https://connect.facebook.net/en_US/fbevents.js https://connect.facebook.net https://o1026956.ingest.sentry.io;   frame-src 'self' https://ecommerce.nexi.it youtube.com youtu.be www.youtube.com www.youtube-nocookie.com https://www.youtube-nocookie.com https://youtube.com https://www.youtube.com https://www.t.paypal.com https://www.paypal.com;   img-src 'self' data: https://keycloak.plasticfreeonlus.it https://cms.plasticfreeonlus.it https://ecommerce.plasticfreeonlus.it s3.eu-central-1.amazonaws.com plasticfree-documents.s3.eu-central-1.amazonaws.com plasticfree-profiles-pictures.s3.eu-central-1.amazonaws.com https://www.google-analytics.com https://ecommerce.nexi.it www.google-analytics.com https://www.google.com/ads/ga-audiences https://stats.g.doubleclick.net https://www.facebook.com https://www.paypal.com https://t.paypal.com;   style-src 'self' 'unsafe-inline' fonts.googleapis.com;   font-src 'self' data: https://fonts.gstatic.com;   media-src 'self';   object-src 'none';   manifest-src 'self';   report-uri https://www.plasticfreeonlus.it/api/csp-report;   worker-src 'none'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://dashboard.doctranslator.com https://forms.doctranslator.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://td.doubleclick.net; form-action 'self' https://dashboard.doctranslator.com https://forms.doctranslator.com 1
font-src fonts.googleapis.com fonts.gstatic.com *.googleapis.com https://*.gstatic.com data: https://www.googletagmanager.com *.gstatic.com *.doubleclick.net *.facebook.com *.googlesyndication.com https://v2.zopim.com https://fonts.gstatic.com *.fontawesome.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.googlesyndication.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self' https://trustedpartner.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.google.com *.google.com/ *.doubleclick.net *.facebook.com *.googlesyndication.com https://widget.trustpilot.com js.mollie.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com 'self' data: https://www.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com https://belco-prod.s3-eu-central-1.amazonaws.com https://v2assets.zopim.io https://v2.zopim.com https://www.google.rs https://www.google.nl https://www.google.pl https://www.google.uk https://www.google.de https://*.fbtest.io https://www.zandri.nl https://*.cookiebot.com *.etrusted.com https://c.bing.com https://c.clarity.ms https://squeezely.tech https://static.zandri.nl *.bing.com *.google.hr *.squeezely.tech *.sooqr.com *.spotlersearch.com https://www.magezon.com https://www.mollie.com assets.myparcel.nl *.google-analytics.com ssl.gstatic.com www.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com data: 'self' 'unsafe-inline'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com https://*.googleapis.com https://*.etrusted.com *.sooqr.com *.spotlersearch.com https://fonts.googleapis.com *.fontawesome.com cdn.jsdelivr.net fonts.google.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; connect-src https://tagging.zandri.de dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.google-analytics.com *.facebook.com *.facebook.net https://stats.g.doubleclick.net *.googlesyndication.com wss://chat.belco.io https://cdn.belco.io https://ekr.zendesk.com https://devdocs.magento.com wss://widget-mediator.zopim.com https://ekr.zdassets.com https://*.clerk.io https://bat.bing.com https://a.clarity.ms https://consentcdn.cookiebot.com https://squeezely.tech *.amazonaws.com *.clarity.ms *.sooqr.com *.spotlersearch.com api.myparcel.nl cdn.jsdelivr.net *.analytics.google.com *.googletagmanager.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https: 'self' 'unsafe-inline'; script-src https://tagging.zandri.de assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net https://cdn.belco.io https://devdocs.magento.com https://magento.com https://v2.zopim.com https://static.zdassets.com https://amcglobal.sc.omtrdc.net https://static.hotjar.com http://custom.clerk.io http://widgets.trustedshops.com https://widgets.trustedshops.com http://widgets-qa.trustedshops.com https://widgets-qa.trustedshops.com http://static-app.connect.trustedshops.com https://static-app.connect.trustedshops.com http://static-app.connect-qa.trustedshops.com https://static-app.connect-qa.trustedshops.com http://integrations.etrusted.com https://integrations.etrusted.com https://*.clerk.io https://*.cookiebot.com https://*.cloudfront.net https://bat.bing.com https://squeezely.tech https://www.clarity.ms https://scripts.clarity.ms *.spotlersearchanalytics.com https://js.mollie.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://integrations.etrusted.site https://unpkg.com *.sooqr.com *.spotlersearch.com spotlersearchanalytics.com js.mollie.com cdnjs.cloudflare.com cdn.jsdelivr.net *.etrusted.com https: 'self' 'unsafe-inline' 'unsafe-eval'; 1
font-src *.gstatic.com *.fontawesome.com https://fonts.bunny.net *.pluginhive.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.pluginhive.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com *.paytrace.com *.pluginhive.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.gstatic.com https://firebasestorage.googleapis.com https://meetanshi.com/media/logo.png *.pluginhive.com *.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com polyfill.io *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com *.gstatic.com *.avada.io *.paytrace.com *.pluginhive.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net *.pluginhive.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.algolia.net *.algolia.com *.algolianet.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com https://get.geojs.io *.avada.io *.pluginhive.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; connect-src 'self' https: wss:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; report-uri /api/csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com cash-f.squarecdn.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.fontawesome.com https://fonts.bunny.net *.bootstrapcdn.com *.cloudflare.com *.googleusercontent.com *.jsdelivr.net *.slant.co unpkg.com data: 'self' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.2c2p.com *.americanexpress.com *.arcot.com *.cardinalcommerce.com *.citibank.com *.ctbcbank.com *.dnp-cdms.jp *.inicis.com *.ipay88.com.my *.unionpay.com *.uobgroup.com 'self' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com * *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.weltpixel.com *.americanexpress.com *.arcot.com *.cardinalcommerce.com *.citibank.com *.ctbcbank.com *.dnp-cdms.jp *.inicis.com *.unionpay.com *.uobgroup.com 'self' 'unsafe-eval' 'unsafe-hashes'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net * *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com k.kakaocdn.net https://firebasestorage.googleapis.com *.inicis.com *.afterpay.com *.doubleclick.net *.elcompanies.com www.google.ad www.google.at www.google.co.id www.google.co.in www.google.co.jp www.google.co.kr www.google.com.au www.google.com.bd www.google.com.co www.google.com.hk www.google.com.mt www.google.com.my www.google.com.ph www.google.com.sg www.google.com.tw www.google.com.vn www.google.co.th www.google.co.uk www.google.co.za www.google.de www.google.dk www.google.es www.google.fr www.google.ie www.google.it www.google.nl www.google.se *.google.com *.googletagmanager.com *.googleusercontent.com *.hstatic.net *.naver.com *.thecompanystore.com.sg data: 'self' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://api.addressfinder.io *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.googleapis.com *.gstatic.com developers.kakao.com *.kakaocdn.net *.avada.io *.shopify.com *.inicis.com *.facebook.net *.google-analytics.com *.googletagmanager.com 'self' 'unsafe-eval' 'unsafe-hashes' 'nonce-YWZoYWM4YndtbmZxcDdxMTU4cHdtM2dqNXVqNTdiZWw=' 'sha256-W5akSSK6LD5BjIlNICMcXaUObQSRAaj6bs7JHADURBA=' 'sha256-3qVqeAdyxxTdPkkRzqapjGkAUYLahxSrB7Mdup+GPQ0=' 'sha256-2rvfFrggTCtyF5WOiTri1gDS8Boibj4Njn0e+VCBmDI=' 'sha256-p8MCfMHqrovsjRYU9z0bU17dd0z81k/fVbGrtBBiM9g=' 'sha256-0pk2s4oXwBELlC6IBVb3nNaM2PjfjwI2N6OGIX5lx8Y=' 'sha256-nkEZknO0IxNxY/CkTMBhjNhwPvglpYumjx31B4fjkY8=' 'sha256-XGfPSYcBWPq7sx/ucAvvEcAKkiSRS2GeZReWO0f5vXQ='; style-src *.adobe.com fonts.googleapis.com https://api.addressfinder.io *.cash.app *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.fontawesome.com https://fonts.bunny.net *.inicis.com *.googleapis.com *.gstatic.com *.jsdelivr.net 'self' 'unsafe-eval' 'unsafe-hashes'; object-src 'self'; media-src *.adobe.com *.gstatic.com 'self' 'unsafe-eval' 'unsafe-hashes'; manifest-src 'self'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://api.addressfinder.io * *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com *.googleapis.com kauth.kakao.com https://get.geojs.io *.avada.io *.inicis.com *.doubleclick.net www.google.ad www.google.at www.google.co.id www.google.co.in www.google.co.jp www.google.co.kr www.google.com.au www.google.com.bd www.google.com.hk www.google.com.mt www.google.com.my www.google.com.ph www.google.com.sg www.google.com.tw www.google.com.vn www.google.co.th www.google.co.za www.google.de www.google.dk www.google.es www.google.fr www.google.ie www.google.it www.google.nl *.googletagmanager.com 'self' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self'; default-src 'self'; base-uri 'self'; report-uri https://2a739ab1-c282-4278-9304-d6969cd3e784.sansec.watch/; report-to report-endpoint; 1
script-src 'self' 'strict-dynamic' 'nonce-hw73HauRcZkTJBYqQrJRqjuU2diqLdRHDAcnf9GlLKY=' 'unsafe-inline' http: https:;object-src 'none';base-uri 'none';frame-ancestors 'self'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com static.payu.com *.paypal.com *.paypalobjects.com *.cdn-apple.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.meetanshi.com meetanshi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com secure.payu.com merch-prod.snd.payu.com static.payu.com credit-widget-config.payu.com/ *.sandbox.paypal.com *.meetanshi.com meetanshi.com www.googletagmanager.com https://meetanshi.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io static.payu.com credit-widget-config.payu.com/ *.sandbox.paypal.com https://images.unsplash.com www.google.pl *.meetanshi.com meetanshi.com https://d2d2yzufo5fwh3.cloudfront.net https://domshop.pl https://dev.domshop.pl https://www.baubay.de https://www.matbay.fr https://www.byggbay.se https://dev.byggbay.se https://dev.matbay.fr https://dev.baubay.de https://www.google.co.in https://bat.bing.com https://meetanshi.com/media/logo.png https://meetanshi.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com secure.payu.com secure.snd.payu.com static.payu.com credit-widget-config.payu.com/ *.paypal.com *.sandbox.paypal.com *.paypalobjects.com https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com *.googletagmanager.com *.meetanshi.com meetanshi.com https://ipinfo.io https://static.cloudflareinsights.com https://bat.bing.com https://www.clarity.ms https://scripts.clarity.ms https://meetanshi.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com 'unsafe-inline' *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com secure.payu.com merch-prod.snd.payu.com static.payu.com credit-widget-config.payu.com/ *.sandbox.paypal.com https://maps.googleapis.com https://player.vimeo.com stats.g.doubleclick.net *.meetanshi.com meetanshi.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://bat.bing.com https://h.clarity.ms https://ad.doubleclick.net/ https://meetanshi.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
connect-src *.chromalox.com *.onetrust.com *.onetrust.io *.google-analytics.com *.hotjar.com *.hotjar.io *.qualtrics.com wss://*.hotjar.com maps.googleapis.com 'self' *.clarity.ms maps.googleapis.com *.cookieyes.com vimeo.com px.ads.linkedin.com front.optimonk.com cdn-account.optimonk.com jfapiprod.optimonk.com cdn-renderer.optimonk.com pagead2.googlesyndication.com cdn-cookieyes.com googleads.g.doubleclick.net places.googleapis.com analytics.google.com region1.analytics.google.com www.google-analytics.com www.googletagmanager.com www.googleadservices.com ad.doubleclick.net stats.g.doubleclick.net 680-ryi-639.mktoresp.com forms.hubspot.com forms.hsforms.com cdn.linkedin.oribi.io adservice.google.com www.google.com www.google.co.uk www.google.ae www.google.am www.google.as www.google.at www.google.az www.google.ba www.google.be www.google.bg www.google.bi www.google.bs www.google.ca www.google.cd www.google.cg www.google.ch www.google.ci www.google.cl www.google.co.bw www.google.co.ck www.google.co.cr www.google.co.hu www.google.co.id www.google.co.il www.google.co.im www.google.co.in www.google.co.je www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.co.nz www.google.co.th www.google.co.ug www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bo www.google.com.br www.google.com.bz www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kw www.google.com.ly www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.nf www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sb www.google.com.sg www.google.com.sv www.google.com.tj www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.uz www.google.com.vc www.google.com.vn www.google.cn www.google.cz www.google.de www.google.dj www.google.dk www.google.dm www.google.ee www.google.es www.google.fi www.google.fm www.google.fr www.google.gg www.google.gl www.google.gm www.google.gr www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.is www.google.it www.google.jo www.google.kg www.google.kz www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.mn www.google.ms www.google.mu www.google.mw www.google.net www.google.nl www.google.no www.google.nr www.google.nu www.google.pl www.google.pn www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.sh www.google.si www.google.sk www.google.sm www.google.sn www.google.tm www.google.tn www.google.to www.google.tp www.google.tt www.google.tv www.google.uz www.google.vg www.google.vu www.google.ws www.google.co.zw www.google.dz/ads/ga-audiences www.google.al/ads/ga-audiences www.google.bf/ads/ga-audiences ttps://www.google.by/ads/ga-audiences www.google.cm/ads/ga-audiences www.google.co.ao/ads/ga-audiences ttps://www.google.co.mz/ads/ga-audiences www.google.co.tz/ads/ga-audiences www.google.com.bn/ads/ga-audiences ttps://www.google.com.gh/ads/ga-audiences www.google.com.kh/ads/ga-audiences www.google.com.lb/ads/ga-audiences ttps://www.google.com.mm/ads/ga-audiences www.google.com.ng/ads/ga-audiences www.google.com.pg/ads/ga-audiences ttps://www.google.dz/ads/ga-audiences www.google.ge/ads/ga-audiences www.google.iq/ads/ga-audiences www.google.sr/ads/ga-audiences 680-ryi-639.mktoutil.com wss://lo.msg.liveperson.net bat.bing.com; font-src *.onetrust.com 'self' fonts.gstatic.com use.typekit.net data:; img-src *.qualtrics.com optimize.google.com www.google-analytics.com www.googletagmanager.com 'self' data: *; manifest-src 'self'; script-src *.onetrust.com *.scr.kaspersky-labs.com *.qualtrics.com www.googleanalytics.com www.googleoptimize.com optimize.google.com static.ads-twitter.com 'self' 'nonce-MDRhYmMyYmItNGNiMS00ZWU0LTkyMjYtYjYxMWQzNzg3ZTM5' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes' 'sha256-MhtPZXr7+LpJUY5qtMutB+qWfQtMaPccfe7QXtCcEYc=' 'sha256-NiPpcuG5iPK1KPR3YIEEEz98KT0W7243V6u7FeP7hdE=' 'sha256-gRuNVLzs+xy+3p6+I1CnZb8pDmnXUWSlO9ejbnSR/lQ=' 'sha256-ibqfaR/CmFL3wQZAxIuZ0V4RMm9txqHSln46Z5WyeVA=' 'sha256-30EB3olZggJZ3OT2ahL22VzuYSIEPTzmMb+L3StxKgI=' 'sha256-IgMQOOOedQeMPBl7lSreMVPmJvU62bc6l8HcsGXnbWc=' 'sha256-bkXrlHTrWu78qnQooXw+JqlG1rZijbuVZIkNBzTfagM=' 'sha256-vbs/XR7vkC12NXdDH8FEaUASiJdg/16cqF/0T3ze1ks=' 'sha256-4nxBwvGtrokGNkqD2OxOt8Y07P7caJHk00sGwjNYF5I=' 'sha256-/Fu0G2rh4wmpTYIDt4lb/x5WJp6zusqpavun8dZ8Yns=' 'sha256-yqVa7ver8F3o3KAsmdt2r10wQlIPCHuaBhkxEMbFQKE=' 'sha256-pZ/qdkaCfUhJbPDW6dxGk6IT/oRRR/mlpXeonIs9iew=' 'sha256-tYXM2mIrtKnuv7Rvj326AzVweHLHgtfBqDHsiYM5xg8=' 'sha256-kcSZExtSK6wGWjH32NFqA7z0v/0DUB7/EuCavQ6V0Nc=' 'sha256-/amMNPylJzZhxuDqWJaOB1tblrNn/VTGmyo1F6Jydsc=' 'sha256-nMZuForFzEBU+4yE21DCTnFwd73xR2dj4cDRSkbEfhA=' 'sha256-s3czzyz3eEMkekPOnj13dd1TYxC0uLYtFJPalu7jVtg=' 'sha256-FL2ompMo2e6GBcy6brKSOH0L/JUlb+gXWURUoorBwLI=' ssl.google-analytics.com connect.facebook.net www.facebook.net www.google-analytics.com www.googletagmanager.com www.gstatic.com www.youtube.com platform.twitter.com cdn.syndication.twimg.com www.google.com accdn.lpsnmedia.net googleads.g.doubleclick.net js.hs-analytics.net js.hs-banner.com js.hs-scripts.com js.hsforms.net js.hsleadflows.net lo.v.liveperson.net lpcdn.lpsnmedia.net lptag.liveperson.net munchkin.marketo.net script.hotjar.com snap.licdn.com static.hotjar.com www.googleadservices.com www.clarity.ms ajax.googleapis.com platform.linkedin.com; style-src-elem *.onetrust.com 'self' fonts.googleapis.com p.typekit.net use.typekit.net platform.twitter.com ton.twimg.com optimize.google.com www.googletagmanager.com 'unsafe-inline'; frame-src *.chromalox.com *svc.dynamics.com *.doubleclick.net *.qualtrics.com optimize.google.com vars.hotjar.com www.youtube.com lpcdn.lpsnmedia.net *.liveperson.net sseacademy.csod.com www.googletagmanager.com www.facebook.com www.google.com www.youtube.com m.youtube.com share.hsforms.com platform.twitter.com syndication.twitter.com player.vimeo.com calendly.com www.linkedin.com; media-src 'self' *.chromalox.com *.gestra.com *.spiraxsarco.com lpcdn.lpsnmedia.net www.facebook.com; form-action 'self'; style-src-attr 'unsafe-inline'; object-src 'none'; base-uri 'self'; style-src optimize.google.com fonts.googleapis.com 'unsafe-inline'; report-uri https://steam.report-uri.com/r/d/csp/enforce 1
object-src 'none';base-uri 'self';script-src 'nonce-8kkqXfKSOSx8EI9oVSA6YA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: www.google-analytics.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com creditcard.wincraft.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com www.livechatinc.com cdn.livechatinc.com secure.livechatinc.com creditcard.wincraft.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com magefan.com cm.magefan.com www.facebook.com www.facebook.net connect.facebook.net stats.g.doubleclick.net ssl.google-analytics.com ssl.gstatic.com www.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ chimpstatic.com downloads.mailchimp.com *.list-manage.com www.livechatinc.com cdn.livechatinc.com secure.livechatinc.com ssl.google-analytics.com tagmanager.google.com www.facebook.net connect.facebook.net js-agent.newrelic.com bam.nr-data.net *.adobedtm.com *.cardinalcommerce.com *.googleadservices.com *.ccdc02.com *.paypal.com *.vimeo.com *.facebook.net *.hsforms.net *.adobedtm.net creditcard.wincraft.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.hsforms.com www.xtento.com cdn.xtento.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com tagmanager.google.com assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.livechatinc.com cdn.livechatinc.com secure.livechatinc.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com bam.nr-data.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src maxcdn.bootstrapcdn.com *.justsellingapp.com *.justsellingapp.de *.justselling.de fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.justsellingapp.com *.justsellingapp.de *.justselling.de *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.ad-srv.net consentcdn.cookiebot.com *.cookiebot.eu td.doubleclick.net www.google.com www.googletagmanager.com *.smarketer.de *.bing.com *.awin1.com *.justsellingapp.com *.justsellingapp.de *.justselling.de js.mollie.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https://images.unsplash.com validate.fishpig.co.uk *.clarity.ms www.google.com google.com www.google.de imgsct.cookiebot.com *.justsellingapp.com www.bettwaesche-mit-stil.de *.smarketer.de d3k81ch9hvuctc.cloudfront.net www.googletagmanager.com googleads.g.doubleclick.net *.googlesyndication.com *.google.com www.google.at www.google.ch www.google.co.in www.google.fr *.googleusercontent.com *.roeye.com *.linkbux.com *.justsellingapp.de *.justselling.de https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.mollie.com *.gstatic.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.pinterest.com *.pinimg.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com *.ad-srv.net *.doubleclick.net *.googletagmanager.com *.cookiebot.com *.cookiebot.eu googleads.g.doubleclick.net consentcdn.cookiebot.com cloud.justsellingapp.com www.google.com www.gstatic.com googleadservices.com *.googlesyndication.com *.klaviyo.com *.smarketer.de *.clarity.ms *.dwin1.com *.roeyecdn.com nextleveldefend.com *.sciencebehindecommerce.com *.moebel.de *.linkbux.com *.justsellingapp.com *.justsellingapp.de *.justselling.de https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.mollie.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com sc-static.net *.snapchat.com *.pinterest.com *.pinimg.com unpkg.com *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net cloud.justsellingapp.com *.smarketer.de *.klaviyo.com *.gstatic.com *.linkbux.com *.justsellingapp.com *.justsellingapp.de *.justselling.de https://static.klaviyo.com *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com *.moebel.de nextleveldefend.com region1.google-analytics.com *.googlesyndication.com consentcdn.cookiebot.com consentcdn.cookiebot.eu cloud.justsellingapp.com *.smarketer.de www.google.com google.com www.googleadservices.com *.google.com www.google.at www.google.co.in www.google.de www.google.fr *.doubleclick.net *.wepowerconnections.com *.sciencebehindecommerce.com *.linkbux.com *.justsellingapp.com *.justsellingapp.de *.justselling.de https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.pinterest.com *.pinimg.com sc-static.net *.snapchat.com *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src googleads.g.doubleclick.net www.google.com *.smarketer.de 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://eadb8e23-bf44-4e49-9db5-120caef8ef4d.sansec.watch/; report-to report-endpoint; 1
default-src 'self' https: data: blob:; base-uri 'self'; object-src 'none'; form-action 'self'; img-src 'self' https: data: blob:; font-src 'self' https: data:; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://snap.licdn.com https://sc.lfeeder.com https://connect.facebook.net https://assets.calendly.com https://www.instagram.com; style-src 'self' 'unsafe-inline'; connect-src 'self' https://o4510754861088768.ingest.de.sentry.io https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://www.googletagmanager.com https://*.g.doubleclick.net https://ad.doubleclick.net https://www.google.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://www.google.de https://www.google.at https://www.google.ch https://www.google.li https://www.google.it https://www.google.fr https://www.google.pt https://px.ads.linkedin.com https://sc.lfeeder.com https://www.facebook.com https://graph.facebook.com https://calendly.com; frame-src 'self' https://player.vimeo.com https://forms.office.com https://partner.life.li https://app.livestorm.co https://calendly.com https://www.instagram.com https://prosperity.app https://lla-production-impersonation-consumer.life.li; worker-src 'self' blob:; frame-ancestors 'self' https://*.life.li https://*.prosperity.app; trusted-types *; report-uri /api/csp-report; 1
object-src 'none';base-uri 'self';script-src 'nonce-5cO7tEakCEckj1Y2Ds-M7Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.authorize.net 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.certcapture.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.addthis.com *.google.com/ js.mollie.com *.authorize.net *.googleapis.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com *.certcapture.com magefan.com cm.magefan.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://www.mollie.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page tagmanager.google.com https://www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.google.com/ js.mollie.com applepay.cdn-apple.com *.authorize.net *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.certcapture.com https://static.klaviyo.com assets.braintreegateway.com https://cdn.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://maps.googleapis.com https://player.vimeo.com *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.authorize.net *.googleapis.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https: data: blob:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss:; frame-src 'self' https:; media-src 'self' https: blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; 1
default-src 'self' https://*.chilipiper.com https://www.observepoint.com https://browser.sentry-cdn.com; base-uri 'self'; object-src 'none'; worker-src 'self' blob:; script-src 'self' 'sha256-dlNgZtNNCa4ZXu7net3fkSM+7otJCNzSmTYNjZdlT6E=' 'sha256-rSzBQuA9i08JnS8hNeAcGH/4zsF0QdW6WQ3+yaHDBAo=' 'sha256-i0sRbxQ3Fz5/XG0JiYwgibRy/ycnWTmIddOhmfbwcZ8=' 'sha256-XmNPaEKFzELmwzGFC+YA54ulU/cb2JUb5RqWUABHtSI=' 'sha256-uQ14xz9MfP77CFLAHa/RqdOFRRUf44Ceu3ENXhf6V0w=' 'sha256-ipbBoKixwqjquK36IWNLfyxCJva8UyLfGrfvxPHxr38=' 'sha256-Y7sKpiCx7NdRtkIFmmTcPIvZRPCNPe5tkF6SRJswVQs=' 'sha256-WKgFivA8GA/ZBUZym6/vD5z6QHFe9R/uQLZ73UA4QCM=' 'sha256-+N1RLquaY9yhuxRNzz8/XFauzxSzNIGmYrhvohzf4Lg=' 'sha256-/Krh7Owc5JoKFywroDtGswnn7FT5csrAzLXDm7TZES4=' 'sha256-AOzAb0D+NopVNUs+rwCoGMIdVFWlgzrZKsvdebkxDwg=' 'sha256-PeSQzRAeflt2m+bsB4Yx0WqeEARaKnSNIIHVck7ch0Q=' 'sha256-d7iYvnHoVbZpGu4wGvU1Ow48bRzBc5PlFSfhrisP3uA=' 'sha256-grFRjD5ZnW98NQ60BT8S9Ir8/iDt1OUmyx2nJyT7e4g=' 'sha256-iHRqs0WI4QYucjSqCsD+VtgA5z9SKkmTjoQqXvGM5C4=' 'sha256-u/9QNBeXC/olFDBH4mlDIuttNKTP9WjZXdCFKJuS7eo=' 'sha256-x/Nza7GB8Nb8kOWl5dquGLZwAb02LZZLQW64GDef9fw=' 'sha256-nzIilWoC21qlaTsUgBi6IA1nPKGEHHrFs8MkAcfR7e8=' 'sha256-z4Bnf9qq2F5y8OWqpt+acNlmLapBARg0XYrE3wilcU0=' 'sha256-bK8iKFWXdPM1ME+Mu2bIbq1LRu0u2Cqd/60stEeAYOs=' 'sha256-zBC1179gsXAejqjjWOPyA9XBs4GAy4/sSApN6zUWwKc=' 'sha256-g3FxkAYFaPdKPG2MXA7RPokG7VNhYgoErwVS0DO7DK8=' 'sha256-i7u6yOzTrZO0JpEFOkcW0eFswXH3vvjNx/j5jfnt5No=' 'sha256-HB5YbByNv0jT2qaWn3Qi4/vXkubw1lgT28adrdKJAi8=' 'sha256-WE3qPfLV1ShMhkAHwwakCWQlRQmEGJkEGLqwIHw6SBY=' 'sha256-yX5LnBiOP4C3IAPYhb+9TUnnk0iGwhq9UZ67u5b679Y=' 'sha256-tqPvlZRAMf7FlDq+bqZNyfEoTOXRYQ0ab7zqBmqvLpc=' 'sha256-yUXrkvbo8KKgAjKQsgseJ6Fchh4UlWKfAZn/rSjxB4k=' https://app.observepoint.com https://bat.bing.com https://browser.sentry-cdn.com https://cdn.cookielaw.org https://challenges.cloudflare.com https://fonts.googleapis.com https://googleads.g.doubleclick.net https://js.intercomcdn.com https://js.navattic.com https://js.sentry-cdn.com https://js.zi-scripts.com https://munchkin.marketo.net https://observepoint.chilipiper.com https://observepoint.com https://resources.observepoint.com https://scripts.clarity.ms https://snap.licdn.com https://tracking-api.g2.com https://widget.intercom.io https://ws-assets.zoominfo.com https://www.clarity.ms https://www.googletagmanager.com https://www.observepoint.com https://www.youtube.com blob:; style-src 'self' 'sha256-NHpTFA7jy/qeqb5TJ7d2sEwEC9y+JcrHz++3ocdB+Bw=' 'sha256-lIBmVrO4GuQPoKLyObdQFZt8wu5sBZpbLF2rhcjmEX4=' 'sha256-GSdltENf0r/joNf0P3tXCyQ4G8U1K3c64nvEK8wOouI=' 'sha256-gj3hXMTISjefzHKc3LvwPGkgIqBnMTl1JhLIdwcC/O8=' 'sha256-LbZ1Unz/mECrqrf+3CWtpnBrwBH/o0xkJib5D3aXOi0=' 'sha256-HDYY6U2YJ1OY+bJ5Wfjr2rSQUWfvwIH2JVCtfSjiHPM=' 'sha256-qWwxsTFcdIcN78qmlVvZfPMlQLLiEk7put1pv87RdRQ=' 'sha256-lHUKqGdl+4OehsZGVG+FKk+4B6tXm4KELpn17gDOWYI=' 'sha256-46rNwOcaZWVtPyj+fngblqZuG+kDF25rIkM3O5MZ4AE=' 'sha256-4O5P8OJCAAWuszY15Z75GgA9O7IJRX3ylTuIOZXsneo=' 'sha256-ORuKZB3dHBi9O7/3A08h8xLYF7SCk24mVJZrULaM4TY=' https://fonts.googleapis.com blob:; connect-src 'self' https://primary-realtime.intercom-messenger.com https://a.clarity.ms https://v.clarity.ms https://www.observepoint.com https://geolocation.onetrust.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://www.google-analytics.com https://cdn.cookielaw.org https://js.intercomcdn.com https://api-iam.intercom.io https://js.zi-scripts.com https://ws.zoominfo.com https://bat.bing.com https://www.googletagmanager.com https://px.ads.linkedin.com https://snap.licdn.com https://app.navattic.com https://js.navattic.com https://analytics.google.com https://ws-assets.zoominfo.com https://442-mdr-359.mktoresp.com https://munchkin.marketo.net https://www.google.com https://tracking-api.g2.com https://observepoint.com https://resources.observepoint.com https://app.observepoint.com https://www.googleadservices.com https://privacyportal.onetrust.com https://scripts.clarity.ms https://app.observepointstaging.com https://j.clarity.ms https://n.clarity.ms https://o4505801143681024.ingest.us.sentry.io https://nexus-websocket-a.intercom.io wss://nexus-websocket-a.intercom.io https://challenges.cloudflare.com https://*.chilipiper.com; img-src 'self' data: https://s.w.org https://stats.g.doubleclick.net https://www.google-analytics.com https://cdn.cookielaw.org https://px.ads.linkedin.com https://www.google.com https://bat.bing.com https://downloads.intercomcdn.com https://www.googletagmanager.com https://c.clarity.ms https://c.bing.com https://www.linkedin.com https://js.intercomcdn.com https://observepoint.com https://resources.observepoint.com https://googleads.g.doubleclick.net https://content.cdntwrk.com https://static.intercomassets.com https://i.ytimg.com https://i.vimeocdn.com https://f.vimeocdn.com; frame-src 'self' https://www.observepoint.com https://challenges.cloudflare.com https://www.googletagmanager.com https://player.vimeo.com https://www.youtube.com https://www.youtube-nocookie.com https://resources.observepoint.com https://widget.intercom.io https://*.chilipiper.com; font-src 'self' https://www.observepoint.com https://fonts.gstatic.com https://fonts.intercomcdn.com https://js.intercomcdn.com https://observepoint.com https://resources.observepoint.com data:; report-to csp; 1
script-src-elem platform-api.sharethis.com www.googletagmanager.com cdn.celerantwebservices.com cdn.jsdelivr.net chimpstatic.com downloads.mailchimp.com mc.us5.list-manage.com 'self' w.sharethis.com count-server.sharethis.com t.sharethis.com ws.sharethis.com; connect-src www.google-analytics.com 'self' l.sharethis.com bcp.crwdcntrl.net data.stbuttons.click c.ltmsphrcl.net; font-src cdn.celerantwebservices.com data: fonts.gstatic.com 'self'; img-src data: 'self' mcusercontent.com sync.sharethis.com l.sharethis.com ws.sharethis.com www.googletagmanager.com; style-src-elem cdn.celerantwebservices.com cdn.jsdelivr.net fonts.googleapis.com 'self' 'unsafe-inline' downloads.mailchimp.com ws.sharethis.com; style-src-attr 'unsafe-inline'; report-uri https://celerantwebservices.report-uri.com/r/d/csp/reportOnly; 1
font-src *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://plumrocket.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.avada.io *.alothemes.com *.magepow.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://storage.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com unsafe-inline assets.braintreegateway.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; connect-src 'self' *.google-analytics.com https://www.google-analytics.com https://www.googletagmanager.com; frame-src 'self' *.vimeo.com *.vimeocdn.com *.youtube.com; img-src 'self' https://www.google-analytics.com https://www.googletagmanager.com; script-src 'self' *.googletagmanager.com *.google-analytics.com https://cdnjs.cloudflare.com https://www.google.com; script-src-attr 'self'; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' https://cdnjs.cloudflare.com; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-w5g6cYntVTiY_844xe680g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src  'none'; connect-src 'self' *.dfxtra.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.dfxtra.com join.gammasecure.com; script-src 'self' *.dfxtra.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.dfxtra.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; connect-src 'self' https:; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https:; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https:; upgrade-insecure-requests 1
default-src 'self' https: data: blob:; script-src 'self' 'nonce-83e3a3f07be705ba95bd88a5a20ef565' https://*.hcaptcha.com https://*.crisp.chat https://www.googletagmanager.com https://www.clarity.ms https://orbit.xynta.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss:; object-src 'none'; base-uri 'self'; form-action 'self' https:; frame-src 'self' https://*.hcaptcha.com https://*.crisp.chat https://www.googletagmanager.com https://www.clarity.ms; frame-ancestors 'self'; report-uri /csp-report; report-to csp-endpoint 1
default-src 'self' https://cuatro.sim-cdn.nl; img-src * data: blob:; style-src * 'unsafe-inline' blob: https://fonts.googleapis.com; font-src 'self' data: https://fonts.bunny.net https://fonts.gstatic.com https://cuatro.sim-cdn.nl https://cuatro.sim-cdn-acceptatie.nl https://cuatro.sim-cdn-test.nl; script-src 'nonce-NzUzN2JjZGItYjM1Yi00NGUzLTk2OGYtN2RlMWQ3YjU2YzRk' 'strict-dynamic' 'report-sample'; connect-src *; form-action 'self'; media-src https://*.readspeaker.com https://*.streamlock.net https://storage.googleapis.com https://scribit-pro-hosting.storage.googleapis.com https://scribit-pro.storage.googleapis.com https://app.talkjs.com 'self' blob:; frame-src *; frame-ancestors 'self' https://*.polly.help; worker-src * 'unsafe-inline' blob:; report-uri /api/csp-report 1
default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self' https://buy.stripe.com https://billing.stripe.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://*.clarity.ms https://challenges.cloudflare.com https://*.posthog.com https://us-assets.i.posthog.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https://static.pastpaperhero.com https://placehold.co https://*.supabase.co https://*.googleusercontent.com https://www.googletagmanager.com https://*.google-analytics.com https://*.clarity.ms https://*.google.co.uk https://*.google.com; connect-src 'self' https://api.pastpaperhero.com https://api.telegram.org https://*.supabase.co wss://*.supabase.co https://*.posthog.com https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://*.clarity.ms https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com https://buy.stripe.com https://billing.stripe.com https://*.stripe.com; media-src 'self' blob: https://static.pastpaperhero.com; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ajax.googleapis.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https:; frame-src 'self' https:; media-src 'self' https: blob:; worker-src 'self' blob: 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://gtm.tigerexped.de https://www.googletagmanager.com https://www.clarity.ms https://*.clarity.ms https://connect.facebook.net https://sibforms.com https://sibautomation.com https://www.paypal.com https://www.paypalobjects.com https://*.mollie.com https://www.google.com https://www.gstatic.com https://pay.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://sibforms.com https://www.gstatic.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://assets.brevo.com; connect-src 'self' https://maps.tigerexped.de https://gtm.tigerexped.de https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.clarity.ms https://www.facebook.com https://connect.facebook.net https://sibautomation.com https://sibforms.com https://assets.brevo.com https://in-automate.brevo.com https://*.mollie.com https://www.paypal.com https://pay.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://ad.doubleclick.net https://www.googleadservices.com https://www.google.com https://google.com https://www.google.de https://www.google.nl https://nominatim.openstreetmap.org https://plugins.api.webstollen.de https://content.ws-svc.de; frame-src 'self' https://gtm.tigerexped.de https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://www.facebook.com https://*.paypal.com https://pay.google.com https://www.google.com https://*.mollie.com https://licence.ws-svc.de; worker-src 'self' blob:; manifest-src 'self'; form-action 'self' https://sibforms.com https://www.facebook.com; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; report-uri /csp-report.php 1
object-src 'none';base-uri 'self';script-src 'nonce-tRKA8oE2wtPkcWDGdVo2lg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src https://v2.zopim.com https://sslzone-brianstoys.netdna-ssl.com data: http://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors https://www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://sslzone-brianstoys.netdna-ssl.com https://v2assets.zopim.io https://static.zdassets.com https://v2.zopim.com https://stats.g.doubleclick.net https://www.google.com https://bat.bing.com https://quote.brianstoys.com https://www.facebook.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://v2.zopim.com https://static.zdassets.com https://bat.bing.com https://connect.facebook.net https://quote.brianstoys.com https://www.googletagmanager.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com http://fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://static.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://ekr.zdassets.com wss://*.zopim.com https://brianstoys.zendesk.com widget.freshworks.com m2epro.freshdesk.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' https://www.jotform.com https://ajax.googleapis.com/ajax/libs/jqueryui/1.11.4/jquery-ui.min.js https://cdn.syndication.twimg.com/timeline/profile https://platform.twitter.com https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/ https://form.jotform.com/82825417101147; style-src 'unsafe-inline' https://www.aaea.org https://ajax.googleapis.com https://fonts.googleapis.com https://platform.twitter.com https://ton.twimg.com; object-src 'none'; base-uri 'self'; connect-src 'self' https://www.google-analytics.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://platform.twitter.com https://syndication.twitter.com; img-src 'self' https://pbs.twimg.com https://platform.twitter.com https://ton.twimg.com; manifest-src 'self'; media-src 'self'; worker-src 'none'; frame-ancestors 'self' https://www.aaea.org; 1
script-src 'self' 'unsafe-eval' chrome-extension: 'unsafe-inline' https://www.google.com https://smartcaptcha.yandexcloud.net https://www.googletagmanager.com https://vk.com https://mc.yandex.ru https://www.google-analytics.com https://top-fwz1.mail.ru https://privacy-cs.mail.ru https://cc1783158647.example 1
report-uri csp-reporting-service.com; worker-src blob: *.google.com *.recaptcha.net; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.kxcdn.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.certcapture.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com google.com csp-reporting-service.com bam.eu01.nr-data.net *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com *.google.com *.recaptcha.net https://player.vimeo.com https://www.youtube-nocookie.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.certcapture.com scontent.cdninstagram.com *.kxcdn.com amcglobal.sc.omtrdc.net *.twitter.com *.googleapis.com google.com *.gstatic.com www.gstatic.com 'self' *.google.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.certcapture.com *.googleapis.com google.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com csp-reporting-service.com js-agent.newrelic.com bam.eu01.nr-data.net *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.sentry-cdn.com *.cloudflare.com *.google.com *.recaptcha.net *.googletagmanager.com *.google-analytics.com *.disqus.com *.avada.io *.shopify.com https://player.vimeo.com https://www.youtube.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com *.certcapture.com *.googleapis.com google.com *.kxcdn.com *.gstatic.com *.fontawesome.com 'self' https://fonts.bunny.net maxcdn.bootstrapcdn.com https://fonts.googleapis.com http://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.certcapture.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com dpm.demdex.net csp-reporting-service.com bam.eu01.nr-data.net *.google.com *.recaptcha.net https://get.geojs.io *.avada.io https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
img-src 'self' data: https://hcmcl.org  https://www.googletagmanager.com  https://www.google-analytics.com  https://maps.googleapis.com  https://maps.gstatic.com  https://www.mcleaguelibrary.org  https://cdn.honey.io  https://really-simple-ssl.com  https://maps.google.com  https://supsystic-42d7.kxcdn.com  blob:  https://streetviewpixels-pa.googleapis.com  https://dnjmcl.org  https://i.ytimg.com  https://files.constantcontact.com  https://translate.google.com  https://fonts.gstatic.com  https://secureservercdn.net  https://www.elegantthemes.com  https://www.paypalobjects.com  https://lh3.ggpht.com  https://joko-mobile-app-media.s3.eu-west-1.amazonaws.com  https://ci3.googleusercontent.com  https://categories.api.godaddy.com  https://homesforveterans.us  https://thecallonmefoundation.com  http://supsystic.com  https://f001.backblazeb2.com  https://syndication.twitter.com  https://download-monitor.com  https://seal.godaddy.com  https://ds9ywulh7jrls.cloudfront.net  https://secure.gravatar.com https://ts.w.org https://s.w.org https://ps.w.org; default-src 'self'; script-src 'self' 'unsafe-inline' data:  https://www.gstatic.com  https://www.google.com  https://chimpstatic.com  https://seal.godaddy.com  https://www.googletagmanager.com  https://maps.googleapis.com  https://www.google-analytics.com  https://connect.facebook.net  https://cdn.ywxi.net  https://platform.twitter.com  https://img1.wsimg.com  https://captcha.wpsecurity.godaddy.com  https://infird.com  blob:  https://sc-static.net  https://cdnjs.cloudflare.com  https://ds9ywulh7jrls.cloudfront.net  https://apis.google.com  https://a.mysteelcdn.com  https://players.brightcove.net  https://embed.homeyou.com  https://secured-pixel.com  'unsafe-eval'; script-src-elem 'self' 'unsafe-inline' https://www.gstatic.com  https://www.google.com  https://chimpstatic.com  https://seal.godaddy.com  https://www.googletagmanager.com  https://maps.googleapis.com  https://www.google-analytics.com  https://connect.facebook.net  https://cdn.ywxi.net  https://platform.twitter.com  https://img1.wsimg.com  https://captcha.wpsecurity.godaddy.com  https://infird.com  blob:  https://sc-static.net  https://cdnjs.cloudflare.com  https://ds9ywulh7jrls.cloudfront.net  https://apis.google.com  https://a.mysteelcdn.com  https://players.brightcove.net  https://embed.homeyou.com  https://secured-pixel.com ; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com  https://cdn.honey.io  https://adblockers.opera-mini.net  https://www.gstatic.com  https://cdnjs.cloudflare.com  https://ds9ywulh7jrls.cloudfront.net ; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com  https://cdn.honey.io  https://adblockers.opera-mini.net  https://www.gstatic.com  https://cdnjs.cloudflare.com  https://ds9ywulh7jrls.cloudfront.net ; font-src 'self' https://fonts.gstatic.com  https://static.zip.co  https://croissant-services-data-public-assets-us-east-2-production.s3.us-east-2.amazonaws.com  data:; frame-src 'self' https://www.google.com  https://www.youtube.com  https://mozbar.moz.com  https://support.google.com  https://www.googletagmanager.com  https://www.facebook.com  https://platform.twitter.com  http://www.youtube.com  https://docs.google.com  https://www.elegantthemes.com  https://www.zeffy.com  https://m.facebook.com  blob:; media-src 'self' data:  https://upload.wikimedia.org;  connect-src 'self' https://www.google-analytics.com  https://maps.googleapis.com  https://region1.google-analytics.com  https://ai.elegantthemes.com  https://translate.googleapis.com  https://cloud.elegantthemes.com  https://s3-us-west-2.amazonaws.com  https://www.google.com  https://events.api.secureserver.net  https://csp.secureserver.net  https://img1.wsimg.com  https://get663.com  data:  https://release-notes.godaddy.com  https://ds9ywulh7jrls.cloudfront.net  https://www.googletagmanager.com  https://localhost  https://overbridgenet.com  blob:  https://stats.mysteel.com  https://house-fastly-signed-us-east-1-prod.brightcovecdn.com;  worker-src 'self' blob:;  report-uri https://dnjmcl.org/wp-json/rsssl/v1/csp?rsssl_apitoken=295515986; 1
default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; report-uri /csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net cash-f.squarecdn.com https://client.crisp.chat https://plugin-magento-ui.glopalservice.com *.fontawesome.com https://fonts.bunny.net *.cloudflare.com fonts.gstatic.com/ maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://applepay.cdn-apple.com applepay.cdn-apple.com www.promessedefleurs.de data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com p.monetico-services.com www.promessedefleurs.de 'self' 'unsafe-inline'; frame-ancestors www.promessedefleurs.de 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ * ct.pinterest.com *.payplug.com *.dalenys.com https://applepay.cdn-apple.com api-qa.payplug.com secure-qa.payplug.com www.promessedefleurs.de 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io * https://images.unsplash.com https://image.crisp.chat *.google.com *.google.fr *.google.ie *.jardindupicvert.com *.jardindupicvert.com.localhost *.promessedefleurs.com *.promessedefleurs.com.localhost cl.avis-verifies.com ct.pinterest.com bat.bing.com www.google.com.vn https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com https://firebasestorage.googleapis.com https://secure-magenta.dalenys.com bzr.openai.com https://redchamps.com *.openstreetmap.fr *.openstreetmap.org unpkg.com www.promessedefleurs.de data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://maps.googleapis.com https://player.vimeo.com https://client.crisp.chat *.google.com *.google.fr *.google.ie *.googletagmanager.com *.googleadservices.com cl.avis-verifies.com bat.bing.com s.pinimg.com https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com cdn-renderer.glopalstore.com *.avada.io *.shopify.com https://cdnjs.cloudflare.com https://secure-magenta.dalenys.com https://applepay.cdn-apple.com api-qa.payplug.com cdn.payplug.com https://cdn.payplug.com cdn-qa.payplug.com https://cdn-qa.payplug.com *.clarity.ms bzrcdn.openai.com https://unpkg.com/pwacompat www.promessedefleurs.de 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app https://client.crisp.chat https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://secure-magenta.dalenys.com unpkg.com www.promessedefleurs.de 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.promessedefleurs.de 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io * https://maps.googleapis.com https://player.vimeo.com https://client.crisp.chat wss://client.relay.crisp.chat https://plugins.crisp.chat *.doubleclick.net *.jardindupicvert.com *.jardindupicvert.com.localhost *.promessedefleurs.com *.promessedefleurs.com.localhost ct.pinterest.com https://api-plugin-facade.glopalservice.com https://cognito-idp.eu-west-1.amazonaws.com api.glopaltranslator.com https://get.geojs.io *.avada.io *.clarity.ms c.bing.com bzr.openai.com bzrcdn.openai.com *.openstreetmap.org *.arcgis.com www.promessedefleurs.de 'self' 'unsafe-inline'; child-src www.promessedefleurs.de http: https: blob: 'self' 'unsafe-inline'; default-src cl.avis-verifies.com www.promessedefleurs.de 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.tabby.ai cdn.tabby.sa fonts.googleapis.com storage.googleapis.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com checkout.tabby.ai checkout.tabby.sa *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.tabby.ai cdn.tabby.sa fonts.googleapis.com storage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.segment.com www.google.com cdn.sift.com score.jcsc.online seondf.com deviceinf.com getdeviceinf.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.segment.com api.segment.com api.segment.io api.amplitude.com *.seondfresolver.com *.deviceinfresolver.com *.getdeviceinfresolver.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.seondnsresolve.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' https://images.reliqra.com data:; connect-src 'self' https://vwfaclyvcryjkydmqcnd.supabase.co wss://vwfaclyvcryjkydmqcnd.supabase.co; font-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none' 1
font-src cash-f.squarecdn.com *.gstatic.com 'self' data: https://widgets.trustedshops.com fonts.gstatic.com *.cdnfonts.com *.fonts.net *.googleusercontent.com *.hotjar.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.cardcomplete.com *.facebook.com *.hubspot.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors 'self'; frame-src player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com * *.bing.com *.cardcomplete.com *.doubleclick.net *.facebook.com *.google.com *.googletagmanager.com *.hs-sites.com *.hubspot.com leaselink.pl *.leaselink.pl *.publitas.com snazzymaps.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src widgets.magentocommerce.com data: *.vimeocdn.com i.ytimg.com *.youtube.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com * https://images.unsplash.com *.gstatic.com *.googleapis.com *.hsforms.net *.hsforms.com 'self' data: https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com *.googletagmanager.com *.google-analytics.com www.googletagmanager.com ssl.gstatic.com www.gstatic.com airpress.nl *.bing.com *.bing.net *.clarity.ms *.doubleclick.net *.facebook.com *.facebook.net *.googleadservices.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bi www.google.bj www.google.bs www.google.bt www.google.by www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.bw www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ls www.google.co.ma www.google.com.af www.google.com.ag www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bn www.google.com.bo www.google.com.br www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.fj www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.jm www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.ly www.google.com.mm www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.ni www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.pg www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sl www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vc www.google.com.vn www.google.co.mz www.google.co.nz www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.vi www.google.co.za www.google.co.zm www.google.co.zw www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gg www.google.gl www.google.gm www.google.gr www.google.gy www.google.hn www.google.hr www.google.ht www.google.hu www.google.ie www.google.im www.google.iq www.google.is www.google.it www.google.je www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.mv www.google.mw www.google.ne www.google.nl www.google.no www.google.pl www.google.ps www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.sc www.google.se www.google.si www.google.sk www.google.sm www.google.sn www.google.so www.google.sr www.google.td www.google.tg www.google.tl www.google.tm www.google.tn www.google.tt www.google.vu google.com *.google.com *.googlesyndication.com *.googleusercontent.com *.hscollectedforms.net *.hubspot.com *.leaselink.pl *.licdn.com *.linkedin.com *.orbitvu.co orbitvu.co data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com d5yoctgpv4cpx.cloudfront.net p2iqhncxyh.execute-api.eu-central-1.amazonaws.com maps.googleapis.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.googletagmanager.com tagmanager.google.com *.beslist.nl *.bing.com *.clarity.ms *.createsend1.com *.doubleclick.net *.facebook.com *.facebook.net *.googleadservices.com *.google-analytics.com *.googlesyndication.com *.hotjar.com *.hsadspixel.net *.hs-analytics.net *.hs-banner.com *.hscollectedforms.net *.hsleadflows.net *.hs-scripts.com *.hubspot.com *.hubspotfeedback.com *.leaselink.pl *.licdn.com *.orbitvu.co orbitvu.co *.publitas.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.cash.app *.gstatic.com *.googleapis.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com tagmanager.google.com fonts.google.com *.fonts.net *.google.com *.googletagmanager.com *.orbitvu.co 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com * d5yoctgpv4cpx.cloudfront.net p2iqhncxyh.execute-api.eu-central-1.amazonaws.com maps.googleapis.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.analytics.google.com *.googletagmanager.com *.beslist.nl *.bing.com *.bing.net *.clarity.ms *.doubleclick.net *.facebook.com *.googleadservices.com www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bf www.google.bg www.google.bj www.google.by www.google.ca www.google.cd www.google.cf www.google.cg www.google.ch www.google.ci www.google.cl www.google.cm www.google.co.ao www.google.co.cr www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bo www.google.com.br www.google.com.co www.google.com.cu www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.gh www.google.com.gi www.google.com.gt www.google.com.hk www.google.com.kh www.google.com.lb www.google.com.ly www.google.com.mt www.google.com.mx www.google.com.my www.google.com.ng www.google.com.ni www.google.com.om www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.pr www.google.com.py www.google.com.qa www.google.com.sa www.google.com.sg www.google.com.sv www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.th www.google.co.tz www.google.co.ug www.google.co.uk www.google.co.ve www.google.co.za www.google.cv www.google.cz www.google.de www.google.dj www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ga www.google.ge www.google.gm www.google.gr www.google.hn www.google.hr www.google.hu www.google.ie www.google.is www.google.it www.google.je www.google.kz www.google.li www.google.lt www.google.lu www.google.lv www.google.md www.google.mg www.google.mk www.google.ml www.google.mn www.google.mu www.google.ne www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.rw www.google.se www.google.si www.google.sk www.google.sn www.google.so www.google.sr www.google.td www.google.tg www.google.tn *.google.com google.com *.googlesyndication.com *.hotjar.com *.hotjar.io *.hscollectedforms.net *.hubapi.com *.hubspot.com *.leaselink.pl *.linkedin.com *.orbitvu.cloud *.orbitvu.co 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://34fe0f49-adc6-4a63-81d9-a8b8df7172b9.sansec.watch/; report-to report-endpoint; 1
worker-src blob:; font-src fonts.gstatic.com *.kxcdn.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.cloudflare.com assets.livecall.io *.typekit.net *.bootstrapcdn.com *.trustedshops.com *.easypack24.net data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * sandbox.przelewy24.pl secure.przelewy24.pl 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com assets.livecall.io *.facebook.com facebook.net *.facebook.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * secure.payu.com merch-prod.snd.payu.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.gstatic.com *.fbcdn.net *.disqus.com https://firebasestorage.googleapis.com *.google.pl assets.livecall.io *.cloudflare.com https://cdn.klarna.com *.magentocommerce.com *.paypal.com *.tpay.com *.payu.com https://s.ytimg.com *.usercentrics.eu translate.googleapis.com facebook.com *.facebook.com facebook.net *.facebook.net aktywnybaner.rzetelnafirma.pl *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com static.przelewy24.pl www.gstatic.com gstatic.com static.payu.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.google.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com *.disqus.com *.avada.io *.cloudflare.com assets.livecall.io *.google-analytics.com *.googletagmanager.com translate.googleapis.com *.trustedshops.com *.usercentrics.eu *.tpay.com *.paypal.com secure.payu.com *.easypack24.net *.unpkg.com *.jsdelivr.net *.mapbox.com *.facebook.net bam.eu01.nr-data.net js-agent.newrelic.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com sandbox.przelewy24.pl secure.przelewy24.pl secure.snd.payu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.cloudflare.com assets.livecall.io *.typekit.net *.bootstrapcdn.com *.trustedshops.com *.usercentrics.eu *.przelewy24.pl *.easypack24.net fonts.googleapis.com translate.googleapis.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com assets.livecall.io 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com https://get.geojs.io *.avada.io *.cloudflare.com assets.livecall.io *.google-analytics.com *.google.com *.paypal.com bam.eu01.nr-data.net facebook.com *.facebook.com facebook.net *.facebook.net stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com google.com sandbox.przelewy24.pl secure.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com secure.payu.com merch-prod.snd.payu.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self' https:; connect-src 'self' https: https://api.amazingtunes.com https://apiv3.amazingtunes.com https://analytics.amazing-media.com; font-src 'self' https: data:; img-src 'self' https: data: blob:; media-src 'self' https: blob:; object-src 'none'; script-src 'self' https: https://analytics.amazing-media.com 'nonce-'; style-src 'self' https: 'unsafe-inline'; worker-src 'self' blob: 1
object-src 'none';base-uri 'self';script-src 'nonce-d4IYBmL1IQdzqWtZ2k5tjg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'nonce-NzA2ZGFkNjUtNDk2ZS00MDM1LTkyOTQtOGE4MWJhMDBjZTUz' https://api-maps.yandex.ru https://yastatic.net; style-src 'self' 'unsafe-inline' https://yastatic.net; img-src 'self' data: blob: https://media.b2b-mems.ru https://*.storage.beget.cloud https://*.maps.yandex.net https://yastatic.net; font-src 'self' data: https://yastatic.net; connect-src 'self' https://b2b-mems.ru https://mon.b2b-mems.ru https://sentry.b2b-mems.ru https://*.ingest.sentry.io https://api-maps.yandex.ru https://*.maps.yandex.net https://yastatic.net; media-src 'self' blob: https://*.storage.beget.cloud; worker-src 'self' blob:; object-src 'none'; frame-src 'self' https://*.storage.beget.cloud; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; manifest-src 'self'; report-uri /api/v1/security/csp-report; upgrade-insecure-requests 1
default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net https://snap.licdn.com https://*.clarity.ms https://*.posthog.com https://s.adroll.com https://cdn.brevo.com https://tracker-doc.brevo.com https://*.bocklighting.com https://googleads.g.doubleclick.net https://chat-assets.frontapp.com https://sibautomation.com https://cdn.by.wonderpush.com https://challenges.cloudflare.com; connect-src 'self' https://www.googletagmanager.com https://connect.facebook.net https://snap.licdn.com https://*.clarity.ms https://*.posthog.com https://s.adroll.com https://cdn.brevo.com https://tracker-doc.brevo.com https://*.bocklighting.com https://googleads.g.doubleclick.net https://chat-assets.frontapp.com https://sibautomation.com https://cdn.by.wonderpush.com https://challenges.cloudflare.com https://*.facebook.com https://px.ads.linkedin.com https://*.adroll.com https://*.brevo.com https://*.ingest.us.sentry.io https://www.google.com https://analytics.google.com https://www.google-analytics.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://www.googleadservices.com https://api.mapbox.com https://events.mapbox.com blob: data:; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; frame-src 'self' https://www.googletagmanager.com https://*.facebook.com https://*.bocklighting.com https://www.google.com https://challenges.cloudflare.com blob:; manifest-src 'self' https://cdn.by.wonderpush.com; media-src 'self' data: blob: https:; worker-src 'self' blob:; report-uri https://o316506.ingest.us.sentry.io/api/4507249538433024/security/?sentry_key=ef6b86c942bdce93a3a443b301d4af8a; report-to csp-endpoint 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://fonts.gstatic.com *.csstorage.co.uk eadn-wc03-10372812.nxedge.io cdnjs.cloudflare.com widget-v4.tidiochat.com *.fontawesome.com https://www.google.com https://www.gstatic.com *.alothemes.com *.magepow.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com self www.google.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.csstorage.co.uk *.stripe.com td.doubleclick.net *.googletagmanager.com *.cookiebot.com *.livechatinc.com www.gstatic.com apis.google.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.csstorage.co.uk *.stripe.com cdn-cookieyes.com *.cookiebot.com www.google.co.in pagead2.googlesyndication.com cdnjs.cloudflare.com *.livechatinc.com *.ecologi.com *.alothemes.com *.magepow.com https://meetanshi.com/media/logo.png data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com apis.google.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.csstorage.co.uk *.stripe.com cdnjs.cloudflare.com eadn-wc03-10372812.nxedge.io code.tidio.co widget-v4.tidiochat.com script.hotjar.com static.hotjar.com cdn-cookieyes.com *.livechatinc.com *.usercentrics.eu *.cookiebot.com 'sha256-9JWKccqJbeUEIGEBn4BCC9KAa2uRql8HS1IBfHND3EU=' 'sha256-jRldTVUvheAfvAJW2wZuyV6AX+/1DXnyJHXLD7+3c0Y=' 'sha256-5PFIHBa45EIXsZ/bBOzSpVJJyfLkD/Iw6Lsc9MIoUr4=' 'sha256-8DQNtHct5N8gZ1ckcFW5FjZymOGbDR8A9BL4/IovyH0=' 'sha256-1JOUzpEspKUZEZY2dGY+MqJv7T4BeEVTNcO7+FouBRw=' 'sha256-fgvSgk1+jCbvsnADkpaFg398EDr2klI1XSZqZtSBO8M=' 'sha256-qudg9NAvriekk2PbzQx6WTAb31T2Rz3WoF5wWtSqH/o=' 'sha256-SOAGIUGMVFX4fasRxV6JqefPM9zsr2sKAJmRIOB/5ag=' 'sha256-6wE++vhYc0n6SCBUKng5uM4ts4LIxMrmbbo4+efE8Qs=' 'sha256-7OkNEooxS10uyqO+w90vhXRPPGBXdiTViwOlknROOLI=' 'sha256-sMlcXNhcI7C1NFO+3aGv0rP8mJORT8/okwy2naeKj90=' 'sha256-7k9XNaosrGR5NUWKookL+98prOngRWoBKgaJ7kNZqQ8=' 'sha256-91Xi4LlKIs7rj3LP86WkOsEEIEU0JygerD1c2gGF1cI=' 'nonce-aXduOGhoY3JzcHc2NTVwN2J0bG5rNXhnYzJmcnBsczE=' 'sha256-db/Eei5Atlo0XGgauQRCijkazL0INr8DKZ0+fGb/CEY=' 'sha256-db/Eei5Atlo0XGgauQRCijkazL0INr8DKZ0+fGb/CEY=' 'unsafe-inline' *.alothemes.com *.magepow.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.csstorage.co.uk cdnjs.cloudflare.com *.livechatinc.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com *.alothemes.com *.magepow.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.csstorage.co.uk *.tidiochat.com *.livechatinc.com 'self' 'unsafe-inline'; manifest-src *.csstorage.co.uk 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.csstorage.co.uk *.stripe.com wss://socket.tidio.co *.usercentrics.eu cdn-cookieyes.com *.cookieyes.com *.cookiebot.com ad.doubleclick.net *.g.doubleclick.net pagead2.googlesyndication.com *.hotjar.io wss://ws.hotjar.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com *.alothemes.com *.magepow.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-r5r_C3drn2oz0m36zuybgw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-mKvntIatqjsykYkOFLSqHw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src https://media.ltsecurityinc.com https://static.ltsecurityinc.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.authorize.net *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://player.vimeo.com https://www.youtube-nocookie.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * https://plumrocket.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://media.ltsecurityinc.com https://static.ltsecurityinc.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://media.ltsecurityinc.com https://static.ltsecurityinc.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com s7.addthis.com *.avada.io https://player.vimeo.com https://www.youtube.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://media.ltsecurityinc.com https://static.ltsecurityinc.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com maxcdn.bootstrapcdn.com http://fonts.googleapis.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com ekr.zdassets.com/ https://get.geojs.io *.avada.io https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.clarity.ms 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'none';                              form-action 'none';                              child-src 'Self' data: https://www.google-analytics.com https://www.youtube.com https://player.vimeo.com https://ohchr-standup.prezenz.com https://my.walls.io https://walls.io https://www.instagram.com http://ohchr-standup.prezenz.com https://www.youtube-nocookie.com https://w.soundcloud.com https://platform.twitter.com;        frame-src https://*.securly.com data: https://www.google-analytics.com https://www.youtube.com https://player.vimeo.com https://ohchr-standup.prezenz.com https://my.walls.io https://walls.io https://www.instagram.com http://ohchr-standup.prezenz.com https://www.youtube-nocookie.com https://w.soundcloud.com https://platform.twitter.com;                             frame-ancestors 'none' ;                              img-src 'Self' data: https://www.googletagmanager.com https://translate.google.com https://fonts.gstatic.com https://cdn.honey.io https://www.google-analytics.com https://i.vimeocdn.com https://i.ytimg.com blob: https://www.standup4humanrights.org;                             style-src 'Self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net https://adblockers.opera-mini.net https://cdn.honey.io https://www.gstatic.com;                             style-src-attr 'Self' 'report-sample' 'unsafe-inline';                             style-src-elem 'Self' 'report-sample' 'unsafe-inline' https://p.typekit.net https://use.typekit.net https://www.gstatic.com https://platform.instagram.com https://cdn.honey.io https://boxclone.com https://fonts.googleapis.com https://fonts.googleapis.com:443;                             script-src 'Self' 'unsafe-inline' 'report-sample' 'unsafe-eval' https://plugins.flockler.com https://connect.facebook.net https://www.googletagmanager.com https://www.google-analytics.com https://platform.twitter.com;                             script-src-attr 'Self' 'unsafe-inline';                             script-src-elem 'Self' 'report-sample' 'unsafe-inline' https://plugins.flockler.com https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://www.google-analytics.com https://sc-static.net https://platform.instagram.com https://platform.twitter.com https://fonts.googleapis.com:443;                             connect-src 'Self' https://ohchr-standup.prezenz.com https://*.google-analytics.com;                             font-src 'Self' data: https://use.typekit.net https://fonts.gstatic.com;                             media-src 'Self' data:;                             worker-src 'none';                             object-src 'Self';                             manifest-src 'Self' https://www.standup4humanrights.org https://standup4humanrights.org;                             report-uri https://fawedsitereporting.azurewebsites.net/api/csp-report?;                             report-to default                              1
object-src 'none';base-uri 'self';script-src 'nonce-Br_S9jRHgYGr7cQ4Lqg13w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://applepay.cdn-apple.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com *.google.com/ *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://applepay.cdn-apple.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com *.google.nl https://static.buckaroo.nl https://www.buckaroo.nl https://www.paypalobjects.com https://pay.google.com https://developers.google.com https://applepay.cdn-apple.com https://www.magezon.com https://firebasestorage.googleapis.com cdn.magmodules.eu premiumropes.com www.premiumropes.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.matomo.cloud https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com https://www.sandbox.paypal.com https://applepay.cdn-apple.com https://pay.google.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com premiumropes.matomo.cloud https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://applepay.buckaroo.io https://smp-paymentservices.apple.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://consent-eu.cookiefirst.com https://*.hotjar.com https://www.7-groupoperation.com https://www.google.com https://www.gstatic.com https://cdn.jsdelivr.net https://mktdplp102cdn.azureedge.net https://mkiaustria.bamboohr.com; style-src 'self' 'unsafe-inline' https://resources.bamboohr.com; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://*.hotjar.com wss://*.hotjar.com https://consent-eu.cookiefirst.com https://www.7-groupoperation.com https://mktdplp102cdn.azureedge.net https://56e0ff7be505438aafb9244cd8abdcbb.svc.dynamics.com; frame-src 'self' https://www.google.com https://www.youtube-nocookie.com https://www.youtube.com https://player.vimeo.com https://sketchfab.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests; report-uri /csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://v2.zopim.com https://cdn.travel-insides.com https://www.googletagmanager.com https://www.google-analytics.com https://static.zdassets.com; style-src 'self' 'unsafe-inline' https://cdn.travel-insides.com https://fonts.googleapis.com; img-src 'self' data: https://cdn.travel-insides.com https://www.google-analytics.com https://d3plhpfg3500fc.cloudfront.net; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://ekr.zdassets.com https://stream.travel-dev.com https://www.google-analytics.com https://hop2travel.zendesk.com wss://widget-mediator.zopim.com; report-uri /csp-report-endpoint; 1
style-src-attr 'unsafe-inline'; style-src-elem https://*.adobe.com https://fonts.googleapis.com https://*.fontawesome.com https://fonts.bunny.net https://maxcdn.bootstrapcdn.com 'self' https://p.typekit.net https://use.typekit.net js.klarna.com *.klarna.com *.klarnacdn.net www.googletagmanager.com *.googletagmanager.com tagmanager.google.com www.google-analytics.com https://consentcdn.cookiebot.com consent.cookiebot.com assets.adobedtm.com  *.adobe.com www.googleadservices.com googleads.g.doubleclick.net analytics.google.com *.newrelic.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com www.gstatic.com/recaptcha/ www.google.com/recaptcha/ use.typekit.net *.typekit.net google.com *.google.com *.svea.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.gstatic.com maps.googleapis.com *.trustpilot.com 'unsafe-inline'; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.klarnacdn.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://*.svea.com https://*.vipps.no https://*.trustly.com 'self' 'unsafe-inline'; frame-ancestors https://www.cycleurope.com https://www.cycleurope.com/kiosk-menu/ 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://*.svea.com www.googletagmanager.com consentcdn.cookiebot.com js.klarna.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://www.facebook.com www.google.se www.google.dk connect.facebook.net magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com https://meetanshi.com flagpedia.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.svea.com *.googletagmanager.com tagmanager.google.com https://consentcdn.cookiebot.com consent.cookiebot.com js.klarna.com assets.adobedtm.com  www.gstatic.com/recaptcha/ www.google.com/recaptcha/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.gstatic.com maps.googleapis.com *.trustpilot.com *.fontawesome.com analytics.tiktok.com *.tiktok.com *.disqus.com *.avada.io *.shopify.com https://www.googletagmanager.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://*.adobe.com fonts.googleapis.com https://fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net https://maxcdn.bootstrapcdn.com 'self' https://p.typekit.net https://use.typekit.net *.klarnacdn.net js.klarna.com maxcdn.bootstrapcdn.com *.gstatic.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.klarnaservices.com *.klarna.com *.klarnaevt.com https://consentcdn.cookiebot.com *.doubleclick.net *.googlesyndication.com analytics.tiktok.com *.tiktok.com https://get.geojs.io *.avada.io *.google-analytics.com https://www.google-analytics.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.gstatic.com maps.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://e049d1fa-0b09-44e7-9fff-ac8f3d5208a3.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'nonce-R7ocUe8w91Xn2zfgMoblBPdCmst7xuTNgtpVOqnFhvOe9qe6GKN8lA' 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com; style-src-elem 'self' 'nonce-R7ocUe8w91Xn2zfgMoblBPdCmst7xuTNgtpVOqnFhvOe9qe6GKN8lA' 'report-sample'; media-src 'self' blob:; report-uri https://www.gdl.de/@http-reporting?csp=report&requestTime=1789290821410119&requestHash=080838f977e4b1d1cd4be68a561de9683972bbba 1
font-src *.fontawesome.com *.google.com *.gstatic.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.pagar.me *.netsgroup.com *.sibs.pt *.seglan.com *.secureacs.com *.rsa3dsauth.com *.apata.io *.cardinalcommerce.com *.santander.com.br *.bradesco.com.br *.bradesco *.stone.com.br *.nubank.com.br *.itau.com.br *.bb.com.br *.caixa.gov.br *.inter.co *.bancointer.com.br *.c6bank.com.br *.bancobmg.com.br *.safra.com.br *.sicoob.com.br *.banrisul.com.br *.banrisul.b.br *.banorte.com *.xpi.com.br *.btgpactual.com *.btgpactualdigital.com *.mercadopago.com.br *.mercadopago.com *.picpay.com *.amedigital.com *.neon.tech *.neon.com.br *.wise.com *.revolut.com *.sandbox.3dsecure.io *.google.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com player.vimeo.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com *.pagar.me *.netsgroup.com *.sibs.pt *.seglan.com *.secureacs.com *.rsa3dsauth.com *.apata.io *.cardinalcommerce.com *.santander.com.br *.bradesco.com.br *.bradesco *.stone.com.br *.nubank.com.br *.itau.com.br *.bb.com.br *.caixa.gov.br *.inter.co *.bancointer.com.br *.c6bank.com.br *.bancobmg.com.br *.safra.com.br *.sicoob.com.br *.banrisul.com.br *.banrisul.b.br *.banorte.com *.xpi.com.br *.btgpactual.com *.btgpactualdigital.com *.mercadopago.com.br *.mercadopago.com *.picpay.com *.amedigital.com *.neon.tech *.neon.com.br *.wise.com *.revolut.com *.sandbox.3dsecure.io *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de cdn.mundipagg.com api.pagar.me *.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com *.avada.io 3ds2.pagar.me 3ds2-sdx.pagar.me *.google.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com *.googleapis.com *.google.com unsafe-inline *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com https://get.geojs.io *.avada.io api.mundipagg.com api.pagar.me brasilapi.com.br viacep.com.br servicodados.ibge.gov.br *.google.com google.com pay.sandbox.google.com www.paypal.com www.sandbox.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-Bt7HC6JvExxm3u1hpQhiFQ==' https://tag.goadopt.io https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://cdn.jsdelivr.net https://code.jquery.com https://cdnjs.cloudflare.com; script-src-elem 'self' https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://cdn.jsdelivr.net https://code.jquery.com https://cdnjs.cloudflare.com https://connect.facebook.net https://snap.licdn.com https://www.redditstatic.com https://scripts.clarity.ms https://unpkg.com https://tag.goadopt.io https://connect.lightera.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://cdn.jsdelivr.net https://fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' https://www.gstatic.com https://cdn.jsdelivr.net https://fonts.googleapis.com; img-src 'self' data: https://www.google.com https://www.gstatic.com https://www.facebook.com https://px.ads.linkedin.com https://alb.reddit.com https://www.google.com.br; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' data:https://www.google-analytics.com https://analytics.google.com https://www.google.com https://www.gstatic.com https://cdn.jsdelivr.net https://o.clarity.ms https://px.ads.linkedin.com https://connect.lightera.com https://tag.goadopt.io; frame-src https://www.google.com; 1
script-src sdk.privacy-center.org spir.hit.gemius.pl cnc.daktela.com widget.packeta.com challenges.cloudflare.com *.google.com *.smartlook.com *.smartsuppcdn.com *.smartsupp.com static.hotjar.com script.hotjar.com *.googletagmanager.com a.opmnstr.com *.google-analytics.com *.googleadservices.com *.smartsuppchat.com googleads.g.doubleclick.net connect.facebook.net 2.adform.net s2.adform.net track.adform.net im9.cz *.im9.cz c.imedia.cz ssl.heureka.cz www.heureka.cz cdn.heureka.group www.zbozi.cz c.seznam.cz 1gr.cz sgtm.signals.cz cdn.cpex.cz *.mapy.cz www.ppl.cz www.chatbase.co 'self' 'unsafe-inline' 'unsafe-eval';script-src-elem sdk.privacy-center.org spir.hit.gemius.pl cnc.daktela.com widget.packeta.com challenges.cloudflare.com *.google.com *.smartlook.com *.smartsuppcdn.com *.smartsupp.com static.hotjar.com script.hotjar.com *.googletagmanager.com a.opmnstr.com *.google-analytics.com *.googleadservices.com *.smartsuppchat.com googleads.g.doubleclick.net connect.facebook.net 2.adform.net s2.adform.net track.adform.net im9.cz *.im9.cz c.imedia.cz ssl.heureka.cz www.heureka.cz cdn.heureka.group www.zbozi.cz c.seznam.cz 1gr.cz sgtm.signals.cz cdn.cpex.cz *.mapy.cz www.ppl.cz www.chatbase.co 'self' 'unsafe-inline' 'unsafe-eval';style-src tagmanager.google.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com *.smartsuppcdn.com translate.googleapis.com fonts.googleapis.com www.ppl.cz api.mapy.cz 'self' 'unsafe-inline';style-src-elem tagmanager.google.com cdnjs.cloudflare.com maxcdn.bootstrapcdn.com *.smartsuppcdn.com translate.googleapis.com fonts.googleapis.com www.ppl.cz api.mapy.cz 'self' 'unsafe-inline';report-uri /csp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com *.amazonaws.com *.mco.at data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com piwik.mco-tv.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com assets.braintreegateway.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site piwik.mco-tv.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https: blob: 'unsafe-inline' 'unsafe-eval'; img-src https: data:; font-src 'self' data: https: 'unsafe-inline'; connect-src https: wss: 'unsafe-inline'; report-uri https://hi.report-uri.com/r/d/csp/reportOnly 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; worker-src 'self' blob:; manifest-src 'self'; connect-src 'self' https://*.walletconnect.com https://*.walletconnect.org https://*.reown.com wss://*.walletconnect.org wss://*.walletconnect.com https://*.binance.org https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com https://*.walletconnect.com https://*.walletconnect.org https://www.youtube.com; report-uri /csp-report 1
default-src 'self' https://cdn.l7print.ru; script-src 'self' 'unsafe-inline' https://cdn.l7print.ru https://www.googletagmanager.com https://mc.yandex.ru https://mc.webvisor.org; style-src 'self' 'unsafe-inline' https://cdn.l7print.ru https://fonts.googleapis.com; img-src 'self' data: https: blob:; font-src 'self' data: https://cdn.l7print.ru https://fonts.gstatic.com; connect-src 'self' https://cdn.l7print.ru https://mc.yandex.ru wss://mc.yandex.ru https://mc.webvisor.org wss://mc.webvisor.org https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net; frame-src 'self' https://www.googletagmanager.com; media-src 'self' https://cdn.l7print.ru; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self' *.easyship.com td.doubleclick.net www.recaptcha.net *.linkedin.com storage.googleapis.com *.sentry.io *.hubspot.com analytics.google.com bat.bing.com;manifest-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' www.google.com www.gstatic.com www.gstatic.cn www.recaptcha.net js.stripe.com www.google-analytics.com browser.sentry-cdn.com js.sentry-cdn.com www.googletagmanager.com cdn-cookieyes.com snap.licdn.com bat.bing.com js.hs-scripts.com d.impactradius-event.com js.usemessages.com js.hs-banner.com js.hsleadflows.net js.hs-analytics.net;style-src 'self' 'unsafe-inline' fonts.googleapis.com fonts.google.com;font-src 'self' data: fonts.gstatic.com fonts.gstatic.cn fonts.googleapis.com fonts.google.com js.stripe.com 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net cash-f.squarecdn.com https://client.crisp.chat https://plugin-magento-ui.glopalservice.com *.fontawesome.com https://fonts.bunny.net *.cloudflare.com fonts.gstatic.com/ maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com https://applepay.cdn-apple.com applepay.cdn-apple.com www.promessedefleurs.es data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com p.monetico-services.com www.promessedefleurs.es 'self' 'unsafe-inline'; frame-ancestors www.promessedefleurs.es 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ * ct.pinterest.com *.payplug.com *.dalenys.com https://applepay.cdn-apple.com api-qa.payplug.com secure-qa.payplug.com www.promessedefleurs.es 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io * https://images.unsplash.com https://image.crisp.chat *.google.com *.google.fr *.google.ie *.jardindupicvert.com *.jardindupicvert.com.localhost *.promessedefleurs.com *.promessedefleurs.com.localhost cl.avis-verifies.com ct.pinterest.com bat.bing.com www.google.com.vn https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com https://firebasestorage.googleapis.com https://secure-magenta.dalenys.com bzr.openai.com https://redchamps.com *.openstreetmap.fr *.openstreetmap.org unpkg.com www.promessedefleurs.es data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com https://maps.googleapis.com https://player.vimeo.com https://client.crisp.chat *.google.com *.google.fr *.google.ie *.googletagmanager.com *.googleadservices.com cl.avis-verifies.com bat.bing.com s.pinimg.com https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com cdn-renderer.glopalstore.com *.avada.io *.shopify.com https://cdnjs.cloudflare.com https://secure-magenta.dalenys.com https://applepay.cdn-apple.com api-qa.payplug.com cdn.payplug.com https://cdn.payplug.com cdn-qa.payplug.com https://cdn-qa.payplug.com *.clarity.ms bzrcdn.openai.com https://unpkg.com/pwacompat www.promessedefleurs.es 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app https://client.crisp.chat https://cdn-redirector.glopal.com https://plugin-magento-ui.glopalservice.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://secure-magenta.dalenys.com unpkg.com www.promessedefleurs.es 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.promessedefleurs.es 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io * https://maps.googleapis.com https://player.vimeo.com https://client.crisp.chat wss://client.relay.crisp.chat https://plugins.crisp.chat *.doubleclick.net *.jardindupicvert.com *.jardindupicvert.com.localhost *.promessedefleurs.com *.promessedefleurs.com.localhost ct.pinterest.com https://api-plugin-facade.glopalservice.com https://cognito-idp.eu-west-1.amazonaws.com api.glopaltranslator.com https://get.geojs.io *.avada.io *.clarity.ms c.bing.com bzr.openai.com bzrcdn.openai.com *.openstreetmap.org *.arcgis.com www.promessedefleurs.es 'self' 'unsafe-inline'; child-src www.promessedefleurs.es http: https: blob: 'self' 'unsafe-inline'; default-src cl.avis-verifies.com www.promessedefleurs.es 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'unsafe-inline' https://pagead2.googlesyndication.com https://adservice.google.com https://www.googletagmanager.com *.google-analytics.com https://fundingchoicesmessages.google.com https://widget.spreaker.com *.doubleclick.net https://sync.search.spotxchange.com/; style-src 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://i.ytimg.com https://www.google-analytics.com https://www.spreaker.com/ https://www.facebook.com/ *.adtrafficquality.google *.doubleclick.net https://sync.search.spotxchange.com/; frame-src 'self' https://www.google.com https://www.youtube.com https://www.spreaker.com/ https://www.facebook.com/ https://*.googlesyndication.com https://tpc.googlesyndication.com https://fundingchoicesmessages.google.com https://widget.spreaker.com https://*.adtrafficquality.google https://googleads.g.doubleclick.net https://sync.search.spotxchange.com/ https://www.googleadservices.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://*.google-analytics.com https://www.shinystat.com/ https://www.facebook.com/ https://www.postpickr.com/ https://*.googlesyndication.com https://adservice.google.com https://fundingchoicesmessages.google.com https://*.adtrafficquality.google https://*.doubleclick.net https://googleads.g.doubleclick.net https://sync.search.spotxchange.com/ https://www.google.com https://www.googleadservices.com; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://static.cloudflareinsights.com https://www.googletagmanager.com https://tagassistant.google.com https://tagmanager.google.com https://accounts.google.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://www.google.com https://apis.google.com https://connect.facebook.net https://capi-automation.s3.us-east-2.amazonaws.com https://js.stripe.com https://*.js.stripe.com https://maps.googleapis.com https://consent.cookiefirst.com https://bzrcdn.openai.com https://cdn.lupasearch.com https://appleid.cdn-apple.com https://challenges.cloudflare.com https://web-sdk.smartlook.com; style-src 'self' 'unsafe-inline' https://accounts.google.com https://www.googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com https://www.gstatic.com https://consent.cookiefirst.com; img-src 'self' data: blob: https: https://www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://*.google-analytics.com https://*.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://google.com https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat https://www.facebook.com https://*.facebook.com https://*.stripe.com https://bzr.openai.com https://appleid.cdn-apple.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://api.klipshop.lt https://accounts.google.com https://www.googletagmanager.com https://tagassistant.google.com https://tagmanager.google.com https://google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://*.googleadservices.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://google.com https://*.google.com https://*.google.ad https://*.google.ae https://*.google.com.af https://*.google.com.ag https://*.google.al https://*.google.am https://*.google.co.ao https://*.google.com.ar https://*.google.as https://*.google.at https://*.google.com.au https://*.google.az https://*.google.ba https://*.google.com.bd https://*.google.be https://*.google.bf https://*.google.bg https://*.google.com.bh https://*.google.bi https://*.google.bj https://*.google.com.bn https://*.google.com.bo https://*.google.com.br https://*.google.bs https://*.google.bt https://*.google.co.bw https://*.google.by https://*.google.com.bz https://*.google.ca https://*.google.cd https://*.google.cf https://*.google.cg https://*.google.ch https://*.google.ci https://*.google.co.ck https://*.google.cl https://*.google.cm https://*.google.cn https://*.google.com.co https://*.google.co.cr https://*.google.com.cu https://*.google.cv https://*.google.com.cy https://*.google.cz https://*.google.de https://*.google.dj https://*.google.dk https://*.google.dm https://*.google.com.do https://*.google.dz https://*.google.com.ec https://*.google.ee https://*.google.com.eg https://*.google.es https://*.google.com.et https://*.google.fi https://*.google.com.fj https://*.google.fm https://*.google.fr https://*.google.ga https://*.google.ge https://*.google.gg https://*.google.com.gh https://*.google.com.gi https://*.google.gl https://*.google.gm https://*.google.gr https://*.google.com.gt https://*.google.gy https://*.google.com.hk https://*.google.hn https://*.google.hr https://*.google.ht https://*.google.hu https://*.google.co.id https://*.google.ie https://*.google.co.il https://*.google.im https://*.google.co.in https://*.google.iq https://*.google.is https://*.google.it https://*.google.je https://*.google.com.jm https://*.google.jo https://*.google.co.jp https://*.google.co.ke https://*.google.com.kh https://*.google.ki https://*.google.kg https://*.google.co.kr https://*.google.com.kw https://*.google.kz https://*.google.la https://*.google.com.lb https://*.google.li https://*.google.lk https://*.google.co.ls https://*.google.lt https://*.google.lu https://*.google.lv https://*.google.com.ly https://*.google.co.ma https://*.google.md https://*.google.me https://*.google.mg https://*.google.mk https://*.google.ml https://*.google.com.mm https://*.google.mn https://*.google.com.mt https://*.google.mu https://*.google.mv https://*.google.mw https://*.google.com.mx https://*.google.com.my https://*.google.co.mz https://*.google.com.na https://*.google.com.ng https://*.google.com.ni https://*.google.ne https://*.google.nl https://*.google.no https://*.google.com.np https://*.google.nr https://*.google.nu https://*.google.co.nz https://*.google.com.om https://*.google.com.pa https://*.google.com.pe https://*.google.com.pg https://*.google.com.ph https://*.google.com.pk https://*.google.pl https://*.google.pn https://*.google.com.pr https://*.google.ps https://*.google.pt https://*.google.com.py https://*.google.com.qa https://*.google.ro https://*.google.ru https://*.google.rw https://*.google.com.sa https://*.google.com.sb https://*.google.sc https://*.google.se https://*.google.com.sg https://*.google.sh https://*.google.si https://*.google.sk https://*.google.com.sl https://*.google.sn https://*.google.so https://*.google.sm https://*.google.sr https://*.google.st https://*.google.com.sv https://*.google.td https://*.google.tg https://*.google.co.th https://*.google.com.tj https://*.google.tl https://*.google.tm https://*.google.tn https://*.google.to https://*.google.com.tr https://*.google.tt https://*.google.com.tw https://*.google.co.tz https://*.google.com.ua https://*.google.co.ug https://*.google.co.uk https://*.google.com.uy https://*.google.co.uz https://*.google.com.vc https://*.google.co.ve https://*.google.co.vi https://*.google.com.vn https://*.google.vu https://*.google.ws https://*.google.rs https://*.google.co.za https://*.google.co.zm https://*.google.co.zw https://*.google.cat https://connect.facebook.net https://www.facebook.com https://graph.facebook.com properties: https://*.ecs.us-east-1.on.aws/events https://*.ecs.us-east-2.on.aws/events https://*.ecs.us-west-2.on.aws/events https://*.us-central1.run.app/events https://api.stripe.com https://maps.googleapis.com https://consent.cookiefirst.com https://edge.cookiefirst.com https://api.cookiefirst.com https://bzr.openai.com https://bzrcdn.openai.com https://cdn.lupasearch.com https://api.lupasearch.com https://appleid.apple.com https://challenges.cloudflare.com https://manager.eu.smartlook.cloud https://web-writer.eu.smartlook.cloud https://assets-proxy.smartlook.cloud; frame-src 'self' https://accounts.google.com https://www.googletagmanager.com https://tagassistant.google.com https://tagmanager.google.com https://www.google.com https://toolytics.pa.clients6.google.com https://www.facebook.com https://js.stripe.com https://*.js.stripe.com https://hooks.stripe.com https://appleid.apple.com https://challenges.cloudflare.com; worker-src 'self' blob:; media-src 'self' blob: https:; manifest-src 'self'; form-action 'self' https://www.facebook.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; report-uri https://821zgf9xawww.uriports.com/reports/report; report-to default 1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://media.api-sports.io https://flagcdn.com https://*.googleusercontent.com https://*.supabase.co; media-src 'self' blob: https:; connect-src 'self' https://*.supabase.co wss://*.supabase.co https://*.upstash.io https:; frame-src https:; font-src 'self' data:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' https://challenges.cloudflare.com https://api.mapbox.com; frame-src https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self' https://challenges.cloudflare.com https://api.mapbox.com; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none' 1
script-src https://rkistowski.de/site/ https://rkistowski.de/modules/ https://rkistowski.de/types/ https://rkistowski.de/cache/ https://rkistowski.de/js/ 'nonce-TTWkVXId87Q=' 'report-sample'; object-src 'none' 'report-sample'; base-uri 'none' 'report-sample'; report-to csp-endpoint ; report-uri https://rkistowski.de/api.php?mod=uf&action=securitypolicyreport_save&o=3 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com fonts.googleapis.com *.googleapis.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.nosto.com *.nos.to *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * services.paytrail.com paytrail.com *.paytrail.com epmt.nordea.fi *.nordea.com verkkopankki.danskebank.fi online.s-pankki.fi verkkomaksu.poppankki.fi verkkomaksu.omasp.fi auth.aktia.fi verkkomaksu.handelsbanken.fi verkkomaksu.saastopankki.fi online.alandsbanken.fi maksu.pivo.fi qa-maksu.pivo.fi v1-hub-staging.sph-test-solinor.com v1.api.paymenthighway.io *.paymenthighway.io *.mobilepay.fi 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.nosto.com *.nos.to *.addthis.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.nosto.com *.nos.to *.getqonfi.com agryghsjho.cloudimg.io imgsct.cookiebot.com https://at19.net https://bdt9.net https://ds1.nl https://dt51.net https://dt61.net https://fr135.net https://glp8.net https://jdt8.net https://jf79.net https://hs82.net https://lt45.net https://mt74.net https://ndt5.net https://rkn3.net *.ggpht.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com https://www.unifaunonline.se https://*.tile.openstreetmap.org/ flagpedia.net https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com cdn2.hubspot.net resources.paytrail.com *.amazonaws.com ssl.gstatic.com www.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.nosto.com *.nos.to https://cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.sendcloud.sc *.jsdelivr.net tagmanager.google.com fonts.google.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; connect-src https://tagging.gloeilampgoedkoop.be dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.nosto.com *.nos.to *.getqonfi.com *.gstatic.com data: https://get.geojs.io *.avada.io www.gstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.paytrail.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.googletagmanager.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https: 'self' 'unsafe-inline'; script-src https://tagging.gloeilampgoedkoop.be assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com https://cdn.jsdelivr.net *.nosto.com *.nos.to *.getqonfi.com consent.cookiebot.com *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com *.avada.io *.shopify.com https://api.unifaun.com js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com services.paytrail.com resources.paytrail.com *.sendcloud.sc *.jsdelivr.net tagmanager.google.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://gloeilampgoedkoop.be https: 'self' 'unsafe-inline' 'unsafe-eval'; 1
object-src 'none'; script-src 'nonce-aqYnQ9go3aJUUBLXhIJMMQAABZc' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; base-uri 'self'; report-uri https://www.koaspeer.com/csp_process.php; 1
default-src 'self'; script-src 'self' https://mc.yandex.ru https://mc.webvisor.org 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://mc.yandex.ru https://mc.webvisor.org; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https://mc.yandex.ru https://mc.webvisor.org; form-action 'self' https://auth.robokassa.ru https://merchant.robokassa.ru; frame-ancestors 'none'; base-uri 'self'; object-src 'none'; report-uri /security/csp-report/ 1
font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' https://www.recaptcha.net https://www.gstatic.com; img-src 'self' data: https:; media-src 'self'; object-src 'self'; script-src 'self' 'report-sample' 'unsafe-hashes' 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net https://cdn.brevo.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://challenges.cloudflare.com https://unpkg.com https://ws.sharethis.com https://www.gstatic.com; script-src-attr 'self' 'unsafe-hashes' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://cdn.mxpnl.com/libs/mixpanel-2-latest.min.js https://js-agent.newrelic.com cdn.jsdelivr.net https://cdn.brevo.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://challenges.cloudflare.com https://unpkg.com https://ws.sharethis.com https://www.gstatic.com; style-src 'self' 'report-sample' 'unsafe-inline' fonts.googleapis.com cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; style-src-attr 'self' 'unsafe-hashes' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com cdn.jsdelivr.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://unpkg.com; worker-src 'self'; base-uri 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-dszdKx32Wf8TIbX1-UWWsg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' https://www.google.com/recaptcha/api.js https://www.googletagmanager.com https://polyfill.io https://www.youtube.com https://vimeo.com https://player.vimeo.com https://cc.cdn.civiccomputing.com/9/cookieControl-9.x.min.js https://snap.licdn.com/ https://www.gstatic.com/; img-src data: 'self' https://www.flickr.com/ https:; connect-src 'self' https:; frame-src 'self' https://www.google.com https://www.youtube.com https://vimeo.com https://player.vimeo.com https://www.flickr.com/ https://www.podbean.com/ https://e.issuu.com/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/css2; font-src 'self' https: data: 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.alothemes.com *.magepow.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.alothemes.com *.magepow.com *.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com 3a5ff726f3.nxcli.io data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com s7.addthis.com *.alothemes.com *.magepow.com *.googleapis.com *.gstatic.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.alothemes.com *.magepow.com *.googleapis.com *.gstatic.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com ekr.zdassets.com/ *.alothemes.com *.magepow.com *.googleapis.com *.gstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com * data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors https://*.etracker.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com/ *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com https://*.etracker.com https://*.etracker.de https://www.magezon.com s3.eu-central-1.amazonaws.com maiworm.myveo2.de https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.google.com/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com widget.freshworks.com m2epro.freshdesk.com https://*.etracker.com https://*.etracker.de *.modehaus.de *.pay1.de rest01.modehaus.de *.ratepay.com js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com widget.freshworks.com m2epro.freshdesk.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com widget.freshworks.com m2epro.freshdesk.com https://*.etracker.de brandpages.modehaus.de *.ratepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com places.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; frame-ancestors 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: blob: https://images.unsplash.com https://i.imgur.com https://i.ytimg.com https://image.mux.com https://pub-3c037541e4e3420ea01095e1de4dfabb.r2.dev; media-src 'self' blob: https:; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com; connect-src 'self' https://*.r2.cloudflarestorage.com https://storage.googleapis.com https://stream.mux.com https://image.mux.com https://pub-3c037541e4e3420ea01095e1de4dfabb.r2.dev; worker-src 'self' blob:; manifest-src 'self'; report-uri /api/security/csp-report 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://yoomoney.ru https://yookassa.ru; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://mc.yandex.com https://top-fwz1.mail.ru https://smartcaptcha.yandexcloud.net https://yastatic.net https://suggestions.dadata.ru https://www.youtube.com https://vk.com https://vkvideo.ru https://rutube.ru; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data: blob: https://mc.yandex.ru https://mc.yandex.com https://top-fwz1.mail.ru https://*.mail.ru https://yastatic.net https://*.ytimg.com https://*.googleusercontent.com https://*.userapi.com https://*.vk.com; connect-src 'self' https://mc.yandex.ru https://mc.yandex.com https://top-fwz1.mail.ru https://*.mail.ru https://smartcaptcha.yandexcloud.net https://yandex.ru https://suggestions.dadata.ru https://api.vk.ru; frame-src 'self' https://smartcaptcha.yandexcloud.net https://yandex.ru https://www.youtube.com https://www.youtube-nocookie.com https://vk.com https://vkvideo.ru https://rutube.ru 1
font-src *.fontawesome.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * secure.pay1.de *.klarna.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.google.com/ *.mondu.ai/ *.mondu.local localhost:*/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com connect.facebook.net blog-m2-magezon-com.disqus.com disqus.com *.klarna.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com https://www.magezon.com cdn.doofinder.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com maps.gstatic.com maps.googleapis.com cdn.rawgit.com/googlemaps/ cdn.jsdelivr.net/gh/googlemaps/ *.mondu.ai/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net shop.rimpler.de www.drrimpler.de bat.bing.com connect.facebook.net www.facebook.com www.google.de blog-m2-magezon-com.disqus.com c.disquscdn.com checkout.mondu.ai data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js cdn.doofinder.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.google.com/ maps.googleapis.com *.avada.io *.mondu.ai/widget.js *.mondu.local/widget.js localhost:*/dist/widget.js js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io connect.facebook.net blog-m2-magezon-com.disqus.com player.vimeo.com bat.bing.com *.cloudfront.net accounts.google.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.doofinder.com downloads.mailchimp.com *.fontawesome.com fonts.googleapis.com unsafe-inline assets.braintreegateway.com d.ratepay.com d.payla.io dr.payla.io checkout.mondu.ai 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.doofinder.com wss://*.doofinder.com maps.googleapis.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com payments.amazon.de d.ratepay.com jsctool.com eu.playground.klarnaevt.com connect.facebook.net stats.g.doubleclick.net googleads.g.doubleclick.net www.google.de blog-m2-magezon-com.disqus.com disqus.com eu.klarnaevt.com bat.bing.com *.execute-api.eu-central-1.amazonaws.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.lancray.com/csp-report/report/index; report-to report-endpoint; 1
font-src data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ landofcoder.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ landofcoder.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com landofcoder.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src blob:; font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com fonts.gstatic.com *.kxcdn.com static.klaviyo.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com *.googlesyndication.com *.facebook.com *.facebook.net 'self' connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.authorize.net 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.google.com/ *.doubleclick.net www.facebook.com *.googlesyndication.com facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com www.google.com *.facebook.com *.facebook.net connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.authorize.net www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io 'self' data: *.google.com *.google.bg www.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com scontent.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.cdninstagram.com *.fbcdn.net *.google.co.th https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com *.facebook.com https://firebasestorage.googleapis.com https://www.magezon.com https://meetanshi.com/media/logo.png connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com/ *.google.bg *.googletagmanager.com www.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.googleapis.com *.google.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com 'unsafe-inline' *.addthis.com *.addthisedge.com *.moatads.com static.cloudflareinsights.com 'unsafe-eval' apis.google.com www.google.com www.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.facebook.com *.avada.io *.shopify.com graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.authorize.net sandbox-assets.secure.checkout.visa.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.google.com *.kxcdn.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google-analytics.com www.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.facebook.com https://get.geojs.io *.avada.io connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com google.com *.authorize.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-sdz/O3R6v0dE7crYeSAIpVqdYhg=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
worker-src blob:; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.kxcdn.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cybersource.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.cybersource.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net scontent.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com google.com store.paradoxlabs.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com s7.addthis.com *.cardinalcommerce.com h.online-metrix.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com google.com *.kxcdn.com *.gstatic.com *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com ekr.zdassets.com/ *.cardinalcommerce.com h.online-metrix.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net *.paypal.com *.paypalobjects.com applepay.cdn-apple.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.vivapayments.com https://seo.mageplaza.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.sandbox.paypal.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.facebook.com https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.sandbox.paypal.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.vivapayments.com *.cookiefirst.com/ *.googletagmanager.com *.facebook.net *.googleapis.com *.gstatic.com *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.sandbox.paypal.com *.paypalobjects.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com maps.googleapis.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com https://fonts.bunny.net assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.cookiefirst.com/ *.googlesyndication.com/ *.google-analytics.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.sandbox.paypal.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com places.googleapis.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
upgrade-insecure-requests; 1
script-src-elem static.addtoany.com cdnjs.cloudflare.com fonts.googleapis.com assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net assets.braintreegateway.com *.cloudflare.com *.zohopublic.com js.zohocdn.com connect.facebook.net js.stripe.com https://www.googletagmanager.com https://static.hotjar.com https://googleads.g.doubleclick.net https://www.clarity.ms https://www.google-analytics.com https://www.google.com https://vendor1.quickspark.com https://cdn.timepayment.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src-elem *.adobe.com assets.braintreegateway.com css.zohocdn.com 'self' 'unsafe-inline'; font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://static.zohocdn.com *.zohopublic.com css.zohocdn.com *.fontawesome.com *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com maxcdn.bootstrapcdn.com 'self' data: 'unsafe-inline' fonts.googleapis.com https://fonts.gstatic.com https://square-fonts-production-f.squarecdn.com/ https://d1g145x70srn7h.cloudfront.net/ https://cash-f.squarecdn.com/ https://fonts.gstatic.com/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://js.stripe.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com https://pci-connect.squareup.com https://connect.squareup.com https://pci-connect.squareupsandbox.com https://connect.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://acs-us-east-1.ndsprod.nds-sandbox-issuer.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com *.stripe.com assets.braintreegateway.com www.facebook.com https://static.klaviyo.com 'self' www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com c.paypal.com checkout.paypal.com https://www.gstatic.com/ https://sandbox.api.cash.app/ https://site-assets.afterpay.com/ https://sandbox.web.squarecdn.com/ https://api.cash.app/ https://web.squarecdn.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://franklin-assets.s3.amazonaws.com/ https://static.sandbox.afterpay.com/ https://static.afterpay.com/ https://static.sandbox.afterpay.com/logo/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com static.addtoany.com cdnjs.cloudflare.com fonts.googleapis.com https://js.stripe.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net secure.authorize.net test.authorize.net assets.braintreegateway.com *.cloudflare.com *.zohopublic.com js.zohocdn.com https://connect.facebook.net 'self' 'unsafe-inline' 'unsafe-eval' js.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://js-sandbox.squarecdn.com https://js.squareup.com https://js.afterpay.com/ https://nd.squarecdn.com https://js.squareupsandbox.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://portal.sandbox.afterpay.com/ https://portal.afterpay.com/ https://cdn.plaid.com/ https://sandbox.kit.cash.app/ https://kit.cash.app/ https://js-sandbox.squarecdn.com/ https://js.squarecdn.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com css.zohocdn.com 'self' 'unsafe-inline' cdnjs.cloudflare.com *.fontawesome.com *.googleapis.com *.addtoany.com https://sandbox.web.squarecdn.com https://web.squarecdn.com https://sandbox.kit.cash.app/ https://kit.cash.app/ https://fonts.googleapis.com/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://api.stripe.com api.stripe.com *.zohopublic.com vts.zohopublic.com pagead2.googlesyndication.com www.facebook.com 'self' 'unsafe-inline' wss://vts.zohopublic.com http://dpm.demdex.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com https://pci-connect.squareup.com https://pci-connect.squareupsandbox.com https://api.amplitude.com/ https://api.squareupsandbox.com/ https://api.squareup.com/ https://o160250.ingest.sentry.io/ https://api.lab.amplitude.com/sdk/vardata https://sandbox.plaid.com/ https://production.plaid.com/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' ; img-src data: *; script-src 'unsafe-inline' 'unsafe-eval' * blob:; font-src data: 'unsafe-inline' *; style-src 'unsafe-inline' *; media-src * blob:; report-uri https://www.senaat.be/_csp 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://static.klaviyo.com https://cc.cdn.civiccomputing.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; connect-src 'self' https:; frame-src 'self' about: https://www.youtube-nocookie.com https://player.vimeo.com https://cpv3.skio.com; font-src 'self' data:; media-src 'self' blob: data: https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
font-src *.fontawesome.com *.gstatic.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://widgets.trustedshops.com *.yotpo.com *.googleapis.com *.zopim.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://seo.mageplaza.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.multisafepay.com https://pay.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.wesupply.xyz *.weltpixel.com *.yotpo.com *.doubleclick.net *.hotjar.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.doubleclick.net *.googletagmanager.com *.multisafepay.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.yotpo.com *.trustedshops.com *.zopim.io *.google.ch *.google.es *.google.pl *.klaviyo.com *.klaviyo.com/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.googleapis.com *.avada.io *.multisafepay.com https://pay.google.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.cloudflare.com https://www.googletagmanager.com tagmanager.google.com *.yotpo.com *.trackjs.com *.zopim.com *.hotjar.com *.trustedshops.com *.zdassets.com *.analytics.google.com *.smartautobrains.com *.mouseflow.com *.cloudflareinsights.com *.klaviyo.com *.klaviyo.com/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com cdn.dnky.co webchat.dotdigital.com https://static.klaviyo.com *.googleapis.com *.googletagmanager.com *.google.com *.gstatic.com *.multisafepay.com unsafe-inline https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com tagmanager.google.com *.yotpo.com *.klaviyo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google-analytics.com *.google.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io *.multisafepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://www.google-analytics.com *.yotpo.com *.zdassets.com *.zopim.com *.hotjar.com *.zendesk.com *.hotjar.io wss://*.zopim.com *.g.doubleclick.net google.com/pay pagead2.googlesyndication.com *.klaviyo.com *.klaviyo.com/ 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; connect-src 'self'; font-src 'self' data:; form-action 'self' https://*.infotip-rts.com https://*.infotip-rts-dev.com https://*.infotip-rts-local.com https://*.infotip-rts.de https://infotip-login.auth.eu-central-1.amazoncognito.com/oauth2/authorize https://infotip-dev-login.auth.eu-central-1.amazoncognito.com/oauth2/authorize https://login.microsoftonline.com; frame-ancestors 'self'; frame-src 'self'; img-src 'self' images.philips.com data: blob:; media-src 'self'; object-src 'none'; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; report-to csp_endpoint;aux-data 'eyJVcmxQcmciOiJodHRwOlwvXC9pbmZvdGlwLXJ0cy5jb21cLyIsIlVybFBhZ2UiOiJIb21lLnhodG1sIiwiTG9naW5OYW1lIjoiOlJUUy1Qb3J0YWwiLCJVc2VyUm9sZSI6IjkwIiwiaW5BY3Rpb24iOiJIT01FIiwiaW5Qb3J0YWxJZCI6IjpSVFMtUG9ydGFsIiwiaW5PcmRlcklkIjoiIiwiU3lzdGVtIjoiTGl2ZSJ9' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com moroso.us14.list-manage.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com *.weltpixel.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.certcapture.com *.googleapis.com *.clarity.ms *.bing.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com *.facebook.com *.reddit.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.certcapture.com *.gstatic.com *.googleapis.com use.fontawesome.com js-agent.newrelic.com bam.nr-data.net bam-cell.nr-data.net developers.google.com acsbapp.com *.acsbapp.com *.addthis.com *.clarity.ms chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.disqus.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.gstatic.com *.googleapis.com use.fontawesome.com downloads.mailchimp.com assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.certcapture.com *.gstatic.com *.googleapis.com bam.nr-data.net bam-cell.nr-data.net developers.google.com acsbapp.com *.acsbapp.com *.addthis.com *.clarity.ms form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com maps.googleapis.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri /_csp/report; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com maxcdn.bootstrapcdn.com https://applepay.cdn-apple.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.googletagmanager.com consentcdn.cookiebot.com td.doubleclick.net analytics.portofoonweb.nl *.addthis.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://applepay.cdn-apple.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com imgsct.cookiebot.com *.google.nl *.googleapis.com px.ads.linkedin.com api.taggrs.io analytics.portofoonweb.nl *.google.com.ua cart2quote.zendesk.com region1.google-analytics.com assets.myparcel.nl *.openstreetmap.fr *.openstreetmap.org bat.bing.com region1.analytics.google.com *.google.com.ly cookies.travyk.nl *.cookiebanners.nl https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com https://static.buckaroo.nl https://www.buckaroo.nl https://www.paypalobjects.com https://pay.google.com https://developers.google.com https://applepay.cdn-apple.com https://firebasestorage.googleapis.com flagpedia.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com https://cdn.jsdelivr.net *.tiktok.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com consent.cookiebot.com snap.licdn.com *.hotjar.com *.bing.com static.klaviyo.com static-tracking.klaviyo.com translate.googleapis.com translate-pa.googleapis.com cdn.jsdelivr.net cdnjs.cloudflare.com bat.bing.com dpm.demdex.net *.cookiebot.com *.cloudflareinsights.com cookies.travyk.nl *.cookiebanners.nl analytics.portofoonweb.nl https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://maps.googleapis.com *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com https://www.sandbox.paypal.com https://applepay.cdn-apple.com https://pay.google.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io *.avada.io *.shopify.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com assets.braintreegateway.com *.jsdelivr.net https://static.klaviyo.com https://cdn.jsdelivr.net maxcdn.bootstrapcdn.com cdn.jsdelivr.net https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com analytics.google.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.hotjar.com px.ads.linkedin.com *.klaviyo.com analytics.portofoonweb.nl api.taggrs.io imgsct.cookiebot.com *.google.com.ua *.googleadservices.com translate.googleapis.com translate-pa.googleapis.com region1.google-analytics.com api.myparcel.nl cdn.jsdelivr.net consent.cookiebot.com consentcdn.cookiebot.com a.klaviyo.com bat.bing.com cookies.travyk.nl www.google.nl https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://maps.googleapis.com https://player.vimeo.com https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://applepay.buckaroo.io https://smp-paymentservices.apple.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src bat.bing.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-XZ7EHZtUfKoJ0ffNhpniaw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'   ;   media-src 'self' http: https:   ;   connect-src 'self' http: https:   ;   frame-src 'self' http: https:   ;   font-src 'self' http: https: data:  ;   img-src 'self' http: https: data:  ;   script-src 'self' 'unsafe-inline' 'unsafe-eval'     http://tagmanager.google.com     http://api.b.st-hatena.com     http://bookmark.hatenaapis.com     http://b.st-hatena.com     http://www.google.com     http://*.google-analytics.com     http://*.g.doubleclick.net     http://www.googleadservices.com     http://www.googletagmanager.com     http://graph.facebook.com     http://ajax.googleapis.com     http://api.docodoco.jp     http://svss.tv     http://s.yjtag.jp     http://yjtag.yahoo.co.jp     http://bake.surfpoint.jp     http://connect.facebook.net     http://*.eir-parts.net     http://cdnjs.cloudflare.com     http://s.ytimg.com     http://www.pagespeed-mod.com     http://www.clarity.ms     http://d.line-scdn.net     https://tagmanager.google.com     https://api.b.st-hatena.com     https://bookmark.hatenaapis.com     https://b.st-hatena.com     https://www.google.com     https://*.google-analytics.com     https://*.g.doubleclick.net     https://www.googleadservices.com     https://www.googletagmanager.com     https://graph.facebook.com     https://ajax.googleapis.com     https://api.docodoco.jp     https://svss.tv     https://s.yjtag.jp     https://yjtag.yahoo.co.jp     https://bake.surfpoint.jp     https://connect.facebook.net     https://*.eir-parts.net     https://cdnjs.cloudflare.com     https://s.ytimg.com     https://www.pagespeed-mod.com     https://www.clarity.ms     https://d.line-scdn.net   ;   script-src-elem 'self' 'unsafe-inline' 'unsafe-eval'     http://tagmanager.google.com     http://api.b.st-hatena.com     http://bookmark.hatenaapis.com     http://b.st-hatena.com     http://www.google.com     http://*.google-analytics.com     http://*.g.doubleclick.net     http://www.googleadservices.com     http://www.googletagmanager.com     http://graph.facebook.com     http://ajax.googleapis.com     http://api.docodoco.jp     http://svss.tv     http://s.yjtag.jp     http://yjtag.yahoo.co.jp     http://bake.surfpoint.jp     http://connect.facebook.net     http://*.eir-parts.net     http://cdnjs.cloudflare.com     http://s.ytimg.com     http://www.pagespeed-mod.com     http://www.clarity.ms     http://d.line-scdn.net     https://tagmanager.google.com     https://api.b.st-hatena.com     https://bookmark.hatenaapis.com     https://b.st-hatena.com     https://www.google.com     https://*.google-analytics.com     https://*.g.doubleclick.net     https://www.googleadservices.com     https://www.googletagmanager.com     https://graph.facebook.com     https://ajax.googleapis.com     https://api.docodoco.jp     https://svss.tv     https://s.yjtag.jp     https://yjtag.yahoo.co.jp     https://bake.surfpoint.jp     https://connect.facebook.net     https://*.eir-parts.net     https://cdnjs.cloudflare.com     https://s.ytimg.com     https://www.pagespeed-mod.com     https://www.clarity.ms     https://d.line-scdn.net   ;   style-src 'self' 'unsafe-inline'     http://tagmanager.google.com     http://fonts.googleapis.com     http://svss.tv     http://*.eir-parts.net     https://tagmanager.google.com     https://fonts.googleapis.com     https://svss.tv     https://*.eir-parts.net     https://cdn.jsdelivr.net   ;   report-uri     https://strike.report-uri.com/r/d/csp/reportOnly   ; 1
object-src 'none';base-uri 'self';script-src 'nonce-yr5hterVwb-Ywr_mkfvNQw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-XjCY+API4miemNLwrklcHOVUzK4=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
object-src 'none';base-uri 'self';script-src 'nonce-WxBhQM-Gf3X7sXHkIUH3Fg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src https:;script-src https: 'self' 'strict-dynamic' 'nonce-201fca55f9ce6eba39266c89b863996007b5ab6f9fca35c743fff736826aadd0' 'unsafe-inline' 'unsafe-eval' 'report-sample';style-src https: 'unsafe-inline';img-src https: data:;connect-src https: wss:;font-src https: data:;object-src 'none';media-src https: blob: data:;frame-src https: data: blob:;child-src 'self' https:;form-action 'self';frame-ancestors https://my.firespring.com;base-uri 'self' https://insights.sitesearch360.com;worker-src 'self' blob:;manifest-src 'self' https://cdn.firespring.com;report-uri /csp_log?n=1 1
font-src www.paypalobjects.com *.gstatic.com fonts.gstatic.com unpkg.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.authorize.net 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.sharethis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://www.googletagmanager.com/ *.hubspot.com *.hsforms.com *.trustpilot.com *.authorize.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.sharethis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ track.hubspot.com forms.hubspot.com *.hubspot.com *.hs-analytics.net *.hsforms.com flagpedia.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.sharethis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ js.hs-scripts.com *.hs-scripts.com *.hs-analytics.net *.hubspot.com *.hsforms.net *.hs-banner.com *.hsadspixel.net *.trustpilot.com *.gstatic.com maps.googleapis.com *.authorize.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.sharethis.com *.trustpilot.com fonts.googleapis.com unpkg.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.sharethis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ api.hubspot.com *.hubspot.com track.hubspot.com forms.hubspot.com *.hs-analytics.net *.hs-banner.com www.gstatic.com maps.googleapis.com *.authorize.net ingress.flareapp.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https://cuatro.sim-cdn.nl; img-src * data: blob:; style-src * 'unsafe-inline' blob: https://fonts.googleapis.com; font-src 'self' data: https://fonts.bunny.net https://fonts.gstatic.com https://cuatro.sim-cdn.nl https://cuatro.sim-cdn-acceptatie.nl https://cuatro.sim-cdn-test.nl; script-src 'nonce-MzQyYzhmY2ItZjA0ZS00NjFlLWI3OGEtOTIyZjg5NmU4ZWM5' 'strict-dynamic' 'report-sample'; connect-src *; form-action 'self'; media-src https://*.readspeaker.com https://*.streamlock.net https://storage.googleapis.com https://scribit-pro-hosting.storage.googleapis.com https://scribit-pro.storage.googleapis.com https://app.talkjs.com 'self' blob:; frame-src *; frame-ancestors 'self' https://*.polly.help; worker-src * 'unsafe-inline' blob:; report-uri /api/csp-report 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://plumrocket.com https://accounts.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://accounts.google.com https://www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com https://fonts.googleapis.com https://accounts.google.com https://www.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://accounts.google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-c94Y79iZbC4_97jU1nOTZQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net www.paypalobjects.com *.typekit.net *.gstatic.com *.cdn-apple.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.cloudfront.net *.reviews.io *.reviews.co.uk data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.awin1.com *.zenaps.com *.fls.doubleclick.net account.fetchify.com www.commercepartnerhub.com js.mollie.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.reviews.io *.reviews.co.uk *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://images.unsplash.com *.awin1.com *.zenaps.com *.wepowerconnections.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com *.files-text.com *.livechatinc.com *.livechat-files.com *.livechat-static.com https://img.youtube.com maps.googleapis.com maps.gstatic.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com cc-cdn.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com https://cdn.jsdelivr.net *.livechatinc.com *.livechat-static.com maps.googleapis.com js.mollie.com pay.google.com applepay.cdn-apple.com *.stripe.com/* *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.reviews.io *.reviews.co.uk *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com cc-cdn.com https://static.klaviyo.com https://cdn.jsdelivr.net *.livechatinc.com *.stripe.network *.stripecdn.com *.amazon.com assets.braintreegateway.com *.cloudfront.net *.reviews.io *.reviews.co.uk tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src *.livechatinc.com 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.livechatinc.com *.livechat-static.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com https://player.vimeo.com *.wepowerconnections.com https://the.sciencebehindecommerce.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.livechatinc.com *.text.com maps.googleapis.com places.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com *.cloudfront.net *.reviews.io *.reviews.co.uk *.googletagmanager.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com *.livechatinc.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-aML3P2nbFYcNgYlPWKvJKg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'nonce-Q7rVCpRmaud/qmvGCK0MHA==' 'self' 'unsafe-eval' cdn.orsted.com *.googletagmanager.com *.app.cookieinformation.com cdn.appdynamics.com *.googletagmanager.com *.gstatic.com *.googleoptimize.com www.googleadservices.com *.googleapis.com *.bing.com *.doubleclick.net *.t.co *.pardot.com *.youtube.com *.linkedin.com *.twitter.com *.globenewswire.com *.23video.com delivery.twentythree.com orsted.containers.piwik.pro orsted.piwik.pro *.crazyegg.com unpkg.com cs.lf-discover.com *.puzzel.com *.arcgis.com code.jquery.com *.lfeeder.com orsted-global-graduate-programme.simplecast.com omny.fm cdnjs.cloudflare.com *.bootstrapcdn.com *.defgo.com *.defgo.net *.vimeo.com presscloud.com *.ritzau.dk *.simplecast.com *.elnet.danskenergi.dk *.sli.do *.audioboom.com *.licdn.com *.adsrvr.org *.soundcloud.com *.google.com *.google.com.my *.google.nl *.google.dk *.facebook.net;       style-src 'nonce-Q7rVCpRmaud/qmvGCK0MHA==' 'self' cdn.orsted.com fonts.googleapis.com;       style-src-attr 'unsafe-inline' cdn.orsted.com;       img-src 'self' data: cdn.orsted.com *.azureedge.net *.youtube.com *.23video.com delivery.twentythree.com www.googletagmanager.com *.lfeeder.com *.linkedin.com *.doubleclick.net *.pardot.com;       media-src 'self' blob: cdn.orsted.com *.youtube.com *.23video.com delivery.twentythree.com;       font-src 'self' data: fonts.gstatic.com cdn.orsted.com;       frame-src 'self' *.app.cookieinformation.com *.youtube.com *.23video.com delivery.twentythree.com *.google.com *.google.nl *.googletagmanager.com *.doubleclick.net *.pardot.com;       connect-src 'self' *.app.cookieinformation.com *.euroland.com *.eum-appdynamics.com *.googletagmanager.com *.google.com *.doubleclick.net *.googleadservices.com *.crazyegg.com *.linkedin.com orsted.piwik.pro *.pardot.com *.signalfx.com;       worker-src 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.paypal.com https://www.sandbox.paypal.com https://*.paypalobjects.com https://widget.trustpilot.com https://*.trustpilot.com http://widget.trustpilot.com https://applepay.cdn-apple.com https://*.cookiebot.com https://eu1-config.doofinder.com https://*.doofinder.com https://cdn.doofinder.com https://assets.klicktipp.com https://*.sentry.io https://www.googletagmanager.com https://www.google-analytics.com https://data.seeger24.de https://tracking.paqato.com https://*.paqato.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.doofinder.com; worker-src 'self' blob:; img-src 'self' data: blob: https:; media-src 'self' https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' checkout.seeger24.de https://*.paypal.com https://*.paypalobjects.com https://apple-pay-gateway.apple.com https://*.trustpilot.com https://*.doofinder.com https://*.sentry.io https://sentry.habitatmade.com https://*.cookiebot.com https://*.paqato.com https://tracking.paqato.com https://www.google-analytics.com https://data.seeger24.de; frame-src 'self' https://www.paypal.com https://www.sandbox.paypal.com https://*.paypal.com https://applepay.cdn-apple.com https://widget.trustpilot.com https://*.trustpilot.com https://portal.combeenation.com https://*.cookiebot.com https://*.paqato.com https://tracking.paqato.com https://www.googletagmanager.com https://www.google-analytics.com https://data.seeger24.de; form-action 'self' https://www.paypal.com https://www.sandbox.paypal.com; base-uri 'self'; object-src 'none'; upgrade-insecure-requests 1
font-src *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com 'self' data: https://widgets.trustedshops.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com assets.braintreegateway.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de https://www.googletagmanager.com/ *.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de ebizmarts-website.s3.amazonaws.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.googletagmanager.com 'self' data: https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com js.authorize.net jstest.authorize.net js.braintreegateway.com cdn-scripts.signifyd.com www.youtube.com maps.googleapis.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.chimpstatic.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.google.com *.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.fontawesome.com maxcdn.bootstrapcdn.com *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com payments.sandbox.braintree-api.com origin-analytics-sand.sandbox.braintree-api.com assets.braintreegateway.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ t.elasticsuite.io *.google-analytics.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src-elem *.google-analytics.com clarity.ms https://consent.cookiebot.com/ https://consentcdn.cookiebot.com/ https://js.monitor.azure.com/ https://www.google.com https://www.googletagmanager.com/ https://www.gstatic.com 'self' 'unsafe-inline';connect-src *.google-analytics.com clarity.ms google-analytics.com https://consentcdn.cookiebot.com/ https://js.monitor.azure.com/ https://westeurope-5.in.applicationinsights.azure.com https://www.google.com region1.analytics.google.com 'self' stats.g.doubleclick.net;script-src clarity.ms google-analytics.com/analytics.js https://www.googletagmanager.com/;font-src data: fast.fonts.net 'self';media-src https://*.vimeocdn.com player.vimeo.com;object-src 'none' 1
object-src 'none';base-uri 'self';script-src 'nonce-Yycn427W7UTojjtbH5zKWg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-Yqt75GhrXGba29RB-HsQtQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.sirv.com *.boldr.dev *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://maxcdn.bootstrapcdn.com https://fonts.gstatic.com data: v2.zopim.com static.klaviyo.com www.sensorydirect.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.sensorydirect.com 'self' 'unsafe-inline'; frame-ancestors https://api.clerk.io https://cdn.clerk.io *.stripe.com stripe.com www.sensorydirect.com 'self'; frame-src bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.youtube-nocookie.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com account.fetchify.com https://www.googletagmanager.com/ platform.twitter.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com www.google.com/recaptcha/ www.paypalobjects.com www.sensorydirect.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://cdn.clerk.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://firebasestorage.googleapis.com pinterest.com assets.pinterest.com syndication.twitter.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.sirv.com www.xtento.com cdn.xtento.com stats.g.doubleclick.net www.google.com/ads/ga-audiences www.google.co.uk/ads/ga-audiences cdn.sensorydirect.com https://s.ytimg.com *.feefo.com *.vzaar.com log.pinterest.com v2.zopim.com bat.bing.com www.sensorydirect.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://api.clerk.io https://cdn.clerk.io https://custom.clerk.io cc-cdn.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io *.shopify.com cdn.jsdelivr.net twitter.com platform.twitter.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.sirv.com player.vimeo.com *.klaviyo.com js.datadome.co www.xtento.com cdn.xtento.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.usersnap.com *.clerk.io *.feefo.com chimpstatic.com v2.zopim.com static.zdassets.com assets.pinterest.com bat.bing.com/ *.getsitecontrol.com www.sensorydirect.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com https://api.clerk.io https://cdn.clerk.io cc-cdn.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net cdn.jsdelivr.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.sirv.com *.klaviyo.com *.typekit.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com www.sensorydirect.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.sirv.com www.sensorydirect.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com vimeo.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.sirv.com *.youtube.com blob: *.klaviyo.com api-js.datadome.co *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.google-analytics.com stats.g.doubleclick.net *.feefo.com widget-mediator.zopim.com ekr.zdassets.com wss://widget-mediator.zopim.com *.getsitecontrol.com *.getsitecontrol.com/ www.sensorydirect.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com www.sensorydirect.com http: https: blob: 'self' 'unsafe-inline'; default-src www.sensorydirect.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://*.hsforms.com https://*.hubspot.com; script-src 'self' https://js.hs-scripts.com https://js.hsforms.net https://js.hubspot.com https://js.usemessages.com https://js.hsadspixel.net https://track.hubspot.com https://js.hs-banner.com https://js.hscollectedforms.net https://js.hs-analytics.net https://www.googletagmanager.com https://snap.licdn.com https://www.google.com https://*.hubspot.com https://cdnjs.cloudflare.com https://www.gstatic.com https://siigroup.com https://*.hubspot.net https://cdn.jsdelivr.net https://static.hsappstatic.net https://maps.googleapis.com https://platform.linkedin.com https://connect.facebook.net https://platform.twitter.com 'strict-dynamic' 'nonce-7y/15+/jK1XxYBXHFhfYnw=='; style-src 'self' https://fonts.googleapis.com https://*.hubspot.com https://*.hubspot.net https://*.hubspotusercontent-na1.net https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://use.typekit.net https://static.hsappstatic.net https://p.typekit.net; font-src 'self' data: https://fonts.gstatic.com https://*.hubspot.com https://*.hubspot.net https://use.typekit.net https://static.hsappstatic.net https://p.typekit.net; img-src 'self' data: blob: https: https://*.hubspot.com https://*.hubspot.net https://*.hsforms.com https://*.hsforms.net; connect-src 'self' https://*.hubspot.com https://*.hubspot.net https://*.hsforms.com https://*.hsforms.net https://maps.googleapis.com https://track.hubspot.com https://api.hubapi.com https://forms.hscollectedforms.net https://js.hs-banner.com https://px.ads.linkedin.com https://www.googleapis.com https://www.google-analytics.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://static.hsappstatic.net; frame-src 'self' https://*.hubspot.com https://*.hubspot.net https://*.hsforms.com https://*.hsforms.net https://*.hs-sites.com https://play.hubspotvideo.com https://platform.twitter.com https://www.google.com; media-src 'self' https: blob:; manifest-src 'self'; worker-src 'self' blob:; upgrade-insecure-requests 1
default-src 'self'; base-uri 'self'; form-action 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://www.googletagservices.com https://pagead2.googlesyndication.com https://partner.googleadservices.com https://tpc.googlesyndication.com https://*.googlesyndication.com https://googleads.g.doubleclick.net https://securepubads.g.doubleclick.net https://www.google.com https://*.adtrafficquality.google https://ep1.adtrafficquality.google https://cdn.taboola.com https://cds.taboola.com https://api.taboola.com https://popup.taboola.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com; font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com; img-src 'self' data: blob: https:; media-src 'self' blob: https:; connect-src 'self' https:; frame-src 'self' https://html5.gamemonetize.co https://*.gamemonetize.co https://*.gamemonetize.com https://gamemonetize.video https://*.gamedistribution.com https://*.gamepix.com https: blob:; worker-src 'self' blob:; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.cookielaw.org; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https: blob:; frame-src 'self' https://www.google.com https://www.youtube.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://geolocation.onetrust.com https://cdn.cookielaw.org; object-src 'none'; base-uri 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://pagead2.googlesyndication.com https://*.googlesyndication.com https://*.doubleclick.net https://profitablecpmratenetwork.com https://*.profitablecpmratenetwork.com https://highrevenueformat.com https://*.highrevenueformat.com https://gummy-debt.com https://*.gummy-debt.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src * data: blob:; frame-src 'self' https://*.streamed.pk https://streamed.pk https://*.streamed.st https://streamed.st https://*.embedsports.top https://embedsports.top https://*.googlesyndication.com https://*.doubleclick.net https://profitablecpmratenetwork.com https://*.profitablecpmratenetwork.com https://highrevenueformat.com https://*.highrevenueformat.com https://a.magsrv.com https://*.magsrv.com https://ads.qualiwatch.com; connect-src 'self' https://api.qualiwatch.com https://api-worker.qualiwatch.com https://streamed.pk https://*.streamed.pk https://streamed.st https://*.streamed.st https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://*.googlesyndication.com https://*.doubleclick.net https://profitablecpmratenetwork.com https://*.profitablecpmratenetwork.com https://highrevenueformat.com https://*.highrevenueformat.com https://a.magsrv.com https://*.magsrv.com; worker-src 'self'; object-src 'none'; base-uri 'self'; 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-a05mylj0anWBqAyjX5u6V22gW58=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
default-src 'self';            script-src 'report-sample' 'self' 'unsafe-inline' https://az416426.vo.msecnd.net/scripts/a/ai.0.js https://buttons-config.sharethis.com/js/68d16b7e6f09a63c8e6f1efb.js https://cdn.mouseflow.com/projects/d085fd17-28ad-4907-af37-b6a3b9b66963.js https://connect.facebook.net/en_US/fbevents.js https://consent.trustarc.com/v2/notice/5eaplw https://count-server.sharethis.com/v2.0/get_counts https://dl.episerver.net/13.5.7/epi-util/find.js https://googleads.g.doubleclick.net/pagead/viewthroughconversion/656808352/ https://js.hs-analytics.net/analytics/ https://js.hs-banner.com/v2/5177788/banner.js https://js.hs-scripts.com/5177788.js https://js.hsadspixel.net/fb.js https://js.hsforms.net/forms/v2.js https://js.hsleadflows.net/leadflows.js https://platform-api.sharethis.com/js/sharethis.js https://pregiseu.mpeasylink.com/mpel/mpel.js https://s3.amazonaws.com/beacon.pmmimediagroup.com/prod/script.js https://snap.licdn.com/li.lms-analytics/insight.min.js https://static.cloudflareinsights.com/beacon.min.js https://t.sharethis.com/1/d/t.dhj https://www.google-analytics.com/analytics.js https://www.google.com/recaptcha/enterprise.js https://www.googletagmanager.com/gtm.js https://www.gstatic.com/recaptcha/releases/iRvKkcsnpNcOYYwhqaQxPITz/recaptcha__en.js https://www.webtraxs.com/wt.php https://www.youtube.com/s/player/ https://www.googletagmanager.com/gtag/js https://secure.leadforensics.com/js/63143.js http://platform-api.sharethis.com/js/sharethis.js https://secure.leadforensics.com/js/63143.js http://pregiseu.mpeasylink.com/mpel/ https://connect.facebook.net/signals/ https://ssl.google-analytics.com/ga.js https://www.youtube.com/iframe_api http://www.pagespeed-mod.com/v1/ https://static.cloudflareinsights.com/beacon.min.js/v8b253dfea2ab4077af8c6f58422dfbfd1689876627854 https://js.zi-scripts.com https://ws-assets.zoominfo.com https://ws.zoominfo.com https://tags.clickagy.com;            style-src 'report-sample' 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://fonts.googleapis.com https://pregiseu.mpeasylink.com https://use.fontawesome.com;            object-src 'none';            base-uri 'self';            connect-src 'self' https://analytics.google.com https://api.hubapi.com https://consent-reporting.trustarc.com https://consent.trustarc.com https://dc.services.visualstudio.com https://forms.hsforms.com https://forms.hubspot.com https://l.sharethis.com https://prospector.pmmimediagroup.com https://stats.g.doubleclick.net https://www.facebook.com https://www.google-analytics.com https://cdn.linkedin.oribi.io/partner/ https://ws.zoominfo.com https://aorta.clickagy.com https://hemsync.clickagy.com;            font-src 'self' data: https://cdnjs.cloudflare.com https://consent.trustarc.com https://fonts.gstatic.com https://use.fontawesome.com;            frame-src 'self' https://massinteract.com https://pregiseu.mpeasylink.com https://t.sharethis.com https://www.google.com https://www.youtube.com https://www.facebook.com https://hemsync.clickagy.com;            img-src 'self' data: https://analytics.convertlanguage.com https://consent-pref.trustarc.com https://consent.trustarc.com https://forms-na1.hsforms.com https://forms.hsforms.com https://l.sharethis.com https://platform-cdn.sharethis.com https://www.linkedin.com/px/ https://px.ads.linkedin.com https://track.hubspot.com https://www.facebook.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.webtraxs.com https://connect.facebook.net https://5177788.fs1.hubspotusercontent-na1.net/hubfs/5177788/;            manifest-src 'self';            media-src 'self';            worker-src 'none'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maps.gstatic.com *.fontawesome.com fonts.smct.io https://fonts.bunny.net https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com consentcdn.cookiebot.com www.youtube.com www.youtube-nocookie.com *.facebook.com *.addthis.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io img.youtube.com *.facebook.com *.etrusted.com widgets.trustedshops.com magefan.com cm.magefan.com imgsct.cookiebot.com *.petitceller.com images.unsplash.com *.disqus.com https://firebasestorage.googleapis.com www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com widgets-qa.trustedshops.com tau.collect.igodigital.com c.clarity.ms c.bing.com bat.bing.com www.google.es cm.g.doubleclick.net insight.adsrvr.org *.criteo.com *.g.doubleclick.net *.pubmatic.com r.casalemedia.com *.rfihub.com x.bidswitch.net sync.outbrain.com *.taboola.com criteo-sync.teads.tv criteo-partners.tremorhub.com eb2.3lift.com ad.yieldlab.net sync.1rx.io cs.media.net *.agkn.com id5-sync.com ad.360yield.com jadserve.postrelease.com rtb-csync.smartadserver.com live.rezync.com cdn.smct.io https://images.unsplash.com https://img.youtube.com https://www.mollie.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.youtube.com www.gstatic.com www.google.com 536002297.collect.igodigital.com consent.cookiebot.com consentcdn.cookiebot.com integrations.etrusted.com integrations.etrusted.site maps.googleapis.com connect.facebook.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com cdn.jsdelivr.net *.etrusted.com https://maps.googleapis.com *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.avada.io *.shopify.com js.mollie.com songbirdstag.cardinalcommerce.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.petitceller.com *.etrusted.com fonts.smct.io https://cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googletagmanager.com *.collect.igodigital.com *.cookiebot.com maps.googleapis.com maps.gstatic.com *.etrusted.com *.trustedshops.com *.trustedshops-static.com *.disqus.com *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com c.clarity.ms bat.bing.com dynamic.criteo.com pagead2.googlesyndication.com ad.doubleclick.net bat.bing.net stats.g.doubleclick.net googleads.g.doubleclick.net www.google.es y.clarity.ms pips.taboola.com cds.taboola.com insight.adsrvr.org firehose.eu-west-1.amazonaws.com https://maps.googleapis.com https://player.vimeo.com https://get.geojs.io https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-gKA_fJWE22GZzSbcfCkEvg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com *.fontawesome.com https://fonts.bunny.net https://*.cookieyes.com https://cdn-cookieyes.com https://geowidget.easypack24.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com secure.payu.com merch-prod.snd.payu.com https://*.cookieyes.com https://cdn-cookieyes.com https://geowidget-app.inpost.pl/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://firebasestorage.googleapis.com static.payu.com https://*.cookieyes.com https://cdn-cookieyes.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.hsforms.net *.hsforms.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.disqus.com *.avada.io secure.payu.com secure.snd.payu.com https://*.cookieyes.com https://cdn-cookieyes.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.fontawesome.com https://fonts.bunny.net https://*.cookieyes.com https://cdn-cookieyes.com https://geowidget.easypack24.net https://geowidget.inpost.pl 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com https://get.geojs.io *.avada.io secure.payu.com merch-prod.snd.payu.com https://*.cookieyes.com https://cdn-cookieyes.com *.easypack24.net *.inpost.pl *.openstreetmap.org t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
connect-src 'self' wss://www.domainspot.com https://www.google-analytics.com/; default-src 'none'; font-src 'report-sample' 'self' https://fonts.gstatic.com; form-action 'report-sample' 'self'; frame-ancestors 'self'; frame-src 'self' https://js.stripe.com https://www.google.com https://td.doubleclick.net/; img-src 'report-sample' 'self' data: https://www.google.com; report-to default; report-uri https://www.tierra.net/special/report/csp; script-src 'report-sample' 'self' 'unsafe-eval' 'unsafe-inline' https://googleads.g.doubleclick.net https://js.stripe.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com; style-src 'report-sample' 'self' 'unsafe-inline' https://fonts.googleapis.com 1
worker-src none:; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://fonts.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.sandbox.paypal.com *.youtube.com *.paypal.com *.googleadservices.com *.google-analytics.com *.google.com *.cdninstagram.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.placeholder.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com none: *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.cdninstagram.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.googleapis.com *.placeholder.com 'self' 'unsafe-inline'; frame-ancestors none: *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.google.com https://assets.braintreegateway.com none: *.google.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.twitter.com *.cdninstagram.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.googleapis.com *.placeholder.com cdn.lightwidget.com lightwidget.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.apptrian.com https://www.falconacoustics.co.uk magefan.com cm.magefan.com https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cdninstagram.com *.google.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.googleapis.com *.placeholder.com cdn.lightwidget.com lightwidget.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.apptrian.com *.hotjar.com *.googleadservices.com https://www.google.com https://www.gstatic.com https://js.braintreegateway.com none: report-sample: *.google.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.instagram.com *.cdninstagram.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.googleapis.com *.placeholder.com cdn.lightwidget.com lightwidget.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://maxcdn.bootstrapcdn.com/font-awesome/latest/css/font-awesome.min.css https://fonts.googleapis.com unsafe-inline: *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.google.com *.youtube.com *.cdninstagram.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.placeholder.com cdn.lightwidget.com lightwidget.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.apptrian.com wss://ws.hotjar.com *.hotjar.io https://api.braintreegateway.com https://api.sandbox.braintreegateway.com https://payments.sandbox.braintree-api.com https://payments.braintree-api.com https://origin-analytics-sand.braintree-api.com https://origin-analytics-sand.sandbox.braintree-api.com none: api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com *.cloudflare.com *.twitter.com *.twimg.com *.youtube.com *.cdninstagram.com s7.addthis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.googleapis.com *.placeholder.com cdn.lightwidget.com lightwidget.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src * unsafe-inline: unsafe-eval: block-all-mixed-content: 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-ueCUstJaw8qoEt/gcg4thw==' 'strict-dynamic' https://metrics.fixami.fr https://*.hotjar.com https://*.mypurecloud.de https://*.kindlycdn.com https://*.exponea.com https://www.youtube.com https://s.ytimg.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https:; frame-src 'self' https://*.adyen.com https://*.paypal.com https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://*.adyen.com https://*.paypal.com; frame-ancestors 'none'; report-uri /api/csp-report; report-to csp-endpoint 1
default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data:; connect-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self' *.fortrabbit.com;                 script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' *.fortrabbit.com             https://cdn.usefathom.com             https://widget.intercom.io https://js.intercomcdn.com;                 style-src 'self' 'unsafe-inline' *.fortrabbit.com;                 img-src 'self' data: blob: *.fortrabbit.com             https://*.usefathom.com             https://js.intercomcdn.com https://static.intercomassets.com https://downloads.intercomcdn.com https://uploads.intercomusercontent.com             https://*.sorryapp.com             https://img.youtube.com             https://www.gravatar.com             https://github.com https://*.githubusercontent.com;                 font-src 'self' *.fortrabbit.com             https://js.intercomcdn.com https://fonts.intercomcdn.com;                 connect-src 'self' *.fortrabbit.com             https://*.usefathom.com             https://api-iam.intercom.io https://api-ping.intercom.io https://*.intercom.io wss://*.intercom.io wss://*.intercom-messenger.com https://uploads.intercomusercontent.com             https://fortrabbit.betteruptime.com;                 media-src 'self'             https://js.intercomcdn.com;                 frame-src 'self'             https://intercom-sheets.com             https://www.youtube-nocookie.com;                 frame-ancestors 'self';         base-uri 'self';         form-action 'self';         upgrade-insecure-requests 1
default-src 'self'; base-uri 'self'; frame-ancestors 'self'; object-src 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://maps.googleapis.com https://maps.gstatic.com https://hcaptcha.com https://*.hcaptcha.com https://*.hcaptcha.net https://*.azureedge.net https://*.azurefd.net 'report-sample'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https:; frame-src 'self' https:; worker-src 'self' blob:; media-src 'self' https:; manifest-src 'self'; upgrade-insecure-requests; block-all-mixed-content 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: logger.scot.nhs.uk *.fontawesome.com use.typekit.net *.google.com *.google.co.uk *.googleapis.com themes.googleusercontent.com *.gstatic.com code.jquery.com yui.yahooapis.com *.bootstrapcdn.com cdnjs.cloudflare.com cdn.jsdelivr.net unpkg.com *.twitter.com *.twimg.com *.youtube.com youtu.be *.ytimg.com www.youtube-nocookie.com player.vimeo.com i.vimeocdn.com cdn.jwplayer.com content.jwplatform.com prd.jwpltx.com *.jwpcdn.com *.jwpsrv.com *.civiccomputing.com cc.cdn.civiccomputing.com secure.gravatar.com public.tableau.com www.openstreetmap.org browser-update.org s.w.org www.geoplugin.net *.wp.com hcaptcha.com *.hcaptcha.com www.careopinion.org.uk www.patientopinion.org.uk assets.nhs.uk www.travelinescotland.com www.travelinescotland.com www.nhsgrampian.com www.nhsgrampian.co.uk nhsgrampian.org *.nhsgrampian.org walkit.com nhs.attendanywhere.com; worker-src 'self' www.google.com; frame-ancestors 'self'; base-uri 'self'; report-to csp-endpoint; report-uri https://web-reports.scot.nhs.uk/api/v1/csp-report 1
default-src 'self' *.roche.com *.roche.net *.gene.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.roche.com *.roche.net *.gene.com snap.licdn.com cdn.walkme.com apis.google.com tpc.googlesyndication.com api.html5media.info workdevapp.com cdn-js.net gdata.youtube.com twitter.com geolocation.onetrust.com api.flickr.com graph.facebook.com sharecdn.social9.com maps.googleapis.com use.typekit.com use.typekit.net munchkin.marketo.net img.en25.com w.likebtn.com cdn.mathjax.org sadmin.brightcove.com cdnjs.cloudflare.com releases.flowplayer.org script.crazyegg.com wi.likebtn.com pepperglobal.com analytics.twitter.com cdn.blueconic.net connect.facebook.net fullstory.com script.hotjar.com gnntch.blueconic.net rules.quantcount.com secure.quantserve.com static.hotjar.com www.youtube.com www.googletagmanager.com www.google-analytics.com google-analytics.com *.gstatic.com static.ads-twitter.com sjs.bizographics.com *.linkedin.com www.google.com w.soundcloud.com s.ytimg.com *.cloudflareaccess.com *.salesforceliveagent.com https://*.roche.com:8080 https://cdnjs.org https://service.force.com/* cdn.cookielaw.org static.cloudflareinsights.com googleads.g.doubleclick.net 7232514.collect.igodigital.com; style-src * 'self' 'unsafe-inline'; img-src * 'self' data:; font-src * 'self' data:; connect-src * 'self'; media-src * 'self' data:; object-src 'self'; child-src 'self' *.roche.com *.roche.net *.gene.com *.facebook.net qpcr.probefinder.com *.force.com *.hotjar.com www.facebook.com www.google.com www.googletagmanager.com www.youtube.com; frame-src 'self' *.roche.com *.roche.net *.gene.com www.youtube.com sites.google.com *.googleapis.com *.cloudfront.net *.facebook.net *.arcot.com live.sagepay.com player.vimeo.com tpc.googlesyndication.com players.brightcove.net qpcr.probefinder.com *.eloqua.com *.hotjar.com *.soundcloud.com *.facebook.com *.google.com *.googletagmanager.com *.youtube-nocookie.com *.youtube.com *.mendeley.com *.force.com https://cdn.walkme.com/*; worker-src 'self' *.roche.com *.roche.net *.gene.com; frame-ancestors 'self' *.roche.com *.roche.net *.gene.com datastudio.google.com sites.google.com content.bioclinicien.fr connect.facebook.net www.facebook.com s1691.t.eloqua.com *.cloudflareworkers.com; form-action 'self' *.roche.com *.roche.net *.gene.com content.bioclinicien.fr connect.facebook.net www.facebook.com s1691.t.eloqua.com; base-uri 'self' *.roche.com *.roche.net *.gene.com *.secure.roche.com; report-uri https://ayba8dhs.uriports.com/reports/report; report-to default 1
font-src https://cdn.riverty.design/ *.fontawesome.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com uc8.tv 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src bid.g.doubleclick.net player.vimeo.com *.youtube.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com https://www.google.com/recaptcha/ uc8.tv https://documents.riverty.com/ *.multisafepay.com https://pay.google.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.vimeocdn.com i.ytimg.com *.youtube.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com https://cdn.myafterpay.com/ uc8.tv https://cdn.riverty.design/ www.apptrian.com www.facebook.com *.disqus.com *.multisafepay.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ uc8.tv https://cdn.myafterpay.com/ https://cdn.bnpl.riverty.io/ www.apptrian.com www.facebook.com connect.facebook.net graph.facebook.com *.disqus.com *.avada.io *.multisafepay.com https://pay.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.fontawesome.com *.multisafepay.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com www.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com uc8.tv https://cdn.myafterpay.com/ https://documents.myafterpay.com/ https://documents.riverty.com/ https://www.afterpay.nl/ https://cdn.bnpl.riverty.io/ https://trace-api.newrelic.com/ https://distributions.crowdin.net/ https://api.crowdin.com/ www.apptrian.com connect.facebook.net graph.facebook.com https://get.geojs.io *.avada.io *.multisafepay.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self' data:; connect-src 'self'; frame-src 'self'; worker-src 'self' blob:; manifest-src 'self' 1
manifest-src 'self' ; script-src 'strict-dynamic' 'nonce-5b749276-6a63-444e-b964-cde46a9fe85c' ; default-src 'self' ; frame-src 'self' policy.app.cookieinformation.com consent.cookiebot.com youtube.com www.youtube.com candidate.hr-manager.net esp-eu.aptrinsic.com storymaps.arcgis.com newassets.hcaptcha.com; child-src 'self' ; style-src 'self' 'unsafe-inline' dl.episerver.net use.typekit.net p.typekit.net web-sdk-eu.aptrinsic.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net cdn.imghost.no static.checkin.no; worker-src 'self' ; media-src 'self' ; font-src 'self' dl.episerver.net use.typekit.net dhm5hy2vn8l0l.cloudfront.net; object-src 'self' ; base-uri 'self' ; form-action 'self' ; img-src 'self' data: www.facebook.com dl.episerver.net makenewsmail-v4.imghost.no; connect-src 'self' data: ngino.matomo.cloud dc.services.visualstudio.com policy.app.cookieinformation.com youtube.com www.youtube.com cdn.dialogapi.no newassets.hcaptcha.com subscribers.dialogapi.no static.checkin.no api.checkin.no logging.checkin.no wss://ws.checkin.no; 1
script-src 'nonce-MIgMzeHIQlaKRQ9TUmz1XQ' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/static-on-bigtable; base-uri 'none' 1
default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; frame-ancestors 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; media-src 'self' https:; frame-src 'self' https:; font-src 'self' data:; connect-src 'self'; script-src 'self' 'sha256-QtJFqSbWDSWy5AZvbOs9Pc8RVs5Nb+g9XRJ8hgbBcK0=' 'sha256-PCgLMeoDoRuCyjNR2aMhyHjLm6/a0pSO03Zy5MiXaJs=' 'sha256-8xI0N+LbFWSVU/T1BfFid7dS07ht0vWwjnp2bDSGAu0=' 1
img-src https://higherlogicdownload.s3.amazonaws.com/MORS/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/MORS/ https://img.youtube.com/vi/ https://static.filestackapi.com/picker/ https://d2x5ku95bkycr3.cloudfront.net https://higherlogiclongterm.s3.amazonaws.com/MORS/ blob: https://d132x6oi8ychic.cloudfront.net 'self' https://cdn.higherlogic.com/iconfiletypes/ https://cdn.higherlogic.com/libraryfilethumbnails/ https://www.w3.org/2000/svg https://*.google-analytics.com https://www.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.<TLD>; style-src https://d132x6oi8ychic.cloudfront.net 'unsafe-inline' https://higherlogiccloudfront.s3.amazonaws.com https://cdn.jsdelivr.net/jquery.slick/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://d2x5ku95bkycr3.cloudfront.net/ https://ajax.googleapis.com/ajax/libs/jqueryui/ https://use.fortawesome.com/ https://cdn.higherlogic.com/ai-assistant https://static.filestackapi.com/picker/ https://fonts.googleapis.com/ https://d3uf7shreuzboy.cloudfront.net/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/MORS/ https://higherlogicdownload.s3.amazonaws.com/MORS/ https://higherlogiclongterm.s3.amazonaws.com/MORS/ 'self'; font-src https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogiccloudfront.s3.amazonaws.com https://higherlogicdownload.s3.amazonaws.com/MORS/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/MORS/ 'self' https://higherlogiclongterm.s3.amazonaws.com/MORS/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://d2x5ku95bkycr3.cloudfront.net https://d132x6oi8ychic.cloudfront.net data:; script-src-elem https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d3uf7shreuzboy.cloudfront.net/ https://static.filestackapi.com/picker/ https://cdn.higherlogic.com/ai-assistant https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d2x5ku95bkycr3.cloudfront.net/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://www.gstatic.com/recaptcha/ https://static.filestackapi.com/filestack-js/ 'self' https://ajax.aspnetcdn.com/ajax/ 'unsafe-eval' 'unsafe-inline' https://higherlogicdownload.s3.amazonaws.com/MORS/2d494ab1-2f51-45e0-b90a-107285801b13/UploadedImages/Scripts/ https://cdn.jsdelivr.net/jquery.slick/1.6.0/ https://www.google-analytics.com/ https://www.googletagmanager.com; media-src https://higherlogiclongterm.s3.amazonaws.com/MORS/ https://higherlogicdownload.s3.amazonaws.com/MORS/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/MORS/ https://higherlogicstream.s3.amazonaws.com/MORS/ 'self' https://d132x6oi8ychic.cloudfront.net; script-src https://higherlogiclongterm.s3.amazonaws.com/MORS/ https://higherlogicdownload.s3.amazonaws.com/MORS/ https://ajax.aspnetcdn.com/ajax/ https://cdn.jsdelivr.net/jquery.slick/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d132x6oi8ychic.cloudfront.net https://cdn.informz.net 'unsafe-eval' https://use.fortawesome.com/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/MORS/ https://cdnjs.cloudflare.com/ajax/libs/prism/ 'unsafe-inline' https://d2x5ku95bkycr3.cloudfront.net/ https://higherlogiccloudfront.s3.amazonaws.com https://static.filestackapi.com https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d3uf7shreuzboy.cloudfront.net/ 'self' https://www.googletagmanager.com/ https://cdnjs.cloudflare.com/; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://api.connectedcommunity.org/ 'self' https://www.youtube.com/embed/ https://*.kb.us.higherlogic.com https://info.mors.org/ https://www.mors.org/ https://online.fliphtml5.com/ https://www.googletagmanager.com; connect-src https://upload.filestackapi.com https://static.filestackapi.com https://cloud.filestackapi.com/folder/list/ 'self' https://hl-managedservices.informz.net https://d3uf7shreuzboy.cloudfront.net/ blob: https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.<TLD> https://pagead2.googlesyndication.com; worker-src 'self'; default-src 'self'; base-uri 'self'; frame-ancestors https://*.connectedcommunity.org/ 'self'; object-src 'none'; manifest-src 'self'; 1
font-src https://www.googletagmanager.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src www.google.com 'self' 'unsafe-inline'; img-src *.gstatic.com https://images.unsplash.com www.google.com www.google.com.ua https://0.avmarket.rs https://www.google.com https://www.google.rs https://analytics.google.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.googletagmanager.com https://www.facebook.com https://connect.facebook.net https://bat.bing.com data: 'self' 'unsafe-inline'; script-src tagmanager.google.com https://www.googletagmanager.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com *.newrelic.com *.nr-data.net https://0.avmarket.rs https://connect.facebook.net https://bat.bing.com https://stapecdn.com https://static.cloudflareinsights.com https://googleads.g.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://www.googletagmanager.com tagmanager.google.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://maps.googleapis.com https://player.vimeo.com *.newrelic.com *.nr-data.net https://0.avmarket.rs https://analytics.google.com https://www.google.com https://www.google.rs https://www.googleadservices.com https://ad.doubleclick.net https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://static.cloudflareinsights.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://*.ewaypayments.com https://*.sandbox.ewaypayments.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.doubleclick.net *.pinterest.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com https://firebasestorage.googleapis.com *.hsforms.net *.hsforms.com 'self' data: *.paperdivas.com.au data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://*.ewaypayments.com https://*.sandbox.ewaypayments.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.avada.io *.shopify.com *.hsforms.net *.hsforms.com *.pinimg.com *.elfsight.com *.pinterest.com *.googleapis.com *.googleadservices.com *.adobedtm.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.googletagmanager.com *.fontawesome.com https://fonts.bunny.net *.gstatic.com *.paperdivas.com.au 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.google-analytics.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog https://get.geojs.io *.avada.io t.elasticsuite.io *.hsforms.net *.hsforms.com *.google.co.in *.pinterest.com *.elfsight.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'strict-dynamic' 'nonce-W0JEnsU7J4GoyOFfdr370A==' 1
worker-src blob:; font-src fonts.gstatic.com use.typekit.net *.fontawesome.com *.fonts.googleapis.com *.gstatic.com data: *.cloudflare.com * *.kxcdn.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.zoho.com * *.facebook.com *.facebook.net *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com secure.nmi.com secure.networkmerchants.com collectcheckout.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com secure.nmi.com secure.networkmerchants.com collectcheckout.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.addthis.com *.pinterest.com *.doubleclick.net * *.certcapture.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com landofcoder.com *.facebook.com *.facebook.net accounts.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com *.weltpixel.com secure.nmi.com secure.networkmerchants.com collectcheckout.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com *.cdninstagram.com *.googleadservices.com *.google-analytics.com *.sitejabber.com *.resellerratings.com *.bbb.org * *.certcapture.com *.kxcdn.com *.twitter.com *.google.com *.fbcdn.net imgsct.cookiebot.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com magefan.com cm.magefan.com *.disqus.com *.facebook.com *.facebook.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https:// *.reddit.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.instagram.com *.resellerratings.com *.googleadservices.com *.google-analytics.com *.google.com *.sitejabber.com *.bbb.org cdnjs.cloudflare.com *.avalara.com *.shipstation.com *.shipperhq.com *.zohopublic.com *.hotjar.com *.hotjar.io * *.aquascience.net *.certcapture.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com consent.cookiebot.com chimpstatic.com downloads.mailchimp.com *.list-manage.com widget.freshworks.com m2epro.freshdesk.com landofcoder.com *.disqus.com *.facebook.net accounts.google.com *.fontawesome.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https:// https://www.googletagmanager.com tagmanager.google.com *.redditstatic.com *.reddit.com unpkg.com secure.nmi.com secure.networkmerchants.com collectcheckout.com 'self' 'unsafe-inline'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.resellerratings.com *.sitejabber.com cdnjs.cloudflare.com * unsafe-inline *.certcapture.com *.google.com *.kxcdn.com *.gstatic.com downloads.mailchimp.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com accounts.google.com assets.braintreegateway.com https:// tagmanager.google.com secure.nmi.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.cloudflare.com *.paypal.com *.googleapis.com *.addthis.com *.cardinalcommerce.com *.graph.instagram.com *.google-analytics.com *.google.com *.doubleclick.net *.avalara.com *.shipstation.com *.shipperhq.com *.googlesyndication.com *.hotjar.io *.hotjar.com * *.certcapture.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com *.analytics.google.com cbsignal-1.in-endp.profitmetrics.io googleads.g.doubleclick.net widget.freshworks.com m2epro.freshdesk.com landofcoder.com *.facebook.com *.facebook.net accounts.google.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com google.com *.redditstatic.com *.reddit.com secure.nmi.com secure.networkmerchants.com collectcheckout.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com accounts.google.com www.bugherd.com sessions.bugsnag.com wss://ws.pusherapp.com *.pusher.com www.google.co.uk *.doubleclick.net *.google-analytics.com *.googleadservices.com *.hotjar.com *.hotjar.io *.facebook.com *.instagram.com services.postcodeanywhere.co.uk *.zdassets.com wss://widget-mediator.zopim.com *.stripe.com *.stripe.network *.link.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com *.sagepay.com *.paypal.com *.opayo.eu.elavon.com *.opayo.cloud http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google.com google.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.6.2/fonts/fontawesome-webfont.woff2 https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.6.2/fonts/fontawesome-webfont.woff https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.6.2/fonts/fontawesome-webfont.ttf cdnjs.cloudflare.com *.fontawesome.com https://fonts.gstatic.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://seo.mageplaza.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://static.addtoany.com js.stripe.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://maps.gstatic.com https://maps.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://api.addressfinder.io https://www.googletagmanager.com/gtag/js https://maps.googleapis.com https://static.addtoany.com js.stripe.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://api.addressfinder.io *.bootstrapcdn.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.6.2/css/font-awesome.css cdnjs.cloudflare.com *.fontawesome.com *.googleapis.com *.addtoany.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://api.addressfinder.io https://maps.googleapis.com/maps/api/mapsjs/gen_204 https://get.geojs.io *.avada.io http://dpm.demdex.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://telegram.org https://oauth.telegram.org; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://api.telegram.org wss://*.telegram.org; frame-src 'self' https://oauth.telegram.org; frame-ancestors 'self' https://web.telegram.org https://*.telegram.org https://telegram.org; base-uri 'self'; form-action 'self' 1
default-src 'self'; report-to csp-endpoint 1
default-src 'self' seatgeek.okta.com *.oktacdn.com; connect-src 'self' seatgeek.okta.com seatgeek-admin.okta.com *.oktacdn.com *.mixpanel.com *.mapbox.com seatgeek.kerberos.okta.com seatgeek.mtls.okta.com *.authenticatorlocalprod.com:8769 http://localhost:8769 http://127.0.0.1:8769 *.authenticatorlocalprod.com:65111 http://localhost:65111 http://127.0.0.1:65111 *.authenticatorlocalprod.com:65121 http://localhost:65121 http://127.0.0.1:65121 *.authenticatorlocalprod.com:65131 http://localhost:65131 http://127.0.0.1:65131 *.authenticatorlocalprod.com:65141 http://localhost:65141 http://127.0.0.1:65141 *.authenticatorlocalprod.com:65151 http://localhost:65151 http://127.0.0.1:65151 https://oinmanager.okta.com data: *.ingest.sentry.io; script-src 'unsafe-inline' 'nonce-jb0aGLFSvUZvrLhsaikFNQ' 'self' 'report-sample' seatgeek.okta.com *.oktacdn.com; style-src 'unsafe-inline' 'nonce-jb0aGLFSvUZvrLhsaikFNQ' 'self' 'report-sample' seatgeek.okta.com *.oktacdn.com; frame-src 'self' seatgeek.okta.com seatgeek-admin.okta.com login.okta.com *.vidyard.com com-okta-authenticator: api-680e7385.duosecurity.com; img-src 'self' seatgeek.okta.com *.oktacdn.com *.tiles.mapbox.com *.mapbox.com *.vidyard.com data: blob:; font-src 'self' seatgeek.okta.com data: *.oktacdn.com fonts.gstatic.com; frame-ancestors 'self' https://seatgeekadmin.com 1
default-src tpc.googlesyndication.com *.safeframe.googlesyndication.com; script-src 'strict-dynamic' 'nonce-7g6ExuTjGkMjWdmnQcvLKwhehmJkrAgn63p9Zc83RBuKx37NC3' 'self' 'report-sample' 'unsafe-inline' cdn.syndication.twimg.com connect.facebook.net c.files.bbci.co.uk emp.bbci.co.uk mybbc-analytics.files.bbci.co.uk nav.files.bbci.co.uk news.files.bbci.co.uk platform.twitter.com public.flourish.studio static.bbc.co.uk static.bbci.co.uk static.chartbeat.com static2.chartbeat.com www.bbc.co.uk www.instagram.com www.ons.gov.uk gn-web-assets.api.bbc.com www.google-analytics.com adservice.google.co.uk adservice.google.com *.g.doubleclick.net www.googletagservices.com cdn.ampproject.org tpc.googlesyndication.com *.adsafeprotected.com *.effectivemeasure.net *.3lift.com cdn.permutive.com sb.scorecardresearch.com bbc.gscontxt.net bitesize.files.bbci.co.uk www.tiktok.com lf16-tiktok-web.ttwstatic.com static.files.bbci.co.uk; img-src 'self' https: data:; font-src c.files.bbci.co.uk gel.files.bbci.co.uk static.files.bbci.co.uk static.bbci.co.uk news.files.bbci.co.uk ws-downloads.files.bbci.co.uk bitesize.files.bbci.co.uk; style-src branding.files.bbci.co.uk cdn.riddle.com flo.uri.sh news.files.bbci.co.uk platform.twitter.com static.bbc.co.uk static.bbci.co.uk static.files.bbci.co.uk ton.twimg.com www.riddle.com 'unsafe-inline' lf16-tiktok-web.ttwstatic.com; frame-src 'self' bbc001.carto.com bbc003.carto.com bbc-maps.carto.com *.cdn.optimizely.com cdn.riddle.com chartbeat.com emp.bbc.co.uk emp.bbc.com flo.uri.sh graphics.reuters.com www.reuters.com graphics.thomsonreuters.com dynamic.mc-cdn.io vapi.mc-cdn.io vapi.beta.mc-cdn.io elections.mapcreator.io elections.beta.mapcreator.io cdn.mapcreator.io m.facebook.com news.files.bbci.co.uk personaltaxcalculator2.deloittecloud.co.uk platform.twitter.com public.flourish.studio static2.chartbeat.com syndication.twitter.com web.facebook.com www.bbc.co.uk www.facebook.com www.instagram.com www.tiktok.com www.ons.gov.uk www.riddle.com www.youtube.com www.youtube-nocookie.com uk-script.dotmetrics.net ssp-app-uk.votenow.tv ssp-app-uktest.votenow.tv ssp-app-ukbench.votenow.tv session.test.bbc.co.uk session.bbc.co.uk session.stage.bbc.co.uk bitesize.files.bbci.co.uk *.googlesyndication.com *.doubleclick.net edigitalsurvey.com eb2.3lift.com cdn-gl.imrworldwide.com *.teads.tv bitesize.files.bbci.co.uk; object-src 'none'; manifest-src static.files.bbci.co.uk bitesize.files.bbci.co.uk; media-src 'self' blob: https:; connect-src 'self' https:; child-src blob:; base-uri 'none'; form-action 'self' platform.twitter.com syndication.twitter.com uk-script.dotmetrics.net/DeviceInfo.dotmetrics account.bbc.com/auth/identifier/landing; frame-ancestors 'none'; upgrade-insecure-requests; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; frame-ancestors 'self'; 1
default-src * 'unsafe-inline' 'unsafe-eval' data: blob: filesystem:; frame-ancestors 'self' https://*.ifpg.org https://www.ifpg.org https://ifpg.org; report-uri https://www.ifpg.org/admin/code/postback/csp-log-handler.ashx; 1
object-src 'none';base-uri 'self';script-src 'nonce-41ROZscTJwieFrKFfZ2hxw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'none'; base-uri 'self'; block-all-mixed-content; script-src 'unsafe-inline' https:; style-src 'unsafe-inline' https:; img-src https: data: 'self'; object-src https: 'self'; font-src https: 'self'; connect-src https: 'self'; frame-ancestors 'self'; worker-src blob: https: 'self' 1
script-src 'unsafe-inline' 'unsafe-eval' 'self' 1003891.track.convertexperiments.com app.hubspot.com cdn-3.convertexperiments.com cdn-4.convertexperiments.com *.metrics.convertexperiments.com *.signals.convertexperiments.com logs.convertexperiments.com *.convertexperiments.com cdn.pdst.fm connect.facebook.net js.hs-analytics.net js.hs-banner.com js.hsforms.net js.hsleadflows.net js.hubspotfeedback.com js.usemessages.com organizer.bizzabo.com play.vidyard.com script.hotjar.com snap.licdn.com static.hotjar.com static.hsappstatic.net www.google-analytics.com www.googletagmanager.com www.recaptcha.net code.highcharts.com www.youtube.com js.hubspot.com www.dropbox.com widget.altrulabs.com www.google.com maps.googleapis.com wt-assets.hubteam.com cdn2.hubspot.net www.redditstatic.com cdn.veritonic.com gosniply.com d.impactradius-event.com js.hubspot.com 50339659.hs-sites.com analytics.tiktok.com api.s10h.io sgtm-amer.hubspot.com js.hsadspixel.net cdn.intellimize.co static.cloudflareinsights.com ob.greencolumnart.com tags.pw.adn.cloud cdn.jsdelivr.net js.storylane.io 'strict-dynamic' 'nonce-1eZ1cRTjCkKxP1bUDEYqgw=='; report-uri https://send.hsbrowserreports.com/csp/report 1
font-src *.fontawesome.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.visualwebsiteoptimizer.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.visualwebsiteoptimizer.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.fontawesome.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.fontawesome.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.yotpo.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.twitter.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com *.youtube.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.nr-data.net *.newrelic.com *.avada.io assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com cdn.dnky.co webchat.dotdigital.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com unsafe-inline *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.googleadservices.com *.google-analytics.com *.sandbox.paypal.com *.paypalobjects.com *.nr-data.net *.newrelic.com *.ampproject.org https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
object-src 'none'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://static.cloudflareinsights.com/beacon.min.js cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.datatables.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://platform-api.sharethis.com https://unpkg.com https://ws.sharethis.com https://www.google.com mdbootstrap.com; script-src-attr 'self'; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://static.cloudflareinsights.com/beacon.min.js https://www.google.com/recaptcha/api.js https://www.gstatic.com/recaptcha/releases/NZrMWHVy58-S9gVvad9HVGxk/recaptcha__en.js cdn.jsdelivr.net cdnjs.cloudflare.com https://cdn.datatables.net https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://platform-api.sharethis.com https://unpkg.com https://ws.sharethis.com https://www.google.com mdbootstrap.com; style-src 'self' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com https://cdn.datatables.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://stackpath.bootstrapcdn.com https://unpkg.com mdbootstrap.com use.fontawesome.com; style-src-attr 'self' 'unsafe-inline'; frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://*.gstatic.com *.fontawesome.com https://*.bootstrapcdn.com data: https://*.zopim.com https://*.typekit.net *.stape.io https://fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://*.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com/ https://*.facebook.com https://*.cookiebot.com https://*.youtube-nocookie.com/ https://*.weply.chat/ *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.stape.io https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com https://*.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io blueskytechmage.com mageblueskytech.com placehold.jp https://*.facebook.com https://*.google.com https://*.google.dk https://*.googleapis.com https://*.gstatic.com https://*.analytics.google.com https://*.zopim.com https://*.bisnode.com https://*.komtest1.dk https://*.autolock.dk https://*.autolock.se https://*.autolockde.de *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.doubleclick.net *.stape.io https://www.magezon.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com https://*.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://*.clerk.io https://*.gstatic.com *.google.com/ https://*.googleapis.com https://*.analytics.google.com https://*.googleadservices.com https://*.facebook.com https://*.zopim.com https://*.zdassets.com https://*.facebook.net https://*.newrelic.com https://*.nr-data.net https://chimpstatic.com https://*.chimpstatic.com https://*.fontawesome.com https://*.cookiebot.com https://*.weply.chat/ s7.addthis.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.gstatic.com *.googletagmanager.com *.doubleclick.net *.stape.io *.avada.io https://player.vimeo.com https://www.youtube.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://*.typekit.net fonts.googleapis.com https://*.googleapis.com https://*.bootstrapcdn.com *.fontawesome.com *.googleapis.com *.googletagmanager.com *.stape.io https://fonts.googleapis.com http://fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net https://*.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://*.zdassets.com https://*.analytics.google.com https://*.doubleclick.net https://*.zopim.com wss://*.zopim.com https://*.nr-data.net https://*.fontawesome.com https://*.cookiebot.com ekr.zdassets.com/ *.google-analytics.com *.stape.io https://get.geojs.io *.avada.io https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://sentry.io https://www.facebook.com; frame-src https://www.google.com/recaptcha/ https://www.facebook.com; script-src 'self' 'unsafe-inline' https://*.google-analytics.com https://www.googletagmanager.com https://*.googleapis.com/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://connect.facebook.net/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; default-src 'self'; media-src; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' https: data: 1
font-src fonts.gstatic.com use.typekit.net cash-f.squarecdn.com *.fontawesome.com https://attachments-ldn.imiengage.io data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors https://hub.heavenlydesserts.co.uk https://staging.hub.heavenlydesserts.co.uk https://heavenlydessertshub.fikrlabs.co.uk 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net www.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ * account.fetchify.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com https://age.yoti.com js.stripe.com *.hotjar.com https://attachments-ldn.imiengage.io 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io * https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://age.yoti.com www.facebook.com bat.bing.com *.google.com *.google.co.uk *.googleadservices.com *.google-analytics.com *.magentocommerce.com *.widgets.magentocommerce.com *.paypalobjects.com *.postcodeanywhere.co.uk *.stephensons.com *.feefo.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com *.magento-ds.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com https://age.yoti.com connect.facebook.net js-agent.newrelic.com bam.nr-data.net *.google-analytics.com *.googleapis.com googletagmanager.com googleadservices.com *.feefo.com *.cloudflare.com *.zdassets.com https://attachments-ldn.imiengage.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.cash.app cc-cdn.com https://static.klaviyo.com *.fontawesome.com unsafe-inline assets.braintreegateway.com https://age.yoti.com services.postcodeanywhere.co.uk *.typekit.net *.cloudflare.com *.feefo.com https://attachments-ldn.imiengage.io 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net * api.craftyclicks.co.uk pcls1.craftyclicks.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://age.yoti.com https://attachments-ldn.imiengage.io https://ekr.zdassets.com *.feefo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' blob: https://prod-bk-web.nl.rbi.tools/en/static/js/vendor.5dc447bb.js https://prod-bk-web.nl.rbi.tools/en/static/js/main.7ae9af3d.js https://prod-bk-web.nl.rbi.tools/en/static/js/runtime.cfa045e4.js https://*.mparticle.com https://cdn.cookielaw.org https://www.googletagmanager.com https://*.onetrust.com https://static.ads-twitter.com https://platform.twitter.com https://www.google-analytics.com https://connect.facebook.net https://secure.quantserve.com https://dynamic.criteo.com https://rules.quantcount.com https://cdn.branch.io https://app.link https://*.cdn4.forter.com https://dlthst9q2beh8.cloudfront.net https://sslwidget.criteo.com https://widget.eu.criteo.com https://pagead2.googlesyndication.com https://cdn.amplitude.com https://accounts.google.com https://appleid.cdn-apple.com https://analytics.tiktok.com https://c.amazon-adsystem.com https://js.adsrvr.org https://maps.googleapis.com https://googleads.g.doubleclick.net https://static.zdassets.com https://bat.bing.com https://cdn-st.adsmurai.com https://www.youtube.com https://player.vimeo.com https://prod-bk-web.nl.rbi.tools/en/static/js/main.20c0d1ec.js https://prod-bk-web.nl.rbi.tools/en/static/js/runtime.f3fe8d96.js; object-src 'none'; base-uri 'none'; worker-src 'self' blob:; report-uri https://intl-csp-service.rbictg.com/report 1
default-src 'self'; object-src 'none'; base-uri 'none'; script-src 'nonce-0899d06581401af3e350d5dc070eef63' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com https://at.alicdn.com; img-src 'self' data: https: http: blob:; connect-src 'self' https: wss:; frame-src 'self' https: http:; media-src 'self' data: https: http: blob:; worker-src 'self' blob: 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://integrations.etrusted.com https://widgets.trustedshops.com https://js.stripe.com https://m.stripe.network https://www.googletagmanager.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://integrations.etrusted.com https://widgets.trustedshops.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https://secure.gravatar.com https://s.w.org https://integrations.etrusted.com https://widgets.trustedshops.com https://cdn.etrusted.com https://www.google-analytics.com https://www.googletagmanager.com https://ad.doubleclick.net https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.vivapayments.com https://www.paypalobjects.com https://t.paypal.com; connect-src 'self' https://integrations.etrusted.com https://widgets.trustedshops.com https://m.stripe.com https://api.stripe.com https://www.google.com https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://googleads.g.doubleclick.net https://www.googleadservices.com https://api.vivapayments.com https://accounts.vivapayments.com https://www.paypal.com https://www.sandbox.paypal.com; frame-src 'self' https://js.stripe.com https://m.stripe.network https://www.vivapayments.com https://accounts.vivapayments.com https://www.paypal.com https://www.sandbox.paypal.com https://www.googletagmanager.com https://www.google.com; manifest-src 'self' https://www.google.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self' 1
default-src 'self'; img-src 'self' data: https:; media-src 'self' blob:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src 'self'; frame-ancestors 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https://support.antebot.com https://op.antebot.com https://static.ads-twitter.com https://analytics.twitter.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://api.antebot.com https://api.dicebear.com https://analytics.twitter.com https://t.co; font-src 'self' data:; connect-src 'self' https://api.antebot.com https://auth.antebot.com https://op.antebot.com https://support.antebot.com wss://support.antebot.com https://analytics.twitter.com https://discord.com; frame-src https://support.antebot.com; worker-src 'self' blob:; manifest-src 'self'; report-uri /api/csp-report; report-to csp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.googletagmanager.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com widget.freshworks.com m2epro.freshdesk.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://cdn.jsdelivr.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com widget.freshworks.com m2epro.freshdesk.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.careem-pay.com https://use.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.netcore.co.in/ *.hansel.io/ *.netcoresmartech.com https://local.netcoresmartech.com:3000 *.boxx.ai *.netcorein.com *.netcore.co.in https://fonts.gstatic.com 'self' data: www.searchanise.com *.searchserverapi.com searchserverapi.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://checkout.payfort.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.searchanise.com *.searchserverapi.com searchserverapi.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com tagassistant.google.com *.b-cdn.net *.tap.company *.careem-pay.com https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.searchanise.com *.searchserverapi.com searchserverapi.com *.twitter.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.visa.com *.b-cdn.net https://firebasestorage.googleapis.com flagpedia.net blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.searchanise.com *.searchserverapi.com searchserverapi.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.visa.com *.mastercard.com *.gstatic.com *.b-cdn.net *.careem-pay.com *.cloudflare.com *.avada.io *.shopify.com maps.googleapis.com *.netcore.co.in/ *.hansel.io/ *.netcoresmartech.com *.boxx.ai *.netcorein.com *.netcore.co.in https://player.vimeo.com https://www.youtube.com 'unsafe-inline' js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com searchanise-ef84.kxcdn.com s3.amazonaws.com ajax.aspnetcdn.com www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchanise.com api.amplitude.com cdn.amplitude.com *.twitter.com *.twimg.com https://ipinfo.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.b-cdn.net https://use.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com *.netcore.co.in/ *.hansel.io/ *.netcoresmartech.com *.boxx.ai *.netcorein.com *.netcore.co.in https://fonts.googleapis.com http://fonts.googleapis.com assets.braintreegateway.com www.searchanise.com *.searchserverapi.com searchserverapi.com searchanise-ef84.kxcdn.com s3.amazonaws.com *.twitter.com ton.twimg.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src *.netcore.co.in/ *.hansel.io/ *.netcoresmartech.com *.boxx.ai *.netcorein.com *.netcore.co.in 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com region1.google-analytics.com *.dev.tap.company *.tap.company https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com *.netcore.co.in/ *.hansel.io/ *.netcoresmartech.com *.boxx.ai *.netcorein.com *.netcore.co.in https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io https://olegnax.com https://api.instagram.com https://graph.instagram.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com api.amplitude.com stats.g.doubleclick.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-owZKFu7P7MwWnp/6hRgPyPaehlk=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
object-src 'none';base-uri 'self';script-src 'nonce-lDw4oa8O0qYz9tNVCrKVgw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net magefan.com cm.magefan.com *.disqus.com https://img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.kaptcha.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.kaptcha.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://player.vimeo.com https://accounts.google.com https://cdn.tailwindcss.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https://*.google-analytics.com https://api.assistant.app.kombai.com https://cdn.sanity.io https://chat-figma-info-dev.s3.us-east-1.amazonaws.com https://chat-figma-info-prod.s3.us-east-1.amazonaws.com https://i.ibb.co https://i.pravatar.cc https://image-cdn-prod.s3.us-east-1.amazonaws.com https://images.pexels.com https://images.unsplash.com https://kombai-assets.b-cdn.net https://picsum.photos https://placehold.co https://cdn.dribbble.com https://mir-s3-cdn-cf.behance.net https://pps.services.adobe.com https://pbs.twimg.com; media-src 'self' blob: https://kombai-assets.b-cdn.net https://cdn.dribbble.com https://video.twimg.com; connect-src 'self' https://*.google-analytics.com https://*.googletagmanager.com https://*.sanity.io https://*.vercel-insights.com https://agent.kombai.com https://api.assistant.app.kombai.com https://api.dub.co https://auth.agent.kombai.com https://us.i.posthog.com; frame-src 'self' blob: https://*.codesandbox.io https://accounts.google.com https://form.jotform.com https://my.spline.design https://player.vimeo.com https://www.googletagmanager.com https://www.openstreetmap.org https://www.youtube.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://form.jotform.com; frame-ancestors 'self' https://kombai.sanity.studio; upgrade-insecure-requests 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-BrdctchzRKRRTsisLS9CfI4skfI=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
default-src 'self'; form-action 'self' https://request.qlar.com; base-uri 'none'; frame-ancestors 'none'; object-src 'none'; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://ad.doubleclick.net https://google.com https://*.google.com https://*.google.de https://*.google.es https://*.google.co.in https://*.google.co.jp https://*.google.co.uk https://*.ads.linkedin.com https://t.visitorqueue.com; frame-src 'self' https://request.qlar.com https://td.doubleclick.net https://*.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://www.recaptcha.net; script-src 'strict-dynamic' 'nonce-VfanDPMZNPYry2XNAFdc0vxgnqIOg3ITWthj9zrR' 'self' https://www.googleadservices.com https://www.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://www.googletagmanager.com https://*.googletagmanager.com https://snap.licdn.com https://t.visitorqueue.com https://online.flippingbook.com https://d33i2vgywgme2s.cloudfront.net https://request.qlar.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://googleads.g.doubleclick.net  https://pagead2.googlesyndication.com https://www.googleadservices.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://google.com https://*.google.com https://*.google.de https://*.google.es https://*.google.co.in https://*.google.co.jp https://*.google.co.uk https://*.ads.linkedin.com https://t.visitorqueue.com; report-uri https://www.qlar.com/api/report/csp; report-to csp-endpoint; upgrade-insecure-requests; block-all-mixed-content 1
default-src 'self'; script-src 'nonce-2Q5rl191ZR+jMWSjlrslwQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
object-src 'none';base-uri 'self';script-src 'nonce-BJlw5193aNdicOjaWcQhUg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.monetico-services.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.monetico-services.com https://www.googletagmanager.com/ js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.doofinder.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ magefan.com cm.magefan.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://www.gstatic.com https://maps.googleapis.com *.doofinder.com chimpstatic.com downloads.mailchimp.com *.list-manage.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.avada.io js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.doofinder.com downloads.mailchimp.com *.fontawesome.com assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.monetico-services.com *.doofinder.com wss://*.doofinder.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.wesupply.xyz https://wesupplylabs.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.doofinder.com *.trackedlink.net *.ddlnk.net magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://redchamps.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com maps.googleapis.com *.google.ch *.cdninstagram.com *.fbcdn.net data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.doofinder.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com maps.googleapis.com *.cloudflare.com ajax.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.instagram.com https://www.mabuprofumerie.it 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com *.magento-datasolutions.com *.magento-ds.com *.doofinder.com webchat.dotdigital.com webchat.staging.dotdigital.com assets.braintreegateway.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.magento.com commerce.adobe.io *.magento-datasolutions.com *.magento-ds.com *.doofinder.com wss://*.doofinder.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com bam.nr-data.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://www.google-analytics.com *.instagram.com *.googleusercontent.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://cdnjs.cloudflare.com https://github.com; script-src-attr 'self'; style-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://cdnjs.cloudflare.com; style-src-attr 'self'; style-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://cdnjs.cloudflare.com; frame-ancestors 'self' 1
font-src *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://ps1.ncrsecurepay.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://ps1.ncrsecurepay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://firebasestorage.googleapis.com https://redchamps.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://ps1.ncrsecurepay.com *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://ps1.ncrsecurepay.com https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';    script-src 'self' 'unsafe-eval' 'unsafe-inline' *.ingest.sentry.io *.acsbapp.com *.tiqcdn.com;    style-src 'self' 'unsafe-inline';    img-src 'self' blob: data: images.ctfassets.net otbnet.d3.sc.omtrdc.net;    media-src 'self' blob: data: dacastmmod-mmd-cust.lldns.net;    font-src 'self';    object-src 'none';    base-uri 'self';    form-action 'self';    frame-ancestors 'none';    upgrade-insecure-requests;    connect-src 'self' *.ingest.sentry.io *.acsbapp.com *.tiqcdn.com dacastmmod-mmd-cust.lldns.net otbnet.d3.sc.omtrdc.net; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com https://use.fontawesome.com maxcdn.bootstrapcdn.com *.netcore.co.in/ *.hansel.io/ *.netcoresmartech.com https://local.netcoresmartech.com:3000 *.boxx.ai *.netcorein.com *.netcore.co.in https://fonts.gstatic.com 'self' data: www.searchanise.com *.searchserverapi.com searchserverapi1.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://checkout.payfort.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.searchanise.com *.searchserverapi.com *.twitter.com searchserverapi1.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.searchanise.com *.searchserverapi.com *.twitter.com searchserverapi1.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.visa.com flagpedia.net blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.twitter.com *.twimg.com www.google.ru www.searchanise.com *.searchserverapi.com s3.amazonaws.com searchserverapi1.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.visa.com *.mastercard.com *.avada.io *.gstatic.com maps.googleapis.com *.netcore.co.in/ *.hansel.io/ *.netcoresmartech.com *.boxx.ai *.netcorein.com *.netcore.co.in https://player.vimeo.com https://www.youtube.com 'unsafe-inline' js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com searchanise-ef84.kxcdn.com s3.amazonaws.com ajax.aspnetcdn.com www.searchanise.com *.searchserverapi.com *.searchanise.com api.amplitude.com *.twitter.com *.twimg.com searchserverapi1.com searchserverapi.com cdn.amplitude.com https://ipinfo.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://use.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com *.netcore.co.in/ *.hansel.io/ *.netcoresmartech.com *.boxx.ai *.netcorein.com *.netcore.co.in https://fonts.googleapis.com http://fonts.googleapis.com assets.braintreegateway.com www.searchanise.com *.searchserverapi.com searchanise-ef84.kxcdn.com s3.amazonaws.com *.twitter.com ton.twimg.com searchserverapi1.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src *.netcore.co.in/ *.hansel.io/ *.netcoresmartech.com *.boxx.ai *.netcorein.com *.netcore.co.in 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com *.netcore.co.in/ *.hansel.io/ *.netcoresmartech.com *.boxx.ai *.netcorein.com *.netcore.co.in https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io https://olegnax.com https://api.instagram.com https://graph.instagram.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com api.amplitude.com stats.g.doubleclick.net searchserverapi1.com api2.amplitude.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob:; style-src 'self' 'unsafe-inline' https: data:; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss:; base-uri 'self'; object-src 'self'; frame-ancestors 'self'; form-action 'self' https: 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; frame-src 'self' https:; frame-ancestors 'self'; font-src 'self' data: https:; connect-src 'self' https:; upgrade-insecure-requests 1
default-src 'self' f24.com *.f24.com; upgrade-insecure-requests; report-uri https://kcwa-uri.uriports.com/reports/report; report-to csp-endpoint; manifest-src 'self'; script-src https://www.googletagmanager.com https://tagmanager.google.com https://*.googletagmanager.com googleads.g.doubleclick.net cdn.cookielaw.org cookie-cdn.cookiepro.com *.onetrust.com snap.licdn.com j.6sc.co https://pi.pardot.com https://www.youtube-nocookie.com https://www.youtube.com https://www.clarity.ms https://scripts.clarity.ms https://bat.bing.com 'self' f24.com *.f24.com 'unsafe-inline'; style-src https://googletagmanager.com https://tagmanager.google.com https://fonts.googleapis.com cdn.cookielaw.org cookie-cdn.cookiepro.com *.onetrust.com https://www.youtube-nocookie.com https://www.youtube.com 'self' f24.com *.f24.com 'unsafe-inline'; media-src fact24.com 'self' f24.com *.f24.com; img-src data: fact24.com www.google.com www.google.hr www.google.fr www.google.fi www.google.se www.google.no www.google.ch www.google.lu www.google.de www.google.at www.google.es www.google.hn www.google.dk www.google.nl www.google.be www.google.ci www.google.li www.google.co.th www.googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://*.google-analytics.com https://*.googletagmanager.com googleads.g.doubleclick.net pagead2.googlesyndication.com cdn.cookielaw.org px.ads.linkedin.com px4.ads.linkedin.com b.6sc.co img.youtube.com img.youtube-nocookie.com i.ytimg.com https://c.clarity.ms https://claritystatic.blob.core.windows.net https://c.bing.com https://bat.bing.com 'self' f24.com *.f24.com; frame-src https://www.googletagmanager.com https://www.youtube-nocookie.com https://www.youtube.com www.tfaforms.com f24.jobs.personio.de 'self' f24.com *.f24.com; font-src https://fonts.gstatic.com data: 'self' f24.com *.f24.com; connect-src www.googletagmanager.com www.google.com www.google.hr www.google.fr www.google.fi www.google.se www.google.no www.google.ch www.google.lu www.google.de www.google.at www.google.es www.google.hn www.google.dk www.google.nl www.google.be www.google.ci www.google.li www.google.co.th https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com www.googleadservices.com pagead2.googlesyndication.com googleads.g.doubleclick.net cdn.cookielaw.org geolocation.onetrust.com privacyportal-eu.onetrust.com px.ads.linkedin.com ipv6.6sc.co c.6sc.co epsilon.6sense.com https://www.youtube-nocookie.com https://www.youtube.com noembed.com https://www.clarity.ms https://a.clarity.ms https://b.clarity.ms https://c.clarity.ms https://d.clarity.ms https://e.clarity.ms https://f.clarity.ms https://g.clarity.ms https://h.clarity.ms https://i.clarity.ms https://j.clarity.ms https://k.clarity.ms https://l.clarity.ms https://m.clarity.ms https://n.clarity.ms https://o.clarity.ms https://p.clarity.ms https://q.clarity.ms https://r.clarity.ms https://s.clarity.ms https://t.clarity.ms https://u.clarity.ms https://v.clarity.ms https://w.clarity.ms https://x.clarity.ms https://y.clarity.ms https://z.clarity.ms https://bat.bing.com 'self' f24.com *.f24.com; frame-ancestors 'none'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.klarnacdn.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com bytedance: sslocal: magento-cloudflare.jetrails.com *.klarna.com *.mediacliphub.com https://*.azureedge.net *.weltpixel.com https://plumrocket.com *.stripe.com klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://player.vimeo.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com ads.tiktok.com analytics.tiktok.com analytics-ipv6.tiktokw.us *.ytimg.com *.klarna.com *.klarnaevt.com *.klarnacdn.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://img.youtube.com *.mediacliphub.com maps.gstatic.com https://storage.gra.cloud.ovh.net https://inkifi.com https://www.google.de https://track.sweetanalytics.com https://d3k81ch9hvuctc.cloudfront.net https://www.zenaps.com https://www.awin1.com https://*.vimeocdn.com *.cdninstagram.com *.fbcdn.net maps.googleapis.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com ct.pinterest.com www.pinterest.com s.pinimg.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com ads.tiktok.com analytics.tiktok.com analytics-ipv6.tiktokw.us *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com https://static.mediacliphub.com maps.googleapis.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarnaevt.com *.amazon.com *.link.com ajax.googleapis.com https://www.googletagmanager.com tagmanager.google.com https://storage.gra.cloud.ovh.net https://static.cloudflareinsights.com https://www.dwin1.com https://track.sweetanalytics.com https://player.vimeo.com https://www.googleoptimize.com *.instagram.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.klarnacdn.net https://static.klaviyo.com *.stripe.network *.stripecdn.com *.amazon.com tagmanager.google.com https://storage.gra.cloud.ovh.net https://static-tracking.klaviyo.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com pinterest.com www.pinterest.com ct.pinterest.com s.pinimg.com tiktok.com www.tiktok.com connect.tiktok.net graph.tiktok.com ads.tiktok.com analytics.tiktok.com analytics-ipv6.tiktokw.us *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.mediacliphub.com https://dc.services.visualstudio.com maps.googleapis.com places.googleapis.com *.stripe.com klarna.com *.link.com *.amazon.com https://www.google-analytics.com https://storage.gra.cloud.ovh.net https://ebbot.eu https://analytics-ipv6.tiktokw.us https://www.merchant-center-analytics.goog https://js.monitor.azure.com https://*.in.applicationinsights.azure.com https://eastus-3.in.applicationinsights.azure.com https://track.sweetanalytics.com https://api-js.datadome.co *.instagram.com *.googleusercontent.com *.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-HVFZ8qL7QVqS4+JvFcliTFg+j4U=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
object-src 'none';base-uri 'self';script-src 'nonce-S4jgazZCexte5AA5r7oP' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'report-sample';report-uri https://csp.withgoogle.com/csp/scfe 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https://oflnwcruatfmiptrffbb.supabase.co https://*.fly.dev https://www.google-analytics.com https://www.googletagmanager.com; media-src 'self' data: blob: https://oflnwcruatfmiptrffbb.supabase.co; connect-src 'self' https://oflnwcruatfmiptrffbb.supabase.co wss://oflnwcruatfmiptrffbb.supabase.co https://*.fly.dev https://www.googletagmanager.com https://www.google-analytics.com https://*.ingest.sentry.io https://*.ingest.de.sentry.io; frame-src 'self' https://*.fly.dev; worker-src 'self' blob: 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.recurly.com https://cdn.eu.getblueshift.com https://api.eu.getblueshift.com https://bat.bing.com https://widget.trustpilot.com https://www.redditstatic.com https://static.hotjar.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://cdn.jwplayer.com https://*.ubembed.com https://cdn.studentbeans.com https://app.unbounce.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://marquee.imgix.net https://marquee-dev.imgix.net https://marquee-staging.imgix.net https://cdn.trustpilot.net https://www.google-analytics.com https://www.googletagmanager.com https://*.hotjar.com; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://api.eu.getblueshift.com https://bat.bing.com https://*.sentry.io https://www.google-analytics.com https://www.googletagmanager.com https://*.hotjar.com https://*.recurly.com https://widget.trustpilot.com; frame-src 'self' https://cdn.jwplayer.com https://www.google.com https://js.recurly.com https://www.studentbeans.com https://accounts.studentbeans.com https://connect.studentbeans.com; media-src 'self' https://cdn.jwplayer.com https://*.jwpcdn.com; object-src 'none'; base-uri 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com data: maxcdn.bootstrapcdn.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://static.addtoany.com/ www.google.com *.certcapture.com https://flex.cybersource.com https://testflex.cybersource.com *.twitter.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.certcapture.com https://flex.cybersource.com https://testflex.cybersource.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://static.addtoany.com/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.certcapture.com https://flex.cybersource.com https://testflex.cybersource.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com maxcdn.bootstrapcdn.com *.cloudflare.com *.googleapis.com *.google.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://stats.addtoany.com/menu *.googleapis.com *.certcapture.com https://flex.cybersource.com https://testflex.cybersource.com *.cloudflare.com *.twitter.com *.twimg.com 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src  'none'; connect-src 'self' *.cuckoldsessions.com *.dfxtra.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.cuckoldsessions.com *.dfxtra.com join.gammasecure.com; script-src 'self' *.cuckoldsessions.com *.dfxtra.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.cuckoldsessions.com *.dfxtra.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://www.googletagmanager.com https://pagead2.googlesyndication.com https://www.google-analytics.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://fundingchoicesmessages.google.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com; font-src 'self' https://cdn.jsdelivr.net https://fonts.gstatic.com; img-src 'self' data: https://www.google-analytics.com https://pagead2.googlesyndication.com https://fundingchoicesmessages.google.com; frame-src 'self' https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://maps.google.com https://www.google.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://fundingchoicesmessages.google.com; connect-src 'self' https://www.google-analytics.com https://pagead2.googlesyndication.com https://epi.adtrafficquality.google https://fundingchoicesmessages.google.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.dwin1.com https://www.dwin2.com https://www.awin1.com https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://code.jquery.com https://ajax.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; connect-src 'self' https:; frame-src https:; object-src 'none'; base-uri 'self' 1
font-src fonts.googleapis.com fonts.gstatic.com *.hotjar.com *.zopim.com *.fontawesome.com 'self' data: *.moosend.com *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.bing.com *.zdassets.com *.google.com *.google.gr *.googletagmanager.com *.adobe.com www.googleadservices.com www.google-analytics.com *.googleapis.com vimeo.com *.facebook.net *.doubleclick.net *.newrelic.com *.nr-data.net data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.google.gr *.facebook.com *.zopim.com *.moosend.com *.cloudflare.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ widget-v3.boxnow.gr/ widget-v5.boxnow.cy *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com cdn.dnky.co *.hotjar.com *.google.com/ *.trustpilot.com *.criteo.com *.zopim.com *.moosend.com *.cloudflare.com *.google.gr *.sandbox.paypal.com *.twitter.com *.googletagmanager.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google.gr *.google.com *.google.nl *.google.co.in connect.onlinesucces.nl px.ads.linkedin.com stats.g.doubleclick.net *.googleapis.com *.gstatic.com *.linkedin.com *.googletagmanager.com gallery.mailchimp.com *.trustedshops.com *.zopim.com cdn.jsdelivr.net *.jmango360.com *.datatrics.com *.smaato.net *.skroutz.gr *.moosend.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.bing.com *.zopim.io *.doubleclick.net *.soundestlink.com *.mastercard.com https://trustmark.gr *.tiktok.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com cdn.klarna.com https://www.magezon.com https://omnisnippet1.com https://wt.soundestlink.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.paypal.com *.google.com *.gstatic.com *.googletagmanager.com *.googleapis.com *.googleadservices.com cdn.dnky.co api.comapi.com *.trackedlink.net snap.licdn.com chimpstatic.com checkout.buckaroo.nl *.adyen.com *.zopim.com *.hotjar.com *.zdassets.com *.sendcloud.sc *.mailchimp.com *.trustedshops.com *.fontawesome.com *.facebook.net *.feedbackcompany.com *.google-analytic.com *.trustpilot.com *.newrelic.com *.nr-data.net cdn.jsdelivr.net *.googleoptimize.com *.clarity.ms *.datatrics.com *.criteo.net *.criteo.com *.youtube.com cdn.mouseflow.com *.skroutz.gr *.moosend.com *.adobedtm.com *.cloudflare.com *.google.gr *.vimeo.com 'self' data: *.tiktok.com *.doubleclick.net *.google-analytics.com *.google.com/ int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com www.google.com www.gstatic.com *.avada.io https://omnisnippet1.com https://forms.soundestlink.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com cdn.dnky.co checkout.buckaroo.nl *.fontawesome.com *.mailchimp.com *.trustpilot.com cdn.jsdelivr.net *.skroutz.gr *.zopim.com *.moosend.com *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.bing.com *.googletagmanager.com www.googleadservices.com www.google-analytics.com vimeo.com *.facebook.net *.facebook.com *.doubleclick.net *.google-analytics.com *.newrelic.com *.nr-data.net *.hotjar.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.toms.gr *.google.gr *.zopim.com *.moosend.com *.cloudflare.com 'self' data: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google.gr *.paypal.com commerce.adobedc.net api.comapi.com stats.g.doubleclick.net https://stats.g.doubleclick.net *.zdassets.com *.hotjar.com *.hotjar.io *.zopim.com wss://*.zopim.com *.feedbackcompany.com *.zendesk.com *.nr-data.net *.clarity.ms *.datatrics.com *.moosend.com *.cloudflare.com *.soundestlink.com *.omnisendlink.com *.googleadservices.com *.googleapis.com *.gstatic.com *.mastercard.com *.google.com *.googletagmanager.com *.tiktok.com https://googleads.g.doubleclick.net/ https://pagead2.googlesyndication.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googletagmanager.com https://*.cloudflare.com https://*.slotor777.com.ua https://test2.slotor777.com https://*.clarity.ms https://r.clarity.ms https://www.google-analytics.com https://*.doubleclick.net https://cdnjs.cloudflare.com https://pwa.slotor777.com.ua https://chat.slotor777.com.ua https://static.cloudflareinsights.com https://auth.slotor777.com.ua https://js-agent.newrelic.com https://connect.facebook.net; script-src-elem 'self' 'unsafe-inline' https://*.googletagmanager.com https://*.cloudflare.com https://*.slotor777.com.ua https://test2.slotor777.com https://*.clarity.ms https://r.clarity.ms https://www.google-analytics.com https://*.doubleclick.net https://cdnjs.cloudflare.com https://pwa.slotor777.com.ua https://chat.slotor777.com.ua https://static.cloudflareinsights.com https://auth.slotor777.com.ua https://js-agent.newrelic.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com; style-src-attr 'self' 'unsafe-inline'; img-src 'self' data: https://*.google-analytics.com https://*.doubleclick.net https://www.google.com.ua https://www.google.pl https://www.google.kz https://test2.slotor777.com https://*.googletagmanager.com https://*.cloudflare.com https://*.slotor777.com.ua https://*.clarity.ms https://www.google.com https://www.google.fr https://www.facebook.com https://translate.google.com https://c.clarity.ms https://fonts.gstatic.com https://*.google.cz https://*.google.co.uk; object-src 'none'; connect-src 'self' https://*.google-analytics.com https://analytics.google.com https://region1.analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://*.clarity.ms https://www.google.com.ua https://www.google.pl https://www.google.kz https://chat.slotor777.com.ua https://socket.slotor777.com.ua wss://socket.slotor777.com.ua https://td.doubleclick.net https://test2.slotor777.com https://*.googletagmanager.com https://www.google.fr https://www.google.com https://auth.slotor777.com.ua https://test2.slotor777.com.ua https://*.nr-data.net https://bam.eu01.nr-data.net https://www.facebook.com https://google.com https://www.googleadservices.com; font-src 'self' https://fonts.gstatic.com; frame-src 'self' https://chat.slotor777.com.ua https://dototo.net https://cdn4.endorphina.network https://nrgs-b2b-atbr.greentube.com https://td.doubleclick.net https://test2.slotor777.com https://www.google.com https://www.google.fr https://auth.slotor777.com.ua https://*.etr-op-133-adfr1.com https://www.facebook.com https://www.googletagmanager.com https://slotor777ua.games.amusnet.io https://betman.c4.3oaks.com https://gameseu.kaga88.com https://gamelaunch.voltent.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://slotor777.com.ua/ru/finance/create-payment https://www.facebook.com; report-uri https://reporting.slotor777.com.ua/api/csp-report; 1
report-uri https://www.sharemoney.com/csplog.do; default-src 'self' 'unsafe-inline' 'unsafe-eval' js2ios: data: blob: https://*.cardinalcommerce.com https://*.jquery.com https://*.osano.com https://*.googleapis.com https://*.jsdelivr.net https://*.cloudflare.com https://*.bootstrapcdn.com https://*.gstatic.com https://*.fontawesome.com https://*.googletagmanager.com https://*.google.com https://*.krxd.net https://*.googleadservices.com https://*.facebook.com https://*.facebook.net https://*.doubleclick.net https://*.freshchat.com https://*.taboola.com https://*.ensighten.com https://*.google-analytics.com https://*.adsrvr.org https://*.cloudfront.net https://fasttiger.io https://*.kaptcha.com https://*.maxmind.com https://*.mmapiws.com https://*.googlesyndication.com https://*.twitter.com https://*.bing.com https://*.hotjar.com https://*.hotjar.io wss://*.hotjar.com https://*.intentiq.com https://*.tsdtocl.com https://tsdtocl.com https://*.onfido.com wss://*.onfido.com https://*.sentry.io https://*.trustpilot.com https://unpkg.com https://branch.io https://*.posthog.com https://ops.testomnexgroup.com https://ops.omnexgroup.com; img-src * data: blob:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://assets.calendly.com https://cdn.jsdelivr.net https://cdn.tolt.io https://js.navattic.com https://ajax.googleapis.com https://analytics.ahrefs.com https://cdn.amplitude.com https://fast.wistia.com https://fast.wistia.net https://unpkg.com https://d3e54v103j8qbb.cloudfront.net; style-src 'self' 'unsafe-inline' https://assets.calendly.com https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https:; frame-src https://calendly.com https://*.wistia.com https://*.wistia.net https://*.navattic.com; connect-src 'self' https://api.tolt.io https://analytics.ahrefs.com https://api2.amplitude.com https://*.wistia.com https://*.wistia.net https://*.navattic.com; object-src 'none'; base-uri 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://*.googletagmanager.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://connect.facebook.net https://chat.sitconnect.net https://challenges.cloudflare.com https://mc.yandex.ru https://mc.yandex.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://api.sitconnect.net https://api.exchangerate-api.com https://*.ingest.de.sentry.io https://*.ingest.sentry.io https://*.google-analytics.com https://analytics.google.com https://*.googletagmanager.com https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://connect.facebook.net https://www.facebook.com https://chat.sitconnect.net wss://chat.sitconnect.net https://mc.yandex.ru https://mc.yandex.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://chat.sitconnect.net https://challenges.cloudflare.com https://mc.yandex.ru https://mc.yandex.com; media-src 'self' https: data:; worker-src 'self' blob:; frame-ancestors 'none'; base-uri 'self'; object-src 'none'; form-action 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.tiktok.com https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://static.addtoany.com/ *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com www.googletagmanager.com *.freshchat.com *.mattisson.nl *.cookiebot.eu *.pinimg.com *.cloudfront.net *.amazonaws.com *.pinterest.com js.mollie.com https://plumrocket.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com 'self' data: www.google.co.in *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com https://at19.net https://bdt9.net https://ds1.nl https://dt51.net https://dt61.net https://fr135.net https://glp8.net https://jdt8.net https://jf79.net https://hs82.net https://lt45.net https://mt74.net https://ndt5.net https://rkn3.net *.mattisson.nl *.cookiebot.eu *.pinimg.com *.cloudfront.net *.amazonaws.com *.usercentrics.eu *.pinterest.com https://www.mollie.com https://plumrocket.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://static.addtoany.com/ https://maps.googleapis.com https://player.vimeo.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com *.hotjar.com *.aiden.cx app.reloadify.com *.fw-cdn.com *.freshchat.com *.mattisson.nl *.cookiebot.eu *.pinimg.com *.cloudfront.net *.amazonaws.com *.pinterest.com js.mollie.com *.sendcloud.sc https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com *.freshchat.com *.mattisson.nl *.cookiebot.eu *.pinimg.com *.cloudfront.net *.amazonaws.com *.pinterest.com *.sendcloud.sc *.jsdelivr.net https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://stats.addtoany.com/menu https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.tiktok.com app.reloadify.com *.hotjar.io *.mattisson.nl *.cookiebot.eu *.pinimg.com *.cloudfront.net *.amazonaws.com *.pinterest.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-93YNhYKbGUIxTDvUWRj+33zf5M0=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: *.fontawesome.com *.salesfire.co.uk *.klarnacdn.net www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.elavon.com *.sagepay.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.searchanise.com *.searchserverapi.com *.searchserverapi1.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com https://api.clerk.io https://cdn.clerk.io 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.instagram.com www.google.com *.elavon.com *.sagepay.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.salesfire.co.uk www.searchanise.com *.searchserverapi.com *.searchserverapi1.com *.twitter.com *.trustpilot.com *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.cdninstagram.com https://cdn.clerk.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com stats.g.doubleclick.net www.google.co.uk www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.salesfire.co.uk *.twitter.com *.twimg.com www.google.ru www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com s3.amazonaws.com *.cloudflare.com *.klarna.com *.googleadservices.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cloudfront.net www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com *.instagram.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://api.clerk.io https://cdn.clerk.io https://custom.clerk.io chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.elavon.com *.sagepay.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.salesfire.co.uk searchanise-ef84.kxcdn.com s3.amazonaws.com ajax.aspnetcdn.com www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com *.searchanise.com api.amplitude.com *.twitter.com *.twimg.com *.trustpilot.com *.cloudflare.com *.google-analytics.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com www.xtento.com cdn.xtento.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://api.clerk.io https://cdn.clerk.io downloads.mailchimp.com *.fontawesome.com assets.braintreegateway.com *.salesfire.co.uk *.typekit.net www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com searchanise-ef84.kxcdn.com s3.amazonaws.com *.twitter.com ton.twimg.com *.trustpilot.com *.cloudflare.com *.googleapis.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com stats.g.doubleclick.net *.elavon.com *.sagepay.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.salesfire.co.uk *.smartmetrics.co.uk api.amplitude.com www.google-analytics.com *.cloudflare.com *.twitter.com *.twimg.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-obTBPJLSpGqBHKXn1pPrBQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.intercom.io https://js.intercomcdn.com https://*.intercomcdn.com https://payments-lib.cdn.s7s.ai https://telegram.org https://*.onesignal.com https://scripts.prdredir.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://challenges.cloudflare.com https://sports.wolf.io https://api.wolf.io; base-uri 'self'; object-src 'none'; worker-src 'self'; frame-src 'self' https:; report-uri https://o1054028.ingest.us.sentry.io/api/4510431370543104/security/?sentry_key=e42dbc3290a50e8eb3d3477db2aa3a21; report-to csp-endpoint 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: data: blob: https://vir2store.com https://*.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://*.g.doubleclick.net; style-src 'self' 'unsafe-inline' https://googletagmanager.com https://tagmanager.google.com ; img-src 'self' 'unsafe-inline' https: data: https://*.google-analytics.com https://*.googletagmanager.com https://googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://*.g.doubleclick.net; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.google.com https://*.g.doubleclick.net https://vir2store.com https://*.googlesyndication.com https://svrdntfctn.com/; font-src 'self' data:; media-src 'self' https: data: https://vir2store.com; report-uri 'self'; frame-ancestors 'none'; object-src 'none'; frame-src 'self' https: *.googletagmanager.com calendar.google.com; worker-src blob:; base-uri 'none'; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'report-sample' https://js.authorize.net/v1/AcceptCore.js https://www.google-analytics.com/analytics.js; style-src 'self' 'report-sample' https://fonts.googleapis.com; img-src 'self' data: https://secure.gravatar.com https://essvial.com; connect-src 'self' https://www.google-analytics.com; font-src 'self' https://fonts.gstatic.com; media-src 'self'; report-uri /csp-endpoint.php; form-action 'self'; frame-ancestors 'self'; object-src 'none'; frame-src 'self'; worker-src 'none'; manifest-src 'self'; base-uri 'self' 1
default-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' https: data:; frame-ancestors 'self'; 1
object-src 'none';base-uri 'self';script-src 'nonce-g7xIip-QraoXjzDnF4FqPA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cloudflare.com *.trustedshops.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com youtu.be *.vimeo.com *.addthis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com challenges.cloudflare.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.cloudflare.com https://cdn.klarna.com https://s.ytimg.com *.usercentrics.eu blob: *.magebig.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com https://meetanshi.com ts.tradetracker.net www.magmodules.eu data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com widget.freshworks.com m2epro.freshdesk.com https://widgets.reevoo.com *.cloudflare.com *.google-analytics.com *.gstatic.com *.googleadservices.com *.googleapis.com *.trustedshops.com *.usercentrics.eu *.addthis.com *.addthisedge.com *.moatads.com s7.addthis.com *.avada.io *.shopify.com *.googletagmanager.com https://www.googletagmanager.com tagmanager.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com challenges.cloudflare.com tm.tradetracker.net https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com widget.freshworks.com m2epro.freshdesk.com https://widgets.reevoo.com https://widgets.reevoo.com/register-feefo/feefo-widgets-app/css/feefo_loader.css *.cloudflare.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com widget.freshworks.com m2epro.freshdesk.com *.cloudflare.com *.googleapis.com https://ipinfo.io *.facebook.com ekr.zdassets.com/ https://get.geojs.io *.avada.io https://www.google-analytics.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' wss:;connect-src 'self' wss: https://api.whizeo.com/ https://region1.analytics.google.com/ https://region1.google-analytics.com/ https://chat.whizeo.com/ https://apikeys.civiccomputing.com/ https://analytics.google.com/ https://www.google.com/ https://www.google-analytics.com/ https://pagead2.googlesyndication.com/ https://googleads.g.doubleclick.net/ https://stats.g.doubleclick.net/ https://px.ads.linkedin.com/ https://l.sharethis.com/ ;font-src 'self' https: data: https://fonts.gstatic.com/;frame-src 'self' https: data:;img-src 'self' https: data: blob:;media-src 'self';object-src 'none';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://services.whizeo.com/ https://cdn.whizeo.com/ https://data.whizeo.com/ https://bat.bing.com/ https://cc.cdn.civiccomputing.com/ https://cdnjs.cloudflare.com/ https://googleads.g.doubleclick.net/ https://rawcdn.githack.com/ https://www.googletagmanager.com/ https://secure.leadforensics.com/ https://snap.licdn.com/ https://buttons-config.sharethis.com/ https://platform-api.sharethis.com/ https://embed-cdn.spotifycdn.com/ https://open.spotify.com/ https://www.youtube.com/;style-src 'self' 'unsafe-inline' https: data: https://fonts.googleapis.com/; 1
worker-src blob:; font-src fonts.gstatic.com *.kxcdn.com https://fonts.gstatic.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.gstatic.com *.fbcdn.net blob: https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com https://meetanshi.com/media/logo.png https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.google.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com *.fbcdn.net platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com *.cloudflareinsights.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ s7.addthis.com https://player.vimeo.com https://www.youtube.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com https://static.klaviyo.com https://fonts.googleapis.com http://fonts.googleapis.com unsafe-inline assets.braintreegateway.com *.stripe.network *.stripecdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ ekr.zdassets.com/ https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
font-src *.fontawesome.com *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self' *.maksekeskus.ee *.test.maksekeskus.ee 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ 'self' *.maksekeskus.ee *.test.maksekeskus.ee c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.maksekeskus.ee *.test.maksekeskus.ee www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.ceno.lv *.salidzini.lv *.kurpirkt.lv 'self' data: maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ player.vimeo.com 'self' *.maksekeskus.ee *.test.maksekeskus.ee data: js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.google.com *.gstatic.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com cdn.jsdelivr.net unsafe-inline assets.braintreegateway.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com 'self' *.maksekeskus.ee *.test.maksekeskus.ee api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com t.elasticsuite.io *.google-analytics.com 'self' 'unsafe-inline'; child-src 'self' *.maksekeskus.ee *.test.maksekeskus.ee assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://connect.facebook.net https://challenges.cloudflare.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://player.vimeo.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https://www.facebook.com https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://www.google.com.au https://i.vimeocdn.com https://assets.unicorn.studio https://storage.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://stats.g.doubleclick.net https://ad.doubleclick.net https://www.facebook.com https://www.google.com https://www.google.com.au https://googleads.g.doubleclick.net https://www.googleadservices.com https://assets.unicorn.studio https://storage.googleapis.com; frame-src 'self' https://player.vimeo.com https://www.youtube.com https://challenges.cloudflare.com https://www.googletagmanager.com https://td.doubleclick.net https://www.facebook.com; media-src 'self' blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /api/csp-report 1
font-src *.fontawesome.com *.cleverreach.com *.ekomiapps.de *.gstatic.com https://fonts.gstatic.com *.googleapis.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cleverreach.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.cleverreach.com accounts.google.com *.weltpixel.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com *.wesupply.xyz https://wesupplylabs.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.cloudfront.net *.googleapis.com *.fbcdn.net *.google.de *.google.com *.facebook.com *.cdninstagram.com *.instagram.com *.paypal.com *.drgoerg.com *.smartsuppcdn.com *.ytimg.com *.ekomiapps.de *.ekomi.de cdn-cookieyes.com magefan.com cm.magefan.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com *.disqus.com https://img.youtube.com https://firebasestorage.googleapis.com https://www.magezon.com https://www.mollie.com *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com *.googleapis.com *.gstatic.com *.instagram.com *.facebook.com *.facebook.net *.googletagmanager.com cdnjs.cloudflare.com paypalobjects.com *.smartsuppchat.com *.smartsuppcdn.com *.qualtrics.com *.adform.net *.google-analytics.com *.ekomiapps.de *.ekomi.de sw-assets.ekomiapps.de smart-widget-assets.ekomiapps.de cdn-cookieyes.com cdn.amasty.com platform-api.sharethis.com accounts.google.com https://*.google.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.disqus.com *.fontawesome.com *.avada.io *.shopify.com *.sharethis.com js.mollie.com *.cloudflare.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.google.com *.gstatic.com *.smartsuppcdn.com unsafe-inline sw-assets.ekomiapps.de *.fontawesome.com accounts.google.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://fonts.bunny.net maxcdn.bootstrapcdn.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.smartsuppcdn.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com *.google.com *.gstatic.com *.smartsuppcdn.com *.smartsupp.com *.smartsuppchat.com *.google-analytics.com *.doubleclick.net *.qualtrics.com *.adform.net wss://websocket-visitors.smartsupp.com sw-assets.ekomiapps.de *.ekomi.de smart-widget-assets.ekomiapps.de cdn-cookieyes.com *.cookieyes.com accounts.google.com api.friendlycaptcha.com eu-api.friendlycaptcha.eu https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://get.geojs.io *.avada.io *.sharethis.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
connect-src https://o11y.sfproxy-core1.sfdc-lywfpd.svc.sfdcfc.net/ui-telemetry 'self' https://payments.salesforce.com/ https://use.typekit.net https://stats.g.doubleclick.net https://www.paypal.com https://p.typekit.net https://checkoutshopper-test.adyen.com/ https://isc22.my.site.com api.salesforce.com wss://*.slack.com https://*.api.salesforce.com https://www.iamcybersafe.org https://isc22.my.salesforce-scrt.com https://demo.arcade.software https://checkoutshopper-live.adyen.com/ https://www.google.com https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/ https://fonts.googleapis.com/css2 *.amazonaws.com https://td.doubleclick.net https://www.google.co.in https://app.arcade.software wss://*.slack-gov-dev.com wss://*.api.salesforce.com https://www.google.com/recaptcha/ https://www.sandbox.paypal.com https://js.stripe.com/ wss://api.salesforce.com https://iamcybersafe.org https://www.googletagmanager.com https://publuu.com https://www.google-analytics.com https://isc22--c.vf.force.com *.salesforce.com https://cdn.cbweb.code-builder.platform.salesforce.com *.api.salesforce.com wss://*.slack-gov.com; report-to sfdc-csp-ep; report-uri https://isc22.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00DHu000002h3KR&networkId=0DMHu0000009NbC&type=communities 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://info.dibs.se https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.googleapis.com *.gstatic.com https://*.dibspayment.eu *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com https://*.dibspayment.eu *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://*.dibspayment.eu https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; connect-src 'self' https://*.googleapis.com https://www.google-analytics.com https://analytics.google.com https://www.google.com https://www.google.co.il https://*.taboola.com https://*.hotjar.com https://*.hotjar.io https://*.clarity.ms https://api-iam.intercom.io https://nexus-websocket-a.intercom.io https://widget.intercom.io https://realtime.cloud.gist.build https://consumer.cloud.gist.build https://firebase.googleapis.com https://px.ads.linkedin.com https://display.popt.in https://mpc-prod-21-1053047382554.us-central1.run.app; default-src 'self'; font-src 'self' data: https://fonts.gstatic.com https://script.hotjar.com; form-action 'self' https://www.facebook.com; frame-src 'self' https://www.google.com https://www.facebook.com; frame-ancestors 'none'; img-src 'self' data: blob: https://*.google.com https://*.google.co.il https://googleads.g.doubleclick.net https://cm.g.doubleclick.net https://www.googletagmanager.com https://www.facebook.com https://px.ads.linkedin.com https://pixel.wp.com https://c.clarity.ms https://cds.taboola.com https://tr-rc.lfeeder.com https://analytics.maskyoo.net; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://connect.facebook.net https://snap.licdn.com https://cdn.taboola.com https://trc.taboola.com https://script.hotjar.com https://static.hotjar.com https://www.clarity.ms https://scripts.clarity.ms https://widget.intercom.io https://sc.lfeeder.com https://s0.wp.com https://stats.wp.com https://tags.crwdcntrl.net https://cdn.customer.io https://cdnjs.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=zjva0AOgLkY_RcpqUAlPR7lt6c2A7FxUa2YaQASBgnA-1789287698.0257013-1.0.1.1-wgQqPWLEBUL3beVXf64g1LJ0Voqzp5mA.iHfOimYVjJ5Y1bg6VEe5ILjzBaaEcZSIwa3vFq6_ObHsCcAktC7mFyVxkQ44F2noSIcpQnfujlAxpoTEnw3qR8TWnneANsnn5ItsBj5c6pGrozk6KrGEIqG47haWe0LcGJUpcYuHrbbw.moxSzup5qZur4Ta5L0; report-to cf-stegnznbcjhkcjpw 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com *.disqus.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.disqus.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com js.mollie.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://images.unsplash.com *.googleapis.com https://www.mollie.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com tagmanager.google.com https://www.googletagmanager.com *.googleapis.com *.gstatic.com apis.google.com widget.freshworks.com m2epro.freshdesk.com js.mollie.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com *.googleapis.com fcmregistrations.googleapis.com firebaseinstallations.googleapis.com widget.freshworks.com m2epro.freshdesk.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com *.cloudflare.com *.popt.in *.amazonaws.com *.on.aws *.cloudfront.net *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.google.com/ *.twitter.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com https://www.magezon.com *.popt.in *.cloudfront.net *.cloudflare.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.google.com/ *.popt.in *.cloudflare.com *.jsdelivr.net *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.googletagmanager.com maxcdn.bootstrapcdn.com *.popt.in *.cloudflare.com *.jsdelivr.net *.on.aws *.amazonaws.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog *.cloudfront.net *.cloudflare.com *.popt.in *.twitter.com *.twimg.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self' data: 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net *.fontawesome.com use.typekit.net www.youtube.com www.googletagmanager.com cdnjs.cloudflare.com *.azureedge.net fonts.googleapis.com connect.summitna.com app.powerbi.com *.goo.gl tigunia.zoom.us *.clarity.ms *.convertexperiments.com *.doubleclick.net geoip-js.com *.typekit.net *.google.com *.google.ca *.dynamics.com *.ytimg.com geolocation-db.com geoip-js.com 1
default-src 'self'; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https: fonts.googleapis.com cdn.jsdelivr.net; font-src 'self' data: https: fonts.gstatic.com cdn.jsdelivr.net; script-src 'self' 'unsafe-inline' https:; connect-src 'self' https:; frame-ancestors 'self'; frame-src 'self' https:; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.stape.io *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.facebook.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.facebook.com *.facebook.net *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.stape.io c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com www.apptrian.com *.cdninstagram.com magefan.com cm.magefan.com *.facebook.com *.facebook.net *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com *.stape.io https://firebasestorage.googleapis.com flagpedia.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com widget.freshworks.com m2epro.freshdesk.com player.vimeo.com connect.facebook.net *.facebook.com *.facebook.net *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.stape.io *.avada.io *.shopify.com maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.hsforms.net *.hsforms.com cdnjs.cloudflare.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.googleapis.com *.googletagmanager.com *.stape.io *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com widget.freshworks.com m2epro.freshdesk.com *.facebook.com *.facebook.net *.google-analytics.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog *.stape.io https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://assets.crossterra.cn https://cdn.shopify.com https://placehold.co https://i.ytimg.com https://i.vimeocdn.com; font-src 'self' data: https://assets.crossterra.cn; media-src 'self' blob: data: https://assets.crossterra.cn; frame-src 'self' https://www.youtube.com https://youtube.com https://www.youtube-nocookie.com https://youtu.be https://player.vimeo.com https://open.weixin.qq.com; connect-src 'self' https:; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'; report-uri /api/security/csp-report; report-to csp-endpoint 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net data: *.fonts.googleapis.com *.cloudflare.com 'self' data: https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com sibforms.com *.sibforms.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com hcaptcha.com *.hcaptcha.com sibforms.com secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com *.addthis.com *.pinterest.com *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com *.sibforms.com *.sendinblue.com *.usercentrics.eu *.hcaptcha.com www.google.de www.google.at www.google.ch cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com *.cloudflare.com https://cdn.klarna.com https://s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.addthis.com *.pinterest.com *.cdninstagram.com *.hsforms.net *.hsforms.com 'self' data: https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.avada.io *.shopify.com connect.facebook.net bat.bing.com sibforms.com *.sibforms.com *.sendinblue.com *.usercentrics.eu hcaptcha.com *.hcaptcha.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.hsforms.net *.hsforms.com *.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net sibforms.com *.sibforms.com *.hcaptcha.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://get.geojs.io *.avada.io ad.doubleclick.net stats.g.doubleclick.net bat.bing.com sibforms.com *.sibforms.com *.sendinblue.com *.brevo.com *.usercentrics.eu hcaptcha.com *.hcaptcha.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com *.cloudflare.com *.googleapis.com *.addthis.com *.cardinalcommerce.com https://graph.instagram.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://www.google-analytics.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://yandex.ru https://mc.yandex.ru https://www.google.com https://www.gstatic.com https://yastatic.net https://likemore-go.imgsmail.ru https://top-fwz1.mail.ru; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https: wss://mc.yandex.ru wss://mc.yandex.com; frame-src 'self' https://www.googletagmanager.com https://www.google.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; 1
worker-src blob:; font-src fonts.gstatic.com *.kxcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.gstatic.com *.fbcdn.net https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.google.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com s7.addthis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com ekr.zdassets.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.zopim.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.hotjar.com *.gstatic.com *.marker.io 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com js.mollie.com *.twitter.com *.hotjar.com *.addthis.com *.gstatic.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com https://www.mollie.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.paypalobjects.com *.google.com *.clarity.ms *.bing.com *.zopim.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.disqus.com *.avada.io js.mollie.com *.cloudflare.com *.twitter.com *.google-analytics.com *.googletagmanager.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.zdassets.com *.hotjar.com *.marker.io *.addthis.com *.addthisedge.com *.moatads.com *.clarity.ms *.zopim.com cookieinfoscript.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu unpkg.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://get.geojs.io *.avada.io *.cloudflare.com maps.googleapis.com *.twitter.com *.twimg.com *.zendesk.com *.zdassets.com wss://widget-mediator.zopim.com *.cardinalcommerce.com *.google-analytics.com *.hotjar.com *.doubleclick.net *.marker.io *.addthis.com *.gstatic.com *.clarity.ms api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.sectolin.com/; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https://mc.yandex.ru; script-src-elem 'self' 'unsafe-inline' https://mc.yandex.ru; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https:; connect-src 'self' https://site.sellium.pro https://support-api.sellium.pro https://storage.sellium.pro https://teststorage.sellerhelper.pro https://mc.yandex.ru https://mc.webvisor.org https://sentry.sellerhelper.pro https://*.sellium.pro; frame-src https://dzen.ru https://*.dzen.ru https://mc.yandex.ru; media-src 'self' https:; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests 1
object-src 'none';base-uri 'self';script-src 'nonce-HWxk61JTEN5UQ8x-mZ00zg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
connect-src *.analytics.google.com *.cookiebot.com *.google-analytics.com *.googleapis.com *.matomo.cloud *.openstreetmap.org *.stats.g.doubleclick.net *.tolkie.nl *.typekit.net *.umbraco.org analytics.google.com cdnjs.cloudflare.com consent.cookiebot.com embed.email-provider matomoembraceklantportaal.azurewebsites.net matomoembracewin.azurewebsites.net 'self';img-src *.analytics.google.com *.blob.core.windows.net *.cookiebot.com *.google-analytics.com *.googleapis.com *.gstatic.com *.openstreetmap.org *.tolkie.nl *.typekit.net *.umbraco.org api.maptiler.com cdn.jsdelivr.net data: openlayers.org pbs.twimg.com placehold.it 'self' tileserver.embracecloud.nl translate.googleapis.com umbraco.tv umbracoportalsp.azureedge.net umbracoportalsp.blob.core.windows.net umbracowebportalsprod.azureedge.net umbracowebportalsprod.blob.core.windows.net www.google.com www.googletagmanager.com www.gravatar.com www.openlayers.org;style-src *.cloudflare.com *.googleapis.com *.readspeaker.com *.tolkie.nl *.typekit.net openlayers.org 'self' 'unsafe-inline' www.gstatic.com www.openlayers.org;script-src *.cookiebot.com *.google-analytics.com *.googleapis.com *.matomo.cloud *.openstreetmap.org *.readspeaker.com *.tolkie.nl *.typekit.net ajax.aspnetcdn.com cdn.cookie-script cdnjs.cloudflare.com code.jquery.com embed.email-provider matomoembraceklantportaal.azurewebsites.net matomoembracewin.azurewebsites.net openlayers.org 'self' translate.google.com 'unsafe-eval' 'unsafe-inline' www.googletagmanager.com www.openlayers.org;default-src *.cookiebot.com *.googleapis.com *.gstatic.com *.tolkie.nl *.vimeocdn.com *.youtube.com player.vimeo.com secure.ogone.com 'self' www.openstreetmap.org;frame-ancestors *.embracecloud.nl 'self';font-src *.gstatic.com *.tolkie.nl *.typekit.net cdn.faceworks.nl cdnjs.cloudflare.com data: 'self';report-uri /cspreport 1
default-src 'self'; script-src 'self' 'nonce-+0FfulfRrYRt4MMOcyloy7y7Zf8=' 'unsafe-inline' *.fontawesome.com *.googletagmanager.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com *.googletagmanager.com; connect-src 'self' *.fontawesome.com *.google-analytics.com; font-src 'self' data: fonts.gstatic.com *.fontawesome.com; frame-src *; img-src 'self' data: *.ssl.cf1.rackcdn.com *.googletagmanager.com *.gstatic.com promobase.ams3.cdn.digitaloceanspaces.com; worker-src 'none'; 1
object-src 'none';base-uri 'self';script-src 'nonce-v5b6fced0b3lEOZJ4msmXg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.googleapis.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.webwinkelkeur.nl data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.googlesyndication.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.cookiebot.com *.cookiebot.eu *.consentcdn.cookiebot.com *.consentcdn.cookiebot.eu *.google.nl *.webwinkelkeur.nl *.usercentrics.eu js.mollie.com *.multisafepay.com https://pay.google.com *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://images.unsplash.com *.googleapis.com *.gstatic.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.google.nl *.webwinkelkeur.nl *.usercentrics.eu img.sct.eu1.usercentrics.eu bat.bing.net bat.bing.com *.bidswitch.net *.adnxs.com *.smartadserver.com *.taboola.com *.omnitagjs.com *.casalemedia.com *.criteo.com *.demdex.net id5-sync.com *.360yield.com *.ivitrack.com *.media.net *.mediavine.com *.postrelease.com *.outbrain.com *.pubmatic.com *.rubiconproject.com *.sharethrough.com *.teads.tv *.tremorhub.com *.3lift.com *.yieldlab.net *.yieldmo.com *.emxdgt.com *.1rx.io sync.targeting.unrulymedia.com https://www.mollie.com *.multisafepay.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://maps.googleapis.com *.googleapis.com *.gstatic.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com widget.freshworks.com m2epro.freshdesk.com *.dhlecommerce.nl *.cookiebot.eu *.cookiebot.com *.consentcdn.cookiebot.com *.consentcdn.cookiebot.eu *.google.nl *.webwinkelkeur.nl *.usercentrics.eu bat.bing.net bat.bing.com *.clarity.ms *.calendly.com *.beslist.nl *.pinimg.com *.criteo.com *.criteo.net *.cloudflareinsights.com *.pinterest.com js.mollie.com *.multisafepay.com https://pay.google.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com widget.freshworks.com m2epro.freshdesk.com widget.tagembed.com api.taggbox.com cdn.tagbox.com static.dhlecommerce.nl *.multisafepay.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com widget.freshworks.com m2epro.freshdesk.com *.cookiebot.com *.cookiebot.eu *.consentcdn.cookiebot.com *.consentcdn.cookiebot.eu *.google.nl *.usercentrics.eu bat.bing.net bat.bing.com *.clarity.ms *.pinterest.com *.criteo.com *.beslist.nl widget.tagembed.com api.taggbox.com cdn.tagbox.com *.multisafepay.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://maps.googleapis.com https://maps.gstatic.com https://pay.google.com https://www.paypalobjects.com https://*.paypal.com https://*.braintreegateway.com https://*.braintree-api.com https://connect.facebook.net https://cdn.pagesense.io https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://static.cloudflareinsights.com https://api.cloudsponge.com https://beacon-v2.helpscout.net https://js.convertflow.co https://embed.typeform.com https://platform.twitter.com https://cdn.attn.tv https://*.attn.tv https://cdn.kickoffpages.com https://simplyearth.refersion.com https://d3k81ch9hvuctc.cloudfront.net; object-src 'none'; base-uri 'self'; report-uri https://simplyearth.com/_csp-report; report-to csp-endpoint 1
connect-src *.analytics.google.com *.g.doubleclick.net *.google.com *.google-analytics.com *.googletagmanager.com https://consentcdn.cookiebot.com 'self';img-src *.analytics.google.com *.g.doubleclick.net *.google.com *.google-analytics.com *.googletagmanager.com data: googletagmanager.com https://consentcdn.cookiebot.com https://img.youtube.com https://imgsct.cookiebot.com 'self' ssl.gstatic.com www.gstatic.com;frame-src *.google.com *.googletagmanager.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://www.youtube.com 'self';script-src-elem *.google.com https://consent.cookiebot.com https://consentcdn.cookiebot.com 'self' 'unsafe-inline' www.gstatic.com;font-src data: fonts.gstatic.com 'self';script-src googletagmanager.com 'self' tagmanager.google.com 'unsafe-eval' 'unsafe-inline';style-src https://consentcdn.cookiebot.com 'self' tagmanager.google.com 'unsafe-eval' 'unsafe-inline';base-uri 'self';manifest-src 'self';media-src 'self';default-src 'self';worker-src 'self';frame-ancestors 'self' 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://widget.bland.ai https://js.stripe.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://api.zippopotam.us https://www.google-analytics.com https://analytics.google.com https://widget.bland.ai wss://widget.bland.ai https://api.stripe.com https://m.stripe.network; frame-src 'self' https://www.googletagmanager.com https://widget.bland.ai https://www.youtube-nocookie.com https://js.stripe.com https://hooks.stripe.com; form-action 'self'; frame-ancestors 'self'; 1
font-src https://*.gstatic.com https://*.zohocdn.com https://*.zohostatic.com https://*.fontawesome.com https://*.klarnacdn.net https://*.stripecdn.com *.fontawesome.com maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.atlassian.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.atlassian.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com js.mollie.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.mollie.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com https://*.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://cdn.justuno.com https://*.cloudflareinsights.com https://*.zoho.com https://*.bing.com https://*.callrail.com https://*.stripe.com https://*.klarnacdn.net https://*.justuno.com https://maps.googleapis.com https://player.vimeo.com www.paypalobjects.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com s7.addthis.com *.avada.io *.atlassian.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.mollie.com applepay.cdn-apple.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://*.zohocdn.com https://justuno.com https://*.googleapis.com https://*.justuno.com https://*.fontawesome.com unsafe-inline assets.braintreegateway.com *.fontawesome.com maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://paypal.com https://*.paypal.com https://*.stripe.com https://*.klarna.com https://get.geojs.io https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com ekr.zdassets.com/ *.avada.io *.atlassian.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src widget-static.eversports.io *.eversports.cloud *.eversports.nl *.acuityscheduling.com bam.nr-data.net bat.bing.com *.facebook.net *.cookiebot.com *.doubleclick.net *.facebook.com fonts.googleapis.com *.gstatic.com *.formitable.com *.sibforms.com *.brevo.com *.googleadservices.com *.google-analytics.com *.google.com *.google.com *.googletagmanager.com *.googletraveladservices.com *.googlesyndication.com *.hotjar.com *.hotjar.io iframeshop.chipta.com *.instagram.com js-agent.newrelic.com *.loyaltyinabox.com optimize.google.com *.optimole.com player.vimeo.com p.relay-t.io secure.gravatar.com secure-hotel-tracker.com 'self' translate.googleapis.com 'unsafe-eval' 'unsafe-inline' w.soundcloud.com www.mixcloud.com www.w3.org *.youtube.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.spotify.com *.mews.com *.mews-demo.com *.recaptcha.net *.datatrans.com *.newrelic.com *.visualstudio.com *.sentry.io *.aptrinsic.com *.launchdarkly.com *.volkshotel.nl *.eventtemple.com *.zenchef.com data: ; worker-src blob: ; 1
default-src 'self' data: ws: wss: http://view.publitas.com  http://connect.de-heus.nl  https://www.facebook.com https://www.youtube.com *.google-analytics.com https://www.google.com https://www.gstatic.com https://mkt.deheus.com.br *.mktoweb.com https://open.spotify.com https://td.doubleclick.net/ https://www.googletagmanager.com https://curatorio.s3.amazonaws.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://view.publitas.com http://connect.de-heus.nl https://maps.googleapis.com https://s.ytimg.com https://www.youtube.com https://dc.services.visualstudio.com https://az416426.vo.msecnd.net https://code.jquery.com *.google-analytics.com *.licdn.com https://www.googletagmanager.com http://tagmanager.google.com https://www.googleadservices.com https://maxcdn.bootstrapcdn.com https://www.facebook.com https://connect.facebook.net https://dl.episerver.net https://www.google.com https://www.gstatic.com http://ajax.googleapis.com/ajax/libs/jquery/1.10.2/jquery.min.js *.marketo.net https://mkt.deheus.com.br *.episerver.net *.adoberesources.net https://googleads.g.doubleclick.net https://cdnjs.cloudflare.com *.mktoweb.com maps.googleapis.com https://unpkg.com *.aptrinsic.com *.monitor.azure.com *.clarity.ms https://cdn.curator.io https://optimizely-cmp-analytics.com/; style-src 'self' 'unsafe-inline' http://connect.de-heus.nl *.typekit.net *.mktoweb.com *.episerver.net https://fonts.googleapis.com https://cloud.typography.com *.google-analytics.com *.googletagmanager.com https://tagmanager.google.com https://mkt.deheus.com.br https://web-sdk-eu.aptrinsic.com https://cdn.curator.io; img-src 'self' http: data: https://ssl.gstatic.com *.google-analytics.com *.analytics.google.com https://www.gstatic.com https://lh3.googleusercontent.com; connect-src 'self' ws: wss: https://dc.services.visualstudio.com *.google-analytics.com *.analytics.google.com https://stats.g.doubleclick.net *.cloud.adobe.io *.episerver.net *.mktoresp.com *.clarity.ms maps.googleapis.com *.linkedin.com *.google.nl *.google.com https://esp-eu.aptrinsic.com https://pagead2.googlesyndication.com https://api.curator.io https://www.facebook.com/; font-src 'self' data: https://fonts.gstatic.com *.typekit.net *.cloudfront.net; frame-ancestors 'self' https://cmp.optimizely.com/;  report-uri https://www.deheus.id/api/reporting/;  report-to csp-endpoint; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https: *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.tidiochat.com www.tradefurniturecompany.co.uk data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.staging-pbffinancecalculator.info *.pbffinancecalculator.info *.paybyfinance.co.uk *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com www.tradefurniturecompany.co.uk 'self' 'unsafe-inline'; frame-ancestors *.staging-pbffinancecalculator.info *.pbffinancecalculator.info *.paybyfinance.co.uk www.tradefurniturecompany.co.uk 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.staging-pbffinancecalculator.info *.pbffinancecalculator.info *.paybyfinance.co.uk c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.twitter.com *.hotjar.com *.tidiochat.com *.googletagmanager.com www.tradefurniturecompany.co.uk 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobedtm widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.trackedlink.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.pbffinancecalculator.info cdn.shopify.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com cdnjs.cloudflare.com https: *.trustedshops.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.tidiochat.com *.pinterest.com *.facebook.net *.bing.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com www.tradefurniturecompany.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com apis.google.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ player.vimeo.com *.staging-pbffinancecalculator.info *.pbffinancecalculator.info *.paybyfinance.co.uk js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://code.tidio.co https://widget-v4.tidiochat.com *.hotjar.com *.cloudflare.com *.twitter.com *.googleadservices.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.tidiochat.com *.tidio.co *.pinimg.com *.pinterest.com *.facebook.net *.bing.com *.clarity.ms *.googletagmanager.com cdn-cookieyes.com *.cookieyes.com *.attn.tv tagmanager.google.com www.tradefurniturecompany.co.uk https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com webchat.dotdigital.com webchat.staging.dotdigital.com downloads.mailchimp.com https://static.klaviyo.com *.fontawesome.com assets.braintreegateway.com 'unsafe-inline' https: *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.tidiochat.com *.pinterest.com *.facebook.net tagmanager.google.com fonts.google.com www.tradefurniturecompany.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com widget-v4.tidiochat.com *.tidiochat.com *.tidio.co www.tradefurniturecompany.co.uk 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.staging-pbffinancecalculator.info *.pbffinancecalculator.info wss://*.staging-pbffinancecalculator.info wss://*.pbffinancecalculator.info *.paybyfinance.co.uk api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com sentry-new.tidio.co socket.tidio.co api-v2.tidio.co *.googletagmanager.com *.google-analytics.com *.analytics.google.com *.googleadservices.com *.doubleclick.net *.googlesyndication.com cdn-cookieyes.com *.cookieyes.com *.pinterest.com *.clarity.ms wss://socket.tidio.co *.attn.tv *.attentivemobile.com *.bing.com www.tradefurniturecompany.co.uk 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com www.tradefurniturecompany.co.uk http: https: blob: 'self' 'unsafe-inline'; default-src www.tradefurniturecompany.co.uk 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-itSnoeOVWeETiKCfDrmamQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
connect-src 'self' *.typekit.net *.onetrust.com cdn.cookielaw.org fonts.gstatic.com fonts.googleapis.com www.google.com www.googletagmanager.com; default-src 'self'; font-src 'self' data: fonts.googleapis.com fonts.gstatic.com privacyportal-cdn.onetrust.com use.typekit.net unpkg.com; frame-src 'self' www.google.com www.googletagmanager.com; img-src 'self' data: *.typekit.net cdn.cookielaw.org fonts.gstatic.com unpkg.com www.googletagmanager.com; script-src 'self' 'unsafe-inline' https://cdn-ukwest.onetrust.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://googletagmanager.com https://tagmanager.google.com https://use.typekit.net https://unpkg.com https://www.gstatic.com https://www.google.com https://www.googletagmanager.com; style-src 'self' 'report-sample' 'unsafe-inline' *.typekit.net fonts.googleapis.com privacyportal-cdn.onetrust.com tagmanager.google.com unpkg.com www.googletagmanager.com; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.addthis.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com widget.freshworks.com m2epro.freshdesk.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com https://player.vimeo.com *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com https://cdn.jsdelivr.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com widget.freshworks.com m2epro.freshdesk.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com https://fonts.gstatic.com www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com *.fonts.googleapis.com *.gstatic.com data: *.cloudflare.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://plumrocket.com www.searchanise.com *.searchserverapi.com *.searchserverapi1.com *.twitter.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.certcapture.com https://plumrocket.com www.searchanise.com *.searchserverapi.com *.searchserverapi1.com *.twitter.com *.google.com *.addthis.com *.pinterest.com designer.printlane.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.certcapture.com *.twitter.com *.twimg.com www.google.ru www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com s3.amazonaws.com *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.gstatic.com *.addthis.com *.pinterest.com *.cdninstagram.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.bing.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.certcapture.com *.avada.io searchanise-ef84.kxcdn.com s3.amazonaws.com ajax.aspnetcdn.com www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com *.searchanise.com api.amplitude.com *.twitter.com *.twimg.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.instagram.com designer.printlane.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.certcapture.com *.fontawesome.com https://fonts.googleapis.com www.searchanise.com *.searchserverapi.com searchserverapi.com *.searchserverapi1.com searchserverapi1.com searchanise-ef84.kxcdn.com s3.amazonaws.com *.twitter.com ton.twimg.com *.googleapis.com *.stripe.network *.stripecdn.com *.amazon.com *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.certcapture.com api.addressy.com https://get.geojs.io *.avada.io api.amplitude.com stats.g.doubleclick.net *.cloudflare.com *.paypal.com *.googleapis.com *.addthis.com *.cardinalcommerce.com *.graph.instagram.com *.google-analytics.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.clarity.ms *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://mackshop.com/pr-csp/report/add/; report-to report-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-eLJ_o4qe_L_3q8aleGQtJQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-EhAwyoSzkTaiS7WodVCklwSXyTA=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.feedbackcompany.com *.googleapis.com maxcdn.bootstrapcdn.com https://*.hotjar.com https://*.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.feedbackcompany.com https://*.tawk.to https://www.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com https://www.googletagmanager.com/ https://*.tawk.to https://*.doubleclick.net https://www.facebook.com https://assets.pinterest.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://stellar.eurogifts.be 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.feedbackcompany.com 'self' data: https://*.sirv.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://*.analytics.google.com https://*.clarity.ms https://*.google-analytics.com https://*.googletagmanager.com https://*.hotjar.com https://*.linkedin.com https://*.tawk.to https://bat.bing.com https://c.bing.com https://cdn.jsdelivr.net https://exch.vanheijster.nl https://exch.vanhelden.nl https://exch.vanhelden.be https://exch.eurogifts.be https://exch.eurogifts.fr https://googleads.g.doubleclick.net https://tawk.link https://www.google.nl https://www.facebook.com https://i.pinimg.com https://log.pinterest.com https://imgsct.cookiebot.com https://ad.doubleclick.net https://stats.g.doubleclick.net https://ade.googlesyndication.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com d2a6mddvzruxpc.cloudfront.net https://stellar.eurogifts.be data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page https://maps.googleapis.com https://player.vimeo.com *.feedbackcompany.com bam.nr-data.net bam-cell.nr-data.net js-agent.newrelic.com https://*.sirv.com 'unsafe-eval' https://portal.zakeke.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://*.convertexperiments.com https://*.googletagmanager.com https://*.hotjar.com https://*.tawk.to https://bat.bing.com https://connect.facebook.net https://cdn.jsdelivr.net https://googleads.g.doubleclick.net https://snap.licdn.com https://script.adcalls.nl https://www.clarity.ms https://www.google.com https://www.googleadservices.com https://www.googleoptimize.com https://assets.pinterest.com https://widgets.pinterest.com https://consent.cookiebot.com https://consentcdn.cookiebot.com https://ct.pinterest.com https://s.pinimg.com https://ct.beslist.nl https://*.optimizely.com https://cdn.leadinfo.com https://bgmin.cdn.billygrace.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://stellar.eurogifts.be https://components.eurogifts.be 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com maxcdn.bootstrapcdn.com https://*.sirv.com https://*.hotjar.com https://*.tawk.to https://cdn.jsdelivr.net https://fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://*.tawk.to https://v.pinimg.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.feedbackcompany.com bam.nr-data.net bam-cell.nr-data.net https://*.sirv.com https://api.zakeke.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://*.analytics.google.com https://*.clarity.ms https://*.google-analytics.com https://*.googletagmanager.com https://*.hotjar.com https://*.hotjar.io https://*.tawk.to https://api.adcalls.nl https://bat.bing.com https://cdn.linkedin.oribi.io https://fonts.gstatic.com https://www.facebook.com wss://*.hotjar.com wss://*.tawk.to https://consentcdn.cookiebot.com https://exch.vanheijster.nl https://exch.vanhelden.nl https://exch.vanhelden.be https://exch.eurogifts.be https://exch.eurogifts.fr https://ct.pinterest.com https://px.ads.linkedin.com https://googleads.g.doubleclick.net https://*.googlesyndication.com https://*.metrics.convertexperiments.com https://logs.convertexperiments.com https://*.convertexperiments.com https://ct.beslist.nl https://ad.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://stellar.eurogifts.be https://components.eurogifts.be 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; default-src 'self' https://forms.zohopublic.eu; connect-src 'self' https://forms.zohopublic.eu https://*.onetrust.com https://cdn.cookielaw.org https://cookie-cdn.cookiepro.co https://*.google-analytics.com https://www.googleadservices.com https://adservice.google.com https://www.facebook.com https://*.google-analytics.com https://sdk.privacy-center.org https://api.privacy-center.org; form-action 'self' https://forms.zohopublic.eu; frame-ancestors 'none'; font-src 'self' data: 'unsafe-inline' https://forms.zohopublic.eu https://fcdn.thg-corporate.com/; frame-src 'self' https://forms.zohopublic.eu https://*.googletagmanager.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://player.vimeo.com https://*.vimeocdn.com https://*.facebook.com; img-src 'self' https://forms.zohopublic.eu https://cdn.cookielaw.org https://fcdn.thg-corporate.com/ https://*.googletagmanager.com https://*.google-analytics.com https://www.facebook.com https://sdk.privacy-center.org; child-src 'self' https://forms.zohopublic.eu; script-src 'self' 'strict-dynamic' https://forms.zohopublic.eu https://cdn.cookielaw.org https://cookie-cdn.cookiepro.co https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://*.googletagmanager.com https://*.google-analytics.com https://connect.facebook.net https://sdk.privacy-center.org; style-src 'self' 'unsafe-inline' data: https://forms.zohopublic.eu https://fonts.googleapis.com https://fcdn.thg-corporate.com/; object-src 'none'; script-src-elem https://forms.zohopublic.eu https://cdn.cookielaw.org https://cookie-cdn.cookiepro.co https://*.google.com https://www.gstatic.com https://*.googletagmanager.com https://*.google-analytics.com https://connect.facebook.net https://sdk.privacy-center.org; worker-src 'none'; media-src 'self' https://forms.zohopublic.eu https://fcdn.thg-corporate.com/ https://*.gstatic.com; report-uri https://csp.thehut.net/cspReport.txt 1
default-src 'self';script-src 'self' 'unsafe-inline' 'nonce-c3kEk3MtSYUY7vIwDprafLCc' 'unsafe-eval' https://pixel.byspotify.com *.travcorpservices.com https://www.google.com https://www.google-analytics.com https://www.googleoptimize.com https://www.googletagmanager.com https://ajax.googleapis.com https://www.gstatic.com https://googleads.g.doubleclick.net https://api.feefo.com https://register.feefo.com https://bat.bing.com https://cdn.evgnet.com https://connect.facebook.net https://i.clarity.ms https://static-ssl.responsetap.com *.hotjar.com https://tag.simpli.fi https://unpkg.com https://www.bugherd.com https://decagon.ai https://www.datadoghq-browser-agent.com https://assetscdn.stackla.com/media/js https://vjs.zencdn.net https://cdn.amplitude.com/libs https://sdk.joinsherpa.io https://apps.mypurecloud.com https://consentcdn.cookiebot.com https://cdnjs.cloudflare.com https://ttc-contiki.entry.promo https://cdn.optimizely.com https://www.riddle.com;style-src 'self' 'unsafe-inline' https://assetscdn.stackla.com/media/components/stackla-uikit/dist https://fonts.googleapis.com https://p.typekit.net https://use.typekit.net https://vjs.zencdn.net https://apps.mypurecloud.com;img-src 'self' https://bat.bing.com https://c.clarity.ms https://i.ytimg.com https://www.facebook.com https://www.google-analytics.com https://www.google.com https://www.uplift-platform.com data:;frame-src 'self' https://10006172.fls.doubleclick.net https://uplift-cdn-stg.uplift.com https://vars.hotjar.com https://widget.stackla.com https://www.google.com https://apps.joinsherpa.io https://www.googletagmanager.com https://a25408250069.cdn.optimizely.com;font-src 'self' https://assetscdn.stackla.com https://fonts.gstatic.com https://use.typekit.net https://vjs.zencdn.net https://apps.mypurecloud.com;connect-src 'self' *.travcorpservices.com *.travcorp.com *.corp.ttc:7443 https://api.feefo.com https://bat.bing.com https://in.hotjar.com https://ws11.hotjar.com/api https://l.clarity.ms https://metrics.responsetap.com/infinity https://noembed.com https://pm-mrkt.prodgw.uplift-platform.com https://rum.browser-intake-datadoghq.com https://session-replay.browser-intake-datadoghq.com https://ttctravel.germany-2.evergage.com https://www.facebook.com https://www.google-analytics.com https://logx.optimizely.com https://region1.analytics.google.com https://ttc.contiki.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://connect.facebook.net https://*.facebook.net https://analytics.tiktok.com https://snap.licdn.com https://bat.bing.com https://js.adsrvr.org https://cdn.segment.com https://us-assets.i.posthog.com https://*.posthog.com https://e.taxrise.com https://*.vibe.co https://static.cloudflareinsights.com https://js.hs-scripts.com https://js.hs-banner.com https://js.hsforms.net https://js.hs-analytics.net https://js.usemessages.com https://js.hsadspixel.net https://js.hscollectedforms.net https://*.hs-scripts.com https://*.hs-banner.com https://*.hsforms.net https://*.hs-analytics.net https://*.hsadspixel.net https://*.hscollectedforms.net https://cdn.userway.org https://forms.taxrise.com; style-src 'self' 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://www.google.com https://www.google.co.in https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://*.facebook.com https://www.facebook.com https://analytics.tiktok.com https://*.tiktok.com https://px.ads.linkedin.com https://bat.bing.com https://*.adsrvr.org https://us-assets.i.posthog.com https://*.posthog.com https://*.vibe.co https://track.hubspot.com https://forms.hsforms.com https://*.hubspot.com https://*.hsforms.net https://*.hs-banner.com https://cdn.userway.org https://pub-aa90421b27cf4ab18e0a85fc18c00fce.r2.dev https://taxrise.com; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://*.doubleclick.net https://www.google.com https://pagead2.googlesyndication.com https://www.facebook.com https://*.facebook.com https://graph.facebook.com https://analytics.tiktok.com https://*.tiktok.com https://px.ads.linkedin.com https://*.linkedin.com https://bat.bing.com https://*.adsrvr.org https://cdn.segment.com https://api.segment.io https://us.i.posthog.com https://*.posthog.com https://e.taxrise.com https://*.vibe.co https://*.appspot.com https://cloudflareinsights.com https://forms.hsforms.com https://api.hsforms.com https://track.hubspot.com https://*.hubspot.com https://*.hubapi.com https://*.hs-scripts.com https://*.hs-analytics.net https://*.hscollectedforms.net https://api.userway.org https://*.userway.org https://pub-aa90421b27cf4ab18e0a85fc18c00fce.r2.dev https://taxrise.com https://forms.taxrise.com; frame-src 'self' https://www.googletagmanager.com https://td.doubleclick.net https://bid.g.doubleclick.net https://www.facebook.com https://*.facebook.com https://*.youtube-nocookie.com https://*.adsrvr.org https://*.appspot.com https://forms.hsforms.com https://*.hsforms.net https://*.hubspot.com https://*.userway.org; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /api/csp-report; report-to csp-endpoint 1
default-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' https://143720318.fs1.hubspotusercontent-eu1.net data:; script-src 'self' *.hubspot.com *.hs-scripts.com *.hscollectedforms.net 'strict-dynamic' 'nonce-nleP6g04NFHUNoN7KWpy4w=='; connect-src 'self' *.hubspot.com *.hubspotusercontent-eu1.net *.hsforms.com *.hs-scripts.com; frame-src *.hubspot.com *.hsforms.com 1
object-src 'none';base-uri 'self';script-src 'nonce-NDkgap6uu1BO56N36buB7g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-yJAvsZwd+REiUmGSIAX6NNz2RQQ=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
font-src *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com assets.braintreegateway.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de cdn.dnky.co webchat.dotdigital.com *.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com js.authorize.net jstest.authorize.net cdn-scripts.signifyd.com www.youtube.com js.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net cdn.dnky.co api.comapi.com webchat.dotdigital.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com payments.sandbox.braintree-api.com origin-analytics-sand.sandbox.braintree-api.com assets.braintreegateway.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net api.comapi.com webchat.dotdigital.com *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-XX1tGS6WJ5FEVxPedpVPkg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
worker-src *.mczbf.com; font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com https://geowidget.easypack24.net *.cj.com maxcdn.bootstrapcdn.com *.cloudflare.com *.twitter.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com facebook.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com pay.google.com play.google.com *.autopay.eu *.packeta.com creativecdn.com ct.pinterest.com *.criteo.com *.criteo.net pudofinder.dpd.com.pl googletagmanager.com *.googletagmanager.com www.googletagmanager.com secure.payu.com merch-prod.snd.payu.com *.twitter.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com platnosci.bm.pl platnosci-accept.bm.pl www.gstatic.com *.autopay.eu https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org www.googleadservices.com www.google-analytics.com www.google.pl bat.bing.com mrtg.emailpartners.net pixel.wp.pl ct.pinterest.com scontent-waw1-1.cdninstagram.com adservice.google.pl c.clarity.ms c.bing.com *.mczbf.com *.kdukvh.com *.emjcd.com *.dotomi.com *.adnxs.com contextual.media.net pixel.rubiconproject.com match.sharethrough.com rtb-csync.smartadserver.com sync-t1.taboola.com criteo-sync.teads.tv eb2.3lift.com ups.analytics.yahoo.com visitor.omnitagjs.com id5-sync.com ad.360yield.com criteo-partners.tremorhub.com beacon.krxd.net gum.criteo.com s.thebrighttag.com ad.yieldlab.net *.seznam.cz *.bing.net duka.com *.duka.com *.criteo.net static.payu.com *.googleapis.com *.googleusercontent.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.autopay.eu pay.google.com *.packeta.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org www.googleadservices.com www.google-analytics.com static.hotjar.com bat.bing.com www.clarity.ms analytics.tiktok.com dsp-media.eskimi.com cdn.gdprcookiemanager.com cdn.tmtarget.com www.googleoptimize.com s.pinimg.com pixel.homebook.pl pixel.wp.pl js-agent.newrelic.com bam-cell.nr-data.net script.hotjar.com bam.nr-data.net *.mczbf.com *.cj.com *.criteo.net sslwidget.criteo.com googletagmanager.com *.clarity.ms *.seznam.cz paypalobjects.com secure.payu.com secure.snd.payu.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.autopay.eu *.fontawesome.com https://geowidget.easypack24.net *.cj.com maxcdn.bootstrapcdn.com *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.packeta.com *.easypack24.net *.inpost.pl *.openstreetmap.org www.google-analytics.com cdn.gdprcookiemanager.com analytics.tiktok.com n.clarity.ms ct.pinterest.com stats.g.doubleclick.net bam.nr-data.net in.hotjar.com dsp-trk.eskimi.com dsp-ap.eskimi.com *.mczbf.com *.sjwoe.com p.clarity.ms google.com *.clarity.ms googletagmanager.com *.googletagmanager.com *.bing.net *.hotjar.io *.criteo.net *.criteo.com secure.payu.com merch-prod.snd.payu.com *.googleapis.com *.gstatic.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com t.elasticsuite.io 'self' 'unsafe-inline'; child-src *.cj.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src https://*.deutschlandsim.de; object-src 'none'; script-src 'self' data: 'report-sample' 'unsafe-inline' 'unsafe-eval' https://*.deutschlandsim.de https://visitor-service.tealiumiq.com/drillisch/main/ https://visitor-service-eu-central-1.tealiumiq.com/drillisch/main/ https://tags.tiqcdn.com/utag/drillisch/deutschlandsim.de/prod/ https://tags.tiqcdn.com/utag/tiqapp/ https://cdn2.spatialbuzz.com/cust/D7FF6FE4/ https://cdn2.spatialbuzz.com/cust/DCCB7552/; style-src 'self' data: 'report-sample' 'unsafe-inline' https://*.deutschlandsim.de; img-src https: data:; media-src 'self' blob:; font-src https: data:; connect-src 'self' https://*.deutschlandsim.de wss://*.deutschlandsim.de https://dpm.demdex.net https://collect.tealiumiq.com/event https://collect-eu-central-1.tealiumiq.com/drillisch/main/ https://visitor-service.tealiumiq.com/drillisch/main/ https://visitor-service-eu-central-1.tealiumiq.com/drillisch/main/ https://cdn.spatialbuzz.com https://cdn2.spatialbuzz.com https://cdn2.spatialbuzz.com/api/maintenance_mode; frame-src 'self' https://*.deutschlandsim.de https://cdn2.spatialbuzz.com https://1and1internetag.demdex.net https://netmap.vodafone.de/cokart-client/index.html; child-src 'self' https://cdn2.spatialbuzz.com; upgrade-insecure-requests; block-all-mixed-content; report-uri https://www.drillisch-online.de/csp-reports 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://extend.vimeocdn.com https://cdn.cookielaw.org https://cdn.dreamdata.cloud https://snap.licdn.com https://player.vimeo.com https://*.pardot.com blob:; style-src 'self' 'unsafe-inline' https://cdn.cookielaw.org https://*.pardot.com; img-src 'self' https://www.googletagmanager.com https://i.vimeocdn.com https://*.google.com https://*.gstatic.com https://cdn.cookielaw.org https://*.ads.linkedin.com https://www.linkedin.com https://*.pardot.com data:; font-src 'self' https://cdn.cookielaw.org https://*.pardot.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://stats.g.doubleclick.net https://extend.vimeocdn.com https://cdn.cookielaw.org https://cdn.dreamdata.cloud https://*.ads.linkedin.com https://www.linkedin.com https://*.pardot.com; frame-src 'self' https://www.google.com https://www.recaptcha.net https://player.vimeo.com https://cdn.cookielaw.org https://go.genedata.com https://*.pardot.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://go.genedata.com https://*.pardot.com; upgrade-insecure-requests 1
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'nonce-CgWcXjNo73vORZvG53Y3OQ' 'strict-dynamic' https://www.googletagmanager.com https://www.google-analytics.com 'unsafe-eval'; style-src 'self' 'nonce-CgWcXjNo73vORZvG53Y3OQ'; style-src-elem 'unsafe-inline' 'self' https: data:; style-src-attr 'unsafe-inline'; img-src 'self' data: https: cid:; font-src 'self' data: https:; connect-src 'self' https: wss: https://www.google-analytics.com https://stats.g.doubleclick.net https://region1.google-analytics.com; frame-src 'self' about: https://sst.heyrecruit.de https://www.google.com https://www.googletagmanager.com https://recaptcha.google.com https://consent.cookiebot.com https://consent.cookiebot.eu https://consentcdn.cookiebot.com https://consentcdn.cookiebot.eu https://www.chatbase.co https://www.youtube.com https://meetings.hubspot.com https://app.hubspot.com https://*.hubspot.com https://js.stripe.com https://checkout.stripe.com https://hooks.stripe.com https://files.stripe.com https://*.stripe.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://awo-freiwillich.de https://cdn.eye-able.com https://connect.facebook.net https://googletagmanager.com https://tagmanager.google.com https://www.facebook.com https://www.googletagmanager.com https://*.googletagmanager.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src data: blob: 'self' https://*.openstreetmap.org https://*.typo3.org https://cdn.eye-able.com https://connect.facebook.net https://facebook.com https://fonts.gstatic.com https://googleads.g.doubleclick.net https://i.ytimg.com https://pagead2.googlesyndication.com https://translate.google.com https://www.facebook.com https://www.facebook.com/ https://www.google.ae https://www.google.am https://www.google.ar https://www.google.at https://www.google.ba https://www.google.be https://www.google.bf https://www.google.bj https://www.google.br https://www.google.ch https://www.google.ca https://www.google.cm https://www.google.ci https://www.google.co.bw https://www.google.co.cr https://www.google.co.id https://www.google.co.in https://www.google.co.jp https://www.google.co.ke https://www.google.co.ma https://www.google.co.nz https://www.google.co.th https://www.google.co.tz https://www.google.co.ug https://www.google.co.uk https://www.google.co.uz https://www.google.co.za https://www.google.co.zm https://www.google.com.au https://www.google.com.bd https://www.google.com.bo https://www.google.com.br https://www.google.com.co https://www.google.com.ec https://www.google.com.eg https://www.google.com.gh https://www.google.com.hk https://www.google.com.mt https://www.google.com.mx https://www.google.com.my https://www.google.com.ng https://www.google.com.pagead https://www.google.com.ph https://www.google.com.pk https://www.google.com.sa https://www.google.com.sg https://www.google.com.tr https://www.google.com.ua https://www.google.com.vn https://www.google.cz https://www.google.de https://www.google.de/ads https://www.google.de/ads/ga-audiences https://www.google.dk https://www.google.dz https://www.google.ee https://www.google.es https://www.google.fr https://www.google.fi https://www.google.ge https://www.google.gr https://www.google.hr https://www.google.hu https://www.google.ie https://www.google.iq https://www.google.it https://www.google.kg https://www.google.kz https://www.google.lk https://www.google.lv https://www.google.mg https://www.google.nl https://www.google.no https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.rs https://www.google.ru https://www.google.rw https://www.google.se https://www.google.sn https://www.google.tm https://www.google.tn https://www.googletagmanager.com; base-uri 'self'; frame-src 'self' https://antrag.awo-zmav.de https://awo-ol.de https://freiwillig24.de https://my.matterport.com https://sodys.freiwillig24.de https://td.doubleclick.net https://www.awo-ol.de https://www.facebook.com https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com; style-src-elem 'self' 'unsafe-inline' https://awo-freiwillich.de https://cdn.eye-able.com https://www.gstatic.com https://awo-ol.feinrot.dev 'report-sample'; connect-src 'self' https://analytics.google.com https://api.awo-freiwillich.de https://cdn.eye-able.com https://graph.facebook.com https://pagead2.googlesyndication.com https://region1.analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://translate.googleapis.com https://www.awo-ol.de https://www.facebook.com https://www.facebook.com/privacy_sandbox https://www.facebook.com/privacy_sandbox/topics/registration/ https://www.google-analytics.com https://www.google.ae https://www.google.am https://www.google.at https://www.google.ba https://www.google.be https://www.google.bf https://www.google.bj https://www.google.ca https://www.google.ch https://www.google.ci https://www.google.cm https://www.google.co.id https://www.google.co.in https://www.google.co.ke https://www.google.co.ma https://www.google.co.tz https://www.google.co.ug https://www.google.co.uk https://www.google.co.za https://www.google.co.zm https://www.google.co.zw https://www.google.com.bd https://www.google.com.br https://www.google.com.co https://www.google.com.eg https://www.google.com.mx https://www.google.com.ng https://www.google.com.om https://www.google.com.ph https://www.google.com.pk https://www.google.com.sa https://www.google.com.sg https://www.google.com.tr https://www.google.com.ua https://www.google.com.vn https://www.google.com.zw https://www.google.cz https://www.google.de https://www.google.de/ads/ga-audiences https://www.google.dk https://www.google.dz https://www.google.ee https://www.google.es https://www.google.fi https://www.google.fr https://www.google.gr https://www.google.ie https://www.google.it https://www.google.iq https://www.google.kg https://www.google.lk https://www.google.lv https://www.google.md https://www.google.mg https://www.google.nl https://www.google.no https://www.google.pl https://www.google.pt https://www.google.ro https://www.google.rs https://www.google.rw https://www.google.se https://www.google.sn https://www.google.tn https://www.googletagmanager.com; font-src data: 'self'; form-action 'self'; frame-ancestors 'self' https://awo-ol.de https://www.awo-ol.de https://*.awo-ol.de; media-src 'self' data:; object-src 'none'; script-src-elem 'self' 'unsafe-inline' https://awo-freiwillich.de https://cdn.eye-able.com https://connect.facebook.net https://www.googletagmanager.com https://www.youtube.com 'report-sample'; style-src 'self' 'unsafe-inline' https://*.google-analytics.com https://*.googletagmanager.com https://awo-freiwillich.de https://cdn.eye-able.com https://googletagmanager.com https://tagmanager.google.com https://www.gstatic.com 'report-sample'; worker-src blob:; report-uri https://awo-ol.de/@http-reporting?csp=report&requestTime=1789282160868849&requestHash=2647b8a941b07348e0dfb1ad3f8aa168b39ac2f1 1
font-src *.typekit.net *.gstatic.com fonts.gstatic.com use.typekit.net *.fontawesome.com maxcdn.bootstrapcdn.com 'self' data: https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.googletagmanager.com/ www.facebook.com platform.twitter.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com p.typekit.net validator.swagger.io http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: https://widgets.trustedshops.com https://widgets-qa.trustedshops.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.commerce-payment-services.com *.typekit.net google.com *.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net http://www.googletagmanager.com/ https://www.googletagmanager.com/ s7.addthis.com *.avada.io *.sooqr.com *.spotlersearch.com spotlersearchanalytics.com connect.facebook.net twitter.com platform.twitter.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.sooqr.com *.spotlersearch.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.adobe.io performance.typekit.net *.sentry.io http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ ekr.zdassets.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'     https://cdnjs.cloudflare.com     https://cdn.jsdelivr.net     https://cdn.cookielaw.org     https://fonts.googleapis.com     https://www.googletagmanager.com     https://www.google-analytics.com     https://js.hs-scripts.com     https://js.hs-analytics.net     https://js.hs-banner.com     https://js.hscollectedforms.net     https://js.hubspot.com     https://js.hsforms.net     https://forms.hsforms.com     https://static.cloudflareinsights.com     https://www.youtube.com     https://fs8.formsite.com     https://www.onlinebanktours.com     https://siteintercept.qualtrics.com; script-src-elem 'self' 'unsafe-inline'     https://cdnjs.cloudflare.com     https://cdn.jsdelivr.net     https://cdn.cookielaw.org     https://fonts.googleapis.com     https://www.googletagmanager.com     https://www.google-analytics.com     https://js.hs-scripts.com     https://js.hs-analytics.net     https://js.hs-banner.com     https://js.hscollectedforms.net     https://js.hubspot.com     https://js.hsforms.net     https://forms.hsforms.com     https://static.cloudflareinsights.com     https://www.youtube.com     https://fs8.formsite.com     https://www.onlinebanktours.com     https://siteintercept.qualtrics.com; style-src 'self' 'unsafe-inline'     https://cdnjs.cloudflare.com     https://cdn.jsdelivr.net     https://fonts.googleapis.com     https://www.onlinebanktours.com; style-src-elem 'self' 'unsafe-inline'     https://cdnjs.cloudflare.com     https://cdn.jsdelivr.net     https://fonts.googleapis.com     https://www.onlinebanktours.com     https://www.gstatic.com; img-src 'self' data: https:; font-src 'self' data:     https://cdnjs.cloudflare.com     https://fonts.googleapis.com     https://fonts.gstatic.com; connect-src 'self'     https://cdnjs.cloudflare.com     https://cdn.jsdelivr.net     https://cdn.cookielaw.org     https://fonts.googleapis.com     https://www.google-analytics.com     https://analytics.google.com     https://region1.analytics.google.com     https://stats.g.doubleclick.net     https://www.googletagmanager.com     https://js.hs-scripts.com     https://js.hs-analytics.net     https://js.hs-banner.com     https://js.hscollectedforms.net     https://forms.hscollectedforms.net     https://js.hubspot.com     https://js.hsforms.net     https://forms.hsforms.com     https://cta-service-cms2.hubspot.com     https://geolocation.onetrust.com     https://privacyportal-eu.onetrust.com     https://static.cloudflareinsights.com     https://locationapi.wave2.io     https://feed-proxy.craftcms.com     https://api.craftcms.com     https://www.youtube.com     https://fs8.formsite.com     https://www.onlinebanktours.com     https://siteintercept.qualtrics.com     https://www.google.com     https://www.googleapis.com; frame-src 'self'     https://boards.greenhouse.io     https://www.youtube.com     https://fs8.formsite.com     https://beneficiallocator.wave2.io     https://forms.hsforms.com     https://js.hsforms.net     https://www.googletagmanager.com     https://player.vimeo.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'     https://online.beneficialstatebank.com     https://forms.hsforms.com; report-uri /csp-report.php 1
object-src 'none';base-uri 'self';script-src 'nonce-OigAU4-vFL45rKRZqU4irg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
frame-ancestors 'none'; default-src 'self' https://www.nowilaymedowntosleep.org; script-src 'self'; style-src 'self'; img-src 'self'; 1
frame-src 'self' https://*.praxispay.com https://*.ccformdeposit.com https://dub01.online.tableau.com https://tableau.stake.com https://prod-apsoutheast-a.online.tableau.com https://tableau.stake.mx https://tableau.stake.bet.ar https://challenges.cloudflare.com https://player.igamemedia.com https://player-test.igamemedia.com https://player.kick.com https://player.twitch.tv https://www.youtube.com https://huya.com https://*.huya.com https://bilibili.com https://*.bilibili.com https://gjirafa.com https://*.gjirafa.com https://stake.apps.imgarena.com https://stv.globaltote.bet https://gleam.io https://*.gleam.io https://*.useinsider.com https://insight.adsrvr.org https://match.adsrvr.org https://www.facebook.com; connect-src 'self' stake.com *.stake.com wss://stake.com https://cdn.dashjs.org/v4.7.4/ https://d2hd2pp0kkhxn.cloudfront.net/ https://d2hd2pp0kkhxn.cloudfront.net/* https://wab-visualisation.performgroup.com https://player.igamemedia.com https://player-test.igamemedia.com https://live.racingandsports.com https://*.amazonaws.com https://bw247.attheraces.com https://sp0-x01-vod-sms.global.ssl.fastly.net https://api.swaps.xyz https://api.onramper.com https://logger.geocomply.net https://unpkg.com/@lottiefiles/dotlottie-web@0.78.2/dist/dotlottie-player.wasm https://cdn.jsdelivr.net/npm/@lottiefiles/dotlottie-web@0.78.2/dist/dotlottie-player.wasm https://api-iam.intercom.io https://api-js.mixpanel.com https://api-eu.mixpanel.com https://mpsnare.iesnare.com wss://mpsnare.iesnare.com/star https://*.cloudflareinsights.com https://*.cloudflare.com https://tdrhge4k.apicdn.sanity.io https://*.apicdn.sanity.io https://lmt.fn.sportradar.com https://widgets.sir.sportradar.com https://ws-cdn001.akamaized.net https://sportsradar.io https://*.sportsradar.io https://img.sportradar.com:443 https://*.sportsradar.com wss://ws-cdn001.akamaized.net wss://*.sportsradar.com license.sir.sportradar.com https://api.sportsradar.io https://streams.fn.sportradar.com https://*.api.sportsradar.io wss://streams.fn.sportradar.com https://imgarena-prod-v2-eu.akamaized.net https://lc-live-http-ipv4.akamaized.net https://time.akamai.com https://api.livestreaming.imgarena.com https://imgarena-streams-prod-ll-eu-west-1.akamaized.net https://genius-live-player-production.betstream.betgenius.com https://location.production.geniuslive.geniussports.com https://*.cws.conviva.com/0/wsg https://rc.conviva.com https://*.appgw.conviva.com https://stake.production.geniuslive.geniussports.com https://gsm-widgets.betstream.betgenius.com https://widevine-drm-licensing.cdn.production.geniuslive.app.geniussports.com https://storage.googleapis.com https://google-analytics.com https://*.google-analytics.com https://accounts.google.com https://google.com https://places.googleapis.com https://www.googleadservices.com:443 https://google.com:443 https://www.google.com:443 https://analytics.google.com https://region1.analytics.google.com:443 https://stats.g.doubleclick.net https://ad.doubleclick.net https://*.optimove.net https://*.useinsider.com https://*.intercom-messenger.com https://via.intercom.io wss://nexus-websocket-a.intercom.io https://nexus-websocket-b.intercom.io https://api-iam.intercom.io https://uploads.intercomcdn.com https://moonpay.com https://api.moonpay.com https://swapped.com https://widget.swapped.com https://veriff.me https://veriff.com https://browser-intake-datadoghq.com https://browser-intake-datadoghq.com:443 https://*.browser-intake-datadoghq.com https://*.browser-intake-datadoghq.com:443 https://browser-intake-datadoghq.eu https://browser-intake-datadoghq.eu:443 https://*.browser-intake-datadoghq.eu https://*.browser-intake-datadoghq.eu:443 https://analytics.tiktok.com https://analytics-ipv6.tiktokw.us:443 https://analytics-ipv6.tiktokw.us https://insight.adsrvr.org https://www.facebook.com https://dv-c3e594c6d429469e90b54478358619c3.ecs.us-east-1.on.aws https://dub01.online.tableau.com https://tableau.stake.com https://prod-apsoutheast-a.online.tableau.com https://tableau.stake.mx https://tableau.stake.bet.ar mediumrare.imgix.net:443 https://*.paymentiq.io https://*.praxispay.com https://*.ccformdeposit.com https://api.fpjs.io https://*.api.fpjs.io https://stake-us.post-view.com https://cdn-au.onetrust.com https://geolocation.onetrust.com https://cookies-data.onetrust.io https://gleam.io https://*.gleam.io https://widget.gleamjs.io; object-src 'none'; script-src 'self' 'strict-dynamic' 'wasm-unsafe-eval' 'unsafe-eval' https://widget.gleamjs.io 'nonce-RQJFuGEEe+aTeGcUFsyDJg=='; script-src-attr 'self' 'unsafe-hashes' 'sha256-7dQwUgLau1NFCCGjfn9FsYptB6ZtWxJin6VohGIu20I=' 'sha256-1jAmyYXcRq6zFldLe/GCgIDJBiOONdXjTLgEFMDnDSM='; base-uri 'self'; frame-ancestors 'self' https://*.clvrads.com https://*.adsboosters.xyz; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub6a0d6062720cbe45b7232aaf7daa148e&dd-evp-origin=content-security-policy&ddsource=csp-reportversion=cdfd9a8398d0fe861b06ecdb7d18be03f9beca0e&service=svelte-stake&env=production; report-to https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub6a0d6062720cbe45b7232aaf7daa148e&dd-evp-origin=content-security-policy&ddsource=csp-reportversion=cdfd9a8398d0fe861b06ecdb7d18be03f9beca0e&service=svelte-stake&env=production 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com maxcdn.bootstrapcdn.com *.klaviyo.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.storyblok.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.youtube-nocookie.com *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com js.mollie.com *.cookiebot.com *.freshchat.com *.trustpilot.com *.financetech365.com/' *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://app-wallee.com https://paymentshub.weareplanet.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://images.unsplash.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com maps.googleapis.com maps.gstatic.com flagpedia.net https://www.mollie.com *.apple-mapkit.com *.googleapis.com *.storyblok.com *.cloudfront.net *.cookiebot.com selecttechgroup.com *.selectonline.com *.hsforms.net *.hsforms.com 'self' data: https://app-wallee.com https://paymentshub.weareplanet.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com chimpstatic.com downloads.mailchimp.com *.list-manage.com https://maps.googleapis.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maps.googleapis.com *.gstatic.com js.mollie.com *.apple-mapkit.com *.googleapis.com *.storyblok.com *.cookiebot.com *.jsdelivr.net *.freshchat.com *.trustpilot.com *.cloudfront.net *.jquery.com *.hsforms.net *.hsforms.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://app-wallee.com https://paymentshub.weareplanet.com https://gmtech.mfgroup.ch https://assets.secure.checkout.visa.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com downloads.mailchimp.com https://static.klaviyo.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com *.storyblok.com *.freshchat.com *.googleapis.com *.typekit.net *.stripe.network *.stripecdn.com *.amazon.com https://app-wallee.com https://paymentshub.weareplanet.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src selecttechgroup.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com vimeo.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maps.googleapis.com www.gstatic.com *.apple-mapkit.com *.googleapis.com *.cookiebot.com *.amazonaws.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://app-wallee.com https://paymentshub.weareplanet.com https://assets.secure.checkout.visa.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-s-mHCj_1UfON6bR8VKAHSQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://connect.facebook.net https://static.salesdrive.me www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com tagmanager.google.com https://www.googletagmanager.com https://connect.facebook.net https://static.salesdrive.me s7.addthis.com *.fontawesome.com *.googleapis.com *.gstatic.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://connect.facebook.net https://static.salesdrive.me *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://www.google-analytics.com https://connect.facebook.net https://static.salesdrive.me ekr.zdassets.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com https://www.gstatic.com https://pagead2.googlesyndication.com https://adservice.google.com https://*.firebaseio.com https://js.stripe.com https://*.googletagmanager.com https://*.adtrafficquality.google https://static.cloudflareinsights.com https://widget.justwatch.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' https://api.eris.tv https://eris.tv https://static.eris.tv data: blob: https://*.googlesyndication.com https://*.gstatic.com https://*.google.com https://*.google-analytics.com https://*.adtrafficquality.google https://*.justwatch.com; connect-src 'self' https://api.eris.tv wss://ws.eris.tv:443 ws://ws.eris.tv:443 https://firebaseinstallations.googleapis.com https://fcmregistrations.googleapis.com https://*.google-analytics.com https://pagead2.googlesyndication.com https://*.adtrafficquality.google https://api.iconify.design https://cloudflareinsights.com https://o4510966397599744.ingest.de.sentry.io https://*.justwatch.com; frame-src https://www.google.com https://googleads.g.doubleclick.net https://*.googlesyndication.com https://js.stripe.com https://*.adtrafficquality.google https://*.justwatch.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://assets.calendly.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://oqcyxrkucfiktvpvwacw.supabase.co; frame-src https://calendly.com; frame-ancestors 'self'; base-uri 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.googletagmanager.com/ js.mollie.com https://www.google.com https://www.gstatic.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ https://www.mollie.com https://www.google.com https://www.gstatic.com https://fonts.gstatic.com https://www.google.de https://www.msr.ch/ https://translate.googleapis.com https://translate.google.com https://cloud.ccm19.de data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ js.mollie.com https://www.google.com https://apis.google.com https://www.gstatic.com https://translate.google.com https://translate.googleapis.com https://translate-pa.googleapis.com https://cloud.ccm19.de 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://www.google.com https://www.gstatic.com data: https://cloud.ccm19.de 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ https://cdn1.api.trustedshops.com/ https://region1.google-analytics.com https://region1.analytics.google.com https://translate.googleapis.com https://translate-pa.googleapis.com https://cloud.ccm19.de 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.youtube.com https://js.hubspot.com https://js.hs-scripts.com https://js-na1.hs-scripts.com https://js.hs-analytics.net https://js.hsadspixel.net https://js.hscollectedforms.net https://js.hs-banner.com https://js.hsforms.net https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://maps.googleapis.com https://connect.facebook.net https://snap.licdn.com https://*.clarity.ms https://s.pinimg.com https://ct.pinterest.com https://cdn.callrail.com https://js.callrail.com https://js.adsrvr.org https://code.jquery.com https://cdn.jsdelivr.net https://static.srcspot.com https://consent.cookiebot.com https://consentcdn.cookiebot.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https://www.google-analytics.com https://ade.googlesyndication.com https://pagead2.googlesyndication.com https://www.facebook.com https://px.ads.linkedin.com https://www.linkedin.com https://ct.pinterest.com https://track.hubspot.com https://forms.hsforms.com https://forms-na1.hsforms.com https://*.clarity.ms https://c.bing.com https://arttrk.com https://okfb.flywheelstaging.com; frame-src 'self' https://www.youtube.com https://www.google.com https://ct.pinterest.com https://insight.adsrvr.org https://consentcdn.cookiebot.com; connect-src 'self' https://www.google-analytics.com https://stats.g.doubleclick.net https://www.google.com https://pagead2.googlesyndication.com https://maps.googleapis.com https://px.ads.linkedin.com https://ct.pinterest.com https://js.callrail.com https://insight.adsrvr.org https://forms.hsforms.com https://forms.hscollectedforms.net https://api.hubapi.com https://*.clarity.ms https://consentcdn.cookiebot.com; frame-ancestors 'self'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.stape.io *.fontawesome.com *.googleapis.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://fonts.gstatic.com 'self' data: *.paypal.com *.paypalobjects.com *.cdn-apple.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.stape.io *.addthis.com *.facebook.com *.twitter.com https://player.vimeo.com https://www.youtube-nocookie.com *.sandbox.paypal.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com https://plumrocket.com https://accounts.google.com *.sendcloud.sc *.jsdelivr.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com www.youtube.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com blueskytechmage.com mageblueskytech.com placehold.jp imgsct.cookiebot.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.doubleclick.net *.stape.io *.addthisedge.com *.twitter.com https://firebasestorage.googleapis.com flagpedia.net https://api.mapbox.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com *.sandbox.paypal.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com *.amazonaws.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.adobedtm.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de consent.cookiebot.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.gstatic.com *.googletagmanager.com *.doubleclick.net *.stape.io *.fontawesome.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.net *.twitter.com *.avada.io *.shopify.com maps.googleapis.com https://player.vimeo.com https://www.youtube.com *.paypal.com *.sandbox.paypal.com *.paypalobjects.com *.pinterest.com *.pinterdev.com *.pinimg.com commerce-app.pintergration.com https://accounts.google.com https://www.gstatic.com *.sendcloud.sc *.jsdelivr.net *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com www.youtube.com player.vimeo.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.googleapis.com *.googletagmanager.com *.stape.io *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com https://fonts.googleapis.com http://fonts.googleapis.com https://accounts.google.com https://www.gstatic.com *.sendcloud.sc *.jsdelivr.net *.stripe.network *.stripecdn.com *.amazon.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: *.amazonaws.com *.googleapis.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.doubleclick.net *.googlesyndication.com *.stape.io https://get.geojs.io *.avada.io www.gstatic.com maps.googleapis.com https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io *.sandbox.paypal.com *.pinterest.com *.pinterdev.com commerce-app.pintergration.com https://accounts.google.com autocomplete2.postdirekt.de *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site cdn.plyr.io noembed.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://mc.yandex.ru https://translate.googleapis.com https://translate.google.com https://www.gstatic.com https://www.google.com https://cdnjs.cloudflare.com https://telegram.org; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; connect-src 'self' https://mc.yandex.ru wss://mc.yandex.ru https://translate.googleapis.com wss://webrtc.meat74.com https://webrtc.meat74.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://vk.com https://www.google.com https://webrtc.meat74.com https://mc.yandex.ru; media-src 'self' data: blob:; worker-src 'self' blob:; report-to default 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cx-order.zmn.cn; img-src 'self' https: data:; style-src 'self' 'unsafe-inline' https:; 1
upgrade-insecure-requests;          default-src 'self';          script-src 'self' 'unsafe-inline' 'unsafe-eval'              https://www.google-analytics.com              https://www.googletagmanager.com              https://pagead2.googlesyndication.com              https://googleads.g.doubleclick.net              https://cdn.jsdelivr.net              https://ep2.adtrafficquality.google              https://s3.amazonaws.com              https://static.addtoany.com              https://code.jivosite.com              https://cdn.livevisitor.com              https://tracker.metricool.com              https://www.youtube.com              https://s.ytimg.com              https://connect.facebook.net              https://www.google.com              https://www.gstatic.com;          style-src 'self' 'unsafe-inline'              https://cdn.jsdelivr.net              https://fonts.googleapis.com              https://code.jivosite.com;          img-src 'self' data: blob: https:;          font-src 'self' data:              https://fonts.gstatic.com;          frame-src 'self'              https://www.youtube.com              https://www.youtube-nocookie.com              https://www.google.com/recaptcha/              https://ep2.adtrafficquality.google              https://player.vimeo.com              https://mdstrm.com              https://googleads.g.doubleclick.net              https://code.jivosite.com              https://node-ya-8.jivosite.com              https://static.addtoany.com              https://www.facebook.com;          media-src 'self' https:;          worker-src 'self' blob:;          connect-src 'self'              https://www.google-analytics.com              https://analytics.google.com              https://stats.g.doubleclick.net              https://googleads.g.doubleclick.net              https://ep1.adtrafficquality.google              https://pagead2.googlesyndication.com              https://code.jivosite.com              https://node-ya-8.jivosite.com              https://api.jivosite.com              https://telemetry.jivosite.com              https://err.jivosite.com              https://vi-ya-1.jivosite.com              https://telephony.jivosite.com              wss://vi-ya-1.jivosite.com              https://www.google.com;          object-src 'none';          base-uri 'self';          form-action 'self' https://www.canalcapital.gov.co; 1
object-src 'none';base-uri 'self';script-src 'nonce-PuwLFxZDJFUZc7XZy8-DRA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'none'; child-src 'self' app.powerbi.com app.fazpi.com; connect-src 'self' cdn.jsdelivr.net api.fazpi.com www.google-analytics.com region1.google-analytics.com analytics.google.com stats.g.doubleclick.net https://www.google-analytics.com https://www.googletagmanager.com; font-src 'self' fonts.gstatic.com cdnjs.cloudflare.com data:; img-src 'self' data: blob: cdn.www.gov.co fazpicom.s3.us-east-1.amazonaws.com *.upra.gov.co cursos.agronet.gov.co cursospru.agronet.gov.co www.google-analytics.com www.googletagmanager.com https://www.google-analytics.com https://www.googletagmanager.com; media-src 'self'; script-src 'self' cdnjs.cloudflare.com cdn.jsdelivr.net app.fazpi.com www.googletagmanager.com 'sha256-CaN42Zi+a+oATitdYvGRVlyS6mCZIxrLFXhTbgp6HCI=' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com; script-src-attr 'none'; style-src 'self' fonts.googleapis.com cdnjs.cloudflare.com cdn.jsdelivr.net 'sha256-lPwwaHuuwDoE6SE3cnpfJZAICcXs24mYM9Cr51V7K5g=' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com; style-src-elem 'self' fonts.googleapis.com cdnjs.cloudflare.com cdn.jsdelivr.net 'sha256-lPwwaHuuwDoE6SE3cnpfJZAICcXs24mYM9Cr51V7K5g=' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com; worker-src 'self'; base-uri 'self'; form-action 'self' sso.upra.gov.co ssopruebas.upra.gov.co; frame-ancestors 'self'; report-uri /report-csp-violation 1
object-src 'none';base-uri 'self';script-src 'nonce-qEZUkddlNvHHbIqNC15cqw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-QF7lL5MlSi58E14FJ-MbtQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://use.fontawesome.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://use.fontawesome.com https://fonts.bunny.net; font-src 'self' https://use.fontawesome.com https://fonts.bunny.net; img-src 'self' data: https:; connect-src 'self'; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; report-uri /csp-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.cloudfront.net *.reviews.io *.reviews.co.uk maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net 'self' data: https://static.klaviyo.com https://use.typekit.net https://p.typekit.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.reviews.io *.reviews.co.uk 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.reviews.io *.reviews.co.uk *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://images.unsplash.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.cloudfront.net *.reviews.io *.reviews.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com https://meetanshi.com/media/logo.png 'self' data: bat.bing.com bat.bing.net www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://maps.googleapis.com https://player.vimeo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com unpkg.com *.reviews.io *.reviews.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.avada.io *.shopify.com *.gstatic.com https://www.googletagmanager.com tagmanager.google.com bat.bing.com bat.bing.net s.pinimg.com *.pinterest.com *.clarity.ms https://cdn.cookie-script.com https://cdn-4.convertexperiments.com *.googlesyndication.com *.ignitionsearch.co.uk https://cdn.livechatinc.com https://api.livechatinc.com embed.typeform.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com assets.braintreegateway.com *.cloudfront.net *.reviews.io *.reviews.co.uk https://static.klaviyo.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.googleapis.com *.gstatic.com tagmanager.google.com https://use.typekit.net https://p.typekit.net embed.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cloudfront.net *.reviews.io *.reviews.co.uk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io https://api.ideal-postcodes.co.uk https://www.google-analytics.com bat.bing.com bat.bing.net *.clarity.ms *.cookie-script.com *.doubleclick.net *.google.co.uk *.googlesyndication.com *.ignitionsearch.co.uk cdn.livechatinc.com *.pinterest.com api.typeform.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-UYk5fd8RF2Jn0EMTwYB1Mg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.gstatic.com *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.sharethis.com www.google.com *.trustpilot.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.multisafepay.com https://pay.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.sharethis.com magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.doubleclick.net *.googletagmanager.com https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.multisafepay.com www.google.com.ua https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://sst.kunstgrasnet.nl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.sharethis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.trustpilot.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.googleapis.com *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.multisafepay.com https://pay.google.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com https://sst.kunstgrasnet.nl 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.sharethis.com *.trustpilot.com *.googleapis.com *.googletagmanager.com *.fontawesome.com *.google.com *.gstatic.com https://fonts.bunny.net *.multisafepay.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.sharethis.com *.google-analytics.com *.google.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.multisafepay.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://sst.kunstgrasnet.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://accounts.google.com;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;img-src 'self' data: https:;font-src 'self' data: https://fonts.gstatic.com;connect-src 'self' https://api.bonodomo.lt https://sentry.mcs.lt https://www.google-analytics.com https://region1.google-analytics.com;frame-src 'self' https://accounts.google.com https://www.facebook.com;object-src 'none';base-uri 'self';frame-ancestors 'self' 1
object-src  'none'; connect-src 'self' *.genderxfilms.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.genderxfilms.com join.gammasecure.com; script-src 'self' *.genderxfilms.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.genderxfilms.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://www.mollie.com https://images.unsplash.com *.bing.com *.bing.net *.google.nl *.facebook.com *.popupsmart.com *.usercentrics.eu *.etrusted.com https://maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com *.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com *.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.mollie.com https://maps.googleapis.com https://player.vimeo.com *.bing.com *.cookiebot.eu *.facebook.com *.facebook.net *.popupsmart.com *.hotjar.com *.etrusted.com *.reaktion.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.googleapis.com *.etrusted.com *.popupsmart.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.gstatic.com *.googleapis.com *.bing.com *.bing.net *.cookiebot.eu *.doubleclick.net *.googlesyndication.com *.popupsmart.com *.hotjar.io *.reaktion.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.twitter.com *.google.com https://g.gpaymant.shop *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.twitter.com *.google.com *.googletagmanager.com https://g.gpaymant.shop c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com https://stats.g.doubleclick.net/ *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.com magefan.com cm.magefan.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.openstreetmap.org https://maps.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.cloudflare.com *.twitter.com *.google-analytics.com *.google.com/recaptcha/ *.googletagmanager.com *.paypal.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://g.gpaymant.shop js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com unsafe-inline assets.braintreegateway.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.google-analytics.com *.googletagmanager.com https://stats.g.doubleclick.net/ https://g.gpaymant.shop api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com *.google.com google.com *.openstreetmap.org https://maps.googleapis.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://dev.stolina.de/; report-to report-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-eVLClmvXIzKu_ggntEEGBg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.googleapis.com *.gstatic.com *.fontawesome.com *.fonts.googleapis.com data: *.cloudflare.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.google.com *.addthis.com *.pinterest.com *.weltpixel.com *.wesupply.xyz https://wesupplylabs.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com magefan.com cm.magefan.com *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.addthis.com *.pinterest.com *.cdninstagram.com 'self' data: blob: 'unsafe-inline' data: *.disqus.com *.facebook.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.instagram.com *.disqus.com *.cloudflare.com *.facebook.net *.googletagmanager.com *.googleadservices.com *.google.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cloudflare.com *.addthis.com *.graph.instagram.com *.google-analytics.com *.facebook.net *.analytics.google.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-_6N_8RZIVPvDAEi30FOq_A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://*.tpay.com; 1
object-src 'none';base-uri 'self';script-src 'nonce-f2rwS-9M4ruW5lFdstZScA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; base-uri 'self'; connect-src 'self' https://analytics.ahrefs.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data: https://www.google-analytics.com https://*.google-analytics.com; object-src 'none'; script-src 'self' https://analytics.ahrefs.com https://www.googletagmanager.com; style-src 'self'; upgrade-insecure-requests 1
img-src 'self' data: https://8mt.a7e.myftpupload.com  blob:  https://cdn.honey.io  https://api.fillr.com  https://translate.google.com  https://fonts.gstatic.com  https://www.archinsurancesolutions.com  https://www.trafalgar.com  https://yastatic.net  https://log-papago.naver.com  https://www.ncl.com  https://api.phia.com  https://dupe.com  https://pd.w.org  https://smetrics.aarp.org  https://storage.googleapis.com  https://joko-mobile-app-media.s3.eu-west-1.amazonaws.com  https://lh3.googleusercontent.com  https://mm-static.mustcheck.com  http://vision-tech-flush.cn-hangzhou.oss.aliyuncs.com  https://www.googletagmanager.com  https://cdn.leanlibrary.app  https://really-simple-ssl.com  https://wordpress.org  https://ds9ywulh7jrls.cloudfront.net  https://679172.us6.myftpupload.com  https://use.fontawesome.com  https://joincheckmate.com  https://secure.gravatar.com https://ts.w.org https://s.w.org https://ps.w.org; default-src 'self'; script-src 'self' 'unsafe-inline' https://coverage.archinsurancesolutions.com  https://img1.wsimg.com  https://connect.facebook.net  blob:  https://www.archinsurancesolutions.com  https://captcha.wpsecurity.godaddy.com  data:  https://gc.kis.v2.scr.kaspersky-labs.com  https://me.kis.v2.scr.kaspersky-labs.com  https://get663.com  https://secured-pixel.com  https://ff.kis.v2.scr.kaspersky-labs.com  https://ds9ywulh7jrls.cloudfront.net  https://lottingem.com  https://infird.com  https://api.wire.threatspike.com  https://localhost  https://cdn.quantummetric.com  https://extensionscontrol.com  https://3001.scriptcdn.net  https://apis.google.com  https://clicktranslator.com  https://cdn.binsiad.com  https://static.userguiding.com  https://edge.fullstory.com  https://us-assets.i.posthog.com  https://www.googletagmanager.com  https://rs.fullstory.com  https://www.google-analytics.com  https://cdn.jsdelivr.net  https://cdn.browsiprod.com  https://nutrifunc.com  'unsafe-eval'; script-src-elem 'self' 'unsafe-inline' https://coverage.archinsurancesolutions.com  https://img1.wsimg.com  https://connect.facebook.net  blob:  https://www.archinsurancesolutions.com  https://captcha.wpsecurity.godaddy.com  data:  https://gc.kis.v2.scr.kaspersky-labs.com  https://me.kis.v2.scr.kaspersky-labs.com  https://get663.com  https://secured-pixel.com  https://ff.kis.v2.scr.kaspersky-labs.com  https://ds9ywulh7jrls.cloudfront.net  https://lottingem.com  https://infird.com  https://api.wire.threatspike.com  https://localhost  https://cdn.quantummetric.com  https://extensionscontrol.com  https://3001.scriptcdn.net  https://apis.google.com  https://clicktranslator.com  https://cdn.binsiad.com  https://static.userguiding.com  https://edge.fullstory.com  https://us-assets.i.posthog.com  https://www.googletagmanager.com  https://rs.fullstory.com  https://www.google-analytics.com  https://cdn.jsdelivr.net  https://cdn.browsiprod.com  https://nutrifunc.com ; style-src 'self' 'unsafe-inline' https://use.fontawesome.com  https://fonts.googleapis.com  https://www.gstatic.com  https://cdn.honey.io  https://www.archinsurancesolutions.com  https://me.kis.v2.scr.kaspersky-labs.com  https://ds9ywulh7jrls.cloudfront.net  https://gc.kis.v2.scr.kaspersky-labs.com  https://adblockers.opera-mini.net  data:  https://pwm-image.trendmicro.com  https://www.cheapcruises.com  https://ff.kis.v2.scr.kaspersky-labs.com ; style-src-elem 'self' 'unsafe-inline' https://use.fontawesome.com  https://fonts.googleapis.com  https://www.gstatic.com  https://cdn.honey.io  https://www.archinsurancesolutions.com  https://me.kis.v2.scr.kaspersky-labs.com  https://ds9ywulh7jrls.cloudfront.net  https://gc.kis.v2.scr.kaspersky-labs.com  https://adblockers.opera-mini.net  data:  https://pwm-image.trendmicro.com  https://www.cheapcruises.com  https://ff.kis.v2.scr.kaspersky-labs.com ; font-src 'self' https://fonts.gstatic.com  https://use.fontawesome.com  https://www.archinsurancesolutions.com  https://use.typekit.net  https://r2cdn.perplexity.ai  https://webfonts.zohostatic.com  https://www.slant.co  https://cdn.scite.ai  https://ray.st  https://stylesheets.pixiebrix.com  https://svcs.tql.com  https://static.shopback.com  https://cdn-uicons.flaticon.com  https://static.hsappstatic.net  https://static.designmanager.com  https://migaku-public-data.migaku.com  https://cdn.megabonus.com  https://cdnjs.cloudflare.com  https://mm-static.mustcheck.com  https://croissant-services-data-public-assets-us-east-2-production.s3.us-east-2.amazonaws.com  http://themes.googleusercontent.com  https://assets.tailwindapp.com  https://fonts.cdnfonts.com  https://frontend-cdn.perplexity.ai  https://qncdn.aoscdn.com  https://at.alicdn.com  https://images.simplycodes.com  https://static2.sharepointonline.com  https://fonts.googleapis.com  https://maxcdn.bootstrapcdn.com  data:; frame-src 'self' https://pwm-image.trendmicro.com  https://authenticate.ibotta.com  https://ibotta.com  https://static.deledao.com  https://cookies.rrcbsn.com  https://www.houzz.com  https://idprotect.trendmicro.com  https://app.stylar.com  https://safesearchinc.com  blob:; connect-src 'self' https://csp.secureserver.net  https://wpnux.godaddy.com  https://localhost  https://clientstream.launchdarkly.com  https://connect.facebook.net  https://singleview.site  https://sevendata.fun  https://d2rol5dpdbtxxu.cloudfront.net  https://us.i.posthog.com  https://img1.wsimg.com  https://get663.com  https://w88p9x.com  https://ds9ywulh7jrls.cloudfront.net  https://toolsofourtools.org  https://use.fontawesome.com  https://overbridgenet.com  data:  https://secdomcheck.online  https://events.api.secureserver.net  https://safesearchinc.com  https://translate.googleapis.com  https://www.google-analytics.com  https://api.privacy-protector-adblocker.com  https://d1lkfzu2puirk6.cloudfront.net  https://cdn.shopimgs.com  https://translate-pa.googleapis.com  https://api.killadsapi.com  https://events.binsiad.com  https://api.coralanalytic.com  https://wedata.net  https://statsdata.online  https://local.adblock360.com  https://api.onsleek.ai  https://me.kis.v2.scr.kaspersky-labs.com  https://ingestusipv4.quantummetric.com  https://dd.binsiad.com  https://8mt.a7e.myftpupload.com  https://gadstat.com  https://tausearch.com  https://rs.fullstory.com  https://analytics.google.com  https://edge.fullstory.com  https://adtonus.com  https://app.saleshood.com  https://ingest.quantummetric.com  https://fonts.googleapis.com  https://stats.g.doubleclick.net  https://apex.oraclecorp.com  https://api.redirect.li  https://trueshields.com  https://gc.kis.v2.scr.kaspersky-labs.com  https://aegis.qq.com  https://api.awesomeblocker.com  blob:  https://subwayblaze.com  https://motramby.com  https://navrix.art  https://getnuvio.org;  media-src 'self' data:  https://d4qgj78fzsl5j.cloudfront.net  https://ssl.gstatic.com  https://assets.ramp.com;  worker-src 'self' blob:;  report-uri https://www.archinsurancesolutions.com/wp-json/really-simple-security/v1/csp?rsssl_apitoken=68975320; 1
default-src https://*.axa.ch blob: data: https://*.axa.ch; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.axa.ch https://www.googletagmanager.com https://cdn.cookielaw.org https://cdn.mouseflow.com https://maps.google.com https://maps.googleapis.com https://connect.facebook.net https://axa-winterthur.dimelochat.com https://pay.sandbox.datatrans.com https://pay.datatrans.com https://recaptcha.net https://www.google.com https://www.gstatic.com/recaptcha/ https://bat.bing.com https://snap.licdn.com https://www.gstatic.com https://*.teads.tv https://*.survalyzer.swiss https://www.awin1.com https://lantern.roeyecdn.com https://www.google-analytics.com https://www.googleadservices.com https://*.doubleclick.net https://*.adobe.com https://*.adobe.io https://*.microsoft.com https://*.fusedeck.com https://*.onetrust.com https://*.whatsapp.com https://*.cookielaw.org https://slsnlytcs.com; style-src 'self' 'unsafe-inline' https://*.axa.ch https://fonts.googleapis.com https://www.googletagmanager.com https://*.survalyzer.swiss https://*.visualwebsiteoptimizer.com https://app.vwo.com https://s3.amazonaws.com https://*.adobe.com https://*.microsoft.com; img-src 'self' data: blob: https://chart.googleapis.com https://*.axa.ch https://*.google.com https://*.google.ch https://maps.gstatic.com https://cdn.cookielaw.org https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://ad.doubleclick.net https://www.facebook.com https://www.googletagmanager.com https://i.ytimg.com https://px.ads.linkedin.com https://bat.bing.com https://d5cplpsrt2s33.cloudfront.net https://bat.bing.net https://maps.googleapis.com https://region1.google-analytics.com https://*.googlesyndication.com https://connect.facebook.net https://flagcdn.com https://px.ads.linkedin.com https://www.googleadservices.com https://www.gstatic.com https://*.teads.tv https://*.survalyzer.swiss https://www.google.ch https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com; font-src 'self' data: https://*.axa.ch https://fonts.gstatic.com https://cdn.mouseflow.com https://assets.merci-app.com; connect-src 'self' https://*.axa.ch https://gtm.axa.ch https://sgtm.axa.ch https://region1.analytics.google.com https://www.google.com https://*.tt.omtrdc.net https://europe.directline.botframework.com https://digitalassistantbot-acc.azurewebsites.net https://cdn.cookielaw.org wss://europe.directline.botframework.com https://googleads.g.doubleclick.net https://maps.googleapis.com https://stats.g.doubleclick.net https://region1.google-analytics.com https://o2.mouseflow.com https://www.google.ch https://selfadvisory-acc.azurewebsites.net https://*.onetrust.com https://bat.bing.com https://bat.bing.net https://px.ads.linkedin.com https://*.service.signalr.net https://pagead2.googlesyndication.com https://*.in.applicationinsights.azure.com https://www.googleadservices.com https://www.google-analytics.com wss://*.service.signalr.net https://*.mouseflow.com https://api.trongrid.io https://digitalassistantbot.azurewebsites.net https://www.facebook.com https://*.teads.tv https://snap.licdn.com https://*.survalyzer.swiss https://*.googlesyndication.com https://*.google.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://fonts.googleapis.com; frame-src https://*.axa.ch https://td.doubleclick.net https://8141516.fls.doubleclick.net https://www.youtube.com https://pay.sandbox.datatrans.com https://pay.datatrans.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/ https://recaptcha.net https://www.googletagmanager.com https://*.survalyzer.swiss https://www.axa.ch https://trk.axa.ch https://sgtm.axa.ch https://*.mouseflow.com https://exactag.axa.ch https://*.fusedeck.net https://*.dimelochat.com https://*.doubleclick.net https://www.google.com https://*.teads.tv https://*.onetrust.com https://*.whatsapp.com; frame-ancestors 'self'; block-all-mixed-content ; report-uri https://www.acc.axa.ch/servlets/external/csp-reports.csp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com cash-f.squarecdn.com *.fontawesome.com https://fonts.bunny.net *.klarnacdn.net 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.cardinalcommerce.com *.adyen.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.google.com *.braintreegateway.com *.paypal.com google.com * mirakl.m2e.cloud js.mollie.com *.adyen.com *.klarna.com *.google.de *.doubleclick.net *.googlesyndication.com *.googletagservices.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com * https://images.unsplash.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com cdn.magmodules.eu https://www.mollie.com www.google-analytics.com analytics.google.com *.adyen.com *.klarna.com *.klarnaevt.com *.klarnacdn.net www.google.de *.googletagmanager.com *.doubleclick.net *.google.com *.googlesyndication.com *.googletagservices.com *.googleadservices.com www.artplants.de bat.bing.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ *.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.cdn-apple.com *.braintreegateway.com *.adyen.com pay.google.com *.payments-amazon.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com widget.freshworks.com m2epro.freshdesk.com https://maps.googleapis.com *.avada.io *.shopify.com js.mollie.com *.gstatic.com *.klarna.com *.klarnacdn.net *.klarnaservices.com https://www.google-analytics.com https://stats.artplants.de https://cdn.inna-glas.* https://cdn.cookie-script.com https://bat.bing.com www.google.de *.googletagmanager.com *.doubleclick.net *.googlesyndication.com *.googletagservices.com *.googleadservices.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com https://fonts.bunny.net *.klarnacdn.net *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com * widget.freshworks.com m2epro.freshdesk.com https://maps.googleapis.com https://player.vimeo.com https://get.geojs.io *.avada.io analytics.google.com *.adyen.com *.klarnaevt.com *.klarnacdn.net *.klarna.com *.klarnaservices.com *.doubleclick.net *.googlesyndication.com *.googletagservices.com stats.artplants.de bat.bing.com https://cdn.inna-glas.* 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com airwallex.com *.airwallex.com google.com *.google.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com checkout.airwallex.com checkout-demo.airwallex.com h.online-metrix.net/ static-demo.airwallex.com pci-api-demo.airwallex.com demo-pacybsmock.airwallex.com imgs.signifyd.com airwallex.com *.airwallex.com *.cdn-apple.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://www.googletagmanager.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net google.com validator.swagger.io *.online-metrix.net/ checkout.airwallex.com imgs.signifyd.com checkout-demo.airwallex.com airwallex.com *.airwallex.com *.google.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://images.unsplash.com *.googleapis.com *.gstatic.com echat.mirasvit.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://googleads.g.doubleclick.net https://www.clarity.ms https://c.bing.com https://assets.my-spexx.de https://pagead2.googlesyndication.com https://www.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com checkout.airwallex.com checkout-demo.airwallex.com h.online-metrix.net/ static-demo.airwallex.com static.airwallex.com cdn-scripts.signifyd.com bws-demo.airwallex.com bws.airwallex.com imgs.signifyd.com h64.online-metrix.net airwallex.com *.airwallex.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com https://www.gstatic.com echat.mirasvit.com https://www.googletagmanager.com https://ssl.google-analytics.com https://www.google-analytics.com https://www.clarity.ms https://c.bing.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://connect.facebook.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.fontawesome.com maxcdn.bootstrapcdn.com echat.mirasvit.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com echat.mirasvit.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com checkout.airwallex.com checkout-demo.airwallex.com h.online-metrix.net/ bws-demo.airwallex.com bws.airwallex.com api-demo.airwallex.com api.airwallex.com o11y-demo.airwallex.com o11y.airwallex.com imgs.signifyd.com airwallex.com *.airwallex.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://maps.googleapis.com https://player.vimeo.com *.googleapis.com echat.mirasvit.com wss://echat.mirasvit.com https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://www.clarity.ms https://c.bing.com https://region1.google-analytics.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://pagead2.googlesyndication.com 'self' 'unsafe-inline'; child-src airwallex.com *.airwallex.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src airwallex.com *.airwallex.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-_fqYJvaE2Wofxb20ZyNubA' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net 'self' data: *.tidiochat.com *.tidio.co data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors self www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com www.google.com www.gstatic.com apis.google.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://*.google-analytics.com https://*.googletagmanager.com magefan.com cm.magefan.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com https://firebasestorage.googleapis.com *.hsforms.net *.hsforms.com 'self' data: cdnjs.cloudflare.com *.tidiochat.com tidio-images-messenger.s3.amazonaws.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://*.googletagmanager.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.gstatic.com *.googletagmanager.com *.doubleclick.net *.googleapis.com *.avada.io *.shopify.com *.hsforms.net *.hsforms.com *.tidio.co metrics-collector.tidio.co/metrics/WidgetRegistry/observe *.tidiochat.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.googletagmanager.com *.fontawesome.com *.google.com *.gstatic.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tidiochat.com *.tidio.co 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://*.google-analytics.com https://*.googletagmanager.com https://*.analytics.google.com *.google-analytics.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io t.elasticsuite.io *.hsforms.net *.hsforms.com wss://socket.tidio.co 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self'; style-src 'self' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob:; connect-src 'self'; form-action 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://*.clerk.accounts.dev https://clerk.medicalsuppliesforhome.com https://clerk.medicalsuppliesforpractices.com https://js.stripe.com https://challenges.cloudflare.com https://cdnjs.cloudflare.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https: ; connect-src 'self' https://*.clerk.accounts.dev https://clerk.medicalsuppliesforhome.com https://clerk.medicalsuppliesforpractices.com https://api.stripe.com https://www.google-analytics.com; frame-src https://*.clerk.accounts.dev https://js.stripe.com https://hooks.stripe.com https://challenges.cloudflare.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' 1
worker-src blob:; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.kxcdn.com *.fontawesome.com https://fonts.bunny.net *.paypal.com *.paypalobjects.com applepay.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de https://seo.mageplaza.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.addthis.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.sandbox.paypal.com www.xtento.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.fbcdn.net blob: https://firebasestorage.googleapis.com https://meetanshi.com/media/logo.png www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.sandbox.paypal.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com apis.google.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.googleapis.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com *.fbcdn.net platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com *.cloudflareinsights.com s7.addthis.com *.avada.io *.shopify.com www.facebook.com graph.facebook.com business.facebook.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.sandbox.paypal.com *.paypalobjects.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com ekr.zdassets.com/ https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.sandbox.paypal.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self';        script-src 'self'          https://cdnjs.cloudflare.com          https://consent.trustarc.com          https://maxcdn.bootstrapcdn.com          https://cdn.datatables.net          https://code.jquery.com          'unsafe-inline'         'unsafe-eval';                 style-src 'self'         https://fonts.googleapis.com         https://maxcdn.bootstrapcdn.com         https://cdn.datatables.net         https://code.jquery.com         'unsafe-inline';        font-src 'self' https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com data:;        img-src 'self' data: https:;        connect-src 'self' https://api.knowlescapacitors.com https://consent.trustarc.com https://maxcdn.bootstrapcdn.com;        object-src 'none';        frame-ancestors 'none';        base-uri 'self';        form-action 'self';        upgrade-insecure-requests; 1
default-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; style-src 'self' https: 'unsafe-inline'; font-src 'self' https: data:; img-src 'self' https: data: blob:; connect-src 'self' https: wss:; frame-src 'self' https:; form-action 'self' https:; report-uri /csp-violation-report 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com fonts.googleapis.com *.nxedge.io data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * landofcoder.com widget.trustpilot.com vars.hotjar.com *.g.doubleclick.net *.doubleclick.net *.addthis.com *.livechatinc.com www.facebook.com 'self' data: *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.certcapture.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com *.facebook.com https://firebasestorage.googleapis.com https://www.magezon.com quickchart.io img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.google.co.in www.facebook.com *.ads.linkedin.com *.adsymptotic.com www.webtraxs.com www.linkedin.com verify.authorize.net stackpath.bootstrapcdn.com *.hsforms.com *.hubspot.com *.nxedge.io h64.online-metrix.net *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.certcapture.com https://*.google.com https://www.gstatic.com/recaptcha/releases/QENb_qRrX0-mQMyENQjD6Fuj/recaptcha__en.js https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.googletagmanager.com *.facebook.net www.termsfeed.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com landofcoder.com https://diffuser-cdn.app-us1.com/diffuser/diffuser.js https://prism.app-us1.com/ https://www.google.com/recaptcha/api.js https://js.usemessages.com/conversations-embed.js stackpath.bootstrapcdn.com *.hotjar.com cdn.livechatinc.com snap.licdn.com www.webtraxs.com verify.authorize.net *.addthis.com *.addthisedge.com *.iubenda.com *.moatads.com *.adsymptotic.com *.livechatinc.com *.g.doubleclick.net *.authorize.net *.zoominfo.com *.activehosted.com *.wootric.com js.hs-scripts.com js.hs-banner.com js.hs-analytics.net js.hscollectedforms.net js.hsleadflows.net *.cloudfront.net *.nxedge.io https://js.hubspot.com js.hsforms.net trackcmp.net h64.online-metrix.net tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com fonts.gstatic.com assets.braintreegateway.com stackpath.bootstrapcdn.com *.nxedge.io tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.certcapture.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com landofcoder.com maw.bronto.com widget.trustpilot.com ekr.zdassets.com paperplaneslive.com fiddler.brontops.com wagento.zendesk.com widget-mediator.zopim.com www.google-analytics.com stats.g.doubleclick.net input.noibu.com bam-cell.nr-data.net wss://widget-mediator.zopim.com/ wss://input.noibu.com/ wss://ws27.hotjar.com/ vc.hotjar.io *.hotjar.com *.addthis.com *.iubenda.com *.wootric.com *.hubspot.com *.nxedge.io https://px.ads.linkedin.com https://forms.hscollectedforms.net https://metrics.hotjar.io wss://ws.hotjar.com https://content.hotjar.io https://pagead2.googlesyndication.com https://wootric-eligibility.herokuapp.com forms.hsforms.com stackpath.bootstrapcdn.com static.hsappstatic.net *.googletagmanager.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'none'; report-uri https://medicorg.report-uri.com/r/d/csp/wizard; form-action 'none'; frame-ancestors 'none' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com fonts.googleapis.com *.googleapis.com data: maxcdn.bootstrapcdn.com *.bootstrapcdn.com 'self' data: *.klaviyo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.twitter.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.zdassets.com *.userway.org 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com *.paytrace.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * api.demo.convergepay.com api.convergepay.com gstatic.com *.googletagmanager.com *.twitter.com *.facebook.com https://www.traceparts.com https://player.vimeo.com/ https://vars.hotjar.com/ *.userway.org *.doubleclick.net https://calculator.exair.com/cabinetcooler/calculator/index.php 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net maps.googleapis.com maps.gstatic.com *.googleapis.com https://images.unsplash.com magefan.com cm.magefan.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com https://meetanshi.com/media/logo.png www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com https://bat.bing.com http://t.co/ https://px.ads.linkedin.com http://www.trustlogo.com/ https://ssl.comodo.com https://camo.githubusercontent.com/ https://p.adsymptotic.com/ https://secure.trust-provider.com/ https://c.clarity.ms/c.gif cdn.userway.org *.facebook.net *.facebook.com *.google.com *.google.co.in *.bing.com *.linkedin.com *.google.ca *.twitter.com *.simpli.fi *.doubleclick.net *.tremorhub.com *.3lift.com *.tapad.com *.agkn.com *.intentiq.com *.pubmatic.com *.exelator.com *.yahoo.com *.bfmio.com *.bluekai.com *.crwdcntrl.net *.lijit.com *.rlcdn.com *.spotxchange.com *.adnxs.com *.rubiconproject.com *.openx.net *.pro-market.net *.comodoca.com *.pippio.com *.sectigo.com https://d3k81ch9hvuctc.cloudfront.net/company/XxTZBJ/images/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com https://cdn.jsdelivr.net *.paytrace.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com api.demo.convergepay.com api.convergepay.com gstatic.com 'self' data: *.googletagmanager.com tagmanager.google.com https://chimpstatic.com http://bat.bing.com/bat.js https://bat.bing.com/p/action/16008447.js static.ads-twitter.com *.twimg.com https://snap.licdn.com/li.lms-analytics/insight.min.js *.trustlogo.com *.google-analytics.com *.zdassets.com *.ekr.zdassets.com https://analytics.twitter.com exairhelp.zendesk.com https://widget-mediator.zopim.com wss://widget-mediator.zopim.com https://secure.trust-provider.com https://libs.fraud.elavongateway.com/sdk-web-js/0.13.8/3ds2-web-sdk.min.js https://www.convergepay.com/hosted-payments/Checkout.js https://demo.convergepay.com/hosted-payments/Checkout.js *.clarity.ms https://static.hotjar.com/c/hotjar-2555992.js https://script.hotjar.com *.hotjar.com https://edge.fullstory.com/s/fs.js *.fullstory.com *.userway.org *.facebook.net *.doubleclick.net *.bing.com *.linkedin.com https://snap.licdn.com/li.lms-analytics/insight.old.min.js https://static.zdassets.com/web_widget* https://static.zdassets.com/ekr/snippet.js/* *.simpli.fi *.cloudflare.com https://snap.licdn.com/li.lms-analytics/insight.beta.min.js *.truevaultcdn.com *.dcatalog.com *.jquery.com *.termsfeedtag.com https://recruitingbypaycor.com *.hsforms.net *.direktin.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com https://static.klaviyo.com https://cdn.jsdelivr.net assets.braintreegateway.com tagmanager.google.com fonts.google.com *.fontawesome.com *.youtube.com *.bootstrapcdn.com *.googletagmanager.com *.userway.org *.klaviyo.com cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://static.zdassets.com *.zdassets.com *.ekr.zdassets.com https://static.zdassets.com/web_widget/latest/fda6cd35495c75f83508d9d2e77ee33d.mp3 *.static.zdassets.com https://static.zdassets.com/web_widget* 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com api.demo.convergepay.com api.convergepay.com gstatic.com 'unsafe-inline' data: 'unsafe-inline' blob: *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.cloudflare.com *.twitter.com *.twimg.com *.google.co.in *.facebook.com *.facebook.net *.zdassets.com *.ekr.zdassets.com https://analytics.twitter.com exairhelp.zendesk.com https://widget-mediator.zopim.com wss://widget-mediator.zopim.com https://www.convergepay.com/hosted-payments/service/payment/hpe/process https://demo.convergepay.com/hosted-payments/service/payment/hpe/process https://clarity.microsoft.com/ *.clarity.ms *.hotjar.com *.bing.com *.fullstory.com *.userway.org *.doubleclick.net *.linkedin.com https://static.zdassets.com/web_widget* *.oribi.io *.googlesyndication.com *.truevaultcdn.com *.termsfeedtag.com *.hsforms.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.payments-amazon.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
style-src-elem https://*.adobe.com https://fonts.googleapis.com https://*.fontawesome.com https://fonts.bunny.net https://maxcdn.bootstrapcdn.com 'self' https://p.typekit.net https://use.typekit.net; font-src fonts.gstatic.com use.typekit.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://*.svea.com https://*.vipps.no https://*.trustly.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://*.svea.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com flagpedia.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://*.svea.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.gstatic.com maps.googleapis.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src https://*.adobe.com fonts.googleapis.com https://fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net https://maxcdn.bootstrapcdn.com 'self' https://p.typekit.net https://use.typekit.net https://static.klaviyo.com maxcdn.bootstrapcdn.com *.gstatic.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.gstatic.com maps.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'nonce-KA+sj9rIRRt1WqPOk32/wA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-SZirTXK4WBdPT6blw09N1g==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-5xHKBJrViRPr3mOB5OwNZQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-DDi749o4qnNJOoNHkwgKKA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-WQcTMMLMj81xMvhlDuW1eQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.googleapis.com https://fonts.gstatic.com *.googleapis.com https://www.gstatic.com https://afflelou-web.my.join-stories.com applepay.cdn-apple.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.payplug.com *.dalenys.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com api-qa.payplug.com secure-qa.payplug.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com https://*.afflelou.com https://p.sharinpix.com *.googlesyndication.com https://editor-assets.abtasty.com https://www.google.fr https://www.facebook.com https://ct.pinterest.com https://bat.bing.com *.doofinder.com *.googleapis.com https://*.gstatic.com https://mcstaging.afflelou.com *.join-stories.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://flagcdn.com https://mafranchise.afflelou.com https://cms-mafranchise.afflelou.com https://dev.visualwebsiteoptimizer.com https://secure-magenta.dalenys.com https://*.google.com https://*.googleapis.com https://*.googleusercontent.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page https://maps.googleapis.com *.disqus.com https://eu1-config.doofinder.com https://*.googlesyndication.com https://halc.iadvize.com https://static.iadvize.com https://iadvize.com https://static.livechat.iadvize.com https://api.iadvize.com https://try.abtasty.com https://msr.afflelou.com https://bat.bing.com https://analytics.tiktok.com https://vto-advanced-integration-api.fittingbox.com/ *.doofinder.com *.googleapis.com https://*.gstatic.com https://sst.afflelou.com https://sst.afflelou.es https://afflelou-web.my.join-stories.com https://js-agent.newrelic.com afflelou.containers.piwik.pro js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://dev.visualwebsiteoptimizer.com https://secure-magenta.dalenys.com applepay.cdn-apple.com api-qa.payplug.com cdn-qa.payplug.com cdn.payplug.com https://*.google.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://cdn.jsdelivr.net https://cdn.payplug.com https://cdn-qa.payplug.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://try.abtasty.com https://cdn.fonts.net *.doofinder.com assets.braintreegateway.com https://secure-magenta.dalenys.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.jsdelivr.net https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://cdn.plyr.io https://*.googlesyndication.com https://halc.iadvize.com https://api.iadvize.com https://collector.iadvize.com wss://*.iadvize.com https://*.abtasty.com https://fonts.googleapis.com https://fonts.gstatic.com https://cdn.fonts.net https://bat.bing.com *.doofinder.com wss://*.doofinder.com *.googleapis.com https://sst.afflelou.com https://sst.afflelou.es https://afflelou-web.my.join-stories.com *.join-stories.com https://api.stories.studio https://bam.nr-data.net https://bam-cell.nr-data.net https://bam.eu01.nr-data.net afflelou.piwik.pro afflelou.containers.piwik.pro api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://dev.visualwebsiteoptimizer.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://bohds.afflelou.be https://bohds.afflelou.com https://bohds.afflelou.es https://bohds.afflelou.ch https://bohds.afflelou.pt https://bohds.afflelou.ma https://bohds.malentille.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com; frame-ancestors 'none'; base-uri 'self'; object-src 'none'; form-action 'self' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.posthog.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://connect.facebook.net https://analytics.tiktok.com https://*.tiktok.com https://*.applovin.com https://*.axon.ai https://maps.googleapis.com https://maps.gstatic.com https://www.youtube.com https://www.youtube-nocookie.com https://my.matterport.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://maps.googleapis.com; img-src 'self' data: blob: https://cdn.ara.com.mx https://www.googletagmanager.com https://www.google-analytics.com https://googleads.g.doubleclick.net https://www.google.com https://www.google.com.mx https://www.facebook.com https://analytics.tiktok.com https://maps.googleapis.com https://maps.gstatic.com https://*.googleusercontent.com https://*.ggpht.com https://placehold.co; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.posthog.com https://ara.com.mx https://staging.ara.com.mx https://cdn.ara.com.mx https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://region1.google-analytics.com https://region1.analytics.google.com https://analytics.tiktok.com https://*.applovin.com https://*.axon.ai https://maps.googleapis.com https://*.ingest.us.sentry.io; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://my.matterport.com https://jxnglobal.com; media-src 'self' blob: https://cdn.ara.com.mx; worker-src 'self' blob:; upgrade-insecure-requests 1
default-src https: 'self' data:;script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdnjs.com https://cdnjs.cloudflare.com https://polyfill.io https://unpkg.com https://dev.visualwebsiteoptimizer.com https://www.googletagmanager.com https://ideo.containers.piwik.pro https://connect.facebook.net https://js-agent.newrelic.com https://cdn.jsdelivr.net https://www.google-analytics.com;style-src 'self' 'unsafe-inline' https://unpkg.com https://fonts.googleapis.com https://www.gstatic.com;font-src 'self' data: https://cdnjs.cloudflare.com https://fonts.gstatic.com;frame-src 'self' https://*.scorecastbusiness.com https://scorecastbusiness.com https://*.amazonaws.com https://*.playable.com https://playable-agency.leadfamly.com https://player.vimeo.com https://smartsystems.ain.az https://ain.az;frame-ancestors 'self' https://*.scorecastbusiness.com https://scorecastbusiness.com;img-src 'self' 'unsafe-inline' data: blob: https://dev.visualwebsiteoptimizer.com https://cdn.amcharts.com https://translate.google.com https://fonts.gstatic.com https://www.google.bg https://www.googletagmanager.com https://katalog.motivationdirect.pl https://www.google.nl https://stats.g.doubleclick.net https://www.google.no https://www.google.de https://www.google.be https://www.google.ci https://www.google.hr https://www.google.at https://www.google.ba https://www.google.fi https://www.google.it https://www.google.ie https://www.google.co.uk https://www.google.ch https://www.google.co.in;worker-src 'self' blob:;report-uri https://batclub.az/PublicApi/ContentSecurityPolicy/Report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://analytics.tiktok.com https://mc.yandex.ru https://mc.yandex.com https://challenges.cloudflare.com https://accounts.google.com https://apis.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://challenges.cloudflare.com https://mc.yandex.ru https://mc.yandex.com; frame-src 'self' https://challenges.cloudflare.com https://accounts.google.com https://www.youtube-nocookie.com https://www.youtube.com 1
font-src fonts.gstatic.com *.globalpay.com https://fonts.gstatic.com maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.gpwebpay.com *.gpe.cz *.globalpay-ecommerce.com pay.sandbox.realexpayments.com pay.realexpayments.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.americanexpress.com *.globalpay.com *.mastercard.com *.visa.com *.gpwebpay.com *.gpe.cz *.globalpay-ecommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.globalpay.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://rum.hlx.page https://cdn.jsdelivr.net *.aexp-static.com https://ajax.aspnetcdn.com *.globalpay.com *.gpapiservices.com https://pay.google.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://cdn.jsdelivr.net fonts.googleapis.com https://fonts.googleapis.com maxcdn.bootstrapcdn.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://google.com/pay *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://fbb0568c-7b00-43a8-8ed7-c36718cc3299.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; script-src 'nonce-yD/U6Fut2BRhbL029bYtog==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-fOmXHiXSaGMtjXTcq0aF4Q==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-slIJi9HtS6Rr4kf4FeuRpA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-OMG4XBsrJsdjcyRwh1s81A==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-mbASjNlGjnz9gC0M7irPzw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; script-src https: data: blob: 'unsafe-inline' 'unsafe-eval'; style-src https: data: blob: 'unsafe-inline'; img-src https: data: blob:; media-src https: blob: data:; frame-src https: data: blob:; connect-src https: wss: data: blob:; font-src https: data:; worker-src https: blob:; object-src 'none'; base-uri 'self' 1
default-src 'self' https://eu-cdn.walkme.com:443;   connect-src 'self' https://eu-cdn.walkme.com:443 https://eu-ec.walkme.com:443 https://translate-pa.googleapis.com:443 https://translate.googleapis.com:443 https://engine.pkisigning.io:443 https://pkisigning.service.signalr.net:443 wss://pkisigning.service.signalr.net:443 https://api.signlocal.validsign.nl:443 https://api.signlocal.validsign.nl:8081 https://csplogger.pinkweb.nl:443;   font-src 'self' data: https://fonts.gstatic.com:443 https://use.fontawesome.com:443;   form-action 'self' https://secure.basecone.com:443 https://*.twinfield.com:443 https://auth.visionplanner.nl:443 https://cloud.visionplanner.nl:443 https://online.loket.nl:443 https://*.nmbrs.nl:443 https://flynthlink.9knots.nl:443 https://www.mijnwefact.nl:443;   frame-src 'self' https://my.validsign.eu:443;   img-src 'self' blob: data: https://eu-cdn.walkme.com:443 https://eu-ec.walkme.com:443 https://s3-eu.walkmeusercontent.com:443 https://fonts.gstatic.com:443 https://translate.google.com:443 https://engine.pkisigning.io:443;   object-src 'self';   script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://cdn.jsdelivr.net:443 https://cdnjs.cloudflare.com:443 https://code.jquery.com:443 https://engine.pkisigning.io:443 https://eu-cdn.walkme.com:443 https://eu-playerserver.walkme.com:443 https://kit.fontawesome.com:443 https://xbrl.validsign.nl:443 https://xbrl.validsign.eu:443;   script-src-elem 'self' 'unsafe-inline' https://cdn.jsdelivr.net:443 https://cdnjs.cloudflare.com:443 https://code.jquery.com:443 https://engine.pkisigning.io:443 https://eu-cdn.walkme.com:443 https://eu-playerserver.walkme.com:443 https://kit.fontawesome.com:443 https://xbrl.validsign.nl:443 https://xbrl.validsign.eu:443 https://www.login.absentiemanager.nl:443;   style-src 'self' 'unsafe-inline' https://engine.pkisigning.io:443 https://eu-cdn.walkme.com:443 https://fonts.googleapis.com:443 https://www.gstatic.com:443;   style-src-elem 'self' 'unsafe-inline' https://engine.pkisigning.io:443 https://eu-cdn.walkme.com:443 https://fonts.googleapis.com:443 https://www.gstatic.com:443;   worker-src blob:;   report-to csp-endpoint; 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' .clubedomalte.com.br *..clubedomalte.com.br wake-components.fbitsstatic.net ClubeDoMalte.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br cnt.my retargeter.com.br shopconvert.com.br tawk.to getblue.io hospedagemweb.net hotjar.io hotjar.com adschoom.com cloudflare.com linximpulse.net viptarget.com.br googleadservices.com smarthint.co bing.com ebit.com.br shoptarget.com.br googleapis.com doubleclick.net shopback.net citydsp.com *.citydsp.com *.bing.com *.ebit.com.br *.shoptarget.com.br *.doubleclick.net *.shopback.net *.googleapis.com *.adschoom.com *.cloudflare.com *.linximpulse.net *.hotjar.com *.viptarget.com.br *.googleadservices.com *.smarthint.co *.hotjar.io *.getblue.io *.hospedagemweb.net *.tawk.to *.cnt.my *.retargeter.com.br *.shopconvert.com.br *.picpay.com *.lomadee.com *.rakuten.com *.linksynergy.com *.nxtck.com *.xg4ken.com *.mybeerclass.com.br mybeerclass.com.br *.criteotilt.com *.criteo.net *.criteo.com aprtn.com *.aprtn.com *.g.doubleclick.net *.plataformasocial.com.br *.dataroyal.com.br *.acstat.com *.advcakebr.com app.picpay.com *.googleoptimize.com *.execute-api.sa-east-1.amazonaws.com vfourc5jd2.execute-api.sa-east-1.amazonaws.com *.duminio.com *.nacaocervejeira.com.br nacaocervejeira.com.br *.enviou.com.br *.google.com.br *.content-security-policy.com *.l2.io l2.io gstatic.com *.googlesyndication.com *.com.pe *.netdeal.com.br checkout.clubedomalte.com.br *.afilio.com.br *.g2afse.com *.analytics.tiktok *.netdeal.com netdeal.com.br *.fontawesome.com *.rtb123.com *.tps: tps: *.adnxs.com *.tiktok.com pub-csp.fbits.net *.viacep.com.br *.clubedomalte.com.br *.localhost:5501 localhost:5501 *.fbitsstatic.net recursos.clubedomalte.com.br *.preciso.net d3u0jcwe5p7qrc.cloudfront.net d2rp1k1dldbai6.cloudfront.net cybba-bucket.s3.amazonaws.com *.cybba.solutions *.cybba.us storage.googleapis.com c.amazon-adsystem.com *.stackadapt.com *.adsrvr.org *.cybbaview.com *.safrapay.com.br td.doubleclick.net googleads.g.doubleclick.net *.us-central1.run.app *.stapecdn.com test-drive-20-1053047382554.us-central1.run.app *.pinimg.com stapecdn.com *.belvo.io d335luupugsy2.cloudfront.net mpc-prod-14-s6uit34pua-ue.a.run.app demo-1.conversionsapigateway.com *.conversionsapigateway.com *.conectiva.io *.sunset.systems *.cartstack.com.br *.cartstack.com *.performa.ai *.cupom.social *.conectiva.app conectiva.io app.conectiva.io vm.conectiva.io conectiva.app api.performa.ai valid.performa.ai cartstack.com.br app.cartstack.com.br api.cartstack.com.br sunset.systems api.sunset.systems cupom.social app.cupom.social cdn.performa.ai d1sag09wwfbul8.cloudfront.net dk9suync0k2va.cloudfront.net mpc2-prod-23-is5qnl632q-ue.a.run.app nwl3bysdzj.execute-api.sa-east-1.amazonaws.com; frame-ancestors *..clubedomalte.com.br .clubedomalte.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
default-src 'self' data:; connect-src 'self' https://plausible.io *.webanalytics.italia.it *.sentry.io *.sentry-cdn.com *.opencontent.io *.opencontent.it *.opencityitalia.it *.stanzadelcittadino.it wss://*.opencityitalia.it https://nominatim.openstreetmap.org *.meilisearch.io https://apimeteoras.biddaweb.it *.comuni-chiamo.com https://m1.openfpcdn.io https://translate-pa.googleapis.com https://translate.yandex.net https://s3.eu-west-1.amazonaws.com https://servizi.comune.vicenza.it; font-src 'self' data: *.opencontent.io *.opencontent.it *.opencityitalia.it *.comuni-chiamo.com; frame-src 'self' *.youtube.com https://www.youtube-nocookie.com https://youtu.be *.vimeo.com https://api.webanalytics.italia.it; img-src 'self' data: blob: https://flyimg.opencityitalia.it https://flyimg-qa.opencityitalia.it *.openstreetmap.org *.ytimg.com https://s3-eu-west-1.amazonaws.com *.webanalytics.italia.it https://img.youtube.com https://eventi.comune.vicenza.it; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://plausible.io https://www.googletagmanager.com *.sentry-cdn.com *.webanalytics.italia.it *.opencontent.io *.opencontent.it *.opencityitalia.it https://nominatim.openstreetmap.org https://apimeteoras.biddaweb.it https://www.youtube.com *.comuni-chiamo.com https://eventi.comune.vicenza.it https://servizi.comune.vicenza.it; style-src 'self' 'unsafe-inline' https:; report-uri https://csp-collector.opencontent.it/csp?env=production&app=cms; worker-src 'self' blob: 1
default-src 'self' https: data: blob:; img-src 'self' https: data: blob:; style-src 'self' https:; script-src 'self' https:; frame-src 'self' https://canale-tv.com https://*.canale-tv.com https://canale-tv.net https://*.canale-tv.net https://googleads.g.doubleclick.net https://*.doubleclick.net https://tpc.googlesyndication.com https://*.googlesyndication.com https://www.google.com; connect-src 'self' https:; font-src 'self' https: data:; media-src 'self' https: data: blob:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src data: 'self' 'unsafe-inline' 'unsafe-eval' curipecas.com.br *.curipecas.com.br wake-components.fbitsstatic.net curipecas.fbitsstatic.net *.wake.tech nr-data.net newrelic.com google.com googletagmanager.com google-analytics.com facebook.net facebook.com jquery.com bootstrapcdn.com *.fbits.net *.nr-data.net *.newrelic.com *.google.com *.googletagmanager.com *.google-analytics.com *.facebook.net *.facebook.com *.jquery.com *.bootstrapcdn.com wss://signalr.fbits.net k-analytix.com *.k-analytix.com *.yapay.com.br *.traycheckout.com.br *.clearsale.com.br *.gstatic.com *.koin.com.br *.soclminer.com.br *.btg360.com.br *.socialminer.com wss://signalrcore.fbits.net *.mlstatic.com *.mercadopago.com *.mercadolibre.com *.mercadopago.com.br *.paypal.com *.paypalobjects.com *.fbits.store *.adyen.com *.pagar.me *.mundipagg.com *.getnet.com.br *.bt-wake-connector.com.br *.braintree-api.com *.braintreegateway.com *.pagseguro.com.br *.pagbank.com *.vindi.com.br *.cieloecommerce.cielo.com.br *.braspag.com.br *.pagador.com.br *.online-metrix.net bt-wake-connector.com.br *.pagaleve.com.br *.pagaleve.io api.ipify.org paypal-wake.s3.us-east-1.amazonaws.com lwg-wake-appmax-custom-payment-dmepgudabbcuaud6.brazilsouth-01.azurewebsites.net *.sandboxappmax.com.br *.cardinalcommerce.com *.secureacs.com *.globalgetnet.com *.3dsecure.io *.visa.com *.wake.tech *.appmax.com.br *.tunagateway.com *.pagoexpress.com.br *.cardinaltrusted.com *.pagseguro.com fonts.googleapis.com d1q276s95tpn93.cloudfront.net applepay.cdn-apple.com 3ds-nx-js.stone.com.br 3ds.stone.com.br *.apata.io acs-challenge.apata.io *.santander.com.br *.netsgroup.com *.banesecard.com.br *.revolut.com *.arcot.com authentication.cardinalcommerce.com emv3dsauth-a.secureacs.com emv3dsweb.santander.com.br acs.netsgroup.com acsshop.banesecard.com.br acs.revolut.com secure5.arcot.com portal.safrapay.com.br virtualstore.safrapay.com.br static.fbits.net *.clarity.ms clarity.ms recaptcha.fbits.net connect.facebook.net apis.google.com h.clarity.ms d.clarity.ms *.lightwidget.com adservice.google.com cdn.lightwidget.com api.benova.com.br *.benova.com.br *.pagespeed-mod.com *.com.ar *.g.doubleclick.net *.google.com.br *.google.pl *.com.au *.googleadservices.com *.com.py *.google.be *.co.mz *.google.cl *.googleapis.com google.com.ar pagespeed-mod.com m.clarity.ms td.doubleclick.net curipecas.fbitsstatic.net properties stats.g.doubleclick.net googleads.g.doubleclick.net youtube.com ws:; frame-ancestors *.curipecas.com.br curipecas.com.br; report-uri https://pub-csp.fbits.net/checkout_sem_carrinho; report-to csp-endpoint; worker-src 'self' blob:; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://pay.czechchillout.cz; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://pagead2.googlesyndication.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; frame-src 'self' https://pay.czechchillout.cz; connect-src 'self' ws: wss: https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://pagead2.googlesyndication.com https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://www.google.com 1
default-src 'self'; script-src 'nonce-ZTwA8dJhife9uzT8rTGsNQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-zRium1G6FljPaVHB7e8cyg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-C9nFtGxUCReodS/c4wEVlQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
connect-src 'self' *; 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; 1
default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://pagead2.googlesyndication.com https://*.googlesyndication.com https://*.doubleclick.net https://adservice.google.com https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https://*.google-analytics.com https://*.doubleclick.net https://pagead2.googlesyndication.com; frame-src https://googleads.g.doubleclick.net https://*.googlesyndication.com https://www.google.com; 1
default-src                                                 'self'                                                 'unsafe-inline'                                                 https://www.google-analytics.com                                                 https://www.googletagmanager.com                                                 https://connect.facebook.net;                                             connect-src                                                 'self'                                                 https://analytics.google.com                                                 https://apac.account.amazon.com                                                 https://b.karte.io                                                 https://client-log.karte.io                                                 https://ct.pinterest.com                                                 https://gae.karte.io                                                 https://payments.amazon.co.jp                                                 https://payments-fe.amazon.com                                                 https://stats.g.doubleclick.net                                                 https://www.facebook.com                                                 https://www.google.co.jp                                                 https://www.google.com                                                 https://www.googleadservices.com                                                 https://line.wazzup.me                                                 https://region1.analytics.google.com                                                 https://www.google.com.tw                                                 https://www.google-analytics.com                                                 https://www.googletagmanager.com                                                 https://payments-jp.amazon.com;                                             font-src                                                 'self'                                                 data:                                                 https://fonts.gstatic.com                                                 https://maxcdn.bootstrapcdn.com                                                 https://use.typekit.net                                                 https://templates-cf.karte.io;                                             frame-src                                                 'self'                                                 https://ct.pinterest.com                                                 https://gum.criteo.com                                                 https://static.criteo.net                                                 https://www.facebook.com;                                             img-src                                                 'self'                                                 data:                                                 https://b99.yahoo.co.jp                                                 https://client-side-metrics.jp2.as.criteo.net                                                 https://connect.facebook.net                                                 https://googleads.g.doubleclick.net                                                 https://m.media-amazon.com                                                 https://tr.line.me                                                 https://www.facebook.com                                                 https://www.google.co.jp                                                 https://www.google.com                                                 https://www.google.com.tw                                                 https://www.googletagmanager.com                                                 https://www.google.ca                                                 https://www.google.com.hk                                                 https://www.google.com.my                                                 https://www.google.pt                                                 https://img-cf.karte.io                                                 https://www.google.co.id                                                 https://www.google.co.kr                                                 https://www.google.se;                                             script-src-elem                                                 'self'                                                 https://ajax.googleapis.com                                                 https://b99.yahoo.co.jp                                                 https://bs.karte.io                                                 https://cdn.jsdelivr.net                                                 https://cdn-blocks.karte.io                                                 https://cdn-edge.karte.io                                                 https://ct.pinterest.com                                                 https://d.line-scdn.net                                                 https://googleads.g.doubleclick.net                                                 https://s.pinimg.com                                                 https://s.yimg.jp                                                 https://sslwidget.criteo.com                                                 https://static.criteo.net                                                 https://static.wazzup.me                                                 https://static-fe.payments-amazon.com                                                 https://u.heatmap.it                                                 https://code.jquery.com                                                 https://connect.facebook.net                                                 https://www.google-analytics.com                                                 https://www.googletagmanager.com;                                             style-src-elem                                                 'self'                                                 https://ajax.googleapis.com                                                 https://cdn.jsdelivr.net                                                 https://fonts.googleapis.com                                                 https://maxcdn.bootstrapcdn.com                                                 https://p.typekit.net                                                 https://use.typekit.net;                                             report-to                                                 csp-endpoint; 1
default-src 'self'; script-src 'self' 'sha256-fx+DtF4P7VZUj8zvgs2h1aZVm1FwLx6Q5cejqq7Rhu8=' 'sha256-YHRII4VvcZ2uaTcjH7Gr4FLJP14d3VNhU2L4rG7ebfw=' 'sha256-t+E+IAcBygD8SRASlyG8wzFbEiaI9ATH0xKGzwdgJlY=' 'sha256-iQdPXDGqWC1ZNZnk7CbNb4Z9hV1Y8Rr7GutP2yIefCU=' 'sha256-GD4Jfkuo0pjOK0LzbXsCn4n2CvrIEMlBfUTF00BEmtk=' 'sha256-lhMwLe+hbwLhmD0ISocJdNDOOi9Z5AFMuZn7Hc9rr/U=' 'sha256-aQZAblGlQMMSh3kBsczoaaOuxBgnUlvNQTWYztLMjLE=' 'sha256-MRuAMSqXxEw2KSeD7DGiOI5O2MH+WmZbiB73H597Jho=' 'sha256-zQPj66G6gdeCFhxEuOadUTXbX716HbkOQSdVlsDfum0=' 'sha256-yxQSHn6kWwdwXKtqWJetHz2WHLZChI1ANP3h6NBP1Fo=' 'sha256-N/4d8ewez3Wzx5WmnOwGLZfRBddPWJMlVZKikRqRiQo=' 'sha256-lysybRP1rtnmYhULZgz5WbX8hVhH60eBe6B+Wf6Kfio=' 'sha256-wZIG9cCx5f/yTZaMx2nTU3dg4bIInmA2Y4RaB3cwgbM=' 'sha256-ISKe3GICHhjPU+EWW2Vjf/o9InxfbmzY1ymtqb2xbYM=' 'sha256-3KXIn2LHDjZr0GDBZUtrWEqYhDCS5g+PzWCAp5dZcv0=' 'sha256-200wrhX/wS06hTi8A0Zb9eqnXkmPo5X3Z/gq2KpwoDI=' 'sha256-1H52K9pp1F1Tp3Bn4Fgm2d1m/8hxIr/6UXMo5N0QG1E=' 'sha256-cy7KSKydvs6Xu2qvaODq9u0WC5etYwqbfUDbWW0FvHM=' 'sha256-fjHH/hDGedQwWCxjrFtTeJTwaWHkUA4R2FtSczrt+nE=' 'sha256-fVBHiU076i40B9lTrAeZJQg4rELkuaXsaHzXZIoh0nk=' 'sha256-yDC9PoKjQ2b2NSUiJNcVhQAi7DBQEZg22aEdwqP3hbw=' 'sha256-T/QEHBmiC06NndrfjoQ4Y/0Hhdb8BCyFMezgLT5PWyw=' https://cdn.userway.org  https://www.youtube.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.gstatic.com https://cdn.userway.org  https://fonts.googleapis.com https://*.gstatic.com https://cdn.userway.org https://*.cdn.userway.org; font-src 'self' https://cdn.userway.org https://fonts.gstatic.com data:; img-src 'self' data: https://cdn.userway.org https://sppagebuilder.com https://maps.gstatic.com https://maps.googleapis.com; connect-src 'self' https://cdn77.api.userway.org https://cdn.userway.org https://api.userway.org https://maps.googleapis.com; frame-src 'self' https://cdn.userway.org https://www.google.com; 1
default-src 'self'; script-src 'self'; block-all-mixed-content; upgrade-insecure-requests 1
font-src *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.authorize.net https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com *.authorize.net https://plumrocket.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.googletagmanager.com *.facebook.net www.termsfeed.com *.authorize.net *.clarity.ms 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.google-analytics.com *.authorize.net *.clarity.ms 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net https://fonts.gstatic.com/ https://use.typekit.net cdn.sandro.com.vn cdn.maje.com.vn *.cloudfront.net *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.demdex.net *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com https://maps.google.com/ *.doubleclick.net *.weltpixel.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.ftcdn.net *.behance.net https://www.facebook.com http://openasia.izysync.com https://uk.maje.com *.maje.com.vn *.sandro.com.vn *.google.com *.google.com.vn maps.gstatic.com maps.googleapis.com *.cloudfront.net https://tamson-media.s3.ap-southeast-1.amazonaws.com https://forms.hsforms.com https://track.hubspot.com https://firebasestorage.googleapis.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.magento-ds.com s.ytimg.com www.googleapis.com player.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.magento-datasolutions.com https://cdnjs.cloudflare.com/ s7.addthis.com https://connect.facebook.net maps.googleapis.com cdn.sandro.com.vn cdn.maje.com.vn *.cardinalcommerce.com *.cloudfront.net *.tamsonfashion.com *.clarity.ms analytics.tiktok.com *.hotjar.com static.hotjar.com https://js.hs-scripts.com https://js.hscollectedforms.net https://forms.hsforms.com https://forms.hscollectedforms.net https://js.hs-banner.com https://js.hs-analytics.net https://track.hubspot.com https://ipinfo.io/json *.avada.io *.shopify.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com https://fonts.googleapis.com https://cdnjs.cloudflare.com/ cdn.sandro.com.vn cdn.maje.com.vn *.cloudfront.net fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com https://player.vimeo.com https://vod-progressive.akamaized.net https://tamson-static-media.s3.ap-southeast-1.amazonaws.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.snplow.net commerce.adobedc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net *.magento-datasolutions.com *.magento-ds.com ekr.zdassets.com/ maps.googleapis.com cdn.sandro.com.vn cdn.maje.com.vn *.cloudfront.net *.clarity.ms www.facebook.com https://forms.hscollectedforms.net https://ipinfo.io/json https://get.geojs.io *.avada.io connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com cdn.sandro.com.vn cdn.maje.com.vn 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; img-src 'self' data: blob:; font-src 'self' data: https://cdn.jsdelivr.net; connect-src 'self'; frame-src 'self' https://view.officeapps.live.com https://docs.google.com https://www.youtube.com https://www.youtube-nocookie.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-09rBbEv5mSEy24jCRdKYfw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-2ivRIqvRYAWPUql_kdRzjA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; font-src 'self' data: https:; connect-src 'self' https: wss://*.twilio.com; frame-ancestors 'self' 1
base-uri 'none'; object-src 'none'; script-src 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'nonce-eBG0JGk9Rs/qkwE7OPAdBQ==' 1
object-src 'none';base-uri 'self';script-src 'nonce-FY1UOddSxT8-jLkQ_lWbMg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src *.fontawesome.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net data: www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com www.youtube.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co api.comapi.com webchat.dotdigital.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com api.comapi.com webchat.dotdigital.com yotpo.com www.yotpo.com p.yotpo.com staticw2.yotpo.com w2.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https:; media-src 'self'; worker-src 'self' blob:; manifest-src 'self'; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.clarity.ms https://t.contentsquare.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: blob: https://dz04435c431h8.cloudfront.net https://www.google-analytics.com https://www.googletagmanager.com https://www.clarity.ms https://*.contentsquare.net; connect-src 'self' https://*.s3.ap-south-1.amazonaws.com https://www.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://*.clarity.ms https://*.contentsquare.net; worker-src 'self' blob:; media-src 'self' blob: https://dz04435c431h8.cloudfront.net; frame-src 'none'; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; manifest-src 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-bfXbyzEU8W_bqr_88fN5CQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'nonce-aHNO1oapNgEw1JagXtGo5Q==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-UwjdjCHQEWkiCPX2KKyhDg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-tgeQnGuQZZTXrmthTUdCbg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
object-src 'none';base-uri 'self';script-src 'nonce-Xb6Gk4E-Ci_5dLZHTYGPkQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://js.stripe.com https://www.googletagmanager.com https://www.google-analytics.com https://static.cloudflareinsights.com https://cdn.jsdelivr.net https://pagead2.googlesyndication.com https://analytics.tiktok.com https://connect.facebook.net; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://cloudflareinsights.com https://js.stripe.com https://pagead2.googlesyndication.com https://analytics.tiktok.com https://www.facebook.com https://graph.facebook.com; img-src 'self' data: blob: https://www.google-analytics.com https://stats.g.doubleclick.net https://cloudflareinsights.com https://pagead2.googlesyndication.com https://analytics.tiktok.com https://www.facebook.com; style-src 'self' 'unsafe-inline'; object-src 'none'; base-uri 'self'; frame-src 'self' https://www.youtube.com https://player.spotify.com https://open.spotify.com https://www.google.com https://js.stripe.com https://www.googletagmanager.com; frame-ancestors 'self'; form-action 'self' https://justmeantforyou.com https://www.justmeantforyou.com https://checkout.stripe.com; report-to csp-endpoint; report-uri /api/csp-report.php?key=9aFPhjV5tXGEs707isJoTlPVlWozJGWC; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://www.clarity.ms https://statics.esputnik.com https://chat.key.live; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-src 'self' https://www.googletagmanager.com https://www.google.com https://www.google.com.ua https://recaptcha.google.com https://chat.key.live; worker-src 'self' blob:; media-src 'self' data: blob: https:; manifest-src 'self' 1
default-src 'self'; script-src 'self' https://www.google.com https://www.gstatic.com https://try.abtasty.com https://widgets.rr.skeepers.io https://sdk.privacy-center.org https://cdn.jsdelivr.net https://www.googletagmanager.com https://www.google-analytics.com https://analytics.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; connect-src 'self' https://www.google.com https://widgets.rr.skeepers.io https://sdk.privacy-center.org https://try.abtasty.com https://www.google-analytics.com https://analytics.google.com; frame-src https://www.google.com https://www.youtube.com https://www.facebook.com https://www.googletagmanager.com https://static.gateway.monetico-retail.com https://metrics.lafemmemoderne.fr; object-src 'none'; base-uri 'self'; form-action 'self' https://p.monetico-services.com 1
style-src-elem *.local *.lapsa-lab.fr *.bootstrapcdn.com 'unsafe-inline'; font-src https://static.lyra.com/static/ *.lapsa-lab.fr *.bootstrapcdn.com *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://secure.lyra.com/vads-payment/ https://api.lyra.com/api-payment/ https://static.lyra.com/static/ *.lapsa-lab.fr *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors self www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://secure.lyra.com/vads-payment/ https://static.lyra.com/static/ https://www.googletagmanager.com/ *.lapsa-lab.fr www.google.com www.gstatic.com apis.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://maps.googleapis.com https://secure.lyra.com/static/latest/images/type-carte/ https://static.lyra.com/static/ https://secure.lyra.com/vads-payment/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.lapsa-lab.fr magefan.com cm.magefan.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://redchamps.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://api.lyra.com/api-payment/ https://static.lyra.com/static/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.lapsa-lab.fr *.zdassets.com *.googleapis.com *.google.com *.gstatic.com *.avada.io *.shopify.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://static.lyra.com/static/ *.lapsa-lab.fr *.bootstrapcdn.com 'unsafe-inline' *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com https://fonts.bunny.net https://fonts.googleapis.com https://cdnjs.cloudflare.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://secure.lyra.com/vads-payment/ https://api.lyra.com/api-payment/ http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.lapsa-lab.fr *.zdassets.com *.zopim.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src https://secure.lyra.com/vads-payment/ https://api.lyra.com/api-payment/ https://static.lyra.com/static/ *.lapsa-lab.fr 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; img-src 'self' data: blob: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://challenges.cloudflare.com https://www.googletagmanager.com https://www.google-analytics.com; connect-src 'self' https:; frame-src 'self' https://challenges.cloudflare.com; media-src 'self' blob: https:; worker-src 'self' blob:; 1
font-src *.gstatic.com *.stape.io *.fontawesome.com https://fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.monetico-services.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.monetico-services.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.stape.io https://player.vimeo.com https://www.youtube-nocookie.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io blueskytechmage.com mageblueskytech.com placehold.jp *.zdassets.com cdn.doofinder.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.gstatic.com *.doubleclick.net *.stape.io blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ cdn.doofinder.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.gstatic.com *.googletagmanager.com *.doubleclick.net *.stape.io https://player.vimeo.com https://www.youtube.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.doofinder.com *.googleapis.com *.googletagmanager.com *.stape.io *.fontawesome.com https://fonts.googleapis.com http://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.monetico-services.com *.doofinder.com wss://*.doofinder.com *.google-analytics.com *.google.com *.doubleclick.net *.googlesyndication.com *.stape.io https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'nonce-4Nik3h94LQvO3hrQnrPaAg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-+oJUWeSgw66cEPlss7/i4A==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-SP2Ru4Agwrz1eqAKSyFqfQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-4LyES6aiQUOThCo8qw+sXQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-JNJLTO7DTYpbTAMhSgRYIA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
object-src 'none';base-uri 'self';script-src 'nonce-R9bQCFdLYHvGnPWwOD-avA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-QZ5DtCFbR24HS-gA6A8TUA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: youtube.com, google.com, s.ytimg.com; style-src 'self' 'unsafe-inline' https:; img-src 'self' https: data: i.ytimg.com; connect-src 'self' https: youtube.com, google.com; font-src 'self' https: data:; form-action 'self' https:; frame-ancestors 'self'; object-src 'none' youtube.com; frame-src 'self' https: hubspot.com; base-uri 'self'; block-all-mixed-content; upgrade-insecure-requests 1
default-src 'self'; script-src 'nonce-k559jlm17SmBv5V61RWsAg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google-analytics.com *.googletagmanager.com *.gstatic.com *.amasty.com www.clarity.ms scripts.clarity.ms cdn.brevo.com sibautomation.com s3.amazonaws.com static.cloudflareinsights.com *.wonderpush.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com s3.amazonaws.com; img-src 'self' data: https:; font-src 'self' fonts.gstatic.com data: res-1.cdn.office.net; connect-src 'self' *.google-analytics.com www.clarity.ms n.clarity.ms *.amasty.com api.reclameaqui.com.br analytics.google.com in-automate.brevo.com *.wonderpush.com measurements-api.wonderpush.com; object-src 'none'; worker-src 'self'; frame-src 'self' www.facebook.com *.wonderpush.com; manifest-src 'self' *.wonderpush.com; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://challenges.cloudflare.com https://va.vercel-scripts.com https://pagead2.googlesyndication.com https://partner.googleadservices.com https://tpc.googlesyndication.com https://www.googletagservices.com https://www.google.com https://www.gstatic.com https://*.googlesyndication.com https://*.adtrafficquality.google; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' https://zzfbsbroomuhmvlyrhfd.supabase.co https://challenges.cloudflare.com https://o4511477815902208.ingest.us.sentry.io https://vitals.vercel-insights.com https://va.vercel-scripts.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://csi.gstatic.com https://*.googlesyndication.com https://*.doubleclick.net https://*.googleadservices.com https://*.adtrafficquality.google https://adservice.google.com https://adservice.google.com.mx; frame-src 'self' https://challenges.cloudflare.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://pagead2.googlesyndication.com https://www.google.com https://www.googleadservices.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://*.googlesyndication.com https://*.doubleclick.net https://*.googleadservices.com https://*.adtrafficquality.google; object-src 'none'; base-uri 'self'; frame-ancestors 'none' 1
default-src 'self'; script-src 'nonce-OoeUhmQcvQ0/yy/Ju1KdFQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-0XEiUczS/Io5uK+NUqIHag==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; connect-src 'self' https:; frame-src https:; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 1
default-src 'self'; connect-src 'self' https://staging-api.prajaakeeya.org https://api.prajaakeeya.org https://*.ingest.de.sentry.io https://fcm.googleapis.com https://firebase.googleapis.com https://www.googleapis.com https://fonts.googleapis.com https://fonts.gstatic.com https://accounts.google.com; script-src 'self' https://accounts.google.com 'sha256-31NPMPg4uxz3+05+EF6wmStBy26rdh0Xkb2KmLvdkw0=' 'sha256-6Bs7ode2eMSX2S0dmS98woCYrStcbsyxCp5rcOto4ho='; img-src 'self' data: blob: https://*.s3.amazonaws.com https://*.cloudfront.net https://lh3.googleusercontent.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://accounts.google.com; frame-ancestors 'none'; base-uri 'self'; object-src 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.converty.shop https://bzrcdn.openai.com https://www.googletagmanager.com https://connect.facebook.net https://analytics.tiktok.com https://www.clarity.ms https://*.clarity.ms https://www.google-analytics.com https://static.cloudflareinsights.com https://*.doubleclick.net https://capi-automation.s3.us-east-2.amazonaws.com https://www.facebook.com; connect-src 'self' https://cdn.converty.shop https://tech.converty.shop https://api.converty.shop https://bzr.openai.com https://bzrcdn.openai.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.facebook.com https://connect.facebook.net https://analytics.tiktok.com https://*.tiktok.com https://*.tiktokw.us https://www.google.com https://www.merchant-center-analytics.goog https://fonts.googleapis.com https://fonts.gstatic.com https://*.clarity.ms https://c.bing.com https://*.run.app https://*.on.aws https://*.stape.at https://*.doubleclick.net https://*.orza.tn https://*.datah04.com https://*.birch.click https://*.birchub.us https://*.birchub.events https://www.google.tn https://*.analytics.google.com https://www.googleadservices.com https://graph.facebook.com https://api.facebook.com https://translate.googleapis.com https://converty-checkout-bucket.s3.eu-west-3.amazonaws.com https://d2wlhybwoy7ybi.cloudfront.net https://cdn.shopify.com; frame-src 'self' https://www.youtube-nocookie.com https://www.youtube.com https://player.vimeo.com https://drive.google.com https://www.googletagmanager.com https://www.facebook.com; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; font-src 'self' data: https:; style-src 'self' 'unsafe-inline' https:; object-src 'none'; base-uri 'self'; form-action 'self' https://www.facebook.com; frame-ancestors 'self' https://*.converty.shop; upgrade-insecure-requests; report-uri /csp-report 1
object-src 'none';base-uri 'self';script-src 'nonce-3ebf_9ZFlV49QqxuFMZ2JQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-jODuh7jnWc0LnCsZQTUzow' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'nonce-z0ihyceGT0r6OOnC4pzh9Q==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'nonce-PrinxUZyn8v09knFpaNfpA==' https://cdn.acaoentreamigos.online https://connect.facebook.net https://www.googletagmanager.com https://www.google-analytics.com https://analytics.tiktok.com; style-src 'self' 'unsafe-inline' https://cdn.acaoentreamigos.online https://fonts.googleapis.com https://use.typekit.net; img-src 'self' data: https:; media-src 'self' https://cdn.acaoentreamigos.online data: blob:; font-src 'self' https://cdn.acaoentreamigos.online https://fonts.gstatic.com https://use.typekit.net data:; connect-src 'self' https://www.facebook.com https://www.google-analytics.com https://analytics.tiktok.com https://business-api.tiktok.com https://p.typekit.net; frame-src 'self' https://www.facebook.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://www.googletagmanager.com https://www.gstatic.com https://www.google.com https://apis.google.com https://maps.googleapis.com https://js.stripe.com https://connect-js.stripe.com https://cdn.jsdelivr.net https://unpkg.com https://cdn.tailwindcss.com https://client.crisp.chat https://tag.validate.audio; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdn.tailwindcss.com https://client.crisp.chat; font-src 'self' data: https://fonts.gstatic.com https://client.crisp.chat; img-src 'self' data: blob: https://firebasestorage.googleapis.com https://storage.googleapis.com https://*.googleusercontent.com https://www.gstatic.com https://img.youtube.com https://i.ytimg.com https://maps.googleapis.com https://maps.gstatic.com https://*.googleapis.com https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://www.google.ca https://*.stripe.com https://client.crisp.chat https://image.crisp.chat https://storage.crisp.chat; connect-src 'self' https://*.googleapis.com https://*.firebaseio.com wss://*.firebaseio.com https://us-central1-rtd-academy.cloudfunctions.net https://www.google.com https://www.google.ca https://www.google-analytics.com https://*.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.googleadservices.com https://googleads.g.doubleclick.net https://api.stripe.com https://connect-js.stripe.com https://merchant-ui-api.stripe.com https://m.stripe.com https://m.stripe.network https://*.canadacentral.logic.azure.com https://cdn.jsdelivr.net https://unpkg.com https://cdn.tailwindcss.com wss://client.relay.crisp.chat wss://stream.relay.crisp.chat https://client.crisp.chat https://storage.crisp.chat https://tag.validate.audio; frame-src 'self' https://*.firebaseapp.com https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://js.stripe.com https://connect-js.stripe.com https://hooks.stripe.com https://accounts.google.com https://login.microsoftonline.com; media-src 'self' blob: data: https://firebasestorage.googleapis.com https://us-central1-rtd-academy.cloudfunctions.net https://media.crisp.chat; worker-src 'self' blob: https://unpkg.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'nonce-eBMEtBHpAo1SNWitWYwRaQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
font-src *.boxnow.gr *.boxnow.cy fonts.gstatic.com *.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.boxnow.gr *.boxnow.cy https://widget-v5.boxnow.gr https://www.googletagmanager.com https://www.facebook.com https://td.doubleclick.net https://youtu.be 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.boxnow.gr *.boxnow.cy magefan.com cm.magefan.com *.disqus.com *.designer-images.net https://www.facebook.com https://www.google.gr https://maps.googleapis.com https://maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.boxnow.gr *.boxnow.cy *.disqus.com *.stat-track.com polyfill.io *.moosend.com https://connect.facebook.net https://www.facebook.com https://analytics.tiktok.com https://www.gstatic.com https://maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.moosend.com *.bootstrapcdn.com https://use.typekit.net https://p.typekit.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.boxnow.gr *.boxnow.cy *.stat-track.com *.m-pages.com *.m-operations.com https://region1.google-analytics.com https://region1.analytics.google.com https://www.google.com https://analytics.tiktok.com https://stats.g.doubleclick.net https://www.google.gr https://www.facebook.com https://pagead2.googlesyndication.com https://maps.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' ; style-src 'self' 'unsafe-inline' optimize.google.com www.googletagmanager.com fonts.googleapis.com *.typekit.net *.yotpo.com *.myfonts.net *.cloudfront.net; font-src 'self' data: optimize.google.com fonts.gstatic.com *.abtasty.com *.dwin1.com *.typekit.net *.livechatinc.com snap.licdn.com *.tiktok.com static.ads-twitter.com ct.pinterest.com *.yotpo.com *.addthis.com *.moatads.com *.curalate.com *.cloudflare.com *.cloudfront.net; img-src 'self' data: *; base-uri 'self' ;  form-action *; frame-ancestors 'self' ; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.googlesyndication.com optimize.google.com www.googletagmanager.com www.googleanalytics.com www.google-analytics.com www.googleoptimize.com www.googleadservices.com maps.googleapis.com polyfill.io player.vimeo.com connect.facebook.net *.cardinaltrusted.com *.klevu.com api.exponea.com s.pinimg.com intljs.rmtag.com assistjs.skimresources.com googleads.g.doubleclick.net bat.bing.com t.contentsquare.net track.sweetanalytics.com *.yotpo.com snap.licdn.com static.ads-twitter.com *.tiktok.com *.abtasty.com *.adobedc.net *.dwin1.com *.livechatinc.com *.voyado.com *.ksearchnet.com *.hotjar.com *.veinteractive.com *.mouseflow.com *.sleeknote.com *.stripe.com *.zdassets.com *.trustpilot.com *.clarity.ms *.addthis.com *.addthisedge.com *.moatads.com *.clearpay.co.uk *.amplitude.com *.sagepay.com snapppt.com *.snapppt.com; connect-src 'self' mage.timeproducts.co.uk *.googlesyndication.com *.google-analytics.com *.klevu.com api.exponea.com ct.pinterest.com *.abtasty.com *.adobedc.net *.tiktok.com *.yotpo.com maps.googleapis.com vimeo.com *.addthis.com *.moatads.com *.dwin1.com *.54proxy.com *.ksearchnet.com *.hotjar.com *.hotjar.io *.zdassets.com *.clarity.ms *.amplitude.com *.sweetanalytics.com snapppt.com *.snapppt.com *.zendesk.com *.cardinaltrusted.com; frame-src 'self' player.vimeo.com *.fls.doubleclick.net ct.pinterest.com vimeo.com secure.livechatinc.com *.addthis.com *.curalate.com *.54proxy.com *.hotjar.com *.stripe.com *.trustpilot.com *.paypal.com *.zendesk.com *.zdassets.com *.cardinaltrusted.com; worker-src 'self' ; media-src 'self' data: ; 1
default-src 'self'; script-src 'nonce-rP2HBZdj5IkisvX3ktuLXA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-ViJYfwxR9bF7+QB6Xe3YcA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' https://cdn.ssavr.com https://www.googletagmanager.com https://pagead2.googlesyndication.com https://*.googlesyndication.com https://*.adtrafficquality.google https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' https://cdn.ssavr.com data: blob: https://*.google-analytics.com https://*.googletagmanager.com https://*.googlesyndication.com https://*.google.com https://*.googleusercontent.com https://*.adtrafficquality.google; font-src 'self'; connect-src 'self' wss://ws.ssavr.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.googlesyndication.com https://*.adtrafficquality.google https://challenges.cloudflare.com; frame-src https://*.googlesyndication.com https://*.doubleclick.net https://*.adtrafficquality.google https://www.google.com https://challenges.cloudflare.com; frame-ancestors 'none' 1
default-src 'self' *.gstatic.com *.googleapis.com *.google-analytics.com;script-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.gstatic.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.msecnd.net cdn.jsdelivr.net;style-src 'self' 'unsafe-inline' *.gstatic.com *.googleapis.com;img-src 'self' data: *.gstatic.com *.ggpht.com *.googleapis.com *.google-analytics.com https://stats.g.doubleclick.net stprocuradorescommon.blob.core.windows.net;connect-src 'self' ws: wss: *.visualstudio.com;report-uri /report https://e54781cc0f2303861c4bfe1bfe1e5e33.report-uri.io/r/default/csp/reportOnly 1
default-src 'self'; script-src 'nonce-NelZLXnaK7WKCRWcxGT1EA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
script-src 'unsafe-inline' 'unsafe-eval'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=RP7eBYZySexacLR8DstET0y_G28yGRKeeHvcthUMjQ4-1789283473.6007063-1.0.1.1-3Tqs9epdYi4b952xuRkL1Tfbt4R.jNcOxInbmDRJw.Hohfb3nDjdewIhWKLl.TYIShcgMCyII.PyLlNrlpdaxCpeP4qX677oKQevpsc5myOyT2S6Km0sAAbrDGHDgrDPjVc5_vWAQfiMYllQaEpp9Bb9iI9ncWRmXMONkmfqJt4; report-to cf-csp-endpoint 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdnjs.cloudflare.com https://analytics.tariqi.tn; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://analytics.tariqi.tn; frame-src https://maps.google.com https://www.google.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none' 1
default-src 'self' https: data: blob:; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' blob:; style-src 'self' https: 'unsafe-inline'; img-src 'self' https: data: blob:; font-src 'self' https: data:; connect-src 'self' https: wss:; frame-src 'self' https:; require-trusted-types-for 'script' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' https://wcs.pstatic.net https://ssl.pstatic.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net data:; img-src 'self' data: blob: https://pub-18d5ae3dcd934e9494ff0162967b4b36.r2.dev https://oyxmbpdrpzuofdqedzel.supabase.co https://wcs.naver.com; connect-src 'self' https://oyxmbpdrpzuofdqedzel.supabase.co wss://oyxmbpdrpzuofdqedzel.supabase.co https://170e95d4bb7bdf917d3178b4a4147303.r2.cloudflarestorage.com https://wcs.naver.com https://nam.veta.naver.com https://tivan.naver.com 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://*.clarity.ms https://static.cloudflareinsights.com https://accounts.google.com/gsi/client; style-src 'self' 'unsafe-inline' https://accounts.google.com/gsi/style; img-src 'self' data: blob: https: https://cdn4.tik-tok.porn; media-src 'self' blob: https://cdn4.tik-tok.porn; font-src 'self' data:; frame-src 'self' https://accounts.google.com/gsi/; worker-src 'self' blob:; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.google.com https://www.googletagmanager.com https://*.clarity.ms https://static.cloudflareinsights.com https://accounts.google.com/gsi/ https://cdn4.tik-tok.porn https://sentry.smclk.net; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; report-uri /api/v1/csp-report; report-to csp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net code.jquery.com cdnjs.cloudflare.com www.googletagmanager.com www.google-analytics.com www.google.com connect.facebook.net www.gstatic.com maps.googleapis.com googleads.g.doubleclick.net www.googleadservices.com; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net cdnjs.cloudflare.com fonts.googleapis.com; img-src 'self' data: blob: https: http:; font-src 'self' fonts.gstatic.com cdnjs.cloudflare.com cdn.jsdelivr.net; connect-src 'self' www.google-analytics.com analytics.google.com region1.google-analytics.com www.googletagmanager.com www.google.com www.facebook.com api.ferryos.com cdn.jsdelivr.net cdnjs.cloudflare.com *.a.run.app; frame-src 'self' www.google.com www.facebook.com www.googletagmanager.com maps.google.com *.google.com *.iyzico.com *.iyzipay.com *.paytr.com *.garanti.com.tr *.garantibbva.com.tr *.isbank.com.tr *.akbank.com.tr *.yapikredi.com.tr *.halkbank.com.tr *.vakifbank.com.tr *.ziraatbank.com.tr *.teb.com.tr *.ingbank.com.tr *.denizbank.com *.ferryos.com; frame-ancestors 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://sdk.mercadopago.com https://*.mercadopago.com https://accounts.google.com https://connect.facebook.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://api.mercadopago.com https://*.mercadopago.com https://*.mercadolibre.com; frame-src 'self' https://*.mercadopago.com https://accounts.google.com https://www.facebook.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self' 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://pagead2.googlesyndication.com https://*.googlesyndication.com https://*.googleadservices.com https://*.googletagservices.com https://*.google.com https://*.doubleclick.net https://*.adtrafficquality.google https://www.gstatic.com https://va.vercel-scripts.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://*.supabase.co wss://*.supabase.co https://pagead2.googlesyndication.com https://*.googlesyndication.com https://*.google.com https://*.doubleclick.net https://*.g.doubleclick.net https://*.googleadservices.com https://*.adtrafficquality.google https://va.vercel-scripts.com https://*.vercel-insights.com; frame-src 'self' blob: https://*.googlesyndication.com https://*.doubleclick.net https://*.google.com https://*.adtrafficquality.google; worker-src 'self' blob: 1
default-src 'self'; script-src 'self' 'nonce-f61bf924b1676614032d963474d7f97e'; script-src-elem 'self' 'nonce-f61bf924b1676614032d963474d7f97e'; script-src-attr 'none'; style-src 'self' 'unsafe-inline' https://www.gstatic.com; style-src-elem 'self' 'unsafe-inline' https://www.gstatic.com; style-src-attr 'unsafe-inline'; img-src 'self' data: blob: https://translate.google.com https://fonts.gstatic.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' ws: wss: https://translate.googleapis.com; media-src 'self' data:; object-src 'none'; base-uri 'self'; form-action 'self' http://unlimitedbank.net https://unlimitedbank.net https://www.unlimitedbank.net http://localhost http://127.0.0.1; frame-ancestors 'self'; worker-src 'self' blob:; manifest-src 'self'; report-uri /csp-report 1
default-src 'self'; script-src 'nonce-r5zJnPIdovOneS8K0ptWfA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self' data: *.cloudflareaccess.com *.google-analytics.com *.youtube.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' recaptcha.net *.google-analytics.com *.google.com *.gstatic.com *.googletagmanager.com googletagmanager.com *.facebook.net *.analytics.google.com *.googleadservices.com googleads.g.doubleclick.net pagead2.googlesyndication.com *.tiktok.com *.clarity.ms *.rtb123.com *.adnxs.com *.cybba.solutions d2rp1k1dldbai6.cloudfront.net fpjscdn.net challenges.cloudflare.com static.cloudflareinsights.com www.youtube.com s.ytimg.com datamart.pro www.datamart.pro api.hrznads.com shop-cart.app www.shop-cart.app stalkoda.com www.stalkoda.com tags.cdn77.cloud m.stalkoda.com; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' *.clarity.ms *.securiti.ai recaptcha.net *.google-analytics.com *.analytics.google.com *.googleadservices.com *.tiktok.com *.rtb123.com *.adnxs.com *.google.com *.gstatic.com *.googletagmanager.com googletagmanager.com *.facebook.net *.doubleclick.net pagead2.googlesyndication.com *.cybba.solutions d2rp1k1dldbai6.cloudfront.net www.youtube.com www.youtube-nocookie.com s.ytimg.com challenges.cloudflare.com fpnpmcdn.net static.cloudflareinsights.com datamart.pro www.datamart.pro api.hrznads.com shop-cart.app www.shop-cart.app stalkoda.com www.stalkoda.com tags.cdn77.cloud m.stalkoda.com; style-src 'self' 'unsafe-inline' *.securiti.ai *.googleapis.com www.youtube.com *.typekit.net www.googletagmanager.com googletagmanager.com tagmanager.google.com; style-src-elem 'self' 'unsafe-inline' *.securiti.ai *.googleapis.com www.youtube.com *.typekit.net www.googletagmanager.com googletagmanager.com tagmanager.google.com fonts.googleapis.com; object-src 'self' blob: scanned-pdb-staging.storage.googleapis.com docmanager-scanned.storage.googleapis.com; connect-src 'self' *.securiti.ai *.google-analytics.com *.facebook.com *.facebook.net api.fpjs.io *.api.fpjs.io *.analytics.google.com *.googleadservices.com *.googlesyndication.com *.google.com google.com *.googletagmanager.com *.tiktok.com *.clarity.ms c.bing.com *.adnxs.com tracking.oktoperformance.com www.google.com.br *.doubleclick.net www.youtube.com www.youtube-nocookie.com analytics-ipv6.tiktokw.us datamart.pro www.datamart.pro api.hrznads.com shop-cart.app www.shop-cart.app stalkoda.com www.stalkoda.com tags.cdn77.cloud m.stalkoda.com; font-src 'self' data: *.googleapis.com *.typekit.net www.googletagmanager.com fonts.gstatic.com fonts.googleapis.com; frame-src 'self' blob: scanned-pdb-staging.storage.googleapis.com docmanager-scanned.storage.googleapis.com recaptcha.net *.google-analytics.com *.google.com *.facebook.com *.youtube.com *.youtube-nocookie.com challenges.cloudflare.com *.doubleclick.net *.fls.doubleclick.net www.googletagmanager.com *.tiktok.com; img-src 'self' *.googleapis.com 3ma79ae7cua.com *.facebook.com *.facebook.net i.ytimg.com www.googletagmanager.com *.googletagmanager.com tracking.oktoperformance.com *.google-analytics.com *.clarity.ms *.doubleclick.net *.googleadservices.com *.googlesyndication.com *.google.com google.com *.google.com.br *.gstatic.com *.tiktok.com *.adnxs.com turbinado.upone.link datamart.pro www.datamart.pro api.hrznads.com shop-cart.app www.shop-cart.app stalkoda.com www.stalkoda.com tags.cdn77.cloud m.stalkoda.com data: blob:; form-action 'self' www.facebook.com; frame-ancestors 'self'; base-uri 'self'; report-uri /csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://*.googletagmanager.com https://connect.facebook.net https://www.googleadservices.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://media.wfhi.in https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://www.facebook.com https://www.google.com https://www.google.co.in https://googleads.g.doubleclick.net https://img.icons8.com; font-src 'self' data:; connect-src 'self' https://app.wfhi.in https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://*.googletagmanager.com https://connect.facebook.net https://www.facebook.com; frame-src 'self' https://www.googletagmanager.com https://td.doubleclick.net https://www.facebook.com; media-src 'self' https://media.wfhi.in; object-src 'none'; base-uri 'self'; form-action 'self' https://app.wfhi.in; frame-ancestors 'self'; upgrade-insecure-requests 1
default-src 'self'; script-src 'nonce-kUYZCZv12nI77EeJB57IJg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-9FiStP/P3rIxwcd4orzKjA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'none'; report-uri https://senhasegura.report-uri.com/r/d/csp/wizard 1
default-src 'none'; base-uri 'none'; manifest-src 'self'; font-src 'self' data:; form-action 'self'; img-src https://www.collegeofpsychicstudies.co.uk/a/img/ https://www.collegeofpsychicstudies.co.uk/a/files/ data: 'self'; style-src https://www.collegeofpsychicstudies.co.uk/a/css/ https://www.collegeofpsychicstudies.co.uk/a/js/redactor/ 'self' 'unsafe-inline'; script-src https://www.collegeofpsychicstudies.co.uk/a/js/ https://www.collegeofpsychicstudies.co.uk/a/api/ https://www.collegeofpsychicstudies.co.uk/matomo/ 'self'; connect-src https://www.collegeofpsychicstudies.co.uk/a/api/ https://www.collegeofpsychicstudies.co.uk/matomo/ stats.g.doubleclick.net; frame-src https://player.vdocipher.com/ https://www.youtube-nocookie.com; frame-ancestors 'none'; block-all-mixed-content 1
default-src 'self'; script-src 'self' 'nonce-a9e067c1-1046-4dfd-b620-661cb11c00bd' https://connect.facebook.net https://www.googletagmanager.com https://client.crisp.chat https://js.stripe.com https://in.heycatch.ai https://in.dev.heycatch.ai; style-src 'self' 'unsafe-inline' https://client.crisp.chat; img-src 'self' data: blob: https://www.facebook.com https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com https://res.cloudinary.com https://client.crisp.chat https://image.crisp.chat; font-src 'self' https://client.crisp.chat; connect-src 'self' https://www.facebook.com https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://api.stripe.com https://m.stripe.network https://client.crisp.chat wss://client.relay.crisp.chat https://in.heycatch.ai https://in.dev.heycatch.ai; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://pay.google.com https://client.crisp.chat; worker-src 'self' blob:; manifest-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; report-uri /csp-report; report-to csp-endpoint 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' *.addwish.com *.bigcommerce.com *.cookiebot.com *.doubleclick.net *.facebook.com *.facebook.net *.googleadservices.com *.google-analytics.com www.google.be www.google.co.uk www.google.nl google.com *.google.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com helloretailcdn.com *.helloretail.com *.hippekippe.nl *.hotjar.com *.hotjar.io *.kiyoh.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.addwish.com *.cookiebot.com *.doubleclick.net *.facebook.com *.facebook.net *.googleadservices.com *.google.com *.googlesyndication.com *.googletagmanager.com helloretailcdn.com *.helloretail.com *.hotjar.com edge.marker.io app.marker.io; connect-src 'self' 'unsafe-inline' 'unsafe-eval' *.bigcommerce.com bucket-ip-website.s3.eu-central-1.amazonaws.com *.cookiebot.com *.doubleclick.net *.facebook.com *.facebook.net *.googleadservices.com *.google-analytics.com www.google.at www.google.be www.google.ch www.google.com.au www.google.com.bd www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.gh www.google.com.hk www.google.com.mt www.google.com.mx www.google.com.np www.google.com.om www.google.com.pa www.google.com.ph www.google.com.pk www.google.com.py www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.co.uk www.google.cz www.google.de www.google.dk www.google.es www.google.fr www.google.it www.google.nl www.google.pl www.google.pt www.google.ru *.google.com google.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com helloretailcdn.com *.helloretail.com *.hippekippe.nl *.hotjar.com *.hotjar.io api.marker.io ssr.marker.io s3.eu-west-1.amazonaws.com/marker.sessions.prod; img-src 'self' 'unsafe-inline' 'unsafe-eval' *.bigcommerce.com bucket-ip-website.s3.eu-central-1.amazonaws.com *.cookiebot.com *.doubleclick.net *.facebook.com *.facebook.net *.googleadservices.com www.google.at www.google.be www.google.ch www.google.com.au www.google.com.bd www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.gh www.google.com.hk www.google.com.mt www.google.com.mx www.google.com.np www.google.com.om www.google.com.pa www.google.com.ph www.google.com.pk www.google.com.py www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.vn www.google.co.uk www.google.cz www.google.de www.google.dk www.google.es www.google.fr www.google.it www.google.nl www.google.pl www.google.pt www.google.ru google.com *.google.com *.googlesyndication.com *.googletagmanager.com *.gstatic.com helloretailcdn.com *.hippekippe.nl blob: data: media.marker.io app.marker.io edge.marker.io; frame-src 'self' 'unsafe-inline' 'unsafe-eval' *.cookiebot.com *.doubleclick.net *.facebook.com *.googletagmanager.com *.kiyoh.com *.opendns.com app.marker.io; form-action 'self' 'unsafe-inline' 'unsafe-eval' *.facebook.com app.marker.io api.marker.io; font-src 'self' 'unsafe-inline' 'unsafe-eval' *.faceworks.nl *.gstatic.com *.hotjar.com app.marker.io edge.marker.io; style-src 'self' 'unsafe-inline' 'unsafe-eval' *.googletagmanager.com *.gstatic.com helloretailcdn.com; media-src 'self' 'unsafe-inline' 'unsafe-eval' *.gstatic.com media.marker.io app.marker.io edge.marker.io; child-src 'self' 'unsafe-inline' 'unsafe-eval'  app.marker.io; report-uri https://788c65af-192c-4798-a03b-479e1b1f52e3.sansec.watch/; report-to report-endpoint; 1
default-src https:;script-src https: 'self' 'strict-dynamic' 'nonce-d22da3daba0d217c23d98b819e28999069794590fef7da280872c04dacc40f93' 'unsafe-inline' 'unsafe-eval' 'report-sample';style-src https: 'unsafe-inline';img-src https: data:;connect-src https: wss:;font-src https: data:;object-src 'none';media-src https: blob: data:;frame-src https: data: blob:;child-src 'self' https:;form-action 'self';frame-ancestors https://my.firespring.com;base-uri 'self' https://insights.sitesearch360.com;worker-src 'self' blob:;manifest-src 'self' https://cdn.firespring.com;report-uri /csp_log?n=1 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-y92CJMNXX1FeHLnpdWkokQ' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
object-src 'none';base-uri 'self';script-src 'nonce-yVueUiop-DHtspMoC9tniA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://www.paypal.com https://*.paypal.com https://eu.i.posthog.com https://eu-assets.i.posthog.com https://va.vercel-scripts.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://api.fontshare.com https://fonts.fontshare.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://api.fontshare.com https://cdn.fontshare.com; connect-src 'self' https://api.droploud.com https://eu.i.posthog.com https://eu-assets.i.posthog.com https://*.ingest.sentry.io https://*.ingest.de.sentry.io https://*.sentry.io https://api.stripe.com https://www.paypal.com https://*.paypal.com https://vitals.vercel-insights.com https://www.facebook.com https://connect.facebook.net; frame-src 'self' https://w.soundcloud.com https://js.stripe.com https://hooks.stripe.com https://www.paypal.com; media-src 'self' https: blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://www.paypal.com https://js.stripe.com; frame-ancestors 'none' 1
font-src *.typekit.net *.gstatic.com fonts.gstatic.com use.typekit.net *.algolia.com 'self' data: *.googleapis.com *.twitter.com *.twimg.com *.fontawesome.com https://fonts.bunny.net *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.algolia.com *.twitter.com *.facebook.com *.cloudflareinsights.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.algolia.com *.twitter.com *.facebook.com *.hotjar.com *.ladesk.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com p.typekit.net validator.swagger.io github.blog *.algolia.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.google.com *.google.cz *.googleapis.com *.twitter.com *.twimg.com *.facebook.com *.facebook.net *.ytimg.com *.imedia.cz *.heureka.cz *.heureka.sk *.cloudflareinsights.com *.sharethis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://images.unsplash.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.commerce-payment-services.com *.typekit.net google.com *.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.sharethis.com *.algolia.com *.google.cz *.google-analytics.com *.googleadservices.com *.gstatic.com *.googleapis.com *.googletagmanager.com *.googlesyndication.com *.twitter.com *.twimg.com *.facebook.com *.facebook.net *.fontawesome.com *.hotjar.com *.doubleclick.net *.imedia.cz *.sentry.io *.sentry-cdn.com *.cookiehub.com cookiehub.net *.ladesk.com *.biano.sk *.biano.cz *.cloudflareinsights.com polyfill.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.avada.io *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.algolia.com *.googleapis.com *.gstatic.com *.twitter.com *.twimg.com *.fontawesome.com *.cookiehub.com cookiehub.net *.cloudflareinsights.com *.sharethis.com assets.braintreegateway.com https://fonts.bunny.net *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.adobe.io performance.typekit.net *.sentry.io *.sharethis.com *.fontawesome.com *.algolia.com *.google-analytics.com *.googleapis.com *.doubleclick.net *.googlesyndication.com *.twitter.com *.twimg.com *.biano.sk *.biano.cz *.cloudflareinsights.com *.algolia.net *.algolianet.com *.insights.algolia.io insights.algolia.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com https://get.geojs.io *.avada.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.algolia.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
worker-src blob:; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.kxcdn.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.twitter.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io scontent.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com google.com *.greencity.coop magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com *.cloudflare.com *.klarna.com *.googleadservices.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com *.disqus.com *.avada.io *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com google.com *.kxcdn.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.cloudflare.com *.twitter.com *.twimg.com *.typekit.net *.trustedshops.com *.usercentrics.eu 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com https://get.geojs.io *.avada.io *.cloudflare.com *.twitter.com *.twimg.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://greencity.test/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' cdn.jsdelivr.net *.jsdelivr.net www.googletagmanager.com www.google-analytics.com ssl.google-analytics.com www.googleadservices.com www.google.com www.gstatic.com *.g.doubleclick.net snap.licdn.com *.clarity.ms bat.bing.com *.hs-scripts.com *.hsforms.net *.hsforms.com *.hs-analytics.net *.hs-banner.com *.hscollectedforms.net *.hsadspixel.net *.usemessages.com js.hscta.net connect.facebook.net *.cloudflareinsights.com *.vibe.co; worker-src 'self' blob:; style-src 'self' 'unsafe-inline' cdn.jsdelivr.net *.jsdelivr.net fonts.googleapis.com *.hsforms.net *.hs-scripts.com; font-src 'self' data: fonts.gstatic.com cdn.jsdelivr.net *.hubspot.com; img-src 'self' data: blob: https:; connect-src 'self' cdn.jsdelivr.net *.jsdelivr.net www.google-analytics.com *.google-analytics.com analytics.google.com *.analytics.google.com www.googletagmanager.com www.google.com www.googleadservices.com *.g.doubleclick.net *.doubleclick.net px.ads.linkedin.com *.clarity.ms c.bing.com bat.bing.com *.hubspot.com *.hubapi.com *.hsforms.com *.hscollectedforms.net *.hsadspixel.net *.hsappstatic.net *.cloudflareinsights.com *.stream-io-api.com wss://*.stream-io-api.com *.getstream.io *.vibe.co; frame-src 'self' www.youtube.com www.youtube-nocookie.com player.vimeo.com fast.wistia.net *.hubspot.com *.hsforms.net www.google.com td.doubleclick.net *.doubleclick.net; media-src 'self' data: blob: cdn.jsdelivr.net *.wistia.com; object-src 'none'; base-uri 'self'; form-action 'self' *.hsforms.com *.hubspot.com; frame-ancestors 'self'; 1
font-src *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com https://fonts.gstatic.com *.fontawesome.com https://www.google.com https://www.gstatic.com https://widgets.trustedshops.com https://integrations.etrusted.com fonts.gstatic.com static3.avast.com instantcredit.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.twitter.com www.paycomet.com api.paycomet.com sis-t.redsys.es beta.pulltex.com javascript: 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com assets.braintreegateway.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.twitter.com *.consensu.org *.sharethis.com *.google.com/ https://www.youtube.com www.paycomet.com api.paycomet.com fast.amc.demdex.net www.google.com amc.demdex.net 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com validator.swagger.io d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net d23yuld0pofhhw.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.sharethis.com https://www.magezon.com https://widgets.trustedshops.com https://integrations.etrusted.com data: cm.everesttech.net amcglobal.sc.omtrdc.net www.redsys.es cdn.klarna.com themes.magesolution.com maps.gstatic.com maps.googleapis.com blob: a5.behance.net scontent.cdninstagram.com picsum.photos local.pulltex.com i.picsum.photos claue.magesolution.com www.google.com www.google.es *.cdninstagram.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com *.vimeocdn.com js.authorize.net jstest.authorize.net js.braintreegateway.com cdn-scripts.signifyd.com www.youtube.com maps.googleapis.com *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.nr-data.net *.newrelic.com *.trackedlink.net *.google.com/ *.sharethis.com *.googleapis.com *.google.com *.avada.io www.paycomet.com api.paycomet.com https://widgets.trustedshops.com https://integrations.etrusted.com www.google.com www.gstatic.com instantcredit.net code.jquery.com *.cdninstagram.com *.googletagmanager.com chimpstatic.com cdn.cartsguru.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.google.com https://widgets.trustedshops.com https://integrations.etrusted.com fonts.googleapis.com instantcredit.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src video-mad2-1.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com payments.sandbox.braintree-api.com origin-analytics-sand.sandbox.braintree-api.com assets.braintreegateway.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.googleadservices.com *.google-analytics.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.nr-data.net *.newrelic.com *.ampproject.org *.sharethis.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io *.trustedshops.com *.etrusted.com www.paypal.com dpm.demdex.net www.google-analytics.com maps.googleapis.com amcglobal.sc.omtrdc.net graph.instagram.com beta.pulltex.com stats.g.doubleclick.net *.google.com *.instagram.com integration.carts.guru 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://widgets.trustedshops.com https://integrations.etrusted.com *.cdnfonts.com *.slant.co data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sharethis.com https://*.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.newrelic.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.sharethis.com 'self' data: https://*.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com https://widgets.trustedshops.com https://integrations.etrusted.com www.xtento.com cdn.xtento.com *.adnxs.com *.cookiebot.com d2rfa446ja7yzb.cloudfront.net *.fbcdn.net www.google.ad www.google.ae www.google.al www.google.am www.google.at www.google.az www.google.ba www.google.be www.google.bj www.google.by www.google.ca www.google.cg www.google.ch www.google.ci www.google.cl www.google.co.ao www.google.co.id www.google.co.il www.google.co.in www.google.co.jp www.google.co.ke www.google.co.kr www.google.co.ma www.google.com.ar www.google.com.au www.google.com.bd www.google.com.bh www.google.com.bo www.google.com.br www.google.com.co www.google.com.cy www.google.com.do www.google.com.ec www.google.com.eg www.google.com.et www.google.com.gh www.google.com.hk www.google.com.kh www.google.com.kw www.google.com.lb www.google.com.mt www.google.com.mx www.google.com.my www.google.com.na www.google.com.ng www.google.com.np www.google.com.om www.google.com.pa www.google.com.pe www.google.com.ph www.google.com.pk www.google.com.py www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.com.uy www.google.com.vn www.google.co.nz www.google.co.th www.google.co.tz www.google.co.uk www.google.co.uz www.google.co.ve www.google.co.za www.google.co.zm www.google.cv www.google.cz www.google.de www.google.dk www.google.dz www.google.ee www.google.es www.google.fi www.google.fr www.google.ge www.google.gr www.google.hr www.google.hu www.google.ie www.google.iq www.google.is www.google.it www.google.jo www.google.kg www.google.kz www.google.la www.google.li www.google.lk www.google.lt www.google.lu www.google.lv www.google.md www.google.me www.google.mg www.google.mk www.google.mv www.google.nl www.google.no www.google.pl www.google.pt www.google.ro www.google.rs www.google.ru www.google.sc www.google.se www.google.si www.google.sk www.google.sn www.google.so www.google.sr www.google.tn google.com *.google.com nijhofbaarn.nl *.nijhofbaarn.nl *.pinterest.com *.shopify.com *.trustedshops.com *.ytimg.com data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sharethis.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com chimpstatic.com downloads.mailchimp.com *.list-manage.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.avada.io js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com https://widgets.trustedshops.com https://integrations.etrusted.com www.xtento.com cdn.xtento.com https://chimpstatic.com *.calendly.com *.cookiebot.com *.getflowbox.com *.pinimg.com *.pinterest.com *.trustedshops.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com downloads.mailchimp.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com assets.braintreegateway.com https://widgets.trustedshops.com https://integrations.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com *.google-analytics.com *.facebook.com *.facebook.net https://*.google.com *.doubleclick.net *.googlesyndication.com https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.trustedshops.com *.etrusted.com *.cookiebot.com *.getflowbox.com www.google.al www.google.at www.google.be www.google.ca www.google.ch www.google.co.il www.google.co.in www.google.co.jp www.google.com.au www.google.com.bd www.google.com.cy www.google.com.eg www.google.com.mx www.google.com.ng www.google.com.pk www.google.com.sa www.google.com.sg www.google.com.tr www.google.com.tw www.google.com.ua www.google.co.uk www.google.cz www.google.de www.google.dk www.google.es www.google.fr www.google.ge www.google.gr www.google.hu www.google.it www.google.lv www.google.md www.google.nl www.google.no www.google.pl www.google.ro www.google.rs www.google.ru www.google.si www.google.sk www.google.sr *.pinimg.com *.pinterest.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://9a4c0d88-eba9-461e-ba4e-f9cd9c0c2419.sansec.watch/; report-to report-endpoint; 1
default-src 'self'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://assets.apollo.io https://analytics.ahrefs.com https://cdn.vector.co; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://api.fontshare.com; font-src 'self' data: https://fonts.gstatic.com https://api.fontshare.com; img-src 'self' data: blob: https:; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com https://assets.apollo.io https://analytics.ahrefs.com https://yqagkqabd5.us-east-2.awsapprunner.com https://cdn.vector.co https://api.bolna.ai; frame-src 'self'; upgrade-insecure-requests 1
object-src 'none';base-uri 'self';script-src 'nonce-tM_OYynwYP7rr4KIE-qXiw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' https://www.lidl-reisen.ch 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.addthis.com *.facebook.com *.twitter.com www.facebook.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com magefan.com cm.magefan.com *.facebook.com *.addthisedge.com *.twitter.com https://firebasestorage.googleapis.com blob: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com int-ecommerce.nexi.it ecommerce.nexi.it www.google.com www.gstatic.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.googletagmanager.com *.facebook.net www.termsfeed.com *.addthis.com *.moatads.com *.addthisedge.com *.twitter.com *.avada.io *.shopify.com maps.googleapis.com cdn.ampproject.org connect.facebook.net https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com downloads.mailchimp.com https://fonts.bunny.net maxcdn.bootstrapcdn.com www.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com int-ecommerce.nexi.it ecommerce.nexi.it form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://get.geojs.io *.avada.io places.googleapis.com cdn.ampproject.org 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' data: m.frankia.com *.googleapis.com *.gstatic.com; script-src 'self' 'nonce-Ge2OyqWiUVMzaP8LyMNf944eSyqCdCzPTsvyop1LjEZJW4ngz-HqbQ' data: m.frankia.com *.googleapis.com unpkg.com www.youtube-nocookie.com 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com m.frankia.com *.googleapis.com *.gstatic.com; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com data: m.frankia.com *.googleapis.com *.issuu.com www.youtube-nocookie.com; style-src-elem 'self' 'unsafe-inline' *.googleapis.com *.sibforms.com https://sibforms.com 'report-sample'; object-src 'self' *.usercentrics.eu; script-src-elem 'self' 'nonce-Ge2OyqWiUVMzaP8LyMNf944eSyqCdCzPTsvyop1LjEZJW4ngz-HqbQ' 'unsafe-inline' m.frankia.com *.googleapis.com unpkg.com *.usercentrics.eu *.sibforms.com https://sibforms.com 'report-sample'; connect-src 'self' data: m.frankia.com *.googleapis.com https://dc5d74dc.sibforms.com; style-src 'self' data: m.frankia.com *.googleapis.com 'report-sample'; font-src 'self' data: m.frankia.com *.googleapis.com *.gstatic.com *.assets.brevo.com https://assets.brevo.com; report-uri https://www.frankia.com/@http-reporting?csp=report&requestTime=1789270434343595&requestHash=0e4aa9e53ae67ec6eb774f0ea49584bc0fdf548b 1
font-src *;script-src * *.criteo.net *.google-analytics.com *.googletagmanager.com *.hotjar.com *.vimeo.com *.visualwebsiteoptimizer.com *.youtube.com app.vwo.com blob: consent.cookiebot.com consentcdn.cookiebot.com 'unsafe-eval' 'unsafe-inline';img-src *.360yield.com *.3lift.com *.adform.net *.adnxs.com *.ads.linkedin.com *.analytics.google.com *.bidswitch.net *.casalemedia.com *.cookiebot.com *.criteo.com *.criteo.com *.demdex.net *.doubleclick.net *.emxdgt.com *.google-analytics.com *.ivitrack.com *.krxd.net *.media.net *.mediavine.com *.omnitagjs.com *.outbrain.com *.postrelease.com *.pubmatic.com *.rubiconproject.com *.sharethrough.com *.smartadserver.com *.squeezely.tech *.taboola.com *.teads.tv *.thebrighttag.com *.tremorhub.com *.visualwebsiteoptimizer.com *.yahoo.com *.yieldlab.net *.yieldmo.com app.vwo.com bat.bing.com chart.googleapis.com data: googletagmanager.com hb.yahoo.net id5-sync.com 'self' squeezely.tech static.civas.be static.civas.nl wingify-assets.s3.amazonaws.com www.facebook.com www.google.com www.google.nl www.linkedin.com;connect-src *.ads.linkedin.com *.analytics.google.com *.bugsnag.com *.criteo.com *.criteo.net *.google-analytics.com *.googlesyndication.com *.hotjar.io *.visualwebsiteoptimizer.com api.civas.nl api.datatrics.com app.vwo.com bat.bing.com cdn.linkedin.oribi.io connect.facebook.net consentcdn.cookiebot.com criteo-partners.tremorhub.com googleads.g.doubleclick.net in.hotjar.com in.hotjar.io r.clarity.ms squeezely.tech stats.g.doubleclick.net vc.hotjar.io ws1.hotjar.com ws1.hotjar.io ws3.hotjar.com ws3.hotjar.io wss://ws.hotjar.com wss://ws1.hotjar.com wss://ws1.hotjar.io wss://ws3.hotjar.com wss://ws3.hotjar.io wss://www.civas.be wss://www.civas.nl www.civas.be www.civas.nl www.facebook.com www.feedbackcompany.com www.google.com;script-src-elem *.cookiebot.com *.criteo.com *.googletagmanager.com *.hotjar.com *.visualwebsiteoptimizer.com app.vwo.com bat.bing.com clarity.ms clarity.ms connect.facebook.net consent.cookiebot.com googleads.g.doubleclick.net 'self' snap.licdn.com squeezely.tech tm.tradetracker.net 'unsafe-eval' 'unsafe-inline' www.clarity.ms www.feedbackcompany.com www.google.com/recaptcha/api.js www.gstatic.com;frame-src *.cookiebot.com *.criteo.com *.doubleclick.net *.vimeo.com *.visualwebsiteoptimizer.com *.youtube.com *.youtube-nocookie.com app.vwo.com consentcdn.cookiebot.com googletagmanager.com noembed.com optimize.google.com 'self' 'unsafe-inline' usersync.datatrics.com vars.hotjar.com vars.hotjar.io www.bladerpdf.nl www.civas.be www.civas.nl www.google.com youtu.be;style-src *.visualwebsiteoptimizer.com app.vwo.com fonts.googleapis.com s3.amazonaws.com 'self' 'unsafe-inline';default-src 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.weltpixel.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google.com *.googleadservices.com *.googletagmanager.com data: 'self' 'unsafe-inline'; script-src www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com maxcdn.bootstrapcdn.com https://static.klaviyo.com *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.googletagmanager.com stats.g.doubleclick.net *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src cash-f.squarecdn.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.cloudfront.net *.klarnacdn.net *.klarnaservices.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com * *.facebook.com *.cloudfront.net *.klarnacdn.net *.klarnaservices.com https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ * *.affirm.com *.google.com *.doubleclick.net *.facebook.com *.klarnaservices.com *.hotjar.com *.cloudfront.net *.klarnacdn.net https://plumrocket.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com * 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com https://images.unsplash.com *.klarnaservices.com *.klarnaevt.com *.klarnacdn.net *.getclicky.com *.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com *.affirm.com *.google.com *.google.bg *.googletagmanager.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.klarnaservices.com *.klarnacdn.net *.hotjar.com *.getclicky.com *.cloudfront.net *.freshworks.com *.avada.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cash.app *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.cloudfront.net *.klarnacdn.net *.klarnaservices.com *.freshworks.com *.fontawesome.com 'self' 'unsafe-inline'; object-src *.cloudfront.net *.klarnacdn.net *.klarnaservices.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com * *.affirm.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.klarnaevt.com *.getclicky.com api.ipstack.com *.cloudfront.net *.klarnacdn.net *.klarnaservices.com *.freshworks.com *.klarna.com https://get.geojs.io *.avada.io t.elasticsuite.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'nonce-QT6/RwD1d0bMjlKGfgr6cg=='; script-src-elem 'self' 'nonce-QT6/RwD1d0bMjlKGfgr6cg=='; style-src 'self' 'unsafe-inline' https://fonts.bunny.net https://fonts.gstatic.com https://fonts.googleapis.com; style-src-elem 'self' 'unsafe-inline' https://fonts.bunny.net https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.bunny.net https://fonts.gstatic.com https://fonts.googleapis.com; connect-src 'self'; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none'; worker-src 'self' blob:; report-uri /csp-report 1
font-src *.typekit.net *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://*.googlesyndication.com https://googleads.g.doubleclick.net https://*.g.doubleclick.net https://adservice.google.com https://*.googleadservices.com https://*.adtrafficquality.google https://fundingchoicesmessages.google.com https://www.google.com https://www.gstatic.com https://js.stripe.com https://b.stripecdn.com https://static-na.payments-amazon.com https://*.payments-amazon.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https:; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://*.googlesyndication.com https://*.g.doubleclick.net https://*.adtrafficquality.google https://fundingchoicesmessages.google.com https://api.stripe.com https://m.stripe.network https://q.stripe.com https://b.stripecdn.com https://*.payments-amazon.com https://challenges.cloudflare.com; frame-src 'self' https://www.google.com https://googleads.g.doubleclick.net https://*.g.doubleclick.net https://*.googlesyndication.com https://fundingchoicesmessages.google.com https://js.stripe.com https://hooks.stripe.com https://b.stripecdn.com https://*.payments-amazon.com https://challenges.cloudflare.com https://www.youtube-nocookie.com https://www.youtube.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self' https://checkout.stripe.com https://*.payments-amazon.com; frame-ancestors 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.bglobale.com *.global-e.com *.klevu.com *.ksearchnet.com static.lipscore.com *.fontawesome.com https://fonts.bunny.net www.dartington.co.uk s3-eu-west-1.amazonaws.com static.olark.com static.klaviyo.com script.hotjar.com www.dropbox.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.stripe.com *.stripe.network *.google.com *.sagepay.com *.opayo.eu.elavon.com www.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.stripe.network *.link.com *.amazon.com *.google.com pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.awin1.com *.zenaps.com *.fls.doubleclick.net widgets.sandbox.afterpay.com widgets.sandbox.clearpay.co.uk *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com *.bglobale.com *.global-e.com js.mollie.com m.stripe.network streamable.com lightwidget.com www.mainadv.com ban.tangooserver.com td.doubleclick.net www.googletagmanager.com webservices.global-e.com www.google.com pay.google.com www.paypalobjects.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com www.xtento.com static.olark.com g3d-app.com *.wufoo.com www.facebook.com *.googletagmanager.com marketing.dartington.co.uk *.sharethis.com *.playground.klarna.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.awin1.com *.zenaps.com https://static.afterpay.com https://site-assets.afterpay.com/ *.trackedlink.net *.stripe.com *.stripe.network *.google.com ebizmarts-website.s3.amazonaws.com *.sagepay.com *.opayo.eu.elavon.com *.dycdn.net *.bglobale.com *.global-e.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com static.lipscore.com blob: img.youtube.com services.postcodeanywhere.co.uk https://firebasestorage.googleapis.com https://www.mollie.com www.gstatic.com www.dartington.co.uk cdn-cf-east.streamable.com statics.streamable.com bat.bing.com www.google.co.uk gepi.global-e.com sync.crwdcntrl.net dsum-sec.casalemedia.com d3k81ch9hvuctc.cloudfront.net l.sharethis.com platform-cdn.sharethis.com region1.analytics.google.com static.afterpay.com www.xtento.com cdn.xtento.com log.olark.com utils.global-e.com www.facebook.com connect.facebook.net *.segmentify.com *.shipup.co s3-eu-west-1.amazonaws.com *.lipscore.com *.feefo.com www.caithnessglass.co.uk data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.awin1.com www.dwin1.com *.zenaps.com https://the.sciencebehindecommerce.com https://portal.sandbox.clearpay.co.uk https://portal.clearpay.co.uk https://portal.sandbox.afterpay.com https://portal.afterpay.com https://static.afterpay.com https://js.sandbox.afterpay.com https://js.afterpay.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com *.sagepay.com *.opayo.eu.elavon.com widget.freshworks.com m2epro.freshdesk.com *.dycdn.net dn1i8v75r669j.cloudfront.net dkpklk99llpj0.cloudfront.net ds9p2a60lh6fp.cloudfront.net d1y9qtn9cuc3xw.cloudfront.net d81mfvml8p5ml.cloudfront.net *.freshrelevance.com *.dotdigital.com *.bglobale.com *.global-e.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com static.lipscore.com api.addressy.com s7.addthis.com *.avada.io js.mollie.com www.gstatic.com www.google.com static-tracking.klaviyo.com www.dartington.co.uk js.klevu.com app.termly.io cdn.lightwidget.com grid.shopbox.ai static.klaviyo.com gepi.global-e.com widget.shopbox.ai web.global-e.com bat.bing.com shopbox-widgets-storybook.pages.dev utt.impactcdn.com darti11115.pcapredict.com cdn.embed.ly v.embed-cdn.com webservices.global-e.com cdn.tangooserver.com m.stripe.network platform-api.sharethis.com js.afterpay.com buttons-config.sharethis.com ban.tangooserver.com pay.google.com services.postcodeanywhere.co.uk portal.afterpay.com cdn.hub-box.com *.cloudflare.com https://www.googletagmanager.com tagmanager.google.com www.xtento.com cdn.xtento.com ajax.googleapis.com api.olark.com cdn.segmentify.com *.pcapredict.com s.stripe.com *.postcodeanywhere.co.uk static.olark.com cdn.sgmntfy.com *.run.app *.shipup.co portal.clearpay.co.uk openfpcdn.io *.shopbox.ai *.lipscore.com *.sharethis.com *.playground.klarna.com *.feefo.com j.flxpxl.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com static.afterpay.com/ js.sandbox.afterpay.com js.afterpay.com webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.network *.stripecdn.com *.amazon.com *.google.com *.sagepay.com *.opayo.eu.elavon.com widget.freshworks.com m2epro.freshdesk.com *.dycdn.net *.bglobale.com *.global-e.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com static.lipscore.com api.addressy.com *.fontawesome.com https://fonts.bunny.net www.gstatic.com static-tracking.klaviyo.com www.dartington.co.uk gepi.global-e.com statics.streamable.com static.klaviyo.com services.postcodeanywhere.co.uk tagmanager.google.com cdn.segmentify.com *.googletagmanager.com *.shipup.co *.lipscore.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com static.olark.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://the.sciencebehindecommerce.com static.afterpay.com static.sandbox.afterpay.com js.sandbox.afterpay.com js.afterpay.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.sagepay.com *.opayo.eu.elavon.com widget.freshworks.com m2epro.freshdesk.com *.dycdn.net *.freshrelevance.com wss://*.freshrelevance.com wss://*.dycdn.net dn1i8v75r669j.cloudfront.net *.dotdigital.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com wapi.lipscore.com users.lipscore.com api.addressy.com ekr.zdassets.com/ https://get.geojs.io *.avada.io www.dartington.co.uk statsjs.klevu.com klaviyo.klevu.com app.termly.io fast.a.klaviyo.com static-forms.klaviyo.com backend.shopbox.ai storage.googleapis.com event-service-jtdpxp3bfa-ew.a.run.app a.klaviyo.com m.stripe.com l.sharethis.com r.stripe.com merchant-ui-api.stripe.com play.google.com pay.google.com services.postcodeanywhere.co.uk api.stripe.com portal.clearpay.co.uk pagead2.googlesyndication.com dartingtoncrystal.pxf.io https://www.google-analytics.com bat.bing.com *.segmentify.com knrpc.olark.com *.run.app *.hotjar.com *.hotjar.io ws.hotjar.com *.googlesyndication.com *.g.doubleclick.net *.shipup.co *.bglobale.com *.lipscore.com *.crwdcntrl.net *.sharethis.com *.global-e.com *.playground.klarna.com www.facebook.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com http: https: blob: 'self' 'unsafe-inline'; default-src www.dartington.co.uk bat.bing.com pagead2.googlesyndication.com googleads.g.doubleclick.net dartingtoncrystal.pxf.io socket.streamable.com google.com r.stripe.com www.google.com *.lipscore.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'strict-dynamic' 'nonce-moF3YpsqD/hHuWIwVLRzZw==' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.paypal.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io *.cookiebot.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://portal.payconiq.com https://static.buckaroo.nl https://www.paypalobjects.com *.cookiebot.com px.ads.linkedin.com *.google.com.ua *.google.com.nl *.google.com.fr *.google.com.de data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io *.cookiebot.com *.licdn.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl *.fontawesome.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com wss://websocketservice-externalapi.prod.buckaroo.io https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://applepay.buckaroo.io https://www.paypal.com https://maps.googleapis.com/maps/api/geocode/json *.googlesyndication.com *.postcode-checkout.nl https://consent.cookiebot.com *.licdn.com px.ads.linkedin.com consentcdn.cookiebot.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'none'; script-src 'self' 'unsafe-inline' https://ws.facil-iti.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://www.google.com https://*.axept.io 'unsafe-inline' https://consent.cookiebot.com https://*.googletagmanager.com https://ajax.googleapis.com https://static.cloudflareinsights.com https://cdn.matomo.cloud https://cdn.facil-iti.app https://www.google.com https://www.gstatic.com https://www.youtube.com https://consentcdn.cookiebot.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' https://www.google.com https://www.google.fr https://axeptio.imgix.net https://*.axept.io https://*.gstatic.com https://facil-iti.fr https://*.google-analytics.com https://*.googletagmanager.com https://www.googletagmanager.com https://imgsct.cookiebot.com https://i.ytimg.com; font-src 'self' https://fonts.gstatic.com https://fonts.axept.io; frame-src https://web-service.facil-iti.app https://www.googletagmanager.com https://www.google.com https://consentcdn.cookiebot.com https://cdn.facil-iti.app https://www.youtube.com; connect-src 'self' https://web-service.facil-iti.app https://axeptio.imgix.net https://www.google.com https://pagead2.googlesyndication.com https://axeptio.imgix.net https://*.axept.io https://*.axeptio.eu https://*.axeptio.tech https://faciliti.matomo.cloud https://consentcdn.cookiebot.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com; worker-src blob:; report-to csp-endpoint 1
object-src 'none';base-uri 'self';script-src 'nonce-gIQ4RURVSX4ojqHGuVqxGw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https://*.websenso.com;     script-src  'self' 'unsafe-inline' 'unsafe-eval' https://*.websenso.com https://*.moustiers.fr https://*.ingenie.fr https://code.jquery.com data:;     style-src   'self' 'unsafe-inline' https://*.websenso.com https://*.moustiers.fr https://*.ingenie.fr https://cdn.jsdelivr.net;     img-src     'self' data: https://*.websenso.com https://*.ingenie.fr https://images.weserv.nl https://wsrv.nl https://*.tile.openstreetmap.org https://tile.openstreetmap.org;     font-src    'self' https://*.moustiers.fr https://*.ingenie.fr data:;     frame-src   blob: https://*.moustiers.fr https://*.ingenie.fr https://www.openstreetmap.org https://www.youtube.com/ https://www.youtube-nocookie.com;     media-src   'self' https://*.ingenie.fr https://www.youtube.com/ https://www.youtube-nocookie.com https://youtu.be;     connect-src 'self' https://www.outils.date https://*.websenso.com;     report-uri  https://csp-report.appsenso.eu/report.php; 1
connect-src 'self' https://www.paypal.com https://www.sandbox.paypal.com; 1
font-src https://storage.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://services.postcodeanywhere.co.uk https://storage.googleapis.com https://cdn-cookieyes.com https://www.facebook.com https://syndication.twitter.com https://www.google.com/ https://www.google.co.uk/ https://bat.bing.com https://www.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ widget.freshworks.com m2epro.freshdesk.com https://www.snapengage.com http://storage.googleapis.com https://www.clarity.ms https://cdn-cookieyes.com https://www.facebook.com https://connect.facebook.net https://platform.twitter.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://platform.linkedin.com https://bat.bing.com https://cdn.callrail.com https://js.callrail.com https://analytics.tester.co.uk https://porta11117.pcapredict.com https://services.postcodeanywhere.co.uk js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com widget.freshworks.com m2epro.freshdesk.com https://services.postcodeanywhere.co.uk assets.braintreegateway.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com widget.freshworks.com m2epro.freshdesk.com https://analytics.tester.co.uk https://*.cookieyes.com https://cdn-cookieyes.com https://*.callrail.com https://*.clarity.ms https://capig.stape.host https://services.postcodeanywhere.co.uk api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://use.fontawesome.com https://fonts.bunny.net https://fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.instagram.com *.google.com/ https://player.vimeo.com https://www.youtube-nocookie.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cdninstagram.com https://firebasestorage.googleapis.com https://www.magezon.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com studiolabs.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.instagram.com *.avada.io *.shopify.com *.google.com/ https://player.vimeo.com https://www.youtube.com *.authorize.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://use.fontawesome.com https://fonts.bunny.net https://fonts.googleapis.com http://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://get.geojs.io *.avada.io https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io https://olegnax.com https://api.instagram.com https://graph.instagram.com/ *.authorize.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.fontawesome.com maxcdn.bootstrapcdn.com *.fonts.googleapis.com data: *.cloudflare.com https://*.nxedge.io https://*.tawk.to data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.google.com *.addthis.com *.pinterest.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.googleapis.com *.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.addthis.com *.pinterest.com *.cdninstagram.com https://*.nxedge.io https://www.google-analytics.com https://*.tawk.to *.googleusercontent.com *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.instagram.com https://*.nxedge.io https://www.googletagmanager.com https://www.google-analytics.com https://embed.tawk.to *.optimonk.com *.elfsight.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.bootstrapcdn.com *.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com unsafe-inline assets.braintreegateway.com https://*.nxedge.io https://*.tawk.to 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cdninstagram.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com *.elfsight.com *.service-reviews-ultimate.elfsight.com *.optimonk.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.cloudflare.com *.addthis.com *.graph.instagram.com *.google-analytics.com https://*.nxedge.io https://www.google-analytics.com https://region1.google-analytics.com https://www.facebook.com wss://*.tawk.to https://*.tawk.to 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-6dqqBAZrE25OUF42Gl2oOQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://connect.facebook.net https://cdn.jsdelivr.net https://*.mlstatic.com https://*.clarity.ms https://static.hotjar.com https://*.azurewebsites.net https://*.rodon.com.br https://rodon.com.br http://localhost:5173 ws://localhost:5173; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdn.jsdelivr.net https://*.rodon.com.br https://rodon.com.br https://www.googletagmanager.com http://localhost:5173 ws://localhost:5173; img-src 'self' data: blob: https://*.queropassagem.com.br https://*.rodon.com.br https://rodon.com.br https://www.google-analytics.com https://*.gstatic.com https://*.facebook.com https://*.hotjar.com https://*.clarity.ms https://*.googletagmanager.com https://*.bing.com https://*.clearsale.com https://*.mercadolibre.com https://*.mercadolivre.com https://*.mercadopago.com.br https://*.clearsale.com.br https://storage.googleapis.com http://localhost:5173 ws://localhost:5173; font-src 'self' data: https://fonts.gstatic.com https://cdn.jsdelivr.net https://*.rodon.com.br https://rodon.com.br http://localhost:5173 ws://localhost:5173; connect-src 'self' https://*.google-analytics.com https://*.googletagmanager.com https://*.mercadopago.com https://*.mercadopago.com.br https://*.mercadolibre.com https://*.mercadolivre.com https://*.hotjar.com https://*.hotjar.io https://*.clarity.ms https://*.facebook.com https://*.azurewebsites.net https://*.clearsale.com.br http://localhost:5173 ws://localhost:5173; frame-src 'self' https://*.mercadopago.com https://*.mercadopago.com.br https://*.mercadolibre.com https://*.google.com https://*.facebook.com http://localhost:5173 ws://localhost:5173; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none'; 1
default-src 'self' https: data: blob:; img-src 'self' https: data: blob:; media-src 'self' https: data: blob:; font-src 'self' https: data:; style-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https: 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src *.doubleclick.net/ *.googletagmanager.com fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com 'self' 'unsafe-inline'; img-src *.google.com *.facebook.com data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src *.facebook.net *.klaviyo.com assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src static-tracking.klaviyo.com *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src *.google.com dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
connect-src 'unsafe-inline' 'unsafe-eval' adnxs.com *.adnxs.com adsrvr.org *.adsrvr.org clarity.ms *.clarity.ms cloudflare.com *.cloudflare.com cloudflareinsights.com *.cloudflareinsights.com conversionsapigateway.com *.conversionsapigateway.com doubleclick.net *.doubleclick.net facebook.com *.facebook.com facebook.net *.facebook.net fonts.googleapis.com google-analytics.com *.google-analytics.com google.com *.google.com googleadservices.com *.googleadservices.com googlesyndication.com *.googlesyndication.com googletagmanager.com *.googletagmanager.com grandprixplaza.com *.grandprixplaza.com gstatic.com *.gstatic.com maps.googleapis.com *.maps.googleapis.com mpc-prod-15-s6uit34pua-uw.a.run.app *.mpc-prod-15-s6uit34pua-uw.a.run.app privacy-mgmt.com *.privacy-mgmt.com resy.com *.resy.com sojern.com *.sojern.com tickxcore.com *.tickxcore.com us-central1.run.app *.us-central1.run.app vimeo.com *.vimeo.com w2-prod.onrender.com *.w2-prod.onrender.com; default-src 'unsafe-inline' 'unsafe-eval' adnxs.com *.adnxs.com adsrvr.org *.adsrvr.org clarity.ms *.clarity.ms cloudflare.com *.cloudflare.com cloudflareinsights.com *.cloudflareinsights.com conversionsapigateway.com *.conversionsapigateway.com doubleclick.net *.doubleclick.net facebook.com *.facebook.com facebook.net *.facebook.net fonts.googleapis.com google-analytics.com *.google-analytics.com google.com *.google.com googleadservices.com *.googleadservices.com googlesyndication.com *.googlesyndication.com googletagmanager.com *.googletagmanager.com grandprixplaza.com *.grandprixplaza.com gstatic.com *.gstatic.com maps.googleapis.com *.maps.googleapis.com mpc-prod-15-s6uit34pua-uw.a.run.app *.mpc-prod-15-s6uit34pua-uw.a.run.app privacy-mgmt.com *.privacy-mgmt.com resy.com *.resy.com sojern.com *.sojern.com tickxcore.com *.tickxcore.com us-central1.run.app *.us-central1.run.app vimeo.com *.vimeo.com w2-prod.onrender.com *.w2-prod.onrender.com; img-src 'unsafe-inline' 'unsafe-eval' adnxs.com *.adnxs.com adsrvr.org *.adsrvr.org clarity.ms *.clarity.ms cloudflare.com *.cloudflare.com cloudflareinsights.com *.cloudflareinsights.com conversionsapigateway.com *.conversionsapigateway.com doubleclick.net *.doubleclick.net facebook.com *.facebook.com facebook.net *.facebook.net fonts.googleapis.com google.com *.google.com google-analytics.com *.google-analytics.com googleadservices.com *.googleadservices.com googlesyndication.com *.googlesyndication.com googletagmanager.com *.googletagmanager.com grandprixplaza.com *.grandprixplaza.com gstatic.com *.gstatic.com maps.googleapis.com *.maps.googleapis.com mpc-prod-15-s6uit34pua-uw.a.run.app *.mpc-prod-15-s6uit34pua-uw.a.run.app privacy-mgmt.com *.privacy-mgmt.com resy.com *.resy.com sojern.com *.sojern.com tickxcore.com *.tickxcore.com us-central1.run.app *.us-central1.run.app vimeo.com *.vimeo.com w2-prod.onrender.com *.w2-prod.onrender.com c.clarity.ms www.google.com; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=eNZPHctPlVum_ruv1c2A03dcGz.sxvvL1.xbzMdMYGY-1789267140.896344-1.0.1.1-xmItPMnhhfy7sdKctY8aR3BiF0fKVri.HI7nrZydop2Gnu8kPve_SVT435dUc2uWWgqr1V6VfSJpMiQ4BpONT_6CDaGsbgd.1tJMnn4uVZfAYR5LKYpqzFFivRv9uR4spwek84Dqa4Mu7bUdSY2kOHu1liw6dWFT1soxDkJCTnRUnUa9tghViqSsrU3iVHyB.vyKU7MfbOXx6lt8wx.KBA; report-to cf-oodzyhvczwtnwmsm 1
default-src 'self';               base-uri 'self';               object-src 'none';               frame-ancestors 'self';               form-action 'self';               upgrade-insecure-requests;               block-all-mixed-content;               img-src 'self' data: https:;               font-src 'self' data: https:;               style-src 'self' 'unsafe-inline' https:;               script-src 'self' 'unsafe-inline' 'unsafe-eval' https:;               connect-src 'self' https:; 1
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; form-action 'self' https:; frame-ancestors 'self'; object-src 'none'; base-uri 'self' 1
font-src *.yotpo.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net *.facebook.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net *.youtube.com *.facebook.com *.paypalobjects.com *.doubleclick.net *.googletagmanager.com/ geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: *.youtube.com *.ytimg.com *.facebook.com *.facebook.net *.store.pellor.com *.google-analytics.com *.googletagmanager.com *.analytics.google.com https://*.analytics.google.com https://analytics.google.com *.google.com.hk *.google.com *.koolertron.com www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com d3sbl0c71oxeok.cloudfront.net dhkkzdfmpzvap.cloudfront.net d2bpzs5y44q6e0.cloudfront.net d37shgu97oizpd.cloudfront.net d1zlqll3enr74n.cloudfront.net d1jynp0fpwn93a.cloudfront.net d2cb3tokgpwh3v.cloudfront.net d1re8bfxx3pw6e.cloudfront.net d35u8xwkxs8vpe.cloudfront.net d13s9xffygp5o.cloudfront.net d388nbw0dwi1jm.cloudfront.net d11p2vtu3dppaw.cloudfront.net d3r89hiip86hka.cloudfront.net dc7snq0c8ipyk.cloudfront.net d5c7kvljggzso.cloudfront.net d2h8yg3ypfzua1.cloudfront.net d1b556x7apj5fb.cloudfront.net draz1ib3z71v2.cloudfront.net dr6hdp4s5yzfc.cloudfront.net d2bomicxw8p7ii.cloudfront.net d3aypcdgvjnnam.cloudfront.net d2a3iuf10348gy.cloudfront.net *.ssl-images-amazon.com *.ssl-images-amazon.co.uk *.ssl-images-amazon.co.jp *.ssl-images-amazon.jp *.ssl-images-amazon.it *.ssl-images-amazon.fr *.ssl-images-amazon.es *.ssl-images-amazon.de *.media-amazon.com *.media-amazon.co.uk *.media-amazon.co.jp *.media-amazon.jp *.media-amazon.it *.media-amazon.fr *.media-amazon.es *.media-amazon.de www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net *.google-analytics.com *.analytics.google.com *.googletagmanager.com https://*.analytics.google.com https://analytics.google.com *.youtube.com *.facebook.com *.facebook.net *.tiktok.com *.doubleclick.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-amazon.it *.payments-amazon.fr *.payments-amazon.es *.payments-amazon.de assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline *.yotpo.com *.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com https://*.analytics.google.com https://analytics.google.com *.doubleclick.net *.youtube.com *.facebook.com *.facebook.net *.tiktok.com www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.amazonpay.com *.amazonpay.co.uk *.amazonpay.co.jp *.amazonpay.jp *.amazonpay.it *.amazonpay.fr *.amazonpay.es *.amazonpay.de mws.amazonservices.com mws.amazonservices.co.uk mws.amazonservices.co.jp mws.amazonservices.jp mws.amazonservices.it mws.amazonservices.fr mws.amazonservices.es mws.amazonservices.de api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.yotpo.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com maxcdn.bootstrapcdn.com https://fonts.gstatic.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * api.razorpay.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io blueskytechmage.com mageblueskytech.com placehold.jp blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com cdn.razorpay.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://www.googletagmanager.com https://polyfill.io s7.addthis.com *.avada.io https://player.vimeo.com https://www.youtube.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com checkout.razorpay.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com http://fonts.googleapis.com unsafe-inline assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com ekr.zdassets.com/ https://get.geojs.io *.avada.io https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com lumberjack.razorpay.com lumberjack-metrics.razorpay.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src  'none'; connect-src 'self' *.openlife.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.openlife.com join.gammasecure.com; script-src 'self' *.openlife.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.openlife.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
worker-src blob:; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.kxcdn.com *.fontawesome.com https://fonts.bunny.net *.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.addthis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.fbcdn.net https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com s7.addthis.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com ekr.zdassets.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://maps.googleapis.com https://cdn.prohost.ai https://us.posthog.com https://us-assets.i.posthog.com https://bzrcdn.openai.com https://app.prohost.ai; connect-src 'self' https://us.posthog.com https://us-assets.i.posthog.com https://bzr.openai.com https://bzrcdn.openai.com https://*.supabase.co https://www.google-analytics.com https://maps.googleapis.com https://ipapi.co https://app.prohost.ai wss://*.livekit.cloud https://*.cognitiveservices.azure.com; img-src 'self' data: blob: https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://us-assets.i.posthog.com; font-src 'self' data: https://fonts.gstatic.com; frame-src https://www.googletagmanager.com https://app.prohost.ai https://www.youtube-nocookie.com https://www.youtube.com https://www.loom.com; media-src 'self' https://*.livekit.cloud blob:; worker-src 'self' blob:; frame-ancestors 'none'; base-uri 'self'; object-src 'none'; form-action 'self' 1
default-src 'self';     base-uri 'self';     script-src 'self' 'unsafe-inline' 'unsafe-eval'       https://cdn.jsdelivr.net       https://api-data-www.prestige-yachts.com       https://tag.aticdn.net       https://cdn.cookielaw.org       https://connect.facebook.net       https://stonly.com       https://player.vimeo.com       https://www.googletagmanager.com       https://forms.beneteau-group.com       https://maps.googleapis.com;     style-src 'self' 'unsafe-inline'       https://cdnjs.cloudflare.com       https://forms.beneteau-group.com       https://fonts.googleapis.com;     img-src 'self' data:       https://app.prestige-yachts.com       https://www.googletagmanager.com       https://googleads.g.doubleclick.net       https://www.google.com       https://www.google.fr       https://www.facebook.com       https://cdn.cookielaw.org       https://www.jeanneau.fr       https://www.jeanneau.com       https://jeanneau.com       https://www.beneteau-group.com       https://img.youtube.com       https://maps.googleapis.com       https://maps.gstatic.com       https://forms.beneteau-group.com;     font-src 'self'       https://cdnjs.cloudflare.com       https://fonts.gstatic.com;     connect-src 'self'       data:       https://api.ipify.org       https://ipinfo.io       https://logs1412.xiti.com       https://cdn.cookielaw.org       https://api-data-www.prestige-yachts.com       https://stonly.com       https://api.stonly.com       https://www.google.com       https://www.facebook.com       https://api.mapbox.com       https://events.mapbox.com       https://beneteau-group-privacy.my.onetrust.com       https://geolocation.onetrust.com       https://forms.beneteau-group.com       https://maps.googleapis.com       https://www.gstatic.com       https://maps.gstatic.com       https://www.cartopro.fr;     worker-src 'self' blob:;     media-src 'self'       https://app.prestige-yachts.com;     frame-src 'self'       https://api-data-www.prestige-yachts.com       https://s.stonly.com       https://global.frcapi.com       https://player.vimeo.com       https://app.prestige-yachts.com       https://www.youtube.com       https://www.bandofboats.com       https://forms.beneteau-group.com       https://www.facebook.com;     frame-ancestors 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com js.stripe.com https://www.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io maps.google.com maps.googleapis.com maps.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.doubleclick.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com public.montonio.com self: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com maps.google.com maps.googleapis.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.googletagmanager.com *.doubleclick.net www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com public.montonio.com js.stripe.com https://www.google.com https://www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com https://static.klaviyo.com *.googleapis.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com maps.googleapis.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.google-analytics.com *.doubleclick.net *.googlesyndication.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com api.sandbox-card-payments.montonio.com api.card-payments.montonio.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://www.magezon.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://bat.bing.com https://bat.bing.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://bat.bing.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com https://bat.bing.com https://bat.bing.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-DI4Qq6KuhTicRzXs1WlAHA' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://seo.mageplaza.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com https://maps.googleapis.com *.avada.io *.shopify.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://maps.googleapis.com https://player.vimeo.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; form-action 'self' https://t.me https://telegram.me https://telegram.dog; frame-ancestors 'none'; object-src 'none'; script-src 'self' 'unsafe-inline' https://mc.yandex.ru; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://mc.yandex.ru; connect-src 'self' https://mc.yandex.ru wss://mc.yandex.ru https://checkout.nasavps.org https://api.online-payment.sbs; font-src 'self' data:; frame-src https://mc.yandex.ru 1
font-src maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com maxcdn.bootstrapcdn.com unsafe-inline 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-Icql-BVDRD6CwVSVvWHemg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src https://fonts.gstatic.com fonts.googleapis.com fonts.gstatic.com *.googleapis.com *.gstatic.com data: https://www.googletagmanager.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.binotel.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com accounts.google.com www.facebook.com api.twitter.com www.linkedin.com api.instagram.com *.amazon.com *.twitch.tv login.microsoftonline.com https://pinterest.com https://www.pinterest.com appleid.apple.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com js.stripe.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com platform.twitter.com *.binotel.com js.mollie.com *.packeta.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com *.googleusercontent.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://firebasestorage.googleapis.com flagpedia.net pinterest.com assets.pinterest.com syndication.twitter.com *.binotel.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com tagmanager.google.com https://www.googletagmanager.com apis.google.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ js.stripe.com *.fontawesome.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.avada.io *.shopify.com twitter.com platform.twitter.com *.binotel.com static.cloudflareinsights.com js.mollie.com *.packeta.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://fonts.googleapis.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com maxcdn.bootstrapcdn.com *.fontawesome.com https://fonts.bunny.net *.gstatic.com *.binotel.com unsafe-inline assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://get.geojs.io *.avada.io www.gstatic.com *.binotel.com cloudflareinsights.com *.packeta.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data: blob:; object-src 'none'; script-src 'self' https: 'nonce--b7b1e8b7b20e50d1fc411e97dd399c06'; style-src 'self' https: 'unsafe-inline'; connect-src 'self' https:; frame-src 'self' https: 1
default-src 'self'; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://*.plaid.com https://*.intercom.io https://superset.yuzu.vet https://yuzu-content-prod.s3.us-east-1.amazonaws.com https://yuzu-content-prod.s3.amazonaws.com https://yuzu-content-sandbox.s3.us-east-1.amazonaws.com https://yuzu-content-sandbox.s3.amazonaws.com https://yuzu-content-dev.s3.us-east-1.amazonaws.com https://yuzu-content-dev.s3.amazonaws.com; worker-src 'self' blob:; connect-src 'self' https://ph.yuzu.health https://ph.yuzu.vet https://us.i.posthog.com https://us-assets.i.posthog.com https://browser-intake-us5-datadoghq.com https://api-iam.intercom.io https://api.intercom.io https://widget.intercom.io https://js.intercomcdn.com wss://*.intercom.io https://api.stripe.com https://m.stripe.network https://*.plaid.com https://superset.yuzu.vet https://yuzu-content-prod.s3.us-east-1.amazonaws.com https://yuzu-content-prod.s3.amazonaws.com https://yuzu-content-sandbox.s3.us-east-1.amazonaws.com https://yuzu-content-sandbox.s3.amazonaws.com https://yuzu-content-dev.s3.us-east-1.amazonaws.com https://yuzu-content-dev.s3.amazonaws.com https://collectionapi.metmuseum.org; font-src 'self' data: https://fonts.gstatic.com https://fonts.intercomcdn.com; img-src 'self' data: blob: https://cdn.yuzu.health https://cdn.yuzu.vet https://yuzu.health https://*.yuzu.health https://yuzu.vet https://*.yuzu.vet https://*.stripe.com https://*.plaid.com https://*.intercomusercontent.com https://*.intercomcdn.com https://static.intercomassets.com https://superset.yuzu.vet https://yuzu-content-prod.s3.us-east-1.amazonaws.com https://yuzu-content-prod.s3.amazonaws.com https://yuzu-content-sandbox.s3.us-east-1.amazonaws.com https://yuzu-content-sandbox.s3.amazonaws.com https://yuzu-content-dev.s3.us-east-1.amazonaws.com https://yuzu-content-dev.s3.amazonaws.com https://images.metmuseum.org; media-src 'self' https://call-center-prod-recordings.s3.us-east-1.amazonaws.com https://call-center-prod-recordings.s3.amazonaws.com https://call-center-dev-recordings.s3.us-east-1.amazonaws.com https://call-center-dev-recordings.s3.amazonaws.com; object-src 'none'; script-src 'self' 'strict-dynamic' 'sha256-biHt86OZ3P7lap3qWqhsOe3soF3CtWuI7EsjJZwJfTY=' 'nonce-L5+ul56B0VI0tKRPrYdC7g=='; style-src 'self' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://unpkg.com; style-src-elem 'self' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://unpkg.com 'unsafe-inline'; style-src-attr 'unsafe-inline'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; report-uri https://csp-report.browser-intake-us5-datadoghq.com/api/v2/logs?dd-api-key=pub0aa291df7ff29dd8d3593f34ae3a3b74&dd-evp-origin=content-security-policy&ddsource=csp-report; report-to csp-endpoint 1
font-src *.fontawesome.com *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://meetanshi.com/media/logo.png www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com unsafe-inline assets.braintreegateway.com *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.skynettechnologies.com *.skynettechnologies.us https://vlibras.gov.br https://dicionario2.vlibras.gov.br https://acessos.vlibras.gov.br 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://pagead2.googlesyndication.com https://www.googletagmanager.com; img-src * data: 1
object-src 'none';base-uri 'self';script-src 'nonce-VMZrI8ARzhxX8nHb6-j-zg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
img-src https://www.fruitactivewear.com *.force.com slack-imgs-mil-dev.com 'self' https://stats.g.doubleclick.net https://use.typekit.net https://p.typekit.net https://img.youtube.com https://fotleucdn.blob.core.windows.net https://payments.salesforce.com/icons/ https://www.facebook.com https://login.salesforce.com/icons/ https://www.iubenda.com https://tagassistant.google.com https://www.gstatic.com https://online.flippingbook.com *.slack-edge-gov.com https://fotlinc.file.force.com https://cdn.linkedin.oribi.io https://boa-login.kanexa.net *.my-salesforce.com https://hits-i.iubenda.com *.cloudinary.com https://fotllsp.kanexa.net https://www.google.com static.lightning.force.com *.clarity.ms *.slack-gov.com blob: *.slack-gov-dev.com https://images.salsify.com fotlinc.my.site.com slack-imgs.com *.sfdcstatic.com https://ssl.gstatic.com https://cdn.iubenda.com *.twimg.com *.iubenda.com https://consent.iubenda.com a.static.lightning.force.com https://cdn.fruitactivewear.com *.slack.com https://www.paypal.com *.slack-imgs.com slack-imgs-gov.com https://i.ytimg.com https://cdn.content.aws-dev2-uswest2.aws.sfdc.cl/icons/ *.salesforce-experience.com *.salesforceliveagent.com slack-imgs-gov-dev.com *.slack-edge.com https://cdn.content.aws-prod1-useast1.aws.sfdc.cl/icons/ https://usa748.sfdc-8tgtt5.salesforce.com/icons/ slack-mil-dev.com https://tagmanager.google.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.slack-edge.mil https://www.sandbox.paypal.com https://cdn.fruitoftheloom.eu https://fotlinc.my.salesforce.com b.static.lightning.force.com https://i.vimeocdn.com https://px.ads.linkedin.com static.sandbox.lightning.force.com https://www.googletagmanager.com https://www.google-analytics.com *.salesforce.com https://issuu.com https://*.adyen.com slack-imgs.mil https://ftlstaticweb.blob.core.windows.net data:; report-to sfdc-csp-ep; report-uri https://fotlinc.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00DC00000016kTb&networkId=0DM3b000000XaQa&type=communities 1
report-to webscaleCspEndpoint; report-uri https://xdymhcopnh.execute-api.us-east-1.amazonaws.com/default/cspReportingMonitor; script-src 'self' 'unsafe-eval' 'unsafe-inline' data: 'self' blob: bat.bing.com cdn.callreports.com googleads.g.doubleclick.net js.callrail.com res.cloudinary.com s3.amazonaws.com secure.leadforensics.com www.google-analytics.com www.google.com www.googletagmanager.com googleads.g.doubleclick.net  secure.leadforensics.com www.woodlandmanufacturing.com www.googleadservices.com *.pinimg.com connect.facebook.net *.gstatic.com *.wistia.com *.olark.com *.nextopiasoftware.com *.flattr.com *.trustpilot.com g.microsoft.com *.cloudmaestro.com *.woodlandmanufacturing.com advancedsign.com *.advancedsign.com 1
object-src 'none';base-uri 'self';script-src 'nonce-l6gH6bbSdsY61J1PU4dSpA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-mTF9l4NiSp/IB4S+lFb9vJMoTPI=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
default-src 'self' data:; script-src 'self' 'self' 'unsafe-inline' ws-assets.zoominfo.com js.hs-scripts.com www.googletagmanager.com snap.licdn.com secure.visionarybusiness7.com ws.zoominfo.com js.hs-analytics.net js.hscollectedforms.net js.hsadspixel.net js.hs-banner.com js.hsleadflows.net script.hotjar.com js.hsforms.net www.emlpayments.com cdn.jsdelivr.net player.vimeo.com js.hubspot.com static.hotjar.com; style-src 'self' 'unsafe-inline' www.emlpayments.com fonts.googleapis.com fonts.gstatic.com www.googletagmanager.com; img-src https: www.emlpayments.com data: emlpayments-live.imgix.net emlpayments-stagingcms.bla.bio px.ads.linkedin.com track.hubspot.com forms.hsforms.com; connect-src 'self' ws.zoominfo.com forms.hscollectedforms.net emlpayments-stagingcms.bla.bio api.hubapi.com js.hs-banner.com cdn.linkedin.oribi.io forms.hubspot.com www.google-analytics.com analytics.google.com www.analytics.google.com ipinfo.io 61xeik5j3f.execute-api.ap-southeast-2.amazonaws.com; frame-src 'self' player.vimeo.com; manifest-src 'self'; form-action 'self'; frame-ancestors 'self'; base-uri 'self'; object-src 'self'; font-src 'self' www.emlpayments.com data: fonts.gstatic.com; worker-src 'self' blob: www.emlpayments.com; report-uri ; media-src 'self' www.emlpayments.com emlpayments-stagingcms.bla.bio 1
default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self' data: https:; connect-src 'self' https: wss: ws:; media-src 'self' https: blob:; font-src 'self' data:; base-uri 'self'; object-src 'none'; form-action 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://js.stripe.com https://stats.netsetman.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; frame-src https://js.stripe.com; connect-src 'self' https://api.stripe.com 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com 'self' data: *.cloudflare.com fonts.googleapis.com cdn.livechatinc.com 'unsafe-inline' data: static.klaviyo.com *.fontawesome.com *.mdoq.io data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com *.addthis.com js.mollie.com *.googletagmanager.com *.livechatinc.com www.google.com td.doubleclick.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://www.mollie.com *.hsforms.net *.hsforms.com 'self' data: *.googletagmanager.com ssl.gstatic.com www.gstatic.com *.cloudflare.com *.mdoq.io *.ibottles.co.uk *.google.com *.google.co.uk *.barrdisplay.com px.marchex.io www.facebook.com bat.bing.com seal.alphassl.com usage.trackjs.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net js.mollie.com pay.google.com applepay.cdn-apple.com *.hsforms.net *.hsforms.com *.gstatic.com *.googletagmanager.com tagmanager.google.com *.cloudflare.com *.twitter.com *.fontawesome.com *.lpsnmedia.net bat.bing.com connect.facebook.net rw1.marchex.io *.livechatinc.com seal.alphassl.com cdn.callrail.com cdn.trackjs.com *.mdoq.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com https://static.klaviyo.com https://cdn.jsdelivr.net *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com *.cloudflare.com *.fontawesome.com *.bootstrapcdn.com *.mdoq.io 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.certcapture.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ t.elasticsuite.io *.hsforms.net *.hsforms.com *.googletagmanager.com *.cloudflare.com stats.g.doubleclick.net *.authorize.net api.livechatinc.com js.callrail.com analytics.google.com *.mdoq.io 'self' 'unsafe-inline'; child-src *.certcapture.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://zero1.report-uri.com/r/d/csp/reportOnly; report-to report-endpoint; 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-CAxdESWnkK6tu4BxGFnUc1ro4Ww=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.clerk.com https://*.clerk.accounts.dev https://js.stripe.com https://m.stripe.network https://checkout.stripe.com https://player.vimeo.com https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://bat.bing.com https://*.bing.com https://cdn.growthbook.io https://browser.sentry-cdn.com https://*.ingest.sentry.io https://vercel.live; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.clerk.com https://*.clerk.accounts.dev https://clerk.quickbookstraining.com https://api.stripe.com https://m.stripe.com https://q.stripe.com https://api.growthbook.io https://cdn.growthbook.io https://*.ingest.sentry.io https://vitals.vercel-insights.com https://vercel.live https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://*.google-analytics.com https://stats.g.doubleclick.net https://bat.bing.com https://b.clarity.ms https://j.clarity.ms https://www.chatbase.co wss://ws-us3.pusher.com; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://checkout.stripe.com https://m.stripe.network https://player.vimeo.com https://*.clerk.com https://*.clerk.accounts.dev https://td.doubleclick.net; media-src 'self' blob: https://*.vimeocdn.com https://player.vimeo.com; worker-src 'self' blob:; form-action 'self' https://checkout.stripe.com https://*.stripe.com; object-src 'none'; base-uri 'self'; report-uri /api/csp-report 1
report-uri https://web.bvl.bund.de/header-report/csp/ 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.klarnacdn.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.klarna.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://maps.gstatic.com https://maps.googleapis.com https://app.usercentrics.eu https://*.usercentrics.eu *.klarna.com *.klarnaevt.com *.klarnacdn.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://maps.gstatic.com https://www.googleapis.com https://static.zdassets.com https://*.zendesk.com https://app.usercentrics.eu https://privacy-proxy.usercentrics.eu https://*.usercentrics.eu www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.klarna.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.klarnacdn.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://www.googleapis.com https://*.zendesk.com https://static.zdassets.com https://graphql.usercentrics.eu https://privacy-proxy.usercentrics.eu https://ekr.zdassets.com https://*.usercentrics.eu *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.hsforms.net https://*.hsforms.com https://*.hs-scripts.com https://*.hscollectedforms.net https://*.hsleadflows.net https://www.google.com https://www.gstatic.com https://policy.app.cookieinformation.com https://api.fraud0.com https://connect.facebook.net https://snap.licdn.com https://googleads.g.doubleclick.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://*.hsforms.net https://*.hsforms.com https://www.gstatic.com; font-src 'self' data:; connect-src 'self' wss: https://*.hsforms.com https://*.hscollectedforms.net https://*.hubapi.com https://www.google.com https://ad.doubleclick.net; frame-src 'self' blob: https://*.hsforms.net https://*.hsforms.com https://www.google.com https://recaptcha.google.com; worker-src 'self' blob:; media-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https://*.hsforms.net https://*.hsforms.com; child-src 'self' blob: https://*.hsforms.com; report-uri https://piwikpro.de/wp-json/pp-security/v1/csp-report; report-to csp-endpoint; 1
object-src  'none'; connect-src 'self' *.darkx.com *.xempire.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.darkx.com *.xempire.com join.gammasecure.com; script-src 'self' *.darkx.com *.xempire.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.darkx.com *.xempire.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com fonts.googleapis.com *.googleapis.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.facebook.com *.googlesyndication.com *.nosto.com *.nos.to *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * services.paytrail.com paytrail.com *.paytrail.com epmt.nordea.fi *.nordea.com verkkopankki.danskebank.fi online.s-pankki.fi verkkomaksu.poppankki.fi verkkomaksu.omasp.fi auth.aktia.fi verkkomaksu.handelsbanken.fi verkkomaksu.saastopankki.fi online.alandsbanken.fi maksu.pivo.fi qa-maksu.pivo.fi v1-hub-staging.sph-test-solinor.com v1.api.paymenthighway.io *.paymenthighway.io *.mobilepay.fi 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com *.nosto.com *.nos.to *.addthis.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.googleapis.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.nosto.com *.nos.to *.getqonfi.com agryghsjho.cloudimg.io imgsct.cookiebot.com https://at19.net https://bdt9.net https://ds1.nl https://dt51.net https://dt61.net https://fr135.net https://glp8.net https://jdt8.net https://jf79.net https://hs82.net https://lt45.net https://mt74.net https://ndt5.net https://rkn3.net *.ggpht.com magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com https://www.unifaunonline.se https://*.tile.openstreetmap.org/ flagpedia.net https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com cdn2.hubspot.net resources.paytrail.com *.amazonaws.com ssl.gstatic.com www.gstatic.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com https://cdn.jsdelivr.net *.nosto.com *.nos.to *.getqonfi.com consent.cookiebot.com *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com *.avada.io *.shopify.com https://api.unifaun.com js.mollie.com pay.google.com applepay.cdn-apple.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com services.paytrail.com resources.paytrail.com *.sendcloud.sc *.jsdelivr.net tagmanager.google.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://lightbulbcheap.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.nosto.com *.nos.to https://cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.sendcloud.sc *.jsdelivr.net tagmanager.google.com fonts.google.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com *.nosto.com *.nos.to *.getqonfi.com *.gstatic.com data: https://get.geojs.io *.avada.io www.gstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.paytrail.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.googletagmanager.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self';  script-src 'self' 'unsafe-inline' analytics.ahrefs.com www.googletagmanager.com www.google.com googleads.g.doubleclick.net diffuser-cdn.app-us1.com prism.app-us1.com trackcmp.net www.clarity.ms scripts.clarity.ms s.pinimg.com ct.pinterest.com connect.facebook.net analytics.tiktok.com vercel.live;  style-src 'self' 'unsafe-inline' fonts.googleapis.com;  img-src 'self' data: blob: storage.googleapis.com img.youtube.com picsum.photos maps.googleapis.com maps.google.com www.google.com www.facebook.com analytics.tiktok.com ct.pinterest.com googleads.g.doubleclick.net homebuyer.odfil.es;  media-src 'self';  connect-src 'self' places.googleapis.com api.fanniemae.com auth.pingone.com api.gateway.attomdata.com api.bridgedataoutput.com api.iterable.com cdn.jsdelivr.net redfin-public-data.s3.us-west-2.amazonaws.com fred.stlouisfed.org www.congress.gov eligibility.sc.egov.usda.gov api.vercel.com brain-virid.vercel.app trackcmp.net analytics.ahrefs.com www.google.com analytics.google.com www.google-analytics.com stats.g.doubleclick.net www.clarity.ms j.clarity.ms ct.pinterest.com prism.app-us1.com analytics.tiktok.com analytics-ipv6.tiktokw.us www.facebook.com vercel.live;  font-src 'self' data: fonts.googleapis.com fonts.gstatic.com;  frame-src 'self' www.youtube.com maps.google.com td.doubleclick.net www.googletagmanager.com ct.pinterest.com vercel.live;  worker-src 'self' blob:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.tabby.ai https://*.tamara.co https://www.googletagmanager.com https://connect.facebook.net https://t.contentsquare.net https://*.contentsquare.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://cdn.shopify.com https://127.0.0.1 http://127.0.0.1 https://www.googletagmanager.com https://www.google-analytics.com https://www.facebook.com https://www.google.com https://googleads.g.doubleclick.net https://*.contentsquare.net; font-src 'self' data:; connect-src 'self' https://127.0.0.1 http://127.0.0.1 https://api-v2.ziina.com https://api.nomod.com https://*.tabby.ai https://*.tamara.co https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://connect.facebook.net https://www.facebook.com https://t.contentsquare.net https://*.contentsquare.net; frame-src 'self' https://*.tabby.ai https://*.tamara.co https://*.ziina.com https://*.nomod.com https://www.googletagmanager.com https://td.doubleclick.net https://www.facebook.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://www.facebook.com; object-src 'none' 1
script-src 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' www.google.com www.googletagmanager.com www.gstatic.com production3.powermusic.com production3.royaltyfreefitnessmusic.com powermusic.com www.powermusic.com royaltyfreefitnessmusic.com www.royaltyfreefitnessmusic.com; report-uri /.webscale/csp-report 1
object-src 'none';base-uri 'self';script-src 'nonce-npMrmpo6tGur_3TkTM6N6g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-Ulf6Kfn9lfT/2wX+9g8YUzD85E8=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
script-src 'unsafe-inline' 'unsafe-eval'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=M4AlwWJRMTh9ztKQiS53QzgDo48HXFW_p2yDiP0U1uc-1789262158.815792-1.0.1.1-QXh1A.Ow2HhlVfjxHzavpvO.WUpStZmC8G4.0zH93F0ivEk0yBoqzwrwJ1hEsOuiUIWxJsJpbjXv2orRzDY9oC8euWGjrHps2gKKUfBEEAPHhQBo511LReDbUh7jIiAd5wmjXtbqRIOmVtdc6ea7lkdaN3_cmjlaVtBBVX5S6vA; report-to cf-csp-endpoint 1
default-src 'self'; script-src 'self' 'nonce-lxKVwDEoECw_BpFChrqtOg' 'unsafe-eval' https://cdn.jsdelivr.net https://unpkg.com https://code.jquery.com https://www.googletagmanager.com https://www.google-analytics.com https://browser.sentry-cdn.com https://js-agent.newrelic.com https://challenges.cloudflare.com https://*.s3.amazonaws.com; script-src-attr 'unsafe-inline'; script-src-elem 'self' 'nonce-lxKVwDEoECw_BpFChrqtOg' 'unsafe-inline' https://cdn.jsdelivr.net https://unpkg.com https://code.jquery.com https://www.googletagmanager.com https://www.google-analytics.com https://browser.sentry-cdn.com https://js-agent.newrelic.com https://challenges.cloudflare.com https://*.s3.amazonaws.com; style-src 'self' 'nonce-lxKVwDEoECw_BpFChrqtOg' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com https://*.s3.amazonaws.com; style-src-elem 'self' 'nonce-lxKVwDEoECw_BpFChrqtOg' 'unsafe-inline' https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://fonts.googleapis.com https://*.s3.amazonaws.com https://unpkg.com; style-src-attr 'unsafe-inline'; img-src 'self' https: data:; font-src 'self' https://fonts.gstatic.com https://cdnjs.cloudflare.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://*.ingest.us.sentry.io https://*.nr-data.net https://challenges.cloudflare.com https://cdn.jsdelivr.net; media-src 'self' blob:; frame-src 'self' https://*.s3.amazonaws.com https://lookerstudio.google.com https://challenges.cloudflare.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; worker-src 'self' blob:; report-uri /api/csp-report/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' https://cdn.frenchweddingstyle.com data:; frame-src https://www.openstreetmap.org https://www.youtube.com https://player.vimeo.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://*.google-analytics.com; font-src 'self' 1
font-src https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com https://use.typekit.net https://kit-pro.fontawesome.com/ *.fontawesome.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.sharethis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://banners.helloretailcdn.com *.sharethis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ quickchart.io img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://core.helloretail.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com *.sharethis.com https://ssl.ditonlinebetalingssystem.dk https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com https://kit.fontawesome.com www.gstatic.com *.googleapis.com *.fontawesome.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com *.sharethis.com https://static.klaviyo.com maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com assets.braintreegateway.com https://p.typekit.net https://use.typekit.net https://kit-pro.fontawesome.com/ *.googleapis.com *.fontawesome.com *.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://core.helloretail.com https://helloretailcdn.com *.sharethis.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net cash-f.squarecdn.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.hotjar.com *.trustami.com *.confmetrix.com *.metrix-demo.com *.tailwindcss.com *.klarnacdn.net *.paypal.com *.paypalobjects.com *.typekit.net *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://widgets.trustedshops.com www.auronia.nl data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com * *.facebook.com https://plumrocket.com *.paypal.com www.auronia.nl 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com www.auronia.nl 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ * www.google.com *.google.com *.doubleclick.net *.facebook.com *.certcapture.com *.hotjar.com *.pinterest.com *.klarna.com *.imajize.com https://plumrocket.com *.paypal.com *.sandbox.paypal.com *.trustpilot.com www.auronia.nl 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io * 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.certcapture.com *.bing.com *.pinterest.com *.klarnacdn.net *.usercentrics.eu *.confmetrix.com *.metrix-demo.com *.tailwindcss.com *.klarna.com *.klarnaevt.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.paypal.com *.sandbox.paypal.com https://firebasestorage.googleapis.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com www.auronia.nl data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com applepay.cdn-apple.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.certcapture.com *.pinterest.com *.klaviyo.com *.bing.com *.hotjar.com *.zdassets.com *.zendesk.com *.zopim.com *.pinimg.com *.confmetrix.com *.metrix-demo.com *.klarnacdn.net *.trustami.com https://unpkg.com/vimeo-froogaloop2@0.1.0/javascript/froogaloop.min.js *.usercentrics.eu *.tailwindcss.com *.klarna.com x.klarnacdn.net *.klarnaservices.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.sandbox.paypal.com *.paypalobjects.com *.cdn-apple.com *.avada.io *.shopify.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.trustpilot.com www.auronia.nl 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cash.app *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.certcapture.com *.trustami.com *.confmetrix.com *.metrix-demo.com *.tailwindcss.com *.klarnacdn.net https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.trustpilot.com www.auronia.nl 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.pinterest.com *.zdassets.com www.auronia.nl 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io * *.facebook.com *.facebook.net *.google.com *.certcapture.com *.pinterest.com *.zdassets.com *.doubleclick.net *.zendesk.com *.zopim.com *.confmetrix.com *.metrix-demo.com *.hotjar.com *.klaviyo.com wss://widget-mediator.zopim.com/ *.klarnaevt.com/ *.trustpilot.com/ https://bat.bing.com/ *.usercentrics.eu *.tailwindcss.com *.klarnaevt.com *.klarnacdn.net x.klarnacdn.net *.klarnaservices.com *.klarna.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.paypal.com *.sandbox.paypal.com https://get.geojs.io *.avada.io *.trustedshops.com *.etrusted.com https://integrations.etrusted.site www.auronia.nl 'self' 'unsafe-inline'; child-src *.certcapture.com www.auronia.nl http: https: blob: 'self' 'unsafe-inline'; default-src www.auronia.nl 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'none'; frame-ancestors 'none'; form-action 'none'; upgrade-insecure-requests; block-all-mixed-content 1
default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://maps.rlp.de https://*.widget.bookingkit.net https://*.widget.bookingkit.com https://*.bookingkit.de https://cdn-insights.bookingkit.com https://ajax.googleapis.com https://insights.bookingkit.net 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: https://sgx.geodatenzentrum.de https://*.bookingkit.de; base-uri 'self'; frame-src 'self' https://allegro.wwwan.de https://www.youtube-nocookie.com https://w.soundcloud.com https://www.geoportal.rlp.de https://*.bookingkit.de https://www.youtube.com https://www.google.com; connect-src 'self' https://maps.rlp.de https://data.rlp.de https://cdn-insights.bookingkit.com https://insights.bookingkit.net https://*.api.bookingkit.com https://*.widget.bookingkit.com https://*.bookingkit.de https://o108687.ingest.sentry.io; style-src 'self' 'unsafe-inline' https://*.bookingkit.de https://*.widget.bookingkit.com 'report-sample'; form-action 'self' http://*.rlp.de; font-src 'self' data:; manifest-src 'self'; report-uri https://tor-zum-welterbe.de/@http-reporting?csp=report&requestTime=1789270026810392&requestHash=24fd16557ba0179747144658d46219292d7535a2 1
worker-src blob:; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.kxcdn.com *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.addthis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.fbcdn.net blob: magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.googleapis.com *.gstatic.com cdn.ampproject.org connect.facebook.net googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
base-uri 'self'; default-src 'self'; frame-ancestors 'none'; form-action 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net https://cdn.socket.io https://www.google.com https://www.gstatic.com https://oss.maxcdn.com https://www.atlasestateagents.co.uk; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google.com https://www.gstatic.com; frame-src 'self' https://www.google.com https://www.gstatic.com; manifest-src 'self'; media-src 'self' data: https:; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: *.ups.com 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.ups.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com bid.g.doubleclick.net *.demdex.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com www.google.com *.ups.com *.fls.doubleclick.net *.facebook.com *.awin1.com *.zenaps.com newassets.hcaptcha.com *.iubenda.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com customer-jo4fg3675hw5zuyf.cloudflarestream.com gum.criteo.com fledge.eu.criteo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com 'self' data: *.ups.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.awin1.com *.zenaps.com *.wepowerconnections.com *.bird.eu cdn.flbx.io *.cloudfront.net ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.feedaty.com *.iubenda.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com *.hsforms.net *.hsforms.com customer-jo4fg3675hw5zuyf.cloudflarestream.com www.gstatic.com a.omappapi.com matching.ivitrack.com x.bidswitch.net sync-t1.taboola.com sync.outbrain.com zendesk.com sgtm.jeannebaret.com campagnolo1715786198.zendesk.com www.google.it sync.1rx.io ib.adnxs.com rtb.csync.smartserver.com r.casalemedia.com gum.criteo.com id5-sync.com ad.360yield.com contextual.media.net exchange.mediavine.com jadserve.postrelease.com simage2.pubmatic.com pixel.rubiconproject.com match.sharethrough.com criteo-sync.teads.tv criteo-partners.tremorhub.com eb2.3lift.com ad.yieldlab.net sync-criteo.ads.yieldmo.com e1.emxdgt.com *.dmxleo.com *.smartadserver.com *.omnitagjs.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com *.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.magento-datasolutions.com https://rum.hlx.page *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.ups.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com *.getflowbox.com hcaptcha.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.feedaty.com *.iubenda.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com maps.googleapis.com *.hsforms.net *.hsforms.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com static.zdassets.com cdn.clerk.io customer-jo4fg3675hw5zuyf.cloudflarestream.com cdn.iubenda.com api.clerk.io cs.iubenda.com js-agent.newrelic.com embed.cloudflarestream.com www.google.com www.gstatic.com dynamic.criteo.com a.omappapi.com static.hotjar.com sslwidget.criteo.com script.hotjar.com ecomm.sella.it sandbox.gestpay.net pod-29.zendesk.com sgtm.jeannebaret.com sgtm.cmpsport.com mn.cmpsport.com mn.melby.it connect.facebook.net https://cdn.iubenda.com https://static.zdassets.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.ups.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com downloads.mailchimp.com *.feedaty.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com www.gstatic.com a.omappapi.com cdnjs.cloudflare.com *.typekit.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net vimeo.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.magento.com *.paypal.com google.com *.google.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.ups.com *.wepowerconnections.com https://the.sciencebehindecommerce.com *.getflowbox.com *.feedaty.com *.iubenda.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com maps.googleapis.com places.googleapis.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com region1.google-analytics.com ekr.zdassets.com customer-jo4fg3675hw5zuyf.cloudflarestream.com api.openweathermap.org cmp.zendesk.com bam.nr-data.net idb.iubenda.com region1.analytics.google.com api.omappapi.com gum.criteo.com measurement-api.criteo.com wss://pod-29.zendesk.com sgtm.jeannebaret.com campagnolo1715786198.zendesk.com www.google.it connect.facebook.net *.doubleclick.net mn.cmpsport.com mn.melby.it 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com hcaptcha.com *.googleapis.com *.nr-data.net *.criteo.net *.cloudflarestream.com *.cloudflare.com *.clerk.io *.cmpsport.com *.melby.it *.zdassets.com *.chimpstatic.com *.iubenda.com *.zendesk.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' *.contactpigeon.com talkingbird-c3041-default-rtdb.europe-west1.firebasedatabase.app *.europe-west1.firebasedatabase.app www.googletagmanager.com googletagmanager.com www.google-analytics.com *.google-analytics.com analytics.google.com *.analytics.google.com *.googleapis.com *.google.com *.gstatic.com connect.facebook.net analytics.skroutz.gr skroutza.skroutz.gr cdn.ampproject.org *.kxcdn.com *.addthis.com *.addthisedge.com platform.twitter.com *.youtube.com *.moatads.com pagead2.googlesyndication.com googleads.g.doubleclick.net www.googleadservices.com; worker-src blob: https://suc.gr; font-src https://www.googletagmanager.com *.googleapis.com *.gstatic.com fonts.gstatic.com *.kxcdn.com 'self' 'unsafe-inline' 'unsafe-eval' fonts.googleapis.com *.fontawesome.com https://ping.contactpigeon.com https://www.contactpigeon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com *.google.com *.addthis.com pagead2.googlesyndication.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * analytics.skroutz.gr 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com *.google.com *.fbcdn.net pagead2.googlesyndication.com https://ping.contactpigeon.com 'self' 'unsafe-inline' 'unsafe-eval' www.google.gr *.google.gr stats.g.doubleclick.net *.giphy.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://www.contactpigeon.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ tagmanager.google.com https://www.googletagmanager.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.googleapis.com *.google.com *.gstatic.com cdn.ampproject.org googletagmanager.com *.kxcdn.com platform.twitter.com *.addthis.com *.addthisedge.com *.moatads.com pagead2.googlesyndication.com https://ping.contactpigeon.com 'self' 'unsafe-inline' 'unsafe-eval' s7.addthis.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com analytics.skroutz.gr https://skroutza.skroutz.gr https://www.contactpigeon.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.google.com *.kxcdn.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval' https://ping.contactpigeon.com fonts.googleapis.com *.fontawesome.com unsafe-inline assets.braintreegateway.com https://www.contactpigeon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.instagram.com pagead2.googlesyndication.com https://ping.contactpigeon.com www.googleapis.com securetoken.googleapis.com *.europe-west1.firebasedatabase.app 'self' 'unsafe-inline' 'unsafe-eval' *.contactpigeon.com www.contactpigeon.com stats.g.doubleclick.net ekr.zdassets.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://www.contactpigeon.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src * 'unsafe-inline' 'unsafe-eval'; style-src 'unsafe-inline'; script-src 'none' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.quotes.stockinthechannel.co.uk 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com media.stockinthechannel.com images.icecat.biz 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.fontawesome.com assets.braintreegateway.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com objects.icecat.biz 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://geowidget.easypack24.net 'self' data: *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * sandbox.przelewy24.pl secure.przelewy24.pl 'self' 'unsafe-inline'; frame-ancestors pay.google.com *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * apm.przelewy24.pl https://geowidget-app.inpost.pl/ *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://firebasestorage.googleapis.com *.facebook.com *.google.com *.googleadservices.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com static.przelewy24.pl www.gstatic.com gstatic.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.hsforms.net *.hsforms.com 'self' data: https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com *.avada.io *.shopify.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com sandbox.przelewy24.pl secure.przelewy24.pl apm.przelewy24.pl https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.hsforms.net *.hsforms.com *.gstatic.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'unsafe-inline' 'self' https://playmaty.test 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com https://geowidget.easypack24.net https://geowidget.inpost.pl *.googleapis.com *.gstatic.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'unsafe-inline' 'self' 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://get.geojs.io *.avada.io *.googletagmanager.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com sandbox.przelewy24.pl secure.przelewy24.pl wss://ws.przelewy24.pl wss://sandbox-ws.przelewy24.pl wss://secure-ws.przelewy24.pl apple-pay-gateway.apple.com apm.przelewy24.pl www.google.com pay.google.com *.easypack24.net *.inpost.pl *.openstreetmap.org t.elasticsuite.io *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site ws://localhost:3000 http://localhost:3000 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src maxcdn.bootstrapcdn.com *.fontawesome.com https://applepay.cdn-apple.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com fonts.gstatic.com *.poinzilla.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.googletagmanager.com gum.criteo.com widget.trustpilot.com ct.pinterest.com fledge.eu.criteo.com consentcdn.cookiebot.com insight.adsrvr.org match.adsrvr.org https://plumrocket.com *.payplug.com *.dalenys.com https://applepay.cdn-apple.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com https://images.unsplash.com cdn.doofinder.com *.feedaty.com www.facebook.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com flagpedia.net https://secure-magenta.dalenys.com https://redchamps.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com ts.tradetracker.net www.magmodules.eu *.facebook.com *.poinzilla.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.addtoany.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com cdn.doofinder.com *.feedaty.com tps.trovaprezzi.it cdn.iubenda.com cs.iubenda.com widget.trustpilot.com s.kk-resources.com eu1-config.doofinder.com dynamic.criteo.com s.pinimg.com connect.facebook.net cdn.clerk.io api.clerk.io ct.pinterest.com sslwidget.criteo.com *.avada.io *.googletagmanager.com *.googleadservices.com *.google-analytics.com *.gstatic.com https://secure-magenta.dalenys.com https://applepay.cdn-apple.com api.payplug.com cdn.payplug.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com tm.tradetracker.net *.cloudflare.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com *.poinzilla.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com maxcdn.bootstrapcdn.com *.addtoany.com unsafe-inline assets.braintreegateway.com *.doofinder.com *.feedaty.com cdnjs.cloudflare.com cdn.doofinder.com cdn.iubenda.com *.fontawesome.com *.gstatic.com https://secure-magenta.dalenys.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com tagmanager.google.com fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.doofinder.com wss://*.doofinder.com *.feedaty.com stats.g.doubleclick.net region1.analytics.google.com eu1-api.doofinder.com mug.criteo.com ct.pinterest.com idb.iubenda.com widget.trustpilot.com measurement-api.criteo.com https://get.geojs.io *.avada.io *.google-analytics.com *.analytics.google.com *.googletagmanager.com www.gstatic.com maps.googleapis.com *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.facebook.net *.poinzilla.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src stats.g.doubleclick.net www.google.it www.google.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net https://www.googletagmanager.com *.googleapis.com *.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * gateway.paymentgateway.cloud gateway.bankart.si *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io https://images.unsplash.com *.gstatic.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com openstreetmap.org *.openstreetmap.org zavas.si *.zavas.si zavas.hr *.zavas.hr zavas.com *.zavas.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://maps.googleapis.com https://player.vimeo.com tagmanager.google.com https://www.googletagmanager.com *.avada.io *.shopify.com js.mollie.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com gateway.paymentgateway.cloud gateway.bankart.si cdn.datatables.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net https://cdnjs.cloudflare.com assets.braintreegateway.com cdn.datatables.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io https://maps.googleapis.com https://player.vimeo.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com gateway.paymentgateway.cloud gateway.bankart.si 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://webstats.indigo-net.com https://webstats2.indigo-net.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self' data:; connect-src 'self' https://webstats.indigo-net.com https://webstats2.indigo-net.com; frame-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; 1
script-src https://*.hubspot.com https://js.hscollectedforms.net https://js.hsadspixel.net https://*.hs-scripts.com https://js.hs-banner.com https://js.hs-analytics.net https://forms.hsforms.com https://*.usemessages.com https://www.s-rminform.com https://static.hsappstatic.net https://*.hsadspixel.net https://js.hscta.net https://*.hubspotusercontent00.net https://*.hubspotusercontent10.net https://*.hubspotusercontent20.net https://*.hubspotusercontent30.net https://*.hubspotusercontent40.net https://*.hubspot.net https://*.hsleadflows.net https://*.hsforms.net https://*.hsforms.com http://*.hubspotfeedback.com https://feedback.hubapi.com 'strict-dynamic' 'nonce-s2fsqGgfmIhmRosjofi6AQ=='; img-src 'self' data: https://*.hsforms.com https://*.hubspot.com https://www.s-rminform.com https://static.hsappstatic.net https://js.hscta.net https://no-cache.hubspot.com https://*.hubspotusercontent00.net https://*.hubspotusercontent10.net https://*.hubspotusercontent20.net https://*.hubspotusercontent30.net https://*.hubspotusercontent40.net https://*.hubspot.net https://cdn2.hubspot.net https://*.hsforms.net https://5869920.fs1.hubspotusercontent-na1.net https://www.google.com https://www.google.co.uk https://googleads.g.doubleclick.net; connect-src https://*.hubspot.com https://*.hubapi.com https://www.s-rminform.com https://forms.hscollectedforms.net https://js.hscta.net https://*.hs-banner.com https://*.hsforms.com https://*.google-analytics.com https://*.doubleclick.net https://www.google.com https://google.com https://*.analytics.google.com; frame-src https://*.hubspot.com https://*.hs-sites.com https://*.hubspot.net https://play.hubspotvideo.com https://*.hsforms.net https://*.hsforms.com https://td.doubleclick.net https://platform.twitter.com https://share.zencast.fm; child-src https://*.hsforms.com; object-src 'none' 1
default-src 'self'; img-src *; script-src https://pipedot.org 'unsafe-eval' 'unsafe-inline'; style-src https://pipedot.org 'unsafe-inline'; font-src 'none'; object-src 'none'; child-src 'none'; frame-ancestors 'none'; form-action 'self'; referrer origin-when-cross-origin 1
default-src 'self' https://cuatro.sim-cdn.nl; img-src * data: blob:; style-src * 'unsafe-inline' blob: https://fonts.googleapis.com; font-src 'self' data: https://fonts.bunny.net https://fonts.gstatic.com https://cuatro.sim-cdn.nl https://cuatro.sim-cdn-acceptatie.nl https://cuatro.sim-cdn-test.nl; script-src 'nonce-MWI3ZDUwN2QtYWRhOS00NDBhLTljYTItNmFmMTNmZTYwODQ5' 'strict-dynamic' 'report-sample'; connect-src *; form-action 'self'; media-src https://*.readspeaker.com https://*.streamlock.net https://storage.googleapis.com https://scribit-pro-hosting.storage.googleapis.com https://scribit-pro.storage.googleapis.com https://app.talkjs.com 'self' blob:; frame-src *; frame-ancestors 'self' https://*.polly.help; worker-src * 'unsafe-inline' blob:; report-uri /api/csp-report 1
default-src 'self' https:; font-src 'self' https: data:; img-src 'self' https: data:; object-src 'none'; script-src 'self' https: 'nonce-6kzgCnKF6sGQMdcoAsQXZw=='; style-src 'self' https: 'unsafe-inline' 'nonce-6kzgCnKF6sGQMdcoAsQXZw=='; connect-src 'self' https: wss://localhost:8181 wss://localhost:8282 wss://localhost:8383 wss://localhost:8484 wss://127.0.0.1:8181 wss://127.0.0.1:8282 wss://127.0.0.1:8383 wss://127.0.0.1:8484 1
font-src *.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com unsafe-inline *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
connect-src 'self' http://proxyman.debug:3000 http://localhost:3000 https://accounts.google.com https://cdn.cookielaw.org https://*.onetrust.com https://sentry.io https://*.ingest.us.sentry.io https://unpkg.com https://wallpapers.com https://s3.amazonaws.com https://api.mirego.com; default-src 'none'; font-src 'self' fonts.mirego.com fonts.gstatic.com *.typekit.net www.mirego.com; form-action 'self'; frame-src https://mirego-website.scout.mirego.com https://accounts.google.com https://js.stripe.com https://www.youtube.com; img-src 'self' blob: data: https://*.googleusercontent.com https://cdn.cookielaw.org https://wallpapers.com https://s3.amazonaws.com d3gude8cge9lnv.cloudfront.net d72zxqwaon87r.cloudfront.net mirego-website-webapp-qa.dev.mirego.com https://images.mirego.com www.mirego.com; media-src 'self' mirego-website-webapp-qa.dev.mirego.com d3gude8cge9lnv.cloudfront.net d72zxqwaon87r.cloudfront.net https://s3.amazonaws.com www.mirego.com https://images.mirego.com; script-src 'sha256-ZX+ZjgijHT9u5/zwXFM2FqnD4sZoAg4KQ5f2iovVvCo=' 'self' 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' https://accounts.google.com https://cdn.cookielaw.org https://js.stripe.com https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.youtube.com https://unpkg.com ; script-src-attr 'sha256-ZX+ZjgijHT9u5/zwXFM2FqnD4sZoAg4KQ5f2iovVvCo=' 'self' 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' https://accounts.google.com https://cdn.cookielaw.org https://js.stripe.com https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.youtube.com https://unpkg.com ; script-src-elem 'sha256-ZX+ZjgijHT9u5/zwXFM2FqnD4sZoAg4KQ5f2iovVvCo=' 'self' 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval' https://accounts.google.com https://cdn.cookielaw.org https://js.stripe.com https://cdnjs.cloudflare.com https://www.googletagmanager.com https://www.youtube.com https://unpkg.com ; style-src 'self' 'unsafe-inline' fonts.googleapis.com accounts.google.com www.mirego.com; 1
default-src 'self';     script-src 'self' 'unsafe-inline' 'unsafe-eval' blob:         https://cdnjs.cloudflare.com         https://www.youtube.com         https://challenges.cloudflare.com         https://static.zdassets.com         https://pod-28-sunco-ws.zendesk.com         https://ekr.zdassets.com         https://relokia.zendesk.com         https://assets.calendly.com         https://static.cloudflareinsights.com         https://www.google-analytics.com         https://www.googletagmanager.com         https://*.doubleclick.net         https://tracking-api.g2.com         https://unpkg.com/web-vitals@5.0.1/dist/web-vitals.iife.js         https://*.visualwebsiteoptimizer.com         https://*.openai.com         https://analytics.ahrefs.com;     worker-src 'self' blob:;     style-src 'self' 'unsafe-inline'         https://cdnjs.cloudflare.com         https://assets.calendly.com         https://*.vwo.com         https://*.visualwebsiteoptimizer.com         https://fonts.googleapis.com;     img-src 'self' data: https:;     font-src 'self' data:         https://fonts.gstatic.com;     connect-src 'self'         https://relokia.zendesk.com         https://ekr.zdassets.com         wss://pod-28-sunco-ws.zendesk.com         https://ipinfo.io         https://*.doubleclick.net         https://pagead2.googlesyndication.com         https://www.google.com         https://www.google-analytics.com         https://analytics.ahrefs.com         https://*.vwo.com         https://*.visualwebsiteoptimizer.com         https://validator.nu         https://*.openai.com         https://analytics.google.com         https://*.analytics.google.com;     frame-src         https://help-desk-migration.com         https://*.help-desk-migration.com         https://calendly.com         https://assets.calendly.com         https://challenges.cloudflare.com         https://*.vwo.com         https://*.visualwebsiteoptimizer.com         https://www.youtube.com;     media-src 'self';     frame-ancestors 'self'         https://help-desk-migration.com         https://*.help-desk-migration.com; 1
default-src 'self'; script-src 'self' 'nonce-L1spn7E1VEeJVTAuYASqQQ==' https://www.googletagmanager.com https://www.google-analytics.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://translate.google.com https://translate.googleapis.com https://www.gstatic.com https://www.google.com; style-src 'self' 'unsafe-inline' https://translate.googleapis.com https://www.gstatic.com https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https://i.ytimg.com https://www.google.com https://www.gstatic.com https://translate.googleapis.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://www.google-analytics.com https://www.googletagmanager.com; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://www.googletagmanager.com https://tagassistant.google.com https://translate.googleapis.com https://pagead2.googlesyndication.com; frame-src https://www.youtube-nocookie.com https://www.youtube.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://www.googletagmanager.com https://tagassistant.google.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self' https://tagassistant.google.com; form-action 'self'; report-uri https://www.findsbest.com/csp-report.php; report-to csp-endpoint 1
default-src 'none';     script-src 'self' 'unsafe-inline' blob:       https://*.freshworks.com https://*.freshchat.com https://*.freshdesk.com       https://cdn.jsdelivr.net https://static.hotjar.com https://script.hotjar.com       https://www.googletagmanager.com https://js.hs-scripts.com https://js.hs-analytics.net       https://js.hubspot.com https://js.hs-banner.com https://4895550.hs-sites.com       https://js.zi-scripts.com https://js.hsadspixel.net;     style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.freshchat.com https://*.freshworks.com;     font-src 'self' https://fonts.gstatic.com;     img-src 'self' data: https: https://*.freshchat.com https://stats.g.doubleclick.net;     connect-src 'self' https://*.freshchat.com https://*.freshworks.com       https://ws.zoominfo.com https://region1.analytics.google.com       https://cta-service-cms2.hubspot.com https://js.zi-scripts.com       https://stats.g.doubleclick.net;     frame-src https://*.freshchat.com https://*.freshworks.com https://4895550.hs-sites.com;     worker-src blob:;     base-uri 'self';     form-action 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://tracker.metricool.com https://careers.talentclue.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://tracker.metricool.com https://cloudflareinsights.com https://careers.talentclue.com; frame-src 'self' https://www.googletagmanager.com https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://careers.talentclue.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self'; object-src 'none' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com 'self' data: *.googleapis.com *.yotpo.com *.zendesk.com *.elfsight.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors *.zdassets.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.zendesk.com *.zdassets.com *.googletagmanager.com *.addthis.com *.yotpo.com *.facebook.net *.facebook.com *.doubleclick.net *.google.co.ma *.googleadservices.com *.google-analytics.com *.gstatic.com *.amcglobal.sc.omtrdc.net *.googleapis.com *.luckyorange.com *.elfsight.com *.visitors.live 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io magefan.com cm.magefan.com *.disqus.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.yotpo.com *.facebook.net *.facebook.com *.doubleclick.net *.google.com *.google.co.ma *.googleadservices.com *.amcglobal.sc.omtrdc.net *.googleapis.com *.luckyorange.com *.elfsight.com *.elfsightcdn.com *.visitors.live 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.disqus.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.facebook.net *.googleadservices.com *.googletagmanager.com *.googleapis.com *.doubleclick.net *.gstatic.com *.zendesk.com *.zopim.com *.zdassets.com *.yotpo.com *.addthis.com *.moatads.com *.magento.com *.luckyorange.com *.elfsight.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com assets.braintreegateway.com *.google.com *.googleapis.com *.googletagmanager.com *.yotpo.com *.luckyorange.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.zendesk.com *.zdassets.com *.googletagmanager.com *.addthis.com *.yotpo.com *.facebook.net *.facebook.com *.doubleclick.net *.google.com *.google.co.ma *.googleadservices.com *.google-analytics.com *.gstatic.com *.amcglobal.sc.omtrdc.net *.googleapis.com *.luckyorange.com *.elfsight.com *.visitors.live 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.yotpo.com *.moatads.com *.addthis.com *.zdassets.com *.zendesk.com wss://*.zopim.com *.demdex.net *.doubleclick.net *.googleapis.com *.luckyorange.com *.elfsight.com *.visitors.live wss://in.visitors.live wss://realtime.luckyorange.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-cfojLZgdd8jnnme8X19b3A' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
default-src *;script-src 'unsafe-inline' 'unsafe-eval' *;style-src 'unsafe-inline' *;connect-src * blob:;report-uri https://cdn.initial-website.com/app/reporting/policyviolation/submit 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.klevu.com *.ksearchnet.com *.stape.io *.fontawesome.com *.hometex.co.uk *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com maxcdn.bootstrapcdn.com fonts.googleapis.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.jsdelivr.net data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.auspost.zone https://seo.mageplaza.com *.facebook.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.auspost.zone *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.stape.io *.google.com/ *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com *.auspost.com.au *.dropbox.com *.facebook.com *.harleyheaven.com.au *.jotform.com *.lustyindustries.com *.smartsheet.com *.wufoo.com zacspeed.com *.zscalerthree.net *.zscloud.net 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app *.googleapis.com *.trackedlink.net *.ddlnk.net *.klevu.com *.ksearchnet.com *.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.doubleclick.net *.stape.io *.hometex.co.uk *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.cloudinary.com https://www.magezon.com quickchart.io img.youtube.com t.zip.co static.zipmoney.com.au static.zip.co *.adswizz.com *.arinet.com *.facebook.com *.facebook.net www.google.ca www.google.co.id www.google.co.in www.google.co.jp www.google.co.kr www.google.com.au www.google.com.pg www.google.com.ph www.google.com.sg www.google.com.vn www.google.co.nz www.google.nr google.com *.harleyheaven.com.au *.linkint.com.au meetanshi.com *.tiktok.com *.trackedweb.net *.whitesmoto.com.au *.whitespowersports.com.au data: 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.afterpay.com *.afterpaycdn.com *.squarecdn.com *.cash.app maps.googleapis.com *.googleapis.com *.gstatic.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com *.auspost.zone js.klevu.com *.ksearchnet.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.googletagmanager.com *.doubleclick.net *.stape.io *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://unpkg.com/konva@8.3.14/konva.min.js *.google.com/ *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com static.zipmoney.com.au static.zip.co zip.co comms.peterstevens.com.au 'sha256-t8+YQ8a68xqlo1CFNuvZ6hEa2lK8D3qfIUxC0pF5l9o=' 'sha256-ufaKzAUhXBQKdJPjuUWMbuacFPm549ht8Z7dpRE26XM=' 'sha256-PNMkJkCcCjYpfS6ut7QxRr/QP1GMXwrEY4Jp7c5bbEQ=' 'sha256-Aeai8hEPsncYAo037HhsleT3hm0umTVL+RGnbnqjyow=' 'sha256-aA7EYt2b5REh4/t62Ec27SdBHDpxp4+CDvqDmi3kwIU=' 'sha256-IDQQPwOtwjVjctga3hnfq2768nLqbuNLqimB7xJnjaI=' 'sha256-ArJ5AsgE5eyyFHy8hBO5OZecFe+/6RtJQFuTQz0WNg0=' 'sha256-DF7FIHDGQFGxWGPV7g7oBbBBoksB20ETrubzbkNuGmk=' 'sha256-h8gG1uNWi02S00uhnnPan+IfTOULBEi0D46e6eAw/dk=' 'sha256-+kUhn+hYODOZB9qeg14vC/j7t+Je1Kyb1n5Lw0HNNuQ=' 'sha256-277rZp0nuYHkjMM9XUlUzpRa0GI1kxTAMIwlQzKEg+s=' 'sha256-XmRQlLFP7QNSk28pMd0V2lwnOJW58FLjnKNso9oV4dc=' 'sha256-xsPpZii/gKcFKSwi3EyLGlAmvD8/BfSUwWRgysRt8Sk=' 'sha256-CDcBv2vGbX3VhOnsqmpLz1oDViOH8BZnrAeqIblPjwU=' 'sha256-tz0AxSJyQ8sfsoC5GUxd9MhPL9nAAmWLhsLU2iLKSks=' 'sha256-7f0jDs7mc731NNDkilDEVmhUVfYfKSi7y2fggnsmA0s=' 'sha256-yDdSqpioQ+WMfXD6baQmrCfMBj8fAVW16GoP9a1U3qI=' 'sha256-JQdCgOSRx1mm9rThyhEY5AOCHIuK2YDCEGStoIqcg8Q=' 'sha256-sVUxzEb0+FkE8dtC8l+D7IOPLE1rsfhKwkRJCDLmYNU=' 'sha256-6YaaTWp00NYPrQ+Epun8/dN+4Cu6VkDcj1/aVPp5wJA=' 'sha256-wde4U2cpd835Bhf19CHt9yWtezLaU24iPwRw20KDipY=' 'sha256-Uj7SWwMGDZwvpcIjjey+9yBM0J1SVOo6TVtswbKBDpY=' 'sha256-TafMzq/PynXi1Bw09I0XigZClLhkh+wUDlLZWOdLB4k=' 'sha256-rSS/ii/l7aoXKRKdP8rvouIhevTdUu20QjRpvaArWUk=' https://js.klevu.com https://www.harleyheaven.com.au *.addthis.com *.arinet.com capi-automation.s3.us-east-2.amazonaws.com d3k1w8lx8mqizo.cloudfront.net *.facebook.net *.harleyheaven.com.au *.jquery.com *.klevu.com rum.hlx.page *.tiktok.com *.wufoo.com *.zip.co 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com *.afterpay.com/ *.afterpaycdn.com *.squarecdn.com *.cash.app webchat.dotdigital.com webchat.staging.dotdigital.com *.klevu.com *.ksearchnet.com *.googleapis.com *.googletagmanager.com *.stape.io *.fontawesome.com *.cloudflare.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu maxcdn.bootstrapcdn.com fonts.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com https://statsjs.klevu.com https://js.klevu.com *.bootstrapcdn.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.afterpay.com *.afterpay-beta.com *.afterpaycdn.com *.squarecdn.com *.cash.app api.lab.amplitude.com *.googleapis.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com *.auspost.zone *.klevu.com *.ksearchnet.com *.google-analytics.com *.doubleclick.net *.googlesyndication.com *.stape.io *.hometex.co.uk *.cloudflare.com *.twitter.com *.twimg.com *.googleadservices.com *.sandbox.paypal.com *.paypalobjects.com *.ampproject.org *.cloudinary.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.amplitude.com *.facebook.com *.facebook.net www.google.co.in www.google.com.au www.google.com.sg www.google.com.vn www.google.co.nz www.google.co.uk www.google.nl www.google.nr mpc2-prod-27-is5qnl632q-uk.a.run.app mpc-prod-21-1053047382554.us-central1.run.app *.on.aws rum.hlx.page *.tiktok.com *.tiktokw.us *.zip.co *.zipmoney.com.au 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://aa6003d1-0257-4af5-abe5-06e4f9ec9658.sansec.watch/; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://css.zohocdn.com https://fonts.gstatic.com https://unpkg.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://plumrocket.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://js.stripe.com/ *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com https://*.supplychimp.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com www.apptrian.com magefan.com cm.magefan.com *.disqus.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com *.disqus.com *.hsforms.net *.hsforms.com *.gstatic.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com https://salesiq.zoho.com https://js.zohocdn.com https://cdn.pagesense.io https://js.stripe.com/ https://js-agent.newrelic.com/ https://bam-cell.nr-data.net/ https://bam.nr-data.net/ *.maxmind.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.googleapis.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com https://salesiq.zoho.com https://css.zohocdn.com http://fonts.googleapis.com https://fonts.googleapis.com https://unpkg.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com https://*.zoho.com https://*.zohopublic.com ws://vts.zohopublic.com https://bam.nr-data.net/ *.mmapiws.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.finance-calculator.co.uk *.s3.eu-west-2.amazonaws.com *.dekopay.org *.deko-uat.com *.blackhorseflexpay.co.uk *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net *.gstatic.com 'self' data: fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://seo.mageplaza.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors https://api.clerk.io https://cdn.clerk.io self www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.weltpixel.com *.finance-calculator.co.uk *.deko.finance *.dekopay.org *.deko-uat.com *.blackhorseflexpay.co.uk www.google.com www.gstatic.com apis.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.trustpilot.com *.googletagmanager.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://cdn.clerk.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.finance-calculator.co.uk *.dekopay.com *.dekopay.org *.deko-uat.com s3.eu-west-1.amazonaws.com 'self' data: *.blackhorseflexpay.co.uk magefan.com cm.magefan.com *.disqus.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.hsforms.net *.hsforms.com *.openstreetmap.org https://maps.googleapis.com *.gstatic.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://api.clerk.io https://cdn.clerk.io https://custom.clerk.io chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.finance-calculator.co.uk *.dekopay.com *.dekopay.org *.deko-uat.com dekowallet-feature-assets.s3.eu-west-2.amazonaws.com *.blackhorseflexpay.co.uk/ *.disqus.com *.googleapis.com *.google.com *.gstatic.com *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com *.trustpilot.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net *.typeform.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://api.clerk.io https://cdn.clerk.io downloads.mailchimp.com *.finance-calculator.co.uk *.dekopay.com *.dekopay.org *.deko-uat.com *.blackhorseflexpay.co.uk *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com https://fonts.bunny.net unsafe-inline assets.braintreegateway.com *.trustpilot.com *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com *.typeform.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.finance-calculator.co.uk *.dekopay.com *.dekopay.org *.deko-uat.com *.blackhorseflexpay.co.uk http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.openstreetmap.org https://maps.googleapis.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app *.typeform.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.googleapis.com *.gstatic.com data: *.fontawesome.com *.hotjar.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.facebook.com *.sandbox.paypal.com *.paypal.com *.paypalobjects.com *.googleadservices.com *.google-analytics.com *.google.com *.google.com.my *.google.com.vn *.twitter.com *.sharethis.com *.facebook.net invol.co *.focus-point.com d6lo152ds99l0.cloudfront.net www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com/recaptcha/ *.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.googletagmanager.com *.facebook.net *.avada.io *.paypal.com *.sandbox.paypal.com *.google-analytics.com *.paypalobjects.com *.googleadservices.com analytics.tiktok.com dpm.demdex.net et.geojs.io avn.innity.com apptrian.com *.useinsider.com *.doubleclick.net *.hotjar.com *.sharethis.com *.facebook.com invol.co wchat.freshchat.com artrial.kiksar.com web-rte-static-files.s3.ap-south-1.amazonaws.com https://stovsprodwe01.azureedge.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.fontawesome.com *.googleapis.com *.gstatic.com *.bootstrapcdn.com *.sandbox.paypal.com *.paypal.com *.paypalobjects.com *.google-analytics.com *.googleadservices.com *.hotjar.com *.sharethis.com *.facebook.net *.facebook.com wchat.freshchat.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.google-analytics.com et.geojs.io *.avada.io *.sandbox.paypal.com *.paypalobjects.com *.paypal.com *.google.com *.gstatic.com analytics.tiktok.com avn.innity.com apptrian.com *.hotjar.com *.hotjar.io *.doubleclick.net *.sharethis.com *.facebook.net *.facebook.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'nonce-p5K68jZu8GgLErY1UtPeAA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self' blob:  https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; frame-src 'self' https://*.noxiaohao.com https://telegram.org https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://accounts.google.com https://oauth.telegram.org https://sgtm.btsgtm.com  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; script-src 'self' 'nonce-m10J6YUr+JrKJPCzjzyPww==' 'sha256-lOPbmIOmj+iHQ+ryKTipdH38qd1xNZXGbhKGVnwT9Hs=' 'sha256-YxjMkx+oxTfMaFh03Z14qCaWT6/LrPqPgAp0B+toPXM=' 'sha256-8FDxlcF9kHTqvh/v3RIRuG3kMikr5iha+7P/0TN/GNA=' https://*.noxiaohao.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://accounts.google.com https://www.googletagmanager.com https://fonts.googleapis.com https://play.google.com https://analytics.google.com https://fonts.gstatic.com https://telegram.org https://oauth.telegram.org https://*.geetest.com https://*.geevisit.com https://sgtm.btsgtm.com https://static.wangsustatic.xyz https://static.wangsustatic.vip ; connect-src 'self' https://stats.g.doubleclick.net https://analytics.google.com https://*.noxiaohao.com wss://*.noxiaohao.com wss: https://www.turingfraud.net https://play.google.com https://accounts.google.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://telegram.org https://oauth.telegram.org https://static.geetest.com https://static.geevisit.com wss://stream.bitget.cloud https://www.google.com https://sgtm.btsgtm.com  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; worker-src 'self' blob:; img-src 'self' data: blob: https://img.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://img.bitgetimg.com https://img.gurenla.com https://*.bgbstatic.com https://lh3.googleusercontent.com https://static.geetest.com https://static.geevisit.com https://static-web.jjdsn.vip https://cdn.bitkeep.vip https://www.google.co.jp https://bin.wangsustatic.com https://sgtm.btsgtm.com https://analytics.google.com https://stats.g.doubleclick.net  https://static.wangsustatic.xyz https://static.wangsustatic.vip ; style-src 'self' 'unsafe-inline' https://static.geetest.com https://static.geevisit.com https://accounts.google.com https://fonts.googleapis.com https://static.bgbstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; font-src 'self' data: https://static.geetest.com https://static.geevisit.com https://fonts.gstatic.com https://*.bgbstatic.com https://*.bgstatic.com https://static.zzrrv.com https://*.gurenla.com  https://*.bitget.site https://*.bitgetpro.site https://*.bitget.live https://*.bitget.vin https://static.wangsustatic.xyz https://static.wangsustatic.vip ; frame-ancestors 'self'; require-trusted-types-for 'script'; trusted-types default dompurify vue goog#html 'allow-duplicates' html; upgrade-insecure-requests; report-uri /v1/buried/log/cspSecurity /v1/monitor/csp?appId=d4b6df7d; 1
object-src  'none'; connect-src 'self' *.blowpass.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.blowpass.com join.gammasecure.com; script-src 'self' *.blowpass.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.blowpass.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.certcapture.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.wesupply.xyz https://wesupplylabs.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com *.certcapture.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io assets.adobedtm.com *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.certcapture.com *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.certcapture.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.magento.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.certcapture.com *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; default-src data: *.youtube.com *.youtu.be *.vimeo.com *.google.com *.google-analytics.com *.googletagmanager.com cdn.alireviews.io cdn.jsdelivr.net *.alicdn.com *.weaverse.io *.shopify.com *.myshopify.com 'self' 'nonce-81ad0b891f1a4254d45c1c75f8abdffe' https://cdn.shopify.com https://shopify.com; frame-ancestors 'none'; style-src *.weaverse.io *.shopify.com *.myshopify.com 'self' 'unsafe-inline' https://cdn.shopify.com; connect-src vimeo.com *.shopifysvc.com https://www.google-analytics.com https://region1.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://tagassistant.google.com https://websdk.appsflyersdk.com https://banner.appsflyersdk.com https://creatives-cdn.appsflyersdk.com https://cnstrc.com https://*.cnstrc.com *.weaverse.io *.shopify.com *.myshopify.com 'self' https://cdn.shopify.com/ https://monorail-edge.shopifysvc.com https://theoutnet-checkout.weaverse.dev https://wcacjh-wq.myshopify.com; script-src https://cdn.shopify.com https://www.googletagmanager.com https://tagmanager.google.com https://cct.google https://www.google-analytics.com https://ssl.google-analytics.com https://websdk.appsflyersdk.com https://cnstrc.com https://*.cnstrc.com https://cdn.tapcart.com 'nonce-81ad0b891f1a4254d45c1c75f8abdffe'; img-src 'self' data: blob: https://cdn.shopify.com https://shopify.com https://*.shopify.com https://*.myshopify.com cdn.alireviews.io cdn.jsdelivr.net *.alicdn.com https://cnstrc.com https://*.cnstrc.com https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://impressions.onelink.me *.weaverse.io *.shopify.com *.myshopify.com; font-src 'self' data: https://cdn.shopify.com https://cdn.appsflyer.com; frame-src *.youtube.com *.youtu.be *.vimeo.com https://www.googletagmanager.com https://maps.google.com *.weaverse.io *.shopify.com *.myshopify.com 1
script-src 'unsafe-inline' 'unsafe-eval'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=Z4_L19QQGTKrPetvR8od6UQ7ynUvwd2wdswkq2S58ss-1789278058.319614-1.0.1.1-cItfzlr_b5M1Q7nDX5ZAiARHH_Jfq0odRKxA95yuaq3N_w_Roy3MEt6rqXSucxcwseJe69mcZMHVMGskOzOZj4wvaEngjYk7VCyb0hND9k3.nIiJNL7zfINoZCaWsI5lU93f7f7OaMTSRkAbiZMBz9DigxtDFYcj2mkO5rSTrKQ; report-to cf-csp-endpoint 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://challenges.cloudflare.com https://chat.ruslibrary.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; media-src 'self' blob: https:; connect-src 'self' https: wss:; frame-src 'self' https://challenges.cloudflare.com https://chat.ruslibrary.com https://js.stripe.com https://*.adyen.com; worker-src 'self' blob: 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.ggpht.com https://*.googleusercontent.com blob: https://*.googletagmanager.com https://*.google-analytics.com data: https://*.openstreetmap.org 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://*.youtube.com https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.googleusercontent.com https://*.ggpht.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://*.openstreetmap.org; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://*.google.com https://*.doubleclick.net https://*.googletagmanager.com; connect-src 'self' https://*.googleapis.com https://*.google.com https://*.gstatic.com data: blob: https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net https://*.openstreetmap.org; font-src 'self' https://fonts.gstatic.com; style-src-elem 'self' 'unsafe-inline' https://fonts.googleapis.com 'report-sample'; worker-src 'self' 'unsafe-inline' 'unsafe-eval' 'wasm-unsafe-eval' https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.ggpht.com https://*.googleusercontent.com blob: 'report-sample'; report-uri https://www.bps.ac.uk/@http-reporting?csp=report&requestTime=1789280344894259&requestHash=dd38be402c3b1a799a84eeeba7ad31b1fac5d2e0 1
object-src 'none';base-uri 'self';script-src 'nonce-QVPN65QodjGfAg7rGpYNIQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cloudflare.com *.twitter.com *.google.com *.google.co.in *.google-analytics.com *.facebook.com *.twimg.com *.trustedshops.com *.googleapis.com *.bootstrapcdn.com *.sooqr.com *.amazonaws.com *.geojs.io *.paypal.com *.paypalobjects.com *.magezon.com *.channable.com *.googletagmanager.com *.stats.schilderijenshop.com *.getsitecontrol.com *.cloudflareinsights.com *.google.nl *.klaviyo.com https://stats.schilderijenshop.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.facebook.com *.sooqr.com *.amazonaws.com *.geojs.io *.paypalobjects.com *.magezon.com *.channable.com *.googletagmanager.com *.stats.schilderijenshop.com *.getsitecontrol.com *.cloudflareinsights.com *.google.nl *.klaviyo.com https://stats.schilderijenshop.com *.facebook.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.twitter.com https://www.google.com https://www.google.co.in https://www.facebook.com *.google-analytics.com *.sooqr.com *.amazonaws.com *.geojs.io *.paypalobjects.com *.magezon.com *.bootstrapcdn.com *.channable.com *.googletagmanager.com *.stats.schilderijenshop.com *.getsitecontrol.com *.cloudflareinsights.com *.google.nl *.klaviyo.com https://stats.schilderijenshop.com *.google.com/ https://www.googletagmanager.com/ *.facebook.com *.facebook.net js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cloudflare.com *.google.com *.google.co.in https://www.facebook.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.connect.facebook.net https://stats.g.doubleclick.net https://d.adroll.com https://pixel.advertising.com https://pixel.rubiconproject.com https://simage2.pubmatic.com https://dsum-sec.casalemedia.com https://ads.yahoo.com https://eb2.3lift.com https://sync.outbrain.com https://trc.taboola.com https://x.bidswitch.net/sync https://ib.adnxs.com https://idsync.rlcdn.com https://us-u.openx.net https://ups.analytics.yahoo.com https://segments.company-target.com https://sync.tidaltv.com *.sooqr.com *.amazonaws.com *.geojs.io *.paypalobjects.com *.magezon.com *.bootstrapcdn.com *.channable.com *.googletagmanager.com *.stats.schilderijenshop.com *.getsitecontrol.com *.cloudflareinsights.com *.google.nl *.klaviyo.com https://stats.schilderijenshop.com https://images.unsplash.com imgsct.cookiebot.com https://www.magezon.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.facebook.com *.facebook.net https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cloudflare.com *.twitter.com *.google.co.in *.facebook.com *.googleadservices.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://connect.facebook.net *.paypalobjects.com *.paypal.com https://chimpstatic.com *.googletagmanager.com https://s.adroll.com https://d.adroll.com https://d.adroll.mgr.consensu.org *.bootstrapcdn.com *.sooqr.com *.amazonaws.com *.geojs.io *.magezon.com *.doubleclick.net *.channable.com *.stats.schilderijenshop.com *.getsitecontrol.com *.cloudflareinsights.com *.google.nl *.klaviyo.com https://stats.schilderijenshop.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js https://maps.googleapis.com consent.cookiebot.com *.google.com/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://www.googletagmanager.com/ https://www.googletagmanager.com/ *.facebook.net *.avada.io js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.google.com *.google-analytics.com *.google.co.in *.facebook.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.youtube.com *.bootstrapcdn.com *.sooqr.com *.amazonaws.com *.geojs.io *.paypal.com *.paypalobjects.com *.magezon.com *.channable.com *.googletagmanager.com *.stats.schilderijenshop.com *.getsitecontrol.com *.cloudflareinsights.com *.google.nl *.klaviyo.com https://stats.schilderijenshop.com https://static.klaviyo.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.cloudflare.com *.twitter.com *.twimg.com *.google.co.in *.google-analytics.com *.facebook.com *.sooqr.com *.amazonaws.com https://get.geojs.io *.paypalobjects.com *.magezon.com *.bootstrapcdn.com *.channable.com *.googletagmanager.com *.stats.schilderijenshop.com *.getsitecontrol.com *.cloudflareinsights.com *.google.nl *.klaviyo.com https://stats.schilderijenshop.com https://maps.googleapis.com https://player.vimeo.com https://www.sandbox.paypal.com https://www.paypal.com *.analytics.google.com cbsignal-1.in-endp.profitmetrics.io googleads.g.doubleclick.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.facebook.net *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.schilderijenshop.com/; report-to report-endpoint; 1
img-src https://higherlogicdownload.s3.amazonaws.com/ASFMRA/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/ASFMRA/ https://img.youtube.com/vi/ https://static.filestackapi.com/picker/ https://d2x5ku95bkycr3.cloudfront.net https://higherlogiclongterm.s3.amazonaws.com/ASFMRA/ blob: https://d132x6oi8ychic.cloudfront.net 'self'; style-src https://d132x6oi8ychic.cloudfront.net 'unsafe-inline' https://higherlogiccloudfront.s3.amazonaws.com https://cdn.jsdelivr.net/jquery.slick/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://d2x5ku95bkycr3.cloudfront.net/ https://ajax.googleapis.com/ajax/libs/jqueryui/ https://use.fortawesome.com/ https://cdn.higherlogic.com/ai-assistant https://static.filestackapi.com/picker/ https://fonts.googleapis.com/ https://d3uf7shreuzboy.cloudfront.net/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/ASFMRA/ https://higherlogicdownload.s3.amazonaws.com/ASFMRA/ https://higherlogiclongterm.s3.amazonaws.com/ASFMRA/ 'self'; font-src https://fonts.googleapis.com/ https://fonts.gstatic.com/ https://cdn.jsdelivr.net/jquery.slick/ https://higherlogiccloudfront.s3.amazonaws.com https://higherlogicdownload.s3.amazonaws.com/ASFMRA/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/ASFMRA/ 'self' https://higherlogiclongterm.s3.amazonaws.com/ASFMRA/ https://maxcdn.bootstrapcdn.com/font-awesome/ https://d2x5ku95bkycr3.cloudfront.net https://d132x6oi8ychic.cloudfront.net data:; script-src-elem https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d3uf7shreuzboy.cloudfront.net/ https://static.filestackapi.com/picker/ https://cdn.higherlogic.com/ai-assistant https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d2x5ku95bkycr3.cloudfront.net/ https://cdnjs.cloudflare.com/ajax/libs/prism/ https://www.gstatic.com/recaptcha/ https://static.filestackapi.com/filestack-js/ 'self' https://ajax.aspnetcdn.com/ajax/ 'unsafe-eval' 'unsafe-inline'; media-src https://higherlogiclongterm.s3.amazonaws.com/ASFMRA/ https://higherlogicdownload.s3.amazonaws.com/ASFMRA/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/ASFMRA/ https://higherlogicstream.s3.amazonaws.com/ASFMRA/ 'self' https://d132x6oi8ychic.cloudfront.net; script-src https://higherlogiclongterm.s3.amazonaws.com/ASFMRA/ https://higherlogicdownload.s3.amazonaws.com/ASFMRA/ https://ajax.aspnetcdn.com/ajax/ https://cdn.jsdelivr.net/jquery.slick/ https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-ui-1.13.3.min.js https://d132x6oi8ychic.cloudfront.net https://cdn.informz.net 'unsafe-eval' https://use.fortawesome.com/ https://higherlogic-holdingpen-us-east-1.s3.amazonaws.com/ASFMRA/ https://cdnjs.cloudflare.com/ajax/libs/prism/ 'unsafe-inline' https://d2x5ku95bkycr3.cloudfront.net/ https://higherlogiccloudfront.s3.amazonaws.com https://static.filestackapi.com https://d2x5ku95bkycr3.cloudfront.net/HigherLogic/jquery/jquery-3.7.1.min.js https://d3uf7shreuzboy.cloudfront.net/ 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/recaptcha/ https://api.connectedcommunity.org/ 'self' https://www.youtube.com/embed/ https://*.kb.us.higherlogic.com; connect-src https://upload.filestackapi.com https://static.filestackapi.com https://cloud.filestackapi.com/folder/list/ 'self' https://hl-managedservices.informz.net https://d3uf7shreuzboy.cloudfront.net/ blob:; worker-src 'self'; default-src 'self'; base-uri 'self'; frame-ancestors https://*.connectedcommunity.org/ 'self'; object-src 'none'; manifest-src 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://stats.wp.com https://www.googletagmanager.com https://challenges.cloudflare.com https://static.cloudflareinsights.com https://use.typekit.net https://analytics.wpmucdn.com https://assets.pinterest.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.bunny.net https://cloud.typography.com https://cdnjs.cloudflare.com; font-src 'self' data: https://fonts.gstatic.com https://use.typekit.net https://p.typekit.net https://cdnjs.cloudflare.com https://fonts.bunny.net; img-src 'self' data: https:; frame-src https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://challenges.cloudflare.com https://www.google.com; connect-src 'self' https://stats.wp.com https://www.google-analytics.com https://analytics.google.com https://analytics3.wpmudev.com https://www.google.com https://ad.doubleclick.net https://capi.streamcompanies.com https://d3b1tkuxjj39s5.cloudfront.net; object-src 'none'; base-uri 'self'; worker-src 'self' blob:; report-uri https://n.gately.events/webhook/csp-report-atlantahomesmag 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://*.supabase.co https://www.google.com; font-src 'self' data:; connect-src 'self' https://*.supabase.co; media-src 'self' blob:; worker-src 'self' blob:; frame-src 'self' 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.googleapis.com *.fontawesome.com https://widgets.trustedshops.com https://fonts.gstatic.com https://fonts.googleapis.com static.klaviyo.com https://cdnjs.cloudflare.com/ https://d362h7pxdteoyk.cloudfront.net/ https://cdn.popt.in/ https://s3.us-west-2.amazonaws.com/ data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.sendcloud.sc *.jsdelivr.net js.mollie.com *.ad-srv.net https://r.adserver01.de https://www.googletagmanager.com/ 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com www.apptrian.com *.amazonaws.com magefan.com cm.magefan.com https://www.mollie.com cdn.sendcloud.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com *.googletagmanager.com ssl.gstatic.com www.gstatic.com https://www.geschenkefuerfreunde.de *.usercentrics.eu https://www.google.com https://www.google.com.ua https://integrations.etrusted.com https://app.popt.in/ https://d3lopmpcew67el.cloudfront.net/ data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.apptrian.com *.sendcloud.sc *.jsdelivr.net js.mollie.com pay.google.com applepay.cdn-apple.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com *.googletagmanager.com tagmanager.google.com *.adcell.com *.usercentrics.eu *.ad-srv.net *.online-metrix.net https://cdn.popt.in/pixel.js https://cdnjs.cloudflare.com/ https://cdn.brevo.com/ https://sibautomation.com/sa.js 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sendcloud.sc *.jsdelivr.net *.fontawesome.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com tagmanager.google.com fonts.google.com https://fonts.googleapis.com https://integrations.etrusted.com https://fonts.popt.in https://tctguyhimcwcyexxgullu3seem0fkhrh.lambda-url.us-west-2.on.aws/ https://cdn.popt.in/ https://cdnjs.cloudflare.com/ 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com www.apptrian.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.googletagmanager.com *.usercentrics.eu *.adcell.com https://stats.g.doubleclick.net *.googlesyndication.com wss://127.0.0.1 https://display.popt.in/ https://d3lopmpcew67el.cloudfront.net/ https://in-automate.brevo.com https://www.google.com/ 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://stats.mp.ls; style-src 'self' 'unsafe-inline'; img-src 'self' data: https://macintoshgarden.org https://stats.mp.ls; font-src 'self' data:; connect-src 'self' https://stats.mp.ls; frame-ancestors 'self'; base-uri 'self'; form-action 'self' 1
default-src 'self'; connect-src 'self' *.bookeasy.com.au sjp.impartmedia.com cqs.tourismholdings.com securepaymentvault.com ipinfo.io *.queue-fair.net *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.com.au *.gstatic.com *.googleapis.com *.ggpht.com; font-src 'self' data: fonts.gstatic.com gadgets.impartmedia.com; frame-ancestors 'self'; frame-src *.google.com *.kovena.com https://challenges.cloudflare.com https://td.doubleclick.net https://www.googletagmanager.com www.google.com; img-src 'self' data: images.impartmedia.com *.bookeasy.com.au *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.com.au *.gstatic.com *.googleapis.com *.ggpht.com *.maptiler.com gadgets.impartmedia.com; object-src 'none'; report-to cspendpoint; report-uri https://csp.impartmedia.com/csp-reports/; script-src 'nonce-NTZiZjk3MWZkYzNkYzc0YmU1ZTJiYzM5ODk3NTQyMWRkZGIxMjU0MTZiYjQwZmQ0YzNkYmY4MzgzZDhmZmU3YjljM2VmNWJkYWJiMTFkNWQ0MzVmOTEzZTU1NjhjZWU5NTdmN2RlNWE5NzJmYmMyY2FkNTA2OTI3NmM4MTk1N2U=' 'self' 'unsafe-eval' *.google-analytics.com *.analytics.google.com *.googletagmanager.com *.g.doubleclick.net *.google.com *.google.com.au *.gstatic.com *.kovena.com gadgets.impartmedia.com *.queue-fair.net https://api.bookeasy.com.au/ https://challenges.cloudflare.com maps.googleapis.com; style-src 'nonce-NTZiZjk3MWZkYzNkYzc0YmU1ZTJiYzM5ODk3NTQyMWRkZGIxMjU0MTZiYjQwZmQ0YzNkYmY4MzgzZDhmZmU3YjljM2VmNWJkYWJiMTFkNWQ0MzVmOTEzZTU1NjhjZWU5NTdmN2RlNWE5NzJmYmMyY2FkNTA2OTI3NmM4MTk1N2U=' 'self' fonts.googleapis.com gadgets.impartmedia.com https://api.bookeasy.com.au/; style-src-attr 'self' 'unsafe-inline' 'unsafe-eval' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.jsdelivr.net https://*.trustpilot.com https://connect.facebook.net https://*.sendinblue.com https://*.brevo.com https://www.google.com https://www.gstatic.com https://analytics.tiktok.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https:; frame-src 'self' https:; frame-ancestors 'self'; object-src 'none'; base-uri 'self' 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://accounts.google.com https://www.facebook.com https://login.live.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.googletagmanager.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://www.mercadolibre.com https://www.mercadolivre.com https://firebasestorage.googleapis.com *.hsforms.net *.hsforms.com 'self' data: *.googletagmanager.com *.google-analytics.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://secure.mlstatic.com https://cdn.socket.io *.avada.io *.hsforms.net *.hsforms.com *.gstatic.com *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.googleapis.com *.gstatic.com tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://api.mercadopago.com https://www.mercadolibre.com https://www.ipag.com.br https://get.geojs.io *.avada.io t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; frame-ancestors 'self'; script-src 'self' 'nonce-eG9keW9za2dybmVoc3Nhd2Z5bG5hdnZ4c2RybGp3amVkamx0' https://www.googletagmanager.com/gtag/ https://www.google-analytics.com https://player.vimeo.com/api/ https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://cdn.jsdelivr.net/npm/dayjs@1/ https://cdnjs.cloudflare.com/ajax/libs/jszip/3.10.1/ https://cdnjs.cloudflare.com/ajax/libs/FileSaver.js/2.0.5/ https://cdnjs.cloudflare.com/ajax/libs/jszip-utils/0.1.0/; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https://s3.eu-central-1.amazonaws.com/afc-assets/ https://s3.eu-central-1.amazonaws.com/afc-images-gallery/ https://s3.eu-central-1.amazonaws.com/afc-videos-gallery/ https://s3.eu-central-1.amazonaws.com/afc-docs/ https://cdn2.assets-servd.host/ https://www.googletagmanager.com https://*.google-analytics.com https://stats.g.doubleclick.net; connect-src 'self' https://s3.eu-central-1.amazonaws.com/afc-assets/ https://s3.eu-central-1.amazonaws.com/afc-images-gallery/ https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://www.google.com/g/collect https://www.google.com/recaptcha/ https://www.cloudflare.com/cdn-cgi/trace; frame-src 'self' https://player.vimeo.com https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com/maps/ https://www.google.com/recaptcha/; media-src 'self' https://s3.eu-central-1.amazonaws.com/afc-assets/ https://s3.eu-central-1.amazonaws.com/afc-videos-gallery/; worker-src 'self'; manifest-src 'self'; report-uri /actions/craftcmsstarterplugin/csp-report/log; report-to csp-endpoint; 1
base-uri 'self'; object-src 'none'; script-src 'nonce-lsmNrVOhylMJU3Oc9Pjrq2uFv' 'strict-dynamic' 'wasm-unsafe-eval'; worker-src 'self' blob:; frame-ancestors 'self'; manifest-src 'self' 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-u0n+qvkc8KDYNL5sYa+DEVkhDbc=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
worker-src 'None'; font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cloudflare.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.trustedshops.com *.googleapis.com *.bootstrapcdn.com 'self' data: data: *.zopim.com script.hotjar.com *.fontawesome.com https://fonts.bunny.net *.cdn-apple.com *.salesfire.co.uk *.klarnacdn.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.facebook.com None: *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors None: 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.twitter.com https://www.google.com https://www.google.co.in https://www.facebook.com *.zopim.com *.kiyoh.com *.cookiebot.com None: www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.salesfire.co.uk *.wesupply.xyz https://wesupplylabs.com 'self' 'unsafe-inline'; img-src 'self' data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.unsplash.com *.cloudflare.com *.google.com *.google.co.in https://www.facebook.com *.klarna.com *.googleadservices.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.connect.facebook.net https://stats.g.doubleclick.net https://d.adroll.com https://pixel.advertising.com https://pixel.rubiconproject.com https://simage2.pubmatic.com https://dsum-sec.casalemedia.com https://ads.yahoo.com https://eb2.3lift.com https://sync.outbrain.com https://trc.taboola.com https://x.bidswitch.net/sync https://ib.adnxs.com https://idsync.rlcdn.com https://us-u.openx.net https://ups.analytics.yahoo.com https://segments.company-target.com https://sync.tidaltv.com *.pay.nl *.cloudfront.net *.zopim.com *.zopim.io *.googletagmanager.com *.linkedin.com *.adsymptotic.com *.google.nl *.bing.com *.amazonaws.com *.getsitecontrol.com *.cookiebot.com *.rainclear.co.uk c.clarity.ms storage.responseiq.com api.responseiq.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com magefan.com cm.magefan.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.salesfire.co.uk *.googleapis.com data: 'self' 'unsafe-inline'; script-src *.assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.cloudflare.com *.twitter.com *.google.co.in *.facebook.com *.googleadservices.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com https://connect.facebook.net *.paypalobjects.com *.paypal.com chimpstatic.com *.googletagmanager.com https://s.adroll.com https://d.adroll.com https://d.adroll.mgr.consensu.org *.bootstrapcdn.com *.cloudfront.net *.zopim.com *.zdassets.com *.getsitecontrol.com *.licdn.com *.doubleclick.net data: *.widget.trengo.eu *.bing.com *.cookiebot.com *.googlesyndication.com *.responseiq.com *.app-us1.com *.luckyorange.com *.prism.app-us1.com None: report-sample: https://settings.luckyorange.com/ https://diffuser-cdn.app-us1.com https://static.responseiq.com/ https://app.responseiq.com/ static.hotjar.com script.hotjar.com ct.pinterest.com trackcmp.net www.clarity.ms s.pinimg.com widget.trustpilot.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.avada.io *.shopify.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.salesfire.co.uk maps.googleapis.com *.what3words.com *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.youtube.com *.bootstrapcdn.com *.cloudfront.net *.zopim.com data: static.responseiq.com None: downloads.mailchimp.com https://fonts.bunny.net assets.braintreegateway.com *.salesfire.co.uk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.cloudfront.net *.widget.trengo.eu *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.cloudflare.com *.twitter.com *.twimg.com *.google.co.in *.facebook.com *.postcode-checkout.nl *.doubleclick.net *.visitors.live *.luckyorange.net *.zdassets.com *.zopim.com wss://widget-mediator.zopim.com wss://in.visitors.live wss://visitors.live *.getsitecontrol.com *.demdex.net *.omtrdc.net *.cardinalcommerce.com *.getsitectrl.com *.widget.trengo.eu *.zendesk.com *.cookiebot.com *.bing.com *.googlesyndication.com *.luckyorange.com *.googleapis.com *.linkedin.com wss://realtime.luckyorange.com/mqtt x.clarity.ms ct.pinterest.com content.hotjar.io wss://ws.hotjar.com/ z.clarity.ms app.responseiq.com None: https://settings.luckyorange.com/ form-assets.mailchimp.com *.intuit.com *.amazonaws.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinaltrusted.com *.salesfire.co.uk *.smartmetrics.co.uk places.googleapis.com www.googleapis.com *.what3words.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src upgrade-insecure-requests: block-all-mixed-content: 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp.threatview.app/report; report-to report-endpoint; 1
font-src *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.iubenda.com *.multisafepay.com https://pay.google.com https://plumrocket.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.iubenda.com https://firebasestorage.googleapis.com *.multisafepay.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com *.iubenda.com *.avada.io *.multisafepay.com https://pay.google.com maps.googleapis.com www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.fontawesome.com https://fonts.bunny.net *.multisafepay.com www.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.iubenda.com https://get.geojs.io *.avada.io *.multisafepay.com www.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-5Pi5f9Y4MCB_QpMGCDU73w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com *.googleapis.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com/ *.sendcloud.sc *.jsdelivr.net *.trustpilot.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://www.magezon.com *.amazonaws.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com chimpstatic.com downloads.mailchimp.com *.list-manage.com *.fontawesome.com *.googleapis.com *.gstatic.com *.google.com/ *.sendcloud.sc *.jsdelivr.net *.trustpilot.com https://www.googletagmanager.com tagmanager.google.com unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.fontawesome.com *.sendcloud.sc *.jsdelivr.net *.trustpilot.com tagmanager.google.com https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com *.google-analytics.com *.doubleclick.net *.pay.nl 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.ronaldadventureshop.nl/paynl/csp/report; report-to report-endpoint; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.klevu.com *.ksearchnet.com cdn.livechatinc.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://www.shopperapproved.com facebook.com www.facebook.com *.payfabric.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.certcapture.com *.getbread.com *.breadpayments.com *.rbcpayplan.com magento-cloudflare.jetrails.com https://www.googletagmanager.com/ facebook.com www.facebook.com secure.livechatinc.com *.payfabric.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.certcapture.com *.getbread.com *.breadpayments.com *.rbcpayplan.com https://www.shopperapproved.com *.ytimg.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com *.files-text.com *.livechatinc.com *.livechat-files.com *.livechat-static.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ bat.bing.com facebook.com www.facebook.com *.marlowwhite.com *.payfabric.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.certcapture.com *.getbread.com *.breadpayments.com *.rbcpayplan.com https://www.shopperapproved.com https://direct.shopperapproved.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.klevu.com *.ksearchnet.com *.livechatinc.com *.livechat-static.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ bat.bing.com *.cloudfront.net facebook.com www.facebook.com connect.facebook.net *.tctm.co *.crazyegg.com cdn.mouseflow.com *.sentry-cdn.com *.payfabric.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://js.klevu.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com https://static.klaviyo.com *.klevu.com *.ksearchnet.com *.livechatinc.com *.marlowwhite.com assets.braintreegateway.com https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src *.livechatinc.com 'self' 'unsafe-inline'; media-src *.adobe.com *.livechatinc.com *.livechat-static.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.certcapture.com *.getbread.com *.breadpayments.com *.rbcpayplan.com *.breadgateway.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klevu.com *.ksearchnet.com *.livechatinc.com *.text.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.luckyorange.net *.crazyegg.com api.livechatinc.com *.mouseflow.com *.payfabric.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src *.certcapture.com *.livechatinc.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.fontawesome.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors self www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com www.gstatic.com apis.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.fontawesome.com https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://td.doubleclick.net/ https://www.google.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com https://via.placeholder.com https://www.google.ca https://cdn-cookieyes.com store.paradoxlabs.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ chimpstatic.com downloads.mailchimp.com *.list-manage.com https://ws1.postescanada-canadapost.ca https://www.cookieyes.com https://cdn-cookieyes.com *.authorize.net https://www.google.com https://www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com downloads.mailchimp.com *.fontawesome.com https://ws1.postescanada-canadapost.ca https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://adservice.google.com https://stats.g.doubleclick.net https://log.cookieyes.com https://cdn-cookieyes.com ws1.postescanada-canadapost.ca *.authorize.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https:; connect-src https: wss:; font-src https: data:; frame-src https:; img-src https: data:; media-src https:; object-src https:; script-src 'unsafe-inline' 'unsafe-eval' https: data: blob:; style-src 'unsafe-inline' https:; report-uri https://www.internet-allstars.de/csp-violation-ezmd9dpdxv7nb0ecejb9/ 1
object-src 'none';base-uri 'self';script-src 'nonce-PtTvQhFdzfEaBGOpruzDiA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net 'self' data: https://fonts.gstatic.com/s/oswald/ https://tridev-website.azureedge.net https://trilive-website.azureedge.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com landofcoder.com *.weltpixel.com https://www.google.com/recaptcha/api2/bframe https://www.google.com/recaptcha/api2/anchor https://sidebar.bugherd.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com www.apptrian.com https://firebasestorage.googleapis.com *.hsforms.net *.hsforms.com 'self' data: https://via.placeholder.com/80.png https://tridev-website.azureedge.net https://trilive-website.azureedge.net https://www.google-analytics.com https://d2iiunr5ws5ch1.cloudfront.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com landofcoder.com *.avada.io *.shopify.com *.hsforms.net *.hsforms.com *.gstatic.com https://www.googletagmanager.com tagmanager.google.com https://www.googletagmanager.com/ https://www.gstatic.com/recaptcha/releases/ https://www.google-analytics.com/ https://cdn.inspectlet.com http://cdn.inspectlet.com https://tridev-website.azureedge.net https://trilive-website.azureedge.net https://sidebar.bugherd.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net *.googleapis.com *.gstatic.com tagmanager.google.com https://fonts.googleapis.com/css https://tridev-website.azureedge.net https://trilive-website.azureedge.net 'self' 'unsafe-inline'; object-src landofcoder.com 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com https://tridev-website.azureedge.net https://trilive-website.azureedge.net https://sidebar.bugherd.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.apptrian.com landofcoder.com https://get.geojs.io *.avada.io t.elasticsuite.io *.hsforms.net *.hsforms.com https://www.google-analytics.com https://tridev-website.azureedge.net https://trilive-website.azureedge.net http://hn.inspectlet.com/ https://www.google-analytics.com/ https://sessions.bugsnag.com/ ws-mt1.pusher.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-K-XjW6axXBG3RJ6VP_B-Jg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' https: 'unsafe-inline' 'unsafe-eval' http://www.musicimpressions.de; img-src *; report-uri /csp_log.php 1
default-src 'self';     script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://pagead2.googlesyndication.com https://securepubads.g.doubleclick.net https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://partner.googleadservices.com https://adservice.google.com https://fundingchoicesmessages.google.com https://www.google.com https://cse.google.com https://www.gstatic.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google;     style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.google.com;     img-src 'self' data: https:;     font-src 'self' data: https://fonts.gstatic.com;     connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://www.google.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google;     frame-src https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://www.google.com https://cse.google.com https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google;     object-src 'none';     base-uri 'self';     form-action 'self' https://www.google.com;     frame-ancestors 'self';     report-uri /csp-report.php 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https:; worker-src 'self' blob: https:; media-src 'self' data: blob: https:; object-src 'none'; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https:; upgrade-insecure-requests; report-uri https://bikeera.com/wp-json/csp-report/v1/collect; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.klevu.com *.ksearchnet.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://*.svea.com https://*.vipps.no https://*.trustly.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com https://www.googletagmanager.com/ https://*.svea.com *.yotpo.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com *.klevu.com *.ksearchnet.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com chimpstatic.com downloads.mailchimp.com *.list-manage.com js.klevu.com *.ksearchnet.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ https://*.svea.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com *.klevu.com *.ksearchnet.com *.yotpo.com *.googleapis.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.klevu.com *.ksearchnet.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://98539da5-eb30-4879-bf8d-470fc3d3a7d5.sansec.watch/; report-to report-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-h233VDxei3vl1roRIgVLCA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-Zz064m/SURuBDrCLOkUIbobtH2M=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
worker-src blob:; font-src fonts.gstatic.com *.kxcdn.com *.fontawesome.com *.gstatic.com https://fonts.gstatic.com 'self' data: data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ facebook.com www.facebook.com *.kxcdn.com youtube.com www.youtube.com platform.twitter.com google.com *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com https://player.vimeo.com https://www.youtube-nocookie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com scontent.cdninstagram.com *.kxcdn.com *.twitter.com *.googleapis.com google.com *.gstatic.com blob: https://updates.themepunch.tools http://updates.themepunch.tools https://updates.themepunch-ext-a.tools http://updates.themepunch-ext-a.tools https://updates.themepunch-ext-b.tools http://updates.themepunch-ext-b.tools https://dev.sliderrevolution.com https://revolution.themepunch.com http://revolution5.themepunch.com http://pbs.twimg.com https://pbs.twimg.com http://scontent.cdninstagram.com https://img.youtube.com http://live.staticflickr.com https://live.staticflickr.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com google.com *.gstatic.com cdn.ampproject.org connect.facebook.net www.googletagmanager.com googletagmanager.com *.kxcdn.com platform.twitter.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com cdn.dnky.co webchat.dotdigital.com player.vimeo.com *.youtube.com https://player.vimeo.com https://www.youtube.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com; style-src *.adobe.com *.googleapis.com google.com *.kxcdn.com *.gstatic.com cdn.dnky.co webchat.dotdigital.com *.fontawesome.com https://fonts.googleapis.com http://fonts.googleapis.com unsafe-inline 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com blob: 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com https://www.paypal.com/xoplatform/logger/api/logger cdn.ampproject.org *.kxcdn.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com https://fonts.googleapis.com https://fonts.gstatic.com https://api.weatherbit.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com 'self' 'unsafe-inline' https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com; child-src assets.braintreegateway.com c.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri http://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
default-src 'self' https://cuatro.sim-cdn.nl; img-src * data: blob:; style-src * 'unsafe-inline' blob: https://cuatro.sim-cdn.nl https://fonts.googleapis.com; font-src 'self' data: https://fonts.bunny.net https://fonts.gstatic.com https://cuatro.sim-cdn.nl https://cuatro.sim-cdn-acceptatie.nl https://cuatro.sim-cdn-test.nl; script-src 'nonce-ZTA2NzFjNmQtYWU3Yi00M2I4LTlmYTMtYmI1Y2ZhN2E2ZTk0' 'strict-dynamic' 'report-sample'; connect-src *; form-action 'self'; media-src https://*.readspeaker.com https://*.streamlock.net https://storage.googleapis.com https://scribit-pro-hosting.storage.googleapis.com https://scribit-pro.storage.googleapis.com https://app.talkjs.com 'self' blob:; frame-src *; frame-ancestors 'self' https://*.polly.help; worker-src * 'unsafe-inline' blob:; report-uri /api/csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://challenges.cloudflare.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://comparateur.alloforfait.fr https://go.alloforfait.fr https://api.alloforfait.fr https://www.google-analytics.com https://region1.google-analytics.com https://*.google-analytics.com; frame-src 'self' https://challenges.cloudflare.com https://www.youtube.com https://www.youtube-nocookie.com; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /__csp-report 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.stripe.com https://va.vercel-scripts.com https://browser.sentry-cdn.com https://geowidget.inpost.pl; style-src 'self' 'unsafe-inline' https://geowidget.inpost.pl; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https://*.supabase.co https://*.supabase.in wss://*.supabase.co https://api.stripe.com https://*.ingest.sentry.io https://api.anthropic.com https://geowidget.inpost.pl https://api-shipx-pl.easypack24.net; frame-src 'self' https://js.stripe.com https://hooks.stripe.com https://checkout.stripe.com; frame-ancestors 'self' https://*.ecomfly.shop https://ecomfly.shop https://*.ecomfly.shop https://ecomfly.shop; form-action 'self'; base-uri 'self'; object-src 'none'; report-uri /api/csp-report 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; upgrade-insecure-requests 1
default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
default-src 'self'; script-src https://mc.yandex.ru 'unsafe-eval' 'unsafe-inline' 'report-sample' 'self' https://cdn.gpeople.online https://www.google.com/ https://www.gstatic.com; style-src 'unsafe-inline' 'report-sample' 'self' https://cdn.gpeople.online; object-src 'none'; connect-src https://mc.yandex.ru 'self' https://cdn.gpeople.online https://okr.sbdv.ru wss://vps.gpeople.online https://web-telemetry.gpeople.online https://sentry-api.gpeople.online; font-src 'self' data: https://cdn.gpeople.online; frame-src https://mc.yandex.ru 'self' blob: https://www.google.com/; img-src https://mc.yandex.ru 'self' data: https://cdn.gpeople.online https://s-dt2.cloud.edgecore.ru; manifest-src 'self' https://cdn.gpeople.online; media-src 'self'; frame-ancestors http://*.webvisor.com http://webvisor.com https://*.webvisor.com https://webvisor.com https://metrika.yandex.ru 'self' https://www.speechpro.ru; worker-src 'none'; child-src https://mc.yandex.ru 'self' blob:; base-uri 'self'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com https://fonts.gstatic.com *.fontawesome.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net *.cloudfront.net *.fonts.googleapis.com data: *.cloudflare.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com airwallex.com *.airwallex.com google.com *.google.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://seo.mageplaza.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com self www.google.com *.meetanshi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com checkout.airwallex.com checkout-demo.airwallex.com h.online-metrix.net/ static-demo.airwallex.com pci-api-demo.airwallex.com demo-pacybsmock.airwallex.com imgs.signifyd.com airwallex.com *.airwallex.com *.cdn-apple.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com www.gstatic.com apis.google.com *.meetanshi.com *.addthis.com *.pinterest.com https://secure.2checkout.com https://2pay-js.2checkout.com https://secure.avangate.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com *.yotpo.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net google.com *.online-metrix.net/ checkout.airwallex.com imgs.signifyd.com checkout-demo.airwallex.com airwallex.com *.airwallex.com *.google.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.gstatic.com *.googleapis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com magefan.com cm.magefan.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.doubleclick.net *.googletagmanager.com https://firebasestorage.googleapis.com meetanshi.com *.cloudfront.net bat.bing.com *.facebook.com analytics.twitter.com t.co *.adroll.com *.google.co.in *.bidswitch.net pixel.tapad.com idsync.rlcdn.com dsum-sec.casalemedia.com pixel.rubiconproject.com sync.outbrain.com us-u.openx.net ups.analytics.yahoo.com image2.pubmatic.com sync.taboola.com ib.adnxs.com eb2.3lift.com match.adsrvr.org segments.company-target.com zdbb.net secure.adnxs.com *.reson8.com ml314.com *.kargo.com *.scorecardresearch.com sync-tm.everesttech.net match.prod.bidr.io *.turn.com pm.w55c.net *.rfihub.com tile.openstreetmap.org *.cloudflare.com *.cdn.klarna.com *.s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.addthis.com *.pinterest.com *.cdninstagram.com https://secure.2checkout.com https://2pay-js.2checkout.com https://secure.avangate.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com checkout.airwallex.com checkout-demo.airwallex.com h.online-metrix.net/ static-demo.airwallex.com static.airwallex.com cdn-scripts.signifyd.com bws-demo.airwallex.com bws.airwallex.com imgs.signifyd.com h64.online-metrix.net airwallex.com *.airwallex.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.cardinaltrusted.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ chimpstatic.com mcjs.prd.a.intuit.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.google.com.ua *.google.co.uk *.google.nl *.google.be *.google.de *.google.it *.google.fr *.googletagmanager.com *.doubleclick.net *.avada.io *.shopify.com *.meetanshi.com *.cloudfront.net bat.bing.com connect.facebook.net static.hotjar.com static.zdassets.com v2.zopim.com platform.twitter.com static.ads-twitter.com *.adroll.com *.googleadservices.com *.addthis.com *.moatads.com *.addthisedge.com *.facebook.com *.pinterest.com *.instagram.com https://secure.2checkout.com https://2pay-js.2checkout.com https://secure.avangate.com *.cloudflare.com *.yotpo.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com downloads.mailchimp.com *.googleapis.com *.googletagmanager.com *.fontawesome.com *.google.com *.gstatic.com https://fonts.bunny.net *.cloudfront.net *.yotpo.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com checkout.airwallex.com checkout-demo.airwallex.com h.online-metrix.net/ bws-demo.airwallex.com bws.airwallex.com api-demo.airwallex.com api.airwallex.com o11y-demo.airwallex.com o11y.airwallex.com imgs.signifyd.com airwallex.com *.airwallex.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.cardinaltrusted.com *.googleapis.com form-assets.mailchimp.com *.intuit.com *.a.intuit.com mcjs.prd.a.intuit.com chimpstatic.com *.amazonaws.com *.doubleclick.net *.googlesyndication.com https://www.merchant-center-analytics.goog http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io *.meetanshi.com *.cloudfront.net bat.bing.com ekr.zdassets.com wss://widget-mediator.zopim.com *.adroll.com stats.g.doubleclick.net *.cloudflare.com *.addthis.com *.graph.instagram.com *.yotpo.com 'self' 'unsafe-inline'; child-src airwallex.com *.airwallex.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src airwallex.com *.airwallex.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://plumrocket.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.meetanshi.com meetanshi.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.meetanshi.com meetanshi.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://plumrocket.com cashier1.uat.useepay.com secure-api.useepay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.paypal.com *.typekit.net *.gstatic.com https://firebasestorage.googleapis.com *.meetanshi.com meetanshi.com https://meetanshi.com/media/logo.png www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ s7.addthis.com *.avada.io *.shopify.com player.vimeo.com *.meetanshi.com meetanshi.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com cashier.useepay.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com ekr.zdassets.com/ https://get.geojs.io *.avada.io *.meetanshi.com meetanshi.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com places.googleapis.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
script-src 'self' 'nonce-/yC1wL/g8/a2ahOwaAqsZCZK+7A=' https://www.nspop.dk https://nspopdev.nspop.dk; report-uri /rest/csp/latest/csp-report; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.mxpnl.com https://js.hs-scripts.com https://js.hsforms.net https://js.hs-analytics.net https://js.hs-banner.com https://js.hscollectedforms.net https://d.default.com https://import-cdn.default.com https://snap.licdn.com https://connect.facebook.net https://www.redditstatic.com https://cdn.factors.ai https://cdn.unifyintent.com https://js.zi-scripts.com; script-src-elem 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com https://cdn.mxpnl.com https://js.hs-scripts.com https://js.hsforms.net https://js.hs-analytics.net https://js.hs-banner.com https://js.hscollectedforms.net https://d.default.com https://import-cdn.default.com https://snap.licdn.com https://connect.facebook.net https://www.redditstatic.com https://cdn.factors.ai https://cdn.unifyintent.com https://js.zi-scripts.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https://assets.commenda.io https://wp.commenda.io https://www.commenda.io https://uploads.productlane.com https://*.googleusercontent.com https://*.wp.com https://*.gravatar.com https://www.google-analytics.com https://px.ads.linkedin.com https://www.facebook.com https://alb.reddit.com https://www.google.com https://www.googletagmanager.com https://ws.zoominfo.com; font-src 'self'; connect-src 'self' https://assets.commenda.io https://api-eu.mixpanel.com https://www.google-analytics.com https://region1.google-analytics.com https://*.hubspot.com https://*.hsforms.com https://api.commenda.io https://d.default.com https://forms.default.com https://nucleus.default.com https://browser-intake-datadoghq.com https://px.ads.linkedin.com https://api.factors.ai https://api.unifyintent.com https://*.facebook.com https://*.reddit.com https://www.google.com https://ws.zoominfo.com https://js.zi-scripts.com; frame-src 'self' https://d.default.com https://*.default.com https://app.hubspot.com https://meetings-na2.hubspot.com https://td.doubleclick.net https://demo.arcade.software https://www.youtube-nocookie.com https://www.youtube.com; media-src 'self' https://assets.commenda.io; object-src 'none'; base-uri 'self'; form-action 'self' https://*.hubspot.com; frame-ancestors 'none'; upgrade-insecure-requests 1
font-src fonts.gstatic.com use.typekit.net *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com webcachex-eu.datareporter.eu https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com *.googlesyndication.com mailworx.marketingsuite.info 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://*.google.com *.doubleclick.net *.facebook.com *.googlesyndication.com https://hcaptcha.com *.elmag.at *.elmag.de *.elmag.eu challenges.cloudflare.com https://*.hcaptcha.com https://challenges.cloudflare.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io 'self' data: https://*.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.googlesyndication.com *.roeye.com *.google.com *.googleapis.com mailworx.marketingsuite.info https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://firebasestorage.googleapis.com *.alothemes.com *.magepow.com maps.gstatic.com maps.googleapis.com maps.google.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net https://*.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.googlesyndication.com *.jsdelivr.net jquery.sellxed.com translate.google.com *.googleapis.com mailworx.marketingsuite.info eu-api.friendlycaptcha.eu https://hcaptcha.com webcache.datareporter.eu webcache-eu.datareporter.eu webcachex-eu.datareporter.eu challenges.cloudflare.com https://*.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://*.hcaptcha.com https://challenges.cloudflare.com *.disqus.com *.avada.io *.shopify.com *.alothemes.com *.magepow.com maps.googleapis.com nominatim.openstreetmap.org https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com cdn.jsdelivr.net mailworx.marketingsuite.info webcache.datareporter.eu maxcdn.bootstrapcdn.com webcache-eu.datareporter.eu https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com https://fonts.bunny.net *.alothemes.com *.magepow.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.google-analytics.com *.facebook.com *.facebook.net https://*.google.com *.doubleclick.net *.googlesyndication.com *.googleapis.com https://hcaptcha.com eu-api.friendlycaptcha.eu webcache-eu.datareporter.eu swarmcrawler.datareporter.eu c.datareporter.eu https://ipinfo.io https://*.gstatic.com https://*.googleapis.com https://*.hcaptcha.com https://get.geojs.io *.avada.io *.alothemes.com *.magepow.com maps.googleapis.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://partner.googleadservices.com https://tpc.googlesyndication.com https://www.google.com https://cdn.onesignal.com https://www.instagram.com https://platform.instagram.com https://connect.facebook.net https://assets.juicer.io https://www.juicer.io; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.instagram.com https://assets.juicer.io; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://*.onesignal.com https://onesignal.com https://securepubads.g.doubleclick.net https://pagead2.googlesyndication.com https://critiques.she.com https://critiquesadmin.she.com https://www.juicer.io; frame-src 'self' https://widgets.critiques.she.com https://www.youtube.com https://www.youtube-nocookie.com https://www.instagram.com https://www.facebook.com https://www.googletagmanager.com https://td.doubleclick.net https://googleads.g.doubleclick.net https://securepubads.g.doubleclick.net https://tpc.googlesyndication.com https://*.juicer.io; media-src 'self' https: blob:; worker-src 'self' blob: 1
object-src 'none';base-uri 'self';script-src 'nonce-xfq0AMVfIQJ9Y6xehrMtvQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'report-sample'; style-src 'self' 'report-sample'; img-src 'self' data:; font-src 'self'; connect-src 'self'; frame-ancestors 'self'; base-uri 'self'; object-src 'none'; report-uri /wp-json/csp-logger/v1/report; report-to csp-endpoint 1
object-src 'none';base-uri 'self';script-src 'nonce-cIkZ6YvqvJRX8QISADQm6g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
script-src 'nonce-ie-6ZGZLnqOk1xcB5_R0oQ' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/static-on-bigtable; base-uri 'none' 1
default-src 'self' https://cdn.cookielaw.org; base-uri 'self'; script-src 'self' 'nonce-TAWAw3r6mWxBA37uyJ0Sxg==' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' https://stats.wp.com https://cdn.cookielaw.org https://rs.fullstory.com ; font-src 'self' data: fonts.gstatic.com; style-src 'self' 'nonce-TAWAw3r6mWxBA37uyJ0Sxg==' fonts.googleapis.com https://googletagmanager.com https://tagmanager.google.com; frame-src https://*.googletagmanager.com 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com *.alothemes.com *.magepow.com data: checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.tabby.ai cdn.tabby.sa fonts.googleapis.com storage.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.addthis.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * checkout.tabby.ai checkout.tabby.sa *.googletagmanager.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com *.alothemes.com *.magepow.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.tabby.ai cdn.tabby.sa fonts.googleapis.com storage.googleapis.com *.tamara.co *.googletagmanager.com ssl.gstatic.com www.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.disqus.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.alothemes.com *.magepow.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.segment.com connect.facebook.net www.google.com cdn.sift.com score.jcsc.online seondf.com deviceinf.com getdeviceinf.com *.tamara.co *.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net *.alothemes.com *.magepow.com assets.braintreegateway.com *.tamara.co tagmanager.google.com fonts.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.tamara.co 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.alothemes.com *.magepow.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com checkout.tabby.ai checkout.tabby.sa widgets.tabby.ai widgets.tabby.sa cdn.segment.com api.segment.com api.segment.io api.amplitude.com *.seondfresolver.com *.deviceinfresolver.com *.getdeviceinfresolver.com *.tamara.co *.googletagmanager.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.seondnsresolve.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-nQHeMpcMP99Tlv9cBYu0Yg' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.fontawesome.com https://fonts.bunny.net 'self' data: *.hotjar.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.ewaypayments.com *.eway.com.au *.facebook.com www.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.hubspot.com *.facebook.com www.facebook.com js.mollie.com vars.hotjar.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maps.gstatic.com *.googleapis.com *.ggpht.com *.hubspot.com *.facebook.com px.ads.linkedin.com analytics.tiktok.com www.google.com.au www.facebook.com https://firebasestorage.googleapis.com https://www.mollie.com *.hsforms.net *.hsforms.com 'self' data: https://maps.gstatic.com *.clarity.ms bat.bing.com bat.bing.net *.hotjar.com *.hotjar.io data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ maps.googleapis.com *.hs-scripts.com *.hs-analytics.net *.hs-banner.com *.hscollectedforms.net *.usemessages.com *.hsadspixel.net connect.facebook.net snap.licdn.com analytics.tiktok.com *.hsappstatic.net https://static.cloudflareinsights.com *.facebook.net *.avada.io *.shopify.com js.mollie.com pay.google.com applepay.cdn-apple.com *.hsforms.net *.hsforms.com *.gstatic.com www.clarity.ms scripts.clarity.ms bat.bing.com bat.bing.net *.hotjar.com *.hotjar.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com *.fontawesome.com https://fonts.bunny.net *.googleapis.com *.gstatic.com *.hotjar.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.gstatic.com data: *.hscollectedforms.net *.hubspot.com *.hubapi.com connect.facebook.net *.facebook.com px.ads.linkedin.com analytics.tiktok.com *.hsappstatic.net https://static.cloudflareinsights.com https://cloudflareinsights.com www.facebook.com graph.facebook.com https://get.geojs.io *.avada.io t.elasticsuite.io *.hsforms.net *.hsforms.com *.clarity.ms bat.bing.com bat.bing.net *.hotjar.com *.hotjar.io wss://*.hotjar.com ad.doubleclick.net 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net https://fonts.gstatic.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://seo.mageplaza.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com widgets.sandbox.afterpay.com widgets.sandbox.clearpay.co.uk c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com zip.co static.zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://static.afterpay.com https://site-assets.afterpay.com/ https://scontent.cdninstagram.com https://firebasestorage.googleapis.com https://meetanshi.com/media/logo.png www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com maps.gstatic.com t.zip.co static.zipmoney.com.au static.zip.co data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://portal.sandbox.clearpay.co.uk https://portal.clearpay.co.uk https://portal.sandbox.afterpay.com https://portal.afterpay.com https://static.afterpay.com *.squarecdn.com https://hbiq.net *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com maps.googleapis.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com static.zipmoney.com.au static.zip.co zip.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com static.afterpay.com/ *.squarecdn.com *.fontawesome.com https://fonts.bunny.net *.googleapis.com *.addtoany.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com static.afterpay.com static.sandbox.afterpay.com *.squarecdn.com https://hbiq.net https://iq.afterpay-beta.com https://iq.afterpay.com *.clearpay.co.uk https://graph.instagram.com https://get.geojs.io *.avada.io http://dpm.demdex.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src https://cdn.riverty.design/ *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com https://fonts.bunny.net https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action uc8.tv *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.multisafepay.com https://pay.google.com 'self'; frame-src *.youtube.com *.youtube-nocookie.com player.vimeo.com https://www.google.com/recaptcha/ bid.g.doubleclick.net uc8.tv https://documents.riverty.com/ www.google.com *.google.com *.doubleclick.net *.facebook.com *.multisafepay.com https://pay.google.com https://*.kiyoh.com https://*.googletagmanager.com *.weltpixel.com www.xtento.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: *.vimeocdn.com i.ytimg.com *.youtube.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com https://cdn.myafterpay.com/ uc8.tv https://cdn.riverty.design/ 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com *.multisafepay.com https://*.verfbestelsite.nl https://*.thecoatingshop.nl https://*.thecoatingshop.de https://img.youtube.com https://firebasestorage.googleapis.com https://redchamps.com maps.gstatic.com ts.tradetracker.net www.magmodules.eu https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.reddit.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src *.newrelic.com *.nr-data.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com uc8.tv https://cdn.myafterpay.com/ https://cdn.bnpl.riverty.io/ www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.multisafepay.com https://pay.google.com https://instant.page s7.addthis.com *.avada.io maps.googleapis.com tm.tradetracker.net https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com https://www.googletagmanager.com tagmanager.google.com *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.multisafepay.com *.fontawesome.com https://fonts.bunny.net https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src https://*.verfbestelsite.nl https://*.thecoatingshop.nl https://*.thecoatingshop.de 'self' 'unsafe-inline'; connect-src *.newrelic.com *.nr-data.net vimeo.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com uc8.tv https://cdn.myafterpay.com/ https://documents.myafterpay.com/ https://documents.riverty.com/ https://www.afterpay.nl/ https://cdn.bnpl.riverty.io/ https://trace-api.newrelic.com/ https://distributions.crowdin.net/ https://api.crowdin.com/ *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.multisafepay.com https://google.com https://*.google.com https://*.googlesyndication.com ekr.zdassets.com/ https://get.geojs.io *.avada.io *.trustedshops.com *.etrusted.com https://integrations.etrusted.site *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
upgrade-insecure-requests 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com https://www.gstatic.com https://fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.authorize.net *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.certcapture.com *.authorize.net 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.certcapture.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com *.authorize.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * data: www.youtube.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.googleapis.com https://*.gstatic.com *.certcapture.com https://*.google.com https://*.googleapis.com https://*.googleusercontent.com *.trackedlink.net https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.adobedtm.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://rum.hlx.page *.googleapis.com https://*.gstatic.com *.certcapture.com https://*.google.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.authorize.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.youtube.com player.vimeo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com webchat.dotdigital.com webchat.staging.dotdigital.com https://static.klaviyo.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.amazonaws.com *.googleapis.com *.google.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.certcapture.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.authorize.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com cdn.plyr.io noembed.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net *.cloudflare.com *.googleapis.com *.zopim.com *.gstatic.com *.tawk.to *.jsdelivr.net media.flixfacts.com 'unsafe-inline' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; frame-ancestors *.hana.ondemand.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.google.com *.nosto.com *.issuu.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.criteo.net *.criteo.com *.addthis.com *.facebook.com webchat.jdg.co.za *.jdg.co.za 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com 'unsafe-inline' data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com *.klevu.com *.ksearchnet.com https://firebasestorage.googleapis.com *.cloudflare.com *.google.com *.google.lv *.google.co.za *.google.com.na *.google.na *.gstatic.com *.zopim.com *.nosto.com *.hotjar.com *.hotjar.io *.googletagmanager.com *.zopim.io *.sfdr.co sfdr.co *.tawk.to tawk.link *.tawk.link *.addthis.com *.jsdelivr.net *.facebook.com *.azurewebsites.net maps.googleapis.com app.mobicredwidget.co.za amcglobal.sc.omtrdc.net media.flixcar.com rt.flix360.com assets.secure.checkout.visa.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://cdn.polyfill.io https://browser.sentry-cdn.com js.klevu.com *.ksearchnet.com *.avada.io *.shopify.com *.zopim.com *.videoly.co sfdr.co *.cnetcontent.com *.cloudfront.net *.newrelic.com *.klevu.com *.google.com *.google.lv *.google.co.za *.google.com.na *.google.na *.cloudflare.com *.cloudflareinsights.com *.nosto.com *.hotjar.com *.googletagmanager.com *.criteo.net *.criteo.com *.sfdr.co *.tawk.to *.tawk.link *.jsdelivr.net *.addthis.com *.addthisedge.com *.moatads.com *.mouseflow.com *.nr-data.net *.facebook.com *.what3words.com maps.googleapis.com commerce.adobedtm.com magento-recs-sdk.adobe.net static.zdassets.com app.mobicredwidget.co.za www.gstatic.com connect.facebook.net bam.nr-data.net js.testfreaks.com media.flixfacts.com media.flixcar.com security-hub.vaimo.network 'self' 'unsafe-inline' 'unsafe-eval'; style-src downloads.mailchimp.com *.klevu.com *.ksearchnet.com *.fontawesome.com https://fonts.bunny.net *.cloudflare.com *.googleapis.com *.jsdelivr.net www.gstatic.com media.flixcar.com 'unsafe-inline' data: https://statsjs.klevu.com https://js.klevu.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.zdassets.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://*.ingest.sentry.io *.klevu.com *.ksearchnet.com https://get.geojs.io *.avada.io *.testfreaks.com *.google.com *.nosto.com *.hotjar.io *.hotjar.com *.doubleclick.net *.zendesk.com *.paypal.com *.tawk.to wss://*.tawk.to *.tawk.link *.addthis.com *.addthisedge.com *.nr-data.net *.what3words.com *.googleapis.com vsb111.tawk.to ekr.zdassets.com api.magento.com commerce.adobedc.net app.mobicredwidget.co.za wss://widget-mediator.zopim.com bam.nr-data.net *.googletagmanager.com security-hub.vaimo.network 'unsafe-eval' data: 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://lareetz.com https://www.googletagmanager.com https://www.google-analytics.com https://js.stripe.com https://m.stripe.network https://js.klarna.com https://*.klarna.com https://widget.trustpilot.com https://invitejs.trustpilot.com https://s.kk-resources.com https://www.paypal.com https://*.paypal.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src 'self' https://js.stripe.com https://*.stripe.com https://*.klarna.com https://widget.trustpilot.com https://www.paypal.com https://*.paypal.com https://www.googletagmanager.com; object-src 'none'; base-uri 'self'; form-action 'self' https://*.paypal.com https://*.klarna.com https://*.stripe.com 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com fonts.googleapis.com *.googleapis.com data: https://www.googletagmanager.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net https://geowidget.easypack24.net 'self' data: https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * https://geowidget-app.inpost.pl/ https://sandbox-easy-geowidget.easypack24.net/ https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io maps.googleapis.com maps.gstatic.com *.googleapis.com https://images.unsplash.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.hsforms.net *.hsforms.com 'self' data: https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com https://www.ssa.gov data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com tagmanager.google.com https://www.googletagmanager.com https://maps.googleapis.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.avada.io *.shopify.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://geowidget.easypack24.net *.easypack24.net *.inpost.pl *.openstreetmap.org *.hsforms.net *.hsforms.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com https://www.ssa.gov https://static.cloudflareinsights.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com https://fonts.googleapis.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com https://geowidget.easypack24.net https://geowidget.inpost.pl *.gstatic.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com https://www.ssa.gov 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://geowidget.easypack24.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://maps.googleapis.com https://player.vimeo.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.easypack24.net *.inpost.pl *.openstreetmap.org t.elasticsuite.io *.hsforms.net *.hsforms.com *.google-analytics.com https://secure.tpay.com https://secure.sandbox.tpay.com https://tpay.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' https://assets.mailerlite.com https://www.clarity.ms; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://elasticsearch.sputnik.pl https://*.clarity.ms https://*.mailerlite.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com; frame-ancestors 'self'; form-action 'self'; base-uri 'self'; object-src 'none' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://maps.googleapis.com https://app.mailjet.com https://www.google.com https://www.gstatic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https:; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://maps.googleapis.com https://www.google.com; frame-src 'self' https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.facebook.com; media-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-0C4MZuJKNZX/8H/i6HVks1ad1mM=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com cash-f.squarecdn.com *.fontawesome.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.googleapis.com *.zopim.com *.zopim.io *.cookielaw.org *.bs-distribution.com acc-shop.bs-distribution.com *.onetrust.com *.b2b-nfinity.com *.adobe.com *.bunny.net *.bootstrapcdn.com *.googletagmanager.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com * *.twitter.com *.facebook.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com * https://www.youtube.com http://www.sandbox.paypal.com *.twitter.com *.facebook.com *.b2b-nfinity.com *.googleapis.com *.magentocommerce.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: * *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.bing.com *.zopim.com *.zopim.io *.doubleclick.net *.google.com *.google.co.in *.mastercard.com *.cookielaw.org *.bs-distribution.com acc-shop.bs-distribution.com *.onetrust.com *.linkedin.com t.co *.b2b-nfinity.com *.googleapis.com *.magentocommerce.com *.clarity.ms *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com *.adobe.io *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com *.adyen.com pay.google.com *.payments-amazon.com *.paypal.com *.ratepay.com *.cash.app *.visa.com *.mastercard.com https://rum.hlx.page *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.bing.com *.zopim.com *.zdassets.com *.cookielaw.org *.bs-distribution.com acc-shop.bs-distribution.com *.onetrust.com *.b2b-nfinity.com *.googleapis.com *.magentocommerce.com *.facebook.net *.licdn.com *.ads-twitter.com *.ads-x.com *.clarity.ms *.googletagmanager.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.cash.app *.fontawesome.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.bing.com *.cookielaw.org *.bs-distribution.com acc-shop.bs-distribution.com *.onetrust.com *.b2b-nfinity.com *.magentocommerce.com *.google.com *.googletagmanager.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.zopim.com *.zopim.io *.cookielaw.org *.bs-distribution.com acc-shop.bs-distribution.com *.onetrust.com *.b2b-nfinity.com *.googleapis.com *.gstatic.com *.magentocommerce.com 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com * *.cloudflare.com *.twitter.com *.ads-twitter.com *.ads-x.com *.twimg.com *.zdassets.com *.zopim.com *.zopim.io wss://widget-mediator.zopim.com *.google-analytics.com https://stats.g.doubleclick.net *.cookielaw.org *.bs-distribution.com acc-shop.bs-distribution.com *.onetrust.com *.b2b-nfinity.com *.googleapis.com *.adobe.com *.gstatic.com *.magentocommerce.com *.linkedin.com *.clarity.ms *.googletagmanager.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' https:; frame-src 'self' https:; form-action 'self' https://*.shaparak.ir https://sep.shaparak.ir https://sadad.shaparak.ir https://www.radcom.site https://radcom.site https://core.paystar.ir https://api.paystar.shop https://radcom.co https://www.radcom.co https://mana.radcom.co https://ikc.shaparak.ir https://core.ayriaplatform.com; upgrade-insecure-requests 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://va.vercel-scripts.com https://analytics.ahrefs.com https://www.gstatic.com; img-src 'self' data: blob: https://image.symphonicy.com https://imgproxy.symphonicy.com https://framerusercontent.com https://m.media-amazon.com https://mobile-app-internal-tool-frontend.vercel.app https://*.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://mobile.symphonicy.com https://api.typa.app https://va.vercel-scripts.com https://*.symphonicy.com https://analytics.ahrefs.com https://www.gstatic.com https://fcm.googleapis.com https://fcmregistrations.googleapis.com https://firebaseinstallations.googleapis.com https://*.supabase.co 1
default-src 'self'; script-src 'self' 'unsafe-inline' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; media-src 'self' blob: https:; frame-src 'self' https:; worker-src 'self' blob:; manifest-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri /api/security/csp-report; report-to csp-endpoint 1
connect-src *.analytics.google.com *.google-analytics.com *.googleapis.com *.matomo.cloud *.openstreetmap.org *.stats.g.doubleclick.net *.tolkie.nl *.typekit.net *.umbraco.org analytics.google.com cdnjs.cloudflare.com consent.cookiebot.com embed.email-provider matomoembraceklantportaal.azurewebsites.net matomoembracewin.azurewebsites.net 'self';img-src *.analytics.google.com *.blob.core.windows.net *.cookiebot.com *.google-analytics.com *.googleapis.com *.gstatic.com *.openstreetmap.org *.tolkie.nl *.typekit.net *.umbraco.org api.maptiler.com cdn.jsdelivr.net data: openlayers.org pbs.twimg.com placehold.it 'self' tileserver.embracecloud.nl translate.googleapis.com umbraco.tv umbracoportalsp.azureedge.net umbracoportalsp.blob.core.windows.net umbracowebportalsprod.azureedge.net umbracowebportalsprod.blob.core.windows.net www.google.com www.googletagmanager.com www.gravatar.com www.openlayers.org;style-src *.cloudflare.com *.googleapis.com *.readspeaker.com *.tolkie.nl *.typekit.net openlayers.org 'self' 'unsafe-inline' www.gstatic.com www.openlayers.org;script-src *.cookiebot.com *.google-analytics.com *.googleapis.com *.matomo.cloud *.openstreetmap.org *.readspeaker.com *.tolkie.nl *.typekit.net ajax.aspnetcdn.com cdn.cookie-script cdnjs.cloudflare.com code.jquery.com embed.email-provider matomoembraceklantportaal.azurewebsites.net matomoembracewin.azurewebsites.net openlayers.org 'self' translate.google.com 'unsafe-eval' 'unsafe-inline' www.googletagmanager.com www.openlayers.org;frame-ancestors *.embracecloud.nl 'self';default-src *.googleapis.com *.gstatic.com *.tolkie.nl *.vimeocdn.com *.youtube.com player.vimeo.com secure.ogone.com 'self' www.openstreetmap.org;font-src *.gstatic.com *.tolkie.nl *.typekit.net cdn.faceworks.nl cdnjs.cloudflare.com data: 'self';report-uri /cspreport 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://challenges.cloudflare.com https://eu-assets.i.posthog.com; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self' blob: data: https://*.googleusercontent.com https://images.unsplash.com https://cdn.console.lt https://*.b-cdn.net; connect-src 'self' https://cdn.jsdelivr.net https://eu.i.posthog.com https://eu-assets.i.posthog.com; worker-src 'self' blob:; frame-src https://challenges.cloudflare.com https://www.google.com; object-src 'none'; base-uri 'self'; form-action 'self'; manifest-src 'self' 1
upgrade-insecure-requests ; frame-ancestors *.bytedance.com self *.bytedance.net fanqienovel.com usergrowth.com.cn bytegrowth.com; frame-src bytegrowth.com usergrowth.com.cn fanqienovel.com *.bytedance.net self *.bytedance.com; object-src 'none'; base-uri 'none'; report-to slardar-endpoint; 1
object-src 'none'; script-src 'self' https://mat.kl.ac.at cdn.jsdelivr.net https://cdnjs.cloudflare.com 'unsafe-inline' https://mat.kl.ac.at/; script-src-attr 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline' https://mat.kl.ac.at cdn.jsdelivr.net https://cdnjs.cloudflare.com; style-src 'self' cdn.jsdelivr.net https://cdnjs.cloudflare.com https://use.typekit.net; style-src-attr 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline' https://p.typekit.net cdn.jsdelivr.net https://cdnjs.cloudflare.com https://use.typekit.net; frame-ancestors 'self' 1
script-src 'strict-dynamic' 'nonce-+kccfML9VV5kinNeu6LoSA==' 1
object-src 'none';base-uri 'self';script-src 'nonce-lr7C_LG2u8RTilYbOI2-yA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'nonce-Wp82K6hqnekc6TK7zci6ag==' https://www.googletagmanager.com https://www.google-analytics.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://ade.googlesyndication.com https://adservice.google.com https://connect.facebook.net https://analytics.tiktok.com https://www.clarity.ms https://scripts.clarity.ms https://fast-static.smarketer.de https://amplify.outbrain.com https://snap.licdn.com https://www.paypal.com https://www.paypalobjects.com; style-src 'self' 'nonce-Wp82K6hqnekc6TK7zci6ag==' https://fonts.googleapis.com; style-src-attr 'unsafe-inline'; img-src 'self' data: blob: https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.google.de https://www.google.at https://www.google.ch https://www.google.mk https://www.googleadservices.com https://ad.doubleclick.net https://pagead2.googlesyndication.com https://www.facebook.com https://analytics.tiktok.com https://px.ads.linkedin.com https://www.paypal.com https://www.paypalobjects.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://cct.google https://ad.doubleclick.net https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://www.google.com https://www.google.de https://www.google.at https://www.google.ch https://www.google.mk https://www.facebook.com https://analytics.tiktok.com https://*.clarity.ms https://px.ads.linkedin.com https://amplify.outbrain.com https://fast.smarketer.de https://www.paypal.com; frame-src 'self' https://www.googletagmanager.com https://ad.doubleclick.net https://www.youtube.com https://m.youtube.com https://www.youtube-nocookie.com https://www.facebook.com https://www.paypal.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://www.paypal.com 1
default-src 'self'; frame-src 'self'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval' https://va.vercel-scripts.com https://*.posthog.com https://browser.sentry-cdn.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https:; font-src 'self' data:; connect-src 'self' blob: https://*.supabase.co wss://*.supabase.co https://*.sentry.io https://*.posthog.com https://m.summerengine.com https://api.cloudinary.com https://res.cloudinary.com https://fal.media https://*.fal.media https://va.vercel-scripts.com; media-src 'self' blob: https://res.cloudinary.com https://*.r2.dev; frame-ancestors 'self'; form-action 'self'; base-uri 'self'; object-src 'none' 1
object-src 'none';base-uri 'self';script-src 'nonce-DScozSn-ttDMUEPBm1_rjQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-9J3/04++Jdd2Tqf+C4Z+JocOWII=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
default-src 'self'; base-uri 'self'; object-src 'none'; form-action 'self'; script-src 'self' 'unsafe-inline' https://platform.twitter.com https://connect.facebook.net https://www.instagram.com https://www.tiktok.com https://www.youtube.com https://cdn-v2.p.analitik.bik.gov.tr https://www.googletagmanager.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://www.clarity.ms https://scripts.clarity.ms https://static.cloudflareinsights.com https://cdn.onesignal.com https://api.onesignal.com; style-src 'self' 'unsafe-inline' https://onesignal.com; img-src 'self' data: https://imagedelivery.net https://cdn.gdh.digital https://*.b-cdn.net https://stream.gdh.digital https://sozluk-cdn.gdh.digital https://*.tile.openstreetmap.org https://www.google.com https://www.google.com.tr https://ep1.adtrafficquality.google; font-src 'self' data:; media-src 'self' blob: https://*.b-cdn.net https://cdn.gdh.digital; connect-src 'self' blob: https://*.b-cdn.net https://imagedelivery.net https://cdn.gdh.digital https://cdn-v2.p.analitik.bik.gov.tr https://*.collector.p.analitik.bik.gov.tr https://gdh-bik-sayac.gdh-tech.workers.dev https://*.analytics.google.com https://*.google-analytics.com https://*.googletagmanager.com https://*.clarity.ms https://cloudflareinsights.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://www.google.com https://cdn.onesignal.com https://onesignal.com https://*.onesignal.com; worker-src 'self' blob:; frame-src https://open.spotify.com https://spotify.com https://w.soundcloud.com https://soundcloud.com https://platform.twitter.com https://www.youtube.com https://www.facebook.com https://www.instagram.com https://www.tiktok.com https://www.linkedin.com https://platform.linkedin.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://ep1.adtrafficquality.google https://ep2.adtrafficquality.google https://www.google.com; frame-ancestors 'self' https://cms.gdhdijital.com 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.gstatic.com https://www.google.com https://www.gstatic.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors self www.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com www.gstatic.com apis.google.com players.brightcove.net https://www.google.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://firebasestorage.googleapis.com *.boltdns.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com *.avada.io *.shopify.com players.brightcove.net *.bcove.video *.bcovelive.io https://www.google.com https://www.gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com *.googleapis.com *.google.com *.gstatic.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.boltdns.net *.bcovecdn.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com http://dpm.demdex.net https://www.google.com https://www.gstatic.com https://get.geojs.io *.avada.io edge.api.brightcove.com *.brightcove.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' *.lagerbox.com *.adyen.com *.googletagmanager.com *.google.com *.googleapis.com *.google.de *.google-analytics.com *.doubleclick.net *.googlevideo.com *.gstatic.com *.googlesyndication.com *.youtube.com *.zdassets.com *.linkedin.com static.zdassets.com snap.licdn.com *.bing.com *.facebook.net *.leadinfo.net *.zopim.com *.mycontentbird.io *.zendesk.com *.cookiebot.com *.responseiq.com *.mplat-ppcprotect.com *.mouseflow.com *.blob.core.windows.net *.chatarmin.com *.taggrs.io *.contentsquare.net *.komoot.io; img-src 'self' data: *.lagerbox.com *.adyen.com *.google.com *.google.com.ua *.google-analytics.com *.googletagmanager.com *.google.de *.googleapis.com *.gstatic.com *.linkedin.com *.bing.com *.facebook.net *.facebook.com *.zendesk.com *.cookiebot.com *.responseiq.com *.zdassets.com *.blob.core.windows.net *.chatarmin.com *.taggrs.io *.contentsquare.net *.komoot.io; connect-src 'self' ws: *.lagerbox.com *.adyen.com *.google.com google.com *.google-analytics.com *.google.com.ua *.google.de *.googleadservices.com *.googleapis.com *.gstatic.com *.zendesk.com *.zdassets.com *.mycontentbird.io *.cookiebot.com *.responseiq.com *.leadinfo.net *.leadinfo.com *.linkedin.com *.bing.com *.zopim.com *.mplat-ppcprotect.com *.blob.core.windows.net *.chatarmin.com *.taggrs.io *.contentsquare.net *.komoot.io; 1
default-src 'self'; base-uri 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://js.hs-scripts.com https://js.hscollectedforms.net https://js.hs-banner.com https://js.hs-analytics.net https://js.hubspot.com https://cdn.matomo.cloud https://effectivesoft.matomo.cloud https://fd.cleantalk.org; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.hubspot.com https://*.hubapi.com https://*.hsforms.com https://*.hscollectedforms.net https://*.matomo.cloud https://fd-api.cleantalk.org; frame-src 'self' https://www.googletagmanager.com https://www.google.com https://www.youtube.com https://www.youtube-nocookie.com https://*.hubspot.com https://*.hsforms.com; report-uri /csp-report; 1
font-src www.paypalobjects.com *.revolut.com *.google.com google.com *.cdn-apple.com pay.google.com *.gstatic.com *.zopim.com *.tawk.to maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com *.gstatic.com cw.spex4less.com 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.revolut.com *.google.com *.cdn-apple.com pay.google.com *.gstatic.com widget.trustpilot.com *.online-metrix.net cw.spex4less.com *.tawk.to https://www.googletagmanager.com https://www.googletagmanager.com/ account.fetchify.com www.facebook.com platform.twitter.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com magefan.com cm.magefan.com *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com *.gstatic.com https://images.unsplash.com https://*.spex4less.com https://spex4less.com https://*.jpopticians.com/ https://jpopticians.com/ https://*.googlesyndication.com *.google.pl *.online-metrix.net *.bing.com *.bing.net *.tawk.to https://cdn.jsdelivr.net/emojione/ *.disqus.com www.facebook.com pinterest.com assets.pinterest.com syndication.twitter.com flagpedia.net data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com *.google-analytics.com analytics.google.com *.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com apis.google.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com *.gstatic.com https://maps.googleapis.com widget.trustpilot.com *.bing.com *.bing.net *.wisepops.com cdn.rollbar.com *.spex4less.com spex4less.com *.jpopticians.com jpopticians.com *.cloudflareinsights.com *.cloudflare.com https://*.posthog.com *.s4l.link sibautomation.com *.klaviyo.com cw.spex4less.com *.tawk.to https://cdn.jsdelivr.net/emojione/ cc-cdn.com *.disqus.com connect.facebook.net twitter.com platform.twitter.com cdn.jsdelivr.net maps.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.tawk.to *.spex4less.com cc-cdn.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.revolut.com *.google.com *.cdn-apple.com google.com pay.google.com *.gstatic.com https://maps.googleapis.com https://player.vimeo.com https://*.googlesyndication.com *.google.pl https://*.google.com *.doubleclick.net *.wisepops.com *.spex4less.com *.bing.com *.bing.net cw.spex4less.com *.tawk.to wss://*.tawk.to https://*.posthog.com https://print.test api.craftyclicks.co.uk pcls1.craftyclicks.co.uk cc-cdn.com n8n.s4l.link www.gstatic.com maps.googleapis.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self' https://dashboard.cornix.io; img-src 'self' data: blob: https:; font-src 'self' data:; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn-cookieyes.com https://www.googletagmanager.com https://www.google-analytics.com https://static.cloudflareinsights.com https://static.hotjar.com https://script.hotjar.com https://widget.intercom.io https://js.intercomcdn.com; connect-src 'self' https://dashboard.cornix.io https://cdn-cookieyes.com https://*.cookieyes.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://cloudflareinsights.com https://*.hotjar.com wss://*.hotjar.com https://*.intercom.io wss://*.intercom.io https://*.intercomcdn.com; frame-src 'self' https://dashboard.cornix.io https://dashboard.test.cornix.io https://www.youtube.com https://www.youtube-nocookie.com; media-src 'self' blob: 1
default-src 'self'; script-src 'self' 'nonce-iObMrP1cdxI4M6QBSGvm/w==' 'strict-dynamic' https://www.googletagmanager.com https://www.google-analytics.com https://maps.googleapis.com https://translate.google.com https://translate.googleapis.com https://translate-pa.googleapis.com https://www.gstatic.com https://massh0019.itsahappyclient.com https://welcomehome.masshousing.com https://embed.rewiringamerica.org https://js-agent.newrelic.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://www.gstatic.com https://embed.rewiringamerica.org; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com https://www.rewiringamerica.org; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://maps.googleapis.com https://translate.googleapis.com https://translate-pa.googleapis.com https://bam.nr-data.net https://api.rewiringamerica.org https://content.rewiringamerica.org https://massh0019.itsahappyclient.com https://welcomehome.masshousing.com; worker-src 'self' blob:; frame-src 'self' https://www.googletagmanager.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.google.com https://massh0019.itsahappyclient.com https://welcomehome.masshousing.com; object-src 'none'; base-uri 'self'; form-action 'self'; script-src-attr 'none' 1
object-src 'none';base-uri 'self';script-src 'nonce-FCFTon3Awv4uin1LaJHmrg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
frame-ancestors https://generations.org https://admin.treefortsystems.com; report-uri https://o1003299.ingest.sentry.io/api/5966172/security/?sentry_key=2a13400a30ad4037a8f0cf127af14bff; 1
default-src 'self'; script-src 'self' https://sfs-duesseldorf.metrics.vb-tool.de https://www.google-analytics.com https://www.youtube.com https://spenden.twingle.de 'sha256-4aWCxunKlJTt+nK50KlWpyuitwxSBa31NMcrns8JKlU=' 'sha256-4Q6ewoRGqcXPVNc1v0rjoxi2ABHWzQNrRrZ41CWWwxk=' 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://*.openstreetmap.org https://sfs-duesseldorf.metrics.vb-tool.de https://www.google-analytics.com blob:; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://www.youtube-nocookie.com https://www.youtube.com https://player.vimeo.com https://spenden.twingle.de; connect-src 'self' data: https://*.openstreetmap.org https://sfs-duesseldorf.metrics.vb-tool.de https://www.google-analytics.com https://nominatim.openstreetmap.org https://raw.githubusercontent.com https://spenden.twingle.de https://*.algolia.net https://*.algolianet.com; worker-src 'self' data: https://*.openstreetmap.org https://sfs-duesseldorf.metrics.vb-tool.de https://www.google-analytics.com https://www.youtube.com https://spenden.twingle.de 'sha256-4aWCxunKlJTt+nK50KlWpyuitwxSBa31NMcrns8JKlU=' 'sha256-4Q6ewoRGqcXPVNc1v0rjoxi2ABHWzQNrRrZ41CWWwxk=' blob: 'report-sample'; font-src 'self' data:; style-src-elem 'self' 'sha256-dqUBq7m7uKdaA7ojK5DiC3GYWvp+7YaDzcayJGSJyEo=' 'report-sample'; frame-ancestors 'self'; object-src 'none'; report-uri https://www.marien-hospital.de/@http-reporting?csp=report&requestTime=1789278153061384&requestHash=8f92e6b0fed242f26036fe2bd5f854a2b2ad27d2 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.googleapis.com data: *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.twitter.com *.google.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.youtube.com/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * libs.na.bambora.com gstatic.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.cloudflare.com *.twitter.com *.google-analytics.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.maps.googleapis.com *.trackedlink.net *.maps.gstatic.com maps.googleapis.com *.avada.io js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com libs.na.bambora.com gstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com *.google-analytics.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.googleapis.com *.cloudflare.com *.twitter.com *.twimg.com *.googleadservices.com *.google-analytics.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org *.google.co.in *.maps.gstatic.com *.maps.googleapis.com maps.googleapis.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com libs.na.bambora.com gstatic.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.stripe.com stripe.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.googleapis.com www.magentosale.com ct.pinterest.com https://firebasestorage.googleapis.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.magentosale.com www.pinterest.com s.pinimg.com *.avada.io *.shopify.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.magentosale.com ct.pinterest.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.googleapis.com www.magentosale.com ct.pinterest.com https://get.geojs.io *.avada.io *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com data: *.bootstrapcdn.com *.fontawesome.com www.searchanise.com *.searchserverapi.com 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net *.twitter.com *.facebook.com https://shopline.itau.com.br www.searchanise.com *.searchserverapi.com 'self' 'unsafe-inline'; frame-ancestors *.figueiredomoveis.com.br; frame-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com cdn.dnky.co webchat.dotdigital.com *.jivosite.com/ *.twitter.com *.addthis.com *.facebook.com *.doubleclick.net *.googletagmanager.com *.pinterest.com www.searchanise.com *.searchserverapi.com *.weltpixel.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com www.googleadservices.com www.google-analytics.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com s.ytimg.com *.jivosite.com/ *.cloudflare.com https://www.google.com.br/* *.facebook.com *.pinterest.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com data: *.lightemporium.com *.usercentrics.eu *.google.com.br *.google.com *.googleusercontent.com *.googletagmanager.com *.doubleclick.net *.elfsight.com *.elfsightcdn.com www.google.com www.google.ru www.searchanise.com *.searchserverapi.com s3.amazonaws.com maps.gstatic.com *.gstatic.com 'self' 'unsafe-inline'; script-src assets.adobedtm.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com secure.authorize.net test.authorize.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com video.google.com vimeo.com www.vimeo.com js.authorize.net jstest.authorize.net js.braintreegateway.com cdn-scripts.signifyd.com www.youtube.com r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net cdn.dnky.co api.comapi.com webchat.dotdigital.com *.jivosite.com/ *.cloudflare.com *.googletagmanager.com *.pinimg.com *.doubleclick.net *.facebook.net *.twitter.com *.google-analytics.com *.googleadservices.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.vimeo.com *.youtube.com *.addthis.com *.paypal.com *.paypalobjects.com *.addthisedge.com *.moatads.com *.facebook.com *.elfsight.com *.google.com *.avada.io searchanise-ef84.kxcdn.com s3.amazonaws.com ajax.aspnetcdn.com www.searchanise.com *.searchserverapi.com *.searchanise.com api.amplitude.com maps.googleapis.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src getfirebug.com cdn.dnky.co webchat.dotdigital.com *.jivosite.com/ *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.googletagmanager.com *.bootstrapcdn.com www.searchanise.com *.searchserverapi.com searchanise-ef84.kxcdn.com s3.amazonaws.com ton.twimg.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.jivosite.com/ *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com r1-t.trackedlink.net r2-t.trackedlink.net r3-t.trackedlink.net r1.trackedweb.net r2.trackedweb.net r3.trackedweb.net static.trackedweb.net api.comapi.com webchat.dotdigital.com *.jivosite.com/ wss://chat-ca.jivosite.com wss: *.cloudflare.com *.google-analytics.com *.doubleclick.net *.pinterest.com *.twitter.com *.paypal.com *.twimg.com *.addthis.com *.elfsight.com *.jivosite.com wss://chat-eu1-3.jivosite.com *.facebook.com/tr/ *.googletagmanager.com *.googlesyndication.com *.google.com http://api.itaushopline.com api.amplitude.com stats.g.doubleclick.net www.google-analytics.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src 'self' 'unsafe-inline'; default-src https://apisandbox.redeecommerce.rede.com.br/ https://apiquerysandbox.redeecommerce.rede.com.br/ https://api.redeecommerce.rede.com.br/ https://apiquery.redeecommerce.rede.com.br/ 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri figueiredomoveis.com.br/; report-to report-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-zfFQBVOmvRO6IZmCpYfD4g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com static.klaviyo.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com js.stripe.com consentcdn.cookiebot.com snazzymaps.com *.googletagmanager.com td.doubleclick.net c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com *.limegrow.com imgsct.cookiebot.com chat.askly.me *.google.ee https://public.montonio.com public.montonio.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com chat.askly.me chat.translatewise.com static.hotjar.com script.hotjar.com js.stripe.com *.cookiebot.com static.cloudflareinsights.com *.adform.net analytics.tiktok.com cdn.popupsmart.com *.clarity.ms tags.creativecdn.com public.montonio.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval' 'unsafe-hashes'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.googletagmanager.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com chat.askly.me 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net chat.askly.me wss://sessions.chat.askly.me consentcdn.cookiebot.com googleads.g.doubleclick.net vc.hotjar.io *.google.ee pagead2.googlesyndication.com analytics.tiktok.com cdn.popupsmart.com handler-api.popupsmart.com a.klaviyo.com wss://cspreported.com *.clarity.ms ams.creativecdn.com public.montonio.com *.stripe.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri chat.askly.me 'self' 'unsafe-inline'; 1
frame-ancestors 'self' http://*.royalmarsden.org; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' *.crazyegg.com *.shorthand.com *.stripe.com *.typeform.com https://*.tiktok.com https://*.quantserve.com https://*.quantcount.com *.paypal.com https://vercel.live https://*.googletagservices.com https://*.googlesyndication.com https://*.googleadservices.com https://*.doubleclick.net https://*.ep-mimecast.ads-twitter.com https://*.cdn.civiccomputing.com https://*.google.com https://analytics.shorthand.com https://ads.nextdoor.com https://analytics.twitter.com https://bat.bing.com https://code.jquery.com https://cdn.syndication.twimg.com https://connect.facebook.net https://cdn.fundraiseup.com https://en.twitter.com https://googleads.g.doubleclick.net https://graph.facebook.com https://googletagmanager.com https://js.facebook.com https://m.youtube.com https://platform.twitter.com https://royal-marsden-cancer-charity.shorthandstories.com https://r.bing.com https://static.ads-twitter.com https://script.hotjar.com https://static.hotjar.com https://static.fundraiseup.com https://t.co https://tagmanager.google.com https://use.typekit.net https://www.youtube.com https://www.gstatic.com https://www.google.com https://www.googletagmanager.com; style-src 'self' 'report-sample' 'unsafe-inline' *.crazyegg.com *.typeform.com *.google.com *.bing.com *.typekit.net code.jquery.com fonts.googleapis.com platform.twitter.com ton.twimg.com www.googletagmanager.com; object-src *.googlesyndication.com; child-src 'self' blob: *.crazyegg.com https://vercel.live *.shorthand.com *.typeform.com *.stripe.com *.paypal.com *.facebook.com *.google.com *.doubleclick.net *.googlesyndication.com connect.facebook.net platform.twitter.com www.youtube.com www.googletagmanager.com; base-uri 'self'; form-action 'self' *.facebook.com *.twitter.com *.google.com connect.facebook.net; worker-src 'self' blob: www.google.com; 1
default-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob: *.vetter-pharma.com *.ads.linkedin.com *.cdninstagram.com *.xx.fbcdn.net *.analytics.google.com *.mouseflow.com *.azureedge.net *.dynamics.com *.mapbox.com *.stape.tech vetterphart1.valhalla12.stage.jobs2web.com www.googletagmanager.com www.youtube.com vimeo.com youku.com www.google.com www.google.de pagead2.googlesyndication.com region1.google-analytics.com *.doubleclick.net *.licdn.com bat.bing.com bat.bing.net connect.facebook.net www.facebook.com i.ytimg.com *.linkedin.com www.googleadservices.com *.flockler.com *.flocklr.com *.flockler.app *.cloudflarestream.com *.etracker.com *.etracker.de *.clarity.ms mobile.events.data.microsoft.com customervoice.microsoft.com *.office.net *.redditstatic.com *.teads.tv; report-uri https://www.vetter-pharma.com/de/@http-reporting?csp=report&requestTime=1789281874857546&requestHash=6fb9eb8bb43cf0e4ffed2433abcfa6bdd1a6212e 1
default-src 'self' loccioni.com *.loccioni.com;   img-src * data:;   frame-src *.youtube.com     *.loccioni.com     *.loccioni.com:9300     serviceloccioni.b2clogin.com;   style-src 'self' 'unsafe-inline'     fonts.googleapis.com;   font-src 'self'     fonts.gstatic.com;   script-src 'self' loccioni.com *.loccioni.com 'unsafe-eval' 'nonce-ZvVn_4uTdJNbTTGSIgW7yAAAAJs' 'nonce-aqZJwcmqQldWGPPVx2X_-wAAAE0';   script-src-elem 'self' loccioni.com *.loccioni.com     cdn-cookieyes.com *.googletagmanager.com     *.google-analytics.com *.googleapis.com     'unsafe-inline' 'nonce-ZvVn_4uTdJNbTTGSIgW7yAAAAJs' 'nonce-aqZJwcmqQldWGPPVx2X_-wAAAE0';   connect-src 'self'     wss: loccioni.com *.loccioni.com cdn-cookieyes.com *.cookieyes.com     *.google-analytics.com analytics.google.com *.analytics.google.com     stats.g.doubleclick.net    *.google.it *.googleapis.com     serviceloccioni.b2clogin.com;   report-uri https://sentry.loccioni.com//api/33/security/?sentry_key=c407f8937e802b8c2db6b48b4b6346c4;   report-to csp-endpoint;  1
default-src 'self'; script-src 'self' 'wasm-unsafe-eval' blob: https://us-assets.i.posthog.com https://chatwoot.trenchers.ai; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.trenchers.ai wss://*.trenchers.ai https://api.mainnet-beta.solana.com https://*.helius-rpc.com https://us.i.posthog.com https://us-assets.i.posthog.com https://us.posthog.com https://api-js.mixpanel.com https://auth.privy.io https://*.privy.io wss://*.privy.io https://*.walletconnect.com wss://*.walletconnect.org https://explorer-api.walletconnect.com https://dd.dexscreener.com https://jup.ag https://*.jup.ag https://api.dicebear.com https://unavatar.io https://api.qrserver.com https://ipfs.io https://gateway.pinata.cloud https://dweb.link https://*.onramper.com; frame-src 'self' https://beta.trenchers.ai https://auth.privy.io https://*.privy.io https://*.onramper.com https://*.bubblemaps.io https://app.insightx.network https://alpha.faster100x.com https://cabalspy.xyz https://chatwoot.trenchers.ai; worker-src 'self' blob:; child-src 'self' blob:; media-src 'self' data: blob: https://trenchsharesgwc01.blob.core.windows.net; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; upgrade-insecure-requests 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com applepay.cdn-apple.com stackpath.bootstrapcdn.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net cdnjs.cloudflare.com data: s7.addthis.com v1.addthisedge.com z.moatads.com m.addthis.com graph.facebook.com api-public.addthis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com ext.easyshipping.gr 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com pay.google.com applepay.cdn-apple.com ext.easyshipping.gr stackpath.bootstrapcdn.com s7.addthis.com m.addthis.com v1.addthisedge.com z.moatads.com api-public.addthis.com www.skroutz.gr analytics.skroutz.gr c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com * www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com cdn.klarna.com www.gstatic.com pay.google.com applepay.cdn-apple.com s7.addthis.com v1.addthisedge.com z.moatads.com m.addthis.com stats.g.doubleclick.net stackpath.bootstrapcdn.com api-public.addthis.com www.google.gr *.cdninstagram.com analytics.skroutz.gr *.utils.elfsightcdn.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com www.google.com www.gstatic.com pay.google.com applepay.cdn-apple.com player.vimeo.com ajax.cloudflare.com cdnjs.cloudflare.com stackpath.bootstrapcdn.com maxcdn.bootstrapcdn.com cdn.jsdelivr.net analytics.skroutz.gr s7.addthis.com v1.addthisedge.com m.addthis.com z.moatads.com api-public.addthis.com apps.elfsight.com static.elfsight.com chimpstatic.com 360.bestprice.gr scripts.bestprice.gr pagead2.googlesyndication.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com stackpath.bootstrapcdn.com maxcdn.bootstrapcdn.com cdnjs.cloudflare.com cdn.jsdelivr.net s7.addthis.com v1.addthisedge.com z.moatads.com m.addthis.com graph.facebook.com api-public.addthis.com fonts.gstatic.com www.googletagmanager.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com int-ecommerce.nexi.it coll-ecommerce.nexi.it ecommerce.nexi.it stg-ta.nexigroup.com xpay.nexigroup.com pay.google.com applepay.cdn-apple.com stackpath.bootstrapcdn.com s7.addthis.com v1.addthisedge.com m.addthis.com z.moatads.com api-public.addthis.com *.elfsight.com api.instacloud.io stats.g.doubleclick.net www.bestprice.gr pagead2.googlesyndication.com region1.google-analytics.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gateway.mastercard.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.facebook.com *.instagram.com eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com in-gateway.mastercard.com *.gateway.mastercard.com rakbankpay.gateway.mastercard.com mtf.gateway.mastercard.com test-gateway.mastercard.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com *.instagram.com *.webengage.com *.in.webengage.com https://cdn.moengage.com/ eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com in-gateway.mastercard.com *.gateway.mastercard.com rakbankpay.gateway.mastercard.com mtf.gateway.mastercard.com test-gateway.mastercard.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googletagmanager.com *.facebook.com https://x.adroll.com *.google.co.in https://px.ads.linkedin.com https://tr.snapchat.com https://c.clarity.ms/c.gif https://c.bing.com/c.gif c.webengage.com c.ksa.webengage.com *.in.webengage.com *.moengage.com https://image.moengage.com https://image-eu.moengage.com/ *.tamara.co *.gateway.mastercard.com rakbankpay.gateway.mastercard.com maps.gstatic.com maps.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googletagmanager.com *.instagram.com https://analytics.google.com *.facebook.com *.facebook.net https://static.addtoany.com *.hotjar.com *.adroll.com https://snap.licdn.com https://sc-static.net *.snapchat.com https://www.clarity.ms ssl.widgets.webengage.com cdn.widgets.webengage.com wsdk-files.webengage.com c.webengage.com widgets.ksa.webengage.com wsdk-files.ksa.webengage.com c.ksa.webengage.com *.in.webengage.com https://cdn.moengage.com/webpush/moe_webSdk.min.latest.js https://cdn.moengage.com/webpush/modules/inapp.js https://cdn.moengage.com/webpush/beta/sdk.inapp.cdnHelper.js https://cdn.moengage.com/webpush/releases/serviceworker_cdn.min.latest.js https://cdn.moengage.com/webpush/moe_webSdk_cards.min.latest.js https://cdn.moengage.com/webpush/moe_webSdk_webp.min.latest.js https://app-cdn.moengage.com *.tamara.co s7.addthis.com *.avada.io cdn.jsdelivr.net eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com in-gateway.mastercard.com *.gateway.mastercard.com rakbankpay.gateway.mastercard.com mtf.gateway.mastercard.com test-gateway.mastercard.com maps.googleapis.com maps.gstatic.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.webengage.com *.in.webengage.com https://app-cdn.moengage.com/ https://fonts.bunny.net *.tamara.co *.fontawesome.com cdn.jsdelivr.net maxcdn.bootstrapcdn.com *.gateway.mastercard.com rakbankpay.gateway.mastercard.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com *.tamara.co 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.ipinfo.io www.apptrian.com facebook.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.instagram.com *.analytics.google.com https://analytics.google.com *.facebook.com https://px.ads.linkedin.com https://d.clarity.ms *.webengage.com *.in.webengage.com https://sdk-01.moengage.com/ https://sdk-02.moengage.com/ https://sdk-03.moengage.com/ https://sdk-04.moengage.com/ https://stats.g.doubleclick.net *.tamara.co ekr.zdassets.com/ https://get.geojs.io *.avada.io eu-gateway.mastercard.com ap-gateway.mastercard.com na-gateway.mastercard.com in-gateway.mastercard.com *.gateway.mastercard.com rakbankpay.gateway.mastercard.com mtf.gateway.mastercard.com test-gateway.mastercard.com maps.googleapis.com maps.gstatic.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src *.gateway.mastercard.com rakbankpay.gateway.mastercard.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-QWTloJG3M4gdjOtTwWSH1Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self' blob: data: 'unsafe-inline' 'unsafe-eval' *.adobedtm.com *.amazon-adsystem.com *.atdmt.com *.avocet.io *.blubrry.com *.clicktale.net *.demdex.net *.doubleclick.net *.everesttech.net *.facebook.com *.facebook.net *.fca.org.uk *.google.co.uk *.google.com *.google.ie *.googleadservices.com *.jwpcdn.com *.jwpltx.com *.liveperson.net *.lpsnmedia.net *.neolane.net *.omtrdc.net *.pinimg.com *.pinterest.com *.ulsterbank.ie *.ulsterbank.com *.ulsterbankanytimebanking.ie *.userzoom.com *.youtube.com *.ytimg.com; upgrade-insecure-requests; block-all-mixed-content; report-uri https://ulsterbankroi.report-uri.com/r/t/csp/reportOnly 1
default-src https:; connect-src https: wss:; font-src https: data:; frame-src https:; img-src https: data:; media-src https:; object-src https:; script-src 'unsafe-inline' 'unsafe-eval' https: data: blob:; style-src 'unsafe-inline' https:; report-uri https://www.100partnerprogramme.de/csp-violation-ezmd9dpdxv7nb0ecejb9/ 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://static.hivebrite.com https://*.hivebrite.com https://*.cloudfront.net https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://www.gstatic.com https://api.mapbox.com https://*.launchdarkly.com https://assets.zendesk.com https://static.zdassets.com https://*.zendesk.com https://widget.intercom.io https://*.intercomcdn.com https://app.planhat.com https://*.usejimo.com https://cdn.walkme.com https://consent.cookiebot.com https://*.cookiebot.com https://connect.facebook.net https://assets2.omniapp.co https://hivebrite-external.embed-omniapp.co; style-src 'self' 'unsafe-inline' https: data:; font-src 'self' data: https://static.hivebrite.com https://fonts.gstatic.com https://fonts.bunny.net; connect-src 'self' https://*.hivebrite.com https://*.cloudfront.net https://*.launchdarkly.com wss://*.launchdarkly.com https://*.ably.net wss://*.ably.net https://*.ably.io wss://*.ably.io https://*.datadoghq.com https://*.datadoghq.eu https://*.sentry.io https://*.sendbird.com wss://*.sendbird.com https://maps.googleapis.com https://api.mapbox.com https://*.tiles.mapbox.com https://www.google-analytics.com https://*.intercom.io wss://*.intercom.io https://app.planhat.com https://*.usejimo.com https://*.omniapp.co https://*.zendesk.com https://*.zopim.com https://*.zdassets.com https://api.klipy.com https://graph.facebook.com https://*.facebook.com; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; frame-src 'self' https:; worker-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' ch.hivebrite.com; form-action 'self' https:; report-uri /csp-reports 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.hubspot.com https://*.hs-analytics.net https://*.hsadspixel.net https://*.hs-banner.com https://*.hs-scripts.com https://*.hsforms.net https://*.hsforms.com https://*.hscollectedforms.net https://*.hsleadflows.net https://js.hscta.net https://js.hubspotfeedback.com https://static.hsappstatic.net https://*.hubspotusercontent-na1.net https://*.hubspot.net https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://www.google.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://connect.facebook.net https://snap.licdn.com https://platform.linkedin.com https://platform.twitter.com https://www.clarity.ms https://scripts.clarity.ms https://assets.adobedtm.com https://s.adroll.com https://d.adroll.com https://wave.outbrain.com https://amplify.outbrain.com https://tr.outbrain.com https://lex.33across.com https://use.fontawesome.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://server.fillout.com https://google.com https://*.hs-sites.com https://www.youtube.com https://static.doubleclick.net https://d3js.org; style-src 'self' 'unsafe-inline' https://*.hubspot.com https://js.hubspotfeedback.com https://static.hsappstatic.net https://cdn2.hubspot.net https://*.hubspotusercontent-na1.net https://maxcdn.bootstrapcdn.com https://use.fontawesome.com https://cdn.jsdelivr.net https://fonts.googleapis.com https://www.gstatic.com https://cdnjs.cloudflare.com https://site-assets.fontawesome.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com https://www.kyoceradocumentsolutions.com.au https://cdn2.hubspot.net https://*.hubspotusercontent-na1.net https://static.hsappstatic.net https://maxcdn.bootstrapcdn.com https://use.fontawesome.com https://site-assets.fontawesome.com; connect-src 'self' https://*.hubapi.com https://*.hubspot.com https://*.hsforms.com https://js.hsforms.net https://*.hscollectedforms.net https://*.hs-banner.com https://js.hscta.net https://*.hubspotusercontent-na1.net https://apps.kyoceradocumentsolutions.com.au https://analytics.google.com https://*.analytics.google.com https://www.google-analytics.com https://www.google.com https://google.com https://www.google.com.au https://www.googleadservices.com https://www.googletagmanager.com https://ad.doubleclick.net https://stats.g.doubleclick.net https://googleads.g.doubleclick.net https://jnn-pa.googleapis.com https://www.youtube.com https://*.clarity.ms https://www.facebook.com https://px.ads.linkedin.com https://*.adroll.com https://tr.outbrain.com https://eb2.3lift.com https://*.demdex.net https://*.omtrdc.net; frame-src 'self' https://*.hubspot.com https://*.hs-sites.com https://*.hsforms.net https://*.hsforms.com https://*.hubspot.net https://play.hubspotvideo.com https://www.google.com https://google.com https://*.google.com https://www.googletagmanager.com https://*.demdex.net https://www.facebook.com https://platform.twitter.com https://platform.linkedin.com https://www.youtube.com https://www.youtube-nocookie.com https://kyoceradocumentsolutionsapac.bullseyelocations.com https://printreleaf.com https://*.printreleaf.com https://embed.fillout.com; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; form-action 'self' https://*.hsforms.com https://www.facebook.com https://webto.salesforce.com; upgrade-insecure-requests; report-uri https://megaphone.report-uri.com/r/d/csp/reportOnly 1
upgrade-insecure-requests; default-src 'none'; object-src 'self'; media-src 'self'; connect-src 'self'; frame-ancestors 'none'; frame-src https://www.youtube.com; img-src 'self' data: https://www.google-analytics.com https://maps.gstatic.com https://csi.gstatic.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; script-src 'self' 'nonce-1451a00bff7be149d9e3dd66cf97124800954342' 'sha256-NeueIEO8rwnaeJW0jYHRwrarPP+KzGzhk6xBJ06ntlw=' https://www.google-analytics.com https://maps.googleapis.com https://maps.gstatic.com https://maps.googleapis.com; 1
default-src 'self'; script-src 'report-sample' 'self' 'unsafe-eval' 'sha256-7F67Tt3rqGzZ4RuGnAw8xbWeXLl7P0SNrI9EOIYYRdw=' 'sha256-mJQ4lq04iIuA34mA+Kb6eyMDUQCi3fcYNJtgKUx56h0=' https://idm-icc.insuranceclaimcheck.com https://assurant.okta.com https://sdk.asapp.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://*.sundaysky.com https://*.visualwebsiteoptimizer.com https://*.accesswca.com; style-src 'report-sample' 'self' 'unsafe-inline' https://sdk.asapp.com; object-src 'none';base-uri 'self'; connect-src 'self' https://idm-icc.insuranceclaimcheck.com https://assurant.okta.com https://platform.asapp.com https://assuranthousing.asapp.com https://www.google-analytics.com https://*.sundaysky.com https://*.visualwebsiteoptimizer.com https://*.arkoselabs.com https://*.wf.com https://*.accesswca.com; font-src 'self' data: https://*.sundaysky.com; frame-src 'self' https://idm-icc.insuranceclaimcheck.com https://assurant.okta.com https://player.vimeo.com  https://sandbox.esignlive.com https://apps.esignlive.com https://sdk.asapp.com https://www.google.com https://*.arkoselabs.com https://*.wf.com; frame-ancestors 'none'; img-src 'self' data: https://i.vimeocdn.com https://www.google-analytics.com https://www.insuranceclaimcheck.com https://*.sundaysky.com https://*.visualwebsiteoptimizer.com; manifest-src 'self'; media-src 'self' blob: https://*.sundaysky.com; report-uri /sso/cspreport; worker-src 'self' blob:; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://s.skimresources.com https://*.skimresources.com https://static.cloudflareinsights.com https://apis.google.com https://www.gstatic.com https://connect.facebook.net https://www.clarity.ms https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https: blob:; font-src 'self' https://fonts.gstatic.com data:; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://s.skimresources.com https://*.skimresources.com https://static.cloudflareinsights.com https://identitytoolkit.googleapis.com https://securetoken.googleapis.com https://firestore.googleapis.com https://*.googleapis.com https://connect.facebook.net https://www.facebook.com https://www.clarity.ms https://*.clarity.ms wss:; frame-src 'self' https://www.googletagmanager.com https://www.facebook.com; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self' *.willistowerswatson.com; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://ajax.googleapis.com https://cdn.jsdelivr.net https://dnnapi.com https://cdnjs.cloudflare.com https://wtdwebcbot-bot.azurewebsites.net https://*.azurestaticapps.net https://*.azureedge.net https://*.adobedtm.com https://*.google-analytics.com https://cdn.cookielaw.org https://www.googletagmanager.com https://polyfilljs.org https://*.google.com https://maxcdn.bootstrapcdn.com; style-src 'self' 'unsafe-inline' https: https://cdn.cookielaw.org https://optanon.blob.core.windows.net; font-src 'self' data: https: https://fonts.gstatic.com; connect-src 'self' https://analytics.google.com https://privacyportal-eu.onetrust.com https://geolocation.onetrust.com https://privacyportal-eu.onetrust.com https://northsideportal.ehr.com https://www.luminarehealth.com https://northside.ultipro.com https://assets.socialchorus.com https://api-cdn.usw2.pure.cloud https://tracking.icims.com https://products.office.com https://content-us-1.static.content-cms.com https://northside.dovetailnow.com https://wtdwebcbot-bot.azurewebsites.net wss://directline.botframework.com https://*.azurestaticapps.net https://*.azureedge.net https://dc.services.visualstudio.com https://js.monitor.azure.com https://dnnapi.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://*.onetrust.com https://*.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://www.google.com https://www.google.ca https://www.google.com.sg https://www.google.com.mx https://www.google.com.hk https://www.google.fr https://www.google.it https://*.googleapis.com https://*.googleusercontent.com https://*.walkme.com https://*.ehr.com https://wtwprodcbot-bot.azurewebsites.net https://tio.zendesk.com https://outlook-1.cdn.office.net https://res.public.onecdn.static.microsoft https://dpm.demdex.net https://n21hrportaluatstg.blob.core.windows.net https://s3.us-west-2.amazonaws.com https://web.leena.ai https://pipedream.wistia.com https://maxcdn.bootstrapcdn.com https://media.my-hronline.com https://cdn5.dcbstatic.com https://sts03.northside.com https://www.avis.com; img-src 'self' data: blob: https: https://cdn.cookielaw.org; media-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; report-uri https://hrportalsda-csp-uat.ehr.com/cspreporter/api/v1/CspReport 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' data: https:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://accounts.google.com https://apis.google.com; connect-src 'self' https://accounts.google.com wss: https:; frame-src https://accounts.google.com 1
object-src 'none';base-uri 'self';script-src 'nonce-ZVN50zDsi6CDTNspFZqbkQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ www.googletagmanager.com *.braintreegateway.com *.paypal.com google.com *.google.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net validator.swagger.io *.ftcdn.net *.behance.net *.paypal.com *.typekit.net *.gstatic.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com blob: *.facebook.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com cdn.ampproject.org www.gstatic.com https://www.googletagmanager.com tagmanager.google.com *.facebook.net unpkg.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com assets.braintreegateway.com *.stripe.network *.stripecdn.com *.amazon.com www.gstatic.com maxcdn.bootstrapcdn.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com cdn.ampproject.org www.googleapis.com *.google-analytics.com *.facebook.net 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-jo0RNC+/hmNNG7IJOtSI0JAeesg=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
font-src maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ js.mollie.com www.xtento.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com https://www.mollie.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ widget.freshworks.com m2epro.freshdesk.com https://unpkg.com js.mollie.com www.xtento.com cdn.xtento.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com widget.freshworks.com m2epro.freshdesk.com maxcdn.bootstrapcdn.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com widget.freshworks.com m2epro.freshdesk.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com fonts.googleapis.com *.googleapis.com data: cdnjs.cloudflare.com storage.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.staging-pbffinancecalculator.info *.pbffinancecalculator.info *.paybyfinance.co.uk *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com app.storyblok.com *.aqualisa.co.uk *.mldemo.co.uk *.storyblok.com *.staging-pbffinancecalculator.info *.pbffinancecalculator.info *.paybyfinance.co.uk 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com *.sharethis.com www.google.com *.dotdigital-pages.com *.dotdigital.com webchat.dotdigital.com webchat.staging.dotdigital.com account.fetchify.com *.digitalbridgehq.com *.fixtuur.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.commercepartnerhub.com js.mollie.com *.staging-pbffinancecalculator.info *.pbffinancecalculator.info *.paybyfinance.co.uk c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.trustpilot.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.sharethis.com maps.googleapis.com maps.gstatic.com *.googleapis.com https://images.unsplash.com *.trackedlink.net tools.luckyorange.com placehold.co cdn.storepoint.co icons.storepoint-icons.com storage.googleapis.com *.flippingbook.com *.storyblok.com *.cookiefirst.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com https://www.mollie.com *.pbffinancecalculator.info cdn.shopify.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.sharethis.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com https://maps.googleapis.com https://cdn.jsdelivr.net/npm/@ryangjchandler/spruce@2.x.x/dist/spruce.umd.js www.google.com/recaptcha/ www.gstatic.com/recaptcha/ jquery.sellxed.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal webchat.dotdigital.com webchat.staging.dotdigital.com player.vimeo.com tools.luckyorange.com cdn.storepoint.co unpkg.com *.flippingbook.com d33i2vgywgme2s.cloudfront.net edge.marker.io consent.cookiefirst.com *.digitalbridgehq.com *.fixtuur.io *.storyblok.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com js.mollie.com *.staging-pbffinancecalculator.info *.pbffinancecalculator.info *.paybyfinance.co.uk js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.trustpilot.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.sharethis.com webchat.dotdigital.com webchat.staging.dotdigital.com cc-cdn.com tools.luckyorange.com api.mapbox.com cdn.storepoint.co cdnjs.cloudflare.com *.flippingbook.com *.cookiefirst.com *.storyblok.com assets.braintreegateway.com *.trustpilot.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.storyblok.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.sharethis.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com https://maps.googleapis.com https://player.vimeo.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com api.craftyclicks.co.uk pcls1.craftyclicks.co.uk settings.luckyorange.com tools.luckyorange.com api-preview.luckyorange.com wss://realtime.luckyorange.com wss://in.visitors.live in.visitors.live stats-1.storepoint.co api.storepoint.co api.mapbox.com events.mapbox.com pubsub.googleapis.com *.flippingbook.com api.marker.io amazonaws.com *.cookiefirst.com *.digitalbridgehq.com *.fixtuur.io *.fixtuur.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.staging-pbffinancecalculator.info *.pbffinancecalculator.info wss://*.staging-pbffinancecalculator.info wss://*.pbffinancecalculator.info *.paybyfinance.co.uk api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.digitalbridgehq.com *.fixtuur.io 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://csp-reporting-service.com/my-project/endpoint; report-to report-endpoint; 1
font-src fonts.googleapis.com fonts.gstatic.com *.googleapis.com *.gstatic.com 'self' data: *.cloudflare.com *.bootstrapcdn.com *.hotjar.com *.typekit.net cdn.curator.io static.klaviyo.com maxcdn.bootstrapcdn.com data: 'self' 'unsafe-inline'; form-action *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.multisafepay.com https://pay.google.com 'self'; frame-src player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.youtube-nocookie.com www.google.com *.chatra.io *.hotjar.com *.facebook.com *.trustpilot.com *.kiyoh.com *.pinterest.com *.criteo.com *.cookiefirst.com *.sendcloud.sc *.jsdelivr.net *.addthis.com *.multisafepay.com https://pay.google.com *.weltpixel.com *.googletagmanager.com *.doubleclick.net www.xtento.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: *.vimeocdn.com i.ytimg.com *.youtube.com https://images.unsplash.com maps.googleapis.com maps.gstatic.com *.gstatic.com *.googleapis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com magefan.com cm.magefan.com * scontent.fzty3-2.fna.fbcdn.net *.amazonaws.com flagpedia.net *.multisafepay.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.bing.net *.klaviyo.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com www.xtento.com cdn.xtento.com data: 'self' 'unsafe-inline'; script-src s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://maps.googleapis.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.cloudflare.com *.twitter.com *.fontawesome.com *.elfsight.com *.chatra.io *.jsdelivr.net chimpstatic.com *.facebook.com *.doubleclick.net *.trustpilot.com s.pinimg.com *.zdassets.com *.google-analytics.com *.feedbackcompany.com *.facebook.net *.hotjar.com *.mailchimp.com *.curator.io *.typekit.net *.clarity.ms *.leadinfo.net *.criteo.com *.googleadservices.com *.cookiefirst.com www.datadoghq-browser-agent.com bat.bing.com *.tidio.co *.tidiochat.com *.iubenda.com js-agent.newrelic.com *.sendcloud.sc s7.addthis.com *.addthis.com https://z.moatads.com https://v1.addthisedge.com https://cdn.jsdelivr.net *.multisafepay.com https://pay.google.com *.googletagmanager.com *.google.com *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.klaviyo.com unpkg.com www.xtento.com cdn.xtento.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com downloads.mailchimp.com *.cloudflare.com *.fontawesome.com *.bootstrapcdn.com *.mailchimp.com https://cdn.jsdelivr.net *.googleapis.com *.curator.io *.cookiefirst.com *.typekit.net *.sendcloud.sc *.jsdelivr.net maxcdn.bootstrapcdn.com *.gstatic.com *.multisafepay.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src curatorio.s3.amazonaws.com curator-assets.b-cdn.net video-lga3-2.cdninstagram.com video-iad3-1.xx.fbcdn.net 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src vimeo.com https://maps.googleapis.com https://player.vimeo.com maps.googleapis.com maps.gstatic.com fonts.googleapis.com *.googleapis.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.cloudflare.com *.elfsight.com *.instacloud.io *.google-analytics.com *.google.com *.doubleclick.net *.hotjar.com *.hotjar.io ct.pinterest.com *.paypal.com *.zdassets.com *.zendesk.com *.feedbackcompany.com *.curator.io *.clarity.ms *.leadinfo.net *.cookiefirst.com gtm-mm85h6s-nzi2m.uc.r.appspot.com www.google-analytics.com www.google.com *.livechatinc.com www.paypalobjects.com dev.visualwebsiteoptimizer.com www.googletagmanager.com pagead2.googlesyndication.com googleadservices.com rum.ewings.cloud *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com ekr.zdassets.com/ www.gstatic.com *.multisafepay.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.bing.net *.klaviyo.com *.run.app 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://186ed954-a0d6-40d0-8ef3-48b115240562.sansec.watch/; report-to report-endpoint; 1
font-src *.googleapis.com *.gstatic.com data: *.fontawesome.com maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ https://static.addtoany.com/ www.google.com *.awin1.com *.zenaps.com *.fls.doubleclick.net www.googletagmanager.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.trustpilot.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com *.bing.com *.awin1.com *.zenaps.com *.wepowerconnections.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com *.google.com *.googleadservices.com *.google-analytics.com *.googletagmanager.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.clarity.ms imgsct.cookiebot.com *.doofinder.com *.facebook.com *.google.sm *.smct.co pillolastore.com *.pillolastore.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://static.addtoany.com/ *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.bing.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com widget.freshworks.com m2epro.freshdesk.com connect.facebook.net *.googletagmanager.com *.googleadservices.com *.google-analytics.com https://cdnjs.cloudflare.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.adfyier.com *.admediasales.com *.bannercrowd.net *.bing-int.com *.clarity.ms consent.cookiebot.com consentcdn.cookiebot.com *.doofinder.com smct.co *.smct.co *.optimalpeople.fr *.prezzifarmaco.it *.tradedoubler.com tracking.trovaprezzi.it tps.trovaprezzi.it www.trovaprezzi.it *.trustpilot.com https://www.dwin1.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com widget.freshworks.com m2epro.freshdesk.com *.fontawesome.com maxcdn.bootstrapcdn.com https://fonts.googleapis.com https://cdnjs.cloudflare.com unsafe-inline assets.braintreegateway.com *.doofinder.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://stats.addtoany.com/menu *.googleapis.com *.wepowerconnections.com https://the.sciencebehindecommerce.com *.salesmanago.pl *.salesmanago.es *.salesmanago.com widget.freshworks.com m2epro.freshdesk.com *.google-analytics.com *.analytics.google.com *.googletagmanager.com stats.g.doubleclick.net api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.bing.com *.clarity.ms *.cookiebot.com *.doofinder.com wss://eu1-layer.doofinder.com/ wss://eu1-recommendations.doofinder.com/ *.googlesyndication.com/ *.optimalpeople.fr 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.salesmanago.pl *.salesmanago.es *.salesmanago.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://pagead2.googlesyndication.com https://www.statcounter.com; style-src 'self' 'unsafe-inline'; img-src 'self' https: data:; connect-src 'self' https://pagead2.googlesyndication.com; frame-src https://googleads.g.doubleclick.net https://tpc.googlesyndication.com; frame-ancestors 'self'; 1
object-src 'none';base-uri 'self';script-src 'nonce-4_dqvT73VBdIZAY0a0Rszg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'nonce-OGY0OWFiZTktNTNiMy00YTFmLTk1YTYtOGRkYWFmYWIwNGE1' 'strict-dynamic' 'wasm-unsafe-eval' https://challenges.cloudflare.com https://*.ingest.sentry.io https://*.ingest.us.sentry.io https://*.sentry.io https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://connect.facebook.net https://www.facebook.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: blob: https://api.moveforms.com.br https://formularios-upload.s3.us-east-1.amazonaws.com https://dicionario2.vlibras.gov.br https://traducao2.vlibras.gov.br; frame-src https://challenges.cloudflare.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com https://www.loom.com https://loom.com https://drive.google.com; connect-src 'self' https://api.moveforms.com.br wss://api.moveforms.com.br https://challenges.cloudflare.com https://*.ingest.sentry.io https://*.ingest.us.sentry.io https://*.sentry.io https://www.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://connect.facebook.net https://www.facebook.com https://viacep.com.br https://dicionario2.vlibras.gov.br https://traducao2.vlibras.gov.br; media-src 'self' blob: https://api.moveforms.com.br https://formularios-upload.s3.us-east-1.amazonaws.com https://dicionario2.vlibras.gov.br https://traducao2.vlibras.gov.br; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; report-uri https://api.moveforms.com.br/csp-report 1
font-src fonts.gstatic.com maxcdn.bootstrapcdn.com fonts.googleapis.com *.fontawesome.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.trustpilot.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ quickchart.io img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com songbird.cardinalcommerce.com https://*.reaktion.com www.gstatic.com *.googleapis.com *.fontawesome.com *.trustpilot.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://static.klaviyo.com maxcdn.bootstrapcdn.com fonts.gstatic.com unsafe-inline assets.braintreegateway.com *.googleapis.com *.fontawesome.com *.bootstrapcdn.com *.trustpilot.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com https://*.reaktion.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src www.paypalobjects.com fonts.googleapis.com fonts.gstatic.com *.fontawesome.com *.gstatic.com 'self' data: *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com *.amazon.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ https://*.every-pay.com/ https://*.every-pay.eu/ https://*.lhv.ee/ https://pay.google.com/ https://api.esto.lv https://api.esto.ee https://api.estopay.lt *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io maps.google.com maps.googleapis.com maps.gstatic.com https://images.unsplash.com https://api.esto.ee https://api.esto.lv https://api.estopay.lt https://*.every-pay.com/ https://*.every-pay.eu/ https://*.lhv.ee/ https://www.terminalmappingjs.com https://osm.venipak.com http://mano.venipak.lt https://maps.omnivasiunta.lt *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ maps.google.com maps.googleapis.com https://maps.googleapis.com https://player.vimeo.com https://*.every-pay.com/ https://*.every-pay.eu/ https://*.lhv.ee/ https://pay.google.com/ https://unpkg.com *.hsforms.net *.hsforms.com *.google.com *.gstatic.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.amazon.com *.link.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://unpkg.com *.googleapis.com *.gstatic.com *.stripe.network *.stripecdn.com *.amazon.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com maps.googleapis.com https://maps.googleapis.com https://player.vimeo.com https://www.terminalmappingjs.com https://geocode.arcgis.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.amazon.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.googleapis.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com *.googlesyndication.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * www.google.com *.google.com/ *.doubleclick.net *.facebook.com *.googlesyndication.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com https://banners.helloretailcdn.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com *.googleapis.com *.gstatic.com https://images.unsplash.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.disqus.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://firebasestorage.googleapis.com https://www.magezon.com *.sooqr.com *.amazonaws.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://core.helloretail.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com/ *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.disqus.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://z.moatads.com https://cdn.jsdelivr.net *.avada.io *.sooqr.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com https://d1pna5l3xsntoj.cloudfront.net https://helloretailcdn.com unsafe-inline assets.braintreegateway.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com https://static.klaviyo.com https://cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net *.sooqr.com *.sendcloud.sc *.jsdelivr.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://core.helloretail.com https://helloretailcdn.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.googleapis.com *.google-analytics.com *.facebook.com *.facebook.net *.doubleclick.net *.googlesyndication.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io *.sendcloud.sc *.cdn.jsdelivr.net *.mapbox.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-5f0l10ajBq4BXiDjAMx4XnAOTxI=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
default-src 'self' 'unsafe-inline' 'unsafe-eval' data: *.quechoisir.org *.qccdn.fr *.cloudflare.com *.tagcommander.com *.commander1.com *.trustcommander.net *.aticdn.net *.xiti.com *.bing.com *.google.com *.youtube.com *.youtu.be www.youtube-nocookie.com flo.uri.sh public.flourish.studio wss://dl1.quechoisir.org  wss://dl2.quechoisir.org wss://dl.quechoisir.org upgrade-insecure-requests; report-uri https://www.quechoisir.org/csp-violation-report-endpoint/; report-to csp-endpoint> 1
object-src 'none';base-uri 'self';script-src 'nonce-oJC7c09Wn6QtYXYa5BaQOQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.cookielaw.org https://geolocation.onetrust.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://static.doubleclick.net https://stats.g.doubleclick.net https://maps.googleapis.com https://maps.google.com https://www.gstatic.com https://maps.gstatic.com https://dev.visualwebsiteoptimizer.com https://*.vwo.com https://js.monitor.azure.com https://*.applicationinsights.azure.com https://*.hcaptcha.com https://snap.licdn.com https://px.ads.linkedin.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: blob: https:; connect-src 'self' https://cdn.cookielaw.org https://geolocation.onetrust.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://*.hcaptcha.com https://dev.visualwebsiteoptimizer.com https://*.vwo.com https://js.monitor.azure.com https://*.applicationinsights.azure.com https://*.in.applicationinsights.azure.com; frame-src 'self' https://www.youtube.com https://player.vimeo.com https://www.google.com https://*.hcaptcha.com https://cdn.cookielaw.org; 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://www.googletagmanager.com *.googleapis.com *.fontawesome.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com 'self' data: data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com tagmanager.google.com https://www.googletagmanager.com https://maps.googleapis.com https://player.vimeo.com *.fontawesome.com *.googleapis.com *.gstatic.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://www.googletagmanager.com tagmanager.google.com *.googleapis.com *.fontawesome.com assets.braintreegateway.com *.gstatic.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://maps.googleapis.com https://player.vimeo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
connect-src 'self' https://analytics.google.com https://api.openweathermap.org https://api.segment.io https://bam.nr-data.net https://cdn.cookielaw.org https://cdn.segment.com https://cookies-data.onetrust.io https://data.pendo.io https://geolocation.onetrust.com https://ipa.stacksports.com https://js.authorize.net https://jstest.authorize.net https://maps.googleapis.com https://stacksports-privacy.my.onetrust.com https://stacksports.my.site.com https://translate.googleapis.com https://www.google-analytics.com https://www.google.com https://www.googletagmanager.com https://dt5602vnjxv0c.cloudfront.net https://store-api.bluesombrero.com https://api.stacksports.com https://core-api.bluesombrero.com https://survey.survicate.com https://securepubads.g.doubleclick.net https://ep1.adtrafficquality.google https://pagead2.googlesyndication.com wss://nexus-websocket-a.intercom.io https://www.facebook.com https://js.mystackpay.com https://stats.g.doubleclick.net https://api-iam.intercom.io https://csi.gstatic.com https://region1.google-analytics.com https://dv-c3e594c6d429469e90b54478358619c3.ecs.us-east-1.on.aws; default-src 'self'; font-src 'self' data: https://cdnjs.cloudflare.com https://dt5602vnjxv0c.cloudfront.net https://fonts.gstatic.com https://surveys-static-prd.survicate-cdn.com https://use.typekit.net https://fonts.intercomcdn.com https://vibegrade.com; frame-src 'self' https://api.stacksports.com https://player.vimeo.com https://js.mystackpay.com https://www.facebook.com https://www.youtube.com https://ep2.adtrafficquality.google https://www.google.com https://cm.g.doubleclick.net https://www.googletagmanager.com https://docs.google.com https://calendar.google.com https://gum.criteo.com; img-src 'self' data: https://cdn.cookielaw.org https://dt5602vnjxv0c.cloudfront.net https://fonts.gstatic.com https://ik.imagekit.io https://res.cloudinary.com https://sportsconnect.com https://stacksports.com https://www.googletagmanager.com https://www.gstatic.com https://maps.gstatic.com https://ss-marketplace.s3.us-west-2.amazonaws.com https://filemanagement-api.bluesombrero.com https://maps.google.com https://data.pendo.io https://www.facebook.com https://www.google.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://accounts.google.com https://ajaxorg.github.io https://cdn.cookielaw.org https://cdn.pendo.io https://cdn.segment.com https://cdnjs.cloudflare.com https://code.jquery.com https://connect.facebook.net https://data.pendo.io https://dt5602vnjxv0c.cloudfront.net https://api.stacksports.com https://js-agent.newrelic.com https://js.authorize.net https://jstest.authorize.net https://maps.googleapis.com https://pendo-static-5735800651382784.storage.googleapis.com https://js.mystackpay.com https://sf.bluesombrero.com https://stacksports.my.site.com https://static.cloudflareinsights.com https://survey.survicate.com https://surveys-static-prd.survicate-cdn.com https://translate-pa.googleapis.com https://translate.google.com https://translate.googleapis.com https://widget.intercom.io https://www.googletagmanager.com https://cdn.jsdelivr.net https://www.googletagservices.com https://ep2.adtrafficquality.google https://lib.tashop.co https://securepubads.g.doubleclick.net https://fonts.googleapis.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://cdnjs.cloudflare.com https://dt5602vnjxv0c.cloudfront.net https://fonts.googleapis.com https://sf.bluesombrero.com https://stacksports.my.site.com https://surveys-static-prd.survicate-cdn.com https://www.gstatic.com; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=cf6aoafloqFW9wwO9kfBFGUqIItyJR8VGght2Rqp0QI-1789290879.7989461-1.0.1.1-.WEOnLZzRsvcei14RAm4yFKmAUilvdD0semvKl4KjryVMulDrvzFNee5wJaM3WURQ3yQeAIOjCZOlhOwZQX9sx_hAnxy8yOPhhQql8YWEN78_KjNqbPLU1QpnqqoBg8pmCwJJN3Dou1Djp_g69i.Lixav1W5q64EgPQoETBC9Wxs0hmWSZOU_mT07CK23ENcyqw_23B.Oz9kL1_il2BHIw; report-to cf-drxievxrznpygvnl 1
default-src 'self'; font-src cdn.opencmp.net 'self'; frame-src player.vimeo.com www.youtube-nocookie.com https://www.googletagmanager.com; img-src https://*.google-analytics.com https://www.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.de https://*.google.at https://*.google.ch https://googleads.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://google.com 'self' data: blob:; media-src blob:; connect-src https://*.google-analytics.com https://*.analytics.google.com https://www.googletagmanager.com https://*.g.doubleclick.net https://*.google.com https://*.google.de https://*.google.at https://*.google.ch https://pagead2.googlesyndication.com https://www.googleadservices.com https://ad.doubleclick.net https://google.com 'self'; style-src 'self' 'unsafe-inline' data:; script-src 'self' 'unsafe-inline'; script-src-elem www.youtube.com https://www.googleadservices.com https://www.google.com https://www.googletagmanager.com     https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net 'self' 'unsafe-inline'; report-uri https://sentry.marketing-factory.de/api/11/security/?sentry_key=24738997fbe64bcaa449c8f288152fc9 1
default-src data: 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.here.com https://vawidget.dhl.com;style-src 'self' 'unsafe-inline' ;object-src 'self' blob:;img-src 'self' data: blob:;connect-src blob: 'self' https://*.here.com https://vawidget.dhl.com https://vawidget-eu.dhl.com;frame-src https://vawidget.dhl.com;worker-src blob: 1
font-src *.gstatic.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.stripe.com *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors *.stripe.com stripe.com *.link.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.iwv-plugins.de https://challenges.cloudflare.com https://hcaptcha.com https://*.hcaptcha.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com *.wesupply.xyz https://wesupplylabs.com *.weltpixel.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io https://firebasestorage.googleapis.com https://api.mapbox.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com maps.gstatic.com *.gstatic.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.avada.io https://challenges.cloudflare.com https://hcaptcha.com https://*.hcaptcha.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.stripe.com *.stripe.network *.stripecdn.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com maps.googleapis.com *.cloudflare.com https://www.googletagmanager.com tagmanager.google.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com https://hcaptcha.com https://*.hcaptcha.com unsafe-inline assets.braintreegateway.com *.stripe.network *.stripecdn.com tagmanager.google.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com https://get.geojs.io *.avada.io https://hcaptcha.com https://*.hcaptcha.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com *.stripe.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com *.link.com https://www.google-analytics.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src  'none'; connect-src 'self' *.throated.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.throated.com join.gammasecure.com; script-src 'self' *.throated.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.throated.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
report-to ReportCspViolations; report-uri /eventmanager-system/ReportCspViolations.php 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-QyYTIzpz8rmjrWK8UHPosNgYqS0=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; frame-ancestors 'none'; base-uri 'self'; 1
object-src 'none';base-uri 'self';script-src 'nonce-3gOa0Q1O9v2YkV2of8zsIA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.yotpo.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.googletagmanager.com forms.hsforms.com *.yotpo.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net *.yotpo.com magefan.com cm.magefan.com https://img.youtube.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com js.hsforms.net js.hs-banner.com *.yotpo.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.yotpo.com *.googleapis.com assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.hsforms.com forms.hsforms.com track.hubspot.com live.hsforms.com *.yotpo.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-BsrQ67vwu/v69ADu1iXnkxRRMSw=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' https://plausible.io https://challenges.cloudflare.com https://cdn.jsdelivr.net https://maps.googleapis.com https://maps.gstatic.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; font-src 'self' data:; img-src 'self' data: blob: https:; connect-src 'self' https://plausible.io https://challenges.cloudflare.com https://*.googleapis.com https://*.gstatic.com; frame-src 'self' blob: https://www.youtube.com https://www.youtube-nocookie.com https://challenges.cloudflare.com; media-src 'self' blob:; worker-src 'self' blob:; manifest-src 'self'; upgrade-insecure-requests 1
object-src  'none'; connect-src 'self' *.eroticax.com *.xempire.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.eroticax.com *.xempire.com join.gammasecure.com; script-src 'self' *.eroticax.com *.xempire.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.eroticax.com *.xempire.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://us-assets.i.posthog.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: https://us-assets.i.posthog.com; connect-src 'self' https://us.i.posthog.com https://us-assets.i.posthog.com https://app.selltostate.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none' 1
object-src 'none';base-uri 'self';script-src 'nonce-crraiXs1Y6u_AThszPXl6g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; 1
default-src 'self'; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://ajax.googleapis.com https://ajax.aspnetcdn.com https://www.google.com https://js.hs-scripts.com https://js.hs-analytics.net https://js.hs-banner.com https://js.hubspot.com https://browser.sentry-cdn.com https://unpkg.com https://www.google-analytics.com https://static.olark.com https://assets.olark.com https://api.olark.com https://nrpc.olark.com https://secure.usaepay.com https://www.gstatic.com https://cdn-cookieyes.com https://maxcdn.bootstrapcdn.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://static.olark.com; img-src 'self' data: https://www.google-analytics.com https://www.googletagmanager.com https://www.google.com https://www.gstatic.com https://ssl.google-analytics.com https://static.olark.com https://log.olark.com https://js.hs-scripts.com https://track.hubspot.com https://perf-na1.hsforms.com; font-src 'self' https://fonts.gstatic.com https://static.olark.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://analytics.google.com https://stats.g.doubleclick.net https://www.google.com https://js.hs-scripts.com https://js.hs-banner.com https://cta-service-cms2.hubspot.com https://api.hubspot.com https://forms.hubspot.com https://api.hubapi.com https://sentry.io https://browser.sentry-cdn.com https://unpkg.com https://nrpc.olark.com https://monitoring-only.apm.eastus2.azure.elastic-cloud.com https://static.olark.com https://secure.usaepay.com https://ajax.googleapis.com https://cdn-cookieyes.com https://log.cookieyes.com; media-src 'self' https://static.olark.com; frame-src 'self' https://www.google.com https://www.recaptcha.net https://static.olark.com https://www.youtube.com https://youtube.com https://www.youtube-nocookie.com https://secure.usaepay.com https://www.googletagmanager.com; frame-ancestors 'self'; base-uri 'self'; object-src 'self' https://www.youtube.com https://www.youtube-nocookie.com; report-uri https://sentry.io/api/1267726/security/?sentry_key=074f538a58ab4b14a796b7f9a70c0ba9; 1
font-src 'self' https: data: http://*.hotjar.com https://*.hotjar.com *.typekit.net https://assets.yobbers.com https://staging-assets.yobbers.com https://fonts.gstatic.com https://maxcdn.bootstrapcdn.com https://cdnjs.cloudflare.com; worker-src 'self' blob: https://cdnjs.cloudflare.com https://www.googletagmanager.com https://ytst.yobbers.com https://*.yobbers.com; media-src 'self' https:; frame-src 'self' https: https://challenges.cloudflare.com https://*.cloudflare.com; child-src 'self' https: https://challenges.cloudflare.com https://*.cloudflare.com; connect-src 'self' https: https://challenges.cloudflare.com https://*.cloudflare.com; img-src 'self' data: https: https://challenges.cloudflare.com https://*.cloudflare.com https://*.imgix.net; object-src 'self' https:; script-src 'self' https: 'unsafe-inline' 'unsafe-eval' blob: https://*.typekit.net https://*.google-analytics.com https://api.avo.app https://*.hotjar.com http://*.hotjar.com https://*.googletagmanager.com https://*.bizographics.com https://*.facebook.net https://*.instagram.com https://*.linkedin.com https://stats.pusher.com/timeline/v2/jsonp/1 https://cdnjs.cloudflare.com https://accounts.google.com https://www.googletagmanager.com https://ytst.yobbers.com https://*.yobbers.com https://challenges.cloudflare.com https://*.cloudflare.com; style-src 'self' https: 'unsafe-inline' https://*.typekit.net https://*.yobbers.com https://*.bootstrapcdn.com 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://analytics.tiktok.com https://www.google.com https://www.gstatic.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://widget.clutch.co; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://widget.clutch.co; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; media-src 'self' blob: https:; connect-src 'self' https://*.sanity.io https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://analytics.tiktok.com https://*.tiktok.com https://www.google.com https://googleads.g.doubleclick.net https://*.doubleclick.net https://maps.googleapis.com; frame-src 'self' https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://www.googletagmanager.com https://td.doubleclick.net https://widget.clutch.co; worker-src 'self' blob:; manifest-src 'self' 1
font-src *.gstatic.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.langshop.io 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.lameesoftware.com *.weglot.com https://firebasestorage.googleapis.com https://redchamps.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.datadoghq-browser-agent.com *.weglot.com *.avada.io *.shopify.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.googleapis.com *.weglot.com *.fontawesome.com https://fonts.bunny.net 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.com *.weglot.com *.cdn-api-weglot.com https://get.geojs.io *.avada.io 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.lameesoftware.com/; report-to report-endpoint; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.hsforms.net     https://js.hs-scripts.com     https://js.hs-analytics.net     https://js.hubspot.com     https://js.hscollectedforms.net     https://js.hsadspixel.net     https://js.hs-banner.com     https://js.usemessages.com     https://static.hsappstatic.net     https://www.googletagmanager.com     https://www.google-analytics.com     https://www.googleoptimize.com     https://*.hotjar.com     https://snap.licdn.com     https://static.ads-twitter.com     https://connect.facebook.net     https://static.cloudflareinsights.com     https://cdn.hu-manity.co https://*.canvasjs.com https://canvasjs.com https://cdnjs.cloudflare.com https://widget.forumpay.com; style-src 'self' 'unsafe-inline' data: https://fonts.googleapis.com https://cdnjs.cloudflare.com; img-src 'self' data: https:; connect-src 'self' https://*.hsforms.com     https://api.hubspot.com     https://api.hsforms.com     https://js.hs-scripts.com     https://www.google-analytics.com     https://*.analytics.google.com     https://region1.google-analytics.com     https://stats.g.doubleclick.net     https://www.googletagmanager.com     https://*.hotjar.com     wss://*.hotjar.com     https://connect.facebook.net     https://snap.licdn.com     https://static.ads-twitter.com     https://cdn.hu-manity.co     https://static.cloudflareinsights.com     https://*.ads.linkedin.com     https://forms.hscollectedforms.net     https://*.google.com https://api.hubapi.com https://cta-service-cms2.hubspot.com https://transactional-api.hu-manity.co https://designer-api.hu-manity.co; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; child-src 'self' blob:; frame-ancestors 'self' https://*.hubspot.com https://*.hubspotdocuments.com; frame-src https://forms.hsforms.com     https://js.hsforms.net     https://js.hs-scripts.com     https://js.hs-analytics.net     https://app.hubspot.com     https://meetings.hubspot.com     https://www.googletagmanager.com https://widget.forumpay.com; worker-src 'self' blob: 1
default-src 'self'; script-src 'self' 'unsafe-inline' www.googletagmanager.com www.googleapis.com connect.facebook.net bat.bing.com www.redditstatic.com snap.licdn.com www.google.com www.recaptcha.net challenges.cloudflare.com static.zdassets.com static.hsappstatic.net *.hsforms.net *.hs-scripts.com tracker.metricool.com cdn.leadinfo.net; style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; font-src 'self' data:; connect-src 'self' www.google-analytics.com region1.google-analytics.com tracker.metricool.com app.metricool.com challenges.cloudflare.com www.googletagmanager.com; frame-src 'self' www.youtube.com www.facebook.com challenges.cloudflare.com www.google.com *.hsforms.net static.zdassets.com; form-action 'self' *.hsforms.net; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-S_zPjUUOKU7SOcuzMiOVYw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://stdpay.inicis.com https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https://hjcbt.org https://www.google-analytics.com https://i.ytimg.com; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://*.analytics.google.com https://*.google-analytics.com https://stats.g.doubleclick.net; frame-src https://www.youtube.com https://player.vimeo.com https://vimeo.com https://www.google.com https://stdpay.inicis.com; form-action 'self' https://stdpay.inicis.com https://mobile.inicis.com; frame-ancestors 'self'; object-src 'none'; base-uri 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: https://*.googletagmanager.com https://*.google-analytics.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://google.com https://www.google.co.in https://www.googleadservices.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://www.gstatic.com https://js.hs-scripts.com https://js.hs-banner.com https://js.hsforms.net https://js.hs-analytics.net https://js.usemessages.com https://js.hsadspixel.net https://js.hubspot.com https://static.hsappstatic.net https://js-na1.hs-scripts.com https://forms-na1.hsforms.com https://perf-na1.hsforms.com https://track.hubspot.com https://j.6sc.co https://6sc.co https://js.zi-scripts.com https://sc.lfeeder.com https://cdn.vector.co https://snap.licdn.com https://tags.clickagy.com https://tracking.g2crowd.com https://tracking-api.g2.com https://us.i.posthog.com https://us-assets.i.posthog.com; script-src-elem 'self' 'unsafe-inline' blob: https://*.googletagmanager.com https://*.google-analytics.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://google.com https://www.google.co.in https://www.googleadservices.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://www.gstatic.com https://js.hs-scripts.com https://js.hs-banner.com https://js.hsforms.net https://js.hs-analytics.net https://js.usemessages.com https://js.hsadspixel.net https://js.hubspot.com https://static.hsappstatic.net https://js-na1.hs-scripts.com https://forms-na1.hsforms.com https://perf-na1.hsforms.com https://track.hubspot.com https://j.6sc.co https://6sc.co https://js.zi-scripts.com https://sc.lfeeder.com https://cdn.vector.co https://snap.licdn.com https://tags.clickagy.com https://tracking.g2crowd.com https://tracking-api.g2.com https://us.i.posthog.com https://us-assets.i.posthog.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; img-src 'self' data: blob: https://djijnrz4nj20x.cloudfront.net https://cdn.prod.website-files.com https://*.google-analytics.com https://*.googletagmanager.com https://*.g.doubleclick.net https://www.google-analytics.com https://www.googletagmanager.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.google.com https://google.com https://www.google.co.in https://b.6sc.co https://j.6sc.co https://c.6sc.co https://ib.adnxs.com https://track.hubspot.com https://forms-na1.hsforms.com https://perf-na1.hsforms.com https://px.ads.linkedin.com https://www.linkedin.com https://ws.zoominfo.com https://tr-rc.lfeeder.com https://tracking.g2crowd.com https://tracking-api.g2.com https://tags.clickagy.com https://aorta.clickagy.com https://us.i.posthog.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://www.google-analytics.com https://analytics.google.com https://www.googleadservices.com https://pagead2.googlesyndication.com https://*.g.doubleclick.net https://googleads.g.doubleclick.net https://stats.g.doubleclick.net https://www.google.com https://google.com https://www.google.co.in https://api.hubspot.com https://api.hubapi.com https://forms.hubspot.com https://perf-na1.hsforms.com https://cta-service-cms2.hubspot.com https://api.usemessages.com https://app.hubspot.com https://j.6sc.co https://b.6sc.co https://c.6sc.co https://api.6sense.com https://epsilon.6sense.com https://ib.adnxs.com https://ws.zoominfo.com https://tr-rc.lfeeder.com https://px.ads.linkedin.com https://tags.clickagy.com https://aorta.clickagy.com https://tracking.g2crowd.com https://tracking-api.g2.com https://api.vector.co https://us.i.posthog.com https://us-assets.i.posthog.com; frame-src 'self' https://www.googletagmanager.com https://www.google.com https://forms.hubspot.com https://js.hsforms.net https://app.hubspot.com https://meetings.hubspot.com https://growth.commerceiq.ai https://commerceiq-20901842.hs-sites.com https://cdn.embedly.com https://player.vimeo.com https://preview--content-agentv1.lovable.app https://api.vector.co; frame-ancestors 'self'; report-uri /api/csp-report 1
default-src 'self' 'unsafe-inline'; script-src  'self' 'unsafe-eval' data: https: ; connect-src 'self' https://client.axept.io https://api.axept.io https://*.axeptio.eu  https://api.mapbox.com https://events.mapbox.com  ; img-src 'self' 'unsafe-inline' https://axeptio.imgix.net https://favicons.axept.io https://*.gstatic.com   ; style-src 'unsafe-inline' ; font-src  https://fonts.gstatic.com ; report-to csp-endpoint 1
font-src https://www.gstatic.com https://fonts.gstatic.com *.fontawesome.com https://fonts.bunny.net *.freshchat.com fonts.gstatic.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors *.multisafepay.com https://pay.google.com 'self'; frame-src www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.youtube-nocookie.com *.sharethis.com https://www.paypal.com https://www.google.com *.multisafepay.com https://pay.google.com https://cyp.collectyourparcel.eu *.weltpixel.com *.freshchat.com *.googletagmanager.com *.doubleclick.net *.thelittlegreenbag.pt *.tangiblee.com td.doubleclick.net *.criteo.net *.criteo.com google.com googleads.g.doubleclick.net www.google.com google.com/pagead/landing *.facebook.com youtube.com www.googletagmanager.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.sharethis.com https://portal.payconiq.com https://static.buckaroo.nl https://www.paypalobjects.com https://firebasestorage.googleapis.com *.multisafepay.com *.freshchat.com *.gstatic.com *.facebook.com *.reddit.com *.ads-twitter.com t.co *.twitter.com *.bing.com *.clarity.ms *.google-analytics.com *.googletagmanager.com *.doubleclick.net *.google.com *.tangiblee.com *.thelittlegreenbag.pt *.thelittlegreenbag.com *.cowboysbag.nl *.cowboysbag.com www.google.nl bat.bing.com *.criteo.net *.criteo.com *.adnxs.com contextual.media.net pixel.rubiconproject.com rtb-csync.smartadserver.com sync-t1.taboola.com criteo-sync.teads.tv eb2.3lift.com ups.analytics.yahoo.com visitor.omnitagjs.com ad.360yield.com match.sharethrough.com criteo-partners.tremorhub.com ad.yieldlab.net beacon.krxd.net google.com googleads.g.doubleclick.net www.googletagmanager.com www.google.com google.com/pagead/landing *.trackjs.com *.squeezely.tech lantern.roeye.com youtube.com data: 'self' 'unsafe-inline'; script-src www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.sharethis.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com https://www.google.com https://www.gstatic.com *.avada.io *.shopify.com *.multisafepay.com https://pay.google.com cdn.skypack.dev https://cyp.collectyourparcel.eu *.freshchat.com https://cdnjs.cloudflare.com *.trustedshops.com *.googletagmanager.com *.googleadservices.com *.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.ads-twitter.com *.bing.com *.clarity.ms unpkg.com *.doubleclick.net *.tangiblee.com *.analytics.google.com *.criteo.net *.criteo.com www.dwin1.com lantern.roeyecdn.com google.com googleads.g.doubleclick.net www.googletagmanager.com www.google.com google.com/pagead/landing *.newrelic.com squeezely.tech youtube.com *.tweakwisenavigator.net gum.criteo.com static.cloudflareinsights.com bat.bing.com bat.bing.net clarity.ms *.thelittlegreenbag.pt ajax.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.sharethis.com https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl *.fontawesome.com https://fonts.bunny.net *.multisafepay.com *.freshchat.com https://cdnjs.cloudflare.com *.tagmanager.google.com *.googletagmanager.com fonts.googleapis.com www.googletagmanager.com *.thelittlegreenbag.pt 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com vimeo.com *.sharethis.com wss://websocketservice-externalapi.prod.buckaroo.io https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://applepay.buckaroo.io https://www.paypal.com https://ipinfo.io https://get.geojs.io *.avada.io *.multisafepay.com *.trustedshops.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.twitter.com *.ads-twitter.com *.bing.com *.clarity.ms *.doubleclick.net *.run.app *.tangiblee.com stats.g.doubleclick.net pagead2.googlesyndication.com *.criteo.net *.criteo.com google.com googleads.g.doubleclick.net www.googletagmanager.com www.google.com google.com/pagead/landing *.nr-data.net pay.google.com youtube.com *.tweakwisenavigator.net gum.criteo.com *.facebook.com bat.bing.com bat.bing.net *.thelittlegreenbag.pt js-agent.newrelic.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self' *.googleapis.com *.youtube.com *.productfruits.com *.doubleclick.net *.adsrvr.org; script-src 'self' 'unsafe-eval' 'unsafe-inline' https://*.googletagmanager.com https://*.connect.facebook.net https://*.bi-instatag.com https://*.googleapis.com https://*.adobedtm.com https://*.cookielaw.org https://*.youtube.com https://*.everesttech.net https://*.demdex.net https://*.facebook.net https://trkn.us https://*.fullstory.com https://*.bing.com; object-src 'none'; style-src 'self' 'unsafe-inline' *.googleapis.com; img-src 'self' 'unsafe-inline' data: *.productfruits.com *.pricespider.com *.googleapis.com *.gstatic.com https://cdn.cookielaw.org *.facebook.com *.omtrdc.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.wayvia.com https://trkn.us; frame-src 'self' *.adsrvr.org *.doubleclick.net *.youtube.com; font-src 'self' 'unsafe-inline' *.gstatic.com data: ; connect-src 'self' *.bi-instatag.com *.googleapis.com *.cookielaw.org *.onetrust.com *.onetrust.io *.google.com *.omtrdc.net *.doubleclick.net *.demdex.net *.bi-oneweb.com *.productfruits.com *.facebook.net *.facebook.com *.googlesyndication.com *.fullstory.com; report-uri /report-csp-violation 1
default-src 'self' https://region1.google-analytics.com https://dnli92a0oi6mg.cloudfront.net px.ads.linkedin.com data: blob: apikeys.civiccomputing.com cloudflareinsights.com challenges.cloudflare.com player.vimeo.com recruitingbypaycor.com images.recruitingbypaycor.com www.google.com formspree.io clapi.civiccomputing.com www.google-analytics.com stats.g.doubleclick.net; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.fs1.hubspotusercontent-na2.net *.hsappstatic.net https://dnli92a0oi6mg.cloudfront.net data: player.vimeo.com vimeo.com cc.cdn.civiccomputing.com static.cloudflareinsights.com challenges.cloudflare.com blob: afiniti.com newton.newtonsoftware.com recruitingbypaycor.com www.google.com www.gstatic.com www.google-analytics.com www.googletagmanager.com sp-ao.shortpixel.ai snap.licdn.com sjs.bizographics.com cdn.linkedin.oribi.io pagead2.googlesyndication.com www.googleadservices.com googleads.g.doubleclick.net cdnjs.cloudflare.com *.hs-scripts.com *.hs-analytics.net *.hsadspixel.net *.hs-banner.com *.hsforms.net *.hsforms.com *.hscollectedforms.net js.hscta.net *.hubspot.com google.com recaptcha.net; style-src 'self' 'unsafe-inline' https://dnli92a0oi6mg.cloudfront.net sp-ao.shortpixel.ai cdn2.hubspot.net; img-src 'self' data: afiniti.com https://dnli92a0oi6mg.cloudfront.net sp-ao.shortpixel.ai i.vimeocdn.com px.ads.linkedin.com px4.ads.linkedin.com dc.ads.linkedin.com www.googletagmanager.com www.google-analytics.com https://region1.google-analytics.com googleads.g.doubleclick.net cm.g.doubleclick.net www.googleadservices.com pagead2.googlesyndication.com www.google.com www.google.com.pk *.hsforms.net *.hsforms.com js.hscta.net *.hubspot.com no-cache.hubspot.com cdn2.hubspot.net; font-src 'self' data: https://dnli92a0oi6mg.cloudfront.net sp-ao.shortpixel.ai *.gstatic.com; media-src 'self' https://dnli92a0oi6mg.cloudfront.net; connect-src 'self' https://www.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://stats.g.doubleclick.net https://www.googletagmanager.com https://googleads.g.doubleclick.net https://td.doubleclick.net https://www.googleadservices.com https://pagead2.googlesyndication.com https://google.com https://www.google.com https://px.ads.linkedin.com https://px4.ads.linkedin.com https://dc.ads.linkedin.com https://p.adsymptotic.com https://gw.linkedin.oribi.io https://sjs.bizographics.com https://www.linkedin.com cloudflareinsights.com apikeys.civiccomputing.com challenges.cloudflare.com player.vimeo.com recruitingbypaycor.com images.recruitingbypaycor.com formspree.io clapi.civiccomputing.com *.hubapi.com *.hs-banner.com *.hscollectedforms.net *.hsforms.com js.hscta.net *.hubspot.com; frame-src 'self' player.vimeo.com challenges.cloudflare.com recruitingbypaycor.com www.googletagmanager.com *.hsforms.net *.hsforms.com *.hs-sites.com *.hubspot.com google.com; 1
default-src 'self'; script-src 'self' 'nonce-RPDCh-gP-ujOvMcp3saHYT4WMj0ymHqza4H4i4YEGnY7l_GVK2XwJA' 'strict-dynamic' https://*.facebook.net https://*.licdn.com https://*.usercentrics.eu https://*.cookiebot.eu 'report-sample'; style-src-attr 'unsafe-inline' 'report-sample'; img-src 'self' data: *.ytimg.com *.vimeocdn.com https://*.linkedin.com https://*.facebook.com https://*.usercentrics.eu; base-uri 'self'; frame-src 'self' *.youtube-nocookie.com *.youtube.com *.vimeo.com https://*.cookiebot.eu; style-src-elem 'unsafe-inline' 'self' 'report-sample'; connect-src 'self' https://*.linkedin.com https://*.usercentrics.eu https://*.cookiebot.eu; object-src 'self' https://*.usercentrics.eu; report-uri https://www.hamburg-pride.de/@http-reporting?csp=report&requestTime=1789289582768080&requestHash=c2765e8171a6e12d3e53f4a8e6ecfe08c5e0b943 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-YSHBMC5bv2Iow/QFu38z/HI/NE8=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com maxcdn.bootstrapcdn.com *.fontawesome.com *.fonts.googleapis.com data: *.cloudflare.com https://fonts.bunny.net *.1deelert.com connect.facebook.net *.elfsight.com core.service.elfsight.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.paypal.com *.1deelert.com connect.facebook.net *.elfsight.com core.service.elfsight.com www.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.addthis.com *.pinterest.com *.wesupply.xyz https://wesupplylabs.com *.1deelert.com *.elfsight.com core.service.elfsight.com www.googletagmanager.com *.weltpixel.com 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com magefan.com cm.magefan.com *.cloudflare.com https://cdn.klarna.com https://s.ytimg.com *.widgets.magentocommerce.com *.fpdbs.paypal.com *.t.paypal.com *.fpdbs.sandbox.paypal.com *.googleapis.com *.addthis.com *.pinterest.com *.cdninstagram.com https://firebasestorage.googleapis.com *.1deelert.com *.elfsight.com core.service.elfsight.com dbdregistered.dbd.go.th static.cloudflareinsights.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googleapis.com *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.avada.io *.shopify.com *.cloudflare.com *.1deelert.com *.elfsight.com core.service.elfsight.com static.cloudflareinsights.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com maxcdn.bootstrapcdn.com *.googleapis.com *.fontawesome.com https://fonts.bunny.net *.1deelert.com connect.facebook.net *.elfsight.com core.service.elfsight.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.cloudflare.com *.googleapis.com *.addthis.com *.cardinalcommerce.com https://graph.instagram.com https://get.geojs.io *.avada.io *.1deelert.com *.elfsight.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' *.alicdn.com *.alicaptcha.com *.mmstat.com; style-src 'self' 'unsafe-inline' https://g.alicdn.com https://dev.g.alicdn.com; img-src 'self' data: blob: https:; font-src 'self'; connect-src 'self' https:; media-src 'self' blob: https:; frame-src static.alicaptcha.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self' 1
font-src images.latitudepayapps.com imageapi.magebinary.co.nz *.fontawesome.com *.googleapis.com *.gstatic.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.images.latitudepayapps.com *.imageapi.magebinary.co.nz *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ widgets.sandbox.afterpay.com widgets.sandbox.clearpay.co.uk *.dotdigital-pages.com *.dotdigital.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com *.paypal.com * zip.co sandbox.zip.co zipmoney.com.au sandbox.zipmoney.com.au checkout.gb.zip.co checkout.quadpay.com checkout-sandbox.quadpay.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com www.paypalobjects.com t.paypal.com *.ftcdn.net *.behance.net www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com validator.swagger.io https://static.afterpay.com https://site-assets.afterpay.com/ www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.paypal.com t.zip.co static.zipmoney.com.au data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com secure.authorize.net test.authorize.net www.googleadservices.com www.google-analytics.com www.paypalobjects.com js.braintreegateway.com www.paypal.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.sandbox.paypal.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://portal.sandbox.clearpay.co.uk https://portal.clearpay.co.uk https://portal.sandbox.afterpay.com https://portal.afterpay.com https://static.afterpay.com https://js.sandbox.afterpay.com https://js.afterpay.com *.trackedlink.net *.trackedweb.net *.ddlnk.net *.dotdigital-pages.com debug-tracking.dotdigital.internal cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com *.fontawesome.com *.googleapis.com *.gstatic.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com static.zipmoney.com.au zip.co 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com static.afterpay.com/ js.sandbox.afterpay.com js.afterpay.com cdn.dnky.co webchat.dotdigital.com webchat.staging.dotdigital.com images.latitudepayapps.com/ imageapi.magebinary.co.nz/ *.fontawesome.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com static.afterpay.com static.sandbox.afterpay.com js.sandbox.afterpay.com js.afterpay.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com webchat.dotdigital.com webchat.staging.dotdigital.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.paypal.com *.cardinalcommerce.com *.google.com google.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.images.latitudepayapps.com *.imageapi.magebinary.co.nz 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-pxjNYBrGBTEqb5iJVO6jpA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-uS-mzSoQl6NjeUlb7xte_w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' https://www.buzzsprout.com/ https://cdn.jsdelivr.net/ https://www.google.com https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com/ https://cdnjs.cloudflare.com/ 'unsafe-inline' 'unsafe-eval'; script-src-elem 'self' https://www.buzzsprout.com https://cc.cdn.civiccomputing.com/ https://kit.fontawesome.com https://www.googletagmanager.com https://www.google-analytics.com https://www.google.com https://www.gstatic.com https://catalog.dotnetnuke.com https://analytics.clickdimensions.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://widget.intercom.io https://js.intercomcdn.com 'unsafe-inline'; style-src 'self' https://fonts.googleapis.com/ 'unsafe-inline'; style-src-elem 'self' https://use.fontawesome.com https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com https://ka-p.fontawesome.com https://use.fontawesome.com https://fonts.intercomcdn.com data:; frame-src 'self' https://player.vimeo.com/ https://open.spotify.com/ https://s3-eu-west-1.amazonaws.com/ https://floorplan.live/ https://www.youtube.com/ https://www.dnnsoftware.com/ https://www.google.com/ https://e.issuu.com/ https://player.vimeo.com; img-src * data: https://liveevents.the-eic.com/uploads/public/; frame-ancestors 'self' https://www.dnnsoftware.com/; connect-src 'self' https://www.google-analytics.com https://region1.google-analytics.com https://kit.fontawesome.com https://ka-p.fontawesome.com https://stats.g.doubleclick.net https://api-iam.intercom.io wss://nexus-websocket-a.intercom.io 1
object-src 'none';base-uri 'self';script-src 'nonce-AHqGQ739_3EzgaoAavYMZA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com https://static.dhlecommerce.nl https://fonts.gstatic.com https://www.gstatic.com *.fontawesome.com maxcdn.bootstrapcdn.com 'self' data: https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.multisafepay.com https://pay.google.com 'self'; frame-src bid.g.doubleclick.net www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com www.xtento.com https://*.google.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com https://www.googletagmanager.com/ js.mollie.com *.multisafepay.com https://pay.google.com 'self' 'unsafe-inline'; img-src data: widgets.magentocommerce.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com https://maps.googleapis.com https://maps.gstatic.com magefan.com cm.magefan.com *.disqus.com www.xtento.com cdn.xtento.com https://*.google.com https://*.gstatic.com https://*.googleapis.com https://*.googleusercontent.com http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ https://www.google.com/ flagpedia.net https://www.mollie.com *.multisafepay.com https://redchamps.com *.hsforms.net *.hsforms.com 'self' data: ts.tradetracker.net www.magmodules.eu https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src googleads.g.doubleclick.net www.googleadservices.com www.google-analytics.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ assets.adobedtm.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ https://static.dhlecommerce.nl https://maps.googleapis.com *.disqus.com www.xtento.com cdn.xtento.com *.gstatic.com https://*.googleapis.com https://*.ggpht.com https://*.googleusercontent.com https://hcaptcha.com https://*.hcaptcha.com https://challenges.cloudflare.com http://www.googletagmanager.com/ https://www.googletagmanager.com/ maps.googleapis.com js.mollie.com *.multisafepay.com https://pay.google.com *.hsforms.net *.hsforms.com tm.tradetracker.net https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src fonts.googleapis.com https://static.dhlecommerce.nl https://maps.googleapis.com https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com *.fontawesome.com maxcdn.bootstrapcdn.com *.gstatic.com *.multisafepay.com *.googleapis.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src http://www.googleadservices.com/ http://www.google-analytics.com/ https://www.googleadservices.com/ https://www.google-analytics.com/ 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.googleadservices.com *.google-analytics.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://api-gw.dhlparcel.nl https://static.dhlecommerce.nl https://maps.googleapis.com https://ipinfo.io https://*.google.com https://*.gstatic.com https://*.googleapis.com https://hcaptcha.com https://*.hcaptcha.com http://stats.g.doubleclick.net/ https://stats.g.doubleclick.net/ http://www.google-analytics.com/ https://www.google-analytics.com/ www.gstatic.com maps.googleapis.com *.multisafepay.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.trustedshops.com *.etrusted.com https://integrations.etrusted.site 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com data: *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://seo.mageplaza.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * *.facebook.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.online.fliphtml5.com online.fliphtml5.com www.googletagmanager.com *.google.co.nz c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.weltpixel.com *.googletagmanager.com *.doubleclick.net 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com images.salsify.com *.cloudflare.com *.google.com *.zip.co https://firebasestorage.googleapis.com https://www.magezon.com https://meetanshi.com/media/logo.png www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.facebook.com *.reddit.com *.google-analytics.com *.googletagmanager.com *.doubleclick.net data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com *.omappapi.com cdnjs.cloudflare.com *.google.co.nz www.gstatic.com www.google.com *.facebook.com *.instagram.com *.addthis.com api.addressfinder.io *.hotjar.com *.zip.co *.avada.io *.shopify.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com unpkg.com *.doubleclick.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com downloads.mailchimp.com cdnjs.cloudflare.com *.omappapi.com *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com *.tagmanager.google.com *.googletagmanager.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.algolia.net *.algolia.com *.algolianet.com *.insights.algolia.io insights.algolia.io *.googleapis.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com *.omappapi.com cdnjs.cloudflare.com *.google.co.nz www.gstatic.com www.google.com *.facebook.com *.instagram.com *.addthis.com api.addressfinder.io *.hotjar.com *.zip.co *.cloudfront.net https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.google-analytics.com *.analytics.google.com *.facebook.net *.redditstatic.com *.reddit.com *.tiktok.com *.doubleclick.net *.run.app 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
font-src *.googleapis.com *.gstatic.com data: 'self' data: *.doubleclick.net *.facebook.com *.googlesyndication.com *.tiktok.com https://static.dhlecommerce.nl https://fonts.gstatic.com *.fontawesome.com https://applepay.cdn-apple.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.googlesyndication.com *.tiktok.com 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com *.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com https://applepay.cdn-apple.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.gstatic.com *.googleapis.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com 'self' data: *.google.com *.google.bg *.facebook.net *.doubleclick.net *.googletagmanager.com *.googlesyndication.com *.roeye.com *.tiktok.com https://maps.googleapis.com https://maps.gstatic.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://static.buckaroo.nl https://www.buckaroo.nl https://www.paypalobjects.com https://pay.google.com https://developers.google.com https://applepay.cdn-apple.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.googleapis.com *.gstatic.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.google.com *.google.bg *.googletagmanager.com *.facebook.net *.doubleclick.net *.google-analytics.com *.googlesyndication.com *.jsdelivr.net *.tiktok.com https://static.dhlecommerce.nl https://maps.googleapis.com chimpstatic.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://buckaroo.nl https://www.paypal.com https://www.sandbox.paypal.com https://applepay.cdn-apple.com https://pay.google.com https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.googlesyndication.com *.tiktok.com https://static.dhlecommerce.nl https://maps.googleapis.com https://fonts.googleapis.com downloads.mailchimp.com https://static.klaviyo.com *.fontawesome.com https://static.buckaroo.nl https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.googleapis.com *.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google-analytics.com *.facebook.net *.google.com *.doubleclick.net *.googlesyndication.com *.tiktok.com https://api-gw.dhlparcel.nl https://static.dhlecommerce.nl https://maps.googleapis.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://static.buckaroo.nl wss://websockets.buckaroo.io/ https://checkout.buckaroo.nl https://testcheckout.buckaroo.nl https://hostedfields-externalapi.alpha.buckaroo.aws https://hostedfields-externalapi.prod-pci.buckaroo.io https://applepay.buckaroo.io https://smp-paymentservices.apple.com https://www.paypal.com https://www.sandbox.paypal.com https://pay.google.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
report-uri /csp-violation-report;default-src 'self';base-uri 'self';script-src 'self' 'unsafe-eval' https://assets.ymshub.com https://www.datadoghq-browser-agent.com https://cdn.jsdelivr.net https://cdn.datatables.net https://kit.fontawesome.com https://cdnjs.cloudflare.com https://canvasjs.com https://cdn.canvasjs.com https://www.googletagmanager.com https://*.googleapis.com https://*.gstatic.com *.google.com https://*.ggpht.com *.googleusercontent.com blob: 'nonce-MQngd12zG97P1ZDmboCzhP5Bi04Kdox1UHFvNICS';style-src 'self' 'unsafe-inline' https://assets.ymshub.com https://fonts.googleapis.com https://cdn.jsdelivr.net https://cdn.datatables.net https://ka-p.fontawesome.com https://fonts.bunny.net;font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net https://*.fontawesome.com https://fonts.bunny.net data:;img-src 'self' https://assets.ymshub.com https://yms-client-storage-production.s3.us-east-2.amazonaws.com https://yms-client-storage-production.s3.us-west-2.amazonaws.com https://yms-client-storage-production.s3.amazonaws.com https://yms-client-storage-production-us-east-2.s3.us-east-2.amazonaws.com https://*.googleapis.com https://*.gstatic.com *.google.com blob: data: https://ymshub-assets.s3.amazonaws.com;connect-src 'self' wss://ws.ymshub.com:443 https://cdn.jsdelivr.net https://browser-intake-datadoghq.com https://ka-p.fontawesome.com https://*.googleapis.com *.google.com https://*.gstatic.com https://*.google-analytics.com data: blob:;frame-src 'self' https://www.googletagmanager.com *.google.com;form-action 'self';object-src 'none';media-src 'self' https://assets.ymshub.com;manifest-src 'self';worker-src 'self' blob: 1
object-src 'none'; base-uri 'self'; script-src 'self' 'nonce-7_Dq7gg-tx5UzFrxJpF6Yg' 'unsafe-inline' 'unsafe-eval' https://*.msauth.net https://*.msftauth.net https://*.msftauthimages.net https://*.msauthimages.net https://*.msidentity.com https://*.microsoftonline-p.com https://*.microsoftazuread-sso.com https://*.azureedge.net https://*.outlook.com https://*.office.com https://*.office365.com https://*.microsoft.com https://*.bing.com 'report-sample'; report-uri https://csp.microsoft.com/report/ESTS-UX-All 1
font-src www.paypalobjects.com fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com *.cdn-apple.com *.fontawesome.com https://fonts.bunny.net https://fonts.gstatic.com https://cdnjs.cloudflare.com https://maxcdn.bootstrapcdn.com https://cdn.jsdelivr.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * https://www.jotform.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com js.mollie.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * 'self' 'unsafe-inline'; img-src data: assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net *.analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io https://images.unsplash.com magefan.com cm.magefan.com *.disqus.com https://img.youtube.com https://firebasestorage.googleapis.com https://www.mollie.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com www.google.com.ua https://load.ss.tegelfabriek-nederland.nl https://tegelfabrieknl.hypernode.io https://staging.tegelfabrieknl.hypernode.io https://s3.eu-central-1.amazonaws.com https://www.google.nl https://bat.bing.com https://www.facebook.com https://ss.tegelfabriek-nederland.nl https://cdn-cookieyes.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com https://maps.googleapis.com https://player.vimeo.com *.disqus.com https://cdn.jsdelivr.net https://static.zdassets.com https://www.gstatic.com *.avada.io *.shopify.com js.mollie.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com https://load.ss.tegelfabriek-nederland.nl https://cdn.widget.trengo.eu https://static.widget.trengo.eu https://s.pinimg.com https://cdn-cookieyes.com https://connect.facebook.net https://bat.bing.com https://ct.pinterest.com https://www.clarity.ms *.clarity.ms https://track.adform.net 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com https://cdn.jsdelivr.net *.fontawesome.com https://fonts.bunny.net assets.braintreegateway.com https://fonts.googleapis.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com https://static.widget.trengo.eu 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net *.google-analytics.com www.googleadservices.com *.analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com https://maps.googleapis.com https://player.vimeo.com https://pagead2.googlesyndication.com https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.pay.nl https://load.ss.tegelfabriek-nederland.nl https://api.widget.trengo.eu https://cdn.widget.trengo.eu https://static.widget.trengo.eu https://www.jotform.com https://ct.pinterest.com https://s.pinimg.com https://ss.tegelfabriek-nederland.nl https://p2iqhncxyh.execute-api.eu-central-1.amazonaws.com https://log.cookieyes.com https://cdn-cookieyes.com https://bat.bing.com https://directory.cookieyes.com *.clarity.ms 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.tegelfabriek-nederland.nl/paynl/csp/report; report-to report-endpoint; 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-6UuEuSfJas+SeDXIroz8X6cX1Oo=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
font-src *.cloudflare.com *.twitter.com *.gstatic.com *.typekit.net *.twimg.com *.trustedshops.com *.googleapis.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.twitter.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com 0merchantacsstag.cardinalcommerce.com merchantacs.cardinalcommerce.com *.google.com *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.youtube.com/ *.online-metrix.net testflex.cybersource.com flex.cybersource.com testsecureacceptance.cybersource.com secureacceptance.cybersource.com pay.google.com merchantacs.cardinalcommerce.com 0merchantacsstag.cardinalcommerce.com *.google.com https://scontent-ams4-1.cdninstagram.com c.paypal.com checkout.paypal.com assets.braintreegateway.com *.cardinalcommerce.com *.paypal.com * 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com validator.swagger.io *.cloudflare.com *.klarna.com *.googleadservices.com *.google-analytics.com *.paypal.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.online-metrix.net *.tile.openstreetmap.org *.openstreetmap.fr www.gstatic.com *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com https://clauem2.arrowtheme.com https://scontent-ams4-1.cdninstagram.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.hsforms.net *.hsforms.com data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.cloudflare.com *.twitter.com *.google-analytics.com *.google.com *.twimg.com *.gstatic.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.online-metrix.net testflex.cybersource.com flex.cybersource.com pay.google.com x.klarnacdn.net centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.maps.googleapis.com *.trackedlink.net *.maps.gstatic.com maps.googleapis.com *.googletagmanager.com *.googleadservices.com https://scontent-ams4-1.cdninstagram.com js.braintreegateway.com assets.braintreegateway.com c.paypal.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com *.hsforms.net *.hsforms.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.cloudflare.com *.googleapis.com *.twitter.com *.twimg.com *.gstatic.com *.typekit.net *.trustedshops.com *.usercentrics.eu *.fontawesome.com *.google.com *.maps.gstatic.com maps.gstatic.com maps.googleapis.com fonts.googleapis.com *.google-analytics.com unsafe-inline assets.braintreegateway.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.cloudflare.com *.twitter.com *.paypal.com *.twimg.com *.googleadservices.com *.google-analytics.com *.sandbox.paypal.com *.paypalobjects.com *.trackedlink.net *.ampproject.org *.google.com *.google.co.in *.maps.gstatic.com *.maps.googleapis.com maps.googleapis.com https://scontent-ams4-1.cdninstagram.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.braintree-api.com *.cardinalcommerce.com t.elasticsuite.io *.hsforms.net *.hsforms.com 'self' 'unsafe-inline'; child-src assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; report-uri https://www.example.com/; report-to report-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-3i3wiVWG31j4aGzwaMuU2w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src     'self' https://social-wall.websenso.com;     script-src      'self' 'unsafe-eval' 'unsafe-inline' https://social-wall.websenso.com https://analytics.websenso.com https://www.notre-commune.fr https://app.mailjet.com https://*.synbird.com https://ws-dev.websenso.dev https://api.websenso.com;     style-src       'self' 'unsafe-inline' https://social-wall.websenso.com https://www.notre-commune.fr;     img-src         'self' data: https://analytics.websenso.com https://social-wall.websenso.com https://images.weserv.nl https://wsrv.nl https://*.tile.openstreetmap.org https://tile.openstreetmap.org https://www.notre-commune.fr https://images.synbird.com https://ws-dev.websenso.dev https://api.websenso.com;     frame-src       https://www.openstreetmap.org https://app.mailjet.com https://www.skaping.com https://v.calameo.com https://www.youtube-nocookie.com https://*.notre-commune.fr https://*.mjt.lu;     connect-src     'self' https://analytics.websenso.com https://www.notre-commune.fr  https://*.synbird.com;     report-uri      https://csp-report.appsenso.eu/report.php; 1
script-src 'self' 'unsafe-inline' 'unsafe-eval' https://analytics.google.com https://bat.bing.com https://cdn.cookielaw.org https://app.pendo.io https://cdn.pendo.io https://cdn.segment.com https://cdn.walkme.com https://cdnssl.clicktale.net https://data.pendo.io https://ds-aksb-a.akamaihd.net https://nexus.ensighten.com https://siteintercept.qualtrics.com https://www.glancecdn.net https://www.googletagmanager.com https://*.clicktale.net https://*.cloudflare.com https://*.facebook.net https://*.fidelity.com https://*.fmr.com https://*.glancecdn.net https://*.demdex.net https://*.doubleclick.net https://*.omtrdc.net https://*.online-metrix.net https://*.privacymanager.io https://*.segment.com https://*.siteintercept.qualtrics.com https://d.agkn.com https://siteintercept.qualtrics.com; script-src-elem 'self' 'unsafe-inline' https://analytics.google.com https://bat.bing.com https://cdn.cookielaw.org https://app.pendo.io https://cdn.pendo.io https://cdn.segment.com https://cdn.walkme.com https://cdnssl.clicktale.net https://data.pendo.io https://ds-aksb-a.akamaihd.net https://nexus.ensighten.com https://siteintercept.qualtrics.com https://www.glancecdn.net https://www.googletagmanager.com https://*.clicktale.net https://*.cloudflare.com https://*.facebook.net https://*.fidelity.com https://*.fmr.com https://*.glancecdn.net https://*.demdex.net https://*.doubleclick.net https://*.omtrdc.net https://*.online-metrix.net https://*.privacymanager.io https://*.segment.com https://*.siteintercept.qualtrics.com https://d.agkn.com https://siteintercept.qualtrics.com; font-src 'self' data: *; img-src 'self' data: blob: *; media-src 'self' data: blob: *; connect-src 'self' blob: data: * chrome-extension: moz-extension:; child-src 'self' blob: *; frame-src 'self' blob: *; style-src 'unsafe-inline' *; worker-src 'self' blob:; default-src *; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pubdbe43cdb0fed70b9575444d8ad225b0d&dd-evp-origin=content-security-policy&ddsource=csp-report&ddtags=service%3Aap118909-digital%2Cenv%3Aprod%2Cfid_index_id%3Acsp-prod 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com maxcdn.bootstrapcdn.com data: https://widgets.trustedshops.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.awin1.com *.zenaps.com *.fls.doubleclick.net *.addthis.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * secure.pay1.de payments.amazon.de jsctool.com www.jsctool.com js.playground.klarna.com *.tokenization.secure.payone.com https://api.sovendus.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.awin1.com *.zenaps.com *.wepowerconnections.com *.facebook.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com cdn.pay1.de x.klarnacdn.net *.cloudfront.net m.media-amazon.com static-eu.payments-amazon.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com *.etrusted.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.awin1.com *.dwin1.com *.zenaps.com *.wepowerconnections.com https://the.sciencebehindecommerce.com lantern.roeyecdn.com tm.dlv-shop.de *.addthis.com *.moatads.com *.addthisedge.com *.pinterest.com *.googletagmanager.com *.facebook.net js.braintreegateway.com assets.braintreegateway.com c.paypal.com pay.google.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.paypal.com songbirdstag.cardinalcommerce.com secure.pay1.de d.ratepay.com static-eu.payments-amazon.com x.klarnacdn.net cdn.klarna.com jsctool.com d.payla.io *.tokenization.secure.payone.com https://widgets.trustedshops.com https://widgets-qa.trustedshops.com https://integrations.etrusted.com https://integrations.etrusted.site https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com https://api.sovendus.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com maxcdn.bootstrapcdn.com assets.braintreegateway.com d.ratepay.com d.payla.io dr.payla.io src.mastercard.com https://widgets.trustedshops.com https://static-app.connect.trustedshops.com https://static-app.connect-qa.trustedshops.com *.etrusted.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.wepowerconnections.com https://the.sciencebehindecommerce.com tm.dlv-shop.de *.addthis.com *.google-analytics.com api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com payments.amazon.de payments-eu.amazon.com d.ratepay.com jsctool.com eu.playground.klarnaevt.com *.tokenization.secure.payone.com autocomplete2.postdirekt.de *.trustedshops.com *.etrusted.com https://integrations.etrusted.site https://api.sovendus.com https://identification-api.sovendus.com https://coupon-api.sovendus.com 'self' 'unsafe-inline'; child-src *.awin1.com *.zenaps.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src https:;script-src https: 'self' 'strict-dynamic' 'nonce-dc661064e11ad31aa53062705b8d639e38cafb22149b5f3a60831c31259f6357' 'unsafe-inline' 'unsafe-eval' 'report-sample';style-src https: 'unsafe-inline';img-src https: data:;connect-src https: wss:;font-src https: data:;object-src 'none';media-src https: blob: data:;frame-src https: data: blob:;child-src 'self' https:;form-action 'self';frame-ancestors https://my.firespring.com;base-uri 'self' https://insights.sitesearch360.com;worker-src 'self' blob:;manifest-src 'self' https://cdn.firespring.com;report-uri /csp_log?n=1 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.googleapis.com *.fontawesome.com *.yotpo.com *.klarnacdn.net www.ekstralys.dk data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com https://*.svea.com https://*.vipps.no https://*.trustly.com www.ekstralys.dk 'self' 'unsafe-inline'; frame-ancestors www.ekstralys.dk 'self'; frame-src fast.amc.demdex.net *.adobe.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com bid.g.doubleclick.net www.googletagmanager.com *.demdex.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.klarna.com www.xtento.com https://*.svea.com www.ekstralys.dk 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net *.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com p.typekit.net *.telemetry-dev.adobe.io *.demdex.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.ftcdn.net *.behance.net data: *.googleapis.com *.klarna.com *.klarnaevt.com *.klarnacdn.net *.cloudflare.com *.googleadservices.com *.google-analytics.com *.cloudfront.net www.xtento.com cdn.xtento.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ ts.tradetracker.net www.magmodules.eu www.ekstralys.dk data: 'self' 'unsafe-inline'; script-src *.adobedtm.com *.adobe.com geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com use.typekit.net *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com unpkg.com/@adobe/ cdn.jsdelivr.net/npm/@adobe/ commerce.adobedtm.com js.magento-datasolutions.com *.newrelic.com *.nr-data.net assets.adobedtm.com commerce.adobe.net *.commerce-payment-services.com commerce-payments-sdk.adobe.io *.magento-ds.com www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com magento-recs-sdk.adobe.net s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.magento-datasolutions.com https://rum.hlx.page *.googleapis.com *.gstatic.com *.klarna.com *.klarnacdn.net *.criteo.net *.criteo.com *.facebook.net *.google-analytics.com *.amazon.co.uk *.amazon.com *.payments-amazon.com cookie-script.com s.kk-resources.com *.livechatinc.com bat.bing.com js.adsrvr.org sc-static.net *.hotjar.com *.snapchat.com *.sleeknote.com https://*.dibspayment.eu www.xtento.com cdn.xtento.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://*.svea.com *.klarnaservices.com tm.tradetracker.net www.ekstralys.dk 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com fonts.googleapis.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.gstatic.com https://static.klaviyo.com *.klarnacdn.net *.fontawesome.com www.ekstralys.dk 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com www.ekstralys.dk 'self' 'unsafe-inline'; manifest-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io *.telemetry.adobe.io telemetry.adobe.io p13n.adobe.io p13n-mr.adobe.io *.sentry.io *.sentry-cdn.com plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com livesearch-metrics-qa.magento-datasolutions.com livesearch-metrics.magento-ds.com commerce-int.adobe.io commerce.adobe.io *.snplow.net commerce.adobedc.net *.newrelic.com *.nr-data.net vimeo.com api.magento.com *.adobe.io performance.typekit.net www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.magento-datasolutions.com *.magento-ds.com *.googleapis.com *.klarnaevt.com *.amazon.co.uk *.amazon.com *.payments-amazon.com *.doubleclick.net *.google-analytics.com *.snapchat.com *.criteo.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.klarnacdn.net *.klarna.com *.klarnaservices.com www.ekstralys.dk 'self' 'unsafe-inline'; child-src www.ekstralys.dk http: https: blob: 'self' 'unsafe-inline'; default-src *.search-admin-ui-qa.magento-datasolutions.com search-admin-ui-qa.magento-datasolutions.com *.search-admin-ui.magento-ds.com search-admin-ui.magento-ds.com *.telemetry-dev.adobe.io telemetry-dev.adobe.io amcglobal.sc.omtrdc.net plp-widgets-ui-qa.magento-datasolutions.com plp-widgets-ui.magento.ds.com searchautocompleteqa.magento-datasolutions.com livesearch-autocomplete.magento-ds.com www.ekstralys.dk 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src 'none';base-uri 'self';script-src 'nonce-tutxZSmSk7qgtCP3Cozbkg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.fontawesome.com https://cdnjs.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.cleverreach.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net https://www.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com *.google.com/ 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.cloudfront.net https://www.magezon.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com https://cdn.jsdelivr.net *.google.com/ https://cdnjs.cloudflare.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.fontawesome.com https://fonts.googleapis.com https://cdnjs.cloudflare.com 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com api.friendlycaptcha.com eu-api.friendlycaptcha.eu 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
default-src 'self'; frame-src https://td.doubleclick.net https://www.googletagmanager.com https://*.veriff.me https://*.veriff.com https://js.stripe.com https://hooks.stripe.com; connect-src 'self' https://*.googletagmanager.com https://*.google-analytics.com https://*.analytics.google.com https://*.g.doubleclick.net https://ad.doubleclick.net https://www.googleadservices.com https://pagead2.googlesyndication.com https://*.google.com https://google.com https://*.google.de https://*.google.at https://*.veriff.me https://*.veriff.com https://api.stripe.com https://fsn1.your-objectstorage.com https://api.hallobabysitter.de; font-src 'self'; img-src 'self' data: blob: https://*.googletagmanager.com https://*.google-analytics.com https://*.g.doubleclick.net https://ad.doubleclick.net https://www.googleadservices.com https://pagead2.googlesyndication.com https://*.google.com https://google.com https://*.google.de https://*.google.at https://*.veriff.me https://*.veriff.com; object-src 'none'; script-src 'self' https://*.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://js.stripe.com 'nonce-5xMGr56zkdsotqahahi7TQ=='; style-src 'self' 'unsafe-inline'; base-uri 'self'; form-action 'self'; report-to csp-console-only 1
font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.cdn-apple.com *.googleapis.com data: *.shopperapproved.com *.cloudflare.com *.twitter.com *.google.com *.google.co.in *.facebook.com *.twimg.com *.trustedshops.com *.bootstrapcdn.com wss://vts.zohopublic.in *.zohocdn.com *.google-analytics.com https://k8wflbhm6p-2.algolianet.com *.certcapture.com *.livehelpnow.net app.livehelpnow.net https://applepay.cdn-apple.com *.linkedin.com *.pay.google.com googletagmanager.com www.googletagmanager.com *.googletagmanager.com www.google-analytics.com *.metrics.convertexperiments.com *.signals.convertexperiments.com logs.convertexperiments.com *.convertexperiments.com *.fontawesome.com https://fonts.bunny.net maxcdn.bootstrapcdn.com *.rigidhitch.com *.blueoxtowbars.com 'self' data: data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com *.shopperapproved.com *.twitter.com *.facebook.com *.google-analytics.com wss://vts.zohopublic.in https://k8wflbhm6p-2.algolianet.com *.certcapture.com app.livehelpnow.net *.linkedin.com *.pay.google.com *.adobe.com googletagmanager.com www.googletagmanager.com *.googletagmanager.com www.google-analytics.com *.metrics.convertexperiments.com *.signals.convertexperiments.com logs.convertexperiments.com *.convertexperiments.com https://www.shopperapproved.com *.cardinalcommerce.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors www.gstatic.com *.certcapture.com *.google.com 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com www.google.com *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com *.shopperapproved.com 'self' https://js.stripe.com *.twitter.com https://www.google.com https://www.google.co.in https://www.facebook.com *.google-analytics.com wss://vts.zohopublic.in https://k8wflbhm6p-2.algolianet.com https://maps.google.com/ https://transaction.hostedpayments.com/ https://certtransaction.hostedpayments.com/ *.livehelpnow.net app.livehelpnow.net https://form.jotform.com/ https://submit.jotform.com/ *.linkedin.com *.pay.google.com https://www.paypal.com *.googletagmanager.com www.googletagmanager.com www.google-analytics.com *.metrics.convertexperiments.com *.signals.convertexperiments.com logs.convertexperiments.com *.convertexperiments.com c.paypal.com checkout.paypal.com assets.braintreegateway.com pay.google.com *.cardinalcommerce.com * *.doubleclick.net *.facebook.com *.rigidhitch.com *.blueoxtowbars.com *.paypalobjects.com *.hostedpayments.com *.purechatcdn.com *.weltpixel.com *.wesupply.xyz https://wesupplylabs.com 'self' 'unsafe-inline'; img-src assets.adobedtm.com amcglobal.sc.omtrdc.net dpm.demdex.net cm.everesttech.net *.adobe.com widgets.magentocommerce.com 'self' data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytics.google.com www.googletagmanager.com *.ftcdn.net *.behance.net data: t.paypal.com www.paypal.com www.paypalobjects.com fpdbs.paypal.com fpdbs.sandbox.paypal.com *.vimeocdn.com i.ytimg.com *.youtube.com p.typekit.net *.paypal.com *.typekit.net *.gstatic.com validator.swagger.io *.googleapis.com *.certcapture.com connect.bolt.com connect-sandbox.bolt.com s3-us-west-1.amazonaws.com *.shopperapproved.com/ *.adobedtm.com *.cloudflare.com *.googleadservices.com *.google-analytics.com *.google.com *.google.co.in https://www.facebook.com *.klarna.com *.twitter.com *.twimg.com *.ytimg.com *.lightemporium.com *.usercentrics.eu *.connect.facebook.net https://stats.g.doubleclick.net https://d.adroll.com https://pixel.advertising.com https://pixel.rubiconproject.com https://simage2.pubmatic.com https://dsum-sec.casalemedia.com https://ads.yahoo.com https://eb2.3lift.com https://sync.outbrain.com https://trc.taboola.com https://x.bidswitch.net/sync https://ib.adnxs.com https://idsync.rlcdn.com https://us-u.openx.net https://ups.analytics.yahoo.com https://segments.company-target.com https://sync.tidaltv.com *.zohopublic.in *.zoho.in *.zohocdn.com wss://vts.zohopublic.in https://k8wflbhm6p-2.algolianet.com *.amazonaws.com *.livehelpnow.net app.livehelpnow.net https://vct-vendor.github.io https://s3.envato.com https://alothemes.com/ cdn-cookieyes.com *.linkedin.com *.pay.google.com *.googletagmanager.com *.metrics.convertexperiments.com *.signals.convertexperiments.com logs.convertexperiments.com *.convertexperiments.com ebizmarts-website.s3.amazonaws.com downloads.mailchimp.com gallery.mailchimp.com form-assets.mailchimp.com https://www.shopperapproved.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com https://firebasestorage.googleapis.com www.sandbox.paypal.com b.stats.paypal.com dub.stats.paypal.com assets.braintreegateway.com c.paypal.com checkout.paypal.com *.answerbase.com rigidhitch.dckap.co *.rigidhitch.com *.blueoxtowbars.com *.godaddy.com *.bing.com *.facebook.net *.facebook.com *.clarity.ms *.purechat.com *.purechatcdn.com *.wp.com *.gravatar.com https://www.googletagmanager.com *.hsforms.net *.hsforms.com *.reddit.com data: 'self' 'unsafe-inline'; script-src assets.adobedtm.com *.adobe.com www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net geostag.cardinalcommerce.com 1eafstag.cardinalcommerce.com geoapi.cardinalcommerce.com 1eafapi.cardinalcommerce.com songbird.cardinalcommerce.com includestest.ccdc02.com *.commerce-payment-services.com commerce-payments-sdk.adobe.io www.paypal.com www.sandbox.paypal.com www.paypalobjects.com t.paypal.com s.ytimg.com www.googleapis.com *.vimeo.com www.vimeo.com *.vimeocdn.com *.youtube.com https://www.gstatic.com/recaptcha/ *.google.com amcglobal.sc.omtrdc.net *.magento-ds.com use.typekit.net *.typekit.net google.com *.cdn-apple.com *.braintreegateway.com *.googleapis.com *.gstatic.com www.google.com/recaptcha/ www.gstatic.com/recaptcha/ *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com www.shopperapproved.com *.cloudflare.com *.twitter.com *.twimg.com *.trustedshops.com *.usercentrics.eu *.fontawesome.com chimpstatic.com https://bat.bing-int.com https://leadtracker.smartsites.com *.omniconvert.com *.cookieyes.com cdn-cookieyes.com snap.licdn.com *.linkedin.com *.bing.net https://mpc2-prod-1-is5qnl632q-uc.a.run.app 'report-sample' 'self' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' *.adobedtm.com *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com js.braintreegateway.com assets.braintreegateway.com *.cardinalcommerce.com songbirdstag.cardinalcommerce.com *.pay.google.com *.google-analytics.com *.googletagmanager.com apis.google.com *.googleadservices.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha https://www.google.com/recaptcha *.google.com/ https://maps.googleapis.com/maps/api/js *.instagram.com klarna.com *.klarna.com *.klarnacdn.net *.klarnaevt.com https://www.paypal.com https://www.paypalobjects.com *.paypalobjects.com c.paypal.com *.paypal.com sandbox.paypal.com *.sandbox.paypal.com https://js.stripe.com/v3/ *.stripe.com *.link.com *.livehelpnow.net app.livehelpnow.net *.polyfill.io *.crazyegg.com https://www.googletagmanager.com https://googleads.g.doubleclick.net *.metrics.convertexperiments.com *.signals.convertexperiments.com logs.convertexperiments.com *.convertexperiments.com downloads.mailchimp.com *.list-manage.com form-assets.mailchimp.com https://www.shopperapproved.com https://direct.shopperapproved.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ *.disqus.com pay.google.com *.purechat.com *.purechatcdn.com *.answerbase.com *.hostedpayments.com *.bing.com *.clarity.ms *.googleadservices.com/ *.blueoxtowbars.com https://www.google-analytics.com *.hsforms.net *.hsforms.com tagmanager.google.com *.facebook.net *.redditstatic.com *.reddit.com unpkg.com https://chimpstatic.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.adobe.com fonts.googleapis.com *.certcapture.com *.shopperapproved.com 'report-sample' 'self' 'unsafe-inline' https://maxcdn.bootstrapcdn.com *.bootstrapcdn.com *.cloudflare.com *.fontawesome.com *.googleapis.com *.gstatic.com *.linkedin.com *.pay.google.com googletagmanager.com www.googletagmanager.com *.googletagmanager.com *.google-analytics.com www.google-analytics.com *.metrics.convertexperiments.com *.signals.convertexperiments.com logs.convertexperiments.com *.convertexperiments.com downloads.mailchimp.com https://static.klaviyo.com https://fonts.bunny.net maxcdn.bootstrapcdn.com assets.braintreegateway.com *.answerbase.com *.rigidhitch.com *.blueoxtowbars.com *.gravatar.com *.wp.com tagmanager.google.com 'self' 'unsafe-inline'; object-src connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com 'self' 'unsafe-inline'; media-src *.adobe.com 'self' 'self' 'unsafe-inline'; manifest-src 'self' *.google.com 'self' 'unsafe-inline'; connect-src dpm.demdex.net amcglobal.sc.omtrdc.net www.google-analytics.com www.googleadservices.com analytics.google.com www.googletagmanager.com *.newrelic.com *.nr-data.net vimeo.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.sandbox.paypal.com www.paypalobjects.com www.paypal.com pilot-payflowlink.paypal.com *.adobe.io performance.typekit.net *.sentry.io *.paypal.com google.com *.google.com *.braintreegateway.com *.braintree-api.com *.googleapis.com *.certcapture.com connect.bolt.com connect-sandbox.bolt.com account.bolt.com account-sandbox.bolt.com sessions.bugsnag.com *.shopperapproved.com 'self' *.cloudflare.com 'self' https://maps.googleapis.com *.twitter.com *.twimg.com *.google.co.in *.facebook.com *.zohopublic.in *.zoho.in *.google-analytics.com wss://vts.zohopublic.in https://k8wflbhm6p-2.algolianet.com https://google.com/pay *.livehelpnow.net wss://app.livehelpnow.net https://alothemes.com *.crazyegg.com *.cookieyes.com cdn-cookieyes.com *.omniconvert.com https://bat.bing-int.com snap.licdn.com *.linkedin.com *.bing.net https://mpc2-prod-1-is5qnl632q-uc.a.run.app https://mpc-prod-18-s6uit34pua-uc.a.run.app *.pay.google.com https://demo-1.conversionsapigateway.com googletagmanager.com *.googletagmanager.com *.metrics.convertexperiments.com *.signals.convertexperiments.com logs.convertexperiments.com *.convertexperiments.com form-assets.mailchimp.com *.intuit.com *.amazonaws.com https://static.klaviyo.com https://static-forms.klaviyo.com https://fast.a.klaviyo.com https://static-tracking.klaviyo.com/ https://a.klaviyo.com/ https://telemetrics.klaviyo.com/ https://get.geojs.io *.avada.io api.braintreegateway.com api.sandbox.braintreegateway.com client-analytics.braintreegateway.com client-analytics.sandbox.braintreegateway.com *.cardinalcommerce.com *.answerbase.com *.smarty.com *.rigidhitch.com *.blueoxtowbars.com *.clarity.ms *.purechat.com *.purechatcdn.com *.bing.com *.doubleclick.net *.smartsites.com *.facebook.net *.online-metrix.net https://www.google-analytics.com https://www.googletagmanager.com t.elasticsuite.io *.hsforms.net *.hsforms.com *.redditstatic.com *.reddit.com 'self' 'unsafe-inline'; child-src *.certcapture.com assets.braintreegateway.com c.paypal.com *.paypal.com http: https: blob: 'self' 'unsafe-inline'; default-src 'self' *.googleapis.com ap.thepayapays.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'self' 'unsafe-inline'; report-uri https://rigidhitch.com/; report-to report-endpoint; 1
object-src 'none';base-uri 'self';script-src 'nonce-CWNqKf6kLD3zUufLY4fLzw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
base-uri 'self'; style-src https: 'self' 'unsafe-inline' *.googletagmanager.com *.tagmanager.google.com *.fonts.googleapis.com; script-src https: 'nonce-uoUbmLGZfXk3BnVBK3PBrvyiV54=' 'strict-dynamic'; form-action 'self' ; frame-ancestors 'self' https://www.slipcase.com https://marketplace.marsh.com; frame-src 'self' view.ceros.com *.company-target.com *.google.com *.googletagmanager.com *.doubleclick.net *.g.doubleclick.net; report-to csp-endpoint; report-uri https://axaxl.com/api/CSP; font-src 'self' fonts.gstatic.com data:; img-src 'self' * data:; connect-src 'self' browser-intake-datadoghq.com *.googleadservices.com *.googletagmanager.com www.googletagmanager.com *.google-analytics.com *.analytics.google.com *.g.doubleclick.net www.google.com www.google.co.uk www.google.com.sg *.google.com *.googlesyndication.com *.company-target.com *.linkedin.com *.licdn.com *.brightcove.com *.brightcove.net *.brightcovecdn.com *.demandbase.com *.boltdns.net *.akamaihd.net *.nr-data.net *.en25.com; manifest-src 'self'; media-src blob: *.brightcovecdn.com *.boltdns.net *.media.brightcove.com *.akamaihd.net *.cf.brightcove.com; default-src 'self' mailto: tel: www.google.com www.google.co.uk *.google.com *.googletagmanager.com www.googletagmanager.com *.company-target.com *.linkedin.com *.licdn.com *.eloqua.com *.brightcove.com *.brightcove.net *.rlcdn.com *.boltdns.net *.demandbase.com *.akamaihd.net *.axaxl.com *.doubleclick.net *.en25.com www.google.com.sg; 1
style-src https://progress.my.salesforce.com *.force.com https://vars.hotjar.com https://licensing.whatsupgold.com 'self' https://stats.g.doubleclick.net https://forms.chef.io https://checkoutshopper-test.adyen.com/ https://brandfolder.com https://cdn.cookielaw.org https://*.springcm.com https://www.gstatic.com https://progress.com https://testflex.cybersource.com https://www.google.com https://analytics.google.com https://fonts.googleapis.com/css2 https://flex.cybersource.com blob: https://www.google.bg https://fonts.googleapis.com/css https://chefdownload-commerical.chef.io https://usageanalytics.coveo.com https://ssl.gstatic.com https://service.force.com/embeddedservice/ https://packages.chef.io https://*.docusign.net 'unsafe-inline' https://*.6sc.co https://api.mixpanel.com https://progress--coveov2.vf.force.com https://dntcl.qualaroo.com https://pro.fontawesome.com https://a.omappapi.com https://fonts.gstatic.com https://api.insight.sitefinity.com https://cloudplatform.coveo.com https://img.en25.com https://checkoutshopper-live.adyen.com/ https://*.clm.docusign.mil https://turbo.qualaroo.com https://platform.cloud.coveo.com https://cdn.rag.progress.cloud https://fonts.googleapis.com https://*.docusign.com https://accounts.progress.cloud https://tagmanager.google.com https://geolocation.onetrust.com https://forms-acceptance.chef.co https://td.doubleclick.net https://www.google.co.in https://services.chef.io https://*.crazyegg.com https://*.clmfed.docusign.com https://in.hotjar.com https://assets.lusha.co https://progress--coveov2.na133.visual.force.com https://privacyportal.onetrust.com https://www.googletagmanager.com https://progress--test--livepreview.cs27.force.com https://www.google-analytics.com *.salesforce.com *.visualforce.com:* https://api.omappapi.com; report-to sfdc-csp-ep; report-uri https://progress.lightning.force.com/_/ContentDomainCSPNoAuth?tenantId=00D3000000007FS&networkId=0DM4Q0000004OdG&type=communities 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://js.hsforms.net https://js.hs-scripts.com https://js.hs-analytics.net https://js.hscollectedforms.net https://*.hubspot.com https://fast.wistia.com https://fast.wistia.net https://embed-ssl.wistia.com https://navattic.com https://*.navattic.com https://www.clarity.ms https://*.clarity.ms https://snap.licdn.com https://px.ads.linkedin.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fast.wistia.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; connect-src 'self' https://*.hubspot.com https://*.hsforms.com https://*.wistia.com https://*.navattic.com https://www.clarity.ms https://*.clarity.ms https://*.linkedin.com; frame-src 'self' https://*.hubspot.com https://*.wistia.com https://fast.wistia.net https://*.navattic.com; media-src 'self' blob: https://*.wistia.com https://embedwistia-a.akamaihd.net; worker-src 'self' blob:; object-src 'none'; frame-ancestors 'self'; base-uri 'self'; form-action 'self' https://*.hubspot.com; upgrade-insecure-requests 1
default-src 'self';  script-src 'self'    https://vercel.live    https://www.googletagmanager.com    https://beacon.riskified.com    https://static.moonpay.com    https://cdn.checkout.com    https://s3.tradingview.com    https://static.zdassets.com    https://cdn.gsght.com    https://connect.facebook.net    https://www.google-analytics.com    https://www.redditstatic.com    'unsafe-inline';  style-src 'self' 'unsafe-inline';  connect-src 'self' *    https://listing-api.openloot.com    https://vault-api.openloot.com    https://auth-api.openloot.com    https://www.google-analytics.com;  frame-src 'self' https://vercel.live https://export.turnkey.com/ https://auth.turnkey.com/ https://s3.tradingview.com https://www.tradingview-widget.com https://buy.moonpay.com https://buy-sandbox.moonpay.com https://www.googletagmanager.com;  img-src 'self' https: data:;  media-src 'self' https:;  font-src 'self' data:;  object-src 'none';  base-uri 'self';  form-action 'self'    https://auth-api.openloot.com/oauth/v1/decision    https://bigtime720.activehosted.com/proc.php;  frame-ancestors 'self';  report-uri https://vault-api.openloot.com/v2/csp-report;  report-to csp-endpoint; 1
style-src-elem *.stackpath.bootstrapcdn.com *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.fontawesome.com *.yotpo.com 'self' 'unsafe-inline'; font-src *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com *.fontawesome.com *.yotpo.com *.googleapis.com data: 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net pilot-payflowlink.paypal.com *.facebook.com *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src secure.authorize.net test.authorize.net player.vimeo.com *.youtube.com https://www.google.com/recaptcha/ www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com *.google.com *.doubleclick.net *.facebook.com *.dotdigital-pages.com *.dotdigital.com https://www.googletagmanager.com secure.payu.com merch-prod.snd.payu.com *.yotpo.com 'self' 'unsafe-inline'; img-src widgets.magentocommerce.com data: www.paypalobjects.com t.paypal.com *.vimeocdn.com i.ytimg.com www.paypal.com fpdbs.paypal.com fpdbs.sandbox.paypal.com 'self' data: *.google.com *.google.bg *.facebook.com *.facebook.net *.doubleclick.net *.googletagmanager.com *.gstatic.com https://www.google.com static.payu.com *.yotpo.com data: 'self' 'unsafe-inline'; script-src secure.authorize.net test.authorize.net www.paypalobjects.com js.braintreegateway.com www.paypal.com s.ytimg.com www.googleapis.com vimeo.com www.vimeo.com *.vimeocdn.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ www.sandbox.paypal.com t.paypal.com *.google.com *.google.bg *.googletagmanager.com *.facebook.com *.facebook.net *.doubleclick.net *.google-analytics.com *.gstatic.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com s7.addthis.com *.avada.io secure.payu.com secure.snd.payu.com *.yotpo.com 'self' 'unsafe-inline' 'unsafe-eval'; style-src *.googleapis.com *.doubleclick.net *.facebook.com *.gstatic.com *.googletagmanager.com *.stackpath.bootstrapcdn.com *.fontawesome.com *.yotpo.com 'self' 'unsafe-inline' 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; media-src 'self' 'unsafe-inline'; manifest-src 'self' 'unsafe-inline'; connect-src www.sandbox.paypal.com www.paypalobjects.com www.paypal.com *.google-analytics.com *.facebook.com *.facebook.net *.google.com *.trackedlink.net *.trackedweb.net *.dotdigital-pages.com https://google.com ekr.zdassets.com/ https://get.geojs.io *.avada.io secure.payu.com merch-prod.snd.payu.com t.elasticsuite.io *.yotpo.com 'self' 'unsafe-inline'; child-src http: https: blob: 'self' 'unsafe-inline'; default-src *.googleapis.com 'self' 'unsafe-inline' 'unsafe-eval'; base-uri 'self' 'unsafe-inline'; 1
object-src  'none'; connect-src 'self' *.zerotolerancefilms.com cognito-identity.us-east-1.amazonaws.com backend.getbeamer.com *.comm100.io *.algolia.net insights.algolia.io *.algolianet.com *.gammaapis.com *.gammacdn.com analytics.google.com *.google-analytics.com adservice.google.com *.analytics.google.com *.doubleclick.net *.pubnub.com *.lovense.com *.handyfeeling.com www.gammaentertainment.com *.tiypa.com *.recombee.us dasasoveekepl.cloudfront.net capture.trackjs.com ws: jlduihq7lrcdxgw4vrndhdfcsq.appsync-api.us-east-1.amazonaws.com tcs4u525zrg5hnnoe5kzndxuaq.appsync-api.us-east-1.amazonaws.com 2aed6ghjsb4436qtebuqk3gfzq0xeauy.lambda-url.us-east-1.on.aws lzzos7clo5.execute-api.us-east-1.amazonaws.com *.izooto.com www.idealgasm.com 3tt0xhv5u7.execute-api.us-east-1.amazonaws.com; form-action 'self' *.zerotolerancefilms.com join.gammasecure.com; script-src 'self' *.zerotolerancefilms.com app.getbeamer.com static.getbeamer.com blob: vue.comm100.com standby.comm100vue.com *.gammacdn.com www.google-analytics.com www.googletagmanager.com www.gstatic.com www.google.com code.jquery.com d3a3ewgd1iewwz.cloudfront.net cdn.izooto.com 'unsafe-eval' 'unsafe-inline'; frame-src 'self' *.zerotolerancefilms.com push.getbeamer.com app.getbeamer.com www.google.com *.doubleclick.net cdn.izooto.com *.banhq.com; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub787d5a6164b329b26f2e4f7956bbed10&dd-evp-origin=content-security-policy&ddsource=csp-prod&ddtags=CSP-Prod; 1
default-src 'self'; script-src 'self' 'nonce-gnn8TkY8gHucgn6bNTkcLJGMInM4gpQLOiobIcoKV3k'; style-src 'self' 'nonce-gnn8TkY8gHucgn6bNTkcLJGMInM4gpQLOiobIcoKV3k'; img-src 'self' data:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; report-uri /+cspreport/log 1
default-src 'self'; script-src 'self' https://support.checkmk.com https://cdn.jsdelivr.net; style-src 'self'; img-src 'self'; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self' https://saas-auth.checkmk.pro https://saas-auth.checkmk.click https://saas-auth.checkmk.cloud; frame-ancestors 'none'; upgrade-insecure-requests; frame-src 'self' https://support.checkmk.com; connect-src 'self'; report-uri /api/csp-report; report-to csp-endpoint 1
default-src 'self'; script-src 'nonce-MaNL34MA2UqSDmZz1MsEgA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-zyKGvfOUoq9O789dtv47LA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-DlsCEjmIk82/yahPCkvWcQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-Rgyqm5HptST293rSZJfSLA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self' https: data: blob:; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; img-src 'self' https: data: blob:; font-src 'self' https: data:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; connect-src 'self' https:; report-uri https://YOUR-REPORT-ENDPOINT.example/csp; report-to csp-endpoint 1
object-src 'none';base-uri 'self';script-src 'nonce-bHaSFm3YzH5aGPlT4DMcjg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
object-src 'none';base-uri 'self';script-src 'nonce-Ao8VuUNFtc81QBflMMbd-Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://checkout.razorpay.com https://eu.i.posthog.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https: https://api.autoremov.com; connect-src 'self' https://api.autoremov.com https://eu.i.posthog.com https://*.razorpay.com; frame-src https://*.razorpay.com; font-src 'self' data:; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none' 1
object-src 'none';base-uri 'self';script-src 'nonce-eX5HLG19xXSWEA1VO9ocvg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; img-src 'self' data: https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; frame-src 'self' https:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self'; 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://challenges.cloudflare.com https://cdn.jsdelivr.net https://www.clarity.ms https://*.clarity.ms https://*.lovable.dev https://*.lovable.app; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' https: wss:; frame-src 'self' https://challenges.cloudflare.com https://js.stripe.com https://checkout.stripe.com https://td.doubleclick.net https://www.googletagmanager.com; form-action 'self' https://checkout.stripe.com; worker-src 'self' blob:; manifest-src 'self' 1
default-src 'self'; script-src 'nonce-H8Nxev4vR7CYPwx8UvdBHw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; base-uri 'self'; object-src 'none';  script-src 'self' 'unsafe-inline' 'report-sample'   https://js-na1.hs-scripts.com   https://js.hs-analytics.net   https://js.hs-banner.com   https://js.stripe.com   https://js.usemessages.com   https://www.google.com   https://www.gstatic.com   https://www.googletagmanager.com;  style-src 'self' 'unsafe-inline' 'report-sample'   https://fonts.googleapis.com;  font-src 'self' https://fonts.gstatic.com data:;  img-src 'self' data:   https://track.hubspot.com   https://www.google-analytics.com   https://stats.g.doubleclick.net;  connect-src 'self'   https://api.hubspot.com   https://www.google-analytics.com   https://region1.google-analytics.com   https://www.googletagmanager.com   https://stats.g.doubleclick.net;  frame-src 'self'   https://js.stripe.com   https://hooks.stripe.com   https://www.google.com;  manifest-src 'self'; worker-src 'none';  report-uri https://694a0c8b4b6f48045615ce5d.endpoint.csper.io?builder=true&v=3; 1
default-src 'self'; script-src 'nonce-7DOt5aK3UH5hs1r1DI3GhA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
object-src 'self' *.expertxp.com.br; worker-src 'self' blob:; script-src 'self' blob: 'unsafe-inline' *.ampproject.org *.datatables.net *.googlesyndication.com *.newrelic.com *.yoast.com *.vimeocdn.com *.pinterest.com *.wp.com public-api.wordpress.com widgets.wp.com *.expertxp.com.br *.appsflyer.com *.jquery.com *.fontawesome.com *.youtube.com *.bootstrapcdn.com cdnjs.cloudflare.com *.clarity.ms nebula-cdn.kampyle.com *.googleoptimize.com *.pushpushgo.com *.googletagmanager.com *.googleadservices.com *.doubleclick.net bat.bing.com *.google-analytics.com static.ads-twitter.com s.pinimg.com s.go-mpulse.net snap.licdn.com analytics.tiktok.com connect.facebook.net cdn.segment.com  a.omappapi.com clearbr.api.useinsider.com; style-src 'self' 'unsafe-inline' *.ampproject.org *.datatables.net *.bootstrapcdn.com *.fontawesome.com *.googleapis.com *.wp.com; frame-src 'self' *.googletagmanager.com *.kampyle.com wordpress.com *.expertxp.com.br *.doubleclick.net ct.pinterest.com clearbr.api.useinsider.com *.youtube.com *.vimeo.com widgets.wp.com; img-src 'self' https: data:; base-uri 'self'; frame-ancestors *.expertxp.com.br *.doubleclick.net ct.pinterest.com clearbr.api.useinsider.com *.youtube.com *.vimeo.com widgets.wp.com *.kampyle.com;  form-action 'self'; 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://connect.facebook.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://*.google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://www.facebook.com https://connect.facebook.net; frame-ancestors 'self'; 1
object-src 'none';base-uri 'self';script-src 'nonce-Bw221fXGT3TaePB2bxZwnQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; img-src 'self' data: blob: https:; media-src 'self' blob: https:; connect-src 'self' https: wss: ws:; style-src 'self' 'unsafe-inline' https:; script-src 'self' 'unsafe-inline' https:; frame-src 'self' https:; object-src 'none'; base-uri 'self'; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-GZ-LzspEmOQxCAip6IihSA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'nonce-+H6xBh9NBxfTg/2VbXS7fQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-GmeZ7gxs90DOyoj0VEfvnA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
object-src 'none';base-uri 'self';script-src 'nonce-XC8S_XTeFbFUQNlia3dk0g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'nonce-LdgzCt5kc+SM0rKGCJ0VaA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-26xxYOwkcwG0z4d9ZiC94g==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://checkout.razorpay.com https://cdnjs.cloudflare.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data: https:; connect-src 'self' https://api.razorpay.com https://jobvisitors.com; frame-src https://api.razorpay.com https://checkout.razorpay.com 1
default-src 'self'; script-src 'nonce-Ewb/nk/Kb1ABwsV6V6iD+A==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-GrT8CaZlz5O0ntg7xiXNAQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https://0096423.xyz https:; font-src 'self' data: https:; connect-src 'self' https:; frame-src https:; base-uri 'self'; form-action 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://apis.google.com https://www.gstatic.com https://connect.facebook.net https://static.cloudflareinsights.com https://challenges.cloudflare.com https://analytics.ahrefs.com https://maps.googleapis.com https://eu.i.posthog.com https://eu-assets.i.posthog.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://analytics.google.com https://region1.google-analytics.com https://www.googletagmanager.com https://connect.facebook.net https://www.facebook.com https://graph.facebook.com https://maps.googleapis.com https://analytics.ahrefs.com https://*.przelewy24.pl https://*.apaczka.pl https://cdn.matmat.com.pl https://cloudflareinsights.com https://static.cloudflareinsights.com https://challenges.cloudflare.com https://apis.google.com https://www.google.com https://www.gstatic.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://stats.g.doubleclick.net https://eu.i.posthog.com https://eu-assets.i.posthog.com; frame-src 'self' https://challenges.cloudflare.com https://*.przelewy24.pl https://www.facebook.com https://td.doubleclick.net https://bid.g.doubleclick.net https://www.google.com https://apis.google.com; frame-ancestors 'self'; form-action 'self' https://*.przelewy24.pl; base-uri 'self'; object-src 'none'; worker-src 'self' blob: 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://va.vercel-scripts.com https://*.googletagmanager.com https://*.google-analytics.com https://r.wdfl.co; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob: https: https://*.oaiusercontent.com https://oaidalleapiprodscus.blob.core.windows.net; font-src 'self' data:; connect-src 'self' https://va.vercel-scripts.com https://*.google-analytics.com https://*.googletagmanager.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://www.google.fr https://www.google.de https://www.google.co.uk https://www.google.es https://www.google.it https://www.google.ca https://www.google.com.au https://www.google.com.br https://www.google.co.in https://api.openai.com https://api.anthropic.com https://generativelanguage.googleapis.com https://api.deepseek.com https://r.wdfl.co https://api.getrewardful.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self'; object-src 'none'; report-uri /api/csp-report; report-to csp 1
default-src 'self';script-src 'self' https://cdn.jsdelivr.net https://analytics.noveopartidos.xyz https://commendtwisted.com https://storage.ko-fi.com https://www.googletagmanager.com 'unsafe-inline' 'unsafe-eval';style-src 'self' https://fonts.googleapis.com 'unsafe-inline';font-src 'self' https://fonts.gstatic.com https://fonts.googleapis.com;connect-src 'self' https://analytics.noveopartidos.xyz https://commendtwisted.com wss://noveopartidos.xyz;frame-src 'self' https://stream-xhd.com https://streamx-hd.com https://latamplay1.click https://ko-fi.com https://commendtwisted.com;img-src 'self' https://analytics.noveopartidos.xyz data:;worker-src 'self' https://cdn.jsdelivr.net;media-src 'self';object-src 'none';base-uri 'self';form-action 'self';frame-ancestors 'none' 1
default-src 'self'; script-src 'nonce-1V0kCBl9tCmdUlG1Qwwtew==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-IMPTGrCfbuC9aq7+Lnx7qg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-t1otEtSHu35SJ6lMp7Jtlw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-iywJ3O5q48+mDIol7M44Gg==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-YlsSFzx6rgpPqinxr1/6WQ==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'nonce-zu6v9K9H/5mZiCCFosmXHA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com; font-src 'self' data: https://fonts.gstatic.com https://cdnjs.cloudflare.com; img-src 'self' data: blob: https:; connect-src 'self' wss://plaayinexch.com https://plaayinexch.com https://api.plaayinexch.com wss://*.pusher.com https://*.pusher.com https://sockjs-ap2.pusher.com https://www.google-analytics.com https://region1.google-analytics.com https://www.googletagmanager.com https://restapi.entitysport.com https://ifsc.razorpay.com; frame-src 'self' https:; frame-ancestors 'self'; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self'; script-src 'self' https://pagead2.googlesyndication.com https://googleads.g.doubleclick.net https://tpc.googlesyndication.com https://adservice.google.com https://adservice.google.nl https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://challenges.cloudflare.com; report-uri https://www.pouleking.nl/api/csp-report 1
default-src 'self'; script-src 'nonce-TkC5ZY/lvkzj5DKo7Px1yw==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
object-src 'none';base-uri 'self';script-src 'nonce-V_4t5Oca7vDxk8Z_cB4WIw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; script-src 'self' 'unsafe-inline' https://*.googletagmanager.com https://accounts.google.com https://www.google.com https://www.gstatic.com https://*.apple.com https://*.cdn-apple.com https://s.yimg.jp https://yubinbango.github.io; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: blob: https:; font-src 'self' data: https://fonts.gstatic.com; media-src 'self' blob:; manifest-src 'self'; worker-src 'self'; connect-src 'self' https://accounts.google.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://www.google.com; frame-src https://*.googletagmanager.com https://www.google.com https://*.apple.com https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com; form-action 'self' https://appleid.apple.com https://login.yahoo.co.jp https://accounts.google.com; report-uri /csp_violation_report 1
object-src 'none';base-uri 'self';script-src 'nonce-4LVLNu8cEWJ5DaOGc6bhiQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'nonce-2hNeBR0igrKe4EeF/IDeUA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net https://securepubads.g.doubleclick.net https://www.googletagservices.com https://pagead2.googlesyndication.com https://www.googletagmanager.com; style-src 'self' 'unsafe-inline' https://cdn.jsdelivr.net; img-src 'self' data: https:; font-src 'self' https://cdn.jsdelivr.net data:; frame-src https:; connect-src 'self' https:; object-src 'none'; base-uri 'self'; form-action 'self' 1
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: https: blob:; font-src 'self' data:; connect-src 'self' https:; media-src 'self' https: blob:; frame-src 'self' blob:; frame-ancestors 'none'; base-uri 'self'; form-action 'self' https:; object-src 'none'; worker-src 'self' blob:; upgrade-insecure-requests 1
default-src 'self'; script-src 'nonce-vu1ssKVfQ5WCMDf3+mmTow==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline' https://unpkg.com https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com https://unpkg.com data:; img-src 'self' data: https: http:; connect-src 'self'; frame-src https://www.youtube.com https://youtube.com https://player.vimeo.com https://vimeo.com; object-src 'none'; base-uri 'self'; form-action 'self'; 1
default-src 'self'; script-src 'nonce-K+Xvz5rJ52JFuj6q5aqaGA==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'unsafe-inline' https://sdk.mercadopago.com https://http2.mlstatic.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.googleadservices.com https://www.google.com https://connect.facebook.net https://www.facebook.com https://analytics.tiktok.com https://www.clarity.ms https://*.clarity.ms; connect-src 'self' https://api.mercadopago.com https://*.mercadopago.com https://http2.mlstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.google-analytics.com https://*.analytics.google.com https://stats.g.doubleclick.net https://www.google.com https://*.facebook.com https://*.tiktok.com https://*.clarity.ms https://commerce-api-production-3ab6.up.railway.app; frame-src https://*.mercadopago.com https://*.mercadolibre.com https://www.googletagmanager.com https://td.doubleclick.net; img-src 'self' data: https:; style-src 'self' 'unsafe-inline'; worker-src 'self' blob:; base-uri 'self'; object-src 'none'; frame-ancestors 'self' 1
object-src 'none';base-uri 'self';script-src 'nonce-ZiXVtYgN1yZYwYIgY2nOmg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1
default-src 'self'; script-src 'nonce-BEoSVBRKEbccBji3ZnZj/w==' 'strict-dynamic' 'unsafe-eval' https: 'unsafe-inline'; script-src-attr 'unsafe-inline'; style-src 'self' 'unsafe-inline' https:; font-src 'self' data: https:; img-src 'self' data: blob: https:; media-src 'self' data: blob: https:; connect-src 'self' wss: https:; frame-src 'self' https:; worker-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; report-uri /Handlers/CSPHandler.ashx 1
default-src 'self'; script-src 'self' 'unsafe-inline' data: https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://connect.facebook.net https://www.google.com https://www.gstatic.com https://backend.leadconnectorhq.com https://msgsndr.com https://snap.licdn.com; connect-src 'self' https://api.easylinks.ca https://www.google-analytics.com https://region1.google-analytics.com https://analytics.google.com https://stats.g.doubleclick.net https://www.facebook.com https://backend.leadconnectorhq.com https://msgsndr.com; img-src 'self' data: https://www.google-analytics.com https://www.googletagmanager.com https://www.facebook.com https://secure.gravatar.com https://seal-mwco.bbb.org https://px.ads.linkedin.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; frame-src 'self' https://www.googletagmanager.com https://seal-mwco.bbb.org https://www.google.com https://td.doubleclick.net 1
object-src 'none';base-uri 'self';script-src 'nonce-0plwcyBA1QCHjwLpj2R-fQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp 1